From 543dbe1f45e4f742cfa1d593c763511beb03fb57 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Thu, 1 Oct 2026 19:50:13 -0400
Subject: [PATCH 001/164] Specify request signing and key directories as Web
 Bot Auth

FORA's design goal is that every participant signs and verifies requests
according to Web Bot Auth, so any WBA library interoperates. The
authentication page claimed FORA was "automatically compatible" with
WebBotAuth while mandating a profile no WBA library produces or accepts,
and the transaction-flow and Exchange request-flow pages listed a third,
contradictory covered set.

The docs now specify one profile, pinned to
draft-ietf-webbotauth-httpsig-protocol-00:

- every request signature is a WG-00 signature: a dictionary
  Signature-Agent naming an https origin and covered by member,
  tag="web-bot-auth", a fresh 64-byte nonce, alg="ed25519";
- bodied FORA RPCs additionally cover @method, @target-uri,
  content-digest and authorization, advertised through Accept-Signature;
- relay hops follow WG-00 section 5.2.2;
- the retrieval proof of possession is a WG-00 signature that the edge
  still verifies offline against the key bound into the delivery URL;
- key directories are served over https as
  application/http-message-signatures-directory+json, with a signed
  response;
- the bare Signature-Agent value the current SDKs send is refused.

JWK alg stays "EdDSA", the JOSE name RFC 7517 section 4.4 defines, which
departs from WG-00 section 5.5.1; the authentication page records it as
the one deliberate deviation. The SDKs and conformance vectors do not
implement this profile yet; the changelog entry lists the change as
upcoming.
---
 proto/CHANGELOG.md                            |  76 +++++
 .../docs/components/broker/overview.mdx       |  31 +-
 .../edge-function/signed-url-verification.mdx |  26 +-
 .../docs/components/exchange/multi-tenant.mdx |   2 +-
 .../components/exchange/request-flows.mdx     |  28 +-
 .../docs/components/identity/overview.mdx     |   8 +-
 .../for-exchange-operators.mdx                |   6 +-
 .../getting-started/publisher-onboarding.mdx  |   2 +-
 .../content/docs/protocol/authentication.mdx  | 310 +++++++++++++-----
 .../docs/protocol/content-attestation.mdx     |   2 +-
 .../docs/protocol/exchange-manifest.mdx       |   4 +-
 .../docs/protocol/scenario-walkthrough.mdx    |  28 +-
 .../docs/protocol/standards-layering.mdx      |   6 +-
 .../docs/protocol/transaction-flow.mdx        |   6 +-
 .../content/docs/protocol/walkthrough-v1.mdx  |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  76 +++++
 .../docs/reference/fora-json-example.mdx      |   4 +-
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 website/src/data/standards.mjs                |   4 +
 19 files changed, 466 insertions(+), 157 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 33e8d45d..f4a2b498 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -1,5 +1,81 @@
 # FORA Protocol Changelog
 
+## Unreleased
+
+**The documentation now specifies a Web Bot Auth profile for request signatures
+(docs only in this entry; the SDK and wire changes follow).** The Authentication
+page said FORA was "automatically compatible" with Web Bot Auth and that "no
+changes to FORA's authentication are required". That was not true. A Web Bot Auth
+verifier refuses a FORA signature, and a FORA verifier refuses a signature from a
+Web Bot Auth library. The pages also disagreed with each other: Transaction Flow
+and the Exchange request flows said each hop covers `@method`, `@authority`,
+`@path` and `Content-Digest`, while Authentication required `@method`,
+`@target-uri`, `content-digest`, `authorization` and `signature-agent`.
+
+The target is draft-ietf-webbotauth-httpsig-protocol-00 (1 September 2026), the
+only document the IETF webbotauth working group has adopted. Authentication now
+specifies the profile in one place, and the other pages refer to it:
+
+- Every FORA request signature is a conformant Web Bot Auth signature.
+  `Signature-Agent` is a structured-field dictionary, `<label>="https://<origin>"`,
+  covered as `"signature-agent";key="<label>"`. The signature covers `@target-uri`
+  or `@authority`, and carries `created`, `expires`, `keyid` (the RFC 7638
+  thumbprint), `alg="ed25519"`, `tag="web-bot-auth"` and a fresh 64-byte `nonce`.
+  Its lifetime is a few minutes.
+- A FORA RPC signature also covers `@method`, `@target-uri`, `content-digest` and
+  `authorization`. This is FORA policy on top of Web Bot Auth, advertised through
+  `Accept-Signature`. A bodiless request at the publisher edge needs only the Web
+  Bot Auth base.
+- Signers use a `Signature-Agent` member key equal to the signature label.
+  Verifiers also accept a member key that differs from the label, a signature
+  without a nonce, and a member with `type=directory`. The legacy sf-string
+  `Signature-Agent` is accepted on a direct single-hop call only: a relay
+  refuses it, because it cannot add its own member without breaking the agent's
+  signature, and answers with `Accept-Signature` asking for the dictionary form.
+  Verifiers refuse a signature with no `tag`, and a `Signature-Agent` member that
+  is not an https origin, and answer a missing component with `Accept-Signature`
+  listing what they require. `Signature-Agent` is never empty; an empty
+  `Authorization` stays valid.
+- Each forwarding hop adds its own `Signature-Agent` member and a signature that
+  covers the request components, its own member, and the previous hop's
+  `Signature` together with its `Signature-Input` member and every component it
+  lists, as WG-00 §5.2.2 requires. Some WBA libraries, for example Cloudflare's
+  `web-bot-auth` 0.2.0, refuse a signature that covers more than one
+  `Signature-Agent` member; that affects only the hop signature, which the
+  Exchange verifies, while the agent's own signature passes them on every hop.
+  The Exchange resolves each hop's key in the directory that hop names, not in a
+  configured key set.
+- The retrieval proof of possession at the publisher edge is a full Web Bot Auth
+  signature plus `@method` and `@target-uri`. The edge keeps verifying offline
+  with the key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint
+  equals both the signature `keyid` and the delivery URL's `agent_id`. A generic
+  WBA verifier accepts the same signature by resolving the agent's directory.
+- Key directories are served over https at
+  `/.well-known/http-message-signatures-directory`, answer `200` without a
+  redirect, use the media type
+  `application/http-message-signatures-directory+json`, and carry a response
+  signature per key with `tag="http-message-signatures-directory"`. Each key's
+  JWK `alg` stays `EdDSA`, the JOSE name RFC 7517 §4.4 defines. This is a known,
+  deliberate deviation from WG-00 §5.5.1, which restricts that member to HTTP
+  Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
+  reference library. It is the only deviation from WG-00.
+
+Authentication includes a complete signed request, the same request after a
+Broker hop, and a signed directory response, all with real values that can be
+verified.
+
+**Upcoming profile change (not in this release).** The SDKs released as v1.0.8
+do not implement the profile. They send `Signature-Agent` as a bare URL, set no
+`tag`, use a 16-byte nonce, require all five FORA components on every signature,
+require the labels `sig1` to `sigN`, follow directory redirects, resolve a
+forwarding hop's key from a configured key set, and sign the retrieval proof of
+possession over `@method` and `@target-uri` only. The reference directories are
+served as `application/jwk-set+json`. The SDK signers, verifiers, directory
+resolvers and shared test vectors change in a coordinated release, together with
+the reference implementation. The change is a hard cut with no transition
+window: once it ships, verifiers refuse the bare unquoted `Signature-Agent` that
+v1.0.8 sends, so v1.0.8 clients must upgrade.
+
 ## v1.0.8
 
 **Request signatures carry an RFC 9421 `nonce` (SDK fix; no wire change for
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index c6b05181..4fbaf618 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -141,29 +141,34 @@ FORA uses a two-layer signing model: the **agent's request signature** proves wh
 
 ### Request Authentication
 
-The `Requester` message carries identity and entitlements only (`id`, `domain`, `type`, `scopes`, optional `delegation`) — it has **no** signature field. The request is authenticated by an RFC 9421 HTTP Message Signature (alg=ed25519) computed over the whole HTTP request and carried in the headers. The Exchange verifies it against the public key published in the signer's WBA directory at `{domain}/.well-known/http-message-signatures-directory`, with the domain resolved from the covered `Signature-Agent` header.
+The `Requester` message carries identity and entitlements only (`id`, `domain`, `type`, `scopes`, optional `delegation`) — it has **no** signature field. The request is authenticated by an RFC 9421 HTTP Message Signature (alg=ed25519) carried in the headers and made to the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile). The Exchange verifies it against the public key published in the signer's key directory at `{origin}/.well-known/http-message-signatures-directory`, with the origin taken from the `Signature-Agent` member the signature covers.
 
 The Broker passes `Requester` through unchanged -- it never modifies the requester's identity, scopes, or delegation -- and adds its own forwarding signature in the headers (see below).
 
 ### Forwarding Signature Stack (RFC 9421)
 
-Multi-hop forwarding is carried entirely in the HTTP headers, not in the message body. Each forwarding party adds one labeled RFC 9421 HTTP Message Signature covering the request **and the prior hop's signature**. The ordered set of these labeled signatures *is* the forwarding chain -- there is no `intermediaries` field on `ResourceQuery`.
+Multi-hop forwarding is carried entirely in the HTTP headers, not in the message body. Each forwarding party adds one labeled RFC 9421 HTTP Message Signature, itself a Web Bot Auth signature, covering the request **and the prior hop's signature**. The ordered set of these labeled signatures *is* the forwarding chain -- there is no `intermediaries` field on `ResourceQuery`. The covered components and verification steps are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 Each labeled signature, via its RFC 9421 signature parameters, effectively records:
 
-- **`keyid`** -- the intermediary's RFC 7638 thumbprint, resolved against its canonical domain (for public key lookup)
+- **`keyid`** -- the intermediary's RFC 7638 thumbprint, resolved in the key directory that the intermediary's own `Signature-Agent` member names
 - **`created`** -- timestamp of when the intermediary forwarded the request
-- the covered components -- the request plus the preceding hop's `Signature` value, chaining the hops together
+- the covered components -- the request components FORA requires, the intermediary's own `Signature-Agent` member, and the preceding hop's `Signature` together with its `Signature-Input` member and every component it lists (WG-00 §5.2.2), chaining the hops together
 
 When the agent queries an Exchange directly, there are no forwarding signatures. When the request passes through a Broker, the Broker adds one labeled signature to the stack.
 
 ```go
 // Broker adds one labeled RFC 9421 signature to the outgoing request headers when forwarding.
-func (o *Broker) signHop(req *http.Request, priorSig string) {
-    // Covers the request line/headers AND the prior hop's Signature value,
-    // chaining this hop to the one before it.
-    label := o.domain // e.g., "broker.example.com"
-    sigInput, sig := o.rfc9421Sign(req, priorSig, label) // Ed25519, keyid=o.thumbprint, created=now
+func (o *Broker) signHop(req *http.Request, prevLabel string) {
+    label := "broker"
+    // Append this hop's own Signature-Agent member; the earlier members stay
+    // byte-for-byte as they arrived, because earlier signatures cover them.
+    req.Header.Set("Signature-Agent",
+        req.Header.Get("Signature-Agent")+`, broker="https://`+o.domain+`"`)
+    // Covers the request components, this hop's own member, and the previous
+    // hop's Signature, its Signature-Input member and every component it
+    // lists (WG-00 §5.2.2), chaining this hop to the one before it.
+    sigInput, sig := o.rfc9421Sign(req, prevLabel, label) // Ed25519, keyid=o.thumbprint, tag="web-bot-auth"
     req.Header.Add("Signature-Input", sigInput)
     req.Header.Add("Signature", sig)
 }
@@ -173,12 +178,12 @@ func (o *Broker) signHop(req *http.Request, priorSig string) {
 
 The Exchange verifies both layers:
 
-1. **Requester signature** -- verified against the public key in the agent's WBA directory at `{domain}/.well-known/http-message-signatures-directory` (domain from the covered `Signature-Agent` header, key selected by the `keyid` thumbprint)
-2. **The forwarding signature stack** -- each labeled RFC 9421 signature is verified against the key its `keyid` thumbprint selects from the key set the Exchange is configured with (`Signature-Agent` stays the agent's directory, so a Broker's key is not discovered through it), and the chained coverage is checked hop-by-hop.
+1. **Requester signature** -- verified against the public key in the agent's key directory at `{origin}/.well-known/http-message-signatures-directory` (origin from the agent's `Signature-Agent` member, key selected by the `keyid` thumbprint)
+2. **The forwarding signature stack** -- each labeled RFC 9421 signature is verified against the key its `keyid` thumbprint selects in the directory named by that hop's own `Signature-Agent` member, and the chained coverage is checked hop-by-hop.
 
 All signatures must pass. The Exchange counts the number of forwarding hops in the stack against `max_hops` / `max_intermediary_hops` and rejects requests that exceed the limit.
 
-The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). An Exchange verifies the Broker's signatures against keys it has loaded from that directory into its configured key set. The covered `Signature-Agent` header stays the agent's directory and does not point at the Broker's, so the Exchange must know the Broker — for example, through registration — before it can verify the hop.
+The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). The Broker names that directory in its own `Signature-Agent` member on every request it forwards, so an Exchange resolves the Broker's key the same way it resolves any signer's. Whether the Exchange accepts the Broker as a forwarding hop is a separate decision, and it is the Exchange's own policy: it may, for example, require the Broker to be registered with it.
 
 ## Profile-Based Routing
 
@@ -371,7 +376,7 @@ sequenceDiagram
 | **Same protocol, transparent proxy** | The Exchange cannot distinguish Broker-mediated requests from direct agent requests. No special Exchange support needed. |
 | **Signed offer pass-through** | Exchange signatures cover pricing fields. The Broker cannot inflate prices without invalidating the signature. |
 | **Advisory budget enforcement** | The Broker pre-filters transactions by budget, but the Exchange is the authoritative enforcement point. No overspend occurs because the Exchange is the gatekeeper. |
-| **Ed25519 + forwarding signature stack** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature (covering `@method`/`@target-uri`/`content-digest`); Broker adds one labeled RFC 9421 HTTP Message Signature (covering the request plus the prior hop's signature) to the header stack. Exchange verifies both layers and counts hops against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
+| **Ed25519 + forwarding signature stack** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature that follows the Web Bot Auth profile (covering `@method`/`@target-uri`/`content-digest`/`authorization` and its `Signature-Agent` member); Broker adds one labeled RFC 9421 HTTP Message Signature (covering the request plus the prior hop's signature) to the header stack. Exchange verifies both layers and counts hops against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
 | **Partial results are normal** | If 3 of 5 Exchanges respond within the deadline, the Broker proceeds with 3 responses. Availability of any individual Exchange does not block the system. |
 
 ## Go Module Structure
diff --git a/website/src/content/docs/components/edge-function/signed-url-verification.mdx b/website/src/content/docs/components/edge-function/signed-url-verification.mdx
index 981d17f3..872bfe2b 100644
--- a/website/src/content/docs/components/edge-function/signed-url-verification.mdx
+++ b/website/src/content/docs/components/edge-function/signed-url-verification.mdx
@@ -137,16 +137,18 @@ An agent registered through a custodial registry does **not** fetch. Its private
 ### What the fetcher presents
 
 1. Its **public key**, in the `X-FORA-Agent-Key` header — raw Ed25519 key, base64url with no padding. The choice of carrier is security-irrelevant, because the thumbprint is locked by the URL signature.
-2. An **RFC 9421 HTTP Message Signature** over the retrieval request, covering exactly `@method` and `@target-uri`.
-
-The signature parameters are a wire contract, in this order:
+2. A **Web Bot Auth signature** over the retrieval request: a full signature under FORA's [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile), with `tag="web-bot-auth"`, a dictionary `Signature-Agent` naming the fetcher's directory, the covered `"signature-agent";key="<label>"` member and a 64-byte nonce, plus `@method` and `@target-uri`. The request has no body, so there is no `content-digest`.
 
 ```
-Signature-Input: sig1=("@method" "@target-uri");keyid=...;alg="ed25519";created=...;expires=...
+X-FORA-Agent-Key: <raw Ed25519 public key, base64url>
+Signature-Agent: sig1="https://research.acme.com"
+Signature-Input: sig1=("@method" "@target-uri" "signature-agent";key="sig1");created=...;expires=...;keyid="<thumbprint>";alg="ed25519";nonce="<64 bytes, base64url>";tag="web-bot-auth"
 Signature: sig1=:<standard base64>:
 ```
 
-Two details a verifier will not forgive. The order `keyid;alg;created;expires` is fixed — a generic RFC 9421 emitter produces a different order and its signature base will not match. And `Signature` uses **standard** base64, while the URL's `sig` uses base64url without padding; the two encodings are not interchangeable.
+The edge rebuilds the signature base from the `Signature-Input` it received, so the parameter order is the signer's choice and any WBA library can produce the proof. `Signature` uses **standard** base64, while the URL's `sig` uses base64url without padding; the two encodings are not interchangeable.
+
+The same signature verifies without `X-FORA-Agent-Key`. A generic WBA verifier ignores that header, resolves the fetcher's key from the directory its `Signature-Agent` member names, and accepts the signature. The header exists so the edge can verify offline.
 
 `@target-uri` is signed as the URL string **verbatim**. Routing it through a parsed URL decodes percent-escapes, and `%2F` then becomes a real separator — producing a proof that cannot verify and a 403 that says nothing about the URL having been the cause.
 
@@ -154,10 +156,10 @@ Two details a verifier will not forgive. The order `keyid;alg;created;expires` i
 
 1. Verify the URL's Ed25519 signature against the Exchange's published public key. This proves `agent_id` is Exchange-issued and untampered.
 2. Check `exp`, local clock only.
-3. `thumbprint(presented public key) == agent_id`.
-4. Verify the RFC 9421 signature with the presented key, and reject a `created` more than 300 seconds ahead of the edge's own clock.
+3. `thumbprint(presented public key)` equals both `agent_id` and the signature's `keyid`.
+4. Verify the signature with the presented key against the Web Bot Auth profile (`tag`, the covered `Signature-Agent` member, `@method` and `@target-uri`), and reject a `created` more than 300 seconds ahead of the edge's own clock.
 
-All four pass, and the request is served. No key fetch is required for the agent: the Exchange already authenticated that key at transaction time and froze its thumbprint into a signature the edge can verify locally.
+All four pass, and the request is served. No directory fetch is required for the agent: the Exchange already authenticated that key at transaction time and froze its thumbprint into a signature the edge can verify locally.
 
 ```mermaid
 sequenceDiagram
@@ -169,8 +171,8 @@ sequenceDiagram
     Note over MP: T = RFC 7638 thumbprint(agent key)<br/>embed T as agent_id, Ed25519-sign the whole URL
     MP-->>Agent: retrieval_endpoint (?agent_id=T&kid=...&sig=...)<br/>+ agent_identity_hash = T
 
-    Agent->>Edge: GET retrieval_endpoint<br/>X-FORA-Agent-Key + Signature-Input + Signature
-    Note over Edge: 1. Ed25519-verify the URL (T untampered)<br/>2. Check exp<br/>3. thumbprint(presented key) == T<br/>4. Verify the RFC 9421 proof
+    Agent->>Edge: GET retrieval_endpoint<br/>X-FORA-Agent-Key + Signature-Agent + Signature-Input + Signature
+    Note over Edge: 1. Ed25519-verify the URL (T untampered)<br/>2. Check exp<br/>3. thumbprint(presented key) == T == keyid<br/>4. Verify the Web Bot Auth proof
     alt All four pass
         Edge-->>Agent: 200 OK + content
     else Any check fails
@@ -184,7 +186,7 @@ sequenceDiagram
 |---|---|
 | present their own key + sign with their own private key | step 3 — `thumbprint(their key) ≠ agent_id` |
 | rewrite `agent_id` to match their own key | step 1 — they cannot forge the Exchange's Ed25519 signature |
-| present the agent's public key (it is public) | step 4 — they cannot produce the RFC 9421 signature |
+| present the agent's public key (it is public) | step 4 — they cannot produce the request signature |
 
 Refusals from the proof-of-possession check: `missing_agent_key`, `bad_agent_key`, `missing_sig`, `malformed_sig_input`, `unsupported_alg`, `bad_covered_components`, `keyid_mismatch`, `thumbprint_mismatch`, `pop_missing_created`, `pop_future_created`, `pop_missing_exp`, `pop_expired`, `pop_sig_invalid`.
 
@@ -197,7 +199,7 @@ Refusals from the proof-of-possession check: `missing_agent_key`, `bad_agent_key
 
 On a capable edge the check is on unless it is explicitly turned off: the configuration value must be the literal string `false` to disable it, and any other value — including an absent one — enforces. Turning it off is a downgrade to bearer security, and it is the reason the method gate above exists.
 
-Because the RFC 9421 signature covers `@method` and `@target-uri`, a captured fetch signature cannot be replayed against a different URL, or outside its short window.
+Because the signature covers `@method` and `@target-uri`, a captured fetch signature cannot be replayed against a different URL, or outside its short window.
 
 ## Key Distribution
 
diff --git a/website/src/content/docs/components/exchange/multi-tenant.mdx b/website/src/content/docs/components/exchange/multi-tenant.mdx
index a0db0486..6eb12887 100644
--- a/website/src/content/docs/components/exchange/multi-tenant.mdx
+++ b/website/src/content/docs/components/exchange/multi-tenant.mdx
@@ -190,7 +190,7 @@ Since the default offer signature algorithm is Ed25519, these are **public keys*
 **WBA directory entries (the Exchange's `keys`):**
 ```json
 // GET /.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
+// Content-Type: application/http-message-signatures-directory+json
 {
   "keys": [
     {
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 8100fb17..d47c72b7 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -69,12 +69,11 @@ func (h *ExchangeHandler) DiscoverResources(
 
     // 2. Requester identity. Verification already happened at the HTTP seam:
     //    the SDK's verify middleware checked every RFC 9421 signature — the
-    //    requester's and the whole forwarding chain (each labeled signature
-    //    covers the request essentials plus the previous hop's signature, so
-    //    the ordered header stack IS the chain) — resolving the requester's
-    //    key by its signed keyid (an RFC 7638 thumbprint) in the WBA directory
-    //    named by the COVERED `Signature-Agent` header. The self-asserted
-    //    Requester.domain field never drives key lookup.
+    //    requester's and the whole forwarding chain (the chain rules are in
+    //    Authentication > Multi-hop forwarding) — resolving each signer's key
+    //    by its signed keyid (an RFC 7638 thumbprint) in the key directory
+    //    named by the `Signature-Agent` member that signature covers. The
+    //    self-asserted Requester.domain field never drives key lookup.
     //    The handler consumes the proof from the context; it never re-fetches
     //    keys or re-verifies bytes, and it fails closed when the proof is
     //    absent (a route the middleware does not guard).
@@ -237,7 +236,7 @@ func (h *ExchangeHandler) DiscoverResources(
 
 ### Requester Authentication
 
-Requester authentication uses an RFC 9421 HTTP Message Signature in the HTTP headers, signed with a domain-bound Ed25519 key. The public key is published in the signer's WBA directory (`{domain}/.well-known/http-message-signatures-directory`); the verifier resolves that domain from the covered `Signature-Agent` header. The `Requester.id` identifies the specific entity within that domain. The requester's private key never leaves the requester.
+Requester authentication uses an RFC 9421 HTTP Message Signature in the HTTP headers, signed with a domain-bound Ed25519 key and made to the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile). The public key is published in the signer's key directory (`{origin}/.well-known/http-message-signatures-directory`); the verifier resolves that origin from the `Signature-Agent` member the signature covers. The `Requester.id` identifies the specific entity within that domain. The requester's private key never leaves the requester.
 
 **Two onboarding paths:**
 
@@ -259,11 +258,11 @@ type RequesterRecord struct {
 
 ### Forwarding Chain Verification
 
-The forwarding chain lives entirely in the HTTP layer as a **stack of RFC 9421 HTTP Message Signatures** — there is no `intermediaries` field on the message. Each party that originates or forwards a `ResourceQuery` or `TransactionRequest` adds **one** labeled signature (`Signature` / `Signature-Input`, e.g. `fora-agent`, `fora-broker-1`) to the request headers. Each forwarder's signature covers the request essentials (`@method`, `@authority`, `@path`, `Content-Digest`) **plus the previous hop's signature**, so the ordered set of header signatures *is* the chain and cannot be reordered, dropped, or extended undetectably. The Exchange MUST:
+The forwarding chain lives entirely in the HTTP layer as a **stack of RFC 9421 HTTP Message Signatures** — there is no `intermediaries` field on the message. Each party that originates or forwards a `ResourceQuery` or `TransactionRequest` adds **one** labeled signature that conforms to Web Bot Auth to the request headers, with its own `Signature-Agent` member. Each forwarder's signature covers the request components FORA requires **plus the previous hop's signature**, so the ordered set of header signatures *is* the chain and cannot be reordered, dropped, or extended undetectably. The covered components and the chain rules are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). The Exchange MUST:
 
-1. **Verify the requester's (originating) RFC 9421 HTTP Message Signature** — proves the original requester authorized the request. The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the requester's WBA directory at `{domain}/.well-known/http-message-signatures-directory` and verifies the Ed25519 signature.
+1. **Verify the requester's (originating) RFC 9421 HTTP Message Signature** — proves the original requester authorized the request. The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the requester's key directory at `{origin}/.well-known/http-message-signatures-directory`, where `{origin}` is the requester's `Signature-Agent` member, and verifies the Ed25519 signature.
 
-2. **Verify every forwarding signature in the stack** — proves each intermediary (e.g., Broker) handled the request. For each labeled signature, the Exchange resolves its `keyid` thumbprint in the key set it is configured with (the covered `Signature-Agent` header stays the agent's directory, so a hop's key is not discovered through it), verifies the Ed25519 signature, and confirms it covers the prior hop's signature so the chain is contiguous and ordered.
+2. **Verify every forwarding signature in the stack** — proves each intermediary (e.g., Broker) handled the request. For each labeled signature, the Exchange resolves its `keyid` thumbprint in the key directory named by that hop's own `Signature-Agent` member, verifies the Ed25519 signature, and confirms it covers the prior hop's `Signature`, `Signature-Input` member and every component that signature lists, so the chain is contiguous and ordered. Whether a hop may forward to this Exchange at all is the Exchange's own policy, for example only Brokers registered with it.
 
 All signatures must pass for the request to proceed. If any verification fails — or the chain is not contiguous — the Exchange rejects the request with `CodeUnauthenticated`.
 
@@ -275,11 +274,12 @@ When only the originating signature is present, the requester is calling the Exc
 // Message Signatures in the request headers IS the chain. The middleware:
 //   1. Parses the Signature / Signature-Input headers into ordered, labeled hops.
 //   2. Verifies the originating (requester) signature against the key in
-//      the requester's WBA directory at
-//      {domain}/.well-known/http-message-signatures-directory.
+//      the key directory its Signature-Agent member names, at
+//      {origin}/.well-known/http-message-signatures-directory.
 //   3. For each subsequent labeled signature, resolves its keyid in the
-//      Exchange's configured key set, verifies the Ed25519 signature, and
-//      confirms it covers the prior hop's signature (contiguous + ordered).
+//      directory named by that hop's own Signature-Agent member, verifies the
+//      Ed25519 signature, and confirms it covers the prior hop's signature
+//      (contiguous + ordered).
 //   4. Counts the hops against max_hops / max_intermediary_hops.
 // Any failure rejects the request with CodeUnauthenticated before the handler
 // runs. The handler reads the proven hops from the context:
diff --git a/website/src/content/docs/components/identity/overview.mdx b/website/src/content/docs/components/identity/overview.mdx
index 540a2194..7e9742fa 100644
--- a/website/src/content/docs/components/identity/overview.mdx
+++ b/website/src/content/docs/components/identity/overview.mdx
@@ -20,7 +20,7 @@ The core is independently useful — it provisions Web Bot Auth identity for any
 
 ## Why an agent needs this at all
 
-FORA's authentication is holder-of-key. A verifier resolves the signer's public key from a directory at the signer's own origin, named in a covered `Signature-Agent` header. It then matches the signature's `keyid` against the [RFC 7638](https://www.rfc-editor.org/rfc/rfc7638) thumbprint of a key in that directory. Nothing about that is FORA-specific — it is the Web Bot Auth shape, so a FORA-provisioned agent is verifiable by any Web Bot Auth origin, not only by an Exchange.
+FORA's authentication is holder-of-key. A verifier resolves the signer's public key from a directory at the signer's own origin, named in the `Signature-Agent` member the signature covers. It then matches the signature's `keyid` against the [RFC 7638](https://www.rfc-editor.org/rfc/rfc7638) thumbprint of a key in that directory. Nothing about that is FORA-specific — it is the Web Bot Auth shape. Signed to FORA's [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile), a FORA-provisioned agent is verifiable by any Web Bot Auth origin, not only by an Exchange.
 
 An agent that holds its own key and publishes its own directory needs none of this service. It is the same participant on the wire and speaks the same protocol. The Identity Service is for the agents that cannot, which today is most of them.
 
@@ -38,14 +38,16 @@ The account row is the authoritative record of registration, and sign-up reserve
 
 | Path | What it is | Media type |
 |---|---|---|
-| `/.well-known/http-message-signatures-directory` | Web Bot Auth key directory — an RFC 7517 JWK Set | `application/jwk-set+json` |
+| `/.well-known/http-message-signatures-directory` | Web Bot Auth key directory — an RFC 7517 JWK Set, with a signed response | `application/http-message-signatures-directory+json` |
 | `/.well-known/signature-agent-card.json` | Signature Agent Card, the agent's self-description | `application/json` |
 | `/.well-known/fora-key-revocations.json` | Key revocation list | `application/json` |
 | `/.well-known/fora.json` | FORA role marker | `application/json` |
 
+The directory follows the [Key Directory](/protocol/authentication/#key-directory) rules: https, a direct `200`, the media type above, and a response signed by each key it lists. The service release that predates the Web Bot Auth profile serves it as `application/jwk-set+json` and unsigned.
+
 Two properties of the directory are load-bearing. It is assembled as a real JWK Set with a JOSE library rather than marshalled from FORA's protobuf. The audience is any Web Bot Auth verifier on the open internet, and those implement RFC 7517, not `fora.v1`. And keys come out **newest-first**, which matters for the signing tie-break described below.
 
-Keys carry no `kid`. Identity is the RFC 7638 thumbprint, so entries are deduplicated on the JWK `x` member actually emitted into the document. The FORA-specific `not_before` / `not_after` validity window is spliced onto each key as an extension member, which a generic verifier ignores.
+Keys carry no `kid`. Identity is the RFC 7638 thumbprint, so entries are deduplicated on the JWK `x` member actually emitted into the document. The FORA-specific `not_before` / `not_after` validity window is spliced onto each key as an extension member, which a generic verifier ignores. Each key also carries `alg` `EdDSA`, the JOSE name RFC 7517 defines, which is a known, deliberate deviation from WG-00 §5.5.1 (see [Key Directory](/protocol/authentication/#key-directory)).
 
 A key is active when the present instant falls inside the **half-open** window `[not_before, not_after)`. During a rotation overlap more than one key is active. Which key is used then depends on the operation:
 
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index a75ebf8d..3b4c0c9d 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -139,9 +139,9 @@ Every incoming request carries a `Requester` message with an Ed25519 signature.
 
 ### Signature Verification
 
-1. Extract the `domain` from the `Requester` message
-2. Fetch the requester's public key from their WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
-3. Verify the RFC 9421 HTTP Message Signature (alg=ed25519) on the request — it covers the HTTP request components (`@method`, `@target-uri`, `content-digest`, and the signature parameters), so the request body (the serialized `Requester`/query) is bound via `content-digest`. There is no in-message body-tuple signature.
+1. Read the `Signature-Agent` member the request signature covers. It names the requester's origin; the self-asserted `Requester.domain` is never used to find keys
+2. Fetch the requester's public key from its key directory (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
+3. Verify the RFC 9421 HTTP Message Signature (alg=ed25519) on the request. It follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) and covers `@method`, `@target-uri`, `content-digest`, `authorization` and the `Signature-Agent` member, so the request body (the serialized `Requester`/query) is bound via `content-digest`. There is no in-message body-tuple signature.
 4. Reject the request if verification fails — no fallback, no degraded mode
 
 Key caching is recommended. Fetch keys with a TTL and re-fetch periodically to handle key rotation without per-request overhead.
diff --git a/website/src/content/docs/getting-started/publisher-onboarding.mdx b/website/src/content/docs/getting-started/publisher-onboarding.mdx
index 3548aadf..69d5cdf0 100644
--- a/website/src/content/docs/getting-started/publisher-onboarding.mdx
+++ b/website/src/content/docs/getting-started/publisher-onboarding.mdx
@@ -179,7 +179,7 @@ If you want to self-attest resources (Level 1 verification), publish your Ed2551
 
 ```json
 // GET /.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
+// Content-Type: application/http-message-signatures-directory+json
 {
   "keys": [
     {
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index a4999104..752e1e44 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -36,67 +36,54 @@ Every FORA request carries a `Requester` message that identifies who is making t
 
 ### Key Lookup
 
-The Exchange resolves a requester's public key by fetching its WBA directory — the JWK Set at `{directory}/.well-known/http-message-signatures-directory` — and selecting the `JsonWebKey` whose RFC 7638 thumbprint matches the request signature's `keyid`.
+The Exchange resolves a requester's public key by fetching its key directory — the JWK Set at `{origin}/.well-known/http-message-signatures-directory` — and selecting the `JsonWebKey` whose RFC 7638 thumbprint matches the request signature's `keyid`.
 
-The `{directory}` comes from the **`Signature-Agent` header**, not from the `Requester` message and not from the `fora.json` manifest. That header is a covered component of the signature, so the pointer the Exchange follows is one the signer committed to and an attacker cannot repoint it under a valid signature. This is what makes the lookup meaningful: the `keyid` is only a key thumbprint — proof that the signer holds the key, not a claim about who they are — so it is the directory publishing that key that establishes whose key it is.
+The `{origin}` comes from the **`Signature-Agent` header**, not from the `Requester` message and not from the `fora.json` manifest. `Signature-Agent` is a dictionary, and the member the verifier follows is the one the signature itself covers, as `"signature-agent";key="<label>"`. Because that member is signed, the pointer the Exchange follows is one the signer committed to, and an attacker cannot repoint it under a valid signature. This is what makes the lookup meaningful: the `keyid` is only a key thumbprint — proof that the signer holds the key, not a claim about who they are — so it is the directory publishing that key that establishes whose key it is. A verifier therefore keys its lookup on the pair (directory URL, `keyid`), never on the `keyid` alone.
 
-```json
-// GET https://research.acme.com/.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
-{
-  "keys": [
-    {
-      "kty": "OKP",
-      "crv": "Ed25519",
-      "use": "sig",
-      "alg": "EdDSA",
-      "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
-      "not_before": "2026-04-01T00:00:00Z",
-      "not_after": "2026-10-01T00:00:00Z"
-    }
-  ],
-  "revocation_url": "https://research.acme.com/.well-known/fora-invalidations.json"
-}
-```
-
-This ties cryptographic identity to DNS ownership — if you control the domain, you control the key.
+This ties cryptographic identity to DNS ownership — if you control the domain, you control the key. The directory's format, media type and signed response are specified in [Key Directory](#key-directory), with a complete example response.
 
 ### The WBA Directory Endpoint
 
-Signing keys are published in a dedicated WBA directory at `/.well-known/http-message-signatures-directory`, separate from the role manifest at `/.well-known/fora.json`. It is a pure JWK Set (`Content-Type: application/jwk-set+json`): a `keys` array of Ed25519 JWKs plus an optional `revocation_url`. Each key is identified by its RFC 7638 thumbprint (the value carried as the RFC 9421 `keyid`), so the directory carries no `kid` labels. Every FORA participant — agent, exchange, broker, publisher — serves one.
+Signing keys are published in a dedicated Web Bot Auth key directory at `/.well-known/http-message-signatures-directory`, separate from the role manifest at `/.well-known/fora.json`. It is served over https, answers `200` with no redirect, and uses the media type `application/http-message-signatures-directory+json`. The body is a JWK Set: a `keys` array of Ed25519 JWKs plus an optional `revocation_url`. Each key is identified by its RFC 7638 thumbprint (the value carried as the RFC 9421 `keyid`), so the directory carries no `kid` labels. Each key carries `alg` `EdDSA`, the JOSE name, which deliberately differs from WG-00 §5.5.1 (see [Key Directory](#key-directory)). The response is signed by each key it lists. Every FORA participant — agent, exchange, broker, publisher — serves one. See [Key Directory](#key-directory) for the full rules.
+
+### Web Bot Auth Conformance
 
-### WebBotAuth Compatibility (IETF)
+FORA request signatures follow Web Bot Auth (WBA), as specified by the IETF webbotauth working group in [draft-ietf-webbotauth-httpsig-protocol-00](https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/00/) (1 September 2026). This page calls that document **WG-00**. It is the only document the working group has adopted, and it replaced the earlier individual architecture and directory drafts. FORA pins to WG-00. The editor's copy after -00 proposes that `Signature-Agent` carry a direct JWK Set URL instead of an origin, so FORA will revisit this profile when -01 is published.
 
-FORA's authentication stack is automatically compatible with the IETF [WebBotAuth](https://datatracker.ietf.org/wg/webbotauth/about/) working group specification (standards track, targeting April 2026). Both use:
+Conformance is a property FORA has to maintain on purpose. It does not follow from sharing RFC 9421 and Ed25519 with WBA: a signature can use both and still be refused by every WBA verifier. Conformance means two things, and FORA requires both:
 
-- **RFC 9421 HTTP Message Signatures** for request signing
-- **Ed25519 (EdDSA)** as the signature algorithm
-- **JWK-formatted keys** at well-known endpoints
+- **FORA signatures verify as WBA.** Every signature a FORA participant creates is a conformant WG-00 signature. A WBA verifier that knows nothing about FORA can verify it and attribute it to the signer's directory.
+- **WBA signatures verify at FORA.** A FORA verifier accepts a signature made by any WBA library, provided the signature also covers the extra components FORA requires on that route. FORA advertises those components through WBA's `Accept-Signature` mechanism, so a WBA library that can add covered components can call FORA without FORA-specific code.
 
-When WebBotAuth ships as an RFC, FORA agents will be recognised as authenticated bots by any CDN or origin server that implements it (Cloudflare is already deploying). No changes to FORA's authentication are required -- the crypto is identical.
+The rules that make both true are in [The Web Bot Auth Profile](#the-web-bot-auth-profile). FORA departs from WG-00 in one deliberate place, stated with its reason where it applies: a key directory's JWK `alg` is the JOSE name `EdDSA` ([Key Directory](#key-directory)). It does not change how a WBA verifier checks a FORA request signature.
 
-WebBotAuth solves identity ("this bot is who it claims to be"). FORA adds the transaction layer on top of that identity ("this bot is authorised to access this content at this price").
+WBA establishes identity: this bot is who it claims to be. FORA adds the transaction layer on top of that identity: this bot is authorised to access this content at this price.
+
+:::caution[Profile change in progress]
+This profile is the target for the next SDK release. The SDKs released as v1.0.8 do not produce or check it yet. They send `Signature-Agent` as a bare, unquoted URL rather than a dictionary, set no `tag`, generate a 16-byte nonce, and refuse any signature that does not cover all five FORA components. The reference directories are served as `application/jwk-set+json`. The change is a hard cut with no transition window: once the profile ships, verifiers refuse the bare unquoted `Signature-Agent` that v1.0.8 sends, so a v1.0.8 client must upgrade to keep working. The SDKs and the reference implementation change together; the [changelog](/reference/changelog/) lists each difference.
+:::
 
 ### Signature Verification
 
-The `Requester` message carries identity semantics only — it has **no** signature field. Request authentication is an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) over the HTTP request itself, carried in the `Signature` / `Signature-Input` HTTP headers rather than in the protobuf body. This separates identity semantics (the `Requester` message) from cryptographic proof (the HTTP signature).
+The `Requester` message carries identity semantics only — it has **no** signature field. Request authentication is an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) over the HTTP request itself, carried in the `Signature`, `Signature-Input` and `Signature-Agent` HTTP headers rather than in the protobuf body. This separates identity semantics (the `Requester` message) from cryptographic proof (the HTTP signature).
 
-The signature MUST cover five components: `@method`, `@target-uri`, `content-digest`, `authorization`, and `signature-agent`. A signature omitting any of them is rejected. `authorization` is covered even when empty, so a token cannot be slipped under an existing signature; `signature-agent` is covered so the directory the key is looked up in cannot be repointed.
+Every signature MUST be a conformant WG-00 signature, as [The Web Bot Auth Profile](#the-web-bot-auth-profile) describes. On a FORA RPC, which carries a body, the signature MUST also cover `@method`, `@target-uri`, `content-digest` and `authorization`. A signature that omits one of them is refused, and the refusal names the missing component. `authorization` is covered even when empty, so a token cannot be slipped under an existing signature. The `Signature-Agent` member is covered so the directory the key is looked up in cannot be repointed.
 
 Covering a header is not the same as sending it, and both are required. A verifier rebuilds the signature base from the request it **received**, so a covered name the request does not carry cannot be reconstructed at all:
 
-- A sender MUST transmit every covered header, **including those whose value is empty**. `Authorization:` with an empty value and `Signature-Agent:` with an empty value are the ordinary shape of a request from an agent holding no bearer token and no key directory, and both field lines MUST be present.
-- A verifier MUST reject a request that **omits** a covered header, and MUST accept one that carries it **empty**. Treating a missing header as empty invents a value the sender may never have bound, and accepts a request whose base cannot be reconstructed.
+- A sender MUST transmit every covered header, **including an empty `Authorization`**. `Authorization:` with an empty value is the ordinary shape of a request from an agent holding no bearer token, and the field line MUST be present. `Signature-Agent` is never empty: it always names the signer's https origin.
+- A verifier MUST reject a request that **omits** a covered header, and MUST accept a covered `Authorization` that is **empty**. Treating a missing header as empty invents a value the sender may never have bound, and accepts a request whose base cannot be reconstructed.
 - Header field names are case-insensitive, and repeated field lines under one name are joined with `", "` before the base is rebuilt (RFC 9421 §2.1). A second field line placed beside a covered one therefore **changes** that covered value and invalidates the signature — it does not replace or override it. This is the mechanism that stops a token being slipped under an existing signature, and it means a verifier MUST NOT resolve a covered header by picking one field line among several.
 
 The Exchange verifies it by:
 
-1. Reading the `keyid` and covered components from the request's `Signature-Input` header
-2. Reading the directory from the covered `Signature-Agent` header and fetching its WBA directory at `{directory}/.well-known/http-message-signatures-directory`, selecting the `JsonWebKey` whose RFC 7638 thumbprint matches the `keyid` (and whose `[not_before, not_after)` window covers now)
-3. Reconstructing the signed content from the declared components and verifying the Ed25519 signature in the `Signature` header against that key
-4. Confirming the `Content-Digest` matches the request body, and that the directory that published the key is the identity the caller is authorised as
+1. Parsing `Signature`, `Signature-Input` and `Signature-Agent`, and selecting the `Signature-Agent` member the signature covers
+2. Checking the signature against the profile: `tag="web-bot-auth"`, `created`, `expires`, `keyid` and `alg="ed25519"` present, `@target-uri` or `@authority` covered, and on a FORA RPC the four FORA components covered
+3. Fetching the key directory at `{origin}/.well-known/http-message-signatures-directory` for the origin that member names, and selecting the `JsonWebKey` whose RFC 7638 thumbprint matches the `keyid` (and whose `[not_before, not_after)` window covers now)
+4. Reconstructing the signature base from the declared components and verifying the Ed25519 signature in the `Signature` header against that key
+5. Confirming the `Content-Digest` matches the request body, and that the directory that published the key is the identity the caller is authorised as
 
-If verification fails, the Exchange rejects the request. No fallback, no degraded mode. See [How RFC 9421 Signatures Work](#how-rfc-9421-signatures-work) below for the header details.
+If verification fails, the Exchange rejects the request. No fallback, no degraded mode. See [The Web Bot Auth Profile](#the-web-bot-auth-profile) below for the header details and a complete example.
 
 ## Delegation
 
@@ -290,24 +277,33 @@ This distinction prevents information leakage on public Exchanges while allowing
 
 ## Multi-hop forwarding
 
-When a request passes through forwarding parties (e.g., Agent to Broker to Exchange), the forwarding chain is **not** carried in the message body at all. It lives entirely in the HTTP headers as a stack of [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421).
+When a request passes through forwarding parties (e.g., Agent to Broker to Exchange), the forwarding chain is **not** carried in the message body at all. It lives entirely in the HTTP headers as a stack of [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421). This section is the one place the chain is specified; other pages refer to it.
 
 ### How It Works
 
-Each forwarding party adds **one** labeled signature to the `Signature` / `Signature-Input` headers:
+Each party that originates or forwards the request adds **one** labeled signature, and every one of them is a conformant WG-00 signature in its own right ([The Web Bot Auth Profile](#the-web-bot-auth-profile)):
 
-1. The agent signs the request first.
-2. Each subsequent broker adds its own labeled signature, covering the request **plus the prior hop's signature**.
+1. The agent signs first, under its own label (`sig1` in the examples on this page). It adds a member under that label to `Signature-Agent`, naming its directory.
+2. Each forwarding hop adds its own label (`sig2` for the first hop in the examples), its own `Signature-Agent` member naming **its own** directory, and a signature that covers:
+   - the request components FORA requires on the route: `@method`, `@target-uri`, `content-digest` and `authorization`;
+   - its own member, `"signature-agent";key="<its label>"`;
+   - the previous hop's signature, `"signature";key="<previous label>"`, together with `"signature-input";key="<previous label>"` and every component the previous signature lists, which includes the previous hop's own `Signature-Agent` member. WG-00 §5.2.2 requires this union. A signature value alone does not identify the message it was computed over, so a hop that covered only the value would still verify after the headers were moved onto a different request.
+3. A hop accepts only a request whose `Signature-Agent` is a dictionary. It cannot add its own member to the legacy single-string form without changing the bytes the agent's signature covers, so it refuses that form and answers with `Accept-Signature` asking for the dictionary form ([What a FORA verifier accepts](#what-a-fora-verifier-accepts)).
+4. A hop never changes a value an earlier signature covers. It forwards the earlier `Signature-Agent` members, `Signature-Input` members and `Signature` members unchanged, and appends its own. A hop that has to change a covered value (a new body, for example) is not forwarding: see [Projected execute requests](#projected-execute-requests).
 
 Because every signature commits to the signature before it, the ordered set of signatures **is** the forwarding chain: it is tamper-evident and order-bound. You cannot reorder, remove, or insert a hop without breaking the chain. There is no separate per-hop timestamp or payload-signature field — the RFC 9421 signature itself carries that proof.
 
+On a verbatim-forwarded path the agent signs `@target-uri` against the final recipient's endpoint (the Exchange), not the relay URL it dials. A message that terminates at the Broker, such as a `DiscoveryRequest`, is not forwarded: there the Broker is the final recipient and the agent signs the Broker's URL.
+
 The Exchange verifies the full chain by:
 
 1. Reading each labeled signature and its `keyid` from `Signature` / `Signature-Input`
-2. Resolving each `keyid` (an RFC 7638 thumbprint) in the signer's WBA directory at `{domain}/.well-known/http-message-signatures-directory`
-3. Verifying every signature, confirming each later hop covers the prior hop's signature
+2. For each signature, resolving its `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2)
+3. Verifying every signature independently against its own covered components and its own key, and confirming each later hop covers the prior hop's `Signature`, its `Signature-Input` member and every component it lists, plus the hop's own `Signature-Agent` member
 4. Enforcing depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting the signatures** in the stack
 
+Verifying a hop's signature proves which party forwarded the request. Whether that party may forward to this Exchange at all is the Exchange's own policy: an Exchange MAY accept forwarding hops only from Brokers registered with it.
+
 When only the agent's signature is present, the agent is querying the Exchange directly — no broker was involved.
 
 See [Multi-Hop Example (Broker)](#multi-hop-example-broker) below for the concrete header layout.
@@ -335,57 +331,164 @@ Request signatures are [RFC 9421 HTTP Message Signatures](https://www.rfc-editor
 
 ### How RFC 9421 Signatures Work
 
-RFC 9421 defines a standard way to sign HTTP messages. Three headers work together:
+RFC 9421 defines a standard way to sign HTTP messages. WG-00 profiles it for automated clients. Four headers work together:
 
 | Header | Purpose |
 |---|---|
 | `Content-Digest` | Hash of the request body (binds the signature to the payload) |
-| `Signature-Input` | Declares which components are signed, the key ID, and the algorithm |
+| `Signature-Agent` | Where each signer's key directory is, one dictionary member per signature label |
+| `Signature-Input` | Declares which components are signed, the key ID, the algorithm, the validity window and the tag |
 | `Signature` | The actual cryptographic signature |
 
-The Exchange verifies the signature by reconstructing the signed content from the declared components, fetching the signer's public key from its WBA directory at `{domain}/.well-known/http-message-signatures-directory` (selected by the `keyid` thumbprint), and verifying the Ed25519 signature.
+The Exchange verifies the signature by reconstructing the signed content from the declared components, fetching the signer's public key from the key directory the covered `Signature-Agent` member names (selected by the `keyid` thumbprint), and verifying the Ed25519 signature.
+
+### The Web Bot Auth Profile
+
+This section is the normative statement of how FORA request signatures are made and checked. It applies to every FORA request signature: FORA RPCs, forwarded requests, agent requests at the publisher edge, and the retrieval proof of possession a fetcher presents with a signed delivery URL ([Retrieval proof of possession](#retrieval-proof-of-possession)).
+
+#### Every signature: the WG-00 base
+
+Every FORA signature is a conformant WG-00 signature:
+
+| Element | Requirement |
+|---|---|
+| `Signature-Agent` header | A structured-field **Dictionary** (RFC 9651 §3.2). The member for this signature is `<label>="https://<origin>"`: its key is the signature's label, and its value is the ASCII serialization of an https origin, with no path, query or fragment. Signers use a member key equal to the signature label, and send no `type` parameter, because the default `type`, `directory`, is the one FORA uses |
+| `"signature-agent";key="<label>"` | Covered. This binds the signature to the directory it names (WG-00 §5.2.1) |
+| `@target-uri` or `@authority` | At least one covered (WG-00 §5.2). FORA RPCs always cover `@target-uri` |
+| `created`, `expires` | Both present, as integer seconds. The lifetime is a few minutes and always well under the 24 hours WG-00 recommends as the maximum. A signature is never reused as a long-lived credential (WG-00 §6.9) |
+| `keyid` | The key's RFC 7638 JWK thumbprint (RFC 8037 Appendix A.3 for Ed25519), base64url without padding |
+| `alg` | `"ed25519"`. WG-00 does not require `alg`, but widely deployed WBA verifiers do, so FORA always sends it |
+| `tag` | `"web-bot-auth"` |
+| `nonce` | A fresh 64-byte random value for every signature, base64url without padding. See [Replay protection](#replay-protection) |
+
+No other signature parameters are sent.
+
+#### FORA RPCs: the additional components
+
+A FORA RPC carries a body and can move money, so FORA requires more than the WBA base. A signature on a FORA RPC MUST also cover:
+
+| Component | Why |
+|---|---|
+| `@method` | Narrows the signature to one method |
+| `@target-uri` | Narrows the signature to one RPC on one host |
+| `content-digest` | WBA covers no body by default (WG-00 §5.2). The RFC 9530 `Content-Digest` header binds the signature to the request body |
+| `authorization` | Bound even when empty, so a bearer token cannot be slipped under an existing signature |
+
+This is FORA policy layered on WBA, which WG-00 §5.2.4 permits. It is not a separate signature format. A FORA verifier that refuses a signature for a missing component names the component in the refusal, and answers with an `Accept-Signature` field listing the components it requires (RFC 9421 §5.1, WG-00 §5.3). The covered `"signature-agent";key="sig1"` in it also asks for the dictionary form of `Signature-Agent`:
+
+```http
+Accept-Signature: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created;expires;tag="web-bot-auth"
+```
+
+Any WBA library that can add covered components can therefore call FORA. When the request carries an `X-Entitlement-Token` header, the signature MUST cover that header too.
+
+#### Bodiless requests at the publisher edge
+
+A request at the publisher edge that has no body only identifies an agent and moves no money. The edge accepts the bare WBA base for it: `@authority` or `@target-uri`, the covered `Signature-Agent` member, and the base parameters. It does not require the four FORA components. A request whose signature is missing or does not verify is treated as an unsigned request, not as an identified agent.
+
+#### Retrieval proof of possession
+
+When a delivery URL is bound to the purchasing agent ([Retrieval-URL Identity Binding](#retrieval-url-identity-binding)), the fetch carries a full WBA signature: the WG-00 base above (`tag`, dictionary `Signature-Agent`, the covered `"signature-agent";key="<label>"` member, a 64-byte nonce), plus `@method` and `@target-uri`. The request has no body, so it carries no `content-digest`.
+
+The edge still verifies offline. The fetcher also presents its raw public key in the `X-FORA-Agent-Key` header, and the edge uses that key only when its RFC 7638 thumbprint equals both the signature's `keyid` and the delivery URL's `agent_id`. The binding stays double: the Exchange signed the URL with the thumbprint inside it, and only the holder of the matching private key can produce the request signature. A generic WBA verifier ignores `X-FORA-Agent-Key`, resolves the same key from the agent's directory named in `Signature-Agent`, and accepts the same signature. The edge's full check is on [Signed URL Verification](/components/edge-function/signed-url-verification).
+
+#### What a FORA verifier accepts
+
+Agents in the field run many WBA libraries and some send earlier forms of the protocol. A FORA verifier accepts the following, which WG-00 permits:
+
+- **The legacy `Signature-Agent` form, on a direct single-hop call only.** A bare structured-field String (`Signature-Agent: "https://research.acme.com"`), covered as plain `"signature-agent"`. The verifier treats it as a dictionary with one member whose key is the label of the signature covering it. A relay refuses this form, because it cannot add its own member without breaking the agent's signature, and answers with `Accept-Signature` asking for the dictionary form, as in the example below. FORA signers never send this form.
+- **A member key different from the signature label.** Signers use a member key equal to the label, but the verifier follows whichever member the signature covers, `"signature-agent";key="<member>"`, whatever the label is called.
+- **No `nonce`.** WG-00 sets no nonce requirement.
+- **A `type` parameter equal to `directory`** on the member. A member with any other `type` value is ignored, as WG-00 §5.2.1 requires.
+
+A FORA verifier refuses a signature with no `tag` or a `tag` other than `web-bot-auth`, a signature whose covered `Signature-Agent` member is not an https origin, and a bare unquoted `Signature-Agent` value such as `https://research.acme.com`, which is neither a dictionary nor a String. There is no transition window for that last form. A verifier that refuses a signature for a missing component, or for a form it does not accept, answers with `Accept-Signature` naming what it requires (WG-00 §5.3).
 
 ### Single-Hop Example
 
-An agent sends a signed request directly to the Exchange:
+A complete WG-00-conformant FORA request. An agent whose directory is `https://research.acme.com` calls `DiscoverResources` on an Exchange directly. Every value is real: the request is signed with the Ed25519 key from RFC 8037 Appendix A, so a reader can recompute the digest and verify the signature. Production verifiers refuse published test keys (WG-00 §6.8).
 
 ```http
 POST /fora.v1.ExchangeService/DiscoverResources HTTP/1.1
+Host: exchange.example
 Content-Type: application/json
-Content-Digest: sha-256=:X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE=:
+Content-Length: 203
+Content-Digest: sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:
 Authorization:
-Signature-Agent: https://research.acme.com
-Signature-Input: agent=("@method" "@target-uri" "content-digest" "authorization" "signature-agent");keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";created=1700000000;expires=1700000300
-Signature: agent=:dGVzdC1zaWduYXR1cmUtYWdlbnQ=:
+Signature-Agent: sig1="https://research.acme.com"
+Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth"
+Signature: sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:
+```
+
+The body is these 203 bytes, with no trailing newline:
+
+{/* fora-validate: ResourceQuery */}
+```json
+{"ver":"1.0","exchange":"exchange.example","requester":{"id":"research-bot-42","domain":"research.acme.com","type":"REQUESTER_TYPE_AGENT"},"uris":["https://publisher.example/premium/ai-funding-roundup"]}
 ```
 
 The `Signature-Input` header declares:
-- **Label**: `agent` — identifies this signature in multi-signature scenarios
-- **Covered components**: `@method` (POST), `@target-uri` (the RPC path), `content-digest` (body hash), `authorization` (bound even when empty, as above), `signature-agent` (the key directory)
-- **keyid**: the RFC 7638 thumbprint of the agent's key — resolved in the WBA directory named by `Signature-Agent`
-- **alg**: `ed25519` — same key type used throughout FORA
-- **created / expires**: the validity window; both are required and a signature outside it is refused
-- **nonce** (optional): a random value that makes each signature unique. The example above has none, and verifiers do not require it. See [Replay protection](#replay-protection)
+- **Label**: `sig1`. It identifies this signature among several, and it is also the key of the agent's `Signature-Agent` member
+- **Covered components**: `@method` (POST), `@target-uri` (the RPC URL), `content-digest` (body hash), `authorization` (bound even when empty, as above), and the `signature-agent` member keyed `sig1` (the key directory)
+- **created / expires**: a 300-second validity window, 2026-10-01T00:00:00Z to 00:05:00Z. Both are required, and a signature outside its window is refused
+- **keyid**: the RFC 7638 thumbprint of the agent's key, resolved in the directory at `https://research.acme.com/.well-known/http-message-signatures-directory`
+- **alg**: `ed25519`
+- **nonce**: 64 random bytes, base64url without padding
+- **tag**: `web-bot-auth`
+
+The signature base the agent signed, and the verifier rebuilds, is:
 
-The `Signature-Agent` value may also arrive quoted — `"https://research.acme.com"` — which is the RFC 8941 String form Web Bot Auth specifies. Both spellings name the same directory. The bytes are signed exactly as sent, so a relay forwarding the header must not rewrite it.
+```
+"@method": POST
+"@target-uri": https://exchange.example/fora.v1.ExchangeService/DiscoverResources
+"content-digest": sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:
+"authorization": 
+"signature-agent";key="sig1": "https://research.acme.com"
+"@signature-params": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth"
+```
+
+The `authorization` line ends with a space and no value: the header is sent empty, and its empty value is what the signature binds. The `signature-agent` line carries the member's value as a quoted string, because RFC 9421 §2.1.2 serializes a selected dictionary member as its structured-field value.
+
+The bytes are signed exactly as sent, so a relay forwarding the request must not rewrite any covered header.
 
 ### Multi-Hop Example (Broker)
 
-When a request passes through a Broker, each hop adds its own signature. The Broker signs over the same components plus the agent's existing signature, creating a verifiable chain:
+The same request after a Broker has forwarded it. The Broker's directory is `https://broker.example`, and its signature is made with the RFC 9421 Appendix B.1.4 test key. The body and the agent's headers are unchanged. The Broker appended one member to each of `Signature-Agent`, `Signature-Input` and `Signature`:
 
 ```http
 POST /fora.v1.ExchangeService/DiscoverResources HTTP/1.1
+Host: exchange.example
 Content-Type: application/json
-Content-Digest: sha-256=:X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE=:
+Content-Length: 203
+Content-Digest: sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:
 Authorization:
-Signature-Agent: https://research.acme.com
-Signature-Input: agent=("@method" "@target-uri" "content-digest" "authorization" "signature-agent");keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519", broker=("@method" "@target-uri" "content-digest" "authorization" "signature-agent" "signature";key="agent");keyid="broker-key";alg="ed25519"
-Signature: agent=:dGVzdC1zaWduYXR1cmUtYWdlbnQ=:, broker=:dGVzdC1zaWduYXR1cmUtYnJva2Vy:
+Signature-Agent: sig1="https://research.acme.com", sig2="https://broker.example"
+Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth", sig2=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1" "signature-input";key="sig1" "signature";key="sig1" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
+Signature: sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:, sig2=:aBbWd4a2KZp9fT81GfKP+qnA41V+BAM6vcgH3JdLrUjvcIFOUcaVphDvy1LmjGQ/6C97IlZWzwAT0FZtFwpYCA==:
 ```
 
-Each labeled signature (`agent`, `broker`) is independently verifiable. The Exchange checks every signature in the `Signature` header against the corresponding `keyid` in `Signature-Input`.
+The body is the same 203 bytes as in the single-hop example.
+
+Each labeled signature (`sig1` from the agent, `sig2` from the Broker) is verified independently, against the key its `keyid` selects in the directory its own `Signature-Agent` member names. The agent's signature still verifies, because adding the `sig2` member does not change the `sig1` member it covers.
+
+The Broker's covered set is what makes the hops a chain rather than a set. It covers `"signature";key="sig1"`, so it commits to the exact signature it received, and a relay cannot strip or reorder the hop in front of it. It also covers `"signature-input";key="sig1"` and every component the agent's signature lists, including the agent's `sig1` member, as WG-00 §5.2.2 requires, so the agent's signature cannot be lifted onto a different request under the Broker's.
+
+:::note
+Some WBA libraries, for example Cloudflare's `web-bot-auth` 0.2.0, refuse a signature that covers more than one `Signature-Agent` member, contrary to WG-00 §5.2.2. Such a library refuses the Broker's `sig2` above. This does not affect delivery: a relay hop's signature is verified by the Exchange, not by a CDN, and the agent's own `sig1` covers one member and passes such libraries on every hop.
+:::
 
-Note that the Broker's covered set adds `"signature";key="agent"`, a reference to the agent's signature. That is what makes the hops a chain rather than a set: the Broker commits to the exact signature it received, so a relay cannot strip or reorder the hop in front of it. `Signature-Agent` stays the **agent's** directory and is forwarded unchanged — the Broker's own key is found by its `keyid` thumbprint, not by that header.
+The signature base the Broker signed is:
+
+```
+"@method": POST
+"@target-uri": https://exchange.example/fora.v1.ExchangeService/DiscoverResources
+"content-digest": sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:
+"authorization": 
+"signature-agent";key="sig1": "https://research.acme.com"
+"signature-input";key="sig1": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth"
+"signature";key="sig1": :pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:
+"signature-agent";key="sig2": "https://broker.example"
+"@signature-params": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1" "signature-input";key="sig1" "signature";key="sig1" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
+```
 
 ### Replay protection
 
@@ -393,28 +496,24 @@ A verifier that keeps a replay store refuses a signature it has already accepted
 
 Ed25519 signatures are deterministic, and `created` and `expires` are whole seconds. So two identical requests signed in the same second, with no nonce, get the same signature, and the verifier refuses the second one as a replay, although the client sent it on purpose.
 
-To prevent this, the SDK signing transports (Go, Python and TypeScript) add an RFC 9421 `nonce` parameter to every signature by default:
+To prevent this, every FORA signer adds an RFC 9421 `nonce` parameter to every signature:
 
-```http
-Signature-Input: agent=(...);keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";created=1700000000;expires=1700000300;nonce="q3Jd0tZ4H2mV8xRk1pWc9A"
-```
-
-- The nonce is 16 random bytes from the platform's cryptographic RNG, encoded as base64url without padding.
+- The nonce is 64 random bytes from the platform's cryptographic RNG, encoded as base64url without padding (86 characters). 64 bytes is the length the WBA test vectors use, and widely deployed WBA verifiers refuse a nonce of any other length.
 - Each new signing attempt gets a fresh nonce, so a client retry that signs the request again is not refused as a replay. Idempotency keys protect the business operation from running twice.
 - Sending the same signed bytes again is still a replay, and the verifier refuses it.
-- Verifiers do not require a nonce. A signature without one is still accepted.
+- Verifiers do not require a nonce. A signature without one is still accepted, because WG-00 sets no nonce requirement and other WBA signers omit it.
 - The low-level signing helpers (`SignRequest` / `AppendSignature` and their Python and TypeScript equivalents) do not generate a nonce. A caller that uses them directly and needs unique signatures must pass its own fresh nonce.
 
 ### No fallback
 
-RFC 9421 is the **only** request-authentication mechanism. A request without a valid RFC 9421 signature (`Signature` + `Signature-Input`, with a `Content-Digest` over the body) is rejected — there is no proto-field fallback and no degraded mode. There were never any in-message signature fields to fall back to.
+On FORA RPCs, an RFC 9421 signature that conforms to this profile is the **only** request-authentication mechanism. A request without one (`Signature`, `Signature-Input` and `Signature-Agent`, with a `Content-Digest` over the body) is rejected — there is no proto-field fallback and no degraded mode. There were never any in-message signature fields to fall back to. The publisher edge is different only for bodiless requests, as [Bodiless requests at the publisher edge](#bodiless-requests-at-the-publisher-edge) describes: there a missing or invalid signature means the request is unsigned, and it is never treated as an identified agent.
 
 ## Retrieval-URL Identity Binding
 
 A signed `retrieval_endpoint` returned by a transaction is, by default, a bearer token: anyone holding it before `expires_at` can fetch. FORA **optionally** binds the URL to the purchasing agent, DPoP-style ([RFC 9449](https://www.rfc-editor.org/rfc/rfc9449)):
 
 - The Exchange embeds `agent_identity_hash` — the [RFC 7638](https://www.rfc-editor.org/rfc/rfc7638) JWK Thumbprint (SHA-256) of the agent's Ed25519 request-signing key — as the URL's `agent_id` query parameter, which the URL signature covers, and echoes it on the execute-path response (`TransactionResponse.agent_identity_hash`, produced directly by the Exchange — the Broker is not in the execute response path for this field).
-- A capable delivery endpoint (edge function) verifies the binding without contacting the fetcher's directory: verify the URL's Ed25519 signature against the Exchange's published public key (proves the hash is Exchange-issued and untampered), then require the fetcher to present its public key and an RFC 9421 signature over the retrieval request, and check `thumbprint(presented key) == agent_identity_hash`. The fetcher's key arrives in the request, so no JWKS fetch is needed for it. The edge does resolve `kid` to the Exchange's public key, from a cached directory or from keys pinned in its configuration.
+- A capable delivery endpoint (edge function) verifies the binding without contacting the fetcher's directory: verify the URL's Ed25519 signature against the Exchange's published public key (proves the hash is Exchange-issued and untampered), then require the fetcher to present its public key and a WBA signature over the retrieval request ([Retrieval proof of possession](#retrieval-proof-of-possession)), and check that `thumbprint(presented key)` equals both the signature's `keyid` and `agent_identity_hash`. The fetcher's key arrives in the request, so no directory fetch is needed for it, while a generic WBA verifier can still resolve the same key from the agent's directory. The edge does resolve `kid` to the Exchange's public key, from a cached directory or from keys pinned in its configuration.
 - Bound to the request-signing key of whoever fetches, never to the principal/delegation, and exactly one key per transaction. Who that is depends on where the key lives: an agent embedding the SDK holds its own key and fetches for itself, while a custodial agent never fetches at all -- its identity service holds the key and fetches on its behalf. Either way the fetcher is the key holder, which is what the edge checks.
 - Enforcement is **NOT mandatory**: a CDN that cannot run code uses its native signed-URL scheme (a CloudFront RSA canned policy, for example) + short TTL + TLS. FORA reference implementations run on edge functions and **do** enforce it.
 
@@ -447,7 +546,7 @@ A research bot queries a public Exchange. No delegation token, no special scopes
 }
 ```
 
-The Exchange verifies the signature by fetching the WBA directory at `research.acme.com/.well-known/http-message-signatures-directory` (resolved from the covered `Signature-Agent` header) and selecting the key whose RFC 7638 thumbprint matches the `keyid`, then returns all publicly available offers for the requested URI.
+The Exchange verifies the signature by fetching the key directory at `https://research.acme.com/.well-known/http-message-signatures-directory` (the origin in the `Signature-Agent` member the signature covers) and selecting the key whose RFC 7638 thumbprint matches the `keyid`, then returns all publicly available offers for the requested URI.
 
 ### Subscription Agent (MarketData JWT)
 
@@ -593,11 +692,40 @@ Every party publishes its keys in **one** place — its WBA directory at `{domai
 | Exchange | `{domain}/.well-known/http-message-signatures-directory` | `ROLE_EXCHANGE` |
 | Delegation Issuer (principal / resource owner) | `{domain}/.well-known/http-message-signatures-directory` | `ROLE_AGENT` (key signing delegation JWTs) |
 
-### Key Announcement Format
+### Key Directory
+
+Every participant serves its keys as a WG-00 key directory (WG-00 §5.5 and §5.5.1):
+
+| Property | Requirement |
+|---|---|
+| Location | `https://<origin>/.well-known/http-message-signatures-directory`, where `<origin>` is exactly the value of the participant's `Signature-Agent` member |
+| Transport | https only |
+| Status | `200`, served directly. A verifier does not follow a redirect and treats any other status as a discovery failure |
+| Media type | `Content-Type: application/http-message-signatures-directory+json` |
+| Body | A JWK Set (RFC 7517 §5): a `keys` array of Ed25519 keys (`kty` `OKP`, `crv` `Ed25519`, `alg` `EdDSA`), plus FORA's optional `revocation_url`. Keys carry no `kid`; a verifier computes each key's RFC 7638 thumbprint and matches it against the signature's `keyid` |
+| Signed response | Signed once per listed key, as WG-00 Appendix B.1 describes: the signature covers `"@authority";req` and `content-digest`, carries `created`, `expires`, `keyid` (the thumbprint) and `alg`, and has `tag="http-message-signatures-directory"`. The response carries the matching `Content-Digest` header |
+| Access | Reachable without a signature and without bot challenges, and cacheable with standard HTTP caching |
+
+WG-00 makes the signed response RECOMMENDED. FORA requires it, because a directory that is not signed cannot be registered with some widely deployed WBA verifiers. A verifier checks the response signature with the key the directory lists, checks the `Content-Digest` against the body, and refuses a response signature whose `created` is in the future.
+
+FORA adds two extension members to the JWK Set: `not_before` and `not_after` on each key (see [Key Validity Windows](#key-validity-windows)), and `revocation_url` on the set (see [Emergency Revocation](#emergency-revocation)). A generic WBA verifier ignores members it does not know, as RFC 7517 allows.
+
+A complete directory response for the agent in the [Single-Hop Example](#single-hop-example), signed with the same RFC 8037 test key:
+
+```http
+GET /.well-known/http-message-signatures-directory HTTP/1.1
+Host: research.acme.com
+Accept: application/http-message-signatures-directory+json
+```
+
+```http
+HTTP/1.1 200 OK
+Content-Type: application/http-message-signatures-directory+json
+Cache-Control: max-age=3600
+Content-Digest: sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:
+Signature-Input: sig1=("@authority";req "content-digest");created=1790812200;expires=1790815800;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";tag="http-message-signatures-directory"
+Signature: sig1=:5UyPR4rbxeGrlooo3uc0y43hNHzRX9O0EsegyHPf8XYyqy6q7/6Kkub2rFN2Jzsv+4yTdGygDdRE0iaRucg6DQ==:
 
-```json
-// GET https://agents.kirkland.com/.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
 {
   "keys": [
     {
@@ -606,14 +734,28 @@ Every party publishes its keys in **one** place — its WBA directory at `{domai
       "use": "sig",
       "alg": "EdDSA",
       "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
-      "not_before": "2026-04-01T00:00:00Z",
-      "not_after": "2026-10-01T00:00:00Z"
+      "not_before": "2026-07-01T00:00:00Z",
+      "not_after": "2027-01-01T00:00:00Z"
     }
   ],
-  "revocation_url": "https://agents.kirkland.com/.well-known/fora-invalidations.json"
+  "revocation_url": "https://research.acme.com/.well-known/fora-invalidations.json"
 }
 ```
 
+The response signature base is:
+
+```
+"@authority";req: research.acme.com
+"content-digest": sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:
+"@signature-params": ("@authority";req "content-digest");created=1790812200;expires=1790815800;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";tag="http-message-signatures-directory"
+```
+
+`"@authority";req` takes its value from the request that fetched the directory, so the signature cannot be served again under a different host. The `Content-Digest` is computed over the body exactly as shown, with two-space indentation and no trailing newline.
+
+:::note
+**Known, deliberate deviation from WG-00 §5.5.1.** A key's `alg` member is `EdDSA`, the JOSE name. RFC 7517 §4.4 defines the JWK `alg` member as a value from the JOSE algorithms registry, and Cloudflare's reference library follows RFC 7517. WG-00 §5.5.1 restricts the same member to HTTP Message Signatures names, where Ed25519 is `ed25519`. FORA follows RFC 7517 and the reference library here. The signature parameter `alg` in `Signature-Input` is a different field and is `ed25519`, as WG-00 requires.
+:::
+
 ### Key Rotation
 
 Key rotation follows a standard overlap pattern:
diff --git a/website/src/content/docs/protocol/content-attestation.mdx b/website/src/content/docs/protocol/content-attestation.mdx
index ad846664..54752c62 100644
--- a/website/src/content/docs/protocol/content-attestation.mdx
+++ b/website/src/content/docs/protocol/content-attestation.mdx
@@ -97,7 +97,7 @@ A self-attesting publisher's attestation-signing key, served from its WBA direct
 
 ```json
 // GET https://nytimes.com/.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
+// Content-Type: application/http-message-signatures-directory+json
 {
   "keys": [
     {
diff --git a/website/src/content/docs/protocol/exchange-manifest.mdx b/website/src/content/docs/protocol/exchange-manifest.mdx
index 58f5c32b..b7460bbd 100644
--- a/website/src/content/docs/protocol/exchange-manifest.mdx
+++ b/website/src/content/docs/protocol/exchange-manifest.mdx
@@ -78,11 +78,11 @@ The manifest answers: "What can this Exchange do, where are its endpoints, and w
 
 ## The WBA Directory
 
-The Exchange's offer-signing keys are **not** carried in `fora.json`. They live in a separate, pure WBA directory — a JWK Set served at `/.well-known/http-message-signatures-directory` with `Content-Type: application/jwk-set+json`. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`), not by a `kid` label, and the optional emergency revocation list now lives here as `revocation_url`:
+The Exchange's offer-signing keys are **not** carried in `fora.json`. They live in a separate, pure WBA directory — a JWK Set served at `/.well-known/http-message-signatures-directory` with `Content-Type: application/http-message-signatures-directory+json`. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`), not by a `kid` label, and the optional emergency revocation list now lives here as `revocation_url`. Each key carries `alg` `EdDSA`, the JOSE name RFC 7517 defines, which is a known, deliberate deviation from WG-00 §5.5.1 (see [Key Directory](/protocol/authentication/#key-directory)). An example:
 
 ```json
 // GET /.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
+// Content-Type: application/http-message-signatures-directory+json
 {
   "keys": [
     {
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index cc99e676..0f3a726c 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -59,7 +59,7 @@ Anthropic publishes its agent's Ed25519 public key in its WBA directory (the JWK
 
 ```json
 // GET https://claude.ai/.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
+// Content-Type: application/http-message-signatures-directory+json
 {
   "keys": [
     {
@@ -92,7 +92,7 @@ The Broker announces its key in its own WBA directory the same way:
 
 ```json
 // GET https://broker.anthropic.com/.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
+// Content-Type: application/http-message-signatures-directory+json
 {
   "keys": [
     {
@@ -265,9 +265,10 @@ The SDK sends `DiscoverResources` to SSP-Alpha — `POST https://exchange.ssp-al
 ```
 1. Validate request (proto validation) -> pass
 2. Verify the RFC 9421 HTTP Message Signature (alg=ed25519) on the request:
-   a. Read the covered Signature-Agent header -> "claude.ai"
-   b. Fetch the WBA directory at
-      claude.ai/.well-known/http-message-signatures-directory,
+   a. Read the Signature-Agent member the signature covers
+      -> agent="https://claude.ai"
+   b. Fetch the key directory at
+      https://claude.ai/.well-known/http-message-signatures-directory,
       select the key whose RFC 7638 thumbprint matches the keyid
    c. Verify the signature against public key -> pass
 3. Resolve tenant: techcrunch.com -> Hearst Media tenant
@@ -495,7 +496,7 @@ Broker → SSP-Alpha (multi-URI batch query) — `POST https://exchange.ssp-alph
 
 The forwarding chain travels in the HTTP headers, not the request body: the agent's labeled RFC 9421 signature and the Broker's labeled RFC 9421 signature both sit in the `Signature`/`Signature-Input` headers. The agent's signature covers `@target-uri` against the Exchange's endpoint -- the final recipient -- not the Broker's relay URL. SSP-Alpha's Exchange verifies the full stack:
 1. The agent's RFC 9421 HTTP Message Signature (alg=ed25519) -- fetch public key from the WBA directory at `claude.ai/.well-known/http-message-signatures-directory`, Ed25519 verify
-2. Each forwarding hop's labeled RFC 9421 HTTP Message Signature -- for each one, look up the public key by its `keyid` thumbprint in the key set the Exchange is configured with (`Signature-Agent` stays the agent's directory, so a hop's key is not discovered through it), Ed25519 verify (each hop signs the request plus the prior hop's signature)
+2. Each forwarding hop's labeled RFC 9421 HTTP Message Signature -- for each one, look up the public key by its `keyid` thumbprint in the key directory named by that hop's own `Signature-Agent` member, Ed25519 verify (each hop signs the request plus the prior hop's signature; see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
 
 SSP-Alpha returns `offer_groups` (batch mode -- multiple URIs in query):
 
@@ -757,7 +758,7 @@ SDK or Broker commits to the subscription offer.
 }
 ```
 
-The request body is identical to the direct case; the forwarding chain lives in the HTTP headers. The Broker preserves the agent's labeled RFC 9421 signature and adds its own labeled RFC 9421 signature (covering the request plus the agent's signature) to the `Signature`/`Signature-Input` headers. The Exchange verifies both: the agent's identity (via the agent's RFC 9421 HTTP Message Signature, alg=ed25519, + public key fetched from the agent's WBA directory at `claude.ai/.well-known/http-message-signatures-directory`) and each forwarding hop (via that hop's labeled RFC 9421 signature + the hop's public key, selected by its `keyid` thumbprint from the key set the Exchange is configured with).
+The request body is identical to the direct case; the forwarding chain lives in the HTTP headers. The Broker preserves the agent's labeled RFC 9421 signature and adds its own labeled RFC 9421 signature (covering the request plus the agent's signature) to the `Signature`/`Signature-Input` headers. The Exchange verifies both: the agent's identity (via the agent's RFC 9421 HTTP Message Signature, alg=ed25519, + public key fetched from the agent's WBA directory at `claude.ai/.well-known/http-message-signatures-directory`) and each forwarding hop (via that hop's labeled RFC 9421 signature + the hop's public key, selected by its `keyid` thumbprint in the key directory named by the hop's own `Signature-Agent` member).
 
 ### Inside SSP-Alpha's Exchange
 
@@ -766,12 +767,12 @@ The request body is identical to the direct case; the forwarding chain lives in
 2. Verify the RFC 9421 HTTP Message Signature (alg=ed25519) on the request:
    - Fetch public key from the WBA directory at
      claude.ai/.well-known/http-message-signatures-directory
-     (domain from the covered Signature-Agent header, key by keyid thumbprint)
+     (origin from the covered Signature-Agent member, key by keyid thumbprint)
    - Ed25519 verify -> pass
 2b. Verify forwarding signature chain (if any forwarding hops added labeled signatures):
    - For each hop's labeled RFC 9421 signature: look up the public key by its
-     keyid thumbprint in the Exchange's configured key set (Signature-Agent
-     stays the agent's directory)
+     keyid thumbprint in the key directory named by that hop's own
+     Signature-Agent member
    - Ed25519 verify each hop's signature -> pass
 2c. Verify `agent_request_acceptance` when the request carries it (this example
    omits the optional field): Ed25519 verify the signed request set against the
@@ -864,7 +865,8 @@ Agent -> CDN: GET https://cdn.techcrunch.com/server/premium/ai-regulation-2026.h
               &kid=vJ3xR1mQ...
               &sig=k7Qm2xR9vT4nB8aL...
               Header: X-FORA-Agent-Key: <agent public key, base64url>
-              Header: Signature-Input: sig1=("@method" "@target-uri");keyid=...;alg="ed25519";created=...;expires=...
+              Header: Signature-Agent: sig1="https://claude.ai"
+              Header: Signature-Input: sig1=("@method" "@target-uri" "signature-agent";key="sig1");created=...;expires=...;keyid=...;alg="ed25519";nonce=...;tag="web-bot-auth"
               Header: Signature: sig1=:<standard base64>:
 
 Edge Function:
@@ -873,8 +875,8 @@ Edge Function:
   3. Verify the Ed25519 signature over "GET\n<URL without sig, query sorted>" -> PASS
   4. Check expiry: exp > now? -> PASS (URL valid for 5 minutes)
   5. Check agent identity binding:
-     thumbprint(presented public key) == agent_id? -> PASS
-     Verify the RFC 9421 signature with that key (proof of possession) -> PASS
+     thumbprint(presented public key) == agent_id == keyid? -> PASS
+     Verify the Web Bot Auth signature with that key (proof of possession) -> PASS
      (The agent must hold the private half; presenting the public key is not enough)
   6. Strip agent_id, exp, kid, sig -> CDN serves content from S3/origin
 
diff --git a/website/src/content/docs/protocol/standards-layering.mdx b/website/src/content/docs/protocol/standards-layering.mdx
index f47be6f3..d24c9241 100644
--- a/website/src/content/docs/protocol/standards-layering.mdx
+++ b/website/src/content/docs/protocol/standards-layering.mdx
@@ -29,11 +29,11 @@ MCP Interface       = "Here's how to access FORA from any MCP-capable agent with
 
 C2PA and FORA are orthogonal: C2PA proves **what content IS** (provenance, creator identity, transformation history). FORA manages **what you can DO with it** (commercial access, pricing, transaction, dispute). The [`fora-c2pa-v1` extension profile](/protocol/ext-c2pa/) bridges them -- C2PA validation results are carried in FORA attestations, and C2PA training/mining restrictions are enforced through FORA access controls.
 
-### WebBotAuth Compatibility
+### Web Bot Auth Conformance
 
-The IETF [WebBotAuth working group](https://datatracker.ietf.org/wg/webbotauth/about/) (formed 2025, standards track targeting April 2026) is standardising cryptographic bot identity -- bots sign HTTP requests using RFC 9421 HTTP Message Signatures with Ed25519, and publish keys at a well-known endpoint. Cloudflare is already implementing it.
+The IETF [webbotauth working group](https://datatracker.ietf.org/wg/webbotauth/about/) is standardising cryptographic bot identity: bots sign HTTP requests with RFC 9421 HTTP Message Signatures and publish their keys in a directory at a well-known path. Its only adopted document is [draft-ietf-webbotauth-httpsig-protocol-00](https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/00/) (1 September 2026), and that version is the one FORA targets.
 
-**FORA agents are automatically WebBotAuth-compliant.** FORA uses the identical crypto stack: RFC 9421 HTTP Message Signatures, Ed25519 (EdDSA), and JWK-formatted keys at a well-known endpoint. When WebBotAuth ships as an RFC, FORA agents will be recognised as authenticated bots by any CDN or origin server that implements it -- without any FORA-specific integration on the publisher side. WebBotAuth solves identity (Layer 2); FORA adds the transaction layer (Layer 4) on top of that identity.
+Every FORA request signature is a conformant signature under that draft, so a CDN or origin that verifies Web Bot Auth can verify a FORA agent without FORA-specific integration. In the other direction, FORA accepts signatures from any Web Bot Auth library, provided that on a FORA RPC the signature also covers the request method, target URI, body digest and `Authorization` header. FORA asks for those components through Web Bot Auth's own `Accept-Signature` mechanism. Conformance does not come from sharing the cryptography: it depends on the header forms, the covered components, the signature parameters and the directory format, which [Authentication](/protocol/authentication/#the-web-bot-auth-profile) specifies, together with FORA's one deliberate departure from the draft. The SDKs released as v1.0.8 do not implement that profile yet, and Authentication lists the differences. Web Bot Auth solves identity (Layer 2); FORA adds the transaction layer (Layer 4) on top of that identity.
 
 ## How They Compose
 
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index bec9f98c..d8a29223 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -17,7 +17,7 @@ Without Broker (direct, single exchange):
 
 ## Multi-Hop Routing
 
-Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. The forwarding chain lives entirely in the HTTP layer as a **stack of [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) HTTP Message Signatures** — there is no in-message hop list. Each party that originates or forwards the request adds **one** labeled signature (`Signature` / `Signature-Input`, e.g. `fora-agent`, `fora-broker-1`). Each forwarder's signature covers the request essentials (`@method`, `@authority`, `@path`, `Content-Digest`) **plus the previous hop's signature**, so the chain is ordered and tamper-evident: no hop can be reordered, dropped, or inserted without invalidating a downstream signature. The `keyid` on each signature is the key's RFC 7638 thumbprint. The request carries **one** covered `Signature-Agent` header — the agent's WBA directory at `{domain}/.well-known/http-message-signatures-directory`, forwarded unchanged by every relay — so the Exchange resolves the agent's key there, and takes each forwarding hop's key from the key set it is configured with (for example, Brokers registered with it). The Exchange verifies **every** signature and confirms the chain is contiguous. The ordered set of signatures *is* the forwarding chain.
+Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. The forwarding chain lives entirely in the HTTP layer as a **stack of [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) HTTP Message Signatures** — there is no in-message hop list. Each party that originates or forwards the request adds **one** labeled signature, and each is a conformant [Web Bot Auth](/protocol/authentication/#the-web-bot-auth-profile) signature with its own `Signature-Agent` member naming its own key directory. Each forwarder's signature covers the request components FORA requires on the route **plus the previous hop's signature**, so the chain is ordered and tamper-evident: no hop can be reordered, dropped, or inserted without invalidating a downstream signature. The Exchange resolves each signature's key in the directory that signature's own member names, verifies **every** signature, and confirms the chain is contiguous. The ordered set of signatures *is* the forwarding chain. The exact covered components and the verification steps are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 **Chain-depth caps.** Two fields bound how deep a chain may go:
 
@@ -54,12 +54,12 @@ Content-Type: application/json
 ```
 
 Key fields:
-- `requester.id` + `requester.domain` -- uniquely identifies the agent; the Exchange fetches the Ed25519 public key from the signer's WBA directory at `{domain}/.well-known/http-message-signatures-directory` (the domain resolved from the covered `Signature-Agent` header) to verify the request's RFC 9421 HTTP Message Signature
+- `requester.id` + `requester.domain` -- uniquely identifies the agent; the Exchange fetches the Ed25519 public key from the signer's key directory at `{origin}/.well-known/http-message-signatures-directory` (the origin named by the `Signature-Agent` member the signature covers) to verify the request's RFC 9421 HTTP Message Signature
 - `ResourceQuery.uris` -- the content URI(s) being requested
 - `acceptable_restrictions` -- the restrictions the agent is willing to accept, grouped by axis; axis `FUNCTION` carries the intended use (RAG, training, search, etc.)
 - `requester.scopes` -- entitlement scopes; `["*"]` means unrestricted public access
 - billing carries no request field: the Exchange resolves the caller's account (the `billing_ref` minted at `ExchangeService.Register`) from the verified request signature, never from anything the caller sends
-- request authentication -- an RFC 9421 HTTP Message Signature over the request (the agent's key is published in its WBA directory); when the request is forwarded, each hop adds its own labeled HTTP Message Signature, and the ordered stack of these header signatures is the forwarding chain (no in-message hop list)
+- request authentication -- an RFC 9421 HTTP Message Signature over the request that follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) (the agent's key is published in its key directory); when the request is forwarded, each hop adds its own labeled HTTP Message Signature, and the ordered stack of these header signatures is the forwarding chain (no in-message hop list)
 
 ### Response (`ResourceResponse`)
 
diff --git a/website/src/content/docs/protocol/walkthrough-v1.mdx b/website/src/content/docs/protocol/walkthrough-v1.mdx
index cd21af5b..0af06165 100644
--- a/website/src/content/docs/protocol/walkthrough-v1.mdx
+++ b/website/src/content/docs/protocol/walkthrough-v1.mdx
@@ -87,7 +87,7 @@ The agent sends a `ResourceQuery` to the Exchange with its identity in the `Requ
 - **`ResourceQuery.uris`** — the specific resources being requested (a sibling of `requester`, not part of the identity envelope).
 - **`acceptable_restrictions`** — the query's restriction tolerances (here axis `FUNCTION` with `ai-input`); a sibling of `requester`.
 - **`scopes`** — `["*"]` means unrestricted public access. No subscription, no entitlement filtering.
-- **Request signature** — an RFC 9421 HTTP Message Signature over the HTTP request (method, target URI, and a `Content-Digest` of the body), carried in the `Signature` / `Signature-Input` headers. Proves the request came from this agent. The `Requester` message itself carries no signature field.
+- **Request signature** — an RFC 9421 HTTP Message Signature over the HTTP request (method, target URI, a `Content-Digest` of the body, the `Authorization` header and the agent's `Signature-Agent` member), carried in the `Signature` / `Signature-Input` / `Signature-Agent` headers and made to the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile). Proves the request came from this agent. The `Requester` message itself carries no signature field.
 - **No `delegation` field** — this agent acts on its own behalf, not under a delegated credential.
 
 ### Step 3 — ResourceResponse
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 646d1f01..03f50c3a 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -6,6 +6,82 @@ description: "FORA protocol changelog"
 This page contains curated public release notes. For the exhaustive maintainer
 and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protocol/protocol/blob/main/proto/CHANGELOG.md).
 
+## Unreleased
+
+**The documentation now specifies a Web Bot Auth profile for request signatures
+(docs only in this entry; the SDK and wire changes follow).** The Authentication
+page said FORA was "automatically compatible" with Web Bot Auth and that "no
+changes to FORA's authentication are required". That was not true. A Web Bot Auth
+verifier refuses a FORA signature, and a FORA verifier refuses a signature from a
+Web Bot Auth library. The pages also disagreed with each other: Transaction Flow
+and the Exchange request flows said each hop covers `@method`, `@authority`,
+`@path` and `Content-Digest`, while Authentication required `@method`,
+`@target-uri`, `content-digest`, `authorization` and `signature-agent`.
+
+The target is draft-ietf-webbotauth-httpsig-protocol-00 (1 September 2026), the
+only document the IETF webbotauth working group has adopted. Authentication now
+specifies the profile in one place, and the other pages refer to it:
+
+- Every FORA request signature is a conformant Web Bot Auth signature.
+  `Signature-Agent` is a structured-field dictionary, `<label>="https://<origin>"`,
+  covered as `"signature-agent";key="<label>"`. The signature covers `@target-uri`
+  or `@authority`, and carries `created`, `expires`, `keyid` (the RFC 7638
+  thumbprint), `alg="ed25519"`, `tag="web-bot-auth"` and a fresh 64-byte `nonce`.
+  Its lifetime is a few minutes.
+- A FORA RPC signature also covers `@method`, `@target-uri`, `content-digest` and
+  `authorization`. This is FORA policy on top of Web Bot Auth, advertised through
+  `Accept-Signature`. A bodiless request at the publisher edge needs only the Web
+  Bot Auth base.
+- Signers use a `Signature-Agent` member key equal to the signature label.
+  Verifiers also accept a member key that differs from the label, a signature
+  without a nonce, and a member with `type=directory`. The legacy sf-string
+  `Signature-Agent` is accepted on a direct single-hop call only: a relay
+  refuses it, because it cannot add its own member without breaking the agent's
+  signature, and answers with `Accept-Signature` asking for the dictionary form.
+  Verifiers refuse a signature with no `tag`, and a `Signature-Agent` member that
+  is not an https origin, and answer a missing component with `Accept-Signature`
+  listing what they require. `Signature-Agent` is never empty; an empty
+  `Authorization` stays valid.
+- Each forwarding hop adds its own `Signature-Agent` member and a signature that
+  covers the request components, its own member, and the previous hop's
+  `Signature` together with its `Signature-Input` member and every component it
+  lists, as WG-00 §5.2.2 requires. Some WBA libraries, for example Cloudflare's
+  `web-bot-auth` 0.2.0, refuse a signature that covers more than one
+  `Signature-Agent` member; that affects only the hop signature, which the
+  Exchange verifies, while the agent's own signature passes them on every hop.
+  The Exchange resolves each hop's key in the directory that hop names, not in a
+  configured key set.
+- The retrieval proof of possession at the publisher edge is a full Web Bot Auth
+  signature plus `@method` and `@target-uri`. The edge keeps verifying offline
+  with the key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint
+  equals both the signature `keyid` and the delivery URL's `agent_id`. A generic
+  WBA verifier accepts the same signature by resolving the agent's directory.
+- Key directories are served over https at
+  `/.well-known/http-message-signatures-directory`, answer `200` without a
+  redirect, use the media type
+  `application/http-message-signatures-directory+json`, and carry a response
+  signature per key with `tag="http-message-signatures-directory"`. Each key's
+  JWK `alg` stays `EdDSA`, the JOSE name RFC 7517 §4.4 defines. This is a known,
+  deliberate deviation from WG-00 §5.5.1, which restricts that member to HTTP
+  Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
+  reference library. It is the only deviation from WG-00.
+
+Authentication includes a complete signed request, the same request after a
+Broker hop, and a signed directory response, all with real values that can be
+verified.
+
+**Upcoming profile change (not in this release).** The SDKs released as v1.0.8
+do not implement the profile. They send `Signature-Agent` as a bare URL, set no
+`tag`, use a 16-byte nonce, require all five FORA components on every signature,
+require the labels `sig1` to `sigN`, follow directory redirects, resolve a
+forwarding hop's key from a configured key set, and sign the retrieval proof of
+possession over `@method` and `@target-uri` only. The reference directories are
+served as `application/jwk-set+json`. The SDK signers, verifiers, directory
+resolvers and shared test vectors change in a coordinated release, together with
+the reference implementation. The change is a hard cut with no transition
+window: once it ships, verifiers refuse the bare unquoted `Signature-Agent` that
+v1.0.8 sends, so v1.0.8 clients must upgrade.
+
 ## v1.0.8
 
 **Request signatures carry an RFC 9421 `nonce` (SDK fix; no wire change for
diff --git a/website/src/content/docs/reference/fora-json-example.mdx b/website/src/content/docs/reference/fora-json-example.mdx
index a97cb987..e29a7f97 100644
--- a/website/src/content/docs/reference/fora-json-example.mdx
+++ b/website/src/content/docs/reference/fora-json-example.mdx
@@ -52,11 +52,11 @@ An agent's manifest is much smaller: a role marker. Its signing keys are not her
 
 ## The WBA Directory
 
-Signing keys are **not** carried in `fora.json`. Each participant publishes its keys in a separate, pure WBA directory — a JWK Set served at `/.well-known/http-message-signatures-directory` with `Content-Type: application/jwk-set+json`. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`), not by a `kid` label, and the optional emergency revocation list now lives here as `revocation_url`:
+Signing keys are **not** carried in `fora.json`. Each participant publishes its keys in a separate, pure WBA directory — a JWK Set served at `/.well-known/http-message-signatures-directory` with `Content-Type: application/http-message-signatures-directory+json`. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`), not by a `kid` label, and the optional emergency revocation list now lives here as `revocation_url`. Each key carries `alg` `EdDSA`, the JOSE name RFC 7517 defines, which is a known, deliberate deviation from WG-00 §5.5.1 (see [Key Directory](/protocol/authentication/#key-directory)). An example:
 
 ```json
 // GET /.well-known/http-message-signatures-directory
-// Content-Type: application/jwk-set+json
+// Content-Type: application/http-message-signatures-directory+json
 {
   "keys": [
     {
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 75b3beb1..f9af3d1b 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -324,7 +324,7 @@ How to open an account at an Exchange, published as the optional `account_regist
 
 ### WBAFile
 
-The pure WBA directory, served at `/.well-known/http-message-signatures-directory` (`Content-Type: application/jwk-set+json`). Holds each participant's inline signing keys and an optional emergency-revocation pointer. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`).
+The pure WBA directory, served at `/.well-known/http-message-signatures-directory` (`Content-Type: application/http-message-signatures-directory+json`). Holds each participant's inline signing keys and an optional emergency-revocation pointer. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`). Each key carries `alg` `EdDSA`, the JOSE name RFC 7517 defines, which is a known, deliberate deviation from WG-00 §5.5.1 (see [Key Directory](/protocol/authentication/#key-directory)).
 
 | Field | Type | Number | Description |
 |---|---|---|---|
diff --git a/website/src/data/standards.mjs b/website/src/data/standards.mjs
index dddb9c2a..046a9b8d 100644
--- a/website/src/data/standards.mjs
+++ b/website/src/data/standards.mjs
@@ -22,12 +22,16 @@ export const STANDARDS = [
   { id: 'rfc-7638', name: 'RFC 7638', title: 'JSON Web Key (JWK) Thumbprint', url: rfc(7638), aliases: ['RFC 7638'] },
   { id: 'rfc-7800', name: 'RFC 7800', title: 'Proof-of-Possession key semantics for JWTs (cnf)', url: rfc(7800), aliases: ['RFC 7800'] },
   { id: 'rfc-8032', name: 'RFC 8032', title: 'Edwards-Curve Digital Signature Algorithm (EdDSA / Ed25519)', url: rfc(8032), aliases: ['RFC 8032', 'EdDSA', 'Ed25519', 'ed25519'] },
+  { id: 'rfc-8037', name: 'RFC 8037', title: 'CFRG Elliptic Curve keys in JOSE (OKP / Ed25519 JWK and thumbprint)', url: rfc(8037), aliases: ['RFC 8037'] },
   { id: 'rfc-8785', name: 'RFC 8785', title: 'JSON Canonicalization Scheme (JCS)', url: rfc(8785), aliases: ['RFC 8785', 'JCS'] },
   { id: 'rfc-9052', name: 'RFC 9052', title: 'CBOR Object Signing and Encryption (COSE)', url: rfc(9052), aliases: ['RFC 9052', 'COSE'] },
   { id: 'rfc-9421', name: 'RFC 9421', title: 'HTTP Message Signatures', url: rfc(9421), aliases: ['RFC 9421'] },
   { id: 'rfc-9449', name: 'RFC 9449', title: 'OAuth 2.0 Demonstrating Proof of Possession (DPoP)', url: rfc(9449), aliases: ['RFC 9449'] },
+  { id: 'rfc-9530', name: 'RFC 9530', title: 'Digest Fields (Content-Digest)', url: rfc(9530), aliases: ['RFC 9530'] },
   { id: 'rfc-9635', name: 'RFC 9635', title: 'Grant Negotiation and Authorization Protocol (GNAP)', url: rfc(9635), aliases: ['RFC 9635'] },
+  { id: 'rfc-9651', name: 'RFC 9651', title: 'Structured Field Values for HTTP', url: rfc(9651), aliases: ['RFC 9651'] },
   { id: 'rfc-9676', name: 'RFC 9676', title: 'LEX: a URN namespace for sources of law', url: rfc(9676), aliases: ['RFC 9676'] },
+  { id: 'webbotauth-httpsig-protocol-00', name: 'draft-ietf-webbotauth-httpsig-protocol-00', title: 'HTTP Message Signatures for Bots (Web Bot Auth), IETF webbotauth WG draft, 1 September 2026', url: 'https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/00/', aliases: ['draft-ietf-webbotauth-httpsig-protocol-00'] },
   { id: 'c2pa', name: 'C2PA', title: 'Coalition for Content Provenance and Authenticity', url: 'https://c2pa.org/specifications/', aliases: ['C2PA'] },
   { id: 'spdx', name: 'SPDX', title: 'Software Package Data Exchange license list', url: 'https://spdx.org/licenses/', aliases: ['SPDX'] },
   { id: 'iso-3166', name: 'ISO 3166', title: 'Country codes (alpha-2)', url: 'https://www.iso.org/iso-3166-country-codes.html', aliases: ['ISO 3166'] },

From bff7451a54feecb4975dc275bc14c324bfb07a82 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Thu, 1 Oct 2026 20:23:01 -0400
Subject: [PATCH 002/164] Let the Broker sign its own re-packaged request
 instead of chaining

WG-00 section 5.2.2 lets a signer cover another signature only when it
leaves every component that signature covers unchanged. A signer that
changed one of them must not cover the inner signature; it signs the
request on its own terms and leaves the inner signature untouched.

The Broker posts to the Exchange's URL with a new body, so it changes
what the agent's signature covers. Its signature now covers its own
request components and only its own Signature-Agent member, and the
agent's signature headers travel untouched and uncovered. The Exchange
authenticates the caller as the Broker and takes the agent's consent
from the AgentAcceptance signed into the body, which does not depend on
the route. A party that forwards a request unchanged may still cover
the previous signature, and only then do the signatures form a chain.

Regenerate the Broker example with a re-packaged body and a signature
that covers one member, which Cloudflare's web-bot-auth verifier
accepts, and drop the note that said it refused the Broker. Remove the
claim that the signatures form a forwarding chain from every page that
describes the Broker path, and update both changelog entries.
---
 proto/CHANGELOG.md                            | 30 ++++---
 .../architecture/production-architecture.mdx  |  4 +-
 .../docs/components/broker/overview.mdx       | 54 ++++++------
 .../docs/components/exchange/overview.mdx     |  4 +-
 .../components/exchange/request-flows.mdx     | 46 ++++++-----
 .../for-exchange-operators.mdx                | 11 +--
 .../docs/getting-started/what-is-fora.mdx     |  2 +-
 .../content/docs/protocol/authentication.mdx  | 82 ++++++++++---------
 .../docs/protocol/role-composition.mdx        |  2 +-
 .../docs/protocol/scenario-walkthrough.mdx    | 34 ++++----
 .../docs/protocol/transaction-flow.mdx        |  6 +-
 .../protocol/walkthrough-due-diligence.mdx    |  2 +-
 .../src/content/docs/reference/changelog.mdx  | 30 ++++---
 .../src/content/docs/reference/proto-fora.mdx |  2 +-
 .../content/docs/security/threat-model.mdx    |  8 +-
 15 files changed, 164 insertions(+), 153 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index f4a2b498..3ca3accf 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -36,15 +36,21 @@ specifies the profile in one place, and the other pages refer to it:
   is not an https origin, and answer a missing component with `Accept-Signature`
   listing what they require. `Signature-Agent` is never empty; an empty
   `Authorization` stays valid.
-- Each forwarding hop adds its own `Signature-Agent` member and a signature that
-  covers the request components, its own member, and the previous hop's
-  `Signature` together with its `Signature-Input` member and every component it
-  lists, as WG-00 §5.2.2 requires. Some WBA libraries, for example Cloudflare's
-  `web-bot-auth` 0.2.0, refuse a signature that covers more than one
-  `Signature-Agent` member; that affects only the hop signature, which the
-  Exchange verifies, while the agent's own signature passes them on every hop.
-  The Exchange resolves each hop's key in the directory that hop names, not in a
-  configured key set.
+- Forwarding follows WG-00 §5.2.2. A party that forwards a request unchanged
+  in every component a previous signature covers MAY cover that signature, and
+  then covers its `Signature-Input` and every component it lists as well. A relay
+  that re-packages the request signs its own request on its own terms. FORA's
+  Broker re-packages every request (it posts to the Exchange's URL with a new
+  body), so its signature covers its own request components and only its own
+  `Signature-Agent` member, and it leaves the agent's signature headers
+  untouched. Every Broker signature therefore carries exactly one
+  `Signature-Agent` member and passes single-member WBA verifiers such as
+  Cloudflare's `web-bot-auth`. The Exchange authenticates the caller as the
+  Broker and takes the agent's consent to a transaction from the
+  `AgentAcceptance` signed into the body, which does not depend on the route. A
+  delegated request through a Broker needs the agent to have delegated to the
+  Broker's key. The Exchange resolves each signer's key in the directory that
+  signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
   signature plus `@method` and `@target-uri`. The edge keeps verifying offline
   with the key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint
@@ -60,9 +66,9 @@ specifies the profile in one place, and the other pages refer to it:
   Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
   reference library. It is the only deviation from WG-00.
 
-Authentication includes a complete signed request, the same request after a
-Broker hop, and a signed directory response, all with real values that can be
-verified.
+Authentication includes a complete signed request, the request a Broker
+re-packaged and signed for the Exchange, and a signed directory response, all
+with real values that can be verified.
 
 **Upcoming profile change (not in this release).** The SDKs released as v1.0.8
 do not implement the profile. They send `Signature-Agent` as a bare URL, set no
diff --git a/website/src/content/docs/architecture/production-architecture.mdx b/website/src/content/docs/architecture/production-architecture.mdx
index 158250bc..cf363511 100644
--- a/website/src/content/docs/architecture/production-architecture.mdx
+++ b/website/src/content/docs/architecture/production-architecture.mdx
@@ -53,14 +53,14 @@ Every party in the protocol authenticates via Ed25519 key pairs. Each party anno
 | Party | Key Announcement | Signs | Verifier |
 |---|---|---|---|
 | **Requester** (Agent or other client) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`) | RFC 9421 HTTP Message Signature (Ed25519) over the HTTP request (`@method`, `@target-uri`, `content-digest` — request body bound via `content-digest`) | Exchange |
-| **Intermediary** (e.g. Broker) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`, same format) | each intermediary adds its own RFC 9421 HTTP Message Signature (Ed25519) to the request — the forwarding chain is the stack of signatures, each covering the request plus the prior hop's signature | Exchange |
+| **Intermediary** (e.g. Broker) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`, same format) | a Broker re-packages each request and signs it with its own RFC 9421 HTTP Message Signature (Ed25519), covering its own request and only its own `Signature-Agent` member; the agent's consent rides in the body as `AgentAcceptance` | Exchange |
 | **Exchange** | `{domain}/.well-known/fora.json` (`role=ROLE_EXCHANGE`); offer-signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory` | `exchange_signature` on every Offer | Agent, Broker |
 | **Provider** | `{domain}/.well-known/fora.json` (`role=ROLE_PUBLISHER`) | Authorization declaration (not signatures) | Agent, Exchange |
 | **Verification Vendor** | WBA directory at `{domain}/.well-known/http-message-signatures-directory` | `ResourceAttestation.signature` on catalog content (v1.0) | Exchange, Agent |
 
 **Verification at Exchange:**
 - **Requester signature** — Exchange verifies the RFC 9421 HTTP Message Signature on the request (carried in HTTP headers, not a message field) against the requester's published Ed25519 key in its WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`), the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
-- **Forwarding chain** — when the request passed through intermediaries, Exchange verifies every RFC 9421 HTTP Message Signature on the request (carried as a stack of labeled signatures in HTTP headers, each covering the request plus the prior hop's signature), proving the forwarding path is legitimate and tamper-evident
+- **Forwarding** — when a Broker relayed the request, the Exchange verifies the Broker's own RFC 9421 HTTP Message Signature on the re-packaged request and the agent's `AgentAcceptance` in the body. Only on unchanged forwarding, where each hop covers the signature before it, does it also verify a tamper-evident chain of signatures (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
 - **Delegation JWT** — when a `Delegation` token is attached, Exchange verifies the authority JWT signature against the principal's published Ed25519 key (`principal_domain`)
 - **Scope-based access control** — Exchange filters its catalog by the requester's `scopes`. Resources outside the requester's scopes are not returned (the requester never learns they exist)
 
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 4fbaf618..f09bc8b7 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -135,40 +135,38 @@ The sequence:
 
 A single-Exchange commit is the degenerate case: the projection is the whole set, and the SDK clients attach the acceptance there too.
 
-## Request Signing and the Forwarding Signature Stack
+## Request Signing
 
-FORA uses a two-layer signing model: the **agent's request signature** proves who originated the request, and the **forwarding signature stack** proves which intermediaries forwarded it.
+FORA uses a two-layer model: the **agent's request signature** authenticates the agent to the Broker, and the **Broker's own signature** authenticates the Broker to the Exchange. The agent's consent to a transaction travels in the body, not in the headers.
 
 ### Request Authentication
 
-The `Requester` message carries identity and entitlements only (`id`, `domain`, `type`, `scopes`, optional `delegation`) — it has **no** signature field. The request is authenticated by an RFC 9421 HTTP Message Signature (alg=ed25519) carried in the headers and made to the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile). The Exchange verifies it against the public key published in the signer's key directory at `{origin}/.well-known/http-message-signatures-directory`, with the origin taken from the `Signature-Agent` member the signature covers.
+The `Requester` message carries identity and entitlements only (`id`, `domain`, `type`, `scopes`, optional `delegation`) — it has **no** signature field. The request is authenticated by an RFC 9421 HTTP Message Signature (alg=ed25519) carried in the headers and made to the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile). A verifier checks it against the public key published in the signer's key directory at `{origin}/.well-known/http-message-signatures-directory`, with the origin taken from the `Signature-Agent` member the signature covers.
 
-The Broker passes `Requester` through unchanged -- it never modifies the requester's identity, scopes, or delegation -- and adds its own forwarding signature in the headers (see below).
+The Broker passes `Requester` through unchanged -- it never modifies the requester's identity, scopes, or delegation.
 
-### Forwarding Signature Stack (RFC 9421)
+### The Broker Signs Its Own Request (RFC 9421)
 
-Multi-hop forwarding is carried entirely in the HTTP headers, not in the message body. Each forwarding party adds one labeled RFC 9421 HTTP Message Signature, itself a Web Bot Auth signature, covering the request **and the prior hop's signature**. The ordered set of these labeled signatures *is* the forwarding chain -- there is no `intermediaries` field on `ResourceQuery`. The covered components and verification steps are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
+The Broker re-packages every request it relays: it posts to the Exchange's URL with a new body. The values the agent's signature covers therefore change, and WG-00 §5.2.2 forbids the Broker to cover the agent's signature. The Broker signs its own request on its own terms, as [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding) specifies:
 
-Each labeled signature, via its RFC 9421 signature parameters, effectively records:
+- **Label and member** -- it appends its own label and its own `Signature-Agent` member, naming its directory. It can append only to a dictionary, so it refuses a request whose `Signature-Agent` is the legacy single string and answers with `Accept-Signature` asking for the dictionary form.
+- **`keyid`** -- the Broker's RFC 7638 thumbprint, resolved in the key directory its own `Signature-Agent` member names
+- **`created`** -- when the Broker sent the request
+- **the covered components** -- its own request components (`@method`, `@target-uri`, `content-digest`, `authorization`) and only its own `Signature-Agent` member. It never covers the agent's `Signature-Agent`, `Signature-Input` or `Signature` members, and leaves them untouched.
 
-- **`keyid`** -- the intermediary's RFC 7638 thumbprint, resolved in the key directory that the intermediary's own `Signature-Agent` member names
-- **`created`** -- timestamp of when the intermediary forwarded the request
-- the covered components -- the request components FORA requires, the intermediary's own `Signature-Agent` member, and the preceding hop's `Signature` together with its `Signature-Input` member and every component it lists (WG-00 §5.2.2), chaining the hops together
-
-When the agent queries an Exchange directly, there are no forwarding signatures. When the request passes through a Broker, the Broker adds one labeled signature to the stack.
+Because the Broker's signature covers exactly one `Signature-Agent` member, single-member WBA verifiers such as Cloudflare's `web-bot-auth` library accept it. The Broker does not build a chain of signatures: its request is a new request.
 
 ```go
-// Broker adds one labeled RFC 9421 signature to the outgoing request headers when forwarding.
-func (o *Broker) signHop(req *http.Request, prevLabel string) {
-    label := "broker"
-    // Append this hop's own Signature-Agent member; the earlier members stay
-    // byte-for-byte as they arrived, because earlier signatures cover them.
+// Broker signs the re-packaged request it sends to an Exchange.
+func (o *Broker) signOutbound(req *http.Request) {
+    label := o.nextLabel(req) // e.g. "sig2" when the agent's "sig1" is present
+    // Append this Broker's own Signature-Agent member. The agent's member,
+    // Signature-Input and Signature are left untouched and are not covered.
     req.Header.Set("Signature-Agent",
-        req.Header.Get("Signature-Agent")+`, broker="https://`+o.domain+`"`)
-    // Covers the request components, this hop's own member, and the previous
-    // hop's Signature, its Signature-Input member and every component it
-    // lists (WG-00 §5.2.2), chaining this hop to the one before it.
-    sigInput, sig := o.rfc9421Sign(req, prevLabel, label) // Ed25519, keyid=o.thumbprint, tag="web-bot-auth"
+        req.Header.Get("Signature-Agent")+`, `+label+`="https://`+o.domain+`"`)
+    // Covers @method, @target-uri, content-digest, authorization and only
+    // "signature-agent";key=<label>.
+    sigInput, sig := o.rfc9421Sign(req, label) // Ed25519, keyid=o.thumbprint, tag="web-bot-auth"
     req.Header.Add("Signature-Input", sigInput)
     req.Header.Add("Signature", sig)
 }
@@ -176,14 +174,14 @@ func (o *Broker) signHop(req *http.Request, prevLabel string) {
 
 ### Exchange Verification
 
-The Exchange verifies both layers:
+The Exchange verifies:
 
-1. **Requester signature** -- verified against the public key in the agent's key directory at `{origin}/.well-known/http-message-signatures-directory` (origin from the agent's `Signature-Agent` member, key selected by the `keyid` thumbprint)
-2. **The forwarding signature stack** -- each labeled RFC 9421 signature is verified against the key its `keyid` thumbprint selects in the directory named by that hop's own `Signature-Agent` member, and the chained coverage is checked hop-by-hop.
+1. **The Broker's signature** -- against the key its `keyid` thumbprint selects in the directory named by the Broker's own `Signature-Agent` member. The Exchange authenticates the caller as the Broker. The agent's signature headers were computed over the request the agent sent, so they do not verify against the re-packaged request, and the Exchange attributes nothing to them.
+2. **The agent's consent** -- on an execute request, the `AgentAcceptance` the agent signed into each item, and `agent_request_acceptance` over the ordered set, both verified against the agent's directory. They do not depend on the route the request took. See [Projected execute requests](/protocol/authentication/#projected-execute-requests).
 
-All signatures must pass. The Exchange counts the number of forwarding hops in the stack against `max_hops` / `max_intermediary_hops` and rejects requests that exceed the limit.
+The Exchange counts the signatures in the stack against `max_hops` / `max_intermediary_hops` and rejects requests that exceed the limit. A delegated request reaches an Exchange through a Broker only when the agent has delegated to the Broker's key, because the Broker is the wire signer.
 
-The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). The Broker names that directory in its own `Signature-Agent` member on every request it forwards, so an Exchange resolves the Broker's key the same way it resolves any signer's. Whether the Exchange accepts the Broker as a forwarding hop is a separate decision, and it is the Exchange's own policy: it may, for example, require the Broker to be registered with it.
+The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). The Broker names that directory in its own `Signature-Agent` member on every request it sends, so an Exchange resolves the Broker's key the same way it resolves any signer's. Whether the Exchange accepts requests from the Broker is a separate decision, and it is the Exchange's own policy: it may, for example, require the Broker to be registered with it.
 
 ## Profile-Based Routing
 
@@ -376,7 +374,7 @@ sequenceDiagram
 | **Same protocol, transparent proxy** | The Exchange cannot distinguish Broker-mediated requests from direct agent requests. No special Exchange support needed. |
 | **Signed offer pass-through** | Exchange signatures cover pricing fields. The Broker cannot inflate prices without invalidating the signature. |
 | **Advisory budget enforcement** | The Broker pre-filters transactions by budget, but the Exchange is the authoritative enforcement point. No overspend occurs because the Exchange is the gatekeeper. |
-| **Ed25519 + forwarding signature stack** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature that follows the Web Bot Auth profile (covering `@method`/`@target-uri`/`content-digest`/`authorization` and its `Signature-Agent` member); Broker adds one labeled RFC 9421 HTTP Message Signature (covering the request plus the prior hop's signature) to the header stack. Exchange verifies both layers and counts hops against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
+| **Ed25519 request signatures, consent in the body** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature that follows the Web Bot Auth profile (covering `@method`/`@target-uri`/`content-digest`/`authorization` and its `Signature-Agent` member). The Broker re-packages the request and signs it with its own labeled signature, covering its own request and only its own `Signature-Agent` member. The Exchange authenticates the Broker, takes the agent's consent from the `AgentAcceptance` in the body, and counts signatures against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
 | **Partial results are normal** | If 3 of 5 Exchanges respond within the deadline, the Broker proceeds with 3 responses. Availability of any individual Exchange does not block the system. |
 
 ## Go Module Structure
diff --git a/website/src/content/docs/components/exchange/overview.mdx b/website/src/content/docs/components/exchange/overview.mdx
index 83699cf6..b16e443a 100644
--- a/website/src/content/docs/components/exchange/overview.mdx
+++ b/website/src/content/docs/components/exchange/overview.mdx
@@ -29,7 +29,7 @@ The Exchange implements the FORA v1.0 `ExchangeService` (4 RPCs: `DiscoverResour
 
 ## Component Architecture
 
-The Exchange Node has five internal modules. Each module owns a distinct responsibility. Modules communicate via Go interfaces — no internal RPC, no message queues, no shared mutable state between modules. Identity verification uses the `Requester` model (Ed25519 domain-bound keys) with optional delegation (JWT) and verification of the stacked RFC 9421 HTTP Message Signatures that record the forwarding chain.
+The Exchange Node has five internal modules. Each module owns a distinct responsibility. Modules communicate via Go interfaces — no internal RPC, no message queues, no shared mutable state between modules. Identity verification uses the `Requester` model (Ed25519 domain-bound keys) with optional delegation (JWT) and verification of the RFC 9421 HTTP Message Signature of whichever party sent the request, the agent or a Broker.
 
 ```
 ┌──────────────────────────────────────────────────────────────────┐
@@ -122,7 +122,7 @@ Pink nodes are external dependencies. Everything else runs in-process.
 
 The Exchange sits between AI agents/Brokers and provider CDN infrastructure:
 
-1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), filters the catalog by the requester's scopes, and returns signed offers. If a `Delegation` is present, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before granting scoped access. When the request was forwarded through one or more intermediaries, each adds a labeled RFC 9421 HTTP Message Signature to the header stack (each covering the request plus the prior hop's signature); the Exchange verifies the whole stack to prove the request path and counts hops against `max_hops` / `max_intermediary_hops`
+1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), filters the catalog by the requester's scopes, and returns signed offers. If a `Delegation` is present, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before granting scoped access. When a Broker relayed the request, it re-packaged it and signed it with its own labeled RFC 9421 HTTP Message Signature; the Exchange authenticates the Broker by that signature, takes the agent's consent to a transaction from the `AgentAcceptance` in the body, and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
 2. The agent executes a transaction by calling `ExecuteTransaction` with a chosen offer — the Exchange verifies the offer signature, authorizes billing, logs the transaction, and returns a signed URL
 3. The agent fetches the resource using the signed URL — the delivery endpoint verifies the URL signature with the Exchange's published public key, holding nothing secret
 4. The agent reports usage by calling `ReportUsage` — the Exchange validates the report and updates the obligation state
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index d47c72b7..30596577 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -68,9 +68,9 @@ func (h *ExchangeHandler) DiscoverResources(
     }
 
     // 2. Requester identity. Verification already happened at the HTTP seam:
-    //    the SDK's verify middleware checked every RFC 9421 signature — the
-    //    requester's and the whole forwarding chain (the chain rules are in
-    //    Authentication > Multi-hop forwarding) — resolving each signer's key
+    //    the SDK's verify middleware checked the RFC 9421 signatures — the
+    //    sender's, and on unchanged forwarding the chain behind it (the rules
+    //    are in Authentication > Multi-hop forwarding) — resolving each signer's key
     //    by its signed keyid (an RFC 7638 thumbprint) in the key directory
     //    named by the `Signature-Agent` member that signature covers. The
     //    self-asserted Requester.domain field never drives key lookup.
@@ -256,34 +256,36 @@ type RequesterRecord struct {
 }
 ```
 
-### Forwarding Chain Verification
+### Forwarding Verification
 
-The forwarding chain lives entirely in the HTTP layer as a **stack of RFC 9421 HTTP Message Signatures** — there is no `intermediaries` field on the message. Each party that originates or forwards a `ResourceQuery` or `TransactionRequest` adds **one** labeled signature that conforms to Web Bot Auth to the request headers, with its own `Signature-Agent` member. Each forwarder's signature covers the request components FORA requires **plus the previous hop's signature**, so the ordered set of header signatures *is* the chain and cannot be reordered, dropped, or extended undetectably. The covered components and the chain rules are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). The Exchange MUST:
+Nothing about the route is carried in the message: there is no `intermediaries` field. Each party that sends a `ResourceQuery` or `TransactionRequest` signs it with **one** labeled signature that conforms to Web Bot Auth, with its own `Signature-Agent` member. The rules are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). In short:
 
-1. **Verify the requester's (originating) RFC 9421 HTTP Message Signature** — proves the original requester authorized the request. The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the requester's key directory at `{origin}/.well-known/http-message-signatures-directory`, where `{origin}` is the requester's `Signature-Agent` member, and verifies the Ed25519 signature.
+- **A Broker re-packages the request.** It posts to the Exchange's URL with a new body, so it does not cover the agent's signature. Its signature covers its own request components and only its own `Signature-Agent` member, and the agent's signature headers travel untouched. The agent's consent to a transaction is the `AgentAcceptance` the agent signed into each item of the body (with `agent_request_acceptance` for the ordered set), which verifies against the agent's directory whatever the route.
+- **A party that forwards unchanged MAY cover the previous signature.** If it does, it covers that signature's `Signature-Input` member and every component it lists as well, and the ordered set of such signatures forms a tamper-evident chain.
 
-2. **Verify every forwarding signature in the stack** — proves each intermediary (e.g., Broker) handled the request. For each labeled signature, the Exchange resolves its `keyid` thumbprint in the key directory named by that hop's own `Signature-Agent` member, verifies the Ed25519 signature, and confirms it covers the prior hop's `Signature`, `Signature-Input` member and every component that signature lists, so the chain is contiguous and ordered. Whether a hop may forward to this Exchange at all is the Exchange's own policy, for example only Brokers registered with it.
+The Exchange MUST:
 
-All signatures must pass for the request to proceed. If any verification fails — or the chain is not contiguous — the Exchange rejects the request with `CodeUnauthenticated`.
+1. **Verify the sender's signature** — the last label added. The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the key directory at `{origin}/.well-known/http-message-signatures-directory`, where `{origin}` is the `Signature-Agent` member that signature covers, verifies the Ed25519 signature, and authenticates the caller as that party. Whether a Broker may send to this Exchange at all is the Exchange's own policy, for example only Brokers registered with it.
+2. **On unchanged forwarding, verify every earlier signature and the chain.** Each earlier signature is verified independently in the same way, and each later one must cover the signature before it, its `Signature-Input` member and every component it lists. A signature that a re-packaging Broker left untouched is not attributed to anyone.
+3. **Verify `AgentAcceptance` on an execute request**, against the requester's directory, as [Projected execute requests](/protocol/authentication/#projected-execute-requests) describes.
 
-When only the originating signature is present, the requester is calling the Exchange directly — no intermediary was involved. Chain depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
+If a signature the Exchange relies on fails — or an unchanged-forwarding chain is not contiguous — the Exchange rejects the request with `CodeUnauthenticated`.
+
+When only the agent's signature is present, the requester is calling the Exchange directly — no intermediary was involved. Depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
 
 ```go
-// Forwarding-chain verification runs in the SDK's verify middleware at the
-// HTTP seam, before any handler — the ordered stack of RFC 9421 HTTP
-// Message Signatures in the request headers IS the chain. The middleware:
-//   1. Parses the Signature / Signature-Input headers into ordered, labeled hops.
-//   2. Verifies the originating (requester) signature against the key in
-//      the key directory its Signature-Agent member names, at
+// Request-signature verification runs in the SDK's verify middleware at the
+// HTTP seam, before any handler. The middleware:
+//   1. Parses the Signature / Signature-Input headers into labeled signatures.
+//   2. Verifies the sender's signature (the last label) against the key in
+//      the directory its own Signature-Agent member names, at
 //      {origin}/.well-known/http-message-signatures-directory.
-//   3. For each subsequent labeled signature, resolves its keyid in the
-//      directory named by that hop's own Signature-Agent member, verifies the
-//      Ed25519 signature, and confirms it covers the prior hop's signature
-//      (contiguous + ordered).
-//   4. Counts the hops against max_hops / max_intermediary_hops.
+//   3. On unchanged forwarding, verifies each earlier signature the same way
+//      and confirms each later one covers the one before it.
+//   4. Counts the signatures against max_hops / max_intermediary_hops.
 // Any failure rejects the request with CodeUnauthenticated before the handler
-// runs. The handler reads the proven hops from the context:
-hops := helpers.AllSignaturesFromContext(ctx) // sig1..sigN, in chain order
+// runs. The handler reads the proven signatures from the context:
+hops := helpers.AllSignaturesFromContext(ctx)
 ```
 
 ### Delegation Verification
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index 3b4c0c9d..e8c198af 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -160,13 +160,14 @@ When a request includes a `Delegation` message (nested inside `Requester`), your
 
 This verification is entirely offline — no callback to the principal is required.
 
-### Forwarding Chain Verification
+### Forwarding Verification
 
-When the request carries more than one RFC 9421 HTTP Message Signature, it has passed through one or more intermediaries (e.g., agent to broker to your Exchange). Each forwarding party adds its own labeled signature to the request, covering the request plus the prior hop's signature; the ordered stack of signatures in the HTTP headers is the forwarding chain. Verify every signature on the request:
+When the request carries more than one RFC 9421 HTTP Message Signature, it has passed through one or more intermediaries (e.g., agent to broker to your Exchange). A Broker re-packages the request and signs it as its own, covering its own request and only its own `Signature-Agent` member; the agent's signature headers travel untouched and no longer match the request. The rules are in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding):
 
-1. For each signature, fetch the signer's public key from their WBA directory (the JWK Set at `{signer-domain}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
-2. Verify each RFC 9421 signature, proving the intermediary handled the request and the chain was not reordered, dropped from, or inserted into (any such tampering breaks a downstream signature)
-3. Enforce `max_intermediary_hops` by signature count — reject requests whose forwarding-signature count exceeds your published limit
+1. Verify the sender's signature, the last label added: fetch the signer's public key from the directory its own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and authenticate the caller as that party
+2. On an execute request, verify the agent's `AgentAcceptance` in the body against the requester's directory; that is the agent's consent, whatever route the request took
+3. On unchanged forwarding, where each hop covers the signature before it, verify every signature and that the chain was not reordered, dropped from, or inserted into
+4. Enforce `max_intermediary_hops` by signature count — reject requests whose signature count exceeds your published limit
 
 ### Scope-Based Catalog Filtering
 
diff --git a/website/src/content/docs/getting-started/what-is-fora.mdx b/website/src/content/docs/getting-started/what-is-fora.mdx
index ecbe57f1..1c9525ba 100644
--- a/website/src/content/docs/getting-started/what-is-fora.mdx
+++ b/website/src/content/docs/getting-started/what-is-fora.mdx
@@ -99,7 +99,7 @@ Every request carries a `Requester` message — a universal actor identity with
 
 **Delegation with JWTs** enables offline-verifiable, narrowable authorization. A principal (organization, IAM, upstream agent) issues a delegation JWT. Each holder in the chain can narrow permissions by issuing a child delegation JWT — restrict scopes, lower spend caps, shorten expiry — but can never widen them. Zero round trips to the original issuer, regardless of how many delegation levels deep.
 
-**Multi-hop forwarding** records request provenance when a request passes through intermediaries (e.g., agent to broker to Exchange) as a stack of RFC 9421 HTTP Message Signatures in the HTTP headers. Each forwarding party adds one labeled signature covering the request plus the prior hop's signature; the ordered set is the forwarding chain. The Exchange verifies the whole stack and counts hops against `max_hops` / `max_intermediary_hops`.
+**Multi-hop forwarding** is carried in the HTTP headers when a request passes through intermediaries (e.g., agent to broker to Exchange). Each party signs the request it sends with one labeled RFC 9421 HTTP Message Signature. A Broker re-packages the request and signs it as its own, and the agent's consent to a transaction travels in the body as `AgentAcceptance`. The Exchange verifies the sender's signature and counts signatures against `max_hops` / `max_intermediary_hops`.
 
 **`ext_critical`** flags extension keys that an Exchange MUST understand to process the request. See [Extension Profiles](/protocol/extension-profiles/) for details.
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 752e1e44..6490b585 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -203,7 +203,7 @@ This is entirely offline — no callback to the issuer. The verifier needs only
 
 **Binding across hops.** Each delegation re-binds to the next holder's key (`cnf.jkt` of the child = the next agent), so at every hop the bound key is whoever now signs the request. The chain of JWT signatures carries the binding forward — there is no point at which the token reverts to bearer form.
 
-**Which signature binds in a brokered request.** A forwarded request carries more than one RFC 9421 signature (the agent's, plus a hop signature from each intermediary). The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt`. In the **default broker pass-through** case the broker is a pure relay: it forwards the agent's delegation unchanged, the agent remains the terminal holder, and the **agent's** request signature is the one that must match `cnf.jkt` (the broker's hop signature is provenance only). Only if the agent explicitly **delegated to the broker** (the broker issues a child JWT bound to its own key and signs the request) does the broker become the terminal holder and its signature bind. Intermediaries never silently become the holder.
+**Which signature binds in a brokered request.** A forwarded request can carry more than one RFC 9421 signature (the agent's, plus one from each intermediary). The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt`. A relay that forwards the request unchanged forwards the agent's delegation unchanged, the agent remains the terminal holder, and the **agent's** request signature is the one that must match `cnf.jkt` (the relay's signature is provenance only). FORA's Broker re-packages the request and is its wire signer, so the check matches the Broker's key: a delegated request through a Broker requires the agent to have explicitly **delegated to the Broker** (the Broker holds a child JWT bound to its own key), the same rule [Projected execute requests](#projected-execute-requests) states. Intermediaries never silently become the holder.
 
 ### Delegation Denial Reasons
 
@@ -277,32 +277,40 @@ This distinction prevents information leakage on public Exchanges while allowing
 
 ## Multi-hop forwarding
 
-When a request passes through forwarding parties (e.g., Agent to Broker to Exchange), the forwarding chain is **not** carried in the message body at all. It lives entirely in the HTTP headers as a stack of [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421). This section is the one place the chain is specified; other pages refer to it.
+When a request passes through a forwarding party (e.g., Agent to Broker to Exchange), nothing about the forwarding is carried in the message body. Each party signs the request it sends with its own labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers. This section is the one place the rules for forwarding parties are specified; other pages refer to it.
 
 ### How It Works
 
-Each party that originates or forwards the request adds **one** labeled signature, and every one of them is a conformant WG-00 signature in its own right ([The Web Bot Auth Profile](#the-web-bot-auth-profile)):
+The agent signs first, under its own label (`sig1` in the examples on this page), and adds a member under that label to `Signature-Agent`, naming its directory. Every party after it adds its own label (`sig2` for the first hop in the examples), its own `Signature-Agent` member naming **its own** directory, and a signature that is a conformant WG-00 signature in its own right ([The Web Bot Auth Profile](#the-web-bot-auth-profile)). What that signature covers depends on whether the party changed the request. WG-00 §5.2.2 draws the line: a signer MAY cover another signature, and if it covers `"signature";key=X` it MUST also cover `"signature-input";key=X` and every component listed there. A signer that cannot, because it changed a value the inner signature was computed over, MUST NOT cover the inner signature. It signs the request on its own terms, and the inner signature is left untouched.
 
-1. The agent signs first, under its own label (`sig1` in the examples on this page). It adds a member under that label to `Signature-Agent`, naming its directory.
-2. Each forwarding hop adds its own label (`sig2` for the first hop in the examples), its own `Signature-Agent` member naming **its own** directory, and a signature that covers:
-   - the request components FORA requires on the route: `@method`, `@target-uri`, `content-digest` and `authorization`;
-   - its own member, `"signature-agent";key="<its label>"`;
-   - the previous hop's signature, `"signature";key="<previous label>"`, together with `"signature-input";key="<previous label>"` and every component the previous signature lists, which includes the previous hop's own `Signature-Agent` member. WG-00 §5.2.2 requires this union. A signature value alone does not identify the message it was computed over, so a hop that covered only the value would still verify after the headers were moved onto a different request.
-3. A hop accepts only a request whose `Signature-Agent` is a dictionary. It cannot add its own member to the legacy single-string form without changing the bytes the agent's signature covers, so it refuses that form and answers with `Accept-Signature` asking for the dictionary form ([What a FORA verifier accepts](#what-a-fora-verifier-accepts)).
-4. A hop never changes a value an earlier signature covers. It forwards the earlier `Signature-Agent` members, `Signature-Input` members and `Signature` members unchanged, and appends its own. A hop that has to change a covered value (a new body, for example) is not forwarding: see [Projected execute requests](#projected-execute-requests).
+#### A relay that re-packages the request: FORA's Broker
 
-Because every signature commits to the signature before it, the ordered set of signatures **is** the forwarding chain: it is tamper-evident and order-bound. You cannot reorder, remove, or insert a hop without breaking the chain. There is no separate per-hop timestamp or payload-signature field — the RFC 9421 signature itself carries that proof.
+FORA's Broker re-packages every request it relays. It posts to the Exchange's URL with a new body, so the values the agent's signature covers change, and WG-00 §5.2.2 forbids it to cover the agent's signature. The Broker signs its own request on its own terms:
 
-On a verbatim-forwarded path the agent signs `@target-uri` against the final recipient's endpoint (the Exchange), not the relay URL it dials. A message that terminates at the Broker, such as a `DiscoveryRequest`, is not forwarded: there the Broker is the final recipient and the agent signs the Broker's URL.
+1. Its signature covers its own request components, `@method`, `@target-uri`, `content-digest` and `authorization`, and exactly one `Signature-Agent` member, its own `"signature-agent";key="<its label>"`.
+2. It leaves the agent's `Signature-Agent` member, `Signature-Input` member and `Signature` member untouched, and never covers them. The agent's signature was computed over the request the agent sent, so it does not verify against the re-packaged request, and the Exchange does not rely on it.
+3. It appends its own member to `Signature-Agent`, which it can do only when the header is a dictionary. It refuses the legacy single-string form and answers with `Accept-Signature` asking for the dictionary form ([What a FORA verifier accepts](#what-a-fora-verifier-accepts)).
 
-The Exchange verifies the full chain by:
+The Exchange authenticates the wire caller as the Broker. Its proof that the agent consented to a transaction does not travel in the transport layer at all: it is the `AgentAcceptance` the agent signed into each item of the body, together with `agent_request_acceptance` for the ordered set ([Projected execute requests](#projected-execute-requests)). Those detached signatures verify against the agent's directory however the request travelled, so they do not depend on the topology. A discovery query moves no money and carries no consent.
 
-1. Reading each labeled signature and its `keyid` from `Signature` / `Signature-Input`
-2. For each signature, resolving its `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2)
-3. Verifying every signature independently against its own covered components and its own key, and confirming each later hop covers the prior hop's `Signature`, its `Signature-Input` member and every component it lists, plus the hop's own `Signature-Agent` member
-4. Enforcing depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting the signatures** in the stack
+Every Broker signature covers exactly one `Signature-Agent` member, so single-member WBA verifiers, such as Cloudflare's `web-bot-auth` library, accept it.
 
-Verifying a hop's signature proves which party forwarded the request. Whether that party may forward to this Exchange at all is the Exchange's own policy: an Exchange MAY accept forwarding hops only from Brokers registered with it.
+#### A relay that forwards the request unchanged
+
+A party that forwards a request unchanged in every component a previous signature covers MAY cover that signature. If it does, its signature covers its own request components, its own `Signature-Agent` member, and the previous signature: `"signature";key="<previous label>"`, `"signature-input";key="<previous label>"` and every component that signature lists, which includes the previous signer's `Signature-Agent` member. It forwards the earlier `Signature-Agent`, `Signature-Input` and `Signature` members unchanged and appends its own. On such a path the agent signs `@target-uri` against the final recipient's endpoint, not the relay URL it dials.
+
+When every hop covers the signature before it this way, the ordered set of signatures **is** the forwarding chain: it is tamper-evident and order-bound, and no hop can be reordered, removed or inserted without breaking a later signature. This applies only to unchanged forwarding. A re-packaging Broker does not chain; it starts a new request.
+
+### Verification at the Exchange
+
+The Exchange:
+
+1. Reads each labeled signature and its `keyid` from `Signature` / `Signature-Input`
+2. Resolves each signature's `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** covered `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2)
+3. Verifies each signature independently against its own covered components and its own key. It authenticates the caller by the signature of the party that sent the request, the last label added. On unchanged forwarding it also confirms that each hop covers the signature before it, its `Signature-Input` member and every component it lists. A signature left untouched by a re-packaging Broker is not attributed to anyone
+4. Enforces depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting the signatures** in the stack
+
+Verifying a hop's signature proves which party sent the request. Whether that party may send to this Exchange at all is the Exchange's own policy: an Exchange MAY accept requests from forwarding parties only when they are Brokers registered with it.
 
 When only the agent's signature is present, the agent is querying the Exchange directly — no broker was involved.
 
@@ -310,7 +318,7 @@ See [Multi-Hop Example (Broker)](#multi-hop-example-broker) below for the concre
 
 ### Projected execute requests
 
-The hop-signature stack above applies to requests forwarded **byte-for-byte**. Projection is the other case. When a Broker splits a mixed-Exchange `TransactionRequest` into per-Exchange subrequests, each subrequest has a new body, so the agent's original signature — which covered the original body through `Content-Digest` — cannot travel with it. There is no way to forward a projected body under the agent's HTTP signature, and the protocol does not ask for one.
+Projection is one form of the re-packaging described above. When a Broker splits a mixed-Exchange `TransactionRequest` into per-Exchange subrequests, each subrequest has a new body, so the agent's original signature — which covered the original body through `Content-Digest` — cannot travel with it. There is no way to forward a projected body under the agent's HTTP signature, and the protocol does not ask for one.
 
 Instead, each projected subrequest is a **new HTTP request its sender authors**. The projecting party — a Broker, or the agent itself when it splits its own set — computes the subrequest's `Content-Digest` and signs it with its own RFC 9421 signature, exactly as any sender does. The Exchange authenticates the wire caller as that sender.
 
@@ -327,7 +335,7 @@ Delegation is unchanged by projection: the holder-binding check still matches th
 
 ### Why headers, not message fields
 
-Request signatures are [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421), carried in HTTP headers — **not** fields on any protobuf message. This separates **identity semantics** (the `Requester` message: who is making the request, scopes, delegation) from **cryptographic proof** (the HTTP signature attesting the request is authentic). No FORA message has ever carried a request-signature field; the protobuf body carries identity only, and the forwarding chain is likewise a stack of labeled RFC 9421 signatures rather than an in-message hop list (see [Multi-hop forwarding](#multi-hop-forwarding)).
+Request signatures are [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421), carried in HTTP headers — **not** fields on any protobuf message. This separates **identity semantics** (the `Requester` message: who is making the request, scopes, delegation) from **cryptographic proof** (the HTTP signature attesting the request is authentic). No FORA message has ever carried a request-signature field; the protobuf body carries identity only, and forwarding is likewise carried in labeled RFC 9421 signatures rather than an in-message hop list (see [Multi-hop forwarding](#multi-hop-forwarding)).
 
 ### How RFC 9421 Signatures Work
 
@@ -396,7 +404,7 @@ The edge still verifies offline. The fetcher also presents its raw public key in
 
 Agents in the field run many WBA libraries and some send earlier forms of the protocol. A FORA verifier accepts the following, which WG-00 permits:
 
-- **The legacy `Signature-Agent` form, on a direct single-hop call only.** A bare structured-field String (`Signature-Agent: "https://research.acme.com"`), covered as plain `"signature-agent"`. The verifier treats it as a dictionary with one member whose key is the label of the signature covering it. A relay refuses this form, because it cannot add its own member without breaking the agent's signature, and answers with `Accept-Signature` asking for the dictionary form, as in the example below. FORA signers never send this form.
+- **The legacy `Signature-Agent` form, on a direct single-hop call only.** A bare structured-field String (`Signature-Agent: "https://research.acme.com"`), covered as plain `"signature-agent"`. The verifier treats it as a dictionary with one member whose key is the label of the signature covering it. A relay refuses this form, because it has to append its own member to the agent's `Signature-Agent` header and a String cannot take a second member, and answers with `Accept-Signature` asking for the dictionary form, as in the example below. FORA signers never send this form.
 - **A member key different from the signature label.** Signers use a member key equal to the label, but the verifier follows whichever member the signature covers, `"signature-agent";key="<member>"`, whatever the label is called.
 - **No `nonce`.** WG-00 sets no nonce requirement.
 - **A `type` parameter equal to `directory`** on the member. A member with any other `type` value is ignored, as WG-00 §5.2.1 requires.
@@ -452,42 +460,36 @@ The bytes are signed exactly as sent, so a relay forwarding the request must not
 
 ### Multi-Hop Example (Broker)
 
-The same request after a Broker has forwarded it. The Broker's directory is `https://broker.example`, and its signature is made with the RFC 9421 Appendix B.1.4 test key. The body and the agent's headers are unchanged. The Broker appended one member to each of `Signature-Agent`, `Signature-Input` and `Signature`:
+The request after a Broker has re-packaged it for the Exchange. The Broker's directory is `https://broker.example`, and its signature is made with the RFC 9421 Appendix B.1.4 test key. The Broker posted a new body (it added a `deadline`), so the agent's `sig1` headers, carried untouched from the single-hop example, no longer match this request. The Broker appended one member to each of `Signature-Agent`, `Signature-Input` and `Signature`, and its `sig2` covers only its own request and its own member:
 
 ```http
 POST /fora.v1.ExchangeService/DiscoverResources HTTP/1.1
 Host: exchange.example
 Content-Type: application/json
-Content-Length: 203
-Content-Digest: sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:
+Content-Length: 221
+Content-Digest: sha-256=:FKKQPDds8rayE2fEUjhwSCgsyuVv4pmrHLM6S0MiZQM=:
 Authorization:
 Signature-Agent: sig1="https://research.acme.com", sig2="https://broker.example"
-Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth", sig2=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1" "signature-input";key="sig1" "signature";key="sig1" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
-Signature: sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:, sig2=:aBbWd4a2KZp9fT81GfKP+qnA41V+BAM6vcgH3JdLrUjvcIFOUcaVphDvy1LmjGQ/6C97IlZWzwAT0FZtFwpYCA==:
+Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth", sig2=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
+Signature: sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:, sig2=:uswnfvODkwLt3viBYqH0CLxIMlB10SoAv03NatqQGRH/22M9/cPYiffJUjWEmJxyJgu7baklvz59fZSJoJ3rCw==:
 ```
 
-The body is the same 203 bytes as in the single-hop example.
+The body is these 221 bytes, with no trailing newline:
 
-Each labeled signature (`sig1` from the agent, `sig2` from the Broker) is verified independently, against the key its `keyid` selects in the directory its own `Signature-Agent` member names. The agent's signature still verifies, because adding the `sig2` member does not change the `sig1` member it covers.
-
-The Broker's covered set is what makes the hops a chain rather than a set. It covers `"signature";key="sig1"`, so it commits to the exact signature it received, and a relay cannot strip or reorder the hop in front of it. It also covers `"signature-input";key="sig1"` and every component the agent's signature lists, including the agent's `sig1` member, as WG-00 §5.2.2 requires, so the agent's signature cannot be lifted onto a different request under the Broker's.
-
-:::note
-Some WBA libraries, for example Cloudflare's `web-bot-auth` 0.2.0, refuse a signature that covers more than one `Signature-Agent` member, contrary to WG-00 §5.2.2. Such a library refuses the Broker's `sig2` above. This does not affect delivery: a relay hop's signature is verified by the Exchange, not by a CDN, and the agent's own `sig1` covers one member and passes such libraries on every hop.
-:::
+{/* fora-validate: ResourceQuery */}
+```json
+{"ver":"1.0","exchange":"exchange.example","requester":{"id":"research-bot-42","domain":"research.acme.com","type":"REQUESTER_TYPE_AGENT"},"uris":["https://publisher.example/premium/ai-funding-roundup"],"deadline":"0.4s"}
+```
 
-The signature base the Broker signed is:
+The Exchange verifies `sig2` against the key its `keyid` selects in the directory the `sig2` member names, and authenticates the caller as the Broker. `sig1` covers the agent's original body through its `content-digest`, so it does not verify against this request, and the Exchange attributes nothing to it. The signature base the Broker signed is:
 
 ```
 "@method": POST
 "@target-uri": https://exchange.example/fora.v1.ExchangeService/DiscoverResources
-"content-digest": sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:
+"content-digest": sha-256=:FKKQPDds8rayE2fEUjhwSCgsyuVv4pmrHLM6S0MiZQM=:
 "authorization": 
-"signature-agent";key="sig1": "https://research.acme.com"
-"signature-input";key="sig1": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth"
-"signature";key="sig1": :pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:
 "signature-agent";key="sig2": "https://broker.example"
-"@signature-params": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1" "signature-input";key="sig1" "signature";key="sig1" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
+"@signature-params": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
 ```
 
 ### Replay protection
diff --git a/website/src/content/docs/protocol/role-composition.mdx b/website/src/content/docs/protocol/role-composition.mdx
index 679a321c..3a21697c 100644
--- a/website/src/content/docs/protocol/role-composition.mdx
+++ b/website/src/content/docs/protocol/role-composition.mdx
@@ -35,7 +35,7 @@ The `WellKnownManifest.role` field identifies which role a given subdomain holds
 Three properties keep the trust model intact under multi-role operation:
 
 1. **Per-role key separation.** Each role publishes its own keys in its own WBA directory — the JOSE JWK Set (`WBAFile.keys`) served at `/.well-known/http-message-signatures-directory` for that role's domain, with each key identified by its RFC 7638 JWK Thumbprint (the RFC 9421 `keyid`). Keys are no longer carried in `WellKnownManifest`. An operator's Exchange key cannot sign messages that an Agent role would accept, and vice versa, because consumers look up keys by `(domain, role)`, not by operator.
-2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures applied **hop-by-hop** — each forwarding party adds its own labeled `Signature` header covering the request plus the prior hop's signature as the request passes through. The ordered stack of these labeled signatures in the HTTP headers *is* the forwarding chain; each hop's transport-layer signature proves its participation independently of the others, and the Exchange verifies the whole stack and counts hops against `max_hops` / `max_intermediary_hops`. The forwarding path is established at discovery and the Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate, suppress, or rewrite a hop's contribution without breaking that hop's signature in the header stack — which any auditor with access to the Exchange's request logs can detect.
+2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures applied **hop-by-hop** — each party signs the request it sends with its own labeled signature. A Broker re-packages the request and signs it as its own, so its signature proves which Broker sent it, and the agent's consent to a transaction is the `AgentAcceptance` signed into the body. The Exchange verifies the sender's signature and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The forwarding path is established at discovery and the Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate or alter the agent's consent without breaking the `AgentAcceptance` signature in the body, and cannot deny sending a request it signed — both of which any auditor with access to the Exchange's request logs can check.
 3. **Independent reconciliation records.** Settlement reconciliation uses three independent records (Exchange ledger, CDN access log, `UsageReport`) that must agree within the published tolerance — see [Transaction Flow → Reconciliation via Signed URLs](/protocol/transaction-flow/#reconciliation-via-signed-urls). Collusion between two co-operated roles still has to produce consistent records across all three, which is detectable by any auditor with access to the CDN logs and the dispute record.
 
 In other words: the protocol does not assume that distinct roles are run by distinct operators. It assumes that distinct roles produce distinct, independently verifiable signatures and records. Multi-role operators inherit that property by following the standard manifest discipline.
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 0f3a726c..4c0794de 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -465,12 +465,12 @@ If Anthropic uses its hosted Broker instead of the SDK directly, the Broker prov
 }
 ```
 
-### Broker Fans Out with a Header Signature Chain
+### Broker Fans Out with Its Own Signed Requests
 
-The Broker queries both Exchanges. For each forwarded request, the Broker:
+The Broker queries both Exchanges. For each Exchange, the Broker re-packages the request (here it batches the URIs and sets its own `deadline`) and:
 1. Preserves the agent's original `requester` message
-2. Preserves the agent's RFC 9421 HTTP Message Signature (its labeled signature stays in the `Signature`/`Signature-Input` headers)
-3. Adds its own labeled RFC 9421 HTTP Message Signature, covering the request plus the agent's prior signature (the ordered set of header signatures is the chain that proves the Broker forwarded it)
+2. Leaves the agent's RFC 9421 signature headers untouched and does not cover them, because the request they were computed over has changed
+3. Signs its own request with its own labeled RFC 9421 HTTP Message Signature, covering its own request components and only its own `Signature-Agent` member
 
 Broker → SSP-Alpha (multi-URI batch query) — `POST https://exchange.ssp-alpha.com/fora/v1/fora.v1.ExchangeService/DiscoverResources`:
 
@@ -494,9 +494,7 @@ Broker → SSP-Alpha (multi-URI batch query) — `POST https://exchange.ssp-alph
 }
 ```
 
-The forwarding chain travels in the HTTP headers, not the request body: the agent's labeled RFC 9421 signature and the Broker's labeled RFC 9421 signature both sit in the `Signature`/`Signature-Input` headers. The agent's signature covers `@target-uri` against the Exchange's endpoint -- the final recipient -- not the Broker's relay URL. SSP-Alpha's Exchange verifies the full stack:
-1. The agent's RFC 9421 HTTP Message Signature (alg=ed25519) -- fetch public key from the WBA directory at `claude.ai/.well-known/http-message-signatures-directory`, Ed25519 verify
-2. Each forwarding hop's labeled RFC 9421 HTTP Message Signature -- for each one, look up the public key by its `keyid` thumbprint in the key directory named by that hop's own `Signature-Agent` member, Ed25519 verify (each hop signs the request plus the prior hop's signature; see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
+Both labeled signatures sit in the `Signature`/`Signature-Input` headers, but only the Broker's covers this request. SSP-Alpha's Exchange verifies the Broker's signature -- it looks up the public key by its `keyid` thumbprint in the key directory named by the Broker's own `Signature-Agent` member, Ed25519 verifies, and authenticates the caller as the Broker. The agent's untouched signature does not match the re-packaged request, and the Exchange attributes nothing to it. A discovery query moves no money, so it carries no agent consent; see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 SSP-Alpha returns `offer_groups` (batch mode -- multiple URIs in query):
 
@@ -696,7 +694,7 @@ SDK or Broker commits to the subscription offer.
 }
 ```
 
-### Orchestrated request -- forwarding chain in the headers:
+### Orchestrated request -- the Broker signs, the agent's consent is in the body:
 
 `POST https://exchange.ssp-alpha.com/fora/v1/fora.v1.ExchangeService/ExecuteTransaction`
 
@@ -758,22 +756,20 @@ SDK or Broker commits to the subscription offer.
 }
 ```
 
-The request body is identical to the direct case; the forwarding chain lives in the HTTP headers. The Broker preserves the agent's labeled RFC 9421 signature and adds its own labeled RFC 9421 signature (covering the request plus the agent's signature) to the `Signature`/`Signature-Input` headers. The Exchange verifies both: the agent's identity (via the agent's RFC 9421 HTTP Message Signature, alg=ed25519, + public key fetched from the agent's WBA directory at `claude.ai/.well-known/http-message-signatures-directory`) and each forwarding hop (via that hop's labeled RFC 9421 signature + the hop's public key, selected by its `keyid` thumbprint in the key directory named by the hop's own `Signature-Agent` member).
+The Broker posts this request to the Exchange as its own: it signs it with its own labeled RFC 9421 signature, covering its own request components and only its own `Signature-Agent` member, and leaves the agent's signature headers untouched. The Exchange authenticates the caller as the Broker (its public key selected by `keyid` thumbprint in the directory the Broker's own `Signature-Agent` member names). The agent's consent is the `agent_acceptance` on the item, which the Exchange verifies against the agent's key in its directory at `claude.ai/.well-known/http-message-signatures-directory`. This example carries no delegation; a delegated request through a Broker needs the agent to have delegated to the Broker's key.
 
 ### Inside SSP-Alpha's Exchange
 
 ```
 1. Validate request (proto validation) -> pass
-2. Verify the RFC 9421 HTTP Message Signature (alg=ed25519) on the request:
-   - Fetch public key from the WBA directory at
-     claude.ai/.well-known/http-message-signatures-directory
-     (origin from the covered Signature-Agent member, key by keyid thumbprint)
-   - Ed25519 verify -> pass
-2b. Verify forwarding signature chain (if any forwarding hops added labeled signatures):
-   - For each hop's labeled RFC 9421 signature: look up the public key by its
-     keyid thumbprint in the key directory named by that hop's own
-     Signature-Agent member
-   - Ed25519 verify each hop's signature -> pass
+2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519), the
+   Broker's label:
+   - Fetch the Broker's public key from the directory its own covered
+     Signature-Agent member names (key by keyid thumbprint)
+   - Ed25519 verify -> pass; the caller is the Broker
+   - The agent's untouched signature is not attributed to anyone
+2b. Verify the agent's agent_acceptance on each item against the agent's key
+   in claude.ai/.well-known/http-message-signatures-directory -> pass
 2c. Verify `agent_request_acceptance` when the request carries it (this example
    omits the optional field): Ed25519 verify the signed request set against the
    requester's published agent key, then require this request's items to be the
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index d8a29223..2cc10ed8 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -17,7 +17,7 @@ Without Broker (direct, single exchange):
 
 ## Multi-Hop Routing
 
-Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. The forwarding chain lives entirely in the HTTP layer as a **stack of [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) HTTP Message Signatures** — there is no in-message hop list. Each party that originates or forwards the request adds **one** labeled signature, and each is a conformant [Web Bot Auth](/protocol/authentication/#the-web-bot-auth-profile) signature with its own `Signature-Agent` member naming its own key directory. Each forwarder's signature covers the request components FORA requires on the route **plus the previous hop's signature**, so the chain is ordered and tamper-evident: no hop can be reordered, dropped, or inserted without invalidating a downstream signature. The Exchange resolves each signature's key in the directory that signature's own member names, verifies **every** signature, and confirms the chain is contiguous. The ordered set of signatures *is* the forwarding chain. The exact covered components and the verification steps are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
+Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. Nothing about the route is carried in the message body: each party signs the request it sends with one labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers, a conformant [Web Bot Auth](/protocol/authentication/#the-web-bot-auth-profile) signature with its own `Signature-Agent` member naming its own key directory. FORA's Broker re-packages each request: it posts to the Exchange's URL with a new body, so it does not cover the agent's signature. It signs its own request on its own terms, covering its own request components and only its own `Signature-Agent` member, and leaves the agent's signature headers untouched. The Exchange authenticates the caller as the Broker, and takes the agent's consent to a transaction from the `AgentAcceptance` the agent signed into the body, which does not depend on the route. A party that forwards a request unchanged MAY instead cover the previous signature, and only then does the ordered set of signatures form a tamper-evident forwarding chain. The Exchange resolves each signature's key in the directory that signature's own member names. Both cases and the verification steps are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 **Chain-depth caps.** Two fields bound how deep a chain may go:
 
@@ -59,7 +59,7 @@ Key fields:
 - `acceptable_restrictions` -- the restrictions the agent is willing to accept, grouped by axis; axis `FUNCTION` carries the intended use (RAG, training, search, etc.)
 - `requester.scopes` -- entitlement scopes; `["*"]` means unrestricted public access
 - billing carries no request field: the Exchange resolves the caller's account (the `billing_ref` minted at `ExchangeService.Register`) from the verified request signature, never from anything the caller sends
-- request authentication -- an RFC 9421 HTTP Message Signature over the request that follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) (the agent's key is published in its key directory); when the request is forwarded, each hop adds its own labeled HTTP Message Signature, and the ordered stack of these header signatures is the forwarding chain (no in-message hop list)
+- request authentication -- an RFC 9421 HTTP Message Signature over the request that follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) (the agent's key is published in its key directory); when a Broker relays the request, it re-packages it and signs it with its own labeled HTTP Message Signature (no in-message hop list)
 
 ### Response (`ResourceResponse`)
 
@@ -380,7 +380,7 @@ The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A b
 ### What Happens Inside the Exchange
 
 1. Validate request (proto validation)
-2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, a projecting Broker's on a projected one — and each prior hop signature if present
+2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a request a Broker re-packaged — and, only on unchanged forwarding, each earlier signature the sender covered
 3. Verify `agent_request_acceptance` when present: the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange. This runs **before** the idempotency lookup — request-level idempotency state is never created or served for a request whose set claim has not been proven, otherwise a mutated request could consume the key and a later honest retry would replay its result
 4. Check idempotency key (prevent double-charge on retry)
 5. Verify offer signature (reconstruct offer from signed token)
diff --git a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
index 51576f2d..620e6c99 100644
--- a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
+++ b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
@@ -938,7 +938,7 @@ FORA replaces the **data acquisition** layer of due diligence, not the analysis.
 
 **Authentication at every step:**
 - **Agent to Broker**: RFC 9421 HTTP Message Signature (alg=ed25519) in HTTP headers
-- **Broker to Exchange**: the Broker adds its own labeled RFC 9421 HTTP Message Signature (alg=ed25519) in the HTTP headers, covering the forwarded request plus the agent's prior signature; the ordered set of labeled header signatures is the forwarding chain
+- **Broker to Exchange**: the Broker re-packages the request and signs it with its own labeled RFC 9421 HTTP Message Signature (alg=ed25519) in the HTTP headers, covering its own request and its own `Signature-Agent` member; the agent's consent rides in the body as `AgentAcceptance`
 - **Exchange to Agent**: `exchange_signature` on every Offer (Ed25519, stateless verification)
 - **Signed URLs**: Ed25519 (Exchange-signed, publicly verifiable, agent identity bound)
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 03f50c3a..68da8f2e 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -42,15 +42,21 @@ specifies the profile in one place, and the other pages refer to it:
   is not an https origin, and answer a missing component with `Accept-Signature`
   listing what they require. `Signature-Agent` is never empty; an empty
   `Authorization` stays valid.
-- Each forwarding hop adds its own `Signature-Agent` member and a signature that
-  covers the request components, its own member, and the previous hop's
-  `Signature` together with its `Signature-Input` member and every component it
-  lists, as WG-00 §5.2.2 requires. Some WBA libraries, for example Cloudflare's
-  `web-bot-auth` 0.2.0, refuse a signature that covers more than one
-  `Signature-Agent` member; that affects only the hop signature, which the
-  Exchange verifies, while the agent's own signature passes them on every hop.
-  The Exchange resolves each hop's key in the directory that hop names, not in a
-  configured key set.
+- Forwarding follows WG-00 §5.2.2. A party that forwards a request unchanged
+  in every component a previous signature covers MAY cover that signature, and
+  then covers its `Signature-Input` and every component it lists as well. A relay
+  that re-packages the request signs its own request on its own terms. FORA's
+  Broker re-packages every request (it posts to the Exchange's URL with a new
+  body), so its signature covers its own request components and only its own
+  `Signature-Agent` member, and it leaves the agent's signature headers
+  untouched. Every Broker signature therefore carries exactly one
+  `Signature-Agent` member and passes single-member WBA verifiers such as
+  Cloudflare's `web-bot-auth`. The Exchange authenticates the caller as the
+  Broker and takes the agent's consent to a transaction from the
+  `AgentAcceptance` signed into the body, which does not depend on the route. A
+  delegated request through a Broker needs the agent to have delegated to the
+  Broker's key. The Exchange resolves each signer's key in the directory that
+  signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
   signature plus `@method` and `@target-uri`. The edge keeps verifying offline
   with the key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint
@@ -66,9 +72,9 @@ specifies the profile in one place, and the other pages refer to it:
   Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
   reference library. It is the only deviation from WG-00.
 
-Authentication includes a complete signed request, the same request after a
-Broker hop, and a signed directory response, all with real values that can be
-verified.
+Authentication includes a complete signed request, the request a Broker
+re-packaged and signed for the Exchange, and a signed directory response, all
+with real values that can be verified.
 
 **Upcoming profile change (not in this release).** The SDKs released as v1.0.8
 do not implement the profile. They send `Signature-Agent` as a bare URL, set no
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index f9af3d1b..ac23c498 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -88,7 +88,7 @@ Scoped, time-limited, spend-capped credential. The credential itself is opaque b
 
 ### Multi-hop forwarding (no message — HTTP layer)
 
-There is no in-message hop chain. Multi-hop forwarding (Agent → Broker → … → Exchange) is a **stack of RFC 9421 HTTP Message Signatures**: each forwarding party adds one labeled signature, and each signature covers the request plus the prior hop's signature, so the ordered set of signatures is the chain (tamper-evident, order-bound). The Exchange resolves each `keyid` (an RFC 7638 thumbprint) in the signer's WBA directory at `{domain}/.well-known/http-message-signatures-directory`, verifies every signature, and enforces `RequestConstraints.max_hops` / `WellKnownManifest.max_intermediary_hops` by counting them. Responses do not retrace the chain — the terminal Exchange returns directly to the originating agent (bound by `agent_identity_hash`).
+There is no in-message hop chain. Multi-hop forwarding (Agent → Broker → … → Exchange) is carried in **RFC 9421 HTTP Message Signatures** in the headers: each party signs the request it sends with one labeled signature. A Broker re-packages the request and signs it as its own; the agent's consent to a transaction is `AgentAcceptance` in the body. Only on unchanged forwarding, where each hop covers the signature before it, do the signatures form a tamper-evident chain (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The Exchange resolves each `keyid` (an RFC 7638 thumbprint) in the directory the signer's own `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`, and enforces `RequestConstraints.max_hops` / `WellKnownManifest.max_intermediary_hops` by counting them. Responses do not retrace the chain — the terminal Exchange returns directly to the originating agent (bound by `agent_identity_hash`).
 
 ## Messages -- Offers and Pricing
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 40b096eb..dc29f582 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -110,7 +110,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T20: Kickback-driven offer selection
 **Attack**: Broker always routes to a specific Exchange regardless of pricing.
-**Countermeasure (protocol)**: Agent can bypass Broker and query Exchanges directly. Each forwarding party adds its own RFC 9421 HTTP Message Signature to the request — covering the request plus the prior hop's signature — so the ordered stack of signatures in the HTTP headers is a tamper-evident forwarding chain that provides non-repudiation. Reordering, dropping, or inserting a hop breaks a downstream signature, and the Exchange verifies the whole stack.
+**Countermeasure (protocol)**: Agent can bypass Broker and query Exchanges directly. A Broker signs every request it sends with its own RFC 9421 HTTP Message Signature, so the Exchange knows which Broker sent it and the Broker cannot deny it. The agent's consent to a transaction is the `AgentAcceptance` it signed into the body, which a Broker cannot alter or forge, and `agent_request_acceptance` binds the full ordered set of offers the agent chose.
 
 ### T21: Query intelligence harvesting
 **Attack**: Broker logs every DiscoverResources query, sells the data.
@@ -188,8 +188,8 @@ Line 1: Protocol-level prevention
   Signed offers, content hashes, agent-bound URLs, idempotency keys,
   agent-signed request-set proof (request acceptance, verified before
   idempotency state), holder-bound JWT delegation chain (cnf),
-  RFC 9421 forwarding-chain verification (stack of per-hop HTTP Message
-  Signatures), subscription-level quota tracking
+  RFC 9421 request signatures from every sender (with chain verification
+  on unchanged forwarding), subscription-level quota tracking
   Makes attacks structurally impossible
 
 Line 2: Three-sided reconciliation
@@ -251,7 +251,7 @@ Line 3: Legal/contractual enforcement
 ### T-DEL-4: Forwarding chain forgery
 
 **Attack**: Attacker inserts a fake hop into the forwarding chain, claiming to be a trusted Broker to gain access or inject misleading provenance — or reorders or drops an existing hop.
-**Countermeasure (protocol)**: **The forwarding chain is a stack of RFC 9421 HTTP Message Signatures (Ed25519).** Each forwarding party adds one labeled signature covering the request plus the prior hop's signature, so the chain is tamper-evident. Exchange verifies every signature on the request against the signer's published public key in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`), the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and verifies the whole stack. A forged, reordered, dropped, or inserted hop breaks a downstream signature, causing the entire request to be rejected.
+**Countermeasure (protocol)**: **Every sender signs its own request (RFC 9421, Ed25519).** A Broker re-packages the request and signs it with its own key, so it cannot claim to be another Broker: the Exchange verifies that signature against the key in the directory the Broker's own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, the key identified by its RFC 7638 thumbprint, the RFC 9421 `keyid`). The agent's consent cannot be forged or moved onto another request, because it is the `AgentAcceptance` signed into the body. On unchanged forwarding each hop also covers the signature before it, so a forged, reordered, dropped or inserted hop breaks a later signature and the request is rejected. See [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 ### T-DEL-5: Scope pollution
 

From 99e67a3c21b21c83e1978c38eba27f4ed0b9a061 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Thu, 1 Oct 2026 23:30:32 -0400
Subject: [PATCH 003/164] State that the Broker originates discovery and never
 forwards unchanged

The previous change still described one Broker path: a relay that
re-packages the agent's request and leaves the agent's signature headers
in place. That is not how the Broker works. The agent does not know the
Exchange at discovery time, so the Broker chooses the Exchanges and
originates its own queries. On execute it builds a fresh request for
each Exchange. In both cases the Broker signs alone, and its signature
covers its own request and only its own Signature-Agent member. The
WG-00 section 5.2.2 rule for unchanged forwarding stays as the general
rule, and the pages now say plainly that the Broker never forwards that
way.

On a relayed purchase the agent's identity and consent at the Exchange
come from AgentAcceptance, verified against the agent's registered key
resolved from Requester.domain. That key gives the delivery-URL binding,
and a delegation's cnf.jkt is checked against it, so a delegation stays
bound to the agent's private key through the Broker. A Broker is never
delegated to. The pages that said a delegated request through a Broker
needs a delegation to the Broker's key, and the Broker overview section
that described the Broker narrowing a delegation, are corrected. How an
agent proves a holder-of-key entitlement at discovery time through a
Broker is recorded as an open question rather than given a mechanism.

The Broker example is now a query the Broker originated, with one
signature and one Signature-Agent member. The scenario walkthrough no
longer derives the delivery-URL binding from the transport keyid, which
is the Broker's on a relayed purchase. Both changelog entries are
updated.
---
 proto/CHANGELOG.md                            | 47 +++++++------
 .../architecture/production-architecture.mdx  |  4 +-
 .../docs/components/broker/overview.mdx       | 64 +++++++++---------
 .../docs/components/exchange/overview.mdx     |  2 +-
 .../components/exchange/request-flows.mdx     | 35 +++++-----
 .../for-exchange-operators.mdx                |  8 +--
 .../docs/getting-started/what-is-fora.mdx     |  2 +-
 .../content/docs/protocol/authentication.mdx  | 66 +++++++++----------
 .../content/docs/protocol/discovery-paths.mdx |  4 +-
 .../docs/protocol/role-composition.mdx        |  2 +-
 .../docs/protocol/scenario-walkthrough.mdx    | 26 ++++----
 .../docs/protocol/transaction-flow.mdx        |  6 +-
 .../protocol/walkthrough-due-diligence.mdx    |  2 +-
 .../src/content/docs/reference/changelog.mdx  | 47 +++++++------
 .../src/content/docs/reference/proto-fora.mdx |  2 +-
 .../content/docs/security/threat-model.mdx    |  6 +-
 16 files changed, 168 insertions(+), 155 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 3ca3accf..4201d838 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -29,27 +29,36 @@ specifies the profile in one place, and the other pages refer to it:
 - Signers use a `Signature-Agent` member key equal to the signature label.
   Verifiers also accept a member key that differs from the label, a signature
   without a nonce, and a member with `type=directory`. The legacy sf-string
-  `Signature-Agent` is accepted on a direct single-hop call only: a relay
-  refuses it, because it cannot add its own member without breaking the agent's
+  `Signature-Agent` is accepted on a direct single-hop call only: a party that
+  forwards a request unchanged refuses it, because it cannot add its own member without breaking the agent's
   signature, and answers with `Accept-Signature` asking for the dictionary form.
   Verifiers refuse a signature with no `tag`, and a `Signature-Agent` member that
   is not an https origin, and answer a missing component with `Accept-Signature`
   listing what they require. `Signature-Agent` is never empty; an empty
   `Authorization` stays valid.
-- Forwarding follows WG-00 §5.2.2. A party that forwards a request unchanged
-  in every component a previous signature covers MAY cover that signature, and
-  then covers its `Signature-Input` and every component it lists as well. A relay
-  that re-packages the request signs its own request on its own terms. FORA's
-  Broker re-packages every request (it posts to the Exchange's URL with a new
-  body), so its signature covers its own request components and only its own
-  `Signature-Agent` member, and it leaves the agent's signature headers
-  untouched. Every Broker signature therefore carries exactly one
-  `Signature-Agent` member and passes single-member WBA verifiers such as
-  Cloudflare's `web-bot-auth`. The Exchange authenticates the caller as the
-  Broker and takes the agent's consent to a transaction from the
-  `AgentAcceptance` signed into the body, which does not depend on the route. A
-  delegated request through a Broker needs the agent to have delegated to the
-  Broker's key. The Exchange resolves each signer's key in the directory that
+- Forwarding follows WG-00 §5.2.2 as the general rule: a party that forwards a
+  request unchanged in every component an earlier signature covers MAY cover
+  that signature, and then covers its `Signature-Input` and every component it
+  lists as well. FORA's Broker never forwards an agent's request unchanged, so
+  it never covers an agent's signature. Discovery through the Broker is
+  Broker-led: the Broker chooses the Exchanges and originates its own queries,
+  signed by the Broker alone. How an agent proves a holder-of-key entitlement
+  at discovery time through a Broker is an open protocol question, tracked
+  separately. Execute through the Broker is
+  re-packaged: the Broker builds a fresh request per Exchange and signs it
+  alone. Every Broker signature covers its own request and only its own
+  `Signature-Agent` member, so single-member WBA verifiers such as Cloudflare's
+  `web-bot-auth` accept it. On a relayed purchase, the agent's identity and
+  consent come from `AgentAcceptance`, the detached Ed25519 signature over
+  `{offer_sig, requester_id, requester_domain, idempotency_key}`, verified
+  against the agent's registered key resolved from `Requester.domain`. That key
+  gives the delivery-URL binding, and a delegation's `cnf.jkt` is checked
+  against it, so delegation stays bound to the agent's key through the Broker.
+  A Broker is never delegated to. This replaces the earlier statement that a
+  Broker may project a delegated request only when the agent has delegated to
+  the Broker's key.
+  `AgentAcceptance` is application-level consent and the profile does not
+  change it. The Exchange resolves each signer's key in the directory that
   signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
   signature plus `@method` and `@target-uri`. The edge keeps verifying offline
@@ -66,9 +75,9 @@ specifies the profile in one place, and the other pages refer to it:
   Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
   reference library. It is the only deviation from WG-00.
 
-Authentication includes a complete signed request, the request a Broker
-re-packaged and signed for the Exchange, and a signed directory response, all
-with real values that can be verified.
+Authentication includes a complete signed request, a query a Broker originated
+and signed alone, and a signed directory response, all with real values that
+can be verified.
 
 **Upcoming profile change (not in this release).** The SDKs released as v1.0.8
 do not implement the profile. They send `Signature-Agent` as a bare URL, set no
diff --git a/website/src/content/docs/architecture/production-architecture.mdx b/website/src/content/docs/architecture/production-architecture.mdx
index cf363511..e7b394df 100644
--- a/website/src/content/docs/architecture/production-architecture.mdx
+++ b/website/src/content/docs/architecture/production-architecture.mdx
@@ -53,14 +53,14 @@ Every party in the protocol authenticates via Ed25519 key pairs. Each party anno
 | Party | Key Announcement | Signs | Verifier |
 |---|---|---|---|
 | **Requester** (Agent or other client) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`) | RFC 9421 HTTP Message Signature (Ed25519) over the HTTP request (`@method`, `@target-uri`, `content-digest` — request body bound via `content-digest`) | Exchange |
-| **Intermediary** (e.g. Broker) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`, same format) | a Broker re-packages each request and signs it with its own RFC 9421 HTTP Message Signature (Ed25519), covering its own request and only its own `Signature-Agent` member; the agent's consent rides in the body as `AgentAcceptance` | Exchange |
+| **Intermediary** (e.g. Broker) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`, same format) | a Broker originates its own discovery queries and re-packages execute requests, signing each alone with its own RFC 9421 HTTP Message Signature (Ed25519), covering its own request and only its own `Signature-Agent` member; on a purchase the agent's identity and consent ride in the body as `AgentAcceptance` | Exchange |
 | **Exchange** | `{domain}/.well-known/fora.json` (`role=ROLE_EXCHANGE`); offer-signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory` | `exchange_signature` on every Offer | Agent, Broker |
 | **Provider** | `{domain}/.well-known/fora.json` (`role=ROLE_PUBLISHER`) | Authorization declaration (not signatures) | Agent, Exchange |
 | **Verification Vendor** | WBA directory at `{domain}/.well-known/http-message-signatures-directory` | `ResourceAttestation.signature` on catalog content (v1.0) | Exchange, Agent |
 
 **Verification at Exchange:**
 - **Requester signature** — Exchange verifies the RFC 9421 HTTP Message Signature on the request (carried in HTTP headers, not a message field) against the requester's published Ed25519 key in its WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`), the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
-- **Forwarding** — when a Broker relayed the request, the Exchange verifies the Broker's own RFC 9421 HTTP Message Signature on the re-packaged request and the agent's `AgentAcceptance` in the body. Only on unchanged forwarding, where each hop covers the signature before it, does it also verify a tamper-evident chain of signatures (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
+- **Forwarding** — on a request a Broker sent, the Exchange verifies the Broker's own RFC 9421 HTTP Message Signature and, on a purchase, the agent's `AgentAcceptance` in the body against the agent's registered key (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
 - **Delegation JWT** — when a `Delegation` token is attached, Exchange verifies the authority JWT signature against the principal's published Ed25519 key (`principal_domain`)
 - **Scope-based access control** — Exchange filters its catalog by the requester's `scopes`. Resources outside the requester's scopes are not returned (the requester never learns they exist)
 
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index f09bc8b7..1589d3c1 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -17,7 +17,7 @@ The FORA Broker is the optional demand-side router in the FORA protocol. It sits
 - **Dispute relay (v1.0)** -- forward `DisputeRequest` messages to the correct Exchange
 - **Selection transparency** -- logged rationale for every selection decision
 
-The Exchange does not know or care whether the request came from a Broker or directly from an agent. The protocol is identical.
+The RPCs are identical whether the request comes from a Broker or directly from an agent. The Exchange authenticates whichever party signed the request: the agent on a direct call, the Broker on a request the Broker sent.
 
 ## Component Architecture
 
@@ -137,7 +137,7 @@ A single-Exchange commit is the degenerate case: the projection is the whole set
 
 ## Request Signing
 
-FORA uses a two-layer model: the **agent's request signature** authenticates the agent to the Broker, and the **Broker's own signature** authenticates the Broker to the Exchange. The agent's consent to a transaction travels in the body, not in the headers.
+FORA uses a two-layer model: the **agent's request signature** authenticates the agent to the Broker, and the **Broker's own signature** authenticates the Broker to the Exchange. On a purchase, the agent's identity and consent travel to the Exchange in the body, not in the headers.
 
 ### Request Authentication
 
@@ -145,30 +145,33 @@ The `Requester` message carries identity and entitlements only (`id`, `domain`,
 
 The Broker passes `Requester` through unchanged -- it never modifies the requester's identity, scopes, or delegation.
 
-### The Broker Signs Its Own Request (RFC 9421)
+### The Broker Signs Alone (RFC 9421)
 
-The Broker re-packages every request it relays: it posts to the Exchange's URL with a new body. The values the agent's signature covers therefore change, and WG-00 §5.2.2 forbids the Broker to cover the agent's signature. The Broker signs its own request on its own terms, as [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding) specifies:
+The Broker never forwards an agent's request unchanged, so it never covers an agent's signature ([Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)):
 
-- **Label and member** -- it appends its own label and its own `Signature-Agent` member, naming its directory. It can append only to a dictionary, so it refuses a request whose `Signature-Agent` is the legacy single string and answers with `Accept-Signature` asking for the dictionary form.
-- **`keyid`** -- the Broker's RFC 7638 thumbprint, resolved in the key directory its own `Signature-Agent` member names
+- **Discovery is Broker-led.** The agent does not know the Exchange at discovery time; that is the point of the Broker. The Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+- **Execute is re-packaged.** The Broker builds a fresh `TransactionRequest` for each Exchange and signs it alone.
+
+Each signature the Broker makes has:
+
+- **Label and member** -- its own label and its own `Signature-Agent` member, naming its directory. It is the only member on the request.
+- **`keyid`** -- the Broker's RFC 7638 thumbprint, resolved in the key directory its `Signature-Agent` member names
 - **`created`** -- when the Broker sent the request
-- **the covered components** -- its own request components (`@method`, `@target-uri`, `content-digest`, `authorization`) and only its own `Signature-Agent` member. It never covers the agent's `Signature-Agent`, `Signature-Input` or `Signature` members, and leaves them untouched.
+- **the covered components** -- its own request components (`@method`, `@target-uri`, `content-digest`, `authorization`) and its own `Signature-Agent` member
 
-Because the Broker's signature covers exactly one `Signature-Agent` member, single-member WBA verifiers such as Cloudflare's `web-bot-auth` library accept it. The Broker does not build a chain of signatures: its request is a new request.
+Because every Broker signature covers exactly one `Signature-Agent` member, single-member WBA verifiers such as Cloudflare's `web-bot-auth` library accept it.
 
 ```go
-// Broker signs the re-packaged request it sends to an Exchange.
+// Broker signs a request it originates (discovery) or re-packages (execute).
 func (o *Broker) signOutbound(req *http.Request) {
-    label := o.nextLabel(req) // e.g. "sig2" when the agent's "sig1" is present
-    // Append this Broker's own Signature-Agent member. The agent's member,
-    // Signature-Input and Signature are left untouched and are not covered.
-    req.Header.Set("Signature-Agent",
-        req.Header.Get("Signature-Agent")+`, `+label+`="https://`+o.domain+`"`)
-    // Covers @method, @target-uri, content-digest, authorization and only
-    // "signature-agent";key=<label>.
+    label := "sig1"
+    // The Broker's own member is the only Signature-Agent member on the request.
+    req.Header.Set("Signature-Agent", label+`="https://`+o.domain+`"`)
+    // Covers @method, @target-uri, content-digest, authorization and
+    // "signature-agent";key="sig1".
     sigInput, sig := o.rfc9421Sign(req, label) // Ed25519, keyid=o.thumbprint, tag="web-bot-auth"
-    req.Header.Add("Signature-Input", sigInput)
-    req.Header.Add("Signature", sig)
+    req.Header.Set("Signature-Input", sigInput)
+    req.Header.Set("Signature", sig)
 }
 ```
 
@@ -176,12 +179,10 @@ func (o *Broker) signOutbound(req *http.Request) {
 
 The Exchange verifies:
 
-1. **The Broker's signature** -- against the key its `keyid` thumbprint selects in the directory named by the Broker's own `Signature-Agent` member. The Exchange authenticates the caller as the Broker. The agent's signature headers were computed over the request the agent sent, so they do not verify against the re-packaged request, and the Exchange attributes nothing to them.
-2. **The agent's consent** -- on an execute request, the `AgentAcceptance` the agent signed into each item, and `agent_request_acceptance` over the ordered set, both verified against the agent's directory. They do not depend on the route the request took. See [Projected execute requests](/protocol/authentication/#projected-execute-requests).
-
-The Exchange counts the signatures in the stack against `max_hops` / `max_intermediary_hops` and rejects requests that exceed the limit. A delegated request reaches an Exchange through a Broker only when the agent has delegated to the Broker's key, because the Broker is the wire signer.
+1. **The Broker's signature** -- against the key its `keyid` thumbprint selects in the directory named by the Broker's `Signature-Agent` member. The Exchange authenticates the caller as the Broker.
+2. **The agent's identity and consent, on a purchase** -- each item carries the agent's `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}` verified against the agent's registered key, which the Exchange resolves from `Requester.domain`. The same key gives the delivery-URL binding (`agent_id` is its RFC 7638 thumbprint), and a delegation's `cnf.jkt` is checked against it, so a delegation stays bound to the agent's private key through the Broker. `agent_request_acceptance` additionally binds the ordered set of offers. These are application-level signatures, not WBA transport signatures, and the Web Bot Auth profile does not change them. See [Projected execute requests](/protocol/authentication/#projected-execute-requests).
 
-The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). The Broker names that directory in its own `Signature-Agent` member on every request it sends, so an Exchange resolves the Broker's key the same way it resolves any signer's. Whether the Exchange accepts requests from the Broker is a separate decision, and it is the Exchange's own policy: it may, for example, require the Broker to be registered with it.
+The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). The Broker names that directory in its `Signature-Agent` member on every request it sends, so an Exchange resolves the Broker's key the same way it resolves any signer's. Whether the Exchange accepts requests from the Broker is a separate decision, and it is the Exchange's own policy: it may, for example, require the Broker to be registered with it.
 
 ## Profile-Based Routing
 
@@ -211,22 +212,17 @@ The Broker's Exchange Registry contains three Exchanges:
 
 The Broker queries only **academic-mp.example.com** (profile match) and **general-mp.example.com** (no profile restriction -- always included). It skips **news-mp.example.com** (no matching profile).
 
-## Scope Forwarding, Token Narrowing, and Quota Aggregation
+## Scope Forwarding, Delegation Pass-Through, and Quota Aggregation
 
 ### Scope Forwarding
 
 The Broker forwards `Requester.scopes` to every Exchange it queries. Scopes control what the requester can access -- the Exchange filters its catalog to resources matching these scopes. The Broker does not modify scopes; it passes them through as-is.
 
-### Delegation Narrowing (only when the Broker is a delegated holder)
-
-By **default the Broker is a pure relay**: it passes `Requester.delegation` through unchanged and the **agent remains the holder** — the agent's RFC 9421 request signature is what the Exchange matches against the delegation's `cnf` (the Broker's hop signature is provenance only). A relay cannot narrow a delegation it does not hold: only a key named in the chain's `cnf` can issue a valid child JWT.
-
-Narrowing is therefore possible **only when the agent has explicitly delegated to the Broker's key** (the Broker is the terminal holder in the chain). In that case the Broker issues a child JWT — `scope ⊆ parent`, bound (`cnf.jkt`) to the Broker's key — and **signs the request itself**, so the binding now matches the Broker's signature:
+### Delegation Pass-Through
 
-- Original delegation (agent → Broker): `scope: academic:*, max_spend_cents: 50000`
-- Narrowed for Exchange A: `scope: academic:read, max_spend_cents: 10000`
+The Broker passes `Requester.delegation` through unchanged, and the **agent remains the holder**. A Broker is never delegated to. On a purchase, the Exchange matches the delegation's `cnf.jkt` against the key that signed the agent's `AgentAcceptance`, so the delegation stays bound to the agent's private key through the Broker, exactly as on a direct call. On Broker-led discovery, the Broker originates the query and signs it alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
 
-The child JWT is signed by the key its parent named in `cnf` (`scope ⊆ parent`); the Exchange verifies the full JWT chain back to the original principal. This is an opt-in delegation step, not the default forwarding behavior.
+The Broker cannot narrow a delegation: only the key named in the chain's `cnf` can issue a valid child JWT, and that is the agent's key, not the Broker's. Narrowing is done by a holder in the chain, as [Delegation](/protocol/authentication/#verification) describes.
 
 ### SubscriptionQuotaInfo Aggregation
 
@@ -371,10 +367,10 @@ sequenceDiagram
 | Decision | Rationale |
 |---|---|
 | **Broker is optional** | Agents can query Exchanges directly. The Broker adds multi-exchange intelligence but is not required by the protocol. |
-| **Same protocol, transparent proxy** | The Exchange cannot distinguish Broker-mediated requests from direct agent requests. No special Exchange support needed. |
+| **Same protocol, Broker signs alone** | The Broker calls the Exchange with the same RPCs an agent uses and signs each request alone. No special Exchange support needed. |
 | **Signed offer pass-through** | Exchange signatures cover pricing fields. The Broker cannot inflate prices without invalidating the signature. |
 | **Advisory budget enforcement** | The Broker pre-filters transactions by budget, but the Exchange is the authoritative enforcement point. No overspend occurs because the Exchange is the gatekeeper. |
-| **Ed25519 request signatures, consent in the body** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature that follows the Web Bot Auth profile (covering `@method`/`@target-uri`/`content-digest`/`authorization` and its `Signature-Agent` member). The Broker re-packages the request and signs it with its own labeled signature, covering its own request and only its own `Signature-Agent` member. The Exchange authenticates the Broker, takes the agent's consent from the `AgentAcceptance` in the body, and counts signatures against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
+| **Ed25519 request signatures, consent in the body** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature that follows the Web Bot Auth profile (covering `@method`/`@target-uri`/`content-digest`/`authorization` and its `Signature-Agent` member). The Broker originates discovery queries and re-packages execute requests, and signs each alone, covering its own request and only its own `Signature-Agent` member. The Exchange authenticates the Broker and, on a purchase, takes the agent's identity and consent from the `AgentAcceptance` in the body. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
 | **Partial results are normal** | If 3 of 5 Exchanges respond within the deadline, the Broker proceeds with 3 responses. Availability of any individual Exchange does not block the system. |
 
 ## Go Module Structure
diff --git a/website/src/content/docs/components/exchange/overview.mdx b/website/src/content/docs/components/exchange/overview.mdx
index b16e443a..6f788945 100644
--- a/website/src/content/docs/components/exchange/overview.mdx
+++ b/website/src/content/docs/components/exchange/overview.mdx
@@ -122,7 +122,7 @@ Pink nodes are external dependencies. Everything else runs in-process.
 
 The Exchange sits between AI agents/Brokers and provider CDN infrastructure:
 
-1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), filters the catalog by the requester's scopes, and returns signed offers. If a `Delegation` is present, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before granting scoped access. When a Broker relayed the request, it re-packaged it and signed it with its own labeled RFC 9421 HTTP Message Signature; the Exchange authenticates the Broker by that signature, takes the agent's consent to a transaction from the `AgentAcceptance` in the body, and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
+1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), filters the catalog by the requester's scopes, and returns signed offers. If a `Delegation` is present, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before granting scoped access. A query that comes through a Broker is one the Broker originated and signed alone; the Exchange authenticates the Broker by that signature and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
 2. The agent executes a transaction by calling `ExecuteTransaction` with a chosen offer — the Exchange verifies the offer signature, authorizes billing, logs the transaction, and returns a signed URL
 3. The agent fetches the resource using the signed URL — the delivery endpoint verifies the URL signature with the Exchange's published public key, holding nothing secret
 4. The agent reports usage by calling `ReportUsage` — the Exchange validates the report and updates the obligation state
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 30596577..ba3d9700 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -68,12 +68,13 @@ func (h *ExchangeHandler) DiscoverResources(
     }
 
     // 2. Requester identity. Verification already happened at the HTTP seam:
-    //    the SDK's verify middleware checked the RFC 9421 signatures — the
-    //    sender's, and on unchanged forwarding the chain behind it (the rules
-    //    are in Authentication > Multi-hop forwarding) — resolving each signer's key
+    //    the SDK's verify middleware checked the RFC 9421 signature of the
+    //    party that sent the request — the agent, or a Broker that originated
+    //    or re-packaged it (Authentication > Multi-hop forwarding) — resolving the signer's key
     //    by its signed keyid (an RFC 7638 thumbprint) in the key directory
     //    named by the `Signature-Agent` member that signature covers. The
-    //    self-asserted Requester.domain field never drives key lookup.
+    //    self-asserted Requester.domain field never drives request-signing key
+    //    lookup.
     //    The handler consumes the proof from the context; it never re-fetches
     //    keys or re-verifies bytes, and it fails closed when the proof is
     //    absent (a route the middleware does not guard).
@@ -258,30 +259,32 @@ type RequesterRecord struct {
 
 ### Forwarding Verification
 
-Nothing about the route is carried in the message: there is no `intermediaries` field. Each party that sends a `ResourceQuery` or `TransactionRequest` signs it with **one** labeled signature that conforms to Web Bot Auth, with its own `Signature-Agent` member. The rules are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). In short:
+Nothing about the route is carried in the message: there is no `intermediaries` field. Each party that sends a `ResourceQuery` or `TransactionRequest` signs it with **one** labeled signature that conforms to Web Bot Auth, with its own `Signature-Agent` member. The rules are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). In short, FORA's Broker never forwards an agent's request unchanged:
 
-- **A Broker re-packages the request.** It posts to the Exchange's URL with a new body, so it does not cover the agent's signature. Its signature covers its own request components and only its own `Signature-Agent` member, and the agent's signature headers travel untouched. The agent's consent to a transaction is the `AgentAcceptance` the agent signed into each item of the body (with `agent_request_acceptance` for the ordered set), which verifies against the agent's directory whatever the route.
-- **A party that forwards unchanged MAY cover the previous signature.** If it does, it covers that signature's `Signature-Input` member and every component it lists as well, and the ordered set of such signatures forms a tamper-evident chain.
+- **Discovery is Broker-led.** The Broker chooses the Exchanges and originates its own `ResourceQuery`, signed by the Broker alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+- **Execute is re-packaged.** The Broker builds a fresh `TransactionRequest` for each Exchange and signs it alone. The agent's identity and consent are the `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}` verified against the agent's registered key, resolved from `Requester.domain`.
+
+In both cases the Broker's signature covers its own request components and only its own `Signature-Agent` member, and the request carries no agent signature headers.
 
 The Exchange MUST:
 
-1. **Verify the sender's signature** — the last label added. The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the key directory at `{origin}/.well-known/http-message-signatures-directory`, where `{origin}` is the `Signature-Agent` member that signature covers, verifies the Ed25519 signature, and authenticates the caller as that party. Whether a Broker may send to this Exchange at all is the Exchange's own policy, for example only Brokers registered with it.
-2. **On unchanged forwarding, verify every earlier signature and the chain.** Each earlier signature is verified independently in the same way, and each later one must cover the signature before it, its `Signature-Input` member and every component it lists. A signature that a re-packaging Broker left untouched is not attributed to anyone.
-3. **Verify `AgentAcceptance` on an execute request**, against the requester's directory, as [Projected execute requests](/protocol/authentication/#projected-execute-requests) describes.
+1. **Verify the request signature.** The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the key directory at `{origin}/.well-known/http-message-signatures-directory`, where `{origin}` is the `Signature-Agent` member the signature covers, verifies the Ed25519 signature, and authenticates the caller as that party: the agent on a direct call, the Broker on a request the Broker sent. Whether a Broker may send to this Exchange at all is the Exchange's own policy, for example only Brokers registered with it.
+2. **Verify each item's `AgentAcceptance` on an execute request** against the agent's registered key, as [Projected execute requests](/protocol/authentication/#projected-execute-requests) describes. On a re-packaged request this is the agent's identity and consent, and its key gives the delivery-URL binding and the key a delegation's `cnf.jkt` is checked against.
+3. **Where a party forwarded unchanged and covered an earlier signature**, verify that signature too, and the coverage, as the general WG-00 rule describes.
 
-If a signature the Exchange relies on fails — or an unchanged-forwarding chain is not contiguous — the Exchange rejects the request with `CodeUnauthenticated`.
+If a signature the Exchange relies on fails, the Exchange rejects the request with `CodeUnauthenticated`.
 
-When only the agent's signature is present, the requester is calling the Exchange directly — no intermediary was involved. Depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
+Depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
 
 ```go
 // Request-signature verification runs in the SDK's verify middleware at the
 // HTTP seam, before any handler. The middleware:
 //   1. Parses the Signature / Signature-Input headers into labeled signatures.
-//   2. Verifies the sender's signature (the last label) against the key in
-//      the directory its own Signature-Agent member names, at
+//   2. Verifies the request signature against the key in the directory its
+//      own Signature-Agent member names, at
 //      {origin}/.well-known/http-message-signatures-directory.
-//   3. On unchanged forwarding, verifies each earlier signature the same way
-//      and confirms each later one covers the one before it.
+//   3. Where a party forwarded unchanged and covered an earlier signature,
+//      verifies that signature and the coverage too.
 //   4. Counts the signatures against max_hops / max_intermediary_hops.
 // Any failure rejects the request with CodeUnauthenticated before the handler
 // runs. The handler reads the proven signatures from the context:
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index e8c198af..ab63e0b7 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -162,11 +162,11 @@ This verification is entirely offline — no callback to the principal is requir
 
 ### Forwarding Verification
 
-When the request carries more than one RFC 9421 HTTP Message Signature, it has passed through one or more intermediaries (e.g., agent to broker to your Exchange). A Broker re-packages the request and signs it as its own, covering its own request and only its own `Signature-Agent` member; the agent's signature headers travel untouched and no longer match the request. The rules are in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding):
+A request from a Broker is the Broker's own: the Broker originates discovery queries and re-packages execute requests, and signs each alone, covering its own request and only its own `Signature-Agent` member. It never forwards an agent's request unchanged. The rules are in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding):
 
-1. Verify the sender's signature, the last label added: fetch the signer's public key from the directory its own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and authenticate the caller as that party
-2. On an execute request, verify the agent's `AgentAcceptance` in the body against the requester's directory; that is the agent's consent, whatever route the request took
-3. On unchanged forwarding, where each hop covers the signature before it, verify every signature and that the chain was not reordered, dropped from, or inserted into
+1. Verify the request signature: fetch the signer's public key from the directory its own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and authenticate the caller as that party
+2. On an execute request, verify each item's `AgentAcceptance` in the body against the agent's registered key, resolved from `Requester.domain`; on a request a Broker re-packaged, that is the agent's identity and consent, its key gives the delivery-URL binding, and a delegation's `cnf.jkt` is checked against it
+3. Where a party forwarded a request unchanged and covered an earlier signature, verify that signature and the coverage too
 4. Enforce `max_intermediary_hops` by signature count — reject requests whose signature count exceeds your published limit
 
 ### Scope-Based Catalog Filtering
diff --git a/website/src/content/docs/getting-started/what-is-fora.mdx b/website/src/content/docs/getting-started/what-is-fora.mdx
index 1c9525ba..55b1b4f7 100644
--- a/website/src/content/docs/getting-started/what-is-fora.mdx
+++ b/website/src/content/docs/getting-started/what-is-fora.mdx
@@ -99,7 +99,7 @@ Every request carries a `Requester` message — a universal actor identity with
 
 **Delegation with JWTs** enables offline-verifiable, narrowable authorization. A principal (organization, IAM, upstream agent) issues a delegation JWT. Each holder in the chain can narrow permissions by issuing a child delegation JWT — restrict scopes, lower spend caps, shorten expiry — but can never widen them. Zero round trips to the original issuer, regardless of how many delegation levels deep.
 
-**Multi-hop forwarding** is carried in the HTTP headers when a request passes through intermediaries (e.g., agent to broker to Exchange). Each party signs the request it sends with one labeled RFC 9421 HTTP Message Signature. A Broker re-packages the request and signs it as its own, and the agent's consent to a transaction travels in the body as `AgentAcceptance`. The Exchange verifies the sender's signature and counts signatures against `max_hops` / `max_intermediary_hops`.
+**Multi-hop forwarding** is carried in the HTTP headers when a request passes through intermediaries (e.g., agent to broker to Exchange). Each party signs the request it sends with one labeled RFC 9421 HTTP Message Signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone, and on a purchase the agent's identity and consent travel in the body as `AgentAcceptance`. The Exchange verifies the request signature and counts signatures against `max_hops` / `max_intermediary_hops`.
 
 **`ext_critical`** flags extension keys that an Exchange MUST understand to process the request. See [Extension Profiles](/protocol/extension-profiles/) for details.
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 6490b585..ed643048 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -22,7 +22,7 @@ Every FORA request carries a `Requester` message that identifies who is making t
 | Field | Type | Description |
 |---|---|---|
 | `id` | `string` | Unique requester identifier (e.g., `"agent-research-bot-001"`) |
-| `domain` | `string` | The requester's own domain, as it declares it. **Not** where keys are looked up — that is the covered `Signature-Agent` header (see [Key Lookup](#key-lookup)). A value here is a claim, not a credential |
+| `domain` | `string` | The requester's own domain, as it declares it. **Not** where request-signing keys are looked up — that is the covered `Signature-Agent` header (see [Key Lookup](#key-lookup)). A value here is a claim, not a credential. On a purchase a Broker re-packaged, the Exchange resolves the key that verifies the agent's `AgentAcceptance` from this domain, and the claim is authenticated only if that signature verifies |
 | `type` | `RequesterType` | What kind of entity is making the request |
 | `name` | `string` (optional) | Human-readable name (e.g., `"Acme Research Assistant"`) |
 | `scopes` | `repeated string` | Entitlement scopes — what the requester can access |
@@ -135,7 +135,7 @@ The `token`'s claims are the **authoritative** source of the grant (the plaintex
 
 | Claim | JWT claim | Required? | Meaning |
 |---|---|---|---|
-| holder | `cnf` (with `jkt`) | **Yes** | Binds the grant to a key by RFC 7638 thumbprint — verified per [Verification](#verification) (request-signing key MUST hash to `cnf.jkt`). Without it the token is bearer-usable. |
+| holder | `cnf` (with `jkt`) | **Yes** | Binds the grant to a key by RFC 7638 thumbprint — verified per [Verification](#verification) (the agent's key the request proves possession of MUST hash to `cnf.jkt`). Without it the token is bearer-usable. |
 | issuer | `iss` | Yes | Who granted it (resource owner / principal). |
 | `scope` | `scope` | No | Granted scopes (space-delimited; segment-wise matching — see [Scope Matching](#scope-matching)). |
 | `exp` | `exp` | No (recommended) | Expiry. |
@@ -151,7 +151,7 @@ Rules:
 - **`fora_`-prefixed claim names are reserved** for this registry. Vendors MUST use their own `vendor:` namespace and MUST NOT define `fora_*` names, so registered claims can never be shadowed.
 - **Claim values keep their home encoding.** RFC-registered claims use the encoding their RFC defines — `exp` is a NumericDate (seconds since epoch, RFC 7519). `fora_*` claims mirror a `Delegation` field and use that field's proto-JSON encoding — for example, `fora_quota_period` is a Duration string in seconds (`"2592000s"`), the same form the [`quota_period` field](/reference/proto-fora/#delegation) carries on the wire.
 
-> **Token format.** The delegation token is a **holder-bound JWT** — `token_format: "jwt"` is the sole format conformant implementations support. Multi-hop attenuation is expressed as a chain of `cnf`-linked child JWTs (each signed by the key its parent named, each narrowing scope), and the holder binding always applies (the request-signing key must match the holder the token is sealed to).
+> **Token format.** The delegation token is a **holder-bound JWT** — `token_format: "jwt"` is the sole format conformant implementations support. Multi-hop attenuation is expressed as a chain of `cnf`-linked child JWTs (each signed by the key its parent named, each narrowing scope), and the holder binding always applies (the key the request proves possession of — the request-signing key on a direct call, the `AgentAcceptance` key on a purchase a Broker relayed — must match the holder the token is sealed to).
 
 ### Delegation chain example
 
@@ -195,7 +195,7 @@ The Exchange/edge verifies a delegation by (offline, using only the owner's publ
 
 1. **Verify the authority JWT** with the resource owner's published key (the trust anchor). Read its `scope`, `exp`, and `cnf.jkt`.
 2. **Verify each delegation JWT** with the key in its own JOSE header `jwk` — but only after checking `thumbprint(header key) == parent cnf.jkt` (the **chain-linkage invariant**). Reject a JWT signed by a key the parent did not name. Check each child's `scope` is covered by its parent's.
-3. **Verify holder binding** — the key that signed the HTTP request ([RFC 9421](#request-signatures-rfc-9421)) MUST hash to the final delegation's `cnf.jkt`. If not, **reject** (`DENIAL_REASON_DELEGATION_INVALID`). This is what makes a leaked token useless to a thief: possessing the bytes is not enough — you must control the bound private key. It is **not optional** and **not skippable**; an Exchange that omits it reduces the token to a bearer credential and breaks the anti-theft guarantee.
+3. **Verify holder binding** — the agent's key that the request proves possession of MUST hash to the final delegation's `cnf.jkt`: on a direct call the key that signed the HTTP request ([RFC 9421](#request-signatures-rfc-9421)), on a purchase a Broker relayed the key that signed the agent's `AgentAcceptance` ([Which signature binds in a brokered request](#verification)). If not, **reject** (`DENIAL_REASON_DELEGATION_INVALID`). This is what makes a leaked token useless to a thief: possessing the bytes is not enough — you must control the bound private key. It is **not optional** and **not skippable**; an Exchange that omits it reduces the token to a bearer credential and breaks the anti-theft guarantee.
 4. Check `exp` on every JWT in the chain against current time.
 5. Optionally check `revocation_uri` for high-value transactions.
 
@@ -203,7 +203,7 @@ This is entirely offline — no callback to the issuer. The verifier needs only
 
 **Binding across hops.** Each delegation re-binds to the next holder's key (`cnf.jkt` of the child = the next agent), so at every hop the bound key is whoever now signs the request. The chain of JWT signatures carries the binding forward — there is no point at which the token reverts to bearer form.
 
-**Which signature binds in a brokered request.** A forwarded request can carry more than one RFC 9421 signature (the agent's, plus one from each intermediary). The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt`. A relay that forwards the request unchanged forwards the agent's delegation unchanged, the agent remains the terminal holder, and the **agent's** request signature is the one that must match `cnf.jkt` (the relay's signature is provenance only). FORA's Broker re-packages the request and is its wire signer, so the check matches the Broker's key: a delegated request through a Broker requires the agent to have explicitly **delegated to the Broker** (the Broker holds a child JWT bound to its own key), the same rule [Projected execute requests](#projected-execute-requests) states. Intermediaries never silently become the holder.
+**Which signature binds in a brokered request.** The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt` — and that key is always a key the request proves possession of. On a direct call the proof is the agent's RFC 9421 request signature, so `cnf.jkt` is checked against the key that signed the request. On a purchase relayed by a Broker, the Broker signs the transport request alone, so `cnf.jkt` is checked against the key that signed the agent's `AgentAcceptance` in the body. The delegation therefore stays bound to the agent's private key through the Broker, exactly as on a direct call. A Broker is never delegated to and never becomes the holder. On Broker-led discovery the Broker originates the query and signs it alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
 
 ### Delegation Denial Reasons
 
@@ -277,29 +277,26 @@ This distinction prevents information leakage on public Exchanges while allowing
 
 ## Multi-hop forwarding
 
-When a request passes through a forwarding party (e.g., Agent to Broker to Exchange), nothing about the forwarding is carried in the message body. Each party signs the request it sends with its own labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers. This section is the one place the rules for forwarding parties are specified; other pages refer to it.
+When a request reaches an Exchange through a forwarding party (e.g., Agent to Broker to Exchange), nothing about the route is carried in the message body. Each party signs the request it sends with its own labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers. This section is the one place the rules for forwarding parties are specified; other pages refer to it.
 
 ### How It Works
 
-The agent signs first, under its own label (`sig1` in the examples on this page), and adds a member under that label to `Signature-Agent`, naming its directory. Every party after it adds its own label (`sig2` for the first hop in the examples), its own `Signature-Agent` member naming **its own** directory, and a signature that is a conformant WG-00 signature in its own right ([The Web Bot Auth Profile](#the-web-bot-auth-profile)). What that signature covers depends on whether the party changed the request. WG-00 §5.2.2 draws the line: a signer MAY cover another signature, and if it covers `"signature";key=X` it MUST also cover `"signature-input";key=X` and every component listed there. A signer that cannot, because it changed a value the inner signature was computed over, MUST NOT cover the inner signature. It signs the request on its own terms, and the inner signature is left untouched.
+Every signature is a conformant WG-00 signature in its own right, with its own label and its own `Signature-Agent` member naming its signer's directory ([The Web Bot Auth Profile](#the-web-bot-auth-profile)). WG-00 §5.2.2 sets the general rule for a party that passes on a request someone else signed. It MAY cover the earlier signature, and if it covers `"signature";key=X` it MUST also cover `"signature-input";key=X` and every component listed there. A party that cannot, because it changed a value the earlier signature was computed over, MUST NOT cover the earlier signature. It signs the request on its own terms.
 
-#### A relay that re-packages the request: FORA's Broker
+#### FORA's Broker signs alone
 
-FORA's Broker re-packages every request it relays. It posts to the Exchange's URL with a new body, so the values the agent's signature covers change, and WG-00 §5.2.2 forbids it to cover the agent's signature. The Broker signs its own request on its own terms:
+FORA's Broker never forwards an agent's request unchanged, so it never covers an agent's signature. Each request it sends to an Exchange is its own:
 
-1. Its signature covers its own request components, `@method`, `@target-uri`, `content-digest` and `authorization`, and exactly one `Signature-Agent` member, its own `"signature-agent";key="<its label>"`.
-2. It leaves the agent's `Signature-Agent` member, `Signature-Input` member and `Signature` member untouched, and never covers them. The agent's signature was computed over the request the agent sent, so it does not verify against the re-packaged request, and the Exchange does not rely on it.
-3. It appends its own member to `Signature-Agent`, which it can do only when the header is a dictionary. It refuses the legacy single-string form and answers with `Accept-Signature` asking for the dictionary form ([What a FORA verifier accepts](#what-a-fora-verifier-accepts)).
+- **Discovery is Broker-led.** The agent asks the Broker, not an Exchange: the point of the Broker is that the agent does not know the Exchange at discovery time. The Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+- **Execute is re-packaged.** The Broker builds a fresh `TransactionRequest` for each Exchange and signs it alone ([Projected execute requests](#projected-execute-requests)).
 
-The Exchange authenticates the wire caller as the Broker. Its proof that the agent consented to a transaction does not travel in the transport layer at all: it is the `AgentAcceptance` the agent signed into each item of the body, together with `agent_request_acceptance` for the ordered set ([Projected execute requests](#projected-execute-requests)). Those detached signatures verify against the agent's directory however the request travelled, so they do not depend on the topology. A discovery query moves no money and carries no consent.
+In both cases the Broker's signature covers its own request components, `@method`, `@target-uri`, `content-digest` and `authorization`, and exactly one `Signature-Agent` member, its own. The request carries no agent signature headers. Single-member WBA verifiers, such as Cloudflare's `web-bot-auth` library, therefore accept every Broker signature.
 
-Every Broker signature covers exactly one `Signature-Agent` member, so single-member WBA verifiers, such as Cloudflare's `web-bot-auth` library, accept it.
+The Exchange authenticates the caller as the Broker. On a relayed purchase, the agent's identity and consent come from the body, not from the transport: each item carries the agent's `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}`. The Exchange verifies it against the agent's registered key, which it resolves from `Requester.domain` when a Broker re-packaged the request. That key also gives the delivery-URL binding: `agent_id` is its RFC 7638 thumbprint. `AgentAcceptance` is application-level consent, not a WBA transport signature, and this profile does not change it.
 
-#### A relay that forwards the request unchanged
+#### The general rule for unchanged forwarding
 
-A party that forwards a request unchanged in every component a previous signature covers MAY cover that signature. If it does, its signature covers its own request components, its own `Signature-Agent` member, and the previous signature: `"signature";key="<previous label>"`, `"signature-input";key="<previous label>"` and every component that signature lists, which includes the previous signer's `Signature-Agent` member. It forwards the earlier `Signature-Agent`, `Signature-Input` and `Signature` members unchanged and appends its own. On such a path the agent signs `@target-uri` against the final recipient's endpoint, not the relay URL it dials.
-
-When every hop covers the signature before it this way, the ordered set of signatures **is** the forwarding chain: it is tamper-evident and order-bound, and no hop can be reordered, removed or inserted without breaking a later signature. This applies only to unchanged forwarding. A re-packaging Broker does not chain; it starts a new request.
+A party that forwards a request unchanged in every component an earlier signature covers MAY cover that signature, as WG-00 §5.2.2 describes. Its signature then covers its own request components, its own `Signature-Agent` member, and the earlier signature together with that signature's `Signature-Input` member and every component it lists. When every party covers the signature before it this way, the ordered set of signatures **is** a forwarding chain: tamper-evident and order-bound. FORA's Broker does not forward this way.
 
 ### Verification at the Exchange
 
@@ -307,29 +304,28 @@ The Exchange:
 
 1. Reads each labeled signature and its `keyid` from `Signature` / `Signature-Input`
 2. Resolves each signature's `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** covered `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2)
-3. Verifies each signature independently against its own covered components and its own key. It authenticates the caller by the signature of the party that sent the request, the last label added. On unchanged forwarding it also confirms that each hop covers the signature before it, its `Signature-Input` member and every component it lists. A signature left untouched by a re-packaging Broker is not attributed to anyone
-4. Enforces depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting the signatures** in the stack
-
-Verifying a hop's signature proves which party sent the request. Whether that party may send to this Exchange at all is the Exchange's own policy: an Exchange MAY accept requests from forwarding parties only when they are Brokers registered with it.
+3. Verifies each signature independently against its own covered components and its own key, and authenticates the caller as the party that signed the request: the agent on a direct call, the Broker on a request the Broker sent. Where a party forwarded unchanged and covered an earlier signature, it also confirms that coverage
+4. On an execute request, verifies each item's `AgentAcceptance` against the agent's registered key, as above
+5. Enforces depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting the signatures** in the stack
 
-When only the agent's signature is present, the agent is querying the Exchange directly — no broker was involved.
+Verifying a signature proves which party sent the request. Whether that party may send to this Exchange at all is the Exchange's own policy: an Exchange MAY accept requests from a Broker only when the Broker is registered with it.
 
 See [Multi-Hop Example (Broker)](#multi-hop-example-broker) below for the concrete header layout.
 
 ### Projected execute requests
 
-Projection is one form of the re-packaging described above. When a Broker splits a mixed-Exchange `TransactionRequest` into per-Exchange subrequests, each subrequest has a new body, so the agent's original signature — which covered the original body through `Content-Digest` — cannot travel with it. There is no way to forward a projected body under the agent's HTTP signature, and the protocol does not ask for one.
+A Broker re-packages every execute request it relays. When it splits a mixed-Exchange `TransactionRequest` into per-Exchange subrequests, each subrequest has a new body, so the agent's original signature — which covered the original body through `Content-Digest` — cannot travel with it. There is no way to forward a re-packaged body under the agent's HTTP signature, and the protocol does not ask for one.
 
 Instead, each projected subrequest is a **new HTTP request its sender authors**. The projecting party — a Broker, or the agent itself when it splits its own set — computes the subrequest's `Content-Digest` and signs it with its own RFC 9421 signature, exactly as any sender does. The Exchange authenticates the wire caller as that sender.
 
 The agent's cryptographic authorization does not ride the transport layer at all. It rides in the body, as two detached Ed25519 signatures that stay valid however the request travels:
 
-- **`agent_acceptance`** on each item — binds that offer to the requester and the idempotency key.
+- **`agent_acceptance`** on each item — a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}`, binding that offer to the requester and the idempotency key. The Exchange verifies it against the agent's registered key, resolved from `Requester.domain`, and binds the delivery URL to that key's thumbprint.
 - **`agent_request_acceptance`** on the request — binds the **complete ordered set** of `(offer signature, exchange)` references, so each Exchange can require its subrequest to be the exact in-order projection of the set the agent signed. See [Broker fan-out and request projection](/components/broker/overview/#execution-separate-step) for the flow.
 
 The Exchange resolves the `agent_request_acceptance` verification key from the requester the signed payload names: the payload's `requester_domain` must equal the request's `requester.domain`, and the signature is accepted only if it verifies against an Ed25519 key currently valid in that domain's WBA directory (`{requester_domain}/.well-known/http-message-signatures-directory`). The envelope carries no `keyid`, so the verifier tries the currently-valid Ed25519 keys of that directory — rotation overlap keeps that set small. When the requester itself signed the arriving request, the request-signing key the Exchange already resolved is that key, and no second fetch is needed. A signature that verifies against a key the requester's domain publishes is what makes the claimed requester identity an authenticated one, the same anchoring every other directory lookup uses.
 
-Delegation is unchanged by projection: the holder-binding check still matches the key that RFC 9421-signed the **arriving** request (see [Which signature binds in a brokered request](#verification)). A projecting Broker is the wire signer, so it may project a delegated request only when the agent has explicitly delegated to the Broker's key — the same terminal-holder rule as narrowing. A pure relay cannot project a delegated request; without a delegation, the Broker simply authenticates as itself while the body's detached signatures carry the agent's authorization.
+Delegation stays bound to the agent through projection. On a re-packaged request the delegation's `cnf.jkt` is checked against the key that signed the agent's `agent_acceptance`, so the agent's private key is still what the delegation is sealed to, exactly as on a direct call (see [Which signature binds in a brokered request](#verification)). The Broker authenticates as itself, while the body's detached signatures carry the agent's identity and authorization.
 
 ## Request Signatures (RFC 9421)
 
@@ -404,7 +400,7 @@ The edge still verifies offline. The fetcher also presents its raw public key in
 
 Agents in the field run many WBA libraries and some send earlier forms of the protocol. A FORA verifier accepts the following, which WG-00 permits:
 
-- **The legacy `Signature-Agent` form, on a direct single-hop call only.** A bare structured-field String (`Signature-Agent: "https://research.acme.com"`), covered as plain `"signature-agent"`. The verifier treats it as a dictionary with one member whose key is the label of the signature covering it. A relay refuses this form, because it has to append its own member to the agent's `Signature-Agent` header and a String cannot take a second member, and answers with `Accept-Signature` asking for the dictionary form, as in the example below. FORA signers never send this form.
+- **The legacy `Signature-Agent` form, on a direct single-hop call only.** A bare structured-field String (`Signature-Agent: "https://research.acme.com"`), covered as plain `"signature-agent"`. The verifier treats it as a dictionary with one member whose key is the label of the signature covering it. A party that forwards a request unchanged refuses this form, because it has to append its own member to the agent's `Signature-Agent` header and a String cannot take a second member; it answers with `Accept-Signature` asking for the dictionary form, as in the `Accept-Signature` example above. FORA signers never send this form.
 - **A member key different from the signature label.** Signers use a member key equal to the label, but the verifier follows whichever member the signature covers, `"signature-agent";key="<member>"`, whatever the label is called.
 - **No `nonce`.** WG-00 sets no nonce requirement.
 - **A `type` parameter equal to `directory`** on the member. A member with any other `type` value is ignored, as WG-00 §5.2.1 requires.
@@ -460,7 +456,7 @@ The bytes are signed exactly as sent, so a relay forwarding the request must not
 
 ### Multi-Hop Example (Broker)
 
-The request after a Broker has re-packaged it for the Exchange. The Broker's directory is `https://broker.example`, and its signature is made with the RFC 9421 Appendix B.1.4 test key. The Broker posted a new body (it added a `deadline`), so the agent's `sig1` headers, carried untouched from the single-hop example, no longer match this request. The Broker appended one member to each of `Signature-Agent`, `Signature-Input` and `Signature`, and its `sig2` covers only its own request and its own member:
+A request a Broker sent to an Exchange: here a Broker-led `DiscoverResources` query that the Broker originated. The Broker's directory is `https://broker.example`, and its signature is made with the RFC 9421 Appendix B.1.4 test key. The Broker signs alone, so the request carries one signature and one `Signature-Agent` member:
 
 ```http
 POST /fora.v1.ExchangeService/DiscoverResources HTTP/1.1
@@ -469,9 +465,9 @@ Content-Type: application/json
 Content-Length: 221
 Content-Digest: sha-256=:FKKQPDds8rayE2fEUjhwSCgsyuVv4pmrHLM6S0MiZQM=:
 Authorization:
-Signature-Agent: sig1="https://research.acme.com", sig2="https://broker.example"
-Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth", sig2=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
-Signature: sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:, sig2=:uswnfvODkwLt3viBYqH0CLxIMlB10SoAv03NatqQGRH/22M9/cPYiffJUjWEmJxyJgu7baklvz59fZSJoJ3rCw==:
+Signature-Agent: sig1="https://broker.example"
+Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
+Signature: sig1=:TVAmOQwm7x09EoMAUGPifHsGEGOxV7hqN9CF12Wb7SsWp2Kx2BxAKu8N+8fjprpL3ipAxkGk2rhonqMxW8XIBg==:
 ```
 
 The body is these 221 bytes, with no trailing newline:
@@ -481,15 +477,15 @@ The body is these 221 bytes, with no trailing newline:
 {"ver":"1.0","exchange":"exchange.example","requester":{"id":"research-bot-42","domain":"research.acme.com","type":"REQUESTER_TYPE_AGENT"},"uris":["https://publisher.example/premium/ai-funding-roundup"],"deadline":"0.4s"}
 ```
 
-The Exchange verifies `sig2` against the key its `keyid` selects in the directory the `sig2` member names, and authenticates the caller as the Broker. `sig1` covers the agent's original body through its `content-digest`, so it does not verify against this request, and the Exchange attributes nothing to it. The signature base the Broker signed is:
+The Exchange verifies `sig1` against the key its `keyid` selects in the directory the `sig1` member names, and authenticates the caller as the Broker. A re-packaged execute request looks the same in its headers; the agent's identity and consent travel in each item's `agent_acceptance`. The signature base the Broker signed is:
 
 ```
 "@method": POST
 "@target-uri": https://exchange.example/fora.v1.ExchangeService/DiscoverResources
 "content-digest": sha-256=:FKKQPDds8rayE2fEUjhwSCgsyuVv4pmrHLM6S0MiZQM=:
 "authorization": 
-"signature-agent";key="sig2": "https://broker.example"
-"@signature-params": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig2");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
+"signature-agent";key="sig1": "https://broker.example"
+"@signature-params": ("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"
 ```
 
 ### Replay protection
@@ -514,7 +510,7 @@ On FORA RPCs, an RFC 9421 signature that conforms to this profile is the **only*
 
 A signed `retrieval_endpoint` returned by a transaction is, by default, a bearer token: anyone holding it before `expires_at` can fetch. FORA **optionally** binds the URL to the purchasing agent, DPoP-style ([RFC 9449](https://www.rfc-editor.org/rfc/rfc9449)):
 
-- The Exchange embeds `agent_identity_hash` — the [RFC 7638](https://www.rfc-editor.org/rfc/rfc7638) JWK Thumbprint (SHA-256) of the agent's Ed25519 request-signing key — as the URL's `agent_id` query parameter, which the URL signature covers, and echoes it on the execute-path response (`TransactionResponse.agent_identity_hash`, produced directly by the Exchange — the Broker is not in the execute response path for this field).
+- The Exchange embeds `agent_identity_hash` — the [RFC 7638](https://www.rfc-editor.org/rfc/rfc7638) JWK Thumbprint (SHA-256) of the agent's Ed25519 key, the key that signed the request on a direct call or the agent's `agent_acceptance` on a purchase a Broker relayed — as the URL's `agent_id` query parameter, which the URL signature covers, and echoes it on the execute-path response (`TransactionResponse.agent_identity_hash`, produced directly by the Exchange — the Broker is not in the execute response path for this field).
 - A capable delivery endpoint (edge function) verifies the binding without contacting the fetcher's directory: verify the URL's Ed25519 signature against the Exchange's published public key (proves the hash is Exchange-issued and untampered), then require the fetcher to present its public key and a WBA signature over the retrieval request ([Retrieval proof of possession](#retrieval-proof-of-possession)), and check that `thumbprint(presented key)` equals both the signature's `keyid` and `agent_identity_hash`. The fetcher's key arrives in the request, so no directory fetch is needed for it, while a generic WBA verifier can still resolve the same key from the agent's directory. The edge does resolve `kid` to the Exchange's public key, from a cached directory or from keys pinned in its configuration.
 - Bound to the request-signing key of whoever fetches, never to the principal/delegation, and exactly one key per transaction. Who that is depends on where the key lives: an agent embedding the SDK holds its own key and fetches for itself, while a custodial agent never fetches at all -- its identity service holds the key and fetches on its behalf. Either way the fetcher is the key holder, which is what the edge checks.
 - Enforcement is **NOT mandatory**: a CDN that cannot run code uses its native signed-URL scheme (a CloudFront RSA canned policy, for example) + short TTL + TLS. FORA reference implementations run on edge functions and **do** enforce it.
diff --git a/website/src/content/docs/protocol/discovery-paths.mdx b/website/src/content/docs/protocol/discovery-paths.mdx
index 0a656996..d5b48d70 100644
--- a/website/src/content/docs/protocol/discovery-paths.mdx
+++ b/website/src/content/docs/protocol/discovery-paths.mdx
@@ -10,7 +10,7 @@ An AI agent can enter the FORA flow through six paths. All paths converge on the
 | Path | Entry Point | Use Case |
 |---|---|---|
 | [A: Proactive Discovery](#path-a-proactive-discovery-via-forajson) | `fora.json` | Agent checks before accessing content |
-| [B: Broker-Mediated](#path-b-broker-mediated-multi-exchange) | Broker | Agent delegates to multi-exchange router |
+| [B: Broker-Mediated](#path-b-broker-mediated-multi-exchange) | Broker | Agent hands discovery to a multi-exchange router |
 | [C: Accidental Discovery](#path-c-accidental-discovery-via-edge-function-403) | 403 response | Wandering bot hits protected content |
 | [D: RSL-First](#path-d-agent-reads-rsl-directly) | `rsl.txt` | Agent reads terms, then finds Exchange |
 | [E: Batch Multi-URL](#path-e-batch-multi-url-acquisition) | Broker | Agent needs multiple resources at once |
@@ -63,7 +63,7 @@ sequenceDiagram
 
 ## Path B: Broker-Mediated Multi-Exchange
 
-The agent delegates to a FORA Broker, which queries multiple Exchanges in parallel, compares offers, and selects the best deal.
+The agent hands discovery to a FORA Broker, which chooses the Exchanges, queries multiple Exchanges in parallel, compares offers, and selects the best deal.
 
 ```mermaid
 sequenceDiagram
diff --git a/website/src/content/docs/protocol/role-composition.mdx b/website/src/content/docs/protocol/role-composition.mdx
index 3a21697c..4c46d870 100644
--- a/website/src/content/docs/protocol/role-composition.mdx
+++ b/website/src/content/docs/protocol/role-composition.mdx
@@ -35,7 +35,7 @@ The `WellKnownManifest.role` field identifies which role a given subdomain holds
 Three properties keep the trust model intact under multi-role operation:
 
 1. **Per-role key separation.** Each role publishes its own keys in its own WBA directory — the JOSE JWK Set (`WBAFile.keys`) served at `/.well-known/http-message-signatures-directory` for that role's domain, with each key identified by its RFC 7638 JWK Thumbprint (the RFC 9421 `keyid`). Keys are no longer carried in `WellKnownManifest`. An operator's Exchange key cannot sign messages that an Agent role would accept, and vice versa, because consumers look up keys by `(domain, role)`, not by operator.
-2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures applied **hop-by-hop** — each party signs the request it sends with its own labeled signature. A Broker re-packages the request and signs it as its own, so its signature proves which Broker sent it, and the agent's consent to a transaction is the `AgentAcceptance` signed into the body. The Exchange verifies the sender's signature and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The forwarding path is established at discovery and the Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate or alter the agent's consent without breaking the `AgentAcceptance` signature in the body, and cannot deny sending a request it signed — both of which any auditor with access to the Exchange's request logs can check.
+2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures applied **hop-by-hop** — each party signs the request it sends with its own labeled signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone, so its signature proves which Broker sent it; on a purchase the agent's identity and consent are the `AgentAcceptance` signed into the body. The Exchange verifies the request signature and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The forwarding path is established at discovery and the Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate or alter the agent's consent without breaking the `AgentAcceptance` signature in the body, and cannot deny sending a request it signed — both of which any auditor with access to the Exchange's request logs can check.
 3. **Independent reconciliation records.** Settlement reconciliation uses three independent records (Exchange ledger, CDN access log, `UsageReport`) that must agree within the published tolerance — see [Transaction Flow → Reconciliation via Signed URLs](/protocol/transaction-flow/#reconciliation-via-signed-urls). Collusion between two co-operated roles still has to produce consistent records across all three, which is detectable by any auditor with access to the CDN logs and the dispute record.
 
 In other words: the protocol does not assume that distinct roles are run by distinct operators. It assumes that distinct roles produce distinct, independently verifiable signatures and records. Multi-role operators inherit that property by following the standard manifest discipline.
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 4c0794de..7250638b 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -435,7 +435,7 @@ The SDK sends `DiscoverResources` to SSP-Alpha — `POST https://exchange.ssp-al
 
 ---
 
-## Phase 2b: Cross-Provider via Broker (Header Signature Chain, OfferGroups, SimHash)
+## Phase 2b: Cross-Provider via Broker (Broker-Signed Queries, OfferGroups, SimHash)
 
 If Anthropic uses its hosted Broker instead of the SDK directly, the Broker provides cross-provider intelligence. The agent sends a `DiscoveryRequest` to the Broker with multiple URIs (`BrokerService.Resolve` is discovery-only — it returns offers grouped by URI; execution happens later via a separate `ExecuteTransaction` call). Agent → Broker:
 
@@ -465,12 +465,11 @@ If Anthropic uses its hosted Broker instead of the SDK directly, the Broker prov
 }
 ```
 
-### Broker Fans Out with Its Own Signed Requests
+### Broker Fans Out with Its Own Signed Queries
 
-The Broker queries both Exchanges. For each Exchange, the Broker re-packages the request (here it batches the URIs and sets its own `deadline`) and:
-1. Preserves the agent's original `requester` message
-2. Leaves the agent's RFC 9421 signature headers untouched and does not cover them, because the request they were computed over has changed
-3. Signs its own request with its own labeled RFC 9421 HTTP Message Signature, covering its own request components and only its own `Signature-Agent` member
+Discovery through the Broker is Broker-led: the agent asked the Broker, and the Broker chooses which Exchanges to query. For each Exchange, the Broker originates its own query (here it batches the URIs and sets its own `deadline`) and:
+1. Carries the agent's `requester` message unchanged
+2. Signs the query alone, with its own labeled RFC 9421 HTTP Message Signature covering its own request components and only its own `Signature-Agent` member. The query carries no agent signature headers
 
 Broker → SSP-Alpha (multi-URI batch query) — `POST https://exchange.ssp-alpha.com/fora/v1/fora.v1.ExchangeService/DiscoverResources`:
 
@@ -494,7 +493,7 @@ Broker → SSP-Alpha (multi-URI batch query) — `POST https://exchange.ssp-alph
 }
 ```
 
-Both labeled signatures sit in the `Signature`/`Signature-Input` headers, but only the Broker's covers this request. SSP-Alpha's Exchange verifies the Broker's signature -- it looks up the public key by its `keyid` thumbprint in the key directory named by the Broker's own `Signature-Agent` member, Ed25519 verifies, and authenticates the caller as the Broker. The agent's untouched signature does not match the re-packaged request, and the Exchange attributes nothing to it. A discovery query moves no money, so it carries no agent consent; see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
+SSP-Alpha's Exchange verifies the Broker's signature -- it looks up the public key by its `keyid` thumbprint in the key directory named by the Broker's `Signature-Agent` member, Ed25519 verifies, and authenticates the caller as the Broker. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately. A discovery query moves no money, so it carries no agent consent; see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 SSP-Alpha returns `offer_groups` (batch mode -- multiple URIs in query):
 
@@ -756,7 +755,7 @@ SDK or Broker commits to the subscription offer.
 }
 ```
 
-The Broker posts this request to the Exchange as its own: it signs it with its own labeled RFC 9421 signature, covering its own request components and only its own `Signature-Agent` member, and leaves the agent's signature headers untouched. The Exchange authenticates the caller as the Broker (its public key selected by `keyid` thumbprint in the directory the Broker's own `Signature-Agent` member names). The agent's consent is the `agent_acceptance` on the item, which the Exchange verifies against the agent's key in its directory at `claude.ai/.well-known/http-message-signatures-directory`. This example carries no delegation; a delegated request through a Broker needs the agent to have delegated to the Broker's key.
+The Broker re-packaged this request for SSP-Alpha and signs it alone, with its own labeled RFC 9421 signature covering its own request components and only its own `Signature-Agent` member. The Exchange authenticates the caller as the Broker (its public key selected by `keyid` thumbprint in the directory the Broker's `Signature-Agent` member names). The agent's identity and consent are the `agent_acceptance` on the item: a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}`, which the Exchange verifies against the agent's registered key, resolved from `requester.domain` (`claude.ai/.well-known/http-message-signatures-directory`). That key also gives the delivery-URL binding, and a delegation's `cnf.jkt` would be checked against it.
 
 ### Inside SSP-Alpha's Exchange
 
@@ -767,9 +766,9 @@ The Broker posts this request to the Exchange as its own: it signs it with its o
    - Fetch the Broker's public key from the directory its own covered
      Signature-Agent member names (key by keyid thumbprint)
    - Ed25519 verify -> pass; the caller is the Broker
-   - The agent's untouched signature is not attributed to anyone
-2b. Verify the agent's agent_acceptance on each item against the agent's key
-   in claude.ai/.well-known/http-message-signatures-directory -> pass
+2b. Verify the agent's agent_acceptance on each item against the agent's
+   registered key, resolved from requester.domain
+   (claude.ai/.well-known/http-message-signatures-directory) -> pass
 2c. Verify `agent_request_acceptance` when the request carries it (this example
    omits the optional field): Ed25519 verify the signed request set against the
    requester's published agent key, then require this request's items to be the
@@ -788,8 +787,9 @@ The Broker posts this request to the Exchange as its own: it signs it with its o
    - 850000 > 3300 -> sufficient quota, proceed
    - Deduct 3300 from quota -> new remaining: 846700
 7. Compute agent identity hash:
-   agentHash = RFC 7638 JWK thumbprint of the agent's request-signing public key
-             = the keyid this request's RFC 9421 signature was just verified with
+   agentHash = RFC 7638 JWK thumbprint of the agent's public key
+             = the key agent_acceptance was just verified with in step 2b
+               (the Broker signed the transport request, so its keyid is not it)
              = "NzbLsXh8..."
    (A hash of the agent's id and domain would bind nothing: the edge checks the
    hash against a key the fetcher must prove it holds, and anyone can recompute
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 2cc10ed8..b076b270 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -17,7 +17,7 @@ Without Broker (direct, single exchange):
 
 ## Multi-Hop Routing
 
-Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. Nothing about the route is carried in the message body: each party signs the request it sends with one labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers, a conformant [Web Bot Auth](/protocol/authentication/#the-web-bot-auth-profile) signature with its own `Signature-Agent` member naming its own key directory. FORA's Broker re-packages each request: it posts to the Exchange's URL with a new body, so it does not cover the agent's signature. It signs its own request on its own terms, covering its own request components and only its own `Signature-Agent` member, and leaves the agent's signature headers untouched. The Exchange authenticates the caller as the Broker, and takes the agent's consent to a transaction from the `AgentAcceptance` the agent signed into the body, which does not depend on the route. A party that forwards a request unchanged MAY instead cover the previous signature, and only then does the ordered set of signatures form a tamper-evident forwarding chain. The Exchange resolves each signature's key in the directory that signature's own member names. Both cases and the verification steps are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
+Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. Nothing about the route is carried in the message body: each party signs the request it sends with one labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers, a conformant [Web Bot Auth](/protocol/authentication/#the-web-bot-auth-profile) signature with its own `Signature-Agent` member naming its own key directory. FORA's Broker never forwards an agent's request unchanged, so it never covers an agent's signature. Discovery through the Broker is Broker-led: the agent does not know the Exchange at discovery time, so the Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone. Execute through the Broker is re-packaged: the Broker builds a fresh `TransactionRequest` per Exchange and signs it alone. In both cases the Broker's signature covers its own request and only its own `Signature-Agent` member, and the Exchange authenticates the caller as the Broker. On a relayed purchase, the agent's identity and consent come from the `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}` verified against the agent's registered key; that key also gives the delivery-URL binding. The rules, including the general WG-00 rule for a party that forwards a request unchanged, are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 **Chain-depth caps.** Two fields bound how deep a chain may go:
 
@@ -59,7 +59,7 @@ Key fields:
 - `acceptable_restrictions` -- the restrictions the agent is willing to accept, grouped by axis; axis `FUNCTION` carries the intended use (RAG, training, search, etc.)
 - `requester.scopes` -- entitlement scopes; `["*"]` means unrestricted public access
 - billing carries no request field: the Exchange resolves the caller's account (the `billing_ref` minted at `ExchangeService.Register`) from the verified request signature, never from anything the caller sends
-- request authentication -- an RFC 9421 HTTP Message Signature over the request that follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) (the agent's key is published in its key directory); when a Broker relays the request, it re-packages it and signs it with its own labeled HTTP Message Signature (no in-message hop list)
+- request authentication -- an RFC 9421 HTTP Message Signature over the request that follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) (the agent's key is published in its key directory); a query that reaches an Exchange through a Broker is one the Broker originated and signed alone (no in-message hop list)
 
 ### Response (`ResourceResponse`)
 
@@ -380,7 +380,7 @@ The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A b
 ### What Happens Inside the Exchange
 
 1. Validate request (proto validation)
-2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a request a Broker re-packaged — and, only on unchanged forwarding, each earlier signature the sender covered
+2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a request the Broker re-packaged — and, on a re-packaged request, each item's `agent_acceptance` against the agent's registered key
 3. Verify `agent_request_acceptance` when present: the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange. This runs **before** the idempotency lookup — request-level idempotency state is never created or served for a request whose set claim has not been proven, otherwise a mutated request could consume the key and a later honest retry would replay its result
 4. Check idempotency key (prevent double-charge on retry)
 5. Verify offer signature (reconstruct offer from signed token)
diff --git a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
index 620e6c99..ffa61be4 100644
--- a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
+++ b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
@@ -938,7 +938,7 @@ FORA replaces the **data acquisition** layer of due diligence, not the analysis.
 
 **Authentication at every step:**
 - **Agent to Broker**: RFC 9421 HTTP Message Signature (alg=ed25519) in HTTP headers
-- **Broker to Exchange**: the Broker re-packages the request and signs it with its own labeled RFC 9421 HTTP Message Signature (alg=ed25519) in the HTTP headers, covering its own request and its own `Signature-Agent` member; the agent's consent rides in the body as `AgentAcceptance`
+- **Broker to Exchange**: the Broker originates its own discovery queries and re-packages execute requests, and signs each alone with its own labeled RFC 9421 HTTP Message Signature (alg=ed25519), covering its own request and its own `Signature-Agent` member; on a purchase the agent's identity and consent ride in the body as `AgentAcceptance`
 - **Exchange to Agent**: `exchange_signature` on every Offer (Ed25519, stateless verification)
 - **Signed URLs**: Ed25519 (Exchange-signed, publicly verifiable, agent identity bound)
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 68da8f2e..3a1ecb6d 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -35,27 +35,36 @@ specifies the profile in one place, and the other pages refer to it:
 - Signers use a `Signature-Agent` member key equal to the signature label.
   Verifiers also accept a member key that differs from the label, a signature
   without a nonce, and a member with `type=directory`. The legacy sf-string
-  `Signature-Agent` is accepted on a direct single-hop call only: a relay
-  refuses it, because it cannot add its own member without breaking the agent's
+  `Signature-Agent` is accepted on a direct single-hop call only: a party that
+  forwards a request unchanged refuses it, because it cannot add its own member without breaking the agent's
   signature, and answers with `Accept-Signature` asking for the dictionary form.
   Verifiers refuse a signature with no `tag`, and a `Signature-Agent` member that
   is not an https origin, and answer a missing component with `Accept-Signature`
   listing what they require. `Signature-Agent` is never empty; an empty
   `Authorization` stays valid.
-- Forwarding follows WG-00 §5.2.2. A party that forwards a request unchanged
-  in every component a previous signature covers MAY cover that signature, and
-  then covers its `Signature-Input` and every component it lists as well. A relay
-  that re-packages the request signs its own request on its own terms. FORA's
-  Broker re-packages every request (it posts to the Exchange's URL with a new
-  body), so its signature covers its own request components and only its own
-  `Signature-Agent` member, and it leaves the agent's signature headers
-  untouched. Every Broker signature therefore carries exactly one
-  `Signature-Agent` member and passes single-member WBA verifiers such as
-  Cloudflare's `web-bot-auth`. The Exchange authenticates the caller as the
-  Broker and takes the agent's consent to a transaction from the
-  `AgentAcceptance` signed into the body, which does not depend on the route. A
-  delegated request through a Broker needs the agent to have delegated to the
-  Broker's key. The Exchange resolves each signer's key in the directory that
+- Forwarding follows WG-00 §5.2.2 as the general rule: a party that forwards a
+  request unchanged in every component an earlier signature covers MAY cover
+  that signature, and then covers its `Signature-Input` and every component it
+  lists as well. FORA's Broker never forwards an agent's request unchanged, so
+  it never covers an agent's signature. Discovery through the Broker is
+  Broker-led: the Broker chooses the Exchanges and originates its own queries,
+  signed by the Broker alone. How an agent proves a holder-of-key entitlement
+  at discovery time through a Broker is an open protocol question, tracked
+  separately. Execute through the Broker is
+  re-packaged: the Broker builds a fresh request per Exchange and signs it
+  alone. Every Broker signature covers its own request and only its own
+  `Signature-Agent` member, so single-member WBA verifiers such as Cloudflare's
+  `web-bot-auth` accept it. On a relayed purchase, the agent's identity and
+  consent come from `AgentAcceptance`, the detached Ed25519 signature over
+  `{offer_sig, requester_id, requester_domain, idempotency_key}`, verified
+  against the agent's registered key resolved from `Requester.domain`. That key
+  gives the delivery-URL binding, and a delegation's `cnf.jkt` is checked
+  against it, so delegation stays bound to the agent's key through the Broker.
+  A Broker is never delegated to. This replaces the earlier statement that a
+  Broker may project a delegated request only when the agent has delegated to
+  the Broker's key.
+  `AgentAcceptance` is application-level consent and the profile does not
+  change it. The Exchange resolves each signer's key in the directory that
   signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
   signature plus `@method` and `@target-uri`. The edge keeps verifying offline
@@ -72,9 +81,9 @@ specifies the profile in one place, and the other pages refer to it:
   Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
   reference library. It is the only deviation from WG-00.
 
-Authentication includes a complete signed request, the request a Broker
-re-packaged and signed for the Exchange, and a signed directory response, all
-with real values that can be verified.
+Authentication includes a complete signed request, a query a Broker originated
+and signed alone, and a signed directory response, all with real values that
+can be verified.
 
 **Upcoming profile change (not in this release).** The SDKs released as v1.0.8
 do not implement the profile. They send `Signature-Agent` as a bare URL, set no
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index ac23c498..204e473f 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -88,7 +88,7 @@ Scoped, time-limited, spend-capped credential. The credential itself is opaque b
 
 ### Multi-hop forwarding (no message — HTTP layer)
 
-There is no in-message hop chain. Multi-hop forwarding (Agent → Broker → … → Exchange) is carried in **RFC 9421 HTTP Message Signatures** in the headers: each party signs the request it sends with one labeled signature. A Broker re-packages the request and signs it as its own; the agent's consent to a transaction is `AgentAcceptance` in the body. Only on unchanged forwarding, where each hop covers the signature before it, do the signatures form a tamper-evident chain (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The Exchange resolves each `keyid` (an RFC 7638 thumbprint) in the directory the signer's own `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`, and enforces `RequestConstraints.max_hops` / `WellKnownManifest.max_intermediary_hops` by counting them. Responses do not retrace the chain — the terminal Exchange returns directly to the originating agent (bound by `agent_identity_hash`).
+There is no in-message hop chain. Multi-hop forwarding (Agent → Broker → … → Exchange) is carried in **RFC 9421 HTTP Message Signatures** in the headers: each party signs the request it sends with one labeled signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone; on a purchase the agent's identity and consent are `AgentAcceptance` in the body. Only where a party forwards a request unchanged and covers the signature before it do the signatures form a tamper-evident chain, and FORA's Broker never does (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The Exchange resolves each `keyid` (an RFC 7638 thumbprint) in the directory the signer's own `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`, and enforces `RequestConstraints.max_hops` / `WellKnownManifest.max_intermediary_hops` by counting them. Responses do not retrace the chain — the terminal Exchange returns directly to the originating agent (bound by `agent_identity_hash`).
 
 ## Messages -- Offers and Pricing
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index dc29f582..e2644b4d 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -110,7 +110,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T20: Kickback-driven offer selection
 **Attack**: Broker always routes to a specific Exchange regardless of pricing.
-**Countermeasure (protocol)**: Agent can bypass Broker and query Exchanges directly. A Broker signs every request it sends with its own RFC 9421 HTTP Message Signature, so the Exchange knows which Broker sent it and the Broker cannot deny it. The agent's consent to a transaction is the `AgentAcceptance` it signed into the body, which a Broker cannot alter or forge, and `agent_request_acceptance` binds the full ordered set of offers the agent chose.
+**Countermeasure (protocol)**: Agent can bypass Broker and query Exchanges directly. A Broker signs every request it sends alone, with its own RFC 9421 HTTP Message Signature, so the Exchange knows which Broker sent it and the Broker cannot deny it. The agent's consent to a transaction is the `AgentAcceptance` it signed into the body, which a Broker cannot alter or forge, and `agent_request_acceptance` binds the full ordered set of offers the agent chose.
 
 ### T21: Query intelligence harvesting
 **Attack**: Broker logs every DiscoverResources query, sells the data.
@@ -118,7 +118,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T-BRK-1: Request-set mutation during execute fan-out
 **Attack**: The agent commits to an ordered set of offers and hands execution to a Broker. While projecting the set into per-Exchange `ExecuteTransaction` subrequests, the Broker mutates it at the **item** level: it removes an item, appends one the agent never chose, reorders the items, or sends a valid subset first so the agent's idempotency key is consumed by a request the agent did not make — a later honest retry then replays the mutilated result instead of executing the real set.
-**Why the hop stack does not cover this**: The RFC 9421 forwarding-signature stack (T20, T-DEL-4) proves who forwarded a request that travels **byte-for-byte**. A projected subrequest is a new HTTP request the Broker authors and signs itself, so hop-chain integrity says nothing about which items the projected body carries — see [Projected execute requests](/protocol/authentication/#projected-execute-requests).
+**Why the transport signature does not cover this**: The Broker's RFC 9421 signature (T20, T-DEL-4) proves which Broker sent a subrequest. A projected subrequest is a new HTTP request the Broker authors and signs alone, so that signature says nothing about whether the projected body carries the items the agent chose — see [Projected execute requests](/protocol/authentication/#projected-execute-requests).
 **Countermeasure (protocol)**: **`TransactionRequest.agent_request_acceptance`.** The agent signs the complete ordered set of `(offer signature, exchange)` references plus the requester and idempotency key with its own Ed25519 key, and the Broker must forward the envelope unchanged on every subrequest. Each Exchange verifies the signature and requires its subrequest to equal the complete in-order projection of the signed set addressed to itself, **before** creating or serving any request-level idempotency state. A removed, appended, reordered, or subset request fails the projection check and claims nothing. The field is optional for wire compatibility: an older client that omits it keeps per-item execution semantics (each item still carries its own `agent_acceptance`) but gets no request-level set claim.
 
 ## 5. Third-Party Attacks
@@ -251,7 +251,7 @@ Line 3: Legal/contractual enforcement
 ### T-DEL-4: Forwarding chain forgery
 
 **Attack**: Attacker inserts a fake hop into the forwarding chain, claiming to be a trusted Broker to gain access or inject misleading provenance — or reorders or drops an existing hop.
-**Countermeasure (protocol)**: **Every sender signs its own request (RFC 9421, Ed25519).** A Broker re-packages the request and signs it with its own key, so it cannot claim to be another Broker: the Exchange verifies that signature against the key in the directory the Broker's own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, the key identified by its RFC 7638 thumbprint, the RFC 9421 `keyid`). The agent's consent cannot be forged or moved onto another request, because it is the `AgentAcceptance` signed into the body. On unchanged forwarding each hop also covers the signature before it, so a forged, reordered, dropped or inserted hop breaks a later signature and the request is rejected. See [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
+**Countermeasure (protocol)**: **Every sender signs its own request (RFC 9421, Ed25519).** A Broker originates discovery queries and re-packages execute requests, and signs each alone with its own key, so it cannot claim to be another Broker: the Exchange verifies that signature against the key in the directory the Broker's own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, the key identified by its RFC 7638 thumbprint, the RFC 9421 `keyid`). The agent's identity and consent on a purchase cannot be forged or moved onto another request, because they are the `AgentAcceptance` signed into the body over the offer signature, requester and idempotency key. Where a party forwards a request unchanged and covers the signature before it, a forged, reordered, dropped or inserted hop breaks a later signature and the request is rejected. See [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 ### T-DEL-5: Scope pollution
 

From 50d862cd63e39f98bd9d60a31fa6a08209f95cc0 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Fri, 2 Oct 2026 15:11:46 -0400
Subject: [PATCH 004/164] Add a pre-signing hook, CallError.code, typed request
 inputs and identity helpers to the Python SDK

Four additions for callers that drive FORA services through the SDK and need
to check what the services answer:

- ClientConfig.before_sign receives every request as an httpx.Request just
  before it is signed. The request it returns is signed and sent, and the
  reply is decoded as usual, so a deliberately altered message still goes
  through the SDK's own signer and decoder. A hook that changes the method
  or URL, or sets a header the signer emits, is refused as MALFORMED; the
  Host and Content-Length a hook sets never reach the peer.
- CallError.code holds the Connect code of a peer's answer, from an error
  envelope or a non-JSON error status, and is None for local failures,
  refused redirects and the content leg.
- Every verb that takes a request accepts the generated wire model as well
  as a dict. to_wire renders a model as the JSON object the SDK sends: the
  fields the caller set, under their proto names. A model and the equivalent
  dict reach the wire as the same bytes.
- generate_key, directory_document and signing_transport_for mint an Ed25519
  identity a verifier resolves: a key and its thumbprint, the Web Bot Auth
  key directory publishing it with the validity window the resolver
  requires, and a signer that signs as it.

prepare now reads its signing settings through a SigningSettings protocol
that ClientConfig satisfies, which keeps it within the argument limit. The
additions are Python-only for now; Go and TypeScript parity follows.
---
 proto/CHANGELOG.md                            |  25 ++
 sdk/python/fora_sdk/__init__.py               |  14 +-
 sdk/python/fora_sdk/client/__init__.py        |  22 +-
 sdk/python/fora_sdk/client/_call.py           |  90 ++++-
 sdk/python/fora_sdk/client/_verbs.py          |  89 ++--
 sdk/python/fora_sdk/client/errors.py          |   7 +
 sdk/python/fora_sdk/identity.py               |  84 ++++
 sdk/python/fora_sdk/sync/__init__.py          |  21 +-
 sdk/python/fora_sdk/wire.py                   |  17 +
 sdk/python/tests/signed_peer.py               |  97 +++++
 sdk/python/tests/test_before_sign.py          | 379 ++++++++++++++++++
 sdk/python/tests/test_call_error_code.py      | 186 +++++++++
 sdk/python/tests/test_identity_helpers.py     | 203 ++++++++++
 sdk/python/tests/test_typed_inputs.py         | 205 ++++++++++
 .../src/content/docs/reference/changelog.mdx  |  25 ++
 15 files changed, 1378 insertions(+), 86 deletions(-)
 create mode 100644 sdk/python/fora_sdk/identity.py
 create mode 100644 sdk/python/tests/signed_peer.py
 create mode 100644 sdk/python/tests/test_before_sign.py
 create mode 100644 sdk/python/tests/test_call_error_code.py
 create mode 100644 sdk/python/tests/test_identity_helpers.py
 create mode 100644 sdk/python/tests/test_typed_inputs.py

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 33e8d45d..72700a0f 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -1,5 +1,30 @@
 # FORA Protocol Changelog
 
+## Unreleased
+
+**Python SDK: four additions for callers that test FORA services through the SDK.
+Python-only for now; Go and TypeScript parity follows.**
+
+- `ClientConfig.before_sign` is called with every request just before it is signed,
+  as an `httpx.Request`. The request it returns is what gets signed and sent, and
+  the reply is decoded as usual, so a test can send a deliberately altered message
+  through the SDK's own signer and decoder. The hook cannot change the method or
+  URL, and cannot set a header the signer emits. Either refuses the call with
+  `CallError(MALFORMED)`.
+- `CallError.code` holds the Connect code of a peer's answer: from an error
+  envelope, or from a non-JSON error status classified by its code. It is `None`
+  for a local failure, a refused redirect and the content leg, whose refusals are
+  edge tokens. `reason` is unchanged.
+- Every verb that takes a request accepts the generated wire model as well as a
+  dict. `to_wire(model)` renders a model as the JSON object the SDK sends: only the
+  fields the caller set, under their proto field names. A model and the equivalent
+  dict reach the wire as the same bytes.
+- `generate_key()` returns a fresh Ed25519 key and its RFC 7638 thumbprint.
+  `directory_document(keys)` returns the Web Bot Auth key-directory JSON for a key
+  set, each key carrying the validity window the SDK's resolver requires.
+  `signing_transport_for(key, directory)` returns a `SigningTransport` that signs as
+  that key.
+
 ## v1.0.8
 
 **Request signatures carry an RFC 9421 `nonce` (SDK fix; no wire change for
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 1c4e203f..552fd4b6 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -93,6 +93,7 @@
     verify_request_server,
 )
 from .idempotency import generate_idempotency_key, validate_idempotency_key
+from .identity import directory_document, generate_key, signing_transport_for
 from .keyresolver import KeyResolver, StaticKeyResolver
 from .licenseterm import (
     RULE_OBLIGATION_OTHER_REQUIRES_DETAIL,
@@ -163,6 +164,7 @@
     WellKnownManifestVersion,
     WellKnownPath,
     manifest_version_refusal,
+    to_wire,
 )
 
 __all__ = [
@@ -237,9 +239,9 @@
     "Verifier",
     "WBAKeyResolver",
     "WBA_DIRECTORY_PATH",
-    "WellKnownManifestVersion",
     "WellKnownEndpointResolver",
     "WellKnownKeyResolver",
+    "WellKnownManifestVersion",
     "WellKnownPath",
     "Window",
     "append_signature",
@@ -257,21 +259,23 @@
     "compile_registration_schema",
     "content_digest",
     "cross_field_rule_ids",
+    "directory_document",
     "dispute_failure_detail",
     "domain_verification_failure_detail",
     "error_detail_from",
     "format_money",
     "generate_idempotency_key",
+    "generate_key",
     "hash_url",
     "host_anchored",
     "host_of",
     "is_bare_domain",
     "is_bare_host",
     "is_safe_schema_pattern",
-    "manifest_version_refusal",
     "jcs_acceptance_payload",
     "jcs_request_acceptance_payload",
     "known_restriction_token",
+    "manifest_version_refusal",
     "monotonic_window",
     "normalize_license_term",
     "normalize_resource_entry",
@@ -287,9 +291,11 @@
     "sign_offer_acceptance",
     "sign_offer_acceptance_jcs",
     "sign_offer_jcs",
-    "sign_request_acceptance_jcs",
     "sign_request",
+    "sign_request_acceptance_jcs",
+    "signing_transport_for",
     "thumbprint",
+    "to_wire",
     "transaction_denial_detail",
     "usage_report_rejection_detail",
     "validate_idempotency_key",
@@ -300,8 +306,8 @@
     "verify_multisig_request_server",
     "verify_offer_acceptance",
     "verify_offer_acceptance_jcs",
-    "verify_request_acceptance_jcs",
     "verify_request",
+    "verify_request_acceptance_jcs",
     "verify_request_server",
     "wba_directory_url",
 ]
diff --git a/sdk/python/fora_sdk/client/__init__.py b/sdk/python/fora_sdk/client/__init__.py
index 046eed7e..f2578ad1 100644
--- a/sdk/python/fora_sdk/client/__init__.py
+++ b/sdk/python/fora_sdk/client/__init__.py
@@ -25,7 +25,7 @@
 
 import asyncio
 import time
-from typing import TYPE_CHECKING, Any
+from typing import TYPE_CHECKING
 
 import httpx
 
@@ -76,6 +76,8 @@
 
     from fora_sdk.core import DiscoveryResult, VerifiedOffer
 
+    from ._verbs import RequestMessage
+
 __all__ = [
     "DEFAULT_CALL_TIMEOUT_SEC",
     "DEFAULT_CONTENT_TIMEOUT_SEC",
@@ -212,7 +214,7 @@ def __init__(
     ) -> None:
         super().__init__(config, http)
 
-    async def discover(self, query: dict[str, Any]) -> DiscoveryResult:
+    async def discover(self, query: RequestMessage) -> DiscoveryResult:
         """Issue DiscoverResources and return one group per requested URI, each carrying
         the fail-closed {verified, rejected} split.
 
@@ -237,7 +239,7 @@ async def execute(
         return _verbs.finish_execute(plan, status, body)
 
     async def report_usage(
-        self, report: dict[str, Any], *, idempotency_key: str | None = None
+        self, report: RequestMessage, *, idempotency_key: str | None = None
     ) -> UsageReportResponse:
         """File a usage report with the Exchange that ISSUED the offer."""
         plan = await asyncio.to_thread(
@@ -247,7 +249,7 @@ async def report_usage(
         return _verbs.finish_report_usage(plan, status, body)
 
     async def dispute(
-        self, request: dict[str, Any], *, idempotency_key: str | None = None
+        self, request: RequestMessage, *, idempotency_key: str | None = None
     ) -> DisputeResponse:
         """File a dispute with the Exchange that issued the offer."""
         plan = await asyncio.to_thread(
@@ -256,7 +258,7 @@ async def dispute(
         status, body = await self._send(plan)
         return _verbs.finish_dispute(plan, status, body)
 
-    async def register(self, request: dict[str, Any]) -> RegisterResponse:
+    async def register(self, request: RequestMessage) -> RegisterResponse:
         """Create this agent's account at the Exchange the request names.
 
         Takes no idempotency key: the message carries none, because registering again
@@ -269,7 +271,7 @@ async def register(self, request: dict[str, Any]) -> RegisterResponse:
         return _verbs.finish_register(plan, status, body)
 
     async def get_account_status(
-        self, request: dict[str, Any]
+        self, request: RequestMessage
     ) -> GetAccountStatusResponse:
         """Read whether this agent's account at the named Exchange is active.
 
@@ -371,7 +373,7 @@ def __init__(
     ) -> None:
         super().__init__(config, http)
 
-    async def resolve(self, request: dict[str, Any]) -> DiscoveryResult:
+    async def resolve(self, request: RequestMessage) -> DiscoveryResult:
         """Run discovery through the Broker, which fans out to the Exchanges it knows."""
         plan = _verbs.plan_resolve(self._config, request)
         status, body = await self._send(plan)
@@ -402,19 +404,19 @@ def __init__(
     ) -> None:
         super().__init__(config, http)
 
-    async def push_resources(self, request: dict[str, Any]) -> PushResourcesResponse:
+    async def push_resources(self, request: RequestMessage) -> PushResourcesResponse:
         """Push or update catalog entries."""
         plan = await asyncio.to_thread(_verbs.plan_push_resources, self._config, request)
         status, body = await self._send(plan)
         return _verbs.finish_push_resources(plan, status, body)
 
-    async def remove_resources(self, request: dict[str, Any]) -> RemoveResourcesResponse:
+    async def remove_resources(self, request: RequestMessage) -> RemoveResourcesResponse:
         """Remove the catalog entries the request's paths name."""
         plan = await asyncio.to_thread(_verbs.plan_remove_resources, self._config, request)
         status, body = await self._send(plan)
         return _verbs.finish_remove_resources(plan, status, body)
 
-    async def refresh_catalog(self, request: dict[str, Any]) -> RefreshCatalogResponse:
+    async def refresh_catalog(self, request: RequestMessage) -> RefreshCatalogResponse:
         """Ask the Exchange to refresh the tenant's catalog from its configured sources."""
         plan = await asyncio.to_thread(_verbs.plan_refresh_catalog, self._config, request)
         status, body = await self._send(plan)
diff --git a/sdk/python/fora_sdk/client/_call.py b/sdk/python/fora_sdk/client/_call.py
index 6ea4e75b..f1c35afc 100644
--- a/sdk/python/fora_sdk/client/_call.py
+++ b/sdk/python/fora_sdk/client/_call.py
@@ -18,8 +18,10 @@
 from __future__ import annotations
 
 import json
-from typing import TYPE_CHECKING, Any, Literal
+from collections.abc import Callable
+from typing import TYPE_CHECKING, Any, Literal, Protocol
 
+import httpx
 from pydantic import ValidationError
 from wire.base import JSON_NAME_ALIAS_ERROR
 
@@ -42,8 +44,6 @@
 )
 
 if TYPE_CHECKING:
-    from collections.abc import Callable
-
     from pydantic import BaseModel
 
     from fora_sdk.signing_transport import SigningTransport
@@ -75,14 +75,25 @@ def rpc_url(base_url: str, service: str, method: str) -> str:
     return f"{base_url.rstrip('/')}/{service}/{method}"
 
 
+#: The pre-signing hook: receives the request the SDK is about to sign and returns the
+#: request to sign and send instead. See ``ClientConfig.before_sign``.
+BeforeSign = Callable[[httpx.Request], httpx.Request]
+
+
+class SigningSettings(Protocol):
+    """The signing knobs ``prepare`` reads. ``ClientConfig`` satisfies it as it stands."""
+
+    signer: SigningTransport | None
+    request_id: Callable[[], str] | None
+    sign_window: Window | None
+    before_sign: BeforeSign | None
+
+
 def prepare(
     op: str,
     url: str,
     message: Any,
-    *,
-    signer: SigningTransport | None,
-    request_id: Callable[[], str] | None,
-    sign_window: Window | None = None,
+    settings: SigningSettings,
 ) -> tuple[bytes, dict[str, str]]:
     """Render one request to the bytes that are both signed and sent.
 
@@ -101,22 +112,66 @@ def prepare(
     # here can be mistaken for part of the proof. The correlation id is not covered and is
     # not meant to be: it identifies the request in two sets of logs, it authorises
     # nothing.
-    if request_id is not None:
-        headers[RequestIDHeader] = request_id()
-    if signer is not None:
+    if settings.request_id is not None:
+        headers[RequestIDHeader] = settings.request_id()
+    if settings.before_sign is not None:
+        body, headers = _apply_before_sign(op, url, body, headers, settings.before_sign)
+    if settings.signer is not None:
         try:
-            signed = signer.sign_outbound(
-                method="POST", url=url, body=body, authorization="", window=sign_window
+            signed = settings.signer.sign_outbound(
+                method="POST", url=url, body=body, authorization="", window=settings.sign_window
             )
         except Exception as exc:  # custody can fail any way it likes
             # NOT_SIGNABLE, matching what the content leg answers for the same missing
             # holder: a caller branching on the kind sees one condition under one class,
             # whichever verb met it first.
             raise CallError(CallErrorKind.NOT_SIGNABLE, op, cause=exc) from exc
+        if settings.before_sign is not None:
+            # The signer owns every header it emits. Derived from what it emitted, not
+            # listed, so the refused set cannot drift from the signer.
+            owned = {name.lower() for name in signed.headers}
+            clash = sorted(name for name in headers if name.lower() in owned)
+            if clash:
+                raise malformed(op, f"before_sign set headers the signer owns: {clash}")
         headers.update(signed.headers)
     return body, headers
 
 
+# Headers httpx computes from the request itself. A hook's request carries them, and a
+# patched body would otherwise travel with a stale length.
+_TRANSPORT_HEADERS = frozenset({"host", "content-length"})
+
+
+def _apply_before_sign(
+    op: str, url: str, body: bytes, headers: dict[str, str], hook: BeforeSign
+) -> tuple[bytes, dict[str, str]]:
+    """Hand the request to the caller's hook; return the body and headers it chose.
+
+    The request object exists only for this call. The method and URL stay the ones the
+    SDK planned: the address checks and the routing were decided on them.
+    """
+    request = httpx.Request("POST", url, content=body, headers=headers)
+    try:
+        returned = hook(request)
+        if not isinstance(returned, httpx.Request):
+            raise malformed(op, "before_sign must return an httpx.Request")
+        # Read inside the guard: a request whose body cannot be read synchronously is a
+        # hook failure, refused like the others rather than escaping as an httpx error.
+        new_body = returned.read()
+    except CallError:
+        raise
+    except Exception as exc:  # the hook is caller code and may fail any way it likes
+        raise malformed(op, exc) from exc
+    if returned.method != "POST" or returned.url != httpx.URL(url):
+        raise malformed(op, "before_sign must not change the request method or URL")
+    kept = {
+        name: value
+        for name, value in returned.headers.items()
+        if name.lower() not in _TRANSPORT_HEADERS
+    }
+    return new_body, kept
+
+
 #: Whether a request is checked against its generated model before it is signed and sent.
 #: ``"strict"`` is the default; a caller that means to probe a server with a deliberately
 #: invalid message turns it off.
@@ -132,9 +187,7 @@ def prepare(
 Validation = Literal["strict", "off"]
 
 
-def validate_request(
-    op: str, message: Any, model: type[BaseModel], validation: Validation
-) -> None:
+def validate_request(op: str, message: Any, model: type[BaseModel], validation: Validation) -> None:
     """Refuse a request the protocol would reject anyway, before it costs a signature and
     a round trip.
 
@@ -260,12 +313,14 @@ def _parse_json(op: str, status: int, body: str) -> Any:
         # is broken" class. A 2xx that is not JSON is a different thing: the service
         # claimed to answer and did not, which IS malformed.
         if not _HTTP_OK <= status < _HTTP_MULTIPLE_CHOICES:
+            code = connect_code_from_status(status)
             raise CallError(
-                kind_of_connect_code(connect_code_from_status(status)),
+                kind_of_connect_code(code),
                 op,
                 status=status,
-                reason=connect_code_from_status(status),
+                reason=code,
                 cause=exc,
+                code=code,
             ) from exc
         raise CallError(CallErrorKind.MALFORMED, op, status=status, cause=exc) from exc
 
@@ -295,6 +350,7 @@ def _connect_envelope_error(op: str, status: int, payload: Any) -> CallError:
         # content leg, whose detail this SDK writes itself.
         peer_message=detail.message if detail is not None and detail.message else "",
         cause=message if isinstance(message, str) else None,
+        code=code,
     )
 
 
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index 4db255fa..c5a875ba 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -15,6 +15,7 @@
 from dataclasses import dataclass, field, replace
 from typing import TYPE_CHECKING, Any
 
+from pydantic import BaseModel
 from wire.models import (
     DiscoveryRequest,
     DiscoveryResponse,
@@ -59,10 +60,11 @@
     guarded_client,
 )
 from fora_sdk.window import Window
-from fora_sdk.wire import ProtocolVersion
+from fora_sdk.wire import ProtocolVersion, to_wire
 from fora_sdk.wire_canon import from_wire_offer
 
 from ._call import (
+    BeforeSign,
     DEFAULT_CALL_TIMEOUT_SEC,
     DEFAULT_MAX_RPC_READ_BYTES,
     Validation,
@@ -94,6 +96,10 @@
 CATALOG_SERVICE = "fora.v1.CatalogService"
 
 
+#: A request a verb accepts: the generated wire model, or the equivalent dict.
+RequestMessage = dict[str, Any] | BaseModel
+
+
 @dataclass
 class ClientConfig:
     """Everything a client is built from. Every field is injected; the client owns none."""
@@ -133,6 +139,12 @@ class ClientConfig:
     sign_window: Window | None = None
     #: Mints the X-Request-ID correlation value. ``None`` sends no header.
     request_id: Callable[[], str] | None = None
+    #: Called with every request just before it is signed, as an ``httpx.Request``; the
+    #: request it returns is what gets signed and sent, and the reply is decoded as usual.
+    #: For a test that must send a deliberately altered message through the SDK's own
+    #: signer and decoder. The method and URL cannot change, and a header the signer
+    #: emits cannot be set: either refuses the call as malformed.
+    before_sign: BeforeSign | None = None
     #: The freshness window stamped on a delivery-fetch proof.
     proof_window: Window | None = None
     max_rpc_read_bytes: int = DEFAULT_MAX_RPC_READ_BYTES
@@ -176,9 +188,7 @@ def resolve(self, exchange: str) -> bytes | None:  # noqa: ARG002
         return None
 
 
-_NULL_VERIFIER = Verifier(
-    mode=Mode.STRICT, resolver=_NullOfferKeyResolver(), now=lambda: 0
-)
+_NULL_VERIFIER = Verifier(mode=Mode.STRICT, resolver=_NullOfferKeyResolver(), now=lambda: 0)
 
 
 @dataclass(frozen=True)
@@ -195,8 +205,9 @@ class Plan:
     #: and so goes over the address-guarded transport. Mirrors the Go client, which keeps
     #: a second guarded client for exactly these two verbs.
     guarded: bool = False
-    #: The message as sent, kept so the finish step can read the query back (the flat
-    #: fallback's attribution needs the URIs the caller asked about).
+    #: The caller's message, before any ``before_sign`` hook altered it. Kept so the
+    #: finish step can read the query back: the flat fallback's attribution needs the
+    #: URIs the caller asked about.
     sent: dict[str, Any] = field(default_factory=dict)
 
 
@@ -205,7 +216,7 @@ class Plan:
 # ---------------------------------------------------------------------------
 
 
-def plan_discover(cfg: ClientConfig, query: dict[str, Any]) -> Plan:
+def plan_discover(cfg: ClientConfig, query: RequestMessage) -> Plan:
     """Assemble DiscoverResources.
 
     The query is CLONED before ``ver`` and the requester are filled in, so the message the
@@ -317,7 +328,7 @@ def _canonicalize_group(group: Any) -> Any:
 # ---------------------------------------------------------------------------
 
 
-def plan_resolve(cfg: ClientConfig, request: dict[str, Any]) -> Plan:
+def plan_resolve(cfg: ClientConfig, request: RequestMessage) -> Plan:
     """Assemble the Broker's Resolve.
 
     It carries no idempotency key. Pure discovery buys nothing and changes nothing, so
@@ -364,9 +375,7 @@ def finish_resolve(cfg: ClientConfig, plan: Plan, status: int, body: str) -> Dis
 # ---------------------------------------------------------------------------
 
 
-def plan_execute(
-    cfg: ClientConfig, offer: VerifiedOffer, idempotency_key: str | None
-) -> Plan:
+def plan_execute(cfg: ClientConfig, offer: VerifiedOffer, idempotency_key: str | None) -> Plan:
     """Assemble ExecuteTransaction for a VERIFIED offer.
 
     It accepts ONLY a VerifiedOffer — the construction token is module-private to the
@@ -377,9 +386,7 @@ def plan_execute(
     """
     op = "execute"
     if cfg.requester is None:
-        raise malformed(
-            op, "no requester configured; an Exchange resolves who is buying from it"
-        )
+        raise malformed(op, "no requester configured; an Exchange resolves who is buying from it")
     if cfg.signer is None:
         # NOT_SIGNABLE, matching what fetch answers for the same missing holder: a caller
         # branching on the kind sees one condition under one class, whichever verb met it
@@ -468,7 +475,7 @@ def finish_execute(plan: Plan, status: int, body: str) -> TransactionResponse:
 
 
 def plan_report_usage(
-    cfg: ClientConfig, report: dict[str, Any], idempotency_key: str | None
+    cfg: ClientConfig, report: RequestMessage, idempotency_key: str | None
 ) -> Plan:
     """Assemble a usage report for the Exchange that ISSUED the offer — never through a
     Broker, and never to an address from configuration.
@@ -496,9 +503,7 @@ def finish_report_usage(plan: Plan, status: int, body: str) -> UsageReportRespon
     return decode(plan.op, status, body, UsageReportResponse)  # type: ignore[no-any-return]
 
 
-def plan_dispute(
-    cfg: ClientConfig, request: dict[str, Any], idempotency_key: str | None
-) -> Plan:
+def plan_dispute(cfg: ClientConfig, request: RequestMessage, idempotency_key: str | None) -> Plan:
     """Assemble a dispute for the issuing Exchange, over the same vetted routing a usage
     report takes.
 
@@ -530,7 +535,7 @@ class _OfferDerived:
 def _plan_offer_derived(
     cfg: ClientConfig,
     verb: _OfferDerived,
-    message: dict[str, Any],
+    message: RequestMessage,
     idempotency_key: str | None,
 ) -> Plan:
     # Discovery and execute keep the plain transport, because their address is the
@@ -558,7 +563,7 @@ def _plan_offer_derived(
 _CLIENT_ERROR_DOMAIN = "fora.v1.Client"
 
 
-def plan_register(cfg: ClientConfig, request: dict[str, Any]) -> Plan:
+def plan_register(cfg: ClientConfig, request: RequestMessage) -> Plan:
     """Assemble a registration for the Exchange the request names.
 
     The caller's identity is the request SIGNATURE. Nothing in the message says who is
@@ -593,7 +598,7 @@ def finish_register(plan: Plan, status: int, body: str) -> RegisterResponse:
     return decode(plan.op, status, body, RegisterResponse)  # type: ignore[no-any-return]
 
 
-def plan_get_account_status(cfg: ClientConfig, request: dict[str, Any]) -> Plan:
+def plan_get_account_status(cfg: ClientConfig, request: RequestMessage) -> Plan:
     """Assemble a status read for the Exchange the request names.
 
     The request carries no field identifying the caller — the Exchange resolves the
@@ -608,9 +613,7 @@ def plan_get_account_status(cfg: ClientConfig, request: dict[str, Any]) -> Plan:
     op = "get account status"
     sent = _stamp_ver(op, request)
     _require_recipient(op, _str_field(sent, "exchange"))
-    return _plan_routed_keyless(
-        cfg, _Routed(op, GetAccountStatusRequest, "GetAccountStatus"), sent
-    )
+    return _plan_routed_keyless(cfg, _Routed(op, GetAccountStatusRequest, "GetAccountStatus"), sent)
 
 
 def finish_get_account_status(plan: Plan, status: int, body: str) -> GetAccountStatusResponse:
@@ -733,7 +736,7 @@ class _CatalogVerb:
 _REFRESH_CATALOG = _CatalogVerb("refresh catalog", RefreshCatalogRequest, "RefreshCatalog")
 
 
-def plan_push_resources(cfg: ClientConfig, request: dict[str, Any]) -> Plan:
+def plan_push_resources(cfg: ClientConfig, request: RequestMessage) -> Plan:
     """Assemble PushResources. See :func:`_plan_catalog` for the envelope rule."""
     return _plan_catalog(cfg, _PUSH_RESOURCES, request)
 
@@ -742,7 +745,7 @@ def finish_push_resources(plan: Plan, status: int, body: str) -> PushResourcesRe
     return decode(plan.op, status, body, PushResourcesResponse)
 
 
-def plan_remove_resources(cfg: ClientConfig, request: dict[str, Any]) -> Plan:
+def plan_remove_resources(cfg: ClientConfig, request: RequestMessage) -> Plan:
     """Assemble RemoveResources. See :func:`_plan_catalog` for the envelope rule."""
     return _plan_catalog(cfg, _REMOVE_RESOURCES, request)
 
@@ -751,7 +754,7 @@ def finish_remove_resources(plan: Plan, status: int, body: str) -> RemoveResourc
     return decode(plan.op, status, body, RemoveResourcesResponse)
 
 
-def plan_refresh_catalog(cfg: ClientConfig, request: dict[str, Any]) -> Plan:
+def plan_refresh_catalog(cfg: ClientConfig, request: RequestMessage) -> Plan:
     """Assemble RefreshCatalog. See :func:`_plan_catalog` for the envelope rule."""
     return _plan_catalog(cfg, _REFRESH_CATALOG, request)
 
@@ -760,7 +763,7 @@ def finish_refresh_catalog(plan: Plan, status: int, body: str) -> RefreshCatalog
     return decode(plan.op, status, body, RefreshCatalogResponse)
 
 
-def _plan_catalog(cfg: ClientConfig, verb: _CatalogVerb, message: dict[str, Any]) -> Plan:
+def _plan_catalog(cfg: ClientConfig, verb: _CatalogVerb, message: RequestMessage) -> Plan:
     """The one shape all three catalog verbs share.
 
     The request is CLONED before ``ver`` is stamped (fill-when-empty; the caller's value
@@ -781,7 +784,7 @@ def _plan_catalog(cfg: ClientConfig, verb: _CatalogVerb, message: dict[str, Any]
     return _plan(cfg, _Route(op, cfg.base_url, CATALOG_SERVICE, verb.method), sent)
 
 
-def _stamp_ver(op: str, message: dict[str, Any]) -> dict[str, Any]:
+def _stamp_ver(op: str, message: RequestMessage) -> dict[str, Any]:
     sent = _clone(op, message)
     if _str_field(sent, "ver") == "":
         sent["ver"] = ProtocolVersion
@@ -822,7 +825,7 @@ def _require_recipient(op: str, exchange: str) -> None:
 
 
 def _stamp_discovery(
-    op: str, message: dict[str, Any], requester: dict[str, Any] | None
+    op: str, message: RequestMessage, requester: dict[str, Any] | None
 ) -> dict[str, Any]:
     """Fill the envelope a DISCOVERY call carries, which is the mutating envelope minus
     the idempotency key: pure discovery buys nothing and changes nothing, so there is no
@@ -842,7 +845,7 @@ def _stamp_discovery(
 
 
 def _stamp_envelope(
-    op: str, message: dict[str, Any], idempotency_key: str | None
+    op: str, message: RequestMessage, idempotency_key: str | None
 ) -> dict[str, Any]:
     """Fill the two envelope fields the protocol requires on a state-mutating call,
     WITHOUT overwriting what the caller already set.
@@ -886,10 +889,16 @@ def _rate_limit(parsed: Any, wire: Any) -> dict[str, Any] | None:
     return standing
 
 
-def _clone(op: str, message: dict[str, Any]) -> dict[str, Any]:
+def _clone(op: str, message: RequestMessage) -> dict[str, Any]:
     """Copy a caller's message so the SDK can stamp its envelope without touching what the
     caller still holds. A deep copy, because the envelope fields are top-level but a
-    caller re-using a nested object across calls must not see it change either."""
+    caller re-using a nested object across calls must not see it change either.
+
+    A generated model is rendered through :func:`to_wire` instead, which already returns
+    a fresh object. This is the one point every dict-taking verb passes through, so a
+    model and the equivalent dict are serialized the same way exactly once."""
+    if isinstance(message, BaseModel):
+        return to_wire(message)
     try:
         return copy.deepcopy(dict(message))
     except Exception as exc:  # a message that cannot be copied cannot be sent
@@ -906,19 +915,10 @@ class _Route:
     method: str
 
 
-def _plan(
-    cfg: ClientConfig, route: _Route, sent: dict[str, Any], *, guarded: bool = False
-) -> Plan:
+def _plan(cfg: ClientConfig, route: _Route, sent: dict[str, Any], *, guarded: bool = False) -> Plan:
     op = route.op
     url = rpc_url(route.base_url, route.service, route.method)
-    body, headers = prepare(
-        op,
-        url,
-        sent,
-        signer=cfg.signer,
-        request_id=cfg.request_id,
-        sign_window=cfg.sign_window,
-    )
+    body, headers = prepare(op, url, sent, cfg)
     return Plan(
         op=op,
         url=url,
@@ -931,7 +931,6 @@ def _plan(
     )
 
 
-
 def _str_field(record: dict[str, Any] | None, key: str) -> str:
     if record is None:
         return ""
diff --git a/sdk/python/fora_sdk/client/errors.py b/sdk/python/fora_sdk/client/errors.py
index 40bcb24a..53c1fea1 100644
--- a/sdk/python/fora_sdk/client/errors.py
+++ b/sdk/python/fora_sdk/client/errors.py
@@ -69,6 +69,7 @@ def __init__(
         detail: ErrorDetail | None = None,
         peer_message: str = "",
         cause: BaseException | str | None = None,
+        code: str | None = None,
     ) -> None:
         self.kind = kind
         #: The verb that failed, in the SDK's own words ("discover", "fetch content").
@@ -103,6 +104,12 @@ def __init__(
         #: token quoted into it. Deriving from the field would put the SDK's words in the
         #: field that claims to hold a remote party's.
         self.peer_message = peer_message
+        #: The Connect code of the peer's answer, set only where a Connect answer was
+        #: decoded: an error envelope, or a non-JSON error status classified by its code.
+        #: ``None`` for a local failure, a refused redirect, and the content leg, whose
+        #: refusals are edge tokens rather than Connect codes. ``reason`` may hold either
+        #: kind of token; this field holds only the Connect code.
+        self.code = code
         self.cause = cause
         super().__init__(_render(kind, op, status, reason, cause))
 
diff --git a/sdk/python/fora_sdk/identity.py b/sdk/python/fora_sdk/identity.py
new file mode 100644
index 00000000..d4e2245d
--- /dev/null
+++ b/sdk/python/fora_sdk/identity.py
@@ -0,0 +1,84 @@
+"""Mint an Ed25519 identity a FORA verifier can resolve.
+
+Three steps a caller otherwise assembles by hand: a key and its keyid, the Web Bot
+Auth key directory that publishes it, and a signer that signs as it. The directory is
+built from the generated ``WBAFile`` / ``JsonWebKey`` models, the types the SDK's own
+WBA resolver parses, so its shape is defined once, by that schema.
+"""
+
+from __future__ import annotations
+
+from datetime import UTC, datetime, timedelta
+from typing import TYPE_CHECKING, Any
+
+from cryptography.hazmat.primitives.asymmetric.ed25519 import (
+    Ed25519PrivateKey,
+    Ed25519PublicKey,
+)
+from wire.models import JsonWebKey, WBAFile
+
+from .b64 import b64url_nopad
+from .signing_transport import SigningTransport
+from .thumbprint import thumbprint
+from .wire import to_wire
+
+if TYPE_CHECKING:
+    from collections.abc import Sequence
+
+#: How far before "now" a published key's validity window opens, so a verifier whose
+#: clock runs slightly behind still accepts it.
+_NOT_BEFORE_MARGIN = timedelta(minutes=5)
+#: How long a published key stays valid by default.
+DEFAULT_KEY_VALIDITY = timedelta(days=365)
+
+
+def generate_key() -> tuple[Ed25519PrivateKey, str]:
+    """A fresh Ed25519 key and its RFC 7638 thumbprint: the keyid every FORA signature names."""
+    key = Ed25519PrivateKey.generate()
+    return key, thumbprint(key.public_key().public_bytes_raw())
+
+
+def directory_document(
+    keys: Sequence[Ed25519PublicKey],
+    *,
+    valid_for: timedelta = DEFAULT_KEY_VALIDITY,
+    now: datetime | None = None,
+) -> dict[str, Any]:
+    """The Web Bot Auth key-directory JSON publishing ``keys``, in order.
+
+    Each key carries the ``not_before`` / ``not_after`` window the resolver requires
+    before it will hand the key out: it opens a few minutes in the past and lasts
+    ``valid_for``. ``now`` is the instant the window is computed from; it defaults to
+    the current time and is injectable for a deterministic document.
+    """
+    now = now if now is not None else datetime.now(UTC)
+    not_before = (now - _NOT_BEFORE_MARGIN).isoformat()
+    not_after = (now + valid_for).isoformat()
+    # Validated rather than constructed, so revocation_url stays unset and to_wire leaves
+    # it off the document instead of writing it as null.
+    document = WBAFile.model_validate(
+        {
+            "keys": [
+                JsonWebKey(
+                    kty="OKP",
+                    crv="Ed25519",
+                    alg="EdDSA",
+                    use="sig",
+                    x=b64url_nopad(key.public_bytes_raw()),
+                    not_before=not_before,
+                    not_after=not_after,
+                )
+                for key in keys
+            ]
+        }
+    )
+    return to_wire(document)
+
+
+def signing_transport_for(key: Ed25519PrivateKey, directory: str) -> SigningTransport:
+    """A signer that signs as ``key``: keyid is its thumbprint, Signature-Agent is ``directory``."""
+    return SigningTransport(
+        signer_seed=key.private_bytes_raw(),
+        keyid=thumbprint(key.public_key().public_bytes_raw()),
+        signature_agent=directory,
+    )
diff --git a/sdk/python/fora_sdk/sync/__init__.py b/sdk/python/fora_sdk/sync/__init__.py
index 465565e9..81142cd3 100644
--- a/sdk/python/fora_sdk/sync/__init__.py
+++ b/sdk/python/fora_sdk/sync/__init__.py
@@ -13,7 +13,7 @@
 
 from __future__ import annotations
 
-from typing import TYPE_CHECKING, Any
+from typing import TYPE_CHECKING
 
 import httpx
 
@@ -50,6 +50,7 @@
         UsageReportResponse,
     )
 
+    from fora_sdk.client._verbs import RequestMessage
     from fora_sdk.core import DiscoveryResult, VerifiedOffer
 
 __all__ = ["BrokerClient", "CatalogClient", "Client", "ClientConfig"]
@@ -152,7 +153,7 @@ class Client(_Face):
     def __init__(self, config: ClientConfig, *, http: httpx.Client | None = None) -> None:
         super().__init__(config, http)
 
-    def discover(self, query: dict[str, Any]) -> DiscoveryResult:
+    def discover(self, query: RequestMessage) -> DiscoveryResult:
         plan = _verbs.plan_discover(self._config, query)
         status, body = self._send(plan)
         return _verbs.finish_discover(self._config, plan, status, body)
@@ -165,25 +166,25 @@ def execute(
         return _verbs.finish_execute(plan, status, body)
 
     def report_usage(
-        self, report: dict[str, Any], *, idempotency_key: str | None = None
+        self, report: RequestMessage, *, idempotency_key: str | None = None
     ) -> UsageReportResponse:
         plan = _verbs.plan_report_usage(self._config, report, idempotency_key)
         status, body = self._send(plan)
         return _verbs.finish_report_usage(plan, status, body)
 
     def dispute(
-        self, request: dict[str, Any], *, idempotency_key: str | None = None
+        self, request: RequestMessage, *, idempotency_key: str | None = None
     ) -> DisputeResponse:
         plan = _verbs.plan_dispute(self._config, request, idempotency_key)
         status, body = self._send(plan)
         return _verbs.finish_dispute(plan, status, body)
 
-    def register(self, request: dict[str, Any]) -> RegisterResponse:
+    def register(self, request: RequestMessage) -> RegisterResponse:
         plan = _verbs.plan_register(self._config, request)
         status, body = self._send(plan)
         return _verbs.finish_register(plan, status, body)
 
-    def get_account_status(self, request: dict[str, Any]) -> GetAccountStatusResponse:
+    def get_account_status(self, request: RequestMessage) -> GetAccountStatusResponse:
         plan = _verbs.plan_get_account_status(self._config, request)
         status, body = self._send(plan)
         return _verbs.finish_get_account_status(plan, status, body)
@@ -242,7 +243,7 @@ class BrokerClient(_Face):
     def __init__(self, config: ClientConfig, *, http: httpx.Client | None = None) -> None:
         super().__init__(config, http)
 
-    def resolve(self, request: dict[str, Any]) -> DiscoveryResult:
+    def resolve(self, request: RequestMessage) -> DiscoveryResult:
         plan = _verbs.plan_resolve(self._config, request)
         status, body = self._send(plan)
         return _verbs.finish_resolve(self._config, plan, status, body)
@@ -254,17 +255,17 @@ class CatalogClient(_Face):
     def __init__(self, config: ClientConfig, *, http: httpx.Client | None = None) -> None:
         super().__init__(config, http)
 
-    def push_resources(self, request: dict[str, Any]) -> PushResourcesResponse:
+    def push_resources(self, request: RequestMessage) -> PushResourcesResponse:
         plan = _verbs.plan_push_resources(self._config, request)
         status, body = self._send(plan)
         return _verbs.finish_push_resources(plan, status, body)
 
-    def remove_resources(self, request: dict[str, Any]) -> RemoveResourcesResponse:
+    def remove_resources(self, request: RequestMessage) -> RemoveResourcesResponse:
         plan = _verbs.plan_remove_resources(self._config, request)
         status, body = self._send(plan)
         return _verbs.finish_remove_resources(plan, status, body)
 
-    def refresh_catalog(self, request: dict[str, Any]) -> RefreshCatalogResponse:
+    def refresh_catalog(self, request: RequestMessage) -> RefreshCatalogResponse:
         plan = _verbs.plan_refresh_catalog(self._config, request)
         status, body = self._send(plan)
         return _verbs.finish_refresh_catalog(plan, status, body)
diff --git a/sdk/python/fora_sdk/wire.py b/sdk/python/fora_sdk/wire.py
index 8ecb2158..86288813 100644
--- a/sdk/python/fora_sdk/wire.py
+++ b/sdk/python/fora_sdk/wire.py
@@ -11,6 +11,11 @@
 
 from __future__ import annotations
 
+from typing import TYPE_CHECKING, Any
+
+if TYPE_CHECKING:
+    from pydantic import BaseModel
+
 #: Content-Type for binary protobuf bodies.
 ContentTypeProto = "application/proto"
 #: Content-Type for canonical proto-JSON bodies.
@@ -108,3 +113,15 @@ def manifest_version_refusal(ver: object) -> str | None:
 
 def _echo_ver(ver: str) -> str:
     return ver if len(ver) <= _MAX_ECHOED_VER else ver[:_MAX_ECHOED_VER] + "..."
+
+
+def to_wire(model: BaseModel) -> dict[str, Any]:
+    """Render a generated wire model as the JSON object the SDK sends.
+
+    Only the fields the caller set are rendered, under their proto field names. A
+    declared default such as ``ver: ""`` stays off the wire: sending it would put a field
+    on the message the caller never set, and an empty ``ver`` reads as a protocol version
+    the sender does not speak. Every verb that accepts a model serializes it here, so a
+    model and the equivalent dict reach the wire as the same bytes.
+    """
+    return model.model_dump(mode="json", exclude_unset=True)
diff --git a/sdk/python/tests/signed_peer.py b/sdk/python/tests/signed_peer.py
new file mode 100644
index 00000000..11b134f4
--- /dev/null
+++ b/sdk/python/tests/signed_peer.py
@@ -0,0 +1,97 @@
+"""A peer that authenticates every request before it answers, behind ``httpx.MockTransport``.
+
+The client suites inject an httpx transport so a test sees exactly what went on the wire.
+A plain recorder proves the bytes were sent; it cannot prove a server would have ACCEPTED
+them. Two capabilities depend on that second property: a request altered before it is
+signed is only useful if the signature covers the altered bytes, and a freshly minted
+identity is only useful if a verifier can resolve its key. So this peer runs the SDK's own
+server-side verifier, ``verify_request_server``, on every request and refuses one that
+fails with the 401 envelope an Exchange sends.
+
+The key lookup is injected as a function of the covered Signature-Agent header, which is
+how a real Exchange finds a caller's key: a static map for a test that only needs one
+fixed identity, a WBA directory resolver for one that mints its own.
+"""
+
+from __future__ import annotations
+
+import json
+import time
+from dataclasses import dataclass, field
+from typing import TYPE_CHECKING, Any
+
+import httpx
+
+from fora_sdk.server_verify import verify_request_server
+
+if TYPE_CHECKING:
+    from collections.abc import Callable
+
+    from fora_sdk.httpsig import VerifiedRequest
+    from fora_sdk.keyresolver import KeyResolver
+
+#: What a peer answers a verified request with when the test supplies no answer of its
+#: own. Both ResourceResponse and every catalog response validate against it.
+DEFAULT_ANSWER: dict[str, Any] = {"ver": "1.0", "exchange": "exchange.test"}
+
+
+@dataclass(frozen=True)
+class Received:
+    """One request as the peer received it, and the verifier's verdict on it."""
+
+    request: httpx.Request
+    verdict: VerifiedRequest
+
+    def header(self, name: str) -> str | None:
+        return self.request.headers.get(name)
+
+
+@dataclass
+class SignedPeer:
+    """An httpx MockTransport peer that verifies the RFC 9421 signature first.
+
+    ``keys`` maps the received Signature-Agent value to the resolver the verifier uses.
+    ``answer`` builds the response for a request that verified; it defaults to a 200
+    carrying :data:`DEFAULT_ANSWER`.
+    """
+
+    keys: Callable[[str], KeyResolver]
+    answer: Callable[[httpx.Request], httpx.Response] | None = None
+    seen: list[Received] = field(default_factory=list)
+
+    def _respond(self, request: httpx.Request) -> httpx.Response:
+        request.read()
+        headers = {k.lower(): v for k, v in request.headers.items()}
+        verdict = verify_request_server(
+            method=request.method,
+            url=str(request.url),
+            body=request.content,
+            headers=headers,
+            resolver=self.keys(headers.get("signature-agent", "")),
+            now=int(time.time()),
+        )
+        self.seen.append(Received(request=request, verdict=verdict))
+        if not verdict.valid:
+            return httpx.Response(
+                401, json={"code": "unauthenticated", "message": verdict.reason or "signature"}
+            )
+        if self.answer is not None:
+            return self.answer(request)
+        return httpx.Response(200, json=DEFAULT_ANSWER)
+
+    def sync(self) -> httpx.Client:
+        return httpx.Client(transport=httpx.MockTransport(self._respond))
+
+    def async_(self) -> httpx.AsyncClient:
+        return httpx.AsyncClient(transport=httpx.MockTransport(self._respond))
+
+    def only(self) -> Received:
+        """The single request this peer received; fails the test on any other count."""
+        assert len(self.seen) == 1, f"expected exactly one request, peer saw {len(self.seen)}"
+        return self.seen[0]
+
+
+def envelope_response(status: int, envelope: dict[str, Any]) -> httpx.Response:
+    """A Connect error answer carrying ``envelope`` verbatim."""
+    return httpx.Response(status, content=json.dumps(envelope).encode(),
+                          headers={"content-type": "application/json"})
diff --git a/sdk/python/tests/test_before_sign.py b/sdk/python/tests/test_before_sign.py
new file mode 100644
index 00000000..11ff03ac
--- /dev/null
+++ b/sdk/python/tests/test_before_sign.py
@@ -0,0 +1,379 @@
+"""The pre-signing hook: ``ClientConfig.before_sign``.
+
+A caller that needs to send a request the SDK would not build on its own (a test harness
+probing how a server refuses a malformed message is the motivating case) gets ONE
+supported seam: a callable that receives the stamped, validated request as an
+``httpx.Request`` just before it is signed, and returns the request to sign instead. The
+SDK still serializes once, signs exactly the bytes it sends and decodes the reply with its
+own decoder, so the hook cannot become a way around signing or decoding.
+
+Every case runs the real client, on both faces, against a peer that verifies the RFC 9421
+signature with the SDK's own server-side verifier. That is what proves the signature
+covers the PATCHED bytes rather than the ones the SDK first rendered.
+
+The refusals are local and nothing is sent for any of them: a hook that raises, a hook
+that moves the request to another method or URL (the address checks already ran against
+the planned URL), and a hook that sets a header the signer itself emits.
+"""
+
+from __future__ import annotations
+
+import json
+from typing import Any
+
+import httpx
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from signed_peer import SignedPeer, envelope_response
+from test_client import (
+    _IDS,
+    AGENT_SEED,
+    FACES,
+    Face,
+    Recorder,
+    _config,
+    _signed_offer,
+    _verifier,
+)
+
+import fora_sdk.sync as sync_client
+from conftest import GO_CONNECT_TESTDATA, load_json
+from fora_sdk.client import CallError, CallErrorKind, CatalogClient, ClientConfig
+from fora_sdk.errordetail import reason
+from fora_sdk.httpsig import content_digest
+from fora_sdk.keyresolver import StaticKeyResolver
+
+_KEYID = "agent.v1"
+_AGENT_PUBLIC = Ed25519PrivateKey.from_private_bytes(AGENT_SEED).public_key().public_bytes_raw()
+_PUSH_URL = "https://exchange.test/fora.v1.CatalogService/PushResources"
+_DISCOVER_URL = "https://exchange.test/fora.v1.ExchangeService/DiscoverResources"
+_REQUEST_ID = "req-before-sign-1"
+
+#: The five header names the request signer emits. A hook may not set any of them, in
+#: any letter case: the signer owns them, and a value the hook set would either be
+#: overwritten silently or contradict the signature.
+_SIGNER_HEADERS = ["Signature", "signature-input", "Content-Digest", "Signature-Agent",
+                   "AUTHORIZATION"]
+
+_CATALOG_REJECTION = next(
+    v for v in load_json(GO_CONNECT_TESTDATA / "connect-error-vectors.json")["vectors"]
+    if v["name"] == "catalog_rejection"
+)
+
+
+def _push() -> dict[str, Any]:
+    return {
+        "exchange": "exchange.test",
+        "tenant_id": "tenant-1",
+        "caller_id": "publisher.test",
+        "entries": [
+            {
+                "domain": "publisher.test",
+                "path": "/x",
+                "terms": [
+                    {
+                        "semantics": "TERM_SEMANTICS_ENUMERATED",
+                        "pricing": {"model": "PRICING_MODEL_FREE", "rate": "0"},
+                    }
+                ],
+            }
+        ],
+    }
+
+
+def _agent_keys(_signature_agent: str) -> StaticKeyResolver:
+    return StaticKeyResolver({_KEYID: _AGENT_PUBLIC})
+
+
+def _hooked(hook: Any, **overrides: Any) -> ClientConfig:
+    return _config(before_sign=hook, request_id=lambda: _REQUEST_ID, **overrides)
+
+
+def _catalog(face: Face, config: ClientConfig, peer: Any) -> Any:
+    if face.name == "async":
+        return CatalogClient(config, http=peer.async_())
+    return sync_client.CatalogClient(config, http=peer.sync())
+
+
+def _rebuilt(request: httpx.Request, **changes: Any) -> httpx.Request:
+    """The request a hook returns: the one it was handed, with ``changes`` applied.
+
+    Built from the received headers verbatim, Content-Length included, which is what a
+    caller rebuilding a request naturally does. A patched body therefore arrives here
+    carrying the ORIGINAL length, and the SDK has to drop it.
+    """
+    return httpx.Request(
+        changes.get("method", request.method),
+        changes.get("url", request.url),
+        headers=changes.get("headers", request.headers),
+        content=changes.get("content", request.content),
+    )
+
+
+def _baseline_body(face: Face) -> bytes:
+    """The body the SDK sends for :func:`_push` with no hook installed."""
+    peer = SignedPeer(keys=_agent_keys)
+    face.run(_catalog(face, _config(request_id=lambda: _REQUEST_ID), peer).push_resources(_push()))
+    return peer.only().request.content
+
+
+# ---------------------------------------------------------------------------
+# What the hook is handed, and what is signed afterwards
+# ---------------------------------------------------------------------------
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_the_hook_receives_the_stamped_request_before_any_signature(face: Face) -> None:
+    handed: list[httpx.Request] = []
+
+    def hook(request: httpx.Request) -> httpx.Request:
+        handed.append(request)
+        return request
+
+    peer = SignedPeer(keys=_agent_keys)
+    face.run(_catalog(face, _hooked(hook), peer).push_resources(_push()))
+
+    assert len(handed) == 1
+    seen = handed[0]
+    assert seen.method == "POST"
+    assert seen.url == httpx.URL(_PUSH_URL)
+    # Serialized once, envelope already stamped: the hook sees the exact bytes the SDK
+    # would have sent without it.
+    assert seen.content == _baseline_body(face)
+    assert json.loads(seen.content)["ver"] == "1.0"
+    assert seen.headers["content-type"] == "application/json"
+    assert seen.headers["connect-protocol-version"] == "1"
+    assert seen.headers["x-request-id"] == _REQUEST_ID
+    # Called BEFORE signing, so none of the signer's headers exist yet.
+    present = {name.lower() for name in seen.headers}
+    assert present.isdisjoint({name.lower() for name in _SIGNER_HEADERS})
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_hook_returning_its_argument_sends_the_unaltered_request(face: Face) -> None:
+    peer = SignedPeer(keys=_agent_keys)
+    face.run(_catalog(face, _hooked(lambda request: request), peer).push_resources(_push()))
+
+    got = peer.only()
+    assert got.verdict.valid
+    assert got.request.content == _baseline_body(face)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_patched_body_is_signed_over_the_patched_bytes_with_its_own_length(
+    face: Face,
+) -> None:
+    patched_message = _push()
+    patched_message["entries"][0]["title"] = "added after validation"
+    patched = json.dumps(patched_message, separators=(",", ":")).encode()
+
+    def hook(request: httpx.Request) -> httpx.Request:
+        return _rebuilt(request, content=patched)
+
+    peer = SignedPeer(keys=_agent_keys)
+    response = face.run(_catalog(face, _hooked(hook), peer).push_resources(_push()))
+
+    got = peer.only()
+    assert got.request.content == patched
+    # The signature verifies over the bytes that arrived, not the ones first rendered.
+    assert got.verdict.valid, got.verdict.reason
+    assert got.header("content-digest") == content_digest(patched)
+    # The stale length the hook carried over is dropped, not sent.
+    assert got.header("content-length") == str(len(patched))
+    assert got.header("x-request-id") == _REQUEST_ID
+    # The reply is decoded as usual.
+    assert type(response).__name__ == "PushResourcesResponse"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize(
+    ("name", "value"),
+    [("Host", "elsewhere.test"), ("Content-Length", "999")],
+    ids=["host", "content-length"],
+)
+def test_a_transport_header_set_by_the_hook_never_reaches_the_peer(
+    face: Face, name: str, value: str
+) -> None:
+    """Host and Content-Length are computed from the planned URL and the bytes sent.
+
+    A hook that sets either is not refused: its value is dropped. A Host the hook chose
+    would move the request to another virtual host behind the address the SDK checked,
+    and the signature would still verify, because it covers the planned URL rather than
+    the Host header. A Content-Length the hook chose would contradict the body.
+    """
+    def hook(request: httpx.Request) -> httpx.Request:
+        headers = dict(request.headers)
+        headers[name] = value
+        return _rebuilt(request, headers=headers)
+
+    peer = SignedPeer(keys=_agent_keys)
+    face.run(_catalog(face, _hooked(hook), peer).push_resources(_push()))
+
+    got = peer.only()
+    assert got.verdict.valid, got.verdict.reason
+    assert got.request.url == httpx.URL(_PUSH_URL)
+    assert got.header("host") == "exchange.test"
+    assert got.request.content == _baseline_body(face)
+    assert got.header("content-length") == str(len(got.request.content))
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_patched_request_refused_by_the_peer_surfaces_the_typed_refusal(
+    face: Face,
+) -> None:
+    """The lane's motivating case, end to end.
+
+    A valid request passes local validation, the hook breaks one entry, the peer accepts
+    the SIGNATURE over the patched bytes and refuses the CONTENT with a typed reason. The
+    caller reads that refusal from CallError: the class, the status, the Connect code and
+    the typed protocol reason.
+    """
+    def hook(request: httpx.Request) -> httpx.Request:
+        message = json.loads(request.content)
+        message["entries"][0]["path"] = "no-leading-slash"
+        return _rebuilt(request, content=json.dumps(message).encode())
+
+    def refuse_malformed_entries(request: httpx.Request) -> httpx.Response:
+        entry = json.loads(request.content)["entries"][0]
+        if not entry["path"].startswith("/"):
+            return envelope_response(_CATALOG_REJECTION["http_status"],
+                                     _CATALOG_REJECTION["envelope"])
+        return httpx.Response(200, json={"ver": "1.0"})
+
+    peer = SignedPeer(keys=_agent_keys, answer=refuse_malformed_entries)
+    with pytest.raises(CallError) as caught:
+        face.run(_catalog(face, _hooked(hook), peer).push_resources(_push()))
+
+    assert peer.only().verdict.valid, "the peer must have refused the content, not the signature"
+    failure = caught.value
+    assert failure.kind is CallErrorKind.REFUSED
+    assert failure.op == "push resources"
+    assert failure.status == _CATALOG_REJECTION["http_status"]
+    assert failure.reason == _CATALOG_REJECTION["code"]
+    assert failure.code == _CATALOG_REJECTION["code"]
+    assert failure.peer_message == _CATALOG_REJECTION["peer_message"]
+    typed = reason(failure.detail)
+    assert typed is not None
+    assert typed.value == _CATALOG_REJECTION["expect"]["reason_enum"]
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_the_planned_url_compares_the_way_httpx_normalizes_it(face: Face) -> None:
+    """``:443`` on an https origin is the same URL once httpx parses it.
+
+    The hook hands back the request it received, whose URL httpx already normalized. A
+    comparison against the raw planned string would refuse a hook that changed nothing.
+    """
+    rec = Recorder({"ver": "1.0"})
+    config = _hooked(lambda request: request, base_url="https://exchange.test:443")
+    face.run(_catalog(face, config, rec).push_resources(_push()))
+
+    assert len(rec.seen) == 1
+    assert rec.seen[0].url == httpx.URL(_PUSH_URL)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_without_a_signer_the_hook_may_set_authorization(face: Face) -> None:
+    """With no signer configured nothing collides with a hook's header, so none is
+    refused."""
+    def hook(request: httpx.Request) -> httpx.Request:
+        headers = dict(request.headers)
+        headers["Authorization"] = "Bearer hook-token"
+        return _rebuilt(request, headers=headers)
+
+    rec = Recorder({"ver": "1.0"})
+    face.run(_catalog(face, _hooked(hook, signer=None), rec).push_resources(_push()))
+
+    assert len(rec.seen) == 1
+    assert rec.seen[0].headers["authorization"] == "Bearer hook-token"
+    assert "signature" not in rec.seen[0].headers
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_discovery_attribution_reads_the_callers_message_not_the_patched_one(
+    face: Face,
+) -> None:
+    """A flat offer list is attributed to the query's only URI. That URI is the one the
+    caller asked about, even when the hook rewrote the URIs on the wire."""
+    offer, public = _signed_offer()
+
+    def hook(request: httpx.Request) -> httpx.Request:
+        message = json.loads(request.content)
+        message["uris"] = ["https://site.test/rewritten"]
+        return _rebuilt(request, content=json.dumps(message).encode())
+
+    def flat_offers(_request: httpx.Request) -> httpx.Response:
+        return httpx.Response(200, json={"ver": "1.0", "exchange": "exchange.test",
+                                         "offers": [offer]})
+
+    peer = SignedPeer(keys=_agent_keys, answer=flat_offers)
+    client = face.client(_hooked(hook, verifier=_verifier(public)), peer)
+    result = face.run(client.discover({"exchange": "exchange.test",
+                                       "uris": ["https://site.test/asked"]}))
+
+    got = peer.only()
+    assert got.verdict.valid, got.verdict.reason
+    assert json.loads(got.request.content)["uris"] == ["https://site.test/rewritten"]
+    assert got.request.url == httpx.URL(_DISCOVER_URL)
+    assert [g.uri for g in result.groups] == ["https://site.test/asked"]
+    assert len(result.groups[0].result.verified) == 1
+
+
+# ---------------------------------------------------------------------------
+# Refusals: each is MALFORMED, local, and sends nothing
+# ---------------------------------------------------------------------------
+
+
+def _assert_refused_unsent(face: Face, hook: Any) -> CallError:
+    peer = SignedPeer(keys=_agent_keys)
+    with pytest.raises(CallError) as caught:
+        face.run(_catalog(face, _hooked(hook), peer).push_resources(_push()))
+    assert caught.value.kind is CallErrorKind.MALFORMED
+    assert caught.value.op == "push resources"
+    assert caught.value.status is None
+    assert peer.seen == [], "a refused hook result must never reach the wire"
+    return caught.value
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("name", _SIGNER_HEADERS)
+def test_a_hook_that_sets_a_signer_header_is_refused(face: Face, name: str) -> None:
+    def hook(request: httpx.Request) -> httpx.Request:
+        headers = dict(request.headers)
+        headers[name] = "set-by-the-hook"
+        return _rebuilt(request, headers=headers)
+
+    _assert_refused_unsent(face, hook)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize(
+    "url",
+    [
+        "https://exchange.test/fora.v1.CatalogService/RemoveResources",
+        "https://elsewhere.test/fora.v1.CatalogService/PushResources",
+        "http://exchange.test/fora.v1.CatalogService/PushResources",
+        "https://exchange.test:8443/fora.v1.CatalogService/PushResources",
+        _PUSH_URL + "?extra=1",
+    ],
+    ids=["other-method", "other-host", "other-scheme", "other-port", "added-query"],
+)
+def test_a_hook_that_moves_the_request_to_another_url_is_refused(face: Face, url: str) -> None:
+    _assert_refused_unsent(face, lambda request: _rebuilt(request, url=url))
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("method", ["GET", "PUT"])
+def test_a_hook_that_changes_the_method_is_refused(face: Face, method: str) -> None:
+    _assert_refused_unsent(face, lambda request: _rebuilt(request, method=method))
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_hook_that_raises_is_refused_and_carries_the_cause(face: Face) -> None:
+    boom = RuntimeError("the hook failed")
+
+    def hook(_request: httpx.Request) -> httpx.Request:
+        raise boom
+
+    failure = _assert_refused_unsent(face, hook)
+    assert failure.cause is boom or failure.__cause__ is boom
diff --git a/sdk/python/tests/test_call_error_code.py b/sdk/python/tests/test_call_error_code.py
new file mode 100644
index 00000000..2ebea143
--- /dev/null
+++ b/sdk/python/tests/test_call_error_code.py
@@ -0,0 +1,186 @@
+"""``CallError.code``: the Connect code a peer's answer carried, as its own field.
+
+``reason`` already holds the peer's token, which for an RPC answer is the Connect code and
+for a delivery edge is the edge's own refusal word. A caller that wants to branch on the
+Connect code specifically had to know which of the two it was looking at. ``code`` is set
+exactly where a Connect code exists: a Connect error envelope, and a non-JSON non-2xx
+answer whose code is derived from the status the way connect-go derives it. Everywhere
+else it is ``None``: a redirect the client refused to follow, a failure that happened
+before anything was sent, a 2xx that was not JSON, and the content leg, which speaks the
+edge's vocabulary rather than Connect's.
+
+Driven through the client verbs on both faces, against the shared corpora the Go oracle
+captured from a real connect-go client and handler.
+"""
+
+from __future__ import annotations
+
+import json
+from typing import Any
+
+import httpx
+import pytest
+from test_client import _IDS, FACES, Face, _config
+
+import fora_sdk.sync as sync_client
+from conftest import GO_CONNECT_TESTDATA, load_json
+from fora_sdk.client import CallError, CallErrorKind, Client
+
+_ENVELOPES = load_json(GO_CONNECT_TESTDATA / "connect-error-vectors.json")["vectors"]
+_GATEWAYS = load_json(GO_CONNECT_TESTDATA / "transport-failure-vectors.json")[
+    "transport_failures"
+]
+_QUERY = {"exchange": "exchange.test", "uris": ["https://site.test/a"]}
+
+
+class _Answer:
+    """An httpx transport answering one fixed status and raw body, recording requests."""
+
+    def __init__(self, status: int, body: bytes = b"", headers: dict[str, str] | None = None):
+        self.status = status
+        self.body = body
+        self.headers = headers or {}
+        self.seen: list[httpx.Request] = []
+
+    def _respond(self, request: httpx.Request) -> httpx.Response:
+        self.seen.append(request)
+        return httpx.Response(self.status, content=self.body, headers=self.headers)
+
+    def sync(self) -> httpx.Client:
+        return httpx.Client(transport=httpx.MockTransport(self._respond))
+
+    def async_(self) -> httpx.AsyncClient:
+        return httpx.AsyncClient(transport=httpx.MockTransport(self._respond))
+
+
+def _discover_fails(face: Face, answer: _Answer, query: dict[str, Any] | None = None,
+                    **config: Any) -> CallError:
+    client = face.client(_config(**config), answer)
+    with pytest.raises(CallError) as caught:
+        face.run(client.discover(dict(_QUERY) if query is None else query))
+    return caught.value
+
+
+# ---------------------------------------------------------------------------
+# The two sites that carry a Connect code
+# ---------------------------------------------------------------------------
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("vector", _ENVELOPES, ids=[v["name"] for v in _ENVELOPES])
+def test_a_connect_envelope_sets_code_to_its_connect_code(
+    face: Face, vector: dict[str, Any]
+) -> None:
+    answer = _Answer(vector["http_status"], json.dumps(vector["envelope"]).encode(),
+                     {"content-type": "application/json"})
+
+    failure = _discover_fails(face, answer)
+
+    assert failure.code == vector["code"]
+    # ``reason`` is unchanged by the new field: still the peer's token.
+    assert failure.reason == vector["code"]
+    assert failure.status == vector["http_status"]
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("vector", _GATEWAYS, ids=[v["name"] for v in _GATEWAYS])
+def test_an_answer_not_from_the_service_sets_the_code_its_status_implies(
+    face: Face, vector: dict[str, Any]
+) -> None:
+    """A gateway's HTML page, an empty body, an envelope with no code: connect-go derives
+    the code from the status in each case, and so does this client."""
+    answer = _Answer(vector["status"], vector["body"].encode())
+
+    failure = _discover_fails(face, answer)
+
+    assert failure.code == vector["reason"]
+    assert failure.reason == vector["reason"]
+    assert failure.kind is CallErrorKind[vector["kind"].upper()]
+
+
+# ---------------------------------------------------------------------------
+# Everywhere else, code is None
+# ---------------------------------------------------------------------------
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("status", [301, 302, 303, 307, 308])
+def test_a_refused_redirect_carries_no_code(face: Face, status: int) -> None:
+    answer = _Answer(status, json.dumps({"code": "permission_denied"}).encode(),
+                     {"location": "https://elsewhere.test/"})
+
+    failure = _discover_fails(face, answer)
+
+    assert failure.kind is CallErrorKind.UNREACHABLE
+    assert failure.status == status
+    assert failure.code is None
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_2xx_that_is_not_json_carries_no_code(face: Face) -> None:
+    failure = _discover_fails(face, _Answer(200, b"<html>not json</html>"))
+
+    assert failure.kind is CallErrorKind.MALFORMED
+    assert failure.code is None
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_request_refused_before_sending_carries_no_code(face: Face) -> None:
+    answer = _Answer(200, b"{}")
+
+    # No recipient: the generated schema refuses the message before it is signed.
+    failure = _discover_fails(face, answer, query={})
+
+    assert failure.kind is CallErrorKind.MALFORMED
+    assert failure.code is None
+    assert answer.seen == []
+
+
+class _FailingSigner:
+    def sign_outbound(self, **_kwargs: Any) -> Any:
+        raise RuntimeError("custody declined")
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_signature_that_could_not_be_made_carries_no_code(face: Face) -> None:
+    answer = _Answer(200, b"{}")
+
+    failure = _discover_fails(face, answer, signer=_FailingSigner())
+
+    assert failure.kind is CallErrorKind.NOT_SIGNABLE
+    assert failure.code is None
+    assert answer.seen == []
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_edge_refusal_on_the_content_leg_carries_no_code(face: Face) -> None:
+    """The edge answers in its own vocabulary. "expired" is its token, carried in
+    ``reason``; it is not a Connect code and must not appear as one."""
+    answer = _Answer(403, json.dumps({"error": "denied", "reason": "expired"}).encode(),
+                     {"content-type": "application/json"})
+    config = _config()
+    client = (
+        Client(config, http=answer.async_())
+        if face.name == "async"
+        else sync_client.Client(config, http=answer.sync())
+    )
+
+    with pytest.raises(CallError) as caught:
+        face.run(client.fetch("https://edge.test/x"))
+
+    assert caught.value.kind is CallErrorKind.REFUSED
+    assert caught.value.reason == "expired"
+    assert caught.value.code is None
+
+
+# ---------------------------------------------------------------------------
+# The constructor
+# ---------------------------------------------------------------------------
+
+
+def test_the_constructor_defaults_code_to_none_and_keeps_a_given_one() -> None:
+    assert CallError(CallErrorKind.MALFORMED, "discover").code is None
+    given = CallError(CallErrorKind.REFUSED, "discover", status=403,
+                      reason="permission_denied", code="permission_denied")
+    assert given.code == "permission_denied"
+    assert given.reason == "permission_denied"
diff --git a/sdk/python/tests/test_identity_helpers.py b/sdk/python/tests/test_identity_helpers.py
new file mode 100644
index 00000000..4ab6facd
--- /dev/null
+++ b/sdk/python/tests/test_identity_helpers.py
@@ -0,0 +1,203 @@
+"""Identity helpers: mint an agent identity a verifier can resolve, with no hand assembly.
+
+Three public helpers, each closing one step a caller otherwise writes by hand:
+
+- ``generate_key()`` returns a fresh Ed25519 key and its RFC 7638 thumbprint, which is
+  the keyid every FORA signature names;
+- ``directory_document(keys)`` returns the Web Bot Auth key-directory JSON for a key set,
+  in the schema the SDK's own WBA resolver reads, each key carrying the validity window
+  the resolver requires before it will hand the key out;
+- ``signing_transport_for(key, directory)`` returns a ``SigningTransport`` that signs as
+  that identity: the keyid is the key's thumbprint and Signature-Agent is the directory.
+
+The proof is the verify path, end to end. The directory document is served by a real
+in-process origin and parsed by ``WBAKeyResolver``. A request signed through the client
+with the transport the third helper built reaches a peer that resolves the caller's key
+from the covered Signature-Agent header, the way an Exchange does, and verifies the
+signature with ``verify_request_server``.
+"""
+
+from __future__ import annotations
+
+import json
+from datetime import UTC, datetime
+from typing import TYPE_CHECKING
+
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from resolvers_harness import Origin, loopback_client
+from signed_peer import SignedPeer
+from test_client import _IDS, FACES, Face
+
+import fora_sdk
+from fora_sdk.b64 import b64url_nopad
+from fora_sdk.client import CallError, CallErrorKind, ClientConfig
+from fora_sdk.resolvers import ResolverError, UnknownKeyError, WBAKeyResolver
+from fora_sdk.signing_transport import SigningTransport
+from fora_sdk.thumbprint import thumbprint
+
+if TYPE_CHECKING:
+    from collections.abc import Iterator
+
+_JWK_MEMBERS = {"kty", "crv", "alg", "use", "x", "not_before", "not_after"}
+
+
+@pytest.fixture
+def origin() -> Iterator[Origin]:
+    served = Origin()
+    yield served
+    served.close()
+
+
+def _raw(key: Ed25519PrivateKey) -> bytes:
+    return key.public_key().public_bytes_raw()
+
+
+def _resolver() -> WBAKeyResolver:
+    # The real clock: the window directory_document chooses must contain "now".
+    return WBAKeyResolver(http=loopback_client(), scheme="http")
+
+
+class _DirectoryKeys:
+    """The KeyResolver an Exchange builds per request: the keyid resolved against the
+    directory the covered Signature-Agent header names. A key the directory does not
+    hold resolves to nothing, which the verifier reports as a signature failure."""
+
+    def __init__(self, wba: WBAKeyResolver, signature_agent: str) -> None:
+        self._wba = wba
+        self._directory = signature_agent.strip('"')
+
+    def resolve(self, keyid: str | None) -> bytes | None:
+        try:
+            return self._wba.resolve(keyid or "", self._directory)
+        except ResolverError:
+            return None
+
+
+def _exchange_peer() -> SignedPeer:
+    wba = _resolver()
+    return SignedPeer(keys=lambda agent: _DirectoryKeys(wba, agent))
+
+
+def _discover_as(face: Face, signer: SigningTransport, peer: SignedPeer) -> None:
+    config = ClientConfig(base_url="https://exchange.test", signer=signer)
+    face.run(face.client(config, peer).discover({"exchange": "exchange.test"}))
+
+
+# ---------------------------------------------------------------------------
+# generate_key
+# ---------------------------------------------------------------------------
+
+
+def test_generate_key_returns_a_fresh_key_and_its_thumbprint() -> None:
+    key, keyid = fora_sdk.generate_key()
+    other, other_keyid = fora_sdk.generate_key()
+
+    assert isinstance(key, Ed25519PrivateKey)
+    assert keyid == thumbprint(_raw(key))
+    assert _raw(other) != _raw(key)
+    assert other_keyid != keyid
+
+
+# ---------------------------------------------------------------------------
+# directory_document
+# ---------------------------------------------------------------------------
+
+
+def test_directory_document_carries_each_key_with_its_validity_window() -> None:
+    first, _ = fora_sdk.generate_key()
+    second, _ = fora_sdk.generate_key()
+    now = datetime.now(UTC)
+
+    document = fora_sdk.directory_document([first.public_key(), second.public_key()])
+
+    assert set(document) == {"keys"}
+    assert [jwk["x"] for jwk in document["keys"]] == [
+        b64url_nopad(_raw(first)),
+        b64url_nopad(_raw(second)),
+    ]
+    for jwk in document["keys"]:
+        assert set(jwk) == _JWK_MEMBERS
+        assert (jwk["kty"], jwk["crv"], jwk["alg"], jwk["use"]) == ("OKP", "Ed25519", "EdDSA",
+                                                                    "sig")
+        not_before = datetime.fromisoformat(jwk["not_before"])
+        not_after = datetime.fromisoformat(jwk["not_after"])
+        assert not_before.tzinfo is not None
+        assert not_after.tzinfo is not None
+        assert not_before <= now < not_after
+
+
+def test_the_sdk_resolver_reads_every_key_of_a_served_document(origin: Origin) -> None:
+    first, first_id = fora_sdk.generate_key()
+    second, second_id = fora_sdk.generate_key()
+    origin.set_wba(json.dumps(fora_sdk.directory_document([first.public_key(),
+                                                           second.public_key()])))
+    resolver = _resolver()
+
+    assert resolver.resolve(first_id, origin.url) == _raw(first)
+    assert resolver.resolve(second_id, origin.url) == _raw(second)
+
+
+def test_a_key_outside_the_served_document_does_not_resolve(origin: Origin) -> None:
+    listed, _ = fora_sdk.generate_key()
+    _, unlisted_id = fora_sdk.generate_key()
+    origin.set_wba(json.dumps(fora_sdk.directory_document([listed.public_key()])))
+
+    with pytest.raises(UnknownKeyError):
+        _resolver().resolve(unlisted_id, origin.url)
+
+
+# ---------------------------------------------------------------------------
+# signing_transport_for, through the client and the verifier
+# ---------------------------------------------------------------------------
+
+
+def test_signing_transport_for_signs_as_the_identity() -> None:
+    key, keyid = fora_sdk.generate_key()
+    directory = "https://agent.example"
+
+    transport = fora_sdk.signing_transport_for(key, directory)
+
+    assert isinstance(transport, SigningTransport)
+    signed = transport.sign_outbound(
+        method="POST", url="https://exchange.test/x", body=b"{}", authorization=""
+    )
+    assert signed.headers["signature-agent"] == directory
+    assert f'keyid="{keyid}"' in signed.headers["signature-input"]
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_fresh_identity_is_accepted_by_a_verifier_reading_its_directory(
+    face: Face, origin: Origin
+) -> None:
+    key, keyid = fora_sdk.generate_key()
+    origin.set_wba(json.dumps(fora_sdk.directory_document([key.public_key()])))
+    peer = _exchange_peer()
+
+    _discover_as(face, fora_sdk.signing_transport_for(key, origin.url), peer)
+
+    got = peer.only()
+    assert got.verdict.valid, got.verdict.reason
+    assert got.header("signature-agent") == origin.url
+    assert f'keyid="{keyid}"' in (got.header("signature-input") or "")
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_identity_its_directory_does_not_list_is_refused(face: Face, origin: Origin) -> None:
+    """Signing with one fresh key while the served directory lists another: the peer
+    resolves no key, the verifier refuses the signature, and the client reports the
+    peer's refusal."""
+    listed, _ = fora_sdk.generate_key()
+    impostor, _ = fora_sdk.generate_key()
+    origin.set_wba(json.dumps(fora_sdk.directory_document([listed.public_key()])))
+    peer = _exchange_peer()
+
+    with pytest.raises(CallError) as caught:
+        _discover_as(face, fora_sdk.signing_transport_for(impostor, origin.url), peer)
+
+    got = peer.only()
+    assert not got.verdict.valid
+    assert got.verdict.reason == "signature"
+    assert caught.value.kind is CallErrorKind.REFUSED
+    assert caught.value.status == 401
+    assert caught.value.reason == "unauthenticated"
diff --git a/sdk/python/tests/test_typed_inputs.py b/sdk/python/tests/test_typed_inputs.py
new file mode 100644
index 00000000..241a492c
--- /dev/null
+++ b/sdk/python/tests/test_typed_inputs.py
@@ -0,0 +1,205 @@
+"""Typed request inputs: every dict-taking verb also accepts the generated request model.
+
+A caller holding a generated model (``wire.models.UsageReport`` and the rest) should not
+have to hand-convert it to a dict, and two conversions written in two places are two
+dialects of the same wire. ``fora_sdk.to_wire`` is the ONE serializer: it renders a model
+to the proto-JSON object with proto field names, leaving out every field the caller did
+not set, and every verb runs a model through it before the envelope is stamped.
+
+The property this suite pins is byte-identity: a verb given the model sends exactly the
+bytes it sends for the equivalent dict. That is captured at the injected transport, on
+both faces, for every verb that takes a request message.
+
+``execute`` is outside this clause: it takes a ``VerifiedOffer`` (a token only the offer
+verifier can mint) and builds the whole TransactionRequest itself, so there is no request
+message for a caller to pass. ``fetch`` takes a signed delivery URL, not a message.
+"""
+
+from __future__ import annotations
+
+import copy
+import inspect
+from dataclasses import dataclass
+from typing import Any
+
+import pytest
+from test_account import _account_config
+from test_client import _IDS, FACES, Face, Recorder
+from wire.models import (
+    DiscoveryRequest,
+    DisputeRequest,
+    GetAccountStatusRequest,
+    PushResourcesRequest,
+    RefreshCatalogRequest,
+    RegisterRequest,
+    RemoveResourcesRequest,
+    ResourceQuery,
+    UsageReport,
+)
+
+import fora_sdk
+import fora_sdk.sync as sync_client
+from fora_sdk.client import BrokerClient, CallError, CallErrorKind, CatalogClient, Client
+
+#: The verbs that take a VerifiedOffer or a URL instead of a request message.
+_OUTSIDE_THE_CLAUSE = {
+    "execute": "takes a VerifiedOffer and builds the TransactionRequest itself",
+    "fetch": "takes a signed delivery URL",
+}
+
+
+@dataclass(frozen=True)
+class _Case:
+    """One verb, the face class that carries it, its request model, and a message.
+
+    The message is written in the model's field order, which is the order the generated
+    model renders in, so the dict and the model can be compared byte for byte. Each one
+    leaves at least one optional field unset, so a conversion that emitted declared
+    defaults would put a member on the wire the dict never had.
+    """
+
+    verb: str
+    face_class: str
+    model: Any
+    message: dict[str, Any]
+
+
+_DIGEST = "sha256:" + "ab" * 32
+_CASES = [
+    _Case("discover", "Client", ResourceQuery,
+          {"exchange": "exchange.test", "uris": ["https://site.test/a"]}),
+    _Case("discover", "Client", ResourceQuery,
+          {"exchange": "exchange.test", "uris": ["https://site.test/a"], "ver": "9.9"}),
+    _Case("resolve", "BrokerClient", DiscoveryRequest,
+          {"query": "jazz", "uris": ["https://site.test/a"]}),
+    _Case("report_usage", "Client", UsageReport,
+          {"billing_id": "bill-1", "exchange": "exchange.test", "idempotency_key": "idem-1",
+           "transaction_id": "t-1"}),
+    _Case("dispute", "Client", DisputeRequest,
+          {"description": "never arrived", "exchange": "exchange.test",
+           "idempotency_key": "idem-2", "reason": "DISPUTE_REASON_DELIVERY_FAILED",
+           "report_id": "r-1", "transaction_id": "t-1"}),
+    _Case("register", "Client", RegisterRequest,
+          {"exchange": "exchange.test", "registration_data": {"legal_entity": "Acme"},
+           "terms_digest": _DIGEST}),
+    _Case("get_account_status", "Client", GetAccountStatusRequest,
+          {"exchange": "exchange.test"}),
+    _Case("push_resources", "CatalogClient", PushResourcesRequest,
+          {"caller_id": "publisher.test",
+           "entries": [{"domain": "publisher.test", "path": "/x",
+                        "terms": [{"pricing": {"model": "PRICING_MODEL_FREE", "rate": "0"},
+                                   "semantics": "TERM_SEMANTICS_ENUMERATED"}]}],
+           "exchange": "exchange.test", "tenant_id": "tenant-1"}),
+    _Case("remove_resources", "CatalogClient", RemoveResourcesRequest,
+          {"exchange": "exchange.test", "paths": ["/x"]}),
+    _Case("refresh_catalog", "CatalogClient", RefreshCatalogRequest,
+          {"exchange": "exchange.test"}),
+]
+_CASE_IDS = [f"{c.verb}-{i}" for i, c in enumerate(_CASES)]
+
+_ASYNC = {"Client": Client, "BrokerClient": BrokerClient, "CatalogClient": CatalogClient}
+_SYNC = {"Client": sync_client.Client, "BrokerClient": sync_client.BrokerClient,
+         "CatalogClient": sync_client.CatalogClient}
+
+
+def _answer() -> dict[str, Any]:
+    # One body every verb's response model accepts: unknown members are ignored.
+    return {"ver": "1.0", "exchange": "exchange.test", "billing_ref": "acct-1",
+            "report_id": "r-1"}
+
+
+def _send_into(face: Face, case: _Case, message: Any, rec: Recorder) -> None:
+    config = _account_config()
+    if face.name == "async":
+        client = _ASYNC[case.face_class](config, http=rec.async_())
+    else:
+        client = _SYNC[case.face_class](config, http=rec.sync())
+    face.run(getattr(client, case.verb)(message))
+
+
+def _send(face: Face, case: _Case, message: Any) -> Recorder:
+    rec = Recorder(_answer())
+    _send_into(face, case, message, rec)
+    return rec
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("case", _CASES, ids=_CASE_IDS)
+def test_the_model_and_the_equivalent_dict_send_the_same_bytes(face: Face, case: _Case) -> None:
+    from_dict = _send(face, case, copy.deepcopy(case.message))
+    model = case.model.model_validate(case.message)
+    before = model.model_copy(deep=True)
+
+    from_model = _send(face, case, model)
+
+    assert len(from_dict.seen) == 1
+    assert len(from_model.seen) == 1
+    assert from_model.seen[0].url == from_dict.seen[0].url
+    assert from_model.seen[0].content == from_dict.seen[0].content
+    # The caller's model crossed a boundary as an argument, not as a buffer to stamp.
+    assert model == before
+    assert model.model_fields_set == before.model_fields_set
+
+
+@pytest.mark.parametrize("case", _CASES, ids=_CASE_IDS)
+def test_to_wire_renders_only_the_fields_the_caller_set_under_proto_names(case: _Case) -> None:
+    model = case.model.model_validate(case.message)
+
+    assert fora_sdk.to_wire(model) == case.message
+
+
+def test_to_wire_leaves_declared_defaults_off_the_wire() -> None:
+    """A model built with only ``exchange`` set renders only ``exchange``. Its declared
+    defaults (``ver`` is ``""``, the extension members are ``None``) stay off the wire,
+    so the SDK still stamps ``ver`` the way it does for a dict."""
+    assert fora_sdk.to_wire(GetAccountStatusRequest(exchange="exchange.test")) == {
+        "exchange": "exchange.test"
+    }
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize(
+    ("case", "kind"),
+    [
+        (_Case("get_account_status", "Client", GetAccountStatusRequest, {}),
+         CallErrorKind.NOT_SENT),
+        (_Case("discover", "Client", ResourceQuery, {"uris": ["https://site.test/a"]}),
+         CallErrorKind.MALFORMED),
+        (_Case("refresh_catalog", "CatalogClient", RefreshCatalogRequest,
+               {"tenant_id": "tenant-1"}),
+         CallErrorKind.NOT_SENT),
+    ],
+    ids=["account-no-recipient", "discover-no-recipient", "catalog-no-recipient"],
+)
+def test_a_model_is_refused_exactly_where_its_dict_is_and_nothing_is_sent(
+    face: Face, case: _Case, kind: CallErrorKind
+) -> None:
+    """``model_construct`` builds a model that skips validation, so the required
+    recipient can be missing. The verb refuses it with the same class it gives the
+    equivalent dict, before anything is signed."""
+    refusals = []
+    for message in (dict(case.message), case.model.model_construct(**case.message)):
+        rec = Recorder(_answer())
+        with pytest.raises(CallError) as caught:
+            _send_into(face, case, message, rec)
+        assert rec.seen == []
+        refusals.append((caught.value.kind, caught.value.op))
+
+    assert refusals[0] == refusals[1]
+    assert refusals[0][0] is kind
+
+
+@pytest.mark.parametrize("faces", [_ASYNC, _SYNC], ids=["async", "sync"])
+def test_every_verb_that_takes_a_request_message_is_covered(faces: dict[str, Any]) -> None:
+    """A verb added to a client face without a case here would accept a model untested.
+    Every public verb is either covered above or named as outside the clause."""
+    public = {
+        name
+        for cls in faces.values()
+        for name, member in vars(cls).items()
+        if not name.startswith("_") and inspect.isfunction(member)
+    }
+    covered = {case.verb for case in _CASES}
+
+    assert covered | set(_OUTSIDE_THE_CLAUSE) == public
+    assert covered.isdisjoint(_OUTSIDE_THE_CLAUSE)
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 646d1f01..c015ecf7 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -6,6 +6,31 @@ description: "FORA protocol changelog"
 This page contains curated public release notes. For the exhaustive maintainer
 and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protocol/protocol/blob/main/proto/CHANGELOG.md).
 
+## Unreleased
+
+**Python SDK: four additions for callers that test FORA services through the SDK.
+Python-only for now; Go and TypeScript parity follows.**
+
+- `ClientConfig.before_sign` is called with every request just before it is signed,
+  as an `httpx.Request`. The request it returns is what gets signed and sent, and
+  the reply is decoded as usual, so a test can send a deliberately altered message
+  through the SDK's own signer and decoder. The hook cannot change the method or
+  URL, and cannot set a header the signer emits. Either refuses the call with
+  `CallError(MALFORMED)`.
+- `CallError.code` holds the Connect code of a peer's answer: from an error
+  envelope, or from a non-JSON error status classified by its code. It is `None`
+  for a local failure, a refused redirect and the content leg, whose refusals are
+  edge tokens. `reason` is unchanged.
+- Every verb that takes a request accepts the generated wire model as well as a
+  dict. `to_wire(model)` renders a model as the JSON object the SDK sends: only the
+  fields the caller set, under their proto field names. A model and the equivalent
+  dict reach the wire as the same bytes.
+- `generate_key()` returns a fresh Ed25519 key and its RFC 7638 thumbprint.
+  `directory_document(keys)` returns the Web Bot Auth key-directory JSON for a key
+  set, each key carrying the validity window the SDK's resolver requires.
+  `signing_transport_for(key, directory)` returns a `SigningTransport` that signs as
+  that key.
+
 ## v1.0.8
 
 **Request signatures carry an RFC 9421 `nonce` (SDK fix; no wire change for

From 07ea88656f6f6712af64513816b1d5ccf813d843 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Fri, 2 Oct 2026 19:00:46 -0400
Subject: [PATCH 005/164] Add a typed reason to request-signature refusals

An RPC request whose RFC 9421 HTTP message signature failed verification
was refused as Connect unauthenticated with only a message. The contract
tells clients to branch on a typed reason and never on the message, and
ErrorDetail had no reason for this failure.

ErrorDetail's reason oneof gains RequestAuthFailure request_auth_failure =
17, whose RequestAuthFailureReason is SIGNATURE_MISSING, SIGNATURE_INVALID
or SIGNATURE_STALE. The values are deliberately coarse: each names what the
caller does next, never which validation step failed.

connectserver.WriteReject, which the verify seam answers with, now adds one
fora.v1.ErrorDetail to the details of every unauthenticated refusal. A
missing or malformed Signature-Input or Signature is SIGNATURE_MISSING; an
expired signature, one created in the future, or a replay is
SIGNATURE_STALE; every other error, including one the mapping does not
know, is SIGNATURE_INVALID. The envelope's code and message are unchanged,
a resource_exhausted refusal still carries no detail, and a test holds the
details encoding equal to what connect-go's ErrorWriter writes. The
detail's domain is empty, because the writer is not given the request.

The detail builders gain helpers.RequestAuthFailureDetail,
request_auth_failure_detail and requestAuthFailureDetail, and the readers
return the new enum. The error-detail and connect-error corpora carry the
new block, so the Python and TypeScript readers replay it. Neither of those
SDKs has an RPC refusal writer, so they read the detail but do not emit it.
---
 conformance/corpus/cases.json                 |  28 +
 conformance/reachability_test.go              |   2 +-
 conformance/validate_test.go                  |   2 +
 docs/sdk-parity-matrix.md                     |   3 +-
 gen/descriptor.binpb                          | Bin 623790 -> 625593 bytes
 gen/go/fora/v1/fora.pb.go                     | 591 +++++++++++-------
 gen/python/wire/models.py                     |  22 +
 gen/ts/wire/schemas.ts                        |   6 +-
 proto/CHANGELOG.md                            |  38 ++
 proto/fora/v1/fora.proto                      |  27 +-
 sdk/go/connect/errordetail_test.go            |  14 +
 .../connect/gen_connect_error_vectors_test.go |  13 +
 .../testdata/connect-error-vectors.json       |  30 +
 sdk/go/connectserver/reject.go                |  90 ++-
 sdk/go/connectserver/reject_test.go           |  74 ++-
 .../request_auth_failure_test.go              | 313 ++++++++++
 sdk/go/helpers/errordetail.go                 |  12 +-
 .../helpers/gen_errordetail_vectors_test.go   |  28 +-
 .../testdata/error-detail-vectors.json        |  48 ++
 sdk/parity/symbol-map.json                    |   5 +
 sdk/python/fora_sdk/__init__.py               |   2 +
 sdk/python/fora_sdk/errordetail.py            |  15 +-
 .../test_errordetail_construct_parity.py      |   5 +-
 sdk/ts/src/errordetail.ts                     |  25 +-
 .../errordetail-construct.parity.test.ts      |   4 +-
 .../components/exchange/request-flows.mdx     |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  38 ++
 .../src/content/docs/reference/proto-fora.mdx |  12 +
 28 files changed, 1183 insertions(+), 266 deletions(-)
 create mode 100644 sdk/go/connectserver/request_auth_failure_test.go

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index 1751488c..cda42b38 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -14929,6 +14929,34 @@
       "window_seconds": 0
     }
   },
+  {
+    "id": "RequestAuthFailure/reason/not_in",
+    "message": "RequestAuthFailure",
+    "valid": false,
+    "rules": [
+      "enum.not_in"
+    ],
+    "json": {}
+  },
+  {
+    "id": "RequestAuthFailure/reason/undefined",
+    "message": "RequestAuthFailure",
+    "valid": false,
+    "rules": [
+      "enum.defined_only"
+    ],
+    "json": {
+      "reason": 4
+    }
+  },
+  {
+    "id": "RequestAuthFailure/valid",
+    "message": "RequestAuthFailure",
+    "valid": true,
+    "json": {
+      "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING"
+    }
+  },
   {
     "id": "RequestConstraints/exchanges/item_killer#0",
     "message": "RequestConstraints",
diff --git a/conformance/reachability_test.go b/conformance/reachability_test.go
index 747a4619..f6549db5 100644
--- a/conformance/reachability_test.go
+++ b/conformance/reachability_test.go
@@ -30,7 +30,7 @@ import (
 var outOfBandRoots = map[string]string{
 	"WellKnownManifest": "served at /.well-known/fora.json by every participant (capabilities, role; identity keys moved to WBAFile)",
 	"WBAFile":           "served at /.well-known/http-message-signatures-directory — the pure WBA JWK Set (identity keys + revocation_url)",
-	"ErrorDetail":       "the transport-error envelope; carries the seven typed failure reasons",
+	"ErrorDetail":       "the transport-error envelope; carries the eight typed failure reasons",
 	"KeyRevocationList": "served key-revocation document (thumbprint list), fetched out of band from WBAFile.revocation_url",
 	"AgentAcceptancePayload": "canonical signing structure for AgentAcceptance; never sent on the wire — it fixes the field set the signer and verifier canonicalize (RFC 8785 JCS over canonical proto-JSON) to derive byte-identical signed bytes",
 }
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index 6a884c4d..e97dd1a6 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -403,6 +403,8 @@ func errorDetailCases() []validationCase {
 		{"retrieval_auth_failure unspecified rejected", &forav1.RetrievalAuthFailure{Reason: forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_UNSPECIFIED}, false, "enum.not_in"},
 		{"usage_report_rejection valid", &forav1.UsageReportRejection{Reason: forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_DUPLICATE}, true, ""},
 		{"usage_report_rejection unspecified rejected", &forav1.UsageReportRejection{Reason: forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_UNSPECIFIED}, false, "enum.not_in"},
+		{"request_auth_failure valid", &forav1.RequestAuthFailure{Reason: forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE}, true, ""},
+		{"request_auth_failure unspecified rejected", &forav1.RequestAuthFailure{Reason: forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED}, false, "enum.not_in"},
 
 		// ErrorDetail wrapper: carries a generic class (no typed reason) or a valid
 		// typed detail; a nested invalid reason fails through the wrapper.
diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 7adfbbe3..14dc921b 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 148 symbols at cross-language parity · 16 documented divergences · 185 Go-idiomatic exclusions · 38 conformance corpora, each tri-replayed.
+**At a glance:** 149 symbols at cross-language parity · 16 documented divergences · 185 Go-idiomatic exclusions · 38 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -82,6 +82,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `RegistrationFailureDetail` | `registration_failure_detail` | `registrationFailureDetail` |
 | `RegistrationSchema` | `RegistrationSchema` | `RegistrationSchema` |
 | `RegistrationSchemaDialect` | `REGISTRATION_SCHEMA_DIALECT` | `registrationSchemaDialect` |
+| `RequestAuthFailureDetail` | `request_auth_failure_detail` | `requestAuthFailureDetail` |
 | `RequestIDHeader` | `RequestIDHeader` | `RequestIDHeader` |
 | `RetrievalAuthFailureDetail` | `retrieval_auth_failure_detail` | `retrievalAuthFailureDetail` |
 | `RuleObligationOtherRequiresDetail` | `RULE_OBLIGATION_OTHER_REQUIRES_DETAIL` | `RULE_OBLIGATION_OTHER_REQUIRES_DETAIL` |
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 4886456752e5d3f51841daaa84a8e5669a15f2de..ac112b49ae9fb55f46341f3977c066666228f06f 100644
GIT binary patch
delta 5627
zcmZu#Yj9M@m7ckC=SqELgScXmG!mmb-2#F20Ew4*>46ZziFrtXlYncfk#vzJmS$wl
z2%*GSfY~AjKg*alFB^7QJ6l_JLLeR<aU6`3)FwE#7YuePiGyvxlnExa_PWfEt^H2l
zdo6aIA5zUZefpf!=ll9}-+t-giO1!{O<RLowXLD8`qA*8TDAB7EBk(HcwSfVy=>|6
z@M~JDwagsb@7zD&q%&*d1DWo%>*9%?fqtiGj2)bmS65QAF4Z5eSzlYz<{CA@W|3>M
zIM8N!Q*Y5`|9mohIeaHyV_ILIVzrn?zY|ZVl0`xIA5|Co|NdqDsqlpC>!-r^lvUsH
z=b%~ibti4gfmLZ%w6(OZYFV*zZPTiii{+E=hNGiv&FcT7wBHLyikIBAV#QrczmXrb
z{?0HTqghkT%CF7JS+TO|?w0&eHgYjsubc8eMwvNQxHxcqTl=Lj{tW!(WZN(0e)Hbj
z{`GcK)8|{ptFgcpd8~=uqn*A@zWr@uS$6FLR-)%u*<PJ&D)HnRS^H1MSoy>vmX~kZ
zohdt+%Gm3A;+c$-%>Mf#_IWsXIeYMKb}=-1nW^jZHPg~B#q`=plWbke#>xXjIgurH
zDrv`)cH8o1IA1rAb~;V-b~8-YhB6=Li$M|#D}6CUV$D=@i-x4@E#q1&@I>~p<t!Mq
zuElbT&3On}uLUgQdQ7_^54N(otMF@-nhrg@U5}0a2VaD@>#?F@b2LI@G?%7DZp1=n
zzL~2O+gQG(e;U)9%rPeOH5yd1wv82x{xnwKV18ePgy+xXiZ=GZyw75qyO??{h{b#s
z%ZqsNkR-&CT3<x?&tlVOnDxp7+<qbRR<Op#FGf6QVQ6D{W4tLEJbV$ee1{r5d=VQT
zH9um?MaVL?bM5i$juq@feHcIeL_%=0oqy#f1UK9HS8hUZvz^0@TZa(pu$`AZ&O@f9
z>JZA^#ztAj4z54O!(Jtn4)Y%2h6OV!j#3#`_)%`W8Z`ehCTMEmahCBk54^;Kk+*}k
z9Q}*%IC*Uo%adi_Wyh?idAP)^GWGB{Ag1r)TIH_RoC$K&YGy<sO{7KB7%H=iPrk!k
zq)d^!ly$4w;;7_Woo5q-jpQ?CnoY_E(lhdz)vP)C4A<`PY&6pH>Kb#JvO)5@<(I43
zjOcEz)p#}`*zD%Db>?(sqg(nOdG{JNGrEUsRi2Fwn>~EWRCBhnL238O18dma=-!c7
zVc6`YSZ+Sx!9Mxr8sxKYB$ff2eH06%#WHg&eZO3NFRL%x&$Y>3tQ^?v=T+6_n;~VC
zYw3rw*?ZaB!LmbKo8npJ!s-yOn`WNXl@+t}7qc(?BU`1Fy*QE+gVl?a({k*c2Fp0i
z11DukoGr5s^V}k{0TgPWt#gEHKa&r{S^Y466;TM%qwGg`ahWfodPg`HiZU1lWsdOj
zpMf&8bx5JM&Qb1d9Z!P{j`G+v5XSV4bU=TUV;_AUR0$x?39e0uTn1lex3e4dkX#x!
zXhGEagim9L%GR>IoPx;d1Q+GzKNIr`(b0I|g6!&G2d!6mII5UdNKE@BFi=cu=mgUs
zxz)xP^7|!KyBcLIq|J6pc672S(NkPgyOxx&ImNMSi6Mo=sn_IBI@wI|+K3;eB|npu
z4e~n8wduS>9*!6VveaP(Wl*^26>7w}(}do(TxAZ@oy{(F7}MvU<=Rw*aiK=6JIkj{
z_eD58%V#V$N0|oF&}mDb<ukuwRw^GT)H%5`!K$O@eBu^rM9OnS+@!JrDc_OrCs<$E
zJ6xOP`6W`m!{^L3cLEML1}o3Y<oDRFvhyRk5G&79F86>*jh68T9{8IS_pwzI{=jof
z;3=dx=2*sGxb_j(&HvHN9LU>P2;?GNcK>~BV{qn0t}jq@amV2E1FrYoqQMeB<a)C?
zAH--RW?tdiRk^&E&0B?E6emo2to#Zu<-UknSNMd9ikTP%Gq3Q9s~$5+p_uux&rDB)
z=pW0Ay{w?%V<O`PB4Z;MU|i=oNOF?wd^>)*M1&r-yUz1sUQ8n5b<R~2p;<`bI&Ey~
zrx58};nQv)1v*7Yv5i>>_$k+?n$Li&dXr^*&I4OyLyF1#&v|atd{RRKO~lrl*~=+b
z5Ny54wOkbsTEx4_+3miFcsF^zdq`juP2wiE=BsEVqI)Zgf_dfz*DdC67TIs!&%P5J
z-YmZIOY7Jyn0s6{sda1?V=ONW)`8K2B?=*ol3&t{z1xeVG+5VWG0hLIR0zIVG<?f^
zjrL`cWo#3H$3!r4Bxo;8q-89PqhOl|7po0gL`(jm&?c)5nxDZ2g;Y){gfRy1KNJ;{
z)W#~J4f?R0o?(^IhlSU|p@hxD0@cU$15+Svmm4#zHM$*MJwHk-utD!sHb`)Xyp~~e
zqC13E;n~o(+#&9$B>KS*cI6{-;Q(uhJ|Z+lHd4ao5dpHzQa0FikII7sY<AhBLKB`J
z+I5eLi4|refL>r3Pl~`U`6V0`JSlR=DRM6$az7=sr-f|oWi#Za^~@NC?B0SfiiJKU
z3dfU29U}65O4u>QFNomRQ-VJ&+~!LPMe&`&YrdWadF&Kk^Yv8Je0K`){azqbY#F;n
z;2@A$YA;O5@E}`h?H1v3g-bEvvPWn$6fRE;0vAYbbHW&W?-6JSREJ{1Wv@Is$Yw|P
z3hho+2Pk2)SInKKj=N$)V4uv}!0My>gx7tbB&|UAX;gl&&i%4$16vT?FSMDSAHrq7
zm_0|~QcSo!D}S>AxI8PoCJiNQo)u`)Gn60T@|-LmVzZ*p32mO|hj4jLG&Gvc$_6|7
zfE*fPEoBErY^WO^Ae;MuU9)8z5`lk{e;Q)nD>x)_V+y-w!tQyY{m8@a@$UmW$Zl`I
zD2nmC;FA<~5V5A`MP-%34kEC7UR3|c!;TaRyBB=yJPq=A!N<;15q2*Sb~k8SMJ(eb
z5%>kbyNH8x><`#g>m?B`Q`kiayB`BB!mb<=Qi7;1)nSNm{$o)y#hi;mL<qdY@;eW(
z`LV+zHU!>bvKg;zApKNmbL9IQSrMlhkY=d5MihoW6?e||OtIc0^2P(KEP6zE*R_Z`
z@{R~x*UFVUV0ctkZ)6jrM}3?l3d5s>^S6`@Fnn3wzmYA8zU<>1Q778VgtMC#FwDw7
zZbYoC&#8z;7-or6w(^4m?U*cnkn!j-zh^`=I?#?$&zPWW(CCiK?>@*XqQ`|c&07~;
zvW|<HvpgHzu};Wm$>zk!+UbgQg4P~We(>pYQhxX#6KhTi%{{pz_;7(%%<}7#XX!sj
z5I)+j=u7pjbvE=R`kl@Sb<zNhJQNq>)m{>LnEZ1wwayE0o29=Z<HJmpy)v@k+hFsG
zm^07p0BILm#wii_wfvW1)?RQ*<d!PZE+o>P7TT{|(hfsL?Vu=CG=+$;r^R^H!*qy1
z@ig@?I?*74wWr0TUwN!0g<|dNK5IP<5_#Qct*0W^zD}&&ORO!ijNgjD+w#mNw#WLd
z&({*->+gKNLP9bSUA{tu+usov>2_5@>^mb*ZN?#R#s>mQ*qk9CaI1w4q&K9wg*Ayc
z{6hdr($XPNr);pq-xCn!@^2YdAUAJerBNu{FM|?A+20dInv^vt`=&g(1vmOP{mPdp
z%Dzcdo2qO;*|%irL#(dst&ynIcHW|>OMy;{Wt<a%_hj!wY>9P_(4kv+3!!sfXz$81
z58)P$UoI@rW3lIbSRf+j^FAyP0n2$Y>0J*NQYct1_^@~yWN^WU#ZwV17YLR=h5$>c
zWn2`2%V;KVgzOye5krpu0gDW0x*fZ1QL{aJdR?u(c;(9FcCV98$GaRmo#;x&GkAR&
z`M5W~dODzo8K=`;@AN0uB|74nL@G(|3hL9}9!zAqZF1b4N+z9-jNOsybnI12>1Cv4
z>B_sBn^v|gtTF9{PS0?n-RX~KoSq>V#rxCF9NUR^bldCWJp+!Nj3XI)usfbn?mFT<
zJx)K~D4<L_8!}b+j|^at=;$_SPNGw#Vy81spY7&YWv5ei+|4cCV<S{g8Zuszx-hi^
zuN~cqWS1RpPYq=3?$jWr_1lR|dStC#sZ0&sY%+-?*0QcY)oZsonf`=>fVaFgxi3Lg
zZZ=pAGD}n1raZQcO`7kmq0{L}U}VU4I=dV!0FN#1!%2;4=9!^zDHw54gvYB!UrHP2
z18|la{V*g9LUeCE5CQxLL_O-LrL=KAL|fwX;dKPPDm&E=Mbbeo$f1vloSut%^g5kG
zbCjJbuJ<V9_9-}Xy}92s5H)KU-tkehgT5n5X|H`m!8WSNBV2L8!KxHB5THHYd22EQ
z$$lrD>RBIe?{Vz=oS`aIDv772Om%0X3-5k*ZzA0r&vbOV&s5Yq-C8=s^rN>AD@iJ=
zG+^_yrL`j+KU+6DBpX+`Vpm<lS;be_z&M=%7lE(cfw#Ym(>cZM(4bi&*_j$t<%;)U
ztaHewhb((izth(fADTQoQnY@jnpTXm4*D6;_Zot@eZ5q5mrG)5t+@tWVUcBA6@ly6
zeoMd{^}KltZ|n~??HqYLQ==8>zq1u<)LtBnr~Q5AGDcs7$X7*fL>&Z+sMUNTw7+@>
z0c0EmP`FP_5Mlj^C~<Ey5K)^?MEL}D5I{u7`9w_otJiTzp*qerzvFlspnuKpIG&0+
b&NXzLcB8L9l}Sze&;Jfp<;sV)vdaGj$oY2<

delta 4126
zcmYjUYj9Q76~1@hb58EwK^`ZRBsXww?%pAQkbs0F0wE6~l~I9Wg?3t?R8;DKVimQb
z62xG_LoI^rK-5kd)N#;40KGvlA)(Vjc{m9{{Lxl)B+NK~uVIE?(r@j%kLeF)vcB`(
zwbowWxAr+4*2VwWSiG(=+Q=GXjm{zWKl9m{i|H@syH(4h&FPVc-ENkic+~B8(~ow$
z3zO-0zH+M_(b_RsWchA><b2cj{Vx7__?MObzCV7)qCxs5!JHYs*O`i3)VJ63h3x%7
zx~IdNo4!)dM>=d=sXq3CH(Zy@=Gj9F?^{*)@T%2?53Ky->ecr@EYh=Q^J{MO>vZ*8
z{$*^?dWKxpzV}Tk@>2SpyLmL~f0K&miz?wb)hyzBms9MjKKg4uy#ap>7B>l(@Tl)x
zP7V1*7{(~f%NIj3Pvi8n#MM+x3>9&r$D8<2-?@@<>clX?Lxd5ODigjCA>>2|tF94i
zOnsF3A;l^ZD+_<~C;h}de03E<VXH<xdYYXGLqjgOB@EHi52-2TqS|Cat!uh?0k55P
zZ6E`4fu^#D*`F|ExR&z6gbW$3rA7tfYi?4+e6Lxu7p0Rp%k_k%USay=0^Z>?01R7-
zAz`!pIbjS5o8`|5V@TL6kuWo+7{=5rlP}5`CO~6~VN8R4Z=-a!NY@U^VEEl8>G`11
z><r}j?q=zAM#Y6;QNi31zPC+A-j&frPqa`k?QloviNEK^hisE>ftVm1cLcO_w(IC3
zUK(tdteB2WAm*}Nj=Nd>(s0o4t9s5NK0A0-vdNYc1?N>+ULooX2hk3Fa1pN$c1U)!
z<uF2JNvS9^95k%;@Ws45(2|u}P7E9^Z<#En7>?sREqeK4UJ<lNHo<Zna9ZTVNn)zu
zV4OSkk;Qy^uydf63(iiemFWjA*rkUrK|i|&YI)%7qFV4Vj+x~<t@`mLygJz`**IG(
z3!GLtp+tNdGo-lh>`wPC;XTphZpkKERvfI|a&nnC>lhaIoxSPqrF;QP?j7ifgSD4>
z`W4ox#`pHg$YEWvjL-A;$#|Zqfq`mho7yBhsP!^l-GIOHs085{dz;Kph9RccCZ#eq
z!Bg0zO%@%5O=z14FxzxM+HJB3IyfNhHd%<a>43yGU5lCqP^Vq8(TRR|<evNZch!h8
z)~#Vt%(^|aE<(fg3vEwP^wcg@k=RXc%k{mFWaOM)e?R}b|B-Y9W3gPaSO+xF!%lmn
zix46Q;>^4eqQefFcL@fWOUu@&*FL}}2Az_bttAkgPKm80kK~f8j_H#Rz$3>7@)(rz
zj58c`)}@on`S@g4s9G)~uXT}XO>skl*?Q6sF6Z2t(IeR;qirrDxAn-fDPf3IJ+geZ
z7%V&#cW8ZkWX0`byvcz9_3C{qc!}x_4V%lzjJ;&ohYbg2JS$n1T&h!d$8)s5lK(ad
zpwd<#Tb`BEri<+m1SR0hKD}`z-;wMa=!$&VM_nz1muh|Qa~b(oS3krTjQ(843y>-1
z)MokKe<k}$I^riLvJf}%80<w@y8R*kY_#GF>C7~S$vi{O3(|Sy{}3GZOX<{$8L&nz
zdGn%Vm-LENys80zQ5~0X%;2INDZ>!Ix+q5%8*kz%ym?WMxn#XbfbnL3=uL~DdVlCm
z3z0Yb$(!fNo3*fmcUiKlxLyCHiyz^=_ae%86VEW#%Q8D<n;>sqmeSlS^h@+~nRcD7
zRfP2Rk!4rW6TNE)XyQIPxFVfNq6PkS>U{4<8Cj=)_h+t${wU*t*vimE9U1s~I{GNj
zi7vP<S=`hEih9>2zbOn+@46hCd28S)?v3lxpJA#|h)disa;n7nOj`W@hGcUSCwAPy
zi_<SZ#!I6O0K)uqo*R;9UaocKJU8Sp-<HF9@HA(Rkq%EOKOw{KvK0-2^WBhTVG{;I
z6E|edouZpoHqZAqsK^!-O&p9C-uB>Q`uH(-n4a@Ef7{=n+<ddZd36346dRXWV1#H4
zaS?UmB1DlF)R?hm@$zVaoAkUV`1qhn*-IWEI86#-%!9%6XjPka%M*Nl(2Tq`k3kg{
z_*TO~pBr`7lYCmRQL!<WLkql7-8`P`i9FcfP5KW{@|s|iV#bUFg0o4%jFpCi{oJgN
zKFOyhH!G%W9@@{%s(6g3h3+$b?`0L)u804H*W|pc;v<atXOj81Dz;7Om8*Dp17i3M
zzzE9WAjC<xs@zdwh=#YS!j$nFp2BZimE5K>_cH-z2VPP3ezpi2c}3a#*+R4fuPE%m
zA}Eyads;>QrkrSEZlNyha+7+-Q@qmG$}KYT<dZxtij`;NL5RK(XKpiusL-NtZ_qgM
zNuHhh)2H~<V5efYnsERGXQ!H8W!{VVB*ZRVyoOf?yOh1801~QjN!6M>IBlz5zlP5Y
zS{19Xc}SjCHFcViC!gebO@Flp^1P<(T@DbO*A(vZa+3%0ysm4W=9R(gidES>B+u)r
zrdHG&4(9%b-u^V7RrJOHhc3-Gh_eC`*8ARW6?q#zUTlVxuSYz?@5<S&;wd9$J&CzT
zvA3+4h>;XP=JG&@x$IGLtPv9-j<-jRpJ2p92r>7llDDjw1Q;>j48^nvT6!}S(?TTX
zn<VCUv~LODdsjt{>T%EVZ->0A+@z5(K@z^F|N1;1tLLrdUhtk`<IO1W1UcVRr4z+;
zj3Pnu?bDB~<uihP100fXA8|$*4x;_~%vzod_QMu756QP*-8$8BaK1L3-2hITvY&Jb
z^LlJk_@pZ`c_7~bJ-dMy2M0ol6GpxRB=Mbw1Njc=Ee(85>QE?g!o2+sk;IvPFzNT9
zo9<c5^Q4CpAj-V@5{y)QpIlXF(&5ebfu6FC%ix3X@<=dx^L;><$7sXB#h2Er*YPny
zTCp;FJo+9>tBOj?!RJ`JK1`hUff3NxSUZg%W%3B$IjnzL$5n7xvCPXpf&caZRh8kG
zvVG@6UGp5q^r2!UwpKPcAF4@{ZJt5Cb3{M$99PLB1Lqn9&Ji`ON-TprZ}YuQ75S&`
zc#hwj)2ZSkjVEs-Pj)GG+<Fo*CIw(5)o~DFR9$M6xw9yQW?gh=(F+YBJlUnj9=Dz(
zz<9Dd^rS`5NO$N-3y~+g$&;<*$pYUyp(3ApSe`BT0&KY8Cg^_&+1h`euNrb9G-&~u
z^kXt<Y4CCAJ%GsnF?o+Zy9&skpXh%-kK6x~aPR=Z`Gf|K4_<H(oz$Znd0lWay!`<Z
zO1J-H!@*fk>BdGrB{&rtp}_d_6d9q;aNy6=`m;uS;-3x&Uts)snhZ6`aNy4~x^e@b
zoIEp7i>{Y5RBJB8ndN)EDso;oZ{TzMUJ{2s%V&`|eTsdiFKyt}58|(kD!_5XzEBl}
n=(I0X1tC=FQ)54~st{mQITxy85p-}aRK-H1$~nDuGoSuHo~psb

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 5ae0552c..f6dba13a 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -1944,6 +1944,64 @@ func (UsageReportRejectionReason) EnumDescriptor() ([]byte, []int) {
 	return file_fora_v1_fora_proto_rawDescGZIP(), []int{27}
 }
 
+// RequestAuthFailureReason — why the RFC 9421 HTTP message signature on an RPC
+// request failed verification, refused with the Connect code UNAUTHENTICATED.
+// Deliberately coarse: each value names what the caller does next, never which
+// validation step failed, so a refusal tells a forger nothing about how far its
+// request got. Distinct from RetrievalAuthFailureReason, which covers the
+// signed-URL / proof-of-possession check at the delivery edge, not an RPC.
+type RequestAuthFailureReason int32
+
+const (
+	RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED       RequestAuthFailureReason = 0 // unset — rejected at ingest
+	RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING RequestAuthFailureReason = 1 // no signature, or none that parses; remedy: sign the request
+	RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID RequestAuthFailureReason = 2 // the signature does not verify: bad signature, unresolvable key, content-digest mismatch, required covered component missing
+	RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE   RequestAuthFailureReason = 3 // outside its created/expires window, or already used (replay); remedy: re-sign now
+)
+
+// Enum value maps for RequestAuthFailureReason.
+var (
+	RequestAuthFailureReason_name = map[int32]string{
+		0: "REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED",
+		1: "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+		2: "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+		3: "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE",
+	}
+	RequestAuthFailureReason_value = map[string]int32{
+		"REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED":       0,
+		"REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING": 1,
+		"REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID": 2,
+		"REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE":   3,
+	}
+)
+
+func (x RequestAuthFailureReason) Enum() *RequestAuthFailureReason {
+	p := new(RequestAuthFailureReason)
+	*p = x
+	return p
+}
+
+func (x RequestAuthFailureReason) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (RequestAuthFailureReason) Descriptor() protoreflect.EnumDescriptor {
+	return file_fora_v1_fora_proto_enumTypes[28].Descriptor()
+}
+
+func (RequestAuthFailureReason) Type() protoreflect.EnumType {
+	return &file_fora_v1_fora_proto_enumTypes[28]
+}
+
+func (x RequestAuthFailureReason) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Use RequestAuthFailureReason.Descriptor instead.
+func (RequestAuthFailureReason) EnumDescriptor() ([]byte, []int) {
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{28}
+}
+
 // AcceptableRestriction — the limits a query operates within on one restriction
 // axis, expressed in the same RestrictionKind vocabulary that terms use. The
 // Exchange/Broker MAY pre-select offers whose term restrictions fall within
@@ -9366,6 +9424,7 @@ type ErrorDetail struct {
 	//	*ErrorDetail_DomainVerificationFailure
 	//	*ErrorDetail_RetrievalAuthFailure
 	//	*ErrorDetail_UsageReportRejection
+	//	*ErrorDetail_RequestAuthFailure
 	Reason        isErrorDetail_Reason `protobuf_oneof:"reason"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -9492,6 +9551,15 @@ func (x *ErrorDetail) GetUsageReportRejection() *UsageReportRejection {
 	return nil
 }
 
+func (x *ErrorDetail) GetRequestAuthFailure() *RequestAuthFailure {
+	if x != nil {
+		if x, ok := x.Reason.(*ErrorDetail_RequestAuthFailure); ok {
+			return x.RequestAuthFailure
+		}
+	}
+	return nil
+}
+
 type isErrorDetail_Reason interface {
 	isErrorDetail_Reason()
 }
@@ -9531,6 +9599,11 @@ type ErrorDetail_UsageReportRejection struct {
 	UsageReportRejection *UsageReportRejection `protobuf:"bytes,16,opt,name=usage_report_rejection,json=usageReportRejection,proto3,oneof"`
 }
 
+type ErrorDetail_RequestAuthFailure struct {
+	// `reason` oneof — RFC 9421 request signature on an RPC refused
+	RequestAuthFailure *RequestAuthFailure `protobuf:"bytes,17,opt,name=request_auth_failure,json=requestAuthFailure,proto3,oneof"`
+}
+
 func (*ErrorDetail_TransactionDenial) isErrorDetail_Reason() {}
 
 func (*ErrorDetail_CatalogRejection) isErrorDetail_Reason() {}
@@ -9545,6 +9618,8 @@ func (*ErrorDetail_RetrievalAuthFailure) isErrorDetail_Reason() {}
 
 func (*ErrorDetail_UsageReportRejection) isErrorDetail_Reason() {}
 
+func (*ErrorDetail_RequestAuthFailure) isErrorDetail_Reason() {}
+
 // TransactionDenial — ExecuteTransaction could not complete. Carries the denial
 // reason the response body no longer holds (denial_reason / restriction_mismatches
 // move here in the response-shape normalization). Reuses the DenialReason vocab.
@@ -9998,6 +10073,52 @@ func (x *UsageReportRejection) GetReason() UsageReportRejectionReason {
 	return UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_UNSPECIFIED
 }
 
+// RequestAuthFailure — an RPC request's HTTP message signature was refused.
+type RequestAuthFailure struct {
+	state protoimpl.MessageState `protogen:"open.v1"`
+	// The failure reason (defined-only, non-zero)
+	Reason        RequestAuthFailureReason `protobuf:"varint,1,opt,name=reason,proto3,enum=fora.v1.RequestAuthFailureReason" json:"reason,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *RequestAuthFailure) Reset() {
+	*x = RequestAuthFailure{}
+	mi := &file_fora_v1_fora_proto_msgTypes[70]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *RequestAuthFailure) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RequestAuthFailure) ProtoMessage() {}
+
+func (x *RequestAuthFailure) ProtoReflect() protoreflect.Message {
+	mi := &file_fora_v1_fora_proto_msgTypes[70]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RequestAuthFailure.ProtoReflect.Descriptor instead.
+func (*RequestAuthFailure) Descriptor() ([]byte, []int) {
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{70}
+}
+
+func (x *RequestAuthFailure) GetReason() RequestAuthFailureReason {
+	if x != nil {
+		return x.Reason
+	}
+	return RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED
+}
+
 var File_fora_v1_fora_proto protoreflect.FileDescriptor
 
 const file_fora_v1_fora_proto_rawDesc = "" +
@@ -10659,7 +10780,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"3get_account_status_response.balances_entry_complete\x12\\each balances entry needs a non-empty amount and a three-letter upper-case ISO 4217 currency\x1aHthis.balances.all(b, b.amount != '' && b.currency.matches('^[A-Z]{3}$'))\x1a\x85\x01\n" +
 	"1get_account_status_response.balances_no_unit_cost\x12'balances entries must not set unit_cost\x1a'this.balances.all(b, !has(b.unit_cost))\x1a\x94\x01\n" +
 	"4get_account_status_response.balances_currency_unique\x121balances must hold at most one entry per currency\x1a)this.balances.map(b, b.currency).unique()B\x0f\n" +
-	"\r_terms_digest\"\x88\x06\n" +
+	"\r_terms_digest\"\xd9\x06\n" +
 	"\vErrorDetail\x12\x18\n" +
 	"\amessage\x18\x01 \x01(\tR\amessage\x12\x16\n" +
 	"\x06domain\x18\x02 \x01(\tR\x06domain\x12>\n" +
@@ -10671,7 +10792,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x0fdispute_failure\x18\r \x01(\v2\x17.fora.v1.DisputeFailureH\x00R\x0edisputeFailure\x12d\n" +
 	"\x1bdomain_verification_failure\x18\x0e \x01(\v2\".fora.v1.DomainVerificationFailureH\x00R\x19domainVerificationFailure\x12U\n" +
 	"\x16retrieval_auth_failure\x18\x0f \x01(\v2\x1d.fora.v1.RetrievalAuthFailureH\x00R\x14retrievalAuthFailure\x12U\n" +
-	"\x16usage_report_rejection\x18\x10 \x01(\v2\x1d.fora.v1.UsageReportRejectionH\x00R\x14usageReportRejection\x1a;\n" +
+	"\x16usage_report_rejection\x18\x10 \x01(\v2\x1d.fora.v1.UsageReportRejectionH\x00R\x14usageReportRejection\x12O\n" +
+	"\x14request_auth_failure\x18\x11 \x01(\v2\x1b.fora.v1.RequestAuthFailureH\x00R\x12requestAuthFailure\x1a;\n" +
 	"\rMetadataEntry\x12\x10\n" +
 	"\x03key\x18\x01 \x01(\tR\x03key\x12\x14\n" +
 	"\x05value\x18\x02 \x01(\tR\x05value:\x028\x01B\b\n" +
@@ -10708,6 +10830,9 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\xbaH\a\x82\x01\x04\x10\x01 \x00R\x06reason\"_\n" +
 	"\x14UsageReportRejection\x12G\n" +
 	"\x06reason\x18\x01 \x01(\x0e2#.fora.v1.UsageReportRejectionReasonB\n" +
+	"\xbaH\a\x82\x01\x04\x10\x01 \x00R\x06reason\"[\n" +
+	"\x12RequestAuthFailure\x12E\n" +
+	"\x06reason\x18\x01 \x01(\x0e2!.fora.v1.RequestAuthFailureReasonB\n" +
 	"\xbaH\a\x82\x01\x04\x10\x01 \x00R\x06reason*\xb6\x01\n" +
 	"\x0fDiscoveryMethod\x12 \n" +
 	"\x1cDISCOVERY_METHOD_UNSPECIFIED\x10\x00\x12\x1d\n" +
@@ -10924,7 +11049,12 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"'USAGE_REPORT_REJECTION_REASON_DUPLICATE\x10\x02\x120\n" +
 	",USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\x10\x03\x129\n" +
 	"5USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS\x10\x04\x12+\n" +
-	"'USAGE_REPORT_REJECTION_REASON_MALFORMED\x10\x052\xa0\x05\n" +
+	"'USAGE_REPORT_REJECTION_REASON_MALFORMED\x10\x05*\xde\x01\n" +
+	"\x18RequestAuthFailureReason\x12+\n" +
+	"'REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED\x10\x00\x121\n" +
+	"-REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING\x10\x01\x121\n" +
+	"-REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID\x10\x02\x12/\n" +
+	"+REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE\x10\x032\xa0\x05\n" +
 	"\x0fExchangeService\x12F\n" +
 	"\x11DiscoverResources\x12\x16.fora.v1.ResourceQuery\x1a\x19.fora.v1.ResourceResponse\x12O\n" +
 	"\x12ExecuteTransaction\x12\x1b.fora.v1.TransactionRequest\x1a\x1c.fora.v1.TransactionResponse\x12A\n" +
@@ -10954,8 +11084,8 @@ func file_fora_v1_fora_proto_rawDescGZIP() []byte {
 	return file_fora_v1_fora_proto_rawDescData
 }
 
-var file_fora_v1_fora_proto_enumTypes = make([]protoimpl.EnumInfo, 28)
-var file_fora_v1_fora_proto_msgTypes = make([]protoimpl.MessageInfo, 71)
+var file_fora_v1_fora_proto_enumTypes = make([]protoimpl.EnumInfo, 29)
+var file_fora_v1_fora_proto_msgTypes = make([]protoimpl.MessageInfo, 72)
 var file_fora_v1_fora_proto_goTypes = []any{
 	(DiscoveryMethod)(0),                   // 0: fora.v1.DiscoveryMethod
 	(OfferAbsenceReason)(0),                // 1: fora.v1.OfferAbsenceReason
@@ -10985,260 +11115,264 @@ var file_fora_v1_fora_proto_goTypes = []any{
 	(DomainVerificationFailureReason)(0),   // 25: fora.v1.DomainVerificationFailureReason
 	(RetrievalAuthFailureReason)(0),        // 26: fora.v1.RetrievalAuthFailureReason
 	(UsageReportRejectionReason)(0),        // 27: fora.v1.UsageReportRejectionReason
-	(*AcceptableRestriction)(nil),          // 28: fora.v1.AcceptableRestriction
-	(*ResourceQuery)(nil),                  // 29: fora.v1.ResourceQuery
-	(*ResourceResponse)(nil),               // 30: fora.v1.ResourceResponse
-	(*OfferGroup)(nil),                     // 31: fora.v1.OfferGroup
-	(*RateLimitInfo)(nil),                  // 32: fora.v1.RateLimitInfo
-	(*SubscriptionQuotaInfo)(nil),          // 33: fora.v1.SubscriptionQuotaInfo
-	(*Offer)(nil),                          // 34: fora.v1.Offer
-	(*ResourceIdentity)(nil),               // 35: fora.v1.ResourceIdentity
-	(*ResourceAttestation)(nil),            // 36: fora.v1.ResourceAttestation
-	(*License)(nil),                        // 37: fora.v1.License
-	(*Restriction)(nil),                    // 38: fora.v1.Restriction
-	(*Quota)(nil),                          // 39: fora.v1.Quota
-	(*Obligation)(nil),                     // 40: fora.v1.Obligation
-	(*LicenseTerm)(nil),                    // 41: fora.v1.LicenseTerm
-	(*Preview)(nil),                        // 42: fora.v1.Preview
-	(*Pricing)(nil),                        // 43: fora.v1.Pricing
-	(*Requester)(nil),                      // 44: fora.v1.Requester
-	(*Delegation)(nil),                     // 45: fora.v1.Delegation
-	(*AgentAcceptance)(nil),                // 46: fora.v1.AgentAcceptance
-	(*AgentRequestAcceptance)(nil),         // 47: fora.v1.AgentRequestAcceptance
-	(*AgentRequestAcceptanceItem)(nil),     // 48: fora.v1.AgentRequestAcceptanceItem
-	(*AgentRequestAcceptancePayload)(nil),  // 49: fora.v1.AgentRequestAcceptancePayload
-	(*AgentAcceptancePayload)(nil),         // 50: fora.v1.AgentAcceptancePayload
-	(*TransactionRequest)(nil),             // 51: fora.v1.TransactionRequest
-	(*TransactionItem)(nil),                // 52: fora.v1.TransactionItem
-	(*TransactionResponse)(nil),            // 53: fora.v1.TransactionResponse
-	(*TransactionResultItem)(nil),          // 54: fora.v1.TransactionResultItem
-	(*Cost)(nil),                           // 55: fora.v1.Cost
-	(*PushResourcesRequest)(nil),           // 56: fora.v1.PushResourcesRequest
-	(*ResourceEntry)(nil),                  // 57: fora.v1.ResourceEntry
-	(*PushResourcesResponse)(nil),          // 58: fora.v1.PushResourcesResponse
-	(*RemoveResourcesRequest)(nil),         // 59: fora.v1.RemoveResourcesRequest
-	(*RemoveResourcesResponse)(nil),        // 60: fora.v1.RemoveResourcesResponse
-	(*RefreshCatalogRequest)(nil),          // 61: fora.v1.RefreshCatalogRequest
-	(*RefreshCatalogResponse)(nil),         // 62: fora.v1.RefreshCatalogResponse
-	(*ReportingObligation)(nil),            // 63: fora.v1.ReportingObligation
-	(*UsageReport)(nil),                    // 64: fora.v1.UsageReport
-	(*AttributionDetail)(nil),              // 65: fora.v1.AttributionDetail
-	(*Usage)(nil),                          // 66: fora.v1.Usage
-	(*UsageAsset)(nil),                     // 67: fora.v1.UsageAsset
-	(*UsageReportResponse)(nil),            // 68: fora.v1.UsageReportResponse
-	(*DiscoveryRequest)(nil),               // 69: fora.v1.DiscoveryRequest
-	(*RequestConstraints)(nil),             // 70: fora.v1.RequestConstraints
-	(*JsonWebKey)(nil),                     // 71: fora.v1.JsonWebKey
-	(*AccountRegistration)(nil),            // 72: fora.v1.AccountRegistration
-	(*WellKnownManifest)(nil),              // 73: fora.v1.WellKnownManifest
-	(*WBAFile)(nil),                        // 74: fora.v1.WBAFile
-	(*KeyRevocationList)(nil),              // 75: fora.v1.KeyRevocationList
-	(*CatalogContributor)(nil),             // 76: fora.v1.CatalogContributor
-	(*AuthorizedExchange)(nil),             // 77: fora.v1.AuthorizedExchange
-	(*DiscoveryResponse)(nil),              // 78: fora.v1.DiscoveryResponse
-	(*DisputeRequest)(nil),                 // 79: fora.v1.DisputeRequest
-	(*DisputeResponse)(nil),                // 80: fora.v1.DisputeResponse
-	(*DomainVerificationRequest)(nil),      // 81: fora.v1.DomainVerificationRequest
-	(*DomainVerificationChallenge)(nil),    // 82: fora.v1.DomainVerificationChallenge
-	(*DomainVerificationConfirmation)(nil), // 83: fora.v1.DomainVerificationConfirmation
-	(*DomainVerificationResult)(nil),       // 84: fora.v1.DomainVerificationResult
-	(*RegisterRequest)(nil),                // 85: fora.v1.RegisterRequest
-	(*RegisterResponse)(nil),               // 86: fora.v1.RegisterResponse
-	(*GetAccountStatusRequest)(nil),        // 87: fora.v1.GetAccountStatusRequest
-	(*GetAccountStatusResponse)(nil),       // 88: fora.v1.GetAccountStatusResponse
-	(*ErrorDetail)(nil),                    // 89: fora.v1.ErrorDetail
-	(*TransactionDenial)(nil),              // 90: fora.v1.TransactionDenial
-	(*CatalogRejection)(nil),               // 91: fora.v1.CatalogRejection
-	(*RegistrationFailure)(nil),            // 92: fora.v1.RegistrationFailure
-	(*RegistrationFieldError)(nil),         // 93: fora.v1.RegistrationFieldError
-	(*DisputeFailure)(nil),                 // 94: fora.v1.DisputeFailure
-	(*DomainVerificationFailure)(nil),      // 95: fora.v1.DomainVerificationFailure
-	(*RetrievalAuthFailure)(nil),           // 96: fora.v1.RetrievalAuthFailure
-	(*UsageReportRejection)(nil),           // 97: fora.v1.UsageReportRejection
-	nil,                                    // 98: fora.v1.ErrorDetail.MetadataEntry
-	(*durationpb.Duration)(nil),            // 99: google.protobuf.Duration
-	(*structpb.Struct)(nil),                // 100: google.protobuf.Struct
-	(*timestamppb.Timestamp)(nil),          // 101: google.protobuf.Timestamp
+	(RequestAuthFailureReason)(0),          // 28: fora.v1.RequestAuthFailureReason
+	(*AcceptableRestriction)(nil),          // 29: fora.v1.AcceptableRestriction
+	(*ResourceQuery)(nil),                  // 30: fora.v1.ResourceQuery
+	(*ResourceResponse)(nil),               // 31: fora.v1.ResourceResponse
+	(*OfferGroup)(nil),                     // 32: fora.v1.OfferGroup
+	(*RateLimitInfo)(nil),                  // 33: fora.v1.RateLimitInfo
+	(*SubscriptionQuotaInfo)(nil),          // 34: fora.v1.SubscriptionQuotaInfo
+	(*Offer)(nil),                          // 35: fora.v1.Offer
+	(*ResourceIdentity)(nil),               // 36: fora.v1.ResourceIdentity
+	(*ResourceAttestation)(nil),            // 37: fora.v1.ResourceAttestation
+	(*License)(nil),                        // 38: fora.v1.License
+	(*Restriction)(nil),                    // 39: fora.v1.Restriction
+	(*Quota)(nil),                          // 40: fora.v1.Quota
+	(*Obligation)(nil),                     // 41: fora.v1.Obligation
+	(*LicenseTerm)(nil),                    // 42: fora.v1.LicenseTerm
+	(*Preview)(nil),                        // 43: fora.v1.Preview
+	(*Pricing)(nil),                        // 44: fora.v1.Pricing
+	(*Requester)(nil),                      // 45: fora.v1.Requester
+	(*Delegation)(nil),                     // 46: fora.v1.Delegation
+	(*AgentAcceptance)(nil),                // 47: fora.v1.AgentAcceptance
+	(*AgentRequestAcceptance)(nil),         // 48: fora.v1.AgentRequestAcceptance
+	(*AgentRequestAcceptanceItem)(nil),     // 49: fora.v1.AgentRequestAcceptanceItem
+	(*AgentRequestAcceptancePayload)(nil),  // 50: fora.v1.AgentRequestAcceptancePayload
+	(*AgentAcceptancePayload)(nil),         // 51: fora.v1.AgentAcceptancePayload
+	(*TransactionRequest)(nil),             // 52: fora.v1.TransactionRequest
+	(*TransactionItem)(nil),                // 53: fora.v1.TransactionItem
+	(*TransactionResponse)(nil),            // 54: fora.v1.TransactionResponse
+	(*TransactionResultItem)(nil),          // 55: fora.v1.TransactionResultItem
+	(*Cost)(nil),                           // 56: fora.v1.Cost
+	(*PushResourcesRequest)(nil),           // 57: fora.v1.PushResourcesRequest
+	(*ResourceEntry)(nil),                  // 58: fora.v1.ResourceEntry
+	(*PushResourcesResponse)(nil),          // 59: fora.v1.PushResourcesResponse
+	(*RemoveResourcesRequest)(nil),         // 60: fora.v1.RemoveResourcesRequest
+	(*RemoveResourcesResponse)(nil),        // 61: fora.v1.RemoveResourcesResponse
+	(*RefreshCatalogRequest)(nil),          // 62: fora.v1.RefreshCatalogRequest
+	(*RefreshCatalogResponse)(nil),         // 63: fora.v1.RefreshCatalogResponse
+	(*ReportingObligation)(nil),            // 64: fora.v1.ReportingObligation
+	(*UsageReport)(nil),                    // 65: fora.v1.UsageReport
+	(*AttributionDetail)(nil),              // 66: fora.v1.AttributionDetail
+	(*Usage)(nil),                          // 67: fora.v1.Usage
+	(*UsageAsset)(nil),                     // 68: fora.v1.UsageAsset
+	(*UsageReportResponse)(nil),            // 69: fora.v1.UsageReportResponse
+	(*DiscoveryRequest)(nil),               // 70: fora.v1.DiscoveryRequest
+	(*RequestConstraints)(nil),             // 71: fora.v1.RequestConstraints
+	(*JsonWebKey)(nil),                     // 72: fora.v1.JsonWebKey
+	(*AccountRegistration)(nil),            // 73: fora.v1.AccountRegistration
+	(*WellKnownManifest)(nil),              // 74: fora.v1.WellKnownManifest
+	(*WBAFile)(nil),                        // 75: fora.v1.WBAFile
+	(*KeyRevocationList)(nil),              // 76: fora.v1.KeyRevocationList
+	(*CatalogContributor)(nil),             // 77: fora.v1.CatalogContributor
+	(*AuthorizedExchange)(nil),             // 78: fora.v1.AuthorizedExchange
+	(*DiscoveryResponse)(nil),              // 79: fora.v1.DiscoveryResponse
+	(*DisputeRequest)(nil),                 // 80: fora.v1.DisputeRequest
+	(*DisputeResponse)(nil),                // 81: fora.v1.DisputeResponse
+	(*DomainVerificationRequest)(nil),      // 82: fora.v1.DomainVerificationRequest
+	(*DomainVerificationChallenge)(nil),    // 83: fora.v1.DomainVerificationChallenge
+	(*DomainVerificationConfirmation)(nil), // 84: fora.v1.DomainVerificationConfirmation
+	(*DomainVerificationResult)(nil),       // 85: fora.v1.DomainVerificationResult
+	(*RegisterRequest)(nil),                // 86: fora.v1.RegisterRequest
+	(*RegisterResponse)(nil),               // 87: fora.v1.RegisterResponse
+	(*GetAccountStatusRequest)(nil),        // 88: fora.v1.GetAccountStatusRequest
+	(*GetAccountStatusResponse)(nil),       // 89: fora.v1.GetAccountStatusResponse
+	(*ErrorDetail)(nil),                    // 90: fora.v1.ErrorDetail
+	(*TransactionDenial)(nil),              // 91: fora.v1.TransactionDenial
+	(*CatalogRejection)(nil),               // 92: fora.v1.CatalogRejection
+	(*RegistrationFailure)(nil),            // 93: fora.v1.RegistrationFailure
+	(*RegistrationFieldError)(nil),         // 94: fora.v1.RegistrationFieldError
+	(*DisputeFailure)(nil),                 // 95: fora.v1.DisputeFailure
+	(*DomainVerificationFailure)(nil),      // 96: fora.v1.DomainVerificationFailure
+	(*RetrievalAuthFailure)(nil),           // 97: fora.v1.RetrievalAuthFailure
+	(*UsageReportRejection)(nil),           // 98: fora.v1.UsageReportRejection
+	(*RequestAuthFailure)(nil),             // 99: fora.v1.RequestAuthFailure
+	nil,                                    // 100: fora.v1.ErrorDetail.MetadataEntry
+	(*durationpb.Duration)(nil),            // 101: google.protobuf.Duration
+	(*structpb.Struct)(nil),                // 102: google.protobuf.Struct
+	(*timestamppb.Timestamp)(nil),          // 103: google.protobuf.Timestamp
 }
 var file_fora_v1_fora_proto_depIdxs = []int32{
 	3,   // 0: fora.v1.AcceptableRestriction.axis:type_name -> fora.v1.RestrictionKind
-	44,  // 1: fora.v1.ResourceQuery.requester:type_name -> fora.v1.Requester
-	28,  // 2: fora.v1.ResourceQuery.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
-	99,  // 3: fora.v1.ResourceQuery.deadline:type_name -> google.protobuf.Duration
-	100, // 4: fora.v1.ResourceQuery.ext:type_name -> google.protobuf.Struct
-	34,  // 5: fora.v1.ResourceResponse.offers:type_name -> fora.v1.Offer
-	31,  // 6: fora.v1.ResourceResponse.offer_groups:type_name -> fora.v1.OfferGroup
-	32,  // 7: fora.v1.ResourceResponse.rate_limit:type_name -> fora.v1.RateLimitInfo
-	100, // 8: fora.v1.ResourceResponse.ext:type_name -> google.protobuf.Struct
-	34,  // 9: fora.v1.OfferGroup.offers:type_name -> fora.v1.Offer
+	45,  // 1: fora.v1.ResourceQuery.requester:type_name -> fora.v1.Requester
+	29,  // 2: fora.v1.ResourceQuery.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
+	101, // 3: fora.v1.ResourceQuery.deadline:type_name -> google.protobuf.Duration
+	102, // 4: fora.v1.ResourceQuery.ext:type_name -> google.protobuf.Struct
+	35,  // 5: fora.v1.ResourceResponse.offers:type_name -> fora.v1.Offer
+	32,  // 6: fora.v1.ResourceResponse.offer_groups:type_name -> fora.v1.OfferGroup
+	33,  // 7: fora.v1.ResourceResponse.rate_limit:type_name -> fora.v1.RateLimitInfo
+	102, // 8: fora.v1.ResourceResponse.ext:type_name -> google.protobuf.Struct
+	35,  // 9: fora.v1.OfferGroup.offers:type_name -> fora.v1.Offer
 	0,   // 10: fora.v1.OfferGroup.discovery_method:type_name -> fora.v1.DiscoveryMethod
 	1,   // 11: fora.v1.OfferGroup.absence_reason:type_name -> fora.v1.OfferAbsenceReason
 	3,   // 12: fora.v1.OfferGroup.restriction_filters:type_name -> fora.v1.RestrictionKind
-	101, // 13: fora.v1.RateLimitInfo.reset_at:type_name -> google.protobuf.Timestamp
-	99,  // 14: fora.v1.RateLimitInfo.window:type_name -> google.protobuf.Duration
-	101, // 15: fora.v1.SubscriptionQuotaInfo.resets_at:type_name -> google.protobuf.Timestamp
-	43,  // 16: fora.v1.Offer.pricing:type_name -> fora.v1.Pricing
+	103, // 13: fora.v1.RateLimitInfo.reset_at:type_name -> google.protobuf.Timestamp
+	101, // 14: fora.v1.RateLimitInfo.window:type_name -> google.protobuf.Duration
+	103, // 15: fora.v1.SubscriptionQuotaInfo.resets_at:type_name -> google.protobuf.Timestamp
+	44,  // 16: fora.v1.Offer.pricing:type_name -> fora.v1.Pricing
 	9,   // 17: fora.v1.Offer.delivery_method:type_name -> fora.v1.DeliveryMethod
-	63,  // 18: fora.v1.Offer.reporting:type_name -> fora.v1.ReportingObligation
-	101, // 19: fora.v1.Offer.expires_at:type_name -> google.protobuf.Timestamp
-	35,  // 20: fora.v1.Offer.identity:type_name -> fora.v1.ResourceIdentity
-	36,  // 21: fora.v1.Offer.attestations:type_name -> fora.v1.ResourceAttestation
-	101, // 22: fora.v1.Offer.data_as_of:type_name -> google.protobuf.Timestamp
-	33,  // 23: fora.v1.Offer.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
-	42,  // 24: fora.v1.Offer.previews:type_name -> fora.v1.Preview
-	41,  // 25: fora.v1.Offer.terms:type_name -> fora.v1.LicenseTerm
-	100, // 26: fora.v1.Offer.ext:type_name -> google.protobuf.Struct
+	64,  // 18: fora.v1.Offer.reporting:type_name -> fora.v1.ReportingObligation
+	103, // 19: fora.v1.Offer.expires_at:type_name -> google.protobuf.Timestamp
+	36,  // 20: fora.v1.Offer.identity:type_name -> fora.v1.ResourceIdentity
+	37,  // 21: fora.v1.Offer.attestations:type_name -> fora.v1.ResourceAttestation
+	103, // 22: fora.v1.Offer.data_as_of:type_name -> google.protobuf.Timestamp
+	34,  // 23: fora.v1.Offer.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
+	43,  // 24: fora.v1.Offer.previews:type_name -> fora.v1.Preview
+	42,  // 25: fora.v1.Offer.terms:type_name -> fora.v1.LicenseTerm
+	102, // 26: fora.v1.Offer.ext:type_name -> google.protobuf.Struct
 	12,  // 27: fora.v1.ResourceIdentity.resource_mutability:type_name -> fora.v1.ResourceMutability
 	11,  // 28: fora.v1.ResourceIdentity.c2pa_status:type_name -> fora.v1.C2PAStatus
-	100, // 29: fora.v1.ResourceIdentity.ext:type_name -> google.protobuf.Struct
-	101, // 30: fora.v1.ResourceAttestation.attested_at:type_name -> google.protobuf.Timestamp
-	100, // 31: fora.v1.ResourceAttestation.claims:type_name -> google.protobuf.Struct
+	102, // 29: fora.v1.ResourceIdentity.ext:type_name -> google.protobuf.Struct
+	103, // 30: fora.v1.ResourceAttestation.attested_at:type_name -> google.protobuf.Timestamp
+	102, // 31: fora.v1.ResourceAttestation.claims:type_name -> google.protobuf.Struct
 	3,   // 32: fora.v1.Restriction.kind:type_name -> fora.v1.RestrictionKind
 	4,   // 33: fora.v1.Quota.window:type_name -> fora.v1.QuotaWindow
 	5,   // 34: fora.v1.Obligation.kind:type_name -> fora.v1.ObligationKind
 	6,   // 35: fora.v1.Obligation.trigger:type_name -> fora.v1.ObligationTrigger
-	37,  // 36: fora.v1.Obligation.scope_license:type_name -> fora.v1.License
-	37,  // 37: fora.v1.LicenseTerm.license:type_name -> fora.v1.License
+	38,  // 36: fora.v1.Obligation.scope_license:type_name -> fora.v1.License
+	38,  // 37: fora.v1.LicenseTerm.license:type_name -> fora.v1.License
 	2,   // 38: fora.v1.LicenseTerm.semantics:type_name -> fora.v1.TermSemantics
-	38,  // 39: fora.v1.LicenseTerm.restrictions:type_name -> fora.v1.Restriction
-	39,  // 40: fora.v1.LicenseTerm.quotas:type_name -> fora.v1.Quota
-	40,  // 41: fora.v1.LicenseTerm.obligations:type_name -> fora.v1.Obligation
-	43,  // 42: fora.v1.LicenseTerm.pricing:type_name -> fora.v1.Pricing
+	39,  // 39: fora.v1.LicenseTerm.restrictions:type_name -> fora.v1.Restriction
+	40,  // 40: fora.v1.LicenseTerm.quotas:type_name -> fora.v1.Quota
+	41,  // 41: fora.v1.LicenseTerm.obligations:type_name -> fora.v1.Obligation
+	44,  // 42: fora.v1.LicenseTerm.pricing:type_name -> fora.v1.Pricing
 	7,   // 43: fora.v1.Pricing.model:type_name -> fora.v1.PricingModel
 	8,   // 44: fora.v1.Pricing.metering:type_name -> fora.v1.PricingMetering
 	10,  // 45: fora.v1.Requester.type:type_name -> fora.v1.RequesterType
-	45,  // 46: fora.v1.Requester.delegation:type_name -> fora.v1.Delegation
-	100, // 47: fora.v1.Requester.ext:type_name -> google.protobuf.Struct
-	101, // 48: fora.v1.Delegation.expires_at:type_name -> google.protobuf.Timestamp
-	99,  // 49: fora.v1.Delegation.quota_period:type_name -> google.protobuf.Duration
-	100, // 50: fora.v1.Delegation.ext:type_name -> google.protobuf.Struct
-	49,  // 51: fora.v1.AgentRequestAcceptance.payload:type_name -> fora.v1.AgentRequestAcceptancePayload
-	48,  // 52: fora.v1.AgentRequestAcceptancePayload.items:type_name -> fora.v1.AgentRequestAcceptanceItem
-	44,  // 53: fora.v1.TransactionRequest.requester:type_name -> fora.v1.Requester
-	52,  // 54: fora.v1.TransactionRequest.items:type_name -> fora.v1.TransactionItem
-	47,  // 55: fora.v1.TransactionRequest.agent_request_acceptance:type_name -> fora.v1.AgentRequestAcceptance
-	100, // 56: fora.v1.TransactionRequest.ext:type_name -> google.protobuf.Struct
-	34,  // 57: fora.v1.TransactionItem.offer:type_name -> fora.v1.Offer
-	46,  // 58: fora.v1.TransactionItem.agent_acceptance:type_name -> fora.v1.AgentAcceptance
-	54,  // 59: fora.v1.TransactionResponse.items:type_name -> fora.v1.TransactionResultItem
-	55,  // 60: fora.v1.TransactionResponse.total_cost:type_name -> fora.v1.Cost
-	33,  // 61: fora.v1.TransactionResponse.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
-	100, // 62: fora.v1.TransactionResponse.ext:type_name -> google.protobuf.Struct
-	55,  // 63: fora.v1.TransactionResultItem.cost:type_name -> fora.v1.Cost
-	55,  // 64: fora.v1.TransactionResultItem.subscription_unit_value:type_name -> fora.v1.Cost
+	46,  // 46: fora.v1.Requester.delegation:type_name -> fora.v1.Delegation
+	102, // 47: fora.v1.Requester.ext:type_name -> google.protobuf.Struct
+	103, // 48: fora.v1.Delegation.expires_at:type_name -> google.protobuf.Timestamp
+	101, // 49: fora.v1.Delegation.quota_period:type_name -> google.protobuf.Duration
+	102, // 50: fora.v1.Delegation.ext:type_name -> google.protobuf.Struct
+	50,  // 51: fora.v1.AgentRequestAcceptance.payload:type_name -> fora.v1.AgentRequestAcceptancePayload
+	49,  // 52: fora.v1.AgentRequestAcceptancePayload.items:type_name -> fora.v1.AgentRequestAcceptanceItem
+	45,  // 53: fora.v1.TransactionRequest.requester:type_name -> fora.v1.Requester
+	53,  // 54: fora.v1.TransactionRequest.items:type_name -> fora.v1.TransactionItem
+	48,  // 55: fora.v1.TransactionRequest.agent_request_acceptance:type_name -> fora.v1.AgentRequestAcceptance
+	102, // 56: fora.v1.TransactionRequest.ext:type_name -> google.protobuf.Struct
+	35,  // 57: fora.v1.TransactionItem.offer:type_name -> fora.v1.Offer
+	47,  // 58: fora.v1.TransactionItem.agent_acceptance:type_name -> fora.v1.AgentAcceptance
+	55,  // 59: fora.v1.TransactionResponse.items:type_name -> fora.v1.TransactionResultItem
+	56,  // 60: fora.v1.TransactionResponse.total_cost:type_name -> fora.v1.Cost
+	34,  // 61: fora.v1.TransactionResponse.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
+	102, // 62: fora.v1.TransactionResponse.ext:type_name -> google.protobuf.Struct
+	56,  // 63: fora.v1.TransactionResultItem.cost:type_name -> fora.v1.Cost
+	56,  // 64: fora.v1.TransactionResultItem.subscription_unit_value:type_name -> fora.v1.Cost
 	13,  // 65: fora.v1.TransactionResultItem.denial_reason:type_name -> fora.v1.DenialReason
 	3,   // 66: fora.v1.TransactionResultItem.restriction_mismatches:type_name -> fora.v1.RestrictionKind
-	101, // 67: fora.v1.TransactionResultItem.expires_at:type_name -> google.protobuf.Timestamp
+	103, // 67: fora.v1.TransactionResultItem.expires_at:type_name -> google.protobuf.Timestamp
 	9,   // 68: fora.v1.TransactionResultItem.delivery_method:type_name -> fora.v1.DeliveryMethod
-	63,  // 69: fora.v1.TransactionResultItem.reporting_obligation:type_name -> fora.v1.ReportingObligation
-	57,  // 70: fora.v1.PushResourcesRequest.entries:type_name -> fora.v1.ResourceEntry
-	100, // 71: fora.v1.PushResourcesRequest.ext:type_name -> google.protobuf.Struct
+	64,  // 69: fora.v1.TransactionResultItem.reporting_obligation:type_name -> fora.v1.ReportingObligation
+	58,  // 70: fora.v1.PushResourcesRequest.entries:type_name -> fora.v1.ResourceEntry
+	102, // 71: fora.v1.PushResourcesRequest.ext:type_name -> google.protobuf.Struct
 	14,  // 72: fora.v1.ResourceEntry.source:type_name -> fora.v1.IngestionSource
-	101, // 73: fora.v1.ResourceEntry.provenance_timestamp:type_name -> google.protobuf.Timestamp
-	36,  // 74: fora.v1.ResourceEntry.attestations:type_name -> fora.v1.ResourceAttestation
-	41,  // 75: fora.v1.ResourceEntry.terms:type_name -> fora.v1.LicenseTerm
+	103, // 73: fora.v1.ResourceEntry.provenance_timestamp:type_name -> google.protobuf.Timestamp
+	37,  // 74: fora.v1.ResourceEntry.attestations:type_name -> fora.v1.ResourceAttestation
+	42,  // 75: fora.v1.ResourceEntry.terms:type_name -> fora.v1.LicenseTerm
 	12,  // 76: fora.v1.ResourceEntry.resource_mutability:type_name -> fora.v1.ResourceMutability
-	100, // 77: fora.v1.ResourceEntry.ext:type_name -> google.protobuf.Struct
-	100, // 78: fora.v1.PushResourcesResponse.ext:type_name -> google.protobuf.Struct
-	99,  // 79: fora.v1.ReportingObligation.window:type_name -> google.protobuf.Duration
-	100, // 80: fora.v1.ReportingObligation.ext:type_name -> google.protobuf.Struct
-	66,  // 81: fora.v1.UsageReport.usage:type_name -> fora.v1.Usage
-	101, // 82: fora.v1.UsageReport.timestamp:type_name -> google.protobuf.Timestamp
-	67,  // 83: fora.v1.UsageReport.assets:type_name -> fora.v1.UsageAsset
-	100, // 84: fora.v1.UsageReport.ext:type_name -> google.protobuf.Struct
+	102, // 77: fora.v1.ResourceEntry.ext:type_name -> google.protobuf.Struct
+	102, // 78: fora.v1.PushResourcesResponse.ext:type_name -> google.protobuf.Struct
+	101, // 79: fora.v1.ReportingObligation.window:type_name -> google.protobuf.Duration
+	102, // 80: fora.v1.ReportingObligation.ext:type_name -> google.protobuf.Struct
+	67,  // 81: fora.v1.UsageReport.usage:type_name -> fora.v1.Usage
+	103, // 82: fora.v1.UsageReport.timestamp:type_name -> google.protobuf.Timestamp
+	68,  // 83: fora.v1.UsageReport.assets:type_name -> fora.v1.UsageAsset
+	102, // 84: fora.v1.UsageReport.ext:type_name -> google.protobuf.Struct
 	15,  // 85: fora.v1.AttributionDetail.format:type_name -> fora.v1.CitationFormat
-	65,  // 86: fora.v1.Usage.attribution:type_name -> fora.v1.AttributionDetail
-	100, // 87: fora.v1.UsageReportResponse.ext:type_name -> google.protobuf.Struct
-	44,  // 88: fora.v1.DiscoveryRequest.requester:type_name -> fora.v1.Requester
-	28,  // 89: fora.v1.DiscoveryRequest.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
-	70,  // 90: fora.v1.DiscoveryRequest.constraints:type_name -> fora.v1.RequestConstraints
-	100, // 91: fora.v1.DiscoveryRequest.search_filters:type_name -> google.protobuf.Struct
-	100, // 92: fora.v1.DiscoveryRequest.ext:type_name -> google.protobuf.Struct
-	55,  // 93: fora.v1.RequestConstraints.max_price:type_name -> fora.v1.Cost
+	66,  // 86: fora.v1.Usage.attribution:type_name -> fora.v1.AttributionDetail
+	102, // 87: fora.v1.UsageReportResponse.ext:type_name -> google.protobuf.Struct
+	45,  // 88: fora.v1.DiscoveryRequest.requester:type_name -> fora.v1.Requester
+	29,  // 89: fora.v1.DiscoveryRequest.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
+	71,  // 90: fora.v1.DiscoveryRequest.constraints:type_name -> fora.v1.RequestConstraints
+	102, // 91: fora.v1.DiscoveryRequest.search_filters:type_name -> google.protobuf.Struct
+	102, // 92: fora.v1.DiscoveryRequest.ext:type_name -> google.protobuf.Struct
+	56,  // 93: fora.v1.RequestConstraints.max_price:type_name -> fora.v1.Cost
 	9,   // 94: fora.v1.RequestConstraints.delivery_preference:type_name -> fora.v1.DeliveryMethod
-	55,  // 95: fora.v1.RequestConstraints.period_budget:type_name -> fora.v1.Cost
-	99,  // 96: fora.v1.RequestConstraints.budget_period:type_name -> google.protobuf.Duration
-	99,  // 97: fora.v1.RequestConstraints.max_data_age:type_name -> google.protobuf.Duration
-	100, // 98: fora.v1.AccountRegistration.data_schema:type_name -> google.protobuf.Struct
+	56,  // 95: fora.v1.RequestConstraints.period_budget:type_name -> fora.v1.Cost
+	101, // 96: fora.v1.RequestConstraints.budget_period:type_name -> google.protobuf.Duration
+	101, // 97: fora.v1.RequestConstraints.max_data_age:type_name -> google.protobuf.Duration
+	102, // 98: fora.v1.AccountRegistration.data_schema:type_name -> google.protobuf.Struct
 	16,  // 99: fora.v1.WellKnownManifest.role:type_name -> fora.v1.Role
-	77,  // 100: fora.v1.WellKnownManifest.exchanges:type_name -> fora.v1.AuthorizedExchange
-	76,  // 101: fora.v1.WellKnownManifest.catalog_contributors:type_name -> fora.v1.CatalogContributor
+	78,  // 100: fora.v1.WellKnownManifest.exchanges:type_name -> fora.v1.AuthorizedExchange
+	77,  // 101: fora.v1.WellKnownManifest.catalog_contributors:type_name -> fora.v1.CatalogContributor
 	7,   // 102: fora.v1.WellKnownManifest.pricing_models_supported:type_name -> fora.v1.PricingModel
 	9,   // 103: fora.v1.WellKnownManifest.delivery_methods_supported:type_name -> fora.v1.DeliveryMethod
 	18,  // 104: fora.v1.WellKnownManifest.supported_auth_methods:type_name -> fora.v1.AuthMethod
-	72,  // 105: fora.v1.WellKnownManifest.account_registration:type_name -> fora.v1.AccountRegistration
-	100, // 106: fora.v1.WellKnownManifest.ext:type_name -> google.protobuf.Struct
-	71,  // 107: fora.v1.WBAFile.keys:type_name -> fora.v1.JsonWebKey
-	101, // 108: fora.v1.KeyRevocationList.as_of:type_name -> google.protobuf.Timestamp
+	73,  // 105: fora.v1.WellKnownManifest.account_registration:type_name -> fora.v1.AccountRegistration
+	102, // 106: fora.v1.WellKnownManifest.ext:type_name -> google.protobuf.Struct
+	72,  // 107: fora.v1.WBAFile.keys:type_name -> fora.v1.JsonWebKey
+	103, // 108: fora.v1.KeyRevocationList.as_of:type_name -> google.protobuf.Timestamp
 	17,  // 109: fora.v1.AuthorizedExchange.relationship:type_name -> fora.v1.ProviderRelationship
-	100, // 110: fora.v1.AuthorizedExchange.ext:type_name -> google.protobuf.Struct
-	31,  // 111: fora.v1.DiscoveryResponse.offer_groups:type_name -> fora.v1.OfferGroup
+	102, // 110: fora.v1.AuthorizedExchange.ext:type_name -> google.protobuf.Struct
+	32,  // 111: fora.v1.DiscoveryResponse.offer_groups:type_name -> fora.v1.OfferGroup
 	1,   // 112: fora.v1.DiscoveryResponse.absence_reason:type_name -> fora.v1.OfferAbsenceReason
-	100, // 113: fora.v1.DiscoveryResponse.ext:type_name -> google.protobuf.Struct
+	102, // 113: fora.v1.DiscoveryResponse.ext:type_name -> google.protobuf.Struct
 	19,  // 114: fora.v1.DisputeRequest.reason:type_name -> fora.v1.DisputeReason
-	100, // 115: fora.v1.DisputeRequest.ext:type_name -> google.protobuf.Struct
-	99,  // 116: fora.v1.DisputeResponse.estimated_resolution:type_name -> google.protobuf.Duration
+	102, // 115: fora.v1.DisputeRequest.ext:type_name -> google.protobuf.Struct
+	101, // 116: fora.v1.DisputeResponse.estimated_resolution:type_name -> google.protobuf.Duration
 	20,  // 117: fora.v1.DisputeResponse.status:type_name -> fora.v1.DisputeStatus
 	21,  // 118: fora.v1.DisputeResponse.resolution:type_name -> fora.v1.ResolutionType
-	100, // 119: fora.v1.DisputeResponse.ext:type_name -> google.protobuf.Struct
-	100, // 120: fora.v1.DomainVerificationRequest.ext:type_name -> google.protobuf.Struct
-	101, // 121: fora.v1.DomainVerificationChallenge.expires_at:type_name -> google.protobuf.Timestamp
-	100, // 122: fora.v1.DomainVerificationChallenge.ext:type_name -> google.protobuf.Struct
-	100, // 123: fora.v1.DomainVerificationConfirmation.ext:type_name -> google.protobuf.Struct
-	101, // 124: fora.v1.DomainVerificationResult.valid_until:type_name -> google.protobuf.Timestamp
-	100, // 125: fora.v1.DomainVerificationResult.ext:type_name -> google.protobuf.Struct
-	100, // 126: fora.v1.RegisterRequest.registration_data:type_name -> google.protobuf.Struct
-	100, // 127: fora.v1.RegisterRequest.ext:type_name -> google.protobuf.Struct
-	100, // 128: fora.v1.RegisterResponse.ext:type_name -> google.protobuf.Struct
-	100, // 129: fora.v1.GetAccountStatusRequest.ext:type_name -> google.protobuf.Struct
-	55,  // 130: fora.v1.GetAccountStatusResponse.balances:type_name -> fora.v1.Cost
-	100, // 131: fora.v1.GetAccountStatusResponse.ext:type_name -> google.protobuf.Struct
-	98,  // 132: fora.v1.ErrorDetail.metadata:type_name -> fora.v1.ErrorDetail.MetadataEntry
-	90,  // 133: fora.v1.ErrorDetail.transaction_denial:type_name -> fora.v1.TransactionDenial
-	91,  // 134: fora.v1.ErrorDetail.catalog_rejection:type_name -> fora.v1.CatalogRejection
-	92,  // 135: fora.v1.ErrorDetail.registration_failure:type_name -> fora.v1.RegistrationFailure
-	94,  // 136: fora.v1.ErrorDetail.dispute_failure:type_name -> fora.v1.DisputeFailure
-	95,  // 137: fora.v1.ErrorDetail.domain_verification_failure:type_name -> fora.v1.DomainVerificationFailure
-	96,  // 138: fora.v1.ErrorDetail.retrieval_auth_failure:type_name -> fora.v1.RetrievalAuthFailure
-	97,  // 139: fora.v1.ErrorDetail.usage_report_rejection:type_name -> fora.v1.UsageReportRejection
-	13,  // 140: fora.v1.TransactionDenial.reason:type_name -> fora.v1.DenialReason
-	3,   // 141: fora.v1.TransactionDenial.restriction_mismatches:type_name -> fora.v1.RestrictionKind
-	22,  // 142: fora.v1.CatalogRejection.reason:type_name -> fora.v1.CatalogRejectionReason
-	23,  // 143: fora.v1.RegistrationFailure.reason:type_name -> fora.v1.RegistrationFailureReason
-	93,  // 144: fora.v1.RegistrationFailure.field_errors:type_name -> fora.v1.RegistrationFieldError
-	24,  // 145: fora.v1.DisputeFailure.reason:type_name -> fora.v1.DisputeFailureReason
-	25,  // 146: fora.v1.DomainVerificationFailure.reason:type_name -> fora.v1.DomainVerificationFailureReason
-	26,  // 147: fora.v1.RetrievalAuthFailure.reason:type_name -> fora.v1.RetrievalAuthFailureReason
-	27,  // 148: fora.v1.UsageReportRejection.reason:type_name -> fora.v1.UsageReportRejectionReason
-	29,  // 149: fora.v1.ExchangeService.DiscoverResources:input_type -> fora.v1.ResourceQuery
-	51,  // 150: fora.v1.ExchangeService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
-	64,  // 151: fora.v1.ExchangeService.ReportUsage:input_type -> fora.v1.UsageReport
-	79,  // 152: fora.v1.ExchangeService.DisputeTransaction:input_type -> fora.v1.DisputeRequest
-	81,  // 153: fora.v1.ExchangeService.RequestDomainVerification:input_type -> fora.v1.DomainVerificationRequest
-	83,  // 154: fora.v1.ExchangeService.ConfirmDomainVerification:input_type -> fora.v1.DomainVerificationConfirmation
-	85,  // 155: fora.v1.ExchangeService.Register:input_type -> fora.v1.RegisterRequest
-	87,  // 156: fora.v1.ExchangeService.GetAccountStatus:input_type -> fora.v1.GetAccountStatusRequest
-	56,  // 157: fora.v1.CatalogService.PushResources:input_type -> fora.v1.PushResourcesRequest
-	59,  // 158: fora.v1.CatalogService.RemoveResources:input_type -> fora.v1.RemoveResourcesRequest
-	61,  // 159: fora.v1.CatalogService.RefreshCatalog:input_type -> fora.v1.RefreshCatalogRequest
-	69,  // 160: fora.v1.BrokerService.Resolve:input_type -> fora.v1.DiscoveryRequest
-	30,  // 161: fora.v1.ExchangeService.DiscoverResources:output_type -> fora.v1.ResourceResponse
-	53,  // 162: fora.v1.ExchangeService.ExecuteTransaction:output_type -> fora.v1.TransactionResponse
-	68,  // 163: fora.v1.ExchangeService.ReportUsage:output_type -> fora.v1.UsageReportResponse
-	80,  // 164: fora.v1.ExchangeService.DisputeTransaction:output_type -> fora.v1.DisputeResponse
-	82,  // 165: fora.v1.ExchangeService.RequestDomainVerification:output_type -> fora.v1.DomainVerificationChallenge
-	84,  // 166: fora.v1.ExchangeService.ConfirmDomainVerification:output_type -> fora.v1.DomainVerificationResult
-	86,  // 167: fora.v1.ExchangeService.Register:output_type -> fora.v1.RegisterResponse
-	88,  // 168: fora.v1.ExchangeService.GetAccountStatus:output_type -> fora.v1.GetAccountStatusResponse
-	58,  // 169: fora.v1.CatalogService.PushResources:output_type -> fora.v1.PushResourcesResponse
-	60,  // 170: fora.v1.CatalogService.RemoveResources:output_type -> fora.v1.RemoveResourcesResponse
-	62,  // 171: fora.v1.CatalogService.RefreshCatalog:output_type -> fora.v1.RefreshCatalogResponse
-	78,  // 172: fora.v1.BrokerService.Resolve:output_type -> fora.v1.DiscoveryResponse
-	161, // [161:173] is the sub-list for method output_type
-	149, // [149:161] is the sub-list for method input_type
-	149, // [149:149] is the sub-list for extension type_name
-	149, // [149:149] is the sub-list for extension extendee
-	0,   // [0:149] is the sub-list for field type_name
+	102, // 119: fora.v1.DisputeResponse.ext:type_name -> google.protobuf.Struct
+	102, // 120: fora.v1.DomainVerificationRequest.ext:type_name -> google.protobuf.Struct
+	103, // 121: fora.v1.DomainVerificationChallenge.expires_at:type_name -> google.protobuf.Timestamp
+	102, // 122: fora.v1.DomainVerificationChallenge.ext:type_name -> google.protobuf.Struct
+	102, // 123: fora.v1.DomainVerificationConfirmation.ext:type_name -> google.protobuf.Struct
+	103, // 124: fora.v1.DomainVerificationResult.valid_until:type_name -> google.protobuf.Timestamp
+	102, // 125: fora.v1.DomainVerificationResult.ext:type_name -> google.protobuf.Struct
+	102, // 126: fora.v1.RegisterRequest.registration_data:type_name -> google.protobuf.Struct
+	102, // 127: fora.v1.RegisterRequest.ext:type_name -> google.protobuf.Struct
+	102, // 128: fora.v1.RegisterResponse.ext:type_name -> google.protobuf.Struct
+	102, // 129: fora.v1.GetAccountStatusRequest.ext:type_name -> google.protobuf.Struct
+	56,  // 130: fora.v1.GetAccountStatusResponse.balances:type_name -> fora.v1.Cost
+	102, // 131: fora.v1.GetAccountStatusResponse.ext:type_name -> google.protobuf.Struct
+	100, // 132: fora.v1.ErrorDetail.metadata:type_name -> fora.v1.ErrorDetail.MetadataEntry
+	91,  // 133: fora.v1.ErrorDetail.transaction_denial:type_name -> fora.v1.TransactionDenial
+	92,  // 134: fora.v1.ErrorDetail.catalog_rejection:type_name -> fora.v1.CatalogRejection
+	93,  // 135: fora.v1.ErrorDetail.registration_failure:type_name -> fora.v1.RegistrationFailure
+	95,  // 136: fora.v1.ErrorDetail.dispute_failure:type_name -> fora.v1.DisputeFailure
+	96,  // 137: fora.v1.ErrorDetail.domain_verification_failure:type_name -> fora.v1.DomainVerificationFailure
+	97,  // 138: fora.v1.ErrorDetail.retrieval_auth_failure:type_name -> fora.v1.RetrievalAuthFailure
+	98,  // 139: fora.v1.ErrorDetail.usage_report_rejection:type_name -> fora.v1.UsageReportRejection
+	99,  // 140: fora.v1.ErrorDetail.request_auth_failure:type_name -> fora.v1.RequestAuthFailure
+	13,  // 141: fora.v1.TransactionDenial.reason:type_name -> fora.v1.DenialReason
+	3,   // 142: fora.v1.TransactionDenial.restriction_mismatches:type_name -> fora.v1.RestrictionKind
+	22,  // 143: fora.v1.CatalogRejection.reason:type_name -> fora.v1.CatalogRejectionReason
+	23,  // 144: fora.v1.RegistrationFailure.reason:type_name -> fora.v1.RegistrationFailureReason
+	94,  // 145: fora.v1.RegistrationFailure.field_errors:type_name -> fora.v1.RegistrationFieldError
+	24,  // 146: fora.v1.DisputeFailure.reason:type_name -> fora.v1.DisputeFailureReason
+	25,  // 147: fora.v1.DomainVerificationFailure.reason:type_name -> fora.v1.DomainVerificationFailureReason
+	26,  // 148: fora.v1.RetrievalAuthFailure.reason:type_name -> fora.v1.RetrievalAuthFailureReason
+	27,  // 149: fora.v1.UsageReportRejection.reason:type_name -> fora.v1.UsageReportRejectionReason
+	28,  // 150: fora.v1.RequestAuthFailure.reason:type_name -> fora.v1.RequestAuthFailureReason
+	30,  // 151: fora.v1.ExchangeService.DiscoverResources:input_type -> fora.v1.ResourceQuery
+	52,  // 152: fora.v1.ExchangeService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
+	65,  // 153: fora.v1.ExchangeService.ReportUsage:input_type -> fora.v1.UsageReport
+	80,  // 154: fora.v1.ExchangeService.DisputeTransaction:input_type -> fora.v1.DisputeRequest
+	82,  // 155: fora.v1.ExchangeService.RequestDomainVerification:input_type -> fora.v1.DomainVerificationRequest
+	84,  // 156: fora.v1.ExchangeService.ConfirmDomainVerification:input_type -> fora.v1.DomainVerificationConfirmation
+	86,  // 157: fora.v1.ExchangeService.Register:input_type -> fora.v1.RegisterRequest
+	88,  // 158: fora.v1.ExchangeService.GetAccountStatus:input_type -> fora.v1.GetAccountStatusRequest
+	57,  // 159: fora.v1.CatalogService.PushResources:input_type -> fora.v1.PushResourcesRequest
+	60,  // 160: fora.v1.CatalogService.RemoveResources:input_type -> fora.v1.RemoveResourcesRequest
+	62,  // 161: fora.v1.CatalogService.RefreshCatalog:input_type -> fora.v1.RefreshCatalogRequest
+	70,  // 162: fora.v1.BrokerService.Resolve:input_type -> fora.v1.DiscoveryRequest
+	31,  // 163: fora.v1.ExchangeService.DiscoverResources:output_type -> fora.v1.ResourceResponse
+	54,  // 164: fora.v1.ExchangeService.ExecuteTransaction:output_type -> fora.v1.TransactionResponse
+	69,  // 165: fora.v1.ExchangeService.ReportUsage:output_type -> fora.v1.UsageReportResponse
+	81,  // 166: fora.v1.ExchangeService.DisputeTransaction:output_type -> fora.v1.DisputeResponse
+	83,  // 167: fora.v1.ExchangeService.RequestDomainVerification:output_type -> fora.v1.DomainVerificationChallenge
+	85,  // 168: fora.v1.ExchangeService.ConfirmDomainVerification:output_type -> fora.v1.DomainVerificationResult
+	87,  // 169: fora.v1.ExchangeService.Register:output_type -> fora.v1.RegisterResponse
+	89,  // 170: fora.v1.ExchangeService.GetAccountStatus:output_type -> fora.v1.GetAccountStatusResponse
+	59,  // 171: fora.v1.CatalogService.PushResources:output_type -> fora.v1.PushResourcesResponse
+	61,  // 172: fora.v1.CatalogService.RemoveResources:output_type -> fora.v1.RemoveResourcesResponse
+	63,  // 173: fora.v1.CatalogService.RefreshCatalog:output_type -> fora.v1.RefreshCatalogResponse
+	79,  // 174: fora.v1.BrokerService.Resolve:output_type -> fora.v1.DiscoveryResponse
+	163, // [163:175] is the sub-list for method output_type
+	151, // [151:163] is the sub-list for method input_type
+	151, // [151:151] is the sub-list for extension type_name
+	151, // [151:151] is the sub-list for extension extendee
+	0,   // [0:151] is the sub-list for field type_name
 }
 
 func init() { file_fora_v1_fora_proto_init() }
@@ -11291,6 +11425,7 @@ func file_fora_v1_fora_proto_init() {
 		(*ErrorDetail_DomainVerificationFailure)(nil),
 		(*ErrorDetail_RetrievalAuthFailure)(nil),
 		(*ErrorDetail_UsageReportRejection)(nil),
+		(*ErrorDetail_RequestAuthFailure)(nil),
 	}
 	file_fora_v1_fora_proto_msgTypes[62].OneofWrappers = []any{}
 	type x struct{}
@@ -11298,8 +11433,8 @@ func file_fora_v1_fora_proto_init() {
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_fora_v1_fora_proto_rawDesc), len(file_fora_v1_fora_proto_rawDesc)),
-			NumEnums:      28,
-			NumMessages:   71,
+			NumEnums:      29,
+			NumMessages:   72,
 			NumExtensions: 0,
 			NumServices:   3,
 		},
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 25310d9e..67177249 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -834,6 +834,18 @@ class ReportingPolicy(WireModel):
     )
 
 
+class RequestAuthFailureReason(Enum):
+    REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING = (
+        'REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING'
+    )
+    REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID = (
+        'REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID'
+    )
+    REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE = (
+        'REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE'
+    )
+
+
 class RequestConstraints(WireModel):
     budget_period: str | None = Field(
         None,
@@ -1369,6 +1381,12 @@ class RegistrationFailure(WireModel):
     )
 
 
+class RequestAuthFailure(WireModel):
+    reason: RequestAuthFailureReason = Field(
+        ..., description='The failure reason (defined-only, non-zero)'
+    )
+
+
 class Requester(WireModel):
     delegation: Delegation | None = Field(
         None,
@@ -1817,6 +1835,10 @@ class ErrorDetail(WireModel):
     registration_failure: RegistrationFailure | None = Field(
         None, description='`reason` oneof — agent/provider registration refused'
     )
+    request_auth_failure: RequestAuthFailure | None = Field(
+        None,
+        description='`reason` oneof — RFC 9421 request signature on an RPC refused',
+    )
     retrieval_auth_failure: RetrievalAuthFailure | None = Field(
         None,
         description='`reason` oneof — signed-URL / proof-of-possession check failed',
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index c7cd34d9..7b70cef0 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -74,7 +74,7 @@ export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.st
 
 export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named. Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named. Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
 
 export const GetAccountStatusRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Accounts are per-Exchange, so \"which Exchange am I asking\n about\" is not derivable from anything else in this message."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusRequest — Agent asks whether its account is active."));
 
@@ -144,6 +144,10 @@ export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().
 
 export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
 
+export const RequestAuthFailureSchema = wire(z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RequestAuthFailure — an RPC request's HTTP message signature was refused."));
+
+export const RequestAuthFailureReasonSchema = wire(z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]));
+
 export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
 
 export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 72700a0f..ae25e74a 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -25,6 +25,44 @@ Python-only for now; Go and TypeScript parity follows.**
   `signing_transport_for(key, directory)` returns a `SigningTransport` that signs as
   that key.
 
+**A request-signature refusal carries a typed reason (additive wire change).**
+An RPC request whose RFC 9421 HTTP message signature failed verification was
+refused as Connect `unauthenticated` with only a message, such as
+`helpers: missing Signature-Input header`. The contract tells clients to branch on
+a typed reason and never on the message, and `ErrorDetail` had no reason for this
+failure. It now has one: a new `reason` oneof member,
+`RequestAuthFailure request_auth_failure = 17`, whose `RequestAuthFailureReason` is
+one of three values:
+
+- `SIGNATURE_MISSING`: no signature, or none that parses. Sign the request.
+- `SIGNATURE_INVALID`: the signature does not verify, for example a bad
+  signature, a key that cannot be resolved, a content-digest mismatch or a
+  required covered component that is missing.
+- `SIGNATURE_STALE`: the signature is outside its `created`/`expires` window, or
+  was already used. Sign the request again, now.
+
+The values are deliberately coarse: each names what the caller does next, never
+which validation step failed, so a refusal tells a forger nothing about how far
+its request got.
+
+The Go server binding attaches the detail. `connectserver.WriteReject`, which the
+verify seam of `NewExchangeServiceHandler`, `NewBrokerServiceHandler` and
+`NewCatalogServiceHandler` answers with, now adds one `fora.v1.ErrorDetail` to the
+`details` of every `unauthenticated` refusal. The reason comes from the
+verification error: a missing or malformed `Signature-Input` or `Signature` is
+`SIGNATURE_MISSING`; an expired signature, one created in the future, or a replay
+(`connectserver.ErrReplayed`) is `SIGNATURE_STALE`; every other error, including
+one the mapping does not know, is `SIGNATURE_INVALID`. The detail's `domain` is
+empty, because the writer is not given the request and cannot name the service.
+The envelope's `code` and `message` are unchanged, and a `resource_exhausted`
+refusal still carries no detail.
+
+The detail builders gain `helpers.RequestAuthFailureDetail` (Go),
+`request_auth_failure_detail` (Python) and `requestAuthFailureDetail`
+(TypeScript), and the readers (`helpers.Reason`, `reason`) return the new enum.
+The Python and TypeScript SDKs have no RPC refusal writer, so they read this
+detail but do not emit it.
+
 ## v1.0.8
 
 **Request signatures carry an RFC 9421 `nonce` (SDK fix; no wire change for
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index a0376fdb..9dc22d67 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -4275,8 +4275,8 @@ message GetAccountStatusResponse {
 // of failure: *Denial is an access decision (a transaction was denied),
 // *Rejection is a submission refused (catalog push, usage report), and *Failure
 // is an operation that could not complete (registration, dispute, domain
-// verification, retrieval auth). The distinction is deliberate; do not flatten
-// these to a single suffix.
+// verification, retrieval auth, request auth). The distinction is deliberate;
+// do not flatten these to a single suffix.
 //
 // The per-domain reason enums here are the single source of truth that replaces
 // the hand-rolled Go "Kind" enums (Exchange, Broker), the catalog free-text
@@ -4322,6 +4322,8 @@ message ErrorDetail {
     RetrievalAuthFailure retrieval_auth_failure = 15;
     // `reason` oneof — ReportUsage filing rejected
     UsageReportRejection usage_report_rejection = 16;
+    // `reason` oneof — RFC 9421 request signature on an RPC refused
+    RequestAuthFailure request_auth_failure = 17;
   }
 }
 
@@ -4566,3 +4568,24 @@ message UsageReportRejection {
     (buf.validate.field).enum = {defined_only: true, not_in: [0]}
   ];
 }
+
+// RequestAuthFailureReason — why the RFC 9421 HTTP message signature on an RPC
+// request failed verification, refused with the Connect code UNAUTHENTICATED.
+// Deliberately coarse: each value names what the caller does next, never which
+// validation step failed, so a refusal tells a forger nothing about how far its
+// request got. Distinct from RetrievalAuthFailureReason, which covers the
+// signed-URL / proof-of-possession check at the delivery edge, not an RPC.
+enum RequestAuthFailureReason {
+  REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
+  REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING = 1;  // no signature, or none that parses; remedy: sign the request
+  REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID = 2;  // the signature does not verify: bad signature, unresolvable key, content-digest mismatch, required covered component missing
+  REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE = 3;    // outside its created/expires window, or already used (replay); remedy: re-sign now
+}
+
+// RequestAuthFailure — an RPC request's HTTP message signature was refused.
+message RequestAuthFailure {
+  // The failure reason (defined-only, non-zero)
+  RequestAuthFailureReason reason = 1 [
+    (buf.validate.field).enum = {defined_only: true, not_in: [0]}
+  ];
+}
diff --git a/sdk/go/connect/errordetail_test.go b/sdk/go/connect/errordetail_test.go
index 2465ff32..1c2e198a 100644
--- a/sdk/go/connect/errordetail_test.go
+++ b/sdk/go/connect/errordetail_test.go
@@ -56,6 +56,20 @@ func TestErrorDetail_retrievalAuthFailureRoundTrip(t *testing.T) {
 	}
 }
 
+func TestErrorDetail_requestAuthFailureRoundTrip(t *testing.T) {
+	detail := helpers.RequestAuthFailureDetail("fora.v1.ExchangeService", "signature expired",
+		forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE)
+	cerr := foraserver.AsConnectError(connectrpc.CodeUnauthenticated, detail)
+	got, ok := foraconnect.ErrorDetailFrom(cerr)
+	if !ok {
+		t.Fatal("extract failed")
+	}
+	reason, ok := helpers.Reason(got).(forav1.RequestAuthFailureReason)
+	if !ok || reason != forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE {
+		t.Errorf("reason = %v (%T)", helpers.Reason(got), helpers.Reason(got))
+	}
+}
+
 func TestErrorDetailFrom_nonConnectError(t *testing.T) {
 	if _, ok := foraconnect.ErrorDetailFrom(errors.New("plain")); ok {
 		t.Error("plain error should not yield a detail")
diff --git a/sdk/go/connect/gen_connect_error_vectors_test.go b/sdk/go/connect/gen_connect_error_vectors_test.go
index f895190d..59399772 100644
--- a/sdk/go/connect/gen_connect_error_vectors_test.go
+++ b/sdk/go/connect/gen_connect_error_vectors_test.go
@@ -170,6 +170,17 @@ func connectErrorCases() []errorCase {
 			detail: helpers.DomainVerificationFailureDetail(exchangeDomain, "challenge not found",
 				forav1.DomainVerificationFailureReason_DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND),
 		},
+		{
+			// The request-signature refusal. The verify seam writes it with
+			// connectserver.WriteReject rather than through a handler; a test in that
+			// package holds the writer's envelope equal to what connect-go writes for
+			// the same error, which is what this capture records. The domain is empty
+			// because that writer is handed no request and so cannot name a service.
+			name: "request_auth_failure_signature_stale",
+			code: connectrpc.CodeUnauthenticated, msg: "helpers: signature expired",
+			detail: helpers.RequestAuthFailureDetail("", "helpers: signature expired",
+				forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE),
+		},
 		{
 			name: "generic_detail_no_reason",
 			code: connectrpc.CodeInternal, msg: "internal error",
@@ -261,6 +272,8 @@ func expectationOf(detail *forav1.ErrorDetail) connectErrorExpectation {
 		exp.ReasonFrom, exp.ReasonEnum = "retrieval_auth_failure", r.String()
 	case forav1.UsageReportRejectionReason:
 		exp.ReasonFrom, exp.ReasonEnum = "usage_report_rejection", r.String()
+	case forav1.RequestAuthFailureReason:
+		exp.ReasonFrom, exp.ReasonEnum = "request_auth_failure", r.String()
 	}
 	return exp
 }
diff --git a/sdk/go/connect/testdata/connect-error-vectors.json b/sdk/go/connect/testdata/connect-error-vectors.json
index 2c9d3748..ac7139bb 100644
--- a/sdk/go/connect/testdata/connect-error-vectors.json
+++ b/sdk/go/connect/testdata/connect-error-vectors.json
@@ -224,6 +224,36 @@
       },
       "peer_message": "challenge not found"
     },
+    {
+      "name": "request_auth_failure_signature_stale",
+      "code": "unauthenticated",
+      "http_status": 401,
+      "envelope": {
+        "code": "unauthenticated",
+        "details": [
+          {
+            "debug": {
+              "message": "helpers: signature expired",
+              "requestAuthFailure": {
+                "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              }
+            },
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChpoZWxwZXJzOiBzaWduYXR1cmUgZXhwaXJlZIoBAggD"
+          }
+        ],
+        "message": "helpers: signature expired"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "",
+        "message": "helpers: signature expired",
+        "metadata": null,
+        "reason_field": "request_auth_failure",
+        "reason_enum": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+      },
+      "peer_message": "helpers: signature expired"
+    },
     {
       "name": "generic_detail_no_reason",
       "code": "internal",
diff --git a/sdk/go/connectserver/reject.go b/sdk/go/connectserver/reject.go
index caef56be..93140a0a 100644
--- a/sdk/go/connectserver/reject.go
+++ b/sdk/go/connectserver/reject.go
@@ -1,11 +1,13 @@
 package connectserver
 
 import (
+	"encoding/base64"
 	"encoding/json"
 	"errors"
 	"net/http"
 
 	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/encoding/protojson"
 
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
@@ -79,9 +81,19 @@ func httpStatus(code connectrpc.Code, err error) int {
 
 // WriteReject emits a Connect-compatible error response so a Connect client sees a
 // proper code (and matching HTTP status) instead of a raw status. The body shape
-// mirrors Connect's unary error JSON: the two keys code and message, and nothing
-// else — err's own text is the message, so a caller that rejects with a wrapped
-// internal error publishes that text.
+// is Connect's unary error JSON: code and message, where err's own text is the
+// message, so a caller that rejects with a wrapped internal error publishes that
+// text.
+//
+// An Unauthenticated refusal also carries one fora.v1.ErrorDetail in details,
+// whose request_auth_failure block holds the typed reason requestAuthFailureReason
+// derives from err, because the contract tells a client to branch on a typed reason
+// and never on the message. The detail's message is err's text, the same as the
+// envelope's, and its domain is empty: this writer is handed no request, so it
+// cannot name the service the refused call was addressed to, and the reason block
+// already says which surface refused. No other code carries a detail: a resource
+// limit has no reason block in the contract, and a code outside the two this writer
+// models is the caller's verdict, not a signature refusal.
 //
 // The code is a parameter rather than derived, so a mount whose gate carries a
 // resource-limit sentinel this package cannot know about supplies its own verdict
@@ -98,12 +110,82 @@ func httpStatus(code connectrpc.Code, err error) int {
 // malformed request, say — writes that response itself.
 func WriteReject(w http.ResponseWriter, code connectrpc.Code, err error) {
 	ce := connectrpc.NewError(code, err)
+	out := rejectBody{Code: code.String(), Message: ce.Message()}
+	if code == connectrpc.CodeUnauthenticated {
+		detail := helpers.RequestAuthFailureDetail("", ce.Message(), requestAuthFailureReason(err))
+		if wd, ok := wireDetailOf(detail); ok {
+			out.Details = []wireDetail{wd}
+		}
+	}
 	w.Header().Set("Content-Type", "application/json")
 	w.WriteHeader(httpStatus(code, err))
-	body, _ := json.Marshal(map[string]string{"code": code.String(), "message": ce.Message()})
+	body, _ := json.Marshal(out)
 	_, _ = w.Write(body)
 }
 
+// rejectBody is Connect's unary error JSON. message is always written, as it was
+// before details existed, so a refusal without a detail keeps its exact bytes.
+type rejectBody struct {
+	Code    string       `json:"code"`
+	Message string       `json:"message"`
+	Details []wireDetail `json:"details,omitempty"`
+}
+
+// wireDetail is one entry of a Connect error's details array, in the form connect-go
+// itself writes and reads: the message's fully qualified name, its binary protobuf as
+// unpadded standard base64, and a debug rendering at protojson's default options. A
+// Go client decodes value; the JSON-only SDKs have no binary codec and read debug,
+// which is lowerCamelCase for exactly that reason. connect-go keeps its own encoder
+// unexported, so the shape is restated here and a test holds it equal to what
+// connect-go's ErrorWriter emits for the same error.
+type wireDetail struct {
+	Type  string          `json:"type"`
+	Value string          `json:"value"`
+	Debug json.RawMessage `json:"debug,omitempty"`
+}
+
+// wireDetailOf renders d as a details entry. It reports false when d cannot be
+// marshalled, and the refusal is then written without a detail rather than not at
+// all, the same best-effort rule AttachDetail follows.
+func wireDetailOf(d *forav1.ErrorDetail) (wireDetail, bool) {
+	cd, err := connectrpc.NewErrorDetail(d)
+	if err != nil {
+		return wireDetail{}, false
+	}
+	out := wireDetail{Type: cd.Type(), Value: base64.RawStdEncoding.EncodeToString(cd.Bytes())}
+	if debug, derr := (protojson.MarshalOptions{}).Marshal(d); derr == nil {
+		out.Debug = debug
+	}
+	return out, true
+}
+
+// requestAuthFailureReason maps a verify-face rejection to the typed reason an
+// Unauthenticated refusal carries. The three reasons name what the caller does next,
+// never which check failed, so several sentinels share each one:
+//
+//   - SIGNATURE_MISSING: no Signature-Input or Signature header, or one that does not
+//     parse. The caller signs the request.
+//   - SIGNATURE_STALE: expired, created in the future, or a nonce the replay store has
+//     already seen. The caller signs the request again, now.
+//   - SIGNATURE_INVALID: everything else, including an error this function has never
+//     heard of. The default is the arm that matters: a sentinel added to the verifier
+//     later lands here without an edit, and the most general reason is the only one
+//     that cannot send a caller after the wrong remedy.
+func requestAuthFailureReason(err error) forav1.RequestAuthFailureReason {
+	switch {
+	case errors.Is(err, helpers.ErrMissingSignatureInput),
+		errors.Is(err, helpers.ErrMissingSignature),
+		errors.Is(err, helpers.ErrMalformedSignatureInput):
+		return forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING
+	case errors.Is(err, helpers.ErrExpired),
+		errors.Is(err, helpers.ErrFutureCreated),
+		errors.Is(err, ErrReplayed):
+		return forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE
+	default:
+		return forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID
+	}
+}
+
 // AsConnectError builds a *connect.Error of the given Code with detail attached
 // as a typed error detail (the ADR-019 transport mechanism). The detail's
 // Message becomes the error string. It lives in the SERVER binding (the emit
diff --git a/sdk/go/connectserver/reject_test.go b/sdk/go/connectserver/reject_test.go
index 7a5ac134..fbf52894 100644
--- a/sdk/go/connectserver/reject_test.go
+++ b/sdk/go/connectserver/reject_test.go
@@ -106,7 +106,9 @@ func TestWriteReject_StatusAgreesWithTheCodeItIsGiven(t *testing.T) {
 				t.Errorf("status = %d, want %d — the status and the body must name one verdict",
 					rec.Code, tc.want)
 			}
-			var body map[string]string
+			// map[string]any, not map[string]string: an Unauthenticated refusal also
+			// carries a details array, which is not a string.
+			var body map[string]any
 			if err := json.Unmarshal(rec.Body.Bytes(), &body); err != nil {
 				t.Fatalf("body is not the Connect error envelope: %v", err)
 			}
@@ -165,27 +167,59 @@ func TestWriteReject_NeverAnswersSuccess(t *testing.T) {
 	}
 }
 
-// TestWriteReject_BodyCarriesOnlyCodeAndMessage pins the response shape now that it
-// is a public contract. The message is the error's own text, so a caller learns what
-// it publishes by rejecting with a wrapped internal error; nothing else leaves.
-func TestWriteReject_BodyCarriesOnlyCodeAndMessage(t *testing.T) {
+// TestWriteReject_BodyCarriesOnlyCodeMessageAndTheTypedDetail pins the response shape
+// now that it is a public contract. The message is the error's own text, so a caller
+// learns what it publishes by rejecting with a wrapped internal error. An
+// Unauthenticated refusal adds exactly one details entry, the fora.v1.ErrorDetail
+// carrying the typed reason; a resource-limit refusal adds nothing. No other key
+// leaves either way.
+func TestWriteReject_BodyCarriesOnlyCodeMessageAndTheTypedDetail(t *testing.T) {
 	t.Parallel()
-	err := errors.New("signature verification failed")
-	rec := httptest.NewRecorder()
-	foraserver.WriteReject(rec, connectrpc.CodeUnauthenticated, err)
-
-	var body map[string]any
-	if uerr := json.Unmarshal(rec.Body.Bytes(), &body); uerr != nil {
-		t.Fatalf("unmarshal body: %v", uerr)
-	}
-	if len(body) != 2 || body["code"] == nil || body["message"] == nil {
-		t.Errorf("body carries %v, want exactly the keys code and message", body)
-	}
-	if body["message"] != err.Error() {
-		t.Errorf("message = %v, want the error's own text %q", body["message"], err.Error())
+	cases := []struct {
+		name        string
+		code        connectrpc.Code
+		err         error
+		wantDetails bool
+	}{
+		{"unauthenticated", connectrpc.CodeUnauthenticated, errors.New("signature verification failed"), true},
+		{"resource exhausted", connectrpc.CodeResourceExhausted, helpers.ErrTooManyHops, false},
 	}
-	if got := len(rec.Header()); got != 1 || rec.Header().Get("Content-Type") != "application/json" {
-		t.Errorf("writer set headers %v, want only Content-Type: application/json", rec.Header())
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			rec := httptest.NewRecorder()
+			foraserver.WriteReject(rec, tc.code, tc.err)
+
+			var body map[string]any
+			if uerr := json.Unmarshal(rec.Body.Bytes(), &body); uerr != nil {
+				t.Fatalf("unmarshal body: %v", uerr)
+			}
+			wantKeys := 2
+			if tc.wantDetails {
+				wantKeys = 3
+			}
+			if len(body) != wantKeys || body["code"] == nil || body["message"] == nil {
+				t.Errorf("body carries %v, want the keys code and message (and details: %v) only",
+					body, tc.wantDetails)
+			}
+			if body["message"] != tc.err.Error() {
+				t.Errorf("message = %v, want the error's own text %q", body["message"], tc.err.Error())
+			}
+			details, _ := body["details"].([]any)
+			switch {
+			case !tc.wantDetails && body["details"] != nil:
+				t.Errorf("a %v refusal carries details %v; only a signature refusal has a reason block",
+					tc.code, body["details"])
+			case tc.wantDetails && len(details) != 1:
+				t.Errorf("details = %v, want exactly one entry", body["details"])
+			case tc.wantDetails:
+				if entry, _ := details[0].(map[string]any); entry["type"] != "fora.v1.ErrorDetail" {
+					t.Errorf("details[0] = %v, want a fora.v1.ErrorDetail", details[0])
+				}
+			}
+			if got := len(rec.Header()); got != 1 || rec.Header().Get("Content-Type") != "application/json" {
+				t.Errorf("writer set headers %v, want only Content-Type: application/json", rec.Header())
+			}
+		})
 	}
 }
 
diff --git a/sdk/go/connectserver/request_auth_failure_test.go b/sdk/go/connectserver/request_auth_failure_test.go
new file mode 100644
index 00000000..11672d6d
--- /dev/null
+++ b/sdk/go/connectserver/request_auth_failure_test.go
@@ -0,0 +1,313 @@
+package connectserver_test
+
+// The typed reason a request-signature refusal carries. The contract tells a client
+// to branch on ErrorDetail's typed reason, never on the message, so an Unauthenticated
+// refusal from the verify seam carries a request_auth_failure block whose reason is
+// one of three: SIGNATURE_MISSING, SIGNATURE_INVALID or SIGNATURE_STALE.
+//
+// The integration test drives a real refusal for each reason: a real ExchangeService
+// handler behind the SDK server face, served over httptest, called by a real client,
+// with the reason read back through the client's typed reading (ErrorDetailFrom, then
+// helpers.Reason). The table test below it covers the mapping one sentinel at a time
+// through the exported writer, because several sentinels share each reason and only
+// one of them per reason is cheap to provoke end to end.
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"reflect"
+	"strings"
+	"testing"
+	"time"
+
+	connectrpc "connectrpc.com/connect"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
+	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+const (
+	reasonMissing = forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING
+	reasonInvalid = forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID
+	reasonStale   = forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE
+)
+
+// requestAuthReasonOf reads the typed reason off a refused call the way a client
+// does: ErrorDetailFrom, then helpers.Reason, type-asserted to the enum. It fails the
+// test when the refusal carries no detail or a reason from another family.
+func requestAuthReasonOf(t *testing.T, err error) forav1.RequestAuthFailureReason {
+	t.Helper()
+	if err == nil {
+		t.Fatal("the call was not refused")
+	}
+	if got := connectrpc.CodeOf(err); got != connectrpc.CodeUnauthenticated {
+		t.Fatalf("code = %v, want unauthenticated (err=%v)", got, err)
+	}
+	detail, ok := foraconnect.ErrorDetailFrom(err)
+	if !ok {
+		t.Fatalf("the refusal carries no ErrorDetail: %v", err)
+	}
+	reason, ok := helpers.Reason(detail).(forav1.RequestAuthFailureReason)
+	if !ok {
+		t.Fatalf("reason = %v (%T), want a RequestAuthFailureReason", helpers.Reason(detail), helpers.Reason(detail))
+	}
+	return reason
+}
+
+// headerTransport sets fixed headers on every request, for the one refusal no SDK
+// client produces: a signature header that does not parse.
+type headerTransport struct {
+	headers map[string]string
+}
+
+func (h headerTransport) RoundTrip(req *http.Request) (*http.Response, error) {
+	req = req.Clone(req.Context())
+	for k, v := range h.headers {
+		req.Header.Set(k, v)
+	}
+	return http.DefaultTransport.RoundTrip(req)
+}
+
+// TestRequestAuthFailure_EachReasonFromARealRefusal sends one request per reason
+// through the SDK server face and reads the reason back through the Go client. Two
+// requests share each of MISSING and STALE on purpose: the reason names the remedy,
+// so two different failed checks with one remedy must read the same.
+func TestRequestAuthFailure_EachReasonFromARealRefusal(t *testing.T) {
+	t.Parallel()
+	f := newServerFixture(t)
+	stranger := newServerFixture(t) // a signer the fixture's resolver does not know
+	now := time.Now()
+	window := func(at time.Time) foraconnect.ClientOption {
+		return foraconnect.WithSignWindow(core.ClockWindow(func() time.Time { return at }, 5*time.Minute))
+	}
+
+	cases := []struct {
+		name   string
+		replay core.ReplayStore
+		call   func(srvURL string) error
+		want   forav1.RequestAuthFailureReason
+	}{
+		{
+			name:   "unsigned request",
+			replay: newCountingReplayStore(),
+			call: func(u string) error {
+				_, err := foraconnect.NewClient(u).Discover(context.Background(), &forav1.ResourceQuery{})
+				return err
+			},
+			want: reasonMissing,
+		},
+		{
+			name:   "signature headers that do not parse",
+			replay: newCountingReplayStore(),
+			call: func(u string) error {
+				hc := &http.Client{Transport: headerTransport{headers: map[string]string{
+					"Signature-Input": "sig1=(((",
+					"Signature":       "sig1=:AAAA:",
+				}}}
+				_, err := forav1connect.NewExchangeServiceClient(hc, u).
+					DiscoverResources(context.Background(), connectrpc.NewRequest(&forav1.ResourceQuery{}))
+				return err
+			},
+			want: reasonMissing,
+		},
+		{
+			name:   "signed by a key the resolver does not know",
+			replay: newCountingReplayStore(),
+			call: func(u string) error {
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(stranger.signer)).
+					Discover(context.Background(), &forav1.ResourceQuery{})
+				return err
+			},
+			want: reasonInvalid,
+		},
+		{
+			name:   "expired signature",
+			replay: newCountingReplayStore(),
+			call: func(u string) error {
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer), window(now.Add(-time.Hour))).
+					Discover(context.Background(), &forav1.ResourceQuery{})
+				return err
+			},
+			want: reasonStale,
+		},
+		{
+			name:   "signature created in the future",
+			replay: newCountingReplayStore(),
+			call: func(u string) error {
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer), window(now.Add(time.Hour))).
+					Discover(context.Background(), &forav1.ResourceQuery{})
+				return err
+			},
+			want: reasonStale,
+		},
+		{
+			name:   "replayed signature",
+			replay: alwaysReplayStore{},
+			call: func(u string) error {
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer)).
+					Discover(context.Background(), &forav1.ResourceQuery{})
+				return err
+			},
+			want: reasonStale,
+		},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+			origin := &echoExchange{}
+			srv := serveHandler(t, origin, f.resolver, tc.replay)
+
+			if got := requestAuthReasonOf(t, tc.call(srv.URL)); got != tc.want {
+				t.Errorf("reason = %v, want %v", got, tc.want)
+			}
+			if origin.hitCount() != 0 {
+				t.Errorf("the origin ran %d times on a refused request", origin.hitCount())
+			}
+		})
+	}
+}
+
+// TestRequestAuthFailure_ASignedRequestCarriesNoRefusal is the control for the table
+// above: the same fixture, signed correctly, is answered by the origin. Without it a
+// fixture that refused everything would pass every row.
+func TestRequestAuthFailure_ASignedRequestCarriesNoRefusal(t *testing.T) {
+	t.Parallel()
+	f := newServerFixture(t)
+	srv := f.serve(t, newCountingReplayStore())
+
+	_, err := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(f.signer)).
+		Discover(context.Background(), &forav1.ResourceQuery{})
+	if err != nil {
+		t.Fatalf("a correctly signed request was refused: %v", err)
+	}
+	if f.origin.hitCount() != 1 {
+		t.Fatalf("origin ran %d times, want 1", f.origin.hitCount())
+	}
+}
+
+// TestRequestAuthFailure_EverySentinelMapsToOneReason covers the mapping one sentinel
+// at a time, wrapped the way the verifier wraps them, through the exported writer and
+// the generated client. The last rows are the default arm: a sentinel this mapping
+// does not name, and an error nobody has defined, both read INVALID.
+func TestRequestAuthFailure_EverySentinelMapsToOneReason(t *testing.T) {
+	t.Parallel()
+	wrap := func(sentinel error) error { return fmt.Errorf("%w: detail the reason must not carry", sentinel) }
+	cases := []struct {
+		name string
+		err  error
+		want forav1.RequestAuthFailureReason
+	}{
+		{"missing Signature-Input", helpers.ErrMissingSignatureInput, reasonMissing},
+		{"missing Signature", helpers.ErrMissingSignature, reasonMissing},
+		{"malformed Signature-Input", wrap(helpers.ErrMalformedSignatureInput), reasonMissing},
+		{"expired", wrap(helpers.ErrExpired), reasonStale},
+		{"created in the future", wrap(helpers.ErrFutureCreated), reasonStale},
+		{"replayed", foraserver.ErrReplayed, reasonStale},
+		{"bad signature", helpers.ErrSignatureVerify, reasonInvalid},
+		{"content-digest mismatch", helpers.ErrDigestMismatch, reasonInvalid},
+		{"missing Content-Digest", helpers.ErrMissingContentDigest, reasonInvalid},
+		{"required covered component missing", wrap(helpers.ErrMissingRequiredComponent), reasonInvalid},
+		{"unsupported algorithm", wrap(helpers.ErrUnsupportedAlgorithm), reasonInvalid},
+		{"unresolvable key", wrap(helpers.ErrUnknownKey), reasonInvalid},
+		{"missing created", helpers.ErrMissingCreated, reasonInvalid},
+		{"missing expires", helpers.ErrMissingExpires, reasonInvalid},
+		{"lifetime past the clamp", wrap(helpers.ErrSignatureLifetimeTooLong), reasonInvalid},
+		{"broken signature chain", wrap(helpers.ErrBrokenSignatureChain), reasonInvalid},
+		{"an error nobody defined", errors.New("replay store unreachable"), reasonInvalid},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+			srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+				foraserver.WriteReject(w, foraserver.RejectCode(tc.err), tc.err)
+			}))
+			t.Cleanup(srv.Close)
+
+			_, err := forav1connect.NewExchangeServiceClient(srv.Client(), srv.URL).
+				DiscoverResources(context.Background(), connectrpc.NewRequest(&forav1.ResourceQuery{}))
+			if got := requestAuthReasonOf(t, err); got != tc.want {
+				t.Errorf("reason = %v, want %v", got, tc.want)
+			}
+		})
+	}
+}
+
+// TestRequestAuthFailure_OnlyAnUnauthenticatedRefusalCarriesTheReason pins the
+// negative side: a resource limit, and a code outside the two the writer models,
+// carry no detail at all. A request_auth_failure block on a hop-budget refusal would
+// send a correctly signed caller to re-sign a request whose only fault is its length.
+func TestRequestAuthFailure_OnlyAnUnauthenticatedRefusalCarriesTheReason(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		name string
+		code connectrpc.Code
+		err  error
+	}{
+		{"hop budget", connectrpc.CodeResourceExhausted, helpers.ErrTooManyHops},
+		{"body past the read cap", connectrpc.CodeResourceExhausted, &http.MaxBytesError{Limit: 1}},
+		{"a code the writer does not model", connectrpc.CodeInvalidArgument, helpers.ErrMissingSignature},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+			srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+				foraserver.WriteReject(w, tc.code, tc.err)
+			}))
+			t.Cleanup(srv.Close)
+
+			_, err := forav1connect.NewExchangeServiceClient(srv.Client(), srv.URL).
+				DiscoverResources(context.Background(), connectrpc.NewRequest(&forav1.ResourceQuery{}))
+			if err == nil {
+				t.Fatal("the call was not refused")
+			}
+			if detail, ok := foraconnect.ErrorDetailFrom(err); ok {
+				t.Errorf("a %v refusal carries %v; only a signature refusal has a reason block", tc.code, detail)
+			}
+		})
+	}
+}
+
+// TestRequestAuthFailure_EnvelopeIsWhatConnectGoWrites holds the restated details
+// encoding to connect-go's own. The writer cannot call connect-go's encoder, which is
+// unexported, and its ErrorWriter would answer 429 where this binding answers 413. So
+// the envelope is compared against what ErrorWriter emits for the same error and the
+// same detail. A drift in either the binary value or the debug rendering, the field
+// the JSON-only SDKs read, fails here.
+func TestRequestAuthFailure_EnvelopeIsWhatConnectGoWrites(t *testing.T) {
+	t.Parallel()
+	refusal := fmt.Errorf("%w: @target-uri", helpers.ErrMissingRequiredComponent)
+
+	ours := httptest.NewRecorder()
+	foraserver.WriteReject(ours, connectrpc.CodeUnauthenticated, refusal)
+
+	want := connectrpc.NewError(connectrpc.CodeUnauthenticated, refusal)
+	if err := foraserver.AttachDetail(want, helpers.RequestAuthFailureDetail("", refusal.Error(), reasonInvalid)); err == nil {
+		t.Fatal("AttachDetail returned nil")
+	}
+	req := httptest.NewRequest(http.MethodPost, "/fora.v1.ExchangeService/DiscoverResources", strings.NewReader("{}"))
+	req.Header.Set("Content-Type", helpers.ContentTypeJSON)
+	req.Header.Set(helpers.ConnectProtocolVersionHeader, helpers.ConnectProtocolVersion)
+	theirs := httptest.NewRecorder()
+	if err := connectrpc.NewErrorWriter().Write(theirs, req, want); err != nil {
+		t.Fatalf("connect-go ErrorWriter: %v", err)
+	}
+
+	var gotBody, wantBody map[string]any
+	if err := json.Unmarshal(ours.Body.Bytes(), &gotBody); err != nil {
+		t.Fatalf("our envelope is not JSON: %v", err)
+	}
+	if err := json.Unmarshal(theirs.Body.Bytes(), &wantBody); err != nil {
+		t.Fatalf("connect-go's envelope is not JSON: %v", err)
+	}
+	if !reflect.DeepEqual(gotBody, wantBody) {
+		t.Errorf("envelope differs from connect-go's:\n ours   %s\n theirs %s", ours.Body.Bytes(), theirs.Body.Bytes())
+	}
+}
diff --git a/sdk/go/helpers/errordetail.go b/sdk/go/helpers/errordetail.go
index ac3830a6..e64704f9 100644
--- a/sdk/go/helpers/errordetail.go
+++ b/sdk/go/helpers/errordetail.go
@@ -87,10 +87,18 @@ func UsageReportRejectionDetail(domain, message string, reason forav1.UsageRepor
 	return d
 }
 
+// RequestAuthFailureDetail builds an ErrorDetail carrying a typed RequestAuthFailureReason.
+func RequestAuthFailureDetail(domain, message string, reason forav1.RequestAuthFailureReason) *forav1.ErrorDetail {
+	d := base(domain, message)
+	d.Reason = &forav1.ErrorDetail_RequestAuthFailure{RequestAuthFailure: &forav1.RequestAuthFailure{Reason: reason}}
+	return d
+}
+
 // Reason returns the active typed reason enum from detail — one of
 // forav1.DenialReason, RetrievalAuthFailureReason, CatalogRejectionReason,
 // RegistrationFailureReason, DisputeFailureReason, DomainVerificationFailureReason,
-// or UsageReportRejectionReason — or nil when no reason is set. Callers type-switch
+// UsageReportRejectionReason, or RequestAuthFailureReason — or nil when no reason
+// is set. Callers type-switch
 // on the result to branch on the failure, never on a string.
 func Reason(detail *forav1.ErrorDetail) any {
 	switch {
@@ -108,6 +116,8 @@ func Reason(detail *forav1.ErrorDetail) any {
 		return detail.GetDomainVerificationFailure().GetReason()
 	case detail.GetUsageReportRejection() != nil:
 		return detail.GetUsageReportRejection().GetReason()
+	case detail.GetRequestAuthFailure() != nil:
+		return detail.GetRequestAuthFailure().GetReason()
 	default:
 		return nil
 	}
diff --git a/sdk/go/helpers/gen_errordetail_vectors_test.go b/sdk/go/helpers/gen_errordetail_vectors_test.go
index b91abcf7..8318ac7d 100644
--- a/sdk/go/helpers/gen_errordetail_vectors_test.go
+++ b/sdk/go/helpers/gen_errordetail_vectors_test.go
@@ -128,6 +128,8 @@ func reasonProjection(d *forav1.ErrorDetail) (field, enum string) {
 		field = "domain_verification_failure"
 	case d.GetUsageReportRejection() != nil:
 		field = "usage_report_rejection"
+	case d.GetRequestAuthFailure() != nil:
+		field = "request_auth_failure"
 	default:
 		panic("reasonProjection: reason set but no known oneof block populated")
 	}
@@ -174,7 +176,7 @@ func vectorFrom(t *testing.T, name string, d *forav1.ErrorDetail) errorDetailVec
 // only; a single metadata pair; an explicitly-empty metadata map (proto3 omits it
 // on the wire); multi-key metadata combined with a typed reason (the ordering case
 // — a reader must extract the same key/value map regardless of encoding order); and
-// all seven typed-reason families, each built via its REAL typed *Detail builder so
+// all eight typed-reason families, each built via its REAL typed *Detail builder so
 // the corpus proves the CONSTRUCT half in every language, not just the read half.
 func buildErrorDetailVectors(t *testing.T) []errorDetailVector {
 	t.Helper()
@@ -225,8 +227,8 @@ func buildErrorDetailVectors(t *testing.T) []errorDetailVector {
 		forav1.DenialReason_DENIAL_REASON_RATE_LIMITED)
 	multiKey.Metadata = map[string]string{"zeta": "3", "alpha": "1", "mid": "2"}
 
-	// The remaining five reason families, each built via its REAL typed *Detail
-	// builder so the corpus exercises the construct half of all seven families
+	// The remaining six reason families, each built via its REAL typed *Detail
+	// builder so the corpus exercises the construct half of all eight families
 	// (transaction_denial + retrieval_auth_failure above complete the set).
 	catalogRejection := CatalogRejectionDetail(
 		"fora.v1.CatalogService", "not your tenant",
@@ -272,6 +274,23 @@ func buildErrorDetailVectors(t *testing.T) []errorDetailVector {
 		"fora.v1.ExchangeService", "duplicate report",
 		forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_DUPLICATE)
 
+	// The request-signature refusal: one vector per reason, because the three
+	// values are the whole vocabulary and each asks the caller for a different
+	// remedy. A reader that decodes only the first would stay green on a corpus
+	// carrying one, and the message is left as a verifier writes it so the
+	// replays prove a reader takes the reason from the typed block, not the text.
+	requestAuthMissing := RequestAuthFailureDetail(
+		"fora.v1.ExchangeService", "helpers: missing Signature-Input header",
+		forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING)
+
+	requestAuthInvalid := RequestAuthFailureDetail(
+		"fora.v1.ExchangeService", "helpers: required covered component missing: @target-uri",
+		forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID)
+
+	requestAuthStale := RequestAuthFailureDetail(
+		"fora.v1.ExchangeService", "helpers: signature expired",
+		forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE)
+
 	cases := []struct {
 		name string
 		d    *forav1.ErrorDetail
@@ -290,6 +309,9 @@ func buildErrorDetailVectors(t *testing.T) []errorDetailVector {
 		{"dispute_failure_reason", disputeFailure},
 		{"domain_verification_failure_reason", domainVerificationFailure},
 		{"usage_report_rejection_reason", usageReportRejection},
+		{"request_auth_failure_signature_missing", requestAuthMissing},
+		{"request_auth_failure_signature_invalid", requestAuthInvalid},
+		{"request_auth_failure_signature_stale", requestAuthStale},
 	}
 	out := make([]errorDetailVector, 0, len(cases))
 	for _, c := range cases {
diff --git a/sdk/go/helpers/testdata/error-detail-vectors.json b/sdk/go/helpers/testdata/error-detail-vectors.json
index b3ab5598..f04a113d 100644
--- a/sdk/go/helpers/testdata/error-detail-vectors.json
+++ b/sdk/go/helpers/testdata/error-detail-vectors.json
@@ -247,6 +247,54 @@
           "reason": "USAGE_REPORT_REJECTION_REASON_DUPLICATE"
         }
       }
+    },
+    {
+      "name": "request_auth_failure_signature_missing",
+      "domain": "fora.v1.ExchangeService",
+      "message": "helpers: missing Signature-Input header",
+      "metadata": null,
+      "reason_field": "request_auth_failure",
+      "reason_enum": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+      "field_errors": null,
+      "wire_json": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "helpers: missing Signature-Input header",
+        "request_auth_failure": {
+          "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING"
+        }
+      }
+    },
+    {
+      "name": "request_auth_failure_signature_invalid",
+      "domain": "fora.v1.ExchangeService",
+      "message": "helpers: required covered component missing: @target-uri",
+      "metadata": null,
+      "reason_field": "request_auth_failure",
+      "reason_enum": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+      "field_errors": null,
+      "wire_json": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "helpers: required covered component missing: @target-uri",
+        "request_auth_failure": {
+          "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID"
+        }
+      }
+    },
+    {
+      "name": "request_auth_failure_signature_stale",
+      "domain": "fora.v1.ExchangeService",
+      "message": "helpers: signature expired",
+      "metadata": null,
+      "reason_field": "request_auth_failure",
+      "reason_enum": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE",
+      "field_errors": null,
+      "wire_json": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "helpers: signature expired",
+        "request_auth_failure": {
+          "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+        }
+      }
     }
   ]
 }
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 106f7eaf..e2e35f62 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -651,6 +651,11 @@
       "python": "REGISTRATION_SCHEMA_DIALECT",
       "ts": "registrationSchemaDialect"
     },
+    "helpers.RequestAuthFailureDetail": {
+      "allowlist_reason": null,
+      "python": "request_auth_failure_detail",
+      "ts": "requestAuthFailureDetail"
+    },
     "helpers.RequestIDHeader": {
       "allowlist_reason": null,
       "python": "RequestIDHeader",
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 552fd4b6..b5a10da3 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -66,6 +66,7 @@
     parse_error_detail,
     reason,
     registration_failure_detail,
+    request_auth_failure_detail,
     retrieval_auth_failure_detail,
     transaction_denial_detail,
     usage_report_rejection_detail,
@@ -284,6 +285,7 @@
     "parse_money",
     "reason",
     "registration_failure_detail",
+    "request_auth_failure_detail",
     "retrieval_auth_failure_detail",
     "scopes_subset",
     "sign_agent_binding",
diff --git a/sdk/python/fora_sdk/errordetail.py b/sdk/python/fora_sdk/errordetail.py
index e07be6e9..605290a9 100644
--- a/sdk/python/fora_sdk/errordetail.py
+++ b/sdk/python/fora_sdk/errordetail.py
@@ -11,7 +11,7 @@
 enum. That is the Python peer of the Go client binding's ``ErrorDetailFrom`` + the
 transport-neutral ``helpers.Reason`` accessor (sdk/go/connect + sdk/go/helpers).
 
-WRITE half — the seven typed ``*_detail`` builders below are the Python peers of the
+WRITE half — the eight typed ``*_detail`` builders below are the Python peers of the
 Go ``helpers.*Detail`` constructors (sdk/go/helpers/errordetail.go). Each builds an
 ``ErrorDetail`` carrying exactly one typed reason oneof block from
 ``(domain, message, reason)``, mirroring Go one-for-one: the builder sets ONLY the
@@ -45,6 +45,7 @@
     DomainVerificationFailureReason,
     ErrorDetail,
     RegistrationFailureReason,
+    RequestAuthFailureReason,
     RetrievalAuthFailureReason,
     UsageReportRejectionReason,
 )
@@ -69,6 +70,7 @@
     "domain_verification_failure",
     "retrieval_auth_failure",
     "usage_report_rejection",
+    "request_auth_failure",
 )
 
 
@@ -320,3 +322,14 @@ def usage_report_rejection_detail(
     rejected).
     """
     return _reason_detail(domain, message, "usage_report_rejection", reason)
+
+
+def request_auth_failure_detail(
+    domain: str, message: str, reason: RequestAuthFailureReason
+) -> ErrorDetail:
+    """Build an ErrorDetail carrying a typed RequestAuthFailureReason.
+
+    Python peer of Go ``helpers.RequestAuthFailureDetail`` (the RFC 9421 HTTP
+    message signature on an RPC request failed verification).
+    """
+    return _reason_detail(domain, message, "request_auth_failure", reason)
diff --git a/sdk/python/tests/test_errordetail_construct_parity.py b/sdk/python/tests/test_errordetail_construct_parity.py
index 870c54bd..3e461f6c 100644
--- a/sdk/python/tests/test_errordetail_construct_parity.py
+++ b/sdk/python/tests/test_errordetail_construct_parity.py
@@ -3,7 +3,7 @@
 Sibling of the read-side test_errordetail_parity.py and the TS construct leg
 sdk/ts/tests/errordetail-construct.parity.test.ts. Where the read-side suite proves
 Python can PARSE the shared Go-oracle ErrorDetail wire, this suite proves Python can
-CONSTRUCT it: the 7 typed domain error-detail builders — the Python peers of the Go
+CONSTRUCT it: the 8 typed domain error-detail builders — the Python peers of the Go
 sdk/go/helpers.*Detail constructors (errordetail.go:24-75) — must, from
 (domain, message, reason), emit byte-for-byte the same canonical proto-JSON the Go
 emitter recorded in error-detail-vectors.json.
@@ -44,6 +44,7 @@
     dispute_failure_detail,
     domain_verification_failure_detail,
     registration_failure_detail,
+    request_auth_failure_detail,
     retrieval_auth_failure_detail,
     transaction_denial_detail,
     usage_report_rejection_detail,
@@ -60,6 +61,7 @@
     "registration_failure": registration_failure_detail,
     "domain_verification_failure": domain_verification_failure_detail,
     "usage_report_rejection": usage_report_rejection_detail,
+    "request_auth_failure": request_auth_failure_detail,
 }
 
 _VECTORS = load_json(GO_TESTDATA / "error-detail-vectors.json")["vectors"]
@@ -83,6 +85,7 @@ def test_all_seven_builders_are_present() -> None:
         "registration_failure",
         "domain_verification_failure",
         "usage_report_rejection",
+        "request_auth_failure",
     }
     assert all(callable(b) for b in _BUILDERS.values())
 
diff --git a/sdk/ts/src/errordetail.ts b/sdk/ts/src/errordetail.ts
index 20ec60e6..1abdfad8 100644
--- a/sdk/ts/src/errordetail.ts
+++ b/sdk/ts/src/errordetail.ts
@@ -5,6 +5,7 @@ import type {
 	DisputeFailureReasonSchema,
 	DomainVerificationFailureReasonSchema,
 	RegistrationFailureReasonSchema,
+	RequestAuthFailureReasonSchema,
 	RetrievalAuthFailureReasonSchema,
 	UsageReportRejectionReasonSchema,
 } from "../../../gen/ts/wire/schemas.ts";
@@ -24,7 +25,7 @@ import { snakeFromJsonName } from "./wire-names.ts";
 // peer of the Go client binding's ErrorDetailFrom plus the transport-neutral
 // helpers.Reason accessor (sdk/go/connect + sdk/go/helpers).
 //
-// WRITE half — the seven typed *Detail builders below are the TS peers of the Go
+// WRITE half — the eight typed *Detail builders below are the TS peers of the Go
 // helpers.*Detail constructors (sdk/go/helpers/errordetail.go). Each builds an
 // ErrorDetail carrying exactly one typed reason oneof block from
 // (domain, message, reason), mirroring Go one-for-one: the builder sets ONLY the
@@ -62,6 +63,7 @@ export const REASON_FIELDS = [
 	"domain_verification_failure",
 	"retrieval_auth_failure",
 	"usage_report_rejection",
+	"request_auth_failure",
 ] as const;
 
 export type ReasonField = (typeof REASON_FIELDS)[number];
@@ -229,6 +231,10 @@ export type DomainVerificationFailureReason = z.infer<
 export type UsageReportRejectionReason = z.infer<
 	typeof UsageReportRejectionReasonSchema
 >;
+/** RPC request-signature (RFC 9421) failure reason. */
+export type RequestAuthFailureReason = z.infer<
+	typeof RequestAuthFailureReasonSchema
+>;
 
 /**
  * Build an ErrorDetail carrying a typed DenialReason (ExecuteTransaction denial).
@@ -375,3 +381,20 @@ export function usageReportRejectionDetail(
 		usage_report_rejection: { reason },
 	});
 }
+
+/**
+ * Build an ErrorDetail carrying a typed RequestAuthFailureReason.
+ * TS peer of Go `helpers.RequestAuthFailureDetail` (the RFC 9421 HTTP message
+ * signature on an RPC request failed verification).
+ */
+export function requestAuthFailureDetail(
+	domain: string,
+	message: string,
+	reason: RequestAuthFailureReason,
+): ErrorDetail {
+	return ErrorDetailSchema.parse({
+		domain,
+		message,
+		request_auth_failure: { reason },
+	});
+}
diff --git a/sdk/ts/tests/errordetail-construct.parity.test.ts b/sdk/ts/tests/errordetail-construct.parity.test.ts
index b091f333..29e8529f 100644
--- a/sdk/ts/tests/errordetail-construct.parity.test.ts
+++ b/sdk/ts/tests/errordetail-construct.parity.test.ts
@@ -3,7 +3,7 @@
 // Sibling of the read-side errordetail.parity.test.ts and the Python construct leg
 // sdk/python/tests/test_errordetail_construct_parity.py. Where the read-side suite
 // proves TS can PARSE the shared Go-oracle ErrorDetail wire, this suite proves TS can
-// CONSTRUCT it: the 7 typed domain error-detail builders — the TS peers of the Go
+// CONSTRUCT it: the 8 typed domain error-detail builders — the TS peers of the Go
 // sdk/go/helpers.*Detail constructors (errordetail.go:24-75) — must, from
 // (domain, message, reason), emit byte-for-byte the same canonical proto-JSON the Go
 // emitter recorded in error-detail-vectors.json.
@@ -35,6 +35,7 @@ import {
 	domainVerificationFailureDetail,
 	type ErrorDetail,
 	registrationFailureDetail,
+	requestAuthFailureDetail,
 	retrievalAuthFailureDetail,
 	transactionDenialDetail,
 	usageReportRejectionDetail,
@@ -71,6 +72,7 @@ const builders = {
 	registration_failure: registrationFailureDetail,
 	domain_verification_failure: domainVerificationFailureDetail,
 	usage_report_rejection: usageReportRejectionDetail,
+	request_auth_failure: requestAuthFailureDetail,
 } as Record<string, Builder>;
 
 const vectors = (vectorsFile as VectorsFile).vectors;
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 8100fb17..51c8e36f 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -265,7 +265,7 @@ The forwarding chain lives entirely in the HTTP layer as a **stack of RFC 9421 H
 
 2. **Verify every forwarding signature in the stack** — proves each intermediary (e.g., Broker) handled the request. For each labeled signature, the Exchange resolves its `keyid` thumbprint in the key set it is configured with (the covered `Signature-Agent` header stays the agent's directory, so a hop's key is not discovered through it), verifies the Ed25519 signature, and confirms it covers the prior hop's signature so the chain is contiguous and ordered.
 
-All signatures must pass for the request to proceed. If any verification fails — or the chain is not contiguous — the Exchange rejects the request with `CodeUnauthenticated`.
+All signatures must pass for the request to proceed. If any verification fails — or the chain is not contiguous — the Exchange rejects the request with `CodeUnauthenticated`. The refusal carries an `ErrorDetail` whose `request_auth_failure` block holds a [`RequestAuthFailureReason`](/reference/proto-fora/#requestauthfailurereason): `SIGNATURE_MISSING` (sign the request), `SIGNATURE_INVALID` (the signature does not verify) or `SIGNATURE_STALE` (sign it again, now). The reason names what the caller does next, never which check failed.
 
 When only the originating signature is present, the requester is calling the Exchange directly — no intermediary was involved. Chain depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index c015ecf7..721386ea 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -31,6 +31,44 @@ Python-only for now; Go and TypeScript parity follows.**
   `signing_transport_for(key, directory)` returns a `SigningTransport` that signs as
   that key.
 
+**A request-signature refusal carries a typed reason (additive wire change).**
+An RPC request whose RFC 9421 HTTP message signature failed verification was
+refused as Connect `unauthenticated` with only a message, such as
+`helpers: missing Signature-Input header`. The contract tells clients to branch on
+a typed reason and never on the message, and `ErrorDetail` had no reason for this
+failure. It now has one: a new `reason` oneof member,
+`RequestAuthFailure request_auth_failure = 17`, whose `RequestAuthFailureReason` is
+one of three values:
+
+- `SIGNATURE_MISSING`: no signature, or none that parses. Sign the request.
+- `SIGNATURE_INVALID`: the signature does not verify, for example a bad
+  signature, a key that cannot be resolved, a content-digest mismatch or a
+  required covered component that is missing.
+- `SIGNATURE_STALE`: the signature is outside its `created`/`expires` window, or
+  was already used. Sign the request again, now.
+
+The values are deliberately coarse: each names what the caller does next, never
+which validation step failed, so a refusal tells a forger nothing about how far
+its request got.
+
+The Go server binding attaches the detail. `connectserver.WriteReject`, which the
+verify seam of `NewExchangeServiceHandler`, `NewBrokerServiceHandler` and
+`NewCatalogServiceHandler` answers with, now adds one `fora.v1.ErrorDetail` to the
+`details` of every `unauthenticated` refusal. The reason comes from the
+verification error: a missing or malformed `Signature-Input` or `Signature` is
+`SIGNATURE_MISSING`; an expired signature, one created in the future, or a replay
+(`connectserver.ErrReplayed`) is `SIGNATURE_STALE`; every other error, including
+one the mapping does not know, is `SIGNATURE_INVALID`. The detail's `domain` is
+empty, because the writer is not given the request and cannot name the service.
+The envelope's `code` and `message` are unchanged, and a `resource_exhausted`
+refusal still carries no detail.
+
+The detail builders gain `helpers.RequestAuthFailureDetail` (Go),
+`request_auth_failure_detail` (Python) and `requestAuthFailureDetail`
+(TypeScript), and the readers (`helpers.Reason`, `reason`) return the new enum.
+The Python and TypeScript SDKs have no RPC refusal writer, so they read this
+detail but do not emit it.
+
 ## v1.0.8
 
 **Request signatures carry an RFC 9421 `nonce` (SDK fix; no wire change for
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 75b3beb1..ca826bd6 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -544,6 +544,12 @@ A usage report could not be accepted.
 
 ::proto-message{name=UsageReportRejection}
 
+### RequestAuthFailure
+
+The RFC 9421 HTTP message signature on an RPC request failed verification, refused with the Connect code `unauthenticated`. Distinct from `RetrievalAuthFailure`, which reports the signed-URL / proof-of-possession check at the delivery edge.
+
+::proto-message{name=RequestAuthFailure}
+
 ### CatalogRejectionReason
 
 ::proto-enum{name=CatalogRejectionReason numbers}
@@ -570,6 +576,12 @@ Single-sources the delivery-edge token unions (signed-URL checks in `verify.ts`,
 
 ::proto-enum{name=UsageReportRejectionReason numbers}
 
+### RequestAuthFailureReason
+
+Deliberately coarse: each value names what the caller does next (sign the request, fix the signature, or re-sign now), never which validation step failed, so a refusal does not tell a forger how far its request got.
+
+::proto-enum{name=RequestAuthFailureReason numbers}
+
 ## Enums
 
 ### PricingModel

From c08610aba7f6f1251a4abd8281e85a46f22ef562 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Fri, 2 Oct 2026 20:45:25 -0400
Subject: [PATCH 006/164] Describe the request-signature refusal reason
 wherever a signature refusal is documented

The reference page and the Exchange request flow already named
RequestAuthFailure. The other pages that describe a request refused for its
RFC 9421 signature still said only CodeUnauthenticated:
- the forwarding-chain verification sample in the Exchange request flows;
- the CatalogService authentication step;
- the agent SDK's error-recovery table, which now says a stale signature is
  re-signed and retried while a missing or invalid one is terminal until the
  signer is fixed;
- the production architecture's retrieval-vocabulary paragraph, which names
  the RPC counterpart;
- the forwarding-chain forgery threat, which records why the reason is coarse.
---
 .../src/content/docs/architecture/production-architecture.mdx | 2 +-
 website/src/content/docs/components/agent-sdk/fetch-flow.mdx  | 2 +-
 website/src/content/docs/components/exchange/multi-tenant.mdx | 2 +-
 .../src/content/docs/components/exchange/request-flows.mdx    | 4 +++-
 website/src/content/docs/security/threat-model.mdx            | 2 +-
 5 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/website/src/content/docs/architecture/production-architecture.mdx b/website/src/content/docs/architecture/production-architecture.mdx
index 158250bc..56580ce6 100644
--- a/website/src/content/docs/architecture/production-architecture.mdx
+++ b/website/src/content/docs/architecture/production-architecture.mdx
@@ -130,7 +130,7 @@ The `TransactionResponse` carries a `DeliveryMethod` hint and a `retrieval_endpo
 
 The protocol does not specify signed URL formats, CDN verification logic, or content transfer mechanisms. These are defined by each Exchange and Edge Function implementation.
 
-FORA does, however, standardize the **failure vocabulary** for this step, not its mechanism: `RetrievalAuthFailureReason` gives a common enum for *why* a signed-URL or proof-of-possession check failed (expired, signature invalid, replay, …), so tooling can classify retrieval failures uniformly across implementations. It is never emitted by a FORA RPC — it travels only as an out-of-band `ErrorDetail` (its `retrieval_auth_failure` reason block) from the edge — and naming the failure categories does not mandate how any Exchange or CDN performs the check. An edge returning a bare `403` is still conformant; the enum is the interoperable vocabulary available to those that choose to report a reason.
+FORA does, however, standardize the **failure vocabulary** for this step, not its mechanism: `RetrievalAuthFailureReason` gives a common enum for *why* a signed-URL or proof-of-possession check failed (expired, signature invalid, replay, …), so tooling can classify retrieval failures uniformly across implementations. It is never emitted by a FORA RPC — it travels only as an out-of-band `ErrorDetail` (its `retrieval_auth_failure` reason block) from the edge — and naming the failure categories does not mandate how any Exchange or CDN performs the check. An edge returning a bare `403` is still conformant; the enum is the interoperable vocabulary available to those that choose to report a reason. Its counterpart for the RPCs themselves is `RequestAuthFailureReason`, which an Exchange or Broker does emit, in `ErrorDetail.request_auth_failure`, on every request refused for its RFC 9421 signature.
 
 ### Streaming Delivery (v1.0)
 
diff --git a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
index fc66338f..6f6316ec 100644
--- a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
+++ b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
@@ -292,7 +292,7 @@ sentinel reachable through `errors.Is`.
 |---|---|---|
 | `CallNotSent` | **None -- terminal.** The SDK refused before anything left the process, so retrying unchanged fails the same way | Caller fixes the address, the key or the requester |
 | `CallUnreachable` | Retry with backoff | Transparent if the retry succeeds |
-| `CallRefused` | Depends on the typed reason -- read it with `connect.ErrorDetailFrom` | A denial reason such as `DENIAL_REASON_REPORTING_OVERDUE` tells the caller what to fix |
+| `CallRefused` | Depends on the typed reason -- read it with `connect.ErrorDetailFrom` | A denial reason such as `DENIAL_REASON_REPORTING_OVERDUE` tells the caller what to fix. A `request_auth_failure` of `SIGNATURE_STALE` means sign the request again and retry; `SIGNATURE_MISSING` and `SIGNATURE_INVALID` are terminal until the signer is fixed |
 | `CallMalformed` | **None -- terminal.** The request could not be built or signed faithfully | Caller fixes the message |
 | `CallTooLarge` | Raise `WithMaxContentBytes`, or ask for less | Caller decides whether the body is legitimate |
 | `CallNotSignable` | **None -- terminal.** No signature or proof could be produced | Caller fixes key custody or the signing window |
diff --git a/website/src/content/docs/components/exchange/multi-tenant.mdx b/website/src/content/docs/components/exchange/multi-tenant.mdx
index a0db0486..b4569704 100644
--- a/website/src/content/docs/components/exchange/multi-tenant.mdx
+++ b/website/src/content/docs/components/exchange/multi-tenant.mdx
@@ -227,7 +227,7 @@ Since the default offer signature algorithm is Ed25519, these are **public keys*
 
 The Exchange exposes `CatalogService` (PushResources, RemoveResources, RefreshCatalog) for external parties to push resource metadata. Every CatalogService request is authenticated:
 
-1. **Verify the RFC 9421 HTTP Message Signature**: The `caller_id` field identifies the pusher, and the request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field. The Exchange verifies it against the caller's published Ed25519 key in the caller's WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Invalid signatures are rejected with `CodeUnauthenticated`.
+1. **Verify the RFC 9421 HTTP Message Signature**: The `caller_id` field identifies the pusher, and the request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field. The Exchange verifies it against the caller's published Ed25519 key in the caller's WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Invalid signatures are rejected with `CodeUnauthenticated` and an `ErrorDetail.request_auth_failure` reason: `SIGNATURE_MISSING`, `SIGNATURE_INVALID` or `SIGNATURE_STALE`.
 
 2. **Check `caller_id` authorization**: The Exchange verifies that `caller_id` is registered and authorized to push resources for the specified `tenant_id`. Unauthorized tenant access is rejected with `CodePermissionDenied`.
 
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 51c8e36f..336b34d6 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -282,7 +282,9 @@ When only the originating signature is present, the requester is calling the Exc
 //      confirms it covers the prior hop's signature (contiguous + ordered).
 //   4. Counts the hops against max_hops / max_intermediary_hops.
 // Any failure rejects the request with CodeUnauthenticated before the handler
-// runs. The handler reads the proven hops from the context:
+// runs, carrying ErrorDetail.request_auth_failure (SIGNATURE_MISSING,
+// SIGNATURE_INVALID or SIGNATURE_STALE). The handler reads the proven hops
+// from the context:
 hops := helpers.AllSignaturesFromContext(ctx) // sig1..sigN, in chain order
 ```
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 40b096eb..e9c4ef8f 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -251,7 +251,7 @@ Line 3: Legal/contractual enforcement
 ### T-DEL-4: Forwarding chain forgery
 
 **Attack**: Attacker inserts a fake hop into the forwarding chain, claiming to be a trusted Broker to gain access or inject misleading provenance — or reorders or drops an existing hop.
-**Countermeasure (protocol)**: **The forwarding chain is a stack of RFC 9421 HTTP Message Signatures (Ed25519).** Each forwarding party adds one labeled signature covering the request plus the prior hop's signature, so the chain is tamper-evident. Exchange verifies every signature on the request against the signer's published public key in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`), the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and verifies the whole stack. A forged, reordered, dropped, or inserted hop breaks a downstream signature, causing the entire request to be rejected.
+**Countermeasure (protocol)**: **The forwarding chain is a stack of RFC 9421 HTTP Message Signatures (Ed25519).** Each forwarding party adds one labeled signature covering the request plus the prior hop's signature, so the chain is tamper-evident. Exchange verifies every signature on the request against the signer's published public key in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`), the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and verifies the whole stack. A forged, reordered, dropped, or inserted hop breaks a downstream signature, causing the entire request to be rejected. The refusal's typed reason (`RequestAuthFailureReason`) is deliberately coarse — missing, invalid or stale — so it never tells a forger which check its request failed or how far it got.
 
 ### T-DEL-5: Scope pollution
 

From 54905265beda89670e216ee2eab3ae5db70b4ac9 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Fri, 2 Oct 2026 22:35:00 -0400
Subject: [PATCH 007/164] Make the Broker a purchase party with
 BrokerService.ExecuteTransaction

BrokerService had only Resolve, and the contract described the agent buying
at each Exchange directly, with a Broker on the path forwarding the request
byte-for-byte under a stack of hop signatures. Implementations relayed
purchases through the Broker anyway, by re-packaging them outside the
contract. This defines that relay, additively.

BrokerService gains ExecuteTransaction(TransactionRequest) returns
BrokerTransactionResponse. The Broker verifies the agent's request, groups
the items by each signed offer's exchange, and sends one
ExchangeService.ExecuteTransaction per Exchange signed with its own key. The
agent's AgentAcceptance per item and its AgentRequestAcceptance travel in
each sub-request body, so every Exchange still verifies the agent's consent.
The comments state why re-packaging is safe: each item is atomic and its
integrity is per resource, and in a result item the one signed value is the
Exchange-signed retrieval_endpoint.

New wire surface:
- BrokerTransactionResponse: items in request order, one ExchangeOutcome per
  Exchange contacted, and charged totals per currency, never summed across
  currencies.
- ExchangeOutcome: exchange, offer_ids, agent_identity_hash and
  subscription_quota.
- UpstreamRefusal: exchange, the Connect code and the Exchange's ErrorDetail.
- TransactionResultItem.refusal = 14: an Exchange's refusal of a whole
  sub-request rides on each affected item and is never turned into a Broker
  error.
- DenialReason.DENIAL_REASON_RELAY_NOT_ACCEPTED = 19: the provider at this
  Exchange does not accept relayed purchases; buy the offer directly.

The Broker's own refusals are non-OK errors: request_auth_failure for an
invalid agent signature, and SIGNATURE_INVALID when requester.domain is not
the agent's verified signing directory; invalid_argument for a malformed
request; failed_precondition for an Exchange it cannot route to or does not
approve. It forwards the agent's idempotency_key unchanged.
CONTENT_UNAVAILABLE is documented as not a catch-all for upstream failures.

The authentication header, ResourceQuery, the request-recipient section,
Delegation, AgentRequestAcceptance, TransactionRequest.idempotency_key,
TransactionResponse.agent_identity_hash and the Broker protocol section now
describe this model: the hop-signature chain covers requests forwarded
byte-for-byte such as discovery, while a purchase through a Broker is
re-packaged. On a re-packaged purchase the delegation holder binding and
agent_identity_hash use the key the AgentAcceptance verifies under, and an
Exchange scopes the idempotency key per Broker, requester and key.

Generated code, the descriptor, the SDK types and the validation corpus are
regenerated. The shared-domain ratchet counts the two new exchange fields,
and ErrorDetail leaves the out-of-band roots because UpstreamRefusal makes it
reachable from an RPC body.
---
 conformance/corpus/cases.json                 |  807 ++++++++++++-
 conformance/domain_constraint_test.go         |    2 +-
 conformance/reachability_test.go              |   19 +-
 gen/descriptor.binpb                          |  Bin 625593 -> 642223 bytes
 gen/go/fora/v1/fora.pb.go                     | 1045 +++++++++++------
 gen/go/fora/v1/forav1connect/fora.connect.go  |  193 ++-
 gen/python/wire/models.py                     |  218 ++--
 gen/ts/wire/schemas.ts                        |   24 +-
 proto/fora/v1/fora.proto                      |  291 ++++-
 .../src/content/docs/reference/proto-fora.mdx |   36 +-
 10 files changed, 2161 insertions(+), 474 deletions(-)

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index cda42b38..3dc039e3 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -2889,6 +2889,552 @@
       "exchange": "x"
     }
   },
+  {
+    "id": "ExchangeOutcome/exchange/killer#0",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "https://exchange.example",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#1",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange.example/register",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#10",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange.example:0",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#11",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange.example:99999",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#2",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange.example?x=1",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#3",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "user@exchange.example",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#4",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange.example:123456",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#5",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange.example:",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#6",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange.example.",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#7",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "exchange..example",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#8",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "-exchange.example",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/killer#9",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "[::1]:443",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/missing_empty",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/pattern#0",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "two words",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/pattern#2",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "!!bad!!",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/pattern#3",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "\u0000ctl\u0000",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/pattern#4",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": " ",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/pattern#5",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "exchange": "-5",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/exchange/too_long",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "string.max_len"
+    ],
+    "json": {
+      "exchange": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/offer_ids/too_many",
+    "message": "ExchangeOutcome",
+    "valid": false,
+    "rules": [
+      "repeated.max_items"
+    ],
+    "json": {
+      "exchange": "x",
+      "offer_ids": [
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x",
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ExchangeOutcome/valid",
+    "message": "ExchangeOutcome",
+    "valid": true,
+    "json": {
+      "exchange": "x",
+      "offer_ids": [
+        "x"
+      ]
+    }
+  },
   {
     "id": "GetAccountStatusRequest/exchange/killer#0",
     "message": "GetAccountStatusRequest",
@@ -19722,7 +20268,7 @@
     ],
     "json": {
       "exchange": "x",
-      "reason": 19
+      "reason": 20
     }
   },
   {
@@ -19859,6 +20405,265 @@
       ]
     }
   },
+  {
+    "id": "UpstreamRefusal/code/too_long",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.max_len"
+    ],
+    "json": {
+      "code": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "exchange": "x"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/code/too_short",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.min_len"
+    ],
+    "json": {
+      "exchange": "x"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#0",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "https://exchange.example"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#1",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange.example/register"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#10",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange.example:0"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#11",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange.example:99999"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#2",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange.example?x=1"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#3",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "user@exchange.example"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#4",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange.example:123456"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#5",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange.example:"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#6",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange.example."
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#7",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "exchange..example"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#8",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "-exchange.example"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/killer#9",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "[::1]:443"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/missing_empty",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/pattern#0",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "two words"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/pattern#2",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "!!bad!!"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/pattern#3",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "\u0000ctl\u0000"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/pattern#4",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": " "
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/pattern#5",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "-5"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/exchange/too_long",
+    "message": "UpstreamRefusal",
+    "valid": false,
+    "rules": [
+      "string.max_len"
+    ],
+    "json": {
+      "code": "x",
+      "exchange": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+    }
+  },
+  {
+    "id": "UpstreamRefusal/valid",
+    "message": "UpstreamRefusal",
+    "valid": true,
+    "json": {
+      "code": "x",
+      "exchange": "x"
+    }
+  },
   {
     "id": "Usage/consumed_unit/empty_ok",
     "message": "Usage",
diff --git a/conformance/domain_constraint_test.go b/conformance/domain_constraint_test.go
index 5db0cf85..be8bcd34 100644
--- a/conformance/domain_constraint_test.go
+++ b/conformance/domain_constraint_test.go
@@ -43,7 +43,7 @@ var malformedDomains = []struct{ name, value string }{
 
 // wantDomainFields is the number of fields the shared domain constraint is meant
 // to be on. It is a ratchet, not a description: see the exact-count check below.
-const wantDomainFields = 18
+const wantDomainFields = 20
 
 // digestPattern is the "method:hexdigest" shape. Several fields carry it, and which
 // ones is read from the descriptor by the membership check below rather than listed
diff --git a/conformance/reachability_test.go b/conformance/reachability_test.go
index f6549db5..9ca15a8b 100644
--- a/conformance/reachability_test.go
+++ b/conformance/reachability_test.go
@@ -1,9 +1,13 @@
 // Package conformance — reachability_test.go holds INV-4, the orphan-type guard.
 //
 // The contract reaches the wire through exactly three delivery channels:
-//   1. RPC bodies        — every service method's input and output message
-//   2. served documents  — the manifest a participant publishes at .well-known
-//   3. the error envelope — ErrorDetail and the typed failure reasons it carries
+//  1. RPC bodies        — every service method's input and output message
+//  2. served documents  — the manifest a participant publishes at .well-known
+//  3. the error envelope — ErrorDetail and the typed failure reasons it carries
+//
+// The error envelope needs no root of its own: ErrorDetail is also reachable from
+// an RPC body, through UpstreamRefusal.detail on BrokerService.ExecuteTransaction,
+// so the walk from the RPC roots already covers it and its reasons.
 //
 // A message or enum that NO channel can carry is an orphan: schema that is
 // defined but undeliverable — dead weight, or (worse) a wiring mistake where a
@@ -23,15 +27,14 @@ import (
 )
 
 // outOfBandRoots are the delivery roots that are NOT an RPC input/output: served
-// documents and the transport-error envelope. Each states why it is a root. The
+// documents and the never-sent signing payload. Each states why it is a root. The
 // test proves every entry is BOTH a real top-level message AND genuinely not
 // already reachable from an RPC body — so an entry that becomes RPC-reachable is
 // flagged as stale instead of silently masking an orphan beneath it.
 var outOfBandRoots = map[string]string{
-	"WellKnownManifest": "served at /.well-known/fora.json by every participant (capabilities, role; identity keys moved to WBAFile)",
-	"WBAFile":           "served at /.well-known/http-message-signatures-directory — the pure WBA JWK Set (identity keys + revocation_url)",
-	"ErrorDetail":       "the transport-error envelope; carries the eight typed failure reasons",
-	"KeyRevocationList": "served key-revocation document (thumbprint list), fetched out of band from WBAFile.revocation_url",
+	"WellKnownManifest":      "served at /.well-known/fora.json by every participant (capabilities, role; identity keys moved to WBAFile)",
+	"WBAFile":                "served at /.well-known/http-message-signatures-directory — the pure WBA JWK Set (identity keys + revocation_url)",
+	"KeyRevocationList":      "served key-revocation document (thumbprint list), fetched out of band from WBAFile.revocation_url",
 	"AgentAcceptancePayload": "canonical signing structure for AgentAcceptance; never sent on the wire — it fixes the field set the signer and verifier canonicalize (RFC 8785 JCS over canonical proto-JSON) to derive byte-identical signed bytes",
 }
 
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index ac112b49ae9fb55f46341f3977c066666228f06f..3afbc7490c10c5f515b0e74f913804fe32d388d4 100644
GIT binary patch
delta 60452
zcma&Pdw5hu(g&P5bLO0xGc%c)levTd$w?sG69fSj2oix+6hRSh>#h*O09ixACPC!=
z_T2$w0dY|-Vhbu>Py`e~6bD5FZ!3ZzpdyMO3WACvDBe)<`&D<JITQB%p6BBaP4%g+
zuCA`CuCBh!3#{Fm#qFogaLrI=xM!%(c@A9de&>fs`q0&$jh)pEx)EbnKcvUf&;74w
ztJ2H7z|b3#V<$CM)#m3~t`7e0`Q>Bl8>-50?N)y6#KxwEWYvV>;`?R#a2u6Pnd)I>
zml%e3q^w-BRWU;6R4_kq8Q$b=)#Iz`#wFR>WuDjXead5;*V<64>&GPX6*T9&#P{N5
zT7w#P<@X=Xi_LC^HYV9rRa2Yq=KMt2#1}l#{L6BN%ktSS*CjqfA1ScX;c1?-Qe&QC
zw78_9{+46|yLz2BkA2zJlV|iWJT*<p361#*oA(b-m%sKhd^S6cpzdzg+d-1iVUwDw
z>n9|KJE&%<p*7VvRn<1;tGrS$BccKIjZMSFM|N_y=PGM~+X$UQ>Hii(|8|D2e(cy}
z!^oO3U=VbLEEc%j;i<}SFaI`pOru$D<W-GJ)-?eS|E+17GID%X<M@0xtNVv1pG9u=
z#9b=uaI@!vbl>Hk!VbzDE&Z3Bo+C;-v#ntb95i%r<&crX2UT7(Y$*OWr1Hj*Lx+tR
zSvg?9psPj<8W_$?_uuVl5mQ#U*q@Jju2#%znSR*QJzSFMVwO}Fj%r`V_8s+v{2#m$
zGIZ0^BIonc^mj)+zj-2WR~d?yV`?W{Irl5B?o&(I?w7Tp=_|kS1U&4aVR|TKSc7g&
zHcYV^l7F9+Y;3Zss~Q?=l8si=_@vcXGp??xX;MSdsvpY>CRQ~xO~GGPO;+W#BQ6^@
ze9%Cvrm44KSym-U!}@II0?QV3Z;RLAVrt*$5G%JTtuZwX$?7I+;-pvu6tOXB)liH0
zPviKiiOF&{|2t1K3<Awau!%`6S|EB3g4YfoQf^&R-!$G5MF#uyHZ>j@e${}+F4pj5
zV}0$dNvo=E44Xef%Zqfenvx9@YS14PHlZ>0=_W0YoxDx;bQbmdSar!7bh{xV3-AN0
zn_Sf}COO8cuPaAC+0ySk@t!1{3?IX;AL?|@s)sbKstgGSQ?SRZmo%*x$bB~T9-tAM
zlNzd%S5KlbkWwB~(^ySprdVUE>dNXTHFdG-K~oYKUajS|Z%CF+tg5~RvK?cMZK$8n
zOwtoUk%U?<YFsb^+}fj1U0>Ho1JzWI)@?*<Og%=tt{%k=RktQ<t*S=5x!$&3WOSi7
zMqJ`GS~YdN<<a$HrgWiN$*St{_@125zELz@!u6uEx;i<rsj9A;4+yU!>0%t&Be!|t
zN*Bp2`H$-H=vJmd(hQ7PV^h@>>(;8;nlaY+`pHQWGYMDr!5PiiWblzCpK@yu2(oTd
z^jK~^G_7h}RZSffJzE1>+2WZvX>@H(BQ<|Za!RAsp)r{h{G~c#^eZ#N>ZrvfH;x!o
z_NQUP%jgdfZK$6#4kD-{ZA*@+sp7_TOENi8m{fg3%{VAwt>N^KbkyQZLC4S`bWD=3
zsT+sBPP95qn3Sq*s+m}uw64jR<oIOOm}CP~on&rUTw|yL7fM47GzQc<_Tg|nG`N9e
znrsr5mdtJf%2HETZjB%*^S=#38j~DbQ%CAWx@V=DYidKXwrUDKHr11Lpa&VN=Q1;z
zD|SaR`HZsJGOCg$M2*$)@pPohM|^VC6s~MFjfNG=8c}QX6j_z+-k}$`%F_qF^Bi@h
z`k=?zT5UH#?kTH!7i%(%Jjn%<t=*72IB^UX9>X>q(guQvlF)A9@3Qpz)?}ceW-NKm
zNp%o*`nA)Z*+FG{2jOt<SG4~ziy>k-)v5_eYeKTI5jqDgkj5yy3H7IC3S3l;8Pfn1
zF5zY@k*<J|22>^P_(W>e5lI4V*PGo93mVx(4!z!LsG_RC#CQ=pd~nUg8gKv)POxAi
zWmQdT8eiYg$knkfIXR>Cq?&dUU984>UWrC-N*OU?HB5qrj;^U2g8_psacAJ*V{k;H
zVxn;x6hf$Jf`wJ!AG<WJ4Ni}VX+2$`6E1JUs5VqBN69hOQ*1?COO~B-X$d1}c&Jc8
zsVl$K2Hgan*Wak(Ra~a}1M8j8s>^<GY55Yzg(^R|T6DHSRQbWxYp|?>kH4^OsM7Tp
zmllyY3YEId);5SLzqmT|F&4XdGXSS4>A&P_OI%&2DVc`cs5MP#(O%YabF}W2#&#F4
zrJCwYg_Ra)Z+D%kXhjlBMWvaFb&(CC(oALGNMo+3<T2Gb3bR^jcXgfPRPvzG9L4G<
zD|t|9jxxB)nD5~&X{NeJNgrsbEl|oADO#>X(@<-X5-PMo)LNu;yvTS;G^LyB682!B
z_H@@JiWZkhI_fM@66H3CI!ly`t~OSxhN2?QSgzzeoBp37t%DL;u6SD;V+~d1L${JW
zQ>=~ewo*~JP^l23vr;iRWdcEJrP89ncofY8cA460MOnu#FVP-J;V*-lq;iO0wc@v_
zxIksKV)DVIub{G8Y1zsM31lx(X}wNy8xg}t-@UVZCi?KSqMm2u8GgG+%|+oFMeW_Z
z5Y*NxYM(aEOCir^6m_Way$hWNpD!vocevTyHrlE1i;6d9JWM@sk-~0b6MJe8oR7c3
z^(IB}@=gE**P9eyzy{IICM6U$rtpgR_zL@LsrLVry`m_7i9;QIMG3@g5LI4L@>>{P
zcolH}I`g#C%16F#i^`=aX!LbkQ~*KYbz9&7LE&{0ILQ^Dm%x^nb3qX(1ogVoYOt|d
z;f<iew)BE_T31)aHm4Og#Ia5BTau0&t!z_@FSJ3br1a@)YzuN4(E88W+4kBdWqKgJ
zse@MPNsXYmkIy?+)x?RlaG~%<^#~C&QBWoZ8$G2dS%z7njQ%LM1~)m83sr@WZWh+a
znFh{Cx;AqCHHc7zqq`>AaBEF9`(TG2>*>r76x4uBmfs_OGTxET+i=jem|fYSGOeiM
zb4L~`WbwJ;ZzDSo<p9{Wiw!~+pDSI@GoFN9LgW~p)9JqD(9nUW9U2}gc1Fzu8mASk
z8pJS>ZJ$=!cQEc3W1^Yb8AbU+Q48j<`cvNJ?3183&c5uX{W*nlTi-MgIivW5(YO>1
zM9wJDIJXjju#z)M;tyDfX?VeyhQZG@wO<wWtm2Uh!OKwZH$^jn=Cjc>)APHcZFU(&
zyif2N)7?r*LBwKOkvG=UrRb0eiiCv%1S`|sEn3O`=pZ@WT~utG6-EOsob6`w&-48<
z(4}~xEwkOy^Z`OLv)$740fN$Ox5@n%xbcG0Y<F=R<30sushHY4ch2+a!9BEuD>BdR
z%@<~=kXbHtv%mM$9_h8vEhU6f5L@V$76}l<7P?`P?-N^OI@*11<w3Vv@Vbi?KjCe`
zs(NY9r%)zD3=9ys&n-m^5CraXM`K*X03qW0-0=t9Lc~<SMZDOpKHwH2mSw271SZ8r
zEQ=uG``sks3eF2`{b9G#s-UaI?!7>}r~-g+j*5b@!8d=H3l|`Gde|M|lO;Mq7XPrj
zpr!F|(J6qBvA~7eT@{ZxB*>f}bNhv#K^2gA%pEV06loHB%w5{f_>t64Q7}MHr9Ze(
zyUkVcltY8e;3>CX3^|ZM<0*FwVHE&D<0*H$_FQAQlUn0ut|D(iPXMU7##R=9sJX^g
z7J#U^CZjC8x9g>{001xR9Ue3&%X(W`@D-HS+sXnEl-857Y#<-*HnolJoDW!jUo9Ql
z==Pe%wdkE&c<_ULwd>0^*#nJ2P}*c`3P4cWM4ECnuY!+T*ysxFnu;wpFK)$!UTv|5
z1t1~W!vYW#w$QN5QaK5X?_25bDm0%`@s>k_hW0JDU$|>GAKJIvEqN3JPHAZ0a+h~C
zw$Zq_3EY*wu)j9MRk6#VL1Vki?dNd}A%Txw?n2?708%A4+|yHn2IRRn{Ys@)?&`PK
zp+RH2*WrW4cCWi74+ub##&)l}TX*A5$kl^@V81)(C@UMF%`x}8JyDXYhsOgSyOlO<
z=%w1wwjvS$%ng~oLI5ATi%X0V92pH9WPJu|*A*RfD=kS6fkQ#uL3d%1@fcJYFu+gQ
z+JV~g!cW~w3yH)_-K|<1gE<aZJItB}X;%~;b}Pjahk~@j?zW}IIF5rpf6fjJ(rSu7
zcNn6W>~mrWnKM#J?YKMVE|rb@llFe-xZ9K9z2fuz*X)W*wd)JNh6m*IQHZ)<lfhgJ
z`Ytla6Ku<+T4m7*x5A@VDg@36cZZHV$O8=U6tgbV?k+mzR@zBIywu&Xlkq)92T176
zPwAbPX_H)qKe-jI2ULo>Kan2X%#qNYUs%=U+Ni=`+zKBf;81sdp)rES0)(CX%09VV
zyT<y}VTmHjUx}py2yuagL7%RshhL!`bXn6?rK4nuLdfZAmokzJp~3slQrT5kYWu8N
zs?tqjQP4O`?a|X%C|HM&pR1-X8>&TJ)?78yLod+gs_5Y>WRt3?EmU(JV*ePXZ3!<_
z5mrHha5-?_i&Qq`Dy@I{B303;2`YtP7pdN$4MIAL)NsVOh}Xf#`&9PgRa)<|`<y!5
zW2;^<DXPL_tMJ%KUI)zF&x)_s#+BW#3bhmSfO@~$N=(LZe`w}@6_fE*yb7SDZ2i^R
z@PSKJ>5^52Y;LJ4Ljr){WvSY>lVp@^ZmC*UZoH<U&mL1-tLD6}x(c4tEH?i}Pb@uZ
zxYphsTB{<KJ|B&EsQ>HOz1M0z%hsuK@<Ab}u2X%&;Q|EJbt<CZ9=r-Zu4g}AtMw{d
zZ};BAozQyKo5vXeh$`#Vc*5w;tDyHA*iF}IJ<2vXRY-d`sPK*?a}V$R1~nEp&f`@;
zU?Y3!I<0%zMyCpOccY3moTx(G-KfIV3C5tFFSC}{YrQI7wgu)<$icj<`h|=Eg2Kyc
zsc<j=LE&W;%KJ3UVII=n*VtXxYis+x=8&Ke>NQmc3cvx0*HpRE00<JVsR(?Rx*>A}
zP&?I}bow7RXb-x=J4uHYkpI(2((k4_{ux?Y_O2~zl!Dm1s+{Kmg4nyHHG_B^eB8_a
zc9V8##a^2ojW1dD+Ux)%B-Io$0SF3vNhbe+si9ej{$TpVP1;sh*+EtDamk?+l@6+i
z#Ym6<QRyHx+m+V=^eH?1SFKywr>Y`me~qi!r)oq5<^TyvZPV7M<W(U1BdqdfZ9v~6
z4yPphBdTA7R2rB45w)m;Y?NewMD5&#YobP?KgPD)to5uo=1`ys{Fps@zyaIG)Y7h!
z0*U^Z+WmZEC5@g&Zslv%eWdne<<|}gjY?HNclCq=5?|Xk2M{E_CYxLB<0N!bJF6<U
zd(wrYv?tXR{uU9L#v{$M&PY+Dd6q;*OGA7`M0Qq<-|i6+85Qt|><?9)?hz50EJMAi
z=oXL2WDz2=X&#EmJ}%@;z@xqCQ4$3^(w8N*8$;y)Y%VBDebeI;Mx*g4^-T|qW{;47
z&s5)L?=)%emA~!O@uAM!9-oMjHN^)G-u56y<}tsf7^b=>y?c_@+EuZ~BOMJ&F&=w7
zQt1JL#vYH!=Q(uO0F6DKw(X23M7w@d{eX3ztgWp0z#-uWi4PnSevtUUW7-Pj2Z;|n
zZAy)eUf$_|sUA;9Zqq8%isKHA07mb)C!<0E&^YcX5^;*A1VH1sr~Eu)GsQZZ5;WDH
z(|7(ut5hm}c4!1a<7ba_0YCzcpFJ5R3WCPZp6)%2??hK}F|N#)(oXj~>yXF=iL)NL
zD%F%+kT~lpK40o#E=Zj9^t#YEt8q3$raE6s_nE4t-2LZ6SQ0G+BJ(xBJ$4}wnXl#9
ziWvft`C6f6>@zr#u&J%ml-21ow`<pXQuxy*69$=8nqOo(G$jl&tF(kYx?zx6rD1f1
zUWTEUtF)5Unn+myomS$g@}#DA<!don1V8Z<716p&QzFPzXnfr@=(eV0T_Xz=c|+`z
zJ2b5;%EiP0EYMl2$;B5yG`*IZ=8G>(=BE0*CKg{bvlEo*gbCevUdyN#arC?<7hgaI
zrRO!o)A#z|Q(=?4wVW5ySKp~&7T&F4@pTW4l}<i&FZ=Os?cTn7ZPF+N>Af~-fFQkB
zGkHdgs(|!ft)z`{8K;1cAF{3Uw96|#bSO|#=tGABdDss%Q><Zh?qNUFkSm!Xm_XMK
zuwnDHnSBp9B*>i|a7d89J)oIltaa{h4`_%tFXc>tr9&*TKpR|f$f4i{g+mSnn)(iD
za@Ntg`#q##)>%f2f1OrNC(~?!_PEmbq(cKCfO^uQL6hG}Tgs?|c28;uL??0*z&*`w
zTckDgJMB>5=>vxXIpEWpNL`{;o<7j5Vq><>NkB7a>gf*mYInF(Gj%1(6<_B*ccvZ_
zjvpY}ovFj|)8qpX?rx@Dc7qW{wt&D{zA%-PUk@K?*d<5@qHM&q#+{<Whz;-6m9_=j
zRck=^t17W!fjtuJL{(#B0{^c`pSMK&yHWuhVK=&>ql5SAQsn@mEBERdy&!*nuMWM~
zNb{yn`KyQ12OrQjxhfuZXn4`XhjqD}1rlgHtjC2{1PB@r>xllh3mWjotJ3?HYCBvN
zs~j3W@UhC_gS_)9U8=s$z4Iy^s{f?WE_mlP?6Zfp)fH<T66BoMI3&n9uhFrCEd)x=
zd5zwo6Srkufp1=?ixn{dbYPt>Ef^qbuG6Ij14PYrx^2O_0-wA==N3E&0Ca4F!$SZ(
zY;brW&%D9u26^TU)Qx}T!h+$1KGbt&dDAy8)7*OaL*3ibc#*;)FPZQs>DpCVUssP$
zAVJ;*l!DqPx(tf|g4!oKCfi3yuwJsJW4e-8u)xh8eAt_xKK-QjFIPE=?D}M~$8=w=
zBu7EfF+E}$50X&56cin2PpsA+DnG8vXdH#8b6ju56YPY8I>+@+oke=XOW?Px>1pk*
z@^77X$SS|pWu6B(grsBjzKHC>OICR{ecl?4xx1dVg^p5GI;*!39tj{Soh8lNDmn+b
z&h(~#T&KO|>N?Y#=@OaVOs|~zz1;L>dNK2FjA9ju{M1Ho&gS%q=d|92xe=)?%H$%b
zhIn7{Ds5S0hgQl)Zq~FSfPAi?kC4MlUbMU$VgZa6HnAC-wRej)dF9#|g+SUwNdE?V
zKmz!3`qnMlU9RGny$bIHl~OTbZ9wWCZb94T&AHQ;E`3$&rG&S6u~vVX+Tcl$?d+D<
zwJjyvy>g9?Le$>wg(q4lkgzCz$E%!VSH7VwNZ~KBPDgG7c<*@OH!-<^7KRmg)=96M
zd<QRhZziO<%d4JGa~m(&Gt&(r?Dncwb`iR|$E&u<E&}a$y=rN85oo=aI;RX{`u;gZ
z7_q(Q5QCY0;8jbqiNRy-^Qzsli{NBFJclv(jE}r(dj~5u6CtI#->Y_T%4WJ@)E|4*
zcG*QR)&u7-hIr`UIamm9K50gOrW@hPp>x=W1OC*jwk7f@TZ)JYKJ%)@*-c`GKYR}T
zJOuUU5Q`$;agHovrh4?89>rmz+2r5n<MyRDrS`})i82h_S6=m^>>>=@aj%GGIIqCM
zz<upi`($Hb+`h>cKd>-vC(fyear@Sb79SUi2)j~GdzD|<&0Dp{Qus@l4l-nD^t89g
zl9~wbpq=&>|B}%}#mzPG2cji3QE>}R{L!lxW*4DDKY7)n>>|+qnbe{uw-}KA&8y7z
zschO?TK5$Gwwa*x%x?}8=ru5lXZvh(a0@1W_p0TRyjwDH)=>do1SbA)bcYv#_EcX+
z5qS}$I<3y9cFraSu}=48bd#e&thf8JniM1XFQ3{gQ&9}$OrKhjU4$lQ`P7Sz0leR!
zJjcf#-lh$-=J>>nh2f=i(;Od?5m&>{AggniFXtW~Q@3lw%)5M^Fn4=At#h|eDdKLg
zROE92^K7RFAZXm}Yh7qqXb7nqQ=R8yYqo2}Me}?L5A&!LNb?8@5ivkO^L^~w?V43I
z-zOp)D&@sMD&|NK&;lPTe_JalTHsT7gbpMcrUgW)j3c363w^BqZLPd$p+kxKwUCeo
zqF>0|Fdwp2FTJe|2s0l}xsf;L*_!)&EVM%_E4t68@Wd;XqUwD<Bn5|XBy?x7kKMFG
zyRvApgGAj~Oh`yBp$?!WKKAAg?drlMKIw;rb6-M8DUO8h+|PRL)TR~Q?+~Ki+)p_D
zI1YOA0DFI@*1zxppG;FCtpc0}2&WgvfkHgU&VNU{u<${9Adxo#&Vz(=3CDrqEoFDS
zqYW%t>Qi_!16<OwVJYE|P>@=A)R(h@ef^F$AoQru6X!zViIrun-!84ZaG6ixt4j|G
zQFECOvv*riM^=RPCg$wY+7&+Lld}m5f%6#Qke%^N$>VJ2F71NC$9)RV7f~T_9w(eW
z90w9v&f4tODhikT6dox6ha|F`aQbo_NaP9j&)r(Tq9<&LAol^BCkW>TghM`4d(xNl
zDciqWyT0^EpEras#jX0V&ROGAp7p85S1v;bJj;ivi<hzM_h?`CSnE?e@hDk*0?B85
zaD@~%ixRN6j!J%}7}-aY|EuYycd;8+@v2Y8!6?OWyy}y2FhI!WRi9kl00fO!eOTQb
zg9ii+e0`HWxmWwL@0$(@S|GjYkf3PmO`j>keN+L7H+_kGzQpp81h=tWA842N-R4lB
z_0cwm0yVSECs#M90t(xFSlwL5c>uJ7UAIrWq5lqtf*TZe`1~Y05BQ{sVTUiwll25r
z9UqeQn<*0WArjLL`jkWI6Z^E6-J|iRSQX#{$Q*PSq1f!8&lIa^d<B_<KH=tx3If@K
zzT!jhuyg=`3XtW2>VD!=Cm1*`si=mj%`kG_Nar5Vw&<lZ44x8ot2juh-DfBd7^?9&
z&b0y-gG*)U?~iDYsXZ1Oh+1eY#W#p;iJ=b4DgiI|8)|=JC1n{58r_xY?O$r0-Kmv^
zJO_bNbYP_+B?%CfRvL0!9v~u)l}5`y3#tJ5T5F}z>PFrnLO=<cUTIu(1z&#2B3gc}
zG_JeexRb(m1LLKwF_h;Fwcw1)N>BPmQ(fawAf$@Vkm?#k>KH&UwZ@RkUw~k0jUmD~
zq6Mk0F|6kdAyq06rv=s;@>qo|;>RkUVTVp=(e~>MOz(8$BJ&Ny@T`Gz6tr_@K<l)$
zp}fReeyd%T!e2ILq<CqEGg7>?A;%lFz**Xm;|&m;rH$g3GMw4x7&bVZ@gmOI3x+)K
zK^4&hmGVL_g3n^fs4NAe8;McA(ln^a*VF!!SZQ{B9mi|AKBE+jy>942y#W%IVdfck
zQ<m9}EVGgGL;9yv2*dMs8ptvqCO!8<DYQd|@^$*Y@3qg|Df}r`MEC%DhYX*f2N3iQ
z5j{#10Ypa+8PTuNQPMyvc$XsSPYtyT*9<Dz%_FkU3=t!9Bou+}VM9dHb`kXFh=C|4
zMMffPg4pMVh$!tMILf02JX#hO2IrU|B6S-J()xmkWnm$b{?breXNq8hApcc1uiPvn
z>TyH;vvD7JGCz&<Np{E2+LB=>4Y|{ULMkQskrx37IwuY6^hglqa?&t)+(KV5sywA)
z<n`pc=YDc-r&+@<+Qt1(8;VVZnmTRd3V#S35It?c9}1$BS~zXA7$_x8N`Y|uG&}W+
zmS>(e`d1pWXp93$C>uG<pN^lw;<ogx!FNjBY5<;Os$ZD_&A$qcBp@9LFJfDM)rR(*
z=2tJ^#KkwTINh&a18I3Bw%hdF?pN2ijP?*rfE>vzKO69y)}eZqU*`K!icZY(M?}^O
zAUZM2k9mPQ0T7*-<u4HKi9p_oS^ky-xz~^-<TYmbD=#t1c|)K$$Io{Drga@N$FGRJ
zq5vO)IsT}~jR8bMbNp})q9Hg3fYueFLwpDztvUYU%Vk3}C}C=7j{nljj8(LT4$!bH
z@TaSO*Pe7$EbvR?M=_LXfnR1|0fM0g{ydS928fmy_}jFl=m#_a-RozA|Inshe6K@-
zrk#8J(z5{xB<}Ug17iSrB}At$`!R$;Q+w8*b5CHsSAWS<`mA5h1woA9^M2(;jNn5w
z(Ff%aQW^Wwqc6QY?N__=4vSCd%?7`EB_Baif)RYdug-QsNN&`JJMb%eKySKX(}RPi
zvh;3EcX@ig<H!1lESp!Sz-N~q&Wcn*lz`xFzxpqi@eUbFkaXe$rU&%heLt}KjzWm<
z16zCm(f1GhdEyKKK=l0sKO$J#jSG@&KVs3K-mCf}zarcY3aQjDXK8?_@{u32G>tVt
zjP*zU!oh-5d#pe57hT53nh@kzf8-zZCu1Qc%7Zl4-=<dw^_XYmw+^o~)ZhALmK;cE
z_*;KM92x<LhQIaW(1>W5O!8ZQhikb<!B;e65?O!85yn}X@Pbs~$8>R?KGk*ek4`JJ
z9s8qSo{#|&TKUm0PsjkIN`CCciB@nD1Yj$1CJtX^D?j>M4>tbF8-YhW!~TfsBS)Qa
z+Mr#uGk%$K4D#&J8NbXq0z?~U{Kz?qHV~lzY&SyogyIwG$r*q9Ym9kh8$p@?aaiu<
zm_FY%a(Y1828z+l^nkPtfauEfKxS|$(>pzY!4=JT(9HBekuZNCqnQ>|VhuEQQ|uWe
z@y`pSpHAp|l#%nCR_Gkfynr+xV4;<H0ckz}(aO94%ty3Bnc;bX)>p{RP-d7qGcQnh
zIX_Ypq!R)Q1MHIm{knb&okl3ryU=NbGQA4}a*jtGG_o*&IsP%)B*($D#{)SpryE=9
zZQP;90|>_di4NqF1*~9?7wS{XR|MoNib9ZD5s>*lfFQLZfP5dHVsc5zR<mo0^d)7h
zojRoRs{=ma?tp_js{_~?$7%u1pg(I_fu;BByVmXi3ekbJ0jX91L1AqmB6fTLg2LJW
zVmjKw&n0LbyT{Ud_Fd;tAUCznp+JhcE+7>XRj5t?irJr2fZDBRo?`uyiuDc!n&{R$
z6euuWABYJ5pUc&5eE^obkIW;N7~YhgQLO*jb@3*L2JIefvIhc4ps^_+V^e_OViWb_
zVVdtkruJ4K=dNJ7bsK%DtMn}z3G!|sc(-=~%DVxT&Z_8uMdVCn=|gSx23KlV00{{4
zZsHq6x;ubmgHwWr_5{?MGxXjIDEmM!Vv~cjltr03G-~e$5Q;b@pu0DKsM9F{-46n4
zAZ2uf5JIFf``LkZdgto>0Y&7VQ3yi&10fL%07RYr0T~Pcgo^JE$Y6j#K9BAX6b#@l
zPnOX1wm*Q#U>Zp~MEY<jeM@`Y?HYZ^Ry34Salj{{5P)duP(a2q0MXK+fcd}Nm<SXr
zmqUTP;n_vJ(ujZ1dKV3$%ZJ&n4thoTVW%Bx{%}Ah=YfMNhXY8?KOmUHRPtrIPe;Ab
zmHN_Fg^)rD`K7H2072u+fLsv(1dT5PnDlco5didpM!>?UFN*pI7R-JbC>{m5WQwS%
z!00(Ho~{EP6!}Cz=}>U5%No?!RKxal(jVxH5)u64JD50O>oh<xaUu{AlLA06aUy_8
zfmWR%Qt4A{ZD;+4%2N&n(&$qT1=8qKfr!}ILKRRr6~NBcV%m=m!3k==1(aFA^x!Uf
zLP_Con-lVbzd7O{Klqz%8K?(3zma87bPf>F`EP-ivw|Wzrve_G{~nOhIhBa${A@s^
z5_v5Vou3Vq^y6|&Ni+=V*+Bn4OWE?8Xz!1JjHo3RWcf#+gr`t#V&M6YK>wSvE5glB
z4K{BQK6z@egeUgwicr0&!TzacHL*UL7L;+lY!Z3y>A~h)AkRHLSaMl*lgM-59u%o{
zn?CZ~w+GucYZ7_x+k^eZvR0DsjYRj1Z2Dr|@ULK&6osD645~NT>WuEp4W<+4>8)M;
z<_0qZNav8}2IT?D5Z_Il8*FK-63sDlgHWXfSc-b!!B{ZofpkMRJ)*=|&=WCULzv~^
z8`$>+6|3YqHt}_>6}#_gugU&%zP_LcrDD?qI2f<{g0PKIyb3gBaga^!p;r|x4$4F%
zHl=~In2>JZNPw0E*-t(68w-~NW$qN)&b$~%IQfgl!Q=g`uBU#nb-zQ1r}v1^_ry6A
z?}=c}lj$8j^#&#MM9>rEM*;b^-3m7JLVZ-xil96pi9*m{5rq1$px*Iqx|M9lh5D+Z
zl|h-)Lm`k>64F$G1aK9*_ac4zMXQ1eHzd>~PFE3908AiVwmO)zA?PyvhTB8?rK^KT
ziPoSEp5uC&UEN#1rSR#X%!r~8)t?SxUwSadL5;QSqu%-zMQd$gAWH?DwL!!hw-X;c
zP4z4r*hl|Y(X&CB5Je%7o(*DS>aak9$kObKKKkcY+8!X}nt+rhk$n-wJce@{`-3@;
zrN8N`AJanngE$d*C7eN+W`_gp@Bn>Sw*x^LP@oXJ9SHiwwG4o0;6N}p#1BfM4ko6f
zLFIV5dZ7NXD}_JBavmR0?`Tji=K-SL(V$$;1H`x;4MvZ{VbBqLDu7~}+OeSeRZyHp
zl4Yp(1<uECrz(qZ8tKa*okpT5AWRZC5mW{hlv(WMKj{~Y1|Xt&d;$|Ef?+YW0R*uV
zK{>Sngw>x2%BhV&KDC_)%BfA3(A0J!h^g&Qyfu*cj$MDLep$coY+DQSx#PQ_3>pEV
z+3$ifi~vY=f^e2I=uSwOCV~06=>wPQ|I$Xy&y@y?VtB9lxfvql`{(D%$P-^dWPYxU
zJOP6D`MEOkBv3@2^K%h-K0#r0n5Ks%x#?Gj>ML9oOPppXj9!u}qjg}RnI*Y#vBU(3
zW|rh)iAl$7!W1Mwm@BsC0dPoe%>zWu2Xp1tJV4ZZFxTFi4^!m3ESGQ1vv04~wTfj9
z3l#n?b9zeQ@3LHZzyK9NXjv|H=7+$vkga?oH|JT_eYk#w`9!YVHb%}5hMcPu^Zk>y
z06_w<*mnX5omi2J2znqa2l+R$;C;jOKNYUZm75+Y1kS2ljEcYk^c3rR4RD^ym7Wb*
zGAhl5;atw?fU&39!`J9T3ZKrEJ`0I2;5<zO1N}f-7~HkY7@=QQxHebr=b#WcYjd$U
z5p>Y~b!_4YeMsrLT<M$8Rp6}4MZmf|4;3OX(%hT{Ay)y*OMf~-ztBB=7%s~uZ=;LF
zHT8AkvZj44)xK-mo347&oltS%C+ij{-B5I{q;_zwUl!cb(WWKtDQ4YmHR#4<vgTIY
zro@#cx}b~;nz)SW+z#r(Z&Ayl@%6R12}&1h?dzuYWk_6iN><;3E7HY((POF1h2$i^
zXUeZl{(s&w&Aw!6@LS~6dKKNi$6adNQ|$sK`Q7)do8j`BYq9|-*I!~^zpuv)b6i8m
zeNS8}#qDp1B#V{iS7Xch<!5o}*Oo5&O*e++g8@~zF<hG*S4E@2FHGSLih5kLtxG1y
zG|~;>O5(B7xe1Q@p#1J=SAL7N525f|q?2(8A6HiS?bES%aYA0dqI;!uzqteZ=pB#c
z>X=U4pqHzm{kcf9T>;~a2!B1|FZz{b2Xdv~MIn^^K(0?Lg8)Kj50F;f$gAMvA-3}`
z`c37BoGLsl&-IB!T1159xk#kV$CQF*pqEG3^?%hD_B~>oFbbi=M{E-Y2*O8fX9W<g
z9wD0;&M5#o#@gMik0?JTZ3|?{Ngm5>#n1Z_NJzOj4NtQ!VA#=dw&G@edc|?4RdSKX
zbLFxVI3RI6SDyF<2olH1cg>|ZKf>eV^th3F$W?L5p}_-WhXxOjb0Z?dgF2vbDi;$o
zKYJP>2l!L^*-?nC`u^n5AW!&Hu3rRGKms2><+eSKX9WO)#!tED_vG_agdE`+78tEp
zl%2_yX<Zbe%9&i5)&+<vXL7L=YT}&3xu0dXj@EDOde#{xI?Hv|874Z*b(V(d1tBnm
ztG9<(%WD0_ez%9@q!Ll+EZ6NJIjH~yjoU-=h$}$QxIF}k@l&!9I%zvQ#PY`ID=KC?
zH0UtbY=;IN=9(Rn6BFuy#_Ukb)_lf@&|$7SLt@4N06E<mk~0QC)Vwn!XAFR-d1uI;
zF(P!BYko+~82!iUTEF=Y3v`xizQY2Y<(eOoGX^Sx(EJc)41Tr;dk;%PIZvf$jMXnt
z%%veuh+kMin%`6(3MqyB8cr!d5CP0B#RCv}{!j>(LT9xB<LjfWe~tcR(W4=`=Z-=k
zJsN`0_X{L|%bD>v{Xo(3kjNLKCRxn#5E3X@9ug&Rw~}eM=yMBKI+SSISV@#9)b*3P
zKgpiC1)=VfAsI8H5I9eU5U>1z{DTMi_H-!c^>nyaKkW*qL%4`@lo~)P8|haTt<%3K
z+7MFsSwAX7<qaX^-Ifa^^k*Y$S+B2XzcC~yO60PEv@wK<a+g2?xH*JlwXe9W0jvwt
zS~Gp3zPboyVlN*#XpRB{*)D3JbFZ;?C+a(_*Fti>LzWpxuZ1w*-D%K_XlfsYaz0IO
z`MYj-;va=@Jz^Out0wngA*Hh59v7>euJ>UrC+lN|9SBKhhVNkdKu8`b1Bk{Bgm9#c
zvTp!kCI>=^{(S94AVNqqd?1v6F~107(ip<sP1gJLJme7N?k*%xn*#?#50MDIG{I}0
zsm%=M%n!Q?J~G8i80`JO>k*c`P2cD<tn7&sF4>x*KkiOpVr{7Z8{T)p>?miEF5(L9
zWIX#K=FR_lYeBvyaLx?Lr&ecP!Sp32Rf9h>z^8-iy0PVdyQQgPX7WnWgh&rI{QsXw
z!5+PSl0E%pv&x?V8JL;f@SFvvbTQ{T7m#V5!~J8!s+9cVNe1ykf(S0e?989jAO>Yb
z0u&y!VCrkk#3Shk{#U=v9hn*S78+YgGxA6?=7d@4H2tk%bHd^fAC+Q2=Y%bh6$gl+
zn-j*F1=0tA(1$tUF2i~Li$I?9of9s*niicvK<&9<Rxw?_@v6CDsbnbS#Zt)tg6Q0^
zR5E}dIyWqpj6k7ebHh@}^2i|Oh1olk^&Y(dz){U}Xj7B(!cy1p6}0Dtp=+}#p%}%E
zdpPI*aQdp-^_i~JePM42mXoR)rQR<NE0w%ofIt(VSXluC&BbBKFF?>-Z1W2c{4Tcn
zB~b9YnD`aMQGH2R=`V@XMmRvPF@%H|<<eLZmbo*4puQxG+?o6e>Py1$i@C|+tE9dp
zoakqqplfU~Q+p(w^9+0BU-~zBkA%IY##G8Q#n2^fWmtJC{m4xH4_69*ibNAWV2)TB
z_KW=ifM9QBxSbeNfM|bZ7#I8~(F73d#+Bjoo(hYdcq+ic2US*u#rZmpBi2GshH;jW
zx*VfXcseY+6G5I7hlM}^^UpH=0f;7_4#P8xx)|OyVX@vuT^e72c2%OhCM=^Zd_~nY
zVay?-DxkGt;W<&25{v+;Y6t2I1wd=V@)8?Bj*XaUC0!|qo7x-UoOjdzxkF!}hTkB|
zprfa1oOEL=`{!NyqOz?vA1DN^t+q}81g)*46ST086O-Fn|GV{JW!s%9)a&hG*=yjS
z%697YFkS_{-pO9NTfe$|r&EOp?X-Iv=e^xYz2%z=aq9dY)@Po+q{kko4)t=6-AmvQ
zQW(8_n=BxKRSvvu#8t3dVOLjc(RAzi`Z`x+f7pwpJM}j~{rxOV_t)?53ji|w%q9*H
z#6Jtm-41{t{#h8i9dFW&odnp`PKT8r!)n3v-gJ7QzRcAEo=m)0lvyKXyYy5??tsae
zV!@NO(7;nI<N~D=lkfImRn%l%J9NNhl|wJZ!(euNZ#7ODU1qN)fPp7(upprKuK-k6
z)sg2N1HXxvypj!*YZ{YXtkKEps!4dOsWo@u=Pn%N8#wY|CO)6w#UeaD29lUYs^C$Z
zoY%DYdplW67SY`-7mUaBupDa?ixE7BCSRQ6k6?k+L@avv3JDUZs%xCgA5xNUZejV8
zvhm^H8=J7;p*gQ{Qf(8TBn%6$<IuA};yo+8pMy8Ph(YK1u4d8^LKb4RAFF7bn5?>`
zktPnqnov~-W@sUWho7jgbt#8oyq7T%{UGvUp(cecXC8XJM-DFLJNb=22V~D>Rhh*Z
zsNfACG*eTJ2h+OHblS1E)ifC`^2RYj<FOvY7^m<Okv*5ua&Tfz^(|aexZFu|<PcZa
z*W&FiJW9r0CzKJY3vCph10YoQv~3pvp}MEZF38UTgr7SdZv7+t9Bt-M0p-WkAHwIW
zeYx|MMX=K!!fnd3i$LjzaMwQE_7gNa{X(|if_=Y8@748}uzX<!U%<gHVfn%eK-Bw%
z8~`@E$anxwi==P3SAWDcY8t|P*$vuIo)(d5Wnh8Gv`9;lJ_5*VVL?ID1wc#}(;}r}
z|As)}tfxiVU2SZlMOuOa-&v9LjrZyOTotpNW@t}&R>aSPS;9gyvmzzEC0$zS&5Bg?
z<7<ut`Q$kfzUE*j7VBEqIT5+!z$a9k6Ol^}fT%bpVlO!od=oe#Zh!#*FY_E0_)c&{
zE}ifdl;%a`ngbvx&5K~oaU=X#zNy_4$$2EgM%}MpAGs%j2$!!x^Z863NpHPh&vjk3
z80$RV0ThGS;)q=S0R*wd5xElvkmm4+c_ANr0(l^_IFfgP@ij>;pN8(?NV?sF`UF?M
zhi#To45>YA4-P<%CLc`zh*lnsU@m=}d~XZfyNl$!mEOHnf6NtG6~T=c?r~cX&#NQc
z<Msvs;jWHIwFL;0t0U6m0tCs`5qMk#G^*Ny_<Ama^}{a;yXg^q-HpR28I^7E8Mm9|
z5}M_o#6xi~Q|W+h-yobI3Pm|9zFyDk!Htv0zA#=yqRlfdjlvmC5igYCnVZHYydlT@
zkLumaz@@N6@XVQ(F&aR0={Zu75xhsRpEUd1qxyAy)3%&j@MAjZh`enH5ERmpVv))K
z2ny*)$IkqscngAFWWS-&iWeOUWJWJW<l#`@fWnKBusEp#km^KQ7a2Qg4s1b2vYFko
zOy5<p*&#tDve{vROk{IJUim~7kk}mQbs;yA7Gxr?3KQuG05xB=Z3G}{zG~YDK-7FS
zV<RodMz#tYVOt*8waTpy3uGc&Z4&_|2yL}Z1Rw})B@?*`>Q-QCZ%1<eWx5KkWLG_;
zCs^Tf{o>Hu5nS}A`}75*bvs$@a*WMRdu&h$iaR4R8U+Z7J0plj>79cD68mnpeYxJJ
z$8M(z4d?ENPh2+#4yx>q;3NTU`JfKQ^L=!^V6ltM^?O^gYoE~XC_{<R27E{L_apK!
z1VB`OKZ3P9j$orUpnc50LcgHzK3fVXgcSDKQUC}F`yw*O0+8xN;1b(#3K+`$?4K+2
z(z5-?6mfS@z}?&ah%Po+0HVtN2sT;h0h|IFyMt`k3jN}WgHEHA#yaRUN@I91BCkKA
z3Md?mVDW!a^crJ$m<?H}f7kc0LxQqchix4!;G=gq5*CXqfFN-=(y0sOtic4bSV!6a
ztkQ>69Cawr9^=u7-<CBcwT?!_>vU8F6plvls0Q~d1+?Ar6>~qSKic;zhXh?%{K|G&
zzyXP`A}#q-8X!SQuCF3JdPyBYj_Vut>63c*OTKX^_(0*Ch`c>rz*Ah`MC9#hfS~YA
z1Xu9yBo9?UDX!BIrBlIg?AoXFC&E04LgZ%qC3?3vb{R!W+_yA;?iRs}Sl8PzkbI?A
zE^^5^@uxsDAqxBLDZQyL+7q)UTF0oJc1Dd-X{RIdu`7H9ucssJI~o^qR*_2ki9NMi
z?_Ks&M4oyq;5oFPA~NR*5LJF6?GpNl6xtb<_q2Y&4QHH2>5BT9h`gd+piuJcOr%KM
z4F?DcXUI|Pq=i}mT~VK5;)ud#)w%}HXV%x@nXz*Plp=4;zwrGA5|=F!#6nfbtk+Mj
zYs8;YB#6H7xHIJoGC?$gw8_YAAU%>DEejXTgGL^DBI7}!Zf}fFU432Iuq#AJI<$d5
z5nD$AAw{V4`eIdWt;kb|q&gl&r9j&bgvTI)w;wv@??)1M;yuYe7W?ESZvhLf^BSqT
znyOm7CSBEtEfxwIoA90~9$_7c7=B_s9!f)lq8B`R2Lgq@76RT{#Q6Nl)=7A97Qyf!
z{-7=A1r23lM*jXKe?=B7XLns}E2IQlJeHJiT4N_7>$Oq-a40>aiS!8<FK-%e(Sj{o
zhvn;{Je04dy_+VB_89OT7muC(L8#ccm?WRq7DJS(s-+2*Cx_@|R`Jdy#mSA0s9jyt
zh}{ku(n3|>%%Cf_a?>*gGfWv8;w$uQhS^d)r3DarHp47!Z`?)EM@v)tx0$mH)4?B#
z<-FKEoWB9ijWTN=3c4bNA(j*WtvH#klYIH&2r4T=2mWSi|1NUhW{mxWulUF*H%_ES
zf-QQ~7fOO%8my13D!hu#GkSaoJMh=aFE5vDbhLvB;%9V{KSMjI0lQ;pnjX^w@5zP+
zdXiSWBb{jsW>IbpsktS|ZrX&GPx<y478X!)+Fhfek}tqEw-gLzeFJQ9ENljP)6CxN
zH5x_*rw`PYkovz(1fZ1BRa;_O)#jPXB2z8c?6NMYLOyalUJDnDvA(0Uuy{>9Ifi|5
ztuG#cpsU3jsU-$;UFU0^8ua%`Pzssav+bCK(%4>Z2};W<Ps){~y^s@;8ogmW3GNgF
zP+Lo;S`F3BC=nQhO9Y2v{sjpB=b3WG2bhA|%ri0N)4~Wa7Dn^T_##sr9H0VP7-{oO
z^&V3k9FS$Gx4@JK2V@Zr4lFe3;J`w1buDSCUur5t3TCK$bw8lKu8v;mrgz~pGKQ-g
z2kz~KFd0%8(jm%U@|-EwsT1%harroSm=c)GgqlV&5<CoFhh=aHJ!M@osV;kYIi{rC
zx}NrFn~mc*yhIJdlTC@O&PjC*DbmKO(Y08Vf)dprIa*CMcx~CDZ9|z@kiyRJo>4hM
zH}JA{O)V;LKhS~rxfKOOwxo+yG6rFBEgnA}i4jCr7hLlfjH!+KKcNZGhDKLS7+o`N
zQvD?CPoiCVogOP>@MF7JEY_!3<Ea<;hPRuM4ll>M$Vg2<!P(lMJkjpFeKCb{7l-xn
zgo*Wd7NL5|NSSnLtQwn@5NTp3+j`?63i08p>L3Y>#u!%lPdzWiheRy@dCr38C}>!k
zrzM1U!eB$sFxs}BQJA>YlxGp~73#9olq)cRh*g%Fra073AYXkiHS@&TXevpG#OhMB
zyI7D*EKaB2V1qyF+LFS}M@=k<7P`2K*|Q}4PScc$7!WztIDO;e$rXbf$Uy!Z1mwZ1
znwp>pG=<ia?ip6fnIA^;S>?Z{;!GXPop{r}0k3Xn>zMT8U=n^DT-uVNi2qSjo=nGA
zNa|5DA$CXsqKA)~R&mhi20z}))Rvn$PnvA@(|YHYt$@1R^al88@mBCXo)xAt)m1Rm
z8pNia=PhR6KCPdZ!Uv26zKF2^h-xcLc~%G@T3BJ?tPmv;0Aegwn9&r^aS#Z>gTobO
zOdKMYMZD5=|1|Pp+O3G^m8ODs9Ie6E46}N4?{<Oc9lmr!<M?JbPKvP7b~yM9IxETF
z&=R8+#?Q0LWbdredw^|{(<)m|06}P#DH8+$L1>jJPmBTtp;ac%j?jrwfH*O_%Ct|6
z5-hs0%9JNYWf4w{t}^MwD7JMK4=!k|HFNf3nq0-EuhpN6tTk~qkHNKjaGwF!D@}Ik
zGx~kjGp0PVf>Nm5Gt};P0t;NNGua={=-(HuGv)PDTvPzoIumhYXHE*xvnGo?t9L1S
z)|7Wkam|1i<L#+pj)V?9XR^OMtCy5MXUZ)^+!6rNb0+pQ=;$xFf{fN9ek}RU#j1kd
zyp)UtlTdZ>_CNlh*^I{}@OOAvb{tI$wnOS;;in<^bkS5jzKnbwJggI@kR!t{G>C+1
zX4<z&W(5uKO_(YhI>^WqG{)d5eID6}n31~*C-`Lb&*%k%rBPvG<}b7(isVt2FjKBV
z)J4b?edOE!1VRGqO`N4XB_s~Dc-~}RJ*$6L^t>tG4#X7%U_Ec*?Z8X8n4rOFll}Uf
zKA<RV%1v9`F91^7#Ja77BVp0C!DN43ueT}MV9G66+z$ZK23Q~+uSfGRj~7h#(0aW`
z(F+bGdR_1ZqBMXbVdeCq$-Y~!4=j4ol&1%SiVsLHnm9c;g(G2Yw9#bOKCk~z(MC8e
zvOmx_fV7bUx858HtCE*YcH()xkM)v+<OkAAg!C|`R#d`5<P9@DIIR~eMQ=Ew3IOd5
zvt0*%H#<mcjsKYJju-Tci~eKE_aRXVr2m+B9)>P(2Nk3}-!$1VLVDAoL_5825~U#=
z2`6W_nrzUE`jtgnO?mMd=Kz7U)x;W>Hray;?q$7YvS(h@`xU+AP@>zUZxJONRsj-T
zk=SOk+>QD*);5Py1W4P6(rVlu0Tv#Xc+X5v+o(USq~0^-n~o?3+IuEaKg)$N;IWC1
zXfeeU?*6e)d@JTWzFy&aWzPrBwkpNi6P<MnMZO}rjYC$px@Y#G`HRkMFCKKp?=@Ig
zfiMMTy~Wl7{~J~&;tZN^5oJ31&Zq0fNobDd=@FR78<L1A#Lh>(HF^@A^TN!}S52@T
z1cptuIBiAo1dmv4-ZM<Z`@!HidL|SUQw-#l2a|y$Y@N!3oIWCTnMqy_@!Kb6&KGRh
z%lf~}PfVQQy%s{|H(U;3oW#4S;%*CI@op+W&^ScOORpC2t1X|h8#e1*Z~WAhufCuV
zIG>t$^`#}p0rVL>Wl7K)e$5c8p|Q5S>9!_e)#4HhzKTZ?0CHrU4{Xb;!ucI$hc@f&
z3J;s|oCB_@0OzoYa}H#QxO0M2Pps`0y=UPO+gecwoFindxMBz#IET;K<SqJng`Ycg
z$TxgWbVOV54M*7<ThP`~Q=U)B<*wnViQP6lfe1Qq4ab=86}?;WF-Iii8IF-i-jCp-
zF1Eks=H=Xzm%iy0{atT(Zk{(zH{Lb=bnD%Dtlu_$aQWSN8lPyX6t(Zpi*_KpClFn}
zJMa9<j1IgG25^2JTfa^3SUx{b;~T<2A_33Oi}R<l2t=Lvc^3?&cf$bU<H9@^*sfpJ
zV_}}gkKs}&FOGGR?a)NIFt6to#<OrWaDdv9yqsV2Tm_FQZ1#4&lN;}zv-R8c$FN$W
zRW4#7=q6t$(>l0TtkSsJab>4ahlj}aucq)lBwJa5(%3kO!l?1d31Z2_A75CKhZk4r
ziAB7qK>6=HrEkGfAOBeo`dOU@tm@OV-q!oN&gYFIsokt)9<|9|)A?^xVOw|TZ9B__
z8|M`9pUshs>-jdFohIPFi{VCO&s;n8XiEwQWu}4b8^1M^S;?o*+o{i2daTaV_^le^
z9@1T%m&>h$KuC9WUdP_Xd+m7VFpOvNl&cHgXvd1Hv}g(Mjtmbc(D_9nNvv^%oJLP!
z@4T(YOOOqLC$WWVI}CATRIEMt2JR4AC{P;Snp{7rmVSYS5);TXINjxI5PlMpdnkzF
zoV-0BX6iGeU&_HRHi_RDLL|VKo!AHzCs8{L|I+~LBE)tb?L(=eWr`Q5dS(g4e>rIc
zWnt`X+01VvVf`T1(*n5<sTaCKVFJj|kG=GSdo&F0AO(&!d{Eg{l>@G*ymZhtyd8T1
z#2@IF`=4yhPoCJIF4j1V>qL2?lXFk3@&tqIgsl#vl5+JtN~k#rj@HRZgKJNUb~9}m
zBD;jOKr?4fOEh}JKdXxw31oiXgv>|e8Tc3s9&wFDKjwtR74LVoJlQHTcy?nLA22?4
z0yi#Oe*6b^#82^vH6;a8h@GT04x^tGvxkw6*+L=ydz`yi6Kf}NL(X7`5qDNY&^j7P
zo4}~dF77Csy7TRv#pEc5O1X7SJr}y8hFB!lK%wMlHD@9ve>6%gZ^eX6zvToG!#?aE
zY!WFO{&Qg%ClKPC%3p?ppuzVPOzT{g#v~__9U!-a)RnEi)G^r~qz<5-Qemx*_)<rU
zXdD4Xql72&4>SZ={*e(1Rph@imm>ANemwo8ncQWkd=!nfAi*IzhlZ7PZ=rjniF{Sx
zR6n7n+V-nZQ_xS2YrxOD(N|JAJ7||G$F&viHTyTyQs?|=nyolAbTBUIM{4k^UYXx)
zn%GcNja5EbA^o7!Z4+y7et|f4te}s>DSqrJt3g{AGUJkxKi5XV2Q70+_i&`59=}WE
zq^-E4O5#KTwL%ij(iUL=^nn{D2?xq59WLcL8m-K4j@g~#eS>F0nmZ->=}0PTDA5wE
zg4}8qe%)vS@+~xmLLJCSLc};KBGyGlCX>?0J&Apefag3!;t$T14;?w}E`q7a<5Tnt
zA2weYOSoRh9n?t3wCd+-M{Z7t8ztl+p^3;_kt3ii(rB!3ZXr$KV`e)gn`)M>+gT`Q
z7*Z6ll6^=g!VkFM2b~~l!7W!{J}1Z(7)F6dxpW4ePw4ikn1=d^=m4sMzlJ1tGMogZ
z+7OJ2`Nw98ra_8ld)ZFO?hEgNjfEMA=VwX(>|-`y$goe-jIFs%+L)cSLgNV05hCzB
z{?K~7*jeA$$TQ*R7ziDKOpX!e!&59|G$O=DNIlH{{U@1UZiLE-t#0z_!V9Fv$n+@s
zR%NT4ZJqzU`+%nCX8?r)V}5QHhfBYb`JpN~TS?hs$dSi{T&rrK2V^NQ>049$XZT1<
z#U2Kwa+@<EdMBo9zSlq)G@{Z!Q3^|RkU|FdTrscV7q-MqN~nSpZd1+j*vYC?mg+(o
z#AzeZByVGU6}To+2)D)(ec`sbabtw!#gpu*l=GGueCglMnZdyc3>S=#P0>$|3coJ*
zm+T}k&)+w4&qMi3Fo(&*Ny!NwGbuMIYo0ww!Zgu${30PmKTVX=&02QR@bJ^Ol=ipU
z(vSC{H{-^OUzIH5^MGwzQnA_KJAAED*AAthpd2)G#NYvy_{~h2N~NES93}BaQj&S3
zOpqXqNZy8AJ9h8T1gsy{Xp05Yjb)W(>fz4LnEDC$O}tSgVG4an_BInzg#AS5Kun7O
zSKg)}Tq0*>?JFeDxpV^*c10Jhq&59;TO;Ol`bTXzln7<bX-^DU&8*8jy>Yy*S+7M^
z9=-hEy|%6yeCg225!VhMG;;9J>neu~9w<UpQW5dfp7xY4*%%Gy$CE;0qDA|1s^ARL
zbZ%AGR@KlvC4Nf@B0}_^At!<*>QLrKC3y?@F-sU5cSRYJf|cgFLaJi>C0JRi0f}z<
zXOESLqj@MoGrahfPm*0`{^N(g<rL*KB}P<^bR`!1wcv;L3?vF)u|PG+*`RN>uP)=V
zMY)*i(S<swEB&i%ez=CVu7nTuil6JO%Y^HMjoAfTY7?ub)YeyxaYTb3n-tn5xqu~d
z2Kd^7+^*Gu=3vnxXQA8?HBA<xEGc8<j^xm|QlSH4M>cB!=>Q@9J7=ozZAr}-SvmaD
zYp;Yw*;2AEWO3e`x5Txfxkp80kKa~ps^{Ie2j58XCh_ZBm<RZ;PCB!C)-JZ#9qjO@
z%E3bh4IFvZ@IeEH4IMam#Nc5=aT||@Kq`UbaLOlOD_~4jQ`Jo+cJE96N_{7b<Z4Fy
zdgT^=Ud(p5_N_b4k+a}}x<M6a@0+jApw4wuXmTCLXATOXu<eAt(e6-24Fx~azj0xR
zO<2Ct&i<Xn6k-#>5?{08M-Gk5{w`V~4=?;}<&f(uZ@dO$VZp0emkb+tBTbozSV+00
zq%%I0?|5W+QDLm2@g#n+7h9*puHZZ6+2>O^yV$(Mj794c&asFYvW=km(SrZ`WP#Xa
zgL5P?TGSvciGpzoD4Xr|c5`Ms%rSg7w*d-BOF0o<Hs4sT!lg(Yhl;1{tz~EO6Z&lX
z0qnNI`f=C*a}q*QYczfiH)~6**(m{76$O?&ju2b^<k*{qMSL>mXBP+y*VwaHOYE1O
zp5l}}8PLvcRw_R0$bg-T7eBfx$4rO_M<FKQCtxY+qL>4xc$=L)K&dS}&Slo*WT)v<
zRAUMvVFV=3)Rj>o90jrCJvq-Ic7g5+A#tz57ciVW&BG$}YHq^VAZw_>3?P(FXeS>4
zETdC$mm<q>c;thrG)oaV6Fg!PCl`d@<GZjmh)+vsLDhiYzbygdwEMu9k2SSq6_wzX
z&TUgv!<S}RiVp*2zqj@Ja935XowJ-6-zv>)hGHJW!Dzm6v2`UQBnl~Unwl;qW%K-h
z@07}4vK`R?IUsPr9`^7g8(FP+*z&o0_y+tSFi+TFpNr>^<nMk0M8fGzp8SDPfJiu<
z$?G)?cOVqCwW<A{m$N*|Uq(<{qvG#*-d5s3SZhkOO^xz{rab^4GdeXYx8(o=cWP7~
zGzAE%Q=>R&imfQMwSte+qwJ&IdaDZopyqU^Cb2g?D(}bOD{4-U;w}V#@}xDAkJ_B5
zGB=to--E|4QYb*$7A3rQAWgfUbE5Lc+yH{woM;Piz!@N@&52^)jE*A!#Bqc<(bBn5
zH{YG40&&Fo&ZxYPB8woSe@Ag21si+BKd8));s;dz!Crn(pVkKj=mSc`rX)bLI^XF7
zogti0eV}axRL5hXEUG*ZRSOo;uOOybkKgn$=nCDB#Rr=T?NhO+JWGMEpu(c^C<Q?9
z&Z6-Lz&pLcKn1kRt=$(@?~jV36tWEU7Dwe#3R#4s6icFXl!D#~XiZt|hg?y91RFz1
z=Sv@o$}`vi!Nx;Tc?KIG$UPLb&tSJEc|XpIHSd{0_#0#KxHA@XzVz{^++oF65PCc+
zk6;4?p~s^*U%G^D%oLj13(=f;vGk++^n29&Lg2m-MN;<wiL4O1rfrTYuSe5E59rsr
zQYZjzln7Y?1pelz+=B)P+MA>Dy$XPk)#hmQbtx+<;Ii5hRbP{`l4Yp(iY+Ty1X;bx
zWpzfdg1o$ETU6N<O}GC<$LmmqT!T?!^FkWDEh^6@;45fui{fko=^Q}tvMp-v%J3pi
zCurNF>N^=;co~%L?Wh*!s!8?0GDz)+BI8fb7RjPK48YE))`|8UQHDx;qO9|$dg~+r
zjK>~(JODywd+hN52tM~j<-277L3~dXJHfPX4-gxZd!ofdWLtd0n`4w*VYKE=0eUaW
zR)4DJLk4a%^`6rd8N_=|Q)CeDMdgo30hw2o57z-iQ}0DvT`HU6uQ73q)_*bzcvB$0
zH;P9>0@n3d-eU@#gmYq&QQSlwMPD;8n%*0gx6BLqZtvb`L_CrQ5QO(evA-^QNe^-C
zjama`(_}-$`rc^q0OJDQG@yM^_Sk27_pycaA~>K-Q*?@VpVJgs%D$+4?+M6gYF|`7
z0tgUI?TdD>1xjz)QB(V(9k1ZGaUpXI<;PLh_ptsSNR*7}W2Y@LrjH$ok}-X38xxSx
z*2ht79f@wy%XS|}+YFW6qL=MRcRr4`z0#oHfGVU7sDn}E%7U<USydy>%his<Z@o8-
zpCF}}Qgk#A3|p%7=*K~)c{(e6Fe-nj1=K+NU=+J#qIvvU6~Gd^tNgdBI7XW*=uvGn
z4}?QerCmXxby@vn9y4N&$81UqYWgYNdq39$1Azu6fM+v7r;QIq<q<`E1rvv&E$vq6
zwDF-R_RQCjmo8MWX?`TiuKHYG4Qcv7>4-y#F4iA$x<eQ1k3>!JA^?y<=|~iN%Az|y
zaC;<*w;F}n`J^<DL_1x>9|<U=W68&&%EfrZMxG2qRA5K^=o9<LQN0zqV}J?Z+1)YF
zonujX^ci2l#Ib1UMY2^oPJArdx1X_@UOX(MtNGtY(;pwzUsRxpevta!A>{|D@1ydN
zFusD+_fh#fRsccj`)Ij%;Q%1|^L@12NZB7h`eVXxd>`$8v+<^A3<m)Ih^Bx0Qh!x}
z@aU&m{%{(j6Ul!><q0EvMPq+N<u615L}P!@1R;bMKx2PIORkcQ1!QA?MB5BA-V+`b
z=LlxTl<I;v6l)lN9tA=F1X{t=)FPLiuJ}gpMQ)bPs{+rK9-UX68S{&SP525fX2uG|
z(Q|;{VrC3S&jlAja4|D>!DxOb2VcPjjuXs`U08+L6VLyO5_&9XX6)vXd|E7|qYHP$
zaQZ8Pbrka!dGmUr46UM2JhlrEt=<unlOsU1dPmHj919hkYq&ecFDQ)!0RHcG_zyt^
z?~cjY5nn;+?wFh%0fN%qG0ct>hZULHf>_RTF%gFq0dqkNH!t|X{343O7R7iR#wPxP
z`%{Zzaw@_npe~BZFbp7wE{Y)xTTOy5q6uJ0EIs;^-oe!q5Exn#lb4(T@~>X;`+NXV
zcS$TSY8<4K_(e3)JQ7Q9{!agp>eAHmh*Os+KN8E-rK#l+s=JI%ZWa-^Dwf`HS}#;C
z0R*|MvgHC0q*mE-0SHp7Vy3uT1CZCnUOPoDMKr;!zPHHR5-iY#n$`Bm07Sjj_Q(K4
zz15kKDI$KKl_LWHWS(_6Ah-Uk!vVSVXYG*zGAKQ3kBnt%&&P6h%aO5w`FsqQefh{(
zG%_#9k$LBLT`PaV9vOTB>I?SB00hw&Xk;irwn%&%V<JEX0CqMyHECQn#$<quuc)~(
zhTw7sc|D5)<jpbVjTrm+7yXSCVDt?I!fF75*k-$L06}bXOis)IL2Ppj6Enps04Z*Y
zwR$5a;$tch@$r_JjE`jzl;M>a;$wO+T^8ZdPE)OXH74II&y=Et*JAixj%KJBy4Pds
z2oWG#;6mFTQ+CCg2goP~^Y|bFEr4KtdrSt%06}_tOa{mR!Tk1Ed>5Ff0GSGS(D!ys
zeJ3UYWLbuKJ7O|GmPH8qcE%_`Ci5#cwRdAVtv{5bT#RPljd_d2C>PTx?-irm0{~du
zYqJOtxO?qk28gEi(lFD5p2Z~meKF=ftGB%h0BY{DO$Z?W$R8>75Grc!iy@*VhDvbp
zI+pXb<fjCf`!oKag!nlqweDM&S1Uhgvx84SJ!rE75JV5!T315s91>dB2LRYP<kTc~
z4%u3Vuc&#5w2m)nN=WOD#+2jdj2Oy61s}wS0R)w!_J{!lm815E0mO(Mjm3}45u*Y=
zV#i|YS8~K;8R~sukC-gNh<%wEu{Nf50wZ=>N~jH*J(01?HYA}_a>M|D#Zxwm0D*hT
z77;)+b&5npKV8~}`2Rk}+9=*my#S!*_c3`53?Togi-%bOqUQH8{3zHQ`i1wlruJ(r
zXMQ|=JAxWlv@LLdjp5QJol|W~4E-Ks_q)A4dIA91-)*u0f%<z)zSIv8WPc|`m__#9
zmN=RgXZSU+=>q`3*r&y%u>*u%O^eHijsS98`D?xaL1|hXzvfGC2DBxIJ|oWFQoWah
z5P6Lm4j~%G8F4vR;VTHuh)bUg5QJvL;gc`sgaFNov+F$G-XKKIeU?LrEO?efh%9(k
zT;6*FGOvmVj+}d2;$co)tV#i(FLUB@;suDBbK-L11&Eq+;`YSbmiV2=p6P;BDgFkX
zc@7KY-RC(hkawRKm-8-=L1<na^DZu6C~7Iz*zufgaW+c#Zi|%ymBsPOI(P4-G-^xY
zeB$i`0A!cMrKSS}?vl8ic>#j#k~q}pQJOtVAwccXxbj$BEtt<<dD%N8UFGv$;Y#5H
z$l!}G7=R%2Xk5NB0T5&!jmvxH0AVnX##=uY7x&DmfDA@m7MIt|WeJ9MSzKN-mqj47
zERJjD-8efycp|Q}Vx9foPCZJw)dIGepy7TZF7IUGE9yQG$0RY5*9EjH&hGGg|BRY^
z@^)(S$vZBuW8y2v#dS=2S-O-@-f@-)c*{|fPv3DFeE>w8tK;&DH9*u{9mgUXzxaci
z5YpN>n-cJL>k9yyu{JJFP}4WmTpMpCUL*mCnrq{@#`u(wJl@RR5LY%q^7p&h#8cj~
zbY9TgNTR0|7Cza%rWMwPxSU<^6?8Vl<?I3wqTdjYZ-VG)cA*09t6qq!FU7^|BFj+k
z#kibZWD$JT#yHI`^pt%mt;M#u;!F#9yAA*Zb=_jCD?s#aOI$wq2oPLtiO0ng<^Vx`
zOB{=KvY1j@R=p-I1^{ZlW?KwE)O^jh7=WnxTE=2ZX|?ngx0r$W8!Wu#ut1BYw`_~S
zR}gy3witjQ^cGpnl{gEESGIS=b9TcaMZ8ypcf|3ID)JH@yfcj~MVyU{c-s{1jLTD+
zD23wfjN_Ch!X6-j@H=t#NW@!G^iEtJ(?ltd-XZrw$1C}p(Yxa8vxv9U+9i8Or9j$6
zmhoqpZ9BZT9nU!sXYEbzh-f>IeJ}29K}WaMcErivIJ?{QRtx}up6<1K3J^WrYxfi&
zYVM88-|z&8p6-p~I4aEr?TFhC<1Cct?F2&Pc|UXrk>~v|?icU);VZ{25V;kAAoO7z
zX~=<`5Lo{>&i;|-y?9_d?s-3U2$8CP9G5rE@fCzVj)z710w4%|OdMT~Ubn|@ti*Hv
zh_gTPyaQwHfq94w=xv%O+EcfW#Muo|@0$YvfZHQ>BLLCJ5xd&}QT2%J-T|VKBP9Px
zoDe>K5oe=g-iZU-^KO6P5F+pOg+qwC{Y6|xmp}%gFUWEHCRjqhzlpPW-1}3H_T1-u
zW7|JKRQ-kqjn;1fQT3ZRj?Y$d9sr$;v&w|GFFHe0%t?m_azQ6;iQy{<os5UYaugu1
ziYbQP)@e^J==(U^lJH)3DF6=1*%KfLeeVz=kMzAmh&<BwaS);l*6nGSevB(+1$|k6
z)0@x6<$F7VB27Ig7Qr__XvL3lzc5~ap!j3FbqCo;@>D;@J9jZY6ykxW`Zcbcjk6E(
zy}MKGc|r&UHZgKnzdEueclE2St3U>^Ur944k_QNP^=rKCS-2}oVo(9x6>xrw%h#!8
z5jgxkj@PNLfI@XJwdskRI})yf3X8Qb@K&ZeppoebJYm@ao$f$7H6x)!3j9_j&PU-j
zo#BH8clZSE@J%>VfT%blA*VxtXn95g(;*IagAP8<Oen1if|5>CO;c^srbL#7uLSn;
z5HcvwOvqRSAg?TS3?L}aOhCurc7O~Oo1I{-TY6g$0su<01tlUxV>a6%L|n{H$aE;a
zg3#;)JnJC}1UllvYa-{d1WUE_eiZ8n)PE=JCpS8h92O*aAkY&4$S$yZ4iLBt?4APz
z*#*?|duTf9NR2K@r2Dn@-tFoE2z8e@b*XPl5^|}Buc*5ufuNh5eMjosg9-6gBLEEC
zg9#ZP0YuFQ6EZvkh?);3?C_`~fy)v+FEI!J#Inp53qbI&%oYnkP+FFd@ex2?72bZ9
z4zYAHwe^XdZxZY-%iCMoqOsjCYeUod#a_!*(o}T|&Oy?q9&NngEuP6$QyP2ALnCw*
zp^6_lZb7@S;^dw<5|!DsX1z+hZCdxC9mpp6>=X9b>_gVH2bts)d^l7oHU{~@>wa`{
zgKz(12aoTS(f(!KqzR+x;MCX*`OJ|J?Bnq*Xh{Q42;{LFOT3$7ozV653H%&5kM}y!
zFmI5<3;<%<U=I~Q;BK&o86d>8frgp?B5)@fj+YYb_cq@9dIG>$y_AqI`2ge}<x4&Q
zQT3$+Uh>&QZlDtl^D7Cqt*v*%SO6HSSM0F@2qs>!#|j`Qy^@eGR|5p4R}z?A$%g_&
zbnr@|rMLr0ph)|@l4v!UUVo#uP~pu4`=ZqQ<p2O^>rJOEdh_JXgnTsxU(wc^iQ)?-
zang%76Mg#fpB(Q*Y;H@iXnXG^0|9VIIxc`9v@IbMcK|_XTcWU|Bt(97TLKrYKBXL0
zC+gvQiS&~8-oLm&iX7^D4o?)zzvuLy9O`=s`5*(3LF&B(F2KD^w$_PE<Uk_byQB97
zB1QT20}d&2rw1HT<W3JHq+0<pNF5-zA_awz?Qnu!(3uO0BDTX0C5qS%C*<Qtop{7{
zI8h>!uK+>maN_(P+=x5Tm>iWx3;;Ec+C~fzJRG%+7$9mM%@}bfirBsuMvUH2$o93v
z1BGl~JH4Th?Q7eJfecDtCt$>b4Mpv2Y9|vp>+;#RW!?e#oq>5Wf%n^PC-HZN&TBs;
zlrsr-dAax36kxQ20^ytiqMaY?b^xOG4+(jR5+K_7A%V>nnuGvi68a%wok_TjD3Y#J
z02QR4$oVm${*v(UoKU6|b$?1AZjK_SBn#sz(yyMM6BIh*Iva}7-tP(aQCDxz0RX_;
z?+$NdX1^z7=!CBvSN=8>K+yj^fr#QJP6#(er{=Ta=XtL~CrN#$=4U!dIyg07&N%oA
zLR0f)R0t4+rsiX&rJJGvaZ_|^e%rgnZ;KF&i58qp%`Y8;r2>B5Ruti;=+ykNce&_>
zAId=F_I#y#K~K!I-Mkl}H)MV&vL#LCcYD5!DDf3c+@4=h#;pb*uYX=Q{);=EiT|1T
zY*{yNpGyI7C_{+Cnwj|-v5@)A%$M;IkU?l>KEfLQ06}MTUAr@1nU~K>yL-1nG-QA%
zu(=`wywed48Q`7y@|WU)3}ScYW9=ozpMLJ)&iqdE^6l}bJup80|ISzM&bP;3mZI+5
z{LJ|C!UP}xyYgxLUnh^%nQVGdKD+&V@8*F3z}zB-IWp-*4s&GEi}K}624pm_C?8v9
z^8_WB^x}LrvxoOi2%k)Pu|tVWda)xjT7)gm|9|T`^Ej!BtMAV=J?*_?618Dqru%l^
zp6+`E5eI~sVL)UN5J-#?qsf~X6Ny<K6O9@*d9vt$Y(Y>E&@vxTq6XQNO|*favIqo_
z)r|lmike`2NsJ1HD8AoQRd=q5dH?I*sZ*y<)j73SoqM`DdVm>8zpdr;OTO%MwlwMc
zYt>~<&M#0&PO$Ee1xX9Pzt--^kcy!DYXfs=0YuRKwT(^H8>PcKTUz*n+VUCA&f3Zm
zAVe*QMM>bC1+ge;;tOhR6l<6fwV;+L)*Fl{PN<gECj88bc53H6PPW|C;yh3}^lTcr
zPKfL&5pI^%+QU;)5xT6_ew7J`&}Fq=zIrUdcB|w|6txwv)s}1fI+bpEe{Gd3r+ZcU
zQxpek6P?Ug;YSX3Qmw$WxT+*FpdF}X7DJRxAph`6t@*sDAOk;Vd1dMMN-e{v;RPM6
zwegktz5~2K{j~_P%0PLrR_~CCTvUCv?N2Y&?FFo#SxG9)uhz1kU<6YMhiYw@Xg<e)
zV4yzvfLERX9;)T^;y9lyNp_>VtgV<(SMEH-xiQh98@zw7WkxJp8r@`y@Q+&c=!I-)
z0I1A=)Y>^P5Y~Ux+Bq-~4gVo!lTCnbQkV~F)fa|2-N`BQzz^b_QY#<CIi>6RKyu0#
zG`dN-Kde<Z4s)8xDSg$4aZVBYVVqNH<wMEI+gx&j{#C2?4|DpEQ|5jDigQW_^RGCk
zbTI#toD$Tkn{+TIYt``KPD=}boG0U)Qhg_DUE@-ulJjKk=f9x8z|l?g8&gLFuNHOA
z2&bg>4|g*Bx%4BD&2j;Vh%t3`-w23^F?H-4eOLcEjz7Lmoi)O_vbmeywHY7hltw<j
z&Q6(0CFl4$oNbPTvOXuB`fXjsA2a1OBb>Ubnsea&Z5`A2XL+!iJV%VTIa7Z7V&|Ez
z%^?0}bH>i7fiQ2*)S1|bKm>2jFt>PCoT7mff=tC|ul(vSoc@Wf4e&mn(Tmr1$p${p
z^KvG!Ka-Si9-jg>9~jd#HSE{Uf&PX>ro9<XMkHjUp<vlRWs-wFMd4rf3FX04(YQf0
zelJrVb*nSGsu4sbzDLw8JthDV_+G~P8<4#3Ww0O*ZpljGv5Y!*tkb0xKv|CwG|c7{
ze>;}30nJDy=dla{&14=4q=P$_Io*7yOrSnXJ(fA6uRcq)6gf*hmg(K1uTeCJlb*;V
zI%Li&4Cb!yPYBd`E%%D$+Im6l9qV|gFRlSkq`qi)B4e-gkctu~GBoc&T7A&R8P#Q+
z({DtB9x6X30GCxzJo)2{9j{46(8rmy*-8NFtPK1TS)JnG%C~0|-7>0DO&jlcYRfoh
z^kB$_9?6tR>+M-PX(bhzw`cPv+8Pj<w`U1ueX|zH|4+!ODdU~%5hNq#glwB~vIj6B
z79^fNA)D`MRTod6kZo$#U+-&>(QQ&z^`GGMMv#ndlVU+Kx=qTql~NpkQr6D>VMfrT
ztoc3)g=BD>l2t1wI0FzQgWHr?kX-GU5(|>SZA#W|?!%0rDOrLUUZ#tN?Wbl{--*s8
zLmKqpHZ>OHAZThVNCvm5S-ZIpGlHgOgEOnQrL-glx7pe9_KD7g?a)aEx7o2MnZM4C
zMakecJJv}Cx7nhToSrnu?Ta~C^|i@PBRa`|HYXM&1KONekPK*ZVx43_n<F|cmun9V
za>rs}w!CAq^H>5=a>rs}Eb3H5EsRCU9gBt8w7GHvGolt|c@sa$xD_`jmSoj4cRAyR
zHRuZzOJYg#J%lB(B)LGbB%3yKIhc{OB-^8>jw9C~Q5KeG6U~{f_f8|s+3%-1HB^_}
zg@77)r`&~Dp0$zuNJZfCY^_;x01>!6%UnR_%nfp_;fbvJXex7N0D_)~1<6eHiL9Mv
zl8T@wvYAHfow8x{M7DRI>ThX5+-_KvRX0y_zK$Td-LNVaB)1z@#YL3c4Xd*0E>@7-
zZdjE)`yBm+kp_wEuqLa%aJTbi1f7ncHL;-65ws>2bUK38WbG0UW(2Lt5_3-m(FTeB
z@Jv=ca5o$200cb~3pxWq&%}bxK+rQ;yHtT0LC<9Kh3cMK5CJ0AXVvM`opTVBM$r0L
zP#Qt&V?k*It<T!4P%tBCeYQ}nzEKMzgv6$-8a>^)7D4S1v?&(U9zmO8K@wzPQ(Uz6
z2-+k?`@R;`fn{-4b)Vr}g`f@y+8PVu#v;(35s-?Yty%M`pGxU~psm^N=T?7J3##F?
zJFE80a4tqr4T84Ef@;ucd#q6ng0{y+t3l9qDVl6~HY7T-<DOMl&vb?k0U&5sET|)b
zcEy4^B4}6Et_xsB(5@^YLiE(TA<>C-dRDzN)0vE<PDpwomedJJFT|2MA?byzU3|fe
zq!+Tqpn8%_a~l%19EE4gf4IjPSBa=vMD347)go$t)=q9oMb!T687A&45K;TH1pm+*
z<_!rxID06o#wuqs4Y&?Thhj-}RQRE+y>3M+k`85UOhzD*4rPhSxQ10ON)bHugKXk>
zwtV+}PGi*%As`J()Os`M^+8<34AMTx+I0%dNc$kmVqF$dKv_g*gX3AVlPd(Xz&w^s
zUZ*z|8WLHC%B<cQ>;pj86InZt0V4fG*6s`fk$xh}&fqJi+w!=rl}!Yh9cs++Q(9E{
z0cZBmhJ=U0kRydX6#gVuSmH)~5-aQ>@)J>*rAH#!J)QcES8=yjzHg56RAo(fcz@$@
ztzn$}Uw4_oO!m}|9&}oV0Qj59p8XpjnostuTLZ~D+3RSwvw-}~WRGKs_l+b{r+Mm}
zhn&9+?XI^1rp1zEK0VE|V<oAY*T#4SB59h(am*W{aF29qmRIqxS044SbFi{Q4|r#J
z%;oqzVzP(m`+%puI@h_PF8~D}@a)MW5Y`7g&m1)X5&MA0Qd(xMJ!CrbkeA43E-MUH
z+a7j0tJ5BFdJKh5p-C`x3q;k2B2|Gpo1MG>k@=9v<Ylt#N}rof&GRajcxv1u&iD@J
z!aC1m>*kyM-?^gc0#D`UIhQv9kh;LLb1NXM3p_iw0wQ&R$K2{gsmgOj)y1BgH_zEc
zR#9kioK+NB?AZ?wkV@9Y9=ny_L7$%K)N-$4o2MR~?|dWE6VBzLkMx8+(I@qUmsss3
zGow`fJf}{zEO5Tu3LW_*m}wu7Tu(%*0g?ZNs3zVI#QUG{I;{50v8xdDvFnpwa+PO}
zT`i4#WzQbFS`vFlD?QmekUqYrl=7)+FVQg*6fV5v(n0FAiB7(+F$0Nc^;E2tl=>;p
z9tM+&^rt)ygXI9Pr%Z0wdg=!YodMSXaEi5v)k7VSoNGP%WpE%l*LwC+Fp&AwTCdAj
z^%P&Ao=dOw&bn03r7cC~(rdj-M(XC>Q$#%L>E^9Qu5wb{pY?3(CW(K0*0Ze}s9B?Z
z|DH0}-RhZdG~Kq^Nquu`<aZ=d;H{D00THy-vz-tSL0diAG}n)+_`2P8ui|;nd@xf6
z((PVVonHH&A#S(BOLWm|{}4zj*aX`GQdK*o_!qGF=VN7z1Kz!lIfMOOG!3aSA;PoE
zV`GMBH$c!HPkr|>XGHxT&qhFls>!t3ITC`1Zxp@kRlMe@=N@zJ@9?t6N2Az_sY;7B
zdy!ncLEZRlDk~pAy~>B6*8-A^l)ciN_#`h7b@q9x(-P<F{yxucSU`nopT`=Kb_^5f
zfT!+U;#}<?uoW*<P3HW0sAi(N4tnaerOt)^LC>CKr}eJGLFuyiE;f0v#vxDLywn*K
z9Ev6B?FJ7?6J=%DE1mkQS1~PDnfb8%r=`xFm7n8ugNM_fI;`l-(>N23GLAt|_~G^X
zUA&G<6EW}JeoE#{^UXgAY`}{k2|3z}QvX#tIDN{|ORDUsrw_CG0`Q8XQ8NI-d(^W_
zN+88N>anEUETeBPslQ`hqH|_tJ9S1&s=hq>ac6er5a^VY1k<*Fw2)&_zYf&dI+}?z
z5TVDs@XYG_PSHZC*a^AvRZloG+70fdw`M2g+C)iXn~<~1GExyWA(z+jjL=6~%7h#<
zA2~4VC1_I49GC&fIVoow4v?Iaa<<_BHE+~#dWor~=5)gu3DBrb2TVz#9b8C7($t)7
zIY1;$&Cznkia8tEfyh;?!kq87i_9ViPTkr9M;gQOz_0CvzIoWjQ`PDyhZwTa#5ei>
zg`<eyt@4;ozQjRL)KNF<U_b*ndb8my<P{{3%uF009XP>83eoTGuHgV}l#Vf?pTF@S
zQa{?4z<_nUFXSzwK4xnRSzt7_pHws-Qj{mkZ9z%wLr!_TFVE?&wqZde_CjBITxS9l
zh->OsbvjItea|=Q(=P+5oa?{FxuOjmU?S9V<6boSZ&4R4p9wcWID-E;XVfp}K3%n*
zJeHHD(TFL3n{(<-(`b~YF<X7*HD|Uu_%fTCvvYRTA_dObIomLR7=3n*hM}J?HHuq4
zoJ*XY*})BW6gQz+Z1g30!1-UyFsRLf=IN)6^(Fx;^nvK8n+NO23T@|^`iUk665-l>
zUH<LOCNGme`-)V*UhUM{_8PH4qE+k6<|Sm?lSK1$*u-A>>_c3w(r4l`MnRkH+tuhf
zFCKT5{Y{huc?Bvlq9p7K;o2o?NA%Y6voX5O8^$E{NeiSxO@{)cEkB&IN0UHZ-S&eH
zK#cKl?yRm7CXu}KC-ZWNvob$!Gez5@WBm}tG(ei)PYBt{+e>X6dE99Nn*94y%^zIz
z)0=2sJQ)A}D0vxu9pNywl&DcjW!}`LxAY_Yd8D`WUh{INwwfs|s-gJ2T-NL{0#STk
zjy*>Gd5%VbOLB=UpXVqH)}b{dLe9-Zz|d#m+VEH3^3$J6Jl_ANbd*LrL+MColy7a*
znh3o_?2w=?qIH`y;5bo=9%^`d-qv_c*t9sLnGU{AYnBi&`cbXKm66_z=j~Jv54Xe*
zM}5zPUXkbP1*JNl^7&R?!pf6uU3=y+kR0T<<&CsQD=o!5L$}YBZ@ErlBaG6aUWhkj
zD&ZPNK>ci2zxu|WJpR^Ejc@tMH8+1p6cSCMfbaiv-3`P|(#4Zbiwcm(NC-1k(q=+A
zmct5>31t{rlC!62m<S6l$(?Q{e?V<AcHv|IY82})w*wG>oXevD2uRN5(EtP_=ki=M
z05!_q=t?sHwE_^dGS)#h&sRnR5UEI784W-{B(0PIh!tKU*_2K_ovYZx0JNjBt?RhN
z1cYuIgRJwOb1gM@t;EIWi8Y<K+~pYhzx}BZV!qM|w+&2Uvwwe?Kg#x}CWZ?B!uxqU
zWs$+FgBiR`;C&sn20N>f%bgA_$dYg;i~$nYBkIg-hulQbp3celd1Rr|M2DPOmrHEQ
zB{R3GZdau;YTyFLRe!nM{k$p<IVGcJH8`JdHUIS=0U^Y%w3iod!obmYo{&ggBGRlz
zfc)XQoSpXrsmpaadkGZCYGhrm<EEThjR--nM%L$&8*^qg(v)b`L^5v3+2x4kV>$9{
zPL?CGFViG#e@iYgGBZ>Mk!kA?srOI4Vb>vPbR)raqu%+y3?Ifl5t>Z5ir6+x@wP;+
zLbCo-y9owF%Pl$kI1<R>WJ|7aiM}!>&|DbVlB>VC`UPVEI@2AwM15vsC0b**NF}@@
zdWo*SvD`UTZGQBW4%QO9h389MG&b!upB=Ep)pRdw=L^P6ls5_r#vCPXtXfF)x2Dgb
zE0F&BrcXsnr6>8`HCKE(fUs@QP5Rh@GDH>^JM75W?+KAgmF&oI4NSg;+$3msF42-1
z@}I@k&fD6+f8KQUPp{Fh*uHb)E%eUaJ{6iFvV!y>h-riL1iPc*i~m4_-8uUyAfW!w
z=HAu6P0@av)2YL`iih)+_{orKZn}Z!2bbFU+v}stdsjOr6CIina5zV}P(7n>mTAjd
zdfL*$ZyeyQsI)*>--_lfK>q73nYTPF6Z&TAB6T#E_<OGW^wZ9)%2o(uhhi!VNcN*S
zdp#XU_M<s_Jsn8%IGW4-o#r8DT0)TKk^EcEUQf3aoak>kdp+Hf5cIbk*VBn_O+Faj
z%W*w@?^-8l1fm2uQbH{DUd~=mCzZVK<+!SIt<DQNo>M*6IX@()oD3b0b4pDg&)H)}
zQZ+BfjGc8(jC3NWwykrD6kK}i6FGC(j7HL1pNRT-AURLu>`f~m4d+BId!a41yeejk
z`$Wzgs#o>G07X{yCvq1I*8BX;QmBt}yf*Aw7=FujqkckQIReH=5SQ<LUtPQ2$qj)8
zmEbXc1JqgU!UKp-ALr~wG!UIW&T%V2KNM+}xyG2h+P<ELA^;?f;mN7qqyQpmOukK$
zoF$FPr_JdWsYn`==X6U>4x8mHX>49i-{5pXB{@qP8w--Nq_MFeIZGOwPn#`Pm=QEK
z&rD3ef@qe_kIDJ+$qml^mHj~Eoy@CVtCJibP0rhsTvEw9InOFw-{WuQZbWKEK5<_@
zy2n3H-L}d3Czg_<BT^zUa&$B!Z+mc35i=v-p`+eU0^*`G@}2I>n;u*Ux(A<`PpZ7>
z!7Yt^_vCE{Zb@|D_vWPom(jghj-h5%=FR#NM19Z7+w~<7HD=}Q`Vxq^S@~#qZ<d3n
z2lIM;c@=;<eK4+5Id^(6u2VU8dN6O-moOvg!Mxp>;rqvP^A*eTW@knY6z1lu(t2m6
zy>tVQ<P-H~X9h?rSYJl20@BDH$<xvCb$TF)^YiM+7Uv>=KAH5^3{;rr=h@Qa_B2eO
zg?V+^R_9`WVcu@dK-FZnX1<}B(C^W_TDR5trvGT(Zt}F(TOp6;+2k>jDDmRF>bng|
zi}N;=czb>GVsW1PLrq!|^{_Or=52GD>zC&3mQs5inSE)VEv2ROk5zn?cYVI%CA?~z
z)6nkp^-_EZN8Le+zag*s?R388Z-|Nw6=gR_vAGce6UE+`SIc%f1N@D7`%D2UOdInw
zZ_Yqr0&UK#({?$R`<tT@LDghR^cBrSvA5*a*j>)0{+6h2I_P3=$x}CjH50|&mRIlZ
za)$WZ@-{+z2VLxKd0MV)6LpY|VS8SEeYZ2n-=4R7Nl^K_?RoZ+m_5LRx9!ZU@^0rc
ze`ntAZ$X7=XP*5nPHbSJ<?ha_u6vv>`MYB#2|K-8m}uTG(I}tKtC@S82LE~Mze0uS
z`8-`a_gsJ+-oBVuukCRf>tBrPNdnTpDE0KDY|8O5;RE@KKj&5R^UjL&fjn<P#1b`P
ziC6N8qWO|LkV*%ePm}`@@`{vxgk~o3)x5g?1?P+YtC2c2+9I!tI=5;jvb>&GdtY#F
z^Iwl_%lCXW8QTuhOjzWNyt?H@=YrB3Q9agZi@YKA$SXK>!y<3xIsX`>uGr0GfMYK@
zJ?bIo2N#lz$hY#vQuY6p$#m~@>g{~RUA`LjlJn=9-l+O^p2?{mc6&=P-_7fdv=#tX
zd^hTqfbhPXxBCS^bbB|?xGN{Ly~PXPr_p7)sc$~RnQxE1PN%_8(G9Zcvw=u_Kk62M
zI+MM=4n*Sn;@8q=_m-MCo>zD5rOyT+=y)theCK%H-bo`BLC5ofx!4Ot(D6JMd-WIC
zdJFs{Up}_inNZmTBJU@>R@Z$tki4Jd?eYhxnem5>GF$8||2xiC%l0{IDUR%-jq}@z
zBLnO>-<~{^illLV#w>+_NE+v}6qc^Gw={`~zUgTJ<ecc+o)$>XiN5V=f#jU%M?GzC
zDeRrTx%v)3hdW~(WEi~Dx5FT*NV?OvJuMJPclz|Sw>#Lrg|61G*x;83z2bb-uBHXv
zxqh@&)FQ^8?`z{X0+2i3w?h&T-ub>YJ`lO{eT+Yhvb9L{FY;CW>&^w_6eBN+bBd7{
z`S#p~RB|rzIUE_Fb7JJhzEZC{eTTJZBQK7M21L-}sAxb0E%xoiABdpEJ`?{Zxj%sp
zJiuPzCsz68Yu|MmDqA6t9f}!Lfn;Cd+d&mb_7%Qe76BPlSNI)Q`DRcRf*w?#@RKWj
zGpJe``JVLcplV4Bs%1YKR9nPl)>K+kgRtJ3$kag8SQD8Vh`2Rvrf!iUuQ#S14nWfS
zxISd=v_7s6ahmm!sbNOadNDO`+LC?JsZD;xD}H5WKtbL3Mpb)t>!VeUn%>#%s0yz-
zr+RjA+6Nh%e5YjEe;;vyEye{@Ytl_MY>DcRBv`jZ9suO;wulG(jN0!bw%P8hTmS6b
z*a$$;?Qu@=fbG6(9vPEL&h0*rjOBJtA8F>hd{z95a|t=c)pz;!bP`C;UA|}LVnA~4
z@|lY<$dD8Cyszf|#W}ARfd70x{!g*?^S=E|I;onM@j}{SAF<F&>hGaj-~FY?G7!n~
zQe+t*Szc<hOdqk#0b`jV03;lUECbYuwh;o6bRe<}5J?BbGFM`mzPxzzD`phb@7{L4
zUeg!OL%wsSssFxG|A%c81R(WrR3sq0ha&?3k$PAR(3K+fm703XSNs3!gpB}lz7^*b
z1H2VAK~l;2mNdbObxsU$#8-{)I3t?+>Na;I&M9J#M5ZH^oJYiTJLT?CUxCN{^740_
zt%)HZD&=@oDL|As9=R(JQOA8d)d%Xl44H3B^X)4pIq8?z{>}M*<uH(jwxb0i>SQcR
zEOpYi*S$zZ)JdP=Q1=9Vu~ceYAu*|7djbe#hhlmHAlb(iY)=3r`?!Mb34rtj;|d)o
z6--Yc1l<#iFC>3cFg<~#k#9o5_5_whPcX3%^#pyzo2RHjJ=`odk#C<)DcCL_h!Rr@
zw#x@1Y)T>O^83oPXS$l!!#y#S-&Dr*LR)3XdS!aSIvc47nqIIyJ`h3E3pm@GGTNV)
zPTgCmc(kDAz3;qQa~`bs7Mz0dw)4c>X45_Jq5DPvVrNH{1cY~X!FKpS#Lh0@ZQ?WM
ziCfGms2?43Mhpg^-<(K4AcE#Z`T;d>+C-lLB4|#5S&-bvI!{{vLj`s0nDg}u00??0
z79`d8P{GC;A{9Xo6+&}E42YnI3ieUTd4lFjRp)xj_&ztPXcEXaH>zl$Ft%0ndGeQw
zq@q6>EIzj={&(@YMR762=N3iPOg6+Ul4@RALpAqHr}h^rKBzC}{^=~QuIUHw{z5dX
z>L>Ml(A0Ai0J#UFdIrLKFsf%Dat}&9Z<BBv{iMt*>&q*W?xqg?Koo6dz4alWPOa;z
zXEH$YuB<0Gg1(C1kGf5*txs&MPs$B?o{i5dUzu^!m93<p14*Vq0Fkq{-Zlsza@N+{
z1_7i&tgY|3vEDQYA?OCNu0Hu}y=f4ZM!xm+wn11D4PryRG>AFvb$J-2tB%ws{#svt
zFY7Azhy8S~0mV!afv9$*-g-9>)sEC#?*{T0N9yZ~dMOM<wIlVVzoMEv5fuWeQAuyt
z+lxj0#K1@E&Abah+R?ZI#i&Q?Z6hQV=|}6MM%Yhk>HT^$?*bs`{a8=wQ{IpDls@JC
zSWoFw-mk|!{wl5T{B-KW`ii@Y>bB1An>FXd`eA+aMDKj@j+6De6*d77dor>N5Z;sZ
zwiN;qd$Jzycv&W==ZoFO7S-^x+&yHKb~m<YjSAF>uKom$u#$Cbu~TjJ6qA*PH?gQL
z>FQ2wJYW06#G<`R4J7Nt;wk#!0a?W#CKh>kAcN=mg6=4q3I$N1cNDEh0?Bzt(N-u>
z^F|eVzSv?~QCH}2fJWBvK-8aBw1x*FX<E@59*CrAMJn_miA>Tzotjy!SX!*i3{$($
zb=#L8>*l5^Yx<LCW-*F#(_d<KR#DgNc>v_kimC?)@2sM&Ss?Of6{*=JG92}%22u|e
z6OR;=nFl1^<$QHvclXz=(2+udX*ocoJXo|X2Z)phi?-zeanA>f9Um#0mLmk+avmxs
z=N3)Nu{82MT(m96l4v=<FQ)8HO@HYq7gXA62T|<{qG|`C#)7EYfrwjBjH<oAz$K>I
zhXAPdB}H59Knk=Zs&*ifmPFMK)LE%^2~jX0oqD`jaZgF@IM=<b>i{?(FEW^Xo>S)m
zJQye!6MrZs<tu`xfX#yeO;Z>3bQfQ0NMu@BOb*k#jD|wNRuz+jKSkj`R|_Q){B$v~
z9>Kqg<YF65QWy1dZ}_T~B6fJ@-=xU?$J%0YKrB~`v#yvN+9r2XF|if791B>5=`b}-
zo!01XY1M+IW;Yk@3kO3%@E?oGAIE~Fezz2p-)s}St(e$};4>n*5*x~pWKUU3k$Qfv
zm^2R(3<bH{i^=9l?%8fTsr?<rWS=&{dy0vd5d5P^Fi}}GN!{M$ey6_{Bkkt-VzPfE
z#%(9-{}+nMfuEuv_eJ@0z3Lwz?PQ;6CrtnxVqfIpK;-R<+6j=X`=p)dYp?^PdJY!V
z-<sXYjR3M9jI)YS4i;?>L@HSiN)II88Xq7I{aR5i?(Oz!0g&^xr~?9$^R=i00+RDJ
z>3}|wCnN)asT0M-N5yhoi+jAP6#_mD#f%|9q@9R-8i=$Lkxv7WcA{v<5Fm~8M6vV{
zja0@EA(%1bUq!}{@pAEhfOK4wONm_OSd~8MvWLQQVl(RM^3?wBk;Gt_3|FLuj5U)>
z_L!Aaw3u8v-OPi4Xfe6OJV-j#0aE_EN~Ti<kn^sR?Nou}ysKn8RUkR<Dn+e(fOG{j
zOJ<Y;pu@~kTTRIBz|4~ER7pkB%#!U?fk>KJqIJ*xJk5JxI<=xyaiCNlKG>a;su>9H
ziV~57#>%<MKyi}QrSeB3+}kRfKnPw<OetKmN)lmSU2^sFGl2+RU6SB=GT00hb3R>C
zOTOejKvwaRr{k>RB~O>^{s5_DeY(Wr<PP(<xXH#+`Sy$4@s%wDb-%Z<WL~`?R|Ib?
zb=0@;1d?}S3CsRb|E<GO>()|Ye@P9v*j<|$=!lkEOU@VcOO=7b{ah*8kZDlszT$RJ
z=Un3YjZmpi$og}0$kYwB)Uk^#s5sAarL)h`@7M;4U+gHU(U-W*C?^KrQA(N-7s$Wu
zDAkz7E0CN!O5D}HP*(|+u&b2p$(u6$=ZTT-S^T+J9&#u9Z({jfrCM`0j8sJIDseYV
zu5b<%!|y4n?~HT@@aM9;*i%aC7mJcc&ON2}=7JiKoO?>V^pK};17&sbLMb^Q)7|{}
z+auiqe=aXZA)6<nKt#My%1iGfCYFW83#ESjt4C@PY`MNvQvJW;eu<p&MD(Rn()c!z
zoG+E?y4##`4DwQ`XQO_>H&FIr_m<RCUvc}Ow!8@48|RdhkG*kDIr-QtIVIfJKsl}0
zS4y7CMkjSvqXu8<p4$u+5s=OO1t22!l{%em|6EQj_LUlXRNpQWhe7GoYo&^bfm(Q}
z`%$Msu)bE}8eu=g55mJ!hf9e!(e0~lV=EZJ5X`;>5bndJ(~M&P5q!ABEn>Ol3#1!4
zT*|yzG6#o3&?jhblz93k9gC&l&u^4CD3uVNmL!L2Z<P8EsQ#r^gTFaaN~jwyb8j9z
zNH4B{rc(i;(~*)5CkxcfS@Redh)zdJJjRu`l7pm+eW#>4U+(t#5&&O)Cl(|<&O1@h
zKq`XXDcL185JB&hSW+LA=KzDG#~l+SCIrdME7fvqp`f;1?jAd%(8Wf%`1Ccu?6>t-
zJmsrp*Idi#_9#9geUm=j9;H9YbPXTu`5t#KF2CWXn@PRyQgi2~!DNtcCQ15dlD{8)
zfup?cYwr4X*hhMOw2G=mdi^nh?dwRTL}P-s5=p}y6Hp>!F6s5h1pb7;OwC|7Q?uKH
z<oLi$%`A<4V*@)ivm~Zw<2nU0H#;PU1|8F>DM7{Dpfa<&vY@Vdx~ik<eucXsJte5h
z>T|4)(s|w)B+fSHSU_|G>#m^+h@tKb*w><K0FroDpf3KFJIuc;Na$yFLWSwBfM<4t
zG!tlQpjLd#y}+LuB)W>X!z3o38n6VEBae<^#c6@6xzcU)rv-@y%Onqprv>Nslm|#K
zQHys6>VK|uoBX?jgzjsE3e(*|_a5?I4M^Qi57e3~-M;?x`0wOEXS)2I(Fxz2!QXuw
zoo2*;CkHw+<nL%@NTTnV8K|Fq+daQ9GqB$(h6>ZnfDjrx>Gt8GdzlrKpZ~VItFkaF
zNa(Ia$gs@{diJV*KB?L0OMV}eH(cdjmMHu_)=Lg`elL2Bq|INDPR$Q0mItc$)$SKN
zT|n*54_JN4{__RW<`)KuM+0@=)o$-rFlB&XdNLr~3xhfny9!8!E(|zI5hnuTL<@u9
zQJhF7c0$l?eo<iCyrrPcqQJI!OOiIfD4@-MP^tCcf0kkM@40^;dVy~9%Ob}HQu)gw
z#|CO%`w|3*PRoK)P|f$>6IGqksV9Sq9f2DAefM|iCxfcI_P|c!fn{uBJP?Qwu#R9-
z1w_TNRKJ|3brKI;8K~ADxDEcwAfbB~p~AE>pm!0!=_IbUDp1e;0KZukOEP36v3~&*
z%B>Dm;fHS5!s^J3P|3Sm%sA1}T)5!Yp!}mBx=ynH)*zv`c*rb1xHVvlN1Pjou&qJU
zaH3YEG(^p<LGv)VaRH{5wgqbGkKJyiZIK^CMaDMq<DY0I%==uB=vTZ-)n7`?ob<Ks
z|0zJ|ZT~`i^|_$$dDSy93o>!m?SZ=ETKAs9_E;}**6pI#*Kn`F>D2C^;xB<3aGg7{
z>tJ-+9q>L|7B7S48Fi4@A0(?!CYZAij-F8qt-R_w_om8$hDNTvLGl9aMux&){3%G@
z@F@zV-xshfk|BJsIPSq9aVSvNUhg)wf+-mU6Ehx&#Djrn#(yB04+dON7smzSxCevI
zhpgiYK|AiNk>gqlO1v65t|f`%zABEZw;%@NDycVvc8Na+s&s?9^BM>k^UcV4f#~&S
zU?a-_(d*5isJkK*5$AnV`UazyESTR6di@!_WXL2Pz0zp$R*>vbeV^>53`wWn2`c^>
zs4H%Cr`HTY+&cl$i|>|Y`w;Q+cY|``r|#z}uK?i^?*?{~3WWLHz<%Ta$bY{Zu&R*x
z4UjJ9-5`Cw{%3)#0yIbae$_7<>E!<~NL-xx<Go*W&n!>9$?a0vIz%^5$Yv@G)Lizo
z1Bi?d1Gdb~zsUWx4}<n!)^;UT{zWJqOyGG-p~N2sy&_dKlNK}JOV#V8mDi?ICxeRd
zVP&S>;|w`#*H(2<U%thimp&QTM=iBd6`#;7O@jxb7FZunRss2oPXZ1nrJ2@BgC8BL
zkw0_0`lCZTP(X!gbcl82oViw7_Lxxp_Gj)$e@tk*4yc+;gJ)R>6MEhrD(B~JAOH5y
zeij`nOt*(z$H94F!bQf0>Z+f+{r$0FLOZEYVHz9aq<qByi1EgS>ZzZ*EroGm!o0?T
z3e&ids}lophM_#v3oGsnRn7mpeLD@M6u$|%LnbX`sI-tf!o-wNw-Dt|a8s>dGfgBF
z<~zbpX0i)J?>j<{Bg7GbIN}{)aY|@<b|L5nGC8z8yQQGa<k0r)mLv^ia!3RD7KW-z
zr>2D!_hG1u3q!6~#dTFVb^b5h-sx#!RiJz3Ix*DUVWP<x3W#E0(+2|ii@QVm8mW{z
zG1T->?fQk=;!h6~ExOx+3e)tE18*5(>%<~6Le=?~?)m<V(DrRmHJQFmu4vSWp=O3^
z>@VFx{>(7ZY$b`IW`=$GYD3kDq3#LQ;a_5?dqO)9K!xd^kbyw%xYUWE?hVzzU%Acx
zy<wuCl_Z9`HykifUmK~D#fl2mJ->2?1S)2d{#FUokFn;3ykZP1en(|pSx|*_RduT4
zuifFDE~Lz}LXN4$tQU$|?++7mtXWT+j9J0v0VAm}-yasuat%l+?+?%Jrp*e(toMiK
z%&}$_f;Q^|ky$MTtsaQXYDr?&2gIy@mj=l5*tucF6R7$c?XUZ-?vc~yhE=|{Xhtmh
zNT}`}>vmR`+~%hIN5X_&j#QC^=tsha?y`OaqV4=p-F%zd&z~PNi8<#BQ%*C17KCc&
zZEoIQfTQU8&1iEj2wVDCCJMSRRG({wX<=w5jTznU7KTh311$-2E(+C%RyXt)MK;f9
zb1o8_%QdQunDenv-P!71RR36HbEs(XnAqItggF;uMz#Akx3(mUO^_KxGx`S4;t)qG
zXnBmGOG4E&+O7AOM14y}PxzKd-x6vjy2YiTx@EL`roS{y^s;4?>E6<id!&Ym+1|2H
ztrn(baYe{vZ<$m?y_Uoxae1gd8SNJR<zd3i9f-35)AEoo07iZ8u04*+j-j?54--0y
z0VO{brpH5~7#K-}Ls${2TgSM?!iu<bpMz;d*tcKx)wt}ibZTW-@l>du8RK5rX&Cje
zGURJh;;F;LQ&)$HHO5n0!BiRq6G{^Z_v$cbKHvewf~%!tlO70&tF8{atg)^t1nsJS
zh+NfD(B==3t6Gw{>L0{aXNjw3)2Ve~#UE4n>J)sn^-xttmM5pG^jP=$)7M2_n-#BJ
zuf6she|_YOQ2B%P;)^m+WW`}OgzA;C3=|t86F`M&gP4FxHB6vqLv`jjccA}lG*Cd*
zWCjYJvcg1hH->8bIJcL-F>(v2Fl`jK7^InS*iE5&c^oT>O_2$*+F>_|gZ0o%IPB(7
zwTySqEo_eeP8@b~$lqOzorb4V+ro-np_(+F9%VSC*d}(8HNbGO)Alg2Gc;=eFm{4q
z>;!~+dt@gdif@nX1jJ6;!!A3morIw6v?H>UrJ&7@$WE3dcG@9!I=~z5DleVd8&<qh
z8J6cvaQ9WF_l8wD-Jf`3nLklQdW29*e?yM~G*fpHk^Cnqr?g&A474v)FaE~8sIV`z
z>n5l$?F*T3^9EbEfcrx=Xp%d{-yd@sGF+oH69qjGs&^*2-z^-78i}VZbRZ;b+ZEL7
z2yQck6>o;>CwI7)cN)Q;9}0OrE&e}3>h<+7@rLz(F!c(-yc`0;{d#CWg#+a8UJtpa
zDgF<nUSAK-e8bkO5OlpBj_TD?D9PcdUM)%L^)U7N-4vh1y!rZGdycj1=BT?SyJ!DD
DWMLg#

delta 46367
zcmZ_1cbpVO`aizY)6?D4GrK#}6PBH@GYd;*m$VB87Dd1_o(a#>3yR1oCxQofAHB3h
zK{5ywk|c<L5=4aoR>@Ja#3cuhARvkol=OQ)Rn;`->-YU{-qp|ZuBY--PgVEKd$0Cl
zR;y=US6`*CyRZ7W=in3WsviTHBTslL>#IL%W`rI2!H8r&|F>to!WQ)OjLJ;z?J2J5
zyW}x*+H~sv`WrnuvJrzlF_!v=r!2GeBhRYZ$~T_OsINWWD49vSJoypV6KwIfo+nuQ
zGoBVcwjsyVEl+;dcQrCI&v>qRf|H*z6)nrscDu6rD6S?0^4Sk7w8t{)1&`0e+F$m>
z?t7}!%U#;{c%xg#^eY|Pztpi?x=#DfFPC?GsYzK`<2&n`>2$i)%N@J)NFRH9Wct2t
zU0;O+{cQVYhgaHndAZ|V=``DR)f3A}*Xi1&WBPSGex>W{br)XuoN#6ScGEK;TVb_W
z<45%0WuC~^x>>AOnekZW{z9$HmAl(z<e42zRm)PcEVYUatgdw|u5xL4X13{}L<Om?
zYBg=>CfMj+vprXFS?WQSsG)TzKIqb_Nf{SZ4!ZK|+Yl-TUCkbpDtLI5&4x<Dqb@Bd
zWfV$vSxFm0<*2L9-R664o(<q>SEgl=HqO=Xw3Cq=TBlw4wWXGui#2IwZgg=i)l$E6
zF};?yso{4nEhVK?D1GNj-)TcAedlWPyg5WDc`WsUiz&6Wp$#uMN**X(aHU&HB@dJ?
zxE^e8j_~lDG)uki$}Fp`jZ{jmyR;lBra|kvE4RRg(7Nubd#5>DWTjhbZ&p!Ho7=Fr
zqD7^U4xQdgUWpB%(_6Xo33HZeDk?hBP$g@8=8yHYI!f+P#YmceF;$f}-3az>vGz*i
z5sJbql@if9BNU4>69m-=B|m0PMfSihOB<~y<5+_dZAt}xnUp1^qY6eVKAXh_meGpE
z8<(DfWwa7cn7KmOAeQ7f#cc*nFFiN<do7e<jG{I&L#EG8Qge{V6!otEO$6ImMZLSm
z|E8io-&54znm@WwXxKSb$@)%VT^njY1g0uR#GFhea8ZYy&R%b%O)Z|TC<ZqliLiIN
z;`Q4QIZRh_1Lj*?1rKMjdm3y1ES{w(J}E;*oTd09HiXJ7rCPq(fUCgn+3aLvt>pRH
zb|twK1(h`0t|UM(%(kl<5Dc@as;Nc+4TAB9coh*8RWw^kJZR2QcqUNzG}EJr*3eb{
zsgsKv74fO!OG_R%a`{v#yu*g1q}<)Yyy@c{=<i>#BTcn0m5iBrzf`N~VZ-jylI34H
zgenNXQhYTe1L_vAsDTYZ_?6PIk@+#YHS9(it1_qW(&i{_s~ipwB|Am;fTK#WiX;aO
zjVh&f9do=Wm}Y5*73CX6jSW=T*3MdjJ${c7WUp)9H(Ae?+Upf~YB!w*s>6y`^gNfM
zf$Fdlj`FSsh^}^6$@>Of%`y#`r=cEmEbWM*9#=fFZh0E?jw+f3F|RGAS)OBxw#;Rw
zc*!vIPAW?ESTM~_bk`$gE=5PpAW3v{K$vn;$xp~q>7YERqzcU&qUWJO&naxh813ga
zF2z8_pL6QRK>eI^>c;@nImP0W0IV^<bWSO(VUAVMw-rmfNCW!Py;`0ta8WU;iN38+
z-@Zb9dqQ*k2ICdGngGFg#qQyNV7x*-d>7e9T~WKPD81SD_h~yT@JrM#(xG<Uu3bQ=
zU01>pUb}#(-RnxUw_DUMCGgt4p{TvwqIP8(^lsX<E0a*WJ>68h<=g^{n0{_05o?%c
zt=njKwgC{6i=sdg&wK%1uYj<rpF7AG8<<Yxrk^_&HwTNN0KVf^YRCSQevG-=83pW6
z8?940l59E}An&++V&p;{bnm#M)g?PE2=BOS)-o?qUsM#d(}+ypw%VJn@(~UPjfoL%
zpJ;gqfn$U_UknjIaEx%*s?9qNANHf%>}YpARt5mgQEu610HHa`E&B{0G)KAZKEq2s
z&Mo>30BjlO*r1_>$GPR4i>F{3=azj25KQCT=rfCGK6G2!WOvpVY|R5&CU>&iu*|1X
zIyd#0scg`L+B3yd-Llb<2&SoSIU53kX{sB2<q58WhtpZ^L)ug2(`{SaiVLNhZZ{Di
z3E52q2!`p@MEzAxfwrETdH*5JtF)f$a8NVPb^F8w=;qBl*B$2`0W76vp6f1YXnsZQ
z;wHGjtu&5RDy-pCT4Bcjs8-WejwI2{5CGi*w~xCABoC7oxC_Lz1<3U=ZOs;RsM^X*
zm)~k7u9lS!2Q_o0V-huUr8~~oSx{0lSGpTFF$bZFJy>U#yR$a3eUE7a1Iyi>FjcXK
zFS9G$?CJsi@glLju5c@SVAC_y#0qy|b+a881^p^^>T&INsa0+zP8||5<Qc7U7o^M&
z(7%BJ*Rnr7p?z4e)~)1AA)e|^B+Uo83=CV(3ZK*-E?DnY3Z)ErKI`2@HO-f~3`+bJ
z8~CKwsqibuAaZoRB7^o&kuWQ4b7%eNX5pu_UDh_YCy$qjFQVHq#@O`(`frQG@(Ij`
zkOvSX+i3{hgN$4>Tz9b7+G(v)JKPHQ2`LdWJKS~Zau*61a5vlBP8*im?N(}Wi;+mF
z?z;8NAJIq<La`2H{`s`_hO6L!Tj4!}QXzGKdd8o*5XyCk<vgRkP;kht@TP(cmFo~S
z75XqBM$Qp7_!;e~^byA-^4E@#NeAITLI`bt(w({ajCRPCKIvBKN~6d@JLzsvOjSf;
zSQgH@+4X0&z3H>)kWz|Vva{~eGV@(wIwt=M?##vKw6H6E!6~5uu?tkf6*Nj!OS|IE
z>dWf>QCl9k;)c_L8pI@oQTmIU{rpGm-jZM3icVQjDk}CDw~=i_)Xp#NK+wFC>)_#a
zH+%U{+Fixh9UVTOyA82gs$xEOV?OW5bzn?Sw&hRS%f&ra(f`ESp!QS~Vy(u6h-`YQ
zSgRlBDnNbMi+|RhY|}@TLr>*Hua7D{20+--M=h!+4W*&iM=dTfS7|7-2fm=1HA{8H
zKG)K0#Iv4ACi{7<wmWyU3Qx5uGVxIP8EgHbR#wbZIZGiCtW5QaDHsr}OofkG%2n`i
z9Gm{4)~tA(Dr?Ncr=@YK5#ojbLS>v9%`=;D6_kD=GdgIc#S<MB>b(<H%$HQ>9$xy1
zY9wkl;wm7R%sO?@niNlVRH(R<RqT+23Ke&<ipftHhVD6yt?!^UE1zapm`9;`W}4~~
zbqolGX=+U|&j5m9nu^XlmsU6r_1>B6?w7PrTF!JR$itec%GCfepqQyjKOPViGgUa3
zlia9t_*b8)SramKJ8BbMfzMR*p^-EVYE;vUGQ0nRURu1!u4<%$Y>_H`EI^PgQqgPL
zaveOZWO=V>zbUV@&C&RVpwc!6kc3oA)CnLMDydG^VyGcoRQ;;V_*b;`uHsdy;^j4m
zR4A=d;iOST0zzpOW!sSJ0Ig-i|Ee`EUaKm?H_&)jTdM|z^9x8qYK<bZ6<0ysZ(!g3
zRcqa1gJUVx{RY)1d@YUF{RTBvM`lWOzd^0vfcHd=s(urD?NzO;e3QdKOZq0e^&kVY
zH>ounN(QR>O=^>-<}7MGji#0D?C`7F$E~(I6dI+fK0fD@3@EnSV-64$+iA?r@p1~?
z(vGXjDK)dPv-YuCf#1Sk)3^(I+-WItL61|F(Z&l;;jbN6qo-8iuTcW`*S=BJldAC7
zWE%ATi;CgiuuOu#c0wh8?LYxHg7zmKB`>x)bMbH5v$-VzwiV>Q&h~i4pwYPdI@^Om
z^R=h}ucgjs|LUdfESc}<c%d`j;}y=crg&k&d=DHUz9rBU(^4~;|Mb?9uGSfkoM@1W
z_Q-f-rw0T_#$)jX55+aXk?|DOGG~Z<eU|!#N2wJX>ta*B)S~RCKH89SqzI2eQ+#0i
z!eR4)?F)}(_az_LzVOtjX;vD%{C-Q_mRZ_YD_6_6IUIg8<TlT(-sA_zHcv`8F`D8B
z$2Lz%BXb!!LYk6|C`aawceGYY`9X&x8yp8cayEbvI1YMl^`~rb9P~6PH7|%#<)De#
z!a>?kEsr}CIiNW1k()qG$pOW2PhnHpC38S=+|%q1^M=OF$hFi<p3JGiT7~=GOAbjc
zNG^GNb~EOJ<dP?3_t9LCT=Ep8&Alck30T@NO&OV)F<g7bQ-Pm$wFW>lO!JA5f~EvO
zGfc~~8#(}*VHz4*bkP91=rFDNNKM2BAWj=!s0`QChJ3#!lQ3nBpd{LxX-W_Q2958{
z+P>MNW0&si-($2$36jL}00B^p)})^eh+Icgt~W#_T9!I~#_}<mtL1pda0~rmymqU1
zkrm@L>0rYP0L6F>4)z!?rc?~cg<966%ngR+EU-|+rfd{Z>olcSvS|~vF)b=>Y9xZX
z(xwIkb){zUa1*J3x>BoN!+d}<;NepC#zgI*@}&*~MO>CT3^c(m)hw~8(fI_sR6{tT
zuP_3&wUS+%sJ-1{r9(lp*-D3krrVX8CE8c#)9p$Pe&=tv5in^DTRKU5uzZcf;0D7Q
zhk;hUHJV&>bUyp8(Xi-DqtJj(Td7@{Ht%cGl@_}k4tN0SE{B8GzFl@LLkIcp(%_K3
z&M6>U#cEE~y0xrw7<h2OVW9c9N)vHG<jR8!TDs62pmPfJ#xq)G*HrBtcc(L&66Rw<
z=Tq((Eh6T9K;(Ny!@N&x4<Kf{Gg|TQ%>beZ1p9jflv45xrbyFHL97jF?VdIVi2}nl
zys9Zhv5hL5{DxjVbNWNAqf(9}F*I~VM|rL~mQw)Xs?!Z<_P$EpppsTeogza0GJ|Gm
zU%JZs>9;rx6sVsrx3dreM?XC(=0HGj^wZ(=ZxkGudxvHEeXMPEl@D_`ys%@KE_=GJ
z&|ExBmpvU29K&?<^p8bn!dyIx4V$CQDIeuf&{RCip`fXFlx}f%AEwh(JW8)qj}KQ}
z!A#6_u_FdR0hlgFDj+nOE=MXLG?{LXR9(TeJ5lF5;<f<jQWG5;{IFr7V*^dT6P;qv
z<U5gy(Ju!B7W2$fJ?pHV(LT}KdUUC7#LXq-1Q|49SL;eN_ObHr<nsK?9T}`TB}fs=
z8=ixAwJzNuK=7{CvB*xLDmG{sZOZgnq)l^`Y;u%nfNs*gIlMzb2uhpupk+>^IyJ}x
z+Q!-~(cUlFrc2iwiO|`mCwQ!yWT3N6uUB70It+q4Sz)C%v}C7~4~@Z{y4<`&hJ<u%
z-bYjKH)sqV&m64On7j12UFS%J(s4as%s+roI<BMRtrsOiwVu(j)Gv0kL;dt>ndQs0
z*{+62vTKBf+!<Xi_y!+xXLKz1m0|265wDtTWPOksze2mqv?e3eML|;d(x~SthEl|O
zZSdBtDMD1hd|{xcsFEoLjM$DE0!9{7S>sLGj?`2`ZjO-%p{XP^7?wf^a9XCuW^Jge
zaGIg;@=z)zlhh&v#4#Ue^Ng(Tjm+0uv}Q_Ro`J3UQp$seLq1{Ewrk6)e`3f@IufD%
ziGeBTT_J>B@#luJi~X`)8(D#0Vxx{I2jo6CFkxaP0~cBta_L=$n<fpOu=8zH>;gk=
zN(&iJ`TA`)YGI+Frf*L|Q8R{G<Mt$QFEZ4cw<m#XamBCF(7a22m4wEt{1q7n+!uyg
z{dO`;RbLuv<J*%k-7Ni;VVFIZ8ES1us^V?9lIn6pt>dJ<?Z)t4VW_okPr|TW`76WV
z{H*$w6nvT0|HJ>b8@|b!Uzv}Ycdelo5q*VSi*Nwe8EWC}Sz=9J|116wocUjog%R-h
zRb50Zb>pu}6vb%0oqiW@w=G76T6!x>q@m%q8tR?5C!yiC8Nzkpwn7RGx7|?hzFi9K
z_Vw-64=J?Uj$bLF-F6ztak}V;7+7kRp&VkqUD^i~_$7u8Vr9s*%1EVUPsBu_RT+hc
zZuLaP&3ocL;u1Ykaf_a~-%tx~PeOqX7;5VFByb<3Zc)ZZ45*J9$~i-2CA+mI75Hr%
zL1CGrju9v|Bn!{oGQus4IA*9NlHM(iIPP=-o&+PlarzEV0{4G^C52i&f#Fd9b~04!
zNv9>bCaU$+?OBSJ{MJyL-BJ_{dB#x7Z%;y&XASipvo$X_n9mzZvU*v%^&8!LbbT$|
z{>@I^?`D7Aqcu(A0e3sm-V}E_Zy+l11STGYcYZXoem2<rJ=$Y|9}Q1{PlP<a^OL~>
zd$r=!Plmz+pdO?`_a`G+V5X5HVl|d}(O`evs}-g$8VYyxC>25%NeF&0AkZa)P1viY
zQ<n_k+fXV`hEO3FLQP#Z*#5m*_0(lU;eI)UsJ$)|Q!y7p0k0S=QKglnt~g9oo+~8O
z2IWEM=9+<URi`SgwRO$#gm`gyxaPWn=pdihMW6<l2Vy;dptx=zI`|0kK@i4LZy3zj
zr#+gw;RsQ&Zjcb7Ob`OPX|Nvqv?mH~+7q*w?QfD$1s6iGda~pDv|a^0y|;3sQuXvg
zrX`m_sd};A`?Y%udU<8M67dzt^dgyNTn0U)H#@RlyQ84DS2iR9D3Iw*GWT&AjKn^y
z*#WIhs*hLUQ4Ls0k-<JBLzROVOMh?H5cb{yR8D`dC(0{_M_2}Ul?J?WibQAym~S#Y
zfS?%Q#S&kHY!D~GSp;i-P^(q&j#sWTNQBHgBts*R$4&;ae;(AD7Yy_&Jc2}tkQqoa
zcXJt3%^<ezpjKWm$g6O70y0!JgGi<YmqFDGX7vwgEmMQ-szEdaGJ{Fx_i&lKmNwj*
zwU!Myq&-t}xYx*qFXL9d*!qm}Dr3E>`K`;;f%|*0sPQzW9@b8mj`phcxZ^AyfpUx&
zlO(y)A_e9#O1VOAvzPpW8JWT(+Am7^46pQak&1Si;gvorAnIm@S8jL!!7;;&4bMr;
zjo`r3+3fenwbLzTI~25Mn(a`KOE%kUi5&n`Kr!2!SB>wwyi|kp*uTHg9%?bqVW2J3
zJcog@ndg-o9;kp}o);UQ-*Fp&K4tFzYQMktQ-{F~hEKgdsyh$tq$T51Z-B?~36hQ%
zar|ZEu6g0EX{)@-n#}nBYD?WO;-}a--~nh>Ifjq}x5{gYO*Ni^W|dbg0K@`kca^tr
zjaO`{DFJaG^x@TB^)+)vF51?#wA0?Kk1~~~wdH!v(_S7Vb*s3QqFwhYy-d}d?nUF8
zvT-RbGx-PY1GV&q7yb;jrFe#FyXjTi-j)JedYbCJ<}3;}nAEyMGjCqf>bon3n)2QO
zQc-}RrmRUoC=E5`VK^Xsk)dY%Il&6Zw_iie#IrO*6Dg%2>!IeI5Az+FOrjmxQ1f@s
zn1jf*H_=|&C{uaQRAaxm(wXYNXsW9M38Gf<7_~aelzj{kMvXG%ju;R|jWUIUM_j1Y
zQD*u*Q`9OYh%@@pro6@=llV1;F{Zr6a4QjP%(SmD+)72Oj5TqMfezbDbV6-{sZ3$(
zuWFB1;FoPE^}`8{q0|p2n6mky1?mZ=Y<@r(I>9WQa?4QrGQmX0P@cpMo#YrQ6T$XA
z3@zmMEr<@qRH^$+CPVq=)TAtDWfon-=Ct7~TwUVb8>ujCmZ^*04oFg_6*7lW7}|$0
zw3)Rp^T7@H>!Hs~grSd9xA&osXlqPm`+~OmF?R)iiG2prLAS>A3OYd0tsy#!9RZ@8
zYs~O=l#}`+CF~%Nd#$N9;QfSBwsX&Iohf{2E`%iTt~Z6pZ6~2OZ7|^tRZtI;njrhi
z6rQJ@glTi5iTUj|DYVTdQ+V{Y6e?>ok=-T*k9&)$CT}HSM1p?n?Y8nk8dSHL>T~8;
zn%8{P(7RYOk3R0PU8X$OKq945_0gOH2%cRgPJ$%F;Mrwb+`plxXg(fuF+*ki?A=FG
zT@_1d`aKm@red>DR#j$>m>nSl(kc_PqadYVM3tG}M%Fa-3Ap7|W~?<IevqdW8h%yg
zy{*jt)ZTtXpUtdmrYm+uNk8^t=T0xT@6oAim-MloqtdO?uXpX<BXdyGUv<?yZt?>c
zx9Z3A^Iuarjp^rc%szfO`|u?8nxX%;?1ZT{=QfCED9K4veF~LoNNKm_Ic2KzTxM<5
zpPy!*vnKoA(Cc(KYszB-q@t{6&7g>$0ivvDO)Mr<RzQ^XtQiw?8bMyxvu3;vFRM(U
zvYs_t-Dj5YjKFx_WdHQ)4PQEMD&ok=&s*xe85S`%KxA~DW)zVTW)#5m!=gaErBJEo
z&BBLdM$~q^QqP;edBFULcISR-y~}0>7YILgm0z}}2qdG=T{dO(77zwqHbWws4TzjC
zn>ZPP?*tB@t0ueT(|g`?)uEuZ>Z(1<KnN69O?j&ekSoErUFt*QW?R}=U)ImQ%mTmu
zg{R(FpIkw*(S+lD%KJXme4pHdY}tk)EjGx-p0A<ju}>|%_d^qWY7<^|A%ucW^r?^X
z#uO=N%t=0VfD85I1{3BFpOOJ{Z_{SR1W#$1|Acgxr|fedc3w0WaCLH=7Wgm?Q|}Nd
zAYABE`?<`mG`zB@dwjt@ucmKr@r6%Lwn#)xe&Lff35aU=!WR<v6aY~TU-;k>)A?RD
zRr4~oB42OTVVO@66BQCE)hAbZK&UM9VU?$52Sl?k^A$WOEVY|`nJ@JKZ*~%p&A!an
z_I~qSinnJ|v+vA27t<r2=XW}`QmgOu$zVH#knv7mp17C-h>Umoa4|(>OoMo*ug=qa
z4#HDpL)Y+j`s%hbZ_t97O$z%nTT*&Y*Pr)0xzOE;{XTgk2SUhYzfa!C0VE|KPWMDE
zxNQQM5I5QIROYhZmweFt6VC*5=wUXyP=Ee~!%iM_E_c``<C@t#M0MCF<C=iT<FF5L
zO_2vY9Kc%bWJ$=sp^_Z-)qctxPQxUdR?L&W%&XP)5w7P?I@!?S-ASi$DUx;4X<P~(
zpQOeW*?5r6Nnc9L1fWDV`IM4wV{RwkHJhscqA&A@BK>RS`HN02bXVu1PdXNmLM|75
zawGvFmy14(B#{dRn=ks356i+(u$c;T(O2*gzqXT2cMh)j*x=gw?^<4QGNEYl6(<vl
zCSUPMrvN(0<cbeY!3T8gjyrGz{aMp8={kB1ckVzxocaHt068=QhOj5=>pe?`_~p8b
zL{JU!%b+44sD}6vROE|N4t27TV;bn=ibpys)a6I|y<*~n2vkP;an_E_2691hMzeJd
z^p-6~`{g)8BJ3aSm%R!Q45R%)ac%?%hS7ewgmfn$hY(|}iuJM<%weDji#ZI`FPUHV
zOQ?{JAN}%P&VXJwj(u9J-&a1)VW5?9oWnqV^*Db}tOPl{*NyXI;O?c-kwXSg%``62
zpL5+a)#0G?h^c<r*boB8RKIj>0b#{dD#v766LT$Xu0QKXf99)(`XpD)xzrFex#ePV
z``oWA@~d?DMF$qUDoV=?X{>j1RV?r$>PC~Bc!nxn=tmU8NkK*#zxwA}e2e|cm*5N9
zbeJn;(k&fowIzP|E=~$~EB%O8IVs@%!ms)(%(|$AT<S5)*}$fH{SM3hiimF`5k$-V
zxx#w@gwArm^d11w!<YM|_dt-ZsLTD*dypx#qAvHtd+0^AolE^;O{Q9@?smPn#_niH
zrDVTXxGjLlX^mexKY++-jo<n=A4>$q#%GN`^yKYHT&dl^XuFJzP~`RO-(`Av$$BRr
z%6`3HM*SfJmGyo^{U-?Hu##-aoGQ}`ToqgFu8^xxhumU!1we3Y@yiVbAUL-8vHa&?
z9RM`I;ZNf>8M%psg|S=wg)d+wxRpd%`ClC9;&DL8p(F3`D|KRHT<Nymdvs#`n(Gr<
zAVq8z@Ek_$u=_M1jM(81iZuZcM(proO`uI{E_LbM>`!;-zi+kMVW1wp+hL#{z1trY
zXJt?U!)`y$%HE?>?Oe=(+EKr9)}Og_hn}ZY;J0lFO@l|B>Y!=xs68^E2cDxeGRU0=
zggbxKA3y6C?mQ)Mcm9}Py7QDG-1*~v5u@Z<!ks_vuilc^V}%q$qaOF)`<$#>u8I7<
z@k<w6N}(>l@mJ@uS(^+tf8)RR54S5~mjCasvc#19Uw?HTF|-xY_5SO>x8i>^v2!}%
zmm2|@B?9Ote`N&%=qLTvAGkeB1kg|UMa<sjM*#hlzvzFmL;(Gi|6Z{xmh^Waf`0mT
zezDQ`_V!v7{p^fi{e#_|QJf3@%<2|;($(^U(|~m2`GQ~G(ah!7O)mK3c2}Y$<^px4
zk=VL=FoRw5XZ6aYTIxY1c+Kw#nycVtdH9j|bw6u$uf95U-7n)>NJR@>r_t~N7ee2-
z;b%py^!BM6ei_Qd!8U|$kkIeB5YSCO`=FKnY{5;x4A$Z3nkPdDSBsGytm?_)_v!bf
zduHDv;(@_z$oxpQqN@$g&KjQi$9;M?C3kQ(j)eXUU49lggk5c;zmOV|t%%!}NCf|o
zY;^dUR33ifH<bOOt^QGJXts<7A`wDENvNj~0vyI#->>(+b6B>*hYmE!(qSazhY^Uc
zjm*xPnC&usrrSe@up_e(RPBU3cu?$JcH@5i)q;1kWpopXP=7ZYXWI{Q8EA}V{ePoB
zoEn`iD+6II$c)a0bJ2(F;Bl?7?1$gz{ZeDI<rx<eAv87{XI#gH5UOkf8~uR(-}HoR
z*+2+RL1+S1*{N)-T)6MCJUi>1%(w^jlUnZbY+NdQ6vID2>%mGk{BixU#w)X>2Z2P`
zwldo*-ktzN1}n33a`|0L=wK<@n5}Hf1fI|jxGL~d?D+8jdK<Iljvo+u8?)t(9}w-f
zF+031TU=<O1axIf+mx+t%@!A$WE%7~<6aG)Mr9H%G;PVI3r#fX2dD;iWGiiB#cB5H
zQ+o3k0fhUGM=)YXc0ep<fFRqEEf+IDjPo7Yaxo*w7qcDNaxs%Bw3zM4#$t9q&kYoN
znA%Q%pyi%yIXwpWYOyC<Iu3xyc2Bl+8~{lt8`ERoY)*lx>QZ)QU^~5^_QEBHgl79o
z4hhZnm$Id+8Q`=1CF%|2Y68OcOWD%ZBq&_XOWANWXOQ0<patP(cBbne^qH>mn@%?5
zH{Z;b?m488&CTqn*j@s{)|=VbUZyw)WP9iE^M2OlPrBBycaG?upr<vUcaA*n2ZUnp
z9Q(LGK%VY^9Ddy28URHekaMfL$lo21bE~?@-yM)6Z!JI=OapRo-2VuM7Q&l@bF#*=
z!++Kvwg%_OBWMH(F_3eVLJ^Gz1O>1-!U9B}7?J~*xeZ1RB6Ku@`#rDUUob339-AN$
zGQ)DvDnbTm1UpSKBXZ=xLBxzwb1-lo;yf_yUH0e;`XdGJ%6b4f4X$@{&@kv9fGFu`
zmU%&cpkQ>4JP|@7WJc#;HzIgYe8!UP^+#&5962|ksE}bfa8bXdTMj|EcsW_$=eT0~
zb23BQ>vy;_%FB8KHFt3iLM#uXae`C_m8|?#{n6se969cgh{9Ipc!lE&2%9U3^;xch
zhf7)JRs9boOC1#&s!MacB8U>?Lv?8mf+!;}r63#FwUXW2S%0_1O1lY>h%&6Sn-CBb
zD|2LL1w^hZsZO5c3_xpG?rVCxk~Ok!K}&;VO-_Pe87D|WIk-?wvo0{|aRVFin%=v7
zgOe)_kqtR=qX8LEY{-$9Mgc*wAqRbT2zhovGI49>@h*C<t9+}&K`zl&hlBe6)|{Z&
z(nALvTXQfm^XrR2+7|B0Oz4W$w8bumgKmB9%JGTi6GGtFl~dG+k4->u?8<3c#^<LX
zjfB1I;_G^O@!lL6`9mU9_U6dQA0Slr=D_*w!7az&KER&;oBsEP2b^Z23ql8+W}*v1
z2dJ4Aiwc8-ax{mj-Sj0bk2;pp1)-x(JJH&7G)G>I4Dt&?N2$j6Mav*v);y8Ju65IA
zmY;Aq=!Vb<hl6eiop9QkZU~*oi6{At5u_VJr}>PLZg|?BERYJF)AnQm2%XcnCW|25
z4LUC-i#7mg`twfibT{a{lRMoFI&V)F5C+qEnk@JY5d@~M<zx-ay!M9PT(Pd@cyjrB
z4+sLoL&;GJ_<IjE0YL&R+yX#!@#{25=%%lS$7*}Bx^L<qr+Vhf16w3QsAn$fd%q9@
z?8|<9Q$LvMn=8VE(4@iAHy68Q>;;Gk*7axS-_nN^^mmwO#^_H><mLFNr@zC-{R3Xk
zJGs)!K_X<{$;DE25t~g90<fcVv!-T#{)hgPD=<12?{l1>3=qM@nH;<RFa1<%Os;%k
z1c^`{lZzP3he8OYeUGXC(PyUK%awB^LYNSGFBfy<HX#H!k!}2s{&i|%uJlt7ZKTv(
z42O+E2<4f=zNpYQr>Eq~*$weT2u;bw>^8`x`Onf8<z_9*%<8F|p6H@n+^3%gW!2*I
zRj$%1Hp(@on|2p-zpZzCyfRnLTzCvKD|6*tBtYa<nTxwfwBP|^OjPFP-OF8Tg76oR
zZ)I+^d-#hJ7EM7*bJ-t8>ZNxBpw}#QxcL;9D=#VIDY%zX*$)O`amdn+<z}7Bb;Y*e
z6~QTQdZMhnzrHC`JV2lBuITYf$8@)je|w{2_Z|(>0483y?u^&Ai(l;2<)uztUQTy=
zqjSe}r|#)Dx`-FFU*d6bQv1J7c*(mvUiZd3+OOfZLHfmx#E^ceW9N<{gkHP5neNfC
z+iRV=wC^l=xpw!i>Go;<^7rqd+WxKd>)pEkwPS}KNR`SRU$U)AckR;ot@QuB(y@y$
zuRVWz{FV0IZxij&m1itoC$HT-{c6XzGQlDGo9^JTT%*8TPYo2J20D?;#tqjuJar;h
zT*9JMRP2e|w1_<dqV7)Q;$)fH1rY6WBDcYlJj_6lN7hc{7C%9rJ_MkBnp*uK-ss<t
z(BqE-3pWu@`D5AWfFM6@H##85Puq=7P&E2!yU|0`KhN?;zpL!5!%CT+wVNA4U_DFC
zJ%A!NVN3fdH|sK*`)7qWcP#VGNd0A3#ZS3Lb@=nD8m5}K2%~u!fzX)%h0TCqzi4+<
zK(Jr5Z3cwR7j2sf3Y#yI&4L{2mvWVRB{}s}K*M~JDm2V%<WjB-R{(<jQZB+3@+sIa
z<woz}!vIeu`=#8xmgaZ#DpCaJzPVXL0<PF$m+Z_v-}LD0&e8f;q3gLuO|vI$_9G~w
z)-Rw8$VA8JH(eF@Dfaq!fW@s}z$YTKfH1dTpq6NFK-kkSfS0ytuMY@EzF(lxfPgql
zr384QP<cBb?oM$T;hgpl;GP;)L4?|8U_eYDggg}-iwXwjkEKHbh%5&NFkcE?H2I)_
z*Z@J7R(U{Mm6!(wr2B)XP#qM&%q~=c1_#9C233mj0Fr7QDhqieg9Gx#BtR|=CuSDi
z6OUTjlt9+J%-!$lGu6P907ea6D^#P@S3Y1rPSi&ie_-2zL~wl&ko_7ETpt85nbA%w
zN=D9L3nuB070+-~sMIq8veb})$_y&?V_XHL{)jbxUw@+HBS(dZKC(+2<)!_IO3TB$
zQ7Zgg_R0JDxYD_f4wZ7QT}sH1PynUeL}Me*(lUXp<LEsfDlAx_g)<{3>z}%UnSg<~
zCzUsk%DXhc{?<qv&%U3kYh_DqZaf0_(tr#%1A=>L0O97(Xh)I<YqhljWqm-6O=ZP5
zjTV`gr|GY_DyV1UAzA}ZMMDCDYOQT1AgI=onbhq7(e2g-lIzj!D7;Atw0~6B1=JRN
zXvh@Q+PXlE;@guzv@X!_Zr&1kG=I1@vg0%K#~N-7$ZrH76`5}g$ZrGyLT4j21tPyx
z4!|9OO#7Mo6xRzo?16)144fSS8Djwi$&Nr=?5qH}7JMyHTsmCY5vVDGnRqIP&5l5=
zC(JL&f6XJupem4g@gu#ZtGvp|hR#>20zPq398$=pDp36{$xBXfRiL~jcgON*bQ}nX
z3)=wDJP?pOI6!C~2*@2AAT$pI>>XSlxxU8&;uU597<0_Af#QM30&)k3r(il3kUKa)
zFdYlPDSH-Os+y&p2xR>jV4ddZ&je2d;16*Byc%_+Gl9(ZIeL!k@iW->@e&{zWM=}>
zH3kIPnShK71ESu}1gtxFyA$N=&6z-`xp|hVts1r6g+Qj^JpDCS>kGEYNJe=s*sTM|
z#pGMcfXL+nO>5I>805o`3}n3*bj8NF+5BIOFk2h-=CJZIuQy}P*L%2v*8;e9&Id$3
zmE)!u5O)EfW^UTu7!cXqv_}LWvbjkkg4{PXpKR?L#Op76T<oRK^iSEM&-F&dND-p|
z&$)o~TL7WnH;5)`$F<RU`?JUb{dX<;!*}P^m(P!n`v>J4M1WxEA1oBxEI=^y57w>E
z--FC2G?2|$pf@QW=rB+}9vGB2ogf2-fx&<{HU%V|U@~QH5k)}97{;Ot^=;+D917~A
z!yF^1j}8mU*O>D8Mr~NI*&V!(=2IUX8RUJm6abndgR+kTLUUwL_EA7&K9VZnhR7Vk
zV`uy=qq|y;buy>UIW{OeXFl(oV}r7D0)k>}5S{Z6Xy}-wO$cUv6=d@k>Cfg)2;$9E
zdO<WsZ90kNE!LYfnPj&H5@F1wpj?^(!89p|rI}vbjZsBU3F1Qt_1TEWj1U{TSg%on
z1ksdu%%6M3o0Nc1o)W~F7KI|AjkcW54lmX}DxU7>5a;xuJd1-2bfyQfyTAoPr~u7m
z3zz84Tg<czk3<xHrd@bIFw6|f4Id!s1ThKK;0$QHk6GPHy=L*p*tYTx6yp=h$3b00
z`~acyaS#zd>{gH|=;yM3R_gbZ&vi1TJ@s5CQ);xiLHRl#RKPGdi0#PtqNr%J&)DTk
z{X&b+917Y}e`a^O7;m)Cf&t-l0)pbRV7&$uK!Fk1QZHmRztkToU+6GUh<jnsXIC)o
zuoni!w~R;y3=4yJNt_Sb7{&gUu(@CAQ(G)?DCm`(B|$lZLk1K}f^q(8I4Eexy(C!L
zOm-1$xW8nBm+DRK`_f_Xg5k@cd<8JZU&#3~C|>~t1jCm>yiz)erm7h2w^s#~da+?+
zmgzHCc)8xA1+W;&c#2wG<<u(eyH^F}w^#5KT&se$>za3PD(t)0venD=yNcHa<@J~t
z-*&GJ$^Z!<RMt}Ki~fUM_Xbvfh2Fg71}9T`4{}3Lz6TjoXuG{3m=Z4_0)k-!joii<
zJaJ3g9L)MU$a;UJ*AK@bxjAU~`PG0p29RfKkgfPi|9u4jO0w1N)_@S*8kDhNK#*<?
zA~sAbBOsb)YcO2F7j1%A*<sYyU_{&!kV#zWcmFY~q4;qcDBFSxJ_eG0@TterrA-<)
z7qy5djgdK?iE#+bMdcs{1kW~m5XUhLJ==q9!$!RnX44A1-L4uy5N)^H0}w>pgYrxe
z5JcO9h!xVAARx{Jw+HPrLBgUK+k^5<P$uC_aC?x>1QEtjJh+UrCzy2&3(rUFUz_yL
zgL{HFePI|k9$Z*Kj3~%jZPv%8_XcH*5~-Lu_ENs|S}CMpRaKDvyjlM-RTY%?laUIk
zDr)-rTnK1ikomUi4O07p^71k6k?>@^u3X54P@w%m_Pecm^@{zN*r<8HPrLp7L2RZP
za3NIDfuK^SdO`Zhj@`Sy(XB(rbeFE_&Ry}PvTo`2e{bKZbNd%NcjS!$Wm*Uz&I4xz
z!F3>rbEhAK?Wo{`L8YYnF;}`(hYlTI?}1$|ZI9XJZTjI99*J)`-~tB}4+ilqhx@n@
z=pKiHY~yylb?Q)1hCy&U144&r-l@)oFlihPvf{7x8mYrU8R5X~3J4tzBEo^&39tx#
z??{k!{aP<g9dVfGYY#_=sWlg(P+O3#{9135IvSKmG1-b2LPvu*ig}9*VQe1@vYI>e
zf259KiI=r!Lg-kqW^MB>E`(8gJjj;r(C<zkcZ7TpI!;29u~man7^r81nf#r4p^`f5
z)Se$=XM?rs@GJ7!^iJ}*AbWPVeoyLLP=2oisSr9B#0z|Mk3L(0kNjPbWk~2dhlwI7
z-x1RzTnGn`=YuS=M}IVRJ}9r9<4^@c=V=b6uvNB#3vS;BS+6~M%hdM{6W!(go|q8%
zg%IBE`60*-?a`k~|KKnMA@l<=&B5IpNa2N_tHI0@d-b_W`f5;qMFhzZyGp*w+cY$A
zI@Ht3dWZexfZi{+r-g&Qr=iU6z4T(g9MGRB=w->aKq6FoS!j!5E`wgzn{_>?H!SFF
z$(PG;vjsA}ExcS7=Q2Qj*cS)&WI-QG9una03Z+^&Bq-uC7!iHh<%4>yg1(jvf8llt
zWcpeNe^C#@RTJ!w+1-cqvVwk=>}5!VOg{^~40jA6gMR)t8+u4@RPeULLw)*f;t_eF
zPxogB4k54pmW)*9@Gjlo!VV9gQUDJfvas}Fy>a0Hr|i_D2T<8}A-Dz4T$^iUEwD1(
z4(mINz+B6S(mi>Ne+%Xli#>fxf3V~eOXIUIr9%4?D_n>AD?t?b6RYV1W*x4Biu}}K
zn@;I<OFp$U9+ZF()#RsEl)rOJ5IUb)&3{WTAOqsz=N7ART7RJQb4%lAag@rFBlToH
zG<$w-l|5`8LtA6uYD=uFO_nRR!^Pe|t=DtkmF~ngoz_37TVm27D}TdciG>fXY&4Jw
ze<g9FrL>5BVeomV^WQtN&8PKL#(PGu?(%eK-??*lHvb2`2;WRZ46Qo?a2+tYnCY&6
z`Af%c4bttqAe`3erH<VxOopIc*DmDtNAxxwyL4*b`N_;LXY~=vLmMrP-&UdgVE#rc
zhu<$F2=g~ub?-u)K~WQyw#CZ2Z1Lk@HGw+YVi^hHcqC{R-)`~kb148VDVAKD03o~G
zlKW>sux_`oTfls*CTM2gVX-=@k+=f@nmZg#TGe(~GTwlv(A;4m-oS5mBv9GfeoHxI
zW&WiaL8Sr-=%z>!izFa=+kQ)a77Gw;`>lMjbp-_5ehZ5SZN34q`QC5UJY<QO4<(40
z&jCxud}I>p=%9s|4^}s_A1uc#yp8%V=GTp0Es%gRAVsXqfXMZjQwH)?k5L&uBxflB
zi?vgha?Vm?qkr{rxqq<N4Wm0sMdw41u?cClIc3SE9#27d%7VWxia{?|oU)?lPz?IS
z9G=q>jn^qKt6Jg=TBbqoTT7ln%OspZpRw#u%q3_*fA6xyJ{t(N`Mo9gFn}=QdrR(N
z073V?W$$4URP~oE@nSRp+U1hdF0_@oWXY`zo`UI;CATtwV7g>sD>IHFR7u<n3}qb+
zWxh9!QEIg$WCw;YLJm^(CDHG+;UQ&oC^I3~c-mEg1aKooR2CrQhliw71_<uqA$edA
zh{_rs3Xcwn%Ay2bStCN~sF0{EnFhU)Az4{636=G3h$`zBVG8CX&-josC6sw1Xy8Iz
zlJ{n$*tSq_9v_ld!|)WG<3k7mP{RSjmhmBL$}L;u<$(zyb@DA+?8xZEkQU&cB<aCq
zP)!P9wxgR`G6~kI?}xN{<R>5vy>?oNy%jQ&FpS2@w2&MpfT*)+A=w^)uya~S-qZvH
z`LqyRBXVQ`;Y>^m6+R;K;vOKEsQ$2-<XHht4=E4Ca?`E5cERT_dZc@F>LI-)5LCF4
zI|RfiP4e+F-N~KC%k+@^HV>Y1HhFs&5V=neC4M7w=XcV$MDl(!#&ZYxj1VqP_|wmH
z?e<c-L)SOD^suwSd5t>bMJH<-Su;ZN<Tc6txEZ0KxG4+>;u#_MprYV(IblX9-9~0j
z<BEp*j8I`~vpLTiXjVvhG**}OY_8W~1rbC0OOjr+q-5I$+EvbS@}yxjD<rSKK^S??
z3dt+cfXH)JsE%FPbi<eOoE573Fh9IPb)uQ)gxJ7{u@((W18t6z7Y(#IPSw&tn-h`)
z4Z_H4P6$h?C?DPPofE3@TUkE)Gn8{eMUR>VynI-g=TZ3r=?B_(e<h6%{C4fusmCj?
z$)Z*88xfGOi%K^l<~iBZ-gRC`ehDMV_pb9o@E%0=_!<zNR=11FzXb#X=Y?uKOinpU
z3W50{d@!dV{Xp0M<0n7pTitL-M2AA1x_4l|%`^OMAcsnTplt<hf9Hqf_7_iK#r#m*
z&X%^n^FwfgKc(qBslW?f5Mq<^j5!?vz_h?&qGRU;PI>6qc|ph$=j9Lv(}ED3L{T0u
z%v}(|)pao@y>gf?2-SOvAE75{pS&o<KB;CjgV83kTI6J9!staIx#PxDWVI+%^G?Z4
zyW~Zo7A?(Xbj>?S$J47rnR@xg5(OR32ddQ$6@AcRbx7`g@f1|6L-HFyfS_6(DiNpr
zfUtUXsPXgCY9Fj7hjn$R$)C-2A~X2y+d`R#62?jeJ&w+`w>g>d4-SRog?~InX4^vY
z>pFnQY+DG6gs37vGTRoa{<zG{FEiT~s_~e)Q%tIG|M!HH4zV?OMdx*TJqIU>uf5Tu
z{fnJCck1z0W>Cs#Ml)?Ttbm-|<n+m+Jt3dC{(z^jVo#_*L_7dt#hwr%9>R)jSg|M6
z{6!vn#Zy>;UBI5u9qsx14l;!<OzjE%`FS4QOVW;GUr2u8hn?!KhsuzKT#+c=NdiQ!
z`$BSo1Vpa;sO&t*msGGFITGRv<nsWq|A=FME;`x~r=!uQj*d9vmOgcKB!mT$+_C~o
zJ08mF7Zz?=0VI!Oju&oO0l8%-LfkDY0|4s@dpQDx?1_+c%K*W8A_TW=4%K`CEdpmk
znNMmMbzIOT$Lvf<MzaC=Q$u{`3=q0!LZPsEh>j8pXtB8v%4F9xsz{fXmkW+AF<%JX
z(xv6)0_jep6TAX~S3{Y2ZKFVG4TOrhYF7*(sIJ--0|=_CAxi{t0l6;r8g$L8fEKwM
zArXNEK;zu78wU`YH|)j%gyxM~jZ;7t_hs|F#xKv~H+cGnW#0m%XJNTm0)nV-Sk9?{
zAnF^IZIi-F*Ws+GvTah3>>tJn8;{kcsBH#@dD}Dv0PDc8bQJ(0J1{KU1`w<R!_s9=
zQ3VcWwedm1JMbHdgB?X`n89J`G2<x|2Z!NpZl>8SMIQ6;uremh?r&hMsQ^aVkRZkl
zAjpQ>Wdj7+@UUEp0YNrAjHQ?y7C>^I!ih0q;V@HzaF|DgrNb<f&>KdE;V{#uv}F=r
zR<P9j-VMu_P;aFohf!gC=-_`u(Q>21YCGXEr(lIPA*@UZ|35uuh@c#h5snui$}u4<
zJ!U}UG9fHIW<Zo<LO41F<sgrl61WpMF|1Aw3nx&fL2pu6I)O3?PT>1tasp{ArY-G*
za8~jo+2Cnp`$5=9i3U$ogU=8R&X(3Uw2~RNg?I$f8FqUEBBvSD-t<aCnwnu&m_5<R
zD0&<KWt$b2BN324<gaOXNEDj0!f<fOo<d8T9nShvno|hL*<pKbC?s>{$^Hib)_Jx)
zfRLSM+XD#Jd3OIRBzxxb{?`J(p*Y`BBy;B5{SQx}IG_3--|ZAq|I37xFaF<c2N4iL
zMzkFu2s3uu0fI1Nw;dqbE)$M^A={1;c-t)stCh0tWE%7q+ifS4&~{61wOw`Wd(d`k
zWMx%Hw##k}*6LJQD`nfg&=_sE(zXzfAiC17D?sG5lIn`S3t64aUk$}lqh2!rlx=lb
zo=E`mhq`!41rVC6!}ti(K>DtB4NKb;&N>#(Y%j%^!oxKnyD5z0IXaf9LH2A3v(sfp
zX&C@$x7f6R5Zw}%Z#e^kb_;ch{xk>FAd9{ZvnQJwy;}od0{GgV001%8z7ESPfPh?9
zekv6ZOkaobsZ=_=uR*i?t}x4MZaf4cnn`v!MAVAA?3n~lL9{C@Cu%?t?FwU}zK0V5
z?G3XJnj3e4h-Un~4iOFIy$%r#<-K8f2m@iR3h#|({2FA#{;-(w0Z^9xVYwUwLUVsu
zF2{h-+#j}=;~He|Q9k3h#c%K&bxfcc|EOaE&G<*{86UzRI!ZG>Zk#D<5q96<tnm>x
z_fF%hND)L&h4JbspYn^S)y{}sbO!)v&)D4v5VB|NZUhM0Gt`Zy(vn()3e<iKD;L9=
z7w$I3xhjwVb)<-K0todV!}6L3Ak=>h%bNv&7$-l5lNT{g=w<;W&^S?l3d@@XG6hZg
zQ&`?CkVzo=DU6#1jky^RxDr+p?5%R69?C$~25cKa&3q*+PXqB3x>snyc%JJ5T}6Au
zo?w$*-kM`t8jVYf#ER}P@D)8Q&j#_7>)>pV-m)v=D|(o9Y-yB0ldtIZL<oqyZ-nIm
zJ0LV~gt5EES5%-0J9|agI^+qfDU#7EBF-A<88mxE65?tQAT)bLaHcj})I8oFdMBa`
zjbs|#V|+k0PrE9l*oCHD)jJWny5K3)--*c81rRm=P9!=sB32hl;4{>~h&m)9Ru`ED
zy+IMVy2vEVP=h11y3otKMHCnv;fk<!t&E1PfzV4wMC95Hh(e8s$Q$s0uxdmkDsI*T
zf_+2;n|K;1MYNR~6=8*U7>TB|JsK5}!vs&DH!32B2_W=FMeJcxMBAfr5pjJ202YjM
zETHYtxQO(O@DxnrBGNMg1k<<(#>t}yd*eOBNs+9n5%y$j<Ke)h2;M6}n8JfM?GUtx
zusN-b8madqGGL8Vbi4N>2v`?#ArMcFu=A~r>Z!>Q8L`I8bP$>xk&$Np*4&f`Yt+W5
znVuqx2Y#BgrbI9<p2J|RX=&3VS#u-ojW$NRa81xoj~MxM`l8k(OJ+pa!8S&DYXFpV
zhFwxXlyrt&Qb1_Vh{*3{0-~fdA_&3L3Q&{A#77bKr?y5t5Yc@5kwZlD?MD%xxYv%S
zTs9^`Er1~UD1r!O8%_k%=S0|7ZH;@{)a3K+9EXTH_?(Em-GHYcniC0#&;=lf=8#1X
zq13f3ZGI$cTZBD&ztN_k79{6KFl;u_>QIY{y&$5bVqdywm(8}dG@@+H{l?7Jcm&(=
zOgM{x$Z~;Q34kD45Rp?nAhKLQt?>q@#lyuB_Q`LI*W1+Mm9W?$qM2;5LqwIZI3m4H
z2!m*G1e3@$VIXQ@X@tG>fN{CB7N38XMx-+Y2-T(3gtW5*gzC}=&J|j58-P|s*suqU
z7AOoYGb<b$Xqj1I*B_pOXhkF-HmZPJ70V1=bgM<v(CP@wdB}L+Hvk;nsuc<;t#*iL
zR$A>4(X6yO0wOx`uSJcvE}|62TCkyQjB0GbLq=UN((;33yPj#bS{Lz&k&LHcTo*~!
zk!7UWYF(s$1G7q04`!=P5oK$H)qL34UQvrjgpgp9(cHDkscV|MHrYKF!XVp3{e(Px
zK+Ij6B1Ky<cTo_75-@i`W^+Wo^C**G;g$&A)_WM;tG1=>h-B@HxMJmL_QoSdtBTsl
zWJd%qc;utdwW){giYURDFWstp_l`Z%Pe1vfunv!49iEAq6%dNMB61f5h@5vtuq5JW
z3p{wZCxV+P*^=kBAR`{44)K(Tn|VkW%zNx|19D~A#{j{+hx!;MAqb<3RYlmVj~dCg
z0AQ-JD-aMwRSpqZQ5BJ~QalAw6-~28$Qh_(X$K=&7b9%*qsG2)9f%%`*cYtoP(2)H
zy&4)5%J3Vk$L)dxLiD&@a6qsgr-F~76{!y8c_xw>{FpJ!RSE>%Gmb75?My`O0Pz&M
zXCm;xY2vR#Mf)xyBKiPmx9{w!9}t?~*;79tG{3tw_17WzlbHJ30-#oYvTFqpHvDAQ
z3Luz%vZsDPu8OIDIK4_#*V6h#vnr$Pz>~&Z$_7>ZmDtNq87UXr)6OVllb$w~Me2g0
zPZZxR=B`s+s;#%9B9Z}s?B0&begX*Dx1+M303y4$qo^+aG1IzKtbtK>-!sP8G60l$
zU{v0T1mq9pok&2a4vgYX<d-y>>QZ$Li?ZC`8;kw|fHDt@%Ao`ZBZfugat8>eVNv;d
z93Ys6MX_YjR0N0>cUV;Ze-c3vR~r_^|0m&wGvx(^(NR|XtZ}+E0P-5`<VBa)Mn~oK
zH#|jNqoeX)lmNLZ{zVB#lOTfX*eHAUIpe-I036*inw+MwQ5hM-QxJ`f7VrxQqzR(2
zQCvVcN-?0iRKlsz%;D#ZKe|9g^U_quCUT3XI_0N%X=+qn<bg1#rbcn=Vk!06y42M^
zj%F(UXe=fwic^2=P|>XPu|q|((#KIbIw1_IkE0l!vZCMy&5yEw{h3!3c|r3XCh~&j
zN98rry4(wzAFVE;n}A@NA8lI72SZ(Ilh31KFaSXF^QiQL0Aa)DQRxQ(Li6*e?FZE*
zKWIr*_(1@$VToe{`9VvZ(vTmtBr5$N2!m-!6ocVGjD>oZwltd6Gmn+FH(FP#2g#*T
z+)3_3)n5;NURxDa)<@Z}_Qur;VB~`YF<Sy6pH+4~fY4qQl{a?)k<Y3qPA_OK2gF>y
zDw<v&b(>)mUx?yIUHER6rLB&t>!KbWa=DcX-8E78qG5z=WMY)QvE^ACC3h6pJdlk1
zHbz;hgHhHR0Jd#(Y@=beF)IBLJms?Ti!*@W-x$Th{0B~i>q%RpjCC-6heA^K-Qo~Y
zAKc;;k}};Am97?qL9```1&gjH0n#T6qD8~RCkqH;y@DlMqBURQ@7l^F`eZ@$FGF2)
z^95=k*&bDz#LCjF^Gn8^C=CriB-u4h!*6?3x@mX{Beq9l#e8f7a{We)`G-8}k^MWP
z?9@xf-M<0g=oS%q2Rof=q2aePD%}hSgJ@?I-T}S51iSD>%c`hyD9ZlY(O8eFp#g{l
z+bSA>RZi8=0IZ72Z(KtdWK~gYV?_JYJLOf;dWUYcKb<A<_TLv(58i5jnF`(gPW$u3
zJl_5Xc>Avw_MujeN7?$n7|Yt!<3swmV;l|X<BoAOq>tN!0K&-NcoauZ!vzzD^vNjO
z__8qwl}|(Zq{Bo*`lM55w6QrE4T#u2gu!$&ic=)|UQ9h2(r2RVy;qF4U=ke!opFe0
zgrAAZ;0B(8=uEUooC*Mf=u8xUk+X&-ta>!UFGn-K>trl<fr^IsWrvC`L|%5NXoz2q
z%2y>J464gfyehd$P~o8GW;FBMtHx4S+j<z<1aGw>-G{sxm1mH63aXn?`H2@mP~D6s
z3d}whwoQ1+eO6x9yu8exUNc-?YgV4e%P*|)x7<I<Q}Xzm!xiHFc3}Qr2_8VKV;|+g
z3BU^@fXL$GJn^kVLIV1!Hxq>H$9Y&ig)GqQJoy42-W`W5Ab%4bva~+V&g0QW;)Shq
zkm>Iw6Acq!ez}C6LU>LdcI1K>wJ<kNzK4icy&((84-_CvH;d-x;ZWc*K8K*z$1Itb
zwKFf%`TvZ+DdGB%U781fl7a&D$un4<$9{OrC@BX(Z7$D~o&g|4m*+{(01y@~r?Sz0
zx;_<V73v{Y3t!Fc_IGyuEhDdWTk(&j)o~+-R&EG^5mLe@1>{P%7-=S3MU3>;etoKs
zwRvpeKa6Ij0MK0PXi|1-9b2fj){-W!ut5`OLmo^2)3_6w<W6mHG^rvtIGQxyY#>d#
zyIh~<n@xFa$Ulucph*+VCP$O1byJ?#E(=XCoAR=A_*?(=$-b?5?B{<Pt)NM>$yP^`
zW|OUXG7y8O(A=7bK+KCgPjvqsd92I7j6XH2&*LFG98DVPJMyFhil@-rL4EIidXKV!
zrJc;n8k3)K{oBa*L>fT$WFCCt)wuSiHlVf~ou6sg+gMhw84$7=oiCSUKnRb{&lm5S
z0D^dQK0J)o)JKXfZAyODmRP1}j?q%7R}9%H`FtnnR*UiNkLmf!tbCQe$EpL1uNUz&
zHh7+KpruHH(uestexMkcNI`?n$X8q4mV#VoQpyzi$I4=|ctw8Z!%vI}o>CxG;);CP
zSpY$}B42hEK<KW>N5kR%9#rvgbw2z1LZeOv0Lr==_xO3Q1LP0ob#*{!uFl7Gb?TFV
znC4dJ2gFy92=XJ#)%ihu(H@JtOrayo)%nfu;I|Wssc){&SHiKn>DKMLbnVg!*T>Q?
zb$zXUr!Hxh%oqunPdx%MqOSwOi1qpM@(du1Sf7v4-in(Kv@xH(mN8niDdr32#(X)c
z0fJ~_zVwX&L9{X768myMu8QUVLz?}IsRwV%XXi4;l-2+o-C`n#bz8o4Sn(80+wu#<
z4SGN@ZOg}NoAicxF`2(JpKV`cbOjNumOCAjXdAuLA)@}hGrypTtWoOUJM+t$@ehI(
zlefAjpY>U6GzSqmt9u+GTG{qEWuxxCCtv#g5C+kneDMJWScHXbUp~9O*tiEow6N`S
zi0FF6K8J`Fwte|BfC6C<?aRj-DfCuMF)eHd^I63b<FPgXAUfy}(cg6*bckqSJD4wH
z<PZkY!F>Gh&_<0jVPX3=KVwxI_q$;eEo|R9ROGvU>rm0c_N`+REo|SCO>_uROcxl=
z<+JfijZ)Y|%i1}Ih?cc;4iPPD=Ny}8SvyBIeM)x<is=HwmHbR-nK4Is00>l994h)F
zq$>^;U0}G9Z;5Lw5C+wid|WGjM|37!Pq?11G>x@lTUQz}R(+-M7Zj7ODIi%)gn*#D
z?oiS-h3om2aOm(9l-KhcHQ_HI6w?*to-wv@rO^~bbkm?G-cykMhHe`4jLFwC@DxNn
zW7Wid0}w<#V{in>VJ@ai1AStw)ham503hn)5RseOCnjA?JOxpoSgcfLLqV55vF3N0
zf8<2CJJ3JI7Oyg%0TJCD=<g8G-GTnGTSJfT4)l*%B3uMv5cQAMFXrE{D5mSq17qx|
z)yAVB3V>*!LlgkfK!=F_C~06!?(ZNBqJc5Is6k6<v4ShnLt^asYDA_1Ks3Z53W8{e
zLqz|5G$bbXDG&zH5ZvkEe|uL<x2A{3*wbr_Vh~v%8txF$KOhZvi0Fmf;W2ri2*My5
z9!pm@|HduCpDT=tu{CRq&L9ebXp}<~0?{akC<LNWPSHXj8bw9x$cgZm3}a)g$6DhB
z5QRZB)*-@)BA^Vq<0**7#>ACjR7w~`V`B{)n@@2f{E@@>7|UB{{1!wJ5RG?;BCu$@
zV^IV|<DH^KKs26;Mq$HZ1%LlADaK~5GupNR0MR6eC<>xU4p9_DlVWmH0AUbKis9Zo
z_q&UgJZ#cqtnqqd5Sa47G}U3s1JhK8DGy9jV{+#OVK7aNRWCB%As@F`sfKgs*uo7)
zUl*9FfoYb*R1HkCV$#LMQ!ven1;xvIfMA*x!-aSrfi70?3Cp=Lw*D()-ERQEG}mFu
zM}5zY$-7K=3Z}U+`5q4-nC8at9?ut81Yr~2gIg6-*2FTqHyWj$myrNAq}YQu2D?@{
zC5(Y>RZMQwAq=)vF>KUn0|iJM=vdL3m<Wbag4kTHj^V526kRJ;;#eSKBA@^OTi3^=
z_W}s^^)VSx00jH`7y=3h#k7?`R5iwyZ#VX~Emjh+bF*V-0(Ne8?4-Nbn;kn7VA@P}
zVz;5FC6=~3mUTFmIrz2lr7Kbb+1)W*58(g2RYLAcRgBHsX;icUKsHr&Hh?g=%I?g7
zP_2qZMFa~F*;K_4(Eo`HE+OCGP>glkWt?vd0H#9@6Zy=CY=iNX%gWdF0Ks%9hGUIy
z$l!*Sb~={zLoD;*ZsU+E+z_&-V{qK?*)_Ex*?Ts|#_l!#a2Eg!JR6hec7PB)8%u~F
zJs@b$#;|)P7qubT_kBz$h_y?%W`R9MZPu>JXw(+zFcl9(9{_}@-`l1Fay99x0D|-T
z7(A6h6whsBX%}Nz*JEr$mC>(SBZyv%AzJes@@qtvUXH=NdW8O^iB;?~?kGbd*pVt6
zDnO`Qj!B0K5bT#@aH#m-UN<6>uf^Eeea1GZl3~{zRWj^aOuk2tr%=5XL!k0`*wxt5
zdd9Qfi?bj08_(u7hGfq;?4o(FG3?U%#FYVY*8YIesR9_hNDw9gLb^{}ngj^mK5>{t
zogNUKzE3<nATCZXDS@9}_KmCk<KpyEra`YCdOVM^$Rvb|-i}kai2l&DF_mtRE6yG|
zXcU(M!HhwU8C1MMae0V}r=S}Y#~~`6d^IN5b!eP@e9*Y3699U_(6~4oq-W3^8kgS`
z288C&xV%6M2)}7)yv|eHfhWj4<)QJqPjXLLrjVyRH2&D*d>A(-iji?Ki~*3{$haKF
zfXHrSTn=MEE^EgH8<Q(LHqPUMF92{PyBZ*hJT@*@W<W5Fjmzl<5KLp^7{<7{<H3ir
z#>ca!#KpJwXvG{K_vG`vevo?Fgt$_N@AX;wh@qtb#mi@Sh`O3U<-ZSGeSG!`^L?DP
zJz}&@O^VAGiI57RNpXZ<@Xic`fF{S;j3dT_g_Gm*<vOJDWDL{y(f2+00M7Jy*1R|i
z9yKNgrpNISB1Bv~7FqLQoGm?SRHQzP%U61k3gr*u7&!QhCxl?e%sBhwG2@xk%(x6o
zAQeJ0<JcNv#6k$@qd5Een9(8ik*sh^<;gg)ZOesFOS9vw-Ergo)a<xC`?Yv%VRjso
z6TYPj9n|~WI9q(&XjL@VVd6oBIGFg`@J%djQ9SEl9B;#C3cfLhxQe=T?UAPUWW>uj
zY7-c}D2|zkpFlLBf>y@G2?PMzveNFpfRL?>%Z(l&tgMV<qqmM0$0k(#Rq>4Lq_NV~
z1_<V@ipy>Rhz_<YE`10<E-e259uQQk;`kSru{x(hZS06=^wY+>?$%9suylt*MMGmp
zTyB=|6jVFn@=wMALA4_ecZ3$JCWLm&UJd}w-F7brgywF$mjiNHyO%ei`aK|ed0POE
zZWRahkB73C<0+U9*u5MOOb4i!zek^aZfa@Y#k1xnG7Ya9A$O!HWWS5!RW4rRO{vCz
zh_l8gj44fiu<IJBkov){Yd|pmKy^Kh>bfb)to<BUuEsO<ZW`lV6-a<VND&hrAk=@3
z%ZoCAQ2&`a1x<K>nDBm%C$D0{qaXk!(1fS{5|<ZcWD1($m$<wrBa=Y%OB@$v@GdI!
zAaEm&i!yCo-l9@K7y)b>K`nD5E-%X9DRghdal+A=>jL#oun8{j%h05)bnnD1O=_9m
z2^p8cQ!b0R4E>)#Q)-xg3D#WkR!6~U>)bCPKN|@M&3=i1`1BMYH2Wpw0Tm!7%6^IX
z{j%8fb^|sC{St|`e4-=)q|ij!FL7UMzB6h{g&L5+E$Djb2i|zCeV5{H9oxS|FUH~<
zO>D2?O}2puOoEJ9ZUMQ9>>YrxX+T1{@PM#sKmx&BepRh0b?3necBk9hyEOoq20Ki&
z4IiAi#YEfi!3j$Q1|STk!3hKgDAdxFw&6n)?1tN02PV-re5gZ2+wh?d5pBbVCM@Bd
zLKs9t6Lsr}dst0rJsFe8{8jZ%blm|2-7!w%(9U~ILWaKZ6uM&)nBVwKqNWHbYm*Yn
zv;@OVqQ;rmHE(z7pS0yhvfVXk%RMO}S3*1m$D~9!D*GqiDgZ~`w1ilY@tpTh?fry0
zH6a#cnFhVd3ArH4BrM2N60{)G1kjYW?;pAne4Rr-qc;vdOvrT(5N3Rskn0>E=srx?
zGeA??u+L^w4jI3^fZwRk*-m}Zc73)}pR`?{osi2Mgh4brA(uIPqwJGJ))xt}%+WUN
z6ZpD(nZrl7a8{R)AH!sgOs|##6z^-}A;#DI1P<Eq(MV5-hSO&W_O$7JB=s3|XxB`s
z5c(_uj}X^30D%@H*mBeR+th-DT;`C<ld;S_%Y|TGCc%n*-se)8gj_H~e0|9zuwV)%
z6nJrhedq(z;)HxDImCn3ixW6;!G{Qt9jc)+!9sp-v%<=RT%VDO>?#vjpFhC_=)qUJ
zHYc)<qC@$;C2ngom7ZPz#uv75YDJ~Len9_iO+b_oSQH-+EL*7f2p&Ti54R;)GT^-@
zwJjlUO(7LR+h~L%f&?L;uM_N_0q@hPukDf{l_#TQPjDd=e`kW74|tzU?X>GC%!|J>
zfjVl<g;4z63HCzJ+a|R;A>RfL^WyKO!Aom!n2NtQ!Bz#mtx|gva-l{lvfG=$LX9mk
zgwW^qC0Gs1+b*>)A)N=LLTFzC&I7i)5W?U+kYHmh@58ABju5>Ne1L>7!Xbolc_=X^
z<Sj`ZlAV|mA#*5!$sH#JfQWn@Nw7yl-qOM&PBqaR?nkJa7LuQXFO8i{WL-$GsUh#@
z*2x5Jrcs076JWT?iMdWR2q5Ylm>)yYQ;?jZ!qcaZ`Io@HO|bo8??b6?ZF7(cp>N5Y
ze{&(Ab66lE-v6Y|*-eX&d+}s6Z7VK>204#08u8wjI&W7azTyR;^HhzviHq#eAU`D7
zeNpe@g+C<ZtKdk5&<}~~HOzCgc`3!_C6V=Bl6@BSo{W^j{EG>EwTLgZrBu3W3GUpK
z0-)`#*)tL#WUnQpa{~yIt|hSGQc$au`rge1`%g7*S!)1Ta?_p)06}!qo(cfDth_7(
z2%?+RiD`~5rE>R9vP;!4M+1PUH{N^V@h?Dhl-@~sbO#8c-pQgn?57~=oy7fzLF59I
z(rP*|nRzka`?jkL2)YCDij5Se1$1CiE`xZ=h0*$JXj@xK`3_66WZb(P#Ua;bm}3Pk
zsKb&nMu(?h8kUTS^9VpN4NKxYf@arJ>i;8?ViN%X&5=ntxdK9SWKvG9fY2P7v?te6
zD(u)K-$XnB02{_SHqf#+HYt}qJO$I(q?}y=!8A6B*|oQUCNIPEn#|ggbj2QKD{6T|
znN>;e33sFnI-ewsLechR)b^hxMcV^_|1-QL$7>4^vY#bo+XI6Cvn1M{Zkm))Gb~K9
zA=SP2l>$I>p`%HSy)Y>^mUs%yg-L8I@8Ozg?8QmuuHn7w;WFOXi|rx;f@rZ_L_iQN
zPRe*8Acz(xaj#(^Le8)OuY)X0Dyx%fZ2JG-3)H!+Ws$c>1?0dALAzko4VES4GK;5R
zU6z!$b^)=>E=xvNC&e;L34GtXJgKfqie*-&L2pG;F0(QT%k0Xez08(Tk6P!FJpl-f
zyUy+jfG}g7-4g&ox9(O?D5IL#EP6s405ENKs)<~w%}zB@pW1Bq1PFs^GxY>qw^f^2
z+V*7D|JT>~M`=}@cYOD{`^u1>)~>?B;=b>_GlGivoBhe|0s^A7O>AnCbCR@1Q`@7)
zXrpP9+7kjEN){00=ZLT@<`A$JP+-H03-W7)77$tGw?uTo6*rI-&RM0>p3=`VGnY3#
zJ*WS@-{(H_+~+>OX6`$4XFjd8TZXBL1FGSCx3Zt{{;wAQ9}NBnAoXBsCLp{AQ~v{z
zdQklT_t?H#Jae?t_FS+2ZX|$~M++^*|3@ps3DaDq<<Uw$ZjkAWYDxCvm3Gz*>T9%=
zfInUt{?`H0@_1#~Lm5cR<CToS=vQb7I#Fr=_(nB~mg3YCg?oxqPgI6|61nPl=^`W}
ztHlvr!4ClL*_HYMNXxF&4?tRWUG_t@_~Eqo!$bgrPN#kVx{Dzrfk--?`T>Zf)8dD}
z#1A!PnKP9|OS8olUz3Eq#+sYdm;p7kI8)hgnD<AG_@g)Y1Az42^a+9R_NM*-BE47q
zF`Or?5yPFYv=c|Dp(6pbJYQ%j{y3lJBUfp8Uh?s)t|k8HtF+5TsC%nwTmtqLT8h}d
z)RSDLWuJI*zs%j#2%M75XKz+}qVXV%GbI}eHxMPJWP@>lh?<fO<9(oOORxD`$>kdH
zP;)jv;x_e2@qHi%FN=~F%jSY8@mO;<OqaoosOBs^qALqEcq}tJ8_m!D|78I_q{8US
z0uZUQv!N^ikvcmY$^wwGFgrVNe%6--A-J;eLbhaH)|Z7qqurcrC<}o^S(uwm%R-IB
zye-c9(Kkq7Hgpg`)UesmK>!hFvuOuWBO{^~ySAUYcn`m^QcJ<$@;1{_u#&vZv}8m7
z05gJGvP5II3<+w>GB0O~@`PiP>mTgW^`#kmYnAF4P)oa)v;ATpleH3)E3>|j0C10$
zsm*}!uFQr$0?0j9W{F9OtXc`4SF`qTwYqm40A*iIl?5W`)l^xa;|=?*0}=FUmf@02
zdeutFSe>;G*QjqHNJ3?GL6BH;bvAr1%~b@g&JOj{a6kmD&W2@wwSry`h6m8{_0;e{
zTE3nd9_V;e!`I4PH#oyj;J1K+3KE_h3eO_pxgj+?%m~^bhTk{<!`GE%KFJpSJkB@Q
zsdfDa)WQ2nHXV%BiLraUv8w>c?MaOdgtsR(HW0ZzV(h*0sbHNvct<WDPf)wAsRi+H
z9k~!yKzDWUaM!m3Y1@(Gb1t{ysSX2Y_U59_Tt544^=9!T2;3Tq&kZ2W_vS)w0BOEA
z7jgqgZtTqs?9BPx5Q58%w{s=?b3Qi$jduHTAvXev+;}G^xzT#Hdki}D(!N~uMK1r~
zca>FtQ|Iam6h9yYqFP@r)D<AA_2ojC1Gz<Cj+YwwQwNA@eL3?5s>wQbA)p$z`8*e<
zZtBFdU)tM;sv($M`i3tHW)oL_nG4CtRfK<;OJkx=jC3jIMr#uQ$hlNdQ>x3Qf|^oY
zE)~?2>T)SZP@Iu$tS`$v7Z)vw?Qj29bq}bA^|?4*|6DII(H#4K9|4GMj)P->@HWRG
z0fC5Zj){pQGNi2+x6O)e+oS5eDgaGq6`D#&%!-viON6U5ofWe|`%K@IoSPflO^>N*
zBkNr_%#Fhm6(CLL##g%KUED>&VQ$RwF6nIR1ucmE@E3qV7sMeBfwWu@2ZI6~Z)(tb
zamC`;8T4L&L&5Jr)L$G2zXOr9I1YXXB584qL4PS<P>w3gw8ll7;^K;lv3;tiv^<}E
zLKPPe7)7JjIQ=enl$dsfH*Eue8>~p}1B7=)YFZ#SSRtl;O**Vmm>{z%j@HH{6-)om
z;B(!R>YpaTf<SnD5&;poDh^2mMBu78BoUBET@?>p8~Y>@f=i;+amnkkPohAh-I_Qg
zQ6P~-uf=HxGfL`Z8=GZ!J$+?G6$lr!r7i%XMqBCvAmZBM)CHpiwtE+h2jGJCIJf}F
z1GT3v03xY9bpg;d#Rc+#RYO^3OI)-pvGqSv4-9XBb4yI0A}7i<uqJCq9PNrrWRJir
z!G2AaquGr=Qft2MNi^z+OD4MiB|U`)dn+y(_j?rXxl<^q;N5Yw55do-a&eO**^N)D
zr~bl85kKttUsB}ld~aMbx*%7a^LEVX(W%^b<LD4_4_;Q7lIdvn*=N-5Nlvg>_PsbP
zBJ&gkABamHF9;U<9*j9gHx+z1j^0PGoQ3C_Q2zo+{)P4=<Q|E`$#<TD+@o<gV-Lzr
z>I$*`v6!>VQ^6m^Q5S+AO9ivtlq1>RAFBtOoEXWW6LCpXK|T57;KP_RvM=9U66+(m
zx%<1IK~knWR3iWZ(Va#(5P98c$^dEFEh*!c95je|dSd&Xe^4`O0W|F?G!>`xq}7P4
zH0_aUB%6UYNI;*Bqq2(OcI#v6#wOntKt=|1zj6+UjI(K30wUwAl%-3uUatX|nVLk?
zlKj-4s0*c&AQ0V9QfU(1Q<G3&xQeu?NhmNtq)kmi#{wi>rzU1v;yV^0_>SeD6FQcu
zvfipe%Gtsss;u~;G=6|%5*~U&b|iA!*F5z7{D1yT^+e-f@?5DF(gQ6_!t!~pqQ%1G
zD!;P`5G@ua42-1IHpufYN_?IJXt^i}r4~rbMM)^NKw2(J(mZdFqR^W7z6*d3tp!WS
zKMkz~OURJ4wO|PulC~z~`LE>kt;Vv<)}-ikl5cxXwPpr4!n-x$yXWWR51B>@mz_y8
zprX${*rtZ%=T27-6jwp!4$ysR1k!3}qTCu_X~Z3NCbBVz^hJ&0*WHO7GE*(3sRYjM
zLQ@Hx-AVYffvYs#o$zuq-QS<c=}hvyGu71M+D2CjJ5h%uDMhXb?o0;yLsfya?GzXP
zySr^a=Fbl$(I<)h*I8=Yz{Y-}<)NhCAG(!-jlz9|1Dj^6nvnqPc_b-GB}?!eNe12!
zZY05TB)REkw^q1O;^J6h&(2oW=p+t5mX!E@7)Z-w$pAkI0i@-zge5YZ#)QT^`|+gY
zj*41)ZZ<EGKYT&mhzRjKWWQ4|5D~|dL2mm(X@iL436p;^quwZv{~#&3p`zN0IQ4?M
z9{uGl1hQK;E=-8{Ai3JFv;!jIgM^iKvhKK1UP3-hY||W7%gtqx{)Y*N7kZn@YsZI4
zR_c(LSYA6mOd6UvHd|WqUu{=XQdM!6zxj?i>P|$+@_fiX$bpFHN(SE=M95r9S8~Tl
zw_LhW{>nWiB5v~{#?Dm<B4k-U<Wz)ArJO2=kg1eYB0{z=Xq4%X?xf^)7798mu9>Uu
zsD_FN$bOa#h=}f_+@BKxL_~LT%WeIq$N;0MEORy~dO_QP^VENpH^F)~VZK<-lx-sB
zGrdW4F0nVxS0g8Z5e&g^_5g&tH~AwUDnJDHCamX>5i5|w(wkJAqp(N~7J{3P`z&GQ
zv5a8@g~0wSVFz+q^&3bsMfX|KG`jykIyJaWUlQ5h%vaBhYjW>jKwoBn=+u{lt+9ZP
zIqVD#M5n%lFCt`xdXtpj3yGb#K-Jv`AbKwp1W8C<NNWXG5p*F5@8&=RT}XI0|5!Om
z)ZpnlnypJJ4k&x<2btK`EL30Q^H%M+0!v9n=6b56ROIP8RAjCqd%C_XTas$JMz%Mc
zROIP8H(UDw6zqNgHA9!o(tZFHXtbND!vHFf7(hK=rey^6kxT_}IK~29v_{+hOVo+7
z1-f*Io0%FY<!qsjZt@E-axKhE0bQ<^auGW%)cjpVt^(24YCFC~P0U#xx#h+}g~@7`
z8;^BNpcl1$wS_<VU)0fX33-^r;xB66&t&$3Gc73H+J0rJ8kt+9qgw)#%mggbx8EV_
zFk!-UFKPQ%OI20wB^|ls7b;9I>057;b-O?ex>(zFOI3Ytap86{HM3Z5=XD}9mT<dP
zbXrololMOvk=qgENRmGywEaP=YK&WS*vA+uOf8zv2=`Nd;UeFc>-_Fk)ma=b*O5zU
zA;Y#@vv2qTc76hr)2ns<jhEE}QM|gKm(0(s7QOB#<wlof*6N~7+TOfe{Ym*~th-k8
zk|cjBkCv2MucKdUJ8QYBnFQt;Aoy|sgnPXn>_3VJV$k)P=@E$>Ad$0PU-xSwM^a7*
zF6G*ENVz~kn>HO%E|4VU+B7NmxpWz$#pmt#{8#GS1OP5+Poo)#@!QjA20GrbG!BSP
z?V5?UUrGRSZpl_%bVS>qu29Ra+Nw*lE&$6V0Jmv7X}7xG-oKLY+m_m%OX#;vY%kMd
zoEO61)7t)cCG%q2b>zNv5-LpFHJL3zQ!a6~L)#rI37Q=RNuG=({#k$t%{r)buc+a1
zN9seUwCxZdPGiSfxOmtDI{&>_6h-TRj@&;mLWb>t<{ub|Y#_o8=&F18Y%k*=Y97$l
z6J_lL7!w`TcEu_+B6lziVyMVCC_(%~$AoVWX?uQ^dNMwwqnaRD;`5NMAJu<8u0Rw4
zdRW_^uT~4<!v%FDKo5&L-z22Qlx5!6Md!7xTBGhCJ_c3Z*L;y8Bj_=_q<o~Kk9CP0
zKz}9Jzoa-?{<Sqs;E(Y%T6O7?yIkma3b#0^OP=~Y3J-ls^Ohpr=NJjr(>m(WwsWtl
zngr&7Ao$HEfk-^9ul0Q|kjAGq%YY<UfduPmeSJ>|Rw1}x{WJ~MKtYL5(_jrG3D!>~
zSlzz^V~CJUuf8HWr|saiYX74U@L_Knut4<c)!~a;AbRy`K97=~9f)4NQV+ad^8VVZ
z?>vWI(o1n2y~@zyGhK3<9N-g`jAb5D7fmtt&)2EB1I8lmbIqn`bL543tVH%jo&S$@
z>JN&)1tJnI>M%eA!hBJO4OD^L`=VxOFRB13GZ%H4KY&;uLvhD(bwmFnUOMe3oBVg$
z)YpqAjdiIw*<6+`Pd3?v2@9^$cCz7bZZBOvxtVOP{xj!Ku8MS_T;n&a3>2Ppvbi%=
z!7({8qwnj#Lo%9UW2Tv+S*Ezcj@Y2Klua{XRo@_a@?V(fM%Sqf1)>euO)i!Kk^Bq8
z<f0_wAW7?HWADzZ;kjlL`U0phH5;5Ev%-TUf2SKeJFo7~O-Hgkh)^AwwC1G>h<Y=O
z{qMZ0%gr!hS9GW_%`hyVAy#1`B4!%<&5f!lH`9b&-=V@Z(-4#FehL%5dfwRe8&z%m
zyb0?apu+ULVZFl`e1BJ2W{xRZXzW+sQ1#_^@f33m%e^Ea?vjL<XQBnhCj^+lgWyME
zK)C0bazDZZqWC<+)PV#ZkieT~^aA6nw-8)H%r~KW2MXHEH=%k5k|e}@LqdEP2XRKu
zB2)CTu~)ULZ<j4HrPsNVJ6PQFl8LIkdw^&I_Vo>j+?NamMNBbR+_Tu&UG1tix7b9r
z&hk)UT5Oo6mcDba_+g2$m77#!Zixv645}kjz+@H0U~x~2u|M6!DvA~pxh*S&3R8=z
zt9S0<<QbL-8GCFK?pbO=k%tP?QbUoK<tQ97!~2@C)tgmyuGK^hK__ufs~J7Ut?c0Q
zGZqaQJ7cpNA1^B~Nl{%UOpoKkacpvDivGpe&o-+^%E$4j%MEkM;=^&`!xbiaCHN4G
zKnQ+`HW2O=M*9~cAWyf#+%&@Z5Qq;~n44b-J`{rU;mXv9fr2(GQy&JB_;988@SJ2B
z>;Bi6qAkV7##>Zx*&0)tb6%_vFTRG?ycdD!19qePQXrCFGaQ%1$DBYet~K_tt*Rke
zTVN6|t`(+A#{^nuqI!F7n;P^zX#%Qp#;tI^TxV+Q0xM6u9!G0V9em=^r=RAO#Rnhx
z$y3+6aW1!$fi2hl5D|#v^@bthb?!d+xXswn+tkpZZD}A>I3Kr3AjmQ(cZ|&jF7iR^
z{kC(C8f0JIM#m4ycl<CQbc4i%S03-=jqTm0vblU3f*eZ&Q{E7Qu@g!cy3uf=ib`@D
z(^|vHGcawGS~Ju!Q61kf_VMj%SndrIxr0^EM@D#WnChCq!~n0|*w=-ry<jC7-?fXC
z5+{k*vQ5T*zFq0uCKLG)1IzVc+GO|u$}7(Dv&{ta4iw*PBKO@Ex04elHXFX%@{;%x
z>`h~z-l6n$Zx)_T&X;)8)Hn41KEXV`EVJDd?V=ukBeumSORur}cBl#E<8j4y!|wJH
z)#D|qJ501QL^T+@LGU~B0O9U1m3|*!Ab#$UiYJu`NK|*28+L}M7J`fFx6-H%6x4bv
zjp{&>sD4YLda*<`2h;2^Meh>TCpy%kvOQ^350R+en?|)=^OnjaKp)gxMDSjTSLr#1
zNQAyE@p?~Q>7hW6eZ&G`ep`IOfEs4dK4Y)lsmA2?r9B8#N2Uj1T|Z1b?mNalyHnkn
zdnb(#s4%@F@iEph5x)D4-M5psiT$ZBhPd$EFOkOaR7j#kbsBriE_Hj{S-73VY^ULN
zU&Ub)$}$H{(J^Bu?NaxYPeA*F;wKsZPY^#HHqlYz$Nymb1i||W2>0RCPe2quocalf
zpAMTFjs`yo!TIS(>Zd?Kn<J^80!jRIMEvv{K4>ZBpoA_{^ht)G+IK~4f3~Z1kR82+
zGuAf!n`$e*s>_sCx@vT-`0XT5vRmDpJDEN&RPJz6o>y|3Lk}1=8oPJ5`qTK73GYr&
zVLD|Pck^M2Z~;Fywq}o-nftiF<;ie8<d}HiZevgGQ4h!6Y1UlpJk@R3zCw-;yPL0Z
zOi{0~f4x_Iqx^1e-edTbMDpNnvF{lZ{m$osUG}EROal84gt!Xx851_v26DGEhQ*hX
z20+Yv#ti#iFs~4tdC#Wi4HO>aY--*>67!zLybotMFZP)y?|kozD@O3Q+%PJmo&L5O
F`acu%6o&u+

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index f6dba13a..03081c8b 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -893,7 +893,7 @@ const (
 	DenialReason_DENIAL_REASON_ACCOUNT_INACTIVE          DenialReason = 1  // the requester's account (the billing_ref minted at Register) exists but is not active — typically awaiting the Exchange operator's out-of-band activation; the remedy is to wait or contact the operator, NOT to register again
 	DenialReason_DENIAL_REASON_INSUFFICIENT_BALANCE      DenialReason = 2  // Requester's balance too low
 	DenialReason_DENIAL_REASON_RATE_LIMITED              DenialReason = 3  // Too many requests
-	DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE       DenialReason = 4  // Resource no longer available
+	DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE       DenialReason = 4  // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
 	DenialReason_DENIAL_REASON_RESTRICTION_NOT_SATISFIED DenialReason = 5  // Accepted term's restriction not satisfied by the request; the axes are in TransactionDenial.restriction_mismatches (single) / TransactionResultItem.restriction_mismatches (batch), same RestrictionKind vocabulary as the terms
 	DenialReason_DENIAL_REASON_REPORTING_OVERDUE         DenialReason = 6  // Requester has >20% overdue reports (MAY threshold)
 	DenialReason_DENIAL_REASON_OFFER_EXPIRED             DenialReason = 7  // Offer TTL exceeded
@@ -923,6 +923,11 @@ const (
 	// GetAccountStatus. TransactionDenial.exchange names WHERE to register, so the
 	// agent converges without fetching a manifest first.
 	DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED DenialReason = 18 // no account exists for this caller at this Exchange — the remedy is to call Register
+	// The provider at this Exchange does not accept purchases relayed by a Broker
+	// (BrokerService.ExecuteTransaction). Per item: other items in the same
+	// sub-request may succeed. The remedy is to buy this offer directly, calling
+	// ExchangeService.ExecuteTransaction at offer.exchange.
+	DenialReason_DENIAL_REASON_RELAY_NOT_ACCEPTED DenialReason = 19
 )
 
 // Enum value maps for DenialReason.
@@ -947,6 +952,7 @@ var (
 		16: "DENIAL_REASON_SUBSCRIPTION_LAPSED",
 		17: "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
 		18: "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+		19: "DENIAL_REASON_RELAY_NOT_ACCEPTED",
 	}
 	DenialReason_value = map[string]int32{
 		"DENIAL_REASON_UNSPECIFIED":               0,
@@ -968,6 +974,7 @@ var (
 		"DENIAL_REASON_SUBSCRIPTION_LAPSED":       16,
 		"DENIAL_REASON_ENTITLEMENT_NOT_GRANTED":   17,
 		"DENIAL_REASON_ACCOUNT_NOT_REGISTERED":    18,
+		"DENIAL_REASON_RELAY_NOT_ACCEPTED":        19,
 	}
 )
 
@@ -4385,7 +4392,14 @@ func (x *Requester) GetExtCritical() []string {
 // thumbprint of the holder's key. Verification MUST check that the key signing
 // the request (RFC 9421) hashes to that thumbprint; a token possessed without
 // the matching private key is rejected. This is what makes a leaked token NOT
-// bearer-usable. Delegation is a chain of cnf-linked JWTs: a principal narrows a
+// bearer-usable. One exception, the relayed purchase: when a Broker re-packages
+// a purchase (BrokerService.ExecuteTransaction), the request an Exchange
+// receives is signed by the Broker, not by the holder. There the Exchange checks
+// the holder binding against the key each item's AgentAcceptance verifies under
+// — the agent's key, resolved from the requester's WBA directory — and not
+// against the request signer. A relayed purchase that carries a delegation
+// therefore needs an AgentAcceptance on every item; an item without one fails
+// the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a
 // grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed
 // by the key the parent's cnf named — the chain-linkage invariant. Verifiers
 // need only the root issuer's public key; intermediate keys ride inside the
@@ -4644,7 +4658,8 @@ func (x *AgentAcceptance) GetSignatureAlgorithm() string {
 
 // AgentRequestAcceptance — the agent's topology-independent authorization of
 // one complete ordered execute set. A Broker forwards this envelope unchanged
-// when it projects a mixed-Exchange request into per-Exchange subrequests.
+// when it projects a mixed-Exchange request into per-Exchange subrequests
+// (BrokerService.ExecuteTransaction).
 // Each receiving Exchange verifies the signature, then requires its subrequest
 // to equal the complete in-order projection of payload.items whose exchange
 // names that Exchange. This is what makes removal, append, and reorder visible
@@ -4658,10 +4673,11 @@ func (x *AgentAcceptance) GetSignatureAlgorithm() string {
 // projected body; that is expected, not a gap, and it is why this proof
 // exists: like AgentAcceptance, it is a detached body signature that stays
 // valid however the request travels. The hop-signature stack applies only to
-// requests forwarded byte-for-byte. If a delegation rides the request, the
-// holder-binding rule is unchanged — the wire signer must be the delegation's
-// terminal holder — so a Broker may project a delegated request only when the
-// agent has delegated to the Broker's key.
+// requests forwarded byte-for-byte. If a delegation rides a projected request,
+// the wire signer is the Broker, so the Exchange checks the delegation's holder
+// binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,
+// not against the wire signer (see Delegation). The agent does not need to
+// delegate to the Broker's key for the Broker to relay its purchase.
 //
 // The verification key is the agent key published for the requester the signed
 // payload names. payload.requester_domain must equal the request's
@@ -4986,6 +5002,16 @@ type TransactionRequest struct {
 	// Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
 	// (authenticated caller, key), never globally, so a key chosen by one caller
 	// cannot collide with another's cached result.
+	//
+	// Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.
+	// The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do
+	// otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign
+	// it — so a retry of the same purchase through the Broker reaches every
+	// Exchange as a replay and is answered from that Exchange's stored result. The
+	// verified signer of a re-packaged sub-request is the Broker, which speaks for
+	// many agents, so an Exchange scopes a relayed request's key per (Broker,
+	// requester the agent acceptances authenticate, key): two agents behind one
+	// Broker that pick the same key cannot collide.
 	IdempotencyKey string `protobuf:"bytes,2,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
 	// Requester identity — forwarded for authorization and audit.
 	Requester *Requester `protobuf:"bytes,4,opt,name=requester,proto3" json:"requester,omitempty"`
@@ -5167,7 +5193,9 @@ type TransactionResponse struct {
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK
 	// Thumbprint of the agent's Ed25519 request-signing key (see "Retrieval-URL
-	// identity binding" above). Shared across the request; set once.
+	// identity binding" above). On a sub-request a Broker re-packaged, the request
+	// signer is the Broker, and this is the thumbprint of the agent key the
+	// AgentAcceptances verify under instead. Shared across the request; set once.
 	AgentIdentityHash string `protobuf:"bytes,10,opt,name=agent_identity_hash,json=agentIdentityHash,proto3" json:"agent_identity_hash,omitempty"`
 	// Per-offer results (one entry per committed item, in original order).
 	Items []*TransactionResultItem `protobuf:"bytes,13,rep,name=items,proto3" json:"items,omitempty"`
@@ -5296,15 +5324,25 @@ type TransactionResultItem struct {
 	ExpiresAt *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=expires_at,json=expiresAt,proto3,oneof" json:"expires_at,omitempty"`
 	// Signed retrieval URL for this item. Bound to the requesting agent's identity
 	// via the parent TransactionResponse.agent_identity_hash (shared across all
-	// batch items); expires at expires_at. Absent if this item was denied or its
+	// batch items) — on a BrokerTransactionResponse, the agent_identity_hash of
+	// the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its
 	// delivery_method is not signed-URL-based.
 	RetrievalEndpoint *string `protobuf:"bytes,12,opt,name=retrieval_endpoint,json=retrievalEndpoint,proto3,oneof" json:"retrieval_endpoint,omitempty"`
 	// How resource is delivered for this item.
 	DeliveryMethod DeliveryMethod `protobuf:"varint,9,opt,name=delivery_method,json=deliveryMethod,proto3,enum=fora.v1.DeliveryMethod" json:"delivery_method,omitempty"`
 	// Reporting requirements for this item.
 	ReportingObligation *ReportingObligation `protobuf:"bytes,10,opt,name=reporting_obligation,json=reportingObligation,proto3,oneof" json:"reporting_obligation,omitempty"`
-	unknownFields       protoimpl.UnknownFields
-	sizeCache           protoimpl.SizeCache
+	// Set only on a BrokerTransactionResponse, and only when the Exchange that
+	// owns this item refused the Broker's whole sub-request instead of answering
+	// it: a non-OK answer, or no answer at all. The item was not purchased.
+	// offer_id names the item; transaction_id, billing_id, cost, denial_reason,
+	// retrieval_endpoint and the other result fields stay unset. Every item the
+	// Broker sent in that sub-request carries the same refusal. An Exchange never
+	// sets this field, and a Broker never replaces it with a denial_reason: an
+	// upstream refusal is not a per-item access decision.
+	Refusal       *UpstreamRefusal `protobuf:"bytes,14,opt,name=refusal,proto3,oneof" json:"refusal,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
 }
 
 func (x *TransactionResultItem) Reset() {
@@ -5428,6 +5466,90 @@ func (x *TransactionResultItem) GetReportingObligation() *ReportingObligation {
 	return nil
 }
 
+func (x *TransactionResultItem) GetRefusal() *UpstreamRefusal {
+	if x != nil {
+		return x.Refusal
+	}
+	return nil
+}
+
+// UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent
+// it on BrokerService.ExecuteTransaction, carried in the Broker's response body
+// on each affected item (TransactionResultItem.refusal) instead of being turned
+// into an error of the Broker's own. Like TransactionDenial.exchange, nothing
+// signs it: it is the Broker's report of what the Exchange answered.
+type UpstreamRefusal struct {
+	state protoimpl.MessageState `protogen:"open.v1"`
+	// Bare host of the Exchange that refused, in the form "Request recipient"
+	// defines in the file header. Equal to the refused items' signed
+	// offer.exchange, which is the value a caller acts on.
+	Exchange string `protobuf:"bytes,1,opt,name=exchange,proto3" json:"exchange,omitempty"`
+	// The Connect code the Exchange answered with, in its wire form, e.g.
+	// "permission_denied" or "unauthenticated". When the Exchange gave no answer
+	// — unreachable, or the call timed out — it is the code the Broker's call
+	// failed with ("unavailable", "deadline_exceeded"). A timeout is an ambiguous
+	// outcome: the purchase may have completed. Retrying the agent's request with
+	// the same idempotency_key is safe, because the Broker forwards the key
+	// unchanged and the Exchange answers a replay from its stored result.
+	Code string `protobuf:"bytes,2,opt,name=code,proto3" json:"code,omitempty"`
+	// The Exchange's typed reason, unchanged — the ErrorDetail it attached to its
+	// refusal. Absent when the Exchange attached none or gave no answer.
+	Detail        *ErrorDetail `protobuf:"bytes,3,opt,name=detail,proto3,oneof" json:"detail,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *UpstreamRefusal) Reset() {
+	*x = UpstreamRefusal{}
+	mi := &file_fora_v1_fora_proto_msgTypes[27]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *UpstreamRefusal) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpstreamRefusal) ProtoMessage() {}
+
+func (x *UpstreamRefusal) ProtoReflect() protoreflect.Message {
+	mi := &file_fora_v1_fora_proto_msgTypes[27]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpstreamRefusal.ProtoReflect.Descriptor instead.
+func (*UpstreamRefusal) Descriptor() ([]byte, []int) {
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{27}
+}
+
+func (x *UpstreamRefusal) GetExchange() string {
+	if x != nil {
+		return x.Exchange
+	}
+	return ""
+}
+
+func (x *UpstreamRefusal) GetCode() string {
+	if x != nil {
+		return x.Code
+	}
+	return ""
+}
+
+func (x *UpstreamRefusal) GetDetail() *ErrorDetail {
+	if x != nil {
+		return x.Detail
+	}
+	return nil
+}
+
 // Cost — Actual transaction cost.
 type Cost struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
@@ -5441,7 +5563,7 @@ type Cost struct {
 
 func (x *Cost) Reset() {
 	*x = Cost{}
-	mi := &file_fora_v1_fora_proto_msgTypes[27]
+	mi := &file_fora_v1_fora_proto_msgTypes[28]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -5453,7 +5575,7 @@ func (x *Cost) String() string {
 func (*Cost) ProtoMessage() {}
 
 func (x *Cost) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[27]
+	mi := &file_fora_v1_fora_proto_msgTypes[28]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -5466,7 +5588,7 @@ func (x *Cost) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Cost.ProtoReflect.Descriptor instead.
 func (*Cost) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{27}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{28}
 }
 
 func (x *Cost) GetAmount() string {
@@ -5526,7 +5648,7 @@ type PushResourcesRequest struct {
 
 func (x *PushResourcesRequest) Reset() {
 	*x = PushResourcesRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[28]
+	mi := &file_fora_v1_fora_proto_msgTypes[29]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -5538,7 +5660,7 @@ func (x *PushResourcesRequest) String() string {
 func (*PushResourcesRequest) ProtoMessage() {}
 
 func (x *PushResourcesRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[28]
+	mi := &file_fora_v1_fora_proto_msgTypes[29]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -5551,7 +5673,7 @@ func (x *PushResourcesRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PushResourcesRequest.ProtoReflect.Descriptor instead.
 func (*PushResourcesRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{28}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{29}
 }
 
 func (x *PushResourcesRequest) GetVer() string {
@@ -5696,7 +5818,7 @@ type ResourceEntry struct {
 
 func (x *ResourceEntry) Reset() {
 	*x = ResourceEntry{}
-	mi := &file_fora_v1_fora_proto_msgTypes[29]
+	mi := &file_fora_v1_fora_proto_msgTypes[30]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -5708,7 +5830,7 @@ func (x *ResourceEntry) String() string {
 func (*ResourceEntry) ProtoMessage() {}
 
 func (x *ResourceEntry) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[29]
+	mi := &file_fora_v1_fora_proto_msgTypes[30]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -5721,7 +5843,7 @@ func (x *ResourceEntry) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ResourceEntry.ProtoReflect.Descriptor instead.
 func (*ResourceEntry) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{29}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{30}
 }
 
 func (x *ResourceEntry) GetDomain() string {
@@ -5874,7 +5996,7 @@ type PushResourcesResponse struct {
 
 func (x *PushResourcesResponse) Reset() {
 	*x = PushResourcesResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[30]
+	mi := &file_fora_v1_fora_proto_msgTypes[31]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -5886,7 +6008,7 @@ func (x *PushResourcesResponse) String() string {
 func (*PushResourcesResponse) ProtoMessage() {}
 
 func (x *PushResourcesResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[30]
+	mi := &file_fora_v1_fora_proto_msgTypes[31]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -5899,7 +6021,7 @@ func (x *PushResourcesResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PushResourcesResponse.ProtoReflect.Descriptor instead.
 func (*PushResourcesResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{30}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{31}
 }
 
 func (x *PushResourcesResponse) GetVer() string {
@@ -5966,7 +6088,7 @@ type RemoveResourcesRequest struct {
 
 func (x *RemoveResourcesRequest) Reset() {
 	*x = RemoveResourcesRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[31]
+	mi := &file_fora_v1_fora_proto_msgTypes[32]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -5978,7 +6100,7 @@ func (x *RemoveResourcesRequest) String() string {
 func (*RemoveResourcesRequest) ProtoMessage() {}
 
 func (x *RemoveResourcesRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[31]
+	mi := &file_fora_v1_fora_proto_msgTypes[32]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -5991,7 +6113,7 @@ func (x *RemoveResourcesRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveResourcesRequest.ProtoReflect.Descriptor instead.
 func (*RemoveResourcesRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{31}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{32}
 }
 
 func (x *RemoveResourcesRequest) GetVer() string {
@@ -6035,7 +6157,7 @@ type RemoveResourcesResponse struct {
 
 func (x *RemoveResourcesResponse) Reset() {
 	*x = RemoveResourcesResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[32]
+	mi := &file_fora_v1_fora_proto_msgTypes[33]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6047,7 +6169,7 @@ func (x *RemoveResourcesResponse) String() string {
 func (*RemoveResourcesResponse) ProtoMessage() {}
 
 func (x *RemoveResourcesResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[32]
+	mi := &file_fora_v1_fora_proto_msgTypes[33]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6060,7 +6182,7 @@ func (x *RemoveResourcesResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveResourcesResponse.ProtoReflect.Descriptor instead.
 func (*RemoveResourcesResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{32}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{33}
 }
 
 func (x *RemoveResourcesResponse) GetVer() string {
@@ -6095,7 +6217,7 @@ type RefreshCatalogRequest struct {
 
 func (x *RefreshCatalogRequest) Reset() {
 	*x = RefreshCatalogRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[33]
+	mi := &file_fora_v1_fora_proto_msgTypes[34]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6107,7 +6229,7 @@ func (x *RefreshCatalogRequest) String() string {
 func (*RefreshCatalogRequest) ProtoMessage() {}
 
 func (x *RefreshCatalogRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[33]
+	mi := &file_fora_v1_fora_proto_msgTypes[34]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6120,7 +6242,7 @@ func (x *RefreshCatalogRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RefreshCatalogRequest.ProtoReflect.Descriptor instead.
 func (*RefreshCatalogRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{33}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{34}
 }
 
 func (x *RefreshCatalogRequest) GetVer() string {
@@ -6157,7 +6279,7 @@ type RefreshCatalogResponse struct {
 
 func (x *RefreshCatalogResponse) Reset() {
 	*x = RefreshCatalogResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[34]
+	mi := &file_fora_v1_fora_proto_msgTypes[35]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6169,7 +6291,7 @@ func (x *RefreshCatalogResponse) String() string {
 func (*RefreshCatalogResponse) ProtoMessage() {}
 
 func (x *RefreshCatalogResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[34]
+	mi := &file_fora_v1_fora_proto_msgTypes[35]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6182,7 +6304,7 @@ func (x *RefreshCatalogResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RefreshCatalogResponse.ProtoReflect.Descriptor instead.
 func (*RefreshCatalogResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{34}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{35}
 }
 
 func (x *RefreshCatalogResponse) GetVer() string {
@@ -6224,7 +6346,7 @@ type ReportingObligation struct {
 
 func (x *ReportingObligation) Reset() {
 	*x = ReportingObligation{}
-	mi := &file_fora_v1_fora_proto_msgTypes[35]
+	mi := &file_fora_v1_fora_proto_msgTypes[36]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6236,7 +6358,7 @@ func (x *ReportingObligation) String() string {
 func (*ReportingObligation) ProtoMessage() {}
 
 func (x *ReportingObligation) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[35]
+	mi := &file_fora_v1_fora_proto_msgTypes[36]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6249,7 +6371,7 @@ func (x *ReportingObligation) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ReportingObligation.ProtoReflect.Descriptor instead.
 func (*ReportingObligation) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{35}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{36}
 }
 
 func (x *ReportingObligation) GetRequired() bool {
@@ -6340,7 +6462,7 @@ type UsageReport struct {
 
 func (x *UsageReport) Reset() {
 	*x = UsageReport{}
-	mi := &file_fora_v1_fora_proto_msgTypes[36]
+	mi := &file_fora_v1_fora_proto_msgTypes[37]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6352,7 +6474,7 @@ func (x *UsageReport) String() string {
 func (*UsageReport) ProtoMessage() {}
 
 func (x *UsageReport) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[36]
+	mi := &file_fora_v1_fora_proto_msgTypes[37]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6365,7 +6487,7 @@ func (x *UsageReport) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageReport.ProtoReflect.Descriptor instead.
 func (*UsageReport) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{36}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{37}
 }
 
 func (x *UsageReport) GetVer() string {
@@ -6453,7 +6575,7 @@ type AttributionDetail struct {
 
 func (x *AttributionDetail) Reset() {
 	*x = AttributionDetail{}
-	mi := &file_fora_v1_fora_proto_msgTypes[37]
+	mi := &file_fora_v1_fora_proto_msgTypes[38]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6465,7 +6587,7 @@ func (x *AttributionDetail) String() string {
 func (*AttributionDetail) ProtoMessage() {}
 
 func (x *AttributionDetail) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[37]
+	mi := &file_fora_v1_fora_proto_msgTypes[38]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6478,7 +6600,7 @@ func (x *AttributionDetail) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use AttributionDetail.ProtoReflect.Descriptor instead.
 func (*AttributionDetail) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{37}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{38}
 }
 
 func (x *AttributionDetail) GetDisplayedUrl() string {
@@ -6532,7 +6654,7 @@ type Usage struct {
 
 func (x *Usage) Reset() {
 	*x = Usage{}
-	mi := &file_fora_v1_fora_proto_msgTypes[38]
+	mi := &file_fora_v1_fora_proto_msgTypes[39]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6544,7 +6666,7 @@ func (x *Usage) String() string {
 func (*Usage) ProtoMessage() {}
 
 func (x *Usage) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[38]
+	mi := &file_fora_v1_fora_proto_msgTypes[39]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6557,7 +6679,7 @@ func (x *Usage) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Usage.ProtoReflect.Descriptor instead.
 func (*Usage) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{38}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{39}
 }
 
 func (x *Usage) GetFunction() []string {
@@ -6624,7 +6746,7 @@ type UsageAsset struct {
 
 func (x *UsageAsset) Reset() {
 	*x = UsageAsset{}
-	mi := &file_fora_v1_fora_proto_msgTypes[39]
+	mi := &file_fora_v1_fora_proto_msgTypes[40]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6636,7 +6758,7 @@ func (x *UsageAsset) String() string {
 func (*UsageAsset) ProtoMessage() {}
 
 func (x *UsageAsset) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[39]
+	mi := &file_fora_v1_fora_proto_msgTypes[40]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6649,7 +6771,7 @@ func (x *UsageAsset) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageAsset.ProtoReflect.Descriptor instead.
 func (*UsageAsset) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{39}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{40}
 }
 
 func (x *UsageAsset) GetUri() string {
@@ -6700,7 +6822,7 @@ type UsageReportResponse struct {
 
 func (x *UsageReportResponse) Reset() {
 	*x = UsageReportResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[40]
+	mi := &file_fora_v1_fora_proto_msgTypes[41]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6712,7 +6834,7 @@ func (x *UsageReportResponse) String() string {
 func (*UsageReportResponse) ProtoMessage() {}
 
 func (x *UsageReportResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[40]
+	mi := &file_fora_v1_fora_proto_msgTypes[41]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6725,7 +6847,7 @@ func (x *UsageReportResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageReportResponse.ProtoReflect.Descriptor instead.
 func (*UsageReportResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{40}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{41}
 }
 
 func (x *UsageReportResponse) GetVer() string {
@@ -6811,7 +6933,7 @@ type DiscoveryRequest struct {
 
 func (x *DiscoveryRequest) Reset() {
 	*x = DiscoveryRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[41]
+	mi := &file_fora_v1_fora_proto_msgTypes[42]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6823,7 +6945,7 @@ func (x *DiscoveryRequest) String() string {
 func (*DiscoveryRequest) ProtoMessage() {}
 
 func (x *DiscoveryRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[41]
+	mi := &file_fora_v1_fora_proto_msgTypes[42]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6836,7 +6958,7 @@ func (x *DiscoveryRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DiscoveryRequest.ProtoReflect.Descriptor instead.
 func (*DiscoveryRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{41}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{42}
 }
 
 func (x *DiscoveryRequest) GetVer() string {
@@ -6964,7 +7086,7 @@ type RequestConstraints struct {
 
 func (x *RequestConstraints) Reset() {
 	*x = RequestConstraints{}
-	mi := &file_fora_v1_fora_proto_msgTypes[42]
+	mi := &file_fora_v1_fora_proto_msgTypes[43]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6976,7 +7098,7 @@ func (x *RequestConstraints) String() string {
 func (*RequestConstraints) ProtoMessage() {}
 
 func (x *RequestConstraints) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[42]
+	mi := &file_fora_v1_fora_proto_msgTypes[43]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6989,7 +7111,7 @@ func (x *RequestConstraints) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RequestConstraints.ProtoReflect.Descriptor instead.
 func (*RequestConstraints) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{42}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{43}
 }
 
 func (x *RequestConstraints) GetExchanges() []string {
@@ -7105,7 +7227,7 @@ type JsonWebKey struct {
 
 func (x *JsonWebKey) Reset() {
 	*x = JsonWebKey{}
-	mi := &file_fora_v1_fora_proto_msgTypes[43]
+	mi := &file_fora_v1_fora_proto_msgTypes[44]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7117,7 +7239,7 @@ func (x *JsonWebKey) String() string {
 func (*JsonWebKey) ProtoMessage() {}
 
 func (x *JsonWebKey) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[43]
+	mi := &file_fora_v1_fora_proto_msgTypes[44]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7130,7 +7252,7 @@ func (x *JsonWebKey) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use JsonWebKey.ProtoReflect.Descriptor instead.
 func (*JsonWebKey) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{43}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{44}
 }
 
 func (x *JsonWebKey) GetKty() string {
@@ -7381,7 +7503,7 @@ type AccountRegistration struct {
 
 func (x *AccountRegistration) Reset() {
 	*x = AccountRegistration{}
-	mi := &file_fora_v1_fora_proto_msgTypes[44]
+	mi := &file_fora_v1_fora_proto_msgTypes[45]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7393,7 +7515,7 @@ func (x *AccountRegistration) String() string {
 func (*AccountRegistration) ProtoMessage() {}
 
 func (x *AccountRegistration) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[44]
+	mi := &file_fora_v1_fora_proto_msgTypes[45]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7406,7 +7528,7 @@ func (x *AccountRegistration) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use AccountRegistration.ProtoReflect.Descriptor instead.
 func (*AccountRegistration) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{44}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{45}
 }
 
 func (x *AccountRegistration) GetDataSchema() *structpb.Struct {
@@ -7563,7 +7685,7 @@ type WellKnownManifest struct {
 
 func (x *WellKnownManifest) Reset() {
 	*x = WellKnownManifest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[45]
+	mi := &file_fora_v1_fora_proto_msgTypes[46]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7575,7 +7697,7 @@ func (x *WellKnownManifest) String() string {
 func (*WellKnownManifest) ProtoMessage() {}
 
 func (x *WellKnownManifest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[45]
+	mi := &file_fora_v1_fora_proto_msgTypes[46]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7588,7 +7710,7 @@ func (x *WellKnownManifest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use WellKnownManifest.ProtoReflect.Descriptor instead.
 func (*WellKnownManifest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{45}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{46}
 }
 
 func (x *WellKnownManifest) GetVer() string {
@@ -7815,7 +7937,7 @@ type WBAFile struct {
 
 func (x *WBAFile) Reset() {
 	*x = WBAFile{}
-	mi := &file_fora_v1_fora_proto_msgTypes[46]
+	mi := &file_fora_v1_fora_proto_msgTypes[47]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7827,7 +7949,7 @@ func (x *WBAFile) String() string {
 func (*WBAFile) ProtoMessage() {}
 
 func (x *WBAFile) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[46]
+	mi := &file_fora_v1_fora_proto_msgTypes[47]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7840,7 +7962,7 @@ func (x *WBAFile) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use WBAFile.ProtoReflect.Descriptor instead.
 func (*WBAFile) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{46}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{47}
 }
 
 func (x *WBAFile) GetKeys() []*JsonWebKey {
@@ -7879,7 +8001,7 @@ type KeyRevocationList struct {
 
 func (x *KeyRevocationList) Reset() {
 	*x = KeyRevocationList{}
-	mi := &file_fora_v1_fora_proto_msgTypes[47]
+	mi := &file_fora_v1_fora_proto_msgTypes[48]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7891,7 +8013,7 @@ func (x *KeyRevocationList) String() string {
 func (*KeyRevocationList) ProtoMessage() {}
 
 func (x *KeyRevocationList) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[47]
+	mi := &file_fora_v1_fora_proto_msgTypes[48]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7904,7 +8026,7 @@ func (x *KeyRevocationList) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use KeyRevocationList.ProtoReflect.Descriptor instead.
 func (*KeyRevocationList) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{47}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{48}
 }
 
 func (x *KeyRevocationList) GetAsOf() *timestamppb.Timestamp {
@@ -7937,7 +8059,7 @@ type CatalogContributor struct {
 
 func (x *CatalogContributor) Reset() {
 	*x = CatalogContributor{}
-	mi := &file_fora_v1_fora_proto_msgTypes[48]
+	mi := &file_fora_v1_fora_proto_msgTypes[49]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7949,7 +8071,7 @@ func (x *CatalogContributor) String() string {
 func (*CatalogContributor) ProtoMessage() {}
 
 func (x *CatalogContributor) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[48]
+	mi := &file_fora_v1_fora_proto_msgTypes[49]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7962,7 +8084,7 @@ func (x *CatalogContributor) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CatalogContributor.ProtoReflect.Descriptor instead.
 func (*CatalogContributor) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{48}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{49}
 }
 
 func (x *CatalogContributor) GetDomain() string {
@@ -8002,7 +8124,7 @@ type AuthorizedExchange struct {
 
 func (x *AuthorizedExchange) Reset() {
 	*x = AuthorizedExchange{}
-	mi := &file_fora_v1_fora_proto_msgTypes[49]
+	mi := &file_fora_v1_fora_proto_msgTypes[50]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8014,7 +8136,7 @@ func (x *AuthorizedExchange) String() string {
 func (*AuthorizedExchange) ProtoMessage() {}
 
 func (x *AuthorizedExchange) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[49]
+	mi := &file_fora_v1_fora_proto_msgTypes[50]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8027,7 +8149,7 @@ func (x *AuthorizedExchange) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use AuthorizedExchange.ProtoReflect.Descriptor instead.
 func (*AuthorizedExchange) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{49}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{50}
 }
 
 func (x *AuthorizedExchange) GetDomain() string {
@@ -8071,7 +8193,8 @@ func (x *AuthorizedExchange) GetExtCritical() []string {
 // Exchanges, grouped by the URI they were requested for. Committing to an offer
 // is a separate exchange on the execute path; that per-transaction result
 // (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)
-// is returned by TransactionResponse, not here.
+// is returned by TransactionResponse, or by BrokerTransactionResponse when the
+// purchase goes through BrokerService.ExecuteTransaction, not here.
 type DiscoveryResponse struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
@@ -8112,7 +8235,7 @@ type DiscoveryResponse struct {
 
 func (x *DiscoveryResponse) Reset() {
 	*x = DiscoveryResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[50]
+	mi := &file_fora_v1_fora_proto_msgTypes[51]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8124,7 +8247,7 @@ func (x *DiscoveryResponse) String() string {
 func (*DiscoveryResponse) ProtoMessage() {}
 
 func (x *DiscoveryResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[50]
+	mi := &file_fora_v1_fora_proto_msgTypes[51]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8137,7 +8260,7 @@ func (x *DiscoveryResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DiscoveryResponse.ProtoReflect.Descriptor instead.
 func (*DiscoveryResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{50}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{51}
 }
 
 func (x *DiscoveryResponse) GetVer() string {
@@ -8175,6 +8298,195 @@ func (x *DiscoveryResponse) GetExtCritical() []string {
 	return nil
 }
 
+// BrokerTransactionResponse — the Broker's combined answer to
+// BrokerService.ExecuteTransaction: the independent per-resource purchases it
+// made at one or more Exchanges, assembled in request order. Each item is
+// atomic and owned by the Exchange that issued its offer, so the combination
+// needs no integrity of its own and carries none: no field here is signed, and
+// a result item's one signed value is its retrieval_endpoint, signed by the
+// issuing Exchange (see BrokerService.ExecuteTransaction).
+type BrokerTransactionResponse struct {
+	state protoimpl.MessageState `protogen:"open.v1"`
+	// FORA protocol version — "1.0". Stamped by the sender from a single
+	// constant; advisory on receive. See "Protocol version" in the file header.
+	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
+	// One per request item, in request order. A purchase that succeeded, or that
+	// its Exchange denied per item (denial_reason), is that Exchange's
+	// TransactionResultItem unchanged. An item whose Exchange refused the whole
+	// sub-request, or did not answer it, carries that refusal in `refusal`, with
+	// offer_id set and no other result field.
+	Items []*TransactionResultItem `protobuf:"bytes,2,rep,name=items,proto3" json:"items,omitempty"`
+	// One per Exchange the Broker contacted, in the order each Exchange first
+	// appears among the request items.
+	Exchanges []*ExchangeOutcome `protobuf:"bytes,3,rep,name=exchanges,proto3" json:"exchanges,omitempty"`
+	// Charged totals, one per currency, in the order each currency first appears
+	// among the charged items. An item is charged when it carries neither
+	// denial_reason nor refusal; its cost.amount is added, as an exact decimal,
+	// into the entry for its cost.currency. Amounts are never summed across
+	// currencies and never converted. unit_cost is unset. Empty when no item was
+	// charged.
+	Totals []*Cost `protobuf:"bytes,4,rep,name=totals,proto3" json:"totals,omitempty"`
+	// Extension point
+	Ext *structpb.Struct `protobuf:"bytes,15,opt,name=ext,proto3" json:"ext,omitempty"`
+	// Critical extension keys (COSE crit pattern, RFC 9052).
+	// Lists keys within ext that the consumer MUST understand.
+	// Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.
+	// Empty (default) → all ext keys are safe to ignore.
+	ExtCritical   []string `protobuf:"bytes,90,rep,name=ext_critical,json=extCritical,proto3" json:"ext_critical,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *BrokerTransactionResponse) Reset() {
+	*x = BrokerTransactionResponse{}
+	mi := &file_fora_v1_fora_proto_msgTypes[52]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *BrokerTransactionResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*BrokerTransactionResponse) ProtoMessage() {}
+
+func (x *BrokerTransactionResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_fora_v1_fora_proto_msgTypes[52]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use BrokerTransactionResponse.ProtoReflect.Descriptor instead.
+func (*BrokerTransactionResponse) Descriptor() ([]byte, []int) {
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{52}
+}
+
+func (x *BrokerTransactionResponse) GetVer() string {
+	if x != nil {
+		return x.Ver
+	}
+	return ""
+}
+
+func (x *BrokerTransactionResponse) GetItems() []*TransactionResultItem {
+	if x != nil {
+		return x.Items
+	}
+	return nil
+}
+
+func (x *BrokerTransactionResponse) GetExchanges() []*ExchangeOutcome {
+	if x != nil {
+		return x.Exchanges
+	}
+	return nil
+}
+
+func (x *BrokerTransactionResponse) GetTotals() []*Cost {
+	if x != nil {
+		return x.Totals
+	}
+	return nil
+}
+
+func (x *BrokerTransactionResponse) GetExt() *structpb.Struct {
+	if x != nil {
+		return x.Ext
+	}
+	return nil
+}
+
+func (x *BrokerTransactionResponse) GetExtCritical() []string {
+	if x != nil {
+		return x.ExtCritical
+	}
+	return nil
+}
+
+// ExchangeOutcome — the request-level state of one Exchange's answer to the
+// sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields
+// of its TransactionResponse that are not per item.
+type ExchangeOutcome struct {
+	state protoimpl.MessageState `protogen:"open.v1"`
+	// Bare host of the Exchange, in the form "Request recipient" defines in the
+	// file header: the offer.exchange its items share.
+	Exchange string `protobuf:"bytes,1,opt,name=exchange,proto3" json:"exchange,omitempty"`
+	// The offer_id of every item sent to this Exchange, in request order.
+	OfferIds []string `protobuf:"bytes,2,rep,name=offer_ids,json=offerIds,proto3" json:"offer_ids,omitempty"`
+	// That Exchange's TransactionResponse.agent_identity_hash: the identity the
+	// retrieval_endpoint of each of its items is bound to. Empty when the
+	// Exchange refused the sub-request or did not answer.
+	AgentIdentityHash string `protobuf:"bytes,3,opt,name=agent_identity_hash,json=agentIdentityHash,proto3" json:"agent_identity_hash,omitempty"`
+	// That Exchange's TransactionResponse.subscription_quota, unchanged.
+	SubscriptionQuota []*SubscriptionQuotaInfo `protobuf:"bytes,4,rep,name=subscription_quota,json=subscriptionQuota,proto3" json:"subscription_quota,omitempty"`
+	unknownFields     protoimpl.UnknownFields
+	sizeCache         protoimpl.SizeCache
+}
+
+func (x *ExchangeOutcome) Reset() {
+	*x = ExchangeOutcome{}
+	mi := &file_fora_v1_fora_proto_msgTypes[53]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ExchangeOutcome) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ExchangeOutcome) ProtoMessage() {}
+
+func (x *ExchangeOutcome) ProtoReflect() protoreflect.Message {
+	mi := &file_fora_v1_fora_proto_msgTypes[53]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ExchangeOutcome.ProtoReflect.Descriptor instead.
+func (*ExchangeOutcome) Descriptor() ([]byte, []int) {
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{53}
+}
+
+func (x *ExchangeOutcome) GetExchange() string {
+	if x != nil {
+		return x.Exchange
+	}
+	return ""
+}
+
+func (x *ExchangeOutcome) GetOfferIds() []string {
+	if x != nil {
+		return x.OfferIds
+	}
+	return nil
+}
+
+func (x *ExchangeOutcome) GetAgentIdentityHash() string {
+	if x != nil {
+		return x.AgentIdentityHash
+	}
+	return ""
+}
+
+func (x *ExchangeOutcome) GetSubscriptionQuota() []*SubscriptionQuotaInfo {
+	if x != nil {
+		return x.SubscriptionQuota
+	}
+	return nil
+}
+
 // DisputeRequest — Agent signals a problem with delivered resource.
 type DisputeRequest struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
@@ -8229,7 +8541,7 @@ type DisputeRequest struct {
 
 func (x *DisputeRequest) Reset() {
 	*x = DisputeRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[51]
+	mi := &file_fora_v1_fora_proto_msgTypes[54]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8241,7 +8553,7 @@ func (x *DisputeRequest) String() string {
 func (*DisputeRequest) ProtoMessage() {}
 
 func (x *DisputeRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[51]
+	mi := &file_fora_v1_fora_proto_msgTypes[54]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8254,7 +8566,7 @@ func (x *DisputeRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisputeRequest.ProtoReflect.Descriptor instead.
 func (*DisputeRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{51}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{54}
 }
 
 func (x *DisputeRequest) GetVer() string {
@@ -8377,7 +8689,7 @@ type DisputeResponse struct {
 
 func (x *DisputeResponse) Reset() {
 	*x = DisputeResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[52]
+	mi := &file_fora_v1_fora_proto_msgTypes[55]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8389,7 +8701,7 @@ func (x *DisputeResponse) String() string {
 func (*DisputeResponse) ProtoMessage() {}
 
 func (x *DisputeResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[52]
+	mi := &file_fora_v1_fora_proto_msgTypes[55]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8402,7 +8714,7 @@ func (x *DisputeResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisputeResponse.ProtoReflect.Descriptor instead.
 func (*DisputeResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{52}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{55}
 }
 
 func (x *DisputeResponse) GetVer() string {
@@ -8482,7 +8794,7 @@ type DomainVerificationRequest struct {
 
 func (x *DomainVerificationRequest) Reset() {
 	*x = DomainVerificationRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[53]
+	mi := &file_fora_v1_fora_proto_msgTypes[56]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8494,7 +8806,7 @@ func (x *DomainVerificationRequest) String() string {
 func (*DomainVerificationRequest) ProtoMessage() {}
 
 func (x *DomainVerificationRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[53]
+	mi := &file_fora_v1_fora_proto_msgTypes[56]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8507,7 +8819,7 @@ func (x *DomainVerificationRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationRequest.ProtoReflect.Descriptor instead.
 func (*DomainVerificationRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{53}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{56}
 }
 
 func (x *DomainVerificationRequest) GetVer() string {
@@ -8578,7 +8890,7 @@ type DomainVerificationChallenge struct {
 
 func (x *DomainVerificationChallenge) Reset() {
 	*x = DomainVerificationChallenge{}
-	mi := &file_fora_v1_fora_proto_msgTypes[54]
+	mi := &file_fora_v1_fora_proto_msgTypes[57]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8590,7 +8902,7 @@ func (x *DomainVerificationChallenge) String() string {
 func (*DomainVerificationChallenge) ProtoMessage() {}
 
 func (x *DomainVerificationChallenge) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[54]
+	mi := &file_fora_v1_fora_proto_msgTypes[57]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8603,7 +8915,7 @@ func (x *DomainVerificationChallenge) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationChallenge.ProtoReflect.Descriptor instead.
 func (*DomainVerificationChallenge) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{54}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{57}
 }
 
 func (x *DomainVerificationChallenge) GetVer() string {
@@ -8695,7 +9007,7 @@ type DomainVerificationConfirmation struct {
 
 func (x *DomainVerificationConfirmation) Reset() {
 	*x = DomainVerificationConfirmation{}
-	mi := &file_fora_v1_fora_proto_msgTypes[55]
+	mi := &file_fora_v1_fora_proto_msgTypes[58]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8707,7 +9019,7 @@ func (x *DomainVerificationConfirmation) String() string {
 func (*DomainVerificationConfirmation) ProtoMessage() {}
 
 func (x *DomainVerificationConfirmation) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[55]
+	mi := &file_fora_v1_fora_proto_msgTypes[58]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8720,7 +9032,7 @@ func (x *DomainVerificationConfirmation) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationConfirmation.ProtoReflect.Descriptor instead.
 func (*DomainVerificationConfirmation) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{55}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{58}
 }
 
 func (x *DomainVerificationConfirmation) GetVer() string {
@@ -8802,7 +9114,7 @@ type DomainVerificationResult struct {
 
 func (x *DomainVerificationResult) Reset() {
 	*x = DomainVerificationResult{}
-	mi := &file_fora_v1_fora_proto_msgTypes[56]
+	mi := &file_fora_v1_fora_proto_msgTypes[59]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8814,7 +9126,7 @@ func (x *DomainVerificationResult) String() string {
 func (*DomainVerificationResult) ProtoMessage() {}
 
 func (x *DomainVerificationResult) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[56]
+	mi := &file_fora_v1_fora_proto_msgTypes[59]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8827,7 +9139,7 @@ func (x *DomainVerificationResult) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationResult.ProtoReflect.Descriptor instead.
 func (*DomainVerificationResult) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{56}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{59}
 }
 
 func (x *DomainVerificationResult) GetVer() string {
@@ -9015,7 +9327,7 @@ type RegisterRequest struct {
 
 func (x *RegisterRequest) Reset() {
 	*x = RegisterRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[57]
+	mi := &file_fora_v1_fora_proto_msgTypes[60]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9027,7 +9339,7 @@ func (x *RegisterRequest) String() string {
 func (*RegisterRequest) ProtoMessage() {}
 
 func (x *RegisterRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[57]
+	mi := &file_fora_v1_fora_proto_msgTypes[60]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9040,7 +9352,7 @@ func (x *RegisterRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegisterRequest.ProtoReflect.Descriptor instead.
 func (*RegisterRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{57}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{60}
 }
 
 func (x *RegisterRequest) GetVer() string {
@@ -9111,7 +9423,7 @@ type RegisterResponse struct {
 
 func (x *RegisterResponse) Reset() {
 	*x = RegisterResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[58]
+	mi := &file_fora_v1_fora_proto_msgTypes[61]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9123,7 +9435,7 @@ func (x *RegisterResponse) String() string {
 func (*RegisterResponse) ProtoMessage() {}
 
 func (x *RegisterResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[58]
+	mi := &file_fora_v1_fora_proto_msgTypes[61]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9136,7 +9448,7 @@ func (x *RegisterResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegisterResponse.ProtoReflect.Descriptor instead.
 func (*RegisterResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{58}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{61}
 }
 
 func (x *RegisterResponse) GetVer() string {
@@ -9198,7 +9510,7 @@ type GetAccountStatusRequest struct {
 
 func (x *GetAccountStatusRequest) Reset() {
 	*x = GetAccountStatusRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[59]
+	mi := &file_fora_v1_fora_proto_msgTypes[62]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9210,7 +9522,7 @@ func (x *GetAccountStatusRequest) String() string {
 func (*GetAccountStatusRequest) ProtoMessage() {}
 
 func (x *GetAccountStatusRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[59]
+	mi := &file_fora_v1_fora_proto_msgTypes[62]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9223,7 +9535,7 @@ func (x *GetAccountStatusRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GetAccountStatusRequest.ProtoReflect.Descriptor instead.
 func (*GetAccountStatusRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{59}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{62}
 }
 
 func (x *GetAccountStatusRequest) GetVer() string {
@@ -9316,7 +9628,7 @@ type GetAccountStatusResponse struct {
 
 func (x *GetAccountStatusResponse) Reset() {
 	*x = GetAccountStatusResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[60]
+	mi := &file_fora_v1_fora_proto_msgTypes[63]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9328,7 +9640,7 @@ func (x *GetAccountStatusResponse) String() string {
 func (*GetAccountStatusResponse) ProtoMessage() {}
 
 func (x *GetAccountStatusResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[60]
+	mi := &file_fora_v1_fora_proto_msgTypes[63]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9341,7 +9653,7 @@ func (x *GetAccountStatusResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GetAccountStatusResponse.ProtoReflect.Descriptor instead.
 func (*GetAccountStatusResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{60}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{63}
 }
 
 func (x *GetAccountStatusResponse) GetVer() string {
@@ -9432,7 +9744,7 @@ type ErrorDetail struct {
 
 func (x *ErrorDetail) Reset() {
 	*x = ErrorDetail{}
-	mi := &file_fora_v1_fora_proto_msgTypes[61]
+	mi := &file_fora_v1_fora_proto_msgTypes[64]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9444,7 +9756,7 @@ func (x *ErrorDetail) String() string {
 func (*ErrorDetail) ProtoMessage() {}
 
 func (x *ErrorDetail) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[61]
+	mi := &file_fora_v1_fora_proto_msgTypes[64]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9457,7 +9769,7 @@ func (x *ErrorDetail) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ErrorDetail.ProtoReflect.Descriptor instead.
 func (*ErrorDetail) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{61}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{64}
 }
 
 func (x *ErrorDetail) GetMessage() string {
@@ -9635,7 +9947,9 @@ type TransactionDenial struct {
 	// Bare host of the Exchange that PRODUCED this denial, in the form "Request
 	// recipient" defines in the file header. Not an echo of what the caller sent:
 	// on a relayed or fanned-out execute the request went to a Broker, so the
-	// Exchange that refused may not be one the agent named. Carrying it here is
+	// Exchange that refused may not be one the agent named (through
+	// BrokerService.ExecuteTransaction this detail reaches the agent inside
+	// UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is
 	// what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to
 	// call Register without fetching a manifest to work it out. NOTHING SIGNS THIS
 	// VALUE: it rides in a response, and on a relayed path the response passed
@@ -9656,7 +9970,7 @@ type TransactionDenial struct {
 
 func (x *TransactionDenial) Reset() {
 	*x = TransactionDenial{}
-	mi := &file_fora_v1_fora_proto_msgTypes[62]
+	mi := &file_fora_v1_fora_proto_msgTypes[65]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9668,7 +9982,7 @@ func (x *TransactionDenial) String() string {
 func (*TransactionDenial) ProtoMessage() {}
 
 func (x *TransactionDenial) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[62]
+	mi := &file_fora_v1_fora_proto_msgTypes[65]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9681,7 +9995,7 @@ func (x *TransactionDenial) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use TransactionDenial.ProtoReflect.Descriptor instead.
 func (*TransactionDenial) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{62}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{65}
 }
 
 func (x *TransactionDenial) GetReason() DenialReason {
@@ -9727,7 +10041,7 @@ type CatalogRejection struct {
 
 func (x *CatalogRejection) Reset() {
 	*x = CatalogRejection{}
-	mi := &file_fora_v1_fora_proto_msgTypes[63]
+	mi := &file_fora_v1_fora_proto_msgTypes[66]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9739,7 +10053,7 @@ func (x *CatalogRejection) String() string {
 func (*CatalogRejection) ProtoMessage() {}
 
 func (x *CatalogRejection) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[63]
+	mi := &file_fora_v1_fora_proto_msgTypes[66]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9752,7 +10066,7 @@ func (x *CatalogRejection) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CatalogRejection.ProtoReflect.Descriptor instead.
 func (*CatalogRejection) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{63}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{66}
 }
 
 func (x *CatalogRejection) GetReason() CatalogRejectionReason {
@@ -9784,7 +10098,7 @@ type RegistrationFailure struct {
 
 func (x *RegistrationFailure) Reset() {
 	*x = RegistrationFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[64]
+	mi := &file_fora_v1_fora_proto_msgTypes[67]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9796,7 +10110,7 @@ func (x *RegistrationFailure) String() string {
 func (*RegistrationFailure) ProtoMessage() {}
 
 func (x *RegistrationFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[64]
+	mi := &file_fora_v1_fora_proto_msgTypes[67]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9809,7 +10123,7 @@ func (x *RegistrationFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegistrationFailure.ProtoReflect.Descriptor instead.
 func (*RegistrationFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{64}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{67}
 }
 
 func (x *RegistrationFailure) GetReason() RegistrationFailureReason {
@@ -9847,7 +10161,7 @@ type RegistrationFieldError struct {
 
 func (x *RegistrationFieldError) Reset() {
 	*x = RegistrationFieldError{}
-	mi := &file_fora_v1_fora_proto_msgTypes[65]
+	mi := &file_fora_v1_fora_proto_msgTypes[68]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9859,7 +10173,7 @@ func (x *RegistrationFieldError) String() string {
 func (*RegistrationFieldError) ProtoMessage() {}
 
 func (x *RegistrationFieldError) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[65]
+	mi := &file_fora_v1_fora_proto_msgTypes[68]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9872,7 +10186,7 @@ func (x *RegistrationFieldError) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegistrationFieldError.ProtoReflect.Descriptor instead.
 func (*RegistrationFieldError) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{65}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{68}
 }
 
 func (x *RegistrationFieldError) GetPath() string {
@@ -9900,7 +10214,7 @@ type DisputeFailure struct {
 
 func (x *DisputeFailure) Reset() {
 	*x = DisputeFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[66]
+	mi := &file_fora_v1_fora_proto_msgTypes[69]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9912,7 +10226,7 @@ func (x *DisputeFailure) String() string {
 func (*DisputeFailure) ProtoMessage() {}
 
 func (x *DisputeFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[66]
+	mi := &file_fora_v1_fora_proto_msgTypes[69]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9925,7 +10239,7 @@ func (x *DisputeFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisputeFailure.ProtoReflect.Descriptor instead.
 func (*DisputeFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{66}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{69}
 }
 
 func (x *DisputeFailure) GetReason() DisputeFailureReason {
@@ -9946,7 +10260,7 @@ type DomainVerificationFailure struct {
 
 func (x *DomainVerificationFailure) Reset() {
 	*x = DomainVerificationFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[67]
+	mi := &file_fora_v1_fora_proto_msgTypes[70]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9958,7 +10272,7 @@ func (x *DomainVerificationFailure) String() string {
 func (*DomainVerificationFailure) ProtoMessage() {}
 
 func (x *DomainVerificationFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[67]
+	mi := &file_fora_v1_fora_proto_msgTypes[70]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9971,7 +10285,7 @@ func (x *DomainVerificationFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationFailure.ProtoReflect.Descriptor instead.
 func (*DomainVerificationFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{67}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{70}
 }
 
 func (x *DomainVerificationFailure) GetReason() DomainVerificationFailureReason {
@@ -9992,7 +10306,7 @@ type RetrievalAuthFailure struct {
 
 func (x *RetrievalAuthFailure) Reset() {
 	*x = RetrievalAuthFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[68]
+	mi := &file_fora_v1_fora_proto_msgTypes[71]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10004,7 +10318,7 @@ func (x *RetrievalAuthFailure) String() string {
 func (*RetrievalAuthFailure) ProtoMessage() {}
 
 func (x *RetrievalAuthFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[68]
+	mi := &file_fora_v1_fora_proto_msgTypes[71]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10017,7 +10331,7 @@ func (x *RetrievalAuthFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RetrievalAuthFailure.ProtoReflect.Descriptor instead.
 func (*RetrievalAuthFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{68}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{71}
 }
 
 func (x *RetrievalAuthFailure) GetReason() RetrievalAuthFailureReason {
@@ -10038,7 +10352,7 @@ type UsageReportRejection struct {
 
 func (x *UsageReportRejection) Reset() {
 	*x = UsageReportRejection{}
-	mi := &file_fora_v1_fora_proto_msgTypes[69]
+	mi := &file_fora_v1_fora_proto_msgTypes[72]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10050,7 +10364,7 @@ func (x *UsageReportRejection) String() string {
 func (*UsageReportRejection) ProtoMessage() {}
 
 func (x *UsageReportRejection) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[69]
+	mi := &file_fora_v1_fora_proto_msgTypes[72]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10063,7 +10377,7 @@ func (x *UsageReportRejection) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageReportRejection.ProtoReflect.Descriptor instead.
 func (*UsageReportRejection) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{69}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{72}
 }
 
 func (x *UsageReportRejection) GetReason() UsageReportRejectionReason {
@@ -10084,7 +10398,7 @@ type RequestAuthFailure struct {
 
 func (x *RequestAuthFailure) Reset() {
 	*x = RequestAuthFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[70]
+	mi := &file_fora_v1_fora_proto_msgTypes[73]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10096,7 +10410,7 @@ func (x *RequestAuthFailure) String() string {
 func (*RequestAuthFailure) ProtoMessage() {}
 
 func (x *RequestAuthFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[70]
+	mi := &file_fora_v1_fora_proto_msgTypes[73]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10109,7 +10423,7 @@ func (x *RequestAuthFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RequestAuthFailure.ProtoReflect.Descriptor instead.
 func (*RequestAuthFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{70}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{73}
 }
 
 func (x *RequestAuthFailure) GetReason() RequestAuthFailureReason {
@@ -10405,7 +10719,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x12subscription_quota\x18\x11 \x03(\v2\x1e.fora.v1.SubscriptionQuotaInfoR\x11subscriptionQuota\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
 	"\fext_critical\x18Z \x03(\tR\vextCriticalB\r\n" +
-	"\v_total_cost\"\xf3\x06\n" +
+	"\v_total_cost\"\xb8\a\n" +
 	"\x15TransactionResultItem\x12\x19\n" +
 	"\boffer_id\x18\x01 \x01(\tR\aofferId\x12%\n" +
 	"\x0etransaction_id\x18\x02 \x01(\tR\rtransactionId\x12\x1d\n" +
@@ -10422,14 +10736,22 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x12retrieval_endpoint\x18\f \x01(\tH\x05R\x11retrievalEndpoint\x88\x01\x01\x12@\n" +
 	"\x0fdelivery_method\x18\t \x01(\x0e2\x17.fora.v1.DeliveryMethodR\x0edeliveryMethod\x12T\n" +
 	"\x14reporting_obligation\x18\n" +
-	" \x01(\v2\x1c.fora.v1.ReportingObligationH\x06R\x13reportingObligation\x88\x01\x01B\x11\n" +
+	" \x01(\v2\x1c.fora.v1.ReportingObligationH\x06R\x13reportingObligation\x88\x01\x01\x127\n" +
+	"\arefusal\x18\x0e \x01(\v2\x18.fora.v1.UpstreamRefusalH\aR\arefusal\x88\x01\x01B\x11\n" +
 	"\x0f_resource_titleB\x12\n" +
 	"\x10_subscription_idB\x1a\n" +
 	"\x18_subscription_unit_valueB\x10\n" +
 	"\x0e_denial_reasonB\r\n" +
 	"\v_expires_atB\x15\n" +
 	"\x13_retrieval_endpointB\x17\n" +
-	"\x15_reporting_obligation\"\xae\x01\n" +
+	"\x15_reporting_obligationB\n" +
+	"\n" +
+	"\b_refusal\"\xc8\x02\n" +
+	"\x0fUpstreamRefusal\x12\xd7\x01\n" +
+	"\bexchange\x18\x01 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\x12\x1d\n" +
+	"\x04code\x18\x02 \x01(\tB\t\xbaH\x06r\x04\x10\x01\x18@R\x04code\x121\n" +
+	"\x06detail\x18\x03 \x01(\v2\x14.fora.v1.ErrorDetailH\x00R\x06detail\x88\x01\x01B\t\n" +
+	"\a_detail\"\xae\x01\n" +
 	"\x04Cost\x128\n" +
 	"\x06amount\x18\x01 \x01(\tB \xbaH\x1dr\x1b\x18 2\x17^([0-9]+([.][0-9]+)?)?$R\x06amount\x12\x1a\n" +
 	"\bcurrency\x18\x02 \x01(\tR\bcurrency\x12B\n" +
@@ -10674,7 +10996,19 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x0eabsence_reason\x18\x10 \x01(\x0e2\x1b.fora.v1.OfferAbsenceReasonH\x00R\rabsenceReason\x88\x01\x01\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
 	"\fext_critical\x18Z \x03(\tR\vextCriticalB\x11\n" +
-	"\x0f_absence_reason\"\xf6\x05\n" +
+	"\x0f_absence_reason\"\x90\x02\n" +
+	"\x19BrokerTransactionResponse\x12\x10\n" +
+	"\x03ver\x18\x01 \x01(\tR\x03ver\x124\n" +
+	"\x05items\x18\x02 \x03(\v2\x1e.fora.v1.TransactionResultItemR\x05items\x126\n" +
+	"\texchanges\x18\x03 \x03(\v2\x18.fora.v1.ExchangeOutcomeR\texchanges\x12%\n" +
+	"\x06totals\x18\x04 \x03(\v2\r.fora.v1.CostR\x06totals\x12)\n" +
+	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical\"\x92\x03\n" +
+	"\x0fExchangeOutcome\x12\xd7\x01\n" +
+	"\bexchange\x18\x01 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\x12&\n" +
+	"\toffer_ids\x18\x02 \x03(\tB\t\xbaH\x06\x92\x01\x03\x10\x80\x02R\bofferIds\x12.\n" +
+	"\x13agent_identity_hash\x18\x03 \x01(\tR\x11agentIdentityHash\x12M\n" +
+	"\x12subscription_quota\x18\x04 \x03(\v2\x1e.fora.v1.SubscriptionQuotaInfoR\x11subscriptionQuota\"\xf6\x05\n" +
 	"\x0eDisputeRequest\x12\x10\n" +
 	"\x03ver\x18\x01 \x01(\tR\x03ver\x123\n" +
 	"\x0fidempotency_key\x18\x02 \x01(\tB\n" +
@@ -10916,7 +11250,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x1fRESOURCE_MUTABILITY_UNSPECIFIED\x10\x00\x12\x1e\n" +
 	"\x1aRESOURCE_MUTABILITY_STATIC\x10\x01\x12\x1f\n" +
 	"\x1bRESOURCE_MUTABILITY_DYNAMIC\x10\x02\x12\x1c\n" +
-	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\xe4\x05\n" +
+	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\x8a\x06\n" +
 	"\fDenialReason\x12\x1d\n" +
 	"\x19DENIAL_REASON_UNSPECIFIED\x10\x00\x12\"\n" +
 	"\x1eDENIAL_REASON_ACCOUNT_INACTIVE\x10\x01\x12&\n" +
@@ -10937,7 +11271,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"%DENIAL_REASON_ENTITLEMENT_WRONG_BUYER\x10\x0f\x12%\n" +
 	"!DENIAL_REASON_SUBSCRIPTION_LAPSED\x10\x10\x12)\n" +
 	"%DENIAL_REASON_ENTITLEMENT_NOT_GRANTED\x10\x11\x12(\n" +
-	"$DENIAL_REASON_ACCOUNT_NOT_REGISTERED\x10\x12*\x8c\x02\n" +
+	"$DENIAL_REASON_ACCOUNT_NOT_REGISTERED\x10\x12\x12$\n" +
+	" DENIAL_REASON_RELAY_NOT_ACCEPTED\x10\x13*\x8c\x02\n" +
 	"\x0fIngestionSource\x12 \n" +
 	"\x1cINGESTION_SOURCE_UNSPECIFIED\x10\x00\x12!\n" +
 	"\x1dINGESTION_SOURCE_FORA_SITEMAP\x10\x01\x12\x18\n" +
@@ -11067,9 +11402,10 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x0eCatalogService\x12N\n" +
 	"\rPushResources\x12\x1d.fora.v1.PushResourcesRequest\x1a\x1e.fora.v1.PushResourcesResponse\x12T\n" +
 	"\x0fRemoveResources\x12\x1f.fora.v1.RemoveResourcesRequest\x1a .fora.v1.RemoveResourcesResponse\x12Q\n" +
-	"\x0eRefreshCatalog\x12\x1e.fora.v1.RefreshCatalogRequest\x1a\x1f.fora.v1.RefreshCatalogResponse2Q\n" +
+	"\x0eRefreshCatalog\x12\x1e.fora.v1.RefreshCatalogRequest\x1a\x1f.fora.v1.RefreshCatalogResponse2\xa8\x01\n" +
 	"\rBrokerService\x12@\n" +
-	"\aResolve\x12\x19.fora.v1.DiscoveryRequest\x1a\x1a.fora.v1.DiscoveryResponseB\x8e\x01\n" +
+	"\aResolve\x12\x19.fora.v1.DiscoveryRequest\x1a\x1a.fora.v1.DiscoveryResponse\x12U\n" +
+	"\x12ExecuteTransaction\x12\x1b.fora.v1.TransactionRequest\x1a\".fora.v1.BrokerTransactionResponseB\x8e\x01\n" +
 	"\vcom.fora.v1B\tForaProtoP\x01Z7github.com/FORA-Protocol/protocol/gen/go/fora/v1;forav1\xa2\x02\x03FXX\xaa\x02\aFora.V1\xca\x02\aFora\\V1\xe2\x02\x13Fora\\V1\\GPBMetadata\xea\x02\bFora::V1b\x06proto3"
 
 var (
@@ -11085,7 +11421,7 @@ func file_fora_v1_fora_proto_rawDescGZIP() []byte {
 }
 
 var file_fora_v1_fora_proto_enumTypes = make([]protoimpl.EnumInfo, 29)
-var file_fora_v1_fora_proto_msgTypes = make([]protoimpl.MessageInfo, 72)
+var file_fora_v1_fora_proto_msgTypes = make([]protoimpl.MessageInfo, 75)
 var file_fora_v1_fora_proto_goTypes = []any{
 	(DiscoveryMethod)(0),                   // 0: fora.v1.DiscoveryMethod
 	(OfferAbsenceReason)(0),                // 1: fora.v1.OfferAbsenceReason
@@ -11143,88 +11479,91 @@ var file_fora_v1_fora_proto_goTypes = []any{
 	(*TransactionItem)(nil),                // 53: fora.v1.TransactionItem
 	(*TransactionResponse)(nil),            // 54: fora.v1.TransactionResponse
 	(*TransactionResultItem)(nil),          // 55: fora.v1.TransactionResultItem
-	(*Cost)(nil),                           // 56: fora.v1.Cost
-	(*PushResourcesRequest)(nil),           // 57: fora.v1.PushResourcesRequest
-	(*ResourceEntry)(nil),                  // 58: fora.v1.ResourceEntry
-	(*PushResourcesResponse)(nil),          // 59: fora.v1.PushResourcesResponse
-	(*RemoveResourcesRequest)(nil),         // 60: fora.v1.RemoveResourcesRequest
-	(*RemoveResourcesResponse)(nil),        // 61: fora.v1.RemoveResourcesResponse
-	(*RefreshCatalogRequest)(nil),          // 62: fora.v1.RefreshCatalogRequest
-	(*RefreshCatalogResponse)(nil),         // 63: fora.v1.RefreshCatalogResponse
-	(*ReportingObligation)(nil),            // 64: fora.v1.ReportingObligation
-	(*UsageReport)(nil),                    // 65: fora.v1.UsageReport
-	(*AttributionDetail)(nil),              // 66: fora.v1.AttributionDetail
-	(*Usage)(nil),                          // 67: fora.v1.Usage
-	(*UsageAsset)(nil),                     // 68: fora.v1.UsageAsset
-	(*UsageReportResponse)(nil),            // 69: fora.v1.UsageReportResponse
-	(*DiscoveryRequest)(nil),               // 70: fora.v1.DiscoveryRequest
-	(*RequestConstraints)(nil),             // 71: fora.v1.RequestConstraints
-	(*JsonWebKey)(nil),                     // 72: fora.v1.JsonWebKey
-	(*AccountRegistration)(nil),            // 73: fora.v1.AccountRegistration
-	(*WellKnownManifest)(nil),              // 74: fora.v1.WellKnownManifest
-	(*WBAFile)(nil),                        // 75: fora.v1.WBAFile
-	(*KeyRevocationList)(nil),              // 76: fora.v1.KeyRevocationList
-	(*CatalogContributor)(nil),             // 77: fora.v1.CatalogContributor
-	(*AuthorizedExchange)(nil),             // 78: fora.v1.AuthorizedExchange
-	(*DiscoveryResponse)(nil),              // 79: fora.v1.DiscoveryResponse
-	(*DisputeRequest)(nil),                 // 80: fora.v1.DisputeRequest
-	(*DisputeResponse)(nil),                // 81: fora.v1.DisputeResponse
-	(*DomainVerificationRequest)(nil),      // 82: fora.v1.DomainVerificationRequest
-	(*DomainVerificationChallenge)(nil),    // 83: fora.v1.DomainVerificationChallenge
-	(*DomainVerificationConfirmation)(nil), // 84: fora.v1.DomainVerificationConfirmation
-	(*DomainVerificationResult)(nil),       // 85: fora.v1.DomainVerificationResult
-	(*RegisterRequest)(nil),                // 86: fora.v1.RegisterRequest
-	(*RegisterResponse)(nil),               // 87: fora.v1.RegisterResponse
-	(*GetAccountStatusRequest)(nil),        // 88: fora.v1.GetAccountStatusRequest
-	(*GetAccountStatusResponse)(nil),       // 89: fora.v1.GetAccountStatusResponse
-	(*ErrorDetail)(nil),                    // 90: fora.v1.ErrorDetail
-	(*TransactionDenial)(nil),              // 91: fora.v1.TransactionDenial
-	(*CatalogRejection)(nil),               // 92: fora.v1.CatalogRejection
-	(*RegistrationFailure)(nil),            // 93: fora.v1.RegistrationFailure
-	(*RegistrationFieldError)(nil),         // 94: fora.v1.RegistrationFieldError
-	(*DisputeFailure)(nil),                 // 95: fora.v1.DisputeFailure
-	(*DomainVerificationFailure)(nil),      // 96: fora.v1.DomainVerificationFailure
-	(*RetrievalAuthFailure)(nil),           // 97: fora.v1.RetrievalAuthFailure
-	(*UsageReportRejection)(nil),           // 98: fora.v1.UsageReportRejection
-	(*RequestAuthFailure)(nil),             // 99: fora.v1.RequestAuthFailure
-	nil,                                    // 100: fora.v1.ErrorDetail.MetadataEntry
-	(*durationpb.Duration)(nil),            // 101: google.protobuf.Duration
-	(*structpb.Struct)(nil),                // 102: google.protobuf.Struct
-	(*timestamppb.Timestamp)(nil),          // 103: google.protobuf.Timestamp
+	(*UpstreamRefusal)(nil),                // 56: fora.v1.UpstreamRefusal
+	(*Cost)(nil),                           // 57: fora.v1.Cost
+	(*PushResourcesRequest)(nil),           // 58: fora.v1.PushResourcesRequest
+	(*ResourceEntry)(nil),                  // 59: fora.v1.ResourceEntry
+	(*PushResourcesResponse)(nil),          // 60: fora.v1.PushResourcesResponse
+	(*RemoveResourcesRequest)(nil),         // 61: fora.v1.RemoveResourcesRequest
+	(*RemoveResourcesResponse)(nil),        // 62: fora.v1.RemoveResourcesResponse
+	(*RefreshCatalogRequest)(nil),          // 63: fora.v1.RefreshCatalogRequest
+	(*RefreshCatalogResponse)(nil),         // 64: fora.v1.RefreshCatalogResponse
+	(*ReportingObligation)(nil),            // 65: fora.v1.ReportingObligation
+	(*UsageReport)(nil),                    // 66: fora.v1.UsageReport
+	(*AttributionDetail)(nil),              // 67: fora.v1.AttributionDetail
+	(*Usage)(nil),                          // 68: fora.v1.Usage
+	(*UsageAsset)(nil),                     // 69: fora.v1.UsageAsset
+	(*UsageReportResponse)(nil),            // 70: fora.v1.UsageReportResponse
+	(*DiscoveryRequest)(nil),               // 71: fora.v1.DiscoveryRequest
+	(*RequestConstraints)(nil),             // 72: fora.v1.RequestConstraints
+	(*JsonWebKey)(nil),                     // 73: fora.v1.JsonWebKey
+	(*AccountRegistration)(nil),            // 74: fora.v1.AccountRegistration
+	(*WellKnownManifest)(nil),              // 75: fora.v1.WellKnownManifest
+	(*WBAFile)(nil),                        // 76: fora.v1.WBAFile
+	(*KeyRevocationList)(nil),              // 77: fora.v1.KeyRevocationList
+	(*CatalogContributor)(nil),             // 78: fora.v1.CatalogContributor
+	(*AuthorizedExchange)(nil),             // 79: fora.v1.AuthorizedExchange
+	(*DiscoveryResponse)(nil),              // 80: fora.v1.DiscoveryResponse
+	(*BrokerTransactionResponse)(nil),      // 81: fora.v1.BrokerTransactionResponse
+	(*ExchangeOutcome)(nil),                // 82: fora.v1.ExchangeOutcome
+	(*DisputeRequest)(nil),                 // 83: fora.v1.DisputeRequest
+	(*DisputeResponse)(nil),                // 84: fora.v1.DisputeResponse
+	(*DomainVerificationRequest)(nil),      // 85: fora.v1.DomainVerificationRequest
+	(*DomainVerificationChallenge)(nil),    // 86: fora.v1.DomainVerificationChallenge
+	(*DomainVerificationConfirmation)(nil), // 87: fora.v1.DomainVerificationConfirmation
+	(*DomainVerificationResult)(nil),       // 88: fora.v1.DomainVerificationResult
+	(*RegisterRequest)(nil),                // 89: fora.v1.RegisterRequest
+	(*RegisterResponse)(nil),               // 90: fora.v1.RegisterResponse
+	(*GetAccountStatusRequest)(nil),        // 91: fora.v1.GetAccountStatusRequest
+	(*GetAccountStatusResponse)(nil),       // 92: fora.v1.GetAccountStatusResponse
+	(*ErrorDetail)(nil),                    // 93: fora.v1.ErrorDetail
+	(*TransactionDenial)(nil),              // 94: fora.v1.TransactionDenial
+	(*CatalogRejection)(nil),               // 95: fora.v1.CatalogRejection
+	(*RegistrationFailure)(nil),            // 96: fora.v1.RegistrationFailure
+	(*RegistrationFieldError)(nil),         // 97: fora.v1.RegistrationFieldError
+	(*DisputeFailure)(nil),                 // 98: fora.v1.DisputeFailure
+	(*DomainVerificationFailure)(nil),      // 99: fora.v1.DomainVerificationFailure
+	(*RetrievalAuthFailure)(nil),           // 100: fora.v1.RetrievalAuthFailure
+	(*UsageReportRejection)(nil),           // 101: fora.v1.UsageReportRejection
+	(*RequestAuthFailure)(nil),             // 102: fora.v1.RequestAuthFailure
+	nil,                                    // 103: fora.v1.ErrorDetail.MetadataEntry
+	(*durationpb.Duration)(nil),            // 104: google.protobuf.Duration
+	(*structpb.Struct)(nil),                // 105: google.protobuf.Struct
+	(*timestamppb.Timestamp)(nil),          // 106: google.protobuf.Timestamp
 }
 var file_fora_v1_fora_proto_depIdxs = []int32{
 	3,   // 0: fora.v1.AcceptableRestriction.axis:type_name -> fora.v1.RestrictionKind
 	45,  // 1: fora.v1.ResourceQuery.requester:type_name -> fora.v1.Requester
 	29,  // 2: fora.v1.ResourceQuery.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
-	101, // 3: fora.v1.ResourceQuery.deadline:type_name -> google.protobuf.Duration
-	102, // 4: fora.v1.ResourceQuery.ext:type_name -> google.protobuf.Struct
+	104, // 3: fora.v1.ResourceQuery.deadline:type_name -> google.protobuf.Duration
+	105, // 4: fora.v1.ResourceQuery.ext:type_name -> google.protobuf.Struct
 	35,  // 5: fora.v1.ResourceResponse.offers:type_name -> fora.v1.Offer
 	32,  // 6: fora.v1.ResourceResponse.offer_groups:type_name -> fora.v1.OfferGroup
 	33,  // 7: fora.v1.ResourceResponse.rate_limit:type_name -> fora.v1.RateLimitInfo
-	102, // 8: fora.v1.ResourceResponse.ext:type_name -> google.protobuf.Struct
+	105, // 8: fora.v1.ResourceResponse.ext:type_name -> google.protobuf.Struct
 	35,  // 9: fora.v1.OfferGroup.offers:type_name -> fora.v1.Offer
 	0,   // 10: fora.v1.OfferGroup.discovery_method:type_name -> fora.v1.DiscoveryMethod
 	1,   // 11: fora.v1.OfferGroup.absence_reason:type_name -> fora.v1.OfferAbsenceReason
 	3,   // 12: fora.v1.OfferGroup.restriction_filters:type_name -> fora.v1.RestrictionKind
-	103, // 13: fora.v1.RateLimitInfo.reset_at:type_name -> google.protobuf.Timestamp
-	101, // 14: fora.v1.RateLimitInfo.window:type_name -> google.protobuf.Duration
-	103, // 15: fora.v1.SubscriptionQuotaInfo.resets_at:type_name -> google.protobuf.Timestamp
+	106, // 13: fora.v1.RateLimitInfo.reset_at:type_name -> google.protobuf.Timestamp
+	104, // 14: fora.v1.RateLimitInfo.window:type_name -> google.protobuf.Duration
+	106, // 15: fora.v1.SubscriptionQuotaInfo.resets_at:type_name -> google.protobuf.Timestamp
 	44,  // 16: fora.v1.Offer.pricing:type_name -> fora.v1.Pricing
 	9,   // 17: fora.v1.Offer.delivery_method:type_name -> fora.v1.DeliveryMethod
-	64,  // 18: fora.v1.Offer.reporting:type_name -> fora.v1.ReportingObligation
-	103, // 19: fora.v1.Offer.expires_at:type_name -> google.protobuf.Timestamp
+	65,  // 18: fora.v1.Offer.reporting:type_name -> fora.v1.ReportingObligation
+	106, // 19: fora.v1.Offer.expires_at:type_name -> google.protobuf.Timestamp
 	36,  // 20: fora.v1.Offer.identity:type_name -> fora.v1.ResourceIdentity
 	37,  // 21: fora.v1.Offer.attestations:type_name -> fora.v1.ResourceAttestation
-	103, // 22: fora.v1.Offer.data_as_of:type_name -> google.protobuf.Timestamp
+	106, // 22: fora.v1.Offer.data_as_of:type_name -> google.protobuf.Timestamp
 	34,  // 23: fora.v1.Offer.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
 	43,  // 24: fora.v1.Offer.previews:type_name -> fora.v1.Preview
 	42,  // 25: fora.v1.Offer.terms:type_name -> fora.v1.LicenseTerm
-	102, // 26: fora.v1.Offer.ext:type_name -> google.protobuf.Struct
+	105, // 26: fora.v1.Offer.ext:type_name -> google.protobuf.Struct
 	12,  // 27: fora.v1.ResourceIdentity.resource_mutability:type_name -> fora.v1.ResourceMutability
 	11,  // 28: fora.v1.ResourceIdentity.c2pa_status:type_name -> fora.v1.C2PAStatus
-	102, // 29: fora.v1.ResourceIdentity.ext:type_name -> google.protobuf.Struct
-	103, // 30: fora.v1.ResourceAttestation.attested_at:type_name -> google.protobuf.Timestamp
-	102, // 31: fora.v1.ResourceAttestation.claims:type_name -> google.protobuf.Struct
+	105, // 29: fora.v1.ResourceIdentity.ext:type_name -> google.protobuf.Struct
+	106, // 30: fora.v1.ResourceAttestation.attested_at:type_name -> google.protobuf.Timestamp
+	105, // 31: fora.v1.ResourceAttestation.claims:type_name -> google.protobuf.Struct
 	3,   // 32: fora.v1.Restriction.kind:type_name -> fora.v1.RestrictionKind
 	4,   // 33: fora.v1.Quota.window:type_name -> fora.v1.QuotaWindow
 	5,   // 34: fora.v1.Obligation.kind:type_name -> fora.v1.ObligationKind
@@ -11240,139 +11579,148 @@ var file_fora_v1_fora_proto_depIdxs = []int32{
 	8,   // 44: fora.v1.Pricing.metering:type_name -> fora.v1.PricingMetering
 	10,  // 45: fora.v1.Requester.type:type_name -> fora.v1.RequesterType
 	46,  // 46: fora.v1.Requester.delegation:type_name -> fora.v1.Delegation
-	102, // 47: fora.v1.Requester.ext:type_name -> google.protobuf.Struct
-	103, // 48: fora.v1.Delegation.expires_at:type_name -> google.protobuf.Timestamp
-	101, // 49: fora.v1.Delegation.quota_period:type_name -> google.protobuf.Duration
-	102, // 50: fora.v1.Delegation.ext:type_name -> google.protobuf.Struct
+	105, // 47: fora.v1.Requester.ext:type_name -> google.protobuf.Struct
+	106, // 48: fora.v1.Delegation.expires_at:type_name -> google.protobuf.Timestamp
+	104, // 49: fora.v1.Delegation.quota_period:type_name -> google.protobuf.Duration
+	105, // 50: fora.v1.Delegation.ext:type_name -> google.protobuf.Struct
 	50,  // 51: fora.v1.AgentRequestAcceptance.payload:type_name -> fora.v1.AgentRequestAcceptancePayload
 	49,  // 52: fora.v1.AgentRequestAcceptancePayload.items:type_name -> fora.v1.AgentRequestAcceptanceItem
 	45,  // 53: fora.v1.TransactionRequest.requester:type_name -> fora.v1.Requester
 	53,  // 54: fora.v1.TransactionRequest.items:type_name -> fora.v1.TransactionItem
 	48,  // 55: fora.v1.TransactionRequest.agent_request_acceptance:type_name -> fora.v1.AgentRequestAcceptance
-	102, // 56: fora.v1.TransactionRequest.ext:type_name -> google.protobuf.Struct
+	105, // 56: fora.v1.TransactionRequest.ext:type_name -> google.protobuf.Struct
 	35,  // 57: fora.v1.TransactionItem.offer:type_name -> fora.v1.Offer
 	47,  // 58: fora.v1.TransactionItem.agent_acceptance:type_name -> fora.v1.AgentAcceptance
 	55,  // 59: fora.v1.TransactionResponse.items:type_name -> fora.v1.TransactionResultItem
-	56,  // 60: fora.v1.TransactionResponse.total_cost:type_name -> fora.v1.Cost
+	57,  // 60: fora.v1.TransactionResponse.total_cost:type_name -> fora.v1.Cost
 	34,  // 61: fora.v1.TransactionResponse.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
-	102, // 62: fora.v1.TransactionResponse.ext:type_name -> google.protobuf.Struct
-	56,  // 63: fora.v1.TransactionResultItem.cost:type_name -> fora.v1.Cost
-	56,  // 64: fora.v1.TransactionResultItem.subscription_unit_value:type_name -> fora.v1.Cost
+	105, // 62: fora.v1.TransactionResponse.ext:type_name -> google.protobuf.Struct
+	57,  // 63: fora.v1.TransactionResultItem.cost:type_name -> fora.v1.Cost
+	57,  // 64: fora.v1.TransactionResultItem.subscription_unit_value:type_name -> fora.v1.Cost
 	13,  // 65: fora.v1.TransactionResultItem.denial_reason:type_name -> fora.v1.DenialReason
 	3,   // 66: fora.v1.TransactionResultItem.restriction_mismatches:type_name -> fora.v1.RestrictionKind
-	103, // 67: fora.v1.TransactionResultItem.expires_at:type_name -> google.protobuf.Timestamp
+	106, // 67: fora.v1.TransactionResultItem.expires_at:type_name -> google.protobuf.Timestamp
 	9,   // 68: fora.v1.TransactionResultItem.delivery_method:type_name -> fora.v1.DeliveryMethod
-	64,  // 69: fora.v1.TransactionResultItem.reporting_obligation:type_name -> fora.v1.ReportingObligation
-	58,  // 70: fora.v1.PushResourcesRequest.entries:type_name -> fora.v1.ResourceEntry
-	102, // 71: fora.v1.PushResourcesRequest.ext:type_name -> google.protobuf.Struct
-	14,  // 72: fora.v1.ResourceEntry.source:type_name -> fora.v1.IngestionSource
-	103, // 73: fora.v1.ResourceEntry.provenance_timestamp:type_name -> google.protobuf.Timestamp
-	37,  // 74: fora.v1.ResourceEntry.attestations:type_name -> fora.v1.ResourceAttestation
-	42,  // 75: fora.v1.ResourceEntry.terms:type_name -> fora.v1.LicenseTerm
-	12,  // 76: fora.v1.ResourceEntry.resource_mutability:type_name -> fora.v1.ResourceMutability
-	102, // 77: fora.v1.ResourceEntry.ext:type_name -> google.protobuf.Struct
-	102, // 78: fora.v1.PushResourcesResponse.ext:type_name -> google.protobuf.Struct
-	101, // 79: fora.v1.ReportingObligation.window:type_name -> google.protobuf.Duration
-	102, // 80: fora.v1.ReportingObligation.ext:type_name -> google.protobuf.Struct
-	67,  // 81: fora.v1.UsageReport.usage:type_name -> fora.v1.Usage
-	103, // 82: fora.v1.UsageReport.timestamp:type_name -> google.protobuf.Timestamp
-	68,  // 83: fora.v1.UsageReport.assets:type_name -> fora.v1.UsageAsset
-	102, // 84: fora.v1.UsageReport.ext:type_name -> google.protobuf.Struct
-	15,  // 85: fora.v1.AttributionDetail.format:type_name -> fora.v1.CitationFormat
-	66,  // 86: fora.v1.Usage.attribution:type_name -> fora.v1.AttributionDetail
-	102, // 87: fora.v1.UsageReportResponse.ext:type_name -> google.protobuf.Struct
-	45,  // 88: fora.v1.DiscoveryRequest.requester:type_name -> fora.v1.Requester
-	29,  // 89: fora.v1.DiscoveryRequest.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
-	71,  // 90: fora.v1.DiscoveryRequest.constraints:type_name -> fora.v1.RequestConstraints
-	102, // 91: fora.v1.DiscoveryRequest.search_filters:type_name -> google.protobuf.Struct
-	102, // 92: fora.v1.DiscoveryRequest.ext:type_name -> google.protobuf.Struct
-	56,  // 93: fora.v1.RequestConstraints.max_price:type_name -> fora.v1.Cost
-	9,   // 94: fora.v1.RequestConstraints.delivery_preference:type_name -> fora.v1.DeliveryMethod
-	56,  // 95: fora.v1.RequestConstraints.period_budget:type_name -> fora.v1.Cost
-	101, // 96: fora.v1.RequestConstraints.budget_period:type_name -> google.protobuf.Duration
-	101, // 97: fora.v1.RequestConstraints.max_data_age:type_name -> google.protobuf.Duration
-	102, // 98: fora.v1.AccountRegistration.data_schema:type_name -> google.protobuf.Struct
-	16,  // 99: fora.v1.WellKnownManifest.role:type_name -> fora.v1.Role
-	78,  // 100: fora.v1.WellKnownManifest.exchanges:type_name -> fora.v1.AuthorizedExchange
-	77,  // 101: fora.v1.WellKnownManifest.catalog_contributors:type_name -> fora.v1.CatalogContributor
-	7,   // 102: fora.v1.WellKnownManifest.pricing_models_supported:type_name -> fora.v1.PricingModel
-	9,   // 103: fora.v1.WellKnownManifest.delivery_methods_supported:type_name -> fora.v1.DeliveryMethod
-	18,  // 104: fora.v1.WellKnownManifest.supported_auth_methods:type_name -> fora.v1.AuthMethod
-	73,  // 105: fora.v1.WellKnownManifest.account_registration:type_name -> fora.v1.AccountRegistration
-	102, // 106: fora.v1.WellKnownManifest.ext:type_name -> google.protobuf.Struct
-	72,  // 107: fora.v1.WBAFile.keys:type_name -> fora.v1.JsonWebKey
-	103, // 108: fora.v1.KeyRevocationList.as_of:type_name -> google.protobuf.Timestamp
-	17,  // 109: fora.v1.AuthorizedExchange.relationship:type_name -> fora.v1.ProviderRelationship
-	102, // 110: fora.v1.AuthorizedExchange.ext:type_name -> google.protobuf.Struct
-	32,  // 111: fora.v1.DiscoveryResponse.offer_groups:type_name -> fora.v1.OfferGroup
-	1,   // 112: fora.v1.DiscoveryResponse.absence_reason:type_name -> fora.v1.OfferAbsenceReason
-	102, // 113: fora.v1.DiscoveryResponse.ext:type_name -> google.protobuf.Struct
-	19,  // 114: fora.v1.DisputeRequest.reason:type_name -> fora.v1.DisputeReason
-	102, // 115: fora.v1.DisputeRequest.ext:type_name -> google.protobuf.Struct
-	101, // 116: fora.v1.DisputeResponse.estimated_resolution:type_name -> google.protobuf.Duration
-	20,  // 117: fora.v1.DisputeResponse.status:type_name -> fora.v1.DisputeStatus
-	21,  // 118: fora.v1.DisputeResponse.resolution:type_name -> fora.v1.ResolutionType
-	102, // 119: fora.v1.DisputeResponse.ext:type_name -> google.protobuf.Struct
-	102, // 120: fora.v1.DomainVerificationRequest.ext:type_name -> google.protobuf.Struct
-	103, // 121: fora.v1.DomainVerificationChallenge.expires_at:type_name -> google.protobuf.Timestamp
-	102, // 122: fora.v1.DomainVerificationChallenge.ext:type_name -> google.protobuf.Struct
-	102, // 123: fora.v1.DomainVerificationConfirmation.ext:type_name -> google.protobuf.Struct
-	103, // 124: fora.v1.DomainVerificationResult.valid_until:type_name -> google.protobuf.Timestamp
-	102, // 125: fora.v1.DomainVerificationResult.ext:type_name -> google.protobuf.Struct
-	102, // 126: fora.v1.RegisterRequest.registration_data:type_name -> google.protobuf.Struct
-	102, // 127: fora.v1.RegisterRequest.ext:type_name -> google.protobuf.Struct
-	102, // 128: fora.v1.RegisterResponse.ext:type_name -> google.protobuf.Struct
-	102, // 129: fora.v1.GetAccountStatusRequest.ext:type_name -> google.protobuf.Struct
-	56,  // 130: fora.v1.GetAccountStatusResponse.balances:type_name -> fora.v1.Cost
-	102, // 131: fora.v1.GetAccountStatusResponse.ext:type_name -> google.protobuf.Struct
-	100, // 132: fora.v1.ErrorDetail.metadata:type_name -> fora.v1.ErrorDetail.MetadataEntry
-	91,  // 133: fora.v1.ErrorDetail.transaction_denial:type_name -> fora.v1.TransactionDenial
-	92,  // 134: fora.v1.ErrorDetail.catalog_rejection:type_name -> fora.v1.CatalogRejection
-	93,  // 135: fora.v1.ErrorDetail.registration_failure:type_name -> fora.v1.RegistrationFailure
-	95,  // 136: fora.v1.ErrorDetail.dispute_failure:type_name -> fora.v1.DisputeFailure
-	96,  // 137: fora.v1.ErrorDetail.domain_verification_failure:type_name -> fora.v1.DomainVerificationFailure
-	97,  // 138: fora.v1.ErrorDetail.retrieval_auth_failure:type_name -> fora.v1.RetrievalAuthFailure
-	98,  // 139: fora.v1.ErrorDetail.usage_report_rejection:type_name -> fora.v1.UsageReportRejection
-	99,  // 140: fora.v1.ErrorDetail.request_auth_failure:type_name -> fora.v1.RequestAuthFailure
-	13,  // 141: fora.v1.TransactionDenial.reason:type_name -> fora.v1.DenialReason
-	3,   // 142: fora.v1.TransactionDenial.restriction_mismatches:type_name -> fora.v1.RestrictionKind
-	22,  // 143: fora.v1.CatalogRejection.reason:type_name -> fora.v1.CatalogRejectionReason
-	23,  // 144: fora.v1.RegistrationFailure.reason:type_name -> fora.v1.RegistrationFailureReason
-	94,  // 145: fora.v1.RegistrationFailure.field_errors:type_name -> fora.v1.RegistrationFieldError
-	24,  // 146: fora.v1.DisputeFailure.reason:type_name -> fora.v1.DisputeFailureReason
-	25,  // 147: fora.v1.DomainVerificationFailure.reason:type_name -> fora.v1.DomainVerificationFailureReason
-	26,  // 148: fora.v1.RetrievalAuthFailure.reason:type_name -> fora.v1.RetrievalAuthFailureReason
-	27,  // 149: fora.v1.UsageReportRejection.reason:type_name -> fora.v1.UsageReportRejectionReason
-	28,  // 150: fora.v1.RequestAuthFailure.reason:type_name -> fora.v1.RequestAuthFailureReason
-	30,  // 151: fora.v1.ExchangeService.DiscoverResources:input_type -> fora.v1.ResourceQuery
-	52,  // 152: fora.v1.ExchangeService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
-	65,  // 153: fora.v1.ExchangeService.ReportUsage:input_type -> fora.v1.UsageReport
-	80,  // 154: fora.v1.ExchangeService.DisputeTransaction:input_type -> fora.v1.DisputeRequest
-	82,  // 155: fora.v1.ExchangeService.RequestDomainVerification:input_type -> fora.v1.DomainVerificationRequest
-	84,  // 156: fora.v1.ExchangeService.ConfirmDomainVerification:input_type -> fora.v1.DomainVerificationConfirmation
-	86,  // 157: fora.v1.ExchangeService.Register:input_type -> fora.v1.RegisterRequest
-	88,  // 158: fora.v1.ExchangeService.GetAccountStatus:input_type -> fora.v1.GetAccountStatusRequest
-	57,  // 159: fora.v1.CatalogService.PushResources:input_type -> fora.v1.PushResourcesRequest
-	60,  // 160: fora.v1.CatalogService.RemoveResources:input_type -> fora.v1.RemoveResourcesRequest
-	62,  // 161: fora.v1.CatalogService.RefreshCatalog:input_type -> fora.v1.RefreshCatalogRequest
-	70,  // 162: fora.v1.BrokerService.Resolve:input_type -> fora.v1.DiscoveryRequest
-	31,  // 163: fora.v1.ExchangeService.DiscoverResources:output_type -> fora.v1.ResourceResponse
-	54,  // 164: fora.v1.ExchangeService.ExecuteTransaction:output_type -> fora.v1.TransactionResponse
-	69,  // 165: fora.v1.ExchangeService.ReportUsage:output_type -> fora.v1.UsageReportResponse
-	81,  // 166: fora.v1.ExchangeService.DisputeTransaction:output_type -> fora.v1.DisputeResponse
-	83,  // 167: fora.v1.ExchangeService.RequestDomainVerification:output_type -> fora.v1.DomainVerificationChallenge
-	85,  // 168: fora.v1.ExchangeService.ConfirmDomainVerification:output_type -> fora.v1.DomainVerificationResult
-	87,  // 169: fora.v1.ExchangeService.Register:output_type -> fora.v1.RegisterResponse
-	89,  // 170: fora.v1.ExchangeService.GetAccountStatus:output_type -> fora.v1.GetAccountStatusResponse
-	59,  // 171: fora.v1.CatalogService.PushResources:output_type -> fora.v1.PushResourcesResponse
-	61,  // 172: fora.v1.CatalogService.RemoveResources:output_type -> fora.v1.RemoveResourcesResponse
-	63,  // 173: fora.v1.CatalogService.RefreshCatalog:output_type -> fora.v1.RefreshCatalogResponse
-	79,  // 174: fora.v1.BrokerService.Resolve:output_type -> fora.v1.DiscoveryResponse
-	163, // [163:175] is the sub-list for method output_type
-	151, // [151:163] is the sub-list for method input_type
-	151, // [151:151] is the sub-list for extension type_name
-	151, // [151:151] is the sub-list for extension extendee
-	0,   // [0:151] is the sub-list for field type_name
+	65,  // 69: fora.v1.TransactionResultItem.reporting_obligation:type_name -> fora.v1.ReportingObligation
+	56,  // 70: fora.v1.TransactionResultItem.refusal:type_name -> fora.v1.UpstreamRefusal
+	93,  // 71: fora.v1.UpstreamRefusal.detail:type_name -> fora.v1.ErrorDetail
+	59,  // 72: fora.v1.PushResourcesRequest.entries:type_name -> fora.v1.ResourceEntry
+	105, // 73: fora.v1.PushResourcesRequest.ext:type_name -> google.protobuf.Struct
+	14,  // 74: fora.v1.ResourceEntry.source:type_name -> fora.v1.IngestionSource
+	106, // 75: fora.v1.ResourceEntry.provenance_timestamp:type_name -> google.protobuf.Timestamp
+	37,  // 76: fora.v1.ResourceEntry.attestations:type_name -> fora.v1.ResourceAttestation
+	42,  // 77: fora.v1.ResourceEntry.terms:type_name -> fora.v1.LicenseTerm
+	12,  // 78: fora.v1.ResourceEntry.resource_mutability:type_name -> fora.v1.ResourceMutability
+	105, // 79: fora.v1.ResourceEntry.ext:type_name -> google.protobuf.Struct
+	105, // 80: fora.v1.PushResourcesResponse.ext:type_name -> google.protobuf.Struct
+	104, // 81: fora.v1.ReportingObligation.window:type_name -> google.protobuf.Duration
+	105, // 82: fora.v1.ReportingObligation.ext:type_name -> google.protobuf.Struct
+	68,  // 83: fora.v1.UsageReport.usage:type_name -> fora.v1.Usage
+	106, // 84: fora.v1.UsageReport.timestamp:type_name -> google.protobuf.Timestamp
+	69,  // 85: fora.v1.UsageReport.assets:type_name -> fora.v1.UsageAsset
+	105, // 86: fora.v1.UsageReport.ext:type_name -> google.protobuf.Struct
+	15,  // 87: fora.v1.AttributionDetail.format:type_name -> fora.v1.CitationFormat
+	67,  // 88: fora.v1.Usage.attribution:type_name -> fora.v1.AttributionDetail
+	105, // 89: fora.v1.UsageReportResponse.ext:type_name -> google.protobuf.Struct
+	45,  // 90: fora.v1.DiscoveryRequest.requester:type_name -> fora.v1.Requester
+	29,  // 91: fora.v1.DiscoveryRequest.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
+	72,  // 92: fora.v1.DiscoveryRequest.constraints:type_name -> fora.v1.RequestConstraints
+	105, // 93: fora.v1.DiscoveryRequest.search_filters:type_name -> google.protobuf.Struct
+	105, // 94: fora.v1.DiscoveryRequest.ext:type_name -> google.protobuf.Struct
+	57,  // 95: fora.v1.RequestConstraints.max_price:type_name -> fora.v1.Cost
+	9,   // 96: fora.v1.RequestConstraints.delivery_preference:type_name -> fora.v1.DeliveryMethod
+	57,  // 97: fora.v1.RequestConstraints.period_budget:type_name -> fora.v1.Cost
+	104, // 98: fora.v1.RequestConstraints.budget_period:type_name -> google.protobuf.Duration
+	104, // 99: fora.v1.RequestConstraints.max_data_age:type_name -> google.protobuf.Duration
+	105, // 100: fora.v1.AccountRegistration.data_schema:type_name -> google.protobuf.Struct
+	16,  // 101: fora.v1.WellKnownManifest.role:type_name -> fora.v1.Role
+	79,  // 102: fora.v1.WellKnownManifest.exchanges:type_name -> fora.v1.AuthorizedExchange
+	78,  // 103: fora.v1.WellKnownManifest.catalog_contributors:type_name -> fora.v1.CatalogContributor
+	7,   // 104: fora.v1.WellKnownManifest.pricing_models_supported:type_name -> fora.v1.PricingModel
+	9,   // 105: fora.v1.WellKnownManifest.delivery_methods_supported:type_name -> fora.v1.DeliveryMethod
+	18,  // 106: fora.v1.WellKnownManifest.supported_auth_methods:type_name -> fora.v1.AuthMethod
+	74,  // 107: fora.v1.WellKnownManifest.account_registration:type_name -> fora.v1.AccountRegistration
+	105, // 108: fora.v1.WellKnownManifest.ext:type_name -> google.protobuf.Struct
+	73,  // 109: fora.v1.WBAFile.keys:type_name -> fora.v1.JsonWebKey
+	106, // 110: fora.v1.KeyRevocationList.as_of:type_name -> google.protobuf.Timestamp
+	17,  // 111: fora.v1.AuthorizedExchange.relationship:type_name -> fora.v1.ProviderRelationship
+	105, // 112: fora.v1.AuthorizedExchange.ext:type_name -> google.protobuf.Struct
+	32,  // 113: fora.v1.DiscoveryResponse.offer_groups:type_name -> fora.v1.OfferGroup
+	1,   // 114: fora.v1.DiscoveryResponse.absence_reason:type_name -> fora.v1.OfferAbsenceReason
+	105, // 115: fora.v1.DiscoveryResponse.ext:type_name -> google.protobuf.Struct
+	55,  // 116: fora.v1.BrokerTransactionResponse.items:type_name -> fora.v1.TransactionResultItem
+	82,  // 117: fora.v1.BrokerTransactionResponse.exchanges:type_name -> fora.v1.ExchangeOutcome
+	57,  // 118: fora.v1.BrokerTransactionResponse.totals:type_name -> fora.v1.Cost
+	105, // 119: fora.v1.BrokerTransactionResponse.ext:type_name -> google.protobuf.Struct
+	34,  // 120: fora.v1.ExchangeOutcome.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
+	19,  // 121: fora.v1.DisputeRequest.reason:type_name -> fora.v1.DisputeReason
+	105, // 122: fora.v1.DisputeRequest.ext:type_name -> google.protobuf.Struct
+	104, // 123: fora.v1.DisputeResponse.estimated_resolution:type_name -> google.protobuf.Duration
+	20,  // 124: fora.v1.DisputeResponse.status:type_name -> fora.v1.DisputeStatus
+	21,  // 125: fora.v1.DisputeResponse.resolution:type_name -> fora.v1.ResolutionType
+	105, // 126: fora.v1.DisputeResponse.ext:type_name -> google.protobuf.Struct
+	105, // 127: fora.v1.DomainVerificationRequest.ext:type_name -> google.protobuf.Struct
+	106, // 128: fora.v1.DomainVerificationChallenge.expires_at:type_name -> google.protobuf.Timestamp
+	105, // 129: fora.v1.DomainVerificationChallenge.ext:type_name -> google.protobuf.Struct
+	105, // 130: fora.v1.DomainVerificationConfirmation.ext:type_name -> google.protobuf.Struct
+	106, // 131: fora.v1.DomainVerificationResult.valid_until:type_name -> google.protobuf.Timestamp
+	105, // 132: fora.v1.DomainVerificationResult.ext:type_name -> google.protobuf.Struct
+	105, // 133: fora.v1.RegisterRequest.registration_data:type_name -> google.protobuf.Struct
+	105, // 134: fora.v1.RegisterRequest.ext:type_name -> google.protobuf.Struct
+	105, // 135: fora.v1.RegisterResponse.ext:type_name -> google.protobuf.Struct
+	105, // 136: fora.v1.GetAccountStatusRequest.ext:type_name -> google.protobuf.Struct
+	57,  // 137: fora.v1.GetAccountStatusResponse.balances:type_name -> fora.v1.Cost
+	105, // 138: fora.v1.GetAccountStatusResponse.ext:type_name -> google.protobuf.Struct
+	103, // 139: fora.v1.ErrorDetail.metadata:type_name -> fora.v1.ErrorDetail.MetadataEntry
+	94,  // 140: fora.v1.ErrorDetail.transaction_denial:type_name -> fora.v1.TransactionDenial
+	95,  // 141: fora.v1.ErrorDetail.catalog_rejection:type_name -> fora.v1.CatalogRejection
+	96,  // 142: fora.v1.ErrorDetail.registration_failure:type_name -> fora.v1.RegistrationFailure
+	98,  // 143: fora.v1.ErrorDetail.dispute_failure:type_name -> fora.v1.DisputeFailure
+	99,  // 144: fora.v1.ErrorDetail.domain_verification_failure:type_name -> fora.v1.DomainVerificationFailure
+	100, // 145: fora.v1.ErrorDetail.retrieval_auth_failure:type_name -> fora.v1.RetrievalAuthFailure
+	101, // 146: fora.v1.ErrorDetail.usage_report_rejection:type_name -> fora.v1.UsageReportRejection
+	102, // 147: fora.v1.ErrorDetail.request_auth_failure:type_name -> fora.v1.RequestAuthFailure
+	13,  // 148: fora.v1.TransactionDenial.reason:type_name -> fora.v1.DenialReason
+	3,   // 149: fora.v1.TransactionDenial.restriction_mismatches:type_name -> fora.v1.RestrictionKind
+	22,  // 150: fora.v1.CatalogRejection.reason:type_name -> fora.v1.CatalogRejectionReason
+	23,  // 151: fora.v1.RegistrationFailure.reason:type_name -> fora.v1.RegistrationFailureReason
+	97,  // 152: fora.v1.RegistrationFailure.field_errors:type_name -> fora.v1.RegistrationFieldError
+	24,  // 153: fora.v1.DisputeFailure.reason:type_name -> fora.v1.DisputeFailureReason
+	25,  // 154: fora.v1.DomainVerificationFailure.reason:type_name -> fora.v1.DomainVerificationFailureReason
+	26,  // 155: fora.v1.RetrievalAuthFailure.reason:type_name -> fora.v1.RetrievalAuthFailureReason
+	27,  // 156: fora.v1.UsageReportRejection.reason:type_name -> fora.v1.UsageReportRejectionReason
+	28,  // 157: fora.v1.RequestAuthFailure.reason:type_name -> fora.v1.RequestAuthFailureReason
+	30,  // 158: fora.v1.ExchangeService.DiscoverResources:input_type -> fora.v1.ResourceQuery
+	52,  // 159: fora.v1.ExchangeService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
+	66,  // 160: fora.v1.ExchangeService.ReportUsage:input_type -> fora.v1.UsageReport
+	83,  // 161: fora.v1.ExchangeService.DisputeTransaction:input_type -> fora.v1.DisputeRequest
+	85,  // 162: fora.v1.ExchangeService.RequestDomainVerification:input_type -> fora.v1.DomainVerificationRequest
+	87,  // 163: fora.v1.ExchangeService.ConfirmDomainVerification:input_type -> fora.v1.DomainVerificationConfirmation
+	89,  // 164: fora.v1.ExchangeService.Register:input_type -> fora.v1.RegisterRequest
+	91,  // 165: fora.v1.ExchangeService.GetAccountStatus:input_type -> fora.v1.GetAccountStatusRequest
+	58,  // 166: fora.v1.CatalogService.PushResources:input_type -> fora.v1.PushResourcesRequest
+	61,  // 167: fora.v1.CatalogService.RemoveResources:input_type -> fora.v1.RemoveResourcesRequest
+	63,  // 168: fora.v1.CatalogService.RefreshCatalog:input_type -> fora.v1.RefreshCatalogRequest
+	71,  // 169: fora.v1.BrokerService.Resolve:input_type -> fora.v1.DiscoveryRequest
+	52,  // 170: fora.v1.BrokerService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
+	31,  // 171: fora.v1.ExchangeService.DiscoverResources:output_type -> fora.v1.ResourceResponse
+	54,  // 172: fora.v1.ExchangeService.ExecuteTransaction:output_type -> fora.v1.TransactionResponse
+	70,  // 173: fora.v1.ExchangeService.ReportUsage:output_type -> fora.v1.UsageReportResponse
+	84,  // 174: fora.v1.ExchangeService.DisputeTransaction:output_type -> fora.v1.DisputeResponse
+	86,  // 175: fora.v1.ExchangeService.RequestDomainVerification:output_type -> fora.v1.DomainVerificationChallenge
+	88,  // 176: fora.v1.ExchangeService.ConfirmDomainVerification:output_type -> fora.v1.DomainVerificationResult
+	90,  // 177: fora.v1.ExchangeService.Register:output_type -> fora.v1.RegisterResponse
+	92,  // 178: fora.v1.ExchangeService.GetAccountStatus:output_type -> fora.v1.GetAccountStatusResponse
+	60,  // 179: fora.v1.CatalogService.PushResources:output_type -> fora.v1.PushResourcesResponse
+	62,  // 180: fora.v1.CatalogService.RemoveResources:output_type -> fora.v1.RemoveResourcesResponse
+	64,  // 181: fora.v1.CatalogService.RefreshCatalog:output_type -> fora.v1.RefreshCatalogResponse
+	80,  // 182: fora.v1.BrokerService.Resolve:output_type -> fora.v1.DiscoveryResponse
+	81,  // 183: fora.v1.BrokerService.ExecuteTransaction:output_type -> fora.v1.BrokerTransactionResponse
+	171, // [171:184] is the sub-list for method output_type
+	158, // [158:171] is the sub-list for method input_type
+	158, // [158:158] is the sub-list for extension type_name
+	158, // [158:158] is the sub-list for extension extendee
+	0,   // [0:158] is the sub-list for field type_name
 }
 
 func init() { file_fora_v1_fora_proto_init() }
@@ -11400,24 +11748,25 @@ func file_fora_v1_fora_proto_init() {
 	file_fora_v1_fora_proto_msgTypes[25].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[26].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[27].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[29].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[35].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[37].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[28].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[30].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[36].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[38].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[39].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[41].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[40].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[42].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[45].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[43].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[46].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[50].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[47].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[51].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[52].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[53].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[54].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[55].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[56].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[57].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[58].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[59].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[60].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[61].OneofWrappers = []any{
+	file_fora_v1_fora_proto_msgTypes[63].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[64].OneofWrappers = []any{
 		(*ErrorDetail_TransactionDenial)(nil),
 		(*ErrorDetail_CatalogRejection)(nil),
 		(*ErrorDetail_RegistrationFailure)(nil),
@@ -11427,14 +11776,14 @@ func file_fora_v1_fora_proto_init() {
 		(*ErrorDetail_UsageReportRejection)(nil),
 		(*ErrorDetail_RequestAuthFailure)(nil),
 	}
-	file_fora_v1_fora_proto_msgTypes[62].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[65].OneofWrappers = []any{}
 	type x struct{}
 	out := protoimpl.TypeBuilder{
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_fora_v1_fora_proto_rawDesc), len(file_fora_v1_fora_proto_rawDesc)),
 			NumEnums:      29,
-			NumMessages:   72,
+			NumMessages:   75,
 			NumExtensions: 0,
 			NumServices:   3,
 		},
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 37f571d9..b087021e 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -97,6 +97,9 @@ const (
 	CatalogServiceRefreshCatalogProcedure = "/fora.v1.CatalogService/RefreshCatalog"
 	// BrokerServiceResolveProcedure is the fully-qualified name of the BrokerService's Resolve RPC.
 	BrokerServiceResolveProcedure = "/fora.v1.BrokerService/Resolve"
+	// BrokerServiceExecuteTransactionProcedure is the fully-qualified name of the BrokerService's
+	// ExecuteTransaction RPC.
+	BrokerServiceExecuteTransactionProcedure = "/fora.v1.BrokerService/ExecuteTransaction"
 )
 
 // ExchangeServiceClient is a client for the fora.v1.ExchangeService service.
@@ -543,8 +546,10 @@ type BrokerServiceClient interface {
 	// fans out to one or more Exchanges and returns the merged offers. It is pure
 	// discovery — it selects and returns offers, never executes a transaction, so
 	// it neither charges nor produces transaction denials. A denial is raised only
-	// when the agent later calls ExchangeService.ExecuteTransaction on a selected
-	// offer, and rides there on TransactionResponse.DenialReason.
+	// when the agent later buys a selected offer — either directly, calling
+	// ExchangeService.ExecuteTransaction at the offer's Exchange, or through
+	// BrokerService.ExecuteTransaction — and rides there on the result item's
+	// denial_reason.
 	//
 	// A result returns OK with offers populated on DiscoveryResponse.offer_groups
 	// (one OfferGroup per requested URI). A request that ran but yielded nothing
@@ -556,6 +561,82 @@ type BrokerServiceClient interface {
 	// like malformed requests and internal faults, are non-OK transport errors
 	// carrying an ErrorDetail.
 	Resolve(context.Context, *connect.Request[v1.DiscoveryRequest]) (*connect.Response[v1.DiscoveryResponse], error)
+	// ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
+	// in one call. The request is the TransactionRequest an agent would send an
+	// Exchange, with every item's AgentAcceptance and the AgentRequestAcceptance
+	// over all items, signed (RFC 9421) by the agent for the Broker's URL. The
+	// request terminates at the Broker; it is not forwarded.
+	//
+	// The Broker RE-PACKAGES the purchase. It verifies the agent's request, groups
+	// the items by each signed offer's `exchange`, and sends one
+	// ExchangeService.ExecuteTransaction per Exchange. Each sub-request is a new
+	// request the Broker authors and signs with ITS OWN key; it carries that
+	// Exchange's items in request order, each with its reflected Offer and the
+	// agent's AgentAcceptance, plus the agent's AgentRequestAcceptance unchanged,
+	// the agent's `requester` and the agent's `idempotency_key` unchanged. So each
+	// Exchange still verifies the agent's consent: the acceptances are detached
+	// signatures over the body, and they do not depend on who signed the request.
+	// The Broker then combines the answers into one BrokerTransactionResponse.
+	//
+	// Why re-packaging and combining are safe: each item is atomic, and its
+	// integrity is per resource. Each offer carries the signature of the Exchange
+	// that issued it, covering price, terms, expiry and `exchange`; each item
+	// carries the agent's acceptance of that one offer, bound to the requester
+	// and the idempotency key; and each item's result comes from the Exchange that
+	// owns that resource. The Broker therefore assembles independent per-resource
+	// purchases. It cannot change what an item buys, from which Exchange, at what
+	// price or on what terms, or for whom, without breaking that offer's Exchange
+	// signature or the agent's acceptance; it cannot add an item the agent did not
+	// accept; and it cannot drop, add or reorder items within one Exchange's
+	// sub-request without that Exchange seeing it, because the
+	// AgentRequestAcceptance fixes the complete ordered set. No cross-item
+	// integrity is needed, and none is provided. On the response side, the one
+	// signed value in a result item is retrieval_endpoint, a URL the issuing
+	// Exchange signed, so the Broker cannot forge or alter one. Every other field
+	// of a result item, and every field of the combined response, is unsigned:
+	// it is the Broker's report of what each Exchange answered, and the charge
+	// itself is still bounded by the signed offer the Exchange verified.
+	//
+	// The Broker's own refusals are non-OK Connect errors carrying an
+	// ErrorDetail, and when the Broker refuses, it has sent no sub-request, so
+	// nothing was bought:
+	//   - The agent's request signature does not verify: UNAUTHENTICATED with
+	//     `request_auth_failure`, exactly as at an Exchange.
+	//   - `requester.domain` is not the agent's verified signing directory — the
+	//     host of the WBA directory the covered `Signature-Agent` header names,
+	//     the directory the request-signing key resolved from: UNAUTHENTICATED
+	//     with `request_auth_failure` SIGNATURE_INVALID. The signature verifies,
+	//     but not as the requester the body claims, which is a signature that
+	//     does not verify for that requester. The Broker refuses it because every
+	//     Exchange would: they resolve the acceptance keys from requester.domain.
+	//   - A malformed request — no items, an item with no offer or no
+	//     AgentAcceptance, no AgentRequestAcceptance, or an AgentRequestAcceptance
+	//     whose payload does not list the request's items in order (each
+	//     offer.signature and offer.exchange) or names another requester or
+	//     idempotency key: INVALID_ARGUMENT.
+	//   - An item whose offer.exchange the Broker cannot route to, or does not
+	//     approve for purchases: a non-OK error (FAILED_PRECONDITION), with
+	//     ErrorDetail.metadata["exchange"] naming that host. The Broker checks
+	//     every item before it sends anything, so one unroutable Exchange
+	//     refuses the whole call rather than buying the rest.
+	//
+	// Upstream answers are ALWAYS IN THE BODY. Once the Broker has sent its
+	// sub-requests the call returns OK. An Exchange's refusal of its whole
+	// sub-request — a non-OK answer, or no answer at all — is never turned into
+	// an error of the Broker's own: it rides on each affected item as
+	// TransactionResultItem.refusal, and the other Exchanges' results come back
+	// unchanged. An Exchange's per-item denial is that Exchange's result item,
+	// unchanged. DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
+	// upstream failures; the Broker never stamps it, or any denial_reason, onto
+	// an item an Exchange did not deny. If an Exchange answers OK without exactly
+	// one result item per item sent, the Broker cannot attribute the answer, and
+	// reports every item of that sub-request with a refusal whose code is
+	// "internal" and no detail.
+	//
+	// A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
+	// so each Exchange answers a repeated sub-request from its stored result (see
+	// TransactionRequest.idempotency_key).
+	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
 // NewBrokerServiceClient constructs a client for the fora.v1.BrokerService service. By default, it
@@ -575,12 +656,19 @@ func NewBrokerServiceClient(httpClient connect.HTTPClient, baseURL string, opts
 			connect.WithSchema(brokerServiceMethods.ByName("Resolve")),
 			connect.WithClientOptions(opts...),
 		),
+		executeTransaction: connect.NewClient[v1.TransactionRequest, v1.BrokerTransactionResponse](
+			httpClient,
+			baseURL+BrokerServiceExecuteTransactionProcedure,
+			connect.WithSchema(brokerServiceMethods.ByName("ExecuteTransaction")),
+			connect.WithClientOptions(opts...),
+		),
 	}
 }
 
 // brokerServiceClient implements BrokerServiceClient.
 type brokerServiceClient struct {
-	resolve *connect.Client[v1.DiscoveryRequest, v1.DiscoveryResponse]
+	resolve            *connect.Client[v1.DiscoveryRequest, v1.DiscoveryResponse]
+	executeTransaction *connect.Client[v1.TransactionRequest, v1.BrokerTransactionResponse]
 }
 
 // Resolve calls fora.v1.BrokerService.Resolve.
@@ -588,14 +676,21 @@ func (c *brokerServiceClient) Resolve(ctx context.Context, req *connect.Request[
 	return c.resolve.CallUnary(ctx, req)
 }
 
+// ExecuteTransaction calls fora.v1.BrokerService.ExecuteTransaction.
+func (c *brokerServiceClient) ExecuteTransaction(ctx context.Context, req *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error) {
+	return c.executeTransaction.CallUnary(ctx, req)
+}
+
 // BrokerServiceHandler is an implementation of the fora.v1.BrokerService service.
 type BrokerServiceHandler interface {
 	// Resolve runs the broker discovery flow for the requested URIs/query: it
 	// fans out to one or more Exchanges and returns the merged offers. It is pure
 	// discovery — it selects and returns offers, never executes a transaction, so
 	// it neither charges nor produces transaction denials. A denial is raised only
-	// when the agent later calls ExchangeService.ExecuteTransaction on a selected
-	// offer, and rides there on TransactionResponse.DenialReason.
+	// when the agent later buys a selected offer — either directly, calling
+	// ExchangeService.ExecuteTransaction at the offer's Exchange, or through
+	// BrokerService.ExecuteTransaction — and rides there on the result item's
+	// denial_reason.
 	//
 	// A result returns OK with offers populated on DiscoveryResponse.offer_groups
 	// (one OfferGroup per requested URI). A request that ran but yielded nothing
@@ -607,6 +702,82 @@ type BrokerServiceHandler interface {
 	// like malformed requests and internal faults, are non-OK transport errors
 	// carrying an ErrorDetail.
 	Resolve(context.Context, *connect.Request[v1.DiscoveryRequest]) (*connect.Response[v1.DiscoveryResponse], error)
+	// ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
+	// in one call. The request is the TransactionRequest an agent would send an
+	// Exchange, with every item's AgentAcceptance and the AgentRequestAcceptance
+	// over all items, signed (RFC 9421) by the agent for the Broker's URL. The
+	// request terminates at the Broker; it is not forwarded.
+	//
+	// The Broker RE-PACKAGES the purchase. It verifies the agent's request, groups
+	// the items by each signed offer's `exchange`, and sends one
+	// ExchangeService.ExecuteTransaction per Exchange. Each sub-request is a new
+	// request the Broker authors and signs with ITS OWN key; it carries that
+	// Exchange's items in request order, each with its reflected Offer and the
+	// agent's AgentAcceptance, plus the agent's AgentRequestAcceptance unchanged,
+	// the agent's `requester` and the agent's `idempotency_key` unchanged. So each
+	// Exchange still verifies the agent's consent: the acceptances are detached
+	// signatures over the body, and they do not depend on who signed the request.
+	// The Broker then combines the answers into one BrokerTransactionResponse.
+	//
+	// Why re-packaging and combining are safe: each item is atomic, and its
+	// integrity is per resource. Each offer carries the signature of the Exchange
+	// that issued it, covering price, terms, expiry and `exchange`; each item
+	// carries the agent's acceptance of that one offer, bound to the requester
+	// and the idempotency key; and each item's result comes from the Exchange that
+	// owns that resource. The Broker therefore assembles independent per-resource
+	// purchases. It cannot change what an item buys, from which Exchange, at what
+	// price or on what terms, or for whom, without breaking that offer's Exchange
+	// signature or the agent's acceptance; it cannot add an item the agent did not
+	// accept; and it cannot drop, add or reorder items within one Exchange's
+	// sub-request without that Exchange seeing it, because the
+	// AgentRequestAcceptance fixes the complete ordered set. No cross-item
+	// integrity is needed, and none is provided. On the response side, the one
+	// signed value in a result item is retrieval_endpoint, a URL the issuing
+	// Exchange signed, so the Broker cannot forge or alter one. Every other field
+	// of a result item, and every field of the combined response, is unsigned:
+	// it is the Broker's report of what each Exchange answered, and the charge
+	// itself is still bounded by the signed offer the Exchange verified.
+	//
+	// The Broker's own refusals are non-OK Connect errors carrying an
+	// ErrorDetail, and when the Broker refuses, it has sent no sub-request, so
+	// nothing was bought:
+	//   - The agent's request signature does not verify: UNAUTHENTICATED with
+	//     `request_auth_failure`, exactly as at an Exchange.
+	//   - `requester.domain` is not the agent's verified signing directory — the
+	//     host of the WBA directory the covered `Signature-Agent` header names,
+	//     the directory the request-signing key resolved from: UNAUTHENTICATED
+	//     with `request_auth_failure` SIGNATURE_INVALID. The signature verifies,
+	//     but not as the requester the body claims, which is a signature that
+	//     does not verify for that requester. The Broker refuses it because every
+	//     Exchange would: they resolve the acceptance keys from requester.domain.
+	//   - A malformed request — no items, an item with no offer or no
+	//     AgentAcceptance, no AgentRequestAcceptance, or an AgentRequestAcceptance
+	//     whose payload does not list the request's items in order (each
+	//     offer.signature and offer.exchange) or names another requester or
+	//     idempotency key: INVALID_ARGUMENT.
+	//   - An item whose offer.exchange the Broker cannot route to, or does not
+	//     approve for purchases: a non-OK error (FAILED_PRECONDITION), with
+	//     ErrorDetail.metadata["exchange"] naming that host. The Broker checks
+	//     every item before it sends anything, so one unroutable Exchange
+	//     refuses the whole call rather than buying the rest.
+	//
+	// Upstream answers are ALWAYS IN THE BODY. Once the Broker has sent its
+	// sub-requests the call returns OK. An Exchange's refusal of its whole
+	// sub-request — a non-OK answer, or no answer at all — is never turned into
+	// an error of the Broker's own: it rides on each affected item as
+	// TransactionResultItem.refusal, and the other Exchanges' results come back
+	// unchanged. An Exchange's per-item denial is that Exchange's result item,
+	// unchanged. DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
+	// upstream failures; the Broker never stamps it, or any denial_reason, onto
+	// an item an Exchange did not deny. If an Exchange answers OK without exactly
+	// one result item per item sent, the Broker cannot attribute the answer, and
+	// reports every item of that sub-request with a refusal whose code is
+	// "internal" and no detail.
+	//
+	// A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
+	// so each Exchange answers a repeated sub-request from its stored result (see
+	// TransactionRequest.idempotency_key).
+	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
 // NewBrokerServiceHandler builds an HTTP handler from the service implementation. It returns the
@@ -622,10 +793,18 @@ func NewBrokerServiceHandler(svc BrokerServiceHandler, opts ...connect.HandlerOp
 		connect.WithSchema(brokerServiceMethods.ByName("Resolve")),
 		connect.WithHandlerOptions(opts...),
 	)
+	brokerServiceExecuteTransactionHandler := connect.NewUnaryHandler(
+		BrokerServiceExecuteTransactionProcedure,
+		svc.ExecuteTransaction,
+		connect.WithSchema(brokerServiceMethods.ByName("ExecuteTransaction")),
+		connect.WithHandlerOptions(opts...),
+	)
 	return "/fora.v1.BrokerService/", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		switch r.URL.Path {
 		case BrokerServiceResolveProcedure:
 			brokerServiceResolveHandler.ServeHTTP(w, r)
+		case BrokerServiceExecuteTransactionProcedure:
+			brokerServiceExecuteTransactionHandler.ServeHTTP(w, r)
 		default:
 			http.NotFound(w, r)
 		}
@@ -638,3 +817,7 @@ type UnimplementedBrokerServiceHandler struct{}
 func (UnimplementedBrokerServiceHandler) Resolve(context.Context, *connect.Request[v1.DiscoveryRequest]) (*connect.Response[v1.DiscoveryResponse], error) {
 	return nil, connect.NewError(connect.CodeUnimplemented, errors.New("fora.v1.BrokerService.Resolve is not implemented"))
 }
+
+func (UnimplementedBrokerServiceHandler) ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error) {
+	return nil, connect.NewError(connect.CodeUnimplemented, errors.New("fora.v1.BrokerService.ExecuteTransaction is not implemented"))
+}
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 67177249..20c4e976 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -205,6 +205,7 @@ class DenialReason(Enum):
     DENIAL_REASON_SUBSCRIPTION_LAPSED = 'DENIAL_REASON_SUBSCRIPTION_LAPSED'
     DENIAL_REASON_ENTITLEMENT_NOT_GRANTED = 'DENIAL_REASON_ENTITLEMENT_NOT_GRANTED'
     DENIAL_REASON_ACCOUNT_NOT_REGISTERED = 'DENIAL_REASON_ACCOUNT_NOT_REGISTERED'
+    DENIAL_REASON_RELAY_NOT_ACCEPTED = 'DENIAL_REASON_RELAY_NOT_ACCEPTED'
 
 
 class DiscoveryMethod(Enum):
@@ -1080,7 +1081,7 @@ class TransactionDenial(WireModel):
         | None
     ) = Field(
         None,
-        description='Bare host of the Exchange that PRODUCED this denial, in the form "Request\n recipient" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named. Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator\'s business data and a signed acceptance of that\n Exchange\'s terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.',
+        description='Bare host of the Exchange that PRODUCED this denial, in the form "Request\n recipient" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator\'s business data and a signed acceptance of that\n Exchange\'s terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.',
     )
     offer_id: str | None = Field(
         None, description='Batch mode: the offer this denial pertains to.'
@@ -1094,51 +1095,6 @@ class TransactionDenial(WireModel):
     )
 
 
-class TransactionResultItem(WireModel):
-    billing_id: str | None = Field(
-        '',
-        description="Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
-    )
-    cost: Cost | None = Field(None, description='Cost for this item.')
-    delivery_method: (
-        constr(pattern=r'^DELIVERY_METHOD_UNSPECIFIED$')
-        | DeliveryMethod
-        | conint(ge=-2147483648, le=2147483647)
-        | None
-    ) = Field(0, description='How resource is delivered for this item.')
-    denial_reason: DenialReason | None = Field(
-        None, description='Set if this specific item was denied (others may succeed).'
-    )
-    expires_at: AwareDatetime | None = Field(
-        None, description='When retrieval_endpoint expires.'
-    )
-    offer_id: str | None = Field('', description='The offer_id this result is for.')
-    reporting_obligation: ReportingObligation | None = Field(
-        None, description='Reporting requirements for this item.'
-    )
-    resource_title: str | None = Field(
-        None, description='Resource title echoed from the Offer.'
-    )
-    restriction_mismatches: list[RestrictionKind] | None = Field(
-        None,
-        description='When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.',
-    )
-    retrieval_endpoint: str | None = Field(
-        None,
-        description="Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items); expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
-    )
-    subscription_id: str | None = Field(
-        None, description='If under subscription, no per-request charge.'
-    )
-    subscription_unit_value: Cost | None = Field(
-        None,
-        description='Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount="0" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).',
-    )
-    transaction_id: str | None = Field(
-        '', description='Exchange-assigned transaction identifier.'
-    )
-
-
 class UsageAsset(WireModel):
     package_id: str | None = Field(None, description='Package identifier')
     title: str | None = Field(None, description='Asset title')
@@ -1303,6 +1259,29 @@ class DomainVerificationFailure(WireModel):
     )
 
 
+class ExchangeOutcome(WireModel):
+    agent_identity_hash: str | None = Field(
+        '',
+        description="That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.",
+    )
+    exchange: constr(
+        pattern=r'^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$',
+        max_length=260,
+    ) = Field(
+        ...,
+        description='Bare host of the Exchange, in the form "Request recipient" defines in the\n file header: the offer.exchange its items share.',
+    )
+    offer_ids: list[str] | None = Field(
+        None,
+        description='The offer_id of every item sent to this Exchange, in request order.',
+        max_length=256,
+    )
+    subscription_quota: list[SubscriptionQuotaInfo] | None = Field(
+        None,
+        description="That Exchange's TransactionResponse.subscription_quota, unchanged.",
+    )
+
+
 class Obligation(WireModel):
     detail: str | None = Field(
         None,
@@ -1558,33 +1537,6 @@ class SetTenantFeeRateResponse(WireModel):
     )
 
 
-class TransactionResponse(WireModel):
-    agent_identity_hash: str | None = Field(
-        '',
-        description='Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent\'s Ed25519 request-signing key (see "Retrieval-URL\n identity binding" above). Shared across the request; set once.',
-    )
-    ext: dict[str, Any] | None = Field(None, description='Extension point')
-    ext_critical: list[str] | None = Field(
-        None,
-        description='Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.',
-    )
-    items: list[TransactionResultItem] | None = Field(
-        None,
-        description='Per-offer results (one entry per committed item, in original order).',
-    )
-    subscription_quota: list[SubscriptionQuotaInfo] | None = Field(
-        None,
-        description='Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling ("1 access left").\n Multiple entries for multi-dimensional quotas.',
-    )
-    total_cost: Cost | None = Field(
-        None, description='Aggregate cost across all items.'
-    )
-    ver: str | None = Field(
-        '',
-        description='FORA protocol version — "1.0". Stamped by the sender from a single\n constant; advisory on receive. See "Protocol version" in the file header.',
-    )
-
-
 class Usage(WireModel):
     attribution: list[AttributionDetail] | None = Field(
         None, description='Structured attribution details for each citation provided.'
@@ -2107,7 +2059,7 @@ class TransactionRequest(WireModel):
     )
     idempotency_key: constr(min_length=1, max_length=255) = Field(
         ...,
-        description="Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+        description="Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide.",
     )
     items: list[TransactionItem] | None = Field(
         None,
@@ -2123,6 +2075,24 @@ class TransactionRequest(WireModel):
     )
 
 
+class UpstreamRefusal(WireModel):
+    code: constr(min_length=1, max_length=64) = Field(
+        ...,
+        description='The Connect code the Exchange answered with, in its wire form, e.g.\n "permission_denied" or "unauthenticated". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker\'s call\n failed with ("unavailable", "deadline_exceeded"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent\'s request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.',
+    )
+    detail: ErrorDetail | None = Field(
+        None,
+        description="The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.",
+    )
+    exchange: constr(
+        pattern=r'^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$',
+        max_length=260,
+    ) = Field(
+        ...,
+        description='Bare host of the Exchange that refused, in the form "Request recipient"\n defines in the file header. Equal to the refused items\' signed\n offer.exchange, which is the value a caller acts on.',
+    )
+
+
 class DiscoveryResponse(WireModel):
     absence_reason: OfferAbsenceReason | None = Field(
         None,
@@ -2171,3 +2141,103 @@ class PushResourcesRequest(WireModel):
         '',
         description='FORA protocol version — "1.0". Stamped by the sender from a single\n constant; advisory on receive. See "Protocol version" in the file header.',
     )
+
+
+class TransactionResultItem(WireModel):
+    billing_id: str | None = Field(
+        '',
+        description="Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
+    )
+    cost: Cost | None = Field(None, description='Cost for this item.')
+    delivery_method: (
+        constr(pattern=r'^DELIVERY_METHOD_UNSPECIFIED$')
+        | DeliveryMethod
+        | conint(ge=-2147483648, le=2147483647)
+        | None
+    ) = Field(0, description='How resource is delivered for this item.')
+    denial_reason: DenialReason | None = Field(
+        None, description='Set if this specific item was denied (others may succeed).'
+    )
+    expires_at: AwareDatetime | None = Field(
+        None, description='When retrieval_endpoint expires.'
+    )
+    offer_id: str | None = Field('', description='The offer_id this result is for.')
+    refusal: UpstreamRefusal | None = Field(
+        None,
+        description="Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.",
+    )
+    reporting_obligation: ReportingObligation | None = Field(
+        None, description='Reporting requirements for this item.'
+    )
+    resource_title: str | None = Field(
+        None, description='Resource title echoed from the Offer.'
+    )
+    restriction_mismatches: list[RestrictionKind] | None = Field(
+        None,
+        description='When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.',
+    )
+    retrieval_endpoint: str | None = Field(
+        None,
+        description="Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
+    )
+    subscription_id: str | None = Field(
+        None, description='If under subscription, no per-request charge.'
+    )
+    subscription_unit_value: Cost | None = Field(
+        None,
+        description='Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount="0" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).',
+    )
+    transaction_id: str | None = Field(
+        '', description='Exchange-assigned transaction identifier.'
+    )
+
+
+class BrokerTransactionResponse(WireModel):
+    exchanges: list[ExchangeOutcome] | None = Field(
+        None,
+        description='One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.',
+    )
+    ext: dict[str, Any] | None = Field(None, description='Extension point')
+    ext_critical: list[str] | None = Field(
+        None,
+        description='Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.',
+    )
+    items: list[TransactionResultItem] | None = Field(
+        None,
+        description="One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.",
+    )
+    totals: list[Cost] | None = Field(
+        None,
+        description='Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.',
+    )
+    ver: str | None = Field(
+        '',
+        description='FORA protocol version — "1.0". Stamped by the sender from a single\n constant; advisory on receive. See "Protocol version" in the file header.',
+    )
+
+
+class TransactionResponse(WireModel):
+    agent_identity_hash: str | None = Field(
+        '',
+        description='Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent\'s Ed25519 request-signing key (see "Retrieval-URL\n identity binding" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.',
+    )
+    ext: dict[str, Any] | None = Field(None, description='Extension point')
+    ext_critical: list[str] | None = Field(
+        None,
+        description='Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.',
+    )
+    items: list[TransactionResultItem] | None = Field(
+        None,
+        description='Per-offer results (one entry per committed item, in original order).',
+    )
+    subscription_quota: list[SubscriptionQuotaInfo] | None = Field(
+        None,
+        description='Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling ("1 access left").\n Multiple entries for multi-dimensional quotas.',
+    )
+    total_cost: Cost | None = Field(
+        None, description='Aggregate cost across all items.'
+    )
+    ver: str | None = Field(
+        '',
+        description='FORA protocol version — "1.0". Stamped by the sender from a single\n constant; advisory on receive. See "Protocol version" in the file header.',
+    )
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 7b70cef0..c7f5047d 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -14,7 +14,7 @@ export const AgentAcceptanceSchema = wire(z.object({ "signature": z.string().min
 
 export const AgentAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to.").default(""), "requester_id": z.string().describe("Requester identity (Requester.id) the acceptance is bound to.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature."));
 
-export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests.\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides the request, the\n holder-binding rule is unchanged — the wire signer must be the delegation's\n terminal holder — so a Broker may project a delegated request only when the\n agent has delegated to the Broker's key.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
+export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
 
 export const AgentRequestAcceptanceItemSchema = wire(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection."));
 
@@ -26,6 +26,8 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
 export const CatalogContributorSchema = wire(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider."));
@@ -38,17 +40,17 @@ export const CitationFormatSchema = wire(z.enum(["CITATION_FORMAT_LINK","CITATIO
 
 export const CostSchema = wire(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost."));
 
-export const DelegationSchema = wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Delegation — Scoped, time-limited, spend-capped credential.\n\nThe token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above."));
+export const DelegationSchema = wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Delegation — Scoped, time-limited, spend-capped credential.\n\nThe token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above."));
 
 export const DeliveryMethodSchema = wire(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]));
 
-export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED"]));
+export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]));
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -74,7 +76,9 @@ export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.st
 
 export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named. Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+
+export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item."));
 
 export const GetAccountStatusRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Accounts are per-Exchange, so \"which Exchange am I asking\n about\" is not derivable from anything else in this message."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusRequest — Agent asks whether its account is active."));
 
@@ -192,15 +196,17 @@ export const TenantFeeRateSchema = wire(z.object({ "fee_rate_bps": z.coerce.numb
 
 export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]));
 
-export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named. Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab."));
+export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab."));
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items); expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items); expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
 export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 9dc22d67..f1f6e835 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -62,9 +62,27 @@ import "fora/v1/vocab.proto";
 // emergency-revoked keys; consumers poll on a 300s cadence (±10% jitter)
 // and sync-fetch on an unknown thumbprint.
 //
-// Request authentication via RFC 9421 HTTP Message Signatures:
-//   Agent → Exchange:  Signature header (alg=ed25519)
-//   Agent → Broker → Exchange:  multiple Signature headers (one per hop)
+// Request authentication via RFC 9421 HTTP Message Signatures (alg=ed25519).
+// Every request carries the signature of the party that AUTHORED it:
+//   Agent → Exchange:  the agent's signature. A direct purchase is this shape.
+//   Agent → Broker:    the agent's signature over the Broker's URL. Both Broker
+//                      RPCs, Resolve and ExecuteTransaction, terminate at the
+//                      Broker; neither request is forwarded on.
+//   Broker → Exchange: the Broker's OWN signature over a request the Broker
+//                      authored — a ResourceQuery of the discovery fan-out, or a
+//                      TransactionRequest re-packaged from the agent's purchase.
+//                      The agent's consent to a purchase does not travel as a
+//                      request signature: it travels in the body, as each item's
+//                      AgentAcceptance and the request's AgentRequestAcceptance,
+//                      detached signatures that stay valid however the purchase
+//                      was re-packaged. Each Exchange verifies those against the
+//                      agent's published keys (see AgentRequestAcceptance).
+// A request forwarded BYTE-FOR-BYTE through intermediaries keeps the original
+// signature and gains one per forwarding hop (multiple Signature headers, each
+// covering the prior one); the ordered set is the forwarding chain. That chain
+// is defined for a ResourceQuery relayed toward an Exchange (see
+// ResourceQuery). A purchase through a Broker is never forwarded that way: it is
+// re-packaged by BrokerService.ExecuteTransaction.
 //
 // Signed delivery URLs carry an Ed25519 signature made by the Exchange over
 // "GET\n<canonical URL>"; the delivery endpoint verifies it with the Exchange's
@@ -73,7 +91,9 @@ import "fora/v1/vocab.proto";
 // Retrieval-URL identity binding (OPTIONAL, DPoP-style — RFC 9449):
 //   The Exchange MAY bind a signed retrieval_endpoint to the requesting agent
 //   by embedding agent_identity_hash — the RFC 7638 JWK Thumbprint (SHA-256)
-//   of the agent's Ed25519 request-signing key — as the URL's agent_id query
+//   of the agent's Ed25519 request-signing key; on a purchase a Broker
+//   re-packaged, where the request signer is the Broker, the agent key the
+//   item's AgentAcceptance verifies under — as the URL's agent_id query
 //   parameter, which the URL signature covers, and echoing it in the response.
 //   A capable delivery endpoint (edge function) verifies the binding without
 //   contacting the fetcher's directory: verify the URL's Ed25519 signature
@@ -202,7 +222,11 @@ import "fora/v1/vocab.proto";
 // full signed Offer, and Offer.exchange is the execute-routing target, covered
 // by the issuing Exchange's own offer signature. The receive-side rule there is
 // that EVERY item's offer.exchange names this Exchange; a redundant top-level
-// copy would only add a top-level-vs-items mismatch to police.
+// copy would only add a top-level-vs-items mismatch to police. The same message
+// sent to BrokerService.ExecuteTransaction is addressed to the Broker, and there
+// the items name the Exchanges the Broker routes to rather than the recipient:
+// the Broker authors one new request per Exchange, so the every-item rule binds
+// at each Exchange, on the request the Broker sent it.
 // ============================================================================
 
 // ============================================================================
@@ -323,7 +347,10 @@ message ResourceQuery {
   // resolves the agent's key there, and takes each forwarding hop's key from
   // the key set it is configured with (e.g. Brokers registered with it).
   // The Exchange verifies every signature, and enforces RequestConstraints.max_hops /
-  // WellKnownManifest.max_intermediary_hops by counting them. (Field 5 unused.)
+  // WellKnownManifest.max_intermediary_hops by counting them. This chain applies
+  // to discovery forwarded byte-for-byte. It does not apply to a purchase through
+  // a Broker, which BrokerService.ExecuteTransaction re-packages into new requests
+  // the Broker signs alone. (Field 5 unused.)
 
   // Maximum time the caller will wait for a response.
   // Exchange SHOULD prioritize speed over completeness when tight.
@@ -1830,7 +1857,14 @@ enum RequesterType {
 // thumbprint of the holder's key. Verification MUST check that the key signing
 // the request (RFC 9421) hashes to that thumbprint; a token possessed without
 // the matching private key is rejected. This is what makes a leaked token NOT
-// bearer-usable. Delegation is a chain of cnf-linked JWTs: a principal narrows a
+// bearer-usable. One exception, the relayed purchase: when a Broker re-packages
+// a purchase (BrokerService.ExecuteTransaction), the request an Exchange
+// receives is signed by the Broker, not by the holder. There the Exchange checks
+// the holder binding against the key each item's AgentAcceptance verifies under
+// — the agent's key, resolved from the requester's WBA directory — and not
+// against the request signer. A relayed purchase that carries a delegation
+// therefore needs an AgentAcceptance on every item; an item without one fails
+// the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a
 // grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed
 // by the key the parent's cnf named — the chain-linkage invariant. Verifiers
 // need only the root issuer's public key; intermediate keys ride inside the
@@ -1985,7 +2019,8 @@ message AgentAcceptance {
 
 // AgentRequestAcceptance — the agent's topology-independent authorization of
 // one complete ordered execute set. A Broker forwards this envelope unchanged
-// when it projects a mixed-Exchange request into per-Exchange subrequests.
+// when it projects a mixed-Exchange request into per-Exchange subrequests
+// (BrokerService.ExecuteTransaction).
 // Each receiving Exchange verifies the signature, then requires its subrequest
 // to equal the complete in-order projection of payload.items whose exchange
 // names that Exchange. This is what makes removal, append, and reorder visible
@@ -1999,10 +2034,11 @@ message AgentAcceptance {
 // projected body; that is expected, not a gap, and it is why this proof
 // exists: like AgentAcceptance, it is a detached body signature that stays
 // valid however the request travels. The hop-signature stack applies only to
-// requests forwarded byte-for-byte. If a delegation rides the request, the
-// holder-binding rule is unchanged — the wire signer must be the delegation's
-// terminal holder — so a Broker may project a delegated request only when the
-// agent has delegated to the Broker's key.
+// requests forwarded byte-for-byte. If a delegation rides a projected request,
+// the wire signer is the Broker, so the Exchange checks the delegation's holder
+// binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,
+// not against the wire signer (see Delegation). The agent does not need to
+// delegate to the Broker's key for the Broker to relay its purchase.
 //
 // The verification key is the agent key published for the requester the signed
 // payload names. payload.requester_domain must equal the request's
@@ -2116,6 +2152,16 @@ message TransactionRequest {
   // Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
   // (authenticated caller, key), never globally, so a key chosen by one caller
   // cannot collide with another's cached result.
+  //
+  // Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.
+  // The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do
+  // otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign
+  // it — so a retry of the same purchase through the Broker reaches every
+  // Exchange as a replay and is answered from that Exchange's stored result. The
+  // verified signer of a re-packaged sub-request is the Broker, which speaks for
+  // many agents, so an Exchange scopes a relayed request's key per (Broker,
+  // requester the agent acceptances authenticate, key): two agents behind one
+  // Broker that pick the same key cannot collide.
   string idempotency_key = 2 [
     (buf.validate.field).string = {min_len: 1, max_len: 255}
   ];
@@ -2177,7 +2223,9 @@ message TransactionResponse {
 
   // Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK
   // Thumbprint of the agent's Ed25519 request-signing key (see "Retrieval-URL
-  // identity binding" above). Shared across the request; set once.
+  // identity binding" above). On a sub-request a Broker re-packaged, the request
+  // signer is the Broker, and this is the thumbprint of the agent key the
+  // AgentAcceptances verify under instead. Shared across the request; set once.
   string agent_identity_hash = 10;
 
   // Per-offer results (one entry per committed item, in original order).
@@ -2239,7 +2287,8 @@ message TransactionResultItem {
 
   // Signed retrieval URL for this item. Bound to the requesting agent's identity
   // via the parent TransactionResponse.agent_identity_hash (shared across all
-  // batch items); expires at expires_at. Absent if this item was denied or its
+  // batch items) — on a BrokerTransactionResponse, the agent_identity_hash of
+  // the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its
   // delivery_method is not signed-URL-based.
   optional string retrieval_endpoint = 12;
 
@@ -2248,6 +2297,46 @@ message TransactionResultItem {
 
   // Reporting requirements for this item.
   optional ReportingObligation reporting_obligation = 10;
+
+  // Set only on a BrokerTransactionResponse, and only when the Exchange that
+  // owns this item refused the Broker's whole sub-request instead of answering
+  // it: a non-OK answer, or no answer at all. The item was not purchased.
+  // offer_id names the item; transaction_id, billing_id, cost, denial_reason,
+  // retrieval_endpoint and the other result fields stay unset. Every item the
+  // Broker sent in that sub-request carries the same refusal. An Exchange never
+  // sets this field, and a Broker never replaces it with a denial_reason: an
+  // upstream refusal is not a per-item access decision.
+  optional UpstreamRefusal refusal = 14;
+}
+
+// UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent
+// it on BrokerService.ExecuteTransaction, carried in the Broker's response body
+// on each affected item (TransactionResultItem.refusal) instead of being turned
+// into an error of the Broker's own. Like TransactionDenial.exchange, nothing
+// signs it: it is the Broker's report of what the Exchange answered.
+message UpstreamRefusal {
+  // Bare host of the Exchange that refused, in the form "Request recipient"
+  // defines in the file header. Equal to the refused items' signed
+  // offer.exchange, which is the value a caller acts on.
+  string exchange = 1 [
+    (buf.validate.field).string = {
+      max_len: 260,
+      pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"
+    }
+  ];
+
+  // The Connect code the Exchange answered with, in its wire form, e.g.
+  // "permission_denied" or "unauthenticated". When the Exchange gave no answer
+  // — unreachable, or the call timed out — it is the code the Broker's call
+  // failed with ("unavailable", "deadline_exceeded"). A timeout is an ambiguous
+  // outcome: the purchase may have completed. Retrying the agent's request with
+  // the same idempotency_key is safe, because the Broker forwards the key
+  // unchanged and the Exchange answers a replay from its stored result.
+  string code = 2 [(buf.validate.field).string = {min_len: 1, max_len: 64}];
+
+  // The Exchange's typed reason, unchanged — the ErrorDetail it attached to its
+  // refusal. Absent when the Exchange attached none or gave no answer.
+  optional ErrorDetail detail = 3;
 }
 
 // Cost — Actual transaction cost.
@@ -2266,7 +2355,7 @@ enum DenialReason {
   DENIAL_REASON_ACCOUNT_INACTIVE = 1;     // the requester's account (the billing_ref minted at Register) exists but is not active — typically awaiting the Exchange operator's out-of-band activation; the remedy is to wait or contact the operator, NOT to register again
   DENIAL_REASON_INSUFFICIENT_BALANCE = 2; // Requester's balance too low
   DENIAL_REASON_RATE_LIMITED = 3;         // Too many requests
-  DENIAL_REASON_CONTENT_UNAVAILABLE = 4;  // Resource no longer available
+  DENIAL_REASON_CONTENT_UNAVAILABLE = 4;  // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
   DENIAL_REASON_RESTRICTION_NOT_SATISFIED = 5;  // Accepted term's restriction not satisfied by the request; the axes are in TransactionDenial.restriction_mismatches (single) / TransactionResultItem.restriction_mismatches (batch), same RestrictionKind vocabulary as the terms
   DENIAL_REASON_REPORTING_OVERDUE = 6;    // Requester has >20% overdue reports (MAY threshold)
   DENIAL_REASON_OFFER_EXPIRED = 7;        // Offer TTL exceeded
@@ -2298,6 +2387,12 @@ enum DenialReason {
   // GetAccountStatus. TransactionDenial.exchange names WHERE to register, so the
   // agent converges without fetching a manifest first.
   DENIAL_REASON_ACCOUNT_NOT_REGISTERED = 18;         // no account exists for this caller at this Exchange — the remedy is to call Register
+
+  // The provider at this Exchange does not accept purchases relayed by a Broker
+  // (BrokerService.ExecuteTransaction). Per item: other items in the same
+  // sub-request may succeed. The remedy is to buy this offer directly, calling
+  // ExchangeService.ExecuteTransaction at offer.exchange.
+  DENIAL_REASON_RELAY_NOT_ACCEPTED = 19;
 }
 
 // IngestionSource — How the catalog entry was discovered.
@@ -2357,16 +2452,19 @@ service CatalogService {
   rpc RefreshCatalog(RefreshCatalogRequest) returns (RefreshCatalogResponse);
 }
 
-// BrokerService is the agent-facing gateway: it runs the broker discovery flow
+// BrokerService is the agent-facing gateway. It runs the broker discovery flow
 // (discover → select offers) across one or more Exchanges on the caller's
-// behalf and returns a single canonical DiscoveryResponse.
+// behalf and returns a single canonical DiscoveryResponse, and it buys the
+// selected offers in one call however many Exchanges issued them.
 service BrokerService {
   // Resolve runs the broker discovery flow for the requested URIs/query: it
   // fans out to one or more Exchanges and returns the merged offers. It is pure
   // discovery — it selects and returns offers, never executes a transaction, so
   // it neither charges nor produces transaction denials. A denial is raised only
-  // when the agent later calls ExchangeService.ExecuteTransaction on a selected
-  // offer, and rides there on TransactionResponse.DenialReason.
+  // when the agent later buys a selected offer — either directly, calling
+  // ExchangeService.ExecuteTransaction at the offer's Exchange, or through
+  // BrokerService.ExecuteTransaction — and rides there on the result item's
+  // denial_reason.
   //
   // A result returns OK with offers populated on DiscoveryResponse.offer_groups
   // (one OfferGroup per requested URI). A request that ran but yielded nothing
@@ -2378,6 +2476,83 @@ service BrokerService {
   // like malformed requests and internal faults, are non-OK transport errors
   // carrying an ErrorDetail.
   rpc Resolve(DiscoveryRequest) returns (DiscoveryResponse);
+
+  // ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
+  // in one call. The request is the TransactionRequest an agent would send an
+  // Exchange, with every item's AgentAcceptance and the AgentRequestAcceptance
+  // over all items, signed (RFC 9421) by the agent for the Broker's URL. The
+  // request terminates at the Broker; it is not forwarded.
+  //
+  // The Broker RE-PACKAGES the purchase. It verifies the agent's request, groups
+  // the items by each signed offer's `exchange`, and sends one
+  // ExchangeService.ExecuteTransaction per Exchange. Each sub-request is a new
+  // request the Broker authors and signs with ITS OWN key; it carries that
+  // Exchange's items in request order, each with its reflected Offer and the
+  // agent's AgentAcceptance, plus the agent's AgentRequestAcceptance unchanged,
+  // the agent's `requester` and the agent's `idempotency_key` unchanged. So each
+  // Exchange still verifies the agent's consent: the acceptances are detached
+  // signatures over the body, and they do not depend on who signed the request.
+  // The Broker then combines the answers into one BrokerTransactionResponse.
+  //
+  // Why re-packaging and combining are safe: each item is atomic, and its
+  // integrity is per resource. Each offer carries the signature of the Exchange
+  // that issued it, covering price, terms, expiry and `exchange`; each item
+  // carries the agent's acceptance of that one offer, bound to the requester
+  // and the idempotency key; and each item's result comes from the Exchange that
+  // owns that resource. The Broker therefore assembles independent per-resource
+  // purchases. It cannot change what an item buys, from which Exchange, at what
+  // price or on what terms, or for whom, without breaking that offer's Exchange
+  // signature or the agent's acceptance; it cannot add an item the agent did not
+  // accept; and it cannot drop, add or reorder items within one Exchange's
+  // sub-request without that Exchange seeing it, because the
+  // AgentRequestAcceptance fixes the complete ordered set. No cross-item
+  // integrity is needed, and none is provided. On the response side, the one
+  // signed value in a result item is retrieval_endpoint, a URL the issuing
+  // Exchange signed, so the Broker cannot forge or alter one. Every other field
+  // of a result item, and every field of the combined response, is unsigned:
+  // it is the Broker's report of what each Exchange answered, and the charge
+  // itself is still bounded by the signed offer the Exchange verified.
+  //
+  // The Broker's own refusals are non-OK Connect errors carrying an
+  // ErrorDetail, and when the Broker refuses, it has sent no sub-request, so
+  // nothing was bought:
+  //   - The agent's request signature does not verify: UNAUTHENTICATED with
+  //     `request_auth_failure`, exactly as at an Exchange.
+  //   - `requester.domain` is not the agent's verified signing directory — the
+  //     host of the WBA directory the covered `Signature-Agent` header names,
+  //     the directory the request-signing key resolved from: UNAUTHENTICATED
+  //     with `request_auth_failure` SIGNATURE_INVALID. The signature verifies,
+  //     but not as the requester the body claims, which is a signature that
+  //     does not verify for that requester. The Broker refuses it because every
+  //     Exchange would: they resolve the acceptance keys from requester.domain.
+  //   - A malformed request — no items, an item with no offer or no
+  //     AgentAcceptance, no AgentRequestAcceptance, or an AgentRequestAcceptance
+  //     whose payload does not list the request's items in order (each
+  //     offer.signature and offer.exchange) or names another requester or
+  //     idempotency key: INVALID_ARGUMENT.
+  //   - An item whose offer.exchange the Broker cannot route to, or does not
+  //     approve for purchases: a non-OK error (FAILED_PRECONDITION), with
+  //     ErrorDetail.metadata["exchange"] naming that host. The Broker checks
+  //     every item before it sends anything, so one unroutable Exchange
+  //     refuses the whole call rather than buying the rest.
+  //
+  // Upstream answers are ALWAYS IN THE BODY. Once the Broker has sent its
+  // sub-requests the call returns OK. An Exchange's refusal of its whole
+  // sub-request — a non-OK answer, or no answer at all — is never turned into
+  // an error of the Broker's own: it rides on each affected item as
+  // TransactionResultItem.refusal, and the other Exchanges' results come back
+  // unchanged. An Exchange's per-item denial is that Exchange's result item,
+  // unchanged. DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
+  // upstream failures; the Broker never stamps it, or any denial_reason, onto
+  // an item an Exchange did not deny. If an Exchange answers OK without exactly
+  // one result item per item sent, the Broker cannot attribute the answer, and
+  // reports every item of that sub-request with a refusal whose code is
+  // "internal" and no detail.
+  //
+  // A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
+  // so each Exchange answers a repeated sub-request from its stored result (see
+  // TransactionRequest.idempotency_key).
+  rpc ExecuteTransaction(TransactionRequest) returns (BrokerTransactionResponse);
 }
 
 message PushResourcesRequest {
@@ -2811,7 +2986,10 @@ message UsageReportResponse {
 // These messages are for the Agent → Broker path. Step 1 is DiscoveryRequest;
 // Step 6 is DiscoveryResponse, which carries offers grouped by requested URI
 // (OfferGroup) — discovery only. Committing to an offer is a separate exchange
-// on the execute path, which returns TransactionResponse.
+// on the execute path, taken one of two ways: directly, a TransactionRequest to
+// each issuing Exchange, which returns TransactionResponse; or through the
+// Broker, one TransactionRequest to BrokerService.ExecuteTransaction for offers
+// from any number of Exchanges, which returns BrokerTransactionResponse.
 // When an agent talks directly to an Exchange, it uses
 // ResourceQuery/TransactionRequest directly instead.
 // ============================================================================
@@ -3509,7 +3687,8 @@ enum AuthMethod {
 // Exchanges, grouped by the URI they were requested for. Committing to an offer
 // is a separate exchange on the execute path; that per-transaction result
 // (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)
-// is returned by TransactionResponse, not here.
+// is returned by TransactionResponse, or by BrokerTransactionResponse when the
+// purchase goes through BrokerService.ExecuteTransaction, not here.
 message DiscoveryResponse {
   // FORA protocol version — "1.0". Stamped by the sender from a single
   // constant; advisory on receive. See "Protocol version" in the file header.
@@ -3549,6 +3728,72 @@ message DiscoveryResponse {
   repeated string ext_critical = 90;
 }
 
+// BrokerTransactionResponse — the Broker's combined answer to
+// BrokerService.ExecuteTransaction: the independent per-resource purchases it
+// made at one or more Exchanges, assembled in request order. Each item is
+// atomic and owned by the Exchange that issued its offer, so the combination
+// needs no integrity of its own and carries none: no field here is signed, and
+// a result item's one signed value is its retrieval_endpoint, signed by the
+// issuing Exchange (see BrokerService.ExecuteTransaction).
+message BrokerTransactionResponse {
+  // FORA protocol version — "1.0". Stamped by the sender from a single
+  // constant; advisory on receive. See "Protocol version" in the file header.
+  string ver = 1;
+
+  // One per request item, in request order. A purchase that succeeded, or that
+  // its Exchange denied per item (denial_reason), is that Exchange's
+  // TransactionResultItem unchanged. An item whose Exchange refused the whole
+  // sub-request, or did not answer it, carries that refusal in `refusal`, with
+  // offer_id set and no other result field.
+  repeated TransactionResultItem items = 2;
+
+  // One per Exchange the Broker contacted, in the order each Exchange first
+  // appears among the request items.
+  repeated ExchangeOutcome exchanges = 3;
+
+  // Charged totals, one per currency, in the order each currency first appears
+  // among the charged items. An item is charged when it carries neither
+  // denial_reason nor refusal; its cost.amount is added, as an exact decimal,
+  // into the entry for its cost.currency. Amounts are never summed across
+  // currencies and never converted. unit_cost is unset. Empty when no item was
+  // charged.
+  repeated Cost totals = 4;
+
+  // Extension point
+  google.protobuf.Struct ext = 15;
+
+  // Critical extension keys (COSE crit pattern, RFC 9052).
+  // Lists keys within ext that the consumer MUST understand.
+  // Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.
+  // Empty (default) → all ext keys are safe to ignore.
+  repeated string ext_critical = 90;
+}
+
+// ExchangeOutcome — the request-level state of one Exchange's answer to the
+// sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields
+// of its TransactionResponse that are not per item.
+message ExchangeOutcome {
+  // Bare host of the Exchange, in the form "Request recipient" defines in the
+  // file header: the offer.exchange its items share.
+  string exchange = 1 [
+    (buf.validate.field).string = {
+      max_len: 260,
+      pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"
+    }
+  ];
+
+  // The offer_id of every item sent to this Exchange, in request order.
+  repeated string offer_ids = 2 [(buf.validate.field).repeated.max_items = 256];
+
+  // That Exchange's TransactionResponse.agent_identity_hash: the identity the
+  // retrieval_endpoint of each of its items is bound to. Empty when the
+  // Exchange refused the sub-request or did not answer.
+  string agent_identity_hash = 3;
+
+  // That Exchange's TransactionResponse.subscription_quota, unchanged.
+  repeated SubscriptionQuotaInfo subscription_quota = 4;
+}
+
 // ============================================================================
 // Resource Disputes
 //
@@ -4346,7 +4591,9 @@ message TransactionDenial {
   // Bare host of the Exchange that PRODUCED this denial, in the form "Request
   // recipient" defines in the file header. Not an echo of what the caller sent:
   // on a relayed or fanned-out execute the request went to a Broker, so the
-  // Exchange that refused may not be one the agent named. Carrying it here is
+  // Exchange that refused may not be one the agent named (through
+  // BrokerService.ExecuteTransaction this detail reaches the agent inside
+  // UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is
   // what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to
   // call Register without fetching a manifest to work it out. NOTHING SIGNS THIS
   // VALUE: it rides in a response, and on a relayed path the response passed
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index ca826bd6..fd21533e 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -36,7 +36,11 @@ Optional RPC for providers/CMS/third-party intelligence providers to push conten
 
 ### BrokerService
 
-The Broker entry point. `Resolve(DiscoveryRequest) → DiscoveryResponse` is discovery-only: a client sends the URIs/query it wants resolved and receives `offer_groups` (one `OfferGroup` per URI, each carrying the full signed `Offer`) or a typed `absence_reason` with empty `offer_groups` when nothing licensable was found. "No result" is a successful answer; malformed requests, auth failures, and internal faults are non-OK transport errors carrying an `ErrorDetail`. Resolve does **not** deliver inline — the per-transaction result (transaction id, billing id, retrieval endpoint, …) is returned on `TransactionResponse` via the separate execute path, routed by `Offer.exchange`.
+The Broker entry point. It has two methods.
+
+`Resolve(DiscoveryRequest) → DiscoveryResponse` is discovery-only: a client sends the URIs/query it wants resolved and receives `offer_groups` (one `OfferGroup` per URI, each carrying the full signed `Offer`) or a typed `absence_reason` with empty `offer_groups` when nothing licensable was found. "No result" is a successful answer; malformed requests, auth failures, and internal faults are non-OK transport errors carrying an `ErrorDetail`. Resolve does **not** deliver inline. The per-transaction result (transaction id, billing id, retrieval endpoint, …) comes from the separate execute path, which the agent takes either directly, with `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker.
+
+`ExecuteTransaction(TransactionRequest) → BrokerTransactionResponse` buys offers from any number of Exchanges in one call. The Broker verifies the agent's request, groups the items by each signed offer's `exchange`, and sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. The agent's per-item `AgentAcceptance` and its `AgentRequestAcceptance` travel in each sub-request body, so every Exchange still verifies the agent's consent. The Broker combines the answers in request order. Re-packaging is safe because each item is atomic and its integrity is per resource: the offer carries its Exchange's signature, the acceptance binds the agent to that one offer, and the result comes from the Exchange that owns the resource. The Broker's own refusals (a bad agent signature, a `requester.domain` that is not the agent's signing directory, a malformed request, an Exchange it cannot route to or does not approve) are non-OK errors and buy nothing. An Exchange's refusal of its whole sub-request is never turned into a Broker error: it rides in the body, on each affected item's `refusal`.
 
 ::proto-service{name=BrokerService}
 
@@ -80,7 +84,7 @@ Scoped, time-limited, spend-capped credential. The credential itself is opaque b
 
 ::proto-message{name=Delegation}
 
-**Delegation claims.** The claim vocabulary carried inside the token is **not re-listed here** — the authoritative registry is the [Delegation-Claims Profile](/protocol/authentication/#delegation-claims-profile) table in `authentication.mdx`. The one claim worth restating: every delegation **MUST** carry a **holder binding** (the `cnf` claim, `cnf.jkt` = the RFC 7638 thumbprint of the holder key) — the request-signing key MUST hash to `cnf.jkt`, or the token is rejected. Without it the token is bearer-usable. Everything else (scope, spend cap, expiry, etc.) is optional and defined in that single source of truth.
+**Delegation claims.** The claim vocabulary carried inside the token is **not re-listed here** — the authoritative registry is the [Delegation-Claims Profile](/protocol/authentication/#delegation-claims-profile) table in `authentication.mdx`. The one claim worth restating: every delegation **MUST** carry a **holder binding** (the `cnf` claim, `cnf.jkt` = the RFC 7638 thumbprint of the holder key) — the request-signing key MUST hash to `cnf.jkt`, or the token is rejected. Without it the token is bearer-usable. On a purchase a Broker re-packaged (`BrokerService.ExecuteTransaction`), the request reaching the Exchange is signed by the Broker, so the Exchange checks `cnf.jkt` against the key each item's `AgentAcceptance` verifies under instead of the request signer. Everything else (scope, spend cap, expiry, etc.) is optional and defined in that single source of truth.
 
 **Narrowing example**: An agent can further restrict (but never widen) a delegation by issuing a child JWT:
 - Original: `scope: credit:*, max_spend_cents: 100000`
@@ -88,7 +92,9 @@ Scoped, time-limited, spend-capped credential. The credential itself is opaque b
 
 ### Multi-hop forwarding (no message — HTTP layer)
 
-There is no in-message hop chain. Multi-hop forwarding (Agent → Broker → … → Exchange) is a **stack of RFC 9421 HTTP Message Signatures**: each forwarding party adds one labeled signature, and each signature covers the request plus the prior hop's signature, so the ordered set of signatures is the chain (tamper-evident, order-bound). The Exchange resolves each `keyid` (an RFC 7638 thumbprint) in the signer's WBA directory at `{domain}/.well-known/http-message-signatures-directory`, verifies every signature, and enforces `RequestConstraints.max_hops` / `WellKnownManifest.max_intermediary_hops` by counting them. Responses do not retrace the chain — the terminal Exchange returns directly to the originating agent (bound by `agent_identity_hash`).
+There is no in-message hop chain. Multi-hop forwarding of a request byte-for-byte (a `ResourceQuery` relayed toward an Exchange) is a **stack of RFC 9421 HTTP Message Signatures**: each forwarding party adds one labeled signature, and each signature covers the request plus the prior hop's signature, so the ordered set of signatures is the chain (tamper-evident, order-bound). The Exchange resolves each `keyid` (an RFC 7638 thumbprint) in the signer's WBA directory at `{domain}/.well-known/http-message-signatures-directory`, verifies every signature, and enforces `RequestConstraints.max_hops` / `WellKnownManifest.max_intermediary_hops` by counting them. Responses do not retrace the chain — the terminal Exchange returns directly to the originating agent (bound by `agent_identity_hash`).
+
+A purchase through a Broker does not use this chain. `BrokerService.ExecuteTransaction` terminates at the Broker, which authors and signs one new request per Exchange. The agent's consent travels in the body as `AgentAcceptance` and `AgentRequestAcceptance`, not as a request signature.
 
 ## Messages -- Offers and Pricing
 
@@ -190,10 +196,16 @@ The canonical signing structure for [`AgentAcceptance`](#agentacceptance). It is
 
 ### TransactionResultItem
 
-Result for a single offer in a batch transaction.
+Result for a single offer in a batch transaction. `refusal` is set only in a `BrokerTransactionResponse`, on an item whose Exchange refused the Broker's whole sub-request or did not answer it.
 
 ::proto-message{name=TransactionResultItem}
 
+### UpstreamRefusal
+
+An Exchange's refusal of a whole sub-request a Broker sent it, carried on each affected item instead of being turned into an error of the Broker's own: the Exchange, the Connect `code` it answered with, and its `ErrorDetail` unchanged.
+
+::proto-message{name=UpstreamRefusal}
+
 ### Cost
 
 Actual transaction cost.
@@ -357,7 +369,7 @@ A Exchange authorized to sell this provider's content.
 
 ## Messages -- Broker Protocol
 
-Messages for the Agent-to-Broker path (Steps 1 and 6). When an agent talks directly to an Exchange, it uses ResourceQuery/TransactionRequest instead.
+Messages for the Agent-to-Broker path (Steps 1 and 6), and the combined answer of a purchase through the Broker. When an agent talks directly to an Exchange, it uses ResourceQuery/TransactionRequest instead. `BrokerService.ExecuteTransaction` takes the same `TransactionRequest` an Exchange does.
 
 ### DiscoveryRequest
 
@@ -373,10 +385,22 @@ Budget and preference constraints for exchange filtering and offer selection.
 
 ### DiscoveryResponse
 
-Broker returns to Agent (Step 6). Discovery-only: `offer_groups` (field 4, one `OfferGroup` per requested URI, each carrying the full signed `Offer` with `Offer.exchange` as the execute-routing target) or `absence_reason` (field 16) with empty `offer_groups`. There are no inline delivery fields — the per-transaction result rides on `TransactionResponse` via the separate execute path.
+Broker returns to Agent (Step 6). Discovery-only: `offer_groups` (field 4, one `OfferGroup` per requested URI, each carrying the full signed `Offer` with `Offer.exchange` as the execute-routing target) or `absence_reason` (field 16) with empty `offer_groups`. There are no inline delivery fields — the per-transaction result rides on `TransactionResponse`, or on `BrokerTransactionResponse` through the Broker, via the separate execute path.
 
 ::proto-message{name=DiscoveryResponse}
 
+### BrokerTransactionResponse
+
+The Broker's answer to `BrokerService.ExecuteTransaction`. `items` has one entry per request item, in request order: an Exchange's `TransactionResultItem` unchanged, or an item carrying `refusal`. `exchanges` has one `ExchangeOutcome` per Exchange contacted. `totals` holds the charged amounts, one `Cost` per currency, never summed across currencies. No field is signed; a result item's one signed value is its `retrieval_endpoint`, signed by the issuing Exchange.
+
+::proto-message{name=BrokerTransactionResponse}
+
+### ExchangeOutcome
+
+The request-level part of one Exchange's answer to its sub-request: the offers sent to it, its `agent_identity_hash` (what each of its retrieval URLs is bound to) and its `subscription_quota`.
+
+::proto-message{name=ExchangeOutcome}
+
 ## Messages -- CatalogService
 
 Messages for the optional CatalogService RPC — the publisher role's surface: push, remove and refresh the catalog entries a publisher, or a contributor it authorised, supplies to an Exchange.

From 7e1db124b5e89c3cd8a7d00b90fdce612253b36e Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Fri, 2 Oct 2026 22:35:17 -0400
Subject: [PATCH 008/164] Add BrokerClient.Execute and a batch execute form to
 the three SDKs

BrokerClient.Execute (Go), BrokerClient.execute (Python, async and sync)
and BrokerClient.execute (TypeScript) buy verified offers through a Broker
in one call, however many Exchanges issued them, and return the
BrokerTransactionResponse. The client builds the same TransactionRequest a
direct purchase sends: every item with the agent's AgentAcceptance and one
AgentRequestAcceptance over the complete ordered set, signed by the
client's signer, with ver and the configured requester stamped.

Refused locally, with nothing sent: no requester, no signer, no offers, an
unsigned offer, an offer that names no exchange, and a requester.domain
that is not the host of the directory the client signs as (its
Signature-Agent). The last mirrors the Broker's own check, which it refuses
with request_auth_failure SIGNATURE_INVALID; the comparison is the
recipient-identity rule, exact and case-folded with :443 the same as no
port. Python's SigningTransport gains a read-only signature_agent property
for it.

The exchange client buys several offers from one Exchange in one request,
built by the same code: Client.ExecuteBatch in Go, and execute given a
sequence (Python) or an array (TypeScript). Offers from more than one
Exchange are refused locally, pointing at the Broker purchase.

The client-request corpus gains the brokerExecute verb, replayed by all
three languages. The Go tests run the real client against the SDK's
BrokerService handler; the Python tests run both faces against the signed
peer; the TypeScript tests use the injected send the other execute tests
use. They cover single and batch purchases, acceptances that verify for each
Exchange's projection, a combined answer with one refused group and
per-currency totals, the local refusals, and the Broker's own refusal. The
connectserver BrokerService mount needs no change; its comment now names the
relayed purchase.
---
 sdk/go/README.md                              |   2 +-
 sdk/go/connect/broker.go                      |  78 +++-
 sdk/go/connect/broker_execute_test.go         | 326 ++++++++++++++++
 sdk/go/connect/client.go                      |  79 ++--
 sdk/go/connect/doc.go                         |   3 +-
 .../gen_client_request_vectors_test.go        |  31 ++
 sdk/go/connect/purchase.go                    | 169 +++++++++
 .../testdata/client-request-vectors.json      |   9 +
 sdk/go/connectserver/handler.go               |   8 +-
 sdk/python/README.md                          |  22 +-
 sdk/python/fora_sdk/client/__init__.py        |  34 +-
 sdk/python/fora_sdk/client/_verbs.py          | 214 ++++++++---
 sdk/python/fora_sdk/signing_transport.py      |   8 +
 sdk/python/fora_sdk/sync/__init__.py          |  15 +-
 sdk/python/tests/test_broker_execute.py       | 316 ++++++++++++++++
 .../tests/test_client_request_parity.py       |   9 +
 sdk/ts/client/index.ts                        | 356 ++++++++++++++----
 sdk/ts/tests/broker-execute.test.ts           | 333 ++++++++++++++++
 sdk/ts/tests/client-request.parity.test.ts    |   7 +
 19 files changed, 1825 insertions(+), 194 deletions(-)
 create mode 100644 sdk/go/connect/broker_execute_test.go
 create mode 100644 sdk/go/connect/purchase.go
 create mode 100644 sdk/python/tests/test_broker_execute.py
 create mode 100644 sdk/ts/tests/broker-execute.test.ts

diff --git a/sdk/go/README.md b/sdk/go/README.md
index c975431c..c4b139c5 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -9,7 +9,7 @@ directly with no `replace` directive.
 | **L0** | `gen/go/fora/v1`, `gen/go/vocab/*` | generated wire types (consumed, never rebuilt) |
 | **L1** | **`sdk/go/helpers`** | stateless, **IO-free** protocol helpers — RFC 9421/7638 crypto, offer/acceptance verify, static key resolution, validation |
 | L2 · I/O | **`sdk/go/resolvers`** | the network-fetching tier: well-known JWKS / WBA directory / `fora.json` endpoint / offer-key resolvers, the uncached registration-requirements reader, + the SSRF-guarded HTTP client. Runs on a maintained `net/http` client behind the SSRF guard; composes L1, never the reverse |
-| L2 · transport | `sdk/go/core` (transport-neutral: Verifier, {verified,rejected}, `DiscoveryResult` per-URI groups, VerifiedOffer guard, signing RoundTripper, ReplayStore — zero Connect) · `sdk/go/connect` (Connect **client** binding: `NewClient` + `NewBrokerClient` + `NewCatalogClient`; the agent verbs **`Discover` · `Resolve` · `Execute` · `ReportUsage` · `Dispute` · `Fetch`**, the account-setup verbs **`Register` · `GetAccountStatus`** and the publisher verbs **`PushResources` · `RemoveResources` · `RefreshCatalog`** + client options + the `CallError` taxonomy + `ErrorDetailFrom`) · `sdk/go/connectserver` (Connect **server** binding: `NewExchangeServiceHandler` + `NewBrokerServiceHandler` + `NewCatalogServiceHandler` + server options + `AsConnectError` + `AttachErrorDetail`/`AttachDetail` + the reject answer **`RejectCode` · `IsBodyTooLarge` · `WriteReject`**, the one place the 413/429/401 split and the error-envelope body are decided) | transport-neutral core + Connect client/server bindings (state injected) |
+| L2 · transport | `sdk/go/core` (transport-neutral: Verifier, {verified,rejected}, `DiscoveryResult` per-URI groups, VerifiedOffer guard, signing RoundTripper, ReplayStore — zero Connect) · `sdk/go/connect` (Connect **client** binding: `NewClient` + `NewBrokerClient` + `NewCatalogClient`; the agent verbs **`Discover` · `Resolve` · `Execute` · `ExecuteBatch` · `ReportUsage` · `Dispute` · `Fetch`**, the Broker purchase **`BrokerClient.Execute`** (offers from several Exchanges in one call), the account-setup verbs **`Register` · `GetAccountStatus`** and the publisher verbs **`PushResources` · `RemoveResources` · `RefreshCatalog`** + client options + the `CallError` taxonomy + `ErrorDetailFrom`) · `sdk/go/connectserver` (Connect **server** binding: `NewExchangeServiceHandler` + `NewBrokerServiceHandler` + `NewCatalogServiceHandler` + server options + `AsConnectError` + `AttachErrorDetail`/`AttachDetail` + the reject answer **`RejectCode` · `IsBodyTooLarge` · `WriteReject`**, the one place the 413/429/401 split and the error-envelope body are decided) | transport-neutral core + Connect client/server bindings (state injected) |
 | L3 | separate packages | framework adapters (convert, never replace) — later |
 
 The `L2` tier is split by kind: the **I/O** package (`resolvers`) is the only tier
diff --git a/sdk/go/connect/broker.go b/sdk/go/connect/broker.go
index ca908623..903061a0 100644
--- a/sdk/go/connect/broker.go
+++ b/sdk/go/connect/broker.go
@@ -9,6 +9,7 @@ import (
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
 	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
 	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 )
 
 // BrokerClient is the Connect client for BrokerService.
@@ -30,6 +31,12 @@ type BrokerClient struct {
 	// here rather than demanded on every request for the same reason the exchange
 	// client holds it: one client speaks for one agent.
 	requester *forav1.Requester
+	// signer signs the detached acceptances a relayed purchase carries — the same
+	// key that signs the transport, because the protocol carries one agent identity.
+	signer helpers.Signer
+	// signatureAgent is the WBA directory this client signs as. A Broker requires
+	// requester.domain to name it, so Execute checks the two agree before sending.
+	signatureAgent string
 }
 
 // NewBrokerClient builds a BrokerClient against a Broker's base URL. It accepts
@@ -42,8 +49,11 @@ type BrokerClient struct {
 //     WithKeyResolver instead — the resolvers tier ships one that resolves each
 //     issuing Exchange's own key.
 //   - WithRequester is REQUIRED, not optional: a Broker resolves the calling agent
-//     from it and declines a request that names none, so Resolve refuses locally
-//     rather than spending a round trip to be told.
+//     from it and declines a request that names none, so Resolve and Execute refuse
+//     locally rather than spending a round trip to be told.
+//   - WithSigner and WithSignatureAgent are required by Execute: a relayed purchase
+//     carries acceptances signed with the agent's key, and a Broker refuses a
+//     requester.domain that does not name the directory the request is signed from.
 //
 // The options that do nothing here are the ones belonging to legs a Broker client
 // does not have: WithAgentKey, WithProofWindow and WithContentTimeout /
@@ -52,16 +62,17 @@ type BrokerClient struct {
 // exchange client. Passing them here is silently inert rather than an error, so
 // one shared option set can build both faces.
 //
-// BrokerService carries exactly one method today. The purchase path through a
-// Broker is still a relay route rather than an RPC; when it becomes one, this
-// type gains one method and nothing else here changes.
+// BrokerService carries two methods, Resolve and ExecuteTransaction, and this type
+// has one verb for each.
 func NewBrokerClient(baseURL string, opts ...ClientOption) *BrokerClient {
 	cfg := resolvedConfig(opts...)
 	httpClient, connectOpts, verifier := plumbing(cfg)
 	return &BrokerClient{
-		rpc:       forav1connect.NewBrokerServiceClient(httpClient, baseURL, connectOpts...),
-		verifier:  verifier,
-		requester: cfg.requester,
+		rpc:            forav1connect.NewBrokerServiceClient(httpClient, baseURL, connectOpts...),
+		verifier:       verifier,
+		requester:      cfg.requester,
+		signer:         cfg.signer,
+		signatureAgent: cfg.signatureAgent,
 	}
 }
 
@@ -120,3 +131,54 @@ func (b *BrokerClient) Resolve(ctx context.Context, req *forav1.DiscoveryRequest
 		// signal — each offer carries its own issuing domain instead.
 	}, nil
 }
+
+// Execute buys VERIFIED offers through the Broker in one call, however many
+// Exchanges issued them (BrokerService.ExecuteTransaction).
+//
+// The client builds the same TransactionRequest a direct purchase sends — every
+// item with the agent's detached AgentAcceptance, and one AgentRequestAcceptance
+// over the complete ordered set — and stamps ver and the configured requester.
+// The Broker re-packages it: it groups the items by each offer's exchange, sends
+// one sub-request per Exchange signed with its own key, and combines the answers.
+// The acceptances travel in each sub-request body, so every Exchange still
+// verifies the agent's consent. The idempotency key is the action's, minted fresh
+// unless WithIdempotencyKey pins one; the Broker forwards it unchanged to every
+// Exchange, so a retry with the same key is answered from each Exchange's stored
+// result.
+//
+// Refused locally, with nothing sent: no requester (CallMalformed), no signer
+// (CallNotSignable), no offers, an unsigned offer, an offer that names no
+// exchange, and a requester.domain that is not the host of the directory this
+// client signs as (all CallMalformed). The last mirrors the Broker's own check,
+// which it refuses with request_auth_failure SIGNATURE_INVALID.
+//
+// An Exchange that refused the Broker's whole sub-request is NOT an error here:
+// the call succeeds, and each affected item carries the refusal in
+// TransactionResultItem.Refusal while the other Exchanges' items come back
+// unchanged. Only the Broker's own refusals — a bad signature, a malformed
+// request, an Exchange it cannot route to or does not approve — return an error,
+// and then nothing was bought.
+func (b *BrokerClient) Execute(ctx context.Context, offers []core.VerifiedOffer, opts ...CallOption) (*forav1.BrokerTransactionResponse, error) {
+	const op = "broker execute"
+	if b.requester == nil {
+		return nil, malformed(op, errors.New(
+			"no requester configured; a Broker resolves who is buying (see WithRequester)"))
+	}
+	if err := requireRoutable(op, offers); err != nil {
+		return nil, err
+	}
+	if err := requireRequesterIsSigner(op, b.requester, b.signatureAgent); err != nil {
+		return nil, err
+	}
+	req, err := buildTransaction(ctx, purchase{
+		op: op, signer: b.signer, requester: b.requester, offers: offers, opts: opts,
+	})
+	if err != nil {
+		return nil, err
+	}
+	resp, err := b.rpc.ExecuteTransaction(ctx, connectrpc.NewRequest(req))
+	if err != nil {
+		return nil, sendError(op, err)
+	}
+	return resp.Msg, nil
+}
diff --git a/sdk/go/connect/broker_execute_test.go b/sdk/go/connect/broker_execute_test.go
new file mode 100644
index 00000000..3c535303
--- /dev/null
+++ b/sdk/go/connect/broker_execute_test.go
@@ -0,0 +1,326 @@
+package connect_test
+
+// BrokerClient.Execute and Client.ExecuteBatch, driven through the outermost
+// public surface: an SDK-built client over real HTTP to a real Connect
+// BrokerService / ExchangeService handler running the SDK's own server verify
+// face. The Broker origin is the application service the SDK wraps: it records
+// the request it received and answers with a combined response, which is what a
+// relaying Broker hands back. What the client owns — building and signing the
+// request, the local refusals, decoding the answer — is what these tests assert.
+
+import (
+	"context"
+	"crypto/ed25519"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"sync"
+	"sync/atomic"
+	"testing"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/proto"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
+	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// agentDirectory is the WBA directory the test agent signs as; testRequester's
+// domain is its host, which is what a Broker requires.
+const agentDirectory = "https://agent.test"
+
+// relayBroker records the purchase it received and answers with a canned
+// combined response, or with a refusal of its own.
+type relayBroker struct {
+	forav1connect.UnimplementedBrokerServiceHandler
+	answer  *forav1.BrokerTransactionResponse
+	refusal error
+
+	mu   sync.Mutex
+	got  *forav1.TransactionRequest
+	hits atomic.Int64
+}
+
+func (b *relayBroker) ExecuteTransaction(
+	ctx context.Context, req *connectrpc.Request[forav1.TransactionRequest],
+) (*connectrpc.Response[forav1.BrokerTransactionResponse], error) {
+	b.hits.Add(1)
+	if err := requireVerified(ctx); err != nil {
+		return nil, err
+	}
+	b.mu.Lock()
+	b.got = req.Msg
+	b.mu.Unlock()
+	if b.refusal != nil {
+		return nil, b.refusal
+	}
+	return connectrpc.NewResponse(b.answer), nil
+}
+
+func (b *relayBroker) received() *forav1.TransactionRequest {
+	b.mu.Lock()
+	defer b.mu.Unlock()
+	return b.got
+}
+
+func serveBroker(t *testing.T, sig signingFixture, svc forav1connect.BrokerServiceHandler) *httptest.Server {
+	t.Helper()
+	path, h := foraserver.NewBrokerServiceHandler(svc, foraserver.WithKeyResolver(sig.resolver))
+	mux := http.NewServeMux()
+	mux.Handle(path, h)
+	srv := httptest.NewServer(mux)
+	t.Cleanup(srv.Close)
+	return srv
+}
+
+// signedOfferAt mints an offer issued by exchange, priced in currency, signed by
+// that Exchange's key, and hands it over as a VerifiedOffer the way a verifier
+// that resolved that key would.
+func signedOfferAt(t *testing.T, id, exchange, currency string) core.VerifiedOffer {
+	t.Helper()
+	_, priv, err := ed25519.GenerateKey(nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	offer := sampleOffer(id)
+	offer.Exchange = exchange
+	offer.Pricing = &forav1.Pricing{Rate: "1.25", Currency: currency}
+	sigHex, err := helpers.SignOffer(priv, offer)
+	if err != nil {
+		t.Fatal(err)
+	}
+	offer.Signature = sigHex
+	offer.SignatureAlgorithm = helpers.OfferSignatureAlgorithm
+	return core.RejectedOffer{Offer: offer}.Unsafe()
+}
+
+func brokerClient(srvURL string, sig signingFixture, extra ...foraconnect.ClientOption) *foraconnect.BrokerClient {
+	opts := append([]foraconnect.ClientOption{
+		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSignatureAgent(agentDirectory),
+		foraconnect.WithRequester(testRequester()),
+	}, extra...)
+	return foraconnect.NewBrokerClient(srvURL, opts...)
+}
+
+// A purchase across two Exchanges is one request whose every item carries a
+// verifying acceptance, and whose request acceptance verifies as the complete
+// in-order projection for EACH Exchange the Broker will relay to. The answer —
+// one Exchange refused its whole sub-request, the other sold in two currencies —
+// decodes with the refusal on the affected item and the totals kept apart.
+func TestBrokerExecute_RelaysAMixedBatchAndDecodesTheCombinedAnswer(t *testing.T) {
+	sig := newSigningFixture(t)
+	offers := []core.VerifiedOffer{
+		signedOfferAt(t, "offer-a1", "exchange-a.test", "USD"),
+		signedOfferAt(t, "offer-b1", "exchange-b.test", "USD"),
+		signedOfferAt(t, "offer-a2", "exchange-a.test", "EUR"),
+	}
+	refusal := &forav1.UpstreamRefusal{
+		Exchange: "exchange-b.test",
+		Code:     "permission_denied",
+		Detail: helpers.TransactionDenialDetail("fora.v1.ExchangeService", "no account",
+			forav1.DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED),
+	}
+	origin := &relayBroker{answer: &forav1.BrokerTransactionResponse{
+		Ver: helpers.ProtocolVersion,
+		Items: []*forav1.TransactionResultItem{
+			{OfferId: "offer-a1", TransactionId: "tx-a1", Cost: &forav1.Cost{Amount: "1.25", Currency: "USD"}},
+			{OfferId: "offer-b1", Refusal: refusal},
+			{OfferId: "offer-a2", TransactionId: "tx-a2", Cost: &forav1.Cost{Amount: "1.25", Currency: "EUR"}},
+		},
+		Exchanges: []*forav1.ExchangeOutcome{
+			{Exchange: "exchange-a.test", OfferIds: []string{"offer-a1", "offer-a2"}, AgentIdentityHash: sig.keyID},
+			{Exchange: "exchange-b.test", OfferIds: []string{"offer-b1"}},
+		},
+		Totals: []*forav1.Cost{{Amount: "1.25", Currency: "USD"}, {Amount: "1.25", Currency: "EUR"}},
+	}}
+	srv := serveBroker(t, sig, origin)
+
+	resp, err := brokerClient(srv.URL, sig).Execute(context.Background(), offers,
+		foraconnect.WithIdempotencyKey("relay-key"))
+	if err != nil {
+		t.Fatalf("Execute: %v", err)
+	}
+
+	got := origin.received()
+	if got.GetVer() != helpers.ProtocolVersion || got.GetIdempotencyKey() != "relay-key" {
+		t.Errorf("envelope ver=%q key=%q", got.GetVer(), got.GetIdempotencyKey())
+	}
+	if !proto.Equal(got.GetRequester(), testRequester()) {
+		t.Errorf("requester = %+v, want the configured identity", got.GetRequester())
+	}
+	if len(got.GetItems()) != len(offers) {
+		t.Fatalf("items = %d, want %d", len(got.GetItems()), len(offers))
+	}
+	for i, item := range got.GetItems() {
+		if item.GetOffer().GetOfferId() != offers[i].Offer().GetOfferId() {
+			t.Errorf("item %d = %q, want request order", i, item.GetOffer().GetOfferId())
+		}
+		if err = helpers.VerifyOfferAcceptance(item.GetOffer(), got.GetRequester(),
+			got.GetIdempotencyKey(), item.GetAgentAcceptance().GetSignature(), sig.pub); err != nil {
+			t.Errorf("item %d acceptance does not verify: %v", i, err)
+		}
+	}
+	for _, exchange := range []string{"exchange-a.test", "exchange-b.test"} {
+		projected := projectionFor(got, exchange)
+		if _, err = helpers.VerifyRequestAcceptanceProjection(
+			projected, got.GetAgentRequestAcceptance(), exchange, sig.pub); err != nil {
+			t.Errorf("the sub-request for %s would be refused: %v", exchange, err)
+		}
+	}
+
+	if r := resp.GetItems()[1].GetRefusal(); r.GetCode() != "permission_denied" ||
+		r.GetDetail().GetTransactionDenial().GetReason() != forav1.DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED {
+		t.Errorf("refusal = %+v, want the Exchange's code and typed reason unchanged", r)
+	}
+	if resp.GetItems()[0].GetTransactionId() != "tx-a1" || resp.GetItems()[2].GetRefusal() != nil {
+		t.Errorf("the other Exchange's results must come back unchanged, got %+v", resp.GetItems())
+	}
+	if len(resp.GetTotals()) != 2 || resp.GetTotals()[0].GetCurrency() != "USD" ||
+		resp.GetTotals()[1].GetCurrency() != "EUR" {
+		t.Errorf("totals = %+v, want one per currency", resp.GetTotals())
+	}
+	if len(resp.GetExchanges()) != 2 || resp.GetExchanges()[0].GetAgentIdentityHash() != sig.keyID {
+		t.Errorf("exchanges = %+v", resp.GetExchanges())
+	}
+}
+
+// projectionFor is the sub-request a Broker sends one Exchange: that Exchange's
+// items in request order, with the agent's envelope unchanged.
+func projectionFor(req *forav1.TransactionRequest, exchange string) *forav1.TransactionRequest {
+	sub, _ := proto.Clone(req).(*forav1.TransactionRequest)
+	sub.Items = nil
+	for _, item := range req.GetItems() {
+		if item.GetOffer().GetExchange() == exchange {
+			sub.Items = append(sub.Items, item)
+		}
+	}
+	return sub
+}
+
+// One offer is the degenerate one-item purchase, built by the same code.
+func TestBrokerExecute_SingleOffer(t *testing.T) {
+	sig := newSigningFixture(t)
+	origin := &relayBroker{answer: &forav1.BrokerTransactionResponse{Ver: helpers.ProtocolVersion}}
+	srv := serveBroker(t, sig, origin)
+
+	offer := signedOfferAt(t, "offer-one", "exchange-a.test", "USD")
+	if _, err := brokerClient(srv.URL, sig).Execute(context.Background(),
+		[]core.VerifiedOffer{offer}); err != nil {
+		t.Fatalf("Execute: %v", err)
+	}
+	got := origin.received()
+	if len(got.GetItems()) != 1 || got.GetAgentRequestAcceptance() == nil || got.GetIdempotencyKey() == "" {
+		t.Errorf("want one signed item, a request acceptance and a minted key, got %+v", got)
+	}
+}
+
+// Every precondition the Broker would refuse is refused HERE, before anything
+// leaves the process — the requester-domain one included.
+func TestBrokerExecute_RefusesLocallyWithoutSending(t *testing.T) {
+	sig := newSigningFixture(t)
+	origin := &relayBroker{answer: &forav1.BrokerTransactionResponse{}}
+	srv := serveBroker(t, sig, origin)
+
+	good := []core.VerifiedOffer{signedOfferAt(t, "offer-a", "exchange-a.test", "USD")}
+	unaddressed := signedOfferAt(t, "offer-x", "exchange-a.test", "USD")
+	unaddressed.Offer().Exchange = ""
+	otherDomain := testRequester()
+	otherDomain.Domain = "someone-else.test"
+
+	tests := map[string]struct {
+		client *foraconnect.BrokerClient
+		offers []core.VerifiedOffer
+		kind   foraconnect.CallErrorKind
+	}{
+		"requester domain is not the signing directory": {
+			brokerClient(srv.URL, sig, foraconnect.WithRequester(otherDomain)), good, foraconnect.CallMalformed,
+		},
+		"no signature agent": {
+			foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSigner(sig.signer),
+				foraconnect.WithRequester(testRequester())), good, foraconnect.CallMalformed,
+		},
+		"no requester": {
+			foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSigner(sig.signer),
+				foraconnect.WithSignatureAgent(agentDirectory)), good, foraconnect.CallMalformed,
+		},
+		"no signer": {
+			foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSignatureAgent(agentDirectory),
+				foraconnect.WithRequester(testRequester())), good, foraconnect.CallNotSignable,
+		},
+		"no offers": {brokerClient(srv.URL, sig), nil, foraconnect.CallMalformed},
+		"offer names no exchange": {
+			brokerClient(srv.URL, sig), []core.VerifiedOffer{unaddressed}, foraconnect.CallMalformed,
+		},
+	}
+	for name, tc := range tests {
+		t.Run(name, func(t *testing.T) {
+			_, err := tc.client.Execute(context.Background(), tc.offers)
+			var cerr *foraconnect.CallError
+			if !errors.As(err, &cerr) || cerr.Kind != tc.kind {
+				t.Fatalf("error = %v, want a CallError of kind %v", err, tc.kind)
+			}
+		})
+	}
+	if n := origin.hits.Load(); n != 0 {
+		t.Errorf("the Broker was contacted %d time(s); every refusal must be local", n)
+	}
+}
+
+// The Broker's OWN refusal is an error carrying its typed reason; nothing was bought.
+func TestBrokerExecute_BrokerRefusalIsAnError(t *testing.T) {
+	sig := newSigningFixture(t)
+	refusal := foraserver.AttachDetail(
+		connectrpc.NewError(connectrpc.CodeUnauthenticated, errors.New("broker: requester mismatch")),
+		helpers.RequestAuthFailureDetail("fora.v1.BrokerService", "requester mismatch",
+			forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID))
+	srv := serveBroker(t, sig, &relayBroker{refusal: refusal})
+
+	_, err := brokerClient(srv.URL, sig).Execute(context.Background(),
+		[]core.VerifiedOffer{signedOfferAt(t, "offer-a", "exchange-a.test", "USD")})
+	detail, ok := foraconnect.ErrorDetailFrom(err)
+	if !ok || detail.GetRequestAuthFailure().GetReason() !=
+		forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID {
+		t.Fatalf("error = %v, want the Broker's request_auth_failure", err)
+	}
+}
+
+// ExecuteBatch buys several offers from one Exchange in one request, and refuses
+// a set that spans Exchanges before sending — that is what a Broker is for.
+func TestExecuteBatch_OneExchangeOnly(t *testing.T) {
+	sig := newSigningFixture(t)
+	origin := &recordingExecute{}
+	srv := serveExchange(t, sig, origin)
+	client := foraconnect.NewClient(srv.URL,
+		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()))
+
+	same := []core.VerifiedOffer{
+		signedOfferAt(t, "offer-1", "exchange.test", "USD"),
+		signedOfferAt(t, "offer-2", "exchange.test", "USD"),
+	}
+	if _, err := client.ExecuteBatch(context.Background(), same); err != nil {
+		t.Fatalf("ExecuteBatch: %v", err)
+	}
+	if n := len(origin.req.GetItems()); n != 2 {
+		t.Fatalf("items = %d, want 2", n)
+	}
+	if _, err := helpers.VerifyRequestAcceptanceProjection(
+		origin.req, origin.req.GetAgentRequestAcceptance(), "exchange.test", sig.pub); err != nil {
+		t.Errorf("request acceptance does not verify: %v", err)
+	}
+
+	origin.req = nil
+	mixed := []core.VerifiedOffer{same[0], signedOfferAt(t, "offer-3", "exchange-b.test", "USD")}
+	_, err := client.ExecuteBatch(context.Background(), mixed)
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
+		t.Fatalf("error = %v, want CallMalformed", err)
+	}
+	if origin.req != nil {
+		t.Error("a mixed set must be refused before sending")
+	}
+}
diff --git a/sdk/go/connect/client.go b/sdk/go/connect/client.go
index cc74b865..c57e24dd 100644
--- a/sdk/go/connect/client.go
+++ b/sdk/go/connect/client.go
@@ -324,62 +324,35 @@ func idempotencyKeyFor(opts []CallOption, onMessage string) (string, error) {
 // key is minted fresh unless WithIdempotencyKey pins one. Execute builds the whole
 // TransactionRequest, so it also stamps ver from helpers.ProtocolVersion — the
 // caller neither supplies nor overrides it.
+//
+// Items-only wire shape: a single offer is the degenerate 1-element items list.
+// ExecuteBatch buys several offers from the same Exchange in one request.
 func (c *Client) Execute(ctx context.Context, offer core.VerifiedOffer, opts ...CallOption) (*forav1.TransactionResponse, error) {
-	const op = "execute"
-	if c.cfg.requester == nil {
-		return nil, malformed(op, errors.New(
-			"no requester configured; an Exchange resolves who is buying from it (see WithRequester)"))
-	}
-	signer := c.cfg.signer
-	if signer == nil {
-		// CallNotSignable, matching what Fetch answers for the same missing
-		// holder: a caller branching on the kind sees one condition under one
-		// class, whichever verb met it first.
-		return nil, &CallError{Kind: CallNotSignable, Op: op, Err: errors.New(
-			"no signer configured; a purchase carries a detached acceptance signed with the agent's own key (see WithSigner)")}
-	}
-	// An acceptance floating free of a concrete offer is meaningless, and an
-	// unsigned offer is reachable here: WithVerification(Off) and
-	// RejectedOffer.Unsafe() both mint a VerifiedOffer without a signature check.
-	if offer.Offer().GetSignature() == "" {
-		return nil, malformed(op, errors.New("cannot accept an unsigned offer"))
-	}
-	key, err := idempotencyKeyFor(opts, "")
-	if err != nil {
-		return nil, malformed(op, err)
+	return c.executeDirect(ctx, "execute", []core.VerifiedOffer{offer}, opts)
+}
+
+// ExecuteBatch commits to several VERIFIED offers issued by ONE Exchange in a
+// single request — the batch form of Execute, built by the same code. Each item
+// carries its own detached acceptance, and the request carries one
+// AgentRequestAcceptance over the complete ordered set.
+//
+// The offers must all name the same Exchange: a direct purchase goes to one
+// Exchange, and an Exchange refuses a request carrying an item addressed to anyone
+// else, so a mixed set is refused locally with CallMalformed. Buying across
+// Exchanges in one call is BrokerClient.Execute.
+func (c *Client) ExecuteBatch(ctx context.Context, offers []core.VerifiedOffer, opts ...CallOption) (*forav1.TransactionResponse, error) {
+	return c.executeDirect(ctx, "execute", offers, opts)
+}
+
+func (c *Client) executeDirect(ctx context.Context, op string, offers []core.VerifiedOffer, opts []CallOption) (*forav1.TransactionResponse, error) {
+	if err := requireOneExchange(op, offers); err != nil {
+		return nil, err
 	}
-	// The acceptance covers the offer, the requester, and the idempotency key, so
-	// a retry that pins the same key reproduces byte-identical acceptance bytes.
-	// That is the deliberate-replay semantic, not an accident.
-	acceptance, err := helpers.SignOfferAcceptanceWith(ctx, signer, offer.Offer(), c.cfg.requester, key)
+	req, err := buildTransaction(ctx, purchase{
+		op: op, signer: c.cfg.signer, requester: c.cfg.requester, offers: offers, opts: opts,
+	})
 	if err != nil {
-		return nil, &CallError{Kind: CallNotSignable, Op: op, Err: err}
-	}
-	// Items-only wire shape: a single offer is the degenerate 1-element items
-	// list, each item reflecting its signed Offer back exactly as received at
-	// discovery. The authoritative identity is the reflected offer; the optional
-	// top-level offer_id correlation scalar is left unset.
-	//
-	// ver comes from helpers.ProtocolVersion — the single owner of the protocol
-	// version across all three SDKs — never a literal, so a bump is one edit.
-	req := &forav1.TransactionRequest{
-		Ver:            helpers.ProtocolVersion,
-		IdempotencyKey: key,
-		Requester:      c.cfg.requester,
-		Items: []*forav1.TransactionItem{{
-			Offer: offer.Offer(),
-			AgentAcceptance: &forav1.AgentAcceptance{
-				Signature:          acceptance,
-				SignatureAlgorithm: helpers.AcceptanceSignatureAlgorithm,
-			},
-		}},
-	}
-	if offer.Offer().GetExchange() != "" {
-		requestAcceptance, signErr := helpers.SignRequestAcceptanceWith(ctx, signer, req)
-		if signErr != nil {
-			return nil, &CallError{Kind: CallNotSignable, Op: op, Err: signErr}
-		}
-		req.AgentRequestAcceptance = requestAcceptance
+		return nil, err
 	}
 	resp, err := c.rpc.ExecuteTransaction(ctx, connectrpc.NewRequest(req))
 	if err != nil {
diff --git a/sdk/go/connect/doc.go b/sdk/go/connect/doc.go
index a9c03f6f..1fbe9824 100644
--- a/sdk/go/connect/doc.go
+++ b/sdk/go/connect/doc.go
@@ -1,6 +1,7 @@
 // Package connect is the opt-in Connect-Go CLIENT binding over the transport-neutral
 // sdk/go/core L2 substance. It carries the agent verb set — Discover, Resolve,
-// Execute, ReportUsage, Dispute and the low-tier content Fetch — the account-setup
+// Execute and ExecuteBatch, the Broker purchase BrokerClient.Execute, ReportUsage,
+// Dispute and the low-tier content Fetch — the account-setup
 // verb set — Register and GetAccountStatus — and the publisher verb set —
 // PushResources, RemoveResources and RefreshCatalog — across three constructors:
 // NewClient for an Exchange, NewBrokerClient for a Broker, and NewCatalogClient
diff --git a/sdk/go/connect/gen_client_request_vectors_test.go b/sdk/go/connect/gen_client_request_vectors_test.go
index 764e6442..b80b7f91 100644
--- a/sdk/go/connect/gen_client_request_vectors_test.go
+++ b/sdk/go/connect/gen_client_request_vectors_test.go
@@ -216,6 +216,7 @@ func buildClientRequestVectors(t *testing.T) []clientRequestVector {
 	})
 	out = append(out, executeVector(t, baseOpts))
 	out = append(out, brokerResolveVector(t, baseOpts))
+	out = append(out, brokerExecuteVector(t, baseOpts))
 	out = append(out, catalogVectors(t, baseOpts)...)
 	return out
 }
@@ -374,6 +375,36 @@ func brokerResolveVector(t *testing.T, opts []foraconnect.ClientOption) clientRe
 	}
 }
 
+// brokerExecuteVector captures the relayed purchase. Like execute it BUILDS the whole
+// request, so `ver`, the key and the requester are all the client's own; unlike execute it
+// goes to the Broker's address and the BrokerService method of the same name. The client
+// signs as the directory the requester's domain names, which a Broker requires and the
+// client checks before sending.
+func brokerExecuteVector(t *testing.T, baseOpts []foraconnect.ClientOption) clientRequestVector {
+	t.Helper()
+	sig := newSigningFixture(t)
+	offers := newOfferFixture(t)
+	var seen capturedRequest
+	srv := recordingOrigin(t, &seen)
+	defer srv.Close()
+
+	client := foraconnect.NewBrokerClient(srv.URL, append(append([]foraconnect.ClientOption{}, baseOpts...),
+		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSignatureAgent("https://agent.test"),
+	)...)
+	if _, err := client.Execute(context.Background(), []core.VerifiedOffer{verifyOne(t, offers)},
+		foraconnect.WithIdempotencyKey(pinnedKey)); err != nil {
+		t.Fatalf("broker execute: %v", err)
+	}
+	ver, _ := seen.body["ver"].(string)
+	key, _ := seen.body["idempotency_key"].(string)
+	return clientRequestVector{
+		Name: "broker_execute_key_pinned", Verb: "brokerExecute", Path: seen.path, Ver: ver,
+		IdempotencyKey: pinnedOrMinted("broker_execute_key_pinned", key),
+		RequesterID:    requesterIDOf(seen.body),
+	}
+}
+
 // publishesNothing is an Exchange that publishes neither a terms digest nor a
 // registration schema — the contract's ordinary pass-through case. It stands in
 // for the network read so this corpus records the envelope alone.
diff --git a/sdk/go/connect/purchase.go b/sdk/go/connect/purchase.go
new file mode 100644
index 00000000..9aa3745e
--- /dev/null
+++ b/sdk/go/connect/purchase.go
@@ -0,0 +1,169 @@
+package connect
+
+import (
+	"context"
+	"errors"
+	"fmt"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// purchase is what every purchase verb builds a TransactionRequest from: the
+// agent's identity and custody, the offers it accepts, and the key the action is
+// identified by. The three verbs that buy — Client.Execute, Client.ExecuteBatch
+// and BrokerClient.Execute — differ in which offers they admit and where the
+// request goes, never in how the request is built, so the building lives here
+// once.
+type purchase struct {
+	op        string
+	signer    helpers.Signer
+	requester *forav1.Requester
+	offers    []core.VerifiedOffer
+	opts      []CallOption
+}
+
+// buildTransaction assembles and signs the TransactionRequest for p.
+//
+// Each item reflects its signed Offer back exactly as received at discovery and
+// carries the agent's detached acceptance of that one offer. The request-level
+// AgentRequestAcceptance over the complete ordered item set is attached when
+// every offer names its Exchange; an item without one cannot appear in that
+// payload, which requires a recipient per item. ver comes from
+// helpers.ProtocolVersion — the single owner of the protocol version across all
+// three SDKs — never a literal.
+//
+// Every acceptance covers the offer, the requester and the idempotency key, so a
+// retry that pins the same key reproduces byte-identical acceptance bytes. That
+// is the deliberate-replay semantic, not an accident.
+func buildTransaction(ctx context.Context, p purchase) (*forav1.TransactionRequest, error) {
+	if p.requester == nil {
+		return nil, malformed(p.op, errors.New(
+			"no requester configured; the party that sells resolves who is buying (see WithRequester)"))
+	}
+	if p.signer == nil {
+		// CallNotSignable, matching what Fetch answers for the same missing
+		// holder: a caller branching on the kind sees one condition under one
+		// class, whichever verb met it first.
+		return nil, &CallError{Kind: CallNotSignable, Op: p.op, Err: errors.New(
+			"no signer configured; a purchase carries a detached acceptance signed with the agent's own key (see WithSigner)")}
+	}
+	if len(p.offers) == 0 {
+		return nil, malformed(p.op, errors.New("no offers to buy"))
+	}
+	allAddressed := true
+	for i, offer := range p.offers {
+		// An acceptance floating free of a concrete offer is meaningless, and an
+		// unsigned offer is reachable here: WithVerification(Off) and
+		// RejectedOffer.Unsafe() both mint a VerifiedOffer without a signature check.
+		if offer.Offer().GetSignature() == "" {
+			return nil, malformed(p.op, fmt.Errorf("cannot accept an unsigned offer (item %d)", i))
+		}
+		if offer.Offer().GetExchange() == "" {
+			allAddressed = false
+		}
+	}
+	key, err := idempotencyKeyFor(p.opts, "")
+	if err != nil {
+		return nil, malformed(p.op, err)
+	}
+	req := &forav1.TransactionRequest{
+		Ver:            helpers.ProtocolVersion,
+		IdempotencyKey: key,
+		Requester:      p.requester,
+		Items:          make([]*forav1.TransactionItem, 0, len(p.offers)),
+	}
+	for _, offer := range p.offers {
+		acceptance, signErr := helpers.SignOfferAcceptanceWith(ctx, p.signer, offer.Offer(), p.requester, key)
+		if signErr != nil {
+			return nil, &CallError{Kind: CallNotSignable, Op: p.op, Err: signErr}
+		}
+		req.Items = append(req.Items, &forav1.TransactionItem{
+			Offer: offer.Offer(),
+			AgentAcceptance: &forav1.AgentAcceptance{
+				Signature:          acceptance,
+				SignatureAlgorithm: helpers.AcceptanceSignatureAlgorithm,
+			},
+		})
+	}
+	if allAddressed {
+		requestAcceptance, signErr := helpers.SignRequestAcceptanceWith(ctx, p.signer, req)
+		if signErr != nil {
+			return nil, &CallError{Kind: CallNotSignable, Op: p.op, Err: signErr}
+		}
+		req.AgentRequestAcceptance = requestAcceptance
+	}
+	return req, nil
+}
+
+// requireOneExchange refuses a direct purchase whose offers were issued by more
+// than one Exchange. A direct purchase goes to one Exchange, and that Exchange
+// refuses a request carrying an item addressed to anyone else, so the verdict is
+// already known here. A purchase across Exchanges is what BrokerClient.Execute is
+// for.
+func requireOneExchange(op string, offers []core.VerifiedOffer) error {
+	if len(offers) == 0 {
+		return nil
+	}
+	first := offers[0].Offer().GetExchange()
+	for i, offer := range offers[1:] {
+		if offer.Offer().GetExchange() != first {
+			return malformed(op, fmt.Errorf(
+				"item %d is issued by %q and item 0 by %q; a direct purchase goes to one Exchange "+
+					"(buy across Exchanges with BrokerClient.Execute)",
+				i+1, offer.Offer().GetExchange(), first))
+		}
+	}
+	return nil
+}
+
+// requireRoutable refuses a relayed purchase carrying an offer that names no
+// Exchange. A Broker groups the items by each offer's exchange and dials that
+// Exchange, so an offer without one has nowhere to go.
+func requireRoutable(op string, offers []core.VerifiedOffer) error {
+	for i, offer := range offers {
+		if offer.Offer().GetExchange() == "" {
+			return malformed(op, fmt.Errorf(
+				"item %d names no exchange; a Broker routes each item to the Exchange its offer names", i))
+		}
+	}
+	return nil
+}
+
+// requireRequesterIsSigner refuses a request whose requester.domain is not the
+// host of the WBA directory this client signs as.
+//
+// A Broker verifies the agent's request signature against the key it resolves
+// from the covered Signature-Agent directory, and then requires requester.domain
+// to name that same directory: every Exchange the Broker relays to resolves the
+// agent's acceptance keys from requester.domain, so a mismatch could only be
+// refused there. The Broker refuses it first, with request_auth_failure
+// SIGNATURE_INVALID, and so does this client, before anything is sent.
+//
+// The comparison is the recipient-identity rule: exact, case-folded, with an
+// explicit :443 the same as no port. An unset Signature-Agent names no directory
+// at all, so it fails the comparison too.
+func requireRequesterIsSigner(op string, requester *forav1.Requester, signatureAgent string) error {
+	if signatureAgent == "" {
+		return malformed(op, errors.New(
+			"no Signature-Agent configured; a Broker checks that requester.domain names the directory "+
+				"the request is signed from (see WithSignatureAgent)"))
+	}
+	host, err := helpers.HostOf(signatureAgent)
+	if err != nil {
+		return malformed(op, fmt.Errorf("signature agent %q names no host: %w",
+			helpers.RedactURL(signatureAgent), err))
+	}
+	verdict, err := helpers.CheckAudience(host, requester.GetDomain())
+	if err != nil {
+		return malformed(op, fmt.Errorf("signature agent host %q is not a bare domain: %w", host, err))
+	}
+	if verdict != helpers.AudienceAccepted {
+		return malformed(op, fmt.Errorf(
+			"requester.domain %q is not %q, the host of the directory this client signs as; "+
+				"a Broker refuses the request (request_auth_failure SIGNATURE_INVALID)",
+			requester.GetDomain(), host))
+	}
+	return nil
+}
diff --git a/sdk/go/connect/testdata/client-request-vectors.json b/sdk/go/connect/testdata/client-request-vectors.json
index 162edfb6..c86e2909 100644
--- a/sdk/go/connect/testdata/client-request-vectors.json
+++ b/sdk/go/connect/testdata/client-request-vectors.json
@@ -91,6 +91,15 @@
       "key_minted": false,
       "requester_id": "agent-1"
     },
+    {
+      "name": "broker_execute_key_pinned",
+      "verb": "brokerExecute",
+      "path": "/fora.v1.BrokerService/ExecuteTransaction",
+      "ver": "1.0",
+      "idempotency_key": "idem-pinned-1",
+      "key_minted": false,
+      "requester_id": "agent-1"
+    },
     {
       "name": "push_resources",
       "verb": "pushResources",
diff --git a/sdk/go/connectserver/handler.go b/sdk/go/connectserver/handler.go
index 4c9fe2d9..3bc547dc 100644
--- a/sdk/go/connectserver/handler.go
+++ b/sdk/go/connectserver/handler.go
@@ -34,9 +34,11 @@ func NewExchangeServiceHandler(svc forav1connect.ExchangeServiceHandler, opts ..
 // SDK server face and returns the mount path and handler. It composes the same
 // stack as NewExchangeServiceHandler — request-id outermost, verify at the http
 // seam, validate/error-detail as connect interceptors — over the generated
-// BrokerService handler. Broker relay routes outside the /fora. procedure
-// prefix are the application's own http surface and never pass through this
-// handler; they keep their bespoke verification.
+// BrokerService handler, which carries both Broker methods: Resolve and the
+// relayed purchase, ExecuteTransaction. The verify face authenticates the
+// agent's request signature; the handler implementation owns the checks the
+// contract leaves to the Broker, among them that requester.domain names the
+// directory that signature resolved from.
 func NewBrokerServiceHandler(svc forav1connect.BrokerServiceHandler, opts ...ServerOption) (string, http.Handler) {
 	cfg := resolveServerConfig(opts)
 	path, connectHandler := forav1connect.NewBrokerServiceHandler(svc, cfg.connectHandlerOptions()...)
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 6dc92072..bf50bb1c 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -9,7 +9,7 @@ no I/O can be used on their own.
 | **L0** | `wire.models`, `vocab.*` | generated wire types, from the separate `fora-protocol` distribution (consumed, never rebuilt) |
 | **L1** | **`fora_sdk`** (top level) | stateless, **IO-free** protocol mechanics — RFC 9421/7638 crypto, offer and acceptance signatures, signed URLs, validation. Includes `fora_sdk.core` (transport-neutral: `Verifier`, `VerifiedOffer`, `DiscoveryResult`), `fora_sdk.window` (`Window`) and `fora_sdk.server_verify` (the server side of RFC 9421). Byte-parity-guarded against the `sdk/go` oracle |
 | L2 · I/O | **`fora_sdk.resolvers`** | the only tier that dials the network: Web Bot Auth directories, well-known JWKS and `fora.json`, plus the SSRF-guarded HTTP client. Which faces take that client by default is decided by URL provenance, below — `WellKnownEndpointResolver` is the one request-derived face that still defaults to a plain client |
-| L2 · transport | `fora_sdk.client` (the async Connect-unary JSON client: the agent verbs **`discover` · `execute` · `report_usage` · `dispute` · `fetch`**, the account-setup verbs **`register` · `get_account_status`**, the broker verb **`resolve`** and the publisher verbs **`push_resources` · `remove_resources` · `refresh_catalog`**) · `fora_sdk.sync` (the same faces, blocking) | state is injected, never owned |
+| L2 · transport | `fora_sdk.client` (the async Connect-unary JSON client: the agent verbs **`discover` · `execute` · `report_usage` · `dispute` · `fetch`**, the account-setup verbs **`register` · `get_account_status`**, the broker verbs **`resolve` · `execute`** and the publisher verbs **`push_resources` · `remove_resources` · `refresh_catalog`**) · `fora_sdk.sync` (the same faces, blocking) | state is injected, never owned |
 
 ```sh
 pip install fora-protocol-sdk
@@ -359,7 +359,7 @@ malformed rather than silently ignored. Responses are the generated Pydantic mod
 | Verb | Send | Get back |
 |---|---|---|
 | `discover(query)` | `exchange`, `uris`, optional filters | `DiscoveryResult`: `groups` (one per requested URI, each with `uri`, `result.verified`, `result.rejected`, `absence_reason`), plus `exchange` and `rate_limit`. `verified()` and `rejected()` flatten across groups |
-| `execute(offer, *, idempotency_key=None)` | a `VerifiedOffer` — nothing else is accepted | `TransactionResponse`: `items`, each with `transaction_id`, `billing_id`, `retrieval_endpoint`, `expires_at`, `cost` |
+| `execute(offer, *, idempotency_key=None)` | a `VerifiedOffer`, or a sequence of them issued by one Exchange — nothing else is accepted | `TransactionResponse`: `items`, each with `transaction_id`, `billing_id`, `retrieval_endpoint`, `expires_at`, `cost` |
 | `fetch(signed_url)` | one `retrieval_endpoint` | `Content`: `url`, `mime_type`, `body` |
 | `report_usage(report, *, idempotency_key=None)` | `exchange`, `transaction_id`, `billing_id`, `usage` | `UsageReportResponse`: `report_id`, which a later dispute must cite |
 | `dispute(request, *, idempotency_key=None)` | `exchange`, `transaction_id`, `report_id`, `reason` | `DisputeResponse` |
@@ -384,9 +384,21 @@ every verb, so a caller branches in one place. `NOT_SENT` is worth singling out:
 the client refused before anything left the process, so retrying without changing
 something will fail the same way.
 
-`BrokerClient` carries `resolve` for brokered discovery, and `CatalogClient` carries the
-publisher verbs. Both take the same `ClientConfig`, because a publisher addresses a
-different endpoint with a different key.
+`BrokerClient` carries `resolve` for brokered discovery and `execute` for a brokered
+purchase, and `CatalogClient` carries the publisher verbs. Both take the same
+`ClientConfig`, because a publisher addresses a different endpoint with a different key.
+
+`BrokerClient.execute(offers, *, idempotency_key=None)` buys offers from any number of
+Exchanges in one call and returns a `BrokerTransactionResponse`: `items` in request order,
+`exchanges` (one `ExchangeOutcome` per Exchange contacted) and `totals` (one `Cost` per
+currency, never summed across currencies). The Broker sends one sub-request per Exchange,
+signed with its own key, and your acceptances travel in each body, so every Exchange still
+verifies your consent. An Exchange that refused its whole sub-request is not an error: the
+affected items carry `refusal` with that Exchange's code and typed reason, and the other
+items come back unchanged. The signer must set `signature_agent`, and its directory host
+must be `requester.domain`: a Broker refuses any other pairing, so the client refuses it
+first, as `MALFORMED`. `Client.execute` with offers from more than one Exchange is refused
+the same way; buy those through the Broker.
 
 ### Running against a local Exchange
 
diff --git a/sdk/python/fora_sdk/client/__init__.py b/sdk/python/fora_sdk/client/__init__.py
index f2578ad1..9f1cf31b 100644
--- a/sdk/python/fora_sdk/client/__init__.py
+++ b/sdk/python/fora_sdk/client/__init__.py
@@ -63,7 +63,10 @@
 from .route import EndpointResolver, RegistrationRequirementsReader
 
 if TYPE_CHECKING:
+    from collections.abc import Sequence
+
     from wire.models import (
+        BrokerTransactionResponse,
         DisputeResponse,
         GetAccountStatusResponse,
         PushResourcesResponse,
@@ -231,9 +234,14 @@ async def discover(self, query: RequestMessage) -> DiscoveryResult:
         )
 
     async def execute(
-        self, offer: VerifiedOffer, *, idempotency_key: str | None = None
+        self,
+        offer: VerifiedOffer | Sequence[VerifiedOffer],
+        *,
+        idempotency_key: str | None = None,
     ) -> TransactionResponse:
-        """Commit to a VERIFIED offer and return the transaction response."""
+        """Commit to a VERIFIED offer — or several issued by ONE Exchange, in one request —
+        and return the transaction response. Offers from several Exchanges are refused
+        locally; buy those through :meth:`BrokerClient.execute`."""
         plan = _verbs.plan_execute(self._config, offer, idempotency_key)
         status, body = await self._send(plan)
         return _verbs.finish_execute(plan, status, body)
@@ -365,7 +373,9 @@ class BrokerClient(_Face):
     It takes the same config, but only the parts a discovery call has any use for do
     anything, and one needs care: ``requester`` is REQUIRED, not optional. A Broker
     resolves the calling agent from it and declines a request that names none, so
-    :meth:`resolve` refuses locally rather than spending a round trip to be told.
+    :meth:`resolve` and :meth:`execute` refuse locally rather than spending a round trip to
+    be told. :meth:`execute` also needs ``signer``, whose ``signature_agent`` must name the
+    directory ``requester.domain`` is.
     """
 
     def __init__(
@@ -381,6 +391,24 @@ async def resolve(self, request: RequestMessage) -> DiscoveryResult:
             _verbs.finish_resolve, self._config, plan, status, body
         )
 
+    async def execute(
+        self, offers: Sequence[VerifiedOffer], *, idempotency_key: str | None = None
+    ) -> BrokerTransactionResponse:
+        """Buy VERIFIED offers through the Broker in one call, however many Exchanges issued
+        them (BrokerService.ExecuteTransaction).
+
+        The Broker re-packages the purchase into one sub-request per Exchange, signed with its
+        own key, carrying the agent's acceptances unchanged, and combines the answers. An
+        Exchange that refused its whole sub-request is not an error: each affected item
+        carries ``refusal``. Only the Broker's own refusals raise, and then nothing was bought.
+
+        Needs ``requester`` and a signer whose ``signature_agent`` directory host is
+        ``requester.domain`` — a Broker refuses any other pairing, so this client does first.
+        """
+        plan = _verbs.plan_broker_execute(self._config, offers, idempotency_key)
+        status, body = await self._send(plan)
+        return _verbs.finish_broker_execute(plan, status, body)
+
 
 class CatalogClient(_Face):
     """The publisher-facing Catalog client: push, remove and refresh the catalog entries a
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index c5a875ba..77327b0a 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -17,6 +17,7 @@
 
 from pydantic import BaseModel
 from wire.models import (
+    BrokerTransactionResponse,
     DiscoveryRequest,
     DiscoveryResponse,
     DisputeRequest,
@@ -75,7 +76,7 @@
     validate_request,
 )
 from .._hostref import _redact_userinfo as redact_userinfo
-from ..hosts import is_bare_domain
+from ..hosts import check_audience, host_of, is_bare_domain
 from .errors import CallError, CallErrorKind, malformed, not_sent
 from .route import (
     EndpointResolver,
@@ -84,7 +85,7 @@
 )
 
 if TYPE_CHECKING:
-    from collections.abc import Callable
+    from collections.abc import Callable, Sequence
 
     import httpx
 
@@ -375,18 +376,92 @@ def finish_resolve(cfg: ClientConfig, plan: Plan, status: int, body: str) -> Dis
 # ---------------------------------------------------------------------------
 
 
-def plan_execute(cfg: ClientConfig, offer: VerifiedOffer, idempotency_key: str | None) -> Plan:
-    """Assemble ExecuteTransaction for a VERIFIED offer.
+def plan_execute(
+    cfg: ClientConfig,
+    offer: VerifiedOffer | Sequence[VerifiedOffer],
+    idempotency_key: str | None,
+) -> Plan:
+    """Assemble ExecuteTransaction for one VERIFIED offer, or several issued by ONE Exchange.
+
+    It accepts ONLY VerifiedOffers — the construction token is module-private to the core,
+    so a rejected offer or a raw parsed one cannot be passed. A per-call idempotency key is
+    minted fresh unless one is pinned. It builds the whole TransactionRequest, so it also
+    stamps ``ver`` from ProtocolVersion — the caller neither supplies nor overrides it.
 
-    It accepts ONLY a VerifiedOffer — the construction token is module-private to the
-    core, so a rejected offer or a raw parsed one cannot be passed. A per-call idempotency
-    key is minted fresh unless one is pinned. It builds the whole TransactionRequest, so
-    it also stamps ``ver`` from ProtocolVersion — the caller neither supplies nor
-    overrides it.
+    Several offers must all name the same Exchange: a direct purchase goes to one Exchange,
+    and an Exchange refuses a request carrying an item addressed to anyone else, so a mixed
+    set is refused here. Buying across Exchanges in one call is ``BrokerClient.execute``.
     """
     op = "execute"
+    offers = [offer] if isinstance(offer, VerifiedOffer) else list(offer)
+    _require_one_exchange(op, offers)
+    sent = _build_transaction(cfg, op, offers, idempotency_key)
+    validate_request(op, sent, TransactionRequest, cfg.validation)
+    return _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "ExecuteTransaction"), sent)
+
+
+def plan_broker_execute(
+    cfg: ClientConfig, offers: Sequence[VerifiedOffer], idempotency_key: str | None
+) -> Plan:
+    """Assemble the Broker's ExecuteTransaction: one purchase across any number of Exchanges.
+
+    The request is the one a direct purchase sends — every item with the agent's detached
+    acceptance, one request acceptance over the complete ordered set — and the Broker
+    re-packages it into one sub-request per Exchange, signed with its own key, carrying the
+    agent's acceptances unchanged.
+
+    Refused here, with nothing sent: no requester, no signer, no offers, an unsigned offer,
+    an offer that names no exchange, and a ``requester.domain`` that is not the host of the
+    directory the signer signs as. The last mirrors the Broker's own check, which it refuses
+    with ``request_auth_failure`` SIGNATURE_INVALID.
+    """
+    op = "broker execute"
+    if cfg.requester is None:
+        raise malformed(op, "no requester configured; a Broker resolves who is buying")
+    offers = list(offers)
+    for i, item in enumerate(offers):
+        if _str_field(_offer_wire(item), "exchange") == "":
+            raise malformed(
+                op,
+                f"item {i} names no exchange; a Broker routes each item to the Exchange its "
+                "offer names",
+            )
+    if cfg.signer is not None:
+        _require_requester_is_signer(op, cfg.requester, cfg.signer.signature_agent)
+    sent = _build_transaction(cfg, op, offers, idempotency_key)
+    validate_request(op, sent, TransactionRequest, cfg.validation)
+    return _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "ExecuteTransaction"), sent)
+
+
+def finish_broker_execute(plan: Plan, status: int, body: str) -> BrokerTransactionResponse:
+    """Read the Broker's combined answer.
+
+    An Exchange that refused the Broker's whole sub-request is NOT a failure here: the call
+    succeeds, and each affected item carries the refusal in ``refusal`` while the other
+    Exchanges' items come back unchanged. Only the Broker's own refusals raise.
+    """
+    return decode(plan.op, status, body, BrokerTransactionResponse)  # type: ignore[no-any-return]
+
+
+def _offer_wire(offer: VerifiedOffer) -> dict[str, Any]:
+    return offer.offer if isinstance(offer.offer, dict) else {}
+
+
+def _build_transaction(
+    cfg: ClientConfig, op: str, offers: list[VerifiedOffer], idempotency_key: str | None
+) -> dict[str, Any]:
+    """Build and sign the TransactionRequest every purchase verb sends.
+
+    Each item reflects its signed Offer back exactly as received at discovery and carries the
+    agent's detached acceptance of that one offer. The request acceptance over the complete
+    ordered set is attached when every offer names its Exchange; an item without one cannot
+    appear in that payload, which requires a recipient per item. Every acceptance covers the
+    offer, the requester and the idempotency key, so a retry that pins the same key
+    reproduces byte-identical acceptance bytes. That is the deliberate-replay semantic, not
+    an accident.
+    """
     if cfg.requester is None:
-        raise malformed(op, "no requester configured; an Exchange resolves who is buying from it")
+        raise malformed(op, "no requester configured; the party that sells resolves who is buying")
     if cfg.signer is None:
         # NOT_SIGNABLE, matching what fetch answers for the same missing holder: a caller
         # branching on the kind sees one condition under one class, whichever verb met it
@@ -399,30 +474,44 @@ def plan_execute(cfg: ClientConfig, offer: VerifiedOffer, idempotency_key: str |
                 "with the agent's own key — the same key the request is signed with"
             ),
         )
-    wire = offer.offer if isinstance(offer.offer, dict) else {}
-    offer_sig = wire.get("signature")
-    # An acceptance floating free of a concrete offer is meaningless, and an unsigned
-    # offer is reachable here: Mode.OFF and RejectedOffer.unsafe() both mint a
-    # VerifiedOffer without a signature check.
-    if not isinstance(offer_sig, str) or offer_sig == "":
-        raise malformed(op, "cannot accept an unsigned offer")
+    if not offers:
+        raise malformed(op, "no offers to buy")
+    wires = [_offer_wire(o) for o in offers]
+    offer_sigs: list[str] = []
+    for wire in wires:
+        offer_sig = wire.get("signature")
+        # An acceptance floating free of a concrete offer is meaningless, and an unsigned
+        # offer is reachable here: Mode.OFF and RejectedOffer.unsafe() both mint a
+        # VerifiedOffer without a signature check.
+        if not isinstance(offer_sig, str) or offer_sig == "":
+            raise malformed(op, "cannot accept an unsigned offer")
+        offer_sigs.append(offer_sig)
     key = idempotency_key or generate_idempotency_key()
-    # The acceptance covers the offer, the requester and the idempotency key, so a retry
-    # that pins the same key reproduces byte-identical acceptance bytes. That is the
-    # deliberate-replay semantic, not an accident.
     requester_id = _str_field(cfg.requester, "id")
     requester_domain = _str_field(cfg.requester, "domain")
-    exchange = _str_field(wire, "exchange")
-    request_items = [(offer_sig, exchange)]
+    request_items = [
+        (sig, _str_field(w, "exchange")) for sig, w in zip(offer_sigs, wires, strict=True)
+    ]
+    items: list[dict[str, Any]] = []
     request_acceptance: dict[str, Any] | None = None
     try:
-        signature, _algorithm = cfg.signer.sign_offer_acceptance(
-            offer_sig=offer_sig,
-            requester_id=requester_id,
-            requester_domain=requester_domain,
-            idempotency_key=key,
-        )
-        if exchange != "":
+        for wire, offer_sig in zip(wires, offer_sigs, strict=True):
+            signature, _algorithm = cfg.signer.sign_offer_acceptance(
+                offer_sig=offer_sig,
+                requester_id=requester_id,
+                requester_domain=requester_domain,
+                idempotency_key=key,
+            )
+            items.append(
+                {
+                    "offer": wire,
+                    "agent_acceptance": {
+                        "signature": signature,
+                        "signature_algorithm": ACCEPTANCE_SIGNATURE_ALGORITHM,
+                    },
+                }
+            )
+        if all(exchange != "" for _sig, exchange in request_items):
             request_signature, _request_algorithm = cfg.signer.sign_request_acceptance(
                 items=request_items,
                 requester_id=requester_id,
@@ -431,7 +520,9 @@ def plan_execute(cfg: ClientConfig, offer: VerifiedOffer, idempotency_key: str |
             )
             request_acceptance = {
                 "payload": {
-                    "items": [{"offer_sig": offer_sig, "exchange": exchange}],
+                    "items": [
+                        {"offer_sig": sig, "exchange": exchange} for sig, exchange in request_items
+                    ],
                     "requester_id": requester_id,
                     "requester_domain": requester_domain,
                     "idempotency_key": key,
@@ -441,28 +532,65 @@ def plan_execute(cfg: ClientConfig, offer: VerifiedOffer, idempotency_key: str |
             }
     except Exception as exc:  # custody can fail any way it likes
         raise CallError(CallErrorKind.NOT_SIGNABLE, op, cause=exc) from exc
-    # Items-only wire shape: a single offer is the degenerate 1-element items list, each
-    # item reflecting its signed Offer back exactly as received at discovery. The
+    # Items-only wire shape: a single offer is the degenerate 1-element items list. The
     # authoritative identity is the reflected offer; the optional top-level offer_id
     # correlation scalar is left unset.
     sent: dict[str, Any] = {
         "ver": ProtocolVersion,
         "idempotency_key": key,
         "requester": cfg.requester,
-        "items": [
-            {
-                "offer": wire,
-                "agent_acceptance": {
-                    "signature": signature,
-                    "signature_algorithm": ACCEPTANCE_SIGNATURE_ALGORITHM,
-                },
-            }
-        ],
+        "items": items,
     }
     if request_acceptance is not None:
         sent["agent_request_acceptance"] = request_acceptance
-    validate_request(op, sent, TransactionRequest, cfg.validation)
-    return _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "ExecuteTransaction"), sent)
+    return sent
+
+
+def _require_one_exchange(op: str, offers: list[VerifiedOffer]) -> None:
+    """Refuse a direct purchase whose offers were issued by more than one Exchange."""
+    if not offers:
+        return
+    first = _str_field(_offer_wire(offers[0]), "exchange")
+    for i, item in enumerate(offers[1:], start=1):
+        other = _str_field(_offer_wire(item), "exchange")
+        if other != first:
+            raise malformed(
+                op,
+                f"item {i} is issued by {other!r} and item 0 by {first!r}; a direct purchase "
+                "goes to one Exchange (buy across Exchanges with BrokerClient.execute)",
+            )
+
+
+def _require_requester_is_signer(op: str, requester: dict[str, Any], signature_agent: str) -> None:
+    """Refuse a request whose ``requester.domain`` is not the host of the WBA directory the
+    signer signs as.
+
+    A Broker verifies the request signature against the key it resolves from the covered
+    Signature-Agent directory and requires ``requester.domain`` to name that directory:
+    every Exchange it relays to resolves the agent's acceptance keys from requester.domain.
+    The comparison is the recipient-identity rule — exact, case-folded, an explicit :443
+    the same as no port. An empty Signature-Agent names no directory, so it fails too.
+    """
+    if signature_agent == "":
+        raise malformed(
+            op,
+            "no Signature-Agent configured; a Broker checks that requester.domain names the "
+            "directory the request is signed from (set signature_agent on the signer)",
+        )
+    try:
+        host = host_of(signature_agent)
+        verdict = check_audience(host, _str_field(requester, "domain"))
+    except ValueError as exc:
+        raise malformed(
+            op, f"signature agent {redact_userinfo(signature_agent)!r} names no usable host"
+        ) from exc
+    if verdict != "accepted":
+        raise malformed(
+            op,
+            f"requester.domain {_str_field(requester, 'domain')!r} is not {host!r}, the host "
+            "of the directory this client signs as; a Broker refuses the request "
+            "(request_auth_failure SIGNATURE_INVALID)",
+        )
 
 
 def finish_execute(plan: Plan, status: int, body: str) -> TransactionResponse:
diff --git a/sdk/python/fora_sdk/signing_transport.py b/sdk/python/fora_sdk/signing_transport.py
index 94190bc2..af82b3b2 100644
--- a/sdk/python/fora_sdk/signing_transport.py
+++ b/sdk/python/fora_sdk/signing_transport.py
@@ -102,6 +102,14 @@ def __init__(
         # deterministic bytes. sign_outbound refuses an empty nonce.
         self._nonce: Callable[[], str] = _new_nonce
 
+    @property
+    def signature_agent(self) -> str:
+        """The WBA directory this transport signs as — the Signature-Agent value, possibly
+        empty. Read-only: a relayed purchase checks that ``requester.domain`` names this
+        directory's host, because a Broker refuses a request whose requester is not the
+        directory its signature resolved from."""
+        return self._signature_agent
+
     def sign_offer_acceptance(
         self,
         *,
diff --git a/sdk/python/fora_sdk/sync/__init__.py b/sdk/python/fora_sdk/sync/__init__.py
index 81142cd3..cff47e03 100644
--- a/sdk/python/fora_sdk/sync/__init__.py
+++ b/sdk/python/fora_sdk/sync/__init__.py
@@ -39,7 +39,10 @@
 from fora_sdk.resolvers import _ssrf, guarded_client
 
 if TYPE_CHECKING:
+    from collections.abc import Sequence
+
     from wire.models import (
+        BrokerTransactionResponse,
         DisputeResponse,
         GetAccountStatusResponse,
         PushResourcesResponse,
@@ -159,7 +162,10 @@ def discover(self, query: RequestMessage) -> DiscoveryResult:
         return _verbs.finish_discover(self._config, plan, status, body)
 
     def execute(
-        self, offer: VerifiedOffer, *, idempotency_key: str | None = None
+        self,
+        offer: VerifiedOffer | Sequence[VerifiedOffer],
+        *,
+        idempotency_key: str | None = None,
     ) -> TransactionResponse:
         plan = _verbs.plan_execute(self._config, offer, idempotency_key)
         status, body = self._send(plan)
@@ -248,6 +254,13 @@ def resolve(self, request: RequestMessage) -> DiscoveryResult:
         status, body = self._send(plan)
         return _verbs.finish_resolve(self._config, plan, status, body)
 
+    def execute(
+        self, offers: Sequence[VerifiedOffer], *, idempotency_key: str | None = None
+    ) -> BrokerTransactionResponse:
+        plan = _verbs.plan_broker_execute(self._config, offers, idempotency_key)
+        status, body = self._send(plan)
+        return _verbs.finish_broker_execute(plan, status, body)
+
 
 class CatalogClient(_Face):
     """The blocking Catalog client. See :class:`fora_sdk.client.CatalogClient`."""
diff --git a/sdk/python/tests/test_broker_execute.py b/sdk/python/tests/test_broker_execute.py
new file mode 100644
index 00000000..5936eaaa
--- /dev/null
+++ b/sdk/python/tests/test_broker_execute.py
@@ -0,0 +1,316 @@
+"""BrokerClient.execute and the batch form of Client.execute, through the public faces.
+
+The peer is :class:`signed_peer.SignedPeer`: it runs the SDK's own server-side verifier on
+every request and refuses one that does not verify, so a passing test proves a Broker
+would have authenticated the call, not only that bytes were sent. Behind the verifier it
+answers the combined response a relaying Broker hands back. What the client owns —
+building and signing the request, the local refusals, decoding the answer — is what these
+tests assert. Mirrors sdk/go/connect/broker_execute_test.go.
+"""
+
+from __future__ import annotations
+
+import base64
+import json
+from typing import Any
+
+import httpx
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from signed_peer import SignedPeer, envelope_response
+from test_client import AGENT_SEED, FACES, REQUESTER, Face, _config
+
+import fora_sdk.sync as sync_client
+from fora_sdk.client import BrokerClient, Client, ClientConfig
+from fora_sdk.client.errors import CallError, CallErrorKind
+from fora_sdk.core import (
+    Mode,
+    StaticOfferKeyResolver,
+    Verifier,
+    sign_offer_jcs,
+    verify_offer_acceptance_jcs,
+    verify_request_acceptance_jcs,
+)
+from fora_sdk.keyresolver import StaticKeyResolver
+from fora_sdk.signing_transport import SigningTransport
+
+_IDS = [f.name for f in FACES]
+_KEYID = "agent.v1"
+_DIRECTORY = "https://agent.test"
+_AGENT_PUBLIC = Ed25519PrivateKey.from_private_bytes(AGENT_SEED).public_key().public_bytes_raw()
+_NOW = 1_700_000_000
+
+
+def _agent_keys(_signature_agent: str) -> StaticKeyResolver:
+    return StaticKeyResolver({_KEYID: _AGENT_PUBLIC})
+
+
+def _signer(directory: str = _DIRECTORY) -> SigningTransport:
+    return SigningTransport(signer_seed=AGENT_SEED, keyid=_KEYID, signature_agent=directory)
+
+
+def _broker_config(**overrides: Any) -> ClientConfig:
+    return _config(**{"base_url": "https://broker.test", "signer": _signer(), **overrides})
+
+
+def _offer(offer_id: str, exchange: str) -> Any:
+    """An offer issued by ``exchange``, signed by that Exchange's key and verified the way a
+    client that resolved that key would."""
+    seed = bytes([len(exchange)]) * 32
+    offer: dict[str, Any] = {
+        "offer_id": offer_id,
+        "exchange": exchange,
+        "expires_at": "2099-01-01T00:00:00Z",
+    }
+    signature, algorithm = sign_offer_jcs(seed=seed, offer=offer)
+    public = Ed25519PrivateKey.from_private_bytes(seed).public_key().public_bytes_raw()
+    verifier = Verifier(
+        mode=Mode.STRICT, resolver=StaticOfferKeyResolver({exchange: public}), now=lambda: _NOW
+    )
+    result = verifier.sort([{**offer, "signature": signature, "signature_algorithm": algorithm}])
+    assert result.verified, result.rejected
+    return result.verified[0]
+
+
+def _broker(face: Face, config: ClientConfig, peer: SignedPeer) -> Any:
+    if face.name == "async":
+        return BrokerClient(config, http=peer.async_())
+    return sync_client.BrokerClient(config, http=peer.sync())
+
+
+def _answer(payload: dict[str, Any]) -> Any:
+    return lambda _request: httpx.Response(200, json=payload)
+
+
+_MIXED_ANSWER: dict[str, Any] = {
+    "ver": "1.0",
+    "items": [
+        {
+            "offer_id": "a1",
+            "transaction_id": "tx-a1",
+            "cost": {"amount": "1.25", "currency": "USD"},
+        },
+        {
+            "offer_id": "b1",
+            "refusal": {
+                "exchange": "exchange-b.test",
+                "code": "permission_denied",
+                "detail": {
+                    "domain": "fora.v1.ExchangeService",
+                    "message": "no account",
+                    "transaction_denial": {"reason": "DENIAL_REASON_ACCOUNT_NOT_REGISTERED"},
+                },
+            },
+        },
+        {
+            "offer_id": "a2",
+            "transaction_id": "tx-a2",
+            "cost": {"amount": "1.25", "currency": "EUR"},
+        },
+    ],
+    "exchanges": [
+        {"exchange": "exchange-a.test", "offer_ids": ["a1", "a2"], "agent_identity_hash": "h"},
+        {"exchange": "exchange-b.test", "offer_ids": ["b1"]},
+    ],
+    "totals": [{"amount": "1.25", "currency": "USD"}, {"amount": "1.25", "currency": "EUR"}],
+}
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_mixed_batch_is_one_signed_request_and_the_combined_answer_decodes(face: Face) -> None:
+    offers = [
+        _offer("a1", "exchange-a.test"),
+        _offer("b1", "exchange-b.test"),
+        _offer("a2", "exchange-a.test"),
+    ]
+    peer = SignedPeer(keys=_agent_keys, answer=_answer(_MIXED_ANSWER))
+
+    resp = face.run(_broker(face, _broker_config(), peer).execute(offers, idempotency_key="k-1"))
+
+    received = peer.only()
+    assert received.verdict.valid
+    assert (
+        str(received.request.url) == "https://broker.test/fora.v1.BrokerService/ExecuteTransaction"
+    )
+    body = json.loads(received.request.content)
+    assert body["ver"] == "1.0"
+    assert body["idempotency_key"] == "k-1"
+    assert body["requester"] == REQUESTER
+    assert [item["offer"]["offer_id"] for item in body["items"]] == ["a1", "b1", "a2"]
+    pub = base64.b64encode(_AGENT_PUBLIC).decode()
+    for item in body["items"]:
+        assert verify_offer_acceptance_jcs(
+            pubkey_b64=pub,
+            signature_hex=item["agent_acceptance"]["signature"],
+            offer_sig=item["offer"]["signature"],
+            requester_id=REQUESTER["id"],
+            requester_domain=REQUESTER["domain"],
+            idempotency_key="k-1",
+        )
+    # One request acceptance over the complete ordered set, which every Exchange the Broker
+    # relays to checks its own projection against.
+    signed_items = [(i["offer"]["signature"], i["offer"]["exchange"]) for i in body["items"]]
+    acceptance = body["agent_request_acceptance"]
+    assert [(i["offer_sig"], i["exchange"]) for i in acceptance["payload"]["items"]] == signed_items
+    assert verify_request_acceptance_jcs(
+        pubkey_b64=pub,
+        signature_hex=acceptance["signature"],
+        items=signed_items,
+        requester_id=REQUESTER["id"],
+        requester_domain=REQUESTER["domain"],
+        idempotency_key="k-1",
+    )
+
+    items = resp.items
+    assert items[0].transaction_id == "tx-a1"
+    assert items[0].refusal is None
+    refusal = items[1].refusal
+    assert refusal is not None
+    assert refusal.code == "permission_denied"
+    assert refusal.exchange == "exchange-b.test"
+    assert refusal.detail.transaction_denial.reason.value == "DENIAL_REASON_ACCOUNT_NOT_REGISTERED"
+    assert items[2].transaction_id == "tx-a2"
+    # Per-currency totals stay apart: never summed across currencies.
+    assert [(c.currency, c.amount) for c in resp.totals] == [("USD", "1.25"), ("EUR", "1.25")]
+    assert [o.exchange for o in resp.exchanges] == ["exchange-a.test", "exchange-b.test"]
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_single_offer_is_the_one_item_purchase(face: Face) -> None:
+    peer = SignedPeer(keys=_agent_keys, answer=_answer({"ver": "1.0"}))
+
+    face.run(_broker(face, _broker_config(), peer).execute([_offer("a1", "exchange-a.test")]))
+
+    body = json.loads(peer.only().request.content)
+    assert len(body["items"]) == 1
+    assert body["idempotency_key"]
+    assert "agent_request_acceptance" in body
+
+
+def _unaddressed() -> Any:
+    offer = {"offer_id": "x", "expires_at": "2099-01-01T00:00:00Z", "signature": "ab"}
+    off = Verifier(mode=Mode.OFF, resolver=StaticOfferKeyResolver({}), now=lambda: _NOW)
+    return off.sort([offer]).verified[0]
+
+
+_LOCAL_REFUSALS: list[tuple[str, dict[str, Any], str, CallErrorKind]] = [
+    (
+        "requester domain is not the signing directory",
+        {"requester": {**REQUESTER, "domain": "someone-else.test"}},
+        "offers",
+        CallErrorKind.MALFORMED,
+    ),
+    (
+        "no signature agent",
+        {"signer": SigningTransport(signer_seed=AGENT_SEED, keyid=_KEYID)},
+        "offers",
+        CallErrorKind.MALFORMED,
+    ),
+    ("no requester", {"requester": None}, "offers", CallErrorKind.MALFORMED),
+    ("no signer", {"signer": None}, "offers", CallErrorKind.NOT_SIGNABLE),
+    ("no offers", {}, "none", CallErrorKind.MALFORMED),
+    ("offer names no exchange", {"validation": "off"}, "unaddressed", CallErrorKind.MALFORMED),
+]
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize(
+    ("name", "overrides", "which", "kind"), _LOCAL_REFUSALS, ids=[r[0] for r in _LOCAL_REFUSALS]
+)
+def test_every_precondition_is_refused_before_sending(
+    face: Face, name: str, overrides: dict[str, Any], which: str, kind: CallErrorKind
+) -> None:
+    del name
+    offers = {
+        "offers": [_offer("a1", "exchange-a.test")],
+        "none": [],
+        "unaddressed": [_unaddressed()],
+    }[which]
+    peer = SignedPeer(keys=_agent_keys)
+
+    with pytest.raises(CallError) as caught:
+        face.run(_broker(face, _broker_config(**overrides), peer).execute(offers))
+
+    assert caught.value.kind is kind
+    assert peer.seen == [], "the Broker was contacted; this refusal must be local"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_explicit_443_and_case_are_the_same_directory(face: Face) -> None:
+    peer = SignedPeer(keys=_agent_keys, answer=_answer({"ver": "1.0"}))
+    config = _broker_config(signer=_signer("https://AGENT.test:443/.well-known/x"))
+
+    face.run(_broker(face, config, peer).execute([_offer("a1", "exchange-a.test")]))
+
+    assert peer.only().verdict.valid
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_the_brokers_own_refusal_is_a_call_error_with_its_typed_reason(face: Face) -> None:
+    refused = envelope_response(
+        401,
+        {
+            "code": "unauthenticated",
+            "message": "requester mismatch",
+            "details": [
+                {
+                    "type": "fora.v1.ErrorDetail",
+                    "debug": {
+                        "domain": "fora.v1.BrokerService",
+                        "requestAuthFailure": {
+                            "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID"
+                        },
+                    },
+                }
+            ],
+        },
+    )
+    peer = SignedPeer(keys=_agent_keys, answer=lambda _request: refused)
+
+    with pytest.raises(CallError) as caught:
+        face.run(_broker(face, _broker_config(), peer).execute([_offer("a1", "exchange-a.test")]))
+
+    detail = caught.value.detail
+    assert detail is not None
+    assert detail.request_auth_failure is not None
+    assert (
+        detail.request_auth_failure.reason.value == "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID"
+    )
+
+
+# ---------------------------------------------------------------------------
+# Client.execute: the batch form at one Exchange
+# ---------------------------------------------------------------------------
+
+
+def _client(face: Face, config: ClientConfig, peer: SignedPeer) -> Any:
+    if face.name == "async":
+        return Client(config, http=peer.async_())
+    return sync_client.Client(config, http=peer.sync())
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_client_execute_buys_several_offers_from_one_exchange(face: Face) -> None:
+    peer = SignedPeer(keys=_agent_keys, answer=_answer({"ver": "1.0"}))
+    offers = [_offer("o1", "exchange.test"), _offer("o2", "exchange.test")]
+
+    face.run(_client(face, _config(), peer).execute(offers, idempotency_key="k-2"))
+
+    received = peer.only()
+    assert str(received.request.url).endswith("/fora.v1.ExchangeService/ExecuteTransaction")
+    body = json.loads(received.request.content)
+    assert [i["offer"]["offer_id"] for i in body["items"]] == ["o1", "o2"]
+    assert len(body["agent_request_acceptance"]["payload"]["items"]) == 2
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_client_execute_refuses_offers_from_several_exchanges(face: Face) -> None:
+    peer = SignedPeer(keys=_agent_keys)
+    offers = [_offer("o1", "exchange.test"), _offer("o2", "exchange-b.test")]
+
+    with pytest.raises(CallError) as caught:
+        face.run(_client(face, _config(), peer).execute(offers))
+
+    assert caught.value.kind is CallErrorKind.MALFORMED
+    assert "BrokerClient.execute" in str(caught.value)
+    assert peer.seen == []
diff --git a/sdk/python/tests/test_client_request_parity.py b/sdk/python/tests/test_client_request_parity.py
index c6eaef95..28a8a957 100644
--- a/sdk/python/tests/test_client_request_parity.py
+++ b/sdk/python/tests/test_client_request_parity.py
@@ -140,6 +140,15 @@ def _call(name: str) -> httpx.Request:
         asyncio.run(Client(config, http=http).get_account_status({"exchange": _ISSUER}))
     elif name == "resolve":
         asyncio.run(BrokerClient(config, http=http).resolve({}))
+    elif name.startswith("broker_execute"):
+        # A Broker requires requester.domain to name the directory the request is signed
+        # from, and the client refuses any other pairing before sending.
+        config.signer = SigningTransport(
+            signer_seed=_AGENT_SEED, keyid="agent.v1", signature_agent="https://agent.test"
+        )
+        asyncio.run(
+            BrokerClient(config, http=http).execute([_verified_offer()], idempotency_key=_PINNED)
+        )
     elif name.startswith("push_resources"):
         push: dict[str, Any] = {
             "exchange": "exchange.test",
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index 66d3c41d..0c458429 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -28,10 +28,11 @@ import {
 } from "../src/acceptance.ts";
 import { registrationFailureDetail } from "../src/errordetail.ts";
 import { redactUserinfo } from "../src/host-ref.ts";
-import { isBareDomain } from "../src/hosts.ts";
+import { checkAudience, hostOf, isBareDomain } from "../src/hosts.ts";
 import { generateIdempotencyKey } from "../src/idempotency.ts";
 import { ProtocolVersion } from "../src/wire.ts";
 import {
+	BrokerTransactionResponseSchema,
 	DiscoveryRequestSchema,
 	DiscoveryResponseSchema,
 	DisputeRequestSchema,
@@ -221,6 +222,10 @@ export interface CallOptions {
  * ergonomics.
  */
 export type TransactionResponse = z.infer<typeof TransactionResponseSchema>;
+/** The Broker's combined answer to a relayed purchase: one result item per request item
+ * in request order (an Exchange's refusal of its whole sub-request rides on each affected
+ * item as `refusal`), one outcome per Exchange contacted, and per-currency totals. */
+export type BrokerTransactionResponse = z.infer<typeof BrokerTransactionResponseSchema>;
 /** The answer to a usage report; carries the `report_id` a dispute is filed against. */
 export type UsageReportResponse = z.infer<typeof UsageReportResponseSchema>;
 /** The answer to a dispute. */
@@ -229,7 +234,11 @@ export type DisputeResponse = z.infer<typeof DisputeResponseSchema>;
 /** The agent-facing Exchange client. */
 export interface Client {
 	discover(query: Record<string, unknown>): Promise<DiscoveryResult>;
-	execute(offer: VerifiedOffer, opts?: CallOptions): Promise<TransactionResponse>;
+	/** Buy one offer, or several issued by ONE Exchange, in one request. */
+	execute(
+		offer: VerifiedOffer | readonly VerifiedOffer[],
+		opts?: CallOptions,
+	): Promise<TransactionResponse>;
 	reportUsage(
 		report: Record<string, unknown>,
 		opts?: CallOptions,
@@ -248,6 +257,12 @@ export interface Client {
 /** The Broker client. */
 export interface BrokerClient {
 	resolve(request: Record<string, unknown>): Promise<DiscoveryResult>;
+	/** Buy offers from any number of Exchanges in one call; the Broker re-packages the
+	 * purchase into one sub-request per Exchange (BrokerService.ExecuteTransaction). */
+	execute(
+		offers: readonly VerifiedOffer[],
+		opts?: CallOptions,
+	): Promise<BrokerTransactionResponse>;
 }
 
 // resolved holds what both faces are built from, so the exchange and broker clients
@@ -355,14 +370,20 @@ export function createClient(baseURL: string, options: ClientOptions = {}): Clie
  * fan-out returns offers minted by different Exchanges, so inject a resolver that
  * resolves each issuing Exchange's own key. And `requester` is REQUIRED, not optional: a
  * Broker resolves the calling agent from it and declines a request naming none, so
- * resolve refuses locally rather than spending a round trip to be told.
+ * resolve and execute refuse locally rather than spending a round trip to be told.
+ * execute also needs `signer` and `signatureAgent`: a relayed purchase carries
+ * acceptances signed with the agent's key, and a Broker refuses a requester.domain that
+ * does not name the directory the request is signed from.
  */
 export function createBrokerClient(
 	baseURL: string,
 	options: ClientOptions = {},
 ): BrokerClient {
 	const r = resolve(options);
-	return { resolve: (request) => brokerResolve(r, baseURL, request) };
+	return {
+		resolve: (request) => brokerResolve(r, baseURL, request),
+		execute: (offers, opts) => brokerExecute(r, baseURL, offers, opts ?? {}),
+	};
 }
 
 // ---------------------------------------------------------------------------
@@ -538,20 +559,128 @@ async function brokerResolve(
 }
 
 /**
- * execute commits to a VERIFIED offer and returns the transaction response.
+ * execute commits to one VERIFIED offer, or several issued by ONE Exchange, and returns
+ * the transaction response.
  *
- * It accepts ONLY a VerifiedOffer — the brand is module-private to the core, so passing a
- * rejected offer or a raw parsed one is a COMPILE error. A per-call idempotency key is
- * minted fresh unless one is pinned. execute builds the whole TransactionRequest, so it
- * also stamps `ver` from ProtocolVersion — the caller neither supplies nor overrides it.
+ * It accepts ONLY VerifiedOffer values — the brand is module-private to the core, so
+ * passing a rejected offer or a raw parsed one is a COMPILE error. A per-call idempotency
+ * key is minted fresh unless one is pinned. execute builds the whole TransactionRequest,
+ * so it also stamps `ver` from ProtocolVersion — the caller neither supplies nor
+ * overrides it.
+ *
+ * Items-only wire shape: a single offer is the degenerate 1-element items list. Several
+ * offers must all name the same Exchange: a direct purchase goes to one Exchange, and an
+ * Exchange refuses a request carrying an item addressed to anyone else, so a mixed set is
+ * refused locally as malformed. Buying across Exchanges in one call is
+ * BrokerClient.execute.
  */
 async function execute(
 	r: Resolved,
 	baseURL: string,
-	offer: VerifiedOffer,
+	offer: VerifiedOffer | readonly VerifiedOffer[],
 	opts: CallOptions,
 ): Promise<TransactionResponse> {
 	const op = "execute";
+	const offers: readonly VerifiedOffer[] = isOfferList(offer) ? offer : [offer];
+	requireOneExchange(op, offers);
+	const request = await buildTransaction(r, op, offers, opts);
+	validateRequest(op, request, TransactionRequestSchema, r.opts.validation ?? "strict");
+	const raw = await call(
+		r,
+		op,
+		baseURL,
+		EXCHANGE_SERVICE,
+		"ExecuteTransaction",
+		request,
+		false,
+	);
+	return parseMessage(op, raw, TransactionResponseSchema);
+}
+
+/**
+ * brokerExecute buys VERIFIED offers through the Broker in one call, however many
+ * Exchanges issued them (BrokerService.ExecuteTransaction).
+ *
+ * The client builds the same TransactionRequest a direct purchase sends — every item with
+ * the agent's detached AgentAcceptance, and one AgentRequestAcceptance over the complete
+ * ordered set — and stamps `ver` and the configured requester. The Broker re-packages it:
+ * it groups the items by each offer's exchange, sends one sub-request per Exchange signed
+ * with its own key, and combines the answers. The acceptances travel in each sub-request
+ * body, so every Exchange still verifies the agent's consent. The Broker forwards the
+ * idempotency key unchanged to every Exchange, so a retry with the same key is answered
+ * from each Exchange's stored result.
+ *
+ * Refused locally, with nothing sent: no requester, no offers, an unsigned offer, an
+ * offer that names no exchange, and a requester.domain that is not the host of the
+ * directory this client signs as (all malformed); no signer (not_signable). The last
+ * mirrors the Broker's own check, which it refuses with request_auth_failure
+ * SIGNATURE_INVALID.
+ *
+ * An Exchange that refused the Broker's whole sub-request is NOT an error here: the call
+ * succeeds, and each affected item carries the refusal in `refusal` while the other
+ * Exchanges' items come back unchanged. Only the Broker's own refusals throw, and then
+ * nothing was bought.
+ */
+async function brokerExecute(
+	r: Resolved,
+	baseURL: string,
+	offers: readonly VerifiedOffer[],
+	opts: CallOptions,
+): Promise<BrokerTransactionResponse> {
+	const op = "broker execute";
+	if (r.opts.requester === undefined) {
+		throw malformed(
+			op,
+			new Error("no requester configured; a Broker resolves who is buying"),
+		);
+	}
+	requireRoutable(op, offers);
+	requireRequesterIsSigner(op, r.opts.requester, r.opts.signatureAgent ?? "");
+	const request = await buildTransaction(r, op, offers, opts);
+	validateRequest(op, request, TransactionRequestSchema, r.opts.validation ?? "strict");
+	const raw = await call(
+		r,
+		op,
+		baseURL,
+		BROKER_SERVICE,
+		"ExecuteTransaction",
+		request,
+		false,
+	);
+	return parseMessage(op, raw, BrokerTransactionResponseSchema);
+}
+
+function isOfferList(
+	offer: VerifiedOffer | readonly VerifiedOffer[],
+): offer is readonly VerifiedOffer[] {
+	return Array.isArray(offer);
+}
+
+function offerRecord(offer: VerifiedOffer): Record<string, unknown> {
+	return offer.offer as Record<string, unknown>;
+}
+
+/**
+ * buildTransaction assembles and signs the TransactionRequest for a purchase. The verbs
+ * that buy — execute and BrokerClient.execute — differ in which offers they admit and
+ * where the request goes, never in how the request is built, so the building lives here
+ * once.
+ *
+ * Each item reflects its signed Offer back exactly as received at discovery and carries
+ * the agent's detached acceptance of that one offer. The request-level acceptance over
+ * the complete ordered item set is attached when every offer names its Exchange; an item
+ * without one cannot appear in that payload, which requires a recipient per item.
+ *
+ * Every acceptance covers the offer, the requester and the idempotency key, so a retry
+ * that pins the same key reproduces byte-identical acceptance bytes. That is the
+ * deliberate-replay semantic, not an accident.
+ */
+async function buildTransaction(
+	r: Resolved,
+	op: string,
+	offers: readonly VerifiedOffer[],
+	opts: CallOptions,
+): Promise<Record<string, unknown>> {
 	if (r.opts.requester === undefined) {
 		throw malformed(
 			op,
@@ -570,14 +699,20 @@ async function execute(
 			),
 		});
 	}
-	const wire = offer.offer as Record<string, unknown>;
-	const offerSig = typeof wire["signature"] === "string" ? wire["signature"] : "";
-	// An acceptance floating free of a concrete offer is meaningless, and an unsigned
-	// offer is reachable here: verification "off" and RejectedOffer.unsafe() both mint a
-	// VerifiedOffer without a signature check.
-	if (offerSig === "") {
-		throw malformed(op, new Error("cannot accept an unsigned offer"));
+	if (offers.length === 0) {
+		throw malformed(op, new Error("no offers to buy"));
 	}
+	const wires = offers.map(offerRecord);
+	const requestItems = wires.map((wire, i) => {
+		const offerSig = typeof wire["signature"] === "string" ? wire["signature"] : "";
+		// An acceptance floating free of a concrete offer is meaningless, and an unsigned
+		// offer is reachable here: verification "off" and RejectedOffer.unsafe() both mint
+		// a VerifiedOffer without a signature check.
+		if (offerSig === "") {
+			throw malformed(op, new Error(`cannot accept an unsigned offer (item ${i})`));
+		}
+		return { offerSig, exchange: stringField(wire, "exchange") };
+	});
 	// `??` would take an EMPTY pinned key as a value and send it, which fails the
 	// message's own min(1). An empty string is the absence of a key, as Go and Python
 	// both read it.
@@ -588,78 +723,147 @@ async function execute(
 	const requester = r.opts.requester;
 	const requesterId = stringField(requester, "id");
 	const requesterDomain = stringField(requester, "domain");
-	const requestItems = [{ offerSig, exchange: stringField(wire, "exchange") }];
-	// The acceptance covers the offer, the requester and the idempotency key, so a retry
-	// that pins the same key reproduces byte-identical acceptance bytes. That is the
-	// deliberate-replay semantic, not an accident.
-	let signature: string;
+	const privKey = r.opts.signer.privKey;
+	let signatures: string[];
+	let requestSignature: string | undefined;
 	try {
-		signature = await signOfferAcceptance(
-			{
-				offerSig,
-				requesterId,
-				requesterDomain,
-				idempotencyKey: key,
-			},
-			r.opts.signer.privKey,
+		signatures = await Promise.all(
+			requestItems.map((item) =>
+				signOfferAcceptance(
+					{
+						offerSig: item.offerSig,
+						requesterId,
+						requesterDomain,
+						idempotencyKey: key,
+					},
+					privKey,
+				),
+			),
 		);
-	} catch (cause) {
-		throw new ForaCallError({ kind: "not_signable", op, cause });
-	}
-	let requestSignature: string | undefined;
-	if (requestItems[0]!.exchange !== "") {
-		try {
+		if (requestItems.every((item) => item.exchange !== "")) {
 			requestSignature = await signRequestAcceptance(
 				{ items: requestItems, requesterId, requesterDomain, idempotencyKey: key },
-				r.opts.signer.privKey,
+				privKey,
 			);
-		} catch (cause) {
-			throw new ForaCallError({ kind: "not_signable", op, cause });
 		}
+	} catch (cause) {
+		throw new ForaCallError({ kind: "not_signable", op, cause });
 	}
-	// Items-only wire shape: a single offer is the degenerate 1-element items list, each
-	// item reflecting its signed Offer back exactly as received at discovery. The
-	// authoritative identity is the reflected offer; the optional top-level offer_id
-	// correlation scalar is left unset.
-	const request = {
+	// The authoritative identity of each item is the reflected offer; the optional
+	// top-level offer_id correlation scalar is left unset.
+	return {
 		ver: ProtocolVersion,
 		idempotency_key: key,
 		requester,
-		items: [
-			{
-				offer: wire,
-				agent_acceptance: {
-					signature,
-					signature_algorithm: ACCEPTANCE_SIGNATURE_ALGORITHM,
-				},
+		items: wires.map((wire, i) => ({
+			offer: wire,
+			agent_acceptance: {
+				signature: signatures[i],
+				signature_algorithm: ACCEPTANCE_SIGNATURE_ALGORITHM,
 			},
-		],
+		})),
 		...(requestSignature === undefined
-			? {} : { agent_request_acceptance: {
-			payload: {
-				items: requestItems.map((item) => ({
-					offer_sig: item.offerSig,
-					exchange: item.exchange,
-				})),
-				requester_id: requesterId,
-				requester_domain: requesterDomain,
-				idempotency_key: key,
-			},
-			signature: requestSignature,
-			signature_algorithm: ACCEPTANCE_SIGNATURE_ALGORITHM,
-		} }),
+			? {}
+			: {
+					agent_request_acceptance: {
+						payload: {
+							items: requestItems.map((item) => ({
+								offer_sig: item.offerSig,
+								exchange: item.exchange,
+							})),
+							requester_id: requesterId,
+							requester_domain: requesterDomain,
+							idempotency_key: key,
+						},
+						signature: requestSignature,
+						signature_algorithm: ACCEPTANCE_SIGNATURE_ALGORITHM,
+					},
+				}),
 	};
-	validateRequest(op, request, TransactionRequestSchema, r.opts.validation ?? "strict");
-	const raw = await call(
-		r,
-		op,
-		baseURL,
-		EXCHANGE_SERVICE,
-		"ExecuteTransaction",
-		request,
-		false,
-	);
-	return parseMessage(op, raw, TransactionResponseSchema);
+}
+
+/** requireOneExchange refuses a direct purchase whose offers were issued by more than one
+ * Exchange: that Exchange would refuse the item addressed to someone else. */
+function requireOneExchange(op: string, offers: readonly VerifiedOffer[]): void {
+	const first = offers[0];
+	if (first === undefined) return;
+	const want = stringField(offerRecord(first), "exchange");
+	offers.forEach((offer, i) => {
+		const got = stringField(offerRecord(offer), "exchange");
+		if (got !== want) {
+			throw malformed(
+				op,
+				new Error(
+					`item ${i} is issued by ${JSON.stringify(got)} and item 0 by ${JSON.stringify(want)}; ` +
+						"a direct purchase goes to one Exchange (buy across Exchanges with BrokerClient.execute)",
+				),
+			);
+		}
+	});
+}
+
+/** requireRoutable refuses a relayed purchase carrying an offer that names no Exchange: a
+ * Broker routes each item to the Exchange its offer names. */
+function requireRoutable(op: string, offers: readonly VerifiedOffer[]): void {
+	offers.forEach((offer, i) => {
+		if (stringField(offerRecord(offer), "exchange") === "") {
+			throw malformed(
+				op,
+				new Error(
+					`item ${i} names no exchange; a Broker routes each item to the Exchange its offer names`,
+				),
+			);
+		}
+	});
+}
+
+/**
+ * requireRequesterIsSigner refuses a request whose requester.domain is not the host of the
+ * WBA directory this client signs as. A Broker verifies the agent's signature against the
+ * key it resolves from the covered Signature-Agent directory and requires
+ * requester.domain to name that same directory, because every Exchange it relays to
+ * resolves the agent's acceptance keys from requester.domain. It refuses a mismatch with
+ * request_auth_failure SIGNATURE_INVALID; this client refuses it first, before sending.
+ *
+ * The comparison is the recipient-identity rule: exact, case-folded, an explicit :443
+ * the same as no port. An unset Signature-Agent names no directory, so it fails too.
+ */
+function requireRequesterIsSigner(
+	op: string,
+	requester: Record<string, unknown>,
+	signatureAgent: string,
+): void {
+	if (signatureAgent === "") {
+		throw malformed(
+			op,
+			new Error(
+				"no signatureAgent configured; a Broker checks that requester.domain names the " +
+					"directory the request is signed from",
+			),
+		);
+	}
+	let host: string;
+	try {
+		host = hostOf(signatureAgent);
+	} catch (cause) {
+		throw malformed(op, cause);
+	}
+	let verdict: string;
+	try {
+		verdict = checkAudience(host, stringField(requester, "domain"));
+	} catch (cause) {
+		throw malformed(op, cause);
+	}
+	if (verdict !== "accepted") {
+		throw malformed(
+			op,
+			new Error(
+				`requester.domain ${JSON.stringify(stringField(requester, "domain"))} is not ` +
+					`${JSON.stringify(host)}, the host of the directory this client signs as; ` +
+					"a Broker refuses the request (request_auth_failure SIGNATURE_INVALID)",
+			),
+		);
+	}
 }
 
 /**
diff --git a/sdk/ts/tests/broker-execute.test.ts b/sdk/ts/tests/broker-execute.test.ts
new file mode 100644
index 00000000..59720868
--- /dev/null
+++ b/sdk/ts/tests/broker-execute.test.ts
@@ -0,0 +1,333 @@
+// BrokerClient.execute and the batch form of Client.execute (TypeScript side) — mirror
+// of sdk/go/connect/broker_execute_test.go.
+//
+// Driven through an INJECTED send, like the rest of this client's verb tests: what is
+// under test is the request the client builds and signs, the refusals it makes before
+// sending, and how it decodes the Broker's combined answer — not undici.
+import { describe, expect, it } from "vitest";
+
+import {
+	createBrokerClient,
+	createClient,
+	type ForaCallError,
+	type UnaryRequest,
+	type UnarySend,
+} from "../client/index.ts";
+import { createVerifier, type VerifiedOffer } from "../core/verifier.ts";
+import { verifyOfferAcceptance, verifyRequestAcceptance } from "../src/acceptance.ts";
+import { signOffer } from "../src/offer-sign.ts";
+
+const REQUESTER = { id: "agent-1", domain: "agent.test", type: "REQUESTER_TYPE_AGENT" };
+/** The directory the agent signs as; REQUESTER.domain is its host. */
+const AGENT_DIRECTORY = "https://agent.test";
+
+function recordingSend(
+	answer: unknown,
+	status = 200,
+): { send: UnarySend; seen: UnaryRequest[] } {
+	const seen: UnaryRequest[] = [];
+	const send: UnarySend = async (req) => {
+		seen.push(req);
+		return { status, body: JSON.stringify(answer) };
+	};
+	return { send, seen };
+}
+
+function bodyOf(req: UnaryRequest): Record<string, unknown> {
+	return JSON.parse(new TextDecoder().decode(req.body)) as Record<string, unknown>;
+}
+
+async function keyPair(): Promise<CryptoKeyPair> {
+	return (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
+		"sign",
+		"verify",
+	])) as CryptoKeyPair;
+}
+
+/** An offer issued and signed by `exchange`, verified the way a client verifies it. */
+async function offerAt(
+	id: string,
+	exchange: string,
+): Promise<{ offer: Record<string, unknown>; verified: VerifiedOffer }> {
+	const kp = await keyPair();
+	const publicKey = new Uint8Array(
+		await crypto.subtle.exportKey("raw", kp.publicKey),
+	) as Uint8Array<ArrayBuffer>;
+	const unsigned: Record<string, unknown> = {
+		offer_id: id,
+		exchange,
+		expires_at: "2099-01-01T00:00:00Z",
+	};
+	const signature = await signOffer(unsigned, kp.privateKey);
+	const offer = { ...unsigned, signature, signature_algorithm: "EdDSA" };
+	const sorted = await createVerifier("strict", {
+		resolve: async () => publicKey,
+		now: () => Date.parse("2024-01-01T00:00:00Z"),
+	}).sort([offer]);
+	const verified = sorted.verified[0];
+	if (verified === undefined) throw new Error(`fixture offer did not verify: ${id}`);
+	return { offer, verified };
+}
+
+const COMBINED = {
+	ver: "1.0",
+	items: [
+		{ offer_id: "offer-a1", transaction_id: "tx-a1", cost: { amount: "1.25", currency: "USD" } },
+		{
+			offer_id: "offer-b1",
+			refusal: {
+				exchange: "exchange-b.test",
+				code: "permission_denied",
+				detail: {
+					domain: "fora.v1.ExchangeService",
+					message: "no account",
+					transaction_denial: { reason: "DENIAL_REASON_ACCOUNT_NOT_REGISTERED" },
+				},
+			},
+		},
+		{ offer_id: "offer-a2", transaction_id: "tx-a2", cost: { amount: "1.25", currency: "EUR" } },
+	],
+	exchanges: [
+		{ exchange: "exchange-a.test", offer_ids: ["offer-a1", "offer-a2"], agent_identity_hash: "thumb" },
+		{ exchange: "exchange-b.test", offer_ids: ["offer-b1"] },
+	],
+	totals: [
+		{ amount: "1.25", currency: "USD" },
+		{ amount: "1.25", currency: "EUR" },
+	],
+};
+
+describe("BrokerClient.execute", () => {
+	it("relays a mixed batch as one signed request and decodes the combined answer", async () => {
+		const a1 = await offerAt("offer-a1", "exchange-a.test");
+		const b1 = await offerAt("offer-b1", "exchange-b.test");
+		const a2 = await offerAt("offer-a2", "exchange-a.test");
+		const keys = await keyPair();
+		const { send, seen } = recordingSend(COMBINED);
+		const broker = createBrokerClient("https://broker.test", {
+			requester: REQUESTER,
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: AGENT_DIRECTORY,
+			send,
+		});
+
+		const resp = await broker.execute([a1.verified, b1.verified, a2.verified], {
+			idempotencyKey: "relay-key",
+		});
+
+		expect(seen[0]?.url).toBe("https://broker.test/fora.v1.BrokerService/ExecuteTransaction");
+		const body = bodyOf(seen[0] as UnaryRequest);
+		expect(body["ver"]).toBe("1.0");
+		expect(body["idempotency_key"]).toBe("relay-key");
+		expect(body["requester"]).toEqual(REQUESTER);
+		const items = body["items"] as Array<Record<string, unknown>>;
+		const offers = [a1.offer, b1.offer, a2.offer];
+		expect(items.map((item) => item["offer"])).toEqual(offers);
+		for (const [i, item] of items.entries()) {
+			const acceptance = item["agent_acceptance"] as Record<string, string>;
+			await expect(
+				verifyOfferAcceptance(
+					{
+						offerSig: offers[i]?.["signature"] as string,
+						requesterId: REQUESTER.id,
+						requesterDomain: REQUESTER.domain,
+						idempotencyKey: "relay-key",
+					},
+					acceptance["signature"] as string,
+					keys.publicKey,
+				),
+			).resolves.toBe(true);
+		}
+		// One request acceptance over the complete ordered set: each Exchange the Broker
+		// relays to derives its own projection from it.
+		const requestAcceptance = body["agent_request_acceptance"] as Record<string, unknown>;
+		const signedItems = offers.map((o) => ({
+			offerSig: o["signature"] as string,
+			exchange: o["exchange"] as string,
+		}));
+		await expect(
+			verifyRequestAcceptance(
+				{
+					items: signedItems,
+					requesterId: REQUESTER.id,
+					requesterDomain: REQUESTER.domain,
+					idempotencyKey: "relay-key",
+				},
+				requestAcceptance["signature"] as string,
+				keys.publicKey,
+			),
+		).resolves.toBe(true);
+
+		// The refused group rides in the body, the other Exchange's results unchanged.
+		expect(resp.items?.[1]?.refusal?.code).toBe("permission_denied");
+		expect(resp.items?.[1]?.refusal?.detail?.transaction_denial?.reason).toBe(
+			"DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+		);
+		expect(resp.items?.[0]?.transaction_id).toBe("tx-a1");
+		expect(resp.items?.[2]?.refusal).toBeUndefined();
+		// Per-currency totals, never summed across currencies.
+		expect(resp.totals?.map((t) => t.currency)).toEqual(["USD", "EUR"]);
+		expect(resp.exchanges?.[0]?.offer_ids).toEqual(["offer-a1", "offer-a2"]);
+	});
+
+	it("sends a single offer as the degenerate one-item purchase", async () => {
+		const one = await offerAt("offer-one", "exchange-a.test");
+		const keys = await keyPair();
+		const { send, seen } = recordingSend({ ver: "1.0" });
+		const broker = createBrokerClient("https://broker.test", {
+			requester: REQUESTER,
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: AGENT_DIRECTORY,
+			send,
+		});
+
+		await broker.execute([one.verified]);
+
+		const body = bodyOf(seen[0] as UnaryRequest);
+		expect((body["items"] as unknown[]).length).toBe(1);
+		expect(body["agent_request_acceptance"]).toBeDefined();
+		expect(body["idempotency_key"]).toBeTypeOf("string");
+	});
+
+	it("refuses locally, before anything is sent", async () => {
+		const good = [(await offerAt("offer-a", "exchange-a.test")).verified];
+		const unaddressed = (
+			await createVerifier("off", { resolve: async () => undefined, now: () => 0 }).sort([
+				{ offer_id: "x", signature: "ab", signature_algorithm: "EdDSA" },
+			])
+		).verified;
+		const keys = await keyPair();
+		const signer = { privKey: keys.privateKey, keyid: "agent.v1" };
+		const { send, seen } = recordingSend({ ver: "1.0" });
+
+		const cases: Array<[string, Parameters<typeof createBrokerClient>[1], VerifiedOffer[], string]> =
+			[
+				[
+					"requester domain is not the signing directory",
+					{ requester: { ...REQUESTER, domain: "someone-else.test" }, signer, signatureAgent: AGENT_DIRECTORY, send },
+					good,
+					"malformed",
+				],
+				["no signature agent", { requester: REQUESTER, signer, send }, good, "malformed"],
+				["no requester", { signer, signatureAgent: AGENT_DIRECTORY, send }, good, "malformed"],
+				["no signer", { requester: REQUESTER, signatureAgent: AGENT_DIRECTORY, send }, good, "not_signable"],
+				["no offers", { requester: REQUESTER, signer, signatureAgent: AGENT_DIRECTORY, send }, [], "malformed"],
+				[
+					"offer names no exchange",
+					{ requester: REQUESTER, signer, signatureAgent: AGENT_DIRECTORY, send },
+					unaddressed,
+					"malformed",
+				],
+			];
+		for (const [name, options, offers, kind] of cases) {
+			const err = (await createBrokerClient("https://broker.test", options)
+				.execute(offers)
+				.catch((e: unknown) => e)) as ForaCallError;
+			expect(err.kind, name).toBe(kind);
+		}
+		expect(seen).toEqual([]);
+	});
+
+	it("treats an explicit :443 and a different case as the same signing directory", async () => {
+		const one = await offerAt("offer-one", "exchange-a.test");
+		const keys = await keyPair();
+		const { send, seen } = recordingSend({ ver: "1.0" });
+		const broker = createBrokerClient("https://broker.test", {
+			requester: { ...REQUESTER, domain: "Agent.Test:443" },
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: AGENT_DIRECTORY,
+			send,
+		});
+		await broker.execute([one.verified]);
+		expect(seen.length).toBe(1);
+	});
+
+	it("surfaces the Broker's own refusal as a typed failure", async () => {
+		const one = await offerAt("offer-one", "exchange-a.test");
+		const keys = await keyPair();
+		const { send } = recordingSend(
+			{
+				code: "unauthenticated",
+				message: "requester mismatch",
+				details: [
+					{
+						type: "fora.v1.ErrorDetail",
+						value: "aWdub3JlZA",
+						debug: {
+							domain: "fora.v1.BrokerService",
+							message: "requester mismatch",
+							requestAuthFailure: { reason: "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID" },
+						},
+					},
+				],
+			},
+			401,
+		);
+		const broker = createBrokerClient("https://broker.test", {
+			requester: REQUESTER,
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: AGENT_DIRECTORY,
+			send,
+		});
+
+		const err = (await broker.execute([one.verified]).catch((e: unknown) => e)) as ForaCallError;
+
+		expect(err.kind).toBe("refused");
+		expect(err.detail?.request_auth_failure?.reason).toBe(
+			"REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+		);
+	});
+});
+
+describe("Client.execute with several offers", () => {
+	it("buys several offers from one Exchange in one request", async () => {
+		const first = await offerAt("offer-1", "exchange.test");
+		const second = await offerAt("offer-2", "exchange.test");
+		const keys = await keyPair();
+		const { send, seen } = recordingSend({ ver: "1.0" });
+		const client = createClient("https://exchange.test", {
+			requester: REQUESTER,
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			send,
+		});
+
+		await client.execute([first.verified, second.verified], { idempotencyKey: "batch-key" });
+
+		expect(seen[0]?.url).toBe("https://exchange.test/fora.v1.ExchangeService/ExecuteTransaction");
+		const body = bodyOf(seen[0] as UnaryRequest);
+		expect((body["items"] as unknown[]).length).toBe(2);
+		const requestAcceptance = body["agent_request_acceptance"] as Record<string, unknown>;
+		await expect(
+			verifyRequestAcceptance(
+				{
+					items: [first.offer, second.offer].map((o) => ({
+						offerSig: o["signature"] as string,
+						exchange: "exchange.test",
+					})),
+					requesterId: REQUESTER.id,
+					requesterDomain: REQUESTER.domain,
+					idempotencyKey: "batch-key",
+				},
+				requestAcceptance["signature"] as string,
+				keys.publicKey,
+			),
+		).resolves.toBe(true);
+	});
+
+	it("refuses offers from more than one Exchange before sending", async () => {
+		const first = await offerAt("offer-1", "exchange.test");
+		const other = await offerAt("offer-2", "exchange-b.test");
+		const keys = await keyPair();
+		const { send, seen } = recordingSend({ ver: "1.0" });
+		const client = createClient("https://exchange.test", {
+			requester: REQUESTER,
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			send,
+		});
+
+		await expect(client.execute([first.verified, other.verified])).rejects.toMatchObject({
+			kind: "malformed",
+		});
+		expect(seen).toEqual([]);
+	});
+});
diff --git a/sdk/ts/tests/client-request.parity.test.ts b/sdk/ts/tests/client-request.parity.test.ts
index 0973785c..fc61ba8c 100644
--- a/sdk/ts/tests/client-request.parity.test.ts
+++ b/sdk/ts/tests/client-request.parity.test.ts
@@ -144,6 +144,13 @@ async function call(name: string): Promise<UnaryRequest> {
 		await client.getAccountStatus({ exchange: ISSUER });
 	} else if (name === "resolve") {
 		await createBrokerClient("https://broker.test", options).resolve({});
+	} else if (name.startsWith("broker_execute")) {
+		// The client signs as the directory the requester's domain names, which a Broker
+		// requires and the client checks before sending.
+		await createBrokerClient("https://broker.test", {
+			...options,
+			signatureAgent: "https://agent.test",
+		}).execute([await verifiedOffer()], { idempotencyKey: PINNED });
 	} else if (name.startsWith("push_resources")) {
 		const push: Record<string, unknown> = {
 			exchange: "exchange.test",

From 6e4c850398930539e58ca84afc06cacffeb55735 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Fri, 2 Oct 2026 22:35:17 -0400
Subject: [PATCH 009/164] Describe purchases through the Broker in the docs and
 changelogs

The prose pages described a Broker forwarding the agent's purchase under a
stack of hop signatures, and the agent buying only at each Exchange. They
now describe BrokerService.ExecuteTransaction and keep the forwarding chain
for requests forwarded byte-for-byte, such as discovery:
- transaction flow: the two ways to buy, the re-packaging steps, why
  combining per-resource purchases is safe, a combined response with a
  refused group and per-currency totals, and the Broker's own refusals;
- authentication: which key the holder binding uses on a re-packaged
  purchase, and the requester-domain check;
- the Broker overview, the Exchange request flows (sub-requests from a
  Broker), the agent SDK pages, the threat model (tampering with and
  misreporting a relayed purchase), role composition, the scenario and PoC
  walkthroughs and the Identity Service tool table.

Both changelogs gain an Unreleased entry for the wire change and the SDK
verbs.
---
 proto/CHANGELOG.md                            | 59 ++++++++++++
 .../docs/components/agent-sdk/fetch-flow.mdx  | 45 ++++++++-
 .../docs/components/agent-sdk/overview.mdx    |  5 +
 .../docs/components/broker/overview.mdx       | 65 ++++++-------
 .../components/exchange/request-flows.mdx     | 17 +++-
 .../docs/components/identity/overview.mdx     |  4 +-
 .../docs/getting-started/poc-walkthrough.mdx  |  6 +-
 .../content/docs/protocol/authentication.mdx  | 21 +++--
 .../docs/protocol/role-composition.mdx        |  2 +-
 .../docs/protocol/scenario-walkthrough.mdx    |  6 +-
 .../docs/protocol/transaction-flow.mdx        | 91 ++++++++++++++++++-
 .../src/content/docs/reference/changelog.mdx  | 59 ++++++++++++
 .../content/docs/security/threat-model.mdx    | 14 ++-
 13 files changed, 335 insertions(+), 59 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index ae25e74a..9e27a888 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,65 @@
 
 ## Unreleased
 
+**The Broker buys: `BrokerService.ExecuteTransaction` (additive wire change).**
+A purchase of offers from several Exchanges is now one call to the Broker. Before
+this change `BrokerService` had only `Resolve`, and the contract described the
+agent buying at each Exchange directly, with a Broker on the path forwarding the
+request byte-for-byte under a stack of hop signatures. Implementations relayed
+purchases through the Broker anyway, by re-packaging them outside the contract.
+The contract now defines that relay.
+
+- `rpc ExecuteTransaction(TransactionRequest) returns (BrokerTransactionResponse)`
+  on `BrokerService`. The agent sends the same `TransactionRequest` it would send
+  an Exchange: every item with its `AgentAcceptance`, and one
+  `AgentRequestAcceptance` over all items. The Broker verifies the agent's request,
+  groups the items by each signed offer's `exchange`, and sends one
+  `ExchangeService.ExecuteTransaction` per Exchange, signed with its own key. The
+  acceptances travel in each sub-request body, so every Exchange still verifies
+  the agent's consent. The Broker forwards the agent's `idempotency_key` unchanged
+  to every Exchange.
+- New messages: `BrokerTransactionResponse` (`items` in request order,
+  `exchanges`, per-currency `totals`), `ExchangeOutcome` (one per Exchange
+  contacted: `exchange`, `offer_ids`, `agent_identity_hash`, `subscription_quota`)
+  and `UpstreamRefusal` (`exchange`, the Connect `code`, the Exchange's
+  `ErrorDetail`).
+- `TransactionResultItem.refusal = 14`. An Exchange's refusal of a whole
+  sub-request is never turned into a Broker error: it rides on each affected item,
+  and the other Exchanges' results come back unchanged.
+- `DenialReason.DENIAL_REASON_RELAY_NOT_ACCEPTED = 19`: the provider at this
+  Exchange does not accept purchases relayed by a Broker. Buy the offer directly.
+- The Broker's own refusals are non-OK errors: `unauthenticated` with
+  `request_auth_failure` for an invalid agent signature, and `SIGNATURE_INVALID`
+  when `requester.domain` is not the agent's verified signing directory;
+  `invalid_argument` for a malformed request; `failed_precondition` for an
+  Exchange it cannot route to or does not approve.
+- `DENIAL_REASON_CONTENT_UNAVAILABLE` is documented as not a catch-all for
+  upstream failures.
+- Re-packaging is safe because each item is atomic and its integrity is per
+  resource: each offer carries its Exchange's signature, each acceptance binds the
+  agent to that one offer, and each result comes from the Exchange that owns the
+  resource. In a result item the one signed value is `retrieval_endpoint`; the
+  combined response is otherwise the Broker's unsigned report.
+- Updated rules: the forwarding chain of hop signatures applies to requests
+  forwarded byte-for-byte, such as discovery; a purchase through a Broker is always
+  re-packaged. On a re-packaged purchase the delegation holder binding (`cnf.jkt`)
+  and `agent_identity_hash` use the key the item's `AgentAcceptance` verifies
+  under, not the request signer, which is the Broker. An Exchange scopes a relayed
+  request's idempotency key per Broker, authenticated requester and key.
+
+SDKs, in all three languages:
+
+- `BrokerClient.Execute` (Go), `BrokerClient.execute` (Python, async and sync) and
+  `BrokerClient.execute` (TypeScript) buy verified offers through a Broker in one
+  call and return the `BrokerTransactionResponse`. The client builds each item's
+  acceptance and the request acceptance from its signer, stamps `ver` and the
+  requester, and refuses locally, as malformed, a `requester.domain` that is not the
+  host of the directory it signs as (Signature-Agent).
+- The exchange client buys several offers from one Exchange in one request:
+  `Client.ExecuteBatch` in Go, and `execute` given a sequence (Python) or an array
+  (TypeScript). Offers from more than one Exchange are refused locally.
+- The client-request corpus gains the `brokerExecute` verb.
+
 **Python SDK: four additions for callers that test FORA services through the SDK.
 Python-only for now; Go and TypeScript parity follows.**
 
diff --git a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
index 6f6316ec..16acbe5d 100644
--- a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
+++ b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
@@ -197,8 +197,10 @@ carries the same flow with its example executed by the package's own test suite.
 
 The single-call `FetchBatch` above is part of the deferred layer. What ships is the
 part that matters most for round trips: `ResourceQuery.uris` is a repeated field, so
-one Discover call covers every URI you want from one Exchange. Purchase and delivery
-are then per offer.
+one Discover call covers every URI you want from one Exchange. Purchase can be per
+offer, as below, or batched: `Client.ExecuteBatch` buys several offers from one Exchange
+in one request, and `BrokerClient.Execute` buys offers from several Exchanges in one call
+to a Broker (shown after this example). Delivery is per offer.
 
 ```go
 found, err := client.Discover(ctx, &forav1.ResourceQuery{
@@ -234,6 +236,45 @@ for _, group := range found.Groups {
 }
 ```
 
+### Buying across Exchanges through a Broker
+
+`BrokerClient.Execute` sends one `BrokerService.ExecuteTransaction` for offers issued by
+any number of Exchanges. The client signs each offer's acceptance and one request
+acceptance over the whole set; the Broker re-packages the purchase into one sub-request
+per Exchange and returns the results in request order. The client must sign as the
+directory its requester's domain names (`WithSignatureAgent`), because a Broker refuses
+a request whose `requester.domain` is anything else, and the client refuses it locally
+first.
+
+```go
+broker := foraconnect.NewBrokerClient("https://broker.example",
+    foraconnect.WithSigner(signer),
+    foraconnect.WithSignatureAgent("https://agent.example"),
+    foraconnect.WithRequester(&forav1.Requester{Id: "agent-1", Domain: "agent.example",
+        Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}),
+)
+resp, err := broker.Execute(ctx, selected) // []core.VerifiedOffer from several Exchanges
+if err != nil {
+    return err // the Broker's own refusal: nothing was bought
+}
+for _, item := range resp.GetItems() {
+    if r := item.GetRefusal(); r != nil {
+        // That Exchange refused the whole sub-request; the other items are unaffected.
+        log.Printf("%s refused %s: %s", r.GetExchange(), item.GetOfferId(), r.GetCode())
+        continue
+    }
+    if item.DenialReason != nil {
+        continue // a per-item denial from the Exchange
+    }
+    content, err := client.Fetch(ctx, item.GetRetrievalEndpoint())
+    if err != nil {
+        return err
+    }
+    _ = content
+}
+// resp.GetTotals() holds the charged amount per currency, never summed across currencies.
+```
+
 ## Error Handling
 
 All errors are typed. The caller can switch on error type for programmatic handling.
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index 04ecca83..b1315c40 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -32,6 +32,11 @@ The shipped client is the same four verbs in all three languages: **discover** a
 returns the offers already sorted into verified and rejected, so an offer that did not
 verify is never handed back as usable.
 
+A Broker client sits beside it with two verbs: **resolve**, discovery across the
+Exchanges the Broker knows, and **execute**, which buys offers from several Exchanges in
+one call (`BrokerService.ExecuteTransaction`). The exchange client's execute also takes
+several offers from one Exchange (`ExecuteBatch` in Go).
+
 Full per-language references live beside the code: [Go](https://github.com/FORA-Protocol/protocol/blob/main/sdk/go/README.md),
 [Python](https://github.com/FORA-Protocol/protocol/blob/main/sdk/python/README.md).
 
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index c6b05181..1d300fb1 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -10,6 +10,7 @@ The FORA Broker is the optional demand-side router in the FORA protocol. It sits
 **The Broker is optional.** Agents can talk directly to Exchanges using the same `DiscoverResources`/`ExecuteTransaction`/`UsageReport` RPCs. The Broker adds value through:
 
 - **Multi-exchange comparison** -- fan out DiscoverResources to N Exchanges, pick cheapest
+- **Multi-exchange purchase** -- buy offers from several Exchanges in one `BrokerService.ExecuteTransaction` call, with the results combined in request order
 - **Budget enforcement** -- per-request, per-session, per-Exchange cumulative tracking
 - **Resource deduplication** -- same article from two Exchanges, compare price
 - **Attestation-aware selection (v1.0)** -- prefer offers with higher attestation levels (Level 2 > Level 1 > Level 0)
@@ -17,7 +18,7 @@ The FORA Broker is the optional demand-side router in the FORA protocol. It sits
 - **Dispute relay (v1.0)** -- forward `DisputeRequest` messages to the correct Exchange
 - **Selection transparency** -- logged rationale for every selection decision
 
-The Exchange does not know or care whether the request came from a Broker or directly from an agent. The protocol is identical.
+The Exchange speaks the same protocol either way. On a purchase the Broker relays, the request is signed by the Broker, and the agent's consent arrives in the body as its acceptance signatures.
 
 ## Component Architecture
 
@@ -60,7 +61,7 @@ graph TB
 
 ## Internal Call Flow
 
-`Resolve` is **discovery-only**. It gathers offers across Exchanges, selects the best per URI, and returns them as a `DiscoveryResponse` (one `OfferGroup` per requested URI). It does **not** execute or deliver — committing to an offer is a separate `ExecuteTransaction` call on the Exchange (see [Execution](#execution-separate-step) below).
+`Resolve` is **discovery-only**. It gathers offers across Exchanges, selects the best per URI, and returns them as a `DiscoveryResponse` (one `OfferGroup` per requested URI). It does **not** execute or deliver — committing to an offer is a separate call: `ExchangeService.ExecuteTransaction` at the offer's Exchange, or `BrokerService.ExecuteTransaction` at the Broker (see [Execution](#execution-separate-step) below).
 
 ```go
 func (o *Broker) Resolve(ctx context.Context, req *forav1.DiscoveryRequest) (*forav1.DiscoveryResponse, error) {
@@ -101,43 +102,36 @@ func (o *Broker) Resolve(ctx context.Context, req *forav1.DiscoveryRequest) (*fo
 
 ### Execution (separate step)
 
-After the agent picks an offer from the `DiscoveryResponse`, committing to it is a distinct exchange on the execute path. The execute target is `Offer.exchange` — the canonical Exchange domain carried inside the signed Offer bytes, so a relaying Broker cannot redirect execution without invalidating the signature.
+After the agent picks offers from the `DiscoveryResponse`, committing to them is a distinct exchange on the execute path. The execute target of each offer is `Offer.exchange` — the canonical Exchange domain carried inside the signed Offer bytes, so a relaying Broker cannot redirect execution without invalidating the signature. The agent buys either way:
 
-```go
-// Execute commits to a chosen offer. Called by the agent directly, or by the
-// Broker on the agent's behalf. The per-transaction result — transaction_id,
-// billing_id, delivery_method, retrieval_endpoint, agent_identity_hash,
-// expires_at — is carried by TransactionResponse, not by DiscoveryResponse.
-func (o *Broker) Execute(ctx context.Context, offer *forav1.Offer, req *forav1.DiscoveryRequest) (*forav1.TransactionResponse, error) {
-    txn, err := o.discovery.Execute(ctx, offer.Exchange, offer, req) // routes to Offer.exchange
-    if err != nil {
-        return nil, err
-    }
+- **Directly** — one `ExchangeService.ExecuteTransaction` per Exchange, signed by the agent.
+- **Through the Broker** — one `BrokerService.ExecuteTransaction` call for offers from any number of Exchanges. The request is the same `TransactionRequest`, and it returns a `BrokerTransactionResponse`.
 
-    // Track budget and reporting obligation off the transaction result.
-    o.budget.Record(ctx, req.SessionID(), txn.Cost)
-    o.reporter.Track(txn)
+### BrokerService.ExecuteTransaction: re-packaging
 
-    return txn, nil
-}
-```
+The Broker re-packages the agent's purchase. What holds the set together is `TransactionRequest.agent_request_acceptance` — a detached Ed25519 signature by the **agent** over the complete ordered list of `(offer signature, exchange)` references plus the requester and the idempotency key — and each item's `agent_acceptance`.
 
-### Mixed-Exchange commits: fan-out is projection
+1. The agent signs one `AgentAcceptance` per offer and one `AgentRequestAcceptance` over every selected offer, in order, across all Exchanges, and sends the request to the Broker, RFC 9421-signed for the Broker's URL. The request terminates at the Broker.
+2. The Broker verifies the agent's signature and checks that `requester.domain` is the agent's verified signing directory (the host of the WBA directory the covered `Signature-Agent` header names). It checks that every item's Exchange is one it can route to and approves for purchases. It refuses anything else before it sends a single sub-request.
+3. It groups the items by `offer.exchange` and sends one `ExchangeService.ExecuteTransaction` to each Exchange. Each sub-request is a new HTTP request the Broker authors and signs with **its own** key. It carries only the items addressed to that Exchange, in request order, with their acceptances, plus the **unchanged** `AgentRequestAcceptance`, `requester` and idempotency key. See [Projected execute requests](/protocol/authentication/#projected-execute-requests) for who signs what and how the Exchange resolves the acceptance verification key.
+4. Each Exchange verifies the acceptance signatures and requires its sub-request to equal the complete in-order projection of the signed set addressed to itself — so the Broker cannot drop, reorder, append, or split the items for that Exchange without being refused.
+5. The Broker combines the answers into one `BrokerTransactionResponse`: one result per request item in request order, one `ExchangeOutcome` per Exchange contacted, and charged totals per currency.
 
-When the agent commits to offers from **more than one** Exchange in one go, there is still no new RPC: the flow is `Resolve` for discovery, then one `ExecuteTransaction` per Exchange named in the chosen set. What holds the set together is `TransactionRequest.agent_request_acceptance` — a detached Ed25519 signature by the **agent** over the complete ordered list of `(offer signature, exchange)` references plus the requester and the idempotency key.
+**Why re-packaging is safe.** Each item is atomic and its integrity is per resource. Each offer carries its own Exchange's signature, each acceptance binds the agent to that one offer, and each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases. It cannot alter any of them without breaking that item's Exchange signature or the agent's acceptance, and no cross-item integrity is needed. In a result item, the one signed value is the `retrieval_endpoint`, signed by the issuing Exchange; the other fields are the Broker's unsigned report of what each Exchange answered.
 
-The sequence:
+**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal` — the Exchange, the Connect code it answered with, and its `ErrorDetail` unchanged — and the other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. An item whose provider does not accept relayed purchases is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, and the agent buys that offer directly.
 
-1. The agent (the holder of the signing key) commits to the whole chosen set at once: it signs one `AgentRequestAcceptance` covering every selected offer, in order, across all Exchanges.
-2. Whoever executes — the agent directly, or the Broker on its behalf — sends one `ExecuteTransaction` to each Exchange in the set. Each subrequest carries only the items addressed to that Exchange, plus the **unchanged** acceptance envelope, plus the same idempotency key.
-3. Each per-Exchange subrequest is a new HTTP request its sender authors and RFC 9421-signs. When the Broker executes, the Broker is the authenticated wire caller of every subrequest; the agent's authorization travels in the body as the detached acceptance signatures, which survive projection because they never depended on the HTTP envelope. See [Projected execute requests](/protocol/authentication/#projected-execute-requests) for who signs what and how the Exchange resolves the acceptance verification key.
-4. Each Exchange verifies the acceptance signature and requires its subrequest to equal the complete in-order projection of the signed set addressed to itself — so the Broker cannot drop, reorder, append, or split the items for that Exchange without being refused.
+**The Broker's own refusals** are non-OK errors with an `ErrorDetail`: `unauthenticated` with `request_auth_failure` for a bad agent signature, and `SIGNATURE_INVALID` for a `requester.domain` that is not the signing directory; `invalid_argument` for a malformed request; `failed_precondition` for an Exchange it cannot route to or does not approve.
 
-A single-Exchange commit is the degenerate case: the projection is the whole set, and the SDK clients attach the acceptance there too.
+**Idempotency.** The Broker forwards the agent's `idempotency_key` unchanged to every Exchange; it cannot change it, because the acceptances sign it. A retry through the Broker therefore reaches each Exchange as a replay and is answered from that Exchange's stored result.
+
+**Delegation.** The Broker is the wire signer of every sub-request, so each Exchange checks a delegation's `cnf.jkt` against the key the item's `AgentAcceptance` verifies under, not against the Broker. The agent does not need to delegate to the Broker.
+
+A single-Exchange purchase is the degenerate case: the projection is the whole set, and the SDK clients attach the acceptance there too.
 
 ## Request Signing and the Forwarding Signature Stack
 
-FORA uses a two-layer signing model: the **agent's request signature** proves who originated the request, and the **forwarding signature stack** proves which intermediaries forwarded it.
+FORA uses a two-layer signing model for a request forwarded byte-for-byte: the **agent's request signature** proves who originated the request, and the **forwarding signature stack** proves which intermediaries forwarded it. A purchase through `BrokerService.ExecuteTransaction` is re-packaged instead (see above): each sub-request carries only the Broker's signature, and the agent's consent rides in the body.
 
 ### Request Authentication
 
@@ -216,7 +210,7 @@ The Broker forwards `Requester.scopes` to every Exchange it queries. Scopes cont
 
 ### Delegation Narrowing (only when the Broker is a delegated holder)
 
-By **default the Broker is a pure relay**: it passes `Requester.delegation` through unchanged and the **agent remains the holder** — the agent's RFC 9421 request signature is what the Exchange matches against the delegation's `cnf` (the Broker's hop signature is provenance only). A relay cannot narrow a delegation it does not hold: only a key named in the chain's `cnf` can issue a valid child JWT.
+By **default the Broker is a pure relay**: it passes `Requester.delegation` through unchanged and the **agent remains the holder**. On a forwarded request the agent's RFC 9421 request signature is what the Exchange matches against the delegation's `cnf` (the Broker's hop signature is provenance only); on a re-packaged purchase the Exchange matches the key the item's `AgentAcceptance` verifies under. A relay cannot narrow a delegation it does not hold: only a key named in the chain's `cnf` can issue a valid child JWT.
 
 Narrowing is therefore possible **only when the agent has explicitly delegated to the Broker's key** (the Broker is the terminal holder in the chain). In that case the Broker issues a child JWT — `scope ⊆ parent`, bound (`cnf.jkt`) to the Broker's key — and **signs the request itself**, so the binding now matches the Broker's signature:
 
@@ -347,8 +341,15 @@ sequenceDiagram
 
     Note over Agent: Agent picks an Offer.<br/>Execute target = Offer.exchange (signed)
 
-    Agent->>MPA: ExecuteTransaction(chosen offer_id)
-    MPA-->>Agent: TransactionResponse(retrieval_endpoint + billing_id)
+    alt Direct purchase
+        Agent->>MPA: ExchangeService.ExecuteTransaction(chosen offer)
+        MPA-->>Agent: TransactionResponse(retrieval_endpoint + billing_id)
+    else Through the Broker
+        Agent->>Orch: BrokerService.ExecuteTransaction(chosen offers + acceptances)
+        Orch->>MPA: ExecuteTransaction(Exchange A's items, Broker-signed)
+        MPA-->>Orch: TransactionResponse
+        Orch-->>Agent: BrokerTransactionResponse(items in request order)
+    end
 
     Note over Agent: Track reporting obligation<br/>Record spend: $0.05
 
@@ -368,7 +369,7 @@ sequenceDiagram
 | Decision | Rationale |
 |---|---|
 | **Broker is optional** | Agents can query Exchanges directly. The Broker adds multi-exchange intelligence but is not required by the protocol. |
-| **Same protocol, transparent proxy** | The Exchange cannot distinguish Broker-mediated requests from direct agent requests. No special Exchange support needed. |
+| **Same protocol, re-packaged purchases** | The Exchange answers the same RPCs whoever calls. A purchase the Broker relays is signed by the Broker, and the Exchange verifies the agent's consent from the body acceptances. |
 | **Signed offer pass-through** | Exchange signatures cover pricing fields. The Broker cannot inflate prices without invalidating the signature. |
 | **Advisory budget enforcement** | The Broker pre-filters transactions by budget, but the Exchange is the authoritative enforcement point. No overspend occurs because the Exchange is the gatekeeper. |
 | **Ed25519 + forwarding signature stack** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature (covering `@method`/`@target-uri`/`content-digest`); Broker adds one labeled RFC 9421 HTTP Message Signature (covering the request plus the prior hop's signature) to the header stack. Exchange verifies both layers and counts hops against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 336b34d6..d0a35f50 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -259,7 +259,7 @@ type RequesterRecord struct {
 
 ### Forwarding Chain Verification
 
-The forwarding chain lives entirely in the HTTP layer as a **stack of RFC 9421 HTTP Message Signatures** — there is no `intermediaries` field on the message. Each party that originates or forwards a `ResourceQuery` or `TransactionRequest` adds **one** labeled signature (`Signature` / `Signature-Input`, e.g. `fora-agent`, `fora-broker-1`) to the request headers. Each forwarder's signature covers the request essentials (`@method`, `@authority`, `@path`, `Content-Digest`) **plus the previous hop's signature**, so the ordered set of header signatures *is* the chain and cannot be reordered, dropped, or extended undetectably. The Exchange MUST:
+The forwarding chain lives entirely in the HTTP layer as a **stack of RFC 9421 HTTP Message Signatures** — there is no `intermediaries` field on the message. Each party that originates or forwards a request byte-for-byte (a `ResourceQuery` relayed toward the Exchange) adds **one** labeled signature (`Signature` / `Signature-Input`, e.g. `fora-agent`, `fora-broker-1`) to the request headers. Each forwarder's signature covers the request essentials (`@method`, `@authority`, `@path`, `Content-Digest`) **plus the previous hop's signature**, so the ordered set of header signatures *is* the chain and cannot be reordered, dropped, or extended undetectably. The Exchange MUST:
 
 1. **Verify the requester's (originating) RFC 9421 HTTP Message Signature** — proves the original requester authorized the request. The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the requester's WBA directory at `{domain}/.well-known/http-message-signatures-directory` and verifies the Ed25519 signature.
 
@@ -267,7 +267,7 @@ The forwarding chain lives entirely in the HTTP layer as a **stack of RFC 9421 H
 
 All signatures must pass for the request to proceed. If any verification fails — or the chain is not contiguous — the Exchange rejects the request with `CodeUnauthenticated`. The refusal carries an `ErrorDetail` whose `request_auth_failure` block holds a [`RequestAuthFailureReason`](/reference/proto-fora/#requestauthfailurereason): `SIGNATURE_MISSING` (sign the request), `SIGNATURE_INVALID` (the signature does not verify) or `SIGNATURE_STALE` (sign it again, now). The reason names what the caller does next, never which check failed.
 
-When only the originating signature is present, the requester is calling the Exchange directly — no intermediary was involved. Chain depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
+When only the originating signature is present, the requester is calling the Exchange directly — no intermediary was involved — or the Broker authored the request itself: a discovery fan-out leg, or a purchase sub-request it re-packaged (see [Sub-requests from a Broker](#sub-requests-from-a-broker)). Chain depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
 
 ```go
 // Forwarding-chain verification runs in the SDK's verify middleware at the
@@ -294,7 +294,7 @@ When `Requester.delegation` is present, the Exchange verifies the delegation JWT
 
 1. Decode the base64url-encoded `token` (JWS) from the `Delegation` message
 2. Verify the Ed25519 signature chain — the authority JWT signed by `principal_domain`'s published key, each child JWT signed by the key its parent named in `cnf` (chain-linkage invariant)
-3. Verify holder binding — the key that signed the RFC 9421 request MUST hash to the final JWT's `cnf.jkt`
+3. Verify holder binding — the key that signed the RFC 9421 request MUST hash to the final JWT's `cnf.jkt`. On a purchase sub-request a Broker re-packaged, the request signer is the Broker, so compare the key each item's `AgentAcceptance` verifies under instead
 4. Evaluate constraints (scope coverage, spend caps, expiration) — the grant covers scopes only if each child's `scope` is contained in its parent's
 5. Extract effective scopes (intersection of requester scopes and delegation scopes)
 6. Check `expires_at` against current time
@@ -332,7 +332,8 @@ sequenceDiagram
 
     Note over Handler: Validate request
     Note over Handler: Reject unless EVERY items[].offer.exchange names this Exchange's own domain (INVALID_ARGUMENT)
-    Note over Handler: Verify requester RFC 9421 HTTP Message Signature
+    Note over Handler: Verify the sender's RFC 9421 HTTP Message Signature<br/>(the agent's, or the Broker's on a re-packaged sub-request)
+    Note over Handler: Verify agent_request_acceptance (projection for this Exchange)
     Note over Handler: Check idempotency key
 
     Handler->>Idemp: Check(idempotency_key)
@@ -679,6 +680,14 @@ func transactionDenied(reason forav1.DenialReason, mismatches ...forav1.Restrict
 
 **Atomicity note**: Multi-item requests are best-effort per item and **NOT atomic**. The Exchange processes items sequentially in original order. If item 3 of 5 fails billing authorization, items 1-2 are already committed (signed URLs issued) and items 4-5 continue processing. The caller MUST check each `TransactionResultItem.denial_reason` to determine which items succeeded. This non-atomic model is deliberate: it matches how programmatic resource access handles multi-slot requests. A 1-element request has nothing to keep partial, so its denial travels as a non-OK transport error carrying `ErrorDetail.transaction_denial` instead of an in-body `denial_reason`.
 
+### Sub-requests from a Broker
+
+When an agent buys through `BrokerService.ExecuteTransaction`, the Broker sends this Exchange a sub-request it authored: this Exchange's items in request order, each with the agent's `AgentAcceptance`, the agent's `AgentRequestAcceptance`, `requester` and `idempotency_key` unchanged, and the **Broker's** RFC 9421 signature. The pipeline above runs unchanged, with three points to note:
+
+- **Who consented.** The wire signer is the Broker. The agent is authenticated by its body acceptances, verified against the keys published in the WBA directory of `requester.domain`. The delivery URL and `agent_identity_hash` are bound to the agent key the acceptances verify under, and a delegation's `cnf.jkt` is checked against that same key.
+- **Idempotency.** The key is the agent's, forwarded unchanged. Scope it per (Broker, requester the acceptances authenticate, key), so two agents behind one Broker that choose the same key cannot collide.
+- **Answers.** Answer exactly as for a direct request. A provider that does not accept relayed purchases has the item denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`. A refusal of the whole sub-request — including the non-OK `transaction_denial` a one-item request receives — reaches the agent unchanged on each affected item's `TransactionResultItem.refusal`, because the Broker never turns it into an error of its own.
+
 ### Partial Failure Handling
 
 The ExecuteTransaction pipeline has multiple steps that can fail independently:
diff --git a/website/src/content/docs/components/identity/overview.mdx b/website/src/content/docs/components/identity/overview.mdx
index 540a2194..ba65e46d 100644
--- a/website/src/content/docs/components/identity/overview.mdx
+++ b/website/src/content/docs/components/identity/overview.mdx
@@ -105,10 +105,10 @@ Each tool is one protocol verb. What differs between them is where the call goes
 | `fora_register` | `ExchangeService.Register` | direct to the named Exchange |
 | `fora_status` | `ExchangeService.GetAccountStatus` | direct to the named Exchange |
 | `fora_discover` | `BrokerService.Resolve` | via the Broker |
-| `fora_execute` | the Broker's execute relay | via the Broker |
+| `fora_execute` | `BrokerService.ExecuteTransaction` | via the Broker |
 | `fora_report` | `ExchangeService.ReportUsage` | direct to the offer's own Exchange |
 
-Registration must reach the Exchange directly, because the Exchange derives the binding between an account and an identity from the agent's **own** inbound signature. The Broker relay re-signs the transport hop with the Broker's key and carries agent identity in a detached body acceptance — right for fan-out purchases, and it would defeat registration's identity model.
+Registration must reach the Exchange directly, because the Exchange derives the binding between an account and an identity from the agent's **own** inbound signature. `BrokerService.ExecuteTransaction` re-packages a purchase into requests signed with the Broker's key and carries agent identity in detached body acceptances — right for multi-Exchange purchases, and it would defeat registration's identity model.
 
 `fora_report` takes no endpoint argument. The destination is read off the report's own exchange field, which the offer signed, and resolved from that Exchange's manifest. There is no parameter a misconfigured origin could arrive through.
 
diff --git a/website/src/content/docs/getting-started/poc-walkthrough.mdx b/website/src/content/docs/getting-started/poc-walkthrough.mdx
index 35f3a2c3..46782972 100644
--- a/website/src/content/docs/getting-started/poc-walkthrough.mdx
+++ b/website/src/content/docs/getting-started/poc-walkthrough.mdx
@@ -117,12 +117,12 @@ Once connected, five tools appear — the protocol verbs.
 | Tool | Where the call goes |
 |---|---|
 | `Fora discover` | `BrokerService.Resolve`, via the Broker |
-| `Fora execute` | the Broker's execute relay |
+| `Fora execute` | `BrokerService.ExecuteTransaction` |
 | `Fora register` | `ExchangeService.Register`, direct to the Exchange |
 | `Fora report` | `ExchangeService.ReportUsage`, direct to the offer's Exchange |
 | `Fora status` | `ExchangeService.GetAccountStatus`, direct to the Exchange |
 
-Two of them traverse the Broker and three go straight to an Exchange. Registration has to be direct, because the Exchange binds your account to your identity using your own inbound signature, and the Broker relay would re-sign that hop with its own key. See [Identity Service](/components/identity/overview/) for the rest of that reasoning.
+Two of them traverse the Broker and three go straight to an Exchange. Registration has to be direct, because the Exchange binds your account to your identity using your own inbound signature, and a purchase through the Broker is re-signed with the Broker's own key. See [Identity Service](/components/identity/overview/) for the rest of that reasoning.
 
 ## 3. The demo publisher
 
@@ -206,7 +206,7 @@ Ask for the same URL again, and let the agent use the protocol.
 Three tool calls, and the article arrives:
 
 1. **`Fora discover`** (`BrokerService.Resolve`, via the Broker) — the Broker asks the Exchange, which returns an offer per licensing term available to you. This one is free under the Stoa Press AI License.
-2. **`Fora execute`** (the Broker's execute relay) — the agent chooses a signed offer, and the Broker relays the purchase to the Exchange. The Exchange verifies `Offer.signature` and answers with a signed retrieval URL in `TransactionResultItem.retrieval_endpoint`. The MCP server then fetches the content from that URL itself, because only it holds the key the URL is bound to. The delivery edge verifies the URL and serves the bytes, the same bytes the door refused, and the article comes back in the tool result.
+2. **`Fora execute`** (`BrokerService.ExecuteTransaction`, via the Broker) — the agent chooses a signed offer, and the Broker re-packages the purchase into a request to the offer's Exchange, signed with its own key, with the agent's acceptance in the body. The Exchange verifies `Offer.signature` and answers with a signed retrieval URL in `TransactionResultItem.retrieval_endpoint`. The MCP server then fetches the content from that URL itself, because only it holds the key the URL is bound to. The delivery edge verifies the URL and serves the bytes, the same bytes the door refused, and the article comes back in the tool result.
 3. **`Fora report`** (`ExchangeService.ReportUsage`, direct to the offer's Exchange) — the offer carried a `ReportingObligation`, so the agent files a report and gets back a `UsageReportResponse.report_id`.
 
 See [Why the service fetches the content](/components/identity/overview/#why-the-service-fetches-the-content) for the reason the fetch happens inside `Fora execute`.
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index a4999104..982847fb 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -208,7 +208,7 @@ The Exchange/edge verifies a delegation by (offline, using only the owner's publ
 
 1. **Verify the authority JWT** with the resource owner's published key (the trust anchor). Read its `scope`, `exp`, and `cnf.jkt`.
 2. **Verify each delegation JWT** with the key in its own JOSE header `jwk` — but only after checking `thumbprint(header key) == parent cnf.jkt` (the **chain-linkage invariant**). Reject a JWT signed by a key the parent did not name. Check each child's `scope` is covered by its parent's.
-3. **Verify holder binding** — the key that signed the HTTP request ([RFC 9421](#request-signatures-rfc-9421)) MUST hash to the final delegation's `cnf.jkt`. If not, **reject** (`DENIAL_REASON_DELEGATION_INVALID`). This is what makes a leaked token useless to a thief: possessing the bytes is not enough — you must control the bound private key. It is **not optional** and **not skippable**; an Exchange that omits it reduces the token to a bearer credential and breaks the anti-theft guarantee.
+3. **Verify holder binding** — the key that signed the HTTP request ([RFC 9421](#request-signatures-rfc-9421)) MUST hash to the final delegation's `cnf.jkt`. On a purchase a Broker re-packaged, the request is signed by the Broker, so the check uses the key the item's `AgentAcceptance` verifies under instead (see [Which signature binds in a brokered request](#verification)). If not, **reject** (`DENIAL_REASON_DELEGATION_INVALID`). This is what makes a leaked token useless to a thief: possessing the bytes is not enough — you must control the bound private key. It is **not optional** and **not skippable**; an Exchange that omits it reduces the token to a bearer credential and breaks the anti-theft guarantee.
 4. Check `exp` on every JWT in the chain against current time.
 5. Optionally check `revocation_uri` for high-value transactions.
 
@@ -216,7 +216,12 @@ This is entirely offline — no callback to the issuer. The verifier needs only
 
 **Binding across hops.** Each delegation re-binds to the next holder's key (`cnf.jkt` of the child = the next agent), so at every hop the bound key is whoever now signs the request. The chain of JWT signatures carries the binding forward — there is no point at which the token reverts to bearer form.
 
-**Which signature binds in a brokered request.** A forwarded request carries more than one RFC 9421 signature (the agent's, plus a hop signature from each intermediary). The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt`. In the **default broker pass-through** case the broker is a pure relay: it forwards the agent's delegation unchanged, the agent remains the terminal holder, and the **agent's** request signature is the one that must match `cnf.jkt` (the broker's hop signature is provenance only). Only if the agent explicitly **delegated to the broker** (the broker issues a child JWT bound to its own key and signs the request) does the broker become the terminal holder and its signature bind. Intermediaries never silently become the holder.
+**Which signature binds in a brokered request.** The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt`. Which key the Exchange compares depends on how the request reached it:
+
+- **Forwarded byte-for-byte** (discovery relayed toward an Exchange). The request carries the agent's RFC 9421 signature plus a hop signature from each intermediary. The broker forwards the agent's delegation unchanged, the agent remains the terminal holder, and the **agent's** request signature is the one that must match `cnf.jkt`. The broker's hop signature is provenance only.
+- **Re-packaged purchase** (`BrokerService.ExecuteTransaction`). The sub-request reaching the Exchange is signed by the Broker alone. The Exchange checks `cnf.jkt` against the key each item's **`AgentAcceptance`** verifies under — the agent's key, resolved from the requester's WBA directory — and not against the request signer. The agent does not need to delegate to the Broker for the Broker to relay its purchase, and an item without an `AgentAcceptance` fails the binding.
+
+Only if the agent explicitly **delegated to the broker** (the broker issues a child JWT bound to its own key) does the broker become the terminal holder. Intermediaries never silently become the holder.
 
 ### Delegation Denial Reasons
 
@@ -290,7 +295,7 @@ This distinction prevents information leakage on public Exchanges while allowing
 
 ## Multi-hop forwarding
 
-When a request passes through forwarding parties (e.g., Agent to Broker to Exchange), the forwarding chain is **not** carried in the message body at all. It lives entirely in the HTTP headers as a stack of [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421).
+When a request is forwarded **byte-for-byte** through intermediaries (for example, discovery relayed from an agent through a Broker to an Exchange), the forwarding chain is **not** carried in the message body at all. It lives entirely in the HTTP headers as a stack of [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421).
 
 ### How It Works
 
@@ -310,11 +315,13 @@ The Exchange verifies the full chain by:
 
 When only the agent's signature is present, the agent is querying the Exchange directly — no broker was involved.
 
+A purchase through a Broker does not use this chain. `BrokerService.ExecuteTransaction` terminates at the Broker, and the Broker re-packages the purchase into one new request per Exchange, signed by the Broker alone. See [Projected execute requests](#projected-execute-requests).
+
 See [Multi-Hop Example (Broker)](#multi-hop-example-broker) below for the concrete header layout.
 
 ### Projected execute requests
 
-The hop-signature stack above applies to requests forwarded **byte-for-byte**. Projection is the other case. When a Broker splits a mixed-Exchange `TransactionRequest` into per-Exchange subrequests, each subrequest has a new body, so the agent's original signature — which covered the original body through `Content-Digest` — cannot travel with it. There is no way to forward a projected body under the agent's HTTP signature, and the protocol does not ask for one.
+The hop-signature stack above applies to requests forwarded **byte-for-byte**. Projection is the other case, and it is how every purchase through a Broker travels. When a Broker splits a mixed-Exchange `TransactionRequest` it received on `BrokerService.ExecuteTransaction` into per-Exchange subrequests, each subrequest has a new body, so the agent's original signature — which covered the original body through `Content-Digest` — cannot travel with it. There is no way to forward a projected body under the agent's HTTP signature, and the protocol does not ask for one.
 
 Instead, each projected subrequest is a **new HTTP request its sender authors**. The projecting party — a Broker, or the agent itself when it splits its own set — computes the subrequest's `Content-Digest` and signs it with its own RFC 9421 signature, exactly as any sender does. The Exchange authenticates the wire caller as that sender.
 
@@ -325,7 +332,9 @@ The agent's cryptographic authorization does not ride the transport layer at all
 
 The Exchange resolves the `agent_request_acceptance` verification key from the requester the signed payload names: the payload's `requester_domain` must equal the request's `requester.domain`, and the signature is accepted only if it verifies against an Ed25519 key currently valid in that domain's WBA directory (`{requester_domain}/.well-known/http-message-signatures-directory`). The envelope carries no `keyid`, so the verifier tries the currently-valid Ed25519 keys of that directory — rotation overlap keeps that set small. When the requester itself signed the arriving request, the request-signing key the Exchange already resolved is that key, and no second fetch is needed. A signature that verifies against a key the requester's domain publishes is what makes the claimed requester identity an authenticated one, the same anchoring every other directory lookup uses.
 
-Delegation is unchanged by projection: the holder-binding check still matches the key that RFC 9421-signed the **arriving** request (see [Which signature binds in a brokered request](#verification)). A projecting Broker is the wire signer, so it may project a delegated request only when the agent has explicitly delegated to the Broker's key — the same terminal-holder rule as narrowing. A pure relay cannot project a delegated request; without a delegation, the Broker simply authenticates as itself while the body's detached signatures carry the agent's authorization.
+Delegation on a projected request: the projecting Broker is the wire signer, so the holder-binding check matches the key each item's `AgentAcceptance` verifies under, not the Broker's request signature (see [Which signature binds in a brokered request](#verification)). The agent stays the terminal holder and does not need to delegate to the Broker. The Broker authenticates as itself, and the body's detached signatures carry the agent's authorization.
+
+Before re-packaging, the Broker checks that `requester.domain` equals the agent's verified signing directory, the host of the WBA directory the covered `Signature-Agent` header names. Every Exchange resolves the acceptance keys from `requester.domain`, so a mismatch could only be refused downstream. The Broker refuses it first, as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`: the signature verifies, but not for the requester the body claims.
 
 ## Request Signatures (RFC 9421)
 
@@ -371,7 +380,7 @@ The `Signature-Agent` value may also arrive quoted — `"https://research.acme.c
 
 ### Multi-Hop Example (Broker)
 
-When a request passes through a Broker, each hop adds its own signature. The Broker signs over the same components plus the agent's existing signature, creating a verifiable chain:
+When a request is forwarded byte-for-byte through a Broker, each hop adds its own signature. The Broker signs over the same components plus the agent's existing signature, creating a verifiable chain:
 
 ```http
 POST /fora.v1.ExchangeService/DiscoverResources HTTP/1.1
diff --git a/website/src/content/docs/protocol/role-composition.mdx b/website/src/content/docs/protocol/role-composition.mdx
index 679a321c..574328da 100644
--- a/website/src/content/docs/protocol/role-composition.mdx
+++ b/website/src/content/docs/protocol/role-composition.mdx
@@ -35,7 +35,7 @@ The `WellKnownManifest.role` field identifies which role a given subdomain holds
 Three properties keep the trust model intact under multi-role operation:
 
 1. **Per-role key separation.** Each role publishes its own keys in its own WBA directory — the JOSE JWK Set (`WBAFile.keys`) served at `/.well-known/http-message-signatures-directory` for that role's domain, with each key identified by its RFC 7638 JWK Thumbprint (the RFC 9421 `keyid`). Keys are no longer carried in `WellKnownManifest`. An operator's Exchange key cannot sign messages that an Agent role would accept, and vice versa, because consumers look up keys by `(domain, role)`, not by operator.
-2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures applied **hop-by-hop** — each forwarding party adds its own labeled `Signature` header covering the request plus the prior hop's signature as the request passes through. The ordered stack of these labeled signatures in the HTTP headers *is* the forwarding chain; each hop's transport-layer signature proves its participation independently of the others, and the Exchange verifies the whole stack and counts hops against `max_hops` / `max_intermediary_hops`. The forwarding path is established at discovery and the Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate, suppress, or rewrite a hop's contribution without breaking that hop's signature in the header stack — which any auditor with access to the Exchange's request logs can detect.
+2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures applied **hop-by-hop** — on a request forwarded byte-for-byte, each forwarding party adds its own labeled `Signature` header covering the request plus the prior hop's signature as the request passes through. The ordered stack of these labeled signatures in the HTTP headers *is* the forwarding chain; each hop's transport-layer signature proves its participation independently of the others, and the Exchange verifies the whole stack and counts hops against `max_hops` / `max_intermediary_hops`. The forwarding path is established at discovery and the Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate, suppress, or rewrite a hop's contribution without breaking that hop's signature in the header stack — which any auditor with access to the Exchange's request logs can detect. A purchase through a Broker (`BrokerService.ExecuteTransaction`) is re-packaged rather than forwarded: the Broker signs each per-Exchange sub-request itself, and the agent's consent travels in the body as its per-item `AgentAcceptance` and its `AgentRequestAcceptance`. A Broker run by an Exchange's operator therefore cannot fabricate or alter a purchase either, without breaking the agent's acceptance or the offer's signature.
 3. **Independent reconciliation records.** Settlement reconciliation uses three independent records (Exchange ledger, CDN access log, `UsageReport`) that must agree within the published tolerance — see [Transaction Flow → Reconciliation via Signed URLs](/protocol/transaction-flow/#reconciliation-via-signed-urls). Collusion between two co-operated roles still has to produce consistent records across all three, which is detectable by any auditor with access to the CDN logs and the dispute record.
 
 In other words: the protocol does not assume that distinct roles are run by distinct operators. It assumes that distinct roles produce distinct, independently verifiable signatures and records. Multi-role operators inherit that property by following the standard manifest discipline.
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index cc99e676..5221edb8 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -695,7 +695,9 @@ SDK or Broker commits to the subscription offer.
 }
 ```
 
-### Orchestrated request -- forwarding chain in the headers:
+### Orchestrated request -- bought through the Broker:
+
+The agent sends the purchase to the Broker, `POST https://broker.example/fora.v1.BrokerService/ExecuteTransaction`, signed for the Broker's URL. The Broker re-packages it and sends SSP-Alpha's Exchange its own sub-request:
 
 `POST https://exchange.ssp-alpha.com/fora/v1/fora.v1.ExchangeService/ExecuteTransaction`
 
@@ -757,7 +759,7 @@ SDK or Broker commits to the subscription offer.
 }
 ```
 
-The request body is identical to the direct case; the forwarding chain lives in the HTTP headers. The Broker preserves the agent's labeled RFC 9421 signature and adds its own labeled RFC 9421 signature (covering the request plus the agent's signature) to the `Signature`/`Signature-Input` headers. The Exchange verifies both: the agent's identity (via the agent's RFC 9421 HTTP Message Signature, alg=ed25519, + public key fetched from the agent's WBA directory at `claude.ai/.well-known/http-message-signatures-directory`) and each forwarding hop (via that hop's labeled RFC 9421 signature + the hop's public key, selected by its `keyid` thumbprint from the key set the Exchange is configured with).
+The sub-request body carries SSP-Alpha's items exactly as the agent signed them, with the agent's `agent_acceptance` on each item, its `agent_request_acceptance`, its `requester` and its `idempotency_key` unchanged. There is no forwarding chain: the sub-request is a new request the Broker authored, so it carries one RFC 9421 signature, the Broker's, whose key the Exchange selects by its `keyid` thumbprint from the key set it is configured with. The agent's consent is verified from the body: the acceptances verify against the agent's key from the WBA directory of `requester.domain` (`claude.ai/.well-known/http-message-signatures-directory`), and the request acceptance proves these items are the complete in-order set addressed to SSP-Alpha. The Broker returns SSP-Alpha's answer to the agent inside a `BrokerTransactionResponse`, alongside the results of any other Exchange in the same purchase.
 
 ### Inside SSP-Alpha's Exchange
 
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index bec9f98c..6dd1354f 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -9,22 +9,31 @@ The Exchange exposes four RPCs. This is the core protocol -- everything else is
 
 ```
 With Broker (multi-exchange, budget control, reporting):
-  Agent -> Broker -> Exchange A, B, C -> select best -> deliver
+  Agent -> Broker -> Exchange A, B, C -> select best
+  Agent -> Exchange A, B, C directly            -> buy, deliver
+     or Agent -> Broker -> Exchange A, B, C     -> buy in one call, deliver
 
 Without Broker (direct, single exchange):
   Agent -> Exchange -> deliver
 ```
 
+After discovery the agent buys its selected offers one of two ways: directly, calling `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker, with one `BrokerService.ExecuteTransaction` call for offers from any number of Exchanges. See [Buying through a Broker](#buying-through-a-broker).
+
 ## Multi-Hop Routing
 
-Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. The forwarding chain lives entirely in the HTTP layer as a **stack of [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) HTTP Message Signatures** — there is no in-message hop list. Each party that originates or forwards the request adds **one** labeled signature (`Signature` / `Signature-Input`, e.g. `fora-agent`, `fora-broker-1`). Each forwarder's signature covers the request essentials (`@method`, `@authority`, `@path`, `Content-Digest`) **plus the previous hop's signature**, so the chain is ordered and tamper-evident: no hop can be reordered, dropped, or inserted without invalidating a downstream signature. The `keyid` on each signature is the key's RFC 7638 thumbprint. The request carries **one** covered `Signature-Agent` header — the agent's WBA directory at `{domain}/.well-known/http-message-signatures-directory`, forwarded unchanged by every relay — so the Exchange resolves the agent's key there, and takes each forwarding hop's key from the key set it is configured with (for example, Brokers registered with it). The Exchange verifies **every** signature and confirms the chain is contiguous. The ordered set of signatures *is* the forwarding chain.
+A request through a Broker reaches an Exchange in one of two ways, and they authenticate differently.
+
+- **Re-packaged.** Both Broker RPCs terminate at the Broker. For `Resolve`, the Broker authors new per-Exchange `ResourceQuery` messages (the discovery fan-out). For `BrokerService.ExecuteTransaction`, it authors one `TransactionRequest` per Exchange. Each of these requests carries **only the Broker's** RFC 9421 signature, because the Broker wrote it. On a purchase, the agent's consent travels in the body as `AgentAcceptance` and `AgentRequestAcceptance`, which are detached signatures that stay valid however the request was re-packaged.
+- **Forwarded byte-for-byte.** A request relayed unchanged keeps the agent's signature and gains one per forwarding hop. This is the forwarding chain described next. It applies to discovery forwarded toward an Exchange; a purchase through a Broker is always re-packaged.
+
+A forwarded request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. The forwarding chain lives entirely in the HTTP layer as a **stack of [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) HTTP Message Signatures** — there is no in-message hop list. Each party that originates or forwards the request adds **one** labeled signature (`Signature` / `Signature-Input`, e.g. `fora-agent`, `fora-broker-1`). Each forwarder's signature covers the request essentials (`@method`, `@authority`, `@path`, `Content-Digest`) **plus the previous hop's signature**, so the chain is ordered and tamper-evident: no hop can be reordered, dropped, or inserted without invalidating a downstream signature. The `keyid` on each signature is the key's RFC 7638 thumbprint. The request carries **one** covered `Signature-Agent` header — the agent's WBA directory at `{domain}/.well-known/http-message-signatures-directory`, forwarded unchanged by every relay — so the Exchange resolves the agent's key there, and takes each forwarding hop's key from the key set it is configured with (for example, Brokers registered with it). The Exchange verifies **every** signature and confirms the chain is contiguous. The ordered set of signatures *is* the forwarding chain.
 
 **Chain-depth caps.** Two fields bound how deep a chain may go:
 
 - `RequestConstraints.max_hops` -- the agent caps its own chain depth. A Broker MUST NOT forward a request whose signature count would exceed it.
 - `WellKnownManifest.max_intermediary_hops` -- the Exchange publishes the longest inbound chain (signature count) it tolerates; longer chains SHOULD be rejected, and a Broker can prune before forwarding.
 
-**Response path: direct.** Responses do **not** retrace the hop chain. The terminal Exchange returns its `TransactionResponse` (or `ResourceResponse`) directly to the originating agent; the Exchange-facing Broker that holds the agent binding relays it back without re-fanning through every hop. This works because the signed `retrieval_endpoint` is bound to the agent's identity (`agent_identity_hash`), so delivery needs no return-path relay. Intermediaries observe requests, not responses.
+**Response path: direct.** Responses do **not** retrace the hop chain. The terminal Exchange returns its `ResourceResponse` directly to the originating agent; the Exchange-facing Broker that holds the agent binding relays it back without re-fanning through every hop. A purchase through a Broker is answered by the Broker, which combines the Exchanges' answers into one `BrokerTransactionResponse`. This works because the signed `retrieval_endpoint` is bound to the agent's identity (`agent_identity_hash`), so delivery needs no return-path relay. Intermediaries observe requests, not responses.
 
 ## RPC 1: DiscoverResources
 
@@ -285,7 +294,7 @@ When the requester holds a subscription, the Exchange attaches `SubscriptionQuot
 
 ## RPC 2: ExecuteTransaction
 
-The agent or Broker commits to a selected offer, receiving a signed URL for content delivery.
+The agent commits to a selected offer, receiving a signed URL for content delivery. A Broker calls this RPC too: once per Exchange, when it re-packages a purchase made through `BrokerService.ExecuteTransaction`.
 
 ```
 POST /fora.v1.ExchangeService/ExecuteTransaction
@@ -380,7 +389,7 @@ The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A b
 ### What Happens Inside the Exchange
 
 1. Validate request (proto validation)
-2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, a projecting Broker's on a projected one — and each prior hop signature if present
+2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a sub-request the Broker re-packaged. On a re-packaged sub-request the agent is authenticated by its body acceptances instead, and a delegation's holder binding (`cnf.jkt`) is checked against the key the item's `AgentAcceptance` verifies under, not against the Broker
 3. Verify `agent_request_acceptance` when present: the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange. This runs **before** the idempotency lookup — request-level idempotency state is never created or served for a request whose set claim has not been proven, otherwise a mutated request could consume the key and a later honest retry would replay its result
 4. Check idempotency key (prevent double-charge on retry)
 5. Verify offer signature (reconstruct offer from signed token)
@@ -471,6 +480,78 @@ For batch transactions, use the `items` array:
 
 Each item gets its own `transaction_id`, `billing_id`, and signed URL. Batch transactions are non-atomic -- individual items can fail independently.
 
+### Buying through a Broker
+
+`BrokerService.ExecuteTransaction` buys offers from any number of Exchanges in one call. The agent sends the same `TransactionRequest` it would send an Exchange — every item with its `AgentAcceptance`, plus one `AgentRequestAcceptance` over all items — signed for the Broker's URL.
+
+```
+POST /fora.v1.BrokerService/ExecuteTransaction
+Content-Type: application/json
+```
+
+The Broker re-packages the purchase:
+
+1. It verifies the agent's request signature, and checks that `requester.domain` is the agent's verified signing directory (the host of the WBA directory the covered `Signature-Agent` header names).
+2. It groups the items by each signed offer's `exchange`. It checks that it can route to each Exchange and approves it for purchases before it sends anything.
+3. It sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. Each sub-request carries that Exchange's items in request order with their acceptances, the agent's `AgentRequestAcceptance` unchanged, the agent's `requester` and the agent's `idempotency_key` unchanged. Each Exchange verifies the agent's consent from the body.
+4. It combines the answers into one `BrokerTransactionResponse`.
+
+Re-packaging and combining are safe because each item is atomic and its integrity is per resource. Each offer carries the signature of the Exchange that issued it, covering price, terms, expiry and `exchange`. Each acceptance binds the agent to that one offer, the requester and the idempotency key. Each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases, and it cannot change what an item buys, from whom, at what price or for whom without breaking that offer's signature or the agent's acceptance. The `AgentRequestAcceptance` also stops it dropping, adding or reordering items within one Exchange's sub-request. No cross-item integrity is needed. On the response side, the one signed value in a result item is `retrieval_endpoint`, which the issuing Exchange signed. The other fields are the Broker's unsigned report of what each Exchange answered; the charge itself is still bounded by the signed offer the Exchange verified.
+
+```json
+{
+  "ver": "1.0",
+  "items": [
+    {
+      "offer_id": "6edb0ed0-6f7f-4fb2-877b-ea7fa271ad07",
+      "transaction_id": "txn-a-001",
+      "billing_id": "bill-a-001",
+      "retrieval_endpoint": "https://cdn.publisher.example/a1?Signature=...",
+      "cost": { "amount": "0.05", "currency": "USD" }
+    },
+    {
+      "offer_id": "7a9482de-d0d2-4bfb-ba99-c2506dc2bc91",
+      "refusal": {
+        "exchange": "exchange-b.example",
+        "code": "permission_denied",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+            "exchange": "exchange-b.example"
+          }
+        }
+      }
+    },
+    {
+      "offer_id": "5c43dd75-9960-4ebf-bbbd-06d4f9014a40",
+      "transaction_id": "txn-a-002",
+      "billing_id": "bill-a-002",
+      "retrieval_endpoint": "https://cdn.publisher.example/a2?Signature=...",
+      "cost": { "amount": "0.40", "currency": "EUR" }
+    }
+  ],
+  "exchanges": [
+    { "exchange": "exchange-a.example", "offer_ids": ["6edb0ed0-6f7f-4fb2-877b-ea7fa271ad07", "5c43dd75-9960-4ebf-bbbd-06d4f9014a40"], "agent_identity_hash": "NzbLsXh8..." },
+    { "exchange": "exchange-b.example", "offer_ids": ["7a9482de-d0d2-4bfb-ba99-c2506dc2bc91"] }
+  ],
+  "totals": [
+    { "amount": "0.05", "currency": "USD" },
+    { "amount": "0.40", "currency": "EUR" }
+  ]
+}
+```
+
+- `items` has one entry per request item, in request order. A success, or a per-item denial, is the Exchange's `TransactionResultItem` unchanged.
+- **Upstream refusals ride in the body.** When an Exchange refuses the Broker's whole sub-request, or does not answer it, the Broker does not turn that into an error of its own. Each affected item carries `refusal`: the Exchange, the Connect `code` it answered with, and its `ErrorDetail` unchanged. The other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is not a catch-all for upstream failures.
+- `exchanges` has one `ExchangeOutcome` per Exchange contacted. Its `agent_identity_hash` is what that Exchange's retrieval URLs are bound to.
+- `totals` sums only the charged items (those with neither `denial_reason` nor `refusal`), one `Cost` per currency. Amounts are never summed across currencies.
+- `DENIAL_REASON_RELAY_NOT_ACCEPTED` on an item means the provider at that Exchange does not accept purchases relayed by a Broker. Buy that offer directly.
+
+The Broker's own refusals are non-OK Connect errors carrying an `ErrorDetail`, and nothing was bought: an invalid agent signature is `unauthenticated` with `request_auth_failure`; a `requester.domain` that is not the agent's signing directory is `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; a malformed request is `invalid_argument`; an Exchange the Broker cannot route to or does not approve is `failed_precondition`, with `metadata["exchange"]` naming it.
+
+A retry is safe. The Broker forwards the agent's `idempotency_key` unchanged to every Exchange, so each Exchange answers a repeated sub-request from its stored result. A timed-out sub-request is an ambiguous outcome, and retrying with the same key is how the agent resolves it.
+
 ### Subscription TransactionResponse
 
 ```json
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 721386ea..533581f2 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,65 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**The Broker buys: `BrokerService.ExecuteTransaction` (additive wire change).**
+A purchase of offers from several Exchanges is now one call to the Broker. Before
+this change `BrokerService` had only `Resolve`, and the contract described the
+agent buying at each Exchange directly, with a Broker on the path forwarding the
+request byte-for-byte under a stack of hop signatures. Implementations relayed
+purchases through the Broker anyway, by re-packaging them outside the contract.
+The contract now defines that relay.
+
+- `rpc ExecuteTransaction(TransactionRequest) returns (BrokerTransactionResponse)`
+  on `BrokerService`. The agent sends the same `TransactionRequest` it would send
+  an Exchange: every item with its `AgentAcceptance`, and one
+  `AgentRequestAcceptance` over all items. The Broker verifies the agent's request,
+  groups the items by each signed offer's `exchange`, and sends one
+  `ExchangeService.ExecuteTransaction` per Exchange, signed with its own key. The
+  acceptances travel in each sub-request body, so every Exchange still verifies
+  the agent's consent. The Broker forwards the agent's `idempotency_key` unchanged
+  to every Exchange.
+- New messages: `BrokerTransactionResponse` (`items` in request order,
+  `exchanges`, per-currency `totals`), `ExchangeOutcome` (one per Exchange
+  contacted: `exchange`, `offer_ids`, `agent_identity_hash`, `subscription_quota`)
+  and `UpstreamRefusal` (`exchange`, the Connect `code`, the Exchange's
+  `ErrorDetail`).
+- `TransactionResultItem.refusal = 14`. An Exchange's refusal of a whole
+  sub-request is never turned into a Broker error: it rides on each affected item,
+  and the other Exchanges' results come back unchanged.
+- `DenialReason.DENIAL_REASON_RELAY_NOT_ACCEPTED = 19`: the provider at this
+  Exchange does not accept purchases relayed by a Broker. Buy the offer directly.
+- The Broker's own refusals are non-OK errors: `unauthenticated` with
+  `request_auth_failure` for an invalid agent signature, and `SIGNATURE_INVALID`
+  when `requester.domain` is not the agent's verified signing directory;
+  `invalid_argument` for a malformed request; `failed_precondition` for an
+  Exchange it cannot route to or does not approve.
+- `DENIAL_REASON_CONTENT_UNAVAILABLE` is documented as not a catch-all for
+  upstream failures.
+- Re-packaging is safe because each item is atomic and its integrity is per
+  resource: each offer carries its Exchange's signature, each acceptance binds the
+  agent to that one offer, and each result comes from the Exchange that owns the
+  resource. In a result item the one signed value is `retrieval_endpoint`; the
+  combined response is otherwise the Broker's unsigned report.
+- Updated rules: the forwarding chain of hop signatures applies to requests
+  forwarded byte-for-byte, such as discovery; a purchase through a Broker is always
+  re-packaged. On a re-packaged purchase the delegation holder binding (`cnf.jkt`)
+  and `agent_identity_hash` use the key the item's `AgentAcceptance` verifies
+  under, not the request signer, which is the Broker. An Exchange scopes a relayed
+  request's idempotency key per Broker, authenticated requester and key.
+
+SDKs, in all three languages:
+
+- `BrokerClient.Execute` (Go), `BrokerClient.execute` (Python, async and sync) and
+  `BrokerClient.execute` (TypeScript) buy verified offers through a Broker in one
+  call and return the `BrokerTransactionResponse`. The client builds each item's
+  acceptance and the request acceptance from its signer, stamps `ver` and the
+  requester, and refuses locally, as malformed, a `requester.domain` that is not the
+  host of the directory it signs as (Signature-Agent).
+- The exchange client buys several offers from one Exchange in one request:
+  `Client.ExecuteBatch` in Go, and `execute` given a sequence (Python) or an array
+  (TypeScript). Offers from more than one Exchange are refused locally.
+- The client-request corpus gains the `brokerExecute` verb.
+
 **Python SDK: four additions for callers that test FORA services through the SDK.
 Python-only for now; Go and TypeScript parity follows.**
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index e9c4ef8f..5b6cf834 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -110,17 +110,25 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T20: Kickback-driven offer selection
 **Attack**: Broker always routes to a specific Exchange regardless of pricing.
-**Countermeasure (protocol)**: Agent can bypass Broker and query Exchanges directly. Each forwarding party adds its own RFC 9421 HTTP Message Signature to the request — covering the request plus the prior hop's signature — so the ordered stack of signatures in the HTTP headers is a tamper-evident forwarding chain that provides non-repudiation. Reordering, dropping, or inserting a hop breaks a downstream signature, and the Exchange verifies the whole stack.
+**Countermeasure (protocol)**: Agent can bypass Broker and query and buy at Exchanges directly. On discovery forwarded byte-for-byte, each forwarding party adds its own RFC 9421 HTTP Message Signature to the request — covering the request plus the prior hop's signature — so the ordered stack of signatures in the HTTP headers is a tamper-evident forwarding chain that provides non-repudiation. Reordering, dropping, or inserting a hop breaks a downstream signature, and the Exchange verifies the whole stack.
 
 ### T21: Query intelligence harvesting
 **Attack**: Broker logs every DiscoverResources query, sells the data.
 **Countermeasure**: Not solvable at protocol level. Data handling agreements required.
 
 ### T-BRK-1: Request-set mutation during execute fan-out
-**Attack**: The agent commits to an ordered set of offers and hands execution to a Broker. While projecting the set into per-Exchange `ExecuteTransaction` subrequests, the Broker mutates it at the **item** level: it removes an item, appends one the agent never chose, reorders the items, or sends a valid subset first so the agent's idempotency key is consumed by a request the agent did not make — a later honest retry then replays the mutilated result instead of executing the real set.
+**Attack**: The agent commits to an ordered set of offers and hands execution to a Broker (`BrokerService.ExecuteTransaction`). While projecting the set into per-Exchange `ExecuteTransaction` subrequests, the Broker mutates it at the **item** level: it removes an item, appends one the agent never chose, reorders the items, or sends a valid subset first so the agent's idempotency key is consumed by a request the agent did not make — a later honest retry then replays the mutilated result instead of executing the real set.
 **Why the hop stack does not cover this**: The RFC 9421 forwarding-signature stack (T20, T-DEL-4) proves who forwarded a request that travels **byte-for-byte**. A projected subrequest is a new HTTP request the Broker authors and signs itself, so hop-chain integrity says nothing about which items the projected body carries — see [Projected execute requests](/protocol/authentication/#projected-execute-requests).
 **Countermeasure (protocol)**: **`TransactionRequest.agent_request_acceptance`.** The agent signs the complete ordered set of `(offer signature, exchange)` references plus the requester and idempotency key with its own Ed25519 key, and the Broker must forward the envelope unchanged on every subrequest. Each Exchange verifies the signature and requires its subrequest to equal the complete in-order projection of the signed set addressed to itself, **before** creating or serving any request-level idempotency state. A removed, appended, reordered, or subset request fails the projection check and claims nothing. The field is optional for wire compatibility: an older client that omits it keeps per-item execution semantics (each item still carries its own `agent_acceptance`) but gets no request-level set claim.
 
+### T-BRK-2: Tampering with a relayed purchase
+**Attack**: A Broker relaying a purchase (`BrokerService.ExecuteTransaction`) changes what an item buys: a different offer, a higher price, other terms, another Exchange, or a purchase on behalf of a different requester.
+**Countermeasure (protocol)**: **Per-item integrity.** Each item is atomic and its integrity is per resource. The offer carries its issuing Exchange's Ed25519 signature over price, terms, expiry and `exchange`; the agent's `AgentAcceptance` binds that one offer to the requester and the idempotency key; and the Exchange that owns the resource executes it. Altering any of these breaks the offer signature or the acceptance, and the Exchange refuses the item. Combining items from several Exchanges into one response therefore needs no cross-item integrity. The Broker also checks that `requester.domain` is the agent's verified signing directory before relaying, and refuses a mismatch as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; each Exchange resolves the acceptance keys from `requester.domain`, so a forged requester fails there in any case.
+
+### T-BRK-3: Misreporting a relayed purchase
+**Attack**: A Broker relaying a purchase reports an outcome that differs from what an Exchange answered: it claims a refusal for an item that was bought, alters a reported cost or transaction id, or drops one Exchange's sub-request and reports it refused.
+**Countermeasure (protocol)**: **Partial.** The combined `BrokerTransactionResponse` is unsigned; the one signed value in a result item is `retrieval_endpoint`, a URL the issuing Exchange signed, which the Broker cannot forge or alter. What the agent is charged is bounded by the signed offer the Exchange verified, whatever the Broker reports. An upstream refusal always rides in the body (`TransactionResultItem.refusal`, with the Exchange's own `ErrorDetail`), never as a Broker error, so the other Exchanges' results reach the agent. An agent that doubts an outcome can retry with the same `idempotency_key`: the Broker forwards it unchanged and the Exchange answers from its stored result. The agent can also reconcile with the Exchange that issued the offer directly, through its usage report and, where the outcome is wrong, a dispute. **Residual risk**: the per-item report fields are as trustworthy as the Broker; an agent that cannot accept that buys directly.
+
 ## 5. Third-Party Attacks
 
 ### T22: Exchange impersonation
@@ -250,6 +258,8 @@ Line 3: Legal/contractual enforcement
 
 ### T-DEL-4: Forwarding chain forgery
 
+The forwarding chain covers requests forwarded byte-for-byte, such as discovery relayed toward an Exchange. A purchase through a Broker is re-packaged and carries no chain; see T-BRK-1 and T-BRK-2.
+
 **Attack**: Attacker inserts a fake hop into the forwarding chain, claiming to be a trusted Broker to gain access or inject misleading provenance — or reorders or drops an existing hop.
 **Countermeasure (protocol)**: **The forwarding chain is a stack of RFC 9421 HTTP Message Signatures (Ed25519).** Each forwarding party adds one labeled signature covering the request plus the prior hop's signature, so the chain is tamper-evident. Exchange verifies every signature on the request against the signer's published public key in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`), the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and verifies the whole stack. A forged, reordered, dropped, or inserted hop breaks a downstream signature, causing the entire request to be rejected. The refusal's typed reason (`RequestAuthFailureReason`) is deliberately coarse — missing, invalid or stale — so it never tells a forger which check its request failed or how far it got.
 

From ef903d587fb1f53473a978c352b7c01225e2b631 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 02:58:30 -0400
Subject: [PATCH 010/164] Say what WellKnownManifest.health_endpoint means and
 how a Broker probes it

The field was documented only as "Health check endpoint URL", and the
Broker deployment page described a HEAD to the endpoint that no Broker
performs. The comment now states the contract:
- the URL a consumer probes to judge whether the Exchange is serving;
- absolute, or a path resolved against the manifest's own URL;
- a 200 answer means serving;
- when absent, the consumer judges reachability by fetching the manifest
  itself, and never assumes a path the protocol does not name.

The manifest reference table and the Broker deployment page say the same.
---
 gen/descriptor.binpb                          | Bin 642223 -> 642560 bytes
 gen/go/fora/v1/fora.pb.go                     |   6 +++++-
 gen/python/wire/models.py                     |   3 ++-
 gen/ts/wire/schemas.ts                        |   2 +-
 proto/fora/v1/fora.proto                      |   6 +++++-
 .../docs/components/broker/deployment.mdx     |   2 +-
 .../docs/protocol/exchange-manifest.mdx       |   2 +-
 7 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 3afbc7490c10c5f515b0e74f913804fe32d388d4..3269573b6b6f8f2f78677e665f867a0afe60cf12 100644
GIT binary patch
delta 15363
zcmaKTdw3Pq*>Cn_XESS}l1xY-d(WOdd+!-8LIQ*&+>&tj(rQJkJ*Tu^En=!Df+g6C
zecD)%f`D=nS$O55fG7kTkPQmRHQWRYf*|E)KoI<}d{kN#OV96JYYpRh&hwl<e9Z5i
z_x;Vg-rHI;vsv+Cho@fY@YK_xr?scEpAN6eId-=;|4Qb>-8maxG~V3W+Gu6w6la~A
zwB*Yi{1?eA`Lfj?Hie$fq?hZD<<~!xZG^+6nqh`tk7*sE-)hc~-;H>9_~?gfOU8^I
z_4`ui-iK?Q`|i2J8Sac2GrI1H$7;uRaq6BJ@vt+z4zht`$2?j))_JgY#K;Fnj(*7b
z?ZdU>9)@7t7-#I5C&twp^w+qDN7h}Z?czK>cFY5{b#&p8C+Z)3sP?+i$Z-x7>uSgT
z22_2V;iH}557dnr1sd|8i!)}dfm=R4eB8s%*jilpP3?ou@P~$v99=g~-s7?1qeuR#
zwr*U9I%mvpM+>(*-gC<!r$_Hzm7PkR0Zv)BZlJCEZ7rA{tHodS{_RSg|MhUKxMA(+
zab3Q*S~v+G>u|^6h|2>bM~xi!d*^}QJHM(OH{xMhGOZ45>ekN4adow$e$^NMcShI#
z2B8>UM^U3-3C|H8iom!rBgTw!9{kA|Tp2wEy2Br<Ej5fAjU38GSft}R%psVY?_UiO
zG?PBeCg`>|8goP{bIou=#{58Er44L|X+B3TI2r<uTyQkR%#`BD1xG{7>tH++5*#;}
z;gvD1M|1$+w^@(!)MkBD6$C!n4Io<?klg^Xl`*qKk=+2Ym9cJRMlZp2qZwY!cWu`D
zRILseZj3-0%WbPnZUn>XSi5dM1jFiBj|!uYV7SQ)ujT!>=v7r~1BRQxur`)ktW0hK
z!`fK1+=pOT8|&HI__<(cZHCwLHCyywRILvfT4NRKgH^N!!}^%nQ8Baz!}?g~65}4h
zkY|QB@_V-G_f~BT81lfdF<{68!^W8DDuz5TY>aj2WRwerd^5a-w`|obtF{CT`C!-*
zFyw<_OU#TZhI}w=iP?@(CKyaJ+{EwQrk7VW1q>z_ngRwB3{5dJt{6-(G{u~h@oT|Q
zV1{?`t=sgvs$Bs?0T^}#3<Y4=6|ABF47+F*wSu9I8Q#n5n)HXN_67`Xkc+*s+(LEJ
zHelErE9&AyFzk(W?QZ;7Fcg~MW?r;izptt}U?_wS&4CYvU}z3jQ3!@+TE!0pLy;Li
zz?W>-@2EZyFcg8|K)_H0h66FvQ$7@d;Xth8&BhE_;BC$DVcu<rKCAk0K+zTyhXabX
zpg0^e6N;iOC=SO`uAxR|J2QMD^Pe61)KK+_fTJBaPQ-Halu<iyoQUPO_aQh=#5#30
zK9p`0o8i-Z`!0QN|I-0QF`{`omTN1UVo;opC3^S}6sKdAy^M8+2u9S5d=t~IW)AMw
z`{w)-fBH=tg(u$xtBHc<o0#ddMnUsUESWZ1i-{A}iN?Je%Qo^2h7lCiCoyWVZ)4%d
zjD)yT%nV=Sk2mYduGeB(JLOIcwAW(AmJdODEtW_c$K(PnGd#iK8=LjxH507su32zx
zf^~hMS>TvpU3bj_#{>(mZOJyYa91-j&B}Tqb9BGHIg~fe(pwu(6L(iF%M4HF4F~kU
zR8RM*A%xG<Emewupq_3OMTL8Spq_5UZR2Z6fvdCmuMg_~teG89gy7w5-@C3_h?FeT
zQ4}Fi%(l|5ahkmAW=7^&SxYjDKG9EwTF<leV&j)^t{XYGkn_X(1LX@XP4+W{pjv2I
za&iNLYN6$N#sk6x7Z+Qa9lh5X#Pbg69r(SU>XkJR$&7Z>$g#z~V}QcIloJpTY>O=`
zZcGiqvF>K%Z7XXf-|?wFrS;pE9yNyHCf&)e<$U-N{pY32Eln3|f)Gs0E!NtHU|MdO
z1;#;&Qg;nk8~K+<^h2eMfeqcg(PFaap#z&nt6i~iKW<)TMpj!{`}oDb>Ax^n)6Hr8
zl;P%)wU)Ml|MIB*cs>4-_lF!@YyJBJf@>|^pK22jwYk=6v%$(XOhXp})TSAE&kC=%
zazwq75@fJ@--?(}W4>C%%voneJ_v~sT1HFRWNAfF*Wq^^(@RSLd?#o@n=B@GS!jZ6
zlhvls7%W`Z%<xwJ)-nB-5nEv|0#&9F-Bzn@+J`XNYPIj+L!Ds99~*hXYYiS^7ujlc
zx(5y#a8O9X$jDafuA!pI$}~{yu=r<nt)k@sDCQlO>NP;zZil6M4N&N!*RD~T$}}7r
z_AXg)Tn`P~>(>l~sF}Tf%>aU8uit8bpx8^Tc7vhi<eQOZE9;OIGIEXV9NLPSt(;<`
zixJMrr@Gm1X&w2WcQTJVC-sO8C>Bl^5uN?C@PR@XmIwIYllox$0P2~d0i6(Z4p_;Q
zahuQq`h+h&ssF(F#L`4>K}RDg_0~L;aE@t4{$^!;&htLgUu*q0E2p*bCzzV#%2B@l
zGyN(1sHKVOCm~FaQuY5t=)i^J{AVrt|F(}?nkif`g$u{6!XoN7n84yBZ*I{av`?xS
zlaQoV%rb@u9mJ=F|M--CtKDL0Vv0Z~8#*mCMfwXJ#Qij1b4nlRoDO)x&^b*!lfr0-
z9%kh4R@UrH^t2w)^8QX^Vm>9U2QB6j?{-FCSbE7XMF`>kC5zo43JDNiT(Vl{8QbZw
z-h-;{+tp|FouTS){X|1Z!`dHwfTUy<$paoBD89A4_Qu>+f&$)6$wbcSFJ)IxiK_wA
zL({-9C7vq}4}jp961U|(4hW7ZaqQ!?9rPgdY+O`o1pq9cjjKupgypkwRjGhN*RRwb
zRH@I$`KCFMZ*B(==(-P7u+PWU-hiuMdOoi920$=9A4kDXps<#kkyqnc>*Jy5*V+7?
z&-Ga5nXmMgQ2wiNJt+fRP63`D=fCb2dAS?_<n!aI<pDuHKd#~o2=e)H#Q7Lb;Nfyw
z{*ufO|3|++RJFtp5~Nt_l6bD%4**Fko|HR0AUKx9JKb#jUQi&;Z}T&k^gmR;9WYRs
z-;U?XO{rXj`R#a29vcC{@OHdIM`JQ&yPV+4%xnM9r-Z6k1{@UdmGN9TvY`YoR>t$>
zU;-qgcyUyus+{7zTBeHEU)CdCSNoa5B^a*uGX)64)p0*l<!Hk2I+>}#0N_~{xR4_*
zs!ZW3nAZ830tC}K$`nolTDZcDY>sDr!vE)=`q6^TalNhaEY*Jn(i7Ph*LLxf|I(+`
z<1aalAqU&GxSGa*VA~eQG^Q;95L?2wc+sx7+!9D2wuGj5cxPO02}%aL?QyjwC=s@V
z9dX(c=sa3MS>6-ZhDL`t{L3r)U9|vm!^I`6aF1V$fI?NB&H=%_CvMC0At1*6p15<D
z*pLWLVkXkRC!YL~aX>B>aDQA&Mz@9df^T(?Z~aDpy95${(d5hiIFpB|3Q-CB;|WJR
zf>cl;9OSQjtKVC5FmRFT;GkcP&;i52cv2n~0m&v_+0%G2f+SR$k+X3eR!Xnx?XvUF
z#`PlEB$d=8=Vg=h1i-4#`%VFZ^1R<9fS^22P4YUGXC+*YT#9R7XFB~yUl^*#pK>v{
z0J}?ZCJ%~$u)7q;K%@);B7>LW@vo6V+8#+j84Uj;9<CA*R1$>jAMtd__eCK3N4#ra
zqqDd_6#f<0tZ3Z1ckFQfgAj8|fPE(@qW_9B`J7oPBKog*G-iwvwqUx-Uk<U+C07Fz
z3gOi_D-grCQiSkoyr`|wL71QguJKBZb*jG>*JSrqiYB_|cOM{luTl5W(>x#w<61m+
zi&|({o&&DMts&wZKnge+&^h2*eBdDQ)Lco8_h(y6MQ?U)djjtkO7QyO!Ql^#s>Q38
zx)EbXK0b~g*I2w7I<i<{Axu;|0%93|w$+0mAbk3>?Iev!REm`}f+q4_+3cCBi2+3f
z6cg?16cJENv`u-Qfe9!k+BbJLN(4hIGdzj^JDYW_o)j>&0>h+$p%oY=*`^$hm0Bw>
zOtLW?7s}c}V5VnAhS?jTvg!8qoar!{ZZolK!&4nb({1e9%cK!ABiz<rv3a+CdiTuZ
z5%&8~Jp_Kn8LYXj1_u%aYi_qGQf0?bcHD0JiY*5Ru8XpZ%(cTW+j4Ly8SGxP)!<Mf
z433v<8XU9%R?<7Od6c4jho7lyRag!Qq6(2;@&;U)XRBQhS3x<?_GfFQh8H!9mi$#`
zp<#=H0MdJ!ML_`RJ<TFpZGSKU#Ufjs*9y$YQakHiTb|eGv3;qXV~X=y0d@3Sww9FV
zwQdHB*nncN<lrKj<}Dk8<%c-H6i|;W<M$fuPJ0<l#9;|S=q$7GaB`>60czkM80;>)
z!B*$B0&!SsuyJ1dsnCIQ@9-|U>}U2nwmSC}h{Mu5HqL#L2mRB?7v+Md(bmM%IUJzF
zQls6mlTjgf5Q0_Qyn*#}R@v%|S)k=WXO)dJ<~tZ=Ic>~Hlbv-WGx7%3HQQ{Wb>9cu
zHni^TwC;Z&ZS^A;5NiXL3kL+rc3OCiP{zfb+{$D9?VYwf)PsQ*zSBnc-Yax~cJn9m
z*iY=;{-WB5h3}?C-7R#m@ICyiJoaOIj~|>iV&QuzID>=^7QT<)pU;Na`)o~|uy8M0
z_&(}NI!U&nrf=q(^VvYV*;c1b2%*z#<FtwG3OXpUk9o>u_t_uY>hudCbUwCm`o#+p
z=%6(Z@)t~YhkY>6X$75wq=WW_4tnnp|BuPK+J{udk`OwFYz*lhLWh~*Px&1Mtit&;
zh!2C#rxc&nbVx5WBPZ>wFZqH3_O5x-&M6RiD5N}mhUSoY07R&P<+=gE@fofAcHF0s
z3h)#^(uV!eKIQuYA#_fWFMkv|Kxg=%LRN2|@$*?I@^FUoIY8(j4`1+;g=~=hg&)5{
zk%uoRes>8S<l#IYP{i(b&fA*UyWs%k;k=zn8yD!X($kE5WoOOejYaIg^S`ojSP_Ty
zp0udTwm3`n06?}b`*Q~ni@0p7vm_vVxol&bq*s_dX@yt#AKS62sw;l4LkNZ|ey;<P
zl5NV}9}o;zXl*oZd(v~sRerf0>soU)V4!NaYUj!aQ0Rc+s_pg?8xJ5DuG)R8jHxs^
zdlH<G$UIQYriDr;B-HK&F{~ye)Y%bGs3E`GXs75&hsVj>im~lglM`yQfe<&IoKSCH
z0YNc25tT<+Ku}Ch;0Q~DvL}`GRNmcVu?qYR!>I{1A^~AIHK9f%APlD_{1MrcmNzpY
z9u#f^fG0Bp7ihDZnNXV*u7YW1LQP6QFwIP0QjXV=(OwvpiLC93Q1pj<Q+rmB*%D{x
zv-6iG{O5#Tl-p$qnOgvGFH5LB1rXfJ5-PWV;9izMZg0i%dQs3<@M$S_d&!Exgp#=;
zp<by#2PP{Lc%{)#m>`*rTuZY7LmK@B_0lL#jsAiF!O)mcr%gaGG$wG`Tul!ry#OO?
z659GiIJ!vV`$k19KD3{n&#@mq$sgDC*1X1LPu4?4Zj3Mh-<pKl7y-ezCZSH$fY=z<
zB#PE2<i<z>aiU(E2(L@XjZw*9_g+G6j7o%!@%@CqG4`U0*_e<UV^3tg6hLl?xCAFQ
z`uPR~*~aVn?nM!3TJn^~Le)({T<Boa6vTx}rpZq<OhC~@iM|tg?rlbPC9*!_>)W$C
z@^>ZlwCvp8l-)fly8s~E;|B&1gnRt#0)lW4W%oCTb8pH*GykFk`&~(MU_#k#POzIq
zqd^BI&53-IwhWjcy9fBQ9obJx4kXmOKL}xRAYsX)5FktrBybeM<cA5+A)eQX4J<hn
z+=ViBD8b|lKIo8A0t1}7sy9XXi0mr-jYc`*M;Q=?NBk%Q!tluTDEFo)pOjs7D*$*-
z`oRVi7gbjQg6X6mY(Oxbq+tISg5AfAoK9qMCltMlnyL*?cV>h0Pbc*DGU|OO>StBd
z0l<9LUmPHq&-zgZ1oK&n`psBe9}3oaeoGhDrR02ILQy~O_Y`zsa-MqXN5TYAzrg2p
zVM9wV1SUju!B12l5%mj{sD1RUtPh3#Y9?O7nzfp%eheUmr&s-g0|dv_ggQwBl2HPC
z*LiBhK9q;?PNqvY_GoCxct=f0h(R*mQGo;m$#}<<&jf%V8Sh|I65ZSfDTz#Wv}c|F
zUpJ4dhaOm=D0><Ztdkwp(|}-|?5LgwL{Cq4ik@|3Pm@6O^fOL)nj?E!$zV6dQ9Z3h
z=;^7B-_w0)63+-Z;&l(7--AWE&Tv#y;~Kn};iw@F2(}rHKg9dcX=IKghB)6_&LRWn
z1VN(5g*icx=y73=qh>e^K{UrfwS7*za$hs@l9Tlg%B@DsaQ@oLoCxn)!M5kW<mis9
zxxQ3$^Bp<I0l+`s4;LW#=R0bS1A>3PgPNlP>Pw~aIzL#+hE~1qdk7&IUiUo&Bqhg`
z;|vfCuRA!S&}YWJ)cA|}@Sf}!)r$iL3f*ESSMH6_0mEX)lb<>P!LZorQ7)RgFQKI}
z$`t^xT<V7z5SB~*Faru*Kg@lp4p+!94+aoO6(b;4u_9On72^s&&bSJu6%^++g@|*N
z89Cu(eUq8on`Mmr6OMoUsiM%f$k3JpfU?C8Eg&dc{Llh|vV}ssyAvW)MT=gSNep3o
z+H_x+RD}a6iIc@Qi!llaqjkxWQezvPSE>-s$kwE`GZP=iwub8Qr!0G1fZf)lDtkcK
zZB44O2SnL#O&0A;%CaYcDEn>6@Q$P`dnJQiQ&N?^5~1w3C#me`6$l@&&0a`qe@})p
zzx+9Sg$)Og58PE^Ok7B+4hMu&7m})Y0YQEtnM{cXPe3?zA({R=oT3kGB!E*$@K;Io
zfvt)%cqu90r~=^Hr65$4vP((TW4H?TOG!WZRW#DCBt?%61_05Oz)zYPR{}q2W?TvU
zq?vIgiR6DtO;&A2zDs7kz|TFz&gXxZ)Z59ns;1nJPl>kT^&?rNbbLx>1D8NJKBc+}
z5QO7XNc|x?KUPz&Ch?Uc*{7wG0vpQwq!eo-G7lZtOiHzFXH1heXr!t9y+_z{rBhQ{
zL@5!|)Kse*eF&SWsl0sAIn`7H&!yyin(-*+({m|RX1D~y=Ta(mfI`)eT{VS$c1q5t
z4Wn3O(Cm~-F)kr=vr{U?fFPQkQYi)m(d-mLw@^dqYRt&oRMx6gD0-{IA3vAVHe)}=
zazgoYQ+h&1v4)~JPepOxXcnoQ=SKvWz&+28A|SZuQ509uE>nZGM;4{Dw^HHgYyZ!2
zuW<|;UyrM@J)jG!MJd%DfS_8GQtbhVN?epGdMhQ{g9M^I7N^2XQ?fmj40cOWsy&nl
z?eS*H-xX?T;4M!DuRtmwLD@ni2P7a|S?-4(5R}VPe&}lmu9Tr41b{@W^kWZ**st_s
z4+y4}e(V8-DPlhiq3>r#GO4T=dGE38r(Pz7&EQ5OJKV388F@dYeUJ(pYePmW;7KeS
z@0&@+Gh^AB+t#JRw~DuN@)B0FJ{2DHJqd2Ifh0cN=9Jb1x<B}A$O?&grj9*%`<DO9
zmL6ZXro#OKHp;`cRCvgBwp}T0FWB&MSUHD*M>788IQDV<?o_xsFs4v{m<m7oJqhUc
zq{73l)9p)XAA>I6XT#`HB6`CrmPkSTC>8D-u+X=x=2W=ydlK;OPlc1cuM>Zg(vE=m
z5uZ40Mo7djJi$g*97=_20%LlRKAZ~o|DFVNpVBSGGju;{f#b3T$^nq$<9^`+!oA~u
z4*<gSIQ4+|(MCV2r4~Nyw`^8fOJGCA-r`RZ=)k6hCJFucs2@e`^OR;rZ{{C7!aCK+
z(G4-~3%Q&ufZ+JtpDcjj_?#xoe{uy00(mW^J(bQ({2lvu&T#zg^H7am^J}!9sL^YF
zjRJz_T1ssJfM~pHsq|B6xdo6wZUO&EVGEcT5%)q5OwXM96Kj=SJw1K>KC~H3Pphvz
z{lpxap3aj^28jDiPvaCq4+i~cZL`vH8v%gjthDM!K&*6DT8%<LSk6lO{n(G1cWzpa
z!Z8zAq-Jj50zGceO{-A|O%TmZt5FCDqPc0b<DwhUkNwTansnC5%*qMujY#2|v|eCL
zpe?;WWq(6jD~x{4?_b5*XJ$=d!$PHy$kB!CpxuyW^5-*vpxuxzXk)xi`$B)p(`Fu>
z#uk-s4s56bHmB92HgsUKIgQ7HDe{&mft{HP)9})x`%c^%Rh<JSqS~1*l0Sz5gwf74
zQnf?eNXMAio7PV7x1M9$TklQlHyKsJ0jPb%pPJ5UN<K=5eJ;^e>7tH`n$rGJx^s!q
zSC}B9`}vpCS#{a|bXab9{Y3`%rwirNARtWkr}4X>TZ9QheIOk!i}vCdr{lS5^bFRu
z3<CKTqrXVvfpk0hT^10=2h#X1OTSd;PdWS~9qt&dl*XrKu#yr8<m+@?#=<{I7swC8
zfH3|fjbHv%3uBzs5A*7otY6vTbXa}|?yu3Y{BYW)fk2_7WBK89RgE!JnBYa?k#x8s
zI#Awk^Gw#e3<6o4{WW@<e<WSpRT<OU{3GeIa(V*`F1%qpO2*x!@qk&ZLm33VF}=(`
z8W_{d{G()yS9vhT3;5&daCiJlQG}^s7VFg&0{IaXmtlN7-L|v3GrfL4o-XZXjHlgt
zfEoEboi#O6_&h`Xe4fS^dCKqrRA}UET06%(&Srh<@t1tYha7BY)2(IB0l{`Qjo-V_
z=PW?<_Stmw9D19EEeXW0J-$eX2Z#folAsvBNaOPy{QyLX=)=z!>6(7Vlj8ok&4sj9
z86AZmr1F;8Y+MzfoHql+x91CK_2n2)D95^s6#~Mi3+eI-5!(SY`!4cXFR=bYE(Q!V
z9WMH93>`3BOsmIIKrmcP<FWKB_y-3u`6jyB6gM0_X7Eo(MVw5}IqbHadI)`&Xar7l
z)m(rD2q(JN38@z*x*(Kcq7gXJO-ym+*#qkG?C}>j{EREl9!dtgNv=A3C=t#clU+J{
zoXn*+&qZcrhMTpN<5YgaoZ;rg#FvjE8Zk3nt+V{{k$4qfJ^)3d<=`TMGSkIt7c?3m
zoSnr7y~=L0XSrG#g^`5NndMegikHeo6vpTI(pT|P`FU5nS?LI=i$@iDQC>u0o6U{a
zScN^?)k>8PZLPE2?q&4*Pv~F{yuknKHCAcA;A*0GNeG=6+^*e>-a-eloWuY68tZG%
z3GPK70OruW1_&MWH|NGY_``#H(FXud_d*ea7HvG2KRS=qB<8wWC*==)0GR7`DKYk8
zFhU89J1?_i9%~LI=DC_^P?ADxo?F(#_&6-I(4lW;)+}K6X^A%jpXejNo8;3_^wK~x
zvdqm|&AYt8?lPCTcxa%voCB$q8eHui{_Gp9rXGLEu7(_8Z*Ys{hjTzguffI3cd8LU
z)JTKtzJnT}Rw99Dr4_DfB_)9eD_qq|N<^)+!bK}xrYSy<()+HfdC@a?bMb>k>|za&
ztXo_|tl#zP7EtJ_U-<#Tr+3}7Yb>NvYimZ{bF=pI-z{bf^4@cEY*A`$snp(gdHqh-
zfe&4RLVMp2HZH-v_bJ%)wWTe2vW|~ig0C&>Tut;V38AyjMZZ#kw55_-&o?bWfvgXB
zgp_#j91R_~wSgDD$vP)C_$h-BmK!K#lXRhkO52;c|4qii)q7n{ylH?bmD*kxZyKn|
z0YSCbt+>s&$%qID7x%iAx6)^IU_@shU$l&s*!%oyg%A|`s9Hx09aQ2+{Ngh9c;X{h
z>#2CD5<hbL^fhK92OvTzHuL)BY)+y%@P$gTnSA*P%4d)nIp}8nH!p8s_jw0hoqjEu
z9Ug?!``=vcgc~-lX*hWfQm1#4Wf~gTA48Q#-S9wBBk~$JkGbK;zbC;GkGnX&)800S
z%CW`OPV?dKu&R3eC4ZF(Iac1{T5?AOgjI`+pGr|V0-_vS+zzKzIg&t><0-!!l>~P`
z<(H!pQ8}KXauiR(gHQyKbFTI!rfCzm{>t`003^#1*AUEeZm#@kC?I?~=cdFcffH1Y
z=cv7<PxJ_P&h7Cfe4>{LxDKC8cyQhgcQfYFgZyAKa?#EDHy_%_c-}=<w~d+fAUT+7
z_HyQ5jjSLv^s=kYU6A5_mt7{GtpRbr%Pvm9wBrL}R9tq=YH>G$IJXLof-2*Xq=o%=
znPIEgPeb+J1+=t`?_Bkse6U!?cP?JPN?Q8G%y(|Vog!nnO0*<tbBDT-kYHKgxjp=Q
z3lZ-9o!jq+#%5~Hc4lO}m-UPnimnVfgGbi!vej&jIo?x0U2I1yp5SSn#D?Gk!Y5$y
zJ}w6k{1ZHUtD**LM~(V4ACh66?Wa98$svT!(;mW4pAg$oOHSm^W!T;JMDU8bhmfQm
z8Wj&7(1DA8;s4ICKK5TcP5gp_gwXkmhhI>jAOX>*llXmWSU-D`r-||-A#^5rD8HUU
z2Yoo1H?Cp56O%nn{@${k=)=h#zJ>Qkrib7M(q7g~Zmebf%xNBe)I;Sygv$LnPn*H_
z?PitrfG99vc{l>ZLZ9>6$|D{i{C&>DOKmDJKor<>UTTIXXD|sw(NFi(3|12OI^9z<
zSc$0Ur+X;+pCdQLW@NUP^@_*y-ebee*<Ow-CTB6_<ONTwkU0T_H^6dK0fP4h595Ji
zP)s?Q!?(T1dfRh6t(S;5gwUDe;o~Olc*PWb&aL-Zjm<qZiy$Pahgn3Q*NZ79bNTPy
z$LICAo>r-NC?|8h-hD()iYX^A^26^VCog(xP(uiv7d;GW`h7w%&Bm8_#X8p0e#z6S
z6c5eDm%M)c#pnKFI)%T?r>tW`5-$fjG#g(gokx+kTkz9yFY68d)jIZwInTqFNXpwS
zl(z+*_PWR$pTC|(>H+0kz(vGjftQkx8h}{R0<Uuykv2f2ZGl(vx=I@fMA{bmX;Tuo
zvCvPO5>eU~Qra$3PvIXGEcLS1qNhH?*6D3v=gg&EPC_IvO38Z*$&$$fgipZYoSg#*
z_P4y!uJrf=h>Oek$PZX`a#^55$y-J`aiIgW+|&B-iyK+H6j=aOh`2^Y4wrkqdMi~d
zxPgZ@vV`5>sS{gN^i_k06PqjOki!+cW+Q9wt?=_46**i%d8XgIL@9@V#l>iQXDI(@
zCTqtRY-FW2L~?V60-X9Q<y^Xmd^Yk6bl*n5zM|r17mZY3j^M;rx02tyiKXn7{_Kcq
zwAHPo+2IKtjJ#F+kxi_Fy~@+X&-CC7ow-(d_?e#6!IA4-zJhe#4dOs2u6HR8Nx_3>
zpVj>9O)PD%_B6StNAX+(sfT~{Bz?vYj554pGknf?n)ugQxK}Q8G9LbQmgK>|^jgEm
zZf0qBO|Y&TptHv7Q)P@mo!)9j)_GZ*Pz(1tJk*lYhVR+TZa3F?x+N<1R;t(yp0-g|
z>@T*UVgcpP7;q8k+~CFKPZR)=zzsCIXwU$nVmEjlH>!#yfvDII{EAf)IP`&Eu}VZ0
z`vFz#%T%#3GqTOg`Vd}DL&cuj!e*P>{ECfH#WwjB%Nw?`ND@#MEG~k)iHebSfEbnE
zb}Gi(GA!i+N-WC}5X##r4LIUL8E6NOZDRxM9sX7TAxUW~z(3o94pzLAKe>&S+dKWT
zfDk%6sVoKv9hB@Y{^2$p>Ua5Rh>4QjMdj5^=%8eG^O7c3me?KKi^_C2-Rnn4)oo^E
zpO<xj|EY=HY3`#0(Lww+N>H<>eaw$F;UJE`WNskG+M4~`0K(H|KR1BLO|#eWW0e~c
zh}`V=bE72iV85RmC8FHyr`#OHKa$C@%*atM>oeqLPqqW+a@z5J8yL&Hzn!fLwLa?Q
z#KmB-C{4%spLU`VkNGQv5d6nzh19qfrRO-`wUgbMIPR&376_qp+`|cYDjhm4O27$T
zxr;q(p9qwMl$3@G9W3@F|7;f<kvQphhb7W-((BgU_!+`^J3erGS?BnO-PpWNd-!K8
zG@);&aGvqBFR0$D>hYKSs0%rKJLARVtOmp#&Up9*9hEvD!g<DP|Ah)C2}C&0`r%X(
l_<q(8rxH;(&mx=;M8v-w?Xmx#*<J98sy*f%pYkE|{txbB8ub7G

delta 14918
zcmZX5dw3Pqx%b|a*_&At6fz09>^*z-ZHB7}5JI>m;U<cwUhq_VzUnz`sr9s0q*(1a
zwSC%vAP52E5?T6zARu>3xVi%(mq0)Qfgp&;B_KD8da$-AG_7!c@0vA?-}C*!^W^u=
z`~K!#?`^G_*^FP%rSA1E<0l0tDU-4$shdJ)9##&2ojLn(X#4B>N4q-c?Tk=S;L?;8
zpNH@-oLTXCyWj5$j?bk3q&<^UJwR905=A%EMNy?oq(@@JZ=d+Z=&?V4viMhH$GlLI
z82RMrG0*=Z@x(8leB$ZElVg82?pIHZeLnH%zusS>>v!lOGF64`Z5Se$o#R~%5;T$?
z%pz!a);EO2eY1gAXP(%pZBmA<jw&8WHb_?cB-tQY9W_#tL>NV#F8b7<AZc%?by1~H
zWGGMU(IWi0-P)K62t2a(AglAq+JmevY7|Sd_VA!C+N)IWFSzb7)D1kkM;lnN!DqN5
z3~4mGK$_eEh7HleULFL)hG?I@`ar>Or=f1<v-fBf6`OsAJHfCynq4GK?gYc;Xr#=8
zVAve(H$eY)!O+1_w{X^|{itG#&(Hy@*y69E0~oeMjjocR0~oeMdlc*cDi}H%>NdW#
zQG29fo6pb@4BLE$j$qgpHEhYy5e(a+UApOIf+5FHckn)YwepG`K0^)|cK8fAVAv5g
zqLLv83_GG$LN65zhM_j_WqY-<iUyy-07HY%V1S_^YQ!Xi0fvTXBBeho7;+7DFYmNZ
zd#+-y&yWj-y*@)O820+B$OXe*TE&xsA<s~o_?~^*&nudIhCJk=DVp6$-ZT#kP0{?j
zJP3xSXwTmI_XR^ILv7|ie_wmFqS<HY1Rt7xA3A}d*<VE`Ff`LD{zWk48)^%`@xFF{
zWsA>{4~7<>As-AaQNxiw<b$Cl+O@kr%PsH%Lp{bP?APX09`h**Kyl2cC;-K=s1cVG
z1)w+<P1*X?Ea63=p`OZ&YSL<gm8X1;LU5dlW_OfEh2S_9&FSnxaGZ*E>!BZX-6%5D
zbG-1Nc4){spP~rSJQvNjq)ibh&PC&WJP3+&(enQKHeI+8F~VO*mFt<#&Dx;QPw=PL
zq!D=XwZEDOXuggb9%}?NUq_Q^y@MDz5shf<>(MMdM`xHp5p4>i7W*cuKBLFQouY=?
z#&><7C406-l|t!G6tr#8BGZGQZHvZ}`WbhDrlH=7@|>euYt=2^H50Dg@?A5*am#nj
z1jj9MZFiQgs6CDF%VuD9rudlF5bXG}sddmN5qD1|V5l|x)`!~U${JIy8bbJ7W6Dwl
z1a*y>9}(^Wg1W|xS^71X0#|48hU3~dRkM7GAiSGp%6Z#U36hd&BqT);6tm2<tzRVX
zdKuyQW?*UNn~$^$!4C6Htw{d~oa;r-E#!axSo>+&LQ`@38A4DkG);GO1A=OyX*>E)
zg$XV$F%>KFNMbl2eM0NPmz~tgs~~bS+DjqFmUxZ<3IoHPfPi3IVwy3%CJ4uR8{rjZ
zppF-v(x&CDFtv#O7;e&={90uyd6E0)zFAqsTTW?JCBT|k9Ik?LmB~7I5R|J-BUk^B
z!qr>B)wR6hwDwWSTHl7;SZgx3`Jn@wwPs<F{$qGiYJ@kKfdhQ#8SO{L2J(XDP$|3!
zZ#I>!eEk`1Ts8i3?+-b+HhcF61lMM|KNTq;igdG?x7Ezj4P6rg6sZw@$5gkNAyK%b
z1R3lyX4rrl^VGsdsNM|k2#Q%+N=tdqRPrNsg1_0Sl@tSbPSAqhGnu>JLK9@~nR%V`
zyM^nDq3-1WXw~i+vJ>_qP^Ajd?KBJ09)!tGvvU^@Y6QD}U+*ZqR^TDFlbw9RSuMBY
zPV=ErqQOcPSnV<SC(pHu@a<={aL+xaY%^TK4fdF_%>ace+UzDJrc}X!p~>XC=7s<M
z699o^)c~Sun!Kt31XGhK=Kvs>noKlXdtC|T7~y6!aMTRy*?LxpHlt=URHWaftDzjK
zoI|G4l|Q?aIW{1!0*fWnRm9~GEqRzw#>E!?>L=RWRtrj+;sBi>bXv@0N*^h7fIi^Y
zKhgdr@qwv`_JWQ=QfjY7sN#@egg-I^pYYM=wS^r%GD98oKf=@?Urz8lFKFYf6Q&{>
zfP^qTK@IQ&p#v9A^0zN&|HnFMDu!^u5H6fFJLOZ$!2}kkdFrC}GwZaBH3>;-MooQ$
z&_RG&`CAvYd#zSe5rYIeS<q>vK{7<>AmZmZyQB?s&iOnlbj}ga6cw$|#|VFJ24=;A
zksDcj_UBq|X5uC7YOv$yG&A0$H1?roUF8!#)s~c8^~w=KEaa-m+KXZWgg;l!4juJ<
zv<>y4%KIks@SnB)!OCyEQ2{B9Zf^_%l9rk89`^vj@r~(p)?aHUIN<2y%)fo6{okz0
z$uU_teG~;8lVjQLQ34PglVg^<s{?{#atymVZ4P}1O^u1#?F#_QsWDl+fUukzlf?@t
zbiLy3L&f__Ocd{Z00Q0ifr|H)n4HD93Z_?LvUmZ(^hylHJCPz>W`tjl1-2l<*Rpu<
zQ!Sb~`K5L~nDcr}OS%y*qX;jE@n?I5=a&J1d_he1Js`*z#AKiWLB1e{K%c>ZTrH#J
zFU>6YtM=ny#ZoUwkYcGzW7+QR07zP~q`Th(f@5i{TX+2hL4i20;Qg*?zpq^3Gf<dU
z#IoHjs!W7=MJ(zbA_2j$BG#p={xYSzj9^{n%WK-SU}c@pK>@FeWxI15O7NmC*3q3#
zfMgUaiilK|QM@;}sp2i)V9adrGKEVp+~8#j5QZCKUZ%>>k7~V}DSq?17OtxIJqU?w
zGEvY3QN5QaKoHeaqHruw)V@Y|do1t)A9h1Kox44z73edl{`(?3;axFhFYo<#ZF)8S
zawjt6VA~aw6B!U}yJDEgv@HN)Ti6xL-y3tc1rmsDp&_O=#@uZ|%3!xUCbtDC!nUv{
zM%w}%PWw`l_s5h`kr4@A(WX80V*q#e#U-q8zgLQYLRB8s0l~dLX1Rw&K#ctTvBX1S
zQzAHp8OZ+rSn@&rn7dfOL;SNg?RfDaf2HKWp%`<IQ+-AD55?jM@etCNl7EE%&p)(B
zs*d=6QSOg;6$l+L9El~}<02s0#LD~WuZI!&awB{phT}^0KefWFoC`56-))R?YK+Tn
zWAp>SQZIW>0fO?f*BF4HyiAR;luEK3E{Ctil)r5L9a|Et#$RsMAcxu27;{gGfH1on
z!#Jd@0U~QxW3j&=YqTwrfU>538B;4n)T9Jq`ZAU-{;mi_U&eY4(tC*8L*Z{R#f-!f
zkNkQxpRX{x7}#@y0{XWYb00LzML_=+i$wJ?!WK-|`4<WsTYTL&p$J}&v0O25%S8mQ
z$MOsGF2V%e)5fP{v2N9EF~x1Ta?v+!Uc&)`w~ZQ(p63Bk3~jOKJ#wL{yZ^Vv%n>-C
z=t2P}0u?D}iwzqt9-GUl*S?J@sYv(4$lp9OdTjBppB(+O(LWvYWa4K}KKI10pBnc(
z@2Rp_C3M^Zg@rJYEeMEZd>fNbf`IVp+gKv0PoeTFr>Qf6PgU8}iV4<jiZCc9Shp#{
zpqOA8?l}e~pqOBF@1Yk9hIWQJkv|w>Ju4^r4DG-$(PwA}hKZKp&ckx09T+BBn1@T;
z(m`NqGFwCJtzhpO>vqmG7}Z!z?Ah>CgHerzJ^O9fh#BFzmhxKWm3C}Ruo{1Qxn{7N
zYsoQDt}ximwes?1!7&uvT&v(U%N-NA?v9CCOXZe3CZr5@uUc|UND;=wJd4Hz?RMq#
za%aAU<m4py<>%UU;)fUu_k_f&bse6}x8#lobuiAiyg6E~WE<*Y%RR0EprRK00i+i-
zi~Ru7i<-rj-0`3crp1;#uH_oxWmaIl<sR4QxqX=xGQ@E$ml}Gxr6k?s8X&F$i@_2C
zMAt00Fj&5a^Ghx@$x6N~n>}EygpD{WK?t3d79LL?5IR7sdB^tbA#1fIk88Q&thCy~
zaqWjf2j0ES|InU2ZoO^EV_&W~E4^*u*yr+Kxoi11#Ix2?#Pc~EptI6it7|vCui!xp
z*6}CqVEq#7EP2GtRYK5NXW@vs4x=oTXM`K9!12u1J6O*wqk$IwC~Wg+;k#+!-=1#w
zpbdz%0lNza1j%k%c$HAb#YX;24jW=MTJC8c47Bh@3+?-e&;i=V59F{PSo^$1<%xyw
zqeVR|bg=OKe6Yd3Z|(PjlP4CwpMo=7=wRUo_&S4)unt&?I91_ZwD1EK+L8{EdDQjI
zJU5pOvzje=*n|)|%@z)u*rT9>&OOYZ%Vm#Rhb?*dg%CQ2EgXLFiUd07%_IDBF1z14
z;_I}7&Jof<|3U}Nca)FHV?C{-vT{iXoud|}bRVI^4E00)Mjq>%_|T6JgU*K(pLght
z-pL4`wgR8>zvi*c#%U{*EAr5Z@^A({;^qMmp$2x>4G4}iwC?+GpH5VOXL*l&_C4#Y
z=L>|;IZM9$LFfRT=e7B)+B)y$vy;ffdCKQdp@TeJ<h={n@bpD5ew{=fE>ip+5<1Ak
zWlOQ~a<ed(nS5gb>y>~&Y~65$GIH5UrS<=zvr0cB{FxP)$+HUC7df9<IID=WdOup;
zSC%+Q_5ncNzVZeUAeQr$B~Oxo@aiiI8z#NZ>_=<8#t#*-ii&Gq+d~M3YhK#}l9FY(
z=Kw%3T%%Re<n2cfDA)Nt5!SQny3as$aox&xpFyDmhU=EyU+h7EV7P7#s?cj_i1s6R
z%gStwu<5~)TbA6&AcoZ~OP(A7g&H#5NSj7KIyz3`&zNjq#iY30G$6!{C&lHPSU^xr
zibvc7EFdT*#c_b8$=Qzzd<q{IW66>!aXBs_gvpe+9G8GFnG*NLWj|Wj41T0DYr7kN
z!-X0Cy=lXm5tkblu7YSrTuw_s5Y32VTE3_umHja;<AL3oZ!H#7bC$)ur-J^J%aw6A
zmjIw#8JC+1AShSHWiA0hxiXGi-izh*ry#H4XVUDx;x)brC2vh!zD0o!OxDEl7Gtn5
zLGsq}@7rwXh_&82`YRNdwca`a!LT+i50`*oSR2RT@*R2<=?@s*6j!#y)yOi1A087n
z`MP$jhL3mH)M{LC_d}?GWm8=4hk#(&6qm<lK<tN`;`v+R?tVxDactfkSL@^Mekf(I
zdnYdULn*?3n2CG)VSlQNZE=4;EQ16|gUH<w0pZFvFT;SK+;%&|{b}_LE0Ez}WrH6R
zI?putF`*)9@Nx?iP&80(A3$mc7~#F~z!`pLS9X8S-nf=_yL13$cE8Ll00{Sc;Q<8U
zelN3tAly%x{V&9L0A-+=59r2zTiooMP-dIs>`u{C(1A&FJjbAo0w&083vcbleo)*J
zm+$-_gh@->bWcElFlmY71cZ4H6QHAfbayta_^5vu%G=R6b6@O1hm_(N+tfh=DAvb$
zOLuh8aWB3Q!sNIYUqF}~za8HJ6yMXLgYL!OAUN$s8IZ1dQ3eFjX)nrvAUaJ^{trZX
zpb<V756n#jBM<RloaOR$>qG5%^<8X0&bheO*^T)?iunZ@a{$m^@RkM$`U_sn0YQI(
zV%{A~8%UwL%y}`ptN5~SLNUMWbrW=8a+$j6L1BWJU*Uf#W}`~3_$EYj#Y@vb5%VjQ
zro;4!Y#;^wdS+}1JEBxw_W}VaJiYD(0uUV6<MQ|nNJeq&SD#S}4x}vHjA#DPn>`&I
zanmQE_Z2sN5=zU>xZyqszz8Ha<JgEq9}h%Y!jlrp)WrYa#}lh@6<oONb~7NjCM9Gy
z1A=Q(LUuDCx_MF}e`><*W)g^Qekq~8oN&8Y%3wD+A-h?M(9Kg4UN;Y<c{@Fra9`#C
z5lqNV280{a6LMAqf^K@ko7Ds9;4vp5j<!5r&cegyB;-DUOIXjGgq+oYAexhqvl<XY
za}ubuOSJ6{GQ#r`fwxg=Ra9!7_?sI;Dj#3Y_T|h=XbHE}22rUkNVtO=0Q?KQcmaZc
zK|&60K=3a}pwy^t22q79;+^}mQ5B0k4<Q7@BF{rWQc4)^3<Ctiq6Cg3^i6RPb^8*&
zp+Eak<r1HPVz(rb?QVY10mG7n<9^o!1jCX<pEA+Og9t5?VFrNZGB3=4uw3Sa8BpkY
zVID-~x5f?g-2ei~I0Ir8Yy4GE4X*LxjH_T;LvgO}gg93i;Zupg*O`w8vW(vGRKh#o
zR8VMJ`I{ryl9E<0rVxUw)r%=0xLPTu2f8676|~y=%(#14b6)TIq^uZ7Nt`U|E`}x`
zjOvrcC3+*BL@E%+@Xn;tm>K&x+Y_wDpKih90_=7sWx)f&Zf8;!JRk~wXEMJr=@vW*
zM8WS$s(X@d!AlwJ8j`Z$r3eMTJ4pq<C|CG^4fRS=`8=s+*8c}vz(xbOPt_G-EL=&-
zss)5oSCX=70YQExiN^qXsR0P5t|Zf+!zucVMglm6%zl=XpV2BPbyt&aa{=JmRX<de
ztE)-bT(}DMt4S~G6*R`LB}H@H4FIBRzMnKLuK9k_w7BN`Nz>w55?TM8x~tL%-$({#
z^MOyX&vI@gwL-U_Dk<qV@yLkRqrBypEL?Ka%LXoi@McoB6Cen0CXxD&=ww()xthq;
zr`g9P6H_vS5Rx>-@<iqVVKXsRP^eFLZO}nec=i}Jvt&w22}>nnnv!aFhX-LZCDk!U
zv`i({z_gSbJOBi5T1wU#AS|b)Wbgomt{1#Yiu<gTJDEC+W#QqoQZmQ5gxJkW$s7ZM
zXjV$*7!X9WQi$CW1+l9#!nLWux>PW7Z-S4z5-Q02YAg!{b81ss+zn$Dg>in$4P#;)
z3zyILLV`=+o}ZFo1O)f|6v9|X+e#G{A6}eNmZ#Ln!tb8!vYurxR^x)(8c+kv;*@L+
zK(H)M$<_cw6)sNYFHgCxK?2blOH%5xl-n9o2D_yx*&0%W)_5yLtwE=aDw=YuQvS)V
zFC>UMMDA1sge$AOr~`s>RmzKc6~Q_;>cat$gE}wlfCzh?7j{4})p=nD6s8FKV~F}-
zBfK#cc$H6kj{VTtn8FTlhn}SlZfAruDdpXis&5JE?SQASEWAV}8P}d?^&{(3>b>H%
zn|leX*^*L+e@B9wY$b_Dw>_mafbRDm8xleyuKkAn?!F!Wk1ai(?o6qJeKyL&u9Q0B
zHrw8m(gZfV@s-YD*pZAM_zgQ+y)UI!`o<LM_fzWA-;scBe@cDqHr;`gau{?u9vjA%
z6wxbGu|x{u!IV14XQ5A3%_+6~I}-37N~y^Kw~0SUDaS$lOOIGJ!X)BV|IME2do-n1
z`Ns5kd@Q97`Hlp1AJQ$wlks4x{*!L?mjNKhC%wW2gnK8w@&|<JNh*Kwvy8!1ORap(
zZ`qvER^Nt-z15o{(1A@WO%eKe(O`<&Cn?2<bmtw%ux|Xd7g+mJ2;6ak%P{`L8z+D;
z{)EQKt!!b92)3n^f2K0WUtr&cM&oaH?hh8l+2$1|Ab8rm;sgXwTT0G-Ky+MND*aD%
z9L;?axO4v>Da`$s!s1>i{+dkLc-AhfvL=1|KC}bWq~)iZ!D9B*q&vFZ1&I69q;ck;
zZX8S-z|6Ee{s3S(Gc6kt5FXA<%kc*Y%b97f5eHM()~4O@w{sE;SJnD1&_i@>T8=+x
zf~Ynv#~&bwYSZY$Wp|(vhZx~a>A>lX`VxC9+-Xx<%he~+K0bufzBR3Mid^ICHnYx|
z3pMPqU<oAd%))ihZcQ`ymob2#-I~tL)0fg_Fog27oj*N;Ei2jX+feGar{$A0bYQbR
zjkEtW_m;?gW2R~*-eL4^#H~@zAuthDV>;jcr3)a88q-MC`{G6#=0j6jImQ3+3ftGA
zDXrb9R|p57c90*L#j1)Ard5wiv{O32tE8s1A58Zs)&~g_Wb_cPn9V9n52aOimm4B7
zcqrY;ec%Ix$)PlU@^g<cL8x2OYH6fDA3B@m@g1{S&r%57?-N5r5?j)R?nhQY7`LSH
zk(GXXFobgWL0at^DR+&_=CI;o2;3LtxQvB=kj{0#@&dy6gEW5BS1F8fGC#&=&S8T~
zkEK=jqwWxK2tSs#XcAE9=n#G^T~Vcv5+-;<cs#B4jSO?|mphjYD22c+&LIlDr$3%9
z>M4!sJ^k@?X&Jp*1s7f&o*?61uJN3?tV<~bo-w_wKj9nG%lZ>!jCXV}#tZh7X|*@r
z(TOnKn#=n4guwlxiOVoPnJ(xd?@aI4Po_(H=`Yd_J=6$)k`7GC{AVpg{d|(f_jStf
zP*iC6LRz`RUwD-bs>WaLV?5+wyO8eS<{S`g7t;6z3!Uiz(c2f&kxOa!Llp_c?>8={
z)uE!>r3A%zF^%tT^hrmG=#$RHbk$(}cjErI&6TuL9vPGPw_or+^VsthfbP5*Dn2A%
zNz2c`fI>OiTdWWeK3z$d^%b!lN<;4peqkOPGU5xLfu_S3UK>LP3}2+>vnL=JzDVQQ
z^D6v<gP431Y-O^oM$YK`<1yhx=4H-ChN>a-T%!GXf-UC)EI>HHzD-EIFu?|)8zvfo
z6YTh8+dXtZ-92=?Xsa*T?x91<U^mg0hYl&ip<|LwhmLdE^h!D32v4^I%lKn&u(QT=
zI}{b)H1cW0%&?Un;+qB^w~&P`K+$L+TtrZ2*m$#oMgxSiGkNVoHqx4DE2R`h5<+LD
z-M3u4EzYMfzQWrUvf<V%w$fed2&s+d6M6%lPhp$IA78}!TC;4WMC#C<I?L`|N<Zy{
z4(7mYzIG8Sw`SXl=v@**XSUt5myX{910t4lxbh|&WX<vKMQ`@!(7lEV9rX8H{`i~l
zXRd!Qdb2;5?u8--58AkvZ+nwf#cOS)oAig??AO|N73+sF7@>s5ou4UM%#H-(^KC^m
zC`q9;-!AQ=A611GI`pj!Tgo0);&1sr(cAsE$fr^0rC~;Rr5)J7|FDcbWURFDq(Cn*
zhfyo7ww1Se>oQjLDE@N08ghhvwO!<X1_wm+R@-=&PBj9E8d+`IZ=*)&z(NAiN^5M{
zN>Tz3*6?SSv)qnrY;@1pG`NRRM%VM&<?MRZdap(yL|oT<H3~>dw*0XkAnw23PTTqt
zDysq`{Ei(s#P_dYi#xt!hb&Q61yoiUo3}KvE;axdGG1f>;Y)@hOW#Zi$cK8~xDww?
z>TN|dCkdfbZ=*S>8Vaa>ws2z=s$q-IBc#NGCuQisudVz)SFs-PtzLd0gymMs&lF84
zp{$xR>sB$QRyNs+c!>a0s;ed&FA=Du0YTMd_Z_L<sfPuGi%oX<z4Ub)7~wg<zxfj@
zwhnlu2_YyBP-%`8Iw-q?eCS#>E`HEf`bl0YyMy+?L3%Bs4<giEGjCbT=Ea+RU#RYy
z$(J9XR)!nlBX;1={G~efsB^^D=vR+f>TsOVKeClmwyNJ$aK0Qa&*&t}+^S=L2=+T+
ztHVS=xYxk>v8|5#js#0QY2%Pi8`*HGy;fT}XY*t;>st*B{~>UHWC@4>wA!Y-3j)Hp
z)y8j~s00B~f~|I!bFu_UAWHD8SAtRkC(hb(noAK)^RrZs;*obaY9V~dR+LZqQybXv
zpW;t<ZsGzQx@2d&Kl22HLznE7m>uwdYVs2Gv+EE&tX;DEd<uu?=!olZh<+<_*;ae$
zuhHZB-A4EeJMeeDcq8K-zpyn+pG{ATcT?ehl^MB-<pxK6Wy^yWq`2Q#Hglh#0dc>t
zY#e!MiwDGP_{uga#oY+vpei(SEA)?CTG-#ntl7+d7_7eG)6z0-*z(=?-C`LxY`j!;
zY3T<qH|*R8MAmSXXi1WHzr2x<U|BcpKHj~B2=~5W5B{FsKpk3Wgm2n`mz-c^V=!^|
zQ_t~<8CGxHwB?Tw3u(o-&{XbMZ9w=0EMB*T0KtFD#<wPFvO;Rs@qAuA>tT&|<miSF
zI^!LLpFRc_Qd>^oXY1L+)&xh6QwT}wpjq*V0UfybB7blT8)&`gDB{NuB!te34t@-Q
zq69>*PUOqCu))?uM-jD0Lg-9%P<#D^4tjAC&)Uic#3wn5`@_jX(TkHDeAOO;Opm~i
zot?l8{`gil*m&8&&vU5cM^MR6bCl^k(ag%L0a0MU?r8`R3!UZ^xMw;*_&d$Pt7<AR
zKor<CCpF!1hb{?3#n(7;=t>EEt#M?<OA%Fkjf0B+cjTtX2+wi?uQ`15yX-MzmJ_nY
z_$;EF%yyK%ZcYH<4X`_|0Kq%k!HA$36j4s*@ceCTfHlWa`iofuA#~<A_&7;hToFZo
zE`MeltFq=gavniQQU~*hK9m<xPHOr7ZTL`L>nP=thjLQu3>YYKQbaj<m3Mm&IeFEQ
z!x}>9yy{?B(=QE*Xg<#4liy?gta*-7A$e#%&T|G25g+c0=-AEqsrT53IQMmEK627|
z8hN`1KLd9HZ}P$0*)NUx4!$f>-tM8iz2PW}+`IvT3D_MBfC$DLPRf0_0K}T!aC+P&
z@&<^!z2Ouul6fP6$lF3MZ&Ct37J7M;BFfuB%G+P4sqjApmN|jVeB2K9Wrt->C@%6A
zp}Z~UV|TI=Yq_I{qjU&D&@FdLdeRdPAUs^jx9((>$(6nirE4YW#DoseDn}W}hc>W6
z-fI_A9l*XKlo64(RZjl_QWr~Hjhv=BB)afXyIEd}4waC&2egRjs?`n-Xttn62G{Uc
zcCpUR8ZXNck-;^TW%}((gfjRiT#R&1jN-|;aN)1Juq24w?HLMi@K2O+*IndbEw5@|
zaciwtT@mr~iM3Q+3BifYu8#k{fu*cEZ*oKw+U)9RayUW<18*IFw}ExB);Ws!xgDIL
zBi1?xKeuyraKc(YZ#Pud`w^k@)q09ZQqbT@X9FLxo29J{j^b|W5j@2}>fpaGxh~`P
zLL2$y-EeuMqlo`zg<EAqXQPAvX65qWzie&dyTM~`@|V>fI-8t<75Wn>(tC|?y%Ts3
z!}ZYw51tR@acd8|&!~4aQ<UqyRIXbcWt%8hUblyZs{!5LAmAc0wbhBazb^npD!0<y
zqA3H2YTfE|-6pG*1fp8s^{Q1$;Ly8XwMr3H>$_B~^Ql^+MtGMKcpqNUH>k2kR@-5h
zSF=&7*#@fFuKZRb3nv@AqQn(2H&9X1?2l66?xv!Ay`H6PKo`4J2?*uglmnb*p$xQ#
zkJ-zHT6?@r078<|CV>BZ1syE6kssL0%B)7OBp`%NBbCHZp@VYW%VYa+e&6fmAS%jr
zFO^m=p@VYW$N#vGmB#n^_o5QrNB4RVc^YYi4>*Aqes~{yz&JqJp)>bL%1*PR9OfnO
z<IIh}+{8eRwKaQ*0feW`USa@|m}aNzVVM{bh{PQ75+fz>;1J*SKFcjQM7cPP|J@QY
zjqnL4a0a<(&Pwn<?hO_4SvwfZwBOG*1v{K@LNPH)OiIhg{BRTc?qhFJ5Q6e!S`_uE
zNf|lGqX*an@so~xB!Lh*CmkGlYv`0|Qp`{BDF@gL>y)n~q@*-j=wN-PdFes+MEtbZ
z4W`J%X{T3j{c%L_K76Ql0+;xvgV?FgIrwiUG>-412%dM8i&WngkK!-)yDa4J?Yt9p
u=Q1GfaNfZW->9?!5yA6L=Zi9eBoGn2;6+eM;QIx>z8R;n3%s$J4f<aIS&no7

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 03081c8b..1cc37bf0 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -7603,7 +7603,11 @@ type WellKnownManifest struct {
 	// are the SAME port, so https://x, https://x:443 and x all match. An Exchange
 	// reachable on a non-default port names that port on both sides.
 	Endpoint *string `protobuf:"bytes,12,opt,name=endpoint,proto3,oneof" json:"endpoint,omitempty"`
-	// Exchange-only. Health check endpoint URL.
+	// Exchange-only. The URL a consumer, such as a Broker deciding whether to route
+	// to this Exchange, probes to judge whether it is serving: an absolute URL, or
+	// a path resolved against this manifest's own URL (RFC 3986). A 200 answer
+	// means serving. When absent, a consumer judges reachability by fetching this
+	// manifest itself; it never assumes a path the protocol does not name.
 	HealthEndpoint *string `protobuf:"bytes,13,opt,name=health_endpoint,json=healthEndpoint,proto3,oneof" json:"health_endpoint,omitempty"`
 	// Exchange-only. CatalogService endpoint URL (if exposed). It carries the
 	// same binding as endpoint: it MUST be on the same host AND PORT that serve
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 20c4e976..2ac0f527 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1665,7 +1665,8 @@ class WellKnownManifest(WireModel):
         description='Exchange-only. Accepted resource hash methods for attestation\n verification.',
     )
     health_endpoint: str | None = Field(
-        None, description='Exchange-only. Health check endpoint URL.'
+        None,
+        description="Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.",
     )
     max_intermediary_hops: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index c7f5047d..4afc6238 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -222,5 +222,5 @@ export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.strin
 
 export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
 
-export const WellKnownManifestSchema = wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. Health check endpoint URL.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`."));
+export const WellKnownManifestSchema = wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index f1f6e835..bd58d4f5 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -3484,7 +3484,11 @@ message WellKnownManifest {
   // reachable on a non-default port names that port on both sides.
   optional string endpoint = 12;
 
-  // Exchange-only. Health check endpoint URL.
+  // Exchange-only. The URL a consumer, such as a Broker deciding whether to route
+  // to this Exchange, probes to judge whether it is serving: an absolute URL, or
+  // a path resolved against this manifest's own URL (RFC 3986). A 200 answer
+  // means serving. When absent, a consumer judges reachability by fetching this
+  // manifest itself; it never assumes a path the protocol does not name.
   optional string health_endpoint = 13;
 
   // Exchange-only. CatalogService endpoint URL (if exposed). It carries the
diff --git a/website/src/content/docs/components/broker/deployment.mdx b/website/src/content/docs/components/broker/deployment.mdx
index 77789f5f..6a2ba5d8 100644
--- a/website/src/content/docs/components/broker/deployment.mdx
+++ b/website/src/content/docs/components/broker/deployment.mdx
@@ -217,7 +217,7 @@ An attacker who poisons a provider's fora.json would only gain `discovered` trus
 |---|---|---|
 | Manual config | On startup + SIGHUP | File watch or signal handler |
 | fora.json per domain | 1 hour (configurable) | Background goroutine |
-| Exchange health | Every 30 seconds | Background health check (HEAD to endpoint) |
+| Exchange health | Every 30 seconds | Background check: a fresh fetch of the Exchange's `fora.json`, then a GET of the `health_endpoint` it names (200 means serving); with none named, the successful manifest fetch is the answer |
 | Trust levels | Manual only | Operator action via API or config |
 
 ### Registry Interface
diff --git a/website/src/content/docs/protocol/exchange-manifest.mdx b/website/src/content/docs/protocol/exchange-manifest.mdx
index 58f5c32b..353680c4 100644
--- a/website/src/content/docs/protocol/exchange-manifest.mdx
+++ b/website/src/content/docs/protocol/exchange-manifest.mdx
@@ -111,7 +111,7 @@ The Exchange's offer-signing keys are **not** carried in `fora.json`. They live
 | `operator_domain` | string | No | Operator's corporate domain |
 | `endpoint` | string | No | ExchangeService endpoint URL. **Must be on the host and port that serve this manifest, or a subdomain of that host on that port, and must not carry userinfo** — see [Endpoint host binding](#endpoint-host-binding) |
 | (offer-signing keys) | — | — | Not in `fora.json`. See the [WBA directory](#the-wba-directory) at `/.well-known/http-message-signatures-directory` |
-| `health_endpoint` | string | No | Health check endpoint URL |
+| `health_endpoint` | string | No | URL a consumer (a Broker deciding whether to route here) probes to judge whether the Exchange is serving: absolute, or a path resolved against this manifest's URL. A 200 answer means serving. When absent, a consumer judges reachability by fetching this manifest itself |
 | `catalog_endpoint` | string | No | CatalogService endpoint URL, if the Exchange exposes the service. **Same binding as `endpoint`** — on the host and port that serve this manifest, or a subdomain of that host on that port, no userinfo — see [Endpoint host binding](#endpoint-host-binding). Unlike `endpoint`, no SDK reads or checks this field: the catalog address is configuration, so a deployment that does read it from a manifest **must apply the binding itself** before dialling. Absent means not exposed; a publisher's client does not fall back to `endpoint` |
 | `protocol_versions_supported` | string[] | No | Supported FORA protocol versions |
 | `pricing_models_supported` | string[] | No | Supported pricing models |

From 2fa594d6cdff6e520c94f7722d73482294244d96 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 03:22:44 -0400
Subject: [PATCH 011/164] Publish the generated JSON Schemas, with a strict
 variant, in the three packages

The SDK build generated a JSON Schema per message with protoschema
(protoc-gen-jsonschema v0.6.0) and discarded it after generating the
Pydantic and Zod models. gen_jsonschema.py now keeps that output as release
artifacts under gen/jsonschema/: one self-contained draft 2020-12 file per
message of fora.v1 and fora.admin.v1, named by the fully-qualified message
name, in a default variant that accepts unknown fields and a strict variant
(.schema.strict.json) with additionalProperties false on every message
object at every depth.

Both variants describe canonical proto-JSON:
- field names are the snake_case proto names; the lowerCamel aliases are
  dropped, so a camelCase key is an unknown field;
- google.protobuf.Struct stays open, so every ext accepts any object;
- a 64-bit integer accepts a decimal string or a JSON integer, with its
  bound encoded in the string pattern too; other numbers are JSON numbers
  only, so a string cannot carry a value past a numeric bound. A bound the
  generator cannot encode fails the build;
- the buf.validate constraints protoschema carries, plus required for every
  field whose zero value its own rule rejects and uniqueItems for
  repeated.unique, from the manifests the models already use.

The schemas ship in the Go module (gen/jsonschema/, embedded by package
gen/jsonschema with Load and FS), in fora-protocol as package data read by
wire.schemas.load(name, strict=False) and wire.schemas.names(), and in
@fora-protocol/sdk under the export path ./jsonschema/*, from the root
manifest and the built package alike. The models, unique.py and schemas.ts
regenerate byte-identical.

The drift gate (ci-local.sh, sdk-types-ci.yml) regenerates and compares
gen/jsonschema/ like the generated code. A Go conformance test checks the
file set, field names and unknown-field policy against the descriptors.
Python (jsonschema) and TypeScript (Ajv) tests reach the schemas through
the loader and the export path, show the strict variant refusing an
unknown field and a buf.validate violation failing, and require both
variants to match Go protovalidate on every corpus case. The release smoke
tests load a schema from the built wheel, sdist and tarball.
---
 .github/workflows/sdk-types-ci.yml            |   28 +-
 conformance/jsonschema_test.go                |  149 +++
 gen/jsonschema/README.md                      |   75 ++
 .../fora.admin.v1.ReportingPolicy.schema.json |   42 +
 ...dmin.v1.ReportingPolicy.schema.strict.json |   43 +
 ...n.v1.SetReportingPolicyRequest.schema.json |   62 +
 ...tReportingPolicyRequest.schema.strict.json |   64 +
 ....v1.SetReportingPolicyResponse.schema.json |   62 +
 ...ReportingPolicyResponse.schema.strict.json |   64 +
 ...min.v1.SetTenantFeeRateRequest.schema.json |   50 +
 ...SetTenantFeeRateRequest.schema.strict.json |   52 +
 ...in.v1.SetTenantFeeRateResponse.schema.json |   50 +
 ...etTenantFeeRateResponse.schema.strict.json |   52 +
 .../fora.admin.v1.TenantFeeRate.schema.json   |   30 +
 ....admin.v1.TenantFeeRate.schema.strict.json |   31 +
 .../fora.v1.AcceptableRestriction.schema.json |   45 +
 ...1.AcceptableRestriction.schema.strict.json |   46 +
 .../fora.v1.AccountRegistration.schema.json   |   14 +
 ....v1.AccountRegistration.schema.strict.json |   15 +
 .../fora.v1.AgentAcceptance.schema.json       |   22 +
 ...fora.v1.AgentAcceptance.schema.strict.json |   23 +
 ...fora.v1.AgentAcceptancePayload.schema.json |   29 +
 ....AgentAcceptancePayload.schema.strict.json |   30 +
 ...fora.v1.AgentRequestAcceptance.schema.json |   76 ++
 ....AgentRequestAcceptance.schema.strict.json |   79 ++
 ....v1.AgentRequestAcceptanceItem.schema.json |   21 +
 ...ntRequestAcceptanceItem.schema.strict.json |   22 +
 ....AgentRequestAcceptancePayload.schema.json |   51 +
 ...equestAcceptancePayload.schema.strict.json |   53 +
 .../fora.v1.AttributionDetail.schema.json     |   36 +
 ...ra.v1.AttributionDetail.schema.strict.json |   37 +
 .../fora.v1.AuthorizedExchange.schema.json    |   53 +
 ...a.v1.AuthorizedExchange.schema.strict.json |   54 +
 ...a.v1.BrokerTransactionResponse.schema.json |  758 ++++++++++++
 ...okerTransactionResponse.schema.strict.json |  775 ++++++++++++
 .../fora.v1.CatalogContributor.schema.json    |   19 +
 ...a.v1.CatalogContributor.schema.strict.json |   20 +
 .../fora.v1.CatalogRejection.schema.json      |   44 +
 ...ora.v1.CatalogRejection.schema.strict.json |   45 +
 gen/jsonschema/fora.v1.Cost.schema.json       |   25 +
 .../fora.v1.Cost.schema.strict.json           |   26 +
 gen/jsonschema/fora.v1.Delegation.schema.json |   84 ++
 .../fora.v1.Delegation.schema.strict.json     |   85 ++
 .../fora.v1.DiscoveryRequest.schema.json      |  372 ++++++
 ...ora.v1.DiscoveryRequest.schema.strict.json |  378 ++++++
 .../fora.v1.DiscoveryResponse.schema.json     |  902 ++++++++++++++
 ...ra.v1.DiscoveryResponse.schema.strict.json |  916 ++++++++++++++
 .../fora.v1.DisputeFailure.schema.json        |   33 +
 .../fora.v1.DisputeFailure.schema.strict.json |   34 +
 .../fora.v1.DisputeRequest.schema.json        |   90 ++
 .../fora.v1.DisputeRequest.schema.strict.json |   91 ++
 .../fora.v1.DisputeResponse.schema.json       |   85 ++
 ...fora.v1.DisputeResponse.schema.strict.json |   86 ++
 ...v1.DomainVerificationChallenge.schema.json |   40 +
 ...inVerificationChallenge.schema.strict.json |   41 +
 ...DomainVerificationConfirmation.schema.json |   53 +
 ...erificationConfirmation.schema.strict.json |   54 +
 ...a.v1.DomainVerificationFailure.schema.json |   34 +
 ...mainVerificationFailure.schema.strict.json |   35 +
 ...a.v1.DomainVerificationRequest.schema.json |   43 +
 ...mainVerificationRequest.schema.strict.json |   44 +
 ...ra.v1.DomainVerificationResult.schema.json |   34 +
 ...omainVerificationResult.schema.strict.json |   35 +
 .../fora.v1.ErrorDetail.schema.json           |  408 ++++++
 .../fora.v1.ErrorDetail.schema.strict.json    |  418 +++++++
 .../fora.v1.ExchangeOutcome.schema.json       |   82 ++
 ...fora.v1.ExchangeOutcome.schema.strict.json |   84 ++
 ...ora.v1.GetAccountStatusRequest.schema.json |   34 +
 ...GetAccountStatusRequest.schema.strict.json |   35 +
 ...ra.v1.GetAccountStatusResponse.schema.json |   74 ++
 ...etAccountStatusResponse.schema.strict.json |   76 ++
 gen/jsonschema/fora.v1.JsonWebKey.schema.json |   44 +
 .../fora.v1.JsonWebKey.schema.strict.json     |   45 +
 .../fora.v1.KeyRevocationList.schema.json     |   21 +
 ...ra.v1.KeyRevocationList.schema.strict.json |   22 +
 gen/jsonschema/fora.v1.License.schema.json    |   32 +
 .../fora.v1.License.schema.strict.json        |   33 +
 .../fora.v1.LicenseTerm.schema.json           |  364 ++++++
 .../fora.v1.LicenseTerm.schema.strict.json    |  370 ++++++
 gen/jsonschema/fora.v1.Obligation.schema.json |   95 ++
 .../fora.v1.Obligation.schema.strict.json     |   97 ++
 gen/jsonschema/fora.v1.Offer.schema.json      |  758 ++++++++++++
 .../fora.v1.Offer.schema.strict.json          |  770 ++++++++++++
 gen/jsonschema/fora.v1.OfferGroup.schema.json |  847 +++++++++++++
 .../fora.v1.OfferGroup.schema.strict.json     |  860 +++++++++++++
 gen/jsonschema/fora.v1.Preview.schema.json    |   41 +
 .../fora.v1.Preview.schema.strict.json        |   42 +
 gen/jsonschema/fora.v1.Pricing.schema.json    |   87 ++
 .../fora.v1.Pricing.schema.strict.json        |   88 ++
 .../fora.v1.PushResourcesRequest.schema.json  |  586 +++++++++
 ...v1.PushResourcesRequest.schema.strict.json |  595 +++++++++
 .../fora.v1.PushResourcesResponse.schema.json |   45 +
 ...1.PushResourcesResponse.schema.strict.json |   46 +
 gen/jsonschema/fora.v1.Quota.schema.json      |   54 +
 .../fora.v1.Quota.schema.strict.json          |   55 +
 .../fora.v1.RateLimitInfo.schema.json         |   33 +
 .../fora.v1.RateLimitInfo.schema.strict.json  |   34 +
 .../fora.v1.RefreshCatalogRequest.schema.json |   27 +
 ...1.RefreshCatalogRequest.schema.strict.json |   28 +
 ...fora.v1.RefreshCatalogResponse.schema.json |   18 +
 ....RefreshCatalogResponse.schema.strict.json |   19 +
 .../fora.v1.RegisterRequest.schema.json       |   45 +
 ...fora.v1.RegisterRequest.schema.strict.json |   46 +
 .../fora.v1.RegisterResponse.schema.json      |   35 +
 ...ora.v1.RegisterResponse.schema.strict.json |   36 +
 .../fora.v1.RegistrationFailure.schema.json   |   67 +
 ....v1.RegistrationFailure.schema.strict.json |   69 ++
 ...fora.v1.RegistrationFieldError.schema.json |   24 +
 ....RegistrationFieldError.schema.strict.json |   25 +
 ...fora.v1.RemoveResourcesRequest.schema.json |   39 +
 ....RemoveResourcesRequest.schema.strict.json |   40 +
 ...ora.v1.RemoveResourcesResponse.schema.json |   20 +
 ...RemoveResourcesResponse.schema.strict.json |   21 +
 .../fora.v1.ReportingObligation.schema.json   |   41 +
 ....v1.ReportingObligation.schema.strict.json |   42 +
 .../fora.v1.RequestAuthFailure.schema.json    |   31 +
 ...a.v1.RequestAuthFailure.schema.strict.json |   32 +
 .../fora.v1.RequestConstraints.schema.json    |  114 ++
 ...a.v1.RequestConstraints.schema.strict.json |  116 ++
 gen/jsonschema/fora.v1.Requester.schema.json  |  157 +++
 .../fora.v1.Requester.schema.strict.json      |  159 +++
 .../fora.v1.ResourceAttestation.schema.json   |   38 +
 ....v1.ResourceAttestation.schema.strict.json |   39 +
 .../fora.v1.ResourceEntry.schema.json         |  536 ++++++++
 .../fora.v1.ResourceEntry.schema.strict.json  |  544 ++++++++
 .../fora.v1.ResourceIdentity.schema.json      |  102 ++
 ...ora.v1.ResourceIdentity.schema.strict.json |  103 ++
 .../fora.v1.ResourceQuery.schema.json         |  264 ++++
 .../fora.v1.ResourceQuery.schema.strict.json  |  268 ++++
 .../fora.v1.ResourceResponse.schema.json      |  928 ++++++++++++++
 ...ora.v1.ResourceResponse.schema.strict.json |  943 ++++++++++++++
 .../fora.v1.Restriction.schema.json           |   59 +
 .../fora.v1.Restriction.schema.strict.json    |   60 +
 .../fora.v1.RetrievalAuthFailure.schema.json  |   40 +
 ...v1.RetrievalAuthFailure.schema.strict.json |   41 +
 .../fora.v1.SubscriptionQuotaInfo.schema.json |   44 +
 ...1.SubscriptionQuotaInfo.schema.strict.json |   45 +
 .../fora.v1.TransactionDenial.schema.json     |   81 ++
 ...ra.v1.TransactionDenial.schema.strict.json |   82 ++
 .../fora.v1.TransactionItem.schema.json       |  796 ++++++++++++
 ...fora.v1.TransactionItem.schema.strict.json |  810 ++++++++++++
 .../fora.v1.TransactionRequest.schema.json    | 1070 ++++++++++++++++
 ...a.v1.TransactionRequest.schema.strict.json | 1090 +++++++++++++++++
 .../fora.v1.TransactionResponse.schema.json   |  724 +++++++++++
 ....v1.TransactionResponse.schema.strict.json |  740 +++++++++++
 .../fora.v1.TransactionResultItem.schema.json |  636 ++++++++++
 ...1.TransactionResultItem.schema.strict.json |  650 ++++++++++
 .../fora.v1.UpstreamRefusal.schema.json       |  435 +++++++
 ...fora.v1.UpstreamRefusal.schema.strict.json |  446 +++++++
 gen/jsonschema/fora.v1.Usage.schema.json      |   87 ++
 .../fora.v1.Usage.schema.strict.json          |   89 ++
 gen/jsonschema/fora.v1.UsageAsset.schema.json |   22 +
 .../fora.v1.UsageAsset.schema.strict.json     |   23 +
 .../fora.v1.UsageReport.schema.json           |  172 +++
 .../fora.v1.UsageReport.schema.strict.json    |  176 +++
 .../fora.v1.UsageReportRejection.schema.json  |   33 +
 ...v1.UsageReportRejection.schema.strict.json |   34 +
 .../fora.v1.UsageReportResponse.schema.json   |   30 +
 ....v1.UsageReportResponse.schema.strict.json |   31 +
 gen/jsonschema/fora.v1.WBAFile.schema.json    |   64 +
 .../fora.v1.WBAFile.schema.strict.json        |   66 +
 .../fora.v1.WellKnownManifest.schema.json     |  311 +++++
 ...ra.v1.WellKnownManifest.schema.strict.json |  315 +++++
 gen/jsonschema/jsonschema.go                  |   42 +
 gen/python/README.md                          |   11 +
 gen/python/pyproject.toml                     |   16 +-
 gen/python/tests/test_jsonschema.py           |  135 ++
 gen/python/wire/jsonschema                    |    1 +
 gen/python/wire/schemas.py                    |   53 +
 package.json                                  |    6 +-
 scripts/ci-local.sh                           |   28 +-
 scripts/gen-sdk-types.sh                      |   25 +-
 scripts/release/smoke-npm.sh                  |   20 +-
 scripts/release/smoke-python.sh               |   12 +-
 scripts/sdk-types/buf.jsonschema.yaml         |    3 +-
 scripts/sdk-types/gen_jsonschema.py           |  313 +++++
 scripts/sdk-types/requirements-test.in        |    2 +
 scripts/sdk-types/requirements-test.txt       |  143 ++-
 sdk/python/tests/test_ts_package_exports.py   |    9 +-
 sdk/ts/README.md                              |   17 +-
 sdk/ts/scripts/build.mjs                      |   28 +-
 sdk/ts/tests/jsonschema.test.ts               |  121 ++
 182 files changed, 29366 insertions(+), 53 deletions(-)
 create mode 100644 conformance/jsonschema_test.go
 create mode 100644 gen/jsonschema/README.md
 create mode 100644 gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
 create mode 100644 gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.json
 create mode 100644 gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.json
 create mode 100644 gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AcceptableRestriction.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AcceptableRestriction.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AccountRegistration.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AccountRegistration.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AgentAcceptance.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AttributionDetail.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AttributionDetail.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.AuthorizedExchange.schema.json
 create mode 100644 gen/jsonschema/fora.v1.AuthorizedExchange.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.CatalogContributor.schema.json
 create mode 100644 gen/jsonschema/fora.v1.CatalogContributor.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.CatalogRejection.schema.json
 create mode 100644 gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Cost.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Cost.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Delegation.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Delegation.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DisputeFailure.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DisputeRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DisputeResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationResult.schema.json
 create mode 100644 gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ErrorDetail.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ExchangeOutcome.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ExchangeOutcome.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.JsonWebKey.schema.json
 create mode 100644 gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.KeyRevocationList.schema.json
 create mode 100644 gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.License.schema.json
 create mode 100644 gen/jsonschema/fora.v1.License.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.LicenseTerm.schema.json
 create mode 100644 gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Obligation.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Obligation.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Offer.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Offer.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.OfferGroup.schema.json
 create mode 100644 gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Preview.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Preview.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Pricing.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Pricing.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.PushResourcesResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Quota.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Quota.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RateLimitInfo.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RateLimitInfo.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RegisterRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RegisterRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RegisterResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RegistrationFailure.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RegistrationFieldError.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RegistrationFieldError.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ReportingObligation.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RequestAuthFailure.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RequestAuthFailure.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RequestConstraints.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Requester.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Requester.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceAttestation.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceAttestation.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceEntry.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceIdentity.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceIdentity.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceQuery.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Restriction.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Restriction.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.json
 create mode 100644 gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.json
 create mode 100644 gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionDenial.schema.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionItem.schema.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionRequest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionResultItem.schema.json
 create mode 100644 gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
 create mode 100644 gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.Usage.schema.json
 create mode 100644 gen/jsonschema/fora.v1.Usage.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.UsageAsset.schema.json
 create mode 100644 gen/jsonschema/fora.v1.UsageAsset.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.UsageReport.schema.json
 create mode 100644 gen/jsonschema/fora.v1.UsageReport.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.UsageReportRejection.schema.json
 create mode 100644 gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.UsageReportResponse.schema.json
 create mode 100644 gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.WBAFile.schema.json
 create mode 100644 gen/jsonschema/fora.v1.WBAFile.schema.strict.json
 create mode 100644 gen/jsonschema/fora.v1.WellKnownManifest.schema.json
 create mode 100644 gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
 create mode 100644 gen/jsonschema/jsonschema.go
 create mode 100644 gen/python/tests/test_jsonschema.py
 create mode 120000 gen/python/wire/jsonschema
 create mode 100644 gen/python/wire/schemas.py
 create mode 100644 scripts/sdk-types/gen_jsonschema.py
 create mode 100644 sdk/ts/tests/jsonschema.test.ts

diff --git a/.github/workflows/sdk-types-ci.yml b/.github/workflows/sdk-types-ci.yml
index 34fc8473..79860ce3 100644
--- a/.github/workflows/sdk-types-ci.yml
+++ b/.github/workflows/sdk-types-ci.yml
@@ -1,7 +1,8 @@
 name: sdk-types-ci
 
-# Drift gate for the generated TYPES EXPORT (Pydantic + Zod). Regenerates from the
-# proto via scripts/gen-sdk-types.sh and fails if the committed output differs — the
+# Drift gate for the generated TYPES EXPORT (Pydantic + Zod) and the published JSON
+# Schemas (gen/jsonschema/). Regenerates from the proto via scripts/gen-sdk-types.sh and
+# fails if the committed output differs — the
 # same regenerate-and-diff contract as the gen/ drift gate, for the SDK types. Runs
 # only when the proto, the descriptor, the generators, or the committed output change.
 on:
@@ -16,6 +17,7 @@ on:
       - 'conformance/**'
       - 'gen/python/**'
       - 'gen/ts/**'
+      - 'gen/jsonschema/**'
       - 'sdk/ts/**'
       - 'sdk/python/**'
       # The repo-root package.json is the map a CONSUMER resolves through (npm has
@@ -60,17 +62,19 @@ jobs:
       - name: regenerate types export
         run: ./scripts/gen-sdk-types.sh
 
-      # The whole generated wire/ directories, so a NEW generated file (e.g. wire/unique.py)
-      # is gated the day it is emitted. The untracked sweep is load-bearing: `git diff` cannot
-      # see a file that was generated but never committed, so a file list alone passes green.
-      # wire/base.py and wire/base.ts are hand-written seams (never regenerated, so they cannot
-      # drift); the vocab constants are generated by buf and gated separately.
+      # The whole generated wire/ directories and the published JSON Schemas, so a NEW
+      # generated file (e.g. wire/unique.py, or the schema of a new message) is gated the day
+      # it is emitted. The untracked sweep is load-bearing: `git diff` cannot see a file that
+      # was generated but never committed, so a file list alone passes green. wire/base.py,
+      # wire/base.ts, wire/schemas.py and gen/jsonschema/{jsonschema.go,README.md} are
+      # hand-written (never regenerated, so they cannot drift); the vocab constants are
+      # generated by buf and gated separately.
       - name: assert no drift
         run: |
-          if ! git diff --exit-code -- gen/python/wire gen/ts/wire \
-             || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire)" ]; then
-            echo "::error::Generated types export is out of sync with the proto. Run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/."
-            git status --short -- gen/python/wire gen/ts/wire
+          if ! git diff --exit-code -- gen/python/wire gen/ts/wire gen/jsonschema \
+             || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire gen/jsonschema)" ]; then
+            echo "::error::Generated types export is out of sync with the proto. Run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/ + gen/jsonschema/."
+            git status --short -- gen/python/wire gen/ts/wire gen/jsonschema
             exit 1
           fi
 
@@ -81,7 +85,7 @@ jobs:
       # protovalidate by the Go conformance suite (proto-ci) and gated for drift there.
       - name: Python (Pydantic) parity
         run: |
-          python -m pip install -q "pydantic>=2.0" pytest
+          python -m pip install -q "pydantic>=2.0" "jsonschema>=4.23" pytest
           PYTHONPATH=gen/python pytest gen/python/tests -q
 
       # `npm test` here typechecks wire/ and vocab/ at target ES2020 with the default
diff --git a/conformance/jsonschema_test.go b/conformance/jsonschema_test.go
new file mode 100644
index 00000000..e88189d5
--- /dev/null
+++ b/conformance/jsonschema_test.go
@@ -0,0 +1,149 @@
+package conformance
+
+// The published JSON Schemas (gen/jsonschema/) against the proto.
+//
+// The drift gate proves the committed schemas are what the generator emits today; this
+// proves what the generator emits is right about the contract, read from the compiled
+// descriptors, independently of the generator's own guards:
+//
+//   - exactly one default and one strict file per contract message, and no other file;
+//   - each schema's properties are the message's proto field names (the snake_case wire
+//     naming), in both variants;
+//   - the strict variant closes every message object it defines, the default variant
+//     closes none, and neither closes a google.protobuf.Struct field;
+//   - a 64-bit integer field accepts the decimal-string form canonical proto-JSON emits.
+//
+// The verdicts themselves (a value accepted or refused) are asserted against the
+// conformance corpus by gen/python/tests/test_jsonschema.py and
+// sdk/ts/tests/jsonschema.test.ts; Go has no draft 2020-12 validator in this module.
+
+import (
+	"encoding/json"
+	"io/fs"
+	"sort"
+	"strings"
+	"testing"
+
+	"google.golang.org/protobuf/reflect/protoreflect"
+
+	"github.com/FORA-Protocol/protocol/gen/jsonschema"
+)
+
+type schemaDoc struct {
+	ID         string                     `json:"$id"`
+	Properties map[string]json.RawMessage `json:"properties"`
+	Defs       map[string]json.RawMessage `json:"$defs"`
+	Additional *bool                      `json:"additionalProperties"`
+}
+
+func loadSchema(t *testing.T, name string, strict bool) schemaDoc {
+	t.Helper()
+	b, err := jsonschema.Load(name, strict)
+	if err != nil {
+		t.Fatal(err)
+	}
+	var d schemaDoc
+	if err := json.Unmarshal(b, &d); err != nil {
+		t.Fatalf("%s: %v", name, err)
+	}
+	return d
+}
+
+func TestPublishedSchemasCoverExactlyTheContract(t *testing.T) {
+	var want []string
+	EachMessage(func(md protoreflect.MessageDescriptor) {
+		n := string(md.FullName())
+		want = append(want, n+".schema.json", n+".schema.strict.json")
+	})
+	got, err := fs.Glob(jsonschema.FS, "*.json")
+	if err != nil {
+		t.Fatal(err)
+	}
+	sort.Strings(want)
+	sort.Strings(got)
+	if strings.Join(got, "\n") != strings.Join(want, "\n") {
+		t.Fatalf("gen/jsonschema/ does not match the contract messages:\n got %d files\nwant %d files", len(got), len(want))
+	}
+	if _, err := jsonschema.Load("fora.v1.NoSuchMessage", true); err == nil {
+		t.Fatal("Load accepted an unknown message name")
+	}
+	if _, err := jsonschema.Load("../jsonschema/fora.v1.ResourceResponse", false); err == nil {
+		t.Fatal("Load accepted a path outside the schema directory")
+	}
+}
+
+func TestPublishedSchemasMatchTheDescriptor(t *testing.T) {
+	EachMessage(func(md protoreflect.MessageDescriptor) {
+		name := string(md.FullName())
+		for _, strict := range []bool{false, true} {
+			d := loadSchema(t, name, strict)
+			checkFields(t, d, md)
+			checkClosed(t, d, strict)
+		}
+	})
+}
+
+// checkFields asserts the property set is the proto field names, that a Struct field
+// is an open object and that a 64-bit integer admits its decimal-string form.
+func checkFields(t *testing.T, d schemaDoc, md protoreflect.MessageDescriptor) {
+	t.Helper()
+	fields := md.Fields()
+	if len(d.Properties) != fields.Len() {
+		t.Errorf("%s: %d properties, the message has %d fields", d.ID, len(d.Properties), fields.Len())
+	}
+	for i := 0; i < fields.Len(); i++ {
+		fd := fields.Get(i)
+		raw, ok := d.Properties[string(fd.Name())]
+		if !ok {
+			t.Errorf("%s: no property for field %s", d.ID, fd.Name())
+			continue
+		}
+		var prop map[string]any
+		if err := json.Unmarshal(raw, &prop); err != nil {
+			t.Fatal(err)
+		}
+		if fd.Message() != nil && fd.Message().FullName() == "google.protobuf.Struct" {
+			if prop["type"] != "object" || prop["additionalProperties"] != nil {
+				t.Errorf("%s: Struct field %s is not an open object: %s", d.ID, fd.Name(), raw)
+			}
+		}
+		switch fd.Kind() {
+		case protoreflect.Int64Kind, protoreflect.Sint64Kind, protoreflect.Sfixed64Kind,
+			protoreflect.Uint64Kind, protoreflect.Fixed64Kind:
+			if !hasStringArm(prop) {
+				t.Errorf("%s: int64 field %s has no decimal-string form: %s", d.ID, fd.Name(), raw)
+			}
+		}
+	}
+}
+
+func hasStringArm(prop map[string]any) bool {
+	arms, _ := prop["anyOf"].([]any)
+	for _, a := range arms {
+		if arm, ok := a.(map[string]any); ok && arm["type"] == "string" {
+			return true
+		}
+	}
+	return false
+}
+
+// checkClosed asserts the unknown-field policy of every message object in the file.
+func checkClosed(t *testing.T, d schemaDoc, strict bool) {
+	t.Helper()
+	closed := func(where string, additional *bool) {
+		switch {
+		case strict && (additional == nil || *additional):
+			t.Errorf("%s: %s is not closed in the strict variant", d.ID, where)
+		case !strict && additional != nil:
+			t.Errorf("%s: %s sets additionalProperties in the default variant", d.ID, where)
+		}
+	}
+	closed("the root message", d.Additional)
+	for name, raw := range d.Defs {
+		var def schemaDoc
+		if err := json.Unmarshal(raw, &def); err != nil {
+			t.Fatal(err)
+		}
+		closed(name, def.Additional)
+	}
+}
diff --git a/gen/jsonschema/README.md b/gen/jsonschema/README.md
new file mode 100644
index 00000000..2c997cb2
--- /dev/null
+++ b/gen/jsonschema/README.md
@@ -0,0 +1,75 @@
+# Published JSON Schemas
+
+Generated from [`proto/`](../../proto). **Do not edit the `.json` files by hand.**
+Regenerate with `scripts/gen-sdk-types.sh` and commit the result; CI regenerates them
+and fails on any difference.
+
+One JSON Schema (draft 2020-12) per message of the wire contract (`fora.v1` and
+`fora.admin.v1`), named by the fully-qualified message name, in two variants:
+
+| File | Unknown fields |
+|---|---|
+| `fora.v1.ResourceResponse.schema.json` | accepted, as the generated SDK models accept them |
+| `fora.v1.ResourceResponse.schema.strict.json` | refused: `additionalProperties: false` on every message object, at every depth |
+
+A conformance check uses the strict variant, so an unknown or misspelled field fails the
+check. The default variant suits a reader that must accept messages from a newer
+protocol version.
+
+Each file is self-contained: the message is the document root, and every message it
+references is inlined under `$defs`, keyed by its fully-qualified name. Validate against
+one file with any draft 2020-12 validator; no schema registry and no network access are
+needed.
+
+## Where to get them
+
+| Package | Access |
+|---|---|
+| Go module `github.com/FORA-Protocol/protocol` | this directory; `jsonschema.Load("fora.v1.ResourceResponse", true)` or `jsonschema.FS` from package `github.com/FORA-Protocol/protocol/gen/jsonschema` |
+| `fora-protocol` on PyPI | `wire.schemas.load("fora.v1.ResourceResponse", strict=True)`; `wire.schemas.names()` lists the messages |
+| `@fora-protocol/sdk` on npm | export path `@fora-protocol/sdk/jsonschema/fora.v1.ResourceResponse.schema.strict.json` |
+
+## What the schemas encode
+
+The schemas come from the same pinned generator the SDK models are built from,
+`bufbuild/protoschema-plugins` `protoc-gen-jsonschema` v0.6.0, reshaped by
+`scripts/sdk-types/gen_jsonschema.py` to describe canonical proto-JSON as the FORA wire
+carries it. The two variants differ only in the unknown-field policy. Every decision
+below applies to both.
+
+- **Field names are the proto field names (snake_case).** That is the FORA wire naming:
+  servers render proto-JSON with the proto names, the SDKs send them, and the canonical
+  signing form uses them. The generator also emits the lowerCamel JSON names as aliases;
+  they are removed, so a camelCase key is an unknown field. The strict variant refuses
+  it.
+- **`google.protobuf.Struct` stays open.** Every `ext` field is a Struct: a plain JSON
+  object whose keys the contract does not define. The strict variant closes the message
+  objects of the contract and never reaches inside a Struct, at any depth.
+  `google.protobuf.Value` is any JSON value. Map fields keep their value schema as
+  `additionalProperties`.
+- **64-bit integers accept a decimal string or a JSON integer.** Canonical proto-JSON,
+  and so a FORA server, emits an `int64` as a string (`"limit": "5"`); the SDKs send a
+  JSON number. A bound applies to both forms: `Quota.limit` (`gte: 1`) refuses `0` and
+  `"0"`.
+- **Other numbers are JSON numbers.** Proto-JSON parsers also accept an `int32` or a
+  `double` as a string, but no FORA sender emits that form, and accepting it would let
+  `"1000"` past a bound of `[0, 1]`.
+- **`buf.validate` constraints are carried.** String patterns and lengths, numeric
+  bounds, enum `in`/`not_in`/`const` and item counts come from the generator. Two rules
+  it cannot express are added: a field whose zero value its own rule rejects is
+  `required` (proto-JSON omits a zero value, so an omitted field is that zero value), and
+  a `repeated.unique` field carries `uniqueItems`.
+- **Enums** accept the value name, which FORA senders emit, or the number of a permitted
+  value, which proto-JSON parsers also accept.
+- **Not in the schemas:** cross-field rules (CEL) and oneof exclusivity. They cannot be
+  expressed per field; servers enforce them, and the SDKs apply the cross-field rules.
+  `format` (`date-time`, `duration`) is an annotation unless your validator asserts
+  formats.
+
+The schemas are checked against the proto in three ways: the drift gate regenerates them
+and compares bytes, `conformance/jsonschema_test.go` checks the file set, the field names
+and the unknown-field policy against the compiled descriptors, and both variants must
+reach Go protovalidate's verdict on every case of `conformance/corpus/cases.json`, in
+Python and in TypeScript.
+
+`jsonschema.go` and this README are hand-written and are not regenerated.
diff --git a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
new file mode 100644
index 00000000..a1e09fb7
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
@@ -0,0 +1,42 @@
+{
+  "$id": "fora.admin.v1.ReportingPolicy.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
+  "properties": {
+    "quantity_tolerance": {
+      "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+      "maximum": 1,
+      "minimum": 0,
+      "type": "number"
+    },
+    "required_fields": {
+      "description": "Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 32,
+      "type": "array",
+      "uniqueItems": true
+    },
+    "tenant_id": {
+      "description": "The tenant whose reporting policy is being replaced.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "window_seconds": {
+      "description": "Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.",
+      "exclusiveMinimum": 0,
+      "maximum": 31536000,
+      "type": "integer"
+    }
+  },
+  "required": [
+    "tenant_id"
+  ],
+  "title": "Reporting Policy",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
new file mode 100644
index 00000000..9c29536f
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
@@ -0,0 +1,43 @@
+{
+  "$id": "fora.admin.v1.ReportingPolicy.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
+  "properties": {
+    "quantity_tolerance": {
+      "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+      "maximum": 1,
+      "minimum": 0,
+      "type": "number"
+    },
+    "required_fields": {
+      "description": "Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 32,
+      "type": "array",
+      "uniqueItems": true
+    },
+    "tenant_id": {
+      "description": "The tenant whose reporting policy is being replaced.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "window_seconds": {
+      "description": "Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.",
+      "exclusiveMinimum": 0,
+      "maximum": 31536000,
+      "type": "integer"
+    }
+  },
+  "required": [
+    "tenant_id"
+  ],
+  "title": "Reporting Policy",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
new file mode 100644
index 00000000..c3bfe07b
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
@@ -0,0 +1,62 @@
+{
+  "$defs": {
+    "fora.admin.v1.ReportingPolicy": {
+      "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
+      "properties": {
+        "quantity_tolerance": {
+          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "maximum": 1,
+          "minimum": 0,
+          "type": "number"
+        },
+        "required_fields": {
+          "description": "Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 32,
+          "type": "array",
+          "uniqueItems": true
+        },
+        "tenant_id": {
+          "description": "The tenant whose reporting policy is being replaced.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "window_seconds": {
+          "description": "Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.",
+          "exclusiveMinimum": 0,
+          "maximum": 31536000,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Reporting Policy",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetReportingPolicyRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "policy": {
+      "$ref": "#/$defs/fora.admin.v1.ReportingPolicy",
+      "description": "The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "policy"
+  ],
+  "title": "Set Reporting Policy Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
new file mode 100644
index 00000000..1b7a748b
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
@@ -0,0 +1,64 @@
+{
+  "$defs": {
+    "fora.admin.v1.ReportingPolicy": {
+      "additionalProperties": false,
+      "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
+      "properties": {
+        "quantity_tolerance": {
+          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "maximum": 1,
+          "minimum": 0,
+          "type": "number"
+        },
+        "required_fields": {
+          "description": "Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 32,
+          "type": "array",
+          "uniqueItems": true
+        },
+        "tenant_id": {
+          "description": "The tenant whose reporting policy is being replaced.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "window_seconds": {
+          "description": "Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.",
+          "exclusiveMinimum": 0,
+          "maximum": 31536000,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Reporting Policy",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetReportingPolicyRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "policy": {
+      "$ref": "#/$defs/fora.admin.v1.ReportingPolicy",
+      "description": "The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "policy"
+  ],
+  "title": "Set Reporting Policy Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
new file mode 100644
index 00000000..752fc5a6
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
@@ -0,0 +1,62 @@
+{
+  "$defs": {
+    "fora.admin.v1.ReportingPolicy": {
+      "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
+      "properties": {
+        "quantity_tolerance": {
+          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "maximum": 1,
+          "minimum": 0,
+          "type": "number"
+        },
+        "required_fields": {
+          "description": "Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 32,
+          "type": "array",
+          "uniqueItems": true
+        },
+        "tenant_id": {
+          "description": "The tenant whose reporting policy is being replaced.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "window_seconds": {
+          "description": "Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.",
+          "exclusiveMinimum": 0,
+          "maximum": 31536000,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Reporting Policy",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetReportingPolicyResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "policy": {
+      "$ref": "#/$defs/fora.admin.v1.ReportingPolicy",
+      "description": "The reporting policy as persisted."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "policy"
+  ],
+  "title": "Set Reporting Policy Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
new file mode 100644
index 00000000..0e5d7932
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
@@ -0,0 +1,64 @@
+{
+  "$defs": {
+    "fora.admin.v1.ReportingPolicy": {
+      "additionalProperties": false,
+      "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
+      "properties": {
+        "quantity_tolerance": {
+          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "maximum": 1,
+          "minimum": 0,
+          "type": "number"
+        },
+        "required_fields": {
+          "description": "Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 32,
+          "type": "array",
+          "uniqueItems": true
+        },
+        "tenant_id": {
+          "description": "The tenant whose reporting policy is being replaced.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "window_seconds": {
+          "description": "Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.",
+          "exclusiveMinimum": 0,
+          "maximum": 31536000,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Reporting Policy",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetReportingPolicyResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "policy": {
+      "$ref": "#/$defs/fora.admin.v1.ReportingPolicy",
+      "description": "The reporting policy as persisted."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "policy"
+  ],
+  "title": "Set Reporting Policy Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.json b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.json
new file mode 100644
index 00000000..a713e526
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.json
@@ -0,0 +1,50 @@
+{
+  "$defs": {
+    "fora.admin.v1.TenantFeeRate": {
+      "description": "TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep.",
+      "properties": {
+        "fee_rate_bps": {
+          "default": 0,
+          "description": "Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.",
+          "exclusiveMaximum": 10000,
+          "minimum": 0,
+          "type": "integer"
+        },
+        "notes": {
+          "description": "Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.",
+          "maxLength": 1024,
+          "type": "string"
+        },
+        "tenant_id": {
+          "description": "The tenant whose fee rate is being set.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Tenant Fee Rate",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetTenantFeeRateRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "rate": {
+      "$ref": "#/$defs/fora.admin.v1.TenantFeeRate",
+      "description": "The fee rate to apply. Required — an absent payload would otherwise skip\n validation of its fields."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "rate"
+  ],
+  "title": "Set Tenant Fee Rate Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.strict.json
new file mode 100644
index 00000000..8903192a
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateRequest.schema.strict.json
@@ -0,0 +1,52 @@
+{
+  "$defs": {
+    "fora.admin.v1.TenantFeeRate": {
+      "additionalProperties": false,
+      "description": "TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep.",
+      "properties": {
+        "fee_rate_bps": {
+          "default": 0,
+          "description": "Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.",
+          "exclusiveMaximum": 10000,
+          "minimum": 0,
+          "type": "integer"
+        },
+        "notes": {
+          "description": "Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.",
+          "maxLength": 1024,
+          "type": "string"
+        },
+        "tenant_id": {
+          "description": "The tenant whose fee rate is being set.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Tenant Fee Rate",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetTenantFeeRateRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "rate": {
+      "$ref": "#/$defs/fora.admin.v1.TenantFeeRate",
+      "description": "The fee rate to apply. Required — an absent payload would otherwise skip\n validation of its fields."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "rate"
+  ],
+  "title": "Set Tenant Fee Rate Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.json b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.json
new file mode 100644
index 00000000..3cdcf264
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.json
@@ -0,0 +1,50 @@
+{
+  "$defs": {
+    "fora.admin.v1.TenantFeeRate": {
+      "description": "TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep.",
+      "properties": {
+        "fee_rate_bps": {
+          "default": 0,
+          "description": "Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.",
+          "exclusiveMaximum": 10000,
+          "minimum": 0,
+          "type": "integer"
+        },
+        "notes": {
+          "description": "Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.",
+          "maxLength": 1024,
+          "type": "string"
+        },
+        "tenant_id": {
+          "description": "The tenant whose fee rate is being set.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Tenant Fee Rate",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetTenantFeeRateResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "rate": {
+      "$ref": "#/$defs/fora.admin.v1.TenantFeeRate",
+      "description": "The fee rate as persisted."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "rate"
+  ],
+  "title": "Set Tenant Fee Rate Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json
new file mode 100644
index 00000000..3321646d
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json
@@ -0,0 +1,52 @@
+{
+  "$defs": {
+    "fora.admin.v1.TenantFeeRate": {
+      "additionalProperties": false,
+      "description": "TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep.",
+      "properties": {
+        "fee_rate_bps": {
+          "default": 0,
+          "description": "Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.",
+          "exclusiveMaximum": 10000,
+          "minimum": 0,
+          "type": "integer"
+        },
+        "notes": {
+          "description": "Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.",
+          "maxLength": 1024,
+          "type": "string"
+        },
+        "tenant_id": {
+          "description": "The tenant whose fee rate is being set.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "tenant_id"
+      ],
+      "title": "Tenant Fee Rate",
+      "type": "object"
+    }
+  },
+  "$id": "fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "rate": {
+      "$ref": "#/$defs/fora.admin.v1.TenantFeeRate",
+      "description": "The fee rate as persisted."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "rate"
+  ],
+  "title": "Set Tenant Fee Rate Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.json b/gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.json
new file mode 100644
index 00000000..473f63d8
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.json
@@ -0,0 +1,30 @@
+{
+  "$id": "fora.admin.v1.TenantFeeRate.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep.",
+  "properties": {
+    "fee_rate_bps": {
+      "default": 0,
+      "description": "Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.",
+      "exclusiveMaximum": 10000,
+      "minimum": 0,
+      "type": "integer"
+    },
+    "notes": {
+      "description": "Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.",
+      "maxLength": 1024,
+      "type": "string"
+    },
+    "tenant_id": {
+      "description": "The tenant whose fee rate is being set.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    }
+  },
+  "required": [
+    "tenant_id"
+  ],
+  "title": "Tenant Fee Rate",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.strict.json b/gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.strict.json
new file mode 100644
index 00000000..27a4c18f
--- /dev/null
+++ b/gen/jsonschema/fora.admin.v1.TenantFeeRate.schema.strict.json
@@ -0,0 +1,31 @@
+{
+  "$id": "fora.admin.v1.TenantFeeRate.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep.",
+  "properties": {
+    "fee_rate_bps": {
+      "default": 0,
+      "description": "Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.",
+      "exclusiveMaximum": 10000,
+      "minimum": 0,
+      "type": "integer"
+    },
+    "notes": {
+      "description": "Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.",
+      "maxLength": 1024,
+      "type": "string"
+    },
+    "tenant_id": {
+      "description": "The tenant whose fee rate is being set.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    }
+  },
+  "required": [
+    "tenant_id"
+  ],
+  "title": "Tenant Fee Rate",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AcceptableRestriction.schema.json b/gen/jsonschema/fora.v1.AcceptableRestriction.schema.json
new file mode 100644
index 00000000..fe4b01d2
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AcceptableRestriction.schema.json
@@ -0,0 +1,45 @@
+{
+  "$id": "fora.v1.AcceptableRestriction.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.",
+  "properties": {
+    "axis": {
+      "anyOf": [
+        {
+          "pattern": "^RESTRICTION_KIND_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "RESTRICTION_KIND_FUNCTION",
+            "RESTRICTION_KIND_GEOGRAPHY",
+            "RESTRICTION_KIND_USER_TYPE",
+            "RESTRICTION_KIND_OTHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.",
+      "title": "Restriction Kind"
+    },
+    "values": {
+      "description": "The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 64,
+      "type": "array"
+    }
+  },
+  "title": "Acceptable Restriction",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AcceptableRestriction.schema.strict.json b/gen/jsonschema/fora.v1.AcceptableRestriction.schema.strict.json
new file mode 100644
index 00000000..73961958
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AcceptableRestriction.schema.strict.json
@@ -0,0 +1,46 @@
+{
+  "$id": "fora.v1.AcceptableRestriction.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.",
+  "properties": {
+    "axis": {
+      "anyOf": [
+        {
+          "pattern": "^RESTRICTION_KIND_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "RESTRICTION_KIND_FUNCTION",
+            "RESTRICTION_KIND_GEOGRAPHY",
+            "RESTRICTION_KIND_USER_TYPE",
+            "RESTRICTION_KIND_OTHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.",
+      "title": "Restriction Kind"
+    },
+    "values": {
+      "description": "The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 64,
+      "type": "array"
+    }
+  },
+  "title": "Acceptable Restriction",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AccountRegistration.schema.json b/gen/jsonschema/fora.v1.AccountRegistration.schema.json
new file mode 100644
index 00000000..4448720f
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AccountRegistration.schema.json
@@ -0,0 +1,14 @@
+{
+  "$id": "fora.v1.AccountRegistration.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "AccountRegistration — how to open an account at this Exchange. Published as an\n optional block on WellKnownManifest; an Exchange that omits the whole block\n keeps today's behaviour, accepting RegisterRequest.registration_data\n uninspected. The block exists rather than a flat field because registration\n has more than one publishable facet: `data_schema` describes the API mode\n below, and field 2 is deliberately left free for a future web mode — a URL to\n a registration page on the Exchange's own site, where a human completes the\n steps an API call cannot carry (explicit terms confirmation, identity checks,\n manual review). Flat siblings on a manifest this size would give a reader no\n signal that they are one subject. Precedence between the modes is fixed now,\n before both can be published: an Exchange that publishes `data_schema` MUST\n accept registration through the API, and a registration URL is an additional\n option an agent MAY offer its user instead — never a replacement for the API\n path. An Exchange that wants web-only registration publishes the URL and no\n schema. Note that terms versioning is NOT in this block: WellKnownManifest.\n terms_digest sits at the top level so an Exchange with pass-through\n registration can still pin which terms document it is serving.",
+  "properties": {
+    "data_schema": {
+      "description": "The gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.",
+      "title": "JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.",
+      "type": "object"
+    }
+  },
+  "title": "Account Registration",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AccountRegistration.schema.strict.json b/gen/jsonschema/fora.v1.AccountRegistration.schema.strict.json
new file mode 100644
index 00000000..a6d51fb4
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AccountRegistration.schema.strict.json
@@ -0,0 +1,15 @@
+{
+  "$id": "fora.v1.AccountRegistration.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "AccountRegistration — how to open an account at this Exchange. Published as an\n optional block on WellKnownManifest; an Exchange that omits the whole block\n keeps today's behaviour, accepting RegisterRequest.registration_data\n uninspected. The block exists rather than a flat field because registration\n has more than one publishable facet: `data_schema` describes the API mode\n below, and field 2 is deliberately left free for a future web mode — a URL to\n a registration page on the Exchange's own site, where a human completes the\n steps an API call cannot carry (explicit terms confirmation, identity checks,\n manual review). Flat siblings on a manifest this size would give a reader no\n signal that they are one subject. Precedence between the modes is fixed now,\n before both can be published: an Exchange that publishes `data_schema` MUST\n accept registration through the API, and a registration URL is an additional\n option an agent MAY offer its user instead — never a replacement for the API\n path. An Exchange that wants web-only registration publishes the URL and no\n schema. Note that terms versioning is NOT in this block: WellKnownManifest.\n terms_digest sits at the top level so an Exchange with pass-through\n registration can still pin which terms document it is serving.",
+  "properties": {
+    "data_schema": {
+      "description": "The gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.",
+      "title": "JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.",
+      "type": "object"
+    }
+  },
+  "title": "Account Registration",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentAcceptance.schema.json b/gen/jsonschema/fora.v1.AgentAcceptance.schema.json
new file mode 100644
index 00000000..661ce5c6
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentAcceptance.schema.json
@@ -0,0 +1,22 @@
+{
+  "$id": "fora.v1.AgentAcceptance.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+  "properties": {
+    "signature": {
+      "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
+      "minLength": 1,
+      "type": "string"
+    },
+    "signature_algorithm": {
+      "default": "",
+      "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "signature"
+  ],
+  "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json b/gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json
new file mode 100644
index 00000000..ea260db1
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json
@@ -0,0 +1,23 @@
+{
+  "$id": "fora.v1.AgentAcceptance.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+  "properties": {
+    "signature": {
+      "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
+      "minLength": 1,
+      "type": "string"
+    },
+    "signature_algorithm": {
+      "default": "",
+      "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "signature"
+  ],
+  "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
new file mode 100644
index 00000000..06ac852e
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
@@ -0,0 +1,29 @@
+{
+  "$id": "fora.v1.AgentAcceptancePayload.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Field provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.",
+  "properties": {
+    "idempotency_key": {
+      "default": "",
+      "description": "The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.",
+      "type": "string"
+    },
+    "offer_sig": {
+      "default": "",
+      "description": "The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.",
+      "type": "string"
+    },
+    "requester_domain": {
+      "default": "",
+      "description": "Requester domain (Requester.domain) the acceptance is bound to.",
+      "type": "string"
+    },
+    "requester_id": {
+      "default": "",
+      "description": "Requester identity (Requester.id) the acceptance is bound to.",
+      "type": "string"
+    }
+  },
+  "title": "AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
new file mode 100644
index 00000000..b312b1c0
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
@@ -0,0 +1,30 @@
+{
+  "$id": "fora.v1.AgentAcceptancePayload.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Field provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.",
+  "properties": {
+    "idempotency_key": {
+      "default": "",
+      "description": "The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.",
+      "type": "string"
+    },
+    "offer_sig": {
+      "default": "",
+      "description": "The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.",
+      "type": "string"
+    },
+    "requester_domain": {
+      "default": "",
+      "description": "Requester domain (Requester.domain) the acceptance is bound to.",
+      "type": "string"
+    },
+    "requester_id": {
+      "default": "",
+      "description": "Requester identity (Requester.id) the acceptance is bound to.",
+      "type": "string"
+    }
+  },
+  "title": "AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
new file mode 100644
index 00000000..71953592
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
@@ -0,0 +1,76 @@
+{
+  "$defs": {
+    "fora.v1.AgentRequestAcceptanceItem": {
+      "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+      "properties": {
+        "exchange": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "offer_sig": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange",
+        "offer_sig"
+      ],
+      "title": "Agent Request Acceptance Item",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptancePayload": {
+      "description": "AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature.",
+      "properties": {
+        "idempotency_key": {
+          "default": "",
+          "type": "string"
+        },
+        "items": {
+          "description": "Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.AgentRequestAcceptanceItem"
+          },
+          "maxItems": 256,
+          "minItems": 1,
+          "type": "array"
+        },
+        "requester_domain": {
+          "default": "",
+          "type": "string"
+        },
+        "requester_id": {
+          "default": "",
+          "type": "string"
+        }
+      },
+      "title": "Agent Request Acceptance Payload",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.AgentRequestAcceptance.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "properties": {
+    "payload": {
+      "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
+      "description": "The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."
+    },
+    "signature": {
+      "description": "Hex-encoded detached Ed25519 signature over the canonical payload bytes.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "signature_algorithm": {
+      "default": "",
+      "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "payload",
+    "signature"
+  ],
+  "title": "AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
new file mode 100644
index 00000000..82d419c8
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
@@ -0,0 +1,79 @@
+{
+  "$defs": {
+    "fora.v1.AgentRequestAcceptanceItem": {
+      "additionalProperties": false,
+      "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+      "properties": {
+        "exchange": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "offer_sig": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange",
+        "offer_sig"
+      ],
+      "title": "Agent Request Acceptance Item",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptancePayload": {
+      "additionalProperties": false,
+      "description": "AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature.",
+      "properties": {
+        "idempotency_key": {
+          "default": "",
+          "type": "string"
+        },
+        "items": {
+          "description": "Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.AgentRequestAcceptanceItem"
+          },
+          "maxItems": 256,
+          "minItems": 1,
+          "type": "array"
+        },
+        "requester_domain": {
+          "default": "",
+          "type": "string"
+        },
+        "requester_id": {
+          "default": "",
+          "type": "string"
+        }
+      },
+      "title": "Agent Request Acceptance Payload",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.AgentRequestAcceptance.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "properties": {
+    "payload": {
+      "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
+      "description": "The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."
+    },
+    "signature": {
+      "description": "Hex-encoded detached Ed25519 signature over the canonical payload bytes.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "signature_algorithm": {
+      "default": "",
+      "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "payload",
+    "signature"
+  ],
+  "title": "AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.json b/gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.json
new file mode 100644
index 00000000..65711b95
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.json
@@ -0,0 +1,21 @@
+{
+  "$id": "fora.v1.AgentRequestAcceptanceItem.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+  "properties": {
+    "exchange": {
+      "minLength": 1,
+      "type": "string"
+    },
+    "offer_sig": {
+      "minLength": 1,
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange",
+    "offer_sig"
+  ],
+  "title": "Agent Request Acceptance Item",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.strict.json b/gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.strict.json
new file mode 100644
index 00000000..b2f3d59d
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptanceItem.schema.strict.json
@@ -0,0 +1,22 @@
+{
+  "$id": "fora.v1.AgentRequestAcceptanceItem.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+  "properties": {
+    "exchange": {
+      "minLength": 1,
+      "type": "string"
+    },
+    "offer_sig": {
+      "minLength": 1,
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange",
+    "offer_sig"
+  ],
+  "title": "Agent Request Acceptance Item",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json
new file mode 100644
index 00000000..2ae13f1a
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json
@@ -0,0 +1,51 @@
+{
+  "$defs": {
+    "fora.v1.AgentRequestAcceptanceItem": {
+      "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+      "properties": {
+        "exchange": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "offer_sig": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange",
+        "offer_sig"
+      ],
+      "title": "Agent Request Acceptance Item",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.AgentRequestAcceptancePayload.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature.",
+  "properties": {
+    "idempotency_key": {
+      "default": "",
+      "type": "string"
+    },
+    "items": {
+      "description": "Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AgentRequestAcceptanceItem"
+      },
+      "maxItems": 256,
+      "minItems": 1,
+      "type": "array"
+    },
+    "requester_domain": {
+      "default": "",
+      "type": "string"
+    },
+    "requester_id": {
+      "default": "",
+      "type": "string"
+    }
+  },
+  "title": "Agent Request Acceptance Payload",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json
new file mode 100644
index 00000000..424252f1
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json
@@ -0,0 +1,53 @@
+{
+  "$defs": {
+    "fora.v1.AgentRequestAcceptanceItem": {
+      "additionalProperties": false,
+      "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+      "properties": {
+        "exchange": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "offer_sig": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange",
+        "offer_sig"
+      ],
+      "title": "Agent Request Acceptance Item",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.AgentRequestAcceptancePayload.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature.",
+  "properties": {
+    "idempotency_key": {
+      "default": "",
+      "type": "string"
+    },
+    "items": {
+      "description": "Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AgentRequestAcceptanceItem"
+      },
+      "maxItems": 256,
+      "minItems": 1,
+      "type": "array"
+    },
+    "requester_domain": {
+      "default": "",
+      "type": "string"
+    },
+    "requester_id": {
+      "default": "",
+      "type": "string"
+    }
+  },
+  "title": "Agent Request Acceptance Payload",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AttributionDetail.schema.json b/gen/jsonschema/fora.v1.AttributionDetail.schema.json
new file mode 100644
index 00000000..a91118c8
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AttributionDetail.schema.json
@@ -0,0 +1,36 @@
+{
+  "$id": "fora.v1.AttributionDetail.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "AttributionDetail — Structured attribution metadata for usage reporting.",
+  "properties": {
+    "displayed_url": {
+      "description": "URL displayed to the user as the attribution link.",
+      "type": "string"
+    },
+    "format": {
+      "anyOf": [
+        {
+          "enum": [
+            "CITATION_FORMAT_LINK",
+            "CITATION_FORMAT_FOOTNOTE",
+            "CITATION_FORMAT_INLINE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How the citation was presented.",
+      "title": "Citation Format"
+    },
+    "visible_to_user": {
+      "description": "Whether the attribution was visible to the end user.",
+      "type": "boolean"
+    }
+  },
+  "title": "Attribution Detail",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AttributionDetail.schema.strict.json b/gen/jsonschema/fora.v1.AttributionDetail.schema.strict.json
new file mode 100644
index 00000000..406ffd30
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AttributionDetail.schema.strict.json
@@ -0,0 +1,37 @@
+{
+  "$id": "fora.v1.AttributionDetail.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "AttributionDetail — Structured attribution metadata for usage reporting.",
+  "properties": {
+    "displayed_url": {
+      "description": "URL displayed to the user as the attribution link.",
+      "type": "string"
+    },
+    "format": {
+      "anyOf": [
+        {
+          "enum": [
+            "CITATION_FORMAT_LINK",
+            "CITATION_FORMAT_FOOTNOTE",
+            "CITATION_FORMAT_INLINE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How the citation was presented.",
+      "title": "Citation Format"
+    },
+    "visible_to_user": {
+      "description": "Whether the attribution was visible to the end user.",
+      "type": "boolean"
+    }
+  },
+  "title": "Attribution Detail",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AuthorizedExchange.schema.json b/gen/jsonschema/fora.v1.AuthorizedExchange.schema.json
new file mode 100644
index 00000000..ef07b0a0
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AuthorizedExchange.schema.json
@@ -0,0 +1,53 @@
+{
+  "$id": "fora.v1.AuthorizedExchange.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "AuthorizedExchange — A Exchange authorized to sell this provider's resources.",
+  "properties": {
+    "domain": {
+      "description": "Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "endpoint": {
+      "default": "",
+      "description": "FORA ExchangeService endpoint URL.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "relationship": {
+      "anyOf": [
+        {
+          "enum": [
+            "PROVIDER_RELATIONSHIP_DIRECT",
+            "PROVIDER_RELATIONSHIP_RESELLER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Relationship type (mirrors ads.txt DIRECT/RESELLER).",
+      "title": "Provider Relationship"
+    }
+  },
+  "required": [
+    "domain",
+    "relationship"
+  ],
+  "title": "Authorized Exchange",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.AuthorizedExchange.schema.strict.json b/gen/jsonschema/fora.v1.AuthorizedExchange.schema.strict.json
new file mode 100644
index 00000000..11e8b722
--- /dev/null
+++ b/gen/jsonschema/fora.v1.AuthorizedExchange.schema.strict.json
@@ -0,0 +1,54 @@
+{
+  "$id": "fora.v1.AuthorizedExchange.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "AuthorizedExchange — A Exchange authorized to sell this provider's resources.",
+  "properties": {
+    "domain": {
+      "description": "Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "endpoint": {
+      "default": "",
+      "description": "FORA ExchangeService endpoint URL.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "relationship": {
+      "anyOf": [
+        {
+          "enum": [
+            "PROVIDER_RELATIONSHIP_DIRECT",
+            "PROVIDER_RELATIONSHIP_RESELLER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Relationship type (mirrors ads.txt DIRECT/RESELLER).",
+      "title": "Provider Relationship"
+    }
+  },
+  "required": [
+    "domain",
+    "relationship"
+  ],
+  "title": "Authorized Exchange",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
new file mode 100644
index 00000000..3e276621
--- /dev/null
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -0,0 +1,758 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.ExchangeOutcome": {
+      "description": "ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.",
+      "properties": {
+        "agent_identity_hash": {
+          "default": "",
+          "description": "That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.",
+          "type": "string"
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_ids": {
+          "description": "The offer_id of every item sent to this Exchange, in request order.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 256,
+          "type": "array"
+        },
+        "subscription_quota": {
+          "description": "That Exchange's TransactionResponse.subscription_quota, unchanged.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Exchange Outcome",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.TransactionResultItem": {
+      "description": "TransactionResultItem — Result for a single offer in a batch transaction.",
+      "properties": {
+        "billing_id": {
+          "default": "",
+          "description": "Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
+          "type": "string"
+        },
+        "cost": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Cost for this item."
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource is delivered for this item.",
+          "title": "Delivery Method"
+        },
+        "denial_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_UNSPECIFIED",
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Set if this specific item was denied (others may succeed).",
+          "title": "Denial Reason"
+        },
+        "expires_at": {
+          "description": "When retrieval_endpoint expires.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "offer_id": {
+          "default": "",
+          "description": "The offer_id this result is for.",
+          "type": "string"
+        },
+        "refusal": {
+          "$ref": "#/$defs/fora.v1.UpstreamRefusal",
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+        },
+        "reporting_obligation": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Reporting requirements for this item."
+        },
+        "resource_title": {
+          "description": "Resource title echoed from the Offer.",
+          "type": "string"
+        },
+        "restriction_mismatches": {
+          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "retrieval_endpoint": {
+          "description": "Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If under subscription, no per-request charge.",
+          "type": "string"
+        },
+        "subscription_unit_value": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown)."
+        },
+        "transaction_id": {
+          "default": "",
+          "description": "Exchange-assigned transaction identifier.",
+          "type": "string"
+        }
+      },
+      "title": "Transaction Result Item",
+      "type": "object"
+    },
+    "fora.v1.UpstreamRefusal": {
+      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "properties": {
+        "code": {
+          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "maxLength": 64,
+          "minLength": 1,
+          "type": "string"
+        },
+        "detail": {
+          "$ref": "#/$defs/fora.v1.ErrorDetail",
+          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "exchange"
+      ],
+      "title": "Upstream Refusal",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.BrokerTransactionResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).",
+  "properties": {
+    "exchanges": {
+      "description": "One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ExchangeOutcome"
+      },
+      "type": "array"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "items": {
+      "description": "One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.TransactionResultItem"
+      },
+      "type": "array"
+    },
+    "totals": {
+      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Cost"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Broker Transaction Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
new file mode 100644
index 00000000..b9729baa
--- /dev/null
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -0,0 +1,775 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "additionalProperties": false,
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "additionalProperties": false,
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "additionalProperties": false,
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "additionalProperties": false,
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "additionalProperties": false,
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.ExchangeOutcome": {
+      "additionalProperties": false,
+      "description": "ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.",
+      "properties": {
+        "agent_identity_hash": {
+          "default": "",
+          "description": "That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.",
+          "type": "string"
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_ids": {
+          "description": "The offer_id of every item sent to this Exchange, in request order.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 256,
+          "type": "array"
+        },
+        "subscription_quota": {
+          "description": "That Exchange's TransactionResponse.subscription_quota, unchanged.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Exchange Outcome",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "additionalProperties": false,
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "additionalProperties": false,
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "additionalProperties": false,
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "additionalProperties": false,
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "additionalProperties": false,
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.TransactionResultItem": {
+      "additionalProperties": false,
+      "description": "TransactionResultItem — Result for a single offer in a batch transaction.",
+      "properties": {
+        "billing_id": {
+          "default": "",
+          "description": "Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
+          "type": "string"
+        },
+        "cost": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Cost for this item."
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource is delivered for this item.",
+          "title": "Delivery Method"
+        },
+        "denial_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_UNSPECIFIED",
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Set if this specific item was denied (others may succeed).",
+          "title": "Denial Reason"
+        },
+        "expires_at": {
+          "description": "When retrieval_endpoint expires.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "offer_id": {
+          "default": "",
+          "description": "The offer_id this result is for.",
+          "type": "string"
+        },
+        "refusal": {
+          "$ref": "#/$defs/fora.v1.UpstreamRefusal",
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+        },
+        "reporting_obligation": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Reporting requirements for this item."
+        },
+        "resource_title": {
+          "description": "Resource title echoed from the Offer.",
+          "type": "string"
+        },
+        "restriction_mismatches": {
+          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "retrieval_endpoint": {
+          "description": "Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If under subscription, no per-request charge.",
+          "type": "string"
+        },
+        "subscription_unit_value": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown)."
+        },
+        "transaction_id": {
+          "default": "",
+          "description": "Exchange-assigned transaction identifier.",
+          "type": "string"
+        }
+      },
+      "title": "Transaction Result Item",
+      "type": "object"
+    },
+    "fora.v1.UpstreamRefusal": {
+      "additionalProperties": false,
+      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "properties": {
+        "code": {
+          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "maxLength": 64,
+          "minLength": 1,
+          "type": "string"
+        },
+        "detail": {
+          "$ref": "#/$defs/fora.v1.ErrorDetail",
+          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "exchange"
+      ],
+      "title": "Upstream Refusal",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "additionalProperties": false,
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.BrokerTransactionResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).",
+  "properties": {
+    "exchanges": {
+      "description": "One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ExchangeOutcome"
+      },
+      "type": "array"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "items": {
+      "description": "One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.TransactionResultItem"
+      },
+      "type": "array"
+    },
+    "totals": {
+      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Cost"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Broker Transaction Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.CatalogContributor.schema.json b/gen/jsonschema/fora.v1.CatalogContributor.schema.json
new file mode 100644
index 00000000..abe7eac5
--- /dev/null
+++ b/gen/jsonschema/fora.v1.CatalogContributor.schema.json
@@ -0,0 +1,19 @@
+{
+  "$id": "fora.v1.CatalogContributor.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.",
+  "properties": {
+    "domain": {
+      "default": "",
+      "description": "Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").",
+      "type": "string"
+    },
+    "relationship": {
+      "default": "",
+      "description": "Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).",
+      "type": "string"
+    }
+  },
+  "title": "Catalog Contributor",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.CatalogContributor.schema.strict.json b/gen/jsonschema/fora.v1.CatalogContributor.schema.strict.json
new file mode 100644
index 00000000..6950c854
--- /dev/null
+++ b/gen/jsonschema/fora.v1.CatalogContributor.schema.strict.json
@@ -0,0 +1,20 @@
+{
+  "$id": "fora.v1.CatalogContributor.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.",
+  "properties": {
+    "domain": {
+      "default": "",
+      "description": "Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").",
+      "type": "string"
+    },
+    "relationship": {
+      "default": "",
+      "description": "Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).",
+      "type": "string"
+    }
+  },
+  "title": "Catalog Contributor",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.CatalogRejection.schema.json b/gen/jsonschema/fora.v1.CatalogRejection.schema.json
new file mode 100644
index 00000000..cff11e7a
--- /dev/null
+++ b/gen/jsonschema/fora.v1.CatalogRejection.schema.json
@@ -0,0 +1,44 @@
+{
+  "$id": "fora.v1.CatalogRejection.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "CatalogRejection — a CatalogService call could not be applied.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+            "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+            "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+            "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+            "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+            "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+            "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+            "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+            "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 9,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The rejection reason (defined-only, non-zero)",
+      "title": "Catalog Rejection Reason"
+    },
+    "rejected_paths": {
+      "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Catalog Rejection",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json b/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
new file mode 100644
index 00000000..f0024fa6
--- /dev/null
+++ b/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
@@ -0,0 +1,45 @@
+{
+  "$id": "fora.v1.CatalogRejection.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "CatalogRejection — a CatalogService call could not be applied.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+            "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+            "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+            "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+            "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+            "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+            "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+            "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+            "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 9,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The rejection reason (defined-only, non-zero)",
+      "title": "Catalog Rejection Reason"
+    },
+    "rejected_paths": {
+      "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Catalog Rejection",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Cost.schema.json b/gen/jsonschema/fora.v1.Cost.schema.json
new file mode 100644
index 00000000..6add1c24
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Cost.schema.json
@@ -0,0 +1,25 @@
+{
+  "$id": "fora.v1.Cost.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Cost — Actual transaction cost.",
+  "properties": {
+    "amount": {
+      "default": "",
+      "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    },
+    "currency": {
+      "default": "",
+      "type": "string"
+    },
+    "unit_cost": {
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    }
+  },
+  "title": "Cost",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Cost.schema.strict.json b/gen/jsonschema/fora.v1.Cost.schema.strict.json
new file mode 100644
index 00000000..cedb9bf5
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Cost.schema.strict.json
@@ -0,0 +1,26 @@
+{
+  "$id": "fora.v1.Cost.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Cost — Actual transaction cost.",
+  "properties": {
+    "amount": {
+      "default": "",
+      "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    },
+    "currency": {
+      "default": "",
+      "type": "string"
+    },
+    "unit_cost": {
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    }
+  },
+  "title": "Cost",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Delegation.schema.json b/gen/jsonschema/fora.v1.Delegation.schema.json
new file mode 100644
index 00000000..e733a163
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Delegation.schema.json
@@ -0,0 +1,84 @@
+{
+  "$id": "fora.v1.Delegation.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+  "properties": {
+    "expires_at": {
+      "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "issuer": {
+      "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+      "type": "string"
+    },
+    "max_accesses": {
+      "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "max_spend_cents": {
+      "anyOf": [
+        {
+          "type": "integer"
+        },
+        {
+          "pattern": "^-?[0-9]+$",
+          "type": "string"
+        }
+      ],
+      "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+    },
+    "principal_domain": {
+      "default": "",
+      "description": "Who granted this delegation (domain for public key lookup).",
+      "type": "string"
+    },
+    "principal_id": {
+      "default": "",
+      "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+      "type": "string"
+    },
+    "quota_period": {
+      "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+      "format": "duration",
+      "type": "string"
+    },
+    "revocation_uri": {
+      "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+      "type": "string"
+    },
+    "scopes": {
+      "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "token": {
+      "default": null,
+      "description": "Token bytes. A JWT (base64url-encoded JWS).",
+      "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+      "type": "string"
+    },
+    "token_format": {
+      "default": "",
+      "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+      "type": "string"
+    }
+  },
+  "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Delegation.schema.strict.json b/gen/jsonschema/fora.v1.Delegation.schema.strict.json
new file mode 100644
index 00000000..60e507dc
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Delegation.schema.strict.json
@@ -0,0 +1,85 @@
+{
+  "$id": "fora.v1.Delegation.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+  "properties": {
+    "expires_at": {
+      "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "issuer": {
+      "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+      "type": "string"
+    },
+    "max_accesses": {
+      "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "max_spend_cents": {
+      "anyOf": [
+        {
+          "type": "integer"
+        },
+        {
+          "pattern": "^-?[0-9]+$",
+          "type": "string"
+        }
+      ],
+      "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+    },
+    "principal_domain": {
+      "default": "",
+      "description": "Who granted this delegation (domain for public key lookup).",
+      "type": "string"
+    },
+    "principal_id": {
+      "default": "",
+      "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+      "type": "string"
+    },
+    "quota_period": {
+      "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+      "format": "duration",
+      "type": "string"
+    },
+    "revocation_uri": {
+      "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+      "type": "string"
+    },
+    "scopes": {
+      "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "token": {
+      "default": null,
+      "description": "Token bytes. A JWT (base64url-encoded JWS).",
+      "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+      "type": "string"
+    },
+    "token_format": {
+      "default": "",
+      "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+      "type": "string"
+    }
+  },
+  "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
new file mode 100644
index 00000000..a607292b
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -0,0 +1,372 @@
+{
+  "$defs": {
+    "fora.v1.AcceptableRestriction": {
+      "description": "AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.",
+      "properties": {
+        "axis": {
+          "anyOf": [
+            {
+              "pattern": "^RESTRICTION_KIND_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.",
+          "title": "Restriction Kind"
+        },
+        "values": {
+          "description": "The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "title": "Acceptable Restriction",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.Delegation": {
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    },
+    "fora.v1.RequestConstraints": {
+      "description": "RequestConstraints — Budget and preference constraints.",
+      "properties": {
+        "budget_period": {
+          "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+          "format": "duration",
+          "type": "string"
+        },
+        "budget_scope": {
+          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+          "type": "string"
+        },
+        "delivery_preference": {
+          "description": "Preferred delivery methods, in order of preference.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "DELIVERY_METHOD_UNSPECIFIED",
+                  "DELIVERY_METHOD_DIRECT",
+                  "DELIVERY_METHOD_INSTRUCTIONS",
+                  "DELIVERY_METHOD_STREAMING"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Delivery Method"
+          },
+          "type": "array"
+        },
+        "exchanges": {
+          "description": "Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.",
+          "items": {
+            "maxLength": 260,
+            "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "max_data_age": {
+          "description": "Only relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"",
+          "format": "duration",
+          "title": "Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.",
+          "type": "string"
+        },
+        "max_hops": {
+          "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_price": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Maximum price the agent is willing to pay."
+        },
+        "max_unit_cost": {
+          "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "period_budget": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+        },
+        "preferred_exchanges": {
+          "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
+          "items": {
+            "maxLength": 260,
+            "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "reporting_capable": {
+          "description": "Whether the agent supports post-usage reporting.",
+          "type": "boolean"
+        }
+      },
+      "title": "Request Constraints",
+      "type": "object"
+    },
+    "fora.v1.Requester": {
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "properties": {
+        "delegation": {
+          "$ref": "#/$defs/fora.v1.Delegation",
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+        },
+        "domain": {
+          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "id": {
+          "default": "",
+          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "type": "string"
+        },
+        "name": {
+          "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Entitlement scopes. Declare what the requester can access.",
+          "type": "array"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUESTER_TYPE_AGENT",
+                "REQUESTER_TYPE_HUMAN_TOOL",
+                "REQUESTER_TYPE_SERVICE",
+                "REQUESTER_TYPE_DELEGATED",
+                "REQUESTER_TYPE_RESEARCH"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What kind of entity is making this request.",
+          "title": "Requester Type"
+        }
+      },
+      "required": [
+        "domain",
+        "type"
+      ],
+      "title": "Requester — Universal identity for any FORA client.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.DiscoveryRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DiscoveryRequest — Agent sends to Broker (Step 1).",
+  "properties": {
+    "acceptable_restrictions": {
+      "description": "The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AcceptableRestriction"
+      },
+      "type": "array"
+    },
+    "constraints": {
+      "$ref": "#/$defs/fora.v1.RequestConstraints",
+      "description": "Constraints for exchange filtering and offer selection."
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "query": {
+      "description": "Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).",
+      "type": "string"
+    },
+    "requester": {
+      "$ref": "#/$defs/fora.v1.Requester",
+      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester."
+    },
+    "search_filters": {
+      "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
+      "type": "object"
+    },
+    "supported_profiles": {
+      "description": "The Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review",
+      "items": {
+        "type": "string"
+      },
+      "title": "Domain extension profiles the agent understands.",
+      "type": "array"
+    },
+    "uris": {
+      "description": "Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 256,
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Discovery Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
new file mode 100644
index 00000000..c93ffd70
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -0,0 +1,378 @@
+{
+  "$defs": {
+    "fora.v1.AcceptableRestriction": {
+      "additionalProperties": false,
+      "description": "AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.",
+      "properties": {
+        "axis": {
+          "anyOf": [
+            {
+              "pattern": "^RESTRICTION_KIND_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.",
+          "title": "Restriction Kind"
+        },
+        "values": {
+          "description": "The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "title": "Acceptable Restriction",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "additionalProperties": false,
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.Delegation": {
+      "additionalProperties": false,
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    },
+    "fora.v1.RequestConstraints": {
+      "additionalProperties": false,
+      "description": "RequestConstraints — Budget and preference constraints.",
+      "properties": {
+        "budget_period": {
+          "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+          "format": "duration",
+          "type": "string"
+        },
+        "budget_scope": {
+          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+          "type": "string"
+        },
+        "delivery_preference": {
+          "description": "Preferred delivery methods, in order of preference.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "DELIVERY_METHOD_UNSPECIFIED",
+                  "DELIVERY_METHOD_DIRECT",
+                  "DELIVERY_METHOD_INSTRUCTIONS",
+                  "DELIVERY_METHOD_STREAMING"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Delivery Method"
+          },
+          "type": "array"
+        },
+        "exchanges": {
+          "description": "Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.",
+          "items": {
+            "maxLength": 260,
+            "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "max_data_age": {
+          "description": "Only relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"",
+          "format": "duration",
+          "title": "Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.",
+          "type": "string"
+        },
+        "max_hops": {
+          "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_price": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Maximum price the agent is willing to pay."
+        },
+        "max_unit_cost": {
+          "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "period_budget": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+        },
+        "preferred_exchanges": {
+          "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
+          "items": {
+            "maxLength": 260,
+            "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "reporting_capable": {
+          "description": "Whether the agent supports post-usage reporting.",
+          "type": "boolean"
+        }
+      },
+      "title": "Request Constraints",
+      "type": "object"
+    },
+    "fora.v1.Requester": {
+      "additionalProperties": false,
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "properties": {
+        "delegation": {
+          "$ref": "#/$defs/fora.v1.Delegation",
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+        },
+        "domain": {
+          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "id": {
+          "default": "",
+          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "type": "string"
+        },
+        "name": {
+          "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Entitlement scopes. Declare what the requester can access.",
+          "type": "array"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUESTER_TYPE_AGENT",
+                "REQUESTER_TYPE_HUMAN_TOOL",
+                "REQUESTER_TYPE_SERVICE",
+                "REQUESTER_TYPE_DELEGATED",
+                "REQUESTER_TYPE_RESEARCH"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What kind of entity is making this request.",
+          "title": "Requester Type"
+        }
+      },
+      "required": [
+        "domain",
+        "type"
+      ],
+      "title": "Requester — Universal identity for any FORA client.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.DiscoveryRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DiscoveryRequest — Agent sends to Broker (Step 1).",
+  "properties": {
+    "acceptable_restrictions": {
+      "description": "The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AcceptableRestriction"
+      },
+      "type": "array"
+    },
+    "constraints": {
+      "$ref": "#/$defs/fora.v1.RequestConstraints",
+      "description": "Constraints for exchange filtering and offer selection."
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "query": {
+      "description": "Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).",
+      "type": "string"
+    },
+    "requester": {
+      "$ref": "#/$defs/fora.v1.Requester",
+      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester."
+    },
+    "search_filters": {
+      "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
+      "type": "object"
+    },
+    "supported_profiles": {
+      "description": "The Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review",
+      "items": {
+        "type": "string"
+      },
+      "title": "Domain extension profiles the agent understands.",
+      "type": "array"
+    },
+    "uris": {
+      "description": "Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 256,
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Discovery Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
new file mode 100644
index 00000000..946fc469
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -0,0 +1,902 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.OfferGroup": {
+      "description": "OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.",
+      "properties": {
+        "absence_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "OFFER_ABSENCE_REASON_UNSPECIFIED",
+                "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+                "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+                "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+                "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+                "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+                "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+                "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "title": "Offer Absence Reason"
+        },
+        "discovery_method": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISCOVERY_METHOD_UNSPECIFIED",
+                "DISCOVERY_METHOD_EXCHANGE",
+                "DISCOVERY_METHOD_SEARCH",
+                "DISCOVERY_METHOD_RECOMMENDATION",
+                "DISCOVERY_METHOD_SYNDICATION"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.",
+          "title": "Discovery Method"
+        },
+        "offers": {
+          "description": "Zero or more offers for this URI. Empty = resource not available.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Offer"
+          },
+          "type": "array"
+        },
+        "restriction_filters": {
+          "description": "When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "uri": {
+          "default": "",
+          "description": "The URI this group of offers is for (echoed from ResourceQuery.uris).",
+          "type": "string"
+        }
+      },
+      "title": "Offer Group",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.DiscoveryResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Carries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.",
+  "properties": {
+    "absence_reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "OFFER_ABSENCE_REASON_UNSPECIFIED",
+            "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+            "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+            "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+            "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+            "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+            "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+            "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+            "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.",
+      "title": "Offer Absence Reason"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "offer_groups": {
+      "description": "Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.OfferGroup"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "DiscoveryResponse — Broker returns to Agent (Step 6).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
new file mode 100644
index 00000000..c3285a23
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -0,0 +1,916 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "additionalProperties": false,
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.OfferGroup": {
+      "additionalProperties": false,
+      "description": "OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.",
+      "properties": {
+        "absence_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "OFFER_ABSENCE_REASON_UNSPECIFIED",
+                "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+                "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+                "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+                "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+                "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+                "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+                "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "title": "Offer Absence Reason"
+        },
+        "discovery_method": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISCOVERY_METHOD_UNSPECIFIED",
+                "DISCOVERY_METHOD_EXCHANGE",
+                "DISCOVERY_METHOD_SEARCH",
+                "DISCOVERY_METHOD_RECOMMENDATION",
+                "DISCOVERY_METHOD_SYNDICATION"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.",
+          "title": "Discovery Method"
+        },
+        "offers": {
+          "description": "Zero or more offers for this URI. Empty = resource not available.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Offer"
+          },
+          "type": "array"
+        },
+        "restriction_filters": {
+          "description": "When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "uri": {
+          "default": "",
+          "description": "The URI this group of offers is for (echoed from ResourceQuery.uris).",
+          "type": "string"
+        }
+      },
+      "title": "Offer Group",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "additionalProperties": false,
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "additionalProperties": false,
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.DiscoveryResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Carries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.",
+  "properties": {
+    "absence_reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "OFFER_ABSENCE_REASON_UNSPECIFIED",
+            "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+            "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+            "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+            "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+            "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+            "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+            "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+            "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.",
+      "title": "Offer Absence Reason"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "offer_groups": {
+      "description": "Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.OfferGroup"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "DiscoveryResponse — Broker returns to Agent (Step 6).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DisputeFailure.schema.json b/gen/jsonschema/fora.v1.DisputeFailure.schema.json
new file mode 100644
index 00000000..52936a52
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DisputeFailure.schema.json
@@ -0,0 +1,33 @@
+{
+  "$id": "fora.v1.DisputeFailure.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DisputeFailure — a dispute could not be filed.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+            "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+            "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+            "DISPUTE_FAILURE_REASON_DUPLICATE",
+            "DISPUTE_FAILURE_REASON_INELIGIBLE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 5,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Dispute Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Dispute Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json b/gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json
new file mode 100644
index 00000000..b07c76bf
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json
@@ -0,0 +1,34 @@
+{
+  "$id": "fora.v1.DisputeFailure.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DisputeFailure — a dispute could not be filed.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+            "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+            "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+            "DISPUTE_FAILURE_REASON_DUPLICATE",
+            "DISPUTE_FAILURE_REASON_INELIGIBLE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 5,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Dispute Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Dispute Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DisputeRequest.schema.json b/gen/jsonschema/fora.v1.DisputeRequest.schema.json
new file mode 100644
index 00000000..9bb8aa69
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DisputeRequest.schema.json
@@ -0,0 +1,90 @@
+{
+  "$id": "fora.v1.DisputeRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DisputeRequest — Agent signals a problem with delivered resource.",
+  "properties": {
+    "billing_id": {
+      "default": "",
+      "description": "Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).",
+      "type": "string"
+    },
+    "description": {
+      "description": "Human-readable description of the issue.",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "idempotency_key": {
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case. The dispute's durable identity is the\n Exchange-assigned dispute_id in DisputeResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DISPUTE_REASON_CONTENT_MISMATCH",
+            "DISPUTE_REASON_DELIVERY_FAILED",
+            "DISPUTE_REASON_WRONG_CONTENT",
+            "DISPUTE_REASON_EXPIRED_BEFORE_FETCH",
+            "DISPUTE_REASON_INCOMPLETE_CONTENT"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Reason for the dispute.",
+      "title": "Dispute Reason"
+    },
+    "received_content_hash": {
+      "description": "Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.",
+      "type": "string"
+    },
+    "received_hash_method": {
+      "description": "Hash algorithm the agent used",
+      "type": "string"
+    },
+    "report_id": {
+      "default": "",
+      "description": "Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.",
+      "type": "string"
+    },
+    "transaction_id": {
+      "default": "",
+      "description": "Transaction being disputed.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange",
+    "idempotency_key",
+    "reason"
+  ],
+  "title": "Dispute Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json b/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
new file mode 100644
index 00000000..1a25871d
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
@@ -0,0 +1,91 @@
+{
+  "$id": "fora.v1.DisputeRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DisputeRequest — Agent signals a problem with delivered resource.",
+  "properties": {
+    "billing_id": {
+      "default": "",
+      "description": "Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).",
+      "type": "string"
+    },
+    "description": {
+      "description": "Human-readable description of the issue.",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "idempotency_key": {
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case. The dispute's durable identity is the\n Exchange-assigned dispute_id in DisputeResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DISPUTE_REASON_CONTENT_MISMATCH",
+            "DISPUTE_REASON_DELIVERY_FAILED",
+            "DISPUTE_REASON_WRONG_CONTENT",
+            "DISPUTE_REASON_EXPIRED_BEFORE_FETCH",
+            "DISPUTE_REASON_INCOMPLETE_CONTENT"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Reason for the dispute.",
+      "title": "Dispute Reason"
+    },
+    "received_content_hash": {
+      "description": "Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.",
+      "type": "string"
+    },
+    "received_hash_method": {
+      "description": "Hash algorithm the agent used",
+      "type": "string"
+    },
+    "report_id": {
+      "default": "",
+      "description": "Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.",
+      "type": "string"
+    },
+    "transaction_id": {
+      "default": "",
+      "description": "Transaction being disputed.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange",
+    "idempotency_key",
+    "reason"
+  ],
+  "title": "Dispute Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DisputeResponse.schema.json b/gen/jsonschema/fora.v1.DisputeResponse.schema.json
new file mode 100644
index 00000000..9bb1ac63
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DisputeResponse.schema.json
@@ -0,0 +1,85 @@
+{
+  "$id": "fora.v1.DisputeResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DisputeResponse — Exchange acknowledges the dispute.",
+  "properties": {
+    "dispute_id": {
+      "description": "Exchange-assigned dispute case identifier.",
+      "type": "string"
+    },
+    "estimated_resolution": {
+      "description": "Expected resolution timeline.",
+      "format": "duration",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "resolution": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESOLUTION_TYPE_UNSPECIFIED",
+            "RESOLUTION_TYPE_CREDIT",
+            "RESOLUTION_TYPE_REDELIVERY",
+            "RESOLUTION_TYPE_REJECTED",
+            "RESOLUTION_TYPE_INVESTIGATION"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Resolution outcome, populated when the dispute reaches a terminal\n state (RESOLVED, SETTLED, or FINAL). Absent while dispute is in\n progress (FILED, UNDER_REVIEW, ESCALATED, etc.).",
+      "title": "Resolution Type"
+    },
+    "status": {
+      "anyOf": [
+        {
+          "pattern": "^DISPUTE_STATUS_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "DISPUTE_STATUS_FILED",
+            "DISPUTE_STATUS_AUTO_RESOLVED",
+            "DISPUTE_STATUS_EVIDENCE_NEEDED",
+            "DISPUTE_STATUS_UNDER_REVIEW",
+            "DISPUTE_STATUS_ESCALATED",
+            "DISPUTE_STATUS_RESOLVED",
+            "DISPUTE_STATUS_APPEALED",
+            "DISPUTE_STATUS_SETTLED",
+            "DISPUTE_STATUS_FINAL"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "Current lifecycle status of the dispute. Tracks progression through\n the three-tier resolution process:\n   Tier 1 (automated, <1s): FILED → AUTO_RESOLVED or EVIDENCE_NEEDED\n   Tier 2 (rule-based, <24h): UNDER_REVIEW → RESOLVED\n   Tier 3 (pattern investigation, async): ESCALATED → SETTLED → FINAL\n Losing party may appeal: RESOLVED → APPEALED → back to UNDER_REVIEW.",
+      "title": "Dispute Status"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Dispute Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json b/gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json
new file mode 100644
index 00000000..a460e575
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json
@@ -0,0 +1,86 @@
+{
+  "$id": "fora.v1.DisputeResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DisputeResponse — Exchange acknowledges the dispute.",
+  "properties": {
+    "dispute_id": {
+      "description": "Exchange-assigned dispute case identifier.",
+      "type": "string"
+    },
+    "estimated_resolution": {
+      "description": "Expected resolution timeline.",
+      "format": "duration",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "resolution": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESOLUTION_TYPE_UNSPECIFIED",
+            "RESOLUTION_TYPE_CREDIT",
+            "RESOLUTION_TYPE_REDELIVERY",
+            "RESOLUTION_TYPE_REJECTED",
+            "RESOLUTION_TYPE_INVESTIGATION"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Resolution outcome, populated when the dispute reaches a terminal\n state (RESOLVED, SETTLED, or FINAL). Absent while dispute is in\n progress (FILED, UNDER_REVIEW, ESCALATED, etc.).",
+      "title": "Resolution Type"
+    },
+    "status": {
+      "anyOf": [
+        {
+          "pattern": "^DISPUTE_STATUS_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "DISPUTE_STATUS_FILED",
+            "DISPUTE_STATUS_AUTO_RESOLVED",
+            "DISPUTE_STATUS_EVIDENCE_NEEDED",
+            "DISPUTE_STATUS_UNDER_REVIEW",
+            "DISPUTE_STATUS_ESCALATED",
+            "DISPUTE_STATUS_RESOLVED",
+            "DISPUTE_STATUS_APPEALED",
+            "DISPUTE_STATUS_SETTLED",
+            "DISPUTE_STATUS_FINAL"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "Current lifecycle status of the dispute. Tracks progression through\n the three-tier resolution process:\n   Tier 1 (automated, <1s): FILED → AUTO_RESOLVED or EVIDENCE_NEEDED\n   Tier 2 (rule-based, <24h): UNDER_REVIEW → RESOLVED\n   Tier 3 (pattern investigation, async): ESCALATED → SETTLED → FINAL\n Losing party may appeal: RESOLVED → APPEALED → back to UNDER_REVIEW.",
+      "title": "Dispute Status"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Dispute Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.json b/gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.json
new file mode 100644
index 00000000..918c2962
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.json
@@ -0,0 +1,40 @@
+{
+  "$id": "fora.v1.DomainVerificationChallenge.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DomainVerificationChallenge — Exchange returns a challenge.",
+  "properties": {
+    "expires_at": {
+      "description": "When this challenge expires. Provider must confirm before this time.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "token": {
+      "default": "",
+      "description": "Opaque challenge token. Provider must serve this at:\n https://{domain}/.well-known/fora-verify/{token}",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    },
+    "verification_url": {
+      "default": "",
+      "description": "The exact URL the Exchange will fetch to verify.",
+      "type": "string"
+    }
+  },
+  "title": "Domain Verification Challenge",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json b/gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json
new file mode 100644
index 00000000..4c5fea70
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json
@@ -0,0 +1,41 @@
+{
+  "$id": "fora.v1.DomainVerificationChallenge.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DomainVerificationChallenge — Exchange returns a challenge.",
+  "properties": {
+    "expires_at": {
+      "description": "When this challenge expires. Provider must confirm before this time.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "token": {
+      "default": "",
+      "description": "Opaque challenge token. Provider must serve this at:\n https://{domain}/.well-known/fora-verify/{token}",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    },
+    "verification_url": {
+      "default": "",
+      "description": "The exact URL the Exchange will fetch to verify.",
+      "type": "string"
+    }
+  },
+  "title": "Domain Verification Challenge",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.json b/gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.json
new file mode 100644
index 00000000..01b6c4a8
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.json
@@ -0,0 +1,53 @@
+{
+  "$id": "fora.v1.DomainVerificationConfirmation.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DomainVerificationConfirmation — Provider confirms the challenge is placed.",
+  "properties": {
+    "cdn_type": {
+      "description": "Which delivery-URL verification scheme this key is for: \"edge-ed25519\" (a\n code-capable edge that verifies the Ed25519 URL signature itself) or\n \"cloudfront\" (AWS CloudFront trusted key groups, RSA, verified natively by\n the CDN). One value per Exchange-side tenant signing scheme:\n \"edge-ed25519\" is ED25519, \"cloudfront\" is AWS_CLOUDFRONT_RSA.",
+      "type": "string"
+    },
+    "domain": {
+      "default": "",
+      "description": "The domain being verified.",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "signing_key": {
+      "description": "Format follows cdn_type: a PEM-encoded RSA public key for \"cloudfront\", or\n the base64url-encoded raw Ed25519 public key (the JWK \"x\" value) for\n \"edge-ed25519\".",
+      "title": "Optional: the delivery endpoint's verification key, registered atomically\n with the domain on successful verification. PUBLIC key material only.\n The Exchange signs delivery URLs with a private key it holds and never\n publishes; a delivery endpoint verifies with the public half and holds\n nothing secret. Where the Exchange has to sign with a key the provider\n generated -- a CloudFront trusted key group is the provider's own AWS\n resource -- the private half is provisioned to the Exchange out of band\n and never travels in this field.",
+      "type": "string"
+    },
+    "token": {
+      "default": "",
+      "description": "The challenge token (echoed from DomainVerificationChallenge).",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Domain Verification Confirmation",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.strict.json b/gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.strict.json
new file mode 100644
index 00000000..879935b9
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationConfirmation.schema.strict.json
@@ -0,0 +1,54 @@
+{
+  "$id": "fora.v1.DomainVerificationConfirmation.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DomainVerificationConfirmation — Provider confirms the challenge is placed.",
+  "properties": {
+    "cdn_type": {
+      "description": "Which delivery-URL verification scheme this key is for: \"edge-ed25519\" (a\n code-capable edge that verifies the Ed25519 URL signature itself) or\n \"cloudfront\" (AWS CloudFront trusted key groups, RSA, verified natively by\n the CDN). One value per Exchange-side tenant signing scheme:\n \"edge-ed25519\" is ED25519, \"cloudfront\" is AWS_CLOUDFRONT_RSA.",
+      "type": "string"
+    },
+    "domain": {
+      "default": "",
+      "description": "The domain being verified.",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "signing_key": {
+      "description": "Format follows cdn_type: a PEM-encoded RSA public key for \"cloudfront\", or\n the base64url-encoded raw Ed25519 public key (the JWK \"x\" value) for\n \"edge-ed25519\".",
+      "title": "Optional: the delivery endpoint's verification key, registered atomically\n with the domain on successful verification. PUBLIC key material only.\n The Exchange signs delivery URLs with a private key it holds and never\n publishes; a delivery endpoint verifies with the public half and holds\n nothing secret. Where the Exchange has to sign with a key the provider\n generated -- a CloudFront trusted key group is the provider's own AWS\n resource -- the private half is provisioned to the Exchange out of band\n and never travels in this field.",
+      "type": "string"
+    },
+    "token": {
+      "default": "",
+      "description": "The challenge token (echoed from DomainVerificationChallenge).",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Domain Verification Confirmation",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json
new file mode 100644
index 00000000..90211594
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json
@@ -0,0 +1,34 @@
+{
+  "$id": "fora.v1.DomainVerificationFailure.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 6,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Domain Verification Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Domain Verification Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json
new file mode 100644
index 00000000..5fa561e6
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json
@@ -0,0 +1,35 @@
+{
+  "$id": "fora.v1.DomainVerificationFailure.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 6,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Domain Verification Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Domain Verification Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationRequest.schema.json b/gen/jsonschema/fora.v1.DomainVerificationRequest.schema.json
new file mode 100644
index 00000000..9ab560c6
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationRequest.schema.json
@@ -0,0 +1,43 @@
+{
+  "$id": "fora.v1.DomainVerificationRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DomainVerificationRequest — Provider requests a verification challenge.",
+  "properties": {
+    "caller_id": {
+      "description": "Caller identity (registered with the Exchange).",
+      "type": "string"
+    },
+    "domain": {
+      "default": "",
+      "description": "The provider domain to verify (e.g., \"techcrunch.com\").",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Domain Verification Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationRequest.schema.strict.json b/gen/jsonschema/fora.v1.DomainVerificationRequest.schema.strict.json
new file mode 100644
index 00000000..0b655433
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationRequest.schema.strict.json
@@ -0,0 +1,44 @@
+{
+  "$id": "fora.v1.DomainVerificationRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DomainVerificationRequest — Provider requests a verification challenge.",
+  "properties": {
+    "caller_id": {
+      "description": "Caller identity (registered with the Exchange).",
+      "type": "string"
+    },
+    "domain": {
+      "default": "",
+      "description": "The provider domain to verify (e.g., \"techcrunch.com\").",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Domain Verification Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationResult.schema.json b/gen/jsonschema/fora.v1.DomainVerificationResult.schema.json
new file mode 100644
index 00000000..bbbc72cb
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationResult.schema.json
@@ -0,0 +1,34 @@
+{
+  "$id": "fora.v1.DomainVerificationResult.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "DomainVerificationResult — Exchange confirms verification.",
+  "properties": {
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "key_id": {
+      "description": "If signing_key was provided: confirmation of key registration.",
+      "type": "string"
+    },
+    "valid_until": {
+      "description": "Verification is valid until this time. Provider must re-verify periodically.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Domain Verification Result",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json b/gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json
new file mode 100644
index 00000000..36d26815
--- /dev/null
+++ b/gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json
@@ -0,0 +1,35 @@
+{
+  "$id": "fora.v1.DomainVerificationResult.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "DomainVerificationResult — Exchange confirms verification.",
+  "properties": {
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "key_id": {
+      "description": "If signing_key was provided: confirmation of key registration.",
+      "type": "string"
+    },
+    "valid_until": {
+      "description": "Verification is valid until this time. Provider must re-verify periodically.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Domain Verification Result",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
new file mode 100644
index 00000000..d639366c
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -0,0 +1,408 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ErrorDetail.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+  "properties": {
+    "catalog_rejection": {
+      "$ref": "#/$defs/fora.v1.CatalogRejection",
+      "description": "`reason` oneof — CatalogService rejection"
+    },
+    "dispute_failure": {
+      "$ref": "#/$defs/fora.v1.DisputeFailure",
+      "description": "`reason` oneof — DisputeTransaction filing refused"
+    },
+    "domain": {
+      "default": "",
+      "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+      "type": "string"
+    },
+    "domain_verification_failure": {
+      "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+      "description": "`reason` oneof — domain verification failed"
+    },
+    "message": {
+      "default": "",
+      "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+      "type": "string"
+    },
+    "metadata": {
+      "additionalProperties": {
+        "type": "string"
+      },
+      "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+      "propertyNames": {
+        "type": "string"
+      },
+      "type": "object"
+    },
+    "registration_failure": {
+      "$ref": "#/$defs/fora.v1.RegistrationFailure",
+      "description": "`reason` oneof — agent/provider registration refused"
+    },
+    "request_auth_failure": {
+      "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+      "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+    },
+    "retrieval_auth_failure": {
+      "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+      "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+    },
+    "transaction_denial": {
+      "$ref": "#/$defs/fora.v1.TransactionDenial",
+      "description": "`reason` oneof — ExecuteTransaction denial"
+    },
+    "usage_report_rejection": {
+      "$ref": "#/$defs/fora.v1.UsageReportRejection",
+      "description": "`reason` oneof — ReportUsage filing rejected"
+    }
+  },
+  "title": "Error Detail",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
new file mode 100644
index 00000000..bd0f0cf2
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -0,0 +1,418 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "additionalProperties": false,
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "additionalProperties": false,
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "additionalProperties": false,
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "additionalProperties": false,
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "additionalProperties": false,
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "additionalProperties": false,
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "additionalProperties": false,
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "additionalProperties": false,
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "additionalProperties": false,
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ErrorDetail.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+  "properties": {
+    "catalog_rejection": {
+      "$ref": "#/$defs/fora.v1.CatalogRejection",
+      "description": "`reason` oneof — CatalogService rejection"
+    },
+    "dispute_failure": {
+      "$ref": "#/$defs/fora.v1.DisputeFailure",
+      "description": "`reason` oneof — DisputeTransaction filing refused"
+    },
+    "domain": {
+      "default": "",
+      "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+      "type": "string"
+    },
+    "domain_verification_failure": {
+      "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+      "description": "`reason` oneof — domain verification failed"
+    },
+    "message": {
+      "default": "",
+      "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+      "type": "string"
+    },
+    "metadata": {
+      "additionalProperties": {
+        "type": "string"
+      },
+      "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+      "propertyNames": {
+        "type": "string"
+      },
+      "type": "object"
+    },
+    "registration_failure": {
+      "$ref": "#/$defs/fora.v1.RegistrationFailure",
+      "description": "`reason` oneof — agent/provider registration refused"
+    },
+    "request_auth_failure": {
+      "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+      "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+    },
+    "retrieval_auth_failure": {
+      "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+      "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+    },
+    "transaction_denial": {
+      "$ref": "#/$defs/fora.v1.TransactionDenial",
+      "description": "`reason` oneof — ExecuteTransaction denial"
+    },
+    "usage_report_rejection": {
+      "$ref": "#/$defs/fora.v1.UsageReportRejection",
+      "description": "`reason` oneof — ReportUsage filing rejected"
+    }
+  },
+  "title": "Error Detail",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ExchangeOutcome.schema.json b/gen/jsonschema/fora.v1.ExchangeOutcome.schema.json
new file mode 100644
index 00000000..2c7890e3
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ExchangeOutcome.schema.json
@@ -0,0 +1,82 @@
+{
+  "$defs": {
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ExchangeOutcome.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.",
+  "properties": {
+    "agent_identity_hash": {
+      "default": "",
+      "description": "That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "offer_ids": {
+      "description": "The offer_id of every item sent to this Exchange, in request order.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 256,
+      "type": "array"
+    },
+    "subscription_quota": {
+      "description": "That Exchange's TransactionResponse.subscription_quota, unchanged.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Exchange Outcome",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ExchangeOutcome.schema.strict.json b/gen/jsonschema/fora.v1.ExchangeOutcome.schema.strict.json
new file mode 100644
index 00000000..8917aa40
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ExchangeOutcome.schema.strict.json
@@ -0,0 +1,84 @@
+{
+  "$defs": {
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ExchangeOutcome.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.",
+  "properties": {
+    "agent_identity_hash": {
+      "default": "",
+      "description": "That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "offer_ids": {
+      "description": "The offer_id of every item sent to this Exchange, in request order.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 256,
+      "type": "array"
+    },
+    "subscription_quota": {
+      "description": "That Exchange's TransactionResponse.subscription_quota, unchanged.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Exchange Outcome",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.json b/gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.json
new file mode 100644
index 00000000..309b3c66
--- /dev/null
+++ b/gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.json
@@ -0,0 +1,34 @@
+{
+  "$id": "fora.v1.GetAccountStatusRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "GetAccountStatusRequest — Agent asks whether its account is active.",
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Accounts are per-Exchange, so \"which Exchange am I asking\n about\" is not derivable from anything else in this message.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Get Account Status Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.strict.json b/gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.strict.json
new file mode 100644
index 00000000..1d604a90
--- /dev/null
+++ b/gen/jsonschema/fora.v1.GetAccountStatusRequest.schema.strict.json
@@ -0,0 +1,35 @@
+{
+  "$id": "fora.v1.GetAccountStatusRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "GetAccountStatusRequest — Agent asks whether its account is active.",
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Accounts are per-Exchange, so \"which Exchange am I asking\n about\" is not derivable from anything else in this message.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Get Account Status Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json
new file mode 100644
index 00000000..55e25ac1
--- /dev/null
+++ b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json
@@ -0,0 +1,74 @@
+{
+  "$defs": {
+    "fora.v1.Cost": {
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.GetAccountStatusResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "GetAccountStatusResponse — Exchange reports the account's current state.",
+  "properties": {
+    "active": {
+      "default": false,
+      "description": "Whether the account is currently active.",
+      "type": "boolean"
+    },
+    "balances": {
+      "description": "The value is a snapshot. It does not guarantee that the next execute passes\n the balance check: another transaction can spend the funds first.\n\n An empty list means the Exchange does not report balances. It does NOT mean\n a zero balance. The same holds for a currency missing from a non-empty list:\n that balance is not reported, it is not zero. An Exchange that reports a\n zero balance sends the entry with amount \"0\". Balances are only allowed when\n billing_ref is set.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Cost"
+      },
+      "title": "The amount the account can spend now, one entry per currency. Holds for\n pending transactions are already subtracted. Each amount is an exact decimal\n string and is never negative. The list holds at most one entry per currency,\n and its order has no meaning. unit_cost is never set.",
+      "type": "array"
+    },
+    "billing_ref": {
+      "default": "",
+      "description": "The account handle minted at registration (see RegisterResponse.billing_ref).\n Empty when the calling agent has no account yet.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "terms_digest": {
+      "description": "An Exchange that holds a recorded digest for this account MUST return it\n here. Absence has exactly ONE meaning: no acceptance is recorded. Two\n situations produce it — the Exchange publishes no terms_digest, so nothing\n was ever accepted (and per RegisterRequest.terms_digest it MUST NOT record a\n presented value in that case), or the account was created before the operator\n began publishing one. It does NOT mean \"this account has no terms\", and an\n Exchange MUST NOT withhold a digest it holds: absence is already spoken for,\n so withholding would make the field state something untrue.\n\n The value is what was ACCEPTED, not what is published now. The two differ as\n soon as the operator revises its terms, and that difference is the point:\n comparing this against a freshly fetched WellKnownManifest.terms_digest is how\n an agent discovers that the terms moved under an account it already holds. A\n repeat Register will not tell it — a repeat is answered from the stored record\n and runs no gate at all.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "title": "The terms document this account ACCEPTED: the \"method:hexdigest\" value the\n agent echoed in RegisterRequest.terms_digest, which the Exchange recorded\n with the account. This is the read side of that record. Without it the\n protocol required an Exchange to store the acceptance and named the question\n the record exists to answer — \"which terms did this operator accept\" — while\n giving no way to ask it, so the only party who could check what it had agreed\n to was the party holding the database.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Get Account Status Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json
new file mode 100644
index 00000000..2d7cfb35
--- /dev/null
+++ b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json
@@ -0,0 +1,76 @@
+{
+  "$defs": {
+    "fora.v1.Cost": {
+      "additionalProperties": false,
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.GetAccountStatusResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "GetAccountStatusResponse — Exchange reports the account's current state.",
+  "properties": {
+    "active": {
+      "default": false,
+      "description": "Whether the account is currently active.",
+      "type": "boolean"
+    },
+    "balances": {
+      "description": "The value is a snapshot. It does not guarantee that the next execute passes\n the balance check: another transaction can spend the funds first.\n\n An empty list means the Exchange does not report balances. It does NOT mean\n a zero balance. The same holds for a currency missing from a non-empty list:\n that balance is not reported, it is not zero. An Exchange that reports a\n zero balance sends the entry with amount \"0\". Balances are only allowed when\n billing_ref is set.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Cost"
+      },
+      "title": "The amount the account can spend now, one entry per currency. Holds for\n pending transactions are already subtracted. Each amount is an exact decimal\n string and is never negative. The list holds at most one entry per currency,\n and its order has no meaning. unit_cost is never set.",
+      "type": "array"
+    },
+    "billing_ref": {
+      "default": "",
+      "description": "The account handle minted at registration (see RegisterResponse.billing_ref).\n Empty when the calling agent has no account yet.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "terms_digest": {
+      "description": "An Exchange that holds a recorded digest for this account MUST return it\n here. Absence has exactly ONE meaning: no acceptance is recorded. Two\n situations produce it — the Exchange publishes no terms_digest, so nothing\n was ever accepted (and per RegisterRequest.terms_digest it MUST NOT record a\n presented value in that case), or the account was created before the operator\n began publishing one. It does NOT mean \"this account has no terms\", and an\n Exchange MUST NOT withhold a digest it holds: absence is already spoken for,\n so withholding would make the field state something untrue.\n\n The value is what was ACCEPTED, not what is published now. The two differ as\n soon as the operator revises its terms, and that difference is the point:\n comparing this against a freshly fetched WellKnownManifest.terms_digest is how\n an agent discovers that the terms moved under an account it already holds. A\n repeat Register will not tell it — a repeat is answered from the stored record\n and runs no gate at all.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "title": "The terms document this account ACCEPTED: the \"method:hexdigest\" value the\n agent echoed in RegisterRequest.terms_digest, which the Exchange recorded\n with the account. This is the read side of that record. Without it the\n protocol required an Exchange to store the acceptance and named the question\n the record exists to answer — \"which terms did this operator accept\" — while\n giving no way to ask it, so the only party who could check what it had agreed\n to was the party holding the database.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Get Account Status Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.JsonWebKey.schema.json b/gen/jsonschema/fora.v1.JsonWebKey.schema.json
new file mode 100644
index 00000000..e984abf0
--- /dev/null
+++ b/gen/jsonschema/fora.v1.JsonWebKey.schema.json
@@ -0,0 +1,44 @@
+{
+  "$id": "fora.v1.JsonWebKey.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+  "properties": {
+    "alg": {
+      "default": "",
+      "description": "Signing algorithm. FORA v1.0: MUST be \"EdDSA\".",
+      "type": "string"
+    },
+    "crv": {
+      "default": "",
+      "description": "Curve. FORA v1.0: MUST be \"Ed25519\".",
+      "type": "string"
+    },
+    "kty": {
+      "default": "",
+      "description": "Key type. FORA v1.0: MUST be \"OKP\".",
+      "type": "string"
+    },
+    "not_after": {
+      "default": "",
+      "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+      "type": "string"
+    },
+    "not_before": {
+      "default": "",
+      "description": "RFC3339 timestamp. Key is invalid before this instant.",
+      "type": "string"
+    },
+    "use": {
+      "default": "",
+      "description": "Intended key use. FORA v1.0: MUST be \"sig\".",
+      "type": "string"
+    },
+    "x": {
+      "default": "",
+      "description": "base64url-encoded 32-byte Ed25519 public key.",
+      "type": "string"
+    }
+  },
+  "title": "JsonWebKey — Inline RFC 7517 JWK object.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json b/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
new file mode 100644
index 00000000..2372e4db
--- /dev/null
+++ b/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
@@ -0,0 +1,45 @@
+{
+  "$id": "fora.v1.JsonWebKey.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+  "properties": {
+    "alg": {
+      "default": "",
+      "description": "Signing algorithm. FORA v1.0: MUST be \"EdDSA\".",
+      "type": "string"
+    },
+    "crv": {
+      "default": "",
+      "description": "Curve. FORA v1.0: MUST be \"Ed25519\".",
+      "type": "string"
+    },
+    "kty": {
+      "default": "",
+      "description": "Key type. FORA v1.0: MUST be \"OKP\".",
+      "type": "string"
+    },
+    "not_after": {
+      "default": "",
+      "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+      "type": "string"
+    },
+    "not_before": {
+      "default": "",
+      "description": "RFC3339 timestamp. Key is invalid before this instant.",
+      "type": "string"
+    },
+    "use": {
+      "default": "",
+      "description": "Intended key use. FORA v1.0: MUST be \"sig\".",
+      "type": "string"
+    },
+    "x": {
+      "default": "",
+      "description": "base64url-encoded 32-byte Ed25519 public key.",
+      "type": "string"
+    }
+  },
+  "title": "JsonWebKey — Inline RFC 7517 JWK object.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.KeyRevocationList.schema.json b/gen/jsonschema/fora.v1.KeyRevocationList.schema.json
new file mode 100644
index 00000000..4e33b885
--- /dev/null
+++ b/gen/jsonschema/fora.v1.KeyRevocationList.schema.json
@@ -0,0 +1,21 @@
+{
+  "$id": "fora.v1.KeyRevocationList.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Snapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.",
+  "properties": {
+    "as_of": {
+      "description": "Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "revoked": {
+      "description": "Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "title": "KeyRevocationList — Body served at WBAFile.revocation_url.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json b/gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json
new file mode 100644
index 00000000..773281ae
--- /dev/null
+++ b/gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json
@@ -0,0 +1,22 @@
+{
+  "$id": "fora.v1.KeyRevocationList.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Snapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.",
+  "properties": {
+    "as_of": {
+      "description": "Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "revoked": {
+      "description": "Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "title": "KeyRevocationList — Body served at WBAFile.revocation_url.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.License.schema.json b/gen/jsonschema/fora.v1.License.schema.json
new file mode 100644
index 00000000..45f35335
--- /dev/null
+++ b/gen/jsonschema/fora.v1.License.schema.json
@@ -0,0 +1,32 @@
+{
+  "$id": "fora.v1.License.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "License — Identifies the governing license document for a LicenseTerm.",
+  "properties": {
+    "id": {
+      "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+      "type": "string"
+    },
+    "immutable": {
+      "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+      "type": "boolean"
+    },
+    "name": {
+      "description": "Human-readable name (licenseType, schema.org node name).",
+      "type": "string"
+    },
+    "uri": {
+      "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+      "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+      "type": "string"
+    },
+    "uri_digest": {
+      "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+      "type": "string"
+    }
+  },
+  "title": "License",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.License.schema.strict.json b/gen/jsonschema/fora.v1.License.schema.strict.json
new file mode 100644
index 00000000..e70f829b
--- /dev/null
+++ b/gen/jsonschema/fora.v1.License.schema.strict.json
@@ -0,0 +1,33 @@
+{
+  "$id": "fora.v1.License.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "License — Identifies the governing license document for a LicenseTerm.",
+  "properties": {
+    "id": {
+      "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+      "type": "string"
+    },
+    "immutable": {
+      "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+      "type": "boolean"
+    },
+    "name": {
+      "description": "Human-readable name (licenseType, schema.org node name).",
+      "type": "string"
+    },
+    "uri": {
+      "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+      "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+      "type": "string"
+    },
+    "uri_digest": {
+      "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+      "type": "string"
+    }
+  },
+  "title": "License",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
new file mode 100644
index 00000000..739fd218
--- /dev/null
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -0,0 +1,364 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.LicenseTerm.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "properties": {
+    "license": {
+      "$ref": "#/$defs/fora.v1.License",
+      "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+    },
+    "obligations": {
+      "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Obligation"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "part_label": {
+      "description": "Informational human-readable name for this sub-part (sub-part terms).",
+      "type": "string"
+    },
+    "pricing": {
+      "$ref": "#/$defs/fora.v1.Pricing",
+      "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+    },
+    "quotas": {
+      "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Quota"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "restrictions": {
+      "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Restriction"
+      },
+      "maxItems": 8,
+      "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+      "type": "array"
+    },
+    "scopes": {
+      "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 64,
+      "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+      "type": "array"
+    },
+    "semantics": {
+      "anyOf": [
+        {
+          "enum": [
+            "TERM_SEMANTICS_ENUMERATED",
+            "TERM_SEMANTICS_REFERENCE_ONLY"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How to interpret the machine fields.",
+      "title": "Term Semantics"
+    }
+  },
+  "required": [
+    "pricing",
+    "semantics"
+  ],
+  "title": "LicenseTerm — Universal licensing unit.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
new file mode 100644
index 00000000..76ab6196
--- /dev/null
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -0,0 +1,370 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.LicenseTerm.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "properties": {
+    "license": {
+      "$ref": "#/$defs/fora.v1.License",
+      "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+    },
+    "obligations": {
+      "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Obligation"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "part_label": {
+      "description": "Informational human-readable name for this sub-part (sub-part terms).",
+      "type": "string"
+    },
+    "pricing": {
+      "$ref": "#/$defs/fora.v1.Pricing",
+      "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+    },
+    "quotas": {
+      "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Quota"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "restrictions": {
+      "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Restriction"
+      },
+      "maxItems": 8,
+      "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+      "type": "array"
+    },
+    "scopes": {
+      "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 64,
+      "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+      "type": "array"
+    },
+    "semantics": {
+      "anyOf": [
+        {
+          "enum": [
+            "TERM_SEMANTICS_ENUMERATED",
+            "TERM_SEMANTICS_REFERENCE_ONLY"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How to interpret the machine fields.",
+      "title": "Term Semantics"
+    }
+  },
+  "required": [
+    "pricing",
+    "semantics"
+  ],
+  "title": "LicenseTerm — Universal licensing unit.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Obligation.schema.json b/gen/jsonschema/fora.v1.Obligation.schema.json
new file mode 100644
index 00000000..5970ec35
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Obligation.schema.json
@@ -0,0 +1,95 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Obligation.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+  "properties": {
+    "detail": {
+      "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+      "type": "string"
+    },
+    "kind": {
+      "anyOf": [
+        {
+          "enum": [
+            "OBLIGATION_KIND_ATTRIBUTION",
+            "OBLIGATION_KIND_CONTRIBUTION",
+            "OBLIGATION_KIND_SHARE_ALIKE",
+            "OBLIGATION_KIND_NETWORK_COPYLEFT",
+            "OBLIGATION_KIND_NOTICE",
+            "OBLIGATION_KIND_OTHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "What the agent must do.",
+      "title": "Obligation Kind"
+    },
+    "scope_license": {
+      "$ref": "#/$defs/fora.v1.License",
+      "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+    },
+    "trigger": {
+      "anyOf": [
+        {
+          "enum": [
+            "OBLIGATION_TRIGGER_ON_USE",
+            "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+            "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+            "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "When the obligation activates.",
+      "title": "Obligation Trigger"
+    }
+  },
+  "required": [
+    "kind",
+    "trigger"
+  ],
+  "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Obligation.schema.strict.json b/gen/jsonschema/fora.v1.Obligation.schema.strict.json
new file mode 100644
index 00000000..ff1103ef
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Obligation.schema.strict.json
@@ -0,0 +1,97 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Obligation.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+  "properties": {
+    "detail": {
+      "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+      "type": "string"
+    },
+    "kind": {
+      "anyOf": [
+        {
+          "enum": [
+            "OBLIGATION_KIND_ATTRIBUTION",
+            "OBLIGATION_KIND_CONTRIBUTION",
+            "OBLIGATION_KIND_SHARE_ALIKE",
+            "OBLIGATION_KIND_NETWORK_COPYLEFT",
+            "OBLIGATION_KIND_NOTICE",
+            "OBLIGATION_KIND_OTHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "What the agent must do.",
+      "title": "Obligation Kind"
+    },
+    "scope_license": {
+      "$ref": "#/$defs/fora.v1.License",
+      "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+    },
+    "trigger": {
+      "anyOf": [
+        {
+          "enum": [
+            "OBLIGATION_TRIGGER_ON_USE",
+            "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+            "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+            "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "When the obligation activates.",
+      "title": "Obligation Trigger"
+    }
+  },
+  "required": [
+    "kind",
+    "trigger"
+  ],
+  "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
new file mode 100644
index 00000000..9ca91933
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -0,0 +1,758 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Offer.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+  "properties": {
+    "attestations": {
+      "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceAttestation"
+      },
+      "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+      "type": "array"
+    },
+    "data_as_of": {
+      "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+      "format": "date-time",
+      "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+      "type": "string"
+    },
+    "delivery_method": {
+      "anyOf": [
+        {
+          "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "DELIVERY_METHOD_DIRECT",
+            "DELIVERY_METHOD_INSTRUCTIONS",
+            "DELIVERY_METHOD_STREAMING"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "How resource will be delivered.",
+      "title": "Delivery Method"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "expires_at": {
+      "description": "When this offer expires (ISO 8601).",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "iab_categories": {
+      "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "identity": {
+      "$ref": "#/$defs/fora.v1.ResourceIdentity",
+      "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+    },
+    "offer_id": {
+      "default": "",
+      "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+      "type": "string"
+    },
+    "previews": {
+      "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Preview"
+      },
+      "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+      "type": "array"
+    },
+    "pricing": {
+      "$ref": "#/$defs/fora.v1.Pricing",
+      "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+    },
+    "reporting": {
+      "$ref": "#/$defs/fora.v1.ReportingObligation",
+      "description": "Post-usage reporting requirements for this offer."
+    },
+    "signature": {
+      "default": "",
+      "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+      "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+      "type": "string"
+    },
+    "signature_algorithm": {
+      "default": "",
+      "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+      "type": "string"
+    },
+    "subscription_id": {
+      "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+      "type": "string"
+    },
+    "subscription_quota": {
+      "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+      },
+      "type": "array"
+    },
+    "terms": {
+      "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.LicenseTerm"
+      },
+      "maxItems": 1,
+      "minItems": 1,
+      "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+      "type": "array"
+    },
+    "title": {
+      "description": "Resource title (human-readable, for display/logging).",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Offer — A single resource offer from an Exchange.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
new file mode 100644
index 00000000..2cfc0597
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -0,0 +1,770 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "additionalProperties": false,
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "additionalProperties": false,
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Offer.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+  "properties": {
+    "attestations": {
+      "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceAttestation"
+      },
+      "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+      "type": "array"
+    },
+    "data_as_of": {
+      "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+      "format": "date-time",
+      "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+      "type": "string"
+    },
+    "delivery_method": {
+      "anyOf": [
+        {
+          "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "DELIVERY_METHOD_DIRECT",
+            "DELIVERY_METHOD_INSTRUCTIONS",
+            "DELIVERY_METHOD_STREAMING"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "How resource will be delivered.",
+      "title": "Delivery Method"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "expires_at": {
+      "description": "When this offer expires (ISO 8601).",
+      "format": "date-time",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "iab_categories": {
+      "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "identity": {
+      "$ref": "#/$defs/fora.v1.ResourceIdentity",
+      "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+    },
+    "offer_id": {
+      "default": "",
+      "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+      "type": "string"
+    },
+    "previews": {
+      "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Preview"
+      },
+      "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+      "type": "array"
+    },
+    "pricing": {
+      "$ref": "#/$defs/fora.v1.Pricing",
+      "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+    },
+    "reporting": {
+      "$ref": "#/$defs/fora.v1.ReportingObligation",
+      "description": "Post-usage reporting requirements for this offer."
+    },
+    "signature": {
+      "default": "",
+      "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+      "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+      "type": "string"
+    },
+    "signature_algorithm": {
+      "default": "",
+      "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+      "type": "string"
+    },
+    "subscription_id": {
+      "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+      "type": "string"
+    },
+    "subscription_quota": {
+      "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+      },
+      "type": "array"
+    },
+    "terms": {
+      "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.LicenseTerm"
+      },
+      "maxItems": 1,
+      "minItems": 1,
+      "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+      "type": "array"
+    },
+    "title": {
+      "description": "Resource title (human-readable, for display/logging).",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Offer — A single resource offer from an Exchange.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
new file mode 100644
index 00000000..0f78ca81
--- /dev/null
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -0,0 +1,847 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.OfferGroup.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.",
+  "properties": {
+    "absence_reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "OFFER_ABSENCE_REASON_UNSPECIFIED",
+            "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+            "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+            "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+            "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+            "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+            "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+            "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+            "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+      "title": "Offer Absence Reason"
+    },
+    "discovery_method": {
+      "anyOf": [
+        {
+          "enum": [
+            "DISCOVERY_METHOD_UNSPECIFIED",
+            "DISCOVERY_METHOD_EXCHANGE",
+            "DISCOVERY_METHOD_SEARCH",
+            "DISCOVERY_METHOD_RECOMMENDATION",
+            "DISCOVERY_METHOD_SYNDICATION"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.",
+      "title": "Discovery Method"
+    },
+    "offers": {
+      "description": "Zero or more offers for this URI. Empty = resource not available.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Offer"
+      },
+      "type": "array"
+    },
+    "restriction_filters": {
+      "description": "When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "RESTRICTION_KIND_UNSPECIFIED",
+              "RESTRICTION_KIND_FUNCTION",
+              "RESTRICTION_KIND_GEOGRAPHY",
+              "RESTRICTION_KIND_USER_TYPE",
+              "RESTRICTION_KIND_OTHER"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Restriction Kind"
+      },
+      "type": "array"
+    },
+    "uri": {
+      "default": "",
+      "description": "The URI this group of offers is for (echoed from ResourceQuery.uris).",
+      "type": "string"
+    }
+  },
+  "title": "Offer Group",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
new file mode 100644
index 00000000..83fc098f
--- /dev/null
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -0,0 +1,860 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "additionalProperties": false,
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "additionalProperties": false,
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "additionalProperties": false,
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.OfferGroup.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.",
+  "properties": {
+    "absence_reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "OFFER_ABSENCE_REASON_UNSPECIFIED",
+            "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+            "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+            "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+            "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+            "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+            "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+            "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+            "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+      "title": "Offer Absence Reason"
+    },
+    "discovery_method": {
+      "anyOf": [
+        {
+          "enum": [
+            "DISCOVERY_METHOD_UNSPECIFIED",
+            "DISCOVERY_METHOD_EXCHANGE",
+            "DISCOVERY_METHOD_SEARCH",
+            "DISCOVERY_METHOD_RECOMMENDATION",
+            "DISCOVERY_METHOD_SYNDICATION"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.",
+      "title": "Discovery Method"
+    },
+    "offers": {
+      "description": "Zero or more offers for this URI. Empty = resource not available.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Offer"
+      },
+      "type": "array"
+    },
+    "restriction_filters": {
+      "description": "When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "RESTRICTION_KIND_UNSPECIFIED",
+              "RESTRICTION_KIND_FUNCTION",
+              "RESTRICTION_KIND_GEOGRAPHY",
+              "RESTRICTION_KIND_USER_TYPE",
+              "RESTRICTION_KIND_OTHER"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Restriction Kind"
+      },
+      "type": "array"
+    },
+    "uri": {
+      "default": "",
+      "description": "The URI this group of offers is for (echoed from ResourceQuery.uris).",
+      "type": "string"
+    }
+  },
+  "title": "Offer Group",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Preview.schema.json b/gen/jsonschema/fora.v1.Preview.schema.json
new file mode 100644
index 00000000..025f0338
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Preview.schema.json
@@ -0,0 +1,41 @@
+{
+  "$id": "fora.v1.Preview.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+  "properties": {
+    "duration": {
+      "description": "Duration in seconds (for audio and video clips).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "height": {
+      "description": "Height in pixels (images and video)",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "media_type": {
+      "default": "",
+      "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+      "type": "string"
+    },
+    "size": {
+      "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+      "type": "string"
+    },
+    "url": {
+      "default": "",
+      "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+      "type": "string"
+    },
+    "width": {
+      "description": "Dimensions in pixels (for images and video).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    }
+  },
+  "title": "Preview — Lightweight resource preview for offer evaluation.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Preview.schema.strict.json b/gen/jsonschema/fora.v1.Preview.schema.strict.json
new file mode 100644
index 00000000..986837a7
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Preview.schema.strict.json
@@ -0,0 +1,42 @@
+{
+  "$id": "fora.v1.Preview.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+  "properties": {
+    "duration": {
+      "description": "Duration in seconds (for audio and video clips).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "height": {
+      "description": "Height in pixels (images and video)",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "media_type": {
+      "default": "",
+      "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+      "type": "string"
+    },
+    "size": {
+      "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+      "type": "string"
+    },
+    "url": {
+      "default": "",
+      "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+      "type": "string"
+    },
+    "width": {
+      "description": "Dimensions in pixels (for images and video).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    }
+  },
+  "title": "Preview — Lightweight resource preview for offer evaluation.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.json b/gen/jsonschema/fora.v1.Pricing.schema.json
new file mode 100644
index 00000000..3c3b3a17
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Pricing.schema.json
@@ -0,0 +1,87 @@
+{
+  "$id": "fora.v1.Pricing.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+  "properties": {
+    "currency": {
+      "default": "",
+      "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+      "type": "string"
+    },
+    "estimated_quantity": {
+      "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "license_duration_months": {
+      "description": "License duration in months. How long the granted access remains valid.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "metering": {
+      "anyOf": [
+        {
+          "enum": [
+            "PRICING_METERING_ONLINE",
+            "PRICING_METERING_NONE",
+            "PRICING_METERING_OFFLINE_SELF_REPORTED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+      "title": "Pricing Metering"
+    },
+    "model": {
+      "anyOf": [
+        {
+          "enum": [
+            "PRICING_MODEL_FREE",
+            "PRICING_MODEL_PER_UNIT",
+            "PRICING_MODEL_FLAT"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Provider's pricing model.",
+      "title": "Pricing Model"
+    },
+    "rate": {
+      "default": "",
+      "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    },
+    "unit": {
+      "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+      "maxLength": 64,
+      "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+      "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+      "type": "string"
+    },
+    "unit_cost": {
+      "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    }
+  },
+  "required": [
+    "model"
+  ],
+  "title": "Pricing — Terms for a resource offer.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.strict.json b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
new file mode 100644
index 00000000..819ad130
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
@@ -0,0 +1,88 @@
+{
+  "$id": "fora.v1.Pricing.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+  "properties": {
+    "currency": {
+      "default": "",
+      "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+      "type": "string"
+    },
+    "estimated_quantity": {
+      "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "license_duration_months": {
+      "description": "License duration in months. How long the granted access remains valid.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "metering": {
+      "anyOf": [
+        {
+          "enum": [
+            "PRICING_METERING_ONLINE",
+            "PRICING_METERING_NONE",
+            "PRICING_METERING_OFFLINE_SELF_REPORTED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+      "title": "Pricing Metering"
+    },
+    "model": {
+      "anyOf": [
+        {
+          "enum": [
+            "PRICING_MODEL_FREE",
+            "PRICING_MODEL_PER_UNIT",
+            "PRICING_MODEL_FLAT"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Provider's pricing model.",
+      "title": "Pricing Model"
+    },
+    "rate": {
+      "default": "",
+      "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    },
+    "unit": {
+      "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+      "maxLength": 64,
+      "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+      "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+      "type": "string"
+    },
+    "unit_cost": {
+      "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    }
+  },
+  "required": [
+    "model"
+  ],
+  "title": "Pricing — Terms for a resource offer.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
new file mode 100644
index 00000000..81007252
--- /dev/null
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -0,0 +1,586 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceEntry": {
+      "description": "The list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.",
+      "properties": {
+        "attestations": {
+          "description": "Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "content_hash": {
+          "description": "Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.",
+          "maxLength": 255,
+          "type": "string"
+        },
+        "content_id": {
+          "description": "Content identifier",
+          "maxLength": 255,
+          "type": "string"
+        },
+        "domain": {
+          "description": "Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit",
+          "exclusiveMaximum": 2147483648,
+          "minimum": 0,
+          "type": "integer"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm",
+          "maxLength": 64,
+          "type": "string"
+        },
+        "path": {
+          "description": "Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes.",
+          "maxLength": 2048,
+          "minLength": 1,
+          "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+          "type": "string"
+        },
+        "provenance_source": {
+          "description": "Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"",
+          "maxLength": 260,
+          "type": "string"
+        },
+        "provenance_timestamp": {
+          "description": "When this metadata was collected/generated.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.",
+          "title": "Resource Mutability"
+        },
+        "source": {
+          "anyOf": [
+            {
+              "enum": [
+                "INGESTION_SOURCE_UNSPECIFIED",
+                "INGESTION_SOURCE_FORA_SITEMAP",
+                "INGESTION_SOURCE_RSL",
+                "INGESTION_SOURCE_SITEMAP",
+                "INGESTION_SOURCE_HTML_CRAWL",
+                "INGESTION_SOURCE_CMS_API",
+                "INGESTION_SOURCE_MANUAL",
+                "INGESTION_SOURCE_CATALOG_API"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How the entry was discovered",
+          "title": "Ingestion Source"
+        },
+        "terms": {
+          "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 32,
+          "type": "array"
+        },
+        "title": {
+          "description": "Content title",
+          "maxLength": 512,
+          "type": "string"
+        },
+        "word_count": {
+          "description": "Word count",
+          "exclusiveMaximum": 2147483648,
+          "minimum": 0,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "domain",
+        "path"
+      ],
+      "title": "ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.PushResourcesRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "caller_id": {
+      "default": "",
+      "description": "Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.",
+      "type": "string"
+    },
+    "entries": {
+      "description": "Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceEntry"
+      },
+      "maxItems": 256,
+      "minItems": 1,
+      "type": "array"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "tenant_id": {
+      "default": "",
+      "description": "Tenant identifier",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Push Resources Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
new file mode 100644
index 00000000..3ffa44c5
--- /dev/null
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -0,0 +1,595 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceEntry": {
+      "additionalProperties": false,
+      "description": "The list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.",
+      "properties": {
+        "attestations": {
+          "description": "Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "content_hash": {
+          "description": "Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.",
+          "maxLength": 255,
+          "type": "string"
+        },
+        "content_id": {
+          "description": "Content identifier",
+          "maxLength": 255,
+          "type": "string"
+        },
+        "domain": {
+          "description": "Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit",
+          "exclusiveMaximum": 2147483648,
+          "minimum": 0,
+          "type": "integer"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm",
+          "maxLength": 64,
+          "type": "string"
+        },
+        "path": {
+          "description": "Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes.",
+          "maxLength": 2048,
+          "minLength": 1,
+          "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+          "type": "string"
+        },
+        "provenance_source": {
+          "description": "Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"",
+          "maxLength": 260,
+          "type": "string"
+        },
+        "provenance_timestamp": {
+          "description": "When this metadata was collected/generated.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.",
+          "title": "Resource Mutability"
+        },
+        "source": {
+          "anyOf": [
+            {
+              "enum": [
+                "INGESTION_SOURCE_UNSPECIFIED",
+                "INGESTION_SOURCE_FORA_SITEMAP",
+                "INGESTION_SOURCE_RSL",
+                "INGESTION_SOURCE_SITEMAP",
+                "INGESTION_SOURCE_HTML_CRAWL",
+                "INGESTION_SOURCE_CMS_API",
+                "INGESTION_SOURCE_MANUAL",
+                "INGESTION_SOURCE_CATALOG_API"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How the entry was discovered",
+          "title": "Ingestion Source"
+        },
+        "terms": {
+          "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 32,
+          "type": "array"
+        },
+        "title": {
+          "description": "Content title",
+          "maxLength": 512,
+          "type": "string"
+        },
+        "word_count": {
+          "description": "Word count",
+          "exclusiveMaximum": 2147483648,
+          "minimum": 0,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "domain",
+        "path"
+      ],
+      "title": "ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.PushResourcesRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "caller_id": {
+      "default": "",
+      "description": "Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.",
+      "type": "string"
+    },
+    "entries": {
+      "description": "Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceEntry"
+      },
+      "maxItems": 256,
+      "minItems": 1,
+      "type": "array"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "tenant_id": {
+      "default": "",
+      "description": "Tenant identifier",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Push Resources Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.PushResourcesResponse.schema.json b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.json
new file mode 100644
index 00000000..549e7cdb
--- /dev/null
+++ b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.json
@@ -0,0 +1,45 @@
+{
+  "$id": "fora.v1.PushResourcesResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "accepted": {
+      "default": 0,
+      "description": "Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "rejected": {
+      "default": 0,
+      "description": "Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    },
+    "warnings": {
+      "description": "Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "title": "Push Resources Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json
new file mode 100644
index 00000000..4ccc3a05
--- /dev/null
+++ b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json
@@ -0,0 +1,46 @@
+{
+  "$id": "fora.v1.PushResourcesResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "accepted": {
+      "default": 0,
+      "description": "Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "rejected": {
+      "default": 0,
+      "description": "Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    },
+    "warnings": {
+      "description": "Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "title": "Push Resources Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Quota.schema.json b/gen/jsonschema/fora.v1.Quota.schema.json
new file mode 100644
index 00000000..94aa2e5e
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Quota.schema.json
@@ -0,0 +1,54 @@
+{
+  "$id": "fora.v1.Quota.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+  "properties": {
+    "limit": {
+      "anyOf": [
+        {
+          "minimum": 1,
+          "type": "integer"
+        },
+        {
+          "pattern": "^0*[1-9][0-9]*$",
+          "type": "string"
+        }
+      ],
+      "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+    },
+    "metric": {
+      "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+      "maxLength": 64,
+      "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+      "title": "The unit being capped — an open vocabulary axis.",
+      "type": "string"
+    },
+    "window": {
+      "anyOf": [
+        {
+          "enum": [
+            "QUOTA_WINDOW_HOURLY",
+            "QUOTA_WINDOW_DAILY",
+            "QUOTA_WINDOW_MONTHLY",
+            "QUOTA_WINDOW_TOTAL"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Time window over which the limit accumulates.",
+      "title": "Quota Window"
+    }
+  },
+  "required": [
+    "limit",
+    "metric",
+    "window"
+  ],
+  "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Quota.schema.strict.json b/gen/jsonschema/fora.v1.Quota.schema.strict.json
new file mode 100644
index 00000000..1f4fb63c
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Quota.schema.strict.json
@@ -0,0 +1,55 @@
+{
+  "$id": "fora.v1.Quota.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+  "properties": {
+    "limit": {
+      "anyOf": [
+        {
+          "minimum": 1,
+          "type": "integer"
+        },
+        {
+          "pattern": "^0*[1-9][0-9]*$",
+          "type": "string"
+        }
+      ],
+      "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+    },
+    "metric": {
+      "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+      "maxLength": 64,
+      "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+      "title": "The unit being capped — an open vocabulary axis.",
+      "type": "string"
+    },
+    "window": {
+      "anyOf": [
+        {
+          "enum": [
+            "QUOTA_WINDOW_HOURLY",
+            "QUOTA_WINDOW_DAILY",
+            "QUOTA_WINDOW_MONTHLY",
+            "QUOTA_WINDOW_TOTAL"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Time window over which the limit accumulates.",
+      "title": "Quota Window"
+    }
+  },
+  "required": [
+    "limit",
+    "metric",
+    "window"
+  ],
+  "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RateLimitInfo.schema.json b/gen/jsonschema/fora.v1.RateLimitInfo.schema.json
new file mode 100644
index 00000000..2ee27ddc
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RateLimitInfo.schema.json
@@ -0,0 +1,33 @@
+{
+  "$id": "fora.v1.RateLimitInfo.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RateLimitInfo — Caller's rate limit status on this Exchange.\n Modeled after IETF RateLimit header fields (RFC 9110 §15.5.30)\n and Shutterstock's rate limit response pattern.",
+  "properties": {
+    "limit": {
+      "default": 0,
+      "description": "Maximum requests allowed in the current window.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "remaining": {
+      "default": 0,
+      "description": "Requests remaining in the current window.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "reset_at": {
+      "description": "When the current window resets (UTC). After this time, `remaining` resets to `limit`.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "window": {
+      "description": "Duration of the rate limit window (e.g. 60s = per-minute limit).",
+      "format": "duration",
+      "type": "string"
+    }
+  },
+  "title": "Rate Limit Info",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RateLimitInfo.schema.strict.json b/gen/jsonschema/fora.v1.RateLimitInfo.schema.strict.json
new file mode 100644
index 00000000..dde7017a
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RateLimitInfo.schema.strict.json
@@ -0,0 +1,34 @@
+{
+  "$id": "fora.v1.RateLimitInfo.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RateLimitInfo — Caller's rate limit status on this Exchange.\n Modeled after IETF RateLimit header fields (RFC 9110 §15.5.30)\n and Shutterstock's rate limit response pattern.",
+  "properties": {
+    "limit": {
+      "default": 0,
+      "description": "Maximum requests allowed in the current window.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "remaining": {
+      "default": 0,
+      "description": "Requests remaining in the current window.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "reset_at": {
+      "description": "When the current window resets (UTC). After this time, `remaining` resets to `limit`.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "window": {
+      "description": "Duration of the rate limit window (e.g. 60s = per-minute limit).",
+      "format": "duration",
+      "type": "string"
+    }
+  },
+  "title": "Rate Limit Info",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.json b/gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.json
new file mode 100644
index 00000000..e11ef670
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.json
@@ -0,0 +1,27 @@
+{
+  "$id": "fora.v1.RefreshCatalogRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "tenant_id": {
+      "default": "",
+      "description": "Tenant identifier",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Refresh Catalog Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.strict.json b/gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.strict.json
new file mode 100644
index 00000000..141b8295
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RefreshCatalogRequest.schema.strict.json
@@ -0,0 +1,28 @@
+{
+  "$id": "fora.v1.RefreshCatalogRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "tenant_id": {
+      "default": "",
+      "description": "Tenant identifier",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Refresh Catalog Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.json b/gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.json
new file mode 100644
index 00000000..88be3fff
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.json
@@ -0,0 +1,18 @@
+{
+  "$id": "fora.v1.RefreshCatalogResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "started": {
+      "default": false,
+      "description": "Whether the refresh was started",
+      "type": "boolean"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Refresh Catalog Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json b/gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json
new file mode 100644
index 00000000..34db168f
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json
@@ -0,0 +1,19 @@
+{
+  "$id": "fora.v1.RefreshCatalogResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "started": {
+      "default": false,
+      "description": "Whether the refresh was started",
+      "type": "boolean"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Refresh Catalog Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegisterRequest.schema.json b/gen/jsonschema/fora.v1.RegisterRequest.schema.json
new file mode 100644
index 00000000..7ea63921
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegisterRequest.schema.json
@@ -0,0 +1,45 @@
+{
+  "$id": "fora.v1.RegisterRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RegisterRequest — Agent asks the Exchange to create its account.",
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. It matters most here: the caller reaches this endpoint by\n resolving a fetched, cached manifest, so the RFC 9421 signature covers only\n the URL that was dialled — this field is what lets the genuine Exchange\n refuse a registration that was meant for a different one.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "registration_data": {
+      "description": "Bounded, because a published data_schema is applied to THIS. The schema's own\n caps bound the schema; the cost of checking a payload against it is roughly\n that cost multiplied by the elements in the payload, and the multiplier was\n unbounded — a subschema under `items` is counted once by the schema's\n evaluation cap and evaluated once per element at runtime.\n\n   At most 64 members at the top level. Top level rather than every level:\n   nested bulk is already bounded by the byte cap below, and a recursive count\n   would refuse a small document that merely nests, which a business entity\n   legitimately does — an address is an object.\n\n   At most 32 nested JSON containers, counting this member itself as the first —\n   the same number and the same counting rule as the schema's own depth cap,\n   because it is the same question asked of the other document. It is bounded\n   for a reason the other two caps do not cover: a deeply nested payload is\n   small and has few top-level members, and canonicalising it walks it\n   RECURSIVELY, so without a stated bound the verdict was a property of the\n   reader's runtime rather than of the payload — one implementation refused\n   past roughly five hundred containers on one release of its language and\n   accepted nine hundred on the next, while two others accepted every depth\n   tried. Checked before the payload is canonicalised, so the bound precedes\n   the walk it exists to bound.\n\n   At most 16384 bytes, measured as this member's RFC 8785 (JCS) CANONICAL JSON\n   encoding. The unit is named on purpose and is the load-bearing half of the\n   rule: every other cap in this contract is over bytes a party actually served,\n   and this member is never served as bytes — it is a Struct, decoded before any\n   consumer sees it. \"16KB\" therefore means nothing until an encoding is chosen,\n   and two implementations choosing privately is the same both-ends disagreement\n   the schema rules exist to prevent. JCS also pins number formatting, which is\n   not a detail: a payload carrying 1e300 is seven bytes under one renderer and\n   three hundred under another.\n\n A payload with NO JSON REPRESENTATION at all is refused in the same class as\n the three bounds: it has no canonical encoding, so the byte cap above has\n nothing to measure. This member is a Struct, and a Struct can carry two such\n values — both of which the protobuf binary decoder accepts and proto-JSON\n refuses to render:\n\n   a NON-FINITE NUMBER. JSON can represent neither NaN nor an infinity, while\n   Struct's number_value is an IEEE-754 double that carries one perfectly well.\n\n   a VALUE WITH NO KIND SET. google.protobuf.Value holds its payload in a\n   oneof, and a oneof with no member set is well-formed on the wire. There is\n   no JSON value it denotes, so there is nothing to write.\n\n That check MUST read the decoded protobuf value, never a native map converted\n from it. This is stated because two conformant implementations already\n answered the same signed request differently, and because NEITHER value\n survives the conversion. Some runtimes render a non-finite double as the\n STRING \"NaN\", \"Infinity\" or \"-Infinity\", and once that has happened the\n payload cannot be told apart from one that legitimately carries that text —\n an operator legally named NaN is a valid string value that has to be\n accepted. A value with no kind set converts to the same empty result as a\n JSON null, which is a value the payload may legitimately carry. In both cases\n the conversion destroys the information, so the check has to precede it.\n\n ORDER. The four checks on this member run in this sequence, and the sequence\n is not free choice:\n\n   1. top-level member count\n   2. nesting depth\n   3. canonicalizability, which is where both no-JSON-form checks live\n   4. canonical byte size\n\n The first two are counts, and they bound the document the third then has to\n walk. The third precedes the fourth because the byte cap is DEFINED as the\n length of the canonical encoding: until that encoding exists there is no\n number to compare against, and answering \"too large\" for a payload that has\n no encoding at all would state something untrue about it.\n\n All four are checked BEFORE the schema runs, for the reason the schema's own\n size cap is checked before the document is parsed — a check that exists to\n stop work has to precede the work. A payload breaking any of them is a\n malformed request, NOT REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA:\n that reason names non-conformance to a published schema and applies only\n where one is published, while these four hold either way. The terms_digest\n gate sits between these four and the schema — see\n RegisterRequest.terms_digest for why that order is also fixed.",
+      "title": "Business-registration data about the operator behind this agent — the\n details an Exchange needs to open a commercial account (legal entity,\n address, jurisdiction, tax identifiers and the like). The specific members\n are operator-defined and not fixed in the wire contract; whether the\n Exchange inspects them follows its manifest — see\n AccountRegistration.data_schema. This is NOT an identity claim: the caller's\n identity is taken from the verified request signature, never from this\n payload, so nothing here is trusted as authentication.",
+      "type": "object"
+    },
+    "terms_digest": {
+      "description": "GATE ORDER. This gate runs AFTER the four registration_data checks (see\n RegisterRequest.registration_data) and BEFORE the published data_schema.\n Terms before schema is not arbitrary: the schema may itself have changed in\n the revision the caller has not read yet. Validating a stale-terms caller\n against the CURRENT schema hands back field errors describing a document it\n has never seen, so it fixes those members, re-fetches, and finds the\n requirements have moved. Terms first means a caller is always told to go read\n the current manifest before it is told anything about that manifest's\n contents. It also keeps one refusal to one remedy: TERMS_DIGEST_STALE says\n re-fetch and echo, INVALID_REGISTRATION_DATA says fix the payload, and a\n request that would earn both is given the one that has to be done first.\n The whole order applies only when an account is being CREATED: a repeat\n registration is answered from the stored record and runs no gate at all, so\n the four cases above are the four cases of a FIRST registration. See\n \"Repeat registration\" in the Agent Account Registration section header.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "title": "Echo of WellKnownManifest.terms_digest, stating WHICH terms document the\n operator accepted. The request signature covers this statement, so it is the\n durable record a later dispute asks for; the Exchange stores the accepted\n value with the account. Four cases, all defined: the Exchange publishes a\n digest and this matches — registration proceeds; it publishes one and this\n differs — refused with REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE; it\n publishes one and this is absent — refused with the SAME reason, because the\n caller's remedy is identical (read the manifest, echo, retry) and a second\n reason would split one fix in two; it publishes none and this is present —\n the Exchange MUST ignore the value and MUST NOT record it as an acceptance,\n since it publishes no digest and therefore cannot verify what document the\n value refers to, and storing it would put an unverifiable claim exactly\n where this field exists to hold a verified one. A registering client MUST\n read the digest from a FRESHLY fetched manifest rather than a cached copy —\n a cached endpoint is fine, a cached digest is not, because a client cannot\n detect staleness locally and a warm cache would otherwise make it retry a\n refused value until the cache expired. Registration happens once per\n Exchange, so the extra fetch is cheap.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Register Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegisterRequest.schema.strict.json b/gen/jsonschema/fora.v1.RegisterRequest.schema.strict.json
new file mode 100644
index 00000000..8701d2a0
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegisterRequest.schema.strict.json
@@ -0,0 +1,46 @@
+{
+  "$id": "fora.v1.RegisterRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RegisterRequest — Agent asks the Exchange to create its account.",
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. It matters most here: the caller reaches this endpoint by\n resolving a fetched, cached manifest, so the RFC 9421 signature covers only\n the URL that was dialled — this field is what lets the genuine Exchange\n refuse a registration that was meant for a different one.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "registration_data": {
+      "description": "Bounded, because a published data_schema is applied to THIS. The schema's own\n caps bound the schema; the cost of checking a payload against it is roughly\n that cost multiplied by the elements in the payload, and the multiplier was\n unbounded — a subschema under `items` is counted once by the schema's\n evaluation cap and evaluated once per element at runtime.\n\n   At most 64 members at the top level. Top level rather than every level:\n   nested bulk is already bounded by the byte cap below, and a recursive count\n   would refuse a small document that merely nests, which a business entity\n   legitimately does — an address is an object.\n\n   At most 32 nested JSON containers, counting this member itself as the first —\n   the same number and the same counting rule as the schema's own depth cap,\n   because it is the same question asked of the other document. It is bounded\n   for a reason the other two caps do not cover: a deeply nested payload is\n   small and has few top-level members, and canonicalising it walks it\n   RECURSIVELY, so without a stated bound the verdict was a property of the\n   reader's runtime rather than of the payload — one implementation refused\n   past roughly five hundred containers on one release of its language and\n   accepted nine hundred on the next, while two others accepted every depth\n   tried. Checked before the payload is canonicalised, so the bound precedes\n   the walk it exists to bound.\n\n   At most 16384 bytes, measured as this member's RFC 8785 (JCS) CANONICAL JSON\n   encoding. The unit is named on purpose and is the load-bearing half of the\n   rule: every other cap in this contract is over bytes a party actually served,\n   and this member is never served as bytes — it is a Struct, decoded before any\n   consumer sees it. \"16KB\" therefore means nothing until an encoding is chosen,\n   and two implementations choosing privately is the same both-ends disagreement\n   the schema rules exist to prevent. JCS also pins number formatting, which is\n   not a detail: a payload carrying 1e300 is seven bytes under one renderer and\n   three hundred under another.\n\n A payload with NO JSON REPRESENTATION at all is refused in the same class as\n the three bounds: it has no canonical encoding, so the byte cap above has\n nothing to measure. This member is a Struct, and a Struct can carry two such\n values — both of which the protobuf binary decoder accepts and proto-JSON\n refuses to render:\n\n   a NON-FINITE NUMBER. JSON can represent neither NaN nor an infinity, while\n   Struct's number_value is an IEEE-754 double that carries one perfectly well.\n\n   a VALUE WITH NO KIND SET. google.protobuf.Value holds its payload in a\n   oneof, and a oneof with no member set is well-formed on the wire. There is\n   no JSON value it denotes, so there is nothing to write.\n\n That check MUST read the decoded protobuf value, never a native map converted\n from it. This is stated because two conformant implementations already\n answered the same signed request differently, and because NEITHER value\n survives the conversion. Some runtimes render a non-finite double as the\n STRING \"NaN\", \"Infinity\" or \"-Infinity\", and once that has happened the\n payload cannot be told apart from one that legitimately carries that text —\n an operator legally named NaN is a valid string value that has to be\n accepted. A value with no kind set converts to the same empty result as a\n JSON null, which is a value the payload may legitimately carry. In both cases\n the conversion destroys the information, so the check has to precede it.\n\n ORDER. The four checks on this member run in this sequence, and the sequence\n is not free choice:\n\n   1. top-level member count\n   2. nesting depth\n   3. canonicalizability, which is where both no-JSON-form checks live\n   4. canonical byte size\n\n The first two are counts, and they bound the document the third then has to\n walk. The third precedes the fourth because the byte cap is DEFINED as the\n length of the canonical encoding: until that encoding exists there is no\n number to compare against, and answering \"too large\" for a payload that has\n no encoding at all would state something untrue about it.\n\n All four are checked BEFORE the schema runs, for the reason the schema's own\n size cap is checked before the document is parsed — a check that exists to\n stop work has to precede the work. A payload breaking any of them is a\n malformed request, NOT REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA:\n that reason names non-conformance to a published schema and applies only\n where one is published, while these four hold either way. The terms_digest\n gate sits between these four and the schema — see\n RegisterRequest.terms_digest for why that order is also fixed.",
+      "title": "Business-registration data about the operator behind this agent — the\n details an Exchange needs to open a commercial account (legal entity,\n address, jurisdiction, tax identifiers and the like). The specific members\n are operator-defined and not fixed in the wire contract; whether the\n Exchange inspects them follows its manifest — see\n AccountRegistration.data_schema. This is NOT an identity claim: the caller's\n identity is taken from the verified request signature, never from this\n payload, so nothing here is trusted as authentication.",
+      "type": "object"
+    },
+    "terms_digest": {
+      "description": "GATE ORDER. This gate runs AFTER the four registration_data checks (see\n RegisterRequest.registration_data) and BEFORE the published data_schema.\n Terms before schema is not arbitrary: the schema may itself have changed in\n the revision the caller has not read yet. Validating a stale-terms caller\n against the CURRENT schema hands back field errors describing a document it\n has never seen, so it fixes those members, re-fetches, and finds the\n requirements have moved. Terms first means a caller is always told to go read\n the current manifest before it is told anything about that manifest's\n contents. It also keeps one refusal to one remedy: TERMS_DIGEST_STALE says\n re-fetch and echo, INVALID_REGISTRATION_DATA says fix the payload, and a\n request that would earn both is given the one that has to be done first.\n The whole order applies only when an account is being CREATED: a repeat\n registration is answered from the stored record and runs no gate at all, so\n the four cases above are the four cases of a FIRST registration. See\n \"Repeat registration\" in the Agent Account Registration section header.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "title": "Echo of WellKnownManifest.terms_digest, stating WHICH terms document the\n operator accepted. The request signature covers this statement, so it is the\n durable record a later dispute asks for; the Exchange stores the accepted\n value with the account. Four cases, all defined: the Exchange publishes a\n digest and this matches — registration proceeds; it publishes one and this\n differs — refused with REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE; it\n publishes one and this is absent — refused with the SAME reason, because the\n caller's remedy is identical (read the manifest, echo, retry) and a second\n reason would split one fix in two; it publishes none and this is present —\n the Exchange MUST ignore the value and MUST NOT record it as an acceptance,\n since it publishes no digest and therefore cannot verify what document the\n value refers to, and storing it would put an unverifiable claim exactly\n where this field exists to hold a verified one. A registering client MUST\n read the digest from a FRESHLY fetched manifest rather than a cached copy —\n a cached endpoint is fine, a cached digest is not, because a client cannot\n detect staleness locally and a warm cache would otherwise make it retry a\n refused value until the cache expired. Registration happens once per\n Exchange, so the extra fetch is cheap.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Register Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegisterResponse.schema.json b/gen/jsonschema/fora.v1.RegisterResponse.schema.json
new file mode 100644
index 00000000..96ba056b
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegisterResponse.schema.json
@@ -0,0 +1,35 @@
+{
+  "$id": "fora.v1.RegisterResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RegisterResponse — Exchange returns the minted account handle.",
+  "properties": {
+    "active": {
+      "default": false,
+      "description": "Whether the account is currently active. Accounts may start inactive\n and be activated out-of-band by the Exchange operator.",
+      "type": "boolean"
+    },
+    "billing_ref": {
+      "default": "",
+      "description": "Opaque, long-lived, per-Exchange account handle minted by the Exchange.\n Means nothing on its own and is never accepted as caller input. A repeat\n Register for the same agent returns the same value.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Register Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json b/gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json
new file mode 100644
index 00000000..ccaa45ec
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json
@@ -0,0 +1,36 @@
+{
+  "$id": "fora.v1.RegisterResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RegisterResponse — Exchange returns the minted account handle.",
+  "properties": {
+    "active": {
+      "default": false,
+      "description": "Whether the account is currently active. Accounts may start inactive\n and be activated out-of-band by the Exchange operator.",
+      "type": "boolean"
+    },
+    "billing_ref": {
+      "default": "",
+      "description": "Opaque, long-lived, per-Exchange account handle minted by the Exchange.\n Means nothing on its own and is never accepted as caller input. A repeat\n Register for the same agent returns the same value.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Register Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegistrationFailure.schema.json b/gen/jsonschema/fora.v1.RegistrationFailure.schema.json
new file mode 100644
index 00000000..a3b02d24
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegistrationFailure.schema.json
@@ -0,0 +1,67 @@
+{
+  "$defs": {
+    "fora.v1.RegistrationFieldError": {
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.RegistrationFailure.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RegistrationFailure — a registration request could not be completed.",
+  "properties": {
+    "field_errors": {
+      "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+            "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+            "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+            "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+            "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+            "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+            "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 7,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Registration Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Registration Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json b/gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json
new file mode 100644
index 00000000..91893904
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json
@@ -0,0 +1,69 @@
+{
+  "$defs": {
+    "fora.v1.RegistrationFieldError": {
+      "additionalProperties": false,
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.RegistrationFailure.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RegistrationFailure — a registration request could not be completed.",
+  "properties": {
+    "field_errors": {
+      "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+            "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+            "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+            "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+            "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+            "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+            "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 7,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Registration Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Registration Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegistrationFieldError.schema.json b/gen/jsonschema/fora.v1.RegistrationFieldError.schema.json
new file mode 100644
index 00000000..6c618409
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegistrationFieldError.schema.json
@@ -0,0 +1,24 @@
+{
+  "$id": "fora.v1.RegistrationFieldError.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+  "properties": {
+    "error": {
+      "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "path": {
+      "default": "",
+      "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+      "maxLength": 255,
+      "type": "string"
+    }
+  },
+  "required": [
+    "error"
+  ],
+  "title": "Registration Field Error",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RegistrationFieldError.schema.strict.json b/gen/jsonschema/fora.v1.RegistrationFieldError.schema.strict.json
new file mode 100644
index 00000000..5f5853c1
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RegistrationFieldError.schema.strict.json
@@ -0,0 +1,25 @@
+{
+  "$id": "fora.v1.RegistrationFieldError.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+  "properties": {
+    "error": {
+      "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "path": {
+      "default": "",
+      "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+      "maxLength": 255,
+      "type": "string"
+    }
+  },
+  "required": [
+    "error"
+  ],
+  "title": "Registration Field Error",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json
new file mode 100644
index 00000000..337c4f8c
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json
@@ -0,0 +1,39 @@
+{
+  "$id": "fora.v1.RemoveResourcesRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "paths": {
+      "description": "Paths to remove — the absolute-path shape ResourceEntry.path carries, at\n least one and at most 256, the same batch bound PushResourcesRequest.entries\n carries and for the same reason.",
+      "items": {
+        "maxLength": 2048,
+        "minLength": 1,
+        "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+        "type": "string"
+      },
+      "maxItems": 256,
+      "minItems": 1,
+      "type": "array"
+    },
+    "tenant_id": {
+      "default": "",
+      "description": "Tenant identifier",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Remove Resources Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json
new file mode 100644
index 00000000..a33e63a8
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json
@@ -0,0 +1,40 @@
+{
+  "$id": "fora.v1.RemoveResourcesRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "paths": {
+      "description": "Paths to remove — the absolute-path shape ResourceEntry.path carries, at\n least one and at most 256, the same batch bound PushResourcesRequest.entries\n carries and for the same reason.",
+      "items": {
+        "maxLength": 2048,
+        "minLength": 1,
+        "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+        "type": "string"
+      },
+      "maxItems": 256,
+      "minItems": 1,
+      "type": "array"
+    },
+    "tenant_id": {
+      "default": "",
+      "description": "Tenant identifier",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "Remove Resources Request",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.json b/gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.json
new file mode 100644
index 00000000..e8b01c16
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.json
@@ -0,0 +1,20 @@
+{
+  "$id": "fora.v1.RemoveResourcesResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "removed": {
+      "default": 0,
+      "description": "Number of entries removed",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Remove Resources Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json b/gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json
new file mode 100644
index 00000000..117bcf29
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json
@@ -0,0 +1,21 @@
+{
+  "$id": "fora.v1.RemoveResourcesResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "removed": {
+      "default": 0,
+      "description": "Number of entries removed",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Remove Resources Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
new file mode 100644
index 00000000..3654b001
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
@@ -0,0 +1,41 @@
+{
+  "$id": "fora.v1.ReportingObligation.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "ReportingObligation — Requirements attached to a delivery.",
+  "properties": {
+    "endpoint": {
+      "description": "URL to submit the usage report to (if different from Exchange).",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "required": {
+      "default": false,
+      "description": "Whether post-usage reporting is required.",
+      "type": "boolean"
+    },
+    "required_fields": {
+      "description": "Field names that must be present in the report.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "window": {
+      "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+      "format": "duration",
+      "type": "string"
+    }
+  },
+  "title": "Reporting Obligation",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
new file mode 100644
index 00000000..b2f5f0db
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
@@ -0,0 +1,42 @@
+{
+  "$id": "fora.v1.ReportingObligation.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "ReportingObligation — Requirements attached to a delivery.",
+  "properties": {
+    "endpoint": {
+      "description": "URL to submit the usage report to (if different from Exchange).",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "required": {
+      "default": false,
+      "description": "Whether post-usage reporting is required.",
+      "type": "boolean"
+    },
+    "required_fields": {
+      "description": "Field names that must be present in the report.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "window": {
+      "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+      "format": "duration",
+      "type": "string"
+    }
+  },
+  "title": "Reporting Obligation",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RequestAuthFailure.schema.json b/gen/jsonschema/fora.v1.RequestAuthFailure.schema.json
new file mode 100644
index 00000000..91f35a3f
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RequestAuthFailure.schema.json
@@ -0,0 +1,31 @@
+{
+  "$id": "fora.v1.RequestAuthFailure.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+            "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+            "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 3,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Request Auth Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Request Auth Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RequestAuthFailure.schema.strict.json b/gen/jsonschema/fora.v1.RequestAuthFailure.schema.strict.json
new file mode 100644
index 00000000..a5e488d1
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RequestAuthFailure.schema.strict.json
@@ -0,0 +1,32 @@
+{
+  "$id": "fora.v1.RequestAuthFailure.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+            "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+            "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 3,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Request Auth Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Request Auth Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
new file mode 100644
index 00000000..1e90434f
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
@@ -0,0 +1,114 @@
+{
+  "$defs": {
+    "fora.v1.Cost": {
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.RequestConstraints.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RequestConstraints — Budget and preference constraints.",
+  "properties": {
+    "budget_period": {
+      "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+      "format": "duration",
+      "type": "string"
+    },
+    "budget_scope": {
+      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+      "type": "string"
+    },
+    "delivery_preference": {
+      "description": "Preferred delivery methods, in order of preference.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "DELIVERY_METHOD_UNSPECIFIED",
+              "DELIVERY_METHOD_DIRECT",
+              "DELIVERY_METHOD_INSTRUCTIONS",
+              "DELIVERY_METHOD_STREAMING"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Delivery Method"
+      },
+      "type": "array"
+    },
+    "exchanges": {
+      "description": "Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.",
+      "items": {
+        "maxLength": 260,
+        "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "max_data_age": {
+      "description": "Only relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"",
+      "format": "duration",
+      "title": "Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.",
+      "type": "string"
+    },
+    "max_hops": {
+      "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "max_price": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Maximum price the agent is willing to pay."
+    },
+    "max_unit_cost": {
+      "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    },
+    "period_budget": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+    },
+    "preferred_exchanges": {
+      "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
+      "items": {
+        "maxLength": 260,
+        "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "reporting_capable": {
+      "description": "Whether the agent supports post-usage reporting.",
+      "type": "boolean"
+    }
+  },
+  "title": "Request Constraints",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
new file mode 100644
index 00000000..758c23f7
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
@@ -0,0 +1,116 @@
+{
+  "$defs": {
+    "fora.v1.Cost": {
+      "additionalProperties": false,
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.RequestConstraints.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RequestConstraints — Budget and preference constraints.",
+  "properties": {
+    "budget_period": {
+      "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+      "format": "duration",
+      "type": "string"
+    },
+    "budget_scope": {
+      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+      "type": "string"
+    },
+    "delivery_preference": {
+      "description": "Preferred delivery methods, in order of preference.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "DELIVERY_METHOD_UNSPECIFIED",
+              "DELIVERY_METHOD_DIRECT",
+              "DELIVERY_METHOD_INSTRUCTIONS",
+              "DELIVERY_METHOD_STREAMING"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Delivery Method"
+      },
+      "type": "array"
+    },
+    "exchanges": {
+      "description": "Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.",
+      "items": {
+        "maxLength": 260,
+        "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "max_data_age": {
+      "description": "Only relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"",
+      "format": "duration",
+      "title": "Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.",
+      "type": "string"
+    },
+    "max_hops": {
+      "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "max_price": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Maximum price the agent is willing to pay."
+    },
+    "max_unit_cost": {
+      "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
+      "maxLength": 32,
+      "pattern": "^([0-9]+([.][0-9]+)?)?$",
+      "type": "string"
+    },
+    "period_budget": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+    },
+    "preferred_exchanges": {
+      "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
+      "items": {
+        "maxLength": 260,
+        "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "reporting_capable": {
+      "description": "Whether the agent supports post-usage reporting.",
+      "type": "boolean"
+    }
+  },
+  "title": "Request Constraints",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
new file mode 100644
index 00000000..fb389fa6
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -0,0 +1,157 @@
+{
+  "$defs": {
+    "fora.v1.Delegation": {
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Requester.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+  "properties": {
+    "delegation": {
+      "$ref": "#/$defs/fora.v1.Delegation",
+      "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+    },
+    "domain": {
+      "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "id": {
+      "default": "",
+      "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+      "type": "string"
+    },
+    "name": {
+      "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+      "type": "string"
+    },
+    "scopes": {
+      "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 64,
+      "title": "Entitlement scopes. Declare what the requester can access.",
+      "type": "array"
+    },
+    "type": {
+      "anyOf": [
+        {
+          "enum": [
+            "REQUESTER_TYPE_AGENT",
+            "REQUESTER_TYPE_HUMAN_TOOL",
+            "REQUESTER_TYPE_SERVICE",
+            "REQUESTER_TYPE_DELEGATED",
+            "REQUESTER_TYPE_RESEARCH"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "What kind of entity is making this request.",
+      "title": "Requester Type"
+    }
+  },
+  "required": [
+    "domain",
+    "type"
+  ],
+  "title": "Requester — Universal identity for any FORA client.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
new file mode 100644
index 00000000..b5474294
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -0,0 +1,159 @@
+{
+  "$defs": {
+    "fora.v1.Delegation": {
+      "additionalProperties": false,
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Requester.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+  "properties": {
+    "delegation": {
+      "$ref": "#/$defs/fora.v1.Delegation",
+      "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+    },
+    "domain": {
+      "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "id": {
+      "default": "",
+      "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+      "type": "string"
+    },
+    "name": {
+      "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+      "type": "string"
+    },
+    "scopes": {
+      "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 64,
+      "title": "Entitlement scopes. Declare what the requester can access.",
+      "type": "array"
+    },
+    "type": {
+      "anyOf": [
+        {
+          "enum": [
+            "REQUESTER_TYPE_AGENT",
+            "REQUESTER_TYPE_HUMAN_TOOL",
+            "REQUESTER_TYPE_SERVICE",
+            "REQUESTER_TYPE_DELEGATED",
+            "REQUESTER_TYPE_RESEARCH"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "What kind of entity is making this request.",
+      "title": "Requester Type"
+    }
+  },
+  "required": [
+    "domain",
+    "type"
+  ],
+  "title": "Requester — Universal identity for any FORA client.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceAttestation.schema.json b/gen/jsonschema/fora.v1.ResourceAttestation.schema.json
new file mode 100644
index 00000000..db05ff7f
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceAttestation.schema.json
@@ -0,0 +1,38 @@
+{
+  "$id": "fora.v1.ResourceAttestation.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+  "properties": {
+    "attested_at": {
+      "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+      "format": "date-time",
+      "type": "string"
+    },
+    "claims": {
+      "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+      "type": "object"
+    },
+    "keyid": {
+      "default": "",
+      "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+      "type": "string"
+    },
+    "signature": {
+      "default": "",
+      "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+      "type": "string"
+    },
+    "uri": {
+      "default": "",
+      "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+      "type": "string"
+    },
+    "verifier": {
+      "default": "",
+      "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+      "type": "string"
+    }
+  },
+  "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceAttestation.schema.strict.json b/gen/jsonschema/fora.v1.ResourceAttestation.schema.strict.json
new file mode 100644
index 00000000..562f398e
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceAttestation.schema.strict.json
@@ -0,0 +1,39 @@
+{
+  "$id": "fora.v1.ResourceAttestation.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+  "properties": {
+    "attested_at": {
+      "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+      "format": "date-time",
+      "type": "string"
+    },
+    "claims": {
+      "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+      "type": "object"
+    },
+    "keyid": {
+      "default": "",
+      "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+      "type": "string"
+    },
+    "signature": {
+      "default": "",
+      "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+      "type": "string"
+    },
+    "uri": {
+      "default": "",
+      "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+      "type": "string"
+    },
+    "verifier": {
+      "default": "",
+      "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+      "type": "string"
+    }
+  },
+  "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
new file mode 100644
index 00000000..86925e78
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -0,0 +1,536 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ResourceEntry.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "The list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.",
+  "properties": {
+    "attestations": {
+      "description": "Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceAttestation"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "content_hash": {
+      "description": "Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.",
+      "maxLength": 255,
+      "type": "string"
+    },
+    "content_id": {
+      "description": "Content identifier",
+      "maxLength": 255,
+      "type": "string"
+    },
+    "domain": {
+      "description": "Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "estimated_quantity": {
+      "description": "Estimated quantity in the metering unit",
+      "exclusiveMaximum": 2147483648,
+      "minimum": 0,
+      "type": "integer"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "hash_method": {
+      "description": "Hash algorithm",
+      "maxLength": 64,
+      "type": "string"
+    },
+    "path": {
+      "description": "Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes.",
+      "maxLength": 2048,
+      "minLength": 1,
+      "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+      "type": "string"
+    },
+    "provenance_source": {
+      "description": "Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"",
+      "maxLength": 260,
+      "type": "string"
+    },
+    "provenance_timestamp": {
+      "description": "When this metadata was collected/generated.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "resource_mutability": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESOURCE_MUTABILITY_STATIC",
+            "RESOURCE_MUTABILITY_DYNAMIC",
+            "RESOURCE_MUTABILITY_LIVE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.",
+      "title": "Resource Mutability"
+    },
+    "source": {
+      "anyOf": [
+        {
+          "enum": [
+            "INGESTION_SOURCE_UNSPECIFIED",
+            "INGESTION_SOURCE_FORA_SITEMAP",
+            "INGESTION_SOURCE_RSL",
+            "INGESTION_SOURCE_SITEMAP",
+            "INGESTION_SOURCE_HTML_CRAWL",
+            "INGESTION_SOURCE_CMS_API",
+            "INGESTION_SOURCE_MANUAL",
+            "INGESTION_SOURCE_CATALOG_API"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How the entry was discovered",
+      "title": "Ingestion Source"
+    },
+    "terms": {
+      "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.LicenseTerm"
+      },
+      "maxItems": 32,
+      "type": "array"
+    },
+    "title": {
+      "description": "Content title",
+      "maxLength": 512,
+      "type": "string"
+    },
+    "word_count": {
+      "description": "Word count",
+      "exclusiveMaximum": 2147483648,
+      "minimum": 0,
+      "type": "integer"
+    }
+  },
+  "required": [
+    "domain",
+    "path"
+  ],
+  "title": "ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
new file mode 100644
index 00000000..e6a6cdaf
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -0,0 +1,544 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ResourceEntry.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "The list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.",
+  "properties": {
+    "attestations": {
+      "description": "Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceAttestation"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "content_hash": {
+      "description": "Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.",
+      "maxLength": 255,
+      "type": "string"
+    },
+    "content_id": {
+      "description": "Content identifier",
+      "maxLength": 255,
+      "type": "string"
+    },
+    "domain": {
+      "description": "Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "estimated_quantity": {
+      "description": "Estimated quantity in the metering unit",
+      "exclusiveMaximum": 2147483648,
+      "minimum": 0,
+      "type": "integer"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "hash_method": {
+      "description": "Hash algorithm",
+      "maxLength": 64,
+      "type": "string"
+    },
+    "path": {
+      "description": "Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes.",
+      "maxLength": 2048,
+      "minLength": 1,
+      "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+      "type": "string"
+    },
+    "provenance_source": {
+      "description": "Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"",
+      "maxLength": 260,
+      "type": "string"
+    },
+    "provenance_timestamp": {
+      "description": "When this metadata was collected/generated.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "resource_mutability": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESOURCE_MUTABILITY_STATIC",
+            "RESOURCE_MUTABILITY_DYNAMIC",
+            "RESOURCE_MUTABILITY_LIVE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.",
+      "title": "Resource Mutability"
+    },
+    "source": {
+      "anyOf": [
+        {
+          "enum": [
+            "INGESTION_SOURCE_UNSPECIFIED",
+            "INGESTION_SOURCE_FORA_SITEMAP",
+            "INGESTION_SOURCE_RSL",
+            "INGESTION_SOURCE_SITEMAP",
+            "INGESTION_SOURCE_HTML_CRAWL",
+            "INGESTION_SOURCE_CMS_API",
+            "INGESTION_SOURCE_MANUAL",
+            "INGESTION_SOURCE_CATALOG_API"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "How the entry was discovered",
+      "title": "Ingestion Source"
+    },
+    "terms": {
+      "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.LicenseTerm"
+      },
+      "maxItems": 32,
+      "type": "array"
+    },
+    "title": {
+      "description": "Content title",
+      "maxLength": 512,
+      "type": "string"
+    },
+    "word_count": {
+      "description": "Word count",
+      "exclusiveMaximum": 2147483648,
+      "minimum": 0,
+      "type": "integer"
+    }
+  },
+  "required": [
+    "domain",
+    "path"
+  ],
+  "title": "ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceIdentity.schema.json b/gen/jsonschema/fora.v1.ResourceIdentity.schema.json
new file mode 100644
index 00000000..9e402ca0
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceIdentity.schema.json
@@ -0,0 +1,102 @@
+{
+  "$id": "fora.v1.ResourceIdentity.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+  "properties": {
+    "c2pa_manifest": {
+      "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+      "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+      "type": "string"
+    },
+    "c2pa_status": {
+      "anyOf": [
+        {
+          "enum": [
+            "C2PA_STATUS_UNSPECIFIED",
+            "C2PA_STATUS_TRUSTED",
+            "C2PA_STATUS_VALID",
+            "C2PA_STATUS_INVALID",
+            "C2PA_STATUS_ABSENT"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+      "title": "C2PA Status"
+    },
+    "canonical_url": {
+      "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+      "type": "string"
+    },
+    "content_hash": {
+      "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+      "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+      "type": "string"
+    },
+    "doi": {
+      "description": "Digital Object Identifier — persistent, never changes.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "hash_method": {
+      "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+      "type": "string"
+    },
+    "iptc_guid": {
+      "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+      "type": "string"
+    },
+    "isni": {
+      "description": "International Standard Name Identifier for the creator.",
+      "type": "string"
+    },
+    "resource_mutability": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESOURCE_MUTABILITY_STATIC",
+            "RESOURCE_MUTABILITY_DYNAMIC",
+            "RESOURCE_MUTABILITY_LIVE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+      "title": "Resource Mutability"
+    },
+    "soft_binding": {
+      "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+      "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+      "type": "string"
+    },
+    "soft_binding_method": {
+      "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+      "type": "string"
+    }
+  },
+  "required": [
+    "resource_mutability"
+  ],
+  "title": "ResourceIdentity — Layered resource identification and verification.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceIdentity.schema.strict.json b/gen/jsonschema/fora.v1.ResourceIdentity.schema.strict.json
new file mode 100644
index 00000000..dda2870c
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceIdentity.schema.strict.json
@@ -0,0 +1,103 @@
+{
+  "$id": "fora.v1.ResourceIdentity.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+  "properties": {
+    "c2pa_manifest": {
+      "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+      "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+      "type": "string"
+    },
+    "c2pa_status": {
+      "anyOf": [
+        {
+          "enum": [
+            "C2PA_STATUS_UNSPECIFIED",
+            "C2PA_STATUS_TRUSTED",
+            "C2PA_STATUS_VALID",
+            "C2PA_STATUS_INVALID",
+            "C2PA_STATUS_ABSENT"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+      "title": "C2PA Status"
+    },
+    "canonical_url": {
+      "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+      "type": "string"
+    },
+    "content_hash": {
+      "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+      "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+      "type": "string"
+    },
+    "doi": {
+      "description": "Digital Object Identifier — persistent, never changes.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "hash_method": {
+      "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+      "type": "string"
+    },
+    "iptc_guid": {
+      "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+      "type": "string"
+    },
+    "isni": {
+      "description": "International Standard Name Identifier for the creator.",
+      "type": "string"
+    },
+    "resource_mutability": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESOURCE_MUTABILITY_STATIC",
+            "RESOURCE_MUTABILITY_DYNAMIC",
+            "RESOURCE_MUTABILITY_LIVE"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+      "title": "Resource Mutability"
+    },
+    "soft_binding": {
+      "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+      "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+      "type": "string"
+    },
+    "soft_binding_method": {
+      "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+      "type": "string"
+    }
+  },
+  "required": [
+    "resource_mutability"
+  ],
+  "title": "ResourceIdentity — Layered resource identification and verification.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
new file mode 100644
index 00000000..0268e16a
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -0,0 +1,264 @@
+{
+  "$defs": {
+    "fora.v1.AcceptableRestriction": {
+      "description": "AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.",
+      "properties": {
+        "axis": {
+          "anyOf": [
+            {
+              "pattern": "^RESTRICTION_KIND_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.",
+          "title": "Restriction Kind"
+        },
+        "values": {
+          "description": "The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "title": "Acceptable Restriction",
+      "type": "object"
+    },
+    "fora.v1.Delegation": {
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    },
+    "fora.v1.Requester": {
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "properties": {
+        "delegation": {
+          "$ref": "#/$defs/fora.v1.Delegation",
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+        },
+        "domain": {
+          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "id": {
+          "default": "",
+          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "type": "string"
+        },
+        "name": {
+          "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Entitlement scopes. Declare what the requester can access.",
+          "type": "array"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUESTER_TYPE_AGENT",
+                "REQUESTER_TYPE_HUMAN_TOOL",
+                "REQUESTER_TYPE_SERVICE",
+                "REQUESTER_TYPE_DELEGATED",
+                "REQUESTER_TYPE_RESEARCH"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What kind of entity is making this request.",
+          "title": "Requester Type"
+        }
+      },
+      "required": [
+        "domain",
+        "type"
+      ],
+      "title": "Requester — Universal identity for any FORA client.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ResourceQuery.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Sent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.",
+  "properties": {
+    "acceptable_restrictions": {
+      "description": "The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AcceptableRestriction"
+      },
+      "type": "array"
+    },
+    "deadline": {
+      "description": "Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).",
+      "format": "duration",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "requester": {
+      "$ref": "#/$defs/fora.v1.Requester",
+      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain."
+    },
+    "supported_profiles": {
+      "description": "Declares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]",
+      "items": {
+        "type": "string"
+      },
+      "title": "Domain extension profiles the caller understands.",
+      "type": "array"
+    },
+    "uris": {
+      "description": "Resource URIs being queried.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 256,
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "ResourceQuery — Query an Exchange for available resource offers.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
new file mode 100644
index 00000000..33c7ec93
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -0,0 +1,268 @@
+{
+  "$defs": {
+    "fora.v1.AcceptableRestriction": {
+      "additionalProperties": false,
+      "description": "AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.",
+      "properties": {
+        "axis": {
+          "anyOf": [
+            {
+              "pattern": "^RESTRICTION_KIND_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.",
+          "title": "Restriction Kind"
+        },
+        "values": {
+          "description": "The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "title": "Acceptable Restriction",
+      "type": "object"
+    },
+    "fora.v1.Delegation": {
+      "additionalProperties": false,
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    },
+    "fora.v1.Requester": {
+      "additionalProperties": false,
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "properties": {
+        "delegation": {
+          "$ref": "#/$defs/fora.v1.Delegation",
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+        },
+        "domain": {
+          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "id": {
+          "default": "",
+          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "type": "string"
+        },
+        "name": {
+          "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Entitlement scopes. Declare what the requester can access.",
+          "type": "array"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUESTER_TYPE_AGENT",
+                "REQUESTER_TYPE_HUMAN_TOOL",
+                "REQUESTER_TYPE_SERVICE",
+                "REQUESTER_TYPE_DELEGATED",
+                "REQUESTER_TYPE_RESEARCH"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What kind of entity is making this request.",
+          "title": "Requester Type"
+        }
+      },
+      "required": [
+        "domain",
+        "type"
+      ],
+      "title": "Requester — Universal identity for any FORA client.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ResourceQuery.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Sent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.",
+  "properties": {
+    "acceptable_restrictions": {
+      "description": "The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AcceptableRestriction"
+      },
+      "type": "array"
+    },
+    "deadline": {
+      "description": "Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).",
+      "format": "duration",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "requester": {
+      "$ref": "#/$defs/fora.v1.Requester",
+      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain."
+    },
+    "supported_profiles": {
+      "description": "Declares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]",
+      "items": {
+        "type": "string"
+      },
+      "title": "Domain extension profiles the caller understands.",
+      "type": "array"
+    },
+    "uris": {
+      "description": "Resource URIs being queried.",
+      "items": {
+        "type": "string"
+      },
+      "maxItems": 256,
+      "type": "array"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "ResourceQuery — Query an Exchange for available resource offers.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
new file mode 100644
index 00000000..1e48d62c
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -0,0 +1,928 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.OfferGroup": {
+      "description": "OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.",
+      "properties": {
+        "absence_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "OFFER_ABSENCE_REASON_UNSPECIFIED",
+                "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+                "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+                "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+                "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+                "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+                "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+                "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "title": "Offer Absence Reason"
+        },
+        "discovery_method": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISCOVERY_METHOD_UNSPECIFIED",
+                "DISCOVERY_METHOD_EXCHANGE",
+                "DISCOVERY_METHOD_SEARCH",
+                "DISCOVERY_METHOD_RECOMMENDATION",
+                "DISCOVERY_METHOD_SYNDICATION"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.",
+          "title": "Discovery Method"
+        },
+        "offers": {
+          "description": "Zero or more offers for this URI. Empty = resource not available.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Offer"
+          },
+          "type": "array"
+        },
+        "restriction_filters": {
+          "description": "When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "uri": {
+          "default": "",
+          "description": "The URI this group of offers is for (echoed from ResourceQuery.uris).",
+          "type": "string"
+        }
+      },
+      "title": "Offer Group",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.RateLimitInfo": {
+      "description": "RateLimitInfo — Caller's rate limit status on this Exchange.\n Modeled after IETF RateLimit header fields (RFC 9110 §15.5.30)\n and Shutterstock's rate limit response pattern.",
+      "properties": {
+        "limit": {
+          "default": 0,
+          "description": "Maximum requests allowed in the current window.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "remaining": {
+          "default": 0,
+          "description": "Requests remaining in the current window.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "reset_at": {
+          "description": "When the current window resets (UTC). After this time, `remaining` resets to `limit`.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "window": {
+          "description": "Duration of the rate limit window (e.g. 60s = per-minute limit).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Rate Limit Info",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ResourceResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "When the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup.",
+  "properties": {
+    "exchange": {
+      "description": "Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "offer_groups": {
+      "description": "Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.OfferGroup"
+      },
+      "type": "array"
+    },
+    "offers": {
+      "description": "Flat list of offers (for single-URI queries).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Offer"
+      },
+      "type": "array"
+    },
+    "rate_limit": {
+      "$ref": "#/$defs/fora.v1.RateLimitInfo",
+      "description": "Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "ResourceResponse — Exchange returns candidate resource offers.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
new file mode 100644
index 00000000..4c715760
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -0,0 +1,943 @@
+{
+  "$defs": {
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "additionalProperties": false,
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.OfferGroup": {
+      "additionalProperties": false,
+      "description": "OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.",
+      "properties": {
+        "absence_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "OFFER_ABSENCE_REASON_UNSPECIFIED",
+                "OFFER_ABSENCE_REASON_NOT_IN_CATALOG",
+                "OFFER_ABSENCE_REASON_CONTENT_BLOCKED",
+                "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
+                "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+                "OFFER_ABSENCE_REASON_NOT_AUTHORIZED",
+                "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+                "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "title": "Offer Absence Reason"
+        },
+        "discovery_method": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISCOVERY_METHOD_UNSPECIFIED",
+                "DISCOVERY_METHOD_EXCHANGE",
+                "DISCOVERY_METHOD_SEARCH",
+                "DISCOVERY_METHOD_RECOMMENDATION",
+                "DISCOVERY_METHOD_SYNDICATION"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.",
+          "title": "Discovery Method"
+        },
+        "offers": {
+          "description": "Zero or more offers for this URI. Empty = resource not available.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Offer"
+          },
+          "type": "array"
+        },
+        "restriction_filters": {
+          "description": "When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "uri": {
+          "default": "",
+          "description": "The URI this group of offers is for (echoed from ResourceQuery.uris).",
+          "type": "string"
+        }
+      },
+      "title": "Offer Group",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "additionalProperties": false,
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.RateLimitInfo": {
+      "additionalProperties": false,
+      "description": "RateLimitInfo — Caller's rate limit status on this Exchange.\n Modeled after IETF RateLimit header fields (RFC 9110 §15.5.30)\n and Shutterstock's rate limit response pattern.",
+      "properties": {
+        "limit": {
+          "default": 0,
+          "description": "Maximum requests allowed in the current window.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "remaining": {
+          "default": 0,
+          "description": "Requests remaining in the current window.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "reset_at": {
+          "description": "When the current window resets (UTC). After this time, `remaining` resets to `limit`.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "window": {
+          "description": "Duration of the rate limit window (e.g. 60s = per-minute limit).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Rate Limit Info",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "additionalProperties": false,
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.ResourceResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "When the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup.",
+  "properties": {
+    "exchange": {
+      "description": "Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "offer_groups": {
+      "description": "Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.OfferGroup"
+      },
+      "type": "array"
+    },
+    "offers": {
+      "description": "Flat list of offers (for single-URI queries).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.Offer"
+      },
+      "type": "array"
+    },
+    "rate_limit": {
+      "$ref": "#/$defs/fora.v1.RateLimitInfo",
+      "description": "Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange"
+  ],
+  "title": "ResourceResponse — Exchange returns candidate resource offers.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Restriction.schema.json b/gen/jsonschema/fora.v1.Restriction.schema.json
new file mode 100644
index 00000000..8ff68884
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Restriction.schema.json
@@ -0,0 +1,59 @@
+{
+  "$id": "fora.v1.Restriction.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+  "properties": {
+    "advisory": {
+      "default": false,
+      "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+      "type": "boolean"
+    },
+    "kind": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESTRICTION_KIND_FUNCTION",
+            "RESTRICTION_KIND_GEOGRAPHY",
+            "RESTRICTION_KIND_USER_TYPE",
+            "RESTRICTION_KIND_OTHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 4,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+      "title": "Restriction Kind"
+    },
+    "permitted": {
+      "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "prohibited": {
+      "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 64,
+      "type": "array"
+    }
+  },
+  "required": [
+    "kind"
+  ],
+  "title": "Restriction — A single constraint on one licensing dimension.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Restriction.schema.strict.json b/gen/jsonschema/fora.v1.Restriction.schema.strict.json
new file mode 100644
index 00000000..83f444c7
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Restriction.schema.strict.json
@@ -0,0 +1,60 @@
+{
+  "$id": "fora.v1.Restriction.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+  "properties": {
+    "advisory": {
+      "default": false,
+      "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+      "type": "boolean"
+    },
+    "kind": {
+      "anyOf": [
+        {
+          "enum": [
+            "RESTRICTION_KIND_FUNCTION",
+            "RESTRICTION_KIND_GEOGRAPHY",
+            "RESTRICTION_KIND_USER_TYPE",
+            "RESTRICTION_KIND_OTHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 4,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+      "title": "Restriction Kind"
+    },
+    "permitted": {
+      "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 64,
+      "type": "array"
+    },
+    "prohibited": {
+      "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+      "items": {
+        "maxLength": 64,
+        "minLength": 1,
+        "pattern": "^[A-Za-z0-9._:*-]+$",
+        "type": "string"
+      },
+      "maxItems": 64,
+      "type": "array"
+    }
+  },
+  "required": [
+    "kind"
+  ],
+  "title": "Restriction — A single constraint on one licensing dimension.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.json b/gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.json
new file mode 100644
index 00000000..11bbc9f2
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.json
@@ -0,0 +1,40 @@
+{
+  "$id": "fora.v1.RetrievalAuthFailure.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+            "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+            "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 12,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Retrieval Auth Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Retrieval Auth Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.strict.json b/gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.strict.json
new file mode 100644
index 00000000..63cab855
--- /dev/null
+++ b/gen/jsonschema/fora.v1.RetrievalAuthFailure.schema.strict.json
@@ -0,0 +1,41 @@
+{
+  "$id": "fora.v1.RetrievalAuthFailure.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+            "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+            "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+            "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 12,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The failure reason (defined-only, non-zero)",
+      "title": "Retrieval Auth Failure Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Retrieval Auth Failure",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.json b/gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.json
new file mode 100644
index 00000000..5f53ed64
--- /dev/null
+++ b/gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.json
@@ -0,0 +1,44 @@
+{
+  "$id": "fora.v1.SubscriptionQuotaInfo.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+  "properties": {
+    "quota_limit": {
+      "default": 0,
+      "description": "Total allowed in the current period.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "quota_remaining": {
+      "default": 0,
+      "description": "Remaining in the current period.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "quota_used": {
+      "default": 0,
+      "description": "Used so far in the current period.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "resets_at": {
+      "description": "When the quota counter resets (UTC).",
+      "format": "date-time",
+      "type": "string"
+    },
+    "subscription_id": {
+      "default": "",
+      "description": "Subscription this quota applies to.",
+      "type": "string"
+    },
+    "unit": {
+      "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+      "type": "string"
+    }
+  },
+  "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.strict.json b/gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.strict.json
new file mode 100644
index 00000000..6a660501
--- /dev/null
+++ b/gen/jsonschema/fora.v1.SubscriptionQuotaInfo.schema.strict.json
@@ -0,0 +1,45 @@
+{
+  "$id": "fora.v1.SubscriptionQuotaInfo.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+  "properties": {
+    "quota_limit": {
+      "default": 0,
+      "description": "Total allowed in the current period.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "quota_remaining": {
+      "default": 0,
+      "description": "Remaining in the current period.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "quota_used": {
+      "default": 0,
+      "description": "Used so far in the current period.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "resets_at": {
+      "description": "When the quota counter resets (UTC).",
+      "format": "date-time",
+      "type": "string"
+    },
+    "subscription_id": {
+      "default": "",
+      "description": "Subscription this quota applies to.",
+      "type": "string"
+    },
+    "unit": {
+      "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+      "type": "string"
+    }
+  },
+  "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
new file mode 100644
index 00000000..1e9decfe
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
@@ -0,0 +1,81 @@
+{
+  "$id": "fora.v1.TransactionDenial.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+  "properties": {
+    "exchange": {
+      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "offer_id": {
+      "description": "Batch mode: the offer this denial pertains to.",
+      "type": "string"
+    },
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DENIAL_REASON_ACCOUNT_INACTIVE",
+            "DENIAL_REASON_INSUFFICIENT_BALANCE",
+            "DENIAL_REASON_RATE_LIMITED",
+            "DENIAL_REASON_CONTENT_UNAVAILABLE",
+            "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+            "DENIAL_REASON_REPORTING_OVERDUE",
+            "DENIAL_REASON_OFFER_EXPIRED",
+            "DENIAL_REASON_SIGNATURE_INVALID",
+            "DENIAL_REASON_QUOTA_EXCEEDED",
+            "DENIAL_REASON_DELEGATION_INVALID",
+            "DENIAL_REASON_SCOPE_INSUFFICIENT",
+            "DENIAL_REASON_ENTITLEMENT_MISSING",
+            "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+            "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+            "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+            "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+            "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+            "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 19,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The denial reason (defined-only, non-zero)",
+      "title": "Denial Reason"
+    },
+    "restriction_mismatches": {
+      "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "RESTRICTION_KIND_UNSPECIFIED",
+              "RESTRICTION_KIND_FUNCTION",
+              "RESTRICTION_KIND_GEOGRAPHY",
+              "RESTRICTION_KIND_USER_TYPE",
+              "RESTRICTION_KIND_OTHER"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Restriction Kind"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Transaction Denial",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
new file mode 100644
index 00000000..9b087be4
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
@@ -0,0 +1,82 @@
+{
+  "$id": "fora.v1.TransactionDenial.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+  "properties": {
+    "exchange": {
+      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "offer_id": {
+      "description": "Batch mode: the offer this denial pertains to.",
+      "type": "string"
+    },
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DENIAL_REASON_ACCOUNT_INACTIVE",
+            "DENIAL_REASON_INSUFFICIENT_BALANCE",
+            "DENIAL_REASON_RATE_LIMITED",
+            "DENIAL_REASON_CONTENT_UNAVAILABLE",
+            "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+            "DENIAL_REASON_REPORTING_OVERDUE",
+            "DENIAL_REASON_OFFER_EXPIRED",
+            "DENIAL_REASON_SIGNATURE_INVALID",
+            "DENIAL_REASON_QUOTA_EXCEEDED",
+            "DENIAL_REASON_DELEGATION_INVALID",
+            "DENIAL_REASON_SCOPE_INSUFFICIENT",
+            "DENIAL_REASON_ENTITLEMENT_MISSING",
+            "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+            "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+            "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+            "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+            "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+            "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 19,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The denial reason (defined-only, non-zero)",
+      "title": "Denial Reason"
+    },
+    "restriction_mismatches": {
+      "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "RESTRICTION_KIND_UNSPECIFIED",
+              "RESTRICTION_KIND_FUNCTION",
+              "RESTRICTION_KIND_GEOGRAPHY",
+              "RESTRICTION_KIND_USER_TYPE",
+              "RESTRICTION_KIND_OTHER"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Restriction Kind"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Transaction Denial",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
new file mode 100644
index 00000000..c793764f
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -0,0 +1,796 @@
+{
+  "$defs": {
+    "fora.v1.AgentAcceptance": {
+      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "properties": {
+        "signature": {
+          "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
+          "minLength": 1,
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+          "type": "string"
+        }
+      },
+      "required": [
+        "signature"
+      ],
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "type": "object"
+    },
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionItem.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "TransactionItem — A single offer commitment within a batch transaction.",
+  "properties": {
+    "agent_acceptance": {
+      "$ref": "#/$defs/fora.v1.AgentAcceptance",
+      "description": "The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature."
+    },
+    "offer": {
+      "$ref": "#/$defs/fora.v1.Offer",
+      "description": "The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer."
+    }
+  },
+  "required": [
+    "offer"
+  ],
+  "title": "Transaction Item",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
new file mode 100644
index 00000000..29fd31e3
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -0,0 +1,810 @@
+{
+  "$defs": {
+    "fora.v1.AgentAcceptance": {
+      "additionalProperties": false,
+      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "properties": {
+        "signature": {
+          "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
+          "minLength": 1,
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+          "type": "string"
+        }
+      },
+      "required": [
+        "signature"
+      ],
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "type": "object"
+    },
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "additionalProperties": false,
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "additionalProperties": false,
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "additionalProperties": false,
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionItem.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "TransactionItem — A single offer commitment within a batch transaction.",
+  "properties": {
+    "agent_acceptance": {
+      "$ref": "#/$defs/fora.v1.AgentAcceptance",
+      "description": "The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature."
+    },
+    "offer": {
+      "$ref": "#/$defs/fora.v1.Offer",
+      "description": "The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer."
+    }
+  },
+  "required": [
+    "offer"
+  ],
+  "title": "Transaction Item",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
new file mode 100644
index 00000000..5e39a6ab
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -0,0 +1,1070 @@
+{
+  "$defs": {
+    "fora.v1.AgentAcceptance": {
+      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "properties": {
+        "signature": {
+          "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
+          "minLength": 1,
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+          "type": "string"
+        }
+      },
+      "required": [
+        "signature"
+      ],
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptance": {
+      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "properties": {
+        "payload": {
+          "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
+          "description": "The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."
+        },
+        "signature": {
+          "description": "Hex-encoded detached Ed25519 signature over the canonical payload bytes.",
+          "minLength": 1,
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+          "type": "string"
+        }
+      },
+      "required": [
+        "payload",
+        "signature"
+      ],
+      "title": "AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptanceItem": {
+      "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+      "properties": {
+        "exchange": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "offer_sig": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange",
+        "offer_sig"
+      ],
+      "title": "Agent Request Acceptance Item",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptancePayload": {
+      "description": "AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature.",
+      "properties": {
+        "idempotency_key": {
+          "default": "",
+          "type": "string"
+        },
+        "items": {
+          "description": "Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.AgentRequestAcceptanceItem"
+          },
+          "maxItems": 256,
+          "minItems": 1,
+          "type": "array"
+        },
+        "requester_domain": {
+          "default": "",
+          "type": "string"
+        },
+        "requester_id": {
+          "default": "",
+          "type": "string"
+        }
+      },
+      "title": "Agent Request Acceptance Payload",
+      "type": "object"
+    },
+    "fora.v1.Delegation": {
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    },
+    "fora.v1.License": {
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.Requester": {
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "properties": {
+        "delegation": {
+          "$ref": "#/$defs/fora.v1.Delegation",
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+        },
+        "domain": {
+          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "id": {
+          "default": "",
+          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "type": "string"
+        },
+        "name": {
+          "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Entitlement scopes. Declare what the requester can access.",
+          "type": "array"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUESTER_TYPE_AGENT",
+                "REQUESTER_TYPE_HUMAN_TOOL",
+                "REQUESTER_TYPE_SERVICE",
+                "REQUESTER_TYPE_DELEGATED",
+                "REQUESTER_TYPE_RESEARCH"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What kind of entity is making this request.",
+          "title": "Requester Type"
+        }
+      },
+      "required": [
+        "domain",
+        "type"
+      ],
+      "title": "Requester — Universal identity for any FORA client.",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    },
+    "fora.v1.TransactionItem": {
+      "description": "TransactionItem — A single offer commitment within a batch transaction.",
+      "properties": {
+        "agent_acceptance": {
+          "$ref": "#/$defs/fora.v1.AgentAcceptance",
+          "description": "The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature."
+        },
+        "offer": {
+          "$ref": "#/$defs/fora.v1.Offer",
+          "description": "The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer."
+        }
+      },
+      "required": [
+        "offer"
+      ],
+      "title": "Transaction Item",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionRequest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "After selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.",
+  "properties": {
+    "agent_request_acceptance": {
+      "$ref": "#/$defs/fora.v1.AgentRequestAcceptance",
+      "description": "Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim."
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "idempotency_key": {
+      "description": "Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide.",
+      "maxLength": 255,
+      "minLength": 1,
+      "title": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "type": "string"
+    },
+    "items": {
+      "description": "The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.TransactionItem"
+      },
+      "minItems": 1,
+      "type": "array"
+    },
+    "requester": {
+      "$ref": "#/$defs/fora.v1.Requester",
+      "description": "Requester identity — forwarded for authorization and audit."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "idempotency_key"
+  ],
+  "title": "TransactionRequest — Commit to one or more offers.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
new file mode 100644
index 00000000..6a8d99f9
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -0,0 +1,1090 @@
+{
+  "$defs": {
+    "fora.v1.AgentAcceptance": {
+      "additionalProperties": false,
+      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "properties": {
+        "signature": {
+          "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
+          "minLength": 1,
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+          "type": "string"
+        }
+      },
+      "required": [
+        "signature"
+      ],
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptance": {
+      "additionalProperties": false,
+      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "properties": {
+        "payload": {
+          "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
+          "description": "The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."
+        },
+        "signature": {
+          "description": "Hex-encoded detached Ed25519 signature over the canonical payload bytes.",
+          "minLength": 1,
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "Signature algorithm; \"EdDSA\" for Ed25519.",
+          "type": "string"
+        }
+      },
+      "required": [
+        "payload",
+        "signature"
+      ],
+      "title": "AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptanceItem": {
+      "additionalProperties": false,
+      "description": "AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.",
+      "properties": {
+        "exchange": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "offer_sig": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange",
+        "offer_sig"
+      ],
+      "title": "Agent Request Acceptance Item",
+      "type": "object"
+    },
+    "fora.v1.AgentRequestAcceptancePayload": {
+      "additionalProperties": false,
+      "description": "AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature.",
+      "properties": {
+        "idempotency_key": {
+          "default": "",
+          "type": "string"
+        },
+        "items": {
+          "description": "Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.AgentRequestAcceptanceItem"
+          },
+          "maxItems": 256,
+          "minItems": 1,
+          "type": "array"
+        },
+        "requester_domain": {
+          "default": "",
+          "type": "string"
+        },
+        "requester_id": {
+          "default": "",
+          "type": "string"
+        }
+      },
+      "title": "Agent Request Acceptance Payload",
+      "type": "object"
+    },
+    "fora.v1.Delegation": {
+      "additionalProperties": false,
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "properties": {
+        "expires_at": {
+          "description": "When this delegation expires. Exchange MUST reject expired tokens.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "issuer": {
+          "description": "Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.",
+          "type": "string"
+        },
+        "max_accesses": {
+          "description": "Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "max_spend_cents": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "pattern": "^-?[0-9]+$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap."
+        },
+        "principal_domain": {
+          "default": "",
+          "description": "Who granted this delegation (domain for public key lookup).",
+          "type": "string"
+        },
+        "principal_id": {
+          "default": "",
+          "description": "Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").",
+          "type": "string"
+        },
+        "quota_period": {
+          "description": "Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).",
+          "format": "duration",
+          "type": "string"
+        },
+        "revocation_uri": {
+          "description": "Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "token": {
+          "default": null,
+          "description": "Token bytes. A JWT (base64url-encoded JWS).",
+          "pattern": "^[A-Za-z0-9+/]*={0,2}$",
+          "type": "string"
+        },
+        "token_format": {
+          "default": "",
+          "description": "Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.",
+          "type": "string"
+        }
+      },
+      "title": "Delegation — Scoped, time-limited, spend-capped credential.",
+      "type": "object"
+    },
+    "fora.v1.License": {
+      "additionalProperties": false,
+      "description": "License — Identifies the governing license document for a LicenseTerm.",
+      "properties": {
+        "id": {
+          "description": "Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.",
+          "type": "string"
+        },
+        "immutable": {
+          "description": "Data-labels TDL: the document at uri is versioned and will not change.",
+          "type": "boolean"
+        },
+        "name": {
+          "description": "Human-readable name (licenseType, schema.org node name).",
+          "type": "string"
+        },
+        "uri": {
+          "description": "\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.",
+          "title": "Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"",
+          "type": "string"
+        },
+        "uri_digest": {
+          "description": "The method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.",
+          "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+          "title": "Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).",
+          "type": "string"
+        }
+      },
+      "title": "License",
+      "type": "object"
+    },
+    "fora.v1.LicenseTerm": {
+      "additionalProperties": false,
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "properties": {
+        "license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest."
+        },
+        "obligations": {
+          "description": "Post-use behavioral requirements.\n At most 64, for the reason quotas carries.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Obligation"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "part_label": {
+          "description": "Informational human-readable name for this sub-part (sub-part terms).",
+          "type": "string"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+        },
+        "quotas": {
+          "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Quota"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "restrictions": {
+          "description": "What makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Restriction"
+          },
+          "maxItems": 8,
+          "title": "Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.",
+          "type": "array"
+        },
+        "scopes": {
+          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "type": "array"
+        },
+        "semantics": {
+          "anyOf": [
+            {
+              "enum": [
+                "TERM_SEMANTICS_ENUMERATED",
+                "TERM_SEMANTICS_REFERENCE_ONLY"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How to interpret the machine fields.",
+          "title": "Term Semantics"
+        }
+      },
+      "required": [
+        "pricing",
+        "semantics"
+      ],
+      "title": "LicenseTerm — Universal licensing unit.",
+      "type": "object"
+    },
+    "fora.v1.Obligation": {
+      "additionalProperties": false,
+      "description": "Examples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.",
+      "properties": {
+        "detail": {
+          "description": "Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.",
+          "type": "string"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_KIND_ATTRIBUTION",
+                "OBLIGATION_KIND_CONTRIBUTION",
+                "OBLIGATION_KIND_SHARE_ALIKE",
+                "OBLIGATION_KIND_NETWORK_COPYLEFT",
+                "OBLIGATION_KIND_NOTICE",
+                "OBLIGATION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What the agent must do.",
+          "title": "Obligation Kind"
+        },
+        "scope_license": {
+          "$ref": "#/$defs/fora.v1.License",
+          "description": "The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference."
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "enum": [
+                "OBLIGATION_TRIGGER_ON_USE",
+                "OBLIGATION_TRIGGER_ON_DISTRIBUTION",
+                "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE",
+                "OBLIGATION_TRIGGER_ON_DERIVATIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "When the obligation activates.",
+          "title": "Obligation Trigger"
+        }
+      },
+      "required": [
+        "kind",
+        "trigger"
+      ],
+      "title": "Obligation — A post-use behavioral requirement attached to a LicenseTerm.",
+      "type": "object"
+    },
+    "fora.v1.Offer": {
+      "additionalProperties": false,
+      "description": "Combines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.",
+      "properties": {
+        "attestations": {
+          "description": "Three verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.ResourceAttestation"
+          },
+          "title": "Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).",
+          "type": "array"
+        },
+        "data_as_of": {
+          "description": "Not set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.",
+          "format": "date-time",
+          "title": "When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"",
+          "type": "string"
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource will be delivered.",
+          "title": "Delivery Method"
+        },
+        "exchange": {
+          "description": "REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "expires_at": {
+          "description": "When this offer expires (ISO 8601).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "iab_categories": {
+          "description": "IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "identity": {
+          "$ref": "#/$defs/fora.v1.ResourceIdentity",
+          "description": "Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing."
+        },
+        "offer_id": {
+          "default": "",
+          "description": "Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.",
+          "type": "string"
+        },
+        "previews": {
+          "description": "Per content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.Preview"
+          },
+          "title": "Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.",
+          "type": "array"
+        },
+        "pricing": {
+          "$ref": "#/$defs/fora.v1.Pricing",
+          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+        },
+        "reporting": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Post-usage reporting requirements for this offer."
+        },
+        "signature": {
+          "default": "",
+          "description": "CANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.",
+          "title": "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.",
+          "type": "string"
+        },
+        "signature_algorithm": {
+          "default": "",
+          "description": "JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.",
+          "type": "string"
+        },
+        "subscription_quota": {
+          "description": "Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).",
+          "items": {
+            "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+          },
+          "type": "array"
+        },
+        "terms": {
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.LicenseTerm"
+          },
+          "maxItems": 1,
+          "minItems": 1,
+          "title": "The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.",
+          "type": "array"
+        },
+        "title": {
+          "description": "Resource title (human-readable, for display/logging).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "exchange"
+      ],
+      "title": "Offer — A single resource offer from an Exchange.",
+      "type": "object"
+    },
+    "fora.v1.Preview": {
+      "additionalProperties": false,
+      "description": "The Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.",
+      "properties": {
+        "duration": {
+          "description": "Duration in seconds (for audio and video clips).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "height": {
+          "description": "Height in pixels (images and video)",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "media_type": {
+          "default": "",
+          "description": "MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)",
+          "type": "string"
+        },
+        "url": {
+          "default": "",
+          "description": "URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.",
+          "type": "string"
+        },
+        "width": {
+          "description": "Dimensions in pixels (for images and video).",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      },
+      "title": "Preview — Lightweight resource preview for offer evaluation.",
+      "type": "object"
+    },
+    "fora.v1.Pricing": {
+      "additionalProperties": false,
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "properties": {
+        "currency": {
+          "default": "",
+          "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
+          "type": "string"
+        },
+        "estimated_quantity": {
+          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "license_duration_months": {
+          "description": "License duration in months. How long the granted access remains valid.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "metering": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_METERING_ONLINE",
+                "PRICING_METERING_NONE",
+                "PRICING_METERING_OFFLINE_SELF_REPORTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.",
+          "title": "Pricing Metering"
+        },
+        "model": {
+          "anyOf": [
+            {
+              "enum": [
+                "PRICING_MODEL_FREE",
+                "PRICING_MODEL_PER_UNIT",
+                "PRICING_MODEL_FLAT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Provider's pricing model.",
+          "title": "Pricing Model"
+        },
+        "rate": {
+          "default": "",
+          "description": "Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "unit": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "title": "Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.",
+          "type": "string"
+        },
+        "unit_cost": {
+          "description": "Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "model"
+      ],
+      "title": "Pricing — Terms for a resource offer.",
+      "type": "object"
+    },
+    "fora.v1.Quota": {
+      "additionalProperties": false,
+      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "properties": {
+        "limit": {
+          "anyOf": [
+            {
+              "minimum": 1,
+              "type": "integer"
+            },
+            {
+              "pattern": "^0*[1-9][0-9]*$",
+              "type": "string"
+            }
+          ],
+          "description": "Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."
+        },
+        "metric": {
+          "description": "The (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$",
+          "title": "The unit being capped — an open vocabulary axis.",
+          "type": "string"
+        },
+        "window": {
+          "anyOf": [
+            {
+              "enum": [
+                "QUOTA_WINDOW_HOURLY",
+                "QUOTA_WINDOW_DAILY",
+                "QUOTA_WINDOW_MONTHLY",
+                "QUOTA_WINDOW_TOTAL"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Time window over which the limit accumulates.",
+          "title": "Quota Window"
+        }
+      },
+      "required": [
+        "limit",
+        "metric",
+        "window"
+      ],
+      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.Requester": {
+      "additionalProperties": false,
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "properties": {
+        "delegation": {
+          "$ref": "#/$defs/fora.v1.Delegation",
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+        },
+        "domain": {
+          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "id": {
+          "default": "",
+          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "type": "string"
+        },
+        "name": {
+          "description": "Human-readable name (e.g., \"Acme Research Assistant\").",
+          "type": "string"
+        },
+        "scopes": {
+          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "items": {
+            "type": "string"
+          },
+          "maxItems": 64,
+          "title": "Entitlement scopes. Declare what the requester can access.",
+          "type": "array"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUESTER_TYPE_AGENT",
+                "REQUESTER_TYPE_HUMAN_TOOL",
+                "REQUESTER_TYPE_SERVICE",
+                "REQUESTER_TYPE_DELEGATED",
+                "REQUESTER_TYPE_RESEARCH"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "What kind of entity is making this request.",
+          "title": "Requester Type"
+        }
+      },
+      "required": [
+        "domain",
+        "type"
+      ],
+      "title": "Requester — Universal identity for any FORA client.",
+      "type": "object"
+    },
+    "fora.v1.ResourceAttestation": {
+      "additionalProperties": false,
+      "description": "A provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].",
+      "properties": {
+        "attested_at": {
+          "description": "When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").",
+          "format": "date-time",
+          "type": "string"
+        },
+        "claims": {
+          "description": "Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].",
+          "type": "object"
+        },
+        "keyid": {
+          "default": "",
+          "description": "RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.",
+          "type": "string"
+        },
+        "signature": {
+          "default": "",
+          "description": "Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.",
+          "type": "string"
+        },
+        "verifier": {
+          "default": "",
+          "description": "Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory",
+          "type": "string"
+        }
+      },
+      "title": "ResourceAttestation — Signed envelope of claims from a trusted party.",
+      "type": "object"
+    },
+    "fora.v1.ResourceIdentity": {
+      "additionalProperties": false,
+      "description": "Serves two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).",
+      "properties": {
+        "c2pa_manifest": {
+          "description": "Formats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...",
+          "title": "C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.",
+          "type": "string"
+        },
+        "c2pa_status": {
+          "anyOf": [
+            {
+              "enum": [
+                "C2PA_STATUS_UNSPECIFIED",
+                "C2PA_STATUS_TRUSTED",
+                "C2PA_STATUS_VALID",
+                "C2PA_STATUS_INVALID",
+                "C2PA_STATUS_ABSENT"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.",
+          "title": "C2PA Status"
+        },
+        "canonical_url": {
+          "description": "Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.",
+          "type": "string"
+        },
+        "content_hash": {
+          "description": "Level 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.",
+          "title": "Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)",
+          "type": "string"
+        },
+        "doi": {
+          "description": "Digital Object Identifier — persistent, never changes.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hash_method": {
+          "description": "Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"",
+          "type": "string"
+        },
+        "iptc_guid": {
+          "description": "IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).",
+          "type": "string"
+        },
+        "isni": {
+          "description": "International Standard Name Identifier for the creator.",
+          "type": "string"
+        },
+        "resource_mutability": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESOURCE_MUTABILITY_STATIC",
+                "RESOURCE_MUTABILITY_DYNAMIC",
+                "RESOURCE_MUTABILITY_LIVE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds).",
+          "title": "Resource Mutability"
+        },
+        "soft_binding": {
+          "description": "Algorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).",
+          "title": "Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.",
+          "type": "string"
+        },
+        "soft_binding_method": {
+          "description": "Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).",
+          "type": "string"
+        }
+      },
+      "required": [
+        "resource_mutability"
+      ],
+      "title": "ResourceIdentity — Layered resource identification and verification.",
+      "type": "object"
+    },
+    "fora.v1.Restriction": {
+      "additionalProperties": false,
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "properties": {
+        "advisory": {
+          "default": false,
+          "description": "Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.",
+          "type": "boolean"
+        },
+        "kind": {
+          "anyOf": [
+            {
+              "enum": [
+                "RESTRICTION_KIND_FUNCTION",
+                "RESTRICTION_KIND_GEOGRAPHY",
+                "RESTRICTION_KIND_USER_TYPE",
+                "RESTRICTION_KIND_OTHER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 4,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "title": "Restriction Kind"
+        },
+        "permitted": {
+          "description": "Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "prohibited": {
+          "description": "Tokens blocked on this axis. Takes precedence over permitted[].",
+          "items": {
+            "maxLength": 64,
+            "minLength": 1,
+            "pattern": "^[A-Za-z0-9._:*-]+$",
+            "type": "string"
+          },
+          "maxItems": 64,
+          "type": "array"
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "title": "Restriction — A single constraint on one licensing dimension.",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    },
+    "fora.v1.TransactionItem": {
+      "additionalProperties": false,
+      "description": "TransactionItem — A single offer commitment within a batch transaction.",
+      "properties": {
+        "agent_acceptance": {
+          "$ref": "#/$defs/fora.v1.AgentAcceptance",
+          "description": "The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature."
+        },
+        "offer": {
+          "$ref": "#/$defs/fora.v1.Offer",
+          "description": "The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer."
+        }
+      },
+      "required": [
+        "offer"
+      ],
+      "title": "Transaction Item",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionRequest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "After selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.",
+  "properties": {
+    "agent_request_acceptance": {
+      "$ref": "#/$defs/fora.v1.AgentRequestAcceptance",
+      "description": "Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim."
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "idempotency_key": {
+      "description": "Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide.",
+      "maxLength": 255,
+      "minLength": 1,
+      "title": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "type": "string"
+    },
+    "items": {
+      "description": "The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.TransactionItem"
+      },
+      "minItems": 1,
+      "type": "array"
+    },
+    "requester": {
+      "$ref": "#/$defs/fora.v1.Requester",
+      "description": "Requester identity — forwarded for authorization and audit."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "idempotency_key"
+  ],
+  "title": "TransactionRequest — Commit to one or more offers.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
new file mode 100644
index 00000000..700a244e
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -0,0 +1,724 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.TransactionResultItem": {
+      "description": "TransactionResultItem — Result for a single offer in a batch transaction.",
+      "properties": {
+        "billing_id": {
+          "default": "",
+          "description": "Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
+          "type": "string"
+        },
+        "cost": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Cost for this item."
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource is delivered for this item.",
+          "title": "Delivery Method"
+        },
+        "denial_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_UNSPECIFIED",
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Set if this specific item was denied (others may succeed).",
+          "title": "Denial Reason"
+        },
+        "expires_at": {
+          "description": "When retrieval_endpoint expires.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "offer_id": {
+          "default": "",
+          "description": "The offer_id this result is for.",
+          "type": "string"
+        },
+        "refusal": {
+          "$ref": "#/$defs/fora.v1.UpstreamRefusal",
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+        },
+        "reporting_obligation": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Reporting requirements for this item."
+        },
+        "resource_title": {
+          "description": "Resource title echoed from the Offer.",
+          "type": "string"
+        },
+        "restriction_mismatches": {
+          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "retrieval_endpoint": {
+          "description": "Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If under subscription, no per-request charge.",
+          "type": "string"
+        },
+        "subscription_unit_value": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown)."
+        },
+        "transaction_id": {
+          "default": "",
+          "description": "Exchange-assigned transaction identifier.",
+          "type": "string"
+        }
+      },
+      "title": "Transaction Result Item",
+      "type": "object"
+    },
+    "fora.v1.UpstreamRefusal": {
+      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "properties": {
+        "code": {
+          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "maxLength": 64,
+          "minLength": 1,
+          "type": "string"
+        },
+        "detail": {
+          "$ref": "#/$defs/fora.v1.ErrorDetail",
+          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "exchange"
+      ],
+      "title": "Upstream Refusal",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Items-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request.",
+  "properties": {
+    "agent_identity_hash": {
+      "default": "",
+      "description": "Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "items": {
+      "description": "Per-offer results (one entry per committed item, in original order).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.TransactionResultItem"
+      },
+      "type": "array"
+    },
+    "subscription_quota": {
+      "description": "Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+      },
+      "type": "array"
+    },
+    "total_cost": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Aggregate cost across all items."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "TransactionResponse — Exchange confirms the transaction(s).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
new file mode 100644
index 00000000..465ef275
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -0,0 +1,740 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "additionalProperties": false,
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "additionalProperties": false,
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "additionalProperties": false,
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "additionalProperties": false,
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "additionalProperties": false,
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "additionalProperties": false,
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "additionalProperties": false,
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "additionalProperties": false,
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "additionalProperties": false,
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.SubscriptionQuotaInfo": {
+      "additionalProperties": false,
+      "description": "Analogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).",
+      "properties": {
+        "quota_limit": {
+          "default": 0,
+          "description": "Total allowed in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_remaining": {
+          "default": 0,
+          "description": "Remaining in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "quota_used": {
+          "default": 0,
+          "description": "Used so far in the current period.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "resets_at": {
+          "description": "When the quota counter resets (UTC).",
+          "format": "date-time",
+          "type": "string"
+        },
+        "subscription_id": {
+          "default": "",
+          "description": "Subscription this quota applies to.",
+          "type": "string"
+        },
+        "unit": {
+          "description": "What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"",
+          "type": "string"
+        }
+      },
+      "title": "SubscriptionQuotaInfo — Proactive quota signaling for subscription access.",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "additionalProperties": false,
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.TransactionResultItem": {
+      "additionalProperties": false,
+      "description": "TransactionResultItem — Result for a single offer in a batch transaction.",
+      "properties": {
+        "billing_id": {
+          "default": "",
+          "description": "Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
+          "type": "string"
+        },
+        "cost": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Cost for this item."
+        },
+        "delivery_method": {
+          "anyOf": [
+            {
+              "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+              "type": "string"
+            },
+            {
+              "enum": [
+                "DELIVERY_METHOD_DIRECT",
+                "DELIVERY_METHOD_INSTRUCTIONS",
+                "DELIVERY_METHOD_STREAMING"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "default": 0,
+          "description": "How resource is delivered for this item.",
+          "title": "Delivery Method"
+        },
+        "denial_reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_UNSPECIFIED",
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Set if this specific item was denied (others may succeed).",
+          "title": "Denial Reason"
+        },
+        "expires_at": {
+          "description": "When retrieval_endpoint expires.",
+          "format": "date-time",
+          "type": "string"
+        },
+        "offer_id": {
+          "default": "",
+          "description": "The offer_id this result is for.",
+          "type": "string"
+        },
+        "refusal": {
+          "$ref": "#/$defs/fora.v1.UpstreamRefusal",
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+        },
+        "reporting_obligation": {
+          "$ref": "#/$defs/fora.v1.ReportingObligation",
+          "description": "Reporting requirements for this item."
+        },
+        "resource_title": {
+          "description": "Resource title echoed from the Offer.",
+          "type": "string"
+        },
+        "restriction_mismatches": {
+          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        },
+        "retrieval_endpoint": {
+          "description": "Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
+          "type": "string"
+        },
+        "subscription_id": {
+          "description": "If under subscription, no per-request charge.",
+          "type": "string"
+        },
+        "subscription_unit_value": {
+          "$ref": "#/$defs/fora.v1.Cost",
+          "description": "Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown)."
+        },
+        "transaction_id": {
+          "default": "",
+          "description": "Exchange-assigned transaction identifier.",
+          "type": "string"
+        }
+      },
+      "title": "Transaction Result Item",
+      "type": "object"
+    },
+    "fora.v1.UpstreamRefusal": {
+      "additionalProperties": false,
+      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "properties": {
+        "code": {
+          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "maxLength": 64,
+          "minLength": 1,
+          "type": "string"
+        },
+        "detail": {
+          "$ref": "#/$defs/fora.v1.ErrorDetail",
+          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "exchange"
+      ],
+      "title": "Upstream Refusal",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "additionalProperties": false,
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Items-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request.",
+  "properties": {
+    "agent_identity_hash": {
+      "default": "",
+      "description": "Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "items": {
+      "description": "Per-offer results (one entry per committed item, in original order).",
+      "items": {
+        "$ref": "#/$defs/fora.v1.TransactionResultItem"
+      },
+      "type": "array"
+    },
+    "subscription_quota": {
+      "description": "Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.SubscriptionQuotaInfo"
+      },
+      "type": "array"
+    },
+    "total_cost": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Aggregate cost across all items."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "TransactionResponse — Exchange confirms the transaction(s).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
new file mode 100644
index 00000000..421f84e3
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -0,0 +1,636 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.UpstreamRefusal": {
+      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "properties": {
+        "code": {
+          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "maxLength": 64,
+          "minLength": 1,
+          "type": "string"
+        },
+        "detail": {
+          "$ref": "#/$defs/fora.v1.ErrorDetail",
+          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "exchange"
+      ],
+      "title": "Upstream Refusal",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionResultItem.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "TransactionResultItem — Result for a single offer in a batch transaction.",
+  "properties": {
+    "billing_id": {
+      "default": "",
+      "description": "Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
+      "type": "string"
+    },
+    "cost": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Cost for this item."
+    },
+    "delivery_method": {
+      "anyOf": [
+        {
+          "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "DELIVERY_METHOD_DIRECT",
+            "DELIVERY_METHOD_INSTRUCTIONS",
+            "DELIVERY_METHOD_STREAMING"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "How resource is delivered for this item.",
+      "title": "Delivery Method"
+    },
+    "denial_reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DENIAL_REASON_UNSPECIFIED",
+            "DENIAL_REASON_ACCOUNT_INACTIVE",
+            "DENIAL_REASON_INSUFFICIENT_BALANCE",
+            "DENIAL_REASON_RATE_LIMITED",
+            "DENIAL_REASON_CONTENT_UNAVAILABLE",
+            "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+            "DENIAL_REASON_REPORTING_OVERDUE",
+            "DENIAL_REASON_OFFER_EXPIRED",
+            "DENIAL_REASON_SIGNATURE_INVALID",
+            "DENIAL_REASON_QUOTA_EXCEEDED",
+            "DENIAL_REASON_DELEGATION_INVALID",
+            "DENIAL_REASON_SCOPE_INSUFFICIENT",
+            "DENIAL_REASON_ENTITLEMENT_MISSING",
+            "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+            "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+            "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+            "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+            "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+            "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Set if this specific item was denied (others may succeed).",
+      "title": "Denial Reason"
+    },
+    "expires_at": {
+      "description": "When retrieval_endpoint expires.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "offer_id": {
+      "default": "",
+      "description": "The offer_id this result is for.",
+      "type": "string"
+    },
+    "refusal": {
+      "$ref": "#/$defs/fora.v1.UpstreamRefusal",
+      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+    },
+    "reporting_obligation": {
+      "$ref": "#/$defs/fora.v1.ReportingObligation",
+      "description": "Reporting requirements for this item."
+    },
+    "resource_title": {
+      "description": "Resource title echoed from the Offer.",
+      "type": "string"
+    },
+    "restriction_mismatches": {
+      "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "RESTRICTION_KIND_UNSPECIFIED",
+              "RESTRICTION_KIND_FUNCTION",
+              "RESTRICTION_KIND_GEOGRAPHY",
+              "RESTRICTION_KIND_USER_TYPE",
+              "RESTRICTION_KIND_OTHER"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Restriction Kind"
+      },
+      "type": "array"
+    },
+    "retrieval_endpoint": {
+      "description": "Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
+      "type": "string"
+    },
+    "subscription_id": {
+      "description": "If under subscription, no per-request charge.",
+      "type": "string"
+    },
+    "subscription_unit_value": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown)."
+    },
+    "transaction_id": {
+      "default": "",
+      "description": "Exchange-assigned transaction identifier.",
+      "type": "string"
+    }
+  },
+  "title": "Transaction Result Item",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
new file mode 100644
index 00000000..dd4c6c9d
--- /dev/null
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -0,0 +1,650 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "additionalProperties": false,
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.Cost": {
+      "additionalProperties": false,
+      "description": "Cost — Actual transaction cost.",
+      "properties": {
+        "amount": {
+          "default": "",
+          "description": "Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.",
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        },
+        "currency": {
+          "default": "",
+          "type": "string"
+        },
+        "unit_cost": {
+          "maxLength": 32,
+          "pattern": "^([0-9]+([.][0-9]+)?)?$",
+          "type": "string"
+        }
+      },
+      "title": "Cost",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "additionalProperties": false,
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "additionalProperties": false,
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "additionalProperties": false,
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "additionalProperties": false,
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "additionalProperties": false,
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.ReportingObligation": {
+      "additionalProperties": false,
+      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "properties": {
+        "endpoint": {
+          "description": "URL to submit the usage report to (if different from Exchange).",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "required": {
+          "default": false,
+          "description": "Whether post-usage reporting is required.",
+          "type": "boolean"
+        },
+        "required_fields": {
+          "description": "Field names that must be present in the report.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "window": {
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "format": "duration",
+          "type": "string"
+        }
+      },
+      "title": "Reporting Obligation",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "additionalProperties": false,
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "additionalProperties": false,
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "additionalProperties": false,
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.UpstreamRefusal": {
+      "additionalProperties": false,
+      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "properties": {
+        "code": {
+          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "maxLength": 64,
+          "minLength": 1,
+          "type": "string"
+        },
+        "detail": {
+          "$ref": "#/$defs/fora.v1.ErrorDetail",
+          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+        },
+        "exchange": {
+          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "exchange"
+      ],
+      "title": "Upstream Refusal",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "additionalProperties": false,
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.TransactionResultItem.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "TransactionResultItem — Result for a single offer in a batch transaction.",
+  "properties": {
+    "billing_id": {
+      "default": "",
+      "description": "Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
+      "type": "string"
+    },
+    "cost": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Cost for this item."
+    },
+    "delivery_method": {
+      "anyOf": [
+        {
+          "pattern": "^DELIVERY_METHOD_UNSPECIFIED$",
+          "type": "string"
+        },
+        {
+          "enum": [
+            "DELIVERY_METHOD_DIRECT",
+            "DELIVERY_METHOD_INSTRUCTIONS",
+            "DELIVERY_METHOD_STREAMING"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "default": 0,
+      "description": "How resource is delivered for this item.",
+      "title": "Delivery Method"
+    },
+    "denial_reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "DENIAL_REASON_UNSPECIFIED",
+            "DENIAL_REASON_ACCOUNT_INACTIVE",
+            "DENIAL_REASON_INSUFFICIENT_BALANCE",
+            "DENIAL_REASON_RATE_LIMITED",
+            "DENIAL_REASON_CONTENT_UNAVAILABLE",
+            "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+            "DENIAL_REASON_REPORTING_OVERDUE",
+            "DENIAL_REASON_OFFER_EXPIRED",
+            "DENIAL_REASON_SIGNATURE_INVALID",
+            "DENIAL_REASON_QUOTA_EXCEEDED",
+            "DENIAL_REASON_DELEGATION_INVALID",
+            "DENIAL_REASON_SCOPE_INSUFFICIENT",
+            "DENIAL_REASON_ENTITLEMENT_MISSING",
+            "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+            "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+            "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+            "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+            "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+            "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Set if this specific item was denied (others may succeed).",
+      "title": "Denial Reason"
+    },
+    "expires_at": {
+      "description": "When retrieval_endpoint expires.",
+      "format": "date-time",
+      "type": "string"
+    },
+    "offer_id": {
+      "default": "",
+      "description": "The offer_id this result is for.",
+      "type": "string"
+    },
+    "refusal": {
+      "$ref": "#/$defs/fora.v1.UpstreamRefusal",
+      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+    },
+    "reporting_obligation": {
+      "$ref": "#/$defs/fora.v1.ReportingObligation",
+      "description": "Reporting requirements for this item."
+    },
+    "resource_title": {
+      "description": "Resource title echoed from the Offer.",
+      "type": "string"
+    },
+    "restriction_mismatches": {
+      "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "RESTRICTION_KIND_UNSPECIFIED",
+              "RESTRICTION_KIND_FUNCTION",
+              "RESTRICTION_KIND_GEOGRAPHY",
+              "RESTRICTION_KIND_USER_TYPE",
+              "RESTRICTION_KIND_OTHER"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Restriction Kind"
+      },
+      "type": "array"
+    },
+    "retrieval_endpoint": {
+      "description": "Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.",
+      "type": "string"
+    },
+    "subscription_id": {
+      "description": "If under subscription, no per-request charge.",
+      "type": "string"
+    },
+    "subscription_unit_value": {
+      "$ref": "#/$defs/fora.v1.Cost",
+      "description": "Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown)."
+    },
+    "transaction_id": {
+      "default": "",
+      "description": "Exchange-assigned transaction identifier.",
+      "type": "string"
+    }
+  },
+  "title": "Transaction Result Item",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
new file mode 100644
index 00000000..4956a558
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -0,0 +1,435 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.UpstreamRefusal.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+  "properties": {
+    "code": {
+      "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+      "maxLength": 64,
+      "minLength": 1,
+      "type": "string"
+    },
+    "detail": {
+      "$ref": "#/$defs/fora.v1.ErrorDetail",
+      "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+    },
+    "exchange": {
+      "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    }
+  },
+  "required": [
+    "code",
+    "exchange"
+  ],
+  "title": "Upstream Refusal",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
new file mode 100644
index 00000000..5a95b621
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -0,0 +1,446 @@
+{
+  "$defs": {
+    "fora.v1.CatalogRejection": {
+      "additionalProperties": false,
+      "description": "CatalogRejection — a CatalogService call could not be applied.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+                "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+                "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+                "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+                "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+                "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+                "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+                "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 9,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Catalog Rejection Reason"
+        },
+        "rejected_paths": {
+          "description": "The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Catalog Rejection",
+      "type": "object"
+    },
+    "fora.v1.DisputeFailure": {
+      "additionalProperties": false,
+      "description": "DisputeFailure — a dispute could not be filed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+                "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+                "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+                "DISPUTE_FAILURE_REASON_DUPLICATE",
+                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Dispute Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Dispute Failure",
+      "type": "object"
+    },
+    "fora.v1.DomainVerificationFailure": {
+      "additionalProperties": false,
+      "description": "DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 6,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Domain Verification Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Domain Verification Failure",
+      "type": "object"
+    },
+    "fora.v1.ErrorDetail": {
+      "additionalProperties": false,
+      "description": "ErrorDetail — the structured detail attached to every non-OK transport error.",
+      "properties": {
+        "catalog_rejection": {
+          "$ref": "#/$defs/fora.v1.CatalogRejection",
+          "description": "`reason` oneof — CatalogService rejection"
+        },
+        "dispute_failure": {
+          "$ref": "#/$defs/fora.v1.DisputeFailure",
+          "description": "`reason` oneof — DisputeTransaction filing refused"
+        },
+        "domain": {
+          "default": "",
+          "description": "Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.",
+          "type": "string"
+        },
+        "domain_verification_failure": {
+          "$ref": "#/$defs/fora.v1.DomainVerificationFailure",
+          "description": "`reason` oneof — domain verification failed"
+        },
+        "message": {
+          "default": "",
+          "description": "Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.",
+          "propertyNames": {
+            "type": "string"
+          },
+          "type": "object"
+        },
+        "registration_failure": {
+          "$ref": "#/$defs/fora.v1.RegistrationFailure",
+          "description": "`reason` oneof — agent/provider registration refused"
+        },
+        "request_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RequestAuthFailure",
+          "description": "`reason` oneof — RFC 9421 request signature on an RPC refused"
+        },
+        "retrieval_auth_failure": {
+          "$ref": "#/$defs/fora.v1.RetrievalAuthFailure",
+          "description": "`reason` oneof — signed-URL / proof-of-possession check failed"
+        },
+        "transaction_denial": {
+          "$ref": "#/$defs/fora.v1.TransactionDenial",
+          "description": "`reason` oneof — ExecuteTransaction denial"
+        },
+        "usage_report_rejection": {
+          "$ref": "#/$defs/fora.v1.UsageReportRejection",
+          "description": "`reason` oneof — ReportUsage filing rejected"
+        }
+      },
+      "title": "Error Detail",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFailure": {
+      "additionalProperties": false,
+      "description": "RegistrationFailure — a registration request could not be completed.",
+      "properties": {
+        "field_errors": {
+          "description": "When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.RegistrationFieldError"
+          },
+          "maxItems": 64,
+          "type": "array"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+                "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+                "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+                "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+                "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+                "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 7,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Registration Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Registration Failure",
+      "type": "object"
+    },
+    "fora.v1.RegistrationFieldError": {
+      "additionalProperties": false,
+      "description": "RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).",
+      "properties": {
+        "error": {
+          "description": "Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too.",
+          "maxLength": 255,
+          "minLength": 1,
+          "type": "string"
+        },
+        "path": {
+          "default": "",
+          "description": "RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.",
+          "maxLength": 255,
+          "type": "string"
+        }
+      },
+      "required": [
+        "error"
+      ],
+      "title": "Registration Field Error",
+      "type": "object"
+    },
+    "fora.v1.RequestAuthFailure": {
+      "additionalProperties": false,
+      "description": "RequestAuthFailure — an RPC request's HTTP message signature was refused.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+                "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 3,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Request Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Request Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.RetrievalAuthFailure": {
+      "additionalProperties": false,
+      "description": "RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+                "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 12,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The failure reason (defined-only, non-zero)",
+          "title": "Retrieval Auth Failure Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Retrieval Auth Failure",
+      "type": "object"
+    },
+    "fora.v1.TransactionDenial": {
+      "additionalProperties": false,
+      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "properties": {
+        "exchange": {
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "offer_id": {
+          "description": "Batch mode: the offer this denial pertains to.",
+          "type": "string"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "DENIAL_REASON_ACCOUNT_INACTIVE",
+                "DENIAL_REASON_INSUFFICIENT_BALANCE",
+                "DENIAL_REASON_RATE_LIMITED",
+                "DENIAL_REASON_CONTENT_UNAVAILABLE",
+                "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+                "DENIAL_REASON_REPORTING_OVERDUE",
+                "DENIAL_REASON_OFFER_EXPIRED",
+                "DENIAL_REASON_SIGNATURE_INVALID",
+                "DENIAL_REASON_QUOTA_EXCEEDED",
+                "DENIAL_REASON_DELEGATION_INVALID",
+                "DENIAL_REASON_SCOPE_INSUFFICIENT",
+                "DENIAL_REASON_ENTITLEMENT_MISSING",
+                "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+                "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+                "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+                "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+                "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+                "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 19,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The denial reason (defined-only, non-zero)",
+          "title": "Denial Reason"
+        },
+        "restriction_mismatches": {
+          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "items": {
+            "anyOf": [
+              {
+                "enum": [
+                  "RESTRICTION_KIND_UNSPECIFIED",
+                  "RESTRICTION_KIND_FUNCTION",
+                  "RESTRICTION_KIND_GEOGRAPHY",
+                  "RESTRICTION_KIND_USER_TYPE",
+                  "RESTRICTION_KIND_OTHER"
+                ],
+                "type": "string"
+              },
+              {
+                "maximum": 2147483647,
+                "minimum": -2147483648,
+                "type": "integer"
+              }
+            ],
+            "title": "Restriction Kind"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Transaction Denial",
+      "type": "object"
+    },
+    "fora.v1.UsageReportRejection": {
+      "additionalProperties": false,
+      "description": "UsageReportRejection — a usage report could not be accepted.",
+      "properties": {
+        "reason": {
+          "anyOf": [
+            {
+              "enum": [
+                "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+                "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+                "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+                "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 5,
+              "minimum": 1,
+              "type": "integer"
+            }
+          ],
+          "description": "The rejection reason (defined-only, non-zero)",
+          "title": "Usage Report Rejection Reason"
+        }
+      },
+      "required": [
+        "reason"
+      ],
+      "title": "Usage Report Rejection",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.UpstreamRefusal.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+  "properties": {
+    "code": {
+      "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+      "maxLength": 64,
+      "minLength": 1,
+      "type": "string"
+    },
+    "detail": {
+      "$ref": "#/$defs/fora.v1.ErrorDetail",
+      "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+    },
+    "exchange": {
+      "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    }
+  },
+  "required": [
+    "code",
+    "exchange"
+  ],
+  "title": "Upstream Refusal",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Usage.schema.json b/gen/jsonschema/fora.v1.Usage.schema.json
new file mode 100644
index 00000000..6ab8d85e
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Usage.schema.json
@@ -0,0 +1,87 @@
+{
+  "$defs": {
+    "fora.v1.AttributionDetail": {
+      "description": "AttributionDetail — Structured attribution metadata for usage reporting.",
+      "properties": {
+        "displayed_url": {
+          "description": "URL displayed to the user as the attribution link.",
+          "type": "string"
+        },
+        "format": {
+          "anyOf": [
+            {
+              "enum": [
+                "CITATION_FORMAT_LINK",
+                "CITATION_FORMAT_FOOTNOTE",
+                "CITATION_FORMAT_INLINE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How the citation was presented.",
+          "title": "Citation Format"
+        },
+        "visible_to_user": {
+          "description": "Whether the attribution was visible to the end user.",
+          "type": "boolean"
+        }
+      },
+      "title": "Attribution Detail",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Usage.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Usage — How resource was actually used by the AI system.",
+  "properties": {
+    "attribution": {
+      "description": "Structured attribution details for each citation provided.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AttributionDetail"
+      },
+      "type": "array"
+    },
+    "citation_included": {
+      "description": "Whether citation was included as required by the offer terms.",
+      "type": "boolean"
+    },
+    "consumed_quantity": {
+      "default": 0,
+      "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "consumed_unit": {
+      "description": "Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.",
+      "maxLength": 64,
+      "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+      "type": "string"
+    },
+    "displayed_to_user": {
+      "description": "Whether resource/output was displayed to a human.",
+      "type": "boolean"
+    },
+    "function": {
+      "description": "How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "subfn": {
+      "description": "Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "title": "Usage",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.Usage.schema.strict.json b/gen/jsonschema/fora.v1.Usage.schema.strict.json
new file mode 100644
index 00000000..d6823a66
--- /dev/null
+++ b/gen/jsonschema/fora.v1.Usage.schema.strict.json
@@ -0,0 +1,89 @@
+{
+  "$defs": {
+    "fora.v1.AttributionDetail": {
+      "additionalProperties": false,
+      "description": "AttributionDetail — Structured attribution metadata for usage reporting.",
+      "properties": {
+        "displayed_url": {
+          "description": "URL displayed to the user as the attribution link.",
+          "type": "string"
+        },
+        "format": {
+          "anyOf": [
+            {
+              "enum": [
+                "CITATION_FORMAT_LINK",
+                "CITATION_FORMAT_FOOTNOTE",
+                "CITATION_FORMAT_INLINE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How the citation was presented.",
+          "title": "Citation Format"
+        },
+        "visible_to_user": {
+          "description": "Whether the attribution was visible to the end user.",
+          "type": "boolean"
+        }
+      },
+      "title": "Attribution Detail",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.Usage.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Usage — How resource was actually used by the AI system.",
+  "properties": {
+    "attribution": {
+      "description": "Structured attribution details for each citation provided.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AttributionDetail"
+      },
+      "type": "array"
+    },
+    "citation_included": {
+      "description": "Whether citation was included as required by the offer terms.",
+      "type": "boolean"
+    },
+    "consumed_quantity": {
+      "default": 0,
+      "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "consumed_unit": {
+      "description": "Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.",
+      "maxLength": 64,
+      "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+      "type": "string"
+    },
+    "displayed_to_user": {
+      "description": "Whether resource/output was displayed to a human.",
+      "type": "boolean"
+    },
+    "function": {
+      "description": "How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "subfn": {
+      "description": "Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "title": "Usage",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageAsset.schema.json b/gen/jsonschema/fora.v1.UsageAsset.schema.json
new file mode 100644
index 00000000..ea30df07
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageAsset.schema.json
@@ -0,0 +1,22 @@
+{
+  "$id": "fora.v1.UsageAsset.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "UsageAsset — A single asset included in the usage report.",
+  "properties": {
+    "package_id": {
+      "description": "Package identifier",
+      "type": "string"
+    },
+    "title": {
+      "description": "Asset title",
+      "type": "string"
+    },
+    "uri": {
+      "default": "",
+      "description": "Asset URI",
+      "type": "string"
+    }
+  },
+  "title": "Usage Asset",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageAsset.schema.strict.json b/gen/jsonschema/fora.v1.UsageAsset.schema.strict.json
new file mode 100644
index 00000000..79af952b
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageAsset.schema.strict.json
@@ -0,0 +1,23 @@
+{
+  "$id": "fora.v1.UsageAsset.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "UsageAsset — A single asset included in the usage report.",
+  "properties": {
+    "package_id": {
+      "description": "Package identifier",
+      "type": "string"
+    },
+    "title": {
+      "description": "Asset title",
+      "type": "string"
+    },
+    "uri": {
+      "default": "",
+      "description": "Asset URI",
+      "type": "string"
+    }
+  },
+  "title": "Usage Asset",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
new file mode 100644
index 00000000..43fcf2ad
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -0,0 +1,172 @@
+{
+  "$defs": {
+    "fora.v1.AttributionDetail": {
+      "description": "AttributionDetail — Structured attribution metadata for usage reporting.",
+      "properties": {
+        "displayed_url": {
+          "description": "URL displayed to the user as the attribution link.",
+          "type": "string"
+        },
+        "format": {
+          "anyOf": [
+            {
+              "enum": [
+                "CITATION_FORMAT_LINK",
+                "CITATION_FORMAT_FOOTNOTE",
+                "CITATION_FORMAT_INLINE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How the citation was presented.",
+          "title": "Citation Format"
+        },
+        "visible_to_user": {
+          "description": "Whether the attribution was visible to the end user.",
+          "type": "boolean"
+        }
+      },
+      "title": "Attribution Detail",
+      "type": "object"
+    },
+    "fora.v1.Usage": {
+      "description": "Usage — How resource was actually used by the AI system.",
+      "properties": {
+        "attribution": {
+          "description": "Structured attribution details for each citation provided.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.AttributionDetail"
+          },
+          "type": "array"
+        },
+        "citation_included": {
+          "description": "Whether citation was included as required by the offer terms.",
+          "type": "boolean"
+        },
+        "consumed_quantity": {
+          "default": 0,
+          "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "consumed_unit": {
+          "description": "Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "type": "string"
+        },
+        "displayed_to_user": {
+          "description": "Whether resource/output was displayed to a human.",
+          "type": "boolean"
+        },
+        "function": {
+          "description": "How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "subfn": {
+          "description": "Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "title": "Usage",
+      "type": "object"
+    },
+    "fora.v1.UsageAsset": {
+      "description": "UsageAsset — A single asset included in the usage report.",
+      "properties": {
+        "package_id": {
+          "description": "Package identifier",
+          "type": "string"
+        },
+        "title": {
+          "description": "Asset title",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "Asset URI",
+          "type": "string"
+        }
+      },
+      "title": "Usage Asset",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.UsageReport.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.",
+  "properties": {
+    "assets": {
+      "description": "Assets that were delivered and used.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.UsageAsset"
+      },
+      "type": "array"
+    },
+    "billing_id": {
+      "default": "",
+      "description": "Billing record identifier from the delivery (TransactionResultItem.billing_id).",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "idempotency_key": {
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "timestamp": {
+      "description": "When the resource was used (ISO 8601).",
+      "format": "date-time",
+      "type": "string"
+    },
+    "transaction_id": {
+      "default": "",
+      "description": "Transaction ID from the delivery.",
+      "type": "string"
+    },
+    "usage": {
+      "$ref": "#/$defs/fora.v1.Usage",
+      "description": "How the resource was actually used."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange",
+    "idempotency_key"
+  ],
+  "title": "UsageReport — Post-usage report for a completed transaction.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
new file mode 100644
index 00000000..85e7257d
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -0,0 +1,176 @@
+{
+  "$defs": {
+    "fora.v1.AttributionDetail": {
+      "additionalProperties": false,
+      "description": "AttributionDetail — Structured attribution metadata for usage reporting.",
+      "properties": {
+        "displayed_url": {
+          "description": "URL displayed to the user as the attribution link.",
+          "type": "string"
+        },
+        "format": {
+          "anyOf": [
+            {
+              "enum": [
+                "CITATION_FORMAT_LINK",
+                "CITATION_FORMAT_FOOTNOTE",
+                "CITATION_FORMAT_INLINE"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "How the citation was presented.",
+          "title": "Citation Format"
+        },
+        "visible_to_user": {
+          "description": "Whether the attribution was visible to the end user.",
+          "type": "boolean"
+        }
+      },
+      "title": "Attribution Detail",
+      "type": "object"
+    },
+    "fora.v1.Usage": {
+      "additionalProperties": false,
+      "description": "Usage — How resource was actually used by the AI system.",
+      "properties": {
+        "attribution": {
+          "description": "Structured attribution details for each citation provided.",
+          "items": {
+            "$ref": "#/$defs/fora.v1.AttributionDetail"
+          },
+          "type": "array"
+        },
+        "citation_included": {
+          "description": "Whether citation was included as required by the offer terms.",
+          "type": "boolean"
+        },
+        "consumed_quantity": {
+          "default": 0,
+          "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        },
+        "consumed_unit": {
+          "description": "Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.",
+          "maxLength": 64,
+          "pattern": "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$",
+          "type": "string"
+        },
+        "displayed_to_user": {
+          "description": "Whether resource/output was displayed to a human.",
+          "type": "boolean"
+        },
+        "function": {
+          "description": "How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "subfn": {
+          "description": "Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "title": "Usage",
+      "type": "object"
+    },
+    "fora.v1.UsageAsset": {
+      "additionalProperties": false,
+      "description": "UsageAsset — A single asset included in the usage report.",
+      "properties": {
+        "package_id": {
+          "description": "Package identifier",
+          "type": "string"
+        },
+        "title": {
+          "description": "Asset title",
+          "type": "string"
+        },
+        "uri": {
+          "default": "",
+          "description": "Asset URI",
+          "type": "string"
+        }
+      },
+      "title": "Usage Asset",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.UsageReport.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.",
+  "properties": {
+    "assets": {
+      "description": "Assets that were delivered and used.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.UsageAsset"
+      },
+      "type": "array"
+    },
+    "billing_id": {
+      "default": "",
+      "description": "Billing record identifier from the delivery (TransactionResultItem.billing_id).",
+      "type": "string"
+    },
+    "exchange": {
+      "description": "REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "idempotency_key": {
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "maxLength": 255,
+      "minLength": 1,
+      "type": "string"
+    },
+    "timestamp": {
+      "description": "When the resource was used (ISO 8601).",
+      "format": "date-time",
+      "type": "string"
+    },
+    "transaction_id": {
+      "default": "",
+      "description": "Transaction ID from the delivery.",
+      "type": "string"
+    },
+    "usage": {
+      "$ref": "#/$defs/fora.v1.Usage",
+      "description": "How the resource was actually used."
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "exchange",
+    "idempotency_key"
+  ],
+  "title": "UsageReport — Post-usage report for a completed transaction.",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageReportRejection.schema.json b/gen/jsonschema/fora.v1.UsageReportRejection.schema.json
new file mode 100644
index 00000000..3d26aee8
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageReportRejection.schema.json
@@ -0,0 +1,33 @@
+{
+  "$id": "fora.v1.UsageReportRejection.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "UsageReportRejection — a usage report could not be accepted.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+            "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+            "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+            "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+            "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 5,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The rejection reason (defined-only, non-zero)",
+      "title": "Usage Report Rejection Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Usage Report Rejection",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json b/gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json
new file mode 100644
index 00000000..4ba13fe3
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json
@@ -0,0 +1,34 @@
+{
+  "$id": "fora.v1.UsageReportRejection.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "UsageReportRejection — a usage report could not be accepted.",
+  "properties": {
+    "reason": {
+      "anyOf": [
+        {
+          "enum": [
+            "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+            "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+            "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+            "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+            "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 5,
+          "minimum": 1,
+          "type": "integer"
+        }
+      ],
+      "description": "The rejection reason (defined-only, non-zero)",
+      "title": "Usage Report Rejection Reason"
+    }
+  },
+  "required": [
+    "reason"
+  ],
+  "title": "Usage Report Rejection",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
new file mode 100644
index 00000000..833ff34b
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
@@ -0,0 +1,30 @@
+{
+  "$id": "fora.v1.UsageReportResponse.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "UsageReportResponse — Acknowledgment of a usage report.",
+  "properties": {
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "report_id": {
+      "default": "",
+      "description": "Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Usage Report Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
new file mode 100644
index 00000000..0a6cdea3
--- /dev/null
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
@@ -0,0 +1,31 @@
+{
+  "$id": "fora.v1.UsageReportResponse.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "UsageReportResponse — Acknowledgment of a usage report.",
+  "properties": {
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "report_id": {
+      "default": "",
+      "description": "Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.",
+      "type": "string"
+    }
+  },
+  "title": "Usage Report Response",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.json b/gen/jsonschema/fora.v1.WBAFile.schema.json
new file mode 100644
index 00000000..71d6919a
--- /dev/null
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.json
@@ -0,0 +1,64 @@
+{
+  "$defs": {
+    "fora.v1.JsonWebKey": {
+      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+      "properties": {
+        "alg": {
+          "default": "",
+          "description": "Signing algorithm. FORA v1.0: MUST be \"EdDSA\".",
+          "type": "string"
+        },
+        "crv": {
+          "default": "",
+          "description": "Curve. FORA v1.0: MUST be \"Ed25519\".",
+          "type": "string"
+        },
+        "kty": {
+          "default": "",
+          "description": "Key type. FORA v1.0: MUST be \"OKP\".",
+          "type": "string"
+        },
+        "not_after": {
+          "default": "",
+          "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+          "type": "string"
+        },
+        "not_before": {
+          "default": "",
+          "description": "RFC3339 timestamp. Key is invalid before this instant.",
+          "type": "string"
+        },
+        "use": {
+          "default": "",
+          "description": "Intended key use. FORA v1.0: MUST be \"sig\".",
+          "type": "string"
+        },
+        "x": {
+          "default": "",
+          "description": "base64url-encoded 32-byte Ed25519 public key.",
+          "type": "string"
+        }
+      },
+      "title": "JsonWebKey — Inline RFC 7517 JWK object.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.WBAFile.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
+  "properties": {
+    "keys": {
+      "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.JsonWebKey"
+      },
+      "type": "array"
+    },
+    "revocation_url": {
+      "description": "Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.",
+      "type": "string"
+    }
+  },
+  "title": "WBA File",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.strict.json b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
new file mode 100644
index 00000000..4cddcd71
--- /dev/null
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
@@ -0,0 +1,66 @@
+{
+  "$defs": {
+    "fora.v1.JsonWebKey": {
+      "additionalProperties": false,
+      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+      "properties": {
+        "alg": {
+          "default": "",
+          "description": "Signing algorithm. FORA v1.0: MUST be \"EdDSA\".",
+          "type": "string"
+        },
+        "crv": {
+          "default": "",
+          "description": "Curve. FORA v1.0: MUST be \"Ed25519\".",
+          "type": "string"
+        },
+        "kty": {
+          "default": "",
+          "description": "Key type. FORA v1.0: MUST be \"OKP\".",
+          "type": "string"
+        },
+        "not_after": {
+          "default": "",
+          "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+          "type": "string"
+        },
+        "not_before": {
+          "default": "",
+          "description": "RFC3339 timestamp. Key is invalid before this instant.",
+          "type": "string"
+        },
+        "use": {
+          "default": "",
+          "description": "Intended key use. FORA v1.0: MUST be \"sig\".",
+          "type": "string"
+        },
+        "x": {
+          "default": "",
+          "description": "base64url-encoded 32-byte Ed25519 public key.",
+          "type": "string"
+        }
+      },
+      "title": "JsonWebKey — Inline RFC 7517 JWK object.",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.WBAFile.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
+  "properties": {
+    "keys": {
+      "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.JsonWebKey"
+      },
+      "type": "array"
+    },
+    "revocation_url": {
+      "description": "Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.",
+      "type": "string"
+    }
+  },
+  "title": "WBA File",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.WellKnownManifest.schema.json b/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
new file mode 100644
index 00000000..e0c79022
--- /dev/null
+++ b/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
@@ -0,0 +1,311 @@
+{
+  "$defs": {
+    "fora.v1.AccountRegistration": {
+      "description": "AccountRegistration — how to open an account at this Exchange. Published as an\n optional block on WellKnownManifest; an Exchange that omits the whole block\n keeps today's behaviour, accepting RegisterRequest.registration_data\n uninspected. The block exists rather than a flat field because registration\n has more than one publishable facet: `data_schema` describes the API mode\n below, and field 2 is deliberately left free for a future web mode — a URL to\n a registration page on the Exchange's own site, where a human completes the\n steps an API call cannot carry (explicit terms confirmation, identity checks,\n manual review). Flat siblings on a manifest this size would give a reader no\n signal that they are one subject. Precedence between the modes is fixed now,\n before both can be published: an Exchange that publishes `data_schema` MUST\n accept registration through the API, and a registration URL is an additional\n option an agent MAY offer its user instead — never a replacement for the API\n path. An Exchange that wants web-only registration publishes the URL and no\n schema. Note that terms versioning is NOT in this block: WellKnownManifest.\n terms_digest sits at the top level so an Exchange with pass-through\n registration can still pin which terms document it is serving.",
+      "properties": {
+        "data_schema": {
+          "description": "The gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.",
+          "title": "JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.",
+          "type": "object"
+        }
+      },
+      "title": "Account Registration",
+      "type": "object"
+    },
+    "fora.v1.AuthorizedExchange": {
+      "description": "AuthorizedExchange — A Exchange authorized to sell this provider's resources.",
+      "properties": {
+        "domain": {
+          "description": "Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "endpoint": {
+          "default": "",
+          "description": "FORA ExchangeService endpoint URL.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "relationship": {
+          "anyOf": [
+            {
+              "enum": [
+                "PROVIDER_RELATIONSHIP_DIRECT",
+                "PROVIDER_RELATIONSHIP_RESELLER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Relationship type (mirrors ads.txt DIRECT/RESELLER).",
+          "title": "Provider Relationship"
+        }
+      },
+      "required": [
+        "domain",
+        "relationship"
+      ],
+      "title": "Authorized Exchange",
+      "type": "object"
+    },
+    "fora.v1.CatalogContributor": {
+      "description": "CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.",
+      "properties": {
+        "domain": {
+          "default": "",
+          "description": "Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").",
+          "type": "string"
+        },
+        "relationship": {
+          "default": "",
+          "description": "Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).",
+          "type": "string"
+        }
+      },
+      "title": "Catalog Contributor",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.WellKnownManifest.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Commercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`.",
+  "properties": {
+    "accepted_verifiers": {
+      "description": "Exchange-only. Trusted attestation verification vendors (domains).",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "account_registration": {
+      "$ref": "#/$defs/fora.v1.AccountRegistration",
+      "description": "Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed."
+    },
+    "base_currency": {
+      "description": "Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.",
+      "type": "string"
+    },
+    "catalog_contributors": {
+      "description": "Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.CatalogContributor"
+      },
+      "type": "array"
+    },
+    "catalog_endpoint": {
+      "description": "Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.",
+      "type": "string"
+    },
+    "contact": {
+      "description": "Contact email (licensing, integration, security).",
+      "type": "string"
+    },
+    "delivery_methods_supported": {
+      "description": "Exchange-only. Supported delivery methods.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "DELIVERY_METHOD_UNSPECIFIED",
+              "DELIVERY_METHOD_DIRECT",
+              "DELIVERY_METHOD_INSTRUCTIONS",
+              "DELIVERY_METHOD_STREAMING"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Delivery Method"
+      },
+      "type": "array"
+    },
+    "domain": {
+      "default": "",
+      "description": "Canonical domain serving this manifest.",
+      "type": "string"
+    },
+    "endpoint": {
+      "description": "Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.",
+      "type": "string"
+    },
+    "exchanges": {
+      "description": "Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AuthorizedExchange"
+      },
+      "type": "array"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "gnap_grant_endpoint": {
+      "description": "Exchange-only. GNAP grant endpoint when GNAP is supported.",
+      "type": "string"
+    },
+    "hash_methods_supported": {
+      "description": "Exchange-only. Accepted resource hash methods for attestation\n verification.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "health_endpoint": {
+      "description": "Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.",
+      "type": "string"
+    },
+    "max_intermediary_hops": {
+      "description": "Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "name": {
+      "description": "Exchange-only. Human-readable Exchange name.",
+      "type": "string"
+    },
+    "oidc_issuer": {
+      "description": "Exchange-only. OIDC Discovery URL when OAuth methods are supported.",
+      "type": "string"
+    },
+    "operator": {
+      "description": "Exchange-only. Organization operating this Exchange.",
+      "type": "string"
+    },
+    "operator_domain": {
+      "description": "Exchange-only. Operator's corporate domain (may differ from domain).",
+      "type": "string"
+    },
+    "pricing_models_supported": {
+      "description": "Exchange-only. Supported pricing models.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "PRICING_MODEL_UNSPECIFIED",
+              "PRICING_MODEL_FREE",
+              "PRICING_MODEL_PER_UNIT",
+              "PRICING_MODEL_FLAT"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Pricing Model"
+      },
+      "type": "array"
+    },
+    "privacy_uri": {
+      "description": "Exchange-only. Privacy policy URL.",
+      "type": "string"
+    },
+    "protocol_versions_supported": {
+      "description": "Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "role": {
+      "anyOf": [
+        {
+          "enum": [
+            "ROLE_AGENT",
+            "ROLE_EXCHANGE",
+            "ROLE_BROKER",
+            "ROLE_PUBLISHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Role this manifest describes.",
+      "title": "Role"
+    },
+    "supported_auth_methods": {
+      "description": "Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "AUTH_METHOD_UNSPECIFIED",
+              "AUTH_METHOD_GNAP",
+              "AUTH_METHOD_OAUTH_DPOP",
+              "AUTH_METHOD_OAUTH_BEARER",
+              "AUTH_METHOD_OAUTH_MTLS"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Auth Method"
+      },
+      "type": "array"
+    },
+    "supported_profiles": {
+      "description": "Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "terms_digest": {
+      "description": "Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "type": "string"
+    },
+    "terms_uri": {
+      "description": "Exchange-only. Terms of service URL.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "Consumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.",
+      "title": "Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "role"
+  ],
+  "title": "WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json b/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
new file mode 100644
index 00000000..9b934f29
--- /dev/null
+++ b/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
@@ -0,0 +1,315 @@
+{
+  "$defs": {
+    "fora.v1.AccountRegistration": {
+      "additionalProperties": false,
+      "description": "AccountRegistration — how to open an account at this Exchange. Published as an\n optional block on WellKnownManifest; an Exchange that omits the whole block\n keeps today's behaviour, accepting RegisterRequest.registration_data\n uninspected. The block exists rather than a flat field because registration\n has more than one publishable facet: `data_schema` describes the API mode\n below, and field 2 is deliberately left free for a future web mode — a URL to\n a registration page on the Exchange's own site, where a human completes the\n steps an API call cannot carry (explicit terms confirmation, identity checks,\n manual review). Flat siblings on a manifest this size would give a reader no\n signal that they are one subject. Precedence between the modes is fixed now,\n before both can be published: an Exchange that publishes `data_schema` MUST\n accept registration through the API, and a registration URL is an additional\n option an agent MAY offer its user instead — never a replacement for the API\n path. An Exchange that wants web-only registration publishes the URL and no\n schema. Note that terms versioning is NOT in this block: WellKnownManifest.\n terms_digest sits at the top level so an Exchange with pass-through\n registration can still pin which terms document it is serving.",
+      "properties": {
+        "data_schema": {
+          "description": "The gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.",
+          "title": "JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.",
+          "type": "object"
+        }
+      },
+      "title": "Account Registration",
+      "type": "object"
+    },
+    "fora.v1.AuthorizedExchange": {
+      "additionalProperties": false,
+      "description": "AuthorizedExchange — A Exchange authorized to sell this provider's resources.",
+      "properties": {
+        "domain": {
+          "description": "Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "endpoint": {
+          "default": "",
+          "description": "FORA ExchangeService endpoint URL.",
+          "type": "string"
+        },
+        "ext": {
+          "description": "Extension point",
+          "type": "object"
+        },
+        "ext_critical": {
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "relationship": {
+          "anyOf": [
+            {
+              "enum": [
+                "PROVIDER_RELATIONSHIP_DIRECT",
+                "PROVIDER_RELATIONSHIP_RESELLER"
+              ],
+              "type": "string"
+            },
+            {
+              "maximum": 2147483647,
+              "minimum": -2147483648,
+              "type": "integer"
+            }
+          ],
+          "description": "Relationship type (mirrors ads.txt DIRECT/RESELLER).",
+          "title": "Provider Relationship"
+        }
+      },
+      "required": [
+        "domain",
+        "relationship"
+      ],
+      "title": "Authorized Exchange",
+      "type": "object"
+    },
+    "fora.v1.CatalogContributor": {
+      "additionalProperties": false,
+      "description": "CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.",
+      "properties": {
+        "domain": {
+          "default": "",
+          "description": "Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").",
+          "type": "string"
+        },
+        "relationship": {
+          "default": "",
+          "description": "Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).",
+          "type": "string"
+        }
+      },
+      "title": "Catalog Contributor",
+      "type": "object"
+    }
+  },
+  "$id": "fora.v1.WellKnownManifest.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "Commercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`.",
+  "properties": {
+    "accepted_verifiers": {
+      "description": "Exchange-only. Trusted attestation verification vendors (domains).",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "account_registration": {
+      "$ref": "#/$defs/fora.v1.AccountRegistration",
+      "description": "Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed."
+    },
+    "base_currency": {
+      "description": "Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.",
+      "type": "string"
+    },
+    "catalog_contributors": {
+      "description": "Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.CatalogContributor"
+      },
+      "type": "array"
+    },
+    "catalog_endpoint": {
+      "description": "Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.",
+      "type": "string"
+    },
+    "contact": {
+      "description": "Contact email (licensing, integration, security).",
+      "type": "string"
+    },
+    "delivery_methods_supported": {
+      "description": "Exchange-only. Supported delivery methods.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "DELIVERY_METHOD_UNSPECIFIED",
+              "DELIVERY_METHOD_DIRECT",
+              "DELIVERY_METHOD_INSTRUCTIONS",
+              "DELIVERY_METHOD_STREAMING"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Delivery Method"
+      },
+      "type": "array"
+    },
+    "domain": {
+      "default": "",
+      "description": "Canonical domain serving this manifest.",
+      "type": "string"
+    },
+    "endpoint": {
+      "description": "Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.",
+      "type": "string"
+    },
+    "exchanges": {
+      "description": "Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.AuthorizedExchange"
+      },
+      "type": "array"
+    },
+    "ext": {
+      "description": "Extension point",
+      "type": "object"
+    },
+    "ext_critical": {
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "gnap_grant_endpoint": {
+      "description": "Exchange-only. GNAP grant endpoint when GNAP is supported.",
+      "type": "string"
+    },
+    "hash_methods_supported": {
+      "description": "Exchange-only. Accepted resource hash methods for attestation\n verification.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "health_endpoint": {
+      "description": "Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.",
+      "type": "string"
+    },
+    "max_intermediary_hops": {
+      "description": "Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).",
+      "maximum": 2147483647,
+      "minimum": -2147483648,
+      "type": "integer"
+    },
+    "name": {
+      "description": "Exchange-only. Human-readable Exchange name.",
+      "type": "string"
+    },
+    "oidc_issuer": {
+      "description": "Exchange-only. OIDC Discovery URL when OAuth methods are supported.",
+      "type": "string"
+    },
+    "operator": {
+      "description": "Exchange-only. Organization operating this Exchange.",
+      "type": "string"
+    },
+    "operator_domain": {
+      "description": "Exchange-only. Operator's corporate domain (may differ from domain).",
+      "type": "string"
+    },
+    "pricing_models_supported": {
+      "description": "Exchange-only. Supported pricing models.",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "PRICING_MODEL_UNSPECIFIED",
+              "PRICING_MODEL_FREE",
+              "PRICING_MODEL_PER_UNIT",
+              "PRICING_MODEL_FLAT"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Pricing Model"
+      },
+      "type": "array"
+    },
+    "privacy_uri": {
+      "description": "Exchange-only. Privacy policy URL.",
+      "type": "string"
+    },
+    "protocol_versions_supported": {
+      "description": "Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "role": {
+      "anyOf": [
+        {
+          "enum": [
+            "ROLE_AGENT",
+            "ROLE_EXCHANGE",
+            "ROLE_BROKER",
+            "ROLE_PUBLISHER"
+          ],
+          "type": "string"
+        },
+        {
+          "maximum": 2147483647,
+          "minimum": -2147483648,
+          "type": "integer"
+        }
+      ],
+      "description": "Role this manifest describes.",
+      "title": "Role"
+    },
+    "supported_auth_methods": {
+      "description": "Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).",
+      "items": {
+        "anyOf": [
+          {
+            "enum": [
+              "AUTH_METHOD_UNSPECIFIED",
+              "AUTH_METHOD_GNAP",
+              "AUTH_METHOD_OAUTH_DPOP",
+              "AUTH_METHOD_OAUTH_BEARER",
+              "AUTH_METHOD_OAUTH_MTLS"
+            ],
+            "type": "string"
+          },
+          {
+            "maximum": 2147483647,
+            "minimum": -2147483648,
+            "type": "integer"
+          }
+        ],
+        "title": "Auth Method"
+      },
+      "type": "array"
+    },
+    "supported_profiles": {
+      "description": "Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.",
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "terms_digest": {
+      "description": "Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.",
+      "pattern": "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$",
+      "type": "string"
+    },
+    "terms_uri": {
+      "description": "Exchange-only. Terms of service URL.",
+      "type": "string"
+    },
+    "ver": {
+      "default": "",
+      "description": "Consumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.",
+      "title": "Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "role"
+  ],
+  "title": "WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).",
+  "type": "object"
+}
diff --git a/gen/jsonschema/jsonschema.go b/gen/jsonschema/jsonschema.go
new file mode 100644
index 00000000..1b0da496
--- /dev/null
+++ b/gen/jsonschema/jsonschema.go
@@ -0,0 +1,42 @@
+// Package jsonschema ships the published JSON Schemas of the FORA wire messages.
+//
+// The directory holds one self-contained draft 2020-12 schema per message of the wire
+// contract, named by the fully-qualified message name, in two variants:
+//
+//	fora.v1.ResourceResponse.schema.json         unknown fields accepted
+//	fora.v1.ResourceResponse.schema.strict.json  unknown fields refused at every depth
+//
+// The schema files are generated by scripts/gen-sdk-types.sh and checked against the
+// proto by the drift gate; this file is hand-written. FS embeds them, so a Go program
+// reads the schemas of the module version it pins without locating the module cache.
+// README.md in this directory records the wire decisions the schemas encode.
+package jsonschema
+
+import (
+	"embed"
+	"fmt"
+	"io/fs"
+)
+
+// FS holds every published schema file, at the root of the file system.
+//
+//go:embed *.json
+var FS embed.FS
+
+// Load returns the schema of the message name, for example "fora.v1.ResourceResponse".
+// strict selects the variant that refuses unknown fields. An unknown name is an error
+// that wraps fs.ErrNotExist.
+func Load(name string, strict bool) ([]byte, error) {
+	file := name + ".schema.json"
+	if strict {
+		file = name + ".schema.strict.json"
+	}
+	if !fs.ValidPath(file) {
+		return nil, fmt.Errorf("jsonschema: invalid message name %q: %w", name, fs.ErrNotExist)
+	}
+	b, err := FS.ReadFile(file)
+	if err != nil {
+		return nil, fmt.Errorf("jsonschema: no published schema for message %q: %w", name, err)
+	}
+	return b, nil
+}
diff --git a/gen/python/README.md b/gen/python/README.md
index e6c109c2..8122bd59 100644
--- a/gen/python/README.md
+++ b/gen/python/README.md
@@ -17,6 +17,13 @@ Contents:
   string patterns, length/item bounds. Nested messages reference the same model
   (`LicenseTerm.license` is a `License`), so the whole tree hydrates as typed models.
   **Cross-field rules are NOT here** — enforced server-side by the Exchange/Broker.
+- `wire/schemas.py` — **`load(name, strict=False)`** and **`names()`**: the published JSON
+  Schemas (draft 2020-12), one self-contained file per message, shipped as package data
+  under `wire/jsonschema/`. `strict=True` selects the variant that refuses unknown fields
+  at every depth; a conformance check uses it. The files are generated into
+  [`gen/jsonschema/`](../jsonschema) (in this repository `wire/jsonschema` is a symlink to
+  it), whose README records how they treat field naming, `google.protobuf.Struct` and
+  64-bit integers. **Hand-written loader; needs no validator library.**
 - `vocab/` — registered vocabulary constants per axis (`pricingunits`, …) with
   `is_registered()`, plus the accepted aliases authored beside the tokens (`ALIASES`,
   `canonical()` — an exact lookup; the SDK folds case before it looks up).
@@ -27,6 +34,10 @@ from wire.base import WireModel          # subclass this to customize ALL models
 
 term = LicenseTerm.model_validate(incoming_json)   # raises on shape/per-field violations
 assert isinstance(term.license, License)           # full nested hierarchy, typed
+
+from jsonschema import Draft202012Validator        # any draft 2020-12 validator
+from wire import schemas
+Draft202012Validator(schemas.load("fora.v1.LicenseTerm", strict=True)).validate(incoming_json)
 ```
 
 Install (from this directory): `pip install .`
diff --git a/gen/python/pyproject.toml b/gen/python/pyproject.toml
index 10945548..51b4b0dc 100644
--- a/gen/python/pyproject.toml
+++ b/gen/python/pyproject.toml
@@ -1,7 +1,8 @@
 # Packaging for the generated FORA Python types export (mirrors gen/ts/package.json).
-# wire/models.py and vocab/* are generated from proto/ by scripts/gen-sdk-types.sh — do
-# not edit them by hand. Only this file, README.md, and the hand-written wire/base.py
-# seam are authored.
+# wire/models.py, wire/unique.py, vocab/* and the schemas under wire/jsonschema/ are
+# generated from proto/ by scripts/gen-sdk-types.sh (and buf) — do not edit them by hand.
+# Only this file, README.md, and the hand-written wire/base.py, wire/names.py and
+# wire/schemas.py are authored.
 [build-system]
 requires = ["setuptools>=77"] # license-files (PEP 639)
 build-backend = "setuptools.build_meta"
@@ -9,7 +10,7 @@ build-backend = "setuptools.build_meta"
 [project]
 name = "fora-protocol"
 version = "1.0.8"
-description = "Generated types export for Python: Pydantic v2 models (wire.models, extending wire.base.WireModel) + registered vocabulary constants (vocab.*), generated from the proto via JSON Schema."
+description = "Generated types export for Python: Pydantic v2 models (wire.models, extending wire.base.WireModel), registered vocabulary constants (vocab.*) and the published per-message JSON Schemas (wire.schemas.load), generated from the proto via JSON Schema."
 readme = "README.md"
 requires-python = ">=3.9"
 license = "Apache-2.0"
@@ -31,7 +32,10 @@ namespaces = true
 include = ["wire*", "vocab*"]
 
 # The inline-types marker, one per namespace package (a namespace package has no
-# __init__.py to carry it), in the wheel and the sdist.
+# __init__.py to carry it), in the wheel and the sdist. wire/jsonschema/ holds the
+# published JSON Schemas wire.schemas.load reads. In the repository it is a symlink to
+# gen/jsonschema/ (one generated copy, drift-gated there); the sdist stores the files
+# themselves, so the wheel built from it carries them too.
 [tool.setuptools.package-data]
-wire = ["py.typed"]
+wire = ["py.typed", "jsonschema/*.json"]
 vocab = ["py.typed"]
diff --git a/gen/python/tests/test_jsonschema.py b/gen/python/tests/test_jsonschema.py
new file mode 100644
index 00000000..436cf0d2
--- /dev/null
+++ b/gen/python/tests/test_jsonschema.py
@@ -0,0 +1,135 @@
+"""The published JSON Schemas (gen/jsonschema/), read through the package loader.
+
+wire.schemas.load is how a Python consumer reaches the schemas at the pinned version, so
+every assertion here goes through it. The validator is jsonschema's draft 2020-12 engine,
+the dialect the schemas declare.
+
+What is pinned:
+  - the loader resolves every contract message in both variants, and refuses a name it
+    does not ship;
+  - the strict variant refuses an unknown field at the top level and nested, and refuses
+    a camelCase alias, while the default variant accepts both (forward compatibility);
+  - google.protobuf.Struct (`ext`) stays open in the strict variant, at any depth;
+  - buf.validate constraints fail the schema: an empty required string, an omitted
+    required field, a numeric bound in either 64-bit integer form;
+  - both variants reach Go protovalidate's verdict on every case of the conformance
+    corpus, the same oracle the generated Pydantic and Zod models are held to.
+
+Run:  PYTHONPATH=gen/python python3 -m pytest gen/python/tests/test_jsonschema.py -q
+"""
+import copy
+import json
+import pathlib
+
+import pytest
+from jsonschema import Draft202012Validator
+
+from wire import schemas
+
+ROOT = pathlib.Path(__file__).resolve().parents[3]
+CASES = json.loads((ROOT / "conformance" / "corpus" / "cases.json").read_text())
+BY_BARE = {n.rsplit(".", 1)[1]: n for n in schemas.names()}
+
+OFFER = next(c["json"] for c in CASES if c["id"] == "Offer/valid")
+RESPONSE = {"exchange": "exchange.example", "offers": [OFFER]}
+
+
+def accepts(name, instance, strict):
+    schema = schemas.load(name, strict=strict)
+    Draft202012Validator.check_schema(schema)
+    return Draft202012Validator(schema).is_valid(instance)
+
+
+def with_offer(**extra):
+    body = copy.deepcopy(RESPONSE)
+    body["offers"][0].update(extra)
+    return body
+
+
+def test_loader_resolves_every_message_in_both_variants():
+    names = schemas.names()
+    assert "fora.v1.ResourceResponse" in names
+    assert "fora.admin.v1.ReportingPolicy" in names
+    for name in names:
+        assert schemas.load(name)["$id"] == f"{name}.schema.json"
+        assert schemas.load(name, strict=True)["$id"] == f"{name}.schema.strict.json"
+
+
+def test_loader_refuses_an_unknown_name():
+    with pytest.raises(KeyError):
+        schemas.load("fora.v1.NoSuchMessage")
+    with pytest.raises(KeyError):
+        schemas.load("../jsonschema/fora.v1.ResourceResponse")
+
+
+def test_loader_returns_a_fresh_copy():
+    schemas.load("fora.v1.ResourceResponse")["properties"].clear()
+    assert "exchange" in schemas.load("fora.v1.ResourceResponse")["properties"]
+
+
+def test_valid_message_passes_both_variants():
+    assert accepts("fora.v1.ResourceResponse", RESPONSE, strict=False)
+    assert accepts("fora.v1.ResourceResponse", RESPONSE, strict=True)
+
+
+@pytest.mark.parametrize(
+    "body",
+    [
+        {**RESPONSE, "unknown_field": 1},  # top level
+        with_offer(unknown_field=1),  # inside a nested message
+        {**RESPONSE, "offerGroups": []},  # the camelCase alias of offer_groups
+    ],
+    ids=["top-level", "nested", "camelCase-alias"],
+)
+def test_strict_refuses_an_unknown_field_and_default_accepts_it(body):
+    assert not accepts("fora.v1.ResourceResponse", body, strict=True)
+    assert accepts("fora.v1.ResourceResponse", body, strict=False)
+
+
+def test_strict_keeps_struct_open_at_any_depth():
+    ext = {"vendor": {"nested": {"deeper": [1, "two"]}}, "flag": True}
+    body = with_offer(ext=ext)
+    body["ext"] = ext
+    assert accepts("fora.v1.ResourceResponse", body, strict=True)
+
+
+@pytest.mark.parametrize("strict", [False, True], ids=["default", "strict"])
+def test_empty_required_string_fails(strict):
+    # exchange carries a non-empty pattern: Go protovalidate rejects "".
+    assert not accepts("fora.v1.ResourceResponse", {"exchange": ""}, strict)
+    # proto-JSON omits a zero value, so omission is the same "" and fails too.
+    assert not accepts("fora.v1.ResourceResponse", {}, strict)
+
+
+@pytest.mark.parametrize("strict", [False, True], ids=["default", "strict"])
+@pytest.mark.parametrize(
+    "limit,valid",
+    [("1", True), (1, True), ("9007199254740993", True), ("0", False), (0, False),
+     ("-1", False), ("1.5", False), ("one", False)],
+)
+def test_int64_accepts_both_forms_and_enforces_the_bound_on_each(limit, valid, strict):
+    # Quota.limit is int64 with gte 1. Canonical proto-JSON emits it as a decimal string;
+    # the SDKs send a JSON number.
+    quota = {"limit": limit, "metric": "accesses", "window": "QUOTA_WINDOW_DAILY"}
+    assert accepts("fora.v1.Quota", quota, strict) is valid
+
+
+@pytest.mark.parametrize("strict", [False, True], ids=["default", "strict"])
+def test_bounded_double_has_no_string_bypass(strict):
+    # quantity_tolerance is a double bounded to [0, 1]; the string form is not accepted,
+    # so "1000" cannot get past the bound.
+    base = {"tenant_id": "t"}
+    assert accepts("fora.admin.v1.ReportingPolicy", {**base, "quantity_tolerance": 0.5}, strict)
+    assert not accepts("fora.admin.v1.ReportingPolicy", {**base, "quantity_tolerance": 2}, strict)
+    assert not accepts("fora.admin.v1.ReportingPolicy", {**base, "quantity_tolerance": "1000"}, strict)
+
+
+@pytest.mark.parametrize("strict", [False, True], ids=["default", "strict"])
+@pytest.mark.parametrize("case", CASES, ids=[c["id"] for c in CASES])
+def test_schema_matches_go_verdict(case, strict):
+    name = BY_BARE[case["message"]]
+    accepted = accepts(name, case["json"], strict)
+    assert accepted == case["valid"], (
+        f"{case['id']}: {name} ({'strict' if strict else 'default'}) accepted={accepted} "
+        f"but Go verdict valid={case['valid']} (rules={case.get('rules')})"
+    )
diff --git a/gen/python/wire/jsonschema b/gen/python/wire/jsonschema
new file mode 120000
index 00000000..780c8ab3
--- /dev/null
+++ b/gen/python/wire/jsonschema
@@ -0,0 +1 @@
+../../jsonschema
\ No newline at end of file
diff --git a/gen/python/wire/schemas.py b/gen/python/wire/schemas.py
new file mode 100644
index 00000000..d18c0ecc
--- /dev/null
+++ b/gen/python/wire/schemas.py
@@ -0,0 +1,53 @@
+"""The published JSON Schemas for the FORA wire messages, shipped as package data.
+
+One self-contained draft 2020-12 schema per message of the wire contract, named by the
+fully-qualified message name, in two variants:
+
+- default (``strict=False``): unknown fields are accepted, as the generated models do;
+- strict (``strict=True``): ``additionalProperties: false`` on every message object at
+  every depth, so an unknown or misspelled field fails. A conformance check uses this
+  variant. ``google.protobuf.Struct`` fields (``ext``) stay open in both.
+
+Both describe canonical proto-JSON as the FORA wire carries it: snake_case proto field
+names, 64-bit integers as a decimal string or a JSON integer, and the per-field
+``buf.validate`` constraints. Cross-field rules are not in the schemas.
+
+Hand-written: the schemas are generated into ``gen/jsonschema/`` by
+``scripts/gen-sdk-types.sh``, and this module only reads them. It needs no validator;
+pass the returned schema to one, for example ``jsonschema``::
+
+    from jsonschema import Draft202012Validator
+    from wire import schemas
+
+    Draft202012Validator(schemas.load("fora.v1.ResourceResponse", strict=True)).validate(body)
+"""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Any, Dict, List
+
+__all__ = ["load", "names"]
+
+_DIR = Path(__file__).resolve().parent / "jsonschema"
+_DEFAULT = ".schema.json"
+_STRICT = ".schema.strict.json"
+
+
+def names() -> List[str]:
+    """The fully-qualified names of every message with a published schema, sorted."""
+    return sorted(p.name[: -len(_DEFAULT)] for p in _DIR.glob("*" + _DEFAULT))
+
+
+def load(name: str, *, strict: bool = False) -> Dict[str, Any]:
+    """The schema of the message ``name`` (for example ``"fora.v1.ResourceResponse"``).
+
+    ``strict=True`` selects the variant that refuses unknown fields. Each call returns a
+    fresh dict, so a caller may modify it. An unknown name raises ``KeyError``.
+    """
+    if name not in names():
+        raise KeyError(f"no published JSON Schema for message {name!r}")
+    path = _DIR / (name + (_STRICT if strict else _DEFAULT))
+    schema: Dict[str, Any] = json.loads(path.read_text(encoding="utf-8"))
+    return schema
diff --git a/package.json b/package.json
index fb516c01..ad006dac 100644
--- a/package.json
+++ b/package.json
@@ -6,7 +6,8 @@
   "description": "FORA protocol SDK for TypeScript — the IO-free protocol mechanics (signing, verification, canonicalization) plus the IO tiers built on them: the key/endpoint resolvers and the Connect-unary JSON client. Exposed at the repo root so plain npm — which has no git-subdirectory support — can pin the TS SDK by commit as a whole-repo git dependency (parity with the Go/pip git+subdir+rev pins). Re-exports sdk/ts, which compiles the in-repo gen/ts by relative path. Self-contained packaging and npm publish are not yet implemented.",
   "files": [
     "sdk/ts",
-    "gen/ts"
+    "gen/ts",
+    "gen/jsonschema"
   ],
   "exports": {
     "./base64url": "./sdk/ts/src/base64url.ts",
@@ -37,7 +38,8 @@
     "./hono": "./sdk/ts/hono/middleware.ts",
     "./acceptance": "./sdk/ts/src/acceptance.ts",
     "./resolvers": "./sdk/ts/resolvers/index.ts",
-    "./client": "./sdk/ts/client/index.ts"
+    "./client": "./sdk/ts/client/index.ts",
+    "./jsonschema/*": "./gen/jsonschema/*"
   },
   "dependencies": {
     "ajv": "^8.20.0",
diff --git a/scripts/ci-local.sh b/scripts/ci-local.sh
index 2b143706..12a063b4 100755
--- a/scripts/ci-local.sh
+++ b/scripts/ci-local.sh
@@ -6,8 +6,8 @@
 # steps), so CI and local cannot drift.
 #
 # Coverage: the proto gate (lint/generate/drift/build/test/docs) AND the SDK types
-# export gate (regenerate gen-sdk-types + drift + Pydantic/Zod parity + canonical
-# round-trip). The two run as SEPARATE CI workflows (proto-ci.yml + sdk-types-ci.yml,
+# export gate (regenerate gen-sdk-types + drift of the Pydantic/Zod models and the
+# published JSON Schemas + their parity with the Go oracle + canonical round-trip). The two run as SEPARATE CI workflows (proto-ci.yml + sdk-types-ci.yml,
 # path-filtered); locally they are one command. proto-ci.yml sets
 # FORA_CI_SKIP_SDK_TYPES=1 so it keeps mirroring proto-ci only (sdk-types-ci.yml owns
 # the sdk-types gate in CI); the block also self-skips if python3/npm are absent.
@@ -116,22 +116,26 @@ elif ! command -v python3 >/dev/null 2>&1 || ! command -v npm >/dev/null 2>&1; t
   step "sdk-types export gate"
   note "skipped — needs python3 + npm"
 else
-  step "regenerate SDK types export (Pydantic + Zod) + drift"
+  step "regenerate SDK types export (Pydantic + Zod) + published JSON Schemas + drift"
   ./scripts/gen-sdk-types.sh || fail=1
-  # Whole directories, not a file list: a NEW generated file (e.g. wire/unique.py) is then
-  # gated the day it is emitted. The untracked sweep is load-bearing — `git diff` cannot see
-  # a file that was generated but never committed, so a file list alone would pass green.
-  # base.py / base.ts are hand-written seams and never regenerated, so they cannot drift.
-  if ! git diff --quiet HEAD -- gen/python/wire gen/ts/wire \
-     || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire)" ]; then
-    echo "::error:: SDK types export out of sync — run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/."
-    git status --short -- gen/python/wire gen/ts/wire
+  # Whole directories, not a file list: a NEW generated file (e.g. wire/unique.py, or the
+  # schema of a new message) is then gated the day it is emitted. The untracked sweep is
+  # load-bearing — `git diff` cannot see a file that was generated but never committed,
+  # so a file list alone would pass green. gen/jsonschema/ is gated exactly like the
+  # generated code: the generator deletes every *.json there before writing, so a schema
+  # for a removed message shows up as a deletion. base.py / base.ts / schemas.py and
+  # gen/jsonschema/{jsonschema.go,README.md} are hand-written and never regenerated, so
+  # they cannot drift.
+  if ! git diff --quiet HEAD -- gen/python/wire gen/ts/wire gen/jsonschema \
+     || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire gen/jsonschema)" ]; then
+    echo "::error:: SDK types export out of sync — run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/ + gen/jsonschema/."
+    git status --short -- gen/python/wire gen/ts/wire gen/jsonschema
     fail=1
   else
     note "no drift"
   fi
 
-  step "SDK types parity (Pydantic + Zod vs the Go oracle)"
+  step "SDK types + JSON Schema parity (Pydantic, Zod, jsonschema vs the Go oracle)"
   ".sdk-types-work/venv/bin/pip" install -q --disable-pip-version-check --require-hashes -r scripts/sdk-types/requirements-test.txt || fail=1
   PYTHONPATH=gen/python ".sdk-types-work/venv/bin/python" -m pytest gen/python/tests -q || fail=1
   (cd gen/ts && npm ci --no-audit --no-fund && npm test --silent) || fail=1
diff --git a/scripts/gen-sdk-types.sh b/scripts/gen-sdk-types.sh
index c2e22312..1ba1d7bb 100755
--- a/scripts/gen-sdk-types.sh
+++ b/scripts/gen-sdk-types.sh
@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 # Generate the TypeScript (Zod) and Python (Pydantic) TYPES EXPORT from the proto,
-# via JSON Schema. This is NOT a full SDK — it is the message types + per-field
+# via JSON Schema, and keep that JSON Schema as a release artifact: the published
+# per-message schemas under gen/jsonschema/ (default + strict variant). This is NOT a full SDK — it is the message types + per-field
 # validation (shape + protovalidate standard constraints: enum.not_in, string.pattern,
 # min/max, …). Cross-field rules stay server-authoritative (Go protovalidate).
 #
@@ -12,6 +13,8 @@
 #            --json-schema-to-zod--------> gen/ts/wire/schemas.ts   (Zod)
 #            --gen_unique_py.py---------> gen/python/wire/unique.py (the repeated.unique
 #                                       rule datamodel-codegen drops; Zod gets it inline)
+#            --gen_jsonschema.py--------> gen/jsonschema/ (the published per-message JSON
+#                                       Schemas, default + strict; decisions in its header)
 #
 # gen/python/wire/base.py is hand-written (the seam) and NOT generated.
 # Prereqs: go, python3, node/npm. Provisions a throwaway venv + node_modules under
@@ -23,12 +26,12 @@ WORK=.sdk-types-work
 JS="$WORK/jsonschema"
 COMBINED="$WORK/combined.json"
 PY="$WORK/venv/bin/python"
-rm -rf "$WORK"; mkdir -p "$WORK" gen/python/wire gen/ts/wire
+rm -rf "$WORK"; mkdir -p "$WORK" gen/python/wire gen/ts/wire gen/jsonschema
 
-echo "==> 1/4 JSON Schema from proto (bufbuild/protoschema)"
+echo "==> 1/5 JSON Schema from proto (bufbuild/protoschema)"
 (cd proto && buf generate --template ../scripts/sdk-types/buf.jsonschema.yaml -o "../$WORK")
 
-echo "==> 2/4 tools + merge (clean names; enums named from the descriptor)"
+echo "==> 2/5 tools + merge (clean names; enums named from the descriptor)"
 python3 -m venv "$WORK/venv"
 # Pinned AND hash-locked: generated output is byte-compared in CI, so every tool that
 # shapes it must be fixed. datamodel-code-generator emits the models; black formats them;
@@ -50,7 +53,7 @@ go run ./conformance/uniquegen "$WORK/unique_items.json"
 "$PY" scripts/sdk-types/merge_schema.py "$JS" gen/descriptor.binpb "$COMBINED" \
   "$WORK/required_fields.json" "$WORK/unique_items.json"
 
-echo "==> 3/4 Pydantic v2 (datamodel-code-generator, --base-class + --collapse-root-models)"
+echo "==> 3/5 Pydantic v2 (datamodel-code-generator, --base-class + --collapse-root-models)"
 "$WORK/venv/bin/datamodel-codegen" \
   --input "$COMBINED" --input-file-type jsonschema \
   --output gen/python/wire/models.py --output-model-type pydantic_v2.BaseModel \
@@ -70,7 +73,7 @@ PYEOF
 # The repeated.unique field map the wire/base.py seam enforces (see gen_unique_py.py).
 "$PY" scripts/sdk-types/gen_unique_py.py "$WORK/unique_items.json" gen/python/wire/unique.py
 
-echo "==> 4/4 Zod (json-schema-to-zod)"
+echo "==> 4/5 Zod (json-schema-to-zod)"
 # Pinned via a committed manifest + lockfile so `npm ci` installs the exact same
 # json-schema-to-zod/zod (and transitive) tree every run — the byte-compared
 # schemas.ts cannot drift on a transparent dependency bump.
@@ -82,4 +85,12 @@ cp scripts/sdk-types/package.json scripts/sdk-types/package-lock.json "$WORK/"
 cp scripts/sdk-types/gen_zod.mjs "$WORK/gen_zod.mjs"
 node "$WORK/gen_zod.mjs" "$COMBINED" gen/ts/wire/schemas.ts
 
-echo "==> done: gen/python/wire/models.py, gen/python/wire/unique.py, gen/ts/wire/schemas.ts"
+echo "==> 5/5 published JSON Schemas (gen/jsonschema/)"
+# The same protoschema output the models above are generated from, kept as release
+# artifacts instead of discarded: one self-contained file per contract message, in a
+# default and a strict variant. The wire decisions (field naming, Struct, int64) are
+# documented in the header of gen_jsonschema.py.
+"$PY" scripts/sdk-types/gen_jsonschema.py "$JS" gen/descriptor.binpb \
+  "$WORK/required_fields.json" "$WORK/unique_items.json" gen/jsonschema
+
+echo "==> done: gen/python/wire/models.py, gen/python/wire/unique.py, gen/ts/wire/schemas.ts, gen/jsonschema/"
diff --git a/scripts/release/smoke-npm.sh b/scripts/release/smoke-npm.sh
index 9dee5803..69f80c88 100755
--- a/scripts/release/smoke-npm.sh
+++ b/scripts/release/smoke-npm.sh
@@ -5,6 +5,10 @@
 #   - imports one L1 module, the client, the generated schemas and a cross-field
 #     schema under plain Node (no TypeScript loader) and parses valid and invalid
 #     inputs;
+#   - resolves a published JSON Schema through the ./jsonschema/* export path, both
+#     with require.resolve and with a JSON import, and validates with Ajv (a dependency
+#     of the package): a valid message passes, an unknown field fails the strict
+#     variant, an empty required string fails;
 #   - replays the shared wire-canonical vectors through fromWireOffer, so the
 #     canonical bytes a consumer signs and verifies are the Go oracle's under
 #     BOTH Zod majors (the inversion reads Zod internals, which differ per major);
@@ -48,7 +52,9 @@ for zod in ${ZOD_VERSIONS:-3.23.0 3 4}; do
   cp "$vectors" vectors.json
   cat > check.mjs <<'JS'
 import { readFileSync, readdirSync } from "node:fs";
+import { createRequire } from "node:module";
 import { dirname } from "node:path";
+import Ajv2020 from "ajv/dist/2020.js";
 import canonicalize from "canonicalize";
 import { thumbprint } from "@fora-protocol/sdk/thumbprint";
 import { createClient } from "@fora-protocol/sdk/client";
@@ -69,6 +75,17 @@ if (!PricingCrossFieldSchema.safeParse({ model: "PRICING_MODEL_FREE" }).success)
 if (PricingCrossFieldSchema.safeParse({ currency: 42 }).success) throw new Error("invalid Pricing accepted");
 const crossField = PricingCrossFieldSchema.safeParse({ model: "PRICING_MODEL_PER_UNIT" });
 if (crossField.success || !crossField.error.issues.some((i) => i.params?.ruleId)) throw new Error("cross-field rule not applied");
+// published JSON Schemas: the ./jsonschema/* export path resolves, and the strict
+// variant refuses an unknown field
+const rr = "@fora-protocol/sdk/jsonschema/fora.v1.ResourceResponse.schema";
+const strictSchema = JSON.parse(readFileSync(createRequire(import.meta.url).resolve(`${rr}.strict.json`), "utf8"));
+const { default: defaultSchema } = await import(`${rr}.json`, { with: { type: "json" } });
+const ajv = new Ajv2020({ strict: true, validateFormats: false });
+const strictCheck = ajv.compile(strictSchema), defaultCheck = ajv.compile(defaultSchema);
+if (!strictCheck({ exchange: "exchange.example" })) throw new Error("strict schema rejected a valid ResourceResponse");
+if (strictCheck({ exchange: "exchange.example", unknown_field: 1 })) throw new Error("strict schema accepted an unknown field");
+if (!defaultCheck({ exchange: "exchange.example", unknown_field: 1 })) throw new Error("default schema rejected an unknown field");
+if (defaultCheck({ exchange: "" })) throw new Error("schema accepted an empty required string");
 // wire-canonical vectors: the bytes a consumer verifies offer signatures over
 const { vectors } = JSON.parse(readFileSync("vectors.json", "utf8"));
 if (vectors.length === 0) throw new Error("no wire-canonical vectors");
@@ -80,13 +97,14 @@ for (const v of vectors) {
 // imports it. The vocab wildcard expands against the installed directory.
 const pkgDir = "node_modules/@fora-protocol/sdk";
 const subpaths = Object.entries(JSON.parse(readFileSync(`${pkgDir}/package.json`, "utf8")).exports).flatMap(([sub, t]) => {
+  if (sub === "./jsonschema/*") return []; // JSON data, not a module: checked above
   if (!sub.endsWith("/*")) return [sub];
   const stems = readdirSync(`${pkgDir}/${dirname(t.default)}`).filter((f) => f.endsWith(".js")).map((f) => f.slice(0, -3));
   if (stems.length === 0) throw new Error(`${sub} expands to nothing`);
   return stems.map((s) => sub.replace("*", s));
 });
 for (const sub of subpaths) await import(`@fora-protocol/sdk${sub.slice(1)}`);
-console.log(`plain Node import of ${subpaths.length} subpaths + validation + ${vectors.length} wire-canonical vectors ok`);
+console.log(`plain Node import of ${subpaths.length} subpaths + validation + JSON Schemas + ${vectors.length} wire-canonical vectors ok`);
 JS
   node check.mjs
 
diff --git a/scripts/release/smoke-python.sh b/scripts/release/smoke-python.sh
index 1ab49434..654d809e 100755
--- a/scripts/release/smoke-python.sh
+++ b/scripts/release/smoke-python.sh
@@ -1,7 +1,8 @@
 #!/usr/bin/env bash
 # Smoke test for the published Python packages.
 # Installs the given requirements into a fresh virtualenv outside the checkout,
-# with no PYTHONPATH, imports fora_sdk and calls one L1 function. Arguments are
+# with no PYTHONPATH, imports fora_sdk and calls one L1 function, and loads a published
+# JSON Schema from the fora-protocol package data. Arguments are
 # wheel paths, sdist paths (each sdist is first rebuilt into a wheel in an
 # isolated build environment) or PyPI specs.
 #   scripts/release/smoke-python.sh dist/fora_protocol-1.2.3-py3-none-any.whl dist/fora_protocol_sdk-1.2.3-py3-none-any.whl
@@ -28,10 +29,17 @@ import fora_sdk
 from fora_sdk.thumbprint import thumbprint
 from wire.models import Offer
 from vocab import pricingunits
+from wire import schemas
 got = thumbprint(bytes(32))
 assert got == "ogRZbCR5KTrPFCAfuYmCMwj0w7Yuk3Lr6YWQWfpkbf0", got
 assert pricingunits.is_registered("fetches")
 assert "exchange" in Offer.model_fields
-print("fora_sdk import + thumbprint ok")
+# the published JSON Schemas ship as package data in both variants
+strict = schemas.load("fora.v1.ResourceResponse", strict=True)
+assert strict["$id"] == "fora.v1.ResourceResponse.schema.strict.json", strict["$id"]
+assert strict["additionalProperties"] is False
+assert "additionalProperties" not in schemas.load("fora.v1.ResourceResponse")
+assert len(schemas.names()) > 0
+print("fora_sdk import + thumbprint + JSON Schemas ok")
 PY
 echo "smoke-python ok: $*"
diff --git a/scripts/sdk-types/buf.jsonschema.yaml b/scripts/sdk-types/buf.jsonschema.yaml
index 5de69888..88f0cd5a 100644
--- a/scripts/sdk-types/buf.jsonschema.yaml
+++ b/scripts/sdk-types/buf.jsonschema.yaml
@@ -1,6 +1,7 @@
 # buf template that emits JSON Schema from the proto, via the protovalidate-aware
 # bufbuild/protoschema generator. Run by scripts/gen-sdk-types.sh into a work dir
-# (the per-message files are an intermediate; only the merged Pydantic/Zod are kept).
+# (the per-message files feed the merged Pydantic/Zod models and, reshaped by
+# gen_jsonschema.py, the published schemas under gen/jsonschema/).
 version: v2
 plugins:
   - local: ["go", "run", "github.com/bufbuild/protoschema-plugins/cmd/protoc-gen-jsonschema@v0.6.0"]
diff --git a/scripts/sdk-types/gen_jsonschema.py b/scripts/sdk-types/gen_jsonschema.py
new file mode 100644
index 00000000..7af87e78
--- /dev/null
+++ b/scripts/sdk-types/gen_jsonschema.py
@@ -0,0 +1,313 @@
+#!/usr/bin/env python3
+# Emit the published per-message JSON Schemas into gen/jsonschema/.
+#
+# Input: the per-message schemas bufbuild/protoschema-plugins protoc-gen-jsonschema
+# v0.6.0 writes (the same pinned run that feeds the Pydantic and Zod models), the
+# compiled descriptor, and the required/unique manifests the Go conformance tools emit.
+# Output, for every message of the wire contract (fora.v1 and fora.admin.v1):
+#
+#   <package>.<Message>.schema.json         default: unknown fields are accepted
+#   <package>.<Message>.schema.strict.json  strict: additionalProperties false on
+#                                           every message object, at every depth
+#
+# Each file is SELF-CONTAINED: the message schema is the document root, and every
+# message it reaches is inlined under `$defs`, keyed by its fully-qualified name. A
+# consumer validates against one file with any draft 2020-12 validator, with no
+# registry and no network access.
+#
+# The two variants differ in exactly one thing, the unknown-field policy. Every other
+# decision below is shared, because both describe the same wire: canonical proto-JSON,
+# as every FORA sender emits it.
+#
+#   Field names. The proto field names (snake_case). That is the FORA wire naming:
+#     the Go server renders with UseProtoNames, the SDKs send proto names, and the
+#     canonical signing form is snake_case. protoschema also emits the lowerCamel
+#     json_name aliases as `patternProperties`; they are removed, so a camelCase key
+#     is an unknown field (refused by the strict variant, ignored by the default one).
+#
+#   google.protobuf.Struct, Value and ListValue (every `ext` field). Inlined as
+#     protoschema renders them: a plain JSON object, any JSON value, a JSON array.
+#     They stay open in BOTH variants. The strict variant closes the message objects
+#     it builds and never reaches inside a Struct, because the keys of an extension
+#     point are not known to the contract. Map fields keep their value schema as
+#     `additionalProperties`; that is the map's shape, not an unknown-field policy.
+#
+#   64-bit integers (int64, uint64 and their fixed/sint forms). A decimal string or a
+#     JSON integer. Canonical proto-JSON, and so the Go server, emits the string; the
+#     SDKs send a JSON number. When the field has a bound, the bound is encoded in the
+#     string arm's pattern too (gte 1 becomes ^0*[1-9][0-9]*$), so the string form
+#     cannot carry a value the numeric form refuses. A bound this script cannot encode
+#     fails the build instead of shipping a bypass.
+#
+#   Other numbers (int32, uint32, double, float). A JSON number only. Proto-JSON
+#     parsers also accept these as strings, but no FORA sender emits that form, and
+#     protoschema puts the numeric bound on the number arm alone: a string arm left
+#     standing would accept "1000" for a field bounded to [0, 1]. The canonical
+#     "NaN", "Infinity" and "-Infinity" strings stay where protoschema emits them.
+#
+#   buf.validate constraints. Everything protoschema carries (string patterns and
+#     lengths, numeric bounds, enum in/not_in/const, item counts), plus the two rules
+#     it cannot express, from the same manifests the generated models use: a field
+#     whose zero value its own rule rejects is `required` (proto-JSON omits a zero
+#     value, so omission is that zero value), and a repeated.unique field carries
+#     `uniqueItems`. Cross-field rules (CEL) and oneof exclusivity are not expressible
+#     per field and are not in the schemas; the Go server enforces them.
+#
+#   Enums. As protoschema emits them: the value name, which every FORA sender uses,
+#     or the number of a permitted value, which proto-JSON parsers also accept.
+#
+# Run by scripts/gen-sdk-types.sh; byte-compared against the committed tree by the drift
+# gate (scripts/ci-local.sh, .github/workflows/sdk-types-ci.yml).
+import glob
+import json
+import os
+import re
+import sys
+
+from google.protobuf import descriptor_pb2
+
+sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+from merge_schema import (  # noqa: E402  (sibling module, same pinned toolchain)
+    FLOAT_STR_PATTERN,
+    INT_STR_PATTERN,
+    load_descriptor,
+    mark_required,
+    mark_unique,
+)
+
+PACKAGES = ("fora.v1", "fora.admin.v1")
+SCHEMA = "https://json-schema.org/draft/2020-12/schema"
+UINT_STR_PATTERN = r"^[0-9]+$"
+NUMERIC_TYPES = ("integer", "number")
+BOUND_KEYS = ("minimum", "maximum", "exclusiveMinimum", "exclusiveMaximum", "enum")
+
+FD = descriptor_pb2.FieldDescriptorProto
+INT64_KINDS = {FD.TYPE_INT64, FD.TYPE_SINT64, FD.TYPE_SFIXED64, FD.TYPE_UINT64, FD.TYPE_FIXED64}
+NARROW_KINDS = {
+    FD.TYPE_INT32, FD.TYPE_SINT32, FD.TYPE_SFIXED32, FD.TYPE_UINT32, FD.TYPE_FIXED32,
+    FD.TYPE_DOUBLE, FD.TYPE_FLOAT,
+}
+
+REF_RE = re.compile(r"^((?:fora|google)\.[A-Za-z0-9_.]+)\.schema\.json$")
+
+
+def field_kinds(fds):
+    """fully-qualified message name -> {proto field name -> scalar kind}.
+
+    The kind of a map field is its VALUE's kind (the value schema is where a number sits).
+    """
+    out = {}
+
+    def walk(prefix, msgs):
+        for m in msgs:
+            fqn = f"{prefix}.{m.name}"
+            entries = {f"{fqn}.{n.name}": n for n in m.nested_type if n.options.map_entry}
+            kinds = {}
+            for f in m.field:
+                entry = entries.get(f.type_name.lstrip("."))
+                if entry is not None:
+                    kinds[f.name] = next(v.type for v in entry.field if v.name == "value")
+                else:
+                    kinds[f.name] = f.type
+            out[fqn] = kinds
+            walk(fqn, [n for n in m.nested_type if not n.options.map_entry])
+
+    for f in fds.file:
+        if f.package in PACKAGES:
+            walk(f.package, f.message_type)
+    return out
+
+
+def int64_string_pattern(num, where):
+    """The decimal-string pattern that admits exactly the integers `num` admits.
+
+    Covers the bounds the contract uses. Anything else stops the build: emitting the
+    unbounded pattern next to a bounded number arm would be a bypass.
+    """
+    bounds = {k: num[k] for k in BOUND_KEYS if k in num}
+    if not bounds:
+        return INT_STR_PATTERN
+    if "enum" in bounds and len(bounds) == 1:
+        return "^(" + "|".join(str(int(v)) for v in bounds["enum"]) + ")$"
+    lower = bounds.get("minimum")
+    if "exclusiveMinimum" in bounds:
+        lower = bounds["exclusiveMinimum"] + 1
+    if set(bounds) <= {"minimum", "exclusiveMinimum"} and lower == 0:
+        return UINT_STR_PATTERN
+    if set(bounds) <= {"minimum", "exclusiveMinimum"} and lower == 1:
+        return r"^0*[1-9][0-9]*$"
+    sys.exit(f"gen_jsonschema: {where}: cannot encode the 64-bit bound {bounds} in the "
+             "decimal-string form; extend int64_string_pattern")
+
+
+def canonical_numbers(node, kind, where):
+    """Reduce one numeric field's anyOf to the canonical proto-JSON forms (see header)."""
+    if kind not in INT64_KINDS | NARROW_KINDS:
+        return node  # an enum's name-or-number union is not a numeric field
+    if not isinstance(node, dict) or not isinstance(node.get("anyOf"), list):
+        return node
+    arms = node["anyOf"]
+    nums = [a for a in arms if isinstance(a, dict) and a.get("type") in NUMERIC_TYPES]
+    # The string forms of a number: a decimal pattern, or protoschema's catch-all
+    # {"type": "string"} for spellings of NaN/Infinity. The canonical NaN/Infinity
+    # names are a string arm WITH an enum, and stay.
+    numeric_str = [a for a in arms if isinstance(a, dict) and a.get("type") == "string"
+                   and "enum" not in a]
+    keep = [a for a in arms if a not in numeric_str]
+    if kind in INT64_KINDS:
+        if len(nums) != 1:
+            sys.exit(f"gen_jsonschema: {where}: a split 64-bit range is not supported")
+        keep = keep + [{"type": "string", "pattern": int64_string_pattern(nums[0], where)}]
+    out = {k: v for k, v in node.items() if k != "anyOf"}
+    if len(keep) == 1:
+        out.update(keep[0])
+    else:
+        out["anyOf"] = keep
+    return out
+
+
+def shape_message(schema, fqn, kinds):
+    """Field names, numbers and refs for one message schema, shared by both variants."""
+    schema = {k: v for k, v in schema.items()
+              if k not in ("$id", "$schema", "patternProperties", "additionalProperties")}
+    props = schema.get("properties", {})
+    if set(props) != set(kinds):
+        sys.exit(f"gen_jsonschema: {fqn}: schema properties {sorted(props)} differ from the "
+                 f"descriptor fields {sorted(kinds)}")
+    shaped = {}
+    for name, prop in props.items():
+        where = f"{fqn}.{name}"
+        prop = canonical_numbers(prop, kinds[name], where)
+        for key in ("items", "additionalProperties"):
+            if isinstance(prop.get(key), dict):
+                prop = dict(prop)
+                prop[key] = canonical_numbers(prop[key], kinds[name], where)
+        shaped[name] = prop
+    schema["properties"] = shaped
+    return schema
+
+
+def resolve_refs(o, wkt, refs):
+    """Rewrite protoschema's file refs: a message becomes `#/$defs/<fqn>` (recorded in
+    `refs`), a google.protobuf type is inlined from protoschema's own rendering of it."""
+    if isinstance(o, dict):
+        r = o.get("$ref")
+        m = REF_RE.match(r) if isinstance(r, str) else None
+        if m:
+            name = m.group(1)
+            rest = {k: resolve_refs(v, wkt, refs) for k, v in o.items() if k != "$ref"}
+            if name.startswith("google.protobuf."):
+                if name not in wkt:
+                    sys.exit(f"gen_jsonschema: no protoschema rendering of {name}")
+                return {**wkt[name], **rest}
+            refs.add(name)
+            return {"$ref": f"#/$defs/{name}", **rest}
+        if r == "#":
+            sys.exit("gen_jsonschema: a self-reference ($ref '#') needs bundling support")
+        return {k: resolve_refs(v, wkt, refs) for k, v in o.items()}
+    if isinstance(o, list):
+        return [resolve_refs(x, wkt, refs) for x in o]
+    return o
+
+
+def closure(root, deps):
+    seen, todo = set(), [root]
+    while todo:
+        n = todo.pop()
+        for d in deps[n]:
+            if d not in seen and d != root:
+                seen.add(d)
+                todo.append(d)
+    return sorted(seen)
+
+
+def root_refs(o, root):
+    """Inside a file whose root IS `root`, a reference to it points at the document root."""
+    if isinstance(o, dict):
+        if o.get("$ref") == f"#/$defs/{root}":
+            o = {**o, "$ref": "#"}
+        return {k: root_refs(v, root) for k, v in o.items()}
+    if isinstance(o, list):
+        return [root_refs(x, root) for x in o]
+    return o
+
+
+def variant(messages, deps, fqn, strict):
+    def close(schema):
+        return {**schema, "additionalProperties": False} if strict else schema
+
+    suffix = ".schema.strict.json" if strict else ".schema.json"
+    doc = {"$schema": SCHEMA, "$id": fqn + suffix, **close(messages[fqn])}
+    defs = {d: close(messages[d]) for d in closure(fqn, deps)}
+    if defs:
+        doc["$defs"] = defs
+    return root_refs(doc, fqn)
+
+
+def assert_no_string_bypass(doc, name):
+    """No number arm may keep a string sibling that skips its bound (see header)."""
+    bad = []
+
+    def walk(node, path):
+        if isinstance(node, dict):
+            arms = node.get("anyOf")
+            if isinstance(arms, list):
+                nums = [a for a in arms if isinstance(a, dict) and a.get("type") in NUMERIC_TYPES]
+                strs = [a.get("pattern") for a in arms
+                        if isinstance(a, dict) and a.get("type") == "string" and "enum" not in a]
+                if nums and FLOAT_STR_PATTERN in strs:
+                    bad.append(path)
+                if any(k in n for n in nums for k in BOUND_KEYS) and \
+                        any(p in (INT_STR_PATTERN, None) for p in strs):
+                    bad.append(path)
+            for k, v in node.items():
+                walk(v, f"{path}/{k}")
+        elif isinstance(node, list):
+            for i, v in enumerate(node):
+                walk(v, f"{path}[{i}]")
+
+    walk(doc, "")
+    if bad:
+        sys.exit(f"gen_jsonschema: {name}: a string form bypasses a numeric bound at {bad}")
+
+
+def main(src_dir, desc_path, required_path, unique_path, out_dir):
+    kinds = field_kinds(load_descriptor(desc_path))
+    raw = {}
+    for f in sorted(glob.glob(os.path.join(src_dir, "*.schema.json"))):
+        name = os.path.basename(f)[: -len(".schema.json")]
+        raw[name] = json.load(open(f))
+    wkt = {n: {k: v for k, v in s.items() if k not in ("$id", "$schema", "title")}
+           for n, s in raw.items() if n.startswith("google.protobuf.")}
+    fqns = sorted(n for n in raw if n.rsplit(".", 1)[0] in PACKAGES)
+    if set(fqns) != set(kinds):
+        sys.exit(f"gen_jsonschema: protoschema messages {sorted(set(fqns) ^ set(kinds))} do "
+                 "not match the descriptor's contract messages")
+
+    messages, deps = {}, {}
+    for fqn in fqns:
+        refs = set()
+        messages[fqn] = resolve_refs(shape_message(raw[fqn], fqn, kinds[fqn]), wkt, refs)
+        deps[fqn] = refs
+
+    # mark_required / mark_unique key by bare message name, the manifests' scheme (the
+    # Go generators refuse a cross-package bare-name collision, so the key is unique).
+    bare = {fqn.rsplit(".", 1)[1]: messages[fqn] for fqn in fqns}
+    mark_required(bare, json.load(open(required_path)))
+    mark_unique(bare, json.load(open(unique_path)))
+
+    os.makedirs(out_dir, exist_ok=True)
+    for stale in glob.glob(os.path.join(out_dir, "*.json")):
+        os.remove(stale)
+    for fqn in fqns:
+        for strict in (False, True):
+            doc = variant(messages, deps, fqn, strict)
+            assert_no_string_bypass(doc, doc["$id"])
+            with open(os.path.join(out_dir, doc["$id"]), "w", encoding="utf-8") as fh:
+                json.dump(doc, fh, indent=2, sort_keys=True, ensure_ascii=False)
+                fh.write("\n")
+    print(f"wrote {2 * len(fqns)} schemas ({len(fqns)} messages, default + strict) -> {out_dir}")
+
+
+if __name__ == "__main__":
+    main(*sys.argv[1:6])
diff --git a/scripts/sdk-types/requirements-test.in b/scripts/sdk-types/requirements-test.in
index 7e0db138..b0a42296 100644
--- a/scripts/sdk-types/requirements-test.in
+++ b/scripts/sdk-types/requirements-test.in
@@ -2,3 +2,5 @@
 # Compile with: pip-compile --generate-hashes --allow-unsafe -o requirements-test.txt requirements-test.in
 pydantic==2.13.4
 pytest
+# draft 2020-12 validator for the published gen/jsonschema/ schemas (gen/python/tests).
+jsonschema
diff --git a/scripts/sdk-types/requirements-test.txt b/scripts/sdk-types/requirements-test.txt
index 94ab324f..9812dd88 100644
--- a/scripts/sdk-types/requirements-test.txt
+++ b/scripts/sdk-types/requirements-test.txt
@@ -2,16 +2,30 @@
 # This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
-#    pip-compile --allow-unsafe --generate-hashes --no-strip-extras --output-file=requirements-test.txt requirements-test.in
+#    pip-compile --allow-unsafe --generate-hashes --no-index --no-strip-extras --output-file=requirements-test.txt requirements-test.in
 #
 annotated-types==0.7.0 \
     --hash=sha256:1f02e8b43a8fbbc3f3e0d4f0f4bfc8131bcb4eebe8849b8e5c773f3a1c582a53 \
     --hash=sha256:aff07c09a53a08bc8cfccb9c85b05f1aa9a2a6f23728d790723543408344ce89
     # via pydantic
+attrs==26.1.0 \
+    --hash=sha256:c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309 \
+    --hash=sha256:d03ceb89cb322a8fd706d4fb91940737b6642aa36998fe130a9bc96c985eff32
+    # via
+    #   jsonschema
+    #   referencing
 iniconfig==2.3.0 \
     --hash=sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730 \
     --hash=sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12
     # via pytest
+jsonschema==4.26.0 \
+    --hash=sha256:0c26707e2efad8aa1bfc5b7ce170f3fccc2e4918ff85989ba9ffa9facb2be326 \
+    --hash=sha256:d489f15263b8d200f8387e64b4c3a75f06629559fb73deb8fdfb525f2dab50ce
+    # via -r requirements-test.in
+jsonschema-specifications==2025.9.1 \
+    --hash=sha256:98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe \
+    --hash=sha256:b540987f239e745613c7a9176f3edb72b832a4ac465cf02712288397832b5e8d
+    # via jsonschema
 packaging==26.2 \
     --hash=sha256:5fc45236b9446107ff2415ce77c807cee2862cb6fac22b8a73826d0693b0980e \
     --hash=sha256:ff452ff5a3e828ce110190feff1178bb1f2ea2281fa2075aadb987c2fb221661
@@ -154,12 +168,139 @@ pytest==9.1.1 \
     --hash=sha256:1088fbde8f2b49d95a549a195707afa7a76a3ce9bcadc26b6d71f0ffda5fe313 \
     --hash=sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c
     # via -r requirements-test.in
+referencing==0.37.0 \
+    --hash=sha256:381329a9f99628c9069361716891d34ad94af76e461dcb0335825aecc7692231 \
+    --hash=sha256:44aefc3142c5b842538163acb373e24cce6632bd54bdb01b21ad5863489f50d8
+    # via
+    #   jsonschema
+    #   jsonschema-specifications
+rpds-py==2026.6.3 \
+    --hash=sha256:0be972be84cfcaf46c8c6edf690ca0f154ac17babf1f6a955a51579b34ad2dc5 \
+    --hash=sha256:127565fead0a10943b282957bd5447804ff3160ad79f2ad2635e6d249e380680 \
+    --hash=sha256:127e08c0642d880cf32ca47ec2a4a77b901f7e2dd1ad9762adb13955d72ffcc9 \
+    --hash=sha256:166cf54d9f44fc6ceb53c7860258dde44a81406646de79f8ed3234fca3b6e538 \
+    --hash=sha256:168c733a7112e071bb7a66460e667edfcff06c017a3c523f7a8a8e08d0140804 \
+    --hash=sha256:1967debc37f64f2c4dc90a7f563aec558b471966e12adcac4e1c4240496b6ebf \
+    --hash=sha256:1cebd1337c242e4ec2293e541f712b2da849b29f48f0c293684b71c0632625d4 \
+    --hash=sha256:1cf01971c4f2c5553b772a542e4aaf191789cd331bc2cd4ff0e6e65ba49e1e97 \
+    --hash=sha256:1e5822dfc2f0d4ab7e745eaa6d85945069329beeccef965af3f3bb26058fcab6 \
+    --hash=sha256:22bffe6042b9bcb0822bcd1955ec00e245daf17b4344e4ed8e9551b976b63e96 \
+    --hash=sha256:23a439f31ccbeff1574e24889128821d1f7917470e830cf6544dced1c662262a \
+    --hash=sha256:24e9c5386e16669b674a69c156c8eeefcb578f3b3397b713b08e6d60f3c7b187 \
+    --hash=sha256:270b293dae9058fc9fcedab50f13cebf46fb8ed1d1d54e0521a9da5d6b211975 \
+    --hash=sha256:29dfa0533a5d4c94d4dfa1b694fcb56c9c63aad8330ffdd816fd225d0a7a162f \
+    --hash=sha256:2a9c6f195058cb45335e8cc3802745c603d716eb96bc9625950c1aac71c0c703 \
+    --hash=sha256:2bfd04c19ddbd6640de0b51894d764bd2758854d5b75bd102d2ef10cb9c293a9 \
+    --hash=sha256:2c54a076ca4d370980ab57bc0e31df57bbe8d41340436a90ef8b1219a3cbb127 \
+    --hash=sha256:2c958bf94822e9290a40aaf2a822d4bc5c88099093e3948ad6c571eca9272e5f \
+    --hash=sha256:2c99f7e8ccb3dd6e3e4bfeac657a7b208c9bac8075f4b078c02d7404c34107fa \
+    --hash=sha256:2f7c26fbc5acd2522b95d4177fe4710ffd8e9b20529e703ffbf8db4d93903f05 \
+    --hash=sha256:30c6dc199b24a5e3e81d50da0f00858c5bbdb2617a750395687f4339c5818171 \
+    --hash=sha256:38a2fea2787428f811719ceb9114cb78964a3138838320c29ac39526c79c16ba \
+    --hash=sha256:3a83ae6c67b7676b9878378547ca8e93ed77a580037bcbcd1d32f739e1e6089c \
+    --hash=sha256:3cfe765c1da0072636ca06628261e0ea05688e160d5c8a03e0217c3854037223 \
+    --hash=sha256:421aba32367055614287a4292b6a17f1939c9452299f7a0209c117e990b646d4 \
+    --hash=sha256:425560c6fa0415f27261727bb20bd097568485e5eb0c121f1949417d1c516885 \
+    --hash=sha256:4470ce197d4090875cf6affbf1f853338387428df97c4fb7b7106317b8214698 \
+    --hash=sha256:4cf2d36a2357e4d07bb5a4f98801265327b48256867816cfd2ceb001e9754a8f \
+    --hash=sha256:4f4bca01b63096f606e095734dd56e74e175f94cfbf24ff3d63281cec61f7bb7 \
+    --hash=sha256:501f9f04a588d6a09179368c57071301445191767c64e4b52a6aa9871f1ef5ed \
+    --hash=sha256:536bceea4fa4acf7e1c61da2b5786304367c816c8895be71b8f537c480b0ea1f \
+    --hash=sha256:538949e262e46caa31ac01bdb3c1e8f642622922cacbabbae6a8445d9dc33eaf \
+    --hash=sha256:539d75de9e0d536c84ff18dfeb805398e58227001ce09231a26a08b9aed1ee0e \
+    --hash=sha256:54f45a148e28767bf343d33a684693c70e451c6f4c0e9904709a723fafbdfc1f \
+    --hash=sha256:55927d532399c2c646100ff7feb48eaa940ad70f42cd68e1328f3ded9f81ca24 \
+    --hash=sha256:58eadac9cd119677b60e1cf8ac4052f35949d71b8a9e5556efccbe82533cf22a \
+    --hash=sha256:5e8d07bddee435a2ff6f1920e18feff28d0bc4533e42f4bf6927fbd073312c41 \
+    --hash=sha256:62698275682bf121181861295c9181e789030a2d516071f5b8f3c23c170cd0fc \
+    --hash=sha256:639c8929aa0afe81be836b04de888460d6bed38b9c54cfc18da8f6bfabf5af5d \
+    --hash=sha256:67e3a721ffc5d8d2210d3671872298c4a84e4b8035cfe42ffd7cde35d772b146 \
+    --hash=sha256:6de4744d05bd1aa1be4ed7ea1189e3979196808008113bbbf899a460966b925e \
+    --hash=sha256:6e84adbcf4bf841aed8116a8264b9f50b4cb3e7bd89b516122e616ac56ca269e \
+    --hash=sha256:7491ee23305ac3eb59e492b6945881f5cd77a6f731061a3f25b77fd40f9e99a4 \
+    --hash=sha256:79486287de1730dbaff3dbd124d0ca4d2ef7f9d29bf2544f1f93c09b5bcbbd12 \
+    --hash=sha256:7b689145a1485c335569bd056464f3243a29af7ed3871c7be31ad624ba239bc7 \
+    --hash=sha256:7f88d653e7b3b779d71ae7454e20dcc9b6bae903f33c269db9f2be41bda3f261 \
+    --hash=sha256:8020133a74bd81b4572dd8e4be028a6b1ebcd70e6726edc3918008c08bee6ee6 \
+    --hash=sha256:808345f53cb952433ca2816f1604ff3515608a81784954f38d4452acfe8e61d5 \
+    --hash=sha256:83e35b57523816c8613fd0776b40cd8bb9f596b37ddd2692eb4a6bb5ab2f8c93 \
+    --hash=sha256:842e7b070435622248c7a2c44ae53fa1440e073cc3023bc919fed570884097a7 \
+    --hash=sha256:847927daf4cffbd4e90e42bc890069897101edd015f956cb8721b3473372edda \
+    --hash=sha256:882076c00c0a608b131187055ddc5ae29f2e7eaf870d6168980420d58528a5c8 \
+    --hash=sha256:8b95977e7211527ab0ba576e286d023389fbeeb32a6b7b771665d333c60e5342 \
+    --hash=sha256:8bb68f03f395eb793220b45c097bd4d8c32944393da0fad8b999efac0868fc8c \
+    --hash=sha256:8c2642a7603ec0b16ed77da4555db3b4b472341904873788327c0b0d7b95f1bb \
+    --hash=sha256:8c3d1e9c15b9d51ca0391e13da1a25a0a4df3c58a37c9dc368e0736cf7f69df0 \
+    --hash=sha256:8c6e5a2f750cc71c3e3b11d71661f21d6f9bc6cebc6564b1466417a1ec03ec77 \
+    --hash=sha256:8d2294a31386bfa251d8c8a39472beee17db67d4f1a6eabea665d35c9a4461c3 \
+    --hash=sha256:8e4320744c1ffdd95a603def63344bfab2d33edeab301c5007e7de9f9f5b3885 \
+    --hash=sha256:8e65860d238379ed982fd9ba690579b5e95af2f4840f99c772816dbe573cb826 \
+    --hash=sha256:8f2e5c5ee828d42cb11760761c0af6507927bec42d0ad5458f97c9203b054617 \
+    --hash=sha256:900a67df3fd1660b035a4761c4ce73c382ea6b35f90f9863c36c6fd8bf8b09bb \
+    --hash=sha256:913ca42ccad3f8cc6e292b587ae8ae49c8c823e5dce51a736252fc7c7cdfa577 \
+    --hash=sha256:9250a9a0a6fd4648b3f868da8d91a4c52b5811a62df58e753d50ae4454a36f80 \
+    --hash=sha256:931908d9fc855d8f74783377822be318edb6dcb19e47169dc038f9a1bf60b06e \
+    --hash=sha256:9826217f048f620d9a712672818bf231442c1b35d96b227a07eabd11b4bb6945 \
+    --hash=sha256:9891e594296ab9dada6551c8e7b387b2721f27a67eecd528412e8906247a7b90 \
+    --hash=sha256:9c1255b302953c86a486b81d330d5ee1d5bd937691ce271b6be0ef0e299eaab7 \
+    --hash=sha256:a0811d33247c3d6128a3001d763f2aa056bb3425204335400ac54f89eec3a0d0 \
+    --hash=sha256:a136d453475ac0fcbda502ef1e6504bd28d6d904700915d278deeab0d00fe140 \
+    --hash=sha256:a214c993455f99a89aaeadc9b21241900037adc9d97203e374d75513c5911822 \
+    --hash=sha256:a3086b538543802f84c843911242db20447de00d8752dd0efc936dbcf02218ba \
+    --hash=sha256:a3450b693fde92133e9f51060568a4c31fcca76d5e53bbd611e689ca446517e9 \
+    --hash=sha256:a550fb4950a06dde3beb4721f5ad4b25bf4513784665b0a8522c792e2bd822a4 \
+    --hash=sha256:a9f4645593036b81bbdb36b9c8e0ea0d1c3fee968c4d59db0344c14087ef143a \
+    --hash=sha256:aca6c1ef08a82bfe327cc156da694660f599923e2e6665b6d81c9c2d0ac9ffc8 \
+    --hash=sha256:acac386b453c2516111b50985d60ce46e7fadb5ea71ae7b25f4c946935bf27cf \
+    --hash=sha256:acc992ab27b15f852c76755eb2ab7dce86585ddadba6fa5946e58556088845b4 \
+    --hash=sha256:ae3d4fe8c0b9213624fdce7279d70e3b148b682ca20719ebd193a23ebfa47324 \
+    --hash=sha256:ae50181a047c871561212bb97f7932a2d45fb53e947bd9b57ebad85b529cbc53 \
+    --hash=sha256:ae6dd8f10bd17aad820876d24caec9efdafd80a318d16c0a48edb5e136902c6b \
+    --hash=sha256:af05d726809bff6b141be124d4c7ce998f9c9c7f30edb1f46c07aa103d540b41 \
+    --hash=sha256:afd70d95892096cdb26f15a00c45907b17817577aa8d1c76b2dcc2788391f9e9 \
+    --hash=sha256:b5c2dc92304aa48a4a60443b548bb12f12e119d4b72f314015e67b9e1be97fca \
+    --hash=sha256:bc0011654b91cc4fb2ae701bec0a0ba1e552c0714247fa7af6c59e0ccfa3a4e1 \
+    --hash=sha256:bcfbcf66006befb9fd2aeaa9e01feaf881b4dc330a02ba07d2322b1c11be7b5d \
+    --hash=sha256:bdbd97738551fca3917c1bd7188bec1920bb520104f28e7e1007f9ceb17b7690 \
+    --hash=sha256:c60924535c75f1566b6eb75b5c31a48a43fef04fa2d0d201acbad8a9969c6107 \
+    --hash=sha256:c7b9a2f8f4d8e90af72571d3d495deebdd7e3c75451f5b41719aee166e940fc2 \
+    --hash=sha256:ca6546b66be9dc4738b1b043d5ebd5488c66c578c5ff0fd0e8065313fe3afb76 \
+    --hash=sha256:ccffae9a092a00deb7efd545fe5e2c33c33b88e7c054337e9a74c179347d0b7d \
+    --hash=sha256:cdc7e35386f3847df728fbcb5e887e2d79c19e2fa1eba9e51b6621d23e3243af \
+    --hash=sha256:d15fde0e6fb0d88a60d221204873743e5d9f0b7d29165e62cd86d0413ad74ba6 \
+    --hash=sha256:d34c20167764fbcf927194d532dd7e0c56772f0a5f943fa5ef9e9afbba8fb9db \
+    --hash=sha256:d483fe17f01ad64b7bf7cc38fcefff1ca9fb83f8c2b2542b68f97ffe0611b369 \
+    --hash=sha256:d7469697dce35be237db177d42e2a2ee26e6dcc5fc052078a6fefabd288c6edd \
+    --hash=sha256:db08f45aecde626498fb3df07bcf6d2ec040af42e859a4f5040d79c200342911 \
+    --hash=sha256:dc319e5a1de4b6913aac94bf6a2f9e847371e0a140a43dd4991db1a09bc2d504 \
+    --hash=sha256:de3eceba0b683bcbb1ab93da016d0270df1f9ae7be716b40214c5dafac6ea45a \
+    --hash=sha256:dfcc8b909769d19db55c7cc9541eb64b9b774b1057ffffb4f1048070475bb9f9 \
+    --hash=sha256:e059c5dde6452b44424bd1834557556c226b57781dee1227af23518459722b13 \
+    --hash=sha256:e4316bf32babbed84e691e352faf967ce2f0f024174a8643c37c94a1080374fc \
+    --hash=sha256:e52655eaf81e32593abedaa4bfe33170c8cfedf3365ed9be6e11e07f148f0278 \
+    --hash=sha256:e55d236be29255554da47abe5c577637db7c24a02b8b46f0ca9524c855801868 \
+    --hash=sha256:ea7bb13b7c9a29791f87a0387ba7d3ad3a6d783d827e4d3f27b40a0ff44495e2 \
+    --hash=sha256:ea964164cc9afa72d4d9b23cc28dafae93693c0a53e0b42acbff15b22c3f9ddd \
+    --hash=sha256:ec829541c45bca16e61c7ae50c20501f213605beb75d1aba91a6ee37fbbb56a4 \
+    --hash=sha256:ecabd69db66de867690f9797f2f8fa27ba501bbc24540cbdbdc649cd15888ba6 \
+    --hash=sha256:ed0c1e5d10cdc7135537988c74a0188da68e2f3c30813ba3744ab1e42e0480f9 \
+    --hash=sha256:f0840b5b17057f7fd918b76183a4b5a0635f43e14eb2ce60dce1d4ee4707ea00 \
+    --hash=sha256:f4d78253f6996be4901669ad25319f842f740eccf4d58e3c7f3dd39e6dde1d8f \
+    --hash=sha256:f56f1695bc5c0871cbc33dc0130fcf503aab0c57dcc5a6700a4f49eba4f2652e \
+    --hash=sha256:f826877d462181e5eb1c26a0026b8d0cab05d99844ecb6d8bf3627a2ca0c0442 \
+    --hash=sha256:f8f23ead891a3b762f35ab3b04623da7056545b48aa60d59957e6789914545da \
+    --hash=sha256:f90938e92afda60266da758ee7d363447f7f0138c9559f9e1811629580582d90 \
+    --hash=sha256:faa679d19a6696fd54259ad321251ad77a13e70e03dd834daa762a44fb6196ef
+    # via
+    #   jsonschema
+    #   referencing
 typing-extensions==4.16.0 \
     --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \
     --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5
     # via
     #   pydantic
     #   pydantic-core
+    #   referencing
     #   typing-inspection
 typing-inspection==0.4.2 \
     --hash=sha256:4ed1cacbdc298c220f1bd249ed5287caa16f34d44ef4e9c3d0cbad5b521545e7 \
diff --git a/sdk/python/tests/test_ts_package_exports.py b/sdk/python/tests/test_ts_package_exports.py
index 4db501d8..ab48cdfa 100644
--- a/sdk/python/tests/test_ts_package_exports.py
+++ b/sdk/python/tests/test_ts_package_exports.py
@@ -103,10 +103,17 @@ def test_mirrored_paths_use_the_root_prefix(maps) -> None:
     )
 
 
+def _target_exists(target: str) -> bool:
+    """A file target exists; a wildcard target (``./jsonschema/*``) matches at least one file."""
+    if "*" in target:
+        return any(p.is_file() for p in _REPO_ROOT.glob(target[2:]))
+    return (_REPO_ROOT / target[2:]).is_file()
+
+
 def test_root_export_targets_exist(maps) -> None:
     """A mirrored path that points at nothing is worse than a missing one — it fails at import."""
     root, _ = maps
-    absent = [(k, v) for k, v in root.items() if not (_REPO_ROOT / v[2:]).is_file()]
+    absent = [(k, v) for k, v in root.items() if not _target_exists(v)]
     assert not absent, "root exports point at files that do not exist:\n  " + "\n  ".join(
         f"{k} -> {v}" for k, v in absent
     )
diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 6a3151bc..24b62b0b 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -3,8 +3,9 @@
 FORA protocol SDK for TypeScript. One package with three layers:
 
 - the generated wire types: Zod schemas (`@fora-protocol/sdk/wire/schemas`), the wire
-  parsing policy (`@fora-protocol/sdk/wire/base`) and the registered vocabulary
-  (`@fora-protocol/sdk/vocab/*`);
+  parsing policy (`@fora-protocol/sdk/wire/base`), the registered vocabulary
+  (`@fora-protocol/sdk/vocab/*`) and the published JSON Schemas, one file per message
+  (`@fora-protocol/sdk/jsonschema/*`);
 - the IO-free protocol mechanics: thumbprint, signed-URL verification, RFC 9421 request
   signing and verification, offer and acceptance signatures, canonicalization;
 - the IO tiers built on them: the key and endpoint resolvers and the Connect-unary JSON
@@ -31,6 +32,18 @@ import { parseWire } from "@fora-protocol/sdk/wire/base";
 import { OfferSchema } from "@fora-protocol/sdk/wire/schemas";
 ```
 
+The JSON Schemas are JSON files, one per message in a default and a strict variant
+(`fora.v1.ResourceResponse.schema.json`, `fora.v1.ResourceResponse.schema.strict.json`).
+The strict variant refuses unknown fields. Each file is self-contained, so it compiles on
+its own with Ajv, which the package already depends on:
+
+```ts
+import Ajv2020 from "ajv/dist/2020.js";
+import schema from "@fora-protocol/sdk/jsonschema/fora.v1.ResourceResponse.schema.strict.json" with { type: "json" };
+
+const validate = new Ajv2020({ validateFormats: false }).compile(schema);
+```
+
 Every module is a named subpath export; there is no package root import. The full list is
 the `exports` map of the package manifest. Source, tests and the release process are in
 [FORA-Protocol/protocol](https://github.com/FORA-Protocol/protocol) under `sdk/ts` and
diff --git a/sdk/ts/scripts/build.mjs b/sdk/ts/scripts/build.mjs
index 0a87d6fc..67951dc5 100644
--- a/sdk/ts/scripts/build.mjs
+++ b/sdk/ts/scripts/build.mjs
@@ -5,10 +5,12 @@
 //    ../../../gen/ts import keeps resolving inside the package.
 // 2. Compile .stage/ with tsconfig.build.json (NodeNext, .ts import suffixes
 //    rewritten to .js, declarations) into dist/.
-// 3. Write the staged release manifest dist/package.json: the sdk/ts export map
-//    pointed at the compiled files, plus the generated schemas and vocabulary.
-//    This manifest is the only one named @fora-protocol/sdk; npm pack / publish
-//    run against dist/.
+// 3. Copy the published JSON Schemas (gen/jsonschema/*.json) into dist/gen/jsonschema,
+//    the same relative layout the repo-root manifest exports them from.
+// 4. Write the staged release manifest dist/package.json: the sdk/ts export map
+//    pointed at the compiled files, plus the generated schemas and vocabulary, plus
+//    the JSON Schema export. This manifest is the only one named @fora-protocol/sdk;
+//    npm pack / publish run against dist/.
 import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { execFileSync } from "node:child_process";
@@ -21,6 +23,7 @@ const dist = join(pkgDir, "dist");
 
 const sdkPkg = JSON.parse(readFileSync(join(pkgDir, "package.json"), "utf8"));
 const genPkg = JSON.parse(readFileSync(join(repo, "gen/ts/package.json"), "utf8"));
+const rootPkg = JSON.parse(readFileSync(join(repo, "package.json"), "utf8"));
 
 rmSync(stage, { recursive: true, force: true });
 rmSync(dist, { recursive: true, force: true });
@@ -60,10 +63,23 @@ const exports = {};
 for (const [subpath, target] of Object.entries(sdkPkg.exports)) exports[subpath] = compiled("sdk/ts", target, ".d.ts");
 for (const [subpath, target] of Object.entries(genPkg.exports)) exports[subpath] = compiled("gen/ts", target, ".ts");
 
+// The JSON Schemas are data, shipped as they are generated. The subpath and its target
+// are read from the repo-root manifest, the map a git-dependency consumer resolves
+// through, so the two install paths expose the schemas at the same subpath. dist/ keeps
+// the repo's relative layout, so the target is valid in both manifests unchanged.
+const schemaSubpath = "./jsonschema/*";
+const schemaTarget = rootPkg.exports[schemaSubpath];
+if (schemaTarget !== "./gen/jsonschema/*") throw new Error(`root package.json exports ${schemaSubpath} -> ${schemaTarget}, expected ./gen/jsonschema/*`);
+const schemaFiles = readdirSync(join(repo, "gen/jsonschema")).filter((f) => f.endsWith(".json"));
+if (schemaFiles.length === 0) throw new Error("gen/jsonschema/ holds no schemas; run scripts/gen-sdk-types.sh");
+mkdirSync(join(dist, "gen/jsonschema"), { recursive: true });
+for (const f of schemaFiles) cpSync(join(repo, "gen/jsonschema", f), join(dist, "gen/jsonschema", f));
+
 // Every export target must exist in dist/. The export map is derived from the
 // manifests but the staged directory list above is hand-written, so a subpath
 // in a directory that is not staged would publish as ERR_MODULE_NOT_FOUND.
 const missing = [];
+if (!existsSync(join(dist, schemaTarget.replace("*", "fora.v1.ResourceResponse.schema.strict.json")))) missing.push(schemaSubpath);
 for (const [subpath, t] of Object.entries(exports)) {
   const stems = subpath.endsWith("/*")
     ? readdirSync(join(dist, dirname(t.default))).filter((f) => f.endsWith(".js")).map((f) => f.slice(0, -3))
@@ -77,13 +93,13 @@ const manifest = {
   name: "@fora-protocol/sdk",
   version: sdkPkg.version,
   description:
-    "FORA protocol SDK for TypeScript: the generated wire schemas (Zod) and vocabulary, the IO-free protocol mechanics (signing, verification, canonicalization), the key/endpoint resolvers and the Connect-unary JSON client.",
+    "FORA protocol SDK for TypeScript: the generated wire schemas (Zod) and vocabulary, the published JSON Schemas, the IO-free protocol mechanics (signing, verification, canonicalization), the key/endpoint resolvers and the Connect-unary JSON client.",
   license: "Apache-2.0",
   repository: { type: "git", url: "git+https://github.com/FORA-Protocol/protocol.git", directory: "sdk/ts" },
   homepage: "https://fora-protocol.org",
   type: "module",
   files: ["gen", "sdk"],
-  exports,
+  exports: { ...exports, [schemaSubpath]: schemaTarget },
   dependencies: sdkPkg.dependencies,
   peerDependencies: sdkPkg.peerDependencies,
   peerDependenciesMeta: sdkPkg.peerDependenciesMeta,
diff --git a/sdk/ts/tests/jsonschema.test.ts b/sdk/ts/tests/jsonschema.test.ts
new file mode 100644
index 00000000..361d57e2
--- /dev/null
+++ b/sdk/ts/tests/jsonschema.test.ts
@@ -0,0 +1,121 @@
+// The published JSON Schemas (gen/jsonschema/), reached the way an npm consumer reaches
+// them and validated with Ajv's draft 2020-12 engine.
+//
+// The subpath `./jsonschema/*` is resolved by Node's own resolver through the repo-root
+// manifest, the map a git-dependency consumer installs (sdk/ts/scripts/build.mjs copies
+// the same subpath into the published @fora-protocol/sdk manifest, and
+// scripts/release/smoke-npm.sh resolves it from the built tarball). Then:
+//   - the strict variant refuses an unknown field, nested ones included; the default
+//     variant accepts it;
+//   - google.protobuf.Struct (`ext`) stays open in the strict variant;
+//   - a buf.validate violation fails the schema;
+//   - both variants reach Go protovalidate's verdict on every case of the conformance
+//     corpus, as the Python suite asserts with the jsonschema library.
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync } from "node:fs";
+import { createRequire } from "node:module";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import Ajv2020, { type ValidateFunction } from "ajv/dist/2020";
+import { afterAll, describe, expect, it } from "vitest";
+
+import cases from "../../../conformance/corpus/cases.json";
+
+const repo = fileURLToPath(new URL("../../../", import.meta.url));
+const pkgName = (JSON.parse(readFileSync(join(repo, "package.json"), "utf8")) as { name: string }).name;
+
+// A consumer project with the repo installed as its dependency, as `npm install
+// <git url>` lays it out.
+const consumer = mkdtempSync(join(tmpdir(), "fora-jsonschema-"));
+mkdirSync(join(consumer, "node_modules", ...pkgName.split("/").slice(0, -1)), { recursive: true });
+symlinkSync(repo, join(consumer, "node_modules", pkgName), "dir");
+const consumerRequire = createRequire(join(consumer, "index.js"));
+afterAll(() => rmSync(consumer, { recursive: true, force: true }));
+
+function resolveSchema(name: string, strict: boolean): string {
+	const file = `${name}.schema${strict ? ".strict" : ""}.json`;
+	return consumerRequire.resolve(`${pkgName}/jsonschema/${file}`);
+}
+
+// Strict mode refuses any keyword Ajv does not know, so the schemas must be standard.
+// `format` is an annotation in draft 2020-12; validateFormats: false keeps it one, as the
+// schemas' README states, instead of failing on `duration`, which Ajv only knows with
+// ajv-formats installed.
+const ajv = new Ajv2020({ strict: true, validateFormats: false });
+const compiled = new Map<string, ValidateFunction>();
+function validator(name: string, strict: boolean): ValidateFunction {
+	const key = `${name}:${strict}`;
+	let v = compiled.get(key);
+	if (v === undefined) {
+		v = ajv.compile(JSON.parse(readFileSync(resolveSchema(name, strict), "utf8")) as object);
+		compiled.set(key, v);
+	}
+	return v;
+}
+const accepts = (name: string, instance: unknown, strict: boolean) => validator(name, strict)(instance) === true;
+
+type Case = { id: string; message: string; valid: boolean; json: Record<string, unknown> };
+const corpus = cases as Case[];
+const offer = corpus.find((c) => c.id === "Offer/valid")?.json;
+if (offer === undefined) throw new Error("the corpus has no Offer/valid case");
+const response = { exchange: "exchange.example", offers: [offer] };
+const RR = "fora.v1.ResourceResponse";
+
+describe("the published JSON Schemas", () => {
+	it("resolve through the package export path", () => {
+		expect(resolveSchema(RR, true)).toBe(join(repo, "gen/jsonschema", `${RR}.schema.strict.json`));
+		expect(() => resolveSchema("fora.v1.NoSuchMessage", true)).toThrow();
+	});
+
+	it("accept a valid message in both variants", () => {
+		expect(accepts(RR, response, false)).toBe(true);
+		expect(accepts(RR, response, true)).toBe(true);
+	});
+
+	it.each([
+		["top-level", { ...response, unknown_field: 1 }],
+		["nested", { ...response, offers: [{ ...offer, unknown_field: 1 }] }],
+		["camelCase alias", { ...response, offerGroups: [] }],
+	])("strict refuses an unknown field (%s), default accepts it", (_, body) => {
+		expect(accepts(RR, body, true)).toBe(false);
+		expect(accepts(RR, body, false)).toBe(true);
+	});
+
+	it("strict keeps google.protobuf.Struct open at any depth", () => {
+		const ext = { vendor: { nested: { deeper: [1, "two"] } }, flag: true };
+		expect(accepts(RR, { ...response, ext, offers: [{ ...offer, ext }] }, true)).toBe(true);
+	});
+
+	it.each([false, true])("a buf.validate violation fails the schema (strict: %s)", (strict) => {
+		expect(accepts(RR, { exchange: "" }, strict)).toBe(false);
+		expect(accepts(RR, {}, strict)).toBe(false);
+		const quota = { metric: "accesses", window: "QUOTA_WINDOW_DAILY" };
+		expect(accepts("fora.v1.Quota", { ...quota, limit: "1" }, strict)).toBe(true);
+		expect(accepts("fora.v1.Quota", { ...quota, limit: 1 }, strict)).toBe(true);
+		expect(accepts("fora.v1.Quota", { ...quota, limit: "0" }, strict)).toBe(false);
+		expect(accepts("fora.v1.Quota", { ...quota, limit: 0 }, strict)).toBe(false);
+	});
+
+	const names = new Map<string, string>();
+	for (const c of corpus) {
+		if (names.has(c.message)) continue;
+		for (const pkg of ["fora.v1", "fora.admin.v1"]) {
+			try {
+				resolveSchema(`${pkg}.${c.message}`, false);
+				names.set(c.message, `${pkg}.${c.message}`);
+				break;
+			} catch {
+				// not in this package
+			}
+		}
+	}
+
+	it.each(corpus.flatMap((c) => [false, true].map((strict) => [c.id, strict, c] as const)))(
+		"%s (strict: %s) matches the Go verdict",
+		(_, strict, c) => {
+			const name = names.get(c.message);
+			expect(name, `no published schema for ${c.message}`).toBeDefined();
+			expect(accepts(name as string, c.json, strict)).toBe(c.valid);
+		},
+	);
+});

From e5fe79df12aded1f52377756559d18d27c3f0b91 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 03:22:52 -0400
Subject: [PATCH 012/164] Describe validating messages against the published
 JSON Schemas

A new reference page, JSON Schemas, says where each package ships the
schemas, how to validate a message with jsonschema (Python) and Ajv
(TypeScript), and what the two variants accept: snake_case proto field
names, an open google.protobuf.Struct, 64-bit integers as a decimal string
or a JSON integer with the bound on both forms, other numbers as JSON
numbers, and the carried buf.validate constraints. It also names what the
schemas do not check: cross-field rules, oneof exclusivity and formats.

The repository README lists the schemas next to the generated types, and
both changelogs gain an Unreleased entry.
---
 README.md                                     |  17 +++
 proto/CHANGELOG.md                            |  29 +++++
 website/astro.config.mjs                      |   1 +
 .../src/content/docs/reference/changelog.mdx  |  30 +++++
 .../content/docs/reference/json-schemas.mdx   | 117 ++++++++++++++++++
 5 files changed, 194 insertions(+)
 create mode 100644 website/src/content/docs/reference/json-schemas.mdx

diff --git a/README.md b/README.md
index fbfdc922..dc852d8f 100644
--- a/README.md
+++ b/README.md
@@ -118,6 +118,23 @@ from wire.models import Offer, Pricing
 from vocab import pricingunits
 ```
 
+### JSON Schema
+
+The same generator run also emits one self-contained JSON Schema (draft 2020-12) per
+message under [`gen/jsonschema/`](gen/jsonschema), named by the fully-qualified message
+name, in a default and a strict variant. The strict variant refuses unknown fields at
+every depth, so a conformance check can catch an unknown or misspelled field. All three
+packages ship them: the Go module as that directory (plus `jsonschema.Load` and
+`jsonschema.FS` in package `github.com/FORA-Protocol/protocol/gen/jsonschema`), the
+Python package through `wire.schemas.load(name, strict=...)`, and the npm package under
+`@fora-protocol/sdk/jsonschema/*`. The [schemas' README](gen/jsonschema/README.md)
+records how they treat field naming, `google.protobuf.Struct` and 64-bit integers.
+
+```python
+from wire import schemas
+schema = schemas.load("fora.v1.ResourceResponse", strict=True)
+```
+
 ## Protocol SDK
 
 Beyond the generated wire types, the repo ships a hand-written **protocol SDK** in all
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 9e27a888..ed68e1cd 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,35 @@
 
 ## Unreleased
 
+**Published JSON Schemas, with a strict variant (no wire change).** The SDK build
+already generated a JSON Schema per message from `fora.proto` and discarded it after
+generating the Pydantic and Zod models. Those schemas are now release artifacts under
+`gen/jsonschema/`: one self-contained draft 2020-12 file per message of `fora.v1` and
+`fora.admin.v1`, named by the fully-qualified message name, in two variants.
+`fora.v1.ResourceResponse.schema.json` accepts unknown fields;
+`fora.v1.ResourceResponse.schema.strict.json` sets `additionalProperties: false` on every
+message object at every depth, so a conformance check fails on an unknown or misspelled
+field.
+
+- Shipped in all three packages: the Go module as the `gen/jsonschema/` directory, with
+  `jsonschema.Load(name, strict)` and `jsonschema.FS` in package
+  `github.com/FORA-Protocol/protocol/gen/jsonschema`; `fora-protocol` on PyPI as package
+  data, read with `wire.schemas.load(name, strict=False)` and listed by
+  `wire.schemas.names()`; `@fora-protocol/sdk` on npm under the export path
+  `./jsonschema/*`.
+- The schemas describe canonical proto-JSON. Field names are the snake_case proto names,
+  and the lowerCamel aliases the generator emits are dropped, so a camelCase key is an
+  unknown field. `google.protobuf.Struct` (every `ext`) stays open in the strict variant.
+  A 64-bit integer accepts a decimal string or a JSON integer, with its bound applied to
+  both forms; other numbers are JSON numbers only, so a string cannot carry a value past
+  a numeric bound.
+- They carry the per-field `buf.validate` constraints, and mark `required` every field
+  whose zero value its own rule rejects. Cross-field rules and oneof exclusivity are not
+  expressible per field and are not in the schemas.
+- The drift gate regenerates and compares them like the generated code. A Go conformance
+  test checks them against the descriptors, and both variants must match Go
+  protovalidate on every case of the conformance corpus, in Python and in TypeScript.
+
 **The Broker buys: `BrokerService.ExecuteTransaction` (additive wire change).**
 A purchase of offers from several Exchanges is now one call to the Broker. Before
 this change `BrokerService` had only `Resolve`, and the contract described the
diff --git a/website/astro.config.mjs b/website/astro.config.mjs
index 2c440bd2..6508928c 100644
--- a/website/astro.config.mjs
+++ b/website/astro.config.mjs
@@ -128,6 +128,7 @@ export default defineConfig({
 					items: [
 						{ label: 'Proto: FORA v1', slug: 'reference/proto-fora' },
 						{ label: 'Proto: Admin v1', slug: 'reference/proto-admin' },
+						{ label: 'JSON Schemas', slug: 'reference/json-schemas' },
 						{ label: 'Standards & References', slug: 'reference/standards' },
 						{ label: 'fora.json Example', slug: 'reference/fora-json-example' },
 						{ label: 'Changelog', slug: 'reference/changelog' },
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 533581f2..4f5b95a3 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,36 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Published JSON Schemas, with a strict variant (no wire change).** The SDK build
+already generated a JSON Schema per message from `fora.proto` and discarded it after
+generating the Pydantic and Zod models. Those schemas are now release artifacts under
+`gen/jsonschema/`: one self-contained draft 2020-12 file per message of `fora.v1` and
+`fora.admin.v1`, named by the fully-qualified message name, in two variants.
+`fora.v1.ResourceResponse.schema.json` accepts unknown fields;
+`fora.v1.ResourceResponse.schema.strict.json` sets `additionalProperties: false` on every
+message object at every depth, so a conformance check fails on an unknown or misspelled
+field. [JSON Schemas](/reference/json-schemas/) describes how to validate a message
+against them.
+
+- Shipped in all three packages: the Go module as the `gen/jsonschema/` directory, with
+  `jsonschema.Load(name, strict)` and `jsonschema.FS` in package
+  `github.com/FORA-Protocol/protocol/gen/jsonschema`; `fora-protocol` on PyPI as package
+  data, read with `wire.schemas.load(name, strict=False)` and listed by
+  `wire.schemas.names()`; `@fora-protocol/sdk` on npm under the export path
+  `./jsonschema/*`.
+- The schemas describe canonical proto-JSON. Field names are the snake_case proto names,
+  and the lowerCamel aliases the generator emits are dropped, so a camelCase key is an
+  unknown field. `google.protobuf.Struct` (every `ext`) stays open in the strict variant.
+  A 64-bit integer accepts a decimal string or a JSON integer, with its bound applied to
+  both forms; other numbers are JSON numbers only, so a string cannot carry a value past
+  a numeric bound.
+- They carry the per-field `buf.validate` constraints, and mark `required` every field
+  whose zero value its own rule rejects. Cross-field rules and oneof exclusivity are not
+  expressible per field and are not in the schemas.
+- The drift gate regenerates and compares them like the generated code. A Go conformance
+  test checks them against the descriptors, and both variants must match Go
+  protovalidate on every case of the conformance corpus, in Python and in TypeScript.
+
 **The Broker buys: `BrokerService.ExecuteTransaction` (additive wire change).**
 A purchase of offers from several Exchanges is now one call to the Broker. Before
 this change `BrokerService` had only `Resolve`, and the contract described the
diff --git a/website/src/content/docs/reference/json-schemas.mdx b/website/src/content/docs/reference/json-schemas.mdx
new file mode 100644
index 00000000..6db17e89
--- /dev/null
+++ b/website/src/content/docs/reference/json-schemas.mdx
@@ -0,0 +1,117 @@
+---
+title: "JSON Schemas"
+description: "Validate a FORA message against the published per-message JSON Schemas, in a default or a strict variant."
+---
+
+Every release publishes one JSON Schema (draft 2020-12) for each message of the wire
+contract, `fora.v1` and `fora.admin.v1`. An implementer or a conformance harness can
+check the shape of a FORA message against them, in any language, without the SDK.
+
+The schemas are generated from the proto by the same pinned generator the SDK models are
+built from (`bufbuild/protoschema-plugins` `protoc-gen-jsonschema` v0.6.0), so they carry
+the per-field `buf.validate` constraints. CI regenerates them on every change and fails
+if the committed files differ.
+
+## Two variants
+
+Each message has two files, named by its fully-qualified name:
+
+| File | Unknown fields |
+|---|---|
+| `fora.v1.ResourceResponse.schema.json` | Accepted. A reader that must accept messages from a newer protocol version uses this variant. |
+| `fora.v1.ResourceResponse.schema.strict.json` | Refused: `additionalProperties` is `false` on every message object, at every depth. A conformance check uses this variant, so an unknown or misspelled field fails. |
+
+Each file is self-contained. The message is the document root, and every message it
+references is inlined under `$defs`, keyed by its fully-qualified name. One file is
+enough to validate a message, with no schema registry and no network access.
+
+## Where to get them
+
+The schemas ship in all three published packages, at the version you pin:
+
+| Package | Access |
+|---|---|
+| Go module `github.com/FORA-Protocol/protocol` | The `gen/jsonschema/` directory. Package `github.com/FORA-Protocol/protocol/gen/jsonschema` embeds it: `jsonschema.Load("fora.v1.ResourceResponse", true)` returns the strict variant, and `jsonschema.FS` holds every file. |
+| `fora-protocol` on PyPI | `wire.schemas.load("fora.v1.ResourceResponse", strict=True)` returns the schema as a `dict`. `wire.schemas.names()` lists the messages. |
+| `@fora-protocol/sdk` on npm | The export path `@fora-protocol/sdk/jsonschema/*`, for example `@fora-protocol/sdk/jsonschema/fora.v1.ResourceResponse.schema.strict.json`. |
+
+## Validate a message
+
+Python, with the `jsonschema` library:
+
+```python
+from jsonschema import Draft202012Validator
+from wire import schemas
+
+validator = Draft202012Validator(schemas.load("fora.v1.ResourceResponse", strict=True))
+validator.validate(body)  # raises ValidationError on an unknown field or a constraint violation
+```
+
+TypeScript, with Ajv, which `@fora-protocol/sdk` already depends on:
+
+```ts
+import Ajv2020 from "ajv/dist/2020.js";
+import schema from "@fora-protocol/sdk/jsonschema/fora.v1.ResourceResponse.schema.strict.json" with { type: "json" };
+
+const validate = new Ajv2020({ validateFormats: false }).compile(schema);
+if (!validate(body)) console.log(validate.errors);
+```
+
+Go reads the file with `jsonschema.Load` and passes the bytes to any draft 2020-12
+validator.
+
+## What the schemas accept
+
+The schemas describe canonical proto-JSON as the FORA wire carries it. The two variants
+differ only in the unknown-field policy; everything below applies to both.
+
+- **Field names are the proto field names, in snake_case.** That is the FORA wire
+  naming: servers render proto-JSON with the proto names, the SDKs send them, and the
+  canonical signing form uses them. A lowerCamel key such as `offerGroups` is an unknown
+  field, so the strict variant refuses it.
+- **`google.protobuf.Struct` stays open.** Every `ext` field is a Struct: a JSON object
+  whose keys the contract does not define. The strict variant never closes a Struct, at
+  any depth. A map field keeps its value schema.
+- **64-bit integers accept a decimal string or a JSON integer.** Canonical proto-JSON, and
+  so a FORA server, emits an `int64` as a string; the SDKs send a JSON number. A bound
+  applies to both forms: `Quota.limit` must be at least 1, so both `0` and `"0"` fail.
+- **Other numbers are JSON numbers.** Proto-JSON parsers also accept an `int32` or a
+  `double` as a string, but no FORA sender emits that form, and accepting it would let a
+  string such as `"1000"` past a numeric bound.
+- **Constraints.** String patterns and lengths, numeric bounds, enum restrictions and item
+  counts are carried from `buf.validate`. A field whose zero value its own rule rejects is
+  `required`, because proto-JSON omits a zero value, so an omitted field is that zero
+  value. A `repeated.unique` field carries `uniqueItems`.
+- **Enums** accept the value name, which FORA senders emit, or the number of a permitted
+  value, which proto-JSON parsers also accept.
+
+For example, the strict variant of `Quota` accepts this message:
+
+```json
+{ "limit": "5", "metric": "accesses", "window": "QUOTA_WINDOW_DAILY" }
+```
+
+It refuses the same message with `"limit": "0"` (the bound), without `metric` (a required
+field), or with an added `"metricName": "accesses"` (an unknown field).
+
+## What the schemas do not check
+
+- **Cross-field rules.** A rule that relates two fields, such as which pricing fields a
+  pricing model requires, cannot be expressed per field. Servers enforce these rules, and
+  the SDKs apply them too.
+- **Oneof exclusivity.** A schema does not refuse two members of the same oneof.
+- **Formats.** `format` (`date-time`, `duration`) is an annotation unless your validator
+  is configured to assert formats.
+
+A message that passes the strict schema has the right shape and field-level values; a
+server can still refuse it for a cross-field rule, a signature or the state of the
+transaction.
+
+## How the schemas are checked
+
+- The drift gate regenerates the schemas from the proto and compares the files byte for
+  byte, as it does for the generated code.
+- A Go conformance test checks the file set, the field names and the unknown-field policy
+  against the compiled proto descriptors.
+- Both variants must reach the verdict of Go `protovalidate` on every case of the
+  conformance corpus, in Python (with `jsonschema`) and in TypeScript (with Ajv).

From 867fb0fe0c1702b119f83f1b0101d89d84180376 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 03:42:42 -0400
Subject: [PATCH 013/164] Pin ErrorDetail binary decoding and
 value-before-debug with shared vectors

The JSON SDKs read a Connect error's typed reason from the debug projection
and never from details[].value, the binary ErrorDetail that connect-go always
sends. Two corpora now pin reading value first:

- connect-error-vectors.json gains expect.detail, the whole ErrorDetail as
  canonical proto-JSON, and three kinds of row derived from captured
  envelopes: a .value_only twin of every case with a detail,
  value_wins_over_debug, and undecodable_value_skipped, whose debug must not
  be read in place of a value that fails to decode.
- error-detail-wire-vectors.json carries the ErrorDetail subtree's field and
  enum tables read from the compiled descriptor, and binary encodings with
  their proto-JSON. Every field of every message in the subtree is set in at
  least one vector, which the emitter checks; the rest cover an unpacked
  repeated enum, a singular field written twice, unknown fields of every wire
  type and the empty message.

Go replays both through the generated code.
---
 sdk/go/connect/connect_error_corpus_test.go   |   6 +
 .../connect/gen_connect_error_vectors_test.go | 131 ++++-
 .../gen_error_detail_wire_vectors_test.go     | 353 +++++++++++++
 .../testdata/connect-error-vectors.json       | 487 +++++++++++++++++-
 .../testdata/error-detail-wire-vectors.json   | 458 ++++++++++++++++
 5 files changed, 1412 insertions(+), 23 deletions(-)
 create mode 100644 sdk/go/connect/gen_error_detail_wire_vectors_test.go
 create mode 100644 sdk/go/connect/testdata/error-detail-wire-vectors.json

diff --git a/sdk/go/connect/connect_error_corpus_test.go b/sdk/go/connect/connect_error_corpus_test.go
index ea6ddfa4..20f47b05 100644
--- a/sdk/go/connect/connect_error_corpus_test.go
+++ b/sdk/go/connect/connect_error_corpus_test.go
@@ -21,6 +21,7 @@ import (
 	"net/http"
 	"net/http/httptest"
 	"os"
+	"reflect"
 	"testing"
 
 	connectrpc "connectrpc.com/connect"
@@ -85,6 +86,11 @@ func TestConnectErrorCorpusReplay(t *testing.T) {
 				t.Errorf("reason = (%q, %q), want (%q, %q)",
 					field, enum, v.Expect.ReasonFrom, v.Expect.ReasonEnum)
 			}
+			// The whole detail, not only the projection: a nested member lost on the way
+			// (field_errors, a metadata entry) fails here.
+			if got := protoJSONOf(detail); !reflect.DeepEqual(got, v.Expect.Detail) {
+				t.Errorf("detail = %v, want %v", got, v.Expect.Detail)
+			}
 		})
 	}
 }
diff --git a/sdk/go/connect/gen_connect_error_vectors_test.go b/sdk/go/connect/gen_connect_error_vectors_test.go
index 59399772..43b365e2 100644
--- a/sdk/go/connect/gen_connect_error_vectors_test.go
+++ b/sdk/go/connect/gen_connect_error_vectors_test.go
@@ -4,11 +4,12 @@ package connect_test
 //
 // The ADR-019 ErrorDetail corpus (sdk/go/helpers/testdata/error-detail-vectors.json)
 // pins the DETAIL's own proto-JSON. It says nothing about the ENVELOPE the detail
-// arrives in, and the envelope is where the JSON-only SDKs actually read from: they
-// have no protobuf binary codec, so they cannot open the detail's `value` (a base64
-// Any) and must read Connect's `debug` projection instead.
+// arrives in, and the envelope is where the JSON SDKs actually read from: the detail's
+// `value` (the binary ErrorDetail, base64), and Connect's `debug` projection when no
+// `value` is present. The binary decoding itself is pinned field by field by
+// error-detail-wire-vectors.json.
 //
-// That projection does not follow the FORA wire naming, and no server option changes
+// The projection does not follow the FORA wire naming, and no server option changes
 // it. connect-go builds it with its own protojson codec at default options, so the
 // keys are lowerCamelCase — `transactionDenial`, `fieldErrors` — while everything else
 // on the FORA wire, including the response bodies the same server emits through
@@ -27,7 +28,18 @@ package connect_test
 // Each vector carries the envelope AS SERVED plus the projection every SDK must extract
 // from it. The Go replay (connect_error_corpus_test.go) serves the recorded bytes back
 // through a real client and asserts ErrorDetailFrom reaches the projection; the Python
-// and TS replays parse the same envelope with their own error_detail_from / reason.
+// and TS replays parse the same envelope with their own error_detail_from / reason, and
+// decode it through their own client to read the Connect code off the typed failure.
+//
+// The detail's `value` is the authoritative copy: it is the binary ErrorDetail itself,
+// while `debug` is a projection connect-go adds for JSON readers and is free to omit.
+// Every SDK reads `value` and falls back to `debug` only when `value` is absent. Three
+// kinds of DERIVED vector hold that rule, each built by editing a captured envelope:
+// a `.value_only` twin of every captured case with a detail, which carries no `debug`
+// at all; `value_wins_over_debug`, whose `debug` describes a different detail than its
+// `value`; and `undecodable_value_skipped`, whose `value` is not an ErrorDetail and
+// whose `debug` must still not be read in its place. Go reads only `value`, so its
+// replay of the derived rows is the same real round trip as for the captured ones.
 //
 // Like the other emitters this test is a verification no-op by default (it asserts the
 // committed file matches a fresh emit) and (re)writes it under FORA_UPDATE_VECTORS=1.
@@ -37,6 +49,7 @@ import (
 	"context"
 	"encoding/json"
 	"errors"
+	"fmt"
 	"io"
 	"net/http"
 	"net/http/httptest"
@@ -45,6 +58,8 @@ import (
 	"testing"
 
 	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/encoding/protojson"
+	"google.golang.org/protobuf/proto"
 
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
 	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
@@ -95,6 +110,11 @@ type connectErrorExpectation struct {
 	Metadata   map[string]string `json:"metadata"`
 	ReasonFrom string            `json:"reason_field"`
 	ReasonEnum string            `json:"reason_enum"`
+	// Detail is the whole ErrorDetail as canonical proto-JSON under the proto field
+	// names, or null when the envelope carries none. The projection above names the
+	// fields a caller branches on; this pins every field, so a decoder that reads the
+	// reason and drops a nested member (field_errors, metadata) fails here.
+	Detail any `json:"detail"`
 }
 
 // errorCase is one server-side failure to capture.
@@ -204,10 +224,11 @@ func connectErrorCases() []errorCase {
 func TestGenerateConnectErrorVectors(t *testing.T) {
 	doc := map[string]any{
 		"note": "Connect JSON error envelopes captured from a real connect-go handler. " +
-			"details[].debug is lowerCamelCase — connect-go builds it with its own protojson " +
-			"codec at default options, which no server codec replaces — while every FORA " +
-			"message body is snake_case. details[].value is the base64 binary Any, which the " +
-			"JSON-only SDKs deliberately cannot open.",
+			"details[].value is the base64 binary ErrorDetail and is the authoritative copy; " +
+			"details[].debug is a lowerCamelCase projection — connect-go builds it with its own " +
+			"protojson codec at default options, which no server codec replaces — read only " +
+			"when value is absent. Rows named *.value_only, value_wins_over_debug and " +
+			"undecodable_value_skipped are derived by editing a captured envelope.",
 		"vectors": buildConnectErrorVectors(t),
 	}
 	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
@@ -228,10 +249,10 @@ func TestGenerateConnectErrorVectors(t *testing.T) {
 func buildConnectErrorVectors(t *testing.T) []connectErrorVector {
 	t.Helper()
 	cases := connectErrorCases()
-	out := make([]connectErrorVector, 0, len(cases))
+	captured := make([]connectErrorVector, 0, len(cases))
 	for _, c := range cases {
 		status, envelope, peerMessage := captureEnvelope(t, c)
-		out = append(out, connectErrorVector{
+		captured = append(captured, connectErrorVector{
 			Name:        c.name,
 			Code:        c.code.String(),
 			HTTPStatus:  status,
@@ -240,9 +261,96 @@ func buildConnectErrorVectors(t *testing.T) []connectErrorVector {
 			PeerMessage: peerMessage,
 		})
 	}
+	return append(captured, derivedConnectErrorVectors(t, captured)...)
+}
+
+// derivedConnectErrorVectors builds the rows that hold the value-before-debug rule, by
+// editing captured envelopes. See the file comment for what each kind proves.
+func derivedConnectErrorVectors(t *testing.T, captured []connectErrorVector) []connectErrorVector {
+	t.Helper()
+	byName := make(map[string]connectErrorVector, len(captured))
+	var out []connectErrorVector
+	for _, v := range captured {
+		byName[v.Name] = v
+		if !v.Expect.HasDetail {
+			continue
+		}
+		twin := v
+		twin.Name = v.Name + ".value_only"
+		twin.Envelope = editDetails(t, v.Envelope, func(d map[string]any) { delete(d, "debug") })
+		out = append(out, twin)
+	}
+
+	// The value names one detail and the debug projection another. The value is the
+	// detail; the projection describing something else is not read at all.
+	denial, dispute := byName["transaction_denial_insufficient_balance"], byName["dispute_failure"]
+	otherDebug := firstDetail(t, dispute.Envelope)["debug"]
+	wins := denial
+	wins.Name = "value_wins_over_debug"
+	wins.Envelope = editDetails(t, denial.Envelope, func(d map[string]any) { d["debug"] = otherDebug })
+	out = append(out, wins)
+
+	// A value that is not an ErrorDetail ("ignored", base64) makes the entry unreadable.
+	// Its debug projection is intact and still must not be read in the value's place:
+	// the fallback is for a value that is ABSENT, never for one that failed to decode.
+	skipped := denial
+	skipped.Name = "undecodable_value_skipped"
+	skipped.Envelope = editDetails(t, denial.Envelope, func(d map[string]any) { d["value"] = "aWdub3JlZA" })
+	skipped.Expect = connectErrorExpectation{}
+	skipped.PeerMessage = ""
+	out = append(out, skipped)
 	return out
 }
 
+// editDetails returns a deep copy of envelope with edit applied to every details entry.
+func editDetails(t *testing.T, envelope any, edit func(map[string]any)) any {
+	t.Helper()
+	b, err := json.Marshal(envelope)
+	if err != nil {
+		t.Fatalf("copy envelope: %v", err)
+	}
+	var copied map[string]any
+	if err := json.Unmarshal(b, &copied); err != nil {
+		t.Fatalf("copy envelope: %v", err)
+	}
+	details, _ := copied["details"].([]any)
+	for _, d := range details {
+		if entry, ok := d.(map[string]any); ok {
+			edit(entry)
+		}
+	}
+	return copied
+}
+
+// firstDetail returns the first details entry of a captured envelope.
+func firstDetail(t *testing.T, envelope any) map[string]any {
+	t.Helper()
+	env, _ := envelope.(map[string]any)
+	details, _ := env["details"].([]any)
+	if len(details) == 0 {
+		t.Fatalf("envelope carries no details entry")
+	}
+	entry, ok := details[0].(map[string]any)
+	if !ok {
+		t.Fatalf("details entry is not an object")
+	}
+	return entry
+}
+
+// protoJSONOf renders a message as canonical proto-JSON under the proto field names,
+// parsed back so the committed corpus stores it as a JSON value.
+func protoJSONOf(m proto.Message) any {
+	b, err := protojson.MarshalOptions{UseProtoNames: true}.Marshal(m)
+	if err != nil {
+		panic(fmt.Sprintf("render %T: %v", m, err))
+	}
+	var v any
+	if err := json.Unmarshal(b, &v); err != nil {
+		panic(fmt.Sprintf("parse rendered %T: %v", m, err))
+	}
+	return v
+}
+
 // expectationOf renders what every SDK must read out of the envelope, DERIVED from the
 // detail the server attached rather than restated — the reason is read back through the
 // real helpers.Reason accessor, so the corpus cannot claim a reason Go would not report.
@@ -255,6 +363,7 @@ func expectationOf(detail *forav1.ErrorDetail) connectErrorExpectation {
 		Domain:    detail.GetDomain(),
 		Message:   detail.GetMessage(),
 		Metadata:  detail.GetMetadata(),
+		Detail:    protoJSONOf(detail),
 	}
 	switch r := helpers.Reason(detail).(type) {
 	case nil:
diff --git a/sdk/go/connect/gen_error_detail_wire_vectors_test.go b/sdk/go/connect/gen_error_detail_wire_vectors_test.go
new file mode 100644
index 00000000..638b9cb6
--- /dev/null
+++ b/sdk/go/connect/gen_error_detail_wire_vectors_test.go
@@ -0,0 +1,353 @@
+package connect_test
+
+// ErrorDetail binary-decoding cross-language golden-vector emitter.
+//
+// A Connect error carries its typed reason as `details[].value`: the binary protobuf
+// encoding of fora.v1.ErrorDetail, base64-encoded. Go opens it with the generated
+// code. The Python and TypeScript SDKs have no protobuf runtime, so each carries a small
+// table-driven decoder for the ErrorDetail subtree — the ErrorDetail message, its eight
+// reason messages, RegistrationFieldError, and the enums they use. A decoder table is a
+// second statement of the shape, so this corpus pins it from both sides:
+//
+//   - `wire` is the subtree's field and enum tables, read from the compiled descriptor.
+//     Each JSON SDK asserts its own table is EQUAL to it, so a field added to the proto
+//     fails their suites until their table carries it.
+//   - `vectors` are binary encodings and the canonical proto-JSON each must decode to.
+//     Between them every field of every message in the subtree is set at least once
+//     (checked below against the same descriptor), alongside the encodings a decoder
+//     must accept without the generated code to lean on: an unpacked repeated enum, a
+//     singular field written twice (the last value wins), unknown fields of every wire
+//     type, and the empty message.
+//
+// Values are marshaled with Deterministic set, so a map with two entries encodes the
+// same bytes on every run and the drift gate fires only on a real change.
+//
+// Like the other emitters this test is a verification no-op by default (it asserts the
+// committed file matches a fresh emit) and (re)writes it under FORA_UPDATE_VECTORS=1.
+// It is TEST INFRASTRUCTURE, not the code under test.
+
+import (
+	"encoding/base64"
+	"os"
+	"reflect"
+	"sort"
+	"strconv"
+	"testing"
+
+	"google.golang.org/protobuf/encoding/protowire"
+	"google.golang.org/protobuf/proto"
+	"google.golang.org/protobuf/reflect/protoreflect"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/internal/vectorio"
+)
+
+const errorDetailWireVectorsPath = "testdata/error-detail-wire-vectors.json"
+
+// wireField is one field of a message in the decoder table.
+type wireField struct {
+	Name   string `json:"name"`
+	Number int    `json:"number"`
+	// Kind is the protobuf kind ("string", "enum", "message", ...), or "map".
+	Kind string `json:"kind"`
+	// Type is the fully-qualified enum or message name for those kinds, "" otherwise.
+	Type     string `json:"type,omitempty"`
+	Repeated bool   `json:"repeated,omitempty"`
+	// MapKey and MapValue are the key and value kinds of a map field.
+	MapKey   string `json:"map_key,omitempty"`
+	MapValue string `json:"map_value,omitempty"`
+}
+
+// wireVector is one binary ErrorDetail and the proto-JSON it decodes to.
+type wireVector struct {
+	Name string `json:"name"`
+	// Value is the binary encoding, base64 with the standard alphabet and no padding,
+	// which is how connect-go writes details[].value.
+	Value string `json:"value"`
+	// Detail is the canonical proto-JSON under the proto field names.
+	Detail any `json:"detail"`
+}
+
+// TestGenerateErrorDetailWireVectors emits the ErrorDetail binary-decoding corpus.
+func TestGenerateErrorDetailWireVectors(t *testing.T) {
+	messages, enums := errorDetailWireTables()
+	vectors := buildErrorDetailWireVectors(t)
+	requireEveryFieldSet(t, vectors)
+	doc := map[string]any{
+		"note": "Binary fora.v1.ErrorDetail encodings and their canonical proto-JSON, for the " +
+			"table-driven decoders of the JSON SDKs. wire.messages and wire.enums are the " +
+			"ErrorDetail subtree read from the compiled descriptor; every field of every " +
+			"message there is set in at least one vector.",
+		"wire":    map[string]any{"messages": messages, "enums": enums},
+		"vectors": vectors,
+	}
+	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
+		if err := vectorio.Write(errorDetailWireVectorsPath, doc); err != nil {
+			t.Fatalf("write %s: %v", errorDetailWireVectorsPath, err)
+		}
+		return
+	}
+	stale, err := vectorio.Stale(errorDetailWireVectorsPath, doc)
+	if err != nil {
+		t.Fatalf("read %s: %v", errorDetailWireVectorsPath, err)
+	}
+	if stale {
+		t.Fatalf("%s is stale; re-run with FORA_UPDATE_VECTORS=1 to regenerate", errorDetailWireVectorsPath)
+	}
+}
+
+// TestErrorDetailWireCorpusReplay decodes every committed value with the generated code
+// and requires the committed proto-JSON, so the corpus Go emits is one Go also reads.
+func TestErrorDetailWireCorpusReplay(t *testing.T) {
+	for _, v := range buildErrorDetailWireVectors(t) {
+		raw, err := base64.RawStdEncoding.DecodeString(v.Value)
+		if err != nil {
+			t.Fatalf("%s: value is not unpadded base64: %v", v.Name, err)
+		}
+		var detail forav1.ErrorDetail
+		if err := proto.Unmarshal(raw, &detail); err != nil {
+			t.Fatalf("%s: decode: %v", v.Name, err)
+		}
+		if got := protoJSONOf(&detail); !reflect.DeepEqual(got, v.Detail) {
+			t.Errorf("%s: detail = %v, want %v", v.Name, got, v.Detail)
+		}
+	}
+}
+
+// errorDetailWireTables walks the ErrorDetail subtree of the compiled descriptor.
+func errorDetailWireTables() (map[string][]wireField, map[string]map[string]string) {
+	messages := map[string][]wireField{}
+	enums := map[string]map[string]string{}
+	var walk func(md protoreflect.MessageDescriptor)
+	walk = func(md protoreflect.MessageDescriptor) {
+		name := string(md.FullName())
+		if _, seen := messages[name]; seen {
+			return
+		}
+		messages[name] = []wireField{}
+		fields := md.Fields()
+		out := make([]wireField, 0, fields.Len())
+		for i := 0; i < fields.Len(); i++ {
+			fd := fields.Get(i)
+			f := wireField{Name: string(fd.Name()), Number: int(fd.Number()), Kind: fd.Kind().String()}
+			switch {
+			case fd.IsMap():
+				f.Kind = "map"
+				f.MapKey = fd.MapKey().Kind().String()
+				f.MapValue = fd.MapValue().Kind().String()
+			case fd.Kind() == protoreflect.EnumKind:
+				f.Type = string(fd.Enum().FullName())
+				enums[f.Type] = enumTable(fd.Enum())
+			case fd.Kind() == protoreflect.MessageKind:
+				f.Type = string(fd.Message().FullName())
+				walk(fd.Message())
+			}
+			f.Repeated = fd.IsList()
+			out = append(out, f)
+		}
+		sort.Slice(out, func(a, b int) bool { return out[a].Number < out[b].Number })
+		messages[name] = out
+	}
+	walk((&forav1.ErrorDetail{}).ProtoReflect().Descriptor())
+	return messages, enums
+}
+
+func enumTable(ed protoreflect.EnumDescriptor) map[string]string {
+	values := ed.Values()
+	out := make(map[string]string, values.Len())
+	for i := 0; i < values.Len(); i++ {
+		v := values.Get(i)
+		out[strconv.Itoa(int(v.Number()))] = string(v.Name())
+	}
+	return out
+}
+
+func buildErrorDetailWireVectors(t *testing.T) []wireVector {
+	t.Helper()
+	var out []wireVector
+	add := func(name string, raw []byte) {
+		var detail forav1.ErrorDetail
+		if err := proto.Unmarshal(raw, &detail); err != nil {
+			t.Fatalf("%s: the corpus value does not decode: %v", name, err)
+		}
+		out = append(out, wireVector{
+			Name: name, Value: base64.RawStdEncoding.EncodeToString(raw), Detail: protoJSONOf(&detail),
+		})
+	}
+	for _, c := range everyFieldDetails() {
+		add(c.name, deterministic(t, c.detail))
+	}
+
+	// restriction_mismatches written one tag per element. proto3 packs a repeated enum,
+	// and a conforming decoder accepts both forms.
+	unpacked := deterministic(t, &forav1.ErrorDetail{Domain: exchangeDomain})
+	denial := protowire.AppendTag(nil, 1, protowire.VarintType)
+	denial = protowire.AppendVarint(denial, uint64(forav1.DenialReason_DENIAL_REASON_RESTRICTION_NOT_SATISFIED))
+	for _, k := range []forav1.RestrictionKind{forav1.RestrictionKind_RESTRICTION_KIND_USER_TYPE, forav1.RestrictionKind_RESTRICTION_KIND_OTHER} {
+		denial = protowire.AppendTag(denial, 2, protowire.VarintType)
+		denial = protowire.AppendVarint(denial, uint64(k))
+	}
+	unpacked = protowire.AppendTag(unpacked, 10, protowire.BytesType)
+	unpacked = protowire.AppendBytes(unpacked, denial)
+	add("unpacked_repeated_enum", unpacked)
+
+	// A singular field written twice: the last value is the field's value.
+	twice := protowire.AppendTag(nil, 2, protowire.BytesType)
+	twice = protowire.AppendString(twice, "first.domain")
+	twice = protowire.AppendTag(twice, 2, protowire.BytesType)
+	twice = protowire.AppendString(twice, exchangeDomain)
+	add("singular_field_last_value_wins", twice)
+
+	// Unknown fields of every wire type, at the top level and inside a reason message.
+	// A decoder skips each one by its wire type and keeps reading.
+	unknown := func(b []byte) []byte {
+		b = protowire.AppendTag(b, 99, protowire.VarintType)
+		b = protowire.AppendVarint(b, 300)
+		b = protowire.AppendTag(b, 98, protowire.BytesType)
+		b = protowire.AppendString(b, "future field")
+		b = protowire.AppendTag(b, 97, protowire.Fixed32Type)
+		b = protowire.AppendFixed32(b, 7)
+		b = protowire.AppendTag(b, 96, protowire.Fixed64Type)
+		return protowire.AppendFixed64(b, 9)
+	}
+	inner := unknown(deterministic(t, &forav1.DisputeFailure{
+		Reason: forav1.DisputeFailureReason_DISPUTE_FAILURE_REASON_DUPLICATE,
+	}))
+	withUnknown := unknown(deterministic(t, &forav1.ErrorDetail{Domain: exchangeDomain, Message: "dup"}))
+	withUnknown = protowire.AppendTag(withUnknown, 13, protowire.BytesType)
+	withUnknown = protowire.AppendBytes(withUnknown, inner)
+	add("unknown_fields_skipped", withUnknown)
+
+	add("empty_detail", nil)
+	return out
+}
+
+type detailCase struct {
+	name   string
+	detail *forav1.ErrorDetail
+}
+
+// everyFieldDetails sets every field of every reason message, one family per vector,
+// with the shared ErrorDetail fields and a two-entry metadata map on each.
+func everyFieldDetails() []detailCase {
+	base := func(msg string) *forav1.ErrorDetail {
+		return &forav1.ErrorDetail{
+			Domain:   exchangeDomain,
+			Message:  msg,
+			Metadata: map[string]string{"retryAfterSeconds": "30", "region": "eu"},
+		}
+	}
+	offerID, exchange := "offer-7", "exchange.example:8443"
+	denial := base("restriction not satisfied")
+	denial.Reason = &forav1.ErrorDetail_TransactionDenial{TransactionDenial: &forav1.TransactionDenial{
+		Reason: forav1.DenialReason_DENIAL_REASON_RESTRICTION_NOT_SATISFIED,
+		RestrictionMismatches: []forav1.RestrictionKind{
+			forav1.RestrictionKind_RESTRICTION_KIND_FUNCTION, forav1.RestrictionKind_RESTRICTION_KIND_GEOGRAPHY,
+		},
+		OfferId:  &offerID,
+		Exchange: &exchange,
+	}}
+	catalog := base("entries rejected")
+	catalog.Reason = &forav1.ErrorDetail_CatalogRejection{CatalogRejection: &forav1.CatalogRejection{
+		Reason:        forav1.CatalogRejectionReason_CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN,
+		RejectedPaths: []string{"/a", "/b/c"},
+	}}
+	registration := base("registration data rejected")
+	registration.Reason = &forav1.ErrorDetail_RegistrationFailure{RegistrationFailure: &forav1.RegistrationFailure{
+		Reason: forav1.RegistrationFailureReason_REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA,
+		FieldErrors: []*forav1.RegistrationFieldError{
+			{Path: "/operator/legal_name", Error: "required property is missing"},
+			{Path: "/contact/email", Error: "does not match format \"email\""},
+		},
+	}}
+	dispute := base("dispute window closed")
+	dispute.Reason = &forav1.ErrorDetail_DisputeFailure{DisputeFailure: &forav1.DisputeFailure{
+		Reason: forav1.DisputeFailureReason_DISPUTE_FAILURE_REASON_WINDOW_EXPIRED,
+	}}
+	domain := base("challenge expired")
+	domain.Reason = &forav1.ErrorDetail_DomainVerificationFailure{DomainVerificationFailure: &forav1.DomainVerificationFailure{
+		Reason: forav1.DomainVerificationFailureReason_DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED,
+	}}
+	retrieval := base("thumbprint mismatch")
+	retrieval.Reason = &forav1.ErrorDetail_RetrievalAuthFailure{RetrievalAuthFailure: &forav1.RetrievalAuthFailure{
+		Reason: forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH,
+	}}
+	usage := base("missing required fields")
+	usage.Reason = &forav1.ErrorDetail_UsageReportRejection{UsageReportRejection: &forav1.UsageReportRejection{
+		Reason: forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS,
+	}}
+	auth := base("signature does not verify")
+	auth.Reason = &forav1.ErrorDetail_RequestAuthFailure{RequestAuthFailure: &forav1.RequestAuthFailure{
+		Reason: forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID,
+	}}
+	return []detailCase{
+		{"transaction_denial_every_field", denial},
+		{"catalog_rejection_every_field", catalog},
+		{"registration_failure_every_field", registration},
+		{"dispute_failure_every_field", dispute},
+		{"domain_verification_failure_every_field", domain},
+		{"retrieval_auth_failure_every_field", retrieval},
+		{"usage_report_rejection_every_field", usage},
+		{"request_auth_failure_every_field", auth},
+	}
+}
+
+func deterministic(t *testing.T, m proto.Message) []byte {
+	t.Helper()
+	b, err := proto.MarshalOptions{Deterministic: true}.Marshal(m)
+	if err != nil {
+		t.Fatalf("marshal %T: %v", m, err)
+	}
+	return b
+}
+
+// requireEveryFieldSet fails unless every field of every message in the ErrorDetail
+// subtree is populated in at least one vector — the property that makes the vectors,
+// together with the table check, a complete statement of the decoding.
+func requireEveryFieldSet(t *testing.T, vectors []wireVector) {
+	t.Helper()
+	seen := map[protoreflect.FullName]bool{}
+	var mark func(m protoreflect.Message)
+	mark = func(m protoreflect.Message) {
+		m.Range(func(fd protoreflect.FieldDescriptor, v protoreflect.Value) bool {
+			seen[fd.FullName()] = true
+			switch {
+			case fd.IsList() && fd.Kind() == protoreflect.MessageKind:
+				for i := 0; i < v.List().Len(); i++ {
+					mark(v.List().Get(i).Message())
+				}
+			case !fd.IsList() && !fd.IsMap() && fd.Kind() == protoreflect.MessageKind:
+				mark(v.Message())
+			}
+			return true
+		})
+	}
+	for _, v := range vectors {
+		raw, err := base64.RawStdEncoding.DecodeString(v.Value)
+		if err != nil {
+			t.Fatalf("%s: %v", v.Name, err)
+		}
+		var detail forav1.ErrorDetail
+		if err := proto.Unmarshal(raw, &detail); err != nil {
+			t.Fatalf("%s: %v", v.Name, err)
+		}
+		mark(detail.ProtoReflect())
+	}
+	var check func(md protoreflect.MessageDescriptor, done map[protoreflect.FullName]bool)
+	check = func(md protoreflect.MessageDescriptor, done map[protoreflect.FullName]bool) {
+		if done[md.FullName()] {
+			return
+		}
+		done[md.FullName()] = true
+		for i := 0; i < md.Fields().Len(); i++ {
+			fd := md.Fields().Get(i)
+			if !seen[fd.FullName()] {
+				t.Errorf("no vector sets %s; add one before the JSON decoders can be trusted with it", fd.FullName())
+			}
+			if fd.Kind() == protoreflect.MessageKind && !fd.IsMap() {
+				check(fd.Message(), done)
+			}
+		}
+	}
+	check((&forav1.ErrorDetail{}).ProtoReflect().Descriptor(), map[protoreflect.FullName]bool{})
+}
diff --git a/sdk/go/connect/testdata/connect-error-vectors.json b/sdk/go/connect/testdata/connect-error-vectors.json
index ac7139bb..d71e5ec5 100644
--- a/sdk/go/connect/testdata/connect-error-vectors.json
+++ b/sdk/go/connect/testdata/connect-error-vectors.json
@@ -1,5 +1,5 @@
 {
-  "note": "Connect JSON error envelopes captured from a real connect-go handler. details[].debug is lowerCamelCase — connect-go builds it with its own protojson codec at default options, which no server codec replaces — while every FORA message body is snake_case. details[].value is the base64 binary Any, which the JSON-only SDKs deliberately cannot open.",
+  "note": "Connect JSON error envelopes captured from a real connect-go handler. details[].value is the base64 binary ErrorDetail and is the authoritative copy; details[].debug is a lowerCamelCase projection — connect-go builds it with its own protojson codec at default options, which no server codec replaces — read only when value is absent. Rows named *.value_only, value_wins_over_debug and undecodable_value_skipped are derived by editing a captured envelope.",
   "vectors": [
     {
       "name": "transaction_denial_insufficient_balance",
@@ -28,7 +28,14 @@
         "message": "balance too low",
         "metadata": null,
         "reason_field": "transaction_denial",
-        "reason_enum": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+        "reason_enum": "DENIAL_REASON_INSUFFICIENT_BALANCE",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "balance too low",
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+          }
+        }
       },
       "peer_message": "balance too low"
     },
@@ -59,7 +66,14 @@
         "message": "signed URL expired",
         "metadata": null,
         "reason_field": "retrieval_auth_failure",
-        "reason_enum": "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED"
+        "reason_enum": "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+        "detail": {
+          "domain": "fora.v1.Edge",
+          "message": "signed URL expired",
+          "retrieval_auth_failure": {
+            "reason": "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED"
+          }
+        }
       },
       "peer_message": "signed URL expired"
     },
@@ -96,7 +110,20 @@
         "message": "registration data rejected",
         "metadata": null,
         "reason_field": "registration_failure",
-        "reason_enum": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA"
+        "reason_enum": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "registration data rejected",
+          "registration_failure": {
+            "field_errors": [
+              {
+                "error": "required property is missing",
+                "path": "/operator/legal_name"
+              }
+            ],
+            "reason": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA"
+          }
+        }
       },
       "peer_message": "registration data rejected"
     },
@@ -127,7 +154,14 @@
         "message": "no such transaction",
         "metadata": null,
         "reason_field": "usage_report_rejection",
-        "reason_enum": "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND"
+        "reason_enum": "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "no such transaction",
+          "usage_report_rejection": {
+            "reason": "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND"
+          }
+        }
       },
       "peer_message": "no such transaction"
     },
@@ -158,7 +192,14 @@
         "message": "dispute window closed",
         "metadata": null,
         "reason_field": "dispute_failure",
-        "reason_enum": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED"
+        "reason_enum": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+        "detail": {
+          "dispute_failure": {
+            "reason": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED"
+          },
+          "domain": "fora.v1.ExchangeService",
+          "message": "dispute window closed"
+        }
       },
       "peer_message": "dispute window closed"
     },
@@ -189,7 +230,14 @@
         "message": "entry rejected",
         "metadata": null,
         "reason_field": "catalog_rejection",
-        "reason_enum": "CATALOG_REJECTION_REASON_MALFORMED_ENTRY"
+        "reason_enum": "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+        "detail": {
+          "catalog_rejection": {
+            "reason": "CATALOG_REJECTION_REASON_MALFORMED_ENTRY"
+          },
+          "domain": "fora.v1.CatalogService",
+          "message": "entry rejected"
+        }
       },
       "peer_message": "entry rejected"
     },
@@ -220,7 +268,14 @@
         "message": "challenge not found",
         "metadata": null,
         "reason_field": "domain_verification_failure",
-        "reason_enum": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND"
+        "reason_enum": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "domain_verification_failure": {
+            "reason": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND"
+          },
+          "message": "challenge not found"
+        }
       },
       "peer_message": "challenge not found"
     },
@@ -250,7 +305,13 @@
         "message": "helpers: signature expired",
         "metadata": null,
         "reason_field": "request_auth_failure",
-        "reason_enum": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+        "reason_enum": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE",
+        "detail": {
+          "message": "helpers: signature expired",
+          "request_auth_failure": {
+            "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+          }
+        }
       },
       "peer_message": "helpers: signature expired"
     },
@@ -278,7 +339,11 @@
         "message": "internal error",
         "metadata": null,
         "reason_field": "",
-        "reason_enum": ""
+        "reason_enum": "",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "internal error"
+        }
       },
       "peer_message": "internal error"
     },
@@ -314,7 +379,17 @@
           "retryAfterSeconds": "30"
         },
         "reason_field": "transaction_denial",
-        "reason_enum": "DENIAL_REASON_RATE_LIMITED"
+        "reason_enum": "DENIAL_REASON_RATE_LIMITED",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "slow down",
+          "metadata": {
+            "retryAfterSeconds": "30"
+          },
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_RATE_LIMITED"
+          }
+        }
       },
       "peer_message": "slow down"
     },
@@ -332,7 +407,395 @@
         "message": "",
         "metadata": null,
         "reason_field": "",
-        "reason_enum": ""
+        "reason_enum": "",
+        "detail": null
+      },
+      "peer_message": ""
+    },
+    {
+      "name": "transaction_denial_insufficient_balance.value_only",
+      "code": "permission_denied",
+      "http_status": 403,
+      "envelope": {
+        "code": "permission_denied",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "Cg9iYWxhbmNlIHRvbyBsb3cSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlUgIIAg"
+          }
+        ],
+        "message": "balance too low"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "balance too low",
+        "metadata": null,
+        "reason_field": "transaction_denial",
+        "reason_enum": "DENIAL_REASON_INSUFFICIENT_BALANCE",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "balance too low",
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+          }
+        }
+      },
+      "peer_message": "balance too low"
+    },
+    {
+      "name": "retrieval_auth_failure_url_expired.value_only",
+      "code": "unauthenticated",
+      "http_status": 401,
+      "envelope": {
+        "code": "unauthenticated",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChJzaWduZWQgVVJMIGV4cGlyZWQSDGZvcmEudjEuRWRnZXoCCAE"
+          }
+        ],
+        "message": "signed URL expired"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.Edge",
+        "message": "signed URL expired",
+        "metadata": null,
+        "reason_field": "retrieval_auth_failure",
+        "reason_enum": "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+        "detail": {
+          "domain": "fora.v1.Edge",
+          "message": "signed URL expired",
+          "retrieval_auth_failure": {
+            "reason": "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED"
+          }
+        }
+      },
+      "peer_message": "signed URL expired"
+    },
+    {
+      "name": "registration_failure_with_field_errors.value_only",
+      "code": "invalid_argument",
+      "http_status": 400,
+      "envelope": {
+        "code": "invalid_argument",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChpyZWdpc3RyYXRpb24gZGF0YSByZWplY3RlZBIXZm9yYS52MS5FeGNoYW5nZVNlcnZpY2ViOAgGEjQKFC9vcGVyYXRvci9sZWdhbF9uYW1lEhxyZXF1aXJlZCBwcm9wZXJ0eSBpcyBtaXNzaW5n"
+          }
+        ],
+        "message": "registration data rejected"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "registration data rejected",
+        "metadata": null,
+        "reason_field": "registration_failure",
+        "reason_enum": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "registration data rejected",
+          "registration_failure": {
+            "field_errors": [
+              {
+                "error": "required property is missing",
+                "path": "/operator/legal_name"
+              }
+            ],
+            "reason": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA"
+          }
+        }
+      },
+      "peer_message": "registration data rejected"
+    },
+    {
+      "name": "usage_report_rejection.value_only",
+      "code": "failed_precondition",
+      "http_status": 400,
+      "envelope": {
+        "code": "failed_precondition",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChNubyBzdWNoIHRyYW5zYWN0aW9uEhdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZYIBAggB"
+          }
+        ],
+        "message": "no such transaction"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "no such transaction",
+        "metadata": null,
+        "reason_field": "usage_report_rejection",
+        "reason_enum": "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "no such transaction",
+          "usage_report_rejection": {
+            "reason": "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND"
+          }
+        }
+      },
+      "peer_message": "no such transaction"
+    },
+    {
+      "name": "dispute_failure.value_only",
+      "code": "failed_precondition",
+      "http_status": 400,
+      "envelope": {
+        "code": "failed_precondition",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChVkaXNwdXRlIHdpbmRvdyBjbG9zZWQSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlagIIAw"
+          }
+        ],
+        "message": "dispute window closed"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "dispute window closed",
+        "metadata": null,
+        "reason_field": "dispute_failure",
+        "reason_enum": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+        "detail": {
+          "dispute_failure": {
+            "reason": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED"
+          },
+          "domain": "fora.v1.ExchangeService",
+          "message": "dispute window closed"
+        }
+      },
+      "peer_message": "dispute window closed"
+    },
+    {
+      "name": "catalog_rejection.value_only",
+      "code": "invalid_argument",
+      "http_status": 400,
+      "envelope": {
+        "code": "invalid_argument",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "Cg5lbnRyeSByZWplY3RlZBIWZm9yYS52MS5DYXRhbG9nU2VydmljZVoCCAU"
+          }
+        ],
+        "message": "entry rejected"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.CatalogService",
+        "message": "entry rejected",
+        "metadata": null,
+        "reason_field": "catalog_rejection",
+        "reason_enum": "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+        "detail": {
+          "catalog_rejection": {
+            "reason": "CATALOG_REJECTION_REASON_MALFORMED_ENTRY"
+          },
+          "domain": "fora.v1.CatalogService",
+          "message": "entry rejected"
+        }
+      },
+      "peer_message": "entry rejected"
+    },
+    {
+      "name": "domain_verification_failure.value_only",
+      "code": "failed_precondition",
+      "http_status": 400,
+      "envelope": {
+        "code": "failed_precondition",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChNjaGFsbGVuZ2Ugbm90IGZvdW5kEhdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZXICCAE"
+          }
+        ],
+        "message": "challenge not found"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "challenge not found",
+        "metadata": null,
+        "reason_field": "domain_verification_failure",
+        "reason_enum": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "domain_verification_failure": {
+            "reason": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND"
+          },
+          "message": "challenge not found"
+        }
+      },
+      "peer_message": "challenge not found"
+    },
+    {
+      "name": "request_auth_failure_signature_stale.value_only",
+      "code": "unauthenticated",
+      "http_status": 401,
+      "envelope": {
+        "code": "unauthenticated",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChpoZWxwZXJzOiBzaWduYXR1cmUgZXhwaXJlZIoBAggD"
+          }
+        ],
+        "message": "helpers: signature expired"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "",
+        "message": "helpers: signature expired",
+        "metadata": null,
+        "reason_field": "request_auth_failure",
+        "reason_enum": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE",
+        "detail": {
+          "message": "helpers: signature expired",
+          "request_auth_failure": {
+            "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+          }
+        }
+      },
+      "peer_message": "helpers: signature expired"
+    },
+    {
+      "name": "generic_detail_no_reason.value_only",
+      "code": "internal",
+      "http_status": 500,
+      "envelope": {
+        "code": "internal",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "Cg5pbnRlcm5hbCBlcnJvchIXZm9yYS52MS5FeGNoYW5nZVNlcnZpY2U"
+          }
+        ],
+        "message": "internal error"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "internal error",
+        "metadata": null,
+        "reason_field": "",
+        "reason_enum": "",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "internal error"
+        }
+      },
+      "peer_message": "internal error"
+    },
+    {
+      "name": "metadata_keys_are_caller_chosen.value_only",
+      "code": "resource_exhausted",
+      "http_status": 429,
+      "envelope": {
+        "code": "resource_exhausted",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "CglzbG93IGRvd24SF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlGhcKEXJldHJ5QWZ0ZXJTZWNvbmRzEgIzMFICCAM"
+          }
+        ],
+        "message": "slow down"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "slow down",
+        "metadata": {
+          "retryAfterSeconds": "30"
+        },
+        "reason_field": "transaction_denial",
+        "reason_enum": "DENIAL_REASON_RATE_LIMITED",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "slow down",
+          "metadata": {
+            "retryAfterSeconds": "30"
+          },
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_RATE_LIMITED"
+          }
+        }
+      },
+      "peer_message": "slow down"
+    },
+    {
+      "name": "value_wins_over_debug",
+      "code": "permission_denied",
+      "http_status": 403,
+      "envelope": {
+        "code": "permission_denied",
+        "details": [
+          {
+            "debug": {
+              "disputeFailure": {
+                "reason": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED"
+              },
+              "domain": "fora.v1.ExchangeService",
+              "message": "dispute window closed"
+            },
+            "type": "fora.v1.ErrorDetail",
+            "value": "Cg9iYWxhbmNlIHRvbyBsb3cSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlUgIIAg"
+          }
+        ],
+        "message": "balance too low"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "balance too low",
+        "metadata": null,
+        "reason_field": "transaction_denial",
+        "reason_enum": "DENIAL_REASON_INSUFFICIENT_BALANCE",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "balance too low",
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+          }
+        }
+      },
+      "peer_message": "balance too low"
+    },
+    {
+      "name": "undecodable_value_skipped",
+      "code": "permission_denied",
+      "http_status": 403,
+      "envelope": {
+        "code": "permission_denied",
+        "details": [
+          {
+            "debug": {
+              "domain": "fora.v1.ExchangeService",
+              "message": "balance too low",
+              "transactionDenial": {
+                "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+              }
+            },
+            "type": "fora.v1.ErrorDetail",
+            "value": "aWdub3JlZA"
+          }
+        ],
+        "message": "balance too low"
+      },
+      "expect": {
+        "has_detail": false,
+        "domain": "",
+        "message": "",
+        "metadata": null,
+        "reason_field": "",
+        "reason_enum": "",
+        "detail": null
       },
       "peer_message": ""
     }
diff --git a/sdk/go/connect/testdata/error-detail-wire-vectors.json b/sdk/go/connect/testdata/error-detail-wire-vectors.json
new file mode 100644
index 00000000..ed7d491a
--- /dev/null
+++ b/sdk/go/connect/testdata/error-detail-wire-vectors.json
@@ -0,0 +1,458 @@
+{
+  "note": "Binary fora.v1.ErrorDetail encodings and their canonical proto-JSON, for the table-driven decoders of the JSON SDKs. wire.messages and wire.enums are the ErrorDetail subtree read from the compiled descriptor; every field of every message there is set in at least one vector.",
+  "vectors": [
+    {
+      "name": "transaction_denial_every_field",
+      "value": "ChlyZXN0cmljdGlvbiBub3Qgc2F0aXNmaWVkEhdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZRoMCgZyZWdpb24SAmV1GhcKEXJldHJ5QWZ0ZXJTZWNvbmRzEgIzMFImCAUSAgECGgdvZmZlci03IhVleGNoYW5nZS5leGFtcGxlOjg0NDM",
+      "detail": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "restriction not satisfied",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        },
+        "transaction_denial": {
+          "exchange": "exchange.example:8443",
+          "offer_id": "offer-7",
+          "reason": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+          "restriction_mismatches": [
+            "RESTRICTION_KIND_FUNCTION",
+            "RESTRICTION_KIND_GEOGRAPHY"
+          ]
+        }
+      }
+    },
+    {
+      "name": "catalog_rejection_every_field",
+      "value": "ChBlbnRyaWVzIHJlamVjdGVkEhdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZRoMCgZyZWdpb24SAmV1GhcKEXJldHJ5QWZ0ZXJTZWNvbmRzEgIzMFoMCAYSAi9hEgQvYi9j",
+      "detail": {
+        "catalog_rejection": {
+          "reason": "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+          "rejected_paths": [
+            "/a",
+            "/b/c"
+          ]
+        },
+        "domain": "fora.v1.ExchangeService",
+        "message": "entries rejected",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        }
+      }
+    },
+    {
+      "name": "registration_failure_every_field",
+      "value": "ChpyZWdpc3RyYXRpb24gZGF0YSByZWplY3RlZBIXZm9yYS52MS5FeGNoYW5nZVNlcnZpY2UaDAoGcmVnaW9uEgJldRoXChFyZXRyeUFmdGVyU2Vjb25kcxICMzBiaQgGEjQKFC9vcGVyYXRvci9sZWdhbF9uYW1lEhxyZXF1aXJlZCBwcm9wZXJ0eSBpcyBtaXNzaW5nEi8KDi9jb250YWN0L2VtYWlsEh1kb2VzIG5vdCBtYXRjaCBmb3JtYXQgImVtYWlsIg",
+      "detail": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "registration data rejected",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        },
+        "registration_failure": {
+          "field_errors": [
+            {
+              "error": "required property is missing",
+              "path": "/operator/legal_name"
+            },
+            {
+              "error": "does not match format \"email\"",
+              "path": "/contact/email"
+            }
+          ],
+          "reason": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA"
+        }
+      }
+    },
+    {
+      "name": "dispute_failure_every_field",
+      "value": "ChVkaXNwdXRlIHdpbmRvdyBjbG9zZWQSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlGgwKBnJlZ2lvbhICZXUaFwoRcmV0cnlBZnRlclNlY29uZHMSAjMwagIIAw",
+      "detail": {
+        "dispute_failure": {
+          "reason": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED"
+        },
+        "domain": "fora.v1.ExchangeService",
+        "message": "dispute window closed",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        }
+      }
+    },
+    {
+      "name": "domain_verification_failure_every_field",
+      "value": "ChFjaGFsbGVuZ2UgZXhwaXJlZBIXZm9yYS52MS5FeGNoYW5nZVNlcnZpY2UaDAoGcmVnaW9uEgJldRoXChFyZXRyeUFmdGVyU2Vjb25kcxICMzByAggD",
+      "detail": {
+        "domain": "fora.v1.ExchangeService",
+        "domain_verification_failure": {
+          "reason": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED"
+        },
+        "message": "challenge expired",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        }
+      }
+    },
+    {
+      "name": "retrieval_auth_failure_every_field",
+      "value": "ChN0aHVtYnByaW50IG1pc21hdGNoEhdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZRoMCgZyZWdpb24SAmV1GhcKEXJldHJ5QWZ0ZXJTZWNvbmRzEgIzMHoCCAg",
+      "detail": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "thumbprint mismatch",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        },
+        "retrieval_auth_failure": {
+          "reason": "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH"
+        }
+      }
+    },
+    {
+      "name": "usage_report_rejection_every_field",
+      "value": "ChdtaXNzaW5nIHJlcXVpcmVkIGZpZWxkcxIXZm9yYS52MS5FeGNoYW5nZVNlcnZpY2UaDAoGcmVnaW9uEgJldRoXChFyZXRyeUFmdGVyU2Vjb25kcxICMzCCAQIIBA",
+      "detail": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "missing required fields",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        },
+        "usage_report_rejection": {
+          "reason": "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS"
+        }
+      }
+    },
+    {
+      "name": "request_auth_failure_every_field",
+      "value": "ChlzaWduYXR1cmUgZG9lcyBub3QgdmVyaWZ5Ehdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZRoMCgZyZWdpb24SAmV1GhcKEXJldHJ5QWZ0ZXJTZWNvbmRzEgIzMIoBAggC",
+      "detail": {
+        "domain": "fora.v1.ExchangeService",
+        "message": "signature does not verify",
+        "metadata": {
+          "region": "eu",
+          "retryAfterSeconds": "30"
+        },
+        "request_auth_failure": {
+          "reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID"
+        }
+      }
+    },
+    {
+      "name": "unpacked_repeated_enum",
+      "value": "Ehdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZVIGCAUQAxAE",
+      "detail": {
+        "domain": "fora.v1.ExchangeService",
+        "transaction_denial": {
+          "reason": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+          "restriction_mismatches": [
+            "RESTRICTION_KIND_USER_TYPE",
+            "RESTRICTION_KIND_OTHER"
+          ]
+        }
+      }
+    },
+    {
+      "name": "singular_field_last_value_wins",
+      "value": "EgxmaXJzdC5kb21haW4SF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNl",
+      "detail": {
+        "domain": "fora.v1.ExchangeService"
+      }
+    },
+    {
+      "name": "unknown_fields_skipped",
+      "value": "CgNkdXASF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlmAasApIGDGZ1dHVyZSBmaWVsZI0GBwAAAIEGCQAAAAAAAABqJQgEmAasApIGDGZ1dHVyZSBmaWVsZI0GBwAAAIEGCQAAAAAAAAA",
+      "detail": {
+        "dispute_failure": {
+          "reason": "DISPUTE_FAILURE_REASON_DUPLICATE"
+        },
+        "domain": "fora.v1.ExchangeService",
+        "message": "dup"
+      }
+    },
+    {
+      "name": "empty_detail",
+      "value": "",
+      "detail": {}
+    }
+  ],
+  "wire": {
+    "enums": {
+      "fora.v1.CatalogRejectionReason": {
+        "0": "CATALOG_REJECTION_REASON_UNSPECIFIED",
+        "1": "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+        "2": "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+        "3": "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+        "4": "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+        "5": "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+        "6": "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+        "7": "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+        "8": "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+        "9": "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+      },
+      "fora.v1.DenialReason": {
+        "0": "DENIAL_REASON_UNSPECIFIED",
+        "1": "DENIAL_REASON_ACCOUNT_INACTIVE",
+        "10": "DENIAL_REASON_DELEGATION_INVALID",
+        "11": "DENIAL_REASON_SCOPE_INSUFFICIENT",
+        "12": "DENIAL_REASON_ENTITLEMENT_MISSING",
+        "13": "DENIAL_REASON_ENTITLEMENT_MALFORMED",
+        "14": "DENIAL_REASON_ENTITLEMENT_EXPIRED",
+        "15": "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER",
+        "16": "DENIAL_REASON_SUBSCRIPTION_LAPSED",
+        "17": "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
+        "18": "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
+        "19": "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+        "2": "DENIAL_REASON_INSUFFICIENT_BALANCE",
+        "3": "DENIAL_REASON_RATE_LIMITED",
+        "4": "DENIAL_REASON_CONTENT_UNAVAILABLE",
+        "5": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+        "6": "DENIAL_REASON_REPORTING_OVERDUE",
+        "7": "DENIAL_REASON_OFFER_EXPIRED",
+        "8": "DENIAL_REASON_SIGNATURE_INVALID",
+        "9": "DENIAL_REASON_QUOTA_EXCEEDED"
+      },
+      "fora.v1.DisputeFailureReason": {
+        "0": "DISPUTE_FAILURE_REASON_UNSPECIFIED",
+        "1": "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND",
+        "2": "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
+        "3": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
+        "4": "DISPUTE_FAILURE_REASON_DUPLICATE",
+        "5": "DISPUTE_FAILURE_REASON_INELIGIBLE"
+      },
+      "fora.v1.DomainVerificationFailureReason": {
+        "0": "DOMAIN_VERIFICATION_FAILURE_REASON_UNSPECIFIED",
+        "1": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+        "2": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH",
+        "3": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
+        "4": "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
+        "5": "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
+        "6": "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+      },
+      "fora.v1.RegistrationFailureReason": {
+        "0": "REGISTRATION_FAILURE_REASON_UNSPECIFIED",
+        "1": "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+        "2": "REGISTRATION_FAILURE_REASON_INVALID_KEY",
+        "3": "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID",
+        "4": "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
+        "5": "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
+        "6": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
+        "7": "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+      },
+      "fora.v1.RequestAuthFailureReason": {
+        "0": "REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED",
+        "1": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING",
+        "2": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID",
+        "3": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"
+      },
+      "fora.v1.RestrictionKind": {
+        "0": "RESTRICTION_KIND_UNSPECIFIED",
+        "1": "RESTRICTION_KIND_FUNCTION",
+        "2": "RESTRICTION_KIND_GEOGRAPHY",
+        "3": "RESTRICTION_KIND_USER_TYPE",
+        "4": "RESTRICTION_KIND_OTHER"
+      },
+      "fora.v1.RetrievalAuthFailureReason": {
+        "0": "RETRIEVAL_AUTH_FAILURE_REASON_UNSPECIFIED",
+        "1": "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+        "10": "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING",
+        "11": "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED",
+        "12": "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID",
+        "2": "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+        "3": "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+        "4": "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+        "5": "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING",
+        "6": "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING",
+        "7": "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH",
+        "8": "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+        "9": "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING"
+      },
+      "fora.v1.UsageReportRejectionReason": {
+        "0": "USAGE_REPORT_REJECTION_REASON_UNSPECIFIED",
+        "1": "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND",
+        "2": "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
+        "3": "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
+        "4": "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
+        "5": "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+      }
+    },
+    "messages": {
+      "fora.v1.CatalogRejection": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.CatalogRejectionReason"
+        },
+        {
+          "name": "rejected_paths",
+          "number": 2,
+          "kind": "string",
+          "repeated": true
+        }
+      ],
+      "fora.v1.DisputeFailure": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.DisputeFailureReason"
+        }
+      ],
+      "fora.v1.DomainVerificationFailure": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.DomainVerificationFailureReason"
+        }
+      ],
+      "fora.v1.ErrorDetail": [
+        {
+          "name": "message",
+          "number": 1,
+          "kind": "string"
+        },
+        {
+          "name": "domain",
+          "number": 2,
+          "kind": "string"
+        },
+        {
+          "name": "metadata",
+          "number": 3,
+          "kind": "map",
+          "map_key": "string",
+          "map_value": "string"
+        },
+        {
+          "name": "transaction_denial",
+          "number": 10,
+          "kind": "message",
+          "type": "fora.v1.TransactionDenial"
+        },
+        {
+          "name": "catalog_rejection",
+          "number": 11,
+          "kind": "message",
+          "type": "fora.v1.CatalogRejection"
+        },
+        {
+          "name": "registration_failure",
+          "number": 12,
+          "kind": "message",
+          "type": "fora.v1.RegistrationFailure"
+        },
+        {
+          "name": "dispute_failure",
+          "number": 13,
+          "kind": "message",
+          "type": "fora.v1.DisputeFailure"
+        },
+        {
+          "name": "domain_verification_failure",
+          "number": 14,
+          "kind": "message",
+          "type": "fora.v1.DomainVerificationFailure"
+        },
+        {
+          "name": "retrieval_auth_failure",
+          "number": 15,
+          "kind": "message",
+          "type": "fora.v1.RetrievalAuthFailure"
+        },
+        {
+          "name": "usage_report_rejection",
+          "number": 16,
+          "kind": "message",
+          "type": "fora.v1.UsageReportRejection"
+        },
+        {
+          "name": "request_auth_failure",
+          "number": 17,
+          "kind": "message",
+          "type": "fora.v1.RequestAuthFailure"
+        }
+      ],
+      "fora.v1.RegistrationFailure": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.RegistrationFailureReason"
+        },
+        {
+          "name": "field_errors",
+          "number": 2,
+          "kind": "message",
+          "type": "fora.v1.RegistrationFieldError",
+          "repeated": true
+        }
+      ],
+      "fora.v1.RegistrationFieldError": [
+        {
+          "name": "path",
+          "number": 1,
+          "kind": "string"
+        },
+        {
+          "name": "error",
+          "number": 2,
+          "kind": "string"
+        }
+      ],
+      "fora.v1.RequestAuthFailure": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.RequestAuthFailureReason"
+        }
+      ],
+      "fora.v1.RetrievalAuthFailure": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.RetrievalAuthFailureReason"
+        }
+      ],
+      "fora.v1.TransactionDenial": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.DenialReason"
+        },
+        {
+          "name": "restriction_mismatches",
+          "number": 2,
+          "kind": "enum",
+          "type": "fora.v1.RestrictionKind",
+          "repeated": true
+        },
+        {
+          "name": "offer_id",
+          "number": 3,
+          "kind": "string"
+        },
+        {
+          "name": "exchange",
+          "number": 4,
+          "kind": "string"
+        }
+      ],
+      "fora.v1.UsageReportRejection": [
+        {
+          "name": "reason",
+          "number": 1,
+          "kind": "enum",
+          "type": "fora.v1.UsageReportRejectionReason"
+        }
+      ]
+    }
+  }
+}

From 1053955c55841d5f15abd396cff0008c5b666af9 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 03:50:17 -0400
Subject: [PATCH 014/164] Decode ErrorDetail from the binary value in the
 Python SDK

error_detail_from read a Connect error's typed reason only from the debug
projection, which connect-go adds for JSON readers and may omit. It now reads
details[].value first: the binary ErrorDetail, base64 in either alphabet,
padded or not, decoded by a table-driven reader for the ErrorDetail subtree so
the SDK still takes no protobuf dependency. debug is read only when value is
absent; a value that is present but does not decode makes the entry
unreadable, and its debug is not read in its place, which is what Go reports
for the same entry.

The reader follows protobuf's rules: unknown fields and known fields with the
wrong wire type are skipped, a repeated enum is accepted packed or not, the
last value of a singular field wins, a singular message written twice is
merged, and only the reason written last is kept. An enum number with no name
stays a number, which the generated model then refuses.

The decoder's tables are asserted equal to the descriptor tables in
error-detail-wire-vectors.json and every vector there decodes to Go's
proto-JSON. The connect-error replay asserts CallError.code and the whole
detail on every row, and the transport-failure replay asserts the code a
non-envelope status implies.
---
 sdk/python/fora_sdk/_errordetail_wire.py      | 401 ++++++++++++++++++
 sdk/python/fora_sdk/errordetail.py            |  68 ++-
 sdk/python/tests/test_connect_error_parity.py |  44 +-
 .../tests/test_errordetail_wire_parity.py     | 130 ++++++
 .../tests/test_transport_failure_parity.py    |   3 +
 5 files changed, 607 insertions(+), 39 deletions(-)
 create mode 100644 sdk/python/fora_sdk/_errordetail_wire.py
 create mode 100644 sdk/python/tests/test_errordetail_wire_parity.py

diff --git a/sdk/python/fora_sdk/_errordetail_wire.py b/sdk/python/fora_sdk/_errordetail_wire.py
new file mode 100644
index 00000000..a64f7e18
--- /dev/null
+++ b/sdk/python/fora_sdk/_errordetail_wire.py
@@ -0,0 +1,401 @@
+"""Decode a binary ``fora.v1.ErrorDetail`` into canonical proto-JSON, with no protobuf runtime.
+
+A Connect error carries its typed reason as ``details[].value``: the binary encoding of
+the ErrorDetail, base64-encoded. That is the authoritative copy. The ``debug`` projection
+beside it is something connect-go adds for JSON readers, and it may be absent. So this
+SDK reads ``value`` first, and needs to decode protobuf to do it.
+
+It does not take a protobuf dependency for that. The ErrorDetail subtree is small and
+closed: ErrorDetail, its eight reason messages, RegistrationFieldError, and the enums
+they use. A table describes it here, and a generic wire-format reader walks the table.
+The table is a second statement of the shape, and it is pinned from both sides by the
+shared corpus ``error-detail-wire-vectors.json``: the corpus carries the same tables read
+from the compiled descriptor, which the suite requires this table to EQUAL, and binary
+vectors that between them set every field of every message in the subtree.
+
+The output is the proto-JSON object the generated ``ErrorDetail`` model parses: proto
+field names, enums by NAME. An enum number the table does not name stays a number, which
+is what proto-JSON writes for it; the model then refuses it and the caller reads that
+entry as carrying no detail, rather than one with a reason this SDK invented.
+
+Decoding follows protobuf's own rules: unknown fields are skipped by wire type, a known
+field arriving with the wrong wire type is skipped the same way, a repeated enum is
+accepted packed or not, the last value of a singular field wins, a singular message field
+written twice is merged, and of the reason oneof only the member written last is kept.
+"""
+
+from __future__ import annotations
+
+import base64
+import binascii
+from dataclasses import dataclass
+from typing import Any
+
+__all__ = ["ENUMS", "MESSAGES", "WireDecodeError", "decode_error_detail_value"]
+
+#: The fully-qualified name of the root message.
+_ROOT = "fora.v1.ErrorDetail"
+
+
+class WireDecodeError(ValueError):
+    """A ``value`` that is not a decodable ErrorDetail."""
+
+
+@dataclass(frozen=True)
+class Field:
+    """One field of a message, as the descriptor states it."""
+
+    name: str
+    number: int
+    #: The protobuf kind ("string", "enum", "message"), or "map".
+    kind: str
+    #: The fully-qualified enum or message name, for those kinds.
+    type: str = ""
+    repeated: bool = False
+    map_key: str = ""
+    map_value: str = ""
+
+
+def _reason(number: int, name: str, message: str) -> Field:
+    return Field(name, number, "message", f"fora.v1.{message}")
+
+
+#: The ErrorDetail subtree's messages, fields in number order.
+MESSAGES: dict[str, tuple[Field, ...]] = {
+    "fora.v1.ErrorDetail": (
+        Field("message", 1, "string"),
+        Field("domain", 2, "string"),
+        Field("metadata", 3, "map", map_key="string", map_value="string"),
+        _reason(10, "transaction_denial", "TransactionDenial"),
+        _reason(11, "catalog_rejection", "CatalogRejection"),
+        _reason(12, "registration_failure", "RegistrationFailure"),
+        _reason(13, "dispute_failure", "DisputeFailure"),
+        _reason(14, "domain_verification_failure", "DomainVerificationFailure"),
+        _reason(15, "retrieval_auth_failure", "RetrievalAuthFailure"),
+        _reason(16, "usage_report_rejection", "UsageReportRejection"),
+        _reason(17, "request_auth_failure", "RequestAuthFailure"),
+    ),
+    "fora.v1.TransactionDenial": (
+        Field("reason", 1, "enum", "fora.v1.DenialReason"),
+        Field("restriction_mismatches", 2, "enum", "fora.v1.RestrictionKind", repeated=True),
+        Field("offer_id", 3, "string"),
+        Field("exchange", 4, "string"),
+    ),
+    "fora.v1.CatalogRejection": (
+        Field("reason", 1, "enum", "fora.v1.CatalogRejectionReason"),
+        Field("rejected_paths", 2, "string", repeated=True),
+    ),
+    "fora.v1.RegistrationFailure": (
+        Field("reason", 1, "enum", "fora.v1.RegistrationFailureReason"),
+        Field("field_errors", 2, "message", "fora.v1.RegistrationFieldError", repeated=True),
+    ),
+    "fora.v1.RegistrationFieldError": (
+        Field("path", 1, "string"),
+        Field("error", 2, "string"),
+    ),
+    "fora.v1.DisputeFailure": (Field("reason", 1, "enum", "fora.v1.DisputeFailureReason"),),
+    "fora.v1.DomainVerificationFailure": (
+        Field("reason", 1, "enum", "fora.v1.DomainVerificationFailureReason"),
+    ),
+    "fora.v1.RetrievalAuthFailure": (
+        Field("reason", 1, "enum", "fora.v1.RetrievalAuthFailureReason"),
+    ),
+    "fora.v1.UsageReportRejection": (
+        Field("reason", 1, "enum", "fora.v1.UsageReportRejectionReason"),
+    ),
+    "fora.v1.RequestAuthFailure": (Field("reason", 1, "enum", "fora.v1.RequestAuthFailureReason"),),
+}
+
+
+def _names(prefix: str, *names: str) -> dict[int, str]:
+    """An enum table whose values are numbered 0, 1, 2 ... in declaration order."""
+    return {i: f"{prefix}_{n}" for i, n in enumerate(names)}
+
+
+#: The enums the subtree uses: number -> value name.
+ENUMS: dict[str, dict[int, str]] = {
+    "fora.v1.DenialReason": _names(
+        "DENIAL_REASON",
+        "UNSPECIFIED",
+        "ACCOUNT_INACTIVE",
+        "INSUFFICIENT_BALANCE",
+        "RATE_LIMITED",
+        "CONTENT_UNAVAILABLE",
+        "RESTRICTION_NOT_SATISFIED",
+        "REPORTING_OVERDUE",
+        "OFFER_EXPIRED",
+        "SIGNATURE_INVALID",
+        "QUOTA_EXCEEDED",
+        "DELEGATION_INVALID",
+        "SCOPE_INSUFFICIENT",
+        "ENTITLEMENT_MISSING",
+        "ENTITLEMENT_MALFORMED",
+        "ENTITLEMENT_EXPIRED",
+        "ENTITLEMENT_WRONG_BUYER",
+        "SUBSCRIPTION_LAPSED",
+        "ENTITLEMENT_NOT_GRANTED",
+        "ACCOUNT_NOT_REGISTERED",
+        "RELAY_NOT_ACCEPTED",
+    ),
+    "fora.v1.RestrictionKind": _names(
+        "RESTRICTION_KIND", "UNSPECIFIED", "FUNCTION", "GEOGRAPHY", "USER_TYPE", "OTHER"
+    ),
+    "fora.v1.CatalogRejectionReason": _names(
+        "CATALOG_REJECTION_REASON",
+        "UNSPECIFIED",
+        "NOT_CATALOG_CONTRIBUTOR",
+        "TENANT_MISMATCH",
+        "DOMAIN_NOT_VERIFIED",
+        "SIGNATURE_INVALID",
+        "MALFORMED_ENTRY",
+        "UNKNOWN_VOCAB_TOKEN",
+        "QUOTA_EXCEEDED",
+        "TERMS_LIMIT_EXCEEDED",
+        "URI_UNAVAILABLE",
+    ),
+    "fora.v1.RegistrationFailureReason": _names(
+        "REGISTRATION_FAILURE_REASON",
+        "UNSPECIFIED",
+        "DOMAIN_NOT_VERIFIED",
+        "INVALID_KEY",
+        "SIGNATURE_INVALID",
+        "ALREADY_REGISTERED",
+        "QUOTA_EXCEEDED",
+        "INVALID_REGISTRATION_DATA",
+        "TERMS_DIGEST_STALE",
+    ),
+    "fora.v1.DisputeFailureReason": _names(
+        "DISPUTE_FAILURE_REASON",
+        "UNSPECIFIED",
+        "TRANSACTION_NOT_FOUND",
+        "REPORT_NOT_FILED",
+        "WINDOW_EXPIRED",
+        "DUPLICATE",
+        "INELIGIBLE",
+    ),
+    "fora.v1.DomainVerificationFailureReason": _names(
+        "DOMAIN_VERIFICATION_FAILURE_REASON",
+        "UNSPECIFIED",
+        "CHALLENGE_NOT_FOUND",
+        "CHALLENGE_MISMATCH",
+        "CHALLENGE_EXPIRED",
+        "FETCH_FAILED",
+        "EXCHANGE_NOT_AUTHORIZED",
+        "KEY_REGISTRATION_FAILED",
+    ),
+    "fora.v1.RetrievalAuthFailureReason": _names(
+        "RETRIEVAL_AUTH_FAILURE_REASON",
+        "UNSPECIFIED",
+        "URL_EXPIRED",
+        "URL_SIGNATURE_MISSING",
+        "URL_EXPIRY_MISSING",
+        "URL_SIGNATURE_MISMATCH",
+        "AGENT_KEY_MISSING",
+        "PROOF_SIGNATURE_MISSING",
+        "KEYID_MISMATCH",
+        "THUMBPRINT_MISMATCH",
+        "PROOF_CREATED_MISSING",
+        "PROOF_EXPIRY_MISSING",
+        "PROOF_EXPIRED",
+        "PROOF_SIGNATURE_INVALID",
+    ),
+    "fora.v1.UsageReportRejectionReason": _names(
+        "USAGE_REPORT_REJECTION_REASON",
+        "UNSPECIFIED",
+        "TRANSACTION_NOT_FOUND",
+        "DUPLICATE",
+        "WINDOW_EXPIRED",
+        "MISSING_REQUIRED_FIELDS",
+        "MALFORMED",
+    ),
+    "fora.v1.RequestAuthFailureReason": _names(
+        "REQUEST_AUTH_FAILURE_REASON",
+        "UNSPECIFIED",
+        "SIGNATURE_MISSING",
+        "SIGNATURE_INVALID",
+        "SIGNATURE_STALE",
+    ),
+}
+
+# Protobuf wire types.
+_VARINT, _FIXED64, _LEN, _GROUP_START, _GROUP_END, _FIXED32 = 0, 1, 2, 3, 4, 5
+_MAX_VARINT_BYTES = 10
+_VARINT_PAYLOAD = 0x7F
+_VARINT_MORE = 0x80
+#: How deep a value may nest. The subtree nests three messages deep; the bound only
+#: stops a hostile value from recursing.
+_MAX_DEPTH = 8
+_INT32_SIGN = 1 << 31
+_UINT32 = 1 << 32
+_UINT64_MASK = (1 << 64) - 1
+#: The reason oneof of ErrorDetail: its message-typed fields, in number order. The reader's
+#: errordetail.REASON_FIELDS walks the same members, and the suite holds the two equal.
+REASON_ONEOF: tuple[str, ...] = tuple(f.name for f in MESSAGES[_ROOT] if f.kind == "message")
+
+
+def decode_error_detail_value(value: str) -> dict[str, Any]:
+    """Decode a ``details[].value`` string into ErrorDetail proto-JSON.
+
+    The string is base64 in the standard or the URL alphabet, padded or not — connect-go
+    writes the standard alphabet without padding. Raises :class:`WireDecodeError` for
+    anything that is not a decodable ErrorDetail.
+    """
+    return decode_error_detail(_b64decode(value))
+
+
+def decode_error_detail(raw: bytes) -> dict[str, Any]:
+    """Decode binary ErrorDetail bytes into proto-JSON."""
+    out: dict[str, Any] = {}
+    order: list[str] = []
+    _decode_message(memoryview(raw), _ROOT, out, order, 0)
+    # The reason oneof: protobuf keeps the member written last and clears the others.
+    written = [name for name in order if name in REASON_ONEOF]
+    for name in REASON_ONEOF:
+        if written and name != written[-1]:
+            out.pop(name, None)
+    return out
+
+
+def _b64decode(value: str) -> bytes:
+    text = value.strip().replace("-", "+").replace("_", "/")
+    text += "=" * (-len(text) % 4)
+    try:
+        return base64.b64decode(text, validate=True)
+    except (binascii.Error, ValueError) as exc:
+        raise WireDecodeError("value is not base64") from exc
+
+
+def _decode_message(
+    buf: memoryview, message: str, out: dict[str, Any], order: list[str], depth: int
+) -> None:
+    if depth > _MAX_DEPTH:
+        raise WireDecodeError("value nests too deep")
+    fields = {f.number: f for f in MESSAGES[message]}
+    pos = 0
+    while pos < len(buf):
+        key, pos = _varint(buf, pos)
+        number, wire = key >> 3, key & 7
+        if number == 0:
+            raise WireDecodeError("field number 0")
+        start, pos = _skip(buf, pos, wire)
+        field = fields.get(number)
+        if field is None or not _wire_matches(field, wire):
+            continue
+        _apply(field, wire, buf[start:pos], out, depth)
+        order.append(field.name)
+
+
+def _wire_matches(field: Field, wire: int) -> bool:
+    if field.kind == "enum":
+        return wire == _VARINT or (field.repeated and wire == _LEN)
+    return wire == _LEN
+
+
+def _apply(field: Field, wire: int, payload: memoryview, out: dict[str, Any], depth: int) -> None:
+    if field.kind == "enum":
+        values = _packed_varints(payload) if wire == _LEN else [_varint(payload, 0)[0]]
+        names = [_enum_name(field.type, v) for v in values]
+        if field.repeated:
+            out.setdefault(field.name, []).extend(names)
+        elif names:
+            out[field.name] = names[-1]
+        return
+    if field.kind == "string":
+        text = _string(payload, field.name)
+        if field.repeated:
+            out.setdefault(field.name, []).append(text)
+        else:
+            out[field.name] = text
+        return
+    if field.kind == "map":
+        key, value = _map_entry(payload, field)
+        out.setdefault(field.name, {})[key] = value
+        return
+    if field.kind == "message":
+        if field.repeated:
+            item: dict[str, Any] = {}
+            _decode_message(payload, field.type, item, [], depth + 1)
+            out.setdefault(field.name, []).append(item)
+        else:
+            # A singular message written twice is merged into the first.
+            target = out.setdefault(field.name, {})
+            _decode_message(payload, field.type, target, [], depth + 1)
+        return
+    raise WireDecodeError(f"field kind {field.kind!r} is not in the ErrorDetail subtree")
+
+
+def _map_entry(payload: memoryview, field: Field) -> tuple[str, str]:
+    if field.map_key != "string" or field.map_value != "string":
+        raise WireDecodeError("only map<string, string> is in the ErrorDetail subtree")
+    key, value = "", ""
+    pos = 0
+    while pos < len(payload):
+        tag, pos = _varint(payload, pos)
+        number, wire = tag >> 3, tag & 7
+        start, pos = _skip(payload, pos, wire)
+        if wire != _LEN or number not in (1, 2):
+            continue
+        text = _string(payload[start:pos], field.name)
+        if number == 1:
+            key = text
+        else:
+            value = text
+    return key, value
+
+
+def _enum_name(enum: str, raw: int) -> str | int:
+    number = raw & (_UINT32 - 1)
+    if number >= _INT32_SIGN:
+        number -= _UINT32
+    return ENUMS[enum].get(number, number)
+
+
+def _string(payload: memoryview, name: str) -> str:
+    try:
+        return bytes(payload).decode("utf-8")
+    except UnicodeDecodeError as exc:
+        raise WireDecodeError(f"{name} is not valid UTF-8") from exc
+
+
+def _packed_varints(payload: memoryview) -> list[int]:
+    values: list[int] = []
+    pos = 0
+    while pos < len(payload):
+        value, pos = _varint(payload, pos)
+        values.append(value)
+    return values
+
+
+def _varint(buf: memoryview, pos: int) -> tuple[int, int]:
+    value = 0
+    for i in range(_MAX_VARINT_BYTES):
+        if pos >= len(buf):
+            raise WireDecodeError("truncated varint")
+        byte = buf[pos]
+        pos += 1
+        value |= (byte & _VARINT_PAYLOAD) << (7 * i)
+        if not byte & _VARINT_MORE:
+            return value & _UINT64_MASK, pos
+    raise WireDecodeError("varint longer than ten bytes")
+
+
+def _skip(buf: memoryview, pos: int, wire: int) -> tuple[int, int]:
+    """Where one field's payload starts and ends, by its wire type.
+
+    The start is past a length prefix, so a length-delimited payload is its content.
+    """
+    if wire == _VARINT:
+        return pos, _varint(buf, pos)[1]
+    if wire == _FIXED64:
+        end = pos + 8
+    elif wire == _FIXED32:
+        end = pos + 4
+    elif wire == _LEN:
+        length, pos = _varint(buf, pos)
+        end = pos + length
+    else:
+        # Groups are proto2 only; nothing in this contract encodes one.
+        raise WireDecodeError(f"wire type {wire} is not decodable here")
+    if end > len(buf):
+        raise WireDecodeError("truncated field")
+    return pos, end
diff --git a/sdk/python/fora_sdk/errordetail.py b/sdk/python/fora_sdk/errordetail.py
index 605290a9..f8cf2f45 100644
--- a/sdk/python/fora_sdk/errordetail.py
+++ b/sdk/python/fora_sdk/errordetail.py
@@ -25,11 +25,11 @@
 ``exclude_none=True`` (proto3 omit-unpopulated) and ``mode="json"`` renders each enum
 as its NAME string — the builders never hand-roll field names or enum strings.
 
-The ``ErrorDetail`` wire form is canonical proto-JSON (snake_case field names,
-enums as NAME strings) — the exact shape the generated ``wire.models.ErrorDetail``
-Pydantic model parses. Binary protobuf is deliberately NOT used: it is not a
-cross-language primitive (protobuf's own caveat), so the shared wire the three
-SDKs agree on is proto-JSON.
+The builders emit canonical proto-JSON (snake_case field names, enums as NAME
+strings) — the exact shape the generated ``wire.models.ErrorDetail`` Pydantic model
+parses, and the form the shared corpora pin. The reader also opens the binary form a
+Connect error carries in ``details[].value``, through the table-driven decoder in
+:mod:`fora_sdk._errordetail_wire`, and hands its proto-JSON to the same model.
 """
 
 from __future__ import annotations
@@ -50,6 +50,7 @@
     UsageReportRejectionReason,
 )
 
+from fora_sdk._errordetail_wire import WireDecodeError, decode_error_detail_value
 from fora_sdk._wire_names import snake_from_json_name
 
 if TYPE_CHECKING:
@@ -159,17 +160,23 @@ def error_detail_from(err: Mapping[str, Any] | Iterable[Any]) -> ErrorDetail | N
 
     ``err`` is either a Connect error object (a mapping carrying a ``details``
     array) or the details iterable itself. Each detail entry is the Connect wire
-    form ``{"type": "fora.v1.ErrorDetail", ...}``; the ErrorDetail proto-JSON is
-    read from the entry's ``debug`` projection (Connect includes it for JSON
-    clients) or from a ``value`` already decoded to an object. Returns ``None`` when
-    ``err`` carries no ErrorDetail — the Python analog of the Go ``(detail, false)``.
-
-    The opaque binary ``value`` of a detail is intentionally NOT decoded here: the
-    JSON SDKs have no protobuf binary codec, so they consume the proto-JSON form.
-
-    Both payload forms are read through :func:`_proto_names`, because ``debug`` arrives
-    lowerCamelCase and a decoded ``value`` — which only a caller that owns a binary codec
-    can supply — may be either. A snake_case object passes through it unchanged.
+    form ``{"type": "fora.v1.ErrorDetail", "value": ..., "debug": ...}``. Returns
+    ``None`` when ``err`` carries no ErrorDetail — the Python analog of the Go
+    ``(detail, false)``.
+
+    ``value`` is read FIRST: it is the binary ErrorDetail itself, base64-encoded, and the
+    authoritative copy — Go reads nothing else. It is decoded by the table-driven reader
+    in :mod:`fora_sdk._errordetail_wire`, so this SDK needs no protobuf runtime. ``debug``
+    is a projection connect-go adds for JSON readers, and it is read only when ``value``
+    is ABSENT. A ``value`` that is present but does not decode makes the entry unreadable:
+    its ``debug`` is not read in its place, because a projection that disagrees with an
+    unreadable original is not evidence of anything, and Go would report no detail for the
+    same entry. A ``value`` already decoded to an object — which only a caller that owns a
+    binary codec can supply — is read as proto-JSON.
+
+    ``debug`` and an object ``value`` are read through :func:`_proto_names`, because
+    ``debug`` arrives lowerCamelCase and an object ``value`` may be either. A snake_case
+    object passes through it unchanged.
     """
     details = err.get("details", ()) if isinstance(err, dict) else err
     if isinstance(details, (str, bytes)) or not isinstance(details, Iterable):
@@ -181,14 +188,12 @@ def error_detail_from(err: Mapping[str, Any] | Iterable[Any]) -> ErrorDetail | N
             continue
         if entry.get("type") != ERROR_DETAIL_TYPE:
             continue
-        payload = entry.get("debug")
-        if payload is None and isinstance(entry.get("value"), dict):
-            payload = entry["value"]
-        if not isinstance(payload, dict):
-            continue
         try:
-            return parse_error_detail(_proto_names(payload))
-        except (ValidationError, _TooDeepError):
+            payload = _entry_payload(entry)
+            if payload is None:
+                continue
+            return parse_error_detail(payload)
+        except (ValidationError, _TooDeepError, WireDecodeError):
             # A detail entry that does not decode is not an answer, and it came from a
             # peer that just refused the call — so it is exactly where a hostile one puts
             # something malformed. Raising here would replace the typed failure the caller
@@ -201,6 +206,23 @@ def error_detail_from(err: Mapping[str, Any] | Iterable[Any]) -> ErrorDetail | N
     return None
 
 
+def _entry_payload(entry: dict[str, Any]) -> dict[str, Any] | None:
+    """The proto-JSON object one details entry carries, or ``None`` when it carries none."""
+    value = entry.get("value")
+    if isinstance(value, str):
+        return decode_error_detail_value(value)
+    if isinstance(value, dict):
+        payload: Any = value
+    elif value is None:
+        payload = entry.get("debug")
+    else:
+        return None
+    if not isinstance(payload, dict):
+        return None
+    normalized: dict[str, Any] = _proto_names(payload)
+    return normalized
+
+
 def _reason_detail(
     domain: str,
     message: str,
diff --git a/sdk/python/tests/test_connect_error_parity.py b/sdk/python/tests/test_connect_error_parity.py
index 201e1ffa..3ae960d9 100644
--- a/sdk/python/tests/test_connect_error_parity.py
+++ b/sdk/python/tests/test_connect_error_parity.py
@@ -4,20 +4,22 @@
 sdk/go/connect/connect_error_corpus_test.go.
 
 ``error-detail-vectors.json`` pins the DETAIL's own proto-JSON. This corpus pins the
-ENVELOPE the detail arrives in, which is the form this SDK actually reads: with no
-protobuf binary codec it cannot open a detail's ``value`` (a base64 Any), so Connect's
-``debug`` projection is the only decodable copy.
-
-That projection is lowerCamelCase and no server option changes it — connect-go builds it
-with its own protojson codec at default options — while the response bodies the same
-server emits are snake_case. Reading ``debug`` with a snake-only model therefore used to
-return a detail carrying ``domain`` and ``message`` (single words spell the same either
-way) and NO typed reason, for a refusal the Exchange had named precisely. The failure was
-silent: the parse succeeded, and the unknown reason block was dropped by the
-forward-compatible ``extra="ignore"`` policy that exists for a newer protocol version.
-
-Every vector here was CAPTURED from a real connect-go handler, so the fix is asserted
-against what the wire does rather than against a description of it.
+ENVELOPE the detail arrives in. A detail entry carries the binary ErrorDetail in
+``value`` (base64) — the authoritative copy, and the only one Go reads — and usually a
+``debug`` projection beside it. This SDK reads ``value`` and falls back to ``debug`` only
+when ``value`` is absent; the derived rows (``*.value_only``, ``value_wins_over_debug``,
+``undecodable_value_skipped``) hold that order.
+
+The ``debug`` projection is lowerCamelCase and no server option changes it — connect-go
+builds it with its own protojson codec at default options — while the response bodies the
+same server emits are snake_case. Reading ``debug`` with a snake-only model therefore used
+to return a detail carrying ``domain`` and ``message`` (single words spell the same either
+way) and NO typed reason, for a refusal the Exchange had named precisely.
+
+Every captured vector came from a real connect-go handler, so the reader is asserted
+against what the wire does rather than against a description of it. Each row is also
+decoded through the client, which must report the row's Connect code on
+``CallError.code``.
 """
 
 from __future__ import annotations
@@ -30,6 +32,7 @@
 from fora_sdk.client._call import decode
 from fora_sdk.client.errors import CallError
 from fora_sdk.errordetail import error_detail_from, reason
+from fora_sdk.wire import to_wire
 from wire.models import ResourceResponse
 
 _VECTORS = load_json(GO_CONNECT_TESTDATA / "connect-error-vectors.json")["vectors"]
@@ -66,9 +69,13 @@ def test_reader_extracts_go_projection_from_the_envelope(vector: dict) -> None:
     with pytest.raises(CallError) as caught:
         decode("discover", vector["http_status"], json.dumps(vector["envelope"]), ResourceResponse)
     assert (caught.value.peer_message or "") == vector["peer_message"], vector["name"]
+    # The Connect code the server classified the failure as, on its own field: the class a
+    # caller branches on when it needs more than refused-or-unreachable.
+    assert caught.value.code == vector["code"], vector["name"]
 
     if not expect["has_detail"]:
         assert detail is None, "an envelope carrying no ErrorDetail must read as none"
+        assert expect["detail"] is None
         return
 
     assert detail is not None, (
@@ -77,6 +84,11 @@ def test_reader_extracts_go_projection_from_the_envelope(vector: dict) -> None:
     )
     assert detail.domain == expect["domain"]
     assert detail.message == expect["message"]
+    # The whole detail, under the proto names: a nested member lost on the way
+    # (field_errors, a metadata entry) fails here even when the projection matches.
+    assert to_wire(detail) == expect["detail"], vector["name"]
+    assert caught.value.detail is not None
+    assert to_wire(caught.value.detail) == expect["detail"]
 
     # Metadata keys are the EMITTER's, not the proto's. The corpus carries a
     # deliberately lowerCamelCase key so a normalizer that walked into the map would
@@ -102,7 +114,8 @@ def test_camel_case_debug_projection_is_decoded() -> None:
     """The regression itself, stated once in the open rather than only via the corpus.
 
     A snake-only read of this envelope parses successfully and reports no reason — which
-    is why nothing caught it before the corpus existed.
+    is why nothing caught it before the corpus existed. The entry carries no ``value``,
+    which is the one case the projection is read for.
     """
     envelope = {
         "code": "permission_denied",
@@ -110,7 +123,6 @@ def test_camel_case_debug_projection_is_decoded() -> None:
         "details": [
             {
                 "type": "fora.v1.ErrorDetail",
-                "value": "aWdub3JlZA",
                 "debug": {
                     "domain": "fora.v1.ExchangeService",
                     "message": "balance too low",
diff --git a/sdk/python/tests/test_errordetail_wire_parity.py b/sdk/python/tests/test_errordetail_wire_parity.py
new file mode 100644
index 00000000..1e5336da
--- /dev/null
+++ b/sdk/python/tests/test_errordetail_wire_parity.py
@@ -0,0 +1,130 @@
+"""Binary ErrorDetail decoding (Python side) — replay of the shared Go-oracle corpus.
+
+Mirrors sdk/ts/tests/errordetail-wire.parity.test.ts and the Go leg
+sdk/go/connect/gen_error_detail_wire_vectors_test.go.
+
+This SDK reads a Connect error's typed reason from ``details[].value``, the binary
+ErrorDetail, through a table-driven decoder instead of a protobuf runtime. The table is
+a second statement of the shape, so ``error-detail-wire-vectors.json`` pins it from both
+sides: ``wire`` is the same table read from the compiled descriptor, and must be EQUAL to
+this SDK's; ``vectors`` are binary encodings, between them setting every field of every
+message in the subtree, each with the proto-JSON Go decodes it to.
+"""
+
+from __future__ import annotations
+
+import base64
+from typing import Any
+
+import pytest
+
+from conftest import GO_CONNECT_TESTDATA, load_json
+from fora_sdk._errordetail_wire import (
+    ENUMS,
+    MESSAGES,
+    REASON_ONEOF,
+    WireDecodeError,
+    decode_error_detail,
+    decode_error_detail_value,
+)
+from fora_sdk.errordetail import ERROR_DETAIL_TYPE, REASON_FIELDS, error_detail_from
+from fora_sdk.wire import to_wire
+
+_CORPUS = load_json(GO_CONNECT_TESTDATA / "error-detail-wire-vectors.json")
+_VECTORS: list[dict[str, Any]] = _CORPUS["vectors"]
+
+
+def _table_row(field: Any) -> dict[str, Any]:
+    """One field rendered the way the corpus writes it: empty members omitted."""
+    row = {
+        "name": field.name,
+        "number": field.number,
+        "kind": field.kind,
+        "type": field.type,
+        "repeated": field.repeated,
+        "map_key": field.map_key,
+        "map_value": field.map_value,
+    }
+    return {k: v for k, v in row.items() if v not in ("", False)}
+
+
+def test_message_table_equals_the_descriptor() -> None:
+    mine = {name: [_table_row(f) for f in fields] for name, fields in MESSAGES.items()}
+    assert mine == _CORPUS["wire"]["messages"]
+
+
+def test_enum_table_equals_the_descriptor() -> None:
+    mine = {name: {str(n): v for n, v in values.items()} for name, values in ENUMS.items()}
+    assert mine == _CORPUS["wire"]["enums"]
+
+
+def test_reason_oneof_is_the_reader_list() -> None:
+    # The decoder keeps one member of the oneof; the reader walks the same members.
+    assert REASON_ONEOF == REASON_FIELDS
+
+
+@pytest.mark.parametrize("vector", _VECTORS, ids=[v["name"] for v in _VECTORS])
+def test_value_decodes_to_the_oracle_detail(vector: dict[str, Any]) -> None:
+    assert decode_error_detail_value(vector["value"]) == vector["detail"]
+    # And through the public reader, which hands the decoded object to the generated
+    # model: the model must keep every field the decoder produced.
+    detail = error_detail_from({"details": [{"type": ERROR_DETAIL_TYPE, "value": vector["value"]}]})
+    assert detail is not None, vector["name"]
+    assert to_wire(detail) == vector["detail"]
+
+
+def test_vector_set_is_nonempty() -> None:
+    assert _VECTORS
+
+
+def test_a_value_that_is_not_base64_is_undecodable() -> None:
+    with pytest.raises(WireDecodeError):
+        decode_error_detail_value("!!!not base64")
+
+
+def test_known_field_with_the_wrong_wire_type_is_skipped() -> None:
+    # Field 2 (domain, a string) written as a varint 5, then field 1 as a real string.
+    raw = bytes([0x10, 0x05, 0x0A, 0x02]) + b"ok"
+    assert decode_error_detail(raw) == {"message": "ok"}
+
+
+@pytest.mark.parametrize(
+    ("raw", "why"),
+    [
+        (bytes([0x0A, 0x05]) + b"ab", "length runs past the end"),
+        (bytes([0x0A, 0x02, 0xFF, 0xFE]), "string is not UTF-8"),
+        (bytes([0x0B]), "a group wire type"),
+        (bytes([0x00, 0x01]), "field number 0"),
+        (bytes([0x08] + [0xFF] * 11), "a varint longer than ten bytes"),
+        (bytes([0x08]), "a truncated varint"),
+    ],
+)
+def test_undecodable_values(raw: bytes, why: str) -> None:
+    with pytest.raises(WireDecodeError):
+        decode_error_detail(raw)
+    del why
+
+
+def test_only_the_last_reason_of_the_oneof_is_kept() -> None:
+    # dispute_failure (13) then request_auth_failure (17): protobuf keeps the latter.
+    raw = bytes([0x6A, 0x02, 0x08, 0x01, 0x8A, 0x01, 0x02, 0x08, 0x03])
+    assert decode_error_detail(raw) == {
+        "request_auth_failure": {"reason": "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"}
+    }
+
+
+def test_an_unnamed_enum_number_stays_a_number_and_the_entry_reads_as_none() -> None:
+    # dispute_failure.reason = 99: proto-JSON writes the number, the model refuses it,
+    # and the reader reports no detail rather than inventing a reason.
+    raw = bytes([0x6A, 0x02, 0x08, 99])
+    assert decode_error_detail(raw) == {"dispute_failure": {"reason": 99}}
+    value = base64.b64encode(raw).decode()
+    assert error_detail_from({"details": [{"type": ERROR_DETAIL_TYPE, "value": value}]}) is None
+
+
+def test_url_alphabet_and_padding_are_accepted() -> None:
+    std = _VECTORS[0]["value"]
+    padded = std + "=" * (-len(std) % 4)
+    url = padded.replace("+", "-").replace("/", "_")
+    assert decode_error_detail_value(padded) == decode_error_detail_value(std)
+    assert decode_error_detail_value(url) == decode_error_detail_value(std)
diff --git a/sdk/python/tests/test_transport_failure_parity.py b/sdk/python/tests/test_transport_failure_parity.py
index 04ec7750..dc1c1f00 100644
--- a/sdk/python/tests/test_transport_failure_parity.py
+++ b/sdk/python/tests/test_transport_failure_parity.py
@@ -48,6 +48,9 @@ def test_an_answer_that_did_not_come_from_the_service(vector: dict[str, Any]) ->
         f"{vector['name']}: classed {failure.kind.name}, oracle says {vector['kind']}"
     )
     assert failure.reason == vector["reason"]
+    # A non-envelope answer still carries a Connect code: the one its status implies,
+    # which is what connect-go derives for the same bytes.
+    assert failure.code == vector["reason"]
     # The label and the consequence are pinned together: comparing only the string would
     # still pass if the two classes swapped meanings.
     assert (failure.kind is CallErrorKind.UNREACHABLE) is vector["retryable"]

From 1612e38e436f2d586baff57d090b9609723ffa8d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:08:15 -0400
Subject: [PATCH 015/164] Add raw mode, strict decoding, delivery verification
 and an AdminClient to the Python SDK

Four additions for callers that drive FORA services through the SDK and check
what the services answer:

- RawBody(body), passed to any verb in place of its request (to execute in
  place of the offers), sends the body exactly as given: bytes verbatim, a
  string as UTF-8, any other value serialized once as compact JSON. Nothing
  is filled in and nothing about the message is refused locally; the body is
  still signed, before_sign still runs and the answer is decoded as usual. A
  routed verb still reads its destination from the body's exchange member,
  and a body with no usable exchange is refused as not sent.
- ClientConfig.strict refuses an answer carrying an unknown field at any
  depth, or breaking a field-level or cross-field rule. The shape is the
  published strict JSON Schema of the response message and the existing
  cross-field rules, which the schema also points at the right objects. A
  null member of a message object is read as absent first, because a FORA
  server emits unpopulated fields.
- execute and BrokerClient.execute verify every retrieval URL in the answer:
  the signature against the key the issuing Exchange publishes in its Web Bot
  Auth directory (named by kid, resolved through ClientConfig.delivery_keys,
  by default a guarded WBAKeyResolver built once per client), the binding to
  this agent and to the agent_identity_hash the answer states, and the
  expiry. They return ExecuteResult and BrokerExecuteResult, the generated
  responses plus deliveries, one Delivery per item. fetch takes a Delivery,
  or a URL with exchange=, verifies it before dialling and returns the
  binding on Content.binding; a bare URL is still fetched as given. A URL
  that does not verify is refused as MALFORMED with a synthesized
  retrieval_auth_failure detail naming the edge's reason, and an unreachable
  directory is UNREACHABLE. delivery_verification=Mode.OFF is the opt-out for
  URLs in another signing scheme. SigningTransport.thumbprint names the
  agent key.
- AdminClient, async and sync, covers AdminService.SetTenantFeeRate and
  SetReportingPolicy and ExchangeService.RequestDomainVerification and
  ConfirmDomainVerification, at the configured base URL. The two domain
  requests must name a bare-domain recipient.

The in-process Exchange of the README example now publishes its delivery key
in its directory and names it by thumbprint, as the protocol says, and the
example fetches the verified delivery. BeforeSign, RawBody, Delivery,
DeliveryKeyResolver, ExecuteResult, BrokerExecuteResult and AdminClient are
exported from fora_sdk and fora_sdk.client.
---
 sdk/python/README.md                          |  70 +++-
 sdk/python/fora_sdk/__init__.py               |  14 +
 sdk/python/fora_sdk/client/__init__.py        | 162 ++++++--
 sdk/python/fora_sdk/client/_admin.py          | 141 +++++++
 sdk/python/fora_sdk/client/_call.py           |  89 +++-
 sdk/python/fora_sdk/client/_strict.py         | 161 ++++++++
 sdk/python/fora_sdk/client/_verbs.py          | 258 ++++++++++--
 sdk/python/fora_sdk/client/content.py         |   6 +
 sdk/python/fora_sdk/client/delivery.py        | 229 ++++++++++
 sdk/python/fora_sdk/signing_transport.py      |  15 +-
 sdk/python/fora_sdk/sync/__init__.py          |  76 +++-
 sdk/python/tests/exchange_harness.py          |   6 +-
 sdk/python/tests/test_admin_client.py         | 183 ++++++++
 sdk/python/tests/test_client.py               |   3 +-
 .../tests/test_delivery_verification.py       | 390 ++++++++++++++++++
 sdk/python/tests/test_raw_mode.py             | 223 ++++++++++
 sdk/python/tests/test_strict_decoding.py      | 161 ++++++++
 17 files changed, 2067 insertions(+), 120 deletions(-)
 create mode 100644 sdk/python/fora_sdk/client/_admin.py
 create mode 100644 sdk/python/fora_sdk/client/_strict.py
 create mode 100644 sdk/python/fora_sdk/client/delivery.py
 create mode 100644 sdk/python/tests/test_admin_client.py
 create mode 100644 sdk/python/tests/test_delivery_verification.py
 create mode 100644 sdk/python/tests/test_raw_mode.py
 create mode 100644 sdk/python/tests/test_strict_decoding.py

diff --git a/sdk/python/README.md b/sdk/python/README.md
index bf50bb1c..397662ab 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -47,6 +47,7 @@ from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 from fora_sdk.core import Mode, StaticOfferKeyResolver, Verifier
 from fora_sdk.resolvers import (
     CachedOfferKeyResolver,
+    WBAKeyResolver,
     WellKnownEndpointResolver,
     create_wba_offer_directory_fetch,
     guarded_client,
@@ -121,6 +122,10 @@ def buy_and_fetch(*, exchange: str, uri: str, seed: bytes) -> bytes:
         requester=AGENT,
         verifier=verifier,
         endpoint_resolver=endpoints,
+        # The key each delivery URL is checked against, resolved by its kid from the
+        # issuing Exchange's Web Bot Auth directory. The client builds this same resolver
+        # by default; it is passed here only to carry the sandbox scheme.
+        delivery_keys=WBAKeyResolver(scheme=SCHEME),
     )
 
     with Client(config) as client:
@@ -133,12 +138,15 @@ def buy_and_fetch(*, exchange: str, uri: str, seed: bytes) -> bytes:
             raise RuntimeError(f"no verifiable offer for {uri}: {refused}")
 
         # 5. Buy it. execute() accepts only a verified offer, so an unverified one
-        #    cannot be paid for by mistake.
-        item = client.execute(offers[0]).items[0]
+        #    cannot be paid for by mistake, and it verifies every delivery URL in the
+        #    answer: signed by the issuing Exchange, bound to this agent, not expired.
+        bought = client.execute(offers[0])
+        item = bought.items[0]
 
         # 6. Fetch. The delivery URL is bound to the agent's thumbprint and the client
         #    presents the matching proof of possession, so a copied link fetches nothing.
-        content = client.fetch(item.retrieval_endpoint)
+        #    Passing the verified delivery checks it again before anything is sent.
+        content = client.fetch(bought.deliveries[0])
 
         # 7. Report what was used. It goes to the Exchange the offer named, resolved the
         #    same way as step 2 — never to whatever base_url happened to be configured.
@@ -342,6 +350,10 @@ The rest are bounds and seams with working defaults:
 | `request_id` | `None`, meaning **no header is sent** | mints the `X-Request-ID` correlation value |
 | `validation` | `"strict"` | whether an outbound message is checked against its generated model before it is sent. Orthogonal to offer verification, which is about what comes back |
 | `registration_requirements` | a reader built on the guarded client, once per client | where `register` reads an Exchange's terms revision and registration schema. It holds no document cache on purpose: the contract requires the terms digest to come from a freshly fetched manifest |
+| `delivery_keys` | a `WBAKeyResolver` built on the guarded client, once per client | where `execute` and `fetch` find the key an Exchange signs delivery URLs with: the URL's `kid`, resolved from that Exchange's Web Bot Auth directory |
+| `delivery_verification` | `Mode.STRICT` | whether a delivery URL is verified (signature, agent binding, expiry) before it is handed back or dialled. `Mode.OFF` is for a deployment whose URLs use another signing scheme |
+| `strict` | `False` | refuse an answer carrying an unknown field, or breaking a field-level or cross-field rule. See [Testing a FORA service](#testing-a-fora-service) |
+| `before_sign` | `None` | a hook that receives each request just before it is signed. See [Testing a FORA service](#testing-a-fora-service) |
 
 **Build a client once and reuse it.** `ClientConfig`, the resolvers and the `Verifier`
 are all designed to be shared: the endpoint resolver caches each Exchange's manifest
@@ -352,15 +364,16 @@ processes is the signing key.
 
 ### The verbs
 
-Requests are plain dicts in proto-JSON **snake_case**; a camelCase key is refused as
-malformed rather than silently ignored. Responses are the generated Pydantic models from
-`wire.models`.
+Requests are plain dicts in proto-JSON **snake_case**, or the generated request models
+from `wire.models`; a camelCase key is refused as malformed rather than silently ignored.
+`to_wire(model)` shows the JSON object a model is sent as. Responses are the generated
+Pydantic models.
 
 | Verb | Send | Get back |
 |---|---|---|
 | `discover(query)` | `exchange`, `uris`, optional filters | `DiscoveryResult`: `groups` (one per requested URI, each with `uri`, `result.verified`, `result.rejected`, `absence_reason`), plus `exchange` and `rate_limit`. `verified()` and `rejected()` flatten across groups |
-| `execute(offer, *, idempotency_key=None)` | a `VerifiedOffer`, or a sequence of them issued by one Exchange — nothing else is accepted | `TransactionResponse`: `items`, each with `transaction_id`, `billing_id`, `retrieval_endpoint`, `expires_at`, `cost` |
-| `fetch(signed_url)` | one `retrieval_endpoint` | `Content`: `url`, `mime_type`, `body` |
+| `execute(offer, *, idempotency_key=None)` | a `VerifiedOffer`, or a sequence of them issued by one Exchange — nothing else is accepted | `ExecuteResult`, which is the `TransactionResponse` (`items`, each with `transaction_id`, `billing_id`, `retrieval_endpoint`, `expires_at`, `cost`) plus `deliveries`: the verified `Delivery` of each item's URL |
+| `fetch(signed_url, *, exchange=None)` | a `Delivery` from `execute`, or a `retrieval_endpoint` and the Exchange that issued it | `Content`: `url`, `mime_type`, `body`, and `binding`, the `Delivery` verified before the fetch |
 | `report_usage(report, *, idempotency_key=None)` | `exchange`, `transaction_id`, `billing_id`, `usage` | `UsageReportResponse`: `report_id`, which a later dispute must cite |
 | `dispute(request, *, idempotency_key=None)` | `exchange`, `transaction_id`, `report_id`, `reason` | `DisputeResponse` |
 | `register(request)` / `get_account_status(request)` | account setup with an Exchange | `RegisterResponse` / `GetAccountStatusResponse` |
@@ -377,19 +390,31 @@ you already have — from your own crawl frontier, a publisher's catalogue, or a
 it knows and relays back what they offered, so a caller with no idea which Exchange sells
 a resource starts there rather than with `discover`.
 
+**Every delivery URL is verified.** `execute` checks each `retrieval_endpoint` before it
+returns: the signature against the key the issuing Exchange publishes in its Web Bot Auth
+directory (named by the URL's `kid`), the binding to this agent's key (`agent_id`, and the
+answer's `agent_identity_hash`), and the expiry. A URL that fails is refused as
+`MALFORMED`, with a `retrieval_auth_failure` detail in the edge's own vocabulary and the
+item named in the message. `fetch` repeats the check before it dials when it is given a
+`Delivery`, or a URL with `exchange=`; a bare URL is fetched as given.
+
 Failures arrive as one `CallError` carrying a `CallErrorKind` — `NOT_SENT`, `REFUSED`,
 `UNREACHABLE`, `MALFORMED`, `TOO_LARGE`, `NOT_SIGNABLE`, `UNKNOWN` — plus the peer's own
-reason token and, when the peer sent one, a typed `ErrorDetail`. One failure type for
+reason token, the Connect `code` when the peer answered with one, and, when the peer sent
+one, a typed `ErrorDetail`, decoded from the binary `details[].value` the error carries. One failure type for
 every verb, so a caller branches in one place. `NOT_SENT` is worth singling out: it means
 the client refused before anything left the process, so retrying without changing
 something will fail the same way.
 
 `BrokerClient` carries `resolve` for brokered discovery and `execute` for a brokered
-purchase, and `CatalogClient` carries the publisher verbs. Both take the same
-`ClientConfig`, because a publisher addresses a different endpoint with a different key.
+purchase, `CatalogClient` carries the publisher verbs, and `AdminClient` carries the
+operator verbs: `set_tenant_fee_rate` and `set_reporting_policy` (`fora.admin.v1`), and
+`request_domain_verification` and `confirm_domain_verification`. All take the same
+`ClientConfig`, because each addresses a different endpoint, often with a different key.
 
 `BrokerClient.execute(offers, *, idempotency_key=None)` buys offers from any number of
-Exchanges in one call and returns a `BrokerTransactionResponse`: `items` in request order,
+Exchanges in one call and returns a `BrokerExecuteResult` — the `BrokerTransactionResponse`
+plus `deliveries`, each URL verified against its own Exchange's key: `items` in request order,
 `exchanges` (one `ExchangeOutcome` per Exchange contacted) and `totals` (one `Cost` per
 currency, never summed across currencies). The Broker sends one sub-request per Exchange,
 signed with its own key, and your acceptances travel in each body, so every Exchange still
@@ -400,6 +425,27 @@ must be `requester.domain`: a Broker refuses any other pairing, so the client re
 first, as `MALFORMED`. `Client.execute` with offers from more than one Exchange is refused
 the same way; buy those through the Broker.
 
+### Testing a FORA service
+
+The client is also a test harness. Four capabilities let a conformance or e2e suite drive
+a service through the SDK and check every answer through it:
+
+- **`ClientConfig.before_sign`** receives each request as an `httpx.Request` after the SDK
+  built and checked it, just before it is signed. The request it returns is signed and
+  sent, and the answer decoded as usual, so a deliberately broken message still goes
+  through the SDK's own signer and decoder. A hook may not change the method or URL, or
+  set a header the signer writes.
+- **`RawBody(body)`** passed to any verb in place of its request sends `body` exactly as
+  given: no `ver`, `idempotency_key` or `requester` is filled in and nothing about the
+  message is refused locally. It is still signed and its answer still decoded. A routed
+  verb still reads its destination from the body's `exchange`.
+- **`ClientConfig(strict=True)`** refuses an answer carrying an unknown field at any
+  depth, or breaking a field-level or cross-field rule, using the published strict JSON
+  Schema of the response message (`wire.schemas`) and the SDK's cross-field rules.
+- **Identity helpers** in `fora_sdk.identity` mint a throwaway agent: `generate_key()`,
+  `directory_document(keys)` for the directory to serve, and
+  `signing_transport_for(key, directory)`.
+
 ### Running against a local Exchange
 
 Three environment variables. WHEN each is read matters, because setting one after the
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index b5a10da3..69e452c9 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -26,14 +26,21 @@
 )
 from .b64 import b64url_decode, b64url_nopad
 from .client import (
+    AdminClient,
+    BeforeSign,
     BrokerClient,
+    BrokerExecuteResult,
     CallError,
     CallErrorKind,
     CatalogClient,
     Client,
     ClientConfig,
     Content,
+    Delivery,
+    DeliveryKeyResolver,
     EndpointResolver,
+    ExecuteResult,
+    RawBody,
     Validation,
 )
 from .core import (
@@ -173,12 +180,19 @@
     "AGENT_KEY_HEADER",
     "AudienceVerdict",
     "BARE_DOMAIN_PATTERN",
+    "AdminClient",
+    "BeforeSign",
     "BrokerClient",
+    "BrokerExecuteResult",
     "CallError",
     "CallErrorKind",
     "CatalogClient",
     "Client",
     "ClientConfig",
+    "Delivery",
+    "DeliveryKeyResolver",
+    "ExecuteResult",
+    "RawBody",
     "ConnectProtocolVersion",
     "ConnectProtocolVersionHeader",
     "Content",
diff --git a/sdk/python/fora_sdk/client/__init__.py b/sdk/python/fora_sdk/client/__init__.py
index 9f1cf31b..f5b5ebfd 100644
--- a/sdk/python/fora_sdk/client/__init__.py
+++ b/sdk/python/fora_sdk/client/__init__.py
@@ -25,17 +25,21 @@
 
 import asyncio
 import time
+from dataclasses import replace
 from typing import TYPE_CHECKING
 
 import httpx
 
+from fora_sdk.core import Mode
 from fora_sdk.resolvers import _ssrf, guarded_async_client, guarded_client
 from fora_sdk.window import clock_window
 
-from . import _verbs
+from . import _admin, _verbs
 from ._call import (
     DEFAULT_CALL_TIMEOUT_SEC,
     DEFAULT_MAX_RPC_READ_BYTES,
+    BeforeSign,
+    RawBody,
     Validation,
     as_call_error,
 )
@@ -46,7 +50,7 @@
     require_dialable_scheme,
     rpc_headers,
 )
-from ._verbs import ClientConfig, _with_requirements_reader
+from ._verbs import ClientConfig, _with_defaults
 from .content import (
     DEFAULT_CONTENT_TIMEOUT_SEC,
     DEFAULT_MAX_CONTENT_BYTES,
@@ -59,6 +63,14 @@
     redact_url,
     transport_failure,
 )
+from .delivery import (
+    BrokerExecuteResult,
+    Delivery,
+    DeliveryKeyResolver,
+    ExecuteResult,
+    Expected,
+    verify_delivery,
+)
 from .errors import NOT_CANONICAL_WIRE_NAMING, CallError, CallErrorKind
 from .route import EndpointResolver, RegistrationRequirementsReader
 
@@ -66,14 +78,16 @@
     from collections.abc import Sequence
 
     from wire.models import (
-        BrokerTransactionResponse,
         DisputeResponse,
+        DomainVerificationChallenge,
+        DomainVerificationResult,
         GetAccountStatusResponse,
         PushResourcesResponse,
         RefreshCatalogResponse,
         RegisterResponse,
         RemoveResourcesResponse,
-        TransactionResponse,
+        SetReportingPolicyResponse,
+        SetTenantFeeRateResponse,
         UsageReportResponse,
     )
 
@@ -88,14 +102,21 @@
     "DEFAULT_MAX_RPC_READ_BYTES",
     "DEFAULT_PROOF_WINDOW_SEC",
     "NOT_CANONICAL_WIRE_NAMING",
+    "AdminClient",
+    "BeforeSign",
     "BrokerClient",
+    "BrokerExecuteResult",
     "CallError",
     "CallErrorKind",
     "CatalogClient",
     "Client",
     "ClientConfig",
     "Content",
+    "Delivery",
+    "DeliveryKeyResolver",
     "EndpointResolver",
+    "ExecuteResult",
+    "RawBody",
     "RegistrationRequirementsReader",
     "Validation",
 ]
@@ -131,15 +152,18 @@ def __init__(
         self._guarded = guarded if guarded is not None else (
             self._http if not self._owns else guarded_async_client(follow_redirects=False)
         )
-        self._config, self._requirements_http = _with_requirements_reader(config)
+        self._config, self._owned = _with_defaults(config)
+        #: The requirements reader's transport when this client built it; kept by name
+        #: because a test proves it is closed with the client.
+        self._requirements_http = self._owned.requirements
 
     async def aclose(self) -> None:
         """Close the transports this client built. An injected one is left alone."""
         # Independent of the RPC legs above: this client is built here whenever the
         # caller injected no reader, whether or not it injected an RPC transport, so it
-        # is closed on its own terms rather than behind that ownership question.
-        if self._requirements_http is not None:
-            self._requirements_http.close()
+        # is closed on its own terms rather than behind that ownership question. The
+        # delivery-key resolver's transport is the same case.
+        self._owned.close()
         if not self._owns:
             return
         await self._http.aclose()
@@ -235,16 +259,22 @@ async def discover(self, query: RequestMessage) -> DiscoveryResult:
 
     async def execute(
         self,
-        offer: VerifiedOffer | Sequence[VerifiedOffer],
+        offer: VerifiedOffer | Sequence[VerifiedOffer] | RawBody,
         *,
         idempotency_key: str | None = None,
-    ) -> TransactionResponse:
+    ) -> ExecuteResult:
         """Commit to a VERIFIED offer — or several issued by ONE Exchange, in one request —
         and return the transaction response. Offers from several Exchanges are refused
-        locally; buy those through :meth:`BrokerClient.execute`."""
+        locally; buy those through :meth:`BrokerClient.execute`.
+
+        Every retrieval URL in the answer is verified before it is handed back — its
+        signature against the issuing Exchange's published key, its binding to this
+        agent, its expiry — and the verified binding of each is on
+        :attr:`ExecuteResult.deliveries`. A URL that does not verify refuses the answer
+        (``ClientConfig.delivery_verification`` turns this off)."""
         plan = _verbs.plan_execute(self._config, offer, idempotency_key)
         status, body = await self._send(plan)
-        return _verbs.finish_execute(plan, status, body)
+        return await asyncio.to_thread(_verbs.finish_execute, self._config, plan, status, body)
 
     async def report_usage(
         self, report: RequestMessage, *, idempotency_key: str | None = None
@@ -291,7 +321,7 @@ async def get_account_status(
         status, body = await self._send(plan)
         return _verbs.finish_get_account_status(plan, status, body)
 
-    async def fetch(self, signed_url: str) -> Content:
+    async def fetch(self, signed_url: str | Delivery, *, exchange: str | None = None) -> Content:
         """Retrieve the content a signed delivery URL names, presenting proof of
         possession of the agent key that URL is bound to.
 
@@ -300,16 +330,18 @@ async def fetch(self, signed_url: str) -> Content:
         separate, higher tier. It takes no idempotency key: a fetch is a GET against an
         already-issued URL, and nothing on this path mutates state.
 
-        The URL is taken as given. Whether it is one this agent bought, and whether its
-        agent_id matches this agent's key, are the CALLER's checks — the SDK exports
-        ``verify_ed25519_signed_url`` and ``verify_agent_binding`` for exactly that, and
-        running them first turns an edge 403 into a local answer.
+        Given a :class:`Delivery` from ``execute``, or a URL and the ``exchange`` that
+        issued it, the URL is verified before anything is sent — its signature against
+        that Exchange's published key, its binding to this agent, its expiry — and the
+        verified binding is on ``Content.binding``. A bare URL with no Exchange named is
+        fetched as given, and the edge is the only check.
         """
-        headers, timeout, max_bytes = _fetch_inputs(self._config, signed_url)
+        url, binding = await asyncio.to_thread(_fetch_target, self._config, signed_url, exchange)
+        headers, timeout, max_bytes = _fetch_inputs(self._config, url)
         op = "fetch content"
         self._refuse_if_closed(op)
         # A delivery URL always names a host another party chose.
-        require_dialable_scheme(op, signed_url)
+        require_dialable_scheme(op, url)
         try:
             # Redirects are REFUSED. Following one would either replay a proof bound to
             # the old URL, which the edge's own check rejects, or hand a fresh proof of
@@ -319,7 +351,7 @@ async def fetch(self, signed_url: str) -> Content:
             # a delivery edge is a host another party named.
             async with self._guarded.stream(
                 "GET",
-                signed_url,
+                url,
                 headers={**headers, **IDENTITY_ENCODING},
                 timeout=timeout,
                 follow_redirects=False,
@@ -352,7 +384,7 @@ async def fetch(self, signed_url: str) -> Content:
                 read = bounded_chunks(op, max_bytes, response.status_code)
                 async for chunk in response.aiter_bytes():
                     read.add(chunk)
-                return read_content(signed_url, response, read.body())
+                return replace(read_content(url, response, read.body()), binding=binding)
         except httpx.HTTPError as exc:
             raise transport_failure(exc) from exc
         except _ssrf.SsrfError as exc:
@@ -392,8 +424,8 @@ async def resolve(self, request: RequestMessage) -> DiscoveryResult:
         )
 
     async def execute(
-        self, offers: Sequence[VerifiedOffer], *, idempotency_key: str | None = None
-    ) -> BrokerTransactionResponse:
+        self, offers: Sequence[VerifiedOffer] | RawBody, *, idempotency_key: str | None = None
+    ) -> BrokerExecuteResult:
         """Buy VERIFIED offers through the Broker in one call, however many Exchanges issued
         them (BrokerService.ExecuteTransaction).
 
@@ -404,10 +436,16 @@ async def execute(
 
         Needs ``requester`` and a signer whose ``signature_agent`` directory host is
         ``requester.domain`` — a Broker refuses any other pairing, so this client does first.
+
+        Every retrieval URL in the answer is verified against the key of the Exchange that
+        issued that item's offer, as :meth:`Client.execute` does, and the verified
+        bindings are on :attr:`BrokerExecuteResult.deliveries`.
         """
         plan = _verbs.plan_broker_execute(self._config, offers, idempotency_key)
         status, body = await self._send(plan)
-        return _verbs.finish_broker_execute(plan, status, body)
+        return await asyncio.to_thread(
+            _verbs.finish_broker_execute, self._config, plan, status, body
+        )
 
 
 class CatalogClient(_Face):
@@ -451,9 +489,79 @@ async def refresh_catalog(self, request: RequestMessage) -> RefreshCatalogRespon
         return _verbs.finish_refresh_catalog(plan, status, body)
 
 
-def _fetch_inputs(
-    config: ClientConfig, signed_url: str
-) -> tuple[dict[str, str], float, int]:
+class AdminClient(_Face):
+    """The operator client: ``fora.admin.v1.AdminService`` and the two domain-verification
+    RPCs of ``fora.v1.ExchangeService``.
+
+    A SEPARATE class because the caller is a different party — the operator and its
+    onboarding tooling, not an agent — and the admin plane is a different address: the
+    contract keeps AdminService off the public agent-facing listener. Every call goes to
+    the configured base URL over the plain transport; a deployment that serves the admin
+    listener and the Exchange endpoint apart builds one client per address.
+
+    ``ver`` is filled when empty and each request is checked against its generated model.
+    The two domain-verification requests name their recipient in ``exchange``, and one
+    that names none is refused before it is sent. Requests are signed when a ``signer``
+    is configured; the admin plane does not require it. Each verb accepts a generated
+    model, a dict or a :class:`RawBody`.
+    """
+
+    def __init__(self, config: ClientConfig, *, http: httpx.AsyncClient | None = None) -> None:
+        super().__init__(config, http)
+
+    async def set_tenant_fee_rate(self, request: RequestMessage) -> SetTenantFeeRateResponse:
+        """Replace a tenant's fee rate (AdminService.SetTenantFeeRate)."""
+        plan = _admin.plan_set_tenant_fee_rate(self._config, request)
+        status, body = await self._send(plan)
+        return _admin.finish_set_tenant_fee_rate(plan, status, body)
+
+    async def set_reporting_policy(self, request: RequestMessage) -> SetReportingPolicyResponse:
+        """Replace a tenant's reporting policy (AdminService.SetReportingPolicy)."""
+        plan = _admin.plan_set_reporting_policy(self._config, request)
+        status, body = await self._send(plan)
+        return _admin.finish_set_reporting_policy(plan, status, body)
+
+    async def request_domain_verification(
+        self, request: RequestMessage
+    ) -> DomainVerificationChallenge:
+        """Ask for a domain-verification challenge (ExchangeService.RequestDomainVerification)."""
+        plan = _admin.plan_request_domain_verification(self._config, request)
+        status, body = await self._send(plan)
+        return _admin.finish_request_domain_verification(plan, status, body)
+
+    async def confirm_domain_verification(
+        self, request: RequestMessage
+    ) -> DomainVerificationResult:
+        """Confirm a placed challenge (ExchangeService.ConfirmDomainVerification)."""
+        plan = _admin.plan_confirm_domain_verification(self._config, request)
+        status, body = await self._send(plan)
+        return _admin.finish_confirm_domain_verification(plan, status, body)
+
+
+def _fetch_target(
+    config: ClientConfig, target: str | Delivery, exchange: str | None
+) -> tuple[str, Delivery | None]:
+    """The URL a fetch dials, and the binding verified for it when an Exchange is named.
+
+    Shared by both faces. It resolves a key, which may go to the network, so the async
+    face runs it in a thread. A refusal raises before the proof is minted, so nothing
+    leaves the process for a URL this client already knows the edge would refuse.
+    """
+    url = target.url if isinstance(target, Delivery) else target
+    named = target.exchange if isinstance(target, Delivery) else exchange
+    if not named or config.delivery_verification is Mode.OFF:
+        return url, None
+    if config.signer is None or config.delivery_keys is None:
+        # The signer is refused with its own reason by _fetch_inputs; checked here too
+        # because the binding is to its key. The facades always fill in delivery_keys.
+        _fetch_inputs(config, url)
+        return url, None
+    stated = target.agent_id if isinstance(target, Delivery) else ""
+    expected = Expected(exchange=named, agent=config.signer.thumbprint, stated=stated)
+    return url, verify_delivery("fetch content", url, expected, config.delivery_keys)
+
+
+def _fetch_inputs(config: ClientConfig, signed_url: str) -> tuple[dict[str, str], float, int]:
     """The proof headers, what is LEFT of the deadline, and the body cap for one fetch.
 
     The deadline covers proof minting as well as the round trip. Minting may call out to a
diff --git a/sdk/python/fora_sdk/client/_admin.py b/sdk/python/fora_sdk/client/_admin.py
new file mode 100644
index 00000000..ab8b5d0c
--- /dev/null
+++ b/sdk/python/fora_sdk/client/_admin.py
@@ -0,0 +1,141 @@
+"""The operator verbs: AdminService, and the two domain-verification RPCs.
+
+``fora.admin.v1.AdminService`` sets a tenant's fee rate and reporting policy. The two
+domain-verification RPCs live on ``fora.v1.ExchangeService`` but serve the same audience:
+the tooling that onboards a publisher, not an agent. Both faces of :class:`AdminClient`
+share these plans, the way every other client shares :mod:`._verbs`.
+
+Every call goes to the configured base URL over the plain transport. The operator chose
+that address, as a publisher chooses its catalog endpoint, so nothing here is routed by
+a manifest. The contract keeps AdminService off the public agent-facing listener, so a
+deployment that serves it apart from the Exchange endpoint builds one client per address.
+
+The admin plane carries no request signing in the contract, and these plans sign anyway
+when a signer is configured: a signature the peer does not check costs nothing, and the
+domain-verification RPCs share an endpoint with signed traffic. No message here carries
+an idempotency key — both admin setters are full-replace overwrites.
+"""
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING, Any
+
+from wire.models import (
+    DomainVerificationChallenge,
+    DomainVerificationConfirmation,
+    DomainVerificationRequest,
+    DomainVerificationResult,
+    SetReportingPolicyRequest,
+    SetReportingPolicyResponse,
+    SetTenantFeeRateRequest,
+    SetTenantFeeRateResponse,
+)
+
+from ._call import RawBody, decode, validate_request
+from ._verbs import (
+    EXCHANGE_SERVICE,
+    ClientConfig,
+    Plan,
+    RequestMessage,
+    _plan,
+    _require_recipient,
+    _Route,
+    _stamp_ver,
+    _str_field,
+)
+
+if TYPE_CHECKING:
+    from pydantic import BaseModel
+
+ADMIN_SERVICE = "fora.admin.v1.AdminService"
+
+
+def plan_set_tenant_fee_rate(cfg: ClientConfig, request: RequestMessage) -> Plan:
+    """Assemble AdminService.SetTenantFeeRate."""
+    return _plan_admin(
+        cfg, "set tenant fee rate", "SetTenantFeeRate", SetTenantFeeRateRequest, request
+    )
+
+
+def finish_set_tenant_fee_rate(plan: Plan, status: int, body: str) -> SetTenantFeeRateResponse:
+    return decode(plan.op, status, body, SetTenantFeeRateResponse, strict=plan.strict)  # type: ignore[no-any-return]
+
+
+def plan_set_reporting_policy(cfg: ClientConfig, request: RequestMessage) -> Plan:
+    """Assemble AdminService.SetReportingPolicy."""
+    return _plan_admin(
+        cfg, "set reporting policy", "SetReportingPolicy", SetReportingPolicyRequest, request
+    )
+
+
+def finish_set_reporting_policy(plan: Plan, status: int, body: str) -> SetReportingPolicyResponse:
+    return decode(plan.op, status, body, SetReportingPolicyResponse, strict=plan.strict)  # type: ignore[no-any-return]
+
+
+def plan_request_domain_verification(cfg: ClientConfig, request: RequestMessage) -> Plan:
+    """Assemble ExchangeService.RequestDomainVerification. See :func:`_plan_domain`."""
+    return _plan_domain(
+        cfg,
+        "request domain verification",
+        "RequestDomainVerification",
+        DomainVerificationRequest,
+        request,
+    )
+
+
+def finish_request_domain_verification(
+    plan: Plan, status: int, body: str
+) -> DomainVerificationChallenge:
+    return decode(plan.op, status, body, DomainVerificationChallenge, strict=plan.strict)  # type: ignore[no-any-return]
+
+
+def plan_confirm_domain_verification(cfg: ClientConfig, request: RequestMessage) -> Plan:
+    """Assemble ExchangeService.ConfirmDomainVerification. See :func:`_plan_domain`."""
+    return _plan_domain(
+        cfg,
+        "confirm domain verification",
+        "ConfirmDomainVerification",
+        DomainVerificationConfirmation,
+        request,
+    )
+
+
+def finish_confirm_domain_verification(
+    plan: Plan, status: int, body: str
+) -> DomainVerificationResult:
+    return decode(plan.op, status, body, DomainVerificationResult, strict=plan.strict)  # type: ignore[no-any-return]
+
+
+def _plan_admin(
+    cfg: ClientConfig, op: str, method: str, model: type[BaseModel], request: RequestMessage
+) -> Plan:
+    """The admin setters: ``ver`` filled when empty, the message checked, nothing else.
+
+    The admin messages name no recipient — the plane is reached on an internal listener,
+    not addressed by domain — so there is no recipient to require.
+    """
+    route = _Route(op, cfg.base_url, ADMIN_SERVICE, method)
+    if isinstance(request, RawBody):
+        return _plan(cfg, route, request)
+    sent = _stamp_ver(op, request)
+    validate_request(op, sent, model, cfg.validation)
+    return _plan(cfg, route, sent)
+
+
+def _plan_domain(
+    cfg: ClientConfig, op: str, method: str, model: type[BaseModel], request: RequestMessage
+) -> Plan:
+    """The domain-verification requests, which DO name a recipient.
+
+    ``exchange`` is the bare domain of the Exchange the request is meant for, distinct
+    from ``domain``, the publisher domain being verified. A request naming none, or a
+    value that is not a bare domain, is refused before anything is signed or sent — the
+    rule every other addressed request follows.
+    """
+    route = _Route(op, cfg.base_url, EXCHANGE_SERVICE, method)
+    if isinstance(request, RawBody):
+        return _plan(cfg, route, request)
+    sent: dict[str, Any] = _stamp_ver(op, request)
+    _require_recipient(op, _str_field(sent, "exchange"))
+    validate_request(op, sent, model, cfg.validation)
+    return _plan(cfg, route, sent)
diff --git a/sdk/python/fora_sdk/client/_call.py b/sdk/python/fora_sdk/client/_call.py
index f1c35afc..90351d8f 100644
--- a/sdk/python/fora_sdk/client/_call.py
+++ b/sdk/python/fora_sdk/client/_call.py
@@ -19,6 +19,7 @@
 
 import json
 from collections.abc import Callable
+from dataclasses import dataclass
 from typing import TYPE_CHECKING, Any, Literal, Protocol
 
 import httpx
@@ -34,6 +35,7 @@
     RequestIDHeader,
 )
 
+from ._strict import check_strict
 from .errors import (
     NOT_CANONICAL_WIRE_NAMING,
     CallError,
@@ -80,6 +82,57 @@ def rpc_url(base_url: str, service: str, method: str) -> str:
 BeforeSign = Callable[[httpx.Request], httpx.Request]
 
 
+@dataclass(frozen=True)
+class RawBody:
+    """A request body a verb sends exactly as given — raw mode, chosen per call.
+
+    Pass one to any verb in place of its request (to ``execute`` in place of the offers).
+    The verb then fills in nothing — no ``ver``, no ``idempotency_key``, no ``requester``
+    — checks nothing about the message, and refuses nothing about it locally. It still
+    signs the bytes when a signer is configured, still runs ``before_sign``, still caps
+    the read, and still decodes the reply into the verb's response model, strictly when
+    the client is strict. It is for a test that must put a message on the wire the SDK
+    would never build, and see how the peer answers.
+
+    ``bytes`` are sent verbatim and ``str`` as its UTF-8 bytes; any other value is
+    serialized once, as compact JSON. A verb that routes by the message — a usage report,
+    a dispute, a registration, an account-status read — still reads the destination from
+    the body's ``exchange`` member and resolves it as usual, because the address a signed
+    call goes to is not a property of the message under test. A body with no usable
+    ``exchange`` is refused as not sent: there is nothing to dial.
+    """
+
+    body: Any
+
+    def encoded(self, op: str) -> bytes:
+        """The bytes the call sends."""
+        if isinstance(self.body, bytes):
+            return self.body
+        if isinstance(self.body, str):
+            return self.body.encode()
+        try:
+            return json.dumps(self.body, separators=(",", ":")).encode()
+        except (TypeError, ValueError) as exc:
+            raise malformed(op, exc) from exc
+
+    def parsed(self) -> dict[str, Any]:
+        """The body as a JSON object, or ``{}`` when it is not one.
+
+        Read only for what the SDK still needs from a raw call: the destination of a
+        routed verb, and the URIs a flat discovery answer is attributed to.
+        """
+        if isinstance(self.body, dict):
+            return self.body
+        raw = self.body.encode() if isinstance(self.body, str) else self.body
+        if not isinstance(raw, bytes):
+            return {}
+        try:
+            value = json.loads(raw)
+        except (ValueError, RecursionError):
+            return {}
+        return value if isinstance(value, dict) else {}
+
+
 class SigningSettings(Protocol):
     """The signing knobs ``prepare`` reads. ``ClientConfig`` satisfies it as it stands."""
 
@@ -100,10 +153,13 @@ def prepare(
     Serialized ONCE: RFC 9530 Content-Digest covers the exact octets, so re-rendering
     between signing and sending would produce a digest for a body the peer never received.
     """
-    try:
-        body = json.dumps(message, separators=(",", ":")).encode()
-    except (TypeError, ValueError) as exc:
-        raise malformed(op, exc) from exc
+    if isinstance(message, RawBody):
+        body = message.encoded(op)
+    else:
+        try:
+            body = json.dumps(message, separators=(",", ":")).encode()
+        except (TypeError, ValueError) as exc:
+            raise malformed(op, exc) from exc
     headers = {
         "content-type": ContentTypeJSON,
         ConnectProtocolVersionHeader: ConnectProtocolVersion,
@@ -212,7 +268,7 @@ def validate_request(op: str, message: Any, model: type[BaseModel], validation:
 
 
 def decode_with_raw(
-    op: str, status: int, body: str, model: type[BaseModel]
+    op: str, status: int, body: str, model: type[BaseModel], *, strict: bool = False
 ) -> tuple[Any, dict[str, Any]]:
     """Decode one answer and hand back the RAW object beside the parsed message.
 
@@ -224,20 +280,25 @@ def decode_with_raw(
     """
     _refuse_redirect(op, status)
     payload = _parse_json(op, status, body)
-    parsed = _validate(op, status, payload, model)
+    parsed = _validate(op, status, payload, model, strict=strict)
     return parsed, payload if isinstance(payload, dict) else {}
 
 
-def decode(op: str, status: int, body: str, model: type[BaseModel]) -> Any:
+def decode(
+    op: str, status: int, body: str, model: type[BaseModel], *, strict: bool = False
+) -> Any:
     """Turn one answer into a parsed message, or raise the typed failure.
 
     A non-2xx is the Connect error envelope ``{code, message, details}``. The typed reason
-    rides in ``details``, which :func:`~fora_sdk.errordetail.error_detail_from` reads —
-    including the lowerCamelCase ``debug`` projection connect-go emits there and no server
-    codec replaces.
+    rides in ``details``, which :func:`~fora_sdk.errordetail.error_detail_from` reads:
+    each entry's binary ``value`` first, and the lowerCamelCase ``debug`` projection
+    connect-go emits beside it only when the value is absent.
+
+    ``strict`` also refuses a success answer carrying an unknown field or breaking a
+    cross-field rule; see :func:`fora_sdk.client._strict.check_strict`.
     """
     _refuse_redirect(op, status)
-    return _validate(op, status, _parse_json(op, status, body), model)
+    return _validate(op, status, _parse_json(op, status, body), model, strict=strict)
 
 
 _HTTP_MULTIPLE_CHOICES_END = 400
@@ -261,9 +322,13 @@ def _refuse_redirect(op: str, status: int) -> None:
         )
 
 
-def _validate(op: str, status: int, payload: Any, model: type[BaseModel]) -> Any:
+def _validate(
+    op: str, status: int, payload: Any, model: type[BaseModel], *, strict: bool = False
+) -> Any:
     if not _HTTP_OK <= status < _HTTP_MULTIPLE_CHOICES:
         raise _connect_envelope_error(op, status, payload)
+    if strict:
+        check_strict(op, model, payload)
     try:
         return model.model_validate(payload)
     except ValidationError as exc:
diff --git a/sdk/python/fora_sdk/client/_strict.py b/sdk/python/fora_sdk/client/_strict.py
new file mode 100644
index 00000000..51db028d
--- /dev/null
+++ b/sdk/python/fora_sdk/client/_strict.py
@@ -0,0 +1,161 @@
+"""Strict response decoding: refuse an answer the contract does not describe.
+
+The generated models are forward-compatible on purpose. They ignore a field they do not
+know, because a peer on a newer minor version may send one, and they carry only the
+field-level rules. A conformance check wants the opposite: an unknown or misspelled field
+is a finding, and so is an answer that breaks one of the cross-field rules the proto
+states. ``ClientConfig.strict`` turns that on, and this module is the whole of it.
+
+It defines no shape of its own. The unknown-field policy and the field-level rules come
+from the published strict JSON Schema of the response message
+(``wire.schemas.load(name, strict=True)``, generated from the proto), and the cross-field
+rules from :mod:`fora_sdk.crossfield`, the transcription of the proto's message-level CEL
+the SDK already ships. The schema also tells the walk below which objects are which
+message, so it never guesses.
+
+One thing is normalized first. A FORA server renders proto-JSON with unpopulated fields
+emitted, so an unset message field arrives as ``null``, and proto-JSON reads a ``null`` as
+the field's default. The schemas describe values, not that rule, so a ``null`` member of a
+message object is removed before validation — never one inside a
+``google.protobuf.Struct`` or ``Value``, where ``null`` is data.
+"""
+
+from __future__ import annotations
+
+from functools import cache
+from typing import TYPE_CHECKING, Any
+
+from jsonschema import Draft202012Validator
+from wire import schemas
+
+from fora_sdk.crossfield import _RULES_BY_MESSAGE, cross_field_rule_ids
+
+from .errors import malformed
+
+if TYPE_CHECKING:
+    from pydantic import BaseModel
+
+#: The prefix a schema's ``$ref`` carries before a message's fully-qualified name.
+_DEFS_REF = "#/$defs/"
+#: The package the cross-field rules are transcribed from.
+_RULE_PACKAGE = "fora.v1."
+
+
+def check_strict(op: str, model: type[BaseModel], payload: Any) -> None:
+    """Refuse ``payload`` unless it is a ``model`` message the strict contract accepts.
+
+    Raises the MALFORMED ``CallError`` naming the first failure: the path and the schema's
+    complaint for an unknown field or a field-level rule, or the violated rule ids for a
+    cross-field rule.
+    """
+    name = _schema_name(model)
+    schema = schemas.load(name, strict=True)
+    normalized = _without_nulls(schema, schema, payload)
+    errors = sorted(_validator(name).iter_errors(normalized), key=lambda e: list(e.path))
+    if errors:
+        first = errors[0]
+        where = "/" + "/".join(str(p) for p in first.path)
+        raise malformed(op, f"strict decoding refused the answer at {where}: {first.message}")
+    violated: list[str] = []
+    _walk(schema, schema, normalized, name, violated)
+    if violated:
+        raise malformed(
+            op, f"strict decoding refused the answer: cross-field rule(s) {', '.join(violated)}"
+        )
+
+
+@cache
+def _schema_name(model: type[BaseModel]) -> str:
+    """The fully-qualified message name whose published schema decodes ``model``.
+
+    The generated models are one flat module across ``fora.v1`` and ``fora.admin.v1``, so
+    the class name is matched against the schema names, walking up from a subclass such
+    as ``ExecuteResult`` to the generated model it extends. A class name two packages
+    share is refused rather than resolved by accident.
+    """
+    names = schemas.names()
+    for cls in model.__mro__:
+        found = [n for n in names if n.rsplit(".", 1)[-1] == cls.__name__]
+        if len(found) == 1:
+            return found[0]
+        if found:
+            raise LookupError(f"several published schemas match {cls.__name__}: {found}")
+    raise LookupError(f"no published schema for {model.__name__}")
+
+
+@cache
+def _validator(name: str) -> Draft202012Validator:
+    return Draft202012Validator(schemas.load(name, strict=True))
+
+
+def _resolve(root: dict[str, Any], node: Any) -> tuple[dict[str, Any], str | None]:
+    """Follow a ``$ref`` into ``$defs``; return the node and the message name it names."""
+    if isinstance(node, dict) and isinstance(node.get("$ref"), str):
+        ref: str = node["$ref"]
+        if ref.startswith(_DEFS_REF):
+            name = ref[len(_DEFS_REF) :]
+            target = root.get("$defs", {}).get(name)
+            if isinstance(target, dict):
+                return target, name
+    return (node if isinstance(node, dict) else {}), None
+
+
+def _is_message(node: dict[str, Any]) -> bool:
+    """A message object: closed properties. A Struct is an open ``{"type": "object"}``."""
+    return isinstance(node.get("properties"), dict)
+
+
+def _without_nulls(root: dict[str, Any], node: Any, value: Any) -> Any:
+    """A copy of ``value`` with the ``null`` members of every message object removed."""
+    node, _ = _resolve(root, node)
+    if isinstance(value, dict):
+        if _is_message(node):
+            props: dict[str, Any] = node["properties"]
+            return {
+                k: _without_nulls(root, props.get(k, {}), v)
+                for k, v in value.items()
+                if not (v is None and _null_means_absent(root, props.get(k)))
+            }
+        extra = node.get("additionalProperties")
+        if isinstance(extra, dict):
+            return {k: _without_nulls(root, extra, v) for k, v in value.items()}
+        return value
+    if isinstance(value, list):
+        items = node.get("items", {})
+        return [_without_nulls(root, items, v) for v in value]
+    return value
+
+
+def _null_means_absent(root: dict[str, Any], prop: Any) -> bool:
+    """Whether ``null`` is the absence of this field rather than a value of it.
+
+    A field the schema does not declare is left for the validator to refuse, and a
+    ``google.protobuf.Value`` (a schema with no ``type``) admits ``null`` as data.
+    """
+    if prop is None:
+        return False
+    node, _ = _resolve(root, prop)
+    return "type" in node or "anyOf" in node or "$ref" in prop
+
+
+def _walk(
+    root: dict[str, Any], node: Any, value: Any, message: str | None, violated: list[str]
+) -> None:
+    """Apply the cross-field rules to every message object the schema identifies."""
+    node, named = _resolve(root, node)
+    message = named or message
+    if isinstance(value, dict) and _is_message(node):
+        if message is not None and message.startswith(_RULE_PACKAGE):
+            short = message[len(_RULE_PACKAGE) :]
+            if short in _RULES_BY_MESSAGE:
+                violated.extend(cross_field_rule_ids(short, value))
+        props: dict[str, Any] = node["properties"]
+        for key, child in value.items():
+            if key in props:
+                _walk(root, props[key], child, None, violated)
+    elif isinstance(value, dict) and isinstance(node.get("additionalProperties"), dict):
+        for child in value.values():
+            _walk(root, node["additionalProperties"], child, None, violated)
+    elif isinstance(value, list):
+        for child in value:
+            _walk(root, node.get("items", {}), child, None, violated)
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index 77327b0a..0a7daac5 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -17,7 +17,6 @@
 
 from pydantic import BaseModel
 from wire.models import (
-    BrokerTransactionResponse,
     DiscoveryRequest,
     DiscoveryResponse,
     DisputeRequest,
@@ -36,7 +35,6 @@
     ResourceQuery,
     ResourceResponse,
     TransactionRequest,
-    TransactionResponse,
     UsageReport,
     UsageReportResponse,
 )
@@ -57,6 +55,7 @@
     ExchangeNotPermittedError,
     ManifestNotExchangeError,
     ManifestUnusableError,
+    WBAKeyResolver,
     WellKnownRequirementsReader,
     guarded_client,
 )
@@ -68,6 +67,7 @@
     BeforeSign,
     DEFAULT_CALL_TIMEOUT_SEC,
     DEFAULT_MAX_RPC_READ_BYTES,
+    RawBody,
     Validation,
     decode,
     decode_with_raw,
@@ -76,6 +76,13 @@
     validate_request,
 )
 from .._hostref import _redact_userinfo as redact_userinfo
+from .delivery import (
+    BrokerExecuteResult,
+    DeliveryKeyResolver,
+    ExecuteResult,
+    Expected,
+    verify_items,
+)
 from ..hosts import check_audience, host_of, is_bare_domain
 from .errors import CallError, CallErrorKind, malformed, not_sent
 from .route import (
@@ -97,8 +104,9 @@
 CATALOG_SERVICE = "fora.v1.CatalogService"
 
 
-#: A request a verb accepts: the generated wire model, or the equivalent dict.
-RequestMessage = dict[str, Any] | BaseModel
+#: A request a verb accepts: the generated wire model, the equivalent dict, or a
+#: :class:`RawBody` sent exactly as given.
+RequestMessage = dict[str, Any] | BaseModel | RawBody
 
 
 @dataclass
@@ -146,6 +154,21 @@ class ClientConfig:
     #: signer and decoder. The method and URL cannot change, and a header the signer
     #: emits cannot be set: either refuses the call as malformed.
     before_sign: BeforeSign | None = None
+    #: Refuse an answer the contract does not describe: an unknown field at any depth, a
+    #: field-level rule broken, or a cross-field rule broken. The shape is the published
+    #: strict JSON Schema of the response message and the SDK's cross-field rules, so it
+    #: is defined once, by the proto. Off by default, because the models accept fields a
+    #: newer minor version may add. Error envelopes are read the same either way.
+    strict: bool = False
+    #: Resolves the key an Exchange signs delivery URLs with: ``resolve(kid, exchange)``,
+    #: against that Exchange's Web Bot Auth key directory. Defaults to the SSRF-guarded
+    #: :class:`~fora_sdk.resolvers.wba.WBAKeyResolver`, built once with the client.
+    delivery_keys: DeliveryKeyResolver | None = None
+    #: Whether ``execute`` and ``fetch`` verify a delivery URL — its signature against the
+    #: issuing Exchange's key, its binding to this agent, its expiry — before handing it
+    #: back or dialling it. ``Mode.OFF`` is the named opt-out, for a deployment whose URLs
+    #: are signed in a scheme other than the protocol's Ed25519 one.
+    delivery_verification: Mode = Mode.STRICT
     #: The freshness window stamped on a delivery-fetch proof.
     proof_window: Window | None = None
     max_rpc_read_bytes: int = DEFAULT_MAX_RPC_READ_BYTES
@@ -159,26 +182,44 @@ def resolved_verifier(self) -> Verifier:
         return _NULL_VERIFIER
 
 
-def _with_requirements_reader(
-    config: ClientConfig,
-) -> tuple[ClientConfig, httpx.Client | None]:
-    """Fill in the default requirements reader ONCE, and report the transport that
-    came with it.
+@dataclass(frozen=True)
+class _Owned:
+    """The transports a client built for the defaults it filled in, and so must close."""
+
+    requirements: httpx.Client | None = None
+    delivery: httpx.Client | None = None
+
+    def close(self) -> None:
+        for http in (self.requirements, self.delivery):
+            if http is not None:
+                http.close()
+
+
+def _with_defaults(config: ClientConfig) -> tuple[ClientConfig, _Owned]:
+    """Fill in the default requirements reader and delivery-key resolver ONCE, and report
+    the transports that came with them.
 
     Both client facades call this from their constructor, which is the tier Go resolves
-    the same default at. Per CALL it would build an SSRF-guarded httpx client for every
-    registration and close none of them; per CLIENT it is one pooled transport with an
-    owner that can close it.
+    the same defaults at. Per CALL it would build an SSRF-guarded httpx client for every
+    registration and every purchase and close none of them; per CLIENT it is one pooled
+    transport each, with an owner that can close it.
 
     The caller's config is never mutated — a caller may hold it, reuse it across
-    clients, or read it back — so the filled-in reader rides on a copy. The second
-    return is the transport this client OWNS: ``None`` when the caller injected a
-    reader, because then the transport inside it is theirs.
+    clients, or read it back — so the filled-in defaults ride on a copy. The second
+    return is the transports this client OWNS: none for a seam the caller injected,
+    because then the transport inside it is theirs.
     """
-    if config.registration_requirements is not None:
-        return config, None
-    http = guarded_client()
-    return replace(config, registration_requirements=WellKnownRequirementsReader(http=http)), http
+    requirements: httpx.Client | None = None
+    delivery: httpx.Client | None = None
+    if config.registration_requirements is None:
+        requirements = guarded_client()
+        config = replace(
+            config, registration_requirements=WellKnownRequirementsReader(http=requirements)
+        )
+    if config.delivery_keys is None:
+        delivery = guarded_client()
+        config = replace(config, delivery_keys=WBAKeyResolver(http=delivery))
+    return config, _Owned(requirements=requirements, delivery=delivery)
 
 
 class _NullOfferKeyResolver:
@@ -210,6 +251,14 @@ class Plan:
     #: finish step can read the query back: the flat fallback's attribution needs the
     #: URIs the caller asked about.
     sent: dict[str, Any] = field(default_factory=dict)
+    #: Whether the answer is decoded strictly (``ClientConfig.strict``).
+    strict: bool = False
+    #: Whether the body is a caller's :class:`RawBody`. The answer is decoded as usual,
+    #: and nothing that ties it to a request the SDK built — delivery verification — runs.
+    raw: bool = False
+    #: ``(offer_id, exchange)`` of each item a purchase sent, in order: what a result
+    #: item's retrieval URL is verified against.
+    items: tuple[tuple[str, str], ...] = ()
 
 
 # ---------------------------------------------------------------------------
@@ -232,13 +281,16 @@ def plan_discover(cfg: ClientConfig, query: RequestMessage) -> Plan:
     target instead of checking it.
     """
     op = "discover"
+    route = _Route(op, cfg.base_url, EXCHANGE_SERVICE, "DiscoverResources")
+    if isinstance(query, RawBody):
+        return _plan(cfg, route, query)
     sent = _stamp_discovery(op, query, cfg.requester)
     validate_request(op, sent, ResourceQuery, cfg.validation)
-    return _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "DiscoverResources"), sent)
+    return _plan(cfg, route, sent)
 
 
 def finish_discover(cfg: ClientConfig, plan: Plan, status: int, body: str) -> DiscoveryResult:
-    msg, raw = decode_with_raw(plan.op, status, body, ResourceResponse)
+    msg, raw = decode_with_raw(plan.op, status, body, ResourceResponse, strict=plan.strict)
     return DiscoveryResult(
         # The offers are read from the RAW answer, not the parsed one. A model parse is
         # the GATE — it proves the answer well formed and its field names canonical — but
@@ -336,6 +388,8 @@ def plan_resolve(cfg: ClientConfig, request: RequestMessage) -> Plan:
     there is nothing for a server to deduplicate — the request message has no such field.
     """
     op = "resolve"
+    if isinstance(request, RawBody):
+        return _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "Resolve"), request)
     sent = _stamp_discovery(op, request, cfg.requester)
     # Refused locally rather than sent: a Broker resolves the calling agent from the
     # requester and declines a request that names none, so this is a verdict the client
@@ -358,7 +412,7 @@ def finish_resolve(cfg: ClientConfig, plan: Plan, status: int, body: str) -> Dis
     A resolve that finds nothing is a SUCCESSFUL answer carrying a typed reason, not a
     failure.
     """
-    msg, raw = decode_with_raw(plan.op, status, body, DiscoveryResponse)
+    msg, raw = decode_with_raw(plan.op, status, body, DiscoveryResponse, strict=plan.strict)
     groups = raw.get("offer_groups")
     return DiscoveryResult(
         groups=cfg.resolved_verifier().sort_groups(
@@ -378,7 +432,7 @@ def finish_resolve(cfg: ClientConfig, plan: Plan, status: int, body: str) -> Dis
 
 def plan_execute(
     cfg: ClientConfig,
-    offer: VerifiedOffer | Sequence[VerifiedOffer],
+    offer: VerifiedOffer | Sequence[VerifiedOffer] | RawBody,
     idempotency_key: str | None,
 ) -> Plan:
     """Assemble ExecuteTransaction for one VERIFIED offer, or several issued by ONE Exchange.
@@ -393,15 +447,18 @@ def plan_execute(
     set is refused here. Buying across Exchanges in one call is ``BrokerClient.execute``.
     """
     op = "execute"
+    if isinstance(offer, RawBody):
+        return _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "ExecuteTransaction"), offer)
     offers = [offer] if isinstance(offer, VerifiedOffer) else list(offer)
     _require_one_exchange(op, offers)
     sent = _build_transaction(cfg, op, offers, idempotency_key)
     validate_request(op, sent, TransactionRequest, cfg.validation)
-    return _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "ExecuteTransaction"), sent)
+    plan = _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "ExecuteTransaction"), sent)
+    return replace(plan, items=_purchase_items(offers))
 
 
 def plan_broker_execute(
-    cfg: ClientConfig, offers: Sequence[VerifiedOffer], idempotency_key: str | None
+    cfg: ClientConfig, offers: Sequence[VerifiedOffer] | RawBody, idempotency_key: str | None
 ) -> Plan:
     """Assemble the Broker's ExecuteTransaction: one purchase across any number of Exchanges.
 
@@ -416,6 +473,8 @@ def plan_broker_execute(
     with ``request_auth_failure`` SIGNATURE_INVALID.
     """
     op = "broker execute"
+    if isinstance(offers, RawBody):
+        return _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "ExecuteTransaction"), offers)
     if cfg.requester is None:
         raise malformed(op, "no requester configured; a Broker resolves who is buying")
     offers = list(offers)
@@ -430,17 +489,38 @@ def plan_broker_execute(
         _require_requester_is_signer(op, cfg.requester, cfg.signer.signature_agent)
     sent = _build_transaction(cfg, op, offers, idempotency_key)
     validate_request(op, sent, TransactionRequest, cfg.validation)
-    return _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "ExecuteTransaction"), sent)
+    plan = _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "ExecuteTransaction"), sent)
+    return replace(plan, items=_purchase_items(offers))
 
 
-def finish_broker_execute(plan: Plan, status: int, body: str) -> BrokerTransactionResponse:
-    """Read the Broker's combined answer.
+def finish_broker_execute(
+    cfg: ClientConfig, plan: Plan, status: int, body: str
+) -> BrokerExecuteResult:
+    """Read the Broker's combined answer and verify every retrieval URL in it.
 
     An Exchange that refused the Broker's whole sub-request is NOT a failure here: the call
     succeeds, and each affected item carries the refusal in ``refusal`` while the other
     Exchanges' items come back unchanged. Only the Broker's own refusals raise.
+
+    The one signed value in a result item is its retrieval URL, signed by the Exchange
+    that issued the item's offer — the Broker cannot forge or alter one, and this is
+    where that is checked. Each URL is verified against its own Exchange's key and the
+    agent_identity_hash that Exchange's outcome states.
     """
-    return decode(plan.op, status, body, BrokerTransactionResponse)  # type: ignore[no-any-return]
+    result: BrokerExecuteResult = decode(
+        plan.op, status, body, BrokerExecuteResult, strict=plan.strict
+    )
+    if _verifies_deliveries(cfg, plan):
+        outcomes = {o.exchange.lower(): o.agent_identity_hash or "" for o in result.exchanges or []}
+        items = list(result.items or [])
+        agent = _agent_thumbprint(cfg)
+
+        def expected_of(index: int, item: Any) -> Expected:
+            exchange = _issuing_exchange(plan, index, item, len(items))
+            return Expected(exchange, agent, outcomes.get(exchange.lower(), ""))
+
+        result._deliveries = verify_items(plan.op, items, expected_of, _delivery_keys(cfg))
+    return result
 
 
 def _offer_wire(offer: VerifiedOffer) -> dict[str, Any]:
@@ -593,8 +673,66 @@ def _require_requester_is_signer(op: str, requester: dict[str, Any], signature_a
         )
 
 
-def finish_execute(plan: Plan, status: int, body: str) -> TransactionResponse:
-    return decode(plan.op, status, body, TransactionResponse)  # type: ignore[no-any-return]
+def finish_execute(cfg: ClientConfig, plan: Plan, status: int, body: str) -> ExecuteResult:
+    """Read the Exchange's answer and verify every retrieval URL in it.
+
+    Each URL is verified against the key the Exchange that issued the offers publishes in
+    its Web Bot Auth directory, and must be bound to this agent and to the
+    agent_identity_hash the answer states. One that does not verify refuses the whole
+    answer, as malformed, with the reason on a synthesized ``retrieval_auth_failure``
+    detail and the item named in the message. The purchase itself happened; the
+    transaction id in the message is what a dispute or a support request names.
+    """
+    result: ExecuteResult = decode(plan.op, status, body, ExecuteResult, strict=plan.strict)
+    if _verifies_deliveries(cfg, plan):
+        items = list(result.items or [])
+        agent, stated = _agent_thumbprint(cfg), result.agent_identity_hash or ""
+
+        def expected_of(index: int, item: Any) -> Expected:
+            return Expected(_issuing_exchange(plan, index, item, len(items)), agent, stated)
+
+        result._deliveries = verify_items(plan.op, items, expected_of, _delivery_keys(cfg))
+    return result
+
+
+def _purchase_items(offers: list[VerifiedOffer]) -> tuple[tuple[str, str], ...]:
+    return tuple(
+        (_str_field(_offer_wire(o), "offer_id"), _str_field(_offer_wire(o), "exchange"))
+        for o in offers
+    )
+
+
+def _verifies_deliveries(cfg: ClientConfig, plan: Plan) -> bool:
+    return not plan.raw and cfg.delivery_verification is Mode.STRICT
+
+
+def _issuing_exchange(plan: Plan, index: int, item: Any, count: int) -> str:
+    """The Exchange that issued the offer a result item answers.
+
+    The answer carries one item per request item, in request order, so the index is the
+    match; an answer of another length is matched by offer_id instead. An item neither
+    places is attributed to the one Exchange a direct purchase went to, and to nobody on a
+    relayed one — which then fails verification rather than borrowing another key.
+    """
+    if count == len(plan.items):
+        return plan.items[index][1]
+    offer_id = getattr(item, "offer_id", "") or ""
+    for item_offer, exchange in plan.items:
+        if offer_id and item_offer == offer_id:
+            return exchange
+    exchanges = {exchange for _offer, exchange in plan.items}
+    return exchanges.pop() if len(exchanges) == 1 else ""
+
+
+def _agent_thumbprint(cfg: ClientConfig) -> str:
+    # A purchase that reached here was signed, so the signer is configured.
+    return cfg.signer.thumbprint if cfg.signer is not None else ""
+
+
+def _delivery_keys(cfg: ClientConfig) -> DeliveryKeyResolver:
+    # Both facades fill this in at construction; the fallback serves a caller driving
+    # the plan functions directly, at the cost of a transport per call.
+    return cfg.delivery_keys if cfg.delivery_keys is not None else WBAKeyResolver()
 
 
 # ---------------------------------------------------------------------------
@@ -628,7 +766,7 @@ def plan_report_usage(
 
 
 def finish_report_usage(plan: Plan, status: int, body: str) -> UsageReportResponse:
-    return decode(plan.op, status, body, UsageReportResponse)  # type: ignore[no-any-return]
+    return decode(plan.op, status, body, UsageReportResponse, strict=plan.strict)  # type: ignore[no-any-return]
 
 
 def plan_dispute(cfg: ClientConfig, request: RequestMessage, idempotency_key: str | None) -> Plan:
@@ -648,7 +786,7 @@ def plan_dispute(cfg: ClientConfig, request: RequestMessage, idempotency_key: st
 
 
 def finish_dispute(plan: Plan, status: int, body: str) -> DisputeResponse:
-    return decode(plan.op, status, body, DisputeResponse)  # type: ignore[no-any-return]
+    return decode(plan.op, status, body, DisputeResponse, strict=plan.strict)  # type: ignore[no-any-return]
 
 
 @dataclass(frozen=True)
@@ -668,6 +806,8 @@ def _plan_offer_derived(
 ) -> Plan:
     # Discovery and execute keep the plain transport, because their address is the
     # operator's own configuration. The same split the Go client makes.
+    if isinstance(message, RawBody):
+        return _plan_raw_routed(cfg, verb.op, verb.method, message)
     sent = _stamp_envelope(verb.op, message, idempotency_key)
     return _plan_routed_keyless(cfg, _Routed(verb.op, verb.model, verb.method), sent)
 
@@ -711,6 +851,8 @@ def plan_register(cfg: ClientConfig, request: RequestMessage) -> Plan:
     Exchange decides.
     """
     op = "register"
+    if isinstance(request, RawBody):
+        return _plan_raw_routed(cfg, op, "Register", request)
     sent = _stamp_ver(op, request)
     _require_recipient(op, _str_field(sent, "exchange"))
     data = sent.get("registration_data")
@@ -723,7 +865,7 @@ def plan_register(cfg: ClientConfig, request: RequestMessage) -> Plan:
 
 
 def finish_register(plan: Plan, status: int, body: str) -> RegisterResponse:
-    return decode(plan.op, status, body, RegisterResponse)  # type: ignore[no-any-return]
+    return decode(plan.op, status, body, RegisterResponse, strict=plan.strict)  # type: ignore[no-any-return]
 
 
 def plan_get_account_status(cfg: ClientConfig, request: RequestMessage) -> Plan:
@@ -739,13 +881,15 @@ def plan_get_account_status(cfg: ClientConfig, request: RequestMessage) -> Plan:
     (key id, signature) accepts both.
     """
     op = "get account status"
+    if isinstance(request, RawBody):
+        return _plan_raw_routed(cfg, op, "GetAccountStatus", request)
     sent = _stamp_ver(op, request)
     _require_recipient(op, _str_field(sent, "exchange"))
     return _plan_routed_keyless(cfg, _Routed(op, GetAccountStatusRequest, "GetAccountStatus"), sent)
 
 
 def finish_get_account_status(plan: Plan, status: int, body: str) -> GetAccountStatusResponse:
-    return decode(plan.op, status, body, GetAccountStatusResponse)  # type: ignore[no-any-return]
+    return decode(plan.op, status, body, GetAccountStatusResponse, strict=plan.strict)  # type: ignore[no-any-return]
 
 
 def _apply_registration_requirements(cfg: ClientConfig, op: str, sent: dict[str, Any]) -> None:
@@ -870,7 +1014,7 @@ def plan_push_resources(cfg: ClientConfig, request: RequestMessage) -> Plan:
 
 
 def finish_push_resources(plan: Plan, status: int, body: str) -> PushResourcesResponse:
-    return decode(plan.op, status, body, PushResourcesResponse)
+    return decode(plan.op, status, body, PushResourcesResponse, strict=plan.strict)
 
 
 def plan_remove_resources(cfg: ClientConfig, request: RequestMessage) -> Plan:
@@ -879,7 +1023,7 @@ def plan_remove_resources(cfg: ClientConfig, request: RequestMessage) -> Plan:
 
 
 def finish_remove_resources(plan: Plan, status: int, body: str) -> RemoveResourcesResponse:
-    return decode(plan.op, status, body, RemoveResourcesResponse)
+    return decode(plan.op, status, body, RemoveResourcesResponse, strict=plan.strict)
 
 
 def plan_refresh_catalog(cfg: ClientConfig, request: RequestMessage) -> Plan:
@@ -888,7 +1032,7 @@ def plan_refresh_catalog(cfg: ClientConfig, request: RequestMessage) -> Plan:
 
 
 def finish_refresh_catalog(plan: Plan, status: int, body: str) -> RefreshCatalogResponse:
-    return decode(plan.op, status, body, RefreshCatalogResponse)
+    return decode(plan.op, status, body, RefreshCatalogResponse, strict=plan.strict)
 
 
 def _plan_catalog(cfg: ClientConfig, verb: _CatalogVerb, message: RequestMessage) -> Plan:
@@ -906,13 +1050,16 @@ def _plan_catalog(cfg: ClientConfig, verb: _CatalogVerb, message: RequestMessage
     the plain transport — the posture of the home Exchange, not of the offer-derived leg.
     """
     op = verb.op
+    route = _Route(op, cfg.base_url, CATALOG_SERVICE, verb.method)
+    if isinstance(message, RawBody):
+        return _plan(cfg, route, message)
     sent = _stamp_ver(op, message)
     _require_recipient(op, _str_field(sent, "exchange"))
     validate_request(op, sent, verb.model, cfg.validation)
-    return _plan(cfg, _Route(op, cfg.base_url, CATALOG_SERVICE, verb.method), sent)
+    return _plan(cfg, route, sent)
 
 
-def _stamp_ver(op: str, message: RequestMessage) -> dict[str, Any]:
+def _stamp_ver(op: str, message: dict[str, Any] | BaseModel) -> dict[str, Any]:
     sent = _clone(op, message)
     if _str_field(sent, "ver") == "":
         sent["ver"] = ProtocolVersion
@@ -953,7 +1100,7 @@ def _require_recipient(op: str, exchange: str) -> None:
 
 
 def _stamp_discovery(
-    op: str, message: RequestMessage, requester: dict[str, Any] | None
+    op: str, message: dict[str, Any] | BaseModel, requester: dict[str, Any] | None
 ) -> dict[str, Any]:
     """Fill the envelope a DISCOVERY call carries, which is the mutating envelope minus
     the idempotency key: pure discovery buys nothing and changes nothing, so there is no
@@ -973,7 +1120,7 @@ def _stamp_discovery(
 
 
 def _stamp_envelope(
-    op: str, message: RequestMessage, idempotency_key: str | None
+    op: str, message: dict[str, Any] | BaseModel, idempotency_key: str | None
 ) -> dict[str, Any]:
     """Fill the two envelope fields the protocol requires on a state-mutating call,
     WITHOUT overwriting what the caller already set.
@@ -1017,7 +1164,7 @@ def _rate_limit(parsed: Any, wire: Any) -> dict[str, Any] | None:
     return standing
 
 
-def _clone(op: str, message: RequestMessage) -> dict[str, Any]:
+def _clone(op: str, message: dict[str, Any] | BaseModel) -> dict[str, Any]:
     """Copy a caller's message so the SDK can stamp its envelope without touching what the
     caller still holds. A deep copy, because the envelope fields are top-level but a
     caller re-using a nested object across calls must not see it change either.
@@ -1043,7 +1190,13 @@ class _Route:
     method: str
 
 
-def _plan(cfg: ClientConfig, route: _Route, sent: dict[str, Any], *, guarded: bool = False) -> Plan:
+def _plan(
+    cfg: ClientConfig,
+    route: _Route,
+    sent: dict[str, Any] | RawBody,
+    *,
+    guarded: bool = False,
+) -> Plan:
     op = route.op
     url = rpc_url(route.base_url, route.service, route.method)
     body, headers = prepare(op, url, sent, cfg)
@@ -1055,8 +1208,23 @@ def _plan(cfg: ClientConfig, route: _Route, sent: dict[str, Any], *, guarded: bo
         timeout=cfg.call_timeout_sec,
         max_bytes=cfg.max_rpc_read_bytes,
         guarded=guarded,
-        sent=sent,
+        sent=sent.parsed() if isinstance(sent, RawBody) else sent,
+        strict=cfg.strict,
+        raw=isinstance(sent, RawBody),
+    )
+
+
+def _plan_raw_routed(cfg: ClientConfig, op: str, method: str, raw: RawBody) -> Plan:
+    """A raw call to a manifest-routed verb: the destination is the body's ``exchange``.
+
+    The address a signed call goes to is vetted whatever the message says, so the
+    resolution and its address checks run as for any routed call; a body that names no
+    usable Exchange has nothing to dial and is refused as not sent.
+    """
+    endpoint = vet_exchange_endpoint(
+        cfg.endpoint_resolver, _str_field(raw.parsed(), "exchange"), op
     )
+    return _plan(cfg, _Route(op, endpoint, EXCHANGE_SERVICE, method), raw, guarded=True)
 
 
 def _str_field(record: dict[str, Any] | None, key: str) -> str:
diff --git a/sdk/python/fora_sdk/client/content.py b/sdk/python/fora_sdk/client/content.py
index 86c9a51f..fb2a619a 100644
--- a/sdk/python/fora_sdk/client/content.py
+++ b/sdk/python/fora_sdk/client/content.py
@@ -30,6 +30,8 @@
     from fora_sdk.signing_transport import SigningTransport
     from fora_sdk.window import Window
 
+    from .delivery import Delivery
+
 #: Bounds one content fetch, in seconds. An agent is blocked on the call that triggered
 #: it, so a fetch that has not answered by now is more useful as a reported failure than
 #: as a hang.
@@ -107,6 +109,10 @@ class Content:
     mime_type: str
     #: The fetched bytes.
     body: bytes
+    #: The binding this client verified before fetching: the URL's signature against the
+    #: issuing Exchange's key, its agent binding and its expiry. ``None`` when the URL
+    #: was fetched as given — no Exchange was named, or verification is off.
+    binding: Delivery | None = None
 
 
 def proof_headers(
diff --git a/sdk/python/fora_sdk/client/delivery.py b/sdk/python/fora_sdk/client/delivery.py
new file mode 100644
index 00000000..a87a4afb
--- /dev/null
+++ b/sdk/python/fora_sdk/client/delivery.py
@@ -0,0 +1,229 @@
+"""Delivery verification: check a signed retrieval URL before anything relies on it.
+
+A purchase answers with one signed retrieval URL per item. The Exchange signs it with
+Ed25519 over ``"GET\\n<canonical URL>"``; the URL names the signing key in ``kid``, may bind
+itself to the buying agent with ``agent_id`` (the RFC 7638 thumbprint of the agent's
+request-signing key), and expires at ``exp``. The delivery edge checks all three. This
+module checks them first, on the agent's side, so a URL that could never be fetched — a
+forged one relayed by a Broker, one bound to somebody else, one already expired — is
+refused when it arrives rather than surfacing as an edge 403 later.
+
+The signing key comes from the issuing Exchange's Web Bot Auth key directory, resolved by
+``kid`` (the key's thumbprint) through an injected resolver, which by default is the
+SDK's own SSRF-guarded :class:`~fora_sdk.resolvers.wba.WBAKeyResolver`. The signature and
+expiry check is the shared :func:`~fora_sdk.signedurl.verify_ed25519_signed_url`, so the
+byte contract is the one the three SDKs and the edge already agree on.
+
+A refusal is a ``MALFORMED`` :class:`~fora_sdk.client.errors.CallError` carrying a
+``retrieval_auth_failure`` detail the SDK synthesizes, in the vocabulary the edge itself
+answers with, so a caller branches on one set of reasons whichever side checked. A key
+directory that cannot be reached is ``UNREACHABLE`` instead: nothing was decided about
+the URL.
+"""
+
+from __future__ import annotations
+
+import time
+from dataclasses import dataclass
+from datetime import UTC, datetime
+from typing import TYPE_CHECKING, Any, Protocol
+
+from pydantic import PrivateAttr
+from wire.models import (
+    BrokerTransactionResponse,
+    RetrievalAuthFailureReason,
+    TransactionResponse,
+)
+
+from fora_sdk.errordetail import retrieval_auth_failure_detail
+from fora_sdk.resolvers.errors import DirectoryUnavailableError, ResolverError
+from fora_sdk.signedurl import _parse_query_pairs, verify_ed25519_signed_url
+
+from .errors import CallError, CallErrorKind
+
+if TYPE_CHECKING:
+    from collections.abc import Callable
+
+#: The ErrorDetail domain of a refusal this client computed: the client's own tier,
+#: because no peer reached a verdict. The same value the registration pre-check uses.
+CLIENT_ERROR_DOMAIN = "fora.v1.Client"
+
+_REASONS = {
+    "missing_sig": RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING,
+    "missing_exp": RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING,
+    "expired": RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED,
+    "bad_sig_encoding": (
+        RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH
+    ),
+    "signature_mismatch": (
+        RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH
+    ),
+}
+_THUMBPRINT_MISMATCH = RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH
+
+
+@dataclass(frozen=True)
+class Delivery:
+    """A signed retrieval URL whose signature, agent binding and expiry this client verified.
+
+    ``execute`` hands one back per result item that carries a URL, and ``fetch`` accepts
+    one in place of the bare URL and verifies it again before sending.
+    """
+
+    #: The signed retrieval URL, exactly as the Exchange issued it.
+    url: str
+    #: The bare domain of the Exchange whose key verified the signature.
+    exchange: str
+    #: The agent thumbprint the URL is bound to; ``""`` for a bearer URL.
+    agent_id: str
+    #: The ``kid`` the URL names: the thumbprint of the Exchange's URL-signing key.
+    key_id: str
+    #: When the URL stops being honoured (its ``exp``), in UTC.
+    expires_at: datetime
+
+
+class DeliveryKeyResolver(Protocol):
+    """Resolves the key an Exchange signs delivery URLs with.
+
+    ``keyid`` is the URL's ``kid`` (a key thumbprint) and ``directory`` the Exchange's bare
+    domain, whose Web Bot Auth directory publishes the key. Returns the raw 32-byte
+    Ed25519 public key. :class:`~fora_sdk.resolvers.wba.WBAKeyResolver` satisfies it.
+    """
+
+    def resolve(self, keyid: str, directory: str) -> bytes: ...
+
+
+@dataclass(frozen=True)
+class Expected:
+    """What one URL is checked against: whose key signed it, and whom it must be bound to."""
+
+    #: The bare domain of the Exchange whose directory publishes the URL-signing key.
+    exchange: str
+    #: This agent's thumbprint.
+    agent: str
+    #: The agent_identity_hash the answer stated; ``""`` when it stated none.
+    stated: str = ""
+
+
+def verify_delivery(
+    op: str, url: str, expected: Expected, keys: DeliveryKeyResolver, where: str = ""
+) -> Delivery:
+    """Verify one retrieval URL against ``expected.exchange``'s key; return the binding.
+
+    The binding rule: a URL carrying ``agent_id`` must carry this agent's thumbprint, and
+    when the answer stated an ``agent_identity_hash`` the URL must carry that value. A
+    URL with no ``agent_id`` under an answer that stated none is a bearer URL the
+    protocol allows, and verifies with ``agent_id`` empty. ``where`` prefixes the message
+    of a refusal ("item 2 (tx-9)"), so a batch failure names its item.
+    """
+    prefix = f"{where}: " if where else ""
+    exchange = expected.exchange
+
+    def resolve(kid: str | None) -> bytes | None:
+        if not kid:
+            return None
+        try:
+            return keys.resolve(kid, exchange)
+        except DirectoryUnavailableError as exc:
+            raise CallError(
+                CallErrorKind.UNREACHABLE,
+                op,
+                cause=f"{prefix}the key directory of {exchange} could not be read: {exc}",
+            ) from exc
+        except ResolverError:
+            return None
+
+    verdict = verify_ed25519_signed_url(url, now=int(time.time()), resolve_key=resolve)
+    if not verdict.valid:
+        reason = _REASONS.get(verdict.reason or "", _REASONS["signature_mismatch"])
+        raise _refusal(op, reason, f"{prefix}the delivery URL does not verify ({verdict.reason})")
+    agent_id = verdict.agent_id or ""
+    if agent_id and agent_id != expected.agent:
+        raise _refusal(
+            op, _THUMBPRINT_MISMATCH, f"{prefix}the delivery URL is bound to another agent"
+        )
+    if expected.stated and agent_id != expected.stated:
+        raise _refusal(
+            op,
+            _THUMBPRINT_MISMATCH,
+            f"{prefix}the delivery URL is not bound to the agent_identity_hash the answer states",
+        )
+    return Delivery(
+        url=url,
+        exchange=exchange,
+        agent_id=agent_id,
+        key_id=verdict.kid or "",
+        expires_at=datetime.fromtimestamp(_exp_of(url), tz=UTC),
+    )
+
+
+def _exp_of(url: str) -> int:
+    """The URL's ``exp``, which the verify above already proved present and numeric."""
+    _prefix, _sep, query = url.partition("?")
+    return int(dict(_parse_query_pairs(query))["exp"])
+
+
+def _refusal(op: str, reason: RetrievalAuthFailureReason, message: str) -> CallError:
+    return CallError(
+        CallErrorKind.MALFORMED,
+        op,
+        cause=message,
+        detail=retrieval_auth_failure_detail(CLIENT_ERROR_DOMAIN, message, reason),
+    )
+
+
+def verify_items(
+    op: str,
+    items: list[Any],
+    expected_of: Callable[[int, Any], Expected],
+    keys: DeliveryKeyResolver,
+) -> tuple[Delivery | None, ...]:
+    """Verify every result item that carries a retrieval URL, in order.
+
+    ``expected_of(index, item)`` states what the item's URL is checked against: the
+    Exchange that issued the item's offer and the binding that Exchange's answer stated.
+    An item with no URL — denied, refused upstream, or not delivered by signed URL — has
+    none.
+    """
+    out: list[Delivery | None] = []
+    for i, item in enumerate(items):
+        url = getattr(item, "retrieval_endpoint", None)
+        if not url:
+            out.append(None)
+            continue
+        tx = getattr(item, "transaction_id", "") or ""
+        where = f"item {i} ({tx})" if tx else f"item {i}"
+        out.append(verify_delivery(op, url, expected_of(i, item), keys, where))
+    return tuple(out)
+
+
+class ExecuteResult(TransactionResponse):
+    """The answer to ``Client.execute``: the TransactionResponse, plus the verified URLs.
+
+    It IS the generated ``TransactionResponse`` — every field, every method, the same
+    ``model_dump`` — with one addition that is not part of the message:
+    :attr:`deliveries`, one entry per result item, the :class:`Delivery` this client
+    verified for it, or ``None`` where the item carries no retrieval URL.
+    """
+
+    _deliveries: tuple[Delivery | None, ...] = PrivateAttr(default=())
+
+    @property
+    def deliveries(self) -> tuple[Delivery | None, ...]:
+        """The verified binding of each item's retrieval URL, index-aligned with ``items``.
+
+        Empty when verification is off or the call was raw: then nothing was verified.
+        """
+        return self._deliveries
+
+
+class BrokerExecuteResult(BrokerTransactionResponse):
+    """The answer to ``BrokerClient.execute``, plus the verified URLs. See
+    :class:`ExecuteResult`."""
+
+    _deliveries: tuple[Delivery | None, ...] = PrivateAttr(default=())
+
+    @property
+    def deliveries(self) -> tuple[Delivery | None, ...]:
+        """The verified binding of each item's retrieval URL, index-aligned with ``items``."""
+        return self._deliveries
diff --git a/sdk/python/fora_sdk/signing_transport.py b/sdk/python/fora_sdk/signing_transport.py
index af82b3b2..72d3a6c7 100644
--- a/sdk/python/fora_sdk/signing_transport.py
+++ b/sdk/python/fora_sdk/signing_transport.py
@@ -17,11 +17,13 @@
 from dataclasses import dataclass
 from typing import TYPE_CHECKING
 
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+
 from fora_sdk.b64 import b64url_nopad
-from fora_sdk.core import sign_offer_acceptance_jcs
-from fora_sdk.core import sign_request_acceptance_jcs
+from fora_sdk.core import sign_offer_acceptance_jcs, sign_request_acceptance_jcs
 from fora_sdk.httpsig import sign_request
 from fora_sdk.pop import sign_agent_binding
+from fora_sdk.thumbprint import thumbprint
 from fora_sdk.window import Window, clock_window
 
 if TYPE_CHECKING:
@@ -110,6 +112,15 @@ def signature_agent(self) -> str:
         directory its signature resolved from."""
         return self._signature_agent
 
+    @property
+    def thumbprint(self) -> str:
+        """The RFC 7638 thumbprint of the key this transport signs with: the agent identity
+        a delivery URL is bound to (``agent_id``) and an Exchange states as
+        ``agent_identity_hash``. Derived from the key itself, never from ``keyid``, which
+        is whatever label the caller chose."""
+        public = Ed25519PrivateKey.from_private_bytes(self._signer_seed).public_key()
+        return thumbprint(public.public_bytes_raw())
+
     def sign_offer_acceptance(
         self,
         *,
diff --git a/sdk/python/fora_sdk/sync/__init__.py b/sdk/python/fora_sdk/sync/__init__.py
index cff47e03..1d16ca14 100644
--- a/sdk/python/fora_sdk/sync/__init__.py
+++ b/sdk/python/fora_sdk/sync/__init__.py
@@ -13,11 +13,12 @@
 
 from __future__ import annotations
 
+from dataclasses import replace
 from typing import TYPE_CHECKING
 
 import httpx
 
-from fora_sdk.client import _fetch_inputs, _verbs
+from fora_sdk.client import _admin, _fetch_inputs, _fetch_target, _verbs
 from fora_sdk.client._call import as_call_error
 from fora_sdk.client._read import (
     IDENTITY_ENCODING,
@@ -26,7 +27,7 @@
     require_dialable_scheme,
     rpc_headers,
 )
-from fora_sdk.client._verbs import ClientConfig, _with_requirements_reader
+from fora_sdk.client._verbs import ClientConfig, _with_defaults
 from fora_sdk.client.content import (
     MAX_ERROR_BODY_BYTES,
     Content,
@@ -42,21 +43,25 @@
     from collections.abc import Sequence
 
     from wire.models import (
-        BrokerTransactionResponse,
         DisputeResponse,
+        DomainVerificationChallenge,
+        DomainVerificationResult,
         GetAccountStatusResponse,
         PushResourcesResponse,
         RefreshCatalogResponse,
         RegisterResponse,
         RemoveResourcesResponse,
-        TransactionResponse,
+        SetReportingPolicyResponse,
+        SetTenantFeeRateResponse,
         UsageReportResponse,
     )
 
+    from fora_sdk.client._call import RawBody
     from fora_sdk.client._verbs import RequestMessage
+    from fora_sdk.client.delivery import BrokerExecuteResult, Delivery, ExecuteResult
     from fora_sdk.core import DiscoveryResult, VerifiedOffer
 
-__all__ = ["BrokerClient", "CatalogClient", "Client", "ClientConfig"]
+__all__ = ["AdminClient", "BrokerClient", "CatalogClient", "Client", "ClientConfig"]
 
 
 class _Face:
@@ -83,15 +88,18 @@ def __init__(
         self._guarded = guarded if guarded is not None else (
             self._http if not self._owns else guarded_client(follow_redirects=False)
         )
-        self._config, self._requirements_http = _with_requirements_reader(config)
+        self._config, self._owned = _with_defaults(config)
+        #: The requirements reader's transport when this client built it; kept by name
+        #: because a test proves it is closed with the client.
+        self._requirements_http = self._owned.requirements
 
     def close(self) -> None:
         """Close the transports this client built. An injected one is left alone."""
         # Independent of the RPC legs above: this client is built here whenever the
         # caller injected no reader, whether or not it injected an RPC transport, so it
-        # is closed on its own terms rather than behind that ownership question.
-        if self._requirements_http is not None:
-            self._requirements_http.close()
+        # is closed on its own terms rather than behind that ownership question. The
+        # delivery-key resolver's transport is the same case.
+        self._owned.close()
         if not self._owns:
             return
         self._http.close()
@@ -163,13 +171,13 @@ def discover(self, query: RequestMessage) -> DiscoveryResult:
 
     def execute(
         self,
-        offer: VerifiedOffer | Sequence[VerifiedOffer],
+        offer: VerifiedOffer | Sequence[VerifiedOffer] | RawBody,
         *,
         idempotency_key: str | None = None,
-    ) -> TransactionResponse:
+    ) -> ExecuteResult:
         plan = _verbs.plan_execute(self._config, offer, idempotency_key)
         status, body = self._send(plan)
-        return _verbs.finish_execute(plan, status, body)
+        return _verbs.finish_execute(self._config, plan, status, body)
 
     def report_usage(
         self, report: RequestMessage, *, idempotency_key: str | None = None
@@ -195,18 +203,19 @@ def get_account_status(self, request: RequestMessage) -> GetAccountStatusRespons
         status, body = self._send(plan)
         return _verbs.finish_get_account_status(plan, status, body)
 
-    def fetch(self, signed_url: str) -> Content:
-        headers, timeout, max_bytes = _fetch_inputs(self._config, signed_url)
+    def fetch(self, signed_url: str | Delivery, *, exchange: str | None = None) -> Content:
+        url, binding = _fetch_target(self._config, signed_url, exchange)
+        headers, timeout, max_bytes = _fetch_inputs(self._config, url)
         op = "fetch content"
         self._refuse_if_closed(op)
         # A delivery URL always names a host another party chose.
-        require_dialable_scheme(op, signed_url)
+        require_dialable_scheme(op, url)
         try:
             # Redirects are REFUSED, and the body is STREAMED under the cap, for the
             # reasons the async face records.
             with self._guarded.stream(
                 "GET",
-                signed_url,
+                url,
                 headers={**headers, **IDENTITY_ENCODING},
                 timeout=timeout,
                 follow_redirects=False,
@@ -234,7 +243,7 @@ def fetch(self, signed_url: str) -> Content:
                 read = bounded_chunks(op, max_bytes, response.status_code)
                 for chunk in response.iter_bytes():
                     read.add(chunk)
-                return read_content(signed_url, response, read.body())
+                return replace(read_content(url, response, read.body()), binding=binding)
         except httpx.HTTPError as exc:
             raise transport_failure(exc) from exc
         except _ssrf.SsrfError as exc:
@@ -255,11 +264,11 @@ def resolve(self, request: RequestMessage) -> DiscoveryResult:
         return _verbs.finish_resolve(self._config, plan, status, body)
 
     def execute(
-        self, offers: Sequence[VerifiedOffer], *, idempotency_key: str | None = None
-    ) -> BrokerTransactionResponse:
+        self, offers: Sequence[VerifiedOffer] | RawBody, *, idempotency_key: str | None = None
+    ) -> BrokerExecuteResult:
         plan = _verbs.plan_broker_execute(self._config, offers, idempotency_key)
         status, body = self._send(plan)
-        return _verbs.finish_broker_execute(plan, status, body)
+        return _verbs.finish_broker_execute(self._config, plan, status, body)
 
 
 class CatalogClient(_Face):
@@ -282,3 +291,30 @@ def refresh_catalog(self, request: RequestMessage) -> RefreshCatalogResponse:
         plan = _verbs.plan_refresh_catalog(self._config, request)
         status, body = self._send(plan)
         return _verbs.finish_refresh_catalog(plan, status, body)
+
+
+class AdminClient(_Face):
+    """The blocking operator client. See :class:`fora_sdk.client.AdminClient`."""
+
+    def __init__(self, config: ClientConfig, *, http: httpx.Client | None = None) -> None:
+        super().__init__(config, http)
+
+    def set_tenant_fee_rate(self, request: RequestMessage) -> SetTenantFeeRateResponse:
+        plan = _admin.plan_set_tenant_fee_rate(self._config, request)
+        status, body = self._send(plan)
+        return _admin.finish_set_tenant_fee_rate(plan, status, body)
+
+    def set_reporting_policy(self, request: RequestMessage) -> SetReportingPolicyResponse:
+        plan = _admin.plan_set_reporting_policy(self._config, request)
+        status, body = self._send(plan)
+        return _admin.finish_set_reporting_policy(plan, status, body)
+
+    def request_domain_verification(self, request: RequestMessage) -> DomainVerificationChallenge:
+        plan = _admin.plan_request_domain_verification(self._config, request)
+        status, body = self._send(plan)
+        return _admin.finish_request_domain_verification(plan, status, body)
+
+    def confirm_domain_verification(self, request: RequestMessage) -> DomainVerificationResult:
+        plan = _admin.plan_confirm_domain_verification(self._config, request)
+        status, body = self._send(plan)
+        return _admin.finish_confirm_domain_verification(plan, status, body)
diff --git a/sdk/python/tests/exchange_harness.py b/sdk/python/tests/exchange_harness.py
index 5f9416ca..39f4d1e1 100644
--- a/sdk/python/tests/exchange_harness.py
+++ b/sdk/python/tests/exchange_harness.py
@@ -172,6 +172,9 @@ def directory(self) -> str:
             [
                 wba_jwk(key.x, now - 2 * _SLACK, now - _SLACK),
                 wba_jwk(_b64(self.offer_pub), now - _SLACK, now + _SLACK),
+                # The delivery-URL key. A URL names it by thumbprint in kid, and a
+                # client verifying a delivery resolves it from this same directory.
+                wba_jwk(_b64(self.delivery_pub), now - _SLACK, now + _SLACK),
             ]
         )
 
@@ -190,12 +193,13 @@ def execute(self, _body: dict[str, Any]) -> dict[str, Any]:
         signed = sign_ed25519_signed_url(
             self.url + CONTENT_PATH,
             seed=self.delivery_seed,
-            kid="ex.v1",
+            kid=thumbprint(self.delivery_pub),
             agent_id=self.agent_thumbprint,
             exp=int(time.time() + _SLACK.total_seconds()),
         )
         return {
             "ver": "1.0",
+            "agent_identity_hash": self.agent_thumbprint,
             "items": [
                 {
                     "offer_id": "offer-1",
diff --git a/sdk/python/tests/test_admin_client.py b/sdk/python/tests/test_admin_client.py
new file mode 100644
index 00000000..703e320c
--- /dev/null
+++ b/sdk/python/tests/test_admin_client.py
@@ -0,0 +1,183 @@
+"""The operator client: ``AdminClient`` (Python side) — mirror of sdk/go/connect/admin_test.go.
+
+It must cover every RPC of ``fora.admin.v1.AdminService`` and the two domain-verification
+RPCs of ``fora.v1.ExchangeService``. The admin RPCs are enumerated from the proto file
+rather than listed here, so an RPC added to the service fails this suite until the client
+carries it.
+
+Each call runs on both faces against an in-process peer that verifies the request
+signature with the SDK's own server-side verifier and answers the generated response.
+"""
+
+from __future__ import annotations
+
+import json
+import re
+from pathlib import Path
+from typing import Any
+
+import httpx
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from signed_peer import SignedPeer
+from test_client import AGENT_SEED, FACES, Face, _config
+from wire.models import SetTenantFeeRateRequest, TenantFeeRate
+
+import fora_sdk.sync as sync_client
+from fora_sdk.client import AdminClient, CallError, CallErrorKind, ClientConfig
+from fora_sdk.keyresolver import StaticKeyResolver
+
+_IDS = [f.name for f in FACES]
+_KEYID = "agent.v1"
+_AGENT_PUBLIC = Ed25519PrivateKey.from_private_bytes(AGENT_SEED).public_key().public_bytes_raw()
+_ADMIN_PROTO = (
+    Path(__file__).resolve().parents[3] / "proto" / "fora" / "admin" / "v1" / "admin.proto"
+)
+
+_FEE = {"tenant_id": "tenant-1", "fee_rate_bps": 250, "notes": "launch rate"}
+_POLICY = {
+    "tenant_id": "tenant-1",
+    "required_fields": ["consumed_quantity"],
+    "window_seconds": 3600,
+}
+
+#: One call per RPC: the client method, the request, the answer, and the path it must reach.
+_CALLS: dict[str, tuple[str, dict[str, Any], dict[str, Any], str]] = {
+    "SetTenantFeeRate": (
+        "set_tenant_fee_rate",
+        {"rate": _FEE},
+        {"ver": "1.0", "rate": _FEE},
+        "/fora.admin.v1.AdminService/SetTenantFeeRate",
+    ),
+    "SetReportingPolicy": (
+        "set_reporting_policy",
+        {"policy": _POLICY},
+        {"ver": "1.0", "policy": _POLICY},
+        "/fora.admin.v1.AdminService/SetReportingPolicy",
+    ),
+    "RequestDomainVerification": (
+        "request_domain_verification",
+        {"exchange": "exchange.test", "domain": "publisher.example"},
+        {
+            "ver": "1.0",
+            "token": "tok-1",
+            "verification_url": "https://publisher.example/.well-known/fora-verify/tok-1",
+        },
+        "/fora.v1.ExchangeService/RequestDomainVerification",
+    ),
+    "ConfirmDomainVerification": (
+        "confirm_domain_verification",
+        {"exchange": "exchange.test", "domain": "publisher.example", "token": "tok-1"},
+        {"ver": "1.0", "key_id": "k-1"},
+        "/fora.v1.ExchangeService/ConfirmDomainVerification",
+    ),
+}
+
+
+def _admin_rpcs() -> list[str]:
+    """Every rpc of AdminService, read from the proto file."""
+    text = _ADMIN_PROTO.read_text(encoding="utf-8")
+    service = text[text.index("service AdminService") :]
+    service = service[: service.index("\n}")]
+    return re.findall(r"^\s*rpc (\w+)\(", service, flags=re.MULTILINE)
+
+
+def _client(face: Face, config: ClientConfig, peer: SignedPeer) -> Any:
+    if face.name == "async":
+        return AdminClient(config, http=peer.async_())
+    return sync_client.AdminClient(config, http=peer.sync())
+
+
+def _peer(answer: dict[str, Any]) -> SignedPeer:
+    return SignedPeer(
+        keys=lambda _sa: StaticKeyResolver({_KEYID: _AGENT_PUBLIC}),
+        answer=lambda _r: httpx.Response(200, content=json.dumps(answer).encode()),
+    )
+
+
+def test_every_admin_rpc_has_a_call_here() -> None:
+    rpcs = _admin_rpcs()
+    assert rpcs, "no rpc read from admin.proto; the enumeration is broken"
+    assert set(rpcs) <= set(_CALLS), (
+        f"AdminService RPCs with no client call: {set(rpcs) - set(_CALLS)}"
+    )
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("rpc", sorted(_CALLS))
+def test_each_rpc_reaches_its_path_stamped_signed_and_decoded(face: Face, rpc: str) -> None:
+    method, request, answer, path = _CALLS[rpc]
+    peer = _peer(answer)
+    client = _client(face, _config(base_url="https://admin.test"), peer)
+
+    result = face.run(getattr(client, method)(request))
+
+    got = peer.only()
+    assert got.request.url.path == path
+    assert got.verdict.valid, "the request signature did not verify"
+    sent = json.loads(got.request.content)
+    assert sent == {"ver": "1.0", **request}
+    assert result.model_dump(mode="json", exclude_unset=True) == answer
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_generated_model_is_accepted(face: Face) -> None:
+    peer = _peer({"ver": "1.0", "rate": _FEE})
+    client = _client(face, _config(base_url="https://admin.test"), peer)
+    model = SetTenantFeeRateRequest(rate=TenantFeeRate(**_FEE))
+
+    face.run(client.set_tenant_fee_rate(model))
+
+    assert json.loads(peer.only().request.content) == {"ver": "1.0", "rate": _FEE}
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("method", ["request_domain_verification", "confirm_domain_verification"])
+@pytest.mark.parametrize("exchange", [None, "https://exchange.test"])
+def test_a_domain_request_with_no_bare_recipient_is_not_sent(
+    face: Face, method: str, exchange: str | None
+) -> None:
+    peer = _peer({})
+    client = _client(face, _config(base_url="https://admin.test"), peer)
+    request: dict[str, Any] = {"domain": "publisher.example", "token": "tok-1"}
+    if exchange is not None:
+        request["exchange"] = exchange
+
+    with pytest.raises(CallError) as caught:
+        face.run(getattr(client, method)(request))
+
+    assert caught.value.kind is CallErrorKind.NOT_SENT
+    assert peer.seen == []
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_request_the_service_could_only_refuse_is_not_sent(face: Face) -> None:
+    peer = _peer({})
+    client = _client(face, _config(base_url="https://admin.test"), peer)
+
+    with pytest.raises(CallError) as caught:
+        face.run(client.set_reporting_policy({"policy": {"required_fields": ["a", "a"]}}))
+
+    assert caught.value.kind is CallErrorKind.MALFORMED
+    assert peer.seen == []
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_unsigned_admin_call_goes_out_unsigned(face: Face) -> None:
+    seen: list[httpx.Request] = []
+
+    def respond(request: httpx.Request) -> httpx.Response:
+        seen.append(request)
+        return httpx.Response(200, json={"ver": "1.0", "rate": _FEE})
+
+    transport = httpx.MockTransport(respond)
+    config = _config(base_url="https://admin.test", signer=None)
+    client = (
+        AdminClient(config, http=httpx.AsyncClient(transport=transport))
+        if face.name == "async"
+        else sync_client.AdminClient(config, http=httpx.Client(transport=transport))
+    )
+
+    face.run(client.set_tenant_fee_rate({"rate": _FEE}))
+
+    assert "signature" not in seen[0].headers
diff --git a/sdk/python/tests/test_client.py b/sdk/python/tests/test_client.py
index abd8528a..509dd742 100644
--- a/sdk/python/tests/test_client.py
+++ b/sdk/python/tests/test_client.py
@@ -338,7 +338,8 @@ def test_a_connect_error_envelope_becomes_the_typed_failure(face: Face) -> None:
             "details": [
                 {
                     "type": "fora.v1.ErrorDetail",
-                    "value": "aWdub3JlZA",
+                    # The binary ErrorDetail the debug projection below describes.
+                    "value": "Cg9iYWxhbmNlIHRvbyBsb3cSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlUgIIAg",
                     "debug": {
                         "domain": "fora.v1.ExchangeService",
                         "message": "balance too low",
diff --git a/sdk/python/tests/test_delivery_verification.py b/sdk/python/tests/test_delivery_verification.py
new file mode 100644
index 00000000..2b2bab4e
--- /dev/null
+++ b/sdk/python/tests/test_delivery_verification.py
@@ -0,0 +1,390 @@
+"""Delivery verification: ``execute`` and ``fetch`` check a signed retrieval URL first.
+
+An Exchange signs each retrieval URL with Ed25519 over ``"GET\\n<canonical URL>"``, names
+its key by thumbprint in ``kid``, binds the URL to the buying agent with ``agent_id`` and
+expires it at ``exp``. The client verifies all three against the key the Exchange
+publishes in its Web Bot Auth directory, so a URL that could never be fetched is refused
+when it arrives — with the edge's own reason vocabulary — instead of failing at the edge.
+
+The key is resolved by the SDK's real ``WBAKeyResolver`` from a directory built with the
+identity helpers and served in-process; the purchase runs the real client, on both
+faces, against a peer that verifies the request signature.
+"""
+
+from __future__ import annotations
+
+import json
+import time
+from datetime import UTC, datetime
+from typing import TYPE_CHECKING, Any
+
+import httpx
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from signed_peer import SignedPeer
+from test_broker_execute import _broker_config, _offer
+from test_client import AGENT_SEED, FACES, Face, _config, _signed_offer, _verified
+
+import fora_sdk.sync as sync_client
+from fora_sdk.client import (
+    BrokerClient,
+    CallError,
+    CallErrorKind,
+    Client,
+    ClientConfig,
+    Delivery,
+    RawBody,
+)
+from fora_sdk.core import Mode
+from fora_sdk.identity import directory_document
+from fora_sdk.keyresolver import StaticKeyResolver
+from fora_sdk.resolvers import WBAKeyResolver
+from fora_sdk.signedurl import sign_ed25519_signed_url
+from fora_sdk.signing_transport import SigningTransport
+from fora_sdk.thumbprint import thumbprint
+
+if TYPE_CHECKING:
+    from collections.abc import Callable
+
+_IDS = [f.name for f in FACES]
+_KEYID = "agent.v1"
+_AGENT_PUBLIC = Ed25519PrivateKey.from_private_bytes(AGENT_SEED).public_key().public_bytes_raw()
+_AGENT = SigningTransport(signer_seed=AGENT_SEED, keyid=_KEYID).thumbprint
+_EDGE = "https://edge.example/content/asset-1"
+
+
+class _Exchange:
+    """One Exchange's URL-signing key, and the directory that publishes it."""
+
+    def __init__(self, domain: str) -> None:
+        self.domain = domain
+        self.key = Ed25519PrivateKey.generate()
+        self.kid = thumbprint(self.key.public_key().public_bytes_raw())
+        self.serve = True
+
+    def sign(self, *, agent_id: str = _AGENT, exp: int | None = None, key: Any = None) -> str:
+        return sign_ed25519_signed_url(
+            _EDGE,
+            seed=(key or self.key).private_bytes_raw(),
+            kid=self.kid,
+            agent_id=agent_id,
+            exp=exp if exp is not None else int(time.time()) + 600,
+        )
+
+
+def _directories(*exchanges: _Exchange) -> WBAKeyResolver:
+    """A real WBA resolver over an in-process origin serving each Exchange's directory."""
+    by_host = {e.domain: e for e in exchanges}
+
+    def respond(request: httpx.Request) -> httpx.Response:
+        exchange = by_host.get(request.url.host)
+        if exchange is None or not exchange.serve:
+            return httpx.Response(503)
+        document = directory_document([exchange.key.public_key()])
+        return httpx.Response(200, content=json.dumps(document).encode())
+
+    return WBAKeyResolver(http=httpx.Client(transport=httpx.MockTransport(respond)))
+
+
+def _peer(answer: dict[str, Any]) -> SignedPeer:
+    return SignedPeer(
+        keys=lambda _sa: StaticKeyResolver({_KEYID: _AGENT_PUBLIC}),
+        answer=lambda _r: httpx.Response(200, content=json.dumps(answer).encode()),
+    )
+
+
+def _client(face: Face, config: ClientConfig, peer: SignedPeer) -> Any:
+    if face.name == "async":
+        return Client(config, http=peer.async_())
+    return sync_client.Client(config, http=peer.sync())
+
+
+def _answer(url: str | None, *, stated: str = _AGENT, **item: Any) -> dict[str, Any]:
+    entry: dict[str, Any] = {"offer_id": "offer-1", "transaction_id": "tx-1", **item}
+    if url is not None:
+        entry["retrieval_endpoint"] = url
+    return {"ver": "1.0", "agent_identity_hash": stated, "items": [entry]}
+
+
+def _buy(face: Face, exchange: _Exchange, answer: dict[str, Any], **config: Any) -> Any:
+    return face.run(_buy_call(face, exchange, answer, **config))
+
+
+def _buy_call(face: Face, exchange: _Exchange, answer: dict[str, Any], **config: Any) -> Any:
+    """The purchase of one verified offer from ``exchange``, not yet run."""
+    offer, public = _signed_offer(exchange.domain)
+    keys = config.pop("delivery_keys", None) or _directories(exchange)
+    client = _client(face, _config(delivery_keys=keys, **config), _peer(answer))
+    return client.execute(_verified(public, offer))
+
+
+def _refusal(face: Face, call: Callable[[], Any]) -> CallError:
+    with pytest.raises(CallError) as caught:
+        face.run(call())
+    return caught.value
+
+
+def _reason(err: CallError) -> str:
+    assert err.detail is not None, "a delivery refusal carries a typed retrieval_auth_failure"
+    assert err.detail.domain == "fora.v1.Client"
+    return str(err.detail.retrieval_auth_failure.reason.value)
+
+
+# ---------------------------------------------------------------------------
+# execute
+# ---------------------------------------------------------------------------
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_verified_url_is_handed_back_with_its_binding(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    url = exchange.sign()
+
+    result = _buy(face, exchange, _answer(url))
+
+    assert result.items[0].retrieval_endpoint == url
+    (delivery,) = result.deliveries
+    assert delivery == Delivery(
+        url=url,
+        exchange="exchange.test",
+        agent_id=_AGENT,
+        key_id=exchange.kid,
+        expires_at=delivery.expires_at,
+    )
+    assert delivery.expires_at > datetime.now(UTC)
+    # Not part of the message: the result still dumps as the TransactionResponse.
+    assert "deliveries" not in result.model_dump()
+
+
+def _refused_purchase(face: Face, answer: dict[str, Any], **config: Any) -> CallError:
+    exchange = config.pop("exchange")
+    return _refusal(face, lambda: _buy_call(face, exchange, answer, **config))
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_url_signed_by_another_key_is_refused(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    forged = exchange.sign(key=Ed25519PrivateKey.generate())
+
+    err = _refused_purchase(face, _answer(forged), exchange=exchange)
+
+    assert err.kind is CallErrorKind.MALFORMED
+    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH"
+    assert "item 0 (tx-1)" in str(err), "the refusal names the item and its transaction"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_url_bound_to_another_agent_is_refused(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    other = thumbprint(Ed25519PrivateKey.generate().public_key().public_bytes_raw())
+
+    err = _refused_purchase(
+        face, _answer(exchange.sign(agent_id=other), stated=other), exchange=exchange
+    )
+
+    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_bearer_url_under_a_stated_binding_is_refused(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+
+    err = _refused_purchase(face, _answer(exchange.sign(agent_id="")), exchange=exchange)
+
+    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_expired_url_is_refused(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+
+    err = _refused_purchase(
+        face, _answer(exchange.sign(exp=int(time.time()) - 1)), exchange=exchange
+    )
+
+    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize(
+    ("mangle", "reason"),
+    [
+        (lambda u: u.split("&sig=")[0], "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING"),
+        (
+            lambda u: u.replace("exp=", "expiry="),
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+        ),
+        (
+            lambda u: u.replace("kid=", "kidx="),
+            "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+        ),
+    ],
+    ids=["no-sig", "no-exp", "no-kid"],
+)
+def test_a_url_missing_a_part_is_refused(
+    face: Face, mangle: Callable[[str], str], reason: str
+) -> None:
+    exchange = _Exchange("exchange.test")
+
+    err = _refused_purchase(face, _answer(mangle(exchange.sign())), exchange=exchange)
+
+    assert _reason(err) == reason
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_unreachable_key_directory_is_unreachable_not_a_verdict(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    exchange.serve = False
+
+    err = _refused_purchase(face, _answer(exchange.sign()), exchange=exchange)
+
+    assert err.kind is CallErrorKind.UNREACHABLE
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_bearer_url_under_no_stated_binding_verifies_unbound(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+
+    result = _buy(face, exchange, _answer(exchange.sign(agent_id=""), stated=""))
+
+    assert result.deliveries[0].agent_id == ""
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_item_without_a_url_has_no_delivery(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+
+    result = _buy(face, exchange, _answer(None, denial_reason="DENIAL_REASON_RATE_LIMITED"))
+
+    assert result.deliveries == (None,)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_verification_off_is_the_named_opt_out(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    forged = exchange.sign(key=Ed25519PrivateKey.generate())
+
+    result = _buy(face, exchange, _answer(forged), delivery_verification=Mode.OFF)
+
+    assert result.items[0].retrieval_endpoint == forged
+    assert result.deliveries == ()
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_raw_purchase_is_decoded_but_not_verified(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    forged = exchange.sign(key=Ed25519PrivateKey.generate())
+    client = _client(face, _config(delivery_keys=_directories(exchange)), _peer(_answer(forged)))
+
+    result = face.run(client.execute(RawBody(b"{}")))
+
+    assert result.deliveries == ()
+
+
+# ---------------------------------------------------------------------------
+# BrokerClient.execute — each URL against its own Exchange's key
+# ---------------------------------------------------------------------------
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_the_broker_purchase_verifies_each_url_against_its_own_exchange(face: Face) -> None:
+    a, b = _Exchange("exchange-a.test"), _Exchange("exchange-b.test")
+    answer = {
+        "ver": "1.0",
+        "items": [
+            {"offer_id": "a1", "transaction_id": "tx-a", "retrieval_endpoint": a.sign()},
+            {"offer_id": "b1", "transaction_id": "tx-b", "retrieval_endpoint": b.sign()},
+        ],
+        "exchanges": [
+            {"exchange": "exchange-a.test", "offer_ids": ["a1"], "agent_identity_hash": _AGENT},
+            {"exchange": "exchange-b.test", "offer_ids": ["b1"], "agent_identity_hash": _AGENT},
+        ],
+    }
+    offers = [_offer("a1", "exchange-a.test"), _offer("b1", "exchange-b.test")]
+    config = _broker_config(delivery_keys=_directories(a, b))
+    peer = _peer(answer)
+    broker = (
+        BrokerClient(config, http=peer.async_())
+        if face.name == "async"
+        else (sync_client.BrokerClient(config, http=peer.sync()))
+    )
+
+    result = face.run(broker.execute(offers))
+
+    assert [d.exchange for d in result.deliveries] == ["exchange-a.test", "exchange-b.test"]
+    assert [d.key_id for d in result.deliveries] == [a.kid, b.kid]
+
+    # B's URL signed with A's key fails: each URL is checked against its own Exchange.
+    answer["items"][1]["retrieval_endpoint"] = b.sign(key=a.key)
+    peer = _peer(answer)
+    broker = (
+        BrokerClient(config, http=peer.async_())
+        if face.name == "async"
+        else (sync_client.BrokerClient(config, http=peer.sync()))
+    )
+    err = _refusal(face, lambda: broker.execute(offers))
+    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH"
+    assert "item 1 (tx-b)" in str(err)
+
+
+# ---------------------------------------------------------------------------
+# fetch
+# ---------------------------------------------------------------------------
+
+
+def _edge(seen: list[httpx.Request]) -> httpx.MockTransport:
+    def respond(request: httpx.Request) -> httpx.Response:
+        seen.append(request)
+        return httpx.Response(200, content=b"bytes", headers={"content-type": "text/plain"})
+
+    return httpx.MockTransport(respond)
+
+
+def _fetching(face: Face, exchange: _Exchange, seen: list[httpx.Request]) -> Any:
+    config = _config(delivery_keys=_directories(exchange))
+    if face.name == "async":
+        return Client(config, http=httpx.AsyncClient(transport=_edge(seen)))
+    return sync_client.Client(config, http=httpx.Client(transport=_edge(seen)))
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_fetch_verifies_a_delivery_and_returns_its_binding(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    seen: list[httpx.Request] = []
+    client = _fetching(face, exchange, seen)
+    url = exchange.sign()
+
+    by_url = face.run(client.fetch(url, exchange="exchange.test"))
+    assert by_url.body == b"bytes"
+    assert by_url.binding is not None and by_url.binding.agent_id == _AGENT
+
+    delivery = by_url.binding
+    again = face.run(client.fetch(delivery))
+    assert again.binding == delivery
+    assert len(seen) == 2
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_fetch_refuses_an_unverifiable_url_before_anything_is_sent(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    seen: list[httpx.Request] = []
+    client = _fetching(face, exchange, seen)
+    forged = exchange.sign(key=Ed25519PrivateKey.generate())
+
+    err = _refusal(face, lambda: client.fetch(forged, exchange="exchange.test"))
+
+    assert err.kind is CallErrorKind.MALFORMED
+    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH"
+    assert seen == [], "a URL the client knows the edge would refuse is never dialled"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_bare_url_is_fetched_as_given(face: Face) -> None:
+    exchange = _Exchange("exchange.test")
+    seen: list[httpx.Request] = []
+    client = _fetching(face, exchange, seen)
+
+    content = face.run(client.fetch(exchange.sign(key=Ed25519PrivateKey.generate())))
+
+    assert content.binding is None
+    assert len(seen) == 1
diff --git a/sdk/python/tests/test_raw_mode.py b/sdk/python/tests/test_raw_mode.py
new file mode 100644
index 00000000..28005541
--- /dev/null
+++ b/sdk/python/tests/test_raw_mode.py
@@ -0,0 +1,223 @@
+"""Raw mode: a per-call ``RawBody`` sent exactly as given.
+
+A harness probing how a service refuses a malformed message needs to put bytes on the
+wire the SDK would never build — a missing ``ver``, a wrong type, an unknown member —
+and still have them signed and the answer decoded. ``RawBody`` is that seam: it replaces
+the request of any verb, the SDK fills in nothing and refuses nothing about the message,
+and everything around the message (signing, ``before_sign``, the read cap, the decode)
+works as for any call.
+
+Every case runs the real client, on both faces, against a peer that verifies the RFC 9421
+signature with the SDK's own server-side verifier, so "sent unchanged" also means "signed
+over exactly those bytes".
+"""
+
+from __future__ import annotations
+
+import json
+from typing import Any
+
+import httpx
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from signed_peer import SignedPeer
+from test_client import AGENT_SEED, FACES, Face, _config
+
+import fora_sdk.sync as sync_client
+from fora_sdk.client import (
+    AdminClient,
+    BrokerClient,
+    CallError,
+    CallErrorKind,
+    CatalogClient,
+    Client,
+    ClientConfig,
+    ExecuteResult,
+    RawBody,
+)
+from fora_sdk.httpsig import content_digest
+from fora_sdk.keyresolver import StaticKeyResolver
+
+_IDS = [f.name for f in FACES]
+_KEYID = "agent.v1"
+_AGENT_PUBLIC = Ed25519PrivateKey.from_private_bytes(AGENT_SEED).public_key().public_bytes_raw()
+
+
+def _keys(_signature_agent: str) -> StaticKeyResolver:
+    return StaticKeyResolver({_KEYID: _AGENT_PUBLIC})
+
+
+def _answering(body: dict[str, Any]) -> SignedPeer:
+    return SignedPeer(keys=_keys, answer=lambda _r: httpx.Response(200, json=body))
+
+
+def _face(face: Face, cls: str, config: ClientConfig, peer: SignedPeer) -> Any:
+    async_classes = {
+        "client": Client,
+        "broker": BrokerClient,
+        "catalog": CatalogClient,
+        "admin": AdminClient,
+    }
+    sync_classes = {
+        "client": sync_client.Client,
+        "broker": sync_client.BrokerClient,
+        "catalog": sync_client.CatalogClient,
+        "admin": sync_client.AdminClient,
+    }
+    if face.name == "async":
+        return async_classes[cls](config, http=peer.async_())
+    return sync_classes[cls](config, http=peer.sync())
+
+
+class _Resolver:
+    """Resolves every Exchange to one origin, as an Exchange's own manifest would."""
+
+    def resolve_endpoint(self, exchange: str) -> str:
+        assert exchange == "exchange.test"
+        return "https://exchange.test"
+
+
+#: Bytes the SDK would never send: no ver, a field of the wrong type, an unknown member,
+#: and whitespace the SDK's own serializer never writes.
+_MALFORMED = b'{ "exchange": "exchange.test", "uris": "not-a-list", "surprise": true }'
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_raw_bytes_are_sent_and_signed_unchanged(face: Face) -> None:
+    peer = _answering({"ver": "1.0", "exchange": "exchange.test"})
+    client = _face(face, "client", _config(), peer)
+
+    face.run(client.discover(RawBody(_MALFORMED)))
+
+    got = peer.only()
+    assert got.request.content == _MALFORMED
+    # Signed over exactly those bytes: the digest is of the raw body, and the peer's
+    # verifier accepted the signature that covers it.
+    assert got.verdict.valid
+    assert got.header("content-digest") == content_digest(_MALFORMED)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_json_value_is_serialized_once_and_nothing_is_filled_in(face: Face) -> None:
+    peer = _answering({"ver": "1.0", "exchange": "exchange.test"})
+    # A requester is configured, and still not stamped: raw mode fills in nothing.
+    client = _face(face, "client", _config(), peer)
+
+    face.run(client.discover(RawBody({"exchange": "exchange.test"})))
+
+    assert peer.only().request.content == b'{"exchange":"exchange.test"}'
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_string_is_sent_as_its_utf8_bytes(face: Face) -> None:
+    peer = _answering({"ver": "1.0"})
+    client = _face(face, "catalog", _config(), peer)
+
+    face.run(client.push_resources(RawBody('{"exchange":"exchange.test","note":"é"}')))
+
+    assert peer.only().request.content == '{"exchange":"exchange.test","note":"é"}'.encode()
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_local_refusals_about_the_message_are_skipped(face: Face) -> None:
+    # A catalog push naming no recipient is refused locally as not sent — unless raw.
+    peer = _answering({"ver": "1.0"})
+    client = _face(face, "catalog", _config(), peer)
+    body = b'{"entries":[]}'
+
+    face.run(client.push_resources(RawBody(body)))
+
+    assert peer.only().request.content == body
+    with pytest.raises(CallError) as caught:
+        face.run(_face(face, "catalog", _config(), _answering({})).push_resources({"entries": []}))
+    assert caught.value.kind is CallErrorKind.NOT_SENT
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_execute_takes_a_raw_purchase_and_decodes_the_answer(face: Face) -> None:
+    answer = {"ver": "1.0", "items": [{"offer_id": "o-1", "transaction_id": "tx-1"}]}
+    peer = _answering(answer)
+    client = _face(face, "client", _config(), peer)
+    body = b'{"items":[]}'
+
+    result = face.run(client.execute(RawBody(body)))
+
+    assert peer.only().request.content == body
+    assert peer.only().request.url.path == "/fora.v1.ExchangeService/ExecuteTransaction"
+    assert isinstance(result, ExecuteResult)
+    assert result.items[0].transaction_id == "tx-1"
+    # Nothing ties a raw answer to a request the SDK built, so nothing was verified.
+    assert result.deliveries == ()
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_the_broker_purchase_takes_a_raw_body(face: Face) -> None:
+    peer = _answering({"ver": "1.0"})
+    client = _face(face, "broker", _config(base_url="https://broker.test"), peer)
+
+    face.run(client.execute(RawBody(b"{}")))
+
+    assert peer.only().request.url.path == "/fora.v1.BrokerService/ExecuteTransaction"
+    assert peer.only().request.content == b"{}"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_routed_verb_still_reads_its_destination_from_the_body(face: Face) -> None:
+    peer = _answering({"ver": "1.0", "report_id": "r-1"})
+    client = _face(face, "client", _config(endpoint_resolver=_Resolver()), peer)
+    body = b'{"exchange":"exchange.test","transaction_id":7}'
+
+    face.run(client.report_usage(RawBody(body)))
+
+    got = peer.only().request
+    assert got.url == "https://exchange.test/fora.v1.ExchangeService/ReportUsage"
+    assert got.content == body
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("body", [b"{}", b"not json", b'{"exchange": 5}'])
+def test_a_routed_raw_body_with_no_usable_exchange_is_not_sent(face: Face, body: bytes) -> None:
+    peer = _answering({})
+    client = _face(face, "client", _config(endpoint_resolver=_Resolver()), peer)
+
+    with pytest.raises(CallError) as caught:
+        face.run(client.dispute(RawBody(body)))
+
+    assert caught.value.kind is CallErrorKind.NOT_SENT
+    assert peer.seen == []
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_before_sign_still_runs_on_a_raw_body(face: Face) -> None:
+    peer = _answering({"ver": "1.0", "rate": {"tenant_id": "tenant-1", "fee_rate_bps": 0}})
+    seen: list[bytes] = []
+
+    def hook(request: httpx.Request) -> httpx.Request:
+        seen.append(request.read())
+        return request
+
+    client = _face(face, "admin", _config(before_sign=hook), peer)
+    face.run(client.set_tenant_fee_rate(RawBody(b'{"rate":{}}')))
+
+    assert seen == [b'{"rate":{}}']
+    assert peer.only().request.content == b'{"rate":{}}'
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_the_answer_to_a_raw_call_is_decoded_as_usual(face: Face) -> None:
+    # A refusal comes back typed; a malformed success answer is refused as malformed.
+    peer = SignedPeer(
+        keys=_keys,
+        answer=lambda _r: httpx.Response(
+            400, content=json.dumps({"code": "invalid_argument", "message": "bad"}).encode()
+        ),
+    )
+    with pytest.raises(CallError) as caught:
+        face.run(_face(face, "client", _config(), peer).discover(RawBody(b"{}")))
+    assert caught.value.kind is CallErrorKind.REFUSED
+    assert caught.value.code == "invalid_argument"
+
+    camel = _answering({"ver": "1.0", "rateLimit": {}})
+    with pytest.raises(CallError) as caught:
+        face.run(_face(face, "client", _config(), camel).discover(RawBody(b"{}")))
+    assert caught.value.kind is CallErrorKind.MALFORMED
diff --git a/sdk/python/tests/test_strict_decoding.py b/sdk/python/tests/test_strict_decoding.py
new file mode 100644
index 00000000..bb7ecc02
--- /dev/null
+++ b/sdk/python/tests/test_strict_decoding.py
@@ -0,0 +1,161 @@
+"""Strict response decoding: ``ClientConfig(strict=True)``.
+
+The generated models accept a field they do not know, because a peer on a newer minor
+version may send one. A conformance harness wants the opposite, so a strict client
+refuses an answer carrying an unknown field at any depth, an answer breaking a
+field-level rule, and an answer breaking a cross-field rule the proto states. The shape
+comes from the published strict JSON Schema of the response message and the SDK's
+cross-field rules — nothing here restates it.
+
+Each case runs the real client on both faces against an in-process peer that verifies the
+request signature, and contrasts the strict client with the default one on the same
+answer, so a passing refusal cannot come from something other than ``strict``.
+"""
+
+from __future__ import annotations
+
+import json
+from typing import TYPE_CHECKING, Any
+
+import httpx
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from signed_peer import SignedPeer
+from test_client import AGENT_SEED, FACES, Face, _config
+
+import fora_sdk.sync as sync_client
+from fora_sdk.client import CallError, CallErrorKind, Client
+from fora_sdk.keyresolver import StaticKeyResolver
+
+if TYPE_CHECKING:
+    from collections.abc import Callable
+
+_IDS = [f.name for f in FACES]
+_KEYID = "agent.v1"
+_AGENT_PUBLIC = Ed25519PrivateKey.from_private_bytes(AGENT_SEED).public_key().public_bytes_raw()
+_QUERY = {"exchange": "exchange.test", "uris": ["https://publisher.example/a"]}
+
+
+def _client(face: Face, answer: Any, *, strict: bool, **overrides: Any) -> Any:
+    peer = SignedPeer(
+        keys=lambda _sa: StaticKeyResolver({_KEYID: _AGENT_PUBLIC}),
+        answer=lambda _r: httpx.Response(200, content=json.dumps(answer).encode()),
+    )
+    config = _config(strict=strict, **overrides)
+    if face.name == "async":
+        return Client(config, http=peer.async_())
+    return sync_client.Client(config, http=peer.sync())
+
+
+def _refused(face: Face, call: Callable[[], Any]) -> CallError:
+    # A thunk, so the sync face's call runs inside the raises block.
+    with pytest.raises(CallError) as caught:
+        face.run(call())
+    assert caught.value.kind is CallErrorKind.MALFORMED
+    return caught.value
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_unknown_top_level_field_is_refused(face: Face) -> None:
+    answer = {"ver": "1.0", "exchange": "exchange.test", "surprise": 1}
+
+    # The default client accepts it: a newer minor version may add a field.
+    face.run(_client(face, answer, strict=False).discover(_QUERY))
+
+    err = _refused(face, lambda: _client(face, answer, strict=True).discover(_QUERY))
+    assert "surprise" in str(err)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_unknown_field_deep_in_the_answer_is_refused(face: Face) -> None:
+    answer = {
+        "ver": "1.0",
+        "items": [{"offer_id": "o-1", "cost": {"amount": "1", "currency": "USD", "x": 1}}],
+    }
+    face.run(_client(face, answer, strict=False).execute(_raw()))
+
+    err = _refused(face, lambda: _client(face, answer, strict=True).execute(_raw()))
+    assert "/items/0/cost" in str(err)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_null_message_field_is_an_absent_one(face: Face) -> None:
+    # A FORA server emits unpopulated fields, so an unset message arrives as null.
+    answer = {
+        "ver": "1.0",
+        "exchange": "exchange.test",
+        "rate_limit": None,
+        "offer_groups": [],
+        "offers": [],
+        "ext": {"vendor": None},
+    }
+    result = face.run(_client(face, answer, strict=True).discover(_QUERY))
+    assert result.exchange == "exchange.test"
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_field_level_rule_is_enforced(face: Face) -> None:
+    # TransactionResponse.items[].restriction_mismatches is an enum list; a name it does
+    # not define is refused by the strict schema.
+    answer = {"ver": "1.0", "items": [{"offer_id": "o-1", "restriction_mismatches": ["NOPE"]}]}
+    err = _refused(face, lambda: _client(face, answer, strict=True).execute(_raw()))
+    assert "restriction_mismatches" in str(err)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_cross_field_rule_on_a_nested_message_is_enforced(face: Face) -> None:
+    # Pricing.per_unit.requires_unit, on an offer two levels down.
+    offer = {
+        "offer_id": "o-1",
+        "exchange": "exchange.test",
+        "pricing": {"model": "PRICING_MODEL_PER_UNIT", "rate": "1", "currency": "USD"},
+    }
+    answer = {"ver": "1.0", "exchange": "exchange.test", "offers": [offer]}
+    face.run(_client(face, answer, strict=False).discover(_QUERY))
+
+    err = _refused(face, lambda: _client(face, answer, strict=True).discover(_QUERY))
+    assert "pricing.per_unit.requires_unit" in str(err)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_a_cross_field_rule_on_the_answer_itself_is_enforced(face: Face) -> None:
+    answer = {"ver": "1.0", "terms_digest": "sha256:" + "0" * 64}
+
+    class _Resolver:
+        def resolve_endpoint(self, exchange: str) -> str:
+            del exchange
+            return "https://exchange.test"
+
+    request = {"exchange": "exchange.test"}
+    lenient = _client(face, answer, strict=False, endpoint_resolver=_Resolver())
+    face.run(lenient.get_account_status(request))
+
+    strict = _client(face, answer, strict=True, endpoint_resolver=_Resolver())
+    err = _refused(face, lambda: strict.get_account_status(request))
+    assert "get_account_status_response.terms_digest_requires_billing_ref" in str(err)
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_error_envelope_is_read_the_same_way(face: Face) -> None:
+    peer = SignedPeer(
+        keys=lambda _sa: StaticKeyResolver({_KEYID: _AGENT_PUBLIC}),
+        answer=lambda _r: httpx.Response(
+            403, content=json.dumps({"code": "permission_denied", "extra": 1}).encode()
+        ),
+    )
+    config = _config(strict=True)
+    client = (
+        Client(config, http=peer.async_())
+        if face.name == "async"
+        else sync_client.Client(config, http=peer.sync())
+    )
+    with pytest.raises(CallError) as caught:
+        face.run(client.discover(_QUERY))
+    assert caught.value.kind is CallErrorKind.REFUSED
+    assert caught.value.code == "permission_denied"
+
+
+def _raw() -> Any:
+    from fora_sdk.client import RawBody
+
+    return RawBody(b"{}")

From d7b223a7c40410e08c11d58d71916da93c8a2b8e Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:01:27 -0400
Subject: [PATCH 016/164] Add a pre-signing hook, raw mode, strict decoding,
 CallError.Code and delivery verification to the Go client

The Go client gains what a conformance harness needs to drive FORA services
through it rather than around it:

- WithBeforeSign(hook) receives every RPC request just before the signing
  transport signs it. The request the hook returns is signed and sent and
  the reply decoded as usual. A hook that fails, returns nil, changes the
  method or URL, or sets a header the signer writes is refused as
  CallMalformed with nothing sent; Host and Content-Length are recomputed.
- WithRawBody(body) is a per-call option on every verb (the verbs that took
  no CallOption now take them). The bytes are sent as the binary protobuf
  body exactly as given: nothing is stamped and no local refusal about the
  message applies, while the call is still signed and its answer decoded. A
  verb that routes on its request decodes exchange from the body; one that
  names none is refused as CallNotSent.
- WithStrictDecoding() refuses an answer carrying an unknown field at any
  depth, or breaking its field or cross-field rules under protovalidate.
- CallError.Code holds the Connect code of the peer's answer: an error
  envelope, or a non-JSON error status. connect-go does not mark a code it
  derived from a status as one the server sent, so the client's transport
  records that a response arrived; a dial failure, a refused redirect and a
  local refusal carry no code. The connect-error and transport-failure
  replays assert it for every row.
- Execute, ExecuteBatch and BrokerClient.Execute verify every
  retrieval_endpoint before returning: the Ed25519 signature against the
  issuing Exchange's URL-signing key, resolved by kid from its WBA directory
  (WithDeliveryKeyResolver), the agent_id binding against this agent's key
  and the answer's agent_identity_hash, and the expiry. A URL that does not
  verify fails the call as CallMalformed with a retrieval_auth_failure detail
  in the client's domain. WithDeliveries(&out) receives the verified
  bindings as Delivery values, Fetch with WithDeliveryExchange verifies a URL
  before minting a proof for it and returns the binding on Content.Binding,
  and WithDeliveryVerification(core.Off) opts out for URLs in another
  signing scheme.

The tests run the real client against real Connect handlers behind the
SDK's server verify face, and an Exchange that publishes its URL-signing key
in its own WBA directory.
---
 sdk/go/connect/account.go                     |  22 +-
 sdk/go/connect/answer.go                      |  83 ++++++
 sdk/go/connect/beforesign.go                  | 123 ++++++++
 sdk/go/connect/beforesign_test.go             | 165 +++++++++++
 sdk/go/connect/broker.go                      |  50 +++-
 sdk/go/connect/callerror.go                   |  42 ++-
 sdk/go/connect/catalog.go                     |  23 +-
 sdk/go/connect/client.go                      | 120 ++++++--
 sdk/go/connect/connect_error_corpus_test.go   |  17 +-
 sdk/go/connect/delivery.go                    | 252 +++++++++++++++++
 sdk/go/connect/delivery_test.go               | 267 ++++++++++++++++++
 sdk/go/connect/options.go                     |  11 +
 sdk/go/connect/raw.go                         | 115 ++++++++
 sdk/go/connect/raw_strict_test.go             | 214 ++++++++++++++
 sdk/go/connect/strict.go                      | 112 ++++++++
 .../connect/transport_failure_corpus_test.go  |  30 ++
 sdk/go/connect/verbs.go                       |  60 +++-
 sdk/go/resolvers/contentfetch.go              |   5 +
 18 files changed, 1664 insertions(+), 47 deletions(-)
 create mode 100644 sdk/go/connect/answer.go
 create mode 100644 sdk/go/connect/beforesign.go
 create mode 100644 sdk/go/connect/beforesign_test.go
 create mode 100644 sdk/go/connect/delivery.go
 create mode 100644 sdk/go/connect/delivery_test.go
 create mode 100644 sdk/go/connect/raw.go
 create mode 100644 sdk/go/connect/raw_strict_test.go
 create mode 100644 sdk/go/connect/strict.go

diff --git a/sdk/go/connect/account.go b/sdk/go/connect/account.go
index 90e5771f..d0d4b6fc 100644
--- a/sdk/go/connect/account.go
+++ b/sdk/go/connect/account.go
@@ -8,6 +8,7 @@ import (
 	connectrpc "connectrpc.com/connect"
 
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
 )
@@ -26,10 +27,11 @@ import (
 // and resolved through that Exchange's own manifest, over the guarded leg, and
 // there is no parameter a configured origin could be passed as.
 //
-// Neither message carries an idempotency_key, so neither verb takes CallOptions.
-// That is the contract's choice rather than an omission: registering again for the
-// same agent returns the same account handle, so a key would be ceremony rather
-// than a guarantee.
+// Neither message carries an idempotency_key, so WithIdempotencyKey does nothing
+// here; the verbs take CallOptions for raw mode (WithRawBody) alone. That is the
+// contract's choice rather than an omission: registering again for the same agent
+// returns the same account handle, so a key would be ceremony rather than a
+// guarantee.
 
 // clientErrorDomain is the ErrorDetail domain for a refusal THIS CLIENT computed,
 // before anything was sent. It names the failing surface, which here is the client's
@@ -76,9 +78,13 @@ const clientErrorDomain = "fora.v1.Client"
 // A refused registration comes back as a non-OK call whose typed reason is
 // readable through ErrorDetailFrom as a RegistrationFailure.
 func (c *Client) Register(
-	ctx context.Context, req *forav1.RegisterRequest,
+	ctx context.Context, req *forav1.RegisterRequest, opts ...CallOption,
 ) (*forav1.RegisterResponse, error) {
 	const op = "register"
+	if cc := resolveCall(opts); cc.rawSet {
+		return routedRaw[forav1.RegisterResponse](ctx, c, op, cc.rawBody, &forav1.RegisterRequest{},
+			forav1connect.ExchangeServiceRegisterProcedure)
+	}
 	if req == nil {
 		return nil, malformed(op, errors.New("request is nil"))
 	}
@@ -129,9 +135,13 @@ func (c *Client) Register(
 // one wall-clock second still sign different bytes and a peer screening replays on
 // (key id, signature) accepts both.
 func (c *Client) GetAccountStatus(
-	ctx context.Context, req *forav1.GetAccountStatusRequest,
+	ctx context.Context, req *forav1.GetAccountStatusRequest, opts ...CallOption,
 ) (*forav1.GetAccountStatusResponse, error) {
 	const op = "get account status"
+	if cc := resolveCall(opts); cc.rawSet {
+		return routedRaw[forav1.GetAccountStatusResponse](ctx, c, op, cc.rawBody, &forav1.GetAccountStatusRequest{},
+			forav1connect.ExchangeServiceGetAccountStatusProcedure)
+	}
 	if req == nil {
 		return nil, malformed(op, errors.New("request is nil"))
 	}
diff --git a/sdk/go/connect/answer.go b/sdk/go/connect/answer.go
new file mode 100644
index 00000000..ccf8107b
--- /dev/null
+++ b/sdk/go/connect/answer.go
@@ -0,0 +1,83 @@
+package connect
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"sync/atomic"
+
+	connectrpc "connectrpc.com/connect"
+)
+
+// CallError.Code is the Connect code of the peer's ANSWER. connect-go hands back a
+// *connect.Error for every failed call, but it cannot say whether a peer answered:
+// a code it derived from a non-JSON HTTP status (a gateway's 502, a proxy's 403) is
+// not marked as one the server sent, and neither is CodeUnavailable for a dial that
+// never connected. Python and TypeScript both report a code for the first and none
+// for the second, so this client records the fact itself: the interceptor below
+// puts a holder on the call's context, and the client's transport writes the status
+// of whatever response arrived into it. connect-go builds the HTTP request with the
+// context the interceptor chain passed down, so the two meet without any verb
+// knowing.
+
+type answerKey struct{}
+
+// answerHolder carries the HTTP status of the response that arrived, if any.
+type answerHolder struct{ status atomic.Int64 }
+
+// answeredError marks a failure whose call received an HTTP error status: the
+// peer answered, so its Connect code is the peer's. It wraps rather than replaces
+// the error, so errors.As still reaches the *connect.Error and its details.
+type answeredError struct{ err error }
+
+func (e *answeredError) Error() string { return e.err.Error() }
+func (e *answeredError) Unwrap() error { return e.err }
+
+// peerAnswered reports whether err came from a call the peer answered.
+func peerAnswered(err error) bool {
+	var a *answeredError
+	return errors.As(err, &a)
+}
+
+// answerInterceptor is the outermost client interceptor: it opens the holder the
+// transport writes into, and marks a failure the peer answered.
+type answerInterceptor struct{}
+
+func (answerInterceptor) WrapUnary(next connectrpc.UnaryFunc) connectrpc.UnaryFunc {
+	return func(ctx context.Context, req connectrpc.AnyRequest) (connectrpc.AnyResponse, error) {
+		holder := &answerHolder{}
+		resp, err := next(context.WithValue(ctx, answerKey{}, holder), req)
+		// Only an error status is an answer with a code. An OK status that still failed
+		// is a body this client could not accept (the read cap, strict decoding), and a
+		// 3xx is a redirect this client refused to follow — a server that did not
+		// answer the call. Neither carries a verdict of the peer's.
+		if err != nil {
+			if holder.status.Load() >= http.StatusBadRequest {
+				return resp, &answeredError{err: err}
+			}
+		}
+		return resp, err
+	}
+}
+
+func (answerInterceptor) WrapStreamingClient(next connectrpc.StreamingClientFunc) connectrpc.StreamingClientFunc {
+	return next
+}
+
+func (answerInterceptor) WrapStreamingHandler(next connectrpc.StreamingHandlerFunc) connectrpc.StreamingHandlerFunc {
+	return next
+}
+
+// answerRecorder is the outermost RoundTripper on every signed leg: it records the
+// status of the response that came back into the call's holder.
+type answerRecorder struct{ next http.RoundTripper }
+
+func (r answerRecorder) RoundTrip(req *http.Request) (*http.Response, error) {
+	resp, err := r.next.RoundTrip(req)
+	if resp != nil {
+		if holder, ok := req.Context().Value(answerKey{}).(*answerHolder); ok {
+			holder.status.Store(int64(resp.StatusCode))
+		}
+	}
+	return resp, err
+}
diff --git a/sdk/go/connect/beforesign.go b/sdk/go/connect/beforesign.go
new file mode 100644
index 00000000..73886670
--- /dev/null
+++ b/sdk/go/connect/beforesign.go
@@ -0,0 +1,123 @@
+package connect
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"sort"
+	"strings"
+)
+
+// BeforeSign is the pre-signing hook. It receives every RPC request the client is
+// about to sign — built, stamped and (under ValidationStrict) validated — and
+// returns the request to sign and send instead. A test that must send a
+// deliberately altered message patches it here; the SDK then signs exactly the
+// bytes the hook returned, and decodes the reply with its own decoder, so the hook
+// is never a way around signing or decoding.
+//
+// The request handed in is the caller's to change. Its body has already been read
+// into memory, so the hook may read it, and a body the hook replaces is what the
+// Content-Digest covers. Refused, with nothing sent, as CallMalformed: a hook that
+// returns an error or a nil request; one that changes the method or the URL (the
+// address checks and the routing were decided on them); and one that sets or
+// changes a header the signer writes. A Host or Content-Length the hook sets never
+// reaches the peer — both are recomputed from the request itself.
+type BeforeSign func(*http.Request) (*http.Request, error)
+
+// WithBeforeSign installs a pre-signing hook on every leg that signs: the home
+// Exchange, the Broker, the Exchange an offer named, the catalog and the admin
+// clients. The delivery fetch is a GET with no body to alter and does not run it.
+func WithBeforeSign(hook BeforeSign) ClientOption {
+	return func(c *clientConfig) { c.beforeSign = hook }
+}
+
+// signerHeaders are the headers helpers.SignRequest writes: the three that carry
+// the signature and the digest, and the two covered headers it fills when the
+// request lacks them. A hook that set any of them would either be overwritten
+// silently or contradict the signature, so it is refused instead.
+var signerHeaders = []string{"Signature", "Signature-Input", "Content-Digest", "Signature-Agent", "Authorization"}
+
+// beforeSignError marks a refusal of the hook, so sendError reports it as malformed
+// rather than as a peer that did not answer — the classification connect-go gives
+// any error a transport returns.
+type beforeSignError struct{ err error }
+
+func (e *beforeSignError) Error() string { return "before sign: " + e.err.Error() }
+func (e *beforeSignError) Unwrap() error { return e.err }
+
+// beforeSignTransport runs the hook immediately before the signing transport.
+type beforeSignTransport struct {
+	hook BeforeSign
+	next http.RoundTripper
+}
+
+func (t beforeSignTransport) RoundTrip(req *http.Request) (*http.Response, error) {
+	patched, err := t.apply(req)
+	if err != nil {
+		return nil, &beforeSignError{err: err}
+	}
+	return t.next.RoundTrip(patched)
+}
+
+// apply hands the hook a copy of req whose body is readable, then checks and
+// normalizes what it returned.
+func (t beforeSignTransport) apply(req *http.Request) (*http.Request, error) {
+	body, err := readBody(req.Body)
+	if err != nil {
+		return nil, fmt.Errorf("read the request body: %w", err)
+	}
+	handed := req.Clone(req.Context())
+	setBody(handed, body)
+	before := handed.Header.Clone()
+	returned, err := t.hook(handed)
+	if err != nil {
+		return nil, err
+	}
+	if returned == nil {
+		return nil, errors.New("the hook returned no request")
+	}
+	if returned.Method != req.Method || returned.URL.String() != req.URL.String() {
+		return nil, errors.New("the hook must not change the request method or URL")
+	}
+	if clash := signerOwned(before, returned.Header); len(clash) > 0 {
+		return nil, fmt.Errorf("the hook set headers the signer owns: %s", strings.Join(clash, ", "))
+	}
+	newBody, err := readBody(returned.Body)
+	if err != nil {
+		return nil, fmt.Errorf("read the hook's request body: %w", err)
+	}
+	out := req.Clone(req.Context())
+	out.Header = returned.Header.Clone()
+	out.Header.Del("Host")
+	out.Header.Del("Content-Length")
+	setBody(out, newBody)
+	return out, nil
+}
+
+// signerOwned names every signer header whose value the hook changed.
+func signerOwned(before, after http.Header) []string {
+	var clash []string
+	for _, name := range signerHeaders {
+		if strings.Join(before.Values(name), ",") != strings.Join(after.Values(name), ",") {
+			clash = append(clash, name)
+		}
+	}
+	sort.Strings(clash)
+	return clash
+}
+
+func readBody(body io.ReadCloser) ([]byte, error) {
+	if body == nil || body == http.NoBody {
+		return nil, nil
+	}
+	defer func() { _ = body.Close() }()
+	return io.ReadAll(body)
+}
+
+func setBody(req *http.Request, body []byte) {
+	req.Body = io.NopCloser(bytes.NewReader(body))
+	req.GetBody = func() (io.ReadCloser, error) { return io.NopCloser(bytes.NewReader(body)), nil }
+	req.ContentLength = int64(len(body))
+}
diff --git a/sdk/go/connect/beforesign_test.go b/sdk/go/connect/beforesign_test.go
new file mode 100644
index 00000000..855e779c
--- /dev/null
+++ b/sdk/go/connect/beforesign_test.go
@@ -0,0 +1,165 @@
+package connect_test
+
+// The pre-signing hook, driven through the real client against a real Connect
+// CatalogService handler running the SDK's own server verify face. The verify face
+// is what proves the signature covers the PATCHED bytes: a hook whose changes were
+// signed before they were made would be refused as unauthenticated, never reach the
+// application, and never earn its typed refusal.
+
+import (
+	"bytes"
+	"context"
+	"errors"
+	"io"
+	"net/http"
+	"testing"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/proto"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// strictCatalog refuses a push carrying no entries with a typed catalog rejection,
+// the refusal a malformed push earns at an Exchange.
+type strictCatalog struct {
+	forav1connect.UnimplementedCatalogServiceHandler
+	hits int
+}
+
+func (c *strictCatalog) PushResources(
+	ctx context.Context, req *connectrpc.Request[forav1.PushResourcesRequest],
+) (*connectrpc.Response[forav1.PushResourcesResponse], error) {
+	c.hits++
+	if helpers.FromContext(ctx) == nil {
+		return nil, connectrpc.NewError(connectrpc.CodeUnauthenticated, errors.New("origin: unverified caller"))
+	}
+	if len(req.Msg.GetEntries()) == 0 {
+		return nil, foraserver.AttachDetail(
+			connectrpc.NewError(connectrpc.CodeInvalidArgument, errors.New("no entries")),
+			helpers.CatalogRejectionDetail("fora.v1.CatalogService", "a push carries at least one entry",
+				forav1.CatalogRejectionReason_CATALOG_REJECTION_REASON_MALFORMED_ENTRY))
+	}
+	return connectrpc.NewResponse(&forav1.PushResourcesResponse{
+		Ver: helpers.ProtocolVersion, Accepted: int32(len(req.Msg.GetEntries())),
+	}), nil
+}
+
+func validPush() *forav1.PushResourcesRequest {
+	return &forav1.PushResourcesRequest{
+		Exchange: "exchange.test", TenantId: "tenant-1", CallerId: "publisher.test",
+		Entries: []*forav1.ResourceEntry{catalogEntry()},
+	}
+}
+
+// dropEntries is a hook that removes every entry from the push it is handed.
+func dropEntries(req *http.Request) (*http.Request, error) {
+	body, err := io.ReadAll(req.Body)
+	if err != nil {
+		return nil, err
+	}
+	var push forav1.PushResourcesRequest
+	if err := proto.Unmarshal(body, &push); err != nil {
+		return nil, err
+	}
+	push.Entries = nil
+	patched, err := proto.Marshal(&push)
+	if err != nil {
+		return nil, err
+	}
+	out := req.Clone(req.Context())
+	out.Body = io.NopCloser(bytes.NewReader(patched))
+	return out, nil
+}
+
+// A valid request patched into a malformed one comes back as the server's typed
+// refusal, read through CallError: the Connect code, and the ErrorDetail.
+func TestBeforeSign_APatchedRequestEarnsATypedRefusal(t *testing.T) {
+	sig := newSigningFixture(t)
+	origin := &strictCatalog{}
+	srv := serveCatalog(t, sig, origin)
+	client := foraconnect.NewCatalogClient(srv.URL,
+		foraconnect.WithSigner(sig.signer), foraconnect.WithBeforeSign(dropEntries))
+
+	_, err := client.PushResources(context.Background(), validPush())
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) {
+		t.Fatalf("error = %v, want a CallError", err)
+	}
+	if cerr.Kind != foraconnect.CallRefused || cerr.Code != connectrpc.CodeInvalidArgument {
+		t.Fatalf("kind = %v, code = %v; want the peer's invalid_argument refusal", cerr.Kind, cerr.Code)
+	}
+	detail, ok := foraconnect.ErrorDetailFrom(err)
+	if !ok || detail.GetCatalogRejection().GetReason() !=
+		forav1.CatalogRejectionReason_CATALOG_REJECTION_REASON_MALFORMED_ENTRY {
+		t.Fatalf("typed reason = %v, want MALFORMED_ENTRY", detail)
+	}
+	// Without the hook the same request is accepted, so the refusal is the patch's.
+	plain := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	if _, err := plain.PushResources(context.Background(), validPush()); err != nil {
+		t.Fatalf("the unpatched push was refused: %v", err)
+	}
+}
+
+// The hook's refusals are local: nothing reaches the server.
+func TestBeforeSign_RefusesWithoutSending(t *testing.T) {
+	cases := map[string]foraconnect.BeforeSign{
+		"hook error":  func(*http.Request) (*http.Request, error) { return nil, errors.New("boom") },
+		"nil request": func(*http.Request) (*http.Request, error) { return nil, nil },
+		"changed URL": func(r *http.Request) (*http.Request, error) {
+			out := r.Clone(r.Context())
+			out.URL.Path = "/fora.v1.CatalogService/RemoveResources"
+			return out, nil
+		},
+		"changed method": func(r *http.Request) (*http.Request, error) {
+			out := r.Clone(r.Context())
+			out.Method = http.MethodPut
+			return out, nil
+		},
+		"signer header": func(r *http.Request) (*http.Request, error) {
+			out := r.Clone(r.Context())
+			out.Header.Set("signature-agent", "https://elsewhere.test")
+			return out, nil
+		},
+	}
+	for name, hook := range cases {
+		t.Run(name, func(t *testing.T) {
+			sig := newSigningFixture(t)
+			origin := &strictCatalog{}
+			srv := serveCatalog(t, sig, origin)
+			client := foraconnect.NewCatalogClient(srv.URL,
+				foraconnect.WithSigner(sig.signer), foraconnect.WithBeforeSign(hook))
+			_, err := client.PushResources(context.Background(), validPush())
+			var cerr *foraconnect.CallError
+			if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
+				t.Fatalf("error = %v, want CallMalformed", err)
+			}
+			if cerr.Code != 0 {
+				t.Errorf("code = %v on a local refusal, want none", cerr.Code)
+			}
+			if origin.hits != 0 {
+				t.Errorf("the server was reached %d time(s)", origin.hits)
+			}
+		})
+	}
+}
+
+// A hook that leaves the request alone sends what the SDK built, Content-Length a
+// hook might set stale included.
+func TestBeforeSign_AnUnchangedRequestIsAccepted(t *testing.T) {
+	sig := newSigningFixture(t)
+	srv := serveCatalog(t, sig, &strictCatalog{})
+	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer),
+		foraconnect.WithBeforeSign(func(r *http.Request) (*http.Request, error) {
+			r.Header.Set("Content-Length", "1")
+			return r, nil
+		}))
+	resp, err := client.PushResources(context.Background(), validPush())
+	if err != nil || resp.GetAccepted() != 1 {
+		t.Fatalf("push = %v, %v", resp, err)
+	}
+}
diff --git a/sdk/go/connect/broker.go b/sdk/go/connect/broker.go
index 903061a0..7302758f 100644
--- a/sdk/go/connect/broker.go
+++ b/sdk/go/connect/broker.go
@@ -37,6 +37,10 @@ type BrokerClient struct {
 	// signatureAgent is the WBA directory this client signs as. A Broker requires
 	// requester.domain to name it, so Execute checks the two agree before sending.
 	signatureAgent string
+
+	baseURL    string
+	raw        rawLeg
+	deliveries deliveryVerifier
 }
 
 // NewBrokerClient builds a BrokerClient against a Broker's base URL. It accepts
@@ -73,6 +77,9 @@ func NewBrokerClient(baseURL string, opts ...ClientOption) *BrokerClient {
 		requester:      cfg.requester,
 		signer:         cfg.signer,
 		signatureAgent: cfg.signatureAgent,
+		baseURL:        baseURL,
+		raw:            newRawLeg(cfg, httpClient),
+		deliveries:     newDeliveryVerifier(cfg),
 	}
 }
 
@@ -99,8 +106,18 @@ func NewBrokerClient(baseURL string, opts ...ClientOption) *BrokerClient {
 // refuses a request that names none, so leaving it to every caller to remember
 // would make the identity the client already holds useless exactly where it is
 // needed.
-func (b *BrokerClient) Resolve(ctx context.Context, req *forav1.DiscoveryRequest) (core.DiscoveryResult, error) {
+//
+// WithRawBody sends caller bytes instead; the answer's offers are still verified.
+func (b *BrokerClient) Resolve(ctx context.Context, req *forav1.DiscoveryRequest, opts ...CallOption) (core.DiscoveryResult, error) {
 	const op = "resolve"
+	if cc := resolveCall(opts); cc.rawSet {
+		msg, err := rawCall[forav1.DiscoveryResponse](ctx, b.raw, op, b.baseURL,
+			forav1connect.BrokerServiceResolveProcedure, cc.rawBody)
+		if err != nil {
+			return core.DiscoveryResult{}, err
+		}
+		return b.discoveryResult(ctx, msg), nil
+	}
 	if req == nil {
 		return core.DiscoveryResult{}, malformed(op, errors.New("request is nil"))
 	}
@@ -121,7 +138,10 @@ func (b *BrokerClient) Resolve(ctx context.Context, req *forav1.DiscoveryRequest
 	if err != nil {
 		return core.DiscoveryResult{}, sendError(op, err)
 	}
-	msg := resp.Msg
+	return b.discoveryResult(ctx, resp.Msg), nil
+}
+
+func (b *BrokerClient) discoveryResult(ctx context.Context, msg *forav1.DiscoveryResponse) core.DiscoveryResult {
 	return core.DiscoveryResult{
 		Groups: b.verifier.SortGroups(ctx, msg.GetOfferGroups()),
 		// The raw field, not the getter: an absent optional enum and the
@@ -129,7 +149,7 @@ func (b *BrokerClient) Resolve(ctx context.Context, req *forav1.DiscoveryRequest
 		AbsenceReason: msg.AbsenceReason,
 		// A DiscoveryResponse names no single Exchange and carries no rate-limit
 		// signal — each offer carries its own issuing domain instead.
-	}, nil
+	}
 }
 
 // Execute buys VERIFIED offers through the Broker in one call, however many
@@ -158,8 +178,18 @@ func (b *BrokerClient) Resolve(ctx context.Context, req *forav1.DiscoveryRequest
 // unchanged. Only the Broker's own refusals — a bad signature, a malformed
 // request, an Exchange it cannot route to or does not approve — return an error,
 // and then nothing was bought.
+//
+// The one signed value in the combined answer is each item's retrieval_endpoint,
+// signed by the Exchange that issued the item's offer, so each is verified as
+// Client.Execute verifies its own: against that Exchange's URL-signing key, the
+// agent_identity_hash that Exchange's outcome states, and the expiry.
 func (b *BrokerClient) Execute(ctx context.Context, offers []core.VerifiedOffer, opts ...CallOption) (*forav1.BrokerTransactionResponse, error) {
 	const op = "broker execute"
+	cc := resolveCall(opts)
+	if cc.rawSet {
+		return rawCall[forav1.BrokerTransactionResponse](ctx, b.raw, op, b.baseURL,
+			forav1connect.BrokerServiceExecuteTransactionProcedure, cc.rawBody)
+	}
 	if b.requester == nil {
 		return nil, malformed(op, errors.New(
 			"no requester configured; a Broker resolves who is buying (see WithRequester)"))
@@ -180,5 +210,19 @@ func (b *BrokerClient) Execute(ctx context.Context, offers []core.VerifiedOffer,
 	if err != nil {
 		return nil, sendError(op, err)
 	}
+	// Each retrieval URL was signed by the Exchange that issued its offer, and is
+	// bound to the identity that Exchange's outcome states — the one signed value in
+	// an answer the Broker otherwise reports unsigned.
+	stated := func(exchange string) string {
+		for _, o := range resp.Msg.GetExchanges() {
+			if o.GetExchange() == exchange {
+				return o.GetAgentIdentityHash()
+			}
+		}
+		return ""
+	}
+	if err := b.deliveries.deliver(ctx, op, resp.Msg.GetItems(), offerExchange(offers), stated, cc.deliveries); err != nil {
+		return nil, err
+	}
 	return resp.Msg, nil
 }
diff --git a/sdk/go/connect/callerror.go b/sdk/go/connect/callerror.go
index 95fb7753..a2a2f558 100644
--- a/sdk/go/connect/callerror.go
+++ b/sdk/go/connect/callerror.go
@@ -112,7 +112,20 @@ type CallError struct {
 	// truncating a peer's only account of why a call failed is a decision that
 	// belongs to whoever displays it.
 	PeerMessage string
-	Err         error
+	// Code is the Connect code of the peer's answer, set only where a Connect answer
+	// was decoded: an error envelope, or a non-JSON error status classified by its
+	// code. It is zero for a local failure, a transport failure where no answer
+	// arrived (a dial error, a timeout), a refused redirect, and the content leg,
+	// whose refusals are edge tokens rather than Connect codes. Reason carries the
+	// same code as text on an RPC path and the edge token on the content path; this
+	// field holds only the Connect code, so a caller can branch on it without
+	// knowing which leg failed.
+	//
+	// connect-go does not mark a code it derived from an HTTP status as one the
+	// server sent, so "the peer answered" is recorded by the client's own transport
+	// rather than read off the error.
+	Code connectrpc.Code
+	Err  error
 }
 
 func (e *CallError) Error() string {
@@ -159,6 +172,12 @@ func asCallError(err error) (*CallError, bool) {
 // The Connect error is kept in the chain with %w, so errors.As still reaches it
 // and ErrorDetailFrom still finds the typed detail the peer attached.
 func sendError(op string, err error) error {
+	// The client's own refusals come first: a pre-signing hook the SDK refused, and
+	// an answer strict decoding refused. Both are failures this client computed, so
+	// neither may be read as the peer's verdict or as a peer that did not answer.
+	if local := localRefusal(op, err); local != nil {
+		return local
+	}
 	out := &CallError{Kind: CallUnreachable, Op: op, Err: err}
 	var cerr *connectrpc.Error
 	if !errors.As(err, &cerr) {
@@ -187,9 +206,30 @@ func sendError(op string, err error) error {
 		out.Kind = CallRefused
 	}
 	out.Reason = cerr.Code().String()
+	if peerAnswered(err) {
+		out.Code = cerr.Code()
+	}
 	if detail, ok := errorDetailFromConnect(cerr); ok {
 		out.Detail = detail
 		out.PeerMessage = detail.GetMessage()
 	}
 	return out
 }
+
+// localRefusal returns the CallError for a failure this client computed during the
+// round trip — a pre-signing hook it refused, or an answer strict decoding refused —
+// and nil for anything else. connect-go wraps an error a transport returns as
+// CodeUnavailable and passes an interceptor's through as given, so without this the
+// first would read as a peer that never answered and the second as an unclassified
+// failure.
+func localRefusal(op string, err error) *CallError {
+	var hook *beforeSignError
+	if errors.As(err, &hook) {
+		return &CallError{Kind: CallMalformed, Op: op, Err: hook}
+	}
+	var strict *strictDecodeError
+	if errors.As(err, &strict) {
+		return &CallError{Kind: CallMalformed, Op: op, Err: strict}
+	}
+	return nil
+}
diff --git a/sdk/go/connect/catalog.go b/sdk/go/connect/catalog.go
index a7856e55..c4956a52 100644
--- a/sdk/go/connect/catalog.go
+++ b/sdk/go/connect/catalog.go
@@ -37,7 +37,9 @@ import (
 // same redirect refusal, the same request-id and validate interceptors, the
 // same read cap — so the faces cannot drift in how they sign or correlate.
 type CatalogClient struct {
-	rpc forav1connect.CatalogServiceClient
+	rpc     forav1connect.CatalogServiceClient
+	baseURL string
+	raw     rawLeg
 }
 
 // NewCatalogClient builds a CatalogClient against an Exchange's catalog endpoint.
@@ -58,7 +60,9 @@ func NewCatalogClient(baseURL string, opts ...ClientOption) *CatalogClient {
 	cfg := resolvedConfig(opts...)
 	httpClient, connectOpts, _ := plumbing(cfg)
 	return &CatalogClient{
-		rpc: forav1connect.NewCatalogServiceClient(httpClient, baseURL, connectOpts...),
+		rpc:     forav1connect.NewCatalogServiceClient(httpClient, baseURL, connectOpts...),
+		baseURL: baseURL,
+		raw:     newRawLeg(cfg, httpClient),
 	}
 }
 
@@ -79,8 +83,11 @@ func NewCatalogClient(baseURL string, opts ...ClientOption) *CatalogClient {
 // Exchange's own run is the deciding one. A push it refuses as a whole comes
 // back as a non-OK call whose typed reason, when the Exchange attaches one, is
 // readable through ErrorDetailFrom as a CatalogRejection.
-func (c *CatalogClient) PushResources(ctx context.Context, req *forav1.PushResourcesRequest) (*forav1.PushResourcesResponse, error) {
+func (c *CatalogClient) PushResources(ctx context.Context, req *forav1.PushResourcesRequest, opts ...CallOption) (*forav1.PushResourcesResponse, error) {
 	const op = "push resources"
+	if cc := resolveCall(opts); cc.rawSet {
+		return rawCall[forav1.PushResourcesResponse](ctx, c.raw, op, c.baseURL, forav1connect.CatalogServicePushResourcesProcedure, cc.rawBody)
+	}
 	if req == nil {
 		return nil, malformed(op, errors.New("request is nil"))
 	}
@@ -102,8 +109,11 @@ func (c *CatalogClient) PushResources(ctx context.Context, req *forav1.PushResou
 // RemoveResources removes the catalog entries the request's paths name. Same
 // envelope rule as PushResources: `ver` filled when empty, no idempotency key,
 // `exchange` required and refused locally when it is not a bare domain.
-func (c *CatalogClient) RemoveResources(ctx context.Context, req *forav1.RemoveResourcesRequest) (*forav1.RemoveResourcesResponse, error) {
+func (c *CatalogClient) RemoveResources(ctx context.Context, req *forav1.RemoveResourcesRequest, opts ...CallOption) (*forav1.RemoveResourcesResponse, error) {
 	const op = "remove resources"
+	if cc := resolveCall(opts); cc.rawSet {
+		return rawCall[forav1.RemoveResourcesResponse](ctx, c.raw, op, c.baseURL, forav1connect.CatalogServiceRemoveResourcesProcedure, cc.rawBody)
+	}
 	if req == nil {
 		return nil, malformed(op, errors.New("request is nil"))
 	}
@@ -124,8 +134,11 @@ func (c *CatalogClient) RemoveResources(ctx context.Context, req *forav1.RemoveR
 
 // RefreshCatalog asks the Exchange to refresh the tenant's catalog from its
 // configured sources. Same envelope rule as PushResources.
-func (c *CatalogClient) RefreshCatalog(ctx context.Context, req *forav1.RefreshCatalogRequest) (*forav1.RefreshCatalogResponse, error) {
+func (c *CatalogClient) RefreshCatalog(ctx context.Context, req *forav1.RefreshCatalogRequest, opts ...CallOption) (*forav1.RefreshCatalogResponse, error) {
 	const op = "refresh catalog"
+	if cc := resolveCall(opts); cc.rawSet {
+		return rawCall[forav1.RefreshCatalogResponse](ctx, c.raw, op, c.baseURL, forav1connect.CatalogServiceRefreshCatalogProcedure, cc.rawBody)
+	}
 	if req == nil {
 		return nil, malformed(op, errors.New("request is nil"))
 	}
diff --git a/sdk/go/connect/client.go b/sdk/go/connect/client.go
index c57e24dd..1e195b77 100644
--- a/sdk/go/connect/client.go
+++ b/sdk/go/connect/client.go
@@ -42,6 +42,13 @@ type Client struct {
 	requirements RegistrationRequirementsReader
 	// fetcher is the content leg. It dials, so it lives one tier down.
 	fetcher *resolvers.ContentFetcher
+
+	// baseURL is the home Exchange's origin, which a raw call addresses directly.
+	baseURL string
+	// raw and rawPool are the home and offer-derived legs a raw call is sent over.
+	raw, rawPool rawLeg
+	// deliveries verifies the retrieval URLs a purchase answers with.
+	deliveries deliveryVerifier
 }
 
 // resolvedConfig applies opts over the defaults every client shares.
@@ -91,10 +98,15 @@ func plumbing(cfg clientConfig) (*http.Client, []connectrpc.ClientOption, core.V
 func NewClient(baseURL string, opts ...ClientOption) *Client {
 	cfg := resolvedConfig(opts...)
 	httpClient, connectOpts, verifier := plumbing(cfg)
+	pooled := offerDerivedClient(cfg, resolvers.NewGuardedTransport(cfg.guardedBase))
 	return &Client{
-		rpc:      forav1connect.NewExchangeServiceClient(httpClient, baseURL, connectOpts...),
-		verifier: verifier,
-		cfg:      cfg,
+		rpc:        forav1connect.NewExchangeServiceClient(httpClient, baseURL, connectOpts...),
+		verifier:   verifier,
+		cfg:        cfg,
+		baseURL:    baseURL,
+		raw:        newRawLeg(cfg, httpClient),
+		rawPool:    newRawLeg(cfg, pooled),
+		deliveries: newDeliveryVerifier(cfg),
 		// A SECOND signing client for the offer-derived leg, over the guarded
 		// transport: the caller names a domain, the manifest it serves names an
 		// endpoint, and a signed call then goes there. Without the guard one hop
@@ -104,8 +116,7 @@ func NewClient(baseURL string, opts ...ClientOption) *Client {
 		// it carries its own deadline, because an offer-named Exchange that accepts
 		// a connection and then never answers would otherwise hold the call, a
 		// goroutine and a socket open indefinitely.
-		exchanges: newExchangePool(
-			offerDerivedClient(cfg, resolvers.NewGuardedTransport(cfg.guardedBase)), connectOpts...),
+		exchanges:    newExchangePool(pooled, connectOpts...),
 		endpoints:    cfg.resolveEndpointResolver(),
 		requirements: cfg.resolveRequirementsReader(),
 		fetcher: resolvers.NewContentFetcher(resolvers.ContentFetchOptions{
@@ -132,7 +143,14 @@ func signedHTTPClient(cfg clientConfig, base http.RoundTripper) *http.Client {
 		base = http.DefaultTransport
 	}
 	signed := *cfg.httpClient
-	signed.Transport = core.NewSigningTransport(cfg.signer, base, signingOptions(cfg)...)
+	var transport http.RoundTripper = core.NewSigningTransport(cfg.signer, base, signingOptions(cfg)...)
+	// The hook sits immediately in front of the signer, so the bytes it returns are
+	// the bytes signed, and behind the answer recorder, which must see the response
+	// whatever the hook did.
+	if cfg.beforeSign != nil {
+		transport = beforeSignTransport{hook: cfg.beforeSign, next: transport}
+	}
+	signed.Transport = answerRecorder{next: transport}
 	signed.CheckRedirect = refuseRPCRedirect
 	return &signed
 }
@@ -191,8 +209,22 @@ func offerDerivedClient(cfg clientConfig, base http.RoundTripper) *http.Client {
 // if the shared validator fails to build, which is a programmer/config error, not
 // a runtime condition.
 func clientInterceptors(cfg clientConfig) []connectrpc.Interceptor {
-	out := []connectrpc.Interceptor{newRequestIDInterceptor(cfg.requestID)}
-	if cfg.validation == ValidationStrict {
+	return interceptorStack(cfg, cfg.validation == ValidationStrict)
+}
+
+// interceptorStack is the stack every client is built with, optionally without
+// the validate interceptor. A raw call leaves it out: its request is caller bytes,
+// not a message to validate, and the answer still passes strict decoding.
+//
+// answerInterceptor is OUTERMOST so it observes the failure every inner layer
+// produced; strictInterceptor sits inside it, so a refused OK answer is never
+// mistaken for one the peer refused.
+func interceptorStack(cfg clientConfig, validateRequests bool) []connectrpc.Interceptor {
+	out := []connectrpc.Interceptor{answerInterceptor{}, newRequestIDInterceptor(cfg.requestID)}
+	if cfg.strictDecoding {
+		out = append(out, strictInterceptor{})
+	}
+	if validateRequests {
 		if v, err := NewValidateInterceptor(); err == nil {
 			out = append(out, v)
 		}
@@ -224,8 +256,22 @@ func clientInterceptors(cfg clientConfig) []connectrpc.Interceptor {
 // purpose — the point of the field is to state whom the SENDER meant, and a
 // value the transport filled in from the address it was already dialling would
 // restate the dial target instead of checking it.
-func (c *Client) Discover(ctx context.Context, query *forav1.ResourceQuery) (core.DiscoveryResult, error) {
+//
+// WithRawBody sends caller bytes instead; the answer's offers are still verified.
+func (c *Client) Discover(ctx context.Context, query *forav1.ResourceQuery, opts ...CallOption) (core.DiscoveryResult, error) {
 	const op = "discover"
+	if cc := resolveCall(opts); cc.rawSet {
+		msg, err := rawCall[forav1.ResourceResponse](ctx, c.raw, op, c.baseURL,
+			forav1connect.ExchangeServiceDiscoverResourcesProcedure, cc.rawBody)
+		if err != nil {
+			return core.DiscoveryResult{}, err
+		}
+		// The flat fallback attributes its offers to the query's only URI, read off
+		// the raw body when it decodes as a query.
+		sent := &forav1.ResourceQuery{}
+		_ = proto.UnmarshalOptions{DiscardUnknown: true}.Unmarshal(cc.rawBody, sent)
+		return c.discoveryResult(ctx, sent, msg), nil
+	}
 	if query == nil {
 		return core.DiscoveryResult{}, malformed(op, errors.New("query is nil"))
 	}
@@ -238,12 +284,15 @@ func (c *Client) Discover(ctx context.Context, query *forav1.ResourceQuery) (cor
 	if err != nil {
 		return core.DiscoveryResult{}, sendError(op, err)
 	}
-	msg := resp.Msg
+	return c.discoveryResult(ctx, sent, resp.Msg), nil
+}
+
+func (c *Client) discoveryResult(ctx context.Context, sent *forav1.ResourceQuery, msg *forav1.ResourceResponse) core.DiscoveryResult {
 	return core.DiscoveryResult{
 		Groups:    c.discoveredGroups(ctx, sent, msg),
 		Exchange:  msg.GetExchange(),
 		RateLimit: msg.GetRateLimit(),
-	}, nil
+	}
 }
 
 // discoveredGroups folds a ResourceResponse's two offer representations into the
@@ -276,16 +325,35 @@ func (c *Client) discoveredGroups(ctx context.Context, query *forav1.ResourceQue
 	return []core.OfferGroupResult{{URI: uri, Result: c.verifier.Sort(ctx, flat)}}
 }
 
-// CallOption tunes a single state-mutating call.
+// CallOption tunes a single call: the idempotency key of a state-mutating call,
+// raw mode, and the delivery options of a purchase or a fetch. Every verb takes
+// them; an option that does not apply to a verb is inert there.
 type CallOption func(*callConfig)
 
 // ExecuteOption is the original name for CallOption, kept because the option set
-// is identical across execute, report and dispute — the three RPCs the protocol
-// requires an idempotency key on.
+// began as the one shared by execute, report and dispute — the three RPCs the
+// protocol requires an idempotency key on.
 type ExecuteOption = CallOption
 
 type callConfig struct {
 	idempotencyKey string
+	// rawBody, when rawSet, replaces the request the verb would build (WithRawBody).
+	rawBody []byte
+	rawSet  bool
+	// deliveries receives the verified retrieval URLs of a purchase (WithDeliveries).
+	deliveries *[]Delivery
+	// deliveryExchange names the Exchange a fetched URL is verified against
+	// (WithDeliveryExchange).
+	deliveryExchange string
+}
+
+// resolveCall applies a call's options.
+func resolveCall(opts []CallOption) callConfig {
+	var cc callConfig
+	for _, o := range opts {
+		o(&cc)
+	}
+	return cc
 }
 
 // WithIdempotencyKey pins the idempotency key for this call. Reusing a key makes
@@ -305,10 +373,7 @@ func WithIdempotencyKey(key string) CallOption {
 // pinned for this call, then whatever the caller already put on the message, then
 // a freshly minted one.
 func idempotencyKeyFor(opts []CallOption, onMessage string) (string, error) {
-	var cc callConfig
-	for _, o := range opts {
-		o(&cc)
-	}
+	cc := resolveCall(opts)
 	if cc.idempotencyKey != "" {
 		return cc.idempotencyKey, nil
 	}
@@ -327,6 +392,16 @@ func idempotencyKeyFor(opts []CallOption, onMessage string) (string, error) {
 //
 // Items-only wire shape: a single offer is the degenerate 1-element items list.
 // ExecuteBatch buys several offers from the same Exchange in one request.
+//
+// Every retrieval_endpoint in the answer is verified before it is returned: its
+// Ed25519 signature against the URL-signing key the issuing Exchange publishes in
+// its WBA directory (the URL's kid names it), its agent_id binding against this
+// agent's key and the answer's agent_identity_hash, and its expiry. A URL that does
+// not verify fails the call as CallMalformed, with a retrieval_auth_failure detail
+// naming the reason; the purchase itself was made, so the item's transaction id is
+// in the error. WithDeliveries receives the verified bindings, and
+// WithDeliveryVerification(core.Off) is the opt-out for URLs in a signing scheme a
+// WBA directory cannot verify.
 func (c *Client) Execute(ctx context.Context, offer core.VerifiedOffer, opts ...CallOption) (*forav1.TransactionResponse, error) {
 	return c.executeDirect(ctx, "execute", []core.VerifiedOffer{offer}, opts)
 }
@@ -345,6 +420,11 @@ func (c *Client) ExecuteBatch(ctx context.Context, offers []core.VerifiedOffer,
 }
 
 func (c *Client) executeDirect(ctx context.Context, op string, offers []core.VerifiedOffer, opts []CallOption) (*forav1.TransactionResponse, error) {
+	cc := resolveCall(opts)
+	if cc.rawSet {
+		return rawCall[forav1.TransactionResponse](ctx, c.raw, op, c.baseURL,
+			forav1connect.ExchangeServiceExecuteTransactionProcedure, cc.rawBody)
+	}
 	if err := requireOneExchange(op, offers); err != nil {
 		return nil, err
 	}
@@ -358,6 +438,10 @@ func (c *Client) executeDirect(ctx context.Context, op string, offers []core.Ver
 	if err != nil {
 		return nil, sendError(op, err)
 	}
+	if err := c.deliveries.deliver(ctx, op, resp.Msg.GetItems(), offerExchange(offers),
+		func(string) string { return resp.Msg.GetAgentIdentityHash() }, cc.deliveries); err != nil {
+		return nil, err
+	}
 	return resp.Msg, nil
 }
 
diff --git a/sdk/go/connect/connect_error_corpus_test.go b/sdk/go/connect/connect_error_corpus_test.go
index 20f47b05..14eaffcc 100644
--- a/sdk/go/connect/connect_error_corpus_test.go
+++ b/sdk/go/connect/connect_error_corpus_test.go
@@ -64,9 +64,16 @@ func TestConnectErrorCorpusReplay(t *testing.T) {
 			// BEFORE the early return, because the row that carries no detail is the one
 			// this column exists for: its envelope has a `message` of its own and the
 			// client must still report none.
-			if got := peerMessageServing(t, v); got != v.PeerMessage {
+			callErr := clientFailureServing(t, v)
+			if got := callErr.PeerMessage; got != v.PeerMessage {
 				t.Errorf("peer message = %q, want %q", got, v.PeerMessage)
 			}
+			// The Connect code of the peer's answer, as its own field — every row,
+			// the derived ones included, because the code rides on the envelope and
+			// not on the detail.
+			if got := callErr.Code.String(); got != v.Code {
+				t.Errorf("code = %q, want %q", got, v.Code)
+			}
 			if !ok {
 				return
 			}
@@ -128,8 +135,8 @@ func callServing(t *testing.T, v connectErrorVector) error {
 	return err
 }
 
-// peerMessageServing serves the same recorded envelope and reads the peer's sentence back
-// off the CLIENT's own failure, which is where the field lives — one tier above the
+// clientFailureServing serves the same recorded envelope and returns the CLIENT's own
+// failure, which is where the peer's sentence and the Connect code live — one tier above the
 // ErrorDetail the rest of this replay projects.
 //
 // The rule it pins is provenance: the field carries a message the PEER emitted and
@@ -138,7 +145,7 @@ func callServing(t *testing.T, v connectErrorVector) error {
 // envelope would make its value a property of the language rather than of the answer —
 // which is the drift a shared corpus exists to catch, and could not have caught while
 // each language was faithfully reporting its own transport.
-func peerMessageServing(t *testing.T, v connectErrorVector) string {
+func clientFailureServing(t *testing.T, v connectErrorVector) *foraconnect.CallError {
 	t.Helper()
 	body, err := json.Marshal(v.Envelope)
 	if err != nil {
@@ -157,5 +164,5 @@ func peerMessageServing(t *testing.T, v connectErrorVector) string {
 	if !errors.As(derr, &callErr) {
 		t.Fatalf("the client did not report a typed failure: %v", derr)
 	}
-	return callErr.PeerMessage
+	return callErr
 }
diff --git a/sdk/go/connect/delivery.go b/sdk/go/connect/delivery.go
new file mode 100644
index 00000000..ac08f7cb
--- /dev/null
+++ b/sdk/go/connect/delivery.go
@@ -0,0 +1,252 @@
+package connect
+
+import (
+	"context"
+	"crypto/ed25519"
+	"errors"
+	"fmt"
+	"net/url"
+	"strconv"
+	"strings"
+	"time"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
+)
+
+// Delivery is a retrieval URL whose signature, agent binding and expiry this client
+// verified: the URL, the Exchange whose URL-signing key verified it, and the
+// verified binding — the agent thumbprint it is bound to ("" for a bearer URL), the
+// key id, and the expiry.
+type Delivery struct {
+	URL      string
+	Exchange string
+	helpers.VerifiedURL
+}
+
+// WithDeliveryKeyResolver injects the resolver for an Exchange's URL-signing keys.
+// A delivery URL names its key with the kid parameter, an RFC 7638 thumbprint, and
+// the key is published in the issuing Exchange's WBA key directory; the resolver
+// is called with the Exchange's domain as the context's Signature-Agent
+// (helpers.WithSignatureAgent), which is how resolvers.WBAKeyResolver is told
+// which directory to read. It defaults to an SSRF-guarded WBAKeyResolver.
+func WithDeliveryKeyResolver(r helpers.KeyResolver) ClientOption {
+	return func(c *clientConfig) { c.deliveryKeys = r }
+}
+
+// WithDeliveryVerification sets whether delivery URLs are verified. The default is
+// core.Strict; core.Off is the single named opt-out, for a deployment whose
+// delivery URLs use a signing scheme other than the protocol's Ed25519 URL
+// signature (a CloudFront RSA signed URL, which a WBA directory cannot verify).
+func WithDeliveryVerification(m core.Mode) ClientOption {
+	return func(c *clientConfig) { c.deliveryMode = m }
+}
+
+// WithDeliveries receives the verified retrieval URLs of a purchase: on success,
+// *out is set to one Delivery per result item, index-aligned with the response's
+// items, with the zero Delivery for an item that carries no retrieval_endpoint (a
+// denial, an upstream refusal, a delivery method that is not a signed URL). It is
+// an out-parameter rather than a second return value so Execute keeps its
+// signature; it is left untouched when the call fails or delivery verification is
+// off.
+func WithDeliveries(out *[]Delivery) CallOption {
+	return func(c *callConfig) { c.deliveries = out }
+}
+
+// WithDeliveryExchange names the Exchange that issued the URL a Fetch retrieves, so
+// the URL is verified against that Exchange's URL-signing key — and bound to this
+// agent, and unexpired — before anything is sent, and the returned Content carries
+// the verified binding. A Fetch without it sends the URL as given.
+func WithDeliveryExchange(exchange string) CallOption {
+	return func(c *callConfig) { c.deliveryExchange = exchange }
+}
+
+// deliveryVerifier holds what verifying a delivery URL takes.
+type deliveryVerifier struct {
+	keys  helpers.KeyResolver
+	mode  core.Mode
+	agent string // this agent's thumbprint
+	now   func() time.Time
+}
+
+func newDeliveryVerifier(cfg clientConfig) deliveryVerifier {
+	keys := cfg.deliveryKeys
+	if keys == nil {
+		keys = resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{})
+	}
+	return deliveryVerifier{keys: keys, mode: cfg.deliveryMode, agent: agentThumbprint(cfg), now: time.Now}
+}
+
+// agentThumbprint is the identity a delivery URL must be bound to: the thumbprint
+// of the agent key when one is configured, else the signer's keyid, which the
+// protocol defines as that same thumbprint.
+func agentThumbprint(cfg clientConfig) string {
+	if len(cfg.agentKey) == ed25519.PublicKeySize {
+		if tp, err := helpers.Thumbprint(cfg.agentKey); err == nil {
+			return tp
+		}
+	}
+	if cfg.signer != nil {
+		return cfg.signer.KeyID()
+	}
+	return ""
+}
+
+// deliveryRefusal is one verification failure, mapped onto the retrieval-auth
+// reason an edge would answer for the same URL.
+type deliveryRefusal struct {
+	reason forav1.RetrievalAuthFailureReason
+	err    error
+}
+
+// verify checks one delivery URL issued by exchange. stated is the
+// agent_identity_hash the response claimed the URL is bound to ("" when none).
+func (d deliveryVerifier) verify(ctx context.Context, rawURL, exchange, stated string) (Delivery, *deliveryRefusal, error) {
+	q := deliveryParams(rawURL)
+	if q.Get("sig") == "" {
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING,
+			"the URL carries no signature"), nil
+	}
+	exp, err := strconv.ParseInt(q.Get("exp"), 10, 64)
+	if err != nil {
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING,
+			"the URL carries no usable expiry"), nil
+	}
+	// Expiry before the key is resolved: a dead URL is refused without a directory
+	// fetch, and the reason a caller acts on is the same either way.
+	if !time.Unix(exp, 0).After(d.now()) {
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED,
+			"the URL has expired"), nil
+	}
+	kid := q.Get("kid")
+	if kid == "" {
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH,
+			"the URL names no key (kid)"), nil
+	}
+	pub, err := d.keys.Resolve(helpers.WithSignatureAgent(ctx, exchange), kid)
+	if err != nil {
+		if errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+			return Delivery{}, nil, fmt.Errorf("read the key directory of %s: %w", exchange, err)
+		}
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH,
+			fmt.Sprintf("%s publishes no usable key %q: %v", exchange, kid, err)), nil
+	}
+	verified, err := helpers.VerifyURLEd25519(rawURL, pub, d.now())
+	switch {
+	case errors.Is(err, helpers.ErrURLExpired):
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED, err.Error()), nil
+	case err != nil:
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH,
+			fmt.Sprintf("the URL signature does not verify under %s's key %q", exchange, kid)), nil
+	}
+	if verified.AgentID != "" && verified.AgentID != d.agent {
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH,
+			fmt.Sprintf("the URL is bound to agent %q, not to this agent (%q)", verified.AgentID, d.agent)), nil
+	}
+	if stated != "" && verified.AgentID != stated {
+		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH,
+			fmt.Sprintf("the answer binds its URLs to %q, and this URL to %q", stated, verified.AgentID)), nil
+	}
+	return Delivery{URL: rawURL, Exchange: exchange, VerifiedURL: verified}, nil, nil
+}
+
+func refuse(reason forav1.RetrievalAuthFailureReason, msg string) *deliveryRefusal {
+	return &deliveryRefusal{reason: reason, err: errors.New(msg)}
+}
+
+// deliveryParams reads the query of a signed URL the way the signer wrote it: the
+// bytes after the first '?', parsed as a query string. An unparseable query reads
+// as empty, which refuses the URL as unsigned.
+func deliveryParams(rawURL string) url.Values {
+	_, rawQuery, _ := strings.Cut(rawURL, "?")
+	q, err := url.ParseQuery(rawQuery)
+	if err != nil {
+		return url.Values{}
+	}
+	return q
+}
+
+// deliveryError turns a verification failure into the client's typed failure: a
+// refusal is CallMalformed with a synthesized retrieval_auth_failure detail, a
+// directory that could not be read is CallUnreachable. item names the result item.
+func deliveryError(op, item string, refusal *deliveryRefusal, err error) error {
+	if refusal == nil {
+		return &CallError{Kind: CallUnreachable, Op: op, Err: fmt.Errorf("verify %s: %w", item, err)}
+	}
+	msg := fmt.Sprintf("delivery URL of %s does not verify: %v", item, refusal.err)
+	return &CallError{
+		Kind:   CallMalformed,
+		Op:     op,
+		Err:    errors.New(msg),
+		Detail: helpers.RetrievalAuthFailureDetail(clientErrorDomain, msg, refusal.reason),
+	}
+}
+
+// verifyItems verifies the retrieval URL of every result item. exchangeOf names
+// the Exchange that issued item i, and statedOf the agent_identity_hash the answer
+// claims for that Exchange.
+func (d deliveryVerifier) verifyItems(
+	ctx context.Context, op string, items []*forav1.TransactionResultItem,
+	exchangeOf func(i int, item *forav1.TransactionResultItem) string, statedOf func(exchange string) string,
+) ([]Delivery, error) {
+	out := make([]Delivery, len(items))
+	for i, item := range items {
+		endpoint := item.GetRetrievalEndpoint()
+		if endpoint == "" {
+			continue
+		}
+		exchange := exchangeOf(i, item)
+		got, refusal, err := d.verify(ctx, endpoint, exchange, statedOf(exchange))
+		if refusal != nil || err != nil {
+			label := fmt.Sprintf("item %d (transaction %q)", i, item.GetTransactionId())
+			return nil, deliveryError(op, label, refusal, err)
+		}
+		out[i] = got
+	}
+	return out, nil
+}
+
+// offerExchange names the Exchange that issued result item i of a purchase of
+// offers: the offer at the same index, or the offer with the same offer_id when
+// the answer does not line up with the request.
+func offerExchange(offers []core.VerifiedOffer) func(int, *forav1.TransactionResultItem) string {
+	return func(i int, item *forav1.TransactionResultItem) string {
+		if len(offers) == 0 {
+			return ""
+		}
+		if len(offers) > i && offers[i].Offer().GetOfferId() == item.GetOfferId() {
+			return offers[i].Offer().GetExchange()
+		}
+		for _, o := range offers {
+			if o.Offer().GetOfferId() == item.GetOfferId() {
+				return o.Offer().GetExchange()
+			}
+		}
+		if len(offers) > i {
+			return offers[i].Offer().GetExchange()
+		}
+		return offers[0].Offer().GetExchange()
+	}
+}
+
+// deliver verifies a purchase's retrieval URLs unless verification is off, and
+// hands them to the caller's WithDeliveries out-parameter.
+func (d deliveryVerifier) deliver(
+	ctx context.Context, op string, items []*forav1.TransactionResultItem,
+	exchangeOf func(int, *forav1.TransactionResultItem) string, statedOf func(string) string,
+	out *[]Delivery,
+) error {
+	if d.mode == core.Off {
+		return nil
+	}
+	got, err := d.verifyItems(ctx, op, items, exchangeOf, statedOf)
+	if err != nil {
+		return err
+	}
+	if out != nil {
+		*out = got
+	}
+	return nil
+}
diff --git a/sdk/go/connect/delivery_test.go b/sdk/go/connect/delivery_test.go
new file mode 100644
index 00000000..a58c8f24
--- /dev/null
+++ b/sdk/go/connect/delivery_test.go
@@ -0,0 +1,267 @@
+package connect_test
+
+// Delivery verification, through the real client against one in-process Exchange:
+// a real Connect ExchangeService handler behind the SDK's server verify face, and
+// the Exchange's own WBA key directory publishing the key it signs delivery URLs
+// with. The client resolves that key through the SDK's WBA resolver, so every case
+// exercises the path a deployment runs.
+
+import (
+	"context"
+	"crypto/ed25519"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"sync/atomic"
+	"testing"
+	"time"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/encoding/protojson"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
+	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
+)
+
+// deliveringExchange answers a purchase with one item whose retrieval URL is
+// produced by url — the knob each case turns.
+type deliveringExchange struct {
+	forav1connect.UnimplementedExchangeServiceHandler
+	url    func() string
+	stated string
+}
+
+func (d *deliveringExchange) ExecuteTransaction(
+	context.Context, *connectrpc.Request[forav1.TransactionRequest],
+) (*connectrpc.Response[forav1.TransactionResponse], error) {
+	endpoint := d.url()
+	return connectrpc.NewResponse(&forav1.TransactionResponse{
+		Ver:               helpers.ProtocolVersion,
+		AgentIdentityHash: d.stated,
+		Items: []*forav1.TransactionResultItem{
+			{OfferId: "offer-1", TransactionId: "tx-1", RetrievalEndpoint: &endpoint},
+			// A denied item carries no URL and gets the zero Delivery.
+			{OfferId: "offer-2", DenialReason: forav1.DenialReason_DENIAL_REASON_RATE_LIMITED.Enum()},
+		},
+	}), nil
+}
+
+// deliveryFixture is the Exchange, its URL-signing key and the agent buying from it.
+type deliveryFixture struct {
+	sig      signingFixture
+	exchange string // the bare domain, which is the Exchange's identity
+	origin   *deliveringExchange
+	key      ed25519.PrivateKey
+	keyID    string
+	content  *httptest.Server
+	fetches  *atomic.Int64
+}
+
+func newDeliveryFixture(t *testing.T) *deliveryFixture {
+	t.Helper()
+	sig := newSigningFixture(t)
+	key, keyID, err := helpers.GenerateKey()
+	if err != nil {
+		t.Fatal(err)
+	}
+	f := &deliveryFixture{sig: sig, key: key, keyID: keyID, origin: &deliveringExchange{stated: sig.keyID}, fetches: &atomic.Int64{}}
+	doc, err := protojson.MarshalOptions{UseProtoNames: true}.Marshal(
+		helpers.DirectoryDocument([]ed25519.PublicKey{key.Public().(ed25519.PublicKey)}, 0, time.Now()))
+	if err != nil {
+		t.Fatal(err)
+	}
+	path, h := foraserver.NewExchangeServiceHandler(f.origin, foraserver.WithKeyResolver(sig.resolver))
+	mux := http.NewServeMux()
+	mux.Handle(path, h)
+	mux.HandleFunc("/.well-known/http-message-signatures-directory", func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write(doc)
+	})
+	srv := httptest.NewServer(mux)
+	t.Cleanup(srv.Close)
+	f.exchange = strings.TrimPrefix(srv.URL, "http://")
+	f.content = httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		f.fetches.Add(1)
+		w.Header().Set("Content-Type", "text/plain")
+		_, _ = w.Write([]byte("licensed bytes"))
+	}))
+	t.Cleanup(f.content.Close)
+	f.origin.url = func() string { return f.sign(t, f.key, f.keyID, sig.keyID, time.Hour) }
+	return f
+}
+
+// sign issues a delivery URL for the content server.
+func (f *deliveryFixture) sign(t *testing.T, key ed25519.PrivateKey, keyID, agent string, ttl time.Duration) string {
+	t.Helper()
+	signed, err := helpers.SignURLEd25519(key, keyID, f.content.URL+"/doc", agent, time.Now().Add(ttl))
+	if err != nil {
+		t.Fatal(err)
+	}
+	return signed.URL
+}
+
+func (f *deliveryFixture) client(t *testing.T, extra ...foraconnect.ClientOption) *foraconnect.Client {
+	t.Helper()
+	opts := append(allowLoopback(t),
+		foraconnect.WithSigner(f.sig.signer),
+		foraconnect.WithAgentKey(f.sig.pub),
+		foraconnect.WithRequester(testRequester()),
+		foraconnect.WithDeliveryKeyResolver(resolvers.NewWBAKeyResolver(
+			resolvers.WBAKeyResolverOptions{Scheme: "http", HTTP: http.DefaultClient})),
+	)
+	return foraconnect.NewClient("http://"+f.exchange, append(opts, extra...)...)
+}
+
+func (f *deliveryFixture) offers(t *testing.T) []core.VerifiedOffer {
+	t.Helper()
+	return []core.VerifiedOffer{
+		signedOfferAt(t, "offer-1", f.exchange, "USD"),
+		signedOfferAt(t, "offer-2", f.exchange, "USD"),
+	}
+}
+
+// A URL that verifies is handed back with its verified binding, and a fetch that
+// names the Exchange carries the same binding on its Content.
+func TestExecute_VerifiesTheDeliveryURL(t *testing.T) {
+	f := newDeliveryFixture(t)
+	client := f.client(t)
+	var deliveries []foraconnect.Delivery
+	resp, err := client.ExecuteBatch(context.Background(), f.offers(t), foraconnect.WithDeliveries(&deliveries))
+	if err != nil {
+		t.Fatalf("ExecuteBatch: %v", err)
+	}
+	if len(deliveries) != 2 {
+		t.Fatalf("deliveries = %v, want one per item", deliveries)
+	}
+	got := deliveries[0]
+	if got.URL != resp.GetItems()[0].GetRetrievalEndpoint() || got.Exchange != f.exchange ||
+		got.AgentID != f.sig.keyID || got.KeyID != f.keyID || !got.Expiry.After(time.Now()) {
+		t.Errorf("delivery = %+v", got)
+	}
+	if deliveries[1] != (foraconnect.Delivery{}) {
+		t.Errorf("the denied item's delivery = %+v, want the zero value", deliveries[1])
+	}
+
+	content, err := client.Fetch(context.Background(), got.URL, foraconnect.WithDeliveryExchange(got.Exchange))
+	if err != nil {
+		t.Fatalf("Fetch: %v", err)
+	}
+	if content.Binding == nil || content.Binding.AgentID != f.sig.keyID {
+		t.Errorf("binding = %+v, want the verified one", content.Binding)
+	}
+	plain, err := client.Fetch(context.Background(), got.URL)
+	if err != nil || plain.Binding != nil {
+		t.Errorf("a fetch naming no Exchange = %+v, %v; want the URL fetched as given", plain.Binding, err)
+	}
+}
+
+// Every way a delivery URL can fail to verify refuses the purchase answer with the
+// retrieval-auth reason an edge would give the same URL.
+func TestExecute_RefusesADeliveryURLThatDoesNotVerify(t *testing.T) {
+	_, foreign, _ := ed25519.GenerateKey(nil)
+	cases := []struct {
+		name string
+		url  func(f *deliveryFixture, t *testing.T) string
+		want forav1.RetrievalAuthFailureReason
+	}{
+		{"signature by another key", func(f *deliveryFixture, t *testing.T) string {
+			return f.sign(t, foreign, f.keyID, f.sig.keyID, time.Hour)
+		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH},
+		{"bound to another agent", func(f *deliveryFixture, t *testing.T) string {
+			return f.sign(t, f.key, f.keyID, "someone-else", time.Hour)
+		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH},
+		{"bearer URL where the answer states a binding", func(f *deliveryFixture, t *testing.T) string {
+			return f.sign(t, f.key, f.keyID, "", time.Hour)
+		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH},
+		{"expired", func(f *deliveryFixture, t *testing.T) string {
+			return f.sign(t, f.key, f.keyID, f.sig.keyID, -time.Minute)
+		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED},
+		{"unsigned", func(f *deliveryFixture, _ *testing.T) string {
+			return f.content.URL + "/doc?exp=9999999999&kid=" + f.keyID
+		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			f := newDeliveryFixture(t)
+			f.origin.url = func() string { return c.url(f, t) }
+			_, err := f.client(t).ExecuteBatch(context.Background(), f.offers(t))
+			assertDeliveryRefusal(t, err, c.want)
+
+			// The same URL is refused by a fetch that names the Exchange, before
+			// anything is sent. A bearer URL is the exception: a fetch has no answer
+			// stating a binding, and the protocol lets an Exchange issue one.
+			if c.name == "bearer URL where the answer states a binding" {
+				return
+			}
+			_, err = f.client(t).Fetch(context.Background(), c.url(f, t), foraconnect.WithDeliveryExchange(f.exchange))
+			assertDeliveryRefusal(t, err, c.want)
+			if n := f.fetches.Load(); n != 0 {
+				t.Errorf("the edge was reached %d time(s) for a URL that does not verify", n)
+			}
+		})
+	}
+}
+
+func assertDeliveryRefusal(t *testing.T, err error, want forav1.RetrievalAuthFailureReason) {
+	t.Helper()
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
+		t.Fatalf("error = %v, want CallMalformed", err)
+	}
+	detail, ok := foraconnect.ErrorDetailFrom(err)
+	if !ok || detail.GetRetrievalAuthFailure().GetReason() != want {
+		t.Fatalf("detail = %v, want %v", detail, want)
+	}
+	if detail.GetDomain() != "fora.v1.Client" {
+		t.Errorf("domain = %q, want the client's own tier", detail.GetDomain())
+	}
+}
+
+// WithDeliveryVerification(core.Off) is the named opt-out for a URL in another
+// signing scheme.
+func TestExecute_DeliveryVerificationOff(t *testing.T) {
+	f := newDeliveryFixture(t)
+	f.origin.url = func() string { return f.content.URL + "/doc?Signature=rsa&Key-Pair-Id=K" }
+	_, err := f.client(t, foraconnect.WithDeliveryVerification(core.Off)).ExecuteBatch(context.Background(), f.offers(t))
+	if err != nil {
+		t.Fatalf("ExecuteBatch with verification off: %v", err)
+	}
+}
+
+// A relayed purchase verifies each URL against the Exchange that issued its offer
+// and the binding that Exchange's outcome states.
+func TestBrokerExecute_VerifiesEachExchangesDeliveryURL(t *testing.T) {
+	f := newDeliveryFixture(t)
+	good := f.sign(t, f.key, f.keyID, f.sig.keyID, time.Hour)
+	bad := f.sign(t, f.key, f.keyID, "someone-else", time.Hour)
+	answer := func(endpoint string) *forav1.BrokerTransactionResponse {
+		return &forav1.BrokerTransactionResponse{
+			Ver:       helpers.ProtocolVersion,
+			Items:     []*forav1.TransactionResultItem{{OfferId: "offer-1", TransactionId: "tx-1", RetrievalEndpoint: &endpoint}},
+			Exchanges: []*forav1.ExchangeOutcome{{Exchange: f.exchange, OfferIds: []string{"offer-1"}, AgentIdentityHash: f.sig.keyID}},
+		}
+	}
+	keys := foraconnect.WithDeliveryKeyResolver(resolvers.NewWBAKeyResolver(
+		resolvers.WBAKeyResolverOptions{Scheme: "http", HTTP: http.DefaultClient}))
+	offers := []core.VerifiedOffer{signedOfferAt(t, "offer-1", f.exchange, "USD")}
+
+	srv := serveBroker(t, f.sig, &relayBroker{answer: answer(good)})
+	var deliveries []foraconnect.Delivery
+	if _, err := brokerClient(srv.URL, f.sig, keys).Execute(context.Background(), offers,
+		foraconnect.WithDeliveries(&deliveries)); err != nil {
+		t.Fatalf("Execute: %v", err)
+	}
+	if len(deliveries) != 1 || deliveries[0].Exchange != f.exchange || deliveries[0].AgentID != f.sig.keyID {
+		t.Errorf("deliveries = %+v", deliveries)
+	}
+
+	srv = serveBroker(t, f.sig, &relayBroker{answer: answer(bad)})
+	_, err := brokerClient(srv.URL, f.sig, keys).Execute(context.Background(), offers)
+	assertDeliveryRefusal(t, err, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH)
+}
diff --git a/sdk/go/connect/options.go b/sdk/go/connect/options.go
index 23828a56..a2efd750 100644
--- a/sdk/go/connect/options.go
+++ b/sdk/go/connect/options.go
@@ -40,6 +40,17 @@ type clientConfig struct {
 	connectOpts    []connectrpc.ClientOption
 	fetchTimeout   time.Duration
 	fetchMaxByte   int64
+
+	// beforeSign is the pre-signing hook (WithBeforeSign); nil runs none.
+	beforeSign BeforeSign
+	// strictDecoding refuses an answer with an unknown field or a broken rule
+	// (WithStrictDecoding).
+	strictDecoding bool
+	// deliveryKeys resolves the Exchange's URL-signing key a delivery URL names
+	// (WithDeliveryKeyResolver); nil means the guarded WBA directory resolver.
+	deliveryKeys helpers.KeyResolver
+	// deliveryMode is Strict unless WithDeliveryVerification turns it off.
+	deliveryMode core.Mode
 }
 
 // ClientOption configures a Client. Options are the ONLY way to inject the
diff --git a/sdk/go/connect/raw.go b/sdk/go/connect/raw.go
new file mode 100644
index 00000000..73787824
--- /dev/null
+++ b/sdk/go/connect/raw.go
@@ -0,0 +1,115 @@
+package connect
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"strings"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/proto"
+	"google.golang.org/protobuf/reflect/protoreflect"
+)
+
+// WithRawBody sends body in place of the request the verb would build — raw mode,
+// for a test that must put a message on the wire the SDK would never assemble.
+//
+// The bytes are sent exactly as given, as the binary protobuf body of the call
+// (application/proto, the encoding this client speaks). Nothing is filled in —
+// not ver, not the idempotency key, not the requester — and none of the local
+// refusals about the message apply: the recipient-shape check, the requester and
+// signer checks, the registration_data bounds and the terms-digest read, the
+// offer checks, and request validation. The call is still signed when a signer
+// is configured, still runs the pre-signing hook, and its answer is still read
+// under the read cap and decoded into the verb's response type, strict decoding
+// included.
+//
+// The verb's own message argument is ignored and may be nil (Execute's offer may
+// be the zero VerifiedOffer). A verb whose destination is read off the request —
+// ReportUsage, Dispute, Register, GetAccountStatus — reads `exchange` by decoding
+// the body as its request type, and routes it exactly as it routes a built
+// request; a body that does not decode, or names no exchange, is refused as
+// CallNotSent, because there is nowhere to send it. A purchase sent raw is not
+// tied to verified offers, so its delivery URLs are not verified.
+//
+// An empty body is a valid raw body: the empty message.
+func WithRawBody(body []byte) CallOption {
+	return func(c *callConfig) {
+		c.rawBody = append([]byte(nil), body...)
+		c.rawSet = true
+	}
+}
+
+// rawBody is the request type of a raw call: bytes the codec passes through.
+type rawBody struct{ b []byte }
+
+// rawCodec sends a rawBody verbatim and decodes the answer with the binary
+// protobuf codec, which keeps unknown fields for strict decoding to see. It takes
+// the name of connect-go's own binary codec, so the call carries the content type
+// a FORA server already accepts.
+type rawCodec struct{}
+
+func (rawCodec) Name() string { return "proto" }
+
+func (rawCodec) Marshal(v any) ([]byte, error) {
+	switch m := v.(type) {
+	case *rawBody:
+		return m.b, nil
+	case proto.Message:
+		return proto.Marshal(m)
+	default:
+		return nil, fmt.Errorf("connect: raw codec cannot marshal %T", v)
+	}
+}
+
+func (rawCodec) Unmarshal(data []byte, v any) error {
+	m, ok := v.(proto.Message)
+	if !ok {
+		return fmt.Errorf("connect: raw codec cannot unmarshal into %T", v)
+	}
+	return proto.Unmarshal(data, m)
+}
+
+// rawLeg is what a raw call is sent over: the leg's signing HTTP client, and the
+// client's Connect options with the validate interceptor left out and the raw
+// codec last, so it wins over a codec the caller configured.
+type rawLeg struct {
+	http connectrpc.HTTPClient
+	opts []connectrpc.ClientOption
+}
+
+func newRawLeg(cfg clientConfig, httpClient connectrpc.HTTPClient) rawLeg {
+	opts := append([]connectrpc.ClientOption{
+		connectrpc.WithInterceptors(interceptorStack(cfg, false)...),
+		connectrpc.WithReadMaxBytes(DefaultMaxRPCReadBytes),
+	}, cfg.connectOpts...)
+	return rawLeg{http: httpClient, opts: append(opts, connectrpc.WithCodec(rawCodec{}))}
+}
+
+// rawCall sends body to procedure at baseURL and decodes the answer as Res.
+func rawCall[Res any](ctx context.Context, leg rawLeg, op, baseURL, procedure string, body []byte) (*Res, error) {
+	client := connectrpc.NewClient[rawBody, Res](leg.http, strings.TrimRight(baseURL, "/")+procedure, leg.opts...)
+	resp, err := client.CallUnary(ctx, connectrpc.NewRequest(&rawBody{b: body}))
+	if err != nil {
+		return nil, sendError(op, err)
+	}
+	return resp.Msg, nil
+}
+
+// rawExchange reads the `exchange` member of a raw body decoded as msg's type, for
+// the verbs that route on it.
+func rawExchange(op string, body []byte, msg proto.Message) (string, error) {
+	if err := (proto.UnmarshalOptions{DiscardUnknown: true}).Unmarshal(body, msg); err != nil {
+		return "", notSent(op, fmt.Errorf("raw body does not decode as %s, so it names no exchange to route to: %w",
+			msg.ProtoReflect().Descriptor().FullName(), err))
+	}
+	fd := msg.ProtoReflect().Descriptor().Fields().ByName("exchange")
+	if fd == nil || fd.Kind() != protoreflect.StringKind {
+		return "", notSent(op, errors.New("raw body's message carries no exchange field"))
+	}
+	exchange := msg.ProtoReflect().Get(fd).String()
+	if exchange == "" {
+		return "", notSent(op, errors.New("raw body names no exchange to route to"))
+	}
+	return exchange, nil
+}
diff --git a/sdk/go/connect/raw_strict_test.go b/sdk/go/connect/raw_strict_test.go
new file mode 100644
index 00000000..27f30aca
--- /dev/null
+++ b/sdk/go/connect/raw_strict_test.go
@@ -0,0 +1,214 @@
+package connect_test
+
+// Raw mode and strict decoding, through the real client against real Connect
+// handlers behind the SDK's server verify face.
+
+import (
+	"bytes"
+	"context"
+	"errors"
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"sync"
+	"testing"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/encoding/protowire"
+	"google.golang.org/protobuf/proto"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// bodyRecorder records the request body every call carried, then hands the request
+// on unchanged.
+type bodyRecorder struct {
+	mu     sync.Mutex
+	bodies [][]byte
+	next   http.Handler
+}
+
+func (b *bodyRecorder) ServeHTTP(w http.ResponseWriter, r *http.Request) {
+	body, _ := io.ReadAll(r.Body)
+	b.mu.Lock()
+	b.bodies = append(b.bodies, body)
+	b.mu.Unlock()
+	r.Body = io.NopCloser(bytes.NewReader(body))
+	b.next.ServeHTTP(w, r)
+}
+
+func (b *bodyRecorder) last(t *testing.T) []byte {
+	t.Helper()
+	b.mu.Lock()
+	defer b.mu.Unlock()
+	if len(b.bodies) == 0 {
+		t.Fatal("the server received no request")
+	}
+	return b.bodies[len(b.bodies)-1]
+}
+
+// withUnknown appends an unknown varint field to a binary message.
+func withUnknown(b []byte) []byte {
+	b = protowire.AppendTag(b, 99, protowire.VarintType)
+	return protowire.AppendVarint(b, 7)
+}
+
+// Raw mode puts the caller's bytes on the wire exactly: no ver, no recipient check,
+// an unknown field kept. The call is still signed — the verify face admitted it —
+// and the answer is still decoded.
+func TestRawBody_SendsTheBodyUnchanged(t *testing.T) {
+	sig := newSigningFixture(t)
+	path, h := foraserver.NewCatalogServiceHandler(&strictCatalog{}, foraserver.WithKeyResolver(sig.resolver))
+	rec := &bodyRecorder{next: h}
+	mux := http.NewServeMux()
+	mux.Handle(path, rec)
+	srv := httptest.NewServer(mux)
+	t.Cleanup(srv.Close)
+
+	// No exchange and no ver: both are what the built path refuses or fills in.
+	msg, err := proto.Marshal(&forav1.PushResourcesRequest{TenantId: "t", Entries: []*forav1.ResourceEntry{catalogEntry()}})
+	if err != nil {
+		t.Fatal(err)
+	}
+	raw := withUnknown(msg)
+
+	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	resp, err := client.PushResources(context.Background(), nil, foraconnect.WithRawBody(raw))
+	if err != nil {
+		t.Fatalf("raw push: %v", err)
+	}
+	if resp.GetAccepted() != 1 {
+		t.Errorf("answer = %v, want it decoded", resp)
+	}
+	if got := rec.last(t); !bytes.Equal(got, raw) {
+		t.Errorf("server received %x, want the raw body %x", got, raw)
+	}
+
+	// The built path refuses the same message locally: it names no recipient.
+	var built forav1.PushResourcesRequest
+	_ = proto.Unmarshal(msg, &built)
+	_, err = client.PushResources(context.Background(), &built)
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallNotSent {
+		t.Fatalf("built push = %v, want CallNotSent", err)
+	}
+}
+
+// A raw body on a verb that routes on its request still routes on the body's own
+// exchange, and one that names none is refused, since there is nowhere to send it.
+func TestRawBody_RoutesOnTheBodysExchange(t *testing.T) {
+	sig := newSigningFixture(t)
+	origin := &groupExchange{}
+	domain, _ := selfAdvertisingExchange(t, sig, origin)
+	client := foraconnect.NewClient("http://home.invalid",
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+
+	body, _ := proto.Marshal(&forav1.UsageReport{Exchange: domain, TransactionId: "txn-raw"})
+	if _, err := client.ReportUsage(context.Background(), nil, foraconnect.WithRawBody(body)); err != nil {
+		t.Fatalf("raw report: %v", err)
+	}
+	if got := origin.gotReport; got.GetTransactionId() != "txn-raw" || got.GetVer() != "" || got.GetIdempotencyKey() != "" {
+		t.Errorf("origin received %v, want the body as sent, nothing stamped", got)
+	}
+
+	nowhere, _ := proto.Marshal(&forav1.UsageReport{TransactionId: "txn-raw"})
+	_, err := client.ReportUsage(context.Background(), nil, foraconnect.WithRawBody(nowhere))
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallNotSent {
+		t.Fatalf("error = %v, want CallNotSent", err)
+	}
+}
+
+// unknownCatalog answers a push carrying a field this SDK does not define.
+type unknownCatalog struct {
+	forav1connect.UnimplementedCatalogServiceHandler
+}
+
+func (unknownCatalog) PushResources(
+	context.Context, *connectrpc.Request[forav1.PushResourcesRequest],
+) (*connectrpc.Response[forav1.PushResourcesResponse], error) {
+	resp := &forav1.PushResourcesResponse{Ver: helpers.ProtocolVersion, Accepted: 1}
+	resp.ProtoReflect().SetUnknown(withUnknown(nil))
+	return connectrpc.NewResponse(resp), nil
+}
+
+// Strict decoding refuses an answer carrying an unknown field, which the default
+// decode keeps quietly.
+func TestStrictDecoding_RefusesAnUnknownField(t *testing.T) {
+	sig := newSigningFixture(t)
+	srv := serveCatalog(t, sig, unknownCatalog{})
+
+	lenient := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	if _, err := lenient.PushResources(context.Background(), validPush()); err != nil {
+		t.Fatalf("default decode refused the answer: %v", err)
+	}
+	strict := foraconnect.NewCatalogClient(srv.URL,
+		foraconnect.WithSigner(sig.signer), foraconnect.WithStrictDecoding())
+	_, err := strict.PushResources(context.Background(), validPush())
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
+		t.Fatalf("error = %v, want CallMalformed", err)
+	}
+	if cerr.Code != 0 {
+		t.Errorf("code = %v; the peer answered OK and reached no error verdict", cerr.Code)
+	}
+}
+
+// statusAccount answers an account status breaking a cross-field rule: a terms
+// digest with no account handle to hang it on.
+type statusAccount struct {
+	forav1connect.UnimplementedExchangeServiceHandler
+}
+
+func (statusAccount) GetAccountStatus(
+	context.Context, *connectrpc.Request[forav1.GetAccountStatusRequest],
+) (*connectrpc.Response[forav1.GetAccountStatusResponse], error) {
+	// A well-formed digest, so the cross-field rule is the only one broken.
+	digest := "sha256:" + strings.Repeat("0", 64)
+	return connectrpc.NewResponse(&forav1.GetAccountStatusResponse{
+		Ver: helpers.ProtocolVersion, TermsDigest: &digest,
+	}), nil
+}
+
+// Strict decoding applies the proto's cross-field rules to the answer.
+func TestStrictDecoding_RefusesACrossFieldViolation(t *testing.T) {
+	sig := newSigningFixture(t)
+	domain, _ := selfAdvertisingExchange(t, sig, statusAccount{})
+	req := &forav1.GetAccountStatusRequest{Exchange: domain}
+
+	lenient := foraconnect.NewClient("http://home.invalid", append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+	if _, err := lenient.GetAccountStatus(context.Background(), req); err != nil {
+		t.Fatalf("default decode refused the answer: %v", err)
+	}
+	strict := foraconnect.NewClient("http://home.invalid",
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithStrictDecoding())...)
+	_, err := strict.GetAccountStatus(context.Background(), req)
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
+		t.Fatalf("error = %v, want CallMalformed", err)
+	}
+	if !strings.Contains(err.Error(), "billing_ref") {
+		t.Errorf("error = %v, want the cross-field rule named", err)
+	}
+}
+
+// A peer that never answered has no Connect code, whatever connect-go synthesized
+// for the dial failure.
+func TestCallErrorCode_NoAnswerCarriesNoCode(t *testing.T) {
+	srv := httptest.NewServer(http.NotFoundHandler())
+	url := srv.URL
+	srv.Close()
+	_, err := foraconnect.NewClient(url).Discover(context.Background(), &forav1.ResourceQuery{Exchange: "exchange.test"})
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallUnreachable {
+		t.Fatalf("error = %v, want CallUnreachable", err)
+	}
+	if cerr.Code != 0 {
+		t.Errorf("code = %v for a peer that never answered, want none", cerr.Code)
+	}
+}
diff --git a/sdk/go/connect/strict.go b/sdk/go/connect/strict.go
new file mode 100644
index 00000000..8579f6cd
--- /dev/null
+++ b/sdk/go/connect/strict.go
@@ -0,0 +1,112 @@
+package connect
+
+import (
+	"context"
+	"fmt"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/proto"
+	"google.golang.org/protobuf/reflect/protoreflect"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// WithStrictDecoding makes every RPC answer pass two checks before a verb hands it
+// back, and refuses it as CallMalformed otherwise:
+//
+//   - no unknown field at any depth. The default decode keeps a field this SDK does
+//     not know as unknown bytes and moves on, which is right for a reader that must
+//     accept a newer protocol version and wrong for a conformance check, where an
+//     unknown field is a server sending something the contract does not define;
+//   - the proto's own rules, field-level and cross-field, applied by protovalidate.
+//
+// Both checks read the compiled descriptor, the one definition of the message
+// shape the Python and TypeScript clients reach through the published strict JSON
+// Schemas and the cross-field rules. Error answers are not affected: a refusal is
+// read the same way in either mode.
+//
+// It is independent of WithValidation, which governs the REQUEST and, under
+// ValidationStrict, re-validates the answer too; strict decoding adds the
+// unknown-field check that validation does not make.
+func WithStrictDecoding() ClientOption {
+	return func(c *clientConfig) { c.strictDecoding = true }
+}
+
+// strictDecodeError marks an answer strict decoding refused, so sendError reports
+// it as malformed rather than as a peer that did not answer.
+type strictDecodeError struct{ err error }
+
+func (e *strictDecodeError) Error() string { return "strict decoding: " + e.err.Error() }
+func (e *strictDecodeError) Unwrap() error { return e.err }
+
+// strictInterceptor applies the two checks to every successful unary answer.
+type strictInterceptor struct{}
+
+func (strictInterceptor) WrapUnary(next connectrpc.UnaryFunc) connectrpc.UnaryFunc {
+	return func(ctx context.Context, req connectrpc.AnyRequest) (connectrpc.AnyResponse, error) {
+		resp, err := next(ctx, req)
+		if err != nil || resp == nil {
+			return resp, err
+		}
+		msg, ok := resp.Any().(proto.Message)
+		if !ok {
+			return resp, nil
+		}
+		if err := checkStrict(msg); err != nil {
+			return nil, &strictDecodeError{err: err}
+		}
+		return resp, nil
+	}
+}
+
+func (strictInterceptor) WrapStreamingClient(next connectrpc.StreamingClientFunc) connectrpc.StreamingClientFunc {
+	return next
+}
+
+func (strictInterceptor) WrapStreamingHandler(next connectrpc.StreamingHandlerFunc) connectrpc.StreamingHandlerFunc {
+	return next
+}
+
+// checkStrict refuses msg if it carries an unknown field anywhere, or fails its
+// protovalidate rules.
+func checkStrict(msg proto.Message) error {
+	if path := unknownFieldPath(msg.ProtoReflect(), string(msg.ProtoReflect().Descriptor().FullName())); path != "" {
+		return fmt.Errorf("answer carries a field the contract does not define, in %s", path)
+	}
+	if err := helpers.Validate(msg); err != nil {
+		return fmt.Errorf("answer breaks a rule of its message: %w", err)
+	}
+	return nil
+}
+
+// unknownFieldPath returns the path of the first message holding unknown fields, or
+// "" when there is none. Every populated message is visited: singular, repeated and
+// map values alike.
+func unknownFieldPath(m protoreflect.Message, path string) string {
+	if len(m.GetUnknown()) > 0 {
+		return path
+	}
+	found := ""
+	m.Range(func(fd protoreflect.FieldDescriptor, v protoreflect.Value) bool {
+		here := path + "." + string(fd.Name())
+		switch {
+		case fd.IsMap():
+			if fd.MapValue().Kind() == protoreflect.MessageKind {
+				v.Map().Range(func(k protoreflect.MapKey, mv protoreflect.Value) bool {
+					found = unknownFieldPath(mv.Message(), fmt.Sprintf("%s[%v]", here, k.Interface()))
+					return found == ""
+				})
+			}
+		case fd.IsList():
+			if fd.Kind() == protoreflect.MessageKind {
+				for i := 0; i < v.List().Len() && found == ""; i++ {
+					found = unknownFieldPath(v.List().Get(i).Message(), fmt.Sprintf("%s[%d]", here, i))
+				}
+			}
+		case fd.Kind() == protoreflect.MessageKind:
+			found = unknownFieldPath(v.Message(), here)
+		}
+		return found == ""
+	})
+	return found
+}
diff --git a/sdk/go/connect/transport_failure_corpus_test.go b/sdk/go/connect/transport_failure_corpus_test.go
index 727ac4e4..68d0e19f 100644
--- a/sdk/go/connect/transport_failure_corpus_test.go
+++ b/sdk/go/connect/transport_failure_corpus_test.go
@@ -11,9 +11,15 @@ package connect
 // usage report over a momentary outage.
 
 import (
+	"context"
 	"encoding/json"
+	"errors"
+	"net/http"
+	"net/http/httptest"
 	"os"
 	"testing"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
 )
 
 func TestTransportFailureCorpusReplay(t *testing.T) {
@@ -47,6 +53,11 @@ func TestTransportFailureCorpusReplay(t *testing.T) {
 			if want.Retryable != (want.Kind == CallUnreachable.String()) {
 				t.Errorf("kind %q and retryable %v disagree", want.Kind, want.Retryable)
 			}
+			// An answer that did not come from the service still came from a peer: its
+			// status is classified by its code, and that code is the failure's Code.
+			if got := transportFailureCode(t, i); got != want.Reason {
+				t.Errorf("code = %q, want %q", got, want.Reason)
+			}
 		})
 		if want.Retryable {
 			retryable++
@@ -60,3 +71,22 @@ func TestTransportFailureCorpusReplay(t *testing.T) {
 			retryable, final)
 	}
 }
+
+// transportFailureCode replays case i through the real client and returns the
+// Connect code its CallError carries.
+func transportFailureCode(t *testing.T, i int) string {
+	t.Helper()
+	c := transportFailureCases[i]
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Content-Type", c.contentType)
+		w.WriteHeader(c.status)
+		_, _ = w.Write([]byte(c.body))
+	}))
+	defer srv.Close()
+	_, err := NewClient(srv.URL).Discover(context.Background(), &forav1.ResourceQuery{Exchange: "exchange.test"})
+	var callErr *CallError
+	if !errors.As(err, &callErr) {
+		t.Fatalf("%s: not a typed failure: %v", c.name, err)
+	}
+	return callErr.Code.String()
+}
diff --git a/sdk/go/connect/verbs.go b/sdk/go/connect/verbs.go
index fe34b896..5fe07308 100644
--- a/sdk/go/connect/verbs.go
+++ b/sdk/go/connect/verbs.go
@@ -7,8 +7,10 @@ import (
 	"time"
 
 	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/proto"
 
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
 	"github.com/FORA-Protocol/protocol/sdk/go/core"
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
@@ -58,6 +60,10 @@ const edgeErrorDomain = "fora.v1.Edge"
 // silently discarded and see every retry counted as a second report.
 func (c *Client) ReportUsage(ctx context.Context, report *forav1.UsageReport, opts ...CallOption) (*forav1.UsageReportResponse, error) {
 	const op = "report usage"
+	if cc := resolveCall(opts); cc.rawSet {
+		return routedRaw[forav1.UsageReportResponse](ctx, c, op, cc.rawBody, &forav1.UsageReport{},
+			forav1connect.ExchangeServiceReportUsageProcedure)
+	}
 	if report == nil {
 		return nil, malformed(op, errors.New("report is nil"))
 	}
@@ -96,6 +102,10 @@ func (c *Client) ReportUsage(ctx context.Context, report *forav1.UsageReport, op
 // req.TransactionId both name links the Exchange already holds.
 func (c *Client) Dispute(ctx context.Context, req *forav1.DisputeRequest, opts ...CallOption) (*forav1.DisputeResponse, error) {
 	const op = "dispute"
+	if cc := resolveCall(opts); cc.rawSet {
+		return routedRaw[forav1.DisputeResponse](ctx, c, op, cc.rawBody, &forav1.DisputeRequest{},
+			forav1connect.ExchangeServiceDisputeTransactionProcedure)
+	}
 	if req == nil {
 		return nil, malformed(op, errors.New("request is nil"))
 	}
@@ -134,17 +144,32 @@ func (c *Client) Dispute(ctx context.Context, req *forav1.DisputeRequest, opts .
 // maps onto the protocol's, so ErrorDetailFrom reads a fetch failure and an RPC
 // failure through the same accessor.
 //
-// It takes no CallOption: a fetch is a GET against an already-issued URL, so
-// there is no idempotency key to pin — nothing on this path mutates state.
+// A fetch is a GET against an already-issued URL, so there is no idempotency key
+// to pin — nothing on this path mutates state. The one CallOption it reads is
+// WithDeliveryExchange.
 //
-// The URL is taken as given. Whether it is one this agent bought, and whether its
-// agent_id matches this agent's key, are the CALLER's checks to make — the SDK
-// exports helpers.VerifyURLEd25519 and VerifiedURL.CheckProofOfPossession for
-// exactly that, and running them first turns an edge 403 into a local answer.
-// Worth doing when the URL reached the caller from anywhere but its own execute
-// response: a proof of possession is minted for whatever URL is passed in.
-func (c *Client) Fetch(ctx context.Context, signedURL string) (resolvers.Content, error) {
+// With WithDeliveryExchange naming the Exchange that issued the URL, the URL is
+// verified before anything is sent — its Ed25519 signature against that Exchange's
+// URL-signing key (resolved from its WBA directory), its agent binding against this
+// agent's key, and its expiry — and the returned Content carries the verified
+// binding in Binding. A URL that does not verify is refused as CallMalformed with a
+// synthesized retrieval_auth_failure detail, so no proof of possession is minted
+// for it. Execute verifies every URL it returns the same way, so a URL taken from
+// this client's own purchase has already passed; naming the Exchange is worth it
+// whenever the URL reached the caller from anywhere else. Without it the URL is
+// taken as given and Binding is nil, which is what a test of an edge's own
+// refusals needs. WithDeliveryVerification(core.Off) never verifies.
+func (c *Client) Fetch(ctx context.Context, signedURL string, opts ...CallOption) (resolvers.Content, error) {
 	const op = "fetch content"
+	cc := resolveCall(opts)
+	var binding *helpers.VerifiedURL
+	if cc.deliveryExchange != "" && c.deliveries.mode != core.Off {
+		got, refusal, verr := c.deliveries.verify(ctx, signedURL, cc.deliveryExchange, "")
+		if refusal != nil || verr != nil {
+			return resolvers.Content{}, deliveryError(op, "the fetched URL", refusal, verr)
+		}
+		binding = &got.VerifiedURL
+	}
 	signer, err := c.proofSigner()
 	if err != nil {
 		return resolvers.Content{}, &CallError{Kind: CallNotSignable, Op: op, Err: err}
@@ -153,9 +178,26 @@ func (c *Client) Fetch(ctx context.Context, signedURL string) (resolvers.Content
 	if err != nil {
 		return resolvers.Content{}, fetchCallError(op, signedURL, err)
 	}
+	content.Binding = binding
 	return content, nil
 }
 
+// routedRaw sends a raw body on a verb whose destination is read off the request:
+// the body's exchange is decoded and routed exactly as a built request's is.
+func routedRaw[Res any](
+	ctx context.Context, c *Client, op string, body []byte, as proto.Message, procedure string,
+) (*Res, error) {
+	exchange, err := rawExchange(op, body, as)
+	if err != nil {
+		return nil, err
+	}
+	endpoint, err := vetExchangeEndpoint(ctx, c.endpoints, exchange, op)
+	if err != nil {
+		return nil, err
+	}
+	return rawCall[Res](ctx, c.rawPool, op, endpoint, procedure, body)
+}
+
 // proofSigner composes the injected custody into the seam the content tier asks
 // for. Both halves are required and neither can be derived from the other: the
 // Signer keeps the private half, and the header presents the public one.
diff --git a/sdk/go/resolvers/contentfetch.go b/sdk/go/resolvers/contentfetch.go
index 526f0ce3..931aded0 100644
--- a/sdk/go/resolvers/contentfetch.go
+++ b/sdk/go/resolvers/contentfetch.go
@@ -109,6 +109,11 @@ type Content struct {
 	MIMEType string
 	// Body is the fetched bytes.
 	Body []byte
+	// Binding is the URL's verified signature, agent binding and expiry when the
+	// caller had it verified before the fetch (the connect client's
+	// WithDeliveryExchange), and nil when the URL was fetched as given. This tier
+	// never sets it: it dials, and verifying is the client's step before the dial.
+	Binding *helpers.VerifiedURL
 }
 
 // FetchFailure classifies why a content fetch failed, so a caller can branch on

From 4ef70eb5d72a2f0ee88842d9560e9c05c6677b0f Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:01:28 -0400
Subject: [PATCH 017/164] Add an AdminClient to the Go SDK

NewAdminClient(baseURL, opts...) covers every RPC of
fora.admin.v1.AdminService, SetTenantFeeRate and SetReportingPolicy, and
the two domain-verification RPCs of ExchangeService,
RequestDomainVerification and ConfirmDomainVerification. Both services are
reached at the one base URL, each at its own path; a deployment that serves
the admin listener apart from the Exchange endpoint builds one client per
address.

Every verb fills an empty ver, signs when a signer is configured, and takes
the per-call options, so raw mode applies. The two domain-verification
requests are refused before sending when exchange is missing or not a bare
domain, as the catalog verbs are.

The test enumerates AdminService's methods from the compiled descriptor, so
an RPC added to the proto fails it until the client carries a method of the
same name, and calls each against the generated handler.
---
 sdk/go/connect/admin.go      | 161 ++++++++++++++++++++++++++++++++++
 sdk/go/connect/admin_test.go | 163 +++++++++++++++++++++++++++++++++++
 2 files changed, 324 insertions(+)
 create mode 100644 sdk/go/connect/admin.go
 create mode 100644 sdk/go/connect/admin_test.go

diff --git a/sdk/go/connect/admin.go b/sdk/go/connect/admin.go
new file mode 100644
index 00000000..4144af65
--- /dev/null
+++ b/sdk/go/connect/admin.go
@@ -0,0 +1,161 @@
+package connect
+
+import (
+	"context"
+	"errors"
+
+	connectrpc "connectrpc.com/connect"
+
+	foraadminv1 "github.com/FORA-Protocol/protocol/gen/go/fora/admin/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/admin/v1/foraadminv1connect"
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+)
+
+// AdminClient is the operator's client: every RPC of fora.admin.v1.AdminService —
+// the tenant fee rate and the tenant reporting policy — and the two
+// domain-verification RPCs of fora.v1.ExchangeService a provider runs before its
+// first catalog push.
+//
+// Both services are reached at the ONE base URL the client is built with, each at
+// its own Connect path. The contract keeps AdminService off the public agent-facing
+// listener, so a deployment that serves the admin listener and the Exchange endpoint
+// at different addresses builds one AdminClient per address and calls each one's
+// verbs there.
+//
+// The admin plane carries no RFC 9421 request signing, and its two setters are
+// full-replace overwrites, so they carry no idempotency key. The client still signs
+// when WithSigner is set — harmless to a peer that does not verify, and what a
+// domain-verification request needs at an Exchange that does. Every verb fills an
+// empty ver, so the caller's own value wins; the two domain-verification requests
+// name their recipient in exchange and are refused before anything is sent when it
+// is missing or not a bare domain, as the catalog verbs are. Every verb takes the
+// per-call options: WithRawBody sends caller bytes instead.
+type AdminClient struct {
+	admin    foraadminv1connect.AdminServiceClient
+	exchange forav1connect.ExchangeServiceClient
+	baseURL  string
+	raw      rawLeg
+}
+
+// NewAdminClient builds an AdminClient against baseURL. It takes the client options
+// every face takes; the agent-only ones (the requester, the offer key, the delivery
+// and endpoint resolvers) are inert here.
+func NewAdminClient(baseURL string, opts ...ClientOption) *AdminClient {
+	cfg := resolvedConfig(opts...)
+	httpClient, connectOpts, _ := plumbing(cfg)
+	return &AdminClient{
+		admin:    foraadminv1connect.NewAdminServiceClient(httpClient, baseURL, connectOpts...),
+		exchange: forav1connect.NewExchangeServiceClient(httpClient, baseURL, connectOpts...),
+		baseURL:  baseURL,
+		raw:      newRawLeg(cfg, httpClient),
+	}
+}
+
+// SetTenantFeeRate replaces the tenant's fee rate and operator note
+// (AdminService.SetTenantFeeRate) and returns the rate as persisted.
+func (a *AdminClient) SetTenantFeeRate(
+	ctx context.Context, req *foraadminv1.SetTenantFeeRateRequest, opts ...CallOption,
+) (*foraadminv1.SetTenantFeeRateResponse, error) {
+	const op = "set tenant fee rate"
+	if cc := resolveCall(opts); cc.rawSet {
+		return rawCall[foraadminv1.SetTenantFeeRateResponse](ctx, a.raw, op, a.baseURL,
+			foraadminv1connect.AdminServiceSetTenantFeeRateProcedure, cc.rawBody)
+	}
+	if req == nil {
+		return nil, malformed(op, errors.New("request is nil"))
+	}
+	sent, err := cloneRequest(req, op)
+	if err != nil {
+		return nil, err
+	}
+	stampVer(&sent.Ver)
+	resp, err := a.admin.SetTenantFeeRate(ctx, connectrpc.NewRequest(sent))
+	if err != nil {
+		return nil, sendError(op, err)
+	}
+	return resp.Msg, nil
+}
+
+// SetReportingPolicy replaces the tenant's reporting policy
+// (AdminService.SetReportingPolicy) and returns the policy as persisted.
+func (a *AdminClient) SetReportingPolicy(
+	ctx context.Context, req *foraadminv1.SetReportingPolicyRequest, opts ...CallOption,
+) (*foraadminv1.SetReportingPolicyResponse, error) {
+	const op = "set reporting policy"
+	if cc := resolveCall(opts); cc.rawSet {
+		return rawCall[foraadminv1.SetReportingPolicyResponse](ctx, a.raw, op, a.baseURL,
+			foraadminv1connect.AdminServiceSetReportingPolicyProcedure, cc.rawBody)
+	}
+	if req == nil {
+		return nil, malformed(op, errors.New("request is nil"))
+	}
+	sent, err := cloneRequest(req, op)
+	if err != nil {
+		return nil, err
+	}
+	stampVer(&sent.Ver)
+	resp, err := a.admin.SetReportingPolicy(ctx, connectrpc.NewRequest(sent))
+	if err != nil {
+		return nil, sendError(op, err)
+	}
+	return resp.Msg, nil
+}
+
+// RequestDomainVerification asks the Exchange for a domain-verification challenge
+// (ExchangeService.RequestDomainVerification): a token the provider serves at its
+// domain before confirming.
+func (a *AdminClient) RequestDomainVerification(
+	ctx context.Context, req *forav1.DomainVerificationRequest, opts ...CallOption,
+) (*forav1.DomainVerificationChallenge, error) {
+	const op = "request domain verification"
+	if cc := resolveCall(opts); cc.rawSet {
+		return rawCall[forav1.DomainVerificationChallenge](ctx, a.raw, op, a.baseURL,
+			forav1connect.ExchangeServiceRequestDomainVerificationProcedure, cc.rawBody)
+	}
+	if req == nil {
+		return nil, malformed(op, errors.New("request is nil"))
+	}
+	sent, err := cloneRequest(req, op)
+	if err != nil {
+		return nil, err
+	}
+	stampVer(&sent.Ver)
+	if err := requireRecipient(op, sent.GetExchange()); err != nil {
+		return nil, err
+	}
+	resp, err := a.exchange.RequestDomainVerification(ctx, connectrpc.NewRequest(sent))
+	if err != nil {
+		return nil, sendError(op, err)
+	}
+	return resp.Msg, nil
+}
+
+// ConfirmDomainVerification tells the Exchange the challenge is in place and,
+// optionally, registers the delivery endpoint's verification key
+// (ExchangeService.ConfirmDomainVerification).
+func (a *AdminClient) ConfirmDomainVerification(
+	ctx context.Context, req *forav1.DomainVerificationConfirmation, opts ...CallOption,
+) (*forav1.DomainVerificationResult, error) {
+	const op = "confirm domain verification"
+	if cc := resolveCall(opts); cc.rawSet {
+		return rawCall[forav1.DomainVerificationResult](ctx, a.raw, op, a.baseURL,
+			forav1connect.ExchangeServiceConfirmDomainVerificationProcedure, cc.rawBody)
+	}
+	if req == nil {
+		return nil, malformed(op, errors.New("request is nil"))
+	}
+	sent, err := cloneRequest(req, op)
+	if err != nil {
+		return nil, err
+	}
+	stampVer(&sent.Ver)
+	if err := requireRecipient(op, sent.GetExchange()); err != nil {
+		return nil, err
+	}
+	resp, err := a.exchange.ConfirmDomainVerification(ctx, connectrpc.NewRequest(sent))
+	if err != nil {
+		return nil, sendError(op, err)
+	}
+	return resp.Msg, nil
+}
diff --git a/sdk/go/connect/admin_test.go b/sdk/go/connect/admin_test.go
new file mode 100644
index 00000000..4e0f7aef
--- /dev/null
+++ b/sdk/go/connect/admin_test.go
@@ -0,0 +1,163 @@
+package connect_test
+
+// AdminClient against the real generated handlers: AdminService mounted directly
+// (the admin plane carries no request signing), and the two domain-verification
+// RPCs on an ExchangeService behind the SDK's server verify face, both on one
+// origin as the client addresses them.
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"reflect"
+	"sync"
+	"testing"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/proto"
+	"google.golang.org/protobuf/reflect/protoreflect"
+	"google.golang.org/protobuf/reflect/protoregistry"
+
+	foraadminv1 "github.com/FORA-Protocol/protocol/gen/go/fora/admin/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/admin/v1/foraadminv1connect"
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// operatorPlane records which RPC it answered and the version each request carried.
+type operatorPlane struct {
+	foraadminv1connect.UnimplementedAdminServiceHandler
+	forav1connect.UnimplementedExchangeServiceHandler
+	mu   sync.Mutex
+	seen map[string]string // method -> request ver
+}
+
+func (o *operatorPlane) record(method, ver string) {
+	o.mu.Lock()
+	defer o.mu.Unlock()
+	if o.seen == nil {
+		o.seen = map[string]string{}
+	}
+	o.seen[method] = ver
+}
+
+func (o *operatorPlane) SetTenantFeeRate(
+	_ context.Context, req *connectrpc.Request[foraadminv1.SetTenantFeeRateRequest],
+) (*connectrpc.Response[foraadminv1.SetTenantFeeRateResponse], error) {
+	o.record("SetTenantFeeRate", req.Msg.GetVer())
+	return connectrpc.NewResponse(&foraadminv1.SetTenantFeeRateResponse{Ver: helpers.ProtocolVersion, Rate: req.Msg.GetRate()}), nil
+}
+
+func (o *operatorPlane) SetReportingPolicy(
+	_ context.Context, req *connectrpc.Request[foraadminv1.SetReportingPolicyRequest],
+) (*connectrpc.Response[foraadminv1.SetReportingPolicyResponse], error) {
+	o.record("SetReportingPolicy", req.Msg.GetVer())
+	return connectrpc.NewResponse(&foraadminv1.SetReportingPolicyResponse{Ver: helpers.ProtocolVersion, Policy: req.Msg.GetPolicy()}), nil
+}
+
+func (o *operatorPlane) RequestDomainVerification(
+	_ context.Context, req *connectrpc.Request[forav1.DomainVerificationRequest],
+) (*connectrpc.Response[forav1.DomainVerificationChallenge], error) {
+	o.record("RequestDomainVerification", req.Msg.GetVer())
+	return connectrpc.NewResponse(&forav1.DomainVerificationChallenge{Ver: helpers.ProtocolVersion, Token: "tok-1"}), nil
+}
+
+func (o *operatorPlane) ConfirmDomainVerification(
+	_ context.Context, req *connectrpc.Request[forav1.DomainVerificationConfirmation],
+) (*connectrpc.Response[forav1.DomainVerificationResult], error) {
+	o.record("ConfirmDomainVerification", req.Msg.GetVer())
+	keyID := "key-1"
+	return connectrpc.NewResponse(&forav1.DomainVerificationResult{Ver: helpers.ProtocolVersion, KeyId: &keyID}), nil
+}
+
+func serveOperatorPlane(t *testing.T, sig signingFixture, plane *operatorPlane) string {
+	t.Helper()
+	mux := http.NewServeMux()
+	adminPath, admin := foraadminv1connect.NewAdminServiceHandler(plane)
+	mux.Handle(adminPath, admin)
+	exPath, ex := foraserver.NewExchangeServiceHandler(plane, foraserver.WithKeyResolver(sig.resolver))
+	mux.Handle(exPath, ex)
+	srv := httptest.NewServer(mux)
+	t.Cleanup(srv.Close)
+	return srv.URL
+}
+
+// Every AdminService RPC — enumerated from the compiled descriptor, so a new one
+// fails here until the client carries it — has an AdminClient method of the same
+// name, and each is exercised against the real handler.
+func TestAdminClient_CoversEveryAdminRPC(t *testing.T) {
+	sig := newSigningFixture(t)
+	plane := &operatorPlane{}
+	client := foraconnect.NewAdminClient(serveOperatorPlane(t, sig, plane), foraconnect.WithSigner(sig.signer))
+
+	methods := foraadminv1.File_fora_admin_v1_admin_proto.Services().ByName("AdminService").Methods()
+	if methods.Len() == 0 {
+		t.Fatal("AdminService declares no methods; the enumeration would assert nothing")
+	}
+	for i := 0; i < methods.Len(); i++ {
+		md := methods.Get(i)
+		name := string(md.Name())
+		t.Run(name, func(t *testing.T) {
+			resp := callByName(t, client, name, md.Input())
+			if resp == nil {
+				t.Fatalf("%s returned no answer", name)
+			}
+			if got := plane.seen[name]; got != helpers.ProtocolVersion {
+				t.Errorf("%s reached the server with ver %q, want it stamped", name, got)
+			}
+		})
+	}
+}
+
+// callByName calls the AdminClient method named for an RPC with an empty request of
+// its input type, and returns the answer.
+func callByName(t *testing.T, client *foraconnect.AdminClient, name string, input protoreflect.MessageDescriptor) proto.Message {
+	t.Helper()
+	method := reflect.ValueOf(client).MethodByName(name)
+	if !method.IsValid() {
+		t.Fatalf("AdminClient has no method %s", name)
+	}
+	mt, err := protoregistry.GlobalTypes.FindMessageByName(input.FullName())
+	if err != nil {
+		t.Fatal(err)
+	}
+	out := method.Call([]reflect.Value{reflect.ValueOf(context.Background()), reflect.ValueOf(mt.New().Interface())})
+	if errV := out[1].Interface(); errV != nil {
+		t.Fatalf("%s: %v", name, errV)
+	}
+	msg, _ := out[0].Interface().(proto.Message)
+	return msg
+}
+
+// The two domain-verification RPCs are signed calls to the Exchange the request
+// names; one that names none is refused before anything is sent.
+func TestAdminClient_DomainVerification(t *testing.T) {
+	sig := newSigningFixture(t)
+	plane := &operatorPlane{}
+	client := foraconnect.NewAdminClient(serveOperatorPlane(t, sig, plane), foraconnect.WithSigner(sig.signer))
+	ctx := context.Background()
+
+	challenge, err := client.RequestDomainVerification(ctx, &forav1.DomainVerificationRequest{
+		Exchange: "exchange.test", Domain: "publisher.test"})
+	if err != nil || challenge.GetToken() != "tok-1" {
+		t.Fatalf("RequestDomainVerification = %v, %v", challenge, err)
+	}
+	result, err := client.ConfirmDomainVerification(ctx, &forav1.DomainVerificationConfirmation{
+		Exchange: "exchange.test", Domain: "publisher.test", Token: challenge.GetToken()})
+	if err != nil || result.GetKeyId() != "key-1" {
+		t.Fatalf("ConfirmDomainVerification = %v, %v", result, err)
+	}
+
+	_, err = client.RequestDomainVerification(ctx, &forav1.DomainVerificationRequest{Domain: "publisher.test"})
+	var cerr *foraconnect.CallError
+	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallNotSent {
+		t.Fatalf("an unaddressed request = %v, want CallNotSent", err)
+	}
+	if _, ok := plane.seen["RequestDomainVerification"]; !ok {
+		t.Fatal("the addressed request never reached the Exchange")
+	}
+}

From 22a61f83a9fa34b4080e0720937d5a12f3bb8c58 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:01:28 -0400
Subject: [PATCH 018/164] Add identity helpers to the Go SDK

Three steps a caller otherwise assembles by hand to mint an identity a FORA
verifier can resolve:

- helpers.GenerateKey returns a fresh Ed25519 key and its RFC 7638
  thumbprint, the keyid every signature names.
- helpers.DirectoryDocument returns the Web Bot Auth key directory for a
  key set as the generated WBAFile, each key carrying the validity window
  the WBA resolver requires: opening five minutes before now and lasting
  DefaultKeyValidity (365 days) unless told otherwise.
- core.SigningTransportFor returns a signing transport that signs as the
  key, with its thumbprint as keyid and the directory as Signature-Agent.

The test mints a fresh agent, serves its directory, and has the SDK's own
server verify face accept a request signed through the transport by
resolving the key from that directory.
---
 sdk/go/connect/identity_test.go | 82 +++++++++++++++++++++++++++++++++
 sdk/go/core/identity.go         | 31 +++++++++++++
 sdk/go/helpers/identity.go      | 69 +++++++++++++++++++++++++++
 3 files changed, 182 insertions(+)
 create mode 100644 sdk/go/connect/identity_test.go
 create mode 100644 sdk/go/core/identity.go
 create mode 100644 sdk/go/helpers/identity.go

diff --git a/sdk/go/connect/identity_test.go b/sdk/go/connect/identity_test.go
new file mode 100644
index 00000000..77b29206
--- /dev/null
+++ b/sdk/go/connect/identity_test.go
@@ -0,0 +1,82 @@
+package connect_test
+
+// Minting a fresh agent identity end to end: a key from helpers.GenerateKey, the
+// directory document helpers.DirectoryDocument builds for it, served by an
+// in-process origin, and a signing transport from core.SigningTransportFor. The
+// verifier is the SDK's own server verify face resolving the key through the WBA
+// directory the covered Signature-Agent names — the lookup an Exchange runs — so the
+// test proves a verifier can find the minted key, not only that a request was signed.
+
+import (
+	"context"
+	"crypto/ed25519"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/encoding/protojson"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
+	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
+)
+
+func TestIdentityHelpers_MintAFreshAgent(t *testing.T) {
+	priv, keyID, err := helpers.GenerateKey()
+	if err != nil {
+		t.Fatal(err)
+	}
+	pub := priv.Public().(ed25519.PublicKey)
+	if want, _ := helpers.Thumbprint(pub); keyID != want {
+		t.Fatalf("keyid = %q, want the key's thumbprint %q", keyID, want)
+	}
+
+	now := time.Now()
+	doc := helpers.DirectoryDocument([]ed25519.PublicKey{pub}, 0, now)
+	jwk := doc.GetKeys()[0]
+	if jwk.GetKty() != "OKP" || jwk.GetCrv() != "Ed25519" || jwk.GetAlg() != "EdDSA" || jwk.GetUse() != "sig" {
+		t.Errorf("key = %v", jwk)
+	}
+	if notAfter, _ := time.Parse(time.RFC3339, jwk.GetNotAfter()); notAfter.Sub(now) < helpers.DefaultKeyValidity-time.Second {
+		t.Errorf("not_after = %s, want DefaultKeyValidity from now", jwk.GetNotAfter())
+	}
+	body, err := protojson.MarshalOptions{UseProtoNames: true}.Marshal(doc)
+	if err != nil {
+		t.Fatal(err)
+	}
+	directory := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write(body)
+	}))
+	t.Cleanup(directory.Close)
+
+	keys := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{Scheme: "http", HTTP: http.DefaultClient})
+	path, h := foraserver.NewCatalogServiceHandler(&recordingCatalog{}, foraserver.WithKeyResolver(keys))
+	mux := http.NewServeMux()
+	mux.Handle(path, h)
+	exchange := httptest.NewServer(mux)
+	t.Cleanup(exchange.Close)
+
+	transport, err := core.SigningTransportFor(priv, directory.URL, nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	client := forav1connect.NewCatalogServiceClient(&http.Client{Transport: transport}, exchange.URL)
+	resp, err := client.RefreshCatalog(context.Background(), connectrpc.NewRequest(&forav1.RefreshCatalogRequest{
+		Ver: helpers.ProtocolVersion, Exchange: "exchange.test", TenantId: "tenant-1"}))
+	if err != nil {
+		t.Fatalf("the verifier refused the minted identity: %v", err)
+	}
+	if !resp.Msg.GetStarted() {
+		t.Errorf("answer = %v", resp.Msg)
+	}
+
+	if _, err := core.SigningTransportFor(priv[:10], directory.URL, nil); err == nil {
+		t.Error("a truncated key was accepted")
+	}
+}
diff --git a/sdk/go/core/identity.go b/sdk/go/core/identity.go
new file mode 100644
index 00000000..78d68126
--- /dev/null
+++ b/sdk/go/core/identity.go
@@ -0,0 +1,31 @@
+package core
+
+import (
+	"crypto/ed25519"
+	"fmt"
+	"net/http"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// SigningTransportFor returns a signing RoundTripper over base that signs as priv:
+// the RFC 9421 keyid is priv's RFC 7638 thumbprint, and Signature-Agent names
+// directory, the WBA key directory that publishes the key (see
+// helpers.DirectoryDocument). It is the third step of minting an identity, after
+// helpers.GenerateKey and the directory document. A nil base is
+// http.DefaultTransport.
+func SigningTransportFor(priv ed25519.PrivateKey, directory string, base http.RoundTripper) (http.RoundTripper, error) {
+	if len(priv) != ed25519.PrivateKeySize {
+		return nil, fmt.Errorf("core: signing transport needs an ed25519 private key of %d bytes", ed25519.PrivateKeySize)
+	}
+	pub, _ := priv.Public().(ed25519.PublicKey)
+	keyID, err := helpers.Thumbprint(pub)
+	if err != nil {
+		return nil, err
+	}
+	signer, err := helpers.NewEd25519Signer(keyID, priv)
+	if err != nil {
+		return nil, err
+	}
+	return NewSigningTransport(signer, base, WithSignatureAgent(directory)), nil
+}
diff --git a/sdk/go/helpers/identity.go b/sdk/go/helpers/identity.go
new file mode 100644
index 00000000..93945bf4
--- /dev/null
+++ b/sdk/go/helpers/identity.go
@@ -0,0 +1,69 @@
+package helpers
+
+import (
+	"crypto/ed25519"
+	"crypto/rand"
+	"encoding/base64"
+	"fmt"
+	"time"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+)
+
+// Minting an Ed25519 identity a FORA verifier can resolve takes three steps a caller
+// otherwise assembles by hand: a key and its keyid, the Web Bot Auth key directory
+// that publishes it, and a signer that signs as it. GenerateKey and
+// DirectoryDocument are the first two; core.SigningTransportFor is the third. The
+// directory is built as the generated forav1.WBAFile, the type the SDK's own WBA
+// resolver decodes, so its shape is defined once, by that message.
+
+// DefaultKeyValidity is how long a key DirectoryDocument publishes stays valid by
+// default.
+const DefaultKeyValidity = 365 * 24 * time.Hour
+
+// directoryNotBeforeMargin is how far before now a published key's window opens,
+// so a verifier whose clock runs slightly behind still accepts it.
+const directoryNotBeforeMargin = 5 * time.Minute
+
+// GenerateKey returns a fresh Ed25519 key and its RFC 7638 thumbprint: the keyid
+// every FORA signature names.
+func GenerateKey() (ed25519.PrivateKey, string, error) {
+	pub, priv, err := ed25519.GenerateKey(rand.Reader)
+	if err != nil {
+		return nil, "", fmt.Errorf("helpers: generate ed25519 key: %w", err)
+	}
+	tp, err := Thumbprint(pub)
+	if err != nil {
+		return nil, "", err
+	}
+	return priv, tp, nil
+}
+
+// DirectoryDocument returns the Web Bot Auth key directory publishing keys, in
+// order. Each key carries the not_before / not_after window the WBA resolver
+// requires before it hands a key out: it opens five minutes before now and lasts
+// validFor (DefaultKeyValidity when validFor <= 0). now is the instant the window
+// is computed from, passed in so the document is deterministic.
+//
+// Render it with protojson and the proto field names (UseProtoNames) to serve it at
+// /.well-known/http-message-signatures-directory.
+func DirectoryDocument(keys []ed25519.PublicKey, validFor time.Duration, now time.Time) *forav1.WBAFile {
+	if validFor <= 0 {
+		validFor = DefaultKeyValidity
+	}
+	notBefore := now.Add(-directoryNotBeforeMargin).UTC().Format(time.RFC3339)
+	notAfter := now.Add(validFor).UTC().Format(time.RFC3339)
+	out := &forav1.WBAFile{Keys: make([]*forav1.JsonWebKey, 0, len(keys))}
+	for _, key := range keys {
+		out.Keys = append(out.Keys, &forav1.JsonWebKey{
+			Kty:       "OKP",
+			Crv:       "Ed25519",
+			Alg:       "EdDSA",
+			Use:       "sig",
+			X:         base64.RawURLEncoding.EncodeToString(key),
+			NotBefore: notBefore,
+			NotAfter:  notAfter,
+		})
+	}
+	return out
+}

From ad906bf1cf8bfeba51129371a91e58ce4cd35cf1 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:01:29 -0400
Subject: [PATCH 019/164] Describe the Go client's harness capabilities and map
 the new symbols

The Go README gains a section on testing services through the client, and
the connect package comment names the operator verbs and the new options.

The parity map records the new Go symbols. AdminClient, Delivery,
BeforeSign, WithRawBody, GenerateKey, DirectoryDocument, DefaultKeyValidity
and SigningTransportFor map to the Python and TypeScript faces;
NewAdminClient folds into the Python AdminClient constructor, the same
recorded divergence as every other NewX, so the allowlist baseline moves
from 16 to 17. The six new functional options are Go-idiomatic exclusions.
The parity matrix is regenerated.
---
 docs/sdk-parity-matrix.md                   | 18 +++++++-
 sdk/go/README.md                            | 39 +++++++++++++++-
 sdk/go/connect/doc.go                       | 17 +++++--
 sdk/parity/symbol-map.json                  | 51 +++++++++++++++++++++
 sdk/python/tests/test_api_surface_parity.py |  7 ++-
 5 files changed, 125 insertions(+), 7 deletions(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 14dc921b..db58fe33 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 149 symbols at cross-language parity · 16 documented divergences · 185 Go-idiomatic exclusions · 38 conformance corpora, each tri-replayed.
+**At a glance:** 157 symbols at cross-language parity · 17 documented divergences · 191 Go-idiomatic exclusions · 39 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -45,12 +45,15 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ContentDigest` | `content_digest` | `contentDigest` |
 | `ContentTypeJSON` | `ContentTypeJSON` | `ContentTypeJSON` |
 | `ContentTypeProto` | `ContentTypeProto` | `ContentTypeProto` |
+| `DefaultKeyValidity` | `DEFAULT_KEY_VALIDITY` | `DEFAULT_KEY_VALIDITY_MS` |
+| `DirectoryDocument` | `directory_document` | `directoryDocument` |
 | `DisputeFailureDetail` | `dispute_failure_detail` | `disputeFailureDetail` |
 | `DomainVerificationFailureDetail` | `domain_verification_failure_detail` | `domainVerificationFailureDetail` |
 | `EntryVerdict` | `EntryVerdict` | `EntryVerdict` |
 | `ErrManifestVersionRefused` | `ManifestVersionRefusedError` | `ManifestVersionRefused` |
 | `ErrUnknownKey` | `UnknownKeyError` | `UnknownKey` |
 | `FormatMoney` | `format_money` | `formatMoney` |
+| `GenerateKey` | `generate_key` | `generateKey` |
 | `HashURL` | `hash_url` | `hashUrl` |
 | `HostAnchored` | `host_anchored` | `hostAnchored` |
 | `HostOf` | `host_of` | `hostOf` |
@@ -166,6 +169,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ReplayStore` | `ReplayStore` | `ReplayStore` |
 | `RequestIDHeader` | `RequestIDHeader` | `RequestIDHeader` |
 | `Result` | `Result` | `Result` |
+| `SigningTransportFor` | `signing_transport_for` | `signingTransportFor` |
 | `VerifiedOffer` | `VerifiedOffer` | `VerifiedOffer` |
 | `Verifier` | `Verifier` | `Verifier` |
 | `Window` | `Window` | `Window` |
@@ -174,6 +178,8 @@ Legend: a name = the public face in that language · `—` = intentionally none
 
 | Go | python | ts |
 |---|---|---|
+| `AdminClient` | `AdminClient` | `AdminClient` |
+| `BeforeSign` | `BeforeSign` | `BeforeSign` |
 | `BrokerClient` | `BrokerClient` | `BrokerClient` |
 | `CallError` | `CallError` | `ForaCallError` |
 | `CallErrorKind` | `CallErrorKind` | `CallErrorKind` |
@@ -181,10 +187,12 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `Client` | `Client` | `Client` |
 | `DefaultCallTimeout` | `DEFAULT_CALL_TIMEOUT_SEC` | `DEFAULT_CALL_TIMEOUT_MS` |
 | `DefaultMaxRPCReadBytes` | `DEFAULT_MAX_RPC_READ_BYTES` | `DEFAULT_MAX_RPC_READ_BYTES` |
+| `Delivery` | `Delivery` | `Delivery` |
 | `EndpointResolver` | `EndpointResolver` | `EndpointResolver` |
 | `ErrorDetailFrom` | `error_detail_from` | `errorDetailFrom` |
 | `RegistrationRequirementsReader` | `RegistrationRequirementsReader` | `RegistrationRequirementsReader` |
 | `Validation` | `Validation` | `Validation` |
+| `WithRawBody` | `RawBody` | `RawBody` |
 
 ### connectserver — server-verify handler binding
 
@@ -211,6 +219,7 @@ Deliberate, reason-backed asymmetries. The allowlist is **shrink-only** — a ne
 
 | Go symbol | python | ts | rationale |
 |---|---|---|---|
+| `connect.NewAdminClient` | — | `createAdminClient` | Go NewX factory folds into the Python class constructor (AdminClient(...)); idiomatic Python exposes the class, not a separate factory symbol. TS keeps the create* object-factory prefix. |
 | `connect.NewBrokerClient` | — | `createBrokerClient` | Go NewX factory folds into the Python class constructor (BrokerClient(...)); idiomatic Python exposes the class, not a separate factory symbol. TS keeps the create* object-factory prefix. |
 | `connect.NewCatalogClient` | — | `createCatalogClient` | Go NewX factory folds into the Python class constructor (CatalogClient(...)); idiomatic Python exposes the class, not a separate factory symbol. TS keeps the create* object-factory prefix. |
 | `connect.NewClient` | — | `createClient` | Go NewX factory folds into the Python class constructor (Client(...)); idiomatic Python exposes the class, not a separate factory symbol. TS keeps the create* object-factory prefix. |
@@ -248,8 +257,13 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `connect.ValidationOff` | Member of the mapped connect.Validation enum. Python and TypeScript spell it as a literal ("off" / "strict") rather than a named export. The defaults differ deliberately and that divergence is recorded in docs/design-history.md, not here. |
 | `connect.ValidationStrict` | Member of the mapped connect.Validation enum. Python and TypeScript spell it as a literal ("off" / "strict") rather than a named export. The defaults differ deliberately and that divergence is recorded in docs/design-history.md, not here. |
 | `connect.WithAgentKey` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `connect.WithBeforeSign` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithClientOptions` | Go escape hatch for raw connectrpc.ClientOption values, mirroring connectserver.WithHandlerOptions; py/ts have no Connect option type to pass through. |
 | `connect.WithContentTimeout` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `connect.WithDeliveries` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `connect.WithDeliveryExchange` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `connect.WithDeliveryKeyResolver` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `connect.WithDeliveryVerification` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithEndpointResolver` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithGuardedBaseTransport` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithHTTPClient` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
@@ -265,6 +279,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `connect.WithSignWindow` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithSignatureAgent` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithSigner` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `connect.WithStrictDecoding` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithValidation` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithVerification` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connectserver.AsConnectError` | Go-only Connect error mapping; TS/Python emit reject-reason tokens only (matrix SERVER-role reject-mapping row). |
@@ -462,6 +477,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `resolvers/testdata/wba-url-vectors.json` | ✅ | ✅ | ✅ |
 | `connect/testdata/client-request-vectors.json` | ✅ | ✅ | ✅ |
 | `connect/testdata/connect-error-vectors.json` | ✅ | ✅ | ✅ |
+| `connect/testdata/error-detail-wire-vectors.json` | ✅ | ❌ | ❌ |
 | `connect/testdata/synthesized-detail-vectors.json` | ✅ | ✅ | ✅ |
 | `connect/testdata/transport-failure-vectors.json` | ✅ | ✅ | ✅ |
 
diff --git a/sdk/go/README.md b/sdk/go/README.md
index c4b139c5..41d43528 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -9,7 +9,7 @@ directly with no `replace` directive.
 | **L0** | `gen/go/fora/v1`, `gen/go/vocab/*` | generated wire types (consumed, never rebuilt) |
 | **L1** | **`sdk/go/helpers`** | stateless, **IO-free** protocol helpers — RFC 9421/7638 crypto, offer/acceptance verify, static key resolution, validation |
 | L2 · I/O | **`sdk/go/resolvers`** | the network-fetching tier: well-known JWKS / WBA directory / `fora.json` endpoint / offer-key resolvers, the uncached registration-requirements reader, + the SSRF-guarded HTTP client. Runs on a maintained `net/http` client behind the SSRF guard; composes L1, never the reverse |
-| L2 · transport | `sdk/go/core` (transport-neutral: Verifier, {verified,rejected}, `DiscoveryResult` per-URI groups, VerifiedOffer guard, signing RoundTripper, ReplayStore — zero Connect) · `sdk/go/connect` (Connect **client** binding: `NewClient` + `NewBrokerClient` + `NewCatalogClient`; the agent verbs **`Discover` · `Resolve` · `Execute` · `ExecuteBatch` · `ReportUsage` · `Dispute` · `Fetch`**, the Broker purchase **`BrokerClient.Execute`** (offers from several Exchanges in one call), the account-setup verbs **`Register` · `GetAccountStatus`** and the publisher verbs **`PushResources` · `RemoveResources` · `RefreshCatalog`** + client options + the `CallError` taxonomy + `ErrorDetailFrom`) · `sdk/go/connectserver` (Connect **server** binding: `NewExchangeServiceHandler` + `NewBrokerServiceHandler` + `NewCatalogServiceHandler` + server options + `AsConnectError` + `AttachErrorDetail`/`AttachDetail` + the reject answer **`RejectCode` · `IsBodyTooLarge` · `WriteReject`**, the one place the 413/429/401 split and the error-envelope body are decided) | transport-neutral core + Connect client/server bindings (state injected) |
+| L2 · transport | `sdk/go/core` (transport-neutral: Verifier, {verified,rejected}, `DiscoveryResult` per-URI groups, VerifiedOffer guard, signing RoundTripper, ReplayStore — zero Connect) · `sdk/go/connect` (Connect **client** binding: `NewClient` + `NewBrokerClient` + `NewCatalogClient` + `NewAdminClient`; the agent verbs **`Discover` · `Resolve` · `Execute` · `ExecuteBatch` · `ReportUsage` · `Dispute` · `Fetch`**, the Broker purchase **`BrokerClient.Execute`** (offers from several Exchanges in one call), the account-setup verbs **`Register` · `GetAccountStatus`** and the publisher verbs **`PushResources` · `RemoveResources` · `RefreshCatalog`**, the operator verbs **`SetTenantFeeRate` · `SetReportingPolicy` · `RequestDomainVerification` · `ConfirmDomainVerification`** + client options + the `CallError` taxonomy + `ErrorDetailFrom`) · `sdk/go/connectserver` (Connect **server** binding: `NewExchangeServiceHandler` + `NewBrokerServiceHandler` + `NewCatalogServiceHandler` + server options + `AsConnectError` + `AttachErrorDetail`/`AttachDetail` + the reject answer **`RejectCode` · `IsBodyTooLarge` · `WriteReject`**, the one place the 413/429/401 split and the error-envelope body are decided) | transport-neutral core + Connect client/server bindings (state injected) |
 | L3 | separate packages | framework adapters (convert, never replace) — later |
 
 The `L2` tier is split by kind: the **I/O** package (`resolvers`) is the only tier
@@ -285,6 +285,43 @@ well-known/JWKS bodies at 1 MiB, and fails closed if **any** resolved address of
 host is reserved. The address/scheme decisions are corpus-locked
 (`resolvers/testdata/ssrf-*-vectors.json`).
 
+## Testing services through the client
+
+The client carries the capabilities a conformance or e2e harness needs to drive
+FORA services through it, so the harness never hand-writes a payload, parses a raw
+response or re-implements signing:
+
+- **`WithBeforeSign(hook)`** receives every RPC request just before it is signed. The
+  request it returns is what gets signed and sent, and the reply is decoded as usual,
+  so a deliberately malformed message still goes through the SDK's own signer and
+  decoder. Changing the method or URL, or setting a header the signer writes, is
+  refused as `CallMalformed` with nothing sent.
+- **`WithRawBody(body)`** (per call) sends the caller's bytes exactly as given, as the
+  binary protobuf body: nothing is filled in and no local refusal about the message
+  applies, while the call is still signed and its answer decoded. A verb that routes on
+  its request reads `exchange` from the body.
+- **`WithStrictDecoding()`** refuses an answer carrying an unknown field at any depth,
+  or breaking the proto's field or cross-field rules (protovalidate).
+- **`CallError.Code`** is the Connect code of the peer's answer — an error envelope or
+  a non-JSON error status — and zero when no answer arrived. The typed `ErrorDetail` is
+  decoded from the binary `value`; the shared `connect-error-vectors.json` and
+  `error-detail-wire-vectors.json` corpora hold all three SDKs to the same reading.
+- **Delivery verification.** `Execute`, `ExecuteBatch` and `BrokerClient.Execute`
+  verify every `retrieval_endpoint` before returning: its Ed25519 signature against the
+  issuing Exchange's URL-signing key (named by `kid`, resolved from that Exchange's WBA
+  key directory — `WithDeliveryKeyResolver` replaces the resolver), its `agent_id`
+  binding against this agent's key and the answer's `agent_identity_hash`, and its
+  expiry. A URL that does not verify is refused as `CallMalformed` with a
+  `retrieval_auth_failure` detail. `WithDeliveries(&out)` receives the verified
+  bindings; `Fetch(ctx, url, WithDeliveryExchange(exchange))` verifies a URL before
+  fetching it and returns the binding on `Content.Binding`.
+  `WithDeliveryVerification(core.Off)` opts out, for URLs in another signing scheme.
+- **`NewAdminClient`** covers every `fora.admin.v1.AdminService` RPC and the two
+  domain-verification RPCs.
+- **Identity helpers.** `helpers.GenerateKey` mints an Ed25519 key and its thumbprint,
+  `helpers.DirectoryDocument` builds the WBA key directory publishing a key set, and
+  `core.SigningTransportFor` returns a signing transport that signs as the key.
+
 ## Guarantees
 
 - **Relocation, not rewrite.** The RFC 9421 / 7638 crypto is byte-identical with
diff --git a/sdk/go/connect/doc.go b/sdk/go/connect/doc.go
index 1fbe9824..b2041472 100644
--- a/sdk/go/connect/doc.go
+++ b/sdk/go/connect/doc.go
@@ -3,10 +3,19 @@
 // Execute and ExecuteBatch, the Broker purchase BrokerClient.Execute, ReportUsage,
 // Dispute and the low-tier content Fetch — the account-setup
 // verb set — Register and GetAccountStatus — and the publisher verb set —
-// PushResources, RemoveResources and RefreshCatalog — across three constructors:
-// NewClient for an Exchange, NewBrokerClient for a Broker, and NewCatalogClient
-// for an Exchange's CatalogService, which are different parties or different
-// addresses and so cannot share one base URL.
+// PushResources, RemoveResources and RefreshCatalog — and the operator verb set —
+// SetTenantFeeRate, SetReportingPolicy, RequestDomainVerification and
+// ConfirmDomainVerification — across four constructors: NewClient for an
+// Exchange, NewBrokerClient for a Broker, NewCatalogClient for an Exchange's
+// CatalogService and NewAdminClient for the operator plane, which are different
+// parties or different addresses and so cannot share one base URL.
+//
+// A purchase verifies every delivery URL it returns — its signature against the
+// issuing Exchange's URL-signing key, its agent binding and its expiry — and the
+// client carries what a conformance harness needs to drive a service through it:
+// a pre-signing hook (WithBeforeSign), raw mode (WithRawBody), strict response
+// decoding (WithStrictDecoding) and the Connect code of every peer answer
+// (CallError.Code).
 //
 // The account verbs sit on NewClient rather than on a fourth constructor because
 // they are the same party holding the same key: an account is per-Exchange and
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index e2e35f62..5af87ca4 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -15,8 +15,13 @@
     "connect.ValidationOff": "Member of the mapped connect.Validation enum. Python and TypeScript spell it as a literal (\"off\" / \"strict\") rather than a named export. The defaults differ deliberately and that divergence is recorded in docs/design-history.md, not here.",
     "connect.ValidationStrict": "Member of the mapped connect.Validation enum. Python and TypeScript spell it as a literal (\"off\" / \"strict\") rather than a named export. The defaults differ deliberately and that divergence is recorded in docs/design-history.md, not here.",
     "connect.WithAgentKey": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "connect.WithBeforeSign": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithClientOptions": "Go escape hatch for raw connectrpc.ClientOption values, mirroring connectserver.WithHandlerOptions; py/ts have no Connect option type to pass through.",
     "connect.WithContentTimeout": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "connect.WithDeliveries": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "connect.WithDeliveryExchange": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "connect.WithDeliveryKeyResolver": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "connect.WithDeliveryVerification": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithEndpointResolver": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithGuardedBaseTransport": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithHTTPClient": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
@@ -32,6 +37,7 @@
     "connect.WithSignWindow": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithSignatureAgent": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithSigner": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "connect.WithStrictDecoding": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithValidation": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithVerification": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connectserver.AsConnectError": "Go-only Connect error mapping; TS/Python emit reject-reason tokens only (matrix SERVER-role reject-mapping row).",
@@ -188,6 +194,16 @@
     "resolvers.SSRFCheckRedirect": "Go redirect-policy hook; py/ts fold redirect checks into the guard (async_ssrf_guard / the guarded fetch)."
   },
   "symbols": {
+    "connect.AdminClient": {
+      "allowlist_reason": null,
+      "python": "AdminClient",
+      "ts": "AdminClient"
+    },
+    "connect.BeforeSign": {
+      "allowlist_reason": null,
+      "python": "BeforeSign",
+      "ts": "BeforeSign"
+    },
     "connect.BrokerClient": {
       "allowlist_reason": null,
       "python": "BrokerClient",
@@ -223,6 +239,11 @@
       "python": "DEFAULT_MAX_RPC_READ_BYTES",
       "ts": "DEFAULT_MAX_RPC_READ_BYTES"
     },
+    "connect.Delivery": {
+      "allowlist_reason": null,
+      "python": "Delivery",
+      "ts": "Delivery"
+    },
     "connect.EndpointResolver": {
       "allowlist_reason": null,
       "python": "EndpointResolver",
@@ -233,6 +254,11 @@
       "python": "error_detail_from",
       "ts": "errorDetailFrom"
     },
+    "connect.NewAdminClient": {
+      "allowlist_reason": "Go NewX factory folds into the Python class constructor (AdminClient(...)); idiomatic Python exposes the class, not a separate factory symbol. TS keeps the create* object-factory prefix.",
+      "python": null,
+      "ts": "createAdminClient"
+    },
     "connect.NewBrokerClient": {
       "allowlist_reason": "Go NewX factory folds into the Python class constructor (BrokerClient(...)); idiomatic Python exposes the class, not a separate factory symbol. TS keeps the create* object-factory prefix.",
       "python": null,
@@ -258,6 +284,11 @@
       "python": "Validation",
       "ts": "Validation"
     },
+    "connect.WithRawBody": {
+      "allowlist_reason": null,
+      "python": "RawBody",
+      "ts": "RawBody"
+    },
     "connectserver.NewBrokerServiceHandler": {
       "allowlist_reason": "Go-only full Connect Broker handler binding — OPEN DECISION in docs/sdk-parity-matrix.md",
       "decision_anchor": "full Connect handler binding",
@@ -336,6 +367,11 @@
       "python": "Result",
       "ts": "Result"
     },
+    "core.SigningTransportFor": {
+      "allowlist_reason": null,
+      "python": "signing_transport_for",
+      "ts": "signingTransportFor"
+    },
     "core.VerifiedOffer": {
       "allowlist_reason": null,
       "python": "VerifiedOffer",
@@ -451,6 +487,16 @@
       "python": "ContentTypeProto",
       "ts": "ContentTypeProto"
     },
+    "helpers.DefaultKeyValidity": {
+      "allowlist_reason": null,
+      "python": "DEFAULT_KEY_VALIDITY",
+      "ts": "DEFAULT_KEY_VALIDITY_MS"
+    },
+    "helpers.DirectoryDocument": {
+      "allowlist_reason": null,
+      "python": "directory_document",
+      "ts": "directoryDocument"
+    },
     "helpers.DisputeFailureDetail": {
       "allowlist_reason": null,
       "python": "dispute_failure_detail",
@@ -476,6 +522,11 @@
       "python": "format_money",
       "ts": "formatMoney"
     },
+    "helpers.GenerateKey": {
+      "allowlist_reason": null,
+      "python": "generate_key",
+      "ts": "generateKey"
+    },
     "helpers.HashURL": {
       "allowlist_reason": null,
       "python": "hash_url",
diff --git a/sdk/python/tests/test_api_surface_parity.py b/sdk/python/tests/test_api_surface_parity.py
index 9ac143e1..c87aee6f 100644
--- a/sdk/python/tests/test_api_surface_parity.py
+++ b/sdk/python/tests/test_api_surface_parity.py
@@ -106,7 +106,12 @@
 # path, and that one has no default at all. The gate could not catch it, because it checks
 # the mapping and never the prose. Shipping the factory makes the entry a real 1:1 mapping
 # and the ratchet tightens with it.
-BASELINE_ALLOWLIST = 16
+#
+# Then 16 -> 17 under the sanctioned shape again: connect.NewAdminClient, the operator
+# client's Go factory, folds into the Python AdminClient class constructor exactly as
+# every other NewX does, and carries that same recorded reason. One entry, one
+# already-recorded class.
+BASELINE_ALLOWLIST = 17
 
 # HARD ZERO (was a shrink-only ratchet at 19) — undocumented TS-present / Python-null
 # gaps. The PRESENCE check skips nulls, so absent this ceiling a NEW Python-null gap

From 34329ad338902f3c2281ff9a578b1ee0ddc595b6 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 03:51:59 -0400
Subject: [PATCH 020/164] Decode the binary ErrorDetail and expose the Connect
 code in the TypeScript SDK

errorDetailFrom read a Connect error's typed reason from the debug
projection only. It now reads details[].value, the binary ErrorDetail
connect-go always sends, with a table-driven decoder for the ErrorDetail
subtree, and falls back to debug only when value is absent. A value that is
present but does not decode makes that entry unreadable; its debug is not
read in its place, which is what the Go client does with the same envelope.

The decoder follows protobuf: unknown fields and known fields with a
mismatched wire type are skipped, a singular field written twice keeps the
last value and a singular message merges, a repeated enum is read packed or
unpacked, and only the last member of the reason oneof survives. A truncated
buffer, a group, an over-long varint or a string that is not UTF-8 makes the
value undecodable. Its tables must equal the ones the shared
error-detail-wire corpus reads from the compiled descriptor, and every
vector there decodes to the proto-JSON Go renders for it.

ForaCallError.code holds the Connect code of a peer's answer: from an error
envelope, or from a non-JSON error status classified by the code it implies.
It is undefined for local failures, refused redirects and the content leg.
The connect-error replay asserts the code and the whole detail on every row,
the derived value-only and value-before-debug rows included; the
transport-failure replay asserts the code.
---
 sdk/ts/client/errors.ts                       |  10 +
 sdk/ts/client/transport.ts                    |   7 +-
 sdk/ts/src/errordetail-wire.ts                | 459 ++++++++++++++++++
 sdk/ts/src/errordetail.ts                     |  46 +-
 sdk/ts/tests/broker-execute.test.ts           |   2 +-
 sdk/ts/tests/client.test.ts                   |   2 +-
 sdk/ts/tests/connect-error.parity.test.ts     |  28 +-
 sdk/ts/tests/errordetail-wire.parity.test.ts  | 119 +++++
 sdk/ts/tests/transport-failure.parity.test.ts |   3 +
 9 files changed, 649 insertions(+), 27 deletions(-)
 create mode 100644 sdk/ts/src/errordetail-wire.ts
 create mode 100644 sdk/ts/tests/errordetail-wire.parity.test.ts

diff --git a/sdk/ts/client/errors.ts b/sdk/ts/client/errors.ts
index 418e74d1..610ed10e 100644
--- a/sdk/ts/client/errors.ts
+++ b/sdk/ts/client/errors.ts
@@ -54,6 +54,8 @@ export interface CallErrorInit {
 	 * come from a FORA service carries no message of its own, and the text a
 	 * transport synthesizes for one is that transport's rather than the peer's. */
 	peerMessage?: string;
+	/** The Connect code of the peer's answer, when one was decoded. */
+	code?: string;
 	/** The underlying failure, kept so a caller can still reach a custody or resolver
 	 * sentinel after the failure has been classified here. */
 	cause?: unknown;
@@ -82,6 +84,13 @@ export class ForaCallError extends Error {
 	 * from. Branch on `kind` or on the typed reason, never on this text, and bound it
 	 * before rendering it to a log line or an agent. */
 	readonly peerMessage: string;
+	/** The Connect code of the peer's answer, set only where a Connect answer was decoded:
+	 * an error envelope (the code it names, or the one its status implies when it names
+	 * none), or a non-JSON error status classified by the code that status implies.
+	 * Undefined for a local failure, a refused redirect, and the content leg, whose
+	 * refusals are edge tokens rather than Connect codes. `reason` may hold either kind of
+	 * token; this field holds only the Connect code. */
+	readonly code: string | undefined;
 
 	constructor(init: CallErrorInit) {
 		super(renderCallError(init), init.cause !== undefined ? { cause: init.cause } : undefined);
@@ -98,6 +107,7 @@ export class ForaCallError extends Error {
 		// words in the field that claims to hold a remote party's, which is the one
 		// thing this field exists not to do.
 		this.peerMessage = init.peerMessage ?? "";
+		this.code = init.code;
 	}
 
 	/**
diff --git a/sdk/ts/client/transport.ts b/sdk/ts/client/transport.ts
index afcc24c1..1999f691 100644
--- a/sdk/ts/client/transport.ts
+++ b/sdk/ts/client/transport.ts
@@ -313,8 +313,9 @@ export function refuseUnrequestedEncoding(
  * decodeResponse turns one answer into a parsed message, or throws the typed failure.
  *
  * A non-2xx is the Connect error envelope: `{code, message, details}`. The typed reason
- * rides in `details`, which errorDetailFrom reads — including the lowerCamelCase `debug`
- * projection connect-go emits there and no server codec replaces.
+ * rides in `details`, which errorDetailFrom reads — the binary `value` first, and the
+ * lowerCamelCase `debug` projection connect-go emits beside it only when `value` is
+ * absent. The envelope's Connect code lands on the failure's `code`.
  */
 export function decodeResponse(op: string, response: UnaryResponse): unknown {
 	// A 3xx before anything is read out of the body. Every leg refuses to follow a
@@ -372,6 +373,7 @@ function parseJSON(op: string, response: UnaryResponse): unknown {
 				op,
 				status: response.status,
 				reason: code,
+				code,
 				cause,
 			});
 		}
@@ -413,6 +415,7 @@ function connectEnvelopeError(
 			: {}),
 		cause:
 			typeof envelope["message"] === "string" ? envelope["message"] : undefined,
+		code,
 	});
 }
 
diff --git a/sdk/ts/src/errordetail-wire.ts b/sdk/ts/src/errordetail-wire.ts
new file mode 100644
index 00000000..2aee102e
--- /dev/null
+++ b/sdk/ts/src/errordetail-wire.ts
@@ -0,0 +1,459 @@
+// The binary form of fora.v1.ErrorDetail, read without a protobuf runtime.
+//
+// A Connect error carries its typed reason as `details[].value`: the binary protobuf
+// encoding of the ErrorDetail, base64-encoded. That is the authoritative copy — the
+// `debug` projection beside it is an optional rendering for JSON readers. This SDK has no
+// protobuf codec, so it reads `value` with the small table-driven decoder below, which
+// covers the ErrorDetail subtree only: the ErrorDetail message, its eight reason messages,
+// RegistrationFieldError, and the enums they use. The output is canonical proto-JSON
+// under the proto field names, which the generated ErrorDetailSchema then parses.
+//
+// The tables are a second statement of the shape, so they are held to the first: the
+// shared corpus sdk/go/connect/testdata/error-detail-wire-vectors.json carries the same
+// tables read from the compiled descriptor, and the suite requires these to be EQUAL to
+// them. A field added to the proto fails the suite until it is added here.
+//
+// Decoding follows protobuf: an unknown field is skipped by its wire type, and so is a
+// known field arriving with a wire type that does not fit its kind; a singular field
+// written twice keeps the last value, a singular message written twice merges; a repeated
+// enum is read packed or unpacked; of the ErrorDetail reason oneof, only the member seen
+// last survives. A truncated buffer, a group wire type, a varint past ten bytes or a
+// string that is not UTF-8 makes the value undecodable.
+
+/** One field of a message, in the shape the shared corpus records it. */
+export interface WireField {
+	name: string;
+	number: number;
+	kind: string;
+	type?: string;
+	repeated?: boolean;
+	map_key?: string;
+	map_value?: string;
+}
+
+const reasonEnum = (number: number, name: string, type: string): WireField => ({
+	name,
+	number,
+	kind: "enum",
+	type,
+});
+
+/** The ErrorDetail subtree's messages, keyed by fully-qualified name. */
+export const ERROR_DETAIL_WIRE_MESSAGES: Readonly<Record<string, readonly WireField[]>> = {
+	"fora.v1.CatalogRejection": [
+		reasonEnum(1, "reason", "fora.v1.CatalogRejectionReason"),
+		{ name: "rejected_paths", number: 2, kind: "string", repeated: true },
+	],
+	"fora.v1.DisputeFailure": [reasonEnum(1, "reason", "fora.v1.DisputeFailureReason")],
+	"fora.v1.DomainVerificationFailure": [
+		reasonEnum(1, "reason", "fora.v1.DomainVerificationFailureReason"),
+	],
+	"fora.v1.ErrorDetail": [
+		{ name: "message", number: 1, kind: "string" },
+		{ name: "domain", number: 2, kind: "string" },
+		{ name: "metadata", number: 3, kind: "map", map_key: "string", map_value: "string" },
+		{ name: "transaction_denial", number: 10, kind: "message", type: "fora.v1.TransactionDenial" },
+		{ name: "catalog_rejection", number: 11, kind: "message", type: "fora.v1.CatalogRejection" },
+		{ name: "registration_failure", number: 12, kind: "message", type: "fora.v1.RegistrationFailure" },
+		{ name: "dispute_failure", number: 13, kind: "message", type: "fora.v1.DisputeFailure" },
+		{
+			name: "domain_verification_failure",
+			number: 14,
+			kind: "message",
+			type: "fora.v1.DomainVerificationFailure",
+		},
+		{ name: "retrieval_auth_failure", number: 15, kind: "message", type: "fora.v1.RetrievalAuthFailure" },
+		{ name: "usage_report_rejection", number: 16, kind: "message", type: "fora.v1.UsageReportRejection" },
+		{ name: "request_auth_failure", number: 17, kind: "message", type: "fora.v1.RequestAuthFailure" },
+	],
+	"fora.v1.RegistrationFailure": [
+		reasonEnum(1, "reason", "fora.v1.RegistrationFailureReason"),
+		{
+			name: "field_errors",
+			number: 2,
+			kind: "message",
+			type: "fora.v1.RegistrationFieldError",
+			repeated: true,
+		},
+	],
+	"fora.v1.RegistrationFieldError": [
+		{ name: "path", number: 1, kind: "string" },
+		{ name: "error", number: 2, kind: "string" },
+	],
+	"fora.v1.RequestAuthFailure": [reasonEnum(1, "reason", "fora.v1.RequestAuthFailureReason")],
+	"fora.v1.RetrievalAuthFailure": [reasonEnum(1, "reason", "fora.v1.RetrievalAuthFailureReason")],
+	"fora.v1.TransactionDenial": [
+		reasonEnum(1, "reason", "fora.v1.DenialReason"),
+		{
+			name: "restriction_mismatches",
+			number: 2,
+			kind: "enum",
+			type: "fora.v1.RestrictionKind",
+			repeated: true,
+		},
+		{ name: "offer_id", number: 3, kind: "string" },
+		{ name: "exchange", number: 4, kind: "string" },
+	],
+	"fora.v1.UsageReportRejection": [
+		reasonEnum(1, "reason", "fora.v1.UsageReportRejectionReason"),
+	],
+};
+
+/** Value names from 0, in number order: the tables are contiguous from zero. */
+function enumOf(names: readonly string[]): Record<string, string> {
+	const out: Record<string, string> = {};
+	names.forEach((name, i) => {
+		out[String(i)] = name;
+	});
+	return out;
+}
+
+const prefixed = (prefix: string, names: readonly string[]) =>
+	enumOf(names.map((n) => `${prefix}_${n}`));
+
+/** The ErrorDetail subtree's enums: number (as a decimal string) to value name. */
+export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<string, string>>>> = {
+	"fora.v1.CatalogRejectionReason": prefixed("CATALOG_REJECTION_REASON", [
+		"UNSPECIFIED",
+		"NOT_CATALOG_CONTRIBUTOR",
+		"TENANT_MISMATCH",
+		"DOMAIN_NOT_VERIFIED",
+		"SIGNATURE_INVALID",
+		"MALFORMED_ENTRY",
+		"UNKNOWN_VOCAB_TOKEN",
+		"QUOTA_EXCEEDED",
+		"TERMS_LIMIT_EXCEEDED",
+		"URI_UNAVAILABLE",
+	]),
+	"fora.v1.DenialReason": prefixed("DENIAL_REASON", [
+		"UNSPECIFIED",
+		"ACCOUNT_INACTIVE",
+		"INSUFFICIENT_BALANCE",
+		"RATE_LIMITED",
+		"CONTENT_UNAVAILABLE",
+		"RESTRICTION_NOT_SATISFIED",
+		"REPORTING_OVERDUE",
+		"OFFER_EXPIRED",
+		"SIGNATURE_INVALID",
+		"QUOTA_EXCEEDED",
+		"DELEGATION_INVALID",
+		"SCOPE_INSUFFICIENT",
+		"ENTITLEMENT_MISSING",
+		"ENTITLEMENT_MALFORMED",
+		"ENTITLEMENT_EXPIRED",
+		"ENTITLEMENT_WRONG_BUYER",
+		"SUBSCRIPTION_LAPSED",
+		"ENTITLEMENT_NOT_GRANTED",
+		"ACCOUNT_NOT_REGISTERED",
+		"RELAY_NOT_ACCEPTED",
+	]),
+	"fora.v1.DisputeFailureReason": prefixed("DISPUTE_FAILURE_REASON", [
+		"UNSPECIFIED",
+		"TRANSACTION_NOT_FOUND",
+		"REPORT_NOT_FILED",
+		"WINDOW_EXPIRED",
+		"DUPLICATE",
+		"INELIGIBLE",
+	]),
+	"fora.v1.DomainVerificationFailureReason": prefixed("DOMAIN_VERIFICATION_FAILURE_REASON", [
+		"UNSPECIFIED",
+		"CHALLENGE_NOT_FOUND",
+		"CHALLENGE_MISMATCH",
+		"CHALLENGE_EXPIRED",
+		"FETCH_FAILED",
+		"EXCHANGE_NOT_AUTHORIZED",
+		"KEY_REGISTRATION_FAILED",
+	]),
+	"fora.v1.RegistrationFailureReason": prefixed("REGISTRATION_FAILURE_REASON", [
+		"UNSPECIFIED",
+		"DOMAIN_NOT_VERIFIED",
+		"INVALID_KEY",
+		"SIGNATURE_INVALID",
+		"ALREADY_REGISTERED",
+		"QUOTA_EXCEEDED",
+		"INVALID_REGISTRATION_DATA",
+		"TERMS_DIGEST_STALE",
+	]),
+	"fora.v1.RequestAuthFailureReason": prefixed("REQUEST_AUTH_FAILURE_REASON", [
+		"UNSPECIFIED",
+		"SIGNATURE_MISSING",
+		"SIGNATURE_INVALID",
+		"SIGNATURE_STALE",
+	]),
+	"fora.v1.RestrictionKind": prefixed("RESTRICTION_KIND", [
+		"UNSPECIFIED",
+		"FUNCTION",
+		"GEOGRAPHY",
+		"USER_TYPE",
+		"OTHER",
+	]),
+	"fora.v1.RetrievalAuthFailureReason": prefixed("RETRIEVAL_AUTH_FAILURE_REASON", [
+		"UNSPECIFIED",
+		"URL_EXPIRED",
+		"URL_SIGNATURE_MISSING",
+		"URL_EXPIRY_MISSING",
+		"URL_SIGNATURE_MISMATCH",
+		"AGENT_KEY_MISSING",
+		"PROOF_SIGNATURE_MISSING",
+		"KEYID_MISMATCH",
+		"THUMBPRINT_MISMATCH",
+		"PROOF_CREATED_MISSING",
+		"PROOF_EXPIRY_MISSING",
+		"PROOF_EXPIRED",
+		"PROOF_SIGNATURE_INVALID",
+	]),
+	"fora.v1.UsageReportRejectionReason": prefixed("USAGE_REPORT_REJECTION_REASON", [
+		"UNSPECIFIED",
+		"TRANSACTION_NOT_FOUND",
+		"DUPLICATE",
+		"WINDOW_EXPIRED",
+		"MISSING_REQUIRED_FIELDS",
+		"MALFORMED",
+	]),
+};
+
+/** Thrown for a value that is not a decodable ErrorDetail. Module-private: the reader
+ * turns it into "no detail from this entry". */
+class Undecodable extends Error {}
+
+const VARINT = 0;
+const FIXED64 = 1;
+const LEN = 2;
+const FIXED32 = 5;
+
+/** The wire type each kind is written with when it is not packed. */
+function wireTypeOf(field: WireField): number {
+	return field.kind === "enum" ? VARINT : LEN;
+}
+
+class Reader {
+	pos = 0;
+	constructor(readonly buf: Uint8Array) {}
+
+	done(): boolean {
+		return this.pos >= this.buf.length;
+	}
+
+	varint(): bigint {
+		let result = 0n;
+		for (let shift = 0n; shift < 70n; shift += 7n) {
+			if (this.pos >= this.buf.length) throw new Undecodable("truncated varint");
+			const byte = this.buf[this.pos++] as number;
+			result |= BigInt(byte & 0x7f) << shift;
+			if ((byte & 0x80) === 0) return BigInt.asUintN(64, result);
+		}
+		throw new Undecodable("varint longer than ten bytes");
+	}
+
+	take(n: number): Uint8Array {
+		if (n < 0 || this.pos + n > this.buf.length) throw new Undecodable("truncated field");
+		const out = this.buf.subarray(this.pos, this.pos + n);
+		this.pos += n;
+		return out;
+	}
+
+	bytes(): Uint8Array {
+		const n = this.varint();
+		if (n > BigInt(this.buf.length)) throw new Undecodable("length past the buffer");
+		return this.take(Number(n));
+	}
+
+	skip(wireType: number): void {
+		switch (wireType) {
+			case VARINT:
+				this.varint();
+				return;
+			case FIXED64:
+				this.take(8);
+				return;
+			case LEN:
+				this.bytes();
+				return;
+			case FIXED32:
+				this.take(4);
+				return;
+			default:
+				// 3 and 4 are the deprecated groups, 6 and 7 are not wire types at all.
+				throw new Undecodable(`wire type ${wireType} is not decodable here`);
+		}
+	}
+}
+
+const utf8 = new TextDecoder("utf-8", { fatal: true });
+
+function decodeString(bytes: Uint8Array): string {
+	try {
+		return utf8.decode(bytes);
+	} catch {
+		throw new Undecodable("string is not UTF-8");
+	}
+}
+
+function enumName(type: string, raw: bigint): string | number {
+	// An enum is an int32 on the wire, sign-extended to ten bytes when negative.
+	const n = Number(BigInt.asIntN(32, raw));
+	const name = ERROR_DETAIL_WIRE_ENUMS[type]?.[String(n)];
+	// A number with no name stays a number, which is how proto-JSON renders it.
+	return name ?? n;
+}
+
+type Message = Record<string, unknown>;
+
+function defineMember(target: Message, name: string, value: unknown): void {
+	Object.defineProperty(target, name, { value, enumerable: true, writable: true, configurable: true });
+}
+
+function decodeInto(
+	buf: Uint8Array,
+	type: string,
+	target: Message,
+	oneof: ReadonlySet<string>,
+): void {
+	const fields = ERROR_DETAIL_WIRE_MESSAGES[type];
+	if (fields === undefined) throw new Undecodable(`no table for ${type}`);
+	const reader = new Reader(buf);
+	while (!reader.done()) {
+		const tag = reader.varint();
+		const number = Number(tag >> 3n);
+		const wireType = Number(tag & 7n);
+		if (number === 0) throw new Undecodable("field number zero");
+		const field = fields.find((f) => f.number === number);
+		const packed = field?.kind === "enum" && field.repeated === true && wireType === LEN;
+		if (field === undefined || (!packed && wireType !== wireTypeOf(field))) {
+			reader.skip(wireType);
+			continue;
+		}
+		if (oneof.has(field.name)) {
+			for (const member of oneof) if (member !== field.name) delete target[member];
+		}
+		readField(reader, field, target, packed);
+	}
+}
+
+function readField(reader: Reader, field: WireField, target: Message, packed: boolean): void {
+	switch (field.kind) {
+		case "string": {
+			const value = decodeString(reader.bytes());
+			if (field.repeated) appendTo(target, field.name, value);
+			else defineMember(target, field.name, value);
+			return;
+		}
+		case "enum": {
+			const type = field.type ?? "";
+			if (packed) {
+				const inner = new Reader(reader.bytes());
+				while (!inner.done()) appendTo(target, field.name, enumName(type, inner.varint()));
+				return;
+			}
+			const value = enumName(type, reader.varint());
+			if (field.repeated) appendTo(target, field.name, value);
+			else defineMember(target, field.name, value);
+			return;
+		}
+		case "message": {
+			const bytes = reader.bytes();
+			const type = field.type ?? "";
+			if (field.repeated) {
+				const item: Message = {};
+				decodeInto(bytes, type, item, NO_ONEOF);
+				appendTo(target, field.name, finish(item, type));
+				return;
+			}
+			// A singular message written twice merges: decode the second occurrence onto the
+			// first rather than replacing it.
+			const existing = target[field.name];
+			const into: Message = isMessage(existing) ? existing : {};
+			decodeInto(bytes, type, into, NO_ONEOF);
+			defineMember(target, field.name, finish(into, type));
+			return;
+		}
+		case "map": {
+			const entry = new Reader(reader.bytes());
+			let key = "";
+			let value = "";
+			while (!entry.done()) {
+				const tag = entry.varint();
+				const number = Number(tag >> 3n);
+				const wireType = Number(tag & 7n);
+				if ((number === 1 || number === 2) && wireType === LEN) {
+					const s = decodeString(entry.bytes());
+					if (number === 1) key = s;
+					else value = s;
+				} else {
+					entry.skip(wireType);
+				}
+			}
+			const map = isMessage(target[field.name]) ? (target[field.name] as Message) : {};
+			defineMember(map, key, value);
+			defineMember(target, field.name, map);
+			return;
+		}
+		default:
+			throw new Undecodable(`kind ${field.kind} is not in this decoder`);
+	}
+}
+
+const NO_ONEOF: ReadonlySet<string> = new Set();
+
+function appendTo(target: Message, name: string, value: unknown): void {
+	const list = Array.isArray(target[name]) ? (target[name] as unknown[]) : [];
+	list.push(value);
+	defineMember(target, name, list);
+}
+
+function isMessage(v: unknown): v is Message {
+	return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+/** Drop the singular scalars at their zero value, which proto-JSON leaves out. */
+function finish(message: Message, type: string): Message {
+	for (const field of ERROR_DETAIL_WIRE_MESSAGES[type] ?? []) {
+		if (field.repeated || field.kind === "message" || field.kind === "map") continue;
+		const value = message[field.name];
+		if (value === "" || value === 0) delete message[field.name];
+	}
+	return message;
+}
+
+/** Standard or URL alphabet, padded or not; undefined for anything else. */
+function decodeBase64(value: string): Uint8Array | undefined {
+	const normalized = value.replace(/-/g, "+").replace(/_/g, "/").replace(/=+$/, "");
+	if (!/^[A-Za-z0-9+/]*$/.test(normalized) || normalized.length % 4 === 1) return undefined;
+	const padded = normalized + "=".repeat((4 - (normalized.length % 4)) % 4);
+	try {
+		const binary = atob(padded);
+		const out = new Uint8Array(binary.length);
+		for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);
+		return out;
+	} catch {
+		return undefined;
+	}
+}
+
+/**
+ * Decode a binary fora.v1.ErrorDetail to canonical proto-JSON under the proto field
+ * names. `oneof` names the members of the reason oneof, of which only the last seen
+ * survives. Returns undefined for a value that does not decode.
+ */
+export function decodeErrorDetailBinary(
+	bytes: Uint8Array,
+	oneof: readonly string[],
+): Record<string, unknown> | undefined {
+	try {
+		const out: Message = {};
+		decodeInto(bytes, "fora.v1.ErrorDetail", out, new Set(oneof));
+		return finish(out, "fora.v1.ErrorDetail");
+	} catch (cause) {
+		if (cause instanceof Undecodable) return undefined;
+		throw cause;
+	}
+}
+
+/** Decode a details[].value: base64, then {@link decodeErrorDetailBinary}. */
+export function decodeErrorDetailValue(
+	value: string,
+	oneof: readonly string[],
+): Record<string, unknown> | undefined {
+	const bytes = decodeBase64(value);
+	return bytes === undefined ? undefined : decodeErrorDetailBinary(bytes, oneof);
+}
diff --git a/sdk/ts/src/errordetail.ts b/sdk/ts/src/errordetail.ts
index 1abdfad8..34f40a8e 100644
--- a/sdk/ts/src/errordetail.ts
+++ b/sdk/ts/src/errordetail.ts
@@ -10,6 +10,7 @@ import type {
 	UsageReportRejectionReasonSchema,
 } from "../../../gen/ts/wire/schemas.ts";
 import { ErrorDetailSchema } from "../../../gen/ts/wire/schemas.ts";
+import { decodeErrorDetailValue } from "./errordetail-wire.ts";
 import { snakeFromJsonName } from "./wire-names.ts";
 
 // ADR-019 ErrorDetail reader + typed detail builders (both halves of the contract).
@@ -40,10 +41,10 @@ import { snakeFromJsonName } from "./wire-names.ts";
 // NAME strings, and the proto3 omit-unpopulated shape — the builders never hand-roll
 // canonicalization.
 //
-// The ErrorDetail wire form is canonical proto-JSON (snake_case field names, enums
-// as NAME strings) — the exact shape the generated ErrorDetailSchema parses. Binary
-// protobuf is deliberately NOT used: it is not a cross-language primitive
-// (protobuf's own caveat), so the shared wire the three SDKs agree on is proto-JSON.
+// The ErrorDetail this module builds is canonical proto-JSON (snake_case field names,
+// enums as NAME strings) — the exact shape the generated ErrorDetailSchema parses. On the
+// read side a Connect envelope carries the detail's binary encoding as well, in
+// `details[].value`, and that copy is the one read: see errorDetailFrom.
 
 export type ErrorDetail = z.infer<typeof ErrorDetailSchema>;
 
@@ -172,25 +173,26 @@ function protoNames(payload: unknown, budget = MAX_DETAIL_DEPTH): unknown {
  * Extract the first FORA ErrorDetail from a Connect error (or its details array).
  * `err` is either a Connect error object (carrying a `details` array) or the
  * details iterable itself. Each detail entry is the Connect wire form
- * `{ "type": "fora.v1.ErrorDetail", ... }`; the ErrorDetail proto-JSON is read from
- * the entry's `debug` projection (Connect includes it for JSON clients) or from a
- * `value` already decoded to an object. Returns null when `err` carries no
- * ErrorDetail — the TS analog of the Go `(detail, false)`.
+ * `{ "type": "fora.v1.ErrorDetail", "value": ..., "debug": ... }`. Returns null when
+ * `err` carries no ErrorDetail — the TS analog of the Go `(detail, false)`.
  *
- * The opaque binary `value` of a detail is intentionally NOT decoded here: the JSON
- * SDKs have no protobuf binary codec, so they consume the proto-JSON form.
+ * The entry's `value` is read first. It is the binary ErrorDetail itself, base64
+ * (standard or URL alphabet, padded or not), decoded by a table-driven reader pinned to
+ * the shared error-detail-wire corpus; a `value` already decoded to an object is read as
+ * it is. The `debug` projection is read ONLY when `value` is absent: it is a rendering
+ * connect-go adds for JSON readers, and it may describe something other than the detail.
+ * A `value` that is present but does not decode makes that entry unreadable — its
+ * `debug` is not read in its place — and the scan moves on to the next entry, which is
+ * what the Go client does with the same envelope.
  *
  * Both payload forms are read through protoNames, because `debug` arrives
- * lowerCamelCase and a decoded `value` — which only a caller that owns a binary codec
- * can supply — may be either. A snake_case object passes through it unchanged.
+ * lowerCamelCase. The decoded `value` and a snake_case object pass through it unchanged.
  */
 export function errorDetailFrom(err: unknown): ErrorDetail | null {
 	for (const entry of detailsOf(err)) {
 		if (!isRecord(entry) || entry["type"] !== ERROR_DETAIL_TYPE) continue;
-		const debug = entry["debug"];
-		const value = entry["value"];
-		const payload = isRecord(debug) ? debug : isRecord(value) ? value : null;
-		if (payload === null) continue;
+		const payload = payloadOf(entry);
+		if (payload === undefined) continue;
 		let normalized: unknown;
 		try {
 			normalized = protoNames(payload);
@@ -207,6 +209,18 @@ export function errorDetailFrom(err: unknown): ErrorDetail | null {
 	return null;
 }
 
+/** The proto-JSON one details entry carries: its decoded `value`, or its `debug`
+ * projection when it carries no `value`. Undefined when the entry has nothing readable. */
+function payloadOf(entry: Record<string, unknown>): Record<string, unknown> | undefined {
+	const value = entry["value"];
+	if (value !== undefined && value !== null) {
+		if (typeof value === "string") return decodeErrorDetailValue(value, REASON_FIELDS);
+		return isRecord(value) ? value : undefined;
+	}
+	const debug = entry["debug"];
+	return isRecord(debug) ? debug : undefined;
+}
+
 /** ExecuteTransaction denial reason (the DenialReason enum NAME set). */
 export type DenialReason = z.infer<typeof DenialReasonSchema>;
 /** Signed-URL / proof-of-possession failure reason. */
diff --git a/sdk/ts/tests/broker-execute.test.ts b/sdk/ts/tests/broker-execute.test.ts
index 59720868..033a554c 100644
--- a/sdk/ts/tests/broker-execute.test.ts
+++ b/sdk/ts/tests/broker-execute.test.ts
@@ -252,7 +252,7 @@ describe("BrokerClient.execute", () => {
 				details: [
 					{
 						type: "fora.v1.ErrorDetail",
-						value: "aWdub3JlZA",
+						value: "ChJyZXF1ZXN0ZXIgbWlzbWF0Y2gSFWZvcmEudjEuQnJva2VyU2VydmljZYoBAggC",
 						debug: {
 							domain: "fora.v1.BrokerService",
 							message: "requester mismatch",
diff --git a/sdk/ts/tests/client.test.ts b/sdk/ts/tests/client.test.ts
index 2b877fa5..8ec84b29 100644
--- a/sdk/ts/tests/client.test.ts
+++ b/sdk/ts/tests/client.test.ts
@@ -273,7 +273,7 @@ describe("reading an answer", () => {
 				details: [
 					{
 						type: "fora.v1.ErrorDetail",
-						value: "aWdub3JlZA",
+						value: "Cg9iYWxhbmNlIHRvbyBsb3cSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlUgIIAg",
 						debug: {
 							domain: "fora.v1.ExchangeService",
 							message: "balance too low",
diff --git a/sdk/ts/tests/connect-error.parity.test.ts b/sdk/ts/tests/connect-error.parity.test.ts
index 5b57e263..65780ad7 100644
--- a/sdk/ts/tests/connect-error.parity.test.ts
+++ b/sdk/ts/tests/connect-error.parity.test.ts
@@ -4,11 +4,14 @@
 // sdk/go/connect/connect_error_corpus_test.go.
 //
 // error-detail-vectors.json pins the DETAIL's own proto-JSON. This corpus pins the
-// ENVELOPE the detail arrives in, which is the form this SDK actually reads: with no
-// protobuf binary codec it cannot open a detail's `value` (a base64 Any), so Connect's
-// `debug` projection is the only decodable copy.
+// ENVELOPE the detail arrives in, which is the form this SDK actually reads: the detail's
+// `value` (the binary ErrorDetail, base64) first, and Connect's `debug` projection only
+// when no `value` is present. The derived rows hold that order: `*.value_only` carries no
+// projection, `value_wins_over_debug` carries a projection of a different detail, and
+// `undecodable_value_skipped` carries an intact projection beside a value that is not an
+// ErrorDetail and must still read as no detail.
 //
-// That projection is lowerCamelCase and no server option changes it — connect-go builds
+// The projection is lowerCamelCase and no server option changes it — connect-go builds
 // it with its own protojson codec at default options — while the response bodies the
 // same server emits are snake_case. Reading `debug` with a snake-only schema therefore
 // used to return a detail carrying `domain` and `message` (single words spell the same
@@ -19,6 +22,7 @@
 // Every vector here was CAPTURED from a real connect-go handler, so the fix is asserted
 // against what the wire does rather than against a description of it.
 import { describe, it, expect } from "vitest";
+import { ErrorDetailSchema } from "../../../gen/ts/wire/schemas.ts";
 import { errorDetailFrom, reason } from "../src/errordetail.ts";
 import { ForaCallError } from "../client/errors.ts";
 import { decodeResponse } from "../client/transport.ts";
@@ -36,6 +40,7 @@ type ConnectErrorVector = {
 		metadata: Record<string, string> | null;
 		reason_field: string;
 		reason_enum: string;
+		detail: Record<string, unknown> | null;
 	};
 	peer_message: string;
 };
@@ -85,6 +90,10 @@ describe("sdk/ts reads a Connect error envelope the way the sdk/go oracle does",
 			}
 			expect(thrown, v.name).toBeInstanceOf(ForaCallError);
 			expect((thrown as ForaCallError).peerMessage ?? "").toBe(v.peer_message);
+			// The Connect code the envelope names, on its own field: every row, detail or
+			// not, because the code is a property of the answer rather than of the detail.
+			expect((thrown as ForaCallError).code, v.name).toBe(v.code);
+			expect((thrown as ForaCallError).detail ?? null).toEqual(detail);
 
 			if (!v.expect.has_detail) {
 				expect(detail).toBeNull();
@@ -100,6 +109,11 @@ describe("sdk/ts reads a Connect error envelope the way the sdk/go oracle does",
 			// would rewrite it and fail here.
 			expect(got.metadata ?? {}).toEqual(v.expect.metadata ?? {});
 
+			// The whole detail, not only the projection: a nested member lost on the way
+			// (field_errors, a metadata entry) fails here. Both sides go through the
+			// generated schema, so declared defaults are filled on each alike.
+			expect(got).toEqual(ErrorDetailSchema.parse(v.expect.detail));
+
 			const typed = reason(got);
 			if (v.expect.reason_field === "") {
 				expect(typed).toBeNull();
@@ -113,15 +127,15 @@ describe("sdk/ts reads a Connect error envelope the way the sdk/go oracle does",
 
 	// The regression itself, stated once in the open rather than only via the corpus. A
 	// snake-only read of this envelope parses successfully and reports no reason — which
-	// is why nothing caught it before the corpus existed.
-	it("decodes the lowerCamelCase debug projection", () => {
+	// is why nothing caught it before the corpus existed. The entry carries no `value`,
+	// which is the one case the projection is read at all.
+	it("decodes the lowerCamelCase debug projection when no value is present", () => {
 		const detail = errorDetailFrom({
 			code: "permission_denied",
 			message: "balance too low",
 			details: [
 				{
 					type: "fora.v1.ErrorDetail",
-					value: "aWdub3JlZA",
 					debug: {
 						domain: "fora.v1.ExchangeService",
 						message: "balance too low",
diff --git a/sdk/ts/tests/errordetail-wire.parity.test.ts b/sdk/ts/tests/errordetail-wire.parity.test.ts
new file mode 100644
index 00000000..24992d35
--- /dev/null
+++ b/sdk/ts/tests/errordetail-wire.parity.test.ts
@@ -0,0 +1,119 @@
+// ErrorDetail binary decoding (TypeScript side) — replay of the shared Go-oracle corpus
+// sdk/go/connect/testdata/error-detail-wire-vectors.json.
+//
+// Mirrors sdk/python/tests and the Go leg gen_error_detail_wire_vectors_test.go.
+//
+// This SDK reads details[].value without a protobuf runtime, through a decoder driven by
+// hand-written tables. The corpus pins those tables from both sides: `wire` is the same
+// tables read from the compiled descriptor, which ours must EQUAL, and `vectors` are
+// binary encodings, together setting every field of the subtree, that must decode to the
+// proto-JSON Go renders for them.
+import { describe, expect, it } from "vitest";
+
+import {
+	decodeErrorDetailValue,
+	ERROR_DETAIL_WIRE_ENUMS,
+	ERROR_DETAIL_WIRE_MESSAGES,
+} from "../src/errordetail-wire.ts";
+import { errorDetailFrom, REASON_FIELDS } from "../src/errordetail.ts";
+import { ErrorDetailSchema } from "../../../gen/ts/wire/schemas.ts";
+import corpus from "../../go/connect/testdata/error-detail-wire-vectors.json";
+
+type WireVector = { name: string; value: string; detail: Record<string, unknown> };
+const file = corpus as {
+	wire: { messages: unknown; enums: unknown };
+	vectors: WireVector[];
+};
+
+describe("the ErrorDetail decoder tables are the descriptor's", () => {
+	it("messages", () => {
+		expect(ERROR_DETAIL_WIRE_MESSAGES).toEqual(file.wire.messages);
+	});
+	it("enums", () => {
+		expect(ERROR_DETAIL_WIRE_ENUMS).toEqual(file.wire.enums);
+	});
+});
+
+describe("sdk/ts decodes a binary ErrorDetail the way the sdk/go oracle does", () => {
+	it("the vector set is non-empty", () => {
+		expect(file.vectors.length).toBeGreaterThan(0);
+	});
+
+	for (const v of file.vectors) {
+		it(v.name, () => {
+			expect(decodeErrorDetailValue(v.value, REASON_FIELDS)).toEqual(v.detail);
+			// And through the public reader, as a Connect envelope carrying only the value.
+			const detail = errorDetailFrom([{ type: "fora.v1.ErrorDetail", value: v.value }]);
+			expect(detail).toEqual(ErrorDetailSchema.parse(v.detail));
+		});
+	}
+});
+
+/** Unpadded base64 of raw bytes. */
+function b64(bytes: number[]): string {
+	return Buffer.from(bytes).toString("base64").replace(/=+$/, "");
+}
+
+describe("protobuf decoding rules the corpus does not spell out", () => {
+	// dispute_failure{reason:4} then request_auth_failure{reason:1}: two members of the
+	// reason oneof. Protobuf keeps the last one written.
+	const twoReasons = [0x6a, 0x02, 0x08, 0x04, 0x8a, 0x01, 0x02, 0x08, 0x01];
+
+	it("keeps only the last member of the reason oneof", () => {
+		expect(decodeErrorDetailValue(b64(twoReasons), REASON_FIELDS)).toEqual({
+			request_auth_failure: { reason: "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING" },
+		});
+	});
+
+	it("skips a known field whose wire type does not fit its kind", () => {
+		// domain (2) written as a varint, then message (1) as a string.
+		const bytes = [0x10, 0x05, 0x0a, 0x01, 0x78];
+		expect(decodeErrorDetailValue(b64(bytes), REASON_FIELDS)).toEqual({ message: "x" });
+	});
+
+	it("merges a singular message written twice", () => {
+		// transaction_denial{reason:2} then transaction_denial{offer_id:"o"}.
+		const bytes = [0x52, 0x02, 0x08, 0x02, 0x52, 0x03, 0x1a, 0x01, 0x6f];
+		expect(decodeErrorDetailValue(b64(bytes), REASON_FIELDS)).toEqual({
+			transaction_denial: { reason: "DENIAL_REASON_INSUFFICIENT_BALANCE", offer_id: "o" },
+		});
+	});
+
+	it("accepts the URL alphabet and padding", () => {
+		// domain "???": its standard base64 carries a "/", which the URL alphabet spells "_".
+		const bytes = Buffer.from([0x12, 0x03, 0x3f, 0x3f, 0x3f]);
+		expect(bytes.toString("base64")).toContain("/");
+		for (const value of [bytes.toString("base64"), bytes.toString("base64url")]) {
+			expect(decodeErrorDetailValue(value, REASON_FIELDS), value).toEqual({ domain: "???" });
+		}
+		const padded = Buffer.from([0x12, 0x02, 0x61, 0x62]).toString("base64");
+		expect(padded.endsWith("=")).toBe(true);
+		expect(decodeErrorDetailValue(padded, REASON_FIELDS)).toEqual({ domain: "ab" });
+	});
+
+	it("refuses a truncated buffer, a group and invalid UTF-8", () => {
+		for (const bytes of [
+			[0x12, 0x05, 0x61],
+			[0x0b, 0x0c],
+			[0x12, 0x02, 0xc3, 0x28],
+			[0x12],
+		]) {
+			expect(decodeErrorDetailValue(b64(bytes), REASON_FIELDS), JSON.stringify(bytes)).toBeUndefined();
+		}
+	});
+
+	it("refuses a value that is not base64", () => {
+		expect(decodeErrorDetailValue("not base64!", REASON_FIELDS)).toBeUndefined();
+	});
+
+	it("reads metadata with several entries", () => {
+		const entry = (k: string, v: string) => {
+			const body = [0x0a, k.length, ...Buffer.from(k), 0x12, v.length, ...Buffer.from(v)];
+			return [0x1a, body.length, ...body];
+		};
+		const bytes = [...entry("a", "1"), ...entry("b", "2"), ...entry("a", "3")];
+		expect(decodeErrorDetailValue(b64(bytes), REASON_FIELDS)).toEqual({
+			metadata: { a: "3", b: "2" },
+		});
+	});
+});
diff --git a/sdk/ts/tests/transport-failure.parity.test.ts b/sdk/ts/tests/transport-failure.parity.test.ts
index 4dc59b85..f15a42cd 100644
--- a/sdk/ts/tests/transport-failure.parity.test.ts
+++ b/sdk/ts/tests/transport-failure.parity.test.ts
@@ -51,6 +51,9 @@ describe("an answer that did not come from the service", () => {
 			const failure = thrown as ForaCallError;
 			expect(failure.kind, `${v.name}: oracle says ${v.kind}`).toBe(v.kind);
 			expect(failure.reason).toBe(v.reason);
+			// The Connect code the status implies is the code of this answer: not an
+			// envelope, but still the peer's answer, classified the way connect-go does.
+			expect(failure.code).toBe(v.reason);
 			// The label and the consequence are pinned together: comparing only the string
 			// would still pass if the two classes swapped meanings.
 			expect(failure.kind === "unreachable").toBe(v.retryable);

From 1ec12f8d71443cd51f41b390b720c0c3bcb6472e Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:05:24 -0400
Subject: [PATCH 021/164] Add identity helpers to the TypeScript SDK

generateKey, directoryDocument and signingTransportFor mint an Ed25519
identity a verifier resolves, as the Python SDK's generate_key,
directory_document and signing_transport_for do:

- generateKey returns a key pair, its private key non-extractable, and its
  RFC 7638 thumbprint, the keyid every FORA signature names.
- directoryDocument returns the Web Bot Auth key directory publishing a set
  of public keys, each with the not_before / not_after window the WBA
  resolver requires: it opens five minutes before now and lasts
  DEFAULT_KEY_VALIDITY_MS (365 days) unless validForMs says otherwise.
- signingTransportFor wraps a send in a signing transport whose keyid is
  the key's thumbprint and whose Signature-Agent is the directory.

They ship under the new export path ./identity. The test mints an agent,
serves its directory to the SDK's WBA resolver and has verifyRequestServer
accept a request the transport signed, and refuse it when the directory
publishes another key; a client built from the minted key is accepted the
same way.
---
 package.json                  |   1 +
 sdk/ts/core/identity.ts       |  90 ++++++++++++++++++++++++++
 sdk/ts/package.json           |   1 +
 sdk/ts/tests/identity.test.ts | 115 ++++++++++++++++++++++++++++++++++
 4 files changed, 207 insertions(+)
 create mode 100644 sdk/ts/core/identity.ts
 create mode 100644 sdk/ts/tests/identity.test.ts

diff --git a/package.json b/package.json
index ad006dac..e1284ec7 100644
--- a/package.json
+++ b/package.json
@@ -35,6 +35,7 @@
     "./core/verify-request": "./sdk/ts/core/verify-request.ts",
     "./core/verify-multisig-request": "./sdk/ts/core/verify-multisig-request.ts",
     "./core/window": "./sdk/ts/core/window.ts",
+    "./identity": "./sdk/ts/core/identity.ts",
     "./hono": "./sdk/ts/hono/middleware.ts",
     "./acceptance": "./sdk/ts/src/acceptance.ts",
     "./resolvers": "./sdk/ts/resolvers/index.ts",
diff --git a/sdk/ts/core/identity.ts b/sdk/ts/core/identity.ts
new file mode 100644
index 00000000..1bf2d9fb
--- /dev/null
+++ b/sdk/ts/core/identity.ts
@@ -0,0 +1,90 @@
+// Mint an Ed25519 identity a FORA verifier can resolve.
+//
+// Three steps a caller otherwise assembles by hand: a key and its keyid, the Web Bot Auth
+// key directory that publishes it, and a signer that signs as it. The directory has the
+// shape of the generated WBAFile schema, the one the SDK's own WBA resolver parses, so a
+// document built here is one that resolver accepts.
+
+import type { z } from "zod";
+
+import type { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
+import { encodeBase64Url } from "../src/base64url.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import { createSigningTransport, type OutboundSend } from "./signing-transport.ts";
+
+/** A Web Bot Auth key directory document. */
+export type WBAFile = z.infer<typeof WBAFileSchema>;
+
+/** How long a published key stays valid by default: 365 days, in milliseconds. */
+export const DEFAULT_KEY_VALIDITY_MS = 365 * 24 * 60 * 60 * 1000;
+
+/** How far before "now" a published key's validity window opens, so a verifier whose
+ * clock runs slightly behind still accepts it. */
+const NOT_BEFORE_MARGIN_MS = 5 * 60 * 1000;
+
+/**
+ * generateKey returns a fresh Ed25519 key pair and its RFC 7638 thumbprint: the keyid every
+ * FORA signature names. The private key is non-extractable; the public key can always be
+ * exported.
+ */
+export async function generateKey(): Promise<{ keyPair: CryptoKeyPair; thumbprint: string }> {
+	const keyPair = (await crypto.subtle.generateKey({ name: "Ed25519" }, false, [
+		"sign",
+		"verify",
+	])) as CryptoKeyPair;
+	return { keyPair, thumbprint: await thumbprint(await rawPublic(keyPair.publicKey)) };
+}
+
+/**
+ * directoryDocument returns the Web Bot Auth key-directory JSON publishing `keys` (Ed25519
+ * public keys), in order.
+ *
+ * Each key carries the `not_before` / `not_after` window the resolver requires before it
+ * will hand the key out: it opens five minutes before `now` and lasts `validForMs`
+ * (DEFAULT_KEY_VALIDITY_MS when absent or not positive). `now` defaults to the current time
+ * and is injectable for a deterministic document. No revocation_url is set.
+ */
+export async function directoryDocument(
+	keys: readonly CryptoKey[],
+	opts: { validForMs?: number; now?: Date } = {},
+): Promise<WBAFile> {
+	const now = (opts.now ?? new Date()).getTime();
+	const validFor =
+		opts.validForMs !== undefined && opts.validForMs > 0 ? opts.validForMs : DEFAULT_KEY_VALIDITY_MS;
+	const notBefore = new Date(now - NOT_BEFORE_MARGIN_MS).toISOString();
+	const notAfter = new Date(now + validFor).toISOString();
+	return {
+		keys: await Promise.all(
+			keys.map(async (key) => ({
+				kty: "OKP",
+				crv: "Ed25519",
+				alg: "EdDSA",
+				use: "sig",
+				x: encodeBase64Url(await rawPublic(key)),
+				not_before: notBefore,
+				not_after: notAfter,
+			})),
+		),
+	} as WBAFile;
+}
+
+/**
+ * signingTransportFor returns a signing transport that signs as `keyPair`: keyid is its
+ * public key's thumbprint and Signature-Agent is `directory`, the WBA directory that
+ * publishes it. It wraps `send` exactly as createSigningTransport does.
+ */
+export async function signingTransportFor<R>(
+	keyPair: CryptoKeyPair,
+	directory: string,
+	send: OutboundSend<R>,
+): Promise<OutboundSend<R>> {
+	return createSigningTransport(send, {
+		privKey: keyPair.privateKey,
+		keyid: await thumbprint(await rawPublic(keyPair.publicKey)),
+		signatureAgent: directory,
+	});
+}
+
+async function rawPublic(key: CryptoKey): Promise<Uint8Array> {
+	return new Uint8Array(await crypto.subtle.exportKey("raw", key));
+}
diff --git a/sdk/ts/package.json b/sdk/ts/package.json
index 5fd53d38..2215ee04 100644
--- a/sdk/ts/package.json
+++ b/sdk/ts/package.json
@@ -30,6 +30,7 @@
     "./core/verify-request": "./core/verify-request.ts",
     "./core/verify-multisig-request": "./core/verify-multisig-request.ts",
     "./core/window": "./core/window.ts",
+    "./identity": "./core/identity.ts",
     "./hono": "./hono/middleware.ts",
     "./acceptance": "./src/acceptance.ts",
     "./resolvers": "./resolvers/index.ts",
diff --git a/sdk/ts/tests/identity.test.ts b/sdk/ts/tests/identity.test.ts
new file mode 100644
index 00000000..29ffa42c
--- /dev/null
+++ b/sdk/ts/tests/identity.test.ts
@@ -0,0 +1,115 @@
+// Identity helpers: mint a fresh agent — a key, the WBA directory publishing it, and a
+// signer that signs as it — and show a verifier accepts it.
+//
+// The verifier side is the SDK's own: the WBA resolver reads the directory from the origin
+// the covered Signature-Agent names (served here through its injected fetch), and
+// verifyRequestServer checks the request against the key it resolved.
+import { describe, expect, it } from "vitest";
+
+import { createClient, type UnarySend } from "../client/index.ts";
+import {
+	DEFAULT_KEY_VALIDITY_MS,
+	directoryDocument,
+	generateKey,
+	signingTransportFor,
+} from "../core/identity.ts";
+import type { OutboundInit } from "../core/signing-transport.ts";
+import { type VerifyRequestHeaders, verifyRequestServer } from "../core/verify-request.ts";
+import { parseWire } from "../../../gen/ts/wire/base.ts";
+import { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import { createWBAKeyResolver } from "../resolvers/index.ts";
+import { WBA_DIRECTORY_PATH } from "../resolvers/wba.ts";
+
+const DIRECTORY = "https://agent.example";
+
+/** A verifier that resolves the caller's key from the directory its request names. */
+async function verifies(
+	documents: Record<string, unknown>,
+	req: { url: string; body: Uint8Array<ArrayBuffer>; headers: Record<string, string> },
+): Promise<boolean> {
+	const resolver = createWBAKeyResolver({
+		fetch: async (url) => {
+			const doc = documents[url];
+			return { status: doc === undefined ? 404 : 200, text: async () => JSON.stringify(doc ?? {}) };
+		},
+	});
+	const headers: Record<string, string> = {};
+	for (const [k, v] of Object.entries(req.headers)) headers[k.toLowerCase()] = v;
+	const keyid = /keyid="([^"]+)"/.exec(headers["signature-input"] ?? "")?.[1] ?? "";
+	const key = await resolver.resolve(keyid, headers["signature-agent"] ?? "");
+	const verdict = await verifyRequestServer({
+		method: "POST",
+		url: req.url,
+		body: req.body,
+		headers: headers as VerifyRequestHeaders,
+		resolve: { resolve: (k) => (k === keyid && key !== undefined ? new Uint8Array(key) : undefined) },
+		now: () => Math.floor(Date.now() / 1000),
+	});
+	return verdict.valid;
+}
+
+describe("identity helpers", () => {
+	it("mint a fresh agent whose signed request a directory-resolving verifier accepts", async () => {
+		const { keyPair, thumbprint: keyid } = await generateKey();
+		const raw = new Uint8Array(await crypto.subtle.exportKey("raw", keyPair.publicKey));
+		expect(keyid).toBe(await thumbprint(raw));
+
+		const document = await directoryDocument([keyPair.publicKey]);
+		const documents = { [`${DIRECTORY}${WBA_DIRECTORY_PATH}`]: document };
+
+		const sent: { url: string; init: OutboundInit }[] = [];
+		const signing = await signingTransportFor(keyPair, DIRECTORY, async (url: string, init: OutboundInit) => {
+			sent.push({ url, init });
+		});
+		const url = "https://exchange.example/fora.v1.ExchangeService/GetAccountStatus";
+		const body = new TextEncoder().encode('{"exchange":"exchange.example"}') as Uint8Array<ArrayBuffer>;
+		await signing(url, { method: "POST", body });
+
+		const out = sent[0];
+		if (out === undefined) throw new Error("nothing was sent");
+		expect(out.init.headers?.["signature-agent"]).toBe(DIRECTORY);
+		expect(out.init.headers?.["signature-input"]).toContain(`keyid="${keyid}"`);
+		expect(await verifies(documents, { url, body, headers: out.init.headers ?? {} })).toBe(true);
+
+		// A directory that does not publish the key: the same request no longer verifies.
+		const stranger = await generateKey();
+		const otherDocs = { [`${DIRECTORY}${WBA_DIRECTORY_PATH}`]: await directoryDocument([stranger.keyPair.publicKey]) };
+		expect(await verifies(otherDocs, { url, body, headers: out.init.headers ?? {} })).toBe(false);
+	});
+
+	it("drive the client as the minted agent", async () => {
+		const { keyPair, thumbprint: keyid } = await generateKey();
+		const documents = { [`${DIRECTORY}${WBA_DIRECTORY_PATH}`]: await directoryDocument([keyPair.publicKey]) };
+		const accepted: boolean[] = [];
+		const send: UnarySend = async (req) => {
+			accepted.push(await verifies(documents, req));
+			return { status: 200, body: JSON.stringify({ ver: "1.0" }) };
+		};
+		const client = createClient("https://exchange.example", {
+			signer: { privKey: keyPair.privateKey, keyid },
+			signatureAgent: DIRECTORY,
+			agentPublicKey: keyPair.publicKey,
+			guardedSend: send,
+			endpointResolver: { resolveEndpoint: async (host) => `https://${host}` },
+		});
+		await client.getAccountStatus({ exchange: "exchange.example" });
+		expect(accepted).toEqual([true]);
+	});
+
+	it("build the directory document the WBA schema describes", async () => {
+		const a = await generateKey();
+		const b = await generateKey();
+		const now = new Date("2026-01-01T00:00:00Z");
+		const doc = await directoryDocument([a.keyPair.publicKey, b.keyPair.publicKey], { now });
+		expect(parseWire(WBAFileSchema, doc).success).toBe(true);
+		expect(doc.keys).toHaveLength(2);
+		const first = doc.keys?.[0];
+		expect(first).toMatchObject({ kty: "OKP", crv: "Ed25519", alg: "EdDSA", use: "sig" });
+		expect(first?.not_before).toBe("2025-12-31T23:55:00.000Z");
+		expect(first?.not_after).toBe(new Date(now.getTime() + DEFAULT_KEY_VALIDITY_MS).toISOString());
+		expect(doc).not.toHaveProperty("revocation_url");
+		const short = await directoryDocument([a.keyPair.publicKey], { now, validForMs: 60_000 });
+		expect(short.keys?.[0]?.not_after).toBe("2026-01-01T00:01:00.000Z");
+	});
+});

From 242871a8c175a25aa1889add3f9e645700b0eb95 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:05:42 -0400
Subject: [PATCH 022/164] Add a pre-signing hook, raw mode, strict decoding and
 delivery verification to the TypeScript client

Four capabilities for callers that test FORA services through the client,
matching the Python SDK:

- ClientOptions.beforeSign receives every RPC request just before it is
  signed, as a Fetch API Request. The request it returns is signed and sent
  and the reply decoded as usual. A hook that throws, returns something
  else, changes the method or URL, or sets a header the signer emits is
  refused as malformed with nothing sent; the host and content-length it
  carries are dropped.
- RawBody: every verb accepts one in place of its request (execute in place
  of the offers). The bytes go out as given, signed, without ver,
  idempotency_key or requester stamped and without validation or local
  refusals; the answer is decoded into the verb's response schema. A verb
  that routes by exchange still reads it from the body and resolves it.
- ClientOptions.strict checks every success answer against the published
  strict JSON Schema of its message (Ajv, draft 2020-12) and the cross-field
  rules, on the answer and every nested message that carries any, after
  reading a null member as absent. An unknown field or a broken rule is
  refused as malformed.
- execute and BrokerClient.execute verify every retrieval_endpoint: its
  Ed25519 signature against the URL-signing key the issuing Exchange
  publishes in its WBA directory (ClientOptions.deliveryKeys, the WBA
  resolver by default), its expiry, and its agent binding against this
  agent and the agent_identity_hash the answer stated. The verified bindings
  ride on the result as a non-enumerable deliveries list. fetch verifies a
  Delivery, or a URL given with the Exchange that issued it, before dialling,
  and returns the binding on Content.binding. A URL that does not verify is
  refused as malformed with a retrieval_auth_failure detail; an unreadable
  directory is unreachable. deliveryVerification: "off" skips all of it.

The verbs are typed with the generated request input types, alongside plain
records and RawBody. The options, the resolved holders and the one call path
move to client/options.ts and the stamping helpers to client/stamp.ts, so
every face shares them; the single-reader guard now reads the whole client
directory.
---
 sdk/ts/client/content.ts                      |  13 +-
 sdk/ts/client/delivery.ts                     | 165 ++++
 sdk/ts/client/index.ts                        | 702 ++++++++----------
 sdk/ts/client/options.ts                      | 246 ++++++
 sdk/ts/client/raw.ts                          |  63 ++
 sdk/ts/client/stamp.ts                        | 113 +++
 sdk/ts/client/strict.ts                       | 193 +++++
 sdk/ts/client/transport.ts                    |  85 ++-
 sdk/ts/src/crossfield.ts                      |   8 +
 sdk/ts/tests/before-sign.test.ts              | 200 +++++
 ...t-requirements-single-reader.guard.test.ts |  12 +-
 sdk/ts/tests/delivery-verification.test.ts    | 362 +++++++++
 sdk/ts/tests/raw-body.test.ts                 | 145 ++++
 sdk/ts/tests/signed-peer.ts                   |  71 ++
 sdk/ts/tests/strict-decoding.test.ts          | 111 +++
 15 files changed, 2097 insertions(+), 392 deletions(-)
 create mode 100644 sdk/ts/client/delivery.ts
 create mode 100644 sdk/ts/client/options.ts
 create mode 100644 sdk/ts/client/raw.ts
 create mode 100644 sdk/ts/client/stamp.ts
 create mode 100644 sdk/ts/client/strict.ts
 create mode 100644 sdk/ts/tests/before-sign.test.ts
 create mode 100644 sdk/ts/tests/delivery-verification.test.ts
 create mode 100644 sdk/ts/tests/raw-body.test.ts
 create mode 100644 sdk/ts/tests/signed-peer.ts
 create mode 100644 sdk/ts/tests/strict-decoding.test.ts

diff --git a/sdk/ts/client/content.ts b/sdk/ts/client/content.ts
index 6205ebdc..9a7a5037 100644
--- a/sdk/ts/client/content.ts
+++ b/sdk/ts/client/content.ts
@@ -16,6 +16,7 @@ import { MAX_BODY_DEPTH, rawNestingDepth } from "../src/jsondepth.ts";
 import { RequestIDHeader } from "../src/wire.ts";
 import { IDENTITY_ENCODING, refuseUnrequestedEncoding } from "./transport.ts";
 import { requireScheme, skipSSRF, ssrfGuard } from "../resolvers/http.ts";
+import type { Delivery } from "./delivery.ts";
 import { ForaCallError } from "./errors.ts";
 import { concat, reclaim } from "./send.ts";
 
@@ -75,6 +76,9 @@ export interface Content {
 	mimeType: string;
 	/** The fetched bytes. */
 	body: Uint8Array;
+	/** The binding the client verified before fetching: present when the URL was checked
+	 * against the Exchange that issued it, absent for a URL fetched as given. */
+	binding?: Delivery;
 }
 
 /** What the content leg needs to mint one proof and dial once. */
@@ -105,12 +109,9 @@ export interface ContentFetchOptions {
  * which the edge's own check rejects, or hand a fresh proof of possession of the agent's
  * key to whatever host the first hop named.
  *
- * The URL is taken as given. Whether it is one this agent bought, and whether its
- * agent_id matches this agent's key, are the CALLER's checks to make — the SDK exports
- * verifyEd25519SignedUrl and the proof-of-possession verifier for exactly that, and
- * running them first turns an edge 403 into a local answer. Worth doing when the URL
- * reached the caller from anywhere but its own execute response: a proof is minted for
- * whatever URL is passed in.
+ * The URL is taken as given at this tier. The client's fetch verb verifies it first —
+ * signature, binding to this agent, expiry — when it knows the Exchange that issued it,
+ * which turns an edge 403 into a local answer before a proof is minted for the URL.
  */
 export async function fetchContent(
 	signedURL: string,
diff --git a/sdk/ts/client/delivery.ts b/sdk/ts/client/delivery.ts
new file mode 100644
index 00000000..c61a423c
--- /dev/null
+++ b/sdk/ts/client/delivery.ts
@@ -0,0 +1,165 @@
+// Delivery verification: checking a signed retrieval URL before it is used.
+//
+// A purchase answers with a retrieval_endpoint per item: a URL the issuing Exchange
+// signed over "GET\n<canonical URL>", carrying its expiry (`exp`), the key that signed it
+// (`kid`, the thumbprint of the Exchange's URL-signing key) and, when the Exchange bound
+// it, the agent it was issued to (`agent_id`). It is the one signed value in a result
+// item — a Broker that relayed the purchase cannot forge or alter it — so the client
+// checks it where it arrives instead of leaving the delivery edge to refuse it later.
+//
+// The Exchange's URL-signing keys come from its Web Bot Auth key directory, the same
+// directory that publishes its other keys, resolved through the injected
+// DeliveryKeyResolver (the SDK's WBA resolver by default).
+
+import { retrievalAuthFailureDetail, type RetrievalAuthFailureReason } from "../src/errordetail.ts";
+import { verifyEd25519SignedUrl, type VerifyFailure } from "../src/verify.ts";
+import { DirectoryUnavailable } from "../resolvers/errors.ts";
+import { ForaCallError } from "./errors.ts";
+
+/** A retrieval URL whose signature, agent binding and expiry this client verified. */
+export interface Delivery {
+	/** The signed retrieval URL, verbatim. */
+	url: string;
+	/** The Exchange whose URL-signing key verified the signature. */
+	exchange: string;
+	/** The RFC 7638 thumbprint the URL is bound to; "" for a bearer (unbound) URL. */
+	agentId: string;
+	/** The `kid` that named the Exchange's URL-signing key. */
+	keyId: string;
+	/** When the URL expires (its `exp`). */
+	expiresAt: Date;
+}
+
+/**
+ * Resolves an Exchange's URL-signing key: the raw 32-byte Ed25519 public key whose RFC 7638
+ * thumbprint is `thumbprint`, from the WBA directory of `directory` (the Exchange's bare
+ * domain). The SDK's WBA resolver (createWBAKeyResolver) satisfies it. Undefined for a key
+ * the directory does not publish; a thrown DirectoryUnavailable reads as a directory that
+ * could not be reached.
+ */
+export interface DeliveryKeyResolver {
+	resolve(thumbprint: string, directory: string): Promise<Uint8Array | undefined>;
+}
+
+/** The ErrorDetail domain for a refusal this client computed itself. */
+const CLIENT_ERROR_DOMAIN = "fora.v1.Client";
+
+const REASON_OF: Readonly<Record<VerifyFailure, RetrievalAuthFailureReason>> = {
+	missing_sig: "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+	missing_exp: "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+	bad_exp_encoding: "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+	expired: "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+	bad_sig_encoding: "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+	signature_mismatch: "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+	bad_agent_encoding: "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+};
+
+/** What one verification is checked against. */
+export interface DeliveryCheck {
+	/** The verb, for the failure. */
+	op: string;
+	/** Which URL this is, in the failure's words ("item 0 (transaction tx-1)"). */
+	subject: string;
+	/** The Exchange whose key must verify the signature. */
+	exchange: string;
+	/** This agent's thumbprint; undefined when the client cannot know it. */
+	agent: string | undefined;
+	/** The agent_identity_hash the answer stated; "" or undefined when it stated none. */
+	stated: string | undefined;
+	keys: DeliveryKeyResolver;
+	/** The clock, epoch milliseconds. */
+	now: () => number;
+}
+
+/**
+ * verifyDelivery checks one retrieval URL and returns the binding it verified, or throws
+ * the typed refusal: `malformed` with a synthesized retrieval_auth_failure detail for a
+ * URL that does not verify, `unreachable` when the Exchange's directory cannot be read.
+ *
+ * The binding rule: a URL carrying `agent_id` must name this agent, and an answer that
+ * stated an agent_identity_hash must have bound the URL to exactly that. A bearer URL
+ * (no `agent_id`) from an answer that stated none verifies, with `agentId` "".
+ */
+export async function verifyDelivery(url: string, check: DeliveryCheck): Promise<Delivery> {
+	let unreachable: unknown;
+	let keyId = "";
+	let result: Awaited<ReturnType<typeof verifyEd25519SignedUrl>>;
+	try {
+		result = await verifyEd25519SignedUrl(url, {
+			now: check.now,
+			resolveKey: async (kid) => {
+				if (kid === undefined) return undefined;
+				keyId = kid;
+				let raw: Uint8Array | undefined;
+				try {
+					raw = await check.keys.resolve(kid, check.exchange);
+				} catch (cause) {
+					if (cause instanceof DirectoryUnavailable) unreachable = cause;
+					return undefined;
+				}
+				if (raw === undefined) return undefined;
+				return crypto.subtle.importKey("raw", new Uint8Array(raw), "Ed25519", false, [
+					"verify",
+				]);
+			},
+		});
+	} catch (cause) {
+		// A value that does not parse as a URL is a URL no Exchange signed.
+		throw refusal(check, "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH", cause);
+	}
+	if (unreachable !== undefined) {
+		throw new ForaCallError({
+			kind: "unreachable",
+			op: check.op,
+			cause: new Error(
+				`${check.subject}: the key directory of ${check.exchange} could not be read`,
+				{ cause: unreachable },
+			),
+		});
+	}
+	if (!result.valid) {
+		const reason = result.reason ?? "signature_mismatch";
+		throw refusal(check, REASON_OF[reason], new Error(reason));
+	}
+	const agentId = result.agentId ?? "";
+	if (agentId !== "" && check.agent !== undefined && agentId !== check.agent) {
+		throw refusal(
+			check,
+			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+			new Error(`bound to ${agentId}, not to this agent (${check.agent})`),
+		);
+	}
+	const stated = check.stated ?? "";
+	if (stated !== "" && agentId !== stated) {
+		throw refusal(
+			check,
+			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+			new Error(`bound to ${JSON.stringify(agentId)}, the answer stated ${stated}`),
+		);
+	}
+	return {
+		url,
+		exchange: check.exchange,
+		agentId,
+		keyId: result.kid ?? keyId,
+		expiresAt: new Date(Number(new URL(url).searchParams.get("exp")) * 1000),
+	};
+}
+
+function refusal(
+	check: DeliveryCheck,
+	reason: RetrievalAuthFailureReason,
+	cause: unknown,
+): ForaCallError {
+	const why = cause instanceof Error ? cause.message : String(cause);
+	return new ForaCallError({
+		kind: "malformed",
+		op: check.op,
+		cause: new Error(`${check.subject}: the delivery URL does not verify: ${why}`),
+		detail: retrievalAuthFailureDetail(
+			CLIENT_ERROR_DOMAIN,
+			"delivery URL failed the client's verification",
+			reason,
+		),
+	});
+}
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index 0c458429..bb604200 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -9,17 +9,15 @@
 // It owns NO state. The signer, the keys, the dialing seam, the endpoint resolver and the
 // verification policy are all injected.
 
-import {
-	createVerifier,
-	type DiscoveryResult,
-	type Mode,
-	type OfferGroupResult,
-	type VerifiedOffer,
-	type Verifier,
+import type {
+	DiscoveryResult,
+	OfferGroupResult,
+	VerifiedOffer,
+	Verifier,
 } from "../core/verifier.ts";
 import type { z } from "zod";
 
-import { clockWindow, type Window } from "../core/window.ts";
+import { clockWindow } from "../core/window.ts";
 import { fromWireOffer } from "../core/wire-canon.ts";
 import {
   signOfferAcceptance,
@@ -27,10 +25,10 @@ import {
   ACCEPTANCE_SIGNATURE_ALGORITHM,
 } from "../src/acceptance.ts";
 import { registrationFailureDetail } from "../src/errordetail.ts";
-import { redactUserinfo } from "../src/host-ref.ts";
-import { checkAudience, hostOf, isBareDomain } from "../src/hosts.ts";
+import { checkAudience, hostOf } from "../src/hosts.ts";
 import { generateIdempotencyKey } from "../src/idempotency.ts";
 import { ProtocolVersion } from "../src/wire.ts";
+import { thumbprint } from "../src/thumbprint.ts";
 import {
 	BrokerTransactionResponseSchema,
 	DiscoveryRequestSchema,
@@ -55,28 +53,27 @@ import {
 	UsageReportResponseSchema,
 } from "../../../gen/ts/wire/schemas.ts";
 import { type Content, fetchContent } from "./content.ts";
+import { type Delivery, verifyDelivery } from "./delivery.ts";
 import { malformed, notSent, ForaCallError } from "./errors.ts";
 import { checkRegistrationData } from "../src/regschema.ts";
 import {
-	createWellKnownRequirementsReader,
 	ExchangeNotPermitted,
 	ManifestNotExchange,
 	ManifestUnusable,
 	type RegistrationRequirements,
 } from "../resolvers/index.ts";
-import type { EndpointResolver } from "./route.ts";
+import { call, resolve, type CallOptions, type ClientOptions, type Resolved } from "./options.ts";
+import { RawBody, rawExchange, rawObject } from "./raw.ts";
 import { isInvalidHostRefusal, vetExchangeEndpoint } from "./route.ts";
-import { createUnarySend } from "./send.ts";
 import {
-	DEFAULT_CALL_TIMEOUT_MS,
-	DEFAULT_MAX_RPC_READ_BYTES,
-	parseMessage,
-	unaryCall,
-	validateRequest,
-	type CallSigner,
-	type UnarySend,
-	type Validation,
-} from "./transport.ts";
+	isRecord,
+	requireRecipient,
+	stampDiscovery,
+	stampEnvelope,
+	stampVer,
+	stringField,
+} from "./stamp.ts";
+import { parseMessage, validateRequest } from "./transport.ts";
 
 const EXCHANGE_SERVICE = "fora.v1.ExchangeService";
 const BROKER_SERVICE = "fora.v1.BrokerService";
@@ -89,129 +86,6 @@ const CATALOG_SERVICE = "fora.v1.CatalogService";
  * anyone who observes the request can repeat it. */
 export const DEFAULT_PROOF_WINDOW_SEC = 30;
 
-/** Reports what one Exchange asks of a registration.
- *
- * An interface for the same two reasons the endpoint seam is one: a test can drive a
- * registration without standing up a manifest server, and this module has no way to
- * accept a terms digest or a schema from configuration — the only way to skip the read
- * is to set `terms_digest` on the request, where the signature covers it.
- *
- * An implementation MUST NOT serve the answer from a cache. The contract requires a
- * registering client to read the digest from a freshly fetched manifest, so a cached one
- * breaks the rule the field exists to record.
- *
- * An implementation's FAILURE decides how a caller is told to react, so it is part of the
- * contract rather than an implementation detail. A failure that is a VERDICT — the domain
- * is unusable, the deployment excludes it, the document served is not an Exchange's, or it
- * is one this reader cannot use — MUST throw the resolver tier's ExchangeNotPermitted,
- * ManifestNotExchange or ManifestUnusable, or the invalid-host error raised for a
- * value that is not a bare domain;
- * those surface as `not_sent`, which tells the caller not to retry. Anything else is read
- * as a transport failure and reported as `unreachable`, i.e. worth retrying. An
- * implementation that throws a bare error for a refusal therefore has its final answer
- * retried indefinitely.
- *
- * ManifestUnusable is the seam's word for "the document arrived and cannot be read for
- * what a registration owes". The SDK's own reader reaches it for a document version it
- * cannot classify, and treats its other two disappointments as absence or as a transport
- * failure. An implementation STRICTER than that one — validating the whole document, or
- * applying a narrower version rule — reaches for the same word, and would otherwise hold
- * a final answer this seam reported as transient.
- *
- * Note which class that is NOT. ManifestVersionRefused belongs to the endpoint seam and
- * is absent from the list above on purpose: the two vocabularies are disjoint, one
- * answering whether an endpoint may be dialled and this one whether a document can be
- * read. An implementation that throws the endpoint class for a version refusal here has
- * its verdict read as a transport failure. */
-export interface RegistrationRequirementsReader {
-	resolveRegistrationRequirements(exchange: string): Promise<RegistrationRequirements>;
-}
-
-/** Everything a client is built from. Every field is injected; the client owns none of it. */
-export interface ClientOptions {
-	/** The RFC 9421 request signer. Custody stays with the application — the SDK receives
-	 * a non-extractable CryptoKey and the keyid it signs under, never key bytes. */
-	signer?: { privKey: CryptoKey; keyid: string };
-	/** The PUBLIC half of the key `signer` signs with. A bound delivery fetch presents it
-	 * in a header and derives the agent identity from it, and a non-extractable CryptoKey
-	 * cannot yield it — custody keeps the private half, so the public half is supplied
-	 * alongside. Without it the client can buy but cannot fetch what it bought.
-	 *
-	 * There is deliberately no option for a separate agent PRIVATE key. The protocol
-	 * carries one agent identity: agent_identity_hash is the thumbprint of the agent's
-	 * request-signing key, an Exchange verifies the detached acceptance against the key
-	 * registered for the caller its request signature identified, and the delivery URL is
-	 * bound to that same thumbprint. A second key would be refused at execute, and any URL
-	 * it did produce could never be fetched. */
-	agentPublicKey?: CryptoKey;
-	/** The agent's own identity, forwarded on discovery and required on a purchase: both
-	 * reference services resolve the calling agent from it and refuse a request naming
-	 * none. */
-	requester?: Record<string, unknown>;
-	/** Offer-verification strictness. Defaults to "strict" — fail-closed. */
-	verification?: Mode;
-	/** Whether an outbound request is checked against its generated schema first.
-	 * Defaults to "strict", which is deliberately stricter than Go — see the Validation
-	 * type for why. Orthogonal to `verification`: this one is about the message going
-	 * out, that one about the offers coming back. */
-	validation?: Validation;
-	/** Resolves an exchange identity to its raw 32-byte Ed25519 offer-signing key.
-	 * Injected: the client owns no key state. */
-	resolveOfferKey?: (exchange: string) => Promise<Uint8Array<ArrayBuffer> | undefined>;
-	/** Turns an offer's exchange domain into that Exchange's own advertised origin. Never
-	 * configuration — a usage report and a dispute go where the signed offer says. */
-	endpointResolver?: EndpointResolver;
-	/** Reports what one Exchange asks of a registration — the terms revision submitting
-	 * one accepts, and the schema its registration_data must match. Defaults to the
-	 * well-known reader over the SSRF-guarded transport, built once with this client:
-	 * the domain comes off the request rather than from configuration, so it is the
-	 * request-derived provenance that takes the guarded default.
-	 *
-	 * The reader it takes holds no document cache, and that is the point rather than an
-	 * implementation detail: the contract requires a registering client to read the terms
-	 * digest from a FRESHLY fetched manifest, so an implementation serving it from a
-	 * cache breaks the rule the field exists to record. There is deliberately no option
-	 * to supply a digest or a schema directly — a caller managing its own requirements
-	 * sets `terms_digest` on the request, which suppresses the read and says so on the
-	 * message the signature covers. */
-	registrationRequirements?: RegistrationRequirementsReader;
-	/** The WBA directory origin this client signs as. */
-	signatureAgent?: string;
-	/** The RFC 9421 freshness window stamped on every outbound call. Not needed for
-	 * uniqueness: every request signature carries a fresh nonce. */
-	signWindow?: Window;
-	/** The freshness window stamped on a delivery-fetch proof. */
-	proofWindow?: Window;
-	/** Mints the X-Request-ID correlation value. Absent sends no header. */
-	requestId?: () => string;
-	/** The dialing seam for the configured (home Exchange / Broker) leg. */
-	send?: UnarySend;
-	/** The dialing seam for the OFFER-DERIVED leg. Defaults to the SSRF-guarded send,
-	 * because the caller names a domain, the manifest it serves names an endpoint, and a
-	 * signed call then goes there. */
-	guardedSend?: UnarySend;
-	maxRPCReadBytes?: number;
-	callTimeoutMs?: number;
-	contentTimeoutMs?: number;
-	maxContentBytes?: number;
-	/** The clock the offer Verifier reads, in epoch milliseconds. */
-	now?: () => number;
-}
-
-/** Tunes a single state-mutating call. */
-export interface CallOptions {
-	/**
-	 * Pins the idempotency key for this call. Reusing a key makes the call a deliberate
-	 * replay: the server dedupes on it (a fresh key is minted per call by default). The
-	 * SDK never tracks keys — the server owns dedup.
-	 *
-	 * Hold the key and pass the same one back when retrying, on every verb that takes
-	 * this option. The key identifies the ACTION, not the attempt: a fresh key on a retry
-	 * reads to the server as a second purchase, a second report, a second dispute.
-	 */
-	idempotencyKey?: string;
-}
-
 /**
  * The response types, inferred from the generated schemas rather than restated.
  *
@@ -231,108 +105,84 @@ export type UsageReportResponse = z.infer<typeof UsageReportResponseSchema>;
 /** The answer to a dispute. */
 export type DisputeResponse = z.infer<typeof DisputeResponseSchema>;
 
+/**
+ * A purchase's answer together with the delivery URLs this client verified.
+ *
+ * `deliveries` has one entry per result item, in item order: the verified binding of the
+ * item's retrieval_endpoint, or undefined for an item that carries none (denied,
+ * refused, or not delivered by signed URL). It is defined non-enumerable, so the object
+ * still serializes as the wire message; it is empty when nothing was verified — a raw
+ * call, or `deliveryVerification: "off"`.
+ */
+export type ExecuteResult = TransactionResponse & {
+	readonly deliveries: readonly (Delivery | undefined)[];
+};
+/** The Broker's combined answer with the delivery URLs this client verified; see
+ * {@link ExecuteResult}. */
+export type BrokerExecuteResult = BrokerTransactionResponse & {
+	readonly deliveries: readonly (Delivery | undefined)[];
+};
+
+/**
+ * The request types a verb accepts, inferred from the generated schemas: the shape a
+ * caller writes, with every defaulted field optional. Each verb also takes a plain record
+ * (the same object, untyped) and a RawBody. There is no `toWire`: an object of one of
+ * these types already is the JSON the SDK sends.
+ */
+export type ResourceQuery = z.input<typeof ResourceQuerySchema>;
+export type DiscoveryRequest = z.input<typeof DiscoveryRequestSchema>;
+export type UsageReport = z.input<typeof UsageReportSchema>;
+export type DisputeRequest = z.input<typeof DisputeRequestSchema>;
+export type RegisterRequest = z.input<typeof RegisterRequestSchema>;
+export type GetAccountStatusRequest = z.input<typeof GetAccountStatusRequestSchema>;
+export type PushResourcesRequest = z.input<typeof PushResourcesRequestSchema>;
+export type RemoveResourcesRequest = z.input<typeof RemoveResourcesRequestSchema>;
+export type RefreshCatalogRequest = z.input<typeof RefreshCatalogRequestSchema>;
+
+/** A request a verb accepts: its typed shape, the same object as a plain record, or a
+ * RawBody sent as given. */
+type Request<T> = T | Record<string, unknown> | RawBody;
+
+/** Where fetch verifies a delivery URL. */
+export interface FetchOptions {
+	/** The Exchange that issued the URL. When set, the URL is verified against that
+	 * Exchange's URL-signing key before anything is sent. */
+	exchange?: string;
+}
+
 /** The agent-facing Exchange client. */
 export interface Client {
-	discover(query: Record<string, unknown>): Promise<DiscoveryResult>;
-	/** Buy one offer, or several issued by ONE Exchange, in one request. */
+	discover(query: Request<ResourceQuery>): Promise<DiscoveryResult>;
+	/** Buy one offer, or several issued by ONE Exchange, in one request. Every retrieval
+	 * URL in the answer is verified before it is returned. */
 	execute(
-		offer: VerifiedOffer | readonly VerifiedOffer[],
-		opts?: CallOptions,
-	): Promise<TransactionResponse>;
-	reportUsage(
-		report: Record<string, unknown>,
+		offer: VerifiedOffer | readonly VerifiedOffer[] | RawBody,
 		opts?: CallOptions,
-	): Promise<UsageReportResponse>;
-	dispute(request: Record<string, unknown>, opts?: CallOptions): Promise<DisputeResponse>;
+	): Promise<ExecuteResult>;
+	reportUsage(report: Request<UsageReport>, opts?: CallOptions): Promise<UsageReportResponse>;
+	dispute(request: Request<DisputeRequest>, opts?: CallOptions): Promise<DisputeResponse>;
 	/** Create this agent's account at the Exchange the request names. Takes no
 	 * CallOptions: the message carries no idempotency key, because registering again
 	 * returns the same account handle. */
-	register(request: Record<string, unknown>): Promise<RegisterResponse>;
+	register(request: Request<RegisterRequest>): Promise<RegisterResponse>;
 	/** Read whether this agent's account at the named Exchange is active. An empty
 	 * `billing_ref` is a NORMAL answer — no account there yet. */
-	getAccountStatus(request: Record<string, unknown>): Promise<GetAccountStatusResponse>;
-	fetch(signedURL: string): Promise<Content>;
+	getAccountStatus(request: Request<GetAccountStatusRequest>): Promise<GetAccountStatusResponse>;
+	/** Fetch what a delivery URL names. Given a Delivery, or a URL and the Exchange that
+	 * issued it, the URL is verified first and the result carries the binding. */
+	fetch(signedURL: string | Delivery, opts?: FetchOptions): Promise<Content>;
 }
 
 /** The Broker client. */
 export interface BrokerClient {
-	resolve(request: Record<string, unknown>): Promise<DiscoveryResult>;
+	resolve(request: Request<DiscoveryRequest>): Promise<DiscoveryResult>;
 	/** Buy offers from any number of Exchanges in one call; the Broker re-packages the
-	 * purchase into one sub-request per Exchange (BrokerService.ExecuteTransaction). */
+	 * purchase into one sub-request per Exchange (BrokerService.ExecuteTransaction).
+	 * Every retrieval URL in the answer is verified against the Exchange that issued it. */
 	execute(
-		offers: readonly VerifiedOffer[],
+		offers: readonly VerifiedOffer[] | RawBody,
 		opts?: CallOptions,
-	): Promise<BrokerTransactionResponse>;
-}
-
-// resolved holds what both faces are built from, so the exchange and broker clients
-// cannot drift in how they sign, correlate, bound or verify.
-interface Resolved {
-	opts: ClientOptions;
-	verifier: Verifier;
-	send: UnarySend;
-	guardedSend: UnarySend;
-	/** The SEAM, not the concrete reader: an injected one and the default are the
-	 * same thing to every caller below here. Resolved alongside the transports
-	 * because the default holds a dispatcher, so building it per call would open
-	 * one per registration and close none. */
-	requirements: RegistrationRequirementsReader;
-	signer: CallSigner | undefined;
-}
-
-function resolve(opts: ClientOptions): Resolved {
-	const now = opts.now ?? (() => Date.now());
-	const verifier = createVerifier(opts.verification ?? "strict", {
-		// Fail-closed by default: with no resolver injected nothing resolves, so every
-		// offer lands in `rejected` with a reason rather than being surfaced unchecked.
-		resolve: opts.resolveOfferKey ?? (async () => undefined),
-		now,
-	});
-	const signer: CallSigner | undefined =
-		opts.signer === undefined
-			? undefined
-			: {
-					privKey: opts.signer.privKey,
-					keyid: opts.signer.keyid,
-					...(opts.signatureAgent !== undefined
-						? { signatureAgent: opts.signatureAgent }
-						: {}),
-					...(opts.signWindow !== undefined ? { window: opts.signWindow } : {}),
-				};
-	return {
-		opts,
-		verifier,
-		send: opts.send ?? createUnarySend({ guarded: false }),
-		guardedSend: opts.guardedSend ?? createUnarySend({ guarded: true }),
-		requirements:
-			opts.registrationRequirements ?? createWellKnownRequirementsReader(),
-		signer,
-	};
-}
-
-// call is the one place a verb reaches the wire, so every leg carries the same header
-// set, the same bound and the same deadline.
-async function call(
-	r: Resolved,
-	op: string,
-	baseURL: string,
-	service: string,
-	method: string,
-	message: unknown,
-	guarded: boolean,
-): Promise<unknown> {
-	return unaryCall({
-		target: { baseURL, service, method },
-		op,
-		message,
-		// The leg decides the dial AND the gate together, so the two cannot drift apart.
-		send: guarded ? r.guardedSend : r.send,
-		guarded,
-		...(r.signer !== undefined ? { signer: r.signer } : {}),
-		...(r.opts.requestId !== undefined ? { requestId: r.opts.requestId } : {}),
-		maxBytes: r.opts.maxRPCReadBytes ?? DEFAULT_MAX_RPC_READ_BYTES,
-		timeoutMs: r.opts.callTimeoutMs ?? DEFAULT_CALL_TIMEOUT_MS,
-	});
+	): Promise<BrokerExecuteResult>;
 }
 
 /**
@@ -352,7 +202,7 @@ export function createClient(baseURL: string, options: ClientOptions = {}): Clie
 		dispute: (request, opts) => dispute(r, request, opts ?? {}),
 		register: (request) => register(r, request),
 		getAccountStatus: (request) => getAccountStatus(r, request),
-		fetch: (signedURL) => fetchVerb(r, signedURL),
+		fetch: (signedURL, opts) => fetchVerb(r, signedURL, opts ?? {}),
 	};
 }
 
@@ -413,19 +263,29 @@ export function createBrokerClient(
 async function discover(
 	r: Resolved,
 	baseURL: string,
-	query: Record<string, unknown>,
+	query: Request<ResourceQuery>,
 ): Promise<DiscoveryResult> {
 	const op = "discover";
-	const sent = stampDiscovery(op, query, r.opts.requester);
-	validateRequest(op, sent, ResourceQuerySchema, r.opts.validation ?? "strict");
+	let sent: Record<string, unknown>;
+	let message: unknown;
+	if (query instanceof RawBody) {
+		// Only to attribute a flat answer to the URI asked about; never checked.
+		sent = rawObject(query) ?? {};
+		message = query;
+	} else {
+		sent = stampDiscovery(op, query, r.opts.requester);
+		validateRequest(op, sent, ResourceQuerySchema, r.opts.validation ?? "strict");
+		message = sent;
+	}
 	const raw = await call(
 		r,
 		op,
 		baseURL,
 		EXCHANGE_SERVICE,
 		"DiscoverResources",
-		sent,
+		message,
 		false,
+		"fora.v1.ResourceResponse",
 	);
 	const msg = parseMessage<Record<string, unknown>>(op, raw, ResourceResponseSchema);
 	return {
@@ -526,22 +386,35 @@ function canonicalizeGroupOffers(group: unknown): unknown {
 async function brokerResolve(
 	r: Resolved,
 	baseURL: string,
-	request: Record<string, unknown>,
+	request: Request<DiscoveryRequest>,
 ): Promise<DiscoveryResult> {
 	const op = "resolve";
-	const sent = stampDiscovery(op, request, r.opts.requester);
-	// Refused locally rather than sent: a Broker resolves the calling agent from the
-	// requester and declines a request that names none, so this is a verdict the client
-	// already knows, and naming the remedy beats relaying "requester required" from a
-	// round trip away. execute refuses the same way.
-	if (sent["requester"] === undefined) {
-		throw malformed(
-			op,
-			new Error("no requester configured; a Broker resolves who is asking"),
-		);
+	let message: unknown = request;
+	if (!(request instanceof RawBody)) {
+		const sent = stampDiscovery(op, request, r.opts.requester);
+		// Refused locally rather than sent: a Broker resolves the calling agent from the
+		// requester and declines a request that names none, so this is a verdict the
+		// client already knows, and naming the remedy beats relaying "requester required"
+		// from a round trip away. execute refuses the same way.
+		if (sent["requester"] === undefined) {
+			throw malformed(
+				op,
+				new Error("no requester configured; a Broker resolves who is asking"),
+			);
+		}
+		validateRequest(op, sent, DiscoveryRequestSchema, r.opts.validation ?? "strict");
+		message = sent;
 	}
-	validateRequest(op, sent, DiscoveryRequestSchema, r.opts.validation ?? "strict");
-	const raw = await call(r, op, baseURL, BROKER_SERVICE, "Resolve", sent, false);
+	const raw = await call(
+		r,
+		op,
+		baseURL,
+		BROKER_SERVICE,
+		"Resolve",
+		message,
+		false,
+		"fora.v1.DiscoveryResponse",
+	);
 	const msg = parseMessage<Record<string, unknown>>(op, raw, DiscoveryResponseSchema);
 	// Read from the RAW answer for the same reason discover does: a parse normalizes, and
 	// a signature covers what the responder sent.
@@ -577,10 +450,14 @@ async function brokerResolve(
 async function execute(
 	r: Resolved,
 	baseURL: string,
-	offer: VerifiedOffer | readonly VerifiedOffer[],
+	offer: VerifiedOffer | readonly VerifiedOffer[] | RawBody,
 	opts: CallOptions,
-): Promise<TransactionResponse> {
+): Promise<ExecuteResult> {
 	const op = "execute";
+	if (offer instanceof RawBody) {
+		const raw = await call(r, op, baseURL, EXCHANGE_SERVICE, "ExecuteTransaction", offer, false, "fora.v1.TransactionResponse");
+		return withDeliveries(parseMessage<TransactionResponse>(op, raw, TransactionResponseSchema), []);
+	}
 	const offers: readonly VerifiedOffer[] = isOfferList(offer) ? offer : [offer];
 	requireOneExchange(op, offers);
 	const request = await buildTransaction(r, op, offers, opts);
@@ -593,8 +470,14 @@ async function execute(
 		"ExecuteTransaction",
 		request,
 		false,
+		"fora.v1.TransactionResponse",
+	);
+	const msg = parseMessage<TransactionResponse>(op, raw, TransactionResponseSchema);
+	const items = (msg.items ?? []) as ResultItem[];
+	return withDeliveries(
+		msg,
+		await verifyDeliveries(r, op, offers, items, () => msg.agent_identity_hash ?? ""),
 	);
-	return parseMessage(op, raw, TransactionResponseSchema);
 }
 
 /**
@@ -624,10 +507,17 @@ async function execute(
 async function brokerExecute(
 	r: Resolved,
 	baseURL: string,
-	offers: readonly VerifiedOffer[],
+	offers: readonly VerifiedOffer[] | RawBody,
 	opts: CallOptions,
-): Promise<BrokerTransactionResponse> {
+): Promise<BrokerExecuteResult> {
 	const op = "broker execute";
+	if (offers instanceof RawBody) {
+		const raw = await call(r, op, baseURL, BROKER_SERVICE, "ExecuteTransaction", offers, false, "fora.v1.BrokerTransactionResponse");
+		return withDeliveries(
+			parseMessage<BrokerTransactionResponse>(op, raw, BrokerTransactionResponseSchema),
+			[],
+		);
+	}
 	if (r.opts.requester === undefined) {
 		throw malformed(
 			op,
@@ -646,8 +536,93 @@ async function brokerExecute(
 		"ExecuteTransaction",
 		request,
 		false,
+		"fora.v1.BrokerTransactionResponse",
 	);
-	return parseMessage(op, raw, BrokerTransactionResponseSchema);
+	const msg = parseMessage<BrokerTransactionResponse>(op, raw, BrokerTransactionResponseSchema);
+	const items = (msg.items ?? []) as ResultItem[];
+	// Each Exchange bound its own items, and states the binding on its own outcome.
+	const outcomes = (msg.exchanges ?? []) as { exchange?: string; agent_identity_hash?: string }[];
+	return withDeliveries(
+		msg,
+		await verifyDeliveries(r, op, offers, items, (exchange) =>
+			outcomes.find((o) => o.exchange === exchange)?.agent_identity_hash ?? "",
+		),
+	);
+}
+
+/** The result-item members delivery verification reads. */
+interface ResultItem {
+	offer_id?: string;
+	transaction_id?: string;
+	retrieval_endpoint?: string;
+	denial_reason?: string;
+	refusal?: unknown;
+}
+
+/**
+ * verifyDeliveries checks every retrieval_endpoint in a purchase answer against the
+ * Exchange that issued the matching offer, and returns the verified bindings in item
+ * order. Item i answers request item i; when the counts differ the item is matched to its
+ * offer by offer_id instead. `stated` gives the agent_identity_hash the answer stated for
+ * an Exchange.
+ */
+async function verifyDeliveries(
+	r: Resolved,
+	op: string,
+	offers: readonly VerifiedOffer[],
+	items: readonly ResultItem[],
+	stated: (exchange: string) => string,
+): Promise<(Delivery | undefined)[]> {
+	if ((r.opts.deliveryVerification ?? "strict") === "off") return [];
+	const agent = await agentThumbprint(r);
+	const now = r.opts.now ?? (() => Date.now());
+	const out: (Delivery | undefined)[] = [];
+	for (const [i, item] of items.entries()) {
+		const url = item.retrieval_endpoint;
+		if (typeof url !== "string" || url === "" || item.denial_reason !== undefined || item.refusal !== undefined) {
+			out.push(undefined);
+			continue;
+		}
+		const matched =
+			offers.length === items.length
+				? offers[i]
+				: offers.find((o) => stringField(offerRecord(o), "offer_id") === item.offer_id);
+		const exchange = matched === undefined ? "" : stringField(offerRecord(matched), "exchange");
+		out.push(
+			await verifyDelivery(url, {
+				op,
+				subject: `item ${i} (transaction ${JSON.stringify(item.transaction_id ?? "")})`,
+				exchange,
+				agent,
+				stated: stated(exchange),
+				keys: r.deliveryKeys,
+				now,
+			}),
+		);
+	}
+	return out;
+}
+
+/** This agent's identity as a delivery URL binds it: the thumbprint of the configured
+ * public key, or the signer's keyid, which the protocol defines as that thumbprint. */
+async function agentThumbprint(r: Resolved): Promise<string | undefined> {
+	if (r.opts.agentPublicKey !== undefined) {
+		const raw = new Uint8Array(await crypto.subtle.exportKey("raw", r.opts.agentPublicKey));
+		return thumbprint(raw);
+	}
+	return r.opts.signer?.keyid;
+}
+
+/** Attach the verified bindings without making them part of the wire message. */
+function withDeliveries<T extends object>(
+	msg: T,
+	deliveries: (Delivery | undefined)[],
+): T & { readonly deliveries: readonly (Delivery | undefined)[] } {
+	Object.defineProperty(msg, "deliveries", {
+		value: Object.freeze(deliveries),
+		enumerable: false,
+	});
+	return msg as T & { readonly deliveries: readonly (Delivery | undefined)[] };
 }
 
 function isOfferList(
@@ -884,10 +859,13 @@ function requireRequesterIsSigner(
  */
 async function reportUsage(
 	r: Resolved,
-	report: Record<string, unknown>,
+	report: Request<UsageReport>,
 	opts: CallOptions,
 ): Promise<UsageReportResponse> {
 	const op = "report usage";
+	if (report instanceof RawBody) {
+		return routedRaw(r, op, "ReportUsage", report, "fora.v1.UsageReportResponse", UsageReportResponseSchema);
+	}
 	const sent = stampEnvelope(op, report, opts);
 	// The address is vetted BEFORE the schema: an unroutable recipient is a refusal to
 	// send, which is a different verdict from a message the server would reject, and the
@@ -906,6 +884,7 @@ async function reportUsage(
 		"ReportUsage",
 		sent,
 		true,
+		"fora.v1.UsageReportResponse",
 	);
 	return parseMessage(op, raw, UsageReportResponseSchema);
 }
@@ -924,10 +903,13 @@ async function reportUsage(
  */
 async function dispute(
 	r: Resolved,
-	request: Record<string, unknown>,
+	request: Request<DisputeRequest>,
 	opts: CallOptions,
 ): Promise<DisputeResponse> {
 	const op = "dispute";
+	if (request instanceof RawBody) {
+		return routedRaw(r, op, "DisputeTransaction", request, "fora.v1.DisputeResponse", DisputeResponseSchema);
+	}
 	const sent = stampEnvelope(op, request, opts);
 	const endpoint = await vetExchangeEndpoint(
 		r.opts.endpointResolver,
@@ -943,6 +925,7 @@ async function dispute(
 		"DisputeTransaction",
 		sent,
 		true,
+		"fora.v1.DisputeResponse",
 	);
 	return parseMessage(op, raw, DisputeResponseSchema);
 }
@@ -989,9 +972,12 @@ const CLIENT_ERROR_DOMAIN = "fora.v1.Client";
  */
 async function register(
 	r: Resolved,
-	request: Record<string, unknown>,
+	request: Request<RegisterRequest>,
 ): Promise<RegisterResponse> {
 	const op = "register";
+	if (request instanceof RawBody) {
+		return routedRaw(r, op, "Register", request, "fora.v1.RegisterResponse", RegisterResponseSchema);
+	}
 	const sent = stampVer(op, request);
 	requireRecipient(op, stringField(sent, "exchange"));
 	// Narrowed rather than asserted. The bounds below are defined over an OBJECT, and
@@ -1015,7 +1001,7 @@ async function register(
 		op,
 	);
 	validateRequest(op, sent, RegisterRequestSchema, r.opts.validation ?? "strict");
-	const raw = await call(r, op, endpoint, EXCHANGE_SERVICE, "Register", sent, true);
+	const raw = await call(r, op, endpoint, EXCHANGE_SERVICE, "Register", sent, true, "fora.v1.RegisterResponse");
 	return parseMessage(op, raw, RegisterResponseSchema);
 }
 
@@ -1035,9 +1021,12 @@ async function register(
  */
 async function getAccountStatus(
 	r: Resolved,
-	request: Record<string, unknown>,
+	request: Request<GetAccountStatusRequest>,
 ): Promise<GetAccountStatusResponse> {
 	const op = "get account status";
+	if (request instanceof RawBody) {
+		return routedRaw(r, op, "GetAccountStatus", request, "fora.v1.GetAccountStatusResponse", GetAccountStatusResponseSchema);
+	}
 	const sent = stampVer(op, request);
 	requireRecipient(op, stringField(sent, "exchange"));
 	const endpoint = await vetExchangeEndpoint(
@@ -1046,10 +1035,29 @@ async function getAccountStatus(
 		op,
 	);
 	validateRequest(op, sent, GetAccountStatusRequestSchema, r.opts.validation ?? "strict");
-	const raw = await call(r, op, endpoint, EXCHANGE_SERVICE, "GetAccountStatus", sent, true);
+	const raw = await call(r, op, endpoint, EXCHANGE_SERVICE, "GetAccountStatus", sent, true, "fora.v1.GetAccountStatusResponse");
 	return parseMessage(op, raw, GetAccountStatusResponseSchema);
 }
 
+/**
+ * routedRaw sends a RawBody on a verb that routes by the request's `exchange`. The
+ * recipient is still read from the body and resolved through that Exchange's own
+ * manifest, over the guarded leg: where a signed request goes is not part of the message
+ * raw mode leaves alone. A body naming no usable recipient is refused as not_sent.
+ */
+async function routedRaw<T>(
+	r: Resolved,
+	op: string,
+	method: string,
+	body: RawBody,
+	response: string,
+	schema: { safeParse: (v: unknown) => { success: boolean; data?: unknown } },
+): Promise<T> {
+	const endpoint = await vetExchangeEndpoint(r.opts.endpointResolver, rawExchange(body), op);
+	const raw = await call(r, op, endpoint, EXCHANGE_SERVICE, method, body, true, response);
+	return parseMessage<T>(op, raw, schema);
+}
+
 /**
  * applyRegistrationRequirements reads what the Exchange asks of a registration and applies
  * it to the request being built.
@@ -1130,11 +1138,24 @@ async function applyRegistrationRequirements(
  * does not discover, select, buy or report — that orchestration is a separate, higher
  * tier.
  *
+ * Given a Delivery — what execute verified — or a URL plus the Exchange that issued it,
+ * the URL is verified before anything is sent: its signature against that Exchange's
+ * URL-signing key, its binding to this agent, its expiry. A URL that does not verify is
+ * refused as `malformed` with a retrieval_auth_failure detail, and the returned Content
+ * carries the verified binding. A bare URL with no Exchange is fetched as given, with no
+ * binding, as it is under `deliveryVerification: "off"`.
+ *
  * It takes no CallOptions: a fetch is a GET against an already-issued URL, so there is no
  * idempotency key to pin — nothing on this path mutates state.
  */
-async function fetchVerb(r: Resolved, signedURL: string): Promise<Content> {
+async function fetchVerb(
+	r: Resolved,
+	target: string | Delivery,
+	opts: FetchOptions,
+): Promise<Content> {
 	const op = "fetch content";
+	const signedURL = typeof target === "string" ? target : target.url;
+	const exchange = typeof target === "string" ? opts.exchange : target.exchange;
 	if (r.opts.signer === undefined) {
 		throw new ForaCallError({
 			kind: "not_signable",
@@ -1155,7 +1176,19 @@ async function fetchVerb(r: Resolved, signedURL: string): Promise<Content> {
 			),
 		});
 	}
-	return fetchContent(signedURL, {
+	let binding: Delivery | undefined;
+	if (exchange !== undefined && (r.opts.deliveryVerification ?? "strict") === "strict") {
+		binding = await verifyDelivery(signedURL, {
+			op,
+			subject: "the delivery URL",
+			exchange,
+			agent: await agentThumbprint(r),
+			stated: undefined,
+			keys: r.deliveryKeys,
+			now: r.opts.now ?? (() => Date.now()),
+		});
+	}
+	const content = await fetchContent(signedURL, {
 		// One private key, held by the signer. The public half rides alongside because
 		// custody keeps the private one and a CryptoKey cannot be asked for its pair.
 		keyPair: { privateKey: r.opts.signer.privKey, publicKey: r.opts.agentPublicKey },
@@ -1172,84 +1205,13 @@ async function fetchVerb(r: Resolved, signedURL: string): Promise<Content> {
 			: {}),
 		...(r.opts.requestId !== undefined ? { requestId: r.opts.requestId } : {}),
 	});
+	return binding === undefined ? content : { ...content, binding };
 }
 
 // ---------------------------------------------------------------------------
 // Envelope stamping
 // ---------------------------------------------------------------------------
 
-/**
- * stampDiscovery fills the envelope a DISCOVERY call carries, which is the mutating
- * envelope minus the idempotency key: pure discovery buys nothing and changes nothing, so
- * there is no action for a key to identify.
- *
- * Both fills are only-when-empty. The caller's own value always wins — the message
- * crossed a module boundary as an argument, not as a buffer to fill in — and the
- * requester is filled because both reference services resolve the calling agent from it
- * and refuse a request that names none, while the client already holds that identity.
- */
-function stampDiscovery(
-	op: string,
-	message: Record<string, unknown>,
-	requester: Record<string, unknown> | undefined,
-): Record<string, unknown> {
-	const sent = clone(op, message);
-	if (sent["ver"] === undefined || sent["ver"] === "") sent["ver"] = ProtocolVersion;
-	if (sent["requester"] === undefined && requester !== undefined) {
-		sent["requester"] = requester;
-	}
-	return sent;
-}
-
-/**
- * stampEnvelope fills the two envelope fields the protocol requires on a state-mutating
- * call, WITHOUT overwriting what the caller already set.
- *
- * Fill-when-empty is the whole rule. `ver` has a single owner, so the SDK supplies it
- * rather than making every caller reach for the constant. The idempotency key is REQUIRED
- * and identifies the action rather than the attempt, so a value the caller put there is
- * theirs — discarding it would turn each of their retries into a fresh action, which is
- * the double-counting the field exists to prevent. A pinned key overrides both.
- */
-function stampEnvelope(
-	op: string,
-	message: Record<string, unknown>,
-	opts: CallOptions,
-): Record<string, unknown> {
-	const sent = clone(op, message);
-	if (sent["ver"] === undefined || sent["ver"] === "") sent["ver"] = ProtocolVersion;
-	const onMessage = sent["idempotency_key"];
-	// Each fallback is taken when the one before it is EMPTY, not merely absent: an empty
-	// pinned key is no key, which is how Go and Python both read it.
-	sent["idempotency_key"] =
-		opts.idempotencyKey !== undefined && opts.idempotencyKey !== ""
-			? opts.idempotencyKey
-			: typeof onMessage === "string" && onMessage !== ""
-				? onMessage
-				: generateIdempotencyKey();
-	return sent;
-}
-
-// clone copies a caller's message so the SDK can stamp its envelope without touching what
-// the caller still holds. structuredClone is the runtime's own deep copy; a message that
-// cannot survive it is one that cannot be serialized to the wire either.
-function clone(op: string, message: Record<string, unknown>): Record<string, unknown> {
-	try {
-		return structuredClone(message);
-	} catch (cause) {
-		throw malformed(op, cause);
-	}
-}
-
-function stringField(record: Record<string, unknown>, key: string): string {
-	const value = record[key];
-	return typeof value === "string" ? value : "";
-}
-
-function isRecord(v: unknown): v is Record<string, unknown> {
-	return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-
 // ---------------------------------------------------------------------------
 // The agent's account: ExchangeService
 // ---------------------------------------------------------------------------
@@ -1275,9 +1237,9 @@ export type RefreshCatalogResponse = z.infer<typeof RefreshCatalogResponseSchema
 
 /** The publisher-facing Catalog client. */
 export interface CatalogClient {
-	pushResources(request: Record<string, unknown>): Promise<PushResourcesResponse>;
-	removeResources(request: Record<string, unknown>): Promise<RemoveResourcesResponse>;
-	refreshCatalog(request: Record<string, unknown>): Promise<RefreshCatalogResponse>;
+	pushResources(request: Request<PushResourcesRequest>): Promise<PushResourcesResponse>;
+	removeResources(request: Request<RemoveResourcesRequest>): Promise<RemoveResourcesResponse>;
+	refreshCatalog(request: Request<RefreshCatalogRequest>): Promise<RefreshCatalogResponse>;
 }
 
 /**
@@ -1304,11 +1266,11 @@ export function createCatalogClient(baseURL: string, options: ClientOptions = {}
 	const r = resolve(options);
 	return {
 		pushResources: (request) =>
-			catalogCall(r, baseURL, "push resources", "PushResources", PushResourcesRequestSchema, PushResourcesResponseSchema, request),
+			catalogCall(r, baseURL, "push resources", "PushResources", PushResourcesRequestSchema, PushResourcesResponseSchema, request, "fora.v1.PushResourcesResponse"),
 		removeResources: (request) =>
-			catalogCall(r, baseURL, "remove resources", "RemoveResources", RemoveResourcesRequestSchema, RemoveResourcesResponseSchema, request),
+			catalogCall(r, baseURL, "remove resources", "RemoveResources", RemoveResourcesRequestSchema, RemoveResourcesResponseSchema, request, "fora.v1.RemoveResourcesResponse"),
 		refreshCatalog: (request) =>
-			catalogCall(r, baseURL, "refresh catalog", "RefreshCatalog", RefreshCatalogRequestSchema, RefreshCatalogResponseSchema, request),
+			catalogCall(r, baseURL, "refresh catalog", "RefreshCatalog", RefreshCatalogRequestSchema, RefreshCatalogResponseSchema, request, "fora.v1.RefreshCatalogResponse"),
 	};
 }
 
@@ -1329,52 +1291,34 @@ async function catalogCall<T>(
 	method: string,
 	requestSchema: { safeParse: (v: unknown) => { success: boolean; data?: unknown } },
 	responseSchema: { safeParse: (v: unknown) => { success: boolean; data?: unknown } },
-	request: Record<string, unknown>,
+	request: Record<string, unknown> | RawBody,
+	response: string,
 ): Promise<T> {
-	const sent = stampVer(op, request);
-	requireRecipient(op, stringField(sent, "exchange"));
-	validateRequest(op, sent, requestSchema, r.opts.validation ?? "strict");
-	const raw = await call(r, op, baseURL, CATALOG_SERVICE, method, sent, false);
-	return parseMessage<T>(op, raw, responseSchema);
-}
-
-function stampVer(op: string, message: Record<string, unknown>): Record<string, unknown> {
-	const sent = clone(op, message);
-	if (sent["ver"] === undefined || sent["ver"] === "") sent["ver"] = ProtocolVersion;
-	return sent;
-}
-
-// Serves the catalog verbs and the two account verbs, and asks only the SHAPE question.
-//
-// The predicate is isBareDomain, the SHAPE rule, not the routing rule isBareHost. The
-// only question it answers is whether the value is the form the contract admits, which
-// is the protovalidate pattern `exchange` carries and the same rule the Exchange's own
-// audience check applies on arrival. Whether the value can be DIALLED is a separate
-// question with a separate answer: a catalog client is built against an address the
-// publisher configured and never asks it, while the account verbs resolve this domain
-// through its own manifest and ask it there, under the routing predicate. The routing
-// predicate is deliberately wider: an underscore, a trailing root dot and a bracketed
-// IPv6 literal are all usable hosts and none of them is a value this field may hold,
-// so vetting with it would sign and send a request the recipient can only refuse.
-//
-// The refused value is redacted before it is named. A reference carrying userinfo is a
-// verdict rather than a parse failure, so it reaches the message below verbatim; the
-// routing check next door redacts for the same reason, and a tier that echoes is the
-// drift redactUserinfo exists to prevent.
-function requireRecipient(op: string, exchange: string): void {
-	if (exchange === "") {
-		throw notSent(op, new Error("request names no recipient; set exchange to the Exchange's bare domain"));
-	}
-	if (!isBareDomain(exchange)) {
-		throw notSent(op, new Error(`exchange ${JSON.stringify(redactUserinfo(exchange))} is not a bare domain`));
+	let message: unknown = request;
+	if (!(request instanceof RawBody)) {
+		const sent = stampVer(op, request);
+		requireRecipient(op, stringField(sent, "exchange"));
+		validateRequest(op, sent, requestSchema, r.opts.validation ?? "strict");
+		message = sent;
 	}
+	const raw = await call(r, op, baseURL, CATALOG_SERVICE, method, message, false, response);
+	return parseMessage<T>(op, raw, responseSchema);
 }
 
 export { ForaCallError } from "./errors.ts";
 export type { CallErrorKind } from "./errors.ts";
 export type { Content } from "./content.ts";
+export type { Delivery, DeliveryKeyResolver } from "./delivery.ts";
 export type { EndpointResolver } from "./route.ts";
-export type { UnaryRequest, UnaryResponse, UnarySend, Validation } from "./transport.ts";
+export type { CallOptions, ClientOptions, RegistrationRequirementsReader } from "./options.ts";
+export { RawBody } from "./raw.ts";
+export type {
+	BeforeSign,
+	UnaryRequest,
+	UnaryResponse,
+	UnarySend,
+	Validation,
+} from "./transport.ts";
 export {
 	DEFAULT_CALL_TIMEOUT_MS,
 	DEFAULT_MAX_RPC_READ_BYTES,
diff --git a/sdk/ts/client/options.ts b/sdk/ts/client/options.ts
new file mode 100644
index 00000000..b9c58013
--- /dev/null
+++ b/sdk/ts/client/options.ts
@@ -0,0 +1,246 @@
+// What every client face is built from: the options, the resolved holders, and the one
+// call every verb reaches the wire through. Shared by the exchange, Broker, catalog and
+// admin faces so none of them can drift in how it signs, correlates, bounds, verifies or
+// decodes.
+
+import { createVerifier, type Mode, type Verifier } from "../core/verifier.ts";
+import type { Window } from "../core/window.ts";
+import {
+	createWBAKeyResolver,
+	createWellKnownRequirementsReader,
+	type RegistrationRequirements,
+} from "../resolvers/index.ts";
+import type { DeliveryKeyResolver } from "./delivery.ts";
+import type { EndpointResolver } from "./route.ts";
+import { createUnarySend } from "./send.ts";
+import { checkStrict } from "./strict.ts";
+import {
+	DEFAULT_CALL_TIMEOUT_MS,
+	DEFAULT_MAX_RPC_READ_BYTES,
+	unaryCall,
+	type BeforeSign,
+	type CallSigner,
+	type UnarySend,
+	type Validation,
+} from "./transport.ts";
+
+/** Reports what one Exchange asks of a registration.
+ *
+ * An interface for the same two reasons the endpoint seam is one: a test can drive a
+ * registration without standing up a manifest server, and this module has no way to
+ * accept a terms digest or a schema from configuration — the only way to skip the read
+ * is to set `terms_digest` on the request, where the signature covers it.
+ *
+ * An implementation MUST NOT serve the answer from a cache. The contract requires a
+ * registering client to read the digest from a freshly fetched manifest, so a cached one
+ * breaks the rule the field exists to record.
+ *
+ * An implementation's FAILURE decides how a caller is told to react, so it is part of the
+ * contract rather than an implementation detail. A failure that is a VERDICT — the domain
+ * is unusable, the deployment excludes it, the document served is not an Exchange's, or it
+ * is one this reader cannot use — MUST throw the resolver tier's ExchangeNotPermitted,
+ * ManifestNotExchange or ManifestUnusable, or the invalid-host error raised for a
+ * value that is not a bare domain;
+ * those surface as `not_sent`, which tells the caller not to retry. Anything else is read
+ * as a transport failure and reported as `unreachable`, i.e. worth retrying. An
+ * implementation that throws a bare error for a refusal therefore has its final answer
+ * retried indefinitely.
+ *
+ * ManifestUnusable is the seam's word for "the document arrived and cannot be read for
+ * what a registration owes". The SDK's own reader reaches it for a document version it
+ * cannot classify, and treats its other two disappointments as absence or as a transport
+ * failure. An implementation STRICTER than that one — validating the whole document, or
+ * applying a narrower version rule — reaches for the same word, and would otherwise hold
+ * a final answer this seam reported as transient.
+ *
+ * Note which class that is NOT. ManifestVersionRefused belongs to the endpoint seam and
+ * is absent from the list above on purpose: the two vocabularies are disjoint, one
+ * answering whether an endpoint may be dialled and this one whether a document can be
+ * read. An implementation that throws the endpoint class for a version refusal here has
+ * its verdict read as a transport failure. */
+export interface RegistrationRequirementsReader {
+	resolveRegistrationRequirements(exchange: string): Promise<RegistrationRequirements>;
+}
+
+/** Everything a client is built from. Every field is injected; the client owns none of it. */
+export interface ClientOptions {
+	/** The RFC 9421 request signer. Custody stays with the application — the SDK receives
+	 * a non-extractable CryptoKey and the keyid it signs under, never key bytes. */
+	signer?: { privKey: CryptoKey; keyid: string };
+	/** The PUBLIC half of the key `signer` signs with. A bound delivery fetch presents it
+	 * in a header and derives the agent identity from it, and a non-extractable CryptoKey
+	 * cannot yield it — custody keeps the private half, so the public half is supplied
+	 * alongside. Without it the client can buy but cannot fetch what it bought.
+	 *
+	 * There is deliberately no option for a separate agent PRIVATE key. The protocol
+	 * carries one agent identity: agent_identity_hash is the thumbprint of the agent's
+	 * request-signing key, an Exchange verifies the detached acceptance against the key
+	 * registered for the caller its request signature identified, and the delivery URL is
+	 * bound to that same thumbprint. A second key would be refused at execute, and any URL
+	 * it did produce could never be fetched. */
+	agentPublicKey?: CryptoKey;
+	/** The agent's own identity, forwarded on discovery and required on a purchase: both
+	 * reference services resolve the calling agent from it and refuse a request naming
+	 * none. */
+	requester?: Record<string, unknown>;
+	/** Offer-verification strictness. Defaults to "strict" — fail-closed. */
+	verification?: Mode;
+	/** Whether an outbound request is checked against its generated schema first.
+	 * Defaults to "strict", which is deliberately stricter than Go — see the Validation
+	 * type for why. Orthogonal to `verification`: this one is about the message going
+	 * out, that one about the offers coming back. */
+	validation?: Validation;
+	/** Resolves an exchange identity to its raw 32-byte Ed25519 offer-signing key.
+	 * Injected: the client owns no key state. */
+	resolveOfferKey?: (exchange: string) => Promise<Uint8Array<ArrayBuffer> | undefined>;
+	/** Turns an offer's exchange domain into that Exchange's own advertised origin. Never
+	 * configuration — a usage report and a dispute go where the signed offer says. */
+	endpointResolver?: EndpointResolver;
+	/** Reports what one Exchange asks of a registration — the terms revision submitting
+	 * one accepts, and the schema its registration_data must match. Defaults to the
+	 * well-known reader over the SSRF-guarded transport, built once with this client:
+	 * the domain comes off the request rather than from configuration, so it is the
+	 * request-derived provenance that takes the guarded default.
+	 *
+	 * The reader it takes holds no document cache, and that is the point rather than an
+	 * implementation detail: the contract requires a registering client to read the terms
+	 * digest from a FRESHLY fetched manifest, so an implementation serving it from a
+	 * cache breaks the rule the field exists to record. There is deliberately no option
+	 * to supply a digest or a schema directly — a caller managing its own requirements
+	 * sets `terms_digest` on the request, which suppresses the read and says so on the
+	 * message the signature covers. */
+	registrationRequirements?: RegistrationRequirementsReader;
+	/** The WBA directory origin this client signs as. */
+	signatureAgent?: string;
+	/** The RFC 9421 freshness window stamped on every outbound call. Not needed for
+	 * uniqueness: every request signature carries a fresh nonce. */
+	signWindow?: Window;
+	/** The freshness window stamped on a delivery-fetch proof. */
+	proofWindow?: Window;
+	/** Mints the X-Request-ID correlation value. Absent sends no header. */
+	requestId?: () => string;
+	/** The dialing seam for the configured (home Exchange / Broker) leg. */
+	send?: UnarySend;
+	/** The dialing seam for the OFFER-DERIVED leg. Defaults to the SSRF-guarded send,
+	 * because the caller names a domain, the manifest it serves names an endpoint, and a
+	 * signed call then goes there. */
+	guardedSend?: UnarySend;
+	maxRPCReadBytes?: number;
+	callTimeoutMs?: number;
+	contentTimeoutMs?: number;
+	maxContentBytes?: number;
+	/** The clock the offer Verifier reads, in epoch milliseconds. Delivery verification
+	 * reads it too, for a retrieval URL's expiry. */
+	now?: () => number;
+	/** Called with every RPC request just before it is signed; the request it returns is
+	 * what gets signed and sent. See {@link BeforeSign}. */
+	beforeSign?: BeforeSign;
+	/** Refuse, as `malformed`, a success answer that carries a field its message does not
+	 * declare or breaks one of the proto's cross-field rules. Checked against the published
+	 * strict JSON Schemas, so the shape is the generator's. Defaults to false: the generated
+	 * schemas drop unknown fields, which keeps a client working against a newer Exchange. */
+	strict?: boolean;
+	/** Resolves an Exchange's URL-signing key for delivery verification. Defaults to the
+	 * WBA resolver over the SSRF-guarded transport, built once with this client: the keys
+	 * come from the issuing Exchange's own key directory. */
+	deliveryKeys?: DeliveryKeyResolver;
+	/** Whether execute and fetch verify a retrieval URL's signature, agent binding and
+	 * expiry. Defaults to "strict"; "off" skips it — for a site whose delivery URLs use a
+	 * scheme other than the protocol's Ed25519 signed URL. */
+	deliveryVerification?: Mode;
+}
+
+/** Tunes a single state-mutating call. */
+export interface CallOptions {
+	/**
+	 * Pins the idempotency key for this call. Reusing a key makes the call a deliberate
+	 * replay: the server dedupes on it (a fresh key is minted per call by default). The
+	 * SDK never tracks keys — the server owns dedup.
+	 *
+	 * Hold the key and pass the same one back when retrying, on every verb that takes
+	 * this option. The key identifies the ACTION, not the attempt: a fresh key on a retry
+	 * reads to the server as a second purchase, a second report, a second dispute.
+	 */
+	idempotencyKey?: string;
+}
+
+// resolved holds what both faces are built from, so the exchange and broker clients
+// cannot drift in how they sign, correlate, bound or verify.
+export interface Resolved {
+	opts: ClientOptions;
+	verifier: Verifier;
+	send: UnarySend;
+	guardedSend: UnarySend;
+	/** The SEAM, not the concrete reader: an injected one and the default are the
+	 * same thing to every caller below here. Resolved alongside the transports
+	 * because the default holds a dispatcher, so building it per call would open
+	 * one per registration and close none. */
+	requirements: RegistrationRequirementsReader;
+	signer: CallSigner | undefined;
+	/** The delivery-key seam, default built once with the client for the reason the
+	 * requirements reader is. */
+	deliveryKeys: DeliveryKeyResolver;
+}
+
+export function resolve(opts: ClientOptions): Resolved {
+	const now = opts.now ?? (() => Date.now());
+	const verifier = createVerifier(opts.verification ?? "strict", {
+		// Fail-closed by default: with no resolver injected nothing resolves, so every
+		// offer lands in `rejected` with a reason rather than being surfaced unchecked.
+		resolve: opts.resolveOfferKey ?? (async () => undefined),
+		now,
+	});
+	const signer: CallSigner | undefined =
+		opts.signer === undefined
+			? undefined
+			: {
+					privKey: opts.signer.privKey,
+					keyid: opts.signer.keyid,
+					...(opts.signatureAgent !== undefined
+						? { signatureAgent: opts.signatureAgent }
+						: {}),
+					...(opts.signWindow !== undefined ? { window: opts.signWindow } : {}),
+				};
+	return {
+		opts,
+		verifier,
+		send: opts.send ?? createUnarySend({ guarded: false }),
+		guardedSend: opts.guardedSend ?? createUnarySend({ guarded: true }),
+		requirements:
+			opts.registrationRequirements ?? createWellKnownRequirementsReader(),
+		signer,
+		deliveryKeys: opts.deliveryKeys ?? createWBAKeyResolver(),
+	};
+}
+
+// call is the one place a verb reaches the wire, so every leg carries the same header
+// set, the same bound, the same deadline and the same answer checks. `response` is the
+// fully-qualified name of the message the answer is, which strict decoding validates.
+export async function call(
+	r: Resolved,
+	op: string,
+	baseURL: string,
+	service: string,
+	method: string,
+	message: unknown,
+	guarded: boolean,
+	response: string,
+): Promise<unknown> {
+	const raw = await unaryCall({
+		target: { baseURL, service, method },
+		op,
+		message,
+		// The leg decides the dial AND the gate together, so the two cannot drift apart.
+		send: guarded ? r.guardedSend : r.send,
+		guarded,
+		...(r.signer !== undefined ? { signer: r.signer } : {}),
+		...(r.opts.requestId !== undefined ? { requestId: r.opts.requestId } : {}),
+		...(r.opts.beforeSign !== undefined ? { beforeSign: r.opts.beforeSign } : {}),
+		maxBytes: r.opts.maxRPCReadBytes ?? DEFAULT_MAX_RPC_READ_BYTES,
+		timeoutMs: r.opts.callTimeoutMs ?? DEFAULT_CALL_TIMEOUT_MS,
+	});
+	// Before any verb parses it: the strict check reads the answer as it arrived, and the
+	// parse would already have dropped the unknown field it exists to find.
+	if (r.opts.strict === true) checkStrict(op, raw, response);
+	return raw;
+}
diff --git a/sdk/ts/client/raw.ts b/sdk/ts/client/raw.ts
new file mode 100644
index 00000000..8051fa40
--- /dev/null
+++ b/sdk/ts/client/raw.ts
@@ -0,0 +1,63 @@
+// Raw mode: a request body the caller supplies, sent exactly as given.
+//
+// A conformance harness has to send messages the SDK would refuse to build — a missing
+// `ver`, a forged requester, a field the schema forbids — and still have them signed and
+// the reply decoded by the same client that drives the rest of the run. Passing a RawBody
+// in place of a verb's request does that. The body is not stamped, not validated and not
+// checked locally; it is signed (when a signer is configured), handed to the pre-signing
+// hook, sent under the read cap, and its answer is decoded into the verb's response
+// schema, strict decoding included.
+
+/**
+ * RawBody wraps the bytes one call sends in place of the request a verb would build.
+ *
+ * A `Uint8Array` is sent verbatim, a `string` as its UTF-8 bytes, and any other value is
+ * serialized once with `JSON.stringify`. Every verb accepts a RawBody where it takes its
+ * request (`execute` takes it in place of the offers). Nothing is filled in — not `ver`,
+ * not `idempotency_key`, not `requester` — and none of the local refusals about the
+ * message run: the recipient shape, the requester and signer checks, the
+ * registration-data bounds and the terms-digest read, the offer checks.
+ *
+ * A verb that routes by the request's `exchange` (reportUsage, dispute, register,
+ * getAccountStatus) still reads it from the body, parsed as JSON, and resolves it through
+ * that Exchange's manifest as usual: the destination of a signed request is not a property
+ * of the message to waive. A body with no usable `exchange` is refused as `not_sent`,
+ * because there is nothing to dial. `execute` in raw mode decodes the reply and verifies
+ * no delivery URL: there are no verified offers to tie them to.
+ */
+export class RawBody {
+	constructor(readonly body: Uint8Array | string | unknown) {}
+}
+
+/** The bytes a RawBody sends. */
+export function rawBytes(raw: RawBody): Uint8Array<ArrayBuffer> {
+	const body = raw.body;
+	if (body instanceof Uint8Array) return new Uint8Array(body) as Uint8Array<ArrayBuffer>;
+	const text = typeof body === "string" ? body : JSON.stringify(body ?? null);
+	return new TextEncoder().encode(text) as Uint8Array<ArrayBuffer>;
+}
+
+/**
+ * The body read as a JSON object, or undefined when it is not one. Used only where a verb
+ * must learn something from the body to send it at all — the recipient a routed verb dials,
+ * the URIs a discovery answer is attributed to — never to check it.
+ */
+export function rawObject(raw: RawBody): Record<string, unknown> | undefined {
+	let value: unknown = raw.body;
+	if (value instanceof Uint8Array || typeof value === "string") {
+		try {
+			value = JSON.parse(typeof value === "string" ? value : new TextDecoder().decode(value));
+		} catch {
+			return undefined;
+		}
+	}
+	return typeof value === "object" && value !== null && !Array.isArray(value)
+		? (value as Record<string, unknown>)
+		: undefined;
+}
+
+/** The body's `exchange` member, or "" when it carries none. */
+export function rawExchange(raw: RawBody): string {
+	const exchange = rawObject(raw)?.["exchange"];
+	return typeof exchange === "string" ? exchange : "";
+}
diff --git a/sdk/ts/client/stamp.ts b/sdk/ts/client/stamp.ts
new file mode 100644
index 00000000..d8aeb236
--- /dev/null
+++ b/sdk/ts/client/stamp.ts
@@ -0,0 +1,113 @@
+// Envelope stamping and the request checks every verb shares. Each copies the caller's
+// message before it changes anything, so the object a caller passed stays theirs.
+
+import { redactUserinfo } from "../src/host-ref.ts";
+import { isBareDomain } from "../src/hosts.ts";
+import { generateIdempotencyKey } from "../src/idempotency.ts";
+import { ProtocolVersion } from "../src/wire.ts";
+import { malformed, notSent } from "./errors.ts";
+import type { CallOptions } from "./options.ts";
+
+/**
+ * stampDiscovery fills the envelope a DISCOVERY call carries, which is the mutating
+ * envelope minus the idempotency key: pure discovery buys nothing and changes nothing, so
+ * there is no action for a key to identify.
+ *
+ * Both fills are only-when-empty. The caller's own value always wins — the message
+ * crossed a module boundary as an argument, not as a buffer to fill in — and the
+ * requester is filled because both reference services resolve the calling agent from it
+ * and refuse a request that names none, while the client already holds that identity.
+ */
+export function stampDiscovery(
+	op: string,
+	message: Record<string, unknown>,
+	requester: Record<string, unknown> | undefined,
+): Record<string, unknown> {
+	const sent = clone(op, message);
+	if (sent["ver"] === undefined || sent["ver"] === "") sent["ver"] = ProtocolVersion;
+	if (sent["requester"] === undefined && requester !== undefined) {
+		sent["requester"] = requester;
+	}
+	return sent;
+}
+
+/**
+ * stampEnvelope fills the two envelope fields the protocol requires on a state-mutating
+ * call, WITHOUT overwriting what the caller already set.
+ *
+ * Fill-when-empty is the whole rule. `ver` has a single owner, so the SDK supplies it
+ * rather than making every caller reach for the constant. The idempotency key is REQUIRED
+ * and identifies the action rather than the attempt, so a value the caller put there is
+ * theirs — discarding it would turn each of their retries into a fresh action, which is
+ * the double-counting the field exists to prevent. A pinned key overrides both.
+ */
+export function stampEnvelope(
+	op: string,
+	message: Record<string, unknown>,
+	opts: CallOptions,
+): Record<string, unknown> {
+	const sent = clone(op, message);
+	if (sent["ver"] === undefined || sent["ver"] === "") sent["ver"] = ProtocolVersion;
+	const onMessage = sent["idempotency_key"];
+	// Each fallback is taken when the one before it is EMPTY, not merely absent: an empty
+	// pinned key is no key, which is how Go and Python both read it.
+	sent["idempotency_key"] =
+		opts.idempotencyKey !== undefined && opts.idempotencyKey !== ""
+			? opts.idempotencyKey
+			: typeof onMessage === "string" && onMessage !== ""
+				? onMessage
+				: generateIdempotencyKey();
+	return sent;
+}
+
+// clone copies a caller's message so the SDK can stamp its envelope without touching what
+// the caller still holds. structuredClone is the runtime's own deep copy; a message that
+// cannot survive it is one that cannot be serialized to the wire either.
+export function clone(op: string, message: Record<string, unknown>): Record<string, unknown> {
+	try {
+		return structuredClone(message);
+	} catch (cause) {
+		throw malformed(op, cause);
+	}
+}
+
+export function stringField(record: Record<string, unknown>, key: string): string {
+	const value = record[key];
+	return typeof value === "string" ? value : "";
+}
+
+export function isRecord(v: unknown): v is Record<string, unknown> {
+	return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+export function stampVer(op: string, message: Record<string, unknown>): Record<string, unknown> {
+	const sent = clone(op, message);
+	if (sent["ver"] === undefined || sent["ver"] === "") sent["ver"] = ProtocolVersion;
+	return sent;
+}
+
+// Serves the catalog verbs and the two account verbs, and asks only the SHAPE question.
+//
+// The predicate is isBareDomain, the SHAPE rule, not the routing rule isBareHost. The
+// only question it answers is whether the value is the form the contract admits, which
+// is the protovalidate pattern `exchange` carries and the same rule the Exchange's own
+// audience check applies on arrival. Whether the value can be DIALLED is a separate
+// question with a separate answer: a catalog client is built against an address the
+// publisher configured and never asks it, while the account verbs resolve this domain
+// through its own manifest and ask it there, under the routing predicate. The routing
+// predicate is deliberately wider: an underscore, a trailing root dot and a bracketed
+// IPv6 literal are all usable hosts and none of them is a value this field may hold,
+// so vetting with it would sign and send a request the recipient can only refuse.
+//
+// The refused value is redacted before it is named. A reference carrying userinfo is a
+// verdict rather than a parse failure, so it reaches the message below verbatim; the
+// routing check next door redacts for the same reason, and a tier that echoes is the
+// drift redactUserinfo exists to prevent.
+export function requireRecipient(op: string, exchange: string): void {
+	if (exchange === "") {
+		throw notSent(op, new Error("request names no recipient; set exchange to the Exchange's bare domain"));
+	}
+	if (!isBareDomain(exchange)) {
+		throw notSent(op, new Error(`exchange ${JSON.stringify(redactUserinfo(exchange))} is not a bare domain`));
+	}
+}
diff --git a/sdk/ts/client/strict.ts b/sdk/ts/client/strict.ts
new file mode 100644
index 00000000..4b68db77
--- /dev/null
+++ b/sdk/ts/client/strict.ts
@@ -0,0 +1,193 @@
+// Strict response decoding: refuse an answer the contract does not describe exactly.
+//
+// The generated schemas the client parses answers with are forward-compatible on purpose:
+// they drop a field they do not know, so a newer Exchange does not break an older client.
+// A conformance harness wants the opposite — an unknown or misspelled field is the defect
+// it is looking for — and it wants the cross-field rules the proto states, which no
+// per-field schema can express. With `strict: true` every RPC success answer is checked,
+// before it is parsed, against:
+//
+//   - the published STRICT JSON Schema of its message (gen/jsonschema, additionalProperties
+//     false on every message object at every depth), so the shape is the one the
+//     generator emitted rather than a second definition kept here;
+//   - the cross-field rules, through crossFieldRuleIds, on the answer itself and on every
+//     nested message that carries any.
+//
+// A null member of a message object is removed first: proto-JSON reads null as "absent",
+// and an Exchange rendering unpopulated fields emits one for every unset message field.
+// Nothing inside a google.protobuf.Struct is touched, because there a null is data.
+
+import Ajv2020Module, { type ValidateFunction } from "ajv/dist/2020.js";
+
+import { crossFieldRuleIds, hasCrossFieldRules } from "../src/crossfield.ts";
+import { malformed } from "./errors.ts";
+
+import setReportingPolicyResponse from "../../../gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json" with { type: "json" };
+import setTenantFeeRateResponse from "../../../gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json" with { type: "json" };
+import brokerTransactionResponse from "../../../gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json" with { type: "json" };
+import discoveryResponse from "../../../gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json" with { type: "json" };
+import disputeResponse from "../../../gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json" with { type: "json" };
+import domainVerificationChallenge from "../../../gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json" with { type: "json" };
+import domainVerificationResult from "../../../gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json" with { type: "json" };
+import getAccountStatusResponse from "../../../gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json" with { type: "json" };
+import pushResourcesResponse from "../../../gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json" with { type: "json" };
+import refreshCatalogResponse from "../../../gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json" with { type: "json" };
+import registerResponse from "../../../gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json" with { type: "json" };
+import removeResourcesResponse from "../../../gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json" with { type: "json" };
+import resourceResponse from "../../../gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json" with { type: "json" };
+import transactionResponse from "../../../gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json" with { type: "json" };
+import usageReportResponse from "../../../gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json" with { type: "json" };
+
+/** The strict schema of every message a client verb decodes, by fully-qualified name. */
+const STRICT_SCHEMAS: Readonly<Record<string, object>> = {
+	"fora.admin.v1.SetReportingPolicyResponse": setReportingPolicyResponse,
+	"fora.admin.v1.SetTenantFeeRateResponse": setTenantFeeRateResponse,
+	"fora.v1.BrokerTransactionResponse": brokerTransactionResponse,
+	"fora.v1.DiscoveryResponse": discoveryResponse,
+	"fora.v1.DisputeResponse": disputeResponse,
+	"fora.v1.DomainVerificationChallenge": domainVerificationChallenge,
+	"fora.v1.DomainVerificationResult": domainVerificationResult,
+	"fora.v1.GetAccountStatusResponse": getAccountStatusResponse,
+	"fora.v1.PushResourcesResponse": pushResourcesResponse,
+	"fora.v1.RefreshCatalogResponse": refreshCatalogResponse,
+	"fora.v1.RegisterResponse": registerResponse,
+	"fora.v1.RemoveResourcesResponse": removeResourcesResponse,
+	"fora.v1.ResourceResponse": resourceResponse,
+	"fora.v1.TransactionResponse": transactionResponse,
+	"fora.v1.UsageReportResponse": usageReportResponse,
+};
+
+// Ajv is CommonJS. Node hands an ESM importer its module.exports, which is the class; a
+// bundler may hand over the namespace, whose `default` is. Read whichever arrived.
+const Ajv2020 =
+	(Ajv2020Module as unknown as { default?: typeof Ajv2020Module }).default ?? Ajv2020Module;
+
+// One engine for the process, schemas compiled on first use. `format` stays an annotation,
+// as the schemas' README says: a validator asserting `duration` needs ajv-formats.
+let engine: InstanceType<typeof Ajv2020> | undefined;
+const compiled = new Map<string, ValidateFunction>();
+
+function validatorFor(message: string): ValidateFunction {
+	let validate = compiled.get(message);
+	if (validate === undefined) {
+		const schema = STRICT_SCHEMAS[message];
+		if (schema === undefined) throw new Error(`no strict schema for ${message}`);
+		engine ??= new Ajv2020({ strict: true, validateFormats: false });
+		validate = engine.compile(schema);
+		compiled.set(message, validate);
+	}
+	return validate;
+}
+
+type Node = Record<string, unknown>;
+
+function isNode(v: unknown): v is Node {
+	return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+const DEFS_PREFIX = "#/$defs/";
+
+/** One message instance the cross-field rules are checked on. */
+interface Found {
+	message: string;
+	path: string;
+	value: Node;
+}
+
+/**
+ * normalize returns a copy of `instance` with null members of message objects removed,
+ * guided by the schema, and collects every message instance whose type carries
+ * cross-field rules. A key the schema does not declare is kept, so the schema refuses it.
+ */
+function normalize(
+	instance: unknown,
+	node: unknown,
+	defs: Node,
+	path: string,
+	found: Found[],
+): unknown {
+	if (!isNode(node)) return instance;
+	const ref = node["$ref"];
+	if (typeof ref === "string" && ref.startsWith(DEFS_PREFIX)) {
+		const name = ref.slice(DEFS_PREFIX.length);
+		return normalizeMessage(instance, defs[name], defs, path, found, name);
+	}
+	if (Array.isArray(instance) && node["items"] !== undefined) {
+		return instance.map((item, i) => normalize(item, node["items"], defs, `${path}/${i}`, found));
+	}
+	const properties = node["properties"];
+	if (isNode(properties)) return normalizeMessage(instance, node, defs, path, found, undefined);
+	const values = node["additionalProperties"];
+	if (isNode(instance) && isNode(values)) {
+		const out: Node = {};
+		for (const [k, v] of Object.entries(instance)) {
+			setMember(out, k, normalize(v, values, defs, `${path}/${k}`, found));
+		}
+		return out;
+	}
+	// A Struct, a Value, a scalar or an enum: left exactly as it arrived.
+	return instance;
+}
+
+function normalizeMessage(
+	instance: unknown,
+	node: unknown,
+	defs: Node,
+	path: string,
+	found: Found[],
+	name: string | undefined,
+): unknown {
+	if (!isNode(instance) || !isNode(node)) return instance;
+	const properties = isNode(node["properties"]) ? node["properties"] : {};
+	const out: Node = {};
+	for (const [k, v] of Object.entries(instance)) {
+		if (v === null && Object.prototype.hasOwnProperty.call(properties, k)) continue;
+		setMember(out, k, normalize(v, properties[k], defs, `${path}/${k}`, found));
+	}
+	if (name !== undefined) {
+		const bare = name.slice(name.lastIndexOf(".") + 1);
+		if (hasCrossFieldRules(bare)) found.push({ message: bare, path, value: out });
+	}
+	return out;
+}
+
+function setMember(target: Node, name: string, value: unknown): void {
+	Object.defineProperty(target, name, { value, enumerable: true, writable: true, configurable: true });
+}
+
+/**
+ * checkStrict refuses, as `malformed`, an answer that fails the strict schema of
+ * `message` (fully-qualified, e.g. "fora.v1.ResourceResponse") or one of the cross-field
+ * rules. Called on a success answer only; error envelopes are not messages of this type.
+ */
+export function checkStrict(op: string, raw: unknown, message: string): void {
+	const schema = STRICT_SCHEMAS[message] as Node | undefined;
+	if (schema === undefined) throw new Error(`no strict schema for ${message}`);
+	const defs = isNode(schema["$defs"]) ? schema["$defs"] : {};
+	const found: Found[] = [];
+	const normalized = normalizeMessage(raw, schema, defs, "", found, message);
+	const validate = validatorFor(message);
+	if (!validate(normalized)) {
+		const first = validate.errors?.[0];
+		const where = first?.instancePath === "" || first === undefined ? "(root)" : first.instancePath;
+		const extra =
+			first?.keyword === "additionalProperties"
+				? ` (${JSON.stringify((first.params as { additionalProperty?: string }).additionalProperty)})`
+				: "";
+		throw malformed(
+			op,
+			new Error(`strict decoding: ${where} ${first?.message ?? "does not match"}${extra}`),
+		);
+	}
+	for (const f of found) {
+		const violated = crossFieldRuleIds(f.message, f.value);
+		if (violated.length > 0) {
+			throw malformed(
+				op,
+				new Error(
+					`strict decoding: ${f.path === "" ? "(root)" : f.path} violates cross-field rule(s) ${violated.join(", ")}`,
+				),
+			);
+		}
+	}
+}
diff --git a/sdk/ts/client/transport.ts b/sdk/ts/client/transport.ts
index 1999f691..135d8cff 100644
--- a/sdk/ts/client/transport.ts
+++ b/sdk/ts/client/transport.ts
@@ -29,6 +29,21 @@ import {
 	malformed,
 	ForaCallError,
 } from "./errors.ts";
+import { RawBody, rawBytes } from "./raw.ts";
+
+/**
+ * The pre-signing hook: receives every RPC request just before it is signed, as a Fetch
+ * API `Request`, and returns the request to sign and send instead.
+ *
+ * For a test that must send a deliberately altered message through the SDK's own signer
+ * and decoder: the returned request's body bytes and headers are what get signed and
+ * sent, and the reply is decoded as usual. The method and URL must not change (the address
+ * checks already ran against the planned URL), and a header the signer emits must not be
+ * set; either refuses the call as `malformed` with nothing sent. A `host` or
+ * `content-length` on the returned request is dropped, so a patched body never travels
+ * with a stale length.
+ */
+export type BeforeSign = (request: Request) => Request | Promise<Request>;
 
 /**
  * DEFAULT_MAX_RPC_READ_BYTES caps the response body a single FORA call will read.
@@ -108,7 +123,8 @@ export interface CallSigner {
 export interface UnaryCallOptions {
 	target: UnaryTarget;
 	op: string;
-	/** The request message, already validated by its generated schema. */
+	/** The request message, already validated by its generated schema, or a RawBody whose
+	 * bytes are sent as given. */
 	message: unknown;
 	send: UnarySend;
 	/** Whether this leg dials a host another party named — an offer-derived Exchange. The
@@ -117,6 +133,7 @@ export interface UnaryCallOptions {
 	guarded?: boolean;
 	signer?: CallSigner;
 	requestId?: () => string;
+	beforeSign?: BeforeSign;
 	maxBytes?: number;
 	timeoutMs?: number;
 }
@@ -176,8 +193,9 @@ export async function unaryCall(opts: UnaryCallOptions): Promise<unknown> {
 			throw new ForaCallError({ kind: "unreachable", op: opts.op, cause });
 		}
 	}
-	const body = encodeBody(opts.op, opts.message);
-	const headers: Record<string, string> = {
+	let body =
+		opts.message instanceof RawBody ? rawBytes(opts.message) : encodeBody(opts.op, opts.message);
+	let headers: Record<string, string> = {
 		"content-type": ContentTypeJSON,
 		[ConnectProtocolVersionHeader]: ConnectProtocolVersion,
 		...IDENTITY_ENCODING,
@@ -202,8 +220,13 @@ export async function unaryCall(opts: UnaryCallOptions): Promise<unknown> {
 	);
 	let response: UnaryResponse;
 	try {
+		if (opts.beforeSign !== undefined) {
+			({ body, headers } = await applyBeforeSign(opts.op, url, body, headers, opts.beforeSign));
+		}
 		if (opts.signer !== undefined) {
-			Object.assign(headers, await signCall(opts.op, url, body, opts.signer));
+			const signed = await signCall(opts.op, url, body, opts.signer);
+			if (opts.beforeSign !== undefined) refuseSignerHeaders(opts.op, headers, signed);
+			Object.assign(headers, signed);
 		}
 		response = await opts.send({
 			url,
@@ -221,6 +244,60 @@ export async function unaryCall(opts: UnaryCallOptions): Promise<unknown> {
 	return decodeResponse(opts.op, response);
 }
 
+// Headers the runtime computes from the request itself. A hook's request carries them,
+// and a patched body would otherwise travel with a stale length.
+const TRANSPORT_HEADERS = new Set(["host", "content-length"]);
+
+// applyBeforeSign hands the request to the caller's hook and returns the body and headers
+// it chose. The Request exists only for this call; the method and URL stay the ones the
+// client planned, because the address checks and the routing were decided on them.
+async function applyBeforeSign(
+	op: string,
+	url: string,
+	body: Uint8Array<ArrayBuffer>,
+	headers: Record<string, string>,
+	hook: BeforeSign,
+): Promise<{ body: Uint8Array<ArrayBuffer>; headers: Record<string, string> }> {
+	let returned: unknown;
+	let patched: Uint8Array<ArrayBuffer>;
+	try {
+		returned = await hook(new Request(url, { method: "POST", headers, body }));
+		if (!(returned instanceof Request)) {
+			throw malformed(op, new Error("beforeSign must return a Request"));
+		}
+		// Read inside the guard: a body that cannot be read is a hook failure, refused like
+		// the others rather than escaping as the runtime's own error.
+		patched = new Uint8Array(await returned.arrayBuffer()) as Uint8Array<ArrayBuffer>;
+	} catch (cause) {
+		if (cause instanceof ForaCallError) throw cause;
+		throw malformed(op, cause);
+	}
+	if (returned.method !== "POST" || returned.url !== new Request(url).url) {
+		throw malformed(op, new Error("beforeSign must not change the request method or URL"));
+	}
+	const kept: Record<string, string> = {};
+	returned.headers.forEach((value, name) => {
+		if (!TRANSPORT_HEADERS.has(name.toLowerCase())) kept[name] = value;
+	});
+	return { body: patched, headers: kept };
+}
+
+// refuseSignerHeaders refuses a hook that set a header the signer owns. Derived from what
+// the signer emitted, not listed, so the refused set cannot drift from the signer.
+function refuseSignerHeaders(
+	op: string,
+	headers: Record<string, string>,
+	signed: Record<string, string>,
+): void {
+	const owned = new Set(Object.keys(signed).map((name) => name.toLowerCase()));
+	const clash = Object.keys(headers)
+		.filter((name) => owned.has(name.toLowerCase()))
+		.sort();
+	if (clash.length > 0) {
+		throw malformed(op, new Error(`beforeSign set headers the signer owns: ${clash.join(", ")}`));
+	}
+}
+
 // encodeBody renders the message as the canonical proto-JSON bytes that get both signed
 // and sent. The message is already a parsed generated-schema value, so JSON.stringify is
 // the emission — no field names or enum spellings are decided here.
diff --git a/sdk/ts/src/crossfield.ts b/sdk/ts/src/crossfield.ts
index c71c53df..0ddce6f4 100644
--- a/sdk/ts/src/crossfield.ts
+++ b/sdk/ts/src/crossfield.ts
@@ -259,6 +259,14 @@ const RULES_BY_MESSAGE: Record<string, (o: Obj) => string[]> = {
   WellKnownManifest: wellKnownManifestRules,
 };
 
+/**
+ * hasCrossFieldRules reports whether `message` (the bare message name, e.g. "Pricing")
+ * carries cross-field rules, i.e. whether crossFieldRuleIds accepts it.
+ */
+export function hasCrossFieldRules(message: string): boolean {
+  return Object.prototype.hasOwnProperty.call(RULES_BY_MESSAGE, message);
+}
+
 /**
  * crossFieldRuleIds returns the cross-field (message-CEL) rule-ids the instance
  * violates, empty when it passes cross-field validation. Direct analogue of the
diff --git a/sdk/ts/tests/before-sign.test.ts b/sdk/ts/tests/before-sign.test.ts
new file mode 100644
index 00000000..93009c2d
--- /dev/null
+++ b/sdk/ts/tests/before-sign.test.ts
@@ -0,0 +1,200 @@
+// The pre-signing hook: ClientOptions.beforeSign.
+//
+// A caller that needs to send a request the SDK would not build on its own (a harness
+// probing how a server refuses a malformed message) gets ONE supported seam: a function
+// that receives the stamped, validated request as a Fetch API Request just before it is
+// signed, and returns the request to sign instead. The SDK still signs exactly the bytes
+// it sends and decodes the reply with its own decoder.
+//
+// Every case drives the real client through its injected send, against a peer that
+// verifies the RFC 9421 signature with the SDK's own server-side verifier — which is what
+// proves the signature covers the PATCHED bytes. The refusals are local and nothing is
+// sent for any of them.
+import { describe, expect, it } from "vitest";
+
+import { createCatalogClient, ForaCallError, type ClientOptions } from "../client/index.ts";
+import { reason } from "../src/errordetail.ts";
+import vectorsFile from "../../go/connect/testdata/connect-error-vectors.json";
+import { agentKeys, signedPeer } from "./signed-peer.ts";
+
+const KEYID = "agent.v1";
+const PUSH_URL = "https://exchange.test/fora.v1.CatalogService/PushResources";
+
+const CATALOG_REJECTION = (
+	vectorsFile as { vectors: { name: string; http_status: number; envelope: unknown }[] }
+).vectors.find((v) => v.name === "catalog_rejection");
+if (CATALOG_REJECTION === undefined) throw new Error("corpus has no catalog_rejection row");
+
+function push(): Record<string, unknown> {
+	return {
+		exchange: "exchange.test",
+		tenant_id: "tenant-1",
+		caller_id: "publisher.test",
+		entries: [
+			{
+				domain: "publisher.test",
+				path: "/x",
+				terms: [
+					{
+						semantics: "TERM_SEMANTICS_ENUMERATED",
+						pricing: { model: "PRICING_MODEL_FREE", rate: "0" },
+					},
+				],
+			},
+		],
+	};
+}
+
+async function fixture(answer?: Parameters<typeof signedPeer>[2]) {
+	const { keys, pub } = await agentKeys();
+	const peer = signedPeer(KEYID, pub, answer);
+	const client = (opts: ClientOptions = {}) =>
+		createCatalogClient("https://exchange.test", {
+			signer: { privKey: keys.privateKey, keyid: KEYID },
+			send: peer.send,
+			...opts,
+		});
+	return { peer, client };
+}
+
+/** A request like `req` with its body replaced, headers carried over verbatim. */
+async function withBody(req: Request, body: string): Promise<Request> {
+	return new Request(req.url, { method: req.method, headers: req.headers, body });
+}
+
+async function refusal(p: Promise<unknown>): Promise<ForaCallError> {
+	try {
+		await p;
+	} catch (e) {
+		expect(e).toBeInstanceOf(ForaCallError);
+		return e as ForaCallError;
+	}
+	throw new Error("the call did not fail");
+}
+
+describe("beforeSign", () => {
+	it("is handed the stamped request, before it is signed", async () => {
+		const { peer, client } = await fixture();
+		let seen: Request | undefined;
+		await client({
+			beforeSign: (req) => {
+				seen = req;
+				return req;
+			},
+		}).pushResources(push());
+		expect(seen?.method).toBe("POST");
+		expect(seen?.url).toBe(PUSH_URL);
+		expect(seen?.headers.get("signature")).toBeNull();
+		const sent = JSON.parse(peer.only().body) as Record<string, unknown>;
+		expect(sent["ver"]).toBe("1.0");
+		expect(peer.only().valid).toBe(true);
+	});
+
+	it("signs the patched bytes, and a malformed patch comes back as the typed refusal", async () => {
+		const { peer, client } = await fixture(() => ({
+			status: CATALOG_REJECTION.http_status,
+			body: JSON.stringify(CATALOG_REJECTION.envelope),
+		}));
+		// A valid push, made malformed after validation: the recipient is removed, which the
+		// client itself would have refused to send.
+		const failure = await refusal(
+			client({
+				beforeSign: async (req) => {
+					const body = JSON.parse(await req.text()) as Record<string, unknown>;
+					delete body["exchange"];
+					return withBody(req, JSON.stringify(body));
+				},
+			}).pushResources(push()),
+		);
+		const received = peer.only();
+		expect(received.valid, "the signature does not cover the patched body").toBe(true);
+		expect(JSON.parse(received.body)).not.toHaveProperty("exchange");
+		expect(failure.kind).toBe("refused");
+		expect(failure.code).toBe("invalid_argument");
+		expect(failure.status).toBe(400);
+		expect(failure.detail).toBeDefined();
+		expect(reason(failure.detail as NonNullable<typeof failure.detail>)).toEqual({
+			field: "catalog_rejection",
+			value: "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+		});
+	});
+
+	it("drops host and content-length from the returned request", async () => {
+		const { peer, client } = await fixture();
+		await client({
+			beforeSign: (req) => {
+				const headers = new Headers(req.headers);
+				headers.set("content-length", "3");
+				return new Request(req.url, { method: "POST", headers, body: '{"exchange":"exchange.test"}' });
+			},
+		}).pushResources(push());
+		const names = Object.keys(peer.only().request.headers).map((n) => n.toLowerCase());
+		expect(names).not.toContain("content-length");
+		expect(names).not.toContain("host");
+		expect(peer.only().valid).toBe(true);
+	});
+
+	it("keeps a header the hook adds, outside the signature", async () => {
+		const { peer, client } = await fixture();
+		await client({
+			beforeSign: (req) => {
+				const headers = new Headers(req.headers);
+				headers.set("x-probe", "1");
+				return new Request(req.url, { method: "POST", headers, body: req.body, duplex: "half" } as RequestInit);
+			},
+		}).pushResources(push());
+		expect(peer.only().request.headers["x-probe"]).toBe("1");
+		expect(peer.only().valid).toBe(true);
+	});
+
+	describe("refuses locally, with nothing sent", () => {
+		const cases: [string, ClientOptions["beforeSign"]][] = [
+			[
+				"a hook that throws",
+				() => {
+					throw new Error("boom");
+				},
+			],
+			["a hook that returns something else", () => ({}) as Request],
+			["a hook that changes the method", (req) => new Request(req.url, { method: "PUT", headers: req.headers })],
+			[
+				"a hook that changes the URL",
+				async (req) => new Request("https://elsewhere.test/x", { method: "POST", body: await req.text() }),
+			],
+		];
+		for (const name of ["Signature", "signature-input", "Content-Digest", "Signature-Agent", "AUTHORIZATION"]) {
+			cases.push([
+				`a hook that sets ${name}`,
+				async (req) => {
+					const headers = new Headers(req.headers);
+					headers.set(name, "forged");
+					return new Request(req.url, { method: "POST", headers, body: await req.text() });
+				},
+			]);
+		}
+		for (const [label, hook] of cases) {
+			it(label, async () => {
+				const { peer, client } = await fixture();
+				const failure = await refusal(
+					client(hook === undefined ? {} : { beforeSign: hook }).pushResources(push()),
+				);
+				expect(failure.kind).toBe("malformed");
+				expect(failure.code).toBeUndefined();
+				expect(peer.seen).toHaveLength(0);
+			});
+		}
+	});
+
+	it("runs without a signer, and the patched body is what goes out", async () => {
+		const sent: string[] = [];
+		const client = createCatalogClient("https://exchange.test", {
+			send: async (req) => {
+				sent.push(new TextDecoder().decode(req.body));
+				return { status: 200, body: "{}" };
+			},
+			beforeSign: (req) => withBody(req, '{"patched":true}'),
+		});
+		await client.pushResources(push());
+		expect(sent).toEqual(['{"patched":true}']);
+	});
+});
diff --git a/sdk/ts/tests/client-requirements-single-reader.guard.test.ts b/sdk/ts/tests/client-requirements-single-reader.guard.test.ts
index ae1ca528..4af19392 100644
--- a/sdk/ts/tests/client-requirements-single-reader.guard.test.ts
+++ b/sdk/ts/tests/client-requirements-single-reader.guard.test.ts
@@ -1,4 +1,4 @@
-import { readFileSync } from "node:fs";
+import { readdirSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { describe, expect, it } from "vitest";
 
@@ -20,10 +20,16 @@ import { describe, expect, it } from "vitest";
 // this decision. The detector is whitespace-tolerant so a formatter reflow cannot let a
 // revert slip; the meta-tests below exercise that.
 
-const clientPath = fileURLToPath(new URL("../client/index.ts", import.meta.url));
+const clientDir = fileURLToPath(new URL("../client/", import.meta.url));
 
+/** Every module of the client, read as one text: the resolved-once record lives in
+ * options.ts, and a construction in any other client module is still a second one. */
 function readClient(): string {
-	return readFileSync(clientPath, "utf8");
+	return readdirSync(clientDir)
+		.filter((f) => f.endsWith(".ts"))
+		.sort()
+		.map((f) => readFileSync(`${clientDir}${f}`, "utf8"))
+		.join("\n");
 }
 
 /** Every construction of the default reader, wherever it appears. */
diff --git a/sdk/ts/tests/delivery-verification.test.ts b/sdk/ts/tests/delivery-verification.test.ts
new file mode 100644
index 00000000..cc44c038
--- /dev/null
+++ b/sdk/ts/tests/delivery-verification.test.ts
@@ -0,0 +1,362 @@
+// Delivery verification: execute, BrokerClient.execute and fetch check a retrieval URL's
+// signature, its agent binding and its expiry before handing it back or dialling it.
+//
+// The Exchange's URL-signing key is resolved from its Web Bot Auth key directory by the
+// SDK's own WBA resolver, over an injected fetch that serves the directory this test
+// builds with directoryDocument. The purchase verbs run through the injected send, as the
+// other execute tests do; fetch dials a real loopback server.
+import { createServer } from "node:http";
+import { describe, expect, it } from "vitest";
+
+import {
+	createBrokerClient,
+	createClient,
+	ForaCallError,
+	type ClientOptions,
+	type Delivery,
+} from "../client/index.ts";
+import { directoryDocument } from "../core/identity.ts";
+import { createVerifier, type VerifiedOffer } from "../core/verifier.ts";
+import { reason } from "../src/errordetail.ts";
+import { signOffer } from "../src/offer-sign.ts";
+import { signEd25519SignedUrl } from "../src/signurl.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import { createWBAKeyResolver } from "../resolvers/index.ts";
+import { WBA_DIRECTORY_PATH } from "../resolvers/wba.ts";
+
+const REQUESTER = { id: "agent-1", domain: "agent.test", type: "REQUESTER_TYPE_AGENT" };
+const HOUR = 3600;
+
+async function keyPair(): Promise<CryptoKeyPair> {
+	return (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
+		"sign",
+		"verify",
+	])) as CryptoKeyPair;
+}
+
+async function thumbprintOf(key: CryptoKey): Promise<string> {
+	return thumbprint(new Uint8Array(await crypto.subtle.exportKey("raw", key)));
+}
+
+/** An Exchange: its offer key, its URL-signing key published in its directory. */
+async function exchangeAt(domain: string) {
+	const urlKey = await keyPair();
+	return { domain, urlKey, kid: await thumbprintOf(urlKey.publicKey) };
+}
+type Exchange = Awaited<ReturnType<typeof exchangeAt>>;
+
+/** The key resolver a client uses: the SDK's WBA resolver over directories served here. */
+function keysFor(exchanges: Exchange[], status = 200) {
+	return createWBAKeyResolver({
+		scheme: "https",
+		fetch: async (url) => {
+			const ex = exchanges.find((e) => url === `https://${e.domain}${WBA_DIRECTORY_PATH}`);
+			const body = ex === undefined ? "" : JSON.stringify(await directoryDocument([ex.urlKey.publicKey]));
+			return { status: ex === undefined ? 404 : status, text: async () => body };
+		},
+	});
+}
+
+async function offerAt(id: string, exchange: string): Promise<VerifiedOffer> {
+	const kp = await keyPair();
+	const publicKey = new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey)) as Uint8Array<ArrayBuffer>;
+	const unsigned: Record<string, unknown> = { offer_id: id, exchange, expires_at: "2099-01-01T00:00:00Z" };
+	const offer = { ...unsigned, signature: await signOffer(unsigned, kp.privateKey), signature_algorithm: "EdDSA" };
+	const sorted = await createVerifier("strict", {
+		resolve: async () => publicKey,
+		now: () => Date.parse("2024-01-01T00:00:00Z"),
+	}).sort([offer]);
+	const verified = sorted.verified[0];
+	if (verified === undefined) throw new Error("fixture offer did not verify");
+	return verified;
+}
+
+/** A retrieval URL the Exchange signed, bound to `agentId` ("" for bearer). */
+async function signedURL(
+	ex: Exchange,
+	agentId: string,
+	opts: { base?: string; expUnix?: number; key?: CryptoKey; kid?: string } = {},
+): Promise<string> {
+	return signEd25519SignedUrl(
+		opts.base ?? "https://edge.test/content/1",
+		{
+			kid: opts.kid ?? ex.kid,
+			agentId,
+			expUnix: opts.expUnix ?? Math.floor(Date.now() / 1000) + HOUR,
+		},
+		opts.key ?? ex.urlKey.privateKey,
+	);
+}
+
+async function agent() {
+	const keys = await keyPair();
+	return { keys, id: await thumbprintOf(keys.publicKey) };
+}
+type Agent = Awaited<ReturnType<typeof agent>>;
+
+function options(a: Agent, answer: unknown, extra: ClientOptions = {}): ClientOptions {
+	return {
+		requester: REQUESTER,
+		signer: { privKey: a.keys.privateKey, keyid: "agent.v1" },
+		agentPublicKey: a.keys.publicKey,
+		signatureAgent: "https://agent.test",
+		send: async () => ({ status: 200, body: JSON.stringify(answer) }),
+		...extra,
+	};
+}
+
+function answerWith(url: string | undefined, hash: string, extra: Record<string, unknown> = {}) {
+	return {
+		ver: "1.0",
+		agent_identity_hash: hash,
+		items: [
+			{
+				offer_id: "offer-1",
+				transaction_id: "tx-1",
+				...(url === undefined ? {} : { retrieval_endpoint: url }),
+				...extra,
+			},
+		],
+	};
+}
+
+async function refusal(p: Promise<unknown>): Promise<ForaCallError> {
+	try {
+		await p;
+	} catch (e) {
+		expect(e).toBeInstanceOf(ForaCallError);
+		return e as ForaCallError;
+	}
+	throw new Error("the call did not fail");
+}
+
+function reasonOf(f: ForaCallError): string | undefined {
+	return f.detail === undefined ? undefined : reason(f.detail)?.value;
+}
+
+describe("execute verifies every retrieval URL", () => {
+	it("returns the verified binding beside the answer, outside the wire message", async () => {
+		const ex = await exchangeAt("exchange-a.test");
+		const a = await agent();
+		const url = await signedURL(ex, a.id);
+		const offer = await offerAt("offer-1", ex.domain);
+		const client = createClient("https://exchange-a.test", options(a, answerWith(url, a.id), { deliveryKeys: keysFor([ex]) }));
+		const result = await client.execute(offer);
+		const d = result.deliveries[0] as Delivery;
+		expect(d.url).toBe(url);
+		expect(d.exchange).toBe(ex.domain);
+		expect(d.agentId).toBe(a.id);
+		expect(d.keyId).toBe(ex.kid);
+		expect(d.expiresAt.getTime()).toBe(Number(new URL(url).searchParams.get("exp")) * 1000);
+		expect(JSON.stringify(result)).not.toContain("deliveries");
+		expect(result.items?.[0]?.retrieval_endpoint).toBe(url);
+	});
+
+	it("verifies a bearer URL from an answer that stated no binding", async () => {
+		const ex = await exchangeAt("exchange-a.test");
+		const a = await agent();
+		const url = await signedURL(ex, "");
+		const client = createClient("https://exchange-a.test", options(a, answerWith(url, ""), { deliveryKeys: keysFor([ex]) }));
+		const result = await client.execute(await offerAt("offer-1", ex.domain));
+		expect(result.deliveries[0]?.agentId).toBe("");
+	});
+
+	it("leaves an item without a retrieval URL unverified", async () => {
+		const ex = await exchangeAt("exchange-a.test");
+		const a = await agent();
+		const client = createClient(
+			"https://exchange-a.test",
+			options(a, answerWith(undefined, a.id, { denial_reason: "DENIAL_REASON_RATE_LIMITED" }), {
+				deliveryKeys: keysFor([ex]),
+			}),
+		);
+		const result = await client.execute(await offerAt("offer-1", ex.domain));
+		expect(result.deliveries).toEqual([undefined]);
+	});
+
+	const refused: [string, (ex: Exchange, a: Agent, other: Exchange) => Promise<{ url: string; hash: string }>, string][] = [
+		[
+			"a signature another key made",
+			async (ex, a, other) => ({ url: await signedURL(ex, a.id, { key: other.urlKey.privateKey }), hash: a.id }),
+			"RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+		],
+		[
+			"a key the Exchange's directory does not publish",
+			async (ex, a, other) => ({ url: await signedURL(ex, a.id, { key: other.urlKey.privateKey, kid: other.kid }), hash: a.id }),
+			"RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
+		],
+		[
+			"a URL bound to another agent",
+			async (ex) => {
+				const other = await agent();
+				return { url: await signedURL(ex, other.id), hash: other.id };
+			},
+			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+		],
+		[
+			"a bearer URL from an answer that stated a binding",
+			async (ex, a) => ({ url: await signedURL(ex, ""), hash: a.id }),
+			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+		],
+		[
+			"a URL bound to this agent while the answer stated another",
+			async (ex, a) => ({ url: await signedURL(ex, a.id), hash: (await agent()).id }),
+			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
+		],
+		[
+			"an expired URL",
+			async (ex, a) => ({ url: await signedURL(ex, a.id, { expUnix: Math.floor(Date.now() / 1000) - 10 }), hash: a.id }),
+			"RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
+		],
+		[
+			"a URL with no signature",
+			async () => ({ url: "https://edge.test/content/1?exp=99999999999", hash: "" }),
+			"RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
+		],
+		[
+			"a URL with no expiry",
+			async (ex, a) => {
+				const url = new URL(await signedURL(ex, a.id));
+				url.searchParams.delete("exp");
+				return { url: url.toString(), hash: a.id };
+			},
+			"RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
+		],
+	];
+	for (const [label, build, want] of refused) {
+		it(`refuses ${label}`, async () => {
+			const ex = await exchangeAt("exchange-a.test");
+			const other = await exchangeAt("exchange-b.test");
+			const a = await agent();
+			const { url, hash } = await build(ex, a, other);
+			const client = createClient("https://exchange-a.test", options(a, answerWith(url, hash), { deliveryKeys: keysFor([ex, other]) }));
+			const f = await refusal(client.execute(await offerAt("offer-1", ex.domain)));
+			expect(f.kind).toBe("malformed");
+			expect(reasonOf(f)).toBe(want);
+			expect(f.detail?.domain).toBe("fora.v1.Client");
+			expect(f.message).toContain("tx-1");
+		});
+	}
+
+	it("reports a directory it cannot read as unreachable", async () => {
+		const ex = await exchangeAt("exchange-a.test");
+		const a = await agent();
+		const url = await signedURL(ex, a.id);
+		const client = createClient("https://exchange-a.test", options(a, answerWith(url, a.id), { deliveryKeys: keysFor([ex], 503) }));
+		const f = await refusal(client.execute(await offerAt("offer-1", ex.domain)));
+		expect(f.kind).toBe("unreachable");
+	});
+
+	it("skips verification under deliveryVerification: off", async () => {
+		const a = await agent();
+		const client = createClient(
+			"https://exchange-a.test",
+			options(a, answerWith("https://edge.test/not-signed", a.id), { deliveryVerification: "off" }),
+		);
+		const result = await client.execute(await offerAt("offer-1", "exchange-a.test"));
+		expect(result.deliveries).toEqual([]);
+	});
+});
+
+describe("BrokerClient.execute verifies each URL against the Exchange that issued it", () => {
+	async function broker(badSecond: boolean) {
+		const exA = await exchangeAt("exchange-a.test");
+		const exB = await exchangeAt("exchange-b.test");
+		const a = await agent();
+		const answer = {
+			ver: "1.0",
+			items: [
+				{ offer_id: "offer-a", transaction_id: "tx-a", retrieval_endpoint: await signedURL(exA, a.id) },
+				{
+					offer_id: "offer-b",
+					transaction_id: "tx-b",
+					// Signed with exchange A's key: valid for A, not for B, which issued the offer.
+					retrieval_endpoint: await signedURL(badSecond ? exA : exB, a.id, badSecond ? { kid: exB.kid } : {}),
+				},
+			],
+			exchanges: [
+				{ exchange: exA.domain, offer_ids: ["offer-a"], agent_identity_hash: a.id },
+				{ exchange: exB.domain, offer_ids: ["offer-b"], agent_identity_hash: a.id },
+			],
+		};
+		const client = createBrokerClient("https://broker.test", options(a, answer, { deliveryKeys: keysFor([exA, exB]) }));
+		const offers = [await offerAt("offer-a", exA.domain), await offerAt("offer-b", exB.domain)];
+		return { client, offers, exA, exB };
+	}
+
+	it("verifies each item against its own Exchange's key", async () => {
+		const { client, offers, exA, exB } = await broker(false);
+		const result = await client.execute(offers);
+		expect(result.deliveries.map((d) => d?.exchange)).toEqual([exA.domain, exB.domain]);
+		expect(result.deliveries.map((d) => d?.keyId)).toEqual([exA.kid, exB.kid]);
+	});
+
+	it("refuses a URL another Exchange's key signed", async () => {
+		const { client, offers } = await broker(true);
+		const f = await refusal(client.execute(offers));
+		expect(reasonOf(f)).toBe("RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH");
+		expect(f.message).toContain("tx-b");
+	});
+});
+
+describe("fetch verifies the URL when it knows the Exchange", () => {
+	async function withEdge<T>(run: (origin: string, hits: () => number) => Promise<T>): Promise<T> {
+		let hits = 0;
+		const server = createServer((_req, res) => {
+			hits++;
+			res.writeHead(200, { "content-type": "text/plain" });
+			res.end("body");
+		});
+		await new Promise<void>((done) => server.listen(0, "127.0.0.1", () => done()));
+		const port = (server.address() as { port: number }).port;
+		const saved = [process.env["SKIP_SSRF"], process.env["ALLOW_INSECURE"]];
+		process.env["SKIP_SSRF"] = "true";
+		process.env["ALLOW_INSECURE"] = "true";
+		try {
+			return await run(`http://127.0.0.1:${port}`, () => hits);
+		} finally {
+			if (saved[0] === undefined) delete process.env["SKIP_SSRF"];
+			else process.env["SKIP_SSRF"] = saved[0];
+			if (saved[1] === undefined) delete process.env["ALLOW_INSECURE"];
+			else process.env["ALLOW_INSECURE"] = saved[1];
+			server.close();
+		}
+	}
+
+	it("verifies a Delivery and returns its binding with the content", async () => {
+		const ex = await exchangeAt("exchange-a.test");
+		const a = await agent();
+		await withEdge(async (origin) => {
+			const url = await signedURL(ex, a.id, { base: `${origin}/content/1` });
+			const client = createClient("https://exchange-a.test", options(a, {}, { deliveryKeys: keysFor([ex]) }));
+			const delivery: Delivery = { url, exchange: ex.domain, agentId: a.id, keyId: ex.kid, expiresAt: new Date() };
+			const content = await client.fetch(delivery);
+			expect(new TextDecoder().decode(content.body)).toBe("body");
+			expect(content.binding?.agentId).toBe(a.id);
+			expect(content.binding?.exchange).toBe(ex.domain);
+		});
+	});
+
+	it("refuses a URL bound to another agent without dialling it", async () => {
+		const ex = await exchangeAt("exchange-a.test");
+		const a = await agent();
+		await withEdge(async (origin, hits) => {
+			const url = await signedURL(ex, (await agent()).id, { base: `${origin}/content/1` });
+			const client = createClient("https://exchange-a.test", options(a, {}, { deliveryKeys: keysFor([ex]) }));
+			const f = await refusal(client.fetch(url, { exchange: ex.domain }));
+			expect(f.kind).toBe("malformed");
+			expect(reasonOf(f)).toBe("RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH");
+			expect(hits()).toBe(0);
+		});
+	});
+
+	it("fetches a bare URL as given, with no binding", async () => {
+		const a = await agent();
+		await withEdge(async (origin, hits) => {
+			const client = createClient("https://exchange-a.test", options(a, {}));
+			const content = await client.fetch(`${origin}/content/unsigned`);
+			expect(content.binding).toBeUndefined();
+			expect(hits()).toBe(1);
+		});
+	});
+});
diff --git a/sdk/ts/tests/raw-body.test.ts b/sdk/ts/tests/raw-body.test.ts
new file mode 100644
index 00000000..9cfb769c
--- /dev/null
+++ b/sdk/ts/tests/raw-body.test.ts
@@ -0,0 +1,145 @@
+// Raw mode: a RawBody passed in place of a verb's request is sent exactly as given.
+//
+// Nothing is stamped, nothing is validated, none of the local refusals about the message
+// run — and the body is still signed, still subject to the pre-signing hook, and its
+// answer is still decoded into the verb's response schema. Driven through the injected
+// send against a peer that verifies the signature, so "signed" means a server accepted it.
+import { describe, expect, it } from "vitest";
+
+import {
+	createBrokerClient,
+	createCatalogClient,
+	createClient,
+	ForaCallError,
+	RawBody,
+	type ClientOptions,
+	type ResourceQuery,
+	type UnaryResponse,
+} from "../client/index.ts";
+import { agentKeys, signedPeer } from "./signed-peer.ts";
+
+const KEYID = "agent.v1";
+const ENDPOINTS = { resolveEndpoint: async (host: string) => `https://${host}` };
+
+async function fixture(answer: () => UnaryResponse, opts: ClientOptions = {}) {
+	const { keys, pub } = await agentKeys();
+	const peer = signedPeer(KEYID, pub, answer);
+	const options: ClientOptions = {
+		signer: { privKey: keys.privateKey, keyid: KEYID },
+		send: peer.send,
+		guardedSend: peer.send,
+		endpointResolver: ENDPOINTS,
+		...opts,
+	};
+	return { peer, options };
+}
+
+const ok = (body: unknown) => () => ({ status: 200, body: JSON.stringify(body) });
+
+describe("RawBody", () => {
+	it("sends bytes verbatim, signed, and decodes the answer", async () => {
+		// Not canonical JSON and missing everything the client would stamp.
+		const bytes = new TextEncoder().encode('{ "uris" : ["https://site.test/a"] }');
+		const { peer, options } = await fixture(ok({ ver: "1.0", exchange: "exchange.test" }));
+		const result = await createClient("https://exchange.test", options).discover(new RawBody(bytes));
+		const received = peer.only();
+		expect(Array.from(received.request.body)).toEqual(Array.from(bytes));
+		expect(received.valid).toBe(true);
+		expect(result.exchange).toBe("exchange.test");
+	});
+
+	it("sends a string as its UTF-8 bytes and any other value as one JSON serialization", async () => {
+		const { peer, options } = await fixture(ok({}));
+		const catalog = createCatalogClient("https://exchange.test", options);
+		await catalog.pushResources(new RawBody("not json at all"));
+		await catalog.removeResources(new RawBody({ paths: ["/x"] }));
+		expect(peer.seen.map((s) => s.body)).toEqual(["not json at all", '{"paths":["/x"]}']);
+	});
+
+	it("skips the validation and the local refusals a built request gets", async () => {
+		const { peer, options } = await fixture(ok({ ver: "1.0" }));
+		const client = createCatalogClient("https://exchange.test", options);
+		// No exchange: built, this is refused as not_sent before anything is signed.
+		await expect(client.refreshCatalog({ tenant_id: "t" })).rejects.toMatchObject({ kind: "not_sent" });
+		expect(peer.seen).toHaveLength(0);
+		await client.refreshCatalog(new RawBody({ tenant_id: "t" }));
+		expect(JSON.parse(peer.only().body)).toEqual({ tenant_id: "t" });
+	});
+
+	it("does not stamp ver, idempotency_key or requester", async () => {
+		const { peer, options } = await fixture(ok({ ver: "1.0", report_id: "r-1" }), {
+			requester: { id: "agent-1", domain: "agent.test" },
+		});
+		const client = createClient("https://exchange.test", options);
+		const answer = await client.reportUsage(new RawBody({ exchange: "exchange.test" }));
+		expect(JSON.parse(peer.only().body)).toEqual({ exchange: "exchange.test" });
+		expect(answer.report_id).toBe("r-1");
+	});
+
+	it("still routes a manifest-addressed verb by the body's exchange", async () => {
+		const dialled: string[] = [];
+		const { options } = await fixture(ok({ ver: "1.0" }), {
+			endpointResolver: {
+				resolveEndpoint: async (host) => {
+					dialled.push(host);
+					return `https://${host}`;
+				},
+			},
+		});
+		const client = createClient("https://home.test", options);
+		await client.getAccountStatus(new RawBody('{"exchange":"other.test"}'));
+		expect(dialled).toEqual(["other.test"]);
+		const failure = await client.register(new RawBody("{}")).catch((e: unknown) => e);
+		expect(failure).toBeInstanceOf(ForaCallError);
+		expect((failure as ForaCallError).kind).toBe("not_sent");
+	});
+
+	it("replaces the offers of a purchase, and verifies no delivery", async () => {
+		const answer = {
+			ver: "1.0",
+			items: [{ offer_id: "o-1", transaction_id: "tx-1", retrieval_endpoint: "https://edge.test/x" }],
+		};
+		const { peer, options } = await fixture(ok(answer), {
+			requester: { id: "agent-1", domain: "agent.test" },
+		});
+		const result = await createClient("https://exchange.test", options).execute(
+			new RawBody({ items: [] }),
+		);
+		expect(peer.only().body).toBe('{"items":[]}');
+		expect(result.items?.[0]?.transaction_id).toBe("tx-1");
+		expect(result.deliveries).toEqual([]);
+		const broker = await createBrokerClient("https://broker.test", options).execute(
+			new RawBody("{}"),
+		);
+		expect(broker.deliveries).toEqual([]);
+	});
+
+	it("passes through the pre-signing hook", async () => {
+		const { peer, options } = await fixture(ok({}), {
+			beforeSign: async (req) => new Request(req.url, { method: "POST", headers: req.headers, body: `${await req.text()} ` }),
+		});
+		await createCatalogClient("https://exchange.test", options).pushResources(new RawBody("x"));
+		expect(peer.only().body).toBe("x ");
+		expect(peer.only().valid).toBe(true);
+	});
+
+	it("is decoded under strict decoding like any answer", async () => {
+		const { options } = await fixture(ok({ ver: "1.0", surprise: 1 }), { strict: true });
+		await expect(
+			createCatalogClient("https://exchange.test", options).pushResources(new RawBody("{}")),
+		).rejects.toMatchObject({ kind: "malformed" });
+	});
+});
+
+describe("typed request inputs", () => {
+	it("accept the generated request type as well as a plain record", async () => {
+		const { peer, options } = await fixture(ok({ ver: "1.0", exchange: "exchange.test" }));
+		const client = createClient("https://exchange.test", options);
+		const typed: ResourceQuery = { exchange: "exchange.test", uris: ["https://site.test/a"] };
+		const loose: Record<string, unknown> = { exchange: "exchange.test", uris: ["https://site.test/a"] };
+		await client.discover(typed);
+		await client.discover(loose);
+		const [a, b] = peer.seen;
+		expect(a?.body).toBe(b?.body);
+	});
+});
diff --git a/sdk/ts/tests/signed-peer.ts b/sdk/ts/tests/signed-peer.ts
new file mode 100644
index 00000000..2ffa1b72
--- /dev/null
+++ b/sdk/ts/tests/signed-peer.ts
@@ -0,0 +1,71 @@
+// A peer behind the client's injected send that authenticates every request first.
+//
+// A recording send proves the bytes were sent; it cannot prove a server would have
+// ACCEPTED them. A request altered before it is signed is only useful if the signature
+// covers the altered bytes, so this peer runs the SDK's own server-side verifier on every
+// request and answers one that fails with the 401 envelope an Exchange sends.
+
+import type { UnaryRequest, UnaryResponse, UnarySend } from "../client/index.ts";
+import { type VerifyRequestHeaders, verifyRequestServer } from "../core/verify-request.ts";
+
+export interface Received {
+	request: UnaryRequest;
+	valid: boolean;
+	body: string;
+}
+
+export interface SignedPeer {
+	send: UnarySend;
+	seen: Received[];
+	only(): Received;
+}
+
+/** The fixture agent: a key pair and the keyid it signs under. */
+export async function agentKeys(): Promise<{ keys: CryptoKeyPair; pub: Uint8Array<ArrayBuffer> }> {
+	const keys = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
+		"sign",
+		"verify",
+	])) as CryptoKeyPair;
+	const pub = new Uint8Array(await crypto.subtle.exportKey("raw", keys.publicKey)) as Uint8Array<ArrayBuffer>;
+	return { keys, pub };
+}
+
+/** A peer that resolves `keyid` to `pub`, verifies, then answers with `answer`. */
+export function signedPeer(
+	keyid: string,
+	pub: Uint8Array<ArrayBuffer>,
+	answer: (req: UnaryRequest) => UnaryResponse = () => ({
+		status: 200,
+		body: JSON.stringify({ ver: "1.0", exchange: "exchange.test" }),
+	}),
+): SignedPeer {
+	const seen: Received[] = [];
+	const send: UnarySend = async (req) => {
+		const headers: Record<string, string> = {};
+		for (const [k, v] of Object.entries(req.headers)) headers[k.toLowerCase()] = v;
+		const verdict = await verifyRequestServer({
+			method: "POST",
+			url: req.url,
+			body: req.body,
+			headers: headers as VerifyRequestHeaders,
+			resolve: { resolve: (k) => (k === keyid ? pub : undefined) },
+			now: () => Math.floor(Date.now() / 1000),
+		});
+		seen.push({ request: req, valid: verdict.valid, body: new TextDecoder().decode(req.body) });
+		if (!verdict.valid) {
+			return {
+				status: 401,
+				body: JSON.stringify({ code: "unauthenticated", message: verdict.reason ?? "signature" }),
+			};
+		}
+		return answer(req);
+	};
+	return {
+		send,
+		seen,
+		only() {
+			if (seen.length !== 1) throw new Error(`expected exactly one request, peer saw ${seen.length}`);
+			return seen[0] as Received;
+		},
+	};
+}
diff --git a/sdk/ts/tests/strict-decoding.test.ts b/sdk/ts/tests/strict-decoding.test.ts
new file mode 100644
index 00000000..c8c19eb9
--- /dev/null
+++ b/sdk/ts/tests/strict-decoding.test.ts
@@ -0,0 +1,111 @@
+// Strict response decoding: ClientOptions.strict.
+//
+// The generated schemas the client parses answers with drop an unknown field, so an older
+// client keeps working against a newer Exchange. Under `strict: true` the client checks
+// every success answer against the published STRICT JSON Schema of its message and the
+// proto's cross-field rules first, and refuses one that fails as `malformed`.
+import { describe, expect, it } from "vitest";
+
+import { createClient, ForaCallError, type ClientOptions } from "../client/index.ts";
+
+const RESPONSE = { ver: "1.0", exchange: "exchange.test" };
+
+function client(answer: unknown, opts: ClientOptions = {}) {
+	return createClient("https://exchange.test", {
+		send: async () => ({ status: 200, body: JSON.stringify(answer) }),
+		guardedSend: async () => ({ status: 200, body: JSON.stringify(answer) }),
+		endpointResolver: { resolveEndpoint: async (host) => `https://${host}` },
+		...opts,
+	});
+}
+
+const QUERY = { exchange: "exchange.test", uris: ["https://site.test/a"] };
+
+async function failure(p: Promise<unknown>): Promise<ForaCallError> {
+	try {
+		await p;
+	} catch (e) {
+		expect(e).toBeInstanceOf(ForaCallError);
+		return e as ForaCallError;
+	}
+	throw new Error("the call did not fail");
+}
+
+describe("strict decoding", () => {
+	it("accepts a well-formed answer", async () => {
+		const result = await client(RESPONSE, { strict: true }).discover(QUERY);
+		expect(result.exchange).toBe("exchange.test");
+	});
+
+	it("refuses an unknown field at the top level", async () => {
+		const answer = { ...RESPONSE, surprise: true };
+		// The default stays forward-compatible: the field is dropped.
+		await expect(client(answer).discover(QUERY)).resolves.toBeDefined();
+		const f = await failure(client(answer, { strict: true }).discover(QUERY));
+		expect(f.kind).toBe("malformed");
+		expect(f.message).toContain("surprise");
+	});
+
+	it("refuses an unknown field nested in a message", async () => {
+		const answer = {
+			...RESPONSE,
+			offers: [{ exchange: "exchange.test", offer_id: "o-1", surprise: 1 }],
+		};
+		const f = await failure(client(answer, { strict: true }).discover(QUERY));
+		expect(f.kind).toBe("malformed");
+		expect(f.message).toContain("/offers/0");
+	});
+
+	it("refuses a camelCase spelling, which is an unknown field", async () => {
+		const answer = { ver: "1.0", reportId: "r-1" };
+		const f = await failure(
+			client(answer, { strict: true }).reportUsage({ exchange: "exchange.test", transaction_id: "t" }),
+		);
+		expect(f.kind).toBe("malformed");
+	});
+
+	it("applies the cross-field rules to the answer itself", async () => {
+		// terms_digest set with no billing_ref breaks
+		// get_account_status_response.terms_digest_requires_billing_ref.
+		const answer = { ver: "1.0", terms_digest: `sha256:${"a".repeat(64)}` };
+		const opts = { strict: true } as const;
+		const f = await failure(client(answer, opts).getAccountStatus({ exchange: "exchange.test" }));
+		expect(f.kind).toBe("malformed");
+		expect(f.message).toContain("get_account_status_response.terms_digest_requires_billing_ref");
+	});
+
+	it("applies the cross-field rules to a nested message", async () => {
+		const answer = {
+			...RESPONSE,
+			offers: [
+				{ exchange: "exchange.test", pricing: { model: "PRICING_MODEL_FREE", rate: "5" } },
+			],
+		};
+		const f = await failure(client(answer, { strict: true }).discover(QUERY));
+		expect(f.message).toContain("pricing.free.zero_rate");
+		expect(f.message).toContain("/offers/0/pricing");
+	});
+
+	it("reads a null member of a message as absent, and leaves an ext open", async () => {
+		const answer = {
+			...RESPONSE,
+			rate_limit: null,
+			ext: { anything: { goes: null } },
+		};
+		await expect(client(answer, { strict: true }).discover(QUERY)).resolves.toBeDefined();
+	});
+
+	it("leaves error envelopes alone", async () => {
+		const f = await failure(
+			createClient("https://exchange.test", {
+				strict: true,
+				send: async () => ({
+					status: 403,
+					body: JSON.stringify({ code: "permission_denied", message: "no", unknown_member: 1 }),
+				}),
+			}).discover(QUERY),
+		);
+		expect(f.kind).toBe("refused");
+		expect(f.code).toBe("permission_denied");
+	});
+});

From 33af8f90f2d7ed315cd660c1ff3ed17c35eed093 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:05:52 -0400
Subject: [PATCH 023/164] Add an admin client to the TypeScript SDK

createAdminClient covers every RPC of fora.admin.v1.AdminService
(setTenantFeeRate, setReportingPolicy) and the two domain-verification RPCs
of ExchangeService (requestDomainVerification, confirmDomainVerification),
whose models already existed.

Every call goes to the configured base URL over the plain send, as the
operator chose the address; a deployment serving the admin listener and the
Exchange endpoint apart builds one client per address. ver is filled when
empty, the request is checked against its generated schema, and the two
domain-verification requests must name a bare-domain recipient or are
refused as not_sent. A configured signer signs every call. RawBody and
strict decoding work as on every other face.

The test reads the RPC list from the proto files, so an RPC added to
AdminService fails it until the client has a verb, and drives each verb
against a peer that verifies the signature.
---
 sdk/ts/client/admin.ts            | 164 ++++++++++++++++++++++++++++++
 sdk/ts/client/index.ts            |  12 +++
 sdk/ts/tests/admin-client.test.ts | 155 ++++++++++++++++++++++++++++
 3 files changed, 331 insertions(+)
 create mode 100644 sdk/ts/client/admin.ts
 create mode 100644 sdk/ts/tests/admin-client.test.ts

diff --git a/sdk/ts/client/admin.ts b/sdk/ts/client/admin.ts
new file mode 100644
index 00000000..a9a4371b
--- /dev/null
+++ b/sdk/ts/client/admin.ts
@@ -0,0 +1,164 @@
+// The operator's client: fora.admin.v1.AdminService and the two domain-verification RPCs.
+//
+// AdminService carries Exchange operator overrides — a tenant's fee rate and reporting
+// policy — and the contract keeps it off the agent-facing listener: deployments restrict
+// it at the network layer, and it carries no RFC 9421 signing requirement. Domain
+// verification is ExchangeService (RequestDomainVerification, then
+// ConfirmDomainVerification once the challenge token is served), and it is the operator
+// or provider tooling that drives it, so it sits on this face rather than the agent's.
+//
+// Every call goes to the configured base URL over the plain send: the operator chose the
+// address. A deployment that serves the admin listener and the Exchange endpoint apart
+// builds one client per address. A configured signer signs every call; without one the
+// calls go unsigned, which is what the admin plane expects.
+
+import type { z } from "zod";
+
+import {
+	DomainVerificationChallengeSchema,
+	DomainVerificationConfirmationSchema,
+	DomainVerificationRequestSchema,
+	DomainVerificationResultSchema,
+	SetReportingPolicyRequestSchema,
+	SetReportingPolicyResponseSchema,
+	SetTenantFeeRateRequestSchema,
+	SetTenantFeeRateResponseSchema,
+} from "../../../gen/ts/wire/schemas.ts";
+import { call, resolve, type ClientOptions, type Resolved } from "./options.ts";
+import { RawBody } from "./raw.ts";
+import { requireRecipient, stampVer, stringField } from "./stamp.ts";
+import { parseMessage, validateRequest } from "./transport.ts";
+
+const ADMIN_SERVICE = "fora.admin.v1.AdminService";
+const EXCHANGE_SERVICE = "fora.v1.ExchangeService";
+
+export type SetTenantFeeRateRequest = z.input<typeof SetTenantFeeRateRequestSchema>;
+export type SetTenantFeeRateResponse = z.infer<typeof SetTenantFeeRateResponseSchema>;
+export type SetReportingPolicyRequest = z.input<typeof SetReportingPolicyRequestSchema>;
+export type SetReportingPolicyResponse = z.infer<typeof SetReportingPolicyResponseSchema>;
+export type DomainVerificationRequest = z.input<typeof DomainVerificationRequestSchema>;
+export type DomainVerificationChallenge = z.infer<typeof DomainVerificationChallengeSchema>;
+export type DomainVerificationConfirmation = z.input<typeof DomainVerificationConfirmationSchema>;
+export type DomainVerificationResult = z.infer<typeof DomainVerificationResultSchema>;
+
+type Request<T> = T | Record<string, unknown> | RawBody;
+
+/** The operator-facing client. */
+export interface AdminClient {
+	/** Set a tenant's fee rate (AdminService.SetTenantFeeRate). Full replace. */
+	setTenantFeeRate(request: Request<SetTenantFeeRateRequest>): Promise<SetTenantFeeRateResponse>;
+	/** Replace a tenant's reporting policy (AdminService.SetReportingPolicy). */
+	setReportingPolicy(
+		request: Request<SetReportingPolicyRequest>,
+	): Promise<SetReportingPolicyResponse>;
+	/** Ask the Exchange for a domain-verification challenge
+	 * (ExchangeService.RequestDomainVerification). */
+	requestDomainVerification(
+		request: Request<DomainVerificationRequest>,
+	): Promise<DomainVerificationChallenge>;
+	/** Confirm the challenge is served and optionally register a signing key
+	 * (ExchangeService.ConfirmDomainVerification). */
+	confirmDomainVerification(
+		request: Request<DomainVerificationConfirmation>,
+	): Promise<DomainVerificationResult>;
+}
+
+type Schema = { safeParse: (v: unknown) => { success: boolean; data?: unknown } };
+
+/** One admin-face verb. */
+interface AdminVerb {
+	op: string;
+	service: string;
+	method: string;
+	request: Schema;
+	response: Schema;
+	/** The fully-qualified response message, which strict decoding validates. */
+	responseName: string;
+	/** Whether the message names its recipient, which is then required. */
+	addressed: boolean;
+}
+
+const SET_TENANT_FEE_RATE: AdminVerb = {
+	op: "set tenant fee rate",
+	service: ADMIN_SERVICE,
+	method: "SetTenantFeeRate",
+	request: SetTenantFeeRateRequestSchema,
+	response: SetTenantFeeRateResponseSchema,
+	responseName: "fora.admin.v1.SetTenantFeeRateResponse",
+	addressed: false,
+};
+const SET_REPORTING_POLICY: AdminVerb = {
+	op: "set reporting policy",
+	service: ADMIN_SERVICE,
+	method: "SetReportingPolicy",
+	request: SetReportingPolicyRequestSchema,
+	response: SetReportingPolicyResponseSchema,
+	responseName: "fora.admin.v1.SetReportingPolicyResponse",
+	addressed: false,
+};
+const REQUEST_DOMAIN_VERIFICATION: AdminVerb = {
+	op: "request domain verification",
+	service: EXCHANGE_SERVICE,
+	method: "RequestDomainVerification",
+	request: DomainVerificationRequestSchema,
+	response: DomainVerificationChallengeSchema,
+	responseName: "fora.v1.DomainVerificationChallenge",
+	addressed: true,
+};
+const CONFIRM_DOMAIN_VERIFICATION: AdminVerb = {
+	op: "confirm domain verification",
+	service: EXCHANGE_SERVICE,
+	method: "ConfirmDomainVerification",
+	request: DomainVerificationConfirmationSchema,
+	response: DomainVerificationResultSchema,
+	responseName: "fora.v1.DomainVerificationResult",
+	addressed: true,
+};
+
+/**
+ * createAdminClient builds the operator client against baseURL. It takes the same options
+ * as every other face; the agent-only ones are inert here.
+ *
+ * Each call fills `ver` when the caller left it empty and checks the request against its
+ * generated schema (unless `validation: "off"`). The two domain-verification requests name
+ * their recipient in `exchange`, so a request naming none, or naming something that is not
+ * a bare domain, is refused as `not_sent` before anything is signed. A RawBody is sent as
+ * given, and strict decoding applies to every answer.
+ */
+export function createAdminClient(baseURL: string, options: ClientOptions = {}): AdminClient {
+	const r = resolve(options);
+	return {
+		setTenantFeeRate: (request) => adminCall(r, baseURL, SET_TENANT_FEE_RATE, request),
+		setReportingPolicy: (request) => adminCall(r, baseURL, SET_REPORTING_POLICY, request),
+		requestDomainVerification: (request) =>
+			adminCall(r, baseURL, REQUEST_DOMAIN_VERIFICATION, request),
+		confirmDomainVerification: (request) =>
+			adminCall(r, baseURL, CONFIRM_DOMAIN_VERIFICATION, request),
+	};
+}
+
+async function adminCall<T>(
+	r: Resolved,
+	baseURL: string,
+	verb: AdminVerb,
+	request: Record<string, unknown> | RawBody,
+): Promise<T> {
+	let message: unknown = request;
+	if (!(request instanceof RawBody)) {
+		const sent = stampVer(verb.op, request);
+		if (verb.addressed) requireRecipient(verb.op, stringField(sent, "exchange"));
+		validateRequest(verb.op, sent, verb.request, r.opts.validation ?? "strict");
+		message = sent;
+	}
+	const raw = await call(
+		r,
+		verb.op,
+		baseURL,
+		verb.service,
+		verb.method,
+		message,
+		false,
+		verb.responseName,
+	);
+	return parseMessage<T>(verb.op, raw, verb.response);
+}
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index bb604200..d3e49ec8 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -1328,3 +1328,15 @@ export {
 	DEFAULT_CONTENT_TIMEOUT_MS,
 	DEFAULT_MAX_CONTENT_BYTES,
 } from "./content.ts";
+export { createAdminClient } from "./admin.ts";
+export type {
+	AdminClient,
+	DomainVerificationChallenge,
+	DomainVerificationConfirmation,
+	DomainVerificationRequest,
+	DomainVerificationResult,
+	SetReportingPolicyRequest,
+	SetReportingPolicyResponse,
+	SetTenantFeeRateRequest,
+	SetTenantFeeRateResponse,
+} from "./admin.ts";
diff --git a/sdk/ts/tests/admin-client.test.ts b/sdk/ts/tests/admin-client.test.ts
new file mode 100644
index 00000000..7660fd41
--- /dev/null
+++ b/sdk/ts/tests/admin-client.test.ts
@@ -0,0 +1,155 @@
+// The operator client: createAdminClient covers every fora.admin.v1.AdminService RPC and
+// the two domain-verification RPCs of ExchangeService.
+//
+// The RPC list is read from the proto files rather than written here, so an RPC added to
+// AdminService fails this suite until the client has a verb for it. Each verb is driven
+// through the injected send against a peer that verifies the signature.
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+
+import {
+	createAdminClient,
+	ForaCallError,
+	RawBody,
+	type AdminClient,
+	type UnaryRequest,
+} from "../client/index.ts";
+import { agentKeys, signedPeer } from "./signed-peer.ts";
+
+const PROTO = fileURLToPath(new URL("../../../proto/", import.meta.url));
+
+/** The RPC names a service declares in a proto file. */
+function rpcsOf(file: string, service: string): string[] {
+	const text = readFileSync(`${PROTO}${file}`, "utf8");
+	const start = text.indexOf(`service ${service} {`);
+	if (start < 0) throw new Error(`${service} not found in ${file}`);
+	const body = text.slice(start, text.indexOf("\n}", start));
+	return [...body.matchAll(/^\s*rpc (\w+)\(/gm)].map((m) => m[1] as string);
+}
+
+const ADMIN_RPCS = rpcsOf("fora/admin/v1/admin.proto", "AdminService");
+const DOMAIN_RPCS = rpcsOf("fora/v1/fora.proto", "ExchangeService").filter((n) =>
+	n.endsWith("DomainVerification"),
+);
+
+const verbOf = (rpc: string) => `${rpc[0]?.toLowerCase()}${rpc.slice(1)}` as keyof AdminClient;
+
+/** A valid request and a valid answer per RPC. */
+const CALLS: Record<string, { request: Record<string, unknown>; answer: Record<string, unknown> }> = {
+	SetTenantFeeRate: {
+		request: { rate: { tenant_id: "t-1", fee_rate_bps: 250 } },
+		answer: { ver: "1.0", rate: { tenant_id: "t-1", fee_rate_bps: 250 } },
+	},
+	SetReportingPolicy: {
+		request: { policy: { tenant_id: "t-1", required_fields: ["tokens"], window_seconds: 3600 } },
+		answer: { ver: "1.0", policy: { tenant_id: "t-1", required_fields: ["tokens"], window_seconds: 3600 } },
+	},
+	RequestDomainVerification: {
+		request: { exchange: "exchange.test", domain: "publisher.test" },
+		answer: { ver: "1.0", token: "tok", verification_url: "https://publisher.test/.well-known/fora-verify/tok" },
+	},
+	ConfirmDomainVerification: {
+		request: { exchange: "exchange.test", domain: "publisher.test", token: "tok" },
+		answer: { ver: "1.0", key_id: "k-1" },
+	},
+};
+
+async function fixture() {
+	const { keys, pub } = await agentKeys();
+	const peer = signedPeer("operator.v1", pub, (req: UnaryRequest) => {
+		const rpc = req.url.slice(req.url.lastIndexOf("/") + 1);
+		return { status: 200, body: JSON.stringify(CALLS[rpc]?.answer ?? {}) };
+	});
+	const client = createAdminClient("https://admin.exchange.test", {
+		signer: { privKey: keys.privateKey, keyid: "operator.v1" },
+		send: peer.send,
+	});
+	return { peer, client };
+}
+
+describe("AdminClient", () => {
+	it("the proto declares the RPCs this suite covers", () => {
+		expect(ADMIN_RPCS.length).toBeGreaterThan(0);
+		expect(DOMAIN_RPCS).toEqual(["RequestDomainVerification", "ConfirmDomainVerification"]);
+	});
+
+	for (const [service, rpcs] of [
+		["fora.admin.v1.AdminService", ADMIN_RPCS],
+		["fora.v1.ExchangeService", DOMAIN_RPCS],
+	] as const) {
+		for (const rpc of rpcs) {
+			it(`${service}/${rpc}`, async () => {
+				const call = CALLS[rpc];
+				if (call === undefined) throw new Error(`no fixture for ${rpc}: add one when the RPC is added`);
+				const { peer, client } = await fixture();
+				const verb = client[verbOf(rpc)];
+				expect(typeof verb, `AdminClient has no ${verbOf(rpc)}`).toBe("function");
+				const answer = await (verb as (r: unknown) => Promise<unknown>)(call.request);
+				const received = peer.only();
+				expect(received.request.url).toBe(`https://admin.exchange.test/${service}/${rpc}`);
+				expect(received.valid).toBe(true);
+				expect(JSON.parse(received.body)).toEqual({ ver: "1.0", ...call.request });
+				expect(answer).toMatchObject(call.answer);
+			});
+		}
+	}
+
+	it("refuses a domain-verification request that names no recipient", async () => {
+		const { peer, client } = await fixture();
+		await expect(client.requestDomainVerification({ domain: "publisher.test" })).rejects.toMatchObject({
+			kind: "not_sent",
+		});
+		await expect(
+			client.confirmDomainVerification({ exchange: "https://exchange.test", domain: "p", token: "t" }),
+		).rejects.toMatchObject({ kind: "not_sent" });
+		expect(peer.seen).toHaveLength(0);
+	});
+
+	it("refuses a request its generated schema rejects, before signing it", async () => {
+		const { peer, client } = await fixture();
+		const f = await client.setTenantFeeRate({ rate: { tenant_id: "t-1", fee_rate_bps: 10000 } }).catch((e: unknown) => e);
+		expect(f).toBeInstanceOf(ForaCallError);
+		expect((f as ForaCallError).kind).toBe("malformed");
+		expect(peer.seen).toHaveLength(0);
+	});
+
+	it("sends a RawBody as given", async () => {
+		const { peer, client } = await fixture();
+		await client.setReportingPolicy(new RawBody('{"policy":{}}'));
+		expect(peer.only().body).toBe('{"policy":{}}');
+	});
+
+	it("surfaces the Exchange's refusal as a typed failure", async () => {
+		const client = createAdminClient("https://admin.exchange.test", {
+			send: async () => ({
+				status: 412,
+				body: JSON.stringify({
+					code: "failed_precondition",
+					message: "challenge not found",
+					details: [
+						{
+							type: "fora.v1.ErrorDetail",
+							debug: {
+								domain: "fora.v1.ExchangeService",
+								domainVerificationFailure: { reason: "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND" },
+							},
+						},
+					],
+				}),
+			}),
+		});
+		const f = (await client
+			.confirmDomainVerification(CALLS["ConfirmDomainVerification"]?.request ?? {})
+			.then(
+				() => undefined,
+				(e: unknown) => e,
+			)) as ForaCallError;
+		expect(f).toBeInstanceOf(ForaCallError);
+		expect(f.kind).toBe("refused");
+		expect(f.code).toBe("failed_precondition");
+		expect(f.detail?.domain_verification_failure?.reason).toBe(
+			"DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND",
+		);
+	});
+});

From a66348986ebc5d757c47dcd55c61555828e6e098 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:07:11 -0400
Subject: [PATCH 024/164] Build the TypeScript package with the JSON Schemas
 strict decoding imports

The client's strict decoding imports the published strict schemas as JSON
modules, so the release build stages gen/jsonschema beside gen/ts and
compiles with resolveJsonModule; the compiled client imports them with a
JSON import attribute, which plain Node resolves from the same
dist/gen/jsonschema directory the ./jsonschema/* export already ships.

Ajv is CommonJS, and NodeNext types its default import as the module
namespace while a bundler types it as the class, so the engine is now read
from whichever arrived and typed by the one method the client uses.
---
 sdk/ts/client/strict.ts    | 13 +++++++++----
 sdk/ts/scripts/build.mjs   |  6 ++++--
 sdk/ts/tsconfig.build.json |  4 +++-
 3 files changed, 16 insertions(+), 7 deletions(-)

diff --git a/sdk/ts/client/strict.ts b/sdk/ts/client/strict.ts
index 4b68db77..242aa5aa 100644
--- a/sdk/ts/client/strict.ts
+++ b/sdk/ts/client/strict.ts
@@ -58,13 +58,18 @@ const STRICT_SCHEMAS: Readonly<Record<string, object>> = {
 };
 
 // Ajv is CommonJS. Node hands an ESM importer its module.exports, which is the class; a
-// bundler may hand over the namespace, whose `default` is. Read whichever arrived.
-const Ajv2020 =
-	(Ajv2020Module as unknown as { default?: typeof Ajv2020Module }).default ?? Ajv2020Module;
+// bundler may hand over the namespace, whose `default` is. Read whichever arrived, typed
+// by the one method used, so the declaration holds under either module resolution.
+interface AjvEngine {
+	compile(schema: object): ValidateFunction;
+}
+type AjvConstructor = new (options: { strict: boolean; validateFormats: boolean }) => AjvEngine;
+const Ajv2020 = ((Ajv2020Module as unknown as { default?: unknown }).default ??
+	Ajv2020Module) as unknown as AjvConstructor;
 
 // One engine for the process, schemas compiled on first use. `format` stays an annotation,
 // as the schemas' README says: a validator asserting `duration` needs ajv-formats.
-let engine: InstanceType<typeof Ajv2020> | undefined;
+let engine: AjvEngine | undefined;
 const compiled = new Map<string, ValidateFunction>();
 
 function validatorFor(message: string): ValidateFunction {
diff --git a/sdk/ts/scripts/build.mjs b/sdk/ts/scripts/build.mjs
index 67951dc5..d23763c0 100644
--- a/sdk/ts/scripts/build.mjs
+++ b/sdk/ts/scripts/build.mjs
@@ -1,6 +1,6 @@
 // Build the publishable @fora-protocol/sdk package into dist/.
 //
-// 1. Stage: copy gen/ts (wire, vocab) and sdk/ts (src, core, client, hono,
+// 1. Stage: copy gen/ts (wire, vocab), gen/jsonschema and sdk/ts (src, core, client, hono,
 //    resolvers) into .stage/ with the same relative layout, so every
 //    ../../../gen/ts import keeps resolving inside the package.
 // 2. Compile .stage/ with tsconfig.build.json (NodeNext, .ts import suffixes
@@ -27,7 +27,9 @@ const rootPkg = JSON.parse(readFileSync(join(repo, "package.json"), "utf8"));
 
 rmSync(stage, { recursive: true, force: true });
 rmSync(dist, { recursive: true, force: true });
-for (const dir of ["gen/ts/wire", "gen/ts/vocab"]) cpSync(join(repo, dir), join(stage, dir), { recursive: true });
+// gen/jsonschema is staged too: the client's strict decoding imports the strict schemas
+// as JSON modules, so they must resolve inside the compilation root.
+for (const dir of ["gen/ts/wire", "gen/ts/vocab", "gen/jsonschema"]) cpSync(join(repo, dir), join(stage, dir), { recursive: true });
 for (const dir of ["src", "core", "client", "hono", "resolvers"]) cpSync(join(pkgDir, dir), join(stage, "sdk/ts", dir), { recursive: true });
 
 execFileSync("npx", ["tsc", "-p", "tsconfig.build.json"], { cwd: pkgDir, stdio: "inherit" });
diff --git a/sdk/ts/tsconfig.build.json b/sdk/ts/tsconfig.build.json
index 2ead61cf..1f137181 100644
--- a/sdk/ts/tsconfig.build.json
+++ b/sdk/ts/tsconfig.build.json
@@ -20,7 +20,9 @@
     "exactOptionalPropertyTypes": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "isolatedModules": true
+    "isolatedModules": true,
+    // The client imports the published strict JSON Schemas as JSON modules.
+    "resolveJsonModule": true
   },
   "include": [".stage/**/*"]
 }

From d058b75f1b86b98cd354fb2dd6085579582abcbd Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:07:39 -0400
Subject: [PATCH 025/164] Describe the TypeScript client's harness capabilities
 in its README

---
 sdk/ts/README.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 24b62b0b..b370d76e 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -44,6 +44,16 @@ import schema from "@fora-protocol/sdk/jsonschema/fora.v1.ResourceResponse.schem
 const validate = new Ajv2020({ validateFormats: false }).compile(schema);
 ```
 
+Strict decoding uses these same files: `createClient(url, { strict: true })` refuses an
+answer that carries an unknown field or breaks a cross-field rule. A harness that tests
+FORA services through the client has three more seams on it: `beforeSign` alters a
+request just before it is signed, a `RawBody` passed in place of a verb's request is sent
+exactly as given, and `ForaCallError.code` carries the Connect code of a refusal next to
+its typed `detail`. `execute` and `fetch` verify a delivery URL's signature, agent binding
+and expiry against the issuing Exchange's key directory before handing it back or dialling
+it. `createAdminClient` covers the operator RPCs, and `@fora-protocol/sdk/identity` mints an
+agent key, its key directory and a signer.
+
 Every module is a named subpath export; there is no package root import. The full list is
 the `exports` map of the package manifest. Source, tests and the release process are in
 [FORA-Protocol/protocol](https://github.com/FORA-Protocol/protocol) under `sdk/ts` and

From b35b767e85f559070dcfadc17963cc7a194d2e71 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:11:08 -0400
Subject: [PATCH 026/164] Export DEFAULT_KEY_VALIDITY from fora_sdk and
 regenerate the parity matrix

helpers.DefaultKeyValidity maps to the Python DEFAULT_KEY_VALIDITY, which the
identity module defined but the package did not export, so the API-surface
gate could not find it. The matrix now records error-detail-wire-vectors.json
as replayed by all three SDKs.
---
 docs/sdk-parity-matrix.md       | 2 +-
 sdk/python/fora_sdk/__init__.py | 8 +++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index db58fe33..2b339c18 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -477,7 +477,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `resolvers/testdata/wba-url-vectors.json` | ✅ | ✅ | ✅ |
 | `connect/testdata/client-request-vectors.json` | ✅ | ✅ | ✅ |
 | `connect/testdata/connect-error-vectors.json` | ✅ | ✅ | ✅ |
-| `connect/testdata/error-detail-wire-vectors.json` | ✅ | ❌ | ❌ |
+| `connect/testdata/error-detail-wire-vectors.json` | ✅ | ✅ | ✅ |
 | `connect/testdata/synthesized-detail-vectors.json` | ✅ | ✅ | ✅ |
 | `connect/testdata/transport-failure-vectors.json` | ✅ | ✅ | ✅ |
 
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 69e452c9..3b8b9f15 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -101,7 +101,12 @@
     verify_request_server,
 )
 from .idempotency import generate_idempotency_key, validate_idempotency_key
-from .identity import directory_document, generate_key, signing_transport_for
+from .identity import (
+    DEFAULT_KEY_VALIDITY,
+    directory_document,
+    generate_key,
+    signing_transport_for,
+)
 from .keyresolver import KeyResolver, StaticKeyResolver
 from .licenseterm import (
     RULE_OBLIGATION_OTHER_REQUIRES_DETAIL,
@@ -274,6 +279,7 @@
     "compile_registration_schema",
     "content_digest",
     "cross_field_rule_ids",
+    "DEFAULT_KEY_VALIDITY",
     "directory_document",
     "dispute_failure_detail",
     "domain_verification_failure_detail",

From 53808f7272f9721e988fd3c091d4951a3646eee6 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 04:15:08 -0400
Subject: [PATCH 027/164] Describe the SDK harness capabilities in the docs and
 changelogs

The agent SDK overview gains a section on testing a FORA service through the
SDK: the pre-signing hook, raw mode, strict decoding, the Connect code, the
verified delivery bindings, the admin client and the identity helpers, named
per language, with the rules all three hold. It also says that both execute
verbs verify every retrieval URL, and lists the operator role beside the
publisher and account-setup roles.

The fetch flow shows the Go client collecting the verified deliveries and
fetching with the issuing Exchange named, adds CallError.Code, and says what a
CallMalformed for an unverifiable delivery URL means. The JSON Schemas page
describes strict decoding, the admin reference names the three admin clients,
and the proto reference says the SDKs read an error detail's binary value
before its debug projection.

The Unreleased entry in both changelogs now covers the capabilities in all
three languages, replacing the Python-only entry.
---
 proto/CHANGELOG.md                            | 80 +++++++++++++-----
 .../docs/components/agent-sdk/fetch-flow.mdx  | 40 +++++++--
 .../docs/components/agent-sdk/overview.mdx    | 50 ++++++++++-
 .../src/content/docs/reference/changelog.mdx  | 82 ++++++++++++++-----
 .../content/docs/reference/json-schemas.mdx   | 14 +++-
 .../content/docs/reference/proto-admin.mdx    |  6 ++
 .../src/content/docs/reference/proto-fora.mdx |  2 +-
 7 files changed, 218 insertions(+), 56 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index ed68e1cd..6197143f 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -90,28 +90,64 @@ SDKs, in all three languages:
   (TypeScript). Offers from more than one Exchange are refused locally.
 - The client-request corpus gains the `brokerExecute` verb.
 
-**Python SDK: four additions for callers that test FORA services through the SDK.
-Python-only for now; Go and TypeScript parity follows.**
-
-- `ClientConfig.before_sign` is called with every request just before it is signed,
-  as an `httpx.Request`. The request it returns is what gets signed and sent, and
-  the reply is decoded as usual, so a test can send a deliberately altered message
-  through the SDK's own signer and decoder. The hook cannot change the method or
-  URL, and cannot set a header the signer emits. Either refuses the call with
-  `CallError(MALFORMED)`.
-- `CallError.code` holds the Connect code of a peer's answer: from an error
-  envelope, or from a non-JSON error status classified by its code. It is `None`
-  for a local failure, a refused redirect and the content leg, whose refusals are
-  edge tokens. `reason` is unchanged.
-- Every verb that takes a request accepts the generated wire model as well as a
-  dict. `to_wire(model)` renders a model as the JSON object the SDK sends: only the
-  fields the caller set, under their proto field names. A model and the equivalent
-  dict reach the wire as the same bytes.
-- `generate_key()` returns a fresh Ed25519 key and its RFC 7638 thumbprint.
-  `directory_document(keys)` returns the Web Bot Auth key-directory JSON for a key
-  set, each key carrying the validity window the SDK's resolver requires.
-  `signing_transport_for(key, directory)` returns a `SigningTransport` that signs as
-  that key.
+**SDK capabilities for conformance and e2e harnesses, in all three languages (no wire
+change).** A harness can now drive FORA services through the SDK, build a malformed
+request only where it means to, and check every answer through the SDK's own decoder.
+
+- **Pre-signing hook.** A function that receives each RPC request just before it is
+  signed; the request it returns is signed and sent, and the answer decoded as usual.
+  `ClientConfig.before_sign` (Python, an `httpx.Request`), `beforeSign` in
+  `ClientOptions` (TypeScript, a Fetch API `Request`), `connect.WithBeforeSign`
+  (Go, an `*http.Request`). A hook that changes the method or URL, sets a header the
+  signer writes, or fails is refused locally as malformed, and nothing is sent.
+- **Raw mode.** A per-call body sent exactly as given: no `ver`, `idempotency_key` or
+  `requester` is filled in and nothing about the message is refused locally, while the
+  body is still signed and the answer still decoded. `RawBody(body)` in place of a
+  verb's request in Python and TypeScript, `connect.WithRawBody(body)` in Go (binary
+  protobuf; every Go verb now takes call options). A verb that routes by the message
+  still reads its destination from the body's `exchange`.
+- **Strict response decoding.** `ClientConfig(strict=True)` (Python), `strict: true`
+  (TypeScript) and `connect.WithStrictDecoding()` (Go) refuse an answer carrying an
+  unknown field at any depth, or breaking a field-level or cross-field rule. Python and
+  TypeScript check the published strict JSON Schema of the response message and the
+  SDK's cross-field rules, reading a `null` member as absent; Go checks the descriptor's
+  unknown fields and runs protovalidate.
+- **Error decoding.** The JSON SDKs read a Connect error's `ErrorDetail` from the binary
+  `details[].value`, with a table-driven decoder and no protobuf dependency, and fall
+  back to the `debug` projection only when `value` is absent. A value that does not
+  decode is not replaced by its `debug`. The Connect code of a peer's answer has its own
+  field: `CallError.code` (Python), `ForaCallError.code` (TypeScript), `CallError.Code`
+  (Go). `connect-error-vectors.json` now pins the code and the whole detail, including
+  rows carrying only `value`, and the new `error-detail-wire-vectors.json` pins the
+  binary decoding of every field of the ErrorDetail subtree against the descriptor.
+- **Delivery verification.** Execute, the Broker purchase and fetch verify a retrieval
+  URL before relying on it: its Ed25519 signature against the key the issuing Exchange
+  publishes in its Web Bot Auth directory (named by the URL's `kid`), its binding to the
+  agent's key (`agent_id` and the answer's `agent_identity_hash`), and its expiry. A URL
+  that does not verify is refused as malformed, with a `retrieval_auth_failure` detail
+  in the edge's own vocabulary; an unreachable directory is unreachable. The verified
+  binding comes back as a `Delivery`: on `ExecuteResult.deliveries` and
+  `BrokerExecuteResult.deliveries` in Python and TypeScript, through
+  `connect.WithDeliveries` in Go, and on the fetched content's `binding` (`Binding`)
+  when a fetch is given a `Delivery` or the issuing Exchange. A bare URL with no
+  Exchange named is still fetched as given. The key resolver is injectable
+  (`delivery_keys`, `deliveryKeys`, `connect.WithDeliveryKeyResolver`), and
+  verification can be turned off for URLs signed in another scheme
+  (`delivery_verification`, `deliveryVerification`, `connect.WithDeliveryVerification`).
+- **Admin client.** `AdminClient` covers `fora.admin.v1.AdminService`
+  (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
+  `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python
+  (async and sync), `createAdminClient` in TypeScript, `connect.NewAdminClient` in Go.
+- **Identity helpers.** Mint a fresh agent: a key and its thumbprint, the Web Bot Auth
+  directory document for a key set, and a signer that signs as it.
+  `generate_key`, `directory_document`, `signing_transport_for` (Python, in
+  `fora_sdk.identity`); `generateKey`, `directoryDocument`, `signingTransportFor`
+  (TypeScript, export path `./identity`); `helpers.GenerateKey`,
+  `helpers.DirectoryDocument`, `core.SigningTransportFor` (Go).
+- **Typed request inputs.** Python verbs accept the generated request models as well as
+  dicts, and `to_wire(model)` renders a model as the JSON object the SDK sends.
+  TypeScript exports the request input types its verbs are typed with. Go verbs already
+  take the generated messages.
 
 **A request-signature refusal carries a typed reason (additive wire change).**
 An RPC request whose RFC 9421 HTTP message signature failed verification was
diff --git a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
index 16acbe5d..c895c3c0 100644
--- a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
+++ b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
@@ -63,7 +63,9 @@ client.Fetch(ctx, "https://techcrunch.com/premium/article.html")
   |       - Authenticate via RFC 9421 HTTP Message Signature in the HTTP headers
   |       - Send ExecuteTransaction RPC to winning Exchange
   |       - On DenialReason: return typed error (see Error Handling below)
-  |       - On success: extract signed URL from retrieval_endpoint
+  |       - On success: extract signed URL from retrieval_endpoint, and verify it:
+  |         its signature against the Exchange's published key, its agent binding
+  |         and its expiry
   |
   |  8. Record spend
   |     BudgetTracker.Record(txn.Cost)
@@ -222,13 +224,23 @@ for _, group := range found.Groups {
     if len(group.Result.Verified) == 0 {
         continue
     }
-    tx, err := client.Execute(ctx, group.Result.Verified[0])
+    // Execute verifies each retrieval URL in the answer -- its signature against the
+    // Exchange's published key, its binding to this agent, its expiry -- and refuses
+    // the answer as CallMalformed if one does not verify.
+    var deliveries []foraconnect.Delivery
+    tx, err := client.Execute(ctx, group.Result.Verified[0],
+        foraconnect.WithDeliveries(&deliveries))
     if err != nil {
         return err
     }
     item := tx.GetItems()[0]
+    if item.DenialReason != nil {
+        continue // denied: no retrieval URL, and deliveries[0] is the zero Delivery
+    }
 
-    content, err := client.Fetch(ctx, item.GetRetrievalEndpoint())
+    // Naming the issuing Exchange makes Fetch check the URL again before it dials.
+    content, err := client.Fetch(ctx, item.GetRetrievalEndpoint(),
+        foraconnect.WithDeliveryExchange(deliveries[0].Exchange))
     if err != nil {
         return err
     }
@@ -244,7 +256,9 @@ acceptance over the whole set; the Broker re-packages the purchase into one sub-
 per Exchange and returns the results in request order. The client must sign as the
 directory its requester's domain names (`WithSignatureAgent`), because a Broker refuses
 a request whose `requester.domain` is anything else, and the client refuses it locally
-first.
+first. A result item's one signed value is its retrieval URL, signed by the Exchange that
+issued the item's offer, so the client verifies each URL against that Exchange's own key
+before returning.
 
 ```go
 broker := foraconnect.NewBrokerClient("https://broker.example",
@@ -292,6 +306,7 @@ type CallError struct {
     Op     string              // the verb that failed
     Status int                 // HTTP status when the peer answered, 0 otherwise
     Reason string              // the peer's own refusal token when it sent one
+    Code   connectrpc.Code     // the Connect code of the peer's answer; zero when none
     Detail *forav1.ErrorDetail // the peer's typed reason when it sent one
     // PeerMessage is the developer message on the peer's typed reason.
     // NON-AUTHORITATIVE and unbounded -- branch on Kind or on the typed reason,
@@ -306,7 +321,8 @@ const (
     CallRefused                   // the server answered and said no
     CallUnreachable               // the server did not answer
     CallNotSent                   // THIS SDK declined to send
-    CallMalformed                 // the request could not be built or signed faithfully
+    CallMalformed                 // the request could not be built or signed faithfully,
+                                  // or the answer could not be read as the protocol defines it
     CallTooLarge                  // the response body was past the configured cap
     CallNotSignable               // a signature or proof could not be produced
 )
@@ -324,7 +340,8 @@ type FetchError struct {
 
 Both carry `ReasonOf()`, which answers the peer's own token when it sent one and the
 failure class otherwise. `connect.ErrorDetailFrom(err)` pulls the typed
-`ErrorDetail` out of any error that carries one. `resolvers.ErrEndpointRefused` is a
+`ErrorDetail` out of any error that carries one, including the `retrieval_auth_failure`
+the client attaches when a delivery URL does not verify. `resolvers.ErrEndpointRefused` is a
 sentinel reachable through `errors.Is`.
 
 ### Error Recovery Strategy
@@ -334,7 +351,7 @@ sentinel reachable through `errors.Is`.
 | `CallNotSent` | **None -- terminal.** The SDK refused before anything left the process, so retrying unchanged fails the same way | Caller fixes the address, the key or the requester |
 | `CallUnreachable` | Retry with backoff | Transparent if the retry succeeds |
 | `CallRefused` | Depends on the typed reason -- read it with `connect.ErrorDetailFrom` | A denial reason such as `DENIAL_REASON_REPORTING_OVERDUE` tells the caller what to fix. A `request_auth_failure` of `SIGNATURE_STALE` means sign the request again and retry; `SIGNATURE_MISSING` and `SIGNATURE_INVALID` are terminal until the signer is fixed |
-| `CallMalformed` | **None -- terminal.** The request could not be built or signed faithfully | Caller fixes the message |
+| `CallMalformed` | **None -- terminal.** The request could not be built or signed faithfully, or the answer could not be read as the protocol defines it | Caller fixes the message. A delivery URL that does not verify carries a `retrieval_auth_failure` reason; the purchase itself happened, and the error names the item's transaction id |
 | `CallTooLarge` | Raise `WithMaxContentBytes`, or ask for less | Caller decides whether the body is legitimate |
 | `CallNotSignable` | **None -- terminal.** No signature or proof could be produced | Caller fixes key custody or the signing window |
 | `FetchRefused` | Read `Reason` -- the edge's own token says whether the URL expired or the proof did not match | An expired delivery URL means buying again |
@@ -390,4 +407,11 @@ test prove an Exchange would have been accepted, instead of proving the calls di
 not panic.
 
 `sdk/python/tests/exchange_harness.py` is a worked example of exactly that, in under
-300 lines, and it is what executes the Python README's agent example on every run.
+300 lines, and it is what executes the Python README's agent example on every run. Its
+directory publishes the key it signs delivery URLs with, and each URL names that key by
+thumbprint in `kid`, because the client verifies every delivery URL against the issuing
+Exchange's published key.
+
+Testing a FORA service rather than an agent works the other way round, and the clients
+support it directly: a pre-signing hook, raw mode, strict decoding, an admin client and
+identity helpers. See [Testing a FORA Service Through the SDK](/components/agent-sdk/overview/#testing-a-fora-service-through-the-sdk).
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index b1315c40..dd888004 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -37,6 +37,12 @@ Exchanges the Broker knows, and **execute**, which buys offers from several Exch
 one call (`BrokerService.ExecuteTransaction`). The exchange client's execute also takes
 several offers from one Exchange (`ExecuteBatch` in Go).
 
+Both execute verbs verify every retrieval URL in the answer before handing it back: its
+signature against the key the issuing Exchange publishes in its Web Bot Auth directory,
+its binding to the agent's key and its expiry. A URL that would only fail at the delivery
+edge is refused when it arrives, and fetch repeats the check before it dials when it is
+told which Exchange issued the URL.
+
 Full per-language references live beside the code: [Go](https://github.com/FORA-Protocol/protocol/blob/main/sdk/go/README.md),
 [Python](https://github.com/FORA-Protocol/protocol/blob/main/sdk/python/README.md).
 
@@ -54,8 +60,8 @@ an example does not follow fails a gate instead of reaching a reader.
 its verified offers and, for the rest, the reason they were refused. Failures across every
 verb arrive as one `connect.CallError` with a `CallErrorKind` -- `CallNotSent`,
 `CallRefused`, `CallUnreachable`, `CallMalformed`, `CallTooLarge`, `CallNotSignable` --
-plus the peer's own reason token and, when it sent one, a typed detail reachable through
-`connect.ErrorDetailFrom`.
+plus the peer's own reason token, the Connect code of its answer (`Code`) and, when it
+sent one, a typed detail reachable through `connect.ErrorDetailFrom`.
 
 ### TypeScript
 
@@ -78,6 +84,44 @@ resolving fails a test.
 facade over a synchronous HTTP client rather than an `asyncio.run` wrapper, which would
 break inside a running event loop.
 
+## Testing a FORA Service Through the SDK
+
+The same clients serve a conformance or end-to-end harness. A harness drives a service
+through the SDK, builds a malformed request only where it means to, and checks every
+answer through the SDK's own signer and decoder, instead of hand-writing payloads,
+parsing responses itself or re-implementing request signing.
+
+| Capability | Go (`sdk/go`) | TypeScript (`sdk/ts`) | Python (`fora_sdk`) |
+|---|---|---|---|
+| Pre-signing hook: change a request after the SDK built it, before it is signed | `connect.WithBeforeSign` | `beforeSign` in `ClientOptions` | `ClientConfig.before_sign` |
+| Raw mode: send a body exactly as given, still signed and decoded | `connect.WithRawBody` | `new RawBody(body)` in place of the request | `RawBody(body)` in place of the request |
+| Strict decoding: refuse an unknown field, a field-level or a cross-field violation | `connect.WithStrictDecoding` | `strict: true` | `ClientConfig(strict=True)` |
+| The Connect code of a refusal, on its own field | `CallError.Code` | `ForaCallError.code` | `CallError.code` |
+| The verified binding of each delivery URL | `connect.WithDeliveries`, `Content.Binding` | `ExecuteResult.deliveries`, `Content.binding` | `ExecuteResult.deliveries`, `Content.binding` |
+| The operator RPCs: `AdminService` and domain verification | `connect.NewAdminClient` | `createAdminClient` | `AdminClient` |
+| Mint a throwaway agent: key, directory document, signer | `helpers.GenerateKey`, `helpers.DirectoryDocument`, `core.SigningTransportFor` | `generateKey`, `directoryDocument`, `signingTransportFor` | `generate_key`, `directory_document`, `signing_transport_for` |
+
+A few rules hold in every language:
+
+- **The hook and raw mode cannot bypass signing or decoding.** The SDK signs the exact
+  bytes it sends and decodes the answer with the same code every verb uses. A hook may
+  not change the method or the URL, because the address checks already ran against them,
+  and may not set a header the signer writes. Raw mode skips only what the SDK would
+  have added to the message or refused about it; a verb that routes by the message still
+  reads its destination from the body's `exchange` and resolves it as usual.
+- **Strict decoding defines no shape of its own.** It uses the published strict JSON
+  Schema of each response message and the cross-field rules the proto states (see
+  [JSON Schemas](/reference/json-schemas/)); Go reads the same shape from the
+  descriptor. A server emits unpopulated fields, so a `null` member is read as an absent
+  one.
+- **Error details are read from the binary `value`.** A Connect error carries its typed
+  reason as `details[].value`, the binary `ErrorDetail`. All three SDKs read it; the JSON
+  SDKs fall back to the lowerCamelCase `debug` projection only when `value` is absent.
+- **Delivery verification is on by default.** A URL whose signature, binding or expiry
+  does not verify is refused as malformed, with a `retrieval_auth_failure` reason in the
+  vocabulary the delivery edge uses. A deployment whose URLs use another signing scheme
+  turns it off explicitly.
+
 <DeferredSdkNoticeDetail />
 
 ## v1.0 Capabilities
@@ -358,6 +402,8 @@ The concrete implementations differ in persistence strategy (in-memory vs Redis)
 
 Every language also ships the account-setup role: `Register` and `GetAccountStatus` on the agent client (`Register`/`GetAccountStatus`, `register`/`getAccountStatus`, `register`/`get_account_status`), addressed by the Exchange domain on the request rather than by a configured origin, alongside the reader that fetches an Exchange's published registration requirements afresh on every read (`resolvers.NewWellKnownRequirementsReader`, `createWellKnownRequirementsReader`, `WellKnownRequirementsReader`). That reader applies the manifest version gate before it reads anything else, the same rule and the same shared corpus as the endpoint resolver — a document whose layout no reader can classify supplies neither the published schema nor the terms digest a registration echoes. A payload the client's own schema pre-check refuses comes back carrying the same typed `RegistrationFailure` detail the Exchange would have attached, so one renderer serves both sides of the refusal.
 
+Every language also ships the operator role: an admin client (`connect.NewAdminClient`, `createAdminClient`, `fora_sdk.client.AdminClient`) for `fora.admin.v1.AdminService` and the two domain-verification RPCs, built against the configured base URL. `AdminService` is not served on the public agent-facing listener, so a deployment that serves it apart from the Exchange endpoint builds one admin client per address.
+
 Every language also ships the publisher role: a catalog client (`connect.NewCatalogClient`, `createCatalogClient`, `fora_sdk.client.CatalogClient`) and the Exchange's two-tier entry pre-check (`helpers.ValidateResourceEntry`, `validateResourceEntry`, `validate_resource_entry`) — see [Source 7: CatalogService API Push](/components/content-ingestion/sources/#source-7-catalogservice-api-push).
 
 ### What Is Language-Specific vs Shared
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 4f5b95a3..6f482a27 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -97,28 +97,66 @@ SDKs, in all three languages:
   (TypeScript). Offers from more than one Exchange are refused locally.
 - The client-request corpus gains the `brokerExecute` verb.
 
-**Python SDK: four additions for callers that test FORA services through the SDK.
-Python-only for now; Go and TypeScript parity follows.**
-
-- `ClientConfig.before_sign` is called with every request just before it is signed,
-  as an `httpx.Request`. The request it returns is what gets signed and sent, and
-  the reply is decoded as usual, so a test can send a deliberately altered message
-  through the SDK's own signer and decoder. The hook cannot change the method or
-  URL, and cannot set a header the signer emits. Either refuses the call with
-  `CallError(MALFORMED)`.
-- `CallError.code` holds the Connect code of a peer's answer: from an error
-  envelope, or from a non-JSON error status classified by its code. It is `None`
-  for a local failure, a refused redirect and the content leg, whose refusals are
-  edge tokens. `reason` is unchanged.
-- Every verb that takes a request accepts the generated wire model as well as a
-  dict. `to_wire(model)` renders a model as the JSON object the SDK sends: only the
-  fields the caller set, under their proto field names. A model and the equivalent
-  dict reach the wire as the same bytes.
-- `generate_key()` returns a fresh Ed25519 key and its RFC 7638 thumbprint.
-  `directory_document(keys)` returns the Web Bot Auth key-directory JSON for a key
-  set, each key carrying the validity window the SDK's resolver requires.
-  `signing_transport_for(key, directory)` returns a `SigningTransport` that signs as
-  that key.
+**SDK capabilities for conformance and e2e harnesses, in all three languages (no wire
+change).** A harness can now drive FORA services through the SDK, build a malformed
+request only where it means to, and check every answer through the SDK's own decoder.
+[Testing a FORA Service Through the SDK](/components/agent-sdk/overview/#testing-a-fora-service-through-the-sdk)
+summarizes them per language.
+
+- **Pre-signing hook.** A function that receives each RPC request just before it is
+  signed; the request it returns is signed and sent, and the answer decoded as usual.
+  `ClientConfig.before_sign` (Python, an `httpx.Request`), `beforeSign` in
+  `ClientOptions` (TypeScript, a Fetch API `Request`), `connect.WithBeforeSign`
+  (Go, an `*http.Request`). A hook that changes the method or URL, sets a header the
+  signer writes, or fails is refused locally as malformed, and nothing is sent.
+- **Raw mode.** A per-call body sent exactly as given: no `ver`, `idempotency_key` or
+  `requester` is filled in and nothing about the message is refused locally, while the
+  body is still signed and the answer still decoded. `RawBody(body)` in place of a
+  verb's request in Python and TypeScript, `connect.WithRawBody(body)` in Go (binary
+  protobuf; every Go verb now takes call options). A verb that routes by the message
+  still reads its destination from the body's `exchange`.
+- **Strict response decoding.** `ClientConfig(strict=True)` (Python), `strict: true`
+  (TypeScript) and `connect.WithStrictDecoding()` (Go) refuse an answer carrying an
+  unknown field at any depth, or breaking a field-level or cross-field rule. Python and
+  TypeScript check the published strict JSON Schema of the response message and the
+  SDK's cross-field rules, reading a `null` member as absent; Go checks the descriptor's
+  unknown fields and runs protovalidate.
+- **Error decoding.** The JSON SDKs read a Connect error's `ErrorDetail` from the binary
+  `details[].value`, with a table-driven decoder and no protobuf dependency, and fall
+  back to the `debug` projection only when `value` is absent. A value that does not
+  decode is not replaced by its `debug`. The Connect code of a peer's answer has its own
+  field: `CallError.code` (Python), `ForaCallError.code` (TypeScript), `CallError.Code`
+  (Go). `connect-error-vectors.json` now pins the code and the whole detail, including
+  rows carrying only `value`, and the new `error-detail-wire-vectors.json` pins the
+  binary decoding of every field of the ErrorDetail subtree against the descriptor.
+- **Delivery verification.** Execute, the Broker purchase and fetch verify a retrieval
+  URL before relying on it: its Ed25519 signature against the key the issuing Exchange
+  publishes in its Web Bot Auth directory (named by the URL's `kid`), its binding to the
+  agent's key (`agent_id` and the answer's `agent_identity_hash`), and its expiry. A URL
+  that does not verify is refused as malformed, with a `retrieval_auth_failure` detail
+  in the edge's own vocabulary; an unreachable directory is unreachable. The verified
+  binding comes back as a `Delivery`: on `ExecuteResult.deliveries` and
+  `BrokerExecuteResult.deliveries` in Python and TypeScript, through
+  `connect.WithDeliveries` in Go, and on the fetched content's `binding` (`Binding`)
+  when a fetch is given a `Delivery` or the issuing Exchange. A bare URL with no
+  Exchange named is still fetched as given. The key resolver is injectable
+  (`delivery_keys`, `deliveryKeys`, `connect.WithDeliveryKeyResolver`), and
+  verification can be turned off for URLs signed in another scheme
+  (`delivery_verification`, `deliveryVerification`, `connect.WithDeliveryVerification`).
+- **Admin client.** `AdminClient` covers `fora.admin.v1.AdminService`
+  (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
+  `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python
+  (async and sync), `createAdminClient` in TypeScript, `connect.NewAdminClient` in Go.
+- **Identity helpers.** Mint a fresh agent: a key and its thumbprint, the Web Bot Auth
+  directory document for a key set, and a signer that signs as it.
+  `generate_key`, `directory_document`, `signing_transport_for` (Python, in
+  `fora_sdk.identity`); `generateKey`, `directoryDocument`, `signingTransportFor`
+  (TypeScript, export path `./identity`); `helpers.GenerateKey`,
+  `helpers.DirectoryDocument`, `core.SigningTransportFor` (Go).
+- **Typed request inputs.** Python verbs accept the generated request models as well as
+  dicts, and `to_wire(model)` renders a model as the JSON object the SDK sends.
+  TypeScript exports the request input types its verbs are typed with. Go verbs already
+  take the generated messages.
 
 **A request-signature refusal carries a typed reason (additive wire change).**
 An RPC request whose RFC 9421 HTTP message signature failed verification was
diff --git a/website/src/content/docs/reference/json-schemas.mdx b/website/src/content/docs/reference/json-schemas.mdx
index 6db17e89..0b30e90e 100644
--- a/website/src/content/docs/reference/json-schemas.mdx
+++ b/website/src/content/docs/reference/json-schemas.mdx
@@ -60,6 +60,18 @@ if (!validate(body)) console.log(validate.errors);
 Go reads the file with `jsonschema.Load` and passes the bytes to any draft 2020-12
 validator.
 
+## Strict decoding in the SDKs
+
+The Python and TypeScript clients use the strict variant themselves. A client built with
+`ClientConfig(strict=True)` (Python) or `strict: true` (TypeScript) validates every
+successful answer against the strict schema of its response message before it decodes
+it, and then applies the cross-field rules the schemas cannot express, which the SDKs
+already carry. A FORA server emits unpopulated fields, so a `null` member of a message
+object is read as absent before the check, as proto-JSON reads it. An unknown field at
+any depth, a field-level violation or a cross-field violation refuses the answer as
+malformed. The Go client, `connect.WithStrictDecoding()`, applies the same contract from
+the compiled descriptor: it refuses unknown fields and runs `protovalidate`.
+
 ## What the schemas accept
 
 The schemas describe canonical proto-JSON as the FORA wire carries it. The two variants
@@ -98,7 +110,7 @@ field), or with an added `"metricName": "accesses"` (an unknown field).
 
 - **Cross-field rules.** A rule that relates two fields, such as which pricing fields a
   pricing model requires, cannot be expressed per field. Servers enforce these rules, and
-  the SDKs apply them too.
+  the SDKs apply them too, including in strict decoding.
 - **Oneof exclusivity.** A schema does not refuse two members of the same oneof.
 - **Formats.** `format` (`date-time`, `duration`) is an annotation unless your validator
   is configured to assert formats.
diff --git a/website/src/content/docs/reference/proto-admin.mdx b/website/src/content/docs/reference/proto-admin.mdx
index 7132968c..6f4ee4de 100644
--- a/website/src/content/docs/reference/proto-admin.mdx
+++ b/website/src/content/docs/reference/proto-admin.mdx
@@ -14,6 +14,12 @@ Both RPCs are **full-replace overwrites** and therefore idempotent — they carr
 Every constraint is a **field-level** protovalidate rule, so it flows into the generated Pydantic/Zod types; this package defines no cross-field (message-level CEL) rules.
 :::
 
+All three SDKs ship a client for this service and the two domain-verification RPCs of
+`ExchangeService`: `connect.NewAdminClient` (Go), `createAdminClient` (TypeScript) and
+`AdminClient` (Python). It stamps `ver`, checks each request against its generated model
+and sends it to the configured base URL; see
+[Testing a FORA Service Through the SDK](/components/agent-sdk/overview/#testing-a-fora-service-through-the-sdk).
+
 ## Services
 
 ### AdminService
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index fd21533e..0cb104bd 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -17,7 +17,7 @@ The canonical wire form is **snake_case proto-JSON** — the field names exactly
 
 This is **load-bearing for signatures**: signed messages (`Offer.signature`, `ResourceAttestation`, …) are Ed25519 over **JCS-canonicalized (RFC 8785) proto-JSON**, and JCS sorts keys lexicographically, so the field-name casing determines the signed bytes. snake_case proto-JSON is the canonical input the signature is computed over.
 
-One exception, and it is **transport framing** rather than a FORA message: the `debug` projection Connect attaches to an error detail is lowerCamelCase, and no server option changes it — `connect-go` renders that projection with its own `protojson` codec at default options, so the snake_case codec a deployment registers reaches the response **body** and not the error beside it. A JSON client normalizes that one projection back to the proto names before reading it, which is possible because `json_name` inverts to the field name for every field in this contract.
+One exception, and it is **transport framing** rather than a FORA message: the `debug` projection Connect attaches to an error detail is lowerCamelCase, and no server option changes it — `connect-go` renders that projection with its own `protojson` codec at default options, so the snake_case codec a deployment registers reaches the response **body** and not the error beside it. A JSON client normalizes that one projection back to the proto names before reading it, which is possible because `json_name` inverts to the field name for every field in this contract. The projection is a convenience beside the detail's binary `value`, which is the authoritative copy: the FORA SDKs read `value` first and fall back to the projection only when no `value` is present.
 :::
 
 ## Services

From 03b232c8e70a23870a182377f03e4325b059535b Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 05:51:13 -0400
Subject: [PATCH 028/164] Check error envelopes under strict decoding in the Go
 client

WithStrictDecoding checked a success answer and read an error answer the
way connect-go does, which ignores an unknown member, turns an unknown code
into one derived from the status and skips a detail that does not decode.
A harness relying on strict mode as a shape check therefore missed a
malformed envelope and an ErrorDetail that breaks its contract.

Under strict decoding the client's transport now keeps the error body, and
the strict interceptor checks it before the error is classified:

- the envelope carries only code, message and details, a null member read
  as absent; code is one of the sixteen Connect codes; message is a string;
- each details entry carries only type, value and debug, a non-empty type,
  a base64 value (standard or URL alphabet, padded or not) and at least one
  of value and debug;
- an entry of type fora.v1.ErrorDetail decodes from its value with no
  unknown field and passes protovalidate, and its debug projection, when
  present, parses as proto-JSON with no unknown field and passes the same
  rules.

A refused envelope is CallMalformed with CallError.Code still holding the
peer's code, and reports no detail. An empty or non-JSON error body is a
gateway's answer and is classified by its status as before, and a gzip
error body is checked after it is decoded. Without the option nothing
changes.

connect-error-vectors.json gains a strict_malformed column on every row,
declared by the emitter rather than taken from Go's own strict run, and
three rows for it: envelope_unknown_member, debug_projection_unknown_field,
and the captured registration_failure_field_errors_out_of_scope, whose
field_errors break the RegistrationFailure message rule, with its
.value_only twin. undecodable_value_skipped is refused under strict
decoding. The Go replay reads every row through a strict client too, and a
table test covers the envelope rules one by one.
---
 sdk/go/README.md                              |   7 +-
 sdk/go/connect/answer.go                      |   4 +-
 sdk/go/connect/callerror.go                   |  23 +-
 sdk/go/connect/connect_error_corpus_test.go   |  38 ++-
 .../connect/gen_connect_error_vectors_test.go |  98 +++++-
 sdk/go/connect/strict.go                      |  55 ++-
 sdk/go/connect/strict_envelope.go             | 313 ++++++++++++++++++
 sdk/go/connect/strict_envelope_test.go        | 123 +++++++
 .../testdata/connect-error-vectors.json       | 240 ++++++++++++--
 9 files changed, 841 insertions(+), 60 deletions(-)
 create mode 100644 sdk/go/connect/strict_envelope.go
 create mode 100644 sdk/go/connect/strict_envelope_test.go

diff --git a/sdk/go/README.md b/sdk/go/README.md
index 41d43528..9145daf9 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -301,7 +301,12 @@ response or re-implements signing:
   applies, while the call is still signed and its answer decoded. A verb that routes on
   its request reads `exchange` from the body.
 - **`WithStrictDecoding()`** refuses an answer carrying an unknown field at any depth,
-  or breaking the proto's field or cross-field rules (protovalidate).
+  or breaking the proto's field or cross-field rules (protovalidate). An error answer
+  is checked too: the Connect error envelope must carry only `code`, `message` and
+  `details`, name a known Connect code and carry well-formed details, and every
+  `ErrorDetail`, binary `value` and `debug` projection alike, must pass the same two
+  checks. A refused envelope is `CallMalformed` with `CallError.Code` still set to the
+  peer's code.
 - **`CallError.Code`** is the Connect code of the peer's answer — an error envelope or
   a non-JSON error status — and zero when no answer arrived. The typed `ErrorDetail` is
   decoded from the binary `value`; the shared `connect-error-vectors.json` and
diff --git a/sdk/go/connect/answer.go b/sdk/go/connect/answer.go
index ccf8107b..7986be79 100644
--- a/sdk/go/connect/answer.go
+++ b/sdk/go/connect/answer.go
@@ -69,7 +69,8 @@ func (answerInterceptor) WrapStreamingHandler(next connectrpc.StreamingHandlerFu
 }
 
 // answerRecorder is the outermost RoundTripper on every signed leg: it records the
-// status of the response that came back into the call's holder.
+// status of the response that came back into the call's holder, and, under strict
+// decoding, the error body into the call's envelope capture.
 type answerRecorder struct{ next http.RoundTripper }
 
 func (r answerRecorder) RoundTrip(req *http.Request) (*http.Response, error) {
@@ -78,6 +79,7 @@ func (r answerRecorder) RoundTrip(req *http.Request) (*http.Response, error) {
 		if holder, ok := req.Context().Value(answerKey{}).(*answerHolder); ok {
 			holder.status.Store(int64(resp.StatusCode))
 		}
+		captureErrorBody(req, resp)
 	}
 	return resp, err
 }
diff --git a/sdk/go/connect/callerror.go b/sdk/go/connect/callerror.go
index a2a2f558..8f9d6bc9 100644
--- a/sdk/go/connect/callerror.go
+++ b/sdk/go/connect/callerror.go
@@ -113,13 +113,13 @@ type CallError struct {
 	// belongs to whoever displays it.
 	PeerMessage string
 	// Code is the Connect code of the peer's answer, set only where a Connect answer
-	// was decoded: an error envelope, or a non-JSON error status classified by its
-	// code. It is zero for a local failure, a transport failure where no answer
-	// arrived (a dial error, a timeout), a refused redirect, and the content leg,
-	// whose refusals are edge tokens rather than Connect codes. Reason carries the
-	// same code as text on an RPC path and the edge token on the content path; this
-	// field holds only the Connect code, so a caller can branch on it without
-	// knowing which leg failed.
+	// was decoded: an error envelope, one strict decoding refused included, or a
+	// non-JSON error status classified by its code. It is zero for a local failure, a
+	// transport failure where no answer arrived (a dial error, a timeout), a refused
+	// redirect, and the content leg, whose refusals are edge tokens rather than
+	// Connect codes. Reason carries the same code as text on an RPC path and the edge
+	// token on the content path; this field holds only the Connect code, so a caller
+	// can branch on it without knowing which leg failed.
 	//
 	// connect-go does not mark a code it derived from an HTTP status as one the
 	// server sent, so "the peer answered" is recorded by the client's own transport
@@ -229,7 +229,14 @@ func localRefusal(op string, err error) *CallError {
 	}
 	var strict *strictDecodeError
 	if errors.As(err, &strict) {
-		return &CallError{Kind: CallMalformed, Op: op, Err: strict}
+		out := &CallError{Kind: CallMalformed, Op: op, Err: strict}
+		if strict.envelope {
+			// The peer answered with an error envelope this client refused. Its Connect
+			// code is still the peer's, so it stays readable; the detail does not, since
+			// it is part of what was refused.
+			out.Code = strict.code
+		}
+		return out
 	}
 	return nil
 }
diff --git a/sdk/go/connect/connect_error_corpus_test.go b/sdk/go/connect/connect_error_corpus_test.go
index 14eaffcc..b8f7b089 100644
--- a/sdk/go/connect/connect_error_corpus_test.go
+++ b/sdk/go/connect/connect_error_corpus_test.go
@@ -74,6 +74,7 @@ func TestConnectErrorCorpusReplay(t *testing.T) {
 			if got := callErr.Code.String(); got != v.Code {
 				t.Errorf("code = %q, want %q", got, v.Code)
 			}
+			assertStrictRead(t, v, callErr)
 			if !ok {
 				return
 			}
@@ -135,6 +136,39 @@ func callServing(t *testing.T, v connectErrorVector) error {
 	return err
 }
 
+// assertStrictRead replays the row through a client with strict decoding on. A row the
+// corpus marks strict_malformed is refused as CallMalformed, keeping the row's Connect
+// code and reporting no detail; any other row reads exactly as the lenient client read
+// it, kind, code and detail alike.
+func assertStrictRead(t *testing.T, v connectErrorVector, lenient *foraconnect.CallError) {
+	t.Helper()
+	strict := clientFailureServing(t, v, foraconnect.WithStrictDecoding())
+	if got := strict.Code.String(); got != v.Code {
+		t.Errorf("strict: code = %q, want %q", got, v.Code)
+	}
+	detail, hasDetail := foraconnect.ErrorDetailFrom(strict)
+	if v.StrictMalformed {
+		if strict.Kind != foraconnect.CallMalformed {
+			t.Errorf("strict: kind = %v, want malformed (%v)", strict.Kind, strict)
+		}
+		if hasDetail {
+			t.Errorf("strict: a refused envelope still reports a detail: %v", detail)
+		}
+		return
+	}
+	if strict.Kind != lenient.Kind {
+		t.Errorf("strict: kind = %v, want the lenient read's %v (%v)", strict.Kind, lenient.Kind, strict)
+	}
+	if hasDetail != v.Expect.HasDetail {
+		t.Fatalf("strict: has-detail = %v, want %v", hasDetail, v.Expect.HasDetail)
+	}
+	if hasDetail {
+		if got := protoJSONOf(detail); !reflect.DeepEqual(got, v.Expect.Detail) {
+			t.Errorf("strict: detail = %v, want %v", got, v.Expect.Detail)
+		}
+	}
+}
+
 // clientFailureServing serves the same recorded envelope and returns the CLIENT's own
 // failure, which is where the peer's sentence and the Connect code live — one tier above the
 // ErrorDetail the rest of this replay projects.
@@ -145,7 +179,7 @@ func callServing(t *testing.T, v connectErrorVector) error {
 // envelope would make its value a property of the language rather than of the answer —
 // which is the drift a shared corpus exists to catch, and could not have caught while
 // each language was faithfully reporting its own transport.
-func clientFailureServing(t *testing.T, v connectErrorVector) *foraconnect.CallError {
+func clientFailureServing(t *testing.T, v connectErrorVector, opts ...foraconnect.ClientOption) *foraconnect.CallError {
 	t.Helper()
 	body, err := json.Marshal(v.Envelope)
 	if err != nil {
@@ -158,7 +192,7 @@ func clientFailureServing(t *testing.T, v connectErrorVector) *foraconnect.CallE
 	}))
 	defer srv.Close()
 
-	_, derr := foraconnect.NewClient(srv.URL).Discover(
+	_, derr := foraconnect.NewClient(srv.URL, opts...).Discover(
 		context.Background(), &forav1.ResourceQuery{Exchange: "exchange.test"})
 	var callErr *foraconnect.CallError
 	if !errors.As(derr, &callErr) {
diff --git a/sdk/go/connect/gen_connect_error_vectors_test.go b/sdk/go/connect/gen_connect_error_vectors_test.go
index 43b365e2..9d5196fb 100644
--- a/sdk/go/connect/gen_connect_error_vectors_test.go
+++ b/sdk/go/connect/gen_connect_error_vectors_test.go
@@ -41,6 +41,21 @@ package connect_test
 // whose `debug` must still not be read in its place. Go reads only `value`, so its
 // replay of the derived rows is the same real round trip as for the captured ones.
 //
+// Every row also records how a STRICT client reads it (strict_malformed). Strict decoding
+// checks the envelope itself — only the members code, message and details, a known
+// Connect code, well-formed details — and every ErrorDetail it carries, binary value and
+// debug projection alike, against the strict ErrorDetail schema and its rules. A row it
+// refuses is reported as malformed with the row's Connect code kept and no detail; a row
+// it accepts reads exactly as the lenient client reads it. Three DERIVED rows exist for
+// this column: `envelope_unknown_member`, whose envelope carries a member Connect does
+// not define; `debug_projection_unknown_field`, whose debug projection carries a field
+// ErrorDetail does not define; and the captured
+// `registration_failure_field_errors_out_of_scope`, whose reason block breaks the
+// RegistrationFailure message rule (field_errors only with INVALID_REGISTRATION_DATA).
+// `undecodable_value_skipped` is refused too: a value that does not decode is not a
+// well-formed detail. The column is declared here, not derived from Go's own strict run,
+// so the Go replay is held to it like the other two.
+//
 // Like the other emitters this test is a verification no-op by default (it asserts the
 // committed file matches a fresh emit) and (re)writes it under FORA_UPDATE_VECTORS=1.
 // It is TEST INFRASTRUCTURE, not the code under test.
@@ -99,6 +114,11 @@ type connectErrorVector struct {
 	// property of the CallError one tier up. The column gate reads top-level keys, so
 	// placing it here is also what obliges all three replays to assert it.
 	PeerMessage string `json:"peer_message"`
+	// StrictMalformed is how a client with strict decoding on reads the row: true when
+	// it refuses the answer as malformed, keeping Code and reporting no detail; false
+	// when it reads the row exactly as the lenient client does. Top-level for the same
+	// reason as PeerMessage: it is a property of the CallError, not of the detail.
+	StrictMalformed bool `json:"strict_malformed"`
 }
 
 // connectErrorExpectation mirrors the error-detail corpus's projection so the two read
@@ -123,6 +143,8 @@ type errorCase struct {
 	code   connectrpc.Code
 	msg    string
 	detail *forav1.ErrorDetail
+	// strictMalformed is the row's strict_malformed column.
+	strictMalformed bool
 }
 
 // connectErrorCases are the failures the envelope must carry faithfully.
@@ -201,6 +223,17 @@ func connectErrorCases() []errorCase {
 			detail: helpers.RequestAuthFailureDetail("", "helpers: signature expired",
 				forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE),
 		},
+		{
+			// A server that breaks a rule of the detail it sends. field_errors is only
+			// allowed beside INVALID_REGISTRATION_DATA (the RegistrationFailure message
+			// rule), so this detail decodes in every SDK and a strict client refuses it.
+			name: "registration_failure_field_errors_out_of_scope",
+			code: connectrpc.CodeFailedPrecondition, msg: "domain not verified",
+			detail: helpers.RegistrationFailureDetail(exchangeDomain, "domain not verified",
+				forav1.RegistrationFailureReason_REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED,
+				fieldErr),
+			strictMalformed: true,
+		},
 		{
 			name: "generic_detail_no_reason",
 			code: connectrpc.CodeInternal, msg: "internal error",
@@ -227,8 +260,11 @@ func TestGenerateConnectErrorVectors(t *testing.T) {
 			"details[].value is the base64 binary ErrorDetail and is the authoritative copy; " +
 			"details[].debug is a lowerCamelCase projection — connect-go builds it with its own " +
 			"protojson codec at default options, which no server codec replaces — read only " +
-			"when value is absent. Rows named *.value_only, value_wins_over_debug and " +
-			"undecodable_value_skipped are derived by editing a captured envelope.",
+			"when value is absent. Rows named *.value_only, value_wins_over_debug, " +
+			"undecodable_value_skipped, envelope_unknown_member and debug_projection_unknown_field " +
+			"are derived by editing a captured envelope. strict_malformed is how a client with " +
+			"strict decoding on reads the row: refused as malformed with the code kept and no " +
+			"detail, or read exactly as the lenient client reads it.",
 		"vectors": buildConnectErrorVectors(t),
 	}
 	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
@@ -253,12 +289,13 @@ func buildConnectErrorVectors(t *testing.T) []connectErrorVector {
 	for _, c := range cases {
 		status, envelope, peerMessage := captureEnvelope(t, c)
 		captured = append(captured, connectErrorVector{
-			Name:        c.name,
-			Code:        c.code.String(),
-			HTTPStatus:  status,
-			Envelope:    envelope,
-			Expect:      expectationOf(c.detail),
-			PeerMessage: peerMessage,
+			Name:            c.name,
+			Code:            c.code.String(),
+			HTTPStatus:      status,
+			Envelope:        envelope,
+			Expect:          expectationOf(c.detail),
+			PeerMessage:     peerMessage,
+			StrictMalformed: c.strictMalformed,
 		})
 	}
 	return append(captured, derivedConnectErrorVectors(t, captured)...)
@@ -298,12 +335,33 @@ func derivedConnectErrorVectors(t *testing.T, captured []connectErrorVector) []c
 	skipped.Envelope = editDetails(t, denial.Envelope, func(d map[string]any) { d["value"] = "aWdub3JlZA" })
 	skipped.Expect = connectErrorExpectation{}
 	skipped.PeerMessage = ""
+	skipped.StrictMalformed = true
 	out = append(out, skipped)
+
+	// A member the Connect protocol does not define, at the envelope's top level. A
+	// lenient reader ignores it; a strict one refuses the envelope.
+	member := denial
+	member.Name = "envelope_unknown_member"
+	member.Envelope = editEnvelope(t, denial.Envelope, func(e map[string]any) { e["retryable"] = true })
+	member.StrictMalformed = true
+	out = append(out, member)
+
+	// A field ErrorDetail does not define, in the debug projection beside an intact value.
+	// The value is still what every SDK reads, so the lenient read is the denial's; a
+	// strict client checks the projection too and refuses it.
+	debug := denial
+	debug.Name = "debug_projection_unknown_field"
+	debug.Envelope = editDetails(t, denial.Envelope, func(d map[string]any) {
+		projection, _ := d["debug"].(map[string]any)
+		projection["severity"] = "high"
+	})
+	debug.StrictMalformed = true
+	out = append(out, debug)
 	return out
 }
 
-// editDetails returns a deep copy of envelope with edit applied to every details entry.
-func editDetails(t *testing.T, envelope any, edit func(map[string]any)) any {
+// editEnvelope returns a deep copy of envelope with edit applied to its top level.
+func editEnvelope(t *testing.T, envelope any, edit func(map[string]any)) any {
 	t.Helper()
 	b, err := json.Marshal(envelope)
 	if err != nil {
@@ -313,15 +371,23 @@ func editDetails(t *testing.T, envelope any, edit func(map[string]any)) any {
 	if err := json.Unmarshal(b, &copied); err != nil {
 		t.Fatalf("copy envelope: %v", err)
 	}
-	details, _ := copied["details"].([]any)
-	for _, d := range details {
-		if entry, ok := d.(map[string]any); ok {
-			edit(entry)
-		}
-	}
+	edit(copied)
 	return copied
 }
 
+// editDetails returns a deep copy of envelope with edit applied to every details entry.
+func editDetails(t *testing.T, envelope any, edit func(map[string]any)) any {
+	t.Helper()
+	return editEnvelope(t, envelope, func(e map[string]any) {
+		details, _ := e["details"].([]any)
+		for _, d := range details {
+			if entry, ok := d.(map[string]any); ok {
+				edit(entry)
+			}
+		}
+	})
+}
+
 // firstDetail returns the first details entry of a captured envelope.
 func firstDetail(t *testing.T, envelope any) map[string]any {
 	t.Helper()
diff --git a/sdk/go/connect/strict.go b/sdk/go/connect/strict.go
index 8579f6cd..074b6243 100644
--- a/sdk/go/connect/strict.go
+++ b/sdk/go/connect/strict.go
@@ -2,6 +2,7 @@ package connect
 
 import (
 	"context"
+	"errors"
 	"fmt"
 
 	connectrpc "connectrpc.com/connect"
@@ -22,8 +23,17 @@ import (
 //
 // Both checks read the compiled descriptor, the one definition of the message
 // shape the Python and TypeScript clients reach through the published strict JSON
-// Schemas and the cross-field rules. Error answers are not affected: a refusal is
-// read the same way in either mode.
+// Schemas and the cross-field rules.
+//
+// An error answer is checked too, from the bytes that arrived: the Connect error
+// envelope (its members, a known Connect code, well-formed details) and every
+// ErrorDetail it carries, both the binary value and the debug projection, against
+// the same two checks. An envelope that fails is refused as CallMalformed, and
+// CallError.Code still holds the Connect code the peer answered with; the detail is
+// not reported, because it is part of what was refused. A body that is empty or not
+// JSON is a gateway's answer rather than an envelope, and its status classifies it
+// as before. Without this option an error answer is read leniently, as connect-go
+// reads it.
 //
 // It is independent of WithValidation, which governs the REQUEST and, under
 // ValidationStrict, re-validates the answer too; strict decoding adds the
@@ -33,20 +43,30 @@ func WithStrictDecoding() ClientOption {
 }
 
 // strictDecodeError marks an answer strict decoding refused, so sendError reports
-// it as malformed rather than as a peer that did not answer.
-type strictDecodeError struct{ err error }
+// it as malformed rather than as a peer that did not answer. For an error envelope
+// it also carries the Connect code the peer answered with, which the refusal keeps.
+type strictDecodeError struct {
+	err      error
+	envelope bool
+	code     connectrpc.Code
+}
 
 func (e *strictDecodeError) Error() string { return "strict decoding: " + e.err.Error() }
 func (e *strictDecodeError) Unwrap() error { return e.err }
 
-// strictInterceptor applies the two checks to every successful unary answer.
+// strictInterceptor applies the two checks to every successful unary answer, and
+// the envelope checks to every error answer.
 type strictInterceptor struct{}
 
 func (strictInterceptor) WrapUnary(next connectrpc.UnaryFunc) connectrpc.UnaryFunc {
 	return func(ctx context.Context, req connectrpc.AnyRequest) (connectrpc.AnyResponse, error) {
-		resp, err := next(ctx, req)
-		if err != nil || resp == nil {
-			return resp, err
+		capture := &envelopeCapture{}
+		resp, err := next(context.WithValue(ctx, envelopeKey{}, capture), req)
+		if err != nil {
+			return resp, strictErrorAnswer(err, capture)
+		}
+		if resp == nil {
+			return resp, nil
 		}
 		msg, ok := resp.Any().(proto.Message)
 		if !ok {
@@ -59,6 +79,25 @@ func (strictInterceptor) WrapUnary(next connectrpc.UnaryFunc) connectrpc.UnaryFu
 	}
 }
 
+// strictErrorAnswer returns the refusal for an error answer whose envelope fails the
+// strict checks, and err unchanged otherwise. Only a Connect error the peer's body
+// produced is checked: a local failure has no envelope, and an error body that did
+// not fit under the read cap is never captured.
+func strictErrorAnswer(err error, capture *envelopeCapture) error {
+	var cerr *connectrpc.Error
+	if !errors.As(err, &cerr) {
+		return err
+	}
+	body, ok := capture.load()
+	if !ok {
+		return err
+	}
+	if verr := checkStrictEnvelope(body); verr != nil {
+		return &strictDecodeError{err: verr, envelope: true, code: cerr.Code()}
+	}
+	return err
+}
+
 func (strictInterceptor) WrapStreamingClient(next connectrpc.StreamingClientFunc) connectrpc.StreamingClientFunc {
 	return next
 }
diff --git a/sdk/go/connect/strict_envelope.go b/sdk/go/connect/strict_envelope.go
new file mode 100644
index 00000000..b317bea2
--- /dev/null
+++ b/sdk/go/connect/strict_envelope.go
@@ -0,0 +1,313 @@
+package connect
+
+import (
+	"bytes"
+	"compress/gzip"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"sort"
+	"strings"
+	"sync"
+
+	connectrpc "connectrpc.com/connect"
+	"google.golang.org/protobuf/encoding/protojson"
+	"google.golang.org/protobuf/proto"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// Strict decoding of an error answer.
+//
+// connect-go parses a Connect error envelope itself and is lenient about it, as a reader
+// must be: an unknown member is ignored, a code it does not know becomes one derived from
+// the HTTP status, and a detail that does not decode is skipped. Under
+// WithStrictDecoding those are findings, so the envelope is checked from the bytes that
+// arrived, not from the error connect-go built out of them. The interceptor puts a
+// capture on the call's context and the client's transport fills it with the error body,
+// the same way the answer recorder reports the status.
+//
+// The checks are the ones the Python and TypeScript clients make, so one envelope gets
+// one verdict in all three:
+//
+//   - a JSON error body is an object whose members are code, message and details, and
+//     nothing else. A null member is read as absent, as proto-JSON reads it;
+//   - code is present and is one of the sixteen Connect codes; message is a string;
+//   - details is an array of objects whose members are type, value and debug. type is a
+//     non-empty string, value is base64 (standard or URL alphabet, padded or not), and an
+//     entry carries a value, a debug projection or both;
+//   - for an entry of type fora.v1.ErrorDetail, the value decodes as an ErrorDetail with
+//     no unknown field and passes its protovalidate rules, and the debug projection, when
+//     present, decodes as proto-JSON with no unknown field and passes the same rules.
+//
+// A body that is empty or not JSON is not an envelope at all: it is a gateway or a proxy
+// answering for the service, and its status classifies it in either mode.
+
+// errorDetailType is the type name Connect writes on a FORA ErrorDetail entry.
+const errorDetailType = "fora.v1.ErrorDetail"
+
+// envelopeKey keys the capture the strict interceptor opens on a call's context.
+type envelopeKey struct{}
+
+// envelopeCapture holds the error body of the response that arrived, when there was one
+// and it fit under the read cap.
+type envelopeCapture struct {
+	mu   sync.Mutex
+	body []byte
+	ok   bool
+}
+
+func (c *envelopeCapture) store(body []byte) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	c.body, c.ok = body, true
+}
+
+func (c *envelopeCapture) load() ([]byte, bool) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	return c.body, c.ok
+}
+
+// captureErrorBody copies an error response's body into the call's capture, when the
+// strict interceptor opened one, and hands connect-go a body that reads the same bytes.
+// A body past the read cap is not captured: connect-go refuses it on its own.
+func captureErrorBody(req *http.Request, resp *http.Response) {
+	capture, ok := req.Context().Value(envelopeKey{}).(*envelopeCapture)
+	if !ok || resp.StatusCode < http.StatusBadRequest || resp.Body == nil {
+		return
+	}
+	head, err := io.ReadAll(io.LimitReader(resp.Body, DefaultMaxRPCReadBytes+1))
+	var rest io.Reader = resp.Body
+	if err != nil {
+		rest = errReader{err: err}
+	}
+	resp.Body = replayBody{Reader: io.MultiReader(bytes.NewReader(head), rest), Closer: resp.Body}
+	if err != nil || len(head) > DefaultMaxRPCReadBytes {
+		return
+	}
+	body, ok := decodedErrorBody(head, resp.Header.Get("Content-Encoding"))
+	if ok {
+		capture.store(body)
+	}
+}
+
+// decodedErrorBody undoes the content coding a Connect server may put on an error body.
+// connect-go asks for gzip and reads it; another coding is not one this client asked for.
+func decodedErrorBody(body []byte, coding string) ([]byte, bool) {
+	switch strings.ToLower(strings.TrimSpace(coding)) {
+	case "", "identity":
+		return body, true
+	case "gzip":
+		zr, err := gzip.NewReader(bytes.NewReader(body))
+		if err != nil {
+			return nil, false
+		}
+		plain, err := io.ReadAll(io.LimitReader(zr, DefaultMaxRPCReadBytes+1))
+		if err != nil || len(plain) > DefaultMaxRPCReadBytes {
+			return nil, false
+		}
+		return plain, true
+	default:
+		return nil, false
+	}
+}
+
+type replayBody struct {
+	io.Reader
+	io.Closer
+}
+
+type errReader struct{ err error }
+
+func (r errReader) Read([]byte) (int, error) { return 0, r.err }
+
+// envelopeMembers and entryMembers are the members the Connect protocol defines.
+var (
+	envelopeMembers = map[string]bool{"code": true, "message": true, "details": true}
+	entryMembers    = map[string]bool{"type": true, "value": true, "debug": true}
+)
+
+// connectCodes is the set of codes an error envelope may name, rendered by connect-go
+// itself so the spelling cannot drift from it.
+var connectCodes = func() map[string]bool {
+	out := map[string]bool{}
+	for c := connectrpc.CodeCanceled; c <= connectrpc.CodeUnauthenticated; c++ {
+		out[c.String()] = true
+	}
+	return out
+}()
+
+// checkStrictEnvelope returns why body is not a Connect error envelope the contract
+// accepts, or nil when it is one or is not JSON at all.
+func checkStrictEnvelope(body []byte) error {
+	trimmed := bytes.TrimSpace(body)
+	if len(trimmed) == 0 || !json.Valid(trimmed) {
+		return nil
+	}
+	envelope, ok := jsonObject(trimmed)
+	if !ok {
+		return errors.New("error body is JSON but not a Connect error envelope object")
+	}
+	if name := firstUnknown(envelope, envelopeMembers); name != "" {
+		return fmt.Errorf("error envelope carries %q, a member the Connect protocol does not define", name)
+	}
+	if err := checkEnvelopeCode(envelope); err != nil {
+		return err
+	}
+	if raw, ok := present(envelope, "message"); ok {
+		if _, isString := jsonString(raw); !isString {
+			return errors.New("error envelope message is not a string")
+		}
+	}
+	raw, ok := present(envelope, "details")
+	if !ok {
+		return nil
+	}
+	var details []json.RawMessage
+	if err := json.Unmarshal(raw, &details); err != nil {
+		return errors.New("error envelope details is not an array")
+	}
+	for i, entry := range details {
+		if err := checkDetailEntry(i, entry); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func checkEnvelopeCode(envelope map[string]json.RawMessage) error {
+	raw, ok := present(envelope, "code")
+	if !ok {
+		return errors.New("error envelope names no code")
+	}
+	code, isString := jsonString(raw)
+	if !isString {
+		return errors.New("error envelope code is not a string")
+	}
+	if !connectCodes[code] {
+		return fmt.Errorf("error envelope code %q is not a Connect code", code)
+	}
+	return nil
+}
+
+// checkDetailEntry checks one details entry, and the ErrorDetail it carries when it
+// carries one.
+func checkDetailEntry(i int, raw json.RawMessage) error {
+	entry, ok := jsonObject(raw)
+	if !ok {
+		return fmt.Errorf("details[%d] is not an object", i)
+	}
+	if name := firstUnknown(entry, entryMembers); name != "" {
+		return fmt.Errorf("details[%d] carries %q, a member the Connect protocol does not define", i, name)
+	}
+	typeRaw, _ := present(entry, "type")
+	typ, isString := jsonString(typeRaw)
+	if !isString || typ == "" {
+		return fmt.Errorf("details[%d] names no type", i)
+	}
+	var value []byte
+	valueRaw, hasValue := present(entry, "value")
+	if hasValue {
+		text, isString := jsonString(valueRaw)
+		decoded, err := decodeDetailValue(text)
+		if !isString || err != nil {
+			return fmt.Errorf("details[%d].value is not base64", i)
+		}
+		value = decoded
+	}
+	debug, hasDebug := present(entry, "debug")
+	if !hasValue && !hasDebug {
+		return fmt.Errorf("details[%d] carries neither a value nor a debug projection", i)
+	}
+	if typ != errorDetailType {
+		return nil
+	}
+	if hasValue {
+		msg := &forav1.ErrorDetail{}
+		if err := proto.Unmarshal(value, msg); err != nil {
+			return fmt.Errorf("details[%d].value does not decode as %s: %w", i, errorDetailType, err)
+		}
+		if err := checkStrict(msg); err != nil {
+			return fmt.Errorf("details[%d].value: %w", i, err)
+		}
+	}
+	if hasDebug {
+		if err := checkDebugProjection(debug); err != nil {
+			return fmt.Errorf("details[%d].debug: %w", i, err)
+		}
+	}
+	return nil
+}
+
+// checkDebugProjection checks the proto-JSON rendering of an ErrorDetail: an unknown
+// field, under either spelling of the field names, is refused by the parse.
+func checkDebugProjection(raw json.RawMessage) error {
+	if _, ok := jsonObject(raw); !ok {
+		return errors.New("projection is not an object")
+	}
+	msg := &forav1.ErrorDetail{}
+	if err := protojson.Unmarshal(raw, msg); err != nil {
+		return fmt.Errorf("projection is not a %s the contract defines: %w", errorDetailType, err)
+	}
+	if err := helpers.Validate(msg); err != nil {
+		return fmt.Errorf("projection breaks a rule of its message: %w", err)
+	}
+	return nil
+}
+
+// decodeDetailValue reads a details value: base64 in the standard or the URL alphabet,
+// padded or not, which is what the Python and TypeScript readers accept.
+func decodeDetailValue(text string) ([]byte, error) {
+	normalized := strings.NewReplacer("-", "+", "_", "/").Replace(strings.TrimRight(text, "="))
+	return base64.RawStdEncoding.DecodeString(normalized)
+}
+
+// present returns a member, treating a JSON null as an absent member.
+func present(obj map[string]json.RawMessage, name string) (json.RawMessage, bool) {
+	raw, ok := obj[name]
+	if !ok || string(bytes.TrimSpace(raw)) == "null" {
+		return nil, false
+	}
+	return raw, true
+}
+
+// jsonObject parses raw as a JSON object; false for any other JSON value.
+func jsonObject(raw json.RawMessage) (map[string]json.RawMessage, bool) {
+	trimmed := bytes.TrimSpace(raw)
+	if len(trimmed) == 0 || trimmed[0] != '{' {
+		return nil, false
+	}
+	var obj map[string]json.RawMessage
+	if err := json.Unmarshal(trimmed, &obj); err != nil {
+		return nil, false
+	}
+	return obj, true
+}
+
+func jsonString(raw json.RawMessage) (string, bool) {
+	var s string
+	if len(raw) == 0 || json.Unmarshal(raw, &s) != nil {
+		return "", false
+	}
+	return s, true
+}
+
+// firstUnknown returns the first member, in sorted order, that known does not name.
+func firstUnknown(obj map[string]json.RawMessage, known map[string]bool) string {
+	names := make([]string, 0, len(obj))
+	for name := range obj {
+		if !known[name] {
+			names = append(names, name)
+		}
+	}
+	if len(names) == 0 {
+		return ""
+	}
+	sort.Strings(names)
+	return names[0]
+}
diff --git a/sdk/go/connect/strict_envelope_test.go b/sdk/go/connect/strict_envelope_test.go
new file mode 100644
index 00000000..0ed489aa
--- /dev/null
+++ b/sdk/go/connect/strict_envelope_test.go
@@ -0,0 +1,123 @@
+package connect_test
+
+// Strict decoding of error answers, through the real client against a server that
+// writes the bytes under test. The shared connect-error corpus holds the three SDKs to
+// one verdict on captured envelopes; these cases cover the envelope rules the corpus
+// does not exercise one by one.
+
+import (
+	"bytes"
+	"compress/gzip"
+	"context"
+	"encoding/base64"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"google.golang.org/protobuf/encoding/protowire"
+	"google.golang.org/protobuf/proto"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// denialValue is a valid binary ErrorDetail, base64 as connect-go writes it.
+func denialValue(t *testing.T, extra func([]byte) []byte) string {
+	t.Helper()
+	b, err := proto.Marshal(helpers.TransactionDenialDetail("fora.v1.ExchangeService", "no",
+		forav1.DenialReason_DENIAL_REASON_INSUFFICIENT_BALANCE))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if extra != nil {
+		b = extra(b)
+	}
+	return base64.RawStdEncoding.EncodeToString(b)
+}
+
+// discoverAgainst answers every call with status and body, and returns the strict
+// client's typed failure.
+func discoverAgainst(t *testing.T, status int, body []byte, gzipped bool) *foraconnect.CallError {
+	t.Helper()
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Content-Type", helpers.ContentTypeJSON)
+		out := body
+		if gzipped {
+			var buf bytes.Buffer
+			zw := gzip.NewWriter(&buf)
+			_, _ = zw.Write(body)
+			_ = zw.Close()
+			out = buf.Bytes()
+			w.Header().Set("Content-Encoding", "gzip")
+		}
+		w.WriteHeader(status)
+		_, _ = w.Write(out)
+	}))
+	t.Cleanup(srv.Close)
+	_, err := foraconnect.NewClient(srv.URL, foraconnect.WithStrictDecoding()).Discover(
+		context.Background(), &forav1.ResourceQuery{Exchange: "exchange.test"})
+	var callErr *foraconnect.CallError
+	if !errors.As(err, &callErr) {
+		t.Fatalf("no typed failure: %v", err)
+	}
+	return callErr
+}
+
+func TestStrictDecoding_ErrorEnvelopeRules(t *testing.T) {
+	valid := denialValue(t, nil)
+	unknownBinary := denialValue(t, func(b []byte) []byte {
+		b = protowire.AppendTag(b, 99, protowire.VarintType)
+		return protowire.AppendVarint(b, 1)
+	})
+	cases := []struct {
+		name      string
+		status    int
+		body      string
+		gzipped   bool
+		malformed bool
+	}{
+		{name: "valid envelope", status: 403,
+			body: `{"code":"permission_denied","message":"no","details":[{"type":"fora.v1.ErrorDetail","value":"` + valid + `"}]}`},
+		{name: "null members read as absent", status: 500,
+			body: `{"code":"internal","message":null,"details":null}`},
+		{name: "a detail of another type is not decoded", status: 500,
+			body: `{"code":"internal","details":[{"type":"google.rpc.RetryInfo","value":"AA","debug":{"any":"thing"}}]}`},
+		{name: "a body that is not JSON is a gateway's", status: 502, body: `<html>bad gateway</html>`},
+		{name: "an empty body is a gateway's", status: 503, body: ``},
+		{name: "no code", status: 500, body: `{"message":"x"}`, malformed: true},
+		{name: "code not a Connect code", status: 500, body: `{"code":"teapot"}`, malformed: true},
+		{name: "code not a string", status: 500, body: `{"code":13}`, malformed: true},
+		{name: "message not a string", status: 500, body: `{"code":"internal","message":1}`, malformed: true},
+		{name: "JSON but not an object", status: 500, body: `["internal"]`, malformed: true},
+		{name: "details not an array", status: 500, body: `{"code":"internal","details":{}}`, malformed: true},
+		{name: "entry with an unknown member", status: 500,
+			body: `{"code":"internal","details":[{"type":"x","value":"AA","extra":1}]}`, malformed: true},
+		{name: "entry with no type", status: 500,
+			body: `{"code":"internal","details":[{"value":"AA"}]}`, malformed: true},
+		{name: "entry with neither value nor debug", status: 500,
+			body: `{"code":"internal","details":[{"type":"x"}]}`, malformed: true},
+		{name: "value not base64", status: 500,
+			body: `{"code":"internal","details":[{"type":"x","value":"*not*"}]}`, malformed: true},
+		{name: "binary ErrorDetail with an unknown field", status: 403,
+			body:      `{"code":"permission_denied","details":[{"type":"fora.v1.ErrorDetail","value":"` + unknownBinary + `"}]}`,
+			malformed: true},
+		{name: "debug projection that is not an object", status: 403,
+			body:      `{"code":"permission_denied","details":[{"type":"fora.v1.ErrorDetail","debug":"x"}]}`,
+			malformed: true},
+		{name: "gzip-coded envelope with an unknown member", status: 500,
+			body: `{"code":"internal","extra":true}`, gzipped: true, malformed: true},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			got := discoverAgainst(t, tc.status, []byte(tc.body), tc.gzipped)
+			if (got.Kind == foraconnect.CallMalformed) != tc.malformed {
+				t.Fatalf("kind = %v, want malformed = %v (%v)", got.Kind, tc.malformed, got)
+			}
+			if tc.malformed && got.Code == 0 {
+				t.Errorf("a refused envelope lost the peer's code: %v", got)
+			}
+		})
+	}
+}
diff --git a/sdk/go/connect/testdata/connect-error-vectors.json b/sdk/go/connect/testdata/connect-error-vectors.json
index d71e5ec5..fbfb106d 100644
--- a/sdk/go/connect/testdata/connect-error-vectors.json
+++ b/sdk/go/connect/testdata/connect-error-vectors.json
@@ -1,5 +1,5 @@
 {
-  "note": "Connect JSON error envelopes captured from a real connect-go handler. details[].value is the base64 binary ErrorDetail and is the authoritative copy; details[].debug is a lowerCamelCase projection — connect-go builds it with its own protojson codec at default options, which no server codec replaces — read only when value is absent. Rows named *.value_only, value_wins_over_debug and undecodable_value_skipped are derived by editing a captured envelope.",
+  "note": "Connect JSON error envelopes captured from a real connect-go handler. details[].value is the base64 binary ErrorDetail and is the authoritative copy; details[].debug is a lowerCamelCase projection — connect-go builds it with its own protojson codec at default options, which no server codec replaces — read only when value is absent. Rows named *.value_only, value_wins_over_debug, undecodable_value_skipped, envelope_unknown_member and debug_projection_unknown_field are derived by editing a captured envelope. strict_malformed is how a client with strict decoding on reads the row: refused as malformed with the code kept and no detail, or read exactly as the lenient client reads it.",
   "vectors": [
     {
       "name": "transaction_denial_insufficient_balance",
@@ -37,7 +37,8 @@
           }
         }
       },
-      "peer_message": "balance too low"
+      "peer_message": "balance too low",
+      "strict_malformed": false
     },
     {
       "name": "retrieval_auth_failure_url_expired",
@@ -75,7 +76,8 @@
           }
         }
       },
-      "peer_message": "signed URL expired"
+      "peer_message": "signed URL expired",
+      "strict_malformed": false
     },
     {
       "name": "registration_failure_with_field_errors",
@@ -125,7 +127,8 @@
           }
         }
       },
-      "peer_message": "registration data rejected"
+      "peer_message": "registration data rejected",
+      "strict_malformed": false
     },
     {
       "name": "usage_report_rejection",
@@ -163,7 +166,8 @@
           }
         }
       },
-      "peer_message": "no such transaction"
+      "peer_message": "no such transaction",
+      "strict_malformed": false
     },
     {
       "name": "dispute_failure",
@@ -201,7 +205,8 @@
           "message": "dispute window closed"
         }
       },
-      "peer_message": "dispute window closed"
+      "peer_message": "dispute window closed",
+      "strict_malformed": false
     },
     {
       "name": "catalog_rejection",
@@ -239,7 +244,8 @@
           "message": "entry rejected"
         }
       },
-      "peer_message": "entry rejected"
+      "peer_message": "entry rejected",
+      "strict_malformed": false
     },
     {
       "name": "domain_verification_failure",
@@ -277,7 +283,8 @@
           "message": "challenge not found"
         }
       },
-      "peer_message": "challenge not found"
+      "peer_message": "challenge not found",
+      "strict_malformed": false
     },
     {
       "name": "request_auth_failure_signature_stale",
@@ -313,7 +320,59 @@
           }
         }
       },
-      "peer_message": "helpers: signature expired"
+      "peer_message": "helpers: signature expired",
+      "strict_malformed": false
+    },
+    {
+      "name": "registration_failure_field_errors_out_of_scope",
+      "code": "failed_precondition",
+      "http_status": 400,
+      "envelope": {
+        "code": "failed_precondition",
+        "details": [
+          {
+            "debug": {
+              "domain": "fora.v1.ExchangeService",
+              "message": "domain not verified",
+              "registrationFailure": {
+                "fieldErrors": [
+                  {
+                    "error": "required property is missing",
+                    "path": "/operator/legal_name"
+                  }
+                ],
+                "reason": "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED"
+              }
+            },
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChNkb21haW4gbm90IHZlcmlmaWVkEhdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZWI4CAESNAoUL29wZXJhdG9yL2xlZ2FsX25hbWUSHHJlcXVpcmVkIHByb3BlcnR5IGlzIG1pc3Npbmc"
+          }
+        ],
+        "message": "domain not verified"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "domain not verified",
+        "metadata": null,
+        "reason_field": "registration_failure",
+        "reason_enum": "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "domain not verified",
+          "registration_failure": {
+            "field_errors": [
+              {
+                "error": "required property is missing",
+                "path": "/operator/legal_name"
+              }
+            ],
+            "reason": "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED"
+          }
+        }
+      },
+      "peer_message": "domain not verified",
+      "strict_malformed": true
     },
     {
       "name": "generic_detail_no_reason",
@@ -345,7 +404,8 @@
           "message": "internal error"
         }
       },
-      "peer_message": "internal error"
+      "peer_message": "internal error",
+      "strict_malformed": false
     },
     {
       "name": "metadata_keys_are_caller_chosen",
@@ -391,7 +451,8 @@
           }
         }
       },
-      "peer_message": "slow down"
+      "peer_message": "slow down",
+      "strict_malformed": false
     },
     {
       "name": "no_detail_attached",
@@ -410,7 +471,8 @@
         "reason_enum": "",
         "detail": null
       },
-      "peer_message": ""
+      "peer_message": "",
+      "strict_malformed": false
     },
     {
       "name": "transaction_denial_insufficient_balance.value_only",
@@ -441,7 +503,8 @@
           }
         }
       },
-      "peer_message": "balance too low"
+      "peer_message": "balance too low",
+      "strict_malformed": false
     },
     {
       "name": "retrieval_auth_failure_url_expired.value_only",
@@ -472,7 +535,8 @@
           }
         }
       },
-      "peer_message": "signed URL expired"
+      "peer_message": "signed URL expired",
+      "strict_malformed": false
     },
     {
       "name": "registration_failure_with_field_errors.value_only",
@@ -509,7 +573,8 @@
           }
         }
       },
-      "peer_message": "registration data rejected"
+      "peer_message": "registration data rejected",
+      "strict_malformed": false
     },
     {
       "name": "usage_report_rejection.value_only",
@@ -540,7 +605,8 @@
           }
         }
       },
-      "peer_message": "no such transaction"
+      "peer_message": "no such transaction",
+      "strict_malformed": false
     },
     {
       "name": "dispute_failure.value_only",
@@ -571,7 +637,8 @@
           "message": "dispute window closed"
         }
       },
-      "peer_message": "dispute window closed"
+      "peer_message": "dispute window closed",
+      "strict_malformed": false
     },
     {
       "name": "catalog_rejection.value_only",
@@ -602,7 +669,8 @@
           "message": "entry rejected"
         }
       },
-      "peer_message": "entry rejected"
+      "peer_message": "entry rejected",
+      "strict_malformed": false
     },
     {
       "name": "domain_verification_failure.value_only",
@@ -633,7 +701,8 @@
           "message": "challenge not found"
         }
       },
-      "peer_message": "challenge not found"
+      "peer_message": "challenge not found",
+      "strict_malformed": false
     },
     {
       "name": "request_auth_failure_signature_stale.value_only",
@@ -663,7 +732,46 @@
           }
         }
       },
-      "peer_message": "helpers: signature expired"
+      "peer_message": "helpers: signature expired",
+      "strict_malformed": false
+    },
+    {
+      "name": "registration_failure_field_errors_out_of_scope.value_only",
+      "code": "failed_precondition",
+      "http_status": 400,
+      "envelope": {
+        "code": "failed_precondition",
+        "details": [
+          {
+            "type": "fora.v1.ErrorDetail",
+            "value": "ChNkb21haW4gbm90IHZlcmlmaWVkEhdmb3JhLnYxLkV4Y2hhbmdlU2VydmljZWI4CAESNAoUL29wZXJhdG9yL2xlZ2FsX25hbWUSHHJlcXVpcmVkIHByb3BlcnR5IGlzIG1pc3Npbmc"
+          }
+        ],
+        "message": "domain not verified"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "domain not verified",
+        "metadata": null,
+        "reason_field": "registration_failure",
+        "reason_enum": "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "domain not verified",
+          "registration_failure": {
+            "field_errors": [
+              {
+                "error": "required property is missing",
+                "path": "/operator/legal_name"
+              }
+            ],
+            "reason": "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED"
+          }
+        }
+      },
+      "peer_message": "domain not verified",
+      "strict_malformed": true
     },
     {
       "name": "generic_detail_no_reason.value_only",
@@ -691,7 +799,8 @@
           "message": "internal error"
         }
       },
-      "peer_message": "internal error"
+      "peer_message": "internal error",
+      "strict_malformed": false
     },
     {
       "name": "metadata_keys_are_caller_chosen.value_only",
@@ -727,7 +836,8 @@
           }
         }
       },
-      "peer_message": "slow down"
+      "peer_message": "slow down",
+      "strict_malformed": false
     },
     {
       "name": "value_wins_over_debug",
@@ -765,7 +875,8 @@
           }
         }
       },
-      "peer_message": "balance too low"
+      "peer_message": "balance too low",
+      "strict_malformed": false
     },
     {
       "name": "undecodable_value_skipped",
@@ -797,7 +908,88 @@
         "reason_enum": "",
         "detail": null
       },
-      "peer_message": ""
+      "peer_message": "",
+      "strict_malformed": true
+    },
+    {
+      "name": "envelope_unknown_member",
+      "code": "permission_denied",
+      "http_status": 403,
+      "envelope": {
+        "code": "permission_denied",
+        "details": [
+          {
+            "debug": {
+              "domain": "fora.v1.ExchangeService",
+              "message": "balance too low",
+              "transactionDenial": {
+                "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+              }
+            },
+            "type": "fora.v1.ErrorDetail",
+            "value": "Cg9iYWxhbmNlIHRvbyBsb3cSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlUgIIAg"
+          }
+        ],
+        "message": "balance too low",
+        "retryable": true
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "balance too low",
+        "metadata": null,
+        "reason_field": "transaction_denial",
+        "reason_enum": "DENIAL_REASON_INSUFFICIENT_BALANCE",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "balance too low",
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+          }
+        }
+      },
+      "peer_message": "balance too low",
+      "strict_malformed": true
+    },
+    {
+      "name": "debug_projection_unknown_field",
+      "code": "permission_denied",
+      "http_status": 403,
+      "envelope": {
+        "code": "permission_denied",
+        "details": [
+          {
+            "debug": {
+              "domain": "fora.v1.ExchangeService",
+              "message": "balance too low",
+              "severity": "high",
+              "transactionDenial": {
+                "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+              }
+            },
+            "type": "fora.v1.ErrorDetail",
+            "value": "Cg9iYWxhbmNlIHRvbyBsb3cSF2ZvcmEudjEuRXhjaGFuZ2VTZXJ2aWNlUgIIAg"
+          }
+        ],
+        "message": "balance too low"
+      },
+      "expect": {
+        "has_detail": true,
+        "domain": "fora.v1.ExchangeService",
+        "message": "balance too low",
+        "metadata": null,
+        "reason_field": "transaction_denial",
+        "reason_enum": "DENIAL_REASON_INSUFFICIENT_BALANCE",
+        "detail": {
+          "domain": "fora.v1.ExchangeService",
+          "message": "balance too low",
+          "transaction_denial": {
+            "reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"
+          }
+        }
+      },
+      "peer_message": "balance too low",
+      "strict_malformed": true
     }
   ]
 }

From 3d9e95878c46de73d298b2c0f61450bfa708d9eb Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 05:51:29 -0400
Subject: [PATCH 029/164] Check error envelopes under strict decoding in the
 Python SDK

ClientConfig.strict checked a success answer against the strict JSON Schema
of its message and read every error envelope the lenient way. It now checks
the envelope too, before the error is built, with the rules the Go client
applies:

- the envelope carries only code, message and details, a None member read
  as absent; code is one of the sixteen Connect codes; message is a string;
- each details entry carries only type, value and debug, a non-empty type,
  a base64 value and at least one of value and debug;
- for fora.v1.ErrorDetail, the binary value decodes with no unknown field,
  which the table-driven decoder now reports when asked, and the debug
  projection is read under the proto field names; each must set at most
  one reason and pass the published strict ErrorDetail schema and the
  cross-field rules.

A refusal is CallError(MALFORMED) keeping code and status, the code the
lenient read reports, with no detail and no peer message. An empty or
non-JSON error body is still classified by its status. Without strict
nothing changes.

The strict check's core is now strict_violation(name, payload), shared by
the success path and the ErrorDetail check. The connect-error replay
decodes every row strictly as well and asserts strict_malformed, and a
table test covers the envelope rules one by one. The test that pinned an
error envelope as read the same way under strict now pins the refusal.
---
 sdk/python/README.md                          |   9 +-
 sdk/python/fora_sdk/_errordetail_wire.py      |  47 +++--
 sdk/python/fora_sdk/client/_call.py           |  34 ++-
 sdk/python/fora_sdk/client/_strict.py         |  20 +-
 .../fora_sdk/client/_strict_envelope.py       | 199 ++++++++++++++++++
 sdk/python/fora_sdk/client/_verbs.py          |   9 +-
 sdk/python/tests/test_connect_error_parity.py |  30 ++-
 sdk/python/tests/test_strict_decoding.py      | 166 +++++++++++++--
 8 files changed, 468 insertions(+), 46 deletions(-)
 create mode 100644 sdk/python/fora_sdk/client/_strict_envelope.py

diff --git a/sdk/python/README.md b/sdk/python/README.md
index 397662ab..8da77976 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -352,7 +352,7 @@ The rest are bounds and seams with working defaults:
 | `registration_requirements` | a reader built on the guarded client, once per client | where `register` reads an Exchange's terms revision and registration schema. It holds no document cache on purpose: the contract requires the terms digest to come from a freshly fetched manifest |
 | `delivery_keys` | a `WBAKeyResolver` built on the guarded client, once per client | where `execute` and `fetch` find the key an Exchange signs delivery URLs with: the URL's `kid`, resolved from that Exchange's Web Bot Auth directory |
 | `delivery_verification` | `Mode.STRICT` | whether a delivery URL is verified (signature, agent binding, expiry) before it is handed back or dialled. `Mode.OFF` is for a deployment whose URLs use another signing scheme |
-| `strict` | `False` | refuse an answer carrying an unknown field, or breaking a field-level or cross-field rule. See [Testing a FORA service](#testing-a-fora-service) |
+| `strict` | `False` | refuse an answer carrying an unknown field, or breaking a field-level or cross-field rule, and an error envelope or `ErrorDetail` the contract does not define. See [Testing a FORA service](#testing-a-fora-service) |
 | `before_sign` | `None` | a hook that receives each request just before it is signed. See [Testing a FORA service](#testing-a-fora-service) |
 
 **Build a client once and reuse it.** `ClientConfig`, the resolvers and the `Verifier`
@@ -441,7 +441,12 @@ a service through the SDK and check every answer through it:
   verb still reads its destination from the body's `exchange`.
 - **`ClientConfig(strict=True)`** refuses an answer carrying an unknown field at any
   depth, or breaking a field-level or cross-field rule, using the published strict JSON
-  Schema of the response message (`wire.schemas`) and the SDK's cross-field rules.
+  Schema of the response message (`wire.schemas`) and the SDK's cross-field rules. An
+  error answer is checked too: the Connect envelope may carry only `code`, `message`
+  and `details`, must name a known Connect code and carry well-formed details, and every
+  `ErrorDetail`, binary `value` and `debug` projection alike, must pass the strict
+  `ErrorDetail` schema and the cross-field rules. A refused envelope is
+  `CallError(MALFORMED)` with `code` still set to the peer's Connect code.
 - **Identity helpers** in `fora_sdk.identity` mint a throwaway agent: `generate_key()`,
   `directory_document(keys)` for the directory to serve, and
   `signing_transport_for(key, directory)`.
diff --git a/sdk/python/fora_sdk/_errordetail_wire.py b/sdk/python/fora_sdk/_errordetail_wire.py
index a64f7e18..d35f36a8 100644
--- a/sdk/python/fora_sdk/_errordetail_wire.py
+++ b/sdk/python/fora_sdk/_errordetail_wire.py
@@ -22,6 +22,11 @@
 field arriving with the wrong wire type is skipped the same way, a repeated enum is
 accepted packed or not, the last value of a singular field wins, a singular message field
 written twice is merged, and of the reason oneof only the member written last is kept.
+
+A caller that must know about the skipped fields passes a list as ``unknown``: each one is
+recorded there, by the message it appeared in and its field number. Strict decoding does,
+because it refuses an ErrorDetail carrying a field the contract does not define, which is
+what Go's decoder reports for the same bytes.
 """
 
 from __future__ import annotations
@@ -233,21 +238,37 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
 REASON_ONEOF: tuple[str, ...] = tuple(f.name for f in MESSAGES[_ROOT] if f.kind == "message")
 
 
-def decode_error_detail_value(value: str) -> dict[str, Any]:
+def decode_error_detail_value(value: str, unknown: list[str] | None = None) -> dict[str, Any]:
     """Decode a ``details[].value`` string into ErrorDetail proto-JSON.
 
     The string is base64 in the standard or the URL alphabet, padded or not — connect-go
     writes the standard alphabet without padding. Raises :class:`WireDecodeError` for
-    anything that is not a decodable ErrorDetail.
+    anything that is not a decodable ErrorDetail. Skipped fields are recorded in
+    ``unknown`` when it is given.
     """
-    return decode_error_detail(_b64decode(value))
+    return decode_error_detail(_b64decode(value), unknown)
+
+
+@dataclass(frozen=True)
+class _Walk:
+    """Where the reader is: how deep, and where a skipped field is recorded, if anywhere."""
 
+    depth: int
+    unknown: list[str] | None
 
-def decode_error_detail(raw: bytes) -> dict[str, Any]:
-    """Decode binary ErrorDetail bytes into proto-JSON."""
+    def deeper(self) -> _Walk:
+        return _Walk(self.depth + 1, self.unknown)
+
+
+def decode_error_detail(raw: bytes, unknown: list[str] | None = None) -> dict[str, Any]:
+    """Decode binary ErrorDetail bytes into proto-JSON.
+
+    Each field skipped as unknown, or as a known field with the wrong wire type, is
+    appended to ``unknown`` when it is given.
+    """
     out: dict[str, Any] = {}
     order: list[str] = []
-    _decode_message(memoryview(raw), _ROOT, out, order, 0)
+    _decode_message(memoryview(raw), _ROOT, out, order, _Walk(0, unknown))
     # The reason oneof: protobuf keeps the member written last and clears the others.
     written = [name for name in order if name in REASON_ONEOF]
     for name in REASON_ONEOF:
@@ -266,9 +287,9 @@ def _b64decode(value: str) -> bytes:
 
 
 def _decode_message(
-    buf: memoryview, message: str, out: dict[str, Any], order: list[str], depth: int
+    buf: memoryview, message: str, out: dict[str, Any], order: list[str], walk: _Walk
 ) -> None:
-    if depth > _MAX_DEPTH:
+    if walk.depth > _MAX_DEPTH:
         raise WireDecodeError("value nests too deep")
     fields = {f.number: f for f in MESSAGES[message]}
     pos = 0
@@ -280,8 +301,10 @@ def _decode_message(
         start, pos = _skip(buf, pos, wire)
         field = fields.get(number)
         if field is None or not _wire_matches(field, wire):
+            if walk.unknown is not None:
+                walk.unknown.append(f"{message} field {number}")
             continue
-        _apply(field, wire, buf[start:pos], out, depth)
+        _apply(field, wire, buf[start:pos], out, walk)
         order.append(field.name)
 
 
@@ -291,7 +314,7 @@ def _wire_matches(field: Field, wire: int) -> bool:
     return wire == _LEN
 
 
-def _apply(field: Field, wire: int, payload: memoryview, out: dict[str, Any], depth: int) -> None:
+def _apply(field: Field, wire: int, payload: memoryview, out: dict[str, Any], walk: _Walk) -> None:
     if field.kind == "enum":
         values = _packed_varints(payload) if wire == _LEN else [_varint(payload, 0)[0]]
         names = [_enum_name(field.type, v) for v in values]
@@ -314,12 +337,12 @@ def _apply(field: Field, wire: int, payload: memoryview, out: dict[str, Any], de
     if field.kind == "message":
         if field.repeated:
             item: dict[str, Any] = {}
-            _decode_message(payload, field.type, item, [], depth + 1)
+            _decode_message(payload, field.type, item, [], walk.deeper())
             out.setdefault(field.name, []).append(item)
         else:
             # A singular message written twice is merged into the first.
             target = out.setdefault(field.name, {})
-            _decode_message(payload, field.type, target, [], depth + 1)
+            _decode_message(payload, field.type, target, [], walk.deeper())
         return
     raise WireDecodeError(f"field kind {field.kind!r} is not in the ErrorDetail subtree")
 
diff --git a/sdk/python/fora_sdk/client/_call.py b/sdk/python/fora_sdk/client/_call.py
index 90351d8f..247fcaba 100644
--- a/sdk/python/fora_sdk/client/_call.py
+++ b/sdk/python/fora_sdk/client/_call.py
@@ -36,6 +36,7 @@
 )
 
 from ._strict import check_strict
+from ._strict_envelope import check_strict_envelope
 from .errors import (
     NOT_CANONICAL_WIRE_NAMING,
     CallError,
@@ -280,7 +281,8 @@ def decode_with_raw(
     """
     _refuse_redirect(op, status)
     payload = _parse_json(op, status, body)
-    parsed = _validate(op, status, payload, model, strict=strict)
+    _refuse_error_answer(op, status, body, payload, strict=strict)
+    parsed = _validate(op, payload, model, strict=strict)
     return parsed, payload if isinstance(payload, dict) else {}
 
 
@@ -295,10 +297,14 @@ def decode(
     connect-go emits beside it only when the value is absent.
 
     ``strict`` also refuses a success answer carrying an unknown field or breaking a
-    cross-field rule; see :func:`fora_sdk.client._strict.check_strict`.
+    cross-field rule (see :func:`fora_sdk.client._strict.check_strict`), and an error
+    answer whose envelope or ErrorDetail the contract does not accept (see
+    :func:`fora_sdk.client._strict_envelope.check_strict_envelope`).
     """
     _refuse_redirect(op, status)
-    return _validate(op, status, _parse_json(op, status, body), model, strict=strict)
+    payload = _parse_json(op, status, body)
+    _refuse_error_answer(op, status, body, payload, strict=strict)
+    return _validate(op, payload, model, strict=strict)
 
 
 _HTTP_MULTIPLE_CHOICES_END = 400
@@ -322,11 +328,23 @@ def _refuse_redirect(op: str, status: int) -> None:
         )
 
 
-def _validate(
-    op: str, status: int, payload: Any, model: type[BaseModel], *, strict: bool = False
-) -> Any:
-    if not _HTTP_OK <= status < _HTTP_MULTIPLE_CHOICES:
-        raise _connect_envelope_error(op, status, payload)
+def _refuse_error_answer(op: str, status: int, body: str, payload: Any, *, strict: bool) -> None:
+    """Raise the typed failure a non-2xx answer is; return on a 2xx.
+
+    Under ``strict`` the envelope is checked first, and a refusal keeps the Connect code
+    the lenient read reports. An empty body is not an envelope — the lenient read takes it
+    as one naming no code — so it is classified by its status in either mode, like a body
+    that is not JSON, which never reaches here.
+    """
+    if _HTTP_OK <= status < _HTTP_MULTIPLE_CHOICES:
+        return
+    error = _connect_envelope_error(op, status, payload)
+    if strict and body.strip():
+        check_strict_envelope(op, status, payload, error.code)
+    raise error
+
+
+def _validate(op: str, payload: Any, model: type[BaseModel], *, strict: bool = False) -> Any:
     if strict:
         check_strict(op, model, payload)
     try:
diff --git a/sdk/python/fora_sdk/client/_strict.py b/sdk/python/fora_sdk/client/_strict.py
index 51db028d..31e0ea21 100644
--- a/sdk/python/fora_sdk/client/_strict.py
+++ b/sdk/python/fora_sdk/client/_strict.py
@@ -48,20 +48,30 @@ def check_strict(op: str, model: type[BaseModel], payload: Any) -> None:
     complaint for an unknown field or a field-level rule, or the violated rule ids for a
     cross-field rule.
     """
-    name = _schema_name(model)
+    problem = strict_violation(_schema_name(model), payload)
+    if problem is not None:
+        raise malformed(op, f"strict decoding refused the answer{problem}")
+
+
+def strict_violation(name: str, payload: Any) -> str | None:
+    """Why ``payload`` is not a ``name`` message the strict contract accepts, or ``None``.
+
+    ``name`` is the fully-qualified message name. The text starts with the location, so a
+    caller can put it after its own subject: `` at /path: <complaint>`` for the schema,
+    ``: cross-field rule(s) <ids>`` for the cross-field rules.
+    """
     schema = schemas.load(name, strict=True)
     normalized = _without_nulls(schema, schema, payload)
     errors = sorted(_validator(name).iter_errors(normalized), key=lambda e: list(e.path))
     if errors:
         first = errors[0]
         where = "/" + "/".join(str(p) for p in first.path)
-        raise malformed(op, f"strict decoding refused the answer at {where}: {first.message}")
+        return f" at {where}: {first.message}"
     violated: list[str] = []
     _walk(schema, schema, normalized, name, violated)
     if violated:
-        raise malformed(
-            op, f"strict decoding refused the answer: cross-field rule(s) {', '.join(violated)}"
-        )
+        return f": cross-field rule(s) {', '.join(violated)}"
+    return None
 
 
 @cache
diff --git a/sdk/python/fora_sdk/client/_strict_envelope.py b/sdk/python/fora_sdk/client/_strict_envelope.py
new file mode 100644
index 00000000..88c2a13c
--- /dev/null
+++ b/sdk/python/fora_sdk/client/_strict_envelope.py
@@ -0,0 +1,199 @@
+"""Strict decoding of an error answer: the Connect envelope, and every ErrorDetail in it.
+
+A lenient reader takes what it can from a Connect error: it ignores a member it does not
+know, and skips a detail that does not decode. Under ``ClientConfig.strict`` both are
+findings, so the envelope is checked before it is read. The checks are the ones the Go and
+TypeScript clients make, so one envelope gets one verdict in all three:
+
+- a JSON error body is an object whose members are ``code``, ``message`` and ``details``,
+  and nothing else. A ``null`` member reads as absent, as proto-JSON reads it;
+- ``code`` is present and is one of the sixteen Connect codes; ``message`` is a string;
+- ``details`` is an array of objects whose members are ``type``, ``value`` and ``debug``.
+  ``type`` is a non-empty string, ``value`` is base64 (standard or URL alphabet, padded or
+  not), and an entry carries a ``value``, a ``debug`` projection or both;
+- for an entry of type ``fora.v1.ErrorDetail``, the ``value`` decodes as an ErrorDetail
+  with no field the contract does not define, and so does the ``debug`` projection when
+  present; each then passes the published strict ErrorDetail schema and the cross-field
+  rules, and sets at most one member of the reason oneof.
+
+A body that is empty or not JSON is not an envelope: it is a gateway or a proxy answering
+for the service, and its status classifies it in either mode. The caller decides that
+before it gets here.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+from fora_sdk._errordetail_wire import WireDecodeError, _b64decode, decode_error_detail_value
+from fora_sdk.errordetail import ERROR_DETAIL_TYPE, REASON_FIELDS, _proto_names, _TooDeepError
+
+from ._strict import strict_violation
+from .errors import CallError, CallErrorKind
+
+#: The members the Connect protocol defines for an error envelope and for a details entry.
+_ENVELOPE_MEMBERS = frozenset({"code", "message", "details"})
+_ENTRY_MEMBERS = frozenset({"type", "value", "debug"})
+
+#: The codes a Connect error envelope may name.
+CONNECT_CODES = frozenset(
+    {
+        "canceled",
+        "unknown",
+        "invalid_argument",
+        "deadline_exceeded",
+        "not_found",
+        "already_exists",
+        "permission_denied",
+        "resource_exhausted",
+        "failed_precondition",
+        "aborted",
+        "out_of_range",
+        "unimplemented",
+        "internal",
+        "unavailable",
+        "data_loss",
+        "unauthenticated",
+    }
+)
+
+
+def check_strict_envelope(op: str, status: int, payload: Any, code: str | None) -> None:
+    """Refuse an error answer whose envelope the strict contract does not accept.
+
+    Raises the MALFORMED ``CallError`` naming the first failure. It keeps ``status`` and
+    ``code``, the Connect code the lenient read reports, and carries no detail: the detail
+    is part of what was refused.
+    """
+    problem = envelope_violation(payload)
+    if problem is not None:
+        raise CallError(
+            CallErrorKind.MALFORMED,
+            op,
+            status=status,
+            cause=f"strict decoding refused the error answer: {problem}",
+            code=code,
+        )
+
+
+def envelope_violation(payload: Any) -> str | None:
+    """Why ``payload`` is not a Connect error envelope the contract accepts, or ``None``."""
+    if not isinstance(payload, dict):
+        return "error body is JSON but not a Connect error envelope object"
+    name = _first_unknown(payload, _ENVELOPE_MEMBERS)
+    if name is not None:
+        return f"error envelope carries {name!r}, a member the Connect protocol does not define"
+    return _code_violation(payload) or _message_violation(payload) or _details_violation(payload)
+
+
+def _code_violation(envelope: dict[str, Any]) -> str | None:
+    code = envelope.get("code")
+    if code is None:
+        return "error envelope names no code"
+    if not isinstance(code, str):
+        return "error envelope code is not a string"
+    if code not in CONNECT_CODES:
+        return f"error envelope code {code!r} is not a Connect code"
+    return None
+
+
+def _message_violation(envelope: dict[str, Any]) -> str | None:
+    message = envelope.get("message")
+    if message is not None and not isinstance(message, str):
+        return "error envelope message is not a string"
+    return None
+
+
+def _details_violation(envelope: dict[str, Any]) -> str | None:
+    details = envelope.get("details")
+    if details is None:
+        return None
+    if not isinstance(details, list):
+        return "error envelope details is not an array"
+    for i, entry in enumerate(details):
+        problem = _entry_violation(i, entry)
+        if problem is not None:
+            return problem
+    return None
+
+
+def _entry_violation(i: int, entry: Any) -> str | None:
+    if not isinstance(entry, dict):
+        return f"details[{i}] is not an object"
+    problem = _entry_shape_violation(i, entry)
+    if problem is not None or entry["type"] != ERROR_DETAIL_TYPE:
+        return problem
+    return _value_violation(i, entry.get("value")) or _debug_violation(i, entry.get("debug"))
+
+
+def _entry_shape_violation(i: int, entry: dict[str, Any]) -> str | None:
+    """The entry's own members, whatever type of detail it carries."""
+    name = _first_unknown(entry, _ENTRY_MEMBERS)
+    if name is not None:
+        return f"details[{i}] carries {name!r}, a member the Connect protocol does not define"
+    kind = entry.get("type")
+    if not isinstance(kind, str) or not kind:
+        return f"details[{i}] names no type"
+    value, debug = entry.get("value"), entry.get("debug")
+    if value is not None and not _is_base64(value):
+        return f"details[{i}].value is not base64"
+    if value is None and debug is None:
+        return f"details[{i}] carries neither a value nor a debug projection"
+    return None
+
+
+def _is_base64(value: Any) -> bool:
+    if not isinstance(value, str):
+        return False
+    try:
+        _b64decode(value)
+    except WireDecodeError:
+        return False
+    return True
+
+
+def _value_violation(i: int, value: str | None) -> str | None:
+    """The binary ErrorDetail: it decodes, defines every field it carries, and passes."""
+    if value is None:
+        return None
+    unknown: list[str] = []
+    try:
+        decoded = decode_error_detail_value(value, unknown)
+    except WireDecodeError:
+        return f"details[{i}].value does not decode as {ERROR_DETAIL_TYPE}"
+    if unknown:
+        return f"details[{i}].value carries a field the contract does not define ({unknown[0]})"
+    problem = _detail_violation(decoded)
+    return None if problem is None else f"details[{i}].value{problem}"
+
+
+def _debug_violation(i: int, debug: Any) -> str | None:
+    """The debug projection, read under the proto field names like the lenient reader."""
+    if debug is None:
+        return None
+    if not isinstance(debug, dict):
+        return f"details[{i}].debug is not an object"
+    try:
+        normalized = _proto_names(debug)
+    except _TooDeepError:
+        return f"details[{i}].debug nests too deep"
+    problem = _detail_violation(normalized)
+    return None if problem is None else f"details[{i}].debug{problem}"
+
+
+def _detail_violation(detail: dict[str, Any]) -> str | None:
+    """An ErrorDetail as proto-JSON: one reason at most, then the strict schema and rules.
+
+    The schemas do not express oneof exclusivity, so it is checked here; a proto-JSON
+    parser refuses the same object.
+    """
+    reasons = [name for name in REASON_FIELDS if detail.get(name) is not None]
+    if len(reasons) > 1:
+        return f" sets more than one member of the reason oneof: {', '.join(reasons)}"
+    return strict_violation(ERROR_DETAIL_TYPE, detail)
+
+
+def _first_unknown(obj: dict[str, Any], known: frozenset[str]) -> str | None:
+    """The first member, in sorted order, that ``known`` does not name."""
+    names = sorted(str(name) for name in obj if name not in known)
+    return names[0] if names else None
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index 0a7daac5..e65e6437 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -157,8 +157,13 @@ class ClientConfig:
     #: Refuse an answer the contract does not describe: an unknown field at any depth, a
     #: field-level rule broken, or a cross-field rule broken. The shape is the published
     #: strict JSON Schema of the response message and the SDK's cross-field rules, so it
-    #: is defined once, by the proto. Off by default, because the models accept fields a
-    #: newer minor version may add. Error envelopes are read the same either way.
+    #: is defined once, by the proto. An error answer is checked too: the Connect
+    #: envelope may carry only ``code``, ``message`` and ``details``, must name a known
+    #: Connect code and carry well-formed details, and every ErrorDetail in it, its binary
+    #: ``value`` and its ``debug`` projection alike, must pass the strict ErrorDetail
+    #: schema and the cross-field rules. A refusal is MALFORMED with ``code`` and
+    #: ``status`` kept and no detail. Off by default, because the models accept fields a
+    #: newer minor version may add.
     strict: bool = False
     #: Resolves the key an Exchange signs delivery URLs with: ``resolve(kid, exchange)``,
     #: against that Exchange's Web Bot Auth key directory. Defaults to the SSRF-guarded
diff --git a/sdk/python/tests/test_connect_error_parity.py b/sdk/python/tests/test_connect_error_parity.py
index 3ae960d9..d4251608 100644
--- a/sdk/python/tests/test_connect_error_parity.py
+++ b/sdk/python/tests/test_connect_error_parity.py
@@ -19,7 +19,8 @@
 Every captured vector came from a real connect-go handler, so the reader is asserted
 against what the wire does rather than against a description of it. Each row is also
 decoded through the client, which must report the row's Connect code on
-``CallError.code``.
+``CallError.code``, and decoded again with strict decoding on, which must refuse exactly
+the rows marked ``strict_malformed`` and read every other row as the lenient client does.
 """
 
 from __future__ import annotations
@@ -30,7 +31,7 @@
 
 from conftest import GO_CONNECT_TESTDATA, load_json
 from fora_sdk.client._call import decode
-from fora_sdk.client.errors import CallError
+from fora_sdk.client.errors import CallError, CallErrorKind
 from fora_sdk.errordetail import error_detail_from, reason
 from fora_sdk.wire import to_wire
 from wire.models import ResourceResponse
@@ -72,6 +73,7 @@ def test_reader_extracts_go_projection_from_the_envelope(vector: dict) -> None:
     # The Connect code the server classified the failure as, on its own field: the class a
     # caller branches on when it needs more than refused-or-unreachable.
     assert caught.value.code == vector["code"], vector["name"]
+    _assert_strict_read(vector, caught.value)
 
     if not expect["has_detail"]:
         assert detail is None, "an envelope carrying no ErrorDetail must read as none"
@@ -110,6 +112,30 @@ def test_reader_extracts_go_projection_from_the_envelope(vector: dict) -> None:
     )
 
 
+def _assert_strict_read(vector: dict, lenient: CallError) -> None:
+    """The row through a strict decode: refused as MALFORMED with the code kept and no
+    detail when the corpus marks it ``strict_malformed``, otherwise the lenient read."""
+    with pytest.raises(CallError) as caught:
+        decode(
+            "discover",
+            vector["http_status"],
+            json.dumps(vector["envelope"]),
+            ResourceResponse,
+            strict=True,
+        )
+    strict = caught.value
+    assert strict.code == vector["code"], vector["name"]
+    assert strict.status == vector["http_status"], vector["name"]
+    if vector["strict_malformed"]:
+        assert strict.kind is CallErrorKind.MALFORMED, (vector["name"], str(strict))
+        assert strict.detail is None, vector["name"]
+        assert strict.peer_message == "", vector["name"]
+        return
+    assert strict.kind is lenient.kind, (vector["name"], str(strict))
+    assert strict.detail == lenient.detail, vector["name"]
+    assert strict.peer_message == lenient.peer_message, vector["name"]
+
+
 def test_camel_case_debug_projection_is_decoded() -> None:
     """The regression itself, stated once in the open rather than only via the corpus.
 
diff --git a/sdk/python/tests/test_strict_decoding.py b/sdk/python/tests/test_strict_decoding.py
index bb7ecc02..39011f7a 100644
--- a/sdk/python/tests/test_strict_decoding.py
+++ b/sdk/python/tests/test_strict_decoding.py
@@ -25,7 +25,9 @@
 
 import fora_sdk.sync as sync_client
 from fora_sdk.client import CallError, CallErrorKind, Client
+from fora_sdk.client._call import decode
 from fora_sdk.keyresolver import StaticKeyResolver
+from wire.models import ResourceResponse
 
 if TYPE_CHECKING:
     from collections.abc import Callable
@@ -135,24 +137,158 @@ def resolve_endpoint(self, exchange: str) -> str:
     assert "get_account_status_response.terms_digest_requires_billing_ref" in str(err)
 
 
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_an_error_envelope_is_read_the_same_way(face: Face) -> None:
+def _client_answering(face: Face, status: int, body: bytes, *, strict: bool) -> Any:
     peer = SignedPeer(
         keys=lambda _sa: StaticKeyResolver({_KEYID: _AGENT_PUBLIC}),
-        answer=lambda _r: httpx.Response(
-            403, content=json.dumps({"code": "permission_denied", "extra": 1}).encode()
-        ),
+        answer=lambda _r: httpx.Response(status, content=body),
     )
-    config = _config(strict=True)
-    client = (
-        Client(config, http=peer.async_())
-        if face.name == "async"
-        else sync_client.Client(config, http=peer.sync())
-    )
-    with pytest.raises(CallError) as caught:
-        face.run(client.discover(_QUERY))
-    assert caught.value.kind is CallErrorKind.REFUSED
-    assert caught.value.code == "permission_denied"
+    config = _config(strict=strict)
+    if face.name == "async":
+        return Client(config, http=peer.async_())
+    return sync_client.Client(config, http=peer.sync())
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_an_error_envelope_with_an_unknown_member_is_refused(face: Face) -> None:
+    body = json.dumps({"code": "permission_denied", "extra": 1}).encode()
+
+    # The default client reads the peer's refusal and ignores the member.
+    with pytest.raises(CallError) as lenient:
+        face.run(_client_answering(face, 403, body, strict=False).discover(_QUERY))
+    assert lenient.value.kind is CallErrorKind.REFUSED
+
+    # The strict client refuses the envelope, and keeps the code the peer answered with.
+    err = _refused(face, lambda: _client_answering(face, 403, body, strict=True).discover(_QUERY))
+    assert err.code == "permission_denied"
+    assert err.status == 403
+    assert err.detail is None
+    assert "extra" in str(err)
+
+
+def _denial_value(extra: bytes = b"") -> str:
+    """A binary ErrorDetail (a transaction denial), base64 the way connect-go writes it."""
+    import base64
+
+    reason = b"\x08\x02"  # TransactionDenial.reason = INSUFFICIENT_BALANCE
+    raw = b"\x12\x02ok" + b"\x52" + bytes([len(reason)]) + reason + extra
+    return base64.b64encode(raw).decode().rstrip("=")
+
+
+def _envelope(**members: Any) -> str:
+    return json.dumps(members)
+
+
+def _entry(**members: Any) -> dict[str, Any]:
+    return members
+
+
+_DETAIL = "fora.v1.ErrorDetail"
+
+#: (name, status, body, refused by a strict decode). Every case also runs leniently, which
+#: must not refuse it as malformed: the strict refusal comes from ``strict`` alone.
+_ENVELOPE_CASES: list[tuple[str, int, str, bool]] = [
+    (
+        "valid envelope",
+        403,
+        _envelope(
+            code="permission_denied",
+            message="no",
+            details=[_entry(type=_DETAIL, value=_denial_value())],
+        ),
+        False,
+    ),
+    (
+        "null members read as absent",
+        500,
+        _envelope(code="internal", message=None, details=None),
+        False,
+    ),
+    (
+        "a detail of another type is not decoded",
+        500,
+        _envelope(
+            code="internal",
+            details=[_entry(type="google.rpc.RetryInfo", value="AA", debug={"any": "thing"})],
+        ),
+        False,
+    ),
+    ("a body that is not JSON is a gateway's", 502, "<html>bad gateway</html>", False),
+    ("an empty body is a gateway's", 503, "", False),
+    ("no code", 500, _envelope(message="x"), True),
+    ("code not a Connect code", 500, _envelope(code="teapot"), True),
+    ("code not a string", 500, _envelope(code=13), True),
+    ("message not a string", 500, _envelope(code="internal", message=1), True),
+    ("JSON but not an object", 500, json.dumps(["internal"]), True),
+    ("details not an array", 500, _envelope(code="internal", details={}), True),
+    (
+        "entry with an unknown member",
+        500,
+        _envelope(code="internal", details=[_entry(type="x", value="AA", extra=1)]),
+        True,
+    ),
+    ("entry with no type", 500, _envelope(code="internal", details=[_entry(value="AA")]), True),
+    (
+        "entry with neither value nor debug",
+        500,
+        _envelope(code="internal", details=[_entry(type="x")]),
+        True,
+    ),
+    (
+        "value not base64",
+        500,
+        _envelope(code="internal", details=[_entry(type="x", value="*not*")]),
+        True,
+    ),
+    (
+        "binary ErrorDetail with an unknown field",
+        403,
+        _envelope(
+            code="permission_denied",
+            details=[_entry(type=_DETAIL, value=_denial_value(b"\x98\x06\x01"))],
+        ),
+        True,
+    ),
+    (
+        "debug projection that is not an object",
+        403,
+        _envelope(code="permission_denied", details=[_entry(type=_DETAIL, debug="x")]),
+        True,
+    ),
+    (
+        "debug projection setting two reasons",
+        403,
+        _envelope(
+            code="permission_denied",
+            details=[
+                _entry(
+                    type=_DETAIL,
+                    debug={
+                        "transactionDenial": {"reason": "DENIAL_REASON_INSUFFICIENT_BALANCE"},
+                        "disputeFailure": {"reason": "DISPUTE_FAILURE_REASON_DUPLICATE"},
+                    },
+                )
+            ],
+        ),
+        True,
+    ),
+]
+
+
+@pytest.mark.parametrize(
+    ("status", "body", "refused"),
+    [c[1:] for c in _ENVELOPE_CASES],
+    ids=[c[0] for c in _ENVELOPE_CASES],
+)
+def test_error_envelope_rules(status: int, body: str, refused: bool) -> None:
+    with pytest.raises(CallError) as lenient:
+        decode("discover", status, body, ResourceResponse)
+    assert lenient.value.kind is not CallErrorKind.MALFORMED
+
+    with pytest.raises(CallError) as strict:
+        decode("discover", status, body, ResourceResponse, strict=True)
+    assert (strict.value.kind is CallErrorKind.MALFORMED) is refused, str(strict.value)
+    # The strict read keeps the code the lenient read reports, refused or not.
+    assert strict.value.code == lenient.value.code
 
 
 def _raw() -> Any:

From bd084a14e3c907dbec9d9e14c90bdad553d14ec7 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 05:51:29 -0400
Subject: [PATCH 030/164] Check error envelopes under strict decoding in the
 TypeScript client

ClientOptions.strict checked a success answer against the strict JSON
Schema of its message and read every error envelope the lenient way. The
transport now checks the envelope first when the client is strict, with
the rules the Go and Python clients apply:

- the envelope carries only code, message and details, a null member read
  as absent; code is one of the sixteen Connect codes; message is a string;
- each details entry carries only type, value and debug, a non-empty type,
  a base64 value and at least one of value and debug;
- for fora.v1.ErrorDetail, the binary value decodes with no unknown field,
  which the table-driven decoder now reports when asked, and the debug
  projection is read under the proto field names; each must set at most
  one reason and pass the published strict ErrorDetail schema and the
  cross-field rules.

A refusal is a malformed ForaCallError keeping code and status, the code
the lenient read reports, with no detail and no peer message. An empty or
non-JSON error body is still classified by its status. decodeResponse takes
the strict flag as an optional third argument; without it nothing changes.

The strict check's core is now strictViolation(raw, message), shared by
the success path and the ErrorDetail check, and the ErrorDetail strict
schema joins the schemas the client imports. toProtoNames exposes the
reader's lowerCamelCase-to-proto-name rewrite. The connect-error replay
decodes every row strictly as well and asserts strict_malformed, and a
table test covers the envelope rules one by one. The test that pinned an
error envelope as left alone under strict now pins the refusal.
---
 sdk/ts/README.md                          |   4 +-
 sdk/ts/client/options.ts                  |  10 +-
 sdk/ts/client/strict-envelope.ts          | 188 ++++++++++++++++++++++
 sdk/ts/client/strict.ts                   |  30 ++--
 sdk/ts/client/transport.ts                |  20 ++-
 sdk/ts/src/errordetail-wire.ts            |  37 ++++-
 sdk/ts/src/errordetail.ts                 |  14 ++
 sdk/ts/tests/connect-error.parity.test.ts |  30 +++-
 sdk/ts/tests/strict-decoding.test.ts      | 132 ++++++++++++++-
 9 files changed, 432 insertions(+), 33 deletions(-)
 create mode 100644 sdk/ts/client/strict-envelope.ts

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index b370d76e..779cda27 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -45,7 +45,9 @@ const validate = new Ajv2020({ validateFormats: false }).compile(schema);
 ```
 
 Strict decoding uses these same files: `createClient(url, { strict: true })` refuses an
-answer that carries an unknown field or breaks a cross-field rule. A harness that tests
+answer that carries an unknown field or breaks a cross-field rule, and an error answer
+whose Connect envelope or `ErrorDetail` (binary `value` or `debug` projection) the
+contract does not define; a refused envelope is `malformed` with `code` kept. A harness that tests
 FORA services through the client has three more seams on it: `beforeSign` alters a
 request just before it is signed, a `RawBody` passed in place of a verb's request is sent
 exactly as given, and `ForaCallError.code` carries the Connect code of a refusal next to
diff --git a/sdk/ts/client/options.ts b/sdk/ts/client/options.ts
index b9c58013..089e2067 100644
--- a/sdk/ts/client/options.ts
+++ b/sdk/ts/client/options.ts
@@ -137,8 +137,13 @@ export interface ClientOptions {
 	beforeSign?: BeforeSign;
 	/** Refuse, as `malformed`, a success answer that carries a field its message does not
 	 * declare or breaks one of the proto's cross-field rules. Checked against the published
-	 * strict JSON Schemas, so the shape is the generator's. Defaults to false: the generated
-	 * schemas drop unknown fields, which keeps a client working against a newer Exchange. */
+	 * strict JSON Schemas, so the shape is the generator's. An error answer is checked too:
+	 * the Connect envelope may carry only code, message and details, must name a known
+	 * Connect code and carry well-formed details, and every ErrorDetail in it, binary
+	 * `value` and `debug` projection alike, must pass the strict ErrorDetail schema and the
+	 * cross-field rules; a refused envelope keeps `code` and `status` and carries no detail.
+	 * Defaults to false: the generated schemas drop unknown fields, which keeps a client
+	 * working against a newer Exchange. */
 	strict?: boolean;
 	/** Resolves an Exchange's URL-signing key for delivery verification. Defaults to the
 	 * WBA resolver over the SSRF-guarded transport, built once with this client: the keys
@@ -238,6 +243,7 @@ export async function call(
 		...(r.opts.beforeSign !== undefined ? { beforeSign: r.opts.beforeSign } : {}),
 		maxBytes: r.opts.maxRPCReadBytes ?? DEFAULT_MAX_RPC_READ_BYTES,
 		timeoutMs: r.opts.callTimeoutMs ?? DEFAULT_CALL_TIMEOUT_MS,
+		strict: r.opts.strict === true,
 	});
 	// Before any verb parses it: the strict check reads the answer as it arrived, and the
 	// parse would already have dropped the unknown field it exists to find.
diff --git a/sdk/ts/client/strict-envelope.ts b/sdk/ts/client/strict-envelope.ts
new file mode 100644
index 00000000..cbe25475
--- /dev/null
+++ b/sdk/ts/client/strict-envelope.ts
@@ -0,0 +1,188 @@
+// Strict decoding of an error answer: the Connect envelope, and every ErrorDetail in it.
+//
+// A lenient reader takes what it can from a Connect error: it ignores a member it does
+// not know, and skips a detail that does not decode. With `strict: true` both are
+// findings, so the envelope is checked before it is read. The checks are the ones the Go
+// and Python clients make, so one envelope gets one verdict in all three:
+//
+//   - a JSON error body is an object whose members are code, message and details, and
+//     nothing else. A null member reads as absent, as proto-JSON reads it;
+//   - code is present and is one of the sixteen Connect codes; message is a string;
+//   - details is an array of objects whose members are type, value and debug. type is a
+//     non-empty string, value is base64 (standard or URL alphabet, padded or not), and an
+//     entry carries a value, a debug projection or both;
+//   - for an entry of type fora.v1.ErrorDetail, the value decodes as an ErrorDetail with
+//     no field the contract does not define, and so does the debug projection when
+//     present; each then passes the published strict ErrorDetail schema and the
+//     cross-field rules, and sets at most one member of the reason oneof.
+//
+// A body that is empty or not JSON is not an envelope: it is a gateway or a proxy
+// answering for the service, and its status classifies it in either mode. The caller
+// decides that before it gets here.
+
+import { decodeErrorDetailValue, isDetailValueBase64 } from "../src/errordetail-wire.ts";
+import { ERROR_DETAIL_TYPE, REASON_FIELDS, toProtoNames } from "../src/errordetail.ts";
+import { ForaCallError } from "./errors.ts";
+import { strictViolation } from "./strict.ts";
+
+const ENVELOPE_MEMBERS = new Set(["code", "message", "details"]);
+const ENTRY_MEMBERS = new Set(["type", "value", "debug"]);
+
+/** The codes a Connect error envelope may name. */
+export const CONNECT_CODES: ReadonlySet<string> = new Set([
+	"canceled",
+	"unknown",
+	"invalid_argument",
+	"deadline_exceeded",
+	"not_found",
+	"already_exists",
+	"permission_denied",
+	"resource_exhausted",
+	"failed_precondition",
+	"aborted",
+	"out_of_range",
+	"unimplemented",
+	"internal",
+	"unavailable",
+	"data_loss",
+	"unauthenticated",
+]);
+
+type Obj = Record<string, unknown>;
+
+function isObj(v: unknown): v is Obj {
+	return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+/** A member, with null read as absent. */
+function member(obj: Obj, name: string): unknown {
+	const v = obj[name];
+	return v === null ? undefined : v;
+}
+
+/** The first member, in sorted order, that `known` does not name. */
+function firstUnknown(obj: Obj, known: ReadonlySet<string>): string | undefined {
+	return Object.keys(obj)
+		.filter((k) => !known.has(k))
+		.sort()[0];
+}
+
+/**
+ * checkStrictEnvelope refuses an error answer whose envelope the strict contract does not
+ * accept, as `malformed` naming the first failure. The refusal keeps `status` and `code`,
+ * the Connect code the lenient read reports, and carries no detail: the detail is part
+ * of what was refused.
+ */
+export function checkStrictEnvelope(
+	op: string,
+	status: number,
+	payload: unknown,
+	code: string | undefined,
+): void {
+	const problem = envelopeViolation(payload);
+	if (problem === undefined) return;
+	throw new ForaCallError({
+		kind: "malformed",
+		op,
+		status,
+		cause: new Error(`strict decoding refused the error answer: ${problem}`),
+		...(code !== undefined ? { code } : {}),
+	});
+}
+
+/** Why `payload` is not a Connect error envelope the contract accepts; undefined if it is. */
+export function envelopeViolation(payload: unknown): string | undefined {
+	if (!isObj(payload)) return "error body is JSON but not a Connect error envelope object";
+	const name = firstUnknown(payload, ENVELOPE_MEMBERS);
+	if (name !== undefined) {
+		return `error envelope carries ${JSON.stringify(name)}, a member the Connect protocol does not define`;
+	}
+	return codeViolation(payload) ?? messageViolation(payload) ?? detailsViolation(payload);
+}
+
+function codeViolation(envelope: Obj): string | undefined {
+	const code = member(envelope, "code");
+	if (code === undefined) return "error envelope names no code";
+	if (typeof code !== "string") return "error envelope code is not a string";
+	if (!CONNECT_CODES.has(code)) return `error envelope code ${JSON.stringify(code)} is not a Connect code`;
+	return undefined;
+}
+
+function messageViolation(envelope: Obj): string | undefined {
+	const message = member(envelope, "message");
+	if (message !== undefined && typeof message !== "string") {
+		return "error envelope message is not a string";
+	}
+	return undefined;
+}
+
+function detailsViolation(envelope: Obj): string | undefined {
+	const details = member(envelope, "details");
+	if (details === undefined) return undefined;
+	if (!Array.isArray(details)) return "error envelope details is not an array";
+	for (const [i, entry] of details.entries()) {
+		const problem = entryViolation(i, entry);
+		if (problem !== undefined) return problem;
+	}
+	return undefined;
+}
+
+function entryViolation(i: number, entry: unknown): string | undefined {
+	if (!isObj(entry)) return `details[${i}] is not an object`;
+	const problem = entryShapeViolation(i, entry);
+	if (problem !== undefined || entry["type"] !== ERROR_DETAIL_TYPE) return problem;
+	return valueViolation(i, member(entry, "value")) ?? debugViolation(i, member(entry, "debug"));
+}
+
+/** The entry's own members, whatever type of detail it carries. */
+function entryShapeViolation(i: number, entry: Obj): string | undefined {
+	const name = firstUnknown(entry, ENTRY_MEMBERS);
+	if (name !== undefined) {
+		return `details[${i}] carries ${JSON.stringify(name)}, a member the Connect protocol does not define`;
+	}
+	const kind = member(entry, "type");
+	if (typeof kind !== "string" || kind === "") return `details[${i}] names no type`;
+	const value = member(entry, "value");
+	const debug = member(entry, "debug");
+	if (value !== undefined && (typeof value !== "string" || !isDetailValueBase64(value))) {
+		return `details[${i}].value is not base64`;
+	}
+	if (value === undefined && debug === undefined) {
+		return `details[${i}] carries neither a value nor a debug projection`;
+	}
+	return undefined;
+}
+
+/** The binary ErrorDetail: it decodes, defines every field it carries, and passes. */
+function valueViolation(i: number, value: unknown): string | undefined {
+	if (typeof value !== "string") return undefined;
+	const unknown: string[] = [];
+	const decoded = decodeErrorDetailValue(value, REASON_FIELDS, unknown);
+	if (decoded === undefined) return `details[${i}].value does not decode as ${ERROR_DETAIL_TYPE}`;
+	if (unknown.length > 0) {
+		return `details[${i}].value carries a field the contract does not define (${unknown[0]})`;
+	}
+	const problem = detailViolation(decoded);
+	return problem === undefined ? undefined : `details[${i}].value: ${problem}`;
+}
+
+/** The debug projection, read under the proto field names like the lenient reader. */
+function debugViolation(i: number, debug: unknown): string | undefined {
+	if (debug === undefined) return undefined;
+	if (!isObj(debug)) return `details[${i}].debug is not an object`;
+	const normalized = toProtoNames(debug);
+	if (!isObj(normalized)) return `details[${i}].debug nests too deep`;
+	const problem = detailViolation(normalized);
+	return problem === undefined ? undefined : `details[${i}].debug: ${problem}`;
+}
+
+/**
+ * An ErrorDetail as proto-JSON: one reason at most, then the strict schema and the
+ * cross-field rules. The schemas do not express oneof exclusivity, so it is checked
+ * here; a proto-JSON parser refuses the same object.
+ */
+function detailViolation(detail: Obj): string | undefined {
+	const reasons = REASON_FIELDS.filter((f) => detail[f] !== undefined && detail[f] !== null);
+	if (reasons.length > 1) return `sets more than one member of the reason oneof: ${reasons.join(", ")}`;
+	return strictViolation(detail, ERROR_DETAIL_TYPE);
+}
diff --git a/sdk/ts/client/strict.ts b/sdk/ts/client/strict.ts
index 242aa5aa..b02177b5 100644
--- a/sdk/ts/client/strict.ts
+++ b/sdk/ts/client/strict.ts
@@ -29,6 +29,7 @@ import discoveryResponse from "../../../gen/jsonschema/fora.v1.DiscoveryResponse
 import disputeResponse from "../../../gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json" with { type: "json" };
 import domainVerificationChallenge from "../../../gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json" with { type: "json" };
 import domainVerificationResult from "../../../gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json" with { type: "json" };
+import errorDetail from "../../../gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json" with { type: "json" };
 import getAccountStatusResponse from "../../../gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json" with { type: "json" };
 import pushResourcesResponse from "../../../gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json" with { type: "json" };
 import refreshCatalogResponse from "../../../gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json" with { type: "json" };
@@ -38,7 +39,8 @@ import resourceResponse from "../../../gen/jsonschema/fora.v1.ResourceResponse.s
 import transactionResponse from "../../../gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json" with { type: "json" };
 import usageReportResponse from "../../../gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json" with { type: "json" };
 
-/** The strict schema of every message a client verb decodes, by fully-qualified name. */
+/** The strict schema of every message a client verb decodes, by fully-qualified name,
+ * and of the ErrorDetail an error answer carries. */
 const STRICT_SCHEMAS: Readonly<Record<string, object>> = {
 	"fora.admin.v1.SetReportingPolicyResponse": setReportingPolicyResponse,
 	"fora.admin.v1.SetTenantFeeRateResponse": setTenantFeeRateResponse,
@@ -47,6 +49,7 @@ const STRICT_SCHEMAS: Readonly<Record<string, object>> = {
 	"fora.v1.DisputeResponse": disputeResponse,
 	"fora.v1.DomainVerificationChallenge": domainVerificationChallenge,
 	"fora.v1.DomainVerificationResult": domainVerificationResult,
+	"fora.v1.ErrorDetail": errorDetail,
 	"fora.v1.GetAccountStatusResponse": getAccountStatusResponse,
 	"fora.v1.PushResourcesResponse": pushResourcesResponse,
 	"fora.v1.RefreshCatalogResponse": refreshCatalogResponse,
@@ -163,9 +166,19 @@ function setMember(target: Node, name: string, value: unknown): void {
 /**
  * checkStrict refuses, as `malformed`, an answer that fails the strict schema of
  * `message` (fully-qualified, e.g. "fora.v1.ResourceResponse") or one of the cross-field
- * rules. Called on a success answer only; error envelopes are not messages of this type.
+ * rules. Called on a success answer; an error answer is checked by checkStrictEnvelope.
  */
 export function checkStrict(op: string, raw: unknown, message: string): void {
+	const problem = strictViolation(raw, message);
+	if (problem !== undefined) throw malformed(op, new Error(`strict decoding: ${problem}`));
+}
+
+/**
+ * strictViolation says why `raw` is not a `message` the strict contract accepts: the
+ * location and the schema's complaint, or the cross-field rules it breaks. Undefined when
+ * it is accepted.
+ */
+export function strictViolation(raw: unknown, message: string): string | undefined {
 	const schema = STRICT_SCHEMAS[message] as Node | undefined;
 	if (schema === undefined) throw new Error(`no strict schema for ${message}`);
 	const defs = isNode(schema["$defs"]) ? schema["$defs"] : {};
@@ -179,20 +192,13 @@ export function checkStrict(op: string, raw: unknown, message: string): void {
 			first?.keyword === "additionalProperties"
 				? ` (${JSON.stringify((first.params as { additionalProperty?: string }).additionalProperty)})`
 				: "";
-		throw malformed(
-			op,
-			new Error(`strict decoding: ${where} ${first?.message ?? "does not match"}${extra}`),
-		);
+		return `${where} ${first?.message ?? "does not match"}${extra}`;
 	}
 	for (const f of found) {
 		const violated = crossFieldRuleIds(f.message, f.value);
 		if (violated.length > 0) {
-			throw malformed(
-				op,
-				new Error(
-					`strict decoding: ${f.path === "" ? "(root)" : f.path} violates cross-field rule(s) ${violated.join(", ")}`,
-				),
-			);
+			return `${f.path === "" ? "(root)" : f.path} violates cross-field rule(s) ${violated.join(", ")}`;
 		}
 	}
+	return undefined;
 }
diff --git a/sdk/ts/client/transport.ts b/sdk/ts/client/transport.ts
index 135d8cff..a07fa599 100644
--- a/sdk/ts/client/transport.ts
+++ b/sdk/ts/client/transport.ts
@@ -30,6 +30,7 @@ import {
 	ForaCallError,
 } from "./errors.ts";
 import { RawBody, rawBytes } from "./raw.ts";
+import { checkStrictEnvelope } from "./strict-envelope.ts";
 
 /**
  * The pre-signing hook: receives every RPC request just before it is signed, as a Fetch
@@ -136,6 +137,9 @@ export interface UnaryCallOptions {
 	beforeSign?: BeforeSign;
 	maxBytes?: number;
 	timeoutMs?: number;
+	/** Check an error answer's envelope and ErrorDetails strictly (ClientOptions.strict).
+	 * A success answer's strict check runs in the tier above, against its message. */
+	strict?: boolean;
 }
 
 /**
@@ -241,7 +245,7 @@ export async function unaryCall(opts: UnaryCallOptions): Promise<unknown> {
 	} finally {
 		clearTimeout(timer);
 	}
-	return decodeResponse(opts.op, response);
+	return decodeResponse(opts.op, response, opts.strict === true);
 }
 
 // Headers the runtime computes from the request itself. A hook's request carries them,
@@ -393,8 +397,14 @@ export function refuseUnrequestedEncoding(
  * rides in `details`, which errorDetailFrom reads — the binary `value` first, and the
  * lowerCamelCase `debug` projection connect-go emits beside it only when `value` is
  * absent. The envelope's Connect code lands on the failure's `code`.
+ *
+ * With `strict`, an error answer's envelope and every ErrorDetail in it are checked
+ * first (see checkStrictEnvelope), and a refusal is `malformed` keeping the code the
+ * lenient read reports. An empty body is not an envelope — the lenient read takes it as
+ * one naming no code — so it is classified by its status in either mode, like a body
+ * that is not JSON.
  */
-export function decodeResponse(op: string, response: UnaryResponse): unknown {
+export function decodeResponse(op: string, response: UnaryResponse, strict = false): unknown {
 	// A 3xx before anything is read out of the body. Every leg refuses to follow a
 	// redirect, so one reaching here is a server that did not answer rather than one that
 	// declined — and there is nothing in a redirect body to interpret. Unconditional on
@@ -411,7 +421,11 @@ export function decodeResponse(op: string, response: UnaryResponse): unknown {
 	}
 	const payload = parseJSON(op, response);
 	if (response.status < 200 || response.status >= 300) {
-		throw connectEnvelopeError(op, response.status, payload);
+		const error = connectEnvelopeError(op, response.status, payload);
+		if (strict && response.body.trim() !== "") {
+			checkStrictEnvelope(op, response.status, payload, error.code);
+		}
+		throw error;
 	}
 	return payload;
 }
diff --git a/sdk/ts/src/errordetail-wire.ts b/sdk/ts/src/errordetail-wire.ts
index 2aee102e..8a7aa670 100644
--- a/sdk/ts/src/errordetail-wire.ts
+++ b/sdk/ts/src/errordetail-wire.ts
@@ -19,6 +19,11 @@
 // enum is read packed or unpacked; of the ErrorDetail reason oneof, only the member seen
 // last survives. A truncated buffer, a group wire type, a varint past ten bytes or a
 // string that is not UTF-8 makes the value undecodable.
+//
+// A caller that must know about the skipped fields passes an array as `unknown`: each one
+// is recorded there, by the message it appeared in and its field number. Strict decoding
+// does, because it refuses an ErrorDetail carrying a field the contract does not define,
+// which is what Go's decoder reports for the same bytes.
 
 /** One field of a message, in the shape the shared corpus records it. */
 export interface WireField {
@@ -308,6 +313,7 @@ function decodeInto(
 	type: string,
 	target: Message,
 	oneof: ReadonlySet<string>,
+	unknown: string[] | undefined,
 ): void {
 	const fields = ERROR_DETAIL_WIRE_MESSAGES[type];
 	if (fields === undefined) throw new Undecodable(`no table for ${type}`);
@@ -321,16 +327,23 @@ function decodeInto(
 		const packed = field?.kind === "enum" && field.repeated === true && wireType === LEN;
 		if (field === undefined || (!packed && wireType !== wireTypeOf(field))) {
 			reader.skip(wireType);
+			unknown?.push(`${type} field ${number}`);
 			continue;
 		}
 		if (oneof.has(field.name)) {
 			for (const member of oneof) if (member !== field.name) delete target[member];
 		}
-		readField(reader, field, target, packed);
+		readField(reader, field, target, packed, unknown);
 	}
 }
 
-function readField(reader: Reader, field: WireField, target: Message, packed: boolean): void {
+function readField(
+	reader: Reader,
+	field: WireField,
+	target: Message,
+	packed: boolean,
+	unknown: string[] | undefined,
+): void {
 	switch (field.kind) {
 		case "string": {
 			const value = decodeString(reader.bytes());
@@ -355,7 +368,7 @@ function readField(reader: Reader, field: WireField, target: Message, packed: bo
 			const type = field.type ?? "";
 			if (field.repeated) {
 				const item: Message = {};
-				decodeInto(bytes, type, item, NO_ONEOF);
+				decodeInto(bytes, type, item, NO_ONEOF, unknown);
 				appendTo(target, field.name, finish(item, type));
 				return;
 			}
@@ -363,7 +376,7 @@ function readField(reader: Reader, field: WireField, target: Message, packed: bo
 			// first rather than replacing it.
 			const existing = target[field.name];
 			const into: Message = isMessage(existing) ? existing : {};
-			decodeInto(bytes, type, into, NO_ONEOF);
+			decodeInto(bytes, type, into, NO_ONEOF, unknown);
 			defineMember(target, field.name, finish(into, type));
 			return;
 		}
@@ -433,15 +446,18 @@ function decodeBase64(value: string): Uint8Array | undefined {
 /**
  * Decode a binary fora.v1.ErrorDetail to canonical proto-JSON under the proto field
  * names. `oneof` names the members of the reason oneof, of which only the last seen
- * survives. Returns undefined for a value that does not decode.
+ * survives. Returns undefined for a value that does not decode. Each field skipped as
+ * unknown, or as a known field with the wrong wire type, is pushed to `unknown` when it
+ * is given.
  */
 export function decodeErrorDetailBinary(
 	bytes: Uint8Array,
 	oneof: readonly string[],
+	unknown?: string[],
 ): Record<string, unknown> | undefined {
 	try {
 		const out: Message = {};
-		decodeInto(bytes, "fora.v1.ErrorDetail", out, new Set(oneof));
+		decodeInto(bytes, "fora.v1.ErrorDetail", out, new Set(oneof), unknown);
 		return finish(out, "fora.v1.ErrorDetail");
 	} catch (cause) {
 		if (cause instanceof Undecodable) return undefined;
@@ -453,7 +469,14 @@ export function decodeErrorDetailBinary(
 export function decodeErrorDetailValue(
 	value: string,
 	oneof: readonly string[],
+	unknown?: string[],
 ): Record<string, unknown> | undefined {
 	const bytes = decodeBase64(value);
-	return bytes === undefined ? undefined : decodeErrorDetailBinary(bytes, oneof);
+	return bytes === undefined ? undefined : decodeErrorDetailBinary(bytes, oneof, unknown);
+}
+
+/** Whether a details[].value is base64 this reader accepts: standard or URL alphabet,
+ * padded or not. */
+export function isDetailValueBase64(value: string): boolean {
+	return decodeBase64(value) !== undefined;
 }
diff --git a/sdk/ts/src/errordetail.ts b/sdk/ts/src/errordetail.ts
index 34f40a8e..27d3ef95 100644
--- a/sdk/ts/src/errordetail.ts
+++ b/sdk/ts/src/errordetail.ts
@@ -149,6 +149,20 @@ const MAX_DETAIL_DEPTH = 32;
  * reader answers "no detail" instead. */
 class TooDeep extends Error {}
 
+/**
+ * toProtoNames reads a lowerCamelCase proto-JSON payload, such as a `debug` projection,
+ * under the proto field names, exactly as errorDetailFrom does before it parses one.
+ * Returns undefined for a payload nested deeper than a peer's detail may be.
+ */
+export function toProtoNames(payload: unknown): unknown {
+	try {
+		return protoNames(payload);
+	} catch (cause) {
+		if (cause instanceof TooDeep) return undefined;
+		throw cause;
+	}
+}
+
 function protoNames(payload: unknown, budget = MAX_DETAIL_DEPTH): unknown {
 	if (budget <= 0) throw new TooDeep();
 	if (Array.isArray(payload)) return payload.map((v) => protoNames(v, budget - 1));
diff --git a/sdk/ts/tests/connect-error.parity.test.ts b/sdk/ts/tests/connect-error.parity.test.ts
index 65780ad7..e0c6a9a0 100644
--- a/sdk/ts/tests/connect-error.parity.test.ts
+++ b/sdk/ts/tests/connect-error.parity.test.ts
@@ -20,7 +20,9 @@
 // the .strip() forward-compatibility policy that exists for a newer protocol version.
 //
 // Every vector here was CAPTURED from a real connect-go handler, so the fix is asserted
-// against what the wire does rather than against a description of it.
+// against what the wire does rather than against a description of it. Each row is also
+// decoded with strict decoding on, which must refuse exactly the rows marked
+// `strict_malformed` and read every other row as the lenient client does.
 import { describe, it, expect } from "vitest";
 import { ErrorDetailSchema } from "../../../gen/ts/wire/schemas.ts";
 import { errorDetailFrom, reason } from "../src/errordetail.ts";
@@ -43,11 +45,36 @@ type ConnectErrorVector = {
 		detail: Record<string, unknown> | null;
 	};
 	peer_message: string;
+	strict_malformed: boolean;
 };
 type VectorsFile = { note: string; vectors: ConnectErrorVector[] };
 
 const vectors = (vectorsFile as VectorsFile).vectors;
 
+// The row through a strict decode: refused as malformed with the code kept and no detail
+// when the corpus marks it strict_malformed, otherwise exactly the lenient read.
+function assertStrictRead(v: ConnectErrorVector, lenient: ForaCallError): void {
+	let thrown: unknown;
+	try {
+		decodeResponse("discover", { status: v.http_status, body: JSON.stringify(v.envelope) }, true);
+	} catch (e) {
+		thrown = e;
+	}
+	expect(thrown, v.name).toBeInstanceOf(ForaCallError);
+	const strict = thrown as ForaCallError;
+	expect(strict.code, v.name).toBe(v.code);
+	expect(strict.status, v.name).toBe(v.http_status);
+	if (v.strict_malformed) {
+		expect(strict.kind, `${v.name}: ${String(strict.cause)}`).toBe("malformed");
+		expect(strict.detail, v.name).toBeUndefined();
+		expect(strict.peerMessage ?? "", v.name).toBe("");
+		return;
+	}
+	expect(strict.kind, `${v.name}: ${String(strict.cause)}`).toBe(lenient.kind);
+	expect(strict.detail ?? null, v.name).toEqual(lenient.detail ?? null);
+	expect(strict.peerMessage ?? "", v.name).toBe(lenient.peerMessage ?? "");
+}
+
 describe("sdk/ts reads a Connect error envelope the way the sdk/go oracle does", () => {
 	it("connect-error vector set is non-empty", () => {
 		expect(vectors.length).toBeGreaterThan(0);
@@ -94,6 +121,7 @@ describe("sdk/ts reads a Connect error envelope the way the sdk/go oracle does",
 			// not, because the code is a property of the answer rather than of the detail.
 			expect((thrown as ForaCallError).code, v.name).toBe(v.code);
 			expect((thrown as ForaCallError).detail ?? null).toEqual(detail);
+			assertStrictRead(v, thrown as ForaCallError);
 
 			if (!v.expect.has_detail) {
 				expect(detail).toBeNull();
diff --git a/sdk/ts/tests/strict-decoding.test.ts b/sdk/ts/tests/strict-decoding.test.ts
index c8c19eb9..d7b79ebd 100644
--- a/sdk/ts/tests/strict-decoding.test.ts
+++ b/sdk/ts/tests/strict-decoding.test.ts
@@ -3,10 +3,12 @@
 // The generated schemas the client parses answers with drop an unknown field, so an older
 // client keeps working against a newer Exchange. Under `strict: true` the client checks
 // every success answer against the published STRICT JSON Schema of its message and the
-// proto's cross-field rules first, and refuses one that fails as `malformed`.
+// proto's cross-field rules first, and refuses one that fails as `malformed`. An error
+// answer's Connect envelope and every ErrorDetail in it are checked the same way.
 import { describe, expect, it } from "vitest";
 
 import { createClient, ForaCallError, type ClientOptions } from "../client/index.ts";
+import { decodeResponse } from "../client/transport.ts";
 
 const RESPONSE = { ver: "1.0", exchange: "exchange.test" };
 
@@ -95,17 +97,133 @@ describe("strict decoding", () => {
 		await expect(client(answer, { strict: true }).discover(QUERY)).resolves.toBeDefined();
 	});
 
-	it("leaves error envelopes alone", async () => {
-		const f = await failure(
+	it("refuses an error envelope carrying an unknown member, keeping the code", async () => {
+		const answering = (strict: boolean) =>
 			createClient("https://exchange.test", {
-				strict: true,
+				strict,
 				send: async () => ({
 					status: 403,
 					body: JSON.stringify({ code: "permission_denied", message: "no", unknown_member: 1 }),
 				}),
-			}).discover(QUERY),
-		);
-		expect(f.kind).toBe("refused");
+			}).discover(QUERY);
+
+		// The default client reads the peer's refusal and ignores the member.
+		const lenient = await failure(answering(false));
+		expect(lenient.kind).toBe("refused");
+
+		const f = await failure(answering(true));
+		expect(f.kind).toBe("malformed");
 		expect(f.code).toBe("permission_denied");
+		expect(f.status).toBe(403);
+		expect(f.detail).toBeUndefined();
+		expect(String(f.cause)).toContain("unknown_member");
 	});
 });
+
+// A binary ErrorDetail (a transaction denial), base64 the way connect-go writes it, with
+// `extra` bytes appended.
+function denialValue(extra: number[] = []): string {
+	const reason = [0x08, 0x02]; // TransactionDenial.reason = INSUFFICIENT_BALANCE
+	const raw = [0x12, 0x02, 0x6f, 0x6b, 0x52, reason.length, ...reason, ...extra];
+	return btoa(String.fromCharCode(...raw)).replace(/=+$/, "");
+}
+
+const DETAIL = "fora.v1.ErrorDetail";
+
+// [name, status, body, refused by a strict decode]. Every case also runs leniently, which
+// must not refuse it as malformed: the strict refusal comes from `strict` alone.
+const ENVELOPE_CASES: Array<[string, number, string, boolean]> = [
+	[
+		"valid envelope",
+		403,
+		JSON.stringify({
+			code: "permission_denied",
+			message: "no",
+			details: [{ type: DETAIL, value: denialValue() }],
+		}),
+		false,
+	],
+	["null members read as absent", 500, JSON.stringify({ code: "internal", message: null, details: null }), false],
+	[
+		"a detail of another type is not decoded",
+		500,
+		JSON.stringify({
+			code: "internal",
+			details: [{ type: "google.rpc.RetryInfo", value: "AA", debug: { any: "thing" } }],
+		}),
+		false,
+	],
+	["a body that is not JSON is a gateway's", 502, "<html>bad gateway</html>", false],
+	["an empty body is a gateway's", 503, "", false],
+	["no code", 500, JSON.stringify({ message: "x" }), true],
+	["code not a Connect code", 500, JSON.stringify({ code: "teapot" }), true],
+	["code not a string", 500, JSON.stringify({ code: 13 }), true],
+	["message not a string", 500, JSON.stringify({ code: "internal", message: 1 }), true],
+	["JSON but not an object", 500, JSON.stringify(["internal"]), true],
+	["details not an array", 500, JSON.stringify({ code: "internal", details: {} }), true],
+	[
+		"entry with an unknown member",
+		500,
+		JSON.stringify({ code: "internal", details: [{ type: "x", value: "AA", extra: 1 }] }),
+		true,
+	],
+	["entry with no type", 500, JSON.stringify({ code: "internal", details: [{ value: "AA" }] }), true],
+	["entry with neither value nor debug", 500, JSON.stringify({ code: "internal", details: [{ type: "x" }] }), true],
+	["value not base64", 500, JSON.stringify({ code: "internal", details: [{ type: "x", value: "*not*" }] }), true],
+	[
+		"binary ErrorDetail with an unknown field",
+		403,
+		JSON.stringify({
+			code: "permission_denied",
+			details: [{ type: DETAIL, value: denialValue([0x98, 0x06, 0x01]) }],
+		}),
+		true,
+	],
+	[
+		"debug projection that is not an object",
+		403,
+		JSON.stringify({ code: "permission_denied", details: [{ type: DETAIL, debug: "x" }] }),
+		true,
+	],
+	[
+		"debug projection setting two reasons",
+		403,
+		JSON.stringify({
+			code: "permission_denied",
+			details: [
+				{
+					type: DETAIL,
+					debug: {
+						transactionDenial: { reason: "DENIAL_REASON_INSUFFICIENT_BALANCE" },
+						disputeFailure: { reason: "DISPUTE_FAILURE_REASON_DUPLICATE" },
+					},
+				},
+			],
+		}),
+		true,
+	],
+];
+
+function thrownBy(fn: () => unknown): ForaCallError {
+	try {
+		fn();
+	} catch (e) {
+		expect(e).toBeInstanceOf(ForaCallError);
+		return e as ForaCallError;
+	}
+	throw new Error("the decode did not fail");
+}
+
+describe("strict decoding of an error envelope", () => {
+	for (const [name, status, body, refused] of ENVELOPE_CASES) {
+		it(name, () => {
+			const lenient = thrownBy(() => decodeResponse("discover", { status, body }));
+			expect(lenient.kind).not.toBe("malformed");
+
+			const strict = thrownBy(() => decodeResponse("discover", { status, body }, true));
+			expect(strict.kind === "malformed", String(strict.cause)).toBe(refused);
+			// The strict read keeps the code the lenient read reports, refused or not.
+			expect(strict.code).toBe(lenient.code);
+		});
+	}
+});

From 429639c4328977ab2e9cb3dc27d787ebca775334 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 05:51:29 -0400
Subject: [PATCH 031/164] Describe strict decoding of error envelopes in the
 docs and changelogs

The agent SDK overview says strict decoding checks an error answer as well:
the Connect envelope's members, a known Connect code and well-formed
details, and every ErrorDetail, decoded value and debug projection alike,
against the strict ErrorDetail schema and its rules, with the peer's code
kept on a refusal. The JSON Schemas page says which schema the ErrorDetail
is checked against and that oneof exclusivity is checked separately. The
Unreleased entry in both changelogs adds the error-answer checks and the
strict_malformed column and rows of connect-error-vectors.json.
---
 proto/CHANGELOG.md                                | 15 ++++++++++++++-
 .../docs/components/agent-sdk/overview.mdx        |  9 ++++++++-
 website/src/content/docs/reference/changelog.mdx  | 15 ++++++++++++++-
 .../src/content/docs/reference/json-schemas.mdx   |  9 +++++++++
 4 files changed, 45 insertions(+), 3 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 6197143f..94b03ab1 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -111,7 +111,20 @@ request only where it means to, and check every answer through the SDK's own dec
   unknown field at any depth, or breaking a field-level or cross-field rule. Python and
   TypeScript check the published strict JSON Schema of the response message and the
   SDK's cross-field rules, reading a `null` member as absent; Go checks the descriptor's
-  unknown fields and runs protovalidate.
+  unknown fields and runs protovalidate. An error answer is checked too. The Connect
+  error envelope may carry only `code`, `message` and `details`, must name one of the
+  sixteen Connect codes, and its details must be well formed: each entry carries only
+  `type`, `value` and `debug`, a non-empty `type`, a base64 `value` and at least one of
+  the two. Every `ErrorDetail` in it is checked against the strict `ErrorDetail` schema
+  and its rules, both the decoded binary `value` (an unknown field in the binary
+  encoding included) and the `debug` projection. A refused envelope is malformed, keeps
+  the Connect code on `code`/`Code` and carries no detail; an empty or non-JSON error
+  body is a gateway's answer and is still classified by its status. Without strict
+  decoding an error answer is read as before. `connect-error-vectors.json` gains a
+  `strict_malformed` column on every row and three rows for it: an envelope with an
+  unknown top-level member, a `debug` projection with an unknown field, and a
+  `registration_failure` whose `field_errors` break the RegistrationFailure message
+  rule. All three SDKs replay every row strict and non-strict.
 - **Error decoding.** The JSON SDKs read a Connect error's `ErrorDetail` from the binary
   `details[].value`, with a table-driven decoder and no protobuf dependency, and fall
   back to the `debug` projection only when `value` is absent. A value that does not
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index dd888004..4c1b32ca 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -95,7 +95,7 @@ parsing responses itself or re-implementing request signing.
 |---|---|---|---|
 | Pre-signing hook: change a request after the SDK built it, before it is signed | `connect.WithBeforeSign` | `beforeSign` in `ClientOptions` | `ClientConfig.before_sign` |
 | Raw mode: send a body exactly as given, still signed and decoded | `connect.WithRawBody` | `new RawBody(body)` in place of the request | `RawBody(body)` in place of the request |
-| Strict decoding: refuse an unknown field, a field-level or a cross-field violation | `connect.WithStrictDecoding` | `strict: true` | `ClientConfig(strict=True)` |
+| Strict decoding: refuse an unknown field, a field-level or a cross-field violation, in a success answer or in an error envelope and its `ErrorDetail` | `connect.WithStrictDecoding` | `strict: true` | `ClientConfig(strict=True)` |
 | The Connect code of a refusal, on its own field | `CallError.Code` | `ForaCallError.code` | `CallError.code` |
 | The verified binding of each delivery URL | `connect.WithDeliveries`, `Content.Binding` | `ExecuteResult.deliveries`, `Content.binding` | `ExecuteResult.deliveries`, `Content.binding` |
 | The operator RPCs: `AdminService` and domain verification | `connect.NewAdminClient` | `createAdminClient` | `AdminClient` |
@@ -114,6 +114,13 @@ A few rules hold in every language:
   [JSON Schemas](/reference/json-schemas/)); Go reads the same shape from the
   descriptor. A server emits unpopulated fields, so a `null` member is read as an absent
   one.
+- **Strict decoding checks error answers too.** The Connect error envelope may carry
+  only `code`, `message` and `details`, must name a known Connect code, and must carry
+  well-formed details. Every `ErrorDetail` in it, the decoded binary `value` and the
+  `debug` projection alike, is checked against the strict `ErrorDetail` schema and its
+  rules. A refused envelope is malformed, with the peer's Connect code still on the
+  error's code field and no detail. An empty or non-JSON error body comes from a gateway
+  rather than the service, so its HTTP status still classifies it.
 - **Error details are read from the binary `value`.** A Connect error carries its typed
   reason as `details[].value`, the binary `ErrorDetail`. All three SDKs read it; the JSON
   SDKs fall back to the lowerCamelCase `debug` projection only when `value` is absent.
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 6f482a27..ca26259b 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -120,7 +120,20 @@ summarizes them per language.
   unknown field at any depth, or breaking a field-level or cross-field rule. Python and
   TypeScript check the published strict JSON Schema of the response message and the
   SDK's cross-field rules, reading a `null` member as absent; Go checks the descriptor's
-  unknown fields and runs protovalidate.
+  unknown fields and runs protovalidate. An error answer is checked too. The Connect
+  error envelope may carry only `code`, `message` and `details`, must name one of the
+  sixteen Connect codes, and its details must be well formed: each entry carries only
+  `type`, `value` and `debug`, a non-empty `type`, a base64 `value` and at least one of
+  the two. Every `ErrorDetail` in it is checked against the strict `ErrorDetail` schema
+  and its rules, both the decoded binary `value` (an unknown field in the binary
+  encoding included) and the `debug` projection. A refused envelope is malformed, keeps
+  the Connect code on `code`/`Code` and carries no detail; an empty or non-JSON error
+  body is a gateway's answer and is still classified by its status. Without strict
+  decoding an error answer is read as before. `connect-error-vectors.json` gains a
+  `strict_malformed` column on every row and three rows for it: an envelope with an
+  unknown top-level member, a `debug` projection with an unknown field, and a
+  `registration_failure` whose `field_errors` break the RegistrationFailure message
+  rule. All three SDKs replay every row strict and non-strict.
 - **Error decoding.** The JSON SDKs read a Connect error's `ErrorDetail` from the binary
   `details[].value`, with a table-driven decoder and no protobuf dependency, and fall
   back to the `debug` projection only when `value` is absent. A value that does not
diff --git a/website/src/content/docs/reference/json-schemas.mdx b/website/src/content/docs/reference/json-schemas.mdx
index 0b30e90e..71a4a391 100644
--- a/website/src/content/docs/reference/json-schemas.mdx
+++ b/website/src/content/docs/reference/json-schemas.mdx
@@ -72,6 +72,15 @@ any depth, a field-level violation or a cross-field violation refuses the answer
 malformed. The Go client, `connect.WithStrictDecoding()`, applies the same contract from
 the compiled descriptor: it refuses unknown fields and runs `protovalidate`.
 
+An error answer is checked in strict decoding too. The `ErrorDetail` a Connect error
+carries is validated against `fora.v1.ErrorDetail.schema.strict.json` and the cross-field
+rules: the binary `details[].value` once it is decoded, with an unknown field in the
+binary encoding refused as well, and the lowerCamelCase `debug` projection read under the
+proto field names. The schema does not express oneof exclusivity, so a projection that
+sets two reason members is refused separately. The envelope around the detail is checked
+against the Connect protocol: only `code`, `message` and `details`, a known Connect code,
+and well-formed details entries. A refusal is malformed and keeps the peer's Connect code.
+
 ## What the schemas accept
 
 The schemas describe canonical proto-JSON as the FORA wire carries it. The two variants

From 91f2d2139021cd77e28b644fc2cb21b5e62b4eb8 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 06:11:50 -0400
Subject: [PATCH 032/164] Wait for refused sockets to close in the TypeScript
 reclaim test

The socket-release test for the RPC leg failed about one run in three
alone and on every full sdk/ts run with Zod 4 installed. It already did
so before the harness work, so it was not caused by a recent change.

Reproduction: npm install --no-save zod@4.6.5 in sdk/ts, then npx vitest
run. The RPC case fails with "expected 3 to be less than or equal to 2"
every time. Running the file alone fails two or three runs in eight.

Root cause: the test raced its own observation. It is not a leak in the
client. The failing assertion was the bound of two on open sockets after
a 250 ms pause. The count of closed sockets passed in every failure.
Tracing both ends showed that every socket that carried a refused answer
was closed within milliseconds. The open sockets were idle connections
that undici's pool opens on its own and that never carry a request.
Plain undici, with no SDK code, does the same: forty destroyed bodies on
one Agent leave three or four pool clients and two or three idle
connections, depending on timing. The count does not grow with the
refusals (six, thirty and sixty end at two or three), and undici closes
them after about three seconds idle. The test assumed undici keeps one
idle connection, so a third one failed it. Slower module loading under
Zod 4 changes the timing enough to make that the usual outcome. This is
a latent bug in the test that the timing change exposed.

Fix: the server now records each socket a request arrived on, and every
case waits for the close event of those sockets, with a 5 s deadline
that turns a stranded socket into a failure. Each case then checks that
each refusal arrived on its own socket. The open-socket bound and the
fixed pause are gone. The idle connections carry no answer, so they
cannot be stranded. The two delivery cases and the pool case had the
same pause-then-count shape and use the same wait. No change was needed
in the client.

With reclaim disabled, all four cases still fail, each at its deadline.
With it, npm test passed 20 runs of 20 under Zod 3.25.76 and 20 of 20
under Zod 4.6.5, and the file alone passed 30 of 30.
---
 sdk/ts/tests/client-refusal-reclaim.test.ts | 99 +++++++++++++--------
 1 file changed, 63 insertions(+), 36 deletions(-)

diff --git a/sdk/ts/tests/client-refusal-reclaim.test.ts b/sdk/ts/tests/client-refusal-reclaim.test.ts
index dd86fb2c..92467162 100644
--- a/sdk/ts/tests/client-refusal-reclaim.test.ts
+++ b/sdk/ts/tests/client-refusal-reclaim.test.ts
@@ -16,15 +16,29 @@
 // WHAT IS ASSERTED, AND WHY NOT THE OBVIOUS THING. Counting how many connections the
 // server accepted cannot tell the two states apart: a stranded socket is never reused, so
 // the next request opens a fresh one and the totals match either way. What separates them
-// is whether those sockets were CLOSED. Six refusals close six sockets once the release
-// lands and none before it, so that count is the property. A live socket survives either
-// way — undici holds one idle connection in the pool — and the point is that it does not
-// grow with the refusals, so it is bounded rather than required to be zero.
+// is whether the sockets that CARRIED a refused answer were closed. The server records
+// each socket a request arrived on, and the test waits for the close event of every one
+// of them. With the release in place each one closes within milliseconds. Without it none
+// does, because this server never hangs up, and the wait fails at its deadline.
+//
+// The test does not count the sockets that are still open, and it does not wait a fixed
+// time first. undici's pool opens connections of its own when bodies are torn down one
+// after another: it ends up with more clients than requests in flight, and each extra
+// client holds a fresh connection that never carries a request. Plain undici shows it with
+// no SDK code involved: forty destroyed bodies on one Agent leave three or four pool
+// clients and two or three idle connections, depending on timing. That count does not
+// grow with the refusals (six, thirty and sixty all end at two or three), and undici
+// closes those connections after about three seconds idle. An earlier version bounded the
+// open count at two after a 250 ms pause. It failed whenever the pool held a third idle
+// connection: about one run in three alone, and every full-suite run with Zod 4
+// installed. Those idle connections carry no answer, so they cannot be stranded, and
+// waiting on the sockets that did carry one is both deterministic and the property.
 //
 // The last case asserts what a caller actually feels instead: with the pool bounded to one
 // connection, a single unreleased socket means nothing afterwards can dial at all.
 
 import { createServer, type Server } from "node:http";
+import type { Socket } from "node:net";
 import { randomBytes } from "node:crypto";
 import { gzipSync } from "node:zlib";
 import { Agent } from "undici";
@@ -38,16 +52,23 @@ import type { UnaryRequest } from "../client/transport.ts";
 const BIG = randomBytes(2 << 20);
 const BIG_GZIP = gzipSync(BIG);
 
-/** What the server saw happen to its connections. */
+/** What the server saw happen to the connections that carried a request. */
 interface Sockets {
-	/** How many were closed — one per released response body. */
-	closed: () => number;
-	/** How many are still open. Bounded, not zero: undici keeps one idle. */
-	live: () => number;
+	/** How many distinct sockets carried a request whose path starts with the prefix. */
+	served: (prefix?: string) => number;
+	/**
+	 * Resolves once every socket that carried such a request has closed. Idle connections
+	 * the pool opened and never used are not counted: they carry no answer to strand.
+	 */
+	released: (prefix?: string) => Promise<void>;
 }
 
-/** Idle pool connections that survive a run and do not grow with the refusal count. */
-const IDLE_POOL_SLACK = 2;
+/**
+ * How long the release may take before the test calls it stranded. A released socket
+ * closes within milliseconds; a stranded one never closes, because this server never
+ * hangs up. The bound turns that hang into a failure and does not pace a passing run.
+ */
+const RELEASE_DEADLINE_MS = 5000;
 
 /**
  * serving stands up a loopback server and reports what its sockets are doing.
@@ -59,10 +80,14 @@ const IDLE_POOL_SLACK = 2;
 async function serving(
 	handler: (path: string) => { status: number; headers: Record<string, string>; body: Buffer },
 ): Promise<[Server, string, Sockets]> {
-	let opened = 0;
-	let closed = 0;
+	// Each socket's close is captured when it connects, so a socket that closes before the
+	// test starts waiting has already settled its promise rather than being missed.
+	const closes = new Map<Socket, Promise<void>>();
+	const served = new Map<Socket, string>();
 	const server = createServer((req, res) => {
-		const answer = handler(String(req.url ?? "/"));
+		const path = String(req.url ?? "/");
+		if (!served.has(req.socket)) served.set(req.socket, path);
+		const answer = handler(path);
 		res.writeHead(answer.status, {
 			...answer.headers,
 			"content-length": String(answer.body.length),
@@ -70,15 +95,21 @@ async function serving(
 		res.end(answer.body);
 	});
 	server.on("connection", (socket) => {
-		opened++;
-		socket.on("close", () => closed++);
+		closes.set(socket, new Promise<void>((done) => socket.once("close", () => done())));
 	});
+	const carrying = (prefix: string) =>
+		[...served].filter(([, path]) => path.startsWith(prefix)).map(([socket]) => socket);
 	await new Promise<void>((done) => server.listen(0, "127.0.0.1", () => done()));
 	const port = (server.address() as { port: number }).port;
 	return [
 		server,
 		`http://127.0.0.1:${port}`,
-		{ closed: () => closed, live: () => opened - closed },
+		{
+			served: (prefix = "/") => carrying(prefix).length,
+			released: async (prefix = "/") => {
+				await Promise.all(carrying(prefix).map((socket) => closes.get(socket)));
+			},
+		},
 	];
 }
 
@@ -108,11 +139,6 @@ async function agentKeys(): Promise<CryptoKeyPair> {
 	])) as CryptoKeyPair;
 }
 
-/** Sockets close on a later tick than the refusal, so give the event loop one turn. */
-async function settle(): Promise<void> {
-	await new Promise((done) => setTimeout(done, 250));
-}
-
 /** A sentinel that beats a call which never settles, so a wedge fails rather than hangs. */
 const WEDGED = Symbol("wedged");
 async function within<T>(ms: number, call: Promise<T>): Promise<T | typeof WEDGED> {
@@ -143,12 +169,11 @@ describe("a refusal above the read", () => {
 					}).catch((e: unknown) => e);
 					expect(failure).toBeInstanceOf(Error);
 				}
-				await settle();
 				expect(
-					sockets.closed(),
+					await within(RELEASE_DEADLINE_MS, sockets.released()),
 					"a refused redirect never released its socket",
-				).toBeGreaterThanOrEqual(REFUSALS);
-				expect(sockets.live()).toBeLessThanOrEqual(IDLE_POOL_SLACK);
+				).not.toBe(WEDGED);
+				expect(sockets.served()).toBe(REFUSALS);
 				dispatcher.destroy();
 			});
 		} finally {
@@ -175,12 +200,11 @@ describe("a refusal above the read", () => {
 					}).catch((e: unknown) => e);
 					expect(failure).toBeInstanceOf(Error);
 				}
-				await settle();
 				expect(
-					sockets.closed(),
+					await within(RELEASE_DEADLINE_MS, sockets.released()),
 					"a refused coding never released its socket",
-				).toBeGreaterThanOrEqual(REFUSALS);
-				expect(sockets.live()).toBeLessThanOrEqual(IDLE_POOL_SLACK);
+				).not.toBe(WEDGED);
+				expect(sockets.served()).toBe(REFUSALS);
 				dispatcher.destroy();
 			});
 		} finally {
@@ -190,7 +214,7 @@ describe("a refusal above the read", () => {
 	}, 30000);
 
 	// The RPC leg builds its own dispatcher and takes no seam for one, so this case cannot
-	// bound the pool the way the delivery cases do. Liveness is the whole signal here.
+	// bound the pool the way the last case does. The server-side close is the whole signal.
 	it("does not strand the socket behind a refused coding on the RPC leg", async () => {
 		const [server, base, sockets] = await serving(() => ({
 			status: 200,
@@ -211,12 +235,11 @@ describe("a refusal above the read", () => {
 				const failure = await send(req).catch((e: unknown) => e);
 				expect(failure).toBeInstanceOf(Error);
 			}
-			await settle();
 			expect(
-				sockets.closed(),
+				await within(RELEASE_DEADLINE_MS, sockets.released()),
 				"a refused coding never released its socket",
-			).toBeGreaterThanOrEqual(REFUSALS);
-			expect(sockets.live()).toBeLessThanOrEqual(IDLE_POOL_SLACK);
+			).not.toBe(WEDGED);
+			expect(sockets.served()).toBe(REFUSALS);
 		} finally {
 			server.closeAllConnections();
 			await new Promise<void>((done) => server.close(() => done()));
@@ -251,7 +274,11 @@ describe("a refusal above the read", () => {
 				expect(answer, "the refusal wedged the pool: nothing after it can dial").not.toBe(
 					WEDGED,
 				);
-				expect(sockets.closed()).toBeGreaterThanOrEqual(1);
+				expect(
+					await within(RELEASE_DEADLINE_MS, sockets.released("/refuse")),
+					"the refused redirect never released its socket",
+				).not.toBe(WEDGED);
+				expect(sockets.served("/refuse")).toBe(1);
 				dispatcher.destroy();
 			});
 		} finally {

From 3288f577911ea9b33c2b7c7b1101b02a50e4b583 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 08:03:05 -0400
Subject: [PATCH 033/164] Add document readers and a public strict check to the
 Go SDK

A conformance harness has to read the documents the protocol defines and
check what a party publishes. The resolvers read those documents only to
route and verify, and leniently, so a harness had to re-implement the
fetch, the strict check and the parse.

helpers.CheckStrict(name, payload) checks the proto-JSON of any fora.v1 or
fora.admin.v1 message: no unknown field at any depth, every member under
its proto field name, no 32-bit number or bool written as a string, and
the field-level and cross-field rules through protovalidate. Those are the
verdicts the Python and TypeScript SDKs reach with the published strict
JSON Schema and their cross-field rules. A refusal wraps the new
helpers.ErrStrictViolation. helpers.CheckStrictMessage is the same check
on a decoded message. It moves out of package connect, and the client's
strict decoding of a binary answer, of every binary ErrorDetail value and
of every debug projection now calls it, so one check serves all of them.

resolvers.ReadManifest, ReadWBADirectory, ReadRevocationList and
ReadLicenseDocument fetch through NewGuardedClientFromEnv unless
ReadOptions.Client replaces it, so the SSRF and scheme guards apply. The
manifest must be served as application/json and the WBA directory as
application/jwk-set+json (ErrMediaTypeRefused). The manifest's ver is
read first. Every document must pass CheckStrict. Each reader returns a
Document: the parsed message, the URL, the bytes and the media type. The
license reader checks the License, fetches its uri and verifies the bytes
against uri_digest, returning a LicenseDocument or ErrDigestMismatch. A
failed fetch, a non-200 answer, a body that is not JSON and a body over
1 MiB wrap ErrDirectoryUnavailable, whose text is now "resolvers:
document unavailable".

The readers and the resolvers share one GET, fetchDocument, which refuses
a body over the cap instead of truncating it. fetchWellKnownDoc (the key,
endpoint and requirements faces), the WBA directory read and the
revocation refresh now go through it. They keep their lenient decode, but
a manifest fetch failure now wraps ErrDirectoryUnavailable, and a
manifest with data after its JSON value is refused, as Python and
TypeScript refuse it.

Two new corpora, emitted by running the readers' pure checks:
document-check-vectors.json gives the verdict for a document's bytes and
Content-Type, and license-digest-vectors.json whether the bytes match
uri_digest. Integration tests drive each reader against an in-process
server through the guarded client.
---
 sdk/go/connect/strict.go                      |  55 +--
 sdk/go/connect/strict_envelope.go             |   6 +-
 sdk/go/helpers/strict.go                      | 185 +++++++++
 sdk/go/helpers/strict_test.go                 |  39 ++
 sdk/go/resolvers/documents.go                 | 365 ++++++++++++++++++
 sdk/go/resolvers/documents_test.go            | 227 +++++++++++
 sdk/go/resolvers/endpointresolver.go          |  26 +-
 .../gen_document_check_vectors_test.go        | 230 +++++++++++
 .../testdata/document-check-vectors.json      | 271 +++++++++++++
 .../testdata/license-digest-vectors.json      |  54 +++
 sdk/go/resolvers/wbakeyresolver.go            |  60 +--
 11 files changed, 1393 insertions(+), 125 deletions(-)
 create mode 100644 sdk/go/helpers/strict.go
 create mode 100644 sdk/go/helpers/strict_test.go
 create mode 100644 sdk/go/resolvers/documents.go
 create mode 100644 sdk/go/resolvers/documents_test.go
 create mode 100644 sdk/go/resolvers/gen_document_check_vectors_test.go
 create mode 100644 sdk/go/resolvers/testdata/document-check-vectors.json
 create mode 100644 sdk/go/resolvers/testdata/license-digest-vectors.json

diff --git a/sdk/go/connect/strict.go b/sdk/go/connect/strict.go
index 074b6243..7f180977 100644
--- a/sdk/go/connect/strict.go
+++ b/sdk/go/connect/strict.go
@@ -3,11 +3,9 @@ package connect
 import (
 	"context"
 	"errors"
-	"fmt"
 
 	connectrpc "connectrpc.com/connect"
 	"google.golang.org/protobuf/proto"
-	"google.golang.org/protobuf/reflect/protoreflect"
 
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 )
@@ -21,9 +19,10 @@ import (
 //     unknown field is a server sending something the contract does not define;
 //   - the proto's own rules, field-level and cross-field, applied by protovalidate.
 //
-// Both checks read the compiled descriptor, the one definition of the message
-// shape the Python and TypeScript clients reach through the published strict JSON
-// Schemas and the cross-field rules.
+// Both checks are helpers.CheckStrictMessage, and read the compiled descriptor: the
+// one definition of the message shape, which the document readers and
+// helpers.CheckStrict also read, and which the Python and TypeScript clients reach
+// through the published strict JSON Schemas and the cross-field rules.
 //
 // An error answer is checked too, from the bytes that arrived: the Connect error
 // envelope (its members, a known Connect code, well-formed details) and every
@@ -72,7 +71,7 @@ func (strictInterceptor) WrapUnary(next connectrpc.UnaryFunc) connectrpc.UnaryFu
 		if !ok {
 			return resp, nil
 		}
-		if err := checkStrict(msg); err != nil {
+		if err := helpers.CheckStrictMessage(msg); err != nil {
 			return nil, &strictDecodeError{err: err}
 		}
 		return resp, nil
@@ -105,47 +104,3 @@ func (strictInterceptor) WrapStreamingClient(next connectrpc.StreamingClientFunc
 func (strictInterceptor) WrapStreamingHandler(next connectrpc.StreamingHandlerFunc) connectrpc.StreamingHandlerFunc {
 	return next
 }
-
-// checkStrict refuses msg if it carries an unknown field anywhere, or fails its
-// protovalidate rules.
-func checkStrict(msg proto.Message) error {
-	if path := unknownFieldPath(msg.ProtoReflect(), string(msg.ProtoReflect().Descriptor().FullName())); path != "" {
-		return fmt.Errorf("answer carries a field the contract does not define, in %s", path)
-	}
-	if err := helpers.Validate(msg); err != nil {
-		return fmt.Errorf("answer breaks a rule of its message: %w", err)
-	}
-	return nil
-}
-
-// unknownFieldPath returns the path of the first message holding unknown fields, or
-// "" when there is none. Every populated message is visited: singular, repeated and
-// map values alike.
-func unknownFieldPath(m protoreflect.Message, path string) string {
-	if len(m.GetUnknown()) > 0 {
-		return path
-	}
-	found := ""
-	m.Range(func(fd protoreflect.FieldDescriptor, v protoreflect.Value) bool {
-		here := path + "." + string(fd.Name())
-		switch {
-		case fd.IsMap():
-			if fd.MapValue().Kind() == protoreflect.MessageKind {
-				v.Map().Range(func(k protoreflect.MapKey, mv protoreflect.Value) bool {
-					found = unknownFieldPath(mv.Message(), fmt.Sprintf("%s[%v]", here, k.Interface()))
-					return found == ""
-				})
-			}
-		case fd.IsList():
-			if fd.Kind() == protoreflect.MessageKind {
-				for i := 0; i < v.List().Len() && found == ""; i++ {
-					found = unknownFieldPath(v.List().Get(i).Message(), fmt.Sprintf("%s[%d]", here, i))
-				}
-			}
-		case fd.Kind() == protoreflect.MessageKind:
-			found = unknownFieldPath(v.Message(), here)
-		}
-		return found == ""
-	})
-	return found
-}
diff --git a/sdk/go/connect/strict_envelope.go b/sdk/go/connect/strict_envelope.go
index b317bea2..a2cd465e 100644
--- a/sdk/go/connect/strict_envelope.go
+++ b/sdk/go/connect/strict_envelope.go
@@ -232,7 +232,7 @@ func checkDetailEntry(i int, raw json.RawMessage) error {
 		if err := proto.Unmarshal(value, msg); err != nil {
 			return fmt.Errorf("details[%d].value does not decode as %s: %w", i, errorDetailType, err)
 		}
-		if err := checkStrict(msg); err != nil {
+		if err := helpers.CheckStrictMessage(msg); err != nil {
 			return fmt.Errorf("details[%d].value: %w", i, err)
 		}
 	}
@@ -254,8 +254,8 @@ func checkDebugProjection(raw json.RawMessage) error {
 	if err := protojson.Unmarshal(raw, msg); err != nil {
 		return fmt.Errorf("projection is not a %s the contract defines: %w", errorDetailType, err)
 	}
-	if err := helpers.Validate(msg); err != nil {
-		return fmt.Errorf("projection breaks a rule of its message: %w", err)
+	if err := helpers.CheckStrictMessage(msg); err != nil {
+		return fmt.Errorf("projection: %w", err)
 	}
 	return nil
 }
diff --git a/sdk/go/helpers/strict.go b/sdk/go/helpers/strict.go
new file mode 100644
index 00000000..3f3d67ad
--- /dev/null
+++ b/sdk/go/helpers/strict.go
@@ -0,0 +1,185 @@
+package helpers
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"maps"
+	"slices"
+	"strings"
+
+	"google.golang.org/protobuf/encoding/protojson"
+	"google.golang.org/protobuf/proto"
+	"google.golang.org/protobuf/reflect/protoreflect"
+	"google.golang.org/protobuf/reflect/protoregistry"
+
+	// Registers the fora.admin.v1 messages, so CheckStrict resolves them by name the
+	// way it resolves fora.v1, which this package already imports.
+	_ "github.com/FORA-Protocol/protocol/gen/go/fora/admin/v1"
+)
+
+// ErrStrictViolation is wrapped by every refusal CheckStrict and CheckStrictMessage
+// return: a message carrying a field the contract does not define, a value written
+// in a form the canonical proto-JSON does not use, or a broken field-level or
+// cross-field rule. Peer of Python StrictViolationError and TypeScript
+// StrictViolation.
+var ErrStrictViolation = errors.New("helpers: message refused by the strict contract")
+
+// CheckStrict refuses payload, the proto-JSON of the message name (for example
+// "fora.v1.WellKnownManifest"), unless the strict contract accepts it. It is the
+// check a conformance harness runs on a document or an answer it read itself, and
+// the one the document readers in package resolvers run.
+//
+// The checks are the ones the Python and TypeScript SDKs make against the
+// published strict JSON Schema of the message and the cross-field rules, so one
+// payload gets one verdict in all three:
+//
+//   - no member the message does not define, at any depth;
+//   - every member under its proto field name. protojson also reads the
+//     lowerCamelCase json_name, and the FORA wire does not use it;
+//   - a 32-bit integer, a float, a double and a bool as a JSON number or boolean,
+//     never as a string. protojson reads those strings, and no FORA sender writes
+//     them. A 64-bit integer may be either, as canonical proto-JSON writes it;
+//   - the message's field-level and cross-field rules, applied by protovalidate.
+//
+// A null member reads as absent, as proto-JSON reads it. A refusal wraps
+// ErrStrictViolation. A name no registered message has, or a payload that is not
+// JSON, is an error that does not: it says nothing about the payload's contract.
+func CheckStrict(name string, payload []byte) error {
+	mt, err := protoregistry.GlobalTypes.FindMessageByName(protoreflect.FullName(name))
+	if err != nil {
+		return fmt.Errorf("helpers: check strict: no message named %q: %w", name, err)
+	}
+	dec := json.NewDecoder(bytes.NewReader(payload))
+	dec.UseNumber()
+	var value any
+	if err := dec.Decode(&value); err != nil || dec.More() {
+		return fmt.Errorf("helpers: check strict: payload is not JSON")
+	}
+	msg := mt.New().Interface()
+	if err := protojson.Unmarshal(payload, msg); err != nil {
+		return fmt.Errorf("%w: %s: %v", ErrStrictViolation, name, err)
+	}
+	if where := spellingViolation(mt.Descriptor(), value, ""); where != "" {
+		return fmt.Errorf("%w: %s: %s", ErrStrictViolation, name, where)
+	}
+	return CheckStrictMessage(msg)
+}
+
+// CheckStrictMessage refuses a decoded message that carries a field the contract
+// does not define, at any depth, or breaks one of its field-level or cross-field
+// rules. The binary decode keeps a field this SDK does not know as unknown bytes
+// and moves on, which is right for a reader that must accept a newer protocol
+// version and wrong for a conformance check. A refusal wraps ErrStrictViolation.
+//
+// It is the second half of CheckStrict, and the whole of the check the client's
+// strict decoding makes on a binary answer and on every ErrorDetail an error
+// envelope carries: the shape is the compiled descriptor, read in one place.
+func CheckStrictMessage(msg proto.Message) error {
+	m := msg.ProtoReflect()
+	if path := unknownFieldPath(m, string(m.Descriptor().FullName())); path != "" {
+		return fmt.Errorf("%w: carries a field the contract does not define, in %s", ErrStrictViolation, path)
+	}
+	if err := Validate(msg); err != nil {
+		return fmt.Errorf("%w: breaks a rule of its message: %w", ErrStrictViolation, err)
+	}
+	return nil
+}
+
+// unknownFieldPath returns the path of the first message holding unknown fields, or
+// "" when there is none. Every populated message is visited: singular, repeated and
+// map values alike.
+func unknownFieldPath(m protoreflect.Message, path string) string {
+	if len(m.GetUnknown()) > 0 {
+		return path
+	}
+	found := ""
+	m.Range(func(fd protoreflect.FieldDescriptor, v protoreflect.Value) bool {
+		here := path + "." + string(fd.Name())
+		switch {
+		case fd.IsMap():
+			if fd.MapValue().Kind() == protoreflect.MessageKind {
+				v.Map().Range(func(k protoreflect.MapKey, mv protoreflect.Value) bool {
+					found = unknownFieldPath(mv.Message(), fmt.Sprintf("%s[%v]", here, k.Interface()))
+					return found == ""
+				})
+			}
+		case fd.IsList():
+			if fd.Kind() == protoreflect.MessageKind {
+				for i := 0; i < v.List().Len() && found == ""; i++ {
+					found = unknownFieldPath(v.List().Get(i).Message(), fmt.Sprintf("%s[%d]", here, i))
+				}
+			}
+		case fd.Kind() == protoreflect.MessageKind:
+			found = unknownFieldPath(v.Message(), here)
+		}
+		return found == ""
+	})
+	return found
+}
+
+// spellingViolation returns where value, already accepted by protojson as a md
+// message, uses a spelling the canonical proto-JSON does not: a member named by its
+// json_name, or a 32-bit number or a bool written as a string. "" when there is
+// none. Members are visited in sorted order, so the first one reported is stable.
+func spellingViolation(md protoreflect.MessageDescriptor, value any, path string) string {
+	obj, ok := value.(map[string]any)
+	if !ok || strings.HasPrefix(string(md.FullName()), "google.protobuf.") {
+		return ""
+	}
+	fields := md.Fields()
+	for _, key := range slices.Sorted(maps.Keys(obj)) {
+		here := path + "/" + key
+		fd := fields.ByName(protoreflect.Name(key))
+		if fd == nil {
+			if alt := fields.ByJSONName(key); alt != nil {
+				return fmt.Sprintf("at %s: the json_name of %q, which the FORA wire does not use", here, alt.Name())
+			}
+			continue // an unknown member: protojson has already refused it
+		}
+		if where := fieldSpelling(fd, obj[key], here); where != "" {
+			return where
+		}
+	}
+	return ""
+}
+
+func fieldSpelling(fd protoreflect.FieldDescriptor, value any, path string) string {
+	switch {
+	case value == nil:
+		return ""
+	case fd.IsMap():
+		obj, _ := value.(map[string]any)
+		for _, key := range slices.Sorted(maps.Keys(obj)) {
+			if where := valueSpelling(fd.MapValue(), obj[key], path+"/"+key); where != "" {
+				return where
+			}
+		}
+	case fd.IsList():
+		items, _ := value.([]any)
+		for i, item := range items {
+			if where := valueSpelling(fd, item, fmt.Sprintf("%s/%d", path, i)); where != "" {
+				return where
+			}
+		}
+	default:
+		return valueSpelling(fd, value, path)
+	}
+	return ""
+}
+
+func valueSpelling(fd protoreflect.FieldDescriptor, value any, path string) string {
+	switch fd.Kind() {
+	case protoreflect.MessageKind, protoreflect.GroupKind:
+		return spellingViolation(fd.Message(), value, path)
+	case protoreflect.Int32Kind, protoreflect.Sint32Kind, protoreflect.Sfixed32Kind,
+		protoreflect.Uint32Kind, protoreflect.Fixed32Kind,
+		protoreflect.FloatKind, protoreflect.DoubleKind, protoreflect.BoolKind:
+		if _, isString := value.(string); isString {
+			return fmt.Sprintf("at %s: a %s written as a string", path, fd.Kind())
+		}
+	default:
+	}
+	return ""
+}
diff --git a/sdk/go/helpers/strict_test.go b/sdk/go/helpers/strict_test.go
new file mode 100644
index 00000000..fe6d05ae
--- /dev/null
+++ b/sdk/go/helpers/strict_test.go
@@ -0,0 +1,39 @@
+package helpers_test
+
+import (
+	"errors"
+	"testing"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// CheckStrict is the public face of the strict contract. The document-check corpus
+// pins its verdicts against the Python and TypeScript checks through the readers;
+// this pins the arms only the public call has: a message resolved by name in either
+// package, and the two inputs that say nothing about a contract.
+func TestCheckStrict(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		name, message, payload string
+		strict, ok             bool
+	}{
+		{"accepted", "fora.v1.KeyRevocationList", `{"as_of":"2026-05-01T12:00:00Z","revoked":[]}`, false, true},
+		{"admin package resolved", "fora.admin.v1.SetTenantFeeRateResponse", `{}`, true, false},
+		{"null reads as absent", "fora.v1.WellKnownManifest", `{"role":"ROLE_EXCHANGE","endpoint":null}`, false, true},
+		{"unknown member", "fora.v1.KeyRevocationList", `{"revokedd":[]}`, true, false},
+		{"json_name spelling", "fora.v1.WellKnownManifest", `{"role":"ROLE_EXCHANGE","termsUri":"x"}`, true, false},
+		{"bool as string", "fora.v1.License", `{"immutable":"true"}`, true, false},
+		{"cross-field rule", "fora.v1.License", `{"uri":"https://publisher.example/terms"}`, true, false},
+		{"no such message", "fora.v1.NoSuchMessage", `{}`, false, false},
+		{"not JSON", "fora.v1.License", `{"uri":`, false, false},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+			err := helpers.CheckStrict(tc.message, []byte(tc.payload))
+			if (err == nil) != tc.ok || errors.Is(err, helpers.ErrStrictViolation) != tc.strict {
+				t.Fatalf("CheckStrict(%s, %s) = %v", tc.message, tc.payload, err)
+			}
+		})
+	}
+}
diff --git a/sdk/go/resolvers/documents.go b/sdk/go/resolvers/documents.go
new file mode 100644
index 00000000..3d4f83b2
--- /dev/null
+++ b/sdk/go/resolvers/documents.go
@@ -0,0 +1,365 @@
+package resolvers
+
+import (
+	"context"
+	"crypto/sha256"
+	"crypto/sha512"
+	"crypto/subtle"
+	"encoding/hex"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"hash"
+	"io"
+	"net/http"
+	"strings"
+	"unicode/utf8"
+
+	"google.golang.org/protobuf/encoding/protojson"
+	"google.golang.org/protobuf/proto"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// The documents the protocol defines are served over plain HTTPS rather than
+// answered over RPC: the well-known manifest (/.well-known/fora.json), the WBA key
+// directory, the key revocation list a directory points to, and the license
+// document a License.uri names. This file is the one place each of them is
+// fetched and decoded.
+//
+// Two faces read them, and they share everything up to the decision of how strict
+// to be. The public readers (ReadManifest, ReadWBADirectory, ReadRevocationList,
+// ReadLicenseDocument) check what a party publishes: the media type, the strict
+// contract of the message and, for a license document, the digest. The resolvers
+// read the same documents to route and to verify, and skip those checks: a reader
+// that must accept a newer protocol version cannot refuse a field it does not know.
+
+// ManifestMediaType is the media type /.well-known/fora.json is served under.
+const ManifestMediaType = "application/json"
+
+// WBADirectoryMediaType is the media type the WBA key directory is served under: a
+// JWK Set (RFC 7517 §8.5.2).
+const WBADirectoryMediaType = "application/jwk-set+json"
+
+// ErrMediaTypeRefused is returned by a document reader when a document is served
+// under a media type other than the one the protocol names for it. A verdict on
+// what the party publishes, never worth retrying. The resolvers that read the same
+// documents for routing and key resolution do not check the label. Peer of Python
+// MediaTypeRefusedError and TypeScript MediaTypeRefused.
+var ErrMediaTypeRefused = errors.New("resolvers: document served under a media type the protocol does not name for it")
+
+// ErrDigestMismatch is returned by ReadLicenseDocument when the bytes served at
+// License.uri do not hash to License.uri_digest. The digest is covered by the
+// offer signature, so a mismatch means the document changed after the offer was
+// signed, or the server answering is not the one the offer named. Peer of Python
+// DigestMismatchError and TypeScript DigestMismatch.
+var ErrDigestMismatch = errors.New("resolvers: license document does not match its uri_digest")
+
+// maxDocumentFetch bounds one document read whatever client was injected: a
+// ReadOptions.Client may carry no timeout at all. The manifest resolvers' ceiling.
+const maxDocumentFetch = maxManifestFetch
+
+// Document is one document a reader fetched and accepted.
+type Document[M proto.Message] struct {
+	// Message is the parsed generated message.
+	Message M
+	// MediaType is the Content-Type essence the document was served under,
+	// lowercased and without parameters. For the manifest and the WBA directory it
+	// is the media type the protocol names, since anything else is refused; for a
+	// revocation list, which the protocol names none for, it is whatever was
+	// served, or "".
+	MediaType string
+	// URL is the URL that was fetched.
+	URL string
+	// Body is the bytes as served.
+	Body []byte
+}
+
+// LicenseDocument is the document a License.uri names, verified against
+// License.uri_digest.
+type LicenseDocument struct {
+	// Body is the bytes as served.
+	Body []byte
+	// Digest is the digest of Body in "method:hexdigest" form. Equal to the
+	// license's uri_digest, since anything else is refused.
+	Digest string
+	// MediaType is the Content-Type essence the document was served under, or "".
+	// The protocol names no media type for a license document, so it is not checked.
+	MediaType string
+	// URL is the URL that was fetched.
+	URL string
+}
+
+// ReadOptions configures a document reader. The zero value reads over https
+// through the SDK's guarded client.
+type ReadOptions struct {
+	// Client dials the document. Nil builds NewGuardedClientFromEnv: the dial-time
+	// SSRF guard refuses loopback, private and metadata addresses and the scheme
+	// guard refuses anything but https, relaxed only by the SKIP_SSRF and
+	// ALLOW_INSECURE flags.
+	Client *http.Client
+	// Scheme is used when a reader builds the URL from a domain. "" means https.
+	Scheme string
+}
+
+func (o ReadOptions) client() *http.Client {
+	if o.Client != nil {
+		return o.Client
+	}
+	return NewGuardedClientFromEnv()
+}
+
+func (o ReadOptions) scheme() string {
+	if o.Scheme != "" {
+		return o.Scheme
+	}
+	return "https"
+}
+
+// ReadManifest fetches and checks domain's /.well-known/fora.json.
+//
+// The checks run in the order the contract reads the document: the media type
+// must be application/json; the body must be JSON; ver must carry a recognised
+// major version before any other member is read; and the whole document must pass
+// helpers.CheckStrict as a WellKnownManifest.
+//
+// A domain that is not a bare host (a port is allowed) wraps
+// helpers.ErrInvalidHost and is refused before anything is dialled. Otherwise a
+// failure wraps ErrDirectoryUnavailable (the fetch failed, or the body is not
+// JSON), ErrMediaTypeRefused, ErrManifestVersionRefused, or
+// helpers.ErrStrictViolation.
+func ReadManifest(ctx context.Context, domain string, opts ReadOptions) (*Document[*forav1.WellKnownManifest], error) {
+	if bare, err := helpers.IsBareHost(domain); err != nil || !bare {
+		return nil, fmt.Errorf("resolvers: read manifest: %w: %q is not a bare host", helpers.ErrInvalidHost, domain)
+	}
+	f, err := fetchDocument(ctx, opts.client(), opts.scheme()+"://"+domain+helpers.WellKnownPath)
+	if err != nil {
+		return nil, err
+	}
+	return acceptDocument(manifestKind, f, &forav1.WellKnownManifest{})
+}
+
+// ReadWBADirectory fetches and checks a WBA key directory. urlOrDomain is the
+// directory's full URL, or a bare host whose directory is read from
+// scheme://host/.well-known/http-message-signatures-directory.
+//
+// The media type must be application/jwk-set+json, and the body must pass
+// helpers.CheckStrict as a WBAFile. Key validity windows and revocation are not
+// evaluated: that is WBAKeyResolver's job, and a directory listing an expired key
+// is still a well-formed directory. A failure wraps helpers.ErrInvalidHost,
+// ErrDirectoryUnavailable, ErrMediaTypeRefused, or helpers.ErrStrictViolation.
+func ReadWBADirectory(ctx context.Context, urlOrDomain string, opts ReadOptions) (*Document[*forav1.WBAFile], error) {
+	url := urlOrDomain
+	if !strings.Contains(urlOrDomain, "://") {
+		if bare, err := helpers.IsBareHost(urlOrDomain); err != nil || !bare {
+			return nil, fmt.Errorf("resolvers: read WBA directory: %w: %q is neither a URL nor a bare host",
+				helpers.ErrInvalidHost, urlOrDomain)
+		}
+		url = WBADirectoryURL(opts.scheme(), urlOrDomain)
+	}
+	f, err := fetchDocument(ctx, opts.client(), url)
+	if err != nil {
+		return nil, err
+	}
+	return acceptDocument(wbaDirectoryKind, f, &forav1.WBAFile{})
+}
+
+// ReadRevocationList fetches and checks the key revocation list at url, a
+// directory's revocation_url. The protocol names no media type for this document,
+// so the label is reported and not checked. The body must pass helpers.CheckStrict
+// as a KeyRevocationList. Whether url is anchored to the directory's host is the
+// caller's question: WBAKeyResolver skips a list that is not. A failure wraps
+// ErrDirectoryUnavailable or helpers.ErrStrictViolation.
+func ReadRevocationList(ctx context.Context, url string, opts ReadOptions) (*Document[*forav1.KeyRevocationList], error) {
+	f, err := fetchDocument(ctx, opts.client(), url)
+	if err != nil {
+		return nil, err
+	}
+	return acceptDocument(revocationListKind, f, &forav1.KeyRevocationList{})
+}
+
+// ReadLicenseDocument fetches the document license.uri names and verifies it
+// against license.uri_digest.
+//
+// The license itself is checked first, with helpers.CheckStrictMessage, so a uri
+// without a digest, or a digest whose method is not sha256, sha384 or sha512, is
+// refused before anything is dialled. The fetched bytes are then hashed with the
+// digest's method and compared with it. The protocol names no media type for a
+// license document, so the label is reported and not checked. A uri with a scheme
+// other than https, such as a data-labels identifier that is not a URL, is refused
+// by the scheme guard and wraps ErrDirectoryUnavailable: it names a document, not
+// a place to fetch one.
+//
+// A license with no uri is an error that wraps none of the sentinels. Otherwise a
+// failure wraps helpers.ErrStrictViolation, ErrDirectoryUnavailable or
+// ErrDigestMismatch.
+func ReadLicenseDocument(ctx context.Context, license *forav1.License, opts ReadOptions) (*LicenseDocument, error) {
+	if license.GetUri() == "" {
+		return nil, errors.New("resolvers: read license document: the license carries no uri")
+	}
+	if err := helpers.CheckStrictMessage(license); err != nil {
+		return nil, fmt.Errorf("resolvers: read license document: fora.v1.License %w", err)
+	}
+	f, err := fetchDocument(ctx, opts.client(), license.GetUri())
+	if err != nil {
+		return nil, err
+	}
+	return verifyLicenseDigest(license.GetUriDigest(), f)
+}
+
+// fetchWBAFile GETs base+WBADirectoryPath through client and decodes the WBAFile
+// leniently: an unknown member is a newer minor version, not a reason to stop
+// verifying. Any failure wraps ErrDirectoryUnavailable. It is the one read of a
+// directory WBAKeyResolver.fetchDirectory and the domain-keyed offer-key fetcher
+// (NewWBADirectoryFetcher) share, so the two never drift.
+func fetchWBAFile(ctx context.Context, client *http.Client, base string) (*forav1.WBAFile, error) {
+	f, err := fetchDocument(ctx, client, base+WBADirectoryPath)
+	if err != nil {
+		return nil, err
+	}
+	var file forav1.WBAFile
+	if err := (protojson.UnmarshalOptions{DiscardUnknown: true}).Unmarshal(f.body, &file); err != nil {
+		return nil, fmt.Errorf("%w: decode: %w", ErrDirectoryUnavailable, err)
+	}
+	return &file, nil
+}
+
+// fetchRevocationList GETs url through client and decodes the KeyRevocationList
+// leniently. Any failure wraps ErrDirectoryUnavailable; WBAKeyResolver's revocation
+// refresh logs it and keeps the snapshot it holds.
+func fetchRevocationList(ctx context.Context, client *http.Client, url string) (*forav1.KeyRevocationList, error) {
+	f, err := fetchDocument(ctx, client, url)
+	if err != nil {
+		return nil, err
+	}
+	var list forav1.KeyRevocationList
+	if err := (protojson.UnmarshalOptions{DiscardUnknown: true}).Unmarshal(f.body, &list); err != nil {
+		return nil, fmt.Errorf("%w: decode: %w", ErrDirectoryUnavailable, err)
+	}
+	return &list, nil
+}
+
+// docKind is what the contract says about one document: its message, and the
+// media type it is served under when the protocol names one.
+type docKind struct {
+	message     string
+	mediaType   string
+	versionGate bool // ver is read before any other member (the manifest's rule)
+}
+
+var (
+	manifestKind       = docKind{message: "fora.v1.WellKnownManifest", mediaType: ManifestMediaType, versionGate: true}
+	wbaDirectoryKind   = docKind{message: "fora.v1.WBAFile", mediaType: WBADirectoryMediaType}
+	revocationListKind = docKind{message: "fora.v1.KeyRevocationList"}
+)
+
+// acceptDocument checks a fetched document as kind and decodes it into msg. The
+// checks run in the order the contract reads a document: the media type, when the
+// protocol names one; the body as JSON; for the manifest, ver before any other
+// member; then the strict contract. Pure: the document-check corpus replays it
+// with the bytes and the label it carries, so the three languages answer one
+// document with one verdict.
+func acceptDocument[M proto.Message](kind docKind, f fetchedDocument, msg M) (*Document[M], error) {
+	if kind.mediaType != "" && f.mediaType != kind.mediaType {
+		served := "no media type"
+		if f.mediaType != "" {
+			served = fmt.Sprintf("%q", f.mediaType)
+		}
+		return nil, fmt.Errorf("%w: %s was served with %s, not %q", ErrMediaTypeRefused, f.url, served, kind.mediaType)
+	}
+	if !utf8.Valid(f.body) || !json.Valid(f.body) {
+		return nil, fmt.Errorf("%w: decode %s: not JSON", ErrDirectoryUnavailable, f.url)
+	}
+	if kind.versionGate {
+		var probe struct {
+			Ver json.RawMessage `json:"ver"`
+		}
+		_ = json.Unmarshal(f.body, &probe) // a body that is not an object carries no ver
+		if err := helpers.CheckWellKnownManifestVersion(manifestVer(probe.Ver)); err != nil {
+			return nil, fmt.Errorf("resolvers: %w", err)
+		}
+	}
+	if err := helpers.CheckStrict(kind.message, f.body); err != nil {
+		return nil, fmt.Errorf("resolvers: %w", err)
+	}
+	if err := (protojson.UnmarshalOptions{DiscardUnknown: true}).Unmarshal(f.body, msg); err != nil {
+		return nil, fmt.Errorf("resolvers: %w: %s: %v", helpers.ErrStrictViolation, kind.message, err)
+	}
+	return &Document[M]{Message: msg, MediaType: f.mediaType, URL: f.url, Body: f.body}, nil
+}
+
+// verifyLicenseDigest hashes the fetched bytes with uriDigest's method and
+// compares. Pure, and replayed by the license-digest corpus. uriDigest has passed
+// the strict License check by the time a reader calls this, so its method is one
+// of the three the contract admits; a value that is not is an error.
+func verifyLicenseDigest(uriDigest string, f fetchedDocument) (*LicenseDocument, error) {
+	method, expected, _ := strings.Cut(uriDigest, ":")
+	var h hash.Hash
+	switch method {
+	case "sha256":
+		h = sha256.New()
+	case "sha384":
+		h = sha512.New384()
+	case "sha512":
+		h = sha512.New()
+	default:
+		return nil, fmt.Errorf("resolvers: uri_digest names no supported method: %q", method)
+	}
+	h.Write(f.body)
+	actual := hex.EncodeToString(h.Sum(nil))
+	if subtle.ConstantTimeCompare([]byte(actual), []byte(expected)) != 1 {
+		return nil, fmt.Errorf("%w: document at %s hashes to %s:%s, the license pins %s",
+			ErrDigestMismatch, f.url, method, actual, uriDigest)
+	}
+	return &LicenseDocument{Body: f.body, Digest: method + ":" + actual, MediaType: f.mediaType, URL: f.url}, nil
+}
+
+// fetchedDocument is one document as it was served.
+type fetchedDocument struct {
+	url       string
+	body      []byte
+	mediaType string // the Content-Type essence, lowercased; "" when absent
+}
+
+// fetchDocument GETs url through client and returns the body and its media type
+// on 200. Every failure wraps ErrDirectoryUnavailable: a transport failure, a
+// non-200 status, and a body past maxWellKnownDocBytes, which is refused rather
+// than truncated. A truncated document that happens to decode is worse than a
+// refusal, and a truncated license document would be reported as a digest
+// mismatch it is not.
+//
+// It is the one GET every document read shares: the public readers, the three
+// well-known faces through fetchWellKnownDoc, and the WBA directory and revocation
+// reads of WBAKeyResolver and NewWBADirectoryFetcher.
+func fetchDocument(ctx context.Context, client *http.Client, url string) (fetchedDocument, error) {
+	ctx, cancel := context.WithTimeout(ctx, maxDocumentFetch)
+	defer cancel()
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
+	if err != nil {
+		return fetchedDocument{}, fmt.Errorf("%w: request: %w", ErrDirectoryUnavailable, err)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		return fetchedDocument{}, fmt.Errorf("%w: fetch: %w", ErrDirectoryUnavailable, err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	if resp.StatusCode != http.StatusOK {
+		return fetchedDocument{}, fmt.Errorf("%w: status %d", ErrDirectoryUnavailable, resp.StatusCode)
+	}
+	body, err := io.ReadAll(io.LimitReader(resp.Body, maxWellKnownDocBytes+1))
+	if err != nil {
+		return fetchedDocument{}, fmt.Errorf("%w: read: %w", ErrDirectoryUnavailable, err)
+	}
+	if len(body) > maxWellKnownDocBytes {
+		return fetchedDocument{}, fmt.Errorf("%w: document exceeds the %d byte cap", ErrDirectoryUnavailable, maxWellKnownDocBytes)
+	}
+	return fetchedDocument{url: url, body: body, mediaType: mediaTypeEssence(resp.Header.Get("Content-Type"))}, nil
+}
+
+// mediaTypeEssence is the type/subtype of a Content-Type value, lowercased, with
+// its parameters dropped. "" when the header is absent.
+func mediaTypeEssence(header string) string {
+	essence, _, _ := strings.Cut(header, ";")
+	return strings.ToLower(strings.TrimSpace(essence))
+}
diff --git a/sdk/go/resolvers/documents_test.go b/sdk/go/resolvers/documents_test.go
new file mode 100644
index 00000000..eb15d0a8
--- /dev/null
+++ b/sdk/go/resolvers/documents_test.go
@@ -0,0 +1,227 @@
+package resolvers_test
+
+import (
+	"context"
+	"crypto/sha256"
+	"encoding/hex"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
+)
+
+// The document readers, driven against a real in-process origin. Each reader
+// dials through the SDK's guarded client by default, so these tests relax the
+// guards the way a sandbox does (SKIP_SSRF, ALLOW_INSECURE) rather than injecting a
+// plain client: the path under test is the default one. The verdicts on the bytes
+// themselves are pinned across the three languages by the document-check and
+// license-digest corpora; this file proves the readers reach those checks over
+// HTTP and that every failure leaves as its sentinel.
+
+const licenseText = "Licensed for retrieval-augmented answers, attribution required.\n"
+
+type served struct {
+	body        string
+	contentType string // "" sends no Content-Type
+	status      int
+}
+
+// documentOrigin serves each path's document verbatim, under the label given.
+func documentOrigin(t *testing.T, docs map[string]served) *httptest.Server {
+	t.Helper()
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		doc, ok := docs[r.URL.Path]
+		if !ok {
+			http.NotFound(w, r)
+			return
+		}
+		if doc.contentType != "" {
+			w.Header().Set("Content-Type", doc.contentType)
+		} else {
+			w.Header()["Content-Type"] = nil // suppress net/http's sniffed default
+		}
+		if doc.status != 0 {
+			w.WriteHeader(doc.status)
+		}
+		_, _ = w.Write([]byte(doc.body))
+	}))
+	t.Cleanup(srv.Close)
+	return srv
+}
+
+func sandbox(t *testing.T) {
+	t.Helper()
+	t.Setenv("SKIP_SSRF", "true")
+	t.Setenv("ALLOW_INSECURE", "true")
+}
+
+var plain = resolvers.ReadOptions{Scheme: "http"}
+
+func TestReadManifestReturnsTheManifestAndItsMediaType(t *testing.T) {
+	sandbox(t)
+	srv := documentOrigin(t, map[string]served{
+		helpers.WellKnownPath: {body: `{"ver":"1.0","role":"ROLE_EXCHANGE","endpoint":"https://exchange.example/rpc"}`, contentType: "application/json; charset=utf-8"},
+	})
+	doc, err := resolvers.ReadManifest(context.Background(), hostOf(t, srv), plain)
+	if err != nil {
+		t.Fatalf("ReadManifest: %v", err)
+	}
+	if doc.Message.GetRole() != forav1.Role_ROLE_EXCHANGE || doc.Message.GetEndpoint() != "https://exchange.example/rpc" {
+		t.Errorf("manifest = %v", doc.Message)
+	}
+	if doc.MediaType != resolvers.ManifestMediaType || doc.URL != srv.URL+helpers.WellKnownPath {
+		t.Errorf("media type %q, url %q", doc.MediaType, doc.URL)
+	}
+}
+
+func TestReadManifestRefusals(t *testing.T) {
+	cases := []struct {
+		name string
+		doc  served
+		want error
+	}{
+		{"unknown member", served{body: `{"ver":"1.0","role":"ROLE_EXCHANGE","endpoints":[]}`, contentType: "application/json"}, helpers.ErrStrictViolation},
+		{"cross-field rule", served{body: `{"ver":"1.0","role":"ROLE_EXCHANGE","terms_digest":"sha256:` + strings.Repeat("0", 64) + `"}`, contentType: "application/json"}, helpers.ErrStrictViolation},
+		{"wrong media type", served{body: `{"ver":"1.0","role":"ROLE_EXCHANGE"}`, contentType: "text/plain"}, resolvers.ErrMediaTypeRefused},
+		{"no media type", served{body: `{"ver":"1.0","role":"ROLE_EXCHANGE"}`}, resolvers.ErrMediaTypeRefused},
+		{"version read first", served{body: `{"ver":"2.0","role":"ROLE_EXCHANGE","endpoints":[]}`, contentType: "application/json"}, resolvers.ErrManifestVersionRefused},
+		{"not published", served{status: http.StatusNotFound, contentType: "application/json"}, resolvers.ErrDirectoryUnavailable},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			sandbox(t)
+			srv := documentOrigin(t, map[string]served{helpers.WellKnownPath: tc.doc})
+			doc, err := resolvers.ReadManifest(context.Background(), hostOf(t, srv), plain)
+			if !errors.Is(err, tc.want) || doc != nil {
+				t.Fatalf("ReadManifest = %v, %v; want %v", doc, err, tc.want)
+			}
+		})
+	}
+}
+
+func TestReadManifestRefusesAValueThatIsNotABareHost(t *testing.T) {
+	sandbox(t)
+	_, err := resolvers.ReadManifest(context.Background(), "exchange.example/elsewhere", plain)
+	if !errors.Is(err, helpers.ErrInvalidHost) {
+		t.Fatalf("err = %v, want ErrInvalidHost", err)
+	}
+}
+
+func TestReadManifestDialsThroughTheGuards(t *testing.T) {
+	srv := documentOrigin(t, map[string]served{
+		helpers.WellKnownPath: {body: `{"ver":"1.0","role":"ROLE_EXCHANGE"}`, contentType: "application/json"},
+	})
+	t.Run("address guard", func(t *testing.T) {
+		t.Setenv("SKIP_SSRF", "")
+		t.Setenv("ALLOW_INSECURE", "true")
+		if _, err := resolvers.ReadManifest(context.Background(), hostOf(t, srv), plain); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+			t.Fatalf("loopback read through the guarded client: %v", err)
+		}
+	})
+	t.Run("scheme guard", func(t *testing.T) {
+		t.Setenv("SKIP_SSRF", "true")
+		t.Setenv("ALLOW_INSECURE", "")
+		if _, err := resolvers.ReadManifest(context.Background(), hostOf(t, srv), plain); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+			t.Fatalf("plaintext read without ALLOW_INSECURE: %v", err)
+		}
+	})
+}
+
+const readerJWK = `{"kty":"OKP","crv":"Ed25519","use":"sig","alg":"EdDSA","x":"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo","not_before":"2026-05-01T00:00:00Z","not_after":"2027-05-01T00:00:00Z"}`
+
+func TestReadWBADirectoryByDomainAndByURL(t *testing.T) {
+	sandbox(t)
+	srv := documentOrigin(t, map[string]served{
+		resolvers.WBADirectoryPath: {body: `{"keys":[` + readerJWK + `]}`, contentType: resolvers.WBADirectoryMediaType},
+	})
+	for _, ref := range []string{hostOf(t, srv), srv.URL + resolvers.WBADirectoryPath} {
+		doc, err := resolvers.ReadWBADirectory(context.Background(), ref, plain)
+		if err != nil {
+			t.Fatalf("ReadWBADirectory(%q): %v", ref, err)
+		}
+		if len(doc.Message.GetKeys()) != 1 || doc.MediaType != resolvers.WBADirectoryMediaType {
+			t.Errorf("ReadWBADirectory(%q) = %v, %q", ref, doc.Message, doc.MediaType)
+		}
+	}
+}
+
+func TestReadWBADirectoryRefusals(t *testing.T) {
+	cases := []struct {
+		name string
+		doc  served
+		want error
+	}{
+		{"plain json", served{body: `{"keys":[` + readerJWK + `]}`, contentType: "application/json"}, resolvers.ErrMediaTypeRefused},
+		{"key carrying a kid", served{body: `{"keys":[{"kid":"k1","kty":"OKP"}]}`, contentType: resolvers.WBADirectoryMediaType}, helpers.ErrStrictViolation},
+		{"lower camel member", served{body: `{"revocationUrl":"https://agent.example/r.json"}`, contentType: resolvers.WBADirectoryMediaType}, helpers.ErrStrictViolation},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			sandbox(t)
+			srv := documentOrigin(t, map[string]served{resolvers.WBADirectoryPath: tc.doc})
+			if _, err := resolvers.ReadWBADirectory(context.Background(), hostOf(t, srv), plain); !errors.Is(err, tc.want) {
+				t.Fatalf("err = %v, want %v", err, tc.want)
+			}
+		})
+	}
+}
+
+func TestReadRevocationList(t *testing.T) {
+	sandbox(t)
+	srv := documentOrigin(t, map[string]served{
+		"/ok":      {body: `{"as_of":"2026-05-01T12:00:00Z","revoked":["tp"]}`, contentType: "text/plain"},
+		"/unknown": {body: `{"as_of":"2026-05-01T12:00:00Z","revoked":[],"next":"x"}`, contentType: "application/json"},
+		"/as-of":   {body: `{"as_of":"yesterday","revoked":[]}`, contentType: "application/json"},
+	})
+	doc, err := resolvers.ReadRevocationList(context.Background(), srv.URL+"/ok", plain)
+	if err != nil {
+		t.Fatalf("ReadRevocationList: %v", err)
+	}
+	if got := doc.Message.GetRevoked(); len(got) != 1 || got[0] != "tp" || doc.MediaType != "text/plain" {
+		t.Errorf("list = %v, media type %q", doc.Message, doc.MediaType)
+	}
+	for _, path := range []string{"/unknown", "/as-of"} {
+		if _, err := resolvers.ReadRevocationList(context.Background(), srv.URL+path, plain); !errors.Is(err, helpers.ErrStrictViolation) {
+			t.Errorf("%s: err = %v, want ErrStrictViolation", path, err)
+		}
+	}
+}
+
+func TestReadLicenseDocument(t *testing.T) {
+	sandbox(t)
+	sum := sha256.Sum256([]byte(licenseText))
+	digest := "sha256:" + hex.EncodeToString(sum[:])
+	srv := documentOrigin(t, map[string]served{
+		"/terms":   {body: licenseText, contentType: "text/plain; charset=utf-8"},
+		"/amended": {body: licenseText + "Amended after the offer was signed.\n", contentType: "text/plain"},
+	})
+	uri, digestPtr := srv.URL+"/terms", digest
+	doc, err := resolvers.ReadLicenseDocument(context.Background(), &forav1.License{Uri: &uri, UriDigest: &digestPtr}, plain)
+	if err != nil {
+		t.Fatalf("ReadLicenseDocument: %v", err)
+	}
+	if string(doc.Body) != licenseText || doc.Digest != digest || doc.MediaType != "text/plain" {
+		t.Errorf("document = %q, %q, %q", doc.Body, doc.Digest, doc.MediaType)
+	}
+
+	amended := srv.URL + "/amended"
+	if _, err := resolvers.ReadLicenseDocument(context.Background(), &forav1.License{Uri: &amended, UriDigest: &digestPtr}, plain); !errors.Is(err, resolvers.ErrDigestMismatch) {
+		t.Errorf("amended document: err = %v, want ErrDigestMismatch", err)
+	}
+	if _, err := resolvers.ReadLicenseDocument(context.Background(), &forav1.License{Uri: &uri}, plain); !errors.Is(err, helpers.ErrStrictViolation) {
+		t.Errorf("uri without digest: err = %v, want ErrStrictViolation", err)
+	}
+	tdl := "tdl:ai-terms/2026"
+	if _, err := resolvers.ReadLicenseDocument(context.Background(), &forav1.License{Uri: &tdl, UriDigest: &digestPtr}, plain); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+		t.Errorf("non-URL uri: err = %v, want ErrDirectoryUnavailable", err)
+	}
+	id := "CC-BY-4.0"
+	if _, err := resolvers.ReadLicenseDocument(context.Background(), &forav1.License{Id: &id}, plain); err == nil {
+		t.Error("a license with no uri was read")
+	}
+}
diff --git a/sdk/go/resolvers/endpointresolver.go b/sdk/go/resolvers/endpointresolver.go
index 700cb748..2d34334e 100644
--- a/sdk/go/resolvers/endpointresolver.go
+++ b/sdk/go/resolvers/endpointresolver.go
@@ -5,7 +5,6 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
-	"io"
 	"net/http"
 	"time"
 
@@ -131,26 +130,19 @@ type accountRegistration struct {
 	DataSchema json.RawMessage `json:"data_schema"`
 }
 
-// fetchWellKnownDoc GETs url and decodes the well-known manifest. It is the one
-// HTTP+decode path both resolvers share, so the request/status/decode handling
-// cannot drift between the key and endpoint faces.
+// fetchWellKnownDoc GETs url and decodes the well-known projection. It is the one
+// HTTP+decode path the key, endpoint and registration-requirements faces share, so
+// the request/status/decode handling cannot drift between them; the GET itself is
+// fetchDocument, the one every document read shares. Lenient by design: the
+// projection reads only its own members, and no media type is checked.
 func fetchWellKnownDoc(ctx context.Context, client *http.Client, url string) (*wellKnownDoc, error) {
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
+	f, err := fetchDocument(ctx, client, url)
 	if err != nil {
-		return nil, fmt.Errorf("resolvers: well-known request: %w", err)
+		return nil, fmt.Errorf("resolvers: well-known: %w", err)
 	}
-	resp, err := client.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("resolvers: well-known fetch: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("resolvers: well-known status %d", resp.StatusCode)
-	}
-	// Bound the body read so a hostile origin cannot force an unbounded decode.
 	var doc wellKnownDoc
-	if decErr := json.NewDecoder(io.LimitReader(resp.Body, maxWellKnownDocBytes)).Decode(&doc); decErr != nil {
-		return nil, fmt.Errorf("resolvers: well-known decode: %w", decErr)
+	if decErr := json.Unmarshal(f.body, &doc); decErr != nil {
+		return nil, fmt.Errorf("resolvers: well-known decode: %w: %w", ErrDirectoryUnavailable, decErr)
 	}
 	return &doc, nil
 }
diff --git a/sdk/go/resolvers/gen_document_check_vectors_test.go b/sdk/go/resolvers/gen_document_check_vectors_test.go
new file mode 100644
index 00000000..9c2b80f1
--- /dev/null
+++ b/sdk/go/resolvers/gen_document_check_vectors_test.go
@@ -0,0 +1,230 @@
+package resolvers
+
+// Golden-vector emitter for the document-check and license-digest corpora.
+//
+// The document readers (ReadManifest, ReadWBADirectory, ReadRevocationList and
+// ReadLicenseDocument, and their Python and TypeScript peers) each end in one pure
+// decision over the bytes a party served and the label it served them under. That
+// decision is where three languages could disagree about the same document: one
+// reads a media-type parameter as part of the type, one accepts the lowerCamel
+// spelling protojson also reads, one forgets that `ver` is read before anything
+// else. These corpora make the three answer the same documents with the same
+// verdict.
+//
+// document-check-vectors.json: {label, document, content_type, body, verdict}.
+// document is "manifest", "wba_directory" or "revocation_list"; content_type ""
+// means the header is absent; verdict is one of
+//
+//	ok           the document is accepted
+//	media_type   served under a media type other than the one the protocol names
+//	undecodable  the body is not JSON (a transport failure, as an unreadable answer is)
+//	version      the manifest's ver is refused, before any other member is read
+//	strict       the strict contract refuses the document
+//
+// license-digest-vectors.json: {label, body, uri_digest, verdict, digest}. verdict
+// is "ok" or "mismatch", and digest is what an accepted read reports.
+//
+// The verdicts are emitted by RUNNING acceptDocument and verifyLicenseDigest — Go
+// is the oracle, never a hand-authored table. Default `go test` asserts the
+// committed files match a fresh emit; FORA_UPDATE_VECTORS=1 rewrites them.
+
+import (
+	"crypto/sha256"
+	"crypto/sha512"
+	"encoding/hex"
+	"errors"
+	"os"
+	"path/filepath"
+	"testing"
+
+	"google.golang.org/protobuf/proto"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/internal/vectorio"
+)
+
+type documentCheckVector struct {
+	Label       string `json:"label"`
+	Document    string `json:"document"`
+	ContentType string `json:"content_type"`
+	Body        string `json:"body"`
+	Verdict     string `json:"verdict"`
+}
+
+type documentCheckCorpus struct {
+	Note    string                `json:"note"`
+	Vectors []documentCheckVector `json:"vectors"`
+}
+
+type licenseDigestVector struct {
+	Label     string `json:"label"`
+	Body      string `json:"body"`
+	URIDigest string `json:"uri_digest"`
+	Verdict   string `json:"verdict"`
+	Digest    string `json:"digest"`
+}
+
+type licenseDigestCorpus struct {
+	Note    string                `json:"note"`
+	Vectors []licenseDigestVector `json:"vectors"`
+}
+
+const (
+	manifestOK = `{"ver":"1.0","role":"ROLE_EXCHANGE","domain":"exchange.example","endpoint":"https://exchange.example/rpc"}`
+	jwkOK      = `{"kty":"OKP","crv":"Ed25519","use":"sig","alg":"EdDSA","x":"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo","not_before":"2026-05-01T00:00:00Z","not_after":"2027-05-01T00:00:00Z"}`
+	jwksType   = "application/jwk-set+json"
+	jsonType   = "application/json"
+)
+
+// documentCheckInputs are the documents the corpus pins. Each is chosen to separate
+// one decision the readers make; the comment names it where the label does not.
+func documentCheckInputs() []documentCheckVector {
+	return []documentCheckVector{
+		{Label: "manifest-ok", Document: "manifest", ContentType: jsonType, Body: manifestOK},
+		{Label: "manifest-media-type-parameter", Document: "manifest", ContentType: "application/json; charset=utf-8", Body: manifestOK},
+		{Label: "manifest-media-type-case", Document: "manifest", ContentType: "Application/JSON", Body: manifestOK},
+		{Label: "manifest-media-type-text", Document: "manifest", ContentType: "text/plain", Body: manifestOK},
+		{Label: "manifest-media-type-absent", Document: "manifest", ContentType: "", Body: manifestOK},
+		{Label: "manifest-media-type-jwk-set", Document: "manifest", ContentType: jwksType, Body: manifestOK},
+		{Label: "manifest-not-json", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0",`},
+		{Label: "manifest-trailing-data", Document: "manifest", ContentType: jsonType, Body: manifestOK + ` {}`},
+		{Label: "manifest-null-member", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_EXCHANGE","endpoint":null}`},
+		{Label: "manifest-null-inside-struct", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_EXCHANGE","ext":{"vendor":null}}`},
+		{Label: "manifest-minor-version", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.7","role":"ROLE_EXCHANGE"}`},
+		{Label: "manifest-version-absent", Document: "manifest", ContentType: jsonType, Body: `{"role":"ROLE_EXCHANGE"}`},
+		{Label: "manifest-version-major", Document: "manifest", ContentType: jsonType, Body: `{"ver":"2.0","role":"ROLE_EXCHANGE"}`},
+		{Label: "manifest-version-not-string", Document: "manifest", ContentType: jsonType, Body: `{"ver":1.0,"role":"ROLE_EXCHANGE"}`},
+		// ver is read before any other member, so the unknown member is never reached.
+		{Label: "manifest-version-before-strict", Document: "manifest", ContentType: jsonType, Body: `{"ver":"2.0","role":"ROLE_EXCHANGE","endpoints":[]}`},
+		{Label: "manifest-not-object", Document: "manifest", ContentType: jsonType, Body: `[]`},
+		{Label: "manifest-unknown-member", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_EXCHANGE","endpoints":["https://exchange.example/rpc"]}`},
+		{Label: "manifest-lower-camel-member", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_EXCHANGE","termsUri":"https://exchange.example/terms"}`},
+		{Label: "manifest-cross-field-rule", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_EXCHANGE","terms_digest":"sha256:0000000000000000000000000000000000000000000000000000000000000000"}`},
+		{Label: "manifest-int32-as-string", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_EXCHANGE","max_intermediary_hops":"3"}`},
+		{Label: "manifest-unknown-enum-name", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_NOTARY"}`},
+		{Label: "manifest-role-absent", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0"}`},
+		{Label: "manifest-unknown-member-nested", Document: "manifest", ContentType: jsonType, Body: `{"ver":"1.0","role":"ROLE_PUBLISHER","exchanges":[{"domain":"exchange.example","weight":1}]}`},
+
+		{Label: "wba-ok", Document: "wba_directory", ContentType: jwksType, Body: `{"keys":[` + jwkOK + `],"revocation_url":"https://agent.example/.well-known/fora-key-revocations.json"}`},
+		{Label: "wba-empty", Document: "wba_directory", ContentType: jwksType, Body: `{}`},
+		{Label: "wba-media-type-json", Document: "wba_directory", ContentType: jsonType, Body: `{"keys":[` + jwkOK + `]}`},
+		{Label: "wba-media-type-wba-draft", Document: "wba_directory", ContentType: "application/http-message-signatures-directory+json", Body: `{"keys":[` + jwkOK + `]}`},
+		{Label: "wba-key-with-kid", Document: "wba_directory", ContentType: jwksType, Body: `{"keys":[{"kid":"k1","kty":"OKP","crv":"Ed25519","x":"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"}]}`},
+		{Label: "wba-keys-not-array", Document: "wba_directory", ContentType: jwksType, Body: `{"keys":{}}`},
+		{Label: "wba-lower-camel-member", Document: "wba_directory", ContentType: jwksType, Body: `{"revocationUrl":"https://agent.example/revoked.json"}`},
+		{Label: "wba-not-json", Document: "wba_directory", ContentType: jwksType, Body: `keys`},
+
+		{Label: "revocation-ok", Document: "revocation_list", ContentType: jsonType, Body: `{"as_of":"2026-05-01T12:00:00Z","revoked":["NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs"]}`},
+		{Label: "revocation-any-media-type", Document: "revocation_list", ContentType: "text/plain", Body: `{"as_of":"2026-05-01T12:00:00Z","revoked":[]}`},
+		{Label: "revocation-media-type-absent", Document: "revocation_list", ContentType: "", Body: `{"revoked":[]}`},
+		{Label: "revocation-unknown-member", Document: "revocation_list", ContentType: jsonType, Body: `{"as_of":"2026-05-01T12:00:00Z","revoked":[],"next":"https://agent.example/revoked-2.json"}`},
+		{Label: "revocation-as-of-not-rfc3339", Document: "revocation_list", ContentType: jsonType, Body: `{"as_of":"yesterday","revoked":[]}`},
+		{Label: "revocation-revoked-not-strings", Document: "revocation_list", ContentType: jsonType, Body: `{"revoked":[1]}`},
+		{Label: "revocation-not-json", Document: "revocation_list", ContentType: jsonType, Body: `revoked: []`},
+	}
+}
+
+func documentCheckKind(name string) (docKind, proto.Message) {
+	switch name {
+	case "manifest":
+		return manifestKind, &forav1.WellKnownManifest{}
+	case "wba_directory":
+		return wbaDirectoryKind, &forav1.WBAFile{}
+	default:
+		return revocationListKind, &forav1.KeyRevocationList{}
+	}
+}
+
+// documentVerdict is the corpus's name for what acceptDocument answered.
+func documentVerdict(err error) string {
+	switch {
+	case err == nil:
+		return "ok"
+	case errors.Is(err, ErrMediaTypeRefused):
+		return "media_type"
+	case errors.Is(err, ErrDirectoryUnavailable):
+		return "undecodable"
+	case errors.Is(err, helpers.ErrManifestVersionRefused):
+		return "version"
+	case errors.Is(err, helpers.ErrStrictViolation):
+		return "strict"
+	default:
+		return "unclassified: " + err.Error()
+	}
+}
+
+func buildDocumentCheckCorpus() documentCheckCorpus {
+	vectors := documentCheckInputs()
+	for i := range vectors {
+		v := &vectors[i]
+		kind, msg := documentCheckKind(v.Document)
+		f := fetchedDocument{url: "https://party.example/doc", body: []byte(v.Body), mediaType: mediaTypeEssence(v.ContentType)}
+		_, err := acceptDocument(kind, f, msg)
+		v.Verdict = documentVerdict(err)
+	}
+	return documentCheckCorpus{
+		Note:    "The verdict each document reader reaches for the bytes and the Content-Type a party served, produced by the sdk/go acceptDocument oracle; py/ts replay and must match every vector",
+		Vectors: vectors,
+	}
+}
+
+func buildLicenseDigestCorpus() licenseDigestCorpus {
+	const text = "Licensed for retrieval-augmented answers, attribution required.\n"
+	s256 := sha256.Sum256([]byte(text))
+	s384 := sha512.Sum384([]byte(text))
+	s512 := sha512.Sum512([]byte(text))
+	empty := sha256.Sum256(nil)
+	vectors := []licenseDigestVector{
+		{Label: "sha256", Body: text, URIDigest: "sha256:" + hex.EncodeToString(s256[:])},
+		{Label: "sha384", Body: text, URIDigest: "sha384:" + hex.EncodeToString(s384[:])},
+		{Label: "sha512", Body: text, URIDigest: "sha512:" + hex.EncodeToString(s512[:])},
+		{Label: "empty-document", Body: "", URIDigest: "sha256:" + hex.EncodeToString(empty[:])},
+		{Label: "amended-document", Body: text + "Amended after the offer was signed.\n", URIDigest: "sha256:" + hex.EncodeToString(s256[:])},
+		{Label: "document-gone-empty", Body: "", URIDigest: "sha256:" + hex.EncodeToString(s256[:])},
+		{Label: "method-swapped", Body: text, URIDigest: "sha512:" + hex.EncodeToString(s384[:])},
+	}
+	for i := range vectors {
+		v := &vectors[i]
+		doc, err := verifyLicenseDigest(v.URIDigest, fetchedDocument{url: "https://publisher.example/terms", body: []byte(v.Body)})
+		switch {
+		case err == nil:
+			v.Verdict, v.Digest = "ok", doc.Digest
+		case errors.Is(err, ErrDigestMismatch):
+			v.Verdict = "mismatch"
+		default:
+			v.Verdict = "unclassified: " + err.Error()
+		}
+	}
+	return licenseDigestCorpus{
+		Note:    "Whether the bytes at License.uri match License.uri_digest, produced by the sdk/go verifyLicenseDigest oracle; py/ts replay and must match every vector",
+		Vectors: vectors,
+	}
+}
+
+func TestGenerateDocumentCheckVectors(t *testing.T) {
+	t.Parallel()
+	emitOrCheck(t, filepath.Join("testdata", "document-check-vectors.json"), buildDocumentCheckCorpus())
+}
+
+func TestGenerateLicenseDigestVectors(t *testing.T) {
+	t.Parallel()
+	emitOrCheck(t, filepath.Join("testdata", "license-digest-vectors.json"), buildLicenseDigestCorpus())
+}
+
+func emitOrCheck(t *testing.T, path string, corpus any) {
+	t.Helper()
+	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
+		if err := vectorio.Write(path, corpus); err != nil {
+			t.Fatalf("write %s: %v", path, err)
+		}
+		return
+	}
+	stale, err := vectorio.Stale(path, corpus)
+	if err != nil {
+		t.Fatalf("read %s: %v", path, err)
+	}
+	if stale {
+		t.Fatalf("%s is stale; re-run with FORA_UPDATE_VECTORS=1 to regenerate", path)
+	}
+}
diff --git a/sdk/go/resolvers/testdata/document-check-vectors.json b/sdk/go/resolvers/testdata/document-check-vectors.json
new file mode 100644
index 00000000..18e8631f
--- /dev/null
+++ b/sdk/go/resolvers/testdata/document-check-vectors.json
@@ -0,0 +1,271 @@
+{
+  "note": "The verdict each document reader reaches for the bytes and the Content-Type a party served, produced by the sdk/go acceptDocument oracle; py/ts replay and must match every vector",
+  "vectors": [
+    {
+      "label": "manifest-ok",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"domain\":\"exchange.example\",\"endpoint\":\"https://exchange.example/rpc\"}",
+      "verdict": "ok"
+    },
+    {
+      "label": "manifest-media-type-parameter",
+      "document": "manifest",
+      "content_type": "application/json; charset=utf-8",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"domain\":\"exchange.example\",\"endpoint\":\"https://exchange.example/rpc\"}",
+      "verdict": "ok"
+    },
+    {
+      "label": "manifest-media-type-case",
+      "document": "manifest",
+      "content_type": "Application/JSON",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"domain\":\"exchange.example\",\"endpoint\":\"https://exchange.example/rpc\"}",
+      "verdict": "ok"
+    },
+    {
+      "label": "manifest-media-type-text",
+      "document": "manifest",
+      "content_type": "text/plain",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"domain\":\"exchange.example\",\"endpoint\":\"https://exchange.example/rpc\"}",
+      "verdict": "media_type"
+    },
+    {
+      "label": "manifest-media-type-absent",
+      "document": "manifest",
+      "content_type": "",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"domain\":\"exchange.example\",\"endpoint\":\"https://exchange.example/rpc\"}",
+      "verdict": "media_type"
+    },
+    {
+      "label": "manifest-media-type-jwk-set",
+      "document": "manifest",
+      "content_type": "application/jwk-set+json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"domain\":\"exchange.example\",\"endpoint\":\"https://exchange.example/rpc\"}",
+      "verdict": "media_type"
+    },
+    {
+      "label": "manifest-not-json",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",",
+      "verdict": "undecodable"
+    },
+    {
+      "label": "manifest-trailing-data",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"domain\":\"exchange.example\",\"endpoint\":\"https://exchange.example/rpc\"} {}",
+      "verdict": "undecodable"
+    },
+    {
+      "label": "manifest-null-member",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"endpoint\":null}",
+      "verdict": "ok"
+    },
+    {
+      "label": "manifest-null-inside-struct",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"ext\":{\"vendor\":null}}",
+      "verdict": "ok"
+    },
+    {
+      "label": "manifest-minor-version",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.7\",\"role\":\"ROLE_EXCHANGE\"}",
+      "verdict": "ok"
+    },
+    {
+      "label": "manifest-version-absent",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"role\":\"ROLE_EXCHANGE\"}",
+      "verdict": "version"
+    },
+    {
+      "label": "manifest-version-major",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"2.0\",\"role\":\"ROLE_EXCHANGE\"}",
+      "verdict": "version"
+    },
+    {
+      "label": "manifest-version-not-string",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":1.0,\"role\":\"ROLE_EXCHANGE\"}",
+      "verdict": "version"
+    },
+    {
+      "label": "manifest-version-before-strict",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"2.0\",\"role\":\"ROLE_EXCHANGE\",\"endpoints\":[]}",
+      "verdict": "version"
+    },
+    {
+      "label": "manifest-not-object",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "[]",
+      "verdict": "version"
+    },
+    {
+      "label": "manifest-unknown-member",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"endpoints\":[\"https://exchange.example/rpc\"]}",
+      "verdict": "strict"
+    },
+    {
+      "label": "manifest-lower-camel-member",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"termsUri\":\"https://exchange.example/terms\"}",
+      "verdict": "strict"
+    },
+    {
+      "label": "manifest-cross-field-rule",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"terms_digest\":\"sha256:0000000000000000000000000000000000000000000000000000000000000000\"}",
+      "verdict": "strict"
+    },
+    {
+      "label": "manifest-int32-as-string",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_EXCHANGE\",\"max_intermediary_hops\":\"3\"}",
+      "verdict": "strict"
+    },
+    {
+      "label": "manifest-unknown-enum-name",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_NOTARY\"}",
+      "verdict": "strict"
+    },
+    {
+      "label": "manifest-role-absent",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\"}",
+      "verdict": "strict"
+    },
+    {
+      "label": "manifest-unknown-member-nested",
+      "document": "manifest",
+      "content_type": "application/json",
+      "body": "{\"ver\":\"1.0\",\"role\":\"ROLE_PUBLISHER\",\"exchanges\":[{\"domain\":\"exchange.example\",\"weight\":1}]}",
+      "verdict": "strict"
+    },
+    {
+      "label": "wba-ok",
+      "document": "wba_directory",
+      "content_type": "application/jwk-set+json",
+      "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"use\":\"sig\",\"alg\":\"EdDSA\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\"not_before\":\"2026-05-01T00:00:00Z\",\"not_after\":\"2027-05-01T00:00:00Z\"}],\"revocation_url\":\"https://agent.example/.well-known/fora-key-revocations.json\"}",
+      "verdict": "ok"
+    },
+    {
+      "label": "wba-empty",
+      "document": "wba_directory",
+      "content_type": "application/jwk-set+json",
+      "body": "{}",
+      "verdict": "ok"
+    },
+    {
+      "label": "wba-media-type-json",
+      "document": "wba_directory",
+      "content_type": "application/json",
+      "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"use\":\"sig\",\"alg\":\"EdDSA\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\"not_before\":\"2026-05-01T00:00:00Z\",\"not_after\":\"2027-05-01T00:00:00Z\"}]}",
+      "verdict": "media_type"
+    },
+    {
+      "label": "wba-media-type-wba-draft",
+      "document": "wba_directory",
+      "content_type": "application/http-message-signatures-directory+json",
+      "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"use\":\"sig\",\"alg\":\"EdDSA\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\"not_before\":\"2026-05-01T00:00:00Z\",\"not_after\":\"2027-05-01T00:00:00Z\"}]}",
+      "verdict": "media_type"
+    },
+    {
+      "label": "wba-key-with-kid",
+      "document": "wba_directory",
+      "content_type": "application/jwk-set+json",
+      "body": "{\"keys\":[{\"kid\":\"k1\",\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\"}]}",
+      "verdict": "strict"
+    },
+    {
+      "label": "wba-keys-not-array",
+      "document": "wba_directory",
+      "content_type": "application/jwk-set+json",
+      "body": "{\"keys\":{}}",
+      "verdict": "strict"
+    },
+    {
+      "label": "wba-lower-camel-member",
+      "document": "wba_directory",
+      "content_type": "application/jwk-set+json",
+      "body": "{\"revocationUrl\":\"https://agent.example/revoked.json\"}",
+      "verdict": "strict"
+    },
+    {
+      "label": "wba-not-json",
+      "document": "wba_directory",
+      "content_type": "application/jwk-set+json",
+      "body": "keys",
+      "verdict": "undecodable"
+    },
+    {
+      "label": "revocation-ok",
+      "document": "revocation_list",
+      "content_type": "application/json",
+      "body": "{\"as_of\":\"2026-05-01T12:00:00Z\",\"revoked\":[\"NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs\"]}",
+      "verdict": "ok"
+    },
+    {
+      "label": "revocation-any-media-type",
+      "document": "revocation_list",
+      "content_type": "text/plain",
+      "body": "{\"as_of\":\"2026-05-01T12:00:00Z\",\"revoked\":[]}",
+      "verdict": "ok"
+    },
+    {
+      "label": "revocation-media-type-absent",
+      "document": "revocation_list",
+      "content_type": "",
+      "body": "{\"revoked\":[]}",
+      "verdict": "ok"
+    },
+    {
+      "label": "revocation-unknown-member",
+      "document": "revocation_list",
+      "content_type": "application/json",
+      "body": "{\"as_of\":\"2026-05-01T12:00:00Z\",\"revoked\":[],\"next\":\"https://agent.example/revoked-2.json\"}",
+      "verdict": "strict"
+    },
+    {
+      "label": "revocation-as-of-not-rfc3339",
+      "document": "revocation_list",
+      "content_type": "application/json",
+      "body": "{\"as_of\":\"yesterday\",\"revoked\":[]}",
+      "verdict": "strict"
+    },
+    {
+      "label": "revocation-revoked-not-strings",
+      "document": "revocation_list",
+      "content_type": "application/json",
+      "body": "{\"revoked\":[1]}",
+      "verdict": "strict"
+    },
+    {
+      "label": "revocation-not-json",
+      "document": "revocation_list",
+      "content_type": "application/json",
+      "body": "revoked: []",
+      "verdict": "undecodable"
+    }
+  ]
+}
diff --git a/sdk/go/resolvers/testdata/license-digest-vectors.json b/sdk/go/resolvers/testdata/license-digest-vectors.json
new file mode 100644
index 00000000..afee0c77
--- /dev/null
+++ b/sdk/go/resolvers/testdata/license-digest-vectors.json
@@ -0,0 +1,54 @@
+{
+  "note": "Whether the bytes at License.uri match License.uri_digest, produced by the sdk/go verifyLicenseDigest oracle; py/ts replay and must match every vector",
+  "vectors": [
+    {
+      "label": "sha256",
+      "body": "Licensed for retrieval-augmented answers, attribution required.\n",
+      "uri_digest": "sha256:8f4096ce467271bb987a9c31ff83a56a8e237176bc8b815503aaf9b8f0589337",
+      "verdict": "ok",
+      "digest": "sha256:8f4096ce467271bb987a9c31ff83a56a8e237176bc8b815503aaf9b8f0589337"
+    },
+    {
+      "label": "sha384",
+      "body": "Licensed for retrieval-augmented answers, attribution required.\n",
+      "uri_digest": "sha384:63016fd62828c40553e813645217e6e9d1e013c1afb241b0a79c7a20efdf39fa25e03ed01e8e0e9fec3adc7c8254bc2a",
+      "verdict": "ok",
+      "digest": "sha384:63016fd62828c40553e813645217e6e9d1e013c1afb241b0a79c7a20efdf39fa25e03ed01e8e0e9fec3adc7c8254bc2a"
+    },
+    {
+      "label": "sha512",
+      "body": "Licensed for retrieval-augmented answers, attribution required.\n",
+      "uri_digest": "sha512:920436340e11505fb22e9134cdc4c88d991cce9b97c3d6fd04b33785c343b951e3164faebc00ec08035c39e0011a6521756eb0c31f23d41f5c9ef0181b965d9d",
+      "verdict": "ok",
+      "digest": "sha512:920436340e11505fb22e9134cdc4c88d991cce9b97c3d6fd04b33785c343b951e3164faebc00ec08035c39e0011a6521756eb0c31f23d41f5c9ef0181b965d9d"
+    },
+    {
+      "label": "empty-document",
+      "body": "",
+      "uri_digest": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "verdict": "ok",
+      "digest": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "label": "amended-document",
+      "body": "Licensed for retrieval-augmented answers, attribution required.\nAmended after the offer was signed.\n",
+      "uri_digest": "sha256:8f4096ce467271bb987a9c31ff83a56a8e237176bc8b815503aaf9b8f0589337",
+      "verdict": "mismatch",
+      "digest": ""
+    },
+    {
+      "label": "document-gone-empty",
+      "body": "",
+      "uri_digest": "sha256:8f4096ce467271bb987a9c31ff83a56a8e237176bc8b815503aaf9b8f0589337",
+      "verdict": "mismatch",
+      "digest": ""
+    },
+    {
+      "label": "method-swapped",
+      "body": "Licensed for retrieval-augmented answers, attribution required.\n",
+      "uri_digest": "sha512:63016fd62828c40553e813645217e6e9d1e013c1afb241b0a79c7a20efdf39fa25e03ed01e8e0e9fec3adc7c8254bc2a",
+      "verdict": "mismatch",
+      "digest": ""
+    }
+  ]
+}
diff --git a/sdk/go/resolvers/wbakeyresolver.go b/sdk/go/resolvers/wbakeyresolver.go
index f8d08c85..72fbb91a 100644
--- a/sdk/go/resolvers/wbakeyresolver.go
+++ b/sdk/go/resolvers/wbakeyresolver.go
@@ -6,7 +6,6 @@ import (
 	"encoding/base64"
 	"errors"
 	"fmt"
-	"io"
 	"log/slog"
 	"math/rand/v2"
 	"net"
@@ -20,7 +19,6 @@ import (
 	"unicode/utf8"
 
 	"golang.org/x/sync/singleflight"
-	"google.golang.org/protobuf/encoding/protojson"
 
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
@@ -46,11 +44,12 @@ var (
 	// ErrKeyExpired signals the key exists but is outside its
 	// [not_before, not_after) validity window.
 	ErrKeyExpired = errors.New("resolvers: key outside validity window")
-	// ErrDirectoryUnavailable signals the WBA directory could not be fetched or
-	// parsed. It is deliberately errors.Is-DISTINCT from ErrUnknownKey: a
+	// ErrDirectoryUnavailable signals a document could not be fetched or parsed: a
+	// WBA directory, a well-known manifest, a revocation list or a license
+	// document. It is deliberately errors.Is-DISTINCT from ErrUnknownKey: a
 	// fail-closed composite must be able to halt on a directory outage rather
 	// than fall through as if the key were merely unknown.
-	ErrDirectoryUnavailable = errors.New("resolvers: WBA directory unavailable")
+	ErrDirectoryUnavailable = errors.New("resolvers: document unavailable")
 	// ErrRevocationUnevaluated signals that the key resolved, but its directory
 	// declares a revocation_url whose snapshot has never been fetched (unreachable
 	// or not host-anchored) — so revocation was NEVER EVALUATED, which is distinct
@@ -826,49 +825,6 @@ func (r *WBAKeyResolver) fetchDirectory(ctx context.Context, base string) (*fora
 	return fetchWBAFile(ctx, r.http, base)
 }
 
-// getDoc GETs a small well-known document, bounding the body read.
-func (r *WBAKeyResolver) getDoc(ctx context.Context, docURL string) ([]byte, error) {
-	return fetchWBADoc(ctx, r.http, docURL)
-}
-
-// fetchWBAFile GETs base+WBADirectoryPath through client and protojson-decodes the
-// WBAFile, wrapping any transport/status/decode failure in ErrDirectoryUnavailable.
-// It is the one fetch+decode path shared by WBAKeyResolver.fetchDirectory and the
-// domain-keyed offer-key fetcher (NewWBADirectoryFetcher), so the two never drift.
-func fetchWBAFile(ctx context.Context, client *http.Client, base string) (*forav1.WBAFile, error) {
-	raw, err := fetchWBADoc(ctx, client, base+WBADirectoryPath)
-	if err != nil {
-		return nil, fmt.Errorf("%w: %w", ErrDirectoryUnavailable, err)
-	}
-	var f forav1.WBAFile
-	if err := (protojson.UnmarshalOptions{DiscardUnknown: true}).Unmarshal(raw, &f); err != nil {
-		return nil, fmt.Errorf("%w: decode: %w", ErrDirectoryUnavailable, err)
-	}
-	return &f, nil
-}
-
-// fetchWBADoc GETs a small well-known document through client, bounding the body read.
-func fetchWBADoc(ctx context.Context, client *http.Client, docURL string) ([]byte, error) {
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, docURL, nil)
-	if err != nil {
-		return nil, fmt.Errorf("request: %w", err)
-	}
-	resp, err := client.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("fetch: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("status %d", resp.StatusCode)
-	}
-	const maxDocBytes = 1 << 20 // 1 MiB — well-known documents are small
-	raw, err := io.ReadAll(io.LimitReader(resp.Body, maxDocBytes))
-	if err != nil {
-		return nil, fmt.Errorf("read: %w", err)
-	}
-	return raw, nil
-}
-
 func (r *WBAKeyResolver) isRevoked(host, thumbprint string) bool {
 	r.revMu.RLock()
 	defer r.revMu.RUnlock()
@@ -943,18 +899,12 @@ func (r *WBAKeyResolver) refreshRevocationFor(
 			"host", host, "base", base, "revocation_url", revURL)
 		return
 	}
-	raw, err := r.getDoc(ctx, revURL)
+	list, err := fetchRevocationList(ctx, r.http, revURL)
 	if err != nil {
 		r.logger.WarnContext(ctx, "revocation refresh failed",
 			"host", host, "revocation_url", revURL, "err", err)
 		return
 	}
-	var list forav1.KeyRevocationList
-	if err := (protojson.UnmarshalOptions{DiscardUnknown: true}).Unmarshal(raw, &list); err != nil {
-		r.logger.WarnContext(ctx, "revocation decode failed",
-			"host", host, "revocation_url", revURL, "err", err)
-		return
-	}
 	// Clamp a future as_of to now+skew so a compromised origin cannot seed a
 	// far-future baseline that permanently freezes later (legitimately earlier)
 	// snapshots under the monotonic guard below — the first-poll integrity bug.

From db0cdc9e5360dc4cbb0d7d0a34ed1293a32483e8 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 08:03:05 -0400
Subject: [PATCH 034/164] Add document readers and a public strict check to the
 Python SDK

A harness could not read a party's documents through the SDK. No public
reader returned a parsed WellKnownManifest, WBAFile or KeyRevocationList;
_get_wba_directory was private, create_wba_offer_directory_fetch turns
every failure into None, nothing fetched a License.uri against its
uri_digest, and the strict check was private to the client.

fora_sdk.strict holds the strict check that was fora_sdk.client._strict.
check_strict(message_name, payload) is public, from fora_sdk and
fora_sdk.client, and raises StrictViolationError with the message name
and the violation. The client's strict decoding of a success answer and
of every ErrorDetail in an error envelope call the same strict_violation,
so the shape is defined once.

fora_sdk.resolvers.documents adds read_manifest(domain),
read_wba_directory(url_or_domain), read_revocation_list(url) and
read_license_document(license). Each fetches through guarded_client, so
the SSRF and scheme guards apply, and returns a Document with the parsed
model, the URL, the bytes and the media type, or raises. The manifest
must be served as application/json and the directory as
application/jwk-set+json (MediaTypeRefusedError). The manifest's ver is
read first (ManifestVersionRefusedError). Every document must pass
check_strict (StrictViolationError). The license reader checks the
License, then verifies the fetched bytes against uri_digest, returning a
LicenseDocument or raising DigestMismatchError. A failed fetch is
DirectoryUnavailableError. The model names an enum by its value name, so
a document writing an enum as its number is refused here, while the Go
reader accepts it.

The endpoint resolver, the registration-requirements reader, the WBA key
resolver's directory and revocation reads and the offer-directory fetch
now read through the same fetch and decode, leniently. fetch_document
returns the body with its media type and refuses a body over 1 MiB
instead of truncating it. WBA_DIRECTORY_PATH and wba_directory_url move
to the documents module and are still exported from fora_sdk.resolvers.

proof_headers stays internal to the client: the public signer for a
delivery-fetch proof is sign_agent_binding.

Tests drive each reader against the in-process origin through the
guarded client, with valid documents, strict violations, the wrong media
type and a digest mismatch, and replay the document-check and
license-digest corpora.
---
 sdk/python/fora_sdk/__init__.py               |   3 +
 sdk/python/fora_sdk/client/__init__.py        |   3 +
 sdk/python/fora_sdk/client/_call.py           |   6 +-
 sdk/python/fora_sdk/client/_strict.py         | 131 +-----
 .../fora_sdk/client/_strict_envelope.py       |   2 +-
 sdk/python/fora_sdk/resolvers/__init__.py     |  31 +-
 sdk/python/fora_sdk/resolvers/_http.py        | 107 +++--
 sdk/python/fora_sdk/resolvers/documents.py    | 414 ++++++++++++++++++
 sdk/python/fora_sdk/resolvers/errors.py       |  25 +-
 .../fora_sdk/resolvers/offer_key_cache.py     |  13 +-
 .../resolvers/registration_requirements.py    |  27 +-
 sdk/python/fora_sdk/resolvers/wba.py          |  67 +--
 sdk/python/fora_sdk/resolvers/wellknown.py    |  11 +-
 sdk/python/fora_sdk/strict.py                 | 171 ++++++++
 sdk/python/tests/resolvers_harness.py         |  25 +-
 .../tests/test_document_check_parity.py       |  84 ++++
 sdk/python/tests/test_document_readers.py     | 303 +++++++++++++
 17 files changed, 1166 insertions(+), 257 deletions(-)
 create mode 100644 sdk/python/fora_sdk/resolvers/documents.py
 create mode 100644 sdk/python/fora_sdk/strict.py
 create mode 100644 sdk/python/tests/test_document_check_parity.py
 create mode 100644 sdk/python/tests/test_document_readers.py

diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 3b8b9f15..ef38c085 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -164,6 +164,7 @@
 from .scopes import apply_scopes, normalize_scopes, scopes_subset
 from .signedurl import sign_ed25519_signed_url, verify_ed25519_signed_url
 from .signing_transport import SignedOutbound, SigningTransport
+from .strict import StrictViolationError, check_strict
 from .thumbprint import thumbprint
 from .window import Window, clock_window, monotonic_window
 from .wire import (
@@ -252,6 +253,7 @@
     "SignedOutbound",
     "SigningTransport",
     "StaticKeyResolver",
+    "StrictViolationError",
     "TermVerdict",
     "UnknownKeyError",
     "Validation",
@@ -275,6 +277,7 @@
     "catalog_rejection_detail",
     "check_audience",
     "check_registration_data",
+    "check_strict",
     "clock_window",
     "compile_registration_schema",
     "content_digest",
diff --git a/sdk/python/fora_sdk/client/__init__.py b/sdk/python/fora_sdk/client/__init__.py
index f5b5ebfd..2e8f1308 100644
--- a/sdk/python/fora_sdk/client/__init__.py
+++ b/sdk/python/fora_sdk/client/__init__.py
@@ -32,6 +32,7 @@
 
 from fora_sdk.core import Mode
 from fora_sdk.resolvers import _ssrf, guarded_async_client, guarded_client
+from fora_sdk.strict import StrictViolationError, check_strict
 from fora_sdk.window import clock_window
 
 from . import _admin, _verbs
@@ -118,7 +119,9 @@
     "ExecuteResult",
     "RawBody",
     "RegistrationRequirementsReader",
+    "StrictViolationError",
     "Validation",
+    "check_strict",
 ]
 
 
diff --git a/sdk/python/fora_sdk/client/_call.py b/sdk/python/fora_sdk/client/_call.py
index 247fcaba..93226f60 100644
--- a/sdk/python/fora_sdk/client/_call.py
+++ b/sdk/python/fora_sdk/client/_call.py
@@ -35,7 +35,7 @@
     RequestIDHeader,
 )
 
-from ._strict import check_strict
+from ._strict import refuse_unless_strict
 from ._strict_envelope import check_strict_envelope
 from .errors import (
     NOT_CANONICAL_WIRE_NAMING,
@@ -297,7 +297,7 @@ def decode(
     connect-go emits beside it only when the value is absent.
 
     ``strict`` also refuses a success answer carrying an unknown field or breaking a
-    cross-field rule (see :func:`fora_sdk.client._strict.check_strict`), and an error
+    cross-field rule (see :func:`fora_sdk.strict.check_strict`), and an error
     answer whose envelope or ErrorDetail the contract does not accept (see
     :func:`fora_sdk.client._strict_envelope.check_strict_envelope`).
     """
@@ -346,7 +346,7 @@ def _refuse_error_answer(op: str, status: int, body: str, payload: Any, *, stric
 
 def _validate(op: str, payload: Any, model: type[BaseModel], *, strict: bool = False) -> Any:
     if strict:
-        check_strict(op, model, payload)
+        refuse_unless_strict(op, model, payload)
     try:
         return model.model_validate(payload)
     except ValidationError as exc:
diff --git a/sdk/python/fora_sdk/client/_strict.py b/sdk/python/fora_sdk/client/_strict.py
index 31e0ea21..21707645 100644
--- a/sdk/python/fora_sdk/client/_strict.py
+++ b/sdk/python/fora_sdk/client/_strict.py
@@ -1,23 +1,9 @@
 """Strict response decoding: refuse an answer the contract does not describe.
 
-The generated models are forward-compatible on purpose. They ignore a field they do not
-know, because a peer on a newer minor version may send one, and they carry only the
-field-level rules. A conformance check wants the opposite: an unknown or misspelled field
-is a finding, and so is an answer that breaks one of the cross-field rules the proto
-states. ``ClientConfig.strict`` turns that on, and this module is the whole of it.
-
-It defines no shape of its own. The unknown-field policy and the field-level rules come
-from the published strict JSON Schema of the response message
-(``wire.schemas.load(name, strict=True)``, generated from the proto), and the cross-field
-rules from :mod:`fora_sdk.crossfield`, the transcription of the proto's message-level CEL
-the SDK already ships. The schema also tells the walk below which objects are which
-message, so it never guesses.
-
-One thing is normalized first. A FORA server renders proto-JSON with unpopulated fields
-emitted, so an unset message field arrives as ``null``, and proto-JSON reads a ``null`` as
-the field's default. The schemas describe values, not that rule, so a ``null`` member of a
-message object is removed before validation — never one inside a
-``google.protobuf.Struct`` or ``Value``, where ``null`` is data.
+``ClientConfig.strict`` turns this on. The check itself is :mod:`fora_sdk.strict`, the
+one the document readers and the error-envelope check use too; this module only names
+the message a verb's generated model decodes and reports a refusal the way every other
+answer failure is reported, as a MALFORMED ``CallError``.
 """
 
 from __future__ import annotations
@@ -25,23 +11,17 @@
 from functools import cache
 from typing import TYPE_CHECKING, Any
 
-from jsonschema import Draft202012Validator
 from wire import schemas
 
-from fora_sdk.crossfield import _RULES_BY_MESSAGE, cross_field_rule_ids
+from fora_sdk.strict import strict_violation
 
 from .errors import malformed
 
 if TYPE_CHECKING:
     from pydantic import BaseModel
 
-#: The prefix a schema's ``$ref`` carries before a message's fully-qualified name.
-_DEFS_REF = "#/$defs/"
-#: The package the cross-field rules are transcribed from.
-_RULE_PACKAGE = "fora.v1."
-
 
-def check_strict(op: str, model: type[BaseModel], payload: Any) -> None:
+def refuse_unless_strict(op: str, model: type[BaseModel], payload: Any) -> None:
     """Refuse ``payload`` unless it is a ``model`` message the strict contract accepts.
 
     Raises the MALFORMED ``CallError`` naming the first failure: the path and the schema's
@@ -53,27 +33,6 @@ def check_strict(op: str, model: type[BaseModel], payload: Any) -> None:
         raise malformed(op, f"strict decoding refused the answer{problem}")
 
 
-def strict_violation(name: str, payload: Any) -> str | None:
-    """Why ``payload`` is not a ``name`` message the strict contract accepts, or ``None``.
-
-    ``name`` is the fully-qualified message name. The text starts with the location, so a
-    caller can put it after its own subject: `` at /path: <complaint>`` for the schema,
-    ``: cross-field rule(s) <ids>`` for the cross-field rules.
-    """
-    schema = schemas.load(name, strict=True)
-    normalized = _without_nulls(schema, schema, payload)
-    errors = sorted(_validator(name).iter_errors(normalized), key=lambda e: list(e.path))
-    if errors:
-        first = errors[0]
-        where = "/" + "/".join(str(p) for p in first.path)
-        return f" at {where}: {first.message}"
-    violated: list[str] = []
-    _walk(schema, schema, normalized, name, violated)
-    if violated:
-        return f": cross-field rule(s) {', '.join(violated)}"
-    return None
-
-
 @cache
 def _schema_name(model: type[BaseModel]) -> str:
     """The fully-qualified message name whose published schema decodes ``model``.
@@ -91,81 +50,3 @@ def _schema_name(model: type[BaseModel]) -> str:
         if found:
             raise LookupError(f"several published schemas match {cls.__name__}: {found}")
     raise LookupError(f"no published schema for {model.__name__}")
-
-
-@cache
-def _validator(name: str) -> Draft202012Validator:
-    return Draft202012Validator(schemas.load(name, strict=True))
-
-
-def _resolve(root: dict[str, Any], node: Any) -> tuple[dict[str, Any], str | None]:
-    """Follow a ``$ref`` into ``$defs``; return the node and the message name it names."""
-    if isinstance(node, dict) and isinstance(node.get("$ref"), str):
-        ref: str = node["$ref"]
-        if ref.startswith(_DEFS_REF):
-            name = ref[len(_DEFS_REF) :]
-            target = root.get("$defs", {}).get(name)
-            if isinstance(target, dict):
-                return target, name
-    return (node if isinstance(node, dict) else {}), None
-
-
-def _is_message(node: dict[str, Any]) -> bool:
-    """A message object: closed properties. A Struct is an open ``{"type": "object"}``."""
-    return isinstance(node.get("properties"), dict)
-
-
-def _without_nulls(root: dict[str, Any], node: Any, value: Any) -> Any:
-    """A copy of ``value`` with the ``null`` members of every message object removed."""
-    node, _ = _resolve(root, node)
-    if isinstance(value, dict):
-        if _is_message(node):
-            props: dict[str, Any] = node["properties"]
-            return {
-                k: _without_nulls(root, props.get(k, {}), v)
-                for k, v in value.items()
-                if not (v is None and _null_means_absent(root, props.get(k)))
-            }
-        extra = node.get("additionalProperties")
-        if isinstance(extra, dict):
-            return {k: _without_nulls(root, extra, v) for k, v in value.items()}
-        return value
-    if isinstance(value, list):
-        items = node.get("items", {})
-        return [_without_nulls(root, items, v) for v in value]
-    return value
-
-
-def _null_means_absent(root: dict[str, Any], prop: Any) -> bool:
-    """Whether ``null`` is the absence of this field rather than a value of it.
-
-    A field the schema does not declare is left for the validator to refuse, and a
-    ``google.protobuf.Value`` (a schema with no ``type``) admits ``null`` as data.
-    """
-    if prop is None:
-        return False
-    node, _ = _resolve(root, prop)
-    return "type" in node or "anyOf" in node or "$ref" in prop
-
-
-def _walk(
-    root: dict[str, Any], node: Any, value: Any, message: str | None, violated: list[str]
-) -> None:
-    """Apply the cross-field rules to every message object the schema identifies."""
-    node, named = _resolve(root, node)
-    message = named or message
-    if isinstance(value, dict) and _is_message(node):
-        if message is not None and message.startswith(_RULE_PACKAGE):
-            short = message[len(_RULE_PACKAGE) :]
-            if short in _RULES_BY_MESSAGE:
-                violated.extend(cross_field_rule_ids(short, value))
-        props: dict[str, Any] = node["properties"]
-        for key, child in value.items():
-            if key in props:
-                _walk(root, props[key], child, None, violated)
-    elif isinstance(value, dict) and isinstance(node.get("additionalProperties"), dict):
-        for child in value.values():
-            _walk(root, node["additionalProperties"], child, None, violated)
-    elif isinstance(value, list):
-        for child in value:
-            _walk(root, node.get("items", {}), child, None, violated)
diff --git a/sdk/python/fora_sdk/client/_strict_envelope.py b/sdk/python/fora_sdk/client/_strict_envelope.py
index 88c2a13c..7ab1bf41 100644
--- a/sdk/python/fora_sdk/client/_strict_envelope.py
+++ b/sdk/python/fora_sdk/client/_strict_envelope.py
@@ -27,8 +27,8 @@
 
 from fora_sdk._errordetail_wire import WireDecodeError, _b64decode, decode_error_detail_value
 from fora_sdk.errordetail import ERROR_DETAIL_TYPE, REASON_FIELDS, _proto_names, _TooDeepError
+from fora_sdk.strict import strict_violation
 
-from ._strict import strict_violation
 from .errors import CallError, CallErrorKind
 
 #: The members the Connect protocol defines for an error envelope and for a details entry.
diff --git a/sdk/python/fora_sdk/resolvers/__init__.py b/sdk/python/fora_sdk/resolvers/__init__.py
index ceae4fec..09a22ecb 100644
--- a/sdk/python/fora_sdk/resolvers/__init__.py
+++ b/sdk/python/fora_sdk/resolvers/__init__.py
@@ -4,8 +4,9 @@
 (which keeps its httpx-ban / IO-free guard green) in this dedicated package. Three
 fetching faces port the Go oracle — a well-known JWKS key resolver, a host-keyed
 well-known endpoint resolver, and the WBA identity-directory resolver +
-revocation poller — alongside the typed exceptions that preserve the oracle's
-errors.Is-DISTINCT fail-closed taxonomy. The static face stays in
+revocation poller — and the readers that fetch and strictly check each document
+the protocol defines (:mod:`fora_sdk.resolvers.documents`), alongside the typed
+exceptions that preserve the oracle's errors.Is-DISTINCT fail-closed taxonomy. The static face stays in
 :mod:`fora_sdk.keyresolver` (:class:`~fora_sdk.keyresolver.StaticKeyResolver`).
 """
 
@@ -18,7 +19,20 @@
     ssrf_guard,
 )
 from fora_sdk.resolvers._ssrf import SsrfError, blocked_address
+from fora_sdk.resolvers.documents import (
+    MANIFEST_MEDIA_TYPE,
+    WBA_DIRECTORY_MEDIA_TYPE,
+    WBA_DIRECTORY_PATH,
+    Document,
+    LicenseDocument,
+    read_license_document,
+    read_manifest,
+    read_revocation_list,
+    read_wba_directory,
+    wba_directory_url,
+)
 from fora_sdk.resolvers.errors import (
+    DigestMismatchError,
     DirectoryUnavailableError,
     EndpointRefusedError,
     ExchangeNotPermittedError,
@@ -27,6 +41,7 @@
     ManifestNotExchangeError,
     ManifestUnusableError,
     ManifestVersionRefusedError,
+    MediaTypeRefusedError,
     NoEndpointError,
     ResolverError,
     RevocationUnevaluatedError,
@@ -42,28 +57,32 @@
     WellKnownRequirementsReader,
 )
 from fora_sdk.resolvers.wba import (
-    WBA_DIRECTORY_PATH,
     WBAKeyResolver,
     active_ed25519_key,
     active_ed25519_key_screened,
     active_ed25519_key_with_expiry,
     active_ed25519_key_with_expiry_screened,
-    wba_directory_url,
 )
 from fora_sdk.resolvers.wellknown import WellKnownEndpointResolver, WellKnownKeyResolver
 
 __all__ = [
+    "MANIFEST_MEDIA_TYPE",
+    "WBA_DIRECTORY_MEDIA_TYPE",
     "WBA_DIRECTORY_PATH",
     "CachedOfferKeyResolver",
+    "DigestMismatchError",
     "DirectoryFetch",
     "DirectoryUnavailableError",
+    "Document",
     "EndpointRefusedError",
     "ExchangeNotPermittedError",
     "KeyExpiredError",
     "KeyRevokedError",
+    "LicenseDocument",
     "ManifestNotExchangeError",
     "ManifestUnusableError",
     "ManifestVersionRefusedError",
+    "MediaTypeRefusedError",
     "NoEndpointError",
     "RegistrationRequirements",
     "ResolverError",
@@ -83,6 +102,10 @@
     "create_wba_offer_directory_fetch",
     "guarded_async_client",
     "guarded_client",
+    "read_license_document",
+    "read_manifest",
+    "read_revocation_list",
+    "read_wba_directory",
     "ssrf_guard",
     "wba_directory_url",
 ]
diff --git a/sdk/python/fora_sdk/resolvers/_http.py b/sdk/python/fora_sdk/resolvers/_http.py
index 009f42dd..cf1e1ec0 100644
--- a/sdk/python/fora_sdk/resolvers/_http.py
+++ b/sdk/python/fora_sdk/resolvers/_http.py
@@ -37,6 +37,7 @@
 import os
 import socket
 import threading
+from dataclasses import dataclass
 from typing import Any
 
 import httpcore
@@ -323,12 +324,12 @@ def default_client() -> httpx.Client:
     )
 
 
-def _call_with_deadline(fn: Any, deadline_s: float, url: str) -> tuple[int, bytes]:
+def _call_with_deadline(fn: Any, deadline_s: float, url: str) -> _Answer:
     """Run ``fn`` under an OVERALL wall-clock budget and return its result.
 
     The blocking work (getaddrinfo + the httpx stream) runs in a DAEMON thread; if
     it has not finished within ``deadline_s`` the caller returns with a
-    ``TimeoutError`` (an ``OSError``, so it flows through fetch_strict/fetch_soft's
+    ``TimeoutError`` (an ``OSError``, so it flows through fetch_document/fetch_soft's
     transport-failure arms) and the stuck thread is abandoned — a hostile DNS /
     origin cannot pin the caller past the budget. A daemon thread never blocks
     interpreter exit, so an abandoned getaddrinfo leaks harmlessly.
@@ -349,32 +350,49 @@ def _worker() -> None:
         raise TimeoutError(f"guarded fetch exceeded {deadline_s}s budget for {url}")
     if "error" in box:
         raise box["error"]
-    result: tuple[int, bytes] = box["value"]
+    result: _Answer = box["value"]
     return result
 
 
-def _stream_bounded(client: httpx.Client, url: str) -> tuple[int, bytes]:
-    """GET ``url`` → (status, body), the body bounded to ``_MAX_DOC_BYTES``.
+@dataclass(frozen=True)
+class _Answer:
+    status: int
+    body: bytes
+    content_type: str | None
 
-    Streams so a hostile origin cannot force an unbounded read; a non-2xx returns
-    ``(status, b"")`` for the caller to classify. httpx owns redirect following
-    and status handling — a non-2xx is an ordinary response, never a crash.
+
+class _TooLargeError(OSError):
+    """A document past ``_MAX_DOC_BYTES``. An ``OSError`` so it leaves through the same
+    transport-failure arm as every other way a fetch can fail: a document the reader
+    did not read whole is a document it did not read."""
+
+
+def _stream_bounded(client: httpx.Client, url: str) -> _Answer:
+    """GET ``url``; the body bounded to ``_MAX_DOC_BYTES``.
+
+    Streams so a hostile origin cannot force an unbounded read, and REFUSES a body past
+    the cap rather than truncating it: a truncated document that happens to decode is
+    worse than a refusal, and a truncated license document would be reported as a
+    digest mismatch it is not. A non-2xx returns an empty body for the caller to
+    classify. httpx owns redirect following and status handling — a non-2xx is an
+    ordinary response, never a crash.
     """
     with client.stream("GET", url) as resp:
+        content_type = resp.headers.get("content-type")
         if resp.status_code != _HTTP_OK:
-            return resp.status_code, b""
+            return _Answer(resp.status_code, b"", content_type)
         chunks: list[bytes] = []
         total = 0
         for chunk in resp.iter_bytes():
-            chunks.append(chunk)
             total += len(chunk)
-            if total >= _MAX_DOC_BYTES:
-                break
-        return _HTTP_OK, b"".join(chunks)[:_MAX_DOC_BYTES]
+            if total > _MAX_DOC_BYTES:
+                raise _TooLargeError(f"document exceeds the {_MAX_DOC_BYTES} byte cap")
+            chunks.append(chunk)
+        return _Answer(_HTTP_OK, b"".join(chunks), content_type)
 
 
-def _get_bounded(client: httpx.Client, url: str) -> tuple[int, bytes]:
-    """GET ``url`` → (status, body) under the overall wall-clock budget.
+def _get_bounded(client: httpx.Client, url: str) -> _Answer:
+    """GET ``url`` under the overall wall-clock budget.
 
     Wraps :func:`_stream_bounded` in :func:`_call_with_deadline` so the whole GET —
     including the getaddrinfo the guarded backend runs, which httpx's per-phase
@@ -383,12 +401,32 @@ def _get_bounded(client: httpx.Client, url: str) -> tuple[int, bytes]:
     return _call_with_deadline(lambda: _stream_bounded(client, url), _TOTAL_FETCH_DEADLINE_S, url)
 
 
-def fetch_strict(client: httpx.Client, url: str) -> bytes:
-    """GET ``url``; return the body on 200, else raise DirectoryUnavailableError.
+@dataclass(frozen=True)
+class Fetched:
+    """One document as it was served: its bytes and the media type it was labelled with."""
+
+    url: str
+    body: bytes
+    #: The ``Content-Type`` essence (type/subtype), lowercased, parameters stripped.
+    #: ``None`` when the response carried none.
+    media_type: str | None
+
+
+def media_type_essence(header: str | None) -> str | None:
+    """The type/subtype of a ``Content-Type`` value, lowercased, parameters dropped."""
+    if header is None:
+        return None
+    essence = header.split(";", 1)[0].strip().lower()
+    return essence or None
+
+
+def fetch_document(client: httpx.Client, url: str) -> Fetched:
+    """GET ``url``; return the body and its media type on 200, else raise
+    DirectoryUnavailableError.
 
     A transport failure (an ``httpx.HTTPError`` — including a redirect to an
-    unsupported scheme — or an ``OSError``, which ``SsrfError`` is) or a non-200
-    status is a fail-closed halt: the taxonomy a composite relies on to
+    unsupported scheme — or an ``OSError``, which ``SsrfError`` and the over-cap refusal
+    are) or a non-200 status is a fail-closed halt: the taxonomy a composite relies on to
     distinguish an outage from an unknown key. A blocked SSRF target surfaces here
     as an outage, never a valid empty doc.
 
@@ -402,27 +440,30 @@ def fetch_strict(client: httpx.Client, url: str) -> bytes:
     that had promised to contain it.
     """
     try:
-        status, body = _get_bounded(client, url)
+        answer = _get_bounded(client, url)
     except (httpx.HTTPError, httpx.InvalidURL, OSError, ValueError) as exc:
         raise DirectoryUnavailableError(f"fetch {url}") from exc
-    if status != _HTTP_OK:
-        raise DirectoryUnavailableError(f"status {status} for {url}")
-    return body
+    if answer.status != _HTTP_OK:
+        raise DirectoryUnavailableError(f"status {answer.status} for {url}")
+    return Fetched(url=url, body=answer.body, media_type=media_type_essence(answer.content_type))
+
+
+def fetch_strict(client: httpx.Client, url: str) -> bytes:
+    """GET ``url``; return the body on 200, else raise DirectoryUnavailableError.
+
+    :func:`fetch_document` without the media type, for a reader that has no use for it.
+    """
+    return fetch_document(client, url).body
 
 
 def fetch_soft(client: httpx.Client, url: str) -> bytes | None:
     """Best-effort GET: body on 200, else None.
 
-    The revocation refresh uses this so a fetch blip leaves the prior snapshot in
-    place (a stale-but-present snapshot is safer than dropping revocations). It
-    absorbs the same set ``fetch_strict`` folds, for the same reason: the host comes
-    off untrusted input, so a name httpx cannot encode must leave a stale snapshot in
-    place rather than raise into the refresh.
+    It absorbs the same set ``fetch_document`` folds, for the same reason: the host
+    comes off untrusted input, so a name httpx cannot encode must yield None rather
+    than raise into a caller that promised to contain it.
     """
     try:
-        status, body = _get_bounded(client, url)
-    except (httpx.HTTPError, httpx.InvalidURL, OSError, ValueError):
-        return None
-    if status != _HTTP_OK:
+        return fetch_strict(client, url)
+    except DirectoryUnavailableError:
         return None
-    return body
diff --git a/sdk/python/fora_sdk/resolvers/documents.py b/sdk/python/fora_sdk/resolvers/documents.py
new file mode 100644
index 00000000..d2094d8a
--- /dev/null
+++ b/sdk/python/fora_sdk/resolvers/documents.py
@@ -0,0 +1,414 @@
+"""Reading the documents the protocol defines, as a party publishes them.
+
+Four documents are served over plain HTTPS rather than answered over RPC: the
+well-known manifest (``/.well-known/fora.json``), the WBA key directory
+(``/.well-known/http-message-signatures-directory``), the key revocation list a
+directory points to, and the license document a ``License.uri`` names. This module is
+the one place each of them is fetched and decoded.
+
+Two faces read them, and they share everything up to the decision of how strict to be.
+
+- **The public readers** (:func:`read_manifest`, :func:`read_wba_directory`,
+  :func:`read_revocation_list`, :func:`read_license_document`) check what a party
+  publishes. Each refuses a document served under the wrong media type, a body that
+  fails the published strict JSON Schema of its message or one of the cross-field
+  rules, and, for a license document, bytes that do not hash to ``uri_digest``. Each
+  returns the parsed generated model, or raises; none returns ``None``. A conformance
+  harness reads through these.
+- **The resolvers** (the endpoint resolver, the registration-requirements reader, the
+  WBA key resolver and the offer-directory fetch) read the same documents to route and
+  to verify. They call the lenient functions below, which skip the media type and the
+  strict check: a reader that must accept a newer protocol version cannot refuse a
+  field it does not know, and a deployment serving its directory as
+  ``application/json`` still has to be reachable.
+
+Every fetch goes through the SDK's guarded client by default, the same one the
+resolvers use for an address another party chose: the dial-time SSRF guard refuses
+loopback, private and metadata addresses, and the scheme guard refuses anything but
+https. ``SKIP_SSRF`` and ``ALLOW_INSECURE`` relax them for a sandbox, exactly as
+they do for every other guarded fetch. A body is capped at 1 MiB and refused, never
+truncated, past it.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import hmac
+import json
+from contextlib import nullcontext
+from dataclasses import dataclass
+from typing import TYPE_CHECKING, Any, Generic, TypeVar
+
+from pydantic import BaseModel, ValidationError
+from wire.models import KeyRevocationList, License, WBAFile, WellKnownManifest
+
+from fora_sdk._hostref import _invalid_host
+from fora_sdk.hosts import is_bare_host
+from fora_sdk.resolvers._http import Fetched, fetch_document, guarded_client
+from fora_sdk.resolvers.errors import (
+    DigestMismatchError,
+    DirectoryUnavailableError,
+    ManifestVersionRefusedError,
+    MediaTypeRefusedError,
+)
+from fora_sdk.strict import StrictViolationError, check_strict
+from fora_sdk.wire import WellKnownPath, manifest_version_refusal
+
+if TYPE_CHECKING:
+    from contextlib import AbstractContextManager
+
+    import httpx
+
+__all__ = [
+    "MANIFEST_MEDIA_TYPE",
+    "WBA_DIRECTORY_MEDIA_TYPE",
+    "WBA_DIRECTORY_PATH",
+    "Document",
+    "LicenseDocument",
+    "read_license_document",
+    "read_manifest",
+    "read_revocation_list",
+    "read_wba_directory",
+    "wba_directory_url",
+]
+
+#: The media type ``/.well-known/fora.json`` is served under.
+MANIFEST_MEDIA_TYPE = "application/json"
+#: The media type the WBA key directory is served under: a JWK Set (RFC 7517 §8.5.2).
+WBA_DIRECTORY_MEDIA_TYPE = "application/jwk-set+json"
+
+WBA_DIRECTORY_PATH = "/.well-known/http-message-signatures-directory"
+
+_MANIFEST = "fora.v1.WellKnownManifest"
+_WBA_FILE = "fora.v1.WBAFile"
+_REVOCATION_LIST = "fora.v1.KeyRevocationList"
+_LICENSE = "fora.v1.License"
+
+#: The digest methods ``License.uri_digest`` admits, and the hash each one names.
+_DIGEST_METHODS = frozenset({"sha256", "sha384", "sha512"})
+
+M = TypeVar("M", bound=BaseModel)
+
+
+@dataclass(frozen=True)
+class Document(Generic[M]):
+    """One document a reader fetched and accepted."""
+
+    #: The parsed generated model.
+    message: M
+    #: The ``Content-Type`` essence the document was served under, lowercased and
+    #: without parameters. For the manifest and the WBA directory it is the media type
+    #: the protocol names, since anything else is refused; for a revocation list,
+    #: which the protocol names none for, it is whatever was served, or ``None``.
+    media_type: str | None
+    #: The URL that was fetched.
+    url: str
+    #: The bytes as served.
+    body: bytes
+
+
+@dataclass(frozen=True)
+class LicenseDocument:
+    """The document a ``License.uri`` names, verified against ``License.uri_digest``."""
+
+    #: The bytes as served.
+    body: bytes
+    #: The digest of ``body`` in ``method:hexdigest`` form. Equal to the license's
+    #: ``uri_digest``, since anything else is refused.
+    digest: str
+    #: The ``Content-Type`` essence the document was served under, or ``None``. The
+    #: protocol names no media type for a license document, so it is not checked.
+    media_type: str | None
+    #: The URL that was fetched.
+    url: str
+
+
+def wba_directory_url(scheme: str, host: str) -> str:
+    """Build the full WBA identity-directory URL: ``scheme://host`` + the shared
+    :data:`WBA_DIRECTORY_PATH`. An empty ``scheme`` defaults to ``https``.
+
+    A PURE string function — the host arrives ALREADY-JOINED (any port-join / IPv6
+    bracketing is the caller's concern), there is NO env read (the app keeps its
+    consumer-side ``FORA_WELLKNOWN_SCHEME`` read) and NO scheme-in-host detection.
+    It mirrors the sdk/go ``WBADirectoryURL`` oracle byte-for-byte, locked by the
+    tri-replayed ``wba-url-vectors.json`` corpus.
+
+    Its callers inside the SDK are
+    :func:`~fora_sdk.resolvers.offer_key_cache.create_wba_offer_directory_fetch`, which
+    joins any port onto the host and hands the result here, and
+    :func:`read_wba_directory` when it is given a domain. :class:`WBAKeyResolver` does
+    NOT use it: that class's ``_fetch_directory`` seam receives an already-joined
+    ``base`` and appends :data:`WBA_DIRECTORY_PATH` directly, so the paths reach the same
+    URL by different routes. The tri-language corpus is what holds them to the same
+    answer.
+    """
+    if scheme == "":
+        scheme = "https"
+    return f"{scheme}://{host}{WBA_DIRECTORY_PATH}"
+
+
+def manifest_url(scheme: str, host: str) -> str:
+    """The URL of ``host``'s well-known manifest. An empty ``scheme`` means https."""
+    return f"{scheme or 'https'}://{host}{WellKnownPath}"
+
+
+# --- the shared reads: one fetch-and-decode per document ------------------------------
+
+
+def decode_manifest(fetched: Fetched) -> tuple[str, Any]:
+    """The manifest's text and its decoded JSON value.
+
+    Decoded as UTF-8 exactly once, because the registration-requirements reader slices
+    a member out of this text to compile it from the bytes as served. Invalid UTF-8 and
+    a body that is not JSON both read as an undecodable manifest, a transport failure.
+    No member is read here: each caller applies the version gate first, under its own
+    verdict.
+    """
+    try:
+        text = fetched.body.decode("utf-8")
+        return text, json.loads(text)
+    except ValueError as exc:
+        raise DirectoryUnavailableError(f"manifest decode {fetched.url}") from exc
+
+
+def fetch_manifest(http: httpx.Client, url: str) -> tuple[Fetched, str, Any]:
+    """GET a manifest and decode it, leniently: no media type, no strict check."""
+    fetched = fetch_document(http, url)
+    text, doc = decode_manifest(fetched)
+    return fetched, text, doc
+
+
+def fetch_wba_directory(http: httpx.Client, url: str) -> WBAFile:
+    """GET ``url`` and decode the body as a :class:`WBAFile`, leniently.
+
+    The resolvers' read of a directory: :meth:`WBAKeyResolver._fetch_directory` on the
+    signature-verification path and
+    :func:`~fora_sdk.resolvers.offer_key_cache.create_wba_offer_directory_fetch` on the
+    offer-key path. Go shares a single ``fetchWBAFile`` between the same two call sites
+    for the same reason, so the two paths cannot drift apart.
+
+    Every failure leaves as :class:`DirectoryUnavailableError`, which is what lets each
+    caller make its own raise-or-contain choice against ONE exception type.
+    ``fetch_document`` folds in every transport failure, every non-200, and every way the
+    URL itself can be refused — a malformed A-label and an over-long label included.
+    This adds the one arm it does not cover: a body that is not a valid directory.
+    """
+    return _parse(fetch_document(http, url), _WBA_FILE, WBAFile)
+
+
+def fetch_revocation_list(http: httpx.Client, url: str) -> KeyRevocationList:
+    """GET ``url`` and decode the body as a :class:`KeyRevocationList`, leniently.
+
+    Raises :class:`DirectoryUnavailableError` on any failure; the WBA resolver's
+    revocation refresh contains it and keeps the snapshot it holds.
+    """
+    return _parse(fetch_document(http, url), _REVOCATION_LIST, KeyRevocationList)
+
+
+# --- the checks a public reader applies ----------------------------------------------
+
+
+@dataclass(frozen=True)
+class _Kind:
+    """What the contract says about one document: its message, and the media type it is
+    served under when the protocol names one."""
+
+    message_name: str
+    model: type[BaseModel]
+    media_type: str | None
+    #: Whether ``ver`` is read before any other member (the manifest's rule).
+    version_gate: bool = False
+
+
+MANIFEST = _Kind(_MANIFEST, WellKnownManifest, MANIFEST_MEDIA_TYPE, version_gate=True)
+WBA_DIRECTORY = _Kind(_WBA_FILE, WBAFile, WBA_DIRECTORY_MEDIA_TYPE)
+REVOCATION_LIST = _Kind(_REVOCATION_LIST, KeyRevocationList, None)
+
+
+def accept(kind: _Kind, fetched: Fetched) -> Document[Any]:
+    """Check a fetched document as ``kind`` and parse it, or raise.
+
+    The checks run in the order the contract reads a document: the media type, when the
+    protocol names one; the body as JSON; for the manifest, ``ver`` before any other
+    member; then the strict schema and the cross-field rules. Pure: the document-check
+    corpus replays it with the bytes and the label it carries, so the three languages
+    answer one document with one verdict.
+    """
+    if kind.media_type is not None and fetched.media_type != kind.media_type:
+        served = "no media type" if fetched.media_type is None else repr(fetched.media_type)
+        raise MediaTypeRefusedError(
+            f"{fetched.url} was served with {served}, not {kind.media_type!r}"
+        )
+    try:
+        payload = json.loads(fetched.body.decode("utf-8"))
+    except ValueError as exc:
+        raise DirectoryUnavailableError(f"decode {fetched.url}") from exc
+    if kind.version_gate:
+        ver = payload.get("ver") if isinstance(payload, dict) else None
+        refusal = manifest_version_refusal(ver)
+        if refusal is not None:
+            raise ManifestVersionRefusedError(refusal)
+    check_strict(kind.message_name, payload)
+    try:
+        message = kind.model.model_validate_json(fetched.body)
+    except ValidationError as exc:
+        # A value the schema leaves to the parse, such as a timestamp that is not
+        # RFC 3339, is the document breaking its message all the same. The model also
+        # names an enum by its value name, so an enum written as its number, which the
+        # schema admits and the Go reader accepts, is refused here.
+        raise StrictViolationError(kind.message_name, f": {_first_error(exc)}") from exc
+    return Document(
+        message=message, media_type=fetched.media_type, url=fetched.url, body=fetched.body
+    )
+
+
+def verify_digest(uri_digest: str, fetched: Fetched) -> LicenseDocument:
+    """Hash the fetched bytes with ``uri_digest``'s method and compare, or raise.
+
+    Pure, and replayed by the license-digest corpus. ``uri_digest`` has passed the
+    strict ``License`` check by the time a reader calls this, so its method is one of
+    the three the contract admits; a value that is not raises ``ValueError``.
+    """
+    method, _, expected = uri_digest.partition(":")
+    if method not in _DIGEST_METHODS:
+        raise ValueError(f"uri_digest names no supported method: {method!r}")
+    actual = hashlib.new(method, fetched.body).hexdigest()
+    if not hmac.compare_digest(actual, expected):
+        raise DigestMismatchError(
+            f"document at {fetched.url} hashes to {method}:{actual}, the license pins {uri_digest}"
+        )
+    return LicenseDocument(
+        body=fetched.body,
+        digest=f"{method}:{actual}",
+        media_type=fetched.media_type,
+        url=fetched.url,
+    )
+
+
+# --- the public readers ---------------------------------------------------------------
+
+
+def read_manifest(
+    domain: str, *, scheme: str = "https", http: httpx.Client | None = None
+) -> Document[WellKnownManifest]:
+    """Fetch and check ``domain``'s ``/.well-known/fora.json``.
+
+    The checks run in the order the contract reads the document: the media type must be
+    ``application/json``; the body must be JSON; ``ver`` must carry a recognised major
+    version before any other member is read; and the whole document must pass the
+    strict ``WellKnownManifest`` schema and the cross-field rules.
+
+    Raises ``ValueError`` when ``domain`` is not a bare host (a port is allowed), before
+    anything is dialled; :class:`DirectoryUnavailableError` when the fetch fails or the
+    body is not JSON; :class:`MediaTypeRefusedError`;
+    :class:`ManifestVersionRefusedError`; and
+    :class:`~fora_sdk.strict.StrictViolationError`.
+
+    ``http`` defaults to :func:`~fora_sdk.resolvers.guarded_client`, built for this call
+    and closed after it. A client passed in is used as it is and left open.
+    """
+    if not is_bare_host(domain):
+        raise _invalid_host(domain, "not a bare host")
+    with _client(http) as client:
+        fetched = fetch_document(client, manifest_url(scheme, domain))
+    return accept(MANIFEST, fetched)
+
+
+def read_wba_directory(
+    url_or_domain: str, *, scheme: str = "https", http: httpx.Client | None = None
+) -> Document[WBAFile]:
+    """Fetch and check a WBA key directory.
+
+    ``url_or_domain`` is either the directory's full URL or a bare host, in which case
+    the directory is read from
+    ``scheme://host/.well-known/http-message-signatures-directory``. The media type
+    must be ``application/jwk-set+json``, and the body must pass the strict ``WBAFile``
+    schema and the cross-field rules. Key validity windows and revocation are not
+    evaluated: that is the WBA key resolver's job, and a directory listing an expired
+    key is still a well-formed directory.
+
+    Raises ``ValueError`` for a value that is neither a URL nor a bare host;
+    :class:`DirectoryUnavailableError`; :class:`MediaTypeRefusedError`; and
+    :class:`~fora_sdk.strict.StrictViolationError`. ``http`` is as for
+    :func:`read_manifest`.
+    """
+    if "://" in url_or_domain:
+        url = url_or_domain
+    elif is_bare_host(url_or_domain):
+        url = wba_directory_url(scheme, url_or_domain)
+    else:
+        raise _invalid_host(url_or_domain, "neither a URL nor a bare host")
+    with _client(http) as client:
+        fetched = fetch_document(client, url)
+    return accept(WBA_DIRECTORY, fetched)
+
+
+def read_revocation_list(
+    url: str, *, http: httpx.Client | None = None
+) -> Document[KeyRevocationList]:
+    """Fetch and check the key revocation list at ``url``, a directory's ``revocation_url``.
+
+    The protocol names no media type for this document, so the label is reported and
+    not checked. The body must pass the strict ``KeyRevocationList`` schema and the
+    cross-field rules. Whether ``url`` is anchored to the directory's host is the
+    caller's question: the WBA key resolver skips a list that is not.
+
+    Raises :class:`DirectoryUnavailableError` and
+    :class:`~fora_sdk.strict.StrictViolationError`. ``http`` is as for
+    :func:`read_manifest`.
+    """
+    with _client(http) as client:
+        fetched = fetch_document(client, url)
+    return accept(REVOCATION_LIST, fetched)
+
+
+def read_license_document(
+    license: License,  # noqa: A002 - the parameter is the protocol's License message
+    *,
+    http: httpx.Client | None = None,
+) -> LicenseDocument:
+    """Fetch the document ``license.uri`` names and verify it against ``uri_digest``.
+
+    The license itself is checked first, against the strict ``License`` schema and its
+    cross-field rules, so a ``uri`` without a digest, or a digest whose method is not
+    sha256, sha384 or sha512, is refused before anything is dialled. The fetched bytes
+    are then hashed with the digest's method and compared with it. The protocol names no
+    media type for a license document, so the label is reported and not checked.
+
+    A ``uri`` with a scheme other than https, such as a data-labels identifier that is
+    not a URL, is refused by the scheme guard and reported as
+    :class:`DirectoryUnavailableError`: it names a document, not a place to fetch one.
+
+    Raises ``ValueError`` when the license carries no ``uri``;
+    :class:`~fora_sdk.strict.StrictViolationError`; :class:`DirectoryUnavailableError`;
+    and :class:`DigestMismatchError`. ``http`` is as for :func:`read_manifest`.
+    """
+    if not license.uri:
+        raise ValueError("license carries no uri: there is no document to read")
+    check_strict(_LICENSE, license.model_dump(mode="json", exclude_none=True))
+    with _client(http) as client:
+        fetched = fetch_document(client, license.uri)
+    return verify_digest(license.uri_digest or "", fetched)
+
+
+# --- helpers --------------------------------------------------------------------------
+
+
+def _client(http: httpx.Client | None) -> AbstractContextManager[httpx.Client]:
+    """The caller's client, left open, or a guarded one closed after the read."""
+    if http is not None:
+        return nullcontext(http)
+    return guarded_client()
+
+
+def _first_error(exc: ValidationError) -> str:
+    first = exc.errors()[0]
+    where = "/" + "/".join(str(p) for p in first["loc"])
+    return f"at {where}: {first['msg']}"
+
+
+def _parse(fetched: Fetched, name: str, model: type[M]) -> M:
+    try:
+        return model.model_validate_json(fetched.body)
+    except ValidationError as exc:
+        raise DirectoryUnavailableError(f"{name} decode {fetched.url}") from exc
diff --git a/sdk/python/fora_sdk/resolvers/errors.py b/sdk/python/fora_sdk/resolvers/errors.py
index 7ce8ee83..bda5b80b 100644
--- a/sdk/python/fora_sdk/resolvers/errors.py
+++ b/sdk/python/fora_sdk/resolvers/errors.py
@@ -42,7 +42,8 @@ class RevocationUnevaluatedError(ResolverError):
 
 
 class DirectoryUnavailableError(ResolverError):
-    """A well-known directory/JWKS/manifest could not be fetched or decoded.
+    """A document could not be fetched or decoded: a well-known manifest, a WBA
+    directory or JWKS, a revocation list, or a license document.
 
     Deliberately NOT a subclass of :class:`UnknownKeyError`: a fail-closed
     composite must be able to halt on a directory outage rather than fall
@@ -128,3 +129,25 @@ class ManifestVersionRefusedError(ResolverError):
     member of the document is read, for the reason stated once on
     ``WellKnownManifest.ver`` in the proto.
     """
+
+
+class MediaTypeRefusedError(ResolverError):
+    """A document was served under a media type other than the one the protocol names
+    for it: ``application/json`` for ``/.well-known/fora.json`` and
+    ``application/jwk-set+json`` for the WBA directory.
+
+    A VERDICT on what the party publishes, not a failed read, so it is never worth
+    retrying. Only the document readers in :mod:`fora_sdk.resolvers.documents` raise
+    it; the resolvers that read the same documents for routing and key resolution do
+    not check the label. Peer of Go ``ErrMediaTypeRefused`` / TS ``MediaTypeRefused``.
+    """
+
+
+class DigestMismatchError(ResolverError):
+    """The bytes served at ``License.uri`` do not hash to ``License.uri_digest``.
+
+    The digest is covered by the offer signature, so a mismatch means the document
+    changed after the offer was signed, or the server answering is not the one the
+    offer named. A VERDICT, never retried. Peer of Go ``ErrDigestMismatch`` / TS
+    ``DigestMismatch``.
+    """
diff --git a/sdk/python/fora_sdk/resolvers/offer_key_cache.py b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
index f774d8ee..bee1acde 100644
--- a/sdk/python/fora_sdk/resolvers/offer_key_cache.py
+++ b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
@@ -29,12 +29,9 @@
 from wire.models import WBAFile
 
 from fora_sdk.resolvers._http import guarded_client
+from fora_sdk.resolvers.documents import fetch_wba_directory, wba_directory_url
 from fora_sdk.resolvers.errors import DirectoryUnavailableError
-from fora_sdk.resolvers.wba import (
-    _get_wba_directory,
-    active_ed25519_key_with_expiry_screened,
-    wba_directory_url,
-)
+from fora_sdk.resolvers.wba import active_ed25519_key_with_expiry_screened
 
 if TYPE_CHECKING:
     import httpx
@@ -224,7 +221,7 @@ def create_wba_offer_directory_fetch(
     async def fetch(domain: str) -> WBAFile | None:
         url = wba_directory_url(scheme, _join_host_port(domain, port))
         try:
-            return await asyncio.to_thread(_get_wba_directory, client, url)
+            return await asyncio.to_thread(fetch_wba_directory, client, url)
         except Exception:
             # EVERY exception, because the seam's contract is absolute: a
             # DirectoryFetch returns None and never raises, so a caller batching
@@ -233,8 +230,8 @@ async def fetch(domain: str) -> WBAFile | None:
             # Go's seam is (file, error) and returns the error for that one domain.
             #
             # DirectoryUnavailableError is the expected arrival, because
-            # _get_wba_directory is the shared GET-and-decode and it folds every arm
-            # into this error: fetch_strict maps httpx.HTTPError and OSError (SsrfError
+            # fetch_wba_directory is the shared GET-and-decode and it folds every arm
+            # into this error: fetch_document maps httpx.HTTPError and OSError (SsrfError
             # is one, so is the deadline's TimeoutError) plus any non-200, and the
             # helper adds the malformed-URL and not-a-directory arms on top. Catching a
             # list of families here is what let the docstring's "every failure" drift
diff --git a/sdk/python/fora_sdk/resolvers/registration_requirements.py b/sdk/python/fora_sdk/resolvers/registration_requirements.py
index def7c309..5632d62b 100644
--- a/sdk/python/fora_sdk/resolvers/registration_requirements.py
+++ b/sdk/python/fora_sdk/resolvers/registration_requirements.py
@@ -29,22 +29,22 @@
 
 import httpx
 
+from fora_sdk._hostref import _invalid_host
 from fora_sdk.hosts import is_bare_domain
 from fora_sdk.regschema import (
     RegistrationSchema,
     SchemaVerdict,
     compile_registration_schema,
 )
-from fora_sdk.resolvers._http import fetch_strict, guarded_client
+from fora_sdk.resolvers._http import guarded_client
+from fora_sdk.resolvers.documents import fetch_manifest, manifest_url
 from fora_sdk.resolvers.errors import (
-    DirectoryUnavailableError,
     ExchangeNotPermittedError,
     ManifestNotExchangeError,
     ManifestUnusableError,
 )
-from fora_sdk._hostref import _invalid_host
 from fora_sdk.resolvers.wellknown import AllowFn
-from fora_sdk.wire import WellKnownPath, manifest_version_refusal
+from fora_sdk.wire import manifest_version_refusal
 
 __all__ = [
     "RegistrationRequirements",
@@ -132,18 +132,13 @@ def resolve_registration_requirements(self, exchange: str) -> RegistrationRequir
             raise _invalid_host(exchange, "not a bare domain")
         if self._allow is not None and not self._allow(exchange):
             raise ExchangeNotPermittedError(f"exchange {exchange} not permitted by policy")
-        url = f"{self._scheme}://{exchange}{WellKnownPath}"
-        raw_body = fetch_strict(self._http, url)
-        try:
-            # Decoded ONCE, and the member below is sliced out of this text and
-            # re-encoded. The round trip is exact for valid UTF-8 — including a byte
-            # order mark, which the schema rules refuse and which must therefore
-            # survive to reach them — and invalid UTF-8 raises here, where it reads as
-            # an undecodable manifest rather than as a schema fault.
-            body = raw_body.decode("utf-8")
-            doc = json.loads(body)
-        except ValueError as exc:
-            raise DirectoryUnavailableError(f"manifest decode {url}") from exc
+        # The manifest is fetched and decoded where every reader of it does that, and
+        # decoded as UTF-8 exactly once: the member below is sliced out of this text
+        # and re-encoded. The round trip is exact for valid UTF-8 — including a byte
+        # order mark, which the schema rules refuse and which must therefore survive to
+        # reach them — and invalid UTF-8 reads as an undecodable manifest rather than
+        # as a schema fault.
+        _fetched, body, doc = fetch_manifest(self._http, manifest_url(self._scheme, exchange))
         # The document version gate, before any other member is read — the contract's own
         # ordering, and the same call the sibling endpoint face makes. A document that is
         # not an object carries no ``ver``, so it is refused here as an absent one rather
diff --git a/sdk/python/fora_sdk/resolvers/wba.py b/sdk/python/fora_sdk/resolvers/wba.py
index 5d4ed831..5cee8ffd 100644
--- a/sdk/python/fora_sdk/resolvers/wba.py
+++ b/sdk/python/fora_sdk/resolvers/wba.py
@@ -25,12 +25,16 @@
 from datetime import UTC, datetime, timedelta
 
 import httpx
-from pydantic import ValidationError
 from wire.models import JsonWebKey, KeyRevocationList, WBAFile
 
 from fora_sdk.b64 import b64url_decode_strict
 from fora_sdk.hosts import host_anchored
-from fora_sdk.resolvers._http import fetch_soft, fetch_strict, guarded_client
+from fora_sdk.resolvers._http import guarded_client
+from fora_sdk.resolvers.documents import (
+    WBA_DIRECTORY_PATH,
+    fetch_revocation_list,
+    fetch_wba_directory,
+)
 from fora_sdk.resolvers.errors import (
     DirectoryUnavailableError,
     KeyExpiredError,
@@ -40,54 +44,6 @@
 )
 from fora_sdk.thumbprint import thumbprint
 
-WBA_DIRECTORY_PATH = "/.well-known/http-message-signatures-directory"
-
-
-def _get_wba_directory(http: httpx.Client, url: str) -> WBAFile:
-    """GET ``url`` and decode the body as a :class:`WBAFile`.
-
-    The ONE place Python turns a directory URL into a directory. Both faces that need
-    one call it: :meth:`WBAKeyResolver._fetch_directory` on the signature-verification
-    path, and :func:`~fora_sdk.resolvers.offer_key_cache.create_wba_offer_directory_fetch`
-    on the offer-key path. Go shares a single ``fetchWBAFile`` between the same two
-    call sites for the same reason, so the two paths cannot drift apart.
-
-    Every failure leaves as :class:`DirectoryUnavailableError`, which is what lets each
-    caller make its own raise-or-contain choice against ONE exception type.
-    ``fetch_strict`` folds in every transport failure, every non-200, and every way the
-    URL itself can be refused — a malformed A-label and an over-long label included.
-    This adds the one arm it does not cover: a body that is not a valid directory.
-    """
-    body = fetch_strict(http, url)
-    try:
-        return WBAFile.model_validate_json(body)
-    except ValidationError as exc:
-        raise DirectoryUnavailableError("wba directory decode") from exc
-
-
-def wba_directory_url(scheme: str, host: str) -> str:
-    """Build the full WBA identity-directory URL: ``scheme://host`` + the shared
-    :data:`WBA_DIRECTORY_PATH`. An empty ``scheme`` defaults to ``https``.
-
-    A PURE string function — the host arrives ALREADY-JOINED (any port-join / IPv6
-    bracketing is the caller's concern), there is NO env read (the app keeps its
-    consumer-side ``FORA_WELLKNOWN_SCHEME`` read) and NO scheme-in-host detection.
-    It mirrors the sdk/go ``WBADirectoryURL`` oracle byte-for-byte, locked by the
-    tri-replayed ``wba-url-vectors.json`` corpus.
-
-    Its production call-site inside the SDK is
-    :func:`~fora_sdk.resolvers.offer_key_cache.create_wba_offer_directory_fetch`, the
-    default offer-directory fetch, which joins any port onto the host and hands the
-    result here. :class:`WBAKeyResolver` does NOT use it: that class's
-    ``_fetch_directory`` seam receives an already-joined ``base`` and appends
-    :data:`WBA_DIRECTORY_PATH` directly, so the two paths reach the same URL by
-    different routes. The tri-language corpus is what holds them to the same answer.
-    """
-    if scheme == "":
-        scheme = "https"
-    return f"{scheme}://{host}{WBA_DIRECTORY_PATH}"
-
-
 _DEFAULT_TTL = timedelta(hours=1)
 _DEFAULT_POLL_INTERVAL = timedelta(seconds=300)
 # Throttle for the unknown-thumbprint force-refresh, per directory host. The
@@ -315,7 +271,7 @@ def _lead_refresh(self, base: str, host: str, pending: _Inflight) -> WBAFile:
             pending.event.set()
 
     def _fetch_directory(self, base: str) -> WBAFile:
-        return _get_wba_directory(self._http, base + WBA_DIRECTORY_PATH)
+        return fetch_wba_directory(self._http, base + WBA_DIRECTORY_PATH)
 
     def _is_revoked(self, host: str, thumbprint_key: str) -> bool:
         with self._rev_lock:
@@ -353,13 +309,10 @@ def _refresh_revocation_for(self, host: str, file: WBAFile) -> None:
         # cross-host revocation_url is skipped, leaving the prior snapshot.
         if not rev_url or not _wba_host_anchored(host, rev_url):
             return
-        body = fetch_soft(self._http, rev_url)  # best-effort: a blip keeps prior
-        if body is None:
-            return
         try:
-            snapshot = KeyRevocationList.model_validate_json(body)
-        except ValidationError:
-            return
+            snapshot = fetch_revocation_list(self._http, rev_url)
+        except DirectoryUnavailableError:
+            return  # best-effort: a blip or an undecodable list keeps the prior snapshot
         self._apply_revocation(host, snapshot)
 
     def _apply_revocation(self, host: str, snapshot: KeyRevocationList) -> None:
diff --git a/sdk/python/fora_sdk/resolvers/wellknown.py b/sdk/python/fora_sdk/resolvers/wellknown.py
index dbf298ce..9986cc22 100644
--- a/sdk/python/fora_sdk/resolvers/wellknown.py
+++ b/sdk/python/fora_sdk/resolvers/wellknown.py
@@ -29,7 +29,7 @@
 from fora_sdk.b64 import b64url_decode_strict
 from fora_sdk.hosts import is_bare_host
 from fora_sdk.resolvers._http import default_client, fetch_strict
-from fora_sdk.wire import WellKnownPath
+from fora_sdk.resolvers.documents import fetch_manifest, manifest_url
 from fora_sdk.resolvers.errors import (
     DirectoryUnavailableError,
     EndpointRefusedError,
@@ -206,12 +206,9 @@ def resolve_endpoint(self, host: str) -> str:
             return self._fetch_endpoint(host)
 
     def _fetch_endpoint(self, host: str) -> str:
-        url = f"{self._scheme}://{host}{WellKnownPath}"
-        body = fetch_strict(self._http, url)
-        try:
-            doc = json.loads(body)
-        except ValueError as exc:
-            raise DirectoryUnavailableError(f"manifest decode {url}") from exc
+        # The manifest is read where every reader of it reads it, leniently: an
+        # unknown member is a newer minor version, not a reason to stop routing.
+        _fetched, _text, doc = fetch_manifest(self._http, manifest_url(self._scheme, host))
         # The document version gate runs before the endpoint is so much as looked
         # at, and never caches: the next resolve fetches again.
         refusal = manifest_version_refusal(doc.get("ver") if isinstance(doc, dict) else None)
diff --git a/sdk/python/fora_sdk/strict.py b/sdk/python/fora_sdk/strict.py
new file mode 100644
index 00000000..f34cdf2d
--- /dev/null
+++ b/sdk/python/fora_sdk/strict.py
@@ -0,0 +1,171 @@
+"""The strict check: refuse a message the contract does not describe exactly.
+
+The generated models are forward-compatible on purpose. They ignore a field they do not
+know, because a peer on a newer minor version may send one, and they carry only the
+field-level rules. A conformance check wants the opposite: an unknown or misspelled field
+is a finding, and so is a message that breaks one of the cross-field rules the proto
+states. This module is that check, and it is the only one: the client's strict decoding
+of a success answer, its check of every ``ErrorDetail`` in an error envelope, and the
+document readers in :mod:`fora_sdk.resolvers` all call :func:`strict_violation`.
+
+It defines no shape of its own. The unknown-field policy and the field-level rules come
+from the published strict JSON Schema of the message (``wire.schemas.load(name,
+strict=True)``, generated from the proto), and the cross-field rules from
+:mod:`fora_sdk.crossfield`, the transcription of the proto's message-level CEL the SDK
+already ships. The schema also tells the walk below which objects are which message, so
+it never guesses.
+
+One thing is normalized first. A FORA server renders proto-JSON with unpopulated fields
+emitted, so an unset message field arrives as ``null``, and proto-JSON reads a ``null`` as
+the field's default. The schemas describe values, not that rule, so a ``null`` member of a
+message object is removed before validation, never one inside a
+``google.protobuf.Struct`` or ``Value``, where ``null`` is data.
+"""
+
+from __future__ import annotations
+
+from functools import cache
+from typing import Any
+
+from jsonschema import Draft202012Validator
+from wire import schemas
+
+from fora_sdk.crossfield import _RULES_BY_MESSAGE, cross_field_rule_ids
+
+__all__ = ["StrictViolationError", "check_strict"]
+
+#: The prefix a schema's ``$ref`` carries before a message's fully-qualified name.
+_DEFS_REF = "#/$defs/"
+#: The package the cross-field rules are transcribed from.
+_RULE_PACKAGE = "fora.v1."
+
+
+class StrictViolationError(ValueError):
+    """A message the strict contract does not accept.
+
+    Peer of Go ``helpers.ErrStrictViolation`` and TypeScript ``StrictViolation``.
+    """
+
+    def __init__(self, message_name: str, violation: str) -> None:
+        super().__init__(f"{message_name} is refused by the strict contract{violation}")
+        #: The fully-qualified name of the message the payload was checked as.
+        self.message_name = message_name
+        #: Why it was refused: `` at /path: <complaint>`` for the schema, or
+        #: ``: cross-field rule(s) <ids>`` for the cross-field rules.
+        self.violation = violation
+
+
+def check_strict(message_name: str, payload: Any) -> None:
+    """Refuse ``payload`` unless it is a ``message_name`` message the strict contract accepts.
+
+    ``message_name`` is the fully-qualified message name, for example
+    ``"fora.v1.WellKnownManifest"``; every message of ``fora.v1`` and ``fora.admin.v1``
+    has a published schema. ``payload`` is the decoded proto-JSON value, as
+    ``json.loads`` returns it.
+
+    Raises :class:`StrictViolationError` naming the first failure: the path and the
+    schema's complaint for an unknown field or a field-level rule, or the violated rule
+    ids for a cross-field rule. A name with no published schema raises ``KeyError``.
+    """
+    problem = strict_violation(message_name, payload)
+    if problem is not None:
+        raise StrictViolationError(message_name, problem)
+
+
+def strict_violation(name: str, payload: Any) -> str | None:
+    """Why ``payload`` is not a ``name`` message the strict contract accepts, or ``None``.
+
+    ``name`` is the fully-qualified message name. The text starts with the location, so a
+    caller can put it after its own subject: `` at /path: <complaint>`` for the schema,
+    ``: cross-field rule(s) <ids>`` for the cross-field rules.
+    """
+    schema = schemas.load(name, strict=True)
+    normalized = _without_nulls(schema, schema, payload)
+    errors = sorted(_validator(name).iter_errors(normalized), key=lambda e: list(e.path))
+    if errors:
+        first = errors[0]
+        where = "/" + "/".join(str(p) for p in first.path)
+        return f" at {where}: {first.message}"
+    violated: list[str] = []
+    _walk(schema, schema, normalized, name, violated)
+    if violated:
+        return f": cross-field rule(s) {', '.join(violated)}"
+    return None
+
+
+@cache
+def _validator(name: str) -> Draft202012Validator:
+    return Draft202012Validator(schemas.load(name, strict=True))
+
+
+def _resolve(root: dict[str, Any], node: Any) -> tuple[dict[str, Any], str | None]:
+    """Follow a ``$ref`` into ``$defs``; return the node and the message name it names."""
+    if isinstance(node, dict) and isinstance(node.get("$ref"), str):
+        ref: str = node["$ref"]
+        if ref.startswith(_DEFS_REF):
+            name = ref[len(_DEFS_REF) :]
+            target = root.get("$defs", {}).get(name)
+            if isinstance(target, dict):
+                return target, name
+    return (node if isinstance(node, dict) else {}), None
+
+
+def _is_message(node: dict[str, Any]) -> bool:
+    """A message object: closed properties. A Struct is an open ``{"type": "object"}``."""
+    return isinstance(node.get("properties"), dict)
+
+
+def _without_nulls(root: dict[str, Any], node: Any, value: Any) -> Any:
+    """A copy of ``value`` with the ``null`` members of every message object removed."""
+    node, _ = _resolve(root, node)
+    if isinstance(value, dict):
+        if _is_message(node):
+            props: dict[str, Any] = node["properties"]
+            return {
+                k: _without_nulls(root, props.get(k, {}), v)
+                for k, v in value.items()
+                if not (v is None and _null_means_absent(root, props.get(k)))
+            }
+        extra = node.get("additionalProperties")
+        if isinstance(extra, dict):
+            return {k: _without_nulls(root, extra, v) for k, v in value.items()}
+        return value
+    if isinstance(value, list):
+        items = node.get("items", {})
+        return [_without_nulls(root, items, v) for v in value]
+    return value
+
+
+def _null_means_absent(root: dict[str, Any], prop: Any) -> bool:
+    """Whether ``null`` is the absence of this field rather than a value of it.
+
+    A field the schema does not declare is left for the validator to refuse, and a
+    ``google.protobuf.Value`` (a schema with no ``type``) admits ``null`` as data.
+    """
+    if prop is None:
+        return False
+    node, _ = _resolve(root, prop)
+    return "type" in node or "anyOf" in node or "$ref" in prop
+
+
+def _walk(
+    root: dict[str, Any], node: Any, value: Any, message: str | None, violated: list[str]
+) -> None:
+    """Apply the cross-field rules to every message object the schema identifies."""
+    node, named = _resolve(root, node)
+    message = named or message
+    if isinstance(value, dict) and _is_message(node):
+        if message is not None and message.startswith(_RULE_PACKAGE):
+            short = message[len(_RULE_PACKAGE) :]
+            if short in _RULES_BY_MESSAGE:
+                violated.extend(cross_field_rule_ids(short, value))
+        props: dict[str, Any] = node["properties"]
+        for key, child in value.items():
+            if key in props:
+                _walk(root, props[key], child, None, violated)
+    elif isinstance(value, dict) and isinstance(node.get("additionalProperties"), dict):
+        for child in value.values():
+            _walk(root, node["additionalProperties"], child, None, violated)
+    elif isinstance(value, list):
+        for child in value:
+            _walk(root, node.get("items", {}), child, None, violated)
diff --git a/sdk/python/tests/resolvers_harness.py b/sdk/python/tests/resolvers_harness.py
index ca7d6ced..628ca760 100644
--- a/sdk/python/tests/resolvers_harness.py
+++ b/sdk/python/tests/resolvers_harness.py
@@ -40,6 +40,7 @@
 REVOCATION_PATH = "/.well-known/fora-key-revocations.json"
 MANIFEST_PATH = "/.well-known/fora.json"
 JWKS_PATH = "/keys.json"
+LICENSE_PATH = "/licensing/terms.txt"
 
 # The shared anchor sits well inside the validity windows the active-key builders
 # emit.
@@ -148,6 +149,9 @@ class _State:
     manifest: str | None = None
     manifest_status: int = 0
     manifest_hits: int = 0
+    license: bytes | None = None
+    # A path's Content-Type, where it is not application/json; None omits the header.
+    content_types: dict[str, str | None] = field(default_factory=dict)
 
 
 def _resolve_route(state: _State, path: str) -> tuple[int, bytes] | None:  # noqa: PLR0911 — flat route table
@@ -175,6 +179,10 @@ def _resolve_route(state: _State, path: str) -> tuple[int, bytes] | None:  # noq
         if state.manifest is None:
             return 404, b""
         return 200, state.manifest.encode()
+    if path == LICENSE_PATH:
+        if state.license is None:
+            return 404, b""
+        return 200, state.license
     return None
 
 
@@ -189,14 +197,17 @@ def __init__(self) -> None:
 
         class _Handler(BaseHTTPRequestHandler):
             def do_GET(self) -> None:
-                hit = _resolve_route(state, self.path.split("?")[0])
+                path = self.path.split("?")[0]
+                hit = _resolve_route(state, path)
                 if hit is None:
                     self.send_response(404)
                     self.end_headers()
                     return
                 code, body = hit
                 self.send_response(code)
-                self.send_header("content-type", "application/json")
+                content_type = state.content_types.get(path, "application/json")
+                if content_type is not None:
+                    self.send_header("content-type", content_type)
                 self.end_headers()
                 self.wfile.write(body)
 
@@ -239,6 +250,16 @@ def manifest_hits(self) -> int:
     def revocation_url(self) -> str:
         return self.url + REVOCATION_PATH
 
+    def set_license(self, body: bytes) -> None:
+        self._state.license = body
+
+    def license_url(self) -> str:
+        return self.url + LICENSE_PATH
+
+    def set_content_type(self, path: str, value: str | None) -> None:
+        """Serve ``path`` with ``value`` as its Content-Type; ``None`` sends none."""
+        self._state.content_types[path] = value
+
     def close(self) -> None:
         self._server.shutdown()
         self._server.server_close()
diff --git a/sdk/python/tests/test_document_check_parity.py b/sdk/python/tests/test_document_check_parity.py
new file mode 100644
index 00000000..2feb30c6
--- /dev/null
+++ b/sdk/python/tests/test_document_check_parity.py
@@ -0,0 +1,84 @@
+"""Replay the document-check and license-digest corpora through the Python readers' checks.
+
+Both corpora are emitted by the Go oracle (``sdk/go/resolvers/gen_document_check_vectors_test.go``)
+by running the pure decision each document reader ends in. Replaying them here holds
+:func:`fora_sdk.resolvers.documents.accept` and
+:func:`~fora_sdk.resolvers.documents.verify_digest` to the same verdict for the same bytes
+and Content-Type, so a harness reading a party's documents through any of the three SDKs
+reports the same finding.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+import pytest
+from conftest import GO_RESOLVERS_TESTDATA, load_json
+
+from fora_sdk.resolvers import (
+    DigestMismatchError,
+    DirectoryUnavailableError,
+    ManifestVersionRefusedError,
+    MediaTypeRefusedError,
+)
+from fora_sdk.resolvers._http import Fetched, media_type_essence
+from fora_sdk.resolvers.documents import (
+    MANIFEST,
+    REVOCATION_LIST,
+    WBA_DIRECTORY,
+    accept,
+    verify_digest,
+)
+from fora_sdk.strict import StrictViolationError
+
+_DOCUMENTS = load_json(GO_RESOLVERS_TESTDATA / "document-check-vectors.json")["vectors"]
+_DIGESTS = load_json(GO_RESOLVERS_TESTDATA / "license-digest-vectors.json")["vectors"]
+
+_KINDS = {"manifest": MANIFEST, "wba_directory": WBA_DIRECTORY, "revocation_list": REVOCATION_LIST}
+
+_VERDICTS: list[tuple[type[Exception], str]] = [
+    (MediaTypeRefusedError, "media_type"),
+    (DirectoryUnavailableError, "undecodable"),
+    (ManifestVersionRefusedError, "version"),
+    (StrictViolationError, "strict"),
+]
+
+
+def _verdict(vector: dict[str, Any]) -> str:
+    content_type = vector["content_type"] or None  # "" means the header was absent
+    fetched = Fetched(
+        url="https://party.example/doc",
+        body=vector["body"].encode("utf-8"),
+        media_type=media_type_essence(content_type),
+    )
+    try:
+        accept(_KINDS[vector["document"]], fetched)
+    except Exception as exc:
+        for kind, name in _VERDICTS:
+            if isinstance(exc, kind):
+                return name
+        raise
+    return "ok"
+
+
+def test_corpora_are_not_empty() -> None:
+    assert len(_DOCUMENTS) > 0
+    assert len(_DIGESTS) > 0
+
+
+@pytest.mark.parametrize("vector", _DOCUMENTS, ids=lambda v: v["label"])
+def test_document_check_vector(vector: dict[str, Any]) -> None:
+    assert _verdict(vector) == vector["verdict"]
+
+
+@pytest.mark.parametrize("vector", _DIGESTS, ids=lambda v: v["label"])
+def test_license_digest_vector(vector: dict[str, Any]) -> None:
+    fetched = Fetched(
+        url="https://publisher.example/terms", body=vector["body"].encode("utf-8"), media_type=None
+    )
+    if vector["verdict"] == "mismatch":
+        with pytest.raises(DigestMismatchError):
+            verify_digest(vector["uri_digest"], fetched)
+        return
+    assert vector["verdict"] == "ok"
+    assert verify_digest(vector["uri_digest"], fetched).digest == vector["digest"]
diff --git a/sdk/python/tests/test_document_readers.py b/sdk/python/tests/test_document_readers.py
new file mode 100644
index 00000000..3315f8e1
--- /dev/null
+++ b/sdk/python/tests/test_document_readers.py
@@ -0,0 +1,303 @@
+"""The public document readers, driven against a real in-process origin.
+
+Each reader fetches through the SDK's guarded client, so the suite relaxes the guards the
+way a sandbox does (``SKIP_SSRF`` and ``ALLOW_INSECURE``) rather than injecting a plain
+client: the path under test is the default one. One test leaves the guards on and shows
+the loopback origin refused.
+
+The verdicts on the bytes themselves are pinned across the three languages by the
+document-check and license-digest corpora; this suite proves the readers reach those
+checks over HTTP, and that each failure leaves as its typed error rather than as None.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import json
+from typing import TYPE_CHECKING
+
+import pytest
+from resolvers_harness import (
+    ANCHOR,
+    LICENSE_PATH,
+    MANIFEST_PATH,
+    REVOCATION_PATH,
+    WBA_DIR_PATH,
+    Origin,
+    active_jwk,
+    make_key,
+    manifest_json,
+    revocation_json,
+    rfc3339,
+    wba_file_json,
+)
+from wire.models import License
+
+from fora_sdk import StrictViolationError, check_strict
+from fora_sdk.resolvers import (
+    MANIFEST_MEDIA_TYPE,
+    WBA_DIRECTORY_MEDIA_TYPE,
+    DigestMismatchError,
+    DirectoryUnavailableError,
+    ManifestVersionRefusedError,
+    MediaTypeRefusedError,
+    read_license_document,
+    read_manifest,
+    read_revocation_list,
+    read_wba_directory,
+)
+from fora_sdk.resolvers._ssrf import SsrfError
+
+if TYPE_CHECKING:
+    from collections.abc import Iterator
+
+LICENSE_TEXT = b"Licensed for retrieval-augmented answers, attribution required.\n"
+
+
+@pytest.fixture
+def origin(monkeypatch: pytest.MonkeyPatch) -> Iterator[Origin]:
+    monkeypatch.setenv("SKIP_SSRF", "true")
+    monkeypatch.setenv("ALLOW_INSECURE", "true")
+    served = Origin()
+    try:
+        yield served
+    finally:
+        served.close()
+
+
+def _license(origin: Origin, body: bytes = LICENSE_TEXT, method: str = "sha256") -> License:
+    digest = hashlib.new(method, body).hexdigest()
+    return License(uri=origin.license_url(), uri_digest=f"{method}:{digest}")
+
+
+# --- manifest ---------------------------------------------------------------------------
+
+
+def test_read_manifest_returns_the_parsed_manifest_and_its_media_type(origin: Origin) -> None:
+    origin.set_manifest(manifest_json("https://" + origin.host + "/rpc"))
+    doc = read_manifest(origin.host, scheme="http")
+    assert doc.message.role is not None
+    assert doc.message.role.value == "ROLE_EXCHANGE"
+    assert doc.message.endpoint == "https://" + origin.host + "/rpc"
+    assert doc.media_type == MANIFEST_MEDIA_TYPE
+    assert doc.url == origin.url + MANIFEST_PATH
+
+
+def test_read_manifest_accepts_media_type_parameters(origin: Origin) -> None:
+    origin.set_manifest(manifest_json())
+    origin.set_content_type(MANIFEST_PATH, "Application/JSON; charset=utf-8")
+    assert read_manifest(origin.host, scheme="http").media_type == MANIFEST_MEDIA_TYPE
+
+
+def test_read_manifest_refuses_an_unknown_member(origin: Origin) -> None:
+    doc = json.loads(manifest_json())
+    doc["endpoints"] = ["https://exchange.example/rpc"]  # misspelled endpoint
+    origin.set_manifest(json.dumps(doc))
+    with pytest.raises(StrictViolationError) as caught:
+        read_manifest(origin.host, scheme="http")
+    assert caught.value.message_name == "fora.v1.WellKnownManifest"
+    assert "endpoints" in caught.value.violation
+
+
+def test_read_manifest_refuses_a_broken_cross_field_rule(origin: Origin) -> None:
+    doc = json.loads(manifest_json())
+    doc["terms_digest"] = "sha256:" + "0" * 64  # a digest with no terms_uri
+    origin.set_manifest(json.dumps(doc))
+    with pytest.raises(StrictViolationError, match="cross-field"):
+        read_manifest(origin.host, scheme="http")
+
+
+def test_read_manifest_refuses_the_wrong_media_type(origin: Origin) -> None:
+    origin.set_manifest(manifest_json())
+    origin.set_content_type(MANIFEST_PATH, "text/plain")
+    with pytest.raises(MediaTypeRefusedError, match="text/plain"):
+        read_manifest(origin.host, scheme="http")
+
+
+def test_read_manifest_refuses_a_missing_media_type(origin: Origin) -> None:
+    origin.set_manifest(manifest_json())
+    origin.set_content_type(MANIFEST_PATH, None)
+    with pytest.raises(MediaTypeRefusedError, match="no media type"):
+        read_manifest(origin.host, scheme="http")
+
+
+def test_read_manifest_reads_the_version_before_anything_else(origin: Origin) -> None:
+    doc = json.loads(manifest_json(ver="2.0"))
+    doc["not_a_member"] = True  # would be a strict violation, but ver is read first
+    origin.set_manifest(json.dumps(doc))
+    with pytest.raises(ManifestVersionRefusedError):
+        read_manifest(origin.host, scheme="http")
+
+
+def test_read_manifest_reports_a_missing_document_as_unavailable(origin: Origin) -> None:
+    origin.set_manifest_status(404)
+    with pytest.raises(DirectoryUnavailableError):
+        read_manifest(origin.host, scheme="http")
+
+
+def test_read_manifest_refuses_a_value_that_is_not_a_bare_host(origin: Origin) -> None:
+    with pytest.raises(ValueError, match="not a bare host"):
+        read_manifest(origin.host + "/elsewhere", scheme="http")
+    assert origin.manifest_hits() == 0
+
+
+def test_read_manifest_dials_through_the_ssrf_guard(monkeypatch: pytest.MonkeyPatch) -> None:
+    """With the guards on, the default client refuses the loopback origin."""
+    monkeypatch.delenv("SKIP_SSRF", raising=False)
+    monkeypatch.setenv("ALLOW_INSECURE", "true")
+    served = Origin()
+    try:
+        served.set_manifest(manifest_json())
+        with pytest.raises(DirectoryUnavailableError) as caught:
+            read_manifest(served.host, scheme="http")
+        assert _caused_by(caught.value, SsrfError)
+        assert served.manifest_hits() == 0
+    finally:
+        served.close()
+
+
+def test_read_manifest_refuses_plaintext_without_the_relax(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setenv("SKIP_SSRF", "true")
+    monkeypatch.delenv("ALLOW_INSECURE", raising=False)
+    served = Origin()
+    try:
+        served.set_manifest(manifest_json())
+        with pytest.raises(DirectoryUnavailableError) as caught:
+            read_manifest(served.host, scheme="http")
+        assert _caused_by(caught.value, SsrfError)
+        assert served.manifest_hits() == 0
+    finally:
+        served.close()
+
+
+# --- WBA directory ----------------------------------------------------------------------
+
+
+def test_read_wba_directory_by_domain_and_by_url(origin: Origin) -> None:
+    key = make_key()
+    origin.set_wba(wba_file_json([active_jwk(key.x)], origin.revocation_url()))
+    origin.set_content_type(WBA_DIR_PATH, WBA_DIRECTORY_MEDIA_TYPE)
+    by_domain = read_wba_directory(origin.host, scheme="http")
+    by_url = read_wba_directory(origin.url + WBA_DIR_PATH)
+    for doc in (by_domain, by_url):
+        assert [k.x for k in doc.message.keys or []] == [key.x]
+        assert doc.message.revocation_url == origin.revocation_url()
+        assert doc.media_type == WBA_DIRECTORY_MEDIA_TYPE
+        assert doc.url == origin.url + WBA_DIR_PATH
+
+
+def test_read_wba_directory_refuses_plain_json(origin: Origin) -> None:
+    origin.set_wba(wba_file_json([active_jwk(make_key().x)]))  # served as application/json
+    with pytest.raises(MediaTypeRefusedError, match="application/jwk-set"):
+        read_wba_directory(origin.host, scheme="http")
+
+
+def test_read_wba_directory_refuses_a_key_carrying_a_kid(origin: Origin) -> None:
+    jwk = active_jwk(make_key().x)
+    jwk["kid"] = "k1"  # the directory identifies keys by thumbprint, never by kid
+    origin.set_wba(wba_file_json([jwk]))
+    origin.set_content_type(WBA_DIR_PATH, WBA_DIRECTORY_MEDIA_TYPE)
+    with pytest.raises(StrictViolationError, match="kid"):
+        read_wba_directory(origin.host, scheme="http")
+
+
+def test_read_wba_directory_reports_an_unpublished_directory(origin: Origin) -> None:
+    with pytest.raises(DirectoryUnavailableError):
+        read_wba_directory(origin.host, scheme="http")
+
+
+# --- revocation list --------------------------------------------------------------------
+
+
+def test_read_revocation_list_returns_the_snapshot(origin: Origin) -> None:
+    tp = make_key().tp
+    origin.set_revocation(revocation_json(ANCHOR, [tp]))
+    doc = read_revocation_list(origin.revocation_url())
+    assert doc.message.revoked == [tp]
+    assert doc.message.as_of == ANCHOR
+    assert doc.url == origin.url + REVOCATION_PATH
+
+
+def test_read_revocation_list_refuses_an_unknown_member(origin: Origin) -> None:
+    origin.set_revocation(json.dumps({"as_of": rfc3339(ANCHOR), "revoked": [], "next": "x"}))
+    with pytest.raises(StrictViolationError, match="next"):
+        read_revocation_list(origin.revocation_url())
+
+
+def test_read_revocation_list_refuses_a_timestamp_that_is_not_rfc3339(origin: Origin) -> None:
+    origin.set_revocation(json.dumps({"as_of": "yesterday", "revoked": []}))
+    with pytest.raises(StrictViolationError, match="as_of"):
+        read_revocation_list(origin.revocation_url())
+
+
+# --- license document -------------------------------------------------------------------
+
+
+@pytest.mark.parametrize("method", ["sha256", "sha384", "sha512"])
+def test_read_license_document_verifies_the_digest(origin: Origin, method: str) -> None:
+    origin.set_license(LICENSE_TEXT)
+    origin.set_content_type(LICENSE_PATH, "text/plain; charset=utf-8")
+    lic = _license(origin, method=method)
+    doc = read_license_document(lic)
+    assert doc.body == LICENSE_TEXT
+    assert doc.digest == lic.uri_digest
+    assert doc.media_type == "text/plain"
+    assert doc.url == origin.license_url()
+
+
+def test_read_license_document_refuses_a_digest_mismatch(origin: Origin) -> None:
+    lic = _license(origin)
+    origin.set_license(LICENSE_TEXT + b"Amended after the offer was signed.\n")
+    with pytest.raises(DigestMismatchError):
+        read_license_document(lic)
+
+
+def test_read_license_document_refuses_a_uri_without_a_digest(origin: Origin) -> None:
+    origin.set_license(LICENSE_TEXT)
+    with pytest.raises(StrictViolationError, match=r"license\.digest_required_with_uri"):
+        read_license_document(License(uri=origin.license_url()))
+
+
+def test_read_license_document_refuses_a_license_with_no_uri() -> None:
+    with pytest.raises(ValueError, match="no uri"):
+        read_license_document(License(id="CC-BY-4.0"))
+
+
+def test_read_license_document_reports_a_scheme_it_will_not_dial() -> None:
+    lic = License(uri="tdl:ai-terms/2026", uri_digest="sha256:" + "0" * 64)
+    with pytest.raises(DirectoryUnavailableError):
+        read_license_document(lic)
+
+
+# --- the public strict check ------------------------------------------------------------
+
+
+def test_check_strict_accepts_a_valid_message_and_names_a_violation() -> None:
+    check_strict("fora.v1.KeyRevocationList", {"as_of": rfc3339(ANCHOR), "revoked": []})
+    with pytest.raises(StrictViolationError) as caught:
+        check_strict("fora.v1.KeyRevocationList", {"revokedd": []})
+    assert caught.value.message_name == "fora.v1.KeyRevocationList"
+    assert "revokedd" in caught.value.violation
+
+
+def test_check_strict_refuses_the_lower_camel_spelling() -> None:
+    with pytest.raises(StrictViolationError, match="termsUri"):
+        check_strict("fora.v1.WellKnownManifest", {"role": "ROLE_EXCHANGE", "termsUri": "x"})
+
+
+def test_check_strict_reads_null_as_absent() -> None:
+    check_strict("fora.v1.WellKnownManifest", {"role": "ROLE_EXCHANGE", "endpoint": None})
+
+
+def test_check_strict_raises_for_a_message_with_no_schema() -> None:
+    with pytest.raises(KeyError):
+        check_strict("fora.v1.NoSuchMessage", {})
+
+
+def _caused_by(exc: BaseException, kind: type[BaseException]) -> bool:
+    seen: BaseException | None = exc
+    while seen is not None:
+        if isinstance(seen, kind):
+            return True
+        seen = seen.__cause__ or seen.__context__
+    return False

From 69489410f05859fac3d81dee1a018cb2e03774db Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 08:03:20 -0400
Subject: [PATCH 035/164] Add document readers and a public strict check to the
 TypeScript SDK

The TypeScript resolvers read the manifest, the WBA directory and the
revocation list only to route and verify, leniently, and the strict check
was private to the client, so a harness re-implemented both.

The strict check moves from client/strict.ts to src/strict.ts.
checkStrict(message, payload, schema?) is public from ./client and throws
StrictViolation with the message name and the violation. It bundles the
strict schema of every message the SDK reads, now including
WellKnownManifest, WBAFile, KeyRevocationList and License, and takes any
other message's published strict schema as the third argument. The
client's strict decoding of a success answer and of every ErrorDetail in
an error envelope call the same strictViolation.

resolvers/documents.ts adds readManifest(domain),
readWBADirectory(urlOrDomain), readRevocationList(url) and
readLicenseDocument(license), exported from ./resolvers. Each fetches
through guardedFetchFromEnv unless an options fetch replaces it, so the
SSRF and scheme guards apply, and resolves to a Document with the parsed
model, the URL, the bytes and the media type, or rejects. The manifest
must be served as application/json and the directory as
application/jwk-set+json (MediaTypeRefused). The manifest's ver is read
first (ManifestVersionRefused). Every document must pass checkStrict and
parse through the wire seam (StrictViolation). The license reader checks
the License, then verifies the fetched bytes against uri_digest,
resolving to a LicenseDocument or rejecting with DigestMismatch. A failed
fetch is DirectoryUnavailable. The model names an enum by its value name,
so a document writing an enum as its number is refused here, while the Go
reader accepts it.

FetchResponse gains optional headers and arrayBuffer, which the bounded
transports now provide, and fetchDocument returns the bytes with their
media type. A body over 1 MiB is refused instead of truncated. The
endpoint resolver, the registration-requirements reader, the WBA key
resolver's directory and revocation reads and the offer-directory fetch
now read through the same fetch and decode, leniently.
WBA_DIRECTORY_PATH and wbaDirectoryURL move to the documents module and
are still exported from wba.ts and ./resolvers.

Tests drive each reader against an in-process server through the
guarded transport, and replay the document-check and license-digest
corpora.
---
 sdk/ts/client/index.ts                        |   1 +
 sdk/ts/client/options.ts                      |   4 +-
 sdk/ts/client/strict-envelope.ts              |   2 +-
 sdk/ts/client/strict.ts                       | 200 +---------
 sdk/ts/resolvers/documents.ts                 | 350 ++++++++++++++++++
 sdk/ts/resolvers/errors.ts                    |  30 +-
 sdk/ts/resolvers/http.ts                      | 111 ++++--
 sdk/ts/resolvers/index.ts                     |  18 +
 sdk/ts/resolvers/offer-key-cache.ts           |  10 +-
 sdk/ts/resolvers/registration-requirements.ts |  17 +-
 sdk/ts/resolvers/wba.ts                       |  48 +--
 sdk/ts/resolvers/wellknown.ts                 |  14 +-
 sdk/ts/src/strict.ts                          | 261 +++++++++++++
 sdk/ts/tests/document-check.parity.test.ts    | 102 +++++
 .../document-readers.integration.test.ts      | 220 +++++++++++
 15 files changed, 1106 insertions(+), 282 deletions(-)
 create mode 100644 sdk/ts/resolvers/documents.ts
 create mode 100644 sdk/ts/src/strict.ts
 create mode 100644 sdk/ts/tests/document-check.parity.test.ts
 create mode 100644 sdk/ts/tests/document-readers.integration.test.ts

diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index d3e49ec8..f7e0b4e2 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -1312,6 +1312,7 @@ export type { Delivery, DeliveryKeyResolver } from "./delivery.ts";
 export type { EndpointResolver } from "./route.ts";
 export type { CallOptions, ClientOptions, RegistrationRequirementsReader } from "./options.ts";
 export { RawBody } from "./raw.ts";
+export { checkStrict, StrictViolation } from "../src/strict.ts";
 export type {
 	BeforeSign,
 	UnaryRequest,
diff --git a/sdk/ts/client/options.ts b/sdk/ts/client/options.ts
index 089e2067..88f35d85 100644
--- a/sdk/ts/client/options.ts
+++ b/sdk/ts/client/options.ts
@@ -13,7 +13,7 @@ import {
 import type { DeliveryKeyResolver } from "./delivery.ts";
 import type { EndpointResolver } from "./route.ts";
 import { createUnarySend } from "./send.ts";
-import { checkStrict } from "./strict.ts";
+import { refuseUnlessStrict } from "./strict.ts";
 import {
 	DEFAULT_CALL_TIMEOUT_MS,
 	DEFAULT_MAX_RPC_READ_BYTES,
@@ -247,6 +247,6 @@ export async function call(
 	});
 	// Before any verb parses it: the strict check reads the answer as it arrived, and the
 	// parse would already have dropped the unknown field it exists to find.
-	if (r.opts.strict === true) checkStrict(op, raw, response);
+	if (r.opts.strict === true) refuseUnlessStrict(op, raw, response);
 	return raw;
 }
diff --git a/sdk/ts/client/strict-envelope.ts b/sdk/ts/client/strict-envelope.ts
index cbe25475..d36b7cb3 100644
--- a/sdk/ts/client/strict-envelope.ts
+++ b/sdk/ts/client/strict-envelope.ts
@@ -23,7 +23,7 @@
 import { decodeErrorDetailValue, isDetailValueBase64 } from "../src/errordetail-wire.ts";
 import { ERROR_DETAIL_TYPE, REASON_FIELDS, toProtoNames } from "../src/errordetail.ts";
 import { ForaCallError } from "./errors.ts";
-import { strictViolation } from "./strict.ts";
+import { strictViolation } from "../src/strict.ts";
 
 const ENVELOPE_MEMBERS = new Set(["code", "message", "details"]);
 const ENTRY_MEMBERS = new Set(["type", "value", "debug"]);
diff --git a/sdk/ts/client/strict.ts b/sdk/ts/client/strict.ts
index b02177b5..72e3c528 100644
--- a/sdk/ts/client/strict.ts
+++ b/sdk/ts/client/strict.ts
@@ -1,204 +1,16 @@
-// Strict response decoding: refuse an answer the contract does not describe exactly.
-//
-// The generated schemas the client parses answers with are forward-compatible on purpose:
-// they drop a field they do not know, so a newer Exchange does not break an older client.
-// A conformance harness wants the opposite — an unknown or misspelled field is the defect
-// it is looking for — and it wants the cross-field rules the proto states, which no
-// per-field schema can express. With `strict: true` every RPC success answer is checked,
-// before it is parsed, against:
-//
-//   - the published STRICT JSON Schema of its message (gen/jsonschema, additionalProperties
-//     false on every message object at every depth), so the shape is the one the
-//     generator emitted rather than a second definition kept here;
-//   - the cross-field rules, through crossFieldRuleIds, on the answer itself and on every
-//     nested message that carries any.
-//
-// A null member of a message object is removed first: proto-JSON reads null as "absent",
-// and an Exchange rendering unpopulated fields emits one for every unset message field.
-// Nothing inside a google.protobuf.Struct is touched, because there a null is data.
+// Strict response decoding: `strict: true` checks every RPC success answer, before it is
+// parsed, with the one strict check the SDK has (../src/strict.ts), and reports a refusal
+// the way every other answer failure is reported, as `malformed`.
 
-import Ajv2020Module, { type ValidateFunction } from "ajv/dist/2020.js";
-
-import { crossFieldRuleIds, hasCrossFieldRules } from "../src/crossfield.ts";
+import { strictViolation } from "../src/strict.ts";
 import { malformed } from "./errors.ts";
 
-import setReportingPolicyResponse from "../../../gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json" with { type: "json" };
-import setTenantFeeRateResponse from "../../../gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json" with { type: "json" };
-import brokerTransactionResponse from "../../../gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json" with { type: "json" };
-import discoveryResponse from "../../../gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json" with { type: "json" };
-import disputeResponse from "../../../gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json" with { type: "json" };
-import domainVerificationChallenge from "../../../gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json" with { type: "json" };
-import domainVerificationResult from "../../../gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json" with { type: "json" };
-import errorDetail from "../../../gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json" with { type: "json" };
-import getAccountStatusResponse from "../../../gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json" with { type: "json" };
-import pushResourcesResponse from "../../../gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json" with { type: "json" };
-import refreshCatalogResponse from "../../../gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json" with { type: "json" };
-import registerResponse from "../../../gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json" with { type: "json" };
-import removeResourcesResponse from "../../../gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json" with { type: "json" };
-import resourceResponse from "../../../gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json" with { type: "json" };
-import transactionResponse from "../../../gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json" with { type: "json" };
-import usageReportResponse from "../../../gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json" with { type: "json" };
-
-/** The strict schema of every message a client verb decodes, by fully-qualified name,
- * and of the ErrorDetail an error answer carries. */
-const STRICT_SCHEMAS: Readonly<Record<string, object>> = {
-	"fora.admin.v1.SetReportingPolicyResponse": setReportingPolicyResponse,
-	"fora.admin.v1.SetTenantFeeRateResponse": setTenantFeeRateResponse,
-	"fora.v1.BrokerTransactionResponse": brokerTransactionResponse,
-	"fora.v1.DiscoveryResponse": discoveryResponse,
-	"fora.v1.DisputeResponse": disputeResponse,
-	"fora.v1.DomainVerificationChallenge": domainVerificationChallenge,
-	"fora.v1.DomainVerificationResult": domainVerificationResult,
-	"fora.v1.ErrorDetail": errorDetail,
-	"fora.v1.GetAccountStatusResponse": getAccountStatusResponse,
-	"fora.v1.PushResourcesResponse": pushResourcesResponse,
-	"fora.v1.RefreshCatalogResponse": refreshCatalogResponse,
-	"fora.v1.RegisterResponse": registerResponse,
-	"fora.v1.RemoveResourcesResponse": removeResourcesResponse,
-	"fora.v1.ResourceResponse": resourceResponse,
-	"fora.v1.TransactionResponse": transactionResponse,
-	"fora.v1.UsageReportResponse": usageReportResponse,
-};
-
-// Ajv is CommonJS. Node hands an ESM importer its module.exports, which is the class; a
-// bundler may hand over the namespace, whose `default` is. Read whichever arrived, typed
-// by the one method used, so the declaration holds under either module resolution.
-interface AjvEngine {
-	compile(schema: object): ValidateFunction;
-}
-type AjvConstructor = new (options: { strict: boolean; validateFormats: boolean }) => AjvEngine;
-const Ajv2020 = ((Ajv2020Module as unknown as { default?: unknown }).default ??
-	Ajv2020Module) as unknown as AjvConstructor;
-
-// One engine for the process, schemas compiled on first use. `format` stays an annotation,
-// as the schemas' README says: a validator asserting `duration` needs ajv-formats.
-let engine: AjvEngine | undefined;
-const compiled = new Map<string, ValidateFunction>();
-
-function validatorFor(message: string): ValidateFunction {
-	let validate = compiled.get(message);
-	if (validate === undefined) {
-		const schema = STRICT_SCHEMAS[message];
-		if (schema === undefined) throw new Error(`no strict schema for ${message}`);
-		engine ??= new Ajv2020({ strict: true, validateFormats: false });
-		validate = engine.compile(schema);
-		compiled.set(message, validate);
-	}
-	return validate;
-}
-
-type Node = Record<string, unknown>;
-
-function isNode(v: unknown): v is Node {
-	return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-
-const DEFS_PREFIX = "#/$defs/";
-
-/** One message instance the cross-field rules are checked on. */
-interface Found {
-	message: string;
-	path: string;
-	value: Node;
-}
-
 /**
- * normalize returns a copy of `instance` with null members of message objects removed,
- * guided by the schema, and collects every message instance whose type carries
- * cross-field rules. A key the schema does not declare is kept, so the schema refuses it.
- */
-function normalize(
-	instance: unknown,
-	node: unknown,
-	defs: Node,
-	path: string,
-	found: Found[],
-): unknown {
-	if (!isNode(node)) return instance;
-	const ref = node["$ref"];
-	if (typeof ref === "string" && ref.startsWith(DEFS_PREFIX)) {
-		const name = ref.slice(DEFS_PREFIX.length);
-		return normalizeMessage(instance, defs[name], defs, path, found, name);
-	}
-	if (Array.isArray(instance) && node["items"] !== undefined) {
-		return instance.map((item, i) => normalize(item, node["items"], defs, `${path}/${i}`, found));
-	}
-	const properties = node["properties"];
-	if (isNode(properties)) return normalizeMessage(instance, node, defs, path, found, undefined);
-	const values = node["additionalProperties"];
-	if (isNode(instance) && isNode(values)) {
-		const out: Node = {};
-		for (const [k, v] of Object.entries(instance)) {
-			setMember(out, k, normalize(v, values, defs, `${path}/${k}`, found));
-		}
-		return out;
-	}
-	// A Struct, a Value, a scalar or an enum: left exactly as it arrived.
-	return instance;
-}
-
-function normalizeMessage(
-	instance: unknown,
-	node: unknown,
-	defs: Node,
-	path: string,
-	found: Found[],
-	name: string | undefined,
-): unknown {
-	if (!isNode(instance) || !isNode(node)) return instance;
-	const properties = isNode(node["properties"]) ? node["properties"] : {};
-	const out: Node = {};
-	for (const [k, v] of Object.entries(instance)) {
-		if (v === null && Object.prototype.hasOwnProperty.call(properties, k)) continue;
-		setMember(out, k, normalize(v, properties[k], defs, `${path}/${k}`, found));
-	}
-	if (name !== undefined) {
-		const bare = name.slice(name.lastIndexOf(".") + 1);
-		if (hasCrossFieldRules(bare)) found.push({ message: bare, path, value: out });
-	}
-	return out;
-}
-
-function setMember(target: Node, name: string, value: unknown): void {
-	Object.defineProperty(target, name, { value, enumerable: true, writable: true, configurable: true });
-}
-
-/**
- * checkStrict refuses, as `malformed`, an answer that fails the strict schema of
+ * refuseUnlessStrict refuses, as `malformed`, an answer that fails the strict schema of
  * `message` (fully-qualified, e.g. "fora.v1.ResourceResponse") or one of the cross-field
  * rules. Called on a success answer; an error answer is checked by checkStrictEnvelope.
  */
-export function checkStrict(op: string, raw: unknown, message: string): void {
+export function refuseUnlessStrict(op: string, raw: unknown, message: string): void {
 	const problem = strictViolation(raw, message);
 	if (problem !== undefined) throw malformed(op, new Error(`strict decoding: ${problem}`));
 }
-
-/**
- * strictViolation says why `raw` is not a `message` the strict contract accepts: the
- * location and the schema's complaint, or the cross-field rules it breaks. Undefined when
- * it is accepted.
- */
-export function strictViolation(raw: unknown, message: string): string | undefined {
-	const schema = STRICT_SCHEMAS[message] as Node | undefined;
-	if (schema === undefined) throw new Error(`no strict schema for ${message}`);
-	const defs = isNode(schema["$defs"]) ? schema["$defs"] : {};
-	const found: Found[] = [];
-	const normalized = normalizeMessage(raw, schema, defs, "", found, message);
-	const validate = validatorFor(message);
-	if (!validate(normalized)) {
-		const first = validate.errors?.[0];
-		const where = first?.instancePath === "" || first === undefined ? "(root)" : first.instancePath;
-		const extra =
-			first?.keyword === "additionalProperties"
-				? ` (${JSON.stringify((first.params as { additionalProperty?: string }).additionalProperty)})`
-				: "";
-		return `${where} ${first?.message ?? "does not match"}${extra}`;
-	}
-	for (const f of found) {
-		const violated = crossFieldRuleIds(f.message, f.value);
-		if (violated.length > 0) {
-			return `${f.path === "" ? "(root)" : f.path} violates cross-field rule(s) ${violated.join(", ")}`;
-		}
-	}
-	return undefined;
-}
diff --git a/sdk/ts/resolvers/documents.ts b/sdk/ts/resolvers/documents.ts
new file mode 100644
index 00000000..1fb02b4c
--- /dev/null
+++ b/sdk/ts/resolvers/documents.ts
@@ -0,0 +1,350 @@
+// Reading the documents the protocol defines, as a party publishes them.
+//
+// Four documents are served over plain HTTPS rather than answered over RPC: the
+// well-known manifest (/.well-known/fora.json), the WBA key directory
+// (/.well-known/http-message-signatures-directory), the key revocation list a directory
+// points to, and the license document a License.uri names. This module is the one place
+// each of them is fetched and decoded.
+//
+// Two faces read them, and they share everything up to the decision of how strict to be.
+//
+// - The public readers (readManifest, readWBADirectory, readRevocationList,
+//   readLicenseDocument) check what a party publishes. Each refuses a document served
+//   under the wrong media type, a body that fails the published strict JSON Schema of its
+//   message or one of the cross-field rules, and, for a license document, bytes that do
+//   not hash to uri_digest. Each resolves to the parsed generated model, or rejects; none
+//   resolves to undefined. A conformance harness reads through these.
+// - The resolvers (the endpoint resolver, the registration-requirements reader, the WBA
+//   key resolver and the offer-directory fetch) read the same documents to route and to
+//   verify. They call the lenient functions below, which skip the media type and the
+//   strict check: a reader that must accept a newer protocol version cannot refuse a field
+//   it does not know.
+//
+// Every fetch goes through guardedFetchFromEnv by default, the transport the resolvers use
+// for an address another party chose: the dial-time SSRF guard refuses loopback, private
+// and metadata addresses, and the scheme guard refuses anything but https. SKIP_SSRF and
+// ALLOW_INSECURE relax them for a sandbox. A body is capped at 1 MiB and refused, never
+// truncated, past it.
+
+import { createHash, timingSafeEqual } from "node:crypto";
+
+import { parseWire } from "../../../gen/ts/wire/base.ts";
+import {
+	KeyRevocationListSchema,
+	type LicenseSchema,
+	WBAFileSchema,
+	WellKnownManifestSchema,
+} from "../../../gen/ts/wire/schemas.ts";
+import { invalidHost } from "../src/host-ref.ts";
+import { isBareHost } from "../src/hosts.ts";
+import { StrictViolation, checkStrict } from "../src/strict.ts";
+import { manifestVersionRefusal, WellKnownPath } from "../src/wire.ts";
+import {
+	DigestMismatch,
+	DirectoryUnavailable,
+	ManifestVersionRefused,
+	MediaTypeRefused,
+} from "./errors.ts";
+import { type FetchLike, type Fetched, fetchDocument, guardedFetchFromEnv } from "./http.ts";
+
+/** The media type /.well-known/fora.json is served under. */
+export const MANIFEST_MEDIA_TYPE = "application/json";
+/** The media type the WBA key directory is served under: a JWK Set (RFC 7517 §8.5.2). */
+export const WBA_DIRECTORY_MEDIA_TYPE = "application/jwk-set+json";
+
+/** The single public well-known path a WBA identity directory is served at (Web
+ * Bot Auth; the identity half of the identity/commercial split — the commercial
+ * overlay stays in /.well-known/fora.json). The one shared copy across the whole SDK. */
+export const WBA_DIRECTORY_PATH = "/.well-known/http-message-signatures-directory";
+
+/** Build the full WBA identity-directory URL from a scheme and an already-joined
+ * host: `${scheme}://${host}` + {@link WBA_DIRECTORY_PATH}. An empty scheme
+ * defaults to https. A PURE string function — the host arrives ALREADY-JOINED (any
+ * port-join / IPv6 bracketing is the caller's concern), there is NO env read and NO
+ * scheme-in-host detection (those stay consumer glue). It mirrors the sdk/go
+ * WBADirectoryURL oracle byte-for-byte, locked by the tri-replayed
+ * wba-url-vectors.json corpus. */
+export function wbaDirectoryURL(scheme: string, host: string): string {
+	const s = scheme === "" ? "https" : scheme;
+	return `${s}://${host}${WBA_DIRECTORY_PATH}`;
+}
+
+export type WellKnownManifest = ReturnType<typeof WellKnownManifestSchema.parse>;
+export type WBAFile = ReturnType<typeof WBAFileSchema.parse>;
+export type KeyRevocationList = ReturnType<typeof KeyRevocationListSchema.parse>;
+export type License = ReturnType<typeof LicenseSchema.parse>;
+
+/** One document a reader fetched and accepted. */
+export interface Document<T> {
+	/** The parsed generated model. */
+	message: T;
+	/** The Content-Type essence the document was served under, lowercased and without
+	 * parameters. For the manifest and the WBA directory it is the media type the
+	 * protocol names, since anything else is refused; for a revocation list, which the
+	 * protocol names none for, it is whatever was served, or undefined. */
+	mediaType: string | undefined;
+	/** The URL that was fetched. */
+	url: string;
+	/** The bytes as served. */
+	body: Uint8Array;
+}
+
+/** The document a License.uri names, verified against License.uri_digest. */
+export interface LicenseDocument {
+	/** The bytes as served. */
+	body: Uint8Array;
+	/** The digest of `body` in "method:hexdigest" form. Equal to the license's
+	 * uri_digest, since anything else is refused. */
+	digest: string;
+	/** The Content-Type essence the document was served under, or undefined. The protocol
+	 * names no media type for a license document, so it is not checked. */
+	mediaType: string | undefined;
+	/** The URL that was fetched. */
+	url: string;
+}
+
+/** How a document reader dials. */
+export interface ReadDocumentOptions {
+	/** The transport. Defaults to guardedFetchFromEnv(), built for the call. */
+	fetch?: FetchLike;
+	/** Used when a reader builds the URL from a domain. Defaults to https. */
+	scheme?: string;
+}
+
+// --- the shared reads: one fetch-and-decode per document --------------------------------
+
+/** The URL of `host`'s well-known manifest. An empty scheme means https. */
+export function manifestURL(scheme: string, host: string): string {
+	return `${scheme === "" ? "https" : scheme}://${host}${WellKnownPath}`;
+}
+
+/** GET a manifest and decode it, leniently: no media type, no strict check. Resolves to
+ * the text, decoded as UTF-8 once (the registration-requirements reader slices a member
+ * out of it to compile from the bytes as served), and its JSON value. A body that is not
+ * JSON throws DirectoryUnavailable. No member is read here: each caller applies the
+ * version gate first, under its own verdict. */
+export async function fetchManifest(
+	fetchFn: FetchLike,
+	url: string,
+): Promise<{ text: string; doc: unknown }> {
+	const fetched = await fetchDocument(fetchFn, url);
+	const text = Buffer.from(fetched.body).toString("utf8");
+	try {
+		return { text, doc: JSON.parse(text) };
+	} catch (err) {
+		throw new DirectoryUnavailable(`manifest decode ${url}`, { cause: err });
+	}
+}
+
+/** GET `url` and decode the body as a WBAFile, leniently. The one read of a directory
+ * the WBA key resolver and the offer-directory fetch share, so the two never drift.
+ * Every failure throws DirectoryUnavailable. */
+export async function fetchWBAFile(fetchFn: FetchLike, url: string): Promise<WBAFile> {
+	return lenient(await fetchDocument(fetchFn, url), WBAFileSchema, "wba directory decode");
+}
+
+/** GET `url` and decode the body as a KeyRevocationList, leniently. Every failure throws
+ * DirectoryUnavailable; the WBA resolver's revocation refresh contains it and keeps the
+ * snapshot it holds. */
+export async function fetchRevocationList(
+	fetchFn: FetchLike,
+	url: string,
+): Promise<KeyRevocationList> {
+	return lenient(await fetchDocument(fetchFn, url), KeyRevocationListSchema, "revocation list decode");
+}
+
+function lenient<T>(fetched: Fetched, schema: { parse(v: unknown): T }, what: string): T {
+	try {
+		return schema.parse(JSON.parse(Buffer.from(fetched.body).toString("utf8")));
+	} catch (err) {
+		throw new DirectoryUnavailable(`${what} ${fetched.url}`, { cause: err });
+	}
+}
+
+// --- the checks a public reader applies ------------------------------------------------
+
+/** What the contract says about one document: its message, and the media type it is
+ * served under when the protocol names one. */
+export interface DocumentKind<T> {
+	message: string;
+	schema: { safeParse: (v: unknown) => { success: boolean; data?: unknown } };
+	mediaType: string | undefined;
+	/** Whether `ver` is read before any other member (the manifest's rule). */
+	versionGate: boolean;
+	/** Carries the model type; never read. */
+	readonly model?: T;
+}
+
+export const MANIFEST: DocumentKind<WellKnownManifest> = {
+	message: "fora.v1.WellKnownManifest",
+	schema: WellKnownManifestSchema,
+	mediaType: MANIFEST_MEDIA_TYPE,
+	versionGate: true,
+};
+export const WBA_DIRECTORY: DocumentKind<WBAFile> = {
+	message: "fora.v1.WBAFile",
+	schema: WBAFileSchema,
+	mediaType: WBA_DIRECTORY_MEDIA_TYPE,
+	versionGate: false,
+};
+export const REVOCATION_LIST: DocumentKind<KeyRevocationList> = {
+	message: "fora.v1.KeyRevocationList",
+	schema: KeyRevocationListSchema,
+	mediaType: undefined,
+	versionGate: false,
+};
+
+const UTF8 = new TextDecoder("utf-8", { fatal: true });
+
+/**
+ * accept checks a fetched document as `kind` and parses it, or throws. The checks run in
+ * the order the contract reads a document: the media type, when the protocol names one;
+ * the body as JSON; for the manifest, `ver` before any other member; then the strict
+ * schema and the cross-field rules. Pure: the document-check corpus replays it with the
+ * bytes and the label it carries, so the three languages answer one document with one
+ * verdict.
+ */
+export function accept<T>(kind: DocumentKind<T>, fetched: Fetched): Document<T> {
+	if (kind.mediaType !== undefined && fetched.mediaType !== kind.mediaType) {
+		const served = fetched.mediaType === undefined ? "no media type" : JSON.stringify(fetched.mediaType);
+		throw new MediaTypeRefused(`${fetched.url} was served with ${served}, not "${kind.mediaType}"`);
+	}
+	let payload: unknown;
+	try {
+		payload = JSON.parse(UTF8.decode(fetched.body));
+	} catch (err) {
+		throw new DirectoryUnavailable(`decode ${fetched.url}`, { cause: err });
+	}
+	if (kind.versionGate) {
+		const ver = typeof payload === "object" && payload !== null ? (payload as { ver?: unknown }).ver : undefined;
+		const refusal = manifestVersionRefusal(ver);
+		if (refusal !== undefined) throw new ManifestVersionRefused(refusal);
+	}
+	checkStrict(kind.message, payload);
+	const parsed = parseWire<T>(kind.schema, payload);
+	if (!parsed.success) {
+		// A value the schema leaves to the parse, such as a timestamp that is not RFC 3339,
+		// is the document breaking its message all the same. The model also names an enum
+		// by its value name, so an enum written as its number, which the schema admits and
+		// the Go reader accepts, is refused here.
+		throw new StrictViolation(kind.message, "the generated model refused the document");
+	}
+	return { message: parsed.data, mediaType: fetched.mediaType, url: fetched.url, body: fetched.body };
+}
+
+const DIGEST_METHODS: Readonly<Record<string, string>> = { sha256: "sha256", sha384: "sha384", sha512: "sha512" };
+
+/** verifyDigest hashes the fetched bytes with `uriDigest`'s method and compares, or
+ * throws. Pure, and replayed by the license-digest corpus. `uriDigest` has passed the
+ * strict License check by the time a reader calls this, so its method is one of the
+ * three the contract admits; a value that is not throws a plain Error. */
+export function verifyDigest(uriDigest: string, fetched: Fetched): LicenseDocument {
+	const colon = uriDigest.indexOf(":");
+	const method = colon < 0 ? uriDigest : uriDigest.slice(0, colon);
+	const expected = colon < 0 ? "" : uriDigest.slice(colon + 1);
+	const algorithm = DIGEST_METHODS[method];
+	if (algorithm === undefined) throw new Error(`uri_digest names no supported method: ${JSON.stringify(method)}`);
+	const actual = createHash(algorithm).update(fetched.body).digest("hex");
+	const a = Buffer.from(actual);
+	const b = Buffer.from(expected);
+	if (a.length !== b.length || !timingSafeEqual(a, b)) {
+		throw new DigestMismatch(
+			`document at ${fetched.url} hashes to ${method}:${actual}, the license pins ${uriDigest}`,
+		);
+	}
+	return { body: fetched.body, digest: `${method}:${actual}`, mediaType: fetched.mediaType, url: fetched.url };
+}
+
+// --- the public readers ----------------------------------------------------------------
+
+/**
+ * readManifest fetches and checks `domain`'s /.well-known/fora.json.
+ *
+ * The checks run in the order the contract reads the document: the media type must be
+ * application/json; the body must be JSON; `ver` must carry a recognised major version
+ * before any other member is read; and the whole document must pass the strict
+ * WellKnownManifest schema and the cross-field rules.
+ *
+ * Throws an Error when `domain` is not a bare host (a port is allowed), before anything
+ * is dialled; DirectoryUnavailable when the fetch fails or the body is not JSON;
+ * MediaTypeRefused; ManifestVersionRefused; and StrictViolation.
+ */
+export async function readManifest(
+	domain: string,
+	opts: ReadDocumentOptions = {},
+): Promise<Document<WellKnownManifest>> {
+	if (!isBareHost(domain)) throw invalidHost(domain, "not a bare host");
+	const fetched = await fetchDocument(transport(opts), manifestURL(opts.scheme ?? "", domain));
+	return accept(MANIFEST, fetched);
+}
+
+/**
+ * readWBADirectory fetches and checks a WBA key directory. `urlOrDomain` is the
+ * directory's full URL, or a bare host whose directory is read from
+ * scheme://host/.well-known/http-message-signatures-directory.
+ *
+ * The media type must be application/jwk-set+json, and the body must pass the strict
+ * WBAFile schema and the cross-field rules. Key validity windows and revocation are not
+ * evaluated: that is the WBA key resolver's job, and a directory listing an expired key
+ * is still a well-formed directory. Throws an Error for a value that is neither a URL nor
+ * a bare host; DirectoryUnavailable; MediaTypeRefused; and StrictViolation.
+ */
+export async function readWBADirectory(
+	urlOrDomain: string,
+	opts: ReadDocumentOptions = {},
+): Promise<Document<WBAFile>> {
+	let url = urlOrDomain;
+	if (!urlOrDomain.includes("://")) {
+		if (!isBareHost(urlOrDomain)) throw invalidHost(urlOrDomain, "neither a URL nor a bare host");
+		url = wbaDirectoryURL(opts.scheme ?? "", urlOrDomain);
+	}
+	return accept(WBA_DIRECTORY, await fetchDocument(transport(opts), url));
+}
+
+/**
+ * readRevocationList fetches and checks the key revocation list at `url`, a directory's
+ * revocation_url. The protocol names no media type for this document, so the label is
+ * reported and not checked. The body must pass the strict KeyRevocationList schema and
+ * the cross-field rules. Whether `url` is anchored to the directory's host is the caller's
+ * question: the WBA key resolver skips a list that is not. Throws DirectoryUnavailable
+ * and StrictViolation.
+ */
+export async function readRevocationList(
+	url: string,
+	opts: ReadDocumentOptions = {},
+): Promise<Document<KeyRevocationList>> {
+	return accept(REVOCATION_LIST, await fetchDocument(transport(opts), url));
+}
+
+/**
+ * readLicenseDocument fetches the document `license.uri` names and verifies it against
+ * `license.uri_digest`.
+ *
+ * The license itself is checked first, against the strict License schema and its
+ * cross-field rules, so a uri without a digest, or a digest whose method is not sha256,
+ * sha384 or sha512, is refused before anything is dialled. The fetched bytes are then
+ * hashed with the digest's method and compared with it. The protocol names no media type
+ * for a license document, so the label is reported and not checked. A uri with a scheme
+ * other than https, such as a data-labels identifier that is not a URL, is refused by the
+ * scheme guard and reported as DirectoryUnavailable: it names a document, not a place to
+ * fetch one.
+ *
+ * Throws an Error when the license carries no uri; StrictViolation; DirectoryUnavailable;
+ * and DigestMismatch.
+ */
+export async function readLicenseDocument(
+	license: License,
+	opts: ReadDocumentOptions = {},
+): Promise<LicenseDocument> {
+	if (license.uri === undefined || license.uri === "") {
+		throw new Error("license carries no uri: there is no document to read");
+	}
+	// Through JSON, as it travels: a member set to undefined is an absent member.
+	checkStrict("fora.v1.License", JSON.parse(JSON.stringify(license)));
+	const fetched = await fetchDocument(transport(opts), license.uri);
+	return verifyDigest(license.uri_digest ?? "", fetched);
+}
+
+function transport(opts: ReadDocumentOptions): FetchLike {
+	return opts.fetch ?? guardedFetchFromEnv();
+}
diff --git a/sdk/ts/resolvers/errors.ts b/sdk/ts/resolvers/errors.ts
index 7f507e89..5d9f012c 100644
--- a/sdk/ts/resolvers/errors.ts
+++ b/sdk/ts/resolvers/errors.ts
@@ -23,8 +23,9 @@ export class UnknownKey extends ResolverError {
   }
 }
 
-/** The WBA identity directory (or a well-known JWKS/manifest) could not be
- * fetched, returned non-200, or failed to decode. DISTINCT from unknown-key so a
+/** A document could not be fetched, returned non-200, or failed to decode: the
+ * WBA identity directory, a well-known JWKS or manifest, a revocation list, or a
+ * license document. DISTINCT from unknown-key so a
  * fail-closed composite halts on an outage instead of falling through. */
 export class DirectoryUnavailable extends ResolverError {
   constructor(message: string, options?: { cause?: unknown }) {
@@ -159,3 +160,28 @@ export class ManifestVersionRefused extends ResolverError {
     this.name = "ManifestVersionRefused";
   }
 }
+
+/** A document was served under a media type other than the one the protocol names
+ * for it: application/json for /.well-known/fora.json and application/jwk-set+json
+ * for the WBA directory. A VERDICT on what the party publishes, never worth
+ * retrying. Only the document readers throw it; the resolvers that read the same
+ * documents for routing and key resolution do not check the label. Peer of Go
+ * `ErrMediaTypeRefused` / Python `MediaTypeRefusedError`. */
+export class MediaTypeRefused extends ResolverError {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options);
+    this.name = "MediaTypeRefused";
+  }
+}
+
+/** The bytes served at License.uri do not hash to License.uri_digest. The digest is
+ * covered by the offer signature, so a mismatch means the document changed after the
+ * offer was signed, or the server answering is not the one the offer named. A
+ * VERDICT, never retried. Peer of Go `ErrDigestMismatch` / Python
+ * `DigestMismatchError`. */
+export class DigestMismatch extends ResolverError {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options);
+    this.name = "DigestMismatch";
+  }
+}
diff --git a/sdk/ts/resolvers/http.ts b/sdk/ts/resolvers/http.ts
index caf96a0e..211ee0e2 100644
--- a/sdk/ts/resolvers/http.ts
+++ b/sdk/ts/resolvers/http.ts
@@ -21,10 +21,18 @@ import { DirectoryUnavailable } from "./errors.ts";
 import { allowedScheme, blockedAddress, MAX_REDIRECTS } from "./ssrf.ts";
 
 /** The minimal response shape the resolvers read — a structural subset of the
- * WHATWG `Response`, so the global `fetch` (and undici's) satisfies it. */
+ * WHATWG `Response`, so the global `fetch` (and undici's) satisfies it.
+ *
+ * `headers` and `arrayBuffer` are optional so a hand-written FetchLike that predates
+ * them keeps working. The document readers use both: a document whose response
+ * carries no `headers` has no media type, which the manifest and WBA readers refuse,
+ * and a body read without `arrayBuffer` is the UTF-8 encoding of `text()`, which is
+ * not the served bytes for a license document that is not UTF-8 text. */
 export interface FetchResponse {
 	status: number;
 	text(): Promise<string>;
+	headers?: { get(name: string): string | null };
+	arrayBuffer?(): Promise<ArrayBuffer>;
 }
 
 /** An injected HTTP GET. Defaults to the SSRF-guarded transport (guardedFetch). */
@@ -111,22 +119,45 @@ const guardedAgent = new Agent({ connect: ssrfGuard() }).compose(
 	interceptors.redirect({ maxRedirections: MAX_REDIRECTS }),
 );
 
-/** Reads an undici response body as text, bounded to MAX_DOC_BYTES. Iterates the
- * body stream (async-iterable in Node) so a hostile origin cannot force an
- * unbounded read; breaking the loop cancels the stream once the cap is hit. */
+/** Reads a response body, bounded to MAX_DOC_BYTES. Iterates the body stream
+ * (async-iterable in Node) so a hostile origin cannot force an unbounded read, and
+ * REFUSES a body past the cap rather than truncating it: a truncated document that
+ * happens to decode is worse than a refusal, and a truncated license document would
+ * be reported as a digest mismatch it is not. The refusal is thrown inside the
+ * FetchLike, so fetchStrict reports it as DirectoryUnavailable and fetchSoft as
+ * undefined, like every other failed read. */
 async function readBounded(
 	body: AsyncIterable<Uint8Array> | null,
-): Promise<string> {
-	if (body === null) return "";
+): Promise<Uint8Array> {
+	if (body === null) return new Uint8Array();
 	const chunks: Uint8Array[] = [];
 	let total = 0;
 	for await (const chunk of body) {
-		chunks.push(chunk);
 		total += chunk.length;
-		if (total >= MAX_DOC_BYTES) break;
+		if (total > MAX_DOC_BYTES) {
+			throw new Error(`document exceeds the ${MAX_DOC_BYTES} byte cap`);
+		}
+		chunks.push(chunk);
 	}
-	const buf = Buffer.concat(chunks.map((c) => Buffer.from(c)));
-	return buf.subarray(0, MAX_DOC_BYTES).toString("utf8");
+	return new Uint8Array(Buffer.concat(chunks.map((c) => Buffer.from(c))));
+}
+
+/** The FetchResponse a bounded read answers with: the bytes as read, their UTF-8
+ * text, and the response's headers. */
+function boundedResponse(
+	status: number,
+	body: Uint8Array,
+	header: (name: string) => string | null,
+): FetchResponse {
+	return {
+		status,
+		text: () => Promise.resolve(Buffer.from(body).toString("utf8")),
+		arrayBuffer: () =>
+			Promise.resolve(
+				body.buffer.slice(body.byteOffset, body.byteOffset + body.byteLength) as ArrayBuffer,
+			),
+		headers: { get: header },
+	};
 }
 
 /** GET `url` through `dispatcher` (an undici Agent carrying the SSRF connector
@@ -169,7 +200,11 @@ async function requestBounded(
 		throw err;
 	}
 	const body = await readBounded(resp.body as AsyncIterable<Uint8Array> | null);
-	return { status: resp.statusCode, text: () => Promise.resolve(body) };
+	return boundedResponse(resp.statusCode, body, (name) => {
+		const value = resp.headers[name.toLowerCase()];
+		if (value === undefined) return null;
+		return Array.isArray(value) ? value.join(", ") : value;
+	});
 }
 
 /** The SSRF-guarded default transport. The directory host is derived from a
@@ -289,27 +324,59 @@ export const defaultFetch: FetchLike = async (url) => {
 	const body = await readBounded(
 		r.body as unknown as AsyncIterable<Uint8Array> | null,
 	);
-	return { status: r.status, text: () => Promise.resolve(body) };
+	return boundedResponse(r.status, body, (name) => r.headers.get(name));
 };
 
-/** GET `url` and return the body text. A transport failure or a non-200 status
- * throws DirectoryUnavailable (fail-closed halt) — the taxonomy a composite
- * relies on to distinguish an outage from an unknown key. A blocked SSRF target
- * is a transport failure and surfaces the same way (never a valid empty doc). */
-export async function fetchStrict(
+/** One document as it was served: its bytes and the media type it was labelled with. */
+export interface Fetched {
+	url: string;
+	body: Uint8Array;
+	/** The Content-Type essence (type/subtype), lowercased, parameters stripped;
+	 * undefined when the response carried none. */
+	mediaType: string | undefined;
+}
+
+/** The type/subtype of a Content-Type value, lowercased, parameters dropped. */
+export function mediaTypeEssence(header: string | null | undefined): string | undefined {
+	if (header === null || header === undefined) return undefined;
+	const essence = (header.split(";", 1)[0] ?? "").trim().toLowerCase();
+	return essence === "" ? undefined : essence;
+}
+
+/** GET `url` and return the body and its media type. A transport failure or a
+ * non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
+ * composite relies on to distinguish an outage from an unknown key. A blocked SSRF
+ * target and a body past the cap are transport failures and surface the same way
+ * (never a valid empty doc). The one GET every document read shares. */
+export async function fetchDocument(
 	fetchFn: FetchLike,
 	url: string,
-): Promise<string> {
+): Promise<Fetched> {
 	let resp: FetchResponse;
+	let body: Uint8Array;
 	try {
 		resp = await fetchFn(url);
+		if (resp.status !== 200) {
+			throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
+		}
+		body =
+			resp.arrayBuffer !== undefined
+				? new Uint8Array(await resp.arrayBuffer())
+				: new TextEncoder().encode(await resp.text());
 	} catch (err) {
+		if (err instanceof DirectoryUnavailable) throw err;
 		throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
 	}
-	if (resp.status !== 200) {
-		throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
-	}
-	return resp.text();
+	return { url, body, mediaType: mediaTypeEssence(resp.headers?.get("content-type")) };
+}
+
+/** GET `url` and return the body text: fetchDocument without the media type, for a
+ * reader that has no use for it. */
+export async function fetchStrict(
+	fetchFn: FetchLike,
+	url: string,
+): Promise<string> {
+	return Buffer.from((await fetchDocument(fetchFn, url)).body).toString("utf8");
 }
 
 /** Best-effort GET: returns the body text on 200, or `undefined` on any
diff --git a/sdk/ts/resolvers/index.ts b/sdk/ts/resolvers/index.ts
index 1e123893..2dc37464 100644
--- a/sdk/ts/resolvers/index.ts
+++ b/sdk/ts/resolvers/index.ts
@@ -7,6 +7,22 @@
 // preserve the oracle's errors.Is-DISTINCT fail-closed taxonomy.
 
 export {
+	type Document,
+	type KeyRevocationList,
+	type License,
+	type LicenseDocument,
+	MANIFEST_MEDIA_TYPE,
+	type ReadDocumentOptions,
+	readLicenseDocument,
+	readManifest,
+	readRevocationList,
+	readWBADirectory,
+	WBA_DIRECTORY_MEDIA_TYPE,
+	type WBAFile,
+	type WellKnownManifest,
+} from "./documents.ts";
+export {
+	DigestMismatch,
 	DirectoryUnavailable,
 	EndpointRefused,
 	ExchangeNotPermitted,
@@ -15,6 +31,7 @@ export {
 	ManifestNotExchange,
 	ManifestUnusable,
 	ManifestVersionRefused,
+	MediaTypeRefused,
 	NoEndpoint,
 	ResolverError,
 	RevocationUnevaluated,
@@ -36,6 +53,7 @@ export {
 	type WellKnownRequirementsOptions,
 	type WellKnownRequirementsReader,
 } from "./registration-requirements.ts";
+export { StrictViolation } from "../src/strict.ts";
 export { allowedScheme, blockedAddress } from "./ssrf.ts";
 export { createStaticKeyResolver, type StaticKeyResolver } from "./static.ts";
 export {
diff --git a/sdk/ts/resolvers/offer-key-cache.ts b/sdk/ts/resolvers/offer-key-cache.ts
index bf3b6a29..22d073ee 100644
--- a/sdk/ts/resolvers/offer-key-cache.ts
+++ b/sdk/ts/resolvers/offer-key-cache.ts
@@ -26,10 +26,11 @@
 // seam, which is a programmer error surfaced at CONSTRUCTION (TypeError), never a
 // per-resolve absence — mirroring Go's PanicsWithoutFetch.
 
-import { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
+import type { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
 import type { OfferKeyResolver } from "../core/verifier.ts";
-import { type FetchLike, fetchStrict, guardedFetchFromEnv } from "./http.ts";
-import { activeEd25519KeyWithExpiryScreened, wbaDirectoryURL } from "./wba.ts";
+import { fetchWBAFile, wbaDirectoryURL } from "./documents.ts";
+import { type FetchLike, guardedFetchFromEnv } from "./http.ts";
+import { activeEd25519KeyWithExpiryScreened } from "./wba.ts";
 
 /** A parsed WBA identity directory — the shape the injected fetch seam returns. */
 type WBAFile = ReturnType<typeof WBAFileSchema.parse>;
@@ -241,11 +242,10 @@ export function createWBAOfferDirectoryFetch(
 	const port = opts.port ?? "";
 	return async (domain: string) => {
 		try {
-			const body = await fetchStrict(
+			return await fetchWBAFile(
 				fetchFn,
 				wbaDirectoryURL(scheme, joinDirectoryHost(domain, port)),
 			);
-			return WBAFileSchema.parse(JSON.parse(body));
 		} catch {
 			return undefined;
 		}
diff --git a/sdk/ts/resolvers/registration-requirements.ts b/sdk/ts/resolvers/registration-requirements.ts
index b247ddaa..c55842c4 100644
--- a/sdk/ts/resolvers/registration-requirements.ts
+++ b/sdk/ts/resolvers/registration-requirements.ts
@@ -27,14 +27,14 @@ import {
   type RegistrationSchema,
   type SchemaVerdict,
 } from "../src/regschema.ts";
-import { manifestVersionRefusal, WellKnownPath } from "../src/wire.ts";
+import { manifestVersionRefusal } from "../src/wire.ts";
+import { fetchManifest, manifestURL } from "./documents.ts";
 import {
-  DirectoryUnavailable,
   ExchangeNotPermitted,
   ManifestNotExchange,
   ManifestUnusable,
 } from "./errors.ts";
-import { type FetchLike, fetchStrict, guardedFetchFromEnv } from "./http.ts";
+import { type FetchLike, guardedFetchFromEnv } from "./http.ts";
 
 /** What one Exchange asks of a registration. Both members are optional in the
  * contract, and their absence is a normal answer rather than a failure. */
@@ -111,14 +111,9 @@ export function createWellKnownRequirementsReader(
       if (allow && !allow(exchange)) {
         throw new ExchangeNotPermitted(`exchange ${exchange} not permitted by policy`);
       }
-      const url = `${scheme}://${exchange}${WellKnownPath}`;
-      const body = await fetchStrict(fetchFn, url);
-      let doc: unknown;
-      try {
-        doc = JSON.parse(body);
-      } catch (err) {
-        throw new DirectoryUnavailable(`manifest decode ${url}`, { cause: err });
-      }
+      // Fetched and decoded where every reader of the manifest does that; `body` is the
+      // text the member below is sliced out of, decoded once.
+      const { text: body, doc } = await fetchManifest(fetchFn, manifestURL(scheme, exchange));
       // The document version gate, before any other member is read — the contract's own
       // ordering, and the same call the sibling endpoint face makes. A document that is
       // not an object carries no `ver`, so it is refused here as an absent one rather
diff --git a/sdk/ts/resolvers/wba.ts b/sdk/ts/resolvers/wba.ts
index 56c26d24..1ed41473 100644
--- a/sdk/ts/resolvers/wba.ts
+++ b/sdk/ts/resolvers/wba.ts
@@ -10,7 +10,7 @@
 // live in the SHARED refresh routine (refreshRevocationFor), invoked by BOTH the
 // sync directory-fetch path AND the Run poller — never poller-only.
 
-import {
+import type {
 	KeyRevocationListSchema,
 	WBAFileSchema,
 } from "../../../gen/ts/wire/schemas.ts";
@@ -23,30 +23,13 @@ import {
 	KeyRevoked,
 	RevocationUnevaluated,
 } from "./errors.ts";
-import {
-	type FetchLike,
-	fetchSoft,
-	fetchStrict,
-	guardedFetch,
-} from "./http.ts";
-
-/** The single public well-known path a WBA identity directory is served at (Web
- * Bot Auth; the identity half of the identity/commercial split — the commercial
- * overlay stays in /.well-known/fora.json). The one shared copy across the whole SDK. */
-export const WBA_DIRECTORY_PATH =
-	"/.well-known/http-message-signatures-directory";
-
-/** Build the full WBA identity-directory URL from a scheme and an already-joined
- * host: `${scheme}://${host}` + {@link WBA_DIRECTORY_PATH}. An empty scheme
- * defaults to https. A PURE string function — the host arrives ALREADY-JOINED (any
- * port-join / IPv6 bracketing is the caller's concern), there is NO env read and NO
- * scheme-in-host detection (those stay consumer glue). It mirrors the sdk/go
- * WBADirectoryURL oracle byte-for-byte, locked by the tri-replayed
- * wba-url-vectors.json corpus. */
-export function wbaDirectoryURL(scheme: string, host: string): string {
-	const s = scheme === "" ? "https" : scheme;
-	return `${s}://${host}${WBA_DIRECTORY_PATH}`;
-}
+import { fetchRevocationList, fetchWBAFile, WBA_DIRECTORY_PATH } from "./documents.ts";
+import { type FetchLike, guardedFetch } from "./http.ts";
+
+// Re-exported so the module that has always carried them still does; the one copy of
+// each lives with the document reads in ./documents.ts.
+export { WBA_DIRECTORY_PATH, wbaDirectoryURL } from "./documents.ts";
+
 const DEFAULT_TTL_MS = 3_600_000; // 1 hour
 const DEFAULT_POLL_MS = 300_000; // 300 s
 const DEFAULT_SYNC_DEBOUNCE_MS = 5_000; // unknown-thumbprint force-refresh throttle
@@ -247,13 +230,8 @@ class WBAResolverImpl implements WBAKeyResolver {
 		return file;
 	}
 
-	private async fetchDirectory(base: string): Promise<WBAFile> {
-		const body = await fetchStrict(this.fetchFn, base + WBA_DIRECTORY_PATH);
-		try {
-			return WBAFileSchema.parse(JSON.parse(body));
-		} catch (err) {
-			throw new DirectoryUnavailable("wba directory decode", { cause: err });
-		}
+	private fetchDirectory(base: string): Promise<WBAFile> {
+		return fetchWBAFile(this.fetchFn, base + WBA_DIRECTORY_PATH);
 	}
 
 	private isRevoked(host: string, thumbprintKey: string): boolean {
@@ -286,13 +264,11 @@ class WBAResolverImpl implements WBAKeyResolver {
 	): Promise<void> {
 		const revURL = file.revocation_url;
 		if (!revURL || !wbaHostAnchored(host, revURL)) return;
-		const body = await fetchSoft(this.fetchFn, revURL);
-		if (body === undefined) return;
 		let list: ReturnType<typeof KeyRevocationListSchema.parse>;
 		try {
-			list = KeyRevocationListSchema.parse(JSON.parse(body));
+			list = await fetchRevocationList(this.fetchFn, revURL);
 		} catch {
-			return;
+			return; // best-effort: a blip or an undecodable list keeps the prior snapshot
 		}
 		this.applyRevocation(host, list);
 	}
diff --git a/sdk/ts/resolvers/wellknown.ts b/sdk/ts/resolvers/wellknown.ts
index a97288a1..880a8e76 100644
--- a/sdk/ts/resolvers/wellknown.ts
+++ b/sdk/ts/resolvers/wellknown.ts
@@ -10,7 +10,8 @@
 import { endpointRefusal } from "../src/endpoint-rule.ts";
 import { invalidHost } from "../src/host-ref.ts";
 import { isBareHost } from "../src/hosts.ts";
-import { manifestVersionRefusal, WellKnownPath } from "../src/wire.ts";
+import { manifestVersionRefusal } from "../src/wire.ts";
+import { fetchManifest, manifestURL } from "./documents.ts";
 import { DirectoryUnavailable, EndpointRefused, ManifestVersionRefused, NoEndpoint } from "./errors.ts";
 import { type FetchLike, defaultFetch, fetchStrict } from "./http.ts";
 import { ed25519KeysFromJwks } from "./jwks.ts";
@@ -179,14 +180,9 @@ class EndpointResolverImpl implements WellKnownEndpointResolver {
   private async fetchEndpoint(host: string): Promise<string> {
     const hit = this.cached(host);
     if (hit !== undefined) return hit; // filled while we queued behind the flight lock
-    const url = `${this.scheme}://${host}${WellKnownPath}`;
-    const body = await fetchStrict(this.fetchFn, url);
-    let doc: unknown;
-    try {
-      doc = JSON.parse(body);
-    } catch (err) {
-      throw new DirectoryUnavailable(`manifest decode ${url}`, { cause: err });
-    }
+    // The manifest is read where every reader of it reads it, leniently: an unknown
+    // member is a newer minor version, not a reason to stop routing.
+    const { doc } = await fetchManifest(this.fetchFn, manifestURL(this.scheme, host));
     // The document version gate runs before the endpoint is so much as looked
     // at, and never caches: the next resolve fetches again.
     const versionRefusal = manifestVersionRefusal((doc as { ver?: unknown } | null)?.ver);
diff --git a/sdk/ts/src/strict.ts b/sdk/ts/src/strict.ts
new file mode 100644
index 00000000..b0237549
--- /dev/null
+++ b/sdk/ts/src/strict.ts
@@ -0,0 +1,261 @@
+// The strict check: refuse a message the contract does not describe exactly.
+//
+// The generated schemas the SDK parses with are forward-compatible on purpose: they drop a
+// field they do not know, so a newer peer does not break an older reader. A conformance
+// harness wants the opposite — an unknown or misspelled field is the defect it is looking
+// for — and it wants the cross-field rules the proto states, which no per-field schema can
+// express. This module is that check, and it is the only one: the client's strict decoding
+// of a success answer, its check of every ErrorDetail in an error envelope, and the
+// document readers in ../resolvers all call strictViolation. A message is checked against:
+//
+//   - the published STRICT JSON Schema of its message (gen/jsonschema, additionalProperties
+//     false on every message object at every depth), so the shape is the one the
+//     generator emitted rather than a second definition kept here;
+//   - the cross-field rules, through crossFieldRuleIds, on the message itself and on every
+//     nested message that carries any.
+//
+// A null member of a message object is removed first: proto-JSON reads null as "absent",
+// and a peer rendering unpopulated fields emits one for every unset message field.
+// Nothing inside a google.protobuf.Struct is touched, because there a null is data.
+
+import Ajv2020Module, { type ValidateFunction } from "ajv/dist/2020.js";
+
+import { crossFieldRuleIds, hasCrossFieldRules } from "./crossfield.ts";
+
+import setReportingPolicyResponse from "../../../gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json" with { type: "json" };
+import setTenantFeeRateResponse from "../../../gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json" with { type: "json" };
+import brokerTransactionResponse from "../../../gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json" with { type: "json" };
+import discoveryResponse from "../../../gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json" with { type: "json" };
+import disputeResponse from "../../../gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json" with { type: "json" };
+import domainVerificationChallenge from "../../../gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json" with { type: "json" };
+import domainVerificationResult from "../../../gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json" with { type: "json" };
+import errorDetail from "../../../gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json" with { type: "json" };
+import getAccountStatusResponse from "../../../gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json" with { type: "json" };
+import keyRevocationList from "../../../gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json" with { type: "json" };
+import license from "../../../gen/jsonschema/fora.v1.License.schema.strict.json" with { type: "json" };
+import pushResourcesResponse from "../../../gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json" with { type: "json" };
+import refreshCatalogResponse from "../../../gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json" with { type: "json" };
+import registerResponse from "../../../gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json" with { type: "json" };
+import removeResourcesResponse from "../../../gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json" with { type: "json" };
+import resourceResponse from "../../../gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json" with { type: "json" };
+import transactionResponse from "../../../gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json" with { type: "json" };
+import usageReportResponse from "../../../gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json" with { type: "json" };
+import wbaFile from "../../../gen/jsonschema/fora.v1.WBAFile.schema.strict.json" with { type: "json" };
+import wellKnownManifest from "../../../gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json" with { type: "json" };
+
+/** The strict schema of every message the SDK reads, by fully-qualified name: what a
+ * client verb decodes, the ErrorDetail an error answer carries, and the four documents
+ * the readers fetch (the manifest, the WBA directory, the revocation list, and the
+ * License whose document is read). checkStrict takes any other message's schema as an
+ * argument. */
+const STRICT_SCHEMAS: Readonly<Record<string, object>> = {
+	"fora.admin.v1.SetReportingPolicyResponse": setReportingPolicyResponse,
+	"fora.admin.v1.SetTenantFeeRateResponse": setTenantFeeRateResponse,
+	"fora.v1.BrokerTransactionResponse": brokerTransactionResponse,
+	"fora.v1.DiscoveryResponse": discoveryResponse,
+	"fora.v1.DisputeResponse": disputeResponse,
+	"fora.v1.DomainVerificationChallenge": domainVerificationChallenge,
+	"fora.v1.DomainVerificationResult": domainVerificationResult,
+	"fora.v1.ErrorDetail": errorDetail,
+	"fora.v1.GetAccountStatusResponse": getAccountStatusResponse,
+	"fora.v1.KeyRevocationList": keyRevocationList,
+	"fora.v1.License": license,
+	"fora.v1.PushResourcesResponse": pushResourcesResponse,
+	"fora.v1.RefreshCatalogResponse": refreshCatalogResponse,
+	"fora.v1.RegisterResponse": registerResponse,
+	"fora.v1.RemoveResourcesResponse": removeResourcesResponse,
+	"fora.v1.ResourceResponse": resourceResponse,
+	"fora.v1.TransactionResponse": transactionResponse,
+	"fora.v1.UsageReportResponse": usageReportResponse,
+	"fora.v1.WBAFile": wbaFile,
+	"fora.v1.WellKnownManifest": wellKnownManifest,
+};
+
+// Ajv is CommonJS. Node hands an ESM importer its module.exports, which is the class; a
+// bundler may hand over the namespace, whose `default` is. Read whichever arrived, typed
+// by the one method used, so the declaration holds under either module resolution.
+interface AjvEngine {
+	compile(schema: object): ValidateFunction;
+}
+type AjvConstructor = new (options: {
+	strict: boolean;
+	validateFormats: boolean;
+	addUsedSchema: boolean;
+}) => AjvEngine;
+const Ajv2020 = ((Ajv2020Module as unknown as { default?: unknown }).default ??
+	Ajv2020Module) as unknown as AjvConstructor;
+
+// One engine for the process, schemas compiled on first use. `format` stays an annotation,
+// as the schemas' README says: a validator asserting `duration` needs ajv-formats.
+let engine: AjvEngine | undefined;
+const compiled = new Map<string, ValidateFunction>();
+
+// addUsedSchema false: a schema is never registered under its $id, so a caller's copy of
+// a schema the SDK also bundles compiles beside it instead of colliding with it.
+function ajv(): AjvEngine {
+	engine ??= new Ajv2020({ strict: true, validateFormats: false, addUsedSchema: false });
+	return engine;
+}
+
+function validatorFor(message: string, schema: object): ValidateFunction {
+	let validate = compiled.get(message);
+	if (validate === undefined) {
+		validate = ajv().compile(schema);
+		compiled.set(message, validate);
+	}
+	return validate;
+}
+
+type Node = Record<string, unknown>;
+
+function isNode(v: unknown): v is Node {
+	return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+const DEFS_PREFIX = "#/$defs/";
+
+/** One message instance the cross-field rules are checked on. */
+interface Found {
+	message: string;
+	path: string;
+	value: Node;
+}
+
+/**
+ * normalize returns a copy of `instance` with null members of message objects removed,
+ * guided by the schema, and collects every message instance whose type carries
+ * cross-field rules. A key the schema does not declare is kept, so the schema refuses it.
+ */
+function normalize(
+	instance: unknown,
+	node: unknown,
+	defs: Node,
+	path: string,
+	found: Found[],
+): unknown {
+	if (!isNode(node)) return instance;
+	const ref = node["$ref"];
+	if (typeof ref === "string" && ref.startsWith(DEFS_PREFIX)) {
+		const name = ref.slice(DEFS_PREFIX.length);
+		return normalizeMessage(instance, defs[name], defs, path, found, name);
+	}
+	if (Array.isArray(instance) && node["items"] !== undefined) {
+		return instance.map((item, i) => normalize(item, node["items"], defs, `${path}/${i}`, found));
+	}
+	const properties = node["properties"];
+	if (isNode(properties)) return normalizeMessage(instance, node, defs, path, found, undefined);
+	const values = node["additionalProperties"];
+	if (isNode(instance) && isNode(values)) {
+		const out: Node = {};
+		for (const [k, v] of Object.entries(instance)) {
+			setMember(out, k, normalize(v, values, defs, `${path}/${k}`, found));
+		}
+		return out;
+	}
+	// A Struct, a Value, a scalar or an enum: left exactly as it arrived.
+	return instance;
+}
+
+function normalizeMessage(
+	instance: unknown,
+	node: unknown,
+	defs: Node,
+	path: string,
+	found: Found[],
+	name: string | undefined,
+): unknown {
+	if (!isNode(instance) || !isNode(node)) return instance;
+	const properties = isNode(node["properties"]) ? node["properties"] : {};
+	const out: Node = {};
+	for (const [k, v] of Object.entries(instance)) {
+		if (v === null && Object.prototype.hasOwnProperty.call(properties, k)) continue;
+		setMember(out, k, normalize(v, properties[k], defs, `${path}/${k}`, found));
+	}
+	if (name !== undefined) {
+		const bare = name.slice(name.lastIndexOf(".") + 1);
+		if (hasCrossFieldRules(bare)) found.push({ message: bare, path, value: out });
+	}
+	return out;
+}
+
+function setMember(target: Node, name: string, value: unknown): void {
+	Object.defineProperty(target, name, { value, enumerable: true, writable: true, configurable: true });
+}
+
+/** A message the strict contract does not accept. Peer of Go helpers.ErrStrictViolation
+ * and Python StrictViolationError. */
+export class StrictViolation extends Error {
+	/** The fully-qualified name of the message the payload was checked as. */
+	readonly messageName: string;
+	/** Why it was refused: the location and the schema's complaint, or the cross-field
+	 * rules it breaks. */
+	readonly violation: string;
+
+	constructor(messageName: string, violation: string, options?: { cause?: unknown }) {
+		super(`${messageName} is refused by the strict contract: ${violation}`, options);
+		this.name = "StrictViolation";
+		this.messageName = messageName;
+		this.violation = violation;
+	}
+}
+
+/**
+ * checkStrict refuses `payload` unless it is a `message` the strict contract accepts.
+ *
+ * `message` is the fully-qualified message name, for example "fora.v1.WellKnownManifest",
+ * and `payload` the decoded proto-JSON value, as JSON.parse returns it. Throws
+ * StrictViolation naming the first failure: the location and the schema's complaint for
+ * an unknown field or a field-level rule, or the violated rule ids for a cross-field rule.
+ *
+ * The SDK bundles the strict schema of every message it reads. For any other message,
+ * pass its strict schema, as published at
+ * `@fora-protocol/sdk/jsonschema/<message>.schema.strict.json`; a message with neither
+ * throws a plain Error, which says nothing about the payload.
+ */
+export function checkStrict(message: string, payload: unknown, schema?: object): void {
+	const problem = strictViolation(payload, message, schema);
+	if (problem !== undefined) throw new StrictViolation(message, problem);
+}
+
+/**
+ * strictViolation says why `raw` is not a `message` the strict contract accepts: the
+ * location and the schema's complaint, or the cross-field rules it breaks. Undefined when
+ * it is accepted.
+ */
+export function strictViolation(raw: unknown, message: string, given?: object): string | undefined {
+	const schema = (given ?? STRICT_SCHEMAS[message]) as Node | undefined;
+	if (schema === undefined) throw new Error(`no strict schema for ${message}`);
+	const defs = isNode(schema["$defs"]) ? schema["$defs"] : {};
+	const found: Found[] = [];
+	const normalized = normalizeMessage(raw, schema, defs, "", found, message);
+	const validate = given === undefined ? validatorFor(message, schema) : compileOnce(given);
+	if (!validate(normalized)) {
+		const first = validate.errors?.[0];
+		const where = first?.instancePath === "" || first === undefined ? "(root)" : first.instancePath;
+		const extra =
+			first?.keyword === "additionalProperties"
+				? ` (${JSON.stringify((first.params as { additionalProperty?: string }).additionalProperty)})`
+				: "";
+		return `${where} ${first?.message ?? "does not match"}${extra}`;
+	}
+	for (const f of found) {
+		const violated = crossFieldRuleIds(f.message, f.value);
+		if (violated.length > 0) {
+			return `${f.path === "" ? "(root)" : f.path} violates cross-field rule(s) ${violated.join(", ")}`;
+		}
+	}
+	return undefined;
+}
+
+// A schema a caller passed is compiled once per object, never cached under a name a
+// bundled schema could share.
+const compiledGiven = new WeakMap<object, ValidateFunction>();
+
+function compileOnce(schema: object): ValidateFunction {
+	let validate = compiledGiven.get(schema);
+	if (validate === undefined) {
+		validate = ajv().compile(schema);
+		compiledGiven.set(schema, validate);
+	}
+	return validate;
+}
diff --git a/sdk/ts/tests/document-check.parity.test.ts b/sdk/ts/tests/document-check.parity.test.ts
new file mode 100644
index 00000000..87d74fb4
--- /dev/null
+++ b/sdk/ts/tests/document-check.parity.test.ts
@@ -0,0 +1,102 @@
+// Replay the document-check and license-digest corpora through the TypeScript readers'
+// checks (TypeScript side).
+//
+// Both corpora are emitted by the Go oracle (sdk/go/resolvers/gen_document_check_vectors_test.go)
+// by running the pure decision each document reader ends in. Replaying them here holds
+// accept and verifyDigest to the same verdict for the same bytes and Content-Type, so a
+// harness reading a party's documents through any of the three SDKs reports the same
+// finding.
+import { describe, expect, it } from "vitest";
+
+import documents from "../../go/resolvers/testdata/document-check-vectors.json";
+import digests from "../../go/resolvers/testdata/license-digest-vectors.json";
+import {
+	accept,
+	type DocumentKind,
+	MANIFEST,
+	REVOCATION_LIST,
+	verifyDigest,
+	WBA_DIRECTORY,
+} from "../resolvers/documents.ts";
+import {
+	DigestMismatch,
+	DirectoryUnavailable,
+	ManifestVersionRefused,
+	MediaTypeRefused,
+} from "../resolvers/errors.ts";
+import { mediaTypeEssence } from "../resolvers/http.ts";
+import { StrictViolation } from "../src/strict.ts";
+
+interface DocumentVector {
+	label: string;
+	document: string;
+	content_type: string;
+	body: string;
+	verdict: string;
+}
+interface DigestVector {
+	label: string;
+	body: string;
+	uri_digest: string;
+	verdict: string;
+	digest: string;
+}
+
+const KINDS: Record<string, DocumentKind<unknown>> = {
+	manifest: MANIFEST,
+	wba_directory: WBA_DIRECTORY,
+	revocation_list: REVOCATION_LIST,
+};
+
+function verdictOf(v: DocumentVector): string {
+	const fetched = {
+		url: "https://party.example/doc",
+		body: new TextEncoder().encode(v.body),
+		// "" means the header was absent.
+		mediaType: mediaTypeEssence(v.content_type === "" ? null : v.content_type),
+	};
+	try {
+		accept(KINDS[v.document] as DocumentKind<unknown>, fetched);
+		return "ok";
+	} catch (err) {
+		if (err instanceof MediaTypeRefused) return "media_type";
+		if (err instanceof DirectoryUnavailable) return "undecodable";
+		if (err instanceof ManifestVersionRefused) return "version";
+		if (err instanceof StrictViolation) return "strict";
+		throw err;
+	}
+}
+
+const documentVectors = (documents as { vectors: DocumentVector[] }).vectors;
+const digestVectors = (digests as { vectors: DigestVector[] }).vectors;
+
+describe("document-check corpus", () => {
+	it("is not empty", () => {
+		expect(documentVectors.length).toBeGreaterThan(0);
+		expect(digestVectors.length).toBeGreaterThan(0);
+	});
+
+	for (const v of documentVectors) {
+		it(v.label, () => {
+			expect(verdictOf(v)).toBe(v.verdict);
+		});
+	}
+});
+
+describe("license-digest corpus", () => {
+	for (const v of digestVectors) {
+		it(v.label, () => {
+			const fetched = {
+				url: "https://publisher.example/terms",
+				body: new TextEncoder().encode(v.body),
+				mediaType: undefined,
+			};
+			if (v.verdict === "mismatch") {
+				expect(() => verifyDigest(v.uri_digest, fetched)).toThrow(DigestMismatch);
+				return;
+			}
+			expect(v.verdict).toBe("ok");
+			expect(verifyDigest(v.uri_digest, fetched).digest).toBe(v.digest);
+		});
+	}
+});
diff --git a/sdk/ts/tests/document-readers.integration.test.ts b/sdk/ts/tests/document-readers.integration.test.ts
new file mode 100644
index 00000000..393762f5
--- /dev/null
+++ b/sdk/ts/tests/document-readers.integration.test.ts
@@ -0,0 +1,220 @@
+// The public document readers, driven against a real in-process origin.
+//
+// Each reader dials through guardedFetchFromEnv by default, so the suite relaxes the
+// guards the way a sandbox does (SKIP_SSRF, ALLOW_INSECURE) rather than injecting a plain
+// fetch: the path under test is the default one. One case leaves the guards on and shows
+// the loopback origin refused. The verdicts on the bytes themselves are pinned across the
+// three languages by the document-check and license-digest corpora; this suite proves the
+// readers reach those checks over HTTP, and that each failure rejects with its typed error
+// rather than resolving to undefined.
+import { createHash } from "node:crypto";
+import { createServer, type Server } from "node:http";
+import type { AddressInfo } from "node:net";
+
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+
+import { checkStrict, StrictViolation } from "../client/index.ts";
+import {
+	DigestMismatch,
+	DirectoryUnavailable,
+	MANIFEST_MEDIA_TYPE,
+	ManifestVersionRefused,
+	MediaTypeRefused,
+	readLicenseDocument,
+	readManifest,
+	readRevocationList,
+	readWBADirectory,
+	WBA_DIRECTORY_MEDIA_TYPE,
+	WBA_DIRECTORY_PATH,
+} from "../resolvers/index.ts";
+
+const MANIFEST_PATH = "/.well-known/fora.json";
+const LICENSE_TEXT = "Licensed for retrieval-augmented answers, attribution required.\n";
+const JWK = {
+	kty: "OKP",
+	crv: "Ed25519",
+	use: "sig",
+	alg: "EdDSA",
+	x: "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
+	not_before: "2026-05-01T00:00:00Z",
+	not_after: "2027-05-01T00:00:00Z",
+};
+
+interface Served {
+	body: string;
+	contentType?: string; // undefined sends no Content-Type
+	status?: number;
+}
+
+let server: Server;
+let host: string;
+let docs: Map<string, Served>;
+const savedEnv: Record<string, string | undefined> = {};
+
+beforeEach(async () => {
+	for (const name of ["SKIP_SSRF", "ALLOW_INSECURE"]) savedEnv[name] = process.env[name];
+	process.env.SKIP_SSRF = "true";
+	process.env.ALLOW_INSECURE = "true";
+	docs = new Map();
+	server = createServer((req, res) => {
+		const doc = docs.get((req.url ?? "").split("?")[0] ?? "");
+		if (doc === undefined) {
+			res.writeHead(404).end();
+			return;
+		}
+		res.writeHead(doc.status ?? 200, doc.contentType === undefined ? {} : { "content-type": doc.contentType });
+		res.end(doc.body);
+	});
+	await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
+	host = `127.0.0.1:${(server.address() as AddressInfo).port}`;
+});
+
+afterEach(async () => {
+	for (const [name, value] of Object.entries(savedEnv)) {
+		if (value === undefined) delete process.env[name];
+		else process.env[name] = value;
+	}
+	await new Promise<void>((resolve) => server.close(() => resolve()));
+});
+
+const plain = { scheme: "http" };
+
+function sha256(text: string): string {
+	return `sha256:${createHash("sha256").update(text).digest("hex")}`;
+}
+
+describe("readManifest", () => {
+	it("returns the parsed manifest and its media type", async () => {
+		docs.set(MANIFEST_PATH, {
+			body: JSON.stringify({ ver: "1.0", role: "ROLE_EXCHANGE", endpoint: "https://exchange.example/rpc" }),
+			contentType: "application/json; charset=utf-8",
+		});
+		const doc = await readManifest(host, plain);
+		expect(doc.message.role).toBe("ROLE_EXCHANGE");
+		expect(doc.message.endpoint).toBe("https://exchange.example/rpc");
+		expect(doc.mediaType).toBe(MANIFEST_MEDIA_TYPE);
+		expect(doc.url).toBe(`http://${host}${MANIFEST_PATH}`);
+	});
+
+	it.each([
+		["an unknown member", { body: '{"ver":"1.0","role":"ROLE_EXCHANGE","endpoints":[]}', contentType: "application/json" }, StrictViolation],
+		["a broken cross-field rule", { body: `{"ver":"1.0","role":"ROLE_EXCHANGE","terms_digest":"sha256:${"0".repeat(64)}"}`, contentType: "application/json" }, StrictViolation],
+		["the wrong media type", { body: '{"ver":"1.0","role":"ROLE_EXCHANGE"}', contentType: "text/plain" }, MediaTypeRefused],
+		["no media type", { body: '{"ver":"1.0","role":"ROLE_EXCHANGE"}' }, MediaTypeRefused],
+		["a version read before the rest", { body: '{"ver":"2.0","role":"ROLE_EXCHANGE","endpoints":[]}', contentType: "application/json" }, ManifestVersionRefused],
+		["a document that is not published", { body: "", contentType: "application/json", status: 404 }, DirectoryUnavailable],
+	] as [string, Served, new (...args: never[]) => Error][])("refuses %s", async (_name, served, want) => {
+		docs.set(MANIFEST_PATH, served);
+		await expect(readManifest(host, plain)).rejects.toBeInstanceOf(want);
+	});
+
+	it("refuses a value that is not a bare host before dialling", async () => {
+		await expect(readManifest(`${host}/elsewhere`, plain)).rejects.toThrow(/not a bare host/);
+	});
+
+	it("dials through the address guard", async () => {
+		delete process.env.SKIP_SSRF;
+		docs.set(MANIFEST_PATH, { body: '{"ver":"1.0","role":"ROLE_EXCHANGE"}', contentType: "application/json" });
+		await expect(readManifest(host, plain)).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("dials through the scheme guard", async () => {
+		delete process.env.ALLOW_INSECURE;
+		docs.set(MANIFEST_PATH, { body: '{"ver":"1.0","role":"ROLE_EXCHANGE"}', contentType: "application/json" });
+		await expect(readManifest(host, plain)).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+});
+
+describe("readWBADirectory", () => {
+	it("reads by domain and by URL", async () => {
+		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [JWK] }), contentType: WBA_DIRECTORY_MEDIA_TYPE });
+		for (const ref of [host, `http://${host}${WBA_DIRECTORY_PATH}`]) {
+			const doc = await readWBADirectory(ref, plain);
+			expect(doc.message.keys?.map((k) => k.x)).toEqual([JWK.x]);
+			expect(doc.mediaType).toBe(WBA_DIRECTORY_MEDIA_TYPE);
+		}
+	});
+
+	it("refuses a directory served as plain JSON", async () => {
+		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [JWK] }), contentType: "application/json" });
+		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(MediaTypeRefused);
+	});
+
+	it("refuses a key carrying a kid", async () => {
+		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [{ ...JWK, kid: "k1" }] }), contentType: WBA_DIRECTORY_MEDIA_TYPE });
+		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(StrictViolation);
+	});
+});
+
+describe("readRevocationList", () => {
+	it("returns the snapshot whatever media type it is served under", async () => {
+		docs.set("/revoked", { body: '{"as_of":"2026-05-01T12:00:00Z","revoked":["tp"]}', contentType: "text/plain" });
+		const doc = await readRevocationList(`http://${host}/revoked`, plain);
+		expect(doc.message.revoked).toEqual(["tp"]);
+		expect(doc.mediaType).toBe("text/plain");
+	});
+
+	it.each([
+		["an unknown member", '{"as_of":"2026-05-01T12:00:00Z","revoked":[],"next":"x"}'],
+		["a timestamp that is not RFC 3339", '{"as_of":"yesterday","revoked":[]}'],
+	])("refuses %s", async (_name, body) => {
+		docs.set("/revoked", { body, contentType: "application/json" });
+		await expect(readRevocationList(`http://${host}/revoked`, plain)).rejects.toBeInstanceOf(StrictViolation);
+	});
+});
+
+describe("readLicenseDocument", () => {
+	it("verifies the digest", async () => {
+		docs.set("/terms", { body: LICENSE_TEXT, contentType: "text/plain; charset=utf-8" });
+		const doc = await readLicenseDocument({ uri: `http://${host}/terms`, uri_digest: sha256(LICENSE_TEXT) }, plain);
+		expect(new TextDecoder().decode(doc.body)).toBe(LICENSE_TEXT);
+		expect(doc.digest).toBe(sha256(LICENSE_TEXT));
+		expect(doc.mediaType).toBe("text/plain");
+	});
+
+	it("refuses a digest mismatch", async () => {
+		docs.set("/terms", { body: `${LICENSE_TEXT}Amended after the offer was signed.\n`, contentType: "text/plain" });
+		await expect(
+			readLicenseDocument({ uri: `http://${host}/terms`, uri_digest: sha256(LICENSE_TEXT) }, plain),
+		).rejects.toBeInstanceOf(DigestMismatch);
+	});
+
+	it("refuses a uri without a digest before dialling", async () => {
+		await expect(readLicenseDocument({ uri: `http://${host}/terms` }, plain)).rejects.toBeInstanceOf(StrictViolation);
+	});
+
+	it("reports a scheme it will not dial as unavailable", async () => {
+		await expect(
+			readLicenseDocument({ uri: "tdl:ai-terms/2026", uri_digest: sha256(LICENSE_TEXT) }, plain),
+		).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("refuses a license with no uri", async () => {
+		await expect(readLicenseDocument({ id: "CC-BY-4.0" }, plain)).rejects.toThrow(/no uri/);
+	});
+});
+
+describe("checkStrict", () => {
+	it("accepts a valid message and names a violation", () => {
+		checkStrict("fora.v1.KeyRevocationList", { as_of: "2026-05-01T12:00:00Z", revoked: [] });
+		try {
+			checkStrict("fora.v1.KeyRevocationList", { revokedd: [] });
+			expect.unreachable();
+		} catch (err) {
+			expect(err).toBeInstanceOf(StrictViolation);
+			expect((err as StrictViolation).messageName).toBe("fora.v1.KeyRevocationList");
+			expect((err as StrictViolation).violation).toContain("revokedd");
+		}
+	});
+
+	it("refuses the lowerCamel spelling and reads null as absent", () => {
+		expect(() => checkStrict("fora.v1.WellKnownManifest", { role: "ROLE_EXCHANGE", termsUri: "x" })).toThrow(StrictViolation);
+		checkStrict("fora.v1.WellKnownManifest", { role: "ROLE_EXCHANGE", endpoint: null });
+	});
+
+	it("checks a message the SDK does not bundle against the schema it is given", async () => {
+		const schema = (await import("../../../gen/jsonschema/fora.v1.Quota.schema.strict.json", { with: { type: "json" } })).default;
+		expect(() => checkStrict("fora.v1.Quota", { limit: "0" }, schema)).toThrow(StrictViolation);
+		expect(() => checkStrict("fora.v1.Quota", {})).toThrow(/no strict schema/);
+	});
+});

From 848309be12b06e669289dde33c14918fa814fe6d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 08:03:32 -0400
Subject: [PATCH 036/164] Map the document readers and the strict check, and
 regenerate the parity matrix

Twelve new Go symbols map to their Python and TypeScript names:
helpers.CheckStrict and ErrStrictViolation; resolvers.ReadManifest,
ReadWBADirectory, ReadRevocationList and ReadLicenseDocument; Document
and LicenseDocument; ErrMediaTypeRefused and ErrDigestMismatch; and the
two media-type constants. Two are Go-only exclusions with their reasons:
helpers.CheckStrictMessage checks a decoded proto.Message, which only the
Go client holds, and resolvers.ReadOptions folds into keyword arguments
in Python and an options object in TypeScript. No divergence is added,
so the allowlist baseline is unchanged. The parity matrix is regenerated:
169 symbols at parity and 41 tri-replayed corpora.
---
 docs/sdk-parity-matrix.md  | 18 ++++++++++-
 sdk/parity/symbol-map.json | 62 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 79 insertions(+), 1 deletion(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 2b339c18..55f17bab 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 157 symbols at cross-language parity · 17 documented divergences · 191 Go-idiomatic exclusions · 39 conformance corpora, each tri-replayed.
+**At a glance:** 169 symbols at cross-language parity · 17 documented divergences · 193 Go-idiomatic exclusions · 41 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -38,6 +38,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `CatalogRejectionDetail` | `catalog_rejection_detail` | `catalogRejectionDetail` |
 | `CheckAudience` | `check_audience` | `checkAudience` |
 | `CheckRegistrationData` | `check_registration_data` | `checkRegistrationData` |
+| `CheckStrict` | `check_strict` | `checkStrict` |
 | `CheckWellKnownManifestVersion` | `manifest_version_refusal` | `manifestVersionRefusal` |
 | `CompileRegistrationSchema` | `compile_registration_schema` | `compileRegistrationSchema` |
 | `ConnectProtocolVersion` | `ConnectProtocolVersion` | `ConnectProtocolVersion` |
@@ -51,6 +52,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `DomainVerificationFailureDetail` | `domain_verification_failure_detail` | `domainVerificationFailureDetail` |
 | `EntryVerdict` | `EntryVerdict` | `EntryVerdict` |
 | `ErrManifestVersionRefused` | `ManifestVersionRefusedError` | `ManifestVersionRefused` |
+| `ErrStrictViolation` | `StrictViolationError` | `StrictViolation` |
 | `ErrUnknownKey` | `UnknownKeyError` | `UnknownKey` |
 | `FormatMoney` | `format_money` | `formatMoney` |
 | `GenerateKey` | `generate_key` | `generateKey` |
@@ -132,6 +134,8 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `Content` | `Content` | `Content` |
 | `DefaultContentTimeout` | `DEFAULT_CONTENT_TIMEOUT_SEC` | `DEFAULT_CONTENT_TIMEOUT_MS` |
 | `DefaultMaxContentBytes` | `DEFAULT_MAX_CONTENT_BYTES` | `DEFAULT_MAX_CONTENT_BYTES` |
+| `Document` | `Document` | `Document` |
+| `ErrDigestMismatch` | `DigestMismatchError` | `DigestMismatch` |
 | `ErrDirectoryUnavailable` | `DirectoryUnavailableError` | `DirectoryUnavailable` |
 | `ErrEndpointRefused` | `EndpointRefusedError` | `EndpointRefused` |
 | `ErrExchangeNotPermitted` | `ExchangeNotPermittedError` | `ExchangeNotPermitted` |
@@ -140,14 +144,22 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ErrManifestNotExchange` | `ManifestNotExchangeError` | `ManifestNotExchange` |
 | `ErrManifestUnusable` | `ManifestUnusableError` | `ManifestUnusable` |
 | `ErrManifestVersionRefused` | `ManifestVersionRefusedError` | `ManifestVersionRefused` |
+| `ErrMediaTypeRefused` | `MediaTypeRefusedError` | `MediaTypeRefused` |
 | `ErrNoEndpoint` | `NoEndpointError` | `NoEndpoint` |
 | `ErrRevocationUnevaluated` | `RevocationUnevaluatedError` | `RevocationUnevaluated` |
 | `ErrUnknownKey` | `UnknownKeyError` | `UnknownKey` |
+| `LicenseDocument` | `LicenseDocument` | `LicenseDocument` |
+| `ManifestMediaType` | `MANIFEST_MEDIA_TYPE` | `MANIFEST_MEDIA_TYPE` |
 | `NewGuardedClientFromEnv` | `guarded_client` | `guardedFetchFromEnv` |
 | `NewWBADirectoryFetcher` | `create_wba_offer_directory_fetch` | `createWBAOfferDirectoryFetch` |
 | `OfferDirectoryFetcher` | `DirectoryFetch` | `OfferDirectoryFetch` |
+| `ReadLicenseDocument` | `read_license_document` | `readLicenseDocument` |
+| `ReadManifest` | `read_manifest` | `readManifest` |
+| `ReadRevocationList` | `read_revocation_list` | `readRevocationList` |
+| `ReadWBADirectory` | `read_wba_directory` | `readWBADirectory` |
 | `RegistrationRequirements` | `RegistrationRequirements` | `RegistrationRequirements` |
 | `SSRFGuard` | `ssrf_guard` | `ssrfGuard` |
+| `WBADirectoryMediaType` | `WBA_DIRECTORY_MEDIA_TYPE` | `WBA_DIRECTORY_MEDIA_TYPE` |
 | `WBADirectoryPath` | `WBA_DIRECTORY_PATH` | `WBA_DIRECTORY_PATH` |
 | `WBADirectoryURL` | `wba_directory_url` | `wbaDirectoryURL` |
 | `WBAKeyResolver` | `WBAKeyResolver` | `WBAKeyResolver` |
@@ -334,6 +346,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.AudienceNoVerdict` | Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer. |
 | `helpers.BrokerKeyIDPrefix` | Relay keyID wire-prefix constant; inlined per language. |
 | `helpers.CheckRegistrationDataStruct` | Go-only raw-Struct face of the mapped helpers.CheckRegistrationData, and deliberately absent from the ports: it exists because a payload with NO JSON REPRESENTATION loses the evidence for that when Go converts a Struct to a map. The class has two members and the conversion erases both — a non-finite number becomes the string "NaN", "Infinity" or "-Infinity", which a payload may also carry legitimately, and a Value with no member of its kind oneof set becomes nil, which is also what a real JSON null gives — so the check has to run before the conversion. Python and TypeScript are handed a decoded object rather than protobuf nodes: it keeps the real float, so their check_registration_data / checkRegistrationData already see the non-finite member, and the unset-kind member has no spelling in either language. A second entry point there would be an alias with nothing to do. The verdict vocabulary is what the three share, and the registration-schema corpus pins it; neither member has a vector in any language, because JSON cannot write either value down. |
+| `helpers.CheckStrictMessage` | Go check of an already-decoded proto.Message, which is how the Go client holds a binary answer and every ErrorDetail; py/ts hold only proto-JSON, so check_strict/checkStrict over the decoded JSON is the whole of their check and there is no message object to pass. |
 | `helpers.ComponentParam` | Go value type for an RFC 9421 covered-component parameter; py/ts model components inline. |
 | `helpers.CoveredComponent` | Go value type for an RFC 9421 covered component; py/ts model components inline. |
 | `helpers.ErrAcceptanceSignatureInvalid` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
@@ -433,6 +446,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `resolvers.NewContentFetcher` | Go constructor for the content-download leg; py/ts fold construction into their client, so there is no fetcher to build separately. |
 | `resolvers.NewGuardedTransport` | Go constructor composing the SSRF guard over a caller's base transport; py/ts expose their guarded fetch as a single factory with no separable base. |
 | `resolvers.ProofSigner` | Go interface seam that keeps key custody out of the dialing tier; py/ts inject a signing callable instead of a named interface. |
+| `resolvers.ReadOptions` | Go options struct for the document readers; Python takes the same values as keyword arguments (http=, scheme=) and TS as an options object (ReadDocumentOptions). |
 | `resolvers.SSRFCheckRedirect` | Go redirect-policy hook; py/ts fold redirect checks into the guard (async_ssrf_guard / the guarded fetch). |
 
 ## Cross-language conformance-vector replay
@@ -466,7 +480,9 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `helpers/testdata/wire-null-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/active-ed25519-key-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/content-fetch-vectors.json` | ✅ | ✅ | ✅ |
+| `resolvers/testdata/document-check-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/endpoint-vet-vectors.json` | ✅ | ✅ | ✅ |
+| `resolvers/testdata/license-digest-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/offer-key-clamp-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/revocation-membership-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/ssrf-address-vectors.json` | ✅ | ✅ | ✅ |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 5af87ca4..7d57006c 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -92,6 +92,7 @@
     "helpers.AudienceNoVerdict": "Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer.",
     "helpers.BrokerKeyIDPrefix": "Relay keyID wire-prefix constant; inlined per language.",
     "helpers.CheckRegistrationDataStruct": "Go-only raw-Struct face of the mapped helpers.CheckRegistrationData, and deliberately absent from the ports: it exists because a payload with NO JSON REPRESENTATION loses the evidence for that when Go converts a Struct to a map. The class has two members and the conversion erases both — a non-finite number becomes the string \"NaN\", \"Infinity\" or \"-Infinity\", which a payload may also carry legitimately, and a Value with no member of its kind oneof set becomes nil, which is also what a real JSON null gives — so the check has to run before the conversion. Python and TypeScript are handed a decoded object rather than protobuf nodes: it keeps the real float, so their check_registration_data / checkRegistrationData already see the non-finite member, and the unset-kind member has no spelling in either language. A second entry point there would be an alias with nothing to do. The verdict vocabulary is what the three share, and the registration-schema corpus pins it; neither member has a vector in any language, because JSON cannot write either value down.",
+    "helpers.CheckStrictMessage": "Go check of an already-decoded proto.Message, which is how the Go client holds a binary answer and every ErrorDetail; py/ts hold only proto-JSON, so check_strict/checkStrict over the decoded JSON is the whole of their check and there is no message object to pass.",
     "helpers.ComponentParam": "Go value type for an RFC 9421 covered-component parameter; py/ts model components inline.",
     "helpers.CoveredComponent": "Go value type for an RFC 9421 covered component; py/ts model components inline.",
     "helpers.ErrAcceptanceSignatureInvalid": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
@@ -191,6 +192,7 @@
     "resolvers.NewContentFetcher": "Go constructor for the content-download leg; py/ts fold construction into their client, so there is no fetcher to build separately.",
     "resolvers.NewGuardedTransport": "Go constructor composing the SSRF guard over a caller's base transport; py/ts expose their guarded fetch as a single factory with no separable base.",
     "resolvers.ProofSigner": "Go interface seam that keeps key custody out of the dialing tier; py/ts inject a signing callable instead of a named interface.",
+    "resolvers.ReadOptions": "Go options struct for the document readers; Python takes the same values as keyword arguments (http=, scheme=) and TS as an options object (ReadDocumentOptions).",
     "resolvers.SSRFCheckRedirect": "Go redirect-policy hook; py/ts fold redirect checks into the guard (async_ssrf_guard / the guarded fetch)."
   },
   "symbols": {
@@ -457,6 +459,11 @@
       "python": "check_registration_data",
       "ts": "checkRegistrationData"
     },
+    "helpers.CheckStrict": {
+      "allowlist_reason": null,
+      "python": "check_strict",
+      "ts": "checkStrict"
+    },
     "helpers.CompileRegistrationSchema": {
       "allowlist_reason": null,
       "python": "compile_registration_schema",
@@ -512,6 +519,11 @@
       "python": "EntryVerdict",
       "ts": "EntryVerdict"
     },
+    "helpers.ErrStrictViolation": {
+      "allowlist_reason": null,
+      "python": "StrictViolationError",
+      "ts": "StrictViolation"
+    },
     "helpers.ErrUnknownKey": {
       "allowlist_reason": null,
       "python": "UnknownKeyError",
@@ -912,6 +924,16 @@
       "python": "DEFAULT_MAX_CONTENT_BYTES",
       "ts": "DEFAULT_MAX_CONTENT_BYTES"
     },
+    "resolvers.Document": {
+      "allowlist_reason": null,
+      "python": "Document",
+      "ts": "Document"
+    },
+    "resolvers.ErrDigestMismatch": {
+      "allowlist_reason": null,
+      "python": "DigestMismatchError",
+      "ts": "DigestMismatch"
+    },
     "resolvers.ErrDirectoryUnavailable": {
       "allowlist_reason": null,
       "python": "DirectoryUnavailableError",
@@ -952,6 +974,11 @@
       "python": "ManifestVersionRefusedError",
       "ts": "ManifestVersionRefused"
     },
+    "resolvers.ErrMediaTypeRefused": {
+      "allowlist_reason": null,
+      "python": "MediaTypeRefusedError",
+      "ts": "MediaTypeRefused"
+    },
     "resolvers.ErrNoEndpoint": {
       "allowlist_reason": null,
       "python": "NoEndpointError",
@@ -967,6 +994,16 @@
       "python": "UnknownKeyError",
       "ts": "UnknownKey"
     },
+    "resolvers.LicenseDocument": {
+      "allowlist_reason": null,
+      "python": "LicenseDocument",
+      "ts": "LicenseDocument"
+    },
+    "resolvers.ManifestMediaType": {
+      "allowlist_reason": null,
+      "python": "MANIFEST_MEDIA_TYPE",
+      "ts": "MANIFEST_MEDIA_TYPE"
+    },
     "resolvers.NewCachedOfferKeyResolver": {
       "allowlist_reason": "Go NewCachedOfferKeyResolver factory folds into the Python class constructor (CachedOfferKeyResolver(...)); idiomatic Python exposes the class, not a separate factory symbol. TS keeps the createCachedOfferKeyResolver factory.",
       "python": null,
@@ -1007,6 +1044,26 @@
       "python": "DirectoryFetch",
       "ts": "OfferDirectoryFetch"
     },
+    "resolvers.ReadLicenseDocument": {
+      "allowlist_reason": null,
+      "python": "read_license_document",
+      "ts": "readLicenseDocument"
+    },
+    "resolvers.ReadManifest": {
+      "allowlist_reason": null,
+      "python": "read_manifest",
+      "ts": "readManifest"
+    },
+    "resolvers.ReadRevocationList": {
+      "allowlist_reason": null,
+      "python": "read_revocation_list",
+      "ts": "readRevocationList"
+    },
+    "resolvers.ReadWBADirectory": {
+      "allowlist_reason": null,
+      "python": "read_wba_directory",
+      "ts": "readWBADirectory"
+    },
     "resolvers.RegistrationRequirements": {
       "allowlist_reason": null,
       "python": "RegistrationRequirements",
@@ -1017,6 +1074,11 @@
       "python": "ssrf_guard",
       "ts": "ssrfGuard"
     },
+    "resolvers.WBADirectoryMediaType": {
+      "allowlist_reason": null,
+      "python": "WBA_DIRECTORY_MEDIA_TYPE",
+      "ts": "WBA_DIRECTORY_MEDIA_TYPE"
+    },
     "resolvers.WBADirectoryPath": {
       "allowlist_reason": null,
       "python": "WBA_DIRECTORY_PATH",

From 229210dc8db09d7dd0bc690ae4e0671c5cfbe4b0 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 08:03:33 -0400
Subject: [PATCH 037/164] Describe the document readers and the strict check in
 the docs and changelogs

The agent SDK overview's harness table gains three rows: the document
readers, the public strict check and the delivery-fetch proof signer, in
each language. New rules say a reader returns the document or a typed
error and never nothing, which media types it requires, that the
resolvers read the same documents leniently, that each language has one
strict check, and that the Python and TypeScript readers refuse an enum
written as its number, which Go accepts. The JSON Schemas page says how
to run the strict check on a message or a document a harness read
itself. The Unreleased entry in both changelogs adds the readers, the
public strict check, the body cap that now refuses instead of truncating,
the new Go ErrDirectoryUnavailable text, and the two new corpora. The
three SDK READMEs list the readers and the strict check beside the other
harness capabilities, and the Python README names sign_agent_binding as
the public signer for a fetch proof.
---
 proto/CHANGELOG.md                            | 39 +++++++++++++++++++
 sdk/go/README.md                              | 10 +++++
 sdk/python/README.md                          | 13 ++++++-
 sdk/ts/README.md                              |  8 ++++
 .../docs/components/agent-sdk/overview.mdx    | 27 +++++++++++++
 .../src/content/docs/reference/changelog.mdx  | 39 +++++++++++++++++++
 .../content/docs/reference/json-schemas.mdx   | 18 +++++++++
 7 files changed, 153 insertions(+), 1 deletion(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 94b03ab1..5674726d 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -157,6 +157,45 @@ request only where it means to, and check every answer through the SDK's own dec
   `fora_sdk.identity`); `generateKey`, `directoryDocument`, `signingTransportFor`
   (TypeScript, export path `./identity`); `helpers.GenerateKey`,
   `helpers.DirectoryDocument`, `core.SigningTransportFor` (Go).
+- **Document readers.** Read and check the documents a party publishes over HTTPS:
+  `read_manifest`, `read_wba_directory`, `read_revocation_list` and
+  `read_license_document` (Python, `fora_sdk.resolvers`); `readManifest`,
+  `readWBADirectory`, `readRevocationList` and `readLicenseDocument` (TypeScript,
+  `./resolvers`); `resolvers.ReadManifest`, `ReadWBADirectory`, `ReadRevocationList` and
+  `ReadLicenseDocument` (Go). Each fetches through the SDK's guarded client, with the
+  SSRF and https-only scheme guards, and returns the parsed generated message with the
+  URL, the bytes and the media type (`Document`), or fails with a typed error; none
+  returns nothing. The manifest must be served as `application/json` and the WBA
+  directory as `application/jwk-set+json` (`MediaTypeRefusedError`, `MediaTypeRefused`,
+  `ErrMediaTypeRefused`). The manifest's `ver` is read first. Every document must pass
+  the strict check below. The license reader checks the `License`, fetches its `uri` and
+  verifies the bytes against `uri_digest` (`LicenseDocument`, or `DigestMismatchError`,
+  `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
+  is not JSON and a body over 1 MiB are an unavailable document; a body over the cap is
+  now refused rather than truncated, in the resolvers as well. Go's
+  `ErrDirectoryUnavailable` reads `resolvers: document unavailable`, and a manifest
+  fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
+  endpoint resolver, the registration-requirements reader, the WBA key resolver and the
+  offer-directory fetch read the same documents through the same fetch and decode,
+  without the media-type and strict checks. The Python and TypeScript readers return the
+  generated model, which names an enum by its value name, so they refuse a document that
+  writes an enum as its number; the Go reader accepts it. New corpora:
+  `document-check-vectors.json`, the verdict for a document's bytes and Content-Type, and
+  `license-digest-vectors.json`, both replayed by all three SDKs.
+- **Public strict check.** `check_strict(message_name, payload)` (Python, from
+  `fora_sdk` and `fora_sdk.client`, raising `StrictViolationError`), `checkStrict(message,
+  payload, schema?)` (TypeScript, `./client`, throwing `StrictViolation`) and
+  `helpers.CheckStrict(name, payload)` (Go, wrapping `helpers.ErrStrictViolation`). The
+  client's strict decoding of a success answer and of an error envelope, and the document
+  readers, call this one check in each language. Python and TypeScript check the
+  published strict JSON Schema and the cross-field rules; TypeScript takes the strict
+  schema of a message it does not bundle as the third argument. Go decodes the proto-JSON,
+  refuses unknown fields, a lowerCamelCase member and a 32-bit number or bool written as
+  a string, and runs protovalidate; `helpers.CheckStrictMessage` is the same check on a
+  decoded message, which the Go client applies to binary answers. The Python client's
+  `proof_headers` stays internal: a harness signs a delivery fetch with the public
+  `sign_agent_binding`, as Go does with `helpers.SignAgentBinding` and TypeScript with
+  `signInbound`.
 - **Typed request inputs.** Python verbs accept the generated request models as well as
   dicts, and `to_wire(model)` renders a model as the JSON object the SDK sends.
   TypeScript exports the request input types its verbs are typed with. Go verbs already
diff --git a/sdk/go/README.md b/sdk/go/README.md
index 9145daf9..f34d7b92 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -326,6 +326,16 @@ response or re-implements signing:
 - **Identity helpers.** `helpers.GenerateKey` mints an Ed25519 key and its thumbprint,
   `helpers.DirectoryDocument` builds the WBA key directory publishing a key set, and
   `core.SigningTransportFor` returns a signing transport that signs as the key.
+- **Document readers.** `resolvers.ReadManifest`, `ReadWBADirectory`,
+  `ReadRevocationList` and `ReadLicenseDocument` read what a party publishes, through
+  the guarded client unless `ReadOptions.Client` replaces it, and return a `Document`
+  (the parsed message, URL, bytes and media type) or a `LicenseDocument` verified
+  against `uri_digest`. A failure wraps `ErrDirectoryUnavailable`, `ErrMediaTypeRefused`,
+  `ErrManifestVersionRefused`, `helpers.ErrStrictViolation` or `ErrDigestMismatch`.
+- **`helpers.CheckStrict(name, payload)`** checks proto-JSON against the strict
+  contract: no unknown field, proto field names only, no 32-bit number or bool written
+  as a string, and protovalidate. `helpers.CheckStrictMessage` is the same check on a
+  decoded message, the one `WithStrictDecoding` applies.
 
 ## Guarantees
 
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 8da77976..4fff30dd 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -427,7 +427,7 @@ the same way; buy those through the Broker.
 
 ### Testing a FORA service
 
-The client is also a test harness. Four capabilities let a conformance or e2e suite drive
+The client is also a test harness. These capabilities let a conformance or e2e suite drive
 a service through the SDK and check every answer through it:
 
 - **`ClientConfig.before_sign`** receives each request as an `httpx.Request` after the SDK
@@ -450,6 +450,17 @@ a service through the SDK and check every answer through it:
 - **Identity helpers** in `fora_sdk.identity` mint a throwaway agent: `generate_key()`,
   `directory_document(keys)` for the directory to serve, and
   `signing_transport_for(key, directory)`.
+- **Document readers** in `fora_sdk.resolvers` read what a party publishes and check it:
+  `read_manifest(domain)`, `read_wba_directory(url_or_domain)`,
+  `read_revocation_list(url)` and `read_license_document(license)`. Each fetches through
+  the guarded client, refuses the wrong media type (`MediaTypeRefusedError`) and a body
+  the strict contract refuses (`StrictViolationError`), and returns a `Document` with the
+  parsed model, the URL, the bytes and the media type. The license reader verifies the
+  bytes against `uri_digest` (`DigestMismatchError`) and returns a `LicenseDocument`. A
+  failed fetch is `DirectoryUnavailableError`; no reader returns `None`.
+- **`check_strict(message_name, payload)`** applies the same strict check to any decoded
+  message, raising `StrictViolationError`. A delivery-fetch proof is signed with the
+  public `sign_agent_binding` (or `SigningTransport.sign_agent_binding`).
 
 ### Running against a local Exchange
 
diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 779cda27..ca32b41e 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -56,6 +56,14 @@ and expiry against the issuing Exchange's key directory before handing it back o
 it. `createAdminClient` covers the operator RPCs, and `@fora-protocol/sdk/identity` mints an
 agent key, its key directory and a signer.
 
+`@fora-protocol/sdk/resolvers` reads and checks the documents a party publishes:
+`readManifest`, `readWBADirectory`, `readRevocationList` and `readLicenseDocument` fetch
+through the guarded transport, refuse the wrong media type (`MediaTypeRefused`) and a body
+the strict contract refuses (`StrictViolation`), and resolve to the parsed model with its
+URL, bytes and media type; the license reader also verifies the bytes against
+`uri_digest` (`DigestMismatch`). `checkStrict(message, payload)` from
+`@fora-protocol/sdk/client` applies the same check to any decoded message.
+
 Every module is a named subpath export; there is no package root import. The full list is
 the `exports` map of the package manifest. Source, tests and the release process are in
 [FORA-Protocol/protocol](https://github.com/FORA-Protocol/protocol) under `sdk/ts` and
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index 4c1b32ca..bac5a6de 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -100,6 +100,9 @@ parsing responses itself or re-implementing request signing.
 | The verified binding of each delivery URL | `connect.WithDeliveries`, `Content.Binding` | `ExecuteResult.deliveries`, `Content.binding` | `ExecuteResult.deliveries`, `Content.binding` |
 | The operator RPCs: `AdminService` and domain verification | `connect.NewAdminClient` | `createAdminClient` | `AdminClient` |
 | Mint a throwaway agent: key, directory document, signer | `helpers.GenerateKey`, `helpers.DirectoryDocument`, `core.SigningTransportFor` | `generateKey`, `directoryDocument`, `signingTransportFor` | `generate_key`, `directory_document`, `signing_transport_for` |
+| Read a document a party publishes and check it: the well-known manifest, the WBA key directory, the key revocation list, the license document | `resolvers.ReadManifest`, `resolvers.ReadWBADirectory`, `resolvers.ReadRevocationList`, `resolvers.ReadLicenseDocument` | `readManifest`, `readWBADirectory`, `readRevocationList`, `readLicenseDocument` | `read_manifest`, `read_wba_directory`, `read_revocation_list`, `read_license_document` |
+| Check a message against the strict contract | `helpers.CheckStrict` | `checkStrict` | `check_strict` |
+| Sign the proof of possession for a delivery fetch | `helpers.SignAgentBinding` | `signInbound` | `sign_agent_binding` |
 
 A few rules hold in every language:
 
@@ -121,6 +124,30 @@ A few rules hold in every language:
   rules. A refused envelope is malformed, with the peer's Connect code still on the
   error's code field and no detail. An empty or non-JSON error body comes from a gateway
   rather than the service, so its HTTP status still classifies it.
+- **A document reader returns the document or a typed error, never nothing.** Each
+  reader fetches through the SDK's guarded client, so the SSRF guard and the https-only
+  scheme guard apply; `SKIP_SSRF` and `ALLOW_INSECURE` relax them for a sandbox. The
+  manifest must be served as `application/json` and the WBA directory as
+  `application/jwk-set+json`; the protocol names no media type for a revocation list or
+  a license document, so their label is reported and not checked. The manifest's `ver`
+  is read before any other member. Every document must then pass the strict check, and
+  the reader returns the parsed generated message with the URL, the bytes and the media
+  type. The license reader checks the `License` itself first, then verifies the fetched
+  bytes against `uri_digest`. A failed fetch, a non-200 answer, a body that is not JSON
+  and a body over 1 MiB are all reported as an unavailable document. The resolvers read
+  the same documents through the same fetch and decode, without the media-type and
+  strict checks, because a router must accept a newer minor version.
+- **One strict check per language.** Client strict decoding, the error-envelope check and
+  the document readers all call the same check. In Python and TypeScript it is the
+  published strict JSON Schema of the message plus the cross-field rules. In Go it
+  decodes the proto-JSON, refuses unknown fields, a lowerCamelCase member and a 32-bit
+  number or a bool written as a string, and runs protovalidate. A shared corpus holds the
+  three readers to one verdict per document. The Python and TypeScript readers return
+  the generated model, which names an enum by its value name, so they refuse a document
+  that writes an enum as its number, which the Go reader accepts.
+- **The delivery-fetch proof is the public signer.** The Python client's
+  `proof_headers` is internal; a harness signs a fetch with `sign_agent_binding` (or
+  `SigningTransport.sign_agent_binding`), which returns the three header values.
 - **Error details are read from the binary `value`.** A Connect error carries its typed
   reason as `details[].value`, the binary `ErrorDetail`. All three SDKs read it; the JSON
   SDKs fall back to the lowerCamelCase `debug` projection only when `value` is absent.
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index ca26259b..b7cdac34 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -166,6 +166,45 @@ summarizes them per language.
   `fora_sdk.identity`); `generateKey`, `directoryDocument`, `signingTransportFor`
   (TypeScript, export path `./identity`); `helpers.GenerateKey`,
   `helpers.DirectoryDocument`, `core.SigningTransportFor` (Go).
+- **Document readers.** Read and check the documents a party publishes over HTTPS:
+  `read_manifest`, `read_wba_directory`, `read_revocation_list` and
+  `read_license_document` (Python, `fora_sdk.resolvers`); `readManifest`,
+  `readWBADirectory`, `readRevocationList` and `readLicenseDocument` (TypeScript,
+  `./resolvers`); `resolvers.ReadManifest`, `ReadWBADirectory`, `ReadRevocationList` and
+  `ReadLicenseDocument` (Go). Each fetches through the SDK's guarded client, with the
+  SSRF and https-only scheme guards, and returns the parsed generated message with the
+  URL, the bytes and the media type (`Document`), or fails with a typed error; none
+  returns nothing. The manifest must be served as `application/json` and the WBA
+  directory as `application/jwk-set+json` (`MediaTypeRefusedError`, `MediaTypeRefused`,
+  `ErrMediaTypeRefused`). The manifest's `ver` is read first. Every document must pass
+  the strict check below. The license reader checks the `License`, fetches its `uri` and
+  verifies the bytes against `uri_digest` (`LicenseDocument`, or `DigestMismatchError`,
+  `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
+  is not JSON and a body over 1 MiB are an unavailable document; a body over the cap is
+  now refused rather than truncated, in the resolvers as well. Go's
+  `ErrDirectoryUnavailable` reads `resolvers: document unavailable`, and a manifest
+  fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
+  endpoint resolver, the registration-requirements reader, the WBA key resolver and the
+  offer-directory fetch read the same documents through the same fetch and decode,
+  without the media-type and strict checks. The Python and TypeScript readers return the
+  generated model, which names an enum by its value name, so they refuse a document that
+  writes an enum as its number; the Go reader accepts it. New corpora:
+  `document-check-vectors.json`, the verdict for a document's bytes and Content-Type, and
+  `license-digest-vectors.json`, both replayed by all three SDKs.
+- **Public strict check.** `check_strict(message_name, payload)` (Python, from
+  `fora_sdk` and `fora_sdk.client`, raising `StrictViolationError`), `checkStrict(message,
+  payload, schema?)` (TypeScript, `./client`, throwing `StrictViolation`) and
+  `helpers.CheckStrict(name, payload)` (Go, wrapping `helpers.ErrStrictViolation`). The
+  client's strict decoding of a success answer and of an error envelope, and the document
+  readers, call this one check in each language. Python and TypeScript check the
+  published strict JSON Schema and the cross-field rules; TypeScript takes the strict
+  schema of a message it does not bundle as the third argument. Go decodes the proto-JSON,
+  refuses unknown fields, a lowerCamelCase member and a 32-bit number or bool written as
+  a string, and runs protovalidate; `helpers.CheckStrictMessage` is the same check on a
+  decoded message, which the Go client applies to binary answers. The Python client's
+  `proof_headers` stays internal: a harness signs a delivery fetch with the public
+  `sign_agent_binding`, as Go does with `helpers.SignAgentBinding` and TypeScript with
+  `signInbound`.
 - **Typed request inputs.** Python verbs accept the generated request models as well as
   dicts, and `to_wire(model)` renders a model as the JSON object the SDK sends.
   TypeScript exports the request input types its verbs are typed with. Go verbs already
diff --git a/website/src/content/docs/reference/json-schemas.mdx b/website/src/content/docs/reference/json-schemas.mdx
index 71a4a391..52a8f49f 100644
--- a/website/src/content/docs/reference/json-schemas.mdx
+++ b/website/src/content/docs/reference/json-schemas.mdx
@@ -81,6 +81,24 @@ sets two reason members is refused separately. The envelope around the detail is
 against the Connect protocol: only `code`, `message` and `details`, a known Connect code,
 and well-formed details entries. A refusal is malformed and keeps the peer's Connect code.
 
+## Checking a message or a document yourself
+
+The check strict decoding runs is public, so a harness can apply it to anything it read
+itself: `check_strict("fora.v1.WellKnownManifest", payload)` in Python (from `fora_sdk`
+or `fora_sdk.client`) takes the decoded value and raises `StrictViolationError`;
+`checkStrict(message, payload)` in TypeScript (from `@fora-protocol/sdk/client`) does the
+same and throws `StrictViolation`; `helpers.CheckStrict(name, payload)` in Go takes the
+proto-JSON bytes and returns an error wrapping `helpers.ErrStrictViolation`. Python
+checks any message with a published schema. TypeScript bundles the schemas of the
+messages the SDK reads and takes any other message's strict schema as a third argument.
+
+The document readers apply the same check to what a party publishes over HTTPS: the
+well-known manifest (`fora.v1.WellKnownManifest`), the WBA key directory
+(`fora.v1.WBAFile`), the key revocation list (`fora.v1.KeyRevocationList`), and the
+`License` whose document they fetch and verify against `uri_digest`. See
+[the agent SDK overview](/components/agent-sdk/overview/#testing-a-fora-service-through-the-sdk)
+for the readers in each language.
+
 ## What the schemas accept
 
 The schemas describe canonical proto-JSON as the FORA wire carries it. The two variants

From fd3832daea8626b5729ca8512362c38b5bb5859f Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:42:40 -0400
Subject: [PATCH 038/164] Specify the edge discovery headers in the protocol

When a publisher's edge refuses an unlicensed AI agent with 403, it
answers with two discovery headers. Neither was defined anywhere in the
protocol. A new "Edge discovery headers" section of the fora.proto file
header now specifies both.

X-Content-Rules is the absolute URL of the publisher's manifest, exactly
https://{domain}/.well-known/fora.json with the publisher's bare domain
in the request-recipient shape, a port allowed, and nothing else. An edge
SHOULD send it on every 403 to a request for licensed content that
carries no valid signed delivery URL. X-FORA-Exchange is the bare domain
of one Exchange that sells the content directly, in the same form as
Offer.exchange. An edge MAY send it, only together with X-Content-Rules,
and only for an Exchange its manifest lists: it is an optimisation over
X-Content-Rules, never a replacement.

An agent reads the headers only from a 403 and ignores a value of the
wrong shape as if it were absent, judging the two separately. With
X-FORA-Exchange it MAY start discovery at the named Exchange without
fetching the publisher's manifest first, and resolves that Exchange's
endpoint from the Exchange's own fora.json, never from the header, under
the request-recipient rule.

An agent MUST NOT treat X-FORA-Exchange as authorization. Offers are
verified by their signatures and the publisher's manifest stays the
authority on which Exchanges sell the content. When the header names an
Exchange the manifest does not list, the manifest wins: the agent SHOULD
discard the header, SHOULD NOT transact on an offer from that Exchange,
and discovers at the Exchanges the manifest lists. The listing check is
the recipient identity match. The Well-Known Discovery section points at
the new section. The descriptor is rebuilt for the new comments; no
message changes.
---
 gen/descriptor.binpb     | Bin 642560 -> 647106 bytes
 proto/fora/v1/fora.proto |  73 ++++++++++++++++++++++++++++++++++++++-
 2 files changed, 72 insertions(+), 1 deletion(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 3269573b6b6f8f2f78677e665f867a0afe60cf12..ca6ce280e82b2b3472cd3041a519a204bbb3706c 100644
GIT binary patch
delta 49752
zcmZsEd0-Sp_J5|Qr@N;olbPws97$%9A>7x5)00FIaJ_HW)%~s*AxKsrN<i1${cZqJ
zL@p7b#BgIc1QahuK<-;W5V-_76cz9QMG!>L-{)0T(^<a1|K`1}_o-K}UcGvCbkCqk
zO;@jII%ueCs4~<&RDI8L;BNPqwN~cv-JWF=ecv7pn7ZZ3%UakZGv_<c1&{y4vo2H7
zvMlXgCF^iz;ZGh`qD(DjKdsX4tm)SCv5HjB%IY3fPgV4PCe^#5yk|xKYST=0PCYU3
z(LR;cy({`Rtxi=?vGRV^Pvc>#Jk`JA$$=Hs15&-J`ltF-_NeGrUC}euqpIJ4ihcu9
z1A3PaNcAZ1-@me=I@PbrOg&ZJr?O|Ny7IApDAlu~PbIJF{(EjqJzZKkpm*w~`|i6d
z)uB!Mbm~UnmG?`PKXwVHCnWn-4M2_MJ%L<d)>n&_FEC;?sa}=+s|U0a_4cpmHL$w8
zPpYyy^)ytk*ETa%J)pe*fa+GLp=YYnQE|Z2Re-O4q6)3B4IsdtsH)`cLDRWLpsJ)2
z{i_C4^{DETPTg12yW*KtIcnm~fDxX8@|6Hf^)H9Q{RygHs&7SgH9)GbMQc*`+|}ih
zfl#Dx8um_c`I5Hjwqy#j#G{oxdsg(LCx2<(McB6WJp=nxR9}<oJz&5S)z_4iP#5`m
zAEhh)QQr57J{7D@REyRKp&ReKr*rFW|LB4GAFH?~RUv=bMN#Pky(?htexiG;EBf`U
zrsnlcr|#_6=b2PhKVb&mHJxRtdvCh){@c2ysPN@_nIutx&aHVSRXwmrZ&;OghOqeU
zogYk<_aveJ(kq?1c|hv+`|rIkb;q6eaai;6BB`h0B~=3lTwdQb|EC~&9j&RVd163i
z-^%K8>INtUjV>2$mFh=|a#wz$PkE1uzT|P_&Xw>aauC=d)wjG~WiRq`c+NB2G-j%N
zAav<pIpCRes#`hQC`L@G{D~(j%4uv2NcF9%fk;)q9yDSwEaXV2>Q_M{VPFMW7f+ty
z4mn_8b*jp76Y6@ZS&l<4{0zBF-wNo`?=hhp+9)0Jv3^x>UD0XiPw6Os={G=lO6to&
zuW-EjW7%#Md>1uwm1ww7wdIdiSM?b<pdv+sv#OVQxhx-WO<KW~%6klehZNh6SPaEd
zJ*)bbSN7v7nyF&piFiQ0M`O4*^iNgvsfH_}K?AER`d9YrRn;nmP}2XIR;gb7%O9g&
zXoXt)msj?o($#&+t9z%=E5bxiU_c42MOC)i^;*{|RY_i3k*e-p{zQezjs}cmP5Gnn
zfmE~d)Du<x2c*jT^r?EfqGxkqOWE??Rp>LwnZjuisO%W`ba^$oC7xELMT0T$imB@I
zo_#9^3_#H;Ia*+XiYNM1J;R-e!XUc1qW@Dh=pi^6qDRF);9XDmu7uy%eTd+S=JrGQ
zfogofp!C3g80OU!QF~QBHn2ac7=Sp+6^DZg6WHD8ggV}XJWx@z6g^7OIoz+Bj5(m9
ze_t9OJ;_GwCsWI<u|ooaA_?2Ef<)oS)fIjE;1^mdLwh=fD8N0BJOd?qRmzZI4}*T?
zeW|MQ6t`zR$0m3h0f@W8n4tUDP<*K9Nj4Yr3Bs$4FLu1Y)Exu}TU9-cSZWW;%6`=Y
z(9&zT@-|nhCdX+ttXZ#FRiaU{(`!g0(oD8b;!EeEuB)h~*nC;Y;-d=vXX6T6khREg
zj=3<e_OGCE^4}v(DhTOP9+^?=qcnfm!^d{u^1c-mk@}|KfOq!lRnZ@T+m7W>+GHWa
z8>!)bPNT2BZzH^+r9BYJD_W&!)YKnC{oz12!!^-YFpfQx$rN^j#K_=1Y_mj&ezXG9
zJ#3EolaDeprOUC$rsNyZnoAmTv)xqn^d&c^@y<OGlgk4X5Xw_e!(gqcfq=Wr!lZx<
zaWrl4iQBA~roi>6+o%OSFKL}BuMuHagdCbMdQ}YQ!NU%ft`{Xt$A@_Gz$YOD(yBh_
zanYT2!_hmK>O>~ctAABrUU9vLa7Z&%lID$Jl?#jj;)<ACE|s>Yh(2UvJ0kZV*oURN
zXt8WGZU8E!xu=44_ha@J?jofq&d4B5ji5x#O!dHMK+n?j0z+NWZ$SCun9q5=7-vsc
z4eZl1)u#f#dROt;?rCH#d<Z^K+2e7UACV^sQ=_H*5TH^uGE=h$B{ZNRdo6Fd)T)~1
z!v}7<xywzC`7wCQs~<=B7R`U)rf&CiL);=^F`Y`l%OiMspK6{}r5>r^{$2A}#Us2f
z8EIgkzE5D}_e1cgPThlE8rZ)_#oaV(5d43+sc<flEBsfQ!2_IZC}N5o9_^rE&zv-I
z)=-Xx;e>e2=W{-Z_pXA)LH4aec!M71rF05Rt{iu<{#BS5k>Bz`hj4kR=isrhBW1Ex
zy?EpJxW$A^GgBqtkR4+xM}Jn=q$+#SOiXhj?_xrxB-Ks|C|LY`ARGZnb;T3qNHZ(?
zJaY})q;Gj2F`oW!$m&@I?Wuao^~?LCp3BCclVR4N`IjoD*o;J}x`N{1ef<YkBY4=8
zfRnZjfJG@i`!AD|U1SvgCr`!rC?kKyh#81EiLVEE{voP^&py$=icgnzx&ZrN7{h<j
zHYAl|Lb?>MxhI*IJdnaS#Yxlv3qkA3UX`%Xqi~bn6_rRLFn4t8*{);9wpa7jNcjLv
zt!Szp0(n20sTyi9vR?@G=lyue81+Ml6G8e{P};+To88_4JbC65y`vrtBR-+l)1N2c
zcK@Pl${*`rQR4&&Iod>|CbQXrM|eF6+8#`CN=^^em`ZqGQ>?xeaO{G}$NFIj0a<%E
z$SK$Mj2eO!HMg>-W6I5WngaKxk%*|nO)Y{A$3o5`rUqL_VK#ehiB1tg+kPwzc1bG|
zuI9c~Q$NGtp&y-S!(gfP|Bd~RR>1R-Qeb5BT&JF8OuG?0ox*%d?W5|bpp=8_^{DEL
zbPihm4RP$U=Alko?KEFC0fH8Gj`=yDXp&u$20Rt1#42t877XYr%toxFi<bN!T8)t@
z?K!_kIo6)Ns`~V-Kz3GqO@|Kci@9tyB?0hDOy@MebCaUmu)KOyW+})yE6M38Lq#mW
zx`YkxXxy2(v4Pgn6?|7QVrCCh)v}Z<OI@U}5ye{1^dd!znSRqlT!q;2#y06Dvd#5o
zIhS!+>Jo(|8)}cHmnd3X7IHymiIUgSCLyy#x#DIigNMr%wt!@oD_TevQaIa6+9YI_
zE6uJoC%Sn>AlGL~8)>z!^m?ZvH-y$Jc}=B|n@TC|I-8qaTu8Ol%}i^eZB1`hv?5tZ
zh0JCpb+t`GX0y_@yE#h8cr0}rb2Zh*q_;UT9>{D{Qe{%c1DS2g&E@7;53fhF)P0%d
zO|@}KdY_`@$Wj`F_9=lvn}pClrTNw7d{L2ZsfSoi3+>I4Ly8uag>=XqQetVFgv=r3
z>buRks;Q{hp!rV8I+yvMmRd6<@SS2L&0eOe@}4`v#<kXZw>_aK+@Qon-<(h^j!Yz=
zPAGZ#<_uI1+GS~{6y+>ymDZ-$;Fn2N5+4RQrTA<V7f?<q7VlYl3Y1eyLBb4(!Umxv
z&nj*+WP0hjG0bbB4L>Vt8#8SBY?hh>=4nN}=D(RhJEN%A7XLRF=KMub?=XMHu9ONr
z|4_0%X8lUEQ=vZ;BVtaY2Dr#whq&33ZM5m>A#TOs>Vpe?hq%4jHi;UBxC24+87_l|
z&%4?6ZMA=<pLZ)hS%}*BygNH$laP7d9nUjcaTzE++|7=))mlF?+%3)IQWThJxLcYD
zBp`;nrLjQ*Vz?W|CYypZh%C5;8;M9^q~Y$w&E^7y*8+ht?##e;TG~}M#;L{)Ta0o0
zQWD6GYR0%5TxFA7>e^1`M}7_he}BWB`J%nHSu1<P0Z{?+hTGRrO2MQc8?~}YfV|-@
zX=BcVGecQ4Y_U7@?KRqbrQ2c$#KZZQ8tehcVz<>ug3yRq>~7l3tQF1CENz8bS?gBw
zUsTw(K3ak;)V;&mpfc@=8a%LjO9RRZw^uluOVNO`!kruC-USlgwZa`+>vo%#X+Sj%
zhRd<Em2P#7+arz1d5~KLQ=ypGE~Z(Y)oyKt%Piup!f4yzR*LgODfUgZ9_i>(bXWx}
z;n^Ue$_95{LN-VT<OX+91M_#`ZRo+RZnkQI_G?#{V!+T_9n%;v%~r=33?OZFTYTI@
z8v{sN-3=O=uPSh7#nN`Uvwq9`a=jLFg?71(xbSC%{CO|;=h`bl0CKNwCy;>LYkM_F
zK<*{4-bKoh^Jxd%%9rfN8?>D@_$AB>KEw{#<^>6{1Mb`iH!nz-_kcV4r8F-wxOoq{
z)i0!ZB@c3kZ1YMM%zK!dx0GvuLGra*N#vKLSeLHa)m=e|fTAc0?EJOc7vzQo37x)n
zhxqgY)oG-B?anVSM~bF^JnmMS=Km*kCv)9r6taU|waQYkY&aSb$K5_LSRoF$<L+p&
zM5h_xxVv!^^B3|%ML|dXlo{Gh`-iLaCkKND#7}OY=z0_a#!v1%F+M;7<0p5MrrdM*
zKtJtfUsUV)9YH|ywCyw?A$i(%8jz4YeaUHf%g+m^=>`J2oOg84(8K3#r@>PoowuC^
zB#_RN(|kZN&~0gh)T~J=TYr<bC^$$pEc1Re&&^|?%0}L-{W(2EmE8_5u!g8I27(0E
z5Eb5XH<!V~=TsKFMZ2f$IaQj~t+>#z=TzBCAbBa-OCSO9oQhr=rg98)_h>aU?H0{Y
zx{P)}sH;b-J`wiZysJm61w0Laveeb1)pUvZ5%rCm$nmPuHh-zYO77JfWU_D98oSEC
z5?ze~fE%y+cuGL!q0@M^P{b{eTpn?2zJP;yYt>BE9a?MGb+rx%^>wYI6ZLhiTEHh*
zU{YV#s%_huBVcC_CfI3e);yK%zf&6?oThqm$<7`=!A@7%Z=dUTH5L==bXDQwo1VcK
z)71vW=6$><@Mo&*_+8rlshO%$Kz@lrlo8ET3yaLx;pU)0&QjUKcWZS;vs5KdmJ;kl
z(!7}$f^KtER(y|kOVJ!vX&?(x&ND}C)YyEC7ece&P}zukwBD&V9Hl79d4rVNL+wI*
zSg2-w%EI?*yRC()C&rt_r_i@mr764kxqe4uF?WLIW61*&7;mc>OV^<y7meF@Ro3r5
z?fTTas>1U@;-b*IYP04%eF6<~k;*>4PaB<Dq$*9g&fs!(^A_gM=qr>$%RW>y|Gr-v
z;41o1Rk()`8^t~(4|$lELerM3EbxHVy=b|r@Ge6kYT9z@GPpBH45O7Q8})#8Pti(8
zElSu{l3E9lKB5$yU_<8j2ed=3q7ACjT&hJG+6J{%YqAoR!X&YUU3gIYtY`}yQx>9>
zY>V2Vqd89Kj+tOb=JZ2a#Fg6Nw9r7Q9V%M5iUzD|X?xYIuUPZ{(N+fbsz_R3L&PJ*
z_<ii$|7e|C?^6|>Dj+5-yH7RzHVNbGQ-dM%YA%9@2UxGaY1g(s;E3?Rt{P(AR7GG{
z5!frZ2vj-DKK`5bSnI>m1H~kv9##`#!bW67Er(T1*mrReP)FFK4{P^yJz@_Xm5;w8
zs>~ZeLX{(GqZU$68h=OB)@gH%h8BA)?Tnf=+~dlBPfM|}4|*aQe|N2^J8(utn%W+f
zc&PPfS(it(j;+ty!3s>Eo>jdf7J~%pSrrLp2QGq#=ULsO+7+$O+pYKT;B;O!!dwxM
z5IL_#V`e)pg4SPTMh~q+`l2I3-g}YaCYjvBTYpiFM9nr_1OS6P?C(9aw&_70*)Ja6
z-a#HLkAw`hcaR4$P-q6{eAdG@_0T$&J?oJn%cD@VdDi0-RtAY`pY=2r(FP<Sp7p?W
z--N$G4fyU09@eR+_Ey;o4hCgfFL-38g+jo1!6Q>kkidAsgVb`08)iqIHO`ZDA=A7<
zo9qgW^T3N<rf{f{v0wFM_Vm)iuJo%OIX8d}v{yYc;{pk^S3U5YZd?ctYdtL9Tf4EW
z)>cU4OM+TkA&|V3CF}wc5Vd5N^%!cX81|p($xQ04ZE&S$dK51=AJ~wZNl6=76C|W&
zQpF`)2-GYO8~b;yO?s9`5xIiKdtjC)B(h(Syi~(RW@j#g9+>N4C;zV9P&(I9mU>{W
z$0xEcjrYJ@Pf;^jE%m@$Ps>)^BQ@%P`5xBqajiqyd<TLi`T2Gyq7XEn?`d2jA*ci9
zd)l=(=TawX6k6W)u)~jQZ(RSjgQ0P@kH>#11dO*ma`b@&#@il@z6D;6p<CJ-kFqiI
zQ6Fu-T7#b=gVT6cy2j})%1YOe)oA&Jr^w*ec%mCUB0(kw&*0X2)D0eyAWI(P)}dKE
zL6$6JaO*vkAb(!SbwFGjsVTAit(h}VY7YiVK-gMPMmtjTiqQi$&_-$)Jv)R2yp}pv
zWB)r?`?O@NBjkn9Sj{UEYEAJ%Xsm{Wny(Nv#k5qWWom|K30D^eQd-wUmoQB_KiB|a
zn#JcnG}r_P(;77~XN#JBmO4pOn&iLgV$+vtQFi)SZB!XJHkuD;lN>Z3&?ae??N2_S
zP0|`RHkTUQ0@;?jP|K_ss&!J!7CIo==*orKC6CGm$U?11WHp+S4UmOex{bMlQX@_A
zTk0|`bM<iTdZlcc1L6nBGED{slmf^y?UGOV0kTYM*TFm`+LeQD)>vkQ_H*eP2O|d<
zYc#nS)RY`xtkD{@mzK)`#v1L4tIXduu1LUAcV~`{)CRe)-|b)ofU#Ti*<Bd`#%?Wa
zyJ-LzyS2iUx!2?vK}$QSDW@{CU(z1%)ZnLW*dSm|YCf^KpeaGXoYZ1=Uk3qmlKNV>
zX%KFDQY${CiCqE|rv)%Xe$><wzKoMBgpQwxMN2kK31M?U<4d+~|G>SGYWBYqv`88(
zF;}1fAkJuV$p#X&o}pU#k_~garT#X1<pj-D_M4-)1&{d6@d(o5H%+e9AOeWrG^E`V
zya=usl@s)=-!s26ZM+(qpkuA}3iXdp!L?RruTRp(m)7diDBuFSR+qjD64<r6#rK^^
z2H3TFaYOSa4uOYLboSI_?dGy64g~GKOmQG6)K1YYvDndhsGXu?XJV*O1NNGsvx}3p
z=SpWd7!=iJI2aUoXXuvbVx0%x89Fl2KXEmnRGrRNOwn#Ct8*aSfT(jIXy&ie<rJjz
zI9#V=3PL<5YakH6uV=bV)m~Rh-*-Te6M%oo95ffcuS-)y2sOX2BSU?HW1#F}oi&-E
zJz2Wgf#91C4g^Kw#k$xdM7?~|K~FU>U(h)Qd~$PU=M3#dcaP1wlFP@1&O`5JJtAfR
zkf?XFjv0XFA&>}roAuUzF@xA)Aaa;DNSyQoh?S<z!PXmi_uX%f5G_WcxIeRMmNrT$
z-S23tqY?WZZD~hgztjH|yZ2N7FQs`>r#+#sGb83|%Uq>jI~WEU@wG0Ow<rXRul1;i
ze;|SJwT|3>v%o;)J(+oKp0?FhdeXu0LXVS<9u$aAI)<k}d{T#x&l66BKzy2wS)eT_
zJ?%hH7(VSlP#8X~TRiE9>J)}g>&;s5fvPKr!e@1{LI!~boYmzR1qsQsx*Ve*A$eA}
z$EdC#<X+Upwh9P1(nUvyZ0K;&(ShRbMW-1QcP~;ip3A{dMTD7RWNpcK7HX;<onjaT
z<`T+-3>vDh8%i{Po-%G)X<p{4jFxnjfFtHMJO}LShD?Y+0`_$SGwgJ-ut9@ozL6RF
zfi}ZcGT)J+fjQss=5Q}UDM-yXLY6t1Y-&&rw9sJpFVUuyEHuO-khl<9Xe9V<HIWcn
zXtZc4wmu9Z-!oY8Qf*YpdrnO>_TDq(VjhKfDJ<s4lg}G8_SP7ggG;pu?hb1VX?Cz7
zwZ_O3u?Hli))?@;jiObs>}CUV{bDye_?#ZktX!eZceMe_whE23&4!%u4L;H~8<_Ez
z=3+UCJ*+|AtfAh_q*dD0rZouuMth}5t6}WHUZoLxa;3L%6R~XtnokS#6lNLhg%+Q{
zN}y545HD-DMca`Y;+0Efa8YUql^O|MQ3~X<-b|yd+9+4*S+ByIL~PDSu@A5{j!2-5
z@n&t$eDbk&r4kzB#map-Rl>JOUh=ZMPqY;cU-HUDJGhX3$&2VSPL#q5`4zA7zL)*>
zi8i(dKgGfwJ0B?ciWlJ$QyI|E(I}XD-|MD;!5KTBhjGVy)%G-#an6qC-7v%iubQgQ
zLTi~<ZCIZL>{q>N<N7RMO{}?$hdzGoG8Q_p_A)SxyGdTPxIP%d)MT&Pwmu6{XUb)Y
zA&5-%s!g3zHP0iTRHu2>W)AOpH%9q%uiB(O3!`_&Wr`vFnR!_$Br~u77yk2Z<R*2O
zsgI~T%d0jb_!`@a$N*-0)duye#H2pwGW;-7`pdv_vHNkEEh3gW@3Iy}F=*?<@8bRT
zrng4zaH&f0&~a~h)vN2X&~XdBB6s1sq7*vrZLfN5{Zi<+cj}uTrO<EhUM7fsd(Vp+
z>x3s_aCsJcmE~TRy-S-}gP&sfVE+uYF7_6sq$?s`Xp6lKmS1v3#m!xD34sY$RNTT9
zmwMI0`Yg2QL$6v?p9Sn?<QE<JpaJwMud>yvvh;4PT@8NQO3)U~Dn|)48zmcTy`+R&
zD6!hBrX{>vDzV1#0nUOFYaQp|EMTv@tQ5?;9^;{9eK6Q{gVU8<5_a8Kze>@SA9>X)
zE(waB-0W3L>$6bh7O#4p*@d?o$lJV1vbbZa3obI?E>HPCDyy$$5AV_17vTX<JkjB_
z1+~qKO^Uk_da&2?sW<C0ws4PjSKw2xC&*(V-|N}Q0(-S|;ZCo@w?sW)LUN}!S!kwE
zA2x0*br<{VUah!rmsjCg9x+j77nMO83=-6CR=ZbgP`KMGk{V(Xm&!EYWniT}Y~Nn3
zVc{OH!jp28p|09PWm@wxXxm;^@R?RpwAaC*mh7c6UC|Qk;e77Ju2tn{S{LhcuP4k~
z!uM?sc(F}LQN5Aau>sAuWj!DPaRA}oybaZ0H^x#AGJT(RN8v%I3^nN>mBDTk%78k=
zs`qL46dtlevIz8ts7wtngC-qjNA_uh3lBRu)TF~yri_<ClfGa>_G{M{e&Lndme^!L
znJ=i!6}${Q<4bmUzjjsOmv#qY69r|yq%t?~G8lqK*cG2^U5k!*6~3<lC24c;2$dnz
zV4vlvH|qyB@pG8wsMizars2CR$Gl1_VH&Z!0-7%{Js<&b%!?Vm5vsvX3C<?il?SvY
zg~#m)227MWPGxB1@!gYe*}o2GR~CMYiIma{Vxr8qROVV<2B!IrZ9kxu7Ji3rk!8p<
z-%*)PybMh9J!^STD@%QEn+BU9DDyp)`3q7euciIy&6;Jh;Rm%pH~!IU1c2mLy;${}
z_A2MRs`;(U)IksPVmjkIrXJFccRb@&Tkv#QJObt~6doyo798kzmN@4qS@u#=FwD#p
zAJ%?V%7&S8wFEYLW|%3L2OwdcVWwQ_fCR`e6HA?=2#Wy0(~%~7@Q8M-bfkkp%cYSH
z24!U<O-p3{kO9U>GZyD7E-x8zjLH7<m3DLK7zct@OJf`es%VTUmpYIE#26Dxoj-Fe
zK)q}-^=s{c&M!L<Za}<j`pAABs7e#Y%Vv;o>J!O@u&KX-GBz(VHf^S<)R~z{Uu(<U
zJ@8vBs__IkGaXeZhns0yVo{B!z?o@^@J}#Ed1smp>P)eyCI<F?;K{F>YF~3z06lD4
z+9osWMPKH_<Jt<n@g|dRnYvZH{h=K&l`l-ytn;FaP1(i7%S`)8dtL2t&_q5%Ju05T
zbcal}TRjexIc%!en{#Qi!K6Muk@?3jT1$7$2~%D{02eJdVH*=9gieq#$xa}Vi<~eE
z9ulY^`O@oznRt)_G%o-Ssy<;}eJfv$kqlV08arYB`2lkTrT8YgOgn8VznW_Pc~>e^
zd|p#sHDCy{;xWv6+BPdlD0SMD>tT>k>a-~mJi>xmPn)S<rCEs~4(rdD@<xMX@f!`l
znDR!$B_`0$n(DQU_>G23Ty)Dh6E_;@1kQvbY8Ompu#au}4KLW>r>!aZ;sr-j^2H0b
z13(Pe7i<Rr2~97U4F>y!0}w-KdePC8v$&?eJDN%+(Efm?;_ii%R>^?|`JgFZq?%Oa
za9?Ke1?@vuo8dl1lU+wHKHR4Zk4Gt9%nF-hXiwUQJ!xOo5?`k7cjWB3<9yhZK0?0l
zgPUk|KILuS`#0)exNGoJtT*rgfOS5v00arZIv)UO0|_LWTIb7s8%-sjB*v$db<gst
zt+=lc=M$d2&Gw0Wnim2KxO03W>$X|&sJT8QL^b4PQW9Wq_(b+;vk*b&`4H*ql|uK-
z_ld0DE(LonAh3F+kafT5Q<Ili7?yy4tG=#$q#}p(sSla2Qh@VOU%&5TS9<h`cfIeE
zXAt0WwmcgG3843VI2)o71QH|YeV@g198M1N@=X_CxT8tu@;-`ri+wDm>18#GeTq0@
z0vD)@eK{gdf&}VfAL67yrJaezzPzr|*5oco&KLXgyYNAX^7bHH?7P0RIgI)|8ynHS
ztj~R}{Bug`PP`WO7{AcT?-t@kF<i~h9MJT~U5(cG_#up2%|;Mf=TkQMR3rsDNHNV2
zi}f+|J3FlRsaJ9p#3Qt1gHOE|RyAZ{x8>RBQ{Qr#P0`eB3PD@gNkeb`=oX(mK>!mi
z-Qo+04K$Ew=@uVm6>2F+v~-IvU&J*cc}utW3cB)^N)CmaExyh-m}y=Q5Vx^^di6Fv
zw)qrs29?eGX`3%sY_fqwJ==T;Dxx0hr)|E}t)e+Rq`;!vd<|}q^-z%EVQri5PdAxw
z&>}sX`fg9gZ|d`1o%Z--i~tuNx5p<pa6v+yJ-)Em(gul&_xNx`f+PwMp!TyfK7DZ6
zeg}c3tNlJX@uCb6_WR@wFOVeTLvFj=hko^2+Bsj=XPNi1^<|zG=X`Po@uTy8^C^Fz
z^QKag;FrB8c=;n-tb0Q}#@?~?A-7)esqJ{fMIp56qEEe@_oLvTAAk3$FSuYVH;@oL
zvK5xCnnO$*83CU2X4iyu&lRs^W93D0fQwW9G(H<)m>ffJ05~CAea>ZWqoL&|&zO|W
z-jD0sODAPZLxKxKPRf>s1PL=t$_|Uk2_(!gDI19~o%Z?3%2Tu1>O8$;&#Bpp2vgv4
zww&ofLS||<W_s#%km&WP*@ZU?UF}|<nq71g?{z95dwptlw;RoIwB_!nUVkq;^VfVm
z*Yn7Gj<(e8?`6vkca%cS?`6ltl@*Yv`MqphSrIkU2!1cS+5J2O;VJ5&OL^~QH^0yP
zo#sqG2`tUdY%9`hT-}#C)zFoTrP=Zt2uh)vrP=Zt2uLo4qdrlM8`Uh$PKax5cq*$|
znw`Aa{2Q+YF?2;XThKs%xcdsH5;~$=kuCQ){d})#MYi1I1c^#kWMhw0RDwJQWRv@3
zTPVw+wyel*dawBs4HQ4knj12IFV<gnJ-orGg--D{IQ>gIS{t1HrM=?~)W4z@4{F(v
zT_hp_5K&7WaZ+8)PbiD^ll^yP9%`h2syw{Qsf2Fv?8=s7358I}u53A$K%$ae*%(Wr
z654Ctm7Tm*Hih<@sVTd%3vc1~dHi$%VJ{oeRDa;Qy-pppt-RN%gSM6TX3Mk?BB*0;
zHqye^=@=fj<G#(#de)z5&`d9O2foclR{tO9pF@M-2X;?OeNg&`Y&q?M39KKo<>n$t
zVEvGd%|$*Z<&cw|n$Svrt@SBKgna%~wpRo`6oJU8Y#hF0*@0TnoHJ}gE4{4K8M^^s
zq5)@YrveFtGua_=b_5a#XR?tM(j|c$qRz6;t@Vzb&N>Jbvd%gP<d$b`w}c4EWWz15
z=Lm4R^X#40`VD309R!*e&pQZ|Tc6JkiHRVG``mdNxqE4J<dDKc{F!!X{XtjR5Wfr=
zU~|6gZIA#N;+Ja$kWgcY9}SsCGh)EfM*Fiq&1@>sr@ESq_RHl}0P*b=zw)YIrMob?
z8jz8b^D?8`>QB0A#{04JMgdMdgiR;-v610$P!aR155uk8C}U|8{mNtjhHN~<OUb$<
zL*4e8AGwRe0dB1yJ5~+{xRd;<zs771D+I`8ruo^3_Iit+)BK9q>joD{)BFLEJb;AI
zG`~z9K*GnT`DOAzB%e~J`DOATIW(nC^CNi}O!f|tN7VT<c^z=X)uYZY-4kri_lmRy
zB&w?O%j^dvs;cu_|I3FHkz)N*=MUdgpT&jl`!}tfQ4<<H$It%LQSVeT$Ek=EnB$j+
z04M~RIer`hOcLs0LV44lIo?rEx@z9E-65cmSH9_&?f?=XZ~EoJ0wh4*^dkqz!E6B1
zAdnR9nNg}pv{3g=e}hLbA6#Pbx*mPe#rFeI4&MB(Uul*<!IkQUHxk%$SL%~W!4Yc)
zJcknR`enoh2_@e3hs4AH5=y-5$HYME*8utTB0qchD*b`$7da5*){7hna_dF@kT@`d
z3?LTyabPx)4!8pdgxV^<vL$ooDm|{$;HRw##llsNIVcvcvPTER0JDll2c`5Nk<zd7
z7i{s1l%5zorC;rrDLrvSO25W0wko-lNa@%3i_5qjYh*EW>l**{4@ui{Nz}L2FVk>Y
z3btJ9FXnr+HW+kX>%ac5^#u{>*Iia6;_^CwG2b|}1>t<_{MXm~mn3%5*ZbvSKvs#3
z^bMD3fsOPH{^FbJSBZ`EjefCrZ{uSleWSn8e^rT%^o{=O#p+nXUyYsgP4)4`V&kLw
zRuq1=*{}Z9_GdI_M`leYz0g&*!|6Y|5WT}MZ*K<p)sr3m0^5^lp4ma3^fFek9t54w
z{aIgRipunm68zln37Kn<Y<c+6_yKnP_4>NP1Acjm0w((B0F8x5co}%cLDsOd{%GMr
zzueNq$VZujROT<d45&kFW@r7O!b5(!@ruK1;!+u`ZcrCgI?M`g(637!c5wI}A(i==
z6os38@6Y-%^UoXf{z~9`KMsZ-hAcl9{DJ+}Rez-D2fw_42`2D=AYY$Djp3(%C)hu`
z>2DOB@XL)sFj43P6&fT8fjr5&+^7$^`XmM_&GnEZO;1vxY$$=Pwp0GBi+-2sGu<9K
zk3Hqb?rJ6K;M-$Av)^yjA20mbFE>@eg!s>X9BtE0P`>+hh7J3ZerwSg+ZbS?%o#tj
z3w*tU3V}Swe)^OCT+undJm><GxPBaT9TA0KvI}hdP5RfV3wHNliwcD<kjakuF>~S4
z$F!WR<C)iP){knzX*sxNcsoXZkmiFKIc)4*`W@|N<j5cmE}AnV$17f@0ErrA<m3eS
z%}WSjE}EC4EX>J-?$-CaYVcdE`SApT^K#^xA0!0l<;XQZNc7yioZN*u;%*Z$;K-IX
zKSzBlN8D|aJjgA;z6B4Wl7+iXZ|2b5CJOpNvcbDKO1J#hDfali`jtIEh!h@=pv1d5
zK{1<w1lYSdayA2rQT}d@oXv>jv)Q{jayFA3n$6zL!EAOTuMH5H9Ok)C|5IruM@GjW
zpDZ#ta<Tx4dNVmPcL2$S5FLlon;b!k`nxm3@6(^xy6<){DAw<GFeujV&XL(BWPq_d
zM`oKKq5JL}nQam&vd!H&$TnwF;vA&u;83RDU-h}J(nC%ylsF&Ck?A=Kp_W5AQL(}V
ziCPZjV1-%4AyD?q9DerC`u$DUO1{jIXV5{O41bv;kN!bI@XH+g=s!rg?y($x^xp*p
z8hp%Afl}UMPD3f>J(eS{j-W7*j^*I!|2B**Y;t~|lXZ?AdRV{J`aVY<MPsKBBRNND
zAa>?K0s^!+#sUeK_#p>bb5{%<Y}3&Yey+QIW8ujhd42*W%ACwWpNKM`eqzU|%uhKo
zuwmDXxH%X(w{RRN_A|Tv5&gEppQRlDPNVB*>KC{NNVN0}%RHjrRCp#wo(qAAGG}tI
z91%EZ{#lkR*KbRm&5^+gO+}frIY?4xg&`2aC=F!o$qX;o>%75f0c@+>iXI8^Q5s-n
zkL$OkX9VP60~bx45%7wH7bG;D5dhYMTm}#80_=mw^@mF892uT|1-xSOBqY+W05(s?
zB9x#as53XfI``3EE}a{Yehw~lpBs>V4ieCF1JXx9qTaay*y0`z0cw7L1^epvmdp<b
zqXL-5#{58nUmhotm%`O*inpL)z=Z+!a$oFfEOhFnv9T~9^B@!g#=?NSItmgP3j^@l
zQIyezcp?<Y+}%&lag{A{KzJtPfbdKx5E2V|2mxeK0702wVGPld@WVi6a+RKNm44`e
z(ACcm13ocvq7*dwFwm$CUj%{#$cKUU9eHR9(I{9EV81+}cS^6ooGS~F!><U)Z9f!(
z%!&XK-vL~C4D2-l_Q;d^!1NlYx9F<S8mG7Ds?Zwht;ND>$W1mfcYl3p=|)FYx+%2L
z=`5O=HU{MV$PmA>xsi;<Z(D}w%H~$~TYr6Sr>zbI-4xpDK+sL0txkW_O`)xUf+UX?
zA-XBFogJ>$8<cDh$T$HeM79THoB#=t?EyPZgy@RU?tr)=1cCyiQ#oA`+U-<MSA=#4
zWSl@@AngtyPVg%t*p@yL$oeVMcc6ZyVjT&10{krqYyey8R{^C^yafRgAfWk3@qmPz
ze?=pOuKR+<)1$2UKlFJ;M+5T67EBa6O2*zV3W5BN{rnI8K+$&ru}26=8Zh4luvEqx
zfRLcw33l=seN^EI2Z@5k2|}U_$49>YBYW+i`gIL{49H9gOqBUCfJy2M7MdPxy<P}p
z4G(6{|5N|j6}%9@>mA=v4cNZKUK_jkZ~a*6VnDt>0w$y{2C%;}OB6zb1_hbtKl<#{
zpr8zp*ug}pK|ut_?V=ROp+UCgKl&%Bp+T9ZV7rmCF(NjLQfSf(LAI<$-_qcPpbT!<
zQbeg2f(ULSObUONHZ_<vE0}p>kdA}YsX^SZp9yi*;-M?3bk2XpHKD(D4Rb%QSKK)x
zC}S8NL)95Uc_|4bYMT+nr6k&20f}KTBN)4$=hZ|aT|mV%g7NG4s}vS>T^)PqWxZoZ
z{D$Y$InX@R1?6RBJOy+ewf?vTjl-6<IheIO(_on1+Z)^*Gz!g)q;QxN-o_@rq<?hB
zwxGC~L`>APEtnFUaUg-UEr>%`QWGT9+!kzg4_|f@$#<Hz1zX=ui7yI3dIx)Ztp3oQ
zJ8b>HB(B|bkigtwHytD}ci2rQQZ#*s-SjZ^(=KZIwH<dkpj6c^yU{2E&|TE%7ij+?
z7iWaQtiwT9{;x`kP5*}{Kl9bg`eUw|13{x0S*@z(Qu7a@zj(_)!K5HXdIu8d2W^!>
z0{x(^GDxU=&{mm9q4GgeS%5?QP*AyEf>VEiG|YR*jJez(hk|m&4ie~xf>^Q3r$9dx
zj9$lm0Z%3Rp<t}cJV7t$L@e!_VAd~a-60omU6c*_heu~ukJmp6e-ktsn}cYz8$lDb
z6G7#tOmu?&hpPrZ#cCH15amw<ePWvuB-A|-Y$AFYB=k8E#G6dC+69SZ_C&DFPeE~3
zM+{_R5IGqXw}^Ndk)Zt;#EmU7L4^9}XE}_B^3-rz7#K8vET?CXsPg9^B8QMgkDm^T
zWdLMp!UJiG67uPw%m(ljqNjt1aY7W-89BxwO1m5&Nwhh&g=Xh7LHWWCNM0H<`dqp)
z9ksL<Ls_qeGMy&sv(?axA&eEeVy8yQSw@A}>B;&l=}{r63AjKT6_R5bB+y2MFs5n6
z5hXQW3b92~^gGfoIWpAnmqN1PC<K|8LTLD%Tm}sv7h>(E>UWilb7Tl=Tu8P!%3C}x
zgckFi&L|mxh1lCu^@$yrBScMQA=y+E;-%2kEi^!4NWel_yF;%0SqcjkYPp%0r|Ivw
zLeoM9wg9QkF>3Sd5WS;b%YK}pYgf#+vGEAlvqN(06(q1{hp_d!f!;-kL0xTeNLd<E
z^A{Q8YrNNH9-FCaY7Kaz4^aXDi*4mV0$_0n%8|!`gvTuoC6|W8{t7W@`J^rhsh#+!
zkQ`WRNvL7#`YZq~36)&SyC6o9V|hr)&%X{I)_IbBKU=>s4O*=B@Dxfc56M^OK|*#p
zbp^ISsTCmCXC9fO&v12LkNkm;PH-`F)`#Rq14v-34;6?721pVLA?u)_3=%_meW<b6
z(j!s~ob{n5cbm&7nTydRxg}HnhJKx^bc<69oic0*`NY*}6hbXqLdDleSV{=Dgi6bJ
zViKd_u`R@xF&#iaa$88|Cm<oYEhO_3kdWLKvh$M|KNw(7X7ux2@EfY^a#Y}_10k6U
z<0*i4g=BgH5<t5`NKYPwH^nXOvryJItoH)_FTu}3m=k%X8s{-KvweXcaNT(jnIKmm
zTtFQR$pjH3pbm!Q&L~I<t|99xKF1Kr=a_?`@RjEGWU@GQ+t-=&TY5iN*RO4T!9~Nr
zwmSwSl?uuCcR`|(uS1Awb>#kec&8(jHQI9JPjDlG9`%G-Ebh%=qp$FKGv?d+09WW_
z2-mRrNXVmRoDw6U0|=P=l<mnNQO_xRD1bygr)Vf(9#Yjj()HKO!|&=Zx?2D02$6EX
zhUAQmLJ<0udgVSY1FyZnBJb;e?sUO!ULHR>y%3V`&wvENg-`>r%m4|53!&yM`8$Dm
zME${Lzpu9|`@=yX&;27LZ~CAN5dH`S#hD>Uk_jb?%#UgG=aF9ywODMCzO8hqCA}Y9
zU<|b`X+eHD)RJ%U;3+VMT31}f{W6dIa+oEq)`NiLFiZL+NJtK|q+f!B<S@(j%RKVS
zQI=R=gMcoh9399pM_JM_@f1j-Ea{jafi%j3WBwKWoNsAkt*npOn;+;81;<)=nUmg`
z%%=_=XR-KVy=}X3mJCYZ0%@Ejr)7{p8fRfzrgvHM$>0+#d?lbI8+)e_W}_GD4NJff
z5e<*|bFX-@5F~^rSUA?9%{WM-PhYdx;l=vg^lOd~fxc$R^C%R8&}$ZwY+R><45-N#
z%Pi5aD4lFKA6ztlvfX@;fS7E_We-R$gaFi#L%?#=EY@PF-Y7lIk~d)Tc{rJ7=^_q-
zgv>MxyIyqdBA>c#rp5lfR4*%==~PRr%b8BK)PFNA`EDCz05Q`-UjCzKF8Xhd#m+6&
ze=42hV9?@njwL-XpZDAxD=2bJkieK@wP;1#2v7ry%Xt=SvP{3VY@P!_`@HikpKWGZ
zYtFO82YyHf5c4d&In4)dKJ9?LWwE!G>C;Q!axmyMmA5Pz!chnqZ&?NWm1$tm+Vd@|
z!xhq1u=IS#VxyMpZOh(qAiRKh$C7Wv<tw!Ie8-Y+#DN6FI~Lxu96>=KpVpp>t;~hx
z`bbylVh4m)pNk!n(&}@uCBI4nA%HBlnl?AD;uu(cerU0EEA^|>A6oK?NIqYFerU;^
z0+5jT&_eGE2g2%eg~eK}f&;B^s-;%~S6K3uz<h<)ohz&&@g^QfK&+rK{4wQ_`SeQQ
zrp(k;`dv!dCI^Gw2;AhDklqN~WEF@HSwIFDo2<r7&CwKW3oPvuE9+RM^;&(DEBuLt
z>4DZ|Y5|6!w#!oXv90U$Z8i8M#uE5|+hq?#kbv7o1Cg==kjM^pS<!u#*jyzBWe4~=
zfclvwHdiGNa(gVfxhh%MT-|HY=IS_VUI7ijBbIVo{?JUp20f_MfUvco5q-px2Y4t6
zv?G?Bra;2Cj#!qs7DFV@P>xt(aic(TFzk<5?L^WdSsbS9W|M!)sDJ{)Q422$j&som
zYuOu{^w&zk5a|XU!_Y@9d36FLbUJFq#HJ2NfE~54gl!8uCoJtdE9*x#_#?ed;5*C6
z=Jyy9u(Ia|w(=vr`=dYDjRO-vKUi}A8YF;zu&{qkc?(E1?guNkhG$kpqH$2<2P-13
zGDsE|`tyIxI82!!)lRU%oAvzGC!Bi7h$rl>L>Y*juw!ZhjrW{n8#n9M)||AP3?_!f
zNqbm;1j0#6o=k!S!buC8mUJ=+5+{=<E&F7WXrby!OP)+h7EUHlT68jr9VNwsn?Yx+
ztZ89a{u{1T*NT3XY{(Y<&EOdeM?nm}>EZWoeqq;d)h8DHV#ys-FwtATQ04ThD+)oi
zv+Uef{dD13OJ1A?6NS#wAZ*FYfI7#_ZF=j%bC$dmjax0mweSvg16~Gg`jy?kO>bEA
zE2bFg1c1}d!><;Wv~<o48nOI*hHcZ`uA=jn!guJ1i&Ez;9But1RD$t-V~e-zKNtRH
z$!|sAN(c)5X5m{AH*h3$<puW9CwkYy3zpnk!F>;uxj-Sjn3qBLy~tYa&>IzAwB(iv
z?rWgTMe;XXcR=0nlHXas9eT&Y-yIzKn8fdd(}kBo{QQHh+M#zV`ooe3JATEBGJjY&
z*m;JRL3|t(W{p49|5-FBEbqeOXb*)3g%L%r;e`+Y2Z!16PxWh4gPlS?6dFv0reQoo
zC4{^e!<oFDdIP2C#qcF7Wuw@O;U>-a-FrU;wGm<V;BNi8q7h;FIS_DBXhaxq29|Ls
zEI3AnS%wOYbdYFUW+Wlq#tY#Hb5xi`_UN}4jS9>A?0zMHLZiZ%%4j3Zui(Di=r9|+
zM=vWH?I6+Z;L(JH?PL_f`$A*F?BE{#-qaWeDTG2}2x$Rs@}Lx6A(|M@+`U(SQ%Ow>
z%Wsr`jbanS$p2;uU%_idQ^T2}{d!YZgQ<?S!YDSCto1yN0>sSM!&wW$?6J@Fp~2U~
zI9|LTmGJ8}bz%Bq%%6+u!m`uAg>YRMokp)@@cT8h!t99ydb(&<Siac?E(*;G7dJEu
zcp*@;!))0BJyA3}EDtAeYlgFNIMIj~g7?n}vvUXZ#zk|&a^npbV^C;L7#nZoYq;ft
zz4tKdbWrb5G&d|A5?mCT8-_#TdLs(K`QHe$F$eXMqBk5Q^8PmnNmK{#pBH8a4x+kw
zVYyYB!`**g7>jCr(*a0u|M_9o;E>)XHQzA-`Tu+}!LAVga{$ZS9bw!reDaXK(+KPc
z8&SHfuklaQ>}2;H({E|LGpzBLN=(S^4CgkZ(M=>;y))eYCbJnAK_uDDHXqYlwB8-o
z_)ZYYkTG|Mqx^MWA|bLneB~YV_A^L4+{=oO>o>RA8`k(4ATfy>j<k@qP_*0|?s%*D
zE`}3ExOOO<wK6wTdt7hp3LXmM+b;AG2fU;~OPtK--|BCv9ZrQcerbicKsy!A;TO$_
z1lp-^^J~nVO}G%0UXiQZoxiRL8~lnlH}mO9y;Jy>6}j?TiU{41Uy&=nr3e!8D{`;6
z6I(TknzXdlxmn-k@^fW139Qw*MnYt6Nz!LsF5i4;4+8zVE>}*>AW?Q*uH1b93DkAD
zSaKnjs!58;8(34-XxMgxBSO>AhFrN*gEA1=kc*ufek~*kqiNf6l^vOXsRpiv;HQ{=
z@c_=UEmwYQ3nXB+<>raiK1jf9%SEK8!~`S~lWn<;cjStVGGd7J{`OqCQ6^ci$|t$l
zD8qC_8Utl_E?#K;cj{*Pm?pDyWAGK=h(rX>QR{9;c{eW)<!P)#9Pea&o~wM3tLBe)
zK36w_Jz*Hn)Zl@QLTk0pbLHv=Qb74US0+^;q5J2#(J!DoeXfoeJgGX6s~*l3NtNV5
z?qIG=sw4|Z)uCKUs_0lXNu%(qT<3Fj9l(JZ!4j9WK|+<Ua^>O=Bp|=awHJR$viY~O
z-}V}=vTvQ9pjF?uxpLKqGJyCtSFZX%0^-|TtomM~jl4oj`#m>nSLUQ?OjL7!&xM;G
zAX^nu#yK>i43A_c1&qJCYVcc_2TuSvG$IoskN_MSkq7!9VV<Fp+~E;n9%69wJQq=4
zhzRpY9^{^nNb^V*%rh)P<~c8vK-?G;QN~Bq%u^xbX;%#hTMP2jF%g+_7IHrw6G6^N
z4h9lhjEPv|FKHpNPVJ?L`pP9O?ET`g5iQ8`H<E+0Q0(Ohq7mKTk}Mc{TtxG?peY|b
zxFw6QXTnCq?kpmQ0Jtzbi%7$RgoZ34Z*YPHEQ=sXp~Mj+QUVrfaGR`!XJfoX@vUZ(
zR|0Bcg#8va3Tq}hmC&MgqEiWZ{KSa-N>3qQ)J}}ZtGggk$;3$FPqGqz8I8jxZ#46H
zC73K~Be*k>oqC`OUxV&ZHL%|RF{BIW`&RVOG#?f!)7finM4r9kF{-YOgv2#rkN~cY
zAmfvTQFU!3)m2tagM?JCjWp<DUdgKlH94Z(p5L4ex>9e(3L{4LBVgFI(=vLpQyYzh
z$q{+ut&op|$q{)K8YF6)9BF1-lP>o1)qkY<t^Cjm21gf8kFXab#+L5WomyzHOn1yl
zgJpU|4i?CuP17To#YCIvX7BV!!#iY~>~B&|k2Jd7EaYv%WH>Xz-j5nZ-Df(L&^?El
zP9?MypBa(gw<zRG@tG0K%%T!}?FUbb?WXW={XmVGk%qU@+lXih3e-hd`<T(Xtj?)~
z*6MW;xmHIZR8kiyuu*BPUKc^G`3^<WLIug@+z6WzGv4h!*TJBJ;<=8Zv{;`TvBVKK
zWPmX@f;3Dh>V+P2Be-iW#)(%Bow<<~_wrNkLR!twkFbStqf^;@rxFv2&X33)0Te<d
z^COL~mZ-FtpC9Q|X0D(M*@bkL{6QqsBF|W<Jo149Lf@bGAR?FMC<TxYBJyiJAOZ40
zBrOi(K|<3HB5k`%O?}Xm(!dWQ?H)Eah-#1xuZ?7GNf;ZI?rWWDXa`_zL@p`|`3}I^
zi2MK!NK~^nf^aMhl8tKCMvCu})nv<R)<zoMY3>vO4e9je%#%gNpItSZomyy*U~|ML
z)~bd4t3jJ1g<_ipBx>0l!8VJi#gAGxN3ML7@A~2?YC+b#IdWAwf8RiI=(5u0$iv<F
zL{q3BL;pBZ?;|^vRqRBy?(c{vs2h*OgaZ<W{5T>f9FVB{V`|~=!flYm?~L%>#)k`)
z0OG?=rxgJ>&rZjA=$k`3ouNeE9NHPdyh9mHk)`d4Wc?Zu8BGyN?ulT_k?%znQAV?m
z4K6Vzb--_c?z5vlNEF={kqHe*fbNSRp;<uYEux5fDDzfBqr{ay6p_2=;1WAxh|i6I
zgwUZ#IM+N#drn0Z%)iNGH#QEt(%(2jg!PRhMA7>j5}HZ7Aw@)<%;YyU8Y`tIZ4-bC
zZBN=J011qf5ld_wgCwB{vTK_BizrV&6%m`hAkYn`>}~)F$y0VWfQ00!OWjaJ6U{l<
z4Ilt?&e4J5<~c_Piks)`Za`rmowK_kWof@fvL-}DH>6PVw+K%1csHb|8-C~Az?Qc(
zwDj+GFW?DE{%-dINMQa>y+CPYiVQa>%9^Q0g5|U_w047{a?-{l{!Av9AR#y?iu`OV
zc~^>(%b`)_#VEV6m9e=7KgC>t2WZpKsGM0r0%mAbPI@2#Gc<}xkLG@mlz~JOFGfXj
zNeq!(J{OhArDUPwpN}HBqz_n27G4U#_Ii|F_YBqNqJ|fuY<g=W93LK4?-L1S3KeTF
zMV0Z<|C><a-y66$;IYV9Ktk)6qB5-n3Cx$GGOYv&tzU{p$3tsMD~ZALrm<1=m8i&@
zBoA^gM`hk5S;(8lMJaEh!PUUhUX5lYr^s$?fNEdGge1DP0d;F_l&=>$fPi6ZZ52VH
zY;9ByFOaCJHj0j=7X=!S)h9>U-EE8(w@i-8(FHDN^Y<P+R0uMYqeurym0}#8Mzh|Q
zniQktw5UDKi%FB2LKF5#TX@(^TM;}$(V4a)AOSj)6d?~QCPnI`hb@HQ6?KjvX;T-K
z9)^+-tRoNOD}ZA1uz68s;s3Y8@D$d-W6@zCfi=(WFp$8SXLlG#blALTbfN4pV(<=|
zA64Iy9VU5@TVQvXWTC^}ywqV0E$v-&*kWm>hN$-4s67rFl9?9C4g&!d7uhO;MA=2Q
zoj{_hMPw)X++su0{{u*NFxr%S5S3>d;BvMuUi1J7nGd4)sL_k`;p#?~wla!KFxxvA
zURQ8s6i0h>sMCnFSRG}@I~v!dSKC<N0&8_tz99?}SgWb?htYs;L<+2DcVA%)@3h_?
z%wQtat&hr!b0DcuRDN$1Bp}vD@x4(x=5Iv7c@v9XY24julY>D0w8;(!C<BB|Q5j}I
z0%21WVfH$X0BQ@Hd8N_0(-sGT0`(RLfrjRms63--#E0gVD3T=#)Qu=mZ)2&ej0Pp!
zqH>}H6C&H9a-sx@YPLn~iLw!CxGTyh%5ETlu*<2OBJ?h&a*EKqqB7@1VIb{_Vxq*>
zzoItAVl$dGCdS^p+W0v1c@%GE^6=c4I^>XWiz`6@@{sKoAOU&Eb_<YzJVb6WgJ!(O
zu$Oi;svOUBzt))Us=-g;@pu5aqfvPi0wm;)M&)G#kns4U(d2P>JiSar4DxvOSX5p%
zkR0^cv8cRkAXxx97R6<Qw!D56_&$mQ!iM-KnQ~TBYP4tv+E#+P^ZTegA8gFK^LvW!
z-MK7~PNEm`?`A(K-o_Kkj4NA%wq^N@8<od|jm3-`#W5khbk>;9xU6TH(XsU@JAQ$Q
z>P|)F89PW+a4L$0B)%&G5!m$%TVG~e)$UAG-dqI}B4?rraVZESM9xHUmNs9Q7q8A-
zj4DH7nKsuMZ@6mk+g6X37Z>e_(wHwVF4_?VB<y=J8XXc7Qvfk|MEO0c4vvW_K=M%G
zA9h5MEJTz+F`5GCP1eS=EB9PXX^`I}#UAWzv?&E4CR04Z_<JrUFMflBPS3@n;_XF{
zz<w@<Wh(i8V_Ivx5EB=_4|g`Sk{4of1mF<_Ux>*O01|>P#Ox8!m{u60V|)a#oGyk|
zHrmmEmKmdCaymyz0F92x0RR#}qhlBVw`1oO@7KK?%bE~l_jECC4Za-1`xID$d+>r8
zR^&0Zpo`J4Xk1M0mx2q|8W+QUDJBXO0`My_cCw36T=Ysz?w5j#La)T+E+>CiY<!Hh
z>1s4ijhC&1C`F#}G5G#N7==ynrd=#+MvM*YYWyWQF=ph^`GDGlw5W}-16_?SrL}hZ
zz(xCN?e>9$8nrR`g-DQSUu_H<zZ9gKkd9Mg>~G!BNmCpM3X)S|K5>y7g?Ooav3URz
z5L05<PV34cpz8D(`>31It!%mjLB2aZCeM(Y@F+Pw78L7qkbsy@THJ#6HMO+5Sk~GY
zyZuJvru@1XM#C10;7zH4b7M+T{xVkzf8)lsml;vE?ndLyQgDSsp$saTYd04pbe$WM
z;TR+;noHIm$N}+iL5wZ@lkrs90tbTb{Vi}HsJRPbGQn%go4X)}5O6^#h4#J^V?A#&
zE~ej!$wZ_nZ{R!BHMC9wiF)6OVVk-$uNTz&F*fFA<A&1roqA~=c;B{BQ=X!|9}9{F
z9Y`*Od4R5|HKp+JL5$_xV%*XB0|$b3MLuvKD4cxYKu|dOAO;9Js&7hNvNWc&&hNxV
zcQxYd{acKZ&S2P<q}{)zF`pQVC=INov1BvZB8oFhV=Y^mp9wP{&a8|nYhtYNt;U`j
z{Ip?cQ)8uLO^P}zZU1Y^qs~g|c}kZ-BI>M+HCltHLkoFgAnKs1RWbRFo@7C{)iJzX
zb}JmFnWb%rWqllT<(H=J$G=robY}m$&A2YGA%+(e^3c>~<T;zzrrV5y)|+B70D=is
zHpOIu2@=(8ieX~H83;u1a5D?tZX`Qxwi^Q`8nfAM3`i<uy9P)gY$n%0Q~&}zV=Mdn
z?M9;;wmJx8^{oy9RkJlF_vIi0gsl|t4%2+w97pi6tmA0dwQTG<Z!Y`lc4I^ElbC(Q
zsX4W44}0>@Se@cGkoVZF0}13kcI!X_c@MSj6`B{CQ@w{WBknXNV0G#UQG*V}WX6g@
z5IPh?#!B(GIW_1@5q~>^Ko@*z2Vjtp{L&7<AR+nXr2yQV$YUY^cLM?EJ!YE(Bosep
zn*=0~j@c0yBo{>l9;U-2EiCPPEbE<k=JR`u=iI^bF?=AG=O8V}78l7DGfFPn4FVHj
z7i}wm1lUEg0{>`c3sQP;oZaw%F{Na1T;4DQm$T&!Ly!;}9LEjAW#sBD$PCZNS>P|m
z@<*PJOFst}t$02z=Mj*=cs?#)wgL%^=i`_QC?0^sRQ7ya{yPtmViV~3IR2dnmxZYo
z2#k!g)(;vdOGi4j&~31hae0#qg;2}LxcqY-kX#6V&V!>SK)}pn;_ShPjGM~FI1seD
z9}|}wJSYT+G4VqF{{$ohh%s@TIe$UB7%iw(6XTgf4;hcT$|gD>lr~OuT1&xUVq9K=
zfe=6@#&J%*oSdx%xyp=qrsjW)6|S-w4hV&Y84d`Ah8b}gXdwiU8F7pzX%J))bK>mZ
z55pjH91Kbz=EUWd%N9I=m=iA+n{6P0F(=->19#vSWc7J*vC9DhlJnv+g8+%z=f!0P
z0TPn);&uknf-;D=<06Cj@exBSecMriGKjaGW>5z4c3fr<5CqWMarp1eaNm}e_I^C;
zENfqG+?4x%9Jh9#B{R2#^J+`t%8GbqOu6B5)!?^?pLhcFB{n)ppf8Ebdlevoz9f!~
zZi=5E5kHs2Q!C<bGuJdZ1D-{nXjmFom&ZMPdx45^E@VH9WAUDg-Gxg`<ZjD?aZ28B
zfDbn6TODUbJ&bERt#-7clwfsS&gUq^OUbX2fCTdDIHtS5atPcPS;r>yF#cAv&Osp0
zTIaNj>RA_;c}Yt?Ue?7iFVKAvkhm|hF5YO2c$1xIObbw9UA%Em{t~8S;l9Yac(2he
zy2Su7sIf7ww9D_9x(okeT+yHP?`d4!2`t;VG@LfZWoCo&P-0^|zcnAFAh~>-w)`Ux
zEonGyW=DG(H(bBjL7*9TvttMvO`GF#(uN2SHpemJ@~cxV(PnLXT-n7cD~xS5_+{%s
z!)d!?3>r?`<MP|bkOIo~IC6T?$@GHp_IQh3mpYkF7<eat5?6O#>SW1<><*`sB@><e
zsp#aj6m4442;Ijv^fK0$?sK%F@wv~@ipJ+Y+p!@6<b83RN4z8;Fg_2mj~+8#?sU+B
zpy7GYF%RYU2jfApx!jTu&x3KCHqiG%TGH_RlD*p77*zVDgFwUd%eY*jqYMzfj5iYd
z(IBD3mvQ`4$~uZPEoqpZ$lPCPY;cvHa4_iJ-w6kUM(BySd_4{_z&H`d>v3xY22Kio
z$vpVDvCehfFAfG>`}-v>51d-^lY(F3@@pO-f$>W`QE1M<i;^C^&O9S8Yfc{fTVLZd
z<--vBX_a<oW>`OCqEdtZU#<72zv5r+#s9kEKNRgh7{*^e+JCz(|5~!X4E|NJJpK1-
z{N*M88*}<UNBJk~_J6FK^1m{##ov2Yq>8)Ye_2!F-zt6dH=^=STiH)-v{<J2Nu!g;
znvv)6(vgmbzjHk^Pl@r@SZl<~)}Z<4`{^mBznOW+3Gm_uNSN~VJn{8Cq6C>u1BghJ
zeLWA;ttbnsE>FHvhWD6J79@Ww8f9r(t;^$kb%YCh&O)URNF*AWp!p34dWyoc@~|)#
zz!;gc^W>Xxc<mTvLGmqjl%>liv-7Z9eikq1tF0_8lb5wM^Z3)oQ%W$ChZK?4<E<!t
zSe(axddBE*<>EY<BZ3R8#d$JE1PQekQ-f$>+lpH7AsUZ`ZI^-lpJErEF=DLxpGG7N
zu2^QH3@>yEfkNYlgg~!}x1vU`$YYECY2aN<M}~k`IJJ^7R*(#CI6(%~>O7YEmvLQs
zwIf3oTJ6YC>{?ASbUU~e#jbUEY}CJuvexSy8M4&6Jg<mCC<K{xdHx*!Qh6&1&>Pvg
ze;GHm-sp%>Xxf-3H#JZOA{+CtsqrYU2IFiC>-%q`XPYgK2*r&pc`~VN#pA{na-ga7
zYF=wgJDis_rXb_`UnA)W9nM2?yB7DE)YjA^qYE-6LyUDTN=6sRi5hIcjV{O&FKd8=
z2BQm*YpkX2O<US)1zDRj4Hp<)lqRng@D-R_P2=McQwo$B1uA{qQwJ?R{l<B0<Xgtq
z9j6xHE4{RpB%YyTrWL52>v2%ebmC0+LAx|*x1=C5YoRg2lU`CFyBln1x1>OJH%Le=
zDL^;i_7#Nia9II+YLSudv8+IDf`ZH0@?tkg$Sf<s#cs+KK_V<JD+r2@<`Bux*p?N9
zuHk2Fl0#=~%L=Z%il1kv$*)!wFg;^jm0sm2NA<5NkhdjJ2o<d=z>w?Al>@c5fc4E_
zRl2r7PEBc^ov$sBc`ZmltSzv_!WJYK!c0$Zc0yVB*(UaV#+cJ-lLJ8+=cWRgaiR<$
zHWd_#3*;aHv8ezrE7F_BY4W<QZ2JesQ=PUt2(%X6>L8F4ZY?NmCoM!yxV50;75sxx
zX`0KnvmuL(vQFC_1e(jXJIx@U++HBlbBF+8dx3cG9y(wu`;=W+Y~0xCQwM<#&Odb!
zXe#@(K<+F+1PGrN;6)6286-_p*>3iqCB~micRL95r;WQE1e(fr7s!oXhyY=C0sd%a
zGkxDQO;g#COlYZbySwy=gF(sW5eI{&vLlWbG?g78Er!!nmZn4RZ!@*ajS;TWZygMp
z%D#0l=+OIHM-Q6Hz9l{0q0{Iz9eSV1^jK-Ur`&MH!JxmnIpbi^nfI9jOI%KX3^2|V
z;Kt%`;TAa2K3|};&+p7qYmIzXy~gO%2@DZ<(h9v(ecl11yY1%-ERlxcDZtJbv}wn$
z)Tikd=tWkr*0`qgMF)XStuGeH7YtAa2p0?DVi^Du2p0=5!&6F|rUU3f3FVsnRzjPF
zYmH<n7`8T)SPn|aq!6WnH7JqaK{^}lMhr?^dA0dJ91DlgLlewgXZ)>nr~^UA&qEWJ
z1`QoQ4^3EN?<B3z@$=9`%hvph1ZlcwIxN9nUuWD~I?RCx0%Dj0L4S8MEFo7|kO9Q7
z1YR?si6~9CP+v^24(pAMr7t=VAwaz7K+u2JyqJ(n2gm^8#RUF%hyKGXO;=P$CD^R>
zM*GrH4g~#o%_s-L0>r3<ye$G5K#WSHip?iE1g@`+O|a+&qkrjG2O<oJu?|ES5M!N&
zgaI*@8dAX_@D=^>3AS#7(W`X41A&WcV9Q<Nw2}*m@d<Ik5}M}%Vtk^ct$8npz*qNQ
zO|ae@jr&Spbs!?p;#EhB2q0c{8WI7-tJDzM8A~hpN`GyF{kqY(wXD{GhytS4frtX4
zHX)OA$N-`?fosS-9ZoAT+}TaAA)Ab`Wm6rD7%-+f7%^Z>O~_RbWPmX>QQXKLzHwwZ
ziOk&}885oZW;q~nfXqtBR5Y!`0WvEQ5-*j31jwueE*0}#)3kz*3eHQgye-Do&hs3M
zJeYJ|Lf%<HAz;i)$k$0g0%KkRuakU;RU{08H?meHl+}q$)2+reo^t%Q2TMM5S?M$=
zA2=%$a`6i};H*qw@k=WgkhHy*XtX*Zw)co3)^V#6_<%HRGNqLQ<RA&YM(+RuTCPjT
zsUIZJ*Cpf{9VF1#C9p<6AfimdQa@tBPmM!mA2|vppx{T2f(bx;<S3W`#7Cqca(_iF
zv9wPUS)XTG?=)7sf}bXEkj($~sDx(w-RzHD#`C4SZD=r|-EP}0K>~VrA}aQHKmvMq
z0(;G;NxKr7d-t=|yNzGU_B#-?p}61H4rQoNLcSIT5)k_n*joRJv}<E&-z2h5WPaIW
z9B~D{Ng%hux2@DRq}*|K>@(xh4#yMnTnJ1+9Zw|0_Ay969Zz5-N{Lz<Qs#$*QkZ{V
zstYUMYcyqb`;05fz!Lq60#NJ+TQQJaKu-H0f%ZcJ)BXtBr)+C!rxID`S>Ar*#oSW~
z>}ouOO4^cMrxQwU{%!O(IBffVqbv<tB*u6O$kPd#jDQ5>=>(Dy{s+TtNyA@Rr_YT&
zCBHf{q{goa`5HFLK<3v3cILW6i*}ZFF_ASP$!<7c{4IKs)S$4`4r*wFlFD;QHNTuI
z^6>%V-WqU(B6tqaK}o3yNPrGXLJ{&=knq_-$=v6X;vkF|{2**_QXQHU2Vs&2xgkk;
z7ecbI&VDvYdnpuS+fkcdNaBxy8l~8@gGM?H!d8M>_Ciu#$UsSey^zF(3_4V4N9o*%
zB)f3X=+<Kd0Qgh{E@Va|W8z92NXU#x%4>)qk%Np#HoKRnutf5_aYVBDJv?ue9LgI<
zB=5Y7kG^&UF(xUF*p?r{5!;xg9DI0$+Qua1-~-8v+8bo;DDxYi<Qrs<fZ&vLCXjHZ
z@ku!yf&|j|qzn=ufiymeF^F3l9(-fy)nwL`r1)+bO<AudJ^X*sJ@|wWwiS~~Grlry
z3=&U4i+5^3!b%gV{WoA`if;!Y9w*s^FN`ilwMqFp1h^<vo5ZdK?);+=sL4ro?hE7Q
z29uNWT_A8d8{=*&y>NlAhs;Q3%}=sNzceNXXC(0z7wlJfEK+A?k_C<!HAOR%@|6T|
zAv`mQv4QU&q7c-mOR@z=j0cM9l5!OdE(+Bpu?WI&L?KYKldR!aMvtP|(&EJBY#jS_
z<Aq?Rxk*;{m2qRy+@w4}wD?kZZW3VzUm}GJ3_mZ)%&(2kjpsQ?v<9A+1QPyCSy9_t
z+M;CE{v^Jf?Pg=YGs2l?zcx;|LW`0JDSS7*J+*CdlHbhf1OolH*!ESBXw%}PT;qU*
zVvCbl<7}X$vpuzVRTBTF{ee3r{!lyf^f6<ms}xKTT~Gv(b5&AK=peaBRAi4J0k|rO
zzrlEwKH=V;%<xI(fp3l1+@+s57?kIKl9a0o6avO4N%>dJAc65o5=jBgD(#8dDg3%4
z2uSX<9UCMhciN5(l9#m|yFFQSpK$D(L2&9)J794<l#Y$3K-y<JHb@}tBgcN0tlq)W
zzDi~dEp+AMzr9^Yje^X+lg5{>&{s*Lfv|c9viebB^$s8ae$=))NPr);tqv04N6G5^
zj(i7d{)x<_Q$}}JrxUi3z(rF}B;|PlNGg?-@1KJN#))L}7W6`w+JWqRid}iy_*dyE
z2Z79dDk-n>q6`pDB@4vr8zc};C9(SEFV1%$@_gpxX(TMA=N$|(`1z#VEk+?=oKFTt
z7z0T{Ni4pot2&UqFUk<K{TGCwi*`@p5d<&VJp~ei7n62Rb)co=vxQ=h{`a$ncHOhM
z(91(59`R?gqd)@a*+LnCKmzF5LUa@o2}SK_X~PS%CKs|U=ZyWi!wc!d2sDLvME7VT
z3ze~jtlh81h#LG9(HjqdH?mMhZ;-$nStzg5fy5LtvM@TfP)s4j;8Vz`LiPW(b?)(5
z6=xn#Uf#Sg)UNV|n^Dg>dEax6iV_qggpdmt@zRUhZQb40?S6`Fx7DI}>vnsM1yQL2
z0Rxi=aw!7FOCTD3MXA`NQNcizmYZDSWfzr#g+)R^l>I()=J>jw&;IxRp7YFeW}e&3
zJ2Pjd-if*pOQYNz$95r>L>DsGkuF3=x1&Y<4Nl^^lF6Q~I@#~q?*XDV@`yGzIJS*I
z!)k~7Kx8*Kc1t{v-l4(qt~Kkd0;3hE2B-9z{(p&Di#s$q`mZPZZ7XZaH&trT<k&+H
zxSk%dO%5xTd=5wTK#Lvy(I@@BS+h7_GqL|-$9f@5h*<2{^9O*YQ2ChtO>&%cc{<hN
zFv_Vr)o*B@0WA)nXPJ~#F2T|2n3Pljps}rSt$>JZb!<ukBC^#XI95nXDyPn=bxz_%
z=h<H>HW~3VG8_*mx6ZMfjDVC|=h#g~Kn%CeIqyXbCo@Ar5W^*3aO@@{OF>gFIChhf
zB_ZeqhfPL&O-eZ!UUJxEbe`E{v?!tcGH_f8QRz#L-DCtaWnXew_?l|Ug4!K@D4}jC
zYtNSv9kx4m9<JQzu-#!EPA(=Wml*1F^!<I*1$CY5jW$65l`@@<jXNNcI~}_w3B)5h
zopY|RO_h%%_-ESboIBZ!7lZ+dj2AkciIdEq@p1{d*Bth85A&}2=`B-k9e&3Tr~F{b
zjZ>Lz{^6b9zvHIc?$RTY>bz=rA}^(cDPp}8NS$7D>_18%b$ZQVMZj#@E0^TcrDrA8
ztg5cO2${?2iX9yuM07dnXg&#uh%SfuB$;w6m${rR`kEp&qIyeSg3RS?$xD#AoGnf|
z`Ugc3By4d=i)M>jxtYw#y-=hcExdGl-U4R&#<A0yFi~i`LyvAYUX?R_liKGb-pkGH
ztDY#V<7aGbnX=gz=L+~Jx6c_k*bFy;xZFNx$a^+d2*Kov9w+&(%@vkLxwqq7VM*kQ
zcTBF3Oj<6pKl{Zv13bO|&c1{67Nt@nphWxYc}`9CJ9b0|MB;uYPN(HE@pCXrr{4qM
zQU~)2l<A*?c?HV!&%rpK!i=PYl22ts$5Cd7oq|(NG@_Hg|A!rWWM;9%^bsdMG84#C
zaP%!TkhnP_$%SJki;5*oj%u!K`MPtIGUC)igy*Qk9~<_?071v}S!bwgonww2&p{Nb
z!+7r7hKJf6*S|hP-QXN|?7*<tjH8Y_3=AVVH1~w=6*(sy`>AoUSxPwJun;%e$Uz66
z=<k17jVb-av7^x9=%a0iQRrH-SrJE?&2|fxySW#?tjhYNXS=kV+3li%((*YjE&p^+
z-)jOOjRQw52U6oXE-h!uA7&obyZY7vs@AP{?FKWbFx9&RFmsMDf#$oqYk<1mo$uOq
zK{aIB#YI3c(e?&ck58+AbQ@f&AgC}kxF~3nVWRO1UEP{im%9sH`_=A1)B1%ju_+_X
zffD+St{zydCb*5R9gadpQlraol<o>9;`d=!-&L%><v#4%Au?2$9(EZbGu;9cA-dSr
z?-#4Dx{LEn^40EQVIq!UB0DW{^*08pGIxm^xv)@STH=zhS;PS{XS&SQO9raTN|)vJ
zB;Tzs6FogA!+FkOTkRG+?dqcgRa<(s%Pu~#$RM%EV{Rf7Sp<mE!Dg*eo+9KiX}uhe
zJV-3^xT`N7tiIwt9#;n{Opi--er=dQPq})*VD%gKso1t0eP+nmc7kETB5Pbda)_Fk
zT@&kZkg>=b(IZ=rc^wvMbrU`ls6&g@x%!zQ>Jkq^bTcWB5!vcyvi%Rq0A@@&^{mVF
zfPIFlg9Dy*8NZkwbd0ocy&G+}2VlVUu1!loTD0D^Jt&ZBt#|1`Wy*AnG<SomyU$kR
zsyDbcmqSIw2G{0tpy9HcnShAcAU-UKc#O2V-PKo?sIuzzya@4-cGoWN!i0!+*RL==
z77!8bE*o0Rkt|~bZpuAfqGlJCZE|hD29-jaT-&b!g-gucDdU(iqPuQ=%em^+s_y)I
zWlf^nwUfN?AfnqXiH5a6M0C3hYbBA65m(=;Z#z$wmTk4R79vHqx;A?PDYDg#v*#FT
z*G~Ors7_AiH&xh~f4B5sJM(Ij{%fae2cs|}Xs1i^oZb&xR**g2f;rym&m5H;aM+Fi
zD^!Rvk4DBE1wiD{*qA^>9*vC&MC4I1rtAx<5FPjGy;*hj@ZNk8F<!50XF=ehNUzH*
zNUbS?@lNP(`f9@D6LC8#%$BDUaXWxWIN{m>ClCoITn3!aC5#BZPdV)-?(vc(E5G=`
z^WA}(RmX#<d#o_VJnh<{G!QALT|1Np(mkGb2jAmGLunzH?(uFfIm3&F(w0WK-+Fc^
zZAo;G(>)nVi&ZPcFYfd5-Q#E|7!6X?KLTmceV(;25RvzJv4tzdD`tD<@5bc-q|Nqh
zWB|=W8yP?(&GxK`fk>L|VPbX_C&#8!^Spw`JbmT`>Z=3hdHu3cxQ-PIH+WIF0+86?
zSv3KX*x=c41tPJ*!@~bT)5eM=8a-Wkq54@_W4?@-xY4sWNW(;#MvspzWXWo*#OESU
z_gtv1FI(i<X+)@$S>)M+k%5$1<S{g&51<TaiKlNIrY4jv$-hV9afxRSK7`3|k;p~u
zV@2)DJ^kh|<&9V#>l!L$mdCmVQfB$*x*jXKULEQBN&q5O$GQfZhgR1>B(08h4Mfsv
z(e-!HbtRw4cm?~s!V+dCTve>swicbC>n>Jf2Rz~R3nRr>isD<W;sJ<ni5mw*d`ql&
zAmUp@@xy3brD&_w(~ZN`MP;q|GNSla&&C!^lxg*dt!qpf6yN6QBg56TBiiz1L{wXB
ztV*N!HZfMWtjbl2=G(p8v@-QZqPjiS1!OAQ?pa*`5z_A2(KXPNq7OSDAz3M=*qHm(
zrD|&7<c)b5GO4jKFGDP|(X$JkltIQukB-TNbtRTbb$f}w{6AqmqmHM@;&Bw*KxB1$
zHn@Sv>h^4K0}1YKZ}4Aia0|f%_ZwdF&o;O%jdE|s!EH$d_twvYyHe8c4vtxU=gz(*
zqd@{=X9H4=9kH_k5x3)WXRDO)$ll1=v|FxH6ZhtIBYzzB=5-@~9QMY(MnMGa6<_;r
z>4wLpQ}1{M$8okAakfEv*)v5+eRsKfb-+7bKQD5&apG+6N6t11fc*DkeF2gGe(Y>O
z<i9V@CXO>sJmi25E7WyW2jUt+M8bi%hCpHR>|y9YBpmP<pvdawIEnc~`soVwZ`FtL
z5=3{0Jo`;FJV-d?1<_h65DAAoyQOlRpu<+p07@Q?)eNNM;aJT;!yD(%apHZwk(wt1
z46^wXNGp2ttq>pVjrGh^B=w4(pC5#ttJ0}er3Ei%a&J|t=lTy=RT>X?szkTVrF!{f
zwR}W#sr5prNNX;&xf6)A=2Eo!x_nw#CGDM&$=!a1>KZt5M#lCAkPZFpVP<Foq|}TI
z--el;XH}>&^*|<3pUF+TL3I??@jG&Qo>1_CjCFb-1s}**rw8Kn4`c?{XQCcW2*&9j
z%p~V#q8`oCC^tJ}do)YJ>E~pmM_XEKs!ku<mPtI9N#<I=s}`#%fargBmB|ck8Jih^
zRH`jwdn6#j+cKpY^Dh)grP?yt=cttI!xsXT!n)69>_T0Ym~UMs3NQfA*5!32_F9**
zJtt3*zAh76zDlzBhD_9R0uZzzUr)&x8}jv(jIkkKPstb?GFbkv5@FTpR7a*@kFLB)
z9T?D&iT8q6i`_S7OwXy`xLKvjHpbTA5dt@6tnq;e+?c`mJ7lm}Ew<XClRr_r%C_Xo
zi0QXvRCHqpJe1jz;V|?EqcTL%R{f=^YEIeKjNQ~zZLGdE)7R`+L#|kTYla<b(g{`z
z+GdppKzZ9@<pFuywpe*U!y7BFTJ*j<Ql38ZR+XBxJJubK(B1A>cR&Q~j&%n_&~DM)
z@8#plnsllsQ}9Wqu;fZl-}YhAkleIeRZ-!9o=p6CZjGpMzg44mn@W}Mk5$4WWbcpF
z2t@XNQR5ovS!z&Y>R={uB$F&z^2NbkpWD^+Ivzx!0UJ^d#-Ra3%E34^fOz4-%-|z7
zG=yM6<4`7f*oKCsQSPHSG%ShG_?rn0QFx7Hx{oto80<ko>yV<s9+0Yh9BUnj$d5mF
z*&2Z-Bdt#YV1tvf+JUJ3WUO`|l1|2I2b!X&T|VBb<&2w5!Q1+GcdBoPpJnI;<U+Mt
zwx><cChpB9<)FL1;AnfAp=ouO%3VDpo4nG@%tg;=&OO=Wq%Tl-%S@rf@@8cdvyu19
zSR58HB&~j`e*Tr;{hz|}xAlQ6SJKNYr+I-`;=wG}FUR8MWfKb!$JDT`9{JADbk|SS
z*1GvwyL--*7HvP2P5vY=PxRN2<?7j3-ok9+VdTmEai$2F%aT5?gXmFb?QL-p6LK4~
z_FlS(g50KTG9xE;M0$KAn^=zEn`6P8vt&rR_GjwHqnBipHThb}-{z%Ru9W`#of0F<
z<elapbFD<c%B)EwqXF1?W!5?`kov96+DrnZ=*lc1U^al%ia#}H^^^ap=8bI57ZQ(e
z&e~K06NQ?yq!KwUv{v-?WHym58K%#gsxH)xKUZg53L!=7isUhcpUm2v0;KShS#rv0
z*^*cbOm$`xujaP>TzytFg`ZLG=K&S(%-Y-!L`-Ma=6)bzI<q$S1BtrMZ1&Y`l>3Dc
z<^ET)<o=nmIjvTb(DvMAcdNdAs<-FgBfY@(tX=1UiT7;Jo)twHkoRoQGWL*&td&k+
zS2pTD0F>O7wZRCa<gTpkKY*0nm5ozitwe55Hd^R;`5u+3?a5a`{#*Ctn<^u{o_tef
zq}P)r7FWuxQ{&UA)7gU6ey(VyT9F!bI?D&mGi1SFyx4uFpBPl~v0nSE3Ulv0puST$
z0!oy)c#hnezA}4^g&nyweL0asdW7*}r&+$9I$J$DVphJ8*nXC8{|3NBp;<nE1AZ61
z6XVzWx!O7Efx?mXyxbUlyfJ#cKRCKJ6iBIhA8Wm4Ue%8^sRe#wm9J0DRj&+O;P?9n
zvkh{*@M%9;R#K)X%;Vd!1NAB>gAj`~(d7@mz`jMCK>HUBH~W&ui+!7XT|G}#jcoFh
zQO5_B1~mDDqIq&4Wtx0;8ga`IjYji}{N%`zis*$K=BW`QAw-A%@|ePl{GsMpJmIGB
zBA*3X+2Jr=O!|nQyr85!Dty^|HM|Uh*>x_DDg20E9IX%oDg21f{zBQ^JYELuOMN|e
zzN#6y)aU*^i594oS?W8I8Vsb&QopK(yPu^D^NGv-<mi%#(F=<oQe#I#h@6$j6khJ1
zJ;D~2+5P4I$ji(Y?C~<sxIzkF5*42RkUD=Pgt)Lw@vq1imMQ)fQdo`=7%$WEEB)l9
z%;g!woPJ1EjDQd=hw_-hEBztSwGKcEuk_0<=|5e1?Fs4BlYYV0+`l)d!ouPweHQHH
z7SstiY^udito8LT7O2WPenv+s@Bncw{+W^4frxAI*)k)$TYv<6i(j(Vk5;&ZV3vK>
z`0R9+p`WGTn`?Yl?9%K9vm{vwTI1K$_Wy;c0IzBD6XhjSy?_3(9<@;2RSk?1&;+v#
z-R9dxWT0WTXEy_>Q=8969J0TCf+WG5um5YIs-2w6ixBt9`8J2agovDP|CIs}k@NXi
z`jKo{n;@yM%TK)NCrkGB*Sn^syxjd-T~$;EF|Ly&#jd<SiHEMdK#7Mg5g6%7l46(d
zzKNdXL=;{S4MjHl$v6CHlx}I1+v3|%x+O6b>Goxm{`Qw-0-6gecKDq5`<+KrPkM)6
zbdLG%VzA_#oqpmXv%5v#wnU{Ipoz629-@_<J`*p*8j#BF(hW=0Rn9IyVfH}_5uRN>
z`=BQn9?)C*<PtT>dCN}>6Gw(ewELFN-xirLH<wWC);BCwqn+J;qRjHhYQS#)(vh;c
z6drQH9^JB3l{<U<gb80E!n4O8aY=tp<N%_}y*jZ>jdS+q-z94Sd*xkGeF*V=`i5oH
zXJ7tZvJ|jS-h~?@he+<x>zAn-x5u~V;6j9_$LE{GZW1L-gzo;_*~`_Nh3<YoVM0`>
zaP9XwzWdLdiUcM`|CUoL)b$DXZ}~dOTEO3=PS+7l6Vs`qe!-{u*DKYv>7zdXA8PTQ
zi4si5{KRp+Z>6fao?lU1Lr3k${IjFa)`8gin9r=c_y`amIp+Jv@evtM2*JcsZyZaO
zLJfNL?W<JrS-lcI$0UzW6pNnH4Xf1g+EcNQLPW2pVjl$xlW(^N0(t)_pH&+UrA`!a
zImmB=f~G)kTCJ9y`P-n#F@7~f{A#-H-lQ%F_>F|=fz>RKx=atytgNvNkvhx>^ed0C
z#xf&Fm~X6v3e${$@Dz6#A`Wy<po^Q;X!oAHq=<|p{zJn=&1MGrN6l)OH#4v%f=bz$
z0VcYS8%N;6vlaxo)@Ic&S+gKWm?;J!!?qw`ia}f!h_D60=&Se^Fl8XsTo9CBDQoLs
zRJ1VA$DdLcy9)#BpHPvpFu*@=HB9)P4)nwpHO<pOVvLn6&ZmRQas3;x0iy7}#z4Q>
zq850K`Ra)KHA;2<3746aPAv`!o(c55Yt*;G#Q~qI$jEaNBlzD3iB&;TZaeP_jz;i?
z_S{<atHSaXL2{yTjOZCc9}SYXeStzVR|bsWrB9nAKG+;2p3vTARbB_A1>op_Lm)b6
z4$h7GLm*|F19nV_Cj#-r=HUD%g2)qvU_9~hz-Dzzp$?A+Hmh5bWc9}b+|v9Xo`g%J
z)&_kNPY3$ur`5K)wSmo_JfTKw1N-GIkQ%KGGA4&m1@X<b0dXDGNdC&L4MsgpjiguM
zIW<c2{?;IQiQI^jNM6pDSwX>{g2Iwng<Smdqnqx$>y9aR-8AjiD{lJX)E`W~<Bn-}
zc>1Mh)Gr3)0uCgaCx0|A7w29d<gRYxYNKzg=im>qtdObA`oNyZ38Xgb14hdBDH&va
zkdAJ;<*DRy!%<w-e@7&j@*P3$$!FES6xMa*<w`3%0y~9%xoKrbz^rT}S2opj1jS!B
zM&+r<70STq07Xlo)g8g8_~nL)mv;oUU+v#6fy})u8-s#3P{cDFbAHpEdPYt?pWYbQ
zZIDBy&6|k4=$=U+bpo5Ut0ExsHwCO+NhETG3SXe=h0m*toYw=J;UU8Fx>!e67l%sh
zcIlqy)i<23IHDm6RdNG=P2i!5oAov8RHd^yuqS3iglBWWUJHB{9^!e6UbRluI$MH-
z@l7GZvqgN9lQw~bYq#$6f*R{~2Z?CwCPa9;0~XE4;|P=4g&h>^)Hl4KYSVuX*Z?FE
zF<ByFTaefhMFbH414qLqAPwCX*faKl)OTCJRJZsa5dYg2WOmqy5Q2$_?Quj{3ia3?
zM}#FwL~NIc_*ZPh6*Rkpg7*SF<wf<K^zNX@H%azvvB{nwF*>pdklKKwj0QyR9!Vjh
z19QF1UOjld8td#05*6Y+LWE~;z*?vDgxn1yz2z<IRgJSRPFN6yDhW%L;JN)pddrRL
z)kLQ!NR(SSVw0X=Y^AXYx4W=SL|^y^Z1Q%T(jmh0wxo2~$Z)pU<Q;wQAJiD<ogh(V
z<%mt*32MiiJptx!mv{B<Kd8y>yLlc-pzjLLPq5n+>`xC0{;F$VQa7jf2dq?z-L4S3
zeGnuLM0NvWH*mBu9f+nr2r|+C5Fl;(Ah_saV>cjn`yd#8z}ig+#%>?RcC!@f@nLK?
zOA@<%D0Vw6LB$sghl7H<3qyVT2KCXIhl3*5Sgu4YcSPU%vMO_q1PL?hE`o@_BLNo=
z@tG!&Iv&+8ysWBAkLG#AU`K`LJi`O}I7n3L3GHgAzT}T8830EcWpYQ1d0H{n^3up-
zST%E|cfP)^Lk-Nx=o3mbk}ENBbu3^c=Nr-3uvgFhqY8uG*v{Plg2-O6vuutj5gY!U
zhkT2Aoi2TdD*VqMX%eKU8;1e@zl+VI>SBcxx~5&Z&WYH+O3cQL6XIW<kx74eQvb4D
zWt@|7?%=i-<eZe;5f~m)-Y5FSc6Gk<Nsuttkx&^Ki+vKXr7z-PD0XUL2P~)Z8j*q6
zsQ`_X8ZrDS`czNuP+8~GAQAQaT&4ogrvcwuMO9`)(r5bK4yycFkT73|@hZ7W;In|Q
z!y-9+X?9w7AjdzQZ<gF6a5|{0>i>P*^vZN<Mp$rvSXgqsrwiXL8mOH=sjG`;gdAfo
z4tu3I?94E6U#LqrtI>MRpH!+2936ziQ%p58JTKaH55$%;LsFL{8XyikGrZuwFzR}R
zU>x?|(009+LXGYXZP#l_;;{FIIP4;ESngkWFf4e8YCgz1)@7Zl;j9Nk>$K;H)6Nd{
zw3pTS`gEsCmCg>W>+%TEvqRic^8Y#Fx^qI@vgvu134jrf{1OQBoDeH8@P!#PH`KSh
zqQ<*(Lpw@@YRL2ie8m704XzJ$*DGq2TOZmk1u9JSA#O3jFyXTELhZb&Cc5)NJK#FU
z`0Tt8|KdU?B;m93LtXc(y40JWf1Nn${E*jOgSD<orxu0<i$eXztLkgT3&lt>M!!mo
z)EFin4)uuFRCOIcBm3}x7B<HA0aD$@*gin)(->axu(gj6jD4D7`&bHfXo~G)Nn)QS
zvCkg9#wp_7mK9;aW7uaimy!MEm7<}#egpTAov~516`r*sEIQBR7w%kPphxvLsp0OU
zaU-Gff=8v162088!q_j==f1AK=B*6vco`~8D?_=FNXDn<iXB#k`u^9|gYK$4S44(u
zieaL?t3y4iOWo+L4sDp6Ys|Ac<SYxhVC!m@!NY>Jp?<bYeY^OHkWXdA^RE`AJ{2a`
z7|$P9$Is|vCLU11r$T#zGmw`&6|(70oF0f$p9;e@R;fZTN^OaiYAMveC042>iBelo
d>W!(}?wEGhv{74o`&`VNR!HX4yEm)ge*s3Rg7N?W

delta 45425
zcmZU6d4Lo}((iP2byanB_e^(9A48u547c<Eaw;=`f-B;Rx2wA=p1b;ed%EuRp6+lt
z;2^?)n1F%^B8Oap&>*)UrywBrIS7K>Hwx(Zevz3q#rpp1h>G}S<P{kinN|JS@+N)X
zZPIt3YoIdFJy89`bKn8@gzrPSng={f$M~kME--b=Q!npCqukU}o*z8^FP=6PEzi=<
zy7J!1eSE>gN^}3yMr-Q|o^=^9^I22X@{~MFz2IWAZq=U4UT|qKGhlj%s}Q@WkxjaZ
zY}M6#n(MeM^@@viZL2+#z2ee}q>u|bS6ua4*d%nWxZ3xWI(T@^#kP>nHJ28WLJDVF
zDVv1OHCNNy%`t9X5XgSHr`l=nxU&6}x`NzL>ZjCeB9+`ErL^g0Zgg=a)lw^2vkuy(
zY^9=Qq>u`oN~O4yO+u$q>E6d2Ds()STE$8_YQwTsj*bU9RZ4NW)bT*4O6mEuS?%HF
zXqGxEcetZAQpt`|w0tS0L1~mykhV!EjZ&I*GG~Z_bW0t}Cf=^iDjln6Q7NQDXRH#-
z+9Y(wDxDrMr>Ul*qW?Zr^5*3#I%`dpf)5oVW&X}oRo-*c*n)EHh1Sy)g*PZM(Kpi+
ziz5>WsA)>QxH%EUgLYZkOhuW?dUw&@ufQ*piX=W7V5Z`;QCvWosaU*c=_ycVDv6|7
zAcPG<NzGN<X2|r?b7PR#LLFu)YAdtQ^w}&mAI#Z`dfR_9fi_1`Z*TD5Tr}s$ih7@U
z$%RV8&QF!R*I9K}?PBOt#fX>_r~)n;u1gix?IG<QR(gk~wOOht2CoAi!RV!m*Kd<3
zW~ovTH2=*N@o=T0#N+?V{^tdwC!2GJ)-nr*PfAmbS1SI9O+tC4QdG~pg)5^Ps}<(E
zQ)~IuYP-=~ih@R4Z8sW7K&-Z#9wZ=EQ`1umgEWXt+{2rUNYP}gm1IwIrou~s!UiQb
z`c5tDD&OD~<3`JDP<+J_$c<t)DD^wqB-gsVv$-L_K`{EiQF3YzZKGEHjRT?r<Qv7;
zP->xpL6+QNlK}ZfDQ#tbgrN;%QL)QPE^x0lL+O6m0r7CY93_wf$YsSUksvfbE-Ou%
zn(v6}XqI+eQGQa?cojQaZhXk@f53>cMZL8rD!{jUO#{ev#VbahOVI#wT?t3|Py>mf
zc3p}6grR1c1}xLiZuypWLs4rLk8DfMgWeB{W<ktri)ohUM@3uiGBdnVn0o!)N`rW)
zn5`M$jkI$qIvNEmG0Z{2l>Y8|Nm(Bqkp116`ev;ddg#ExZnp9n<63u@VxXM|yXE`=
ziIy4cu4@?sNQ2!LcLK1+0McN0{f6df1!G&WwBhc&1-W_;YB5)ExZ5ZagIl4&J(6{O
zNSoMxq+2!+n7|t8mctq(utvHutap%AH0ZR^Ze^TXjjwi%oKRMewSHJzPyv=`U<g2e
zv|BbXNa&Atha<d!L85_2yQAaWqJfFQ8+eRceb+4-Sn{AZ7DJIYuw<cu-*Hm|mvK`t
zOD4FLWW2PP{q7O1QyB>1UlavBgJ-@VZ(5MBX@Wb%R~yuUrpg3&JYl{e>ICuww*L|B
z&9V<12$}{TxP4-VLIn^XxT6guA}s<RxEnP#uhQUC6m-vw+>}SPf4RzLI2bewX1IN#
z!yyEW8SZ*wQh)@;40q!ue7x}4JsbT!z#DG|0-Ce!p#l<`v+bb*5}LE?h6=Ckd@)pd
zfPgLY9UC+ZmHGBi!BZg3w}%QyAkC+tvXI=M+tL=h^LDw}iO01C!NqRFG9N+p+}sVi
z+3Y8@N3%=qt_BxaOYNZo5?D)Vs64=R@Nk8j-TG_o!SWThIc~*;imkAF1|*k~Jp&RD
zE2w7%sT>1cyxyH#^=r*g%GWy})V=H7KH=-!ynENX6Fd@tvDCfm-Puxe1NDuY$Sv-i
z_ergnt9*+CLLI!t?c=ckNx_mW?zC`GAh{M?)C>WFM&0Sojp(DbbamP3fKU(bbS$AB
z-sw*8l@*xO!#mxr+n7Vpx*n{o``mfQ+^qH~?e*Y3w<k=k>)|Wwem6^>)$ea4R@D7&
zh0kSrh9=nWuHV3Xn2Q4cpqu%h(H<#2=vERm8X-iX&_Q=PV}5`E4I1QOH|zI|HaT<H
zt<;lJf}Kp6J-HBUJK|<Np4INj9C0i4r4R)>N8BZi%-?e%RQnq@oAs>rLh(0_Q54;L
zLq_eQdch@}a_7Ct+CQi5v`)D_F<vdccAj=CO<3_+{k}$Gy#&o?kOw3%PSXtPf`VK$
zL(jTd_48WS;<Ijr2ZF?f&{=oWW;|{J4f2AUU3gx5v-pBrY0PZ~m$RESH!q>DAcdNJ
z=gz(NJMCpx<~z5-#|5z=_8pCjC%F`=cFoP&yrA{TTyrbD%OFHmyGC7xK@1X;=Z2fj
zc|m(HbHg!<BDEW2)&azgkisD7pR50(cF2|KuPV)?SrnS}S8r)atwd5-5C*Z#|7v?O
zgH)xp6rxycklMDLIa1gTuRk;w`-2v76%SSGYG^=esEQh{q-m;J+DJ9;J$COOwG{;;
zRYWUjLwF(h^HD7EC#_q{QL3U-0mMYhj#7<)O`>r|slkxhiL2n@X!iP_wA)*bc2u|v
zR}Ha7s=|e<aN*B$6`1l4yYMIN_buO1#RwGZg8Gh{6l*j5Axe2i#oBy7R{=Giz4mAA
z!S3T#>7!MJ=HGZ#h6o^G%6PS;xwMn!-*~lU)?B5b#vV(XqvowvUGYz}VpjdQCz5OR
z7p;lAV2+CT^i~w&q1w-7zx$ikuH{@+u0~)2b*}0a9vCE0=c<S-+j12=oX^(%O>5tB
zzFm6{cS-YAqmUZ{5-Ri6Xv}QGRZ#ndti{V(+w4L|g+}i}72cAX+{0_XP>n>*R$K)D
zi&ZxCWvz8~v7<xvU94hXBy_00i&c0&VHpPJGL@ZvS!-9m%x*G|Lf&SX>JzOD5)jMO
zM#9^G1jI5GLw6P}YaSZAt5nwK@7nD0RSpIPRjX7PIzR{*t5g}lg9OGZ6;b4PH<}$G
z)n+v>m%H~L+BjEeGmWAV<PJ4z?61_^^?z!GuIyKKbAt`EuT;7Cg9O@FG;(@yB|O}z
zvfKZy-BrHRHb~=pft|KNAi0z!+65#ac2c{n!Bj)RX#az1Zu!5pwXW<zRq^uX0~=Zg
zRRn0%njoQdkP0s4N}vv_?34eiwaOk=6%iF^e8e4ALn6=x$)y^WnBBMzdf=$atXH%<
z%8ok5QV$$eeInA*cn=&^Gfic&)B{J=7Ps&bsZj?US6THdTHEsD4g@Xj$L&sp5G+5g
zHY$}6)B(rUHn*D7s1r4EEvHrHepQ>^^|XVbakh{9e-Z-5X?ym81jcEaeKWlrL$|bA
zRT+>w^QtyOt-wzat7$v}t#!JKBG6iDHQIOKDPpx+H9Ei}Vl`s$SnVfO?e7t>n&d&R
zFRI03HOWG(*3Uz++Ws`R0e)?*M~THZ<%$Mqj~A4Ju&tozb*;xMW{<|B*R>wZo^7H9
zyq5ZfhfNrveO3B}qvVCs7ap$&o;Ae_6Ta{uc;=e{O))KXn<qDMq?UA*Z}Ui>12(#3
zn@0|QkO0}{vH04D3Y!4g<|%1xP7x*hEOnQM{qUAHwS1R@;RD7l2g3)9T^`FGMLuBc
z@-%E@E;e|*{g!&lllyv<)>$n-<$(Cnfu}rm<H!$?Q=W{7U^K-KkW-#)D|0!8L7Eb<
z)bBmH-;C9|D&^lhAOV1U?~(2RQULkhQ#X<V0Quh2rmcBV)FvOD>tTD})h?CQIvDxD
zsP)L*o~Gmjqt;XZRyi8;fl=#e-_fkqxFH3WTAee;Ykl2atI=LkssI?(n$PaQ0$@~Y
zh4$bq07kWzE;e_Y93yCH(=}ygZo~W9W1b59v|)mPnXdUnE<sa*fSInv>>dsRX1azR
z7K1a0!8u)PFjEsr0f^HM7b+iVYAN5SNfsQ&3}VryOjAP01!#Oz*5h9<KmVt{u`dRA
z3)t)_npO(FSSBC^oH?4@nSn&nbEs&(GsCiOsS7l*Gov-0sJcp67#$0=x)DYeEzso7
z48lNKpds9T+Y9%KdAU`~Ta>FmO&g_#wrbd!y+wVclY8B%v9&X`QDr-AY;b|S)5Zn~
z?46p$Q%<A<?44SJhUVQI0uT3SY|JdJXZaonf)X!#90+o@do)XIa&+!&_h?8%3>0Rd
zatAb4JX?FM?0|zoe(ivRL9X|JW{K|Bx$8ZkAr}1wHv>l1Xzc6R+TG<f4ul&JH4X%=
zg*BR7gmmtSYcwoElPEo))8^{DmV052_JLA%-T^^W0KRN$NCD)$-P9ma@_7w0>R&hp
zWG`#1=REDNWtSZYo?&nx$QNJMM0ybA@(hDkT;Ck5a}12n%G`JJv?_PkN?i%_(XVso
zTd7CH8UPaIR_a&-Xe9y($5*Mh{FNC*K7q(V-XJ(^Wlk#$R_YHwVh$0NM0EIe?r2UM
zs+7I0%i*LeI_!R1ud5@a4Bpo3x||&L+d8^@F)fZd<$NaOW__wHb(KwUFbvo|L6<vO
z2mxb)9u-axBrqoE2>3S&47l6rxv5LEO|G)(4u%(YOn2-c?>k+W!&>Lwce;*Y{gD_q
z@V>Lz+-2I#ve^y<`QF(M1o__Cy2T@Xm`=WTw%)WkpQpM4*E?4in_&>Bz+7F<PLR-?
ztIOF55}I>$dv@vyJnllMB5%?Y1jf!n#|A%aSm@Y5Zg-(m4RX5+sT!~4V|K#9?9uZE
z8Ls%%0Gr+1h~(~Ash!k9dvqgVeoA4GLG$#Go-13Y-R>$qgtp|J4mNNP=`sug3EV?E
z*46i^i4B@C$MxKl_1Z*N>2XJkCgXA4n=e5q@;R=DEOQ(+szH&@DV_amqc*<ulr95r
zaG`WcPx9n62|?+U-n@lKZ5TwJ(^-!%w4tTvoRVn1ozrEG2SQv58~0H(&JCJxwR+CA
zNqgJfw$^TUu%T6}*AxB*B(!R2@U0WILeo|nSm77BnTzQ~Y|vRxYQa`*n5z}ocFWKV
zt2E?VZ}1sbX<)5i9L7cxnX1J`-f|<ie4EzEv=$@FMF~*^)M)1=hEl=~pVS($(gT`S
z43e)5^bjqx#DF1N(NLgK#8QJjazNWwyws3;WN;z1l%(E(xsU?6%*g%Xpf=Q1yv$H|
zt%%L}5L<|3I2?es!N?nuyL?FNpoBIU*s?F9LU=}Gqrp0Vtu1f3(U7}!aG|}?fYTW%
zq_8#q(ooJDEPX_)uE0;RV@IL`f?pc&l32}vhQ5Yi@p;2deu6W$SE7Bl80xLGm~qaw
zN;leJtDzR(%tCFq8EV6uS-}3vP#fLM0@n75pYhPmJATGOAMX4a80OwCLv3&~7+lqE
zLv4LC3!Z1s&kTbj*=wjx9I1**1d{4LLv8BtD&3gr`wg}6%`D8|13xni5zxV(Ng<v&
z^k4XuZiFW_KQkZB_OPLr5PXH*iU<O}Hq`nz7l|eP$j|T#5zGG!ER3|r&)OnlsmFd+
zqbTO>&G0*Tznw5D)V6g+f`^VfX{eoUW})Lw86te)wn7RWciK>IzgY_XcIM{hhZOql
z?9UX@Z|4k@I9ZHD%q`DlL%C+K(qr1B3j7q)2kA1DdfCVn%b^IDp<OoWU#lC6iklC`
zD+DHnqT&`q@v5PwZ)TxJ-x+G=W)`r&r*YAaPZ~h~U?_vVDtq9#)}{i#Z6hc*^Mhjq
zstw8dgT3~Aa0?@TG}NqwcS|E`oiV^!Fybd?@NgEe`+Dm}B4?pl`~A_YwzwG#?b_d4
zH#oT%+I4{UrXodGzUEci*C~pgtn{j7H?vUWAg|iRypz`($W`pm-)cQFRbH`-p?fLQ
zROLl3;sH1sq;%f&=Do$f`c}K&deiF(a>vJ0I>Wq5hC99zk<0<j6Q3TCfEeaYrOjd#
zgG7y`4rl*4p*2Vk_bNQ5BPL{qlMDi2kf5sBvJ+bUbhTH6FvKJ-$<*gEXq*x3#}it^
z^a!uQ!*R$^4~-z1mRtr^8p+B}YNeTx4h~gmB*}C~m5{SxUSz4>IH}!Pz`UM9UL~HV
z8O;u!)UxT(UWI30Jzzp}v=`aHdx4Imi=~cX%};6frN=ljRFg3zgQOB<K#gT@pVA&o
zkM&9iEZq87lBwV_sL4A_JFWFgzvJLgP2M4yaxR0Kyvrt^*1D$O^~&rdaw(8`mt@*=
z8H|H*%zZ}dm>y?$AaW&;8AmdAa2ZUv@$B(4TKCL&ufo$8Fp~BM<4J~E1nHEC-n^-7
z$r-fBM6V~xTZAW5Cb9gpXpu=?g>NK1U_x_}7b|%Q(2)nBGm0n9YK_w$c;zYrCS*P!
z8Jb=^H!_)xKdW^}PxdN2NkmM@OeUGzxeQw5Lw4z`R+j$ItMI4+GSng;l1yhVgBF>>
z?mMTI7f-QU1gQ?lOd*+HAvW?_+DG2J!(KMyoc3s=kGw_!f)=;x#g1mSSDEKk&66%u
z2R+D(HH-6Dlk?h%c5}RHa~=wdN5K5p3m-_qvEabIxy1RNqGB&C{GWMqJuYb1l=9EK
zGAsrg9rBr1hQ%P!I-hyvHU=a>KJ#K5a~!@8Ab7gg%U-#xeOtEH!Jw_sS_gxoueDxF
zMD@@C##(Qzi0`Jn)QB6r?ENcR&$0~;1nq=2I1p6O2Cv-4KnD;Tyx7J(%B=vk$;+Bt
z)gJ4%$$@YKVw2ZL?dO51v?^@!26@V!NUnsG{c?)Tyok)SgI=Y^n_GTWTk3umzs2Sm
zPk?jKF@<8agI-H)p79ho2ff0_6AWV8gWmczaIbWtP7GvrFn|wv)jygm3(&)+r42Om
zJ~wlRu4~KnMgvWr5Ou4#@}Z43m3K|moa{vxo3e|Ems_RiAE<4|m<U>^N5wNV-B?rY
zaT5o|ykn|e&1sZWFsYBH<=)Zt7Ve5^ro34IE^08%l#K}zO4CevybTfo$22qXgg^z!
zw^h^3<m0?XBmfSIo@RFHg}fBZ6)fCu0PoSq%pnxPo9HrawyAt#s`2Zt;#?1(uDX5?
zhG<qiMzhW~<v;@oqh_0OuL}}J%{E08M_6dq*=F%4rf61Th*S4Dro5;iS^T2H$83&Y
z4>z4_Vs)oW40X@Y5A#giOrT>l6C+Q{naUEAo%ZX!EAZ1cjRs%NF^vXa&Xhe4HJFw&
zWsie|X*sk0k~-7u3jqrq(>RNpw#bxsC`b`iP$>`eDGU{NDC)SdbTL`Vx1S~zx!TO_
z59mu=tybeI5FgWE!?M+;E`~TrE@l;)!zjh<LyFnVyJF_n73f1<;msy;%tvUj`!FuF
z8dEuK=3WfxhuszUEp`!j0>m2AD-b~fvBm@<rG`MFt~F-(H0nyDkQiT4Fn!omZ{eeZ
zI9qv8_O&U(WG)02aF3WGn6_CMLq|=-ITbWhq$a?=F-1^mv*0t2nec5lNuhs^n<7}Z
zrO;sC64*^r2&PY%YO0Qfi3s?UH`~hRCPG6~eZm|~F3m@secohGMD;QEpEu=M54fBy
z&w4-t=)8%u9`Y?9F=x)377txGi3kNYo;M5I@e_3)dAZ9byECSjS6ns~abyH8P%oSL
z!ZU&d>SYt2QJ_-N;j&q;yKHM3FNnD>oAEpOw1YfxXxd#iyLK}NQK$QnST^&R&lUe(
zDenEuA71?Z(=WgH=RXyH-S@5HZpDB3^WR=xP^AB_tEATCXDV*h53keLrwqg_xgSo)
zFP#pt*sywf@3#GXY6otCc!Y}d_o)w|Q4J~VwmbuT>TH+U1nuW1pEHPAalP3ygM9Kp
z08CVLkS`>%VIWb_K|U-aR8f$q=pbKQI5Hx6MF;s3-FZbNhblVA*X<57%gX^`6&n}V
zTRmIlQ^b*ypLbK0FDx=<AW=@04_-u+L)}#6EAAz#!+i)Ew8~fi9$5}~72cp#zF*vJ
zPN&_spSo^Du2n*x;p#lXCw&CC7;qzeGBXPj=8W(aid;2F6g<M$u!MpoK!AFi6{Ylk
z<!?I(v_8G<lMWCvKzQ3HZ)$-g9Uo%YWj=Ikz|!XV^4`krO6f~Ix6Jd&B_n{&Ti{bZ
zMd!UoQ9(fVp5VoYxQe?mSJnu#?G5z-y>dRa4X?ToL%kOI)L-(R6dd&ABA+_gh30Yt
z3;x5WYy)<G)5eBR=e#KsOLR~BFMZfikt5*h6f$k`!M)MY5F7w*^{KD9%r9wf1!!#S
z^0D2`^ett(?1lgrO}Wc%N|0!XUA{tb1py=)VwVq*FCE_nsGaxv*f-7fcF*ngDZ)>I
z%h_^q2ML|MJ}mCk?;z3ddwuDi!dAQA_xdt-^L{4*+3$OOJ?=6`QZ_w6{eI4u`%eo!
z?0M>(V=Z<3IiJj>LkcCI^Tou?6ObtRoDVloM9DOT&-t1@!hH~)q8y9kHhb8trDZZe
z3Riu(i>>quSD&j+F?5D|)hF-SKnlfN^~u{DAh{OK?nE)TPJ*XNaU~5;WieNMsh;L<
zc`0zB*L`eD8~w>X*PTM>%<Z~Q<}U+04Rzfo^Oqn|$aNp`m!c4aHXs{6EbBsn4b|nk
zugOE^aGELsS~vUWhTf`=a6Q@IFQ*E)D5bw&P8E=-N`HS{|57TrzaRZ8O7WnS{{D>c
z1rSCl^@vm4-P}rnYk=B+c<$A9`d7-6!<|CtGR|<noJ|lyA;bN0Hi1MT!~K{|q7X_Q
z5BH~f$*NH5n5r_|pT37*%L&kpf{|=iNByxbBb_oRWjxX;gHpyL{W30q3d$JiM_lj$
zovY(&+hl*<GJmdnC%u8YV6q>9{C{A7K23tD?C+iRzS*gMx$c4qtf_vPHv|c+sea@Q
z`J$9hgKQ>iSf-C{In&XhK|j;)6}}HL(3$DSaXPjdC<gVJ!%mjz<(=o)H2@PenB$kD
z3M3Hb_(S4c2qX~Z_z?-xv41{MbJ=s{db`eZ9R%`Pa~%X4mvjAcTtbC({1}&AIRZxA
ze72)pzoUG<gFq|ed<TKz>G}SUSPSy`pquZ<)ZI<fBcBXj>d!sWMSt8?zSIGs<AtSm
zS3n9NOZ_sW1qm~jQbi`vnpj|I>-~9e=1zCj-*YuyPdz~nt^f}1OTY4!U!~hEI%u(_
z;=J6)cj$k0Rc!GiYe61PJVcvr^&>;!a8S@Tzxrey;C8>V8-O7j4-QkZ>U5~vcK8v!
zI2_>a^dnexIKbWIR|6GhGqgehjhTIZHmked{JDL8MdY!;1=2o$fe0T!LTR60h7TYy
z$oKhW_&_9IRrmR2_#ip7s_ye6eCS8*T|gtE#-Hol14mZR*4SeWY|i(Jzy&0Vs`1PC
z2PBHB@msI*`9!4H^VIkYAH12xl^%YD_RA;<l|JHU@86|&E<NHDL<Su3%LG4!pmW5J
z1pm9jJgg`u{5k(G^pvaOggqPz6dIK$?BM_sASe8CGXWAHC;SKl^06F%Gzg>^H^(Sg
zBwCnz!e9R>EC_WhUe+^JE}rOv97gk5ztS}RwyU_u-(G%^O}$%xw+tMyZNPIFan>H#
zAYsH=e@LthAYsH=KUN0Xvlh^}zTjv5dg_mLz2HF5u)g3x(6GMX4~YXX=m6q^9|vG#
z=<vD#o>2S2uMEl+-J=&N75HgeLeB69r#Z+O{$S4zr~&2&njI9>gG5mOgFi7SAcA^g
z@Sy%jzYOY$BZB%`zsNyyEfLh$`Wuw<cC3(M=+;_)*C%A#a!r)?lV1knQVMPPlfMB^
zzS>~0`6qwZU*D_<SKl}A-$lYP_YE}Q89`eSgRgI(YsG(QVrSJaAh!duNMy+S2mad%
zWXSsm8r*$zk;sq_2#BP-jgJiZfI!KA6^RV_fIwHVBbM-;kRl&=GrrhvycW2r6~#EK
z45+`h$1|!kG<WQmdfHV!G*H)nbe(x<K;FVE;Fn2;1`_s2qJ?H?03&GxHnARfF&4;s
zH+M&GJ)}ffz!Nf8A=>irqwdiGrMST-tn1fWlAXV7SnTZw^bu)r#c2s-&|RYgm>N%U
z6%3Ry?5+p(XVPN=GKUFA0GTl)^D8a`YAjpxp#DU9Y(S=5aW+j{lEDRH6b%dCVdW3$
zU5ejvaCml*WG<227<E$uc^~D*J*2;+6if+t!u<9iKlz)=(vRv-Wu^w?4NEYAKQ(}%
zKb7jn5BjFDagXZLGt&YxB?u;jrjbxzAp~+d``u%D|4!2b3ZF#KBul50kRL`M+cq<h
zw=m!`eWu$(XRk8@NT<GtGI)k;7OVd&{eRQ50y3QnCe&vIaB|&~%RpleoBk`kS7wgg
z7|3uzW=;Un#sIQ|r?}>^@Z<VxnRx-3PX!Y~^8z@~IwFM7WI49*as8X(oZUUhQb8z3
zP4;a73mNWr><i?5kX!nMeq0Og3*a8%FX0G+v^*RLuuq=W?`v})AY%$}Vcda$SG*Vj
z5+xi6<QMR(l~BUcbS$8p3gp^8qwjN7;I~Ku;0Y9u1!NKcBovPYWD)=*dhS>td<y=8
zZt@cY<J!`W2h@`Rad}Ddp!Y3q(r}+DS-8A(B0!gyXblKb8=MU&J>o5k*_+Sl9i9at
zLV7%c5oZHIvABT**x7(w+(2T|pAE>xjYz(@oejvvO>$^)I~%~_b{8)V5Elci>GS$8
z$}ZZIEy&l7ivbxqf<(C&12U8V$(7(N2hv*^L0SZ=b2FaTE44n=`EtU73+GjxUxz`i
zzdBz=pLhz4>U<e}f`skW`7-(>QbeEC`G`KJP#_(o)nRO|`VaavSJ_yn6bhur=F4y$
zLMUZyepKu^L86qg`Pg&PeVibL$>Z|HIX?(a$#Z^?&>WX9&-p<@b6mcC&L5=UcM?=_
z&d-+rS=Y)YIVMmDJjtmjg}{^Y<!uEh0%%e`j`{D!+(MpnN`Brvru;?kWlhPKC(cL~
zVkYM+^~J#pNI-xV$5kLPB&Oygitdi7gTx(8;i-So?@CY4mj@<bLS}kC`b5Zpn!)^k
zh0Kh6>DZ7*BW^xs&OIClhRtGs`Kx|!dRD%4TF93{W)}4eh6l<**Un*k|Ek}eo|7*R
zg205#oP2Cg1P-b{mvwzfzqfd9zI0BgDrDy7BWC@u5DFp8()_#;xfw6%lfA)x`AD?%
zLXU*_EX`+6zoOrpJ&-Ra8@Q<Afqbuse?h|11BCTB*TKV@e75fu{fW{VM~6pa`CgGu
z35jSdAL*28xDpfubB^Y-=U&xElpVFZ4qVuN)b2WvfIe!EQIIJ2D7D3d90Jtwe0J-9
z^oL51%SHt-&5h&vNq#$=NG^rD)8ubKqXAFlv-$r)p5v5LF3pWo`Et(zAz+-!mv=)!
z0^<~o+MyKSg?L<)pL@AN&v%tya6ouq<bd$NC_f}N_)r4Kg?u<=en&AxWB<GS+={+>
z(pC1I146UlyL_KmM<E4EzRNFZ#W#f@0rFk`t?jsL3ehCEp3my_*E?sg=gT}GxX`(t
zFY|yPp>sVSaq!FBcueftd^VuJ{`YLH(_3^csMhH%x)xMRy|qZR8bXx;tnmPSaoK<Z
z=}<xn-3l5|ARP)wKny65S0O<HVn6{JjbEn>(Vfh}EIm-4RyNpypj$zM9SFJ=G`K+e
zB&Yyla6ux)y+w#_1q~_S-h!oH)3wqe1=3mI5fq0MNM`{OibD!)XAz=HLDkTtm#ILI
zdvr{oOF`9+33Mr_x<Gmh2m`6Q0N#RM2tm4fd_mrf-0(`hgJO*@@D%Wu9gr8c)b|RM
zw0PM8BtSs(`QibI!Tw$W<_q2G1&yZ@*}bppA7v&M$dg(yAvCc7O}<YEf&7p~tMmhz
z4+})@5Slb?J}kig85;vaf_2lFHAEkpp5`Et%a}$;6zBM8#DBz=4$-^R|ENI5OJG9g
zqXH~dSFro^AS0VA$Xi{IOTD3Aas_h*c#Gp0m4LJ+GH|T;P5s;Ag#`+~HAYNmFDyXT
z<wGHa3N0>RO^4}IiWe71H;K$9q!t&zO>PlVAeR@gbHntl#mft1u!1xsXJcM$6jG?t
zssdIsT>ql}ssicakZOd~ssgyUAtpINOWRwJceo(8sap4XiuM-ZBK;(&s}^@)1xmO0
zTdv}}*-sZeNme^jH(9R%n#CG3{rUS36iBxQS=fD`Kwd`ziJ}h_;5rf|U_fG~94Lr&
z<&ig$h#+9afr6qg{PhWo`mv^f{b!QimKBWFwYD`5H1~c5@`5rX0bN5)al(T6g_c$s
z%&QK%;(IN&Vu4<idwR6q%Nwi=8fkMK)uWK=QN@<LuWxvyDk!ce5fdd=1&c-I4kS>k
zf;f~VgF(XJs^BdT@+~@%JS|lfZ2161#Snn@&>-68p8vmT3Mc7_-gqd&D~NJg*)$+g
z($Ju68jvVyXizo{k)mma24&L}Ql}1QuTIi$Z#UclB?E>BWurg_pu>Y`l);n%3FBlj
znD-7E<(g8=-v5^;p3^_jfA6Xo9W)vs5LVSNHOd%NfY%okW-dr!GDx702}+Ye0)32a
zGDw&_#x|KqVe%L<S%5=*Y*6Vc!RhD^q+vctjT`0-GBzmp{2+loHi$jHd<yij!Dtsg
zR`67!j}6Ak&9n5<PQ=pQ59WQ0+8uK7+C^F4e|dEFn-BF3h3^NAMrL2yFGo;CZCX&7
zk?S-?|H)N>pJKm^2Ur-U1$`pZ2@>W`3pN&g4-)oF3*zl2+Ao7d{5vh!YDQ3;MG^x6
z98{(U#RVfSBVxLbg1F2@O%S2}nH3asjwnwBr$qyU=8xry4iZJq3c}3@UG(_upx8M;
zm)1y-wkjdd4$1%mPoX+H2!|+CLCpyYhX7T|lYk`EW>gni(B}l@OFSUCG=hL>bcs4@
zX`cu4z6$30OxLHVq0eas(d|1mN`qxxki}-}Z)MlnmVgVib@nI$3AA-IN@$Z3B{Me$
z*`C?@ec6qU4pn?(P*xm5(Ah{8@6B~k@y$W@$Q=Ft(#?(zL2b5c9OX6MOf}}o(kL~+
zwjkR+M;}wV%~7JNZnLWjAuffgenAr?hL{arBlqsd`bJl1U(i76kZKyEntmPRuc>zi
zf#&<#h6D-7uY)pa3lflD2a&X0OD`zIV5N3Bs9X)I@dXC!W_fSVRehpsY6Y00?;rw%
z%eGM<fp9qpqiCdo#7MgwOkKrDqs$;NXs4xK396m>Y>*tZ(v@JtmN&BibR}4NJ8$|J
zd5miqd+{#C4?h1_R<KCFD+^j|4Dl33TnoxK=0QUD8g&7Zr&JA){c-~q=@VUj`XO%M
zvl3iPnSLReq5uhuexZcei-07h5CRmM!XPn)`-K{bWFV1Z!t@I@e!yHxabJv9(m}a_
zi}fz9vO!KMbU-mE<l}22389ohp$4}}Sc)A7h04l#3=^YiQ56z99uUy13dtY_Bs8l+
zGKc{Q&8m<c#KicS0#p&i+zA4<40mkcCkr7Nis31chKFPj0}@EXLkMCX$1p0gw6{We
z@3SGx^j`(v3Ss5sQEd@-uDMIg^a5A!F^C$u{on#>Oh^WkAOSTdB$KKj$*YE}j=b-Q
z<V((&P+<r2G__d~_1lEp11t1Dxw=fS?FAP#pJ4Y4NRkT4S9n39kO?6;v&l5>>)}<8
zP~Q4bu6Ct9$rYR)!Ub$T@avJuGug+h^oiM-Avs>b1lY`w9PuClHZz0~k5xuh>ybg9
z<od1Ft6VKVag@k{PeO8Of)JEGp|*dR>tJl=SjRQ`qn&eh9qRGZ)m%uvI|C93xlnzv
z?*IveT&P(K{uW?8qCRCC*63}@KXnjje0~~|w|^i5gik|3ai|EAbV8|&xtV5pJsN$>
zL+rM-`j=(P9Sj<M%N;9d^eqp`H+Y}}jOC&B9r@_1N2BjEG5Xk3>kvVIW)D6*g5qcP
z-~$Q8&*}zWJsN!L#NcCZuE%zJonrxwy><53gCu~~*<%kRfY#C2`!%{UZfReH@?K+G
z*XvINzX;*wO?pQ%PW`w!#BSf9x6W?1`vhDdZ4SvL7bK82hp^<*yQ^_(?yVs<c7uLf
z+pUfc_2br%SG+$6A?R!k;jD*Ja!^7??m(U6V_dBEJ|n>zZq#4Tf+Kt#o<n^{NFG;#
zg!+yU!fo8JgEpw$A+~p;-o9+NU4L*<|J`=|K>}iTNN$5bawT|~h8zN&xG%(h`GsDR
z-G}WQpJZ|FGxmja;p{*{XI}_eF#6I#oO<nGh`slPUS59CDVBDd2c2T6{|<)a%WTjA
z#K90E^z)+P=)WT&me{0UC_Ca{&}Q?9Jpkjp>yCtiBD@3%j3c4uw@_LEW?-{<EW~<l
z)_av7b08=Ud@SU%8=Ur@$3o&$KBNPPV<EgM%_nS}GGZq~Y};o2{j!q|2EC$k()I=r
z0>;Tug1;jT4BCsH47F`9#|pNhXF_bwmwM~+GY*6o5NAU2Ww<!si=GL|m*GGH;!Fsy
zRSqE^5U0K9<xnoOMSsIpcG&@;-RNbfNohBFIV8V00wsW44mD|JcH|h?jeZwm-)_}A
zWxor_OC)i=5&bSCGY24{^Bt`*VgO+udOgH?Z^Hn(?i5RJ16~iww*lh{?Le=GGU6pX
zkbt;OQ+P84h;e!waA5AUZTkI6`9Mo9b>ISHpe2_&kiZydCB*kCKmuc+)u@U2COOoE
zrM+S0P0HQB19z?p->|R*&<;&aU><72EoBrtzf=FR0>8wx03UF}EjbfG0&cj4nMff3
zNQ3~xt>`FABwL9=A%IqGsc%^#*(!O^8)3<0t7IYBI?|$K>qx3zf+pa2OSv~bFju}?
z4=NQPY%6GPkGJIc9wdP_-jYiZNQ|xVmL)FE5Xr-k@m8U@aUeNx0OPGTA~KOI4pZLK
z<R2|ckc*gT;T^$|uHuJZc%E(AtB)-ML&Ow#jE0_Q$*UD0Vbeq_CXzfL0XEUXX0|oj
zIcaGhT6rI_5BBM;3O=+9KfmXYL@RryvLpNSJ{42#%7F=>sg}%Vg9Ol23;ApcPC%k^
zQ>}0X51)uc<zUEED<ZBsNETOm^gm`1nleeIO|ukyw4}J_L%oaJwrSl#R02;h(DA6b
zXj#x)RQ4}O;7p_bB~P0~i+HB9Q~UMXE2i7+045-&TQcGR354mEJk10Ngy|MCn{=89
z5~rEdE&DW+Xkq_!OP*#*7EUv#TXdR<w3Fh&g`zoD-ag9}pYAH|{`{X_WRnl*vx0Lh
z93L?ZSPw4V;07^!_Mko{^RXq<s$ilEKc>Pj3L%&_mn9DAm(z1CdBGajX&^M$!pv;J
zfk4e;Eo=0a>3NpCJdLX`#I^7yb$u>_I(@?aRiih|d}7HY2kx;z<`WB>SUQ`AMR4%*
zbD!4eZdYc$rSLQ!aUnI|!g1IIVG<f|0o#9Azm#5J$uCCW9tngNSomVZ9UKY$n`39b
z*1M;3mdw21k_cpS7W{exE(4#uko7*Im!ub3GNXb^9*|i`gAi9FP&S6nB36AwZ<k)=
z;Ls-}77@;!Tn0|{Q+D)--Xrs=B~O0>iWf4US~&grH<y9aTx_wskLv#?vltVEMkdfr
z2rVYpavK+dS6pJT!$<Yoi<dY;J_s!#p$VAeP=X))+{$(SMz61AK6hHl53$d!#!dOv
z`~Z2nH5Pm2xZWkR#*!Ze0T)7REW9d6_xA$|wi;_KwwHv~I!KhLSxZRwav>ahuCrLj
zZ}neh)>-o2J5F&Rw9dl%MtQP;f@^l`E%w2;dU<BOgG9H8*Ao(Q&Je=OLmMpSI-x&Q
zyum>VL1+UZ&BXN|Na1~=?N;vP6Z$Nrc)KOP;{i6rwp)k^KNMpH?-=d1a(A58o4D%l
zby}+sVtc8zDrpwLksh-0zO`7@8GT^zkcBhIM^FgAqf=wicViyS)YzQ{E|hDi)96JF
zektd$#YUdhvzfz|e9aA92pzWYnp=Vkf%@8FHD~o?=4&_%-m|!A!`V2&DB(gF{YNa8
zIHxzt9I<3x4wq>lbi_hlj>Z~p#vnm&u|DVYwwa^$fCLvpM`=LfRwRTl_`k8(+;e(q
z<{JlzM*la2B#Oi6KW4ps9;F?#WFj@6kN#s8cG38-1As94k6Wz!dA(Kfai;}n_#dYh
z*b%}lWNdJU7UEXoTj%xdM#0cRBT9GrHU52?VeFsR^m|$kE7Z83B_?!-6^5Hq6A+0?
z4=cR&ZnG&@fg`DAXRqnaTUHlpJoN(^YRl@vD1YOZNT^g7cDRpTfCh<&BUz8@de2rP
z3pIXDNKE1uMw-h~$XSjoY}d=2huMS)u8l3syHS{1c3p4n3XUzr2VUq)4tSS?wmZ3>
zZs@bs(wT)Czvn_+pv^4I=a<un1lr8PX1AH!8*?QXeZ6r00ppRvd#)GCuNuN#L+N^<
z{CpxvC|xgX-x~=TMNL`SkA-<3hWUZBngYO&g+@|@a49mPZ<r?=ZUuq9>>HLVG)Tzy
z4a=<;NTBu&W9tR~sitU&=+Ewn7!6zZcT{NU=^vI^JIFw#e;D}~etjf`meQ)i%Fx{S
zh=J=P_$ih!Jiq{{3d@gcfdoudxSrVCg9J=f7~Y*C6p)Bes=|$ihTVJtC5G7D4++b3
zm}H?<-UuTdh9!tB21<1pFSWi>-1E8T|MW6zS7h{S1CCfX@f@XAJH}J2Urol-{DwN-
z*I;4g-Ei(yxsi5NfPv-$$5yA!8Vk#17f+$i!ZNG^38Ps!`Yw#7Gi+k;uxfNzeJ3o!
zD#?T1n6M11Bnx5H*f51vbkLfjDfgZ$EY40Q#0{<Vy|7F>;2ErVFD%mzAc6K?*iJj7
zsGTQ6lMY%pCk(B8veO5&^P3!&F#se1G&wA@4j=(EIgFj(SW48TEp1UaZ+Om18e`P(
zqA*7F0cxc*29&lutgH^_mKPhpc2(fFXdgTQ;PSAHi9iByd03wDgGBo*4~JLF_8|su
zpA}(sm24l$gWgKJeIyI*^BHfS>%s`Qi49?8OIXc~X<+=*RRO}bf=1|uunarXe1vWY
zBkZK11rk<l2wPj~tPp{xwlS=JS!acv5B?&o1^EahJs1naHihAQ=#H0Up}9AQwLo)P
z;K9Ry+!ki<mKY8DY_l64Tr~VPyWv5?!fj!B$rB`Cw}lasQ0xd20l>C!{d;98Joe%e
z4SJa=UI?h|VU})Wr2A}l3ZZ@NcBc>;>)XTf%RFhmuiYM&w|haNknQ2*FJvM7x*CT~
z-DSpkAy^uAhS@ufj6|QEP9ZcSc82A_YnpF_cZNga&M-(o><lB46E&er2|L5Z-DM#(
zAIQj^;re%)9e5$2c86J{vC;9V-A*C2Ro?9sLIZwxSYCQd^8vp*EU!a@L?OGwP3`8Q
z%e_>{?r^hS{D=xIiay#OW-}WbU-a4UltQy%ztdhc8}{3?0XnG4{xDW0Q5Cw~yFc9U
zK3Ns}qmui>CBHQ3lR0Tx+zy7>?j}a2&q1dUy4!HjDTKD$2gCA{70^K;2g6usMIrcv
z56A{~Rrm*dxJ1KV^zI=Ffj~`|J=)Z0SzhB5Li_QWu-r^S2!+&y6E-UC$7{j}9p{ph
zOe=^TkHSGTHRkm>>R`~}@KMK5IvhS4w#2bEbbxU*jHpT&>V+Lg!?<rQCW2Sajice_
z5Al=kH0{`rhuK%njLzl9okC0)dOR$5{SZPS$HR>}NmSaf9}jmfH<#0;>@=MpUkc}b
z+1yy6Jax$dq3=sv3d`*`qyTa$EI-Br5+IktS#bal5|&;Hx9%e?^}$jLbM#WU&6DO@
zQ4E6HpTfC6wlvl$eSUI^p<Vt@VYzWk^IiT=VflR<kSOLS^17ly{3zz9aD)40F@9Oh
zPvM5W&F#WtAv&(iz17Ni)KyU#k;`J5=K(4sKCvGKiON()(jt`t5~Wl|kV+Ay1W-z4
zq{A~jdyA(i1wn9Sq~p_Aaqyy&;Lru7%E*&__)?Olfcy2xP2bRY@y~4Y0B@ijo}h+!
zBwh^yiLzgh$aMuI%6>g!uPbQ<G5N3vUsw8ofOi<?)S>``XIMloEO-i}VG+5ofCSR8
z2o@F!Rx*}0B9iw>L<B1tNREggugLRF846ZLMZ^bu$G0`K?5K!z>v#mwQ4txdfCT8M
z2x66))VvvTsbh27+8U*<?AVCRhJ#D&h#|fq1`<kRBZXn}Amx=Z<gMS&m9{r(T-o;>
zCBk~&Q6l&JJ}FJ2j7NsZ>AA9wMkA$cy4?ieq6wzkO#l)Y(<7G14TB`52!dr=-ZK<-
z&qQ0&$3sD&8)n+w01}!r?QQ@G&6#!GkfD`ip6mt?0Gj96Kz?(cV*~lkd3HBI7)bN%
zZYZ|21(Ce1vKxvaxgdh0INlA#)D4S7H?#!-)J1kbfQ0NKyB|OTbrJOg#f-(&bc-Xb
zSHwtm1Od&(jwW@+;)o0#@f4biBZ$5>kzXpN&~bT0`8>j2EHgG%;HL;3@c=N(?P`Gp
z%<_m_*gyhic?1g^t?wWy%7`RCkBHEb7$S6B5s{&zWTEd@Mi4sE%bb#hR|AkmkI>tc
z9dG8MgjErIG2p*M(QB(C>cb*-EQS@@#)z^dLa}3ss{+48Jc1{%cVk3GjUa)xF(RWz
zkg#`SB)SFmQq)Kc9u<8NQNN6cs8RBuw<#i{M#(}{v^hdiBh9S(miAR7Zx8R%m|Lxn
zV!w(Q8PTWpsZV#xsnxX`rq)i|LOg=#PP<D%qNJVFrSzUaeQNIA5%zL7qxn6%?MVVI
zXY<z{JR}62-4VokWJv>@d`9w4%fZzElKblBcmp!zpd4Hv(6<L|OF%;Qplu0ApdPdb
zR|B%7Mh-3z(5!JZ$(|Z}aN#L5YiMxs(7pi;u4579R3zuSle!1LMfczd6pz{60}_hI
z?Ct@H?l~5To|4@|4BkD*BkD=nJ(35#Z|&}pEOgI_y6$OcX=fvOm+kIph+@yyO}U2D
zDi>t;Jk<l;bHTO{k05%%ZWNFx=>jzheJ!yenSUw5-s)krD!mkuClugvwl3c4012H-
z5qzDfioP*jVre%bIGMiG!|=L-HzGKoqs(Cm8S!I;`F~;Dmi^Jj0vA|6M&uj8Ac6HG
zb@d>cw<TmiKlbu3jMqE&i^@3*CZ<QfsJs>jl7yo2bD<ys(JzY6h0=+93Ay2ctkd1b
z1Dyvt2sG;lM&+6U86XUdN{0#(2m_;Vs9iV$s6lMa-A1>vK@I}B<UtMs&BH-adE!#S
z=i#6z!Xk3XCFGK;qGH4KWKV3ks-kjX#3LwHMdiW>5`|So?S-*~>>LhFY`A)W0M2m7
z1oFtk9TUhS50A=)5yC(k9>v0lbiSfC!uBzmw;{^5-ecf&EsFOsxjSw|-7+@HSH;^w
z0CH?p4quRf92=F(B1k}vjbd<2q!q3aT1}f6RX&KS@oLu9^4^=<cCYb(s{%YR{viQ?
ziBWl710(<@M&)$@kQo0Hqp1&~;<^AaX#A^_qVl?c<e&>DMdft?$pX-%D6R{%=7vCE
zN)(^}Zdm;AOHZ?j_ZiJwg0_vI-klPa$AFD^?@o!rr}yEyK$_03-Df=AX1b%oSJ<dL
z`fDUs*eH(v=smMWe1(lFR=g40{20C~KkP9BUj^%J1X|9F%HRMpD0F629+iVcF*Bps
zDB>d`KtMCkVJCVU9ox@|ic~c*p)x0$6qkBHLS;@A$7M4_Yvbjag;8ZGTKgS0J6CSB
z%niKX__wP9OuMGE%~%+ft3e~a%~%+fs{u$f_rhp&DVm#B17dJ@vnZ-AiHg-g@=)@p
zQMnpO7TnF^D6IzcR%;{LkgSL*_2Z3;*((nkt;#@%6%~&#J6A;IrEie1X+<<D-ed#`
z>=jY$M`>m>qCLkdF*DkMfaWTDYJi01Dtl^xgyyQcsnLkG8tcW>=neu?W4&VoZ8+B3
zQv*+dwBDW?Ac3@=rp7OkQpL-5o1%GJqwMbw8@+;?qIjDEyKN8NHpAvS%C<agG|X&{
z%0wu*7;BrONQ5FJfe?Vdj56yHqe14&s7!={3!yK`fl&IAzc{uf${u>eXjHsKR*$$4
z+Cr1z3Cz#Nc<nBlcOc3}KVtkUxIJprqr|`3n5@_tefv@4&a$0$^}s~+cG}eg2`hF+
z<);8aqIx@{Na&IeZ%iic!3DEN(Mx+A2=bwOqCRnp8$w(vF46=b0kJ2Flv#HU0ZaEs
z*_lU;9_9NT2pYxvqw>Z=W9~%vM}uO24iXUi$%=bWy(X4c6V3Z6%Kq}0ad)VO=EWD}
z;G0nWjz-z~$Ba#7M{Q_u0e#f2AV^qu)b`IH0ezI3_wO7655JAFuYP6xqx@S3f|l@a
z9SEx6w^13`HQ^QfmYl#3!VJ{#Oq30J-1sqj#-7AYc$LmjU(gl_B+5M#MaH=sFBjDL
zD4Y9)aYxyCr(9YX&fBfhga>Hnqd~Ek1Id-JFwhmVCge#jMOo`#8~1g)<Umj!<dOqH
zuH=#fL9XNytu1sC--J5hYE)?%@60}a#3*9Be{Ga@14GP4JVrlXjrzp&0|~6F(Nt4e
zBl0m<qb+VR_lRbIkGT<5YNPD#-x#|p@Y9B&e8vr@HObN3ut!`I?r3gMUsIS25{~9Z
zw4@e}hW7BpfTKZCKSbrbWs(KkevIPXvR)V>O)af|EbsN0D_&Oo$lsp+{qx<}_}>~`
z3i`+JK0-ZIwJD92f$a2ejYP%3nDlvI!jyqAxkiCRF#}^*qi~u56+EnrVPyyucl+Dl
zo`1Rc<riQ6!}Fq2c!=i5(>fA$tc=N^08hED95EmPTp7cNfp^e>j1e=K4SmumDIe@W
zP;U%&AgK7kF`0{l3Lpl@;QMN5Np6Od_gLNs?A(*aq0k#K`yx{_s^*9oUy<8_0OAO{
zwjhBx!mceyAdaBgzC~+9Gb(RvZq`%A+pd;l9VM#C*qGcKK?q7?V+dc#1vjILjAMU&
z#;Bhi7n5NLm{1uPlVJ%+sEmu*VM#M0Crw%LjN$4s$*w$@Fm;k$d60mZ6qE4?NYaVH
z=?>CS`R0~3KbChUmiy^h<283^eheSH<pD`^s{TSzeb(v)1WOC;ir^6-7uvN43CM+1
zd;VF>=4A7d7<>K&V|?k7n7l0rE@#Wzf*_%^B!=69OKHeAr|Peau{JLn%br?k*9BbE
zWu;vgkib|OlkZr81jfo376I}LAhC+AjLARPAyVXlR>trLJGk&mr9feAjNSh~#<{Y!
zPAPQfYi&&48iNo@SsRo8uLF`R;s14TdISgz)(tWC%KsX7-?_nopbh?pn9T7&2oM`$
zY5u<hqyvZzF`ObFrbI?_s@3+G(k#ABVW)N*sa(k)jIOS7u*4jI0GE(+03_hH$K<US
zkbv7B!x{K88g9)g_jw?eoA^g#xvTtu147Q?fYW&7EDprvM1m4P4$wrBO@mP4NQ}Mr
zXX9MwBMt^d5l3S3B4u+PMI4DW5ScfSz&H}SwJjgQ&8hv5(GX6w#cwDcvj;Lr6n@Me
z$RMG3tZpDTry$}q!$7`%Cw`-aPdgS+3~}121;r4j?coez0G+1c+!Ld@g{7U3<;`V}
zzGU1TJ|Dwn+yT_yEijg~D>3DIEI0Qh!{w^LZ_&_r0`x03I!K^jiODMyAc1}*hFmu}
zRFH6}S7OE2V{S8yTpTel#ORX^S7Yk6n1?41>bTJTE{5nWj5I?X6Y<;k!59T_IGYC>
z<^33Acf4%e-uXwzDvAnzjL9V(LR?CIr3569e~e-M`!$EaRgk`H(aXkfEBY4I)r*E$
z-y%7HTJVX}w@8L2Ac4@g2nz*W1p$exAbpEUhKU#3iN-ns6Z#f4dJZuvKFTOqxC+v@
z=yz|r=z;=x02xrEw28MXzW=4?fA{=LY}DV4PMyKB8<*zQfFc>(Kpxc?P!w;;rz=RV
z->NnL=0gjbSC!2ChjB;ON(X_K;L4)9hM;LxStM6+r~sj|2um=(D%ApY)`k=*!`U1E
zFur^gzic~bHVttagJ#o^BKe(TXaQwN5dwVC$@GHpkfP?pi|kIO(+1wjZxpG+*vJ1g
z3L6hCs_R$z6#e>U5q0Zoax^VyN{(VD|7ol#8|BzR6LOSe2TjOPMba}v1$K-o!fC{C
z0f7lQhMoDBF{1Mr2ZH9~7^gufsvlDn6shGFd_ImT!dU}-F{A~}$8l`&zm2|S;~WH<
znB$7%t{pN!7*|vxve6)6#JD2-`N`+xT3XP=oR<67|1s9O%BDFObhB@ogF$n0T9JGq
z4m!Y?R)iPgRtXH86MUR|<rU*|SC@|+47%9&agjV_YQfJ5J}#1<^8g8qkBgFNa{yk>
z@z4v*MR|vdSl|B`dz5iO7HaM7ots`^j8Sr5_czKt!F@#@FP)!w_)E?Ei&(3{M$3x*
zMGF4}K5?<Y>@UJ<i`N@K!r}u(;>&hK3DQp^lSs%OD8hm!WI-J)l5c6@1!2g7<gXh;
zmKLsqMLa1+xG?)rU7-)~ArG2g3!tYEK2(J5rvS!~uPKr*o8f(40E6UtY{=3DjhZ5)
zq`$*k@9HgZZAE#Nxt6aR|4@SGix7;_CioUwrY{z;c|(l09WEBhXbfCnT`ZE(7)Y3P
zkt#&H##^WcS5SHE8t?r3OaEZYhZr%|?hPZ71y}50A;X305Xk3TAq0B=`WCA6_eJbq
zZy24k-#a=4{Jm2uHOBX(gIht+0d=E@ef@^fC40lsA*XP|(IKaBgLLSc?JeXKYKvI!
zp+<SjT1SUks<y~0rZ<G3Q(F|s=WlD@LY}W5`*f&rcgueD>Z(I?zF$3=Nq`Jg`qe`w
z;Tc{GhVyHz^iAWrR<AiKG(BIdC&RT{`1E|O9tO~R^tM||OB+)!Z(TgM>P;i%35}_T
zxN$Y^0I4mhN7lx37e*SNH!ocqm!TZkfLj}{Cths;2@BT7v4*dv?#&{v8_ye<`(~MO
zr_%VVIN$5I)hs^Juq&?Yi>vhEOdYiN)C}jb`&Js?wA&p=(wg4#5YNytd*W)hn>Z+E
zFLB=Y!MZG2cPXBG;WJ~RCwmDOdATzN8`fQl%kBmVtxIuq18yuq2@kKvS;uuo_Svhr
zgDiDuh+K`!8`2Ph&eb?>NK-Th65i)(JSaX+LnJ@Qx*8ANh9$-10^ra=*4222j{K}R
zOXKQ#oULDHbj)6NjHB|e$K{;^2%(_saZI^x+&EA_##!ll?EikmjbK?kMZrJD<pP-H
z6Y<BmCAN?txe}Jp56RbNX`J<Ev(_6^JNHl2K~PNBKOti}$iRyJiL|(h4H6Lj6L`_@
zWsZR2D%pq)#y>h&ItaAut8@@(5LPDAZKR1b2rCoq+Vc-DWogNHops-6ly`pJL7*k$
z^+a7YXiUDIkO44Mfbe=kywHwXV8wWYE!$|^)%gtvfljC2a1dz4cq1WmtWW{M8wtG7
z@G!3h`fM2M`i1dm*)Ruz{@QSugFq|Bu!PL9X8DRSEP=mh*{E>{tQha+zWT!WrMv81
z2ZN%xcO48`G2V5opcUg?vf_1GF|u^BJSq3vEyfU6*(3*pR*Xpw2AwQVa_pcLV-ndh
zmyUe1bh11v*JzvZiBdMp!Jxm2ndM;6!SbwxC2jyf2N<&wxaIe{7#27-p2wm)j3J%p
zIS}-6@;nEEu7=M`SR$&)@<Zc!iB@g+jr1(tmt4RO>@aTYw!lH4i{T3r@_s&KfUqD@
zB!X&?Fk(Rh%O^#MSvuQYlu&Mq-@+0*j5vE~r;#cH!ye}pr!7jz7z@(CT9k;ll|zhn
z`->7CI+?%WSUBHZnqXh-G=5vQ)PbOr-K9>2=wx?k!V<ZOEI-*@nrP9Izu=#x8<{H-
z?0372hssts5J5n!a3JW9Vpb&Neg!(PVnqVC^lACY(tXWU33hdt(XMQj0}%qmDhGo8
z@MTp(M&i%`#Hs}TvWEWiD@&I-*Cf~ryNz4R);JLKPcLg62zs}2O+sG8fDRzmB#IlD
zf8`Lk=(!=mcJDS`D%;>d6ar#{15pTw4NgT00kMH9@;ryY$LBXE*q}Ye@5(ki5V+L@
zwoJTcl`tSSC&XPuSRMw%=0s_0^C1p_kJWEYu;zP>hs(A)5D{3h)v+Q1h^<aVB7oRR
z6`{;iR>8;Zw<p-*y+*I{?G8i~5ZfJyC?K{cWXua4Kx|Lo!Y+?Bvq}sndkNNkpHW@D
z+rfwdW4D751IF%z+(bYJ7`qb<O6*BngxDsLE8K5XxylbYAVmN<l#p>=Rw)9=p+rc$
zk_8eVhZ4Ac%kz*~1>fvDnqd157@N8sbuj9oNslJvbr1*v<7h&@jR6uEM-zA(V+qz3
zGzi{kx|UFGByuMX8n=0##&3JF#9_-dr$TYyTuaCR9D2aHmcU+;HUc2A5xABpxsed*
zGh&Es(e(sA$xKO`tdc<Fkq{?J<BuBJt+ffc-s2I#YZEec0}|l138Zcg2-lLtUMQ)Q
z#5c2=`?Zd&;2UFNIT*I3Nmx1{S?BkY02`33vor~?0ZCYj2wPE0k-<vljmn+-#`w$?
zd?SeiTmElBrL@=&V=Ipvm1V<hXfV;3!;*4*f&}!iWK<+kKmvML5=q_5WM?TYy>GFB
z-x^oT-*O-*sr!~~9b`x-DPOMw35d6n$XXvI>sndbd&#^hxrHZ;Bd&t?k_c_^%_y}M
z88?wlKV>}Aa$-^*zJLj+iOHnM(}D!l#3Xij6sNT!V?Jb^P8-jae`p&6CXD&eHU=aK
zCFM#F5(pnAvC<ErWM6Ab`zVQT%j`RCRE0lEB17;5fLoI-Gm}a<elPz6-4SPu@+@c(
z9N{S-XC`I*0TPfilZZcdP!qK#tLC!WGsdpcxsDE*F*hmSPlgP1<|dKu>H{m<SlWVQ
z-j_*+|AY8#bOD(`KB*1N&=w_?Wl1&uG&f}UIpd)UaD*Xv4$wumAs_*|hzy|t3lal%
zQ8K(NDGrv1!4H-`O{z<i;$TVgptm?F50)eg8`vdD+Q5>7Z9{chnN*_jl4ADEc_W(z
zVH-g;TbY!nTaX0U$|O#==!~KbMR2Q=Y}t9E$Fr*ez}F#gp|d(Ezjg`|I;)fNdLKxH
z9jlW~AL3Cfkvvpfoox0X4;3YcLdDg|-uLsV*M=b0CB@Y1dja{$bxAq(@Cc=?OUkJS
zl8f3|(>4_BZH6Y@o}G2k(4N?Ak0m_9SlVolC6EBxY)?Co0NPB`4i_Li_*~D{WZtf%
z_yia&S6h=F{&(RXe2oX!JCjON{;i@$An_Emc=H4#8fhC<{|@X$@fjZY;w1akCF9P_
z_N08%16&AgPa++FtML#5wKK^+y=3&PzcVS{m;slwG1cCq*Anmvj(y3zZ<4I!vN0~W
zFNsf~AQ9lP$ejI2w)L`6k=dV=H}}DX@_w2c__82`V8+2D`|}m!vCP4w+&6;@p@T_m
zdoTkb1ga*<zPVyNo2iivPF&8$8Cnl6gl76W$$o#;xGVE@Ql7?HeDnJ?c@})*6FTUH
zqe=F~Rij(+Q3r{?mXHJz{%%-NZ?&{@NxUe~@;d|n`F4(c2hUF5N;SHe6qm>jT{E<{
z7wz$hN2tifq}<AYgf$nF*vhP>*z#7Y=Jlk~B)-ti4nLyR&)s(2nCL14OSoPLz&~EM
z{Ub=O5EUUJNWfiB;_o9y>l_X>ugcZ?!5Hf<t4h^jP%vMWl3Ryc`S7nw$$v5i35==~
zVgOo1ZY64HO579!0nMQ)Ig~-7^r0y^ltFS?dnn&ZjW`mjbT0t}r|N7#Bjcf5Lhuww
zBU5q-0STm$DU9U-)X;4$ZComEX)5=s%j;4?<5EU_(b8?Hr6;7sF$f4?PDn{t01}uJ
zQnIN*0&_wNP0eqSx22|@l6zA1_HlKdVz&*rsNs~9%(jChsg!(28zeBMq?$FS7o60#
zG_XEm*F4_;TlSHIK&|^xO5TNq3=lp_CB)7eBoIDIVQ0->E^kZZyxhl{x5`yE&%vN}
zo|lrDMF;_7UMeX36-ZJ_VPi!-)Rvlgf$Sj=&|F~m5J+e)uzLt3G#8}o9%@V3h$W(j
z*b1*#>$1c#fzpyo><)q?fR@-D1QI|?sDltNC~7-P`z)2WGsQfncVFzY6n!FqR-bn0
zAMNv$vLU6$Uu8eMs>NBz=lxR!Si)aJ0Jxv0q`w9U+|N_;HUda28lR`48&YD?AO>GF
z)}+++DY0ls9`x3x<f0*2STxq9XwjfxwjK4urj&Ajyhkys^?7?g1wu?JJVISJ*>wfU
zMP+mk64;wk@=iHOtOuJ?#l88lC6VGFXH%;FedcyiYmAF+DTc2Y@5pX*s!A4YOUW+=
z;6K{|yDf!-KKeFUJEC@^*qng(q4FJ$Wi$|W*uxP*fY_0eFYANkO6@zCW9Z||?Jezi
z3b9PLd~cCEbUcL@m$*M_PqXBtm?a%Spt2`zt3U$sq&-VO0`eryl1b!{+QVk;VoJH3
z%9UB(_gxkEEqV@5pm;GQukC<@;>DD_wgVD9cQKW^jGm+X4>73c)JrLOZAWs@RF_in
z+Kyxa=u!&TcJQ7h^dRtE3Wu{Per@NsVQ)zmv~2{n>31o4Z3n{8{Vs)Lqd#z6P&ZO+
zcG&yJ><veU8u3O-X4~5HM!b<iwvE2@-=1buZ3-_Pd7C~{o08vc1Q$BB_6!6G<XW16
zluZJOAyJ!3+$F0@uNhz`TANDt;2{DD$ZS$=>W(}4=DWSf1a6ObZ!7DEi|7)GW?jFu
zbc>KdvHj9=lL!*U_Dds!&M&^TCr|Sl>lO9B-uX2Lf|4??IS@Qin6^Y>2r7VhEseww
z<<8nuQf3ef#=NCvgB%1($_#Q4C@C{2ZHY}0RDduj4Ijuac(teSXjtx*nD+x$>tVS1
zFDt_HFlm{egb<X5rLj=+drIw*xz|`4{{ZtqJ?}@Z3jDP7DEGqB(jPz$dMq7|@*ol<
zMiooP-c1XCKn(5=MyJ(x(!w7|9`wefr9Y4?_=B-&@(1KL+fy3ny)?g;&eja@M%eI#
z7jHSG<>H3tu;jh8T--nc@x8R|I@?nQXL4G^Y0Hvc?TN`w`%xNaveSN)#+jU!Ya0{+
zG&wEfG<?`=S~_ojTEuCzp`VtP-;^w*X*)e_e^U}9o`M$Nlmv;HF+C0cf$uPS3TYzD
zV82g!f0>>E9qI*QLS{x9I~3d`0SRgrgA3}No|TqS8kodQBT9Rm%fPxhtV`Pa>-3zo
z4EG9obTlW8a8KZ1j?85X)4-XVmao|s@*{z{X`EEy%LOP4ZSV<el<{_`|4CZLmSCc+
zPtu4j=fGik@Byzi>Abz^+^ZRH)@`k!n$w%AVXFCBs(JBQ{k}#ZQ900}<{*KxmTHdF
zJ%sUaeVVmu=<SkOpO$y9z=hEIG^QwWhY$j_G0om==zS!!(XJP`oQ--tz=crvO=+f-
zcpuDcvKuJOE5C^v=uR$#%72+=e=G5J&wQDduTY11?Z2d{N%3QtYQHtjc9wX%Wwxee
zkO?k|+nPp@i4_S#n7&`7S^GxbhcjQLW#9`gguY56@I?XzLYSdD(rj8IZ?DV_M~Gfo
z-9bW_#t_0B+?8g9jlJ2-E;)jU3!z<UxMUp0fJE+dPntc|*xR=L9;cn?o$Wo;P75eV
z$5+Q{(s`%SY<^?!Css`w7u~2wBGe;?F<V5BfJCE%=0|(<6d;GG_VoSW2=&O3G&|eG
zdr#(wZ4S5)Izr~W%7s83OS8wCdjFF-X7?>V^u^ie+iqM4J@RduU2f{Vqv5x9JK~F8
z5c-zd5w~|y9D3wr8rh0&Y;TD-$^PEV+o~80@fV$V4C#~U1`W+K6svTww6p2F5$yA3
z-qWG8X@n|#k?cS<ypk57BnWii727L;M2)VbWhe;}W?e~Rk)$MO2deJ(X;$6BdwbdU
zwif^w5Z~Kg03?@^*L*+%;(Hpy<cB*@t#726_ZDxq?1lqDBjiR}o`ymQ5I52#9l47I
z35XkMT>aqRDCt1tfZWTsc!#>O12S^u0vAdHGBS1qNm3bf_vaL<bfC5y%u2J~wPk}d
zauos-<qposv@J+L49>(w2n!MrgEI(W$&YrRp*|$THwbM(Kyye&`cRP29Fmbf6eKi<
zWNaVWfvQ(MrC+Jn)uq}goYt@Ej9daC1BmL3^qwFAQJsPJ>~EkmJHmZt^44aitZ3y`
zgVQqh#-Jnh<_xy7x%b^$@f(OUGIEIl3B(y0*_j}LI3t73q#HCHsf}l|_u6@Tww&##
zQ0L9g$Q%n~pfWpy)J7Msg3g=EBJI81y3Mt#(UD&cnrl}BBoO9iWK0PX2y-)tDHkXl
z0xxeY%qUAUxl`S}Syx3zeoqP<u`Ggw`ofG{7C}ONVMd0@Ah9ei%tV)F#Ii^XzAP@v
zs7o?pS(H5JeVUQWqGVxNT%56&#f~%}R=7levOXQXT6Trqop=T-R@mJM5@;*xy0asV
zgf$G^dA&P+180rX8Wh*8aax1M#TvU)Aq=23)Ty{@t9G)q4Vk>d8Md{Pw^wjO#%L&J
zXea8^O}tOr;x_;{+3f=ofSc?-1qr}S)TjSI>vp2H-<n}R+~)mfcB`X9ow_w6|34W*
z(Ak>78wzyT)QM)~_6&RfcJCwE?HQQ?1Q$BnGxA%(AfdB8gIEY&A3C6RWmrjPZ@26&
zryT0LT^ac)LkMvxxNe$0ov6L{%IO0FGh(mZ-XNj5*KTi+(A-<s-kqquYj}I#iQmAf
zvD+IYJ+s>zB!Ft{_67-{8fx#~qP=gkw4<3k#?s~9-vp0ljK-q5Z=>cuE}9#^fp^@l
z5=h`3x0@Rz@Qzb+H%FCjqc%F3VNZ1NwrG3O(V^x(Y0n`DLFXjRq5HTFn)^&fDU5e5
zewh8WqgMF;s=D&vDvmS%-uS%-tyHbU19J%TG;g}w5MxUm7B;%MjPN>HQ@cr=N;Zje
zR7~Ok3smi{<3wKBLISbkuuu!^M1Twi3J@URff3>e0t<nJ#9={%z_K}HuN<wbNU>`z
z-rv{V!%O~~-#1@>^UZfn&rBccY(ATk0g}mpEN%Hd-&=ra-bdbQqaSKn1iws6Oe|pM
zo!l>dJAe$mzx3?@2pzsmv;Ap6-3pJbPbmwt$QQ+lycz73U_r5Kt0Ab6QS91+1PB?$
zuKh;|2pPpLo<%y7v*46SnTz!YKAp)jgGD&>Z-9JI=GqhnAKI0<HiZF^!e#F8|8z|X
z6G5l&GB>osH7RUqXt&(8DQrnd;d0kc;VdevtK4MI_9;*d$xO5aget3CTb2PKa+T|s
z<t*xQRH=`0*#FMKF>F$mv<1ByR3&XeuLf1FEzV$upeh$}b(5a7+0n>)H?Z3crslb7
zMSXarnqJ6G4_WUHc1?(7Q;2PF^)q)e0Az3Q?F9(g8(dqa0U>*Xix{JL$)*^qRd?pF
z7jkNS?LdTtT3<UrVsh=`(14Io>!SZbzZ<hD!MCU-&#@ooZb?cY+ih{}{9y1v!WLJW
zpPzt`u*J0_3bP4qbIp?v04=w<_Q?l`mfL(218QF1#Mu;Sb=t(Ua7-Yn0)<;$@+K(U
z>U<M}8G`D_#0MXNiF2Zn>u%tG;)!>jX9rS-TzCEMOb(g0$Cy^#|1REadVI^`6h!v;
zmIZ{!9<po;O}ERTdv1s)Ccnte4x7{vw|4}xrjL4D_dWp8sv(XURC+8{4$K)j8F!lF
ziHW~ve+(Ak*aSY#pyA254SYZ}JQ=rv4~W1&86VypH-S$C9r#W0&<Al7_?Cutr{Xs7
zEeU~tI!=LKGgPaN$7o;N`Exv!SiFF}!(IX~Z`L`w67<Dw76U@5zPOECKnU-P$36X?
z2?(Y7;{4B0iUy|>0ZPHcpU3UrwH$Kc7jg4p6aeSGNZN{=_C?$#7|ufa7jfVFIaIjs
zp(#F$&IEv<dr3X1a^FkpNmb)sQctQH_u_E>XOv;N(a1nNuvQJc%03-35ch{i=aTb_
zJ=2#3fW%_Yx&sgri#?lHfRI@1!TTRlhcK6%g^6shu`B7N$u{KsQjeK!E5L&`r5@G-
zUt!uHmCDt*-?EA)%RM^)Cs(_@+#94vmq9MMz1+j-GJ5Rg5~@(g-e99MaSY>Ccs9@g
zaj^=|8V`_IJ>Ph_WcNx>8*dJPM%KxIxYbI}IvEg>Dn09DKuD_eV7yH<2Qe=isrCZ<
zykP2VS1s%fk4Q{>orQx#sy%<oY986K#@I0%0K#j0n*c(1jc-Rl2(KYK*3q*h4|a@f
z_MGirDD@BO^Sr@ZRZ}r5E&|D<1sKqNvuD!+5bZa6HZ1@Vft$VI+dY#OM9^um#S3lo
zOj=kP+P&x5w6G+k#a7RM9^_G_+vz=c9*oWaFi!%Uf)YD@TLVJa&Ih*6BUo>2Jp%x?
zuJ^310b!1M-`0STRPWmwP&b9GY2s3TG?MTF>(uil?0b(TJk)>Msw^Ml#}0eWQ7=TR
zw+#X|<Hs~jwUn^LoCYs6TYpqD=WruOywHrlqTnixMDgXF@SIbS_Zwdvyr4;{Whwjj
z=l=LNjp=>#q=!w{=>w&{0QsQF!`{QbxHF#93UT<XYt=)Q(==64$~uZ#JUhHiw<bHE
z^+LZ&$|L)o^RNr6FR#sWE<he_q^6soURlxu9mtO7J-cn1VS?Ot&u-9WD3IIXg*;lf
z!r1Y$=Uj#0U;2WvkdP*+;4=1d=7(M=FR2y14|jUlPx-+$DKW0lHTA1-K81a^3HwX{
z__^B;TR`a7?T0-ens!sz>#-X76i+>#n!lW_PVY%JqFC?o>j#+7sE6tYEsU8@cDw1R
zC(GH?i8uZF0V>+u^y>#8+T5i2@f8gf%m<9z_ng-gs+`>qzl1|m=y3x2-uL4Y5Mu88
zaR~@9_dQ$a0g-0+J^ng3g`Nne(0}Ej(3jAlv3#mHD-(ZN%?3S`yOKY+4wd|s-2S5h
z6Rxw8f88V&Ag;5Lqq9NfE}ts?8g3pI0BE^}+Z+T$%Qf8AJ3zEt!~J@fPd$=qG^M|2
z0MMm6sRO+$S94qMa2ArPxvh7AkW|f)gPUoerGjYWAP?N&iPKfAHZtTO$MoJe=p%mt
z`MZ%Pe)D_wW-z0X+X@9T#5HoJ$NUl(#5HnShJvbo0r}?ySLrqE-Ha2-M&#-f+`cM<
z35`y0bn};+OTpL8JQ3W$%7c@dxfxyzStP8P4>$W|0-{wjhnGIkml}-UNUhwt&Q;?^
zc4}BFAN+TESYiS3o#&zS)O2<HT{cYZ*u-Qy2xgUioQBx*eE2xzNf=il=bz`}pVZ@o
z3&^h>Tz$2P<xJ|}A@gtp6>U2BBj$5AAlh_ri~+)SIuHSaU*w@lsn3`T{zom#NC&~J
zW{cBke36gTYr7FQ8eio2mrBDA3doh0x$3TEv(hi~kRJR^RJ6Iwhnj!5fM|1>W0)Te
zGA^LbcqdnL-(`8}og5pznLDA5cPEcg0iYYBj&~=|$-{2P)CQjeuX1(dT{d^pRUR@S
z2`buL<)boe8~P-Fl}~y~4}dP9uY+AYl$kog+}J;DW@9IT;5Vl4@?FWs^j*G-8q@sw
z0{WKT%|jFM1x~x+_-6J@1_<VdB~GJpHy>fP9soq+Zk|3NrI?<>)1r}^JW!q(w}l0R
zLvM2YMyI_#ry(jMx4F~HRnB`Xs|bf?EdiW>xZC_;<77aHyUj6rg$9}cBBgKh)Lx`C
z6*wa3-!XSM#u-y@&QcJGcQ}5f(Rg1=qCp&YcwT<Wt6BkErjI*QQeSbu`?9+G9$S(N
zXv)kq{iC>#+uyu^n%OQv3<#b2IA$u)=<;b);rhASvX$k}>Q9QGVCwg?7fcY*&+UsP
zAVl<YyjXrt1IMOO!7CBYauG_smO}qh-NbX-SYfybL|-Q=eI>${1GIp^67fJFMSqEa
zKw~E=eI+7oxiCEpu$vynQW07vOb^4-(5_V29)=~MhfyY|hjHU;^w}7jDy$NLZR*iF
zc0IaEgh%Vy4#TOitQO9Avnv)L6av<%6$XS^RttPRL23cw<Qnyz-K;RSMmTyHG7-VE
zMqn87G|dC_mTK6|X2jkS&f^rx;34zACGaXj-?{Zp36*Nh9+nxa6i&M3p-;w@V&Wtk
z<q007{#vzg51SHOD;%AzL<G-Tkuf0!Yf%8gm{scJ9+n-eN?waT;aAbMj6TR{rN-=q
zJ}P-F`hu_MT8LxFK?YZ=-|c02Y1P6m-3lUjss$$9wV^J82`O8X_|sn29!#qdj?Ph{
zf~!Vg8R`om&4nc0nrPX_zU`!KP3lCS@VAmqFCd+!M<Y8#;DE|cuz!f|5O^n`kCf9X
zn|29jx7v_kc||xfi48i;zDtZUGqM5U>|FvM%PB|z5hS~W*o`2eWFmr2raEDh$x@&}
zov_JdNt8@=0?BljYWQ?=?|$LP)LYoj<ev|+{(K-4xHtz}@Am^2Q1jX$dw|eszu+PT
z3obih>}v782y_Uw;t<;qeP4uQI@m@~upNdI%&;av2m#i!9K(Q6@h};j{+Ns)Z5o6s
zdmn#H8ib=K7!egr4FYLPQ8I$!>WEO6-e;L<N0O2Z8Ith23??YoDAYF&v&Y>=-*cd%
zZ6kTE6x(Ki3jx<E5{nPB!J)iX;pi_4L<U={z!wFIWIzaO6`6&Y`WDd;YPO0gv*}+r
zFs#%j)S;v73Et+1EvS&uMqxW&Ga)3;3n$0>vHF*PWJA^HW9&s2gs1H#C^*lHtn8FZ
zxCJs1o$W%sb&Rd$?Mb~TJljdH?;xaRL?f3(;J-vLwNR}(gvacUj<ejyE(y#kq5kI#
z^yB{|oa-V)yMGS?HvM=_OPn~)UJE|mB|_761eueNeocfH{uKo`-Yw9Pr-$AQ3f3Os
zd?M6>vn;a+7&iriS>+E9X6X@+nkOb88uti{dZL&GM9lVxv7gwOC4!FGkNudn6e#hr
zAG4N3G5ayatbQ4ufhdXeiie!fgnHs6yHwQcM=Z`jqh4XBo&rLnUg7C#0~IJ@d#M5#
zjp${rS4{p48qos?=b=#)*Z)+6CeQ{iPG}~kP>I0*!N$vi*w5q_^A;~z^wN@f3+6vN
z@8_@lY}TSh3l_QR^(OY}kbZ$>vR2be=1dCtyCU(mQ`o6z?p<L!ZXiROyTUF&2?%ZO
z3Ur;RvjB)%b5}&o)~^K7<JBBPb5cGua?yT3B<7!HF9wSSl5*)T2Za4%K2zW2fWS9c
zBbNro42YrM)Lz9|l1r3fW;sDi!CeoC$^OMP6D~d=^8Y^N1f@528!487Wipsrk2SpK
zEmpId*}-VBw4)bC(mlT+oo|?D3Lta>)<37hfRO)&#Lp>8PHYT<iT>)vGi-e9O=+J6
zAcE&j3GdMF!;zHEC2HdtHaAuRxjIciB&tM`;}r!wP;sgHdJD^nEtPgTXb{1(RAMXz
zf)+eT@ly423(Jp{N=L^g5y4X`5t~?U5)c_&rkYyV)U-0`m=TvCf~QR4uXq6hVHU<q
z%fM<i<}AyPu8<hSLn$$fQldg)`sn<#ET;%Zrf&s0Zm~kz_2dDeX@$fmZHhcVL|%pT
zR!LL8iJ)^~rL^_iQlP;~Y3sKoQ7){M$b}!kE7(${QU>0ESH9)WT%hJ24UbR-=U8sE
zQig@DzoW=8Yo(KE90Lf&fK8<X#3j~BR1`7<_Di9MYv(yOHC82^XSC5l1W%R3A5D62
zVn-BuxMsAnyqJ=<et}3-iTXu9+Og*eJzUFM+4NYobf#E2<d|wXHA_2Y6gg&{`m7a>
zSto6&2N68$BuYIER~SW(S+5G)*weA~(#f%M$T90>eu4h;ueUULTm8O`%}RSa$wT$@
zZQ}VAocAn-lS?eu5IoO*8Lg4{9ZAl6mYlayI<@4yDMf%N9>8WCIUtO&QF`Vr1rYbN
zQI3B?yATjA+$f){wJs!rcHt)9g_Z(6Hu)~JBy!;<a$!GZ7G@r7lYv8FIPs&P3U;y4
zYWpFUqJGfMnjYRJ!)e-&spQA)YC;D~k8PKZ?z4wMg!t_eJM3VJB_K53p<e4?xv?Ed
z9&+Cf;u)iPfOe`6J6PKHcOopbNmI4^cFJd_S{~f$F8J1a*d6=pd5ag%oBxX+{ruk+
zj@A7FT!wnEIBz<GfDpM$qBAJ;1>n~@HTMF0OxF3nPt|^{Bj3}om{juX9-PE%(ihZM
zm)J<P?*eWNB=g7z17z-@I50}XGkdEpvb5M<Kjc#Nh>X1ya;_GMCuY6My~w;+y<bzX
zZwbWIQ%#YY2c>YI`t3zFHnvYXdSedgLcO_t62tWj4?1)E)d}L+pR^D4<@S?(;#v+~
ztPZF_ml%&7kdEmkU=|^G4oJ+KGAd&vQbHA8g3bx)=$T%)7A>HkkeKOZ<Y2DYK~(}d
z{9y9FX!ZPqGAk$LrwHBI(MW>~97k|`n_}Y;b>kA76K#-K$D3k!HpOtGbdH%A285-6
z&6+WQ@KmE5W0q?Lgku}2q){0HL<~2|amQ>76G6xDQ9p()1qvPYW7v`?hL2JVzfCcW
zok*Hw;A~K;|Gv!DJ>29+?P!YHQxvu1#^M;tobuxm5MobJT+%aPG{x>|>13(zpJAQ^
zG}r_vAec{+1JG>-GtdW8WpuKFv=98J1E`vervv6AfC)F-ELBA(o1E6{hXkl#YNn8w
zrkN0}XQaB($)=~B@qI8_hwB-NE$nLqNeI^#sis|F6Gcn%aulO2^f3As990;Nw8_9l
zII6%^{Y~LvYWo%T)X+Ba6m|6r$y4ppxd0noVYx*(G)}?^+-ke;BtYoh?mGz(PHLCq
zE?6fKK|86#cao(*nGWAcmPAhKASZQUQcW1!m~_d&N6_%xL$3PWsqn}|(^YmP810hb
zF}lcL_Yw2}VJg#E2ZUz8=IINFYh0rnrX<GpBIq1S)!oIOce|y1IRX_--IDg`p`Prc
z<df@CJ$H?*NV}foGGuVQq?vHbH>A3Ijs3*E;b+UE+Eq6sR(qg5r{>^?xD514^{?IR
zd(lrMCcsbz%ptqplFl8I0f5K=U^5655L(`ncF|)%T<Mm?&^yWiKp6LyeC&=jE)leG
oZ~Mlz6x_sZ-?)}U#=Q;W{v@(+(SjulCU^Yhp(h3_b)Aj>e`Ywd6aWAK

diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index bd58d4f5..b6f962ad 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -229,6 +229,75 @@ import "fora/v1/vocab.proto";
 // at each Exchange, on the request the Broker sent it.
 // ============================================================================
 
+// ============================================================================
+// Edge discovery headers
+//
+// A publisher's edge answers a request for licensed content that carries no
+// valid signed delivery URL with HTTP 403. For an agent that did not read the
+// publisher's /.well-known/fora.json first, that refusal is where discovery
+// starts, and it carries two response headers that point the agent into the
+// protocol. They are HTTP conventions rather than messages; no RPC carries them.
+//
+//   HTTP/1.1 403 Forbidden
+//   X-Content-Rules: https://publisher.example/.well-known/fora.json
+//   X-FORA-Exchange: exchange.example
+//
+// When an edge sends them. Only on that 403. An edge SHOULD send X-Content-Rules
+// on every such refusal, and MAY add X-FORA-Exchange. It MUST NOT send
+// X-FORA-Exchange without X-Content-Rules: X-FORA-Exchange is an optimisation
+// over X-Content-Rules, never a replacement for it, and the manifest stays the
+// authority. Each header appears at most once and carries one value. On any
+// status other than 403 the headers carry no meaning, and an agent ignores them.
+//
+// X-Content-Rules — the publisher's manifest. The value is the absolute URL of
+// the publisher's /.well-known/fora.json, exactly "https://", a domain, and
+// "/.well-known/fora.json", with nothing else: no userinfo, query, fragment,
+// trailing slash or other path. The domain is the publisher's, in the shape
+// "Request recipient" defines above (a port allowed), and is the host the
+// refused request was sent to. "http://" is admitted only on a deployment that
+// serves plaintext, which an agent's transport refuses unless configured to
+// allow it. The manifest is where the agent reads the licensing terms and, in
+// WellKnownManifest.exchanges, the Exchanges that sell this content. An agent
+// that finds the header naming a host other than the one it sent the refused
+// request to SHOULD read the refused host's own manifest instead: the manifest
+// that authorises Exchanges to sell is the one the content's own domain serves.
+//
+// X-FORA-Exchange — an Exchange that sells this content directly. The value is
+// that Exchange's bare domain, in the same form as Offer.exchange: the
+// "Request recipient" shape, a port allowed, no scheme, path or other part. It
+// names exactly one Exchange, and that Exchange MUST be listed in the
+// publisher's WellKnownManifest.exchanges.
+//
+// How an agent uses them. With a well-formed X-FORA-Exchange, an agent MAY start
+// discovery at the named Exchange at once, without fetching the publisher's
+// manifest first. It resolves that Exchange's endpoint from the Exchange's own
+// /.well-known/fora.json, never from the header alone — the rule "Request
+// recipient" states for every addressed request. The header is a value the edge
+// chose, and an endpoint taken from it would let whoever wrote it pick where the
+// agent's next signed request is sent; the header says WHICH Exchange to ask,
+// never WHERE to send the request. The domain is also the `exchange` the agent
+// stamps on its ResourceQuery to that Exchange. Without X-FORA-Exchange, the
+// agent reads the manifest X-Content-Rules points at and chooses among its
+// exchanges as on the proactive path. A value that is not of the shape above is
+// ignored as if absent, and the two headers are judged separately: a malformed
+// X-FORA-Exchange does not discard a well-formed X-Content-Rules, and the
+// reverse.
+//
+// Trust. An agent MUST NOT treat X-FORA-Exchange as authorization. It is an
+// unsigned value, and it proves nothing about who may sell the content. The
+// Exchange's offers are verified by their own Ed25519 signatures, exactly as on
+// every other path, and the publisher's manifest remains the authority on which
+// Exchanges sell the content. When the two disagree — the header names an
+// Exchange that the manifest's exchanges do not list — the manifest wins: the
+// agent SHOULD discard the header, SHOULD NOT transact on an offer from the
+// unlisted Exchange, and discovers at the Exchanges the manifest lists. An agent
+// that started discovery at the named Exchange before reading the manifest
+// SHOULD confirm the listing before it commits to an offer from that Exchange.
+// Whether the manifest lists the Exchange is the identity match "Request
+// recipient" defines: exact domain, case folded, ":443" the same as no port, and
+// a subdomain a different party.
+// ============================================================================
+
 // ============================================================================
 // ExchangeService — THE core protocol.
 //
@@ -3133,7 +3202,9 @@ message RequestConstraints {
 // auth methods). Identity keys are NOT here — every participant serves them in
 // the pure WBA directory (WBAFile) at
 // /.well-known/http-message-signatures-directory, referenced by RFC 7638
-// thumbprint. See WellKnownManifest and WBAFile below.
+// thumbprint. See WellKnownManifest and WBAFile below. A publisher's edge points
+// an agent it refuses at the publisher's fora.json with the X-Content-Rules
+// header; see "Edge discovery headers" in the file header.
 //
 // Caching contract:
 //   /.well-known/fora.json MAY be cached by consumers and CDNs for routine

From f08574131435055c324cff92e6f2138ec59dc8f8 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:43:01 -0400
Subject: [PATCH 039/164] Read the edge discovery headers in the Go SDK

An agent refused by a publisher's edge has to read X-Content-Rules and
X-FORA-Exchange off the 403 and check each value's shape before it acts
on either. Nothing in the SDK did that.

helpers.ParseDiscoveryHint(status, header) returns a DiscoveryHint: each
header's value and a HintState of HintAbsent, HintValid or HintMalformed.
Any status other than 403 reads as absent. X-Content-Rules is valid when
it is "https://" or "http://", a bare domain and WellKnownPath, with
nothing after it. It is checked as a string rather than through a URL
parser, so the three languages cannot disagree on an edge case. The http
scheme passes the shape check because plaintext is the guarded
transport's decision. X-FORA-Exchange is valid when IsBareDomain accepts
it. Repeated lines are joined with ", " first, and a comma fits neither
shape, so a header sent twice is malformed. Surrounding spaces and tabs
are trimmed.

helpers.ReconcileDiscoveryHint(hint, listed) checks the hinted Exchange
against the domains the publisher manifest's exchanges lists, with the
CheckAudience identity match, and answers HintListed, HintUnlisted or
HintNoExchange. A listed value that is not a bare domain matches nothing.

ContentRulesHeader and ExchangeHeader name the headers and join
wire-constants-vectors.json. A new corpus, discovery-hint-vectors.json,
is emitted by running both faces against an intended-answer table: valid
headers, each one missing, malformed URLs and domains, a repeated header,
non-403 statuses, and a header naming an Exchange the manifest does not
list. A Go test replays the committed file through http.ReadResponse.
---
 sdk/go/helpers/constants.go                   |   10 +
 sdk/go/helpers/discoveryhint.go               |  214 ++++
 sdk/go/helpers/discoveryhint_test.go          |  128 ++
 .../gen_discovery_hint_vectors_test.go        |  256 ++++
 sdk/go/helpers/gen_util_vectors_test.go       |    2 +
 .../testdata/discovery-hint-vectors.json      | 1127 +++++++++++++++++
 .../testdata/wire-constants-vectors.json      |    8 +
 7 files changed, 1745 insertions(+)
 create mode 100644 sdk/go/helpers/discoveryhint.go
 create mode 100644 sdk/go/helpers/discoveryhint_test.go
 create mode 100644 sdk/go/helpers/gen_discovery_hint_vectors_test.go
 create mode 100644 sdk/go/helpers/testdata/discovery-hint-vectors.json

diff --git a/sdk/go/helpers/constants.go b/sdk/go/helpers/constants.go
index f42807b6..14858208 100644
--- a/sdk/go/helpers/constants.go
+++ b/sdk/go/helpers/constants.go
@@ -49,6 +49,16 @@ const (
 	// WellKnownManifestVersion versions the document's content; WellKnownPath
 	// specifies where it is served.
 	WellKnownPath = "/.well-known/fora.json"
+	// ContentRulesHeader is the edge discovery header that points an agent the
+	// edge refused with 403 at the publisher's manifest: its value is the
+	// absolute URL of the publisher's /.well-known/fora.json. See "Edge
+	// discovery headers" in fora.proto, and ParseDiscoveryHint.
+	ContentRulesHeader = "X-Content-Rules"
+	// ExchangeHeader is the edge discovery header that names, on the same 403,
+	// one Exchange that sells the content directly, as a bare domain in the
+	// form of Offer.exchange. It is an optimisation over ContentRulesHeader and
+	// never authorization: the manifest stays the authority on who sells.
+	ExchangeHeader = "X-FORA-Exchange"
 )
 
 // signatureAgentLower is SignatureAgentHeader in the lowercase form RFC 9421
diff --git a/sdk/go/helpers/discoveryhint.go b/sdk/go/helpers/discoveryhint.go
new file mode 100644
index 00000000..09f064c0
--- /dev/null
+++ b/sdk/go/helpers/discoveryhint.go
@@ -0,0 +1,214 @@
+package helpers
+
+import (
+	"fmt"
+	"net/http"
+	"strings"
+)
+
+// The edge discovery headers: what a publisher's edge tells an unlicensed agent
+// when it refuses it.
+//
+// A publisher's edge answers a request for licensed content that carries no
+// valid signed delivery URL with 403. That answer carries up to two headers,
+// specified under "Edge discovery headers" in the fora.proto file header:
+//
+//	X-Content-Rules: https://publisher.example/.well-known/fora.json
+//	X-FORA-Exchange: exchange.example
+//
+// X-Content-Rules points at the publisher's manifest, which is the authority on
+// the licensing terms and on which Exchanges sell the content. X-FORA-Exchange
+// names one Exchange that sells it directly, so an agent can start discovery
+// there without reading the manifest first. The second is an optimisation over
+// the first and never a replacement for it.
+//
+// Two pure functions live here. ParseDiscoveryHint reads the two headers off a
+// response and checks each value's shape. ReconcileDiscoveryHint compares the
+// hinted Exchange with the Exchanges the manifest lists, once the agent has
+// read it. Neither dials anything: fetching the manifest, and resolving the
+// Exchange's endpoint from the Exchange's own manifest, are the resolvers' job.
+// The header names an Exchange; it never supplies the address to dial.
+//
+// The three SDKs answer identically, pinned by the shared corpus
+// testdata/discovery-hint-vectors.json.
+
+// HintState is what ParseDiscoveryHint found in one discovery header.
+type HintState int
+
+const (
+	// HintAbsent means the header was not sent, or the response was not a 403,
+	// where the headers carry no meaning. It is the zero value, so a hint nobody
+	// filled in reads as "nothing to act on".
+	HintAbsent HintState = iota
+
+	// HintValid means the header carried one value of the shape the protocol
+	// defines for it.
+	HintValid
+
+	// HintMalformed means the header was sent but its value is not of that
+	// shape: an X-Content-Rules that is not the absolute URL of a fora.json, an
+	// X-FORA-Exchange that is not a bare domain, or either header sent more
+	// than once. An agent ignores a malformed header as if it were absent. It
+	// is reported apart from absent so a caller can log an edge that is
+	// misconfigured.
+	HintMalformed
+)
+
+// String renders the state as the stable token the shared vectors record.
+func (s HintState) String() string {
+	switch s {
+	case HintAbsent:
+		return "absent"
+	case HintValid:
+		return "valid"
+	case HintMalformed:
+		return "malformed"
+	default:
+		return fmt.Sprintf("HintState(%d)", int(s))
+	}
+}
+
+// DiscoveryHint is the typed reading of a 403's discovery headers.
+//
+// ContentRules and Exchange hold the header values, with surrounding spaces and
+// tabs removed, only when their state is HintValid; otherwise they are empty.
+// Exchange is kept exactly as sent apart from that trimming. Compare it with
+// another domain through ReconcileDiscoveryHint or CheckAudience, which fold
+// case and an explicit ":443", never with ==.
+type DiscoveryHint struct {
+	ContentRules      string
+	ContentRulesState HintState
+	Exchange          string
+	ExchangeState     HintState
+}
+
+// ParseDiscoveryHint reads the X-Content-Rules and X-FORA-Exchange headers of a
+// response with the given HTTP status.
+//
+// The headers carry meaning only on a 403. For any other status both states are
+// HintAbsent, whatever the headers hold. Each header is checked on its own, so
+// a malformed X-FORA-Exchange does not discard a valid X-Content-Rules, and the
+// other way round.
+//
+// X-Content-Rules is valid when it is exactly "https://" or "http://", then a
+// bare domain (IsBareDomain, a port allowed), then WellKnownPath, with nothing
+// after it: no userinfo, query, fragment or trailing slash. The http scheme is
+// admitted here because whether a leg may run in plaintext is the guarded
+// transport's decision, not a shape question; the guarded clients refuse it
+// unless plaintext is enabled. X-FORA-Exchange is valid when it is a bare
+// domain, the same shape as Offer.exchange.
+//
+// A header sent more than once is malformed. Header lines are joined with ", "
+// before the check, and a comma can appear in neither shape, so a repeated
+// header fails the check the same way in every language, including the ones
+// whose header types join repeated lines on read.
+func ParseDiscoveryHint(status int, h http.Header) DiscoveryHint {
+	if status != http.StatusForbidden {
+		return DiscoveryHint{}
+	}
+	var hint DiscoveryHint
+	if v, ok := headerValue(h, ContentRulesHeader); ok {
+		hint.ContentRulesState = HintMalformed
+		if isContentRulesURL(v) {
+			hint.ContentRules, hint.ContentRulesState = v, HintValid
+		}
+	}
+	if v, ok := headerValue(h, ExchangeHeader); ok {
+		hint.ExchangeState = HintMalformed
+		if IsBareDomain(v) {
+			hint.Exchange, hint.ExchangeState = v, HintValid
+		}
+	}
+	return hint
+}
+
+// headerValue returns every line of the named header joined with ", ", with
+// spaces and tabs trimmed from both ends, and whether the header was present at
+// all. The lookup is case-insensitive because http.Header.Values canonicalises
+// the name.
+func headerValue(h http.Header, name string) (string, bool) {
+	vals := h.Values(name)
+	if len(vals) == 0 {
+		return "", false
+	}
+	return strings.Trim(strings.Join(vals, ", "), " \t"), true
+}
+
+// isContentRulesURL reports whether v is the absolute URL of a FORA manifest:
+// a lowercase http or https scheme, a bare domain, and WellKnownPath. It is
+// string work rather than a URL parse on purpose: the three languages' URL
+// parsers disagree on edge cases (a backslash, an empty port, percent-encoding
+// in the host), and a fixed shape with no optional parts leaves nothing for
+// them to disagree about.
+func isContentRulesURL(v string) bool {
+	rest, ok := strings.CutPrefix(v, "https://")
+	if !ok {
+		if rest, ok = strings.CutPrefix(v, "http://"); !ok {
+			return false
+		}
+	}
+	host, ok := strings.CutSuffix(rest, WellKnownPath)
+	return ok && IsBareDomain(host)
+}
+
+// HintAgreement is the outcome of comparing a hint's Exchange with the
+// Exchanges the publisher's manifest lists.
+type HintAgreement int
+
+const (
+	// HintNoExchange means the hint names no usable Exchange: the header was
+	// absent or malformed. There is nothing to reconcile, and the agent uses
+	// the manifest's Exchanges.
+	HintNoExchange HintAgreement = iota
+
+	// HintListed means the manifest lists the hinted Exchange. The hint and the
+	// authority agree.
+	HintListed
+
+	// HintUnlisted means the manifest does not list the hinted Exchange. The
+	// manifest wins: the agent discards the hint, does not transact on an offer
+	// from that Exchange, and discovers at the Exchanges the manifest lists.
+	HintUnlisted
+)
+
+// String renders the agreement as the stable token the shared vectors record.
+func (a HintAgreement) String() string {
+	switch a {
+	case HintNoExchange:
+		return "no_exchange"
+	case HintListed:
+		return "listed"
+	case HintUnlisted:
+		return "unlisted"
+	default:
+		return fmt.Sprintf("HintAgreement(%d)", int(a))
+	}
+}
+
+// ReconcileDiscoveryHint reports whether the publisher's manifest lists the
+// Exchange the hint names.
+//
+// listed holds the domain of every entry in the publisher manifest's
+// WellKnownManifest.exchanges. The comparison is the identity match the
+// protocol uses for a request's recipient, CheckAudience: exact domain, case
+// folded, an explicit ":443" the same as no port, and a subdomain a different
+// party. A listed value that is not a bare domain names nobody and matches
+// nothing.
+//
+// The hint is never authorization. HintListed says the two sources agree, not
+// that the Exchange's offers can be trusted: those are verified by their own
+// signatures, as on every other path.
+func ReconcileDiscoveryHint(hint DiscoveryHint, listed []string) HintAgreement {
+	if hint.ExchangeState != HintValid {
+		return HintNoExchange
+	}
+	for _, d := range listed {
+		if !IsBareDomain(d) {
+			continue
+		}
+		if v, err := CheckAudience(d, hint.Exchange); err == nil && v == AudienceAccepted {
+			return HintListed
+		}
+	}
+	return HintUnlisted
+}
diff --git a/sdk/go/helpers/discoveryhint_test.go b/sdk/go/helpers/discoveryhint_test.go
new file mode 100644
index 00000000..8d1b34a9
--- /dev/null
+++ b/sdk/go/helpers/discoveryhint_test.go
@@ -0,0 +1,128 @@
+package helpers_test
+
+import (
+	"bufio"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+type discoveryHintCorpus struct {
+	HeaderNames map[string]string `json:"header_names"`
+	Parse       []struct {
+		Name     string      `json:"name"`
+		Status   int         `json:"status"`
+		Headers  [][2]string `json:"headers"`
+		Expected struct {
+			ContentRules      string `json:"content_rules"`
+			ContentRulesState string `json:"content_rules_state"`
+			Exchange          string `json:"exchange"`
+			ExchangeState     string `json:"exchange_state"`
+		} `json:"expected"`
+	} `json:"parse"`
+	Reconcile []struct {
+		Name      string      `json:"name"`
+		Status    int         `json:"status"`
+		Headers   [][2]string `json:"headers"`
+		Listed    []string    `json:"listed"`
+		Agreement string      `json:"expected_agreement"`
+	} `json:"reconcile"`
+}
+
+func loadDiscoveryHintCorpus(t *testing.T) discoveryHintCorpus {
+	t.Helper()
+	b, err := os.ReadFile(filepath.Join("testdata", "discovery-hint-vectors.json"))
+	if err != nil {
+		t.Fatalf("read corpus: %v", err)
+	}
+	var c discoveryHintCorpus
+	if err := json.Unmarshal(b, &c); err != nil {
+		t.Fatalf("decode corpus: %v", err)
+	}
+	if len(c.Parse) == 0 || len(c.Reconcile) == 0 {
+		t.Fatal("discovery-hint corpus has an empty section")
+	}
+	return c
+}
+
+// responseHeader builds the header the way a caller holds it: it writes a raw
+// HTTP/1.1 response carrying the pairs and reads it back with
+// http.ReadResponse, so the replay covers net/http's own name canonicalisation
+// and value trimming rather than a header assembled by hand.
+func responseHeader(t *testing.T, status int, pairs [][2]string) http.Header {
+	t.Helper()
+	var raw strings.Builder
+	fmt.Fprintf(&raw, "HTTP/1.1 %d %s\r\n", status, http.StatusText(status))
+	for _, p := range pairs {
+		fmt.Fprintf(&raw, "%s: %s\r\n", p[0], p[1])
+	}
+	raw.WriteString("Content-Length: 0\r\n\r\n")
+	resp, err := http.ReadResponse(bufio.NewReader(strings.NewReader(raw.String())), nil)
+	if err != nil {
+		t.Fatalf("read response: %v", err)
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != status {
+		t.Fatalf("status = %d, want %d", resp.StatusCode, status)
+	}
+	return resp.Header
+}
+
+// TestDiscoveryHint_ReplaysCommittedCorpus reads the committed file back, the
+// way the Python and TypeScript suites do, so a corpus edited by hand fails
+// here as well as in the emitter's drift check.
+func TestDiscoveryHint_ReplaysCommittedCorpus(t *testing.T) {
+	c := loadDiscoveryHintCorpus(t)
+	if c.HeaderNames["content_rules"] != helpers.ContentRulesHeader || c.HeaderNames["exchange"] != helpers.ExchangeHeader {
+		t.Fatalf("corpus header names %v differ from the constants", c.HeaderNames)
+	}
+	for _, v := range c.Parse {
+		got := helpers.ParseDiscoveryHint(v.Status, responseHeader(t, v.Status, v.Headers))
+		if got.ContentRules != v.Expected.ContentRules || got.ContentRulesState.String() != v.Expected.ContentRulesState ||
+			got.Exchange != v.Expected.Exchange || got.ExchangeState.String() != v.Expected.ExchangeState {
+			t.Errorf("%s: got %+v, corpus says %+v", v.Name, got, v.Expected)
+		}
+	}
+	for _, v := range c.Reconcile {
+		hint := helpers.ParseDiscoveryHint(v.Status, responseHeader(t, v.Status, v.Headers))
+		if got := helpers.ReconcileDiscoveryHint(hint, v.Listed).String(); got != v.Agreement {
+			t.Errorf("%s: got %s, corpus says %s", v.Name, got, v.Agreement)
+		}
+	}
+}
+
+// TestDiscoveryHint_ZeroValueIsNothingToActOn pins the zero values: a hint
+// nobody filled in reads as both headers absent and no Exchange to reconcile,
+// never as a valid or listed one.
+func TestDiscoveryHint_ZeroValueIsNothingToActOn(t *testing.T) {
+	var hint helpers.DiscoveryHint
+	if hint.ContentRulesState != helpers.HintAbsent || hint.ExchangeState != helpers.HintAbsent {
+		t.Fatalf("zero DiscoveryHint states = %s/%s, want absent", hint.ContentRulesState, hint.ExchangeState)
+	}
+	if got := helpers.ReconcileDiscoveryHint(hint, []string{"exchange.example"}); got != helpers.HintNoExchange {
+		t.Fatalf("zero hint reconciles to %s, want no_exchange", got)
+	}
+}
+
+// TestDiscoveryHint_NilHeaderIsAbsent covers a 403 with no header map at all.
+func TestDiscoveryHint_NilHeaderIsAbsent(t *testing.T) {
+	got := helpers.ParseDiscoveryHint(http.StatusForbidden, nil)
+	if got != (helpers.DiscoveryHint{}) {
+		t.Fatalf("nil header parsed to %+v, want the zero hint", got)
+	}
+}
+
+func TestDiscoveryHint_UnknownTokens(t *testing.T) {
+	if s := helpers.HintState(9).String(); s != "HintState(9)" {
+		t.Fatalf("HintState(9) = %q", s)
+	}
+	if s := helpers.HintAgreement(9).String(); s != "HintAgreement(9)" {
+		t.Fatalf("HintAgreement(9) = %q", s)
+	}
+}
diff --git a/sdk/go/helpers/gen_discovery_hint_vectors_test.go b/sdk/go/helpers/gen_discovery_hint_vectors_test.go
new file mode 100644
index 00000000..c648536c
--- /dev/null
+++ b/sdk/go/helpers/gen_discovery_hint_vectors_test.go
@@ -0,0 +1,256 @@
+package helpers
+
+// Discovery-hint golden-vector emitter.
+//
+// The edge discovery headers are an HTTP convention with no protovalidate rule
+// behind them, so the only thing holding the three SDKs to one reading of a 403
+// is this corpus. Every recorded state and agreement is derived by calling the
+// real ParseDiscoveryHint and ReconcileDiscoveryHint. Each row still carries the
+// answer its author intended, and the emitter refuses to write a file where the
+// real face disagrees, so a face that drifted cannot publish its drift as the
+// new expectation.
+//
+// Headers are recorded as ordered [name, value] pairs rather than an object, so
+// a row can send a header twice and can spell a name in any case. A replay adds
+// the pairs to its language's header type one by one.
+//
+// Verification no-op by default (asserts the committed file matches a fresh
+// emit); (re)writes under FORA_UPDATE_VECTORS=1. TEST INFRASTRUCTURE.
+
+import (
+	"net/http"
+	"os"
+	"path/filepath"
+	"testing"
+)
+
+const (
+	hintManifestURL = "https://publisher.example/.well-known/fora.json"
+	hintExchange    = "exchange.example"
+)
+
+// hintExpectation is what ParseDiscoveryHint returns, as the tokens and values
+// the corpus records. A value is "" whenever its state is not valid.
+type hintExpectation struct {
+	ContentRules      string `json:"content_rules"`
+	ContentRulesState string `json:"content_rules_state"`
+	Exchange          string `json:"exchange"`
+	ExchangeState     string `json:"exchange_state"`
+}
+
+// discoveryHintParseVector is one ParseDiscoveryHint case.
+type discoveryHintParseVector struct {
+	Name     string          `json:"name"`
+	Status   int             `json:"status"`
+	Headers  [][2]string     `json:"headers"`
+	Expected hintExpectation `json:"expected"`
+}
+
+// discoveryHintReconcileVector is one ParseDiscoveryHint-then-ReconcileDiscoveryHint
+// case: the 403's headers, the Exchange domains the publisher manifest lists, and
+// the agreement token.
+type discoveryHintReconcileVector struct {
+	Name      string      `json:"name"`
+	Status    int         `json:"status"`
+	Headers   [][2]string `json:"headers"`
+	Listed    []string    `json:"listed"`
+	Agreement string      `json:"expected_agreement"`
+}
+
+func headerOf(pairs [][2]string) http.Header {
+	h := http.Header{}
+	for _, p := range pairs {
+		h.Add(p[0], p[1])
+	}
+	return h
+}
+
+func expectationOf(h DiscoveryHint) hintExpectation {
+	return hintExpectation{
+		ContentRules:      h.ContentRules,
+		ContentRulesState: h.ContentRulesState.String(),
+		Exchange:          h.Exchange,
+		ExchangeState:     h.ExchangeState.String(),
+	}
+}
+
+func cr(v string) [2]string { return [2]string{ContentRulesHeader, v} }
+func ex(v string) [2]string { return [2]string{ExchangeHeader, v} }
+
+func validBoth() hintExpectation {
+	return hintExpectation{hintManifestURL, "valid", hintExchange, "valid"}
+}
+
+func buildDiscoveryHintParseVectors(t *testing.T) []discoveryHintParseVector {
+	t.Helper()
+	const absent, malformed = "absent", "malformed"
+	crMalformed := func(exchangeState, exchange string) hintExpectation {
+		return hintExpectation{"", malformed, exchange, exchangeState}
+	}
+	exMalformed := hintExpectation{hintManifestURL, "valid", "", malformed}
+	rows := []discoveryHintParseVector{
+		// Both headers, valid.
+		{"both_valid", 403, [][2]string{cr(hintManifestURL), ex(hintExchange)}, validBoth()},
+		{"both_valid_with_ports", 403,
+			[][2]string{cr("https://publisher.example:8443/.well-known/fora.json"), ex("exchange.example:8081")},
+			hintExpectation{"https://publisher.example:8443/.well-known/fora.json", "valid", "exchange.example:8081", "valid"}},
+		{"header_names_any_case", 403,
+			[][2]string{{"x-content-rules", hintManifestURL}, {"X-FORA-EXCHANGE", hintExchange}}, validBoth()},
+		{"surrounding_whitespace_trimmed", 403,
+			[][2]string{cr(" " + hintManifestURL + "\t"), ex("  " + hintExchange + " ")}, validBoth()},
+		{"plaintext_scheme_is_a_transport_question", 403,
+			[][2]string{cr("http://publisher.example:8080/.well-known/fora.json"), ex(hintExchange)},
+			hintExpectation{"http://publisher.example:8080/.well-known/fora.json", "valid", hintExchange, "valid"}},
+		{"exchange_kept_as_sent", 403, [][2]string{cr(hintManifestURL), ex("Exchange.Example:443")},
+			hintExpectation{hintManifestURL, "valid", "Exchange.Example:443", "valid"}},
+
+		// One header missing.
+		{"exchange_missing", 403, [][2]string{cr(hintManifestURL)},
+			hintExpectation{hintManifestURL, "valid", "", absent}},
+		{"content_rules_missing", 403, [][2]string{ex(hintExchange)},
+			hintExpectation{"", absent, hintExchange, "valid"}},
+		{"neither_header", 403, [][2]string{{"Content-Type", "application/json"}},
+			hintExpectation{"", absent, "", absent}},
+
+		// The headers mean something only on a 403.
+		{"status_200_ignored", 200, [][2]string{cr(hintManifestURL), ex(hintExchange)},
+			hintExpectation{"", absent, "", absent}},
+		{"status_401_ignored", 401, [][2]string{cr(hintManifestURL), ex(hintExchange)},
+			hintExpectation{"", absent, "", absent}},
+		{"status_402_ignored", 402, [][2]string{cr(hintManifestURL), ex(hintExchange)},
+			hintExpectation{"", absent, "", absent}},
+		{"status_404_ignored", 404, [][2]string{cr(hintManifestURL), ex(hintExchange)},
+			hintExpectation{"", absent, "", absent}},
+
+		// X-Content-Rules malformed. Each header is judged on its own, so the
+		// valid X-FORA-Exchange beside it survives.
+		{"content_rules_points_at_an_exchange", 403,
+			[][2]string{cr("https://exchange.example/v1/info"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_relative", 403,
+			[][2]string{cr(WellKnownPath), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_schemeless", 403,
+			[][2]string{cr("publisher.example/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_scheme_relative", 403,
+			[][2]string{cr("//publisher.example/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_other_scheme", 403,
+			[][2]string{cr("ftp://publisher.example/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_uppercase_scheme", 403,
+			[][2]string{cr("HTTPS://publisher.example/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_other_path", 403,
+			[][2]string{cr("https://publisher.example/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_path_prefix", 403,
+			[][2]string{cr("https://publisher.example/x/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_trailing_slash", 403,
+			[][2]string{cr(hintManifestURL + "/"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_query", 403,
+			[][2]string{cr(hintManifestURL + "?v=1"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_fragment", 403,
+			[][2]string{cr(hintManifestURL + "#terms"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_userinfo", 403,
+			[][2]string{cr("https://agent@publisher.example/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_ipv6_literal", 403,
+			[][2]string{cr("https://[::1]/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_trailing_root_dot", 403,
+			[][2]string{cr("https://publisher.example./.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_bad_port", 403,
+			[][2]string{cr("https://publisher.example:0/.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_no_host", 403,
+			[][2]string{cr("https:///.well-known/fora.json"), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_empty", 403,
+			[][2]string{cr(""), ex(hintExchange)}, crMalformed("valid", hintExchange)},
+		{"content_rules_sent_twice", 403,
+			[][2]string{cr(hintManifestURL), cr("https://other.example/.well-known/fora.json"), ex(hintExchange)},
+			crMalformed("valid", hintExchange)},
+		{"content_rules_comma_list", 403,
+			[][2]string{cr(hintManifestURL + ", https://other.example/.well-known/fora.json")}, crMalformed(absent, "")},
+
+		// X-FORA-Exchange malformed.
+		{"exchange_is_a_url", 403, [][2]string{cr(hintManifestURL), ex("https://exchange.example")}, exMalformed},
+		{"exchange_has_a_path", 403, [][2]string{cr(hintManifestURL), ex("exchange.example/v1")}, exMalformed},
+		{"exchange_endpoint_url", 403,
+			[][2]string{cr(hintManifestURL), ex("https://exchange.example/fora.v1.ExchangeService")}, exMalformed},
+		{"exchange_underscore", 403, [][2]string{cr(hintManifestURL), ex("ex_change.example")}, exMalformed},
+		{"exchange_port_out_of_range", 403, [][2]string{cr(hintManifestURL), ex("exchange.example:65536")}, exMalformed},
+		{"exchange_trailing_root_dot", 403, [][2]string{cr(hintManifestURL), ex("exchange.example.")}, exMalformed},
+		{"exchange_non_ascii", 403, [][2]string{cr(hintManifestURL), ex("exchänge.example")}, exMalformed},
+		{"exchange_empty", 403, [][2]string{cr(hintManifestURL), ex("")}, exMalformed},
+		{"exchange_sent_twice", 403,
+			[][2]string{cr(hintManifestURL), ex(hintExchange), ex("other-exchange.example")}, exMalformed},
+		{"exchange_comma_list", 403,
+			[][2]string{cr(hintManifestURL), ex(hintExchange + ", other-exchange.example")}, exMalformed},
+
+		// Both malformed.
+		{"both_malformed", 403,
+			[][2]string{cr("https://exchange.example/v1/info"), ex("https://exchange.example")},
+			hintExpectation{"", malformed, "", malformed}},
+	}
+	for i, r := range rows {
+		got := expectationOf(ParseDiscoveryHint(r.Status, headerOf(r.Headers)))
+		if got != r.Expected {
+			t.Fatalf("%s: ParseDiscoveryHint = %+v, table says %+v; fix the table or the face", r.Name, got, r.Expected)
+		}
+		rows[i].Expected = got
+	}
+	return rows
+}
+
+func buildDiscoveryHintReconcileVectors(t *testing.T) []discoveryHintReconcileVector {
+	t.Helper()
+	both := [][2]string{cr(hintManifestURL), ex(hintExchange)}
+	rows := []struct {
+		name    string
+		status  int
+		headers [][2]string
+		listed  []string
+		want    HintAgreement
+	}{
+		{"listed", 403, both, []string{hintExchange}, HintListed},
+		{"listed_among_several", 403, both, []string{"other-exchange.example", hintExchange}, HintListed},
+		{"listed_case_folded", 403, [][2]string{cr(hintManifestURL), ex("EXCHANGE.example")}, []string{hintExchange}, HintListed},
+		{"listed_default_port_folded", 403, [][2]string{cr(hintManifestURL), ex("exchange.example:443")}, []string{hintExchange}, HintListed},
+		{"listed_with_same_port", 403, [][2]string{cr(hintManifestURL), ex("exchange.example:8081")}, []string{"exchange.example:8081"}, HintListed},
+
+		// The header names an Exchange the manifest does not list: the manifest wins.
+		{"unlisted", 403, both, []string{"other-exchange.example"}, HintUnlisted},
+		{"unlisted_manifest_lists_none", 403, both, []string{}, HintUnlisted},
+		{"unlisted_subdomain_is_another_party", 403, [][2]string{cr(hintManifestURL), ex("eu.exchange.example")}, []string{hintExchange}, HintUnlisted},
+		{"unlisted_parent_is_another_party", 403, both, []string{"eu.exchange.example"}, HintUnlisted},
+		{"unlisted_other_port", 403, [][2]string{cr(hintManifestURL), ex("exchange.example:8443")}, []string{hintExchange}, HintUnlisted},
+		{"unlisted_port_80_not_folded", 403, [][2]string{cr(hintManifestURL), ex("exchange.example:80")}, []string{hintExchange}, HintUnlisted},
+		{"unlisted_malformed_listing_matches_nothing", 403, both, []string{"https://exchange.example"}, HintUnlisted},
+
+		// No usable Exchange in the hint: nothing to reconcile.
+		{"no_exchange_header_missing", 403, [][2]string{cr(hintManifestURL)}, []string{hintExchange}, HintNoExchange},
+		{"no_exchange_header_malformed", 403, [][2]string{cr(hintManifestURL), ex("https://exchange.example")}, []string{hintExchange}, HintNoExchange},
+		{"no_exchange_not_a_403", 200, both, []string{hintExchange}, HintNoExchange},
+	}
+	out := make([]discoveryHintReconcileVector, 0, len(rows))
+	for _, r := range rows {
+		got := ReconcileDiscoveryHint(ParseDiscoveryHint(r.status, headerOf(r.headers)), r.listed)
+		if got != r.want {
+			t.Fatalf("%s: ReconcileDiscoveryHint = %s, table says %s; fix the table or the face", r.name, got, r.want)
+		}
+		out = append(out, discoveryHintReconcileVector{
+			Name: r.name, Status: r.status, Headers: r.headers, Listed: r.listed, Agreement: got.String(),
+		})
+	}
+	return out
+}
+
+// TestGenerateDiscoveryHintVectors emits testdata/discovery-hint-vectors.json.
+func TestGenerateDiscoveryHintVectors(t *testing.T) {
+	doc := map[string]any{
+		"header_names": map[string]string{
+			"content_rules": ContentRulesHeader,
+			"exchange":      ExchangeHeader,
+		},
+		"parse":     buildDiscoveryHintParseVectors(t),
+		"reconcile": buildDiscoveryHintReconcileVectors(t),
+	}
+	path := filepath.Join("testdata", "discovery-hint-vectors.json")
+	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
+		writeJSON(t, path, doc)
+		return
+	}
+	assertMatches(t, path, doc)
+}
diff --git a/sdk/go/helpers/gen_util_vectors_test.go b/sdk/go/helpers/gen_util_vectors_test.go
index 8c74c0b3..0606e3e2 100644
--- a/sdk/go/helpers/gen_util_vectors_test.go
+++ b/sdk/go/helpers/gen_util_vectors_test.go
@@ -261,6 +261,8 @@ func buildWireConstantsVectors() []wireConstantVector {
 		{"SignatureAgentHeader", SignatureAgentHeader},
 		{"AgentKeyHeader", AgentKeyHeader},
 		{"WellKnownPath", WellKnownPath},
+		{"ContentRulesHeader", ContentRulesHeader},
+		{"ExchangeHeader", ExchangeHeader},
 	}
 }
 
diff --git a/sdk/go/helpers/testdata/discovery-hint-vectors.json b/sdk/go/helpers/testdata/discovery-hint-vectors.json
new file mode 100644
index 00000000..1f3b0d72
--- /dev/null
+++ b/sdk/go/helpers/testdata/discovery-hint-vectors.json
@@ -0,0 +1,1127 @@
+{
+  "header_names": {
+    "content_rules": "X-Content-Rules",
+    "exchange": "X-FORA-Exchange"
+  },
+  "parse": [
+    {
+      "name": "both_valid",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "both_valid_with_ports",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example:8443/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example:8081"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example:8443/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "exchange.example:8081",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "header_names_any_case",
+      "status": 403,
+      "headers": [
+        [
+          "x-content-rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-EXCHANGE",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "surrounding_whitespace_trimmed",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          " https://publisher.example/.well-known/fora.json\t"
+        ],
+        [
+          "X-FORA-Exchange",
+          "  exchange.example "
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "plaintext_scheme_is_a_transport_question",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "http://publisher.example:8080/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "http://publisher.example:8080/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "exchange_kept_as_sent",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "Exchange.Example:443"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "Exchange.Example:443",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "exchange_missing",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "absent"
+      }
+    },
+    {
+      "name": "content_rules_missing",
+      "status": 403,
+      "headers": [
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "absent",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "neither_header",
+      "status": 403,
+      "headers": [
+        [
+          "Content-Type",
+          "application/json"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "absent",
+        "exchange": "",
+        "exchange_state": "absent"
+      }
+    },
+    {
+      "name": "status_200_ignored",
+      "status": 200,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "absent",
+        "exchange": "",
+        "exchange_state": "absent"
+      }
+    },
+    {
+      "name": "status_401_ignored",
+      "status": 401,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "absent",
+        "exchange": "",
+        "exchange_state": "absent"
+      }
+    },
+    {
+      "name": "status_402_ignored",
+      "status": 402,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "absent",
+        "exchange": "",
+        "exchange_state": "absent"
+      }
+    },
+    {
+      "name": "status_404_ignored",
+      "status": 404,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "absent",
+        "exchange": "",
+        "exchange_state": "absent"
+      }
+    },
+    {
+      "name": "content_rules_points_at_an_exchange",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://exchange.example/v1/info"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_relative",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_schemeless",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_scheme_relative",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "//publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_other_scheme",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "ftp://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_uppercase_scheme",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "HTTPS://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_other_path",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_path_prefix",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/x/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_trailing_slash",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json/"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_query",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json?v=1"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_fragment",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json#terms"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_userinfo",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://agent@publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_ipv6_literal",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://[::1]/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_trailing_root_dot",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example./.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_bad_port",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example:0/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_no_host",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https:///.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_empty",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          ""
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_sent_twice",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-Content-Rules",
+          "https://other.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "exchange.example",
+        "exchange_state": "valid"
+      }
+    },
+    {
+      "name": "content_rules_comma_list",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json, https://other.example/.well-known/fora.json"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "",
+        "exchange_state": "absent"
+      }
+    },
+    {
+      "name": "exchange_is_a_url",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "https://exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_has_a_path",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example/v1"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_endpoint_url",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "https://exchange.example/fora.v1.ExchangeService"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_underscore",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "ex_change.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_port_out_of_range",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example:65536"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_trailing_root_dot",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example."
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_non_ascii",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchänge.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_empty",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          ""
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_sent_twice",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ],
+        [
+          "X-FORA-Exchange",
+          "other-exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "exchange_comma_list",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example, other-exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "https://publisher.example/.well-known/fora.json",
+        "content_rules_state": "valid",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    },
+    {
+      "name": "both_malformed",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://exchange.example/v1/info"
+        ],
+        [
+          "X-FORA-Exchange",
+          "https://exchange.example"
+        ]
+      ],
+      "expected": {
+        "content_rules": "",
+        "content_rules_state": "malformed",
+        "exchange": "",
+        "exchange_state": "malformed"
+      }
+    }
+  ],
+  "reconcile": [
+    {
+      "name": "listed",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "listed"
+    },
+    {
+      "name": "listed_among_several",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "listed": [
+        "other-exchange.example",
+        "exchange.example"
+      ],
+      "expected_agreement": "listed"
+    },
+    {
+      "name": "listed_case_folded",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "EXCHANGE.example"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "listed"
+    },
+    {
+      "name": "listed_default_port_folded",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example:443"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "listed"
+    },
+    {
+      "name": "listed_with_same_port",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example:8081"
+        ]
+      ],
+      "listed": [
+        "exchange.example:8081"
+      ],
+      "expected_agreement": "listed"
+    },
+    {
+      "name": "unlisted",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "listed": [
+        "other-exchange.example"
+      ],
+      "expected_agreement": "unlisted"
+    },
+    {
+      "name": "unlisted_manifest_lists_none",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "listed": [],
+      "expected_agreement": "unlisted"
+    },
+    {
+      "name": "unlisted_subdomain_is_another_party",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "eu.exchange.example"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "unlisted"
+    },
+    {
+      "name": "unlisted_parent_is_another_party",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "listed": [
+        "eu.exchange.example"
+      ],
+      "expected_agreement": "unlisted"
+    },
+    {
+      "name": "unlisted_other_port",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example:8443"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "unlisted"
+    },
+    {
+      "name": "unlisted_port_80_not_folded",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example:80"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "unlisted"
+    },
+    {
+      "name": "unlisted_malformed_listing_matches_nothing",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "listed": [
+        "https://exchange.example"
+      ],
+      "expected_agreement": "unlisted"
+    },
+    {
+      "name": "no_exchange_header_missing",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "no_exchange"
+    },
+    {
+      "name": "no_exchange_header_malformed",
+      "status": 403,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "https://exchange.example"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "no_exchange"
+    },
+    {
+      "name": "no_exchange_not_a_403",
+      "status": 200,
+      "headers": [
+        [
+          "X-Content-Rules",
+          "https://publisher.example/.well-known/fora.json"
+        ],
+        [
+          "X-FORA-Exchange",
+          "exchange.example"
+        ]
+      ],
+      "listed": [
+        "exchange.example"
+      ],
+      "expected_agreement": "no_exchange"
+    }
+  ]
+}
diff --git a/sdk/go/helpers/testdata/wire-constants-vectors.json b/sdk/go/helpers/testdata/wire-constants-vectors.json
index 78ec20c0..56347971 100644
--- a/sdk/go/helpers/testdata/wire-constants-vectors.json
+++ b/sdk/go/helpers/testdata/wire-constants-vectors.json
@@ -39,6 +39,14 @@
     {
       "name": "WellKnownPath",
       "value": "/.well-known/fora.json"
+    },
+    {
+      "name": "ContentRulesHeader",
+      "value": "X-Content-Rules"
+    },
+    {
+      "name": "ExchangeHeader",
+      "value": "X-FORA-Exchange"
     }
   ]
 }

From a9a79a121b9b5f878a219e10b97ae3b76d268052 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:43:01 -0400
Subject: [PATCH 040/164] Read the edge discovery headers in the Python SDK

fora_sdk.discovery_hint ports the Go helpers. parse_discovery_hint(status,
headers) reads X-Content-Rules and X-FORA-Exchange from any mapping of
headers, an httpx.Headers or a dict, matching names case-insensitively,
and returns a frozen DiscoveryHint: each value, or None, with a HintState
of "absent", "valid" or "malformed". reconcile_discovery_hint(hint,
listed) answers "listed", "unlisted" or "no_exchange" with the
check_audience identity match. Both are exported from fora_sdk, with
DiscoveryHint, HintState and HintAgreement. fora_sdk.wire adds
ContentRulesHeader and ExchangeHeader.

The parity test replays discovery-hint-vectors.json through httpx.Headers
built from the raw header bytes, as a fetch delivers them, and through a
plain dict where no header repeats. It also reads a real httpx.Response.
The wire-constants replay covers the two header names, and the
non-empty-corpus guard covers both sections of the new corpus.
---
 sdk/python/fora_sdk/__init__.py               |  16 ++
 sdk/python/fora_sdk/discovery_hint.py         | 172 ++++++++++++++++++
 sdk/python/fora_sdk/wire.py                   |  10 +
 .../tests/test_discovery_hint_parity.py       |  98 ++++++++++
 .../tests/test_parity_corpora_nonempty.py     |   6 +
 sdk/python/tests/test_wire_parity.py          |   2 +
 6 files changed, 304 insertions(+)
 create mode 100644 sdk/python/fora_sdk/discovery_hint.py
 create mode 100644 sdk/python/tests/test_discovery_hint_parity.py

diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index ef38c085..285fb8c5 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -63,6 +63,13 @@
     verify_request_acceptance_jcs,
 )
 from .crossfield import cross_field_rule_ids
+from .discovery_hint import (
+    DiscoveryHint,
+    HintAgreement,
+    HintState,
+    parse_discovery_hint,
+    reconcile_discovery_hint,
+)
 from .errordetail import (
     ERROR_DETAIL_TYPE,
     REASON_FIELDS,
@@ -170,8 +177,10 @@
 from .wire import (
     ConnectProtocolVersion,
     ConnectProtocolVersionHeader,
+    ContentRulesHeader,
     ContentTypeJSON,
     ContentTypeProto,
+    ExchangeHeader,
     ProtocolVersion,
     RequestIDHeader,
     SignatureAgentHeader,
@@ -202,14 +211,19 @@
     "ConnectProtocolVersion",
     "ConnectProtocolVersionHeader",
     "Content",
+    "ContentRulesHeader",
     "ContentTypeJSON",
     "ContentTypeProto",
     "DirectoryUnavailableError",
+    "DiscoveryHint",
     "DiscoveryResult",
     "ERROR_DETAIL_TYPE",
     "EndpointRefusedError",
     "EndpointResolver",
     "EntryVerdict",
+    "ExchangeHeader",
+    "HintAgreement",
+    "HintState",
     "KeyExpiredError",
     "KeyResolver",
     "KeyRevokedError",
@@ -291,6 +305,8 @@
     "generate_idempotency_key",
     "generate_key",
     "hash_url",
+    "parse_discovery_hint",
+    "reconcile_discovery_hint",
     "host_anchored",
     "host_of",
     "is_bare_domain",
diff --git a/sdk/python/fora_sdk/discovery_hint.py b/sdk/python/fora_sdk/discovery_hint.py
new file mode 100644
index 00000000..feed8822
--- /dev/null
+++ b/sdk/python/fora_sdk/discovery_hint.py
@@ -0,0 +1,172 @@
+"""The edge discovery headers: what a publisher's edge tells an unlicensed agent.
+
+Python port of the sdk/go oracle (helpers/discoveryhint.go).
+
+A publisher's edge answers a request for licensed content that carries no valid
+signed delivery URL with 403. That answer carries up to two headers, specified
+under "Edge discovery headers" in the fora.proto file header::
+
+    X-Content-Rules: https://publisher.example/.well-known/fora.json
+    X-FORA-Exchange: exchange.example
+
+``X-Content-Rules`` points at the publisher's manifest, which is the authority on
+the licensing terms and on which Exchanges sell the content. ``X-FORA-Exchange``
+names one Exchange that sells it directly, so an agent can start discovery there
+without reading the manifest first. The second is an optimisation over the first
+and never a replacement for it.
+
+:func:`parse_discovery_hint` reads the two headers off a response and checks each
+value's shape. :func:`reconcile_discovery_hint` compares the hinted Exchange with
+the Exchanges the manifest lists, once the agent has read it. Neither dials
+anything: fetching the manifest, and resolving the Exchange's endpoint from the
+Exchange's own manifest, are the resolvers' job. The header names an Exchange; it
+never supplies the address to dial.
+
+Pure string work, no IO. Pinned to the Go oracle by the shared corpus at
+``sdk/go/helpers/testdata/discovery-hint-vectors.json``.
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import TYPE_CHECKING, Literal
+
+from fora_sdk.hosts import check_audience, is_bare_domain
+from fora_sdk.wire import ContentRulesHeader, ExchangeHeader, WellKnownPath
+
+if TYPE_CHECKING:
+    from collections.abc import Callable, Iterable, Mapping
+
+#: What :func:`parse_discovery_hint` found in one discovery header. The tokens are
+#: the Go ``HintState.String()`` vocabulary verbatim.
+#:
+#: ``"absent"``: the header was not sent, or the response was not a 403, where the
+#: headers carry no meaning. ``"valid"``: one value of the shape the protocol
+#: defines. ``"malformed"``: sent, but not of that shape, or sent more than once.
+#: An agent ignores a malformed header as if it were absent; it is reported apart
+#: so a caller can log an edge that is misconfigured.
+HintState = Literal["absent", "valid", "malformed"]
+
+#: The outcome of comparing a hint's Exchange with the Exchanges the publisher's
+#: manifest lists. The tokens are the Go ``HintAgreement.String()`` vocabulary.
+#:
+#: ``"no_exchange"``: the hint names no usable Exchange, so there is nothing to
+#: reconcile. ``"listed"``: the manifest lists it. ``"unlisted"``: it does not, and
+#: the manifest wins — the agent discards the hint, does not transact on an offer
+#: from that Exchange, and discovers at the Exchanges the manifest lists.
+HintAgreement = Literal["no_exchange", "listed", "unlisted"]
+
+_FORBIDDEN = 403
+_OWS = " \t"
+
+
+@dataclass(frozen=True)
+class DiscoveryHint:
+    """The typed reading of a 403's discovery headers.
+
+    ``content_rules`` and ``exchange`` hold the header values, with surrounding
+    spaces and tabs removed, only when their state is ``"valid"``; otherwise they
+    are ``None``. ``exchange`` is kept exactly as sent apart from that trimming.
+    Compare it with another domain through :func:`reconcile_discovery_hint` or
+    :func:`fora_sdk.check_audience`, which fold case and an explicit ``:443``,
+    never with ``==``.
+    """
+
+    content_rules: str | None = None
+    content_rules_state: HintState = "absent"
+    exchange: str | None = None
+    exchange_state: HintState = "absent"
+
+
+def parse_discovery_hint(status: int, headers: Mapping[str, str]) -> DiscoveryHint:
+    """Read the ``X-Content-Rules`` and ``X-FORA-Exchange`` headers of a response.
+
+    ``headers`` is any mapping of header names to values: an ``httpx.Headers`` (its
+    repeated lines are read one by one) or a plain ``dict``. Names are matched
+    case-insensitively.
+
+    The headers carry meaning only on a 403. For any other status both states are
+    ``"absent"``, whatever the headers hold. Each header is checked on its own, so a
+    malformed ``X-FORA-Exchange`` does not discard a valid ``X-Content-Rules``, and
+    the other way round.
+
+    ``X-Content-Rules`` is valid when it is exactly ``https://`` or ``http://``,
+    then a bare domain (:func:`fora_sdk.is_bare_domain`, a port allowed), then
+    :data:`fora_sdk.WellKnownPath`, with nothing after it: no userinfo, query,
+    fragment or trailing slash. The http scheme is admitted because whether a leg
+    may run in plaintext is the guarded transport's decision, not a shape
+    question; the guarded clients refuse it unless plaintext is enabled.
+    ``X-FORA-Exchange`` is valid when it is a bare domain, the same shape as
+    ``Offer.exchange``.
+
+    A header sent more than once is malformed: its lines are joined with ``", "``
+    before the check, and a comma can appear in neither shape.
+    """
+    if status != _FORBIDDEN:
+        return DiscoveryHint()
+    content_rules, content_rules_state = _judge(
+        _header_value(headers, ContentRulesHeader), _is_content_rules_url
+    )
+    exchange, exchange_state = _judge(_header_value(headers, ExchangeHeader), is_bare_domain)
+    return DiscoveryHint(content_rules, content_rules_state, exchange, exchange_state)
+
+
+def reconcile_discovery_hint(hint: DiscoveryHint, listed: Iterable[str]) -> HintAgreement:
+    """Report whether the publisher's manifest lists the Exchange the hint names.
+
+    ``listed`` holds the domain of every entry in the publisher manifest's
+    ``WellKnownManifest.exchanges``. The comparison is the identity match the
+    protocol uses for a request's recipient, :func:`fora_sdk.check_audience`: exact
+    domain, case folded, an explicit ``:443`` the same as no port, and a subdomain a
+    different party. A listed value that is not a bare domain names nobody and
+    matches nothing.
+
+    The hint is never authorization. ``"listed"`` says the two sources agree, not
+    that the Exchange's offers can be trusted: those are verified by their own
+    signatures, as on every other path.
+    """
+    if hint.exchange_state != "valid" or hint.exchange is None:
+        return "no_exchange"
+    for domain in listed:
+        if is_bare_domain(domain) and check_audience(domain, hint.exchange) == "accepted":
+            return "listed"
+    return "unlisted"
+
+
+def _judge(value: str | None, valid: Callable[[str], bool]) -> tuple[str | None, HintState]:
+    if value is None:
+        return None, "absent"
+    if valid(value):
+        return value, "valid"
+    return None, "malformed"
+
+
+def _header_value(headers: Mapping[str, str], name: str) -> str | None:
+    """Every line of the named header joined with ", ", trimmed, or None if absent."""
+    # httpx.Headers.items() merges a repeated header into one comma-joined value;
+    # multi_items() keeps the lines apart. Either way the join below is the same.
+    multi = getattr(headers, "multi_items", None)
+    items: Iterable[tuple[str, str]] = multi() if callable(multi) else headers.items()
+    want = name.lower()
+    values = [v for k, v in items if k.lower() == want]
+    if not values:
+        return None
+    return ", ".join(values).strip(_OWS)
+
+
+def _is_content_rules_url(v: str) -> bool:
+    """Whether ``v`` is the absolute URL of a FORA manifest.
+
+    String work rather than a URL parse on purpose: the three languages' URL
+    parsers disagree on edge cases, and a fixed shape with no optional parts leaves
+    nothing for them to disagree about.
+    """
+    for scheme in ("https://", "http://"):
+        if v.startswith(scheme):
+            rest = v[len(scheme) :]
+            break
+    else:
+        return False
+    if not rest.endswith(WellKnownPath):
+        return False
+    return is_bare_domain(rest[: -len(WellKnownPath)])
diff --git a/sdk/python/fora_sdk/wire.py b/sdk/python/fora_sdk/wire.py
index 86288813..7df74f35 100644
--- a/sdk/python/fora_sdk/wire.py
+++ b/sdk/python/fora_sdk/wire.py
@@ -56,6 +56,16 @@
 #: ``WellKnownManifestVersion`` versions the document's content; ``WellKnownPath``
 #: specifies where it is served.
 WellKnownPath = "/.well-known/fora.json"
+#: Edge discovery header pointing an agent the edge refused with 403 at the
+#: publisher's manifest: the absolute URL of its ``/.well-known/fora.json``. See
+#: "Edge discovery headers" in fora.proto, and
+#: :func:`fora_sdk.parse_discovery_hint`.
+ContentRulesHeader = "X-Content-Rules"
+#: Edge discovery header naming, on the same 403, one Exchange that sells the
+#: content directly, as a bare domain in the form of ``Offer.exchange``. An
+#: optimisation over ``ContentRulesHeader`` and never authorization: the manifest
+#: stays the authority on who sells.
+ExchangeHeader = "X-FORA-Exchange"
 
 
 def _parse_major(ver: str) -> str | None:
diff --git a/sdk/python/tests/test_discovery_hint_parity.py b/sdk/python/tests/test_discovery_hint_parity.py
new file mode 100644
index 00000000..6c7aaf44
--- /dev/null
+++ b/sdk/python/tests/test_discovery_hint_parity.py
@@ -0,0 +1,98 @@
+"""Replay of the shared discovery-hint corpus against the Go oracle.
+
+Each ``parse`` row is fed to :func:`parse_discovery_hint` twice: as an
+``httpx.Headers`` built from the row's ordered ``[name, value]`` pairs, which is
+what an agent holds after a real fetch, and as a plain ``dict`` whenever the row
+sends no header twice. Each ``reconcile`` row parses the same way and then checks
+the hinted Exchange against the domains the publisher manifest lists. Pinned to
+``discovery-hint-vectors.json``.
+"""
+
+from __future__ import annotations
+
+import httpx
+import pytest
+
+from conftest import GO_TESTDATA, load_json
+
+from fora_sdk import (
+    ContentRulesHeader,
+    DiscoveryHint,
+    ExchangeHeader,
+    parse_discovery_hint,
+    reconcile_discovery_hint,
+)
+
+_DOC = load_json(GO_TESTDATA / "discovery-hint-vectors.json")
+_PARSE = _DOC["parse"]
+_RECONCILE = _DOC["reconcile"]
+
+
+def _expected(hint: DiscoveryHint) -> dict[str, str]:
+    """The hint in the corpus's vocabulary, where an unset value is ""."""
+    return {
+        "content_rules": hint.content_rules or "",
+        "content_rules_state": hint.content_rules_state,
+        "exchange": hint.exchange or "",
+        "exchange_state": hint.exchange_state,
+    }
+
+
+def _wire_headers(pairs: list[list[str]]) -> httpx.Headers:
+    """The pairs as httpx holds a received response's headers: raw bytes on the wire.
+
+    A received header arrives as bytes, which httpx decodes on read (ASCII, then
+    UTF-8); a ``str`` value it would instead refuse to encode outside ASCII. The
+    non-ASCII rows therefore go in as UTF-8 bytes, the way a fetch delivers them.
+    """
+    return httpx.Headers([(name.encode(), value.encode("utf-8")) for name, value in pairs])
+
+
+def _has_repeats(pairs: list[list[str]]) -> bool:
+    names = [name.lower() for name, _ in pairs]
+    return len(names) != len(set(names))
+
+
+def test_header_names_match_the_constants() -> None:
+    assert _DOC["header_names"] == {
+        "content_rules": ContentRulesHeader,
+        "exchange": ExchangeHeader,
+    }
+
+
+def test_every_state_and_agreement_is_exercised() -> None:
+    states = {v["expected"][k] for v in _PARSE for k in ("content_rules_state", "exchange_state")}
+    assert states == {"absent", "valid", "malformed"}
+    assert {v["expected_agreement"] for v in _RECONCILE} == {"no_exchange", "listed", "unlisted"}
+
+
+@pytest.mark.parametrize("vector", _PARSE, ids=[v["name"] for v in _PARSE])
+def test_parse_matches_go_oracle(vector: dict) -> None:
+    pairs = [(name, value) for name, value in vector["headers"]]
+    got = parse_discovery_hint(vector["status"], _wire_headers(vector["headers"]))
+    assert _expected(got) == vector["expected"]
+    if not _has_repeats(vector["headers"]):
+        assert _expected(parse_discovery_hint(vector["status"], dict(pairs))) == vector["expected"]
+
+
+@pytest.mark.parametrize("vector", _RECONCILE, ids=[v["name"] for v in _RECONCILE])
+def test_reconcile_matches_go_oracle(vector: dict) -> None:
+    hint = parse_discovery_hint(vector["status"], _wire_headers(vector["headers"]))
+    assert reconcile_discovery_hint(hint, vector["listed"]) == vector["expected_agreement"]
+
+
+def test_hint_from_a_real_403() -> None:
+    """The parser reads the headers of an httpx.Response, the type a fetch returns."""
+    resp = httpx.Response(
+        403,
+        headers=[
+            ("X-Content-Rules", "https://publisher.example/.well-known/fora.json"),
+            ("X-FORA-Exchange", "exchange.example"),
+        ],
+    )
+    hint = parse_discovery_hint(resp.status_code, resp.headers)
+    assert hint == DiscoveryHint(
+        "https://publisher.example/.well-known/fora.json", "valid", "exchange.example", "valid"
+    )
+    assert reconcile_discovery_hint(hint, ["exchange.example"]) == "listed"
+    assert reconcile_discovery_hint(hint, ["other-exchange.example"]) == "unlisted"
diff --git a/sdk/python/tests/test_parity_corpora_nonempty.py b/sdk/python/tests/test_parity_corpora_nonempty.py
index ab7c2b38..b57753f4 100644
--- a/sdk/python/tests/test_parity_corpora_nonempty.py
+++ b/sdk/python/tests/test_parity_corpora_nonempty.py
@@ -73,6 +73,12 @@ def _whole(doc: Any) -> Any:
     (GO_TESTDATA / "scopes-vectors.json", lambda d: d["subset"], "scopes-subset"),
     (GO_TESTDATA / "audience-vectors.json", lambda d: d["bare_domain"], "bare-domain"),
     (GO_TESTDATA / "audience-vectors.json", lambda d: d["audience"], "audience"),
+    (GO_TESTDATA / "discovery-hint-vectors.json", lambda d: d["parse"], "discovery-hint-parse"),
+    (
+        GO_TESTDATA / "discovery-hint-vectors.json",
+        lambda d: d["reconcile"],
+        "discovery-hint-reconcile",
+    ),
     (GO_TESTDATA / "registration-schema-vectors.json", lambda d: d["compile"], "regschema-compile"),
     (
         GO_TESTDATA / "registration-schema-vectors.json",
diff --git a/sdk/python/tests/test_wire_parity.py b/sdk/python/tests/test_wire_parity.py
index 43dbf99b..bfd3fe31 100644
--- a/sdk/python/tests/test_wire_parity.py
+++ b/sdk/python/tests/test_wire_parity.py
@@ -35,6 +35,8 @@
     "SignatureAgentHeader": "SignatureAgentHeader",
     "AgentKeyHeader": "AgentKeyHeader",
     "WellKnownPath": "WellKnownPath",
+    "ContentRulesHeader": "ContentRulesHeader",
+    "ExchangeHeader": "ExchangeHeader",
 }
 
 

From 6d21d4a9d382be53aaf0b57a098653f773250113 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:43:02 -0400
Subject: [PATCH 041/164] Read the edge discovery headers in the TypeScript SDK

src/discovery-hint.ts ports the Go helpers under the new export path
./discovery-hint, in the SDK and root manifests. parseDiscoveryHint
(status, headers) takes anything with a case-insensitive get that answers
null for an absent header: a fetch Headers, or the headers of the
resolvers' FetchResponse. It returns a DiscoveryHint: each value, or
undefined, with a HintState of "absent", "valid" or "malformed".
reconcileDiscoveryHint(hint, listed) answers "listed", "unlisted" or
"no_exchange" with the checkAudience identity match. wire.ts adds
ContentRulesHeader and ExchangeHeader.

The parity test replays discovery-hint-vectors.json through a Headers
built from the corpus pairs, passing a non-ASCII value as its UTF-8 bytes
the way a received header arrives, and reads a real 403 Response. The
wire-constants replay covers the two header names.
---
 package.json                               |   1 +
 sdk/ts/package.json                        |   1 +
 sdk/ts/src/discovery-hint.ts               | 168 +++++++++++++++++++++
 sdk/ts/src/wire.ts                         |  15 ++
 sdk/ts/tests/discovery-hint.parity.test.ts | 115 ++++++++++++++
 sdk/ts/tests/wire.parity.test.ts           |   2 +
 6 files changed, 302 insertions(+)
 create mode 100644 sdk/ts/src/discovery-hint.ts
 create mode 100644 sdk/ts/tests/discovery-hint.parity.test.ts

diff --git a/package.json b/package.json
index e1284ec7..019e5fd1 100644
--- a/package.json
+++ b/package.json
@@ -23,6 +23,7 @@
     "./scopes": "./sdk/ts/src/scopes.ts",
     "./hashurl": "./sdk/ts/src/hashurl.ts",
     "./hosts": "./sdk/ts/src/hosts.ts",
+    "./discovery-hint": "./sdk/ts/src/discovery-hint.ts",
     "./regschema": "./sdk/ts/src/regschema.ts",
     "./licenseterm": "./sdk/ts/src/licenseterm.ts",
     "./music": "./sdk/ts/src/music.ts",
diff --git a/sdk/ts/package.json b/sdk/ts/package.json
index 2215ee04..8f1ba271 100644
--- a/sdk/ts/package.json
+++ b/sdk/ts/package.json
@@ -18,6 +18,7 @@
     "./scopes": "./src/scopes.ts",
     "./hashurl": "./src/hashurl.ts",
     "./hosts": "./src/hosts.ts",
+    "./discovery-hint": "./src/discovery-hint.ts",
     "./regschema": "./src/regschema.ts",
     "./licenseterm": "./src/licenseterm.ts",
     "./music": "./src/music.ts",
diff --git a/sdk/ts/src/discovery-hint.ts b/sdk/ts/src/discovery-hint.ts
new file mode 100644
index 00000000..b4d8c1df
--- /dev/null
+++ b/sdk/ts/src/discovery-hint.ts
@@ -0,0 +1,168 @@
+// The edge discovery headers: what a publisher's edge tells an unlicensed agent
+// when it refuses it. TS port of the sdk/go oracle (helpers/discoveryhint.go).
+//
+// A publisher's edge answers a request for licensed content that carries no valid
+// signed delivery URL with 403. That answer carries up to two headers, specified
+// under "Edge discovery headers" in the fora.proto file header:
+//
+//   X-Content-Rules: https://publisher.example/.well-known/fora.json
+//   X-FORA-Exchange: exchange.example
+//
+// X-Content-Rules points at the publisher's manifest, which is the authority on
+// the licensing terms and on which Exchanges sell the content. X-FORA-Exchange
+// names one Exchange that sells it directly, so an agent can start discovery there
+// without reading the manifest first. The second is an optimisation over the first
+// and never a replacement for it.
+//
+// parseDiscoveryHint reads the two headers off a response and checks each value's
+// shape. reconcileDiscoveryHint compares the hinted Exchange with the Exchanges the
+// manifest lists, once the agent has read it. Neither dials anything: fetching the
+// manifest, and resolving the Exchange's endpoint from the Exchange's own manifest,
+// are the resolvers' job. The header names an Exchange; it never supplies the
+// address to dial.
+//
+// Pure string work, no IO. Pinned to the Go oracle by the shared corpus at
+// sdk/go/helpers/testdata/discovery-hint-vectors.json.
+
+import { checkAudience, isBareDomain } from "./hosts.ts";
+import { ContentRulesHeader, ExchangeHeader, WellKnownPath } from "./wire.ts";
+
+/**
+ * What parseDiscoveryHint found in one discovery header. The tokens are the Go
+ * `HintState.String()` vocabulary verbatim.
+ *
+ * `absent`: the header was not sent, or the response was not a 403, where the
+ * headers carry no meaning. `valid`: one value of the shape the protocol defines.
+ * `malformed`: sent, but not of that shape, or sent more than once. An agent
+ * ignores a malformed header as if it were absent; it is reported apart so a
+ * caller can log an edge that is misconfigured.
+ */
+export type HintState = "absent" | "valid" | "malformed";
+
+/**
+ * The outcome of comparing a hint's Exchange with the Exchanges the publisher's
+ * manifest lists. The tokens are the Go `HintAgreement.String()` vocabulary.
+ *
+ * `no_exchange`: the hint names no usable Exchange, so there is nothing to
+ * reconcile. `listed`: the manifest lists it. `unlisted`: it does not, and the
+ * manifest wins — the agent discards the hint, does not transact on an offer from
+ * that Exchange, and discovers at the Exchanges the manifest lists.
+ */
+export type HintAgreement = "no_exchange" | "listed" | "unlisted";
+
+/**
+ * The typed reading of a 403's discovery headers.
+ *
+ * `contentRules` and `exchange` hold the header values, with surrounding spaces
+ * and tabs removed, only when their state is `valid`; otherwise they are
+ * undefined. `exchange` is kept exactly as sent apart from that trimming. Compare
+ * it with another domain through reconcileDiscoveryHint or checkAudience, which
+ * fold case and an explicit `:443`, never with `===`.
+ */
+export interface DiscoveryHint {
+	readonly contentRules: string | undefined;
+	readonly contentRulesState: HintState;
+	readonly exchange: string | undefined;
+	readonly exchangeState: HintState;
+}
+
+/**
+ * The headers parseDiscoveryHint reads: anything with a case-insensitive `get`
+ * that answers null for an absent header — a fetch `Headers`, or the `headers` of
+ * this SDK's resolver FetchResponse. A fetch `Headers` joins a repeated header's
+ * lines with ", " on read, which the rule below refuses.
+ */
+export interface HeaderReader {
+	get(name: string): string | null;
+}
+
+const FORBIDDEN = 403;
+
+/**
+ * parseDiscoveryHint reads the X-Content-Rules and X-FORA-Exchange headers of a
+ * response with the given HTTP status.
+ *
+ * The headers carry meaning only on a 403. For any other status both states are
+ * `absent`, whatever the headers hold. Each header is checked on its own, so a
+ * malformed X-FORA-Exchange does not discard a valid X-Content-Rules, and the
+ * other way round.
+ *
+ * X-Content-Rules is valid when it is exactly `https://` or `http://`, then a bare
+ * domain (isBareDomain, a port allowed), then WellKnownPath, with nothing after
+ * it: no userinfo, query, fragment or trailing slash. The http scheme is admitted
+ * because whether a leg may run in plaintext is the guarded transport's decision,
+ * not a shape question; the guarded fetch refuses it unless plaintext is enabled.
+ * X-FORA-Exchange is valid when it is a bare domain, the same shape as
+ * Offer.exchange.
+ *
+ * A header sent more than once is malformed: its lines arrive joined with ", ",
+ * and a comma can appear in neither shape.
+ */
+export function parseDiscoveryHint(status: number, headers: HeaderReader): DiscoveryHint {
+	if (status !== FORBIDDEN) {
+		return { contentRules: undefined, contentRulesState: "absent", exchange: undefined, exchangeState: "absent" };
+	}
+	const [contentRules, contentRulesState] = judge(headerValue(headers, ContentRulesHeader), isContentRulesURL);
+	const [exchange, exchangeState] = judge(headerValue(headers, ExchangeHeader), isBareDomain);
+	return { contentRules, contentRulesState, exchange, exchangeState };
+}
+
+/**
+ * reconcileDiscoveryHint reports whether the publisher's manifest lists the
+ * Exchange the hint names.
+ *
+ * `listed` holds the domain of every entry in the publisher manifest's
+ * WellKnownManifest.exchanges. The comparison is the identity match the protocol
+ * uses for a request's recipient, checkAudience: exact domain, case folded, an
+ * explicit `:443` the same as no port, and a subdomain a different party. A listed
+ * value that is not a bare domain names nobody and matches nothing.
+ *
+ * The hint is never authorization. `listed` says the two sources agree, not that
+ * the Exchange's offers can be trusted: those are verified by their own
+ * signatures, as on every other path.
+ */
+export function reconcileDiscoveryHint(hint: DiscoveryHint, listed: Iterable<string>): HintAgreement {
+	if (hint.exchangeState !== "valid" || hint.exchange === undefined) {
+		return "no_exchange";
+	}
+	for (const domain of listed) {
+		if (isBareDomain(domain) && checkAudience(domain, hint.exchange) === "accepted") {
+			return "listed";
+		}
+	}
+	return "unlisted";
+}
+
+function judge(value: string | undefined, valid: (v: string) => boolean): [string | undefined, HintState] {
+	if (value === undefined) {
+		return [undefined, "absent"];
+	}
+	return valid(value) ? [value, "valid"] : [undefined, "malformed"];
+}
+
+// headerValue is the named header's value with spaces and tabs trimmed from both
+// ends, or undefined when the header is absent. A fetch Headers already trims and
+// joins repeated lines; trimming again is what makes a hand-written reader agree.
+function headerValue(headers: HeaderReader, name: string): string | undefined {
+	const v = headers.get(name);
+	return v === null ? undefined : v.replace(/^[ \t]+|[ \t]+$/g, "");
+}
+
+// isContentRulesURL is string work rather than a URL parse on purpose: the three
+// languages' URL parsers disagree on edge cases (a backslash, an empty port,
+// percent-encoding in the host), and a fixed shape with no optional parts leaves
+// nothing for them to disagree about.
+function isContentRulesURL(v: string): boolean {
+	let rest: string;
+	if (v.startsWith("https://")) {
+		rest = v.slice("https://".length);
+	} else if (v.startsWith("http://")) {
+		rest = v.slice("http://".length);
+	} else {
+		return false;
+	}
+	if (!rest.endsWith(WellKnownPath)) {
+		return false;
+	}
+	return isBareDomain(rest.slice(0, rest.length - WellKnownPath.length));
+}
diff --git a/sdk/ts/src/wire.ts b/sdk/ts/src/wire.ts
index 589d8d4f..736c3471 100644
--- a/sdk/ts/src/wire.ts
+++ b/sdk/ts/src/wire.ts
@@ -59,6 +59,21 @@ export const AgentKeyHeader = "X-FORA-Agent-Key";
  */
 export const WellKnownPath = "/.well-known/fora.json";
 
+/**
+ * Edge discovery header pointing an agent the edge refused with 403 at the
+ * publisher's manifest: the absolute URL of its `/.well-known/fora.json`. See
+ * "Edge discovery headers" in fora.proto, and `parseDiscoveryHint`.
+ */
+export const ContentRulesHeader = "X-Content-Rules";
+
+/**
+ * Edge discovery header naming, on the same 403, one Exchange that sells the
+ * content directly, as a bare domain in the form of Offer.exchange. An
+ * optimisation over `ContentRulesHeader` and never authorization: the manifest
+ * stays the authority on who sells.
+ */
+export const ExchangeHeader = "X-FORA-Exchange";
+
 const ASCII_DIGITS = /^[0-9]+$/;
 
 /** The MAJOR run of a MAJOR.MINOR string, or undefined when `ver` is not one.
diff --git a/sdk/ts/tests/discovery-hint.parity.test.ts b/sdk/ts/tests/discovery-hint.parity.test.ts
new file mode 100644
index 00000000..a9ffa9fe
--- /dev/null
+++ b/sdk/ts/tests/discovery-hint.parity.test.ts
@@ -0,0 +1,115 @@
+// Replay of the shared discovery-hint corpus against the Go oracle.
+//
+// Each `parse` row is fed to parseDiscoveryHint through a fetch `Headers` built
+// from the row's ordered [name, value] pairs, which is what an agent holds after
+// a real fetch. Each `reconcile` row parses the same way and then checks the
+// hinted Exchange against the domains the publisher manifest lists. Pinned to
+// discovery-hint-vectors.json.
+
+import { describe, expect, it } from "vitest";
+import vectorsFile from "../../go/helpers/testdata/discovery-hint-vectors.json";
+import {
+	type DiscoveryHint,
+	parseDiscoveryHint,
+	reconcileDiscoveryHint,
+} from "../src/discovery-hint.ts";
+import { ContentRulesHeader, ExchangeHeader } from "../src/wire.ts";
+
+type Expected = {
+	content_rules: string;
+	content_rules_state: string;
+	exchange: string;
+	exchange_state: string;
+};
+type ParseVector = { name: string; status: number; headers: [string, string][]; expected: Expected };
+type ReconcileVector = {
+	name: string;
+	status: number;
+	headers: [string, string][];
+	listed: string[];
+	expected_agreement: string;
+};
+type DiscoveryHintFile = {
+	header_names: { content_rules: string; exchange: string };
+	parse: ParseVector[];
+	reconcile: ReconcileVector[];
+};
+
+const doc = vectorsFile as DiscoveryHintFile;
+
+// A received header value is a byte string, so a non-ASCII row reaches Headers
+// as its UTF-8 bytes read one per character, the way undici hands a raw header to
+// Headers. Decoding back gives the string the Go oracle saw.
+const toByteString = (v: string): string => String.fromCharCode(...new TextEncoder().encode(v));
+const fromByteString = (v: string): string =>
+	new TextDecoder().decode(Uint8Array.from(v, (c) => c.charCodeAt(0)));
+
+function headersOf(pairs: [string, string][]): Headers {
+	const h = new Headers();
+	for (const [name, value] of pairs) {
+		h.append(name, toByteString(value));
+	}
+	return h;
+}
+
+/** The hint in the corpus's vocabulary, where an unset value is "". */
+function asExpected(hint: DiscoveryHint): Expected {
+	return {
+		content_rules: hint.contentRules === undefined ? "" : fromByteString(hint.contentRules),
+		content_rules_state: hint.contentRulesState,
+		exchange: hint.exchange === undefined ? "" : fromByteString(hint.exchange),
+		exchange_state: hint.exchangeState,
+	};
+}
+
+describe("discovery-hint corpus", () => {
+	it("names the headers the constants name", () => {
+		expect(doc.header_names).toEqual({ content_rules: ContentRulesHeader, exchange: ExchangeHeader });
+	});
+
+	it("exercises every state and every agreement", () => {
+		const states = new Set(doc.parse.flatMap((v) => [v.expected.content_rules_state, v.expected.exchange_state]));
+		expect([...states].sort()).toEqual(["absent", "malformed", "valid"]);
+		const agreements = new Set(doc.reconcile.map((v) => v.expected_agreement));
+		expect([...agreements].sort()).toEqual(["listed", "no_exchange", "unlisted"]);
+	});
+
+	for (const v of doc.parse) {
+		it(`parse: ${v.name}`, () => {
+			expect(asExpected(parseDiscoveryHint(v.status, headersOf(v.headers)))).toEqual(v.expected);
+		});
+	}
+
+	for (const v of doc.reconcile) {
+		it(`reconcile: ${v.name} → ${v.expected_agreement}`, () => {
+			const hint = parseDiscoveryHint(v.status, headersOf(v.headers));
+			expect(reconcileDiscoveryHint(hint, v.listed)).toBe(v.expected_agreement);
+		});
+	}
+
+	it("reads the headers of a real 403 Response", () => {
+		const resp = new Response(null, {
+			status: 403,
+			headers: {
+				"X-Content-Rules": "https://publisher.example/.well-known/fora.json",
+				"X-FORA-Exchange": "exchange.example",
+			},
+		});
+		const hint = parseDiscoveryHint(resp.status, resp.headers);
+		expect(hint).toEqual({
+			contentRules: "https://publisher.example/.well-known/fora.json",
+			contentRulesState: "valid",
+			exchange: "exchange.example",
+			exchangeState: "valid",
+		});
+		expect(reconcileDiscoveryHint(hint, ["exchange.example"])).toBe("listed");
+		expect(reconcileDiscoveryHint(hint, ["other-exchange.example"])).toBe("unlisted");
+	});
+
+	it("trims a hand-written reader's value the way Headers does", () => {
+		const reader = { get: (n: string) => (n.toLowerCase() === "x-fora-exchange" ? " exchange.example\t" : null) };
+		const hint = parseDiscoveryHint(403, reader);
+		expect(hint.exchange).toBe("exchange.example");
+		expect(hint.contentRulesState).toBe("absent");
+	});
+});
diff --git a/sdk/ts/tests/wire.parity.test.ts b/sdk/ts/tests/wire.parity.test.ts
index 906b93d9..e160f6b3 100644
--- a/sdk/ts/tests/wire.parity.test.ts
+++ b/sdk/ts/tests/wire.parity.test.ts
@@ -33,6 +33,8 @@ const exportFor: Record<string, keyof typeof wire> = {
 	SignatureAgentHeader: "SignatureAgentHeader",
 	AgentKeyHeader: "AgentKeyHeader",
 	WellKnownPath: "WellKnownPath",
+	ContentRulesHeader: "ContentRulesHeader",
+	ExchangeHeader: "ExchangeHeader",
 };
 
 describe("sdk/ts wire constants match the sdk/go oracle vectors", () => {

From e35dbb40a8fad925ade08ddf109adec1588c230c Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:43:02 -0400
Subject: [PATCH 042/164] Map the discovery-hint helpers and regenerate the
 parity matrix

Seven new Go symbols map to their Python and TypeScript names:
helpers.ParseDiscoveryHint, ReconcileDiscoveryHint, DiscoveryHint,
HintState and HintAgreement, and the ContentRulesHeader and
ExchangeHeader constants. The six members of HintState and HintAgreement
are exclusions, as the AudienceVerdict members are: Python and TypeScript
spell them as literals, and the shared corpus pins each token. No
divergence is added, so the allowlist baseline is unchanged. The parity
matrix is regenerated: 176 symbols at parity and 42 tri-replayed corpora.
---
 docs/sdk-parity-matrix.md  | 16 ++++++++++++++-
 sdk/parity/symbol-map.json | 41 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 56 insertions(+), 1 deletion(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 55f17bab..ee271363 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 169 symbols at cross-language parity · 17 documented divergences · 193 Go-idiomatic exclusions · 41 conformance corpora, each tri-replayed.
+**At a glance:** 176 symbols at cross-language parity · 17 documented divergences · 199 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -44,19 +44,24 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ConnectProtocolVersion` | `ConnectProtocolVersion` | `ConnectProtocolVersion` |
 | `ConnectProtocolVersionHeader` | `ConnectProtocolVersionHeader` | `ConnectProtocolVersionHeader` |
 | `ContentDigest` | `content_digest` | `contentDigest` |
+| `ContentRulesHeader` | `ContentRulesHeader` | `ContentRulesHeader` |
 | `ContentTypeJSON` | `ContentTypeJSON` | `ContentTypeJSON` |
 | `ContentTypeProto` | `ContentTypeProto` | `ContentTypeProto` |
 | `DefaultKeyValidity` | `DEFAULT_KEY_VALIDITY` | `DEFAULT_KEY_VALIDITY_MS` |
 | `DirectoryDocument` | `directory_document` | `directoryDocument` |
+| `DiscoveryHint` | `DiscoveryHint` | `DiscoveryHint` |
 | `DisputeFailureDetail` | `dispute_failure_detail` | `disputeFailureDetail` |
 | `DomainVerificationFailureDetail` | `domain_verification_failure_detail` | `domainVerificationFailureDetail` |
 | `EntryVerdict` | `EntryVerdict` | `EntryVerdict` |
 | `ErrManifestVersionRefused` | `ManifestVersionRefusedError` | `ManifestVersionRefused` |
 | `ErrStrictViolation` | `StrictViolationError` | `StrictViolation` |
 | `ErrUnknownKey` | `UnknownKeyError` | `UnknownKey` |
+| `ExchangeHeader` | `ExchangeHeader` | `ExchangeHeader` |
 | `FormatMoney` | `format_money` | `formatMoney` |
 | `GenerateKey` | `generate_key` | `generateKey` |
 | `HashURL` | `hash_url` | `hashUrl` |
+| `HintAgreement` | `HintAgreement` | `HintAgreement` |
+| `HintState` | `HintState` | `HintState` |
 | `HostAnchored` | `host_anchored` | `hostAnchored` |
 | `HostOf` | `host_of` | `hostOf` |
 | `IsBareDomain` | `is_bare_domain` | `isBareDomain` |
@@ -80,9 +85,11 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `NormalizeResourceEntry` | `normalize_resource_entry` | `normalizeResourceEntry` |
 | `NormalizeScopes` | `normalize_scopes` | `normalizeScopes` |
 | `OfferSignatureAlgorithm` | `OFFER_SIGNATURE_ALGORITHM` | `OFFER_SIGNATURE_ALGORITHM` |
+| `ParseDiscoveryHint` | `parse_discovery_hint` | `parseDiscoveryHint` |
 | `ParseMoney` | `parse_money` | `parseMoney` |
 | `ProtocolVersion` | `ProtocolVersion` | `ProtocolVersion` |
 | `Reason` | `reason` | `reason` |
+| `ReconcileDiscoveryHint` | `reconcile_discovery_hint` | `reconcileDiscoveryHint` |
 | `RegistrationDataVerdict` | `RegistrationDataVerdict` | `RegistrationDataVerdict` |
 | `RegistrationFailureDetail` | `registration_failure_detail` | `registrationFailureDetail` |
 | `RegistrationSchema` | `RegistrationSchema` | `RegistrationSchema` |
@@ -385,6 +392,12 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrUnknownFields` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrUnsupportedAlgorithm` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.FromContext` | Go context.Context accessor; py/ts thread verified-request state explicitly. |
+| `helpers.HintAbsent` | Member of the mapped helpers.HintState vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
+| `helpers.HintListed` | Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
+| `helpers.HintMalformed` | Member of the mapped helpers.HintState vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
+| `helpers.HintNoExchange` | Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
+| `helpers.HintUnlisted` | Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
+| `helpers.HintValid` | Member of the mapped helpers.HintState vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
 | `helpers.NewContext` | Go context.Context accessor; py/ts thread verified-request state explicitly. |
 | `helpers.NewEd25519Signer` | Go Ed25519 Signer constructor; py/ts inject a sign function rather than constructing a named signer. |
 | `helpers.NewEd25519SignerFromSeed` | Go Ed25519 Signer-from-seed constructor; py/ts inject a sign function rather than constructing a named signer. |
@@ -457,6 +470,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 |---|---|---|---|
 | `helpers/testdata/acceptance-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/audience-vectors.json` | ✅ | ✅ | ✅ |
+| `helpers/testdata/discovery-hint-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/error-detail-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/hashurl-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/host-rule-vectors.json` | ✅ | ✅ | ✅ |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 7d57006c..6864a732 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -131,6 +131,12 @@
     "helpers.ErrUnknownFields": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrUnsupportedAlgorithm": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.FromContext": "Go context.Context accessor; py/ts thread verified-request state explicitly.",
+    "helpers.HintAbsent": "Member of the mapped helpers.HintState vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer.",
+    "helpers.HintListed": "Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer.",
+    "helpers.HintMalformed": "Member of the mapped helpers.HintState vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer.",
+    "helpers.HintNoExchange": "Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer.",
+    "helpers.HintUnlisted": "Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer.",
+    "helpers.HintValid": "Member of the mapped helpers.HintState vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer.",
     "helpers.NewContext": "Go context.Context accessor; py/ts thread verified-request state explicitly.",
     "helpers.NewEd25519Signer": "Go Ed25519 Signer constructor; py/ts inject a sign function rather than constructing a named signer.",
     "helpers.NewEd25519SignerFromSeed": "Go Ed25519 Signer-from-seed constructor; py/ts inject a sign function rather than constructing a named signer.",
@@ -484,6 +490,11 @@
       "python": "content_digest",
       "ts": "contentDigest"
     },
+    "helpers.ContentRulesHeader": {
+      "allowlist_reason": null,
+      "python": "ContentRulesHeader",
+      "ts": "ContentRulesHeader"
+    },
     "helpers.ContentTypeJSON": {
       "allowlist_reason": null,
       "python": "ContentTypeJSON",
@@ -504,6 +515,11 @@
       "python": "directory_document",
       "ts": "directoryDocument"
     },
+    "helpers.DiscoveryHint": {
+      "allowlist_reason": null,
+      "python": "DiscoveryHint",
+      "ts": "DiscoveryHint"
+    },
     "helpers.DisputeFailureDetail": {
       "allowlist_reason": null,
       "python": "dispute_failure_detail",
@@ -529,6 +545,11 @@
       "python": "UnknownKeyError",
       "ts": "UnknownKey"
     },
+    "helpers.ExchangeHeader": {
+      "allowlist_reason": null,
+      "python": "ExchangeHeader",
+      "ts": "ExchangeHeader"
+    },
     "helpers.FormatMoney": {
       "allowlist_reason": null,
       "python": "format_money",
@@ -544,6 +565,16 @@
       "python": "hash_url",
       "ts": "hashUrl"
     },
+    "helpers.HintAgreement": {
+      "allowlist_reason": null,
+      "python": "HintAgreement",
+      "ts": "HintAgreement"
+    },
+    "helpers.HintState": {
+      "allowlist_reason": null,
+      "python": "HintState",
+      "ts": "HintState"
+    },
     "helpers.HostAnchored": {
       "allowlist_reason": null,
       "python": "host_anchored",
@@ -664,6 +695,11 @@
       "python": "OFFER_SIGNATURE_ALGORITHM",
       "ts": "OFFER_SIGNATURE_ALGORITHM"
     },
+    "helpers.ParseDiscoveryHint": {
+      "allowlist_reason": null,
+      "python": "parse_discovery_hint",
+      "ts": "parseDiscoveryHint"
+    },
     "helpers.ParseMoney": {
       "allowlist_reason": null,
       "python": "parse_money",
@@ -684,6 +720,11 @@
       "python": "ProtocolVersion",
       "ts": "ProtocolVersion"
     },
+    "helpers.ReconcileDiscoveryHint": {
+      "allowlist_reason": null,
+      "python": "reconcile_discovery_hint",
+      "ts": "reconcileDiscoveryHint"
+    },
     "helpers.WellKnownManifestVersion": {
       "allowlist_reason": null,
       "python": "WellKnownManifestVersion",

From 95d7999c3bc9c1494eeefa6a3ff2bbd5b00ed5c7 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:44:35 -0400
Subject: [PATCH 043/164] Describe the edge discovery headers in the docs and
 changelogs

The discovery-paths page presented X-Content-Rules as a FORA extension
pointing at an Exchange, and X-FORA-Exchange appeared nowhere. Path C now
shows the 403 with both headers, the agent resolving the named Exchange's
endpoint from that Exchange's own fora.json, and the listing check
against the publisher's manifest before it commits to an offer. A new
"Edge discovery headers" section summarizes the normative text: each
header's value, when an edge sends it, how an agent uses it, the trust
rule that the manifest wins, and the SDK parser in each language.

The standards-layering row for the edge function, the edge deployment
page (onboarding diagram, a table of where each header value comes from,
and the verification step), the bot-detection 403 example and its header
semantics, the CloudFront snippet and edge config in the CDN adapters
page, the edge overview, the agent fetch flow, the scenario walkthrough,
the fora.json example's fallback path and the landing page snippet now
say that X-Content-Rules is the publisher's fora.json URL and
X-FORA-Exchange an Exchange's bare domain. The bot-detection body drops
info_url, which carried the Exchange URL, and keeps fora_json_url. The
proto reference page gains a note on both headers.

The agent SDK overview's harness table gains the discovery-hint row, the
three SDK READMEs list the parser and the listing check, and the
Unreleased entry in both changelogs adds the headers, the SDK helpers and
the new corpus.
---
 proto/CHANGELOG.md                            | 41 +++++++++++++
 sdk/go/README.md                              |  7 +++
 sdk/python/README.md                          |  7 +++
 sdk/ts/README.md                              |  7 +++
 .../docs/components/agent-sdk/fetch-flow.mdx  |  6 +-
 .../docs/components/agent-sdk/overview.mdx    |  1 +
 .../edge-function/bot-detection.mdx           | 12 ++--
 .../components/edge-function/cdn-adapters.mdx | 18 ++++--
 .../components/edge-function/deployment.mdx   | 15 ++++-
 .../components/edge-function/overview.mdx     |  8 +--
 .../content/docs/protocol/discovery-paths.mdx | 57 ++++++++++++++++---
 .../docs/protocol/scenario-walkthrough.mdx    |  2 +-
 .../docs/protocol/standards-layering.mdx      |  2 +-
 .../src/content/docs/reference/changelog.mdx  | 44 ++++++++++++++
 .../docs/reference/fora-json-example.mdx      | 11 +++-
 .../src/content/docs/reference/proto-fora.mdx |  4 ++
 website/src/pages/index.astro                 |  6 +-
 17 files changed, 215 insertions(+), 33 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 5674726d..3a7dff61 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,47 @@
 
 ## Unreleased
 
+**Edge discovery headers: `X-Content-Rules` and `X-FORA-Exchange` (HTTP convention
+specified; no message change).** When a publisher's edge refuses an unlicensed AI agent
+with 403, it answers with two discovery headers, and they are now part of the protocol.
+Neither was defined before. The documentation presented `X-Content-Rules` as a FORA
+extension pointing at the Exchange, which was wrong: it points at the publisher's
+manifest. The normative text is the new "Edge discovery headers" section of the
+`fora.proto` file header.
+
+- `X-Content-Rules` is the absolute URL of the publisher's manifest, exactly
+  `https://{domain}/.well-known/fora.json` with the publisher's bare domain (a port
+  allowed) and no userinfo, query, fragment, trailing slash or other path. An edge
+  SHOULD send it on every 403 to a request for licensed content that carries no valid
+  signed URL.
+- `X-FORA-Exchange` is the bare domain of one Exchange that sells the content directly,
+  in the same form as `Offer.exchange`. An edge MAY send it, only together with
+  `X-Content-Rules`, and only for an Exchange its manifest lists. It is an optimisation
+  over `X-Content-Rules`, not a replacement.
+- An agent reads the headers only from a 403, and ignores a value of the wrong shape as
+  if it were absent. With `X-FORA-Exchange` it MAY start discovery at the named
+  Exchange without fetching the publisher's manifest first. It resolves that
+  Exchange's endpoint from the Exchange's own `fora.json`, never from the header, under
+  the request-recipient rule.
+- An agent MUST NOT treat `X-FORA-Exchange` as authorization. Offers are verified by
+  their signatures, and the publisher's manifest stays the authority on which Exchanges
+  sell the content. When the header names an Exchange the manifest does not list, the
+  manifest wins: the agent discards the header, does not transact on an offer from that
+  Exchange, and discovers at the Exchanges the manifest lists.
+
+SDKs, in all three languages: `parse_discovery_hint(status, headers)` (Python, from
+`fora_sdk`), `parseDiscoveryHint(status, headers)` (TypeScript, export path
+`./discovery-hint`) and `helpers.ParseDiscoveryHint(status, header)` (Go) read a
+response's discovery headers into a `DiscoveryHint`: each value with a state of
+`absent`, `valid` or `malformed`. Any status other than 403 reads as absent, and a header
+sent twice is malformed. `reconcile_discovery_hint`, `reconcileDiscoveryHint` and
+`helpers.ReconcileDiscoveryHint` check the hinted Exchange against the domains the
+publisher manifest's `exchanges` lists, with the recipient identity match, and answer
+`listed`, `unlisted` or `no_exchange`. The header names are exported as
+`ContentRulesHeader` and `ExchangeHeader` in all three languages and join
+`wire-constants-vectors.json`. New corpus: `discovery-hint-vectors.json`, replayed by all
+three SDKs.
+
 **Published JSON Schemas, with a strict variant (no wire change).** The SDK build
 already generated a JSON Schema per message from `fora.proto` and discarded it after
 generating the Pydantic and Zod models. Those schemas are now release artifacts under
diff --git a/sdk/go/README.md b/sdk/go/README.md
index f34d7b92..ac875cf1 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -336,6 +336,13 @@ response or re-implements signing:
   contract: no unknown field, proto field names only, no 32-bit number or bool written
   as a string, and protovalidate. `helpers.CheckStrictMessage` is the same check on a
   decoded message, the one `WithStrictDecoding` applies.
+- **Edge discovery headers.** `helpers.ParseDiscoveryHint(status, header)` reads the
+  `X-Content-Rules` and `X-FORA-Exchange` headers of an edge's 403 into a
+  `DiscoveryHint`: each value with a `HintState` of absent, valid or malformed. Any
+  other status reads as absent. `helpers.ReconcileDiscoveryHint(hint, listed)` checks
+  the hinted Exchange against the domains the publisher manifest's `exchanges` lists
+  and answers `HintListed`, `HintUnlisted` or `HintNoExchange`; the manifest wins. The
+  header names are `helpers.ContentRulesHeader` and `helpers.ExchangeHeader`.
 
 ## Guarantees
 
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 4fff30dd..06c5ef29 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -461,6 +461,13 @@ a service through the SDK and check every answer through it:
 - **`check_strict(message_name, payload)`** applies the same strict check to any decoded
   message, raising `StrictViolationError`. A delivery-fetch proof is signed with the
   public `sign_agent_binding` (or `SigningTransport.sign_agent_binding`).
+- **`parse_discovery_hint(status, headers)`** reads the `X-Content-Rules` and
+  `X-FORA-Exchange` headers of an edge's 403 into a `DiscoveryHint`: each value with a
+  state of `"absent"`, `"valid"` or `"malformed"`. Any other status reads as absent.
+  `reconcile_discovery_hint(hint, listed)` checks the hinted Exchange against the
+  domains the publisher manifest's `exchanges` lists and answers `"listed"`,
+  `"unlisted"` or `"no_exchange"`; the manifest wins. The header names are
+  `ContentRulesHeader` and `ExchangeHeader`.
 
 ### Running against a local Exchange
 
diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index ca32b41e..436657f8 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -64,6 +64,13 @@ URL, bytes and media type; the license reader also verifies the bytes against
 `uri_digest` (`DigestMismatch`). `checkStrict(message, payload)` from
 `@fora-protocol/sdk/client` applies the same check to any decoded message.
 
+`@fora-protocol/sdk/discovery-hint` reads the edge discovery headers of a 403:
+`parseDiscoveryHint(status, headers)` returns each of `X-Content-Rules` and
+`X-FORA-Exchange` with a state of `absent`, `valid` or `malformed`, and
+`reconcileDiscoveryHint(hint, listed)` checks the hinted Exchange against the domains the
+publisher manifest lists (`listed`, `unlisted` or `no_exchange`; the manifest wins). The
+header names are `ContentRulesHeader` and `ExchangeHeader` in `@fora-protocol/sdk/wire`.
+
 Every module is a named subpath export; there is no package root import. The full list is
 the `exports` map of the package manifest. Source, tests and the release process are in
 [FORA-Protocol/protocol](https://github.com/FORA-Protocol/protocol) under `sdk/ts` and
diff --git a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
index c895c3c0..d50d5ce4 100644
--- a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
+++ b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
@@ -25,7 +25,11 @@ client.Fetch(ctx, "https://techcrunch.com/premium/article.html")
   |         - Parse WellKnownManifest, extract authorized Exchanges
   |         - Cache result (TTL: 1 hour, configurable)
   |         - If fora.json fetch fails: attempt direct GET to URL
-  |           - If 403 + X-Content-Rules header: extract Exchange endpoint
+  |           - If 403: read the discovery headers (ParseDiscoveryHint)
+  |             - X-FORA-Exchange: an Exchange domain; resolve its endpoint
+  |               from that Exchange's own fora.json, never from the header
+  |             - X-Content-Rules: the publisher's fora.json URL; read it and
+  |               confirm the hinted Exchange is listed (ReconcileDiscoveryHint)
   |           - If 403 without header or non-403: return NoExchangeError
   |
   |  3. Pre-flight budget check
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index bac5a6de..0a935278 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -103,6 +103,7 @@ parsing responses itself or re-implementing request signing.
 | Read a document a party publishes and check it: the well-known manifest, the WBA key directory, the key revocation list, the license document | `resolvers.ReadManifest`, `resolvers.ReadWBADirectory`, `resolvers.ReadRevocationList`, `resolvers.ReadLicenseDocument` | `readManifest`, `readWBADirectory`, `readRevocationList`, `readLicenseDocument` | `read_manifest`, `read_wba_directory`, `read_revocation_list`, `read_license_document` |
 | Check a message against the strict contract | `helpers.CheckStrict` | `checkStrict` | `check_strict` |
 | Sign the proof of possession for a delivery fetch | `helpers.SignAgentBinding` | `signInbound` | `sign_agent_binding` |
+| Read the discovery headers of an edge's 403, and check the hinted Exchange against the publisher manifest | `helpers.ParseDiscoveryHint`, `helpers.ReconcileDiscoveryHint` | `parseDiscoveryHint`, `reconcileDiscoveryHint` (`./discovery-hint`) | `parse_discovery_hint`, `reconcile_discovery_hint` |
 
 A few rules hold in every language:
 
diff --git a/website/src/content/docs/components/edge-function/bot-detection.mdx b/website/src/content/docs/components/edge-function/bot-detection.mdx
index 451579e7..75b7480b 100644
--- a/website/src/content/docs/components/edge-function/bot-detection.mdx
+++ b/website/src/content/docs/components/edge-function/bot-detection.mdx
@@ -90,7 +90,8 @@ When a bot is detected on a protected path without a signed URL:
 ```http
 HTTP/1.1 403 Forbidden
 Content-Type: application/json
-X-Content-Rules: https://exchange.ssp-example.com/fora/v1
+X-Content-Rules: https://techcrunch.com/.well-known/fora.json
+X-FORA-Exchange: exchange.ssp-example.com
 Cache-Control: no-store
 ```
 
@@ -99,21 +100,20 @@ Cache-Control: no-store
   "error": "Licensed content. Negotiate access via the Exchange.",
   "protocol": "FORA",
   "version": "1.0",
-  "info_url": "https://exchange.ssp-example.com/fora/v1/info",
   "fora_json_url": "https://techcrunch.com/.well-known/fora.json"
 }
 ```
 
-**Header semantics**:
-- `X-Content-Rules` -- the Exchange info endpoint. This is the key discovery mechanism for bots that did not check `fora.json`. The header value is a URL that the agent can `GET` to learn about available content and pricing.
+**Header semantics** (the FORA edge discovery headers; the normative rules are in [Discovery Paths](/protocol/discovery-paths/#edge-discovery-headers)):
+- `X-Content-Rules` -- the absolute URL of the provider's own manifest, `https://<provider domain>/.well-known/fora.json`. This is the key discovery mechanism for bots that did not check `fora.json`: the manifest carries the licensing terms and, in `exchanges[]`, the Exchanges that sell this content. It never points at an Exchange.
+- `X-FORA-Exchange` -- optional. The bare domain of one Exchange that sells this content directly, in the same form as `Offer.exchange` (no scheme, no path). An agent can start discovery there without fetching the manifest first, resolving the Exchange's endpoint from the Exchange's own `fora.json`. It is an optimisation, not authorization: the edge sends it only beside `X-Content-Rules` and only for an Exchange the manifest lists, and when the two disagree the manifest wins.
 - `Cache-Control: no-store` -- the 403 should not be cached. Content availability may change.
 
 **Body semantics**:
 - `error` -- human/machine readable explanation.
 - `protocol` -- identifies this as a FORA protocol response, not a generic 403.
 - `version` -- protocol version for forward compatibility.
-- `info_url` -- same as `X-Content-Rules` header, in the body for agents that parse JSON responses.
-- `fora_json_url` -- direct link to `fora.json` so the agent can discover all authorized Exchanges, not just the one in `X-Content-Rules`.
+- `fora_json_url` -- same as the `X-Content-Rules` header, in the body for agents that parse JSON responses. The body is informative; the headers are the protocol.
 
 ## Classification Algorithm
 
diff --git a/website/src/content/docs/components/edge-function/cdn-adapters.mdx b/website/src/content/docs/components/edge-function/cdn-adapters.mdx
index 1b711a2a..10cbd8f1 100644
--- a/website/src/content/docs/components/edge-function/cdn-adapters.mdx
+++ b/website/src/content/docs/components/edge-function/cdn-adapters.mdx
@@ -64,8 +64,13 @@ interface EdgeConfig {
    * message. */
   protectedPatterns: string[];
 
-  /** Exchange info endpoint URL for X-Content-Rules header. */
-  exchangeInfoUrl: string;
+  /** Value of the X-Content-Rules header on a 403: the absolute URL of this
+   * provider's own manifest, https://{provider domain}/.well-known/fora.json. */
+  contentRulesUrl: string;
+
+  /** Optional value of the X-FORA-Exchange header on a 403: the bare domain of
+   * an Exchange the manifest lists (e.g. "exchange.example"), never a URL. */
+  exchangeDomain?: string;
 
   /** Exchange API base URL for fetching fora.json and rsl.txt. */
   exchangeApiUrl?: string;
@@ -139,7 +144,7 @@ graph LR
 - fora.json and rsl.txt serving.
 - Custom parameters validation (agent_id binding).
 - Single-use enforcement (requires Lambda@Edge + DynamoDB, best-effort).
-- The 403 response body and `X-Content-Rules` header.
+- The 403 response body and the `X-Content-Rules` and `X-FORA-Exchange` headers.
 
 ```javascript
 // CloudFront Function (viewer-request) - ES 5.1 subset
@@ -192,9 +197,12 @@ function handler(event) {
             statusDescription: 'Forbidden',
             headers: {
                 'content-type': { value: 'application/json' },
-                'x-content-rules': { value: EXCHANGE_INFO_URL }
+                // The provider's own manifest, e.g. https://publisher.example/.well-known/fora.json
+                'x-content-rules': { value: CONTENT_RULES_URL },
+                // A bare domain the manifest lists, e.g. exchange.example
+                'x-fora-exchange': { value: EXCHANGE_DOMAIN }
             },
-            body: '{"error":"Licensed content. Negotiate access via the Exchange.","protocol":"FORA","version":"1.0","info_url":"' + EXCHANGE_INFO_URL + '"}'
+            body: '{"error":"Licensed content. Negotiate access via the Exchange.","protocol":"FORA","version":"1.0","fora_json_url":"' + CONTENT_RULES_URL + '"}'
         };
     }
 
diff --git a/website/src/content/docs/components/edge-function/deployment.mdx b/website/src/content/docs/components/edge-function/deployment.mdx
index e346d09b..a3bae53e 100644
--- a/website/src/content/docs/components/edge-function/deployment.mdx
+++ b/website/src/content/docs/components/edge-function/deployment.mdx
@@ -29,7 +29,7 @@ sequenceDiagram
     CDN-->>Provider: 200 OK + WellKnownManifest
 
     Provider->>CDN: Verify: curl -A "GPTBot" /premium/article.html
-    CDN-->>Provider: 403 + X-Content-Rules header
+    CDN-->>Provider: 403 + X-Content-Rules (+ X-FORA-Exchange)
 ```
 
 ## Simplest Possible Onboarding
@@ -110,6 +110,17 @@ When available, the CLI will generate the platform-specific deployment artifact
 | Single-use enabled | Policy | Rarely | `true` |
 | Agent binding enabled | Policy | Rarely | `false` |
 
+### Discovery Headers on the 403
+
+The edge function's refusal of an unlicensed bot carries the two FORA edge discovery headers, and both values come from the configuration above. Neither header carries the Exchange endpoint URL.
+
+| Header | Value | Built from |
+|---|---|---|
+| `X-Content-Rules` | `https://techcrunch.com/.well-known/fora.json` | The provider domain. It is the URL of the provider's own manifest, which this edge function also serves, never an Exchange URL. |
+| `X-FORA-Exchange` | `exchange.ssp.com` | The Exchange domain, as a bare domain in the form of `Offer.exchange`. Send it only for an Exchange the provider's manifest lists, and only together with `X-Content-Rules`. |
+
+An agent that receives `X-FORA-Exchange` resolves the Exchange's endpoint from the Exchange's own `/.well-known/fora.json`, and treats the provider's manifest as the authority on which Exchanges sell the content. See [Edge discovery headers](/protocol/discovery-paths/#edge-discovery-headers) for the rules.
+
 ### Configuration Sources
 
 ```mermaid
@@ -351,7 +362,7 @@ After deployment, verify with these checks:
 
 1. `GET /.well-known/fora.json` returns valid manifest with `200 OK`.
 2. `GET /rsl.txt` returns valid RSL content with `200 OK`.
-3. `GET /premium/article.html` with bot User-Agent returns `403 + X-Content-Rules` header.
+3. `GET /premium/article.html` with bot User-Agent returns `403` with `X-Content-Rules` set to the provider's own `https://<domain>/.well-known/fora.json`, and, when configured, `X-FORA-Exchange` set to the bare domain of an Exchange that manifest lists (for example `exchange.ssp-example.com`, not a URL).
 4. `GET /premium/article.html` with valid signed URL returns `200`.
 5. `GET /premium/article.html` with expired signed URL returns `403`.
 6. `GET /premium/article.html` with tampered signed URL returns `403`.
diff --git a/website/src/content/docs/components/edge-function/overview.mdx b/website/src/content/docs/components/edge-function/overview.mdx
index 93ea2fa6..530f2db4 100644
--- a/website/src/content/docs/components/edge-function/overview.mdx
+++ b/website/src/content/docs/components/edge-function/overview.mdx
@@ -9,7 +9,7 @@ The Edge Function is the provider-side enforcement point of the FORA protocol. I
 
 The Edge Function has three jobs:
 
-1. **Block unauthorized bots** -- detect AI crawlers hitting protected content without a signed URL and return `403 + X-Content-Rules` header pointing them to the Exchange.
+1. **Block unauthorized bots** -- detect AI crawlers hitting protected content without a signed URL and return `403` with an `X-Content-Rules` header pointing them at the provider's own `fora.json`, and optionally an `X-FORA-Exchange` header naming an Exchange that sells the content.
 2. **Verify signed URL access** -- validate that incoming signed URLs are authentic, unexpired, bound to the correct agent identity, and (optionally) single-use.
 3. **Serve fora.json and rsl.txt** -- generate, cache, and serve `/.well-known/fora.json` and `/rsl.txt` so protocol-aware agents discover the Exchange without triggering a 403.
 4. **Serve verifier keys via the WBA directory (v1.0)** -- serve the JWK Set at `/.well-known/http-message-signatures-directory` for providers that self-attest resources. This publishes the provider's Ed25519 public keys in its WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`), with the claims schema in the `fora.json` `ext["fora.attestation.claims_schema"]`, so agents and Exchanges can verify attestation signatures. FORA has no dedicated verifier role; a verifier publishes under its operator's role (`role=ROLE_PUBLISHER` when a publisher self-attests).
@@ -67,7 +67,7 @@ flowchart TD
     KV_CHECK -->|Already consumed| BLOCK_REUSE[403: URL already used]
     KV_CHECK -->|First use| ALLOW
     HAS_SIG -->|No| IS_BOT{AI bot detected?}
-    IS_BOT -->|Yes| BLOCK_BOT[403 + X-Content-Rules<br/>+ JSON body]
+    IS_BOT -->|Yes| BLOCK_BOT[403 + X-Content-Rules<br/>+ X-FORA-Exchange + JSON body]
     IS_BOT -->|No| PASSTHROUGH
 ```
 
@@ -106,7 +106,7 @@ handleRequest(ctx):
        g. Any fail -> 403 with specific error
 
   4. If request is from detected bot (no signed URL):
-       -> 403 + X-Content-Rules header + JSON body
+       -> 403 + X-Content-Rules + X-FORA-Exchange headers + JSON body
 
   5. If request is from a regular browser (no signed URL):
        -> Pass through (normal website traffic)
@@ -118,7 +118,7 @@ handleRequest(ctx):
 
 ### Bot Detection and 403 Redirect
 
-When an AI crawler requests protected content without signed URL parameters, the edge function detects the request is from a bot and returns `403 Forbidden` with an `X-Content-Rules` header pointing to the Exchange info endpoint. This is the "accidental discovery" path (Path C in the protocol flow). The 403 is not punitive -- it is a protocol handshake directing the bot to the correct transaction endpoint. See [Bot Detection](/components/edge-function/bot-detection/) for details.
+When an AI crawler requests protected content without signed URL parameters, the edge function detects the request is from a bot and returns `403 Forbidden` with an `X-Content-Rules` header carrying the URL of the provider's `/.well-known/fora.json`, and optionally an `X-FORA-Exchange` header carrying the bare domain of an Exchange that manifest lists. This is the "accidental discovery" path (Path C in the protocol flow). The 403 is not punitive -- it is a protocol handshake directing the bot to the provider's terms and the Exchanges that sell its content. See [Bot Detection](/components/edge-function/bot-detection/) for details.
 
 ### fora.json and rsl.txt Generation and Serving
 
diff --git a/website/src/content/docs/protocol/discovery-paths.mdx b/website/src/content/docs/protocol/discovery-paths.mdx
index 0a656996..7ffc7b51 100644
--- a/website/src/content/docs/protocol/discovery-paths.mdx
+++ b/website/src/content/docs/protocol/discovery-paths.mdx
@@ -113,7 +113,7 @@ sequenceDiagram
 
 ## Path C: Accidental Discovery via Edge Function (403)
 
-A wandering bot hits protected content without knowing about FORA. The edge function on the provider's CDN blocks it and points to the Exchange.
+A wandering bot hits protected content without knowing about FORA. The edge function on the provider's CDN refuses it with `403` and two discovery headers: `X-Content-Rules` points at the provider's own manifest, and `X-FORA-Exchange` names an Exchange that sells this content directly.
 
 ```mermaid
 sequenceDiagram
@@ -127,35 +127,78 @@ sequenceDiagram
 
     Note over EF: Detect bot User-Agent<br/>No signed URL params
 
-    EF-->>Agent: 403 Forbidden<br/>X-Content-Rules: https://exchange.ssp.com/v1/info
+    EF-->>Agent: 403 Forbidden<br/>X-Content-Rules: https://publisher.example/.well-known/fora.json<br/>X-FORA-Exchange: exchange.example
 
-    Note over Agent: Discover Exchange from header
+    Agent->>MP: GET https://exchange.example/.well-known/fora.json
+    MP-->>Agent: WellKnownManifest (role=ROLE_EXCHANGE, endpoint)
 
-    Agent->>MP: DiscoverResources (ResourceQuery)
+    Agent->>MP: DiscoverResources (ResourceQuery, exchange=exchange.example)
     MP-->>Agent: ResourceResponse (Offer[])
 
+    Agent->>CDN: GET /.well-known/fora.json
+    CDN-->>Agent: WellKnownManifest (role=ROLE_PUBLISHER, exchanges[])
+
+    Note over Agent: Confirm exchange.example is listed<br/>in the publisher's exchanges[]
+
     Agent->>MP: ExecuteTransaction
     MP-->>Agent: TransactionResponse (signed URL)
 
     Agent->>CDN: GET /server/article.html?Signature=...
 
-    Note over EF: Signed URL params present<br/>Pass through to CDN native verification
+    Note over EF: Signed URL params present<br/>Verify the Exchange's signature
 
     CDN-->>Agent: 200 OK + content
 
     Agent->>MP: ReportUsage
 ```
 
+The agent may fetch the publisher's manifest before, during or after discovery at the named Exchange. It must confirm the listing before it commits to an offer. Without `X-FORA-Exchange`, the agent reads the manifest first and continues as in Path A.
+
 **Standards mapping:**
 
 | Step | Standard |
 |---|---|
-| 403 + `X-Content-Rules` header | **FORA** extension (discovery mechanism -- not in CoMP or RSL) |
-| Exchange endpoint in header | Points to Exchange listed in `fora.json` |
+| 403 + `X-Content-Rules` + `X-FORA-Exchange` | **FORA** edge discovery headers (not in CoMP or RSL) |
+| `X-Content-Rules` value | Absolute URL of the provider's `/.well-known/fora.json` |
+| `X-FORA-Exchange` value | Bare domain of an Exchange listed in that manifest, in the form of `Offer.exchange` |
+| Exchange endpoint | Resolved from the Exchange's own `fora.json`, never from the header |
 | All subsequent steps | Same as Path A |
 
 The edge function is the "barking dog" -- a fallback for bots that did not check `fora.json` first.
 
+### Edge discovery headers
+
+The two headers are part of the protocol specification. The normative text is the "Edge discovery headers" section in the [`fora.proto`](https://github.com/FORA-Protocol/protocol/blob/main/proto/fora/v1/fora.proto) file header; this is a summary.
+
+```http
+HTTP/1.1 403 Forbidden
+X-Content-Rules: https://publisher.example/.well-known/fora.json
+X-FORA-Exchange: exchange.example
+```
+
+| | `X-Content-Rules` | `X-FORA-Exchange` |
+|---|---|---|
+| **Points at** | The publisher's manifest: the licensing terms, and in `exchanges[]` the Exchanges that sell this content | One Exchange that sells this content directly |
+| **Value** | Exactly `https://` + the publisher's domain + `/.well-known/fora.json`. No userinfo, query, fragment, trailing slash or other path. The domain is the host the refused request was sent to, a port allowed. | The Exchange's bare domain, in the same form as `Offer.exchange`: a port allowed, no scheme or path. |
+| **Edge sends it** | SHOULD, on every 403 to a request for licensed content that carries no valid signed URL | MAY, on the same 403, and only together with `X-Content-Rules`. It must name an Exchange the manifest lists. |
+| **Role** | The authority | An optimisation over `X-Content-Rules`, never a replacement |
+
+Each header appears at most once and carries one value. An agent reads them only from a `403` and ignores them on any other status. A value that is not of the shape above is ignored as if the header were absent, and the two headers are judged separately.
+
+**How an agent uses them.** With `X-FORA-Exchange`, the agent can start discovery at the named Exchange without fetching the publisher's manifest first. It resolves that Exchange's endpoint from the Exchange's own `/.well-known/fora.json`, never from the header: the header says which Exchange to ask, not where to send the request. This is the same rule that applies to the `exchange` field of every addressed request. The domain is also the `exchange` the agent stamps on its `ResourceQuery`.
+
+**Trust.** An agent MUST NOT treat `X-FORA-Exchange` as authorization. It is an unsigned value. The Exchange's offers are verified by their own Ed25519 signatures, as on every other path, and the publisher's manifest remains the authority on which Exchanges sell the content. When the header names an Exchange that the manifest does not list, the manifest wins: the agent discards the header, does not transact on an offer from that Exchange, and discovers at the Exchanges the manifest lists. The listing check uses the recipient identity match: exact domain, case folded, `:443` the same as no port, and a subdomain a different party.
+
+The three SDKs read the headers with one parser each, pinned to a shared corpus:
+
+| | Parse a 403 | Check the hinted Exchange against the manifest |
+|---|---|---|
+| Go | `helpers.ParseDiscoveryHint(status, header)` | `helpers.ReconcileDiscoveryHint(hint, listed)` |
+| Python | `fora_sdk.parse_discovery_hint(status, headers)` | `fora_sdk.reconcile_discovery_hint(hint, listed)` |
+| TypeScript | `parseDiscoveryHint(status, headers)` (export path `./discovery-hint`) | `reconcileDiscoveryHint(hint, listed)` |
+
+`listed` is the `domain` of every entry in the publisher manifest's `exchanges`. The parser returns each header's value and a state, `absent`, `valid` or `malformed`; the check returns `listed`, `unlisted` or `no_exchange`. The header names are exported as constants: `ContentRulesHeader` and `ExchangeHeader` in all three languages.
+
 ## Path D: Agent Reads RSL Directly
 
 An agent reads `rsl.txt` to understand terms, then uses `fora.json` to find the Exchange for transacting. RSL tells the agent *what it costs*; FORA tells it *where to pay*.
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 5221edb8..fa443554 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -51,7 +51,7 @@ Before any agent request, providers configure their domains and Exchanges ingest
 }
 ```
 
-**Edge function** — deployed on Hearst's CDN (Cloudflare/Fastly/Lambda@Edge). Blocks unauthorized AI bots with 403 + `X-Content-Rules` header pointing to the Exchange. Verifies Ed25519 signed URLs for authorized requests, using the Exchange's published public key.
+**Edge function** — deployed on Hearst's CDN (Cloudflare/Fastly/Lambda@Edge). Blocks unauthorized AI bots with 403, an `X-Content-Rules` header pointing to the provider's own `fora.json`, and an `X-FORA-Exchange` header naming the Exchange that sells the content. Verifies Ed25519 signed URLs for authorized requests, using the Exchange's published public key.
 
 ### 0b. Agent Key Announcement
 
diff --git a/website/src/content/docs/protocol/standards-layering.mdx b/website/src/content/docs/protocol/standards-layering.mdx
index f47be6f3..bc4f14f5 100644
--- a/website/src/content/docs/protocol/standards-layering.mdx
+++ b/website/src/content/docs/protocol/standards-layering.mdx
@@ -97,7 +97,7 @@ graph LR
 | **Exchange** | Exposes resource catalog with pricing. Authorizes transactions. Issues delivery instructions (signed URLs). | FORA v1.0: "Exchange"; implementation of CoMP endpoints |
 | **Resource Provider** | The provider. Owns the resources, sets terms via RSL. | CoMP: "Content Owner"; RSL: "Licensor" |
 | **Resource Delivery Endpoint** | The CDN that serves resources. Verifies signed URLs natively. | CoMP: "Content Delivery Endpoint" |
-| **Edge Function** | Lightweight CDN function. Blocks unauthorized bots with 403 + `X-Content-Rules` header, redirects to Exchange. Passes through signed URL requests. | FORA extension (not in CoMP or RSL) |
+| **Edge Function** | Lightweight CDN function. Refuses unlicensed bots with 403 and two discovery headers: `X-Content-Rules`, the URL of the provider's `/.well-known/fora.json`, and optionally `X-FORA-Exchange`, the bare domain of an Exchange that manifest lists. Verifies signed URL requests. | FORA edge discovery headers, specified in the `fora.proto` file header (not in CoMP or RSL) |
 
 ## RSL Integration
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index b7cdac34..687da975 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,50 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Edge discovery headers: `X-Content-Rules` and `X-FORA-Exchange` (HTTP convention
+specified; no message change).** When a publisher's edge refuses an unlicensed AI agent
+with 403, it answers with two discovery headers, and they are now part of the protocol.
+Neither was defined before. The documentation presented `X-Content-Rules` as a FORA
+extension pointing at the Exchange, which was wrong: it points at the publisher's
+manifest. The normative text is the new "Edge discovery headers" section of the
+`fora.proto` file header.
+
+- `X-Content-Rules` is the absolute URL of the publisher's manifest, exactly
+  `https://{domain}/.well-known/fora.json` with the publisher's bare domain (a port
+  allowed) and no userinfo, query, fragment, trailing slash or other path. An edge
+  SHOULD send it on every 403 to a request for licensed content that carries no valid
+  signed URL.
+- `X-FORA-Exchange` is the bare domain of one Exchange that sells the content directly,
+  in the same form as `Offer.exchange`. An edge MAY send it, only together with
+  `X-Content-Rules`, and only for an Exchange its manifest lists. It is an optimisation
+  over `X-Content-Rules`, not a replacement.
+- An agent reads the headers only from a 403, and ignores a value of the wrong shape as
+  if it were absent. With `X-FORA-Exchange` it MAY start discovery at the named
+  Exchange without fetching the publisher's manifest first. It resolves that
+  Exchange's endpoint from the Exchange's own `fora.json`, never from the header, under
+  the request-recipient rule.
+- An agent MUST NOT treat `X-FORA-Exchange` as authorization. Offers are verified by
+  their signatures, and the publisher's manifest stays the authority on which Exchanges
+  sell the content. When the header names an Exchange the manifest does not list, the
+  manifest wins: the agent discards the header, does not transact on an offer from that
+  Exchange, and discovers at the Exchanges the manifest lists.
+
+SDKs, in all three languages: `parse_discovery_hint(status, headers)` (Python, from
+`fora_sdk`), `parseDiscoveryHint(status, headers)` (TypeScript, export path
+`./discovery-hint`) and `helpers.ParseDiscoveryHint(status, header)` (Go) read a
+response's discovery headers into a `DiscoveryHint`: each value with a state of
+`absent`, `valid` or `malformed`. Any status other than 403 reads as absent, and a header
+sent twice is malformed. `reconcile_discovery_hint`, `reconcileDiscoveryHint` and
+`helpers.ReconcileDiscoveryHint` check the hinted Exchange against the domains the
+publisher manifest's `exchanges` lists, with the recipient identity match, and answer
+`listed`, `unlisted` or `no_exchange`. The header names are exported as
+`ContentRulesHeader` and `ExchangeHeader` in all three languages and join
+`wire-constants-vectors.json`. New corpus: `discovery-hint-vectors.json`, replayed by all
+three SDKs.
+
+[Discovery Paths](/protocol/discovery-paths/#edge-discovery-headers) summarizes the
+rules.
+
 **Published JSON Schemas, with a strict variant (no wire change).** The SDK build
 already generated a JSON Schema per message from `fora.proto` and discarded it after
 generating the Pydantic and Zod models. Those schemas are now release artifacts under
diff --git a/website/src/content/docs/reference/fora-json-example.mdx b/website/src/content/docs/reference/fora-json-example.mdx
index a97cb987..adc3b43f 100644
--- a/website/src/content/docs/reference/fora-json-example.mdx
+++ b/website/src/content/docs/reference/fora-json-example.mdx
@@ -111,9 +111,14 @@ If the agent doesn't know about FORA and tries to crawl directly:
 
 ```
 1. Agent hits techprovider.com/premium/article
-2. Edge function returns 403 + X-Content-Rules header
-3. Agent discovers fora.json from the header
-4. Follows standard FORA flow from step 2 above
+2. Edge function returns 403 with two headers:
+     X-Content-Rules: https://techprovider.com/.well-known/fora.json
+     X-FORA-Exchange: exchange.ssp-alpha.com
+3. Agent discovers fora.json from X-Content-Rules (and, optionally, starts
+   discovery at the X-FORA-Exchange domain, resolving its endpoint from
+   that Exchange's own fora.json)
+4. Follows standard FORA flow from step 2 above; the fora.json exchanges[]
+   list stays the authority, so an X-FORA-Exchange it does not list is ignored
 ```
 
 ## Relationship Types
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 0cb104bd..7506b618 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -20,6 +20,10 @@ This is **load-bearing for signatures**: signed messages (`Offer.signature`, `Re
 One exception, and it is **transport framing** rather than a FORA message: the `debug` projection Connect attaches to an error detail is lowerCamelCase, and no server option changes it — `connect-go` renders that projection with its own `protojson` codec at default options, so the snake_case codec a deployment registers reaches the response **body** and not the error beside it. A JSON client normalizes that one projection back to the proto names before reading it, which is possible because `json_name` inverts to the field name for every field in this contract. The projection is a convenience beside the detail's binary `value`, which is the authoritative copy: the FORA SDKs read `value` first and fall back to the projection only when no `value` is present.
 :::
 
+:::note[Edge discovery headers]
+Two HTTP response headers are part of the contract without being in any message. A publisher's edge that refuses a request for licensed content carrying no valid signed URL answers `403` and SHOULD send `X-Content-Rules`, the absolute URL of the publisher's manifest: exactly `https://{domain}/.well-known/fora.json`, with the publisher's domain as a bare domain, a port allowed. It MAY add `X-FORA-Exchange`, the bare domain of one Exchange that sells the content directly, in the same form as `Offer.exchange`, and only together with `X-Content-Rules`. An agent reads them only from a `403`. It resolves the named Exchange's endpoint from that Exchange's own `fora.json`, never from the header. `X-FORA-Exchange` is never authorization: offers are verified by their signatures, the manifest's `exchanges` stays the authority on who sells, and when the two disagree the manifest wins. The normative text is the "Edge discovery headers" section of the `fora.proto` file header; [Discovery Paths](/protocol/discovery-paths/#edge-discovery-headers) summarizes it.
+:::
+
 ## Services
 
 ### ExchangeService
diff --git a/website/src/pages/index.astro b/website/src/pages/index.astro
index 29d9867e..3dc7b5c6 100644
--- a/website/src/pages/index.astro
+++ b/website/src/pages/index.astro
@@ -1613,10 +1613,10 @@ ${c('// → RESOLUTION_TYPE_CREDIT applied')}`
 
     const scenarios = [
       { title: 'Web article access',
-        story: 'An AI research assistant needs a New York Times article for a user query. It tries to fetch the URL directly but hits the provider\u2019s edge function, which returns a 403 with a redirect to the FORA Exchange. The agent discovers the article is available for $0.05, commits to the offer, receives a time-limited signed URL, fetches the full article from the provider\u2019s CDN, and reports how many tokens it consumed.',
+        story: 'An AI research assistant needs a New York Times article for a user query. It tries to fetch the URL directly but hits the provider\u2019s edge function, which returns a 403 whose headers point at the publisher\u2019s FORA manifest and the Exchange that sells the article. The agent discovers the article is available for $0.05, commits to the offer, receives a time-limited signed URL, fetches the full article from the provider\u2019s CDN, and reports how many tokens it consumed.',
         steps: [
-        { from: 'Agent', to: 'Edge', exFrom: false, exTo: false, desc: '403 redirect to Exchange', link: '/protocol/discovery-paths/', linkText: 'Discovery Paths →',
-          json: `${c('// Agent hits publisher URL, gets 403')}\n${c('// X-Content-Rules header → Exchange')}\n\n${b('{')}\n  ${k('status')}: ${n('403')},\n  ${k('header')}: ${s('X-Content-Rules')},\n  ${k('exchange')}: ${s('exchange.example.com')}\n${b('}')}`},
+        { from: 'Agent', to: 'Edge', exFrom: false, exTo: false, desc: '403 with discovery headers', link: '/protocol/discovery-paths/#edge-discovery-headers', linkText: 'Discovery Paths →',
+          json: `${c('// Agent hits publisher URL, gets 403')}\n${c('// X-Content-Rules → the publisher manifest')}\n${c('// X-FORA-Exchange → an Exchange it lists')}\n\n${b('{')}\n  ${k('status')}: ${n('403')},\n  ${k('X-Content-Rules')}: ${s('https://nyt.com/.well-known/fora.json')},\n  ${k('X-FORA-Exchange')}: ${s('exchange.example.com')}\n${b('}')}`},
         { from: 'Agent', to: 'Exchange', exFrom: false, exTo: true, desc: 'DiscoverResources request', link: '/protocol/transaction-flow/', linkText: 'Transaction Flow →',
           json: `${c('// POST DiscoverResources')}\n\n${b('{')}\n  ${k('requester')}: ${b('{')}\n    ${k('domain')}: ${s('agent.acme.com')}\n  ${b('}')},\n  ${k('uris')}: [${s('https://nyt.com/article')}],\n  ${k('acceptable_restrictions')}: [${b('{')} ${k('axis')}: ${s('FUNCTION')}, ${k('values')}: [${s('ai-input')}] ${b('}')}]\n${b('}')}`},
         { from: 'Exchange', to: 'Agent', exFrom: true, exTo: false, desc: 'Signed offers with pricing', link: '/protocol/transaction-flow/', linkText: 'Offer Response →',

From cd1c1d2769fbb90346d287b079ae5a5b13f4182f Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:53:56 -0400
Subject: [PATCH 044/164] Mark the two scope-shortfall reasons as never sent in
 the protocol

OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and
DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent. Their
comments described an Exchange sending them, which contradicted the
Requester.scopes rule that a requester never learns about a resource
outside its scopes.

Requester.scopes now states the existence-hiding rule once. When the
requester's scopes leave no presentable offer for a resource, the
Exchange answers with no offers and no absence reason, exactly as for
any resource with nothing to offer, and a relaying Broker adds no reason
of its own. At purchase, an offer the Exchange presented is honoured
until it expires, so a scope refusal cannot arise.

Each deprecated value's comment says it is never sent, how the two
cases are answered instead, and that a receiver treats the value as
unknown. The numbers are retained, because removing a value breaks the
v1 wire contract, and must not be reused. The OfferAbsenceReason and
DenialReason enum comments, the Requester section header,
OfferGroup.absence_reason (no longer "present when offers is empty")
and the DiscoveryResponse.absence_reason existence-oracle note now point
at that rule instead of restating it.

No wire change. The proto edits are comments and two deprecations. The
generated Go, the descriptor, the Pydantic and Zod models and the JSON
Schemas are regenerated; the readers still decode both values.
---
 gen/descriptor.binpb                          | Bin 647106 -> 649387 bytes
 gen/go/fora/v1/fora.pb.go                     |  81 +++++++++++++-----
 .../fora.v1.DiscoveryRequest.schema.json      |   2 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   2 +-
 .../fora.v1.DiscoveryResponse.schema.json     |   4 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |   4 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |   2 +-
 .../fora.v1.OfferGroup.schema.strict.json     |   2 +-
 gen/jsonschema/fora.v1.Requester.schema.json  |   2 +-
 .../fora.v1.Requester.schema.strict.json      |   2 +-
 .../fora.v1.ResourceQuery.schema.json         |   2 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   2 +-
 .../fora.v1.ResourceResponse.schema.json      |   2 +-
 ...ora.v1.ResourceResponse.schema.strict.json |   2 +-
 .../fora.v1.TransactionRequest.schema.json    |   2 +-
 ...a.v1.TransactionRequest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   6 +-
 gen/ts/wire/schemas.ts                        |  14 +--
 proto/fora/v1/fora.proto                      |  72 ++++++++++++----
 19 files changed, 142 insertions(+), 63 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index ca6ce280e82b2b3472cd3041a519a204bbb3706c..57573f24c89e192f17a509204f4f3f916c2d2e35 100644
GIT binary patch
delta 46050
zcmce<cbrsJ)-K#ted?T3r@FeTPIZOut^_ohZZar#69iP$5d+3~2PCx09R?hNj`ww@
zk&FZd!3{=&5=1gu2-tv<6l{VhD1t<3X>1sR1O>il?Y$2Notb;T?|#4E<sW*jv(~fo
z+H0>J>XWr~7woJ%bcADsb42C{Wrb`1ea@{5)8F6c8ac!<H(k2fmFsXcW@TGk4fQ;y
z?l7AhjoAxZT%q)*TU^`Sj*014cDZIb9Q9bM-L3+KMADD#c6E#xTQB(x&2;5ve4U<K
z<!ayG@piiMQ8lClUQrB1$#iC#$~48<G;f5$vb(E|^an}@rv~)z_Z;icU5(Ufl<L{P
zPpbcb!Kt48p6&VEpw!@}O8d7-^-K*c9W-Fbz}}_AFxaFXT25KN(w@(hrk?FP_$er)
zo`yte|G_<b^(##cc;boDfvLWO05<5^(t)LYgjDHYo*w+1k$Rke9`ra*YVcDKd!lb?
zzdorU{Rbg0^^icS^lyC!4KD59yR`7BzJ2=ke=;?2NWaoXsX>E#4hGnO{zmHlQvY9v
zltO4=(V*S~o-Q3!zlh~Mtmd=9-PMC7D4}6^4HuPHr2>267U>`|(a0isbu?~byzk_-
zqnOHD=}A4*B1hY|Yzze$Zz-NUsiXkoEhWFmB7yOi(zKZ|&S5xR8Kyd0$ymg$Jg&az
zpRKrZj0X+HmEp`Vm3I`DsMhW+00D$|6la1E=$n(s8a0h>TofPYFi$V_q2wIJnJ;A=
zkeQ<-lEym@E(CHu8`?{qlbEkKbES}zxJoQ;bm20{*aFt6w|ZA%f#R$oWilbNKq;tg
zJjrEH;)QHsZ?$jjg?5G%$SkA`m1m+z4pU7l83z<c-r`JlOCR;KaO$1`sb_lj8&ZmX
z@$`U!gQ=hN9L$FPmlkQC>N9|Mpxy(XK_{?#PEqP%^d*Bj&~qu#cm7?sX~gc`i_SIZ
zddCvIMfOW0)w3768T#SC(w>6`^lyY-(+A1?$4+DS8FZQ7_Lw5W@EDmc2dX=*xFWor
z9Mn!L6{n*vOI2(46oAHOFlzGJ1Bsehsno7xv_tJVocOqky<DnxNUl<xwWSO-)heZ4
zePaSOm4h1PV|Kb!eJS~|;;bWuI9I9Pz&MMZ2O+f8r|GwzP=`1YpDNCVQi>YuQ>Cb}
z(VYvSu{N@%PpOY5HY!fu|DZ{YwUPSYeO$(6Dx2Bjr_=}jvf0j(3o@H2OE0;&5IXcO
z#d&MqP*<u`=X>w(+_6Kq&Yc>i`j=9h(Ks$jb?Be!{I}ju_3Zy-Y3dITKF}?7PuFhr
zsShd}W0p6+Xj7{F-`IqI*RH822He;i8u2Ex5<s(ZOYt9C{a+fr^lv?T5AOF|swZp*
z!S;Vn7^nm+lwtK8WD}NS@Bm?sU_Az~13k24nQhCsnHgmKzq2|2(tqmnIuf>yYQV0p
zK7IRG_K>XLQv>?LcEWHC=|8wH3|-&BFmO-zg~6muk@4gv4EcIu$e^D643w!~zX8v}
zd=5@M4Ws*1&p|MWu(L3BsSXh9UD}u0X)wkBA9_}EP<;&P|L6V#o@I;HxMO9#N_+Pl
z0^Nb7e;M!$RR&UicEAv1p%+yD%$wkurl_xh$bIht{Ra<3wTdYKlGhu(7a;%#mUm$4
zNhIAL!@7Uzv#Gz7_UsQ>3?#B+4yTIYfNoV^lFe20x?M`6LhCd7_%5ZWgOP2hB%R5{
z8@D(1h;gEs${v>dv-(YP4`wK-qyb}((xRpDiWn!lsq9Zj`l%sDYQH_2bV%)|(X<{m
zSW!&%h>~%N-TfDJo$rXEhiJ4a3XSb!EWf|nq41dE)F=UBA{WOL-D{D^<T1q`FmC25
z_*lut_E&Eyth80gWK=48K&m*PQmN#Gj8d+GtW>do_E(=Qtdiy%sgR|pQep*Cg@${T
zQn#LQFINFo%|;GT@9$J?%{mI7xvCXUEvZ7aRjm{>ut?HT3X6<SRg~CeszY5FQ(TU`
z6>5r2dK8XAlc&|Xnf{?JJ#I8dA}%WZFc*7rklLbXn9Hei9B=_U%;k<+Bw&ZR@?%B|
zu7i&wUF@?#YRjULE?H$RCzXGsOAksND*s4VIAS#8Iw=1b7i%<FZC*IW)}aa*<I+v3
zLlrQ_6$%?oxDKdsZ2VxgS>ZTag-SfmrAMSnCJDLn@@3Xw3n#Lw!D_3Li7q+YyPPyr
zPjq=iHG>4gL|1JwQ-cJ;L>DaOB6K*^2u$TGtosmkNxN5U2p4f(9?`gv0mLgVGb}UV
z0>mq>+&tqg%#27)ean?GT1)@o8TAc^|1B4~(PZ)@RI2US=}XV5IgY~FR&9d|wAn7V
z00#-Q*)H^)&Rho{=dd=<skfKRvGSuj9mvldD?cDf$YqL30SSaTR4JP>IRq+yQM&v&
zb&I2Lk<01kxmJ1aTjVmVWU2BOQL>G>4ydJU`G2cT3zxc_eyKv0ztj~-StJR$Y84nA
zxC$zN1q(c{b}U|D=aedch0DXe8q@$){t8#Jo<yL^U*T%li1$X7>ORe0eqL=^lC}|C
zKuBB72N@uwU9}ra1giVAt66hnJ~f}}gzy^X{JXlK{TdrWC9ccE-6oO&#2S|zcOU_=
z#)WaW(9Iz<Q>}10zfAx1clCXx41bDYp*l6_RoD%sL9c>p%m<r+uR7_4zjS39rlE7j
zXm_@$Zg(lWTvX3)iwC_OC>6x6vsBZy)1|I;7~ds$9$?X!>Wt)lk&X^mAN3W1uyO&%
zAK%<!(0~mzree_S5*6S!l{eVilhxftZ`e9+=)9r2W3tlR(0M~m)-YZd{n9X%S?QUt
zsBuThELDyh{Ez0CrOHkZ5*V{ole>&4i2;mRYC#=iu1MEoDs$N{Q`Gq-b8QF@Am-W-
z9ze`hO{@QS05MmsRohst^Fn8t%Ifr?scMN*vf9STLgTGgulJxVV60Y?+!;bPvVgH#
zEox${rKODO^qR_+^dDbSJ2*?W*ce`5Y*D2NfDkaYsMq_D7Z_XAW-W{}qA1yDSN6>t
z>ba5%8zLJJ6{^R|do~~{)EdoYjb;O)LTz=EaaHBn@R`b?wDFcYG_(C78^Z^TL#oGW
zIv+3&sX?n-`hamrO{9#y2FLK5>Sfh=CH?tK^<h^T{uIj>)#(S!Wz{3h4@kgVRwGv9
z`T=v98dr2nKf2{*wdNHyQ+7eWKH6<U<rh_Hd?O21;#XoNdEx<68LByJ<^|xvVAVB<
zZ5!_PvBh&$wK4c&W>B30;0)Drt)v4;dZ>n^uZoH^O=XnE*7wpcb*5>bsOyC=(KSYC
z*LxS`Xq0AJcESYGD6K{<<5f3IDn{f?En}>nt~p<wqWEWOdeoRgNoZtJ=deu+)mMw>
zSlD0!dya(-64-MzGs)WuB(UdbHES7na0Gmu&!#O>?<|>bBanfeZzGU_ov)c8i9iN+
zz81|jMu<$HYztX(u{x@Fp$$RSY@rQ7bKOGC6pgJp$=oi~uynhfX9Cm`c4)EMrDTbX
zkO_n(HUe4SC7PUdG$&1cOEk<nvt1kl)w?eJ<P!B=XYo24173i#&c-17yUwa+jZc2-
zG_2{K<`9tG!0uSC4lLPVBhcKp!A2nayFoL>+F5gw{oSCYY8YcQ4uP)ub^5|`^~KEg
zUu(`BSz%;xzt%#+>}%ZOeyzdmleYyD*6wSq@DalgyGi6|w;vp~KCK4*Uu)eSG{%V{
z!WsM_eKf63aF+aFXHY{1f3P!1R{96KwaH5VK&`!+CPU4Mv`(iNtx`XBl$^FPbmaTA
z=CK->Z0u<*ENmTgfN@&G@_4JjfQ`MJp0`H*!clVB#&9Dam+gFz&An__HQC(D)T0-O
zJ_DP3jV&uz7nWSJA;{!jvmwajUeipzhD6rM<X+S2HQ+;3bHd^d)7kpr?!1;DP=H~&
z9GD=XIZT%W6C^Z;>DIv1oUpWGpo)Rn1q6D|7+nrbkjTRrT@Fl;KpLaVfe8{wV{{Z_
zWHtsSY|DH-V~_60``ODDH_$`rTi2^6RR4Tk&o@@l<f79EU7Rl7q82-f7VB~r0~fH1
zb?Nkg1ngoRbLmW~VVwp`Iz8tzb+)4@Z7b0*OzZA!-ftiTrL-O}jW?-Eby_{IX3uU_
z-!59Mix>$pp|e_#)s;Fl?pEs!8XDt;4#>5v(>8Tt(ONql8fj~Fcb3$lk+xR%`HiX6
z$8{&_tK!2iRF>JI!m4pFp;Mvf3L^s&Iu$y)-4;<GRO;6{CiIUonS*IjHoDps|8S@J
zlA|%$Vrtj9Z}YV-r*@FQ_*%!*zB&gH7pJL?b7#DiF5jiLG0bu3ZAK%k+nrRw<K4~z
zcIbp!n>F6As!5RCB-2M!%6K>Ou@mJ5ja*J(-S(?rCMURM90^PaO(3E1$Sj0FPE6l+
zK%MAFO>{eXk%&udl3J-CJDH~Xnmc1(`rP+wYp4G;H-cK_ltd=w=XG|=VRc>2*WEIl
z1tyeVcf-=WB7_h>dfV+>$KprS$z}LUgtRhwR^E2QE@Jiq7Md7xsdes5G7g-vdlaf=
zhFfV)lNaag8kLDOXS$WtjVzROmRqTHBMW($?N(~v$O6_oWxwO0ec$~Z3(Ys@cVHNB
zbKOeK8^K_o=DC%oH?m-E=Kn5ZupaNZmAbZ6*(kV-$^y4i&*qKF#PELKt<<@Zg<-q!
zcNv4fv*>qHa9<Yx27gp0+>s@}%RVgZQnyk-@MTslV$xscR%+asB&P7?zrzp0Xa5~o
zj;Va`ySfOO%7?!zQ5eJZM)<FIyM5#?Q(9b45<E2ADz|d;jVv_WYPWD#cwQlehFjxS
zZn;qk?e_7F)ekAOTlw!4(Qa$qNbz0K5izWk4Q}UWtmp^zoih9-MouR0?i<|6l<bKx
z9O?#ljnA(4L}w=Ni5m$^^h9T-=!u)$O5#Qq3bfg+ByVJ)KwGF=wB#cO(A(V3y>5lw
zcU)~&hQF;$P^@p8oe7j0k~Q{T&qSuk#20R*NWy2zOjOuifU}T^?RMYcEMV{WofK+y
z=U?1P!yCa+t-I`&<eI3~FK<jzwB%QArPXys(U4!em697-NOF%`X=ilg<p%P%Y(S;j
zIr*(yOkHSQ3SEBdMzrBRSQ$iZ4!ARpvM(#ud(8uGm!I1_9<})%mWkWE0uiqP&4ckS
zkbwB!9Zwi3B!j@MsT^eg_))EyIOulrDV~^+IY=__cR_+W#L9nEYa|Z2h1)_*;*v}a
zE`!QB%&z>X)=C_9JGu7_8ET=!BvZ&`P^2TQ?FqGU@`#N?MLI$<olqo%WsbWMh#G%F
z?dUu1b_IEncqpcl9XO#DB`V!c?q0dTgl451q2;@Qjv$Mv{Ky(qsrMv)v}LFyKavdM
zMvwt@g1uU$-k&&OnO|YjPmoL*mqAIYn0iuuAyH-HP)VvtrY)C2NlvnNPpa(`C*3mC
zjc5sEPLfP3E`xsX6U+Qby(#gN)qseOK;|csxs}Ucyj8PDe^NUotKCi>qCh5TIZ#b9
zR3nI(oN;GdWNUsxjhu12!n{U!xa2I$u11ZVbvyaO%LOJh&$=;z7XTfx4pTYD9;;UC
zB+glr2$+yLM=~_L5a}?L^X#o^wRPe==1H2=iAh|NxrNK1Mt){ztJRXk&u%Ao79c}4
z@-xX4a~agg1$NIVwQcf(RU?RKK;{C;JOY2nZK}VxGnTRir__h*{NmPqNGwxvWBqc?
z?Hq0>#tDa^fgbI~j3s!i-f6Y6#ZW_Oz};W*4VW(&FoEO{3l8!(j5rs`6L!-aJ2~Cy
zpXz02$z(&iZs4LlCL7Xq1BuF+Y{*p$NMKAhuxdFD%Lfd6W$eGtsXrDo8-f--%!VM3
ziy5Zy<DmiwW<;WV>Exy=e2vXGuijbwnvFo~p4V&yO6D~~u3Df1gx3tLS{~wg0QDxT
z^RxO$`!{WbOdz~zc&PGR$R|w*ZyJ8SpG73;7}(EROWv3p-k7?`a4t!g|E!j0_QIcH
znT!vBS!8E~9JED-Db}j^3YbNPFz<u{S9Xz6V~HV_$;3eP27Pz2q5Q>I??dAnrn=k6
zn3_ItSzV{q-fi$$XQqOkRkhM^o<!@u>qhGuvUQ1<{?w_xqqO+ZfVV<zDZZiFP8dq(
z8#u^Im7%mZ=2P^*pw_*VeqGZVW|mztoFYO8E(&nTs!5Pgx<oZewFDBL#w8>FF@Xw_
zFQP6Pu}8`NashCV^d;lwyAXOpc7>2asTmJFY>Xp+-9US(*9_+fkCJ!UkxF;=Xo}-0
zFhs55GivpkRjVM8scVK@)`CQ)t{K98BP`VFH6t~`BWjfx2tFVaLp@3pBWQTI3|LAw
zm@jzP(kv}lcbEtB`fom>9fo_9duTTc8kn+2dz|B0RhD*d8UC`eMm=w|M|OXRA#0;O
zvcW+jYok4~!9gNxqdhgoU(cFTW^Ig}HO}H$8|zWp$Sg@F&|XA7Yy6grjE<v>^2Me>
zNlr=c^J*VE8c*>!RoPV3p{IB>(Z3-?QXVsCyhPz+55mWujE(8dK5e2S_?8FJ<0I73
zJ?Itc5|49D`l*0+II|3Yie&>n0B?!ME$~1BZwcX100<-sy2O*S1_h-qNQ^JZg<k4W
z8u6|{oSobiTjmkYF&6?0xXV4lg|=8|rWGEzH)YhRq$a>V@CaAZV!>2?=z&SQK?;qN
z_6Qf<l0t2*B(NK#;6i`oQR3HG7=(adbz@%nxC|((J<4OoG%{r#YUy?C(XjSf*L5Db
zBLOCHss3nyfCSDu4>oZmiSe?|V{(UuzM}Pcti%&+X_RnK6m<i;HKMg^zro|QP$;Pl
zo@`+dJ-kzG@W3DnP>L>W@Z@%qHBDUwe)a~oKB5H!8$9hh7^A6;vk)ovWE@W)i)f=9
z1r;8?1Cps^!IJFoICo=I+zUgJB@GF&*h{%u*A_cHN^1@+J|Tm<Jjw&8D_sg_nyxQB
z%3_C67bVCdJF<tFd0PEmdpt6T4<<^m#}g2t4v?spJs!*oR05DF!5&YZFiu4B672Eh
zcj7ifa>!=v@pQP=DB|e=@muz0p4O!Iw;re10m|al|E(uS1iU~Zoo_v`3?dy^29T+{
zL~(faqo%&~)VNcoLk;4mbiVc6euwcMt)jDN!a1C7lCQn*C_ZeBdvMW@4tr!+6(q8A
z*b@|yT98Qium`&oaD4y)>IW8$YcI6@!A77N=LgGjKn4gucudi%AW6pqkF?x_#`Bu$
z@T`oZ={<4nV^^c$S#lciqVYy$IbY0DjJIi$_sZ52yu5LaR0rlL(sS7ETH5eCM`tO`
zc+rIz$~7iS`2%lB!9h!o%~HlVP+gh8f>FqF&I0x@!@`E0CSH1Gf#z_vd^-!vBO2da
zogAPUSuk1DH3SEMGqaSD4r4nF887vXxol5;ZD;Y^ENMZ(L`}}kk~Iku^)NRpD5e;Y
zsE4^(aARp7&`Z_)9y{7VYt{R`ET=F&U=lY=PSzly@?I7uYif0nX!ZB95?w@2tyX_8
zD|rWRbrO)R{$5t++l*Hz5bmW`Uz`4WLoMX$vDVHjwffpD83l(B5?-4X5j&$Gk?`8A
zIwI@?5(%%(s`ntbD@2NEXl+*gZpKxb_q?RADgDnT+E7RLO?E1DRA^I{N9=$>2&rt!
z3W%LHkffA_oi<UtOr)|YD|V+$B~zxdDJ$N^_!CbAcJXtzy_wdd$LDq$v`6-NmJB|6
zc_iucEE#+Ri8MaXLhw<f0Y?R7oo+G>a#LtR{XDDg1IEiVO1v};?n+N+u1$7y-({yl
z`)IrDwxu}kF1u|h*0hV-R-}SWS&&I#27riEa*31bWb7ml)JwI0F#Y$I+LzAm2kk^u
zq<t_;PQegDA_ueNKmv(G4rXB>i9{&wdoU}0mn;g!eN7bQU{>NzI(UObFdH0Ui*C{$
zZhOQ|gW|nM>@+Cedn8Lv^H4z=N3t-@ze9WA*nc~pl`%2h@n)@7rtf?fJo0}4Ih(rw
zMK+{Z8(MTROHQO<0_tLxjQfEE)Ws~s{rD`CO+D-it5u@CR&>SIp$>l~%Pp)PWT0~;
z3;W(!G9VcgXQ-D|m1rd;L%njCfr}Ch^~z2K5)ebZ0kNM05)ebZaO`M{KAWgvURK&x
zYf&=Hh9HYI%!Z(TIm|2jC3LtF`el0#fnGP#%f4=_btoBWL(p_L(uN@ac%(NVCW36<
z?M8Yra`)2k$fhh$NOx<eJ?3aT!N#D?feBvO-Vg%D1g~`VK_VLys3bFJ*7KR_bZ^Fi
z^vU+x+m71Py>fNrgK>M?>zwUX=-88{_@v<^UV6!`+CWFy3@<`sWZc9zRO(DGLJc+t
z>CEyf-O;ZyA!DlVc%Acr7qH-9D<$i?4z=66Uic$62e@;*a6N4faOZlJtTLlM>cB^x
zW&vB+No&}9f!8Ub&|m^+f!8NI0+7&I;FTT$Nc8aqUg;4K$>-Ar-n@?7;z<t8a|^t1
z4_=_k_ECpelD?(0mg(rV#4EcexWx9lg)0IQDJ}6zhXy24TH-bT&PNlGV*Rqj8@&HU
z7FX)_JS}^X5Q@B<&A3e~DOzr)L&-1q%Gf+)pt9VH*!&wJbC^j!N_%eC5{|Nute)U=
zQiuG=>Ioo$@sU@q3qS(nBQIwEY|H~7bzpc?I2=i?AJHPSA9-s$j(WMyqNKdNUUcwa
z9puoF%e~Hed9ONBod*r>%jVsoy-^H~SOMTWGEr`IX^_Z7xi=u@1dzx?xfgQ+tv!9z
zqt~;cU9?BqueTAXL$9|Hs6(&!2E@h{RDiJFi;b)4wA<{15mdK%oqN*JJGH2@41Zb~
zAv?Iut_`w-+pKW`HNb46aX}tBNO<Vmy!m^)!b2wp_t3xaN)Mel!b7j{iZ~+I5*~Vm
zw`N;jjb%~{ZCc@N|Cp>=u8H)vd!<(`rBIdIy)}9K)B;1Ew|m?F@kT{h`5nJY5;l2<
zw<eG3S&Ha+JG|}7exr#s-A=Fc?PZb(a_{<GE)eA2<*j+gjY%TN{iRpL)h&Dkxxe%l
z{3b~Rxxe(b7i(Jye>0-oyKlr7Ylp9HtVPkyzV<4Aw0bj&vp@aAAJCiI?zh`dL&5iZ
z<>_7@Kl!oWn{Ra_nq&4;N1BY)s0;SyxHscu`qr*mz!^I3bp?!1;bXb@=5(dknX0*h
zwLh%J*y(e+$zHuro16ewY<NHh%~eSw<8iKnj`AbB?S8FS;zzHHLux#p^&`nV!eyXw
zf^E8Adn|FnE5oMPP$n+PVDW;ak;5w1_5rP3s>;UU5k8VROZi5xyWq|ECH>|D+CZo8
zf)_hDbfT2+*j;3ahqT9&7rpWrF_^%=NL_y(m5uMvU1D!Oq`jBC<dtDPFd=k_goX+s
zkeAsL4{O72zKmf@(>^pQr<X}63z<N~?20#IOtyocyQMwTD_(>|`yve<<+{phJfi(M
zdDSaJqF_S(suw%XUAPQ1hGw$`k7#$MhGxs!K%fdjL$l#&45y6nNY(Ic7J5`0ks6*Y
zH>JRZ)bMO<N*xhWsI<}9?4w7uqp8u^vV{<Eg4F12)Y?0=<%v@n?`LORO@I8DHr44I
z?q-3e?yl+Cf6~5jm>qB?QXYvPFl6wczI{sh@#i-Gdh8wNJMA;fMvDG{_4{+o;&f{4
z5BzW_PQMT0r&5LZ|L!>azaC8`y~5N3Z2uElG+ppG99`f0**LKH2beNH&25X=@}64P
zri-%Wi~}ZWcTu+6!yPt|sGvpJ**;@GIhuaV6KXme5sBu#wC@~c_)|nA@Bw=1Y#EUN
z3B7c-j7We)&r4_LtjQK9rHFxXX{sx;mDSneq?F`A?;`}^_>>@7I4QL%n@&p61m>p}
zT$}CeoL87)6Z>ebdw~#35qv@>)@J*~#0(N(YqRCV3=&3bZMK}4iR2UW+H5&7OAbxU
zYqK#i-^Nn|#HXxosdh)lPqU@1_w$+W(`@Mjfkd*OW=kIkB<W<s)~^h32-w}KZ0Fs1
z^8;*IsWwbab;HSNgH3rtYZ^}7e`|-1{8T$`FZ3_`OV5FSE*)&JeNSkKvd)imd7xY8
zdpdSb-O;5}mwRq6;-`M)>2-NX8z<-o_8)|9gx+_<Df^V{j5z9xgU#Y<gndd|GX59G
z@98{s*$sI7oc0YzoBzL@(@xdv*+12l?t<JtaKMnK`MGQ(#czT9_7ceBaxnA|hx*GN
z7k5GGH^MpTe}B;XKcDlay1I4XfIs7W^uW@7J)h%ez;QW2o-j}K?9*oujX#kTMy9B#
z0nhe_rZ{h1MhC9x7_=C-zd5OHo$JP7=zlrc4I~urhLhbre|xYy)w^eZezj&`UmVJ&
z<J_f1bdy46rEh<p($fQL4H!J2_W+y&w=P#$ID?+TU5h7r_UqRsMVEo<W>Nn!aDxAy
zE*<V>6SuhX5~-d8OH+MHaT}*MzbnJ9^ISjGpFaPDR^sY`PAQxhKlh@l><&#{R8_WI
z#NjJCbQPIaTEv0GII7B)i#Q_1BCaYMi@3SMOu(-=m!8y5o9`$&XQx8z(R0~y)$8X=
zhjZCs5w!t{RL*51YD34-{IuG<kS)%-fZ&uo>jDz_yO1r<x`2e{g>37ri=WnzSD=cs
zE^O@pO>KL{&H}9@uh<2pmE@IddDI1p0J@Tmqb_%2o<i{d1z*MlAIp4NyVHEZCr@7>
zhK_}o&sl@-MAilg4A5f#79{M`FdtT<oiGg{{B0^Dd~E*HTIb{lpWH$O7eXU^FcCrs
z)F>bG{uM%_d~y~-yqdEy3*E_)khd{D_Se5^cO}R8<g|xSGK9wX&^9nvNDj8<MIYPu
zSMB!Xi$1wK3ND0R^kJzlkWdHXeXPSk?XJ{#pPcSdU<i%(Vfi;F2#tWLe&B<P^Zr2X
zUAON89|D$lp<M!0`ZRm|dF>B{X`i(IV4|35pIfXXK_ahdf_jvz;NvRx?ep3ni&ohx
zG-0grxkXSiz$c7VJ_IEvVPZxy$V@rw{det^;&PwtreGrH<vwY5K?0)OC%Y*~q*_i@
zaX&`@wVpNmht{oVy{uEflBr(ri}C9>M3RsX7Y4|C0gdY0$X5JA8&<N>PL-Az8+~%^
z4jDjf^vNU9AOW$_hi*H8)=B}&;@0$_GR@~G*=l3ZB4ewKL5qy7zJLglK?fLHeQ<F2
z>D&PI{hjHxL$$c0c&Cj)gJ7pm-UNUUFn0P1n($Ex5*Ryu&0F$WGC*TsH;WF_N(y(w
znUyls-FN$Bd>k@R+3mw}axl+1hV@=HY?$^;(O$cm=v>@hyP4=*++J#?k3@yR=ikrj
z4A)kd?6)&Y$Kv+e%|tHVexE!89B|UHxcyXN{1|b-i8aDumKdSUFF9;O(6P9~HUu4u
zJ8ZW!9g92c%a3zY5ujsn$9&vWu*67BZG21)53~lIiaX|$mI5RckNGT15uj6XRnVm4
zsvu~hwzEK|;;QT{(5bj8pEMN^22zy|rh*@h!WPa&U&bhZdeSJZmD9ZFbNTp1GHjQ?
zJ@z>h{2p0tkU#;=2Z{?My7?s<D0G$`G`{}I?jEZxNd4-Q=N7<((63bI`-Bk4p?(&5
zQTr}6)GvbXP^A$w)Q>O}me>S^{0;ZB;5co3a=8CG7MY9Teqhm>!9)Fhq@R_K)7qv+
z`sLySTnLTy!*4o|AdU-L7nA%MZ>3}7wR4WZBtP!R{Xj`zV*tC$epX|mc04)R?-Vx+
z!G-o@Kcbg&gcQm&mDPPoo0pvGmsS#c0}z_(hn3tRgg{Pb)h}tglGFXt??)V;xPA<a
ztwIPzdXs(svi3#lO~15l2-QRAO+RegID^cesjl#6tWIy6q#3U03O}xm%!aaJa=Ybs
zcF3FJNZrA%opHt3)mJow-8Eb_SskX8c1`=GIfE?noc7C8c_5K++K*FtH2;CbKuP-}
z?fDXxNVu}dMA{#1$FB>S)Qqdx-)CzrnQxk=wpe8&bF1f<$MPWv<W*D+KbpvV&{Pll
zGphWKyl+jm?nC(OJ*R1Rx%~(IdcxR3#RyU{j<Pi~wa*_s>KEtqh=~M``coqG4HBqF
z{WzdN`2~sm9`!f6pGUcf<dNN@{=)lcbqN7zAE&Ch^IvNwI9to_ijTt0hbWhoH3JeU
z9k*%*BvLwV)eMoMW{z7m6QmYBK{azr%M&&zW#EKWDUbo^396Ja6hq9xQ4xQ}c~r_J
zXNt}In=3D^y`w$pC_CfVYhppEC^=LqXHfuNUQiggAVroz0{yJjm>_|E*2*$SWcjR>
zWg<nE&r+5JIMmPio$Vz!ZH9x?jr*x`b9jZE^UKH?NT8qdBXTCc0{xsn+>Un@e3j_u
z{E@asHQiAQ;rNI@V_d+I_q~IcF3g7h&84ybnxlQ5^NU}vZ49NjQwT*=hX<Ua0_iq$
zwX2RY{4IPpe8IFZJm3+#1t5{%;ek4$@j)U(!vnZFN`WVkScnY|G#M2T+w;VL_Xd>_
z0dd%l%Ls>VWB>;nsSZNaKw|=8$Pwi#<Fu$@(EPKU%0VK@F#*^Zp^GLT8xRX{=+gWM
z(o!Ylu>t8g;44(e24D|`DySC&!W=-A;*B6lwH}p)=JFQ<^3EDaE{*AbK3yOPBg7oY
zSeWkqo;FYMza78`qI0N9m^#ZW7GA7PEu3ZL159Ae3dnv95?HeW81b}H4pS!IWqTKE
zT?^l}RjAbO24txr1C@8F)Lpp>N<EKtTcX`pG|yHcpm|nl!@RWfsI+{yAxwpTpMAMR
zd#&;Nwhoo@eXEp^A)x?Dxs3)#1YTMoqbmKzQf;fl|3N@U;GIetp;E44OFu=h6n~@Q
z)>w!jfw(3h_dGxXaZLbw9-HY-P6T;WD+10P0VVH4opmtXx1?WOp{ckQWg}40E37<0
z0|*tAC+cG$(Z?zR@g3-66jvt(E%ue|0i~D^1j#`aZ4cBcypaW<?SaO(@M@2cvG@|b
zF0UO$Hkj`t?Y1J&A~b=o$i$a{EHTtTLibCmf9yO^F+lE15C2G;<>;}`8Z6*qu<Q%S
zC?7~*><i?JB?w4T3cxj?(F+ozcVD2k2&NM$hRVJ`o%@WB$=i$21bQevVzt)JQF6#m
zg|_z&1w7(10fdmsp+L<x5|%v1LxGaE+<S@8fH)cu3mp*9JQ|P-9gxsG8j$V_NN64n
zSnf-N{KOMbh5OPG1oCpi&I84xPXwf|jITgC5s>Z+NFbdEz<qfXy(ns`)q#v(*tl}-
z5r1_6b0+s?quj2h&z8fN?RpmOBF{g#fI1tHUL;6BoejuM36Nw^1LjS<?TO^G&DlV(
zwQ-W_EK2QmIep(ct-qt~Wh=knqA-`OmH|mpfqY@cKq8ULWX9g5Zl7zaBg~B1=_~8C
zcN~EcCaxavZl6mz9&NG?52&xV1c53TZAx1M5|E=!+3!IDa<qwlk7-6xaw%IA&GfJh
z+E_=?L|cn8GSQSXHl(06(L@vAkp?KCi%v4x&6~6bOD37pB!i2xOfu!oF_3_mWY!Ri
z4v>JDWY%xUFTLgxHN|9GH)%~vrq~eFQKy*lL>z<wF~#(YeR+^vDV{VcXtd{2H=NFH
z-mL8?nQlW+FPv`Yf_mX}Q{G>L3LvJNt#0DIFqeAa8>aA~AKwBW`VCWdLVSYa8>Z}p
zAffmM)xcGeHd2`dO<HYF{7h3zX4yHQJ~+#ieK42z!C9v4gCGGk%S0diBbqeNROgr(
z-?N>cX^;8ln7FP?SAz4XLFchHpKHwu=UHt6CUP{-l#?z<0L?Qo>C$EGJgV&lZ2ITg
zEiD$<D%6Y%Ot;v^hYVB}nAk3**fw;~j*C&^yy*^h^&UN+)!M3!Ed)o*Q}_<`#ircz
z1qt=VCY)^?H-$E+W$c@+TI=FvR^h=!;g?y32ML5_rd$PqBpnl`rWQv)1Af5n-lo+q
z{J@l_#`3t`_`uYJ!2=1E4@|^j>9A5Bwb)Ab);6tO$x1s>T4%1b6Q!nGY04X%Pyxb9
z6R!DbQED{Z$1Lv)?M(5<HUup*Kel>a9&fadO~3FhK?34qvq2*YB_I=6X0Bs*RA_gX
ztg{hlD`lPOvFe&uo$Jh~a8RHEgmoq!q2NOnZ`ROpsht(ttl|we1l`WsU`jj9pS}T^
z-;`S*kbu}=wrC~$2o|Au>tegstYou|;0D5GQ(gegbJ8Movneltf&{{56PJj`(csUc
zMQBAju|u2SD6X(EXcbyv*Cwq(D@;>N56}Tdg;}@0aTABYDs(41zEf*cxYLwJuk!f%
zbEheT1t6ialUiN$8!SI}vwL=FtxI;>iPG)Y-KM<#n#XTr?KYF*+9^mN?51H`L4IK#
z-F`ig{$!VSue0p|8-s4Y9<ZyAZoeKd^ZDx~qyvltX6?GhL^7uNruu`KaV354S15h(
z2NUL>7G+94#-4h@be>|Tzt*;w;V&^5zz5t3Yxsc#+zA?fH2s6b^nbz(pE5<PpBOa#
zt5rDvZHidG<U#MGDP#STg;@VjCdK;sJ4N|4>@J#!osUSj-K+VXWgx6v(1^Zh%Dr(&
z0_~zHry-E&Ru@fEoHiqpyC4_Mpg5`{IT-dA&1S+Ykt`0=wu>=K)Bz-ZHE}EU6$irh
zrR<Auwb$B$A)N1gZs~tD<&h+i$kVT8M8tJK0_;~43)rTp=a{Ju4Q7lCvUm4sjr~J|
zdKNz+6hk$;h6UNteOmXjVL@3uZ~-+eC^u9<0%}+g8!F_QfJE_z1#`-{^F$<yhc+J;
z42fexlEsxC`iBukd&Vep!-LLnO(WIifv%|*&6>6r#lRPIbbM+k>J~H?l?E0haE1q^
zfsMgfx<&-q$?vo_Wg~*JD!>KCh@dp~AOSHVD31ex1jL9Sf|+z203?nBj0jrC0f-g_
z7!j1m0VE5@0Y(JrIKXyvRTmE8y%fy&H0a1%mznBR+P^P*cfU5L;Kp}|@ODb+AnaUR
ze=$YAe!{oq%6|JQ5r3}5+P_2G|NkJ;ZwLB$48A9V_0|RrHU`8)I`T~{>=l$<-%P;1
zjI|5%n}?F<-7DHX_+LMK^{+d9@)aW*=r0Aa9nH{tUHr)3%Ry{Mk8#kB(9^8{0c~Om
z9I+LR@95qyQ>&a2@=%`?WU=qHv&l)&qs|5t3f4>t!fG|-pr9rPS<ykQQF3xn-mbs_
zJI=<N3N^S8n){U?d+wlCGxbVPhJA2)4nnU4v9zaCFF?k$Hzk-}eGnVosVPAx-)$#0
z#HIwX+x}0HE%dCZLAL*pb|yJBC?A%=5j99n4dPvyTR9fG|Eob(eOT+5d^ISeQ8<7G
zp;v>L@@jG+%vUVP?meQ_O0u8~G~ompgjf*c6z8vyJjT|vAe($dYmuC0BhlkB(+H^}
z7s8}7J;;t7(K;oj2j%{<*Xf4P^dR<^pW{N9R$gPbAJzW5?6si0QG*i)ka;Z#^ZNx%
zIFiG}@lMcLoL8>=|9pk%#twYLW*zmvNAZ}`f7q<DyD(lMx?$j0{g*bNXjJu~O+nFV
zX?M*UH*#S8<{3D{+8_H5@4#Unu1{a=O5*vV=d5>{ZrB~aVPl*U7cYDva~K;pj4v^`
zo*K{(J9+lN!b4BJhCKK0-*N)jZy%8RH{*zx?0^5VQhy9Mnh;X`hy0~i=|J}J8n^fV
z@<U7LI2f+zIpR?=ud}%a9qS$HSYp_cv++)_-Yxv0B}kJ8`cANZ8)Js(cXYQjeakVe
zrZch79(!2;Ss1KSkKYONl7F#?{r7RLePU5iK5YgjWEKT+EuHR-;anV?VfGElEVgkd
zB)XVz?&dOdAC<MP)b2?v3Ci16UZ)Q-OM-AFDH`o{(gjsEyHabHSZd?Y1(v0RgIyiS
z(1q1kf7H4qm)S4@h%6(Rg*d1R8Qfr9lOFV=w%D0m6O>P_feWcMK`guG2-|~8t)HYj
zoYd+$QlHqB7=+X(REMMJ89%r!n}ZoU*w~-6k-p7AoR`5VRTn=?x`oB7wTBa1tg#O!
zRJYLBr+b0??C57~a<$et@mWybs0I@<p9OKFI-kpc`kZ}Vt;G|cV`Ap*hSQ+L4PtY!
zfXkp2x3aubTAjq!pp1IsxF=+`1`+ipi-n_`I9<lNpVC?;wpmsUOvr2_tA-={kbx2X
zf-OCzHA#G7<B$#gf^bAyu%Q*~8l_bcl$#XU+=NyH5vIaBLBN3t-Of6m)|#fa+hr#U
zx}D1YRluMngL*!g@oRd@X>GUeJ0H};bbU<a&+1)Z&tB5*EW8j@xi3RZ=w1ls)T81P
zi2`2;HowED$5qg2FR|)NT7$w%L6rx4AVbx7DH!I@Ne~H@OTpIn(9;?q@$nbd`Lfof
z@h?G@9|j>Naf6`-G8OViehId`%UBM3j7dTrmXmQL{qbe3nIkYP2XBSZ(?Ga0i1p{x
zoDYB17AZwjb5wp1lehqznv>1XP7?{RsW})~yX$Zz<oWOi-{}tp?>wBN@;e0(qC6kY
z$>k9ZBB66Qr&U*kI-N?~RFCCkObqceQA!;8$8z+TSRutJ50yDQsL>n*+OaZ6x``km
zTbUz+8X$pMnS-DPW?>~xKG+F%XGpKr^n|TK&fSR|8S8`$R8Hg|*2zye#!*k|nH=Z&
z^jjevCmivoa1!wWz2i)dN8FJB379iExgvH35-?|S;3Uv003=ocXL4$v&&lL2DltU#
z>}-w<G)oq0<y;N|&G7Lk$3VH1gI5!tPj%^oIg7Q7>Mt|{M|h_Aj#Mw%nWts+CCWSv
zYN+FC;I$m*h)}w!t&Y>GV4%9dvD7IDaxF(Xw)hJ5YdLc10uq_NmJ=Qk5=$3i@TJSp
zkTN_ZmM)S9y%$1q=^|NJx(o}^(uK}1#A&#Vc7#MkWk#N^HXa?45fywxE=GrBL<J<!
zMu)73N}TF>0yHV2QjxE#Z6}1Tw*f^|CWNGu4M_k^2+4>FNB~U;A)@jcg}@W0Iy01U
zF>S{5=}K^B2%UOA)lz~Mc5_3{_tWJm{l6S#_)}C5J^*iSNG>`+0&i|ep5g+D>X{qL
zd0$o!F?jXN3n>d^^++D{=3CVxS*V`(c=cQsd4P>r7ILl(De37o^=BPrAgo+a2VEAD
zE4u{mpvyv7*-_5|iCioTnJcg7Lago7<$$`L3u~ukMM(AY4oG^)EHd^%2$qKqAxjo&
z`@@i$)qp%i@X#MuvDXXqg6^xVY6lb5zRIe0kjUVwki38Z5~!;}@M>vo1`__`s!)x)
zWg>iO!zF6oWyE<Jpw_T>Z9Un2jhzO?i`Lj_P)A=Ak}td^c)Vy$NZvaEi8R)PVz<jQ
z_-SfF4aILW@^~7U63W?Ywe?u{ayt!vS~?_;G9-9_sXP=Amsvmpp*)1ufG7u@^C=Id
zI>|I>EKnZHLp3@Yt$7-t*0G#A`prGo*=bM+YMq@1_4Rcjc_KT(`}(?&yrlyYX{-y?
zv+9a&olqL<LiO+ByS}JSw9f|iejWXb?i=hxXdG;?D~ra#25THZ1qIm<!fYf8Lbpyf
zglgR*3qrR}s3U9$75u?S@Pc4Y+r;+N)l=O!*=f*Op-pxg6vo;VlFuL|co=I_2(zn5
z18>3MYfY;lnoMI;sMcL{w;knxz!vskJ-w)8i=76=xweF4oC`8YV@oLC0;M?DmJpU4
z%g8t;oLF;gW9#baE4pv9A?UQlHanXX=-L)C#ldB$0AgDR?vu!-8@bpP!WAen0NgU0
z+d>T<;0H$%6bakTcGcHQO19f+7|7=KkPN0l25D>$)xKGRQXp)5sJN}MmM#h<XhE|t
zeRl(Wy|c$Y8-v~}+82^>EeHW)Ur4^{1`-(iLPg><3rOU1U#MvhnNJV$N&efuP_ypF
zW|0cq*W>Aah5BdC9>?ueD0+50Bm*)D9z8oAk}su!L@LM0(u&&1LMq2YHSd+FWXV*H
zhiY{-b_+8F|F=3lrHTHKqpaFah2m?~A&-djB>3xc)uDt4Pl7}$)ggo@MJisTQXOjD
zi|>fwD^h`{TOGQoC%+IPIdtx{I@G-fpFR@gQ~xt`!)t7P2e69aZf{F`LE88vreTn%
z$A4OL2}q><&+BtZ!U@0of|yHsfPhiBV3z_%+Ca+51Yd!4!5&2PINb%BOvph=n(F0H
z#v5Vbpd=xAIfNKJ58)=sLAes*4hnm#1*W<ymMzC8h+YXv{{$pJuY};AETrm9k|7-y
zPJh`#FLE><7M5E~U~|4M?%;uh*069e$2dUI+9cWNvEg)+R{Hmj#$#<QLK_>tu0>{f
zENRWgdIwq{Cx_E*Z_*3!ghE(OsbHfPCWmD$fCR|ouqk$0KyocO$TX`b$<dw~7Mpb-
z&=OO_vL!%5b81-5>L8&xHEhl5Nt!}lhbm_E9v}epx}68InXlV<Ae;GmSWfE@2GZ+c
z*%B#JeJh;tk!*<+B;N{SbDOtBidtf3n72d=5I~(7meVRo$j%JQrT_`lnPKTFrl{^_
zhuK{rJ=PioG-unI)Eu+J(qqI|XwDA9>H31qQi?prxnbu*_Ed?!tqgw&hY@_B%(Y4d
z5-4-Saz+CQl(}KdXf&;ZB<CU=TNoA&BQb=-I4>+6M#)0s&kw_4q~`)83zyYQ<-IUn
z*l&F!7bz?V<2jn&h@#Qn4=de-$CyGc)a7C4%Jhl0dTmD;{uEvaJ|Mfx!_rj*39#j1
z=_-Omc9)04E0JA#`;!>l7g`Zk(qZ8$N*?q+2uoK{vfvAS7$#SdhE@$zT^-I?&l@z7
zsnkHStHXLyv}g@#(Q?tEtbGSvEiAWkh))nLw;B{AQYxngrK@W-sJ7R!K^^plcdoOB
z2$;kT^LuzMl7Y&)FdRI}NKI4yG@P+p_N<za{4{Kh@tTy6O|oZ!K+A5jG6E8^o2-n0
z1nMTMXVs*PY>_<+1T?qUnv|a{R?os$Xl|jN#ohUu)UztWc$n4bNR5L(MdRQD^eU{z
z0SUbdt8qZ0aVo;$FJ<EpgE!9hu(C@wj^sgaht)Weg~r)=y>V)p>eu0n@2tkDg=D|J
zKHO?irF<hB=kd;HoNufg;uA!_vFZdQQu>DKgdW?iMcLoSUg@kiZM-im_xr#kZdeo7
z3_(I=Ul@<wy@(~MQedh_!Woy+XFKa|hwn%jd)~C&SwML>#yq#{w-g<-puhywv9Nq_
z0wkc0Q9F;O5nDjX|Hua4u8%GL(HgE`Vr2Xnmgh@Bl2BN_Gz}6EKZfzrG@WlLAQOC&
z-F%0BU-3yBfd>3ZYrsPW2q!I53K9q>!!V`oI0C3sY||Zjhmun^0vY2|HUf>oQ(?J(
zS-{8OsWAK@GR6gDjL!&T%({2Mv~$L?#rOopGnOp|iNwxax5WjN&x^tqcLD*Ni*^>s
z7GJcpK(_dzWs4yUq>E&Wu}9`qYGb_^&RE8F+^KI5Tnpo20B(nCQ=<%va65bp2p|rN
z$i52_h{Gb%4ub^Zun2m_ESlVEqtetDBhK*=C2taIZ@TYJ@48#R&rt@R==_iXz>5)i
z@ChUUUW~}&Hz3jZUyQ`ZN5t_PVo>K-#zo}u8_7Wnj*H0SH<AUQaS<H9Y05JKftMoA
zSYEAEw}Cy`tb6nZMWC%rP~*N7ksIo@dE>qmfi>^Jb%8WF!Y<#VKi+Jzt;6Tmh}=c5
zE#}q;cG2nDb8SAiMx16|ZC3HH9%e5+tmB2ruDZ8qYD78)kU^?bBl7GCNTf40f~6rI
zrvd`%d0K>>=&HAFH7z1GIfx6LX_1)Ne+CJiX%Xx{zc1<=H#%oTobRH(U(aNx+UkYr
z5%=oP;R>>yZ(3f=h{&m+HeX)Mh{&k`Br1GHB>XNaoTdU|aBDL&qP!CkQ-S0m<yjFq
z6-XAW&FlzG1@yu~Z3?c<i#TiK)k(4E@7J3YgAlVRK4Eyyi^$s(Ad#nek+8Uw0TS5r
zB3Ogc(5Ov|jRowlz4ZJR_#27~BGOF(3B?5w>85~$;)00frqrf2#!|Mfmwve;{>I2y
zYUhAf8cQS6Q^HpOEsaPo1tfr$Mldq|fWRqket!_j_=pYerr+)RAcFgSSY5kt_Zf?A
zw!NEPkoYhn1D;@_r+pYfz_SLI0c@HD9@J|k(h(W(^zrCfIwAv={1)>{cK?HVo#aYc
zGJum&T1f-pF$~Q*rn)AQv5~O{^+$bcB6==u6Df5l2j%SAgL<dpa;s!uqGaV($v`3t
z<q`ROFi4cFJc6Jt+3q^j@z=AmhxDe!>um%wp6eqXaRUM}BoxULApwv;SRX-ftP@8-
zJ~yzF59zm+Y_Jii_il*D6F+sh@!Syci^VudAZ(yK+=;T)HPtPVjN@#;!+ID078(xQ
z$gbC=!fj()9@Z<0w^_ho0(hHMIFQKNwup3aK>~OiRqPOsfR8)au1EA|OLo`@G->a!
z5vXuGBGQqo%L})IhW@W26DZwRY}BLr)xxi=fm@ds=PPOjS`&dps$WGAQ|`c11+|wg
zeN69Iyw^^Z=7POeh1BK#*xra=tldD8P6TrS9nq{y#$z9A@<+XEhkZ5zg**1y2xL6=
z*$8Aj_7MUdWvNTme<0#4%qwO~AJn64?;rKX?ZFVk51-M%2O=IZ-arEDKqOvImWPbW
zfk?wf#y6r4U{sDooIkMJ|4ZLnhQBNnid!79YmyAh5v!xs<%Z=5H8Q!xAYoXJL<)X@
zVWH(ZF<@Ab($R>#CN5dX+OY^OINyc7Q4gmtA{qaTIPywT4-V@2WN8QX)}Qotz7r8#
z;mJiw>rpQ`$xi-B&o4V^**Gwfm6O)21QN-dq*)0Y6;Q#)YMKkYsSbna_n8Lw9o(-}
z6bc_v`S^OBL>a5CGU6-OmAwTdfUBvuz#wQqMsGRICUn;e+MTu`s4-645S0Ash>W*E
z1rVpn)*YldxW1{Li)4(CveVu51A%i9>o8z_D(7V}3AY3R$jer7K?3r!Ra}sOyiCQN
zLX$#$N^n>-z4&o`s-tLFR8D$ebG}>%frQquDBM*ty7j3jBcoz*2m*~VGAgYuNNA3X
zN~;SJnj@o@)vZtDIH>m0ueBW)l{E=2@;ojo4K7GvjEhQx3z93r;EvW%4Gm27&1l9~
z>8ri<QJH}^qj)f#`yvgf8fHYr>b%KQx>_{DDi1yZaYj_SA|Qb{BZ^w!&nq{eJio*G
zJf*)~^iEWsy9JZDQF-nbBy`@1;@s`W)bkrqCCq0{`|4|Z%(n^xCJHj&DhNnG%#X?o
zvmgO6KMMO#wgDt2uldn@aZray5&M}Rjdh_z^OOh_7PGGZLqA=-*iM9wOfHVfQ<soI
zB8#InZjz`}TZ^N&6!YiT8<4$N#{T=ydY6)AHUcf^mqle*2Qold7ESOUvO%I`FP24d
z-rx|$E*emo)}$T%^xlq=H8uvhk8A9rlATx+m1oAF1B^9MoRYv#Y7qt!+?byE7k!<h
zWTTBiR$`-#K~`d8RE{9%0AphmBS=;Te1@&;tpWP!lC3rbc?(;k@(6MR?k#MM))e72
zkbu}4ZQg=++y+$P6|&=kfM$i&aX}*S3ajISgl5I{j@y9Th26a4Ug`t_wYuBR1NjTP
z?P8F>u-ods5C+ojD7tSK^xlT1x;L8fS}uEdpniLBZxjdFhf^&#MDJDiN1cb$O9$#s
zM;ZPUW(FUCzTZLz3H1F@dEN*l(Dz3X%O+C_5~g&2G<7(dY2+9NXP{TnV?hU^%Au%>
zhX_cFbD{fv6n<I`f(h4|@YD|aqU5Tz;Tc1E$5@BKdU5eFJ5%Ha9E-|HydfVe$D;CW
zERX;`7R9XhM~;AVRF&+b!TO)dDs2SnR+V<KXsA?1r7O~q50%O&W(Yb)1ro=oDx(E2
ziC0yK#sq;ZR7Pv};aBJ-3&*G`qfbn9(AgEJAsbauXS2MPse5s@1IHJp4$*He2Ft2j
z8cJ1B>CHeMnW&2974o43lIu5V%HJAlNJFWb8PDjqwy(AkXzH!DD}shnbyQB?Pys@9
z6jLuhY1j~DR?kMA7uon{^z9GfFDoB3n9kajL4)aRRKAW6Eufr@!jl(mOwU`KjW)P=
zy^U!%fw%FwD4ua$`m7$TbKY)N`4!FjGjG)mWLg^1h`hp1JgaYNd&SNN4ah5YK4?H*
zv3fF8kdG@-Y&X0tATS_b$Ys@k(<ha@kbAu>G$LQfz1}s*e}5s@FG9!-`G|ZW7uyN+
zSXDzBkt1{2n&<Sgwj*r_8k!?><q91_fEbxuAi~Zdk&ThL_>HWMWLp~2(43T;e(rzj
zn;dN?*&uW<c9IQ3qjFNNyhaKofK1B8HPTN72(|;J=cfPuyuQKFcDfBhCu67Q%8jIk
zd_!P*u6#)fBtWL;#uCOXTqSnl{fv#d8C%n3|IlZ;eH(LKZrTxX@dqe2vBqQcqOwi7
zPW}@q#KZ)$DHn4pt^k2V?l$L&2T_R<B!8x#NXTx^#e5}XL2b#Ew;1u717tz+w;>=)
z6VsMl9_k`o<nXiWiQdP1IB34VPhTPYSuWO<0vJ8~^IUm{5*OY943Y<@Axp<BKF>v%
z`2wC;Q5u=*x49Xo(}iR8XPmxobK!K+>b4Qh!r!rF<MfuTzsr^W1ek#OE?3UKAd#!@
zs64b7Y(xe49%aX3u;Y+{&#<-Q^ayJ?UJn(5E0*Dq;X>CD$ijS22=rD)BP#P@_Uw4Q
zr0}q<Lb!+RM5!tclL`*=Kn2t>c4)lbzVMi>LI&WNtwILi7^%=n^hRU=D%m{~^mc`n
zwhGl!Wv*L{WXM3JGS{2UpVeqYMy`sjnxNlNSY@lw@UF_0;Q`1%r79QUfnGcnblX#`
z@kG5(<5RW@jl@&A(jjZaN8%~!Ja5xw&_djG%gb1n{$!$_aQTPl!86=|^E*l*HOA8P
z=~whk4H_@amp&S}09%@$E6#U=MEXnfF;{P(hAlGHkMlFC)5ps7j?UU2=kujZrc#8r
zfY#?bH|8t!$g&1ny!1>w_J{TQ4=p~)M+BNKLWxgkl27xM4mWU+%m(7j^dN6Vl(+rq
zCqL0=y9)Q`%XS7AdE1{a+ZiO3_UEGoaMlPq_;`@D-l8||bueFs6Tu{IzPvsF5-JDt
zaeaWiERZlU2lM^n?K2|zuGGQ&0Dfu$Go<9uuGGQ&);IAD-y-TyN7<Gw`ptz$?W|Gi
zNAu;O0mvYoqxl$U9eCD29cM+K=^aas=Sy2y#2wq?`O>ik354VMrdS+;B%ORrlXJ+P
z7E%8?$rgR4&nrG@Ly)g_GGF>?kO9QW{Dios01^-<^Kk{1uC^CZcRS4{f381MeA-5!
z72RnYfqLKR{6sTZKh*n9=eKOdpY<!EY2hsEv{i3geAY&wY2mD04C;($^QBu06(F3=
z7mqw35118xX60M;+lqg-5onM3XB&Ygg`e}~+8ioC_&FcfeCV=K5lsr0So>}ILv1hF
z2s#ih*$6ZzT*{XbQ>XypQa*mOYb(7oT|{%js91XUHvR6*wxeR#+k-r{QL*doL36^W
z*!67CoG>beY>cHjp@_DKC&bd-cjzzTWk4H*=7b402yGHih+WSK%?T4?$jLI=zAd6n
z;%TvTon88JXWMBu2>pK8G#i9=iKoR(v6BxafJ}?wblzCeGq4BzW{gF?(qAlj)5f5i
z`)}G9baVgBm?^xMBEARwW~@mwer=<O4mi$;u>)V}H+Ps}L(m5AjF`N_0wF-mh((3_
z3=-Lx5yK=&o?sE})y|GN+vGK3`CsXIY~a^=yci5&`tTW8vt!bk0tu|yvAh<tpV4}L
zcC7Wy#(!}v?AOj^Tff%37tgg3Xrp$nT_D=1of|Vn?4ig>8?|#|4Ga0Z7e#c6@;z3%
zNAFhro{iuK!h1FX{eakeF}W&%3J~6l;U){sJ4JNHav?jvM{iZU&_)OVVWEvczXP@~
zCf#kQ0AXPazhp)~{#ZmOFqg0=_v$T*m)HpO`(I0J1QQ5LV)8r%RDiG~ma1v|l_Stk
zj<7v@^+CleY=j^XR@ewZAgr)U5d^{tDn%(rz%P`nWTU>(pDbQ!BjlhhR>ouywaA$R
zgq1OIju6?-0m8~y<EF*~905OQvYOTZR)4T~wT%!$9#-3V2mxWWU5XG8R#Pb`rc~s_
z@1K;jRp07&mz3KGVIY*-2w@<U$D~sW6(E$yaJH5^lSR%5&ZDx9`}D~rpV$x)Kzw3D
zL;&$gOfC|j0*FsyH4Ciq8ig~HHow!yIZ8gWF`~fuEGAvJB4-pBpTz>=k|Ic8d=|rL
zSsqy|a^fx63ij=Oy`p`E4Uvo5tcb}Y9gqP;MND2*0ttwU7_KU<!F+<sz!kqEG3T*#
z<pKQ`S5N$D4UjzK<cM9GJir`@$uI}h0COaUbs~BBAmQa7i4`1+iJ%xU#G2=54A1sc
zAg0Kf4__lDj^4d>R9Bl<#^fB2PXMos$v6y1fLF#4huJR-N(?__5px#gRj`Bisy8v;
zF@08BFsz)$kkg;+oW=n5lbzETz<#2f!gqEmjZO9ESjM&Vsbl&l4*$<FY`XFvk84ab
z{3W*jxIU`nk_8PW>hhA+GeH9SQY<WDA|L^MDTXNRIm%~ansTqQ5taJS?XKDo6sEmu
z<qk3=6q7d&K?34x3^C}Vl)EOTIyRm$DW3l5NBywFKQ<132JaCnO(=Kc<7`2d-m_?Y
zTyCO(3$XF=n25fD1lagE7I5U7HKFXh9A|A#>b={&9GA5PF7oqoT+S*Wxs;scK?36C
zIA-~A6vb<5s#D_`Z^qeoC-t#8Q{xB#JO=2dlpPj#=H%V|%8Zg+Hu)#LZDY{F{l!;c
zvbgj;KmwD+;d^{V)zp;o^+uds`$_-0=nY$mGV(@T-rR=}l-`IVg4F~0XlAN2;@G&z
zJf(LJ&!B9OJ!*z*sI%kFd2uDLC(p>sr}PKPz!4e2cVN!8G6E8qvneCgX+fgX&W`8I
zi;FEHV(=}ZcjC(2xY#0+Jm|d}ms>=Vg%#?YIK>^vwl<?OEr>hAc?Buf>$F}}2*Sz)
z6>LFV?o&Y$U<=~dr=nelX5_prVjrK@Z|l7X`h5BU6Do`1@)2#2P+1h0$MZnK<yaK2
z_W<`+iR4b=qImuLxsxb4<RmVNcfFU7zGeimEG|ah(0^iEc3E7GK72xI%i?nMf#jlA
z6to#RdMlwx2VWPR(bdORT73zh(3e(PeF-FhR>q}`012R#ag02iV{qZ=s@3s~^>OjQ
zBu!MS<E~u3=ET!fh`+_1^~BEzfy7tP;^GlV)X^F${;gPi;!!Fx-w&VFJ0;5F@`?|b
zkSUL2wT~n1kO8%heRNj8Gqo-*Z%lzn+&ISC+jNTnkJ4<6XKZJ+&gpOYHpcNb5El6^
zlk&2O?Kr0oO>BzG)AnFObrTH>JXs4FWMK>Ie_nqiu_Z3o$Y4TdOB~A_j6TSK`kWm-
zulGrOE~}cD#EoM!tTUHE1#M$b{H))e*cO+YY9?RiZi~aJ;L&KPp!zG=)}QrTYgE`c
zw7jh#oYAxjYHq6E#4}z<q>C=-E@$8yG8;V1+?-1DU0j5jzrUobExxn*B|f1P-^JzP
z1tc=_T^x&-&E!uur!pRmJL~4H%w&fiRBNQ$T-IkfI)Ww4E(Bm3kH+P!4U#K_g;NL;
za7W|#Wudk7fJJjE_=Py4TTAqG@>l&=haW##-=o8W-R|gmf0xJb`}Rh<-BrD>qY<w9
zh+ka4{-B<`u!k#0y`RD@LjDW)PxLMA*QX7;cdwRHHVAL~$@dHY&D)*y$R1r$lJ5>)
z|KapOL!N#bzfwP-f9e1EwIp5>ov3hVB$Upo8CsWIh|5(FzM^I>#1rCYHbJ6hF2v!_
z(6rc`sLNttwgdsq%ht#Q3C+va$OOq{t&!QBQXQJ$BeN3-PF>Ffx(+@{Gmo!88k&$p
z6C{v^CNMOIQ~zmUsxKxo-b+94a66rW7ZZ97(S2G__nDC3-KQl8Ku*AMSZ<_10&+q^
z_8*XdoRC2O+3!TTT2P^<B+@+;cXvn06r4_#TGVT%B;<Yoq_~)Tg#jc$rX=b&pqqNY
zK&P3OV3%F)|Jin$4MEjAEg_HRLI@Dk68R!P01^<>5(p6R7bIE`IU|u?rn<*EN@my~
zRMRsOGVli}fXqnvg#iZ1wXjO0Hfli?JsTBGKk*3ynzIwqdV+-J?1Z$QAfY)sVYN{U
zTI9|bZN%2O-D=zUb`~g(I^Sv{NCIfS)kGixG@qIXPLNY+X{w788J{x6aDNwBoS@f0
zXfkby7E+fboauy;_jmT|-_<-8@VNVzfhC#=0)SnXkkb!Hz%EP3V-g@S2QEv5(+M#L
z5`)iy%M;3n2{8vs9`sfu<Qynjm;*mZ&>Tpfc}r@CRSD<4d7V@2s>j{62ME#X_=KXa
zvWg0li^_EhNMNr@$Rq9`F~6-!q`LC`RU*Y!)2c*`dyL(p)aV#%+51`UuM5}OC8Z3k
zO~^+<TJnytHh~RE+)+dBkj5u$vDe+L-6wXws26-<^+w15;gf`XjRPd<BwDpLrqgd2
zv@+G*iHs@9^sU+MNM>Mn0vD*bm2E}CWRDmotwEryd#qf61m+%Vn1BT49vUXI$;`Gw
zp4IOY&O_;9(>=>khCfBS;RE!(PssB`AffktLY^lAiFW%w5kG`>qbL?JsNIx<33;AK
za!^qR6Y@NfWC7@40_TZvZy0(IIGVs7a-5$h`csa(pb)f`398bg33;9f!q7dMz$RBe
zt_!M?Ey{8CFRZjxs17R=GG5q<*I{J>@k073oK`fFs#uqhyMC`KoNeYd0Zgb=S%VKG
zaH|q>=Mf~jLscUGHd#=*@qpEIRU+1zyE`NR4!Jv3iCa7J075GocGYZm$la!-+G=eu
ziEH&jkVv*VA=kPfk!*DW!G3-muN7IDGwiOgdu;I;8-jvMXKV-xE}co3BESU|K%7Y+
zz(oPTRuo)1$NUj@<C1eW0tJ`O*$5O|I+rlT3J)qkI7bGMpF3+suHLWd=OgZS9Ibw}
z>zLw6zb0gW6+%$@H383qAD(K3c#=9I=^UH14o}TxS90Cg%D}VQm10RFlF}$Z0RSVC
zIbrS?gGA>Vk&KK@3Zp;_ZWKl)l`%<S6eJINqmt4nNEVF3=p-2hGM%j`EHysKkIb`8
z!`&hFa=u$F0!N&b$9Lppd{UZEkU$)tw9IEK3P??6FEn;vX5}%r`q<>8G%5IkdYqh;
z6C6n3Ois!P4kU0UC#CO+C;VPbX3R<o-;)9quO{Wgv3Pk8i<6}Fa4blC1uY(q1&Q&&
zk}x88XVn#?;V?bPo{GEgPELms^<UybXnGRsE}VJ+3F`GE`!epnC;56(dY|BOHoVVA
zxe)UAW|Fl}xF1WtnUrp9ko$gbCgH{kB#f4~lkB4ekls$pi@rg=xAAroJ8UgE66#@Q
zlGRDNTcu_urPCbb_wZ*X;WRIS?Q-G0zU9e`&FSZp?#7wsaw<Jy?yejv{R%35s#?3J
z03-?sT9h6n^1Omdk6j1|<Ku^{aV>ZI#D__FP7F-Qe3-;&MK}~PpjNU8wcHOSR$9dZ
zleko@`?w6szKS^t+z%vHS@n~{i@qv}`sv7JQ1mryV1c`HVog#$36R4}z9xwwO0IDZ
z4f1mKRe}4~M0rxW&tM|0@+916OiGZ!C|<`})^<ObSeKOUJeZJKmxMcyfDmLbPCsGu
zYP;`Fd}7Pc<=Ib224fjA7>FB~S;yTtu|alTVnSv^5=OZ>mq8qN6YEjO-7>Ywt{-}Q
zU=!8PhqUUz(}G_lGxo9-b=)7AUnFq^kJ=$b?NEVXBH95Ysv0!khorB-sGxGwTl*nu
zhaK#vy6(FYJFL8b37H*~m%novP+zi#>bc7jUs~;nm;8uJ?b(6LpdG$qXY08;*80k-
zKfKrnnXjn+aHJS%p&j-l5qs&tzAbRa*pT|}CMht)k5S_@r1vCi)-rw~FQv7q?n`D|
zV;k$cPx|*I;id2ivNaX&Fk9ciJ*)7rWrV;)ISwbK0|^q@Ih@4INb%d&RLEoO<%VwT
z<XeLtOf>m1YtVxvp`<*51QH0xsCZ<4TT@{xncfKIx6($S4pEtuyS0!3LS?c*oJRo(
zgvun&qwp7qS`&FXJ-Cs3f}`kkQqEW4Lg{o;I*TAliduLhIVY{D%FeUKMefZd=k0XK
zYdoKn@n*;X;(RhsIISQ7aXtyBm5gR<>ev^P+}~^g0-6^sg9#Fv7cGMc5}FsU8_d>J
zysL9zFdc2L+KJPwb=9smnzgQ4wh}6UxJtHin2t8Q3C1#&u_C>;iQAzBUQJnxft#oi
zr>EG?7Veov(^GOP0T*D?Q?eC70&IE;t%zIS%1u<gZ=~3amhL->-mrD3-QGya01<?s
z^F|7BnRZ+U?e=zxg<HAXw|_e&?fp&sw9?xtY41S-;_Z}lAwdG-?G#+d4{7yr6G-*l
zl=HpxiB9gujxx}w0Wie;2NK%vrsVtw658*kq*DwM^WVFv@OvpS{}F@Fe{)jG{FIpg
zBoBIXQ*!>3EX;rNQr7%;6Lp4#ctn)e4y?ybnEMu{<lKjE$i>2xocllmZDGoq`);CM
zu$&z#c3<v@zk##dt_<>ImfMv<ePVe^PJR#u(DD=-6o-D5n@u&H%BWyFZg$@tNT>8#
zVocsl&ABSY*LKZ80C1I6KOh0P%4$@Q09-|l`V1=fW~%yf_DdW0-wMlZ6>8J+lv~`B
zfDBa1Q@AHVyJR=hSX|F$+~R(yaD7UKFTsS$`jmY48zfZLr{Md*x<duj23D)seQVJM
zI~8iU4Jr9FDP%|}1tU%4=4Ptw&7!VbfWT1LY*jW$Xl}MD8zeM0U$5+&sj|PAi^_Ji
z{lcndFo|nbGe|&uVO29oKzu>f{3ld%8&lnx${10DCEL3H7}%N8>xg=8L-o8{)-wno
z?zV~p5{SF4dIkx^-BiyFP@FbYJ$u-r?c9x8?6Fm-p7&T|2QpCELu2P2u7Z00HsuWF
zwNG_pf4xZ!vTg0$t%|@BJ--dF^KY$Y0txkRshPIZ24EW^E7MKdyLUQEDy@0|7rCyq
z>H#FOP??gBGe}ZOVRkw}W3LUh!l`uIj_!Vr_NQzN3P_x?F{n9CrQ~iVbbxUxg;|G>
z-!^Ct^?b^CnZ|ERM;ZRK@=tAW-Ws`(`+urB|0t`f>yFP{-;A7DZN-P83^H%tz4u&P
z!9hTw3iFF!3Td<?O%vPdN^JgUY^oTw{lnG_Fb-%O5Fv7wFe*QzIHm|F59P;zI1(6e
z6b1y!gw(ajT2qoh5Kzmne)c)%^6Y=_yYD{x?z?}T^X@tK9NL{tGZ#qao~<7Ezdmz?
zU^Dkzb>=Idxt>P5FVf8QBr^BQE15f1D(S`Q;>dM06i0GHS0JifOd|@2$ctAZYOIVZ
zn)CMU%v1nIY0mp%2E-W6d0)(cNNUde`~@PZIZt36mriwDwtP;$<mG&6Wqq}2U0-&i
znJ`7|ymn5$U$qOdaS~#4^EQ=l2OxWH-Wv>v?74YgpMl7pn<vC1UdBm?&Ci>@sp_xm
z=BMgGMa2A6J)q_CTlxbLF+a~pLncSZNop_5n}7YLdZ2D$QG}RpVcvh73=<+2=Czxv
z1tMZ$-Y<0=Cuk9-lJ_eBS}w}_A_=7BqP#DXK+BsJ$#D{FZO+P*02X;G19^<L;$uk2
zwWU_(Dw5j7${Vl8%C*_@J^7N~6_$KU6)LXXlTXJkwPM_EXIyjX`xNl*)V5qgVs~m=
zAQHR9wq5eEU#&dz>cXh|)ZXhxt`7YJK^1a1=o|LWFOWv7Lq6fM3&d(MXZhMN*iabp
zu==31iJva=xj?(Mq3^SRv|AhcJ_|_XuMG!o2wk5g1RMG5!pu9N>$5zKcI!jmXL%Bl
z|8^*S)~f@o;`E+J!r*9_DLg)1wW%Kh+?$+QTMCYZK5~I5btLqW3q<&lFdy1Kl0cL?
z5=KW+O4iB?0j2Qoe}#TpuvQ#+%xr5`gGck5OUH_q5{DfNz3aJ(@MB@>`dTU3$3vT7
zlL5#%UQ|;m_wk~dQZ<ej)s(7nJjC@UB*E&k<$YnvtjJt^QuSTi7p9A}>%{dZLzh<o
zM4n9D0Yv1<(B~BpktaiZ|EUZD>%>`S%!mJ>4i7(5Y$L8e6DoHU5<Ijy6SAd$t7}6h
zeQEYSrRLRq8Tti7b=K`)hF9A~aL5(6e;Kj}PI|mLLFb+I_>J|>r`7{<v-7F-fWmsk
zdUay=nUO0`0E@hnfjsKW$U7N`q?wU-G7w2KBdoVvK7p*ymbXMD%c9cCyQ|HkePuTk
zM$S-WrPsDZ>F2WbV#n6V+Ho8J;jNJmYaqf~BX36_!doNkxJEjYdhA%fAPP*BseHx!
zvA*ByrgN5>)db0<1q`%b5c#wK(tbhY(*j5YE{F!2$fbo4Y+5XgGK(UY7M@1CUqn7F
zJc+b;F-nJW^-|~-M^`$8!M6fjSHLBdSRDCC1tM&5ltya3z@^UClK|LyY2<AU#2iag
zTLY1_G_^I*HpSNR^;AQ)d}UNJJ2v;UsQdKFhz>wb+H7F8+v`#AW|WZwK&}S6)owyF
zyIa)8DXXK*-S+jFyTpUM5oIQRjlx~pg_4R}69wxL_wT7RydWgAd$xLV>RbP>t^Ds?
z8)X`b(!>SpqRiwg(h5<q32D5$^~zD>gl6W>QTv-VMt&)tRZgt@Zj|{+QJh%sy@*4`
zQ{^^C!8XLnsiL+C)yk9PRj4Cj#VwIPL)1}_yEXEsl{yM?JEBZpHq3BF+z|yk5&X}o
zVD>E%(xPY8L!&>4GWA8B<Zo|hlxh4L1!*739qm8f1_}8t7xK3Q@NrifvOu)!N<$t<
z(=G{lySSu5VyW9a{ByOSrn}fi!n`~3r2`(?bVrm9+2*!EjJD6*@|+qwa$n>t2Sl3e
zi+tq((qvym<+v<M8XJJ+C!*jF1@oM`RQ4c0U5V!c+MY-w5{Q@+X+#1Mb0YF39!P?n
zh@wA`U{d0R;7a`OBT9UWEO2X(T63Xr?ge%ARdpAN_mOIUA@Wl&Fmay?QGb_GK<;xP
zVw53;u0e|ZWl~6n2mo4MPO}e4%gbr@0cm;pO7=C#NTelp(_{d2X^F2qtNb%=iG8Kx
zDw0}aU+I8IYKh6dRew(UHD=3K#U*<SA1+cW%log2`LMWIUg9^3v)c<#zN}hGhquSR
zGC@UHd#vn|WMM*Bdn`L&NVRVi@2oL3uc}qU*A&}`o7cqtpD{eNSraq5|GB#ne%`QQ
zscJ19xgmB-pAjUIHpBznnbAPnY>08tukC&MF+;Q|4)&NW%hb;6HpTt^!Y-a{6t*pK
zW_aarvwfwy&b+x?=^6-b>wYdHbxS<(X0oG<n~2-D#KUUr8s<jvXotD9T-A;0h%>G~
zgGiH(_<Hv)8%UFmnAJ+0f`tSuy*<v1s=UM9Z{`YhYYhaqAvKq2ygk0r&5{CXygg=?
zRF+9JiVt^~-WBSunjLY*u1XgoO?Jcs+>|qrCOcx*A<6>iMj3y1nrSOlLrrJQnXB$G
zWTf30S4qyxQ^`oXGp?<#m}Z;sl5eNkyi$E<)Xq5L0<qC9=-(L+y45$4m+d>_QMcQb
z*^RPxb61=hT{*%%)pu8^p`#$AjparAu3}?((Y{L>%lG<?@^ZW@&Wz;cnsveURqBpg
zA-GvcF4MRxzQJv`52SHdJbXmOEa`X0XUq4+Y$SH`FBL(vFJ{hP&bl5?FqZek!9g?b
zH8rk@U+y0{bfopf*Es(Ik=7Hlz(y9s0LkN?xbk4^CX|F==UEQKEP|HI_7o!UK+Fu8
zEJyYvnR+=8*Edu=Y46W%j>N&3%73Z;{*TSs*VGfWKv!GF+eHIMVn25aw9I}BaUeP!
ziTPMUR=tmxs@7{(y{;N3_ZB5c9QCFd3l9={WB)%Ah=ksl|B-)`<!$4o$eoUZFXBvP
zZ-vZ{Ru{gxT1_cyf|#l#<?eJ*pv3*@qCkoJ(<0EBNy^>nIQIo+lF!Pyfg4YJ9%s(Q
zZam>>v^x{~@q{Nao;VxJc;dHzChvkd4dr57vPhdDYt(PD7vr+Qb~(&IDJPfWV3=DD
z14JXRO{+2>X1NsenuN3ha`CeH-dk!)?s6R1b<#qF=W@(C>G75aG((#$Z>b5n89Mle
zL^4cb-x->J9`g3u9&|EOo2s?y_S{Sz4EId(I(ViYIZ9Tc!bINB(&ndY)#%(T9oS?Q
zDonHVts^Sf`~rwUo3-g&tH$P<i?@>(^UZQQrxO|dG`CxaPEQwaCvWDTmfI1_NFs+@
zv}szW>Z)6`-(wgmOf8yk{@8z7xJcVpT{yZ<eOy}Isso#;LWZqXvz`2Ywi*JHsxRuo
zp10L^gX$NHddUm=7e%jWWYq)?N7p4Qv}r7;dk4Iv`7a<ZB_~K$Ez!Zt+AJ%mx+Z?Q
z4Cew4SfU5HPr`xteTn9UxWo&Pcv+(3m$gePA=tEP(>|>{1s&S7Pb*K7v})6&)mf?I
z6U5QWb)YMM$LqugHmXzgAQ!`2!{p1g@5X?Z*Do>zqSJEC)C$|D2W1>j^O`Q{FwecK
zmStblWmPunIC6%)3UGvrIv_H@_B+cmAR4|dHkav;8$_AaX3l#|hpg6t{nkl{@T}IP
zufz(6zc9=+J@2V8Rc{pKSgOe3FETu6)^2Xzq=x0%Q^!H1WxF_T4r_;CBIq_19^0f;
zrf!oC>^lUZ!nH~B4nd+Bh^S3^^c1_Xu0T}Wq{rMX^W0p<K%33R4pkFvPU99LA~s9h
zK4N(Y$t^ml4S#5U`ZsET8N5y1mxJ(^{tgnGTlCm*6~DkCh$J|-ng!d`qG)STD~Zjm
zqSg0^rit0|_jSo(U0ONC%zu|o_6OTloqk{Q&5MjVCo*vVwGQ^^OvR;uLFYt2a2Hx(
z`*!tI>6l$QGr<lr-8F>o)|p4YM&YTuG$VKE^Cn7^cI)61^T-}GrU}Rsf!$VuKuprD
zZ*u)5kha~LC0Y`yKti=!5B<c4st|0bew>D?r=Y{fX{dUVgzCo<s`k(CM53eoAiIwo
zGQ&Pl2b=im;*<+0bWr;bV1X!fP=~hGpn=5cK}mk6ko<Q$sBb%jLec?o9fh*o{!^V9
zA;&WXnMv95US0A(82H&z_Kp50c4&X>!6zP?{>WXjKy313kFhznnbE19?BA=|kLv~b
zPdP~<{j);FhiX9Sw9nXUL)<G=l=)2i4K9Hw^O<J2?5|Q}KGRuu_&Hal>|2fjwH2Q_
zv9#|iJiJr=U1?KaQLH>;pZ4#?C)sE0)4XtXVr8vMpB`|J^(a?GtWd6Vdlq^M&)lbP
zOYd!&xObm!_^XQdC8aql=%g+=hZ)wFR!@59aWi?B+L%45{Q^r4{9%TQ9CW!2L?^JF
zeJTSY|CDC-Npg~7eb}td+_zf|tNK$~m?6URC-IF;3*IPMeA+DAt-f7#I?Zi}LY3U+
zPYFDz__^udrN&l$uKn)P5aIb;vqXY`g@@EWV}9JF8mi9dzy_ue;W;CL$%d9dQunOs
z>{55;&g#G|3WW&IS<U=*BVjN(TmF?UxnzdyQ4QIzGz)Vi9VSaUoY%ocNr&1dez}1a
zbRO}%_9sFB(e%9L1-8T;khnXq!;3x<gkTflLYfGkf(94TMDQd@gbR`g_u~}~M4FkD
zJe!nO-djCsy7_iT*$t*~ud2(=Ov++gbO(uJW+lOB>lh70F|aFfKyEQBp_qsv>|sdF
zi8;Ji-H~fff;%LHgbGu0!kndanS;a!PbX%?N2)IObmD6lR7<9I$;>%N714nvru8E=
zKG%{2W4t8sO-pj;SnHcX;+xrt`Ta+#J~un@MII_lvlEKEtUeed&Y6>#soiQ!ZcY-^
zdP(A)IY~pKoy_M@p={=v#Jtk2Ch2F2Oj1vu5vHHu!n?BNtx3rX80&%RNoHCHueoy{
zt8WcxO_+cbZ{8)|oR<Xi6El5}8r=j&ECjdu9f<AbC87Jn0^}LzCBts9P6guBc}dOu
z#C60%uugqG@g1?Jpwsh-?}$A~ocer%Q%^~*@xjERq~w=nX!_r!ru3*9Y~FZRRhauf
zQJwu4C1pA5*-G&&M_7*Br)pT75!f+&8C2w(gd?-~6cmWcFD2%weX2J1QjtkK`jRjW
zu}q-Fi8-`SRo%asSg|JNv?EKt<4(`S(=Nf?;WgDmAAacZ$2nU22OM`j)D~WDB)uWm
z-S`kl<0T2>!`R*dPq!uJJNuQ^ZD}}gv=K~g5)QKVrBXco3K#kCb(*<+K;3BG-miw|
zAi3@z2KZl*$Z%@oomUf6+M}v+ucm=mX_sESnh=Q9Rw#Yw(!|vFsC;f|;s>3Tc7V4u
zq1b54M2%dQn4k5iB)2RH?4dj8Bg4C839IuQ6QjH3iP<4c%ZpZ$!QJu%E9I>u{&1~G
zOuqvv%&kZQH+104AedGpeC_2Fm!lsD=>sUfG70P#YTVB5<Dc+_nv=vwZmSYA8%fcs
z;?v1K{i~9(wG}@ir0>p_uTDz-lR)`fiIeNiZx5)c16C*OAua)Zw*+*168y>sG#HaX
zaJ$(6@mYH^#BCZ2#Kr9i6;G-ZkbrJaZvK@IXd&2uelrbdPeG$M(}4CQ3FtQ^pqEHM
zbJWnfgpVsu9aM|^uS)}XumtdW8^A+{0?=iB8lga>u9pav9%HbC@!Lr-*8Ib66~;h^
zU8DkGep`INNE&9)J7)MHHNNVd#1Aha3N@kY;ByLic+?GM?jd!1)rK@GAi}djqGG(|
zA!rNc*daBss*pNhu#MS*gck>uA%~dVXc`ZzQMrx9dr6#blzZKalcr?LHzy_A%?pRs
zJ=x9T8yW9U5#MZ0f^Fv1VO8J6FXt5KJlodPDL^#cnmPrDQ?@2IZ}UzOf^|wq>J(2w
zgO1cGo+M7`5T_jFOQ15&CEAsgd_?T*y{g*$?8CAf3!O*QmeOl>C1pcwh2bzE27~5>
zqiT57?)2dxB6_zxoFpxW1Tj1`y+_qOxvs?jF@gwBS0d+Z$w2ldvHc!1wO7rp+EZk*
zRAGA1^6;E{&6!^Hquky!CvLJH*_*KEgd7$(l^O7)<e>St->API@JYf)Iuhkm#ghAz
z;DC>EFi{S{eMALB#r=ujT^Y!Y_9v{RlPCvb(EUkrz#CKu)}TG9K|O^>=t&LgNn+3*
a4Em4dk3Kg2iRriPJ9pJB{fs%LhW#G_tCLdz

delta 44032
zcmZsEcYIV;`hMo-&TW&)%-m#3l4*oq5(FuV2}MNg*xRlkD(kZAiUR8Hes?!0C?Z|J
z0|u#vB8Z^C7y*$cASHmbMJa-cB279-`91GB=W<y;KmK9f_rC9Q-qYUmp7)%4Gi!7G
z<xA`L8{iqB49Fg!&iC%VPuX9Y*?XV&^_M(TGd)&&3p}32tYVF~ac0gM?@y-Ztqj}Z
zo#OG-VRQbf7i&SEUDv9`nr`zJX8LXQ){R<+4hAgU_7-H#&3yEWxBc^;@tNa~X<;?=
zm13!CwvuhDV^pPC;Ua}ax@t|5_xA45r^oYs)35xw$MfkYd;RH8J$m<fGTpOJy2syM
z==%@Wu$y+V9151@x4fjTk-jhCkRBqFO&pS=H@(i9Eeca@wKDV6lUk{#ZKaE$0;5v(
z6-p%)7?o;KsY3#zQf=1U8tkzYZ<ei1QnO~Ujor1kf|FElzV(o$db5-)Tb-=3C(r2j
z)&T*8$*Phh1bU_rS*zH3kc;BsRQByt+QX@-s!}9nJdl~HCR5h?9xeoO8oTdlZCY}g
zsuV~eg}7=wVcpJUVAu>6enz`9IYU)yNttZO%uwspwVvfNsPPBvKhJ1A>we%Gq(bHc
zGH3@?$zyAC)vT{oPvII5%ju!5jr*)@uLow%RlQMOKM&P!o~qO@?#w=VTrXt(t}~n0
z0T)7G7xS_~0(YKTx1QAwWqTAn{Dj^1tkxm*iK^6<GE~t|)CLW$p;S>1RcRrc@vJsH
zwNO>+Ng>Wv8#b~|qTe8dnl8>f{AcYYPja!UG?r3S)x~OQQ>!Z%LRCL!Kljw0On$B^
zy!W6<RsEcL?>;W$wbd`!vwzVZsQAJ)$qSh;$fVubTnNKqH4q9nW~cA(@#0H8`t<G5
zyMCW^pQn4h(4$Y&J}*7h=jq-(U+CMj*YoLTdZnN5)i?cgua|rDPWSyYhAD<`ua|m1
z-J>+!;e{8T>)E3ZjpW`v@Z3swfBNYjefrQ~e)hrceS18Ue(E3T|AFh(Ta=Q<4CvYS
zxgLMR|9#R8sEA(AKlcw}_vrmX@1A{nSm|eayzpGFe{hM0ZBTZPbZ_?2vs$#G_cb;@
z)8n}w&vxgg_U-jo%&1;4<9~{LrWZ`40-o*N9n-F7-_rDh!0Pn(r~lmj`DX#zqwh<-
zpYJ0o*Qb{#$SJ`}Ki8wXcuJDI=52aV1$+1C4uGeg>ydux`Db|BK%nQdfA0G~r8nhm
zTAFU~2(^*L?$^x*_g^jg?hcQod;P5^8I|tS^Ep%=P0;gsbVv7RN*i(yfF9N`%+Os8
z<)F~enXA<%B{a5a=;*e(p3V51_TSWcxEU#=LukF)qNO!Tj4#7hw`3+guZ2D7E$%2Z
zAhm@?;WA7URkgL9YS#B`TQBX4z)sZ&(<oO}ni;#;`!8r6N_MG=P6ZGXM(t7!ze8dG
z?^1&y>qf4Ehr5~mqIOfsZdZjS+-}tfNfi%NcB}bes|QzsDf`$zU(}v0*(aR_N}(CH
zPmR}+Dl|>@sr4IJ_i`0b2Uu=z?f$k09ABq$e|bRl)s`yRKscb*Y2=Wkqn4CfD>T&D
zYip;~tU;Lxy|tUOgQry^VO<YoFID-h%8tLJwJ1HSDh5{u7g%RiGv<)MI;$4NtrlDd
z4=<?f{+G3ur5Bt^dljnm1=YxtI#lTkY9wkk=Q^nLC6z6BS-ZaElB+|tzN8wq)S+5m
zQo|AJI<5n%9}B;tH81JsmEGZ0sG9w}MpUX~laRNtNSX%6(Vz8wMQc^w-zyguuR@DL
zf3HupEl42r_tq7Q0!SeA_rk5r!6-wEz^}Z?4!)wzZTF@N;U%uuCwdezfOykuN2C#6
zK)mTKD6}SIqpdYt8|BTqsAabQT^sKSj`CvcyiJRiMy)+I^V&bPd{4<(uWW5_fi~7_
z3UH7>8|%ez>BM#Lu#&C#Kdp0lrDKn#cwkSZV-H9Y^4g+NKmwtX8s$rPK@^L|pPK3X
zFKvydWU5y&xz*r8X{y(9ilxS%O2sziI-sVpvj1q!N~U?0pj4s8pXLpv9g>8+wd+_N
zxC$D7CVTfkTF0`PuBFuYGrc~(fWj1N{F&ZV1BpP5KhxW|2_KCbwf$^XP@%OfpY0-e
zfiT<YKF9!JwzqCmi9l^X+uQtlYbJG{ra*We8(g8y>NL-V(1`2x@fDh605Q)iCmTpW
z%=2QheQ0tB-PTrkl{H?qaJ<QybvEMfe5>bXs`_dFRx9v8OcG7efwIEwHXSG{sQm(P
z8+d9EN@R^U+p;Z#GX|Quwzkr%uJ%%^n+^|pt58RXU1e#u_e-y~)MI^{<QBoH4bhZn
z;fBoQ*R{t2r63$D3|KKlGsP4F8)!o`Orb5JIZRs}$r_B&ww8``bxi1t)XcbSLK8Y8
zwNx#uQjAi|R#~ReJ6giik!f-k;eT`v)8rHY2@Iy$JXS$XEMPFLPCaY7DA#AJ<29vT
z;aCszjMXA+64Qp3gCl}HP4NM3yo=@o+IY=&29^(K<F(p#twjc}e+~ke%wNW8<!bp{
z7b6F~I#;_ov~qwkS4;7b0v6=}W3E<uowZcu7=Bw_lKFnT)<G#>;$rxLu|$);K~wy|
zSfX7WTz+6I(VDlgPKa9NqKny66SY(2D_n?NK&;Swj_tXCSfSOrUN&wnAXaFtZm=$E
z+>C&&ZqJOGr1i^gzum<M0Asu6b9ylVjO|*UGhPG0*sdkh)=rCK1a0k@rkuz;@V@ql
zw*o(%Rt*B?nC26HNmGJ=Ii^LOehvcW81=Ilp+St$V_NYEEnAMppfS+2p>kYPn_kO;
z`}mbuDPDNUR!?h6abXC7Mc*FJ_hE-`HUcd*C4{o^K&%-c0d!g`aLNv$?9){CWzmwh
zt^TI5&0Wm%ooJaS>S`@)jE&#iu|X#NrrC}Mv4QlPR;#x4jtOUrx%!Ttby?5Mnx&0a
zgYW1@%o<Ha=;UlGS(mxmJ7tx+#0C@CmAV|oAc0+}+bP~zAc0+}7uU9K;|O>-fz_I)
z-BCWlMIhHZ!9^g~J3+U@5`kRr1U*(@4G>14Zd2HddD<IgQ(Or0b5mRha>P?~TlBWB
zkRzU=WB<^Z8v&|{{pDlr_VOwhAsYx)E&}=GDqXHex<ZR$m5%iY?wwi!&AT9T{9~<3
zDO=!TASh55xESP_7wEE?p#zKsIyM$Ba0tj&v&{>%-sROU0<DVGE&_SxYTXtaI9(yn
zT&<^TS#Rnb0^?&{rr$#Ct?Z}Q=}NwAF!IIg^srbEbnc7S=~xgb_yP&fw@xp4)C$6f
z5;@Qe5~uVLxJ%37sOai-`hyQygGGH2D1MXq+h^KPrTiP$S{>GY<62AZ`y03G$$fuA
zUB8IdOkF|2KV(`j(Uy41e{eAjRN@ES=kzu?-yigdaDvbQ#t%9+Z0iIDobRzrv!&Vw
zPx&zy!-O5jTsz1aA9LHCobfRo!+Vw(Kyb#V*iFl{56e%v5af$bxe(-wPwCjMi$)_~
zd`fT7h)-Bufh#_%v+r&;3R%15n%4BJE+;7-LGi3ECn-oMp4FX6sw;52mvlZ!ZvlZ(
zbjdX#2PRx{O(5rc$*l!B-%C`B*K;vR;b<lpS?e?NR%ogonP3=2)@QWT7&J%UH<U=>
zEM?TB@`B9wUt!TH1xKuIcn;Y24H+7N1nm0;*4W9^zy?j6*_o#6wW*%c*{%{z$=QaP
z%bNp2P?~LoZ0kL0QG=qPx$kV$CYH`M#GajaP?>AQ>q`}yf^&^VjjbU<1>}6TVWT#z
zbiP{*O}hDpnIm;*(#<ylL2C>RcY`L~ip-!Ijb)dvFl38^3#AoCfp9n=p|rxls9Pf{
zghpMLx#w%`D^JsPZb>w;)){h*H~7R_XJCzAl#e~XVr%`(tO1$M+q5=TpdUt;)dbrm
zh1&L2He#<<ntIh#xF04aYX7Q<0ym>(pn?1v+r3x&I`x_<GZ<h(=rs}=0;?bdvVW##
zpEk^s?r$pGcH$D7q&`()Mz*aDH?uZn{=Hvot%Qf0NT+;GMP!p5BTS`s@ki{}2lP1m
z;d^ajF&HAHg2#XvVZzaj65_~Vj5d`8Y}yan+ZFgF(kj{9sL>|eB33V;qE{i8USMXE
zZ{UorZ=f~DnCkVkcyZ2_H?mRsJEoexmW4VqQ>}e13pR{3)w<WRfHkh-cRcjzyT4<h
z$0~mZ1|KorREw_#gGYMLRGVGPf`ggxJHy~FCYow}SE}L-M33quQ*Ge#-pIy;o@}c1
zu4Q4SPWhc-h<B#`P72}6`~QRgMmEBcs^6Ip2RqGF>kxc}(~4O1r<-c6Ym3ARKI3=z
zc?jlz2bPcY)bH9NY^$?=SEC4K=(X_Mc)!gtE7TTOiv$lH_mQdIcr6PZH`f&53bz$f
z=(u^NdegO1=(mrrZGK3h-#+=BBKmE<i4v>CK*YpSt4-x|mibA0zXHF+9LnYczuHWt
z<w%6H(5lT^pI;q`N;V&fpAnWAiAuH@iHl4%c`XYST5PJRYgwq!5*ijQ`P>2YGE>=L
zs%+QKTJsA0c8s8m*)rD%)EbhtHe59#TNtt2R7)j%wlrdeI|MijMyzzl4rc*-)$gRx
zs$XI{G`<!L&AQs{Nv?@zU2|=bq9?yH)mB#(MMthP)$(guD0022wzE3&dIPz}R1(E4
z(;Z*x)3?{((%t{wv(HV;`bE1wg$F#yM1NCCu*O7U;y!pFWOcqav;NEe_=|S0{k7>0
zazDtkI$Pnj*uB3Qb?b<H4rrbt_JRb&Rx^>b(kNIZf4Gh5hqdD5HdEotJTW1&jbso3
zg9Npmbv~@sN^Unr979avl1wcwgXY@7-Z-q)PVO)j9*;wY`fLZulyDhTawl7TSZkWv
z>Eck8c9P63s1njP-<n8Ng^y?*?QczQ9<LJ5+Uz!!`n*bP_z_J@g5+_R7Y~83+eGU2
zE|h}2jIHirpB&NdN$zoFs78B82Kgn(fZEGaN45KtdmYCt-2PsYso*lG(LOf(sP<}d
zpNm5^+D9^NxeRLb9V<PiwNHL$%2YBEERgw*WLj|<jFA0o$T97P<bJ0kkx+rmev-MF
z%U~uRVEd10x1<i33eRf5NZKbHAQ@^IBv}rcSw~o><7k<KrZ>V{hG$rQGL<HxWtJXC
z%YfutGcO(j;U^QzdL5L4G>NVL%nlsa>Lq`6mKiW1^E1iN1mvlcL#+O<TI=K?Q{fpT
zVnXH+$=t+c&@#WUfBmYJCx1bwP&fb?YMEb1ri{y=We&3)ziMq$hn<!|G6XV*N#;=m
zNv5qGH?yX(7ALev>K!+Y0D!Vp6C0dUrgF|ytwSD52R+clnkIN`-U;oe7N<?M5s#0>
zGhm(}CrJ^r;K07K#5qUNu}SOkz|4k|+6AS2pd~j(;G$m!T5@9q5{)y^lG_@Pz!+#@
zTXPV;5g2$ngsEq>pF0e3A!uhb#D$<RY=~uxKp!fA7-B_Zd~an^6ArhOqQW-p*Jt$z
zyXBnLv<wWflf`3T4R^7qz~PqM;NU5+hFjR+Jj|^D^)~zHoc3t@w_Sv6AiQn)s2RPm
zm==$>tsp;tA(C_~oWCrkXw5{lrcJe!s!Zqe+UMC%;iqE=?UJUthEV)A)w0F57HWW*
zYKf(QP!Q=(wQ5yaVoOa7Bz-WN-?!AiS<3?GX3N&rT3K&pp1q`fq1Rn&@q}r%ii0(6
zx21e%saBPVezs&k6EAa@SASn^vByGWL%k}Vp#k?=YNu;Buw|d6wzp<drop0qKANdx
z>5a21j#`RH^MQ*B9Cca}B$SR)OHwO=L{xIrDtcU?g5>+HqgMPe^3_}b929-jy75lF
z1tT4>XbX1KdiW7*Fa`D&`b#@yDd#P<@Pa3u+343*PX!pFRq+_Dddg{4kTB|$C3nCe
zVbm#0gnER9Ry}2<&&yUN1`-u8;<Tk+XXRNwE(4aD3+5S1ZS%iOpq;hUn`-|r7rk=M
zQtzSDB<N$Yzi271vc3WR-U|G345e{+(KVFD;YFwWp#|uRPWOX^p%<-Mulhvy6GIq!
z$u*R-xS^L_LnRYvS70dX7}P_-em)q-H=`C6Gbr;+P+#I{I>@JJva@JN5Ax|^ghPm=
ze0H8SoU+h9WTAaopJnc~^<kd8Q9dN0571EeVO(fcK4o6!*F1fHb_ITl%@!U2ugYf%
zJdnVvB0NeLfkfr1eEIWGIU0n-_?iOlX+E_H9~{Kl%mcUSJ`qZDA+Ufu!zTi6hlP%s
z=|eD7LBmRF0_+2y2s|AY+~zDF+}kx$=#bey5zsqQ=*kZX>>4Qq+;e<t;wlT%5bz&e
zYb&3bA$6`#ecT#LZp}x%yMXPF>F;(~;FBi~U=o+wkERGn;4JXr07#OUF$;V)4{zux
zdYmU#e0eRcat?~BR<m^ldb?+;eTsuZMOFK9g>&@rfmH2-a}=PIeW>;o+#*|=h6keZ
zYF}YTKIb4$9GY|0zV;ogfz;tS$T$14zRf&esK4Q<v%<$uRkGC_IF?mDWi2Mjz3?kJ
z(ytJU#o~IG7GL_**1R0?2-dFlsSlvx3@My#d)N5Xk33d=R40er%6e8A*Bd^&-X{+R
zz(jS{`$8fw0upVs-iPIassj?$S??<pzKTd*o%Oz=TX=OOhpMyQ*WqTXl$Qg<8lQ4k
zVVZS2uGM09C3Nd)FvR&%4)2v3U%p71fkcTlKDZ1~B3uT@^qrz&yjReGHNIMR$P%fa
zcmvk>I^Sk}K)df8T9bBUsuTKbPuUKibOGREc<u1X+$=~Kw!@bv(!C&2@D3l&KoBJX
z0@OEba!P--?Kdt0Ek)n><k|`uAbjJqMQ4K~9Up?&&wc1dzpb6~W&JnvWLjV1ZF0^h
z*9Skk@i(7x1>HE2;sC$wN5Lx`>`8ZE-!;+0tZO~}wL32Q)aJbELJak~<WukFeJVKU
z)5|{fO%IwY8(8oaISR{Bt=B9E8xEX!nMU<>kGJLM9PF`Z+H-Y^k;de}&C(zd900zP
zqrUF3YG@|;X_Sm-Pd3pvmyOSnEeR%Ca(s?#NswrV@i}>7?E#5)7@vd4mrfb|)XWpv
z-%9jWPfyHIgiivKxH)na2MLvlIatN1*FmD!C*~w?7nVA`J~1bC8}D@zki9-Jr_-(0
zD9Wb$sn_Rcv{F6n?Ka=Fm3n=Cj!dOP2nEm2iHgHkkSKV5PCbz?0*Qj>=QMbTyBi{f
z+n=A)@ImV`Er@<nSd{ta^?E-~*F|nAbmwJJj!&GgK?tQR$_a^cJdmW6gL6Dly=;`S
zC?|f0EG1i(vM48UyY&Pw1nzPvd$gtAt=m$!3_5{Znj>?Tex89^nj>?TAW_EB9ONuT
z8Hiv&)_YKvLGcT%v`cg9KVXfZS>mS^adjrrN`Kqab+uaxozks#`<7BxtKGh(T<~h@
zTTzM^rL4|L35Nhglu|&P^extA3R3;l`r9(v4f@wg*KKYg8p__5BPSAsP{_6%Igvo3
zkZn1bNTLwR9dFA?+$pO<xnruzww&Z0bQ1=JV3F9#THmBU(srj?2BnF2x@AzBcxR3b
z_@II^cIF`9d!LTgah`W5C#!#E{Y`r9?7*QM1nvI;axM-3BkXcpy<h2(9J#)N38*7E
zGGPc3P)Bl*FyxC*E{(7gY<4^S-O>}T4h{GdIi~P>kb%yL9Gt3SSAk+sozpq2Z+pGG
z{IpX8a8ZNP&Y%Jbh|@VCaVP{55T|nx@zDi<T%ykAu%qqu7UgGM2=Z8GT?iVNXPt2g
z9j=6N*`7mS)LqD7-8$$U$}hMOv<hBuAt-RZkP{M1LM|V67ii}0r0J1MCcl>1-9dlc
z)AlvLbQs_g+b{bYBrsm{%Uu9SnDLq)HJL=~U%=Le`Ln*xywp*j=&3u*FE>yDIJeP$
zWvpMN8%VkukdBjhnHxLly*(9U{K&77a}&?dsPFiZuW&gihxyg67+2Ylv9)o2<vrkq
z960z&$-1gT{r0XOVT#KEZlxc2DVGD>@qRU@!fJ>%2+*LJ#9DRM8@He2S48$2OaM*t
z2SlI%5;~LoGEe}CF+RyJ0|g@a$~uWn?yTnpC;1T@yh`mGpfOODS=m|7_B>VPmm?Bf
zV*5=Ilz;?ym0yN7AOT+GxBty25RqapQ{~UQ|5_GTdhlPg8Ad^<<qX#FcD=lGhFcC5
zKf^E6_>h6h3_sHN<ArfpJmzFZ->xS;6?2@<4=6MS=Qy1Y5*Ty*a*qHK7<2qs@N?n%
zK^nmDr*W~5f<U5$v2*;jo`mzi%A%tDPrc>gNj}J7?0(``8Wg_cNq6egw<l|Mr#`+6
z91;KHIgI$kFC8>U81aceB$fe?Fya$GmI2y_251m3WaeG^qwN>E2sDNlx(GCe7y3iu
zybCHoSm?)j*El+*4#4ke%lyjv%;dZDm{NhCjv?gwmbtA#u5Xz$6`%%~Wi%BiRtJe#
zeVM;#y<f!Y#Ne^|a=(n#i6dh56@HO_<XR$DU*Ruq%bT%6ilI+e_}f1&o0e;$yp?_#
zUrQ-8<w}1s&$~Kcuz97w{U5GXgkxXzyCUI+SNV&1HqcST$Xn%aU-3Vh*x!BWmr=ef
z63Ow^zq10#@zws~+paAV$?-LQk&k!qksM#+uk$}eB00Xs-(Ku<CH#%Zj<3BIU+f~j
zy0#U?Fk9zW|KN;fRA)=3*S#3cZMV4nr=#Lq{PJdMfL|Wj;xBRr5-lrRXdu0fy{H#1
z=39T(cbRqf=^-Wft=}86Rv@hM@-yw-?C=Bns^o6JJQ)EK{j-~<!joJEBV!M%c~E~U
zxyLWllR8gp?ID>*xePS+vMvwlk0<x~Wi}ND&%`Ae>|0P4Oxnj*Kcu%y?{jf@!jEK5
zlA#!8hy7W{GxZ+Udn<v%ejNIAg)TqWJHn<vsy|u(h+p1$1rzv3Xspkm%J9>>qkg5N
zc$_EQg&n__vOtgNLsH<0lpiFZag;Rr2@R0P*s;g-*KRz9NlWWIV94xaB$NY-kVQM;
z&${IISakE1&Q?$Okv8p#0(s`^B>UiT{jaH$ewi)>6Y3}ZIHsnXxID9U+Rs}2LBAt?
z+G!eaA#~c0(4s#X!n0TB{A|J>^a1H}etDDyE~L)+ag=pHNTCHU`q|BY)W1((bh-<v
zCrDkSCj7~dWeayXCgo=RoVoQ0eT<^4HdqH$>yl~mr2b!zdB41X+J^<6($mG=d-q7+
z)8#>Vj}v!J`E63%M}6K()4%S0=+1A9{r9h0QpXKbq|Ezf);^_A@&qR3;x^*l@GwDI
zWu~ydKcjbPHYHas1Yn|}rsSGF9y)=9<x_HV1N<5-bg;n9%2noO&OM`l>#4v`kutyo
z=*`NNDFcwuo0Th51|Ts$X65G3%@uc`h=J*1YqN9Jk8;HwD9MA~hscw0Pc2!v12rd?
z?m*GH5~Qa6Bv<KFSdwNBJgc{U3WV4c;1P`YBsVCQNRR;gBv&qxAmK|s$(2hak$j2#
zBv<aGC5JYjpX6e_yp@**hzvXYtbSX^Os;gnLB1ema%D6E62)e6Wi$ekbaLT>2lzPz
z+~M|I>|YU}z4B-MwI?myKo<9j`=ool)VEL1XL|4(xZ*BynmU*6?utvg=-mDNM*r^(
z-SqR~>alxISN1Vo^X=J(UHP-#%ww_Zdg@^%-G^;{N{_K8d+KWD#9#Frz1?7pSWAL@
zQQPiTgch~!xiXB#Q&ePot_-6=qW!k#$}pNp5k_y%MHoGub_79M_x5JqdQqS0Dc|ds
zLOX)JxpLnDA(XN=HzM}UAW_QRT<n`u90IcYbNMBOmO+KC>+R2#XXYTGxj$FlQUD3f
z{khI9g&;-oKjn&B3LwzzKe;wgF#nTVQwrvP%9VFqAPl6Ra&b%HE_e<kW)J6Poy%nx
z`|5YthjZmQI`W(FTDeLsexy(rBrrgWb2yL~m`8H4A-DyO0jWv&qFgrRCB0MXSgt(y
z0T)8YXlw`}P`~Cf?PUo4nk(Hnl7*ZNzi<aff^8>r*<W7P?@XPPZ2^389w(`DFit_D
zwx@I1)|d6psnfagObc8HozBH>OCX^Q&gQZ<ujqHC&*n;Rj0!{OY%U`3X?f5H!3_nn
zc4Vqv(W}hBqyVx<ccNoL!d*P}s(yFLlz^P}V4|8+0;UM&LBiH40YE**Rq(Kief_Hb
zhteung@>8}Q)GxjBGe2ZLo^bu62-unne30R>7&YK2IM#e6PC{m$O#7$z%v7KoPtED
zGXrRf`#A!r*{pGY{lU`N0nw&_r8zn~5a%x=5J^G-Tmz@|1T>m&F8i>*{#yB5w^R!G
z<_2WQ2N^)j4ahsMAOSHqfN?vNV%HFl`7+N9&;y?Gg)RmU`dkbi^aVm9PXQfZEDT`D
z;TJALwAo#p`Sf)?;VE0}V$dvD9Po({0Yb22aiGq1+(m-~#^S*BExCIP(Ii;PLId^k
zlBEbPqzn!Br2(0_gbY-c1`yu&<(6Y!uVDW-P=C2}h1*SZqiKcPO?0Da1$9%kXfVWJ
zYgp<{eNp)u*HF69w8rfwT6EV0<Xz5?LKm9WP=oQCp&<n^+XfaLq|Yqh;6l)arVTCx
zU1-|i_B35++7Kv8a9<Ik3r(8>!dHMmD{Tr$UjY)Dn*!2TfQ06zfa5Ddbfal|KwLWn
zK`z?0fo?QycWs~>P1^&~S3np@+XL_w{I(0S>jwf^zXmdI4c1#Jfdc_=fWKXXOt!6l
z&uWJ1kEFg2$hih4hWGb0LFkgQm*<%evQESFS?PlTdCCkXgbq?$e<OrI{t{rp;rh4f
zUjicU300aYzXXs0z*dK#VAjz9%Nap|lZ!=e;wWKJDCeVbemuZ3BlNcE;{h2Hf(xPJ
z0W6fKv48d=e|#~3R|LW%^;4eE#Q@$H`jLu2b{6Tw04p4&A52{e$hVWgh4!TY5=Ya7
z6q>6aOOMuPr1}M=cSKqiLj8j9j+=xK$N}u&Xnjj+Ku|_tNTCupi0QCS2%$=EvYlh}
z4e2+7(x)Ly3ZXZH@M(iBa(lKmF_<+iv+5n)@&+dc@jk#*D66*cS9>e<sxDK4(qDlI
z<E8}V1uBpzVM-7es3=hc5;I{+FxsB)8HhxXg3_i0W9|4`9yU3iD)#aWy=6=M#xSXJ
zp}AiR%DdEf3g{}T@Xt2P%(Jz1!L03>^7r&Vo56KKBWbN6GxNyI8n$4X{?$D-L2;vs
zm?)<vm=;+@kie=5;&_<M1PL>1f=%w{2?Qc}(yS&}avuft5P<d;wqd&dc$Y1XeP9yT
zsX9ntZgHv(5|~?@suL-yzQw6}9`(&Os`^b$x4EEH)HbKmkOAm6s`Q(bh{?xEW-x1C
zX5S2bpr>MY&?rV^uB!P|=RHBC1FsG!v?E9nNrD9A9>-3QfZXHQ2@-bhaqJ{g*tv)7
z6yQ+b8&uj$aOxzGhIJpcT|RGxy+N6P015QHK_npLQ=sn+M%wWKfTt3DZ!p@{I!Z4L
zg>CJ}VAh$Sr*N-_{c0Lf*6;6Lojo*5|0@5-pi$TAN4xhhYN#CzD!&FZ*U#23dn)i-
zgj{$6H+3}V6KPhEF!yM%p6FVTu;*wHufNgu9VFuBqrvNb4T^I_Vj$>(%CVrh>cnM4
z9Ckd2Yh}~~Vd|8Va>5Yht>Cn1V9@-rT!2BM$df^M2%(E^J{1%j8R*ig2GUU_<WoVp
z+~X-!PX*!4ges`haxz1evNj+|wS?+IEAZ){e3b|!m&T$!lWuQEZ0)U3*4U7z@LiLo
z#_Q2cpO5q*YVfTPW(wU0R3kKMhO)qXeN4&FkhBO)pbibm2@MjcLqnL*w8e>#xg*%-
z`FfX<5v~f=e?&;uA2LuG5kmdDa23>l6uWzYeqZS*SA~E^g=D=WyxyZis5ej8MyMGW
zTfabmw*_-`sJ<*D>kAnY3ZcI1X=+3fWreb~qrTG=Hu4iaKQm{c{;?-GDP$mvN%f6V
zeW$Y*KGmnRn(m;23DoH!nK}ju)afClj#tzB5mDHwRfm*CA+>O!!5S5rH)Z-)>zY~t
zrszY60HNBk3nUP#$u1gkATi>qLy1KpkuV|#?bOuILTVYG6_SHy`Ycqt<XRShJ_|Ly
zi8p<e+{Nc1rLeFay>H2O&DVqMix&))#Xr}Zm*R=oVL}e(d>+aXGY}+DKBwM5Dwiq*
z^2^M>KG&ysx_ya|fzMNLF^Rqm$s7tuV0;-W5<3czq!dD+L6aIJCiR!0x*}Ccq?kfq
zhU(pCEuq*gO3UK<%)h_T+j+{@yQR>1$@-8_T<V4pN?9K&ZX;nS{#zd^Z_8tmC{2`_
zkcdS<K(i(!V-b+htO?0j1SB+TLQX6a<wqPL9*cAY0b91YHt>Uvkc@os6iC}bG8O>|
zq-`O@B9CEA#cb`rp{yU-fED_q!T*M^67tA2#@%h^@CrnxUG^aO<Mx9Ks68PW6M_WP
zo{&uWf+Rm1vTxvP43T_|*%QiZZ5^gIi&4M*khx=({=Daw9~^tZMa_S3dIls(g^GlG
z1BpU@2*JHo(IhCqYbT+sVYa96o$NGw(K2JK?0(J6Bv$MH_5_cGa66n&g#xO<37QJy
zTjDob`h+u_L862c&V&Go5>C*BzzU?Q1!U#<Q0D*E>VrI`=Upwb>wHKq){uhMdFm0o
z%?%}t-HRdCe4YMK`9-H{;G$|5L-O?=kbt-tswH+5AOUeP)UYvsWwC&$D<QUWo!+ec
ziVH#G_DV=zMS>6@u7rZ(+!G{MN~Elf<Nyk2R1RRx*Xx_g2iS7xg9(TM_EjrrP!6!=
zOGbDKhyix18~C6spg}p%7K0K5GzZ#pP=bW!KwAz<kkA}xJA<--Dm&EXgR(OSm@?G0
zfd=JJTMkM*1=3Jk4oZ+f8fs%u{sDblXlo<wtgq0=ce7qUA+z`WM!kJtq>cAZ>D|sk
z>e^B4`Wn4?^HH|+QD6dblr2|jkU$(|W0j^?Z40U4-?5c=VPkfzT2HbCHF~TR4B_DL
zm_Ikg*(pdUzhmQ!ijs}cM(4iEeyh<xD0$b_A<TDedAbG}=)7wqw#MB*sDOHpZP}!^
zE_=^u1TfJE?>UVC5(w|va<c=HbZq#b+8hDxH;HxHtk*4>WXo$ih1{V`vUTAJK|*Dc
zja(bu7Ad5@o66W`y<PcKw@}(nPIU{VKAdXHckiGAgsC<n@#CVZ=))N-Z;O7SY=#R#
zyU7{09D{|t^JdsV5o&@2#0<Mp6UrFC2<#?ju?}DBca_g_5h#N_%l0`9Oq<JDc1%Px
zPyxa$8*kq8xm!qCw~yFYU+YuKK5`-G^_h=s>A)cah>z@|X52M_1jI*ni&k=oV6XWx
zo3T}IUjDI*U;^P|TfVPXsL)>XV_Uwj2NDP$+jtptFu8$3+G|#4qTBSLp0a8egEpJh
zZfnwJv)Z=Bx&a+vRNM6%S~qYAY&I9OecSamC5vr&-KCK4G8fx2Cjb&Ei>cSexWOiK
zDeJsLZ(Y9BEtFnXTx!dg6$=&GT`sj#;w?dtKv+r>cq0Xpg$m9m)@By%(C<~+u5~f!
zWyQ5_^U=$SYwaTb$p+E^##*~>eQOwb*&<upY-jzHxqTOEAKPqWU7$UfT7;>mZL^hK
zwpzH<!}jHwg=}I!O=C|U)O8mAR-amdr(#k;7Da4xW+X@yv5jUVMGYVkHEgpZyKIr)
zB?d(e+ICz0uPySsk_WvVw#@HJ7V^70ZOZSCqAC~BR6JlKUpgSudbb`_DnK|^(9}L)
z%VSDN0_}h;*DR12Y6omv-1Q-nM=l5KJaJJ%axni7*v&;SBUv1#?d{eS(JqiUXye7k
zQ6Bni0{e2W{%%_^MDS6>*MWn!ybuBsHXXF1BBcWoU<YmNVVj}t<F@vTops!16ZYv%
zgTL5D4!@rfN7H+c*lhPcz3bCQoa%uKs3W#aqJsp~5gSQ#ieo^cdPnU13LbM2iRxh-
z9I?aVl7?h)rHB7x#n6~>GVUmf|4uI`J?a)j?ReDbO$b5fsN-Mb@Q~hPHv8c_y-me2
zr`q6RvK(_J3rIj5v*jr)NI)F3k+Y;zSdch{J!U(nutW=EkJ<7RR<dvkd(5U&SfrH{
zFRnbDwzDSXc?v)9q;Ki*d`~uEzdo&i4sd9QpSE%S#n4Ayey!+?&H8+=k4>MkW#$xI
zbln-Uf?m^w6qL@|tnm-}$<$d}-u?y`QfFzFHs(U0&e^Q|N4-hvoGq_*<LVA)<6ZDt
zTnN=WZ?iXl)Qi*SvG!1x0H1OZ=WXnF>2Mu1-24SQ^VN?yW=mhN6`rvpHpDL2IMn-9
zn1z=7&1Q!W>L*ga+43tFxcmaC-)wy4;%1J8uDxipOF!uyQx|QSY{AtQ2wfx>U(AKz
zpD)?0+s}IK)FoTyQE)c}LYHU^;${bm$GEv{v&lc}EmD_VB>ED@WkTx6h2Uhb*zDBL
z`Yp*Twmiu4D<*`l*f_}g2N!}H?Z+NIr2k(<zdU)Z9|xO|>6Zt0(}v5yPrjO`G$?LD
zfxr0Biu}w9zO3?m{r~TWRru6`rIfUTviSB4NFcvT$dlk1@EHE|tvsb+;pXg2|08-_
zNrH0PI0v$C<<)DzUqJAa-yF=A9Mjv^8k{G;Qv)Vs2It{@$hI5~+nOPOV_zK8^I7xb
zdc!102aggzLkRCKE{g-;q3j>W^?Q;-^W@cjzY>7V&^#=blw9*GxL7!h{cv1wmmKEe
z&>iVvgoETXWbppfaCY;r`h%(AE=~wC!wKg@+<Af!-l!UvS@5g=k&+shCqJMAE~Lig
zA;O#{1{+?onwaU2_d7l5iEf+aL24qk*&8&Y;Dg`K%leS5JFUMScs~!vvbgZ%<=2v`
zShq9!Bgv{f+1X%1wJHytO>d>}Ye>`B)-!t3<g`5bt{<3?nU+^v+bZHRpr*50XZ1vK
zdY(Mwz{Mis=HZZ|4wu2ynZf>eR<D<wktefwxH$xw8F|R!(GbNgAj<krI;*!#&dig;
z7);2_%)>CoJy6JC)_lNDp4G2Qe&FKJr1^kwL|K?Lh*!>`tXX+7>6**u%&a_Y*YQCM
z;9$<oX0M;qo26&Fb*Cvao9ezTWKm3{ZOOyk%kAg%twvx=o)Mv!6*T_Iq^+#lW86`)
zHBaM?nV8VsnwQ^zoC1-k@YcNRZ?hV36%6U^>^jA0RI)u!<J(-wP&01Ni}1IbiG<4b
zyw>;7o8BPta3>q67`HdwnWyp7Okxr@FWg9$LJoIlUdubJPcQ-D6|}v1SzlzXC`NNn
zXm1|AWJBMuz#A&Gb;`@!tQvFF(i3?azu`k{pq<Fe<@fN21lozbhHb2^^|%&{UYbdo
z#>07cEX~*W1yx9q)l2gW_->9!C@sxz)dlGvMNQb+^8Bn{^7(nYngGD^d?PM`zyw*b
zDxbahsa|<K2=wHte7UHDgzTz(nbH6W)K&S|!NKvW33B19*^q=$yV+`2h1Rdt`7-MR
z8K|tzN7jemok^gjw3>WnOJ-lfz}*@A6iYWAV0_f%`^1G?kbtSlFA#YHkbtSl$GSj4
z4M+qvHTiY7<cs7RF+}EIQ@%{TNfugVb3T%9SjNa=plr{_H#+{6zWo_|--x}EHePKG
zjtFA#9Hnk|jnC%tFrKD0)bRq!xB1F<`I(Z=2JS(Df#w3oQKuc>xA}5!gr`vdHeW_!
zAYt^k`H}BnG<|J^7(5c&ov-f87m=9cL2pmKjKm}hk=WjRip1zBHbE2adr!XDK7vBq
zeV;G4k04>j_xW=B2oiAL=R4cS1U2-be7=2T!8(T4_K@2Nw0k_1FL#fS1kj;;xqAc&
zphNlCJ-$nM!KAHS&d=JGd9aQ#PR+ZVk8!=5nkh-a>wvH_XkkO+kDdzr63qiX;0A<c
z3<VN!1H$qm0!TE^fN=hxuxK7)@aB0vtiBl*%_Dixdm}8HN3zg71H;rj7laA$62rsF
zn6R4prjhZArvijy1r5;QVHv0<`2ZarMxaU~3nZ)<9=69^wL*ld+K8|^`l=O9@_A%f
z3-XYU^k6Iudpiu@L)Y6R3ynQ0tmQPKpa49KN5*zHG3s<>VL9}{M60u~Y;}+@kcH)K
zR**ntVFWT1YJx<_z{0iel7;Z-jY|~YX(f0WpvJLoB}S_2IJXSi5|4Aspn*OvEI&q+
z<Xhr#VR?xeB+3{Uj(3)2@OyfM8cy7574kB$C{(g<ON{u_m2Md{8!E%{P&Uc;(3Rnk
zxET!+2$f+3fTA9BWuY>hzD1TnbAfEE4A<&twdQ4jdM~WpUD%K{xl?cOSK%m<^bRTU
zuaaEsYN0gt-wVsje-K8Y?}g<ZaF8hUy>J7k@#s!7&lQ9l-pLQP(7x!f$?RyUv7zf^
zw-A~alik*%c`-RG=LJ+y$mB2<C{Z)I(>ys``yN>{y3<S}V{*98-Byy<49nb9R&bq>
z?mE>igRVhLb<3cw`_!=fP)Cw)-KU1J;EFQv<sv*Sb}FLFGNy)W-$^f7q8<>aV(dDj
zw7kkKgZB1SVY#=549chq7dfD`x33B#?EIL#Wl}-hIg=^PjQL$>x)5}bJkvFkHup2b
zwm1NX3Ls{N5mE^=O;|BAj0^T+Mwrsfnc+qc@H6ow?fz%8{N_e^`E0ig3uev^%LD>s
zP{!<V-5Vt+ZT@G6%i3B?=^A>Hj+#Hs3~O#IQ@VZXV$hlMr(wC5hY&D64a*M?fds~<
z;Zku>4-$5M8gAB2+UbLx6w-YfZr;^eElNRvyD~GUrLk7&w$d$yG6pNda>JSA8H1H!
z`7s}mC}m|Bo>#O+4oX=WF1}Zmk|Rr58Lr*M+A91OV&iq0?Kc<?dn(qsrBF^`UDzk~
zu}S^`q;=t>NXdXiDeJ;W$%s<?C}mx^^;0}OjHf6C(eJwO4c++*7Lr4Esn&(NcH`?w
zQbD}EF?`JjgL?L2M{hR#E%5|p<B?dGL82WuhUMA<5@m0s8eSGd2C?|oFkf4`C6xeX
z>Q=WF0gRlj?#Q9<Cv9~n5q&>tYZ!|QMJy>>+Y!z>9~Kcy3X(g*NK5jxRf-~(U11)v
zuzh8Q)^wNS-0=vayTUSH0SVAuVFWB6QuC(Bv+fON!sSM(r|I6X%(sKh`G$DI10=Ne
zhV$~RJ(QtJk<<P$oax=x*z0NfqpL+|KZdVrk)QsNw5C$7Bt_)0aHd~-qmEL3%xML%
z(F(_$Rsac*V_{q5nL%<b#LTqJrzrM55vEl>-SmXh2jD{IgwqEgp>yJDAEanCIVbx7
z1R&12rBjmfoLf41%X3a2Kp05poIXg~+Hc{kcOs$>(vbWuj1xcJ2Wjeq%c2ijfB@=c
zrxQRz_OjCnAc1<BI)S3bG__j42pgI(;;lhIvtLB6%^>+h89ai7X1@sHuMIT1(iA)n
zh$wHd4>}p^EAUIK0pJ5=KtwK}Ab~O<A{RH1Kp7Ch;zlbxNQyHe@wXx(b|i*~9bb>g
z*io|3?QcX7JJQRml7*KbkcyAc%d714twx~1n-P2=;eP}$T?R$e2Sv!3M%mhkh%zSA
zq_a`iQ-Pl%48a2!IU*usMUXIZL`24lAYtT)NMsC*q*##{JQx}oQAbBaFeG`<dpjb7
zA<058G%7;D5KX08wl+4BHGy|yG+V8OV#h{|l<3D=)Q^=B5&eTeJ61X-f`n{kL{27<
zD5^4oexx@cYEdJ<#}?dfG`{1#h@44a5;wwM>+q5cRNjjq#3M_Jaj+W6nkNTTF(fBN
zoJn0whD;TPv;YA^raFdzgzQwu5RgEfN`}yYDkej!<bVPJ%_>)u?5T>#0fnc~tfB$M
z1NvebP_rVqGke#a)I0bodIt}nH_PcAkkFgu^bSb$&a6meuIwFR@ZOmnQ9qKsBYDvK
z(CHn?LhsDE+B>yv?UP7WwbMJbQS2uXXO`8bMp-C(2L!6N&@mAtWEVP(0un_nq(-4n
zL)IqyKV{qQHkvj4G$Kzmz$9)&7q6{=gvzH8e01q8>{Hb`w)RB?_h4GyW0;=67ZDus
z(V0#iGGaNqyNhvC>2e1OOh7G<$oHB-0%|#R^gx=ab*T6+*}^Wypt3KWX$mIh#+MO!
zSq>x#MdZg&K?35-2tI~Nhy8WP>8@q}cdv0@*;*HYCi+@uqC*A<Ya`Nmf&{|a2%Kj-
zjsR*sGww4wl&yCW$o;N&5oi{!kH}M+I(!zck01gf_gjbDZw=dbvr)t*-G_CiCL)(X
zJb_+KL@t9MQC3aFSqAHnncE^_i?#87Y_Ybv29O8d<{CgAcw0n<l28QDwg^^1oC7Fo
zU2GU5S;LwAfKe0rHiFkox%aJ0U9wk<i<>|Iaj!EjKmu{EGcG^^aW9RFDYTf?MU!a<
zBg)SawQwYBSY+On$$!YW&r<=O82gX_z`=;T9RU&m2P5(p0!WPggOS9~82j{+6ftP*
zt3O5LEd<Fy|NRt^w-6)?KtDxr3!xb|1OkU6I4Z22ez13U_Wi>~qvoI;BdBW+N90Li
zUEZ~a$%l92x<ERH&M3T(c{b@q><^C^9h!sTDDy=%B99E~ibXYoBSU(dt}b6xBZ^&E
zmj$0RaO(MpQCNDyabb9jl21hB;X6o_bs~cOA-;?PWwiC_2y61F(Yn>?h`hoIE_6;u
z;^LeQBy>(kaLzVcv^icFx)f1fi>if{+4Ql}lFXNn8vpQAfa#b_TZ&7L!>P-+6qg)_
z0}_pXDH3@tDwYFcaEEg_qP`jx%Yo#f<SUNDkt{fzeo<Nu=$+lVlw*56s?;j1mu8<o
zZd_LmLad{BgbDh3RNe*$37cMzM#Q_CAc6gQ6dO^R9Cc}f@n%$HAV5I#&8VCnAffqY
zR89|&(0nuMOpm&>u^1NR)1xB@%(7vw4Ya=)7L{u`o&srDRL&2OKpGas{J0w#RJ=|2
zb~Ni9w(yU}U4gfwc!dO;Y%kuhqjT%f6GolnsHn_*f{F1qDvHb}77fS%b~Jn738Qv$
zbW~<O!Gz4{sLWXM*W|{q(N7rlQe$M*ph%8sOcc}MaZJ#9c&RX&HHH263FEQAxTsM;
z2Lx(8vY?W6=xW?jR_W9XOw_E>sToL^P#Kk<wFHTpRYsA$CI4NI?3=)rbv2rmO>hy&
zfli3}#FcKykWjQxWClP2VL}u+vRgO;?3~O>yBW8ZPj(S#{7#O_6Xtr{fliJF#hx4_
z5GIoicc5<dZLKPrwUW*2X51dEief^nC*NM5DmRl^PZ}G`W;(!N0(hoVIgl`IW>k7+
zkN}=Z4f_&Dz{3w&es|-Q@(*1ETDd=T5vXz>Mr9CJpI7d~C>+2=VFYUTF<aB!xLopa
zR7M~5d38RfUZ9;2NR;|<6v^cdyi`yN*vY4ij%5qnQfWO{;50~m9+fSK2E~pIB<V!4
z9?+e&`s6u2Wxby^x|DtDB2d=jQx}2U$EPj=xsOi?fe!8KQ}Zukm!3B6YQM-up!D6M
zs87r@$N*tcG|@oTf}F{sXyYc<e?`sVOumRJE7+iCjGYzuB_?lug>n>Mxa~&{<qKzc
z;VDqQpsuAL7$h9Z7tuN^;8195P7F8{$SjM>w+|%?rY(=+y}3IvA{yA*>S)%+sHd<z
z{ZOCo&-UoR_VqB@1y)D#CPD$~*MP>xT2}feqo`tSRQfhBVanR5j3Ys!n6*)?NI0i}
z3LdVDVjb|OJM`((qi>pjiC<I-57Fd!dX+>S*Ew~>Q?4t=2uJ|0qcH+EpaU6WWCN@D
zlToML1{Z?5V1o-m#cznpWE)ffv4MQtK3abp;(R`u^>dUpf7aL&+#GdoJvF3y?!c!K
zjqxq<8;Coc+JXe)4yU#tfw+TeJDS#lhE(3(Xy(^H8)H1BdtEK6%HF69R3Qbey-@_J
z<ZByJP4)|4%QpT6k;s0>)#4Ep_dBi@Boy~wb+rwN{7JalTR@;Se{z}vBn<z_X$p`)
z`pI#%Ah{}B?LZw((a6>=M6*85w13WcBRhB@ick3RSfmj(#U<VpZSWh2mz+w01mY#9
zDL?}85;X<?$Y&$6{M8ulArAAfUN>vEv(qma_m+YqZr$KH7m)W4K|=l2815e~p^4Cl
z8s!bv=S5>_w>M&Pgn$VP-iXQN10*2ch{^ZAKmy{87#0C?5FoLJy%8%CcMymaX`eS@
z@!RQ6F%<%ZA#7xC<9OK+w-CB3HY6r5dO-$-42jjcL84N_4T;@U#=i~Rh@8f7wxo}7
zd&l7}0$mjw9+Mdz$N*t@EXn_<0tzLkF+7Ij=I<zN(TM6aE{4O^Eeb37&PZhb)YoY5
zDF;i;3kYzDtF<N%GA<@>%it;C#>H@6{y7c7MwH^5k~#2_@r9>+ii<)1V~X2y<Ugjw
z<lKS|Fs8&Xw`98@ikQLny<!|MpW#AK{4gUXZ)G;(@xzQ*u}HFk1jLNk^)2|AZbWTA
zD<<Lx5YU_zlko#c6h12^;|Gw?oE3B8hei}X%!~2(;T8~R;CZeM6hF*!t3mO@yqJt1
zAPl5=F%0V4F{T^a+Jact*%%x5Pos0*f*9`i_NNAKj4`c!7E_jHPX5zSJQesU8X6CP
z{+WXg66l}B<V_2ZK>sX;6gN3pkZ`h}#nMY-*;c+~aRvq$eUM^NO#M9O<%t6l<6P)2
zj$tF8k95OTCStcGffxmEIKc-S<t=CZ|7DbwEq9HguwZ#iF6xjWp_u&s3P=Dik6{)3
z14qCOl2z=te;H3yta1@(gspO`Ma8U&$<U-RpEavuSUczf2}oQZSrw}@T)f6lG?osS
zuqsyf8UAvpWZ?qIs@R`~dFU1c)L_P%n9{tkWg35T=ubU*vmO67ZY%@KX<M3AYhp6G
zfjo>@6Dus?vkD~Fzpfeoo<(DtRqNPY|1oZEzs^OVrFfm&5HzdS#pGfR6(FpOVJYT!
ztQw=v+NPMYjcxpoQB#3mjvX|aHo1*KlW9{-ez+N0K-m;SY%ltlUa#I1YqafZAJdrv
z@8iueb?enWmR#s=ar;;@(Z^p0c^|JNpVOG;=PuTypYdheU9MF$J$JcQ(e&KqjBBU>
zc~=Za5F-Qxrstj*yY5wEWceN!gXZTRw|ywS-xCXpv~puUKlj9N#PA<(1?K1e7`yzc
zQPFn43qccge@yP-8}o^}KUPPiqCvup{W1KZmsR9x8q-8Q8p|wt&G^#O_NWU&7X**G
zAT&ph#^hUbPy)!&7~Yy&AwY0Ma3+>nI>1=zX?w;6p&No{V)EdpF+U_Y6O-RA0SS;Z
zv3Sy&f;T6<c!7ILLDr1SvNw#$W?)Kz*Q8StFMrW`DtmE+QCcyzK;d8ZCni>wsRdYk
z@$LjjSoeN`_%<I=g5+P6CK9sm7hp{jvY@I8<jY%lYZ<a2`8&{%r4_5HfM>%97Zy&t
zTIhXzyo2Vq0O%=%rxjq|DS$EFrx(cA(C~sUfI;$vHDu{F#`FTDp3mZif3=CNWeT!3
zWO|J>URDB`0t9EY@ohpYbu~LR%4pfTx<CeJU;?VTKn7<ZVO2HNhc=5%r~->ocWf3r
zzSR3=<{6FGYF-&_giF8`TUW?%p{oewZx#~*y%XMq>b#Uyk2dhqqpL!=OWi`LDVCB7
zF8@FU)N)pPjM2VixvN6%V7aS8?qE5o(2d+C<PKJ`5o3&YC97N&YNb^LrkK}|fy$}^
ze=dK0ya~CyHSFRT<F=ADt_n@|H3c$r02!#PDM04nDP9VO?Rxg&JH|6D*1IY+6W15W
z$gK&ViR)?bOr&?<N^EUkLDujhPvHo>^}W{2&m@@P^#=D9AeLN-3qNWJb<40!^YO-)
zjhYTCl1m`CfE`v;Aa1;ZgeAj@u!gUsE-tmTcZ;&tW$LdsIx2PFE#h0AY_$|0rI=8p
zOes?78=yL9@gY*;vEgftA6rZ;LcW^vHsTRFXHt>c;TjH#nM|C?KG;@DwtbeF`IRx%
zTk=_v>~U~m+h;|x$3a5rvm*2bE+;_;50|iiY%-cYwWLU<9>FATk-Sh15-LlIaG{z4
zF_3UJONxTxyE{bkGpi*<p*H-?N^<DTYDrP+8~FKfDUGaU%-U?+ShCDDjY?luB<~nN
z2IVX(!j$X4O#`)(y|CHnSiZ7I`ukEI2CpoV!4pUztSqv{CK4p+6k++CMxM2lM%r3-
ze6um5Y^@7H;oRCH8O}il5NnH);^H<)K&&moJA(91Zz&DD4Q%Tc<K?mqE&}ZVH@FBi
z4mT7fo6Gj0ak!zVWh?$ksZv@XHnBIpHrkeLauH~O*yL7&hUKOr8Tmp52%Cz;+wHIc
z>%-UYY&C8z``QJd1L&_^09qZsE|Ob#XaL~rBD?`X?_rcu^tPS7w$*sJ?RFQz0K#?`
zfugwWMKZYx6(DRc!k?d6N8dgzrN!YuQ6{p@xGTHu0T+Y<xC1T-Ee;1<GiY%*KxPc0
z#i5kWj}H}PChaud^0YnVg3#h{$OWMj<U_6{v^X3hOFpKv-BLP1K3$ag^Dg5PrR`}K
zg#P}`X%~c!kWUxc;+P*w06ATR+kAt>z`z0Vg(CLYZsV=;3oZt|uzbPApeyAUifj?o
zl=1`O3q{v8=l9r4>1O1mB9`7`+}Pog3qhy9mx|<_eh2~LQc+Aq)gWQUr6R1B6d;z;
zL2kde(x$Kpdtx{Kn8f@&MxqQ1;REp)SpDKM#sUefe(}N<a+py9pkKW8jn*GI77lX<
zF#leoYuNx7flhG;#IMd4I>j9jw?(p|RH0Mc0rAEq{C)pYx^_8`P2X!gST@i_2m)cC
zi$H$>XJA}zR-giefpJ{zrv<2#E@i&OTJJMjmA&O6gn;mti$H(I=B>Dl!l43$x8nFq
zJoH!1O6kVtP&RX)(V}dqi$H(AW~hr`17T=fUbcV=5QfIn#ny`)0k=6vvV!l7K4l|a
zgghXObP@7^Fw(6>9uP)SEqZVSd|`hKTl1aqY}ptW0XMwVF>#q~EmiV?FeWbU9m4E<
zAdHDOZDu{d5%59&vFxw=jfcv{x(H#|FxIsp41}?6Ey6$;OSPcXQ>lXQ_gAuu`;EKG
zD_w*L5Gq}S2oNgcGS-C(5Gv!il*^;aQYDJ}tL*gy#@po+U5F?kCb|$&KunCwy#rJL
zF)?0T$C<A&L^YWQzc&VZ%BQ&)F<?xK%UG^di2-9;JS5)V0tt+1aon!u3CL0fpCO#Z
z;y)T2+s|?#3ecLf;_|)+WB@TMF5le%35Z#7yt}a&8!<En-hKKat}M?qI%wSF?T(+$
z1Sy0iU%0g?1k4w4xqXBhV7`cB`$)k*NXnwc>nx9pEE+MyR%lrqpOU83O{r3Zpd-$=
zxoqEIL%V)eTrTl=1n^aHxyuC!@Ktf_a(4@d61UZ_;!2&ujqJq_v>VucM~o?L!Eh{%
z!_u!@OXC3h%C$5Ou&>Bc1ksAx)YiU^<GZuXjvC87!LQ>upyhx2s3|S*+gbK;<Bjs|
z4m6l(%k9p{1PSQv@rcNpfCTjRIFh-i$j+v;;(o)vJZ_w6_l*ld+1zg&>mWlyarp`s
zNI-lON2>aJvhF%t`!Sw%G@kkGS7W~?_+uR53_g>kUPspb9A`&P8r@5Oj?2>)Z~^vn
zJT8*7AOZGs9Q!&7(yk+Oj>Or&P8m<PJL1>_F6=qt*aMPF$weL{AdbYb$PcEpUo%@f
z5zo31XUWsXp!^eY<OLoFbTcyNR9wj~yo>%24%>R#XxkLDh=cJIn5W`0^Z*IWQ*neI
z+o+kEkzMEGtiu^&d+B*si3~X(mv1~n2ukPU$Z>Up9nEd+QXJ<Soz5CvBbUew@<+{K
zhSo2kyq-`CyK_UfoHZV(07n>t=fLcjkcNN+X1@dsp+O50gSKBH|Mi48OCkn8OL{e-
z4oHZzB*}x`YYBO^K(eq`?Vq4@1o_tHRHru+_|rgj((L_nMrjEM#|Wy}n+bWp0g?cF
zGlBaJbU4wRVz<HU$~oiKrw2oyFF#;HWpE-Y?vjCo%HV{&y9W{>$KXVR2Y9ebB##jX
zCmP<*V?@cJ7;$i-%e{Q|H7AJS36W$1fnhy7A*UZm6gNB}ryocz>m-?)Q=m5{A<l4*
zUof;s#w6s_!y^o)F$uW_f&|c*gme-h0W>CosfSAsUVO7>Y$9tyLVW9tR;sZHZvo$Z
z;+s6k%dxwEGfI==5{h`c0Zg>bII8x|*nQ$7Jmj{={bt;ftW3z)0l<VzWdhrMTz!WO
zsQ1`!zZrL=-%H3>X}~0I0&{F4y={PxaZE{M&1O9=8WZxTB=9K|?DD-fnJ^W&#V@e0
zzSoMF|3TemUtKg}?2ng>R!KbKaWDx2ZfXKk1fNj^3A3u$+)Kuz$*P3hID-k9ss#2v
zn2C@9HJ#PFY&?^kE?b?L#7*G*tP__(Tg_xME*qVbGZXS0&gOgHnF)9pe7h7X=!sd(
zf5o`D)+`r?_PnzQXCQ5euD7*?iL7rDnHR1YUL~|J0T;sa)7MiCs}uZ&OA8R_xoT&S
zf<!f{6LKR164q2Fu#s6!!R7T-$z_>`6mzYo<1(lB!No9ImXPZ<NRmoKL|6zC7|Rm)
z3m9YROYYZGbvGxF_8O#Tx~t|zPn`!kcDc7xx7+V|;GtV@y}je@o$h(CiAA4`>(=3+
z2XE_g|Lu==x}{0xZ<^WDa~q!*fItHPLpXkrD1UQ8ZZ<%o{LKmZH@HEf{LKl(4Yd4R
zPt;a90YE@=t1|&WLUXG#0YGwDX98SLrS1|F;0_R+x@rTu1rOy6z*8XYa%KQXAnl?V
z(4YFIg{^&`$QqFJ6rRGn<eR5^3s_*a?#&Fc%srma_X(qx=&BafRR={^wFH484mw>0
z5=9(zx(XzUI7nT^@0_=wMmU<t+~zmCddiPFZ3Q-Jd^905^&q*Jd@&p(K#nFFHlkOk
z)E3lLClc&HuKCZlCtL_>?h^@lXBI+$IFTq4`*M(gIFZ1<oWIoGg2)SrOl80v<SD=4
zf>6s}NXQf|qyTau5fqLOB-g^`jQXqvHT<On>mD-GO)ojU1uk?hIlToEI+qeoZ?&LZ
zW&fneiGu({e_Wj90|+F4D0>SekoqU3zXA!Q{z>!};toY^X={U$S?@8t?D%copd@{&
zfYz^;=p1cGQW?p<%`=Bo;Foap-~(+)QaXB&KpT>j7ui5!wHcC(j7*Bvh8TRc8Jbi_
zB*khYdC(h{l&g(oVYL~aq}7IE;Fi?#qm#<Lg`LvuV7}R<2MAF^JVFgeCuI#ma#6V>
z0152TNqO}gBvz8q$#fTf^hu;R_8Fb5b&s`GR2D;FToRWgR(aTa5wkA)B5cko0mrE{
z*)lFEKT^<=kAiVY92??IG8l^D#<Q^z^TBrGT@z^tj8Dp;2pJ%ZPs*<YfFzw{tJc;y
z`et=2Tbq;2I-1Nhj+)Wz(3~XRa^mi+70r=(Npbo0XrZY!o97sXM}VA{l->*^Am=49
zMW&KBYXy_F>ZGzLQ@6;R;;Fz-Q5igdUUgDl_yGyM>ZH8z0}?%0olGo34^rZY7}SI6
zXGwYCM{>|)pC#pmAISpHXGvW6!ONV`gTUuW9P}pmg`Zm!W}W7s9V4hkKTpaFKM;oQ
z=SiG5J;!xHEl=XYPuHs#ek`^uVct>#u7f}=x;!a!cddAfE>9wNM}HEb6-}yDta;LG
z_|z)gOy&~<OsK3%%6SM9#jHxo<3W%ZC##Z0x5|3cD+<`qu1dx`@rZ*2z@dm^Rr2PJ
zd=KA>=HVK)Bx$xOU*q&Wn8bC4CrA{#CMma@AW`g^BogoZ@?0x&IO|!9lsTwuy$eC<
zo%JpR&pIY;kz#@hAl4_5VxkmWD@yNdWam?6)AEfj0_Ar$x(Jlt*_gD&CJQP+*qDSb
z<oCo{@dQt%N7{Vf(`vih#yq8yl*vvAL1}vu3qHT-)CwsbZBJ4;kaR9OO=mwAn^!8p
zb2^FAIeQ#$0R;f;N#;j*Yzh)%ZBH_KKza*eaBs0UsqUBFLh_)u&+!(L1#j^k_ZH+u
zTTy1{$0Wbf&VIbv2)6_W4GWgI$_^5y{Fs#SA4ov{m~<R!D@qC-77q1E5Ewp(-KM0>
z&|$YJDKm7~ai|am(qVF_6aeD$V#kwN7n33Yq%^_tr2K4U9!=(7;bz2VD?#EZXz>a&
zNX(dD$*bTikKR0*ASaXTzIx_esgqEmAxvBdolIi)gDWZ^L7h&r#r4d4Qm2zL76g~G
z5eq)Xg<#*=Bx_jTd^~kFDTB&99(A2fBB&HdsPXwEn^GT0=ace1-8_EOa6XCSua+DM
z?eJTY1sa&G(!V8T2%9Hfmrf#toeO8?#ka<Wrm`kydNeSbX6Fx0q4r38d-JLG!%|AE
z;?C@&$Mr(i?>e)29dJ=kutg()gz3XlXat-MKnD*;uvinbeR4!f-t7VtG9yx$x5!OG
z2GrZ^<tFCC$+uIoc3=`Wh1%h72|)%;Fq$1|Vm^=@os!K2CS*pZ&`ce<3|inF_J<O)
zQ}UgZeDgJ*H^4h7Oje3b^J%(|WuKRrHz&uYWc&&yaK@$(zhd2j42IpiELmzklzcZO
z<7qG<^KJ_9G_o_0!HgZxMwXg)CC9rm^yce$lEJKo4BXKK_FJjhG&vz9MlmrVGa&_U
zjWZsQNUBa^w>33erYE`WL$8WYqV`!xTLFA1ZF(x}WA<KCb3tHw3fJbSJHpf*Gg$ZQ
z%tw+loa%xJ)frS>`tov^n*Rf~{W|l`<OhxkU_#~tGU4A`2GobFT{E*H`JvN|_#PQ?
zsT(_R88rV#?AvB$$K*#&v*EjAkokz34L5*M7Mgz^D{pSzm!6lBFFAt=nR%(=+SU;Y
zR$ANIf)xIo;GE{>;n0E<f)&0>wx+r)PKj&nAkayRQ_=;2L?srd<T42owk%FznWO}2
zYpUT=_Ky~3S=rK*3@^Y0!qSusFF=w|N?sZQ352CoH*&tMsiw=>uPxwwm%9iw2$rYh
zxhZ6Tusl^qTp0lggykt*8R6eVX-(u;nI~GBLp`NmrQ~V_E|k7X$<+!ZNl~w^qL`&M
zwO0*`wKi9m*SO`<$wW;`CVU|Sh?-QPh+aVgq9%ptm0V_P8q8Z#Vz&$enp<Qi(=%vp
zNl9-B5}I35j<;-0)!Uik;pc52V9HL{23opyx~)e`*Upp-KOqdHohf+B*9`RN4RDvK
ztYK+S;hk*RZDw9(>5b;0?9lO)vrD*v`u3#g+ZG^zebVV$kib6a^esqWpQOIU%iHP=
z)aYkYY*1VCw$d}M4)x}lluVaE2s&p{NSCzZI_S;wDR!l;*}naGr%E^QYewgtDuD#V
z`IL+|K?34@3i0Mbg=63)kSi%=K&GOd+0s*ipJFw<f%oW@l#HE0LhnjS#?BzI8eU07
z2BbyoObosn_Die%(;{}3Jm|fema(&BVKsa$O|dg|?F}?I2ByVoIIxQuZV3*$3@ou4
zf<zStre*(v1mwW9)4w;+&=`u%8~zr2XAnRenwGNzB!4Jp2S^|dP0RiT38bNE^e?XL
zsyEu&$aK~WbZ<NA-Z=a3&1RF($h1*g%-kEPcSqxkWAr*Y2q2G6%jN<J<k4w4b3p=m
zbQ-<;GOBnZ^}$&7eMj@}C1YI`>fEtu`FExv1C_C9yz)S&SU1vCtz?64F&{3eOw05l
zm{6%q%kL3`gi2)^fe{=&R6tE&Ii1X#OD4Fb(9E2WmLDO63<;&-x2f%Kq_&^TUhQHQ
zwZw0<`edioK|*n|)9N6hIQeR;-$<=KUA8(1;7oT~9VCA!TOA~jraP?;5=hgj)t^AC
zx54Ww>8w3y^)A%v`7G7hyd^X%ZPXL3-iBIzj%aljxXsi`<~Vi3BLL5F8XY8n=TM_J
zLfzU>Tg_uP-)1%`ndhodqt8pr83h@r%u8cN-NRMT=<`|SZRWkD^Ia7Jn(y>e8{X*i
zsh?`-gsu&>`tnS{?dE2se7VyE;GzkZr)3j>1jh2T468wsQW{IwA)1A4s2kR1>fdEP
z=V`yz#h^^aS{H*lWNliWdO`;nYtvYg_)Knt4$*4T%2t}mO+6K$p$&$Z&mf^)la})t
zB(!VNaz2B^e6C4Hw#xZT3_hPXrPZ(He3m@uZFc6fWMMvUxjLWQkiXqQW2#ou9nNS1
z6UFavMiWTD?6^9b+E9$Kn~$a|?RL8jK-+@dZUfM^V7D`lpaYEEG>(3t_4X!P`!1bz
zHq8R}nFm7OrH!;0KsV6<Iw%Lwg!@gc^q|uycm%|Q&Hw@l#Dg?|Xf)hJ{eCFTw%l)a
zDL>>G1ul#_<QN5#OUbW_g9OB(Gy)Dfr@V<~@sTv^`hfXF*%23ln&?PczC;WmKpaWe
z700F^0dXWPFC*SW)NwII@f(WAokj%-#p6z+f+W$ajd~M}sxxAWvi1*|TH7<O1vIqI
zxRs!xb;fB~C<5pVwd|*1v}~EJO{;~kgbaAd%vhmmwVY6<j9PYPE$$FofB@voT5`OB
z1mw(G(jkHb<jh)V+I94bUKv%nf2OFrxgoz*|6=Ls!6kNaK_k8g1_`D9#dz<E-`Ofd
zYifgwl@Y~i;e7tG%Jj^tm(7@`0!%T?Ap(TK#d4T~1j68AIm|&~m=7+Fj3^e%7BToR
zA5yFiFBZ#|<Uwy}v0Sz!3&VU^F)dpY^LQ1obj~kU78a|SKmOeuZ$1e^<b2Bb?4MsO
zXFo_7HNRLcJ0Jl*zqnR0-&ul$QS*yyFN9Ha;hh*T3O&7`SRU1tQCC*87YD*m<2N2v
zyKP2&S6wVuM?3|1b+NNLmXV)cTFh6+P9T7@)HRb_#Q&@6{G+Ta&O5&Qdhdndv{5h0
zk45*c_nmpsAV0DS3bMbz2%Z{G%xTQ2iOq>=+N5bKCnrtYq&=(PLNJJc!hlF9!A1GC
zY}ED|B{jN1#lS)!yRhyq3*>YQh6X(Rh$2Ei&&<5s^uPOk-e;bf_xUmJ+?i))UN1LO
zx`@}y&6F<U^&(#IJBhEle6FKd(O0yC^VIRHJBn$Rb)9&@&Z74M03vs$<^UpcXEAsI
z5Rp5Jc)<Y~7uJcfI_<U=)ia^9Tt=Lrv#9)i9Pm)4vp90putmNMA+^u`=X|wz{Jvty
z;i+?G-&Y*sGSrYOX5UvNLruPNb%MG?dpAt%O7#YjYPwRr0fp(Z-s(i-y+!-R0(GgO
zH`N$aUavRR7!Vn~sm6fF=oO9qM0PFK=W_$aijRw>OFvXK9IsPMx3<=c$_Bm4?f@Wj
zFnxU>GMSoiS$r8FG6zLv+vHPGkIHf<iqQwez>n>uSwmm2Z9h_Tn<4oKfPwNS(g*-j
z{zMu9K%DJFal{890)*fq;D3vmQy~HZjdH(FBOs87fRio)M6LDGxt%Hcf!jYVVBiJ?
z*M#H;Za|uHCRH&Ik!LQexL)9S@0zm#DExe?Xdp^CpDG%Nr1PnwfvzZumYq%woc2<z
zI2>12-BV-NypkPdZ~H>-D*Mo4b+frx<U1hut~HQ<HaCvu#~C>^ZV1@tp9#&rv{=0|
zdtRKG<)+j8BVO*YI5YE)DAd^^lvLcpIC=tcKS-rv86nx1o>bqz`|<x*R{n<mDCT;4
znWl8|#Vm_r?q5!&Esdk)NMn*WG>*<rX!d(c)c)pWaY&AHg+=pE#hGuH#fdJTj=708
z6}KXeo<W@4G3ScVSq0MNCWuaL9B!2JOvqgshr8=M1-Yx@%neg73tkgP>k$06sbCHs
z5|TZ>RDEmmkK;^zxl!_mcx}v$(wD200Qq;R()|~1kT__Keb)iN<gIb=V<63IjYAv&
zDcTwn2QJ~GL0oI2z5gk-taf9$jQIY>ICLHGP-bIH*CA(dHi*`?#O$v8w0&*9x~a~0
z){v<edX87j3KufA#GxwzB4bNTS8_?x4jX{E9dYz_>5-?^#q8JknTipQ-4TaAA3ntF
zh(n(bM9hvj^!Y%-a7P@!9s53C2)@sME2htHku0<Z>4LgT1J9@-SJZWv>yhriI}YnL
zFi}r;e3cJ5AoX;|j6Wnq8|2k`V*j@pK*^psL?@7vJ#qMO04doMryq_63FU#<ui5};
z%Rspe^0#@Q{H`*%8z{f44DJSEqO(<QsA|mTF2xnkm$t1{&*iSY6th)$p3M3;iuGG`
zbZylc`{lhVDJ|Zh9;loE#rI@9M{J8$E|pl=5!<5W6btzfG>V-T+7U0P)(H#CWyAv(
z>M*{ChcXK_<NL>bmAJr?((xD6qRP)Kp=xLHMrZORdW64T6iA^Z8e6^NDjLf2(sCVb
zup2h1x365ThknZCIyMTMwg0+V)z?~`NoBdH(j#sRqQ&l3j~nk&jvK|Kt90h(s`2*G
z&FY#JTa+FT_MbYQ()d;ST0id%r0gn9auJvH@V@ALwY_hPnq9kEXZ$g`5Gk@+k8(%C
z2@ge9YnE6gm!VN?xJGAgteWDgvjbby_*w`qn_M1Kc#R(J*N1@=UZY7Hl*Hvm8I!No
znTD!~zVH{es-zZz&&lU8h1cq8=^3)ZP2shAdOg=fOJODi*XhjUsu{lUe{EG$Yaw_y
z<uQfV>CqEIVVSI7r)zI@S=Nm*Q@CCVPx6K9+SJ(b5YoajQNO-iSSIS%OJUia-zbyo
zt#)afx^H5u&iG|ah!knnBmIfuK#H{L36qA+l@E1OKDR|z>?>WpP2oOUGz;`{KWY;W
znrqWhyVdRLj%I%O(+Qv>txaF)O%6m_n<g_xvRHt`cAKth*M3z>2yS&|n<jZ#MtFgO
zFK*MUvgOJ93M5&u*{16ohJD}FPc<*=XiC-J)qLrj_E5X}?sTB<Z<^ft@yj|a{sJ9y
zI1Cv`n_kvzcaXgGCh7W0cJWV{DJqpEh)0!l=&|5ILP>}Jmp~+xH2*JuFL`NA((&!m
z(XUINdQts-wwa%4L!{%|RTd)wu&XRa0$`Vj@yd~oZ<j9o8s*68A&B+kkKH=6SNjoo
zpi!<<hY@%nG5*-2WdwfsPh_^3>mLs2ic{L=UQvhg2XuCfOI{fv9m_!-jdN=k8c2)4
zF08UZlyOiqYeHB7dDvqcex_y@dUWKnnuQ2Yk0z_R$?<^R({{tp)QrM=I{LJDEli@-
z_cVV`WPaP-=g_O|kXO~Mg<c&^2uw0_+^auRD@mg;(E;>n`@pMea-mO0E^LJgQ=gtV
zX&A>^08wbawr#JfX@&lBbux9|FV*=r5!;8T?lszUs9c@Q-5-+b@L(hn!vorW^EFjh
zGoZtnu~1<e&}`z{L$3%I!8)i*J6=<JD{BUI<f2l@unlUC!`{!aL14o2q%Qr(&()tt
zH7CpMk}3R?(yq@FOEdDh)4JjlZEyO8x_9_#&EJFu+-HWw(peq-LEFcFq3W9X>7$tk
z7~rfP?KgS@vHMxgEV}p$5PvzV^&jvT8AS-e1=G1Sm;!}1oJ)f#kR+JSNidz2ZhVFq
z`ht#3)nH|fz3UBiY9`40Fwao=h17?EjyL240%_9)&EgA3Jx5t?;ds<ktTL4x^=yx<
z8G4PK*pbcIiQP)sXWvx+l7G}>tDPr~6i=LMq6yv;fyf2B&6HUnt)6SJgDj$qlm^bT
zb2?Z=nP(!mZ%K&o%rgYC_|HgjxyS6!JJgiw$I5aXRpjvB8Xj8PVz2(C8dqpB!I%&!
z*<vu}0`B~P2}fLB`tmQ8%G514k(+xEDqPDAa}VO-KtwG!lV`KNF6SUkTyCb!l4Wx+
zN?T#qy`#oguQ0)vAtGXh!I%HR@!+P`o_I&iDOeNT7UYVTS~KmAVNYWk1mUJD?GJXU
z6@``MwuqOml(yWDU(L+to;4LO*-7uJFPdi!TU2DEJCjlUPfWDIWaOUoAz(kM7g}l4
zyXxO6r>r-b8P0Y5Gh{wzGIRcj!Yj5KhV}B%n<;L((L|f=gS*u9W`6l20-^Kf8_jk8
zQwgNhMnfu<cqtGs-Dt*cHr`8x;JkE`30;1mQ2Qnmy8J*AFWqGDQumj5CQguRH_?kG
zQ}vb|wOj3b2;{w#XDGAXgiWkK+SG1}uBV|9;-&3|(D!YUe|qiamKSN0d~|qDoAR{a
zrzSH=?x2Y>cd{MJaE`(~oyuNSG92!+RQ_b%DQ>&Hbh=Xwul)RW&d3m}36=V`n{YfO
zkovY8M#kYOy~uWx_m|@GRQh$tF?{;4170lUJ4*NORew?0+))-QuhC(`JougNH98FQ
zt6r>R#B`Y9pK})DsfZQIHU5CXK;gAI%q?l%j)}TEOv9fIdsAYTTTXVGioL|_OPmqT
zZI=`FsaNtlO~`i~C2#yL0p$Y~NSnZJF)9m0{=0_7C<!nwBw@EE_Zz5j)xRRRrJ+KE
z=U1YBSt1-IA-T&wzF*x}y(<k=h(eV><qruwG;z26Xuq0Pz1xK2p&`Pv+mJ7TL&8Ix
zcG~-XqZ+C^P2}89i12iZ`*9p4kT~39+kT^_7WSCPCu>54XOCf}yAex&mMm*ianR<v
zR6~BhA!kS2{j=ikT_!pp?mnd%h=YOss0ql6cA0QUJ&^Wx8D_1;!GJhemnj|yPA>%K
z^xdh`2MX=zPMtoG#Ob@m>A!+)xX`87RQ%RlQCW4bTUfIX9?t%$^ryGwdrelmu5`3m
zsLw=`eL@0|wt;=e1*Dcf=`2Je?gE#7W8dsnw-@?Nbh|SVRG9h=Ynk$K<nk3hmBx-f
zpy~>T(!L3*Bhxp@DmvGz@ToNR9}lRe!hngU1W96~0W)=)Gty`=(qUt}4ygLV;k4_9
z3e#cfx+NiDv{>ngv9$-)l)@1cO%Ia9Oh-&Zqg&W_7pNRHcELe)XMD8GB>m-4Vfr?<
zyo;Q4Q}H`|`N7NT8e)g`sC)8*hP6ns>|J8nV<vjvTNa3A!9Fn^i1v<|qW_ly<Smbx
zaW^~50<r8dGyeTxSs^&f9#1VBD75N$YS};%%N`fYo|3R*FT*KQ@rWJso;sO7WwHfl
zORi=idj#8gTLNhf*p1G!K;(X4xbKH;nm`_&HukT3)%3#YGLzWyv@l)om_TQYeWO=Z
z7tY`%PPyF3;>fp84NSb{Sz|8>(^(V7dQ~pq&Kkyg+DXEe=Zw9hPnp8G)ZkpRf~0d|
za7lQn5?g*~Y;zw8FCV4`hYHh&VsPIkRQ{2%@ApyNN2z~tR|-rY$+xe@N#fIY-q^AI
z>W0Gkv@_v46qwFSXJQ-^ec;E&{!PD13Ll%u-TFZzWPJ9qAu-Q0F+96q>=t3VP*#DA
z&Mp{KaD$V?zoSo#{h(hJzw(KR{CA#9OJMrMu)E4PocyATR8zdNX6&4Y=X~`W|2*eg
z-}%O0jdh<P>Xn=#p1Yl50x5jauv5&}z-F^c#y)&V6$_WjZ!HJyUoz9C5BoYEJS(4@
zmsI@FwjWXt4WE~A;J5hfEb-ZvBwCQzzucuJH-ph21b_Mrka}B^>wOYF5OcO9ba2ug
z0dd-v<i-Vw{{{=eIqm!;e1ijphRjdGH#m^QY3C<6?P_sau0C0mR6LbSDytSTR6MmK
zdyPFkpdQIDN`eEA5eI%E2@b4*v<&PW7)TvYB>1L$F2;xhFSebB`CKecf@?yAXK{jE
z7#_m|deV+OqME9oOv3mOqEHh)7i?*Ohxc7#zjs94TD>F*pB;$sEJ^T`CdY&KE@e9x
z*(*zvFx(pBoOfx0%W-)Ua&X>d_NJqxG%YLFCBC~%>be&L&CcgmBo(XCKx0tAQ%BXU
z`4wU+8P3lZQ>{#*XKc?=Ro~1nZzJfu?8?+eK-#=AwGj{-txRrwCfG;_&PJ<J8wCn&
zS(Vx-ki<r-#72GW%gJ&@%KD_@1sb^fiki}j->R<4{Q4w&z3X4D6Z1TWiu~6cNTa}h
z*bPMdbMmSZ%iLok69#YnxB6V6H3`FIi14%~autw_P_Gk9Y_PS1>WS(NWhO@zrms03
z-t~FgKd8Q5cs>cyah<cz^9hGT$h}r~v)Y|hwA-)#k9uJE=7eoC;`n!qHn%3xw&3_+
z93O(;)&!)9Ta$1YGLVY4CgjzL;{#FZ)+E^$lqv+L)V5Tqfx;`arAiGXQED4XeJD5Q
WI}d;N;am2dyW-}d_K{<1-2VX>D!6X|

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 1cc37bf0..90902343 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -115,6 +115,10 @@ func (DiscoveryMethod) EnumDescriptor() ([]byte, []int) {
 // OfferAbsenceReason — Why no offers are available for a requested URI.
 // Used in OfferGroup.absence_reason when offers is empty.
 // Enables diagnostic feedback without requiring a transaction attempt.
+//
+// No value reports that the requester's scopes do not cover a resource. When
+// they leave no presentable offer, the Exchange answers with no offers and no
+// absence reason, under the existence-hiding rule stated on Requester.scopes.
 type OfferAbsenceReason int32
 
 const (
@@ -134,12 +138,18 @@ const (
 	OfferAbsenceReason_OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE OfferAbsenceReason = 4
 	// Exchange is not authorized by the provider to sell this resource.
 	OfferAbsenceReason_OFFER_ABSENCE_REASON_NOT_AUTHORIZED OfferAbsenceReason = 5
-	// Requester's scopes/subscription do not cover this resource. Applies wherever
-	// access is gated by subscription or scope entitlements (not only enterprise
-	// deployments): the resource exists but the requester's delegation token or
-	// subscription does not grant it. The Exchange returns this so the requester
-	// learns the resource is reachable under the right subscription/scope. (Where
-	// existence itself must stay hidden, the Exchange MAY omit it silently instead.)
+	// DEPRECATED, never sent. An Exchange MUST NOT send this value. When the
+	// requester's scopes leave no presentable offer for a resource, the Exchange
+	// answers with no offers and no absence reason, exactly as for any resource
+	// with nothing to offer, so the requester never learns the resource exists
+	// (the existence-hiding rule, stated on Requester.scopes). An offer the
+	// Exchange did present is honoured until it expires, so no scope refusal
+	// follows at purchase either. A receiver treats this value as unknown.
+	//
+	// The number is retained because removing it would break the v1 wire
+	// contract, and it MUST NOT be reused or given a new meaning.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 	OfferAbsenceReason_OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT OfferAbsenceReason = 6
 	// Consumer encountered ext_critical keys it does not recognize.
 	// The unrecognized keys SHOULD be listed in the OfferGroup's ext field
@@ -886,6 +896,11 @@ func (ResourceMutability) EnumDescriptor() ([]byte, []int) {
 // DenialReason — Standard vocabulary for transaction denial.
 // Logged as enum values, not strings. Enables automated processing
 // of denial patterns across the ecosystem.
+//
+// No value refuses a purchase because the requester's scopes do not cover the
+// resource. An offer the Exchange presented is honoured until it expires, and
+// a requester is never presented an offer its scopes do not cover (the
+// existence-hiding rule, stated on Requester.scopes).
 type DenialReason int32
 
 const (
@@ -900,7 +915,18 @@ const (
 	DenialReason_DENIAL_REASON_SIGNATURE_INVALID         DenialReason = 8  // Offer signature verification failed
 	DenialReason_DENIAL_REASON_QUOTA_EXCEEDED            DenialReason = 9  // Subscription access count exhausted for this period
 	DenialReason_DENIAL_REASON_DELEGATION_INVALID        DenialReason = 10 // Delegation missing, unverifiable, expired, holder binding failed, or scopes/caps do not cover the request
-	DenialReason_DENIAL_REASON_SCOPE_INSUFFICIENT        DenialReason = 11 // Requester scopes don't cover this resource
+	// DEPRECATED, never sent. An Exchange MUST NOT send this value. An offer the
+	// Exchange presented is honoured until it expires, so a purchase is never
+	// refused for scope. A resource the requester's scopes leave with no
+	// presentable offer is answered at discovery with no offers and no absence
+	// reason, so the requester never holds an offer to buy (the existence-hiding
+	// rule, stated on Requester.scopes). A receiver treats this value as unknown.
+	//
+	// The number is retained because removing it would break the v1 wire
+	// contract, and it MUST NOT be reused or given a new meaning.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
+	DenialReason_DENIAL_REASON_SCOPE_INSUFFICIENT DenialReason = 11
 	// Entitlement family — subscription/entitlement access failures on a
 	// subscription-gated offer. Finer-grained than DELEGATION_INVALID so callers
 	// and operator tooling can triage each mode. These single-source the
@@ -2352,7 +2378,10 @@ type OfferGroup struct {
 	//	for the agent to understand how the resource was found.
 	DiscoveryMethod *DiscoveryMethod `protobuf:"varint,3,opt,name=discovery_method,json=discoveryMethod,proto3,enum=fora.v1.DiscoveryMethod,oneof" json:"discovery_method,omitempty"`
 	// Why no offers are available for this URI.
-	// Present when `offers` is empty. Enables agents/Brokers to distinguish
+	// Set only when `offers` is empty, and not always then: a resource the
+	// requester's scopes leave with no presentable offer is answered with empty
+	// `offers` and this field unset (the existence-hiding rule, stated on
+	// Requester.scopes). Enables agents/Brokers to distinguish
 	// "resource not in catalog" from "resource blocked for your use case" without
 	// trial-and-error transactions. Analogous to OpenRTB nbr codes and
 	// Shutterstock per-item error metadata in batch responses.
@@ -4249,10 +4278,19 @@ type Requester struct {
 	Name *string `protobuf:"bytes,4,opt,name=name,proto3,oneof" json:"name,omitempty"`
 	// Entitlement scopes. Declare what the requester can access.
 	//
-	// The Exchange filters its catalog to resources matching these scopes.
-	// Resources outside the scopes are not returned — the requester never
-	// learns they exist. This is the enforcement mechanism for both enterprise
-	// RBAC and open-market subscription entitlements.
+	// The Exchange filters its catalog to resources matching these scopes. This
+	// is the enforcement mechanism for both enterprise RBAC and open-market
+	// subscription entitlements.
+	//
+	// EXISTENCE HIDING. A requester never learns about a resource outside its
+	// scopes. When the scopes leave no presentable offer for a resource, the
+	// Exchange answers with no offers and no absence reason (an OfferGroup with
+	// empty `offers` and `absence_reason` unset), exactly as for any resource
+	// with nothing to offer. A Broker relaying that answer adds no reason of its
+	// own. At purchase, an offer the Exchange presented is honoured until it
+	// expires, so a scope refusal cannot arise there. No reason in the protocol
+	// reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and
+	// DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.
 	//
 	// Scope format: colon-separated segments, "{domain}:{permission}" or
 	// "{profile}:{permission}", optionally multi-segment ("dist:US:CA");
@@ -8219,12 +8257,15 @@ type DiscoveryResponse struct {
 	// (unlike OfferGroup). A consumer needing the filtered axes calls
 	// DiscoverResources.
 	//
-	// Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,
-	// NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists
+	// Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,
+	// NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists
 	// and why access was refused. Resolve surfaces the same oracle at the broker
 	// that OfferGroup.absence_reason does at the Exchange, so the same mitigation
 	// applies: where existence itself must stay hidden, the Broker MAY omit the
 	// reason (leave this unset) rather than reveal it. See the threat model.
+	// A scope shortfall never reaches this field: the Exchange answers it with
+	// no absence reason, and the Broker MUST NOT supply one (the existence-hiding
+	// rule, stated on Requester.scopes).
 	AbsenceReason *OfferAbsenceReason `protobuf:"varint,16,opt,name=absence_reason,json=absenceReason,proto3,enum=fora.v1.OfferAbsenceReason,oneof" json:"absence_reason,omitempty"`
 	// Extension point
 	Ext *structpb.Struct `protobuf:"bytes,15,opt,name=ext,proto3" json:"ext,omitempty"`
@@ -11177,15 +11218,15 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x19DISCOVERY_METHOD_EXCHANGE\x10\x01\x12\x1b\n" +
 	"\x17DISCOVERY_METHOD_SEARCH\x10\x02\x12#\n" +
 	"\x1fDISCOVERY_METHOD_RECOMMENDATION\x10\x03\x12 \n" +
-	"\x1cDISCOVERY_METHOD_SYNDICATION\x10\x04*\xa3\x03\n" +
+	"\x1cDISCOVERY_METHOD_SYNDICATION\x10\x04*\xa7\x03\n" +
 	"\x12OfferAbsenceReason\x12$\n" +
 	" OFFER_ABSENCE_REASON_UNSPECIFIED\x10\x00\x12'\n" +
 	"#OFFER_ABSENCE_REASON_NOT_IN_CATALOG\x10\x01\x12(\n" +
 	"$OFFER_ABSENCE_REASON_CONTENT_BLOCKED\x10\x02\x12-\n" +
 	")OFFER_ABSENCE_REASON_RESTRICTION_FILTERED\x10\x03\x120\n" +
 	",OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE\x10\x04\x12'\n" +
-	"#OFFER_ABSENCE_REASON_NOT_AUTHORIZED\x10\x05\x12+\n" +
-	"'OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT\x10\x06\x123\n" +
+	"#OFFER_ABSENCE_REASON_NOT_AUTHORIZED\x10\x05\x12/\n" +
+	"'OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT\x10\x06\x1a\x02\b\x01\x123\n" +
 	"/OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\a\x12(\n" +
 	"$OFFER_ABSENCE_REASON_BUDGET_EXCEEDED\x10\b*q\n" +
 	"\rTermSemantics\x12\x1e\n" +
@@ -11254,7 +11295,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x1fRESOURCE_MUTABILITY_UNSPECIFIED\x10\x00\x12\x1e\n" +
 	"\x1aRESOURCE_MUTABILITY_STATIC\x10\x01\x12\x1f\n" +
 	"\x1bRESOURCE_MUTABILITY_DYNAMIC\x10\x02\x12\x1c\n" +
-	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\x8a\x06\n" +
+	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\x8e\x06\n" +
 	"\fDenialReason\x12\x1d\n" +
 	"\x19DENIAL_REASON_UNSPECIFIED\x10\x00\x12\"\n" +
 	"\x1eDENIAL_REASON_ACCOUNT_INACTIVE\x10\x01\x12&\n" +
@@ -11267,8 +11308,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x1fDENIAL_REASON_SIGNATURE_INVALID\x10\b\x12 \n" +
 	"\x1cDENIAL_REASON_QUOTA_EXCEEDED\x10\t\x12$\n" +
 	" DENIAL_REASON_DELEGATION_INVALID\x10\n" +
-	"\x12$\n" +
-	" DENIAL_REASON_SCOPE_INSUFFICIENT\x10\v\x12%\n" +
+	"\x12(\n" +
+	" DENIAL_REASON_SCOPE_INSUFFICIENT\x10\v\x1a\x02\b\x01\x12%\n" +
 	"!DENIAL_REASON_ENTITLEMENT_MISSING\x10\f\x12'\n" +
 	"#DENIAL_REASON_ENTITLEMENT_MALFORMED\x10\r\x12%\n" +
 	"!DENIAL_REASON_ENTITLEMENT_EXPIRED\x10\x0e\x12)\n" +
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index a607292b..b8f9d602 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -269,7 +269,7 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index c93ffd70..85b01052 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -274,7 +274,7 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index 946fc469..3e7e55f3 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -329,7 +329,7 @@
               "type": "integer"
             }
           ],
-          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "description": "Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
           "title": "Offer Absence Reason"
         },
         "discovery_method": {
@@ -870,7 +870,7 @@
           "type": "integer"
         }
       ],
-      "description": "Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.",
+      "description": "Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).",
       "title": "Offer Absence Reason"
     },
     "ext": {
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index c3285a23..eb5e9586 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -334,7 +334,7 @@
               "type": "integer"
             }
           ],
-          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "description": "Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
           "title": "Offer Absence Reason"
         },
         "discovery_method": {
@@ -884,7 +884,7 @@
           "type": "integer"
         }
       ],
-      "description": "Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.",
+      "description": "Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).",
       "title": "Offer Absence Reason"
     },
     "ext": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index 0f78ca81..c726c3f6 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -781,7 +781,7 @@
           "type": "integer"
         }
       ],
-      "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+      "description": "Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
       "title": "Offer Absence Reason"
     },
     "discovery_method": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index 83fc098f..dabf3b2d 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -794,7 +794,7 @@
           "type": "integer"
         }
       ],
-      "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+      "description": "Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
       "title": "Offer Absence Reason"
     },
     "discovery_method": {
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index fb389fa6..60bce41f 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -118,7 +118,7 @@
       "type": "string"
     },
     "scopes": {
-      "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+      "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
       "items": {
         "type": "string"
       },
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index b5474294..fc4eb39b 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -120,7 +120,7 @@
       "type": "string"
     },
     "scopes": {
-      "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+      "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
       "items": {
         "type": "string"
       },
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index 0268e16a..ef9093d9 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -159,7 +159,7 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index 33c7ec93..e6f02fdc 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -162,7 +162,7 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index 1e48d62c..1f5968e4 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -329,7 +329,7 @@
               "type": "integer"
             }
           ],
-          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "description": "Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
           "title": "Offer Absence Reason"
         },
         "discovery_method": {
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index 4c715760..3534426f 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -334,7 +334,7 @@
               "type": "integer"
             }
           ],
-          "description": "Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
+          "description": "Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.",
           "title": "Offer Absence Reason"
         },
         "discovery_method": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 5e39a6ab..6bcdde12 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -727,7 +727,7 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 6a8d99f9..e7f4d868 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -741,7 +741,7 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 2ac0f527..4ac85255 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1391,7 +1391,7 @@ class Requester(WireModel):
     )
     scopes: list[str] | None = Field(
         None,
-        description='Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, "{domain}:{permission}" or\n "{profile}:{permission}", optionally multi-segment ("dist:US:CA");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   "credit:read"                — can access credit reports\n   "subscription:marketdata-2026" — has active MarketData subscription\n   "academic:*"                 — full access to academic resources\n   "internal:reports"           — can access internal reports\n   "*"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (":" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is "*"; a terminal "*" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: "dist:*" covers "dist:US" and "dist:US:CA"; "dist:US:*" covers\n "dist:US:CA" but not "dist:EU"; bare "dist" covers only "dist"; granted\n "dist:US:CA" does NOT cover required "dist:US"; "*" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).',
+        description='Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, "{domain}:{permission}" or\n "{profile}:{permission}", optionally multi-segment ("dist:US:CA");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   "credit:read"                — can access credit reports\n   "subscription:marketdata-2026" — has active MarketData subscription\n   "academic:*"                 — full access to academic resources\n   "internal:reports"           — can access internal reports\n   "*"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (":" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is "*"; a terminal "*" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: "dist:*" covers "dist:US" and "dist:US:CA"; "dist:US:*" covers\n "dist:US:CA" but not "dist:EU"; bare "dist" covers only "dist"; granted\n "dist:US:CA" does NOT cover required "dist:US"; "*" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).',
         max_length=64,
     )
     type: RequesterType = Field(
@@ -1925,7 +1925,7 @@ class Offer(WireModel):
 class OfferGroup(WireModel):
     absence_reason: OfferAbsenceReason | None = Field(
         None,
-        description='Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n "resource not in catalog" from "resource blocked for your use case" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.',
+        description='Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester\'s scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n "resource not in catalog" from "resource blocked for your use case" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.',
     )
     discovery_method: DiscoveryMethod | None = Field(
         None,
@@ -2097,7 +2097,7 @@ class UpstreamRefusal(WireModel):
 class DiscoveryResponse(WireModel):
     absence_reason: OfferAbsenceReason | None = Field(
         None,
-        description='Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.',
+        description='Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 4afc6238..1f18231b 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,9 +48,9 @@ export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE",
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
-export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
+export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,\n NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -104,7 +104,7 @@ export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "a
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
@@ -154,7 +154,7 @@ export const RequestAuthFailureReasonSchema = wire(z.enum(["REQUEST_AUTH_FAILURE
 
 export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
 
-export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
+export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
 
 export const RequesterTypeSchema = wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]));
 
@@ -168,9 +168,9 @@ export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string(
 
 export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]));
 
-export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
+export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Present when `offers` is empty. Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
 export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
@@ -200,7 +200,7 @@ export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().re
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes.\n Resources outside the scopes are not returned — the requester never\n learns they exist. This is the enforcement mechanism for both enterprise\n RBAC and open-market subscription entitlements.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
 export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index b6f962ad..66ff94e3 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -527,7 +527,10 @@ message OfferGroup {
   optional DiscoveryMethod discovery_method = 3;
 
   // Why no offers are available for this URI.
-  // Present when `offers` is empty. Enables agents/Brokers to distinguish
+  // Set only when `offers` is empty, and not always then: a resource the
+  // requester's scopes leave with no presentable offer is answered with empty
+  // `offers` and this field unset (the existence-hiding rule, stated on
+  // Requester.scopes). Enables agents/Brokers to distinguish
   // "resource not in catalog" from "resource blocked for your use case" without
   // trial-and-error transactions. Analogous to OpenRTB nbr codes and
   // Shutterstock per-item error metadata in batch responses.
@@ -558,6 +561,10 @@ enum DiscoveryMethod {
 // OfferAbsenceReason — Why no offers are available for a requested URI.
 // Used in OfferGroup.absence_reason when offers is empty.
 // Enables diagnostic feedback without requiring a transaction attempt.
+//
+// No value reports that the requester's scopes do not cover a resource. When
+// they leave no presentable offer, the Exchange answers with no offers and no
+// absence reason, under the existence-hiding rule stated on Requester.scopes.
 enum OfferAbsenceReason {
   OFFER_ABSENCE_REASON_UNSPECIFIED = 0;  // unset — output/optional; zero is a valid not-applicable/unset state
   // Resource URI is not in this Exchange's catalog.
@@ -575,13 +582,17 @@ enum OfferAbsenceReason {
   OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE = 4;
   // Exchange is not authorized by the provider to sell this resource.
   OFFER_ABSENCE_REASON_NOT_AUTHORIZED = 5;
-  // Requester's scopes/subscription do not cover this resource. Applies wherever
-  // access is gated by subscription or scope entitlements (not only enterprise
-  // deployments): the resource exists but the requester's delegation token or
-  // subscription does not grant it. The Exchange returns this so the requester
-  // learns the resource is reachable under the right subscription/scope. (Where
-  // existence itself must stay hidden, the Exchange MAY omit it silently instead.)
-  OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT = 6;
+  // DEPRECATED, never sent. An Exchange MUST NOT send this value. When the
+  // requester's scopes leave no presentable offer for a resource, the Exchange
+  // answers with no offers and no absence reason, exactly as for any resource
+  // with nothing to offer, so the requester never learns the resource exists
+  // (the existence-hiding rule, stated on Requester.scopes). An offer the
+  // Exchange did present is honoured until it expires, so no scope refusal
+  // follows at purchase either. A receiver treats this value as unknown.
+  //
+  // The number is retained because removing it would break the v1 wire
+  // contract, and it MUST NOT be reused or given a new meaning.
+  OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT = 6 [deprecated = true];
 
   // Consumer encountered ext_critical keys it does not recognize.
   // The unrecognized keys SHOULD be listed in the OfferGroup's ext field
@@ -1802,8 +1813,9 @@ enum DeliveryMethod {
 //   3. Delegation chain proves who authorized this requester
 //
 // The Exchange uses scopes to filter the catalog:
-//   - Resources outside the requester's scopes are NOT returned (not even
-//     as OfferAbsenceReason — the requester never learns they exist)
+//   - A resource outside the requester's scopes is answered with no offers and
+//     no absence reason, so the requester never learns it exists (the
+//     existence-hiding rule, stated on Requester.scopes)
 //   - Subscription entitlements are scopes: "subscription:marketdata-2026"
 //     tells the Exchange to return zero-cost subscription offers
 //
@@ -1849,10 +1861,19 @@ message Requester {
 
   // Entitlement scopes. Declare what the requester can access.
   //
-  // The Exchange filters its catalog to resources matching these scopes.
-  // Resources outside the scopes are not returned — the requester never
-  // learns they exist. This is the enforcement mechanism for both enterprise
-  // RBAC and open-market subscription entitlements.
+  // The Exchange filters its catalog to resources matching these scopes. This
+  // is the enforcement mechanism for both enterprise RBAC and open-market
+  // subscription entitlements.
+  //
+  // EXISTENCE HIDING. A requester never learns about a resource outside its
+  // scopes. When the scopes leave no presentable offer for a resource, the
+  // Exchange answers with no offers and no absence reason (an OfferGroup with
+  // empty `offers` and `absence_reason` unset), exactly as for any resource
+  // with nothing to offer. A Broker relaying that answer adds no reason of its
+  // own. At purchase, an offer the Exchange presented is honoured until it
+  // expires, so a scope refusal cannot arise there. No reason in the protocol
+  // reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and
+  // DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.
   //
   // Scope format: colon-separated segments, "{domain}:{permission}" or
   // "{profile}:{permission}", optionally multi-segment ("dist:US:CA");
@@ -2419,6 +2440,11 @@ message Cost {
 // DenialReason — Standard vocabulary for transaction denial.
 // Logged as enum values, not strings. Enables automated processing
 // of denial patterns across the ecosystem.
+//
+// No value refuses a purchase because the requester's scopes do not cover the
+// resource. An offer the Exchange presented is honoured until it expires, and
+// a requester is never presented an offer its scopes do not cover (the
+// existence-hiding rule, stated on Requester.scopes).
 enum DenialReason {
   DENIAL_REASON_UNSPECIFIED = 0;  // output enum; zero = not-applicable on TransactionResultItem.denial_reason, rejected (not_in:[0]) where set on TransactionDenial.reason
   DENIAL_REASON_ACCOUNT_INACTIVE = 1;     // the requester's account (the billing_ref minted at Register) exists but is not active — typically awaiting the Exchange operator's out-of-band activation; the remedy is to wait or contact the operator, NOT to register again
@@ -2431,7 +2457,16 @@ enum DenialReason {
   DENIAL_REASON_SIGNATURE_INVALID = 8;    // Offer signature verification failed
   DENIAL_REASON_QUOTA_EXCEEDED = 9;       // Subscription access count exhausted for this period
   DENIAL_REASON_DELEGATION_INVALID = 10;  // Delegation missing, unverifiable, expired, holder binding failed, or scopes/caps do not cover the request
-  DENIAL_REASON_SCOPE_INSUFFICIENT = 11;  // Requester scopes don't cover this resource
+  // DEPRECATED, never sent. An Exchange MUST NOT send this value. An offer the
+  // Exchange presented is honoured until it expires, so a purchase is never
+  // refused for scope. A resource the requester's scopes leave with no
+  // presentable offer is answered at discovery with no offers and no absence
+  // reason, so the requester never holds an offer to buy (the existence-hiding
+  // rule, stated on Requester.scopes). A receiver treats this value as unknown.
+  //
+  // The number is retained because removing it would break the v1 wire
+  // contract, and it MUST NOT be reused or given a new meaning.
+  DENIAL_REASON_SCOPE_INSUFFICIENT = 11 [deprecated = true];
 
   // Entitlement family — subscription/entitlement access failures on a
   // subscription-gated offer. Finer-grained than DELEGATION_INVALID so callers
@@ -3785,12 +3820,15 @@ message DiscoveryResponse {
   // (unlike OfferGroup). A consumer needing the filtered axes calls
   // DiscoverResources.
   //
-  // Existence-oracle note: an authorization-flavored reason (SCOPE_INSUFFICIENT,
-  // NOT_AUTHORIZED, NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists
+  // Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,
+  // NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists
   // and why access was refused. Resolve surfaces the same oracle at the broker
   // that OfferGroup.absence_reason does at the Exchange, so the same mitigation
   // applies: where existence itself must stay hidden, the Broker MAY omit the
   // reason (leave this unset) rather than reveal it. See the threat model.
+  // A scope shortfall never reaches this field: the Exchange answers it with
+  // no absence reason, and the Broker MUST NOT supply one (the existence-hiding
+  // rule, stated on Requester.scopes).
   optional OfferAbsenceReason absence_reason = 16;
 
   // Extension point

From 7d365847d10af513fea3e37bef1aa5fd0e8cb00a Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:54:33 -0400
Subject: [PATCH 045/164] Stop presenting a scope shortfall as an absence
 reason in the Go SDK

The grouped-discovery test used OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT
as its example of a reason that must survive grouping, and the core
package comment named "scope insufficient" as a reason an agent acts on.
That value is deprecated and never sent. Both now use
TEMPORARILY_UNAVAILABLE, meaning retry later. The reader still decodes
the deprecated value.
---
 sdk/go/connect/verbs_test.go | 10 +++++-----
 sdk/go/core/discovery.go     |  5 ++---
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/sdk/go/connect/verbs_test.go b/sdk/go/connect/verbs_test.go
index 4d6cda6f..ca391cc7 100644
--- a/sdk/go/connect/verbs_test.go
+++ b/sdk/go/connect/verbs_test.go
@@ -111,7 +111,7 @@ func TestDiscover_KeepsPerURIGroupsAndReasons(t *testing.T) {
 		{Uri: "https://site.test/a", Offers: []*forav1.Offer{offers.good}},
 		{
 			Uri:           "https://site.test/b",
-			AbsenceReason: absenceReason(forav1.OfferAbsenceReason_OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT),
+			AbsenceReason: absenceReason(forav1.OfferAbsenceReason_OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE),
 		},
 		{
 			Uri:                "https://site.test/c",
@@ -135,11 +135,11 @@ func TestDiscover_KeepsPerURIGroupsAndReasons(t *testing.T) {
 	if len(res.Groups[0].Verified) != 1 {
 		t.Errorf("group 0 must carry its verified offer, got %d", len(res.Groups[0].Verified))
 	}
-	// The refusal is an ANSWER: the agent can tell "acquire an entitlement and
-	// retry" from "give up" only because the reason survived.
+	// The reason is an ANSWER: the agent can tell "retry later" from "give up"
+	// only because the reason survived.
 	if res.Groups[1].AbsenceReason == nil ||
-		*res.Groups[1].AbsenceReason != forav1.OfferAbsenceReason_OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT {
-		t.Errorf("group 1 absence reason = %v, want SCOPE_INSUFFICIENT", res.Groups[1].AbsenceReason)
+		*res.Groups[1].AbsenceReason != forav1.OfferAbsenceReason_OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE {
+		t.Errorf("group 1 absence reason = %v, want TEMPORARILY_UNAVAILABLE", res.Groups[1].AbsenceReason)
 	}
 	if len(res.Groups[2].RestrictionFilters) != 1 {
 		t.Errorf("group 2 must carry the filtered axis, got %v", res.Groups[2].RestrictionFilters)
diff --git a/sdk/go/core/discovery.go b/sdk/go/core/discovery.go
index 41a52f63..42707a68 100644
--- a/sdk/go/core/discovery.go
+++ b/sdk/go/core/discovery.go
@@ -16,9 +16,8 @@ import (
 // was refused or why.
 //
 // That distinction is the point of the vocabulary: "not in the catalogue" means
-// give up, "scope insufficient" means acquire an entitlement and retry, and
-// "content blocked" means never retry. Flattened, all three read as "found
-// nothing".
+// give up, "temporarily unavailable" means retry later, and "content blocked"
+// means never retry. Flattened, all three read as "found nothing".
 //
 // The fail-closed {verified, rejected} split is preserved inside each group,
 // through the same Verifier — not a second verification path.

From 0d358089a36dfc159476611404b82becae1cd4ff Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:56:30 -0400
Subject: [PATCH 046/164] Stop presenting a scope shortfall as an absence
 reason in the Python SDK

The grouped-discovery tests for the client and for Verifier.sort_groups
used OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT as their example of a
reason that must survive grouping, and the core module comment and the
README named "scope insufficient" as a reason an agent acts on. That
value is deprecated and never sent. All of them now use
TEMPORARILY_UNAVAILABLE, meaning retry later. The reader still decodes
the deprecated value.
---
 sdk/python/README.md                      |  4 ++--
 sdk/python/fora_sdk/core.py               |  4 ++--
 sdk/python/tests/test_client.py           |  8 ++++----
 sdk/python/tests/test_core_sort_groups.py | 21 ++++++++++++---------
 4 files changed, 20 insertions(+), 17 deletions(-)

diff --git a/sdk/python/README.md b/sdk/python/README.md
index 06c5ef29..697c5d5f 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -381,8 +381,8 @@ Pydantic models.
 A rejected offer keeps both the offer and the `reason` it was refused, so a caller can
 tell a bad signature from an unresolvable Exchange. A group with no offers at all keeps
 its `absence_reason` instead, and the distinction matters: "not in the catalogue" means
-give up, "scope insufficient" means acquire an entitlement and retry, and "content
-blocked" means never retry.
+give up, "temporarily unavailable" means retry later, and "content blocked" means never
+retry.
 
 **Where a URI comes from** is not the SDK's job. `discover` asks one Exchange about URIs
 you already have — from your own crawl frontier, a publisher's catalogue, or a Broker.
diff --git a/sdk/python/fora_sdk/core.py b/sdk/python/fora_sdk/core.py
index edd65630..e6cddfa6 100644
--- a/sdk/python/fora_sdk/core.py
+++ b/sdk/python/fora_sdk/core.py
@@ -151,8 +151,8 @@ class Result:
 # offer, so nothing survives to say which resource was refused or why.
 #
 # That distinction is the point of the vocabulary: "not in the catalogue" means give up,
-# "scope insufficient" means acquire an entitlement and retry, and "content blocked"
-# means never retry. Flattened, all three read as "found nothing".
+# "temporarily unavailable" means retry later, and "content blocked" means never retry.
+# Flattened, all three read as "found nothing".
 #
 # The fail-closed {verified, rejected} split is preserved inside each group, through the
 # same Verifier — not a second verification path.
diff --git a/sdk/python/tests/test_client.py b/sdk/python/tests/test_client.py
index 509dd742..da6e0ed4 100644
--- a/sdk/python/tests/test_client.py
+++ b/sdk/python/tests/test_client.py
@@ -163,7 +163,7 @@ def test_every_requested_uri_keeps_its_group_and_its_reason(face: Face) -> None:
                 {"uri": "https://site.test/a", "offers": [offer]},
                 {
                     "uri": "https://site.test/b",
-                    "absence_reason": "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+                    "absence_reason": "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
                 },
             ],
         }
@@ -174,9 +174,9 @@ def test_every_requested_uri_keeps_its_group_and_its_reason(face: Face) -> None:
 
     assert len(result.groups) == 2
     assert len(result.groups[0].result.verified) == 1
-    # The refusal is an ANSWER: the agent can tell "acquire an entitlement and retry" from
-    # "give up" only because the reason survived.
-    assert result.groups[1].absence_reason == "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT"
+    # The reason is an ANSWER: the agent can tell "retry later" from "give up" only because
+    # the reason survived.
+    assert result.groups[1].absence_reason == "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE"
     assert result.exchange == "exchange.test"
 
 
diff --git a/sdk/python/tests/test_core_sort_groups.py b/sdk/python/tests/test_core_sort_groups.py
index 84e77355..f5f53285 100644
--- a/sdk/python/tests/test_core_sort_groups.py
+++ b/sdk/python/tests/test_core_sort_groups.py
@@ -4,11 +4,11 @@
 
 A discovery call is per-URI, and the answer has to stay that way. A URI that was REFUSED
 carries no offer, so a flat list erases it: nothing survives to say which resource was
-refused or why, and "not in the catalogue" (give up), "scope insufficient" (acquire an
-entitlement and retry) and "content blocked" (never retry) all read alike as "found
-nothing". These assert the grouping keeps that difference, and that the offers inside
-each group go through the SAME Verifier — the fail-closed split is not re-implemented
-per group, which is what "no second verification path" means.
+refused or why, and "not in the catalogue" (give up), "temporarily unavailable" (retry
+later) and "content blocked" (never retry) all read alike as "found nothing". These
+assert the grouping keeps that difference, and that the offers inside each group go
+through the SAME Verifier — the fail-closed split is not re-implemented per group,
+which is what "no second verification path" means.
 """
 
 from __future__ import annotations
@@ -41,7 +41,10 @@ def test_every_requested_uri_keeps_its_group_and_its_reason() -> None:
     groups = _verifier(Mode.OFF).sort_groups(
         [
             _group("https://site.test/a", offers=[{"offer_id": "one"}]),
-            _group("https://site.test/b", absence_reason="OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT"),
+            _group(
+                "https://site.test/b",
+                absence_reason="OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
+            ),
             _group(
                 "https://site.test/c",
                 absence_reason="OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
@@ -56,9 +59,9 @@ def test_every_requested_uri_keeps_its_group_and_its_reason() -> None:
         "https://site.test/c",
     ], "a group per requested URI, in the order the responder returned"
     assert len(groups[0].result.verified) == 1
-    # The refusal is an ANSWER: the agent can tell "acquire an entitlement and retry"
-    # from "give up" only because the reason survived.
-    assert groups[1].absence_reason == "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT"
+    # The reason is an ANSWER: the agent can tell "retry later" from "give up" only
+    # because the reason survived.
+    assert groups[1].absence_reason == "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE"
     assert groups[1].result.verified == [] and groups[1].result.rejected == []
     assert groups[2].restriction_filters == ["RESTRICTION_KIND_GEOGRAPHY"]
 

From 162bdee9424d40926816b62a04f2a43b7714147f Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 10:57:21 -0400
Subject: [PATCH 047/164] Stop presenting a scope shortfall as an absence
 reason in the TypeScript SDK

The grouped-discovery tests for the client and for Verifier.sortGroups
used OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT as their example of a
reason that must survive grouping, and the core verifier comment named
"scope insufficient" as a reason an agent acts on. That value is
deprecated and never sent. All of them now use TEMPORARILY_UNAVAILABLE,
meaning retry later. The reader still decodes the deprecated value.
---
 sdk/ts/core/verifier.ts               |  4 ++--
 sdk/ts/tests/client.test.ts           |  4 ++--
 sdk/ts/tests/core-sort-groups.test.ts | 14 +++++++-------
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/sdk/ts/core/verifier.ts b/sdk/ts/core/verifier.ts
index 6a842910..74245ccd 100644
--- a/sdk/ts/core/verifier.ts
+++ b/sdk/ts/core/verifier.ts
@@ -106,8 +106,8 @@ export interface Result {
 // offer, so nothing survives to say which resource was refused or why.
 //
 // That distinction is the point of the vocabulary: "not in the catalogue" means give up,
-// "scope insufficient" means acquire an entitlement and retry, and "content blocked"
-// means never retry. Flattened, all three read as "found nothing".
+// "temporarily unavailable" means retry later, and "content blocked" means never retry.
+// Flattened, all three read as "found nothing".
 //
 // The fail-closed {verified, rejected} split is preserved inside each group, through the
 // same Verifier — not a second verification path.
diff --git a/sdk/ts/tests/client.test.ts b/sdk/ts/tests/client.test.ts
index 8ec84b29..78f5c9e3 100644
--- a/sdk/ts/tests/client.test.ts
+++ b/sdk/ts/tests/client.test.ts
@@ -162,7 +162,7 @@ describe("discover", () => {
 				{ uri: "https://site.test/a", offers: [offer] },
 				{
 					uri: "https://site.test/b",
-					absence_reason: "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+					absence_reason: "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
 				},
 			],
 		});
@@ -177,7 +177,7 @@ describe("discover", () => {
 		expect(result.groups).toHaveLength(2);
 		expect(result.groups[0]?.result.verified).toHaveLength(1);
 		expect(result.groups[1]?.absenceReason).toBe(
-			"OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+			"OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
 		);
 		expect(result.exchange).toBe("exchange.test");
 	});
diff --git a/sdk/ts/tests/core-sort-groups.test.ts b/sdk/ts/tests/core-sort-groups.test.ts
index cca47de4..f4e6a972 100644
--- a/sdk/ts/tests/core-sort-groups.test.ts
+++ b/sdk/ts/tests/core-sort-groups.test.ts
@@ -4,9 +4,9 @@
 //
 // A discovery call is per-URI, and the answer has to stay that way. A URI that was
 // REFUSED carries no offer, so a flat list erases it: nothing survives to say which
-// resource was refused or why, and "not in the catalogue" (give up), "scope
-// insufficient" (acquire an entitlement and retry) and "content blocked" (never retry)
-// all read alike as "found nothing". These assert the grouping keeps that difference,
+// resource was refused or why, and "not in the catalogue" (give up), "temporarily
+// unavailable" (retry later) and "content blocked" (never retry) all read alike as
+// "found nothing". These assert the grouping keeps that difference,
 // and that the offers inside each group go through the SAME Verifier — the fail-closed
 // split is not re-implemented per group, which is what "no second verification path"
 // means.
@@ -34,7 +34,7 @@ describe("sdk/ts Verifier.sortGroups keeps the per-URI answer", () => {
 		const groups = await verifier("off").sortGroups([
 			group("https://site.test/a", { offers: [{ offer_id: "one" }] }),
 			group("https://site.test/b", {
-				absence_reason: "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+				absence_reason: "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
 			}),
 			group("https://site.test/c", {
 				absence_reason: "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED",
@@ -48,10 +48,10 @@ describe("sdk/ts Verifier.sortGroups keeps the per-URI answer", () => {
 			"https://site.test/c",
 		]);
 		expect(groups[0]?.result.verified).toHaveLength(1);
-		// The refusal is an ANSWER: the agent can tell "acquire an entitlement and
-		// retry" from "give up" only because the reason survived.
+		// The reason is an ANSWER: the agent can tell "retry later" from "give up"
+		// only because the reason survived.
 		expect(groups[1]?.absenceReason).toBe(
-			"OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT",
+			"OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE",
 		);
 		expect(groups[1]?.result.verified).toEqual([]);
 		expect(groups[2]?.restrictionFilters).toEqual(["RESTRICTION_KIND_GEOGRAPHY"]);

From b29c27a998908622d80ce9a5d2747a141de08379 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:00:27 -0400
Subject: [PATCH 048/164] Describe existence hiding for scope shortfalls in the
 docs and changelogs

The guides told an Exchange to send OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT
when a resource's existence is not secret, and listed
DENIAL_REASON_SCOPE_INSUFFICIENT as a purchase refusal for an Exchange to
return and an agent to act on. Both are now deprecated and never sent.

The authentication page's disclosure-policy section, which offered a
choice between hiding and revealing, becomes "Existence hiding": a
resource outside the requester's scopes is answered with no offers and
no absence reason, exactly as for any resource with nothing to offer,
and an offer presented is honoured until it expires. The Kirkland
example follows it. The Exchange-operator page drops the reveal option
and the denial row, the AI-agent page drops the denial row, and the
enterprise example's three out-of-scope URIs now come back with no
offers and no reason. The discovery-paths page and the reference
page's Requester, DenialReason and OfferAbsenceReason sections state
the rule beside the rendered tables, which mark both values
deprecated. The threat model's existence-oracle entry no longer lists
the value and says a scope shortfall is never disclosed.

The doc-conformance check now fails if either value is named in the
guides; the proto and the historical records are exempt. The
Unreleased entry in both changelogs records the change.
---
 proto/CHANGELOG.md                            | 23 +++++++++++++++++++
 scripts/check-doc-conformance.sh              | 17 ++++++++++++++
 .../docs/getting-started/enterprise.mdx       | 10 ++++----
 .../docs/getting-started/for-ai-agents.mdx    |  1 -
 .../for-exchange-operators.mdx                |  8 +++----
 .../content/docs/protocol/authentication.mdx  | 14 +++++------
 .../content/docs/protocol/discovery-paths.mdx |  2 ++
 .../src/content/docs/reference/changelog.mdx  | 23 +++++++++++++++++++
 .../src/content/docs/reference/proto-fora.mdx |  6 ++++-
 .../content/docs/security/threat-model.mdx    |  4 ++--
 10 files changed, 87 insertions(+), 21 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 3a7dff61..bb6df062 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,29 @@
 
 ## Unreleased
 
+**A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
+`DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
+Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
+a requester never learns about a resource outside its scopes. `Requester.scopes` now
+states the existence-hiding rule once, and the related comments point at it.
+
+- At discovery, when the requester's scopes leave no presentable offer for a resource,
+  the Exchange answers with no offers and no absence reason, exactly as for any resource
+  with nothing to offer. A Broker relaying that answer adds no reason of its own.
+  `OfferGroup.absence_reason` is no longer described as present whenever `offers` is
+  empty.
+- At purchase, an offer the Exchange presented is honoured until it expires, so a scope
+  refusal cannot arise.
+- Both values are marked `[deprecated = true]`. Their numbers are retained, because
+  removing them would break the v1 wire contract, and must not be reused. A receiver
+  treats either value as unknown. The SDK readers still decode them, and the generated
+  models still accept them.
+- The guides no longer tell an Exchange to send either value, or an agent how to react
+  to one: the authentication page's disclosure-policy section became "Existence hiding",
+  and the Exchange-operator, enterprise, AI-agent, discovery-paths and threat-model pages
+  and the reference page follow it. The doc-conformance check now fails if either value
+  is named in the guides.
+
 **Edge discovery headers: `X-Content-Rules` and `X-FORA-Exchange` (HTTP convention
 specified; no message change).** When a publisher's edge refuses an unlicensed AI agent
 with 403, it answers with two discovery headers, and they are now part of the protocol.
diff --git a/scripts/check-doc-conformance.sh b/scripts/check-doc-conformance.sh
index 8191a4d9..6856c1d2 100755
--- a/scripts/check-doc-conformance.sh
+++ b/scripts/check-doc-conformance.sh
@@ -218,6 +218,23 @@ if [ -n "$num_hits" ]; then
   status=1
 fi
 
+# --- 1d. Deprecated, never-sent values must not be named in the guides ------
+# OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and DENIAL_REASON_SCOPE_INSUFFICIENT
+# are deprecated and never sent: a scope shortfall is answered with no offers
+# and no absence reason, and an offer presented is honoured until it expires.
+# The guides once told an Exchange to send them and an agent how to react to
+# them. The proto must keep naming them (the numbers stay reserved), so this
+# check skips proto/fora and covers only the authored guides. The reference
+# tables render both values from the descriptor, marked deprecated, without the
+# directive source ever naming them, so the ban does not reach the reference.
+deprecated_roots=(website/src/content docs)
+dep_hits=$(grep -rEn -- 'SCOPE_INSUFFICIENT' "${deprecated_roots[@]}" 2>/dev/null | grep -Ev "$exclude_re" || true)
+if [ -n "$dep_hits" ]; then
+  echo "::error::deprecated, never-sent reason named in the guides — describe the existence-hiding rule (no offers, no absence reason) instead:"
+  echo "$dep_hits"
+  status=1
+fi
+
 # --- 2. Positive facts: required identifiers MUST be documented -------------
 # A denylist is necessary but not sufficient: it cannot catch a value that was
 # silently dropped from a "closed enum" table or a registry that drifted. These
diff --git a/website/src/content/docs/getting-started/enterprise.mdx b/website/src/content/docs/getting-started/enterprise.mdx
index b8310364..3a38dece 100644
--- a/website/src/content/docs/getting-started/enterprise.mdx
+++ b/website/src/content/docs/getting-started/enterprise.mdx
@@ -58,7 +58,7 @@ Even at $0, the transaction creates an evidence chain. For regulated industries
 
 ## Scope-Based Catalog Filtering
 
-Enterprise IAM maps user roles to FORA scopes. The Exchange filters its catalog by those scopes. Resources outside the requester's scopes are denied with a diagnostic reason — no silent omission inside the enterprise.
+Enterprise IAM maps user roles to FORA scopes. The Exchange filters its catalog by those scopes. A resource outside the requester's scopes comes back with no offers and no absence reason, so the requester never learns it exists. This is the same rule a public Exchange follows (see [Existence hiding](/protocol/authentication/#existence-hiding)).
 
 ### How It Works
 
@@ -77,13 +77,13 @@ Her AI agent requests 5 internal resources:
 
 | # | URI | Required Scope | Jane's Scopes | Result |
 |---|-----|---------------|---------------|--------|
-| 1 | `internal://crm/account/ACME-001` | `crm:account:read` | `tax:customer:read`, `legal:read` | **Denied** |
+| 1 | `internal://crm/account/ACME-001` | `crm:account:read` | `tax:customer:read`, `legal:read` | **No offers, no reason** |
 | 2 | `internal://tax/customer/ACME-001` | `tax:customer:read` | `tax:customer:read`, `legal:read` | **Offer returned** |
 | 3 | `internal://legal/contract/ACME-001` | `legal:read` | `tax:customer:read`, `legal:read` | **Offer returned** |
-| 4 | `internal://hr/employee/jane` | `hr:read` | `tax:customer:read`, `legal:read` | **Denied** |
-| 5 | `internal://reports/financial/q4` | `reports:financial:read` | `tax:customer:read`, `legal:read` | **Denied** |
+| 4 | `internal://hr/employee/jane` | `hr:read` | `tax:customer:read`, `legal:read` | **No offers, no reason** |
+| 5 | `internal://reports/financial/q4` | `reports:financial:read` | `tax:customer:read`, `legal:read` | **No offers, no reason** |
 
-The 3 denied URIs come back with `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` — the agent knows *why* access was denied, not just that it failed. An Exchange returns this wherever access is subscription- or scope-gated (enterprise RBAC and public marketplace subscriptions alike) and the resource's existence isn't secret, so the agent learns a subscription/scope would unlock it. Where existence itself must stay hidden, the Exchange omits the resource silently instead.
+The 3 URIs outside Jane's scopes each come back as an `OfferGroup` with no offers and no `absence_reason`, the same answer the Exchange gives for a URI it has nothing for. Her agent cannot tell that these resources exist, so the HR record and the financial report stay hidden from someone not entitled to them. When Jane needs one of them, her access is granted in the IAM system, which then mints a token with the broader scopes.
 
 ## Token Minting Flow
 
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 354f6422..362cfcc7 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -180,7 +180,6 @@ When a request is denied, the Exchange returns a specific `DenialReason` so your
 |---|---|---|
 | `DENIAL_REASON_QUOTA_EXCEEDED` | Subscription access count exhausted for this period | Wait for quota reset or upgrade subscription |
 | `DENIAL_REASON_DELEGATION_INVALID` | Delegation missing, unverifiable (broken chain linkage or holder-binding mismatch), expired, or it widens scope beyond its parent | Obtain a fresh delegation from the principal |
-| `DENIAL_REASON_SCOPE_INSUFFICIENT` | Your scopes do not cover this resource | Request broader scopes or a different resource |
 | `DENIAL_REASON_INSUFFICIENT_BALANCE` | Requester's balance too low for this transaction | Add funds or reduce request scope |
 | `DENIAL_REASON_SIGNATURE_INVALID` | Ed25519 signature verification failed | Check your signing key configuration |
 
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index a75ebf8d..2e63e77a 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -172,10 +172,9 @@ When the request carries more than one RFC 9421 HTTP Message Signature, it has p
 
 After verifying identity and delegation, filter your catalog by the requester's declared scopes. Only resources matching the scopes are returned in the `DiscoverResources` response.
 
-For resources that exist but fall outside the requester's scopes:
+For a resource that exists but falls outside the requester's scopes, answer exactly as for a resource you have nothing to offer for: an `OfferGroup` with no offers and `absence_reason` unset. Do not reveal that the resource exists, and do not send a reason that tells the two cases apart. This applies to enterprise RBAC and public marketplace subscriptions alike (see [Existence hiding](/protocol/authentication/#existence-hiding)).
 
-- **Existence is sensitive:** Silently omit the resource. Do not reveal it exists.
-- **Subscription/scope-gated (the usual case):** Return `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` in the `OfferGroup.absence_reason` field so the requester gets an actionable diagnostic — the resource exists but their scopes/subscription don't cover it. Applies to enterprise RBAC and public marketplace subscriptions alike.
+An offer you presented stays purchasable until it expires, so a purchase is never refused because the requester's scopes do not cover the resource.
 
 ### Subscription Quota Signaling
 
@@ -183,13 +182,12 @@ When the requester holds a subscription (identifiable via the requester's `deleg
 
 ### New Denial Reasons to Implement
 
-FORA defines identity- and entitlement-related denial reasons your Exchange MUST return when appropriate. The delegation/scope reasons:
+FORA defines identity- and entitlement-related denial reasons your Exchange MUST return when appropriate. The delegation reasons:
 
 | Denial Reason | When to Return |
 |---|---|
 | `DENIAL_REASON_QUOTA_EXCEEDED` | Subscription access count exhausted for the current `quota_period` |
 | `DENIAL_REASON_DELEGATION_INVALID` | Delegation token missing, unverifiable (broken chain linkage or holder-binding mismatch), expired (`expires_at` in the past), or it widens scope beyond its parent |
-| `DENIAL_REASON_SCOPE_INSUFFICIENT` | Requester's scopes do not cover the requested resource (transaction-time denial) |
 
 And the entitlement/subscription family, for subscription-gated offers:
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 982847fb..9f75620e 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -248,7 +248,7 @@ Scopes are the mechanism by which the Exchange decides what resources to show a
 
 1. Agent sends `ResourceQuery` with `Requester.scopes` (and optionally a `Delegation` that also carries scopes)
 2. Exchange filters its catalog — only resources matching the declared scopes are returned
-3. Resources outside the scopes are **not returned**. The requester never learns they exist.
+3. Resources outside the scopes are **not returned**. The requester never learns they exist (see [Existence hiding](#existence-hiding)).
 
 ### Scope Format
 
@@ -284,14 +284,14 @@ Matching is **segment-wise** (`:`-separated). A granted scope **G** covers a req
 
 **Enterprise scopes:** Specific `{domain}:{permission}` scopes grant access to restricted resources. The Exchange enforces RBAC by filtering the catalog to matching resources.
 
-### Disclosure Policy
+### Existence hiding
 
-When a resource exists but the requester's scopes are insufficient, the Exchange decides how to respond based on its disclosure policy:
+A requester never learns about a resource outside its scopes. This is a rule of the protocol, not an Exchange's policy choice, and it is stated on `Requester.scopes`:
 
-- **Hide existence:** Silent omission. The resource is simply not returned — no hint that it exists. Appropriate when the resource's existence is itself sensitive.
-- **Reveal it's gated:** Returns `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` in the `OfferGroup.absence_reason` field, telling the requester the resource exists but their scopes/subscription don't cover it. Standard wherever access is subscription- or scope-gated — enterprise RBAC and public marketplace subscriptions alike.
+- **At discovery:** when the requester's scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason (an `OfferGroup` with empty `offers` and `absence_reason` unset), exactly as for any resource with nothing to offer. A Broker relaying that answer adds no reason of its own.
+- **At purchase:** an offer the Exchange presented is honoured until it expires, so a purchase is never refused for scope.
 
-This distinction prevents information leakage on public Exchanges while allowing enterprise environments to provide actionable diagnostics.
+No `OfferAbsenceReason` or `DenialReason` value reports a scope shortfall. The two values that once did are deprecated and never sent, and a receiver treats them as unknown.
 
 ## Multi-hop forwarding
 
@@ -541,7 +541,7 @@ An internal agent at a law firm carries a delegation JWT issued by the firm's IA
 }
 ```
 
-The internal Exchange verifies the delegation JWT against `iam.kirkland.com`'s published key. Because the resource's existence isn't secret here, if the agent requests one outside its scopes the Exchange returns `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` rather than silently omitting it.
+The internal Exchange verifies the delegation JWT against `iam.kirkland.com`'s published key. If the agent requests a resource outside its scopes, that URI's group comes back with no offers and no absence reason, the same answer as for a resource the Exchange has nothing for (see [Existence hiding](#existence-hiding)).
 
 ### Delegated Sub-Agent (cnf-chained delegation)
 
diff --git a/website/src/content/docs/protocol/discovery-paths.mdx b/website/src/content/docs/protocol/discovery-paths.mdx
index 7ffc7b51..972becc4 100644
--- a/website/src/content/docs/protocol/discovery-paths.mdx
+++ b/website/src/content/docs/protocol/discovery-paths.mdx
@@ -300,6 +300,8 @@ When an `OfferGroup` has no offers, the `absence_reason` field explains why. Thi
 
 ::proto-enum{name=OfferAbsenceReason}
 
+No reason reports that the requester's scopes do not cover a resource. Such a resource comes back with no offers and `absence_reason` unset, exactly like a resource with nothing to offer, so the requester never learns it exists (see [Existence hiding](/protocol/authentication/#existence-hiding)).
+
 `RESTRICTION_FILTERED` reports an optional **convenience pre-filter** matched to the restriction attributes the requester volunteered (function / geography / user-type); the filtered axes are listed in `OfferGroup.restriction_filters` using the same `RestrictionKind` vocabulary the terms carry — not an enforcement verdict: restrictions ride on each offer's own term and the agent chooses among the offers (see [Licensing terms](/protocol/licensing-terms/)).
 
 ### RateLimitInfo (v1.0)
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 687da975..dd1cbaba 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,29 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
+`DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
+Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
+a requester never learns about a resource outside its scopes. `Requester.scopes` now
+states the existence-hiding rule once, and the related comments point at it.
+
+- At discovery, when the requester's scopes leave no presentable offer for a resource,
+  the Exchange answers with no offers and no absence reason, exactly as for any resource
+  with nothing to offer. A Broker relaying that answer adds no reason of its own.
+  `OfferGroup.absence_reason` is no longer described as present whenever `offers` is
+  empty.
+- At purchase, an offer the Exchange presented is honoured until it expires, so a scope
+  refusal cannot arise.
+- Both values are marked `[deprecated = true]`. Their numbers are retained, because
+  removing them would break the v1 wire contract, and must not be reused. A receiver
+  treats either value as unknown. The SDK readers still decode them, and the generated
+  models still accept them.
+- The guides no longer tell an Exchange to send either value, or an agent how to react
+  to one: the authentication page's disclosure-policy section became "Existence hiding",
+  and the Exchange-operator, enterprise, AI-agent, discovery-paths and threat-model pages
+  and the reference page follow it. The doc-conformance check now fails if either value
+  is named in the guides.
+
 **Edge discovery headers: `X-Content-Rules` and `X-FORA-Exchange` (HTTP convention
 specified; no message change).** When a publisher's edge refuses an unlicensed AI agent
 with 403, it answers with two discovery headers, and they are now part of the protocol.
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 7506b618..64dea2b1 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -80,6 +80,8 @@ Rate limit status modeled after IETF RateLimit header fields.
 
 Identity and entitlements only — who is asking and what they're entitled to. What they're asking for (`uris`) and the limits they'll accept (`acceptable_restrictions`) live on the ask (`ResourceQuery` / `DiscoveryRequest`), not here. Used in `ResourceQuery` and `DiscoveryRequest`.
 
+`scopes` hides existence: a requester never learns about a resource outside its scopes. When the scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason, exactly as for any resource with nothing to offer, and an offer it presented is honoured until it expires. See [Existence hiding](/protocol/authentication/#existence-hiding).
+
 ::proto-message{name=Requester}
 
 ### Delegation
@@ -681,6 +683,8 @@ When an `Obligation` activates.
 
 ### DenialReason
 
+Why a purchase was refused. No value refuses a purchase for scope: an offer the Exchange presented is honoured until it expires. The value the table marks deprecated is never sent, and a receiver treats it as unknown.
+
 ::proto-enum{name=DenialReason numbers}
 
 ### DisputeReason
@@ -707,7 +711,7 @@ How the citation is presented to the user.
 
 ### OfferAbsenceReason
 
-Why no offers are available for a requested URI.
+Why no offers are available for a requested URI. No value reports a scope shortfall: a resource outside the requester's scopes comes back with no offers and no absence reason. The value the table marks deprecated is never sent, and a receiver treats it as unknown.
 
 ::proto-enum{name=OfferAbsenceReason numbers}
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 5b6cf834..ab01e6a1 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -178,8 +178,8 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 **Countermeasure**: Black box problem. Legal/contractual enforcement only.
 
 ### T31: Absence-reason existence oracle
-**Attack**: An unauthorized caller probes for a resource and reads the `absence_reason`. Authorization-flavored values (`SCOPE_INSUFFICIENT`, `NOT_AUTHORIZED`, `NOT_IN_CATALOG`, `CONTENT_BLOCKED`) distinguish "no such resource" from "it exists but you may not have it" — confirming existence and the reason for refusal. Broker `Resolve` (`DiscoveryResponse.absence_reason`) exposes the same oracle at the broker that `DiscoverResources` (`OfferGroup.absence_reason`) does at the Exchange, so hiding it on one surface but not the other still leaks.
-**Countermeasure (protocol)**: The reason is a hint, not a guarantee. Where existence itself must stay hidden, the Exchange/Broker **MAY omit** `absence_reason` (leave it unset) rather than reveal an authorization-flavored value — the same permissive hedge documented on `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT`, and it applies equally to `OfferGroup.absence_reason` and `DiscoveryResponse.absence_reason`. `ErrorDetail.message`/`metadata` are held to the same rule (T-LIC-adjacent leakage): servers SHOULD NOT restore the withheld detail there as free text.
+**Attack**: An unauthorized caller probes for a resource and reads the `absence_reason`. Authorization-flavored values (`NOT_AUTHORIZED`, `NOT_IN_CATALOG`, `CONTENT_BLOCKED`) distinguish "no such resource" from "it exists but you may not have it" — confirming existence and the reason for refusal. Broker `Resolve` (`DiscoveryResponse.absence_reason`) exposes the same oracle at the broker that `DiscoverResources` (`OfferGroup.absence_reason`) does at the Exchange, so hiding it on one surface but not the other still leaks.
+**Countermeasure (protocol)**: A scope shortfall is never disclosed. When the requester's scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason, exactly as for any resource with nothing to offer, and a Broker adds no reason of its own (the existence-hiding rule on `Requester.scopes`). No absence or denial reason reports a scope shortfall. For the other reasons, the reason is a hint, not a guarantee: where existence itself must stay hidden, the Exchange/Broker **MAY omit** `absence_reason` (leave it unset) rather than reveal an authorization-flavored value, and this applies equally to `OfferGroup.absence_reason` and `DiscoveryResponse.absence_reason`. `ErrorDetail.message`/`metadata` are held to the same rule (T-LIC-adjacent leakage): servers SHOULD NOT restore the withheld detail there as free text.
 
 ## Prevention Taxonomy
 

From 481fc4296c8a3bbaaa4a4c81e6cc0ac0c590f22d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:29:39 -0400
Subject: [PATCH 049/164] Leave delivery URL verification to the edge in the
 Python SDK

execute and BrokerClient.execute verified every retrieval URL in the
answer, and fetch verified a Delivery or a URL given with exchange=,
before handing the URL out. Verifying the URL is the delivery edge's
job: the edge checks the URL signature and, where it can, the agent
binding against the proof of possession fetch presents. The client
check ran after the Exchange had charged, so a refusal lost the whole
purchase answer, and it could not read a CloudFront signed URL, so a
CloudFront-delivered purchase always failed.

The check is gone. execute returns the generated TransactionResponse
and BrokerClient.execute the BrokerTransactionResponse again, on both
faces, and fetch takes the signed URL alone. ClientConfig loses
delivery_keys and delivery_verification, the default resolver the
client built for them, and the RawBody flag and purchase items the
check read. Delivery, DeliveryKeyResolver, ExecuteResult and
BrokerExecuteResult are no longer exported, Content loses binding, and
the strict decoder no longer walks a subclass to find its schema.

fetch still presents the agent's proof of possession, and an edge
refusal still comes back with its retrieval_auth_failure reason. The
README example fetches the item's retrieval_endpoint. The new tests
show execute and the Broker purchase return an unverifiable Ed25519 URL
and a CloudFront URL unchanged, reading no key directory, and fetch
dials either as given with the proof attached.
---
 sdk/python/README.md                          |  37 +-
 sdk/python/fora_sdk/__init__.py               |   8 -
 sdk/python/fora_sdk/client/__init__.py        |  79 +---
 sdk/python/fora_sdk/client/_strict.py         |  17 +-
 sdk/python/fora_sdk/client/_verbs.py          | 145 +------
 sdk/python/fora_sdk/client/content.py         |   6 -
 sdk/python/fora_sdk/client/delivery.py        | 229 ----------
 sdk/python/fora_sdk/sync/__init__.py          |  23 +-
 .../tests/test_delivery_left_to_edge.py       | 113 +++++
 .../tests/test_delivery_verification.py       | 390 ------------------
 sdk/python/tests/test_raw_mode.py             |   7 +-
 11 files changed, 186 insertions(+), 868 deletions(-)
 delete mode 100644 sdk/python/fora_sdk/client/delivery.py
 create mode 100644 sdk/python/tests/test_delivery_left_to_edge.py
 delete mode 100644 sdk/python/tests/test_delivery_verification.py

diff --git a/sdk/python/README.md b/sdk/python/README.md
index 697c5d5f..d6019b1b 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -47,7 +47,6 @@ from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 from fora_sdk.core import Mode, StaticOfferKeyResolver, Verifier
 from fora_sdk.resolvers import (
     CachedOfferKeyResolver,
-    WBAKeyResolver,
     WellKnownEndpointResolver,
     create_wba_offer_directory_fetch,
     guarded_client,
@@ -122,10 +121,6 @@ def buy_and_fetch(*, exchange: str, uri: str, seed: bytes) -> bytes:
         requester=AGENT,
         verifier=verifier,
         endpoint_resolver=endpoints,
-        # The key each delivery URL is checked against, resolved by its kid from the
-        # issuing Exchange's Web Bot Auth directory. The client builds this same resolver
-        # by default; it is passed here only to carry the sandbox scheme.
-        delivery_keys=WBAKeyResolver(scheme=SCHEME),
     )
 
     with Client(config) as client:
@@ -138,15 +133,13 @@ def buy_and_fetch(*, exchange: str, uri: str, seed: bytes) -> bytes:
             raise RuntimeError(f"no verifiable offer for {uri}: {refused}")
 
         # 5. Buy it. execute() accepts only a verified offer, so an unverified one
-        #    cannot be paid for by mistake, and it verifies every delivery URL in the
-        #    answer: signed by the issuing Exchange, bound to this agent, not expired.
-        bought = client.execute(offers[0])
-        item = bought.items[0]
+        #    cannot be paid for by mistake.
+        item = client.execute(offers[0]).items[0]
 
         # 6. Fetch. The delivery URL is bound to the agent's thumbprint and the client
         #    presents the matching proof of possession, so a copied link fetches nothing.
-        #    Passing the verified delivery checks it again before anything is sent.
-        content = client.fetch(bought.deliveries[0])
+        #    The delivery edge checks the URL and the proof.
+        content = client.fetch(item.retrieval_endpoint)
 
         # 7. Report what was used. It goes to the Exchange the offer named, resolved the
         #    same way as step 2 — never to whatever base_url happened to be configured.
@@ -350,8 +343,6 @@ The rest are bounds and seams with working defaults:
 | `request_id` | `None`, meaning **no header is sent** | mints the `X-Request-ID` correlation value |
 | `validation` | `"strict"` | whether an outbound message is checked against its generated model before it is sent. Orthogonal to offer verification, which is about what comes back |
 | `registration_requirements` | a reader built on the guarded client, once per client | where `register` reads an Exchange's terms revision and registration schema. It holds no document cache on purpose: the contract requires the terms digest to come from a freshly fetched manifest |
-| `delivery_keys` | a `WBAKeyResolver` built on the guarded client, once per client | where `execute` and `fetch` find the key an Exchange signs delivery URLs with: the URL's `kid`, resolved from that Exchange's Web Bot Auth directory |
-| `delivery_verification` | `Mode.STRICT` | whether a delivery URL is verified (signature, agent binding, expiry) before it is handed back or dialled. `Mode.OFF` is for a deployment whose URLs use another signing scheme |
 | `strict` | `False` | refuse an answer carrying an unknown field, or breaking a field-level or cross-field rule, and an error envelope or `ErrorDetail` the contract does not define. See [Testing a FORA service](#testing-a-fora-service) |
 | `before_sign` | `None` | a hook that receives each request just before it is signed. See [Testing a FORA service](#testing-a-fora-service) |
 
@@ -372,8 +363,8 @@ Pydantic models.
 | Verb | Send | Get back |
 |---|---|---|
 | `discover(query)` | `exchange`, `uris`, optional filters | `DiscoveryResult`: `groups` (one per requested URI, each with `uri`, `result.verified`, `result.rejected`, `absence_reason`), plus `exchange` and `rate_limit`. `verified()` and `rejected()` flatten across groups |
-| `execute(offer, *, idempotency_key=None)` | a `VerifiedOffer`, or a sequence of them issued by one Exchange — nothing else is accepted | `ExecuteResult`, which is the `TransactionResponse` (`items`, each with `transaction_id`, `billing_id`, `retrieval_endpoint`, `expires_at`, `cost`) plus `deliveries`: the verified `Delivery` of each item's URL |
-| `fetch(signed_url, *, exchange=None)` | a `Delivery` from `execute`, or a `retrieval_endpoint` and the Exchange that issued it | `Content`: `url`, `mime_type`, `body`, and `binding`, the `Delivery` verified before the fetch |
+| `execute(offer, *, idempotency_key=None)` | a `VerifiedOffer`, or a sequence of them issued by one Exchange — nothing else is accepted | `TransactionResponse`: `items`, each with `transaction_id`, `billing_id`, `retrieval_endpoint`, `expires_at`, `cost` |
+| `fetch(signed_url)` | one `retrieval_endpoint` | `Content`: `url`, `mime_type`, `body` |
 | `report_usage(report, *, idempotency_key=None)` | `exchange`, `transaction_id`, `billing_id`, `usage` | `UsageReportResponse`: `report_id`, which a later dispute must cite |
 | `dispute(request, *, idempotency_key=None)` | `exchange`, `transaction_id`, `report_id`, `reason` | `DisputeResponse` |
 | `register(request)` / `get_account_status(request)` | account setup with an Exchange | `RegisterResponse` / `GetAccountStatusResponse` |
@@ -390,13 +381,12 @@ you already have — from your own crawl frontier, a publisher's catalogue, or a
 it knows and relays back what they offered, so a caller with no idea which Exchange sells
 a resource starts there rather than with `discover`.
 
-**Every delivery URL is verified.** `execute` checks each `retrieval_endpoint` before it
-returns: the signature against the key the issuing Exchange publishes in its Web Bot Auth
-directory (named by the URL's `kid`), the binding to this agent's key (`agent_id`, and the
-answer's `agent_identity_hash`), and the expiry. A URL that fails is refused as
-`MALFORMED`, with a `retrieval_auth_failure` detail in the edge's own vocabulary and the
-item named in the message. `fetch` repeats the check before it dials when it is given a
-`Delivery`, or a URL with `exchange=`; a bare URL is fetched as given.
+**The delivery edge checks the delivery URL.** `execute` hands each `retrieval_endpoint`
+back exactly as the Exchange issued it, and `fetch` dials it as given with the agent's
+proof of possession attached. The edge verifies the URL signature and, where it can, the
+binding to this agent's key; an edge that cannot check the binding (CloudFront with its
+RSA key pair) treats the URL as a bearer token. An edge refusal comes back from `fetch`
+as a `CallError` carrying a `retrieval_auth_failure` detail with the edge's reason.
 
 Failures arrive as one `CallError` carrying a `CallErrorKind` — `NOT_SENT`, `REFUSED`,
 `UNREACHABLE`, `MALFORMED`, `TOO_LARGE`, `NOT_SIGNABLE`, `UNKNOWN` — plus the peer's own
@@ -413,8 +403,7 @@ operator verbs: `set_tenant_fee_rate` and `set_reporting_policy` (`fora.admin.v1
 `ClientConfig`, because each addresses a different endpoint, often with a different key.
 
 `BrokerClient.execute(offers, *, idempotency_key=None)` buys offers from any number of
-Exchanges in one call and returns a `BrokerExecuteResult` — the `BrokerTransactionResponse`
-plus `deliveries`, each URL verified against its own Exchange's key: `items` in request order,
+Exchanges in one call and returns the `BrokerTransactionResponse`: `items` in request order,
 `exchanges` (one `ExchangeOutcome` per Exchange contacted) and `totals` (one `Cost` per
 currency, never summed across currencies). The Broker sends one sub-request per Exchange,
 signed with its own key, and your acceptances travel in each body, so every Exchange still
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 285fb8c5..414b1686 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -29,17 +29,13 @@
     AdminClient,
     BeforeSign,
     BrokerClient,
-    BrokerExecuteResult,
     CallError,
     CallErrorKind,
     CatalogClient,
     Client,
     ClientConfig,
     Content,
-    Delivery,
-    DeliveryKeyResolver,
     EndpointResolver,
-    ExecuteResult,
     RawBody,
     Validation,
 )
@@ -198,15 +194,11 @@
     "AdminClient",
     "BeforeSign",
     "BrokerClient",
-    "BrokerExecuteResult",
     "CallError",
     "CallErrorKind",
     "CatalogClient",
     "Client",
     "ClientConfig",
-    "Delivery",
-    "DeliveryKeyResolver",
-    "ExecuteResult",
     "RawBody",
     "ConnectProtocolVersion",
     "ConnectProtocolVersionHeader",
diff --git a/sdk/python/fora_sdk/client/__init__.py b/sdk/python/fora_sdk/client/__init__.py
index 2e8f1308..0887ddcb 100644
--- a/sdk/python/fora_sdk/client/__init__.py
+++ b/sdk/python/fora_sdk/client/__init__.py
@@ -25,12 +25,10 @@
 
 import asyncio
 import time
-from dataclasses import replace
 from typing import TYPE_CHECKING
 
 import httpx
 
-from fora_sdk.core import Mode
 from fora_sdk.resolvers import _ssrf, guarded_async_client, guarded_client
 from fora_sdk.strict import StrictViolationError, check_strict
 from fora_sdk.window import clock_window
@@ -64,14 +62,6 @@
     redact_url,
     transport_failure,
 )
-from .delivery import (
-    BrokerExecuteResult,
-    Delivery,
-    DeliveryKeyResolver,
-    ExecuteResult,
-    Expected,
-    verify_delivery,
-)
 from .errors import NOT_CANONICAL_WIRE_NAMING, CallError, CallErrorKind
 from .route import EndpointResolver, RegistrationRequirementsReader
 
@@ -79,6 +69,7 @@
     from collections.abc import Sequence
 
     from wire.models import (
+        BrokerTransactionResponse,
         DisputeResponse,
         DomainVerificationChallenge,
         DomainVerificationResult,
@@ -89,6 +80,7 @@
         RemoveResourcesResponse,
         SetReportingPolicyResponse,
         SetTenantFeeRateResponse,
+        TransactionResponse,
         UsageReportResponse,
     )
 
@@ -106,17 +98,13 @@
     "AdminClient",
     "BeforeSign",
     "BrokerClient",
-    "BrokerExecuteResult",
     "CallError",
     "CallErrorKind",
     "CatalogClient",
     "Client",
     "ClientConfig",
     "Content",
-    "Delivery",
-    "DeliveryKeyResolver",
     "EndpointResolver",
-    "ExecuteResult",
     "RawBody",
     "RegistrationRequirementsReader",
     "StrictViolationError",
@@ -164,8 +152,7 @@ async def aclose(self) -> None:
         """Close the transports this client built. An injected one is left alone."""
         # Independent of the RPC legs above: this client is built here whenever the
         # caller injected no reader, whether or not it injected an RPC transport, so it
-        # is closed on its own terms rather than behind that ownership question. The
-        # delivery-key resolver's transport is the same case.
+        # is closed on its own terms rather than behind that ownership question.
         self._owned.close()
         if not self._owns:
             return
@@ -265,19 +252,17 @@ async def execute(
         offer: VerifiedOffer | Sequence[VerifiedOffer] | RawBody,
         *,
         idempotency_key: str | None = None,
-    ) -> ExecuteResult:
+    ) -> TransactionResponse:
         """Commit to a VERIFIED offer — or several issued by ONE Exchange, in one request —
         and return the transaction response. Offers from several Exchanges are refused
         locally; buy those through :meth:`BrokerClient.execute`.
 
-        Every retrieval URL in the answer is verified before it is handed back — its
-        signature against the issuing Exchange's published key, its binding to this
-        agent, its expiry — and the verified binding of each is on
-        :attr:`ExecuteResult.deliveries`. A URL that does not verify refuses the answer
-        (``ClientConfig.delivery_verification`` turns this off)."""
+        The retrieval URLs in the answer are handed back as the Exchange issued them.
+        Checking one is the delivery edge's job: :meth:`fetch` presents the agent's proof
+        of possession, and the edge verifies the URL's signature and binding."""
         plan = _verbs.plan_execute(self._config, offer, idempotency_key)
         status, body = await self._send(plan)
-        return await asyncio.to_thread(_verbs.finish_execute, self._config, plan, status, body)
+        return _verbs.finish_execute(plan, status, body)
 
     async def report_usage(
         self, report: RequestMessage, *, idempotency_key: str | None = None
@@ -324,7 +309,7 @@ async def get_account_status(
         status, body = await self._send(plan)
         return _verbs.finish_get_account_status(plan, status, body)
 
-    async def fetch(self, signed_url: str | Delivery, *, exchange: str | None = None) -> Content:
+    async def fetch(self, signed_url: str) -> Content:
         """Retrieve the content a signed delivery URL names, presenting proof of
         possession of the agent key that URL is bound to.
 
@@ -333,13 +318,11 @@ async def fetch(self, signed_url: str | Delivery, *, exchange: str | None = None
         separate, higher tier. It takes no idempotency key: a fetch is a GET against an
         already-issued URL, and nothing on this path mutates state.
 
-        Given a :class:`Delivery` from ``execute``, or a URL and the ``exchange`` that
-        issued it, the URL is verified before anything is sent — its signature against
-        that Exchange's published key, its binding to this agent, its expiry — and the
-        verified binding is on ``Content.binding``. A bare URL with no Exchange named is
-        fetched as given, and the edge is the only check.
+        The URL is taken as given. The delivery edge verifies it — its signature, and its
+        binding to this agent against the proof presented here — and a refusal comes back
+        as a ``CallError`` carrying the edge's ``retrieval_auth_failure`` reason.
         """
-        url, binding = await asyncio.to_thread(_fetch_target, self._config, signed_url, exchange)
+        url = signed_url
         headers, timeout, max_bytes = _fetch_inputs(self._config, url)
         op = "fetch content"
         self._refuse_if_closed(op)
@@ -387,7 +370,7 @@ async def fetch(self, signed_url: str | Delivery, *, exchange: str | None = None
                 read = bounded_chunks(op, max_bytes, response.status_code)
                 async for chunk in response.aiter_bytes():
                     read.add(chunk)
-                return replace(read_content(url, response, read.body()), binding=binding)
+                return read_content(url, response, read.body())
         except httpx.HTTPError as exc:
             raise transport_failure(exc) from exc
         except _ssrf.SsrfError as exc:
@@ -428,7 +411,7 @@ async def resolve(self, request: RequestMessage) -> DiscoveryResult:
 
     async def execute(
         self, offers: Sequence[VerifiedOffer] | RawBody, *, idempotency_key: str | None = None
-    ) -> BrokerExecuteResult:
+    ) -> BrokerTransactionResponse:
         """Buy VERIFIED offers through the Broker in one call, however many Exchanges issued
         them (BrokerService.ExecuteTransaction).
 
@@ -440,15 +423,12 @@ async def execute(
         Needs ``requester`` and a signer whose ``signature_agent`` directory host is
         ``requester.domain`` — a Broker refuses any other pairing, so this client does first.
 
-        Every retrieval URL in the answer is verified against the key of the Exchange that
-        issued that item's offer, as :meth:`Client.execute` does, and the verified
-        bindings are on :attr:`BrokerExecuteResult.deliveries`.
+        The retrieval URLs in the answer are handed back as each Exchange issued them, as
+        :meth:`Client.execute` does.
         """
         plan = _verbs.plan_broker_execute(self._config, offers, idempotency_key)
         status, body = await self._send(plan)
-        return await asyncio.to_thread(
-            _verbs.finish_broker_execute, self._config, plan, status, body
-        )
+        return _verbs.finish_broker_execute(plan, status, body)
 
 
 class CatalogClient(_Face):
@@ -541,29 +521,6 @@ async def confirm_domain_verification(
         return _admin.finish_confirm_domain_verification(plan, status, body)
 
 
-def _fetch_target(
-    config: ClientConfig, target: str | Delivery, exchange: str | None
-) -> tuple[str, Delivery | None]:
-    """The URL a fetch dials, and the binding verified for it when an Exchange is named.
-
-    Shared by both faces. It resolves a key, which may go to the network, so the async
-    face runs it in a thread. A refusal raises before the proof is minted, so nothing
-    leaves the process for a URL this client already knows the edge would refuse.
-    """
-    url = target.url if isinstance(target, Delivery) else target
-    named = target.exchange if isinstance(target, Delivery) else exchange
-    if not named or config.delivery_verification is Mode.OFF:
-        return url, None
-    if config.signer is None or config.delivery_keys is None:
-        # The signer is refused with its own reason by _fetch_inputs; checked here too
-        # because the binding is to its key. The facades always fill in delivery_keys.
-        _fetch_inputs(config, url)
-        return url, None
-    stated = target.agent_id if isinstance(target, Delivery) else ""
-    expected = Expected(exchange=named, agent=config.signer.thumbprint, stated=stated)
-    return url, verify_delivery("fetch content", url, expected, config.delivery_keys)
-
-
 def _fetch_inputs(config: ClientConfig, signed_url: str) -> tuple[dict[str, str], float, int]:
     """The proof headers, what is LEFT of the deadline, and the body cap for one fetch.
 
diff --git a/sdk/python/fora_sdk/client/_strict.py b/sdk/python/fora_sdk/client/_strict.py
index 21707645..52dd4632 100644
--- a/sdk/python/fora_sdk/client/_strict.py
+++ b/sdk/python/fora_sdk/client/_strict.py
@@ -38,15 +38,12 @@ def _schema_name(model: type[BaseModel]) -> str:
     """The fully-qualified message name whose published schema decodes ``model``.
 
     The generated models are one flat module across ``fora.v1`` and ``fora.admin.v1``, so
-    the class name is matched against the schema names, walking up from a subclass such
-    as ``ExecuteResult`` to the generated model it extends. A class name two packages
-    share is refused rather than resolved by accident.
+    the class name is matched against the schema names. A class name two packages share is
+    refused rather than resolved by accident.
     """
-    names = schemas.names()
-    for cls in model.__mro__:
-        found = [n for n in names if n.rsplit(".", 1)[-1] == cls.__name__]
-        if len(found) == 1:
-            return found[0]
-        if found:
-            raise LookupError(f"several published schemas match {cls.__name__}: {found}")
+    found = [n for n in schemas.names() if n.rsplit(".", 1)[-1] == model.__name__]
+    if len(found) == 1:
+        return found[0]
+    if found:
+        raise LookupError(f"several published schemas match {model.__name__}: {found}")
     raise LookupError(f"no published schema for {model.__name__}")
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index e65e6437..ac5072ab 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -17,6 +17,7 @@
 
 from pydantic import BaseModel
 from wire.models import (
+    BrokerTransactionResponse,
     DiscoveryRequest,
     DiscoveryResponse,
     DisputeRequest,
@@ -36,6 +37,7 @@
     ResourceResponse,
     TransactionRequest,
     UsageReport,
+    TransactionResponse,
     UsageReportResponse,
 )
 
@@ -55,7 +57,6 @@
     ExchangeNotPermittedError,
     ManifestNotExchangeError,
     ManifestUnusableError,
-    WBAKeyResolver,
     WellKnownRequirementsReader,
     guarded_client,
 )
@@ -76,13 +77,6 @@
     validate_request,
 )
 from .._hostref import _redact_userinfo as redact_userinfo
-from .delivery import (
-    BrokerExecuteResult,
-    DeliveryKeyResolver,
-    ExecuteResult,
-    Expected,
-    verify_items,
-)
 from ..hosts import check_audience, host_of, is_bare_domain
 from .errors import CallError, CallErrorKind, malformed, not_sent
 from .route import (
@@ -165,15 +159,6 @@ class ClientConfig:
     #: ``status`` kept and no detail. Off by default, because the models accept fields a
     #: newer minor version may add.
     strict: bool = False
-    #: Resolves the key an Exchange signs delivery URLs with: ``resolve(kid, exchange)``,
-    #: against that Exchange's Web Bot Auth key directory. Defaults to the SSRF-guarded
-    #: :class:`~fora_sdk.resolvers.wba.WBAKeyResolver`, built once with the client.
-    delivery_keys: DeliveryKeyResolver | None = None
-    #: Whether ``execute`` and ``fetch`` verify a delivery URL — its signature against the
-    #: issuing Exchange's key, its binding to this agent, its expiry — before handing it
-    #: back or dialling it. ``Mode.OFF`` is the named opt-out, for a deployment whose URLs
-    #: are signed in a scheme other than the protocol's Ed25519 one.
-    delivery_verification: Mode = Mode.STRICT
     #: The freshness window stamped on a delivery-fetch proof.
     proof_window: Window | None = None
     max_rpc_read_bytes: int = DEFAULT_MAX_RPC_READ_BYTES
@@ -192,39 +177,33 @@ class _Owned:
     """The transports a client built for the defaults it filled in, and so must close."""
 
     requirements: httpx.Client | None = None
-    delivery: httpx.Client | None = None
 
     def close(self) -> None:
-        for http in (self.requirements, self.delivery):
-            if http is not None:
-                http.close()
+        if self.requirements is not None:
+            self.requirements.close()
 
 
 def _with_defaults(config: ClientConfig) -> tuple[ClientConfig, _Owned]:
-    """Fill in the default requirements reader and delivery-key resolver ONCE, and report
-    the transports that came with them.
+    """Fill in the default requirements reader ONCE, and report the transport that came
+    with it.
 
     Both client facades call this from their constructor, which is the tier Go resolves
     the same defaults at. Per CALL it would build an SSRF-guarded httpx client for every
-    registration and every purchase and close none of them; per CLIENT it is one pooled
-    transport each, with an owner that can close it.
+    registration and close none of them; per CLIENT it is one pooled transport, with an
+    owner that can close it.
 
     The caller's config is never mutated — a caller may hold it, reuse it across
-    clients, or read it back — so the filled-in defaults ride on a copy. The second
-    return is the transports this client OWNS: none for a seam the caller injected,
+    clients, or read it back — so the filled-in default rides on a copy. The second
+    return is the transport this client OWNS: none for a seam the caller injected,
     because then the transport inside it is theirs.
     """
     requirements: httpx.Client | None = None
-    delivery: httpx.Client | None = None
     if config.registration_requirements is None:
         requirements = guarded_client()
         config = replace(
             config, registration_requirements=WellKnownRequirementsReader(http=requirements)
         )
-    if config.delivery_keys is None:
-        delivery = guarded_client()
-        config = replace(config, delivery_keys=WBAKeyResolver(http=delivery))
-    return config, _Owned(requirements=requirements, delivery=delivery)
+    return config, _Owned(requirements=requirements)
 
 
 class _NullOfferKeyResolver:
@@ -258,12 +237,6 @@ class Plan:
     sent: dict[str, Any] = field(default_factory=dict)
     #: Whether the answer is decoded strictly (``ClientConfig.strict``).
     strict: bool = False
-    #: Whether the body is a caller's :class:`RawBody`. The answer is decoded as usual,
-    #: and nothing that ties it to a request the SDK built — delivery verification — runs.
-    raw: bool = False
-    #: ``(offer_id, exchange)`` of each item a purchase sent, in order: what a result
-    #: item's retrieval URL is verified against.
-    items: tuple[tuple[str, str], ...] = ()
 
 
 # ---------------------------------------------------------------------------
@@ -458,8 +431,7 @@ def plan_execute(
     _require_one_exchange(op, offers)
     sent = _build_transaction(cfg, op, offers, idempotency_key)
     validate_request(op, sent, TransactionRequest, cfg.validation)
-    plan = _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "ExecuteTransaction"), sent)
-    return replace(plan, items=_purchase_items(offers))
+    return _plan(cfg, _Route(op, cfg.base_url, EXCHANGE_SERVICE, "ExecuteTransaction"), sent)
 
 
 def plan_broker_execute(
@@ -494,38 +466,19 @@ def plan_broker_execute(
         _require_requester_is_signer(op, cfg.requester, cfg.signer.signature_agent)
     sent = _build_transaction(cfg, op, offers, idempotency_key)
     validate_request(op, sent, TransactionRequest, cfg.validation)
-    plan = _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "ExecuteTransaction"), sent)
-    return replace(plan, items=_purchase_items(offers))
+    return _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "ExecuteTransaction"), sent)
 
 
-def finish_broker_execute(
-    cfg: ClientConfig, plan: Plan, status: int, body: str
-) -> BrokerExecuteResult:
-    """Read the Broker's combined answer and verify every retrieval URL in it.
+def finish_broker_execute(plan: Plan, status: int, body: str) -> BrokerTransactionResponse:
+    """Read the Broker's combined answer.
 
     An Exchange that refused the Broker's whole sub-request is NOT a failure here: the call
     succeeds, and each affected item carries the refusal in ``refusal`` while the other
     Exchanges' items come back unchanged. Only the Broker's own refusals raise.
-
-    The one signed value in a result item is its retrieval URL, signed by the Exchange
-    that issued the item's offer — the Broker cannot forge or alter one, and this is
-    where that is checked. Each URL is verified against its own Exchange's key and the
-    agent_identity_hash that Exchange's outcome states.
     """
-    result: BrokerExecuteResult = decode(
-        plan.op, status, body, BrokerExecuteResult, strict=plan.strict
+    return decode(  # type: ignore[no-any-return]
+        plan.op, status, body, BrokerTransactionResponse, strict=plan.strict
     )
-    if _verifies_deliveries(cfg, plan):
-        outcomes = {o.exchange.lower(): o.agent_identity_hash or "" for o in result.exchanges or []}
-        items = list(result.items or [])
-        agent = _agent_thumbprint(cfg)
-
-        def expected_of(index: int, item: Any) -> Expected:
-            exchange = _issuing_exchange(plan, index, item, len(items))
-            return Expected(exchange, agent, outcomes.get(exchange.lower(), ""))
-
-        result._deliveries = verify_items(plan.op, items, expected_of, _delivery_keys(cfg))
-    return result
 
 
 def _offer_wire(offer: VerifiedOffer) -> dict[str, Any]:
@@ -678,68 +631,13 @@ def _require_requester_is_signer(op: str, requester: dict[str, Any], signature_a
         )
 
 
-def finish_execute(cfg: ClientConfig, plan: Plan, status: int, body: str) -> ExecuteResult:
-    """Read the Exchange's answer and verify every retrieval URL in it.
-
-    Each URL is verified against the key the Exchange that issued the offers publishes in
-    its Web Bot Auth directory, and must be bound to this agent and to the
-    agent_identity_hash the answer states. One that does not verify refuses the whole
-    answer, as malformed, with the reason on a synthesized ``retrieval_auth_failure``
-    detail and the item named in the message. The purchase itself happened; the
-    transaction id in the message is what a dispute or a support request names.
-    """
-    result: ExecuteResult = decode(plan.op, status, body, ExecuteResult, strict=plan.strict)
-    if _verifies_deliveries(cfg, plan):
-        items = list(result.items or [])
-        agent, stated = _agent_thumbprint(cfg), result.agent_identity_hash or ""
-
-        def expected_of(index: int, item: Any) -> Expected:
-            return Expected(_issuing_exchange(plan, index, item, len(items)), agent, stated)
-
-        result._deliveries = verify_items(plan.op, items, expected_of, _delivery_keys(cfg))
-    return result
-
-
-def _purchase_items(offers: list[VerifiedOffer]) -> tuple[tuple[str, str], ...]:
-    return tuple(
-        (_str_field(_offer_wire(o), "offer_id"), _str_field(_offer_wire(o), "exchange"))
-        for o in offers
+def finish_execute(plan: Plan, status: int, body: str) -> TransactionResponse:
+    """Read the Exchange's answer."""
+    return decode(  # type: ignore[no-any-return]
+        plan.op, status, body, TransactionResponse, strict=plan.strict
     )
 
 
-def _verifies_deliveries(cfg: ClientConfig, plan: Plan) -> bool:
-    return not plan.raw and cfg.delivery_verification is Mode.STRICT
-
-
-def _issuing_exchange(plan: Plan, index: int, item: Any, count: int) -> str:
-    """The Exchange that issued the offer a result item answers.
-
-    The answer carries one item per request item, in request order, so the index is the
-    match; an answer of another length is matched by offer_id instead. An item neither
-    places is attributed to the one Exchange a direct purchase went to, and to nobody on a
-    relayed one — which then fails verification rather than borrowing another key.
-    """
-    if count == len(plan.items):
-        return plan.items[index][1]
-    offer_id = getattr(item, "offer_id", "") or ""
-    for item_offer, exchange in plan.items:
-        if offer_id and item_offer == offer_id:
-            return exchange
-    exchanges = {exchange for _offer, exchange in plan.items}
-    return exchanges.pop() if len(exchanges) == 1 else ""
-
-
-def _agent_thumbprint(cfg: ClientConfig) -> str:
-    # A purchase that reached here was signed, so the signer is configured.
-    return cfg.signer.thumbprint if cfg.signer is not None else ""
-
-
-def _delivery_keys(cfg: ClientConfig) -> DeliveryKeyResolver:
-    # Both facades fill this in at construction; the fallback serves a caller driving
-    # the plan functions directly, at the cost of a transport per call.
-    return cfg.delivery_keys if cfg.delivery_keys is not None else WBAKeyResolver()
-
-
 # ---------------------------------------------------------------------------
 # reportUsage and dispute — the offer-derived leg
 # ---------------------------------------------------------------------------
@@ -1215,7 +1113,6 @@ def _plan(
         guarded=guarded,
         sent=sent.parsed() if isinstance(sent, RawBody) else sent,
         strict=cfg.strict,
-        raw=isinstance(sent, RawBody),
     )
 
 
diff --git a/sdk/python/fora_sdk/client/content.py b/sdk/python/fora_sdk/client/content.py
index fb2a619a..86c9a51f 100644
--- a/sdk/python/fora_sdk/client/content.py
+++ b/sdk/python/fora_sdk/client/content.py
@@ -30,8 +30,6 @@
     from fora_sdk.signing_transport import SigningTransport
     from fora_sdk.window import Window
 
-    from .delivery import Delivery
-
 #: Bounds one content fetch, in seconds. An agent is blocked on the call that triggered
 #: it, so a fetch that has not answered by now is more useful as a reported failure than
 #: as a hang.
@@ -109,10 +107,6 @@ class Content:
     mime_type: str
     #: The fetched bytes.
     body: bytes
-    #: The binding this client verified before fetching: the URL's signature against the
-    #: issuing Exchange's key, its agent binding and its expiry. ``None`` when the URL
-    #: was fetched as given — no Exchange was named, or verification is off.
-    binding: Delivery | None = None
 
 
 def proof_headers(
diff --git a/sdk/python/fora_sdk/client/delivery.py b/sdk/python/fora_sdk/client/delivery.py
deleted file mode 100644
index a87a4afb..00000000
--- a/sdk/python/fora_sdk/client/delivery.py
+++ /dev/null
@@ -1,229 +0,0 @@
-"""Delivery verification: check a signed retrieval URL before anything relies on it.
-
-A purchase answers with one signed retrieval URL per item. The Exchange signs it with
-Ed25519 over ``"GET\\n<canonical URL>"``; the URL names the signing key in ``kid``, may bind
-itself to the buying agent with ``agent_id`` (the RFC 7638 thumbprint of the agent's
-request-signing key), and expires at ``exp``. The delivery edge checks all three. This
-module checks them first, on the agent's side, so a URL that could never be fetched — a
-forged one relayed by a Broker, one bound to somebody else, one already expired — is
-refused when it arrives rather than surfacing as an edge 403 later.
-
-The signing key comes from the issuing Exchange's Web Bot Auth key directory, resolved by
-``kid`` (the key's thumbprint) through an injected resolver, which by default is the
-SDK's own SSRF-guarded :class:`~fora_sdk.resolvers.wba.WBAKeyResolver`. The signature and
-expiry check is the shared :func:`~fora_sdk.signedurl.verify_ed25519_signed_url`, so the
-byte contract is the one the three SDKs and the edge already agree on.
-
-A refusal is a ``MALFORMED`` :class:`~fora_sdk.client.errors.CallError` carrying a
-``retrieval_auth_failure`` detail the SDK synthesizes, in the vocabulary the edge itself
-answers with, so a caller branches on one set of reasons whichever side checked. A key
-directory that cannot be reached is ``UNREACHABLE`` instead: nothing was decided about
-the URL.
-"""
-
-from __future__ import annotations
-
-import time
-from dataclasses import dataclass
-from datetime import UTC, datetime
-from typing import TYPE_CHECKING, Any, Protocol
-
-from pydantic import PrivateAttr
-from wire.models import (
-    BrokerTransactionResponse,
-    RetrievalAuthFailureReason,
-    TransactionResponse,
-)
-
-from fora_sdk.errordetail import retrieval_auth_failure_detail
-from fora_sdk.resolvers.errors import DirectoryUnavailableError, ResolverError
-from fora_sdk.signedurl import _parse_query_pairs, verify_ed25519_signed_url
-
-from .errors import CallError, CallErrorKind
-
-if TYPE_CHECKING:
-    from collections.abc import Callable
-
-#: The ErrorDetail domain of a refusal this client computed: the client's own tier,
-#: because no peer reached a verdict. The same value the registration pre-check uses.
-CLIENT_ERROR_DOMAIN = "fora.v1.Client"
-
-_REASONS = {
-    "missing_sig": RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING,
-    "missing_exp": RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING,
-    "expired": RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED,
-    "bad_sig_encoding": (
-        RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH
-    ),
-    "signature_mismatch": (
-        RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH
-    ),
-}
-_THUMBPRINT_MISMATCH = RetrievalAuthFailureReason.RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH
-
-
-@dataclass(frozen=True)
-class Delivery:
-    """A signed retrieval URL whose signature, agent binding and expiry this client verified.
-
-    ``execute`` hands one back per result item that carries a URL, and ``fetch`` accepts
-    one in place of the bare URL and verifies it again before sending.
-    """
-
-    #: The signed retrieval URL, exactly as the Exchange issued it.
-    url: str
-    #: The bare domain of the Exchange whose key verified the signature.
-    exchange: str
-    #: The agent thumbprint the URL is bound to; ``""`` for a bearer URL.
-    agent_id: str
-    #: The ``kid`` the URL names: the thumbprint of the Exchange's URL-signing key.
-    key_id: str
-    #: When the URL stops being honoured (its ``exp``), in UTC.
-    expires_at: datetime
-
-
-class DeliveryKeyResolver(Protocol):
-    """Resolves the key an Exchange signs delivery URLs with.
-
-    ``keyid`` is the URL's ``kid`` (a key thumbprint) and ``directory`` the Exchange's bare
-    domain, whose Web Bot Auth directory publishes the key. Returns the raw 32-byte
-    Ed25519 public key. :class:`~fora_sdk.resolvers.wba.WBAKeyResolver` satisfies it.
-    """
-
-    def resolve(self, keyid: str, directory: str) -> bytes: ...
-
-
-@dataclass(frozen=True)
-class Expected:
-    """What one URL is checked against: whose key signed it, and whom it must be bound to."""
-
-    #: The bare domain of the Exchange whose directory publishes the URL-signing key.
-    exchange: str
-    #: This agent's thumbprint.
-    agent: str
-    #: The agent_identity_hash the answer stated; ``""`` when it stated none.
-    stated: str = ""
-
-
-def verify_delivery(
-    op: str, url: str, expected: Expected, keys: DeliveryKeyResolver, where: str = ""
-) -> Delivery:
-    """Verify one retrieval URL against ``expected.exchange``'s key; return the binding.
-
-    The binding rule: a URL carrying ``agent_id`` must carry this agent's thumbprint, and
-    when the answer stated an ``agent_identity_hash`` the URL must carry that value. A
-    URL with no ``agent_id`` under an answer that stated none is a bearer URL the
-    protocol allows, and verifies with ``agent_id`` empty. ``where`` prefixes the message
-    of a refusal ("item 2 (tx-9)"), so a batch failure names its item.
-    """
-    prefix = f"{where}: " if where else ""
-    exchange = expected.exchange
-
-    def resolve(kid: str | None) -> bytes | None:
-        if not kid:
-            return None
-        try:
-            return keys.resolve(kid, exchange)
-        except DirectoryUnavailableError as exc:
-            raise CallError(
-                CallErrorKind.UNREACHABLE,
-                op,
-                cause=f"{prefix}the key directory of {exchange} could not be read: {exc}",
-            ) from exc
-        except ResolverError:
-            return None
-
-    verdict = verify_ed25519_signed_url(url, now=int(time.time()), resolve_key=resolve)
-    if not verdict.valid:
-        reason = _REASONS.get(verdict.reason or "", _REASONS["signature_mismatch"])
-        raise _refusal(op, reason, f"{prefix}the delivery URL does not verify ({verdict.reason})")
-    agent_id = verdict.agent_id or ""
-    if agent_id and agent_id != expected.agent:
-        raise _refusal(
-            op, _THUMBPRINT_MISMATCH, f"{prefix}the delivery URL is bound to another agent"
-        )
-    if expected.stated and agent_id != expected.stated:
-        raise _refusal(
-            op,
-            _THUMBPRINT_MISMATCH,
-            f"{prefix}the delivery URL is not bound to the agent_identity_hash the answer states",
-        )
-    return Delivery(
-        url=url,
-        exchange=exchange,
-        agent_id=agent_id,
-        key_id=verdict.kid or "",
-        expires_at=datetime.fromtimestamp(_exp_of(url), tz=UTC),
-    )
-
-
-def _exp_of(url: str) -> int:
-    """The URL's ``exp``, which the verify above already proved present and numeric."""
-    _prefix, _sep, query = url.partition("?")
-    return int(dict(_parse_query_pairs(query))["exp"])
-
-
-def _refusal(op: str, reason: RetrievalAuthFailureReason, message: str) -> CallError:
-    return CallError(
-        CallErrorKind.MALFORMED,
-        op,
-        cause=message,
-        detail=retrieval_auth_failure_detail(CLIENT_ERROR_DOMAIN, message, reason),
-    )
-
-
-def verify_items(
-    op: str,
-    items: list[Any],
-    expected_of: Callable[[int, Any], Expected],
-    keys: DeliveryKeyResolver,
-) -> tuple[Delivery | None, ...]:
-    """Verify every result item that carries a retrieval URL, in order.
-
-    ``expected_of(index, item)`` states what the item's URL is checked against: the
-    Exchange that issued the item's offer and the binding that Exchange's answer stated.
-    An item with no URL — denied, refused upstream, or not delivered by signed URL — has
-    none.
-    """
-    out: list[Delivery | None] = []
-    for i, item in enumerate(items):
-        url = getattr(item, "retrieval_endpoint", None)
-        if not url:
-            out.append(None)
-            continue
-        tx = getattr(item, "transaction_id", "") or ""
-        where = f"item {i} ({tx})" if tx else f"item {i}"
-        out.append(verify_delivery(op, url, expected_of(i, item), keys, where))
-    return tuple(out)
-
-
-class ExecuteResult(TransactionResponse):
-    """The answer to ``Client.execute``: the TransactionResponse, plus the verified URLs.
-
-    It IS the generated ``TransactionResponse`` — every field, every method, the same
-    ``model_dump`` — with one addition that is not part of the message:
-    :attr:`deliveries`, one entry per result item, the :class:`Delivery` this client
-    verified for it, or ``None`` where the item carries no retrieval URL.
-    """
-
-    _deliveries: tuple[Delivery | None, ...] = PrivateAttr(default=())
-
-    @property
-    def deliveries(self) -> tuple[Delivery | None, ...]:
-        """The verified binding of each item's retrieval URL, index-aligned with ``items``.
-
-        Empty when verification is off or the call was raw: then nothing was verified.
-        """
-        return self._deliveries
-
-
-class BrokerExecuteResult(BrokerTransactionResponse):
-    """The answer to ``BrokerClient.execute``, plus the verified URLs. See
-    :class:`ExecuteResult`."""
-
-    _deliveries: tuple[Delivery | None, ...] = PrivateAttr(default=())
-
-    @property
-    def deliveries(self) -> tuple[Delivery | None, ...]:
-        """The verified binding of each item's retrieval URL, index-aligned with ``items``."""
-        return self._deliveries
diff --git a/sdk/python/fora_sdk/sync/__init__.py b/sdk/python/fora_sdk/sync/__init__.py
index 1d16ca14..c9017a62 100644
--- a/sdk/python/fora_sdk/sync/__init__.py
+++ b/sdk/python/fora_sdk/sync/__init__.py
@@ -13,12 +13,11 @@
 
 from __future__ import annotations
 
-from dataclasses import replace
 from typing import TYPE_CHECKING
 
 import httpx
 
-from fora_sdk.client import _admin, _fetch_inputs, _fetch_target, _verbs
+from fora_sdk.client import _admin, _fetch_inputs, _verbs
 from fora_sdk.client._call import as_call_error
 from fora_sdk.client._read import (
     IDENTITY_ENCODING,
@@ -43,6 +42,7 @@
     from collections.abc import Sequence
 
     from wire.models import (
+        BrokerTransactionResponse,
         DisputeResponse,
         DomainVerificationChallenge,
         DomainVerificationResult,
@@ -53,12 +53,12 @@
         RemoveResourcesResponse,
         SetReportingPolicyResponse,
         SetTenantFeeRateResponse,
+        TransactionResponse,
         UsageReportResponse,
     )
 
     from fora_sdk.client._call import RawBody
     from fora_sdk.client._verbs import RequestMessage
-    from fora_sdk.client.delivery import BrokerExecuteResult, Delivery, ExecuteResult
     from fora_sdk.core import DiscoveryResult, VerifiedOffer
 
 __all__ = ["AdminClient", "BrokerClient", "CatalogClient", "Client", "ClientConfig"]
@@ -97,8 +97,7 @@ def close(self) -> None:
         """Close the transports this client built. An injected one is left alone."""
         # Independent of the RPC legs above: this client is built here whenever the
         # caller injected no reader, whether or not it injected an RPC transport, so it
-        # is closed on its own terms rather than behind that ownership question. The
-        # delivery-key resolver's transport is the same case.
+        # is closed on its own terms rather than behind that ownership question.
         self._owned.close()
         if not self._owns:
             return
@@ -174,10 +173,10 @@ def execute(
         offer: VerifiedOffer | Sequence[VerifiedOffer] | RawBody,
         *,
         idempotency_key: str | None = None,
-    ) -> ExecuteResult:
+    ) -> TransactionResponse:
         plan = _verbs.plan_execute(self._config, offer, idempotency_key)
         status, body = self._send(plan)
-        return _verbs.finish_execute(self._config, plan, status, body)
+        return _verbs.finish_execute(plan, status, body)
 
     def report_usage(
         self, report: RequestMessage, *, idempotency_key: str | None = None
@@ -203,8 +202,8 @@ def get_account_status(self, request: RequestMessage) -> GetAccountStatusRespons
         status, body = self._send(plan)
         return _verbs.finish_get_account_status(plan, status, body)
 
-    def fetch(self, signed_url: str | Delivery, *, exchange: str | None = None) -> Content:
-        url, binding = _fetch_target(self._config, signed_url, exchange)
+    def fetch(self, signed_url: str) -> Content:
+        url = signed_url
         headers, timeout, max_bytes = _fetch_inputs(self._config, url)
         op = "fetch content"
         self._refuse_if_closed(op)
@@ -243,7 +242,7 @@ def fetch(self, signed_url: str | Delivery, *, exchange: str | None = None) -> C
                 read = bounded_chunks(op, max_bytes, response.status_code)
                 for chunk in response.iter_bytes():
                     read.add(chunk)
-                return replace(read_content(url, response, read.body()), binding=binding)
+                return read_content(url, response, read.body())
         except httpx.HTTPError as exc:
             raise transport_failure(exc) from exc
         except _ssrf.SsrfError as exc:
@@ -265,10 +264,10 @@ def resolve(self, request: RequestMessage) -> DiscoveryResult:
 
     def execute(
         self, offers: Sequence[VerifiedOffer] | RawBody, *, idempotency_key: str | None = None
-    ) -> BrokerExecuteResult:
+    ) -> BrokerTransactionResponse:
         plan = _verbs.plan_broker_execute(self._config, offers, idempotency_key)
         status, body = self._send(plan)
-        return _verbs.finish_broker_execute(self._config, plan, status, body)
+        return _verbs.finish_broker_execute(plan, status, body)
 
 
 class CatalogClient(_Face):
diff --git a/sdk/python/tests/test_delivery_left_to_edge.py b/sdk/python/tests/test_delivery_left_to_edge.py
new file mode 100644
index 00000000..0073c1b5
--- /dev/null
+++ b/sdk/python/tests/test_delivery_left_to_edge.py
@@ -0,0 +1,113 @@
+"""Delivery URLs are checked by the delivery edge, not by the agent's client.
+
+An Exchange answers a purchase with one signed retrieval URL per item. The edge in front
+of the content verifies it: the URL signature, and the agent binding against the proof of
+possession the agent presents. An edge that cannot check the binding (CloudFront with its
+pre-arranged RSA key pair) checks its own signature and treats the URL as a bearer token.
+
+So ``execute`` hands the URLs back exactly as the Exchange issued them, and ``fetch``
+dials one as given with the agent's proof attached. Neither refuses a URL the client
+cannot read: by the time the answer arrives the Exchange has already charged, and a
+local refusal would lose the purchase answer.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+import httpx
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from test_broker_execute import _broker_config, _offer
+from test_client import FACES, Face, Recorder, _config, _signed_offer, _verified
+
+import fora_sdk.sync as sync_client
+from fora_sdk.client import Client
+from fora_sdk.pop import AGENT_KEY_HEADER
+from fora_sdk.signedurl import sign_ed25519_signed_url
+
+_IDS = [f.name for f in FACES]
+
+#: Signed by a key no directory publishes, bound to an agent that is not this one, and
+#: long expired. The edge would refuse it; the client hands it back regardless.
+_UNVERIFIABLE = sign_ed25519_signed_url(
+    "https://edge.example/content/asset-1",
+    seed=Ed25519PrivateKey.generate().private_bytes_raw(),
+    kid="unknown-key",
+    agent_id="someone-else",
+    exp=1,
+)
+#: A CloudFront RSA signed URL: no kid, no agent_id, a signature no Ed25519 check reads.
+_CLOUDFRONT = (
+    "https://d111111abcdef8.cloudfront.net/content/asset-2"
+    "?Expires=4102444800&Signature=c2lnbmF0dXJl&Key-Pair-Id=K2JCJMDEHXQW5F"
+)
+
+
+def _answer(*urls: str) -> dict[str, Any]:
+    return {
+        "ver": "1.0",
+        "agent_identity_hash": "agent-thumbprint",
+        "items": [
+            {"offer_id": f"offer-{i}", "transaction_id": f"tx-{i}", "retrieval_endpoint": url}
+            for i, url in enumerate(urls)
+        ],
+    }
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_execute_hands_back_every_url_as_issued(face: Face) -> None:
+    offer, public = _signed_offer()
+    rec = Recorder(_answer(_UNVERIFIABLE, _CLOUDFRONT))
+    client = face.client(_config(), rec)
+
+    result = face.run(client.execute(_verified(public, offer)))
+
+    assert [i.retrieval_endpoint for i in result.items] == [_UNVERIFIABLE, _CLOUDFRONT]
+    # One request: the purchase. No key directory is read.
+    assert len(rec.seen) == 1
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+def test_the_broker_purchase_hands_back_every_url_as_issued(face: Face) -> None:
+    answer = {
+        **_answer(_UNVERIFIABLE, _CLOUDFRONT),
+        "exchanges": [
+            {"exchange": "exchange-a.test", "offer_ids": ["offer-0"]},
+            {"exchange": "exchange-b.test", "offer_ids": ["offer-1"]},
+        ],
+    }
+    rec = Recorder(answer)
+    broker = face.broker(_broker_config(), rec)
+    offers = [_offer("offer-0", "exchange-a.test"), _offer("offer-1", "exchange-b.test")]
+
+    result = face.run(broker.execute(offers))
+
+    assert [i.retrieval_endpoint for i in result.items] == [_UNVERIFIABLE, _CLOUDFRONT]
+    assert len(rec.seen) == 1
+
+
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("url", [_UNVERIFIABLE, _CLOUDFRONT], ids=["ed25519", "cloudfront"])
+def test_fetch_dials_the_url_as_given_with_the_agent_proof(face: Face, url: str) -> None:
+    seen: list[httpx.Request] = []
+
+    def edge(request: httpx.Request) -> httpx.Response:
+        seen.append(request)
+        return httpx.Response(200, content=b"bytes", headers={"content-type": "text/plain"})
+
+    transport = httpx.MockTransport(edge)
+    client: Any = (
+        Client(_config(), http=httpx.AsyncClient(transport=transport))
+        if face.name == "async"
+        else sync_client.Client(_config(), http=httpx.Client(transport=transport))
+    )
+
+    content = face.run(client.fetch(url))
+
+    assert content.body == b"bytes"
+    (request,) = seen
+    assert str(request.url) == url
+    # The proof of possession goes out whatever the URL looks like; the edge decides.
+    assert request.headers[AGENT_KEY_HEADER]
+    assert request.headers["signature"]
diff --git a/sdk/python/tests/test_delivery_verification.py b/sdk/python/tests/test_delivery_verification.py
deleted file mode 100644
index 2b2bab4e..00000000
--- a/sdk/python/tests/test_delivery_verification.py
+++ /dev/null
@@ -1,390 +0,0 @@
-"""Delivery verification: ``execute`` and ``fetch`` check a signed retrieval URL first.
-
-An Exchange signs each retrieval URL with Ed25519 over ``"GET\\n<canonical URL>"``, names
-its key by thumbprint in ``kid``, binds the URL to the buying agent with ``agent_id`` and
-expires it at ``exp``. The client verifies all three against the key the Exchange
-publishes in its Web Bot Auth directory, so a URL that could never be fetched is refused
-when it arrives — with the edge's own reason vocabulary — instead of failing at the edge.
-
-The key is resolved by the SDK's real ``WBAKeyResolver`` from a directory built with the
-identity helpers and served in-process; the purchase runs the real client, on both
-faces, against a peer that verifies the request signature.
-"""
-
-from __future__ import annotations
-
-import json
-import time
-from datetime import UTC, datetime
-from typing import TYPE_CHECKING, Any
-
-import httpx
-import pytest
-from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
-from signed_peer import SignedPeer
-from test_broker_execute import _broker_config, _offer
-from test_client import AGENT_SEED, FACES, Face, _config, _signed_offer, _verified
-
-import fora_sdk.sync as sync_client
-from fora_sdk.client import (
-    BrokerClient,
-    CallError,
-    CallErrorKind,
-    Client,
-    ClientConfig,
-    Delivery,
-    RawBody,
-)
-from fora_sdk.core import Mode
-from fora_sdk.identity import directory_document
-from fora_sdk.keyresolver import StaticKeyResolver
-from fora_sdk.resolvers import WBAKeyResolver
-from fora_sdk.signedurl import sign_ed25519_signed_url
-from fora_sdk.signing_transport import SigningTransport
-from fora_sdk.thumbprint import thumbprint
-
-if TYPE_CHECKING:
-    from collections.abc import Callable
-
-_IDS = [f.name for f in FACES]
-_KEYID = "agent.v1"
-_AGENT_PUBLIC = Ed25519PrivateKey.from_private_bytes(AGENT_SEED).public_key().public_bytes_raw()
-_AGENT = SigningTransport(signer_seed=AGENT_SEED, keyid=_KEYID).thumbprint
-_EDGE = "https://edge.example/content/asset-1"
-
-
-class _Exchange:
-    """One Exchange's URL-signing key, and the directory that publishes it."""
-
-    def __init__(self, domain: str) -> None:
-        self.domain = domain
-        self.key = Ed25519PrivateKey.generate()
-        self.kid = thumbprint(self.key.public_key().public_bytes_raw())
-        self.serve = True
-
-    def sign(self, *, agent_id: str = _AGENT, exp: int | None = None, key: Any = None) -> str:
-        return sign_ed25519_signed_url(
-            _EDGE,
-            seed=(key or self.key).private_bytes_raw(),
-            kid=self.kid,
-            agent_id=agent_id,
-            exp=exp if exp is not None else int(time.time()) + 600,
-        )
-
-
-def _directories(*exchanges: _Exchange) -> WBAKeyResolver:
-    """A real WBA resolver over an in-process origin serving each Exchange's directory."""
-    by_host = {e.domain: e for e in exchanges}
-
-    def respond(request: httpx.Request) -> httpx.Response:
-        exchange = by_host.get(request.url.host)
-        if exchange is None or not exchange.serve:
-            return httpx.Response(503)
-        document = directory_document([exchange.key.public_key()])
-        return httpx.Response(200, content=json.dumps(document).encode())
-
-    return WBAKeyResolver(http=httpx.Client(transport=httpx.MockTransport(respond)))
-
-
-def _peer(answer: dict[str, Any]) -> SignedPeer:
-    return SignedPeer(
-        keys=lambda _sa: StaticKeyResolver({_KEYID: _AGENT_PUBLIC}),
-        answer=lambda _r: httpx.Response(200, content=json.dumps(answer).encode()),
-    )
-
-
-def _client(face: Face, config: ClientConfig, peer: SignedPeer) -> Any:
-    if face.name == "async":
-        return Client(config, http=peer.async_())
-    return sync_client.Client(config, http=peer.sync())
-
-
-def _answer(url: str | None, *, stated: str = _AGENT, **item: Any) -> dict[str, Any]:
-    entry: dict[str, Any] = {"offer_id": "offer-1", "transaction_id": "tx-1", **item}
-    if url is not None:
-        entry["retrieval_endpoint"] = url
-    return {"ver": "1.0", "agent_identity_hash": stated, "items": [entry]}
-
-
-def _buy(face: Face, exchange: _Exchange, answer: dict[str, Any], **config: Any) -> Any:
-    return face.run(_buy_call(face, exchange, answer, **config))
-
-
-def _buy_call(face: Face, exchange: _Exchange, answer: dict[str, Any], **config: Any) -> Any:
-    """The purchase of one verified offer from ``exchange``, not yet run."""
-    offer, public = _signed_offer(exchange.domain)
-    keys = config.pop("delivery_keys", None) or _directories(exchange)
-    client = _client(face, _config(delivery_keys=keys, **config), _peer(answer))
-    return client.execute(_verified(public, offer))
-
-
-def _refusal(face: Face, call: Callable[[], Any]) -> CallError:
-    with pytest.raises(CallError) as caught:
-        face.run(call())
-    return caught.value
-
-
-def _reason(err: CallError) -> str:
-    assert err.detail is not None, "a delivery refusal carries a typed retrieval_auth_failure"
-    assert err.detail.domain == "fora.v1.Client"
-    return str(err.detail.retrieval_auth_failure.reason.value)
-
-
-# ---------------------------------------------------------------------------
-# execute
-# ---------------------------------------------------------------------------
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_a_verified_url_is_handed_back_with_its_binding(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    url = exchange.sign()
-
-    result = _buy(face, exchange, _answer(url))
-
-    assert result.items[0].retrieval_endpoint == url
-    (delivery,) = result.deliveries
-    assert delivery == Delivery(
-        url=url,
-        exchange="exchange.test",
-        agent_id=_AGENT,
-        key_id=exchange.kid,
-        expires_at=delivery.expires_at,
-    )
-    assert delivery.expires_at > datetime.now(UTC)
-    # Not part of the message: the result still dumps as the TransactionResponse.
-    assert "deliveries" not in result.model_dump()
-
-
-def _refused_purchase(face: Face, answer: dict[str, Any], **config: Any) -> CallError:
-    exchange = config.pop("exchange")
-    return _refusal(face, lambda: _buy_call(face, exchange, answer, **config))
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_a_url_signed_by_another_key_is_refused(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    forged = exchange.sign(key=Ed25519PrivateKey.generate())
-
-    err = _refused_purchase(face, _answer(forged), exchange=exchange)
-
-    assert err.kind is CallErrorKind.MALFORMED
-    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH"
-    assert "item 0 (tx-1)" in str(err), "the refusal names the item and its transaction"
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_a_url_bound_to_another_agent_is_refused(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    other = thumbprint(Ed25519PrivateKey.generate().public_key().public_bytes_raw())
-
-    err = _refused_purchase(
-        face, _answer(exchange.sign(agent_id=other), stated=other), exchange=exchange
-    )
-
-    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH"
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_a_bearer_url_under_a_stated_binding_is_refused(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-
-    err = _refused_purchase(face, _answer(exchange.sign(agent_id="")), exchange=exchange)
-
-    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH"
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_an_expired_url_is_refused(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-
-    err = _refused_purchase(
-        face, _answer(exchange.sign(exp=int(time.time()) - 1)), exchange=exchange
-    )
-
-    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED"
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-@pytest.mark.parametrize(
-    ("mangle", "reason"),
-    [
-        (lambda u: u.split("&sig=")[0], "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING"),
-        (
-            lambda u: u.replace("exp=", "expiry="),
-            "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
-        ),
-        (
-            lambda u: u.replace("kid=", "kidx="),
-            "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
-        ),
-    ],
-    ids=["no-sig", "no-exp", "no-kid"],
-)
-def test_a_url_missing_a_part_is_refused(
-    face: Face, mangle: Callable[[str], str], reason: str
-) -> None:
-    exchange = _Exchange("exchange.test")
-
-    err = _refused_purchase(face, _answer(mangle(exchange.sign())), exchange=exchange)
-
-    assert _reason(err) == reason
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_an_unreachable_key_directory_is_unreachable_not_a_verdict(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    exchange.serve = False
-
-    err = _refused_purchase(face, _answer(exchange.sign()), exchange=exchange)
-
-    assert err.kind is CallErrorKind.UNREACHABLE
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_a_bearer_url_under_no_stated_binding_verifies_unbound(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-
-    result = _buy(face, exchange, _answer(exchange.sign(agent_id=""), stated=""))
-
-    assert result.deliveries[0].agent_id == ""
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_an_item_without_a_url_has_no_delivery(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-
-    result = _buy(face, exchange, _answer(None, denial_reason="DENIAL_REASON_RATE_LIMITED"))
-
-    assert result.deliveries == (None,)
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_verification_off_is_the_named_opt_out(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    forged = exchange.sign(key=Ed25519PrivateKey.generate())
-
-    result = _buy(face, exchange, _answer(forged), delivery_verification=Mode.OFF)
-
-    assert result.items[0].retrieval_endpoint == forged
-    assert result.deliveries == ()
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_a_raw_purchase_is_decoded_but_not_verified(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    forged = exchange.sign(key=Ed25519PrivateKey.generate())
-    client = _client(face, _config(delivery_keys=_directories(exchange)), _peer(_answer(forged)))
-
-    result = face.run(client.execute(RawBody(b"{}")))
-
-    assert result.deliveries == ()
-
-
-# ---------------------------------------------------------------------------
-# BrokerClient.execute — each URL against its own Exchange's key
-# ---------------------------------------------------------------------------
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_the_broker_purchase_verifies_each_url_against_its_own_exchange(face: Face) -> None:
-    a, b = _Exchange("exchange-a.test"), _Exchange("exchange-b.test")
-    answer = {
-        "ver": "1.0",
-        "items": [
-            {"offer_id": "a1", "transaction_id": "tx-a", "retrieval_endpoint": a.sign()},
-            {"offer_id": "b1", "transaction_id": "tx-b", "retrieval_endpoint": b.sign()},
-        ],
-        "exchanges": [
-            {"exchange": "exchange-a.test", "offer_ids": ["a1"], "agent_identity_hash": _AGENT},
-            {"exchange": "exchange-b.test", "offer_ids": ["b1"], "agent_identity_hash": _AGENT},
-        ],
-    }
-    offers = [_offer("a1", "exchange-a.test"), _offer("b1", "exchange-b.test")]
-    config = _broker_config(delivery_keys=_directories(a, b))
-    peer = _peer(answer)
-    broker = (
-        BrokerClient(config, http=peer.async_())
-        if face.name == "async"
-        else (sync_client.BrokerClient(config, http=peer.sync()))
-    )
-
-    result = face.run(broker.execute(offers))
-
-    assert [d.exchange for d in result.deliveries] == ["exchange-a.test", "exchange-b.test"]
-    assert [d.key_id for d in result.deliveries] == [a.kid, b.kid]
-
-    # B's URL signed with A's key fails: each URL is checked against its own Exchange.
-    answer["items"][1]["retrieval_endpoint"] = b.sign(key=a.key)
-    peer = _peer(answer)
-    broker = (
-        BrokerClient(config, http=peer.async_())
-        if face.name == "async"
-        else (sync_client.BrokerClient(config, http=peer.sync()))
-    )
-    err = _refusal(face, lambda: broker.execute(offers))
-    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH"
-    assert "item 1 (tx-b)" in str(err)
-
-
-# ---------------------------------------------------------------------------
-# fetch
-# ---------------------------------------------------------------------------
-
-
-def _edge(seen: list[httpx.Request]) -> httpx.MockTransport:
-    def respond(request: httpx.Request) -> httpx.Response:
-        seen.append(request)
-        return httpx.Response(200, content=b"bytes", headers={"content-type": "text/plain"})
-
-    return httpx.MockTransport(respond)
-
-
-def _fetching(face: Face, exchange: _Exchange, seen: list[httpx.Request]) -> Any:
-    config = _config(delivery_keys=_directories(exchange))
-    if face.name == "async":
-        return Client(config, http=httpx.AsyncClient(transport=_edge(seen)))
-    return sync_client.Client(config, http=httpx.Client(transport=_edge(seen)))
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_fetch_verifies_a_delivery_and_returns_its_binding(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    seen: list[httpx.Request] = []
-    client = _fetching(face, exchange, seen)
-    url = exchange.sign()
-
-    by_url = face.run(client.fetch(url, exchange="exchange.test"))
-    assert by_url.body == b"bytes"
-    assert by_url.binding is not None and by_url.binding.agent_id == _AGENT
-
-    delivery = by_url.binding
-    again = face.run(client.fetch(delivery))
-    assert again.binding == delivery
-    assert len(seen) == 2
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_fetch_refuses_an_unverifiable_url_before_anything_is_sent(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    seen: list[httpx.Request] = []
-    client = _fetching(face, exchange, seen)
-    forged = exchange.sign(key=Ed25519PrivateKey.generate())
-
-    err = _refusal(face, lambda: client.fetch(forged, exchange="exchange.test"))
-
-    assert err.kind is CallErrorKind.MALFORMED
-    assert _reason(err) == "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH"
-    assert seen == [], "a URL the client knows the edge would refuse is never dialled"
-
-
-@pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_a_bare_url_is_fetched_as_given(face: Face) -> None:
-    exchange = _Exchange("exchange.test")
-    seen: list[httpx.Request] = []
-    client = _fetching(face, exchange, seen)
-
-    content = face.run(client.fetch(exchange.sign(key=Ed25519PrivateKey.generate())))
-
-    assert content.binding is None
-    assert len(seen) == 1
diff --git a/sdk/python/tests/test_raw_mode.py b/sdk/python/tests/test_raw_mode.py
index 28005541..fa83c258 100644
--- a/sdk/python/tests/test_raw_mode.py
+++ b/sdk/python/tests/test_raw_mode.py
@@ -32,9 +32,10 @@
     CatalogClient,
     Client,
     ClientConfig,
-    ExecuteResult,
     RawBody,
 )
+from wire.models import TransactionResponse
+
 from fora_sdk.httpsig import content_digest
 from fora_sdk.keyresolver import StaticKeyResolver
 
@@ -144,10 +145,8 @@ def test_execute_takes_a_raw_purchase_and_decodes_the_answer(face: Face) -> None
 
     assert peer.only().request.content == body
     assert peer.only().request.url.path == "/fora.v1.ExchangeService/ExecuteTransaction"
-    assert isinstance(result, ExecuteResult)
+    assert isinstance(result, TransactionResponse)
     assert result.items[0].transaction_id == "tx-1"
-    # Nothing ties a raw answer to a request the SDK built, so nothing was verified.
-    assert result.deliveries == ()
 
 
 @pytest.mark.parametrize("face", FACES, ids=_IDS)

From 934f7c920e638738a03acccd008e83073974a98e Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:29:39 -0400
Subject: [PATCH 050/164] Leave delivery URL verification to the edge in the Go
 SDK

Execute, ExecuteBatch and BrokerClient.Execute verified every
retrieval_endpoint before returning, and Fetch verified a URL named
with WithDeliveryExchange before minting a proof for it. Verifying the
URL is the delivery edge's job: the edge checks the URL signature and,
where it can, the agent binding against the proof of possession Fetch
presents. The client check ran after the Exchange had charged, so a
refusal lost the whole purchase answer, and it could not read a
CloudFront signed URL, so a CloudFront-delivered purchase always
failed.

The check is gone. The purchase verbs return the generated responses
with every retrieval_endpoint as the Exchange issued it, and Fetch
dials the URL as given. WithDeliveryKeyResolver,
WithDeliveryVerification, WithDeliveries, WithDeliveryExchange and the
Delivery type are removed, with the verifier the clients held for them,
and resolvers.Content loses Binding. Fetch still takes call options,
as every verb does, and reads none.

Fetch still presents the agent's proof of possession, and an edge
refusal still carries its retrieval_auth_failure reason. The new tests
run the real client against Connect handlers behind the SDK's server
verify face: ExecuteBatch and BrokerClient.Execute return an
unverifiable Ed25519 URL and a CloudFront URL unchanged, and Fetch
dials a CloudFront-shaped URL as given with the proof attached.
---
 sdk/go/README.md                     |  15 +-
 sdk/go/connect/broker.go             |  27 +--
 sdk/go/connect/client.go             |  37 +---
 sdk/go/connect/delivery.go           | 252 -------------------------
 sdk/go/connect/delivery_edge_test.go | 158 ++++++++++++++++
 sdk/go/connect/delivery_test.go      | 267 ---------------------------
 sdk/go/connect/doc.go                |   6 +-
 sdk/go/connect/options.go            |   5 -
 sdk/go/connect/raw.go                |   3 +-
 sdk/go/connect/verbs.go              |  32 +---
 sdk/go/resolvers/contentfetch.go     |   5 -
 11 files changed, 189 insertions(+), 618 deletions(-)
 delete mode 100644 sdk/go/connect/delivery.go
 create mode 100644 sdk/go/connect/delivery_edge_test.go
 delete mode 100644 sdk/go/connect/delivery_test.go

diff --git a/sdk/go/README.md b/sdk/go/README.md
index ac875cf1..989c2a69 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -311,16 +311,11 @@ response or re-implements signing:
   a non-JSON error status — and zero when no answer arrived. The typed `ErrorDetail` is
   decoded from the binary `value`; the shared `connect-error-vectors.json` and
   `error-detail-wire-vectors.json` corpora hold all three SDKs to the same reading.
-- **Delivery verification.** `Execute`, `ExecuteBatch` and `BrokerClient.Execute`
-  verify every `retrieval_endpoint` before returning: its Ed25519 signature against the
-  issuing Exchange's URL-signing key (named by `kid`, resolved from that Exchange's WBA
-  key directory — `WithDeliveryKeyResolver` replaces the resolver), its `agent_id`
-  binding against this agent's key and the answer's `agent_identity_hash`, and its
-  expiry. A URL that does not verify is refused as `CallMalformed` with a
-  `retrieval_auth_failure` detail. `WithDeliveries(&out)` receives the verified
-  bindings; `Fetch(ctx, url, WithDeliveryExchange(exchange))` verifies a URL before
-  fetching it and returns the binding on `Content.Binding`.
-  `WithDeliveryVerification(core.Off)` opts out, for URLs in another signing scheme.
+- **Delivery URLs are the edge's to check.** `Execute`, `ExecuteBatch` and
+  `BrokerClient.Execute` return every `retrieval_endpoint` exactly as the Exchange
+  issued it, and `Fetch` dials a URL as given with the agent's proof of possession, so
+  a harness can put any URL in front of an edge. The edge's refusal comes back as a
+  `CallError` with a `retrieval_auth_failure` detail naming the edge's reason.
 - **`NewAdminClient`** covers every `fora.admin.v1.AdminService` RPC and the two
   domain-verification RPCs.
 - **Identity helpers.** `helpers.GenerateKey` mints an Ed25519 key and its thumbprint,
diff --git a/sdk/go/connect/broker.go b/sdk/go/connect/broker.go
index 7302758f..ed07dbe5 100644
--- a/sdk/go/connect/broker.go
+++ b/sdk/go/connect/broker.go
@@ -38,9 +38,8 @@ type BrokerClient struct {
 	// requester.domain to name it, so Execute checks the two agree before sending.
 	signatureAgent string
 
-	baseURL    string
-	raw        rawLeg
-	deliveries deliveryVerifier
+	baseURL string
+	raw     rawLeg
 }
 
 // NewBrokerClient builds a BrokerClient against a Broker's base URL. It accepts
@@ -79,7 +78,6 @@ func NewBrokerClient(baseURL string, opts ...ClientOption) *BrokerClient {
 		signatureAgent: cfg.signatureAgent,
 		baseURL:        baseURL,
 		raw:            newRawLeg(cfg, httpClient),
-		deliveries:     newDeliveryVerifier(cfg),
 	}
 }
 
@@ -179,10 +177,9 @@ func (b *BrokerClient) discoveryResult(ctx context.Context, msg *forav1.Discover
 // request, an Exchange it cannot route to or does not approve — return an error,
 // and then nothing was bought.
 //
-// The one signed value in the combined answer is each item's retrieval_endpoint,
-// signed by the Exchange that issued the item's offer, so each is verified as
-// Client.Execute verifies its own: against that Exchange's URL-signing key, the
-// agent_identity_hash that Exchange's outcome states, and the expiry.
+// Each item's retrieval_endpoint is returned exactly as the issuing Exchange
+// signed it, as Client.Execute returns its own. Verifying it is the delivery
+// edge's job.
 func (b *BrokerClient) Execute(ctx context.Context, offers []core.VerifiedOffer, opts ...CallOption) (*forav1.BrokerTransactionResponse, error) {
 	const op = "broker execute"
 	cc := resolveCall(opts)
@@ -210,19 +207,5 @@ func (b *BrokerClient) Execute(ctx context.Context, offers []core.VerifiedOffer,
 	if err != nil {
 		return nil, sendError(op, err)
 	}
-	// Each retrieval URL was signed by the Exchange that issued its offer, and is
-	// bound to the identity that Exchange's outcome states — the one signed value in
-	// an answer the Broker otherwise reports unsigned.
-	stated := func(exchange string) string {
-		for _, o := range resp.Msg.GetExchanges() {
-			if o.GetExchange() == exchange {
-				return o.GetAgentIdentityHash()
-			}
-		}
-		return ""
-	}
-	if err := b.deliveries.deliver(ctx, op, resp.Msg.GetItems(), offerExchange(offers), stated, cc.deliveries); err != nil {
-		return nil, err
-	}
 	return resp.Msg, nil
 }
diff --git a/sdk/go/connect/client.go b/sdk/go/connect/client.go
index 1e195b77..b2b6bd08 100644
--- a/sdk/go/connect/client.go
+++ b/sdk/go/connect/client.go
@@ -47,8 +47,6 @@ type Client struct {
 	baseURL string
 	// raw and rawPool are the home and offer-derived legs a raw call is sent over.
 	raw, rawPool rawLeg
-	// deliveries verifies the retrieval URLs a purchase answers with.
-	deliveries deliveryVerifier
 }
 
 // resolvedConfig applies opts over the defaults every client shares.
@@ -100,13 +98,12 @@ func NewClient(baseURL string, opts ...ClientOption) *Client {
 	httpClient, connectOpts, verifier := plumbing(cfg)
 	pooled := offerDerivedClient(cfg, resolvers.NewGuardedTransport(cfg.guardedBase))
 	return &Client{
-		rpc:        forav1connect.NewExchangeServiceClient(httpClient, baseURL, connectOpts...),
-		verifier:   verifier,
-		cfg:        cfg,
-		baseURL:    baseURL,
-		raw:        newRawLeg(cfg, httpClient),
-		rawPool:    newRawLeg(cfg, pooled),
-		deliveries: newDeliveryVerifier(cfg),
+		rpc:      forav1connect.NewExchangeServiceClient(httpClient, baseURL, connectOpts...),
+		verifier: verifier,
+		cfg:      cfg,
+		baseURL:  baseURL,
+		raw:      newRawLeg(cfg, httpClient),
+		rawPool:  newRawLeg(cfg, pooled),
 		// A SECOND signing client for the offer-derived leg, over the guarded
 		// transport: the caller names a domain, the manifest it serves names an
 		// endpoint, and a signed call then goes there. Without the guard one hop
@@ -326,7 +323,7 @@ func (c *Client) discoveredGroups(ctx context.Context, query *forav1.ResourceQue
 }
 
 // CallOption tunes a single call: the idempotency key of a state-mutating call,
-// raw mode, and the delivery options of a purchase or a fetch. Every verb takes
+// and raw mode. Every verb takes
 // them; an option that does not apply to a verb is inert there.
 type CallOption func(*callConfig)
 
@@ -340,11 +337,6 @@ type callConfig struct {
 	// rawBody, when rawSet, replaces the request the verb would build (WithRawBody).
 	rawBody []byte
 	rawSet  bool
-	// deliveries receives the verified retrieval URLs of a purchase (WithDeliveries).
-	deliveries *[]Delivery
-	// deliveryExchange names the Exchange a fetched URL is verified against
-	// (WithDeliveryExchange).
-	deliveryExchange string
 }
 
 // resolveCall applies a call's options.
@@ -393,15 +385,8 @@ func idempotencyKeyFor(opts []CallOption, onMessage string) (string, error) {
 // Items-only wire shape: a single offer is the degenerate 1-element items list.
 // ExecuteBatch buys several offers from the same Exchange in one request.
 //
-// Every retrieval_endpoint in the answer is verified before it is returned: its
-// Ed25519 signature against the URL-signing key the issuing Exchange publishes in
-// its WBA directory (the URL's kid names it), its agent_id binding against this
-// agent's key and the answer's agent_identity_hash, and its expiry. A URL that does
-// not verify fails the call as CallMalformed, with a retrieval_auth_failure detail
-// naming the reason; the purchase itself was made, so the item's transaction id is
-// in the error. WithDeliveries receives the verified bindings, and
-// WithDeliveryVerification(core.Off) is the opt-out for URLs in a signing scheme a
-// WBA directory cannot verify.
+// The retrieval_endpoint of each item is returned exactly as the Exchange issued
+// it. Verifying it is the delivery edge's job, when Fetch presents it.
 func (c *Client) Execute(ctx context.Context, offer core.VerifiedOffer, opts ...CallOption) (*forav1.TransactionResponse, error) {
 	return c.executeDirect(ctx, "execute", []core.VerifiedOffer{offer}, opts)
 }
@@ -438,10 +423,6 @@ func (c *Client) executeDirect(ctx context.Context, op string, offers []core.Ver
 	if err != nil {
 		return nil, sendError(op, err)
 	}
-	if err := c.deliveries.deliver(ctx, op, resp.Msg.GetItems(), offerExchange(offers),
-		func(string) string { return resp.Msg.GetAgentIdentityHash() }, cc.deliveries); err != nil {
-		return nil, err
-	}
 	return resp.Msg, nil
 }
 
diff --git a/sdk/go/connect/delivery.go b/sdk/go/connect/delivery.go
deleted file mode 100644
index ac08f7cb..00000000
--- a/sdk/go/connect/delivery.go
+++ /dev/null
@@ -1,252 +0,0 @@
-package connect
-
-import (
-	"context"
-	"crypto/ed25519"
-	"errors"
-	"fmt"
-	"net/url"
-	"strconv"
-	"strings"
-	"time"
-
-	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
-	"github.com/FORA-Protocol/protocol/sdk/go/core"
-	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
-	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
-)
-
-// Delivery is a retrieval URL whose signature, agent binding and expiry this client
-// verified: the URL, the Exchange whose URL-signing key verified it, and the
-// verified binding — the agent thumbprint it is bound to ("" for a bearer URL), the
-// key id, and the expiry.
-type Delivery struct {
-	URL      string
-	Exchange string
-	helpers.VerifiedURL
-}
-
-// WithDeliveryKeyResolver injects the resolver for an Exchange's URL-signing keys.
-// A delivery URL names its key with the kid parameter, an RFC 7638 thumbprint, and
-// the key is published in the issuing Exchange's WBA key directory; the resolver
-// is called with the Exchange's domain as the context's Signature-Agent
-// (helpers.WithSignatureAgent), which is how resolvers.WBAKeyResolver is told
-// which directory to read. It defaults to an SSRF-guarded WBAKeyResolver.
-func WithDeliveryKeyResolver(r helpers.KeyResolver) ClientOption {
-	return func(c *clientConfig) { c.deliveryKeys = r }
-}
-
-// WithDeliveryVerification sets whether delivery URLs are verified. The default is
-// core.Strict; core.Off is the single named opt-out, for a deployment whose
-// delivery URLs use a signing scheme other than the protocol's Ed25519 URL
-// signature (a CloudFront RSA signed URL, which a WBA directory cannot verify).
-func WithDeliveryVerification(m core.Mode) ClientOption {
-	return func(c *clientConfig) { c.deliveryMode = m }
-}
-
-// WithDeliveries receives the verified retrieval URLs of a purchase: on success,
-// *out is set to one Delivery per result item, index-aligned with the response's
-// items, with the zero Delivery for an item that carries no retrieval_endpoint (a
-// denial, an upstream refusal, a delivery method that is not a signed URL). It is
-// an out-parameter rather than a second return value so Execute keeps its
-// signature; it is left untouched when the call fails or delivery verification is
-// off.
-func WithDeliveries(out *[]Delivery) CallOption {
-	return func(c *callConfig) { c.deliveries = out }
-}
-
-// WithDeliveryExchange names the Exchange that issued the URL a Fetch retrieves, so
-// the URL is verified against that Exchange's URL-signing key — and bound to this
-// agent, and unexpired — before anything is sent, and the returned Content carries
-// the verified binding. A Fetch without it sends the URL as given.
-func WithDeliveryExchange(exchange string) CallOption {
-	return func(c *callConfig) { c.deliveryExchange = exchange }
-}
-
-// deliveryVerifier holds what verifying a delivery URL takes.
-type deliveryVerifier struct {
-	keys  helpers.KeyResolver
-	mode  core.Mode
-	agent string // this agent's thumbprint
-	now   func() time.Time
-}
-
-func newDeliveryVerifier(cfg clientConfig) deliveryVerifier {
-	keys := cfg.deliveryKeys
-	if keys == nil {
-		keys = resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{})
-	}
-	return deliveryVerifier{keys: keys, mode: cfg.deliveryMode, agent: agentThumbprint(cfg), now: time.Now}
-}
-
-// agentThumbprint is the identity a delivery URL must be bound to: the thumbprint
-// of the agent key when one is configured, else the signer's keyid, which the
-// protocol defines as that same thumbprint.
-func agentThumbprint(cfg clientConfig) string {
-	if len(cfg.agentKey) == ed25519.PublicKeySize {
-		if tp, err := helpers.Thumbprint(cfg.agentKey); err == nil {
-			return tp
-		}
-	}
-	if cfg.signer != nil {
-		return cfg.signer.KeyID()
-	}
-	return ""
-}
-
-// deliveryRefusal is one verification failure, mapped onto the retrieval-auth
-// reason an edge would answer for the same URL.
-type deliveryRefusal struct {
-	reason forav1.RetrievalAuthFailureReason
-	err    error
-}
-
-// verify checks one delivery URL issued by exchange. stated is the
-// agent_identity_hash the response claimed the URL is bound to ("" when none).
-func (d deliveryVerifier) verify(ctx context.Context, rawURL, exchange, stated string) (Delivery, *deliveryRefusal, error) {
-	q := deliveryParams(rawURL)
-	if q.Get("sig") == "" {
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING,
-			"the URL carries no signature"), nil
-	}
-	exp, err := strconv.ParseInt(q.Get("exp"), 10, 64)
-	if err != nil {
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING,
-			"the URL carries no usable expiry"), nil
-	}
-	// Expiry before the key is resolved: a dead URL is refused without a directory
-	// fetch, and the reason a caller acts on is the same either way.
-	if !time.Unix(exp, 0).After(d.now()) {
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED,
-			"the URL has expired"), nil
-	}
-	kid := q.Get("kid")
-	if kid == "" {
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH,
-			"the URL names no key (kid)"), nil
-	}
-	pub, err := d.keys.Resolve(helpers.WithSignatureAgent(ctx, exchange), kid)
-	if err != nil {
-		if errors.Is(err, resolvers.ErrDirectoryUnavailable) {
-			return Delivery{}, nil, fmt.Errorf("read the key directory of %s: %w", exchange, err)
-		}
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH,
-			fmt.Sprintf("%s publishes no usable key %q: %v", exchange, kid, err)), nil
-	}
-	verified, err := helpers.VerifyURLEd25519(rawURL, pub, d.now())
-	switch {
-	case errors.Is(err, helpers.ErrURLExpired):
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED, err.Error()), nil
-	case err != nil:
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH,
-			fmt.Sprintf("the URL signature does not verify under %s's key %q", exchange, kid)), nil
-	}
-	if verified.AgentID != "" && verified.AgentID != d.agent {
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH,
-			fmt.Sprintf("the URL is bound to agent %q, not to this agent (%q)", verified.AgentID, d.agent)), nil
-	}
-	if stated != "" && verified.AgentID != stated {
-		return Delivery{}, refuse(forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH,
-			fmt.Sprintf("the answer binds its URLs to %q, and this URL to %q", stated, verified.AgentID)), nil
-	}
-	return Delivery{URL: rawURL, Exchange: exchange, VerifiedURL: verified}, nil, nil
-}
-
-func refuse(reason forav1.RetrievalAuthFailureReason, msg string) *deliveryRefusal {
-	return &deliveryRefusal{reason: reason, err: errors.New(msg)}
-}
-
-// deliveryParams reads the query of a signed URL the way the signer wrote it: the
-// bytes after the first '?', parsed as a query string. An unparseable query reads
-// as empty, which refuses the URL as unsigned.
-func deliveryParams(rawURL string) url.Values {
-	_, rawQuery, _ := strings.Cut(rawURL, "?")
-	q, err := url.ParseQuery(rawQuery)
-	if err != nil {
-		return url.Values{}
-	}
-	return q
-}
-
-// deliveryError turns a verification failure into the client's typed failure: a
-// refusal is CallMalformed with a synthesized retrieval_auth_failure detail, a
-// directory that could not be read is CallUnreachable. item names the result item.
-func deliveryError(op, item string, refusal *deliveryRefusal, err error) error {
-	if refusal == nil {
-		return &CallError{Kind: CallUnreachable, Op: op, Err: fmt.Errorf("verify %s: %w", item, err)}
-	}
-	msg := fmt.Sprintf("delivery URL of %s does not verify: %v", item, refusal.err)
-	return &CallError{
-		Kind:   CallMalformed,
-		Op:     op,
-		Err:    errors.New(msg),
-		Detail: helpers.RetrievalAuthFailureDetail(clientErrorDomain, msg, refusal.reason),
-	}
-}
-
-// verifyItems verifies the retrieval URL of every result item. exchangeOf names
-// the Exchange that issued item i, and statedOf the agent_identity_hash the answer
-// claims for that Exchange.
-func (d deliveryVerifier) verifyItems(
-	ctx context.Context, op string, items []*forav1.TransactionResultItem,
-	exchangeOf func(i int, item *forav1.TransactionResultItem) string, statedOf func(exchange string) string,
-) ([]Delivery, error) {
-	out := make([]Delivery, len(items))
-	for i, item := range items {
-		endpoint := item.GetRetrievalEndpoint()
-		if endpoint == "" {
-			continue
-		}
-		exchange := exchangeOf(i, item)
-		got, refusal, err := d.verify(ctx, endpoint, exchange, statedOf(exchange))
-		if refusal != nil || err != nil {
-			label := fmt.Sprintf("item %d (transaction %q)", i, item.GetTransactionId())
-			return nil, deliveryError(op, label, refusal, err)
-		}
-		out[i] = got
-	}
-	return out, nil
-}
-
-// offerExchange names the Exchange that issued result item i of a purchase of
-// offers: the offer at the same index, or the offer with the same offer_id when
-// the answer does not line up with the request.
-func offerExchange(offers []core.VerifiedOffer) func(int, *forav1.TransactionResultItem) string {
-	return func(i int, item *forav1.TransactionResultItem) string {
-		if len(offers) == 0 {
-			return ""
-		}
-		if len(offers) > i && offers[i].Offer().GetOfferId() == item.GetOfferId() {
-			return offers[i].Offer().GetExchange()
-		}
-		for _, o := range offers {
-			if o.Offer().GetOfferId() == item.GetOfferId() {
-				return o.Offer().GetExchange()
-			}
-		}
-		if len(offers) > i {
-			return offers[i].Offer().GetExchange()
-		}
-		return offers[0].Offer().GetExchange()
-	}
-}
-
-// deliver verifies a purchase's retrieval URLs unless verification is off, and
-// hands them to the caller's WithDeliveries out-parameter.
-func (d deliveryVerifier) deliver(
-	ctx context.Context, op string, items []*forav1.TransactionResultItem,
-	exchangeOf func(int, *forav1.TransactionResultItem) string, statedOf func(string) string,
-	out *[]Delivery,
-) error {
-	if d.mode == core.Off {
-		return nil
-	}
-	got, err := d.verifyItems(ctx, op, items, exchangeOf, statedOf)
-	if err != nil {
-		return err
-	}
-	if out != nil {
-		*out = got
-	}
-	return nil
-}
diff --git a/sdk/go/connect/delivery_edge_test.go b/sdk/go/connect/delivery_edge_test.go
new file mode 100644
index 00000000..76071cfd
--- /dev/null
+++ b/sdk/go/connect/delivery_edge_test.go
@@ -0,0 +1,158 @@
+package connect_test
+
+// Delivery URLs are checked by the delivery edge, not by the agent's client. The
+// edge verifies the URL signature and, where it can, the agent binding against the
+// proof of possession the agent presents; an edge that cannot check the binding
+// (CloudFront with its pre-arranged RSA key pair) treats the URL as a bearer token.
+// So a purchase returns every URL exactly as the Exchange issued it, even one this
+// client could not read, and Fetch dials it as given with the proof attached. By
+// the time the answer arrives the Exchange has charged, and refusing it locally
+// would lose the purchase answer.
+
+import (
+	"context"
+	"crypto/ed25519"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	connectrpc "connectrpc.com/connect"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
+	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
+	"github.com/FORA-Protocol/protocol/sdk/go/core"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// cloudFrontURL is a CloudFront RSA signed URL: no kid, no agent_id, and a
+// signature no Ed25519 check reads.
+const cloudFrontURL = "https://d111111abcdef8.cloudfront.net/content/asset-2" +
+	"?Expires=4102444800&Signature=c2lnbmF0dXJl&Key-Pair-Id=K2JCJMDEHXQW5F"
+
+// unverifiableURL is signed by a key no directory publishes, bound to another
+// agent, and already expired: an edge would refuse it.
+func unverifiableURL(t *testing.T) string {
+	t.Helper()
+	_, key, err := ed25519.GenerateKey(nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	signed, err := helpers.SignURLEd25519(key, "unknown-key", "https://edge.example/content/asset-1",
+		"someone-else", time.Now().Add(-time.Hour))
+	if err != nil {
+		t.Fatal(err)
+	}
+	return signed.URL
+}
+
+func deliveredItems(urls ...string) []*forav1.TransactionResultItem {
+	items := make([]*forav1.TransactionResultItem, len(urls))
+	for i, u := range urls {
+		endpoint := u
+		items[i] = &forav1.TransactionResultItem{
+			OfferId: []string{"offer-1", "offer-2"}[i], TransactionId: "tx", RetrievalEndpoint: &endpoint,
+		}
+	}
+	return items
+}
+
+// issuingExchange answers a purchase with the given retrieval URLs.
+type issuingExchange struct {
+	forav1connect.UnimplementedExchangeServiceHandler
+	urls []string
+}
+
+func (e *issuingExchange) ExecuteTransaction(
+	context.Context, *connectrpc.Request[forav1.TransactionRequest],
+) (*connectrpc.Response[forav1.TransactionResponse], error) {
+	return connectrpc.NewResponse(&forav1.TransactionResponse{
+		Ver:               helpers.ProtocolVersion,
+		AgentIdentityHash: "agent-thumbprint",
+		Items:             deliveredItems(e.urls...),
+	}), nil
+}
+
+func endpoints(items []*forav1.TransactionResultItem) []string {
+	out := make([]string, len(items))
+	for i, item := range items {
+		out[i] = item.GetRetrievalEndpoint()
+	}
+	return out
+}
+
+func TestExecute_ReturnsEveryDeliveryURLAsIssued(t *testing.T) {
+	sig := newSigningFixture(t)
+	want := []string{unverifiableURL(t), cloudFrontURL}
+	srv := serveExchange(t, sig, &issuingExchange{urls: want})
+	client := foraconnect.NewClient(srv.URL,
+		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()))
+	offers := []core.VerifiedOffer{
+		signedOfferAt(t, "offer-1", "exchange.test", "USD"),
+		signedOfferAt(t, "offer-2", "exchange.test", "USD"),
+	}
+
+	resp, err := client.ExecuteBatch(context.Background(), offers)
+	if err != nil {
+		t.Fatalf("ExecuteBatch: %v", err)
+	}
+	if got := endpoints(resp.GetItems()); got[0] != want[0] || got[1] != want[1] {
+		t.Errorf("retrieval endpoints = %v, want %v", got, want)
+	}
+}
+
+func TestBrokerExecute_ReturnsEveryDeliveryURLAsIssued(t *testing.T) {
+	sig := newSigningFixture(t)
+	want := []string{unverifiableURL(t), cloudFrontURL}
+	srv := serveBroker(t, sig, &relayBroker{answer: &forav1.BrokerTransactionResponse{
+		Ver:   helpers.ProtocolVersion,
+		Items: deliveredItems(want...),
+		Exchanges: []*forav1.ExchangeOutcome{
+			{Exchange: "exchange-a.test", OfferIds: []string{"offer-1"}},
+			{Exchange: "exchange-b.test", OfferIds: []string{"offer-2"}},
+		},
+	}})
+	offers := []core.VerifiedOffer{
+		signedOfferAt(t, "offer-1", "exchange-a.test", "USD"),
+		signedOfferAt(t, "offer-2", "exchange-b.test", "USD"),
+	}
+
+	resp, err := brokerClient(srv.URL, sig).Execute(context.Background(), offers)
+	if err != nil {
+		t.Fatalf("Execute: %v", err)
+	}
+	if got := endpoints(resp.GetItems()); got[0] != want[0] || got[1] != want[1] {
+		t.Errorf("retrieval endpoints = %v, want %v", got, want)
+	}
+}
+
+// Fetch dials whatever URL it is given, with the agent's proof of possession: the
+// edge decides.
+func TestFetch_DialsTheURLAsGivenWithTheAgentProof(t *testing.T) {
+	sig := newSigningFixture(t)
+	var seen *http.Request
+	edge := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		seen = r
+		w.Header().Set("Content-Type", "text/plain")
+		_, _ = w.Write([]byte("licensed bytes"))
+	}))
+	t.Cleanup(edge.Close)
+	client := foraconnect.NewClient("http://exchange.test", append(allowLoopback(t),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithAgentKey(sig.pub))...)
+	target := edge.URL + "/content/asset-2?Expires=4102444800&Signature=c2lnbmF0dXJl&Key-Pair-Id=K2JCJMDEHXQW5F"
+
+	content, err := client.Fetch(context.Background(), target)
+	if err != nil {
+		t.Fatalf("Fetch: %v", err)
+	}
+	if string(content.Body) != "licensed bytes" {
+		t.Errorf("body = %q", content.Body)
+	}
+	if seen == nil || seen.URL.RequestURI() != "/content/asset-2?Expires=4102444800&Signature=c2lnbmF0dXJl&Key-Pair-Id=K2JCJMDEHXQW5F" {
+		t.Fatalf("the edge saw %v, want the URL as given", seen)
+	}
+	if seen.Header.Get(helpers.AgentKeyHeader) == "" || seen.Header.Get("Signature") == "" {
+		t.Error("the fetch carries no proof of possession")
+	}
+}
diff --git a/sdk/go/connect/delivery_test.go b/sdk/go/connect/delivery_test.go
deleted file mode 100644
index a58c8f24..00000000
--- a/sdk/go/connect/delivery_test.go
+++ /dev/null
@@ -1,267 +0,0 @@
-package connect_test
-
-// Delivery verification, through the real client against one in-process Exchange:
-// a real Connect ExchangeService handler behind the SDK's server verify face, and
-// the Exchange's own WBA key directory publishing the key it signs delivery URLs
-// with. The client resolves that key through the SDK's WBA resolver, so every case
-// exercises the path a deployment runs.
-
-import (
-	"context"
-	"crypto/ed25519"
-	"errors"
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"sync/atomic"
-	"testing"
-	"time"
-
-	connectrpc "connectrpc.com/connect"
-	"google.golang.org/protobuf/encoding/protojson"
-
-	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
-	"github.com/FORA-Protocol/protocol/gen/go/fora/v1/forav1connect"
-	foraconnect "github.com/FORA-Protocol/protocol/sdk/go/connect"
-	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
-	"github.com/FORA-Protocol/protocol/sdk/go/core"
-	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
-	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
-)
-
-// deliveringExchange answers a purchase with one item whose retrieval URL is
-// produced by url — the knob each case turns.
-type deliveringExchange struct {
-	forav1connect.UnimplementedExchangeServiceHandler
-	url    func() string
-	stated string
-}
-
-func (d *deliveringExchange) ExecuteTransaction(
-	context.Context, *connectrpc.Request[forav1.TransactionRequest],
-) (*connectrpc.Response[forav1.TransactionResponse], error) {
-	endpoint := d.url()
-	return connectrpc.NewResponse(&forav1.TransactionResponse{
-		Ver:               helpers.ProtocolVersion,
-		AgentIdentityHash: d.stated,
-		Items: []*forav1.TransactionResultItem{
-			{OfferId: "offer-1", TransactionId: "tx-1", RetrievalEndpoint: &endpoint},
-			// A denied item carries no URL and gets the zero Delivery.
-			{OfferId: "offer-2", DenialReason: forav1.DenialReason_DENIAL_REASON_RATE_LIMITED.Enum()},
-		},
-	}), nil
-}
-
-// deliveryFixture is the Exchange, its URL-signing key and the agent buying from it.
-type deliveryFixture struct {
-	sig      signingFixture
-	exchange string // the bare domain, which is the Exchange's identity
-	origin   *deliveringExchange
-	key      ed25519.PrivateKey
-	keyID    string
-	content  *httptest.Server
-	fetches  *atomic.Int64
-}
-
-func newDeliveryFixture(t *testing.T) *deliveryFixture {
-	t.Helper()
-	sig := newSigningFixture(t)
-	key, keyID, err := helpers.GenerateKey()
-	if err != nil {
-		t.Fatal(err)
-	}
-	f := &deliveryFixture{sig: sig, key: key, keyID: keyID, origin: &deliveringExchange{stated: sig.keyID}, fetches: &atomic.Int64{}}
-	doc, err := protojson.MarshalOptions{UseProtoNames: true}.Marshal(
-		helpers.DirectoryDocument([]ed25519.PublicKey{key.Public().(ed25519.PublicKey)}, 0, time.Now()))
-	if err != nil {
-		t.Fatal(err)
-	}
-	path, h := foraserver.NewExchangeServiceHandler(f.origin, foraserver.WithKeyResolver(sig.resolver))
-	mux := http.NewServeMux()
-	mux.Handle(path, h)
-	mux.HandleFunc("/.well-known/http-message-signatures-directory", func(w http.ResponseWriter, _ *http.Request) {
-		w.Header().Set("Content-Type", "application/json")
-		_, _ = w.Write(doc)
-	})
-	srv := httptest.NewServer(mux)
-	t.Cleanup(srv.Close)
-	f.exchange = strings.TrimPrefix(srv.URL, "http://")
-	f.content = httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
-		f.fetches.Add(1)
-		w.Header().Set("Content-Type", "text/plain")
-		_, _ = w.Write([]byte("licensed bytes"))
-	}))
-	t.Cleanup(f.content.Close)
-	f.origin.url = func() string { return f.sign(t, f.key, f.keyID, sig.keyID, time.Hour) }
-	return f
-}
-
-// sign issues a delivery URL for the content server.
-func (f *deliveryFixture) sign(t *testing.T, key ed25519.PrivateKey, keyID, agent string, ttl time.Duration) string {
-	t.Helper()
-	signed, err := helpers.SignURLEd25519(key, keyID, f.content.URL+"/doc", agent, time.Now().Add(ttl))
-	if err != nil {
-		t.Fatal(err)
-	}
-	return signed.URL
-}
-
-func (f *deliveryFixture) client(t *testing.T, extra ...foraconnect.ClientOption) *foraconnect.Client {
-	t.Helper()
-	opts := append(allowLoopback(t),
-		foraconnect.WithSigner(f.sig.signer),
-		foraconnect.WithAgentKey(f.sig.pub),
-		foraconnect.WithRequester(testRequester()),
-		foraconnect.WithDeliveryKeyResolver(resolvers.NewWBAKeyResolver(
-			resolvers.WBAKeyResolverOptions{Scheme: "http", HTTP: http.DefaultClient})),
-	)
-	return foraconnect.NewClient("http://"+f.exchange, append(opts, extra...)...)
-}
-
-func (f *deliveryFixture) offers(t *testing.T) []core.VerifiedOffer {
-	t.Helper()
-	return []core.VerifiedOffer{
-		signedOfferAt(t, "offer-1", f.exchange, "USD"),
-		signedOfferAt(t, "offer-2", f.exchange, "USD"),
-	}
-}
-
-// A URL that verifies is handed back with its verified binding, and a fetch that
-// names the Exchange carries the same binding on its Content.
-func TestExecute_VerifiesTheDeliveryURL(t *testing.T) {
-	f := newDeliveryFixture(t)
-	client := f.client(t)
-	var deliveries []foraconnect.Delivery
-	resp, err := client.ExecuteBatch(context.Background(), f.offers(t), foraconnect.WithDeliveries(&deliveries))
-	if err != nil {
-		t.Fatalf("ExecuteBatch: %v", err)
-	}
-	if len(deliveries) != 2 {
-		t.Fatalf("deliveries = %v, want one per item", deliveries)
-	}
-	got := deliveries[0]
-	if got.URL != resp.GetItems()[0].GetRetrievalEndpoint() || got.Exchange != f.exchange ||
-		got.AgentID != f.sig.keyID || got.KeyID != f.keyID || !got.Expiry.After(time.Now()) {
-		t.Errorf("delivery = %+v", got)
-	}
-	if deliveries[1] != (foraconnect.Delivery{}) {
-		t.Errorf("the denied item's delivery = %+v, want the zero value", deliveries[1])
-	}
-
-	content, err := client.Fetch(context.Background(), got.URL, foraconnect.WithDeliveryExchange(got.Exchange))
-	if err != nil {
-		t.Fatalf("Fetch: %v", err)
-	}
-	if content.Binding == nil || content.Binding.AgentID != f.sig.keyID {
-		t.Errorf("binding = %+v, want the verified one", content.Binding)
-	}
-	plain, err := client.Fetch(context.Background(), got.URL)
-	if err != nil || plain.Binding != nil {
-		t.Errorf("a fetch naming no Exchange = %+v, %v; want the URL fetched as given", plain.Binding, err)
-	}
-}
-
-// Every way a delivery URL can fail to verify refuses the purchase answer with the
-// retrieval-auth reason an edge would give the same URL.
-func TestExecute_RefusesADeliveryURLThatDoesNotVerify(t *testing.T) {
-	_, foreign, _ := ed25519.GenerateKey(nil)
-	cases := []struct {
-		name string
-		url  func(f *deliveryFixture, t *testing.T) string
-		want forav1.RetrievalAuthFailureReason
-	}{
-		{"signature by another key", func(f *deliveryFixture, t *testing.T) string {
-			return f.sign(t, foreign, f.keyID, f.sig.keyID, time.Hour)
-		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH},
-		{"bound to another agent", func(f *deliveryFixture, t *testing.T) string {
-			return f.sign(t, f.key, f.keyID, "someone-else", time.Hour)
-		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH},
-		{"bearer URL where the answer states a binding", func(f *deliveryFixture, t *testing.T) string {
-			return f.sign(t, f.key, f.keyID, "", time.Hour)
-		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH},
-		{"expired", func(f *deliveryFixture, t *testing.T) string {
-			return f.sign(t, f.key, f.keyID, f.sig.keyID, -time.Minute)
-		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED},
-		{"unsigned", func(f *deliveryFixture, _ *testing.T) string {
-			return f.content.URL + "/doc?exp=9999999999&kid=" + f.keyID
-		}, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING},
-	}
-	for _, c := range cases {
-		t.Run(c.name, func(t *testing.T) {
-			f := newDeliveryFixture(t)
-			f.origin.url = func() string { return c.url(f, t) }
-			_, err := f.client(t).ExecuteBatch(context.Background(), f.offers(t))
-			assertDeliveryRefusal(t, err, c.want)
-
-			// The same URL is refused by a fetch that names the Exchange, before
-			// anything is sent. A bearer URL is the exception: a fetch has no answer
-			// stating a binding, and the protocol lets an Exchange issue one.
-			if c.name == "bearer URL where the answer states a binding" {
-				return
-			}
-			_, err = f.client(t).Fetch(context.Background(), c.url(f, t), foraconnect.WithDeliveryExchange(f.exchange))
-			assertDeliveryRefusal(t, err, c.want)
-			if n := f.fetches.Load(); n != 0 {
-				t.Errorf("the edge was reached %d time(s) for a URL that does not verify", n)
-			}
-		})
-	}
-}
-
-func assertDeliveryRefusal(t *testing.T, err error, want forav1.RetrievalAuthFailureReason) {
-	t.Helper()
-	var cerr *foraconnect.CallError
-	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
-		t.Fatalf("error = %v, want CallMalformed", err)
-	}
-	detail, ok := foraconnect.ErrorDetailFrom(err)
-	if !ok || detail.GetRetrievalAuthFailure().GetReason() != want {
-		t.Fatalf("detail = %v, want %v", detail, want)
-	}
-	if detail.GetDomain() != "fora.v1.Client" {
-		t.Errorf("domain = %q, want the client's own tier", detail.GetDomain())
-	}
-}
-
-// WithDeliveryVerification(core.Off) is the named opt-out for a URL in another
-// signing scheme.
-func TestExecute_DeliveryVerificationOff(t *testing.T) {
-	f := newDeliveryFixture(t)
-	f.origin.url = func() string { return f.content.URL + "/doc?Signature=rsa&Key-Pair-Id=K" }
-	_, err := f.client(t, foraconnect.WithDeliveryVerification(core.Off)).ExecuteBatch(context.Background(), f.offers(t))
-	if err != nil {
-		t.Fatalf("ExecuteBatch with verification off: %v", err)
-	}
-}
-
-// A relayed purchase verifies each URL against the Exchange that issued its offer
-// and the binding that Exchange's outcome states.
-func TestBrokerExecute_VerifiesEachExchangesDeliveryURL(t *testing.T) {
-	f := newDeliveryFixture(t)
-	good := f.sign(t, f.key, f.keyID, f.sig.keyID, time.Hour)
-	bad := f.sign(t, f.key, f.keyID, "someone-else", time.Hour)
-	answer := func(endpoint string) *forav1.BrokerTransactionResponse {
-		return &forav1.BrokerTransactionResponse{
-			Ver:       helpers.ProtocolVersion,
-			Items:     []*forav1.TransactionResultItem{{OfferId: "offer-1", TransactionId: "tx-1", RetrievalEndpoint: &endpoint}},
-			Exchanges: []*forav1.ExchangeOutcome{{Exchange: f.exchange, OfferIds: []string{"offer-1"}, AgentIdentityHash: f.sig.keyID}},
-		}
-	}
-	keys := foraconnect.WithDeliveryKeyResolver(resolvers.NewWBAKeyResolver(
-		resolvers.WBAKeyResolverOptions{Scheme: "http", HTTP: http.DefaultClient}))
-	offers := []core.VerifiedOffer{signedOfferAt(t, "offer-1", f.exchange, "USD")}
-
-	srv := serveBroker(t, f.sig, &relayBroker{answer: answer(good)})
-	var deliveries []foraconnect.Delivery
-	if _, err := brokerClient(srv.URL, f.sig, keys).Execute(context.Background(), offers,
-		foraconnect.WithDeliveries(&deliveries)); err != nil {
-		t.Fatalf("Execute: %v", err)
-	}
-	if len(deliveries) != 1 || deliveries[0].Exchange != f.exchange || deliveries[0].AgentID != f.sig.keyID {
-		t.Errorf("deliveries = %+v", deliveries)
-	}
-
-	srv = serveBroker(t, f.sig, &relayBroker{answer: answer(bad)})
-	_, err := brokerClient(srv.URL, f.sig, keys).Execute(context.Background(), offers)
-	assertDeliveryRefusal(t, err, forav1.RetrievalAuthFailureReason_RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH)
-}
diff --git a/sdk/go/connect/doc.go b/sdk/go/connect/doc.go
index b2041472..95b46603 100644
--- a/sdk/go/connect/doc.go
+++ b/sdk/go/connect/doc.go
@@ -10,9 +10,9 @@
 // CatalogService and NewAdminClient for the operator plane, which are different
 // parties or different addresses and so cannot share one base URL.
 //
-// A purchase verifies every delivery URL it returns — its signature against the
-// issuing Exchange's URL-signing key, its agent binding and its expiry — and the
-// client carries what a conformance harness needs to drive a service through it:
+// A purchase returns its delivery URLs as the Exchange issued them; verifying one
+// is the delivery edge's job when Fetch presents it. The client carries what a
+// conformance harness needs to drive a service through it:
 // a pre-signing hook (WithBeforeSign), raw mode (WithRawBody), strict response
 // decoding (WithStrictDecoding) and the Connect code of every peer answer
 // (CallError.Code).
diff --git a/sdk/go/connect/options.go b/sdk/go/connect/options.go
index a2efd750..a247f162 100644
--- a/sdk/go/connect/options.go
+++ b/sdk/go/connect/options.go
@@ -46,11 +46,6 @@ type clientConfig struct {
 	// strictDecoding refuses an answer with an unknown field or a broken rule
 	// (WithStrictDecoding).
 	strictDecoding bool
-	// deliveryKeys resolves the Exchange's URL-signing key a delivery URL names
-	// (WithDeliveryKeyResolver); nil means the guarded WBA directory resolver.
-	deliveryKeys helpers.KeyResolver
-	// deliveryMode is Strict unless WithDeliveryVerification turns it off.
-	deliveryMode core.Mode
 }
 
 // ClientOption configures a Client. Options are the ONLY way to inject the
diff --git a/sdk/go/connect/raw.go b/sdk/go/connect/raw.go
index 73787824..61b8d507 100644
--- a/sdk/go/connect/raw.go
+++ b/sdk/go/connect/raw.go
@@ -29,8 +29,7 @@ import (
 // ReportUsage, Dispute, Register, GetAccountStatus — reads `exchange` by decoding
 // the body as its request type, and routes it exactly as it routes a built
 // request; a body that does not decode, or names no exchange, is refused as
-// CallNotSent, because there is nowhere to send it. A purchase sent raw is not
-// tied to verified offers, so its delivery URLs are not verified.
+// CallNotSent, because there is nowhere to send it.
 //
 // An empty body is a valid raw body: the empty message.
 func WithRawBody(body []byte) CallOption {
diff --git a/sdk/go/connect/verbs.go b/sdk/go/connect/verbs.go
index 5fe07308..d8e2bd9f 100644
--- a/sdk/go/connect/verbs.go
+++ b/sdk/go/connect/verbs.go
@@ -145,31 +145,16 @@ func (c *Client) Dispute(ctx context.Context, req *forav1.DisputeRequest, opts .
 // failure through the same accessor.
 //
 // A fetch is a GET against an already-issued URL, so there is no idempotency key
-// to pin — nothing on this path mutates state. The one CallOption it reads is
-// WithDeliveryExchange.
+// to pin — nothing on this path mutates state. It reads no CallOption; it takes
+// them only because every verb does.
 //
-// With WithDeliveryExchange naming the Exchange that issued the URL, the URL is
-// verified before anything is sent — its Ed25519 signature against that Exchange's
-// URL-signing key (resolved from its WBA directory), its agent binding against this
-// agent's key, and its expiry — and the returned Content carries the verified
-// binding in Binding. A URL that does not verify is refused as CallMalformed with a
-// synthesized retrieval_auth_failure detail, so no proof of possession is minted
-// for it. Execute verifies every URL it returns the same way, so a URL taken from
-// this client's own purchase has already passed; naming the Exchange is worth it
-// whenever the URL reached the caller from anywhere else. Without it the URL is
-// taken as given and Binding is nil, which is what a test of an edge's own
-// refusals needs. WithDeliveryVerification(core.Off) never verifies.
-func (c *Client) Fetch(ctx context.Context, signedURL string, opts ...CallOption) (resolvers.Content, error) {
+// The URL is taken as given. Verifying it is the delivery edge's job: the edge
+// checks the URL signature and, where it can, the agent binding against the proof
+// presented here. An edge that cannot check the binding (CloudFront with its
+// pre-arranged RSA key pair) checks its own signature and treats the URL as a
+// bearer token.
+func (c *Client) Fetch(ctx context.Context, signedURL string, _ ...CallOption) (resolvers.Content, error) {
 	const op = "fetch content"
-	cc := resolveCall(opts)
-	var binding *helpers.VerifiedURL
-	if cc.deliveryExchange != "" && c.deliveries.mode != core.Off {
-		got, refusal, verr := c.deliveries.verify(ctx, signedURL, cc.deliveryExchange, "")
-		if refusal != nil || verr != nil {
-			return resolvers.Content{}, deliveryError(op, "the fetched URL", refusal, verr)
-		}
-		binding = &got.VerifiedURL
-	}
 	signer, err := c.proofSigner()
 	if err != nil {
 		return resolvers.Content{}, &CallError{Kind: CallNotSignable, Op: op, Err: err}
@@ -178,7 +163,6 @@ func (c *Client) Fetch(ctx context.Context, signedURL string, opts ...CallOption
 	if err != nil {
 		return resolvers.Content{}, fetchCallError(op, signedURL, err)
 	}
-	content.Binding = binding
 	return content, nil
 }
 
diff --git a/sdk/go/resolvers/contentfetch.go b/sdk/go/resolvers/contentfetch.go
index 931aded0..526f0ce3 100644
--- a/sdk/go/resolvers/contentfetch.go
+++ b/sdk/go/resolvers/contentfetch.go
@@ -109,11 +109,6 @@ type Content struct {
 	MIMEType string
 	// Body is the fetched bytes.
 	Body []byte
-	// Binding is the URL's verified signature, agent binding and expiry when the
-	// caller had it verified before the fetch (the connect client's
-	// WithDeliveryExchange), and nil when the URL was fetched as given. This tier
-	// never sets it: it dials, and verifying is the client's step before the dial.
-	Binding *helpers.VerifiedURL
 }
 
 // FetchFailure classifies why a content fetch failed, so a caller can branch on

From 4c7e25b8e15aa064a77aafdbc1d10db95ea12681 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:29:59 -0400
Subject: [PATCH 051/164] Leave delivery URL verification to the edge in the
 TypeScript SDK

execute and BrokerClient.execute verified every retrieval_endpoint in
the answer, and fetch verified a Delivery or a URL given with the
issuing Exchange, before handing the URL out. Verifying the URL is the
delivery edge's job: the edge checks the URL signature and, where it
can, the agent binding against the proof of possession fetch presents.
The client check ran after the Exchange had charged, so a refusal lost
the whole purchase answer, and it could not read a CloudFront signed
URL, so a CloudFront-delivered purchase always failed.

The check is gone. execute resolves to the TransactionResponse and
BrokerClient.execute to the BrokerTransactionResponse, with no
non-enumerable deliveries list, and fetch takes the signed URL alone.
ClientOptions loses deliveryKeys and deliveryVerification, and the
resolved client the default WBA resolver it built for them. Delivery,
DeliveryKeyResolver, ExecuteResult, BrokerExecuteResult and
FetchOptions are no longer exported, and Content loses binding.

fetch still presents the agent's proof of possession, and an edge
refusal still comes back with its retrieval_auth_failure reason. The
new tests show execute and the Broker purchase return an unverifiable
Ed25519 URL and a CloudFront URL unchanged in one round trip, and
fetch dials a CloudFront-shaped URL on a loopback edge as given, with
the proof attached.
---
 sdk/ts/README.md                           |   7 +-
 sdk/ts/client/content.ts                   |   9 +-
 sdk/ts/client/delivery.ts                  | 165 ----------
 sdk/ts/client/index.ts                     | 187 ++---------
 sdk/ts/client/options.ts                   |  17 +-
 sdk/ts/client/raw.ts                       |   3 +-
 sdk/ts/tests/delivery-left-to-edge.test.ts | 155 +++++++++
 sdk/ts/tests/delivery-verification.test.ts | 362 ---------------------
 sdk/ts/tests/raw-body.test.ts              |   5 +-
 9 files changed, 189 insertions(+), 721 deletions(-)
 delete mode 100644 sdk/ts/client/delivery.ts
 create mode 100644 sdk/ts/tests/delivery-left-to-edge.test.ts
 delete mode 100644 sdk/ts/tests/delivery-verification.test.ts

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 436657f8..57d5e8cb 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -51,9 +51,10 @@ contract does not define; a refused envelope is `malformed` with `code` kept. A
 FORA services through the client has three more seams on it: `beforeSign` alters a
 request just before it is signed, a `RawBody` passed in place of a verb's request is sent
 exactly as given, and `ForaCallError.code` carries the Connect code of a refusal next to
-its typed `detail`. `execute` and `fetch` verify a delivery URL's signature, agent binding
-and expiry against the issuing Exchange's key directory before handing it back or dialling
-it. `createAdminClient` covers the operator RPCs, and `@fora-protocol/sdk/identity` mints an
+its typed `detail`. `execute` returns each delivery URL as the Exchange issued it, and
+`fetch` dials it as given with the agent's proof of possession: the delivery edge verifies
+the URL, and its refusal comes back with the edge's `retrieval_auth_failure` reason.
+`createAdminClient` covers the operator RPCs, and `@fora-protocol/sdk/identity` mints an
 agent key, its key directory and a signer.
 
 `@fora-protocol/sdk/resolvers` reads and checks the documents a party publishes:
diff --git a/sdk/ts/client/content.ts b/sdk/ts/client/content.ts
index 9a7a5037..82c4be4e 100644
--- a/sdk/ts/client/content.ts
+++ b/sdk/ts/client/content.ts
@@ -16,7 +16,6 @@ import { MAX_BODY_DEPTH, rawNestingDepth } from "../src/jsondepth.ts";
 import { RequestIDHeader } from "../src/wire.ts";
 import { IDENTITY_ENCODING, refuseUnrequestedEncoding } from "./transport.ts";
 import { requireScheme, skipSSRF, ssrfGuard } from "../resolvers/http.ts";
-import type { Delivery } from "./delivery.ts";
 import { ForaCallError } from "./errors.ts";
 import { concat, reclaim } from "./send.ts";
 
@@ -76,9 +75,6 @@ export interface Content {
 	mimeType: string;
 	/** The fetched bytes. */
 	body: Uint8Array;
-	/** The binding the client verified before fetching: present when the URL was checked
-	 * against the Exchange that issued it, absent for a URL fetched as given. */
-	binding?: Delivery;
 }
 
 /** What the content leg needs to mint one proof and dial once. */
@@ -109,9 +105,8 @@ export interface ContentFetchOptions {
  * which the edge's own check rejects, or hand a fresh proof of possession of the agent's
  * key to whatever host the first hop named.
  *
- * The URL is taken as given at this tier. The client's fetch verb verifies it first —
- * signature, binding to this agent, expiry — when it knows the Exchange that issued it,
- * which turns an edge 403 into a local answer before a proof is minted for the URL.
+ * The URL is taken as given. Verifying it is the delivery edge's job: the edge checks the
+ * URL signature and, where it can, the agent binding against the proof presented here.
  */
 export async function fetchContent(
 	signedURL: string,
diff --git a/sdk/ts/client/delivery.ts b/sdk/ts/client/delivery.ts
deleted file mode 100644
index c61a423c..00000000
--- a/sdk/ts/client/delivery.ts
+++ /dev/null
@@ -1,165 +0,0 @@
-// Delivery verification: checking a signed retrieval URL before it is used.
-//
-// A purchase answers with a retrieval_endpoint per item: a URL the issuing Exchange
-// signed over "GET\n<canonical URL>", carrying its expiry (`exp`), the key that signed it
-// (`kid`, the thumbprint of the Exchange's URL-signing key) and, when the Exchange bound
-// it, the agent it was issued to (`agent_id`). It is the one signed value in a result
-// item — a Broker that relayed the purchase cannot forge or alter it — so the client
-// checks it where it arrives instead of leaving the delivery edge to refuse it later.
-//
-// The Exchange's URL-signing keys come from its Web Bot Auth key directory, the same
-// directory that publishes its other keys, resolved through the injected
-// DeliveryKeyResolver (the SDK's WBA resolver by default).
-
-import { retrievalAuthFailureDetail, type RetrievalAuthFailureReason } from "../src/errordetail.ts";
-import { verifyEd25519SignedUrl, type VerifyFailure } from "../src/verify.ts";
-import { DirectoryUnavailable } from "../resolvers/errors.ts";
-import { ForaCallError } from "./errors.ts";
-
-/** A retrieval URL whose signature, agent binding and expiry this client verified. */
-export interface Delivery {
-	/** The signed retrieval URL, verbatim. */
-	url: string;
-	/** The Exchange whose URL-signing key verified the signature. */
-	exchange: string;
-	/** The RFC 7638 thumbprint the URL is bound to; "" for a bearer (unbound) URL. */
-	agentId: string;
-	/** The `kid` that named the Exchange's URL-signing key. */
-	keyId: string;
-	/** When the URL expires (its `exp`). */
-	expiresAt: Date;
-}
-
-/**
- * Resolves an Exchange's URL-signing key: the raw 32-byte Ed25519 public key whose RFC 7638
- * thumbprint is `thumbprint`, from the WBA directory of `directory` (the Exchange's bare
- * domain). The SDK's WBA resolver (createWBAKeyResolver) satisfies it. Undefined for a key
- * the directory does not publish; a thrown DirectoryUnavailable reads as a directory that
- * could not be reached.
- */
-export interface DeliveryKeyResolver {
-	resolve(thumbprint: string, directory: string): Promise<Uint8Array | undefined>;
-}
-
-/** The ErrorDetail domain for a refusal this client computed itself. */
-const CLIENT_ERROR_DOMAIN = "fora.v1.Client";
-
-const REASON_OF: Readonly<Record<VerifyFailure, RetrievalAuthFailureReason>> = {
-	missing_sig: "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
-	missing_exp: "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
-	bad_exp_encoding: "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
-	expired: "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
-	bad_sig_encoding: "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
-	signature_mismatch: "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
-	bad_agent_encoding: "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
-};
-
-/** What one verification is checked against. */
-export interface DeliveryCheck {
-	/** The verb, for the failure. */
-	op: string;
-	/** Which URL this is, in the failure's words ("item 0 (transaction tx-1)"). */
-	subject: string;
-	/** The Exchange whose key must verify the signature. */
-	exchange: string;
-	/** This agent's thumbprint; undefined when the client cannot know it. */
-	agent: string | undefined;
-	/** The agent_identity_hash the answer stated; "" or undefined when it stated none. */
-	stated: string | undefined;
-	keys: DeliveryKeyResolver;
-	/** The clock, epoch milliseconds. */
-	now: () => number;
-}
-
-/**
- * verifyDelivery checks one retrieval URL and returns the binding it verified, or throws
- * the typed refusal: `malformed` with a synthesized retrieval_auth_failure detail for a
- * URL that does not verify, `unreachable` when the Exchange's directory cannot be read.
- *
- * The binding rule: a URL carrying `agent_id` must name this agent, and an answer that
- * stated an agent_identity_hash must have bound the URL to exactly that. A bearer URL
- * (no `agent_id`) from an answer that stated none verifies, with `agentId` "".
- */
-export async function verifyDelivery(url: string, check: DeliveryCheck): Promise<Delivery> {
-	let unreachable: unknown;
-	let keyId = "";
-	let result: Awaited<ReturnType<typeof verifyEd25519SignedUrl>>;
-	try {
-		result = await verifyEd25519SignedUrl(url, {
-			now: check.now,
-			resolveKey: async (kid) => {
-				if (kid === undefined) return undefined;
-				keyId = kid;
-				let raw: Uint8Array | undefined;
-				try {
-					raw = await check.keys.resolve(kid, check.exchange);
-				} catch (cause) {
-					if (cause instanceof DirectoryUnavailable) unreachable = cause;
-					return undefined;
-				}
-				if (raw === undefined) return undefined;
-				return crypto.subtle.importKey("raw", new Uint8Array(raw), "Ed25519", false, [
-					"verify",
-				]);
-			},
-		});
-	} catch (cause) {
-		// A value that does not parse as a URL is a URL no Exchange signed.
-		throw refusal(check, "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH", cause);
-	}
-	if (unreachable !== undefined) {
-		throw new ForaCallError({
-			kind: "unreachable",
-			op: check.op,
-			cause: new Error(
-				`${check.subject}: the key directory of ${check.exchange} could not be read`,
-				{ cause: unreachable },
-			),
-		});
-	}
-	if (!result.valid) {
-		const reason = result.reason ?? "signature_mismatch";
-		throw refusal(check, REASON_OF[reason], new Error(reason));
-	}
-	const agentId = result.agentId ?? "";
-	if (agentId !== "" && check.agent !== undefined && agentId !== check.agent) {
-		throw refusal(
-			check,
-			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
-			new Error(`bound to ${agentId}, not to this agent (${check.agent})`),
-		);
-	}
-	const stated = check.stated ?? "";
-	if (stated !== "" && agentId !== stated) {
-		throw refusal(
-			check,
-			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
-			new Error(`bound to ${JSON.stringify(agentId)}, the answer stated ${stated}`),
-		);
-	}
-	return {
-		url,
-		exchange: check.exchange,
-		agentId,
-		keyId: result.kid ?? keyId,
-		expiresAt: new Date(Number(new URL(url).searchParams.get("exp")) * 1000),
-	};
-}
-
-function refusal(
-	check: DeliveryCheck,
-	reason: RetrievalAuthFailureReason,
-	cause: unknown,
-): ForaCallError {
-	const why = cause instanceof Error ? cause.message : String(cause);
-	return new ForaCallError({
-		kind: "malformed",
-		op: check.op,
-		cause: new Error(`${check.subject}: the delivery URL does not verify: ${why}`),
-		detail: retrievalAuthFailureDetail(
-			CLIENT_ERROR_DOMAIN,
-			"delivery URL failed the client's verification",
-			reason,
-		),
-	});
-}
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index f7e0b4e2..26dac23d 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -28,7 +28,6 @@ import { registrationFailureDetail } from "../src/errordetail.ts";
 import { checkAudience, hostOf } from "../src/hosts.ts";
 import { generateIdempotencyKey } from "../src/idempotency.ts";
 import { ProtocolVersion } from "../src/wire.ts";
-import { thumbprint } from "../src/thumbprint.ts";
 import {
 	BrokerTransactionResponseSchema,
 	DiscoveryRequestSchema,
@@ -53,7 +52,6 @@ import {
 	UsageReportResponseSchema,
 } from "../../../gen/ts/wire/schemas.ts";
 import { type Content, fetchContent } from "./content.ts";
-import { type Delivery, verifyDelivery } from "./delivery.ts";
 import { malformed, notSent, ForaCallError } from "./errors.ts";
 import { checkRegistrationData } from "../src/regschema.ts";
 import {
@@ -105,24 +103,6 @@ export type UsageReportResponse = z.infer<typeof UsageReportResponseSchema>;
 /** The answer to a dispute. */
 export type DisputeResponse = z.infer<typeof DisputeResponseSchema>;
 
-/**
- * A purchase's answer together with the delivery URLs this client verified.
- *
- * `deliveries` has one entry per result item, in item order: the verified binding of the
- * item's retrieval_endpoint, or undefined for an item that carries none (denied,
- * refused, or not delivered by signed URL). It is defined non-enumerable, so the object
- * still serializes as the wire message; it is empty when nothing was verified — a raw
- * call, or `deliveryVerification: "off"`.
- */
-export type ExecuteResult = TransactionResponse & {
-	readonly deliveries: readonly (Delivery | undefined)[];
-};
-/** The Broker's combined answer with the delivery URLs this client verified; see
- * {@link ExecuteResult}. */
-export type BrokerExecuteResult = BrokerTransactionResponse & {
-	readonly deliveries: readonly (Delivery | undefined)[];
-};
-
 /**
  * The request types a verb accepts, inferred from the generated schemas: the shape a
  * caller writes, with every defaulted field optional. Each verb also takes a plain record
@@ -143,22 +123,16 @@ export type RefreshCatalogRequest = z.input<typeof RefreshCatalogRequestSchema>;
  * RawBody sent as given. */
 type Request<T> = T | Record<string, unknown> | RawBody;
 
-/** Where fetch verifies a delivery URL. */
-export interface FetchOptions {
-	/** The Exchange that issued the URL. When set, the URL is verified against that
-	 * Exchange's URL-signing key before anything is sent. */
-	exchange?: string;
-}
-
 /** The agent-facing Exchange client. */
 export interface Client {
 	discover(query: Request<ResourceQuery>): Promise<DiscoveryResult>;
-	/** Buy one offer, or several issued by ONE Exchange, in one request. Every retrieval
-	 * URL in the answer is verified before it is returned. */
+	/** Buy one offer, or several issued by ONE Exchange, in one request. The retrieval
+	 * URLs in the answer are returned as the Exchange issued them; the delivery edge
+	 * verifies them. */
 	execute(
 		offer: VerifiedOffer | readonly VerifiedOffer[] | RawBody,
 		opts?: CallOptions,
-	): Promise<ExecuteResult>;
+	): Promise<TransactionResponse>;
 	reportUsage(report: Request<UsageReport>, opts?: CallOptions): Promise<UsageReportResponse>;
 	dispute(request: Request<DisputeRequest>, opts?: CallOptions): Promise<DisputeResponse>;
 	/** Create this agent's account at the Exchange the request names. Takes no
@@ -168,21 +142,21 @@ export interface Client {
 	/** Read whether this agent's account at the named Exchange is active. An empty
 	 * `billing_ref` is a NORMAL answer — no account there yet. */
 	getAccountStatus(request: Request<GetAccountStatusRequest>): Promise<GetAccountStatusResponse>;
-	/** Fetch what a delivery URL names. Given a Delivery, or a URL and the Exchange that
-	 * issued it, the URL is verified first and the result carries the binding. */
-	fetch(signedURL: string | Delivery, opts?: FetchOptions): Promise<Content>;
+	/** Fetch what a delivery URL names, presenting the agent's proof of possession. The URL
+	 * is taken as given; the delivery edge verifies it. */
+	fetch(signedURL: string): Promise<Content>;
 }
 
 /** The Broker client. */
 export interface BrokerClient {
 	resolve(request: Request<DiscoveryRequest>): Promise<DiscoveryResult>;
 	/** Buy offers from any number of Exchanges in one call; the Broker re-packages the
-	 * purchase into one sub-request per Exchange (BrokerService.ExecuteTransaction).
-	 * Every retrieval URL in the answer is verified against the Exchange that issued it. */
+	 * purchase into one sub-request per Exchange (BrokerService.ExecuteTransaction). The
+	 * retrieval URLs in the answer are returned as each Exchange issued them. */
 	execute(
 		offers: readonly VerifiedOffer[] | RawBody,
 		opts?: CallOptions,
-	): Promise<BrokerExecuteResult>;
+	): Promise<BrokerTransactionResponse>;
 }
 
 /**
@@ -202,7 +176,7 @@ export function createClient(baseURL: string, options: ClientOptions = {}): Clie
 		dispute: (request, opts) => dispute(r, request, opts ?? {}),
 		register: (request) => register(r, request),
 		getAccountStatus: (request) => getAccountStatus(r, request),
-		fetch: (signedURL, opts) => fetchVerb(r, signedURL, opts ?? {}),
+		fetch: (signedURL) => fetchVerb(r, signedURL),
 	};
 }
 
@@ -452,11 +426,11 @@ async function execute(
 	baseURL: string,
 	offer: VerifiedOffer | readonly VerifiedOffer[] | RawBody,
 	opts: CallOptions,
-): Promise<ExecuteResult> {
+): Promise<TransactionResponse> {
 	const op = "execute";
 	if (offer instanceof RawBody) {
 		const raw = await call(r, op, baseURL, EXCHANGE_SERVICE, "ExecuteTransaction", offer, false, "fora.v1.TransactionResponse");
-		return withDeliveries(parseMessage<TransactionResponse>(op, raw, TransactionResponseSchema), []);
+		return parseMessage<TransactionResponse>(op, raw, TransactionResponseSchema);
 	}
 	const offers: readonly VerifiedOffer[] = isOfferList(offer) ? offer : [offer];
 	requireOneExchange(op, offers);
@@ -472,12 +446,7 @@ async function execute(
 		false,
 		"fora.v1.TransactionResponse",
 	);
-	const msg = parseMessage<TransactionResponse>(op, raw, TransactionResponseSchema);
-	const items = (msg.items ?? []) as ResultItem[];
-	return withDeliveries(
-		msg,
-		await verifyDeliveries(r, op, offers, items, () => msg.agent_identity_hash ?? ""),
-	);
+	return parseMessage<TransactionResponse>(op, raw, TransactionResponseSchema);
 }
 
 /**
@@ -509,14 +478,11 @@ async function brokerExecute(
 	baseURL: string,
 	offers: readonly VerifiedOffer[] | RawBody,
 	opts: CallOptions,
-): Promise<BrokerExecuteResult> {
+): Promise<BrokerTransactionResponse> {
 	const op = "broker execute";
 	if (offers instanceof RawBody) {
 		const raw = await call(r, op, baseURL, BROKER_SERVICE, "ExecuteTransaction", offers, false, "fora.v1.BrokerTransactionResponse");
-		return withDeliveries(
-			parseMessage<BrokerTransactionResponse>(op, raw, BrokerTransactionResponseSchema),
-			[],
-		);
+		return parseMessage<BrokerTransactionResponse>(op, raw, BrokerTransactionResponseSchema);
 	}
 	if (r.opts.requester === undefined) {
 		throw malformed(
@@ -538,91 +504,7 @@ async function brokerExecute(
 		false,
 		"fora.v1.BrokerTransactionResponse",
 	);
-	const msg = parseMessage<BrokerTransactionResponse>(op, raw, BrokerTransactionResponseSchema);
-	const items = (msg.items ?? []) as ResultItem[];
-	// Each Exchange bound its own items, and states the binding on its own outcome.
-	const outcomes = (msg.exchanges ?? []) as { exchange?: string; agent_identity_hash?: string }[];
-	return withDeliveries(
-		msg,
-		await verifyDeliveries(r, op, offers, items, (exchange) =>
-			outcomes.find((o) => o.exchange === exchange)?.agent_identity_hash ?? "",
-		),
-	);
-}
-
-/** The result-item members delivery verification reads. */
-interface ResultItem {
-	offer_id?: string;
-	transaction_id?: string;
-	retrieval_endpoint?: string;
-	denial_reason?: string;
-	refusal?: unknown;
-}
-
-/**
- * verifyDeliveries checks every retrieval_endpoint in a purchase answer against the
- * Exchange that issued the matching offer, and returns the verified bindings in item
- * order. Item i answers request item i; when the counts differ the item is matched to its
- * offer by offer_id instead. `stated` gives the agent_identity_hash the answer stated for
- * an Exchange.
- */
-async function verifyDeliveries(
-	r: Resolved,
-	op: string,
-	offers: readonly VerifiedOffer[],
-	items: readonly ResultItem[],
-	stated: (exchange: string) => string,
-): Promise<(Delivery | undefined)[]> {
-	if ((r.opts.deliveryVerification ?? "strict") === "off") return [];
-	const agent = await agentThumbprint(r);
-	const now = r.opts.now ?? (() => Date.now());
-	const out: (Delivery | undefined)[] = [];
-	for (const [i, item] of items.entries()) {
-		const url = item.retrieval_endpoint;
-		if (typeof url !== "string" || url === "" || item.denial_reason !== undefined || item.refusal !== undefined) {
-			out.push(undefined);
-			continue;
-		}
-		const matched =
-			offers.length === items.length
-				? offers[i]
-				: offers.find((o) => stringField(offerRecord(o), "offer_id") === item.offer_id);
-		const exchange = matched === undefined ? "" : stringField(offerRecord(matched), "exchange");
-		out.push(
-			await verifyDelivery(url, {
-				op,
-				subject: `item ${i} (transaction ${JSON.stringify(item.transaction_id ?? "")})`,
-				exchange,
-				agent,
-				stated: stated(exchange),
-				keys: r.deliveryKeys,
-				now,
-			}),
-		);
-	}
-	return out;
-}
-
-/** This agent's identity as a delivery URL binds it: the thumbprint of the configured
- * public key, or the signer's keyid, which the protocol defines as that thumbprint. */
-async function agentThumbprint(r: Resolved): Promise<string | undefined> {
-	if (r.opts.agentPublicKey !== undefined) {
-		const raw = new Uint8Array(await crypto.subtle.exportKey("raw", r.opts.agentPublicKey));
-		return thumbprint(raw);
-	}
-	return r.opts.signer?.keyid;
-}
-
-/** Attach the verified bindings without making them part of the wire message. */
-function withDeliveries<T extends object>(
-	msg: T,
-	deliveries: (Delivery | undefined)[],
-): T & { readonly deliveries: readonly (Delivery | undefined)[] } {
-	Object.defineProperty(msg, "deliveries", {
-		value: Object.freeze(deliveries),
-		enumerable: false,
-	});
-	return msg as T & { readonly deliveries: readonly (Delivery | undefined)[] };
+	return parseMessage<BrokerTransactionResponse>(op, raw, BrokerTransactionResponseSchema);
 }
 
 function isOfferList(
@@ -1138,24 +1020,17 @@ async function applyRegistrationRequirements(
  * does not discover, select, buy or report — that orchestration is a separate, higher
  * tier.
  *
- * Given a Delivery — what execute verified — or a URL plus the Exchange that issued it,
- * the URL is verified before anything is sent: its signature against that Exchange's
- * URL-signing key, its binding to this agent, its expiry. A URL that does not verify is
- * refused as `malformed` with a retrieval_auth_failure detail, and the returned Content
- * carries the verified binding. A bare URL with no Exchange is fetched as given, with no
- * binding, as it is under `deliveryVerification: "off"`.
+ * The URL is taken as given. Verifying it is the delivery edge's job: the edge checks the
+ * URL signature and, where it can, the agent binding against the proof presented here. An
+ * edge that cannot check the binding (CloudFront with its pre-arranged RSA key pair)
+ * checks its own signature and treats the URL as a bearer token. An edge refusal comes
+ * back as a ForaCallError carrying a retrieval_auth_failure detail with the edge's reason.
  *
  * It takes no CallOptions: a fetch is a GET against an already-issued URL, so there is no
  * idempotency key to pin — nothing on this path mutates state.
  */
-async function fetchVerb(
-	r: Resolved,
-	target: string | Delivery,
-	opts: FetchOptions,
-): Promise<Content> {
+async function fetchVerb(r: Resolved, signedURL: string): Promise<Content> {
 	const op = "fetch content";
-	const signedURL = typeof target === "string" ? target : target.url;
-	const exchange = typeof target === "string" ? opts.exchange : target.exchange;
 	if (r.opts.signer === undefined) {
 		throw new ForaCallError({
 			kind: "not_signable",
@@ -1176,19 +1051,7 @@ async function fetchVerb(
 			),
 		});
 	}
-	let binding: Delivery | undefined;
-	if (exchange !== undefined && (r.opts.deliveryVerification ?? "strict") === "strict") {
-		binding = await verifyDelivery(signedURL, {
-			op,
-			subject: "the delivery URL",
-			exchange,
-			agent: await agentThumbprint(r),
-			stated: undefined,
-			keys: r.deliveryKeys,
-			now: r.opts.now ?? (() => Date.now()),
-		});
-	}
-	const content = await fetchContent(signedURL, {
+	return fetchContent(signedURL, {
 		// One private key, held by the signer. The public half rides alongside because
 		// custody keeps the private one and a CryptoKey cannot be asked for its pair.
 		keyPair: { privateKey: r.opts.signer.privKey, publicKey: r.opts.agentPublicKey },
@@ -1205,7 +1068,6 @@ async function fetchVerb(
 			: {}),
 		...(r.opts.requestId !== undefined ? { requestId: r.opts.requestId } : {}),
 	});
-	return binding === undefined ? content : { ...content, binding };
 }
 
 // ---------------------------------------------------------------------------
@@ -1308,7 +1170,6 @@ async function catalogCall<T>(
 export { ForaCallError } from "./errors.ts";
 export type { CallErrorKind } from "./errors.ts";
 export type { Content } from "./content.ts";
-export type { Delivery, DeliveryKeyResolver } from "./delivery.ts";
 export type { EndpointResolver } from "./route.ts";
 export type { CallOptions, ClientOptions, RegistrationRequirementsReader } from "./options.ts";
 export { RawBody } from "./raw.ts";
diff --git a/sdk/ts/client/options.ts b/sdk/ts/client/options.ts
index 88f35d85..d51137f5 100644
--- a/sdk/ts/client/options.ts
+++ b/sdk/ts/client/options.ts
@@ -6,11 +6,9 @@
 import { createVerifier, type Mode, type Verifier } from "../core/verifier.ts";
 import type { Window } from "../core/window.ts";
 import {
-	createWBAKeyResolver,
 	createWellKnownRequirementsReader,
 	type RegistrationRequirements,
 } from "../resolvers/index.ts";
-import type { DeliveryKeyResolver } from "./delivery.ts";
 import type { EndpointResolver } from "./route.ts";
 import { createUnarySend } from "./send.ts";
 import { refuseUnlessStrict } from "./strict.ts";
@@ -129,8 +127,7 @@ export interface ClientOptions {
 	callTimeoutMs?: number;
 	contentTimeoutMs?: number;
 	maxContentBytes?: number;
-	/** The clock the offer Verifier reads, in epoch milliseconds. Delivery verification
-	 * reads it too, for a retrieval URL's expiry. */
+	/** The clock the offer Verifier reads, in epoch milliseconds. */
 	now?: () => number;
 	/** Called with every RPC request just before it is signed; the request it returns is
 	 * what gets signed and sent. See {@link BeforeSign}. */
@@ -145,14 +142,6 @@ export interface ClientOptions {
 	 * Defaults to false: the generated schemas drop unknown fields, which keeps a client
 	 * working against a newer Exchange. */
 	strict?: boolean;
-	/** Resolves an Exchange's URL-signing key for delivery verification. Defaults to the
-	 * WBA resolver over the SSRF-guarded transport, built once with this client: the keys
-	 * come from the issuing Exchange's own key directory. */
-	deliveryKeys?: DeliveryKeyResolver;
-	/** Whether execute and fetch verify a retrieval URL's signature, agent binding and
-	 * expiry. Defaults to "strict"; "off" skips it — for a site whose delivery URLs use a
-	 * scheme other than the protocol's Ed25519 signed URL. */
-	deliveryVerification?: Mode;
 }
 
 /** Tunes a single state-mutating call. */
@@ -182,9 +171,6 @@ export interface Resolved {
 	 * one per registration and close none. */
 	requirements: RegistrationRequirementsReader;
 	signer: CallSigner | undefined;
-	/** The delivery-key seam, default built once with the client for the reason the
-	 * requirements reader is. */
-	deliveryKeys: DeliveryKeyResolver;
 }
 
 export function resolve(opts: ClientOptions): Resolved {
@@ -214,7 +200,6 @@ export function resolve(opts: ClientOptions): Resolved {
 		requirements:
 			opts.registrationRequirements ?? createWellKnownRequirementsReader(),
 		signer,
-		deliveryKeys: opts.deliveryKeys ?? createWBAKeyResolver(),
 	};
 }
 
diff --git a/sdk/ts/client/raw.ts b/sdk/ts/client/raw.ts
index 8051fa40..1a7c8976 100644
--- a/sdk/ts/client/raw.ts
+++ b/sdk/ts/client/raw.ts
@@ -22,8 +22,7 @@
  * getAccountStatus) still reads it from the body, parsed as JSON, and resolves it through
  * that Exchange's manifest as usual: the destination of a signed request is not a property
  * of the message to waive. A body with no usable `exchange` is refused as `not_sent`,
- * because there is nothing to dial. `execute` in raw mode decodes the reply and verifies
- * no delivery URL: there are no verified offers to tie them to.
+ * because there is nothing to dial.
  */
 export class RawBody {
 	constructor(readonly body: Uint8Array | string | unknown) {}
diff --git a/sdk/ts/tests/delivery-left-to-edge.test.ts b/sdk/ts/tests/delivery-left-to-edge.test.ts
new file mode 100644
index 00000000..4a37dac9
--- /dev/null
+++ b/sdk/ts/tests/delivery-left-to-edge.test.ts
@@ -0,0 +1,155 @@
+// Delivery URLs are checked by the delivery edge, not by the agent's client.
+//
+// The edge verifies the URL signature and, where it can, the agent binding against the
+// proof of possession the agent presents. An edge that cannot check the binding
+// (CloudFront with its pre-arranged RSA key pair) checks its own signature and treats the
+// URL as a bearer token. So execute and BrokerClient.execute return every URL exactly as
+// the Exchange issued it, even one this client could not read, and fetch dials a URL as
+// given with the proof attached. By the time the answer arrives the Exchange has charged,
+// and refusing it locally would lose the purchase answer.
+//
+// The purchase verbs run through the injected send, as the other execute tests do; fetch
+// dials a real loopback server.
+import { createServer, type IncomingHttpHeaders } from "node:http";
+import { describe, expect, it } from "vitest";
+
+import { createBrokerClient, createClient, type ClientOptions } from "../client/index.ts";
+import { createVerifier, type VerifiedOffer } from "../core/verifier.ts";
+import { signOffer } from "../src/offer-sign.ts";
+import { signEd25519SignedUrl } from "../src/signurl.ts";
+
+const REQUESTER = { id: "agent-1", domain: "agent.test", type: "REQUESTER_TYPE_AGENT" };
+const CLOUDFRONT_QUERY = "?Expires=4102444800&Signature=c2lnbmF0dXJl&Key-Pair-Id=K2JCJMDEHXQW5F";
+/** A CloudFront RSA signed URL: no kid, no agent_id, a signature no Ed25519 check reads. */
+const CLOUDFRONT_URL = `https://d111111abcdef8.cloudfront.net/content/asset-2${CLOUDFRONT_QUERY}`;
+
+async function keyPair(): Promise<CryptoKeyPair> {
+	return (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
+		"sign",
+		"verify",
+	])) as CryptoKeyPair;
+}
+
+/** Signed by a key no directory publishes, bound to another agent, already expired. */
+async function unverifiableURL(): Promise<string> {
+	return signEd25519SignedUrl(
+		"https://edge.example/content/asset-1",
+		{ kid: "unknown-key", agentId: "someone-else", expUnix: 1 },
+		(await keyPair()).privateKey,
+	);
+}
+
+async function offerAt(id: string, exchange: string): Promise<VerifiedOffer> {
+	const kp = await keyPair();
+	const publicKey = new Uint8Array(
+		await crypto.subtle.exportKey("raw", kp.publicKey),
+	) as Uint8Array<ArrayBuffer>;
+	const unsigned: Record<string, unknown> = {
+		offer_id: id,
+		exchange,
+		expires_at: "2099-01-01T00:00:00Z",
+	};
+	const offer = {
+		...unsigned,
+		signature: await signOffer(unsigned, kp.privateKey),
+		signature_algorithm: "EdDSA",
+	};
+	const sorted = await createVerifier("strict", {
+		resolve: async () => publicKey,
+		now: () => Date.parse("2024-01-01T00:00:00Z"),
+	}).sort([offer]);
+	const verified = sorted.verified[0];
+	if (verified === undefined) throw new Error("fixture offer did not verify");
+	return verified;
+}
+
+async function options(answer: unknown, sent: { count: number }): Promise<ClientOptions> {
+	const keys = await keyPair();
+	return {
+		requester: REQUESTER,
+		signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+		agentPublicKey: keys.publicKey,
+		signatureAgent: "https://agent.test",
+		send: async () => {
+			sent.count++;
+			return { status: 200, body: JSON.stringify(answer) };
+		},
+	};
+}
+
+function items(urls: string[]) {
+	return urls.map((url, i) => ({
+		offer_id: `offer-${i}`,
+		transaction_id: `tx-${i}`,
+		retrieval_endpoint: url,
+	}));
+}
+
+describe("a purchase returns every delivery URL as issued", () => {
+	it("Client.execute", async () => {
+		const urls = [await unverifiableURL(), CLOUDFRONT_URL];
+		const sent = { count: 0 };
+		const answer = { ver: "1.0", agent_identity_hash: "agent-thumbprint", items: items(urls) };
+		const client = createClient("https://exchange.test", await options(answer, sent));
+		const offers = [await offerAt("offer-0", "exchange.test"), await offerAt("offer-1", "exchange.test")];
+
+		const result = await client.execute(offers);
+
+		expect(result.items?.map((i) => i.retrieval_endpoint)).toEqual(urls);
+		// One round trip, the purchase: no key directory is read.
+		expect(sent.count).toBe(1);
+	});
+
+	it("BrokerClient.execute", async () => {
+		const urls = [await unverifiableURL(), CLOUDFRONT_URL];
+		const sent = { count: 0 };
+		const answer = {
+			ver: "1.0",
+			items: items(urls),
+			exchanges: [
+				{ exchange: "exchange-a.test", offer_ids: ["offer-0"] },
+				{ exchange: "exchange-b.test", offer_ids: ["offer-1"] },
+			],
+		};
+		const client = createBrokerClient("https://broker.test", await options(answer, sent));
+		const offers = [await offerAt("offer-0", "exchange-a.test"), await offerAt("offer-1", "exchange-b.test")];
+
+		const result = await client.execute(offers);
+
+		expect(result.items?.map((i) => i.retrieval_endpoint)).toEqual(urls);
+		expect(sent.count).toBe(1);
+	});
+});
+
+describe("fetch dials the URL as given with the agent's proof", () => {
+	it("sends a CloudFront URL to the edge, proof attached", async () => {
+		const seen: { url?: string | undefined; headers?: IncomingHttpHeaders } = {};
+		const server = createServer((req, res) => {
+			seen.url = req.url;
+			seen.headers = req.headers;
+			res.writeHead(200, { "content-type": "text/plain" });
+			res.end("body");
+		});
+		await new Promise<void>((done) => server.listen(0, "127.0.0.1", () => done()));
+		const port = (server.address() as { port: number }).port;
+		const saved = [process.env["SKIP_SSRF"], process.env["ALLOW_INSECURE"]];
+		process.env["SKIP_SSRF"] = "true";
+		process.env["ALLOW_INSECURE"] = "true";
+		try {
+			const client = createClient("https://exchange.test", await options({}, { count: 0 }));
+			const content = await client.fetch(
+				`http://127.0.0.1:${port}/content/asset-2${CLOUDFRONT_QUERY}`,
+			);
+			expect(new TextDecoder().decode(content.body)).toBe("body");
+			expect(seen.url).toBe(`/content/asset-2${CLOUDFRONT_QUERY}`);
+			expect(seen.headers?.["x-fora-agent-key"]).toBeTruthy();
+			expect(seen.headers?.["signature"]).toBeTruthy();
+		} finally {
+			if (saved[0] === undefined) delete process.env["SKIP_SSRF"];
+			else process.env["SKIP_SSRF"] = saved[0];
+			if (saved[1] === undefined) delete process.env["ALLOW_INSECURE"];
+			else process.env["ALLOW_INSECURE"] = saved[1];
+			server.close();
+		}
+	});
+});
diff --git a/sdk/ts/tests/delivery-verification.test.ts b/sdk/ts/tests/delivery-verification.test.ts
deleted file mode 100644
index cc44c038..00000000
--- a/sdk/ts/tests/delivery-verification.test.ts
+++ /dev/null
@@ -1,362 +0,0 @@
-// Delivery verification: execute, BrokerClient.execute and fetch check a retrieval URL's
-// signature, its agent binding and its expiry before handing it back or dialling it.
-//
-// The Exchange's URL-signing key is resolved from its Web Bot Auth key directory by the
-// SDK's own WBA resolver, over an injected fetch that serves the directory this test
-// builds with directoryDocument. The purchase verbs run through the injected send, as the
-// other execute tests do; fetch dials a real loopback server.
-import { createServer } from "node:http";
-import { describe, expect, it } from "vitest";
-
-import {
-	createBrokerClient,
-	createClient,
-	ForaCallError,
-	type ClientOptions,
-	type Delivery,
-} from "../client/index.ts";
-import { directoryDocument } from "../core/identity.ts";
-import { createVerifier, type VerifiedOffer } from "../core/verifier.ts";
-import { reason } from "../src/errordetail.ts";
-import { signOffer } from "../src/offer-sign.ts";
-import { signEd25519SignedUrl } from "../src/signurl.ts";
-import { thumbprint } from "../src/thumbprint.ts";
-import { createWBAKeyResolver } from "../resolvers/index.ts";
-import { WBA_DIRECTORY_PATH } from "../resolvers/wba.ts";
-
-const REQUESTER = { id: "agent-1", domain: "agent.test", type: "REQUESTER_TYPE_AGENT" };
-const HOUR = 3600;
-
-async function keyPair(): Promise<CryptoKeyPair> {
-	return (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
-		"sign",
-		"verify",
-	])) as CryptoKeyPair;
-}
-
-async function thumbprintOf(key: CryptoKey): Promise<string> {
-	return thumbprint(new Uint8Array(await crypto.subtle.exportKey("raw", key)));
-}
-
-/** An Exchange: its offer key, its URL-signing key published in its directory. */
-async function exchangeAt(domain: string) {
-	const urlKey = await keyPair();
-	return { domain, urlKey, kid: await thumbprintOf(urlKey.publicKey) };
-}
-type Exchange = Awaited<ReturnType<typeof exchangeAt>>;
-
-/** The key resolver a client uses: the SDK's WBA resolver over directories served here. */
-function keysFor(exchanges: Exchange[], status = 200) {
-	return createWBAKeyResolver({
-		scheme: "https",
-		fetch: async (url) => {
-			const ex = exchanges.find((e) => url === `https://${e.domain}${WBA_DIRECTORY_PATH}`);
-			const body = ex === undefined ? "" : JSON.stringify(await directoryDocument([ex.urlKey.publicKey]));
-			return { status: ex === undefined ? 404 : status, text: async () => body };
-		},
-	});
-}
-
-async function offerAt(id: string, exchange: string): Promise<VerifiedOffer> {
-	const kp = await keyPair();
-	const publicKey = new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey)) as Uint8Array<ArrayBuffer>;
-	const unsigned: Record<string, unknown> = { offer_id: id, exchange, expires_at: "2099-01-01T00:00:00Z" };
-	const offer = { ...unsigned, signature: await signOffer(unsigned, kp.privateKey), signature_algorithm: "EdDSA" };
-	const sorted = await createVerifier("strict", {
-		resolve: async () => publicKey,
-		now: () => Date.parse("2024-01-01T00:00:00Z"),
-	}).sort([offer]);
-	const verified = sorted.verified[0];
-	if (verified === undefined) throw new Error("fixture offer did not verify");
-	return verified;
-}
-
-/** A retrieval URL the Exchange signed, bound to `agentId` ("" for bearer). */
-async function signedURL(
-	ex: Exchange,
-	agentId: string,
-	opts: { base?: string; expUnix?: number; key?: CryptoKey; kid?: string } = {},
-): Promise<string> {
-	return signEd25519SignedUrl(
-		opts.base ?? "https://edge.test/content/1",
-		{
-			kid: opts.kid ?? ex.kid,
-			agentId,
-			expUnix: opts.expUnix ?? Math.floor(Date.now() / 1000) + HOUR,
-		},
-		opts.key ?? ex.urlKey.privateKey,
-	);
-}
-
-async function agent() {
-	const keys = await keyPair();
-	return { keys, id: await thumbprintOf(keys.publicKey) };
-}
-type Agent = Awaited<ReturnType<typeof agent>>;
-
-function options(a: Agent, answer: unknown, extra: ClientOptions = {}): ClientOptions {
-	return {
-		requester: REQUESTER,
-		signer: { privKey: a.keys.privateKey, keyid: "agent.v1" },
-		agentPublicKey: a.keys.publicKey,
-		signatureAgent: "https://agent.test",
-		send: async () => ({ status: 200, body: JSON.stringify(answer) }),
-		...extra,
-	};
-}
-
-function answerWith(url: string | undefined, hash: string, extra: Record<string, unknown> = {}) {
-	return {
-		ver: "1.0",
-		agent_identity_hash: hash,
-		items: [
-			{
-				offer_id: "offer-1",
-				transaction_id: "tx-1",
-				...(url === undefined ? {} : { retrieval_endpoint: url }),
-				...extra,
-			},
-		],
-	};
-}
-
-async function refusal(p: Promise<unknown>): Promise<ForaCallError> {
-	try {
-		await p;
-	} catch (e) {
-		expect(e).toBeInstanceOf(ForaCallError);
-		return e as ForaCallError;
-	}
-	throw new Error("the call did not fail");
-}
-
-function reasonOf(f: ForaCallError): string | undefined {
-	return f.detail === undefined ? undefined : reason(f.detail)?.value;
-}
-
-describe("execute verifies every retrieval URL", () => {
-	it("returns the verified binding beside the answer, outside the wire message", async () => {
-		const ex = await exchangeAt("exchange-a.test");
-		const a = await agent();
-		const url = await signedURL(ex, a.id);
-		const offer = await offerAt("offer-1", ex.domain);
-		const client = createClient("https://exchange-a.test", options(a, answerWith(url, a.id), { deliveryKeys: keysFor([ex]) }));
-		const result = await client.execute(offer);
-		const d = result.deliveries[0] as Delivery;
-		expect(d.url).toBe(url);
-		expect(d.exchange).toBe(ex.domain);
-		expect(d.agentId).toBe(a.id);
-		expect(d.keyId).toBe(ex.kid);
-		expect(d.expiresAt.getTime()).toBe(Number(new URL(url).searchParams.get("exp")) * 1000);
-		expect(JSON.stringify(result)).not.toContain("deliveries");
-		expect(result.items?.[0]?.retrieval_endpoint).toBe(url);
-	});
-
-	it("verifies a bearer URL from an answer that stated no binding", async () => {
-		const ex = await exchangeAt("exchange-a.test");
-		const a = await agent();
-		const url = await signedURL(ex, "");
-		const client = createClient("https://exchange-a.test", options(a, answerWith(url, ""), { deliveryKeys: keysFor([ex]) }));
-		const result = await client.execute(await offerAt("offer-1", ex.domain));
-		expect(result.deliveries[0]?.agentId).toBe("");
-	});
-
-	it("leaves an item without a retrieval URL unverified", async () => {
-		const ex = await exchangeAt("exchange-a.test");
-		const a = await agent();
-		const client = createClient(
-			"https://exchange-a.test",
-			options(a, answerWith(undefined, a.id, { denial_reason: "DENIAL_REASON_RATE_LIMITED" }), {
-				deliveryKeys: keysFor([ex]),
-			}),
-		);
-		const result = await client.execute(await offerAt("offer-1", ex.domain));
-		expect(result.deliveries).toEqual([undefined]);
-	});
-
-	const refused: [string, (ex: Exchange, a: Agent, other: Exchange) => Promise<{ url: string; hash: string }>, string][] = [
-		[
-			"a signature another key made",
-			async (ex, a, other) => ({ url: await signedURL(ex, a.id, { key: other.urlKey.privateKey }), hash: a.id }),
-			"RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
-		],
-		[
-			"a key the Exchange's directory does not publish",
-			async (ex, a, other) => ({ url: await signedURL(ex, a.id, { key: other.urlKey.privateKey, kid: other.kid }), hash: a.id }),
-			"RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH",
-		],
-		[
-			"a URL bound to another agent",
-			async (ex) => {
-				const other = await agent();
-				return { url: await signedURL(ex, other.id), hash: other.id };
-			},
-			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
-		],
-		[
-			"a bearer URL from an answer that stated a binding",
-			async (ex, a) => ({ url: await signedURL(ex, ""), hash: a.id }),
-			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
-		],
-		[
-			"a URL bound to this agent while the answer stated another",
-			async (ex, a) => ({ url: await signedURL(ex, a.id), hash: (await agent()).id }),
-			"RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH",
-		],
-		[
-			"an expired URL",
-			async (ex, a) => ({ url: await signedURL(ex, a.id, { expUnix: Math.floor(Date.now() / 1000) - 10 }), hash: a.id }),
-			"RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED",
-		],
-		[
-			"a URL with no signature",
-			async () => ({ url: "https://edge.test/content/1?exp=99999999999", hash: "" }),
-			"RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING",
-		],
-		[
-			"a URL with no expiry",
-			async (ex, a) => {
-				const url = new URL(await signedURL(ex, a.id));
-				url.searchParams.delete("exp");
-				return { url: url.toString(), hash: a.id };
-			},
-			"RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING",
-		],
-	];
-	for (const [label, build, want] of refused) {
-		it(`refuses ${label}`, async () => {
-			const ex = await exchangeAt("exchange-a.test");
-			const other = await exchangeAt("exchange-b.test");
-			const a = await agent();
-			const { url, hash } = await build(ex, a, other);
-			const client = createClient("https://exchange-a.test", options(a, answerWith(url, hash), { deliveryKeys: keysFor([ex, other]) }));
-			const f = await refusal(client.execute(await offerAt("offer-1", ex.domain)));
-			expect(f.kind).toBe("malformed");
-			expect(reasonOf(f)).toBe(want);
-			expect(f.detail?.domain).toBe("fora.v1.Client");
-			expect(f.message).toContain("tx-1");
-		});
-	}
-
-	it("reports a directory it cannot read as unreachable", async () => {
-		const ex = await exchangeAt("exchange-a.test");
-		const a = await agent();
-		const url = await signedURL(ex, a.id);
-		const client = createClient("https://exchange-a.test", options(a, answerWith(url, a.id), { deliveryKeys: keysFor([ex], 503) }));
-		const f = await refusal(client.execute(await offerAt("offer-1", ex.domain)));
-		expect(f.kind).toBe("unreachable");
-	});
-
-	it("skips verification under deliveryVerification: off", async () => {
-		const a = await agent();
-		const client = createClient(
-			"https://exchange-a.test",
-			options(a, answerWith("https://edge.test/not-signed", a.id), { deliveryVerification: "off" }),
-		);
-		const result = await client.execute(await offerAt("offer-1", "exchange-a.test"));
-		expect(result.deliveries).toEqual([]);
-	});
-});
-
-describe("BrokerClient.execute verifies each URL against the Exchange that issued it", () => {
-	async function broker(badSecond: boolean) {
-		const exA = await exchangeAt("exchange-a.test");
-		const exB = await exchangeAt("exchange-b.test");
-		const a = await agent();
-		const answer = {
-			ver: "1.0",
-			items: [
-				{ offer_id: "offer-a", transaction_id: "tx-a", retrieval_endpoint: await signedURL(exA, a.id) },
-				{
-					offer_id: "offer-b",
-					transaction_id: "tx-b",
-					// Signed with exchange A's key: valid for A, not for B, which issued the offer.
-					retrieval_endpoint: await signedURL(badSecond ? exA : exB, a.id, badSecond ? { kid: exB.kid } : {}),
-				},
-			],
-			exchanges: [
-				{ exchange: exA.domain, offer_ids: ["offer-a"], agent_identity_hash: a.id },
-				{ exchange: exB.domain, offer_ids: ["offer-b"], agent_identity_hash: a.id },
-			],
-		};
-		const client = createBrokerClient("https://broker.test", options(a, answer, { deliveryKeys: keysFor([exA, exB]) }));
-		const offers = [await offerAt("offer-a", exA.domain), await offerAt("offer-b", exB.domain)];
-		return { client, offers, exA, exB };
-	}
-
-	it("verifies each item against its own Exchange's key", async () => {
-		const { client, offers, exA, exB } = await broker(false);
-		const result = await client.execute(offers);
-		expect(result.deliveries.map((d) => d?.exchange)).toEqual([exA.domain, exB.domain]);
-		expect(result.deliveries.map((d) => d?.keyId)).toEqual([exA.kid, exB.kid]);
-	});
-
-	it("refuses a URL another Exchange's key signed", async () => {
-		const { client, offers } = await broker(true);
-		const f = await refusal(client.execute(offers));
-		expect(reasonOf(f)).toBe("RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH");
-		expect(f.message).toContain("tx-b");
-	});
-});
-
-describe("fetch verifies the URL when it knows the Exchange", () => {
-	async function withEdge<T>(run: (origin: string, hits: () => number) => Promise<T>): Promise<T> {
-		let hits = 0;
-		const server = createServer((_req, res) => {
-			hits++;
-			res.writeHead(200, { "content-type": "text/plain" });
-			res.end("body");
-		});
-		await new Promise<void>((done) => server.listen(0, "127.0.0.1", () => done()));
-		const port = (server.address() as { port: number }).port;
-		const saved = [process.env["SKIP_SSRF"], process.env["ALLOW_INSECURE"]];
-		process.env["SKIP_SSRF"] = "true";
-		process.env["ALLOW_INSECURE"] = "true";
-		try {
-			return await run(`http://127.0.0.1:${port}`, () => hits);
-		} finally {
-			if (saved[0] === undefined) delete process.env["SKIP_SSRF"];
-			else process.env["SKIP_SSRF"] = saved[0];
-			if (saved[1] === undefined) delete process.env["ALLOW_INSECURE"];
-			else process.env["ALLOW_INSECURE"] = saved[1];
-			server.close();
-		}
-	}
-
-	it("verifies a Delivery and returns its binding with the content", async () => {
-		const ex = await exchangeAt("exchange-a.test");
-		const a = await agent();
-		await withEdge(async (origin) => {
-			const url = await signedURL(ex, a.id, { base: `${origin}/content/1` });
-			const client = createClient("https://exchange-a.test", options(a, {}, { deliveryKeys: keysFor([ex]) }));
-			const delivery: Delivery = { url, exchange: ex.domain, agentId: a.id, keyId: ex.kid, expiresAt: new Date() };
-			const content = await client.fetch(delivery);
-			expect(new TextDecoder().decode(content.body)).toBe("body");
-			expect(content.binding?.agentId).toBe(a.id);
-			expect(content.binding?.exchange).toBe(ex.domain);
-		});
-	});
-
-	it("refuses a URL bound to another agent without dialling it", async () => {
-		const ex = await exchangeAt("exchange-a.test");
-		const a = await agent();
-		await withEdge(async (origin, hits) => {
-			const url = await signedURL(ex, (await agent()).id, { base: `${origin}/content/1` });
-			const client = createClient("https://exchange-a.test", options(a, {}, { deliveryKeys: keysFor([ex]) }));
-			const f = await refusal(client.fetch(url, { exchange: ex.domain }));
-			expect(f.kind).toBe("malformed");
-			expect(reasonOf(f)).toBe("RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH");
-			expect(hits()).toBe(0);
-		});
-	});
-
-	it("fetches a bare URL as given, with no binding", async () => {
-		const a = await agent();
-		await withEdge(async (origin, hits) => {
-			const client = createClient("https://exchange-a.test", options(a, {}));
-			const content = await client.fetch(`${origin}/content/unsigned`);
-			expect(content.binding).toBeUndefined();
-			expect(hits()).toBe(1);
-		});
-	});
-});
diff --git a/sdk/ts/tests/raw-body.test.ts b/sdk/ts/tests/raw-body.test.ts
index 9cfb769c..846b4f2a 100644
--- a/sdk/ts/tests/raw-body.test.ts
+++ b/sdk/ts/tests/raw-body.test.ts
@@ -94,7 +94,7 @@ describe("RawBody", () => {
 		expect((failure as ForaCallError).kind).toBe("not_sent");
 	});
 
-	it("replaces the offers of a purchase, and verifies no delivery", async () => {
+	it("replaces the offers of a purchase", async () => {
 		const answer = {
 			ver: "1.0",
 			items: [{ offer_id: "o-1", transaction_id: "tx-1", retrieval_endpoint: "https://edge.test/x" }],
@@ -107,11 +107,10 @@ describe("RawBody", () => {
 		);
 		expect(peer.only().body).toBe('{"items":[]}');
 		expect(result.items?.[0]?.transaction_id).toBe("tx-1");
-		expect(result.deliveries).toEqual([]);
 		const broker = await createBrokerClient("https://broker.test", options).execute(
 			new RawBody("{}"),
 		);
-		expect(broker.deliveries).toEqual([]);
+		expect(broker.ver).toBe("1.0");
 	});
 
 	it("passes through the pre-signing hook", async () => {

From 65d52cf23f7d44bb728dfa8039436c914d3689b2 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:30:11 -0400
Subject: [PATCH 052/164] Unmap the delivery verification symbols and
 regenerate the parity matrix

connect.Delivery, mapped to Delivery in Python and TypeScript, and the
four Go-idiomatic exclusions for WithDeliveries, WithDeliveryExchange,
WithDeliveryKeyResolver and WithDeliveryVerification leave the parity
map with the symbols themselves. The matrix now counts 175 symbols at
parity and 195 Go-idiomatic exclusions; the documented divergences stay
at 17.
---
 docs/sdk-parity-matrix.md  | 7 +------
 sdk/parity/symbol-map.json | 9 ---------
 2 files changed, 1 insertion(+), 15 deletions(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index ee271363..b3ba9358 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 176 symbols at cross-language parity · 17 documented divergences · 199 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
+**At a glance:** 175 symbols at cross-language parity · 17 documented divergences · 195 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -206,7 +206,6 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `Client` | `Client` | `Client` |
 | `DefaultCallTimeout` | `DEFAULT_CALL_TIMEOUT_SEC` | `DEFAULT_CALL_TIMEOUT_MS` |
 | `DefaultMaxRPCReadBytes` | `DEFAULT_MAX_RPC_READ_BYTES` | `DEFAULT_MAX_RPC_READ_BYTES` |
-| `Delivery` | `Delivery` | `Delivery` |
 | `EndpointResolver` | `EndpointResolver` | `EndpointResolver` |
 | `ErrorDetailFrom` | `error_detail_from` | `errorDetailFrom` |
 | `RegistrationRequirementsReader` | `RegistrationRequirementsReader` | `RegistrationRequirementsReader` |
@@ -279,10 +278,6 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `connect.WithBeforeSign` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithClientOptions` | Go escape hatch for raw connectrpc.ClientOption values, mirroring connectserver.WithHandlerOptions; py/ts have no Connect option type to pass through. |
 | `connect.WithContentTimeout` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
-| `connect.WithDeliveries` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
-| `connect.WithDeliveryExchange` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
-| `connect.WithDeliveryKeyResolver` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
-| `connect.WithDeliveryVerification` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithEndpointResolver` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithGuardedBaseTransport` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `connect.WithHTTPClient` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 6864a732..2fc1b7ce 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -18,10 +18,6 @@
     "connect.WithBeforeSign": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithClientOptions": "Go escape hatch for raw connectrpc.ClientOption values, mirroring connectserver.WithHandlerOptions; py/ts have no Connect option type to pass through.",
     "connect.WithContentTimeout": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
-    "connect.WithDeliveries": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
-    "connect.WithDeliveryExchange": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
-    "connect.WithDeliveryKeyResolver": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
-    "connect.WithDeliveryVerification": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithEndpointResolver": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithGuardedBaseTransport": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "connect.WithHTTPClient": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
@@ -247,11 +243,6 @@
       "python": "DEFAULT_MAX_RPC_READ_BYTES",
       "ts": "DEFAULT_MAX_RPC_READ_BYTES"
     },
-    "connect.Delivery": {
-      "allowlist_reason": null,
-      "python": "Delivery",
-      "ts": "Delivery"
-    },
     "connect.EndpointResolver": {
       "allowlist_reason": null,
       "python": "EndpointResolver",

From ddc2d39c7a6b71f9f4763d2357262d28547ddb70 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:30:11 -0400
Subject: [PATCH 053/164] Describe delivery URL verification as the edge's job
 in the docs and changelogs

The agent SDK overview said both execute verbs verify every retrieval
URL before handing it back, and that fetch repeats the check. It now
says the purchase verbs return each URL as the Exchange issued it and
fetch dials it as given with the agent's proof of possession, and
explains why the client does not check it first: the Exchange has
already charged when the answer arrives, and a client cannot read
every URL an edge accepts, a CloudFront RSA signed URL for one. The
harness table drops the verified-binding row, and the rule that
delivery verification is on by default becomes the rule that the edge
checks the URL.

The fetch flow no longer verifies the URL at the execute step and says
the edge verifies it on the fetch. Its Go example buys and fetches
without WithDeliveries and WithDeliveryExchange, the Broker section
drops the client-side check, and the CallMalformed row and the
ErrorDetailFrom note no longer describe an unverifiable delivery URL.

The Unreleased entry in both changelogs replaces the delivery
verification item: verifying a retrieval URL in the agent SDKs was
considered and left to the delivery edge, with the reasons.
---
 proto/CHANGELOG.md                            | 24 ++++++-------
 .../docs/components/agent-sdk/fetch-flow.mdx  | 34 ++++++++-----------
 .../docs/components/agent-sdk/overview.mdx    | 21 ++++++------
 .../src/content/docs/reference/changelog.mdx  | 24 ++++++-------
 4 files changed, 45 insertions(+), 58 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index bb6df062..e87fab9d 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -197,20 +197,16 @@ request only where it means to, and check every answer through the SDK's own dec
   (Go). `connect-error-vectors.json` now pins the code and the whole detail, including
   rows carrying only `value`, and the new `error-detail-wire-vectors.json` pins the
   binary decoding of every field of the ErrorDetail subtree against the descriptor.
-- **Delivery verification.** Execute, the Broker purchase and fetch verify a retrieval
-  URL before relying on it: its Ed25519 signature against the key the issuing Exchange
-  publishes in its Web Bot Auth directory (named by the URL's `kid`), its binding to the
-  agent's key (`agent_id` and the answer's `agent_identity_hash`), and its expiry. A URL
-  that does not verify is refused as malformed, with a `retrieval_auth_failure` detail
-  in the edge's own vocabulary; an unreachable directory is unreachable. The verified
-  binding comes back as a `Delivery`: on `ExecuteResult.deliveries` and
-  `BrokerExecuteResult.deliveries` in Python and TypeScript, through
-  `connect.WithDeliveries` in Go, and on the fetched content's `binding` (`Binding`)
-  when a fetch is given a `Delivery` or the issuing Exchange. A bare URL with no
-  Exchange named is still fetched as given. The key resolver is injectable
-  (`delivery_keys`, `deliveryKeys`, `connect.WithDeliveryKeyResolver`), and
-  verification can be turned off for URLs signed in another scheme
-  (`delivery_verification`, `deliveryVerification`, `connect.WithDeliveryVerification`).
+- **Delivery URLs are checked by the edge.** Verifying a retrieval URL in the agent SDKs
+  was considered and left to the delivery edge. The edge verifies the URL signature and,
+  where it can, the agent binding against the proof of possession the agent presents on
+  fetch; an edge that cannot check the binding (CloudFront with its pre-arranged RSA key
+  pair) checks its own signature and treats the URL as a bearer token. A check in the
+  client would run after the Exchange has already charged, so a refusal would only lose
+  the purchase answer, and the client cannot read a CloudFront signed URL, so every
+  CloudFront-delivered purchase would fail. Execute, the Broker purchase and fetch pass a
+  retrieval URL through as the Exchange issued it, and fetch still presents the agent's
+  proof of possession.
 - **Admin client.** `AdminClient` covers `fora.admin.v1.AdminService`
   (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
   `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python
diff --git a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
index d50d5ce4..9fbf12ce 100644
--- a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
+++ b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
@@ -67,9 +67,8 @@ client.Fetch(ctx, "https://techcrunch.com/premium/article.html")
   |       - Authenticate via RFC 9421 HTTP Message Signature in the HTTP headers
   |       - Send ExecuteTransaction RPC to winning Exchange
   |       - On DenialReason: return typed error (see Error Handling below)
-  |       - On success: extract signed URL from retrieval_endpoint, and verify it:
-  |         its signature against the Exchange's published key, its agent binding
-  |         and its expiry
+  |       - On success: extract signed URL from retrieval_endpoint, as issued.
+  |         The SDK does not verify it; the delivery edge does, at step 9
   |
   |  8. Record spend
   |     BudgetTracker.Record(txn.Cost)
@@ -79,6 +78,8 @@ client.Fetch(ctx, "https://techcrunch.com/premium/article.html")
   |  9. Fetch content
   |     ContentFetcher.Fetch(ctx, signedURL)
   |       - GET signed URL: present agent public key + RFC 9421 signature
+  |       - The edge verifies the URL signature and, where it can, the agent
+  |         binding against that proof
   |       - Read response body
   |       - On HTTP error: return ContentFetchError
   |
@@ -228,23 +229,18 @@ for _, group := range found.Groups {
     if len(group.Result.Verified) == 0 {
         continue
     }
-    // Execute verifies each retrieval URL in the answer -- its signature against the
-    // Exchange's published key, its binding to this agent, its expiry -- and refuses
-    // the answer as CallMalformed if one does not verify.
-    var deliveries []foraconnect.Delivery
-    tx, err := client.Execute(ctx, group.Result.Verified[0],
-        foraconnect.WithDeliveries(&deliveries))
+    tx, err := client.Execute(ctx, group.Result.Verified[0])
     if err != nil {
         return err
     }
     item := tx.GetItems()[0]
     if item.DenialReason != nil {
-        continue // denied: no retrieval URL, and deliveries[0] is the zero Delivery
+        continue // denied: no retrieval URL
     }
 
-    // Naming the issuing Exchange makes Fetch check the URL again before it dials.
-    content, err := client.Fetch(ctx, item.GetRetrievalEndpoint(),
-        foraconnect.WithDeliveryExchange(deliveries[0].Exchange))
+    // Fetch presents the agent's proof of possession; the delivery edge checks the
+    // URL and the proof.
+    content, err := client.Fetch(ctx, item.GetRetrievalEndpoint())
     if err != nil {
         return err
     }
@@ -260,9 +256,8 @@ acceptance over the whole set; the Broker re-packages the purchase into one sub-
 per Exchange and returns the results in request order. The client must sign as the
 directory its requester's domain names (`WithSignatureAgent`), because a Broker refuses
 a request whose `requester.domain` is anything else, and the client refuses it locally
-first. A result item's one signed value is its retrieval URL, signed by the Exchange that
-issued the item's offer, so the client verifies each URL against that Exchange's own key
-before returning.
+first. Each result item's retrieval URL comes back exactly as the Exchange that issued
+the item's offer signed it, and the delivery edge verifies it when Fetch presents it.
 
 ```go
 broker := foraconnect.NewBrokerClient("https://broker.example",
@@ -345,7 +340,7 @@ type FetchError struct {
 Both carry `ReasonOf()`, which answers the peer's own token when it sent one and the
 failure class otherwise. `connect.ErrorDetailFrom(err)` pulls the typed
 `ErrorDetail` out of any error that carries one, including the `retrieval_auth_failure`
-the client attaches when a delivery URL does not verify. `resolvers.ErrEndpointRefused` is a
+the client synthesizes from a delivery edge's refusal token. `resolvers.ErrEndpointRefused` is a
 sentinel reachable through `errors.Is`.
 
 ### Error Recovery Strategy
@@ -355,7 +350,7 @@ sentinel reachable through `errors.Is`.
 | `CallNotSent` | **None -- terminal.** The SDK refused before anything left the process, so retrying unchanged fails the same way | Caller fixes the address, the key or the requester |
 | `CallUnreachable` | Retry with backoff | Transparent if the retry succeeds |
 | `CallRefused` | Depends on the typed reason -- read it with `connect.ErrorDetailFrom` | A denial reason such as `DENIAL_REASON_REPORTING_OVERDUE` tells the caller what to fix. A `request_auth_failure` of `SIGNATURE_STALE` means sign the request again and retry; `SIGNATURE_MISSING` and `SIGNATURE_INVALID` are terminal until the signer is fixed |
-| `CallMalformed` | **None -- terminal.** The request could not be built or signed faithfully, or the answer could not be read as the protocol defines it | Caller fixes the message. A delivery URL that does not verify carries a `retrieval_auth_failure` reason; the purchase itself happened, and the error names the item's transaction id |
+| `CallMalformed` | **None -- terminal.** The request could not be built or signed faithfully, or the answer could not be read as the protocol defines it | Caller fixes the message |
 | `CallTooLarge` | Raise `WithMaxContentBytes`, or ask for less | Caller decides whether the body is legitimate |
 | `CallNotSignable` | **None -- terminal.** No signature or proof could be produced | Caller fixes key custody or the signing window |
 | `FetchRefused` | Read `Reason` -- the edge's own token says whether the URL expired or the proof did not match | An expired delivery URL means buying again |
@@ -413,8 +408,7 @@ not panic.
 `sdk/python/tests/exchange_harness.py` is a worked example of exactly that, in under
 300 lines, and it is what executes the Python README's agent example on every run. Its
 directory publishes the key it signs delivery URLs with, and each URL names that key by
-thumbprint in `kid`, because the client verifies every delivery URL against the issuing
-Exchange's published key.
+thumbprint in `kid`, as the protocol says.
 
 Testing a FORA service rather than an agent works the other way round, and the clients
 support it directly: a pre-signing hook, raw mode, strict decoding, an admin client and
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index 0a935278..2d83c7a7 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -37,11 +37,13 @@ Exchanges the Broker knows, and **execute**, which buys offers from several Exch
 one call (`BrokerService.ExecuteTransaction`). The exchange client's execute also takes
 several offers from one Exchange (`ExecuteBatch` in Go).
 
-Both execute verbs verify every retrieval URL in the answer before handing it back: its
-signature against the key the issuing Exchange publishes in its Web Bot Auth directory,
-its binding to the agent's key and its expiry. A URL that would only fail at the delivery
-edge is refused when it arrives, and fetch repeats the check before it dials when it is
-told which Exchange issued the URL.
+Both execute verbs return every retrieval URL exactly as the Exchange issued it, and
+fetch dials a URL as given with the agent's proof of possession. Checking the URL is the
+delivery edge's job: it verifies the URL signature and, where it can, the agent binding
+against that proof. The client does not check the URL first. The Exchange has already
+charged by the time the answer arrives, so a local refusal would only lose the purchase
+answer, and the client cannot read every URL an edge accepts (a CloudFront RSA signed URL,
+for one).
 
 Full per-language references live beside the code: [Go](https://github.com/FORA-Protocol/protocol/blob/main/sdk/go/README.md),
 [Python](https://github.com/FORA-Protocol/protocol/blob/main/sdk/python/README.md).
@@ -97,7 +99,6 @@ parsing responses itself or re-implementing request signing.
 | Raw mode: send a body exactly as given, still signed and decoded | `connect.WithRawBody` | `new RawBody(body)` in place of the request | `RawBody(body)` in place of the request |
 | Strict decoding: refuse an unknown field, a field-level or a cross-field violation, in a success answer or in an error envelope and its `ErrorDetail` | `connect.WithStrictDecoding` | `strict: true` | `ClientConfig(strict=True)` |
 | The Connect code of a refusal, on its own field | `CallError.Code` | `ForaCallError.code` | `CallError.code` |
-| The verified binding of each delivery URL | `connect.WithDeliveries`, `Content.Binding` | `ExecuteResult.deliveries`, `Content.binding` | `ExecuteResult.deliveries`, `Content.binding` |
 | The operator RPCs: `AdminService` and domain verification | `connect.NewAdminClient` | `createAdminClient` | `AdminClient` |
 | Mint a throwaway agent: key, directory document, signer | `helpers.GenerateKey`, `helpers.DirectoryDocument`, `core.SigningTransportFor` | `generateKey`, `directoryDocument`, `signingTransportFor` | `generate_key`, `directory_document`, `signing_transport_for` |
 | Read a document a party publishes and check it: the well-known manifest, the WBA key directory, the key revocation list, the license document | `resolvers.ReadManifest`, `resolvers.ReadWBADirectory`, `resolvers.ReadRevocationList`, `resolvers.ReadLicenseDocument` | `readManifest`, `readWBADirectory`, `readRevocationList`, `readLicenseDocument` | `read_manifest`, `read_wba_directory`, `read_revocation_list`, `read_license_document` |
@@ -152,10 +153,10 @@ A few rules hold in every language:
 - **Error details are read from the binary `value`.** A Connect error carries its typed
   reason as `details[].value`, the binary `ErrorDetail`. All three SDKs read it; the JSON
   SDKs fall back to the lowerCamelCase `debug` projection only when `value` is absent.
-- **Delivery verification is on by default.** A URL whose signature, binding or expiry
-  does not verify is refused as malformed, with a `retrieval_auth_failure` reason in the
-  vocabulary the delivery edge uses. A deployment whose URLs use another signing scheme
-  turns it off explicitly.
+- **The delivery edge checks the delivery URL.** A purchase returns each URL as the
+  Exchange issued it, and fetch sends any URL it is given, so a harness can put any URL
+  in front of an edge. The edge's refusal comes back with a `retrieval_auth_failure`
+  reason in the edge's own vocabulary.
 
 <DeferredSdkNoticeDetail />
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index dd1cbaba..4e094b1c 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -209,20 +209,16 @@ summarizes them per language.
   (Go). `connect-error-vectors.json` now pins the code and the whole detail, including
   rows carrying only `value`, and the new `error-detail-wire-vectors.json` pins the
   binary decoding of every field of the ErrorDetail subtree against the descriptor.
-- **Delivery verification.** Execute, the Broker purchase and fetch verify a retrieval
-  URL before relying on it: its Ed25519 signature against the key the issuing Exchange
-  publishes in its Web Bot Auth directory (named by the URL's `kid`), its binding to the
-  agent's key (`agent_id` and the answer's `agent_identity_hash`), and its expiry. A URL
-  that does not verify is refused as malformed, with a `retrieval_auth_failure` detail
-  in the edge's own vocabulary; an unreachable directory is unreachable. The verified
-  binding comes back as a `Delivery`: on `ExecuteResult.deliveries` and
-  `BrokerExecuteResult.deliveries` in Python and TypeScript, through
-  `connect.WithDeliveries` in Go, and on the fetched content's `binding` (`Binding`)
-  when a fetch is given a `Delivery` or the issuing Exchange. A bare URL with no
-  Exchange named is still fetched as given. The key resolver is injectable
-  (`delivery_keys`, `deliveryKeys`, `connect.WithDeliveryKeyResolver`), and
-  verification can be turned off for URLs signed in another scheme
-  (`delivery_verification`, `deliveryVerification`, `connect.WithDeliveryVerification`).
+- **Delivery URLs are checked by the edge.** Verifying a retrieval URL in the agent SDKs
+  was considered and left to the delivery edge. The edge verifies the URL signature and,
+  where it can, the agent binding against the proof of possession the agent presents on
+  fetch; an edge that cannot check the binding (CloudFront with its pre-arranged RSA key
+  pair) checks its own signature and treats the URL as a bearer token. A check in the
+  client would run after the Exchange has already charged, so a refusal would only lose
+  the purchase answer, and the client cannot read a CloudFront signed URL, so every
+  CloudFront-delivered purchase would fail. Execute, the Broker purchase and fetch pass a
+  retrieval URL through as the Exchange issued it, and fetch still presents the agent's
+  proof of possession.
 - **Admin client.** `AdminClient` covers `fora.admin.v1.AdminService`
   (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
   `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python

From 165c44f993e688440668c0b18718a6fd98ebcbb0 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:51:07 -0400
Subject: [PATCH 054/164] Require a named requester in the protocol

An agent's offer acceptance signs canonical bytes built from the offer,
the request's Requester and the idempotency key, and on a purchase a
Broker relays it is the only agent signature the Exchange sees. The
proto let Requester.id be empty, so those bytes could name no
requester.

Requester.id is now required, 1 to 255 characters, and described as a
free label the agent chooses for attribution: never identity, never
used to find keys, never trusted. Requester.domain keeps the host
pattern every domain field uses, which already refused an empty value,
and is marked required. Its comment said verification never uses it,
which contradicted the relayed purchase. It now names the field the
host of the agent's key directory and states the rule per path: on a
direct request a verifier resolves the keys from the covered
Signature-Agent and must require the domain to name that directory,
refusing a mismatch as request_auth_failure SIGNATURE_INVALID; on a
relayed purchase the Exchange verifies the acceptances against the
directory the domain names; on a Broker's discovery fan-out the domain
is the Broker's statement.

AgentAcceptance, AgentAcceptancePayload, AgentRequestAcceptance and its
payload state that an acceptance names a non-empty requester, that a
signer refuses to sign bytes naming an empty one, and that a verifier
refuses them even when the signature verifies.

buf breaking against v1.0.0 passes. The generated code, the
descriptor, the SDK types, the JSON Schemas and the validation corpus
are regenerated; the corpus gains the id length cases, and the
conformance constraint test covers an empty id, an over-long id, an
empty domain and a domain with a scheme.
---
 conformance/corpus/cases.json                 |  53 ++++++++++
 conformance/validate_test.go                  |  11 ++-
 gen/descriptor.binpb                          | Bin 649387 -> 653517 bytes
 gen/go/fora/v1/fora.pb.go                     |  93 ++++++++++++++----
 .../fora.v1.AgentAcceptance.schema.json       |   4 +-
 ...fora.v1.AgentAcceptance.schema.strict.json |   4 +-
 ...fora.v1.AgentAcceptancePayload.schema.json |   6 +-
 ....AgentAcceptancePayload.schema.strict.json |   6 +-
 ...fora.v1.AgentRequestAcceptance.schema.json |   4 +-
 ....AgentRequestAcceptance.schema.strict.json |   4 +-
 ....AgentRequestAcceptancePayload.schema.json |   2 +
 ...equestAcceptancePayload.schema.strict.json |   2 +
 .../fora.v1.DiscoveryRequest.schema.json      |   9 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   9 +-
 gen/jsonschema/fora.v1.Requester.schema.json  |   9 +-
 .../fora.v1.Requester.schema.strict.json      |   9 +-
 .../fora.v1.ResourceQuery.schema.json         |   9 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   9 +-
 .../fora.v1.TransactionItem.schema.json       |   4 +-
 ...fora.v1.TransactionItem.schema.strict.json |   4 +-
 .../fora.v1.TransactionRequest.schema.json    |  17 ++--
 ...a.v1.TransactionRequest.schema.strict.json |  17 ++--
 gen/python/wire/models.py                     |  22 +++--
 gen/ts/wire/schemas.ts                        |  16 +--
 proto/fora/v1/fora.proto                      |  92 ++++++++++++++---
 25 files changed, 319 insertions(+), 96 deletions(-)

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index 3dc039e3..d18602ba 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -16295,6 +16295,7 @@
     ],
     "json": {
       "domain": "https://exchange.example",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16310,6 +16311,7 @@
     ],
     "json": {
       "domain": "exchange.example/register",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16325,6 +16327,7 @@
     ],
     "json": {
       "domain": "exchange.example:0",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16340,6 +16343,7 @@
     ],
     "json": {
       "domain": "exchange.example:99999",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16355,6 +16359,7 @@
     ],
     "json": {
       "domain": "exchange.example?x=1",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16370,6 +16375,7 @@
     ],
     "json": {
       "domain": "user@exchange.example",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16385,6 +16391,7 @@
     ],
     "json": {
       "domain": "exchange.example:123456",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16400,6 +16407,7 @@
     ],
     "json": {
       "domain": "exchange.example:",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16415,6 +16423,7 @@
     ],
     "json": {
       "domain": "exchange.example.",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16430,6 +16439,7 @@
     ],
     "json": {
       "domain": "exchange..example",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16445,6 +16455,7 @@
     ],
     "json": {
       "domain": "-exchange.example",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16460,6 +16471,7 @@
     ],
     "json": {
       "domain": "[::1]:443",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16474,6 +16486,7 @@
       "string.pattern"
     ],
     "json": {
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16489,6 +16502,7 @@
     ],
     "json": {
       "domain": "two words",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16504,6 +16518,7 @@
     ],
     "json": {
       "domain": "!!bad!!",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16519,6 +16534,7 @@
     ],
     "json": {
       "domain": "\u0000ctl\u0000",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16534,6 +16550,7 @@
     ],
     "json": {
       "domain": " ",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16549,6 +16566,7 @@
     ],
     "json": {
       "domain": "-5",
+      "id": "x",
       "scopes": [
         "x"
       ],
@@ -16564,6 +16582,38 @@
     ],
     "json": {
       "domain": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "id": "x",
+      "scopes": [
+        "x"
+      ],
+      "type": "REQUESTER_TYPE_AGENT"
+    }
+  },
+  {
+    "id": "Requester/id/too_long",
+    "message": "Requester",
+    "valid": false,
+    "rules": [
+      "string.max_len"
+    ],
+    "json": {
+      "domain": "x",
+      "id": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "scopes": [
+        "x"
+      ],
+      "type": "REQUESTER_TYPE_AGENT"
+    }
+  },
+  {
+    "id": "Requester/id/too_short",
+    "message": "Requester",
+    "valid": false,
+    "rules": [
+      "string.min_len"
+    ],
+    "json": {
+      "domain": "x",
       "scopes": [
         "x"
       ],
@@ -16579,6 +16629,7 @@
     ],
     "json": {
       "domain": "x",
+      "id": "x",
       "scopes": [
         "x",
         "x",
@@ -16658,6 +16709,7 @@
     ],
     "json": {
       "domain": "x",
+      "id": "x",
       "scopes": [
         "x"
       ]
@@ -16669,6 +16721,7 @@
     "valid": true,
     "json": {
       "domain": "x",
+      "id": "x",
       "scopes": [
         "x"
       ],
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index e97dd1a6..e89862a8 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -204,8 +204,15 @@ func licensingCases() []validationCase {
 		// not just the licensing subtree.
 		{"authorized_exchange relationship set ok", &forav1.AuthorizedExchange{Domain: exampleExchange, Relationship: forav1.ProviderRelationship_PROVIDER_RELATIONSHIP_DIRECT}, true, ""},
 		{"authorized_exchange relationship unspecified rejected", &forav1.AuthorizedExchange{Domain: exampleExchange}, false, "enum.not_in"},
-		{"requester type set ok", &forav1.Requester{Domain: "agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}, true, ""},
-		{"requester type unspecified rejected", &forav1.Requester{Domain: "agent.example"}, false, "enum.not_in"},
+		{"requester type set ok", &forav1.Requester{Id: "agent-1", Domain: "agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}, true, ""},
+		{"requester type unspecified rejected", &forav1.Requester{Id: "agent-1", Domain: "agent.example"}, false, "enum.not_in"},
+		// The acceptance signatures name the requester, so both halves of it are
+		// required: an empty id or domain would let the signed bytes name nobody.
+		{"requester id empty rejected", &forav1.Requester{Domain: "agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}, false, "string.min_len"},
+		{"requester id over 255 rejected", &forav1.Requester{Id: strings.Repeat("a", 256), Domain: "agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}, false, "string.max_len"},
+		{"requester id at 255 ok", &forav1.Requester{Id: strings.Repeat("a", 255), Domain: "agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}, true, ""},
+		{"requester domain empty rejected", &forav1.Requester{Id: "agent-1", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}, false, "string.pattern"},
+		{"requester domain with scheme rejected", &forav1.Requester{Id: "agent-1", Domain: "https://agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}, false, "string.pattern"},
 		{"resource_identity mutability set ok", &forav1.ResourceIdentity{ResourceMutability: forav1.ResourceMutability_RESOURCE_MUTABILITY_STATIC}, true, ""},
 		{"resource_identity mutability unspecified rejected", &forav1.ResourceIdentity{}, false, "enum.not_in"},
 		{"well_known_manifest role set ok", &forav1.WellKnownManifest{Role: forav1.Role_ROLE_AGENT}, true, ""},
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 57573f24c89e192f17a509204f4f3f916c2d2e35..a760ac0790800a66ef7e8c9ec10f3292c968e8ca 100644
GIT binary patch
delta 49587
zcmaI9d4Ll|_6I)cbh<m8$t3AaPLfQx&k2X%$&7%q-uJn>D-JL!y9n;gpzB`4B?xkO
zmw?KBBZvY)P&t%EMQ#NZ1%^`;<WfXn@%MRE)zj$j`}^?^^Ilhd>eZ`PuU@^X?#$iX
zeEsp}1BbeXDns2v)kU6fZc~n|&+od;^HjF!7}fONUir5HmDM$sRaVke`t**wvaS~1
zZsxLU^(s%$75~+h|96$A#go3eaY0kJJc)uAo9EyB-gC}ly))EhDq4Z1Em8{V6jz6J
zO<7k}yCv^G;YoWh`D^8q)!D}e^z7TG`jN`s**^WUHIGzgd-tiT>{Zjh>d9=C-EOXT
z|3@qExL?JimDMJz`@0%Vw5YDE%+^b0m#FC1n;rKWvHYLTdal1Tut+gtW-n9K3X}p%
z&9lW9X_cjUMT?n!(?d)JTqWMrCf!7~>ta^$DlSW1&aUaG^(tMiXmMG_g(}OHL~ENw
zmF3FC*U2h)xPom*mD~zN3&}DHaTP0Vlc=&nX>o-)&dr+vxi<euCvAc&x7KOLjY?~k
zL~~imO{J6$UCnhaUP-moPg(m*wDq}96|F=TQc>qqC3~4oqRywv)jiD7qK?N>H?cOC
zYGZSooH`!V*`#F4WgQRdY*MbPFrV}Ab~H=fkw0{)_JWezp=d?2l!i(>lt9KNQE7+L
z@-lOtXh^rz-E7Vk+Wd~Y6)h?Y>8P_?iREk(b#^P4-Db{KO+|%?999Z`QC!I#3JYGX
zMe|cSYknngSTWM(L#C?o0X)jyFV`Mve^gPpYKe(4I;vQ_4I%-0R7oVwDG&s-%hFCN
z%4v4bmD=Q5{AE((#D^+QDn1*<1(cJD#fO-l0_CLAAY}$bVS`Z8rxmvuGQITN81A*u
zn;#Xmof$TLHcKr6^Cv~U{I^V?ol?{*8vT|F#r~|QH=8FhLsZB)&|R>Rjq9SF2n}=_
z5pxoCz(rO&#LfP;RG)AW2uMA|tr)x$AR+Y-x3|zH(asQeAZR|xYvSQ>_LpwjKTC(Z
z6`w3a9Ubm2jMyZq40p#9W*c4w(vM`;Ra&mcNVim#OHt71NVilKNFa=KONE03!bmq1
zPI?7t5ZT~*t|%gfqDHz?*O_l9yb)A*Hb3zyt*xu<S*H~@)bXs_mz6kfwDPRG;iWc7
zmE2c!Hb3!m3>g31ysx|Vsdm*|2SWwMT(_^WtOTWkY|_Rific(Jww*Z_h7D2Ctz~Yd
zW%5-IE3Grq`AcrpMk-yv5;lSYyhMG+J%C&0wwg#dnkUQL&0ClgM7K0cTj^HT<XyLD
zNmniYv`0xpy_IgSFg2H=q25Y&ag^H@NZ8g&cWjN@ZCa)Qu{5Zx$kJB1)eqessYcF2
zz17eXih1o~n&tVxt*vmGCA>$NbsxEvM#)f?9q496*n(R%tt~jhtX+x@Nj`EXQnCj+
z5I=I4G&Ii(Q^U}0aI?*~cz?Otr5I5021geLbg{uP0s}}J+!mky5XJz~26w~8<|_(p
zS+TTj?t*jqhPP`mS7@8thzny@$e6zr#(W6~Kz?bf2_zuDw2c`gAipGI{+xs(tJ8M6
zmA$ONo!V!$_)BOPd{o<MYZoM{?Q|DMxOPE8yF1;{y;8fx;M(2gR`*ElN*?O%wzVr+
z&~6>qZW)&VljDF}NhRB6S--oq%esLOmZB&M4DW#37vzcs37HPKLwt>a=rlzRxRVXc
zQKBm#zjG_ilmB7&E8d38yjy#u3=A8LX2N%FpO~Vk46yIq(MA%RmVxiwO`Dmg$m|pa
z!*n9Q;BM{juCfyj2F-*MZl4%<6avNxcS1}Ikia<MZq}Te4WHjXxmjH|Bgy`AFD&LK
z+hXtt6@RiV1|%x}RBti7+h?W4fPg4x9T7AP?^)Yo@DxaAZHoa3q_bo(OUe7WEp3om
zFo_-eqm~a0QVq+z3!QUw=f{@Zr`=OJM3o~BCXj}x((8c)(hwDfavQILhr`(A_iJ~Q
z4O68`-HHq97^cec0ZD~aIX)nPFigex3|Bb>26}A%llwKVQa0AXpfMh+`h=r%^D!Q)
zHsDbJB&9JPtLEC8F9-~f<MP1=w1`qR&cUFe9jE$u9DqtRwByu_a8Mwrk_rbkkA~Jw
zLpw3w^Fb}=Dxc_J(9lkF<e;IQs5an>D%AnTM74bf^BL&XgGF_kTCjj^sL)0Rr>UM|
z(yNEBq|;UQ;3@sqCSnDht}1*k(=&8`y4tXjc_%Ll_?hhMp4#0dGgYMl86nD02sBg8
zl$g_C(V#)jVYl_tW@P55N<tRmTs4(8uj6GP*gO{Lt=*8Brz#C)8H#b{sZE-i5A!nU
z@qG55-ddmRd`BRPY37qa@4L|@_<^Nr!LGbsslDeaUaERxyia_gd`DH9H@b!`xKB^A
zf$h8<nusM5Y(9HDAc6IcirI4|+H=u7UCyq3SnFD{Tvd1sNKBMjuC{2&gC@`*-)FNP
z*2b2+uPV*B;9wG0ZQ05^iLpW<^zOs_-H&JkT$vA5g<A!2QR+joiU)Whbnn0HP#^8V
z%zssdj~L2O_x?*G2KxnxS@RKl_%GTWB_BB=QHb^ti8K~V7Ye}yw&uV5i}svSzExFP
zN|`7o+p4xHwModdRn2uZi%gB`khN`9+jcRx)1YBBu+%TutVgvkOTJK*_OcSiXkVxu
zJDD$teql}6nV-~8i@35oo!%QLwUc_kie|5BY5UZIW9;+(+RDH_6|oDn3*Q89e}GMU
zOzT>DKvi^VfS8ctfNJ<{5<(tOgCX-WUIh;iG3#&I6{UxqDl}aWsfJiURX$x0sc`X?
zyb44)%>MB=?cvhH(m=^AqRL@4CDv+?Xyveqwfa_G1=LYiRHfZse$<{<szP(~s49a8
zkU%)9Hfbg0q`7%iEzOx9Xy~yA{>oGEQvUTSt(!YA$b%5|A|QK&!#X-Z>r^_#BOMl)
zfEwcQ3TF%wP(wTjE<5rncsPvR_PBO&=`fGfl1F$bj}hjrgG7~Ko@mVMz^kCkBiN$H
zwT`7DoGR4i5gxcs(zAzmd4wktHQVtj02sw0PiP%VM>$ofkE1-;Ac-o}$59^mK_M8d
zbu6oSLc6$ZtVeoMk3!yOtj8x53la!pJxzu80SSb$9@z4HTIoDw%rCNoPiSwJzvw_v
zSoNYuhE*s7h!;IFo&*Vq7d?n4U&m}mYuZFl!PEKA|E|5}3QqLEZk{LSsF9|p<p=*m
zD|VGmvsDc)z@~X*tOXKa(>ySh?z|2j&SW3_Q@f^YrY(-fcLFnQaX?Zbk0o>h5(qO%
zC;!D(4b4LJ3-Z_eOZ&)Gy1=7&x#qw{r3DnMks?8&(gJF>Ew2OWE!O!zTKm$sJc@`B
zG;UvSc|s!I1xbZGjhmQVc@^k>F&qCM?W)d;9Z5;|i#<LObZK1oi#;VRWTT|}#h%t}
zxFu?&`lT#Ut92?{>L7T4u+$zsl!4ewJx$w61XBG{Plt=l*))0@d71avGqu{>?(aDe
z8gV^7z7kLwK)mOX6AdIF-t%Chz2W5$x}|OOD4%)M<f~rR{u(3o^4EG%e)>S|-)b!$
zh#*emf$2tP*eEdFNcyAg7oH-B+vtgY<`E$>F?bNS$)j%dh!9!wP;WE($U|hwLJ+sb
zLm~3l87>hV+AEq8ORmpPeoFgeAP2&hf`ZytG_ROJU<2(H4KrwqP>0u2Ut=v^(mu<*
z=G5_`&TE=igw&eiMV;3)gw%Xfped%MPR+M^SxdXFnhHuP+Qi^Y)#MBS8yHhHi?503
zt_h5(T9anxOwq2-QfFyOv*ar-=6XeovPn!ET?USg<^$R+2h9hxS(;@VmJevNw8l-%
z<p%G6p{2f?|H~^{nOgR)gHec4eOIeDtwLbDtCfi0MpFub@vfF@XRe^&MpOKj`f+~W
zt6Ep3>|+PR4~&mB=^9W77$0l(#^ndb$6AMu<_XcOA`CI>IZ^wuY@-8F1c;5A+yrV$
z5g;~d4KI>vD+0tu?cz(#^BNZ;V5xiZFHF(~y1VRgFap5XqxtMn3;<(~7Pjp*0E|6a
zCTo6Sa*Uv*oz;}{`8%d*_jqdYr>)f>V9shjkyp@^AYjgFF?*bYfH_O!EG#q#3q7kf
zI<JWY0gBVU7gf$_YFoaClPtK8{}GG!Ynl?W)ImDmuXX=>O=Z7ocDS1n=mb96#sjfn
zfCSJWU2fYzqU}Mty=}vyk1f0|wrvyv5LMp`3$`&_ueUT3X}B)8Z72++;W~owm%Z?{
zn5$Ftf|2<-bG4V$;1nI(wijuvbn>+`*)4BsFL$14LxTzEnKm>?K+n`Io`|9<fS##0
zYHVK15%6#hYq(ImzHE+zKslH>4gz`JIl3kGJv#Tib9AI8kU=CN(6#w&)<SJq=lKo<
zxw-ic1o`3lx+Ml1RUpKC9bxJ<90Alq_LsM`>&g~72yP%ObP#AsT&T;{Nat>Op^nvP
zs)s{ByQ}iY-qNNkomV*+hzHbF4hAiXt86Xnd{JDbBYu61L!j&$wt2BuRkp@Kpfz!g
zgFudXjV|(q=sG#(HF~z8`Lxa<U>@7^1D9wc-MzN!N->`vI(Nm}^@vyxK%&xi9qR$D
zNg(0)w(F($nn7e4h#c+>5+`>LyrpS#kcI>A&b!QKM1K(@9?U<wOdG9~9dxACA?-m&
zT1qP%bcUY1_dy!^<+Nn#lo2|fzvMlH>t)9s3<I4wuFG963IXG|9u+<iBruNa*cYr5
z81TJk^X*q?>s{q%9SkqzIP1tkzWA)8ck;z&$-3tX1A;FeXt2(!w0UI%4LL)A1&o1)
zoFO2AG0?F1UI4O_FCJ*LXvHV2uD}%!F~m;!%GKB@4>9B<#UoT4V#rAf5*3FS_9WF6
zxZM$kn4}<JMk5>%3L(M>M+9=dBMdo7Q5Z-g40PkEB1}>^nmI<n7x{%BXsRBaV;Bw0
zWfTw@G)dnylxT9U^1`IDM1J2VSafpWh}8|x0sE#QLnDxYebc}iJDD_W(9BtyZ~Lh>
z)s<W7RH8Y#)bJK@BSIlmT55zW^EFbbL38rmmp5n=bMG2rZ%8~;dDlqsv^9~a@~+XU
zwMc##M6P7(H)vyWE1hO&)~z(;mL6rOkby1zOJwf`ZG<=GM{LxXJGar+IJl^^(MSl7
z0}_=s8Zf($M2Dc%?fILxYM;2;Zg*OunYG=JYrMf{)^-DH{PJS#Es?ky<t=zNf6eFG
z<z`?M%!~4(h^3+1(d^k>TCQZYSK(^_G12?cUNpEF$^Z@IG3=XN+SZaWUb#~S6NSc5
zp;3?ug+PwYZ``eoab?GP6)rn*iA|-JA{CC=u1)Y3e4YRI9_<n(GQo>&`}@=c&xgF~
zRT?*1z>eRcr`Y~|+Qdd+h^;#w1LjpPJk1NDIQGhuyviyzW54!%E&dYQcO*PeZju*%
z5vvzaF{&t+UFCI?bKs26hC!Q?z3N4@cyZ2_VQy$)idW5E$U>i|dez1kvVc9!t2Vum
z1+3|{zvE#{XZ((Z5u5otFgS@>UbWGMU~oyZy=walS@1A(ekT|l#$2!3+$mK%4AG-H
z&#Sg@c*ES7&~JFvW*4$BQ|JFqFvL3xepd?N%bUN!ALd3lvha7}!^6JiRhtlet*u2Y
z`fq#Hh8H%86@1a}@WTk^e+O1<sY`yRiwI7ue%GTYX6S|RpYw5B=B-sb);9?r25z}m
zz3f632JT(22v@kQD20K0&#PW>VJVE;`xmMor7&(QepeCWw$h6hrwc>G#8TIIl}}jy
zTWwk`{t|NtX)`ps##@q=mI&{lt?@Seq}~!0H@C$95|*$;#Vssxtyj%l$U=uc@~R~l
zvVi?DnMEf)cL2TKt9<EI*;j|O4z>8(7J{-g>m4D`Ym{vGWxWt?A;bo+nv?KuDa1y{
z1UL&qY;tUevw*$%ccq}!Etn3iF9d^Hw>l%qYeKD`UD%`;$!%Ws;`)kWAh&zfvI|*g
z@(ZterFj+aH;{LDm2{&{*{cRr*YtlhTk-ck)mJd{d+nkUJm5hl#+%YmJG{tB+y)PX
zjLt4^!G89q@3mX4U0zR+`$3-3*$uD7Zar%>Z6b0xpm|Ev0}>Fsz3GgZMZ?I`SZW>9
z4{MDwbzX%>b;LxOIx2$*7$m4Y?3%+`!^|G92xN#!Tq@I$mw~$WvSEj{#+kidg~#J4
zLu0m=%9Qdl=;S`O_ORBrWS@gWUD`)wu11%Tvia7FBvs^yc9r$5*AwPl;u)JmUZpwj
z5*vF&(=s4=g4TnFKse+@y6{G{f;0?L@9ga(+Rd5ooHEp-@2CuNODF^Cdsgy;c6;V~
z+c68b|2>td<z>*L!))vi+Mvu~2Zwren97v%GU(9}mOH9-$sF;@^d<5uD076$T+GYB
zLVjSQj%t@?ey|4;2^5t1fy#8_WiS(uvOPz&t4of06`s|AkhD)YN@Ykh$g!OC7W~4x
zAA@F2dOcCD8J=PJ(W|r(nptrSngPkTl^#3<!jE1o>rK!K(j+(+V0({g%`!jP%M6$(
z^AnY!3CL3?r&#mj+9jD&UWF%+h>0?%sLU0-3^emI``2-;Eb}u4g`y6WA<g_uWjgaR
z(9CJJ{kT?Ma@y7mk|8K_n#$aZAjxZK=ez}Pv5qISdzzl}8UX;gRWCL;15IV9shZ!p
zOda%aFV-~9V{e|&4s{%4s;zi@EFJ-Jun8YY5wqYxydlInP0_KJ!h#p_>rZNDl(H90
z8Bv0ZVR^xn5hY0I<^@x3Yd`|y1rytvgK&+&z|&Wl`m=VZ>njcf?TlV=ASeoZ#k54A
zk1Bw8#f-)I-pWfFoM0*ql9#jN59?8O^=YkbXE4M@7LS27!NH;iCzx`BgQvinU}A%F
zH<t#~>ukYk?cOf0I|yzdyl(nPiylZ!Ysc$mkf-^Hq&g<j{3|F}^CDQ&7MRMy{58L5
z@4I{APg@Y$B`t6Sq3~^iX^9;*ssUz!DOLhPL7=<9Y`D-AJ8EJe=L2JY(^MZdR|PQ2
zrloyu7QCE)_<!0;z3JyB&z8DXTtLwdnaU9i^K>tU*_6Xfy!?$GeVW?wI}?EojjDJC
z1%7X;-7nxkmcypn#hguv29w75OumV!w|3W_G3CtzaM6J?wkAQM(izeuX$d5Pk~3z5
z`vfXTzTY}yrv6B-nil{EO`kC@yMb@Ps18`P1v_KjeUJGJ#q}n}OB?7@p7N>5Gp=lY
zgI`x&wO|OX;xV*3&?l`8B!n91lRIFL5Ne=LM0$h;tq$~MpYjQ<5<{HN5Aw;243fn!
zG7R>~iwyNlpbhb<S2X4q8S1$hm7zXdWS|2$6XvKr?Ndgxnt*<5E&j3vB|CiD5tQuk
zX`dW^)B^O=J~{j#A?VY-hNJ5RwJ#Eka0KNnF6c-{P{{<^GZ2(r71Tq)Q6wDSjGENU
zOZnbG{XJLPmwbvQ2a8PlC7&)V9EGTq&kCDkDF^LC4%%1n-~6qXKE@TE=tB;AFPXXz
zcA+iwDevWvhxI+~TKp;YT6h4wg+8yq0|~r^gh$yTkm%e(U-5hB92p@owo<(PmQQWN
zje|IwdEEB4PejtZ5Lm!n<P-6>&4LLn_8}IkC9{$>0k*^^;!c|dubKD3y<JcW1G3a7
z;(5CihVmT(yPy=}?PWeSUC+Wa1pM*~W#uz7q`vD@?=xQ^x8|eKUB&jq_3^i?^2t*T
zFo{e0qbULsIIDa(`;jDO%qpM7qZ@h()8vU2U$~P=C-6S<bZgkUgnni3H9o~gp{CaO
ziiC4S8Gx?w!8r<0%08^|C9am5Ci6g0zQ&iliqAQex98j%Uze`ta2oJJq?>&O-{$)z
z^<l0i8-4st#jO^?v26A!pZioS^*Ttgd=QJpQ~E6(xA@dccst?|q}}RM?||YAS=eoP
zKJ%#yTxN50r;yyr7i>aGZ~5>SK6x$xCc5*5FC?;HAkm#Kd{{21J0Q`WFMLVitBB;?
z`NG%WYTg~mAs6z6uWL6m$J+to4xe&kGRt}#(;BiH)4JIU3~{(r$VX*|uUI6_K%&JR
z<T6Bya2X)8H;9h$QGo(?_!?d>TcmN~PHTtnnrqEDwD~Tik=mPoC#}zOb>3^c0B~Vm
zdwnuB3lf6u^@T;I8YCLt>%$QUf+RqII>;uM=!41+Ita8B9kiVY$^hY@PhQ&sNp*aP
zVc+**82y$uw6I`*{=uyNo~O;wLb*QpF^t0tm1hc7b0UQSemRbUmwd*R?aJ!f=n?in
zGkx&&PZz2kc-KWS^lL<+dJ`X0!NHi0EL5L%L0xWO!B-S2Q-M9$w6Wp9iI;EHTz7do
zO)A6|i>5uVP9f6dLbzEn62SrBltT3>m${K<lAo+(7JIObzPa<PLg`GwgeGSdN=<@<
z9%dDW#o7ZBdYDy+z?Tm4{G{f&?9o#F;$CwL72%V>ByOQx#X+LV+(NA4H0mHR>T?S-
z*9l4OQJ-5_axEWqDj-LFZejO7m@iN=-A|*wGOy+Ih^NO&M^+m3m4z~sjzVa7WnoO*
zMFEM1R~F(fifEYT>&n6wcX4-vr)Y*Q+N~^Xd8c`v7DPW)SeyUHMfyP318bdD==gSR
zp}gXOLTF`ep}gV&k}4JA7*Dj~Mk{LzQ{t8yp2}9%7N)N=|I8bKyIjZa?WFhUvCe6O
z4&c@m%ABR2C!p39%A6%gw6U%bIZM$7A{da(?vy>D_=S41uCVzX=Cd?Q{Inu&%||cR
zpLad5)oFze>9#s!OBt)J&e&2ecq@&qXaxtpAWMWp03upR5GQ-JxtW4gKWV=%uU)Ed
zRUW8w8ll@cb%io)Kp`|zS12bENHkJch>0W`q1<s@VfqHy70Mk`SLzBg*Yk@ye!5Gr
zk6m(weoy&6rwvLI?{nIqH1WPdx#FV=+Spf!6@MC?sN=@lsltM>`A@IV8@mIi3K6sa
z2jUlz`TxSsm+J#_zZA;#6-+?=QYiC<AOZDDA@YTM@hKt;JJ04_sgEx`@6;iKKVRq-
zUJqqZ=X@cK)Ul~RGw9ABR^3G}?>xvaXBn92z#zZ0DUd)I<PV7>A&@{A<VV0qNB>1c
z4Pi&R=$$$baS+H~4RH|2Du?)`RiX;j@xv;+a0J-gF!n%Ky<6EZ2Z5HrVGaUC&BOd5
zu^tq0n;YiGwEcqSMiB`-CjU)W{XSRu7zcw+7smMIV51N)#`xtH03@UsL;aXUi(kOf
z#`|%<X24bYL|4=Cez|!Hz_U&AE7SZc-FVT}fb^Qg%U{-AuX5E+_9M4Oo=rT1MyL3Z
zt8h4IXR2R)07m6T8B3e)S7rk*WW&KxN>+Ux8nhXH#3&92xHJ98NjV(g&ho2;wPs7`
zAV3x~k6nC?-nz>?zalc%U;=2KKOmw6kf<}yFQWvIFz|VP86^<Om(_V}@-=!mIM0v3
zU=ZmyKo+nt|KT;d+tqWSUz#Jh#P)kdL;@1v3;i;#0SWMhe(T?S_7EvHG7J6T+b?AC
zN_YN?Ho|BKy<EgvUZ<Dk7CG%u^Naj4g^x0*vdE7V{;NVbtQ^boFJ7l-T(!&W!4D{8
zg3Ii|2MLU2ez`#a35;catoB9l`ydTq__Me?MiC&<LfB>gh7ZE?*R!Z8f6tLFp5Q|{
znC=R{(jxh?E8D%grVnd>gZ^q~a76Hr=MZ9rZN(rV#0q~%tN|b)#0o#w0NR8G$cR@n
z?~VGsT~<2?WW%c+1hV1P{*XBALKPsa_T#W?9Gy@H;PkZhe&vh&<Qw(4Qj0%rLCEi|
zceFu%Z@oPgPz^BaX(~{l4ibU-dVhm2{31{%1`pIX_+_9@91*B*^o!ghuO$NYjs8aE
zT#dD|7{+v?zsr46wY(<U+vJzQwJZfyZt^$cIaeDDGH>#Cx&Ok7@amg?*Cc%KW`84|
z3A8K1@;3Xs)c&R>GUHqPGQ^inA~C-8cTylRzSZC8+6$XRV*E3|$i>_ENQ{5xZ}OWa
zkr@BX-$iV4CH!T`jDLP1zSu%+yHJb5%(na0`)zARcXsCc-wJCk-|38>j*jp2%UhTM
zesN@{zkzK?w5IGNLwX(?Q4d_qxBh}7`E|GHAtm^&-xD%FKuqP~2ik|&;XCv-nL~bg
zDgq|P=MYVW2YDG-#&>MvoqEsAcYc|g#Gy3Gd`D&O<z+y9&u+O(zc2H>UuIHq>P%cJ
zgG~$Cf=Gwi+Pm~CvxglVp6sJCCrMD4*=av6OgFn*uTlc1{W$QU3xoVj?-w@nUj4!5
zzxd_7N-%-{3)%WC>I^@*JL6YM8;x^iZ(+x7r4-N~^-(3@iF6-IpvD=hF;LV1d6pgh
zqdxeuvzWBB$ODGNK1+oPArUfY=lumEid?48bbIJv^}HV`(>`dBr@ek<bMDjsn)%f)
zQ>9>{`mcVRQPXWtp4J+~F1la8p=3~z)C`y?GpGn*#SoH%XRd~_*Y4M!Dj8ZN53#^R
zp`k@M#M&zgL4QxPu7A?^H+;HCjunzlDD-p@^f!$TMRAGajiQ3-f&4Xp)*I>fzEOm`
zf@{bT1hE)sONx}GMQU=9n!UaIZFgOFd-tnz*{<1#s_^zu--@1<efc{_6%SYTtI76y
zq<{bF%IfSx{j0JSH8oXzdJd@R)4yM~MP=^coXIBj)|0huvhA}q{j(i9bwcrqs)}BC
zEvh<~y{o!1+oy(})KvEEo2_`Pq6*X_m1eejK+jSRU!4VPWxw9pUOW+xYA8@qldT3!
zWww96$}HZ8%GSUAl*?XMlkHQT?N|ADWtExj(;E`@si}SP@@&8US+M#%)Tgp4`%s^L
zy{oArq^?4CzfVn@EZ%{lG9<#2*_tY}R!y?;UiCAx6$2m_uzFSS&QV{%>0j07AA-@l
zvR9vKbUT;56K`YHzk}5rAiXO)lMqirE;IX}cq!{abo${+Kvrd+=u`6uS0{CZ_f5(P
z1rZi|ZlqQmN7Y{a@c<>zJuwFKG8Zd(RgcxSY?H0-pRGW<eJh^q)9>MIx2pbsMd4l*
z{rdH<F~NVLs!t6myG<6uga50uk5}{^08VulYY&v)zhB=cvrmv}AyrlkZFR+y)j6>W
zz$)NTVHP4?0}}SVq{z$Pk$HrS1~#{(s3^df0g#xVONxR^i^MWO47e-gQ;O8i+(AkX
zY%*Wexb#96fbvCcuQ0cSxHTfe*-@nIhBdAV(RH{?PQF(M-Tr3mFXxiq)2*vx4lqcQ
zd4KX;a+T1m{n{KE5v+{&5-{C+!!p}n#w~(dP_K%rsy?u3QbkV~TInPGt7};5pSbOR
z@z;7Plx<OweXKu>wW4p|{!di)Zpo@D^^vvQ>M#t>JjrFdW6++gH$57P3fLYjt3trj
z+j-gk4+;6|?O50&HD5KLZ>4zHlUprn_O5&kGXfTYS@y&u{j=459`1)X0c+TE)Aew(
z%S|(z&6Z}b=5GYrrYLO5?r{GnSVNZ<=|kOoys}zojz6Tj*=#jUY~H$fnUD;ovhPD}
zXfjGGqnYtUMOANl1+gaE^U0dZQgBM?58jplvZox|e4UnXRkL$ddgEI0=n*KQvZ{@k
zs$w2;+r|v-+nbL91n8H&>8?BO<eflwAQJ4A7a*rWsuNhkC6FfTH7NQ-<0iCQnSJmM
z=&7P+Ks$_QS8`nsX79TF#x|H&k7CxNA3dM6(J(KB=fLZf1NyRt|1>hSEl3}5JC9Yu
zhgJ6aE99uEu4z+Wr5|QnH7TJlbVB2ot?0@1$PI;8CIK<*jV|xl@uEg3LT*mJq*)<w
zdiQzgp~@=KK6gYd$?HDar~1)~nqaR-XtGvSJ~W^jvQ|{H{$Zm%TUl&a%|u_x4A4EO
z$#x)ovI}6i0rucjxQd?rdp{{&2?ch)Z1=yzA@_S2ay|A~Ut#jp3K?C0xIOwuuC)HO
zQX1^4%3hUZHn!pQB)=tnMw@Kq-{IcjOVH5@>4yXkZ^1w{GX5G?af8;dWsV+|W^Wx(
z1u?K1a0f=V{76;*0S`Y?kC5ZVn+YI{-(wZM{t9~)Q|K{Sn>#^B!miY`2DRK>R`wQE
z?6G%-o|X@iT6oIl!r4BVh07DJked`0=!H2>HiCC(xjOiY;nb|3si=zq;A;rU(+J%W
zldfLH+?4s)2t#9E|5H!7+OUPo^^&`R^Dy4lt%kRzf7HN*ZVBsO71;$83&-8(|9J2B
zg1I5y_$3(D<*X--<yU$p(ZX-~O-_&G#2PMIuISaP^0AtVe!ZYwTS<Iz;QoPkl3SV3
zeSPP!7GbSGljM1-x$>XPK2*`KwEuwG8ZzVCE35lMF_pIsAak-!LoTBja@*%(5x&q9
z*+$I=7gqcTEpKpqe0=&=K78TI%<aMU5SNpkfv9<;R`$#uYOHt_HI<J-n{BcK`oRhP
zRw4bL=;!njF7F|7vJ@l;{b2RsYXiJp{n|(eN?4@qwUPF=JBs8{Mo{U&)5AsbEF(yp
zTP$hCyRkOX>x;yowNd-JNZnN=?q*9KmcnmvfX8={l7+k3JB#RUHtl(X6!`6BH$AME
z_1s$|^ORts{k=s&v2h0pn7u`E;|>x#oV`VI<4z>sxbH2J>3zweeE8lX?Bf5x+X2Ku
zcKBia+VX=%a$^|e+vI~qGDiXu%^ob0ITDamrwALvrD7q+CT(mWU-gLoj`85wKs^X;
zbH@hiL1>#hHXyTVLB7o$8<1HwkdS?BKxWm56j`;g0c6#_711l;CIr|sf71skJKT6<
zMPJiN7)yQV#is{s^%l5jxnS@W25;+wQNLvEtI}J#O!nY)TCzJuhZNLd5vsm0hU1<T
zrf~(CBw_;FkHMYG5KMZsHYmhiFEpaHznNbbOvw6`>w+MWOPb{`?c37BW%3MTkZzoy
zr}cWI6zGJ2Otj)D^f)096$b?%F&Gm9I4JPZHR>Q`IA0I&TbZ3ea7tdw1c|Dz2jsO(
zkf{24z`m9lq`c*{0Kb-b6$l71%@Kmqm(!fVr1a&qfV`H8!a$l9z_rX9v0cJZ^sGR^
zB6hY$zrmUnkoN|0po_a|0i~h1F9Q+~pvAo-kTCe!0c1e0#%>6wsg$OlJV5_LW^O><
za{&`&<_2JRq70}vnCEenc_Sb<LpUrYZUCF1>p2btTfq7}uHTqh5Rh9h9BHD=0<t|!
z0knmlE@WFD*RRbi49NRCV4}>z08+~W2i<?0UG{{2W5c%ta`TC<qRiU?BphdiQ6Yqh
z9w>Mrn4j^4KFu5WI)J0H8!#pz>iJIg$3gl{r8@)Cmw<^b?hJTE@)9H@-APz~<W=yn
zj%^*J-=C{<s*wAs3wXtGScs?A>H;_pdk&jJGy`dHOKGtFLg)SVz<~+L_uB&p5)k|C
zSqKuX?k7#$&JjR;%UTc7@63HGH40do{oe*s{AE8PsZao~yV3p`G_-e^y)i@|Tz1%L
zmFE88fJ_#n3?L2%<oi7!0dbgYb~NScLL}meeBYsZ0I%&j7?k8X;b4&6p9qA+p$zH(
z<3s>kZ2oddi0uA!e(6(s+SU2AgFzGEbU?nxhC;wN9ca>yPc)FgI32jC6L+~Gvj4Lz
zG+Zw$J&R<DEJK!lHXx5_Q3h4c29VCI;gZ8^{mTA1Tz|anug);h_3dAsVWR8XztS+h
zBNT?5)6gKxKCLe+9~zXiJfzU|?V&;GEkOcfXi&bm0umTQgU}d%4JJgd(u@eQ_y~Pg
z*$4-Nu5XWUFzEXBh@kYir~`}<!3Jr5eLF<gw?_qqqW}RtjS5Of0TMMw1*M|^iJGH=
zwxbBq{q5(2;{G-W7{K$640M0{c}E7izx{krItmm9((^$$3VyejE)xU`-pG%5M!!S}
zP7Hbi{Pk6w+v7@ZkZl^R-<_Qll+z7d82F?hrU<=~<>ANbQ-kaeWAr&CQ-ktS9k?hp
zH3)U@5T!uQWP!2zHzhNJ;+PjzX|Bu+;=lvRU4nvGbC~a0eRO7ygG6p(4k1zQ%14Gi
zk1cr?xvP0WnF9k8W#$F31pkEd0uK($mj(;g<Rj1NKe~cTgLohJ05yQ4Xxt@Wi5K*5
zOWp~}7k<G+<#&QOB%2`$L09jx?2G!Wl6QmBG2#dsh29OqF>VrtK(1s5U(~mhtPIM8
z6ON0C8^ml_CkmlIAF?lA($_crFeqIbPJ~hD!ysJRNxCs)S=xbM!I7XVIj<=H$;<i_
z7Yk0)OH$@<<Ivx1yV<I+QQV3zULrgeTUUx{dsp_w)}aakF!o+N^MjNFd+8OuW0O1a
z*jXIK#*Z+tuGZ&M*qFI`w3b3e3L*RT?^jy+=wmfNt1r<5u`#XI7d*Y-q1bJ;$<|c-
z6?@D2P`<KXufF}O5n0v)AuDiu{fBfAz4ASF6_Bv~s--wnY`gi!mtsuhO@yrdvcH!|
zsK5y<1PDdf2pQ^wZ3;560Yb*6e?MfI`buO1rHy_iHdc>A<R`EvF6Z&8v)z+<A*xQ>
zZ=`laq6>SPI|g9eD3~+`RMBLUfAJJI>erukf<m_6#xC|AjJ1B-+xCKRMFi8dFQnZa
z&;8ZQU~-Xuvl$SZQaLV8Kura)_2PlKv-@g;j`e}4lyRc&q6M)5yZkphFlWSMbj7oF
zv_a(!h%Jd7gyq+~qMPpEfgoPioeFzbEt+13*scls^ji)E<q8WX=F_2|e7ylACdHv3
zUT>gtT#)eHhk~&#JVQk!LUl}#L&5l!{QYZ-mdeBI@mYGO%kekd+F=KpR^r1!`KBYD
z0{Sq`(G_@eLJeEm%b|kFAy@LvV*dFh_SMUJDF2t&^mU$Qk5xR`w|@mvk{Ex{t$GW;
zV23TTf7#ysE32VFBof6qRMV`XJ^bbWAJah2k$T7;_Ph|IfW!p0U6eo-=>~4@{U4=$
zJD*v0h%6pkVmb&@7S^9HovQ!c9eO!rWXz99^<h%|_z+t%L;v`e@geaN2XUdG@u94^
z$p8`x8Xv-qRMI_2=ze^t&F%c$l1P3~KR#4?8=WPf0BXM$VjE`af4udzkQ`8OIa>}W
zNPxZ;k^>47ps$7GfD$PN^tF&2&@eg4Ng?*cEdBC!lN?lPY*I*$B?<v`QV3)DG@Sq!
zBbW^p%njx1X5s!*?W~Z|2xkJST1@?(9a6gT9)W^=fD{`=kieWBl9GZ1=4@M1kdSn?
zEh&*g(%B@b07vyXA*G81C*uQYn75Join$)<gyhjDNTAON;pkI71^S#&^h$2ncq-B7
zgkt695A=zG2yWbk3O;~+?s5tH9Qb#S&hDD4e-d68GMbtLX~Pvk54Cqf%Dedv^YmX`
zwfIwPQ1AfJ!aE_KxZD8}(!LXFCI%NI#Ca!#?>x}CAxLbB-wCyQHzclE5(9fXR9O}h
z?^p0LV!O9Igm+o)<c*`iija~_{z1BHoFr7`VBS2VO8F$7EY4+bwwDUZh?G3Sbr9jx
z71hOXfaGX0a0UqpSA?*zld(m}ELMe-O!E2*RtA~9`~PpPR<=d~ED-G0$e>n*WMmI`
zw6-dQu!V*;Le%PzSh$HoRgiX7inUjV<ku1Klov*LzM1ZDMX|vM6?~6zTkXqsg`Z|k
zUe&F9^#XmUT5D^hvdUg4fA0i%(nsWr_)11!nETC2MNZ}a@DDu)^y$kNnEGXiFRvAj
zwvfrJt)^8rTM1W1x!>Qq6UW_%73=@Ksyfn(O)>SZrfdBgigYOj5j9WrH!o<F=Zi%y
z>-La5&7$o(M1ap^H!n4!_!JBs+Nn|K^=ook^fH(lrOCUC1s3Tqb=zetA50Y5Wlvg=
zQ2s8OwD<5Tc({iQ^12Ho;Kw!W&?3F{P1&3IYQ;4xck)qghNvV)7bM4!W(X1u>>)Gc
zFAzq_4iAtWj&ZTu7wcEn{wC8c7J%QJi|~$C)GMhzI<OOtm>mCyOk}KR#+HeU^?+@x
zkO49sAY*;SMISAQ68#<fbg@3Z<9ALaGSlyDGesFH6oQ$4N-i^oS13XSvn^M0hQgkE
zTQAPfU!uR|3Z4uZxK=~@kCFb*u*a6_Q!YMZqk;+4Ga-4A2_#U@gm95*ExoKCgP__d
zOBrLS$t4DB)xdj2e#kqzrq+TfI)frW7-h-n0}=?MEXYNk2qZkwC@Ve25=U3Wp!A$N
z+LA|Cl7n#=ZONl6$pX-53rANsaY<0%ISZz6C7A*<-q-)o7BoLGLo=k&=PdbEIgqIP
zoP|-wjUws>$Z=Nw-|y>_T@Q}4q)!DKK6RWW&+<V6WSrGNWO+dHTG;=Qiw6l8KhA0@
zuFMcAJnA^B*=^=~w5N{IZe^mC|IbRj+*LNwX@+j?O|*RC)nb%FGZU>wmrGpQm`}9I
z%J~*CMwT+g5?e$Ns5!-wTSSnkImMD&M3AUC#j>}EG1`vLvcwh<1caI8$UxUlW?6Ep
zi>E-EWyvifNFdF!utoeMY$<MO^Q?k*EcVm~`aPj}79u{LGl-J~Ewu7SKG2I?w=T5g
zb{%YhEwtoz9VEaOTJrW0Na$^$WnIeS4kCHnvCs-%Vjd>7#cAx8TKOB+=#RRtUTTXB
zHu|&F9vzUpnEc)qNVKxl!iqPY>_1^?tF3}M*#FD!Ec=`3jkC_TYu<c%t^RLUXtjm6
zl=&=3P#@M<{BwpKK|m{OY*Pk_Ce~PTGJr%AYb;C#L?x=4AUQwH|KnqQq^tB(rxMBa
zsU<@h6hfs>X;5fMO^|=t$l9;d@9w<O?irZq*+xr#WdbA+Hd+luvIis(Hd-xP^AG1F
zh}yzFSf_U=+u|UQ<!-U$8!;#Yge_K3T)zcLb*yxWxq)VWg6wiT>+q?*scgFgK~}ll
z5rV98yCpw$fhvI5Ze4sSx5|V9J$)su5(H{~Wm_dk)cne}N|31eRlQXvsIR+)RbB%E
zqU?5LAgkPMTP2<XX}4{aAc3@-tnz-0aMIHDSp~0!UCEnR|8H@}WZwq8OJJXcFCWnd
zhLSX}2iQd$^$r~l*n<Nm5D!=~Y6A(x0~Vq-`q)#F^nS>~2lZOBqwnY$ws@l+&w(L4
z8y@rLUhyR!kf?mf!evRi_JZ0N+9T}jMtx4{5vLAe9<k&lPn1EOBNlQVcmoYpKpkUS
zHtCmiK4vQcOeo=)tpt!jIA+N#6iBLL!3#C!2+-e2)_t?ywDhDU-yTVFk8;w|g);<+
zDkm-69-x;Nk~DUw7~8C0S$4{4loEZXoJMI3Pg(K{FsK5AQx=jW$3#~#hG$uLi+-Z>
zSqFmhd}nPNO!C1yYX!yb10*2MTCLhpE*C-|&v%}6-KyVMe%?W#yHw{bpRHg@`<=JM
zr*NqX5YAip<`|#3Njhm69A@jb>XXX`houh(7Z`)X(uact#^7)R{xvaRP#$n_xZ}mr
zMvw-4D$HhornfJD%7O3#;;FFwZcLJ=0iO!X@5X=x#8Y8>l;|1q0!c~(jtb}FpX;Ms
zWuqJr$^(uHO9zWmkYiL>eybBCKt_d|w=^&17{~*T4YRs!`enJXVfp4ol4k(NhGoVU
zB<hR}W8{VHPy#T_uHCL*T>iY%EPXfU`LO(MPEz5izi^58U=2t>JRim^-axyHBz-sM
z)o}jZ?fNasm9IJ=^x>RW9Uan#b6yQM5FdO*C4jsdZra=&L!P#QrA-SLEDz_e{|Xw2
zPYYvtpe&i%05edV6;|E|tH~8Ewma-ivWWvVjXii!*IDFieQGV9in)cdXk%7bPE3$!
zV^$awlcENYh#F>vqi=-8p&l_PYS3nf)p=oYs3&=-HzzC)^&|_2dUL~csK>vA*nno_
zk}%#r8JfT38$GDhg0Q8a8NMVe@6Dnl(3XVd$^{Y@w<K(dH&2M<k;{^BSX|qe9Jqlc
z;SS;+j%0C|^6O0g3E&3gD3*osm7Nz{6j8JP?$XDXfgyHwcns|?3(MCNKtiTv;h4y|
zg9O;JFtUv8q5PDky&o?4fW5X`Zx?t!Y!vdB1yazwXC?c3x89@YO1pDl0%&De9-M*%
z(8@5*O(~oKiO#JI7uWI~E0O3N1X&r5h!+MVi&wh)KV}>woFdUyvDfPKWa%oW9a7>d
zdni!`RaVhZl8;TH^PbggU!8tM?P|NrU}CbYwkHcnAgm6{E5RUvusV$6B)Sp|5?6v(
zhwUrDL<><@hvk)E$-<T3)nU34yb*Tl!OJ)6!v%wiUCEX1?A4Y1`s82VqkrfMt`FlD
zCWFCx_?s;oSk*p#T*-#8Jj?<U!?l50KOqW1wvDXSe*MSH#;|<*7;m4T&_<e@tvL{=
zO|0_)y)?5aEZ;1~t0Tk><5Oe}c^PzSGaG(DZ(OoDEECOm@dITxhmrW8>)ntD?tM%C
z;{&+fU9u&t@LQ$CMX4=e+$udTM1uCVvhNS-Co@~a^5ctm^8$sohVk*mZX5|?`58O+
zt$uapv#?Bl<FyKu`78{--iVihQ~sPia7b^G`8+Js+ITGjWj-f^!&?Pt8)mYNO**7^
z%4~CR=<|!)2<IwZ25xmbJ9$X&p4lFj*C_pp7iG4GagFjxUIuRS3wHN+`aes)z+50B
z1h|PZUyy5A5B~%jesNF!*mrPG<$Ih`K9t%+r9>t2i+jTOcsYGm5_M?7+!Jnjxj9LI
zz)^mm|MwBSk&^k|(P1G#z7IER!QXE8lP5gP-aD#yX?Qp+KfDPh${Y^kV>|Q)Jg)9z
z?S_8Y%A<NQ>u^kOnE`2!3FR%15Z;ZvEN&S8z@9v&-<<g&EZ-Z)x5H89hcMPaI?V7Z
zcx~+{+kZ^IGIP|yp*L`k5)MuSQ3fC9IL5ji*Y7Mj=HP@-<{06;fj4SU2%qaXlV5yX
zU!Y{qgyk1O!9}SvVZ@Cyge~C<9s`T>Lx0qpyBZEGuGe`O#Re8bo5Sb>t#GPO6&H*t
zW}p6~4-Gz5jGMoAp$-1p%dlelLhIcn!;0mgf{V(-iZQ74)dT*X%kX0M`6)ej-|%Aj
zF&S`CXm~L`Cewfy0`+vU(x8z)d;1+XW~-|E=4$?4!<`=xXzJss_^JX(UKpp%O?Xv|
z^oU~i=b!baB_oREnF`)oL7@@FI8z}D#VaWI;CC^b{IlM%WMr{4V{lPuWHHPbuOOlj
zrpz<N?8l$=wk6LvNHk}jAtccp=FF&K*6lQ!8&xciz>4^!8C8t!IX<QcButvo#cbGV
zy<Nl6j$&xmj3&i=9>UKJVB7q5alx|U{PxrORwMX!u@R+r<u(41*u}+cnaj8?x42m2
z&X~BUy|}oz1z9+e==b8{i>@_W@H$XYzL>RFjF!24vBp!5C`4M$7f1Q$wTMKWeDNhW
z)2GHj;^8~R>}kcgw%t3$8o#_kT+WWPlI@VAeW$q74d&aJiSP~D%Ho2_ktJ@Uy(@^j
za1s6yMSLOwq4m~$SJhacw%uB+@wZHf3$U%lMf^oDA_2Cw7}M~xW{`jn?4(G(#B1CY
zzJ5|f{&)e{s5L1ff4l%BYE6n<d<$LrR@0U?HB#_tgkSnr)9Clqh>;TUUz((t5fM8#
z5E#%I5xJ0qMA;b;xpM;v)EN=%+~9iEG}+j!2pgR?8g-cE)S-22Rz&8DQ3!QrMUZ;p
zZ*ZicD(%gP@^&O&mo{QbE&dh@HlDyv-i*j^TZ077n~{V_8-N7Pn-MGx6v}`^DD!5d
z>Dv*JiY10f94w5;RIFq{FK<PVip2s(G6N+a!Dk}>mA#H`PqHVn#-I-1h|mSk(Q4k2
zp0){jlAb0%s^cRF??sf=k$fpG`MPSsfWpABtJ8Mxy@-sz@D$bGi^%v3B!qr15?u|U
z=~5Ljc>MK#L|qjT@t5SG-inBfza$Is*UAXRUvxPpO*3zeD<U!)prE@o5t-2d2{G10
zWJUud;MPR!j7FLiy)MEt8Z6kv(5_tP3<7N(*F|K!jgkOb7m*1KkN{d2!Pap+eONGK
zX}cl?OQQL^ni#LB;aw4!_BW)b48^SbBg%J6S{i?H)#5LqAMk;<KO%!Ckigp?k(bUu
zLO=T>#otN&5QFRIKtw$x^&@$xchJ_4WI;dQa{ZhUBEVT3izufeYJNv6;|W(S2wMs=
z(PI%ApJup;9*ZD8CDQ^4DUL;~Q}t4a2vs{CQGcqJ!aj;P5z&G?)}wk57J{9OzyZ-~
zR+0s6{}|B<TTyfX9t`p{`=*W2<bl(++QEd{Pupq-2?0+><SUgRfqFWEaE4+`kO&@5
zM;hKJ8{vT)FVW}*GtJuob%ymQHA)^h<Fr8=;xkSgWa(!j@`Jb;z9Bvnk#Ew1L>p%!
zscU2#{CzP(jimozCV3lJAI`C_ON~^ob50vH9nMAMWtj}$L7$6+#Ot{rfp9K@7*O<s
zF3O#YWUrQO&}1MP&qW$uWnRMD0Chg1+>~s|+T5VG=qo%$hTkd!zn<j9>Ki5FKOd1V
zp`kDuJs*)TB7;Pu=OZm_<<X0^)adz0%NzKO1Lzk6HaN<T=8R8!435^fLNjA<RL%?(
zLMwx#a%O-;D}$q0s6^N3&Dz1y#y88Z*}wBJINIbUGsC-v^=@dCCEFP#J%&1s(A~75
zP9wB+9~zb4i_Gw?`_L#BU(pD@pNprB?5^;y=R%C3(Z)BJZFnOnFf7VmX=jv{4|5u!
zz5TGL+}mgP-hNoLfsIOg`(aT8p>L7L%qWOLM@E^uz43OBkq!pk@fqm|N_TulMlJEa
z7U}?FWE9bt5Y!7fMn>_bx0n@PIZ;MNTiwC$D`jZ+KRU`H9gNQ9qn$=f2s%0{GYBYz
zMn*@QUM5j#^FKP;x!hbqFGOc3${iQYkL_TrR304XfY5!QaZ$OIM=5}ei^@;nf&|F8
zXii+C0trdSMcem~lKLPi#ed_X9Ud^(ie?Z8PmksobTU3t9-QtpLm7kVQMujB@QlIq
zsQj)hNHjA&3J)w4Qix`zM;qNLn<<pdOpi9c#r#aTFGSMwqWSHY8h5#B=Q+(#PGMfu
zC$_N}{xRNp(TvE;fJ8I%qR7jLX8dSoUi6ZlJV%VDXa>RZyy&GBSbt2YjC1G~?Y!s%
zJ@~?sq40b`^n#Dq_UX@l=w|pk;R)KtBk>6ikkI6Us9a<~qU{CL#q+{$5V|jp@<pac
zMhU=MEOvT<o0K5y=MsI(cd;{<=v%&vqgZ7qcqy^8rO|?~q9S-HLCK|2Bqw?Ds)T}<
z<xw8Iu-%;vEw?->oje|)=<=wHT|feKc@(kB8>HV7@~|uO#briYS8iog=G?(0cGM6b
z^9G4ZE2H6Jb0;OKO2~Jw&Ht_3*o_}_aw-wlTBj0u>$OyADmG521aecpwu{kJ>AcBS
z0k}}XCR+s{fw3uypW&jB14)&lh@fe)FQHg`E8E@8XxMhEt$#34Wvi`!kf^e?UjHSu
zqI@a!4+02ZI*n7B@=K?2@|a)R`bS|PeQE1IYiVCc3x1aR&!XhlQ5-&U{bx!4yM+Eb
zf&l6+djLS9>@Ir%Kmv6a4FCm?S<+cul!C|9B_L3<&Z$YGP#2XUB%Y#XT@*psda|r6
zg^>HB%J*zecjMDq{3X@_@PV@5?iEO&?2pO?4kS?aN3p=sDi4xkjcDros0bj5Ap*z)
zQ5ir=7RLNw6aggt9F%0?g?wBbjnY??*iU~j0xb?j@uj}s6u?yZE~?%s;>Il6){aM&
zQ~5U67)@QZ_)~-;cmN@fM`geW5<(u2%776hgghRNo`R4RFcO0YL?@!^Pf-ytN*?N+
zjLLvfvJepc7^Q%brcpyn`z2cND<8&~TWyGDe~B6;VjLUNIGz*Zco7Kb@tiFpNR&Ni
zk0VGlb&kf7-pX%CN<PmPUuU$w?z}xCz$9*ze`3HxWl-gO6k#4o(#X;V#R{H}i3!~Z
zB?raq3EhYU8H$gf8n1T5-;iTyOsWbbiVls*2@MjULu1mO8j&2sV%(lC1%aBwoSG!g
zu$Z(bJVni6F*~SlMD{c)raTwR-*kh~#8r#G#pvJ(DvpZD(E*8yqhfM&Kw@-8#iGx}
z#OM%%kIv|r`fN;$j^v@<n3x<L$-?N2joG8q*wS8%6^!RPiMrLsX!gaJJ<A%CQkYN*
z{zliBEg?u0Wwug4q9sO3p<gIyOyZA=v28aQ?b?mQaU^#x;BvMuKA`{-b;iZ;@!yg3
zBTr2%ZE~z2AIo2SvthV`lVdpJqm*M4l45F%-F%C2dE2Qr7`OnN8k3*c0tv9GF%0!^
znyXDnf|)Uvzr}dEY-UW(RB$mpX2#@QW{|v;{7nv!z?d1sZ*ttiAu!kG#Mr-XHEu1N
z<3P}4pA(ZyNE1F%b7Inef&|2z82smz90JrEG3LF^=u-BE13@nM4F`gz;u|q}Skr`0
z#W!MzgUAIpAs75+jBmHtq}vRw?VB;V5aJOkz8RAXAxO0LX3Sm)n~<POVq&+o;dVnS
zU*bqWet3x^0r}x2F&R^$B7l~}unyuNKvA1w?-;{}F0DI^jluU~`05e&!A)sgR+4p0
z>9o?e3orq-(zXkbfLcj*F@+YgrWh9OqnPqZOiez=S~l?Bm@mG|xXo1yo-los0Ki8v
zdH(<;06vPz`v)Ll`X9y8pTP9#dmY3e(^o%^$@>SAgR%QKChs3e7JxpE;r>B;E(i*&
zkKwGaarVxt3byZVqg4mcwh&}K>tph$uqhwa^)a~c9=tA)HenQ!w=vfyy#c%b9;0gq
zFzm{FNsY-f!=_?Mjp59YKI_tyFR3xbN;YM|2Mrv1-eV+7x5i{3fX8TgYfK)#gG5_f
zW7s0%1D&XhVcW)9-)mfY@wS-Aa1#?%w#8E7Dj7&r*%re&+dQFie7a(1OxX*SPjJ&a
z!ln8D-fKMRss+=QnD!JqZFkd@?<scL?gk`uzB3lxE8Pt-xVzaEQ};-BBY9|fx9x5u
z3+|?lyBqp+R8z{f9f&Cnlg+a1{rik|Wgx^Vibt562V(La9gvXeKrAXg83Yp82V&TY
z(yVAoJJCa8R&)Y^nuqLZ0TMM2+0z0fY96Ye7ENhiaa2r;t3Y6S9d%@&-NjLRUf?N^
zj@t7AB#@5MytoOOR(#jyWUSz4w&YL7je(Ofe9QpbY!ANmf?YQY{n==e`7tK*pkTt>
zevBaxiWmfC0Q(cW<IhIp%ug|y1_cvkej?XF$xD2Ug^qb&{Ik(4drEeVn8c;oa33aS
zGfO)YD;N@IU;Wv*H*h9qB<QR_ZAK!TV_hFGuI_x!?i!fr+Bv&xAR)uKnEZJKkm%aE
z7;?PiznhVOzp_;i812h`br8sT{u=X%w{1{{3dNElIRFv}zs8U!yP6|F(7|!mwujNZ
zd~jTjaWft%4UWru4j=(BI35)Ha*%)+9ET9sqj$|MZCJcudYrx0!?-pyERHGhDY^FM
z)V+~$=6ldsUpCT)1{eJs8JB(;B%nverC$aK=#g<KcL0aL!!dCdsW2WdALBsK>OIDR
zpbn0S%Q&t%@8Fm?oWMCD2735HoPAtj{4e)HT+ZL-yh|^{F%%R}gG9S8#F1?7%G(9?
za-99x)96<AvePcD2QS-NY0g8lm*YXPX9LMAVLhOWQ_abLjEl4CUdGL3;~WUee~fb=
z$cv0~Ajpf1ivxlV@0*hsc{R??_cCti`l<s#sk~R?J~81?2oSHv(=B92$g8{>Z{5cH
zQuH2PWpZ4Z7H1=S8{2E~r<lgg6-rl3c9cl2WpZ5F8J+@WG7T{W!yw^WCdZphi;G~G
z7;r5pGbJv+h$C5$ZE76fa=8JP(E^9b@qz_$SF#LW$-rg%u55Ruab<8;9B+#y(8CsF
zB6DDU4;jhYIdSRcz=bSx;xdo}iFW41u{Pmc19k9lUK}feKijpsx)QJW_o?YyDSCy6
zP&=O1lj!6;yOVgz>q<)j3E+8TDewpekYOqF<80GIM&t7N4h9Xwd<TQtpC6a0H`D>f
z{5bsGZd!v|TH0Ijf=^ichmBpKx8nBor<T;wrE%8q5o2<0soha<fwk1`C`e!}rH;Nx
zD?&?ZX=VP{BgV_vf;yF`6D#8~SVbXJS{X;MN)ERr_2GlK2tzjf1!2esaT$i-5h{KV
zmthD<RQw=rhaoMA{5a0TknSL$$B%6tfP@Y{wsim!NFT>#90HP8g})uHLkF!aZAZM|
zg+#t<U*jovXh+<TKLgr|w6HVIcjK3X0On4+TOfhC)7Aw@VD2Pc@C&1@NcKH(+(X2L
z(f-}E>)20^8Mo%Z5tnc9oEMNc5kaE*o;YqIzDLub6{+PQtNxp@qQ^nIS71VdgLbb#
z0^(p?zWNIi5C`K}3&=x&#8P%JE`Q*bNRjzD7{?FX;;K0{f(l32b5+K%&PSX^=*rlU
zxV&_RGHB#TT>ic-NU9UZ@7v<|2nf*nG4@`yaottN90a;Cb}TMaIw%8#WAP0C@jt2p
zgky1>Ki5&-q80V&OdP*%yG0SdZu?M;(Zy8`mY5SLz)MI63=(i>;_}7}NWh(m<MbRq
zx=3(ndkB71WPq{4RX!w94?^B!NTMEuyvLA)oLHy?kRb_7EU6eo6C)C=?g`^)*$4-N
z0*Mg`c|Wri4<tq;8i`CBNMMXeT-1@<bt}^TC_v!1N;`o-%~1(y*dWpRsDw0Zkf=E-
zVH<WU3M8ISaKpX|1XTRIBLf8z&pZ8~K;rp?G;9<G((?%z_I0r9)|U2iqTmbm%0G;2
zi(gLQg6|O0cxza-HX)%*O5}h1hv9P7;%}j9JOTOy8yzIjCnV&33y?sckU+MZd@M-#
z*a?a3q=efnM)HjqFfsZ-;;RXDV#34o2lZUkeJz0<V==N0^-KhDuLl#fX}p|EhW4f=
z*wB9&SCmb4q@ws>YC<mVt@+HEnvfp^1qtM-39N+oa|qlcnUP@U{$>2Bc7_8%RyM=w
z7|om+3AuQ*<}+tT0*eP-Bms$wBr_6C#=3YmlW43RkYPrmX>a~j0Lj8dk{OAI#<=Kq
z1FAue*$JgXvQzd}yunjh#kT+3xU38;Te~!~W+!BvgYpn!b|P8I=PO8Fzg>I&jm6e9
zv*sn(P5&{vcAe)y&~iM_Q3Xw{c?r3qqYfbEC9oXxi&m}CX>DObS(0EI|6^>Z#h<n$
zG^G|g>YypLFd=_S2-N_yFo8f{j5B@pYhj|*lKOF`BL+UsZza^l_2VqLsQb1v&XS37
zUKHZv{2_Us)-+3(Cs^q~V@=s|M=YA8%N?<3k}kK68+8D^Jb@F5X9Wf(=?d0%knw!y
z6%GW=(G`w@DA-?-2#V}-Yd%L;ByisFA1(#v=m+e7gN%V?A2<j!S3gL|t$b@fS3gKJ
z5eaFK5aNRbes**XxtrEBS2yOD4K~)g$~HO}bW?DngF&-&V?w^#j5@&Bn82&e9|#Pb
z6>QJHKh#*`x^laNK^FzLC*&beYkpR+Jt4oR2@)9F6RC_j1+TYz@LjPX$$}Bd{OV!G
zB(F6j>G9Hmi3i_%LQW~E#Q2N-wICr0X#SgX^c2g?&?MGky#4|b51&ek&&Cra$U?GD
zB2o6KBo;VP7Syn$eAO0TuRvLl{F}WfOUu`=B+ri#E@T~!M(>qKWcZ-@{Q!E3!o!o;
ziV9#D{?keM#xOoMfwCZZ{u*WJw#L&*q@sVu=jhZnmi9`rV16?H*mK4JCHP7baT;xg
z+fcX1C)rOg7#%MekK3Jmih&ET@ktq{frMP+sYkShY(rgm4ZX(}@~Qz<k2BYcMvOi2
zq7lh~Ya@_OUULx0_q;|3^j(lP)ayw}w(Lctb8eDThkz$Jbx0eNs17a<p$@32N!H{g
z<I3Drrw*xTs#Ax2!&It6H+9>PZ<vu}&%I=n=Vmx{NL4eEUNOf}2z6#8{YCs+B5lY4
z&Q7xby<}X|VYX9;X8!D?Oevrc>da0erO=bN11o+5#*@60xn4FJvvDsQojZbID}(0e
z8%Y`1wc+#g4Kk*QCdQ`J(pDu4jx}&4pEX&#kG;kDG&5jFtC9#ZKg8W3wUkEbXuiX%
z#(!J2JK8|5j^G0JXoG}!p8_OgI@$mW{D(B;IZHd+pkQ7)-(s!NO=)(v0pAh1)f~Q|
z_-g}YNJ^#OtI$E?7!(T~=dou$HuiTKm_kmQk~`uV25V4C?Ro(R4GkvFWFMr<k#rMM
z`8l5$Q#`o|DcNhVA>M?PG$N3wH6ewe!A&Pr!o$~7>>rzqT(8$tGC>J0XUmJ%AW`S_
z6fRy<qy`dx==D@kd?}Vleya6)Ds(wN)sh@K)p|X3$))@xIY+iOCB=N3jZ1S=9O0<_
zDJgj!0fo@eloaM+S1uf==_&TN%|^HK=_$Dw<an$+JtadUkbsz;vcyIcB(H?!mEMDg
zu&}*3DRz9bF|%xrgFzwRoRkdtPzV@vQW<f_8zeC1r0|Am4Tpd!&QGz=w-^J;<~tCy
zO`PvQkY&zKWjaV5k!8+Lb-I{;1vy9S$HEjFzSSrzTj)U0`mxaI3EAhul#Gv22M`NW
zh>t0ekfV&zq7-v|W^^xG<Ur7Q^&$s?){jLgx!Xq_KrBk(g$a6TBS$e_KE;N7X53Yl
zcOVQv<Q)hK_VOv2g+(1e<Wu<3)OGZe9XVP+KFmixH*Rv5edu6NnD?QBK?}%-ju^Cn
zd`M!9pampHht2Eq6TdK?ah0ueFlYf;=U~ub^EyWkT0qv39B<JnaE=a}x8)!H%2=e7
zZF4Z_CtJ5U7<AUWEoF&I0jL9vZ7Ez493gB2C&@e5z26wmbl%}W&_^eBI1qI6d`HR>
zQBRJaBkxGH>%cF(=jgiSPFAwhxV-C52Z4@=cc$d^f0O~j&Qx5)-5?>v&J<Qt3L$fJ
z+FO@WE>E^$fBptv4qUX;NOuN9ctt!0R$WTQU?722mr8b&Rz?|uy3{3?nSbI~IPu-j
z{JV??I`4N7=%{zU(;qtO-Jh~VIwPmhQSbg#>r(#FmK<H>{Fcq!W!%~MTL&Qsgl`=L
z`o-37Q*uLtDnR%)g;xM*Rm#yt&+pkKyN!!GfA1iKfbhM8K)<{CeM-jZr~-uVQ~2pv
z`VsCN-2(lA&E9Qv?EHg+K)<*8gM&ct{Qi)V_cBlg2tTB<jm*Ds1l$lk!4h>wb>|Zf
zLKp}q9E30sPB^^?1K|YqqLL%vC*e-9kLrwvJD+k8iZK?aQZg}{Q;LCbDkUx|LhNE7
zoJzHAZ{EQX@C$Oku)ppx?&|!DgAjoXzc?~PfbfgciwF>Yp<YmSDyQHF=gzTndyE^)
z&p8NDAe?g$=v~xvDH#c)3J}hvaM72CoH-?iE3s)dY_IWL`M`9&O~rsQFkSCJW55`g
zmYWOI0mi^|qbBxbjU(Dg=kMBQjC7R`cR=C*8J?EmUQUSvWOzCx-t__rkl|_E+2yIq
zoPtm1k4m%j0b_mFQ4R*;Zm{Le5EKH&sI+{^10*m;rSX!-yV$KkA9z!0a$1?1&bK~j
zT<)pB-}WR)LYB!+hmydVoR*tR)C11sG&Y&EJpf6mwse!JX_0CphS)AmN#h5QD9Mvk
z8Xy!&izLtP!-jUzjI><s@d)5E(sC~h65un^*b9FnTuKUGl}am3k{j6H=4h9)+m0Ah
zt^~uDGzCfLI+CUUHrJ6f1+cj!DFSUpZEI<Z(gp9O^BsOLR=Glp(m2lLKiS)smU@II
z>M`S~^1KZWF4UP%OZx-~@O(Nd@+%+#o=+q5`y)x(mR8<((`@ZA<EQd>9SlnSzH1AJ
zLcElGX$vGU-c2L7y^jQJXK8EG1sn5cjvISjfwgIbHu%D`+K$BggdIL<^ep`(El+2_
z1k@+#l*s0S1k@*K?ENToYe&*-VE_El=v}_S76wcRv%wYyBo#`_l^!GzHl(rAKSP<p
z_LjCaU9f|te=<fEZ%re6a36r%lPsU7mEz=$^y97Uv!4)yf)*hmo&xgow2VJM0`l`T
z;*ZZsN9{?fuUMB;#`fG-P8|~CtF(Oc8f8%Dt28oUJs?E~OWT>oVMzC%jR&GTNec2v
z9Uz5PmsSp>)no;iW6RIR9kt*HIq)2qb+#NJfmug#kja9C$=0Qd55Q#U76LK&!PB0!
zx<4(>xg`(v_NL`Iw`5^2yDv>C3-YcVs7r^^_%+)mSvKvokt+pZ3qc(_l$M9>C<(Ab
zX&kmw{Lz5|xWnw%)5afq9Y%e=0D*}rhtu*mM?j*=;k3N!2ND6t;dF~Tc+5&94-^ll
zTi(tCMaiK+@o@T<Tlw7UKoG~o-0K7aCVkAFd?3->F?;fX<YnzdR0oRnPNl^`@3Aw6
zcF!r>l<)|qbjmg*kN`SmPdtzSIz<x?_ai*`_S!G$f?w0(6Wz2{{gU=1`2G~1RzvoV
z-E`K-WzM7(@y-O8(9Id@b~kKG@hvrS+~dv~S7*+p<r@ZIqRhE8vH`d+k20Xnv$JQ7
z>l>a=%eQa9BrZ*_iS!BsKB_b%Q!qNi9y({dRy-twFIpiD;IT-Cp&2F9=rQ)mKCJ=s
z->F;dlXFI#{po+k#U*&eV__-?yrCJ)5Pbe0B;*>FVGI9f+*2|vBlpzcqR_Amwn3PP
zC<N;13~PSg=vDG`MtD8qayHJ}y7NL%*T@W;ect#($;ga6xU=}icw`112EV$2Iv9;n
z8CLYG(KS2DL82Y;s0@&X)Ar~hOJkXW75V<Z8u<NnmVpc5hw2wmC&y=aD!UU1jNW)$
zl;l<i5<MB8ky{#&5NCV_Tbi{LUS34~oRZ1kt$06jl~2K~MOll|a#J$WJ)#sZ78S7}
zNPtYq;FlX$&=&$Oq7E<4<o~34yQpQ09T1A-7iZ+g0i^)4IFk{-1r8D*i!+D;Xc@VP
zsHGW^Qw4#VOQjy@8EP)g$aMrHFKe6fMWnp<Gu)J~2f?ZOjzGD1DA#X11=9N&x!i#S
z()$_M@(@yRM@#!CQ}AuZmHZJekZ+#pNwC0L-IE_-dUv`)A7zY&Lg5`r;p>FLJAyzH
z>uiOCL=)?5g@Z&B>qz0>DClQLQo@$}HGXdoSLZFZs=!5uw`62u9we2@$hW~k0%J?2
zWh;7(3J_5DHnyk8`_Hm%4gx8ATSnfKMHwJ$%QO%hZID3Nmcd4wzsBB?$esD|0q;mx
z=ba7)seNZgCSy?u7&|jT;lDsqr4061G+-S`>vinGkhfvmI(wwRM3p*wq(GudUB(`%
zj+Cf4C`PI~2p}AE8mGMFL3^a|6i5f{kpc;%gEUfz9Tc^br5(u>3@Z75syhEDDXJ@v
z&$K-)Z}udH9zYnhtGcVJng|RyGBf;~89)R#M$oLuCPvT3oMdx0If=U`$CFL68AK8J
zsr>R`2uftbNE93yL&E^_V?eX01OziMFo2>U7!`0Z{1{+A_th)f{MX;x_uYE${(84w
zy?UiTNvZ>7AE)Ga0-1%XuuS4qDt1;MEK{=@_!Wi$bi|!X*?bK|+^Lk^90g?3IF;&k
zHWf}9LNJrY=~TQk6;2wKM!Pd9J84)Flg4K$nKY!BtrEqbOT{LYk8}0$9%|wb0AW<|
z7ehQ34H0NqZD|ig_PLbZa1LZbIG1uKnuThC;WM6dsq~$td&9xv2$xc9jM!eRm-JG;
z-rQ5YPyr<xwDjdt${tHlWt`wripPU;=wy}nz+^{1-AjF=cCvG|kKzN99qWlOA!4#)
zj|2dkM%6W?Ps{g`s*{O%PSM->o7j4DP4{^YZ#bEZR4oCr&<VG?ep0Ryl?xr)DgHv@
zLdPZ~AQBfk#K$s8NY!*XvBZfz>*RyJ>i5MB{0>LMKQvt8*iAk_8ZL3{CLbUsT;kmL
ztP^hX5rUX7{)}Tc`B(}%d&aSwd@Kn;&p2%I;XO_|0K;<*k92P|n|yA&QDrN^Q71&D
z&pCFJ56rZE&f($GPfT0Ta)(Vm_g~%QQ>wSzsBW!*8c7h1E_dv*T(!~Ya))I(`5a%h
zMAZsM-;z@OzQ4k;=MO`r%?igxB9QB>aO~4SAfB?q>3f?g9R!-vVTE(UI8!=Uij)p3
zoH1j~-FUTx;){-cHKm5tz8F~_sv+BS3FNvjI`-BP$aP<ISYkK(<*Fs+G&#D;QIC&m
zD#(zPnkMI}3|XmZa+2YC5p9ss<gi{OYiiZ9QnT987aUblySgAkR%%ukM950bY9|@q
zFwq7Ps~ysz*&kLdl~aq8|Dmgv6<4<u6fKK0EskBngo{=!4s*BJ;#AGzOk%4Od)<k)
zI5p~H8Fi%rT4X6%nc3>toIwKwY;}6{GKD4(hui90|2hsQg{BZp&S-VwuQ_4Pur%6j
zb8ODAByz@fM{<Vb(rQ`c+2NRN?E2W4Zau4@pj$}c_H`g#+2Pn35QxYfPLx-xWr1gx
zV`jjA1K>lu3c8eKo?Qi9$}-O`$IgH-BWagot2qwP+v^k^al&d&?)vvS_88$Z3F&v7
z=on!j|ANC~gn@+3I}W*plXpwXBud)!q(FT=)kYgBDuf76o5O7kn^J(F{d#?%CZ_f~
zwyc9FREM(e+lGhU9nk%9>fY1=$Cig>rgl2uP#%VI7;cCDeGWMtj(v@{%sfo!aCpwe
z!3kUo9URtQ?x$+fhaFprLgZS99ZJzAl358S&YgCOrn>nb_EQzt^f)aem)Br>$jHwy
zip+TZ(s!;c*OLdU$}CjI2su;$5MgIT0WAH~hCe%X?*Xbl)#=zBT@c~vl(=Py5gyRz
z`k?{po2k#E!9f(N4DK$&g96U!lLOQ@Qs*Ki^)L!JCrTP?cu>FveeXauE_K1N@4ogh
z3b-J#Dg|Z_Q9ze|b)XuP>T+xm3XyAdITWGHT=3v>mvyQ_-Q!$#Y+Vcyp34q(F$*p5
z5U-P6J+DH2&6(_8Ws)~vC%Z5a)G!f{Q(WCup(>myuC0rq!ZgJtVe=RVCKg8@b@lCo
z)R6R}?o}1Z8{?0<sA!Fp^_-YD(=B?+)z1u4uk@JdvSCh4(o;+_%Z+8eV3MH@1oJFV
z{zl3ym%+<-fO?8C=D50Tu=;0bPShW$FwK$v{EuM*&E<Iio7Hcexvn)UhsYT+W*u#q
zFvomXcigPTIP+brM~;hwX}*gd*#pewu*X7I*H)@Y>4mO+BN{493*C%Y`mt0nHOa)&
zZqY_pzf`F{>i)D#1!Jbp8X4MBjxSn!?cyN-?6%ak841Wpmb!NC1k#<QE_0_WkJiXA
zm$~|vLljTgT|1#eMZ_}KremPtvRj6Lh*;(_K1s(lGTP;?J~M=Lyu2VnJY%_QADhC2
zh~;i}sJT}FB4WAAwh?nUN{zr(ZvOr%HLG~gD%Z|okZHBbwR0HIuwm%!Qp?nc(wbe}
zr$)Utvbk_&dG^rk+9h3>kkRaxhgB^Q8O<(Ltz^*}@$ohK;fbnm6~Ae?#@br`qTw3X
z=1(9E*SJystda3;pyHpX&QAc)l?{b1$aJ=$pg)<;Hn=u_!i=O1F8OmxH>^681nL%@
zaf{2prngK`W%*6R)X8hQ?{%YFhoNHLw$Qw{0Fd1lnHPxcw#d9dWVeZVWk1eP(R#an
zyjI;lu)WYk%-QbRMHzT#((bYtQfHcA&JMm?sYcg#L<1UXb{cg=0|FwU!?jf?5D6VF
zRp=VIUl|Ha9Cc$K<{Ro%RdEA9!`YEPXm`}Lvm=mpM_pS{1DPF<y1hPh!`V>?W_Env
zjURWz+0oKy_kn9?M@wRMJmyBT<4|#pj|lei?yjCTQT42Xg25n#vm=nMd=yz1h{%tw
zT6d`U#p%$x;{ixJT~LM;Jf{oF5I;E`Sr=v`ofhk|c{e^RnK<hf%}N)S*NJg&(EG=z
z0o~8K-Mlb#hly>^S=$1Td@fQK5Xt8v+X9h%PHg)SS{^1g=+f_xRlgY6RcIo%?Q&K4
z>H|D9>2i7XK^{;IlTf{)r{Ai+S#ia+3x^PCa>cc0#sg_`#ideW5}*laN?LzuoElv*
zC2b7}l{Qn-_Sj6I;UbqyPz@91PfeTq@*x29J~eIi4y5JOw2dktEvKfVs2V1EpQ(3E
zR2Rnc8#y!6HYow+zqCzCKm^T9+n@p>Xl5F<--p_VClgPki?*WniK6x%+8M8I?fyi%
zTM(*!xTt+zI=tDqZh}fw%!|gxUkIL;wh0r6;CX4ZeiLIGF3MV%)?+8A{uK)gZA9%0
z(>A1FqRqlIA$6x|gW4CR_3tLAiGvmu+K8w{X=|$CM(>N#nCdU`0B*P_et9}ye!JQg
zt6d&x0Ww-x9%%uHkmYGxZ39g!Cb5$eiNnPbE7SRYcc>p1k6u|2A}bs#3qr&uE7SI=
zCXEoXGR@Rv!g)A0Ni?TpYt#A3b*iGc0RqjTgi#Hod2`xEHIU}bX&co*qPjWVYi&A=
zY9W}YekC2xr^BeWG}`?sZKK+fi0U=zD5{4`&Rt(@Jqsi-@+=_TSRZ*75OM3Tde(5M
zLbf#GS;e(m3W|`MhAjm}$W6nR$fsz6h%Mq%AIS7OBAM8pW(EAqcd7TgZ%=n~Lth#p
zzVwFmrDyI|iGgoKs^KpLz7hEn5P@%qFNt4_5C_<)ci*ihjocY^2_jwE8FdLLOlkXJ
z03Z@}rYS(=iR1_g=-v9hZ>al6?Jh_VHSJE@w~FCG!tS&mJ|6`lVRzc@OB^9+uhl4k
zmU|<O0%^H7(kRgIMzK0VoU7f$s;<9BCF<G>JrMtDFN{I_t36UH?U2(hYF*nCwT?_C
zW@L)~*UL}6N3ALCJ|h#AH6ul_vom2?13>2NjCDF7GG}LOlmd}CJA-E5khk_m%9xMm
z`+iTo)uZ}&#wH)ALeBKL$y6ag8XeE@9+ug>H4<$mKF!2BGkkN=yus3#-~N#5UEBaM
z^mSN}@M*^SIuHq;W~{FR@%2wLy*e|YuM5HW`l(F(vrOpgmPWhN8SCqogs-2;h_63e
zW`@8ly2y+D){E!A`wR6u^*uniC^XU}fkmE8g+MyB$g`;si10;TI%94+fplt-=l#|T
zAIJ%TPGRY%J^Mgzq?mGv7p|lN_-~1KRcT_qC7#XL{EPG@UgQNMC1Wr1OdWJ9071(N
z{ggzptk6$M6w3<zlti)2!w)`^@EVm&G<rpw^#_lrlieG=Xw&s5@q(3}@q#J<5?6ZG
z96%(l^sE;Ek+{;s3)-YW93{qD?dhheYTuyMg+}59t34HdnF%Hut@ijV#H_FpF}23i
z`N!1kiZ!0yvNOsUevNmn*`$VKG5i{jO=>dZjS{pj)ZY*Q`db(256I=#Mfw98-bjC=
zMD?2*H%}ukZHg2JkzsC%6bD4arbux>L~IhpJtr?T)+Q6J9v{BG{J2UNcW?EgmtJc{
zb2~!KjQ}8WN2CNGB6mcZ10r&VXznGMIBL;cVwV?t$BUOgqX&=g_Pky-Q%z}r6b1qe
zwBO~~KmgKymuCY3h|lfvdcA|s$wG$^Od#y`;(NU?5G;*$Z+kWnEQvta<3&loR&v}v
z?+XhZP*5<Wu#^MRm3@(dfr#99)j?|o9ts_F0swU%iu4RbDTg9G1Cewn(lgLBMbGjU
zR9!Oho>#OjTU>sJtCy@T>8)$-PJBf_Fh>pW-}9Ia<m=#dY&$#V#ZG#0`GU-~;BecS
z&~)=0wRXaBFFxKZx`lr+xDUPf*e_7H<_V!h;y(6brxEw7NE((Al5T!N{qput{-Leh
zoqp=Y>k87uET_EqxU166da?6JV=>rvj+`en{m_$YPs8V)-4bUyCz}7e7yofVoapkL
z7yr&xaTmPUWyHys&`lF^mL<u?x{!oUFM9U7=OG2TU7r2IdPqU;B`=;Cc2)4h+1S)<
zy!1aJ!JJEENc!Yl^`ojO*?4WCS8|v9NH$*o1q$*W&2mk1e_SVlFg+Wl5CArxp0$n)
zq<_=1HiZCbIz3Aum@OW4;#;$``djnW+{)R7M&kXmvo?jmM5EbRQivSWStojXGRv!%
zH|h0{sjt?CSsOAJh91793`EA0S({OS$apeKM!6!}4eNl371`Je+5E!`)TNRK_#Md+
zr(Kb?*&jyatjOBz4@Az2tj+#FB5_65dm$TUe<6g~|BqR+|5Vv@Rwp^AC7VC;Ta~zG
zR7>GPG7+?7?Xw-YxKK;>D`D6Hxll`%QbbZ<oeXYcHZ1x9wA`4r5elT`#;lz}fVAA0
zjZ$EpgmY`-e?Fs%>skvJmwV{e!YHM>Yb}gYs=L-Kq4|d|5u5eN#L;ZgOh4cBtXh`n
zc{Iz*!;i?bfqF6hiEONAd8fX2mkRQ8maFd+S3n8#82=;pL{^y%#lnu<6InUiLMDTH
zvC+r6*YoNR6(1Mci1k0t+G-yj+I*a)+Mf|#67zTFPdv|BMr9|L#-~e=B%(UAz09#^
z0%_DKX8N<aP&XbzozKQ*_`30r>b2|6XS;pbY;CL;zKi<TFR0qei`jT2Ol*EJ+pC|I
zEjGWH?LW}$JFXXVUdqM?ln>Mozo2?N^`goS1c&n-|I+qSwr9994y5g+EL(|gGXqBJ
zSM*&kstJ`>vhnbQ-FjocE7{)RV^|<fu4H)(D?1nJ#e5I@@qXpi=5qS*i)vsc1hc7J
z{^oiQ`(@#SU?7bj_SqyTdzb5_EPuq0*Od<n8{fTB1(guO9s2xD<463IBnDBUROFBN
zBWp`1nZ_&{PW9te<zvFeudY<XDj|d(T5tC1Pxbo@vW;amf2v<O#O$=Lm&L?s(s*##
zc+@JDtAr3WmX-Wzg~qayKTR6TJNxyr`aa!{-&{UAZ2ZSnYUp4H;d4*^rtx(D`u_IH
zvi3gRuNYi9MJDXg$;6X>(Hg%o`I0Iwd(!8j{78h3##a;b{MZ6t`%P+i13$ytc>X}#
zJpa1T`as0Z^Vt$3+gE^u_&mRSfge7`5`uY}Gv8<PvYbd{Dfs1lpT}}?G>#?71D^SQ
zZC&XvO$WHlB0pAL{uB3GKhlSq)Xzr&!?ZKnJa1m)+o#1q!)#AX2GXZRJ}*MZHulky
z0vG%GiI-K~=*0yQk|Y-UHgmy*h{e9W?*t-ZvCn<yC$b@Jv}C|0KlUd-f8A>JladC0
zM_rK&*i?`s(a=<oBhk<#azgb;25j=3KcOC}MUWfTA}{;#SNyORu{7GP_H8X<Nz@|E
zzSJT|{z(>>`K-r!zi6*6S*s2w*ZU=X&9;?Zl4UmdvHs?@3Li*^z$U~>fM{cb&yoru
z2IS9;zOG-V#-}#=F|(sts4#8x+0i`OFo9mxe^{r+re5`9H;Es?BWius=Y~a=!_D^|
zHt9r*s!DD0V-=Q17M3^pH&@DjQFzD&oAtL_RCQ{zA2R_gM0hs)g9ev!@C6WUZqX}S
z)QHrU!nI_fe~Vlz><>Y{RVUWdpRI*!$wL2DxfcG59Addu|NDAX>$Ljzd|8O_wEDc?
z$ML$tM9l8UZ(FZ+7dt!rn2AlH!nMQawCp``!$olJ$-lBu-4k>66#679{d=TOlL(_R
z$wZr9^ser=Sxro~`P?wb0_GTrqWymCfS$ft)i&@e3~1=+eZSu)d<h(gwfFn1t&5ic
z@sj<1_5fZYrHc?u5Vc1^WGVEZJqjXAk|1iAAUZ3le2m!lh#&LIj}^Q6wk_(^SWxJ>
z{D-cOM4k&YymtQ|kUkypc}T+v(6JIe&hdd?bjdH~1Ze&4l5Rcppw^Ov9`skG^zXK+
z|4x43m!ymXUM~)K47-FM>;xhgY~Haf0n+PZVgq^Ba=mo$xPGuz4N4vNW9CgJA;NQ9
z0$BWpPhn7)>W!`V&4&d!hAMKn$%cpCp3vR5ss7H1$dV9gc|t5Xjg3Aq;ehA!_ij@v
zKI*(5Gpi6nh3mY}Dug&T5K-s-stM+7UV(J+yk9+Dp0D#aO1q$c|7SHYbs=(Mh={l#
zPW)5DgM(hwfBUm~(7EWxYOGvw(2M@?5v2<-4TA8{F8!<jQ%|{Fg}#V~c1d5piC2wH
zCME|(I?y-oQ2!E44tP67D)F%t_KyXz89}`Ca*U#MtS#&fE&sv}_3PrAX+eC9ah~u`
zq&^<RAN&G^K~4`S?Pca0D}FjVh&>VL``=U}8u%HWBFG;Mes*v}IAH>5HalSFlsGC7
zN1Ywyo(Mum6@qcpIf2dgmcr%d1UB1Sk~r#|07o^q$7At>#DXC9R1hzJP4|9Fz5RVq
z=&1aMJ{JV`<yIhlS`cJRlA#mgs0#uDKkSp-?kxyzd5S*Ce8d0rDM=3&2Jyjso(8?%
znoKMXik=Vj*LSL?x-Skm{AaG*YThcYyEMpm?&L#LcP$NUVFsBiE)DD%mO!q!G@v||
zLI6k_SsElqnd=Fps5KmABTL&txwLN#^55E}{<XNFu^?AQ(iqrf*IUg<8UvPHL%Fhp
zrZFh{y0IGnid>=e2oE8&6h_t<+!9^fFmdt5pzdp>TP1S&6w1n==#`+jyt!Du#H}md
zR%??h1G~+!w~TpJz!A}tE_U;CK>7qW&!|d($X^xkj7q|cPnK}*ToAiO?>?e3J}|^#
zz6Zkml9)msB=(jFZ3^_vJ!+EE#1%{&Ks96nmm3tA=<LgZzOY9Pb6yVYvC~jtdO2X5
z1^x*Wfx9};ckd;guMT3y8-)tfYVk%6umlpB&4GStuNvw$2eEL&CRCW31D=xCWBGB(
zL_R3m5a?^)QMG0HfE_;)0OKS8)&;TkCIG4$z_=WQu!aIM&UJx3&>l#q*99zXi^~CV
zxphHiy$u5)m@sIG!oX7KNlO$4mLy@&B4O}dOvM*qHU&km2iFvr-)Ww|>HCh9d`XgQ
zO>$FEk~R6Yj~Hxo5UUFFE0Df{!)ylRDw_i`h$w|`xyXFF<*#a3YD*9sYD@qTo-F~7
zJY}xzBL>;3d$+0D)YibJD~Li3NLTUzzK@uxRsXz=2k@;ytlG*EE42p0h8rvO5i4!e
zd)ri9YFl7)IYfB21>|zs$<RlPv|Zo4Pt~Nh2eFY>j@W2>P*-m@1enjQyrv)9r^b1&
z6?i0lz9u|B#*Vio6FY*Uzu?sOT~*Yzy4!wrN7;^mhm~T~+r+4E2C<#is9=l=A>5V@
zL^p2+nefI1$PnKQ`VTNh1!B}UgMmA(QH5ZP`c`CAOQBnDMMkwGG3r}l)Ke0GyvwjR
zD0*M_ZC9Tr_XZ`7F(V&xVaEw(3(W|mH(*nymjIFbPQbT;czqMdpKbaF2h^xkTY*Q+
z*d{zT8XnL-z4?H0Qu}ZZqguY+BGh2$Fw4Uj_v=f-vp=xqUbzXj{Q>1(*2uw(?Rxk@
z6{OlDQ}aO<<g|;aWrIw)nDL<g%|SNE9E?m25uSr$>aag(yF;Hi$hA5mw<<ULF*?Mp
zTqB1`@Q@BVR3>#Ouw^4(O+n5fNh7}DAq^hZKkQJs)L~MO9hVeohXZ!<g*?<~NAwHA
zbEGhKDbbF|*waQ1_et;SQyt1ny&J^B*`BYO!1HdvYgJ*N<@A1i^C9~DUJx@cf-zWg
zcz?i)V4)mdB|EBrdPsTB(ZaaoZ2qIc@R6n8$34d<6UT$1zv-q!>VdN30q1{<Lyi}R
zJQ2h`vJMGGMG(T{XMkAwL~vtxuqzN_osi5WSq6who(TGVWF1ln#vxBe4rwWL<YeTK
zmLv{&QXF!zI3%AxITaNBJwf!$qAWbMy`+c!?68`gJQX=-UvbXUSDh0`&%mK`0=dR%
zaXgt6`igU&(L0Z*{;4yO@*%==MwCw_3=iltef_&?bn3HcDu5`|fT@7@72sjKo%*47
z)sR$Y<O~qu=@e%eZFq3bv%IZE?SD2>eqZC9XT_=bj1qEi&d>E%-(#E8=Y?yDbAB$@
zx)TFUNG2`>MOV;3y;Z>c_tcQ&1u>OW?i0jRT|w-!-v1tzJHJ93L1(aCk&S@#xht{}
z5F2#`{VrP@3BlOtQe-1bp)Z#r8(EUr=#tpzpnUp+ucS=N70t>Om%nw5n}6!4dZ#!!
zEmv}*$sIR{c^=Q%659vTDR4N$0uldsj-g7d@--7my_|mi19gWxJ!kK7pu#jgC*K5;
za`Xl<#f+T3<(Qh~%qVb$WVpU(m>BKMoIZ3+J>bsF+4#7@m}q8><00fDSGV)LJ6E(I
z$2W7-x67W$@m`EL|LvmDxw+W<oYa_A4PcxfLio-SkZ#V+*^`lhTxxEP&35AaKomPS
z7tGIvm8KAkV&~;-rD-XQVqVTxnwBJrotLYvdm!=PfBo#|KfC4a&#xKKO;7$%_5Xj`
CCN~EF

delta 45842
zcmZ5pcYqW{*5B#r=`=e#Gd(+DcPEiW*a4BGvI`i_cxKO2?+hrXexKnEJn!ziu(;%?
zpje<FQKAF^Z3J9E7ev8D6h%b@34$!H2q;03@As;zY0m%Vy?*akRj;aEy?RyM^Zxg3
z=5J{;V32Q+GRQwjT^87Jld^Gvv-76F;CxxFYMD3p{mWnb_J5*pKfA<I9)2L@%lpnV
zo#Fig=lvtN@nqQ2?Lb-4C#{`Tje(y7cGEzgrD#RAwp1zFrT97xXvKP0Yd1J$M*<l$
zao>Y|AA6!r|NNi-+UJpn`#;q8f&BmW{YQVcW0jtBUjHd@W%uw>#YkHBTdG#16xr(Q
zthlq*xAJvGOIjf-KuiT(CDqC${X}-`W!=YBe73rRz0_H|zjB45rKF4xDl3$-b}k8(
z6-w8ur3xO_u|gN^{z9FiMWu{FT*c0~Bvk5@^DeO_`gt)R*E_4bXfOH->%DUPP+G5)
zwUJ7Gl2SVLwl?~>l4`3P*|2Wf`-P2)mXks%bT%sai(C>q8<orNu|^A>fURz31G{Ta
z7dCr30qAU2^3_r&0G-Xs)%RIr1H2r~RzG)oU8Fs$6h2q95-FuY>2oEVbxA0FuC%?#
zdPNkZ+v-l{>!B^|uv5_zQb>o+P9<4zN$BiUF1pE@t6GYRE^btcPB>ro(9ToBjf#=6
z{$!~t@3tlu@2Nd>L6f3zgAx-x)1=rOnMgo2DP`r>bQBNTXKP0k<v3f|Q=4`(epyr`
z@nL`?O3+2|0p*Bd^NyvbKslmRq^+<JHV7qiT=82`%cSSVP}4>mj<RXJw9-qCDeA>m
z%nG_s)Dr0bps1JpHxu^zQBkkAj$$CIsMr~$sDT~sr5%Z!QH;1Xm1^vx!CA|u+@eil
zV=mRS%38l-@H*oODp~6{i(L|h)cV5_>mOVX4~MX|mumm49O74kQij?!#9thDNvI6*
zr^>AMTm>x{&K|x@E8H{OFD>I!6j)}sUs?tv5Qh7ueL(_YxF7Z<GlDdTthk2Tg-BtS
z;r{g1)&hkW0)?lYA1~87_^O`vO7X)OPy2&;iQ`8pPy3s7cS%z6U(&;RFT^o0!sj`C
zuFy7VRr5Ry6&UmU!4^^pCI#8Dy-NaPp1(s!Yd%IVs)}a4;r#D)+5+W@H$030vAxy?
zfboXkZYeQn2E5^KbDs60Xp3fRtNlv7Uo9V@u=_fhFSBJ28wr-WQM<DS58RH@fU??e
zioxYmG@z{ZmnQgV0*TSI+MlfV`z_ltP%{lyE3vgTe)VmCKw6UXptlx=f|%)wX?EZ(
zzqZ<E<#?koyWa6D&C8>C_NN_syo*oKVHB{$NCt_jyyGuR%LeIye8-<_X8j@t8@lg(
zKU=&*KY6)NF<|ERJ<}L4&HJ8d3?RMlxA{CrZ44m2?{C(^nxJ4bE4KErzvw6D?>B2n
zU*u!IkrKmMq2c@~4d>}yKXnZRCa^wrM>0rYeM%$wW2zMmIc<ku*$p$-`<|UzRmPsV
zReQY#EMZ^>K!1m8V35$?;V+GI1A~NtclZ;#rGbgT4g95F{Yn~G@}RfVHLzsCz`MAC
zt9Vr~MfUlXba{t7TX&mwQ56W`LKH=TrT6)R5pG(LsM9`wlrJY}15K2D{_+ZIlxP#k
zZ`dWj)5cVN<3Z3Y_{JX;(-SIy_{N`TE)mJkf8%e}+WL`3pQ509zIU|SwZHqSzV|R_
z7JTmyiVlYmFuwPfiAezx7~lI_x8dW3&+TJ=cHa)YybB0u9&?8ZNN65&hYCn&9y>c!
zcxz9|p#lPRIpx(s!%#Wp4i!8F(kXYSfCSPh8Y;`l@%e3SfLb(#U3sVGga@dGZQX{}
z`GwyL-KE`LS*yy91`|lNs&siEfmEwvpxne&@Nh62dzW@g)nHY2i(m1fRfAR8Eg(rq
zmE8go2!mC0%TSd=pnu0W&HkX7O4S$-gSvK%8Wdj6&%1VvTEW+O)Rek*j9TbmJu5Ik
zPH-N)TZ=1I6Fdy++X-rruk=u&zMY_Eg?9o;N-Dh5E7Z4s>f4u`H}2I6zUr4e4C>pL
zyn0aIzNA+0Ws`J(@sfH$Cu=0^8o;tSLoHg!TJ_OJglDLMQnG7+ubMMiT_5fC>`YbR
zvzM4?_e`}}bL&<v1Ke5c!uz$~wVI_W6*T-HL($DFHJh_$Vg!Q*ITr}!<9)2-AGA{T
z*8SS3EI4ISUI?T!*411bm7C8Vc|f~1J6~0rNg0Y{=Bq7RSr2j<w0Z&i_yO(V`~t6T
z6uB&*y4Cs7EcgOPE&9^AyRY`9&vw*6lDCVmlgm}54O`nsyS}AZ96|HB695U2<tpY*
zPZZ>%xw(Q(c~I+}TcIjE#3LqTR;cH-<uMUxkZ-ax4{A^6-c*&=yvAS>S8aQ~brc;1
zAvEi4XTd|-UwzrPRfP`;;zH_e8WMMNA+&29>-9g{z1elD!n+GH)UI{ZT^PI|F=gIi
zb^oK?l6%Li5=CI|P?es>q6H!J|A$V;|JBAS)gP)#TUjRxxjt0eSGpwX^r2elZIxIW
z>CjO7Q0>sm+D09RHNaN4u``cqpXIix$^}x1La=RW=PuT>qFq=Cb~wi$)8fAT4zKkF
zq;^p2*V5EgZEcTQ^c`#eXKhV*kBXQD)`e$+kKf0B`m@%%a-XW`Q~)tii+!pQa!FKj
zpBjl;7jYFlJis3Qi*`xn0Z)bI>H*ad>!!-*>H!sQy)RcmRT|lrzi1CuHp)RtP7x}N
zYFaGVAW=%AiUs>dt^%rw_3fwKe0h^QsZ@m~W|Jzz29Q8#Qd^!c>q!%{Nv$kcZ)<3A
z0M05<^jyGKzD&!rv3CUGPNcuq#vdLKKv;Sq3JD0u^_wTPE|s+b>A1iIYHh$2UKu1%
zYXb-<J98C09L(lCsdcR!9FPVJ2u~F-V!R?Cp)xp-NLrn^3R*vm1^=dXt{mp6Q0s>U
z;6lmd0p9vyfq25|$W;I^l0EV_tyASlPlcL0GJvg+P@(3I48R|Xiecc6VH^LZb*&l`
zkRCOlkQW*g2nrj61j3j=E8&Ge0%1%5!+IetbO9RI&$8;jYm2L&^&lwBdNv?~O2`1>
z*?<fxK?3600D{VwFym30_EMl|sMG!*+GJnkr2vM|IC7F2S$c-^+5c&!zRDS{slf%<
zjDU=`Kmu$=0Hfv#u7iiOSoy!SE30O?)zNtLKg+ESND>Oz!X_YrFpF%m9-A^03)3%j
zUiz1|!B@F3pqSip;6iC3g==I;kWgAk#dhF2pk8Iq{zto@^3{MMLIjNuwO0dC5%hv2
zp+Jk4R&TBX+b?6^|3|y5$1<;`Wcy`-poqFOZu@0{+<CH4vi-6^yY_q}YGitc{kcZ#
zQssCEw8}ef??DFDb^@(BNCYyy6X<lIHJ5r%BZsq!?XJ=0_gdvaXv7T!`NBXlfLIlf
za}FdRRs}HU7ML7Dx3z|V@{#lY0PPjE20umArtw&`!RsiBMH|Rsw8_F#L~RX$#76-U
z788R<ZJPt?hXD~5OCIz-K&yCIELn)!wgf0F{vylk0B^=LC0YKyb7HV|N4NmOtp&xg
zOf$ut0UKyc!<_k07{IjENvvkPwzV+H(=nklNi#(httlpSCTWPG`L;k)EL)xKJoUVm
z@l{O+B~5FgJEm)L%!3V#>6*<~LNwO`#&oS^YiqVBH)yM~*><MQt(xsY1OYMIg9rj*
zwr0EICkTkyT8mcJN`p7L*j86MYbR(`YSl^)qZpmHQad|>ih;3G%ZXS<Q;LDHQY&<{
zR#PmaDIr_k;9N3U>#bC6@GwHa*q})d03l#((9Vvb5HL1qojO}bL{m!8uk4K}+Oetz
z526GR4Vv8WX-Wwo8nk8?N?Xx}xk2mN-TFo2)d<__SI)ty+5msAuRM$}Fuu})Zr6o@
z@s$>Hhh-QTUuoIA^{K@%BDQu)Q%*bcW@@(wYVgzTm<V7_X+e=P(3A*ZPH9QEb0dH`
zMV%{#Wdy_Wl-B&TCieair#&uIe$vzqe6uE5@De{0i#BGO61CL<I^URG@%JbCKGvT-
zvO^EEr{`%}2k^zR04d-M(B<w7B#IuOySp>2^4P8GVs}PMK2c{IVPj|v(a(-9s?iW#
z?#>_#q#-&&?&nQ-RLsa}deLyl_lh=NjZD+AJA010N+*vxi_KcBJ>O%N3k@cqXSvWI
z0X<8%d18rF06j}@-om<yBjDj&_V-t{YpUjY2$Wr!>miVTovYhoo1=68I#)*)Vvwi=
znzn$Qc~u+IV}S=j&TN4PLEd(OZi~Lwxwl=QBR0K~R{~X9%+@Z^uC7|_A^3r?*h8R&
zZ?P`d9GyGg#X8oU837If>#lLGT&lgS^jPCzAOKL;co?+wt#Pfa^QCW%j!5;-90IcS
z?7Y{tepU4z0<C=Y9s;@FdR^rIU`%qq^?JUUHB9Fa7@40q+g{g3_<Mb#E2VsP=-lCc
zqQ`~T2MMK5ba;JQc|gM1eWF+X-ijcbK;%#}0uGzDLW?Cn(Qm!Y8Y!BHIPhy-X<5Ee
zWx?n5=FXuNT3@9KEHN>3MMqt~_UcNxgRi}gCx87lb^J<N7IjMf9CpUMiLkutu!muw
z35RvLrG*eM4(kcw^*{pSu#WhDqriZ-J>?8rt-bH7KILJUsK+U<9^`#bc~&Rydy2;P
zd@+3Beb4CZ*|pj$RcAa5^1f$04D!Bbbeo6%s5^PzGx~Yw^VzB^aK5#M*cO983u+BH
zM?pff){t`)Bs6OccaG``obE6~%ux^+MZ=7<_AEvnh8c2>;wg}Z8FG$-1kx}A?HG*o
zH}=8WT%%~4W7KP^9+_(x71j!hdJLMQi=6aEt%tAkB10}?-~w!sA)_9U09#~WF`Y(+
zHE6mxh7v0u=VyPOVWgayo3z2c0$5@hgaDT?OZXrH34O<i+SX(;szEW&N_KmLHl?uA
z5IaI*LT9Cs=6Pr$p|jFBznw^N7(}jSEjMdp3ah<xXxgnd<PIJ(BxGO*Kb{7>LHphY
zXV+$p`8zkbHU}3<4Mv%8IUu3bU|{5J5RHRbKQXYnzu{*Wz>zp_f26(Q>j0M9IGSaj
z7;=p__$>Rxz#6}@6gx`fsz#bcPdhJttX*u`BQe-09g64~h8|@qE!o;{wN@;=OVe^7
z`LaL{VUbZL>aYa{0*w+zv(CG;k8-0;xn%|uLZeA&6e<cKkYk+IUuk1}`7x%#n?qb;
zlhksgyWs(}7tEsV&eq*pHzo3diH&<56~QwiFS3e#+M4DsnsVn3CX`<^;d7o9Lf9Wq
zF_ks!^geA|4StE;I}#m`n_|L4Vi^M#`WJHfHKw231ZQj=0<%sv)eC7A<D3tN_+f)-
zrkX#Og_ce?)fVTnfIY)hTb;`S*36n;@zA+1|B8jKoAoO&Ot;yl+WcHFc&a(3dcnCY
zc$>Musu-NdJX3AsN!1KN?5NH+)$=^w5I-jOE2i4|Toxwnf?rh(fzQHUNg<9|^k4Wx
z{D?~y|El`%wXd3LOM<U)t%%isiK#X_w@9qzOMitQL-779uu@xn?N_#l;~eT&ElOan
zo(umm@3%M18nyG;BEdt)tuWP#&SjzFR+=Ji;dO-+I&PJTqY8HrfQ5d0^IY?Tg?_91
zl_L6WwTTj676TE}O074QcUj3d+RPgK5;F(sG89^G=JIkR!cA!PX0vzCjzq=JN8&od
z5|vQ=VkE9N)$F+}H0T{u&7I2v_68ajUHFUv^d?jJ)Ku982enQ$`0ZAL5;U8<N}$z{
zZ1(BdO87-3-Z#~Pg!juzG<ZXRvrvi6-q_(RV1Mu{DOh#Oqo&&KTrimRL$4>fCd~TL
zxkbX#n1LUgYS*)hV4=uQOttD<7K+?vsy(gCc)Nl8IlG}zyCV0wDHbmDF6Em(H<5F=
z30?-Nn=j3xy=-ZtcBB2J8HjM7$5S^u;hDJ4Ybla8pn2jm01^;8%}mzHqZlM)Y;_mA
z`;gW=yUSE~G)GLx>>?Qiz92z;#a=q3HOqcwiU5X~#3h+#Tn5J3&2}8pT4Z;d3J=2}
zLp`*cWGcA~nzV;yztuYA_INndq&*~aIhusr%zhKus7JolE(`BB12Ntto{u@e>b}(q
z*#oA+)2{(Ap?SbWKJYrABe{aiI<uOz>$Bf@GSrf9NCwFx$bdS?o@~-?&K`8#uW;!H
zNv4L&pe2p$>n81~Y@>%mEomf~YA%D89AbmN(|TnOnKD0#tO;ZekxW-EgK_XJ+w+~)
zJ^QWOfk=x$=3A1vl*?egHL;5hYnSJmOoitvP)XVsG?5Hh1euc~X3+^Y=`bvE#0(_3
zMR?xiC~G<liySo-zIzOS3C*J>R_~TTN74h?es=NqTI=jFcM$;-GRH`UrWa3y{J{S6
zz1A)J1J+539Eb^-A4ujBE(44F$UgdBtIGapDm+qv3|ZtylIg)^V3Fgja73%l9d|8)
z)COdZlg#fC4Vkv~lUejC8+k;#z12^q5k_Ht)x<{TjHwK?RO_J6(m@Y3F<&^3=|{D1
zIuEea^LZRB9s%+x3m%XnW5Gf7YKe1#LSmDa{BcgpW7;XDYMdqGHgM4$<187sfrM?w
zS#tXV5*XtwY+v@n@c{!*8N2Ja_Dv7wLC_9}c@PwBG0PSKJyZa}tYnJsp-i&i3v9p%
z?V27hcnGusdci}WVqUQ1_5~_Hc)`N<<#)Uepe8fzr1tw>lRX4K5GGqevRwf6BsVhI
zituzjk)&fGUB8+lF%yxPw$M@*J1?Eo>im81Q|t=x05A)^icoB}(6YsL8BYPT&=TIA
zP!Pv1w3;op#CDk&$l_q=F0#}|t+iqFtz~Olt)lTx-Dz!&-fFAGGoF4G*FCfYmU0N4
z`?877wPfcK&zTX>XR4jQu@J0KUy5fi+d)gc;v5d@(rBr@thtm$u&8%WI{&ovcK(`^
zmb@_lE*fyswIoO=og_<=l|UlUIB8YfDNsT3-PB1deFwQ;E&vXSK51QaEmBaZt`Ne#
z1@L}%yET%+b_@Nbow1ZbLACspFYmM}(N*7rU<j+?F|2yVwJJzd>Wn4#w;)leGnR<n
z2n$v{W90`0g;j|m4%!C<)sFm<fn=#AH00ScVZF3XZBSl7IQtCUFffP<2y}X8Vbp0u
zgUTqjF|6NMgI{jVXy6SE%Fz!o)NE)__BTk>Y-mvSH%QcMXt3F+vo&+C01WeL##y{(
z!-Mjo1Sz5g{G!AN)U%mvgyf>4BdMZ%r)g1<&p9h2`kTHE&jl4t_7sih=YqNz-Vh?G
zpdGWGrX+F@N#tPBI%l@6kMYG`3L=TThsJpjgF;&zR8~1xmFm0wHTWqu4R`>&#X(cx
zfdt-S!lOJ8NHlbDuyhp~N+XaMA5j4PYEW&@M+R}W@a20+P=v-@2rS?(4T=ETWucdr
z1rglT(3p~%0DCPc0!fzzNBMdX9_<_{bdD1g0lF&%Yb__RbEFVJzY$b3XIYqofM0QL
zUHP<(sw;!)oz?{MWI^ibHSD4?{e>IW1m&>=n8YRf(fj}joHaq5<46+IWlhlL;R-!P
zukxHpFxJJQ6Z9ZCw|dsRT<_VdKB%}TR8)PiMEFC<0JJ^`e<(mHwNM`{yIfkD1_h$*
zdN!?Gk45W)y?R?isgH}1Fb)>&ch;5bLwqe8g8UrBuNK3Rd=ON&230KNI!Lid5Q{yY
z)^F&%C8&1e(Bcs)_+e1J1-3Gzu-^`R6jT@atTt#tF}aa#>_}Q~+h<!)=JLTr3$_KL
zBBuosE!Y;sqChPGi56@NmJ8oRByYjCV8!L!Wk?RWjBUZ*ms$m04iG<Q|IX+g@Bcig
zh-08)ZvM}Mr6TbK66Jgzgkuopz%hW#Un`o!%@0d`9&C1vEQdNILgjoOyz(k*9_^ot
zsY`Y{k*xlTug7k8-h+#Av^yxXs~}OG-NBehHiJaLyMs8aK;Q!iP+zkXIsK{XuRR1>
zaK3gu2V{Wobx>Za0!cbS#G`dVbY95T1{N3Xb)3BZW}wx;Vz~;0(0N0Ol@Z0NHHDV=
zknBC;v5Bqqm#!IFtajqf6_3!CVa4iidG84hdT)5KI?M+X`JoR-P^?S`UajTg!8H@l
zd8&=>3v`)Mj13XZX|7Ho&(vbLDH;xf1Hfs;>R_L>nWjmI#=~spwAZ)vm|ZNrCYZ3^
z>|$v>kZAkt;+R-fK%(ulixIfeF<XdCJCD^@>Rs=jSF8w!1152c<@yW~D)Wl5K2uMF
zL{HBv&R#8Q>h|=!;@nldr%6Ee^t|FLeq%jLIq(qm^lImi1w9_PXSG*X>gm<RG64=D
z6ui1PDXxrwM8T_zab-jlOp|eS@p-p#UxKG7#wOU}wzpcp&{7v7h4s#s3-tlMyVrZA
z&^hb+VtEk*LMUZ@vAl=@l9Y;Z$R<khqm=c<X>pMZPh~0Vi!)bSf8>S07rw_9b<yv+
z=RL0sIv#tkSY{hTJa6<~vCKAtL>ccDBiks-Kx_iC^{uic6q!&<-Yaf%i}ei6j1Vn-
zA3BeA)yMhn{?IFhj?g~z`j)awA9{UDIouDaZ$&9Mjs=+$Qy+*ZrHnZF%dIUGbcV?K
zyPQ9E*FRG3-sKfScW8DM%VifrC}dZ$oID^=$gW~c9#IJ8e0LRRu9Z!poUe_h>?+P)
z!>`kX=+J);8*_<%d-Wc#3`+3s@yehC@1A10v_l1D>?y|5K9i2VaU<=A;-WE5iynFl
zfB1)D#Nhuy^-E~@pJ2E3)CUw!6wAdEOhBC|mT5kafI3l(G#_7CN@#?gX8vCK3zerm
z9UAbbi%sF_AOoG##W?WBCIQ8uIRn^xz4YoH1443^fr$nT2+1)85(ooAQE`$35(ooA
z2<7NtzJ#b+c6o2TOOIL)fqYc0hd`sUHY7(SR7fX;QQ3<lV9X6>ul3e1ts3kh(E2vm
zL!fwga40G~e+eIRgF~3MpVHhYp$d<7I$x^a>8l>?VbH0-=#cDe2mxbsNCx*HQH#;k
zj;XZFg>7wO2sdChU8Ya*wVD``o1ri~+mw(pBc#&R6kQEVPf0xInJe^uzM82aWWva^
ziD$6rv=A~29tY)252<%!Q28NaYcoU29N<M=I5<klI;%sS_HqaTh{pl$tPo;Nj|1G<
zA+@;1Y6}~LX~fKDqp#H4-9JC1h>SCs0Gb~Pix2=LbmoU-2mlfTe11rV07UWybbhG(
zGVbmqhZeT^A;beuk+H)x92PqjSLuFVpT!|LHo+x!$P}>$NR+fVBqJD*C~0xX{x_dW
zM2h{&;!y17b6H&J)_>717X_ioOWA;{^{T>BuN*3VX-KBzAp@1AA*AFdiOOLadBbVE
zTF?4w-f%}kSfTOwhC32K0^^O4+y{UJ#v36l_a#^aKpMaZ<#FGOVm+coW#0%jyBBsj
z%c7z}eMb0rZVqx7$8{m)yz=LL`78QA@h}^9tv;y-I3nc7b5x?v9nv6CiMmi!EC?V`
ziMkLL1lntcX+*DO_g<&}zSmk0fd=$i4}k{s+E7%SSV08{YeP7(nn<V2VR%4oQ%Kq7
zoVZR;DK+@%R)n13CeIq=1UI?!0&0NSMDv0|a*zngH-##;g+xeB3?7odACe(CaYRVo
z5E5xat|db9hEVfrZpIoZhCXcw^}17<mTRKC%^?{^ODULgbEr8_m%3o6^X5>myUtaF
zi~rzPMZzI}5Nghoc&;Kw-Up#xHUFiFP0^N+4CZB#$Z3E0t6CtZ{b8v2Rp%Cooc2c{
zkw$m%k<<Pt)bhWIL{9soP%p8UmGBoKslD}Fe6d;h_*^TBVfIN#y~`cVXwD92{f!vS
z)jPcYqua+jLh|BdnBVx=5vp(p5-l)0XdsQl_A>x~vp-aH$Z3AF9#!J|LxHIEHUg{w
zKb1ZZQu580vHU(Q%^tW_pP2<i9Btq+dg=g8ihH><#>h9U^=*2e>^C8qal{!jWWFJp
z-*XvI2idIK^gFW$Loz{%LuBHT3^pn#6_smb+283s^Nk)3&*hQKQK~Wq-0={uIsf~2
zdOsz6JcP3vy70%(=uWU-ey`t~I}wr>BEbay2^#fts9F3>?j-y79s0c7$&gIofeE3L
zBs4$>fjq^2bEjT=(J9PWTJE7qH9bW_#i#^wW2Zw!!%BQs(DDc9aP)Kt$<K#T22W`H
z!hCn>|C{|KB$J<DLj9KzPMNRfGSC>nM%<-en;TFfje(RDWCoNVz`$!Z1O##*J9d{o
zI5)6F9zKCd+!7o<?GZvS*-$p&5Bk1lLrY}$Ah86Yp(QZcOgh)ZEsR%6ihe0^Uizcn
zT(5bh1lRk13nvhvRbgR?5-IPQzwNPy@g`8dpZh*g{^1AkHqXO<dbn@D{CRx~4;I?z
zoAVcZD*N^A-}k<L_ditG=kX^hJ9fOFdE0_;9e~3$1fJN<gG4JAmYCv22#~1i!jh6(
z!`2Rp^dj)pnp2{zDpAWf`SX`Q{^)%VKbC*up>r$Ir|%<=KlWh%{1cBC@>f5RzyH2|
z{T}WM5<>m&d$e!9&wc&+RzCE2|0h_mjn<NFzE!i?jED3QU9Z34*8D?{|1E!C{>i@m
zL@WOE@M8~<>cjmlubFsViC$8=82rck_hnW8(#zBB^Y=aWfYiJHz9$}j{4vP)fBcar
z`}Viklz-`YHs*hHyC(lo-}@fu+pm58vA!rH|EGSBKPu7t_kH9~mG|}U-?!frcnRvs
z`yTmg-?Jv7oD&-Dnuyj#r$i<^U=f(eDUk^ekQnSvN$IK*aUY8q@B+5ByhL5uxkOyZ
zl1wPRfgB%Sfg}qTvR0JPg)CYxBQ$PSv+aM@tNN@iksBT`QU2<Zh=>3{0%moIi~vBw
zJFYH~5de`q0$5!lBLK;v2w-&yB7ooUascr*`@g^FS5?1VA{UhiUt-@bk--*76#I6G
z47Na$P6-y3<xvg+2j5uodO!UQ<K9LOgI35!4}(_7#u6EwNB9caNRx-6bC9TdV~LE;
zi4@U!V+o@3*<$zs?pO&c`=|bt@`A!9{Zn5T6<zNQ8jC&uFTE}A@0(<QpY2JU=Rp5#
z3u%LLtVC{uB0QWtR+11~caUh|u@Y?E>1tAhwjak!#AOE%oRXIvK%!m8OXOt-kkC9{
z;$C)$(5B*a3BT-c83@$jv{wh(Tb%YRM0<<VCGxTZgn@Lr1eYDIg9k$f_^EKwXm(AF
zey#mfSRTM5kBZ<stTYpcQ6K>US{&hl#2~5-V|#Kr929bzwmOI%uF-#!9Tb*_NMJ%{
zP#B#lWIzpJw+?{Jkg)Vm$UG7^4F7Zu$3ex0vE>8w>$1bb(i<X~2$^AFbSQ=u%0f#=
zu;x$cS7k?p<>45ZkQouizE9ww`J>pdr}XQZjS9;p08NF=s4#W|vtm$)+S+U3qC;Wl
zho|(JX85%*GFI23PomUvhs_zO|F+Tz%lQc=n&^a0v9kb)nmUAa2Uo$v6|DIv{jS0a
zPlcxRim)lNQc*soSA>z38Vi4oVo;kpHh+}<Y>&FI96Vs6=5=8?JwO7YE-Z&ONR(Pf
zmbjTCfLhD`Z?t}EVXd?%U};9J4X62)c_K+Dj7#IRq=AO@*0G;Q>$O$uyi#dGtqaSY
z9Ap5oE-bIcf&|36Fox`Cik+iW#f{F&F?!fnwb8?%pmU>#K|$xna8zVWpaYDJVXS)m
zmS&X3{T4@mM$h<qZ1FH?0&EG(+u#ra#+Go)j(jGA1jd%|g<ZHCi_-Yt%I+PjS5<CB
za3f`Cq;Cz&1Sw>ovNeqD#S^^da0Q>T_r~f^cKFomCb|{%sn<<(E9z6~rZ<Ga5CiTA
zv&YBjE2?*RHKkioJG_3Pg?~p_UIvZwJE=R!V*Ea7l<uVN4zmZJ)#p_0_AuyH)NT)h
zZbj|(`kHP<?G9IDxTA>Dt*Cur;V3}BPW$8pL5I+-sC{ASC_qAUU)XgNQMwh?7#6pp
zKwtngdUc>%QH@?5=vGu?SUL&_1F10#N5L=0AdP<_Tr|Y_bi9tsF(<--Fn{|48FNHU
zVV0Yq|1N*hoo?V_fS;r(LbsU%JfZz_n2n!+kn88LJh28BQa_Wqw+ktd1K8aY^&PnZ
z5s`O=D$SJv5o9B<*&--ZYaqMx1$}gOVB{<kxru=hAW;Mvq=7z|1zto1IXEICQ7|Dh
zID%#E2W;j8$XSn#6usm;@S=Xq7a1GD>nvYW0mumBRFOS2SwD~)7m@GFfC=Ss5oEAt
z2_e{OJbU~leNJwCL^?*~gdsFO0>}7)5CS=ob)BMrn41`pF(C4{#EoD!Y!pIh&t%qS
zs{Vef$r0(&kfMdq<Op2aNQ<1Ftu2cbt&I4}>kX%Dnm*mf>=}BzG=JO8*C8sRNXW|b
zxU5Zo)_I2B`Sn@4=1(k(;O&ALC`GloUyCTc%b)YHov-Pau-oVA58U8Hq>ICIG{}j_
zi&`L2D<^`BTC|RW#N=@z$zFV$LnHza)X<5fdh*vuZ1Pnrm^Dwor1J_7lsmzQysZrx
zfUY3(d}E_gF<aXeDQZNcKDSw~w2@-xPtzl8$uvFTIP>(^0?wtc>VNh}cSVe>wSig@
zqgL#Vu(y}#@7}OCBCc@}7lrSQ<VBtoB#PM^!TB}S9VF_$H`4xQo)saIrvdjyDsQ4K
z2?U_MKf<=Zrr&YHez)%6a<()GNPzBl4FVFN`(1+&DGajTHAswl`5+mjOIQ5HL_6p~
zQ;7#%v*0P950Y7iQIe??R|g_RKSZ3S*KwFqb0lIk$7VxSOR4ck(S^KOpnwTdgpeSC
zdDQJckib0ZRu?3yd(^Eik)passk#Cj>c=8VF9}ZZDM-V*j%--Ujd3g@6DlBqek_87
zihK(6W06EpK05GJq92PStF0z_T`7)B1d*bVtmhm0x3QlhMk{Lor61yGk~T1^3~_p{
z(9ig4@Kfv|@BmJ3U^FNa#voC>fzj5YOF^Rifl<8VMd=5S2#^OxI}VA8Ls?=V&V$OJ
zsJLOpWkl#VIEveB)Z{qz!my~AaYO}bI4ukcnm?8cI7k#ZED8rBbkV!RqhdD(UFu(u
zt|}o9kIHZXPoX+I3STHxL5+wCZva)wI)NnB0=0!!@DWk@x)Mk(jYWShT^~;%(HJdS
z5cQS6VCLD4voTXj>-0ft3j0qr0nI5<%oVzis3vH*OlP0It&hKAx?43cAv8TIM>R;m
zPmf}n(?&2s^?n%^!A9`x7a`;h@QHu0MfG~SYSBNCM71F*S`3nFN@IZp?8{`V8#pYC
zH3!Bj@6Fn*(|cYbW9I}n8y>hIRQw#*Y<LQgIb=4TxlR!I3Ts-YztH&=PlwF)ifb;&
zkWdun+C)<+i6}2x)ChCUQrKUzTB-BFdVPs6`dZXLMwhIVBrC0ovZ=RdFS5eBy4H1-
zi;YLXUKN#@bdbPa6-6ff9eT+liP~xnQRRcETK>Ahu4`vr;=Bw1yl3MfkXahs+Cc*d
z4OBZCwjeQV8={#HFl;GdOAOlAshgu}4?dM72j<%xZBcnH3qYHr9WLSBmLym6(b;Ze
z9}X}|S#^WnsRNi|*9{TW<fEwk`~XM*d_*0Dyf(E3<o2jDr9q$OyLY=g3&F-L+#Z!l
zB#;2v9<30&8IW8Hfev{AknjTAqpd`)mPj!Nw?|vwWW7njW0IETucFS>5A<qZ)mL6I
zbawPrG$^j7Lkh)w6>Wa8#H9%It7ug<kA;#n)%He3ECd3Yd!usG1QMEiqcRo(3C+Dx
zHx^1#+<7o6Vj&Qy%t5aXl<zzkm9aOT0_k8>#zG*0bTEoo=nf34l&v*Ii++l-*&pe*
zN1LKpWO;C$;vPEcgtzJ?z8jAs0Oc(J8(>GHGA;!Pu%l6#_6AA5Icj(3gMdiBJ{^t5
zx><+FY$@uyQ&H#9kM&1!Ip3`^*l5oww|78tG5KyZNR)DleB{eC70PUFkX<yxNo~_-
z`l5quTx#bNpp5D~)aDbQGYD8=s4ZtCNI(v?<qQA`$e}i702V4$Eu(skaVCAHkMLEF
z@sy|@V{EzTLkLP^Y;?k{TnA%yEW2g9{<|JyZRzdH_<{FWTfUM65(s1MW?~lu5(s1M
zw(a=Klx0Lc$M$X4J5@dBA<#&D&XzZ<AOnQw?1(t@1xY$~CTBI!q%Wg!IFa4@h5kX0
zi5>)v!iiobXcSJg<$F<30mMYRYj-{h%V-o%V)yRQn-wP6a`=G>l}WZ7ejuSTiCX@P
zC>8kAXD`~J`+86JN~Li(-In97jE}qNwj6gL0WsaixVsB|SZ-^x?4q5vul%=c><K-=
zw4Hjd@GKkeztU@_<<ymP*lj!YPMzks-2o;lHOH1qH%K7Pv9Wa1+rQ;x>G?Lks?d%_
z-_x^f+fF@I07JNBJm$|$@jfO<D9^WXC`WlzXrnV1vCJ-gUgaWBhcFk}@-PuH&{<?7
ze8<g2sDN6+j_uOB^;qH>0ZbTSiE9LqKv-hS4HZbzvEgT0a0GPTYwW?V^j4Lx+42ff
zIrkZ_*}8CdAffV_T@vOuU&^Vsma{j$(tB1d_X?#w>vFG9>b&K)d@B$tKv-@g-ajmw
ziq3nJb=j>S>G7rqL0i^0-BDN0JMT?9BH~bxfOykBzdfZT&~j{9*RcEd=+{-R@en9Y
zzs3%_2BsbC8e4q&h*W^E#>PwNe6E)B+c-A+c8@--s@}t(7k%n&>7^kAjC#9*zg`Xu
z+S1nBox930f*tKUHru#Yzo7aZ55fe*JGOkSuw0=X?K`%7tq>$2-m&p&>PVXR<+P)1
zu$_zd>7#sA4IT(>X&XF)(w4TtmS1pz5<nX4Hf^o$90Ob0EjIJ-*Doq;vE^N!a=w|}
zV$0+MNa$>#o)=>Wd)civ`=9-K*XpfavGiKyR$IPSS<c_>*=py+`-~s~v6bd+14W$W
z^jhVYw)5qF{RXAymmUbcSNWx9Lwc|BOS?jR{{u<@`O<FH#u`Juw8GZDwu?^N&Lan5
zfzq#SEC96OQ!5n2vj=VEJDU|B(i>{<Q%od00N_D)7J>xeL7IgW34lZ-aL`VCXNwFk
zF(?wy8gZrA771R-gWe%qCU_+a3EppQO7QZJU{uibJ7Fu=l@D_6_*Rc7H6Ywt&~!dw
z%kx)A0_}t?7b1{Yh)&qHxWYsvk48?|F>x0}axmvl*quaxB3T@!`f7`R>8XOe!p}C|
zxO~=^zxAQM?7(;W3sqo<&=HSe>Yr_S=LIC{^s}85xgwAN``O0s_ySluZEFK!MT6Pu
z!+OW?fS6ItZ=j@M=0Gj`<*<HFpW2vg9GC#AjmacBNC4HwkVL2G1SA?)8!N5hQ52DA
z94b;9i;G(*lEsyN_a7^T?o3nF2C~)P>*bXLy>iHi17p&mLIx@WW746f(fGh1rXA5Q
zsTmZLO$HM)V^B;wd5}OD6q85GAb~I_hBPQ0ErZ0-@}QV|v`n<9>Y$iBT9zyvEf0#(
z(eh>t$^dS0Jsm50JLW52gHx2gk3H<HIilD5B2UL~n#V9Y1N^$wGwiuz`o!EbF`0w~
z6W#R;m3~ABp>AW@bwB9GvSVZNiaM?|L1=6Y6R{l!0yU1^{i9x)9T$_=&v74#xG}ta
z-i*tjQO~luKk6-V&&Fhe1h<JG^K1-TUAiWK8o`%8=QRF^YXZ6FVhTT<Brc?$i{W(g
zdr>7=Z#)Z~(2r)v$K<CsaGeK2<74>r#-$tyefd1gp42bTJ|B}w8{E}_%=0lg@#b6x
z9+<HKC-s(D7L(~1+_ixWi($awstU@+Fqy#KI;nTbPVjK(;~NtQ=Q1t>A3Bl6Pw7`=
zC&uK7Tu3n?Gckq}IeY{RIPj4#u)m+u|CxIsCf_vx6EZKv;78tvGlCGD;7rH<3BIU$
zrY9AI)J&4X$R#0Ia%K!)rlXIF5Q!d|8Ebp7HC2GnD^$*u(|U6yyTG$yF+di?TA#;X
zeF%};TgY~v(R*bV#^h&Lz=X`g7~Z|4*CTKr1Pk@}Dx+6+kq1Lro<#(69T%auuExJ;
zT%TPWldlwnlrTgV$FR&%>Mf+uTUbo@89lSFdN6cN`&EKL?iw=mRu+4}XWW`w;^9Og
zvxIOK;Bpp(@SfHxXPeJhq~uq{<X2$8h19ATg27p01mV@Kw_?sL)o9~u_LgVE7{uNp
z8xEl_^1zk86D#^4#+m}gpvXHhoEG1PGWZRu4KcR5k9K1#adT>e+o2!<v4J|2UW4Hm
zr{0aR<C;;p^WB(ygAiN@y&J<DgcV!})O(m(%|rQ{Z@Dhtum2;3C;t8fcYHvgX^*Gk
zH5-sz7$+nxxhi^jV~o}4MyuS$n9Kv>8We;!#*hc3(TO`vxONd^Z|g?q+$MJjgA1We
zG=y<`6+)OU@5fleFgoPk_mF75yiZ7?ILw!Z7<<4#aSbtfN>ainOhXKNZhSifNSH92
zV{DFLbZoZSGYrj`&19I5qxcRaw!uHdihhncCk^8xBl1JcNYKj^8vicP@fiCeYFu47
z9@DrZCN8v($4bwm(M=@UeLQyIRn~c22PQfhW4G8w+rr71#uH2sA}gPaCHQ;RL_+6e
ztlRbU&N)at{3*uf*~V2Je~M}R5R<r^9Y0@|Lr(UmSeI+9rI>~A3tDYy(VkMLdCa)L
z7pX197j)>O8F+~XLG*a%{!(L++F^XD#;+<77ii;4OZe47B7ru(6mxKEYp#T9?=E$E
zml?OkuGw8GKTC-Yht}>=`B_Sk(Ar(v^#&w@6g6XO`$~((#QEg`H3NiwrAAsrdKs$4
zfl{`sy)mtDpj0k#;6my^soal&1m1yC?8o47)eH@<gQaXyrO~|8K~IO4tAnL7;{ze+
z94tk~hhG57z)ISYQsswI$6qj#N)3LCbsA4FM2?io&zXS)&XLkGvH1rHoFk=J5h#KI
zi3sLMX{#Sf{d|EXhS>feEtM%a$$~|Wl_CX)b&Ki@l#``+f%sqftLdfzo7mBKsuMUO
zV!?BideW;sZ3RwJ?P>Ny9k0rqDOCo=of~d9aGMJZ41RE2b=t(8DV1wAo<jXhsSLY7
zqS9wd6NBO+>>>say9UJ7fpHObNgni`ip#J|vJiIF#wqNgv)l|#x}m<f$V-5N?S{tX
z#t<Z`F*GhWh9ChqH12K;Gi2z|ah{jB0tDvx==j-Qp#9<KxC|Ze6iB1va(@UCNTcJ}
zAHG28!K|%Kix-`UJAdnJOi*Lf;uzIC$WU1dOlQZHSDfY-8GrEA;HR(<9sqE5Tt-bG
z0XRD@uO5Jeg=WV~Uy&9f2Di|hxH?~2Nb;aJ*R_yj!9w%6g-(e&z*8)VE6d}mbNXWA
zZ@wB3ZY^k#E{V&)G|LC+k~jiW8eAYzizRV;`Po{C&{SIrsI#?jv(C%nT7-{5(nDoY
zvDf18K6Fn{vS9Dm<680g6c&JoA-RH`>0z|IdxdLvFk$x<uH8YRf-B<kf-Xp)u81R!
zq2LlEqJ|amX4lC=c*MpfnqO;Wcp0Epv8Sqx+}*3ZGHBbo$}5A$`l`76_)(T`dsoHf
zy=;&uV^utTr7VMAI3(0~<~LS3F9QRoj{Q<)r0=ft%HS6Y<MMPj%lFB3@u;}$4H5`-
zaRh&&9duoyE}p+!mO;~j>R1<VcA3?UmjP-G`+K!<(Y<TDGH55g#w&wH`<l4Cw3y|i
zeN9~6Vh4#b*2K?qZAG`Tsf;!8w%76#F_;tmQy*v1p2nto>b+8ECe(Y@qM1<d&IIV7
zCG~MEN}?rnExSJ6;(FN<_amP5@s_`}vb-f&+t$Zfk6uRZp7mZKba!ICR|xIL*T>~Y
zLb7~6zCMnHRuqB{CE;mvw<-KHNvOv9c#CW4eNVIm0vqCNMK7bWdV^O8ZP+)&<%S(X
zC}cyt!bPPG`-V7z%_Za_vkIckO>x$$x3Tn|O&$iFL2vRZN;~#Vaa-K)gAOn@#Sw3b
zikhg$rZ`>`5R<@^^I}u{{9E{WdX~b~&2iT4Qlm%pX0H$n72O<{X#ohKkj?Q{7fDpw
z(Ql6TsJ2$qZTc)lv)kj&tCt#UlzX>(Aaq{6Judg>kOIi|xcux9NPujQ7sN3?NYr$D
z{DOOAO@pW@MSR=io$j{Y5yc?h-5+<hTw!cb?%nSdLur8hak;I`@-)Eyxcrt7NEEZ5
zT&^%kF^btAZ+@dJrdSrUKi=X7Ypd{9h?tw=&dIBc+k7=mUNMv?Xo?5Lb~VdCz|<7a
ziew8&6w?$(vPBdVLNQJ8Zhd%a7f(?P!sDiR_xt$WY006RQ%&)^@8K&+mcsDw<L7*^
z=;6oNV>|Rv7d%1PcqCrV0trig@2)B!QTF#|SCy=SSpB$IRqg=+=WyI>1#bF)l&cD!
z0_nInm+1RV$7xleI3;Imr{YDE5+Y8?LGn}_8AqOx%2AwhIxe!uAb@(>b?P7?dpa(o
z6_7wZ9Y?gXfDD`?k6P<={jJf#SEx<MTsgSJP8i}tZ6Kjkn~0TKUsCERN4|Qv^X&D;
zE?;4|r$ku8Jtgwa!%1ldc1TbHInJ4OqtOcQ7ANG&3NC6pE+K6I5*XtWwn!O+B&7tx
zWm?{I6nKwM@YTID2=v4FgzN{9&>WwTt2;<&j!(F&dyW>87iZsei{ZQDMXzvjnJ;>U
zlgoTDA(wTi0OG}j?0~$jy_6_=Lv}zOk}oB2%Evn(PaQBVAvypAP^Ts2stOXa(-N`+
zKmv7ILWYZZve}FTg^THKAfP$J)1+RQk&r<no<eg*0%6zt<dX6fG|o;a3)rUHj7>H8
zB|=8<fil}|6-c1WPRIofBv582u%OYZ4w7PvM0!C&gp9-xA>*8c3>hU0eLgpVkdeOY
zEm?S-!&c`d=pEK>=W<cP`~<$w@L!_ntydE2ts-X3qZZoIgtFYZ{&u64uLeIw5P}D&
z?$U$|7C{1RX+j2zAW_|=iNtbLmp&Fv3?2$COQ=pl1dEafz1I>lSd=V;La!$%Sfm-%
z%+^*Wiq`TDP5RYlD0XGS$cY|pMm<_5dh|jNuxOoIMUarKb9)pdimIa?rMEkpk-68f
zZFd;$u36*G4KRtD;IFC#NCqlv5(x09Ce3Z_?L^U5IkcKX^6i8>x0_Q%*2|#<0u@>B
zRs<wu*Si$~3DouO&}vQ<*&v2icM#Cr;Av8QHn>9zPocSih8B<Lo72#0NGKmAoX77n
zTKa16TXYYeK(WE?9*|IMaJvU2x~CzL_(*mSF?jcEPN*Ns?vXs`ec*PFWTAVuob8?#
zw)RP)=nJ=dTA<iZ&Q7=%WR=gPRY0I^pSe{83E9tFtAIpNpOIDQOO!3B{@WAm#2<~0
z9k(as$pyHat&5j&KtgAG0-t{xL0|K3X={5DMJE%^@9#DYUt~`L=XP{((~_#OFTwtN
zk8yE_eJ&Wd0Na<4Z(@T4*gop)p)_w>QVqUIu+Q!>hE;vz&RTFWLB2`Ii+3Qol>7`U
zNML-Ez-L(LEWaf=;6n-a(!IuwRfjwXn)rv@i4P$_9CCdrNI)DSU)qyHfch@M+TCaL
zs`}1@Ab0$o2SJnZyM#QBX~`$!cL@YV<c?dCJ3b=aF$mQEi0h6)Li330jzOZhBWK-l
zORDJ!26udl9qwaj)hE0fkWW70)qs5R3D+k>4>%{tCnMFbsI9PbOcX6)o$og`N6#ei
z&Mf!Gt*BpWliVM(MGqKSm)fKpz<30}+N5;HAOTpL#ORn#OIs`0OdF9@MkUqqvFzG*
z=5<cjzQ#?y8t}vnfCK<WB<0-@kN_Bwl-CJBVg`&zW=18&bpm403{XcV<#htdK@W~h
z%IgG@1)z~hTqn4IR|Eo2Cvhg&B7bYY`<V8iaegIew-VI1PbcM(U@P9YPbcBj@8P;Y
z8pr<lpmAU2I8TKytx0(z*h(y|Nt_7M%Ym)<(#jeiG`dudPs%U=Oq4P{DUZxS0(X28
z8$x`f1uE#M3GBBI8QnWgNQy)@F`+UcnHE=uKtg3g5@%<x2=n4ir>RNh<s|!KC-Va5
zz(dAA@LHZ%N7_zIO-kqAif<>TCZ+QS3ENIhCSHbZ$@vq5dzWcRb!JjHf5}6s)05Kq
zOBTG#j3haKdgZtkCDrC6m1gCw^K94u7#*uXi1ibXFp}pa<?V5hsMDNeLR@AC3G6vZ
zY&vNUw4%Mm{G>=YfPm)wqzp+wLUVpnh9n@NIX~%!B&}#m@oJJM94-Ta$@HpM2ijP?
znv`J?o&xFBq>M~J0_oKxX2EZfR>k{}uO*A#V4pr>To-;ViC15+p$_1UK<uyCg^wC7
zv#%#*x)V$ctJjlAcQ)fPfOXhkA2nKJoutfm;*~$hI7ykK<nQ(^XRkkMw9YS=O#?W2
zpyf2`@5D50ZELHNMeCC6=SPj-hgT(yGCB@WTT>P4*!_<gm-nc1n+7JDR_8ViB<fI?
zl%LZCiKf*hk;)}+-I|8^TDIpg<ASQS9s;?_waK8k2o4z%N|uW>07xLLO(G|DIY&T6
z>yzxJ$Biqh>pch>y!A<WQ=v6?mG#Mp*nxutL_JmF8nmvBt!+pa?N73;j~iD-H_&w0
zM2@@-HE&arRsPv{ziN{U4KAQJx$Ogq+HFe8h!!NEH<5Aw$|3OZgCy(r7vst54?GB3
ztUvG|sDU3OWdzrTH}C_R>_3ZYpoJeNS>s=f(}j=Sx!Z;}>0{~&+5~|_xgRHyQ|`^n
z1@&o?CHfneR(<M~OWyxe*D7szDE4VGBDQNFxe~lTT~ljA9%Flwjqh(<U$xzXpiIYh
z4}v_%b`OF)$o3>4=rFzwb;6fPmVd&yw)dAF1f}i1Oa{e-gAgFTOlHoL4Iz*6WwKp+
z>od`Mc$7U!<?AGS<q2b34StGg+(w~H#U9Uy<XZN);|xy$vxmBv!eEeaEqjtJzlLj}
z-8nJfS|GDGDPNwHEYxjZ60iMTi;;02&Wn>p-zR<LRr%Zc<K}N~raWo%j2ukjMTRo8
z@H`qKhcNn{G|CHyTsH?U>T<|kgFvF3L$n6r_yRh3*py@wpES}{O>T3*MRS_m=78i<
za!h~(L=%k(%zZ#$NE}YGBTpJFE<Nl)ki8Fk5LD3Nq|By42M~wJvF)OzwXLlkOBRhv
z`N}V0Q`?$xd^p`$A3c_IuPn8trk#>&?3aHxw9cp8_TdqbPr2;_3FK4MzUOEWXiMeR
zrjTwP?5F!KF{j->jDKVMnUbp;1h|CU_<)3dZ3@vTx!ktYxWOsza@pbkGqetaQ_|z&
z5flffq{jsb#lb1p<F+MoWQu!Smi?EZ^&FX!qXmy(n~^E$a6tlSWJ)?*kX#cEcc>2A
zoNsHBQ$-)AocsS}4E9GSr|<z`9(bHjMwyxt8$l4joa(j;BrvC@WaI%7m{U`*3jf6D
z`Be3pY{LL!N?~S7-WUXvxG8yK5F~VFrf_5MO&a{?lPTu1@lP46@0sg11xyq>*KG<&
zK+H|a_q#v>Vr~j60Qm)wSit6{<UbY>DN;RiQ~1Xs+#04rps<K7tu+q!SmYH#SG^Xc
z<Yh6)ppZo=`G-XyNhgIrEW+6k5a247u$=>qt1nyPAyB}$Bqeh=kO9JyRF?mz1E~OE
zNeTzcUs0aod}`CGl+w2RL);;~PRltX1{u}9YOus~hX9w59S9O|t5Wjb3rN7NO5s=>
zf1*KfD0^MX(S{hSebwtc5b_!8JkycSSeKHM3`zi5m%=2IhCvLmF~$7DjPI&8dKeTw
zY)r{}l;`vCVPmSfNUebc#>Uizo%vWkpRC^?#&Q=B&}?uAGf0%);0|Vx&}=w6n9ry1
zVXGL-mw|wZw|aG;@L{Xh4hkQ(x}zDwK-!wZXucYQxt*<jnkssMtr%fkRr+ZPcX9`k
z#oJ*hYdccP?v#@lY506K_$^G0CqUofqJsqbj+DGe0TSptQpjeLX9Wq*x+9g}o$_0y
zmc<zuV)QwUFH`DQsQ}LskQnDecV`NLTPgAhXPF4yc12PYyIss{hVu5M*sM{;B~|;p
zT2WN6FC~}sc6{dSOUcj2fCTcs6xP4HI0P<;97wV3XyXqx2RsNGWe2>5(abrJlA%dE
zK64JFuw>8;5s<hcav;_6Y4Py^qOoG24hK@L9^kKjN)~R297z3XjE}A@Kn?Y1Oevkp
zyX0@|*Y{6-`>~Uwjf<+la;-}<t1%^`8_1&)jj8fVK3_p{{f-y#FLJb_nbnkHkB>2W
z_ipkaXc2DmOhHqtDJ9o&=m4TAg+-WOmuiPbYe!Sci4^;OjL}eopKeWPN*(pgK~w5z
zN`5mMYJfSKLTE4gnO+7znmYf)*?y)o1>VocQtI)u{VciA{lV*J$wWW@80Gz3PoAe8
z&C=5;cEdBqx~kJ&wP=!__Nqmb^t3y;p#$jCDI7sOBQP*YpJF$SHOBRLs_bmbXpTNr
zc6O{#i2qbsM5L43@j3cb84eie1264pjt*wIamIkE!5#w5)xl+QyABy33@&RaGSDDV
ziNR&~H<@+hZragY9qW8C&UnXHHP*wR`+j3R44S25%jCOu&;iESGQ4Z|w!pyQz(i-)
zbH+Mf&xsxeUH6+<CQp{y@xy_MW%BDQAb~NlES<Hc<9*8j-aTJeR<yCq+55aP)wI`@
z1xz|23GjE%*Ow_t{-$Y-cv&1Y|6>7qie+Yf8P;FCIsp>Ze5Xu&K9DFu7Ss4760+}<
zVO0~dpf;4rcfat8GGsyWFFZk(mah$EJPSs+sO!5Z^!E~p20mzh_D@eC{B9XGp8^;I
z|GhH#;u&5khAc>)uZApL#dxm_spsSPN`czm);=#QI$Y+An`Zn~iF{s$=!`bK?P<0C
zqKqYH8l4MYl*#A=T!4L1Cf8|@sMi<NBHB2%rzY$yWB-_GbSdogbjS)jJst8kJ4uIL
z_ij(^++D`Lm}&GV?DljBYPY9D?cYs0xCaCsQ2WZ*Z(cTf7WR2MWR!iL4taxpq=Q>O
z(1B47l(D5R8`Xsao(>u3K$$6KHH4sZpe$6vUlDIlF0ZkS<z^XI78*Srn(K{aGFbp2
z=roogS<r`<gK_&^8GCM)aes&JJRO>d-<8Rztv#QJ-_fX<LNCu%;^m<7q9so2*+w=H
z8CZ@uvL3g8)Jp1vSDjm5G1i~o@zn|$$$<;7S1ZcIYYiY#fmbWAe%Div7HsX!ilU~p
zbIms6Ql<5q6?~iHR}1)t#@Y&HU4=>?Bh^8RZ{2YoTk@H)ughB%NKDg<9^x5#=Isi#
z_c<ICR8O2~LDa55wcAnQZ2H`o9w_XnkYfaFRBuOx93vp1wW9+4fLlsX!oyt^Y|<{H
zaR06fnPUW(v*qn*kkHvxf!om(h=GKg*;Nq{pA90CpHl6rh~lH{ST`kyPN{ZPbnDI!
zf(taT_ExaUuZ-@6y<X+0{Jj<OHUWfC(B2A6v);UNp!Qd=XTLHoy=;Gl^oRu>|L(7l
z;S)$e?60uJ?hzzc!s<!yU7{`+Xoo74_T|jSe%fuMS?ArxkScJ*7{hankV6$RwgU;Y
zLls$ZB^xBr4prdQKzb#(KqK&Q1v|dm_-oZ+4}x}qhdl@ykcTU>ousvBKpw8>(v^Q4
zt3V6I(F!(qk5N^1)Ptaf;;7dq8lOiiWFQP3Kpd?Q@5ZARSSNn0U@i6<S5*DzLC{I`
zj~)aq6hBtT%{+7f@nZ$vXrQ+$3bat1tY9ziHEydq=|Rx{MxOK_Xr(w=AycZ*0mR7)
z{O`?1`bKMkR*E4`w|&NM{Z&KKXYEPx+>rFy-l3IZNcwCwXr&mEMm2`hN>QL=<k8OB
z1I9>S)o2fcR*KOc1|1`hPM@s@trVlvsK*jI-!0HF@&sr2L1P*I#LvT^Kj4|*VbCe^
zgtRS=`=JAj329vS8!ko(&WI<o|NGV$*<-Q?L9aVc_8{nW=gDbXgf|6#LOeO$u@k?a
zUZ4w;Q(5mO<Ko^^Jp?-Zotl=n^&ta<sp*smutA~{Q`1;BDON1dIqr<Ka&dWkR`ab<
z&OT`}GCja>2Py?@Gtx5Hf;6yZq{}<YQAP=X8R>2pS%2VIILn>QI(%o`-D9?gK!>=q
zz4p){?(DQJvK0k|4smCv+g0+<1r+F7<~;W9cgC$f=6MJaAk6a+=>K=-rRB~ADnOW*
z#*KYiehPGHa{;^Ku+g>00uLbygasY~{f*9ov<%3h0)z!={1FiSb6SCJbS`Ea4;!6(
zEcOuS?{gM=2sRKFr{#?cr~qMcI^W#-3rC<2^|MR9H~RNj<{`v@u*^e<0b!ZfiWm@<
zQ7ig#1bo+jIXn2h@nDbT9zrSlVtHETT?<Mn5SFLKbwgCU6bQ@H9WJnL;RyH}fR$|Y
z5#zQVD?Nlb>afzQLmUVzy;j75u##Fq$)|#Xe+{T(*`vmF)pZ_10tj^;0=>;ymzE(f
zRDe*I##LP&TNacguD7PyoTJ9r>bE?MBrx9cFp|J{D=l{s&;iC<>E<on$(lk~lXm`g
z%oyRTe%Av@0p#7ZjOz+Y3Lx*MqvB;OkN|l%jr+Ge6IoF3Ma70R>-nSce(wekqYMUZ
zNXt7P5CTR+TE3G35*Q6>ypypC%M0v*7n}B^m3?XFx5tf(1NY&#J4wn>mpxvC%7L>d
zEpsE#1J0f_c9XOZ07;p&bjy8dkx3(l*ca_h<BQjn!6_&eh(OXjgL4rG)bc=DF8m;Y
zejqJVI3R(3AdM8x4&hVM_y&9$f7;W)#$IK1XZ=qb(|dy9RyB>Pe(O~=4X|&$s-^+<
zEmajEwW4;gwI9<(XVT8CzZh$M(I3+|p5=eR)PYw0lj-rT&B4_tU2HH>(Ub1@1PSbu
z>4Zq6fCTo*G!nbVsG=Qc4gMuP{u}d$>R&tvO5*+ERu3{<NWNkP5)i+nk-6SW)$3?$
z!!t!=owQ=^@r8$H5aZwjUus9H+$dI}ntduqW#qXFn1C9UNsC-9NI;FsV2?)uTSuzQ
zGi<VIK2ZHkM%oHYROXqCTvR}kP)08KAc62q221`(N(WwGYvVITlUdJzIihrY23dkT
z0ek_~g=Lh|^6U8j68{)5s|%pTDHWaql4WEd0uqocgFuA;uki&`t4XYnW^OA?@^q*g
zlQQxpX2?KiQU)2Xdr*r`wl+0`qmBo4^X|k{ss%ZuPN;=8Bcsg8sO9(ZdK}ZuTWY`&
z^}usr&T#7i5|}fn9yDS>V#LnKl+MYBV<lqnW2KoHb#_J^D@h*oUe3s4CCS2`bykK_
z6XaYwQIqCpltg*UJX>#=g-Q@^C8%NZGxBT;k^q~Z!PyoaQ*@$8ZXs)Cn!mY!A@uqB
z113}!X5^P>K|*C=M&98AiFjjS=Db^Y@Jb|)7#C*R-pnIL$)SjGVdjP#`PAz~5KA)R
zyb1(H^pcF6dLU8Ul8l^sAi1oYJ?%t6-|`I4p8gR8r{q`yiLtcY9ZMjAv^*nS1V|t)
z&tTr+x<de8{aKkQTALByYooPlWhTJ?f<1tb`XEim9uJy@?5d0+-b4Wt##u$}z7+dU
ze8q<x_sXDodA2SiU;F?QGIbej`*G_XGN9J5OtE=Qvo#s{{tTGJ&0u~_!H^E%a~|t5
zMVm8hSg|>|bX^ADQo(*dU{f8|1GxF0S+jjw1-mt5-kSr1$HMd&DC=or;Pa0lQJW1J
z_EE^ZJ+~nvx6I%|XhQ~@AIv`pfqE~)t}Zd}&%Gz@O<c~#A=(vO2u9kJVH-=#-{dxB
z<Y}DE_r04k@GJNPD|BG?h79W%HhbqAJS5uiHe`T=zj0R73vKPQOwm)$*szH|(ff=%
z2TxC5NKN}9!_(6jgFv5s;f_y`Xvr5DxupS#>U@#GmgXG_DlepV?#(D|%9s0Duit6S
zoR@5Ky0026;d&u}!L&Ccmv4|<At7Qzkbv8p!5?$1ruX(Qq^2LwIR7a%d#P2&JrIiI
zk7wk@0a5@to{|3&4H6*7Gl&6b8M%<CQ(`Q41_8}e?pOv1%~S4J2FYdJv3wz!aRA%W
z%sh29eiMOvm3-2Hgjoh;rCS6EpaEGqltBV$Ko&!JAX&Pzt&PYQ&CB}A@i*e%@7K$n
zS>^E7(GgjrnXq|hviaz&I1&H>@X@$z%F6-?@X=XmbC3WZorTT$eeurJ`sbX7Gv+<M
z9?!WI1Q#uRE-O>-AW14K-_r&OjOVg#&!;z_)Xrq*2~5qI|E!weA&`|PWaZUY$N*tN
zwnFT+K>}ey7JF^}f_Y~mr#h>0<_KTaR1bsfJvA#+Xb=L%)NDj}E|8>@#pa57sxz5;
zMwWY>&LE&UBP+cQNNCQ;O0NSFnlrL)Pj#l<;oRBiDPPaIUg4CPoa^=xWB@VO?IVzY
zm`i<xm_bpy*xI6O(c4)TX<=@UEy~h|0%(cuf}YWqWEF?~(!v~7gI}Uozz5uttn}0%
z0k<S8Zy|uha<L?vaI#{#AO>G9mS)x0vtqfBJm@XU%H=|`uw1;BrR9R6*e+!F6<OuR
z@+<PpY-Qfi7laswc!VadaGMB{i^`ZDB(PUx<&|-eSPE8T^EdFrOCrT7&Wdca>#eP#
zu^0%ev$*iE&c{}_He0dXt<3oaaNI^yT~=r12LrnBL9jZD(?Gl{hKi!Nx3X+yYx9=s
zx4b&i7<kJai4X$BTUq(CK1i<AwVO4OzMtLI*0yGgo^!5iW2XGkty#RF#GO)CnjqW6
z1YwbOrq*ejTPZvO;x>1FfCS<;njbUBCv`=YwVheztE_WXJ9C<^2ERpX@C1rGv+|M-
zNGR^i%1b&R(S<v+nXk}=lnNpSb)mW|D=+Ct4s5n7D=+Ct7JznTaY+ZSU_uW9d$YKt
zli`<i9;!537C^g|Ad~LR%1b&BhVI@hj*lMUx}XkZ*@{Z@(ZT^whirHtD-&;BxeX6w
zk$9uOUg%2ms4>fKE12iq--rvt+>3w<okn-=fdq0R%{@vifyCHo%vStHHkDo{z&5lo
zo4$gF2_ygxg$a$>OE2Ra@2)iKnzC$H!Mv!t$?b1&Ia|6$kSMn)D|d+?QEpQfX>)$h
ztt&a1BUyHP2Xk1}5f6isGDqBT4IyA0$=V_{1QHlWvPcb4BCRVWWsYT8x}#aBKITDC
zQs$TkK}nfoSzGLlpaY0w<N*1NuC5d%{hW1%bu?%AF8J9qH05D_&dO{hq@eY477I4N
zsMHmC7;R8a8Sea{lR4j4gP(4vQto9?PC5t3L2pp5G{Iv@kQiBma>?O2;T(v;ox|Xq
zIxHuggXBSPNKQHj$%1njnj_~xPO~eeaYp6%6?8VFvsqC9AugTc5h^h%Cw(SJfQ`zz
zKC>$&Z^q5u+}ZTqIW8w13Yf6kxZK&!qukB7oLtxN6cFQbGDO2i!Jf|*P0xuCjkfa7
z=j2x@V>De^PJWe=UEkHzvLMArDe(|9g5}^g@EylMj3&TD)~~Di+w4TB(10W+WG3dY
zH^Ds;kf2^<JGz=TWM9n5Pz_At<`Amg!DUdn$?TeL=3UvzIT`ZBcw{s=hmcR;U~Wud
zZ+8REl$?CIHpWi^rsQx))rI501k+f@?q;`U({eJrjPZAvr{xe{E{2~9;LBf2b4Bmu
zoMGL~g5O?B4M(CnP)ZG7#v9&8yS^nzG!C?AIY`ua8MPegdkEv<>+IqlX0Pn)IeGgE
zOvt>R!^}j!5Hg^avk5)S-({D(tpby{)T*1f3|hW|6<3+JWLLP>DdjC+LDsp9%b?|}
z*uSgHE3&I{@{Q_J-ttvB%tneEOKC#av0YW>rP;cij4i=LS#>$YmROA-g9*Ea^{O^+
z%dN@Da2HI-tjQtVMb-o|n2~Sg*s^N#+T2^75WS50771b6LI_i?KF6{>%|fnT4qD<u
zs6GcLjKdd@$aJpHvH$I9c5b%bGZDSOy`D_;I>qStWZC<<qEB;dO;2-~{eBLY+o&(%
z)E5ny8*DB5q7_J(8#F(_qo)9AptjQop5xRPALQ7{UgkBq58Ud23!x9FI{)TEpgzj6
zKE2KV<UVqH6<-bGZ1iexE`;9rILFTPHZRS6?3xju2ZPYZWJX-hMRDkkZ8>)DrRI&z
zw&mnI%HTq1TdsKv>sty+y4l+HT+x{v+j6Pd7~P&jP{LQkZq%~fIUX){2Z3(e?fM>&
zXvyxJ3>QJ7I=gdN4k^{yjheX+;}fY)x>duLUT(Im0z(88cnqw4?)(SI#pUfEkignU
z!<QUyH){5Q94oy7j`x5EK_lcqP9Azf2oMKyExYrD1|%R3<Z$VOf1sork%x26fGf;V
zz7B_Ta<u{*T8DEoQUuAx(BbPSPU%M0`yt0Jxzb!;^@CS3#f(4XWS$m6!1y6oE+STt
z!1y7Dh?N{?HyZ0Fa$=7Q0-7gW&j}KmCtS}75}GH@dd_atz+ZBFk9!pe)a4hi4zzOp
z;u(-uu3uaS3Sl7qLJqXnK>v1!2hA5P%lpc&Wfy#H##nw)Kz9yYZSL_$pU=CSgYMMZ
z6Z5>cF9d-CCg$Zz0}=&H%*);ei2^3((c5&VraRew5}S9ud3EI^PlY;lQeGxpAOn?2
zc_cb|ausyy6qdii?A>chUJi@y{I<}Pyj&JQ0%1yC#+e|2FeQ&T^L2$o;I)mH^U6GD
z+6`tGUk!eWWwAT&)tB>fSp*5am-8}a28m_y<$PjZUM!2m;LGByygD~8mPN^f-t4?w
z79|VI;+(v@EOw^>vLG*(#Xs%P<6Xc(uYn~NN04a3g1lTDK>~6?-d!BK)96^5=Usdy
z2%s(XjPd_foqc>&#hJ&G)0-=UyIL-a5Hz{>yh%Y`jDRGBB#0EPR_#_>yKC2q_4Bc7
zSJ|$+pSGXvMhFqRA5;{{6o`l*t29<bluLOD;2T0n!%F~7WpP!IhzRl~7AX6DX6A6+
z|L*UZXPz_Xd4A8#+%t2|$OLCu!5Ko9Wmz{yqKu_wSwhUV+f-#HozE8ii3r!)2(Np&
zMCnt1r>^Lg&-MsxI#)`7SGoWLFuyYK84&X;lK=xTzfuDH@3^{B0@13|x2j(bZY@-i
z0Jmn{G1cf$r8UcY3bFuIDOtN-x7@0JFl2q!JsCtumGxQoHDVxD)@PX>F)mOA^k!BM
zy-kfB@@C;OlA~{C-M14_GFo)+l3$e)fel%kUjUrHA#pyCni~@51F5;;obxNi`R&g6
z01UM!&Ig)8$3!5O+7sskvD7Zk|1r+5%A~hui>Bs^OK-N$ulu1I-)n2OM{NCGC4TR;
zejg6Na%XaPKrDAAeg|T?Q~W-VyQ>m+?aJzVZdZeb>?+g|$L~rq3nl98lFYiv)WPvx
zS>1ZOx_M|<p^lj9N`h5oJl`e3>X0S2Dslb(Y`*$OYKvF1KXC(M8oNK?AP^(_vu=_N
zG_@GoK9z*5l2{zd=D%}?y05tIP{D{i#5hziB2hV%bqj`6!pNa41D46^Dx#7;p7s8c
zC##1R*Mq5zz~(lP+Q*aJ22%TYlG{LX`*^m`UtDgBz~uIcZ0akQ+fGKkFO%GMB69oW
zx!kUj?)OZwrIv2JQ>BNVNti_$tvHh~3y8Hd=a^L`6O)FVN$YC?xTPWI`Zyr>(~xt_
z0%EBl=h7O8rG^~L+AAaT=uCQAjwjv2?ouE3nwIO4wTv1qjCwR@x@x^{qDl{bH0K;d
z5e6U4xt<z`!AEltO2{!<STI8$ov3c9o{=;OAx)Z*Gzln5Iro)uAQooin48GL<7mn2
znY#XN^^ap_7A%OfX6D>$!RTONW-hYJpg=6l%(;DrqXjkPY{~+t*_3nrC6Jm;IoDqT
zjc(FkjuwVBTgQ$E7~~ua<Sv>EcOf)uP8>@qmYT(}D=x;d)tU6>T+u#1|NK2_dCy*(
zbIF{iT3p*<T{|3r&5p#kKx}p-z6D~lLwwsNZ`)PNT`$g$`4`oG(TK&qyCtL|_WKPq
zGZP?{7W=$CWwv8g<InU`-&^jdN?+AKsZcNEKY3X7Ev`pqDUSvQmilfu17cvQ?}jrV
zlwa!iS?=56OazAVulT9gd^?;u8TFR=Za8xyDF3Q2!`U;v%^fhLcKP1>ek%W;kEmvK
z7r;*0s!dnW<vZR2X;hc*cnidMm!I>^Ur!*7>hgp4X_RbX7XghT)PMHf!dtb(a*uCm
z0HAD7!DkY@J-(v>rC8tNCp4&*o_nuv^9z8Xy@hs4f3dgFPU$c97TPKO#a<s89FY7P
zlSy~`MN{;7PpMCPb^FQI=`lirL%zwc5dbV6O2Pre;vwH97!Zqxd`PfM=8R(`SjT+5
zZI*g>=&?d2A;B?U+4D3|qS7&+506i`l}M_SzJ9MsJv!v1?>6a-F@ZnnpJ#TRVOauy
z(r4G1jC^ARowEMZFKN1`Q;GX1;%cW7_W_M+;=VEB`N@HGAHX0NW*|2^IdEYHVrg>V
z!VJXH<N)_AkarPlGU>*k=-GUBw#pTMvoT2CSgjHNP1oO>qZW*u9ylH&#Mbn{ISz=e
z=>d*gBBMtQj!QoocsfXx&hzwL73z7tWv-f1kIW_l8W?yoaESoKz>|SX1R$JyGU%fN
zn+PH>i7+!rH3c>ioQ!%;1uhYsh(wqbB=fo&>Ez}FUz^t<fuM-&ybefH<^+zQKupdF
z5)ao1oNqlm0f2|+2hPJlJUl<~Fc3@g6AuGTRXi*&Gu39&&jm#fhsC8g>eXNM=%*i?
zr>djp0tNy(7Os{pW-kQZi$O|GCpZsmx0s1c@0h1nT(>w#O)$^eY!SEh`ye&$YZ9*3
zB9g@1lE7PrISyvF)(DD-^p0oLudjdk|J9ZMtV;vVxtGV5#=ZpPm4H*96KnavTZJ{A
z`Z{xTb|TZio3FOluL#`sH&a=B{>LD7U%{Msab>^}xQV&dfwvBGas-~KLT}|n=b9ki
zTobqh@2nDbTLX8ro|RyCZIJRS&l!Fr@HSxhpAy4-M97Hr-z-q~4u3O9)f8GK|DE3o
zILP|kH6<zDmTQ`S&9y@QHeEbRHILvo!EQ?!45WE&NeTd|*(NDq_Hfh+sX7AvtA*-`
zijG1hp?yc-`VN$+)Dh5k$Y(Qa#ckUHFH<^D?`~4xa-ZWy%!QGsxyKUG!p641btOP-
zYzyd0&dSchT44G>;2jL|3!hVGO6vJ-yM0Qqb0A?W5IYAFwgRzpAaLD2kQ6)+1P4h$
z>GnlnyZz4sy8TAkRaPs#&*{Lstn@^Qd<-&s*FQh-Z}&ea2Nq=Sy8CYPJ73<Sy1g-I
zC9RO*;dI~@crZaLP6yw#$q1wsrvqjv(lOS`ou3WNz@qPbiH`AXlC~64@obW|Kq{U+
zm$tQ%<Bg%|7{>!>Xk&P;3G$D-F?1axrC4eVUB?K-Qe#NkF8W*Ywl0%i6c)9I`E5(o
z!t}+9Lf!^$kY$28AxBH-U0ixh|K<Y~=U-l~{=Rq!65Gd7j@_0}ncc&pj@_0}K3pLK
zMV*9ki5|5=EgG_<P)7)|By|6@(V@<gkpBb!WiJUsmgmp^Bac2RmUC&th&scF<zXLt
zG%Aov%R?ghj=4||)}vO1-sVtmT&do^a8=mj0<*obPW0C3d8<@S#hNgc7&B=X_8H)8
z3oX`!g9e)|$8{3%wPEUt(!u&CYt%*BU#-Fl1a>f_nC7nyFSgIjfmB`_vY&|aeYj)X
zzCKJ<l#a5Mr>|B+D-hW4<5EoJ^<iK0Avn>d^7@cfS=q@@CjosUObsX<X)716QG<sd
zFq_Gxn96U2z3sX%kjig_>=~3D%ylx0e=F2?tl?JQ3OQ*|G6^Yl-U`d4^DvM)Z-v!0
zoM$a{c-pujOpPeL#$ND)HL9`#fn_SiRNfHw8|o^{gZ>R+#c;FDx=x-#Zj{QyY~?#!
z)#ViklFIV5e`BGtJni2omE|@3I(b6h7N)M`llsQVn_JbWVF>IZD8*E63oo(fB><`1
z77iKKbBYY)V>9V(VbRI(`Qd9-aqn#*i}Z5P>sZ*D?hL)1p`Nf#Rn_y;ew2U$%yotr
z+V}%8*BP=iMs~3P=?6N)(w(7Q(-MJM=-CmnnOS-UCxMweLe}VHQ?V1t+Ru)#rncv=
zO#`@0SLlr_{dx9>_cpCp4~_xZPGPKBd+rL|$}!OBy007qX;N3nYY(!8eXMkoyF<Nn
zy{a9%yI?}twL3{_lrXV7bbn2OnAjci*YtDQl{Qv-$s?inWthM6b@lU-dVVKOkzVph
z!H%TEk%Apbha+OgdPjQ6BVqZMct>6x$F7~I91T+^LOW4$GU^=*-9*KSn5Y~NWuo#y
zFL@}<`44BpqNb?0bSwW=AOCYnAKm}3I$z)Pj#`m96PENhFI8}?0}lj4Z;*MZA_CGt
zut~WRAl~_F$a5G{4oKnIP*2>bCX}5GJ+sYOq$r&Y+2%afD1jc*8#bzOWe-K(Kp`|b
z;^v1U{@lo8b#p+&WIbS$8WBv6ydh3Uo={JYuB?zvr0CE&Oo_ZJ{a8<4#FOHgn^ajD
z0+Y~EjP{gh=&+uA<N}DF8+6AeHM*>!a8+44XppPgmXY*R^?){7Hnnh7Svr_1SB2Qv
zA-5a#Z`)K&d1K^0Ad3*4#)$X)_<pV^k<8Qc``Xmj;_~T{XOdQ=Xibm!_VxCZ(IRVS
z<#)EL+r08wg*M6B!7ORhE#%iVne^<aXrcbj7IkxGcEtY-c?f!qq}SZYds??_Q8o4a
zvYC#Y2+WQ8*;l}U@L+Dl<9gu_5dO@K!lxsfT_P~q)f~C(auQn59J%arBFV1ii0nEp
zz5F#2=>?G&mF|N)_ij~(Ye1IMl;P_IksI)UM%V2R1k$Dj5z9V&;@K<VT#e_WqP4nd
zn|e0$d{k0qXm^Rw?ge6CXs7Sr&iWkCyjEF4Aq{*%+${?=mq=R{>nFFXp=FEVgCPq-
zbQVWsv5<vRDwx3PJ=@jD;P(YPMk;pr7mf}MYl*z!et%1-8#-0*as)Pf6l0@B!Z(f0
zKd8gMRr%j^DwP_uD)P)D3z4F=D&moa@EVBGRnds+%oleB(%4ne$O*FaPBETZt>1W8
z4K7=qFc%>vRtt0QH#)F#jlSSLHK}|}<X!FT3M<z{Rik@8MLaMBEnD@|@2RG2YoRSd
z%T{U251`VxO#1bx=)FjPzf0X3zaH`KicF8k@mJuT$lDyH<ly)7!1k|zk>%UF)PEFT
zy)jB%V`i<k5UZP_)TFOTxXHGNKLaxSjT3TqMBdg&KlHvDUC&SZi9iat`HtvPJ8A-{
z))BFrO4td6ogLBTTOB(^VA#1OVW*RD`7H@Mok-ZZMc8TnN{@pP>79}HZj>s0TUYH?
z+wKNgc2b5vcSi2bRv>NK8TqD<p%KE)os#XgP4d@pXLQxOv`I!E%4t)E7VL^r!{js>
zFLiAuy*n!UG|~_Jk80|*JK}p<Pssn$YlXufM)^K_I6vrnAM)i437v?!BKubCpK~Br
z{4ioh?Mmr8K8!N<d|yhXhc_C%t9$OUcB$VT<$v{oy1lr*yI@!Dq&sp?)vq;o(jD=j
z*4mZLHQiC~@0zGlDt1M3k^SVLlW=F<(N)RCjS?5{j%sh{`MRVl=an3aicT<UEGy1l
z`?G)5w|vNOaVT<IAN$HZA11+U-qwDk(&a$2!c{^c<_|}#a7n&#tVkyHMWlcFks4V3
zMbh6QMd=HPfUHCIl@vV^=|6m=ZYe*KWG+%8CUf~KgA#2#8tF?vR+Z&PBlk6Fq$nMY
z*oFZuQ6gWDMf$;y>AH_ao*|(~Q933h<fD{867qPYw|=ZfWsgUm-MfhtrQ;Ec>vaTt
zd?x)>RP@(Ke`~L*>HSs29w6cUc;Wr2$U9?rKSD3rtJ3vgJCCB2+dUPzkJAHb^QnkO
z;6gMYL^~DvXB_!OV90+uA-|K*kkbkIok+-kTF8F~0pf6$$#Kzd<KohrH~?1<-=}WP
zOpZ%J)2;TC@Jxxl5jH$)_tC8aZP!I1#;3$|7vc(YBuj(-XrHPqYlyv3LL(8P(-5;f
zDx+aP3By!f^@*w}n;N^m386@1`X*Vl=fo5lF`GVN(Y`VEMmjqZo5r}Z%EYFh#O7gr
z;uBR{_HgXFaD?bQ9Mgr%wugQanrZs``_<KD(_*jM*^$Uhi)-u5CISvQ;bblS!hSVA
zc%+~sedQyfb05+Bb|yVNE_wn7{a6-VO7*~Qbz^3F%xb1Y@!Jx`$6{}Wu76*R)UDkF
z5omX$Q%DdWi+%fd1<1WU77x0@1QAFOABzXii0$|)0u#i?V>iA!3GI12cH^rPNe~~8
z3F2W%Gu~ooii`f6M*c73>$p!<ccv*WDK|kZl^|-OW`Y<3X%pB?&`W?=*D;6n@YW`f
z!r6M-0W~H!yPzXcoGm(+86D7^*sIbP98`UMsR0^c9L$+3rf^iHQ{{%|>hjN2dD-09
zP4G%hqRow&;DyE<!EDxde5T^E<|N=8qk^4g3ApU3DV1Q()AK)LPtCj};0V!~Cjqz3
zBACzU^AB>ZXA*Linw=ca2)VMx4&&Z@eceIjm(7peM6uLN$L7a$A(7Fc=X+K^a!_4f
z_H68#!#rq!Ovav#+1F=vn2RmY?V_`waPKk|TM%>aIb(-EN(*)7a~1r<!q~F|JZF)h
zvoPlED%)oH3_lm~FU(#(>48ai-t)^zKl{Z!KfT-xK3rAyD^YG<6cb40=VD$Ivlrl1
zvqgFa7bss;xMBJF{-U_5y64@ncS0t;I4*igZ~I(L%q))i$hVMof{?Z)<|~Rq+Ik?a
z1KW?!0J&;Qe3|{CE07?z#Pnv;^#EaQOFZBYj<q5%tbH+It&`A>7ZcVxk+AkfVeMRD
zEr*%B67yoisY7Z`=9Pr6{e`c~&hZsUYrvMTK<q9PF3O<LU)cAmK73dWDtk2v1VVIP
zl|V52MF;enuKYrcEqg6?lR|_djTsVnhXEb#ak>887ixIf@`M-&(OE9U7;AJOYMvLk
znD6HkfA=>;%?rUe2njn7b%nm+h^i=GQMi^6b%k8(CSr13CcQc?TCbarsPAT0OH5>r
zex1amHTKr&Q%9Ji^UFp9Ik(uFL<2}mTa#!2iAHNYV4aJG2uw8ACed&bTCg^Wh7(CN
z)=D(qms31A@ML3L^e6g|_HSf$?Y@$}`7KA)n&QmHxa2a^lUyp1*@SmYPZ9xX8Q4y<
zfm~yg+@+)}r;{+ri*@&Lbz`<IcC%unD7D3MppQ&MFO?{4j`eLP)b#Sr1uZK^>n@|j
zEw{%_U#f}O_9PiDHNk0*`6z@OP<1_P<8jf>SWo#<{V20F<}Ddv`t{<~?XkDRG93uh
z!FHP{kVbBg-S>}yTxfgDCOu&~5Z`W(;~mboA~3$~OnmDk+(T#LTPG6VcH-NK=}EtM
U;K2v3+IHd_SM<<R#+D5FKX%<;5&!@I

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 90902343..22e49f8b 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -4262,15 +4262,48 @@ func (x *Pricing) GetMetering() PricingMetering {
 // from the verified signature, never from anything the caller sends.
 type Requester struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
-	// Unique requester identifier (e.g., "agent-research-bot-001").
+	// REQUIRED. A free label the agent chooses for attribution (e.g.
+	// "agent-research-bot-001"), 1 to 255 characters. Use it to tell apart the
+	// sub-agents or end customers that share one key directory. It is never
+	// identity: no verifier finds keys from it, and no party trusts it for an
+	// authentication or authorization decision. The requester's identity is
+	// `domain` together with the key that verifies. The acceptance signatures
+	// cover this label (see AgentAcceptancePayload), so a relaying Broker cannot
+	// rewrite it, but its value is still only what the agent says.
 	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
-	// Domain the requester belongs to. It carries the same bare-host shape
-	// "Request recipient" defines in the file header, for the same structural
+	// REQUIRED. Bare host of the requester's key directory: the WBA directory at
+	// {domain}/.well-known/http-message-signatures-directory that publishes the
+	// agent's Ed25519 keys. It carries the bare-host shape "Request recipient"
+	// defines in the file header (a port allowed), for the same structural
 	// reason: a scheme, path or query smuggled in here would choose what gets
-	// fetched, not merely from where. It is NOT how a verifier finds this
-	// requester's keys: those live in the WBA directory, and verification resolves
-	// that directory from the COVERED `Signature-Agent` header, never from this
-	// self-asserted value.
+	// fetched, not merely from where. It is never a free label. Every verifier
+	// reads it as the name of that directory, and the rule that binds it depends
+	// on who signed the arriving request:
+	//
+	//   - Direct request. The agent's own RFC 9421 signature arrives: the agent
+	//     sent the request itself, or a relay forwarded it byte-for-byte. The
+	//     verifier resolves the agent's keys from the COVERED `Signature-Agent`
+	//     header, never from this field. It then MUST require this field to name
+	//     that same directory: the host of the `Signature-Agent` URL, compared by
+	//     the identity rule "Request recipient" defines (the shape check first,
+	//     then case-folded, an absent port the same as ":443", a subdomain a
+	//     different party). A mismatch is refused as UNAUTHENTICATED with
+	//     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but
+	//     not for the requester the body names. An Exchange applies this rule on
+	//     every request it receives signed by the agent, exactly as a Broker
+	//     applies it at BrokerService.ExecuteTransaction.
+	//   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
+	//     re-packages the purchase, so the request signature and the covered
+	//     `Signature-Agent` are the Broker's. They say only that the call comes
+	//     from the Broker, and they sign no purchase. The Exchange MUST verify
+	//     each item's AgentAcceptance, and the AgentRequestAcceptance, against
+	//     the Ed25519 keys currently valid in the directory this field names
+	//     (see AgentRequestAcceptance), never against the Broker's key. Those
+	//     acceptances are the only agent signatures the Exchange sees.
+	//   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent
+	//     signature, so nothing on that leg authenticates this field: it is the
+	//     Broker's statement, under the Broker's own signature, of whom it
+	//     queries for.
 	Domain string `protobuf:"bytes,2,opt,name=domain,proto3" json:"domain,omitempty"`
 	// What kind of entity is making this request.
 	Type RequesterType `protobuf:"varint,3,opt,name=type,proto3,enum=fora.v1.RequesterType" json:"type,omitempty"`
@@ -4628,8 +4661,19 @@ func (x *Delegation) GetExtCritical() []string {
 // it is topology-independent and content-bound, so it stays valid no matter how
 // many brokers relay the request, and binds the agent to THIS specific offer +
 // requester + transaction. It travels in the execute body alongside the
-// reflected Offer; the Exchange verifies it and binds the delivery URL to the
-// agent's key (RFC 7638 thumbprint of the acceptance key).
+// reflected Offer; the Exchange verifies it against an Ed25519 key currently
+// valid in the WBA directory `requester.domain` names, and binds the delivery
+// URL to that key (RFC 7638 thumbprint of the acceptance key).
+//
+// The acceptance MUST name a requester. Its canonical bytes carry a non-empty
+// requester_id and a non-empty requester_domain, taken from the enclosing
+// request's Requester. A signer refuses to sign bytes that name an empty
+// requester, and a verifier refuses an acceptance whose canonical bytes name
+// one, even when the signature over those bytes verifies. Such bytes bind the
+// agent's consent to nobody, and on a purchase relayed through
+// BrokerService.ExecuteTransaction this acceptance is the only agent signature
+// the Exchange sees: the request signature there is the Broker's, which says
+// only that the call comes from the Broker and never signs the purchase.
 //
 // `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the
 // CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical
@@ -4717,6 +4761,10 @@ func (x *AgentAcceptance) GetSignatureAlgorithm() string {
 // not against the wire signer (see Delegation). The agent does not need to
 // delegate to the Broker's key for the Broker to relay its purchase.
 //
+// The payload names the requester exactly as AgentAcceptancePayload does, with
+// the same rule: a non-empty requester_id and requester_domain, which a signer
+// refuses to omit and a verifier refuses to accept empty.
+//
 // The verification key is the agent key published for the requester the signed
 // payload names. payload.requester_domain must equal the request's
 // requester.domain, and the Exchange accepts the signature only if it verifies
@@ -4864,10 +4912,12 @@ type AgentRequestAcceptancePayload struct {
 	// canonicalization work, because a verifier may run with wire validation
 	// off and the canonical rendering of an unbounded list is the expensive
 	// step an unauthenticated caller could otherwise buy for free.
-	Items           []*AgentRequestAcceptanceItem `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
-	RequesterId     string                        `protobuf:"bytes,2,opt,name=requester_id,json=requesterId,proto3" json:"requester_id,omitempty"`
-	RequesterDomain string                        `protobuf:"bytes,3,opt,name=requester_domain,json=requesterDomain,proto3" json:"requester_domain,omitempty"`
-	IdempotencyKey  string                        `protobuf:"bytes,4,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
+	Items []*AgentRequestAcceptanceItem `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
+	// Requester.id of the request. Non-empty (see AgentRequestAcceptance).
+	RequesterId string `protobuf:"bytes,2,opt,name=requester_id,json=requesterId,proto3" json:"requester_id,omitempty"`
+	// Requester.domain of the request. Non-empty (see AgentRequestAcceptance).
+	RequesterDomain string `protobuf:"bytes,3,opt,name=requester_domain,json=requesterDomain,proto3" json:"requester_domain,omitempty"`
+	IdempotencyKey  string `protobuf:"bytes,4,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
 	unknownFields   protoimpl.UnknownFields
 	sizeCache       protoimpl.SizeCache
 }
@@ -4949,14 +4999,20 @@ func (x *AgentRequestAcceptancePayload) GetIdempotencyKey() string {
 // For batch mode, requester_* and idempotency_key come from the ENCLOSING
 // TransactionRequest (a TransactionItem carries neither); offer_sig is the
 // per-item Offer.signature.
+//
+// requester_id and requester_domain are never empty in an acceptance: a signer
+// refuses to build these bytes from a Requester missing either, and a verifier
+// refuses bytes that name an empty requester (see AgentAcceptance). The two
+// Requester fields are REQUIRED on the wire for the same reason.
 type AgentAcceptancePayload struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// The accepted Offer's signature (Offer.signature). Anchors the whole signed
 	// offer without re-serializing its terms/pricing/expiry.
 	OfferSig string `protobuf:"bytes,1,opt,name=offer_sig,json=offerSig,proto3" json:"offer_sig,omitempty"`
-	// Requester identity (Requester.id) the acceptance is bound to.
+	// Requester label (Requester.id) the acceptance is bound to. Never empty.
 	RequesterId string `protobuf:"bytes,2,opt,name=requester_id,json=requesterId,proto3" json:"requester_id,omitempty"`
-	// Requester domain (Requester.domain) the acceptance is bound to.
+	// Requester domain (Requester.domain) the acceptance is bound to: the host of
+	// the key directory the acceptance verifies against. Never empty.
 	RequesterDomain string `protobuf:"bytes,3,opt,name=requester_domain,json=requesterDomain,proto3" json:"requester_domain,omitempty"`
 	// The transaction's idempotency key — binds the acceptance to a single
 	// execute so it cannot be replayed under a different transaction.
@@ -10684,9 +10740,10 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x13_estimated_quantityB\x1a\n" +
 	"\x18_license_duration_monthsB\a\n" +
 	"\x05_unitB\v\n" +
-	"\t_metering\"\x82\x04\n" +
-	"\tRequester\x12\x0e\n" +
-	"\x02id\x18\x01 \x01(\tR\x02id\x12\xd3\x01\n" +
+	"\t_metering\"\x8e\x04\n" +
+	"\tRequester\x12\x1a\n" +
+	"\x02id\x18\x01 \x01(\tB\n" +
+	"\xbaH\ar\x05\x10\x01\x18\xff\x01R\x02id\x12\xd3\x01\n" +
 	"\x06domain\x18\x02 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\x06domain\x124\n" +
 	"\x04type\x18\x03 \x01(\x0e2\x16.fora.v1.RequesterTypeB\b\xbaH\x05\x82\x01\x02 \x00R\x04type\x12\x17\n" +
 	"\x04name\x18\x04 \x01(\tH\x00R\x04name\x88\x01\x01\x12 \n" +
diff --git a/gen/jsonschema/fora.v1.AgentAcceptance.schema.json b/gen/jsonschema/fora.v1.AgentAcceptance.schema.json
index 661ce5c6..454e2ad9 100644
--- a/gen/jsonschema/fora.v1.AgentAcceptance.schema.json
+++ b/gen/jsonschema/fora.v1.AgentAcceptance.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.AgentAcceptance.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+  "description": "The acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
   "properties": {
     "signature": {
       "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
@@ -17,6 +17,6 @@
   "required": [
     "signature"
   ],
-  "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+  "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json b/gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json
index ea260db1..1d45c3ef 100644
--- a/gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json
+++ b/gen/jsonschema/fora.v1.AgentAcceptance.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.AgentAcceptance.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+  "description": "The acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
   "properties": {
     "signature": {
       "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
@@ -18,6 +18,6 @@
   "required": [
     "signature"
   ],
-  "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+  "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
index 06ac852e..8a339c3e 100644
--- a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
+++ b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.AgentAcceptancePayload.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Field provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.",
+  "description": "Field provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason.",
   "properties": {
     "idempotency_key": {
       "default": "",
@@ -15,12 +15,12 @@
     },
     "requester_domain": {
       "default": "",
-      "description": "Requester domain (Requester.domain) the acceptance is bound to.",
+      "description": "Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.",
       "type": "string"
     },
     "requester_id": {
       "default": "",
-      "description": "Requester identity (Requester.id) the acceptance is bound to.",
+      "description": "Requester label (Requester.id) the acceptance is bound to. Never empty.",
       "type": "string"
     }
   },
diff --git a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
index b312b1c0..018fff35 100644
--- a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
+++ b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.AgentAcceptancePayload.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Field provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.",
+  "description": "Field provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason.",
   "properties": {
     "idempotency_key": {
       "default": "",
@@ -16,12 +16,12 @@
     },
     "requester_domain": {
       "default": "",
-      "description": "Requester domain (Requester.domain) the acceptance is bound to.",
+      "description": "Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.",
       "type": "string"
     },
     "requester_id": {
       "default": "",
-      "description": "Requester identity (Requester.id) the acceptance is bound to.",
+      "description": "Requester label (Requester.id) the acceptance is bound to. Never empty.",
       "type": "string"
     }
   },
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
index 71953592..da6ba58d 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
@@ -37,10 +37,12 @@
         },
         "requester_domain": {
           "default": "",
+          "description": "Requester.domain of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         },
         "requester_id": {
           "default": "",
+          "description": "Requester.id of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         }
       },
@@ -50,7 +52,7 @@
   },
   "$id": "fora.v1.AgentRequestAcceptance.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
   "properties": {
     "payload": {
       "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
index 82d419c8..218562d3 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
@@ -39,10 +39,12 @@
         },
         "requester_domain": {
           "default": "",
+          "description": "Requester.domain of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         },
         "requester_id": {
           "default": "",
+          "description": "Requester.id of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         }
       },
@@ -53,7 +55,7 @@
   "$id": "fora.v1.AgentRequestAcceptance.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
   "properties": {
     "payload": {
       "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json
index 2ae13f1a..190c7ae4 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.json
@@ -39,10 +39,12 @@
     },
     "requester_domain": {
       "default": "",
+      "description": "Requester.domain of the request. Non-empty (see AgentRequestAcceptance).",
       "type": "string"
     },
     "requester_id": {
       "default": "",
+      "description": "Requester.id of the request. Non-empty (see AgentRequestAcceptance).",
       "type": "string"
     }
   },
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json
index 424252f1..d6c68d9e 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptancePayload.schema.strict.json
@@ -41,10 +41,12 @@
     },
     "requester_domain": {
       "default": "",
+      "description": "Requester.domain of the request. Non-empty (see AgentRequestAcceptance).",
       "type": "string"
     },
     "requester_id": {
       "default": "",
+      "description": "Requester.id of the request. Non-empty (see AgentRequestAcceptance).",
       "type": "string"
     }
   },
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index b8f9d602..67d9d7c8 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -243,9 +243,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
           "type": "string"
         },
         "ext": {
@@ -260,8 +261,9 @@
           "type": "array"
         },
         "id": {
-          "default": "",
-          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+          "maxLength": 255,
+          "minLength": 1,
           "type": "string"
         },
         "name": {
@@ -301,6 +303,7 @@
       },
       "required": [
         "domain",
+        "id",
         "type"
       ],
       "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index 85b01052..0e29da92 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -248,9 +248,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
           "type": "string"
         },
         "ext": {
@@ -265,8 +266,9 @@
           "type": "array"
         },
         "id": {
-          "default": "",
-          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+          "maxLength": 255,
+          "minLength": 1,
           "type": "string"
         },
         "name": {
@@ -306,6 +308,7 @@
       },
       "required": [
         "domain",
+        "id",
         "type"
       ],
       "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index 60bce41f..f8176750 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -92,9 +92,10 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
       "type": "string"
     },
     "ext": {
@@ -109,8 +110,9 @@
       "type": "array"
     },
     "id": {
-      "default": "",
-      "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+      "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+      "maxLength": 255,
+      "minLength": 1,
       "type": "string"
     },
     "name": {
@@ -150,6 +152,7 @@
   },
   "required": [
     "domain",
+    "id",
     "type"
   ],
   "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index fc4eb39b..d1e1a36a 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -94,9 +94,10 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
       "type": "string"
     },
     "ext": {
@@ -111,8 +112,9 @@
       "type": "array"
     },
     "id": {
-      "default": "",
-      "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+      "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+      "maxLength": 255,
+      "minLength": 1,
       "type": "string"
     },
     "name": {
@@ -152,6 +154,7 @@
   },
   "required": [
     "domain",
+    "id",
     "type"
   ],
   "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index ef9093d9..6636b7d4 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -133,9 +133,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
           "type": "string"
         },
         "ext": {
@@ -150,8 +151,9 @@
           "type": "array"
         },
         "id": {
-          "default": "",
-          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+          "maxLength": 255,
+          "minLength": 1,
           "type": "string"
         },
         "name": {
@@ -191,6 +193,7 @@
       },
       "required": [
         "domain",
+        "id",
         "type"
       ],
       "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index e6f02fdc..c04ae95f 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -136,9 +136,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
           "type": "string"
         },
         "ext": {
@@ -153,8 +154,9 @@
           "type": "array"
         },
         "id": {
-          "default": "",
-          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+          "maxLength": 255,
+          "minLength": 1,
           "type": "string"
         },
         "name": {
@@ -194,6 +196,7 @@
       },
       "required": [
         "domain",
+        "id",
         "type"
       ],
       "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index c793764f..e83e6957 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -1,7 +1,7 @@
 {
   "$defs": {
     "fora.v1.AgentAcceptance": {
-      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "description": "The acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
       "properties": {
         "signature": {
           "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
@@ -17,7 +17,7 @@
       "required": [
         "signature"
       ],
-      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).",
       "type": "object"
     },
     "fora.v1.License": {
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index 29fd31e3..775be8da 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -2,7 +2,7 @@
   "$defs": {
     "fora.v1.AgentAcceptance": {
       "additionalProperties": false,
-      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "description": "The acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
       "properties": {
         "signature": {
           "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
@@ -18,7 +18,7 @@
       "required": [
         "signature"
       ],
-      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).",
       "type": "object"
     },
     "fora.v1.License": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 6bcdde12..24d741cf 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -1,7 +1,7 @@
 {
   "$defs": {
     "fora.v1.AgentAcceptance": {
-      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "description": "The acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
       "properties": {
         "signature": {
           "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
@@ -17,11 +17,11 @@
       "required": [
         "signature"
       ],
-      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).",
       "type": "object"
     },
     "fora.v1.AgentRequestAcceptance": {
-      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
       "properties": {
         "payload": {
           "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
@@ -82,10 +82,12 @@
         },
         "requester_domain": {
           "default": "",
+          "description": "Requester.domain of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         },
         "requester_id": {
           "default": "",
+          "description": "Requester.id of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         }
       },
@@ -701,9 +703,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
           "type": "string"
         },
         "ext": {
@@ -718,8 +721,9 @@
           "type": "array"
         },
         "id": {
-          "default": "",
-          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+          "maxLength": 255,
+          "minLength": 1,
           "type": "string"
         },
         "name": {
@@ -759,6 +763,7 @@
       },
       "required": [
         "domain",
+        "id",
         "type"
       ],
       "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index e7f4d868..1571f891 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -2,7 +2,7 @@
   "$defs": {
     "fora.v1.AgentAcceptance": {
       "additionalProperties": false,
-      "description": "`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
+      "description": "The acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".",
       "properties": {
         "signature": {
           "description": "Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature).",
@@ -18,12 +18,12 @@
       "required": [
         "signature"
       ],
-      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).",
+      "title": "AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).",
       "type": "object"
     },
     "fora.v1.AgentRequestAcceptance": {
       "additionalProperties": false,
-      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
       "properties": {
         "payload": {
           "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
@@ -86,10 +86,12 @@
         },
         "requester_domain": {
           "default": "",
+          "description": "Requester.domain of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         },
         "requester_id": {
           "default": "",
+          "description": "Requester.id of the request. Non-empty (see AgentRequestAcceptance).",
           "type": "string"
         }
       },
@@ -715,9 +717,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
           "type": "string"
         },
         "ext": {
@@ -732,8 +735,9 @@
           "type": "array"
         },
         "id": {
-          "default": "",
-          "description": "Unique requester identifier (e.g., \"agent-research-bot-001\").",
+          "description": "REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.",
+          "maxLength": 255,
+          "minLength": 1,
           "type": "string"
         },
         "name": {
@@ -773,6 +777,7 @@
       },
       "required": [
         "domain",
+        "id",
         "type"
       ],
       "title": "Requester — Universal identity for any FORA client.",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 4ac85255..0d4341f4 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -38,10 +38,11 @@ class AgentAcceptancePayload(WireModel):
     )
     requester_domain: str | None = Field(
         '',
-        description='Requester domain (Requester.domain) the acceptance is bound to.',
+        description='Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.',
     )
     requester_id: str | None = Field(
-        '', description='Requester identity (Requester.id) the acceptance is bound to.'
+        '',
+        description='Requester label (Requester.id) the acceptance is bound to. Never empty.',
     )
 
 
@@ -58,8 +59,14 @@ class AgentRequestAcceptancePayload(WireModel):
         max_length=256,
         min_length=1,
     )
-    requester_domain: str | None = ''
-    requester_id: str | None = ''
+    requester_domain: str | None = Field(
+        '',
+        description='Requester.domain of the request. Non-empty (see AgentRequestAcceptance).',
+    )
+    requester_id: str | None = Field(
+        '',
+        description='Requester.id of the request. Non-empty (see AgentRequestAcceptance).',
+    )
 
 
 class AuthMethod(Enum):
@@ -1376,15 +1383,16 @@ class Requester(WireModel):
         max_length=260,
     ) = Field(
         ...,
-        description='Domain the requester belongs to. It carries the same bare-host shape\n "Request recipient" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester\'s keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value.',
+        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent\'s keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
         None,
         description='Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.',
     )
-    id: str | None = Field(
-        '', description='Unique requester identifier (e.g., "agent-research-bot-001").'
+    id: constr(min_length=1, max_length=255) = Field(
+        ...,
+        description='REQUIRED. A free label the agent chooses for attribution (e.g.\n "agent-research-bot-001"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester\'s identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says.',
     )
     name: str | None = Field(
         None, description='Human-readable name (e.g., "Acme Research Assistant").'
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 1f18231b..fdc33685 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -10,15 +10,15 @@ export const AcceptableRestrictionSchema = wire(z.object({ "axis": z.union([z.st
 
 export const AccountRegistrationSchema = wire(z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("AccountRegistration — how to open an account at this Exchange. Published as an\n optional block on WellKnownManifest; an Exchange that omits the whole block\n keeps today's behaviour, accepting RegisterRequest.registration_data\n uninspected. The block exists rather than a flat field because registration\n has more than one publishable facet: `data_schema` describes the API mode\n below, and field 2 is deliberately left free for a future web mode — a URL to\n a registration page on the Exchange's own site, where a human completes the\n steps an API call cannot carry (explicit terms confirmation, identity checks,\n manual review). Flat siblings on a manifest this size would give a reader no\n signal that they are one subject. Precedence between the modes is fixed now,\n before both can be published: an Exchange that publishes `data_schema` MUST\n accept registration through the API, and a registration URL is an additional\n option an agent MAY offer its user instead — never a replacement for the API\n path. An Exchange that wants web-only registration publishes the URL and no\n schema. Note that terms versioning is NOT in this block: WellKnownManifest.\n terms_digest sits at the top level so an Exchange with pass-through\n registration can still pin which terms document it is serving."));
 
-export const AgentAcceptanceSchema = wire(z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it and binds the delivery URL to the\n agent's key (RFC 7638 thumbprint of the acceptance key).\n\n`signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\"."));
+export const AgentAcceptanceSchema = wire(z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).\n\nThe acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\"."));
 
-export const AgentAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to.").default(""), "requester_id": z.string().describe("Requester identity (Requester.id) the acceptance is bound to.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature."));
+export const AgentAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.").default(""), "requester_id": z.string().describe("Requester label (Requester.id) the acceptance is bound to. Never empty.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason."));
 
-export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
+export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
 
 export const AgentRequestAcceptanceItemSchema = wire(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection."));
 
-export const AgentRequestAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature."));
+export const AgentRequestAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature."));
 
 export const AttributionDetailSchema = wire(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting."));
 
@@ -48,7 +48,7 @@ export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE",
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
-export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
+export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
 export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
@@ -154,7 +154,7 @@ export const RequestAuthFailureReasonSchema = wire(z.enum(["REQUEST_AUTH_FAILURE
 
 export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
 
-export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
+export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
 
 export const RequesterTypeSchema = wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]));
 
@@ -168,7 +168,7 @@ export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string(
 
 export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]));
 
-export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
+export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
 export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
@@ -200,7 +200,7 @@ export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().re
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().default(""), "requester_id": z.string().default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Domain the requester belongs to. It carries the same bare-host shape\n \"Request recipient\" defines in the file header, for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is NOT how a verifier finds this\n requester's keys: those live in the WBA directory, and verification resolves\n that directory from the COVERED `Signature-Agent` header, never from this\n self-asserted value."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().describe("Unique requester identifier (e.g., \"agent-research-bot-001\").").default(""), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
 export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 66ff94e3..42662078 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -76,7 +76,8 @@ import "fora/v1/vocab.proto";
 //                      AgentAcceptance and the request's AgentRequestAcceptance,
 //                      detached signatures that stay valid however the purchase
 //                      was re-packaged. Each Exchange verifies those against the
-//                      agent's published keys (see AgentRequestAcceptance).
+//                      keys published in the directory requester.domain names
+//                      (see Requester.domain and AgentRequestAcceptance).
 // A request forwarded BYTE-FOR-BYTE through intermediaries keeps the original
 // signature and gains one per forwarding hop (multiple Signature headers, each
 // covering the prior one); the ordered set is the forwarding chain. That chain
@@ -1835,16 +1836,51 @@ enum DeliveryMethod {
 // the Exchange resolves the caller's account (RegisterResponse.billing_ref)
 // from the verified signature, never from anything the caller sends.
 message Requester {
-  // Unique requester identifier (e.g., "agent-research-bot-001").
-  string id = 1;
+  // REQUIRED. A free label the agent chooses for attribution (e.g.
+  // "agent-research-bot-001"), 1 to 255 characters. Use it to tell apart the
+  // sub-agents or end customers that share one key directory. It is never
+  // identity: no verifier finds keys from it, and no party trusts it for an
+  // authentication or authorization decision. The requester's identity is
+  // `domain` together with the key that verifies. The acceptance signatures
+  // cover this label (see AgentAcceptancePayload), so a relaying Broker cannot
+  // rewrite it, but its value is still only what the agent says.
+  string id = 1 [
+    (buf.validate.field).string = {min_len: 1, max_len: 255}
+  ];
 
-  // Domain the requester belongs to. It carries the same bare-host shape
-  // "Request recipient" defines in the file header, for the same structural
+  // REQUIRED. Bare host of the requester's key directory: the WBA directory at
+  // {domain}/.well-known/http-message-signatures-directory that publishes the
+  // agent's Ed25519 keys. It carries the bare-host shape "Request recipient"
+  // defines in the file header (a port allowed), for the same structural
   // reason: a scheme, path or query smuggled in here would choose what gets
-  // fetched, not merely from where. It is NOT how a verifier finds this
-  // requester's keys: those live in the WBA directory, and verification resolves
-  // that directory from the COVERED `Signature-Agent` header, never from this
-  // self-asserted value.
+  // fetched, not merely from where. It is never a free label. Every verifier
+  // reads it as the name of that directory, and the rule that binds it depends
+  // on who signed the arriving request:
+  //
+  //   - Direct request. The agent's own RFC 9421 signature arrives: the agent
+  //     sent the request itself, or a relay forwarded it byte-for-byte. The
+  //     verifier resolves the agent's keys from the COVERED `Signature-Agent`
+  //     header, never from this field. It then MUST require this field to name
+  //     that same directory: the host of the `Signature-Agent` URL, compared by
+  //     the identity rule "Request recipient" defines (the shape check first,
+  //     then case-folded, an absent port the same as ":443", a subdomain a
+  //     different party). A mismatch is refused as UNAUTHENTICATED with
+  //     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but
+  //     not for the requester the body names. An Exchange applies this rule on
+  //     every request it receives signed by the agent, exactly as a Broker
+  //     applies it at BrokerService.ExecuteTransaction.
+  //   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
+  //     re-packages the purchase, so the request signature and the covered
+  //     `Signature-Agent` are the Broker's. They say only that the call comes
+  //     from the Broker, and they sign no purchase. The Exchange MUST verify
+  //     each item's AgentAcceptance, and the AgentRequestAcceptance, against
+  //     the Ed25519 keys currently valid in the directory this field names
+  //     (see AgentRequestAcceptance), never against the Broker's key. Those
+  //     acceptances are the only agent signatures the Exchange sees.
+  //   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent
+  //     signature, so nothing on that leg authenticates this field: it is the
+  //     Broker's statement, under the Broker's own signature, of whom it
+  //     queries for.
   string domain = 2 [
     (buf.validate.field).string = {
       max_len: 260,
@@ -1901,8 +1937,11 @@ message Requester {
 
   // Request authentication is handled at the HTTP layer via RFC 9421
   // HTTP Message Signatures (alg=ed25519). The Requester's public keys are NOT
-  // in fora.json: they live in the WBA directory (WBAFile), and a verifier
-  // resolves that directory from the COVERED `Signature-Agent` header.
+  // in fora.json: they live in the WBA directory (WBAFile) that `domain` names.
+  // On a direct request a verifier resolves that directory from the COVERED
+  // `Signature-Agent` header and requires `domain` to name it; on a purchase a
+  // Broker relayed, it verifies the agent's acceptances against the directory
+  // `domain` names (see `domain`).
 
   // Optional delegation — present when the requester acts on behalf of
   // another entity (user, organization, upstream agent).
@@ -2087,8 +2126,19 @@ enum ResourceMutability {
 // it is topology-independent and content-bound, so it stays valid no matter how
 // many brokers relay the request, and binds the agent to THIS specific offer +
 // requester + transaction. It travels in the execute body alongside the
-// reflected Offer; the Exchange verifies it and binds the delivery URL to the
-// agent's key (RFC 7638 thumbprint of the acceptance key).
+// reflected Offer; the Exchange verifies it against an Ed25519 key currently
+// valid in the WBA directory `requester.domain` names, and binds the delivery
+// URL to that key (RFC 7638 thumbprint of the acceptance key).
+//
+// The acceptance MUST name a requester. Its canonical bytes carry a non-empty
+// requester_id and a non-empty requester_domain, taken from the enclosing
+// request's Requester. A signer refuses to sign bytes that name an empty
+// requester, and a verifier refuses an acceptance whose canonical bytes name
+// one, even when the signature over those bytes verifies. Such bytes bind the
+// agent's consent to nobody, and on a purchase relayed through
+// BrokerService.ExecuteTransaction this acceptance is the only agent signature
+// the Exchange sees: the request signature there is the Broker's, which says
+// only that the call comes from the Broker and never signs the purchase.
 //
 // `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the
 // CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical
@@ -2130,6 +2180,10 @@ message AgentAcceptance {
 // not against the wire signer (see Delegation). The agent does not need to
 // delegate to the Broker's key for the Broker to relay its purchase.
 //
+// The payload names the requester exactly as AgentAcceptancePayload does, with
+// the same rule: a non-empty requester_id and requester_domain, which a signer
+// refuses to omit and a verifier refuses to accept empty.
+//
 // The verification key is the agent key published for the requester the signed
 // payload names. payload.requester_domain must equal the request's
 // requester.domain, and the Exchange accepts the signature only if it verifies
@@ -2182,7 +2236,9 @@ message AgentRequestAcceptancePayload {
     (buf.validate.field).repeated.max_items = 256
   ];
 
+  // Requester.id of the request. Non-empty (see AgentRequestAcceptance).
   string requester_id = 2;
+  // Requester.domain of the request. Non-empty (see AgentRequestAcceptance).
   string requester_domain = 3;
   string idempotency_key = 4;
 }
@@ -2205,15 +2261,21 @@ message AgentRequestAcceptancePayload {
 // For batch mode, requester_* and idempotency_key come from the ENCLOSING
 // TransactionRequest (a TransactionItem carries neither); offer_sig is the
 // per-item Offer.signature.
+//
+// requester_id and requester_domain are never empty in an acceptance: a signer
+// refuses to build these bytes from a Requester missing either, and a verifier
+// refuses bytes that name an empty requester (see AgentAcceptance). The two
+// Requester fields are REQUIRED on the wire for the same reason.
 message AgentAcceptancePayload {
   // The accepted Offer's signature (Offer.signature). Anchors the whole signed
   // offer without re-serializing its terms/pricing/expiry.
   string offer_sig = 1;
 
-  // Requester identity (Requester.id) the acceptance is bound to.
+  // Requester label (Requester.id) the acceptance is bound to. Never empty.
   string requester_id = 2;
 
-  // Requester domain (Requester.domain) the acceptance is bound to.
+  // Requester domain (Requester.domain) the acceptance is bound to: the host of
+  // the key directory the acceptance verifies against. Never empty.
   string requester_domain = 3;
 
   // The transaction's idempotency key — binds the acceptance to a single

From af2103fb6e084a6a751687174fcced474acfb3f8 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:51:24 -0400
Subject: [PATCH 055/164] Refuse an acceptance that names no requester in the
 Go SDK

CanonicalAcceptanceBytes now refuses an empty requester id or domain
with the new helpers.ErrAcceptanceRequesterEmpty, and so do
RequestAcceptancePayload and CanonicalRequestAcceptanceBytes. Signing
and verifying both go through these, so SignOfferAcceptance,
SignOfferAcceptanceWith, VerifyOfferAcceptance, the request-acceptance
signers and VerifyRequestAcceptance all refuse such bytes, the
verifiers even when the signature over them verifies.

The purchase verbs refuse a configured requester with an empty id or
domain as CallMalformed before signing or sending: Client.Execute,
Client.ExecuteBatch and BrokerClient.Execute, the last before its
signing-directory check so the error names the missing field.

The empty_domain and empty_requester_id acceptance vectors and the
empty_requester_domain request-acceptance vector are no longer
signable. Each vector file gains a refused list, one entry per
requester field left empty, recording the bytes and the raw signature
a signer without the check would produce; the emitter checks the Go
oracle refuses each at all three entry points. The request-acceptance
file gains an empty_idempotency_key vector so the omission of the one
field that can still be empty stays pinned.
---
 sdk/go/connect/broker.go                      | 11 ++-
 sdk/go/connect/broker_execute_test.go         | 10 ++
 sdk/go/connect/purchase.go                    | 24 +++++
 sdk/go/connect/verbs_test.go                  | 22 ++++-
 sdk/go/helpers/acceptance.go                  | 46 +++++++--
 .../gen_request_acceptance_vectors_test.go    | 87 ++++++++++++++++-
 sdk/go/helpers/gen_vectors_test.go            | 94 ++++++++++++++++---
 sdk/go/helpers/request_acceptance.go          | 10 +-
 .../helpers/testdata/acceptance-vectors.json  | 34 ++++---
 .../testdata/request-acceptance-vectors.json  | 50 ++++++++--
 10 files changed, 338 insertions(+), 50 deletions(-)

diff --git a/sdk/go/connect/broker.go b/sdk/go/connect/broker.go
index ed07dbe5..621929a9 100644
--- a/sdk/go/connect/broker.go
+++ b/sdk/go/connect/broker.go
@@ -164,10 +164,10 @@ func (b *BrokerClient) discoveryResult(ctx context.Context, msg *forav1.Discover
 // Exchange, so a retry with the same key is answered from each Exchange's stored
 // result.
 //
-// Refused locally, with nothing sent: no requester (CallMalformed), no signer
-// (CallNotSignable), no offers, an unsigned offer, an offer that names no
-// exchange, and a requester.domain that is not the host of the directory this
-// client signs as (all CallMalformed). The last mirrors the Broker's own check,
+// Refused locally, with nothing sent: no requester, or one with an empty id or
+// domain (CallMalformed), no signer (CallNotSignable), no offers, an unsigned
+// offer, an offer that names no exchange, and a requester.domain that is not the
+// host of the directory this client signs as (all CallMalformed). The last mirrors the Broker's own check,
 // which it refuses with request_auth_failure SIGNATURE_INVALID.
 //
 // An Exchange that refused the Broker's whole sub-request is NOT an error here:
@@ -191,6 +191,9 @@ func (b *BrokerClient) Execute(ctx context.Context, offers []core.VerifiedOffer,
 		return nil, malformed(op, errors.New(
 			"no requester configured; a Broker resolves who is buying (see WithRequester)"))
 	}
+	if err := requireNamedRequester(op, b.requester); err != nil {
+		return nil, err
+	}
 	if err := requireRoutable(op, offers); err != nil {
 		return nil, err
 	}
diff --git a/sdk/go/connect/broker_execute_test.go b/sdk/go/connect/broker_execute_test.go
index 3c535303..d2d25c10 100644
--- a/sdk/go/connect/broker_execute_test.go
+++ b/sdk/go/connect/broker_execute_test.go
@@ -231,6 +231,10 @@ func TestBrokerExecute_RefusesLocallyWithoutSending(t *testing.T) {
 	unaddressed.Offer().Exchange = ""
 	otherDomain := testRequester()
 	otherDomain.Domain = "someone-else.test"
+	noID := testRequester()
+	noID.Id = ""
+	noDomain := testRequester()
+	noDomain.Domain = ""
 
 	tests := map[string]struct {
 		client *foraconnect.BrokerClient
@@ -248,6 +252,12 @@ func TestBrokerExecute_RefusesLocallyWithoutSending(t *testing.T) {
 			foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSigner(sig.signer),
 				foraconnect.WithSignatureAgent(agentDirectory)), good, foraconnect.CallMalformed,
 		},
+		"requester with no id": {
+			brokerClient(srv.URL, sig, foraconnect.WithRequester(noID)), good, foraconnect.CallMalformed,
+		},
+		"requester with no domain": {
+			brokerClient(srv.URL, sig, foraconnect.WithRequester(noDomain)), good, foraconnect.CallMalformed,
+		},
 		"no signer": {
 			foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSignatureAgent(agentDirectory),
 				foraconnect.WithRequester(testRequester())), good, foraconnect.CallNotSignable,
diff --git a/sdk/go/connect/purchase.go b/sdk/go/connect/purchase.go
index 9aa3745e..698b1c70 100644
--- a/sdk/go/connect/purchase.go
+++ b/sdk/go/connect/purchase.go
@@ -42,6 +42,9 @@ func buildTransaction(ctx context.Context, p purchase) (*forav1.TransactionReque
 		return nil, malformed(p.op, errors.New(
 			"no requester configured; the party that sells resolves who is buying (see WithRequester)"))
 	}
+	if err := requireNamedRequester(p.op, p.requester); err != nil {
+		return nil, err
+	}
 	if p.signer == nil {
 		// CallNotSignable, matching what Fetch answers for the same missing
 		// holder: a caller branching on the kind sees one condition under one
@@ -97,6 +100,27 @@ func buildTransaction(ctx context.Context, p purchase) (*forav1.TransactionReque
 	return req, nil
 }
 
+// requireNamedRequester refuses a requester with an empty id or an empty domain.
+// Every acceptance a purchase carries names the requester, and the protocol
+// requires both fields, so the signer would refuse to sign anyway; refusing here
+// reports the condition as CallMalformed, the configuration fault it is, rather
+// than as a custody failure. The error wraps helpers.ErrAcceptanceRequesterEmpty.
+func requireNamedRequester(op string, requester *forav1.Requester) error {
+	var missing string
+	switch {
+	case requester.GetId() == "":
+		missing = "requester.id"
+	case requester.GetDomain() == "":
+		missing = "requester.domain"
+	default:
+		return nil
+	}
+	return malformed(op, fmt.Errorf(
+		"%w: %s is empty; a purchase's acceptances name the requester, and both requester.id "+
+			"and requester.domain are required (see WithRequester)",
+		helpers.ErrAcceptanceRequesterEmpty, missing))
+}
+
 // requireOneExchange refuses a direct purchase whose offers were issued by more
 // than one Exchange. A direct purchase goes to one Exchange, and that Exchange
 // refuses a request carrying an item addressed to anyone else, so the verdict is
diff --git a/sdk/go/connect/verbs_test.go b/sdk/go/connect/verbs_test.go
index ca391cc7..42313efe 100644
--- a/sdk/go/connect/verbs_test.go
+++ b/sdk/go/connect/verbs_test.go
@@ -309,6 +309,12 @@ func TestExecute_FailsClosedWithoutSendingAnything(t *testing.T) {
 
 	unsigned := core.RejectedOffer{Offer: sampleOffer("offer-unsigned")}.Unsafe()
 	signedOffer := core.RejectedOffer{Offer: offers.good}.Unsafe()
+	// Every acceptance names the requester, so a requester missing either half
+	// cannot buy.
+	noID := testRequester()
+	noID.Id = ""
+	noDomain := testRequester()
+	noDomain.Domain = ""
 
 	tests := map[string]struct {
 		opts  []foraconnect.ClientOption
@@ -322,12 +328,24 @@ func TestExecute_FailsClosedWithoutSendingAnything(t *testing.T) {
 				foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
 			}, unsigned,
 		},
+		"requester with no id": {
+			[]foraconnect.ClientOption{
+				foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(noID),
+			}, signedOffer,
+		},
+		"requester with no domain": {
+			[]foraconnect.ClientOption{
+				foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(noDomain),
+			}, signedOffer,
+		},
 	}
 	for name, tc := range tests {
 		t.Run(name, func(t *testing.T) {
 			client := foraconnect.NewClient(srv.URL, tc.opts...)
-			if _, err := client.Execute(context.Background(), tc.offer); err == nil {
-				t.Fatal("expected a refusal")
+			_, err := client.Execute(context.Background(), tc.offer)
+			var cerr *foraconnect.CallError
+			if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
+				t.Fatalf("error = %v, want a CallError of kind %v", err, foraconnect.CallMalformed)
 			}
 			if origin.req != nil {
 				t.Error("the origin was contacted; the refusal must be local")
diff --git a/sdk/go/helpers/acceptance.go b/sdk/go/helpers/acceptance.go
index ff2a5207..3eaa9dfa 100644
--- a/sdk/go/helpers/acceptance.go
+++ b/sdk/go/helpers/acceptance.go
@@ -33,6 +33,31 @@ const AcceptanceSignatureAlgorithm = "EdDSA"
 // idempotency key).
 var ErrAcceptanceSignatureInvalid = errors.New("helpers: offer-acceptance signature invalid")
 
+// ErrAcceptanceRequesterEmpty signals an acceptance that would name no
+// requester: an empty requester id or an empty requester domain. Both are
+// REQUIRED (fora.proto Requester), and an acceptance binds the agent's consent
+// to the requester its canonical bytes name, so bytes naming an empty one bind
+// it to nobody. On a purchase a Broker relays, the acceptance is the only agent
+// signature the Exchange sees, and the Exchange resolves the verification key
+// from the requester domain. Signers refuse to produce such bytes, and verifiers
+// refuse them even when the signature over them verifies. Match it with
+// errors.Is.
+var ErrAcceptanceRequesterEmpty = errors.New("helpers: acceptance names an empty requester")
+
+// checkAcceptanceRequester refuses an empty requester id or domain. It is the
+// one rule both acceptances share: the offer acceptance (CanonicalAcceptanceBytes)
+// and the request acceptance (RequestAcceptancePayload,
+// CanonicalRequestAcceptanceBytes) each run it before rendering canonical bytes.
+func checkAcceptanceRequester(id, domain string) error {
+	if id == "" {
+		return fmt.Errorf("%w: requester id is empty", ErrAcceptanceRequesterEmpty)
+	}
+	if domain == "" {
+		return fmt.Errorf("%w: requester domain is empty", ErrAcceptanceRequesterEmpty)
+	}
+	return nil
+}
+
 // CanonicalAcceptanceBytes returns the exact canonical byte sequence an agent's
 // offer acceptance covers: the accepted Offer.signature (which transitively binds
 // the offer's pricing, terms, expiry, and issuing Exchange), plus the requester
@@ -61,14 +86,18 @@ var ErrAcceptanceSignatureInvalid = errors.New("helpers: offer-acceptance signat
 // so it cannot carry the unknown fields CanonicalOfferBytes has to refuse; only the
 // values read off the offer and requester reach the signed bytes.
 //
-// Unpopulated fields are OMITTED before JCS — EVERY empty string field, not just the
-// domain: the bytes for an empty requester id are not the bytes for any populated
-// one. A port that assembles this object by hand instead of rendering the proto must
-// reproduce that omission per field, or it signs bytes this function never produces.
+// Unpopulated fields are OMITTED before JCS. Of the four, only the idempotency key
+// can reach the render empty, since the requester fields are refused first (below);
+// a port that assembles this object by hand instead of rendering the proto must
+// still reproduce that omission per field, or it signs bytes this function never
+// produces.
 //
 // Fails closed on a nil offer, a nil requester, or an unsigned offer (empty
 // Offer.signature) — an empty anchor would let the acceptance float free of any
-// concrete offer.
+// concrete offer. Fails closed, with ErrAcceptanceRequesterEmpty, on an empty
+// requester id or domain: an acceptance must name the requester it binds the
+// agent's consent to. Because signing and verifying both go through this function,
+// neither SignOfferAcceptance nor VerifyOfferAcceptance accepts such bytes.
 func CanonicalAcceptanceBytes(offer *forav1.Offer, requester *forav1.Requester, idempotencyKey string) ([]byte, error) {
 	if offer == nil {
 		return nil, errors.New("helpers: offer is nil")
@@ -79,6 +108,9 @@ func CanonicalAcceptanceBytes(offer *forav1.Offer, requester *forav1.Requester,
 	if offer.GetSignature() == "" {
 		return nil, errors.New("helpers: cannot accept an unsigned offer (empty offer signature)")
 	}
+	if err := checkAcceptanceRequester(requester.GetId(), requester.GetDomain()); err != nil {
+		return nil, err
+	}
 	payload := &forav1.AgentAcceptancePayload{
 		OfferSig:        offer.GetSignature(),
 		RequesterId:     requester.GetId(),
@@ -134,7 +166,9 @@ func SignOfferAcceptanceWith(ctx context.Context, signer Signer, offer *forav1.O
 
 // VerifyOfferAcceptance verifies signatureHex (an AgentAcceptance.signature)
 // against the canonical acceptance payload for the offer, using pub. It returns
-// ErrAcceptanceSignatureInvalid on any mismatch (wrong key or tampered binding).
+// ErrAcceptanceSignatureInvalid on any mismatch (wrong key or tampered binding),
+// and ErrAcceptanceRequesterEmpty when the requester id or domain is empty, even
+// if the signature over those bytes would verify.
 func VerifyOfferAcceptance(offer *forav1.Offer, requester *forav1.Requester, idempotencyKey, signatureHex string, pub ed25519.PublicKey) error {
 	if len(pub) != ed25519.PublicKeySize {
 		return fmt.Errorf("helpers: ed25519 public key must be %d bytes, got %d", ed25519.PublicKeySize, len(pub))
diff --git a/sdk/go/helpers/gen_request_acceptance_vectors_test.go b/sdk/go/helpers/gen_request_acceptance_vectors_test.go
index 5f1e4857..3f3e5148 100644
--- a/sdk/go/helpers/gen_request_acceptance_vectors_test.go
+++ b/sdk/go/helpers/gen_request_acceptance_vectors_test.go
@@ -4,6 +4,7 @@ import (
 	"crypto/ed25519"
 	"encoding/base64"
 	"encoding/hex"
+	"errors"
 	"os"
 	"path/filepath"
 	"testing"
@@ -45,10 +46,12 @@ func TestGenerateRequestAcceptanceVectors(t *testing.T) {
 			},
 			RequesterID: "agent-1", RequesterDomain: "agent.example", IdempotencyKey: "idem-1",
 		},
+		// The one field the canonical form can still omit; see the offer
+		// acceptance's empty_idempotency_key vector.
 		{
-			Name:        "empty_requester_domain",
-			Items:       []requestAcceptanceVectorItem{{OfferSig: "sig-z", Exchange: "one.example"}},
-			RequesterID: "agent-2", IdempotencyKey: "idem-2",
+			Name:        "empty_idempotency_key",
+			Items:       []requestAcceptanceVectorItem{{OfferSig: "sig-y", Exchange: "one.example"}},
+			RequesterID: "agent-3", RequesterDomain: "agent.example",
 		},
 	}
 	for i := range specs {
@@ -75,7 +78,11 @@ func TestGenerateRequestAcceptanceVectors(t *testing.T) {
 		v.PubkeyB64 = base64.StdEncoding.EncodeToString(pub)
 		v.SeedHex = acceptanceSeedHex
 	}
-	doc := map[string]any{"canonicalization": "jcs", "vectors": specs}
+	doc := map[string]any{
+		"canonicalization": "jcs",
+		"vectors":          specs,
+		"refused":          buildRefusedRequestAcceptanceVectors(t, priv),
+	}
 	path := filepath.Join("testdata", "request-acceptance-vectors.json")
 	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
 		writeJSON(t, path, doc)
@@ -83,3 +90,75 @@ func TestGenerateRequestAcceptanceVectors(t *testing.T) {
 	}
 	assertMatches(t, path, doc)
 }
+
+// refusedRequestAcceptanceVector is a request acceptance whose payload names an
+// empty requester. As for the offer acceptance, every SDK must refuse it at the
+// canonical-bytes function, the signer and the verifier. CanonicalJCS and
+// SignatureHex are rendered and signed below the refusal, so the verifier's
+// refusal is proven against a signature that verifies over those bytes. Empty
+// names the field left empty.
+type refusedRequestAcceptanceVector struct {
+	Name            string                        `json:"name"`
+	Empty           string                        `json:"empty"`
+	Items           []requestAcceptanceVectorItem `json:"items"`
+	RequesterID     string                        `json:"requester_id"`
+	RequesterDomain string                        `json:"requester_domain"`
+	IdempotencyKey  string                        `json:"idempotency_key"`
+	CanonicalJCS    string                        `json:"canonical_jcs"`
+	SignatureHex    string                        `json:"signature_hex"`
+	PubkeyB64       string                        `json:"pubkey_b64"`
+	SeedHex         string                        `json:"seed_hex"`
+}
+
+func buildRefusedRequestAcceptanceVectors(t *testing.T, priv ed25519.PrivateKey) []refusedRequestAcceptanceVector {
+	t.Helper()
+	pub := priv.Public().(ed25519.PublicKey)
+	specs := []refusedRequestAcceptanceVector{
+		{Name: "empty_requester_id", Empty: "requester_id",
+			Items:           []requestAcceptanceVectorItem{{OfferSig: "sig-x", Exchange: "one.example"}},
+			RequesterDomain: "agent.example", IdempotencyKey: "idem-4"},
+		{Name: "empty_requester_domain", Empty: "requester_domain",
+			Items:       []requestAcceptanceVectorItem{{OfferSig: "sig-z", Exchange: "one.example"}},
+			RequesterID: "agent-2", IdempotencyKey: "idem-2"},
+	}
+	for i := range specs {
+		v := &specs[i]
+		req := &forav1.TransactionRequest{
+			IdempotencyKey: v.IdempotencyKey,
+			Requester:      &forav1.Requester{Id: v.RequesterID, Domain: v.RequesterDomain},
+		}
+		payload := &forav1.AgentRequestAcceptancePayload{
+			RequesterId: v.RequesterID, RequesterDomain: v.RequesterDomain, IdempotencyKey: v.IdempotencyKey,
+		}
+		for _, item := range v.Items {
+			req.Items = append(req.Items, &forav1.TransactionItem{Offer: &forav1.Offer{
+				Signature: item.OfferSig, Exchange: item.Exchange,
+			}})
+			payload.Items = append(payload.Items, &forav1.AgentRequestAcceptanceItem{
+				OfferSig: item.OfferSig, Exchange: item.Exchange,
+			})
+		}
+		unchecked, err := canonicalSignPayload(payload)
+		if err != nil {
+			t.Fatalf("%s: unchecked render: %v", v.Name, err)
+		}
+		sig := ed25519.Sign(priv, unchecked)
+		if _, err := CanonicalRequestAcceptanceBytes(payload); !errors.Is(err, ErrAcceptanceRequesterEmpty) {
+			t.Fatalf("%s: CanonicalRequestAcceptanceBytes = %v, want ErrAcceptanceRequesterEmpty", v.Name, err)
+		}
+		if _, err := SignRequestAcceptance(priv, req); !errors.Is(err, ErrAcceptanceRequesterEmpty) {
+			t.Fatalf("%s: SignRequestAcceptance = %v, want ErrAcceptanceRequesterEmpty", v.Name, err)
+		}
+		acceptance := &forav1.AgentRequestAcceptance{
+			Payload: payload, Signature: hex.EncodeToString(sig), SignatureAlgorithm: AcceptanceSignatureAlgorithm,
+		}
+		if _, err := VerifyRequestAcceptance(req, acceptance, pub); !errors.Is(err, ErrAcceptanceRequesterEmpty) {
+			t.Fatalf("%s: VerifyRequestAcceptance = %v, want ErrAcceptanceRequesterEmpty", v.Name, err)
+		}
+		v.CanonicalJCS = string(unchecked)
+		v.SignatureHex = hex.EncodeToString(sig)
+		v.PubkeyB64 = base64.StdEncoding.EncodeToString(pub)
+		v.SeedHex = acceptanceSeedHex
+	}
+	return specs
+}
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index 63a5e250..b7118668 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -323,6 +323,27 @@ type acceptanceVector struct {
 	SeedHex      string `json:"seed_hex"`
 }
 
+// refusedAcceptanceVector is an acceptance whose canonical bytes would name an
+// empty requester. Every SDK must refuse it three ways: the canonical-bytes
+// function refuses to render it, the signer refuses to sign it, and the verifier
+// refuses it. CanonicalJCS and SignatureHex are what a signer WITHOUT that check
+// would produce — the omit-unpopulated render and a raw Ed25519 signature over
+// it — so the verifier's refusal is proven against a signature that does verify
+// over those bytes, not merely against a bad one. Empty names the field left
+// empty.
+type refusedAcceptanceVector struct {
+	Name            string `json:"name"`
+	Empty           string `json:"empty"`
+	OfferSig        string `json:"offer_sig"`
+	RequesterID     string `json:"requester_id"`
+	RequesterDomain string `json:"requester_domain"`
+	IdempotencyKey  string `json:"idempotency_key"`
+	CanonicalJCS    string `json:"canonical_jcs"`
+	SignatureHex    string `json:"signature_hex"`
+	PubkeyB64       string `json:"pubkey_b64"`
+	SeedHex         string `json:"seed_hex"`
+}
+
 // acceptanceSeedHex is the fixed seed shared with the app's committed
 // testdata/acceptance-vectors.json; its raw bytes are the
 // signer seed for every acceptance vector.
@@ -1245,18 +1266,16 @@ func buildAcceptanceVectors(t *testing.T) []acceptanceVector {
 		requesterDomain string
 		idempotencyKey  string
 	}
+	// An empty requester id or domain is no longer a signable acceptance: those
+	// cases moved to buildRefusedAcceptanceVectors, which every SDK must refuse.
 	specs := []spec{
 		{"all_present", "ex-offer-sig-hex", "agent-1", "agent.example.com", "idem-1"},
-		{"empty_domain", "sig2deadbeef", "agent-2", "", "idem-2"},
-		// Requester.id carries no min_len, so an empty id is wire-valid. The
-		// canonical form omits EVERY unpopulated field, not only the domain — this
-		// vector is what holds the hand-built Python/TS payloads to that, since
-		// they enumerate the keys instead of inheriting EmitUnpopulated=false.
-		{"empty_requester_id", "sig3deadbeef", "", "agent.example.com", "idem-3"},
-		// The last omittable field. TransactionRequest.idempotency_key carries
-		// min_len:1 so the wire rejects an empty one, but these accessors are the
-		// layer below that check and must still agree on the bytes — without this
-		// vector the omission guard can be dropped in any language with every gate
+		// The one field the canonical form can still omit.
+		// TransactionRequest.idempotency_key carries min_len:1 so the wire rejects
+		// an empty one, but these accessors are the layer below that check and must
+		// still agree on the bytes. The hand-built Python/TS payloads enumerate the
+		// keys instead of inheriting EmitUnpopulated=false, so without this vector
+		// the omission guard can be dropped in either language with every gate
 		// still green.
 		{"empty_idempotency_key", "sig4deadbeef", "agent-4", "agent.example.com", ""},
 	}
@@ -1292,6 +1311,54 @@ func buildAcceptanceVectors(t *testing.T) []acceptanceVector {
 	return out
 }
 
+// buildRefusedAcceptanceVectors records one acceptance per requester field left
+// empty, and checks the Go oracle refuses each with ErrAcceptanceRequesterEmpty at
+// all three entry points. The recorded bytes are rendered and signed BELOW the
+// refusal (canonicalSignPayload and a raw Ed25519 signature), so a port can prove
+// its verifier refuses them although the signature over them verifies.
+func buildRefusedAcceptanceVectors(t *testing.T) []refusedAcceptanceVector {
+	t.Helper()
+	seed, err := hex.DecodeString(acceptanceSeedHex)
+	if err != nil {
+		t.Fatalf("decode acceptance seed: %v", err)
+	}
+	priv := ed25519.NewKeyFromSeed(seed)
+	pub := priv.Public().(ed25519.PublicKey)
+	specs := []refusedAcceptanceVector{
+		{Name: "empty_requester_id", Empty: "requester_id", OfferSig: "sig3deadbeef",
+			RequesterDomain: "agent.example.com", IdempotencyKey: "idem-3"},
+		{Name: "empty_requester_domain", Empty: "requester_domain", OfferSig: "sig2deadbeef",
+			RequesterID: "agent-2", IdempotencyKey: "idem-2"},
+	}
+	for i := range specs {
+		v := &specs[i]
+		offer := &forav1.Offer{Signature: v.OfferSig}
+		requester := &forav1.Requester{Id: v.RequesterID, Domain: v.RequesterDomain}
+		unchecked, err := canonicalSignPayload(&forav1.AgentAcceptancePayload{
+			OfferSig: v.OfferSig, RequesterId: v.RequesterID,
+			RequesterDomain: v.RequesterDomain, IdempotencyKey: v.IdempotencyKey,
+		})
+		if err != nil {
+			t.Fatalf("%s: unchecked render: %v", v.Name, err)
+		}
+		sig := ed25519.Sign(priv, unchecked)
+		if _, err := CanonicalAcceptanceBytes(offer, requester, v.IdempotencyKey); !errors.Is(err, ErrAcceptanceRequesterEmpty) {
+			t.Fatalf("%s: CanonicalAcceptanceBytes = %v, want ErrAcceptanceRequesterEmpty", v.Name, err)
+		}
+		if _, err := SignOfferAcceptance(priv, offer, requester, v.IdempotencyKey); !errors.Is(err, ErrAcceptanceRequesterEmpty) {
+			t.Fatalf("%s: SignOfferAcceptance = %v, want ErrAcceptanceRequesterEmpty", v.Name, err)
+		}
+		if err := VerifyOfferAcceptance(offer, requester, v.IdempotencyKey, hex.EncodeToString(sig), pub); !errors.Is(err, ErrAcceptanceRequesterEmpty) {
+			t.Fatalf("%s: VerifyOfferAcceptance = %v, want ErrAcceptanceRequesterEmpty", v.Name, err)
+		}
+		v.CanonicalJCS = string(unchecked)
+		v.SignatureHex = hex.EncodeToString(sig)
+		v.PubkeyB64 = base64.StdEncoding.EncodeToString(pub)
+		v.SeedHex = acceptanceSeedHex
+	}
+	return specs
+}
+
 // verifySignedURLVector runs the vector through the real Go verifier so the
 // recorded verdict is exactly what the oracle returns (self-consistency guard).
 func verifySignedURLVector(t *testing.T, v signedURLVector) {
@@ -1343,6 +1410,7 @@ func TestGenerateVectors(t *testing.T) {
 		verifyNegVectorReason(t, v)
 	}
 	acceptanceVectors := buildAcceptanceVectors(t)
+	refusedAcceptanceVectors := buildRefusedAcceptanceVectors(t)
 	offerVerifyVectors := buildOfferVerifyVectors(t)
 	wireCanonicalVectors := buildWireCanonicalVectors(t)
 
@@ -1360,7 +1428,11 @@ func TestGenerateVectors(t *testing.T) {
 	// ("jcs") so a reader cannot confuse them with the old proto-binary form.
 	signRequestDoc := map[string]any{"vectors": signRequestVectors}
 	verifyNegDoc := map[string]any{"vectors": verifyRequestNegVectors}
-	acceptanceDoc := map[string]any{"canonicalization": "jcs", "vectors": acceptanceVectors}
+	acceptanceDoc := map[string]any{
+		"canonicalization": "jcs",
+		"vectors":          acceptanceVectors,
+		"refused":          refusedAcceptanceVectors,
+	}
 	offerVerifyDocValue := offerVerifyDoc{Canonicalization: "jcs", Vectors: offerVerifyVectors}
 	wireCanonicalDoc := map[string]any{"canonicalization": "jcs", "vectors": wireCanonicalVectors}
 
diff --git a/sdk/go/helpers/request_acceptance.go b/sdk/go/helpers/request_acceptance.go
index a4b15d84..1c2ace86 100644
--- a/sdk/go/helpers/request_acceptance.go
+++ b/sdk/go/helpers/request_acceptance.go
@@ -30,6 +30,9 @@ func RequestAcceptancePayload(req *forav1.TransactionRequest) (*forav1.AgentRequ
 	if req.GetRequester() == nil {
 		return nil, errors.New("helpers: requester is nil")
 	}
+	if err := checkAcceptanceRequester(req.GetRequester().GetId(), req.GetRequester().GetDomain()); err != nil {
+		return nil, err
+	}
 	if len(req.GetItems()) == 0 {
 		return nil, errors.New("helpers: transaction request has no items")
 	}
@@ -59,11 +62,16 @@ func RequestAcceptancePayload(req *forav1.TransactionRequest) (*forav1.AgentRequ
 }
 
 // CanonicalRequestAcceptanceBytes returns the exact JCS(protojson(...)) bytes
-// covered by an AgentRequestAcceptance signature.
+// covered by an AgentRequestAcceptance signature. Like the offer acceptance, it
+// refuses a payload that names an empty requester (ErrAcceptanceRequesterEmpty),
+// so neither signing nor verification accepts such bytes.
 func CanonicalRequestAcceptanceBytes(payload *forav1.AgentRequestAcceptancePayload) ([]byte, error) {
 	if payload == nil {
 		return nil, errors.New("helpers: request-acceptance payload is nil")
 	}
+	if err := checkAcceptanceRequester(payload.GetRequesterId(), payload.GetRequesterDomain()); err != nil {
+		return nil, err
+	}
 	if len(payload.GetItems()) == 0 {
 		return nil, errors.New("helpers: request-acceptance payload has no items")
 	}
diff --git a/sdk/go/helpers/testdata/acceptance-vectors.json b/sdk/go/helpers/testdata/acceptance-vectors.json
index f4b5655c..1954d538 100644
--- a/sdk/go/helpers/testdata/acceptance-vectors.json
+++ b/sdk/go/helpers/testdata/acceptance-vectors.json
@@ -1,19 +1,21 @@
 {
   "canonicalization": "jcs",
-  "vectors": [
+  "refused": [
     {
-      "name": "all_present",
-      "offer_sig": "ex-offer-sig-hex",
-      "requester_id": "agent-1",
+      "name": "empty_requester_id",
+      "empty": "requester_id",
+      "offer_sig": "sig3deadbeef",
+      "requester_id": "",
       "requester_domain": "agent.example.com",
-      "idempotency_key": "idem-1",
-      "canonical_jcs": "{\"idempotency_key\":\"idem-1\",\"offer_sig\":\"ex-offer-sig-hex\",\"requester_domain\":\"agent.example.com\",\"requester_id\":\"agent-1\"}",
-      "signature_hex": "20b2587e813a166caa023d3f9ad7307b3c26e4f2d6a038568d750b9d09d7b8b6d5e195265ca96e8bd1e280140a397e8e028aa97043df2f021d1a037a429c4306",
+      "idempotency_key": "idem-3",
+      "canonical_jcs": "{\"idempotency_key\":\"idem-3\",\"offer_sig\":\"sig3deadbeef\",\"requester_domain\":\"agent.example.com\"}",
+      "signature_hex": "5e9baefd90faae7edc44c8bcd3c6aec68fc3d9c253a6791ab83d6dcb6d638310053b5cb3607f19618cff96e5fc002a7d93d600ce16ba77019c73a2b7c50d1c01",
       "pubkey_b64": "ebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmQ=",
       "seed_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20"
     },
     {
-      "name": "empty_domain",
+      "name": "empty_requester_domain",
+      "empty": "requester_domain",
       "offer_sig": "sig2deadbeef",
       "requester_id": "agent-2",
       "requester_domain": "",
@@ -22,15 +24,17 @@
       "signature_hex": "a067c7d83dcf801f10389a5b2e2936756aae37006478b1eae5dbf70805fdf2feb0292e3ae3b5511a3921f4fe331c52bfc19894f25332f0b2ba2d741db0769506",
       "pubkey_b64": "ebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmQ=",
       "seed_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20"
-    },
+    }
+  ],
+  "vectors": [
     {
-      "name": "empty_requester_id",
-      "offer_sig": "sig3deadbeef",
-      "requester_id": "",
+      "name": "all_present",
+      "offer_sig": "ex-offer-sig-hex",
+      "requester_id": "agent-1",
       "requester_domain": "agent.example.com",
-      "idempotency_key": "idem-3",
-      "canonical_jcs": "{\"idempotency_key\":\"idem-3\",\"offer_sig\":\"sig3deadbeef\",\"requester_domain\":\"agent.example.com\"}",
-      "signature_hex": "5e9baefd90faae7edc44c8bcd3c6aec68fc3d9c253a6791ab83d6dcb6d638310053b5cb3607f19618cff96e5fc002a7d93d600ce16ba77019c73a2b7c50d1c01",
+      "idempotency_key": "idem-1",
+      "canonical_jcs": "{\"idempotency_key\":\"idem-1\",\"offer_sig\":\"ex-offer-sig-hex\",\"requester_domain\":\"agent.example.com\",\"requester_id\":\"agent-1\"}",
+      "signature_hex": "20b2587e813a166caa023d3f9ad7307b3c26e4f2d6a038568d750b9d09d7b8b6d5e195265ca96e8bd1e280140a397e8e028aa97043df2f021d1a037a429c4306",
       "pubkey_b64": "ebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmQ=",
       "seed_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20"
     },
diff --git a/sdk/go/helpers/testdata/request-acceptance-vectors.json b/sdk/go/helpers/testdata/request-acceptance-vectors.json
index 4051e12f..e8599b17 100644
--- a/sdk/go/helpers/testdata/request-acceptance-vectors.json
+++ b/sdk/go/helpers/testdata/request-acceptance-vectors.json
@@ -1,5 +1,41 @@
 {
   "canonicalization": "jcs",
+  "refused": [
+    {
+      "name": "empty_requester_id",
+      "empty": "requester_id",
+      "items": [
+        {
+          "offer_sig": "sig-x",
+          "exchange": "one.example"
+        }
+      ],
+      "requester_id": "",
+      "requester_domain": "agent.example",
+      "idempotency_key": "idem-4",
+      "canonical_jcs": "{\"idempotency_key\":\"idem-4\",\"items\":[{\"exchange\":\"one.example\",\"offer_sig\":\"sig-x\"}],\"requester_domain\":\"agent.example\"}",
+      "signature_hex": "934241520ac7de830fefd7ee3a8d07a14ff648f3a7e5fc0dc269857e67490456f5569ed5ed0d0965c1e7537d55a5f82f618e68cdd9b0778860ec3e1f6a809f04",
+      "pubkey_b64": "ebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmQ=",
+      "seed_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20"
+    },
+    {
+      "name": "empty_requester_domain",
+      "empty": "requester_domain",
+      "items": [
+        {
+          "offer_sig": "sig-z",
+          "exchange": "one.example"
+        }
+      ],
+      "requester_id": "agent-2",
+      "requester_domain": "",
+      "idempotency_key": "idem-2",
+      "canonical_jcs": "{\"idempotency_key\":\"idem-2\",\"items\":[{\"exchange\":\"one.example\",\"offer_sig\":\"sig-z\"}],\"requester_id\":\"agent-2\"}",
+      "signature_hex": "76bf03cc025b6a32e8da0868aa53f769cf301b5c04a7ae1d57d37fbe1adb41e6a4c09e6d4faf8c816ac1fe9805635c92184035b672f300cec43f9695ef6b990c",
+      "pubkey_b64": "ebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmQ=",
+      "seed_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20"
+    }
+  ],
   "vectors": [
     {
       "name": "mixed_exchange_order",
@@ -26,18 +62,18 @@
       "seed_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20"
     },
     {
-      "name": "empty_requester_domain",
+      "name": "empty_idempotency_key",
       "items": [
         {
-          "offer_sig": "sig-z",
+          "offer_sig": "sig-y",
           "exchange": "one.example"
         }
       ],
-      "requester_id": "agent-2",
-      "requester_domain": "",
-      "idempotency_key": "idem-2",
-      "canonical_jcs": "{\"idempotency_key\":\"idem-2\",\"items\":[{\"exchange\":\"one.example\",\"offer_sig\":\"sig-z\"}],\"requester_id\":\"agent-2\"}",
-      "signature_hex": "76bf03cc025b6a32e8da0868aa53f769cf301b5c04a7ae1d57d37fbe1adb41e6a4c09e6d4faf8c816ac1fe9805635c92184035b672f300cec43f9695ef6b990c",
+      "requester_id": "agent-3",
+      "requester_domain": "agent.example",
+      "idempotency_key": "",
+      "canonical_jcs": "{\"items\":[{\"exchange\":\"one.example\",\"offer_sig\":\"sig-y\"}],\"requester_domain\":\"agent.example\",\"requester_id\":\"agent-3\"}",
+      "signature_hex": "e36cd6f63770f3ec0e417e3684e0d5441bfb6a376da755fdb4b3d5b8a24185fde73f0f988748fe319ae738b71871951e3fc8309628786c41df24f7bf730b1704",
       "pubkey_b64": "ebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmQ=",
       "seed_hex": "0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20"
     }

From cf5314acf50aa13531fcdaf4020a93d382e10fdc Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:51:25 -0400
Subject: [PATCH 056/164] Refuse an acceptance that names no requester in the
 Python SDK

jcs_acceptance_payload and jcs_request_acceptance_payload raise
ValueError on an empty requester_id or requester_domain, so the
signers raise too, verify_offer_acceptance_jcs raises as it already
does for an empty offer signature, and verify_request_acceptance_jcs
returns False.

The purchase verbs, execute and the Broker's execute, refuse a
configured requester with an empty id or domain as MALFORMED before
signing or sending.

The parity tests replay the oracle's refused vectors: each one's
recorded signature is shown to verify over its bytes, and the
canonicalizer, the signer and the verifier still refuse it. The client
tests cover both missing fields on both faces, direct and through a
Broker.
---
 sdk/python/fora_sdk/client/_verbs.py          | 27 ++++++--
 sdk/python/fora_sdk/core.py                   | 67 ++++++++++++++-----
 sdk/python/tests/test_acceptance_jcs_repin.py | 45 +++++++++++++
 sdk/python/tests/test_broker_execute.py       | 13 ++++
 sdk/python/tests/test_client.py               | 16 +++++
 .../tests/test_request_acceptance_jcs.py      | 36 ++++++++++
 6 files changed, 185 insertions(+), 19 deletions(-)

diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index ac5072ab..bf562424 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -444,16 +444,18 @@ def plan_broker_execute(
     re-packages it into one sub-request per Exchange, signed with its own key, carrying the
     agent's acceptances unchanged.
 
-    Refused here, with nothing sent: no requester, no signer, no offers, an unsigned offer,
-    an offer that names no exchange, and a ``requester.domain`` that is not the host of the
-    directory the signer signs as. The last mirrors the Broker's own check, which it refuses
-    with ``request_auth_failure`` SIGNATURE_INVALID.
+    Refused here, with nothing sent: no requester, or one with an empty ``id`` or
+    ``domain``, no signer, no offers, an unsigned offer, an offer that names no exchange,
+    and a ``requester.domain`` that is not the host of the directory the signer signs as.
+    The last mirrors the Broker's own check, which it refuses with ``request_auth_failure``
+    SIGNATURE_INVALID.
     """
     op = "broker execute"
     if isinstance(offers, RawBody):
         return _plan(cfg, _Route(op, cfg.base_url, BROKER_SERVICE, "ExecuteTransaction"), offers)
     if cfg.requester is None:
         raise malformed(op, "no requester configured; a Broker resolves who is buying")
+    _require_named_requester(op, cfg.requester)
     offers = list(offers)
     for i, item in enumerate(offers):
         if _str_field(_offer_wire(item), "exchange") == "":
@@ -500,6 +502,7 @@ def _build_transaction(
     """
     if cfg.requester is None:
         raise malformed(op, "no requester configured; the party that sells resolves who is buying")
+    _require_named_requester(op, cfg.requester)
     if cfg.signer is None:
         # NOT_SIGNABLE, matching what fetch answers for the same missing holder: a caller
         # branching on the kind sees one condition under one class, whichever verb met it
@@ -584,6 +587,22 @@ def _build_transaction(
     return sent
 
 
+def _require_named_requester(op: str, requester: dict[str, Any]) -> None:
+    """Refuse a requester with an empty ``id`` or ``domain`` as MALFORMED.
+
+    Every acceptance a purchase carries names the requester, and the protocol requires both
+    fields, so the signer would refuse anyway; refusing here reports the configuration
+    fault as MALFORMED rather than as a custody failure (NOT_SIGNABLE).
+    """
+    for key in ("id", "domain"):
+        if _str_field(requester, key) == "":
+            raise malformed(
+                op,
+                f"requester.{key} is empty; a purchase's acceptances name the requester, and "
+                "both requester.id and requester.domain are required",
+            )
+
+
 def _require_one_exchange(op: str, offers: list[VerifiedOffer]) -> None:
     """Refuse a direct purchase whose offers were issued by more than one Exchange."""
     if not offers:
diff --git a/sdk/python/fora_sdk/core.py b/sdk/python/fora_sdk/core.py
index e6cddfa6..6bd68fb3 100644
--- a/sdk/python/fora_sdk/core.py
+++ b/sdk/python/fora_sdk/core.py
@@ -390,6 +390,22 @@ def _expired(self, offer: dict[str, Any]) -> bool:
 # ---------------------------------------------------------------------------
 
 
+def _require_named_requester(requester_id: str, requester_domain: str) -> None:
+    """Refuse an acceptance whose canonical bytes would name an empty requester.
+
+    ``Requester.id`` and ``Requester.domain`` are both REQUIRED, and an acceptance binds the
+    agent's consent to the requester its bytes name, so bytes naming an empty one bind it
+    to nobody. On a purchase a Broker relays, the acceptance is the only agent signature the
+    Exchange sees, and the Exchange resolves the verification key from the requester
+    domain. Both acceptances (offer and request) run this before rendering, so neither
+    signing nor verifying accepts such bytes (mirror Go ``ErrAcceptanceRequesterEmpty``).
+    """
+    if requester_id == "":
+        raise ValueError("acceptance names an empty requester: requester_id is empty")
+    if requester_domain == "":
+        raise ValueError("acceptance names an empty requester: requester_domain is empty")
+
+
 def jcs_acceptance_payload(
     *,
     offer_sig: str,
@@ -400,20 +416,23 @@ def jcs_acceptance_payload(
     """Canonical acceptance bytes = JCS(protojson(AgentAcceptancePayload)).
 
     The same JCS(protojson(...)) canonicalization the offer signature uses. proto-JSON
-    OMITS unpopulated fields, so EVERY empty string field is absent from the object
-    before JCS — not just ``requester_domain``. The Go oracle gets that structurally
-    from ``EmitUnpopulated=false``; this object is hand-built, so the omission is
-    applied once over the whole record rather than per key. A per-key guard is how the
-    rule went missing for ``requester_id`` — wire-valid, since ``Requester.id`` carries
-    no ``min_len`` — which signed bytes Go never produces. The filter tests for the
-    empty STRING, which covers every member ``AgentAcceptancePayload`` has (the field-set
-    guard in the Go suite pins that list), so a string field added to the message cannot
-    arrive without its omission. A non-string field would need its own zero-value test.
-    Fail-closed on an empty ``offer_sig`` (mirror Go CanonicalAcceptanceBytes): an
-    empty anchor would let the acceptance float free of any concrete offer.
+    OMITS unpopulated fields, so every empty string field is absent from the object
+    before JCS. The Go oracle gets that structurally from ``EmitUnpopulated=false``; this
+    object is hand-built, so the omission is applied once over the whole record rather
+    than per key. Only ``idempotency_key`` can still reach it empty, because the
+    requester fields are refused first, but the filter tests for the empty STRING, which
+    covers every member ``AgentAcceptancePayload`` has (the field-set guard in the Go
+    suite pins that list), so a string field added to the message cannot arrive without
+    its omission. A non-string field would need its own zero-value test.
+
+    Fail-closed, with ``ValueError``, on an empty ``offer_sig`` (mirror Go
+    CanonicalAcceptanceBytes): an empty anchor would let the acceptance float free of any
+    concrete offer. Fail-closed the same way on an empty ``requester_id`` or
+    ``requester_domain``: an acceptance must name the requester it binds.
     """
     if offer_sig == "":
         raise ValueError("cannot accept an unsigned offer (empty offer signature)")
+    _require_named_requester(requester_id, requester_domain)
     payload: dict[str, str] = {
         "offer_sig": offer_sig,
         "requester_id": requester_id,
@@ -446,7 +465,11 @@ def sign_offer_acceptance_jcs(
     requester_domain: str,
     idempotency_key: str,
 ) -> tuple[str, str]:
-    """Sign the JCS acceptance payload; return ``(hex_signature, "EdDSA")``."""
+    """Sign the JCS acceptance payload; return ``(hex_signature, "EdDSA")``.
+
+    Raises ``ValueError``, signing nothing, on an empty offer signature or an empty
+    requester id or domain.
+    """
     payload = jcs_acceptance_payload(
         offer_sig=offer_sig,
         requester_id=requester_id,
@@ -466,7 +489,12 @@ def verify_offer_acceptance_jcs(
     requester_domain: str,
     idempotency_key: str,
 ) -> bool:
-    """Verify a hex acceptance signature over the JCS payload with a std-base64 key."""
+    """Verify a hex acceptance signature over the JCS payload with a std-base64 key.
+
+    Raises ``ValueError`` when the payload names an empty requester (or an empty offer
+    signature), even if the signature over those bytes would verify: such bytes are
+    refused, never accepted.
+    """
     payload = jcs_acceptance_payload(
         offer_sig=offer_sig,
         requester_id=requester_id,
@@ -490,7 +518,12 @@ def jcs_request_acceptance_payload(
     requester_domain: str,
     idempotency_key: str,
 ) -> bytes:
-    """Canonical bytes for the complete ordered execute-set acceptance."""
+    """Canonical bytes for the complete ordered execute-set acceptance.
+
+    Raises ``ValueError`` on no items, an item with an empty offer signature or exchange,
+    and an empty ``requester_id`` or ``requester_domain`` (see the offer acceptance).
+    """
+    _require_named_requester(requester_id, requester_domain)
     if not items:
         raise ValueError("request acceptance requires at least one item")
     refs: list[dict[str, str]] = []
@@ -539,7 +572,11 @@ def verify_request_acceptance_jcs(
     requester_domain: str,
     idempotency_key: str,
 ) -> bool:
-    """Verify a complete ordered request-set acceptance."""
+    """Verify a complete ordered request-set acceptance.
+
+    Returns ``False`` for a payload the canonical form refuses, including one that names an
+    empty requester, even if the signature over those bytes would verify.
+    """
     try:
         payload = jcs_request_acceptance_payload(
             items=items,
diff --git a/sdk/python/tests/test_acceptance_jcs_repin.py b/sdk/python/tests/test_acceptance_jcs_repin.py
index 6dae3e9d..c89534b4 100644
--- a/sdk/python/tests/test_acceptance_jcs_repin.py
+++ b/sdk/python/tests/test_acceptance_jcs_repin.py
@@ -32,7 +32,10 @@
 
 from __future__ import annotations
 
+import base64
+
 import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
 
 from conftest import GO_TESTDATA, load_json
 
@@ -101,3 +104,45 @@ def test_acceptance_verify_accepts_regenerated_signature(vector: dict[str, objec
         idempotency_key=str(vector["idempotency_key"]),
     )
     assert ok is True
+
+
+# An acceptance must name its requester: Requester.id and Requester.domain are both
+# REQUIRED. The oracle records one acceptance per requester field left empty, with the
+# canonical bytes and the raw signature a signer WITHOUT that check would produce. All
+# three faces refuse it: the canonicalizer and the signer raise, and the verifier raises
+# too, although the recorded signature does verify over the recorded bytes.
+_REFUSED = _DOC["refused"]
+
+
+def test_refused_acceptance_vectors_cover_each_requester_field() -> None:
+    assert sorted(str(v["empty"]) for v in _REFUSED) == ["requester_domain", "requester_id"]
+
+
+def _refused_fields(vector: dict[str, object]) -> dict[str, str]:
+    assert vector[str(vector["empty"])] == ""
+    return {
+        "offer_sig": str(vector["offer_sig"]),
+        "requester_id": str(vector["requester_id"]),
+        "requester_domain": str(vector["requester_domain"]),
+        "idempotency_key": str(vector["idempotency_key"]),
+    }
+
+
+@pytest.mark.parametrize("vector", _REFUSED, ids=[v["name"] for v in _REFUSED])
+def test_acceptance_naming_an_empty_requester_is_refused(vector: dict[str, object]) -> None:
+    fields = _refused_fields(vector)
+    # The recorded signature is genuine over the recorded bytes, so the refusals below
+    # are about the empty requester, not about a bad signature.
+    Ed25519PublicKey.from_public_bytes(base64.b64decode(str(vector["pubkey_b64"]))).verify(
+        bytes.fromhex(str(vector["signature_hex"])), str(vector["canonical_jcs"]).encode()
+    )
+    with pytest.raises(ValueError, match="empty requester"):
+        jcs_acceptance_payload(**fields)
+    with pytest.raises(ValueError, match="empty requester"):
+        sign_offer_acceptance_jcs(seed=bytes.fromhex(str(vector["seed_hex"])), **fields)
+    with pytest.raises(ValueError, match="empty requester"):
+        verify_offer_acceptance_jcs(
+            pubkey_b64=str(vector["pubkey_b64"]),
+            signature_hex=str(vector["signature_hex"]),
+            **fields,
+        )
diff --git a/sdk/python/tests/test_broker_execute.py b/sdk/python/tests/test_broker_execute.py
index 5936eaaa..61fe0489 100644
--- a/sdk/python/tests/test_broker_execute.py
+++ b/sdk/python/tests/test_broker_execute.py
@@ -207,6 +207,19 @@ def _unaddressed() -> Any:
         CallErrorKind.MALFORMED,
     ),
     ("no requester", {"requester": None}, "offers", CallErrorKind.MALFORMED),
+    # Every acceptance names the requester, so a requester missing either half cannot buy.
+    (
+        "requester with no id",
+        {"requester": {**REQUESTER, "id": ""}},
+        "offers",
+        CallErrorKind.MALFORMED,
+    ),
+    (
+        "requester with no domain",
+        {"requester": {**REQUESTER, "domain": ""}},
+        "offers",
+        CallErrorKind.MALFORMED,
+    ),
     ("no signer", {"signer": None}, "offers", CallErrorKind.NOT_SIGNABLE),
     ("no offers", {}, "none", CallErrorKind.MALFORMED),
     ("offer names no exchange", {"validation": "off"}, "unaddressed", CallErrorKind.MALFORMED),
diff --git a/sdk/python/tests/test_client.py b/sdk/python/tests/test_client.py
index da6e0ed4..fc022421 100644
--- a/sdk/python/tests/test_client.py
+++ b/sdk/python/tests/test_client.py
@@ -514,6 +514,22 @@ def test_execute_refuses_an_unsigned_offer_that_verification_off_can_surface(fac
     assert excinfo.value.kind is CallErrorKind.MALFORMED
 
 
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize("field", ["id", "domain"])
+def test_execute_refuses_a_requester_missing_either_half(face: Face, field: str) -> None:
+    # Every acceptance names the requester, and Requester.id and Requester.domain are both
+    # required, so the client refuses before signing or sending anything.
+    offer, public = _signed_offer()
+    rec = Recorder({})
+    client = face.client(_config(requester={**REQUESTER, field: ""}), rec)
+
+    with pytest.raises(CallError) as excinfo:
+        face.run(client.execute(_verified(public, offer)))
+    assert excinfo.value.kind is CallErrorKind.MALFORMED
+    assert f"requester.{field} is empty" in str(excinfo.value)
+    assert rec.seen == []
+
+
 # ---------------------------------------------------------------------------
 # the offer-derived leg
 # ---------------------------------------------------------------------------
diff --git a/sdk/python/tests/test_request_acceptance_jcs.py b/sdk/python/tests/test_request_acceptance_jcs.py
index 8834d810..75b14781 100644
--- a/sdk/python/tests/test_request_acceptance_jcs.py
+++ b/sdk/python/tests/test_request_acceptance_jcs.py
@@ -52,3 +52,39 @@ def test_request_acceptance_order_is_signed() -> None:
         requester_domain=str(vector["requester_domain"]),
         idempotency_key=str(vector["idempotency_key"]),
     )
+
+
+# The request acceptance names the requester under the same rule as the offer
+# acceptance. The oracle records one payload per requester field left empty, with the
+# bytes and raw signature a signer without the check would produce; the canonicalizer and
+# the signer raise, and the verifier answers False although that signature verifies.
+_REFUSED = _DOC["refused"]
+
+
+def test_refused_request_acceptance_vectors_cover_each_requester_field() -> None:
+    assert sorted(str(v["empty"]) for v in _REFUSED) == ["requester_domain", "requester_id"]
+
+
+@pytest.mark.parametrize("vector", _REFUSED, ids=[v["name"] for v in _REFUSED])
+def test_request_acceptance_naming_an_empty_requester_is_refused(
+    vector: dict[str, object],
+) -> None:
+    assert vector[str(vector["empty"])] == ""
+    kwargs = {
+        "items": [
+            (str(item["offer_sig"]), str(item["exchange"]))
+            for item in vector["items"]  # type: ignore[union-attr]
+        ],
+        "requester_id": str(vector["requester_id"]),
+        "requester_domain": str(vector["requester_domain"]),
+        "idempotency_key": str(vector["idempotency_key"]),
+    }
+    with pytest.raises(ValueError, match="empty requester"):
+        jcs_request_acceptance_payload(**kwargs)
+    with pytest.raises(ValueError, match="empty requester"):
+        sign_request_acceptance_jcs(seed=bytes.fromhex(str(vector["seed_hex"])), **kwargs)
+    assert not verify_request_acceptance_jcs(
+        pubkey_b64=str(vector["pubkey_b64"]),
+        signature_hex=str(vector["signature_hex"]),
+        **kwargs,
+    )

From 42d540e3354c9a3d2860ca1cddac0451641b3124 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:51:25 -0400
Subject: [PATCH 057/164] Refuse an acceptance that names no requester in the
 TypeScript SDK

acceptancePayload and requestAcceptancePayload throw on an empty
requesterId or requesterDomain, so the signers reject, and
verifyOfferAcceptance and verifyRequestAcceptance return false.

The purchase verbs, execute and BrokerClient.execute, refuse a
configured requester with an empty id or domain as malformed before
signing or sending.

The parity tests replay the oracle's refused vectors: each one's
recorded signature is shown to verify over its bytes, and the
canonicalizer, the signer and the verifier still refuse it. The client
tests cover both missing fields, direct and through a Broker.
---
 sdk/ts/client/index.ts                        | 29 +++++++++-
 sdk/ts/src/acceptance.ts                      | 56 +++++++++++++------
 sdk/ts/tests/acceptance.parity.test.ts        | 42 +++++++++++++-
 sdk/ts/tests/broker-execute.test.ts           | 12 ++++
 sdk/ts/tests/client.test.ts                   | 20 +++++++
 .../tests/request-acceptance.parity.test.ts   | 37 ++++++++++++
 6 files changed, 176 insertions(+), 20 deletions(-)

diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index 26dac23d..b438ff74 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -462,9 +462,10 @@ async function execute(
  * idempotency key unchanged to every Exchange, so a retry with the same key is answered
  * from each Exchange's stored result.
  *
- * Refused locally, with nothing sent: no requester, no offers, an unsigned offer, an
- * offer that names no exchange, and a requester.domain that is not the host of the
- * directory this client signs as (all malformed); no signer (not_signable). The last
+ * Refused locally, with nothing sent: no requester, or one with an empty id or domain, no
+ * offers, an unsigned offer, an offer that names no exchange, and a requester.domain that
+ * is not the host of the directory this client signs as (all malformed); no signer
+ * (not_signable). The last
  * mirrors the Broker's own check, which it refuses with request_auth_failure
  * SIGNATURE_INVALID.
  *
@@ -491,6 +492,7 @@ async function brokerExecute(
 		);
 	}
 	requireRoutable(op, offers);
+	requireNamedRequester(op, r.opts.requester);
 	requireRequesterIsSigner(op, r.opts.requester, r.opts.signatureAgent ?? "");
 	const request = await buildTransaction(r, op, offers, opts);
 	validateRequest(op, request, TransactionRequestSchema, r.opts.validation ?? "strict");
@@ -544,6 +546,7 @@ async function buildTransaction(
 			new Error("no requester configured; an Exchange resolves who is buying from it"),
 		);
 	}
+	requireNamedRequester(op, r.opts.requester);
 	if (r.opts.signer === undefined) {
 		// not_signable, matching what fetch answers for the same missing holder: a caller
 		// branching on the kind sees one condition under one class, whichever verb met it
@@ -674,6 +677,26 @@ function requireRoutable(op: string, offers: readonly VerifiedOffer[]): void {
 	});
 }
 
+/**
+ * requireNamedRequester refuses a requester with an empty id or an empty domain as
+ * malformed. Every acceptance a purchase carries names the requester, and the protocol
+ * requires both fields, so the signer would refuse anyway; refusing here reports the
+ * configuration fault as malformed rather than as a custody failure (not_signable).
+ */
+function requireNamedRequester(op: string, requester: Record<string, unknown>): void {
+	for (const key of ["id", "domain"] as const) {
+		if (stringField(requester, key) === "") {
+			throw malformed(
+				op,
+				new Error(
+					`requester.${key} is empty; a purchase's acceptances name the requester, ` +
+						"and both requester.id and requester.domain are required",
+				),
+			);
+		}
+	}
+}
+
 /**
  * requireRequesterIsSigner refuses a request whose requester.domain is not the host of the
  * WBA directory this client signs as. A Broker verifies the agent's signature against the
diff --git a/sdk/ts/src/acceptance.ts b/sdk/ts/src/acceptance.ts
index 60efb182..824af2a8 100644
--- a/sdk/ts/src/acceptance.ts
+++ b/sdk/ts/src/acceptance.ts
@@ -25,11 +25,11 @@ import { utf8Bytes } from "./base64url.ts";
  * (mirror helpers.AcceptanceSignatureAlgorithm). */
 export const ACCEPTANCE_SIGNATURE_ALGORITHM = "EdDSA";
 
-/** The acceptance binding fields. EVERY empty field is omitted from the canonical
- * payload, not only requesterDomain (proto omit-unpopulated) — so an empty value and
- * an absent one sign the same bytes, and neither signs the bytes of a populated one.
- * An empty offerSig is rejected fail-closed — an empty anchor would let the
- * acceptance float free of any concrete offer. */
+/** The acceptance binding fields. requesterId and requesterDomain are both required:
+ * an acceptance names the requester it binds the agent's consent to, so an empty one is
+ * refused (see requireNamedRequester). An empty offerSig is refused too — an empty anchor
+ * would let the acceptance float free of any concrete offer. An empty idempotencyKey is
+ * omitted from the canonical payload (proto omit-unpopulated). */
 export interface AcceptanceInput {
 	offerSig: string;
 	requesterId: string;
@@ -62,11 +62,31 @@ function bytesToHex(bytes: Uint8Array): string {
 	return hex;
 }
 
+/**
+ * requireNamedRequester refuses an acceptance whose canonical bytes would name an empty
+ * requester. Requester.id and Requester.domain are both REQUIRED, and bytes naming an
+ * empty requester bind the agent's consent to nobody. On a purchase a Broker relays, the
+ * acceptance is the only agent signature the Exchange sees, and the Exchange resolves the
+ * verification key from the requester domain. Both acceptances (offer and request) run
+ * this before rendering, so neither signing nor verifying accepts such bytes (mirror Go
+ * ErrAcceptanceRequesterEmpty / Python ValueError).
+ */
+function requireNamedRequester(requesterId: string, requesterDomain: string): void {
+	if (requesterId === "") {
+		throw new Error("fora/acceptance: acceptance names an empty requester: requesterId is empty");
+	}
+	if (requesterDomain === "") {
+		throw new Error(
+			"fora/acceptance: acceptance names an empty requester: requesterDomain is empty",
+		);
+	}
+}
+
 /**
  * acceptancePayload reproduces the canonical signed bytes:
- * JCS(protojson(AgentAcceptancePayload)) with EVERY empty string field omitted.
- * Throws on an empty offer signature (fail-closed, mirror Go
- * CanonicalAcceptanceBytes / Python jcs_acceptance_payload).
+ * JCS(protojson(AgentAcceptancePayload)) with every empty string field omitted.
+ * Throws on an empty offer signature and on an empty requesterId or requesterDomain
+ * (fail-closed, mirror Go CanonicalAcceptanceBytes / Python jcs_acceptance_payload).
  */
 export function acceptancePayload(input: AcceptanceInput): Uint8Array<ArrayBuffer> {
 	if (input.offerSig === "") {
@@ -74,15 +94,15 @@ export function acceptancePayload(input: AcceptanceInput): Uint8Array<ArrayBuffe
 			"fora/acceptance: cannot accept an unsigned offer (empty offer signature)",
 		);
 	}
+	requireNamedRequester(input.requesterId, input.requesterDomain);
 	// proto omit-unpopulated: every empty string field is absent before JCS. The Go
 	// oracle gets that structurally from EmitUnpopulated=false; this record is
 	// hand-built, so the omission is applied once over the whole record rather than
-	// per key. A per-key guard is how the rule went missing for requester_id --
-	// wire-valid, since Requester.id carries no min_len -- which signed bytes Go never
-	// produces. The filter tests for the empty STRING, which covers every member
-	// AgentAcceptancePayload has (the field-set guard in the Go suite pins that list),
-	// so a string field added to the message cannot arrive without its omission. A
-	// non-string field would need its own zero-value test.
+	// per key. Only idempotency_key can still arrive empty, because the requester
+	// fields are refused above, but the filter tests for the empty STRING, which
+	// covers every member AgentAcceptancePayload has (the field-set guard in the Go
+	// suite pins that list), so a string field added to the message cannot arrive
+	// without its omission. A non-string field would need its own zero-value test.
 	const payload: Record<string, string> = {
 		offer_sig: input.offerSig,
 		requester_id: input.requesterId,
@@ -113,7 +133,8 @@ export async function signOfferAcceptance(
 /**
  * verifyOfferAcceptance verifies a hex acceptance signature over the canonical
  * payload with the agent's Ed25519 public key. Returns false (never throws) on a
- * bad binding, a bad key, or an unsigned offer.
+ * bad binding, a bad key, an unsigned offer, or an empty requester — the last even
+ * when the signature over those bytes verifies.
  */
 export async function verifyOfferAcceptance(
 	input: AcceptanceInput,
@@ -147,10 +168,13 @@ export interface RequestAcceptanceInput {
 	idempotencyKey: string;
 }
 
-/** Canonical JCS(protojson(...)) bytes for the complete ordered execute set. */
+/** Canonical JCS(protojson(...)) bytes for the complete ordered execute set. Throws on
+ * no items, an item with an empty offer signature or exchange, and an empty requesterId
+ * or requesterDomain (the same requester rule as the offer acceptance). */
 export function requestAcceptancePayload(
 	input: RequestAcceptanceInput,
 ): Uint8Array<ArrayBuffer> {
+	requireNamedRequester(input.requesterId, input.requesterDomain);
 	if (input.items.length === 0) {
 		throw new Error("fora/acceptance: request acceptance requires at least one item");
 	}
diff --git a/sdk/ts/tests/acceptance.parity.test.ts b/sdk/ts/tests/acceptance.parity.test.ts
index 072aff43..dbcd94ec 100644
--- a/sdk/ts/tests/acceptance.parity.test.ts
+++ b/sdk/ts/tests/acceptance.parity.test.ts
@@ -7,7 +7,7 @@
 // face byte-identical to the SAME oracle they verify against.
 //
 // The canonical form is JCS(protojson(AgentAcceptancePayload)) — snake_case,
-// omit-unpopulated — so an empty requester_domain is absent before JCS. Ed25519
+// omit-unpopulated — so an empty idempotency_key is absent before JCS. Ed25519
 // is deterministic (RFC 8032), so signOfferAcceptance MUST reproduce the oracle's
 // signature_hex byte-for-byte, not merely verify.
 //
@@ -120,6 +120,46 @@ describe("sdk/ts offer-acceptance matches the shared Go oracle (byte-identical)"
     });
   }
 
+  // An acceptance must name its requester: Requester.id and Requester.domain are both
+  // REQUIRED. The oracle records one acceptance per requester field left empty, with the
+  // bytes and raw signature a signer WITHOUT that check would produce. The canonicalizer
+  // and the signer throw, and the verifier answers false although that signature
+  // verifies over those bytes.
+  const refused = (acceptanceVectors as { refused: (AcceptanceVector & { empty: string })[] })
+    .refused;
+
+  it("refused vectors cover each requester field", () => {
+    expect(refused.map((v) => v.empty).sort()).toEqual(["requester_domain", "requester_id"]);
+  });
+
+  for (const v of refused) {
+    const input = {
+      offerSig: v.offer_sig,
+      requesterId: v.requester_id,
+      requesterDomain: v.requester_domain,
+      idempotencyKey: v.idempotency_key,
+    };
+
+    it(`${v.name}: an acceptance naming an empty requester is refused`, async () => {
+      expect((v as Record<string, string>)[v.empty]).toBe("");
+      const pub = await importVerifyKey(v.pubkey_b64);
+      // The recorded signature is genuine over the recorded bytes, so the refusals
+      // below are about the empty requester, not about a bad signature.
+      expect(
+        await crypto.subtle.verify(
+          "Ed25519",
+          pub,
+          hexToBytes(v.signature_hex),
+          new TextEncoder().encode(v.canonical_jcs),
+        ),
+      ).toBe(true);
+      expect(() => acceptancePayload(input)).toThrow(/empty requester/);
+      const priv = await importSigningKey(v.seed_hex);
+      await expect(signOfferAcceptance(input, priv)).rejects.toThrow(/empty requester/);
+      expect(await verifyOfferAcceptance(input, v.signature_hex, pub)).toBe(false);
+    });
+  }
+
   it("an unsigned offer (empty offer_sig) is rejected fail-closed", () => {
     expect(() =>
       acceptancePayload({
diff --git a/sdk/ts/tests/broker-execute.test.ts b/sdk/ts/tests/broker-execute.test.ts
index 033a554c..a83a1917 100644
--- a/sdk/ts/tests/broker-execute.test.ts
+++ b/sdk/ts/tests/broker-execute.test.ts
@@ -210,6 +210,18 @@ describe("BrokerClient.execute", () => {
 				],
 				["no signature agent", { requester: REQUESTER, signer, send }, good, "malformed"],
 				["no requester", { signer, signatureAgent: AGENT_DIRECTORY, send }, good, "malformed"],
+				[
+					"requester with no id",
+					{ requester: { ...REQUESTER, id: "" }, signer, signatureAgent: AGENT_DIRECTORY, send },
+					good,
+					"malformed",
+				],
+				[
+					"requester with no domain",
+					{ requester: { ...REQUESTER, domain: "" }, signer, signatureAgent: AGENT_DIRECTORY, send },
+					good,
+					"malformed",
+				],
 				["no signer", { requester: REQUESTER, signatureAgent: AGENT_DIRECTORY, send }, good, "not_signable"],
 				["no offers", { requester: REQUESTER, signer, signatureAgent: AGENT_DIRECTORY, send }, [], "malformed"],
 				[
diff --git a/sdk/ts/tests/client.test.ts b/sdk/ts/tests/client.test.ts
index 78f5c9e3..83c7a3f8 100644
--- a/sdk/ts/tests/client.test.ts
+++ b/sdk/ts/tests/client.test.ts
@@ -470,6 +470,26 @@ describe("execute", () => {
 		});
 	});
 
+	it("refuses locally a requester missing its id or its domain", async () => {
+		// Every acceptance names the requester, and Requester.id and Requester.domain are
+		// both required, so the client refuses before signing or sending anything.
+		const { offer, publicKey } = await signedOffer();
+		const accepted = await verifiedOffer(publicKey, offer);
+		const keys = await agentKeys();
+		for (const field of ["id", "domain"] as const) {
+			const { send, seen } = recordingSend({});
+			const client = createClient("https://exchange.test", {
+				requester: { ...REQUESTER, [field]: "" },
+				signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+				send,
+			});
+			const err = (await client.execute(accepted).catch((e: unknown) => e)) as ForaCallError;
+			expect(err.kind, field).toBe("malformed");
+			expect(String(err.cause), field).toContain(`requester.${field} is empty`);
+			expect(seen, field).toEqual([]);
+		}
+	});
+
 	it("refuses an unsigned offer, which verification-off can still surface", async () => {
 		const verifier = createVerifier("off", {
 			resolve: async () => undefined,
diff --git a/sdk/ts/tests/request-acceptance.parity.test.ts b/sdk/ts/tests/request-acceptance.parity.test.ts
index 1614dc1b..f5c74da0 100644
--- a/sdk/ts/tests/request-acceptance.parity.test.ts
+++ b/sdk/ts/tests/request-acceptance.parity.test.ts
@@ -62,6 +62,43 @@ describe("request acceptance matches the Go oracle", () => {
     });
   }
 
+  // The request acceptance names the requester under the same rule as the offer
+  // acceptance: the canonicalizer and the signer throw, and the verifier answers false
+  // although the recorded signature verifies over the recorded bytes.
+  it("refused vectors cover each requester field", () => {
+    expect(vectors.refused.map((v) => v.empty).sort()).toEqual([
+      "requester_domain",
+      "requester_id",
+    ]);
+  });
+
+  for (const vector of vectors.refused) {
+    const input = {
+      items: vector.items.map((item) => ({
+        offerSig: item.offer_sig,
+        exchange: item.exchange,
+      })),
+      requesterId: vector.requester_id,
+      requesterDomain: vector.requester_domain,
+      idempotencyKey: vector.idempotency_key,
+    };
+
+    it(`${vector.name}: a payload naming an empty requester is refused`, async () => {
+      expect((vector as Record<string, unknown>)[vector.empty]).toBe("");
+      expect(() => requestAcceptancePayload(input)).toThrow(/empty requester/);
+      await expect(
+        signRequestAcceptance(input, await privateKey(vector.seed_hex)),
+      ).rejects.toThrow(/empty requester/);
+      expect(
+        await verifyRequestAcceptance(
+          input,
+          vector.signature_hex,
+          await publicKey(vector.pubkey_b64),
+        ),
+      ).toBe(false);
+    });
+  }
+
   it("signs item order", async () => {
     const vector = vectors.vectors[0]!;
     const input = {

From 7bebc64bde6c076d72cff91df9208ad720939202 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:51:25 -0400
Subject: [PATCH 058/164] Map the empty-requester sentinel and regenerate the
 parity matrix

helpers.ErrAcceptanceRequesterEmpty joins the Go-idiomatic exclusions:
Python raises ValueError and TypeScript throws for the same inputs, and
the shared refused-acceptance vectors pin that every language refuses
them. The matrix now counts 196 Go-idiomatic exclusions.
---
 docs/sdk-parity-matrix.md  | 3 ++-
 sdk/parity/symbol-map.json | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index b3ba9358..b99b1a6a 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 175 symbols at cross-language parity · 17 documented divergences · 195 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
+**At a glance:** 175 symbols at cross-language parity · 17 documented divergences · 196 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -351,6 +351,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.CheckStrictMessage` | Go check of an already-decoded proto.Message, which is how the Go client holds a binary answer and every ErrorDetail; py/ts hold only proto-JSON, so check_strict/checkStrict over the decoded JSON is the whole of their check and there is no message object to pass. |
 | `helpers.ComponentParam` | Go value type for an RFC 9421 covered-component parameter; py/ts model components inline. |
 | `helpers.CoveredComponent` | Go value type for an RFC 9421 covered component; py/ts model components inline. |
+| `helpers.ErrAcceptanceRequesterEmpty` | Go errors.Is sentinel for an acceptance that names an empty requester; py raises ValueError and ts throws from the canonical-bytes and signing faces, and the shared refused-acceptance vectors pin that every language refuses the same inputs. |
 | `helpers.ErrAcceptanceSignatureInvalid` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrAudienceIdentity` | Go errors.Is sentinel for an unusable configured Exchange identity; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrBrokenSignatureChain` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 2fc1b7ce..c4bb488d 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -92,6 +92,7 @@
     "helpers.ComponentParam": "Go value type for an RFC 9421 covered-component parameter; py/ts model components inline.",
     "helpers.CoveredComponent": "Go value type for an RFC 9421 covered component; py/ts model components inline.",
     "helpers.ErrAcceptanceSignatureInvalid": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrAcceptanceRequesterEmpty": "Go errors.Is sentinel for an acceptance that names an empty requester; py raises ValueError and ts throws from the canonical-bytes and signing faces, and the shared refused-acceptance vectors pin that every language refuses the same inputs.",
     "helpers.ErrAudienceIdentity": "Go errors.Is sentinel for an unusable configured Exchange identity; py/ts raise/throw instead of exporting sentinels.",
     "helpers.ErrBrokenSignatureChain": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrDigestMismatch": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",

From be28007735717982c33f6c774c06f83887a5bdc8 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 11:51:26 -0400
Subject: [PATCH 059/164] Describe the required requester in the docs and
 changelogs

The authentication page's Requester table described domain as a claim
that never locates keys. It now marks id and domain required, calls id
a free label and domain the host of the key directory, and a new
"Requester domain and the key directory" section states the rule per
path: on a direct request the domain must name the directory the
covered Signature-Agent names, on a relayed purchase the Exchange
verifies the acceptances against the directory the domain names, and
on a Broker's discovery fan-out the domain is the Broker's statement.
The projected-execute section says both acceptances name a non-empty
requester and how signers and verifiers refuse an empty one.

The transaction-flow page, the reference page and the Exchange
request-flow example follow it; the example handler checks the domain
against the signing directory and no longer calls id and domain
display fields.

The Unreleased entry in both changelogs records the required fields,
the per-path domain rule, the acceptance rule and the SDK refusals.
---
 proto/CHANGELOG.md                            | 55 +++++++++++++++++++
 .../components/exchange/request-flows.mdx     | 45 +++++++++++----
 .../content/docs/protocol/authentication.mdx  | 18 +++++-
 .../docs/protocol/transaction-flow.mdx        |  7 ++-
 .../src/content/docs/reference/changelog.mdx  | 55 +++++++++++++++++++
 .../src/content/docs/reference/proto-fora.mdx | 10 ++--
 6 files changed, 170 insertions(+), 20 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index e87fab9d..9d6651bc 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,61 @@
 
 ## Unreleased
 
+**An acceptance names its requester: `Requester.id` and `Requester.domain` are required
+(validation rules added; no wire change).** An agent's offer acceptance signs canonical
+bytes built from the offer, the request's `Requester` and the idempotency key. The proto
+let `Requester.id` be empty, and the SDKs signed an empty `requester_domain` as well, so
+those bytes could name no requester. On a purchase relayed through
+`BrokerService.ExecuteTransaction`, that acceptance is the only agent signature the
+Exchange sees: the request signature there is the Broker's, which says only that the call
+comes from the Broker and never signs the purchase.
+
+- `Requester.id` is REQUIRED, 1 to 255 characters. It is a free label the agent chooses
+  for attribution, for example to tell apart sub-agents or end customers behind one key
+  directory. It is never identity, never used to find keys, and never trusted.
+- `Requester.domain` is REQUIRED, a non-empty bare host under the same pattern every other
+  domain field uses. The pattern already refused an empty value; the comment now says so.
+  The field is the host of the agent's key directory, and never a free label.
+- The `Requester.domain` comment said verification never uses the field, which
+  contradicted the relayed purchase. It now states the rule per path. On a direct request
+  (the agent's own signature arrives), a verifier resolves the agent's keys from the
+  covered `Signature-Agent` and MUST require `Requester.domain` to name that same
+  directory, compared by the request-recipient identity rule; a mismatch is refused as
+  `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`. An Exchange applies
+  this to every request the agent signed, as a Broker already did on
+  `ExecuteTransaction`. On a purchase relayed through a Broker, the Exchange MUST verify
+  the agent's acceptances against the key directory `Requester.domain` names. On a
+  Broker's discovery fan-out, which carries no agent signature, the field is the Broker's
+  statement of whom it queries for.
+- `AgentAcceptance`, `AgentAcceptancePayload`, `AgentRequestAcceptance` and
+  `AgentRequestAcceptancePayload` state that an acceptance names a non-empty requester. A
+  signer refuses to sign bytes that name an empty requester, and a verifier refuses an
+  acceptance whose canonical bytes name one, even when the signature over them verifies.
+- `buf breaking` against v1.0.0 passes: adding validation rules is not a wire break. A
+  peer that sent an empty `Requester.id` is now refused by a validating receiver.
+- The validation corpus gains `Requester/id/too_short` and `Requester/id/too_long`, and
+  its `Requester` baseline now carries an `id`.
+
+SDKs, in all three languages: the acceptance canonicalizers and signers refuse an empty
+requester id or domain, for the offer acceptance and the request acceptance alike, and
+the verifiers refuse such an acceptance. Go returns `helpers.ErrAcceptanceRequesterEmpty`
+(new, match it with `errors.Is`) from `CanonicalAcceptanceBytes`, `SignOfferAcceptance`,
+`SignOfferAcceptanceWith`, `VerifyOfferAcceptance`, `RequestAcceptancePayload`,
+`CanonicalRequestAcceptanceBytes`, the request-acceptance signers and
+`VerifyRequestAcceptance`. Python raises `ValueError` from the `*_jcs` canonicalizers and
+signers and from `verify_offer_acceptance_jcs`, and `verify_request_acceptance_jcs`
+returns `False`. TypeScript throws from `acceptancePayload`, `requestAcceptancePayload`
+and the signers, and the verifiers return `false`. The purchase verbs of every client
+(direct and through a Broker) refuse a configured requester with an empty `id` or
+`domain` locally, as a malformed call, before signing or sending anything. The shared
+acceptance vectors move their empty-requester cases into a new `refused` list, which
+records the bytes and raw signature a signer without the check would produce, so each
+language proves it refuses them even though that signature verifies.
+
+Docs: the authentication page's Requester table and a new "Requester domain and the key
+directory" section, the projected-execute section, the transaction-flow page, the
+reference page and the Exchange request-flow example state the same rules.
+
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
 Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index d0a35f50..2d94c0da 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -73,8 +73,8 @@ func (h *ExchangeHandler) DiscoverResources(
     //    covers the request essentials plus the previous hop's signature, so
     //    the ordered header stack IS the chain) — resolving the requester's
     //    key by its signed keyid (an RFC 7638 thumbprint) in the WBA directory
-    //    named by the COVERED `Signature-Agent` header. The self-asserted
-    //    Requester.domain field never drives key lookup.
+    //    named by the COVERED `Signature-Agent` header. Requester.domain never
+    //    drives key lookup on a request the agent signed.
     //    The handler consumes the proof from the context; it never re-fetches
     //    keys or re-verifies bytes, and it fails closed when the proof is
     //    absent (a route the middleware does not guard).
@@ -85,6 +85,26 @@ func (h *ExchangeHandler) DiscoverResources(
             errors.New("request reached the handler without a verified signature"))
     }
 
+    // 2b. Requester.domain is the host of the agent's key directory, never a
+    //     free label. On a request the agent signed, it MUST name the directory
+    //     the signature resolved from: the host of the covered Signature-Agent
+    //     URL, compared by the request-recipient identity rule (case-folded,
+    //     an absent port the same as :443). A mismatch is a signature that
+    //     verifies, but not for the requester the body names. (A ResourceQuery
+    //     a Broker authored carries the Broker's signature instead; there the
+    //     domain is the Broker's statement of whom it queries for.)
+    host, err := helpers.HostOf(verified.SignatureAgent)
+    verdict := helpers.AudienceMalformed
+    if err == nil {
+        verdict, err = helpers.CheckAudience(host, requester.GetDomain())
+    }
+    if err != nil || verdict != helpers.AudienceAccepted {
+        return nil, connectserver.AttachDetail(
+            connect.NewError(connect.CodeUnauthenticated, errors.New("requester.domain is not the signing directory")),
+            helpers.RequestAuthFailureDetail("fora.v1.ExchangeService", "requester.domain is not the signing directory",
+                forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID))
+    }
+
     // 2c. Verify delegation (if present).
     //     Verifies the delegation JWT chain (chain linkage + cnf holder binding)
     //     against the principal's published key.
@@ -97,8 +117,9 @@ func (h *ExchangeHandler) DiscoverResources(
     // 2d. Resolve the caller's registered account from the VERIFIED identity:
     //     the covered directory (verified.SignatureAgent) plus the RFC 7638
     //     thumbprint of the key the signature actually verified against
-    //     (verified.PublicKey — not the claimed keyid). The self-asserted
-    //     requester.id/domain never select an account — they are display fields.
+    //     (verified.PublicKey — not the claimed keyid). requester.id is a free
+    //     label and requester.domain was matched against the directory in 2b;
+    //     neither selects an account.
     keyThumb, err := helpers.Thumbprint(verified.PublicKey)
     if err != nil {
         return nil, connect.NewError(connect.CodeInternal, err)
@@ -393,10 +414,14 @@ func (h *ExchangeHandler) ExecuteTransaction(
         return nil, connect.NewError(connect.CodeInvalidArgument, err)
     }
 
-    // 2. Requester identity. As in DiscoverResources step 2, the SDK's verify
-    //    middleware already verified every RFC 9421 signature at the HTTP seam;
-    //    the handler consumes the proof from the context and fails closed when
-    //    it is absent.
+    // 2. Requester identity. As in DiscoverResources steps 2 and 2b, the SDK's
+    //    verify middleware already verified every RFC 9421 signature at the HTTP
+    //    seam; the handler consumes the proof from the context, fails closed when
+    //    it is absent, and requires requester.domain to name the signing
+    //    directory (elided here). On a sub-request a Broker re-packaged, the
+    //    signer is the Broker, and the agent is authenticated instead by its
+    //    acceptances, verified against the directory requester.domain names
+    //    (see "Sub-requests from a Broker" below).
     requester := req.Msg.Requester
     verified := helpers.FromContext(ctx)
     if verified == nil {
@@ -446,8 +471,8 @@ func (h *ExchangeHandler) ExecuteTransaction(
     agentHash := sha256Hex(requester.Id + ":" + requester.Domain)
     // The account handle (the billing_ref minted at Register) comes from the
     // account resolved in step 2b from the VERIFIED signing key. The request
-    // carries no caller-written billing field, and the self-asserted id/domain
-    // never select the account.
+    // carries no caller-written billing field, and requester.id/domain never
+    // select the account.
     billingRef := account.BillingRef
     var resultItems []*forav1.TransactionResultItem
     var totalAmount float64
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 9f75620e..3f98f759 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -21,8 +21,8 @@ Every FORA request carries a `Requester` message that identifies who is making t
 
 | Field | Type | Description |
 |---|---|---|
-| `id` | `string` | Unique requester identifier (e.g., `"agent-research-bot-001"`) |
-| `domain` | `string` | The requester's own domain, as it declares it. **Not** where keys are looked up — that is the covered `Signature-Agent` header (see [Key Lookup](#key-lookup)). A value here is a claim, not a credential |
+| `id` | `string` | **Required**, 1 to 255 characters. A free label the agent chooses for attribution (e.g., `"agent-research-bot-001"`), for example to tell apart sub-agents or end customers that share one key directory. It is never identity: no verifier finds keys from it, and no party trusts it for an authentication or authorization decision |
+| `domain` | `string` | **Required**, a bare host (a port allowed). The host of the requester's key directory, `{domain}/.well-known/http-message-signatures-directory`. It is never a free label: on a direct request it must name the directory the covered `Signature-Agent` header names, and on a purchase relayed through a Broker the Exchange verifies the agent's acceptances against the directory it names (see [Key Lookup](#key-lookup)) |
 | `type` | `RequesterType` | What kind of entity is making the request |
 | `name` | `string` (optional) | Human-readable name (e.g., `"Acme Research Assistant"`) |
 | `scopes` | `repeated string` | Entitlement scopes — what the requester can access |
@@ -61,6 +61,16 @@ The `{directory}` comes from the **`Signature-Agent` header**, not from the `Req
 
 This ties cryptographic identity to DNS ownership — if you control the domain, you control the key.
 
+### Requester domain and the key directory
+
+`requester.domain` names the same directory, and the rule that binds the two depends on who signed the arriving request:
+
+- **Direct request.** The agent's own signature arrives: the agent sent the request itself, or a relay forwarded it byte-for-byte. The verifier resolves the key from the covered `Signature-Agent` header, as above, never from `requester.domain`. It then **MUST** require `requester.domain` to name that same directory: the host of the `Signature-Agent` URL, compared by the request-recipient identity rule (the shape check first, then case-folded, an absent port the same as `:443`, a subdomain a different party). A mismatch is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`: the signature verifies, but not for the requester the body names. An Exchange applies this rule to every request the agent signed, exactly as a Broker applies it on `BrokerService.ExecuteTransaction`.
+- **Purchase relayed through a Broker.** `BrokerService.ExecuteTransaction` re-packages the purchase, so the request signature and the covered `Signature-Agent` belong to the Broker. They say only that the call comes from the Broker; they sign no purchase. The Exchange **MUST** verify each item's `AgentAcceptance`, and the `AgentRequestAcceptance`, against the Ed25519 keys currently valid in the directory `requester.domain` names, never against the Broker's key. Those acceptances are the only agent signatures the Exchange sees (see [Projected execute requests](#projected-execute-requests)).
+- **Discovery fan-out.** A `ResourceQuery` the Broker authored carries no agent signature, so nothing on that leg authenticates `requester.domain`: it is the Broker's statement, under the Broker's own signature, of whom it queries for.
+
+`requester.id` plays no part in any of this. It is a label the agent chooses, covered by the acceptance signatures so a relay cannot rewrite it, and still only what the agent says.
+
 ### The WBA Directory Endpoint
 
 Signing keys are published in a dedicated WBA directory at `/.well-known/http-message-signatures-directory`, separate from the role manifest at `/.well-known/fora.json`. It is a pure JWK Set (`Content-Type: application/jwk-set+json`): a `keys` array of Ed25519 JWKs plus an optional `revocation_url`. Each key is identified by its RFC 7638 thumbprint (the value carried as the RFC 9421 `keyid`), so the directory carries no `kid` labels. Every FORA participant — agent, exchange, broker, publisher — serves one.
@@ -330,7 +340,9 @@ The agent's cryptographic authorization does not ride the transport layer at all
 - **`agent_acceptance`** on each item — binds that offer to the requester and the idempotency key.
 - **`agent_request_acceptance`** on the request — binds the **complete ordered set** of `(offer signature, exchange)` references, so each Exchange can require its subrequest to be the exact in-order projection of the set the agent signed. See [Broker fan-out and request projection](/components/broker/overview/#execution-separate-step) for the flow.
 
-The Exchange resolves the `agent_request_acceptance` verification key from the requester the signed payload names: the payload's `requester_domain` must equal the request's `requester.domain`, and the signature is accepted only if it verifies against an Ed25519 key currently valid in that domain's WBA directory (`{requester_domain}/.well-known/http-message-signatures-directory`). The envelope carries no `keyid`, so the verifier tries the currently-valid Ed25519 keys of that directory — rotation overlap keeps that set small. When the requester itself signed the arriving request, the request-signing key the Exchange already resolved is that key, and no second fetch is needed. A signature that verifies against a key the requester's domain publishes is what makes the claimed requester identity an authenticated one, the same anchoring every other directory lookup uses.
+Both acceptances name the requester: their canonical bytes carry a non-empty `requester_id` and `requester_domain`, copied from the request's `Requester`. A signer refuses to sign bytes that name an empty requester, and a verifier refuses an acceptance whose canonical bytes name one, even when the signature over those bytes verifies. Such bytes bind the agent's consent to nobody, and on a relayed purchase the acceptances are the only agent signatures the Exchange sees. The SDKs enforce this in all three languages: their acceptance signers refuse an empty requester locally as a malformed request, and their verifiers refuse such an acceptance.
+
+The Exchange verifies each `agent_acceptance` against an Ed25519 key currently valid in the WBA directory `requester.domain` names. It resolves the `agent_request_acceptance` verification key from the requester the signed payload names: the payload's `requester_domain` must equal the request's `requester.domain`, and the signature is accepted only if it verifies against an Ed25519 key currently valid in that domain's WBA directory (`{requester_domain}/.well-known/http-message-signatures-directory`). The envelope carries no `keyid`, so the verifier tries the currently-valid Ed25519 keys of that directory — rotation overlap keeps that set small. When the requester itself signed the arriving request, the request-signing key the Exchange already resolved is that key, and no second fetch is needed. A signature that verifies against a key the requester's domain publishes is what makes the claimed requester identity an authenticated one, the same anchoring every other directory lookup uses.
 
 Delegation on a projected request: the projecting Broker is the wire signer, so the holder-binding check matches the key each item's `AgentAcceptance` verifies under, not the Broker's request signature (see [Which signature binds in a brokered request](#verification)). The agent stays the terminal holder and does not need to delegate to the Broker. The Broker authenticates as itself, and the body's detached signatures carry the agent's authorization.
 
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 6dd1354f..2caf1e72 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -63,7 +63,8 @@ Content-Type: application/json
 ```
 
 Key fields:
-- `requester.id` + `requester.domain` -- uniquely identifies the agent; the Exchange fetches the Ed25519 public key from the signer's WBA directory at `{domain}/.well-known/http-message-signatures-directory` (the domain resolved from the covered `Signature-Agent` header) to verify the request's RFC 9421 HTTP Message Signature
+- `requester.domain` -- required; the host of the agent's key directory. On this direct request the Exchange fetches the Ed25519 public key from the WBA directory the covered `Signature-Agent` header names, `{directory}/.well-known/http-message-signatures-directory`, verifies the request's RFC 9421 HTTP Message Signature, and then requires `requester.domain` to name that same directory: a mismatch is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID` (see [Requester domain and the key directory](/protocol/authentication/#requester-domain-and-the-key-directory))
+- `requester.id` -- required; a free label the agent chooses for attribution, such as which sub-agent or end customer is asking. It is never identity and never used to find keys
 - `ResourceQuery.uris` -- the content URI(s) being requested
 - `acceptable_restrictions` -- the restrictions the agent is willing to accept, grouped by axis; axis `FUNCTION` carries the intended use (RAG, training, search, etc.)
 - `requester.scopes` -- entitlement scopes; `["*"]` means unrestricted public access
@@ -389,7 +390,7 @@ The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A b
 ### What Happens Inside the Exchange
 
 1. Validate request (proto validation)
-2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a sub-request the Broker re-packaged. On a re-packaged sub-request the agent is authenticated by its body acceptances instead, and a delegation's holder binding (`cnf.jkt`) is checked against the key the item's `AgentAcceptance` verifies under, not against the Broker
+2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a sub-request the Broker re-packaged. On a direct request, also require `requester.domain` to name the directory the covered `Signature-Agent` header names. On a re-packaged sub-request the agent is authenticated by its body acceptances instead: each item's `AgentAcceptance` is verified against an Ed25519 key in the directory `requester.domain` names, an acceptance whose canonical bytes name an empty requester is refused, and a delegation's holder binding (`cnf.jkt`) is checked against the key the item's `AgentAcceptance` verifies under, not against the Broker
 3. Verify `agent_request_acceptance` when present: the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange. This runs **before** the idempotency lookup — request-level idempotency state is never created or served for a request whose set claim has not been proven, otherwise a mutated request could consume the key and a later honest retry would replay its result
 4. Check idempotency key (prevent double-charge on retry)
 5. Verify offer signature (reconstruct offer from signed token)
@@ -493,7 +494,7 @@ The Broker re-packages the purchase:
 
 1. It verifies the agent's request signature, and checks that `requester.domain` is the agent's verified signing directory (the host of the WBA directory the covered `Signature-Agent` header names).
 2. It groups the items by each signed offer's `exchange`. It checks that it can route to each Exchange and approves it for purchases before it sends anything.
-3. It sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. Each sub-request carries that Exchange's items in request order with their acceptances, the agent's `AgentRequestAcceptance` unchanged, the agent's `requester` and the agent's `idempotency_key` unchanged. Each Exchange verifies the agent's consent from the body.
+3. It sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. Each sub-request carries that Exchange's items in request order with their acceptances, the agent's `AgentRequestAcceptance` unchanged, the agent's `requester` and the agent's `idempotency_key` unchanged. Each Exchange verifies the agent's consent from the body, against the keys in the directory `requester.domain` names: the Broker's signature says only that the call comes from the Broker, and the acceptances are the only agent signatures the Exchange sees.
 4. It combines the answers into one `BrokerTransactionResponse`.
 
 Re-packaging and combining are safe because each item is atomic and its integrity is per resource. Each offer carries the signature of the Exchange that issued it, covering price, terms, expiry and `exchange`. Each acceptance binds the agent to that one offer, the requester and the idempotency key. Each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases, and it cannot change what an item buys, from whom, at what price or for whom without breaking that offer's signature or the agent's acceptance. The `AgentRequestAcceptance` also stops it dropping, adding or reordering items within one Exchange's sub-request. No cross-item integrity is needed. On the response side, the one signed value in a result item is `retrieval_endpoint`, which the issuing Exchange signed. The other fields are the Broker's unsigned report of what each Exchange answered; the charge itself is still bounded by the signed offer the Exchange verified.
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 4e094b1c..455e521b 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,61 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**An acceptance names its requester: `Requester.id` and `Requester.domain` are required
+(validation rules added; no wire change).** An agent's offer acceptance signs canonical
+bytes built from the offer, the request's `Requester` and the idempotency key. The proto
+let `Requester.id` be empty, and the SDKs signed an empty `requester_domain` as well, so
+those bytes could name no requester. On a purchase relayed through
+`BrokerService.ExecuteTransaction`, that acceptance is the only agent signature the
+Exchange sees: the request signature there is the Broker's, which says only that the call
+comes from the Broker and never signs the purchase.
+
+- `Requester.id` is REQUIRED, 1 to 255 characters. It is a free label the agent chooses
+  for attribution, for example to tell apart sub-agents or end customers behind one key
+  directory. It is never identity, never used to find keys, and never trusted.
+- `Requester.domain` is REQUIRED, a non-empty bare host under the same pattern every other
+  domain field uses. The pattern already refused an empty value; the comment now says so.
+  The field is the host of the agent's key directory, and never a free label.
+- The `Requester.domain` comment said verification never uses the field, which
+  contradicted the relayed purchase. It now states the rule per path. On a direct request
+  (the agent's own signature arrives), a verifier resolves the agent's keys from the
+  covered `Signature-Agent` and MUST require `Requester.domain` to name that same
+  directory, compared by the request-recipient identity rule; a mismatch is refused as
+  `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`. An Exchange applies
+  this to every request the agent signed, as a Broker already did on
+  `ExecuteTransaction`. On a purchase relayed through a Broker, the Exchange MUST verify
+  the agent's acceptances against the key directory `Requester.domain` names. On a
+  Broker's discovery fan-out, which carries no agent signature, the field is the Broker's
+  statement of whom it queries for.
+- `AgentAcceptance`, `AgentAcceptancePayload`, `AgentRequestAcceptance` and
+  `AgentRequestAcceptancePayload` state that an acceptance names a non-empty requester. A
+  signer refuses to sign bytes that name an empty requester, and a verifier refuses an
+  acceptance whose canonical bytes name one, even when the signature over them verifies.
+- `buf breaking` against v1.0.0 passes: adding validation rules is not a wire break. A
+  peer that sent an empty `Requester.id` is now refused by a validating receiver.
+- The validation corpus gains `Requester/id/too_short` and `Requester/id/too_long`, and
+  its `Requester` baseline now carries an `id`.
+
+SDKs, in all three languages: the acceptance canonicalizers and signers refuse an empty
+requester id or domain, for the offer acceptance and the request acceptance alike, and
+the verifiers refuse such an acceptance. Go returns `helpers.ErrAcceptanceRequesterEmpty`
+(new, match it with `errors.Is`) from `CanonicalAcceptanceBytes`, `SignOfferAcceptance`,
+`SignOfferAcceptanceWith`, `VerifyOfferAcceptance`, `RequestAcceptancePayload`,
+`CanonicalRequestAcceptanceBytes`, the request-acceptance signers and
+`VerifyRequestAcceptance`. Python raises `ValueError` from the `*_jcs` canonicalizers and
+signers and from `verify_offer_acceptance_jcs`, and `verify_request_acceptance_jcs`
+returns `False`. TypeScript throws from `acceptancePayload`, `requestAcceptancePayload`
+and the signers, and the verifiers return `false`. The purchase verbs of every client
+(direct and through a Broker) refuse a configured requester with an empty `id` or
+`domain` locally, as a malformed call, before signing or sending anything. The shared
+acceptance vectors move their empty-requester cases into a new `refused` list, which
+records the bytes and raw signature a signer without the check would produce, so each
+language proves it refuses them even though that signature verifies.
+
+Docs: the authentication page's Requester table and a new "Requester domain and the key
+directory" section, the projected-execute section, the transaction-flow page, the
+reference page and the Exchange request-flow example state the same rules.
+
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
 Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 64dea2b1..e1a01f01 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -78,7 +78,9 @@ Rate limit status modeled after IETF RateLimit header fields.
 
 ### Requester
 
-Identity and entitlements only — who is asking and what they're entitled to. What they're asking for (`uris`) and the limits they'll accept (`acceptable_restrictions`) live on the ask (`ResourceQuery` / `DiscoveryRequest`), not here. Used in `ResourceQuery` and `DiscoveryRequest`.
+Identity and entitlements only — who is asking and what they're entitled to. What they're asking for (`uris`) and the limits they'll accept (`acceptable_restrictions`) live on the ask (`ResourceQuery` / `DiscoveryRequest`), not here. Used in `ResourceQuery`, `DiscoveryRequest` and `TransactionRequest`.
+
+`id` and `domain` are both required. `domain` is the host of the requester's key directory and is never a free label: on a direct request a verifier resolves the agent's keys from the covered `Signature-Agent` header and requires `domain` to name that same directory, refusing a mismatch as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; on a purchase relayed through `BrokerService.ExecuteTransaction`, the Exchange verifies the agent's acceptances against the directory `domain` names, because the request signature there is the Broker's. `id` is a free label the agent chooses for attribution, such as which sub-agent or end customer is asking; it is never identity, never used to find keys, and never trusted. See [Requester domain and the key directory](/protocol/authentication/#requester-domain-and-the-key-directory).
 
 `scopes` hides existence: a requester never learns about a resource outside its scopes. When the scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason, exactly as for any resource with nothing to offer, and an offer it presented is honoured until it expires. See [Existence hiding](/protocol/authentication/#existence-hiding).
 
@@ -172,7 +174,7 @@ A single offer commitment within a batch transaction.
 
 ### AgentAcceptance
 
-The agent's detached acceptance signature over an accepted Offer. It travels in the execute body alongside the reflected Offer and is independent of the transport (RFC 9421) request signature, so it survives any number of broker relays. The Exchange verifies it and binds the delivery URL to the agent's key (RFC 7638 thumbprint). `signature` is a hex-encoded detached Ed25519 signature over the JCS-canonicalized (RFC 8785) proto-JSON of [`AgentAcceptancePayload`](#agentacceptancepayload) — the same canonical signing form `Offer.signature` defines, reduced here to `JCS(protojson(payload))` because the payload carries no signature fields to clear; `signature_algorithm` is `EdDSA`.
+The agent's detached acceptance signature over an accepted Offer. It travels in the execute body alongside the reflected Offer and is independent of the transport (RFC 9421) request signature, so it survives any number of broker relays. The Exchange verifies it against an Ed25519 key in the WBA directory `requester.domain` names and binds the delivery URL to that key (RFC 7638 thumbprint). On a purchase relayed through a Broker it is the only agent signature the Exchange sees, so it must name a requester: its canonical bytes carry a non-empty `requester_id` and `requester_domain`, a signer refuses to sign bytes that name an empty requester, and a verifier refuses an acceptance whose bytes name one, even when the signature verifies. `signature` is a hex-encoded detached Ed25519 signature over the JCS-canonicalized (RFC 8785) proto-JSON of [`AgentAcceptancePayload`](#agentacceptancepayload) — the same canonical signing form `Offer.signature` defines, reduced here to `JCS(protojson(payload))` because the payload carries no signature fields to clear; `signature_algorithm` is `EdDSA`.
 
 ::proto-message{name=AgentAcceptance}
 
@@ -184,7 +186,7 @@ The agent's detached authorization of one complete ordered execute set. Its payl
 
 ### AgentRequestAcceptancePayload
 
-The signed field set: ordered [`AgentRequestAcceptanceItem`](#agentrequestacceptanceitem) references plus the requester identity and idempotency key. Canonical bytes use the same RFC 8785 JCS over canonical proto-JSON rule as Offer and AgentAcceptance signatures.
+The signed field set: ordered [`AgentRequestAcceptanceItem`](#agentrequestacceptanceitem) references plus the requester identity and idempotency key. `requester_id` and `requester_domain` are never empty, under the same rule as [`AgentAcceptance`](#agentacceptance). Canonical bytes use the same RFC 8785 JCS over canonical proto-JSON rule as Offer and AgentAcceptance signatures.
 
 ::proto-message{name=AgentRequestAcceptancePayload}
 
@@ -196,7 +198,7 @@ A signed request-set reference containing `offer_sig` and `exchange`. The offer
 
 ### AgentAcceptancePayload
 
-The canonical signing structure for [`AgentAcceptance`](#agentacceptance). It is **never sent on the wire** — this message fixes the *field set*, and the *byte layout* is the canonical signing form defined on `Offer.signature`: RFC 8785 JCS over canonical proto-JSON with a pinned option set. Both halves are normative, so signer and verifier derive byte-identical signed bytes in any language without a protobuf binary codec, and the contract cannot drift between implementations. `offer_sig` is the accepted `Offer.signature` (which transitively binds pricing, terms, and expiry); `requester_id`, `requester_domain`, and `idempotency_key` come from the enclosing `TransactionRequest`.
+The canonical signing structure for [`AgentAcceptance`](#agentacceptance). It is **never sent on the wire** — this message fixes the *field set*, and the *byte layout* is the canonical signing form defined on `Offer.signature`: RFC 8785 JCS over canonical proto-JSON with a pinned option set. Both halves are normative, so signer and verifier derive byte-identical signed bytes in any language without a protobuf binary codec, and the contract cannot drift between implementations. `offer_sig` is the accepted `Offer.signature` (which transitively binds pricing, terms, and expiry); `requester_id`, `requester_domain`, and `idempotency_key` come from the enclosing `TransactionRequest`, and the two requester fields are never empty.
 
 ::proto-message{name=AgentAcceptancePayload}
 

From 4cd7028b85e49f0fe9f45c59910cace3a4ed2369 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 14:43:24 -0400
Subject: [PATCH 060/164] Require an estimate on a metered offer and settle
 within a tolerance in the protocol

A PER_UNIT price is charged per unit consumed, but an offer could
carry no estimated_quantity, and nothing said what the agent accepts
at purchase or how a usage report of a different quantity settles.

An offer whose pricing or term is PER_UNIT must now carry a positive
pricing.estimated_quantity, enforced by the offer.metered.requires_estimate
rule on Offer. The rule is on the offer rather than on Pricing because a
publisher pushes PER_UNIT terms without an estimate: it describes the
resource and may ride on ResourceEntry.estimated_quantity. An Exchange
that cannot state one emits no offer for the term.

Pricing gains estimate_tolerance_bps, field 10: the tolerance on the
estimate in basis points, 0 to 10000, presence-tracked, 1000 (10%) when
absent. The pricing.estimate_tolerance.requires_per_unit rule refuses it
on any other model.

Pricing states the settlement once. The agent accepts estimate x rate
at purchase, which is what TransactionResultItem.cost carries for a
metered item. The report settles at min(consumed, ceiling) x rate, the
ceiling being estimate x (10000 + tolerance) / 10000; the quantity above
the ceiling is held for dispute and never charged automatically. The
arithmetic is exact decimal. Settlement reads the offer's own pricing.
UsageReport, Usage.consumed_quantity, ReportingObligation and
UsageReportRejectionReason state that a report differing from the
estimate is never refused for it. UsageReportResponse says that a
partly held report is a plain success whose report_id identifies the
held excess: the amounts are a pure function of the signed offer and
the reported quantity, so the response carries none.

buf breaking against v1.0.0 passes. The generated code, the descriptor,
the SDK types, the JSON Schemas and the validation corpus are
regenerated. The cross-field corpus gains the tolerance mutant and three
unestimated metered offers, the conformance cases cover both rules and
the tolerance bounds, the entry vectors gain the tolerance cases, and
the transaction-flow examples give their metered offers an estimate.
---
 conformance/corpus/cases.json                 |  28 +++
 conformance/corpus/crossfield.json            | 101 ++++++++++
 conformance/corpusgen/main.go                 |  54 ++++++
 conformance/validate_test.go                  |  39 ++++
 gen/descriptor.binpb                          | Bin 653517 -> 663522 bytes
 gen/go/fora/v1/fora.pb.go                     | 166 +++++++++++++++--
 ...a.v1.BrokerTransactionResponse.schema.json |   6 +-
 ...okerTransactionResponse.schema.strict.json |   6 +-
 .../fora.v1.DiscoveryResponse.schema.json     |  21 ++-
 ...ra.v1.DiscoveryResponse.schema.strict.json |  21 ++-
 .../fora.v1.LicenseTerm.schema.json           |  14 +-
 .../fora.v1.LicenseTerm.schema.strict.json    |  14 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |  21 ++-
 .../fora.v1.Offer.schema.strict.json          |  21 ++-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |  21 ++-
 .../fora.v1.OfferGroup.schema.strict.json     |  21 ++-
 gen/jsonschema/fora.v1.Pricing.schema.json    |  12 +-
 .../fora.v1.Pricing.schema.strict.json        |  12 +-
 .../fora.v1.PushResourcesRequest.schema.json  |  14 +-
 ...v1.PushResourcesRequest.schema.strict.json |  14 +-
 .../fora.v1.ReportingObligation.schema.json   |   4 +-
 ....v1.ReportingObligation.schema.strict.json |   4 +-
 .../fora.v1.ResourceEntry.schema.json         |  14 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |  14 +-
 .../fora.v1.ResourceResponse.schema.json      |  21 ++-
 ...ora.v1.ResourceResponse.schema.strict.json |  21 ++-
 .../fora.v1.TransactionItem.schema.json       |  21 ++-
 ...fora.v1.TransactionItem.schema.strict.json |  21 ++-
 .../fora.v1.TransactionRequest.schema.json    |  21 ++-
 ...a.v1.TransactionRequest.schema.strict.json |  21 ++-
 .../fora.v1.TransactionResponse.schema.json   |   6 +-
 ....v1.TransactionResponse.schema.strict.json |   6 +-
 .../fora.v1.TransactionResultItem.schema.json |   6 +-
 ...1.TransactionResultItem.schema.strict.json |   6 +-
 gen/jsonschema/fora.v1.Usage.schema.json      |   3 +-
 .../fora.v1.Usage.schema.strict.json          |   3 +-
 .../fora.v1.UsageReport.schema.json           |   5 +-
 .../fora.v1.UsageReport.schema.strict.json    |   5 +-
 .../fora.v1.UsageReportResponse.schema.json   |   4 +-
 ....v1.UsageReportResponse.schema.strict.json |   4 +-
 gen/python/wire/models.py                     |  15 +-
 gen/ts/wire/schemas.ts                        |  34 ++--
 proto/fora/v1/fora.proto                      | 173 +++++++++++++++++-
 .../helpers/gen_licenseterm_vectors_test.go   |  21 +++
 .../helpers/testdata/licenseterm-vectors.json |  73 ++++++++
 .../docs/protocol/transaction-flow.mdx        |  16 +-
 46 files changed, 973 insertions(+), 175 deletions(-)

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index d18602ba..90d9ed26 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -5333,6 +5333,34 @@
       ]
     }
   },
+  {
+    "id": "Pricing/estimate_tolerance_bps/above_max",
+    "message": "Pricing",
+    "valid": false,
+    "rules": [
+      "int32.gte_lte",
+      "pricing.estimate_tolerance.requires_per_unit"
+    ],
+    "json": {
+      "estimate_tolerance_bps": 10001,
+      "model": "PRICING_MODEL_FREE",
+      "rate": "0"
+    }
+  },
+  {
+    "id": "Pricing/estimate_tolerance_bps/below_min",
+    "message": "Pricing",
+    "valid": false,
+    "rules": [
+      "int32.gte_lte",
+      "pricing.estimate_tolerance.requires_per_unit"
+    ],
+    "json": {
+      "estimate_tolerance_bps": -1,
+      "model": "PRICING_MODEL_FREE",
+      "rate": "0"
+    }
+  },
   {
     "id": "Pricing/model/not_in",
     "message": "Pricing",
diff --git a/conformance/corpus/crossfield.json b/conformance/corpus/crossfield.json
index cbdf8288..ea6e46ff 100644
--- a/conformance/corpus/crossfield.json
+++ b/conformance/corpus/crossfield.json
@@ -188,6 +188,107 @@
       "trigger": "OBLIGATION_TRIGGER_ON_USE"
     }
   },
+  {
+    "id": "Offer/cel/metered_requires_estimate/missing",
+    "message": "Offer",
+    "valid": false,
+    "rules": [
+      "offer.metered.requires_estimate"
+    ],
+    "json": {
+      "exchange": "exchange.example",
+      "offer_id": "offer-metered",
+      "pricing": {
+        "currency": "USD",
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "unit": "tokens"
+      },
+      "terms": [
+        {
+          "pricing": {
+            "currency": "USD",
+            "model": "PRICING_MODEL_PER_UNIT",
+            "rate": "0.00002",
+            "unit": "tokens"
+          },
+          "semantics": "TERM_SEMANTICS_ENUMERATED"
+        }
+      ]
+    }
+  },
+  {
+    "id": "Offer/cel/metered_requires_estimate/term_only",
+    "message": "Offer",
+    "valid": false,
+    "rules": [
+      "offer.metered.requires_estimate"
+    ],
+    "json": {
+      "exchange": "exchange.example",
+      "offer_id": "offer-metered",
+      "pricing": {
+        "currency": "USD",
+        "model": "PRICING_MODEL_FLAT",
+        "rate": "1.00"
+      },
+      "terms": [
+        {
+          "pricing": {
+            "currency": "USD",
+            "model": "PRICING_MODEL_PER_UNIT",
+            "rate": "0.00002",
+            "unit": "tokens"
+          },
+          "semantics": "TERM_SEMANTICS_ENUMERATED"
+        }
+      ]
+    }
+  },
+  {
+    "id": "Offer/cel/metered_requires_estimate/zero",
+    "message": "Offer",
+    "valid": false,
+    "rules": [
+      "offer.metered.requires_estimate"
+    ],
+    "json": {
+      "exchange": "exchange.example",
+      "offer_id": "offer-metered",
+      "pricing": {
+        "currency": "USD",
+        "estimated_quantity": 0,
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "unit": "tokens"
+      },
+      "terms": [
+        {
+          "pricing": {
+            "currency": "USD",
+            "model": "PRICING_MODEL_PER_UNIT",
+            "rate": "0.00002",
+            "unit": "tokens"
+          },
+          "semantics": "TERM_SEMANTICS_ENUMERATED"
+        }
+      ]
+    }
+  },
+  {
+    "id": "Pricing/cel/estimate_tolerance_requires_per_unit",
+    "message": "Pricing",
+    "valid": false,
+    "rules": [
+      "pricing.estimate_tolerance.requires_per_unit"
+    ],
+    "json": {
+      "currency": "USD",
+      "estimate_tolerance_bps": 500,
+      "model": "PRICING_MODEL_FLAT",
+      "rate": "1.00"
+    }
+  },
   {
     "id": "Pricing/cel/free_zero_rate",
     "message": "Pricing",
diff --git a/conformance/corpusgen/main.go b/conformance/corpusgen/main.go
index 32e17c51..aa82f118 100644
--- a/conformance/corpusgen/main.go
+++ b/conformance/corpusgen/main.go
@@ -321,6 +321,38 @@ func writeCrossField(v protovalidate.Validator) {
 			&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "5"},
 			"pricing.free.zero_rate",
 		},
+		{
+			// A tolerance bounds a metered settlement; on a FREE or FLAT price
+			// there is nothing for it to bound.
+			"Pricing/cel/estimate_tolerance_requires_per_unit",
+			&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD", EstimateToleranceBps: proto.Int32(500)},
+			"pricing.estimate_tolerance.requires_per_unit",
+		},
+		{
+			// A metered offer with no estimate has no amount to accept and no
+			// ceiling for a usage report to settle against.
+			"Offer/cel/metered_requires_estimate/missing",
+			meteredOffer(nil),
+			"offer.metered.requires_estimate",
+		},
+		{
+			// Present but zero is still no estimate: the floor is positive.
+			"Offer/cel/metered_requires_estimate/zero",
+			meteredOffer(proto.Int32(0)),
+			"offer.metered.requires_estimate",
+		},
+		{
+			// The term's pricing is the authoritative copy, so a PER_UNIT term
+			// makes the offer metered even when the offer's own pricing does not
+			// say so.
+			"Offer/cel/metered_requires_estimate/term_only",
+			func() *forav1.Offer {
+				o := meteredOffer(nil)
+				o.Pricing = &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"}
+				return o
+			}(),
+			"offer.metered.requires_estimate",
+		},
 		{
 			"License/cel/digest_required_with_uri",
 			&forav1.License{Id: proto.String("CC-BY-4.0"), Uri: proto.String("https://example.com/license")},
@@ -466,6 +498,28 @@ func writeCrossField(v protovalidate.Validator) {
 	fmt.Printf("wrote %d cross-field cases -> conformance/corpus/crossfield.json\n", len(cases))
 }
 
+// meteredOffer is a PER_UNIT offer, otherwise valid, whose pricing carries the
+// given estimate (nil leaves it unset). The term carries the same price
+// without an estimate, as a publisher pushes it.
+func meteredOffer(estimate *int32) *forav1.Offer {
+	price := func() *forav1.Pricing {
+		return &forav1.Pricing{
+			Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD", Unit: proto.String("tokens"),
+		}
+	}
+	o := &forav1.Offer{
+		OfferId:  "offer-metered",
+		Exchange: "exchange.example",
+		Pricing:  price(),
+		Terms: []*forav1.LicenseTerm{{
+			Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
+			Pricing:   price(),
+		}},
+	}
+	o.Pricing.EstimatedQuantity = estimate
+	return o
+}
+
 // ── baseline construction ────────────────────────────────────────────────────
 
 func baseline(md protoreflect.MessageDescriptor, sd map[string]proto.Message) (protoreflect.Message, error) {
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index e89862a8..02445411 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -115,6 +115,26 @@ func licensingCases() []validationCase {
 		{"pricing free zero rate ok", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"}, true, ""},
 		{"pricing free nonzero rate rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "1.0"}, false, "pricing.free.zero_rate"},
 
+		// Pricing.estimate_tolerance_bps: basis points 0..10000, PER_UNIT only.
+		{"pricing per_unit tolerance ok", meteredPricing(nil, proto.Int32(500)), true, ""},
+		{"pricing per_unit tolerance zero ok", meteredPricing(nil, proto.Int32(0)), true, ""},
+		{"pricing per_unit tolerance at max ok", meteredPricing(nil, proto.Int32(10000)), true, ""},
+		{"pricing per_unit tolerance above max rejected", meteredPricing(nil, proto.Int32(10001)), false, "int32.gte_lte"},
+		{"pricing per_unit tolerance negative rejected", meteredPricing(nil, proto.Int32(-1)), false, "int32.gte_lte"},
+		{"pricing flat with tolerance rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD", EstimateToleranceBps: proto.Int32(1000)}, false, "pricing.estimate_tolerance.requires_per_unit"},
+		{"pricing free with tolerance rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0", EstimateToleranceBps: proto.Int32(0)}, false, "pricing.estimate_tolerance.requires_per_unit"},
+
+		// Offer message-level CEL: a metered offer carries a positive estimate on
+		// its own pricing. A pushed term needs none, so the term stays bare.
+		{"offer metered with estimate ok", meteredOffer(meteredPricing(proto.Int32(2500), nil)), true, ""},
+		{"offer metered with estimate and tolerance ok", meteredOffer(meteredPricing(proto.Int32(2500), proto.Int32(0))), true, ""},
+		{"offer metered without estimate rejected", meteredOffer(meteredPricing(nil, nil)), false, "offer.metered.requires_estimate"},
+		{"offer metered zero estimate rejected", meteredOffer(meteredPricing(proto.Int32(0), nil)), false, "offer.metered.requires_estimate"},
+		{"offer metered negative estimate rejected", meteredOffer(meteredPricing(proto.Int32(-5), nil)), false, "offer.metered.requires_estimate"},
+		{"offer metered term under flat pricing rejected", meteredOffer(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}), false, "offer.metered.requires_estimate"},
+		{"offer flat without estimate ok", &forav1.Offer{OfferId: "of_flat", Exchange: exampleExchange, Pricing: &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, Terms: []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}}}}, true, ""},
+		{"transaction with unestimated metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil, nil))}}}, false, "offer.metered.requires_estimate"},
+
 		// Pricing.unit format: empty / bare-dashed / vendor:namespaced.
 		{"pricing unit bare ok", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Unit: proto.String("sq-km"), Rate: "1"}, true, ""},
 		{"pricing unit vendor ok", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Unit: proto.String("acme:widgets"), Rate: "1"}, true, ""},
@@ -342,6 +362,24 @@ func idempotencyCases() []validationCase {
 // to exercise.
 const exampleExchange = "exchange.example"
 
+// meteredPricing is a PER_UNIT price per token with the given estimate and
+// tolerance (nil leaves either unset).
+func meteredPricing(estimate, toleranceBps *int32) *forav1.Pricing {
+	return &forav1.Pricing{
+		Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Unit: proto.String("tokens"), Currency: "USD", Rate: "0.00002",
+		EstimatedQuantity: estimate, EstimateToleranceBps: toleranceBps,
+	}
+}
+
+// meteredOffer is an offer selling a PER_UNIT term as a publisher pushes it —
+// without an estimate — under the given offer pricing.
+func meteredOffer(pricing *forav1.Pricing) *forav1.Offer {
+	return &forav1.Offer{
+		OfferId: "of_metered", Exchange: exampleExchange, Pricing: pricing,
+		Terms: []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredPricing(nil, nil)}},
+	}
+}
+
 func freePricing() *forav1.Pricing {
 	return &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"}
 }
@@ -433,6 +471,7 @@ var standardRuleIDs = map[string]bool{
 	"repeated.min_items": true,
 	"int64.gte":          true,
 	"int32.gte":          true,
+	"int32.gte_lte":      true,
 	"string.max_len":     true,
 	"string.min_len":     true,
 	"enum.not_in":        true,
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index a760ac0790800a66ef7e8c9ec10f3292c968e8ca..41ca489583939eea6a79ed92cf7c6564a21dabf2 100644
GIT binary patch
delta 52254
zcmagH378Yb);>PzNxD0onM~3N*@h&|zK2C{L1q9E_g&PhepeiaQRllbgENE6_ubzO
zD4-xB%2FVUh=L1<f=d)P6j1~eK~Y>-L_`Ec-~zJye@|6)dcf=V=ka-*Q(g7esZ*y;
zovJ!j`E*~Kt?#uRKGHQ(8Cf{e{i<i<)rI%Z2<5h1?fF<&o-fKhf0O6G-M94oNm+8y
z4@zQ_Vx((tzrCt1Go-4as;+8KrmpI)Vbyh2^#iNw8>)v?G*p?FR#@_*)%L3X*9^Sw
zii-!dvv?_M$guhbtFof5?mnx+8d_Ul-B5jZmBrq#(-ZN;udZfo8}6*G&kU`ruB@)P
zBQvCSP}N|ojLpBx(~3Q^#-q2l{`pUfXF=sd>N8dMR@XPww{7TXHT-p<l6LK=Slc@*
zkQ4B1X`No`ZD+M^&7nByvC6G3?Q)@k9<@X{YUE05JX4h`%>G8iZq~qt+QC(I6*ZMr
z18*BzA2TdhThDpMl8dy2CpO`Vwgne?t_j<D2iRH98(RO6%hhw9d&xy}+_@z~J=eHy
zOnmAxI@&F?OE~C`K!;Y<4IEZe-C&meIT!I@Ro7b;g9q2%Q#Ht{tr>hD`)#Nv*6o&N
zb~`iwxfmA)m*Jnp%ZlneH<X?iH=_C8bQq&5bCq?TEAI1szcpZJrYBzTTHD;)yF9gz
zxSq;&yic9u$`%`iZdEhY7d^@%kK6c0H8ju<dJ7Bew8V1N>YG;(p%tVM)m3OvL%n4)
zow54XNToqLZH2n$&Z-*9W>~jM5#DOm*71U*5!p8NmP{w<*xJ|8s;C)+&PG|M*yYz<
zJ3y$S(O4Jl`UefXYgk21Lv_P_J*lKsaYt26gH=&kSv9l~m)0_7)j{d4iUz|PIxJgP
z3F(7EbrsgIdK9wis)p9qHCXjk4Gn|Q#)>;Cs%tO^Dy+(?>cP-*Yfx1k2Eicf_PW|3
zRF#pJfz`IYs>-@bjD~g{t@>INvqd39cTaW0owdUnpa50YofSRnt(q#NV0>Bw2#JJp
zs!S?tYwCv$Za{qvwYAo5Rh1RPz;JZ~`}}|!$yU}5z3*JBLKFlu6%CE$Xbq|O2bw_Q
zki%IR0juh6>XzFZN%tNY2h?EISKMb<wZzdq)%8{ARI8@8rqiiysHv(N1jcKvs;smj
z8N&eo=s{9(TMg=l4X)~lY$Q7=6HBDk)<E`kFeg<#@ong^+Xh$HqelFN|3O!5J>cS~
zw``dK+3sx%mZ8e2AAM3^Syz3VY%I)M?XbE^-meCPaGzCIJqR+Wv96I{`qwnn-IpJ5
zj_!y~BW!6WhmaQCR$Vg)Y(bexNch<QUg%BD9aWXk-rE1Js)UABaAr{lglLNZVhI?!
z98fOPz0l)s*C<6X-7k6EHyOcvo<h^}vd8_0%XnNd+-_AVFx|P_H~*uCU7d0sMK_8K
z52XSs=kW$@vXIDd6Qe&bgO5vC;-Bh;{g!wXL*{XLkm~W-MO>80V@B<-Kv?2Qlp6C?
z4gtnic$7$jskvwVslMULT36OI(&RtQ5@ek$Qbo%dq|~u;zHkPJBWN+itGT+8M0sgv
zus}V;$mGK?i+-)G;p5uD!W=@~#0Rsm7SLa5@~sMVR9#ht9HhM88jnpH@E9{F&&S1I
zPmWw+t!%|@wRcyw<0j7Tdb{VzBG}{4wu=NTN3yN3r`lzUb2O|*Xwe|(iRf8H<&yW>
zB)VyZ#|S2D8vV3_db%_3CQz%`#DA$>JFW640hy-|Wmb8DmQ7M7Pm7jDUtYv*x<6z4
z{-yTo^_im_Zq)jj$Cr{t+(7uulWuF1K={nlp`&pIM}Q)&Wka)SkFvE6f(Hm|J-(K*
zhzAI3J*_(1BoNkmx}9M>@8S^1{1w}pRp<Bl%7IWR)#EFbWmG_X<!Ndos(|>))26NQ
zqL)Kp%G%*ke$9P4TwUPK;!k^QXehVC85<hP?I4Mj@R6hGR4($Xr_eBI&?%b!px1Az
zzj)lcJrK0vwbM{;Ct8JU`6Si!?DDAZxs2~qoCn=>FH)6g;?vyWQR<B)84xxXI=EP*
zdQI6F9cYWxCJ|$u5P;Wozs|Cg)h{!zJ7v5m^SbJ7D$96L=5;mQ%$P1rfnmDe&W)I&
zCS7H3tNC$lpgZ1H^W)k8#@njdOkx<ocw24R+IUvf>oeW&v+tPteA)XBgbxt!I}koV
zysw(J{`dg#zS^Rd@s`dTU1Yk~=iZ;HmbuH;I~Yaiy!C2cgNlH$UQKt9Y!m@wy_)G_
zyyxZ^#in~}?%bJbU!`oTgHa5Ot!iF}ih;3J&FfGxFt)1Qx*PjNQ~c;x_U4o7fwCPA
zgdY$)RG-be9}qj#W@kt?{D9b@o_V%$QdqeX(|s(rbGACXu<tPkqXZboRG-~-CBQhQ
zhHSMg0md;kWf>a`-jsl;PSO;n<>o)5Uhm1`Z+j>QfHO(+MP%gx;7rn@cJBs&Gf6}5
z3cU<KFDGfunN}!uFaW(YQDm~_?%X&DmU#*#rFrc^)BS{|G*1LEAvILh)U&}GwG#H|
z3#!@~=`mS#5I9e0al7gus(ym1J}D$=n(o;edwHXF<a`zIMCBV{LN{h>dG#WWW^1Nx
zC`=&D)|$02rg#m-jUoA#R`7JrwLqQh4!ou5F=G<dpwTS0l+AltoziQm4UI%VFSVgT
z0(z-tra8|b0lidf-om(uBjDpQcJCtflCotE0?ld590Z!vmT6`aiQodlGA$N2MhYg-
zw2#>zi`3D*K6W4!Kz!^#D1i7_Geu`>iUNp_wN%=;kTU^lC3}CddU4rG2cZxMD;)%~
zzAH6T^tz@LQW-6tFrM~s2uSza+=Z{GbCq7-Iv8$XeCuG4{r%RKvZlC!@vYXZxiOSO
zAnzvD_I0(cY?FiFp;QNf?C&PcOiEFBfUrrkni&si90HoTH~01H>e#|Qdo?92bCJc}
zt2Gg3UsK59?$u!SX=VZmYqwYH^f&Il5c!}tfE4!B5;YXrs|~o$cvv)1Gu^{=rDbB3
zoB5__&2zh#s8vcilElE!6b-x%*QHK@M76{9e8-c)9<HO~-zwz1qS~=~?$LMDw_W99
z9S|LD7_0m2&L(?1R*wj~rzvD_$LcLx8LI>c?Cm5yH|9NcwX1BB1L6fIlN?US08i4T
zc54b5;7K~Pd%jR07~pB_@%Pmi%ceOHWPhhQ5M+O+>1Hb_G_t?b^tSE!aMcu;-x)fq
z*r+9XfItgo=yH&PM9CSt9Hbyoa)xdXQcZ!`oui9E3Ib|0$Kjy}Jj`);Amcm7X$BeJ
zIn<0%ehgCBnPqyxzMTG{>ed3wbiLGALi3AGgY=VJ(^YCOSNBhJIgue1V4vvH)dUH!
zPjpPDPmy4C8ZT>gC6su)kPUrWkL8|Ot&VbKkR&ETWZ*fxel8G@D8E(@n#N3$sjgs9
zu4gxVraqZjuPb8MArWQP>rLCpGBgU;>+L%j<3t&d->{Zz)bW{boO)>7eWQDeWEmQF
z-{>U)V=`&Hu0UWra$DA@tg!nITjoebp&fc$*c^~3w1ZS{g=ieax>v{i{$?TT`n(p)
zE&D=U;OdMdyKywk_Udw$*A*IOdv(n6Z-ouTqnPSkZ^84qS?krFhB+6yW^^>%9)$!w
z&#Sa#@BgZ{VkKKtH4Ty*XZi?<%=3bWwP-A8)bK3pzD4~a{j66Ah!T<MS;{mHjDiOF
zT(0#G>Ufv+oLAw^p;StyTyMC+PNAv3>Mb~!`*N##mJ)c?>j@k0QWb^7&ugsoCv|D_
z*Srch?UabZuX$l~CW=fhQ+?B`e9KP!q&}X-U%ao7k63xr3loWXj7U`Trq}w`TS#_-
zCww^?Vp-yKpFz_YPgyq_y9@5Oyl$&;5?cDU*WIFV60qO#x?43)0@l0P)6&qn@12%}
zu3LH<7>3*XUU&1xU@%o5c->taC&An-JB=|Ij}N`>HcqbWXn2qA<z9DNCv9{g2KPr^
zck9MU7_=Xs#u!|m6{qEbC-ccE_@fKqnXEjGeHhzSUUy4^&)QPN^uOBcZq~R;Oy-}S
zh983aei~TVbgwy07EMg|=clzOg0b2dem(EEFT7cI_k5K|L&tsTb)VBX2_3iID;yWj
zD{`UZzVf=yZJZ1J_H|?NBNzH@!)XQ4Z{K)P<6NPL7*_60UgbyT|3!T!i@(IkDdg(D
z$(y#MCc<i{o4n0_%xj`j$Te{@VF^uC3WX+a@w!uulhB|ayzX@4Bs6F%sYMSyVgS9}
ztL*o>S=XIvw=Dj)nJ7fY?G6)YHF7rFpJ$>_F!8h3ossZ`l8GIT3h*Q_@r$E7JPFu4
zPs;_V?i%8CcW4X-vF>(yl9z;7e{Ec)=*i!_?lbcRMMv)Sy2~0Tp~`(;cW<K~Z#R$+
zuq$_|{nH1$V&X#Yx{>FAx3sBoHLQ%=R1bR#PO?{asaKhYy`BKKd2X^XM_`$_&1(q~
ztpm-MwH}awIO0vF3=7q`$>tqpx9nD%r;d6RKEqQY@*Jf+@O(jnI>u)0R-2`cd4&f<
ziIhrtn(;gk&T+PJx7s3g+^cYp40))Bj#HjaJP(?5f~9^{J6k6l9BR@D%5y%N<T2F|
zM!^_^4f$0)FEGOJgm{}g)Ta9l_TH~*r}X`X!hJ0dQc?DPqg89;GT?itEe{yXw@1A^
z{eY8+8uI{Ux{7B4HPT@B>`|{yk2ItS7G`}UWy<nQXw4{t{k%sVo*v~OQFBI7rgEMM
z%^7X5(Z8v^)1wWgIn9P(g4#2hGM&jYK^q=4*tXx)v(gV5vL8J(VIdir&f}Rd>>e^$
z&%J6t>mfto8%02(1;Rs=i6o<%>Num|af8j=3(1T#JP|G#zH9Y}!G7Bd$vk2xd^P4l
zD#|`$U><LY3RIHJc!Qn0Pi>VRZ^-!ssmL^*GSNs=sY4$%SazR!X8KV>;hO=J%9D}l
zT%HM%nP9Ll_o=<o6AXpB4ah{2nLtRrcqT~ZF@ts9ua>1Bvn8W)$vj4x{s!O3YpRot
zf>rF{{pt;^CL4MQ#8>F{VqG)MP-Yr#W2Xzd<6gNtPH9a0xB5%>Ck%Ic?iPzrsCT*n
zdq_KfA_WZ2pp?VpA$v)27UWtUP>(8Q3k>NNBNg4Uz>sb+NXTb_Ay+dXfw92AYUXE{
zL15tPB6jod>My+(IS{lUTI4{G@3qJ<g@2DCfLLTiV|+>FB^kcTh96ch>Gi6EK<lAb
z9R#Z8RYR_3Py`6C8d%L-&v^iqW9kw0Z+&tOLLm@xhL2?D0iQHG<cvVvCaH|kG-<p?
zewi13nYzMIR_10MQQs}R4S$M70zLp{g~JGWYAXy=EMf5#Fe?mU>j?#3?FysWN<*xk
zDFM4W(BMxD_YmX#67;QMs(XxrmvZl(P?u`0_ZWJJcP>sv)cbwPXrJ4d>qX}pvU7P_
z?ir8vw7bUxKKL%wnc^elHqz(r-zWvljPkkr7|+wTf<fIo(U<$Dp|vl}PV^~a%N5CJ
z!bG2xB}kN-=z}atP9WiUO!SrBBw#`E<<&%A(;LYg^9)Eq-4lK1T#8L8XrsvF=G9$)
zgYhuA@dkQKo#s<!`P_-4E-Tl{uen`!AVJ6#pCQ+2KB;9O!PGRLT=0SfQ`3CHn<Fg9
zb(+tb<r8wH1nf$Hi6?ySE=I_J)I^fokHqP0LWve`GsA~j{*-U%h?ze36__B1K}_IJ
z`ILEVRf%?07Ju2Ck?K9=a7L>4lu!0JN`bSde6q(ug0rW5&F1AfQzU0|9L{(W=j>^p
zyQgGHCIaml@Y(FtR4_W180AY(gQ{GZdn=&5<LbQ7r>L^0NTV0}G@;<gM7exs$au66
zYUVT5H+%(~bI+REcvt8RpI&VINSf}0R;Vj|%2&CI!rIotEdCUW2z&tEN}pHYfdt-4
z!lR8LkZ9;iU-&CDlvI!sz95HsmCxOgYX+sP<&N2EpKz6VCL{s(Q=f3C?IiTlXFfPP
zS<)$45@2h5!m+fIU@JfO!KO9Jh0a;)6Artb3({IgV2yIYq5i_>PUe#^3IYFRV_x~d
z47%6*aPBdcY?+UG`dfBRTzlfmZ+(i!#f(HsCHc|#012FLeE~6;Kw`Lj>od9gLSNDQ
zd=teN>S2^|P&9QDYo5@0_u1rAY!s?$lg}?KqK_-pCLb)Kr~^ucukrJxq)Aoab#G!%
zCA5&a$=9c^@gVha5w?(h1tW@bA0@O=u9iD|I_(t}x{F{-cKVb(7!_B+loUx*LP@N)
zsdi=eT|W0&99w(>hr505YauLMX2$8yuRixnE~5>aP(+4gAKTwlYj@i|pWNO@BAT$z
z7Ze*GAR(81KFkZ$1dwRLK3_suCn9+h_W4TB=Qcy8kj>cV>wBJ&;q?IV0Q-MQtxM$r
zpF(z#kVyUqd||OB2Z?$PkY$ixQO^ONb*X3$mp?>xz}M^&Sr7F{fa*EmyYM381zJ!S
z(UfyM7f5LfTxG}Yfsa%u(s7^Ma0Q8qkNZMm4;LgVKJLT$1-u|YfEr%Jj-<8W{e~Aw
z+ksT5=kOwF)j$Gbc#$dk6(lbN5B1YxbYC$nM^VB3#jeD=#ksdF?P_<n@2Lll*5!R~
zwCWq^U`ZZZ<_`)_J;f0xQ29eA!=itGag0o7nAJ5_+d);gSKv6;>e{7MyL0IbwYDLP
z!yrqX?bA_ZB}H2Ztm+1SEbN?m;v~Il@a=TUDvu{AlE68~5~r;)g&(Hkl#Bk+VU)FX
z_#~Wa|G7~C=Tt63**me>t+jB@YNZWuwR);ZPL;(_?`MjX=Zf6MljH{#OZ}!aHm$Wb
z>yo)e?rvNm#3%IjydwAIT)#yM^!wQ&_d_l|TnO*&B4sJ??l){a%wCk18_`B{d3wB4
zgf%3YJzkt#!*`2d$!Wld6ac<g<R0ZR){rGBrV+E8<vMC>do8z>1BuYD<wa7zKtef|
z7lp*c3lhq)ya>L2caDIME7*sfv@<JL6e+?c7xS^OqDVS1AW>vR5u6wr3m`ETRurW!
z7M$8+VMS5;B0d%<gB%Mhiuzw*Or(Q@Vj2q@bAQihO*{iPI=s?Y*jOYF4Uh@!Y%Gel
zkTsF^Z!BspHpcK36>ltRdmT5oM2g9IV^O;S#!2!9imAZ1+}bm=;jUY@Ikgm`mTg5o
zabk!}sAXGGP#gw>q(VhF3>M8RL@nEjnqDGnDU`KrD@tB${GC^V>0$?asfRXj;0~t_
zI#b+HBsXY_#a3I9+@J-CI(8IcgI3f52M%QG0kRHq-^k6_QPk#IV*=TZV)735=7yZ9
zJ?^??uTu-1JMMM*mT$;8eakoGsBc9r9@Mh8C@qX55K&8<Qmpfhwd9!>lk`vK{(iRh
zg);D@Q;CYYPukW6nINu{wsirCrkpH-brF@&KKaR_<fXDHv`<b=Ia!pt#JG-Ef=O~j
zF?;k}?fUW&#nOZo^Ih=~#nOa<L?t7NrTYUCm5eBc`}2$n6NUrJiNysAaxHpkEeZn@
zi?LGq7oh#5|5J+D^}V%h=PAX~!$2yqrWDJ)QINozQjEP(KK=Sh$EFuEcOPw9r|C{1
zvj5YIy<$2*CKQ@p9Es9u3KgM6v)IZ$T6wQob`y{YIn64TY6TJqvx<Y_C<G)BW);KX
zrDJ42QM1|keYGCFW;+OE$7eeTq?ogdrDCE8l_`c|_TdOnyQkS}eYNw-o^}w(3wYW=
zpmoF3#X&JW`nlRYU5t^tfrf{l7@nW&ex7!dtKWPFgAP;X+g*W7z?few9e0r6Vm`Iw
z2ki2?OH6f3altCTE3qz|TiZ{2)Rpa+H`k}m78E0MdH(_Zujzljb#4Cv11{@-dH*X0
zP=rlB+=W7+5ZjXvpX!M?A0iPZP<IC+fDmD3QG}U+a0x^O4XGNGkCd|P=%;M{8<qS=
zP3=91$3e82RdG9J0mL{VsAs^Pb(jZgh7Gx`st$22ji(R<A2}gcw^!ebpcljx{fEGe
zN(8x7*487GPsVB)A}Xdm!eRg-;*IL7@2IJ07=~bsN(4~U)l>W%rYqD=!BOl)T90Ot
zwNWSrF->7*)IbWoK{O4bDTeff@GPspRhAd7GilKThbay*7k02kM+;N!tt6>i&$X`U
zfAw`2lhDyj#68(_t0-kz?6;*_5!-vOTkU#kloK_}j$jdiT~|^dWjkWz8Zd&$6Xv?t
z-K2_Y7Cl#cJ1VJ?HB-I;jTk;v8wA67-@)#KQ(ACaMLnc3w6?mYp`QJ)R7-F+??5g6
z&xHfgrHj>;+z5(G5>5c0=DFuW;aN3R5L({`3bo>~G{RjuH7>3{1;kxLku@T6jM`E$
zq;^<MgTWp<tVI!ECIdhz-tTsV?m4PZ-B2|o-}|x@b%Rs{=z&!+4AE|N)&EmfpRsPR
zxjZGzjv@)~uBw-=6yi1OD=HhR(N!Y;F6*eLh|9w$xQ@c~GWH0_hy7Xo^09i<3K^}(
z^~R3ev&V>KU5$?6ZHEL&kR2?9ymsb7?ZS(60^HUy&t$FsBAieRLDJ5CTx2wE^KiFS
zA*%Bf4QxDWAvMwkOAMuZDui;2(OW|r$>mBs+r2N`FfiCFE7-8E{wpr}aYHbai%j~M
zgybkzH6%#?Y#V}+ar>~rgJl){5J&qb?5lYTdDmt|tM09=s;{@&LL?78Ze87uf2Ss1
z)c>;ciF;ASpz8Xe!x~^;F6LHCw9T#;s!)q?<LXM70EB2FED-)MLZ>LQ3f)0!2*gu)
z9afV?2xh${f#LMl*A5=W+X_)th_JzWsl2>S3a%wX+aE#BcUKIC1sQyw&@HC}hg8?J
z?bk8i3~9a)k~J7Xpj`JkBSR|gZQBLb{FFv#z$!WEw^doU*9lFn7;LpA!_>70f=ao#
zY#%@035InCDLL1=u4iU?Aj;6LwW1CS0~ns_N|I;Qy}(2;V<jT92ls@z%EDg3m_e-c
zxuV7Z(NJ{<bcPQ_nG>s(ItbH2<pzIH_1)F=G?Y;Cw)=!`^O#huI_ev$h8k8K2Kpcj
z&Aj-D{kkf2s0ec$Qi}l3MkC&~Bv_-=kO*YoA~I4&wN}_&C0KF7`=ne^OxT~>h7G!-
zilQd-(Y5tMt0*R~vSKLp-vH<^4fre~ak*`>!*S6T(r+@e+zwnLqID5{*~oTOh^SwT
zQAB^rkXK=$@3|8}ry`BC4`^3ib8)|muefj^pPK29E3UkvKSFbPfNNcr!*i*TxiFxl
zd4+Z?E8*N;T~jeQV_nO`hI!N|#UDy;Y2u(s5p!{Vb~UWFd_u7U;oI>A8a0l`LRQ^d
zRXMC7YYVxae<iIE!>Yo9dJhxbBrGGzj)!GKem?9+P~_4U@(pQoq6Dk0pNo}U#aO)+
zVzpHwS8pOM@o=HludcSfzSHg1Gzy?j!zwXtR}5wg`fGP}JeP*0ZJbV<$Ivm>)(0QY
zJ25PIf%a2&M=?%EY3U{^g1`7nF;1JD6nIfPi`}>6ncH2g>;-c{n>VZkWm3Kjxum}q
zV-w0r0q&k+>^C|o!2PY*oz3Qf4;Cv&06bE$k+A_O(h_@JFyi?^YTd?116MDhZM+vT
z+d5MoS0b(rQ0*aAn5}F>#=WQt>w;_g_s7u8S{Gc_cK~TAGy*#bT-Ug9z{rBK&^QoN
zBb2bJt`374?gZ@vK-uxlfCAPH;kK{pUT8MLr0tPIS|#D`sU3#S5<^MO&64q(xa)*D
z-H_^XXT?yAuX?CPUR30tA3CK|$gTgq*nL@}JP_yMV)sy^9sK1IT3;Mzk6fsA7<9Z?
z5iuP|1kUl|60xZU5=D*|%S|<qSPva9mYZrs@*Sz;#fg4=bu3e8r|5VwcGyOcV_rh6
zjqvB1UZg3m$`O9Kl0h<0_loU2kf>^eUv3J5L{%gF=KteMFCxVuzzBcnn#M`I(13r^
z;Sp*=lSlg5h>Nveokuzq5d$OrGVBGJP-dhbVJ|ZTd)Rjv>(A}JSWCLHWBqasSHicU
z#`@(N4kSRv`sL<2NPvv>V++lXZ3B=xfmjc_ByY5^rZbDN{${sAG+v&CZ=fREZDU==
z!?clHLZK|v{Yu-!an<UN=zDg5x!%HSwH4lOJ2wAPtv2iUyr(#^wga5EiNZ;zeIck9
zH%9PL$Uu^wlakTQ&Yem!l=5m&V_(>w>id(!O{R<MU$#ovKg9ow`CUeC{|DDo-o<F-
zquLXrZEpD7;zWI)W__?ikum?akB9xY?Ei6(1Afm9a<ak@c1E@kg*5wewxURWK9fK^
zu)DRkPst4c&BdZYm@u)bq6l>|$M6BNgDWckLCcuTY1b#j95kpFndw>t-J{?(0u$bq
z7~j@qSpH$zGk|vM{(LV&_%V68pi64G-$$MT+LFHlVF;%!e+i<oWuZR8EJ1e{sE@=n
z-MA`pZukm<AZu}ZiW|27ziSides~lWgV5j_t3SKrD?JR)0XwMw@v4rrRe6Qt8df!g
zmVLA#N|U8@iOHdYFkrT5cLmBXv_DT`r9Ry+cO38)18%xMD7MQYpfTd6`>|g}=anUV
zd&18uF4J!4JIfigwA!ELV9;uRmOm(>AW;Sov;2sHoJOI`CD<WSpZ6=T`g2Dv)1pci
zf7`s!F46PO;HO=p=lycm0Of%5ydS#;bgTms$2!mZOJDViV;xH1$2u?g<*^Q>h-01k
zei4eoONnEh`TpkR+-hWHHW;z_{yub(gv<sniTW1!<xz}Gg6tOfoAVGHI~RCf;O}#D
z<AN|jFP>H<cC23XH|K#Nc0rih7yW&*r<6pX)Iz^J5Rz3QPU@x8xImoLOaA5;HLenI
zQZM^OXqJtSIH{NYEl;TuaZ)e)`-t;U3EvZeQi~enb9?Dt+*pdjs=nfP-)viNG-ruF
z_wiM*-h-An9jKw@OZ+~uF<ioT;FkDHg))JJK$nm%{X(a_CA9at(yvq`zE!OO`CBJs
zVC9V{XM3U}>wAVLoTZUxf9xq%@3h>(0=}cwg?s{9u-o=@z$y0hbaP5(<&;G<H`>mo
zkh3ratXvf03XQn#=`coXuK%$71uuY-J5F-7h%06__cdOyaXV+5T-3rBPqaN?FV*s%
zs>I5|)Sa>fBrm`3ZG4XhYp48XhB)vLZYXev!irVF3Uz`LRQV5J(3Lt!`QD*}F+(*#
zax{C@)MA>ld*RP!l0=`indPS-4HftCRV5rVthe|@zUGumuH2eqmN>7`=F6$hnY})f
ztFHW=JOU6-IT){?GS#&m;ef%?V<A;jg@q_d1?<~vxPMet(Y4S9vF^)Q=aC0Wf}-;w
zDH75T_=7h4a7P>Np<Tkp`b0OA8eJ@f-A4U+^U7zPEWa^_JCE|JuB{HveER2$to-s5
zVK=&>$E`Z?oZmJS{sAq9=<=RuBQcl1D8-j0bcG8I&0l!}k78>NIC6Dlvu0aV9R>?y
zEKkB%t#k}Eg?z8{2gP9s#v{h(N`HG1t`3rq&rY`rR~BR$?zB>l%s^>*bog7e-@MX)
zne86(B%W))Eym-BRq$Zd^rgSx8-K3FHCjMv@}=JsG?wA4$-^%-toJKc^H-VmliHLG
z8lXLsMuG^8#b?;$_2li{%5#I+ul%gdby`KMulzD#4bCkxeMOmgC@wA>AR>}5Uvjbe
z*J&4LGuGu|^~(K!F)_+T9{C6Mb!@vYouMsyq0uVl_FB>pu^Od2n4}_C302_oMT5xa
zMeY35lt{%4f(COqPzMdUZ1A)6^;&te4NeOv%4!2;`ZtLSv)VR)!47}!U)O7QDS>T%
zL>b?L(mcBSCqMh+Z`wfXC%?k?<0%!Tf1=s-Ig%+4C*SU8|GH6o-rDY$L1#!suI-d-
zxX1<aXFt2}CT&Fd&+vrFH9%Ps-p`b)2#g?<Yp1{9px;F+VGjlN@AM;ZuNt-R_^Vxh
zrFrw4S?4>{1ha0|E=wUnMDXD=fOh$DTjFA#8)biGV{g_jP5){O2eDMh^Q#|+J`WH}
zJeX=PJ8-i$D!tb)1Ne}LOnd!^q5e^1f&>q+ssE+@)a-z*CkT*2rUN9vXDB=$*NLW;
z6g(El&HB66TnkSt(Sycv@;m}qd#Q6ulxIqEUk=jxDOvn2B1rHBEY2zM`nZn-67|d}
z@t1H{10*_SPD$XI65(o40;WV9i<G!~@u477z{k@iEjl$$0?^YXozFGa1vv*;l7C#H
ztS)gU-Vd^hZr)Vx)jPC>dKQT`E3`oSxI_lC1o#5&;}RLn0urozToPUlR_OK}B@ip>
ziW2v#5^?)ZrlICfa1o2IgJcqJ->od6+jq2X3y^HrlqmfZoh<glQ0=Tr5aPHNpTNYL
zl7Lu{f&|!_61gA+3CpmiL@r2)<O|X@C2~P3Q)ofDrUVPp3wUjS_@adU?_Ju3WnYv?
zixlANy)R1SdJiP({h~y=d?0xtxO{I2@xhuM%l&bewnV@6n1ewFR>vF+a$%2^$k2rV
z_h65e$iqdD;Qd&MJX|DF94;O!!QtW#p(cQPFp!J?uU4&;Js8NdN(ZG62IO&UfS+kS
z7>I}<3y@&-!2p6R=vrBTjzPx;#61-doRarcK!U-s0eMdaBub7A*!NTd3Vf>x0dY?S
z1e!d-;ejsxObFz~MMs<y0`j^IG6QKs0QXcb!}vwG-lRam>;Stot6gGF3dqY7h<U@6
zxPa1(2NJge2@KF8{2C;*VsZe-q~~K)A~wx*vjE$d)%vGdKt=!~6`5E7{US1fnigQ!
z4M(PF0cpMwV8)X%EHB|m;B9(<y*V6KV0u8BNW^|2)ARs(2TFqK(At>+)?$QqVR~jj
z1~(%WnPvuX2rZBxgC_%Q%n0pL>&bvLglI4_JsH5k<h&3{1TiE61%KoYjL_zK11oSj
z(6|&G6QtI!46x@P)-KDe49G!;RJ3ztz$*?pL4w(pgmoh?gO8trt8v;*oj-NT&_Mk(
z;1yv+K|WAF4Iqr@F_<b;1a{U2*n)A|<7I2@4n!)LUu$<DNMNiDNL>Yqde@RPuHg`%
zz6`MceMGyq^OsVt0H!hWWuR$mZmU4@T<zL((~i#&;f4S^@d!-&2B%&cBO3y8nTJfk
z*btC6oIwI(11aw#v^f(bCN~9gZ;#jfuJTO|2)`odfY3T`Qy?gUI8X>6n*uQU{I+e7
zhQPK!PM@GPb(L*%Kxi;*3;4vM0J#9NEzq)yYz+;DZGkg-a1#}zvG6m7(PLV#%+Jto
znTgc?=YR}sLnf5@Ie<N^2F^SN_^tq3^_Vs+v&-o%@^yAOy+yvxF6yl}MQ>r@wU^aA
zuDw;Z*I|_|x9xR0i{`++0eP)A$S=3;C86<~!9fKJwS(;TiQ4mJ2OS8y+;-4`pv!Fs
zo&KiFZ3hFTNp3WPbh+)YG#Vfvr^9lfpiAg-+hN;ifJDi|d7}}e%WWrx(dZ8XI&jkA
zfiAb5ba<f4Z6|G`fy_WUNk)U;aYFRv!@+`S!Q3~KwKJ8#!$D68#awt0>1evg1zCEk
zcD*$&C`TPqq2}X)7%6lw9l3!0Xpl{ws=Z)68k9E=kcwQ71|jY5L@tmMgKXe5?R#rt
zP{hljEDf27K?F!(Lyxe)*pwi<`3Y@YdWwTZ7Gnxwkx%6#b)On!>U8*2Q-jhgL@F{(
z4PwGNh;Ty>!VRAZ7Ay+ps-|oIb_JgadZNa5ssq7%h*u4=>Y3Wl*4&`NFF#T$iq8!q
zwq~Blg;qTmWJ70Z&sxs~rKv<fA96hxgsJ>o<N~=M$j*9FTWc){N?!=kcRU%xVwK2+
zR=pf#ZD(t%o4p*ACJq61$n|m%Chp%9YHgb8x?sUK!CaH4w0&A+T~Lo2PoucoB!<@q
zmA;8dF1GnK?Ob-l^V*=RkRsd%d<U=VgYrThNL05zhzoVJ`2!MzV|_5%hr1|5!g)Z=
z>w~f0#yK1x#Ww_*?**-A_YDpz*}4rud9mK)wr&Hp{5=Zb2q6I6EO^9pC0-7*K27x)
zYyXrMV2hv9BDvfP+A(kNep62wE2se>YQSidEqhh_<jT>exM@eJs9>~diKPfguszzu
zr2=9bB-kEpcD#l!MTq2KN2AS7SL4<Jfui&nlYRG^cH>oJOeqVb@?<FskN_QHN?Cve
z=onMVf=D5YF{YG7h<a|ENwVmECJ2n8aSk?BInI<4!B=39Ga-?OD84m}xz{XUW^T{x
z+GtmHlBqX`PwjSxsr8dhr7v$6C}4sVeFqYllTFDlNMKI3`2`7nC)@lIDfpdC{0eXs
zpJFO~Bsj&XgVc@7Nr+)CjVY$wkOv9$DJC}L<yW9jF(bXXX5gztpJGPKjXf^3sfnr1
zGz(rbS)Vtx-Qk(0-pUwG{!$aPNu6sd&zZSCOSF@&EdCbjO?-h3n``<+j2cKVIM-|~
zdKDx%m}_P_b1xetT-&*3m*-3oDo+XU%}`{XDel2hRg{EodDg_8!vVZ@WSDO%iNpog
zHF%b*s-C^`wsuJdNkXbkc)RDDa-If>TIZXvAEY@=sE=PXS&w(L8?!GuWvF*wG^Ia)
zOepiB2`fi(ZbH;TQw(sTAZL(vbu>LMG`%8n7GHU0OzCTV5Ml&wiCOS9hRO#%t1msT
z)R*s$(;HiC;Io>R3%{$q>Itr(0Ympj-4RlmRVMppnKmi2%B}{fsAiR|D<DzLD$<o3
zco}^B%w*F))c)4_Gp7uVhtF(DM7ShABT4X^#1Rt3I+HbDuFdMa&M8EqSZ9j@nNZO>
z5(N)^ixByh$$nd|P3!)ZQ;3A{l`RBh;<+G%)igSyrn=cIm>hB?<|*v1lp4-`{*kuW
z72Is<31c=jI!cY+ZnD|es?%BK6HPsHyN!)cz}{}kSUixx-fkim?_+vhBMNra!=`f7
zbSGZd*<~HP=jP@Dz@0^+=ptkR!eN^`kU%(Wf;-w+1_?bpY$lIF59y$f5@?C#K4Qw%
zo=kzbj+k<_CzAkl#Kdava?S}doFL8YO`6Htf2Li~8MIhqM!D;E!YmTw4<yQ-pw5_0
z!J1JbM}=}vex^O;x^+}YjwmE!M2!l`9afNN$*54NScHJ&rQnj#m<EY4Ju1{n?9C7<
z#?z=!>#L1-$kU6`^!acoH~Vv~+*S6lQw@clJ{<Ci#{iHE)jS+(-c#a|yZCUZtem?o
zQ8J9<Lt?E10wu?X<XQ(LN{$c7wGK#>93QgRI#KcwCxygX2Lzaz<nTbJ0h2;<t%I*X
zniP_29gskp6oT7wBQz>zs#8M+b3^ReFSHwiQ$v_8xhESVJ(?NHm3#?L_Ntj7=|LhH
zU^7F~g9Hh%nIU-!3KDXg88Xl2{ZAyHZf1r;XBoRmY%v-W&xCSA)@wsty`QmJMl#y-
zjNLmRdA3qv??9rKXF{-db7>UBO?6?Y;L}hp{<ZeBE4VO(cLccd$BF4hA+G#AKtK$O
zLQ;1@0&`JFYClL|E($^WG4HtDaboO^P;TZo+89^n4W|@w@<vF`R>*}?Z%{Xo360ah
ze=EcWe5YMk_Lkikq@pozh2%>xAOZ1KsF_%HfCR)_p>`dNE*t{XyCJsyJFRQ^yAA|t
z>$@R&lP%7*_1#cF91noxg_3FGGaB=8(#2&VcHQ^dnzCgM2C3pQhYeE2Wg+<>4axvx
zS?J8Oxhlp<6+hytXm$R`Rzjqr%ty8of<&2*@=6$|cCO}1_($K>PQ9dlt8Mi|CSa_#
z)ej^vR+IYOjIK<W>gS<?N5Zbe<rMK3Vd`eBPvG;Ap5)R=P=~GyvFkT$UAwKbI|ZqL
zTo;lPGDtwK3t>VgM=U|&ULR7LCOWX-N-f2{-mJwsBSF|OeCFT1BH|n*3a<|#u$Q(0
zQ5s$PO^BtoXwPT9aS9RWHz663j7%u>O$ZJ*Zi=D|sP9AU;1=!7?Dw`DkP10`Z_5EB
zAifXDMG#0{2o`5E4U7c!;g2CDkoa7&`cc>;ooDc;%_!0_V_m>QuIzZCMvtJ;XPFT@
zthml$hmm0$+&(0(;8Ug8+qc80L`<K({r%@%Tsokk19EvPB#shjYn{g$$uk-e{n_Z&
zNtRwOl>5Es@?!!KAC!O5kaKlPxD*a35EExdRCcrv8+e=_G0@Svvvx3#I>9jz4l8&x
zporY#VD{kzKLEN?L;;@q7NR`Cg^Z!F5VE*U2NFH<V@MP83P|+Gk0I<`(j~40jfm|b
zw&Vw`ynMUUskD;c?sO^*knJJ)<`v2SVtWY7pS?nvP~WZ)J9DeHuWXltK@0g^_TWzN
z0kSI;5FR{8VC)LvFadiuU;_*JJs~#eNA1$GJq`q&7w!r9Y$c|3{hm-vxQi$Qh&`dU
z?SxrO(5~Ztw);nIPOtqA1ifOj-!{3(1Bm^h(yn}_0ttxyq3&nOafns^LAG+6)~)QI
zgWv_i!H|43E1}RT|6oWyngtRF2Sa#x?O`&o30mbJ&z<v=_K2(3aR-Bz`Nti3(lY;e
z$Q1K1$^heds7*WLYz~2C{vS;FS?ihk14Bh}O6&VSLUKnY!PobHgfOne(8Tio{xJLR
zpS3f~?+;67AfeEcVfTmSlVKnMaep{1-s%F0TJI0TG=4^IdP2c@@VIbp)6d$KO7C$F
z2)!9LE-XC?<O0aJa4Em{PK5w6F5Ie(F`nkEQmkvj1@ptX!8^5auJEKVCR$qjx=Uf=
z)Tv=*W|$T2);`PPPhqI=0f1A((#nAZ;M6dz964Jc;cQI}M`nh_el{hLv!zZ8yJv*O
zezr_QxhKMMKU*eYKYMzZ_OmBa3roqm%?m4+B}V3M{1s<SSr9fCWG?50W!MvP0&QMc
zPWT|9TJyrDxQj<5clhRoL*mMgOo2_E7w#r@{ACh{DZkj5BZPn)FNE=!*hCjaU$Py)
zX-||RK`e(#`HcEPSYAy637%dEN5%dbNPxW%#zsL`NV=)1E({mE5@t*HYMlcM!+H_F
zDby5l_F$F$$6oE0%9ritAr(+BhvlIGNI<<D#-RcEfgsVmm&4&KU)vFh=AqYL4mT0k
zg=7*hbp5}K7=+oBm|KME_i6FWBBvsf<088^kqKoMQE$?m)fBUiXK|Qm`?a3g#dfoi
ziovlsEFC$JfLI)sF<l@5u{exvVv6YkiI}d%VLPUaXu<5_u#D-FNr)d?9HyAAHBd|s
zZX~`FF4%_|cxj<^epO9%Zs~sQLs#&fFism8I>*Crw!Ir>lMiT9t#`w6ml~<)vv;Zb
z{UR5bdoRo`KdAjX{a#o;yny>>$n{<r!?6R00<|>E1|HHnrk950n+mu+#*^{DVl$oz
z?Rr1VUO1#Rx84uSO(R?lL#Fq`*eIYdJ#d8y^Mi11_aU5QS|5ZJzAZ}0$o4@Pu@d_P
zTM*&0F!LYQ_NSMHm3Gvz$VGeJ%fcNy@dqdP-K!77EPX`lm;Nv;H?xq6Odp0}&71QI
zVTqTA*@z=ri}doa+@-?pC}dhr%7?2(0EWVR6lTkgXx-BvIY>G(eMCt8cqUlWkHai-
zR69TYaabPN6)Rq3`Z$auyZd-1*vl1RcHdF$f2<W48j^7XnO2Zl`4l4;^}!_K@=xfP
zc7@V=os-RnZ0jhSXfADft_!z47pkICA@W7mh1>NsW(yQp$?w9s*(bDSO8PrTmPJ7M
zF5J2;f8e8-?BMrdw&f44cl!IV!Y3Pm6(iI4VZ1X&uYe#j6ZZnclgstq>5UE$ZIx{#
zAbOajSV82>rtst$`sL|OVfkhT5|L+981o)&PZle<(z`j#beCS9-s}L;D+HSf2>blV
zghz<BgjtnKzt-B~AO(?W3n9ITn{~*AcZqg}a~oXxLM6R3tZ+x1l96p^7>@Wnp-_0M
zXm4(=TW{;K_BxUbA=h4#<Y?^Wcwk@;hVjPCuO59=$-yv=m}!rfUw%8pMyUD?sY7;$
zA`wLoQHRoVFZ{0C@9dDOcfRrWuzV;BiOBPN7!PHY@;smpV~8~`wywGMGOMnBaHiqj
z260F(F16vScufW*&y2IAmb@ss_z3%#rngQV3CrD4Tw6n)BVp{0l6K+_8oh4wfu{FJ
z9kn$WiO6%5G#EFskp~0j7;B>IT~fy!92zgj2uIWf8+e>m>Zt2@Sng>1`EWTN#s&u-
zhy@OY%L(?Zu6J#A!Vw9LmJ=kB^+AIiANA=b1urzo9ntkK^uW_i^awo=qPocMpWB3e
zAJi|-%x$7_b4;lyJ-11?Eon88X!6`9XIx~o<z=AL&o*J#ntHp;vrSaKJ%CIk;Afje
zcx(odDD!NSv#y|L6+z<T^G(<brhZYE=bNbf)Rt0ta+CJ59x}AgH|cSy@rnYb5yJg)
zlY+-0x#l6gt1I|&6TJz47#2^%fa_&Va)ZM9LU-q7O;jE#Ov!*-*2K@Rf)WY1Wlb>n
zzHAL1xK*DJ$@Puv*M%;b5K;O57bT<Agh-sPfr&(^36V3eq!0sl(o`o#3f_+J5CeA-
zEuR?Cn+kU?No-7suq_?+r!rF_aw116a!rZI^)E=^O^IOr3!Cds($q3F!d~j6H}5vp
zDMORi)QH?yMJAM)8o^!}4@gWxOzP~2@^mCun9&iCh`+^zjW5uU*%6=E%L56V*^#)|
zZ2<|K*%3?%<jR1AD>FON>gkBszoZ1Q-||#M?qA9zNMud~`<Ix!h-aWY8^IfS|FkY1
zgbhJ9t&2XQD^i5(g72vHS%-UCaXm}i(|AX5y#MlIL|L4>;s!nK%7TXGBf&0BtAiIK
z(*43$lzuTH-7k>f`Nc?NF?gnM0!rZS*TRT<QAD_3G7aTkib(fMCc*uBIYRCi9eF2d
z#J%Q<@O_}}pdh-}B61%HB-nT@BKLtn0`9ely$_V+TMg{$YxSf3@i&I|TTUO)I{dAO
z^d9gPKyO9lHV{Yvy%oVa{0VwLHD#)6A_eoJxqG_nQ{CY;5h(RW5>pD=q^^%B-$rsR
z&e3mnW%0L=5WWC$eMI_BAc43(A_Fc!LPF~!;cumcD1l4ptBCs>DIuALa$nmLl1Y%z
z1}>qaf(clPEfHmV#GO0QQ@_WR1z~eRI=Uqy9n=)p(Jc`;sH9sU!Nrz{xjoN?a8cDC
zBJQ8^T-bZ|TO(?KyLwa(%!08WBd|Uc+A5RKIol#?aeML!kOqz15t&k^x5)0W1&>4s
zeupi1kYI2}L|&%`3Dg}C_%Y;Sf`rGgBhu_LSqb;rc#h_m8cALUsGSkzqC^Qc25|q1
z?xj}a*8#*(ODTou^_`Kw%b^DvweNIlr$MkYB41m_SB@qx*n>pvJ0ndml(qAF06a(X
z0wcj|2m0;^`=d-R9k|<RB8`>Z5qT<};w$Ohk)XJ?4-yc&BXA8x6De|Jcf>khRzf3%
znA{y{*3USLR|0BJgxy!JpFMDoQwgoL_c)c%NZ1pR5!NX_681#og9IQ^$(~4CTaI+W
zo+{ZBX?H0<K!m8#cl%kOxBlrZ`<+T?l<arJMWbZDJxWjnE!iKzd?i{!7wq>(T3jJp
zLKo~wN%lutUT&m#OEBvlVCVMHty>N_bx`oh0jCaHtsjWU7jjd4wSFLi`B&6|XTtHd
zx!n-{NI2>^5NUC#(UI4I42Rg8ee_J(A*T*n&L4`%)o6+@=MP0nZBSayABw;MT}-Ak
zrN9F{%3Ai-U%ln113{<uM;$h4J%2P}ig*JQ0mRV=Tra_<7hD{T;I#)aIJ{C6M<ea8
z<sk?uTJWD>XP&2*m7j3xFu>-Ch}<(k9@KFn(&`)uO6&a-kzVD-d-NtkioDw~(cGf*
z^rgzJW1@K#rxX4$QMr6aE`W@Q$``*u0%S}yBLX8pg3&S2t|Ii3NO2H0Cfe;5<6}_`
z+~3L3+}i&73gy<xPBpYkFgYq$ohiOcFgYq;(FTcXCP!h3g*=K-&E#nFtE4=NWHpnc
zEv_`a6h;jG^NeWj$VK{fuIvn_8rnyg5%r1HY>MwA%!sDMMhr+)Gb4(P7*S0zs+kcz
z>o&f_j<2W&p7M<7*%g?F42X=UPz2eG=q&^J1d}44{K;ser@E_aS<ObRxCg$VZhR8+
zG)PGD$*7!cK%(v^sfj0r*1&I{8|8-%15-)~EW=!<6(vxfxluXW;46^kM&)b+5=e8S
zm~F^=Nt^0((Snsx;k~4h^SLN?eEA-Jn!K0!QL%>)0;uz&($<4S-uY4K!+-?p{3v{w
z7fHZrGPEy8b7x(yXI!0Mj><C&B=dA#Y#4z=sh6Xnu(63YrqX1?bJ5(SEA-8-&N-(P
zq2;3aQe?JsRO)FgnNSMk(r9kZReDRMY^f~<B!l6lwirMHWNFkC8}}f2DY(%z@u$fh
zUltYTKOoQ*%j~WIiIU6gt^kRW%ko{3rYYtV*%crF^ohd*+09QJ9>{KfVs`~H1L+gH
zD=br89WD4-c7=tUtD`tT<y~P>SF90T(H#U(*VtVF5_#9yT>%oPYp5&8owP`HYop{&
zHa!~zO0IQEQg^J4N~aQEQF3h*ZW(^+h>F6gTpv}wi?UCz(^qBjr<myQ0Wj<BW`P9E
z`ly`PKmulc6cZcG`yk2th&KH$Dtt;x5I*HsQR!34B=r8*QTUYfYMe~M;~WUuh|;@l
zXE#no4c|oZM(HV8(QDsE-2;SEX@Lv%hp4hWn!EA_y`?LQzlEQIFW~owsPrd60_}&W
z^d~`r-yfop?ckUENlM_}($=W^r>O8JWg5!;7?u8{OoF$xElU0*jjm><`b)InH{PYu
zLU%J%`%6?$i#}~eeY#urDF}#kx6L9*<lSxeDM(bcoBEV4U^XLp?}@SvH|p&#*<%kA
zr1E5b)7L|pP-agQP9U+;+*J2P3+|7Jf!-WB_vHtAbK>NH<OBpbIbd@F5_u2UoPY%C
z0b9G86DNnHc7Z_2LrzKJ=a8*k_==K;NV~Yx-<-7TcvKk?%hldY{e!<n|KJM>9=H1k
zBnlq4`v)ZY=Xf+SA}0EW5_tcdh`NWzME}S%lsjqnk4!@U{E_dU7N$BfRxp+e1^v?k
z)sBqWW3B~B<-r&?f89Z#Z4bsIiy)Er!I(6EAW_wWG4v1pB1;S6e@u)W{=43#`<R$K
z<UlG<*2INbkSH@IhDXqMQP5~h>=(xhUW&OAv)t_FTlDg*@z*C!_Q_G>V;#C|G8orl
z=wQf+_@^s@xX1HXZ)Kp6eZ@yUT3{bT)n)17vtdK!%PaO-kaGjmxn*$51tR<S%DGTN
zKR}j$R72cI!10mc+)m1$Ala4BHK;qYbOW8AB#DD0JZi=t$;k8D_#p{gqNjHAD-9^j
zZ>P|m%1WGBIaeISFZbMu3syMQlc!<)UU&Wl54z7};PMi#qR=xn_D_3RcB{ZXf2aaS
zfc&u!yf8y|d~n^TdXSAsmwS-Pxy9QG{8p%F3BN7H!RzQUQ^x4_7VA^4Ud49Zq7Ms9
zi{bQ~_Mlsm=1q^Wp#$}vou}LSgH-6x^q72d5+w9zdJN<HL9*5@N$H-9v2O<I50yO`
zlcpM}<W|IFs47UFt0mu0p)$aDGS(?$T*)C|Z0E$-tXuV~%H}u_WbNm~q(9M;kIp$U
zIgx?{#GDu=(%u{b)Z7^BP@(rJo9jT(Ts+r-AOk!%CeP|xasxa!2A7!T;+8ZQKNk~o
zF$nPgTuiz}AW`zUm~@LkqPpi|wp-MaI9(XyZV}sio38d-=&(Rj@j{0Mnu-_3q*sK3
z09qJ>SM&nCtkud?--{LO$6%bUvU4i+4{(wHuTFg%pP+IbJoR_uD9IkKc>D%;j`1o9
zAEfq3vvtcEP#rB?{KG9+`^&(FtbMDE|9~LBt;Y|1ajeYm&fz5yJez_dbWF>ym-Ry(
z&_bc*cyr<}EP#9zMf{{4UKOe5kCXiANt~>F6NjLC(kl@3E)Fb)Jq}Q+E$+|_9>!0H
z`-#C}^>0Uj_JHk2cH$cTh6FDyUwmnlqtSyiTtf1Mxotlyd)k9D_C3Q>9-QIr{y&Ta
zZu1SGQ*%6fleZL(aS%5S^S9M1#M>cO{jkbAt%|G^B>hgEeLmjEf;Af0|G{YFtpN(-
z*@k-5i92t?Frd?LCQk2kw1Psu7sD%y+~aFSHsFJp5==bivM#uiJ$J1-k-aoXS9>5)
z%#+B1A|Ke35J>3o2Q&%IA#b`B41&5crmT*+6OXY=J9sb4omr({?aCs}1|Vy&GA85v
zPyhfcV={;gBqrLGvE*t@v=l@}2{h5VSH)xynM{GzSQV2&WHJdrt6~Tu>&h8HhBYyS
zfwZs&)KxI`4!wN_w9Nz=t~D_k1=5P!lQl7Tj{|vGAgznBTkg<r&8&0EkO5g2lR+S@
zxB*!gLl6i(D%Xk($od%DeTUvXvpy!*9!N!*^)VSQ1ro^XW7wU-Yv?Eg>#!lluDDY_
ztJ{W{I9a1ql-Uq#Do*o3qRfUEPV*NC3F8|0mYDKWjQzcvw`*?4o%(&)4|BMr9gHn8
z>1Vd$I~ZGH($545@otGlev*C+C2&9HhnRbt^kZZiYTX)>ex^)<AM<03{7ibUvK8&{
z?}#bQ60I$^<-heVWgvvFj!!V4J7V(64@mH|BNh?w6oLfyju^JU$n>_N9k5-}^nyUi
zUAE~3iITf)(+d(McjZlQE854{Crt18AkYQ-93E&pW1nq%@fAq>Y}*SGNc+h4UXEiO
zyrg$9R&WFp*<k(Bz`+=<>tTP-g9k$3J;qq~A$p7Sp_n{*K`M0XPz)z8SnMDZfPas%
zyNBq_)4#{$(F;<M>35o<=*Wb>^>H}Hazpf1)?wK^N=2r_r2IEw0%#2vGgdGv&W;b!
z{}wnN)8lkJ>26J2oQ$zSHG03YlXm-%iuRqf+XoVCoQ%oeG6ISAos8jNiJZgM#N&uK
z+g5{a8WES>gj5K7MBFEC?||gF5@Kr-Bp^n_u}yzIhXAW1<Lv5My?^;g2ZD5XWL!q7
zwdV8m$ap|({ec9;$T+yT1np~Mst?5r7RK3^wfaTDhvFC&tI3OKLk%1kXPt)XpO%fY
zp^*ycadGJafCP8r;?e~G3FvWg$affrz{d%3cGg|`-Tfvw5VSa$;6P9VC&cBNu?=tF
zgg8e1eA)+UL!B`ruA~w(JZ$e>`g8x6Gkod<jOhgb_4})f^R;-cLtc12{Z+-&9pJ|P
zFTKAcfA*CobUAhZM`xJaKWE}TW!}asCBpwDjJ(guJxY4|5DeIrpb7RA$FI_#$KO+<
z*~@-wgnpbBxB96N?o-=y5`X!ZexXz(+k6bdyv45ihZ@exS%)Sf{`0o>56P0VARXWT
z?DygY0Pzd8;HM71bczSXL|gbzeO_@Tev_BK6=30#`l(IhQ@L!|O@DqO44mLKx4Xq#
zMlwDO{SR${0*KpEAfYWY;uwXr^#&3OHzSVo&Awb&Ks^~}k$U~SvL_vdBcJn0dpNY=
zi~c9$0kKI4k{5!{Npa3?Xv&xqXOrvoE6V0L5VW^G$AO?3WR3$tGsv7cASgVn4RJg-
z&a4Lg(!O&Y2s%TW8}|u&i%fu+8&9^C4WS8TZoETB;~O#hFrmB<S6+;>1r7SwS^O!i
zcpHWG#$Rwo56vtu#HEG7SHQeLW1DtdKw@TjA>Q)ExY%)_1k5bRGe0ih6_H8cZ9yC_
zVq6N7(AHEJ#S7kuyAox>S?tS{yY=3IMRD9ajH88Z$u_(Kvvaqe$h;Dl^EXn#%PVoY
z6b6ZUUWvmC!7)0@;Nxp?HtlY`Y1wObbC8PWyk<8CB+n&{0Z2f+M#cb^9}utwxj5T@
zx89;(&Ve9#=Nt&CC>NJUJ17H)TpaV-mm1pE&Qw2&7i>b?7OHG^J8u&<_#VAAj0%5@
za%cr2B~N+ZOAe0HM<E6w+*}Mhd${E_9hLymko0rNG_>teoHrGS)TH-`PJ4Mf3$LBB
zU;qrIXHLm*;dKsprx-&+2UlRo!TaPvmh^fD_a14`4y?v_76thjMzIPztW-YKkvB7f
zF}$5<w*?CX`+YHTYU#-$Jl8XzF&mZQ{WyArN4$W9cLT-mO^XLwo!tdOrB{RSn%V7m
z(t*Fo2to4KFN7$BxvCgU&z0TB!$*Y}zy#hWqIY2t3;Tbqgz^g-+m@ZWvCycYf9e!6
zjG`w|2baCr9T7YYs=9<fIVyUL+pg0VLuAQG%-j;owFrNik=~NzJpu{cUVR6e&-SJ8
z)Dht8hGA=gp38!b#P&n=U_|W-;mV#PkqPrm2j$gx;Y0|kQ6=`oL^7f-!c&acEx_vL
zzWlQ)^olNcgO!(jQJ=*Ki~qdw`C`jNTqbI0$0ppP&k24Mx1;mh(MVn$=UZEB)4jUd
zeYHKD@d*QIwLP3cVj!)i;XH|4-gY$1zKr9fe^epGbcb>s?$iIDD}yBA&LacQA@`I)
zqWqU}?D~;|*^b8Y*KxkKXM6ugS37?lmrHwmLcy=&a%m3|1;38lOZ#?2Zj6hied?dO
z+IypI3h)W0V54mcKmurETrTZF@{({bA0$)I-c)~!7d)HDRsK^SRT%s&j^8KcE3Wn=
zl>I^|JwO0+zuhX3z}#<31tc){lT`S%qxQu5p*Z_wxIU}%p}4#rgH)a@ug8Eyp+j+8
zk9miTeS4C{u{fJDLVx$xV|HVZii(ffjR6UaV{!SK07zgQi^Jcgi4Y_l_G9r<5#mXt
zI8i$mZ+bD^c%xcSU_^qwdcXc#*$9O3%7S#OVMIb+j6f#TG9uCJZ2K!ObZ#&Hi>K{r
zavYgpTOQCa>NnDXpq-hK33*tCOn?}fNb#^fR7;cN$OOXrexL)P_SCBJ38h_P9j;4V
zrlxaaN9yISawORt(f-W%gmf{HA8_LnGW-}M;KnBqm-sHJVS742W{I3ST7S<~&KwY$
zCYb|5(<DpCc?E?4!V;KQq-d~enwemQ4?#3D9SmA9%}mI9L+$y3X=b9iIKu=9jG2iu
zx^sPQPx7Cg5PMZ1P;z!cDl|ycK06^58YD{2PS^_Fo)%2=65`$v2*`Mz!vigt<~i-4
z1=GBQ)M#V|(!2yT`eG<_2h8<}g53%B)>!?*@CymtKYM^g-U0fozLZd2P2?gE>n>Lo
ze+yaT3*cX};XwlarG$)T1qt|<5{MZfZvrH|iI)=AtBFD*jB`y&fR@qg^DigduOvMD
z5GJ3BvWpT}tA=r0lTXBIb#Wj;%hjHoGt`$$uzBP3bIWoLSF{AmCFJ_010OxPg#5V$
zkU-8Q;Pc(gArPj!B*9XT=>L^n;y{p^EpZw~gJ(%Xx=9`Q;8~J@n?zx{AQ7g!B+>Fw
z@$@3m@RGp8l0>UP{K*lSgfQJDiQC7!C}b4Hz{fiYrCXv077}Ef*^x)|bIOopOP9vh
zI|;dzLw+#vP9o8Xk1deAe3!2L`T7ntww5MX?RdR!-=z)&Ii5=$QP9|0nvlLL$^c?%
z0*)t-Tkn8ItIHG0$^_dtUjHnMKW$EEOf7fBL1SupLjEi*iUDSM0=pTapXu42<%#wy
z^ZiVL8@!)CO1MAC_p?kz*^ixmmWk-+6+zz5ACmFuK*MxRf?YX5UtYe(VT(rT8iy?!
zrE6^MMj1e_Ng&W;g22Ei{UX7xc}#z-><b5jM(G!hglJpii$p-2+;`xk^os-nIp_xw
zI?yQn8ZZ1ju4l`?b|7fDew~n8<H!VvuM;iBX+KD?@pYnm4`Vr5oDMWxe@x^yKCXY{
zD*w>|p_>;!Iv_Mse@w`yAW#S(KPK=L#4-VbK#X09+z*rV4_&=?IUscPVpl@O@O0pz
z7`qbk=L$dqWLKhT%9w*!K|FXHh?N%1EX{43qR;l4tkmPBU=$DD??FglsS@RnqGUmW
z70~<_%;_tpo2jLkh;jcHBtA|n6~9VGlpy)<<`Rj#(@HVDiM*hmD3$LL;9(r(1<9Y;
zL0+21o+#zVjD!nbr=!xpk+u_w%%FMvC6UNHy%d{n0vO6aqg1}IfOl+=7bFi3Kwb)l
zol%No{@?MYl)Iy;E+{SdpfvaRQ~EF^u%HyH658$SNX=eY%A(I;w{KyobVHB|u!W^^
zRRR)xEu<FFepyFq!lF`k-!poT%p#`@Nnw#whAhq^Dnm~Vb)<H_TFSnEM(>q*)hR<z
zuR3L@{jX9PgkYl#s9Y(#V6NUflXJ?DP;yQgvIsdUL${qel0{fj%3hhPmuHqZWk@(n
zO1)xaBNNIjDJ}N%hlx6p*?XsyrRV7vX5Mki(0G5RRPK@@6Uw|(ie1v%cs)?u_e<HN
zd3t4+_nk5{7~e0I?psGb7~dzYdD1{9bizq~X~D>3uFbQ0(i2=?3Xk$bgk8HkQ7=4@
z%w4xYU*5jU14%gtA{lTGB;(>15lFD`KoZmVht#JTQ++g9ur!ss<ZJyrrS+ppzQ8YZ
zXYk(I#H7NKZu*@=4KyOiFq`o-w)h+Uryi4%IQ^$xY4HtxGdbz*+b9JUO`(*hd|)p_
z?7fuCt^QV@<H@{~lv;vhu=i3@Y6(b`dMSyXK$tiR;p5^Yo3TaDR4zuCCO6<n<;n7{
z8c38`oWxx<^2k8K)+|m2#9P!v@~EK2$sm6H8MCKMp{St6$+OPpL3bHat=E&R(+~RD
znb#fWsQ%ZJGN==oP|@p2479$SIZ$sV*~B08^ZLD+lomh3UEw#A(u)EKh&Pj_*f#;m
z3t<kWH$lJ)RPEiQ(lNnY?ATVlDeJyfA6<qNp=J0E9eFn?T|AILdpDU9*W*9}?cF3E
zxM<*D(7_Lq?Dwtuu(A&v2-^Snz=0r@{2-a?CZ$Cx`9ZSBnf&);GBjN*PqOEK)XU12
zI}kKoEO**O8oE3wJz|sr#PXzg#|cfsY_THAT5Qw%m#uIhDC}>A13|OJilp4XL>WM=
zNa7MNT_w)YY_TfI=5EukD_`Y6=zv(|K+tTlDk+aJQ3epJk}X>stLR<O49ylBlDV^g
z(l0A4-{63dU$?;lq1j@C!w1b48;FlFG+SgSY;SWi_rVT*tgC#p146UKW(R}<_clA6
z&}^}pI9W_PsTm5~+nLOb-KoE#l<#yvd;r<$fKcGx&ZH@#D^Um_JCnF-F-9l~!t#Dg
zvj6>6AKUjg2ZJ8v`OU$gyL-PSP2uQdcvRkR$u8aajlm3ES=pad&P=pt*<bYpyLFFV
z+7}77s!{0O{-nG{iQK^2pNt8w8zlJIpTs;${$qxs=nf{8o{5eE>#IF_vJ43}7CCVT
zlhOf0ZeSfuCb~<Vqm8hG$+ONe{)=NFlI}>7b@@&Id)W~Of@0{7I8CD%x+6(bY};jc
z4Be4rhfe&Bs|;O`Ii6%If77omJMKW>wK62<hhhK_$CGkFgEHXacoO$1X+p}-^_f4C
z?54eXkFq};h#(;Ta3F$!_#-L(bd&+aAIX$ubmI`XTXTPkt=_AjQFcGVIb~~2K-{0o
zb72DF{*(-O%_t@y?oV0Gjk`Dm?%j+|v0nT1y0Xy@L<kV09f%MhMyK)(2?1hs3Js~^
z5co~;u_?A|pMHDUSO)@^9+4~$p)yJs5Mxu~CI}iI2E^D@=dQ-J90I>V{z!_A->(lS
zd&Gfg0xlkLxM%{1N1TQ<0mLKJ5Za5)DEQ6t2`QHTw|;5)1P3AlhzSlv1P~Ka(j7(_
zKuk#C_7wL!GfEVXGo;va|JENXpX6XfficO!hyr6$O0F<a1{jl4&0E?dI0knomAmHv
zjo|4HNDLs;Q_|ndC^3LcPX)!Z1Rw!2J%!s){75FF;Md7!r&#Yp`lo$oI~Z|@baqNc
z-Xaq)W~b!ES&+b(ox;W0w=wBJAh_QDT1v^Ka+m+E_w-cYZ(BhU;N>-^K?&fzmXb?N
zlmpIdDJ(T<jQ|pBgx69nb1AX2ObKGm^m+<Eu}fP#8Ko4SNs2Ft&jA50m!zaS021g+
zQgTTQ66i}(SQ2j(W~M2Qz*9=g#AocWi@ayE`V;z`-bk=nZ3<T3b69N(u=gBRn*!`T
zVimr&;_i%BYElJjQ@H^r_4i%D6)D8Ujig#SlP|C;HMzBSRQW0!8;M|am93#5fxRjf
z5&JA4fxRk)6RraS0$)E*P5#Auu=nQ<1Z`@6ZnM{!`w5??<SPRp0r7bXM|j(ay)LHu
zU8>;6R4%D_x4Ht~rQrJDiCA|R;%-xlmAJhXnN2Bq5RFvSxGB|CoL+zg*rpU#faJ<`
zAxB|rip_F+D|>IX`9Ui9*=q9xlIN1X07yV=O~Ds<m|jNeYN|h{3VutmJ|6Fw@Xsmi
zBHRS%uEfqSDJ7h^Y~t*)I6LI=mUjj%Hv8}un7^c?ivkjuzog)ztS2#bCBF8gSf%Ry
zs`DPF5HYeRB_A_FCKTF}!nW8z@X^gw_ooUTPP02T@82W)i4QVO-N1)>Fr^$#xf2zf
zlLMOf+ALB8C-@G~gEl810eX-)A-x3&y*-!;ABEmhOeZDqv-U$N_mPx{8I)-#_j^j7
zwaX-|Y7eJq^MdSbH)_<0loCm_wAe?wH<JNjGeIpok&*}g$O*6$DIECIsckp%@`k5b
zbFa65<?ysP!KPG{8J>=c*nW^GGdwNtQh<arGCbY(TJG5r$=%7}>2}v}cT%R1J2^ak
z<yCwHb|Z+9X|X8<0*XB{Ek__oR5vm$M<7U^*WQ%sMjqkVG~blE1q7$$@B;~b8k?3=
z2}mG~O-oAw5=djy7=8#h_2B8sN74lo)8gS>nztTFd*XbZikB&|m6v8iecn##@o7ce
z7Dg(>GoBiL9@eLLiW0^+&EEET`=uwO<;7g2BGZI4_6Be_5t%?eo@S{c@5Rj?Ps@wW
zNae{GX;0EUQM^OP(gjbY*+WHMT<uTeF+gkzcuZnrDv+BGWzBw4OWA;8@2zPha9^1|
z17&I&;{(4M022H>k!D{Mdv8cTk(P^Uq$1N3X)KR04v`7ej5NF0@2yPFkRqp4o{Y$X
z{yY=pG%L+k`MnpUXQgF~g2`9Lv(m6I_*Fxcf#heWS(g%T-)6HNBw7;BP6O#dT0Wg&
zs`JwYU!-%7mv}u&aDEy#gl}b^L2X-@X7uz_PY~$0g=wjzAkmbCX}RVB34Ru)vF7=h
zoX#_-p|7WvHi<V1S)c3GX1Q6WcaEzZNx}*v0~G4@w4BR9@&XazIf4Y->*-dljrZs&
zt23zWpQLmD3VZvw%RX^H$kqQOEms!E1&~kDDe-JKNPv8jhC@Iz${9qhmii0=C0E<}
z3=$<*+xiTW=e70u43gtIq0bkC;8eaLkTX6?ea2THt+VwRB#_pTK0iRR?ry5zrwfj!
zU5NvQY~RmXA~!GL{m~WtKCL$sLhnvO-z<dQ0|dY~+d>Bk@XfZ+K>~a;34No27IvrR
zZ%^m`JL$c}Rkq!h5|Yu@?P<A750Yn-&liCN$o6!*_H;`f7?AYNH1njr|5LuxfgnNe
zOv}qi$OMR;=~A&C2MLIsX{^Wj(@Win+@H?9llG2rmF;&xNap*~a%UE~0J1+F5Dzkf
z<fX6zqu%OHB0ng53j|6Yw0jFAN*=U(3nWS&OxwNHowhNKiQeiD0zk(c9%wJ~nB80W
z3Z!FpZ-E5TG3qUN5{kQrsgAG;CR;4f!uwr#ghg*@(TvmseWZ@Glra|jqlNe3EdCUx
z8y|o-(vqedB=AOBGFA&D=8ut9WQ--|4@%(k$0*DFkR|31nTB$sEjfS4B+MTVS~P!<
zd)tG0V4S5~mFRCVZ!7PWRUpLB!Y8zGoFz39B+n}SeUQK&XUV&KATc$Jv#cxmH76p)
z+0Qtu*%ii@qP0+o$1H?}EqAf^T6<fut*yNCGf1%;O}sp2$tSgXaBX<Z!l5}m-P?nd
zVUoq(YVEzY_aui$(uGNu)JbFl#3W0;Wd)KKI`b^!ce=}Zrl~Hp3iep+@;2U!m8ZO{
zZ@GGN?%!>^2?dAmbS_$7F@*oL8P2V%PdyNo2b<1M^T<PadV;84oPXPKCKLrrKOabk
zwf0%EeFo3ZLuJGd4@cz(t@uU3LHq<2g`6LZ!@)YmkkX;6JgpVKq%9*@#aT0A%kiTT
z{09v9kFgG``HSBs<k3NY`QwCHG#^L7^lPZ}+kE)NiE4zU)0unz@Rmo4QUpBx$^som
z^W)~h6e)w>@uS8L9VUMJkbYFI9`fVANOUKDgA!4yh#$afRN}<@|EufF<E$#KJl_3$
z{iK*I(v2vM=G}XF@78l`1fgk~URgw=qRHSS@uMHNWImbE1T!%+lgz|c5SJ(h6uLkJ
zBm}V$S+w;9gJ7Cq1QD=N7LiR%BM90AX@a24_tdS+Gk?r~_jl^lxpmJ{`>p!Q;xg;c
zeBZ7Ab_?tNvKBq|7k5ie#1%?2G+LpyZ}^X~caOb&?452013Y%snU!@O-4^$FgYQ4y
z>tTNOtJD~C%Y`c0W0A*c0=8wUluB}`XImz7)<r5cU}@})B;iU+J=ZV+aiygmb>v)W
zm@4tr)G{yeM=yWHMQToQ6VH(wlS0O2p4-L>B;zvAZDR!zyUV=u|48i0grN{5c9XAo
zZX2tk5G=2FZX2s3A?Ov4ZLFM_LOvK)cx+=m-)>|5@g*u#0gekHv9!W-+gM>H?+TB#
z#yf3ZP@897xkUY>qOFief~U=M6SS2!c-lNBXtm8l{kPgP*H@_A?W;X^tbL`eLRWjP
z@&zJ!wdWRufm8~sy*`(_Pn92hnVneeoj20<7li?e^cPoq!-m_bnM$d4-(cftg&I=#
zMjYr+E!kB@K+5`t=VlIoy!Q={6&CyVL8UY^>pb(le(Isxbp;tRb+<0A&|pHwI<GXE
zKm;OVoyP>COt)6b)ZKc|oOh|Js9RqUAyaqj3nFCdZoO9;jg`rRi1i+ApxyIaDc$AG
zUjCs=)!gC%n+uAT*}Bc1o7IMkT$??*ZFV1TC9`#@onB(EmuDaEg5oBgW2?#x-OjjK
zfRT(ly`H`7umXr{?exys>zV~2*k)mum;Asr3ywy<-Ep(vNHhz3Y_lNEW~EH_b$IsA
zQ1ie*)u$gI`WKWW3en-YK06R$9bVjOR>}<DLC<U)s7~E*u%I`Y;5%5*n@sQ>^jvS9
zJjgic`B873!;d??qLW_KTbKErPR|{+UnT*2m^Q?&Dw)xhDwPJ>?QA6^5)+4|#o%Ci
zAUThC=I52_>huxv$P|=NVLIY5SY@jn5OmZtJ1f=b^ij`s+M!x9o%SDCCW?2=Ggl2(
zH>8hwuKQnRJITj9KX8%=kmH{D^I#+$_uMHsWp>@@xW}?4$Bywj)NsNx{i{@^f5LO4
z4XC{CgvV%O3IBVPaMtlezi5u1f2c}ToKZT_=j-J(nV$0XkNNWTx1~mBfqWr2`g|Z#
z9`pHpR(oJ3aguL_)~NdQB;RdOh6>Xpp9p1k879!<zL{R5u1`PiyDx)k$$Z&&EEAtU
z#W!ECRo_id@tux(+RvZjqod)LiO+BL%{{ehM7r5`ry%vTpWo~gm@<&)DW5;hH+yPT
zV|tqJMjKFh-87%k23-=E2;L`s8fP^o{iN?kKu}?N(q{z3oEl7o=Tp9Ety5Q}pDHlP
zF)~jH6EO@E@i)si->O#?=~;f{z(R#-mQRh$iXD*2@uz)rN4*;8KV8t19J=(h=;>t{
zwsBPRe81=g-@I0@T1)5q>;o5zoGli4)=vbHMSv(BY!`kd6(P^c*UPOfXNyG^_~v+n
z`gVFjTpXw{Es)~;+A@Kj_swmM>YnuTv28go*^;qsqh-P(i+yvdQ4LEkj`hgN$S^Gy
zJ@Wq)ufrlseRIn&b)CPI^P8;yLxpLnAN1{hNcyIOOH(iTMcaJy_AvEvkC%M<rnYGu
zEMK<Vw@qUe0K+Z!T|ETkOP2etZ3I%B<vwkr%!dz_&s>R@G9NB`vdoJkRHha})U6~L
zSu1^4lLIZg+bRh})=F_=sf7p2XSeyL=SXVdwt@(8kv8A0mBWOHHa`>X7Xl)p&1b)m
zJz#LKz_ot<-jV9j;(lv=*K|Q9*IM5-T|mo*!B<Ofb+Bk}1K~4Dy<WSa@Mal7Z1CM=
zK1|5i;Fm`O7$7n>_zYmA5*;kw-tI>;9{_T;JF80?Ioo|#ivr2n?#H$0VEMqUzMc8F
z0zg@|7Rn&a*w%sqr5W4mySfx+ByIJnOUHG?zExDFe$it=arsrIe}^hF-r|xo^B-NQ
z_MXwB(~n1sRbuTUk+lZ`c)^j_+CW}#B(^q?7aS35b5c^WN_5}lo99NWD=NAQdBmz+
zzMG1Ji9B6C6JYf=4^}<y8~<9>F!Ff(T~&6k+41<hfQUHmyYU7P5yyST8!yWswF;Oz
z<tOeBlI8Ofa`Df6bIo<?;U;KNYY7JePWf&S1w_Cp-wmRGw3es*UiSylAW8_fwY)b-
zjt`<il%tXFzQ7Hl9EsL)Tp)ueF?5yq%7a1FTK?;fGtV9b1p`8g+Dsrtc`$I+1|sso
zAhvduILgGpT6+`#X%hn%E<l^;!Uc$=iGi~=5J?jQtj*sl$swhw$wASx7`r|)_G?Q@
zlsWNTb#af$LASn9WDgNrPYG;f4+J27O5k(`MEsP%MK%!eQvz)LpM2*KvB<Q*oH<7Q
zSH-kK9<lYbKt+EN!$h8G0e=$9`sEOb;2D8gI7VGxF(Ys@$WX~MBXC!)0Le2WpyNa{
zK_1Yo!1TLbHCD_jyhrRgD{x21!(_Rr>%|5`#0GPMDA)j~e@?7^AUWs6>Iaf@&S~`z
z5%te^>IWcbeyo0=O?2u9B58iCejt+Oi~4Uu{ngBX1w}hi|Fx0&8@{JT_INJn7Dk${
z7R@hmng<|xQT%m4Brl3J4@B}J(foycUA3rdX<&ZzeRWaA(n225{L;Wh8BF9^8W3fp
zZ5}k=8kiN|SJ(DyE#whVt+BPLt>#<BS{r16wpvu*7UXMwpf)Dz+F~_8rm$^+Qv(no
zZGr2418pwaxdRfL)nbb^LH^q}sym8Dt|<tSDXujIA!3y^fm`<`6GGMmv|cvAtFcOI
zLy&mq9|L@R6A6eRB?@yOVm1UW%z=p65V$Z066PC%UhlXt7lIA*jX`pg3v)*!-`jDR
zI}%~uemcynrBdEf9Ql}8akFB-aO`5FQHm|Givf|g<+O`cOLt{Q<YFTM=x0YkEi$Iq
zQBaGFDR#sz1~Za&h>QJI+UudEsXal_vB31dRqgGuC+OxyzBN>QYhUDB=C#{Ys$yTP
zA(D`|FLo^;68DK~iJJ@+e>f1B&u&xK)*grp1(iY_hzkX@T<%&WAR-O~^jT!pdZ@(s
zp}^dGySl0NP(g&~>rmj1^nnQxhk|Uhhz>-=p}=ij9V)2Pg)e}dow06#<m`-f3$(m(
z?KxDut;^{aV3DgmfqX_+;WNbLx?<guili>l?H|rYw>71yXZjYsmdVfmk$SoNS<m#1
zJ3}?1+!j+jRXsI`XGFI2b?yg5WJ_OHV*(M`(ii2vDTia!$VZRQ<m-N>*7Y1TKI0k$
z$d=ywLc1;wB-i*1f4<x8eKjaF^++Z$DU&R3HMa~<&*t|%pw2CBf);r_90+(M<Gdb-
zfJZXU>w$RvBbi>4GEw6u1nc#WW|F_nM2(xHk#AzgHExcC*FTn##%*?){RCRt)=c8%
zOfrAZL+UAYD<JC2)!1sGHRGxUAcbnpxW);H@YW2&2wC<5QmEEU-<K(roDC%e3Wcd(
z%DCm)8nNZFOjL^lNLyCWnHX<b#x<g(B7IpVc7qzJ#aCu*BRUd*pp}JkN|mv)P)?~b
zRu;-BRmRE;Zt$^$SZ!%)Ri^0ujOjK-?eDQF6K~0{6)#wmu?^=S03z4K_5dPsO~$za
z5Rq##xWN|bP1cIF)@MxnRJFC=`a&l0g7p~{T?z;jnbv2xW9iW-6Jgb!G25Ee#ESNe
z+woOvE#ICw({5r!vRJ-7!zM;)25SYq8!6B%GE`CT#`+_Px4j$d4`^9q{nd)<w>$j-
zEOK@R^0C`v{Q;4*J=Px(N!vw#zvCRtWL;@$SElGhCht#I9(Ryr;xlIIM1dWV0&4)s
z?1*&%L}o{<Kp-+ZM1hN?NvT7Dse_rsVIpFd>+Wrwp~f{qiy{IJ1RRVb0*HWvaYO)d
zzJr-whh0Pn!A8WPOtRBOgrkw~lQ<$AiHP{rMuh0NPO7`lGGFQLLBUfYMcq9hMfoh&
zG!T)Wo%Yl^fuBd39tA+tpU0jGL@S@ing$~2^H|eBn-xvVZ^8AYsV_4{yR*gRSDWR>
zyY)7A&r&tvml@iGuk#CkJ^L2NWfKo%lX4~7nc!&OqNSP5vsC`d@!8}kJ2w}l@m=?4
zlf%D4;dK*)63cryo0y2a|B1z66-zRkXRBX+`#1lPS;n=GWRvv;abl83v&oUC#ZAs8
zrXr5@0arZgJxepwpH}Tnk7wPsN?SZp`xDvZ9R+!!$SK+64X5QbXA@5%uSYD7n#+-7
zuGLBrg_>+K+7TI1kUK4#tSrbCEl<xTgCVB{&&(#~Ao$;7!5k54N#<+6Q$HRwE1Rq<
z<dy;U>};~(D-`5CE$_5L>v{=;dD*BQ0buZX{J_q;N|HdzH!thz5g=LTWeEej4X9om
zt0ilGIaf^{&{D`GuHTY%^$1L4YROWM$m#g?qPK<FL@9gSb~LLC>Y}<EGB1W6Z6pOE
zV`0`+D?nr{%u=nKk}a$Cz|`t&;xF0!+~2D&N}70%<%q|w&bl@LM&zu{x;6laoYh&^
z1^@}e)!Dv($wqB}5TZ8V^(<|`1lg`wFE!ETY~uX#t`fT{6aDsQml$rn{dR7nzT3;E
zpHur2wQ$9ykhWrT)-4Jmf>LbGo)rZokWy^U(qEAPu9q+0mbI;nxp@(l<hHB}U6RPS
zE$bQ?AQ`u1<4Uq#;(S*&YGeQubXTDWGA`d$P=xddcNG*NJ;GgCLU-QRiQR_M)TwOI
z{4n3XSj|nHeJaaQ8{=hVp+UT3LYO$a{4?|G-73s4d0E|1+z(3RA*3UBLa6M<bYVyC
zgiy|(lSZRK%=mC<hWtVOzTd-zOyVIAhi;?*6PX?k87cfGdM7S2Da?OunR=vnz$9L7
zow33C#H6s7J)juT;uDiXZ25+LRX3I|r-q4VLbK)-_4-*;!*1WOJ7*h&&xB_7A64xD
z6DDJ6HuS<?IVW5^!-N-IVmGumh|#Bq$&1S`F}J*`dYWLl$_#)IwT&e60n@{?qnUOf
znWu;BO5>JON`~fVgvkNrRZ-?gm#cmQAVk+-kWA(o;knU*K9I~aLKgI8CrpFbbY_^$
zl~+cYi(gfjR6wx5Do8S!XNG0bmI5G|XNGJ>mHqJz(y^Z%nj2qLbpvLH$>@&{sN|U)
zeoHEl5@90G?69V;`*k)C(~@(-<e>6l(F=FKs)h`J5IJju{q<u`*t?(0EXxCP!T|&A
zCjJJQuAD2GFO4$ayh7;#5aP_TL@>9IS(XUqN@h7ysX?ao=Y`4s<&9D1bt_cWr4XXE
zbCStCFFYr@UI|F%d11w+-N#A0-dLJi7#6jM^9Qa}#bpaa_IK1Ev=N6*EeaD$LNn?$
zRo%p6G!sAq;ueM9jO-6Y+@g@JRni><QWY!;%a?@FN|+Gr^3dXtjq=h#bQFAZambRc
zY*=?BSut81*420al`R0TX${%TdnbQTH~&f9T?>lpg+{w+p*3_n4uF=|-DU!$NUb5i
z)yNMLjZ#zQL$mZxs=hH_5Fy@`4_yTZ6C(1V8@2)wkq;TRej<At8>OOL7be~g^Znb@
zoh3~?$3>Bfa$P}=gu}Xm90`YYA}7+0RFvz&^xJ4h_J|=j>aV;NCO3vr58lzpw?1?|
zct@hYvLTcn{O%qyd(9nrTf(Bwu(<r~V$b|`dr2?Tr&Ilt8U2R(L+O^Vq>tSS#g%u=
z9EORDqI-;i6cB7ft^|m7wua2n5OP2gw}s}mHEL9PTbQt0=!FW?wva9Kjg|@YUTEG}
z!#wqSVd6sZXqZIL?}dzZWCGq^c(*+?7pzqS`)&^t6^=<Jv$u!+2gsIWn5Z7!4-@@^
z(A+nVN#!Tjs&Azs*pQZFxZe-^UD}-^%YbNlM`$*#Rn_Soh4;!j!wz|GR5;>(C+~fe
z!tE@)SJoMJ%6oBcBoW`cLi3w9Rjs!xbk{^cg=tsF|D@cNAzVasN0{IDrrKESb%Y5U
zx<ZDnBjl=^O-ai}?0y>Nx4fmsB)m@x<&w3APo-Sf5oW_mQ%Az0FG6$GMm4(ZNXYP`
z9>*FcVRkf391G3DjjFbZ$0+1Uz!XQr-qF!2Kpf&|$OOMQ5)el^8fK2+NYV)sf(^5-
zILsV{GIYgZ=13A|T@q$TrM@2~CO;V_vgI9k(U0F&o%Nu|xk*FiCu8RZT3)x^6iAs)
zhO8BFtxKYW>k9AFMbou0?ds{$`*g{-tOK4S4meIHDx%fBpKfAx4;Wp|K_Vp_r_s5r
z?VKZp8L!O~n^@Z!uM_q^IibQdUK7ybHQWJ6k5-%Ao7AAb_ZK8ZWF#>}hl#RH(20RT
zpUAbYdPkLc5F#UzjF1T$BR<F;GT8CNsXBkpJE~i<ZmLe$`3xb$HdQm9AwCX7>Qp`G
z3VXALK*~E+SB{d^dy>&svo?R;sxD49Yv;vKk<qO2;-6Y39Mov@&24I|XLMq)lPnHu
zboJ2gQ?Lr6@X%@6%-W`=deaKU5f7av#rYR}YItetDP8oUHvjyd8WTRH`B6%G^urk;
z{7xsH(aG*#Cg|D@cOwK#%fI!W`rqQgb9Hi<b(|;>slV6ByS_r<JLl=-aN8UX7bk7e
ziRZMr_kA_AiO1;ZZxZ<a7JXjSiUP^jqS=@yP71_HTeN;oM@}jP>!b^`YYQBO*Duhn
zEpQ}p(ghkPwIl7}_(f`oPQ0L#<*%FS9jg6yP~@bfq0uGU{Y(v{OiOfNYa9w8PP#-B
z`B9l<#JEIX_5x*+)`)b<R7we!>g1(zS!W_SqBND)MSs?2>`v9(Bd<BFbFvIqM~Ejc
z*ZE$%xNh}3%eCvfLFSFiwL6m@$QzeyI@!`q08))C*QK@geFEtkTaL1t?pq?c<X@%p
zzuc|9U);2+AXmO*m3C9`BkY%~(oE_`a%FGUDqVJswHm1+S13KBv&0>RFI%NAi(hV;
zc=;+_e^vK3iCV6NT%(IN>f-Vji)CAox$Xm+k2Tuuq&-)@c`ZQ}MQ{CHq8DhF#!5&;
z{94V@n8X}6H?o6Wn;-5~7pC7N;;m~#h3QSPfGl91D`C1$o9Fkc>(cAu=!I&@L@%Qo
zm?-00+MM^H8j^lXyGvuB!t|DAGY7pin26c++T8u2s!Ole?#>*jFs&CS<gj^|h{+Aw
zy#1l7@-}F<HV+l14Vtz21`Iy3G_^?=ZPn(2zpA>jO`4rV(hVFbe*dmcY_Wbn$SnS=
zN;QF_eif;F?z`IEO9iCN?`o#Y#nFH`+PgZ~;+$Uy*7-Nb&hID`WOMBNjwH^%S)Bhy
z48;AH+jY@i3^dvsG1d(1P-9BB>ynJETziXo-q(pik$F~jU>;ypdy$Cn_occJRoF`}
zcWCorhpI~N(1|K*9;h(w&@8M<)7V?=uv43%`&4auXIwo&wPdO%S@GveN*YQk`hBeU
z@6ri-TDeeR+NFn7Tl4f5^X%5<*gnj&JFd&2!n9lJa@ji3Tg<aZn=v1$%Jd$csBvWy
z^X$>}4R#lTy?OEjZCXB3Bl><&V3I2H17W%Y8(v<T>d-|Wqo$i=nWo%axL;je)}dJp
z6<b~|w){vZ4mew`*pDs2(a#Q~V#|+o5RGDheBej=qKmC9f!OjReaQi5OCeZW?vHKh
zC=_UaY)eNHTkaQIc1pDIi%h33x;Ix`zK7O!_yM)Qv{RR)tu4#NmWMH3)KddeCa~?d
zmjID|SaU5ZzX}6MJfh7*AFCSwNP$U=c|@4bw@jeVbfVgP<B&SHuVeuYvO4BgOPg3V
z#If?lN44<|(gQoHUC*!Fn)Ilq=a;eaFlm=IHyu>jbXRP5u2Mu&m)Ko)=#+~||E|rP
zgY3}xdu(^8F#TQZ9+iwb`?xk=JH+db$8N@Lh%g<OR?xGOXaqmk=E_6LPk$cQC){@k
z)8|s3WGxfb;0bLWKBU6*37xRF`cVk!q@B=g5{;PXqn*@dy)d0Ds6e`CCp9YYtt7@#
zUuaYIi3)D~g06$plib1eh2~$rsNn2``jXcK-}LldWAD28NB?~nXO;a>+s26Z${r}v
z?GK6q$^50}2gT?O{Ns2^o5{SvJ5~5<xp?c8uCD2RJB~c6G&Md~^ia-h`b6DYHa^Ei
zKjOfn#DOQ|5)bC25gyb8MuiaUJ|Riw#S?PpNB?*LvFC&w6`a&YKs<OtF85$AYKnzm
zJ@|o~Yl<C(l01-eO|c`12S1R*gAG3wm2kD;<Xq9T5?uJ9GnzZq#3pYvhaJn=R_x{E
zfT`%bCpohzzP{9Ls*R6<`+p9%iq0(lxp(?J<an2Dd?-_e*LeCYEO+>;>>h23(`C1)
z+a}6ZR-QTU>K8weYf#zNdTSwTVIOb2f0vAQ_v%+pg0^QIoj%6zf}!j~<#;T%^TK;g
z<JFg6``v3sj<Bbyo_j`#{Bbrp=fb#;gz@9KIE;a$f}=17qT<JMM5r{GeIzEI$eF{P
zG?`E2Tx>#x>4_YU$shqH(3G61KCBwjQ*y5B4AqipGWll+CJa6`XQm%km!+rXT;mHB
zrl~oCrO`4Gz|A>+on&;>oO7MeJ~n`xbA%n26eEcMHaT<k-&B9k6kaC*Y;wGAG+uf|
zX=+BU=;@r9`8TTB8RDffp1DH2bY?CwJ7-S*jqwbRk$;lFm(Gm+6G(Aq#{LP!KWFB0
zvz>nm!TRT{*gqYGGR%to(~-nKXNiBlFaF7ekk96dp2t1kI>R&d9VO@HHy%;17MDJo
zD>>iRv*(F{TF_8b&jKkKI2w@vc}I(Ur_^R#-AG3?XZ9aeS9=R`ZukHdrUf~<?o_(#
z=ZPtv%bDxD)T8O=3S1Exu3Ie=pS&>Fd`#WuEzG$Z;yi1hg*nb@ksFe)q;r}pdMRhd
z9aBFjTax3~GztDIMXfL760I)y!2~~q=-)vgrF<dh?tcODrWbPThLqq3qTCm9VXITF
q5Ug@vjFsyse8h{fave#O`y$G{Ep?ad(!Q*{>x_%LnQ@IJ7yTbEW{nB}

delta 42582
zcmZU6cYsty^8e1;nHOeuc4pq}L?-Sm83sj?$Sxv!3VP;zW{>my-uKiy_3nFjo=Z+H
zpeQy$;!4hONJ<b+5s@gMC<sUrkfaC;!tYbv{dk<e|EB6yeY(23ySh5OH~UsJ+Hk62
z_uh`)O7G&{&IPV-?kPUL!7O}xkLzPyS!EQaKI-}(XW?H@xm2I>iC*aSqHDOKwcoBR
zy={w9c>b@hdmZeJS6mMjetE@p=RZ7qNBG^E>53J-)3EU153UynIr<m=^DlLR!!uNI
zJDsXhWIEq3gnFoDj^^*X6y5E0yNK%m+hqhSvY5!Skoy*{gNKvZgFV$-J5P2gZYkq%
zf$Q>EDh?8InGx$L5GK3g_1ym{<`9bMob6J=@j`Lo+n(xTM_W;@qH?|=wG@ENcDXG~
z1t7D@j20XN)I8RruX=6sc`n5-Rf?f9&lSj6Bni2474A-4#c4VhvO#^-&K(xomOD}C
zLYF5cRh&Rr=t?)TNFXe9HErg;jw7I!i&;rOwRPoU8^HyH#V${URB-`ev8#Ryiv+@A
zSIg_%Qym-v!XL2L`>E4!`M`!yiR<#zlR7FOK5!*0L=_MpxEeNc&onrMW~v)q$~KoX
z{+_|+{8dk|rw$vXh2j0xe><!3#A-(kFdOZ5)Bv-Q9O&b%tmy<3-sUQHn{FM=uIc@Z
zQd8aJa&C2z+YO5cz0Ig3#ICSZ)3wE=u5h@&PH~fT(>YvKBJmA{cLu4C`0^kuD|A>f
zTs2HtHyvoh)lk^IMfk%oougU3(dxGRXj{jC&S=$0NF4(@qt$fQJxX+2x9O}cB*&;p
zN9S7gN*{Eib!ycseb5bzTGh--3^y=p)rto0$)a43>71e}4dTNc?8YzEFnfEfI;avH
zt4Di)HpNEs0BwqDT0P4Hv?*$?zI&O@>tA9zmlqx%r&c;Em)jU6Xx8QGmA+L1jOA*&
zskEpB7|YfCHSQHoj^Q<(>k2#GS34<{>ud}!FxIJ8dY2a%>(nc~%L|NkYRgvc)1p?T
zXkzxjWcA0&jW$FnAU3KV%l1-0Y*e$?Ni#|Tu~BW)&V5PcX826!zCzzAYWLz!`)mv!
zF!re)s}+5~*rx`q4(kKPJ~fqb?{sqvzo}kOl}l>j)*0%9u4??Y-0BC;1=SOlh5LbX
zL5)}q?FY^UYG~0#{pg|>)bdMevFwh1bWsy37gcAAt62yrzYr_UOAnaN9-2}f4`gon
zzgN1w@G?uxQ$u;MqO#NgAbMyqtJDBW?V+L6OTvk!>FhW8$$6@ys-Jena1;HZpLV5p
zkrn+k(+V3VAo^+9ocmqFtvE42Cul_j3!~?&!<_yJnjUq(L(m!p+{x^w#p=5qCR@;8
z0(!Cq4HD3kH8ahP1qtZMT6xZW8%MyyX{>CC+O=|;jX>ddnvFo=cbaB~B!UA7)3j*J
z-CGy|Z_Q$(mZ*I@%(5XAK+LisDEQ9OOwquaLcw>ImP)&C<wk&-%N}2<cB!0eBNPK+
zu8lykc&=uOme!PF($QjZcdd&<AQ-PI>|d%*R64A(F`U3yWn)k@US)Y%Q=Gt9rDe<A
zFL4OSu4QXJQ2$!F)<$p<*G8adyjC-l(iJWstkp7EcYlpTpf~O)y!@d$u=w{oG^I>R
zQT*MZg~TMFDHMNqXqW_OngWSnw?k|Gu-lKYNn}66Pn`Tih>&iJ<3v;M(C&Z0{f4No
zW;zdPg{N1mHA>YX+guIi9<t4)kbTH*dkWcysO^{0#HlGL`IJ^@x>jB8s5)hX=%~gi
z&11DUMch+bSVTT30pyfcQQy5@fFR;t&<gcGRzGu8Ua&z7SaQL(ghKEI+w~NJFHi@c
zF8UBcaCeqpr_QYGuFEk3C_r@A<ro18i0-;sU;2$AaCf~?6Fy2c1p&C1&I0q)cxw=-
zK`&hnP>|5<rON>d5}LhqYk+DBqU`{kJvC1~&z@SZs+|YeCX~R00k#PgatG*gm_iXi
z19a4)Pbr2eqRTYBXs7OopY^hrp3p;u57(>TtKn(7UeCRhrW&0F>>M4b%5;SV9#Uh4
z9a}K#v;s>^ZxBEUb99+3fkX*&bWF12$=Ny$qs6)sj1MhlZ#vXCn{v(-EIhDHeaVpr
z-vXflyI40$xu>86ki~kybdM%y>k0<!a(3nmb!>jQu81KCCUlnTiH1^#M(A?ANmF-?
z&;hxUt=z5-&abq~p)t8qH%g=qjmed|&+i^aqd`|NCN~yd+o7`J{6?!Wz=hIAJtpE2
zNGNU8(I-C<HH5==6gurvKXtU&VV6YXZig;seO;k(w?oIQzpTuyxD->ZF^b+SwEsqJ
z?>1}D^W4qcPM1R79%LvLZ0;GgetnPt0nOtyJ%t|z87O%(st6iS2eVCw)UD~khHwip
zAvBnTYG58{kV6Wq537S6nIVS4D?wahlhk4->?t<YQAW|%g_pip+bW?^hO5l|Ar(<f
z2EAt}x$@b}@q(6MJCCVj%faAbpB@9|Jp%#hZ6WS3)p3Thij6p~4z0#7-d2z!qsAEs
zpP1K(M1kXs%qpXpVhCq!>kAK!H=Nhew8lAG`WB<~35GLsH4AmFHJrJtS-^hZaMr(?
z1+0nHzv7{BC;f_rrkngLFpR?~hO_)?Fhs7YhV$C1S%^c^eq|V<%5=lo(3Yz1i^S47
z!*DjTd3}p9>Sr3x23NB%nrHpWFr-4We<g*?X3l@%_bo=IGWS>JBM{FsoD~FLZFv#t
zz<k4*y}C%u@C$y0A4H=6E3h)tx#(BE2${~puWA&=SiKtl3*K%^jcRABD@B5bhFfMh
zufLjwhFflkM26c6DKy*%hVzE2rO<94UhRHJq1{&eN)he0(m;t5MMuO4bFMX%PuaAS
z>igCBCB{%O@AzwtbVl|>L=APVk^S^aPgII|Py7#IiJqtwi=Ozg;Y?l4LWMptoaw7s
zsL(p<7OnZ%0rUn#`O<K*4X4zW)%a~0Q4GNiwh^c`B(q;$F``%)@wws5OZZ}G#74Ud
za2AZ%WcMA;0`}%#Nx`dIFdUj*4F<PvwOf*F!mZn`E>g7QcEj1`ilS)99fq^=Y8Hyz
zX*fH&JM(%2d6%Ii%UfqUzxwhkFaA06^#48o@(t{l)9Q6;Jm5(v+S>`OT}Hix`yNCf
zr>X8SiVm>5&Zu|$_82Zd4~R~RKi{%hXViS^TSJLc*mi*l&2Nol%AG-ZP6~s2S=|}6
zJhj(Qcn&~J$m}H<q{JXW?PKkKRI{mlhDdXWNnDc2av6AOKl{gzYA&_kP<Yw~8EUHi
zB-5PBpl;u>r9Y}IGT+%aRFm&W=4RByWvYjbqLT(Qeo}8T4;!u^uZoMRa>P&?ir5Yk
zW`pL5nF}N^ju`bDxbHwYE~?Y_2Alko`rGvPwh&e7dlI^v3xPUnu;5wsp7c>GCX0xF
zl!U6e5NdVIV7<<&-P6ZxB&yai5~|`tsMc|VmH(`EOdmIta_(mrZ=vHP)P@V8d;DOq
z?mw$-(?3|v=%UFCYzW=Ng)k0J7;O8`YUj)eL*W}BsE!Ju6C^|)Qcd-YQFPv5*Pnxj
z&KRyR_YmKW`O#3C2@i>F7|?v#<^l<f9}P_K6(~q05B+4Y9p}{g>7T5L23!dJL_#zK
zRchd~2CH{oZIeEWd6m}-T+W8j4O|Ew`q^MFomV@ge?|jIA@b1Agw%lx!9(W^w*I_Y
znLcNENaY?nM?w!Hoia@IqER%DHLOz~s(;bYeLyO98dwZ<cPqW!PWSf?w+6bOfr*Xt
zSZ$qpq*V{MvkA|o#Uqs4(~Uq$*|p%nz+S{TN13!i9qH}D$_r|pQu(%9=APi9dER!*
z+!G}H^R`<qfj|P|Z8w%chY%lufv3aS&zICA9fsQww2B&TLr_vS+--_Q0aO4n+#QMX
zb(ldu95pPVb?q?92B0<6C>wxE8ReEMAZP$!lp8Cc2e}EL#tfUFJ$&OB8=x2fW85C{
zoC{Xcq%p?rk69$CxD!eD3QE@uq-*MIw=%cT-l2V1{0x4IMK&G)X0~kyC2+IdrdaOc
zDPU&1#S}m&NP}m)vvb{IkxdNj1EC+!aXbI)Ugbl}x=r;9chS3rM_t-Vt-%*=J;<9D
zdyDE3w{jd!JJCSXx@FUHUg1WsR_kp2y&EYFHKlk6uN`$eZ@G#CV~)9<H@c_N?t_~e
zx6WONnp%_M>N>X~Hvhmz73wTkf`nEbxsv<@68T7-yWXP$79?Mh)wvUoP?Y8Z;Gpa}
z_w~2)MH=aVMT@jL_k$0)-=J*YjRsS@dz3yNXS~jlDXa=<PDeEu!moG?zjpV?J_Zs-
zb@#|MGDsNJ-6N7b!h&DBdoq1I!mq@@<^_!C;c;H$4!S*D1}tYOm_0qt_W#WUS}%|D
z26l5q3z)q<&O0$tkd2ty`+Jl@?74_`cQt-l#!=_%ZyQIQufIn&I<x@S-y<6xB#i6t
z$qu?=oFa`IU>nC-+_-_ZagqtNH(*>=nk>2KG&N)>U#+^S$YF(tqS^<J7Q;M>DjSPB
z^)Qbn`Z$D0%3}uILyFPUJf=F<Q}mxg=eRc55ghB$z3%<g**)kO>RgZVLE*c4+P>my
z{1j^^JOJKYk0J0t0&gzi(H0U&RCKPV>;qJkdLc2kQmQ@A<7~z|2XQv@lx@C8B+*<5
zEZ{Eih*aBRp`jLfkOoy#x00FwTjUWbr^Q0BEO-#qu98CIEcS?0-jag1mJrxgQb@Iz
zdYs8CEDS`zFT2`SJ~ji+<sRpw?%@>7Jk-*w*cTaX<Xx*gipJdxCUMDsG(<oGXO+h<
z#uG@4m{lH=CpPpHt<Se!Ji*rPN)C#uu4Nx)wT{(mJ&J`wMXmLeije5xoocNIAyJe;
z+Y@U&v74o*sZ$^yU+al?=3@@>#Gx^_)^lSgcRy<I5^O?yiVk}m@pDS%u4n%D`RAT~
z<@pz1$n5L>PNq}lr59g*rSMw0_9sWhMvqRLkHyXsM4inZ<qM3TyAgCsWY8fN^HgYe
zwc6rww&f;>N2thFkMlnGRF}fVrfZwWIosiGh?<sA$l1vTS7?o&+3Ard31Fh8J3Rrh
zr2-P}+v&mlK{W-5n(p+(MI0lN*L0_+-p#zGl0!A!>FIQnJI~7j;w~1euU+%(E{{SH
zl#r;Ic6rLgq8=p5*+nr#K1DgZJek`?b$Bzuqq{uWuCg3zIPTG1o?CBoPooui2~AD=
z3p46#GaQxst@r>g`rCew+`$Ejg7<rZVpA9-3f}L*Q3<jpK!7^rVZ$0~-8&z$A!vF!
zWQ7<A0pgIy6wMEkD<Pr%(1V8cnriQoq5~z4_-s$%;YQj$&cfp6+H;O3y-Vcu;YCCC
zD^cDkak|G+X5f`ADR}WW9L#&87GY1d(0X?5U*c@Zogjoz!vQ7E-|{vU9JJ}c5@&x0
z?;?aewnV7~a!<E~jMz@RLbGc$hpY9t5-hwZB5-v|o5q(Q0#hdu8~{!zarSYzH_{;U
zQZJdpo@uRZ?l7f9##}Jr(<vp=ry${wDJ4NMErEnXrj#HrZp9Jsa5{Ujjn?Mb=_QH?
zS6<%!(@W$O4-zWVOEAS#`-4RLPcKPz5tdr*KfNS<8*hISknKOc<d)yK-=^JnFSY;5
zg5FjOxt?5U+e+=fvPAB@LkQ-qEQ#b~Nz~#iOB#sXBs@jID@z(Zz#|cnV(MC1()fP&
zC7LU}r0{X!wGLW$#}gmhr4*x-k4rq_Kn_AE<>QioI0ytuN+mc56xAz6DIb?4y2?_D
zWhoz*B)hmD=Y=4Wu4j){X-_`6-Y$cV?ADja?M^S>pITocw>v?ijP)hh?i6Jpy#d+a
zepv=3H#7;aFKKw6`%M}zUYa<!7NQ-sp^hiE+NIF3-d4M9X+vwP-L|x$wUyddl;T1u
zTT9X+AOI1i#E6r**}a*vRxf#fZ$a;*ZB?G!YZs!T?7by2qks?!*;^t<6i5`Zw*(_f
z6ha%%drOkH%c{`EGgW18Nvf;+0bU5^kMBxY`<t}~tG=@fp*`mB>_TXd`MVOC8F&@i
zWB#rLnZf%ihAj>N&z2MoDSUpjmMiw3EkPFlI-pCb|DP{mj@z{A7UxUk<O?pa&X>py
zMUcQcUxE!qJ~Ne4AG=h-X5XfbXnx67qL_E7#1J76LQuL?5{}SH0|lW*J=m*Vw5kq0
zymFv{i7NE)%5DV`2tB+3akc;w2tB+=2kDfyl&D_pL>H}fhh8=U#jaj90(Hz@UfD6B
zLONb_%o{lZx?NxPR9Ee$%Dy%NO^|(U1j?%WdIMrgDCOO*uNNbCCk>BMGI(%dPgm_x
zN9Vyd2Axg}_R98#5HJRN<q82LtQbu77)Mj1&s0Zxi}rXO@wbW#uic>yakS36-5yMV
zbow^ZD;HQk1iNuw<$bTyeMUjB^T{wOc=0_7b3CN=XA2+F4pfi#VmFSWo)ChoCwQ^D
zVRK+Wt=IVkIvh#?@I<dN6~F-t7eQ3AuINx}PVyqPu{pq<?8PpY%>nKdud}4u-5AdC
zQD>UL{_?2S^!GEoirDoA6F@V(K9O92gw71FOfEp8^Uv_g<bp^(<<9WR<U(?2%AMgw
za?yiY!AJdMu6NPzG{y1kT(9i4;BvMhvKo*mX|7l1Mj%nrT(9|WKFo*|%b~g6;JsI~
zxYGTv(IOfJp~?%qtlMK+hZYO$f~fojUU@hGA?Pgd;&9+SVIAg}rQX7($F!uQda2b(
zd<u2drB){a36P~;xy%3wkfmOv2&I@JK<WgNdBY)XqaaGFx24|fQ<x+SF2eIjh&?mV
z!FLG3L>FJ-RT{<Lb!2XN`IYC{o=5Z?8~%j$;;j^H@LULp)dfh{w8HBAAYs!AZ$Qi*
zAYs!AFJ=!~+WM&PulBO0&u9;IT5VU0`u=Jgg8KeyZ$KQfK?e}4y*OkWL8sw9#7lL9
zSJ~+;eDsVKQL6FVGKFI12HQOpGdEac2ztQTKx2sVe~`%kH+bvq^osnS7(D;~+$-~c
z;)wizqgU)^axIbnZ}gT|alckeF*Nf=?~RX2Uvo{Ax5+DWb}0qdZSt1$U0e$cHgEFY
z_`9nW(MX$rRV3o~W^Xy)TeK9>88>@xto|=etQog><;p=8iLLgnzp?^b?OVO&w_RN%
zw%WIO#qPd^kFEA?-irS!5?k%tyf=!qvxIMtz4kAz#^*iCx&3M{ihj4l>-?S7zfqmt
z-ojgdK>zNz+ipM&HQ(*^h&0Kk(0sJpThHoCG#~AzzBCkzT^C}|VQ<lKZ{h1dX?`Ve
z*y{?oKSD<4;%DhcyzG}hYirU+yz;08Tr|-U8Xiw^Az**+W#7J_J)QgBD|bE-4IuPA
z2|dh(Kppienewje4=-w6n(~f@0%-JtFE(sJaxo}jfrO_p^O%=)d`YXy9<!18#v&n~
zA?wlk&UuS2dJAJ-(*C0O&v|jO^aQl|x#D>*OTVl=nK|!O_#{GH6mgyg!4#?@KRvAT
zvN11fQ!{m5xtj<sr0PhjyO08T!ONa|Me9*@0YjRy1?ZBw7f7lEhG1{*lDB9;se|SZ
z7oF{1@?vN9d6dF8)Gm9K^77xY@qaMl?8aBMJ5peXtyw$<&}A>q%)4-D==NaKUe#`|
z=us+tgUvC>^e9E9(u+*uyJNjem0bK)Huo<^kTv_8_UAMh;@k|6A>O+b=VtqbIDFZk
zE&iK!AltuGwj_4HAk@DUu6&;kYjLGyW@*txU*W^QYvo$m%u+qzUQ40EkJ&_BRH`g4
zE&TYp)>)~>Z?QLkCopzVso~)X6iAe_sI=6_V*^Mu&!STQ;!+VCh=D$gwR@?v10OY#
z13L<(x#m~108}V#af5qHfLnlRaaXDGZK*T9DnK`~QiW|jv{`yJn3gGgp;s!mDg0ug
zS1PwDK*E$=rDfm36uOK>3^GOiy41O+R9wcAJe2$m;yVxRl7-7yyG!XZ7EMKd^6mao
z<(7E!40F7pwS5kRSZ&}D{IS2(FQ!<K0NY<Gr&y4PHTz5D6iXzZV)vKIDOPf5irrs|
zDfTzKG(a3eo5kA=%W7e^@C~hbC1??={d_7rR4VfwkSPC9smymka%IHo#lnq<n?nle
z8f~fmhatWz7&P?^@m;~7sb`2!=E#0N^$hXJ92q3)FvKTwWFke5Jj90_`LO6NfE(pg
z>c?Np+{NbJq6Q214%6;dD#5d?rqq9wPcAV0JWCtp3yY;PNLW3}hov&zHu6(qKgK8S
zF@WHdyvG0%wvO@1dki3<ImTz*WAH18kMH~VJ%*b>p!V<EHc-<3zFlhylJEQEMFt21
z>3ttAGTec|jqTYfzM=&__NNhASN{~BJWj_RCr)mC?8e88hV?-JVX9A_!GT0Knd(E@
ze=`OwHYc&rL@h>Yx1^{0<mnH%5Ss2o0|_BeGkxq;5}N6g;}m;|oQ-kXl_SBj**^B=
zNbUCYY@ZAe*ye-KY-%R-8We}R&h@d*qqJMobA9q)3tR}z^<hyZkl=y&J~nlfc6(;N
zPsT`87ee!WNVF#fp%K6s@fE#YD0@$vX!yVOVUy@~G)sW$zT3yvP1Nql@Ak=22rlZm
z+h>TR9VCq1O<0d`9X#9%t0rlWw%BXy(8%5EGsIR<fREh0K5PZOh1i9HV9o&_`)ran
zwDN$}eBi?P16K2a1jYfY(}F~~2gn=uatKg|eQeZZ?Y<U=rC$L|gXOR<(SQdpkX)*9
z6CU;P7%n{KW63Fq`p4{YX|Npg$%PVxfN{(xFT{cb#xd%;gD3$Fkddc-g|DY*rH-o8
zHV9>Er)?0*)K2>XVp9T206Fc$e86vG2511B^A#FR(-Mx#b2bPKg>ycSnARZ$kaNC@
zYh-O`D4g?M*P6$y0F8tTKGtKp)**iZ8G#g{PJh8C_b?#@oeMtX>926(G14#l*wN|Q
ztNF`zYtiMW%XVwg<)_QkT1!N0A$97_2G7uzRrdDF@g7j<>QisOj4&Vp(c3TYdV&N*
zZ$F&IZ;l2Oq*?=5-<jIf$^kY6U40s0L(tWy0e%^zpaO^i{(4CsG6Hn<sm3ot1_=16
z#xFw#NNCphWyk;t%^JTIG6Hn<X{euvj9WmU4-B<!pu0~)Z5!zB(@?(*84w22P(MNj
zzw$yG?f#;f{=)g$S{ubb*6;Gs9)b&-+PJFXXC3Eh4`#;s<){M}-F%!MBZaOpLkifn
zeztI)HZ4=@m#5C)LaNpeZ|@RPASe4-^?dE?%w)gV^Mo!9naO@E__1gqEEqP;&;GSQ
zt4U9@u_$6pBP>d{Jk;H1_*sL6NVjJAWg-VIgl70LgZ+dRvkRNai~U7w{e?aYwKI;u
zV!tcmK1gL?Ll&Fuem0<>9m*{6EBtC4aiPA%kG-NvLJGB7?q_c<)+T3``(>!arYxkE
z`w=QP2`P{({p_J7+UCqkzf6;`gUZ<$7VCu+YPH7CZd<B-mR;kQAr70QkXqwMh&w|E
zYo@6l^cNlX7g{gVaAWVFUyrzJq3$%v;3IyeQ~VtVyS!1mf&Kj>?e}+sBk~D6hpk8a
z@`4pe6nDgr3s$sx1Bt<L#2>kl=PX1bn?T7&{Lzl?>p4EukNH{CHCp>t$81!Jb;tbj
z;<d?R-7%{93S8TA22J(dK+*VsBR;2$z0_Kd6y~haa8>BtfSz)HLS_fa?2!Ss|8s5K
zT_XeHx)pH&J2H?FyNe)U?8pF)jmcP$Fm`01*}Z(ffJnZ1HZsus9?H)l0PWEMc44FT
z$X%lY(gWafw)6l<fQ}AG4}b*d=z#P9k-`I`1JVOQYOisu$r`P78~n!58D~RNiQ@v&
z4R{LZaRIoYKkdtuVY&?zO%D`GH*0+z)l&j`IdW{Lvy3V~HK26j)dB@fkfOmr0&{9W
znhO$`Q!R5r!rZBrxkL(cr;@n>9O}~o%8e47-}oi)-;xi@xHF~&<W2)fpic{6r$Igi
z`m{i}BkvA)D$%C}B314m9H>(Wr(}Vmj{@wet=h4&xdFYtyE|n|A=F7-5>S>03Quj*
zE;*|4TVzRig21&T;1L_GAYtH=Km*aJAYs9hK)wafwLv1mT@tuvc|e?o5(AkTRF($B
z4Jay#SZI}H0o*pbpO+4S6#*q4|4ruJZhv{T+so{m?ONA7Si-9zUhfqFIXQzwsVf2q
z8q{$@)Wk^0AK0NiQoYL7q1Ig$kVyc9ptCA~&_;d^5w$uXMm14rM37c-G$*eP7~;qS
zPq{GW@y&GP5k@W&C_0MqvD%aA^jx<WUg`Agv)x{L<>?om?e^|#F0IgNr?$Wq_?m_b
zT^MwRsmJUIu=C$&@8tJbrGSf4_E=p7Bud#sUF9LJgNOS9Y}sz@;THRB9U2Y$EJuX7
zBleLa_!ZJHdE#Jz-Lyv=)8e45M4mWkc>+Qx=pcE5Z{LQA{64^Z-)bXTeQzs~55Bj2
z03j{~AAClGBZA8<fugCVBR&Z?W?SoJg_GZE^BjRQ0Ug_#ROtv+x-P)(`G+xz-ML>=
zudTDN@d(&;0lA+H64-SC>?eOruUSN3u3BR%gA0B3Yrk<;<ELmBJb+$}Dcc1k^lD7l
zM4Lb$(fMl3<X}@Q^oT*LE9W3nF7zY^P8wv&g`Q*qXpo78-fwyN5O~W(ckD>rk##++
z{iX$IvAm4%B=0S=L<~BR(0$896JR%&j0ZWwEUY-JjdwgX!j!`ZYz(6jrrZqyiJFWs
z>xsn%NUnwCg9b844CE1JeX$Wqq!>ga%m(+kKcJj0LKEd!v#|1et;$h3)-Hw)O~#rY
zaVZ>9C}yl#-d^HTVmQ{Utl|kugreaDQzR%LpgF;m2?|JPPB3MH0uq`NOe;Z&P&PQl
z6l)p~FlLHv1MS>RF=d{Gr$Cxw$^-=@kfxYOP#!@)ikj*SvuKIQK0dBJ6qsRRV&pk%
zlzPuxv(VxP<g9nkHD#^{Ho)eZGFJo%u(_t((*+5?%{9$-e2O8GPcd`NU|aVwa$A%}
z!eX;9=!EuXN9V<s$zY>Ci>=lH$;Il4AO{kqEH)A3CQ{#znd)k@XfOKyyT$C(twxA7
zen9mWo;;=f+Ywl8;!-&u05Ph<T9Xfe)*#@NwN_6Ci4xYDas+@x32RM^08BkjXN=7J
z%q)CxMjPPBe`afuU7wk9!h#gEKBGpVC>o=|ztLo`{G>flxzVZ`xTxAjQ@$1i5)d2B
ztXOV<1jI(OaZ~p-90Jr9lc{I5Ypb@{5Y%_KnDV|-jQ8CwreAFAf#gcbwEJ@!_c7|3
zJ52WKS#4wG4jY3y<__Bo>X<uB`F0X?fU(1D(~ft{m;zsYWwIVWYnc{bSzQub=zL{$
zNs!R_>PnZ4Q9Zvk*`}Yh%T?dn<x*$-*6NH90>-yiX9Nk1Z>cl>4h<VO)$h!r(Lv@t
zuRY@b&eW6KD{*SbgC_gidF|Sk2d%~c7f=UHITwQj)Ik$-F(qDca`O>WNyMA7YroS{
z?C0}Zv;`O<lHoCbZio|8kWfBi;$Vt)1fh+lJZ`e8I&EtHxUEE>$4z;n1|cXNH<4iD
z79ey$oithKg4X6YC$0K}i~66m>JJhSCr!EN0m+pRcXAv8O?Spr{P9qxGp=N?*A+d|
zk{S+7ajz%NBgz?56TuK90M3}$YoqHVaca1;CX4){RaKp}ZJ>qbS=$C`$Frt<We+-l
zIBOz1KPl>t@-CR{?O(K0l^1LbT4!Fc`e2;5;|0?%QcaM+xL`JEMq3In1MAF7CR=q$
zyS?&~4M7{ymrRf4b6R#@GNU4~fes)pnT;BY(Ho~-vYxEVWo<%-o<SMK!30Flpp4=m
z0nsy9?^+&SK?0&@uvHt`ZLkRKGpwQBva*j2U;v;`P`>9E=WEbDLHV8^NC5N+;w{oQ
zC=A4D4O+ACU44+FLyZkVYtWjY46l%Z4K+biOdTKrQ4?&~*ximJU=2EiJ*nvJTMY@y
zTQ70G_#6_H+XWz@G9-vjAo>xlJ%h^i@rIdu+1S2nnjKU0KowXbBaAEbzT?oKeBTiy
z3>X?rix&++0&QpzL-}*cEaM7J9^MNUZYb98QaZk8gU}0)@7bQD7ardW*5h|_NeLkD
z1?x9-52lD)&s5(J7A*@F*17Z=NA&$5rU_c4IqP9)s#Ai>%%C&A!olu5Y-HFTQ`gu#
znqFIt2V%HE4DeHea;$;`{FETZDkTmekvL2VhGz!Fwk$CyaZslQoil=BTUPR*H!Uc)
zWhD#SveSdKE&Ddrw;qkrMM33`c<;g@UH4<3+O~oQ{i2{ekc1@A76s+x1rj}OQP32(
zfQaPD%c5XVT%3>`M21DdmSW>tvN%jt7xx6=5=bl!;=RbX9hv+8*p1!d(MMK+AzH5<
zpAVJ><pmLtuxV*9B6fX10&Hmz%iC+=_k^i_7%ciI$dV;`3;%~fy@cP_NWkl^l|lAc
ziT=d1E3N8*3#gSrx%UkcP%DGj`=*=*B&xSESXRv!Cq$xp=mRT*A#rI#vbfTNue+mg
zW`c}ch2p(>to16pAoAlXt2H46omJGD6nPVfovzhErN&X-By$V9bO*MpdwBI^HF&}W
zkiZC9ZH*w1fLk4uC$As@w>pT8PC9u7iIdmWLF?p|Xkqy3pgeh%ES&PL4${f%Ms!&h
z?nP|~7WF7|#8(z)ZtnKN^Mz!ozQz&Q5X8wALqoavU8B!~?6glGp7}f|_gTS3`+ZKu
zpB7RuZex&5^Xq5Q8-wziIBo<%Y9o!=rW^{?rXX7$(3_<<1?3HJ+~?tJyiuOzLa5i~
zAk$2}JhM3{w>@xK2SS^JSoP9bI;_GRuq9aNV&VWQvn8nTjXh#RY)cU5b*F?`aN*V<
z`%_Rqo!%N$8dD=figs<c2AehK*W~$am~BD!TAAKCy)7uWW59*bwjct2IWG{w`imgj
zU8d*KUj*eo3+}5x=nLwIxa<L7be`=&mI>*t(%Wq$9YWg)sWTTsz}*pKFNgG-(>sFl
z6w0d@5ZV#MDbzo>5Mt`iAln|&|C!l|VImE8Lue-joDCSoC=YRSU$F2}Sie*0xX%{z
zKx`k0iRx11+!t(g1G<VzN;JFf3pQ@=9w$%`N{<E$zeM${l0IttvIHncgAE$-*Al!G
zA&&)FWj(!P`dCom^AW(j5IPpbdzAF<0<KSBt`D+NBy`+HqTQb3gmecN!tw17L3X~L
z{@e5qL3zjDtN0-FLlBcAZLxV3TrE5iWZe>aRr-XDME9mo5EAyPA%wT7P6pZPgnnP<
zq>U7S&`Cm?iQ7()!V6Y)!9we#K1)g01r?rD5*uQ5K_r!vM3=%#SKSLrMsMWEbT7N&
z@*t$Tm%*2Pu{GgBxb0I`G?;bG>V15D%5Z{8`;`1bQeU<^t3Q<LTPB+nOsMuPLzB|$
zD*XOYKXzZa-XhhnOuqXECS>}R;oZM_Tn1EsHm+Pxruvu3gAd#&B5oNDJ}S5jT5|x~
zRjxNk4JeaadAKtKnE_?k%A<~m3qYoGAWP@;)~SJIva^B-nSo{KthfRS8H|lL*k5z{
zHK{jj92y#L5RNDdp|6Im%%QBBGP(U)%11^`8CK@__yuq<G6pecg??>zkX?5g7=x(p
zUj*Eg2C4JQik6lY9<0!}>i+p<dYIl^P#u)CE-Yi$H`lx57nZ3!3KJLF3(LwHQ3oax
zRbE(j-EHnhTnF8^P{!so*Bj>xWh!6cLWn$BC=2r!qltu0p{(tl^pZG8JX})7w7h=X
zHA~7=e&$GA&JHz^<xosrQr7x*_k0CL<8J%PvZC>!LUmrh))81)rib`PFYwL^tlnBy
zSk*$G<!rIFOyzfXhz+={Wu^RJnMlBGEyFn5)&Mr}06s2M7}H9BAlP+WNag!B#D><m
zP>e6*h=kU-P@B8xsN9(})!I<eXCZ!6?o6WQwIMwrlD{OGF)75CZmmF|Jtu`^E&&p<
zlR|Ro1`?=~LRh*X$U2iWmrMz<k}i6A%PF=F%~(@Ha#s*S(3uj#Ru8`glZ3O>IU!|!
zsPI%59k*ccTTE4Wf_^e5<PkejAb~R{6cgJ9Ab~R{gjs;{7?8+g=7j3c4~gA3Vu+1{
zxgojxCRy;yybyNZFk6w$Kq-XqS&!E;U4D=4EOz#Gy+><sMD~Q|D79c)Pm6{ESx>_o
z>UcrrgOIX1<ctqvomLrB*wWsHkNx3g{rA;)2<PFc1x4$=4?;2#!&5+g5R!=)NL1j1
zP<S;eK<DGc;EC9WA?K=)NW>%$dMiRQ5tA$=Vk<+Gh|z&<k_O>gM@Z~$fPx>_hUD%B
zNSLuUBzHGJ0&Z={+TBQ!)7OW@o99FB($$XZ?FOOs<ob}zz99*q^&z>r0TMv#Ls(Ca
zqz^=-Om$DFXi>PZ?Jj+|vusZY{rns9SqdFYJrGj94;8xKum8?bjo-pUcml)&A(=&i
z1mb~^yg>jG9y$;z`(Ap87~De#L(U`8Ly`x*Lzagm3m!VmJya)*K=3#jQqG2)g-0LM
z|L&*;VOc>P_GCz=swv)KPlk}HQbz*`D^7;YvsbJT$*OuP<oxN171s9i>5%H@NgwIK
zSQvIDgn&dZL`W9={bNY=Hld6FJao@<A@=ygdhW?{mgm8R=g(Q52MG($h2;HKkbpfG
zLK;KaCP*X<=R(;#WGOsp;}Ye!yOX>SP<0`;=V3kdWSw0IEtl);La680h2$5GQhd2w
z7m^p7L86elP~uiu2)~oZVUxdc$9W-`EiQ)GV~^<dp1f!mLSy1$NS@xN_>%f!C?Kv&
zg9OCI5E4L96T0efF_gJk7D6L}jJz1ic6PVrg@C#gV%s0l+dX;7E`%1{m+V5Q$6pG`
zt9&Wm<1dBeMR1TP<Wi`S<u1C|OodzuHNKr6bit!&qn_-~kLnwq=oyyb2}}s}49n2~
z5{2{(%h3Q5HR&0~R3&Oc7n^&Ab9c&`(8Xrz3_ZgYzjdd0O)%m0X2XA{XP)S7mqAw~
zdfR2tvb}d$e(EE|m+ig7n0iGS_}memmRl9!A3H)By~DZN>Gez00|I?n_%S_S+1D<E
z*7beEa$OG@l+ia_&jO`&ecv$B%y|?qQws9Tfvm@4`hq70+7NWQJkU0iPL~IUO>r&`
z6+jFOBfS!48n9wu7`N=jATXpW28Ns5$B)WWwDcdu-hN!KtQusO;f9%m!gBWjGALtE
zxc>DLl$QR3!X2vIE9fqIigMTy;X>&X`by=g5jF^&M2`r|<vXMRG9oNLR|FCuBf@!c
zfDaOejtF1-q%_n6Ln*r(5pMZ}`(sfIlH7^mLjGy}6XmIib}_U|FflCGnJK<YFflAY
z0R$4oObjF93V)QKn2F)?yJayYvY3hC++FT%B3L0yo)IoQ_<Q{UNA(Q57}`ge5%!4n
zYf7Pggc;$K*pUH=VrGP~BO{9OqL>-sw$JeWVLU}K$cATx+dYl>#toNo4!>O-e&R_!
zk)$Z|o*lmGJ44UE$WrrEZ)-e3*?1%-XOJj+c34g-AW`;gs^TTlYml5T4D(6l$&}(l
zWLRj|0+)F}UKvMp^LwE^j_A8f3&WUIC~--f>f&(GS7DL3q#?ODjGaop=bWa*Wm#Ap
zx;*(uU2U-}EJHdTL3CMI<}Dxrx-5*mWhVJIP2qH9xbV&&^}M6S%COvU2b=SC@umkz
zXsrwf%iOzZhbm2>`r~ln)bsitM~jbbEkgS^d_{|b^T(uBi**sSKyC^bF8@idP%1ZB
zUH}_j*kpMDBtSNWO|j1ml4~J>rujWhiTKvAnBGC4CAL~E0TP;9t(E`@&8=5jB25#?
zm$D^50O(8G1`3;B+BQ(w{L*R(2m|R$t0gj~`gOSIXW0@NNPZp0nICV747J1_(Gu5z
z0O}sADL_JYkJS_)fx3s9f>Ou~`ED=sbkURT@EeMIZAEI0y<wS0;wcpOhLMSFpe~l7
zJn}$TIT~h7{-Uq1#!rz(;sIa|ShWHPm;+%st$_s0fiR{un%zNCjuB2A4U06A7$S{4
z7?x?IWTEj7g^@<mTdtCYS0ZqoDNJv<-f%S+B^(Lka|-_@ibnfB?7Uy(kr`N_o(d~x
z!~b6%`9Ia*i_8R4u>Dk6W{@C(d@3w6NRY7oR5*MVwo?X444xmI4m*Deiwsiopm!!L
zGf2roe)MCQGDsR{SyMe9F1pNHH&X1(qS*6cJuR9yOU-*xG;b>qaPLLSM39iZXf-cL
z6m^lBm)?rVlJ75tS?gEzCS5OCBL-Z~<}Z7=NC-NY!btnblyXz;5h)rP5ktNll072U
zkS`}odPl@s1q3YV9g)rg3EAEeIp#qEwRc2zv~sefZ-mw=i5oybv#+g5_VkU&o`$E;
z>>IIi{&MPRH4){l$bYw0-@ohsQw_doD@XyPCL-GkBtU8+vaLX(t!g6Sw<4mgh{4-x
zP{jFWM6{LUL2qzGwv}X|t%gLbw#u36JCUN1+(Bro9EyD>VhzO{d5B35fj~W(Wg<w(
zGRs3CQ4}K&(dQ>~WdDc=d*C1XHP?;6(IuZoz~yXBywL&@IwK<Zj?+LaZk-jTIzCcV
zh&bX^Y{@_Ls^XT*9Bi+u-pLxhrvJ@9K7s>6+Ni7`vuY!3)@yqE7PS^QxB#z>$QP$U
z0=zbYj?j;Wcm-KBIl?0U*85jZj>z#1E{4+Nh`fadl1o+a)i>z?V{)W<-hCH`zzCfd
zVPF4Szq@jp4M8DdT0~Ak6};)DMP%>=35aPC1mBJv0@Tb1d;WF(#>$yC1jX-}HUy2-
znGt!;Q^7~-%m}h5ir*C!zvo1F{C>9@6V;rEoJa8ldUGOj9tDZQ=0vP{w1Vthg!e_~
z;j>`*?z-A}k!=74??tu&6ucKjWI75(04<7O8pYXx;;fIQW~AsO+G&-8{k^-sI!5nY
z)rZOl5xly}qj-I4qm`oTv;zV7l~&gQ3E7oa*8vImmDF`6(9~ETEv0@EQ9g|ns(b6>
z9M$+Oh6SEL@so(W#sCtEpG4#}29OvQpG1<MVp!0dRm7lS;anGy*BB%R&A2WiuQ5m#
zfYwEDjp15u00cHfa0Hpl-2d07*_gh1lRRk42<k~2BJu>XK5yU+5zGNka$O*8im<bN
z^{4WiY#lx$N8|xyeK8|PZ~#d!<kjaha)kBnr?<*)jmQK7T$HmlB2Vl=0(ol$D@lB9
z1v>EP_6R%JPjB0DdqnJk6Bjz$BMEUd2NF8lBRHCyAv}whhIU7k{gJ|5{q<>%YW%h;
zMGKJKR=}yx7a+T>fCCbq-5m+<mjQ<uJmBn!IQPkbBY7zBTPxs576Q&*9&qS2-}<yS
zcQB%4;|((G{|4&URDuwbEgoSo9*oF)<sf0x!AMxV-U$-e2P0Uh(lDq`%aJ2u7_iF&
zF%FJc;{cDKc*Gh9Afb5V$~dS`tB@079NY{7!|8-=0xd>PSOWo1fpo$e2q1xUf(F8G
zvGI!c56?u3evYue)abYS&qVOP2v*@PylIC;d4zpdgMIlQBXY|WT=c3RBiJ%Ut^y$d
z{}f@RgY@$BPZ7Ci3ND0xqG&;To&2r2vk`XJAiaL(tgIe!A#|3y{i7I-4NSEzQq(KT
z-WjAn?5~UHF*-tUHXti5M%cwcdgscER{g+5{VrPd0|_%OM&!3NL85*aBiQ<-Al`s%
zyc}V#4Mr<nwjn5FUXFOg9dQV8skqob011f85$vqp%pqWE&nP=GSihyJXH+(H1D;j&
zjLLfvAOX=c>K6-lkbvkJg%w><zlNsTH(E3?%KmqVep|e66yxDD3g``~f&-&UI{twp
zbK8r5XD9mUVfNh+eO4v7qDMgn)g2g>u^A)^8W@$a86*lC7=^cA<$!oNILbD@ssF9>
zU>ky__rW#<Rd;YyW`GTObq7Z=`Y#HjP~W$sN-BQb!TP_YPic%#tUmk4r(bxkTjtrn
zzWDOX&Hvi%58eLS4Hw>C&OH6x)6c)~@++CU{s2~<{pCql{06+hN(-)r+(Q5oH@!ik
z)VHH(Tlo}*za7PPcPDN*sCT36@ptr_D&MsYr%B~q%gGIS`uA?sFBXm<xe_K7y1CVm
zLePjP`}!UI&Q2q22-<HMVM9<v8ev0FL>dtV1l=8IND=A1sM0*%fz2GGM_I37dW%kA
zST&-J#P^~eF`6L_toNeHMzTf}sosk=ZRY+`_z{t6d{lWq%FYbacU0r21w$Jr<L&04
zxHUd1J8(lDx5iV~p@bYH;@0?R#rsi_kP`!O3q?(c%GVnu3%1op@nYWX=y8p3rX4Ms
z9d*PjGY`D{^mE-hu`W#S`0$h{UY>}ds*R}YO^YglIIc0i{BpNfG7sF_Mc9W&un*5f
zTm=dHrbT5Q2@+*bi(;z7*$Qy*a7L7U%k)I$46BOZ0%C?$MUY%d_BfD$m_a=b!3GfM
zaI>Q9`r&%+rdc)wHO4F(f(n`ym0Nz$0mQ5*BI&m@pEowudC{UzQQsTb*x~vOY{Mvh
zTwq?*x{uYEs=GKU?qh)f^kS=mAOXGDsvt-}FQy8<Lo-feDtKkIaOY@!m?OW^)}lJC
zjLIY#QqWo%MUqURy)o74qbLiE)iW(VipuN;T<ClhmDvqQ=zJ8lvYW<4u8Xp##_E?l
zuCp8gF05T=IRYdw)<tDv1ClEtp7+z>h$eW)EL!w-tT1Mr-lsUQE2>9DHq(SWuv>V5
zZG2x>TkW>0f=7VdZ8-oWAa|1k_{GvDWc0o$u0#%Yu%~WOyRdsF>UXyQN8AI#b1on+
zMS_I-z9=q5en8`(3Ay4>lx?1<fB4iPt5)EmR)?%wfds~(sC;b<Brpy|G1E}60EwCM
zP_&-73_+yWi8>TbbfL@5R0<T1N7;!<`iaWpb}4jw?RZpPfP)Z9IUdcnld$Bw<Ix*B
z@J}8$p#X9+%IZzgZ>u_KL(ulZ$*A09f)F51MpOLI8^uxpIT^*F_g>mbX+pKCix$RD
z(VuZt)!87FoYvX3rN~himG^d_1dzHY&gws;9@m7nTYJR{ou=t4996wyGH!qkkX|u4
z6MzIrub3QEAOX@VhCwAAf+S@?j8)BmLk8Fwl%EWU$vdJ=cz!Y<RxWn@Kmubx?7CLG
z6E`8R*Tlp&3kYb|#AH_niPCFgvMYmxW=+iM%1tOi85$FJL_xr_Lv0%<K^bb-gA$aX
zG1;LZ45Xnkbm%VV&rMDB-B{7i7&|*lzqRb$7;YH%B1bnxcUDKmlyR}bJ+pO(qZ+?O
z_`(ywkFwxF0)A9X-tYhk_)#(Juv2&iiSRlqmKhf-c9&rnkQnG&^o@-7V$QKK7vHqF
z!iDbW7}la?*xtCpL~=OBAEV`Hdu|!ZtBtX}bMzZ3Yi+A2<*1Fxe4!~HGqo}KQ5cXw
zu8m<f{2hnDHI_*+_Q+iQvFb@S1a+=ScExDOOp3{QqbVOUlVX@R=;{hcTwR$Is~93a
z8bCCr4cIU#R{!_>%~Hw2)s;!HKMZ!zH43P~j;S%FWxRFfZa&YmR`c}hE5Wk7OCxG(
zOr}ndhY?d_@#cI)f#mwvT+2VQ(UeBij2N3XPw&)eh7Cbe@(kM*G@@q2<g5-IK+K3?
zO6Iq`nxfL`+?cW`#+uF7Kd;75%Muz>b8UCfn3@}tpQ45uVCKfKZV>HE?`hACHCc3}
zo#~i^xAVN1bK#YCmR#u0x7%4V(asA3yq(uj$Z1N$bXklIT%fP5T4tL?qjZ^V7LC$n
zR_}%mpqIsPEb^wnz$jf2V}lmzZ&j|aF=&*ousuYph!ruv*ynD_N9l?fjy>qJElp{Z
zeiUQBTclT4ePlz>aQ!GIcLg8>h>v0wVs9KI%=jqQs<nG9MVzKITsOuF(SrUTN7Y6f
zgl;Tuv_WX3Zj8wn{GbGojWN97_mKd>vBi#9A+ZE^ojUHYLFmrnj+i|0YRV5TcEsdI
zRX_q{M=X(YPr$pLF1!NXD_%4pUPv#~#~J=!ahE|yH!i%Ujoqs_+qgz=Ufnyc@INUa
zE+&`Wam>1Su>&OR>k}7W6eLQJ{8QLOLbgvF)0&V4)i*BRGQ)e%kOj%#qJ}I@T7Bbu
z3yyGMW4|kf-pe~ZXnsL~o<g`^9Lrh(j85M_F5j2K>&XBH$@kD9OSeV($FUp!Gd>>R
zY-Xy%<3+RLg$--<R~7&8IMOp(PdB6Lj*PQ=KhayY9f`}Oe0YHiu#s_@ih+b(BdJET
zENw<r7>(LvS=#y4zy6Iq@rfQ`+dk1ld2lTR^2ul$f#S|+LZJ7`n^CRD#aU#X-XTBE
z)*;|=whnn?9O>Y45_CY-##xVbddGaNtwV94*4Cl8P)j;=Rk#_&g-LPt!#cexKgrf1
zS51l=VthjgI+NnwQvMctGYWoF<LuE-^;`2(Z5<l*Q{!@10z%N48pp20GrSyh-<jw%
zpX$%HnrZ9MkenHpnOieHBxh0|8tX=rG&j{%@uHLU9Pu~ZtovZ2tnknEy2}+<6-P3;
z2KSPj&8cxt)GNHXNnhLKniKWpln6F(Pt=Qv+qfWM%ZYlJ)z?r{=S}rOy`mY(LZ1uz
zO-h3c_4rDt*qO)YFD}<pdL^9n;ZhB>_;@PkvE#q!2U>SeVDp@|gTym5QjdhQ(^VW4
z)RQ>lJuoj%=8Z}ew9EPgSAJANHa*xdZ&X5d9+1!)l|Yl=9u<`Ea7=>ja2ok%$0X!#
zC%Bv~Z+wG<&X@#ld{bHm5}{{I!Y{r8L?k~_8<Pm&lkb>JC5MjG#w6Od<0sa6>SGfU
z?2j&^U4DXX9F;#IA#XlF2n9_@VElFB#(|ocV4u5;o2n)z<OGoCiSfjQ%!fb%Vq(G+
z3rvt)2~#S)_z7Fk=cXmtovJapa+-}n+1<2+%<dorjA@CKxLOVp7}FAXi}4i>fi5^J
z!CGp@tCh2C2wD}+vLUEP&Pt?ON*_^=oRw(ZhJX4hPjklH1p7`iDl6yO5Hx4ZwQE8h
zbZ$Z>!_Wc5+=O^V9~Hrru^_>o(2ZLv7uXPVQog{3pebWPLT(d42M`Mqcu#}g7Rl3;
zQAn_Fb>o4mf(@YqqF_VNlu<~?EnMgTqL9G9>#V2GxaMifSd%EcY#4VGSFN!@D7jl>
zgV2<*#<qi|j5TD(0GcxLbke;(QTV0A80e^4Z-da3vEBxuv+nh_B{XHMCrjqhA#|S3
zy0<3^YfFv!%1zsC5c+$c?KTLVb#G6Y;z9zH0J1%S8;Ao$_rOW^u7q-3yc6qT;tMI;
z0>=MVf+2!YUZEGSciCWc?|oOo6lo8h0&G{}nwI?HeV#6L?oP0Oo5uB>cH0niTD?0V
zUqOHnAa*CBBJ~Cdh}{WHrj$hH>EL;9LTMjwCd>&0jbtSlmN}Hk?M=um4AQ{bn~1lP
zeU7#V_9oh1?|zJ9;qduD0@rno$14xm5OnN(z^)M;J0D1xVlyMJ(6RG@MAPQ{^96aj
zH+ne1TxG_6m4|HzKOhd<5cE$!hZAyD106sdPT*|>nw|1=tMq7s4J$KRS01$?0)RMb
zL(t#$98Jh%9XfzGn!uk9wd4@Ea{5DpX(8jf${%b9`rDo#YzTVe^oNAJBa&B4K>U!%
zl)L}JA#fe_bb|doWc;=Av<(pi#AzEM2#C{mMS_4hO%>_JA@H98XA`VJ*!V-`SsS7Z
zEpj#?H-7U<86eIk#Jx#Wz6=m&6D_WF-^U^F9|PwTY+cy6zw*2d5rP%xZ7V{6IB!=Z
z1c>ug5!$NCEBH@>iwX8<#JIicq74xS#6=q-42X*fnG-_?5Em1;R?L&nyb{4B+$7r{
zG2W``p1jhxBEaaLyb@L;!04Wo%M9oMqkFQv!WzL*<UYy5yeN&}el|!HApMdu>B}oo
zfb>fS#G7Xz0n#stOTv5~G_T-8iZx00&$zLnQ;m&*3><8ESp`DCs7cCqO+W&pCW&`V
zmSd`cL+}RI_@q*sEcCBuw0Av?-_~G>!<O-Oh2p>&pOouO=mBSZ66;M`D1fB>wq!+Z
zQtY=8LoA#oB=N0m+T6)2^^lk(`MUUe5U_GmQYHZ)fj%iI*To=#J}HTH@i!vOB=EJB
zq*4+8oCSVkv}3cf#)OVwSf(am>U7)G1i+@-rX~P3olHf-tvFkl>Vjm^2g$;aa$}Vv
zupo&8Wd8S0EhqyhB-zsyMxUyJ1r9DOEhJ?Z1qtv%GA#C3Kmxpw#7^>$WN8bUke4S}
zMSbI^j>~Nf+Spre83-XRC0{8635?}Q?3{l`23}*TA18}8CJPTYF!nk8A19IW;FDd>
zYskJ&ldNka<LUgTNqO=EF2FubCdBqGNPvBs#6pmAxogOt&y(!SM#i%pKey}w7xsK^
z*#nYG$s7PAAU;nb2Y7>a39mKPt;wQYN%pVC#(=V|No*!O3g~OeoG+3}S^N(E2SDuF
zCPq~YFhtIb#{m5zDRUE$0R19~+~f;#)U{;TS4lReiLt%KSGE#a@>Np4wGJUDeU-$f
z*po1%rK#>t7X6%LwM~u3!@J24icT$Ih`Kka985anPYY98G&An221}R%0if=+OaTeh
zy<`gYU6AOzdy{1c(Rb+r1Tpv-*S@6lKvEp4OCI$0C*`5KWMO&xU6OV&DAu;5S{+H^
zUy&;CiK*sBJ`ch&f~s~TDNptx39utcob1zaNlVJ_jwRXS&5c{0Jq7?iC4mc_V@dff
zT9D8=mXuczK_VeJmTYt%&uNL|iR7_l<9m4`DLIr#9!uVJHy?#93F4#}g)E&n)D|bL
zL5N2v?W8pbL2^-RbE+k!f@hO_bLuG&oRT9DBs$btt3!bV(phT+f&|i88iBZ);lhWB
z&L@j5C&d@nXzDtjbjA3372h4gmR?e6B>w3EB%Xp6Z`6Q<m+GkgH(}k14-O$NC)v*}
zjLzwcN%^J&xDdLS#9jd|^+O2Mr6hag8ly}0Qc}JQ1TJS|$c?2pDe$$CUa6u%DfZDd
z#%O=96h8TaO#+um=JZanm##Ic)4fyjoda;8+&hKwfsZ;u2xjz6vC@{tL+QRLxyA+;
zLVZ(MA7LCq2vq+R>)q0LHr+oZ!X9xs8wYx~a3Q#9V2Y{N8NW#nOv$4`lP{D9rVwKA
z30CO9@ii&-r|XPP*%}*(R>(CeAoZhV({-lGQbj9Lg$>skE+xQHh#~xV{yM7C$dtJ5
z_IevbZ8Z{iH+gTvBh+MMN-lLk!km#QEOkDntn)gm=Y*8fFuu5$ef6-KEqvL=nBb@a
zON3zvAW}|9$w&#3D}+Vr2oi7;QuwQn74*r1>!|7rQ-vk%j2oSm3vCd}^%th((gIQd
zS(r+RznB9FkcBB^1T>{wN7UjJpHkS}mFUcir9<cu6c?xDi~^F2TAlei^5TanaV6sQ
zDnsr3p=|-2jAwEtha`YLOv#B4B!E6lp)dC$N4GN7Pf|sPQ;ztL#q7>vJzm&bW$bqZ
zK1u0W;qg}F@%7T<FLi>E>n)Gt5wO==9tR2R_2lty6jZMj)qP8<FtL;IgrjncWgysa
z(Uz3lo(IXr<ooF$0kS34xCy<y1q`@(dy3uI+4yJGb{m4cygemv??MO=+f((#8XP1b
zwx_TL=kM0HB64@CaIUj4z)`u|2BA&O-6^>_3n_r?PWeUb0?D<o{-UO8MGoI9nyNJj
zXzsPz3M4f5T5SaqntM}LTeYG+j6<TWZUF(HL$(dHoq5P=EIb9$A*-=K0_hMn7V-$i
z+1gZ(r;2){+3mL)yCTO^^yvhej9R0K)RQUYr<61PZ+ay*&K|nWc%d3BF*G0m+><F8
zyg>r@WJ+Gk0*M*qWGehqO3Wa{;4{dnl=H`wm_Z~DdZ$xz29YexAZJoEgHV#&np)yq
zO1V3JONQOt#ki{*2r<6!2z5PY)fFTcm03SXV4q9LOYk5uIh;#n?&9}@i4=!F=Tg}_
z-P=U1(KUWa;X=k*2dnF9)Mup*J;<)<Y7EbVZPlC%`XwblpwOCkjbBnYL8K3~wWglY
zJ<ZN`HSX)!J$=Pc>KNVAvV%eh5Z%-A%LO30Qk%B!5%gW{Hl{i>U9=_5`rmGJQ9g2s
zi(id9;rkHzJB+x(PUqA+<NWK+ZGba0jn}n!C~HFlYgn3xvUVWgoMCBcHb}@0OUqaW
z5@ilcV`SA*ENg>GsiV`%*mU9PdyMgpYWx=U#S<uwPRpA{AfY%qEpHluL`#oOC&#A6
zO(SAZOFPG;<xL~WfosR4<xL~W0??Q=ZW`hBQy2h&32EFkO7fdVJ?=9qT7tHWAg51A
z%bP|JhVFzk4ypc^>w=n;R-*AISY2PeKD&6IadRFFOPSm~DJ?hm+HiMIN@H`6{?wrj
zjl-#F_QL%}qi3h4<@Ybah0fHp9J?S<#MHDrNCb(#G&NoCH$2fGk|!Ed(}`Pnq9Hky
zXiQDt)R`~m+t8?;k!I)bH?FUmVRa2~Ia>x-kSKRXS}r?5qTCs2?9ub9du=F6%}KMD
z9x(b>&ap9Q-)Bzx3I^@_%t@PK_X#?{n3Klt6YbEop?#luY1aBdBVRSohM;|)c{T*?
z`^-z5Vxa{cK+H=cgz|f7Z79!Lnl6lg(5Q8^TxvU-wtAMP<&G$%ptUrO8K2*|YJ;sF
zb#+?#IL&b9>RNVVZ{wdV`-pM58ceIHXrE_wT80&90AY2yEX)&Akmziy(~*zS*(fn3
z1`jJArJesti?AYj&|8z1VMVeKR@SB|tWfxELt93lrumh87RI0cwgv~z1xsAT2MJR?
zP0RTbBp^RcTQRr|?G|lH^ZD`#5a>jkY-iGz(I(rOv}Lp@EhkI}18GxQCV%)++O~Aj
zw`r05(T>5kwEQY3zHf#VLYltH**yIP#s+02E^skazDOhD;PaIrp|T^*Y92H0Nbg9?
z7o@?3(2g`#J-E~YAy8kY+0Ty|cc#Bg%cKun&PLMr2p57~yVC6Uj~kDscco?e806X3
zt~Am|frOfVlV;yM4y13=@=fC)Kacn(jbpOb90~Q`lV)9?Fxq7Iq-C}m<ZpKGNh4dG
zgE;5H$I(uui~3{=<DW3{#r{)NZF*l9pESdqkY;<HHXcl$wyF&-j6F@&#(4pRQ0*Vn
z?EYtrj_DuM@@g5l5c-kEDK;n}1nO*>&3ndpAbr-V5xAU<8r{Q%Q0;SR*5Fy=-t;-k
zH)Xuq=hE;^XD)<l*QFVI*0?!cmzFQ>mho!W(eR{9w2Vgh#WbsX*65VJn3m}(xG3&o
z8tE$LGYFxVT}rb@e{bBMzLb_JG`JADltv1TZ5aq*kao|o4Zk;TPj}B;5u*2YyJsMT
zkqjY>!k!t{wwsYp_sqx?8e9nV%pgGH1PDUdU+tY?y}KE$vb{4`{6sIb_s+miizwa4
zH{IUI6up~aUv@JVm~Uioe~(%sL@iO1QOa4TdD@-zLBi>v`2iw51xQT>wWrTLhp0sc
zXPEh%(KS8TG6!4;4JLE`&4oa{m0|yS&UiijRz`Mdd{~XM(YBqq5L)Ez42%BJxGDE`
zM*1<tTjcEw{D>>aC=M+$EQ2kOPVCaNMuLs_qj60Z4Dr9Mcnrv4nev?bIAuC*O?5=3
z=z|RV{*T7dz=#Yo9X@Bar7Digh&dAkT5w!OMkA1@(zuMAGeN?xaT&~+w71%p>RX#Z
zw$O||&l6<+dku|k{U2<wf-5o<$N;c5BO^0Nt|M<BfdpV}2Gyp>+?Jd$DZ`ro36Xh{
z4M81dQbwM@LI@C(G8N+P2}nRp%HZw^|J+MkB4=d^BmQL6I9klg$mtAhXwAyV=?o+n
zL-Vht#HTI!a(;&0|7YVrmGkYADJh+wk-NhX0>=DIT;#+cfiXXWoS5QiTk89ZGUAd4
z2xu;neSn@pb5TZyQjpMGl(9l-TdLslj97Y%ebG=mF1JmfnQgi4KbqN=XJjOWB7l}>
z5J`LLXybMWrJ17BnaSV1XgCAgGS-5l9kuZe(Z=k}R}3}3!)jtY0^$y<i9rH!2Q@KX
zOn0^;Uw@ThYhE#K%YS9-P%D0wksCP>g3ebN?4ESwI%vgjGOYcp#*Ll6u`1Gz-&6X=
zst8Cxe3Ox>Do8+llR>Jwh}JpnK&tyQ%Hd4G*W1WDs=<ICz!B3VNT~16$Y~NJ)c0p(
z_6-u#<o-<fa7Ij%#NgB9cNyoQjF=`R4|)eOa+;JZOp^yQ)->6Udd5+QY*$cds-srB
zf`l1It#$<oxT9CvwH<YdQ=(mO1p%Z}wm&HCIc58UddMlOVId5pQ`E4yUF^KxRDa48
z)npy<j_l&=80uyJFq#E^%IG;UhOejgJ;&R3eEyu}ByfRw&T3kaz&uAy`!~4wdTM}+
z8J78{@%Q{iTZfwVVn+VGHiV#aF@x7K=)CKC8laamZ0$dd2lAIQa=#H==v>aouP=jy
z&gBepCCmxX0o60hZu^(fDc>_I8xUOR^vuc+OM>K52<$YLt|zDW$%?TA0zU7Pm1zk`
zX!gm<u>=yDeX`bAx}JRgMplfa%dZ*gO>bmnEW#uHOvWOR0D2=U#}Y^Yy^)2>ABW4^
zo9d8k(Q3H-t_=J4QCEs}`?qm@U`SSPAbj4Qd_FYG<7O)mfF5eq4kVz5W@X$23Fx6&
zc)kg0*Ph%pEX!Vh-DsL0X6umWhh^oUf)I3uWihDk<T~*D@GRT$x^Y*F;kFJz4bRHf
zYR^4CJd4)aNC$fD$@P=6g$JsQO-j`y%MW0~*hyLG2ao`nl$9AbNUnuR?Ry%E?Wrwh
zW(&{uH2&o1G}8v5J&~C<2(`-0tUM=$5<q5VF;(&L+#ao>&d(}~voxMtIjZqnjAT54
z;{2=}$snOPKPyKvNQ~t9+3@157|F!oBY8pAS;&f!EP2pdn3W@0vM`btWv!9io}%os
z>{SUbID#b-UXU<lnbosE0&>}vp4FaGl2xK--2wt`S!H{JRu8LeZ_w&tmDRN%45U@m
zwGPl!e1oa3%@*y-vabD%{eiVvJtMl*4b-L9%Ps{1kn1f!fdu4wt4o0d<a+8-)IDyX
ze(-sgc?TGGReo++1uh^yx2yumrR0~kK?36QED{qs-MoRu_U0@bF#xBVn{5d4+UBf$
zTN*-u*qp5|4qHJ2VslpBbG(75ZF1OxfaW%9*n))SHp{snxvVv8Z=hcGm2@r$PRVf#
z64m(1t_F3ruPo={DUiM*=PnMxxgAV(V0qE|xx&gfj74t$z;Y|m=|J8c#P0rw@m_2E
z2IQb}*$F`ca!|P(uOI<As2t8+Pj4G`ph_PqFFeGI&&t{yDwmN6Y|f80;hUu(p>?Pn
zZ;0``U>)F4^+dVyW4SZFpqT#YV)CMyM$}Oap6L6K0KkcI+4n&L;6%CX`ykQxPn3s$
zEEj#B7`*SFEO(wM7kyvypm(ZV_I=4h-#=YWeSd6_R{<01@SHL-=Pa;U#(T!oAViAR
zfro?PIT;Q>!l>an85ThTe0VNf&R3uyVbt(kZe&gz>k$J+p{YmY<gs1{YRl0%u?IVA
zF}62H=dQSn+HQ1C25(3Le00w01sy1O*XDTez6AtuYHc$qde_=!QrxJu&7`<dn?o-+
zN<*yDR43<(R_0iCsc|GQIcMG8uB1*dGsmNLYY>2(nUl={5|A@<vKN2^<jfp;!4Aq1
zE2**O<=D|>#?BV=Y$fUh^KypxpAZN^X<iOrS+5aF7*&gM?DTSDP<~NPUI(h=4ZkR-
z@r!RjriNdX!^Jn6{VIuCBK!v%X&5cB90(G{EwLO3lFM2StR&a3kPZaFDcQ~-QQH-k
z13?05h2=nyKw3c#oIo#NR+;KYxuQL}Li-g)#u4}^XT7vrMIQWAc(5G^V18;j10*m%
zwLAzCn4gjdXVX+t1rMs5a>^IELe(mxxuY7t#Yn&tC~nHhkpL2kn{sj_fJCR;lnZ}>
zPDk4w#NZ=gbI!RfCq{zgL2pY=js(fVNZ6XQW`QaSb31ePEWj?WMh^u?OagcgOLkfg
z1_{KSS9)j_k-LS1Zw3Je@3wj<NH}A+<zSFN+HE-)Bv*xl=~b<crn)azw5EdnWsUK0
zgMB&70rWp|9dU{6U{3iy=cGSj&_IhzY@EkVtT75*4&|J;@?AIa4AnWDb9TOpgJO;l
z$HF_FQ%(WzUltr1fwS0&wZ=cX{_tPQv{pTlb9S`hs3lJ3@Hf;J+)p{>Jm9clEX_lh
z<2*L+KgO2ovpIRkj+;l`{yFFTlZ{6XJeR{C@>+OxIpq@Y=x_753Idg6(M>(Uf+H{F
z<e%gT4sb8#<lpfL4sd_TIm_ug9>R}3DwIAIPWS&<!1%%vXR-R97=LWtv%*<rTSaT-
zUKRLj?JH%{aOhouGWjaGBlY?L6+CWKf<QwLsF0l(B<vedA>#%}s1B$=ujjWzI#P!k
zRH4M;J?LAK%)i`-vU%%_zvRIb-5(-cMg|d(Kp0ekAVS|C?MP016J>vDT;KA|3K>Jd
zh0dE5GKPSJ&YKm8A(!d$Vn>kb)Cy&KMPd1;#xJgC@LR-tJc0F7D`dO}37n}FGTws(
z&eRGS??GbdO|8gHuMqK`7$V+Jt3bT(Ls!^3Qq);mQK+}sP>U;<+67VKzO+J~20;o1
zEv@j2fd&!<Ev-QM@&B5-*5InDD}3+q-doNVA>8oF<#Ddz>~$E0gohv?keh%Ytx{}l
zYiI0;k4~YAI!Zg!*F;Nc2pE+R+0NvLIJT2cM=^kU%OgAzNIMyzj=*3LF(FC}77ZHE
zgoN~4d+#&Xe`l?;_S%p2*lWMp>6NhSZ}3gX4*)3}d~1^ck+Q+Jy#_#}Z16*;SHdAm
zlW%$r04PjTt_(bWZpu}bL%gP3WjVxa@?n#IzX?W}NhUh{$R?Tn{FM88Vnm0JBh2e~
zbs)py@A9*+o^}5cE$#~C1~k}p`L5oS%v504<?|IC?EEt<p-aB{(K+{T#g}r4SlE|*
z8|Z@wi7xpF^f#KUAnhJMD?fHOMQ8N*X8$vIF|!_jw0T7pAX4?PnEs=)8iMtzUf<a$
z)%iBJd1S9YWSHJ4nPIwXeyk`}q&A;-N2>SQT{!~?bMrcWgY7kc^kkS#9J#Rculcu5
z)%%z;EZ6}*HYGLHB);Rk>lXoGIy?ME;sJk@nIs2@!~;HdBQ4RjN6QcTs_MMEbjF|`
zGdBijv@8exv1a)eAkqx_Sia>=4;dEab22tLHQQvE>Tsvd077q5=ikWiIhk)3kO3m`
za}s+Gc{g;11N3z=R+1_<iK{wXDgwf6_s4G}UMDBAhv2GmP`*yiUx=r%IWguE*Gtvj
z;oe)cUdD`)0*f^3WkIn`!xQ@J<&4|(mhB8rEmlai@)NhDs3Mn!r|>IsX?P01g46KD
z0U4fluaxT8C+>=Al`>|QMuA0|N;$?{mJSeUDrM0$@n`OgOOuJ0WaM30ch9G8H2)=u
zrF(w=wG>*JsFqF*ig3Z5SB_6}n*x4-U9}u;gbWbuswFnf@b(sfu<2@<s*z^NiV=GG
zW{bq$XTD6yVxWmzBo^s-53)t^iq00futfY`7XaD3BAwZ($J0Msr3yOTwF>|mKU1m~
zrC*VDMH!$bw)Z>(M44WZI61+)-%HuY)k@XU>6Vn%=2);-sFl`Lfe0*Wr5$7f1dCdU
zLFN~{bFGwJUcGeQk=gHm<~|-T$9Gs1c6s$VKCJZhIX<lP^~}dK54*g2>Ai#I;b;SV
zO|-E?#@?1D+ORmJ+bM0dVNr-Sc1eyl+J^GPGTyn^D<dbRD*eJem$z5O$LVb?quHVC
zldAYjtZeL)_R>#a(G2?}rcPi%@zGq}2C4q=rMuK?kdEF7%~%jMNbH0z)kJ{yLvg=!
z%e?*4xrH?qMBJeJB?cor39g@~I3QJ7w|m>91JWt7M10`lfSf*qcb0+()_zbr(+f$x
zb^!CaZ*;p8Js`BH@^4Tdl*Q8oZr%WhCOsroSGPOQJCw_p=lTzEzNT=n=SJjv8HH=i
z<;!#Zjhrvk7@T0YO;Wvn*<FxslJ**0U_sO*aUu|R0W%d0v_-!AmHS>a-69=rk&FdZ
zi^Of;Ct{ikCV4_;yT5ktbJ8br#p3Dy6I`qnu&1(Q;<SvkOZDhgcX|G4iO~ViT$Zst
zwMyqhsYay4?d5<`d?1W700?=s$^vsX9U#QtDlx&%Y6B2z(<=QBp*9>vFhX0^nb4{%
z1|>NYT9rkyRh?n0y28%9jOE@2xqstcEolpt7+AD;Td2eUHI>~m2oR-dlUT074c1N^
zZ;N~?BLh;^f9r0``&7m!YP}o7dUpZ-q8EC1A#7`4QK$>t*1WDVhV$=~>WyBkt8_vk
zw6*{XqE5D0))u_kfyh&;-d=Z>_gRjUL4y-U&LBdex}>_N&%Gtx6$%Ylr0rs%Rbb-}
zsGxYgGOPMr#P+??(X$JT23fDf>;kJaKrri-v+mLt1v7|Z_R85ydHo!}(K>xneRSQO
zGN~_AT42GWkCpZbO$32nlg|9Yl`0w)`Kn~ly*~}a?KTTm%xiMq9ij$;08eOUzf{>l
z_vLhdu3W5{{amh}LYWpN6VFma(aVpE`{-H1;T8@+7a@@UD>)k}#&5uX53mX3HSV1Y
z;*ZhWD=1c`HO2e`&kYoN>N^-zw~`RZbLX~*b+d|`7fG!gC1$DPSgb7vZ0<Y6U$jLP
zjW-=5K%}iA?5twd1PIlvqTod`s>ukgnlF%b_!fgQyg=6BTNJD23k22FgWyF_jYJJO
zTPc=mRzJQ$yuS*N@v``b)~z9XCKe#dR6~W@*`N@tpfv=eH)Y~6T@B6LiZXGRga0T~
z5+!(<V$=9l9VfOpnW&}6KPZ~2#0-31b9}UV9RryWwS;SlHuI2jG3)a-$`<2c$LPJ=
z$OhCvBkyfwuigZRytfg8WA6F^!k28Lq<P7gL4>rLB7eR(ZTKR69c8N%;{IrPU5+o;
zsgCS~>tbD}I>Lmj;mbR0>L~vnEkyifzKj`Zu2QrZ)Ul3chM8+3WL`%lKM;*<yLiv#
zO^UpYYVV4s7q5OstsWx&mG>suEs<ln&f7^%cg0k1J2`qeDh@38ZYL~9vE|{t6<nN0
z>QAn?#e0ja#|IWfZ?O<~32`hNYdxuESFG^r$$DO3H5xXI;RlFNxE-Ws2{G5(LH0sy
zU_rElu&Dy-2_l&APEu7uEcAAgqxF!nAlk`#h)XsB!bEqGx+uh)^e%GD9!_9Ew2QDR
zo`KBoOeV4v*+;7EMzJtIOW51P`hO?u|88>j8vQQ^3}pkt1W*7`-`!-d;0K68?<P!Q
zv$6q%vhAkAz19F2p$%Y9XaE+2lI#f$z@pdy_OJmw0MX#tngbO1H^ri<<!N>KeB4vV
zzja;p%urF3cYxx)_Of`220bOI9YZ0ZgJk^~uwZ|X;5WE6@bV0LN>T$u#T@StIdilN
z0v1Gv2<w^LH{xv>^pvFTyGbnY8p--8U^N<kikICBSVB#t>TeRIUK2U9Ehm;x6V08c
zB~-u?I!r2W7$kI<tWyUTM287Zo%byiu!N3~S~E<{_KuJ<-*RFJ9iftp-U^@}iD@R)
zI7}?|n{!0$JDZv4F^F+VGSNbj|3Zg<q1&lIEgCNF&Tk>CNwPebusn~FbKJ@kFysk@
z*|ZK2t#gzL&A0?0s(6%coucIl5b``qQ;%DDGD6GqSSU}6L6MGy^0X+H=P{ONH`^Kx
zJDjA*Cvg<CJ*sXVFUGMzabPh|97&#}xTgi0Vu7B5Ak8jhfG8bc9j?a#BA-))w~cW6
z6Ci$`MhrDV%=b>`h*+?vnP`G00`vi?{t;rL_W?PxbW7to8jYSa*Ak)Dt)%8ALDWh%
z08DAqYb6ALzUBnMo+0(yq>$d3Q2KaO2As~Y^m&s^iUoU?)Sjfc`{uKu^nnG@S(d&j
z6GZS41gfr&5M#@EtOdw)jVZl9<0FE~r8PhFjOWOiS(r=*kNxs@s~>%E&FW{?Jhb+a
zRe|mekRuPbKw@G|fXM0`dmgFN!&80?r7s+l4%V*v&6<awdV2K}Yro4x?avp&1C4$Y
z1^hVD`<Spv&@e!t*G8%{Uy#?9Yd?<j+6e7;v(5#Bt#(pVMv6kOog5QL;CUAiwG)nY
znOgHR1<?7CXyo(c=%Z-JPQOw>IErRC;aFP-segjgq>fyp@FN5rG;h9m1UkPondqd*
z|DZ}gVNDvPFvwn(-$}R;omGA*t9%zZpKF!Bqa2^+0v!B6Q+3e<bI&b6h`oy)B0DdD
zQ1&jG{JB+jMrdWf7%IEPpez?dWw$6+_KU3SwXE!T0;ZcH-=Kicqd$GAF+Nhg+8Ix%
z2flD`R3)RuuTuQtIUl^~4mE!qYyRa>^8<kR3)pBrKxBHEm6|)9ajf}Ykuy(~yP{A6
zG_X-_fFS;gg@b4t#DKmg^~13u<9!`=KEP@;Iv*UL01=v^ht&45Vy4#<Dig3E>S1Ln
z)kLs>E3_52U3phR*^JW$aD^2XuX2GA4B#rMhYG}W|7tEbHh`;y+?GRtcO?^j6d6SO
zWNh=a6o}jM`&fcJK)8z~*iX)N;sL^fa(o&I;s<KlA4(7)irpVd5FjMjPm`}(2{J-U
za3GYR#h@?)p#&|8B{;wmJj*Yl;4ztsAo6?=O&z--ojsPq(V5{DL41PtQsY@x8`Oin
z?qrE?lxRa>`*eWdy&*tF*&X1y7sQr<x;|dqovsY*U<z0eRR;WY5{JLzSri)s_3H`Z
zd2eHm%Ai5@kS0P^Hw9|cMDcKXQ((<!yq3_W02f&BqhQOhnjS=I0;ML3pC?}oa88FU
zVi~vR=D^vaUK=iEmji?Y0&GrF0YoV`2lfVOfXHccfE|5o768$xn*-Vsn4p#sx>2hG
p8`N41Dp4KSpw^<eQLBT6B@ZW_diu$=PtJV*>J3wdsH`V${Xak2CiDOR

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 22e49f8b..76bdb5e2 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -520,7 +520,7 @@ type PricingModel int32
 const (
 	PricingModel_PRICING_MODEL_UNSPECIFIED PricingModel = 0 // unset — zero allowed on WellKnownManifest.pricing_models_supported (capability list); rejected (not_in:[0]) as the Pricing.model discriminator (omission cannot default to FREE)
 	PricingModel_PRICING_MODEL_FREE        PricingModel = 1 // no charge; rate must be 0 (state FREE explicitly — absent Pricing is not free)
-	PricingModel_PRICING_MODEL_PER_UNIT    PricingModel = 2 // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom)
+	PricingModel_PRICING_MODEL_PER_UNIT    PricingModel = 2 // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: an offer carries a positive estimated_quantity, and settlement follows the rule on Pricing
 	PricingModel_PRICING_MODEL_FLAT        PricingModel = 3 // one-time flat fee; rate is the total, no unit
 )
 
@@ -1919,6 +1919,11 @@ func (RetrievalAuthFailureReason) EnumDescriptor() ([]byte, []int) {
 
 // UsageReportRejectionReason — why a ReportUsage filing was rejected. Replaces
 // the free-text UsageReportResponse.rejection_reason string.
+//
+// None of these refuses a metered report because its consumed quantity
+// differs from the offer's estimate. A quantity below the estimate is charged
+// as consumed and a quantity above the ceiling is held for dispute (see
+// Pricing); neither is MALFORMED.
 type UsageReportRejectionReason int32
 
 const (
@@ -2661,6 +2666,12 @@ type Offer struct {
 	// Used for cross-exchange comparison and Broker ranking. A resource with
 	// multiple alternative terms (e.g. dual-licensed) produces multiple separate
 	// offers, one per term — never one offer with a "headline" picked among them.
+	//
+	// On a metered (PER_UNIT) offer this copy MUST carry a positive
+	// estimated_quantity, and it is the copy a metered purchase settles on: the
+	// estimate, the rate and the tolerance are read from here (see Pricing and
+	// the offer.metered.requires_estimate rule above). An Exchange projecting a
+	// term carries the term's estimate_tolerance_bps here unchanged.
 	Pricing *Pricing `protobuf:"bytes,3,opt,name=pricing,proto3" json:"pricing,omitempty"`
 	// How resource will be delivered.
 	DeliveryMethod DeliveryMethod `protobuf:"varint,4,opt,name=delivery_method,json=deliveryMethod,proto3,enum=fora.v1.DeliveryMethod" json:"delivery_method,omitempty"`
@@ -3845,6 +3856,10 @@ func (x *Obligation) GetDetail() string {
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
+//   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance
+//     a usage report settles within (default 10%); no other model may carry
+//     it. The estimate itself is required on the offer, not on the pushed
+//     term — see Pricing.estimated_quantity.
 //   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A
 //     REFERENCE_ONLY term that references no document is meaningless → reject
 //     at ingest.
@@ -4123,7 +4138,48 @@ func (x *Preview) GetSize() string {
 // Unit cost is denominated in the Exchange's base currency.
 //
 // Fields: model, rate, currency, unit_cost, estimated_quantity,
-// license_duration_months, unit, metering.
+// license_duration_months, unit, metering, estimate_tolerance_bps.
+//
+// METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit
+// consumed, and the quantity consumed is known only after use. Three numbers
+// on the offer's `pricing` fix what a metered purchase can cost, and the
+// Exchange's offer signature covers all three, so the agent's acceptance of
+// the offer is its consent to them:
+//
+//	E = estimated_quantity      the estimate, in `unit`; REQUIRED on every
+//	                            metered offer and positive (see Offer)
+//	R = rate                    the price of one `unit`
+//	T = estimate_tolerance_bps  the tolerance on the estimate, in basis points
+//	                            of E; 1000 (10%) when the term states none
+//
+// At purchase, the agent accepts E × R: that is the amount
+// TransactionResultItem.cost carries for a metered item, and the amount the
+// Exchange authorizes. When the usage report arrives, the transaction settles
+// on the reported Usage.consumed_quantity C against the ceiling
+//
+//	ceiling quantity  Q = E × (10000 + T) / 10000
+//
+//	- C ≤ E: the charge is C × R. A quantity below the estimate is charged for
+//	  what was consumed, never for the estimate.
+//	- E < C ≤ Q: the charge is C × R. Consumption within the tolerance is
+//	  charged in full.
+//	- C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for
+//	  dispute. It is never charged automatically: nothing above Q × R is
+//	  charged unless dispute resolution establishes that it is owed.
+//
+// Equivalently, the charge is min(C, Q) × R and the held amount is
+// max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance
+// gives Q = 16.5), and the arithmetic is exact decimal: every input is an
+// integer or a decimal string, and the only division is by 10000, so no step
+// rounds. Q × R is therefore the most a metered purchase can be charged
+// without a dispute, and it is the amount an agent budgets against a spend
+// cap.
+//
+// The report that settles is the one UsageReport a transaction accepts. A
+// metered price whose metering is PRICING_METERING_NONE has no report, so E ×
+// R charged at purchase is final. Settlement reads the offer's own `pricing`
+// (Offer.pricing) — the copy execute charges — and never a value the report
+// carries.
 type Pricing struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// Provider's pricing model.
@@ -4139,9 +4195,21 @@ type Pricing struct {
 	// For data: cost per record. For APIs: cost per call.
 	// Denominated in the Exchange's base_currency (from its WellKnownManifest).
 	UnitCost *string `protobuf:"bytes,4,opt,name=unit_cost,json=unitCost,proto3,oneof" json:"unit_cost,omitempty"`
-	// Estimated quantity in the metering unit.
+	// Estimated quantity in the metering unit (`unit`).
 	// For text: token count. For video: duration in seconds.
 	// For documents: page count. For data: record count.
+	//
+	// REQUIRED and positive on every metered offer — an Offer whose pricing or
+	// term is PER_UNIT (see Offer). It is E in the settlement rule above: the
+	// agent accepts E × rate at purchase, and the estimate with
+	// estimate_tolerance_bps fixes the ceiling a usage report settles against.
+	// Without it a metered offer has no amount to accept and no ceiling, so an
+	// agent refuses one that lacks it. A non-metered price does not need one.
+	//
+	// On a LicenseTerm a publisher pushes, the estimate is optional: it describes
+	// the resource rather than the arrangement, and a publisher may state it once
+	// on ResourceEntry.estimated_quantity instead. An Exchange that cannot state
+	// a positive estimate for a PER_UNIT term emits no offer for that term.
 	EstimatedQuantity *int32 `protobuf:"varint,5,opt,name=estimated_quantity,json=estimatedQuantity,proto3,oneof" json:"estimated_quantity,omitempty"`
 	// License duration in months. How long the granted access remains valid.
 	LicenseDurationMonths *int32 `protobuf:"varint,7,opt,name=license_duration_months,json=licenseDurationMonths,proto3,oneof" json:"license_duration_months,omitempty"`
@@ -4159,9 +4227,24 @@ type Pricing struct {
 	// Absent = PRICING_METERING_ONLINE (default real-time tracking).
 	// NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.
 	// OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.
-	Metering      *PricingMetering `protobuf:"varint,9,opt,name=metering,proto3,enum=fora.v1.PricingMetering,oneof" json:"metering,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
+	Metering *PricingMetering `protobuf:"varint,9,opt,name=metering,proto3,enum=fora.v1.PricingMetering,oneof" json:"metering,omitempty"`
+	// Tolerance on estimated_quantity, in basis points of the estimate: 1000 is
+	// 10%, 0 is none. It is T in the settlement rule above. A usage report whose
+	// consumed quantity is within estimated_quantity × (10000 + T) / 10000 is
+	// charged in full; anything above that ceiling is held for dispute and never
+	// charged automatically.
+	//
+	// Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no
+	// tolerance, the estimate is the ceiling — stays distinct from "the default".
+	// Basis points rather than a decimal string because the value is a ratio,
+	// not money, and an integer keeps it exact. Bounded at 10000 (100%, a
+	// ceiling of twice the estimate). Allowed only on a PER_UNIT price (the
+	// pricing.estimate_tolerance.requires_per_unit rule). A publisher states it
+	// on the term it pushes, and the Exchange carries it unchanged onto the
+	// offer's pricing.
+	EstimateToleranceBps *int32 `protobuf:"varint,10,opt,name=estimate_tolerance_bps,json=estimateToleranceBps,proto3,oneof" json:"estimate_tolerance_bps,omitempty"`
+	unknownFields        protoimpl.UnknownFields
+	sizeCache            protoimpl.SizeCache
 }
 
 func (x *Pricing) Reset() {
@@ -4250,6 +4333,13 @@ func (x *Pricing) GetMetering() PricingMetering {
 	return PricingMetering_PRICING_METERING_ONLINE
 }
 
+func (x *Pricing) GetEstimateToleranceBps() int32 {
+	if x != nil && x.EstimateToleranceBps != nil {
+		return *x.EstimateToleranceBps
+	}
+	return 0
+}
+
 // Requester — Universal identity for any FORA client.
 //
 // Carries identity and entitlements ONLY — who is asking and what they are
@@ -5401,7 +5491,11 @@ type TransactionResultItem struct {
 	BillingId string `protobuf:"bytes,3,opt,name=billing_id,json=billingId,proto3" json:"billing_id,omitempty"`
 	// Resource title echoed from the Offer.
 	ResourceTitle *string `protobuf:"bytes,4,opt,name=resource_title,json=resourceTitle,proto3,oneof" json:"resource_title,omitempty"`
-	// Cost for this item.
+	// Cost for this item. For a metered (PER_UNIT) item this is the amount the
+	// agent accepted at purchase: the offer's estimated_quantity × rate. It is
+	// not the final charge when a usage report follows; the report settles the
+	// transaction at min(consumed, ceiling) × rate, holding any excess above the
+	// ceiling for dispute (see Pricing).
 	Cost *Cost `protobuf:"bytes,5,opt,name=cost,proto3" json:"cost,omitempty"`
 	// If under subscription, no per-request charge.
 	SubscriptionId *string `protobuf:"bytes,6,opt,name=subscription_id,json=subscriptionId,proto3,oneof" json:"subscription_id,omitempty"`
@@ -6416,6 +6510,14 @@ func (x *RefreshCatalogResponse) GetStarted() bool {
 }
 
 // ReportingObligation — Requirements attached to a delivery.
+//
+// For a metered (PER_UNIT) purchase the report is also the settlement: its
+// Usage.consumed_quantity is charged at the offer's rate up to the ceiling
+// estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any
+// quantity above the ceiling is held for dispute, never charged automatically
+// (the rule is stated once, on Pricing). An honest report of a quantity that
+// differs from the estimate, above or below, is a valid report and is never
+// refused for that difference.
 type ReportingObligation struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// Whether post-usage reporting is required.
@@ -6514,6 +6616,17 @@ func (x *ReportingObligation) GetExtCritical() []string {
 //
 // Filed by the agent or Broker after resource is used.
 // Failure to report may result in the Exchange blocking subsequent access.
+//
+// For a metered (PER_UNIT) transaction the report settles the purchase. With
+// E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when
+// absent), R its rate and C this report's Usage.consumed_quantity, the ceiling
+// is Q = E × (10000 + T) / 10000 and:
+//   - C at or below Q (including C below E) is charged C × R;
+//   - C above Q is charged Q × R, and the excess (C − Q) × R is held for
+//     dispute and never charged automatically.
+//
+// The full rule is on Pricing. The Exchange accepts such a report: a consumed
+// quantity that differs from the estimate is never a reason to refuse it.
 type UsageReport struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
@@ -6730,7 +6843,14 @@ type Usage struct {
 	Subfn []string `protobuf:"bytes,2,rep,name=subfn,proto3" json:"subfn,omitempty"`
 	// REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.
 	// For text: tokens consumed. For video: seconds watched. For data: records accessed.
-	// Exchange cross-references against Offer.pricing.estimated_quantity.
+	//
+	// For a metered (PER_UNIT) transaction this is C in the settlement rule on
+	// Pricing: it is charged at the offer's rate up to the ceiling the offer's
+	// estimated_quantity and estimate_tolerance_bps fix, and the quantity above
+	// that ceiling is held for dispute. The agent reports what it consumed, not
+	// what it estimated: an Exchange MUST NOT refuse a report because this
+	// differs from the estimate, in either direction, and MUST NOT charge a
+	// quantity above the ceiling without a dispute resolving it.
 	ConsumedQuantity int32 `protobuf:"varint,3,opt,name=consumed_quantity,json=consumedQuantity,proto3" json:"consumed_quantity,omitempty"`
 	// Whether resource/output was displayed to a human.
 	DisplayedToUser *bool `protobuf:"varint,4,opt,name=displayed_to_user,json=displayedToUser,proto3,oneof" json:"displayed_to_user,omitempty"`
@@ -6890,6 +7010,17 @@ func (x *UsageAsset) GetPackageId() string {
 }
 
 // UsageReportResponse — Acknowledgment of a usage report.
+//
+// When part of a metered report is held for dispute (its consumed quantity
+// exceeds the ceiling the offer fixes — see Pricing), the response is still a
+// plain success with a report_id: the report is accepted in full, and the
+// excess is held rather than refused. The response carries no amounts because
+// the settlement is a pure function of values the agent already holds — the
+// signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the
+// consumed quantity it reported — so the agent derives the charge, the ceiling
+// and the held excess exactly, with no figure from the Exchange to trust or
+// reconcile. The report_id is what identifies the held excess: it is the
+// reference any dispute over that excess carries (see DisputeRequest).
 type UsageReportResponse struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
@@ -10590,7 +10721,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x04unit\x18\x06 \x01(\tH\x01R\x04unit\x88\x01\x01B\f\n" +
 	"\n" +
 	"_resets_atB\a\n" +
-	"\x05_unit\"\xc1\t\n" +
+	"\x05_unit\"\xa9\f\n" +
 	"\x05Offer\x12\x19\n" +
 	"\boffer_id\x18\x01 \x01(\tR\aofferId\x12\x19\n" +
 	"\x05title\x18\x02 \x01(\tH\x00R\x05title\x88\x01\x01\x12*\n" +
@@ -10614,7 +10745,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x05terms\x18\x13 \x03(\v2\x14.fora.v1.LicenseTermB\n" +
 	"\xbaH\a\x92\x01\x04\b\x01\x10\x01R\x05terms\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
-	"\fext_critical\x18Z \x03(\tR\vextCriticalB\b\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical:\xe5\x02\xbaH\xe1\x02\x1a\xde\x02\n" +
+	"\x1foffer.metered.requires_estimate\x12Ka metered (PER_UNIT) offer must carry a positive pricing.estimated_quantity\x1a\xed\x01!(this.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || this.terms.exists(t, t.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT)) || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)B\b\n" +
 	"\x06_titleB\f\n" +
 	"\n" +
 	"_reportingB\r\n" +
@@ -10722,7 +10854,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x06_widthB\t\n" +
 	"\a_heightB\v\n" +
 	"\t_durationB\a\n" +
-	"\x05_size\"\xc8\b\n" +
+	"\x05_size\"\xfa\n" +
+	"\n" +
 	"\aPricing\x125\n" +
 	"\x05model\x18\x01 \x01(\x0e2\x15.fora.v1.PricingModelB\b\xbaH\x05\x82\x01\x02 \x00R\x05model\x124\n" +
 	"\x04rate\x18\x02 \x01(\tB \xbaH\x1dr\x1b\x18 2\x17^([0-9]+([.][0-9]+)?)?$R\x04rate\x12\x1a\n" +
@@ -10732,15 +10865,20 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x17license_duration_months\x18\a \x01(\x05H\x02R\x15licenseDurationMonths\x88\x01\x01\x12\x93\x02\n" +
 	"\x04unit\x18\b \x01(\tB\xf9\x01\xbaH5r3\x18@2/^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$\x8a\xb5\x18\afetches\x8a\xb5\x18\baccesses\x8a\xb5\x18\x06tokens\x8a\xb5\x18\x05calls\x8a\xb5\x18\x05pages\x8a\xb5\x18\aseconds\x8a\xb5\x18\aminutes\x8a\xb5\x18\arecords\x8a\xb5\x18\astreams\x8a\xb5\x18\x06images\x8a\xb5\x18\x05seats\x8a\xb5\x18\x12units-manufactured\x8a\xb5\x18\n" +
 	"characters\x8a\xb5\x18\x05bytes\x8a\xb5\x18\x05items\x8a\xb5\x18\x05sq-km\x9a\xb5\x18\fpricingunitsH\x03R\x04unit\x88\x01\x01\x129\n" +
-	"\bmetering\x18\t \x01(\x0e2\x18.fora.v1.PricingMeteringH\x04R\bmetering\x88\x01\x01:\xd6\x02\xbaH\xd2\x02\x1a\x97\x01\n" +
+	"\bmetering\x18\t \x01(\x0e2\x18.fora.v1.PricingMeteringH\x04R\bmetering\x88\x01\x01\x12E\n" +
+	"\x16estimate_tolerance_bps\x18\n" +
+	" \x01(\x05B\n" +
+	"\xbaH\a\x1a\x05\x18\x90N(\x00H\x05R\x14estimateToleranceBps\x88\x01\x01:\xa6\x04\xbaH\xa2\x04\x1a\x97\x01\n" +
 	"\x1epricing.per_unit.requires_unit\x12'unit is required when model is PER_UNIT\x1aLthis.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || this.unit != ''\x1a\xb5\x01\n" +
-	"\x16pricing.free.zero_rate\x12,rate must be 0 (or empty) when model is FREE\x1amthis.model != fora.v1.PricingModel.PRICING_MODEL_FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')B\f\n" +
+	"\x16pricing.free.zero_rate\x12,rate must be 0 (or empty) when model is FREE\x1amthis.model != fora.v1.PricingModel.PRICING_MODEL_FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')\x1a\xcd\x01\n" +
+	",pricing.estimate_tolerance.requires_per_unit\x12=estimate_tolerance_bps is allowed only when model is PER_UNIT\x1a^!has(this.estimate_tolerance_bps) || this.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNITB\f\n" +
 	"\n" +
 	"_unit_costB\x15\n" +
 	"\x13_estimated_quantityB\x1a\n" +
 	"\x18_license_duration_monthsB\a\n" +
 	"\x05_unitB\v\n" +
-	"\t_metering\"\x8e\x04\n" +
+	"\t_meteringB\x19\n" +
+	"\x17_estimate_tolerance_bps\"\x8e\x04\n" +
 	"\tRequester\x12\x1a\n" +
 	"\x02id\x18\x01 \x01(\tB\n" +
 	"\xbaH\ar\x05\x10\x01\x18\xff\x01R\x02id\x12\xd3\x01\n" +
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 3e276621..f09d1a6c 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -287,7 +287,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -322,7 +322,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.RequestAuthFailure": {
@@ -523,7 +523,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index b9729baa..31a1503e 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -296,7 +296,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -331,7 +331,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.RequestAuthFailure": {
@@ -537,7 +537,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index 3e7e55f3..55b9cb65 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -255,7 +255,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -433,17 +434,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -570,7 +579,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -605,7 +614,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index eb5e9586..511f92f9 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -259,7 +259,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -440,17 +441,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -579,7 +588,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -614,7 +623,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index 739fd218..fdd717eb 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -92,17 +92,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -288,7 +296,7 @@
   },
   "$id": "fora.v1.LicenseTerm.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index 76ab6196..dc6fe5a6 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -95,17 +95,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -294,7 +302,7 @@
   "$id": "fora.v1.LicenseTerm.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index 9ca91933..0d68f713 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -206,17 +206,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -343,7 +351,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -378,7 +386,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
@@ -707,7 +715,8 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+      "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+      "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index 2cfc0597..c30a384a 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -211,17 +211,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -350,7 +358,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -385,7 +393,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
@@ -719,7 +727,8 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+      "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+      "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index c726c3f6..40349e9a 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -255,7 +255,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -344,17 +345,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -481,7 +490,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -516,7 +525,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index dabf3b2d..43dbcd86 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -259,7 +259,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -350,17 +351,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -489,7 +498,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -524,7 +533,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.json b/gen/jsonschema/fora.v1.Pricing.schema.json
index 3c3b3a17..81ddea1c 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.json
@@ -1,17 +1,25 @@
 {
   "$id": "fora.v1.Pricing.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
   "properties": {
     "currency": {
       "default": "",
       "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
       "type": "string"
     },
+    "estimate_tolerance_bps": {
+      "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+      "maximum": 10000,
+      "minimum": 0,
+      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+      "type": "integer"
+    },
     "estimated_quantity": {
-      "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
       "maximum": 2147483647,
       "minimum": -2147483648,
+      "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
       "type": "integer"
     },
     "license_duration_months": {
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.strict.json b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
index 819ad130..f77d65f0 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
@@ -2,17 +2,25 @@
   "$id": "fora.v1.Pricing.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
   "properties": {
     "currency": {
       "default": "",
       "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
       "type": "string"
     },
+    "estimate_tolerance_bps": {
+      "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+      "maximum": 10000,
+      "minimum": 0,
+      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+      "type": "integer"
+    },
     "estimated_quantity": {
-      "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
       "maximum": 2147483647,
       "minimum": -2147483648,
+      "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
       "type": "integer"
     },
     "license_duration_months": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 81007252..3a599abb 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -167,17 +167,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 3ffa44c5..04d68e52 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -171,17 +171,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
index 3654b001..44b70c58 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.ReportingObligation.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "ReportingObligation — Requirements attached to a delivery.",
+  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
   "properties": {
     "endpoint": {
       "description": "URL to submit the usage report to (if different from Exchange).",
@@ -36,6 +36,6 @@
       "type": "string"
     }
   },
-  "title": "Reporting Obligation",
+  "title": "ReportingObligation — Requirements attached to a delivery.",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
index b2f5f0db..63062da1 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.ReportingObligation.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "ReportingObligation — Requirements attached to a delivery.",
+  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
   "properties": {
     "endpoint": {
       "description": "URL to submit the usage report to (if different from Exchange).",
@@ -37,6 +37,6 @@
       "type": "string"
     }
   },
-  "title": "Reporting Obligation",
+  "title": "ReportingObligation — Requirements attached to a delivery.",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index 86925e78..aaf10719 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -167,17 +167,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index e6a6cdaf..73e4d078 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -171,17 +171,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index 1f5968e4..1138f03e 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -255,7 +255,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -433,17 +434,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -601,7 +610,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -636,7 +645,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index 3534426f..ee24352a 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -259,7 +259,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -440,17 +441,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -611,7 +620,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -646,7 +655,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index e83e6957..a05017fe 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -51,7 +51,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -275,7 +275,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -364,17 +365,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -501,7 +510,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -536,7 +545,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index 775be8da..7459f91a 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -54,7 +54,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -280,7 +280,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -371,17 +372,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -510,7 +519,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -545,7 +554,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 24d741cf..4a35c30c 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -207,7 +207,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -431,7 +431,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -520,17 +521,25 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -657,7 +666,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -692,7 +701,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.Requester": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 1571f891..005e93aa 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -214,7 +214,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -440,7 +440,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
+          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -531,17 +532,25 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
+        "estimate_tolerance_bps": {
+          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
+          "maximum": 10000,
+          "minimum": 0,
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "type": "integer"
+        },
         "estimated_quantity": {
-          "description": "Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
           "type": "integer"
         },
         "license_duration_months": {
@@ -670,7 +679,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -705,7 +714,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.Requester": {
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 700a244e..7b5c8a03 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -251,7 +251,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -286,7 +286,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.RequestAuthFailure": {
@@ -487,7 +487,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 465ef275..e219fc74 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -259,7 +259,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -294,7 +294,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.RequestAuthFailure": {
@@ -500,7 +500,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 421f84e3..4c152cea 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -251,7 +251,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -286,7 +286,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.RequestAuthFailure": {
@@ -505,7 +505,7 @@
     },
     "cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Cost for this item."
+      "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
     },
     "delivery_method": {
       "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index dd4c6c9d..4611a0ca 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -259,7 +259,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "ReportingObligation — Requirements attached to a delivery.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -294,7 +294,7 @@
           "type": "string"
         }
       },
-      "title": "Reporting Obligation",
+      "title": "ReportingObligation — Requirements attached to a delivery.",
       "type": "object"
     },
     "fora.v1.RequestAuthFailure": {
@@ -519,7 +519,7 @@
     },
     "cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Cost for this item."
+      "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
     },
     "delivery_method": {
       "anyOf": [
diff --git a/gen/jsonschema/fora.v1.Usage.schema.json b/gen/jsonschema/fora.v1.Usage.schema.json
index 6ab8d85e..7202a2de 100644
--- a/gen/jsonschema/fora.v1.Usage.schema.json
+++ b/gen/jsonschema/fora.v1.Usage.schema.json
@@ -52,9 +52,10 @@
     },
     "consumed_quantity": {
       "default": 0,
-      "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
       "maximum": 2147483647,
       "minimum": -2147483648,
+      "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
       "type": "integer"
     },
     "consumed_unit": {
diff --git a/gen/jsonschema/fora.v1.Usage.schema.strict.json b/gen/jsonschema/fora.v1.Usage.schema.strict.json
index d6823a66..daa07a39 100644
--- a/gen/jsonschema/fora.v1.Usage.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Usage.schema.strict.json
@@ -54,9 +54,10 @@
     },
     "consumed_quantity": {
       "default": 0,
-      "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
       "maximum": 2147483647,
       "minimum": -2147483648,
+      "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
       "type": "integer"
     },
     "consumed_unit": {
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
index 43fcf2ad..ec19ad42 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -50,9 +50,10 @@
         },
         "consumed_quantity": {
           "default": 0,
-          "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
           "type": "integer"
         },
         "consumed_unit": {
@@ -106,7 +107,7 @@
   },
   "$id": "fora.v1.UsageReport.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
index 85e7257d..b327b813 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -52,9 +52,10 @@
         },
         "consumed_quantity": {
           "default": 0,
-          "description": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
           "maximum": 2147483647,
           "minimum": -2147483648,
+          "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
           "type": "integer"
         },
         "consumed_unit": {
@@ -110,7 +111,7 @@
   "$id": "fora.v1.UsageReport.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
index 833ff34b..1f04f70c 100644
--- a/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.UsageReportResponse.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "UsageReportResponse — Acknowledgment of a usage report.",
+  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the\n consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
   "properties": {
     "ext": {
       "description": "Extension point",
@@ -25,6 +25,6 @@
       "type": "string"
     }
   },
-  "title": "Usage Report Response",
+  "title": "UsageReportResponse — Acknowledgment of a usage report.",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
index 0a6cdea3..ce634c0e 100644
--- a/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.UsageReportResponse.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "UsageReportResponse — Acknowledgment of a usage report.",
+  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the\n consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
   "properties": {
     "ext": {
       "description": "Extension point",
@@ -26,6 +26,6 @@
       "type": "string"
     }
   },
-  "title": "Usage Report Response",
+  "title": "UsageReportResponse — Acknowledgment of a usage report.",
   "type": "object"
 }
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 0d4341f4..ef05913d 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1308,9 +1308,13 @@ class Pricing(WireModel):
     currency: str | None = Field(
         '', description='ISO 4217 currency code (e.g. "USD", "EUR").'
     )
+    estimate_tolerance_bps: conint(ge=0, le=10000) | None = Field(
+        None,
+        description='Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from "the default".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer\'s pricing.',
+    )
     estimated_quantity: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description='Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.',
+        description='Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.',
     )
     license_duration_months: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
@@ -1555,7 +1559,7 @@ class Usage(WireModel):
     )
     consumed_quantity: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description="REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.",
+        description="REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
     )
     consumed_unit: (
         constr(
@@ -1898,7 +1902,7 @@ class Offer(WireModel):
     )
     pricing: Pricing | None = Field(
         None,
-        description='Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term\'s pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.',
+        description='Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term\'s pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term\'s estimate_tolerance_bps here unchanged.',
     )
     reporting: ReportingObligation | None = Field(
         None, description='Post-usage reporting requirements for this offer.'
@@ -2157,7 +2161,10 @@ class TransactionResultItem(WireModel):
         '',
         description="Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).",
     )
-    cost: Cost | None = Field(None, description='Cost for this item.')
+    cost: Cost | None = Field(
+        None,
+        description="Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).",
+    )
     delivery_method: (
         constr(pattern=r'^DELIVERY_METHOD_UNSPECIFIED$')
         | DeliveryMethod
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index fdc33685..edc0f4b7 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -50,7 +50,7 @@ export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","D
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -92,7 +92,7 @@ export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datet
 
 export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
 
-export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
+export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
 
 export const ObligationSchema = wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies."));
 
@@ -100,15 +100,15 @@ export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","
 
 export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
-export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering."));
+export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries."));
 
 export const PricingMeteringSchema = wire(z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]));
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
@@ -144,7 +144,7 @@ export const RemoveResourcesRequestSchema = wire(z.object({ "exchange": z.string
 
 export const RemoveResourcesResponseSchema = wire(z.object({ "removed": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries removed").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
-export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("ReportingObligation — Requirements attached to a delivery."));
+export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nFor a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference."));
 
 export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
 
@@ -162,7 +162,7 @@ export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOL
 
 export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
 
 export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
 
@@ -170,7 +170,7 @@ export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC
 
 export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
 export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
@@ -198,27 +198,27 @@ export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TER
 
 export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab."));
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit.\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
 export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
-export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
+export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
 export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report."));
 
-export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n Exchange cross-references against Offer.pricing.estimated_quantity.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access."));
+export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it."));
 
 export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
 
 export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]));
 
-export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report."));
+export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report.\n\nWhen part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the\n consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest)."));
 
 export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 42662078..81b332fa 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -670,6 +670,25 @@ message SubscriptionQuotaInfo {
 // Combines pricing, delivery method, resource identity, and reporting terms.
 // CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.
 message Offer {
+  // A metered offer carries its estimate. An offer is metered when its
+  // `pricing` or its term's pricing is PER_UNIT, and then `pricing` MUST carry
+  // a positive estimated_quantity: the agent accepts estimate × rate at
+  // purchase and a usage report settles against a ceiling derived from the
+  // estimate (see Pricing), so a metered offer without one has neither. The
+  // term's pricing is consulted too because it is the authoritative copy; a
+  // term that is PER_UNIT makes the offer metered even if `pricing` were to say
+  // otherwise. A non-metered offer needs no estimate.
+  //
+  // This is an offer rule, not a Pricing rule, on purpose: a publisher pushes
+  // PER_UNIT terms without an estimate (the estimate describes the resource and
+  // may ride on ResourceEntry.estimated_quantity), so the requirement binds
+  // where the Exchange projects a term onto an offer.
+  option (buf.validate.message).cel = {
+    id: "offer.metered.requires_estimate"
+    message: "a metered (PER_UNIT) offer must carry a positive pricing.estimated_quantity"
+    expression: "!(this.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || this.terms.exists(t, t.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT)) || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)"
+  };
+
   // Unique identifier for this offer, assigned by the Exchange.
   // Opaque to the caller: not derived from the resource, its URL, or any
   // other field, and carries no meaning beyond identifying this offer.
@@ -685,6 +704,12 @@ message Offer {
   // Used for cross-exchange comparison and Broker ranking. A resource with
   // multiple alternative terms (e.g. dual-licensed) produces multiple separate
   // offers, one per term — never one offer with a "headline" picked among them.
+  //
+  // On a metered (PER_UNIT) offer this copy MUST carry a positive
+  // estimated_quantity, and it is the copy a metered purchase settles on: the
+  // estimate, the rate and the tolerance are read from here (see Pricing and
+  // the offer.metered.requires_estimate rule above). An Exchange projecting a
+  // term carries the term's estimate_tolerance_bps here unchanged.
   Pricing pricing = 3;
 
   // How resource will be delivered.
@@ -1532,6 +1557,10 @@ message Obligation {
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
+//   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance
+//     a usage report settles within (default 10%); no other model may carry
+//     it. The estimate itself is required on the offer, not on the pushed
+//     term — see Pricing.estimated_quantity.
 //   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A
 //     REFERENCE_ONLY term that references no document is meaningless → reject
 //     at ingest.
@@ -1687,10 +1716,52 @@ message Preview {
 // Unit cost is denominated in the Exchange's base currency.
 //
 // Fields: model, rate, currency, unit_cost, estimated_quantity,
-// license_duration_months, unit, metering.
+// license_duration_months, unit, metering, estimate_tolerance_bps.
+//
+// METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit
+// consumed, and the quantity consumed is known only after use. Three numbers
+// on the offer's `pricing` fix what a metered purchase can cost, and the
+// Exchange's offer signature covers all three, so the agent's acceptance of
+// the offer is its consent to them:
+//
+//   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every
+//                               metered offer and positive (see Offer)
+//   R = rate                    the price of one `unit`
+//   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points
+//                               of E; 1000 (10%) when the term states none
+//
+// At purchase, the agent accepts E × R: that is the amount
+// TransactionResultItem.cost carries for a metered item, and the amount the
+// Exchange authorizes. When the usage report arrives, the transaction settles
+// on the reported Usage.consumed_quantity C against the ceiling
+//
+//   ceiling quantity  Q = E × (10000 + T) / 10000
+//
+//   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for
+//     what was consumed, never for the estimate.
+//   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is
+//     charged in full.
+//   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for
+//     dispute. It is never charged automatically: nothing above Q × R is
+//     charged unless dispute resolution establishes that it is owed.
+//
+// Equivalently, the charge is min(C, Q) × R and the held amount is
+// max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance
+// gives Q = 16.5), and the arithmetic is exact decimal: every input is an
+// integer or a decimal string, and the only division is by 10000, so no step
+// rounds. Q × R is therefore the most a metered purchase can be charged
+// without a dispute, and it is the amount an agent budgets against a spend
+// cap.
+//
+// The report that settles is the one UsageReport a transaction accepts. A
+// metered price whose metering is PRICING_METERING_NONE has no report, so E ×
+// R charged at purchase is final. Settlement reads the offer's own `pricing`
+// (Offer.pricing) — the copy execute charges — and never a value the report
+// carries.
 message Pricing {
   // Cross-field structural rules (protovalidate, OR form — CEL has no implies):
-  //   PER_UNIT ⇒ unit must be set; FREE ⇒ rate must be 0.
+  //   PER_UNIT ⇒ unit must be set; FREE ⇒ rate must be 0;
+  //   estimate_tolerance_bps set ⇒ PER_UNIT.
   // Registry membership (a bare unit must be one of the registered tokens) is
   // NOT here — it is checked at ingest via the generated IsRegistered, so the
   // CEL never re-lists the vocabulary and cannot drift from it.
@@ -1704,6 +1775,15 @@ message Pricing {
     message: "rate must be 0 (or empty) when model is FREE"
     expression: "this.model != fora.v1.PricingModel.PRICING_MODEL_FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')"
   };
+  // A tolerance bounds the settlement of a metered price, so it means nothing
+  // on a FREE or FLAT one. Stating it there is an authoring error rather than a
+  // harmless extra: an agent reading it would budget for a settlement that
+  // never happens.
+  option (buf.validate.message).cel = {
+    id: "pricing.estimate_tolerance.requires_per_unit"
+    message: "estimate_tolerance_bps is allowed only when model is PER_UNIT"
+    expression: "!has(this.estimate_tolerance_bps) || this.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT"
+  };
 
   // Provider's pricing model.
   PricingModel model = 1 [(buf.validate.field).enum = {not_in: [0]}];
@@ -1722,9 +1802,21 @@ message Pricing {
   // Denominated in the Exchange's base_currency (from its WellKnownManifest).
   optional string unit_cost = 4 [(buf.validate.field).string.pattern = "^([0-9]+([.][0-9]+)?)?$", (buf.validate.field).string.max_len = 32];
 
-  // Estimated quantity in the metering unit.
+  // Estimated quantity in the metering unit (`unit`).
   // For text: token count. For video: duration in seconds.
   // For documents: page count. For data: record count.
+  //
+  // REQUIRED and positive on every metered offer — an Offer whose pricing or
+  // term is PER_UNIT (see Offer). It is E in the settlement rule above: the
+  // agent accepts E × rate at purchase, and the estimate with
+  // estimate_tolerance_bps fixes the ceiling a usage report settles against.
+  // Without it a metered offer has no amount to accept and no ceiling, so an
+  // agent refuses one that lacks it. A non-metered price does not need one.
+  //
+  // On a LicenseTerm a publisher pushes, the estimate is optional: it describes
+  // the resource rather than the arrangement, and a publisher may state it once
+  // on ResourceEntry.estimated_quantity instead. An Exchange that cannot state
+  // a positive estimate for a PER_UNIT term emits no offer for that term.
   optional int32 estimated_quantity = 5;
 
   // License duration in months. How long the granted access remains valid.
@@ -1757,6 +1849,22 @@ message Pricing {
   // NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.
   // OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.
   optional PricingMetering metering = 9;
+
+  // Tolerance on estimated_quantity, in basis points of the estimate: 1000 is
+  // 10%, 0 is none. It is T in the settlement rule above. A usage report whose
+  // consumed quantity is within estimated_quantity × (10000 + T) / 10000 is
+  // charged in full; anything above that ceiling is held for dispute and never
+  // charged automatically.
+  //
+  // Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no
+  // tolerance, the estimate is the ceiling — stays distinct from "the default".
+  // Basis points rather than a decimal string because the value is a ratio,
+  // not money, and an integer keeps it exact. Bounded at 10000 (100%, a
+  // ceiling of twice the estimate). Allowed only on a PER_UNIT price (the
+  // pricing.estimate_tolerance.requires_per_unit rule). A publisher states it
+  // on the term it pushes, and the Exchange carries it unchanged onto the
+  // offer's pricing.
+  optional int32 estimate_tolerance_bps = 10 [(buf.validate.field).int32 = {gte: 0, lte: 10000}];
 }
 
 // PricingModel — the charging STRUCTURE only (a genuinely closed, small set;
@@ -1769,7 +1877,7 @@ message Pricing {
 enum PricingModel {
   PRICING_MODEL_UNSPECIFIED = 0;  // unset — zero allowed on WellKnownManifest.pricing_models_supported (capability list); rejected (not_in:[0]) as the Pricing.model discriminator (omission cannot default to FREE)
   PRICING_MODEL_FREE        = 1;  // no charge; rate must be 0 (state FREE explicitly — absent Pricing is not free)
-  PRICING_MODEL_PER_UNIT    = 2;  // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom)
+  PRICING_MODEL_PER_UNIT    = 2;  // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: an offer carries a positive estimated_quantity, and settlement follows the rule on Pricing
   PRICING_MODEL_FLAT        = 3;  // one-time flat fee; rate is the total, no unit
 }
 
@@ -2416,7 +2524,11 @@ message TransactionResultItem {
   // Resource title echoed from the Offer.
   optional string resource_title = 4;
 
-  // Cost for this item.
+  // Cost for this item. For a metered (PER_UNIT) item this is the amount the
+  // agent accepted at purchase: the offer's estimated_quantity × rate. It is
+  // not the final charge when a usage report follows; the report settles the
+  // transaction at min(consumed, ceiling) × rate, holding any excess above the
+  // ceiling for dispute (see Pricing).
   Cost cost = 5;
 
   // If under subscription, no per-request charge.
@@ -2975,6 +3087,14 @@ message RefreshCatalogResponse {
 // ============================================================================
 
 // ReportingObligation — Requirements attached to a delivery.
+//
+// For a metered (PER_UNIT) purchase the report is also the settlement: its
+// Usage.consumed_quantity is charged at the offer's rate up to the ceiling
+// estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any
+// quantity above the ceiling is held for dispute, never charged automatically
+// (the rule is stated once, on Pricing). An honest report of a quantity that
+// differs from the estimate, above or below, is a valid report and is never
+// refused for that difference.
 message ReportingObligation {
   // Whether post-usage reporting is required.
   bool required = 1;
@@ -3003,6 +3123,16 @@ message ReportingObligation {
 //
 // Filed by the agent or Broker after resource is used.
 // Failure to report may result in the Exchange blocking subsequent access.
+//
+// For a metered (PER_UNIT) transaction the report settles the purchase. With
+// E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when
+// absent), R its rate and C this report's Usage.consumed_quantity, the ceiling
+// is Q = E × (10000 + T) / 10000 and:
+//   - C at or below Q (including C below E) is charged C × R;
+//   - C above Q is charged Q × R, and the excess (C − Q) × R is held for
+//     dispute and never charged automatically.
+// The full rule is on Pricing. The Exchange accepts such a report: a consumed
+// quantity that differs from the estimate is never a reason to refuse it.
 message UsageReport {
   // FORA protocol version — "1.0". Stamped by the sender from a single
   // constant; advisory on receive. See "Protocol version" in the file header.
@@ -3088,7 +3218,14 @@ message Usage {
 
   // REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.
   // For text: tokens consumed. For video: seconds watched. For data: records accessed.
-  // Exchange cross-references against Offer.pricing.estimated_quantity.
+  //
+  // For a metered (PER_UNIT) transaction this is C in the settlement rule on
+  // Pricing: it is charged at the offer's rate up to the ceiling the offer's
+  // estimated_quantity and estimate_tolerance_bps fix, and the quantity above
+  // that ceiling is held for dispute. The agent reports what it consumed, not
+  // what it estimated: an Exchange MUST NOT refuse a report because this
+  // differs from the estimate, in either direction, and MUST NOT charge a
+  // quantity above the ceiling without a dispute resolving it.
   int32 consumed_quantity = 3;
 
   // Whether resource/output was displayed to a human.
@@ -3120,6 +3257,17 @@ message UsageAsset {
 }
 
 // UsageReportResponse — Acknowledgment of a usage report.
+//
+// When part of a metered report is held for dispute (its consumed quantity
+// exceeds the ceiling the offer fixes — see Pricing), the response is still a
+// plain success with a report_id: the report is accepted in full, and the
+// excess is held rather than refused. The response carries no amounts because
+// the settlement is a pure function of values the agent already holds — the
+// signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the
+// consumed quantity it reported — so the agent derives the charge, the ceiling
+// and the held excess exactly, with no figure from the Exchange to trust or
+// reconcile. The report_id is what identifies the held excess: it is the
+// reference any dispute over that excess carries (see DisputeRequest).
 message UsageReportResponse {
   // A successful response means the report was accepted; a rejection travels as
   // a non-OK transport error carrying ErrorDetail.usage_report_rejection.
@@ -3981,6 +4129,14 @@ message ExchangeOutcome {
 //   Offer → Transaction (transaction_id, billing_id)
 //        → UsageReport → UsageReportResponse (report_id)
 //        → DisputeRequest (transaction_id + report_id) → DisputeResponse
+//
+// The same chain identifies the excess a metered report holds: the quantity
+// above the offer's ceiling (see Pricing) is held under the transaction_id and
+// report_id, not charged, and stays uncharged unless dispute resolution
+// establishes that it is owed. This version defines no DisputeReason for it
+// and no filing by the publisher's side, so how a claim to the held excess is
+// raised is outside this version; what the protocol fixes is that it is never
+// charged automatically.
 // ============================================================================
 
 // DisputeRequest — Agent signals a problem with delivered resource.
@@ -4974,6 +5130,11 @@ message RetrievalAuthFailure {
 
 // UsageReportRejectionReason — why a ReportUsage filing was rejected. Replaces
 // the free-text UsageReportResponse.rejection_reason string.
+//
+// None of these refuses a metered report because its consumed quantity
+// differs from the offer's estimate. A quantity below the estimate is charged
+// as consumed and a quantity above the ceiling is held for dispute (see
+// Pricing); neither is MALFORMED.
 enum UsageReportRejectionReason {
   USAGE_REPORT_REJECTION_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
   USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND = 1;     // transaction_id is unknown
diff --git a/sdk/go/helpers/gen_licenseterm_vectors_test.go b/sdk/go/helpers/gen_licenseterm_vectors_test.go
index f5ddf7c2..34fe4fec 100644
--- a/sdk/go/helpers/gen_licenseterm_vectors_test.go
+++ b/sdk/go/helpers/gen_licenseterm_vectors_test.go
@@ -704,6 +704,27 @@ func buildLTEntryVectors(t *testing.T) []ltEntryVector {
 				Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0.05", Currency: "USD",
 			}
 		})},
+		// A tolerance bounds a metered settlement, so it is refused on any other
+		// model. The pushed PER_UNIT term beside it needs no estimate: the estimate
+		// is an offer requirement, not a term one.
+		{"cross_field_pricing_estimate_tolerance_requires_per_unit", entry(func(e *forav1.ResourceEntry) {
+			e.Terms[0].Pricing = &forav1.Pricing{
+				Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD",
+				EstimateToleranceBps: proto.Int32(1000),
+			}
+		})},
+		{"metered_term_with_tolerance_and_no_estimate_accepted", entry(func(e *forav1.ResourceEntry) {
+			e.Terms[0].Pricing = &forav1.Pricing{
+				Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD",
+				Unit: proto.String("tokens"), EstimateToleranceBps: proto.Int32(1500),
+			}
+		})},
+		{"structural_estimate_tolerance_above_max", entry(func(e *forav1.ResourceEntry) {
+			e.Terms[0].Pricing = &forav1.Pricing{
+				Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD",
+				Unit: proto.String("tokens"), EstimateToleranceBps: proto.Int32(10001),
+			}
+		})},
 		{"cross_field_license_digest_required_with_uri", entry(func(e *forav1.ResourceEntry) {
 			e.Terms[0].License = &forav1.License{Id: proto.String("CC-BY-4.0"), Uri: proto.String("https://publisher.example/licence")}
 		})},
diff --git a/sdk/go/helpers/testdata/licenseterm-vectors.json b/sdk/go/helpers/testdata/licenseterm-vectors.json
index 122baa65..f42c703d 100644
--- a/sdk/go/helpers/testdata/licenseterm-vectors.json
+++ b/sdk/go/helpers/testdata/licenseterm-vectors.json
@@ -517,6 +517,79 @@
       "term_rules": [],
       "warnings": []
     },
+    {
+      "name": "cross_field_pricing_estimate_tolerance_requires_per_unit",
+      "entry": {
+        "domain": "publisher.example",
+        "path": "/premium/article-42.html",
+        "terms": [
+          {
+            "pricing": {
+              "currency": "USD",
+              "estimate_tolerance_bps": 1000,
+              "model": "PRICING_MODEL_FLAT",
+              "rate": "1.00"
+            },
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "ok": false,
+      "structural": false,
+      "cross_field_rules": [
+        "pricing.estimate_tolerance.requires_per_unit"
+      ],
+      "term_rules": [],
+      "warnings": []
+    },
+    {
+      "name": "metered_term_with_tolerance_and_no_estimate_accepted",
+      "entry": {
+        "domain": "publisher.example",
+        "path": "/premium/article-42.html",
+        "terms": [
+          {
+            "pricing": {
+              "currency": "USD",
+              "estimate_tolerance_bps": 1500,
+              "model": "PRICING_MODEL_PER_UNIT",
+              "rate": "0.00002",
+              "unit": "tokens"
+            },
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "ok": true,
+      "structural": false,
+      "cross_field_rules": [],
+      "term_rules": [],
+      "warnings": []
+    },
+    {
+      "name": "structural_estimate_tolerance_above_max",
+      "entry": {
+        "domain": "publisher.example",
+        "path": "/premium/article-42.html",
+        "terms": [
+          {
+            "pricing": {
+              "currency": "USD",
+              "estimate_tolerance_bps": 10001,
+              "model": "PRICING_MODEL_PER_UNIT",
+              "rate": "0.00002",
+              "unit": "tokens"
+            },
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "ok": false,
+      "structural": true,
+      "cross_field_rules": [],
+      "term_rules": [],
+      "warnings": []
+    },
     {
       "name": "cross_field_license_digest_required_with_uri",
       "entry": {
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 2caf1e72..2a0b3994 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -94,7 +94,7 @@ Key fields:
         "rate": "0.05",
         "currency": "USD",
         "unit_cost": "0.00001515",
-        "estimated_quantity": 3300,
+        "estimated_quantity": 1,
         "unit": "accesses"
       },
       "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -161,7 +161,7 @@ When requesting multiple URIs, the response uses `offer_groups` instead of `offe
         {
           "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
           "exchange": "exchange.ssp-example.com",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "unit": "accesses" },
+          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "estimated_quantity": 1, "unit": "accesses" },
           "terms": [
             {
               "semantics": "TERM_SEMANTICS_ENUMERATED",
@@ -179,7 +179,7 @@ When requesting multiple URIs, the response uses `offer_groups` instead of `offe
         {
           "offer_id": "89636cda-93f6-460e-af7f-2b6aef0f491b",
           "exchange": "exchange.ssp-example.com",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "unit": "accesses" },
+          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "estimated_quantity": 1, "unit": "accesses" },
           "terms": [
             {
               "semantics": "TERM_SEMANTICS_ENUMERATED",
@@ -211,7 +211,7 @@ When the requester has a subscription, the Exchange includes both per-request an
     {
       "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
       "exchange": "exchange.ssp-example.com",
-      "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "unit": "accesses" },
+      "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "estimated_quantity": 1, "unit": "accesses" },
       "terms": [
         {
           "semantics": "TERM_SEMANTICS_ENUMERATED",
@@ -326,7 +326,7 @@ Content-Type: application/json
           "rate": "0.05",
           "currency": "USD",
           "unit_cost": "0.00001515",
-          "estimated_quantity": 3300,
+          "estimated_quantity": 1,
           "unit": "accesses"
         },
         "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -339,7 +339,7 @@ Content-Type: application/json
               "rate": "0.05",
               "currency": "USD",
               "unit_cost": "0.00001515",
-              "estimated_quantity": 3300,
+              "estimated_quantity": 1,
               "unit": "accesses"
             }
           }
@@ -419,7 +419,7 @@ For batch transactions, use the `items` array:
       "offer": {
         "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
         "exchange": "exchange.ssp-example.com",
-        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "unit": "accesses" },
+        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "estimated_quantity": 1, "unit": "accesses" },
         "expires_at": "2026-03-14T02:30:00Z",
         "terms": [
           {
@@ -435,7 +435,7 @@ For batch transactions, use the `items` array:
       "offer": {
         "offer_id": "89636cda-93f6-460e-af7f-2b6aef0f491b",
         "exchange": "exchange.ssp-example.com",
-        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "unit": "accesses" },
+        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "estimated_quantity": 1, "unit": "accesses" },
         "expires_at": "2026-03-14T02:30:00Z",
         "terms": [
           {

From 419fc8f702dafbce4fe31001bf25f513f46b6204 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 14:48:24 -0400
Subject: [PATCH 061/164] Settle metered usage and refuse an unestimated
 metered offer in the Go SDK

helpers gains the settlement of a metered purchase, in exact decimal
over the offer's own pricing. MeteredSettlementCap returns ceiling x
rate, the most a purchase is charged without a dispute.
SettleMeteredUsage returns a MeteredSettlement: the accepted amount
(estimate x rate), the ceiling quantity and amount, and the charged and
held quantities and amounts. Both refuse a price that is not PER_UNIT
(ErrNotMetered), one without a positive estimate
(ErrMeteredEstimateMissing), an invalid rate and a tolerance outside
0..10000; the settlement also refuses a negative quantity.
EstimateToleranceBps applies the 10% default, keeping an explicit 0.
IsMeteredOffer and CheckMeteredEstimate apply the
offer.metered.requires_estimate rule without wire validation.

core.Verifier rejects a metered offer without a positive estimate after
the signature and expiry checks, with ErrMeteredEstimateMissing as the
reason. Client validation is off by default, so the Verifier is the
gate a discovered offer meets.

A new metered-settlement-vectors.json pins the arithmetic: each row
carries the values its author worked out, the emitter refuses to write
a file the real faces disagree with, and two rows need 42 significant
digits. The offer-verify vectors gain the metered cases: an estimated
offer with a tolerance, a missing, a zero and a term-only estimate, and
a flat offer without one. The PER_UNIT offer of repeated_terms_enum now
carries an estimate so it still verifies.
---
 sdk/go/README.md                              |  10 +
 sdk/go/connect/client_verify_test.go          |  55 +++
 sdk/go/core/verifier.go                       |  19 +-
 sdk/go/helpers/gen_settlement_vectors_test.go | 176 ++++++++
 sdk/go/helpers/gen_vectors_test.go            |  53 ++-
 sdk/go/helpers/settlement.go                  | 195 +++++++++
 sdk/go/helpers/settlement_test.go             |  82 ++++
 .../testdata/metered-settlement-vectors.json  | 399 ++++++++++++++++++
 .../testdata/offer-verify-vectors.json        | 128 +++++-
 9 files changed, 1109 insertions(+), 8 deletions(-)
 create mode 100644 sdk/go/helpers/gen_settlement_vectors_test.go
 create mode 100644 sdk/go/helpers/settlement.go
 create mode 100644 sdk/go/helpers/settlement_test.go
 create mode 100644 sdk/go/helpers/testdata/metered-settlement-vectors.json

diff --git a/sdk/go/README.md b/sdk/go/README.md
index 989c2a69..cbbb8204 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -84,6 +84,16 @@ rate, _ := helpers.ParseMoney(offer.GetPricing().GetRate()) // shopspring/decima
 wire, _ := helpers.FormatMoney(rate.Mul(decimal.NewFromInt(qty)))
 ```
 
+**Metered settlement** — a PER_UNIT offer carries an estimate, and a usage report
+settles within the price's tolerance (10% by default); the excess is held for
+dispute, never charged. Exact decimal, from the offer's own pricing:
+
+```go
+capAmount, _ := helpers.MeteredSettlementCap(offer.GetPricing()) // the most charged without a dispute
+s, _ := helpers.SettleMeteredUsage(offer.GetPricing(), consumed) // s.ChargedAmount, s.HeldAmount, ...
+err := helpers.CheckMeteredEstimate(offer) // ErrMeteredEstimateMissing; core.Verifier rejects such an offer
+```
+
 **Validation** — wraps protovalidate (the oracle), including cross-field CEL:
 
 ```go
diff --git a/sdk/go/connect/client_verify_test.go b/sdk/go/connect/client_verify_test.go
index 7069928d..03e6b091 100644
--- a/sdk/go/connect/client_verify_test.go
+++ b/sdk/go/connect/client_verify_test.go
@@ -33,6 +33,7 @@ import (
 	foraserver "github.com/FORA-Protocol/protocol/sdk/go/connectserver"
 	"github.com/FORA-Protocol/protocol/sdk/go/core"
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"google.golang.org/protobuf/proto"
 )
 
 // ---------------------------------------------------------------------------
@@ -121,6 +122,23 @@ func newOfferFixture(t *testing.T) offerFixture {
 	return offerFixture{exchangePub: exPub, good: good, doctored: doctored}
 }
 
+// signedMeteredOffer is sampleOffer priced PER_UNIT per token with the given
+// estimate (nil leaves it unset), genuinely signed with priv.
+func signedMeteredOffer(t *testing.T, priv ed25519.PrivateKey, id string, estimate *int32) *forav1.Offer {
+	t.Helper()
+	o := sampleOffer(id)
+	o.Pricing = &forav1.Pricing{
+		Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD",
+		Unit: proto.String("tokens"), EstimatedQuantity: estimate,
+	}
+	sigHex, err := helpers.SignOffer(priv, o)
+	if err != nil {
+		t.Fatalf("sign %s: %v", id, err)
+	}
+	o.Signature, o.SignatureAlgorithm = sigHex, helpers.OfferSignatureAlgorithm
+	return o
+}
+
 // sampleOffer builds a minimal, valid Offer carrying a future expiry so it is not
 // rejected on freshness grounds.
 func sampleOffer(id string) *forav1.Offer {
@@ -323,6 +341,43 @@ func TestDiscover_SortsVerifiedAndRejected(t *testing.T) {
 	}
 }
 
+// TestDiscover_RejectsMeteredOfferWithoutEstimate pins that a metered offer
+// lacking an estimate lands in Rejected even though the Exchange genuinely signed
+// it and it has not expired: without an estimate the agent has no amount to
+// accept and no ceiling for its usage report to settle against. The estimated
+// metered offer beside it verifies. Validation is off, the client default, so
+// the Verifier is the only gate the offer meets.
+func TestDiscover_RejectsMeteredOfferWithoutEstimate(t *testing.T) {
+	t.Parallel()
+	sig := newSigningFixture(t)
+	exPub, exPriv, err := ed25519.GenerateKey(nil)
+	if err != nil {
+		t.Fatalf("generate exchange offer key: %v", err)
+	}
+	srv := newVerifyingServer(t, sig, newMemReplayStore(), []*forav1.Offer{
+		signedMeteredOffer(t, exPriv, "offer-estimated", proto.Int32(2500)),
+		signedMeteredOffer(t, exPriv, "offer-unestimated", nil),
+	})
+	client := foraconnect.NewClient(srv.URL,
+		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithOfferKey(exPub),
+	)
+
+	res, err := client.Discover(context.Background(), &forav1.ResourceQuery{})
+	if err != nil {
+		t.Fatalf("Discover: %v", err)
+	}
+	if len(res.Verified()) != 1 || res.Verified()[0].Offer().GetOfferId() != "offer-estimated" {
+		t.Fatalf("want only offer-estimated verified, got %d verified", len(res.Verified()))
+	}
+	if len(res.Rejected()) != 1 || res.Rejected()[0].Offer.GetOfferId() != "offer-unestimated" {
+		t.Fatalf("want only offer-unestimated rejected, got %d rejected", len(res.Rejected()))
+	}
+	if !errors.Is(res.Rejected()[0].Reason, helpers.ErrMeteredEstimateMissing) {
+		t.Fatalf("rejected reason: want ErrMeteredEstimateMissing, got %v", res.Rejected()[0].Reason)
+	}
+}
+
 // TestExecute_AcceptsVerifiedOffer pins that Execute succeeds on a genuinely
 // verified offer produced by Discover — the positive half of the compile guard,
 // exercised at runtime through the full client→server→origin round-trip.
diff --git a/sdk/go/core/verifier.go b/sdk/go/core/verifier.go
index e812dd3c..6c7e4c45 100644
--- a/sdk/go/core/verifier.go
+++ b/sdk/go/core/verifier.go
@@ -48,7 +48,8 @@ type VerifiedOffer struct {
 func (v VerifiedOffer) Offer() *forav1.Offer { return v.offer }
 
 // RejectedOffer is an offer the Verifier could NOT accept: the wrapped Offer plus
-// the Reason it failed (signature invalid, expired, no resolvable key). It is
+// the Reason it failed (signature invalid, expired, no resolvable key, a metered
+// offer without an estimate). It is
 // VISIBLE — the application learns which offers failed and why — but not directly
 // executable. Acting on it requires the explicit .Unsafe() escape.
 type RejectedOffer struct {
@@ -95,7 +96,8 @@ func NewVerifier(mode Mode, resolver helpers.KeyResolver, now func() time.Time)
 // Sort splits offers into verified and rejected per the configured mode. Under Off
 // every offer is surfaced verified with no check. Under Strict each offer is
 // verified against its resolved exchange key and its expiry — a failure of either
-// lands it in Rejected with the reason.
+// lands it in Rejected with the reason. A metered offer that carries no positive
+// estimate is rejected too (helpers.ErrMeteredEstimateMissing).
 func (v Verifier) Sort(ctx context.Context, offers []*forav1.Offer) Result {
 	res := Result{}
 	for _, off := range offers {
@@ -113,9 +115,10 @@ func (v Verifier) Sort(ctx context.Context, offers []*forav1.Offer) Result {
 }
 
 // check verifies a single offer: resolve the exchange offer-signing key, verify the
-// signature, and enforce the not-in-the-past expiry. Any step failing rejects the
-// offer (fail-closed) — including an unresolvable key, so an offer the client
-// cannot key is rejected under Strict rather than trusted.
+// signature, enforce the not-in-the-past expiry, and require a metered offer to
+// carry its estimate. Any step failing rejects the offer (fail-closed) — including
+// an unresolvable key, so an offer the client cannot key is rejected under Strict
+// rather than trusted.
 func (v Verifier) check(ctx context.Context, off *forav1.Offer) error {
 	pub, err := v.resolver.Resolve(ctx, off.GetExchange())
 	if err != nil {
@@ -127,6 +130,12 @@ func (v Verifier) check(ctx context.Context, off *forav1.Offer) error {
 	if expired(off, v.now()) {
 		return ErrOfferExpired
 	}
+	// A metered offer without an estimate has no amount to accept and no ceiling
+	// for its usage report to settle against (fora.proto Pricing). Wire
+	// validation refuses it too, but a Verifier also runs with validation off.
+	if err := helpers.CheckMeteredEstimate(off); err != nil {
+		return err
+	}
 	return nil
 }
 
diff --git a/sdk/go/helpers/gen_settlement_vectors_test.go b/sdk/go/helpers/gen_settlement_vectors_test.go
new file mode 100644
index 00000000..f15f5952
--- /dev/null
+++ b/sdk/go/helpers/gen_settlement_vectors_test.go
@@ -0,0 +1,176 @@
+package helpers
+
+// Metered-settlement golden-vector emitter.
+//
+// The settlement of a metered purchase is arithmetic every party must agree on
+// to the last digit: the agent derives what it owes from the signed offer and
+// its own report, and the Exchange charges it, with no amount on the wire to
+// reconcile the two. Each row states the values its author worked out by hand,
+// and the emitter refuses to write a file where the real SettleMeteredUsage or
+// MeteredSettlementCap disagrees, so a face that drifted cannot publish its
+// drift as the new expectation.
+//
+// The rows reach past every default precision a decimal library ships with:
+// Python's Decimal context carries 28 significant digits, and two rows here
+// need 42. A port that does not do the arithmetic exactly fails them.
+//
+// Verification no-op by default (asserts the committed file matches a fresh
+// emit); (re)writes under FORA_UPDATE_VECTORS=1. TEST INFRASTRUCTURE.
+
+import (
+	"encoding/json"
+	"os"
+	"path/filepath"
+	"testing"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"google.golang.org/protobuf/encoding/protojson"
+	"google.golang.org/protobuf/proto"
+)
+
+// settlementExpectation is MeteredSettlement as the corpus records it.
+type settlementExpectation struct {
+	AcceptedAmount  string `json:"accepted_amount"`
+	CeilingQuantity string `json:"ceiling_quantity"`
+	CeilingAmount   string `json:"ceiling_amount"`
+	ChargedQuantity string `json:"charged_quantity"`
+	ChargedAmount   string `json:"charged_amount"`
+	HeldQuantity    string `json:"held_quantity"`
+	HeldAmount      string `json:"held_amount"`
+}
+
+// settlementVector is one SettleMeteredUsage case. pricing is the offer's
+// pricing in canonical proto-JSON. A row with error true is refused by both
+// SettleMeteredUsage and MeteredSettlementCap, unless cap_error is false — a
+// negative consumed quantity is the settlement's fault, not the price's.
+type settlementVector struct {
+	Name             string                 `json:"name"`
+	Pricing          json.RawMessage        `json:"pricing"`
+	ConsumedQuantity int64                  `json:"consumed_quantity"`
+	Error            bool                   `json:"error"`
+	CapError         bool                   `json:"cap_error"`
+	Expected         *settlementExpectation `json:"expected,omitempty"`
+}
+
+func perToken(estimate, toleranceBps *int32, rate string) *forav1.Pricing {
+	return &forav1.Pricing{
+		Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: rate, Currency: "USD",
+		Unit: proto.String("tokens"), EstimatedQuantity: estimate, EstimateToleranceBps: toleranceBps,
+	}
+}
+
+func settled(accepted, ceilQ, ceilA, chargedQ, chargedA, heldQ, heldA string) *settlementExpectation {
+	return &settlementExpectation{accepted, ceilQ, ceilA, chargedQ, chargedA, heldQ, heldA}
+}
+
+func buildSettlementVectors(t *testing.T) []settlementVector {
+	t.Helper()
+	const rate = "0.00002" // per token; E = 2500 accepts 0.05
+	tiny := "0.00000000000000000000000001234"
+	huge := "99999999999999999999999999999999"
+	e := proto.Int32
+	type row struct {
+		name     string
+		pricing  *forav1.Pricing
+		consumed int64
+		want     *settlementExpectation // nil: refused
+		capOK    bool                   // a refused row whose price still yields a cap
+	}
+	rows := []row{
+		// The three branches of the rule, at the default 10% tolerance (Q = 2750).
+		{"below_estimate_charged_as_consumed", perToken(e(2500), nil, rate), 2000,
+			settled("0.05", "2750", "0.055", "2000", "0.04", "0", "0"), false},
+		{"zero_consumed_charges_nothing", perToken(e(2500), nil, rate), 0,
+			settled("0.05", "2750", "0.055", "0", "0", "0", "0"), false},
+		{"at_estimate", perToken(e(2500), nil, rate), 2500,
+			settled("0.05", "2750", "0.055", "2500", "0.05", "0", "0"), false},
+		{"within_default_tolerance_charged_in_full", perToken(e(2500), nil, rate), 2700,
+			settled("0.05", "2750", "0.055", "2700", "0.054", "0", "0"), false},
+		{"at_ceiling_inclusive", perToken(e(2500), nil, rate), 2750,
+			settled("0.05", "2750", "0.055", "2750", "0.055", "0", "0"), false},
+		{"above_ceiling_excess_held", perToken(e(2500), nil, rate), 3000,
+			settled("0.05", "2750", "0.055", "2750", "0.055", "250", "0.005"), false},
+
+		// A stated tolerance replaces the default; an explicit 0 is no tolerance.
+		{"explicit_zero_tolerance_estimate_is_ceiling", perToken(e(2500), e(0), rate), 2600,
+			settled("0.05", "2500", "0.05", "2500", "0.05", "100", "0.002"), false},
+		{"explicit_max_tolerance_doubles_estimate", perToken(e(2500), e(10000), rate), 4000,
+			settled("0.05", "5000", "0.1", "4000", "0.08", "0", "0"), false},
+		{"odd_tolerance_fractional_ceiling", perToken(e(333), e(125), "0.0003"), 400,
+			settled("0.0999", "337.1625", "0.10114875", "337.1625", "0.10114875", "62.8375", "0.01885125"), false},
+		{"default_tolerance_fractional_ceiling", perToken(e(15), nil, "0.10"), 20,
+			settled("1.5", "16.5", "1.65", "16.5", "1.65", "3.5", "0.35"), false},
+
+		// Exactness past every default precision: 42 significant digits.
+		{"exact_tiny_rate_large_quantities", perToken(e(2000000001), e(3), tiny), 2147483647,
+			settled("0.00000000000000002468000001234", "2000600001.0003", "0.000000000000000024687404012343702",
+				"2000600001.0003", "0.000000000000000024687404012343702",
+				"146883645.9997", "0.000000000000000001812544191636298"), false},
+		{"exact_huge_rate_large_quantities", perToken(e(2000000001), e(3), huge), 2147483647,
+			settled("200000000099999999999999999999997999999999", "2000600001.0003",
+				"200060000100029999999999999999997999399998.9997",
+				"2000600001.0003", "200060000100029999999999999999997999399998.9997",
+				"146883645.9997", "14688364599969999999999999999999853116354.0003"), false},
+
+		// Refusals. Each is refused by the settlement; all but the last by the cap too.
+		{"refused_not_metered", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"}, 1, nil, false},
+		{"refused_free", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"}, 1, nil, false},
+		{"refused_missing_estimate", perToken(nil, nil, rate), 2500, nil, false},
+		{"refused_zero_estimate", perToken(e(0), nil, rate), 2500, nil, false},
+		{"refused_negative_estimate", perToken(e(-1), nil, rate), 2500, nil, false},
+		{"refused_empty_rate", perToken(e(2500), nil, ""), 2500, nil, false},
+		{"refused_malformed_rate", perToken(e(2500), nil, "1E-5"), 2500, nil, false},
+		{"refused_tolerance_above_max", perToken(e(2500), e(10001), rate), 2500, nil, false},
+		{"refused_negative_tolerance", perToken(e(2500), e(-1), rate), 2500, nil, false},
+		{"refused_negative_consumed", perToken(e(2500), nil, rate), -1, nil, true},
+	}
+
+	marshal := protojson.MarshalOptions{UseProtoNames: true}
+	out := make([]settlementVector, 0, len(rows))
+	for _, r := range rows {
+		pj, err := marshal.Marshal(r.pricing)
+		if err != nil {
+			t.Fatalf("%s: marshal pricing: %v", r.name, err)
+		}
+		got, setErr := SettleMeteredUsage(r.pricing, r.consumed)
+		capAmount, capErr := MeteredSettlementCap(r.pricing)
+		v := settlementVector{Name: r.name, Pricing: pj, ConsumedQuantity: r.consumed}
+		if r.want == nil {
+			if setErr == nil {
+				t.Fatalf("%s: SettleMeteredUsage accepted a row its author marked refused: %+v", r.name, got)
+			}
+			if r.capOK != (capErr == nil) {
+				t.Fatalf("%s: MeteredSettlementCap err = %v, author expected cap ok = %v", r.name, capErr, r.capOK)
+			}
+			v.Error, v.CapError = true, capErr != nil
+			out = append(out, v)
+			continue
+		}
+		if setErr != nil || capErr != nil {
+			t.Fatalf("%s: refused a row its author marked settleable: settle %v, cap %v", r.name, setErr, capErr)
+		}
+		want := settlementExpectation(*r.want)
+		if have := settlementExpectation(got); have != want {
+			t.Fatalf("%s: SettleMeteredUsage = %+v, author expected %+v", r.name, have, want)
+		}
+		if capAmount != want.CeilingAmount {
+			t.Fatalf("%s: MeteredSettlementCap = %s, author expected %s", r.name, capAmount, want.CeilingAmount)
+		}
+		v.Expected = &want
+		out = append(out, v)
+	}
+	return out
+}
+
+func TestGenerateSettlementVectors(t *testing.T) {
+	doc := map[string]any{
+		"default_estimate_tolerance_bps": DefaultEstimateToleranceBps,
+		"vectors":                        buildSettlementVectors(t),
+	}
+	path := filepath.Join("testdata", "metered-settlement-vectors.json")
+	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
+		writeJSON(t, path, doc)
+		return
+	}
+	assertMatches(t, path, doc)
+}
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index b7118668..3d53f574 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -434,13 +434,15 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 		// Freshness is fail-closed and mirrors core.Verifier.expired: a missing
 		// expires_at is expired (not eternal); a present bound is inclusive at now.
 		expired := offer.GetExpiresAt() == nil || offer.GetExpiresAt().AsTime().Before(time.Unix(nowUnix, 0))
+		// A metered offer must carry its estimate (core.Verifier's last check).
+		estimateErr := CheckMeteredEstimate(offer)
 		return offerVerifyVector{
 			Name:              name,
 			Exchange:          exchange,
 			ExchangePubB64URL: pubB64URL,
 			OfferJSON:         offerCanonicalProtoJSON(t, offer),
 			NowUnix:           nowUnix,
-			ExpectedVerified:  verifyErr == nil && !expired,
+			ExpectedVerified:  verifyErr == nil && !expired && estimateErr == nil,
 			ExchangeSeedHex:   hex.EncodeToString(exSeed),
 		}
 	}
@@ -473,7 +475,7 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 		OfferId:        "offer-repeated",
 		ExpiresAt:      future,
 		DeliveryMethod: forav1.DeliveryMethod_DELIVERY_METHOD_DIRECT,
-		Pricing:        &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.05", Currency: "USD"},
+		Pricing:        &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.05", Currency: "USD", EstimatedQuantity: proto.Int32(1)},
 		Terms: []*forav1.LicenseTerm{
 			{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Scopes: []string{"ai-train", "ai-infer"}},
 			{Semantics: forav1.TermSemantics_TERM_SEMANTICS_REFERENCE_ONLY, Scopes: []string{"resell"}},
@@ -517,6 +519,44 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 			ExpiresAt: timestamppb.New(time.Unix(nowUnix-100, 0).UTC()),
 		}, nil),
 
+		// --- Metered estimate dimension: a PER_UNIT offer must carry a positive
+		// estimated_quantity on its own pricing, or every port rejects it even
+		// though its signature and expiry are good. ---
+
+		// metered_with_estimate_and_tolerance: the conformant metered shape.
+		emit("metered_with_estimate_and_tolerance", &forav1.Offer{
+			OfferId:   "offer-metered",
+			ExpiresAt: future,
+			Pricing:   meteredVectorPricing(proto.Int32(2500), proto.Int32(1500)),
+			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredVectorPricing(nil, proto.Int32(1500))}},
+		}, nil),
+		// metered_missing_estimate: no estimate at all → rejected.
+		emit("metered_missing_estimate", &forav1.Offer{
+			OfferId:   "offer-metered-no-estimate",
+			ExpiresAt: future,
+			Pricing:   meteredVectorPricing(nil, nil),
+		}, nil),
+		// metered_zero_estimate: present but zero is no estimate → rejected.
+		emit("metered_zero_estimate", &forav1.Offer{
+			OfferId:   "offer-metered-zero-estimate",
+			ExpiresAt: future,
+			Pricing:   meteredVectorPricing(proto.Int32(0), nil),
+		}, nil),
+		// metered_term_estimate_only: the term is PER_UNIT and carries an estimate,
+		// the offer's own pricing does not. Settlement reads the offer's pricing, so
+		// the estimate on the term does not count → rejected.
+		emit("metered_term_estimate_only", &forav1.Offer{
+			OfferId:   "offer-metered-term-only",
+			ExpiresAt: future,
+			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredVectorPricing(proto.Int32(2500), nil)}},
+		}, nil),
+		// flat_without_estimate: a non-metered offer needs no estimate → verified.
+		emit("flat_without_estimate", &forav1.Offer{
+			OfferId:   "offer-flat",
+			ExpiresAt: future,
+			Pricing:   &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"},
+		}, nil),
+
 		// missing_expires_at: valid signature, NO expires_at. Fail-closed → rejected.
 		// This is the exact fail-open hole M-7 flagged: a port that returns "fresh"
 		// on a missing bound admits an unbounded bearer offer and breaks here.
@@ -526,6 +566,15 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 	}
 }
 
+// meteredVectorPricing is a PER_UNIT price per token with the given estimate and
+// tolerance (nil leaves either unset).
+func meteredVectorPricing(estimate, toleranceBps *int32) *forav1.Pricing {
+	return &forav1.Pricing{
+		Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD",
+		Unit: proto.String("tokens"), EstimatedQuantity: estimate, EstimateToleranceBps: toleranceBps,
+	}
+}
+
 // wireCanonicalVector pins the wire-to-canonical conversion: wire_json is the
 // offer exactly as the Connect codec emits it (snake_case proto names, enums as
 // names, EmitUnpopulated zero-inflation; JCS-stabilized so the committed file is
diff --git a/sdk/go/helpers/settlement.go b/sdk/go/helpers/settlement.go
new file mode 100644
index 00000000..899b2a8c
--- /dev/null
+++ b/sdk/go/helpers/settlement.go
@@ -0,0 +1,195 @@
+package helpers
+
+import (
+	"errors"
+	"fmt"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/shopspring/decimal"
+)
+
+// Metered settlement (fora.proto Pricing, "METERED SETTLEMENT"). A PER_UNIT
+// price is charged per unit consumed. Three values on the offer's pricing fix
+// what a metered purchase can cost — the estimate E, the rate R and the
+// tolerance T in basis points (1000 when absent) — and the offer signature
+// covers all three. The agent accepts E × R at purchase; the usage report
+// settles the consumed quantity C at min(C, Q) × R, where the ceiling is
+// Q = E × (10000 + T) / 10000, and the quantity above Q is held for dispute,
+// never charged automatically.
+//
+// Every value here is exact: the inputs are integers and decimal strings and
+// the only division is by 10000, a decimal shift, so no step rounds. The
+// results are canonical decimal strings in the money wire form (FormatMoney).
+
+// DefaultEstimateToleranceBps is the tolerance a metered price settles within
+// when it states none: 1000 basis points, 10% of the estimate.
+const DefaultEstimateToleranceBps int32 = 1000
+
+// MaxEstimateToleranceBps is the largest tolerance the wire accepts: 10000
+// basis points, a ceiling of twice the estimate.
+const MaxEstimateToleranceBps int32 = 10000
+
+// bpsScale is the basis-point denominator; dividing by it is a shift of four
+// decimal places.
+const bpsScale = 10000
+
+// ErrMeteredEstimateMissing signals a metered (PER_UNIT) offer or price that
+// carries no positive estimated_quantity. Such an offer has no amount to accept
+// and no ceiling to settle against, so an agent refuses it.
+var ErrMeteredEstimateMissing = errors.New("helpers: metered offer carries no positive estimated_quantity")
+
+// ErrNotMetered signals a settlement asked of a price that is not PER_UNIT.
+var ErrNotMetered = errors.New("helpers: pricing is not metered (PER_UNIT)")
+
+// MeteredSettlement is what a metered purchase settles to, every value a
+// canonical decimal string. Quantities are in the price's unit and may be
+// fractional (CeilingQuantity, and the quantities derived from it); amounts are
+// in the price's currency.
+type MeteredSettlement struct {
+	// AcceptedAmount is E × R: what the agent accepted at purchase, and what
+	// TransactionResultItem.cost carries for a metered item.
+	AcceptedAmount string
+	// CeilingQuantity is Q = E × (10000 + T) / 10000.
+	CeilingQuantity string
+	// CeilingAmount is Q × R: the most the purchase is charged without a dispute.
+	CeilingAmount string
+	// ChargedQuantity is min(C, Q).
+	ChargedQuantity string
+	// ChargedAmount is min(C, Q) × R: what the report settles to.
+	ChargedAmount string
+	// HeldQuantity is max(0, C − Q): the quantity held for dispute.
+	HeldQuantity string
+	// HeldAmount is max(0, C − Q) × R: held for dispute, never charged automatically.
+	HeldAmount string
+}
+
+// IsMeteredOffer reports whether offer is metered: its pricing or its term's
+// pricing is PER_UNIT. The term counts because it is the authoritative copy of
+// the price (fora.proto Offer, the offer.metered.requires_estimate rule).
+func IsMeteredOffer(offer *forav1.Offer) bool {
+	if offer.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT {
+		return true
+	}
+	for _, t := range offer.GetTerms() {
+		if t.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT {
+			return true
+		}
+	}
+	return false
+}
+
+// CheckMeteredEstimate returns ErrMeteredEstimateMissing when offer is metered
+// and its pricing carries no positive estimated_quantity, and nil otherwise. It
+// is the offer.metered.requires_estimate rule as a standalone check, for a
+// verifier that runs without wire validation; a non-metered offer passes
+// whatever its pricing says.
+func CheckMeteredEstimate(offer *forav1.Offer) error {
+	if offer == nil {
+		return errors.New("helpers: offer is nil")
+	}
+	if !IsMeteredOffer(offer) {
+		return nil
+	}
+	p := offer.GetPricing()
+	if p == nil || p.EstimatedQuantity == nil || p.GetEstimatedQuantity() <= 0 {
+		return ErrMeteredEstimateMissing
+	}
+	return nil
+}
+
+// EstimateToleranceBps returns the tolerance pricing settles within: its
+// estimate_tolerance_bps when present (an explicit 0 included), and
+// DefaultEstimateToleranceBps when absent. It does not check the bounds;
+// SettleMeteredUsage and MeteredSettlementCap do.
+func EstimateToleranceBps(pricing *forav1.Pricing) int32 {
+	if pricing == nil || pricing.EstimateToleranceBps == nil {
+		return DefaultEstimateToleranceBps
+	}
+	return pricing.GetEstimateToleranceBps()
+}
+
+// meteredTerms holds the parsed settlement inputs of a metered price.
+type meteredTerms struct {
+	estimate decimal.Decimal
+	rate     decimal.Decimal
+	ceiling  decimal.Decimal
+}
+
+// parseMeteredTerms checks pricing is a metered price that can settle and
+// returns its estimate, rate and ceiling quantity.
+func parseMeteredTerms(pricing *forav1.Pricing) (meteredTerms, error) {
+	if pricing == nil {
+		return meteredTerms{}, errors.New("helpers: pricing is nil")
+	}
+	if pricing.GetModel() != forav1.PricingModel_PRICING_MODEL_PER_UNIT {
+		return meteredTerms{}, fmt.Errorf("%w: model is %s", ErrNotMetered, pricing.GetModel())
+	}
+	if pricing.EstimatedQuantity == nil || pricing.GetEstimatedQuantity() <= 0 {
+		return meteredTerms{}, ErrMeteredEstimateMissing
+	}
+	rate, err := ParseMoney(pricing.GetRate())
+	if err != nil {
+		return meteredTerms{}, fmt.Errorf("helpers: metered rate: %w", err)
+	}
+	bps := EstimateToleranceBps(pricing)
+	if bps < 0 || bps > MaxEstimateToleranceBps {
+		return meteredTerms{}, fmt.Errorf("helpers: estimate_tolerance_bps %d is outside 0..%d", bps, MaxEstimateToleranceBps)
+	}
+	estimate := decimal.NewFromInt(int64(pricing.GetEstimatedQuantity()))
+	ceiling := estimate.Mul(decimal.NewFromInt(int64(bpsScale + bps))).Shift(-4)
+	return meteredTerms{estimate: estimate, rate: rate, ceiling: ceiling}, nil
+}
+
+// MeteredSettlementCap returns Q × R for a metered price: the most a purchase
+// under it is charged without a dispute, and the amount an agent budgets
+// against a spend cap. It refuses a price that is not PER_UNIT, carries no
+// positive estimate or no valid rate, or states a tolerance outside 0..10000.
+func MeteredSettlementCap(pricing *forav1.Pricing) (string, error) {
+	terms, err := parseMeteredTerms(pricing)
+	if err != nil {
+		return "", err
+	}
+	return FormatMoney(terms.ceiling.Mul(terms.rate))
+}
+
+// SettleMeteredUsage settles a usage report of consumedQuantity against a
+// metered price — the offer's own pricing, which is the copy settlement reads.
+// It refuses what MeteredSettlementCap refuses, and a negative quantity.
+func SettleMeteredUsage(pricing *forav1.Pricing, consumedQuantity int64) (MeteredSettlement, error) {
+	terms, err := parseMeteredTerms(pricing)
+	if err != nil {
+		return MeteredSettlement{}, err
+	}
+	if consumedQuantity < 0 {
+		return MeteredSettlement{}, fmt.Errorf("helpers: consumed quantity %d is negative", consumedQuantity)
+	}
+	consumed := decimal.NewFromInt(consumedQuantity)
+	charged := decimal.Min(consumed, terms.ceiling)
+	held := decimal.Max(decimal.Zero, consumed.Sub(terms.ceiling))
+	values := []decimal.Decimal{
+		terms.estimate.Mul(terms.rate),
+		terms.ceiling,
+		terms.ceiling.Mul(terms.rate),
+		charged,
+		charged.Mul(terms.rate),
+		held,
+		held.Mul(terms.rate),
+	}
+	out := make([]string, len(values))
+	for i, v := range values {
+		s, err := FormatMoney(v)
+		if err != nil {
+			return MeteredSettlement{}, err
+		}
+		out[i] = s
+	}
+	return MeteredSettlement{
+		AcceptedAmount:  out[0],
+		CeilingQuantity: out[1],
+		CeilingAmount:   out[2],
+		ChargedQuantity: out[3],
+		ChargedAmount:   out[4],
+		HeldQuantity:    out[5],
+		HeldAmount:      out[6],
+	}, nil
+}
diff --git a/sdk/go/helpers/settlement_test.go b/sdk/go/helpers/settlement_test.go
new file mode 100644
index 00000000..50602ecc
--- /dev/null
+++ b/sdk/go/helpers/settlement_test.go
@@ -0,0 +1,82 @@
+package helpers
+
+import (
+	"errors"
+	"testing"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"google.golang.org/protobuf/proto"
+)
+
+// The settlement arithmetic is pinned by metered-settlement-vectors.json, which
+// every SDK replays. These tests cover what the vectors do not: which offers are
+// metered, the estimate check a verifier runs, and the tolerance default.
+
+func meteredTestOffer(offerModel, termModel forav1.PricingModel, estimate *int32) *forav1.Offer {
+	return &forav1.Offer{
+		Pricing: &forav1.Pricing{Model: offerModel, EstimatedQuantity: estimate},
+		Terms:   []*forav1.LicenseTerm{{Pricing: &forav1.Pricing{Model: termModel}}},
+	}
+}
+
+func TestCheckMeteredEstimate(t *testing.T) {
+	perUnit, flat := forav1.PricingModel_PRICING_MODEL_PER_UNIT, forav1.PricingModel_PRICING_MODEL_FLAT
+	cases := []struct {
+		name    string
+		offer   *forav1.Offer
+		metered bool
+		wantErr bool
+	}{
+		{"per_unit_with_estimate", meteredTestOffer(perUnit, perUnit, proto.Int32(1)), true, false},
+		{"per_unit_without_estimate", meteredTestOffer(perUnit, perUnit, nil), true, true},
+		{"per_unit_zero_estimate", meteredTestOffer(perUnit, perUnit, proto.Int32(0)), true, true},
+		{"per_unit_negative_estimate", meteredTestOffer(perUnit, perUnit, proto.Int32(-3)), true, true},
+		{"per_unit_term_under_flat_pricing", meteredTestOffer(flat, perUnit, nil), true, true},
+		{"per_unit_term_estimate_on_flat_pricing", meteredTestOffer(flat, perUnit, proto.Int32(10)), true, false},
+		{"flat_without_estimate", meteredTestOffer(flat, flat, nil), false, false},
+		{"no_pricing_at_all", &forav1.Offer{}, false, false},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			if got := IsMeteredOffer(c.offer); got != c.metered {
+				t.Fatalf("IsMeteredOffer = %v, want %v", got, c.metered)
+			}
+			err := CheckMeteredEstimate(c.offer)
+			if c.wantErr != (err != nil) {
+				t.Fatalf("CheckMeteredEstimate = %v, want error %v", err, c.wantErr)
+			}
+			if c.wantErr && !errors.Is(err, ErrMeteredEstimateMissing) {
+				t.Fatalf("CheckMeteredEstimate = %v, want ErrMeteredEstimateMissing", err)
+			}
+		})
+	}
+	if err := CheckMeteredEstimate(nil); err == nil {
+		t.Fatal("CheckMeteredEstimate(nil) must refuse")
+	}
+}
+
+func TestEstimateToleranceBps(t *testing.T) {
+	if got := EstimateToleranceBps(nil); got != DefaultEstimateToleranceBps {
+		t.Fatalf("nil pricing: got %d, want the default %d", got, DefaultEstimateToleranceBps)
+	}
+	if got := EstimateToleranceBps(&forav1.Pricing{}); got != 1000 {
+		t.Fatalf("absent tolerance: got %d, want 1000", got)
+	}
+	if got := EstimateToleranceBps(&forav1.Pricing{EstimateToleranceBps: proto.Int32(0)}); got != 0 {
+		t.Fatalf("explicit zero tolerance: got %d, want 0 (no tolerance, not the default)", got)
+	}
+}
+
+func TestSettleMeteredUsageRefusesNotMetered(t *testing.T) {
+	_, err := SettleMeteredUsage(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1"}, 1)
+	if !errors.Is(err, ErrNotMetered) {
+		t.Fatalf("FLAT pricing: got %v, want ErrNotMetered", err)
+	}
+	_, err = MeteredSettlementCap(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "1"})
+	if !errors.Is(err, ErrMeteredEstimateMissing) {
+		t.Fatalf("PER_UNIT without estimate: got %v, want ErrMeteredEstimateMissing", err)
+	}
+	if _, err := SettleMeteredUsage(nil, 1); err == nil {
+		t.Fatal("nil pricing must refuse")
+	}
+}
diff --git a/sdk/go/helpers/testdata/metered-settlement-vectors.json b/sdk/go/helpers/testdata/metered-settlement-vectors.json
new file mode 100644
index 00000000..6a2e876b
--- /dev/null
+++ b/sdk/go/helpers/testdata/metered-settlement-vectors.json
@@ -0,0 +1,399 @@
+{
+  "default_estimate_tolerance_bps": 1000,
+  "vectors": [
+    {
+      "name": "below_estimate_charged_as_consumed",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2000,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "2750",
+        "ceiling_amount": "0.055",
+        "charged_quantity": "2000",
+        "charged_amount": "0.04",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "zero_consumed_charges_nothing",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 0,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "2750",
+        "ceiling_amount": "0.055",
+        "charged_quantity": "0",
+        "charged_amount": "0",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "at_estimate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2500,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "2750",
+        "ceiling_amount": "0.055",
+        "charged_quantity": "2500",
+        "charged_amount": "0.05",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "within_default_tolerance_charged_in_full",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2700,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "2750",
+        "ceiling_amount": "0.055",
+        "charged_quantity": "2700",
+        "charged_amount": "0.054",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "at_ceiling_inclusive",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2750,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "2750",
+        "ceiling_amount": "0.055",
+        "charged_quantity": "2750",
+        "charged_amount": "0.055",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "above_ceiling_excess_held",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 3000,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "2750",
+        "ceiling_amount": "0.055",
+        "charged_quantity": "2750",
+        "charged_amount": "0.055",
+        "held_quantity": "250",
+        "held_amount": "0.005"
+      }
+    },
+    {
+      "name": "explicit_zero_tolerance_estimate_is_ceiling",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens",
+        "estimate_tolerance_bps": 0
+      },
+      "consumed_quantity": 2600,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "2500",
+        "ceiling_amount": "0.05",
+        "charged_quantity": "2500",
+        "charged_amount": "0.05",
+        "held_quantity": "100",
+        "held_amount": "0.002"
+      }
+    },
+    {
+      "name": "explicit_max_tolerance_doubles_estimate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens",
+        "estimate_tolerance_bps": 10000
+      },
+      "consumed_quantity": 4000,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.05",
+        "ceiling_quantity": "5000",
+        "ceiling_amount": "0.1",
+        "charged_quantity": "4000",
+        "charged_amount": "0.08",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "odd_tolerance_fractional_ceiling",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.0003",
+        "currency": "USD",
+        "estimated_quantity": 333,
+        "unit": "tokens",
+        "estimate_tolerance_bps": 125
+      },
+      "consumed_quantity": 400,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.0999",
+        "ceiling_quantity": "337.1625",
+        "ceiling_amount": "0.10114875",
+        "charged_quantity": "337.1625",
+        "charged_amount": "0.10114875",
+        "held_quantity": "62.8375",
+        "held_amount": "0.01885125"
+      }
+    },
+    {
+      "name": "default_tolerance_fractional_ceiling",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.10",
+        "currency": "USD",
+        "estimated_quantity": 15,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 20,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "1.5",
+        "ceiling_quantity": "16.5",
+        "ceiling_amount": "1.65",
+        "charged_quantity": "16.5",
+        "charged_amount": "1.65",
+        "held_quantity": "3.5",
+        "held_amount": "0.35"
+      }
+    },
+    {
+      "name": "exact_tiny_rate_large_quantities",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00000000000000000000000001234",
+        "currency": "USD",
+        "estimated_quantity": 2000000001,
+        "unit": "tokens",
+        "estimate_tolerance_bps": 3
+      },
+      "consumed_quantity": 2147483647,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "0.00000000000000002468000001234",
+        "ceiling_quantity": "2000600001.0003",
+        "ceiling_amount": "0.000000000000000024687404012343702",
+        "charged_quantity": "2000600001.0003",
+        "charged_amount": "0.000000000000000024687404012343702",
+        "held_quantity": "146883645.9997",
+        "held_amount": "0.000000000000000001812544191636298"
+      }
+    },
+    {
+      "name": "exact_huge_rate_large_quantities",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "99999999999999999999999999999999",
+        "currency": "USD",
+        "estimated_quantity": 2000000001,
+        "unit": "tokens",
+        "estimate_tolerance_bps": 3
+      },
+      "consumed_quantity": 2147483647,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": "200000000099999999999999999999997999999999",
+        "ceiling_quantity": "2000600001.0003",
+        "ceiling_amount": "200060000100029999999999999999997999399998.9997",
+        "charged_quantity": "2000600001.0003",
+        "charged_amount": "200060000100029999999999999999997999399998.9997",
+        "held_quantity": "146883645.9997",
+        "held_amount": "14688364599969999999999999999999853116354.0003"
+      }
+    },
+    {
+      "name": "refused_not_metered",
+      "pricing": {
+        "model": "PRICING_MODEL_FLAT",
+        "rate": "1.00",
+        "currency": "USD"
+      },
+      "consumed_quantity": 1,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_free",
+      "pricing": {
+        "model": "PRICING_MODEL_FREE",
+        "rate": "0"
+      },
+      "consumed_quantity": 1,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_missing_estimate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2500,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_zero_estimate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 0,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2500,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_negative_estimate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": -1,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2500,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_empty_rate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2500,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_malformed_rate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "1E-5",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2500,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_tolerance_above_max",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens",
+        "estimate_tolerance_bps": 10001
+      },
+      "consumed_quantity": 2500,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_negative_tolerance",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens",
+        "estimate_tolerance_bps": -1
+      },
+      "consumed_quantity": 2500,
+      "error": true,
+      "cap_error": true
+    },
+    {
+      "name": "refused_negative_consumed",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
+      },
+      "consumed_quantity": -1,
+      "error": true,
+      "cap_error": false
+    }
+  ]
+}
diff --git a/sdk/go/helpers/testdata/offer-verify-vectors.json b/sdk/go/helpers/testdata/offer-verify-vectors.json
index 39f0d176..22cda719 100644
--- a/sdk/go/helpers/testdata/offer-verify-vectors.json
+++ b/sdk/go/helpers/testdata/offer-verify-vectors.json
@@ -82,10 +82,11 @@
         "offer_id": "offer-repeated",
         "pricing": {
           "currency": "USD",
+          "estimated_quantity": 1,
           "model": "PRICING_MODEL_PER_UNIT",
           "rate": "0.05"
         },
-        "signature": "ca507ae0397fb07cfeabaa666a0a3e8a7f57c802bad14a331e6684897576674ad4455ec81df539398c726b2283cdd93aa6e8b01f88d5d5af2de77d4c8df5a40b",
+        "signature": "6a40ec2d96e8a88d96c5ddd8019b21fd9a89558737387c3bb689bc095ecb7c1da7c925976e6c1494acf85bffe4cccae12a0d5666933cfd365bebe59cb50f6e07",
         "signature_algorithm": "EdDSA",
         "terms": [
           {
@@ -157,6 +158,131 @@
       "expected_verified": false,
       "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
     },
+    {
+      "name": "metered_with_estimate_and_tolerance",
+      "exchange": "exchange.example.com",
+      "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
+      "offer_json": {
+        "exchange": "exchange.example.com",
+        "expires_at": "2023-11-14T22:28:20Z",
+        "offer_id": "offer-metered",
+        "pricing": {
+          "currency": "USD",
+          "estimate_tolerance_bps": 1500,
+          "estimated_quantity": 2500,
+          "model": "PRICING_MODEL_PER_UNIT",
+          "rate": "0.00002",
+          "unit": "tokens"
+        },
+        "signature": "cb5cb34c81e8d3ae99bcfebe5d4c5b4d14077eff98eab4164f5b5572c558d1dd12680e2d616b9a73f3184507414221dede1502ab3b3fac1e8a7b44abdda60c00",
+        "signature_algorithm": "EdDSA",
+        "terms": [
+          {
+            "pricing": {
+              "currency": "USD",
+              "estimate_tolerance_bps": 1500,
+              "model": "PRICING_MODEL_PER_UNIT",
+              "rate": "0.00002",
+              "unit": "tokens"
+            },
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "now_unix": 1700000100,
+      "expected_verified": true,
+      "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
+    },
+    {
+      "name": "metered_missing_estimate",
+      "exchange": "exchange.example.com",
+      "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
+      "offer_json": {
+        "exchange": "exchange.example.com",
+        "expires_at": "2023-11-14T22:28:20Z",
+        "offer_id": "offer-metered-no-estimate",
+        "pricing": {
+          "currency": "USD",
+          "model": "PRICING_MODEL_PER_UNIT",
+          "rate": "0.00002",
+          "unit": "tokens"
+        },
+        "signature": "96baaa3afce0a51fadb8aeb26a18fea648e87c3ec09884edd1b34eea17108ec3adc56147bed04ac9be067ca447dc5af5dc08710be1030dd714eaa6f07b38cf0e",
+        "signature_algorithm": "EdDSA"
+      },
+      "now_unix": 1700000100,
+      "expected_verified": false,
+      "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
+    },
+    {
+      "name": "metered_zero_estimate",
+      "exchange": "exchange.example.com",
+      "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
+      "offer_json": {
+        "exchange": "exchange.example.com",
+        "expires_at": "2023-11-14T22:28:20Z",
+        "offer_id": "offer-metered-zero-estimate",
+        "pricing": {
+          "currency": "USD",
+          "estimated_quantity": 0,
+          "model": "PRICING_MODEL_PER_UNIT",
+          "rate": "0.00002",
+          "unit": "tokens"
+        },
+        "signature": "8786d4e1bcabe52a0b23856a8d122edcbafbb7103be9402243b44b5e0657089814acaa42367016c39e79585cb8cd0a25f431b7f15bc5296a28f1510c0a9b7606",
+        "signature_algorithm": "EdDSA"
+      },
+      "now_unix": 1700000100,
+      "expected_verified": false,
+      "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
+    },
+    {
+      "name": "metered_term_estimate_only",
+      "exchange": "exchange.example.com",
+      "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
+      "offer_json": {
+        "exchange": "exchange.example.com",
+        "expires_at": "2023-11-14T22:28:20Z",
+        "offer_id": "offer-metered-term-only",
+        "signature": "30c9c14d29e13a2bf0fa9ff05f0f75fb641932e265d6b55cc22d2f68b441d039640ef85d8798e8e2b527c82ca33a7fbab3a388cfb4ba6a760b1233a9c813150c",
+        "signature_algorithm": "EdDSA",
+        "terms": [
+          {
+            "pricing": {
+              "currency": "USD",
+              "estimated_quantity": 2500,
+              "model": "PRICING_MODEL_PER_UNIT",
+              "rate": "0.00002",
+              "unit": "tokens"
+            },
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "now_unix": 1700000100,
+      "expected_verified": false,
+      "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
+    },
+    {
+      "name": "flat_without_estimate",
+      "exchange": "exchange.example.com",
+      "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
+      "offer_json": {
+        "exchange": "exchange.example.com",
+        "expires_at": "2023-11-14T22:28:20Z",
+        "offer_id": "offer-flat",
+        "pricing": {
+          "currency": "USD",
+          "model": "PRICING_MODEL_FLAT",
+          "rate": "1.00"
+        },
+        "signature": "a49747378fc6748fede161b9b0ef6d2a4726500af89ca9be809d3d1b737bf2205523b6487d17f2d874d2704abd54a538ab2ce1ecefd69de65ac98458750b6703",
+        "signature_algorithm": "EdDSA"
+      },
+      "now_unix": 1700000100,
+      "expected_verified": true,
+      "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
+    },
     {
       "name": "missing_expires_at",
       "exchange": "exchange.example.com",

From c17f6944b2b87a41ae9940a50b99a7070eab7535 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 14:54:27 -0400
Subject: [PATCH 062/164] Settle metered usage and refuse an unestimated
 metered offer in the Python SDK

fora_sdk.money gains the settlement of a metered purchase over the
offer's own pricing, exact in a local decimal context with Inexact
trapped, so the process-wide 28-digit context is never consulted and a
step that would round raises instead. metered_settlement_cap returns
ceiling x rate; settle_metered_usage returns a MeteredSettlement with
the accepted, ceiling, charged and held quantities and amounts. Both
raise ValueError for a price that is not PER_UNIT, one without a
positive estimate, an invalid rate and a tolerance outside 0..10000;
the settlement also refuses a negative or non-integer quantity.
estimate_tolerance_bps applies the 10% default and keeps an explicit 0.
is_metered_offer and check_metered_estimate apply the
offer.metered.requires_estimate rule. All are exported from fora_sdk,
with DEFAULT_ESTIMATE_TOLERANCE_BPS and MAX_ESTIMATE_TOLERANCE_BPS.

The Verifier rejects a metered offer without a positive estimate after
the signature and expiry checks. The cross-field layer gains the Offer
rule, through the same check_metered_estimate, and the tolerance rule
on Pricing, with an OfferCrossField composed model.

The parity suite replays every metered-settlement vector, including
the two that need 42 significant digits, and pins the metered offers
of the offer-verify corpus. The cross-field suite expects the Offer
mutants and gains valid instances for both rules.
---
 sdk/python/README.md                          |   8 +
 sdk/python/fora_sdk/__init__.py               |  22 +-
 sdk/python/fora_sdk/core.py                   |   8 +
 sdk/python/fora_sdk/crossfield.py             |  28 ++-
 sdk/python/fora_sdk/money.py                  | 202 +++++++++++++++++-
 .../tests/test_core_offer_verify_parity.py    |  17 ++
 sdk/python/tests/test_crossfield_parity.py    |  49 +++++
 .../tests/test_metered_settlement_parity.py   | 116 ++++++++++
 8 files changed, 447 insertions(+), 3 deletions(-)
 create mode 100644 sdk/python/tests/test_metered_settlement_parity.py

diff --git a/sdk/python/README.md b/sdk/python/README.md
index d6019b1b..2c81ae89 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -233,6 +233,14 @@ normalize_resource_entry(entry)            # the form the Exchange stores
 **Money.** Exact decimal in and out, canonical decimal string on the wire:
 `parse_money`, `format_money`, `canonicalize_money`. Never floats.
 
+**Metered settlement.** A `PER_UNIT` offer carries an estimate, and its usage report
+settles within the price's tolerance (10% unless the term states one); the excess is
+held for dispute, never charged. `metered_settlement_cap(offer["pricing"])` is the most
+a purchase is charged without a dispute; `settle_metered_usage(offer["pricing"],
+consumed)` returns a `MeteredSettlement` with the accepted, ceiling, charged and held
+amounts, in exact decimal. `check_metered_estimate(offer)` raises on a metered offer
+without an estimate, and the `Verifier` rejects such an offer.
+
 **Registration schema.** An Exchange may publish a JSON Schema for the
 `registration_data` it expects. Both ends validate against it, so the rules live in one
 place: 2020-12 only, same-document `$ref` only, size, depth and evaluation caps, and a
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 414b1686..17b0cf5f 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -128,7 +128,19 @@
     validate_license_term,
     validate_resource_entry,
 )
-from .money import canonicalize_money, format_money, parse_money
+from .money import (
+    DEFAULT_ESTIMATE_TOLERANCE_BPS,
+    MAX_ESTIMATE_TOLERANCE_BPS,
+    MeteredSettlement,
+    canonicalize_money,
+    check_metered_estimate,
+    estimate_tolerance_bps,
+    format_money,
+    is_metered_offer,
+    metered_settlement_cap,
+    parse_money,
+    settle_metered_usage,
+)
 from .pop import AGENT_KEY_HEADER, sign_agent_binding, verify_agent_binding
 from .regschema import (
     MAX_REGISTRATION_DATA_BYTES,
@@ -199,6 +211,8 @@
     "CatalogClient",
     "Client",
     "ClientConfig",
+    "DEFAULT_ESTIMATE_TOLERANCE_BPS",
+    "MeteredSettlement",
     "RawBody",
     "ConnectProtocolVersion",
     "ConnectProtocolVersionHeader",
@@ -220,6 +234,7 @@
     "KeyResolver",
     "KeyRevokedError",
     "MAX_BARE_DOMAIN_LEN",
+    "MAX_ESTIMATE_TOLERANCE_BPS",
     "MAX_REGISTRATION_DATA_BYTES",
     "MAX_REGISTRATION_DATA_DEPTH",
     "MAX_REGISTRATION_DATA_MEMBERS",
@@ -280,6 +295,7 @@
     "canonical_offer_payload",
     "canonical_restriction_token",
     "canonicalize_money",
+    "check_metered_estimate",
     "catalog_rejection_detail",
     "check_audience",
     "check_registration_data",
@@ -293,6 +309,7 @@
     "dispute_failure_detail",
     "domain_verification_failure_detail",
     "error_detail_from",
+    "estimate_tolerance_bps",
     "format_money",
     "generate_idempotency_key",
     "generate_key",
@@ -303,17 +320,20 @@
     "host_of",
     "is_bare_domain",
     "is_bare_host",
+    "is_metered_offer",
     "is_safe_schema_pattern",
     "jcs_acceptance_payload",
     "jcs_request_acceptance_payload",
     "known_restriction_token",
     "manifest_version_refusal",
+    "metered_settlement_cap",
     "monotonic_window",
     "normalize_license_term",
     "normalize_resource_entry",
     "normalize_scopes",
     "parse_error_detail",
     "parse_money",
+    "settle_metered_usage",
     "reason",
     "registration_failure_detail",
     "request_auth_failure_detail",
diff --git a/sdk/python/fora_sdk/core.py b/sdk/python/fora_sdk/core.py
index 6bd68fb3..bd6514ea 100644
--- a/sdk/python/fora_sdk/core.py
+++ b/sdk/python/fora_sdk/core.py
@@ -47,6 +47,8 @@
     Ed25519PublicKey,
 )
 
+from .money import check_metered_estimate
+
 # OFFER_SIGNATURE_ALGORITHM / ACCEPTANCE_SIGNATURE_ALGORITHM — the JOSE/JWA algorithm
 # identifier advertised
 # on signed offers/acceptances. Always EdDSA for Ed25519 (mirror the Go constants).
@@ -362,6 +364,12 @@ def _check(self, offer: Any) -> str | None:
 
         if self._expired(offer):
             return "offer expires_at is in the past"
+        # A metered offer without an estimate has no amount to accept and no ceiling
+        # for its usage report to settle against (fora.proto Pricing).
+        try:
+            check_metered_estimate(offer)
+        except ValueError as exc:
+            return str(exc)
         return None
 
     def _expired(self, offer: dict[str, Any]) -> bool:
diff --git a/sdk/python/fora_sdk/crossfield.py b/sdk/python/fora_sdk/crossfield.py
index 177799d8..0de45810 100644
--- a/sdk/python/fora_sdk/crossfield.py
+++ b/sdk/python/fora_sdk/crossfield.py
@@ -26,12 +26,15 @@
     License,
     LicenseTerm,
     Obligation,
+    Offer,
     Pricing,
     RegistrationFailure,
     Restriction,
     WellKnownManifest,
 )
 
+from .money import check_metered_estimate
+
 if TYPE_CHECKING:
     from collections.abc import Callable
 
@@ -121,7 +124,11 @@ def _obligation_rules(o: dict[str, Any]) -> list[str]:
 
 
 def _pricing_rules(o: dict[str, Any]) -> list[str]:
-    """Pricing per_unit.requires_unit + free.zero_rate."""
+    """Pricing per_unit.requires_unit + free.zero_rate + estimate_tolerance.requires_per_unit.
+
+    The last is ``!has(this.estimate_tolerance_bps) || this.model == PER_UNIT``; the
+    field is proto3 optional, so a present 0 counts as set, as ``has()`` does.
+    """
     out: list[str] = []
     model = _str(_field(o, "model"))
     if model == _PRICING_MODEL_PER_UNIT and _str(_field(o, "unit")) == "":
@@ -130,9 +137,26 @@ def _pricing_rules(o: dict[str, Any]) -> list[str]:
         rate = _str(_field(o, "rate"))
         if rate != "" and not _ZERO_RATE_RE.match(rate):
             out.append("pricing.free.zero_rate")
+    if _field(o, "estimate_tolerance_bps") is not None and model != _PRICING_MODEL_PER_UNIT:
+        out.append("pricing.estimate_tolerance.requires_per_unit")
     return out
 
 
+def _offer_rules(o: dict[str, Any]) -> list[str]:
+    """Offer.metered.requires_estimate.
+
+    ``!(metered) || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity
+    > 0)``, where an offer is metered when its pricing or a term's pricing is PER_UNIT. The
+    predicate is the one the agent-side Verifier applies, so this face and that one share
+    :func:`fora_sdk.money.check_metered_estimate` rather than keeping two copies.
+    """
+    try:
+        check_metered_estimate(o)
+    except ValueError:
+        return ["offer.metered.requires_estimate"]
+    return []
+
+
 def _restriction_rules(o: dict[str, Any]) -> list[str]:
     """Restriction.permitted_prohibited_disjoint: ``permitted.all(p, !(p in prohibited))``."""
     permitted = _field(o, "permitted")
@@ -228,6 +252,7 @@ def _registration_failure_rules(o: dict[str, Any]) -> list[str]:
     "License": _license_rules,
     "LicenseTerm": _license_term_rules,
     "Obligation": _obligation_rules,
+    "Offer": _offer_rules,
     "Pricing": _pricing_rules,
     "Restriction": _restriction_rules,
     "RegistrationFailure": _registration_failure_rules,
@@ -287,6 +312,7 @@ def _check(self: Any) -> Any:
 LicenseCrossField = _make_cross_field(License, "License")
 LicenseTermCrossField = _make_cross_field(LicenseTerm, "LicenseTerm")
 ObligationCrossField = _make_cross_field(Obligation, "Obligation")
+OfferCrossField = _make_cross_field(Offer, "Offer")
 PricingCrossField = _make_cross_field(Pricing, "Pricing")
 RestrictionCrossField = _make_cross_field(Restriction, "Restriction")
 RegistrationFailureCrossField = _make_cross_field(RegistrationFailure, "RegistrationFailure")
diff --git a/sdk/python/fora_sdk/money.py b/sdk/python/fora_sdk/money.py
index 8bbbc60b..6ea295f0 100644
--- a/sdk/python/fora_sdk/money.py
+++ b/sdk/python/fora_sdk/money.py
@@ -14,7 +14,18 @@
 from __future__ import annotations
 
 import re
-from decimal import Decimal
+from collections.abc import Mapping
+from dataclasses import dataclass
+from decimal import (
+    Context,
+    Decimal,
+    DivisionByZero,
+    Inexact,
+    InvalidOperation,
+    Overflow,
+    localcontext,
+)
+from typing import Any
 
 # _MONEY_WIRE mirrors the protovalidate constraint ``^([0-9]+([.][0-9]+)?)?$``
 # exactly (kept in lockstep with fora.proto Pricing.rate). The empty string
@@ -65,3 +76,192 @@ def format_money(d: Decimal) -> str:
 def canonicalize_money(s: str) -> str:
     """Normalize a wire decimal string to its canonical form (parse then format)."""
     return format_money(parse_money(s))
+
+
+# ---- metered settlement ----------------------------------------------------
+# Port of the sdk/go oracle (helpers/settlement.go); fora.proto Pricing states the
+# rule. A PER_UNIT price is charged per unit consumed. The estimate E, the rate R
+# and the tolerance T in basis points (1000 when absent) on the offer's own pricing
+# fix what a metered purchase can cost: the agent accepts E x R at purchase, and the
+# usage report settles the consumed quantity C at min(C, Q) x R, where the ceiling
+# is Q = E x (10000 + T) / 10000. The quantity above Q is held for dispute, never
+# charged automatically.
+#
+# Every value is exact. The arithmetic runs in a local context whose precision far
+# exceeds any input the wire admits (rates are capped at 32 characters, quantities
+# at int64), and with Inexact trapped, so a step that would round raises instead of
+# returning a rounded figure. The process-wide context — 28 digits by default — is
+# never consulted.
+
+DEFAULT_ESTIMATE_TOLERANCE_BPS = 1000
+"""The tolerance a metered price settles within when it states none: 10%."""
+
+MAX_ESTIMATE_TOLERANCE_BPS = 10000
+"""The largest tolerance the wire accepts: a ceiling of twice the estimate."""
+
+_PRICING_MODEL_PER_UNIT = "PRICING_MODEL_PER_UNIT"
+_INT64_MAX = 2**63 - 1
+_WIRE_INT_RE = re.compile(r"^-?[0-9]+$")
+
+
+@dataclass(frozen=True)
+class MeteredSettlement:
+    """What a metered purchase settles to, every value a canonical decimal string.
+
+    Quantities are in the price's unit and may be fractional (``ceiling_quantity``
+    and what derives from it); amounts are in the price's currency.
+    """
+
+    accepted_amount: str
+    """E x R: what the agent accepted at purchase."""
+    ceiling_quantity: str
+    """Q = E x (10000 + T) / 10000."""
+    ceiling_amount: str
+    """Q x R: the most the purchase is charged without a dispute."""
+    charged_quantity: str
+    """min(C, Q)."""
+    charged_amount: str
+    """min(C, Q) x R: what the report settles to."""
+    held_quantity: str
+    """max(0, C - Q): the quantity held for dispute."""
+    held_amount: str
+    """max(0, C - Q) x R: held for dispute, never charged automatically."""
+
+
+def _wire_int(v: Any) -> int | None:
+    """An int32/int64 proto-JSON value: a JSON integer, or the decimal string form
+    proto-JSON also accepts. ``bool`` is not an integer here, though Python says so."""
+    if isinstance(v, bool):
+        return None
+    if isinstance(v, int):
+        return v
+    if isinstance(v, str) and _WIRE_INT_RE.match(v):
+        return int(v)
+    return None
+
+
+def _model(pricing: Any) -> str:
+    if not isinstance(pricing, Mapping):
+        return ""
+    model = pricing.get("model")
+    return model if isinstance(model, str) else ""
+
+
+def is_metered_offer(offer: Mapping[str, Any]) -> bool:
+    """Whether ``offer`` (canonical proto-JSON) is metered: its pricing or its term's
+    pricing is PER_UNIT. The term counts because it is the authoritative copy of the
+    price (fora.proto Offer, the offer.metered.requires_estimate rule)."""
+    if _model(offer.get("pricing")) == _PRICING_MODEL_PER_UNIT:
+        return True
+    terms = offer.get("terms")
+    if not isinstance(terms, list):
+        return False
+    return any(
+        isinstance(t, Mapping) and _model(t.get("pricing")) == _PRICING_MODEL_PER_UNIT
+        for t in terms
+    )
+
+
+def check_metered_estimate(offer: Mapping[str, Any]) -> None:
+    """Raise ``ValueError`` when ``offer`` is metered and its pricing carries no
+    positive ``estimated_quantity``; return quietly otherwise.
+
+    The offer.metered.requires_estimate rule as a standalone check, for a verifier
+    that runs without wire validation. A non-metered offer passes whatever its
+    pricing says.
+    """
+    if not isinstance(offer, Mapping):
+        msg = "money: offer is not an object"
+        raise ValueError(msg)
+    if not is_metered_offer(offer):
+        return
+    pricing = offer.get("pricing")
+    estimate = None
+    if isinstance(pricing, Mapping):
+        estimate = _wire_int(pricing.get("estimated_quantity"))
+    if estimate is None or estimate <= 0:
+        msg = "money: metered offer carries no positive estimated_quantity"
+        raise ValueError(msg)
+
+
+def estimate_tolerance_bps(pricing: Mapping[str, Any]) -> int:
+    """The tolerance ``pricing`` settles within: its ``estimate_tolerance_bps`` when
+    present (an explicit 0 included), else the 1000 default. Bounds are not checked
+    here; :func:`settle_metered_usage` and :func:`metered_settlement_cap` do."""
+    raw = pricing.get("estimate_tolerance_bps") if isinstance(pricing, Mapping) else None
+    if raw is None:
+        return DEFAULT_ESTIMATE_TOLERANCE_BPS
+    bps = _wire_int(raw)
+    if bps is None:
+        msg = f"money: estimate_tolerance_bps {raw!r} is not an integer"
+        raise ValueError(msg)
+    return bps
+
+
+def _exact() -> Context:
+    return Context(prec=200, traps=[Inexact, InvalidOperation, Overflow, DivisionByZero])
+
+
+def _metered_terms(pricing: Mapping[str, Any]) -> tuple[Decimal, Decimal, Decimal]:
+    """Check ``pricing`` is a metered price that can settle; return (E, R, Q)."""
+    if not isinstance(pricing, Mapping):
+        msg = "money: pricing is not an object"
+        raise ValueError(msg)
+    if _model(pricing) != _PRICING_MODEL_PER_UNIT:
+        msg = f"money: pricing is not metered (PER_UNIT): model is {_model(pricing)!r}"
+        raise ValueError(msg)
+    estimate = _wire_int(pricing.get("estimated_quantity"))
+    if estimate is None or estimate <= 0:
+        msg = "money: metered pricing carries no positive estimated_quantity"
+        raise ValueError(msg)
+    rate_raw = pricing.get("rate", "")
+    rate = parse_money(rate_raw if isinstance(rate_raw, str) else "")
+    bps = estimate_tolerance_bps(pricing)
+    if not 0 <= bps <= MAX_ESTIMATE_TOLERANCE_BPS:
+        msg = f"money: estimate_tolerance_bps {bps} is outside 0..{MAX_ESTIMATE_TOLERANCE_BPS}"
+        raise ValueError(msg)
+    with localcontext(_exact()):
+        e = Decimal(estimate)
+        ceiling = (e * Decimal(10000 + bps)).scaleb(-4)
+    return e, rate, ceiling
+
+
+def metered_settlement_cap(pricing: Mapping[str, Any]) -> str:
+    """Q x R for a metered price: the most a purchase under it is charged without a
+    dispute, and the amount an agent budgets against a spend cap.
+
+    Raises ``ValueError`` for a price that is not PER_UNIT, carries no positive
+    estimate or no valid rate, or states a tolerance outside 0..10000.
+    """
+    _, rate, ceiling = _metered_terms(pricing)
+    with localcontext(_exact()):
+        return format_money(ceiling * rate)
+
+
+def settle_metered_usage(pricing: Mapping[str, Any], consumed_quantity: int) -> MeteredSettlement:
+    """Settle a usage report of ``consumed_quantity`` against a metered price — the
+    offer's own pricing, which is the copy settlement reads.
+
+    Raises ``ValueError`` for what :func:`metered_settlement_cap` refuses, and for a
+    quantity that is negative or not an integer.
+    """
+    estimate, rate, ceiling = _metered_terms(pricing)
+    if isinstance(consumed_quantity, bool) or not isinstance(consumed_quantity, int):
+        msg = f"money: consumed quantity {consumed_quantity!r} is not an integer"
+        raise ValueError(msg)
+    if not 0 <= consumed_quantity <= _INT64_MAX:
+        msg = f"money: consumed quantity {consumed_quantity} is outside 0..{_INT64_MAX}"
+        raise ValueError(msg)
+    with localcontext(_exact()):
+        consumed = Decimal(consumed_quantity)
+        charged = min(consumed, ceiling)
+        held = max(Decimal(0), consumed - ceiling)
+        return MeteredSettlement(
+            accepted_amount=format_money(estimate * rate),
+            ceiling_quantity=format_money(ceiling),
+            ceiling_amount=format_money(ceiling * rate),
+            charged_quantity=format_money(charged),
+            charged_amount=format_money(charged * rate),
+            held_quantity=format_money(held),
+            held_amount=format_money(held * rate),
+        )
diff --git a/sdk/python/tests/test_core_offer_verify_parity.py b/sdk/python/tests/test_core_offer_verify_parity.py
index 38a56f4c..7432b27c 100644
--- a/sdk/python/tests/test_core_offer_verify_parity.py
+++ b/sdk/python/tests/test_core_offer_verify_parity.py
@@ -65,6 +65,18 @@
     "missing_expires_at",
 }
 
+# The metered-estimate dimension: a PER_UNIT offer must carry a positive estimate on
+# its own pricing, or the port rejects it although its signature and expiry are good.
+# Pinned so a regenerated corpus that drops these fails here rather than letting a
+# port accept an offer with no amount to accept and no ceiling to settle against.
+_REQUIRED_METERED = {
+    "metered_with_estimate_and_tolerance",
+    "metered_missing_estimate",
+    "metered_zero_estimate",
+    "metered_term_estimate_only",
+    "flat_without_estimate",
+}
+
 
 def _b64url_nopad_decode(s: str) -> bytes:
     pad = "" if len(s) % 4 == 0 else "=" * (4 - len(s) % 4)
@@ -90,6 +102,11 @@ def test_offer_verify_matrix_covers_the_freshness_dimension() -> None:
     assert _REQUIRED_FRESHNESS <= names
 
 
+def test_offer_verify_matrix_covers_the_metered_estimate_dimension() -> None:
+    names = {str(v["name"]) for v in _VECTORS}
+    assert _REQUIRED_METERED <= names
+
+
 @pytest.mark.parametrize("vector", _VECTORS, ids=[v["name"] for v in _VECTORS])
 def test_verifier_sorts_offer_by_jcs_signature(vector: dict[str, object]) -> None:
     exchange = str(vector["exchange"])
diff --git a/sdk/python/tests/test_crossfield_parity.py b/sdk/python/tests/test_crossfield_parity.py
index c79468ca..9b1bfcad 100644
--- a/sdk/python/tests/test_crossfield_parity.py
+++ b/sdk/python/tests/test_crossfield_parity.py
@@ -46,6 +46,7 @@
     "License",
     "LicenseTerm",
     "Obligation",
+    "Offer",
     "Pricing",
     "RegistrationFailure",
     "Restriction",
@@ -122,6 +123,54 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
         "message": "Pricing",
         "json": {"model": "PRICING_MODEL_FREE", "rate": "0"},
     },
+    {
+        # Pricing.estimate_tolerance.requires_per_unit: a tolerance on a PER_UNIT
+        # price satisfies it, an explicit 0 included.
+        "name": "Pricing PER_UNIT with zero tolerance",
+        "message": "Pricing",
+        "json": {
+            "model": "PRICING_MODEL_PER_UNIT",
+            "rate": "0.00002",
+            "unit": "tokens",
+            "estimate_tolerance_bps": 0,
+        },
+    },
+    {
+        # Offer.metered.requires_estimate: a metered offer with a positive estimate on
+        # its own pricing satisfies it, even when the pushed term carries none.
+        "name": "Offer metered with estimate",
+        "message": "Offer",
+        "json": {
+            "offer_id": "offer-metered",
+            "exchange": "exchange.example",
+            "pricing": {
+                "model": "PRICING_MODEL_PER_UNIT",
+                "rate": "0.00002",
+                "unit": "tokens",
+                "estimated_quantity": 2500,
+            },
+            "terms": [
+                {
+                    "semantics": "TERM_SEMANTICS_ENUMERATED",
+                    "pricing": {
+                        "model": "PRICING_MODEL_PER_UNIT",
+                        "rate": "0.00002",
+                        "unit": "tokens",
+                    },
+                }
+            ],
+        },
+    },
+    {
+        # Offer.metered.requires_estimate: a non-metered offer needs no estimate.
+        "name": "Offer flat without estimate",
+        "message": "Offer",
+        "json": {
+            "offer_id": "offer-flat",
+            "exchange": "exchange.example",
+            "pricing": {"model": "PRICING_MODEL_FLAT", "rate": "1"},
+        },
+    },
     {
         # Restriction.permitted_prohibited_disjoint: disjoint permitted/prohibited
         # sets satisfy it.
diff --git a/sdk/python/tests/test_metered_settlement_parity.py b/sdk/python/tests/test_metered_settlement_parity.py
new file mode 100644
index 00000000..574f0937
--- /dev/null
+++ b/sdk/python/tests/test_metered_settlement_parity.py
@@ -0,0 +1,116 @@
+"""Metered settlement parity against the Go oracle.
+
+Mirror of the sdk/ts sibling (sdk/ts/tests/metered-settlement.parity.test.ts). The
+settlement of a metered purchase is arithmetic the agent and the Exchange must agree
+on to the last digit: the agent derives what it owes from the signed offer and its
+own report, and no amount travels on the wire to reconcile the two. Every row of
+sdk/go/helpers/testdata/metered-settlement-vectors.json is replayed through
+``settle_metered_usage`` and ``metered_settlement_cap``. Two rows need 42
+significant digits, past the 28 of Python's default decimal context, so a port that
+leaned on that context would round and fail them.
+"""
+
+from __future__ import annotations
+
+import dataclasses
+from decimal import getcontext
+
+import pytest
+
+from conftest import GO_TESTDATA, load_json
+from fora_sdk import (
+    DEFAULT_ESTIMATE_TOLERANCE_BPS,
+    check_metered_estimate,
+    estimate_tolerance_bps,
+    is_metered_offer,
+    metered_settlement_cap,
+    settle_metered_usage,
+)
+
+_DOC = load_json(GO_TESTDATA / "metered-settlement-vectors.json")
+_VECTORS = _DOC["vectors"]
+
+
+def test_corpus_shape() -> None:
+    assert _VECTORS, "metered-settlement corpus is empty — the replay below would be vacuous"
+    assert any(v["error"] for v in _VECTORS)
+    assert any(not v["error"] for v in _VECTORS)
+
+
+def test_default_tolerance_matches_oracle() -> None:
+    assert _DOC["default_estimate_tolerance_bps"] == DEFAULT_ESTIMATE_TOLERANCE_BPS
+
+
+@pytest.mark.parametrize("vec", _VECTORS, ids=[v["name"] for v in _VECTORS])
+def test_settlement_matches_oracle(vec: dict[str, object]) -> None:
+    pricing = vec["pricing"]
+    consumed = vec["consumed_quantity"]
+    assert isinstance(pricing, dict)
+    assert isinstance(consumed, int)
+    if vec["error"]:
+        with pytest.raises(ValueError):
+            settle_metered_usage(pricing, consumed)
+        if vec["cap_error"]:
+            with pytest.raises(ValueError):
+                metered_settlement_cap(pricing)
+        else:
+            metered_settlement_cap(pricing)
+        return
+    got = dataclasses.asdict(settle_metered_usage(pricing, consumed))
+    assert got == vec["expected"]
+    expected = vec["expected"]
+    assert isinstance(expected, dict)
+    assert metered_settlement_cap(pricing) == expected["ceiling_amount"]
+
+
+def test_process_context_untouched() -> None:
+    """The exact rows run in a local context; the caller's context is left as found."""
+    before = getcontext().prec
+    for vec in _VECTORS:
+        if not vec["error"]:
+            settle_metered_usage(vec["pricing"], vec["consumed_quantity"])
+    assert getcontext().prec == before
+
+
+def test_tolerance_default_and_explicit_zero() -> None:
+    assert estimate_tolerance_bps({}) == 1000
+    assert estimate_tolerance_bps({"estimate_tolerance_bps": 0}) == 0
+    assert estimate_tolerance_bps({"estimate_tolerance_bps": "250"}) == 250
+
+
+def test_consumed_must_be_an_integer() -> None:
+    pricing = {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "unit": "tokens",
+        "estimated_quantity": 2500,
+    }
+    for bad in (True, 1.5, "10"):
+        with pytest.raises(ValueError):
+            settle_metered_usage(pricing, bad)  # type: ignore[arg-type]
+
+
+_PER_UNIT = {"model": "PRICING_MODEL_PER_UNIT"}
+_FLAT = {"model": "PRICING_MODEL_FLAT"}
+
+
+@pytest.mark.parametrize(
+    ("offer", "metered", "refused"),
+    [
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": 1}}, True, False),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": "7"}}, True, False),
+        ({"pricing": dict(_PER_UNIT)}, True, True),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": 0}}, True, True),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": True}}, True, True),
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, True, True),
+        ({"pricing": dict(_FLAT)}, False, False),
+        ({}, False, False),
+    ],
+)
+def test_metered_estimate_check(offer: dict[str, object], metered: bool, refused: bool) -> None:
+    assert is_metered_offer(offer) is metered
+    if refused:
+        with pytest.raises(ValueError):
+            check_metered_estimate(offer)
+    else:
+        check_metered_estimate(offer)

From e122a6f7faff9e409cb525437af63355d214265d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 14:57:40 -0400
Subject: [PATCH 063/164] Settle metered usage and refuse an unestimated
 metered offer in the TypeScript SDK

The money module gains the settlement of a metered purchase over the
offer's own pricing. TypeScript has no decimal type, so the arithmetic
runs on BigInt, a value being an integer count of units at a decimal
scale; no step can round. meteredSettlementCap returns ceiling x rate;
settleMeteredUsage returns a MeteredSettlement with the accepted,
ceiling, charged and held quantities and amounts, and takes a number or
a bigint quantity. Both throw for a price that is not PER_UNIT, one
without a positive estimate, an invalid rate and a tolerance outside
0..10000; the settlement also refuses a negative, fractional or
out-of-range quantity. estimateToleranceBps applies the 10% default and
keeps an explicit 0. isMeteredOffer and checkMeteredEstimate apply the
offer.metered.requires_estimate rule. DEFAULT_ESTIMATE_TOLERANCE_BPS
and MAX_ESTIMATE_TOLERANCE_BPS are exported beside them.

The offer Verifier rejects a metered offer without a positive estimate
after the signature and expiry checks. The cross-field layer gains the
Offer rule, through the same checkMeteredEstimate, the tolerance rule
on Pricing, and an OfferCrossFieldSchema.

The parity suite replays every metered-settlement vector, including the
two that need 42 significant digits, and pins the metered offers of the
offer-verify corpus. The cross-field suite expects the Offer mutants
and gains valid instances for both rules.
---
 sdk/ts/README.md                              |   8 +
 sdk/ts/core/verifier.ts                       |  13 +-
 sdk/ts/src/crossfield.ts                      |  27 ++
 sdk/ts/src/money.ts                           | 257 ++++++++++++++++++
 sdk/ts/tests/core-offer-verify.parity.test.ts |  17 ++
 sdk/ts/tests/crossfield.parity.test.ts        |  45 +++
 .../tests/metered-settlement.parity.test.ts   | 128 +++++++++
 7 files changed, 493 insertions(+), 2 deletions(-)
 create mode 100644 sdk/ts/tests/metered-settlement.parity.test.ts

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 57d5e8cb..33c61d68 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -72,6 +72,14 @@ URL, bytes and media type; the license reader also verifies the bytes against
 publisher manifest lists (`listed`, `unlisted` or `no_exchange`; the manifest wins). The
 header names are `ContentRulesHeader` and `ExchangeHeader` in `@fora-protocol/sdk/wire`.
 
+`@fora-protocol/sdk/money` settles a metered purchase. A `PER_UNIT` offer carries an
+estimate, and its usage report settles within the price's tolerance (10% unless the term
+states one); the excess is held for dispute, never charged.
+`meteredSettlementCap(offer.pricing)` is the most a purchase is charged without a
+dispute, and `settleMeteredUsage(offer.pricing, consumed)` returns the accepted,
+ceiling, charged and held amounts, exact on BigInt. `checkMeteredEstimate(offer)` throws
+on a metered offer without an estimate, and the offer `Verifier` rejects such an offer.
+
 Every module is a named subpath export; there is no package root import. The full list is
 the `exports` map of the package manifest. Source, tests and the release process are in
 [FORA-Protocol/protocol](https://github.com/FORA-Protocol/protocol) under `sdk/ts` and
diff --git a/sdk/ts/core/verifier.ts b/sdk/ts/core/verifier.ts
index 74245ccd..741832da 100644
--- a/sdk/ts/core/verifier.ts
+++ b/sdk/ts/core/verifier.ts
@@ -22,6 +22,7 @@
 import canonicalize from "canonicalize";
 
 import { utf8Bytes } from "../src/base64url.ts";
+import { checkMeteredEstimate } from "../src/money.ts";
 
 // OFFER_SIGNATURE_ALGORITHM is the JOSE/JWA algorithm identifier advertised on
 // signed offers. Always
@@ -350,8 +351,9 @@ export class Verifier {
 	}
 
 	// check verifies a single offer: resolve the exchange offer-signing key, verify
-	// the JCS signature, and enforce the not-in-the-past expiry. Any step failing
-	// rejects the offer (fail-closed) — including an unresolvable key.
+	// the JCS signature, enforce the not-in-the-past expiry, and require a metered
+	// offer to carry its estimate. Any step failing rejects the offer (fail-closed) —
+	// including an unresolvable key.
 	private async check(offer: unknown): Promise<string | undefined> {
 		if (typeof offer !== "object" || offer === null)
 			return "offer is not an object";
@@ -383,6 +385,13 @@ export class Verifier {
 		if (!valid) return "offer signature invalid";
 
 		if (this.expired(rec)) return "offer expires_at is in the past";
+		// A metered offer without an estimate has no amount to accept and no ceiling
+		// for its usage report to settle against (fora.proto Pricing).
+		try {
+			checkMeteredEstimate(rec);
+		} catch (cause) {
+			return cause instanceof Error ? cause.message : String(cause);
+		}
 		return undefined;
 	}
 
diff --git a/sdk/ts/src/crossfield.ts b/sdk/ts/src/crossfield.ts
index 0ddce6f4..24cd5723 100644
--- a/sdk/ts/src/crossfield.ts
+++ b/sdk/ts/src/crossfield.ts
@@ -4,11 +4,13 @@ import {
   LicenseSchema,
   LicenseTermSchema,
   ObligationSchema,
+  OfferSchema,
   PricingSchema,
   RegistrationFailureSchema,
   RestrictionSchema,
   WellKnownManifestSchema,
 } from "../../../gen/ts/wire/schemas.ts";
+import { checkMeteredEstimate } from "./money.ts";
 
 // Cross-field (message-CEL) refinements — the one genuinely net-new L1 surface.
 //
@@ -139,6 +141,9 @@ function obligationRules(o: Obj): string[] {
  * Pricing rules:
  *  - per_unit.requires_unit: `this.model != PER_UNIT || this.unit != ''`
  *  - free.zero_rate: `this.model != FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')`
+ *  - estimate_tolerance.requires_per_unit:
+ *    `!has(this.estimate_tolerance_bps) || this.model == PER_UNIT`. The field is
+ *    proto3 optional, so a present 0 counts as set, as `has()` does.
  */
 function pricingRules(o: Obj): string[] {
   const out: string[] = [];
@@ -152,9 +157,29 @@ function pricingRules(o: Obj): string[] {
       out.push("pricing.free.zero_rate");
     }
   }
+  const tolerance = field(o, "estimate_tolerance_bps");
+  if (tolerance !== undefined && tolerance !== null && model !== PRICING_MODEL_PER_UNIT) {
+    out.push("pricing.estimate_tolerance.requires_per_unit");
+  }
   return out;
 }
 
+/**
+ * Offer.metered.requires_estimate: `!(metered) || (has(this.pricing.estimated_quantity)
+ * && this.pricing.estimated_quantity > 0)`, where an offer is metered when its pricing
+ * or a term's pricing is PER_UNIT. The predicate is the one the agent-side Verifier
+ * applies, so this face and that one share checkMeteredEstimate rather than keeping two
+ * copies.
+ */
+function offerRules(o: Obj): string[] {
+  try {
+    checkMeteredEstimate(o);
+  } catch {
+    return ["offer.metered.requires_estimate"];
+  }
+  return [];
+}
+
 /** Restriction.permitted_prohibited_disjoint: `this.permitted.all(p, !(p in this.prohibited))`. */
 function restrictionRules(o: Obj): string[] {
   const permitted = field(o, "permitted");
@@ -253,6 +278,7 @@ const RULES_BY_MESSAGE: Record<string, (o: Obj) => string[]> = {
   License: licenseRules,
   LicenseTerm: licenseTermRules,
   Obligation: obligationRules,
+  Offer: offerRules,
   Pricing: pricingRules,
   Restriction: restrictionRules,
   RegistrationFailure: registrationFailureRules,
@@ -317,6 +343,7 @@ export const GetAccountStatusResponseCrossFieldSchema: CrossField<typeof GetAcco
 export const LicenseCrossFieldSchema: CrossField<typeof LicenseSchema> = attach(LicenseSchema, "License");
 export const LicenseTermCrossFieldSchema: CrossField<typeof LicenseTermSchema> = attach(LicenseTermSchema, "LicenseTerm");
 export const ObligationCrossFieldSchema: CrossField<typeof ObligationSchema> = attach(ObligationSchema, "Obligation");
+export const OfferCrossFieldSchema: CrossField<typeof OfferSchema> = attach(OfferSchema, "Offer");
 export const PricingCrossFieldSchema: CrossField<typeof PricingSchema> = attach(PricingSchema, "Pricing");
 export const RestrictionCrossFieldSchema: CrossField<typeof RestrictionSchema> = attach(RestrictionSchema, "Restriction");
 export const RegistrationFailureCrossFieldSchema: CrossField<typeof RegistrationFailureSchema> = attach(RegistrationFailureSchema, "RegistrationFailure");
diff --git a/sdk/ts/src/money.ts b/sdk/ts/src/money.ts
index 692e8636..e6f79269 100644
--- a/sdk/ts/src/money.ts
+++ b/sdk/ts/src/money.ts
@@ -65,3 +65,260 @@ export function formatMoney(s: string): string {
 export function canonicalizeMoney(s: string): string {
 	return formatMoney(parseMoney(s));
 }
+
+// ---- metered settlement ----------------------------------------------------
+// Port of the sdk/go oracle (helpers/settlement.go); fora.proto Pricing states the
+// rule. A PER_UNIT price is charged per unit consumed. The estimate E, the rate R
+// and the tolerance T in basis points (1000 when absent) on the offer's own pricing
+// fix what a metered purchase can cost: the agent accepts E x R at purchase, and the
+// usage report settles the consumed quantity C at min(C, Q) x R, where the ceiling
+// is Q = E x (10000 + T) / 10000. The quantity above Q is held for dispute, never
+// charged automatically.
+//
+// TS has no decimal type, so the arithmetic runs on BigInt: a value is an integer
+// count of units at a decimal scale. Multiplication adds scales, the division by
+// 10000 adds four to the scale, and comparison and subtraction align the scales
+// first — no step can round, whatever the size of the inputs.
+
+/** The tolerance a metered price settles within when it states none: 10%. */
+export const DEFAULT_ESTIMATE_TOLERANCE_BPS = 1000;
+
+/** The largest tolerance the wire accepts: a ceiling of twice the estimate. */
+export const MAX_ESTIMATE_TOLERANCE_BPS = 10000;
+
+const PRICING_MODEL_PER_UNIT = "PRICING_MODEL_PER_UNIT";
+const INT64_MAX = 2n ** 63n - 1n;
+
+/**
+ * What a metered purchase settles to, every value a canonical decimal string.
+ * Quantities are in the price's unit and may be fractional (`ceilingQuantity` and
+ * what derives from it); amounts are in the price's currency.
+ */
+export interface MeteredSettlement {
+	/** E x R: what the agent accepted at purchase. */
+	readonly acceptedAmount: string;
+	/** Q = E x (10000 + T) / 10000. */
+	readonly ceilingQuantity: string;
+	/** Q x R: the most the purchase is charged without a dispute. */
+	readonly ceilingAmount: string;
+	/** min(C, Q). */
+	readonly chargedQuantity: string;
+	/** min(C, Q) x R: what the report settles to. */
+	readonly chargedAmount: string;
+	/** max(0, C - Q): the quantity held for dispute. */
+	readonly heldQuantity: string;
+	/** max(0, C - Q) x R: held for dispute, never charged automatically. */
+	readonly heldAmount: string;
+}
+
+/** An exact non-negative decimal: units / 10^scale. */
+interface Dec {
+	readonly units: bigint;
+	readonly scale: number;
+}
+
+function decOf(s: string): Dec {
+	const dot = s.indexOf(".");
+	if (dot === -1) return { units: BigInt(s), scale: 0 };
+	return {
+		units: BigInt(s.slice(0, dot) + s.slice(dot + 1)),
+		scale: s.length - dot - 1,
+	};
+}
+
+function decMul(a: Dec, b: Dec): Dec {
+	return { units: a.units * b.units, scale: a.scale + b.scale };
+}
+
+function decAligned(a: Dec, b: Dec): [bigint, bigint, number] {
+	const scale = Math.max(a.scale, b.scale);
+	return [
+		a.units * 10n ** BigInt(scale - a.scale),
+		b.units * 10n ** BigInt(scale - b.scale),
+		scale,
+	];
+}
+
+function decMin(a: Dec, b: Dec): Dec {
+	const [x, y] = decAligned(a, b);
+	return x <= y ? a : b;
+}
+
+/** max(0, a - b). */
+function decExcess(a: Dec, b: Dec): Dec {
+	const [x, y, scale] = decAligned(a, b);
+	return x > y ? { units: x - y, scale } : { units: 0n, scale: 0 };
+}
+
+function decFormat(d: Dec): string {
+	const digits = d.units.toString().padStart(d.scale + 1, "0");
+	const cut = digits.length - d.scale;
+	return formatMoney(
+		d.scale === 0 ? digits : `${digits.slice(0, cut)}.${digits.slice(cut)}`,
+	);
+}
+
+/**
+ * An int32/int64 proto-JSON value: a JSON integer, or the decimal string form
+ * proto-JSON also accepts. undefined for anything else.
+ */
+function wireInt(v: unknown): bigint | undefined {
+	if (typeof v === "number" && Number.isSafeInteger(v)) return BigInt(v);
+	if (typeof v === "string" && /^-?[0-9]+$/.test(v)) return BigInt(v);
+	return undefined;
+}
+
+function modelOf(pricing: unknown): string {
+	if (typeof pricing !== "object" || pricing === null) return "";
+	const model = (pricing as Record<string, unknown>).model;
+	return typeof model === "string" ? model : "";
+}
+
+/**
+ * isMeteredOffer reports whether `offer` (canonical proto-JSON) is metered: its
+ * pricing or its term's pricing is PER_UNIT. The term counts because it is the
+ * authoritative copy of the price (fora.proto Offer, the
+ * offer.metered.requires_estimate rule).
+ */
+export function isMeteredOffer(offer: Record<string, unknown>): boolean {
+	if (modelOf(offer.pricing) === PRICING_MODEL_PER_UNIT) return true;
+	const terms = offer.terms;
+	return (
+		Array.isArray(terms) &&
+		terms.some(
+			(t) =>
+				typeof t === "object" &&
+				t !== null &&
+				modelOf((t as Record<string, unknown>).pricing) ===
+					PRICING_MODEL_PER_UNIT,
+		)
+	);
+}
+
+/**
+ * checkMeteredEstimate throws when `offer` is metered and its pricing carries no
+ * positive `estimated_quantity`, and returns otherwise. The
+ * offer.metered.requires_estimate rule as a standalone check, for a verifier that
+ * runs without wire validation; a non-metered offer passes whatever its pricing
+ * says.
+ */
+export function checkMeteredEstimate(offer: Record<string, unknown>): void {
+	if (typeof offer !== "object" || offer === null) {
+		throw new Error("money: offer is not an object");
+	}
+	if (!isMeteredOffer(offer)) return;
+	const pricing = offer.pricing;
+	const estimate =
+		typeof pricing === "object" && pricing !== null
+			? wireInt((pricing as Record<string, unknown>).estimated_quantity)
+			: undefined;
+	if (estimate === undefined || estimate <= 0n) {
+		throw new Error(
+			"money: metered offer carries no positive estimated_quantity",
+		);
+	}
+}
+
+/**
+ * estimateToleranceBps returns the tolerance `pricing` settles within: its
+ * `estimate_tolerance_bps` when present (an explicit 0 included), else the 1000
+ * default. Bounds are not checked here; settleMeteredUsage and
+ * meteredSettlementCap do.
+ */
+export function estimateToleranceBps(pricing: Record<string, unknown>): number {
+	const raw = pricing.estimate_tolerance_bps;
+	if (raw === undefined || raw === null) return DEFAULT_ESTIMATE_TOLERANCE_BPS;
+	const bps = wireInt(raw);
+	if (bps === undefined) {
+		throw new Error(
+			`money: estimate_tolerance_bps ${JSON.stringify(raw)} is not an integer`,
+		);
+	}
+	return Number(bps);
+}
+
+/** Check `pricing` is a metered price that can settle; return E, R and Q. */
+function meteredTerms(pricing: Record<string, unknown>): {
+	estimate: Dec;
+	rate: Dec;
+	ceiling: Dec;
+} {
+	if (typeof pricing !== "object" || pricing === null) {
+		throw new Error("money: pricing is not an object");
+	}
+	const model = modelOf(pricing);
+	if (model !== PRICING_MODEL_PER_UNIT) {
+		throw new Error(
+			`money: pricing is not metered (PER_UNIT): model is ${JSON.stringify(model)}`,
+		);
+	}
+	const estimate = wireInt(pricing.estimated_quantity);
+	if (estimate === undefined || estimate <= 0n) {
+		throw new Error(
+			"money: metered pricing carries no positive estimated_quantity",
+		);
+	}
+	const rate = parseMoney(typeof pricing.rate === "string" ? pricing.rate : "");
+	const bps = estimateToleranceBps(pricing);
+	if (bps < 0 || bps > MAX_ESTIMATE_TOLERANCE_BPS) {
+		throw new Error(
+			`money: estimate_tolerance_bps ${bps} is outside 0..${MAX_ESTIMATE_TOLERANCE_BPS}`,
+		);
+	}
+	return {
+		estimate: { units: estimate, scale: 0 },
+		rate: decOf(rate),
+		ceiling: { units: estimate * BigInt(10000 + bps), scale: 4 },
+	};
+}
+
+/**
+ * meteredSettlementCap returns Q x R for a metered price: the most a purchase
+ * under it is charged without a dispute, and the amount an agent budgets against
+ * a spend cap. Throws for a price that is not PER_UNIT, carries no positive
+ * estimate or no valid rate, or states a tolerance outside 0..10000.
+ */
+export function meteredSettlementCap(pricing: Record<string, unknown>): string {
+	const { rate, ceiling } = meteredTerms(pricing);
+	return decFormat(decMul(ceiling, rate));
+}
+
+/**
+ * settleMeteredUsage settles a usage report of `consumedQuantity` against a
+ * metered price — the offer's own pricing, which is the copy settlement reads.
+ * Throws for what meteredSettlementCap refuses, and for a quantity that is
+ * negative, not an integer, or above the int64 range.
+ */
+export function settleMeteredUsage(
+	pricing: Record<string, unknown>,
+	consumedQuantity: number | bigint,
+): MeteredSettlement {
+	const { estimate, rate, ceiling } = meteredTerms(pricing);
+	let consumedUnits: bigint;
+	if (typeof consumedQuantity === "bigint") {
+		consumedUnits = consumedQuantity;
+	} else if (Number.isSafeInteger(consumedQuantity)) {
+		consumedUnits = BigInt(consumedQuantity);
+	} else {
+		throw new Error(
+			`money: consumed quantity ${String(consumedQuantity)} is not an integer`,
+		);
+	}
+	if (consumedUnits < 0n || consumedUnits > INT64_MAX) {
+		throw new Error(
+			`money: consumed quantity ${consumedUnits} is outside 0..${INT64_MAX}`,
+		);
+	}
+	const consumed: Dec = { units: consumedUnits, scale: 0 };
+	const charged = decMin(consumed, ceiling);
+	const held = decExcess(consumed, ceiling);
+	return {
+		acceptedAmount: decFormat(decMul(estimate, rate)),
+		ceilingQuantity: decFormat(ceiling),
+		ceilingAmount: decFormat(decMul(ceiling, rate)),
+		chargedQuantity: decFormat(charged),
+		chargedAmount: decFormat(decMul(charged, rate)),
+		heldQuantity: decFormat(held),
+		heldAmount: decFormat(decMul(held, rate)),
+	};
+}
diff --git a/sdk/ts/tests/core-offer-verify.parity.test.ts b/sdk/ts/tests/core-offer-verify.parity.test.ts
index 8116cfd4..27b9f185 100644
--- a/sdk/ts/tests/core-offer-verify.parity.test.ts
+++ b/sdk/ts/tests/core-offer-verify.parity.test.ts
@@ -90,6 +90,23 @@ describe("sdk/ts/core Verifier offer-verify matches the shared JCS oracle matrix
     }
   });
 
+  it("matrix covers the metered-estimate dimension", () => {
+    // A PER_UNIT offer must carry a positive estimate on its own pricing, or the port
+    // rejects it although its signature and expiry are good. If the corpus loses these,
+    // this guard goes red before a port can accept an offer with no amount to accept
+    // and no ceiling to settle against.
+    const names = new Set(vectors.vectors.map((v) => v.name));
+    for (const required of [
+      "metered_with_estimate_and_tolerance",
+      "metered_missing_estimate",
+      "metered_zero_estimate",
+      "metered_term_estimate_only",
+      "flat_without_estimate",
+    ]) {
+      expect(names).toContain(required);
+    }
+  });
+
   for (const v of vectors.vectors) {
     it(`${v.name} -> verified=${v.expected_verified}`, async () => {
       const exchangePub = b64urlToBytes(v.exchange_pub_b64url);
diff --git a/sdk/ts/tests/crossfield.parity.test.ts b/sdk/ts/tests/crossfield.parity.test.ts
index c031d453..7fecfa12 100644
--- a/sdk/ts/tests/crossfield.parity.test.ts
+++ b/sdk/ts/tests/crossfield.parity.test.ts
@@ -61,6 +61,7 @@ const expectedMessages = new Set([
   "License",
   "LicenseTerm",
   "Obligation",
+  "Offer",
   "Pricing",
   "RegistrationFailure",
   "Restriction",
@@ -140,6 +141,50 @@ const validInstances: { name: string; message: string; json: unknown }[] = [
     message: "Pricing",
     json: { model: "PRICING_MODEL_FREE", rate: "0" },
   },
+  {
+    // Pricing.estimate_tolerance.requires_per_unit: a tolerance on a PER_UNIT price
+    // satisfies it, an explicit 0 included.
+    name: "Pricing PER_UNIT with zero tolerance",
+    message: "Pricing",
+    json: {
+      model: "PRICING_MODEL_PER_UNIT",
+      rate: "0.00002",
+      unit: "tokens",
+      estimate_tolerance_bps: 0,
+    },
+  },
+  {
+    // Offer.metered.requires_estimate: a metered offer with a positive estimate on its
+    // own pricing satisfies it, even when the pushed term carries none.
+    name: "Offer metered with estimate",
+    message: "Offer",
+    json: {
+      offer_id: "offer-metered",
+      exchange: "exchange.example",
+      pricing: {
+        model: "PRICING_MODEL_PER_UNIT",
+        rate: "0.00002",
+        unit: "tokens",
+        estimated_quantity: 2500,
+      },
+      terms: [
+        {
+          semantics: "TERM_SEMANTICS_ENUMERATED",
+          pricing: { model: "PRICING_MODEL_PER_UNIT", rate: "0.00002", unit: "tokens" },
+        },
+      ],
+    },
+  },
+  {
+    // Offer.metered.requires_estimate: a non-metered offer needs no estimate.
+    name: "Offer flat without estimate",
+    message: "Offer",
+    json: {
+      offer_id: "offer-flat",
+      exchange: "exchange.example",
+      pricing: { model: "PRICING_MODEL_FLAT", rate: "1" },
+    },
+  },
   {
     // Restriction.permitted_prohibited_disjoint: disjoint permitted/prohibited
     // sets satisfy it.
diff --git a/sdk/ts/tests/metered-settlement.parity.test.ts b/sdk/ts/tests/metered-settlement.parity.test.ts
new file mode 100644
index 00000000..f74b5e25
--- /dev/null
+++ b/sdk/ts/tests/metered-settlement.parity.test.ts
@@ -0,0 +1,128 @@
+// Metered settlement parity (TypeScript side) against the Go oracle.
+//
+// Mirror of the sdk/python sibling (sdk/python/tests/test_metered_settlement_parity.py).
+// The settlement of a metered purchase is arithmetic the agent and the Exchange must
+// agree on to the last digit: the agent derives what it owes from the signed offer and
+// its own report, and no amount travels on the wire to reconcile the two. Every row of
+// sdk/go/helpers/testdata/metered-settlement-vectors.json is replayed through
+// settleMeteredUsage and meteredSettlementCap. Two rows need 42 significant digits, far
+// past what a JavaScript number holds, so a port that went through floating point
+// would fail them.
+import { describe, expect, it } from "vitest";
+import {
+	DEFAULT_ESTIMATE_TOLERANCE_BPS,
+	checkMeteredEstimate,
+	estimateToleranceBps,
+	isMeteredOffer,
+	meteredSettlementCap,
+	settleMeteredUsage,
+} from "../src/money.ts";
+import vectorsFile from "../../go/helpers/testdata/metered-settlement-vectors.json";
+
+type Expected = {
+	accepted_amount: string;
+	ceiling_quantity: string;
+	ceiling_amount: string;
+	charged_quantity: string;
+	charged_amount: string;
+	held_quantity: string;
+	held_amount: string;
+};
+type SettlementVector = {
+	name: string;
+	pricing: Record<string, unknown>;
+	consumed_quantity: number;
+	error: boolean;
+	cap_error: boolean;
+	expected?: Expected;
+};
+type SettlementVectorsFile = {
+	default_estimate_tolerance_bps: number;
+	vectors: SettlementVector[];
+};
+
+const doc = vectorsFile as SettlementVectorsFile;
+
+describe("sdk/ts metered settlement matches the sdk/go oracle vectors", () => {
+	it("corpus carries both settleable and refused rows", () => {
+		expect(doc.vectors.some((v) => v.error)).toBe(true);
+		expect(doc.vectors.some((v) => !v.error)).toBe(true);
+	});
+
+	it("default tolerance matches the oracle", () => {
+		expect(DEFAULT_ESTIMATE_TOLERANCE_BPS).toBe(
+			doc.default_estimate_tolerance_bps,
+		);
+	});
+
+	for (const v of doc.vectors) {
+		it(v.name, () => {
+			if (v.error) {
+				expect(() => settleMeteredUsage(v.pricing, v.consumed_quantity)).toThrow();
+				if (v.cap_error) {
+					expect(() => meteredSettlementCap(v.pricing)).toThrow();
+				} else {
+					expect(() => meteredSettlementCap(v.pricing)).not.toThrow();
+				}
+				return;
+			}
+			const want = v.expected as Expected;
+			const got = settleMeteredUsage(v.pricing, v.consumed_quantity);
+			expect({
+				accepted_amount: got.acceptedAmount,
+				ceiling_quantity: got.ceilingQuantity,
+				ceiling_amount: got.ceilingAmount,
+				charged_quantity: got.chargedQuantity,
+				charged_amount: got.chargedAmount,
+				held_quantity: got.heldQuantity,
+				held_amount: got.heldAmount,
+			}).toEqual(want);
+			expect(meteredSettlementCap(v.pricing)).toBe(want.ceiling_amount);
+		});
+	}
+});
+
+describe("sdk/ts metered helpers", () => {
+	const pricing = {
+		model: "PRICING_MODEL_PER_UNIT",
+		rate: "0.00002",
+		unit: "tokens",
+		estimated_quantity: 2500,
+	};
+
+	it("applies the default tolerance and keeps an explicit zero", () => {
+		expect(estimateToleranceBps({})).toBe(1000);
+		expect(estimateToleranceBps({ estimate_tolerance_bps: 0 })).toBe(0);
+		expect(estimateToleranceBps({ estimate_tolerance_bps: "250" })).toBe(250);
+	});
+
+	it("accepts a bigint quantity and refuses a fractional or unsafe one", () => {
+		expect(settleMeteredUsage(pricing, 3000n).heldQuantity).toBe("250");
+		expect(() => settleMeteredUsage(pricing, 1.5)).toThrow();
+		expect(() => settleMeteredUsage(pricing, Number.MAX_SAFE_INTEGER + 2)).toThrow();
+		expect(() => settleMeteredUsage(pricing, 2n ** 63n)).toThrow();
+	});
+
+	const perUnit = { model: "PRICING_MODEL_PER_UNIT" };
+	const flat = { model: "PRICING_MODEL_FLAT" };
+	const cases: [string, Record<string, unknown>, boolean, boolean][] = [
+		["estimated", { pricing: { ...perUnit, estimated_quantity: 1 } }, true, false],
+		["string estimate", { pricing: { ...perUnit, estimated_quantity: "7" } }, true, false],
+		["no estimate", { pricing: { ...perUnit } }, true, true],
+		["zero estimate", { pricing: { ...perUnit, estimated_quantity: 0 } }, true, true],
+		["fractional estimate", { pricing: { ...perUnit, estimated_quantity: 1.5 } }, true, true],
+		["term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, true, true],
+		["flat", { pricing: { ...flat } }, false, false],
+		["no pricing", {}, false, false],
+	];
+	for (const [name, offer, metered, refused] of cases) {
+		it(`metered estimate check: ${name}`, () => {
+			expect(isMeteredOffer(offer)).toBe(metered);
+			if (refused) {
+				expect(() => checkMeteredEstimate(offer)).toThrow();
+			} else {
+				expect(() => checkMeteredEstimate(offer)).not.toThrow();
+			}
+		});
+	}
+});

From adc6b2f9345c70a251d3cc930f8602b28901d1c0 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 14:59:32 -0400
Subject: [PATCH 064/164] Map the metered settlement symbols and regenerate the
 parity matrix

The six settlement faces and the two tolerance constants map to their
Python and TypeScript names. helpers.ErrMeteredEstimateMissing and
helpers.ErrNotMetered join the Go-idiomatic exclusions: Python raises
ValueError and TypeScript throws for the same inputs, and the shared
offer-verify and metered-settlement vectors pin that every language
refuses them. The matrix now counts 183 symbols at parity, 198
Go-idiomatic exclusions and 43 tri-replayed corpora.
---
 docs/sdk-parity-matrix.md  | 13 +++++++++++-
 sdk/parity/symbol-map.json | 42 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 54 insertions(+), 1 deletion(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index b99b1a6a..fdd12253 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 175 symbols at cross-language parity · 17 documented divergences · 196 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
+**At a glance:** 183 symbols at cross-language parity · 17 documented divergences · 198 Go-idiomatic exclusions · 43 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -37,6 +37,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `CanonicalizeMoney` | `canonicalize_money` | `canonicalizeMoney` |
 | `CatalogRejectionDetail` | `catalog_rejection_detail` | `catalogRejectionDetail` |
 | `CheckAudience` | `check_audience` | `checkAudience` |
+| `CheckMeteredEstimate` | `check_metered_estimate` | `checkMeteredEstimate` |
 | `CheckRegistrationData` | `check_registration_data` | `checkRegistrationData` |
 | `CheckStrict` | `check_strict` | `checkStrict` |
 | `CheckWellKnownManifestVersion` | `manifest_version_refusal` | `manifestVersionRefusal` |
@@ -47,6 +48,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ContentRulesHeader` | `ContentRulesHeader` | `ContentRulesHeader` |
 | `ContentTypeJSON` | `ContentTypeJSON` | `ContentTypeJSON` |
 | `ContentTypeProto` | `ContentTypeProto` | `ContentTypeProto` |
+| `DefaultEstimateToleranceBps` | `DEFAULT_ESTIMATE_TOLERANCE_BPS` | `DEFAULT_ESTIMATE_TOLERANCE_BPS` |
 | `DefaultKeyValidity` | `DEFAULT_KEY_VALIDITY` | `DEFAULT_KEY_VALIDITY_MS` |
 | `DirectoryDocument` | `directory_document` | `directoryDocument` |
 | `DiscoveryHint` | `DiscoveryHint` | `DiscoveryHint` |
@@ -56,6 +58,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ErrManifestVersionRefused` | `ManifestVersionRefusedError` | `ManifestVersionRefused` |
 | `ErrStrictViolation` | `StrictViolationError` | `StrictViolation` |
 | `ErrUnknownKey` | `UnknownKeyError` | `UnknownKey` |
+| `EstimateToleranceBps` | `estimate_tolerance_bps` | `estimateToleranceBps` |
 | `ExchangeHeader` | `ExchangeHeader` | `ExchangeHeader` |
 | `FormatMoney` | `format_money` | `formatMoney` |
 | `GenerateKey` | `generate_key` | `generateKey` |
@@ -66,10 +69,12 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `HostOf` | `host_of` | `hostOf` |
 | `IsBareDomain` | `is_bare_domain` | `isBareDomain` |
 | `IsBareHost` | `is_bare_host` | `isBareHost` |
+| `IsMeteredOffer` | `is_metered_offer` | `isMeteredOffer` |
 | `IsSafeSchemaPattern` | `is_safe_schema_pattern` | `isSafeSchemaPattern` |
 | `KeyResolver` | `KeyResolver` | `RequestKeyResolver` |
 | `KnownRestrictionToken` | `known_restriction_token` | `knownRestrictionToken` |
 | `MaxBareDomainLen` | `MAX_BARE_DOMAIN_LEN` | `maxBareDomainLen` |
+| `MaxEstimateToleranceBps` | `MAX_ESTIMATE_TOLERANCE_BPS` | `MAX_ESTIMATE_TOLERANCE_BPS` |
 | `MaxRegistrationDataBytes` | `MAX_REGISTRATION_DATA_BYTES` | `maxRegistrationDataBytes` |
 | `MaxRegistrationDataDepth` | `MAX_REGISTRATION_DATA_DEPTH` | `maxRegistrationDataDepth` |
 | `MaxRegistrationDataMembers` | `MAX_REGISTRATION_DATA_MEMBERS` | `maxRegistrationDataMembers` |
@@ -80,6 +85,8 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `MaxRegistrationSchemaDepth` | `MAX_REGISTRATION_SCHEMA_DEPTH` | `maxRegistrationSchemaDepth` |
 | `MaxRegistrationSchemaEvaluations` | `MAX_REGISTRATION_SCHEMA_EVALUATIONS` | `maxRegistrationSchemaEvaluations` |
 | `MaxRegistrationSchemaRefHops` | `MAX_REGISTRATION_SCHEMA_REF_HOPS` | `maxRegistrationSchemaRefHops` |
+| `MeteredSettlement` | `MeteredSettlement` | `MeteredSettlement` |
+| `MeteredSettlementCap` | `metered_settlement_cap` | `meteredSettlementCap` |
 | `NewIdempotencyKey` | `generate_idempotency_key` | `generateIdempotencyKey` |
 | `NormalizeLicenseTerm` | `normalize_license_term` | `normalizeLicenseTerm` |
 | `NormalizeResourceEntry` | `normalize_resource_entry` | `normalizeResourceEntry` |
@@ -106,6 +113,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `RuleWarning` | `RuleWarning` | `RuleWarning` |
 | `SchemaVerdict` | `SchemaVerdict` | `SchemaVerdict` |
 | `ScopesSubset` | `scopes_subset` | `scopesSubset` |
+| `SettleMeteredUsage` | `settle_metered_usage` | `settleMeteredUsage` |
 | `SignAgentBinding` | `sign_agent_binding` | `signInbound` |
 | `SignOffer` | `sign_offer_jcs` | `signOffer` |
 | `SignOfferAcceptance` | `sign_offer_acceptance_jcs` | `signOfferAcceptance` |
@@ -366,6 +374,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrInvalidPoPInput` | Go errors.Is sentinel for a proof input that cannot be written into a signature base; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrKeyIDMismatch` | Go errors.Is sentinel for a keyid that is not the presented key's thumbprint; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrMalformedSignatureInput` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrMeteredEstimateMissing` | Go errors.Is sentinel for a metered offer or price that carries no positive estimate; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs. |
 | `helpers.ErrMissingContentDigest` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingCreated` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingExpires` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
@@ -373,6 +382,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrMissingSignature` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingSignatureInput` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingTargetURI` | Go errors.Is sentinel for a proof requested without the URL it binds; py/ts raise/throw instead of exporting sentinels. |
+| `helpers.ErrNotMetered` | Go errors.Is sentinel for a settlement asked of a price that is not PER_UNIT; py raises ValueError and ts throws from the same faces, and the shared metered-settlement vectors pin that every language refuses the same inputs. |
 | `helpers.ErrOfferExpired` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrOfferSignatureInvalid` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrProofOfPossessionMismatch` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
@@ -473,6 +483,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `helpers/testdata/idempotency-validate-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/licenseterm-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/manifest-version-vectors.json` | ✅ | ✅ | ✅ |
+| `helpers/testdata/metered-settlement-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/money-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/multisig-chain-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/offer-verify-vectors.json` | ✅ | ✅ | ✅ |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index c4bb488d..1ede7111 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -106,6 +106,7 @@
     "helpers.ErrInvalidPoPInput": "Go errors.Is sentinel for a proof input that cannot be written into a signature base; py/ts raise/throw instead of exporting sentinels.",
     "helpers.ErrKeyIDMismatch": "Go errors.Is sentinel for a keyid that is not the presented key's thumbprint; py/ts raise/throw instead of exporting sentinels.",
     "helpers.ErrMalformedSignatureInput": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrMeteredEstimateMissing": "Go errors.Is sentinel for a metered offer or price that carries no positive estimate; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs.",
     "helpers.ErrMissingContentDigest": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingCreated": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingExpires": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
@@ -113,6 +114,7 @@
     "helpers.ErrMissingSignature": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingSignatureInput": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingTargetURI": "Go errors.Is sentinel for a proof requested without the URL it binds; py/ts raise/throw instead of exporting sentinels.",
+    "helpers.ErrNotMetered": "Go errors.Is sentinel for a settlement asked of a price that is not PER_UNIT; py raises ValueError and ts throws from the same faces, and the shared metered-settlement vectors pin that every language refuses the same inputs.",
     "helpers.ErrOfferExpired": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrOfferSignatureInvalid": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrProofOfPossessionMismatch": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
@@ -452,6 +454,11 @@
       "python": "check_audience",
       "ts": "checkAudience"
     },
+    "helpers.CheckMeteredEstimate": {
+      "allowlist_reason": null,
+      "python": "check_metered_estimate",
+      "ts": "checkMeteredEstimate"
+    },
     "helpers.CheckRegistrationData": {
       "allowlist_reason": null,
       "python": "check_registration_data",
@@ -497,6 +504,11 @@
       "python": "ContentTypeProto",
       "ts": "ContentTypeProto"
     },
+    "helpers.DefaultEstimateToleranceBps": {
+      "allowlist_reason": null,
+      "python": "DEFAULT_ESTIMATE_TOLERANCE_BPS",
+      "ts": "DEFAULT_ESTIMATE_TOLERANCE_BPS"
+    },
     "helpers.DefaultKeyValidity": {
       "allowlist_reason": null,
       "python": "DEFAULT_KEY_VALIDITY",
@@ -537,6 +549,11 @@
       "python": "UnknownKeyError",
       "ts": "UnknownKey"
     },
+    "helpers.EstimateToleranceBps": {
+      "allowlist_reason": null,
+      "python": "estimate_tolerance_bps",
+      "ts": "estimateToleranceBps"
+    },
     "helpers.ExchangeHeader": {
       "allowlist_reason": null,
       "python": "ExchangeHeader",
@@ -587,6 +604,11 @@
       "python": "is_bare_host",
       "ts": "isBareHost"
     },
+    "helpers.IsMeteredOffer": {
+      "allowlist_reason": null,
+      "python": "is_metered_offer",
+      "ts": "isMeteredOffer"
+    },
     "helpers.IsSafeSchemaPattern": {
       "allowlist_reason": null,
       "python": "is_safe_schema_pattern",
@@ -607,6 +629,11 @@
       "python": "MAX_BARE_DOMAIN_LEN",
       "ts": "maxBareDomainLen"
     },
+    "helpers.MaxEstimateToleranceBps": {
+      "allowlist_reason": null,
+      "python": "MAX_ESTIMATE_TOLERANCE_BPS",
+      "ts": "MAX_ESTIMATE_TOLERANCE_BPS"
+    },
     "helpers.MaxRegistrationDataBytes": {
       "allowlist_reason": null,
       "python": "MAX_REGISTRATION_DATA_BYTES",
@@ -657,6 +684,16 @@
       "python": "MAX_REGISTRATION_SCHEMA_REF_HOPS",
       "ts": "maxRegistrationSchemaRefHops"
     },
+    "helpers.MeteredSettlement": {
+      "allowlist_reason": null,
+      "python": "MeteredSettlement",
+      "ts": "MeteredSettlement"
+    },
+    "helpers.MeteredSettlementCap": {
+      "allowlist_reason": null,
+      "python": "metered_settlement_cap",
+      "ts": "meteredSettlementCap"
+    },
     "helpers.NewIdempotencyKey": {
       "allowlist_reason": null,
       "python": "generate_idempotency_key",
@@ -717,6 +754,11 @@
       "python": "reconcile_discovery_hint",
       "ts": "reconcileDiscoveryHint"
     },
+    "helpers.SettleMeteredUsage": {
+      "allowlist_reason": null,
+      "python": "settle_metered_usage",
+      "ts": "settleMeteredUsage"
+    },
     "helpers.WellKnownManifestVersion": {
       "allowlist_reason": null,
       "python": "WellKnownManifestVersion",

From 0558a48f85e5dbf143b98ea43db84e07c2f5450d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:03:30 -0400
Subject: [PATCH 065/164] Describe metered settlement in the docs and
 changelogs

The transaction-flow page gains "Settling a metered purchase": the
estimate, rate and tolerance an offer's pricing carries, the amount the
agent accepts, the three settlement cases, a worked example, the held
excess and what the report response says about it, and the SDK faces.
Its list of report checks drops the +/-20% quantity tolerance, which
refused honest reports, and a metered item's cost is described as the
accepted amount. Its metered offer examples now price per token with an
estimate, so the offers, the costs and the usage report agree.

The licensing-terms page gains "Metered pricing: estimate and
tolerance", saying a pushed term needs no estimate and how the
tolerance is stated. The money-flow page and the reference page
describe the settlement, the reference page under Offer, Pricing,
TransactionResultItem and UsageReportResponse. The Exchange storage
model and the scenario walkthrough drop the same +/-20% tolerance.

The Unreleased entry in both changelogs records the field, the two
rules, the settlement, the report response and the SDK helpers.
---
 proto/CHANGELOG.md                            | 61 ++++++++++++
 .../components/exchange/storage-model.mdx     |  2 +-
 .../docs/getting-started/how-money-flows.mdx  |  4 +-
 .../content/docs/protocol/licensing-terms.mdx | 14 +++
 .../docs/protocol/scenario-walkthrough.mdx    |  4 +-
 .../docs/protocol/transaction-flow.mdx        | 95 +++++++++++++------
 .../src/content/docs/reference/changelog.mdx  | 61 ++++++++++++
 .../src/content/docs/reference/proto-fora.mdx | 10 +-
 8 files changed, 215 insertions(+), 36 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 9d6651bc..560843df 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,67 @@
 
 ## Unreleased
 
+**A metered offer carries an estimate, and a usage report settles within a tolerance:
+`Pricing.estimate_tolerance_bps` (field 10) is added, with two validation rules.** A
+`PER_UNIT` price is charged per unit consumed, but an offer could carry no
+`estimated_quantity`, and the protocol did not say what the agent accepts at purchase or
+how a report of a different quantity settles. Implementations charged one unit and
+refused the honest report.
+
+- An offer whose `pricing` or term pricing is `PER_UNIT` MUST carry a positive
+  `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`, on `Offer`). The
+  rule binds the offer and not `Pricing`: a publisher pushes `PER_UNIT` terms without an
+  estimate, which describes the resource and may ride on `ResourceEntry.estimated_quantity`.
+  An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer
+  for that term. A non-metered offer needs no estimate.
+- `Pricing.estimate_tolerance_bps` is the tolerance on the estimate, in basis points, 0 to
+  10000, presence-tracked. It is 1000 (10%) when the term states none, and an explicit 0
+  means the estimate is the ceiling. It is allowed only on a `PER_UNIT` price (rule
+  `pricing.estimate_tolerance.requires_per_unit`), and the Exchange carries the term's value
+  onto the offer unchanged.
+- Settlement, stated once on `Pricing`. With E the estimate, R the rate and T the
+  tolerance, the agent accepts E × R at purchase, which is what `TransactionResultItem.cost`
+  carries for a metered item. The report's `consumed_quantity` C settles at min(C, Q) × R,
+  where Q = E × (10000 + T) / 10000. A quantity below the estimate is charged as consumed;
+  the excess above Q is held for dispute and never charged automatically. The arithmetic
+  is exact decimal, and settlement reads `Offer.pricing`. A `PER_UNIT` price with
+  `metering: NONE` has no report, so E × R is final.
+- `UsageReport`, `Usage.consumed_quantity`, `ReportingObligation` and
+  `UsageReportRejectionReason` state that a report whose quantity differs from the
+  estimate is never refused for it. `UsageReportResponse` says that a report with a held
+  excess is a plain success: it carries no amounts, because the settlement is a pure
+  function of the signed offer and the reported quantity, and its `report_id` identifies
+  the held excess. This version defines no `DisputeReason` for the excess and no filing by
+  the publisher's side.
+- `buf breaking` against v1.0.0 passes: the field is additive. The two rules are new
+  validation: a validating peer now refuses a `PER_UNIT` offer without a positive
+  estimate, including inside a `TransactionRequest`, and a Go client running with
+  `ValidationStrict` refuses a discovery response that carries one.
+- The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
+  tolerance on a `FLAT` price and three unestimated metered offers (missing, zero, and a
+  `PER_UNIT` term under non-metered offer pricing).
+
+SDKs, in all three languages: the offer verifiers reject a metered offer without a
+positive estimate, after the signature and expiry checks (Go: `core.Verifier`, reason
+`helpers.ErrMeteredEstimateMissing`). New helpers settle a metered purchase in exact
+decimal over the offer's pricing: Go `helpers.MeteredSettlementCap`,
+`helpers.SettleMeteredUsage` (returning `helpers.MeteredSettlement`),
+`helpers.EstimateToleranceBps`, `helpers.IsMeteredOffer`, `helpers.CheckMeteredEstimate`,
+`helpers.DefaultEstimateToleranceBps` and `helpers.MaxEstimateToleranceBps`, with
+`helpers.ErrNotMetered`; Python `metered_settlement_cap`, `settle_metered_usage`,
+`MeteredSettlement`, `estimate_tolerance_bps`, `is_metered_offer`,
+`check_metered_estimate` and the two constants from `fora_sdk`; TypeScript the same
+faces in camelCase from `@fora-protocol/sdk/money`. The Python and TypeScript cross-field
+layers gain both rules. A new shared `metered-settlement-vectors.json` pins the
+arithmetic, including two rows that need 42 significant digits, and the offer-verify
+vectors gain the metered cases.
+
+Docs: the transaction-flow page gains "Settling a metered purchase", its metered examples
+carry an estimate in tokens, and its list of report checks drops the ±20% quantity
+tolerance that refused honest reports, as do the Exchange storage model and the scenario
+walkthrough. The licensing-terms page gains "Metered pricing: estimate and tolerance", and
+the money-flow page and the reference page describe the settlement.
+
 **An acceptance names its requester: `Requester.id` and `Requester.domain` are required
 (validation rules added; no wire change).** An agent's offer acceptance signs canonical
 bytes built from the offer, the request's `Requester` and the idempotency key. The proto
diff --git a/website/src/content/docs/components/exchange/storage-model.mdx b/website/src/content/docs/components/exchange/storage-model.mdx
index 84359359..394067ba 100644
--- a/website/src/content/docs/components/exchange/storage-model.mdx
+++ b/website/src/content/docs/components/exchange/storage-model.mdx
@@ -254,7 +254,7 @@ The Reporting Tracker tracks two independent metrics that must not be conflated:
 
 **a) Reporting compliance rate**: The percentage of transactions that received a usage report within the reporting window. This measures whether the agent is fulfilling its reporting obligations at all. Providers set the threshold (e.g., 98% required). The protocol RECOMMENDS 95% minimum compliance.
 
-**b) Consumption accuracy**: The deviation between reported consumption (`UsageReport.usage.consumed_quantity`) and estimated consumption (`Offer.pricing.estimated_quantity`). Per-request tolerance is +/-20%. Cumulative deviation is tracked but thresholds are Exchange implementation, not protocol.
+**b) Consumption accuracy**: The deviation between reported consumption (`UsageReport.usage.consumed_quantity`) and estimated consumption (`Offer.pricing.estimated_quantity`). A per-request deviation never refuses a report: a metered report settles as consumed up to the offer's ceiling (the estimate plus `estimate_tolerance_bps`, 10% by default), and the excess above it is held for dispute (see [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase)). Cumulative deviation is tracked but thresholds are Exchange implementation, not protocol.
 
 These metrics are INDEPENDENT:
 - An agent could have **100% compliance rate** but consistently underreport tokens (high compliance, low accuracy)
diff --git a/website/src/content/docs/getting-started/how-money-flows.mdx b/website/src/content/docs/getting-started/how-money-flows.mdx
index 94a7cf30..c5c8fb9c 100644
--- a/website/src/content/docs/getting-started/how-money-flows.mdx
+++ b/website/src/content/docs/getting-started/how-money-flows.mdx
@@ -51,6 +51,8 @@ sequenceDiagram
 | `PRICING_MODEL_PER_UNIT` | Rate per `Pricing.unit` (metering basis: `accesses`, `tokens`, `fetches`, `pages`, `minutes`, `records`, …) | crawl / use / inference / training / metered purchase |
 | `PRICING_MODEL_FLAT` | One-time flat fee; `rate` is the total, no unit | one-time purchase |
 
+A `PER_UNIT` price is metered, so every `PER_UNIT` offer carries a positive `estimated_quantity` in its `unit`. The agent accepts estimate × rate at purchase. The usage report then settles at the consumed quantity × rate, up to a ceiling of the estimate plus a tolerance: `estimate_tolerance_bps`, 10% when the term states none. Anything consumed above the ceiling is held for dispute, never charged automatically. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
+
 A **subscription** is `FREE` + a `subscription:*` scope (settled off-protocol). **Attribution** and **contribution** are `Obligation`s, not pricing models. There is no revenue-share model — settlement is off-protocol.
 
 Providers set their preferred pricing model and rate in their RSL file. The Exchange operationalizes these into live Offers. RSL pricing serves as a price ceiling (public declaration); private pricing between provider and Exchange may be lower.
@@ -120,7 +122,7 @@ Subscription transactions include a `subscription_unit_value` field that carries
 
 Two enforcement layers prevent overspend, mirroring how OpenRTB prevents advertiser overspend:
 
-- **Agent/Broker-side**: `RequestConstraints.max_unit_cost` -- the agent will not accept offers above this threshold. The Broker tracks cumulative spend across a session and enforces the agent's budget cap.
+- **Agent/Broker-side**: `RequestConstraints.max_unit_cost` -- the agent will not accept offers above this threshold. The Broker tracks cumulative spend across a session and enforces the agent's budget cap. For a metered offer, the most the purchase can cost without a dispute is the settlement ceiling × rate, which is the figure to budget against.
 - **Exchange-side**: The Exchange operator's Billing Adapter checks the requester's balance or credit before authorizing each transaction. Returns a denial if the requester is over their limit.
 
 Each Exchange independently tracks per-requester balance. The Broker maintains its own cumulative view for budget enforcement, but the Exchange is authoritative for "can this requester afford this transaction."
diff --git a/website/src/content/docs/protocol/licensing-terms.mdx b/website/src/content/docs/protocol/licensing-terms.mdx
index 65f0dada..9b891292 100644
--- a/website/src/content/docs/protocol/licensing-terms.mdx
+++ b/website/src/content/docs/protocol/licensing-terms.mdx
@@ -131,6 +131,20 @@ For CoMP interop, a CoMP `revshare` rate is carried verbatim in the `fora-comp-v
 
 `OFFLINE_SELF_REPORTED` is appropriate for IP licenses where consumption events happen outside the digital domain: a design file licensed for manufacturing, a recipe licensed for commercial production, a musical composition licensed for physical pressing.
 
+## Metered pricing: estimate and tolerance
+
+A `PER_UNIT` price is **metered**: the agent pays per unit consumed, and the quantity is known only after use. Two fields bound what such a purchase can cost:
+
+- `Pricing.estimated_quantity` — the estimate, in the price's `unit`. It is **required and positive on every metered offer** (the `offer.metered.requires_estimate` rule): an offer whose pricing or term is `PER_UNIT` and that carries no estimate is invalid, and the SDK verifiers reject it. A term you push does not need one. The estimate describes the resource rather than the arrangement, so you can state it once on `ResourceEntry.estimated_quantity`, and the Exchange puts it on the offer's pricing. An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer for that term. A `FREE` or `FLAT` price needs no estimate.
+- `Pricing.estimate_tolerance_bps` — optional, on a `PER_UNIT` term only (`pricing.estimate_tolerance.requires_per_unit`). It is the tolerance on the estimate, in basis points from `0` to `10000`. When the term states none, the tolerance is `1000` (10%). An explicit `0` means the estimate is the ceiling. The Exchange carries it unchanged onto the offer.
+
+The agent accepts estimate × rate at purchase. Its usage report settles at the consumed quantity × rate, up to the ceiling estimate × (10000 + tolerance) / 10000. A quantity below the estimate is charged as consumed. A quantity above the ceiling is charged only up to the ceiling, and the excess is held for dispute, never charged automatically. [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase) has the full rule and a worked example.
+
+```
+pricing: { model: PER_UNIT, unit: "tokens", rate: 0.00002, currency: "USD",
+           estimate_tolerance_bps: 500 }   # settle up to 5% over the estimate
+```
+
 ## Cross-domain examples
 
 ### News article — two terms
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index fa443554..0f5d63df 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -929,7 +929,7 @@ The SDK auto-submits a usage report (background, non-blocking). Usage reporting
 3. Submit to Reporting Tracker:
    a. Validate required_fields present: transaction_id, function, consumed_quantity -> all present
    b. Check reporting window: deadline 2026-03-16T15:00:00Z, current time 2026-03-15T15:30:00Z -> within window
-   c. Validate consumed_quantity: 3150 actual vs 3300 estimated -> within +/-20% tolerance
+   c. Record consumed_quantity: 3150 actual vs 3300 estimated -> a difference is never a refusal; a metered report settles as consumed, up to the ceiling
    d. Transition obligation: Pending -> Fulfilled
 4. Write usage report to transaction log (durable)
 ```
@@ -977,7 +977,7 @@ Three independent records that must agree:
 PASS: CDN log has txn-alpha-001 -> content was actually served
 PASS: Exchange has txn-alpha-001 -> transaction was authorized
 PASS: Usage report received before deadline -> reporting obligation fulfilled
-PASS: Token count 3150 vs estimate 3300 -> within +/-20% tolerance
+PASS: Token count 3150 vs estimate 3300 -> below the estimate, so settled as consumed
 PASS: Function ai-input matches the term's RESTRICTION_KIND_FUNCTION permitted list
 PASS: Citation included as required by the Offer's attribution terms
 ```
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 2a0b3994..12c3116f 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -91,11 +91,11 @@ Key fields:
       },
       "pricing": {
         "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.05",
+        "rate": "0.00002",
         "currency": "USD",
-        "unit_cost": "0.00001515",
-        "estimated_quantity": 1,
-        "unit": "accesses"
+        "unit_cost": "0.00002",
+        "estimated_quantity": 2500,
+        "unit": "tokens"
       },
       "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
       "reporting": {
@@ -139,7 +139,7 @@ Key fields:
 
 Each `Offer` includes:
 - `Offer.title` (human-readable) plus optional `fora-comp-v1` `comp.*` ext fields carrying CoMP package metadata (`comp.package_id`, `comp.seller`, `comp.citation_required`, `comp.content_types`, `comp.retrieval_type`)
-- FORA `Pricing` with the rate, currency, and normalized unit_cost
+- FORA `Pricing` with the rate, currency, and normalized unit_cost; a metered (`PER_UNIT`) offer also carries a positive `estimated_quantity` in its `unit`, which fixes the amount the agent accepts and the ceiling its usage report settles against (see [Settling a metered purchase](#settling-a-metered-purchase))
 - `ResourceIdentity` for cross-exchange deduplication
 - `LicenseTerm` entries on `terms[]`, each carrying `restrictions` (`repeated Restriction`) derived from the provider's RSL terms
 - `ReportingObligation` defining post-usage reporting requirements
@@ -161,11 +161,11 @@ When requesting multiple URIs, the response uses `offer_groups` instead of `offe
         {
           "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
           "exchange": "exchange.ssp-example.com",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "estimated_quantity": 1, "unit": "accesses" },
+          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
           "terms": [
             {
               "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "unit": "accesses" }
+              "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
             }
           ],
           "signature": "a1b2c3...",
@@ -179,11 +179,11 @@ When requesting multiple URIs, the response uses `offer_groups` instead of `offe
         {
           "offer_id": "89636cda-93f6-460e-af7f-2b6aef0f491b",
           "exchange": "exchange.ssp-example.com",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "estimated_quantity": 1, "unit": "accesses" },
+          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
           "terms": [
             {
               "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "unit": "accesses" }
+              "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
             }
           ],
           "signature": "d4e5f6...",
@@ -211,11 +211,11 @@ When the requester has a subscription, the Exchange includes both per-request an
     {
       "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
       "exchange": "exchange.ssp-example.com",
-      "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "estimated_quantity": 1, "unit": "accesses" },
+      "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
       "terms": [
         {
           "semantics": "TERM_SEMANTICS_ENUMERATED",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "unit": "accesses" }
+          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
         }
       ],
       "signature": "a1b2c3...",
@@ -323,11 +323,11 @@ Content-Type: application/json
         "title": "The Future of AI Infrastructure",
         "pricing": {
           "model": "PRICING_MODEL_PER_UNIT",
-          "rate": "0.05",
+          "rate": "0.00002",
           "currency": "USD",
-          "unit_cost": "0.00001515",
-          "estimated_quantity": 1,
-          "unit": "accesses"
+          "unit_cost": "0.00002",
+          "estimated_quantity": 2500,
+          "unit": "tokens"
         },
         "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
         "expires_at": "2026-03-14T02:30:00Z",
@@ -336,11 +336,11 @@ Content-Type: application/json
             "semantics": "TERM_SEMANTICS_ENUMERATED",
             "pricing": {
               "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.05",
+              "rate": "0.00002",
               "currency": "USD",
-              "unit_cost": "0.00001515",
-              "estimated_quantity": 1,
-              "unit": "accesses"
+              "unit_cost": "0.00002",
+              "estimated_quantity": 2500,
+              "unit": "tokens"
             }
           }
         ],
@@ -370,7 +370,7 @@ The request may also carry `agent_request_acceptance` — the agent's detached E
       "cost": {
         "amount": "0.05",
         "currency": "USD",
-        "unit_cost": "0.00001515"
+        "unit_cost": "0.00002"
       },
       "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
       "reporting_obligation": {
@@ -385,6 +385,8 @@ The request may also carry `agent_request_acceptance` — the agent's detached E
 }
 ```
 
+For a metered item, `cost.amount` is the amount the agent accepted: the offer's `estimated_quantity` × `rate`, here 2,500 tokens × $0.00002 = $0.05. It is not the final charge; the usage report settles it (see [Settling a metered purchase](#settling-a-metered-purchase)).
+
 The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A bearer-only CDN serves it on signature + expiry alone (the URL signature + short TTL + TLS); a capable edge function additionally requires the agent to present its public key and an RFC 9421 signature, verifying the binding offline. See [Signed URL Verification](/components/edge-function/signed-url-verification).
 
 ### What Happens Inside the Exchange
@@ -419,12 +421,12 @@ For batch transactions, use the `items` array:
       "offer": {
         "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
         "exchange": "exchange.ssp-example.com",
-        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "estimated_quantity": 1, "unit": "accesses" },
+        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
         "expires_at": "2026-03-14T02:30:00Z",
         "terms": [
           {
             "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001515", "unit": "accesses" }
+            "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
           }
         ],
         "signature": "a1b2c3...",
@@ -435,12 +437,12 @@ For batch transactions, use the `items` array:
       "offer": {
         "offer_id": "89636cda-93f6-460e-af7f-2b6aef0f491b",
         "exchange": "exchange.ssp-example.com",
-        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "estimated_quantity": 1, "unit": "accesses" },
+        "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
         "expires_at": "2026-03-14T02:30:00Z",
         "terms": [
           {
             "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit_cost": "0.00001200", "unit": "accesses" }
+            "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
           }
         ],
         "signature": "d4e5f6...",
@@ -565,7 +567,7 @@ A retry is safe. The Broker forwards the agent's `idempotency_key` unchanged to
       "retrieval_endpoint": "https://cdn.fora-protocol.org/server/premium/ai-infrastructure.html?Signature=...",
       "cost": { "amount": "0", "currency": "USD" },
       "subscription_id": "SUB-12345",
-      "subscription_unit_value": { "amount": "0.05", "currency": "USD", "unit_cost": "0.00001515" },
+      "subscription_unit_value": { "amount": "0.05", "currency": "USD", "unit_cost": "0.00002" },
       "reporting_obligation": { "required": true, "window": "86400s", "required_fields": ["transaction_id", "function", "consumed_quantity"] }
     }
   ],
@@ -595,7 +597,7 @@ Content-Type: application/json
   "usage": {
     "function": ["ai-input"],
     "subfn": ["rag"],
-    "consumed_quantity": 3150,
+    "consumed_quantity": 2400,
     "displayed_to_user": true,
     "citation_included": true
   },
@@ -617,14 +619,47 @@ Content-Type: application/json
 }
 ```
 
-A successful response carries the Exchange-assigned `report_id` (the handle the agent later references in `DisputeRequest`). A rejected report is not a success body -- it travels as a non-OK transport error carrying `ErrorDetail.usage_report_rejection` (e.g. `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED`, `USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS`).
+A successful response carries the Exchange-assigned `report_id` (the handle the agent later references in `DisputeRequest`). It carries no amounts, also when part of a metered report is held for dispute: the settlement is a pure function of the signed offer and the reported quantity, so the agent computes it itself (see [Settling a metered purchase](#settling-a-metered-purchase)). A rejected report is not a success body -- it travels as a non-OK transport error carrying `ErrorDetail.usage_report_rejection` (e.g. `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED`, `USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS`).
 
 ### What the Exchange Validates
 
 1. Required fields present (as defined by `ReportingObligation.required_fields`)
 2. Report received within the reporting window (typically 24 hours)
-3. Consumed quantity within tolerance: reported vs. estimated must be within +/-20%
-4. Transaction exists and `billing_id` matches
+3. Transaction exists and `billing_id` matches
+
+A consumed quantity that differs from the offer's estimate is **not** a validation failure, in either direction. For a metered offer the Exchange settles the report as described below and never refuses an honest report for its quantity.
+
+### Settling a metered purchase
+
+A `PER_UNIT` price is metered: it is charged per unit consumed, and the quantity is known only after use. Three values on the offer's own `pricing` fix what such a purchase can cost, and the offer signature covers all three, so accepting the offer is consenting to them:
+
+| Symbol | Field | Meaning |
+|---|---|---|
+| E | `estimated_quantity` | The estimate, in `unit`. **Required and positive on every metered offer.** An offer whose pricing or term is `PER_UNIT` and that carries no estimate fails validation (`offer.metered.requires_estimate`), and the SDK verifiers reject it |
+| R | `rate` | The price of one `unit` |
+| T | `estimate_tolerance_bps` | The tolerance on the estimate, in basis points: `1000` (10%) when the term states none, `0` for none, at most `10000` |
+
+At purchase the agent accepts **E × R**, the `cost` of the item. When the usage report arrives, its `consumed_quantity` C settles against the ceiling **Q = E × (10000 + T) / 10000**:
+
+| Consumed quantity | Charged | Held for dispute |
+|---|---|---|
+| C ≤ E (below the estimate) | C × R | nothing |
+| E < C ≤ Q (within the tolerance) | C × R | nothing |
+| C > Q (above the ceiling) | Q × R | (C − Q) × R |
+
+The quantity above the ceiling is held, never charged automatically: nothing above Q × R is charged unless dispute resolution establishes that it is owed. Q × R is therefore the most a metered purchase costs without a dispute, and the amount an agent budgets against a spend cap. Q can be fractional, and every step is exact decimal arithmetic: the inputs are integers and decimal strings, and the only division is by 10000.
+
+With the offer above (E = 2,500 tokens, R = $0.00002, no stated tolerance, so Q = 2,750):
+
+| Reported | Charged | Held |
+|---|---|---|
+| 2,400 tokens (the report above) | $0.048 | — |
+| 2,700 tokens | $0.054 | — |
+| 3,000 tokens | $0.055 | 250 tokens, $0.005 |
+
+The response to a report that holds an excess is still a plain success with a `report_id`; the `transaction_id` and that `report_id` identify the held excess. This version defines no `DisputeReason` for it and no filing by the publisher's side, so how a claim to the excess is raised is left open; what the protocol fixes is that it is never charged automatically. A metered price with `metering: PRICING_METERING_NONE` has no report, so E × R is final.
+
+The SDKs compute all of this exactly: `MeteredSettlementCap` / `metered_settlement_cap` / `meteredSettlementCap` returns Q × R, and `SettleMeteredUsage` / `settle_metered_usage` / `settleMeteredUsage` returns the accepted, ceiling, charged and held amounts. The shared metered-settlement vectors pin every language to the same digits.
 
 ## Content Delivery (Outside Protocol Scope)
 
@@ -770,7 +805,7 @@ message Preview {
   "offer_id": "9bb01145-326e-42a9-b2ac-058e3114bdfc",
   "exchange": "exchange.ssp-example.com",
   "title": "Climate Summit Photo - Reuters",
-  "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.50", "currency": "USD", "unit": "accesses" },
+  "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.50", "currency": "USD", "estimated_quantity": 1, "unit": "accesses" },
   "previews": [
     {
       "url": "https://cdn.reuters.com/preview/150/climate-summit.jpg",
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 455e521b..b31094b4 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,67 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**A metered offer carries an estimate, and a usage report settles within a tolerance:
+`Pricing.estimate_tolerance_bps` (field 10) is added, with two validation rules.** A
+`PER_UNIT` price is charged per unit consumed, but an offer could carry no
+`estimated_quantity`, and the protocol did not say what the agent accepts at purchase or
+how a report of a different quantity settles. Implementations charged one unit and
+refused the honest report.
+
+- An offer whose `pricing` or term pricing is `PER_UNIT` MUST carry a positive
+  `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`, on `Offer`). The
+  rule binds the offer and not `Pricing`: a publisher pushes `PER_UNIT` terms without an
+  estimate, which describes the resource and may ride on `ResourceEntry.estimated_quantity`.
+  An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer
+  for that term. A non-metered offer needs no estimate.
+- `Pricing.estimate_tolerance_bps` is the tolerance on the estimate, in basis points, 0 to
+  10000, presence-tracked. It is 1000 (10%) when the term states none, and an explicit 0
+  means the estimate is the ceiling. It is allowed only on a `PER_UNIT` price (rule
+  `pricing.estimate_tolerance.requires_per_unit`), and the Exchange carries the term's value
+  onto the offer unchanged.
+- Settlement, stated once on `Pricing`. With E the estimate, R the rate and T the
+  tolerance, the agent accepts E × R at purchase, which is what `TransactionResultItem.cost`
+  carries for a metered item. The report's `consumed_quantity` C settles at min(C, Q) × R,
+  where Q = E × (10000 + T) / 10000. A quantity below the estimate is charged as consumed;
+  the excess above Q is held for dispute and never charged automatically. The arithmetic
+  is exact decimal, and settlement reads `Offer.pricing`. A `PER_UNIT` price with
+  `metering: NONE` has no report, so E × R is final.
+- `UsageReport`, `Usage.consumed_quantity`, `ReportingObligation` and
+  `UsageReportRejectionReason` state that a report whose quantity differs from the
+  estimate is never refused for it. `UsageReportResponse` says that a report with a held
+  excess is a plain success: it carries no amounts, because the settlement is a pure
+  function of the signed offer and the reported quantity, and its `report_id` identifies
+  the held excess. This version defines no `DisputeReason` for the excess and no filing by
+  the publisher's side.
+- `buf breaking` against v1.0.0 passes: the field is additive. The two rules are new
+  validation: a validating peer now refuses a `PER_UNIT` offer without a positive
+  estimate, including inside a `TransactionRequest`, and a Go client running with
+  `ValidationStrict` refuses a discovery response that carries one.
+- The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
+  tolerance on a `FLAT` price and three unestimated metered offers (missing, zero, and a
+  `PER_UNIT` term under non-metered offer pricing).
+
+SDKs, in all three languages: the offer verifiers reject a metered offer without a
+positive estimate, after the signature and expiry checks (Go: `core.Verifier`, reason
+`helpers.ErrMeteredEstimateMissing`). New helpers settle a metered purchase in exact
+decimal over the offer's pricing: Go `helpers.MeteredSettlementCap`,
+`helpers.SettleMeteredUsage` (returning `helpers.MeteredSettlement`),
+`helpers.EstimateToleranceBps`, `helpers.IsMeteredOffer`, `helpers.CheckMeteredEstimate`,
+`helpers.DefaultEstimateToleranceBps` and `helpers.MaxEstimateToleranceBps`, with
+`helpers.ErrNotMetered`; Python `metered_settlement_cap`, `settle_metered_usage`,
+`MeteredSettlement`, `estimate_tolerance_bps`, `is_metered_offer`,
+`check_metered_estimate` and the two constants from `fora_sdk`; TypeScript the same
+faces in camelCase from `@fora-protocol/sdk/money`. The Python and TypeScript cross-field
+layers gain both rules. A new shared `metered-settlement-vectors.json` pins the
+arithmetic, including two rows that need 42 significant digits, and the offer-verify
+vectors gain the metered cases.
+
+Docs: the transaction-flow page gains "Settling a metered purchase", its metered examples
+carry an estimate in tokens, and its list of report checks drops the ±20% quantity
+tolerance that refused honest reports, as do the Exchange storage model and the scenario
+walkthrough. The licensing-terms page gains "Metered pricing: estimate and tolerance", and
+the money-flow page and the reference page describe the settlement.
+
 **An acceptance names its requester: `Requester.id` and `Requester.domain` are required
 (validation rules added; no wire change).** An agent's offer acceptance signs canonical
 bytes built from the offer, the request's `Requester` and the idempotency key. The proto
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index e1a01f01..91c3024c 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -110,6 +110,10 @@ A purchase through a Broker does not use this chain. `BrokerService.ExecuteTrans
 
 ::proto-message{name=Offer}
 
+:::note[A metered offer carries its estimate]
+An offer whose `pricing` or term pricing is `PER_UNIT` MUST carry a positive `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`); a non-metered offer needs none. The rule binds the offer rather than `Pricing` because a publisher pushes `PER_UNIT` terms without an estimate. `Offer.pricing` is the copy a metered purchase settles on: the estimate, the rate and `estimate_tolerance_bps` are read from it.
+:::
+
 :::note[Breaking change in v1.0]
 `Offer.quality` (field 12, `ContentQuality`) has been removed. Use `Offer.attestations` with `ResourceAttestation` claims instead. See [Content Attestation](/protocol/content-attestation/).
 :::
@@ -134,6 +138,8 @@ Three verification levels:
 
 `Pricing` has no `ext` / `ext_critical` fields — the licensing core is closed.
 
+**Metered settlement.** With E = `estimated_quantity`, R = `rate`, T = `estimate_tolerance_bps` (1000 when absent; 0 to 10000, `PER_UNIT` only, rule `pricing.estimate_tolerance.requires_per_unit`) and C = the report's `Usage.consumed_quantity`, the agent accepts E × R at purchase and the report settles at min(C, Q) × R, where Q = E × (10000 + T) / 10000. The excess (C − Q) × R above the ceiling is held for dispute and never charged automatically. The arithmetic is exact decimal. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
+
 ### ResourceIdentity
 
 Layered content identification for cross-exchange dedup and integrity verification.
@@ -204,7 +210,7 @@ The canonical signing structure for [`AgentAcceptance`](#agentacceptance). It is
 
 ### TransactionResultItem
 
-Result for a single offer in a batch transaction. `refusal` is set only in a `BrokerTransactionResponse`, on an item whose Exchange refused the Broker's whole sub-request or did not answer it.
+Result for a single offer in a batch transaction. `refusal` is set only in a `BrokerTransactionResponse`, on an item whose Exchange refused the Broker's whole sub-request or did not answer it. For a metered item, `cost` is the accepted amount, estimate × rate; the usage report settles the final charge.
 
 ::proto-message{name=TransactionResultItem}
 
@@ -250,7 +256,7 @@ A single asset included in the usage report.
 
 ### UsageReportResponse
 
-Acknowledgment of a usage report. A successful response means the report was accepted; a rejection travels as a non-OK transport error carrying [`ErrorDetail.usage_report_rejection`](#unified-error-model).
+Acknowledgment of a usage report. A successful response means the report was accepted; a rejection travels as a non-OK transport error carrying [`ErrorDetail.usage_report_rejection`](#unified-error-model). A consumed quantity that differs from the estimate is never a reason to refuse a report. When part of a metered report is held for dispute, the response is still a plain success: it carries no amounts, because the agent derives the charge and the held excess exactly from the signed offer and its own report, and the `report_id` identifies the held excess.
 
 ::proto-message{name=UsageReportResponse}
 

From d78e32f42ab81b68603cccf9e13e3cbd680a6934 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:41:37 -0400
Subject: [PATCH 066/164] Answer every per-item purchase denial in the body in
 the protocol

A denied one-item purchase was described as a non-OK error carrying
ErrorDetail.transaction_denial, while the same denial in a batch rode
in the body. A caller had to handle one decision in two shapes, and a
Broker relaying a one-item sub-request turned that denial into a
refusal of the whole sub-request.

ExecuteTransaction, TransactionResponse and
TransactionResultItem.denial_reason now say that every per-item denial
is answered in the body, whatever the item count. TransactionDenial is
used only when the Exchange refuses the whole request and decides no
item, for a reason about the caller that would deny every item alike,
for example ACCOUNT_NOT_REGISTERED or REPORTING_OVERDUE. Its
restriction_mismatches and offer_id fields are deprecated and never
set: a restriction is decided per item, and a whole-request refusal
pertains to no one offer.

DENIAL_REASON_RELAY_NOT_ACCEPTED is decided per item by each offer's
provider, the seller of that resource, and is answered in the body; an
Exchange never sends it as a whole-request refusal.

A sub-request whose items are not exactly the agent's signed request
acceptance projected onto the Exchange (an item dropped, added or
reordered) has every item denied with DENIAL_REASON_SIGNATURE_INVALID
in the body: the agent's signature does not cover what arrived. It is
not INVALID_ARGUMENT, nothing is purchased, and no request-level
idempotency state is claimed. AgentRequestAcceptance, the
SIGNATURE_INVALID value and BrokerService.ExecuteTransaction state it.

buf breaking against v1.0.0 passes: the change is comments and two
deprecation markers. The generated code, the descriptor, the SDK types
and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 663522 -> 667750 bytes
 gen/go/fora/v1/fora.pb.go                     | 118 +++++++++++++-----
 gen/go/fora/v1/forav1connect/fora.connect.go  |  44 ++++++-
 ...fora.v1.AgentRequestAcceptance.schema.json |   2 +-
 ....AgentRequestAcceptance.schema.strict.json |   2 +-
 ...a.v1.BrokerTransactionResponse.schema.json |  14 +--
 ...okerTransactionResponse.schema.strict.json |  14 +--
 .../fora.v1.ErrorDetail.schema.json           |  12 +-
 .../fora.v1.ErrorDetail.schema.strict.json    |  12 +-
 .../fora.v1.TransactionDenial.schema.json     |  10 +-
 ...ra.v1.TransactionDenial.schema.strict.json |  10 +-
 .../fora.v1.TransactionRequest.schema.json    |   2 +-
 ...a.v1.TransactionRequest.schema.strict.json |   2 +-
 .../fora.v1.TransactionResponse.schema.json   |  16 +--
 ....v1.TransactionResponse.schema.strict.json |  16 +--
 .../fora.v1.TransactionResultItem.schema.json |  14 +--
 ...1.TransactionResultItem.schema.strict.json |  14 +--
 .../fora.v1.UpstreamRefusal.schema.json       |  12 +-
 ...fora.v1.UpstreamRefusal.schema.strict.json |  12 +-
 gen/python/wire/models.py                     |  13 +-
 gen/ts/wire/schemas.ts                        |  14 +--
 proto/fora/v1/fora.proto                      | 112 +++++++++++++----
 22 files changed, 310 insertions(+), 155 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 41ca489583939eea6a79ed92cf7c6564a21dabf2..ceb20036b70a93a93d5376f2816834183c7e3c23 100644
GIT binary patch
delta 50363
zcma%kd3;nw)^_^#?R#(EPCC7%w~+1*i>zrBL0pmu0xIf=3+|4H5S1APhk%Z=1rP!Q
zvME>s1A+l$6$GI{R1^@ERWK-s0R+UrAOa#wQ23rxRW}#;-uL@`fAAyc+^VNeRh>F@
z>eSNvS2sJfui2oXj-kp>=TP-sSIyl@<p-I)ce|edi{m49|612wj(gc#YhBl>Hz`pE
zyExbt&1+~H{hoZXtbdO_y`#>QqnVpNWsG&MPA$xxFZoS9;EHAalDY4g%dI*7o9S`N
zwe=={jmuQEEX5H}KT(w1<6B&;q`lU?TdK?RW&K}FJy+JhsLz11XH&h)di5#q)30x;
zPkE|m-|`pA`j_=i_34`$@N`+~iGICbOsBfzuU<W$c_!7rY{0<&ealnbZcn|?XTZ~D
zs$btSHtwVzxdvz{LTd$x-uTA}4$<YWy`Jvb_o*_J)3;AqIe_~2$Nwf$lvCdDqiOom
z^O+v~%X*gg>r2H!lBfGU)4M$N!qYtmltEmM#HH=kZ(!d6*PE%HRJN$Va|8RMi1IQd
z>N$XF!An9NP#-pKxI3@ng{S-BbHBdNyvXH3*;b-fslFV)XR2?%zD1~4S^xh1`lnMJ
zEn2h)m-@v%eV;N@T_{24vH?B&Jd+;KAD?^n8i3a8Au2)01Iy8Xys#IZE~9p2e{&k1
zivDF!;!8PI#YDyWJyVAE{L8?y@&UZfs2h6YbKicV?V6RBm8H7d1$5?()I2Q&C{Oi!
zGSv@I{moRbXL^<saI>DNXL~;LWWWB;qI?OB{zyFuQOkO>ldIi<3hEzp?trrXeS1EG
zF9V+$(A-Rw59s-#Rbk!$<w#ea0#u4x=f%`LcXdjeW{&A1ec}qGMJ-Yx{ff1;NGFlk
zbTxZ&<-^C%6{RG8Z|dHGPdwX)ec4`nF#Wlr`DJp2CkPZ+ByxYQG`qo^<mA~wZp%D$
ztv1Dx-lo(S=|rY&O022O<fK$en~vs22hXGi)UQ~>>$T14uM{mQ6RF7am6E#7B9Z4S
zrE?E+w8-NMsNb-H8?>?MZ|poS<oQNPmC8IW<oQPF+S42_29_33zt4PggZ8SD{$A0%
zGL?o*-z&KZi$tdHmFCx(3q(PBKs~~ylxlCcJ)&q~nMg;TBT6J~k;rpIx$bUru4*c3
zRzN$gWWD5c#CI#qaf=qtyn3USqvW1ei~{pXQ&qE+tblrsE$XN}-R7L4@TMgu`sth!
z;AIdA&~r*GZoUaYKsy53Z;CR+$-3U8O@9i1^8Td{Xp7$zj|D^B{hJct-A!Ks^P7_2
zz|1vWL>dHBFvRIJ{id5UhPwl(&ILui(hQm&i=}$OyvXkAq=l{+<Wz6?{Wmn_V5fSg
z`LhERhGZk1S-aTCPTEQTNT-o!PA8EaRL#*&cK3_!DOZDln4_JFL2X9gAm(VNJKG{5
z=4fZG&wP>R#K-aMkuKWbi^e+@k4!@~8}H1{vq)qa?~KOGRy+&Doxq$oYv~>noU&~k
zih@EXIAz;_1i}QTY+{f=nBYVc3y~Cq$o$)Q%iyaaT4sW?L05C3!V5u$$(eCCYpoq6
zlkHNRXpYHFPfFrAQOaaz;k6b?nVdHin;UXC2Go67=GR-aO<Kt^8$$)gGN-4J%!Eb-
z*|?QO0%Mu8^_Av)s4`j))moQvb<-9qo!8kIE@IoYbpd0YGtgLK&~RAiY}(A6BI=?A
zv<*&Wt5c1SWF0?t&u0I*M|-XUEUSw&<lo?Q3&nCM8uD*&hQeHvKthu?I3ru3NdeP<
zOd8tD8_+g7)h$k!Y(vgNzD;N%By(HIw18`~Q(NsYle{_@WZRue!?-`i!b`L~HvL{r
zYYmQ2VuzwblI_k|16dOth})gXLi2*qGxXa|CwqK}c8+c7u4y;!w4200lkBvc!~oDv
zXMhiO$YKC!r?aq;`MLr<Rsz~SXI7<}3EroL9sYezBPujmAx%CYG`T$pU>>lV2_!HN
zSegtHm<LFccaU(Ta$2oZ`H^KmpjB7kFVVW-BU`Q2x*(CQ))~s<tqT&ZTk8z}C|j2p
zymb#d)uXa?B@g+ISgk8rXx;zv)-B-@U}PM3Dh=YTQ>@2>+I1x$gzZoi1zLC9>GAP~
z1qqpsJN*%h1om-fJl}j-R0ZTIw&Ou<Ovx!5f|UQ1(<4SDh7=%9Il~Pl1ljsi&L&rw
zr%CA)1<L<xX8J?gUmYdC+8Ct#zdAjlyO9VOzdB=LEPw>Yug)u)a%JH|`l6HhmuPX;
z?-A(9MN3cc2^lY1dIAy|FV^b`uk0|D>q%!25M`KJ-x3-+b(ktG1-=4lm?{+oB#?%w
zP?Qy9@SFi{l$te<efOxA$sMH{0rNgo&dKc^d+U$d14W}%+0S4CX|yU09Y`RJR-qnu
z^DOu{j<tMDySHSVC5uyWpgG2=vR6P-B31SZNFa<;(JRAM4uS5Slv(wd=2l83*%;Kb
zlT?qeZBE{^lhk}Z>qAnqe3R64Yx7ls0kSIN=&9u?B~>;Cb#0aE;gdZwQP)<f31O2!
zQYIBPX#sVule%_p=H6af+EF^!#-Og9Ys*1hJ6Fx;GbiN%#$5HPHs&a_s|z#d+iKQI
zwz{`AGVr$Q3Q@bd_;k5QRT{C5OY}P%i-{66AH?((4X{WpY-o1piBZ5iY;&1*fASqw
z$tN{L8VAz6qb8E(OlUG_knggap44V1-c^;DOvJfrg95WFPXp1GGwmtu_QY~kDU@l*
zm07MfZel*g)1b~PSih&VKB*P9K;*itAb~z~qEZ<DYt*d6nX^x6A2<SQR9A%8iqDQ~
zRi&w@m6#Ag^MT_636Qla2F{Hr$Uy`16L#I7w2sM7RHX?Q227;+L~YibJ4HwY@-sH+
zPukezXR30AOvJfr^A_gM=q4mWwYFq#`Lj0Ak=UXtTp@^yyjw^i9^;8nuP@j)&uEV)
zzEBn3Sx7_m`hq$OstXbWW;=WES?%8Bc3UKJ!M2k~V=+-75qiHSv*B57yi!`DD$S)#
z<a5=it%@uXGS#T*j;7btC=V%GjoP|{`8D+x%zr@L&n7*m?Mm)fm8)bX^1=42ZQGfz
zih5xZsLhQ3i<aj|)!MZ;kgAqy|1k|*HJ}|+v+CIT{@O>m$5ePKXkC~knD^ssV!76_
z=(wurQ~)s{#c|chu}BDcT=n_Q>v$G?{FyliXg3u7Y-gd7`m<_?8B^sW^=B0}y^Lpp
zD5u$<2WU?fotBy@<_Gn(+CWUwFpwzaw2DdkE}jL{Id*Y?c2DU!Ye=aI4a;+?bQM6N
z&~s|z7E(?cmgm%>w7FJ8ja@KRuB<mQV+U$CIdez3;DTNaWS6j2`~Ir6D;n*RwhBx@
zjdr<(9R>-g(JuIoZFv@a9LH{YQM;ySoJ+QnOBg4Y5#*(VM3!-`aKvoGv!KeavRN-`
zZHr#Dvyd{s>Vnmzc6RY9zv{{hn^*EI0C<gQf799&y=G^jI=<#I#Kh#{rsp*mOrQ`9
z+B%7q{Y|^3WRgo7beBSgXOhb!8WtoFCb^mj!vhk<Omab&-=?X}Man#l?fjdzxOAEg
zLH^V<mz)!j1`yL+(t896h-of(kJB*BQJOZ_l{G)J{_omUN0YfOt~X9q(*s(@rL1zP
z<}S_DK@WF3VdsdK8Szi;L1()aF15Mog9|0Tp~+Ud)Q90fSsZ7;^`1+;=rCU)L#t8O
zeVoY~tc4s!A6tC~E~NX|CA~F}knUp_bgv7~gOBUj{X?`{O4eER)A-6^omD@Ol*knj
zjSLb9>!^`uYa9ZCZO?o&L~G_O+U`=^y!SLdv1})Ik2(`1GHs_~Tk|}icCgl!+Eqn6
zT#E2AG_J5aTz=s$gQP^RMvcvmJPSH=CmUU<bt>LzOG=%&)8!F<o5nkHrz_b^7D}DD
z)77#SS8a{@ayQE!uC*)KZ6mmVu-j4xq(NPGyPC9?2-KImU2U#5=aM>TWVZIPe+}2>
zciCq{XvB4S_?$v%0I|;{M=nS}>~mq{E_8DUbo@z|a>k{`|Knzh`x_0|<F#&Y=JgTU
zKh+9+5q_Y?ecO|Ezmacyk{XcKYxoL3@T4nz#wEOLVsJn3XP0`~CA@6OL%vg}B=@o<
z3x41)F7mR!O>mK5B3EfjB)&N_VYK#8ZW@Fo1v$p6G`AR&U;}NHhB3Kaw1+#Oe#G*p
zYSrnF>^yGd`ABmMuUu2y$n%i~ubi(hG{p?4>oWz@v;s$`^`K-+o9LbOnjBML17p1w
z;L|IrYXW1v*7yqZEm5u~pl;NZE8?#^SchF&n7#UjHo62H3(W(xjW(JGXdAVFrCA=J
zZPXeyF;^M9{@DR_Z|0BFwGy>tuZ@w7Zr!WZ>sB@}_G(GtDQQYJF!pNcE6vs9DQQYh
zKs}oIdZyM<DLHCm<N)KSCXEde0pqAvuU$F7II6X2Yn~Lf@}i5`eQ#-}N>ADlUO=4G
z<RVg2ynr~V6<#fy%?pT=+BMgj7sO!9g+HoihR@L|oE?Vg_3e=hkYT#V>c(7v4AX;_
z#^wTKn4U<PJ562}UqG9tD>E`TFVG%vRp3vnS$%++rh7yvLQ{NznWjgqj`jg&nvRYZ
zD(ZuZPSYFC&_zfA$!Xz?EN|#)YrYPYEEtgK#G*ByruYNuOr5X!y8LxOS>JNj04u*V
zSYq};0zk~v<)RNHN}Wli@<ks!h=4lptsYA>N9jCU@Bs8-o?fqAB*i>kdhy5th<Q4^
z_}AR9*chOn=vfOhQ<rKJRo^E%R(lhue{?di8`w=NwAYF^SkPbsdV>WG63`p;01sDD
z7C>*%8#Xd;<p}t=nT1wrx0P(R5hzfz*+w99yIBv2g_F+B?PeX}jG;mZwAMB@Wu;bG
zyv>Fn+qTVypqX@=9uWPjbK|>BhnIT`7Xl(xvp>G4buFp35u8A%wh?Gzt=8q7rgK|d
ztz%BBa&ZV4<Aa$4?`gA?;)6B@ybAT8jX_iEL93N@KD8dy;r>3yA&|C~t@}XhUs7u$
z(9BwEBak(&)kRbhjY-zHR!<e0BXkY{ZLG_be~2hkuR2``@gbpe`&*~yiAew?GS%sr
z1ZW}x31e5M7d^;lRw9SHeZ)yW01IjI1mGZ82VVF4%u%Ag@H9te9$%x4R!T-1ayaOU
z4rxakQma5h+L1<m*OSE_X`t&@AqEOy6g(l*;uCoLB@=861C^Ly$YnAT0b_y@7IqIL
zFeVsSR%{d)u(#7PjX%{kJ4&Y67;eZh&6b1g?=(Ydx6bYFGy~c_UnmglZxu^_t}QI7
zvLVR)R@o3_eyfZCUr<1FGQU+uvle`a>I$syY=f_~+krp@W*c&Jf<(^Qh8&$Bk#n|T
zjZR&Gsa;@*kj&#7HLcSETZC+gu)r39?Ck=(7G!T1P%VaeF-BopHXB*z4M+TR4twq~
zBQNveM(v0e-fS58=6mE088lkIG?Z|BzQX(uXtB)K+cD*|1xw6rNPrT)G^A$)5+!_T
zV1}JRZEesP+HEMo_$y8}&Viu9oU^WA=Dup}IY%0N3xr1NZo}>6>V-@I*=_g(=2U8I
zgBDqP+0Q$)H`03zvFaoy^6WJl@VGaT$g|gI(Ncs{3?dJ(kG|5zqz~BT(11K($Z!GD
zP$C22f{8Q~3|eHL%>3hPjXBdNt<C@!nNAupVT?c`(@E0E&qNK;;B}dfyR{9D)^&DC
zH0bIKIprIC(A623@>hkhYDFw;kvnT?=K31#dNZ&Hnnz()IO}Nb#criBd*^4ZNfQzL
z0?nre`igc~>_*Ak&@7-)#5?SZAG9x%@3`e+984s7hZ4OE@sJ4QlFXV~ZHyze#I5j3
z5SQ4LY6XJoun5|R?yQTM=Z<LYmAnt#hz)#5Mev}@YPZs;;Uebft2bafk7{o;1Vcmz
z@EI_x-LOWlisV?1uXQU2*`yz}S1RzAh!7yEf^=)$u$`FHfQtS_y3|3plMD!FR9B)|
z*SXcJX-?yu?Uiul)lb}N>QWZ!yxy%gx|9X%Pu*&hOIg7Btl}~rI`{L-Sm?S9mw{m%
zZgi^+F9n0y+T>QRx|9VgwD~f@U{toa)uwi;ib{Bu>Q=Yf%;r@(G3vi?t5;mg!f4)h
znPBjPwqKSCZq1j!!>@G0O{u<2d|2TfZnZJNS6HnGU*IdZT6k%ZnBKp>3_l1j|1z*p
zK;3m&TjXKW=dv1wF;*{y-@*H>#$BPdtuGQhble`ddflZgblhII@M5^ENQI8u=f-}B
zr37H1-@d!F`N2ZJ?Y}G|`t5)lCC(Cxh!LjNx)B(jcU+rUfxpBULTnC&*1D4^sfjQX
zTCKbA$9hdvoLmzR6P6G{aSBa5;#L!vvQVM_y4B>REMOlcwP?r34xo>_m0#T|+k8T6
zQ-QxNAt)Yn+!g}0M#{op>xFO%Ax^l}w1js`Ax_#Vz*!LDXIpnT3)rVFONCbb1;e4`
zrC?~*({@ktoM_fFmllbZ#t1y;R<Ehg2o{R0bE_qnvQXrCw|b-5iPsy*7u-rg!*;1o
z1Iq{Wdp6bcuYJmIV85Nzu1?_t_dwC#6!5y>M*QP$SRllXhL~9+Om^4LS~uSi)8*q9
zkq3`nGTEY^wW8!proscRE^v|eC9@!5rcfe6K>>BB$<F_*6()z83itVli$p^y5nN)B
zpoW?3hErN9Im{G(4skgfi3)ilv{a?Z{&q@hn5;Av?xG_R^;ab!74bx<;Bb?zI;EwP
z!)+w0&u~iA8TFyakeT%=Gk(!J1xA^!Ag>M&483e3EJ+5wu?Pu)<}qLwNI<-7A}o0a
z%0ajX0U|d07wyi(XgdwnYBZ%m3=3&MjbVY)+C7OerZmgK=#QZ^6+8_pHI@xItqo3$
zwQ;CUV<}B3PlGy*V})n54vBH543i>`gEZqP%{4p?^kY1$IHO&g7;nmMM4$#~##5S`
zcp8kuSJ;j-TIb{|row|A5RxL2uTUCl8pLv5Gqe7~u04yUdChc%dDHN~3p15gqG?3L
z1vFo6x<CSgnV8-iqZouw0_yARtFzh_iPudz%YcbAuTvTte~6Y);3|GjYoC~8Dm+p}
zOyW|S8+aNt&1BZ^oK}*UjBX+K18JyfCR3VXo(4@bg>5*el_sZHO@kl_(oCT=55kdh
z2edcLtR1Xro%TSJH%ucJKu*<-HBgnQyk)B95eK4EZW)~-9;>R;4!50Ysx7z+Ej|Hq
zmI)I{;VQv_c(aLfmK<m|xd+QLAD!3gl#=D9bfCdSzbrSU0}T>wv)q&`ACSOUZer#0
z11uvj@O2eCb3r>?yvl~4#nUPqg50rHW<ab3kOdH{%t(|kzueS<A5Ltb-&Xvg4M0n$
z4{ZP{<wH|0e2@bGADUSB+|NY-_3^|v^#?nAYy&s}@UiKkmUBT$vN9i=KE8QCBxNzN
zd9a!sH8&hJZM&&dXRdeXA3C4FpJHu|4}jTj%R#Q&b~7N>*7ypT?WQpPgaQY6yIELm
zinTQ{5dMJ%e`%`Enjhz)XU%|i*34R&dDx|Yq&GQh@=&Z(#StUzWsfq>qnfka=vq^D
zE%7op=IArkwxd1pWvC~`H#FK9kJ{xD4rCeYQ9GD(Ddu2O-%ia$0(whl#Z-?xwg4_F
zFx4X)5+pKB^~gPSknlsMdh#C@s37?=Y^tZhLu8!^lsG7Qs^_}f`N~YPXk|9lbN>V8
zDDv`6beC4;QRaBmc%37a`8ZEk9Ti}RR>fzuYL!Q77)S_J<&g_xkPxcMBb+<JLaSDJ
zQgb|_Rf!?C`e%CNAqdIhhahHo)a&`_hk7Q^W_#2dSm%iD54`2UISAU!Gog0ce2=o2
zJr&XKs=!~CaHM+kZQ)4u=6ht9BNyQ2dt{e`gmCjcg^TNjv(6zbu!Z9+F5E&}ILQRs
z+Yqi$iY&QMnMEWhU!$5-<ciD#QT+o)>lGeF<0=g<1Y6<Jg@%KqRGvW497_Ri5B9M<
z*vIM=*T*=5Ydi>WA0SotKrggvkFqawFkj#AtiYdQ&4drYtM<4B9!TI-6CTBlK%%16
zp3pv2l$4MdUy_Tx!=tw1%0ZlMe1iYVBb;ZR2rS@!?GY}v#exd$^uYb8AhnV?0k+E{
zTuqAwOZkllChd|`=$zdi;lf*~&|2RT*d?jpV%K=of_fH)A>j91Dk~qEes!-0(filQ
zlzFJ953(I8eR8*h9=T-#CUL3#$dG^p&Or}0mL!Q0bI=pu4h?;UYVvrCC)m!U{d^Bu
zw_5gLp?+iUT90C(P*JrWuP}&61JGIz459#~phT@F)>*bRDFyuST2H(aA9F}g92#@A
zo(>(&;nd;T0qvwGYgDFZL%q_`_@sw#*f`Z}7?x8W<tz-#U9c<J(ykDTc^d28+Wz8E
z+w*e7CrEqRquz^#Gh|}yXPoh<iyUTCR41Fv%6T@XvEKZN^B%cJ04Az)-s2a+F_5Uv
zc@L%tst!n0=e#E_Y!#8bI_Ew4oq2U6hpKbl)A1%V&C3De1r}?fU)lSDM-lr~*}N|<
zctRqA1`_35AVVR_fuR7Ix?NO<_XV2mf~W8{Sq}9MZ?+4bTW&Sy(Q-SR`lm8Gv#^Oi
z-%(tdEv*39(5lL88Jh(Oc`CDmB32C&C0Ax+7X%IwFhGrD6PoISOGnxWGy{#ymPQU~
zfG{#!p7a7qd9vZHZq7mP<-m$$XT6-cx0$|4YcW4tP768cy|=TKCE2R^2F>_6vik%t
zKFYyzI_MGhcx!#gZHuziHoWE{5vsK~Tm1v?NWnozzLTwvaG<rEKniH<vy}}%9%5R^
zu-e4Sw7ODvxY~W1jinTgb)KDkq0h2mTS+qn2Y{bvtHT`TRvJDzq#9e<6YcbE#apdb
z02A%F)oMqOXoaoWL2=LlBwAr>Hhf&#8qA?a-p=}6qhHf&d$uAB5tziymQy!KWZ9mL
zshc_-BszV2cA~40)avx@*~wdZr&9vi>D#lr+-$x|vGg43^dB-tdp*z9;|E(->hmA6
zWgs1iQ1B1g5pl2uBnti^8wXoN!8AyJ$ZmEYw=wvNVgdx4-MqVbfo8!R%5W_6k79k0
z<FR9QDYPMcEL)xzK_ZlLEL)xz0ZEy%v5zN8aiWxC*$u=gH++?)9Lp}~YW|TI0vmaf
zJzT2y=yB36gLdFfX3O|xj)*vA%lIWolyNc}@k>z#+!l~mbeA<Dr-f>AGP~)$<~SN8
zIW#5KWuiCguQ+<t*`?4fU7g*xJVa&pEyacFsBc9n*g^)G6jlI;C?!UmRA+M=d80Yh
z`Xh2O?vDC)<*^YtawLL{!bjxDaRd_WH6lljBakR%L=MK0D1`#aBXSCEmvx~)GSy{7
zPU1Fx>?engCyZj(b=Ds!9c7n6G2>Bo85A=fl_TeTWI-9Daxmx5q)mF9nwy%FwLG(>
zv);&=J2eO1`M)5)m-K)7Yq#oy($jO~qzWF8rsv22AxI!i&q08Y&p2MvuvzTwTlL9B
zv+O*i@UwE<!ssCl^32M?COuXUC<V2d!v=QMON-}N@`DNa=j2G80ttjUIexJt1QG~y
za^U6BVFE8v^Vm;a^>)ScYy`4a^K1mt%6U0bE0Klr<UlJsa0KYwLiYG=`b{MZZ3LS4
z7TO5pDlg3Oi%G!Cb#7q}hV4!o8(tE4S!VBT`ooUWWi|%wG%U0F0f~UIEJu2)AR)yv
zs>gQ-daAhr?MP16j?4>p=#QICj!-|4Wy^(SJCUROk^`IRgk{T>Hj{XnU+>qaIVw)(
zAcjVkO?*R({+xrDgv~)Yr*hQC>hVtJD0RTYO#qPvhElTX^H8Uq$$?{HbAWp`2eBuc
z1Ke{tYNLvJ;EOrROJ3C+s#wTyN;xl6{17&o+79wwDi`(rV6S?IjYxet#H&7MHb<l8
zk_J|KS^tOi7QHIHiim!L3(+dQxx(21i9D5F>1=?+h^h2SXM;#SJ6C$8vmrS&J6C$)
zYz(IE%OwRHmAUw^?sPmc$}6=UTw;6O!pi}Pl16!@uLKe$jq(Qm$;T#<VsSLe8@%UI
z7SGiEAGDxGL8$T=*85StBt6D1hl(HLm3st8gDhjb*dzFl5DpX5gv{1Q^@O8hf>+v+
zT!l1zf>+uRkieMWm5UCLz?k5LFX6?s0@476H-&?4<W&+agq`3md>j)?J&TI+J~7f^
zjw0_mmm>bNyh^k9uUe{0`G7u|XCBjsIE%p&s|zH66tlc?q=JMLv%G#W$AE+sv%HvN
zXknYnM>T8l1Xi|lYy=u3b8G|}BXhidv9X3MK$zpj#@Zy>0ndd|)s}jd4>N0?(4$HP
z{<H)kv%1u74l=7ty>h4_8(@}tG1SQW2MO<gsW<;aukikf!M*=?z0&(9j`04Mc|{D9
z=MvukGH=6D-i{SA89H^Dw*#G;p@!r+QQmT|^w=c}ZModrkjHMVRFHYOx5FcsX2h(K
zxvWT-_>8w9k0@Fhp?Vo_hl=0jM1*~XSFRgmkqEG_yi5uN*jIWR-g;?~2(Z8B6)}Aa
z9|89Fyp4ZXBm(U3c{_-evxL765%yJ=;)`|3`<J$&(6bM`>LZpqqdMy{<DP^%m#nk<
zPe;YqdF7GOT)xe@&YN#35=~j_NRbXxG$5CpmFmoYpVI$~C7+E!=dG)4RibUqYOh~-
zILHHxYHtg%M+=fLyhV=->jM&JqllC4A=`#?IN}}FfaWZos{3Q+D_C^9Ahx#0n{^<w
z`_H;x@$K=t{N`Htk1oEEznA^`to})2uUE$4z=W>srE&Q<PXh_}vAuouCzAWTGUf_9
zi8T8t4c}zK&N?Fe?D2m3M~UyeGOh?FaVZg&Whe|n?PsOW={KhK+dvek+fQkJCQ+gD
z$Gll5GgF__`zyJ}yx7H}^Ok%M^Cy-l*B?**<dx@9!9?DlXyDDE+VG9a<7{fVJ}-IP
zD+8BcBGGY5G)N=@d4fGTKp%4530MvCVUUv~Jwb`GAp}B!r@UDgy$;i3I$gAhe9DXH
zZy%Jw<9ENX!h!mq6Tf(6&=*W(|HX^_csdx%<8x=&yn*`djn7z(0VdL%@xp6*iR9oR
zxH_-WC_a$A^A~rJwR&EEHVKB<mcwTxuk&JC?tn;+#=F2)Jg<MBx?uGbVrocqff{cn
z?FHksN>y&wl*|V&=#BJXRW6QMenJ+>he=9XkgL3%`T1XZXQcvviU0&YpmGax-QofX
zNR+Z5*PF{t5J+^#f?VI*xxxey149KqMy^`S6;N^@#lqZ1MVGPwv@o~z4d!+~7XY*O
zwp`__Ts8i&KeK$WzR9QnZAn3M*tT352J!JZY+J4jgMfq-+j2u+K?=G@K@5^Y+n%fL
z$Q38NBoBpti32`-vXCsC@T$(G6J9j6`KVEM<tkm`MJeVOrMG_ygjn<76NK26>l0Hp
zNPz9il~XoIjKp2Ja>^!>PuaV2<&-TsG-dC~#gu(BFAWeixk`Tg+KGjFm@ONn7nOn*
zvw@FKjy1V*as-L;YjWjm0Fr0MY_LMKAT0ARUncdkzS4Mdn6Dm$=C)zJdJvl1hWVtY
z?&EXYFrW0)L821Fe9}`VQh4gaeDKt3g{A;*yiaKo|3|7Dd#8&Q%-l0kze_0r&k~zf
zAme><o#W&F;&@+JtkOY3?D0OV(&-G7kJc9xeByuv2u=y>K;Izi1fM)00TMYU_^bmG
zK3X(P_VEJ}oj{=alWiGj?J(J{HLV>c`{X$fBnHxCA5KWzfx(RE?=&B-BK&ERe!Fj)
zPj1sAhKl1?KGxw;chklo0Pu!S?(Knun!Mq|;-fQ0DuS8;bq4cI)^ASC@X7roFp*}4
z5B($3fU05xC{2}58d5|miR;7gyp7{PtXXX5Wc`lBET6QIh#?})Eb1bt49Y@1-(ojS
z(Qi$><&#@wU?R<1J}m154k|yF&6%R#Q8?EpZ6PX(G;@7$_Gbr?!H?nL%lfxJllLEe
zraN~#j-Z*hqeuKy?`rnhEd38f)jl}@!9*3SeQvRE00~K}3F{%A1s}g=H_g@`Nq=o;
zp)vcl&n@Clem-Wu_96Z>9_9+gK$_ib<81xa;@wuafeFcXTipf{5W6j91&LC3Q%l^#
z5kT!>li$+2r}xMf1uPAcJ-!C~=suB@$cMx0WZOZb_4cy{bMzr4`|VO`i0t=C_YY|R
zvEL^T*MbDZep1-c<jDF-#M;d6IeM<6q}ImZ$FXb-asX?6ei0Bs9$?h^VE*~RPCse=
zu}sr>dV!<(n2kZ|f6OOOr6UnAj`<p2Niz`2CG|h%ySg1WRDRO_6Kv3Yy`<;_6k4Vs
zJwM@-aZ#i}mJ>es`UAM+7~H?GBlGp=)4$l=ME=Dub~llK@e6g+O3`5O$LiRa1^TLz
zI$KaWMO9~a6HS11K6z%;&rea+QG@XlsD3)ddXZHw)aRC5v?1se)kPbEPElR7dzwyB
zUG(J_a3kTTQ&dCz!bpHXD-H2WBLNaQhxnzD0EwJK{FagM(<!PEesN(51iF6&1d^>q
z$EZg5rD?=hAdT=#BLNafBm6KD{PYZB_Y?hDRhhGk^!7^bM87MS-$6l`oDSQUF3}%I
zzUG%>4NPeFYkrImIt=aNLF`HF-6i_`<Rrh`x&{-8Ci&6SyG0_9Q`x_k>NUx!ei2<o
zP8ugu{RlK*)k8=SYC8MdyZY$FbQ_6G#B@R;H_Agw{w8a(3~tn$e(8^ai8OEeF<t$F
z$g~TQ>9_q^t1?5E>8BjNxBa+MbBGE++!xy%Y(z${O)m1wJ3C+^^CCZjQ?o@PwA2zd
zc7;ACxx_DxA|k&?w8Rgi_=QLWayh$yrM^A6+%Fv=1Zj!u$4J;H5}`itv0L8LH>ck7
zOLK-eEE2uvhdKM1w&wx??OQ*b)3&R0+@1f{k2?%i$gBoP*1dkEV|)VM4A`pQz+PCZ
z_wELca2xO)a_;rZ^I0HK*j_)*XVHKHiSe-4AL+oo5+dO=py0j!=#Bh_N`TDIe%4~0
zenZ>+HYnM({eF378)*Q#pK84*4q1Z%jRmsa3^?M`<LtS1MkKR%9bD>)@_|oSH{Zq0
ze7f0>%liGxa0z`ts_d`0Qje?p{5t=0{rml?jNh<N?H@FO-(KgB7WD7;+;e5UTj3!9
z`PM+s-n~JmaAlnyE)a<Q%lh^2&EGSiyttar@8HL9J^rpP_oTXZ@A8LMsjhdXy5HI*
zbyK&_4_(iuj@Bbr;S~US#DKpdP%baP^S1|Z<({xF6`#L?zy^NhO5$q$6J@=6;)*{{
z)bpvbz5|+;r^@?0)wd^JO~CsH{rK(v0jXa7aHpQ00KjVn^ccePWxdm>uKeW!sy-^z
z_0Ib{-qE#lkB;};a^D}i+}S<FFXeNocnVPuT;LZH@#h38?Dqt&=Mq>=jB3A7hQ}Mk
z!vOREKyOhty$euItwNQO^5QLkdVxtyQQ@)y;t`1Yw;Ze|7s{!_p2oWfsh&B2#Y+Tz
z(2;%nnQYv8y|98F5GWtm>uEefU^iN;RCzxz@RkG~7U+crpm!Ch9F$!)z!ru}g04c4
z0@9cLwXD~`0cGWBJk8L%Pk*R{^~6Ey$^JNTQ(p&JArt+_9yzSL+uIt{il-7!FQ6#V
z6sZ5xWzY0Z4d}<emiK(NEY*MDGi8}o>-C7?V*w*!enulKNF!_t+rLHMaOaeOI9Eta
zjDRVDlvt92#0Z!Yz$pnDRv<B~rUY8u!<VE)@|g0JK+)YeMnRa!J&o0E)gQiVT0jm}
zFo_$GLlq=2rv>Ct1qsY)0XbBO6hn1dKn~R)nUxs<)^eTRwjBr<_8B%d_s;@y#NsQk
zX9O@}N6;Q!2)B*`Sqm~b+w|d%in#%!A(nWm8ltMt3n(3Vtv~@1q_8X?A?`d&T#$gA
zXNe0E;?A?gB~pkxkHi(=$UZ-ybdcb*^$yZ7@1Q0O@y3`RkfAh?K%XB#C{2C^`usrn
zMsBz8Rie)iL`uzLbVn~Qpe+extz$jD)PD>v2^dYxLFBvVp-S3&0p){Ck81s*qXK`5
znGhc^r@j~Ph|LF(5bwRf6{1H$qWt#)xY<Z?Cy-cfy%)IhgMirkCkB=Y$g(OR&iU~)
zV&(9D0B0(@^TLtfqks~R-<-OKzX8H(zS3_i0!y@M9<TLB0qHP;M5!MIFsYH&<WUE&
zVcoyhAFfzqXQ7^56Oe8x(jd#40H$4P<UFF*2E@!m6dD<%RT?>pYXkD49=`I#@GZA_
z(1PKBRujlN3NyaOlj=xztz)lVWzP-h*|%5OYyWWRnYKIicU`_38Yy%tRt=N7>|<wZ
z^od3LtU|y<A^R*f0f|EPk(xZfv*6<a_TC=-q4WVe3k`$=Rx5;gD;%I!;HRX+)C@nc
zj(hbt(m&XFs2P5+ngMB0%n#HId_yBl<bRoWpFX+mf9*U}|NmO`M;b~LK>at-pok#A
z5y+Ysbi`-lNO(IVlsUdnU*hne3K(&5p+7<uJ|EyuQ?NS^=vtfe7B)Ts`+Puduz&>i
z`2aRpKBY@U5lE|z4k}}VnaTrt7qtR^i%!88WE>roodOaWM+YGkDIQ2D-soV#*r13u
z5QEnF>X@L6Hb@TIXiQK>8zc)rV}gh_{DBLA1g`|4iZ_xfvff>^5PPgvZ<7X71Ue#o
z>G4WXzLWtH0Ivkm4by4wEkfkv%!jr5n~olngK`*wi(xc5D8qjsQJcxZe6jKcNtuH1
zi)k2x#4w&5Y$Bp^M2bN)Ie5k0<_EOYh>#;UJ+u0Vexsvgx?KwGBTf%`3MCFLSEdIW
zUT={oWqPorl)KImvV>JZ;W~pr&Z?kvok1dJRZzOlAd#~wXt~Z2TBOVkiuE-J$THWK
zfdbWYgVJ@zS0K#|O4k`Akmd&AIzI$miUzcW!L0Y#`XBWNeG7x|-uOZ)N(!_jlRk!p
zRJSETxr6~1P)mYx2?G*POM-H{0wfx3Nic9NpInIKlgpA|u)TSd+AK;#VP)p!pY*<t
zPAe^W!9`_OT0H}jQU&E*evl|+We^5#AuX_D0qwJ3)(=qrX)bo+7Iz+NexH_;>2X4L
zJ6f7}4vD`Hbjf2<^pq3L!I!)s1+T0xf9k2?_fI{+d;4D=c%oVU|L1)t_#Wicl|R?7
zZ#liH1b2+ym7=`j6(#P(^}YcF$y6a8d!k3I;8@@pByvQ4|L{{cdL*i+d6|dx`}dk!
zf$RgX=CUW7T2T?d$HU`HmV-m@MzM>--Nw!T!>dvM+hb2A#Z=W8I_R??Zm95gaAKq@
z8-v`~v;_g>+h`dLkVv~RD6I`hbmqn&tPQ4jRgIBCY|p&^vp&*MwB61`8n8VmeF7vx
zrtPHrG*`vQ%I;w0zv%ZD@33?TOz6;#puAoP5(qnjg(A`b5(qnj&0Csu2Rla8PUbqT
zw<+0aBanUA8I<QAkp>7mgFbQY0wm=L79`CrG^505^w+Qfr}Zz2YitM_{57@^H27<R
z@{S|20HP*%&9!{+$7t~HV}s7<h3S3Ps0R~S_F1DIB(m(QAN4V+<e|5=p3xm8hwM^m
zxF52HJJJB+kTu*v0^$%2_eU^#;sNbQFl#Q$KBqsNdnAb4^3))4>cOLI;5ofbo1<1Q
zfC-?ZLFwp#1klkS936TfAWjYZQxLDNv}9Ku)D!H?IX#*NLrfO<%)h(EWowYg{8JFy
z;S}pfZuH^LtfWq#SM;-;hcJH*%58k4L7tz3SY6{VF|vR<%|hq(_9dsSx`T<jpSJ1_
z5(uY*GS~r<@{m#AOXep|o%UO1#Cg4^BmG-Y9t#8)nSKlEVsZhAOuq#YMW@qfaq6Z)
zAr|>fFD)Gul9LIzoGnc(NI(n<$!oqK0Wm0q75Q;dTXfs75PS7E{Y0l>HU>qMhJ~cU
z#d*IC3;BfO4iXr{LfA_>Aute98W~br#P>VcCl~Y^@b230EFG;cEK?`mh=WDJb8Ka>
z0)551b0K<d?HMd~<TG$sSBUrCgjMK+4E&WiZp3JTc|EL$Fj)VC@q=yoAD^ldUTd7k
zd?9c>iORMf8S+>P!7mwxqQa>~YSeaQ2=8ielM<(R{g@ED?V>)TWQ+|$mkh^*<P?rX
zX!S9neEwnvdWxcBV?u4Okvfgw*!a-IX2w;e<81^t5XOh(Mdr9d!Ljind65|;5XOga
zO@0(vr#J=2UJor}#><Y9*KG`nj=dhL?|X`ly&jU!P$3U6UJo^GZeGhF5FMKmVvj4v
zb#14F<ng~akBdzS$tWgB<e3tJo(fGzSZrEIxh~!`bq{-^QcJR<is3H-%W6!z(mgFC
zuXM+GY;0O6Deh8(1lqI^?93KgSj6c{_ngf2PU9}6bdHTdSGwoeZAn+U=Y;abyGF<Z
zj5(nuP0canapniK#i6WEGoQJP(T?ci5ZnX`BdPf?9NN1fWo1Z>uXeCIYuzcfH(=;&
zf^Jk*;DfLRNCxzGL(-Ih1p2!nm=bawLBe%>HxynO5?e&XAlFe_7E)J)#1@g{A>Z<l
z+#-@JY!PKbv_-_9`pG97vL>Y55g(daZWunL0)!<6*`zfgdDsFefwm?jy%&(sxiz7H
zI1EW7cVE|pg5oHd<iK#P3AGXXXOhKXO1qkGiY7sd^&wpRe$_z_RkAJ~V{!=?qVMwg
zM72I7kIaFDOzT4t5sL;1u=OEC;I2ZmHwb7OLRni`gKXo<+zlZkn;&3nfJS$1Vvl4S
zJ)YQPRSrx5Z3@X<IFJC^6v8eX`LiHVxlN%^1z(mDiON9%Hih!UAvVe4neP9W8Aazd
zAkj9n202E&-DbNSYQ)V}S0W9vY^JWHS)l>!x@${FdD+phMXC$Ca0m9y2Im+B72t{b
zBLzm!7Hjl?1l*R8JX8V_a9cvybD={eAaST<OUOD@LbQ;3OGq9nkt`f4*%G2dC0i+e
zinF1+LRqipIpQBVQ=MTJGX-8_ox`^)gspRiUUKoHm*21xxyGdAHzB#>119?J8!G*z
zNCeq-v$;OwRAP5X-h;vMNF>@#gS90G0`)Ch<u{5F--hHJ7o2S*ZU~QM6!J8vR1MPt
zMx$g+NJeCFG7)KNLWp$G0U=0)$!SmK)_~!3G~N?Z_^|}yBGsM{jwKuvBBAy6hLm)}
z9jsr_C=LmiuQ$D(${kD!X0dreyvFgLle)>&kP(ahFFtMaR&4P_y^wVY8PNnV#p6Xd
zXNVH_hVXdNO<XK!$v*b?kkL7@FC;_GI75gu`)Gn|$kSkM`i|9vjK&q;g=8=pX8@7r
zJ5uGhVN6jIXkcv!Z(Y3MgfneN_3CFEOf}Dy^~EErc>1+IHi<c|&yz3mFls%I$1Ay~
zj%cfhSBeN@zb9{avaCOXob_=*yO?I(=)Kx>J)?PjXx54}@`!Lnsy@mnCr7~X;4Liy
z?4Thz;E1g9FC@j~k>dIQW_{EUp+p(^<MS*J?_mzD7quA=9Ct5!7BjgFCZ~7|nL^0*
zf#c>WyexZZ3|P+3e5D~*AM|Q1pY?eR6Hn%{U%%2DH=!<oLZc7(;*?1AP%ZUhC*DDr
zFb}i-c}ADS;gCGYkfXSf=5PoH8D8XRFe4seJMxUbCy&6!k#PZzi8M!Ove=9X2Q=oq
zQ<;8YqnlEC%1-4$s#BCoWTH9mR0vP2(xX_&L$2GYQ1k1}=>i0k;BT2<qeep|@tZvy
zvH|j2=!$0i&Rh;nZ5LQ^zR@9ZAtav-0~2X3gmBBB?$zZeh(TOrlaVHQ(Z=Dge-aMe
z^TXq%@YnL#xqRaf$w7JY78<w!8k7eYjCO8v6da8ooX5%<7^TU<dG!O7F82)10}}Q<
zkqB3Phvcy}4UBtJLu@2J5)C0FtYIk?ZvVcVmuXjEyscEcoG0Hh0~^U+&cib0plAc!
z2xfUW8@EH{ZyrN`p2wTK{Y97^%0uc0{ltQ^AKn~>t4C4ias=0{G>GV1A5-|76a-6T
z`2un)KFnCll+mrCGk@*((tU_0UQCts#G;bF^Nd3Jz0lVr4dxPvP<6eZdCA(EMz47H
zSjZ;4Qu&th_0|)?eB4+|a)h`m_%23~9CBpD5CMk-R(a(DvnP-9p-Rv6e6g%I#E~y8
z<9Xm`@nSGS`@PC8*}RZ1Df3O1`ppR%x!9V(P_~Qf>FnFvWPM*X!q=6<1fgB&x#9o!
z%gSO0qJJ44H^wW@<tAI3G8(hmlyQZ_WZpufK_R-%8X-Y+EX#xLSJFFxaBcpRmo+Po
z-Ck%6_5CLg$E5CqTJZDGQ}fu~LgW7A)I2!^!A0h&c^HCp_m!W3o|ebDH#E}8X?gNF
z0dSFMS{|Mg$mfYby^+UeG&C9{-^i1v9&oIgvvKO7F;9dMI6aSj+t6r|oSrB5_i%C<
ziKgdae-CG$Q5>eF8F?(#$Y`6KktdBixJWc355^sLPml<+(wlj#yphp5`KFCTGs&BT
zB#OgKQkBO(ZiM2h^5kx;mro^Cd5DMNMJ*s<Dw&zbT#bz@Q#0)*pt)owHNg(QNed-y
zLtfUl%zcfGY9n_;o)M;dks5z;a1*<>$hfU&Q=Z0MA7Uc!ro2!yvO7eg)|>LKzSV5T
zvyl7278MySiniowJcy4p)R<fH!u%W`k;t+oul=3$?hHtL{DNs|qigFg@-%+nh?vC9
z%WEM^AwTAeymq&nOJN-`TWVkDWqp+SSK4Uf@O_<!hxzCgE!>60!uv?(qt?bEwcU|C
zjUNLhF2IiDdHG>7A^~<J52kTETn^BXd39L1J3gdkiuJq`r+hMPjsNJSGznsmTf<u{
z-7wz8li4)n$Z**EUzYxhFcsf4Y(eve37j(i)Vdhv^`neJQ+T$V?>au4xwqK3&s}i?
z)`<0yu}cOOZ5v)D35BC%=`c!o>6_ax1l_EC%1g5d+hR?1|5rTEdJg_xdJn#1y`3P@
z(FFCb!tV`+Z7)a^stXtAGVoTc*-lr(4zP~WCSGm{Eu+Mp4!k*!))LMaFy)RcHtpDd
zQbxQ&gzsRn@YeceCJ5V$m)fBJC4`5z>Gv!)YJ1ukeJ#U`_OqN5Gu64von1TL(c_*j
z9q;XSXOB+Z?(B|@T6TPgD?78Xi_uKEZFN{aSPlh(eytA6H_|~uzgCB@=|;yV)q;Sw
zCY<%(Fh4%27C_h5gpCGbU0y)?`bk(kc?|-?{*$m=UV%i~Pr@?P2NI~Cgc0h453ClD
z(tgT3U5!RpeQIZ+#l)v!xv_{e$nt3zTQK}6b^*qewl%D5&-CbO;3zi!6pILafGyb?
zmJjNJ1kBcOOvLg*0%mI%9y%>AL1KBiHQZ!-SZs+ALqzkx2+J)o$wI4a3u8+R>j;t<
zC|`x~oZLTBT``LdV5e_42Dbx8EGO|DrG8}#Pr;_INch?C=aC&Zq`wU---XrqM0$UE
z4tsB?JC{9KZuG9eM>HM2T2K^%`Zg@r$M_1UZ^LqZ3=$RiHXQyA6`&)O#Ng}Wny|Vr
zEY`=8hkSd&a(ygWSRd~V)B2c>^c9e$KIjOGJqJ)|$Ae+H=KvC791P1n2atd}7`FBt
z3aHVKgvFyrW4jqz=@Gj_C<b{XEMp=_37{ikx#a*7Ku5xeK~AQJ$r1tWLKxRjzU*d9
zQbQNQu!c3%WC@BU42>xNj${UPHy&|R;BV1D_yWM85xKer3BaKddBzkZ8fa)F^zVph
zAY$+a8WvGUL_`Bg9`aR2WCKYS8fbWg8mLYPf!SqjM41>-GY{Wyyx^z+VM#&iIyNE$
z2nnvPV<QM4ke-2r6k{WSiS<&55P~)?qE4un!rBlXAJKe#F;4j)EChQcf;o#0_)8X=
z`_+h+(}EUR;6XcCg#GbBqfrkQks|?IG(3yQh6f1=Sw!B$0tr|a!5WjI03fjjW0Ar;
zWGQ?#%~LeI-7MgRfSMFxdml6sJto<OP?U9&T?i@uq=<Y-Gr^;*lOpm09!L~2DbnB;
zSqQ%e!eI+;HsibyxD-<&?9qpe{2o*6LTE@#iO7R~2_BW567h>`eINlbC4!~7s0p2g
zof1iPmW9xOAR(tj3OkwYc_E;tM%Y&m8P`5O)h>kMwo~mwNa3eO<YkfsSNN$Bd0`PG
z3Yi*dW;GXGz@tK@Mw;KwPe`Ff(MK~Ptnb6drXDlwQfM^Hu-l79!;FX=4akG4%!t65
z5mliJcrzl6?vz!ro|K;vY5WH>!K(tFs4BuHJz^w#RM~~lDcUN#5DKVPMdTZE2_8_b
zioih=h2Wh{d~Ik|g}<^1F{&bsZZ});LXcoqghd`Tib`kMg;2zGRzyZz6MO+VE0S-a
zQp9yu1PjO|WHA#8R*-WeY{;X=(jIed3_6fF*A|pwu5%*+aqj|ofH60M^^*|P4LRmU
za3fR<1h*U;b0aP8<!37s6qH>MVH5sn6qhWp3o#++f`|<4A`uE%5NUFqM5UnYf=F?x
zxtcCcCTNAaB9rr&@v+ilg^fXn7gt1NSQUwYu_7X0$^;3F6_K<!@d*-wu83SEu5u75
z&Qz?3w0X?@RFr}x?7B=*Pvdi?$2z+d3f``Z$N*r12XEI!<l~bdQOddqY_4dIY?QJt
z((o?X9NDszb&*Eh%xYn;um;|kxv#fzzoTNKT?&PFH%2@nu9)C2c5aL$M5r7jO4%4e
zs9cnigHkp|+CRZJZt)eRV6nR~a&1pcI40VQbLe>d#>itm_)L<Zb@i6WB@bNo>BkaF
zw48SMg0k^RT+RoHcH9z?vkFL*y@hIcK`0Hqp@kdSOSE%65=t&?L$zItT&Pa9tvdAH
zXSF?$=)KSC2&NVCTap3o>qyqQi11sINcnXH`&)cJAxVDAHxY3jqQ}#Qmj1>v>iC4D
z-$bO_0urF#MBuh8q~=YMLEW2q^=YHEBfU2wH^RXsHjZQQ1_X&rdn3V+xra6ml4Pq7
zWsdhT_Bqmr>`a7p$j(H@`4DBQ!fGFxK>n1u@MoimQu3441mL0xezKYXBrtx81jM!^
zNXit!5{qW{BrVoXM#SU}0^M-Z>IRU=dD7|zkjQzmz8jJ>kDQg=00KZ~Z5haFp0#Bl
zt9jPy1|$a3S*sgT0quMw>$Rxph7?kskKh~*?}ik0!v)a|Z9xF_g4GWok@kYs4<Lbh
zf%<{m#}qZ)peW1kYBabO1ac0F%4r!S|0umkkjObG3P)@+DOifU$e~eXWR$h|i?Oi+
ze+n-W9{@8nD(6m+fEgN<(;7&?42@!1quCuK`54g#BcsBLB!=)Jhef3qDOu?I$|$@@
z`mq_w!tGtWOckYfR&KbIixNge@sQW=lA_oC9aXyvH!=k&v~f{oV)XxVBmYzZzVJ+t
z3bK!jN(T}okjF)(0|^qckBf#ULUwW>iNXD&@lka`RQN}dhkUO@rGF$@@Q+@Nl7B>_
ztT3Rx9?hD@yEo!g3sLOrQ6nk(w~+dGN>rQ#0D<P6Vu=V6X{SWxI0K2IrbN-dbP>0Z
z+J0)3wHs)(xNT}w4l{5$o8MD*Q6l7-8im_OqBIO>)1z7MNKI>ql+&ZufNw~WR7pud
zK$0p;5|Bt+Wk~`Os8u8hX<9>)WR}ph8$clEEITL3Gb<`J4PTLS7HJxH`5Tg^&5tUJ
zFYBwy7mPnufG_$AsQ@zH>MM`{nQ!$KNc7eGXn3*gD`N1zS`bwi$-a_2<XdR<m1Lo>
z-mdSfMgeVUG;5{RSB+5Y(x^2S8&L}_7cF!(2-I`AB_c?qU2e4yNEEf4T8LgfZ$$F1
zVBKFdu4=s^DtFPrByLm}SExZE%Zex-5dANm+G&haJJGB?nRj0_jwrdGMR9h7_KO;m
z5F6OSe;7BUH&{?$0%}84zS9E|P#dV%htqg&OvP_u;eQ(cF5Y5|WiV;ZiOTC4ASqE)
z{%8P5Kx~QPM+3TX1dPUQZ1+EnyNkEk2xJYmS=OL2@1<=~X=p(LVOtc2_C}5Xs+v9h
zFQa2gwT(cgy4psdF<BjzhXNY&F<BjjvqYx4F`4SGquf-#R$*wZzmCfJ5?_$->!_SB
zL87d$qt<-cn8d7!id9&8kfGgJV+%lby2ciO>~u|3`klxKpqePA%X#!DLlfN9jAqS<
zWy%K`&7A&YQM{nSt#lLWloLWT+JgY*2}?6T0`r8W86bgqf;8hzn)sTaZ?tn!<$UH}
zLyZ}Z3j8UQ9v_hJTvQ$&1c`j-qVn({NGSceXu)|XJ>C5$1}VK-7nO$xB?lc>7nO$x
zB?~}xQ5+t;ikFWB7os?o(ujVlj!mmHTBJc+LXhfQh{{7LO?aPPAPe7v=LOQ>7&~2Q
zJf0pLtItEdI5;K`r8MEaI5>twDfBW#6Y9mGF*bC#(KbCaCe0SO$TKu1kI8`q^3WL8
ziFm{hdC;K4W9-myqkWs<F|qeZT;v%ZYak9pfJC0*F&v0kAQ~2zfXBv^39(GK5ym_$
zN^JpYbul(3O@9-<x)>XirXM6)c5Ey>Atp>eF}OJy7gJx23DYlmC~$mCntsWGIe8^U
zroSy09P1DkQwrl(q}X3a8dsKp5L0Orh3;0fn7md95;Cz^SiCU;64)$;WhkkB6Iz8%
zj&apz7e_+(C&#4j;}bGYj!E4IiHwtDmhLy91;+Fk*Zs~Q(D>7B5onn)Jtk*!d<D|<
zm{fj{K$;$d^8Wz=csztLGnO?c#{TlMal3D34A+CP#&+T52H5i$+w?MaYG=h{*c@DF
z)vOr8=9nOm2*9&r%sbj>n4BGxVRLYiXm(5nyZI{&Z^c-*(Fk_GC98+5<QTpcgW5lg
z5qJd*eJtx;_UdTkA>aI%5u+Vf^$HSVVT}Dc+UQig(5fD|sNO=WdLSXi!kB!d8zic?
zFoy6yS?DWB#Kr9IV~nec7uyJAA{WOz;+i1RP@-5|#0EeDVQ~yWv(6j=f-YsXV~m?i
zmf8rUx=Um7#L^YqL@tf_#F`u=5SEe*x1n-P16n4QRm1)~*613~&{)_+*1IXyZdFW4
z#y@bRZteF1`)RllW(UU_Zx@3rv<YcY&MK>}AR+0hm^8&8QO+uA>46*&A6K(2<BS(d
zR@(?PZ?CoysIIGH(zR>K>$*CIfj^%XYE7wEHfDy5Hx?>I8?8|cE;4PTZlOgINEEv<
zhK-7jJP)WX?9mD6q%C%_Gy`n08mKAv%C^LOVlfAj^29I$&_U;>WIHemO)$E3+-4(C
z6l9x?K$c{ijX;)U8zJB-DG-phI;IrGi`l}_MwGoY(P-TP467L_x>p_Zh*5~tz^aZF
zG?Voq3sW6y*~;7{ItCVIS4{bqot$XwtiWFu3I#KE*-c62W|yUSO}V+*MV(GwGDw)4
zU9raB!ragTo)|DUDCwJ+eD^}KAlmL2UTnA>y3#D5?Tcmo5Oc&!Qumc(KfWXD%8VNy
z*cZdS*BENrjI?HdO!3EY;2*y&Iv{o5Jza%-_yqazP1tylkZ*rXx|twR_Wl?qDC~;?
z2Okfzz04>mK4{etOduSzY6y}NS;_(u2nR`7U?PA3T{*<Aecfn$;~^V?dg73cK*b!2
z$tWDM0O1gsziJ(|Z645miDiwBXQsSvY<K#9iCG6}n^P^%$GH344g@gITlE47%=1>g
zKmzkT)oTLH56!8>m*SZ_ry3I->6dU8j(0NHoG%?#kjV8?91bfP;^tJB$~g1CVWe7D
z#-$Ag7kMh<(guS>p31mogPRlia-2Q>hH<g<WgK^t1(D{z9GBJ?iGcBPTv}g{JQJ+%
zaB6`T0c~15>#NMv=|-i~KP`@5rr@4O3u=HFaj{I_I@8eF&ai5NPe7azm;DM7h%@4-
zKfij>f@Gc*$E|@e4)%B#tt-1{mT^~WaKx!jeCG+|l>v~*J}ZtZ10Rs`x1g4o7iZgM
z86WnTXH^PZRBE18DUiUJ7ngVZK>}l59Mb~X2auT7=EddDYZ55}Li6JIc}?8>p;C}x
zF*`QfI9|NiE`-h<FNR`E7;3r2arx_-$U=GI_;pR}JputXV=0TzF}jv4wGn8czcemm
zJxBwDrSSwm&qG;&ur!YIJl|13qXpIJgUs|fMlVOn2Q~(|jvv@nC0p@9Tpnsf9$<VB
z$9X3F<Qrk2!1b99^Nf!iCF^YrvJ~rW46+pK<I?CN4=~opF^*(oz?;~_N){N$OE%dM
z<VS3Z%j**@xF4}8-cZEcKmuY@{OYz`eOpk2Z-x5emlE57K+dg}5`#qHTP-C9iJV*O
zmAC~t5<8&82s(8JfmYpN%Rr9A4!auUNbImw8Hs_kBMw#W3QcYaYZuR&lFv@RZQK&v
z6~_gfm#CFnLX)*Uapgefu0@98sKB3Mpx^`0_gLs4fxag$&%c2L`kpw#++<Ec!kq4j
zrw+uOW(a{eVnD0tLAAYcb${H&BM0?d<lPsC2Nyz&p`HmJ?z`MLIdRu>!BE~Iwr{af
zTztqDid=(3aXGQK<b&l<Ts|NO62OPznE4*z2sq<+m_7K8@yCk8HUg>DVY^y1R1U|b
zd(x5*mBVq&5_GH&B#!kRjyE1F-ijg`lLSOK9B<N_KmQ?FIM#PK{^S@39Z*6xh;cNo
zw28M%-GvR+vi_{?663mJu&lPFp>#AZJshNm5J%(jB0jP}^88m`#h+wrNki!;Hg}0}
zQ-_~y1e$(-vKxYi(ob<Yfg=kLeu`uI<)>d;qR!f>xN?rQTxx8sz+aXeG?-4=jX{Iy
zR9yZF3337DR2;6o=wo^{=TyAKx%xh)eFomgzr@wE^?fY4$a~uEW64AxpYicNUPp$e
zC5_Ju?BDMi>q{@#Qql0dU`s{A^Ma+<$O7aGaqLQr6A&1lL-N_^WybiDA^G(+qwzT;
zzg|(u&mWTS6H(@te0&bc$EE{4@7I#XXJtNnWVumMT4_VjK&{M|D|I9SL}h+s5t#-F
zF)H)%vxlFMrD;h6^_BcgG-IrHl)hqv&^hi`Y!DiwujI?u7?24dujJ!3hP46&TLzQ!
zGYwYa5NPRS8-xyWPtKP+PA&PK!Q_1T{vJqxOwMnRFyF+J94@@hvpzp-Qzo&>nBmS{
zpYL+hzKIJ@=+M6QmUTwD;?sPE|1cFXF`s;zk9ih%9YI36&+^5K(nJX|o79p>r2Q-(
zGnq&W>hpa0FaX}AL0XXfl^dj`dFu0g9sna;NVuWC(7U<5gXX75=qnO$$j7o%07Kt5
z=F9gD@Olh@LGl1L($aaJjroX0pTRp$YO8>@J3s40X45Ce^GfdSe7Iq>+-*gbtzmb6
zX0&TxlP`S?FacGQFK1?ukgA62LyN{%RDpe{I~I+d2KIlRJ@%OqVbz}*c}3s~F9m6M
zqIv|fH~R>IUj1oBbw0qtpBp7b2kb0_d%!M~n&JRu!I?i~0d<HC`rPPHbjZ#^=HQT>
zh0MVr%0l-%T9G+8%zpgbxUuN4orPNIaK2lNYotMz!}&R0{y<PGGI>YYLmP}+i;mh^
zXs{p6m+=CmL6)QWh!;G;OM%)RXInNHy;~o*v(QL9o-duWR(vELC*^s=L|+sk?A!pq
zRMT^#k#PBjHh{Od4yVP`BI=AKnXz9O>sz#5QXsuIZ~?ZYASNy{f<*aC3NUl8qmE4n
zv=0lie##6zZ*)?cd|1F2H%>K;7a-RZDC-MUdZS(kEq=w3c<ktJ#-X-r3lOHJ(2V$m
zE?HNgcD#gxVm=|x3=d>WlWco3+C`(vRkWu-_A|JUZBK#hXOPIWrvN>GgKfxzkKeJc
zRCntqzQd6LZnVK9Zh^d<0}@%jE5PL(^0`35#C%ua6E8**$v3XPEAZn-eK2224sBe0
zSJ3`izB8OAefpj~<#JzF^t~+_mHvH!JYaw{DCheE47841G*Go{v&-G7q_#lX!ZhER
zsV$H$FGwKN76im{5hUd)z@#~w>}i_x>qqtn%{{01M;n4Xw;v0n=Y}+Z_^}`%t^k1q
z#E%8IyFY*<K;2HTt91AC#V2e8TH~Ft5lH(^6eQZn_95*%QPA!h{t{}MriD}NfbK3W
zK4l}&v~bF<1}WpI0_o%;3lL5fh=-C;3(N{<*dGn|&BbSI1lox{V<XU{aHc>m*O3JX
zX9{q0t~;*<daRD^HQe`?*4YU3tX`dsKyyM}fsCA{`J7N!fL~4ANKf;nX-*iP$dtR?
zcQ{LjW3N|Mmi)HiiTeJaIbnFBUJRNOh9@A#ziCcL(>C&$MCP|__ee+S7#oD<gfTV<
z?IVv#)JsBh!k7dkSwew>H0>i#N@PCqx|b?9O|n7gXB#KkAheM@DG?AG{>TK7NeLVV
z{kPBzy6%%uu8wzPg9Gk3tM<E}DFMT(7CnSB%?6`~aHb^!!l_A%%RY%K+wki~X*v)+
zBf<U|a9`JPh7CcR!7~!_?iCUNVn!k=ylRk;XGQ|EB{_&`+Si?#P_B=+65{xS?t&69
zEOE$Bo0*V47E%LiW+L8J_5m&RXC~TTXFkfYu(vxW!Tua{|FL9_4MDrQbL<+?uI`*f
zK*S}|3hnC7Nwh5D4@srz)b;!XbA{aZmdv*y@Ddo<^?gmh;5a`amn+Bvi1`WJ!J;WB
zO=q&-POym~ce~=ZZ3sUg-nJp==NR8kNJkub0P%JLza>dO^qZyw+wU+f&)v589UFmu
zjqx2DApnGT67mEFvH;<oM5>|r7mk3l+{@VWdG7M!Wi~<(2+M4QAP|<>)d&J%8C9c<
zBjCrNR<b5x_fy3yZ3NtgQdcHq;5Ds;fUq(lPOd`i5D-=-T3=<}%MtL~QSY<Q!tVQu
z-?tI+AjA8%40%9!->yX-5Z<R+P{b*%;HRcmvxg$?J4#mD2w@<swh_WWSe=mWF0ue&
zbpprnxnr4DB6!+??T@%$DOqbnL;$hYhKK-SZ9*;|kOdHH6Ac?%V>b%NCi70zJ<3tC
z!N!OJV?#o^b7>_Cj139DxB?6k7#k8eThHT=X$4PdZ)GpW-CH_rwILAyR<|bP2@s?K
z#MXqoSO*diTNAig_dezpGzM<d9!w~QGQ;!TH@JG@Piu_CA<03zHgUilOvqpevH|8`
z0xL-J|3Sk4KbUBIC?P^-#1N~Y?-Te96bjU&m3;Ue3BJ;83j#tOPRI!#B+w5hWVi+-
z&<`gNuBj2$r9nVF#{N?1-h1OQTfhbo@R%)N13(<J1#AF_V<aHlXGLut(9R^X1|>6N
z8@fMs_|7D-9m{{ivo+1~b?ouR?#hxn3mZ&`S7&J?NMP3`!Xion64-SK1aD7~c&%yL
zy~r9hai6~Nq76X-xr>%~NJEJd@>VZMKwL~9QhkubyE34SOlG~3%shC7d%wdsG6|ms
zFQ2Mcl60e!?6zj^p6Ss^xz7SFz(yw<h?p!$fQ?RKNk{(Kl_bviB-_=@-Rs8jN!g#^
zLZ0zSX>CCARC1;V35fAY%=Dw^eV427<4Vb_X-W3?=I(!oUP~e*@GzjSB5__%Dxvrt
z{AV25RW015t-%mJFg^qH^`vw_KmzpjBpi?()J|8CU{jN9S_}7A>8W-ml4NR9zRH3`
z$TT&Hs8$aM(k7tINaAUSH(R<N3(p`q$Pl%G9NNsJGB>HldkRTfw{qWG0hW*i2>?3N
zk_03`XObkOt{|bVGn1jYNwJ|s48EZ>E2+*&iVY>nL%!KbxuGOkSg5|0q*w%5)izYA
z1xft0Wn;YOS>#R^fv|+2nk`7mT`i;p*n%W>wP<&u4Y_cO*rP@6n|m!nem?hri7bnf
z^4AAIBFmzrJj@3Yj>n>8vwOMEN+fp`7bTnD!(BzmAy;uxvfEvJ+_fQyrAe_<l}x*}
z)=QIe*x?gOTbh)^4kS-%MM>L`ySFmQ15A&D;FMG+kWi<UmO6n1(#oVX4<LcGGKtZL
zLk=#y1o?h4YfVx-W=nI_`$<=fFFpOFQ6D6gX5#m{K;kQCadQwP8tDV7|4mqf;)zGH
z+^1W+J115r<<$}}k!E!gi+<dnKpIdVvj?wq-<J9~DepUiN!%oc+Z%Lu1@FDBPiB3=
z)?DeHmb*TQm-evMcLhk6Pg%dK+=CLICgt4@Fp>3B8X0(;8)+cI=Paj<`@zKLNx4)8
z6KOtAVzq+-h%}%!vX|PpdnY!^wk9TVlh`)v!qcFEHZ#}N?pqR@lXCwpz*oDQlQ1lJ
za35LF;#=9Du6Ey4xYfp?Rqj^88BU9#s{`6M$*du%%;u}zF2(;1Sq>hDzM5)NlN532
ze_i9&+SXW#iBG6SO;WC5Kth<BB-SvWl3RH-)$#kJ(loxp$-a3|E6nV=#{H(F1S~N(
zAOXzd_enWngX9^)!Z!p7xbKtrown8V8qd{K@w1r~*Sb5ZC1-66a^%k@<+1^ZfN?gN
z5YJA71jgAUCViSat|scd)Zx2Ipu^`a9mXeQJa6eRNS@Tv;j5_)2dBhIgMXE}wN8Um
z^|e3~<D0aINC}|9DXGFB0W>%T6@H1@xotojmCBl*a>P$L*_}=!p82lSeZb)#l`;xN
zgSVvyACnRd{#-{0IVL470X_kHOiDI5NMMgip}}huRIe@7ePSvztE2ldN6AD>K(Nt7
z6H_v(4w5I6?}2~>$ix(09>uLjV4#&JrC5hf?!T2zvLUFIC#B@sS0n<&q*T6GSc3$_
zq!bp`{3VmNM9xTM&USMD+fg#Z2BDDTjFb$RAr(Moq<q3;f#kWcx}vUXOAS6VB?8(Y
zkaK2A+8dC_IWr~g4M^minX>w-EyW_{iN5L#0zmU@87Le%&+06E1=2jLvp@oA9(5KR
z21RX$tNtlGPj=fa?r$TDQ}iGZO+f9?L)y}mvLdC%|4A49<LrT3-F+*-5*8Z?0J}6L
zEjCENE=|dE2p}<SEKP-1q{OsA3_fkVn^H3=F>Od5@-0irX+yFwZ7fgGv_WocJL-s4
zDdnzsmlW&V)!nTOgcx1;gsQHxstS@Pl}<fKV6RHaL*yVaC9F!Ny78?_BE^o)s#M{f
zX0@m_G~=Tbjy!zgV0E{-n=r4#2(l}0bH82$wpDWy=%bW;uBIK=jE_>-?!%2xNQ*Mp
zvR`g<cfWD1EhnkPT1!2V1_*0Y@}(G%lqYpfd-Dw4m$)XN)ughf7G_4=?*2vf*Q9XY
zjoYbfXxQu%!=^n5)P0{N6-Z$2v&IcbVD6)FQ$>dA8py2Grj#R@$M1%Ls=%M3Hu!*i
zwJCX02PE><rsPQ-km$$%)7QDjS5aMiJUN~m*;5q=4<TaCne&*LstG<YKuAc!L#0(z
zM5|tv2BeiDVg+o~Yg0sg27L6wmV%;KxM;6$AQYphJVjAdUS5TwsO6!QAQgN7_q+D&
z$-(=%pZodbkNnnId(GZ!t-WT?o;_>rNS(Y3JIZ#D5X6r0ohf@#$5K$-&Xhf=V@U|w
znc}1lAF<I6hObhb)H&Il)R}mR%AN_1Iw30kDrHaVz)ah(QoK95-n0d^Ff&T7(cj(G
zCZ~V6L=7l|5H%KUwxsM9T!qnQONuQxsmE0zlWe~pGgSR_`2Lhl9}bZw`=faY<O=&!
z_SGH`N7<h`=^Q&``PzWT(*3D!1I^k&7@)}7VSlP$fAc6_Av5xTJ~&iWRv(D$4pFF)
ze*(Gefs}n@1ajE}DfZ9JNw*3KK;P@Jm#TZKzR!!0{hIIdB4oej`&4nbXG9Z3e4k>^
zNcPk!WWVN+?s1vw-uF;mg6!8E%1e;_nnS7L@Ii?tNH`?1(H!Zjkag2!x9N$?)RTp0
zPIg<BEPFJQUAt)s7p*3{+{Vp$r3&_F5>wpR!>;DM(iyt;PIaqxuTV!CAVy}A4Vo#g
z4H&dQ!W6e-XS2=(;%HOc6CZZNfFT4EFs8ckhukn=SQ_mfaBaY_Bm%~Rt^^E;s}-`>
zGtD(e)ph3=6P?b6f@&d!N7R9IWtwY)D-e;>+$gwK$TrVR*W3uN0pLJ0T^n(LD08N3
z?}R`k&2;UZ5QwCiF2Pk6bL5|$?H2si4Ht9rus_?i8O=$>$@wH#GMbkqA9rn%2&hbx
z$6aE{&so)UkXbRu)s0uF^OJL2`yD@2nC7@V!*H$yCeUA8ec&oJIQbXXF5{pYGRwFt
z3={pD=jv;(R#ztHxpqC+!7QTYxo+A@Vx;q3z2#~o&3Enh^&QN+g844*ug*4-82{6*
z{@FFEBK5RuSDzhB7Kx`_R-eyv*szE^p3QE-x~9jkQQePe+bpAI54(u$o2*gw)_V1e
z(pREEL!_&($e`KGhlfEg)t3xcwWUj4dnOAaJWE|>D7%XAfL_-x3|E(xz8;MRqEKZt
z7aJaiyiDgts7p$hMQZ72M!d{LE&UA-BVM7Wk5B_kSGe|L=Z<E;D_o|fEG;|A#9pPp
z9ijS_u5#`26C&4I<+A+b76lLP^`^e!T6JmZo333BLxkr|m*p^fDey2i-_mbitIjWd
zE6*ceI=>}6%wKqzd~0>ZNY%Y`t@TzR!n4*TB=b@R$ad(vdeTUBcIw@{ek5<hyP}^(
zvT7&k=tj5T6TNw)T3Ec%<-D7yzmuqc6B9$%y?E^4ED%+L&Feh*6&agk+)@{#li1-y
z-Tv3==cOM;eSrwihtikZ4G-vJee17PL+QtnJ<0qjRIz8B;lU1D^@-Q1{+X?j{yG^u
zY!&@+LYHe{hiz^w%bw`r5vrS>ah*Edg<y`F$<IjK=B6{wSF&d5S)BOHEx0GGcU`A;
zxBtv#(PHk8J!O2mU9+t01;B8-qwoV{JiA@Ht_0Gp-7fb>*#+$>gWbanV;7Y4W*v09
zA?jHD!Ee;bRZzpl20RGd6HR@fX=6|Q01>!HMlF%Jr|6(XpEg=`uWrdp5I<>g?YmHT
zkkI00dzlAXAQD<!&VHD5R6PZL+w{n2HKnlpTi4#Ypwj4D*Dfi6!X<`ZAuE`kqRGSh
zk}+yk_2K+=Wo>!bwVSx`AmXrF5-x3lh&b%Bw3X=DQ~Z5mI^28$&~jqh22LO?C#G%S
z1k!S1ItrXUWq5b%iTA1R^z5-J(f96jtM243c6Zu_O&F1LciM(cAad?b6E^Q?gME7u
zH`4{LG;JTN3ghi&r=!P)USi)l`l4IZEdAhkl_;N+wl^1kLExOUwJs2WbJAE>j?wfI
zJ<m<+<>S?P<#Y3G#DH_tb_)h3+RRO}@lj*iV8HolT{%J3*3OT{(aRhWnjeh=h=}=V
zyWj*OVt$$h=OTGn=><$Yn~uHIbi$pgdtn0@EkFqGh(KCDo3?jEAg!NG+a)xRJL0qH
z&M&3IJE9QG9r3wz{Ka&5N3=BBJ)gFBL`&k1_(D3mBlZ%nSX5|@3c^l{BBKK7#-hlm
zK*TL-HEJ*Mhh}5cbNL@Z&3SFe@}@bj4e^fV$f__Ss9CJa8Qgg9;>2s|f=%hdk{bQP
zADH7EZ&9bUdoA526HeaVV%%k7+&N{-A{9YI<g&=FKtwJRyWWg`dyDp0>Ex~I_hqZ{
zO~kCL(klEi0UnyHO7mrcypQTF^Ky+|eyh5yY)#s35<;ZOnzSuc0i?;AG)p3G05k!u
z)#u)(`jxNEUqx)UHf^&V!y`;-;<(JA-lFeyR^0&9y)IHWke2HrbpvU+u2tQ=Mco_2
zIdtUTRifX<NZb4(KSkOGB4=ZyZ6I<singyt+m-Bfqzk5G3QI0b>DzY~mFkhVtKRMY
zJKe?$)m<s--eTs`S^SUWEz#J3NZt}D9f;&DqV!W3Tczk~o4)-I>a?<L`6i<DZP8qU
zhbG%(E)6zKQ2KVg@ek^v^6mL1B4~SLr%I#r?P8~Q<y~8)XuYLrXoGq$R^1Zm04hCg
ziF5!&MoZc*sDaWb%^hr)%)d%8!@;KEcc|+N>kj5+$Y#dDybQ6&!L)sGNE>7vOmk;4
zbGQ<FBo3!zlQK<h?^Hbs8~8t*zWhSN!_o8w((rIJeSu8h!|BeGGU4<Uf|<TY((yYo
z;q<jM+Wj$Or>`Y3eJ5t3>02pr^{&iO3tA{4DO}J3>B?Oh8<&BIyekvM<w{w4G-k|#
zb|3()G-hmM2BM9|jE&4dBsFGiWCkLsF@slqE_dEO#fb+q1@kicXLqaZ?H|mvNrm3j
zN4#lz#@u;(01!DnWAy|?<n)Y<%|Jv>&)`nt8-2tJW@Pm7_o@r4XGFb%iijCeuYiWj
zR!RaQVn&8lh`e^}BXfFIM$fpH*N(IDB1CJmGWHW;m=G~5lMCO10ueDQW6u`$5i~m!
zZp8p-IXh!-dO%vvj+6^DypeMIh?C6?l{)}nkX0^_Va&}BLtJfcq+EVQ(p*vQ;!Y^H
zsyMMB!(ol3_p2tS{f11mtf>;^Znnw=AaZl0Tp%JhN6G~va<eG+E&0x_N(TL6(`8z%
z?O5?*){Y3Okh5J+F$)hMjb6<1xs*ACRfRqiOR}-0*?7r<WAyVkwfWCQ&!{fssLxuH
z!hwJ#S$pRKB4A0@-noFd{*r9xrP<K+g<xF&<!t=bZ0P!yM!V*$b$v_1^<T+~>(B0B
zM!-FEdp7oYHr}M4RkKt*AY71DnP9LzYh4#er?zLU>jDwJJ<H>OyvP93sqNX!=X6Sr
zstbWmVd>AZ_Ptw`m~uxp-2Z=eG24<m@+uS4?a1001}DOIWFsf2lBm5W8_qBQa`xoA
zDRFyGzMB#@_T;-MVPj7gC)h1BthzX{FI#YbPP<Fg&i4DV(OKzgae{-{aE1X8c`z~u
z5RnJ7c7_2Fc`%C;Y?3u$wHWJ=-u1Hju=}BW8}WfdSrt}LgNHVUvXrE04BIfLCg$|M
zW;LaJBA*8tPpLL`pO`z=963X<*nMJ-BWH5gs}^);E}TRFRC{O6x*U+p-I=rc0~+2)
zf7PP-`*NZF00vnz0~zdnIcsJhlJ3h{GXs%yUk?4vA@x$cZ*gL3uHflhQ{_^XDr`43
z7k#YSR}?r+zrI?{>c#(voW}P?W>`Q(PRm*S0TDSZhyI?E+elyZmzbH0J)Udo`?@MC
zY~cT>p(t@?&dviEX*e@y=K&Cxo0;qUcrKg=LNN1SRxUm}7tRAqqurx9I}a?0dGJ^+
zx&`!=824l@e+$q@-oQVhgm(abrzcNF`UN8K$y}u0z5<^L^*aE7exJ%&{Q^<OQ;~jw
zNO~&LFVHkazw!-JO>yFxT)_jL{_S#gdG47UHvlOqT*HB~7jm(Mxww?7Iu;xrC=;6A
zvs^7c@5NmFT(g}P{={fr%EkL1Md2z7gc6BcoQpLh?zTu8HV~5DvqIfE=x;x2E6=1$
za`BqHG_k|Wx%j|VX|LsC%aO(|uk9QmPH6gtmFk0r*K_u?o9UdW`i)$CbY7fjZ&@yW
zWvjRqx!9YClXAzV2{Fo&WRo-`p~aOsTiiILAa_;HmMab^$X%U_yOOpdRN~vY*g6FN
zCK60iAtCAPYBj3I+FZPEzEko{{7x=jdlUt6@5&|3({PPA{CaWtIpymkkA+CT)<>=m
zq|JJ9b#q#yM!aaVe&|j0aM|X38}ahZIU6eAq0QzTp+Zs~*ND14(ig2!m1leu1qz5X
z`6vn$K$?6cf#Qgq7pws$_UB^XG`+k=9WENqzhOw{2YhjV<cmPW?2mjAh?xC38`6Qy
zul>2qH_R^y=|TuY`oD67^vQC1tVSZsWUuL@_f+DT>d9W~g=A4a*|RTd;Nn7)y>{Vj
z0&=0r9t#W!Y&8<y@A1OG2B76Vo}G9=THfQ?zy_q{Jzg~NYGe^I)iZ%@0D#U+&G$hb
zil=%uu<<LBrg}E80g*J-W8%#{o|#u$oOssbBbr?s)L#<qp7r>AcarSv*NT}JG(GmQ
znp{}Ez_XDFD#8|c${hF=CWI~UB>9Ad_gXQ}Vtw&eHMe|mzKz&<v1cEM;i1i9k45}_
z;e{~t(x&X+Rb$~9OTF-9F_J{oQm=DZ#U4nbr5+|)Z7$S?_ejgV*arQ{Hnpnba<9z^
z&PApJu&wms<t6>}L!YXSdfg|g!{sJz8tGC=##nFjHbyDSnIT17Ol~SP3#;z{x%Nu0
za}fP%gq~Vv4ieXj<yU+0(@M(1OZ53vWy>IhcRYTk@oKMAxDO7b@oJ9)LsAX2R!qJ|
zH-4(lD_i5m!z|_yX|l%a625r_(qxUtn^!rdP%EZ>TNiFu=bZVr7dJ=4g-DaPy$<0E
zUm#81_BaeEr;ux9Vg8O6uPNysc5%vf<&{AQ57_fFjo<M~B|gaLWikGaSJl_5kj=t%
zdfRq2q->oR4?VZmoUdQ!b?t7O$Ugl#@5~<NpmeS59lo!JeWq&5-p@CYjrsTUO=M&K
zeQ6>e&)3Rk`g;BLXX@e}>%DmRA`>D_)_W(0MTvkkS?`sf?mQ&ld({;uzVHej_6tky
zI96Z$xjN<FBEw3e!C#zr;rRo}Zui>>BgawKYsg4SmW`7Xgygg{DeZ@hl#I5io5zl*
zA3ovw`kQVkr_RSvskFhLNHAIJN7R##mkfd?BVt3CK2R8bTmYlB{sl>Ue<VK4Al#a<
zFzjF`-gfP1FAVFkjUXB8IH@icCNh+YW+qQx{kR7DTR(j4gs^<ri25)iYgoN35@#|M
z{%-69GM$oMj%=$YpTDGOq;J=c8a>h!m=l>4pc``|IZI`%Ru(x-$&`Ep^+HCB7(3yH
z@u{G$fBy?F9Xxc{;0uQi8=|}IQmTO*$7BdZn&m+ord%84>uw&IZ!u_aUH_qjE*ogr
zO@3j?fqd<Rkr?I1u{Vi?V93CWE*vs+(BN~2U3l5RAp<TIW_lKuF}bOJ{K(YxqsGwp
zYhkS$I&j$egDx0!<<Nlxep;RyY%8*jLQa%Qk^*yK`2xwYIBry{woDFW@>Gi5ZW#AF
zQ!4N1<g%k~7&m@o{k5m*#(l?@4EkTyTTDu5lk-&+W%6Ab-Q>#{kgV~Bk!9wWs3+!9
z`oX(Zr?N1mv!sPI9P~kw*GdsTQ|Lf)OF}cH@5)oU-NvG>l$j%2?2v)y*Ii-sjtvH0
z#HdX|=qRnERAvYVDT5-INwR3u%@OrvuSR83rU9Rp(kgY#qc1!TqEs>0>ImhD9bRmg
z9`=Rm)4+e>9u{=ic6e>Wum@zi?eIAFB~La$Zi73#l3iZ-j#dcfh2>6<1Nw4fv=rj^
zPLG$)a#Y@u<Q?WtuWyahBrDxIiRCR`>}MtOV=4XKm_)}MGqf%Y#jWW>&0GnK>{vw^
z<<yDZN%T4Xrcq(NM59odGe@T@7mY|7%U@CaPg45U|DGvz6HJ)O)aa2M<|nodv+e$B
zlvKvUk#udBHfJ|bx$p*x*Nhl1Nk}QdHxjp|kRb&F$8uf7qErc#41>_mI9ef*xy7?5
zJNVU%($<jxqRkeMPmpX|!fK0GF-Q_siztbpEnZLR+usrD2sIw?IKTaMp<Xv8(W(Cb
zQ4u~dz8)u*>V8aK@imiQnE|vG@F0h1E8S>f92nmtuc^(&Z1i&6Q7UnCb(c21exwhl
zRU!YEKIB$NpCf(9&Fw(6?x-_&@B^OR00T1M10EY-p+4lD)B!Jfrqzde^LxNco#7N8
zkz=uSvX*P~V-NZ9l08iq>`*txyUBdQ9%0hfDE8Yps8@ffetLqbwJ5H2bN%%bM(QJ9
zs=hxtDlx1+?<>_Wj(6Okr+%e^2INP5mjz;@Z`Vv*99uT}t$mjTVxv#r!<iuq#6~~)
zkRLvP!5%(<P4VLo`r!kZrO|GxZy&%ci3hL;e0c!dcAUIZqYRz)3!e9N-5#~Io%V}P
zGRN{d%lhjPUw8i}Z*m{;ZEkO<xXB|vd&p8Ly0c8I8NR;lpX%J?3_oVR*AOa9Gkm_+
zs54BUKl}QVf2w}TKl`y$!~ihK0{hQCyEF3o&lHfG>Fa)bRgcU}KUQv;<m0cI{uyV=
z5qOxe_bfklM%vR)Eai39f9+MJNeE`)B0s}D%kO@=LslLjDt*+~JNK%}<fHlP$}7%C
z<+@?#m_v_o-4;6cSpK^5j`K0OE&&WltY>EX`pFhmoto|25(7|Sn(gyRGUXbC3y+%T
zFWRTp6{hC-F|$+=DqQn?s<C`Pel##^mFN7Xy<e-LvD9<<ZpoX@=cHQ~vDE0tDI>q&
z6<=TbjT+qHC7<mQd3)1OBI!au*5vE<B~H%<Fx`g`u9AS*W1-(QOl1MY{0n{FFN)g$
zahrvHwh6b9=Q$ymfV#-H0o79I$s*qdR7;Y8y2vM>{!5m>{lxCg*!_U|rf+lP#8A<A
zbL7N8!(|UV1L;k(&pT==jKqp4|M$9I@S%S0pn9V1>wZzGak~@6?cUJCzE$O=Z$z4g
zNSEFaP0Q=#6Xoj5^k2W_b@DR2!MF-Uc$WFZJ8_j0#k-d4gWsx((&c$MhAMK{MTCbA
zt<dLxr%p|-i0lQCmMg?wcXM_TCVXx~)Aa9@idS#&V`iUKsBmrY*=H4J1|n*MfA)D2
zO$?-q8~loM<&+Q@y=>GUA68|VjghxPM8rn%)*B2DmfYmWs?xvIg@sNBU2{ZTo`lfT
zUO_x^lV91#`423BNL+HWUUWoFPj1flN<4D2^y)I4sDE+dW53|*X``J>b07PBa3@dW
z{n^s^)Q^4P$DPA59>@FJEe)Y9{M@;{uwuI(?`QlY{0WJl`SBZ%qA=9YeYP}Yso!5b
za;G2Lt)FP?ROoj&k<tJR)1C4oYS`&_3!f5zG~MZQEL8jvh(GT1{oU3dg<$+~SLBbD
zLKk*L{%A?!kGsSl%~oK4JR-5zkL@E^uhf?u<Gg<zC=9LqhGzHr_G5e?ecJ1%O@yHn
z;+1=4riXo!y{*0eS^MadEHU_<K1o4?7C(Nv6uXSY2k<3<UvOtoSaNS63#gSvoi(Ws
zZ)<nJCo9=Qax)zuUi?E-IUlwcUi^b^A6}ty=^uQXco)c}fAHBokUJ8P`0;~ZTx~8a
zkcWQ5(V@!O6pE$&q@d~HgmZae!=#{9t_*2XU|$UmFhiOY@X9HaE9V0z1syIhCgfL<
zE0m658dXbSh?9b|qKg|QE<P!!`ML9k%vVY*-WwD=$f#c`Obr+{PLFEiEN*viV2^QA
zCz1WiK%b$UvgCb1%)Epzf{NVx0$#$)jH3!-as2*3->#fflJ^HT%0q?e{s0@usfjK!
zNgD&bQaKkT8v`3{p&BxCm+cvt=-iY*pY1rklT!j)>jElFQv%M7;hZorcc%t=isST6
zP7Pwl4TTER)Bram#V(M^`9Pp|IZm(C13@f2cMcV%2Lew1)ME01#fd)!1&;)}-%p&r
z#eWJox+va1P`rOy5Yu{CC#RwTh^v9a$4MZ=ofg=tNI?2LE#NhtxEc^wn--*X5QbwR
z826tZ*l=tqbYyy9!?7ia`%e#W|EsVJwIpW-1y2U?!ji!$-STNsQonOhDLw8ur@Y<F
zpeSo1YgaMQEKb=Uhk<4VHjqI@{H%bGA<8h73?B{jq2ruh$wz}&FB5#A!t`js5e~T>
zb`?uJ7U-eJJJrd@0vn;A8Zr?|&KFT?keg$mpFiHIOU@2r6;_fMXm-%M(io_#80hgp
zw>tp?Js#Ll4i%=y146kR&FU%!dLqzcPH-xcPXw_lD@hFWL{L*}jy#!~f^!1>#tF`V
z?3_H4M9n$EG#V?OQ=FI=6#NwzzS`)itM1>{Ilp*bz)1`-=Q(1|`9bXI(40Wb2@XH9
z0b<ViK|0))0W!k*!KtSia{@8v{GjY<Yfd2;b3PTB(^BZsQ;|6>NzD0_m~*epG``1r
zJ}7vth<<)jsNHVPNn%e&|FNC3qWJlsC~53jBKCX%JDTq%azJ_qHhULEK(6ybK)q4E
zJ_qvSOM!l(y;GHZDbFN!eMy*3HcX%ef&QVrQ<_{5#LSZeO~tMYf?mBX6Qf=j=-$OJ
zEe!0Euf$Beg#k;xtdWFW7X|v}Vkehe6d9kIgh*N>#+PG&C1TgbfnHMVobN7<j1Lv2
z#bW%hPnh6u*i#>F?{sO9T_;d@Pb@Jf(f$_TaVaB@TjG)+c2=6Q;iE_1GV0o4V@8b|
zQ$K#hb-uY3a7Ed8f+bvC0=d)@i90#do;dk3KA%1@<&VE^!kFPV-b5|aqlM^KJ2*}f
z9#f+Zd9t>9IpBnID1fD1bD;mx!SRyKdHu=Cu37Zwnyaw!^h%&l>*%DDuLQAh0YP>P
zm|h9^;xrsJM>Su?<vXI}SA&@ON|wt>?V(o#zLE_k@x|@ZKtGM7%+kD4q_)t~pt8yt
zfy<v;oLCkVtj3it6;JA<*<&13yeyy;f_VJ7;_)kj*edb(ss{cGvur^}Q!9d#!}Qib
ztiD2`p@c3VzP=&|R#{&cg7Nj0k*`|{U0E6Vx+RIPuM}U`Qsa!0eD4JXo9W*@$E5Uw
zZxnUZv;R?)&{yqIKWVDz?2IlfelPO)lf>iSk38N7(noOU@j$NjzBseoYEBZ5{~(A}
z>IUVcv%nCCP7Q?l12GEgYM4Rm_24c}UFrJhjssDs0e2ie^MVHzY|zhiae9<)h+GIF
zJR8J?>I@Hlzfm9Q;`A@w7+K^b<MtcHO{r3f9Nd1B{$*F^%;cv0wZ!W;$+ZS!weyM-
z9|Z;5^b1{`3yMDyW6A3OJTcamAoh1nIoG}o{1+MvI%C@s84E~Hw?xJQVyrDe@ONu0
zAsAzAjf`a}^k8dbEK3q&Z53mEEXJac-;SW*D~z@F7(O>D;iJB`JA$H<O+4x**4e3F
z=;oA{?u^C-5ve<6Tr%aUv&XVcAL`~@klYp6CnSjQ><Xk_r7Uf`iQ0GTQ71c7N_Xd(
z3{{xw4G%;7Qg<wMMkK$C=0`VUj4uOH<4BR%K`i8gf`94hrOuVbdjmck6ptSyO57L3
z_J=VZNPq!{A9e!i;l9A8h6i$;eF0~Z#qWWra$n%>x2hC^QRUZ>DlLT(d>yIMl0=nX
Zqsrk43a^YGd)E8k9CKP5-IR1r{U13#58D6$

delta 46425
zcmZ5pcYqW{*5B#r=`<T=XJ#iYGt&!8W*0<)VHZJA&vckQ^-e@Z#m{tto)?#lAV~>D
z20?;kII$HZi$p<?MGOQ15djg9MUwdaUR5>C`QN<P@BQjkdiCm6b<d%F4fd~S(4&v9
zkJ88AM}04_`);MzcxUh3fmi?P`+z;LCUBRpBb%`%a1HydXCP6Sv5Xg=daBFIow`1m
z@Y}uyrW5)&(7uuN&Hj+3hXcu+#m--j2TV=-R`E68RF~bo-|XltJstSxjRl=8Rm)L)
zVRfmZ+@89Z-O^gSuXUakASUN(2}_a+2_+l5q@T!Ew^{-L4_B}|uhX6=U!iD)Qbr-J
z5>C4$R8}YruD8bcd8r`RIeV_t#`((EDVNLfLus9otS^=PB&9TOXKnIvB{i&WW-}_Z
zPs=weT2>0F(Alim*SaKhHY*)ES%Za6Agq4Irc`P}%RlpU0?_$PvD-+U0CYZ6ZtZNn
z8Q|q;VfAaLQyXo#QvS7~<x43IN?$7l8JC38*Gj`{tvR9~J*@6yb~|levweydlR`Rl
z_9^jlmxRtf<=VTgcU4PKbHds&CFh*tTxzG)R|<|PM%sGHQq>$KC#?R&T6EB!Y5tR<
z@D?Q|`s61i%%O<{)=x?@Wlcf(pnYNOXGJ-yuq_?5$@k!=MTOD>G{MhG(1oF{{aFd~
zuBE4d`B^EhWfcfvgJ9BU6~9$zne^P~Z-!Be(`@BUTJ-uFMZM07SV8xRnh*UmihBM3
zGSPy+DC!@rpM9t&EbHOV*~$uT)=q_b_>CfKGMVh7YW8M@w`fz!dixcFn+qoF>+Lsl
zT@v`c{RJWG?_32B`?GzwX#Xth?^l9ShN{%xpIhXTQ0ebaB&{Y~1;!6#um3?S?=;Xa
z8^xz6Xq16|*(e}^FwigC79<b``q8%3f*=hdi*MsiLZoPtf&N;zT5}a%2o#1nMYn2A
zeU-z!Qv7I#Vg8^kar`J{n7`y2mn0?s^%d5}JdT0kJ=^Jdo3>f2ob6$#z?kh1){#nR
zO^~HcToM?w{Y{%$voUmGDyp@_8F;rgSLv|C!w3-Dt8D-nOZ?$di9y4EiNAgWYn-Ty
z7S>k!m9>5~HIS7IGpDmhMjA2J`hM-<D)8NY(g3p3Z;D~%Q#63A^haZS9D&3*TIr9k
z_4}=`Wxy~Ejg}wQR{7PB{Q=pKoCm$tXeWr7u9y}Mtnq6rd{&m%2{UWGU#XocwAq;j
zdQnTCqN7c~5@Q%7Oj++w){^zn0lD6vEwL_%VTRt@;%9G;GSA)QQw+577O!Otw9FQ-
zWegx~@rU^whcyO}w)jixSfdq;V<oKZ^yggkJEI@eV!qH$zmX6lS)q~qC5`0qt??U>
zU%KrC5|CfI;~69%zohY8O~%o{)Asn41MJO*v>jFWC7Ks}sO@o^7bMj7_@hO<c|oFi
z_xNK6Wb+b(H}77*x?eW0<Uwzr+q{y6=KYp8ZzZ<?^W%_Tsg-JKvx5(7*H(fMu0v52
zwDTc<FvJ@cBy2k5FO0h+un+lD#nvEE6_7{R!;fe~Dvx*&GzE_MgJN!CVgcfaKUP~p
zkcU6wuUpSLLqktd&^f1^x_{PQ^HrYmFlY*#@&`qCLkJkB{7Eq*Kmy~Gzg~SlTKL4S
z@w1Z)^i)d_(5!I>3P@<yxB~?wG;1yo6kgj4VxV*Y0b4G3HfZS83+_O{Qy^V%2MS0a
zU7&&T0XaN>SnH|gOlD7Y(wu^xsu8yCNA3K=-!*wmd$6pxDmxlXAoW(IzXJ)R-YUk&
z-CP9^`>_R&Y4=w4Q)RdK6(4HVPnF#Ql7v**Eg*r=Per%%S2+awcc|00vt}xlLp==Y
z+M#MtxHv!W+M#MOU*TaXIl!T6c~fh+zyLYM>Gy<Iq*RXaFsN_Gs6oEQLy7u!jG7Uy
z2_z}0a7}ZlZ~fG_lbl^$v~pjYNgf9E?Ih0*>f1?bF<&rA2N;votD0MHpj`u4FyB#g
z=Cck@YXd{?sDUW8Yk)78(^R&wv2hnGe@4?X(^Q4eV0whwPg6^3TlaBEpwD3UJfl63
zouMklGzcN%gUk#yleON#I0g-J7F+j>Ha#;-RgzMObJbdD>sBrUyXLSrx@xy)=BP@E
zl%eotj#^sRdYa3i!t>bau3A@no@Wq+EAz;p<$lx%v;PA%XRq_`XSHR%@CRxj&a1?i
z#t&7cKHK-S_Qz7OD1zqGCIAv3AF7x(H=rONP0OWh`Ey#k>{3;!%Z&jOGE3D44S660
zA&|>i=6P*scDbt5lR})UHf&`5j6Q-8s`at6`FZUXU*=;~;iG}L(EXT3!=qdX_4<T$
zdQp2U^NFhPo`MY3>l5lJj9ZYHE$i9t7qxq{>phbw>{?GI4aH&wA$0xcPREzDH<dP@
zt4c#@6UAAdt4+#W5;lFVmbbI=Esb<&lzpx?ZEJl&y#?nVR(G*XH|@*pE>*coDpB0E
zOKs888ZPREC18&e>#h~~>^)xX4M^>w+OMKntA@3MYR(CE`zzYYf`cl;6tpg!5`6n1
zmU>ldS9VBMbSi+Du;P$v<hdk_JfwySt!udo9{#{ye^tA_><3SUrs)r=Ar?%PPtzY%
zc=Rq@1*RNhCtlT_E;}YiCiz3C98+tFg&HJEIi_NvzKg4X`ib@Vn|4o!pWOMRDl{j5
zQf0UR5(q!3rH!PWG$(&j%gU`a8fqMXp9<uR4ER#-X*O1%K#|k*HLbqCpl1M~=+!7B
zAbeJre`+nudIzM>0u!jc1Ez4uAc5LDfEcm`SHZ)6Y~4S#R%QJHvcUqvNd=4uHv}Y9
z`UPTft2tLe?FX<%|I%8N4e(T`_5%X&p48+4Ui$%oqL|f;s{mjSd*feP^Rhvn3RQPd
zzz{1`fV-eU0k}e87zXZ8cI01LtIDAP=}ZF(IiR6|plD-|Ko}aRD;y9=6f-n{VLgx5
zxB!jo5$rGj))urG;XzP%H6kE`Nyq?VL_h|UAOSHVfM9YWW;{yMCIxcdc5eTVHo;eS
zQh*O3zpCkBZEiqW7*MS*HA@HG-}J-Z5zoo%q5a9<a$Z1fXoV0=iDziC`2qD|gi<cY
z9}X-CsK5EFx5(jY)OC(Cwzn4bl{s$TfeY)LfQ;Kf!a65_VR#eQ!NVo&>pt2ol}p_E
zX?zE<#H}Al5(<PxBZCCO5^Ch>8i#;k>zz)0wFdsO^#R4?y{GY^yq*F->P(POT2I9`
z<vO4?vG-ort}5FUP(-+)@v*xpP$;5jkR%kSQ);#2D(K8DEIdGKU$Morlsa=uASmKD
zjd$jjK(>J_lsa=upm7sEv^DC>ZS2hfTFc699s)%S+uY#*8Ps)Kpl(x%Kz+F_(EMua
zT^bG=d9a<#KTw<9cBcoS5jPOz%L~Z>VrM{3VvvB?8Nei-YjOy5{NaG|qjP+qHb<?(
zPZ0rXJgPnHbreOlhpEMAqlTx501pRZKL$jAO$;6Z{t!@)1w?=?dC)t8TJZo|vJe3t
z4N!pnO@`Y5_qb3~;;B!a<S^}_f^rb96%-LK)J!o6!3Nqw4U=%YXaF;;zRxC4(sq=;
z@9CJ(d0#U{JgzAwbl%qxkMsS7rdVP1BWKEFE$yrP2$XDE3*GUNCMOZt!1zcD^Q9Hl
zwSe)FR$9-RA<7Mg)m7}`+uFO8t2~GxAXa%0K|rk1!tVG90%Da`r>?cs;FZn|tJTi_
zDO#mkS?yuuqVuY?%OfZk7}Z)<#6_Bt3yf;5yqUFv;v!AS3#<E`KhMzGDV6&@j67iM
z*Q85<5HR*@m&Z^ZF!pQBTUe(=Rr1lV?5lUR(`^oW5cz;OtjV3DrsM<SuvT)lY%AJy
zAJ$r3V_gzct^m=e=H$-Ss{Cy)cpwD;xu6BzzAFI81uf!^%L0I0&@#5Q%i?tjg|!j7
z!kkU>v<CxK`04gc2rwh`ph!GuN(e9`^tju*A;65#(Ys<?hA=Ki=(U+H5(p5d-7-{0
z>S|NI?~^RJiBZI&J)Wi%hSjk;-{al%TK6t5bYmA6=ml)Sdz#i1e6i3#3OHkRxzPiO
zqQ_Fve4~fBA*@c;`9_cJS*&SoCVO=VV`xm)FOM!VXtFN%c~At<WF6uAC=)IkGjge(
zGu5g6zBW<~E!DBj8$n&AlSf_2)-BOSRjhQO!36Y57aAm>SL$J&o+1@MuheVTvHrjj
z@Nf+qvsAmSa*c;T8Jaa70{Pc9dRT0kbnai*=tyVu5k{cl)-n4dtzX4D4}zT8IuC-D
z&UJcNbhXaC?K&M1?k(I1n6#1Y|46&Fa-)af2f{`VfmYIux?IF`?tC}uSj46VI0U@!
zSI#rbv}sDkR~`l;3iT@wgVxfo+*a24TKbia(Dx+{0ogt5)|J}Jm3uq{T1xkL2;_eE
z=pu`V#w7Q<N4HC?*L4nofqB9?yHXqI?|MR4qI`Df+~J<ki-gw)38fP{ygscwAmQvz
z=w*N6ODU24%@A?QAB2arxBxgv&VhH|{ni_zzKAk=7)ohslgbt>(rY_;Yqc&)C0JsT
z=!y=*dl+(nfrQ~bjLV~doOcfcqhKl0pC|)140PtNL(pG2(8DlLpMi$lD?<nv1C5w)
zfgph~(7^6ulfZ!M9pSvYLHpEKIl{v*VaEv14syjK3^~ws?uthk80fRbSb{4a!~VNT
zn_D@?gCI{l#)BYFJjMv~eFaP>PdvtG(1=f5U4bJWZ;0(S2vlIaA*U-yXpT4JbOi~`
z@rFBHbp;N1iovJrtspR>rg%2w!iFiH4djNWc-0^`JcX*!Hy`sA9%qe_bJFmo&g8MG
zXN@AK{TA(r7FuH%#nuvvg$$ax8yxug3SapKLoROM0(OHTV<C`$-C$seeVba?ph>jN
znXyxw>MP&oDbe)YW|;YWJV6Lb+l<1nHG!JcpdD2;du^9Csl3_{TTEg?r`o8+6Wc^W
zr`l-LSY%ENBEMueeW?v8|I#amX5g2GObkGVgbXAGM$*_fXght_@qMK+fB9jz$-#xv
zVIwKL4@f8-rg67k)CjG5!ue#kw$a!0gjW*HvJ-|};|)H`P8e9@mqxKgMb>MYne(o*
zVy||c6`qFiMR`?(<7m?9rc%o8e#WfJnjO)!EJ(g8&_guCbQ1+{L#u#B2{YLJN3_qg
zGfcVh1`|RvNN5nOgAmA>&Mil^AwGMisqi`wm)Ior0g~qM0NQ(IPK{G@Olz%#-ZPN|
zSWZRo?8;(R@sqZ)_F_}+|G|XvViP`RxDdjI`$JRtie*k{Z&l%!$N?Z}0=W-Ocu1^b
zz(S`&&i=~ulbhg-9sSUjOHB1@TEsYKdp|_z>QYm+uVkU7ADL>MD_Ou^W~z0sWC3e=
z)$e%d(G|aAp}$uC4h&Olm8sUg5)961wW(fpB?}H_&F>6@zxdcx>w8jF{SZ5<YfZI*
z$Lr_Eg#N@->s`shL|ykg!w~qa|D6=#m<|7f-_MV@WaID5hp*jas-*;9<+dUg|IMaa
za%GWN%0K-begwh$@4%vAb?fiiq6kMhzpGIU6ZA^>YTj?3n^kIy%SD2Rj@x0X*Ivm&
z$5opmY~i*-3LUr8#Bql^2*5(WeQ{;;gN1(E^*crM+m|LvoF)b$rj@$KMB=yU&)Pdx
z_$6izQg0}9kD0aQNQ7_D_LwCHE{{aT&qv~3!V*R(elZgFnQG=r7Ao|usb;Ta0ee3U
zi<W%G0Q!)roHA8*&uOiB6@I%$P{!wwX9Q{u$&yo-jqnR2zBko!3GbIi9QK9)XTgXc
zys^Vsz&`RjDYWX*=S{Wom0)PrV_r{kO*HF|R~Ctu#ti()R9jtE1Peu;FxAQ{St#<P
zsor3<=k*5iY4%c$c9VVD6pIylml9Z~O(ZeyhL=Gu=&YG@$z;_vTF3BNGZ5lVk0*o9
z!8LKGS68HgK=UkW03<NZndyvWqa37o!s>aG^*E!IWY3!lkLQRBq4Ok!$QLB23np86
zMzgaQOcBEnm$M;M!iCU27ftrt8Lf8qqN(sm975Df7YV713!z%Snyl?FT6y+Y4~gpa
zD+zT#y(r^j<qTkhf6>|(^t1vIUM-&G>BaU!Gt<jbcs@4(CNz6l$THpmc%*EQ<YA4^
zYJbf1_GG9sy-5ZsDae58!`NBvo=hK0`e5PL`;bf(mqA_nGX0#^Gt<|@p{n#HnKoPo
zRq4m3pVQiA`dKpTiChe1`jJd4E`!0)pQ-1yYcl;U*^5ZFK&C&*+{k4x>0W0KpVvBM
zU$+#Vuz-=2V0@iqs6~*E8D!<W#g?5%iwv>?G2S9Pc`}$4TtJHqwiLdF41fvE!4}r-
zQlKOA5mtw=M=ogfGD9r6l7I=BAtXa{42cfPIZe8twayH+6rN-vCUHsTdM<+&8OBau
z&?+;-EQQAikf9bCMluy#1}*X?>v&OXlYP@|5#%=@^Crps31N^K)<#-6o7kL-+JkjR
zT1Ei^6u)X>H#5dkCRnO<#D~O^DHBV?V-0@QerPe)QXBDLSUdvcI16r&GEIU5^TreB
zEQP`*t^0GFn=WbRmC8AmjDNvJcg(S5{0kCoGslv97?8l2V_^^TJ-i<<@N^;jmrwtp
zVxb2?+n|LW1jShkt+0sdp#q47Ry@HsQYN+Fd+cpRzpdgu4}o?;?|BGR%zKvH!$1WH
z?^)QxJiu)L<*@pG{ZDNj55W%v#|l#01z;!n62}VhLjWR4$HF1N3W~u@#9-QbOWEkG
z@axO{kK?D<4d4M_)_aCfRJPs<i!C#r0%pA>Ts)y5fL(8uY_!CdnHWgrVCZhJ)aR{L
z1?XEVtR1&<<~w_JeWhOaxW)6Reib)7v|d4_Ur@ECndn?gb}sRpj|=p7)E2#ih*+pE
z#WOTppP+iv6&%>oH>kF?-lbH6MZG)R86VXf`>Tcr<=q2tQGww>*^(fkG(0HJ$3Y_6
z7#=KsSfGOBTdLu~S`U#ACQ#y_=;6U@Z|A!#$)a7>@ZbXvT5nL4ZlS-lF+pWwP)(ip
z+0M-gUG+T;hG<nhMyrkq$}t8KMvV!|O)f|nH6|!RIKo1!jtSZmgQ8W5A&%|G2GwT#
zwt{4-`84F&!lWLpKRzgLGF*O!ZkQ0nO$IuSvoPwkw}Z-bb}XsiRfS)!Wi;^K_AH};
z_jXYBH?&~c+d<jiAYs|t!IJ5hEpsmvOz|w^EN<D<puBNGil_m<aq$l9ERmIvTo^iy
z4COmai;A4*e3R0b`I^oPDjFZp;KHzZL0t@QkR%lhN35ZgnhxSHDu~0V^|kaNzQ_kb
zq^1whI1ge_Xd8pdPN!=|-|w%&PmvwO1K@28ngS0b@HP@2<$^$>q8o$Jov0{{Kw^AO
zQS_#u+Juh`;%wt<_~xL9kGT+7!2L8RqG*?eUfL2wgi}RhN@@aZYfwa!E(?zGvmiX$
z6;kM&Z9x&GyHaSa?F4p(6r$+QgKGLR3v&?gJFc{qPs>8JI*7dcX!2x1>gli8!*%qr
z9lr|7!wxWsOYKKq1SD|23gUD~l9(=E1;adMp{M9oo;V3cT3U1@A0+3thqW)&Z+LP~
zP;pVHs6D}a;SV7L&^<x;Ljg)Dg+0M!2iejzC=hDz38vcf2?u%N(1hC)Y}?N2PaU3%
z6ml@9r*o)O@8>H$9OOqWel-_f<w#ID4zF?-oJy{AD#T*L>ggR@91W_ic{$<{tUVS~
z??uBIQWz%@KL*wLKC3>elS@A3B#YG78$NzAD6{)uqB<vog(AxZ64f~w#0o*x0g39I
z45oymB9d3<WU#mcua4wUbxsD`-Ds8ba)5Z6O{}jst2!N2#7R>w?~BvHs7Qr@L^-F)
zONesdB|zG@i|X*cK(n0=mfR-Gq2A%mb~<>=AFNrljn1Y1xfoRHrpEd0`=04yKiBmM
zq%6DG-Jj{)-F~vm%Uzv28|cG)6_61Q0vZ@_7lSet3lgSY3`Rt18YGOm7{t*AA|$|r
z>cNtY^qy^c<X%Rgm8nOrbbgQlLXTW|jSD2{<RW_gG!Gq{2M3dz)63b_NZ+hAc{^7w
z7kTK|cXE}PxvDjZVu3u_vx1j;!)Lc++nzU~?BG>;@7t#3s?B+`2r<-odaimW?`6S3
zFVDzTU-zLY{lE%qALS}5f!)h;vEk2&=PYcl`vNVO<zg#Ej)1FEoU}X_zKw>B-~ez%
zuG-gUZKb)DN8@HK`@Xfltzxa)4q&1s*XGKW1c`Q7n;Q}L7(k*O*5)GGr4zqAYUcIq
z^fh{`C)VdG!b^ck++4Y+gM`ZZTrBD|B0yq9tk2EdDlBzJ#QNOqANYtM0XZVp=iYR)
zHJp;?c{Cz+JA<#)ivpc?d$v-q@6MH(a|of}-MMjbaRnp_-kpn!E23bU!Mk%C+|L~l
zo}w7Kc(*&Z;eFO6S|9UB;h^KYLGR&v^q^M?9r+&2mDfQagi;RX%IhE?Nhue{bD|VK
zN;#NYOWb9{Q(4Nv-1M#1Uw9#KpoiJswtA;dhrKfBVC`_OOikvAG*hljO@c%jhjWpd
z6lEZw0a@=pSrZCps3wPV>)&e)qZyP(>*Wb&LOcB}U#AmZDRlUD!s}a}m-70SvcD&&
zZ$&9M83vgZE&_-sB}p8+gSCw!)jVqbOS#UF_WE|^(Mw(_bd~3lJCh)V_PXTGB#<cO
z63rx03Z;uL<)&|!b)j@I)#Xxd<~Dw-Cyy>5^kmC#)*o!sGf&P|Fi}R&JULrIqKuw-
zG9UnnGJ57AAb5w4;c+c)cwWvN=iXcNI{t#;d5GNq1N-x7{EuRNZ_|5}kIIuvE|`EC
zl_%4JAOSTh4{1TZ9_7;z8^^A`T_0OE&eNe0KQ7M{E)g=&8JCB{cWf<C45~Acoxfdg
zQ!&x40GO!2#5_5uKmuW6UZFSx0ttkPc?baMl0ZIDlUesW^p+KqJp^)ClRX3)mXq`3
zu!IWf<Y8F0<p>ybQ`vWS=r>kQ^$=)Poa!M^6g@SsP%IJoe9%qJ!@S)^lOvxDp6xt&
zr~a_7&1?^Y4isj)9RVR=%+8a6EJ#=}o9gi`Qk`l+SlgGEv&p&mNBuFY?mp@Wa%}~0
zZQti9NAut|{cvps(rpsY>G_a8(N}di4@op~ZQ>bP^oKkoB|HwwIg+P7dKvFno^k?s
zg)SUCrDR>!p-%fT4`GYP0q*fUM5rDIxIg8ob*e4{*W@YZ0Nh7$krA?Tp0nx^oF%n5
z^FMY`-~W=Q-r*rqU!KiVU$PpaQ444YUd&^^{8?{Qbumv7Id5=b+QqyA5sH9>&c!?#
zih#tFxtJ$I5hD58eKAjlB9cRE_r*MfB0Z`53TS}!%vb)CI_0zPdKn9<-Sq`5s9o%r
zUVib_u2@vr<iF_OKMoNQdqRP0m?As^2_t&u%ODFRjOdvk{x_euM2am{&-}<eSF*U$
zegC43IBY;`^kF|ds#lix@ya2~`sB+)0?0t6Pd*L_#tXZ#Xbp7k>!fFVRRi<o{4Y>w
z@DI$F^B*KI2IkAH3P@lK%tsKCk0l4B0gQYbcibo(C0ZCeFu&w6EIOB2R8;=s1AW#T
z6qXmz5x}^7r9tYVX5ZAUdspY=V|p)t1y~~LfB>u*moFzVNLVp0zfi0{AYsM0e5^mT
zA1>e%p3Q#}`{9Wm0!^QZ9s*6DiTQ=%Xbmbrn3#{FwJ~%YUI2%yy_>JR=iJgoPbgLR
z=^8>V_g$|!$mPD9FJ~dt0P}7>W+81GKw{hQZhrB5`C{8Z48Cocl`ppq#1Y$u+4&;B
z$+g6`VRnA)HoP6Hq!>DNc79vBC_@d&HBsK2d>QIX7TR)7er=xDb){hQocy+rT&ai^
zW$y2ag!`YHUz=weT}2GNx%q9Y{znrVw|V(;!y$`A@_qjAtU&U8etzvgTv;TN?+fxp
zzTd@1@_j*m>Hido<okmBwqn06;jcyZec_e(Vneg&%2pKP?7#WyBkpiUb(T0qT``<1
zmw5e07p|A&%iE#_d^uZ^U+fMfTF#cxK>C4l2n7_#Y;<0FR{uZj6+H~PYQ51LN_4up
zF~3kmKhOcj#{5R&loljm<d;1r91}=fhaygSC)qZf!x8UrCp2eqsrw$a-okD@0JF6n
z`8i)YkG-H5Dxn?ufkJByV#@$O%CBZUU((lRs`F*;4or-dYMPgiaT!>+lRf!Y{qgM1
ze3_Yr3x&*1lHtcrI9o^dpMCdNeP!m0e3^y>lei>={TvE|QM=fhm-QR$T^<l6_;!)Z
z&txjb{K5R3!%ppP`pZhe!F-%+(QQk9a`_#b`ilNo_Pcy}8x>6Gen%5;Ce?<YR32ir
zU)5)259P}|CzudAL_$4;5XkS@(O30eZN7)sp!f!wWa;-LlnWz}LOhb6Q<Lwrf|fr(
zXU9kKkt6PkGI-waXueXr_9JY;%VvtL{hNMA1`Lrc#$x~-&BxjNty~(qKeDE;>9=Qp
zbejb^Jjnc*kJzd=S;UigC)k+R^uE~>`7&J$CWKDp<H+uS5JKafW|e=}zq3!fJ%vmh
zgicfAy+bF!xVkc?Am>fz#((H_^vIY3T(VqC9w~(NOPf-lyyLvqQ}3Wu;ip(V@Bju*
zDKNz=Bp^}Bl!E*M?t(y~JEjzb-YF0+h!~hE2tNwc3O)cO2Ubiis8e<&3qVr~nqF^h
zFXRSbVP99EY%Wk!s|wlOpPCuxp+5RNqY6yd6k5pE704t?h%aR83S<%mBurUX5Zw$@
z=uHY@kSW^w0(Db?xacK$D0u^}{O}b+vT)IBV*y?CqV+9AExWZqxhYj<vwnm1){lb_
zn<6}d5nBsFVo3)Hu&o7hNe7APxV1no=|u7+eQSYS(j|wM^sNP0(r@Oa0pfF(9isoC
z&F2MjB?$3_@$&+?FoHy}pBKoL03_)YU?uoKv>v?jg#u^V5dA}=(*+NN*0l>B2(4=u
z3glim#MiY81u}vM3EM9e$OxWD5y4+5Km>nSj1s{0ca|~zS*5an=(4G_8|fdCd!7&v
z9s7r3V$Ti|ruGkE&rTPZLbTTy7~=OJ*nh_ATGN3cc?|-OVBWxxyaoXhiUULLHHZ-H
zABKhaHHh{gP~%~q3ABwE7P{P8w2c@RlD9b^45VQpT!Xj+a~CP%5h1*E@Y6W`_Rxrs
zJf=sY6<4o9tm89g{ZbGB7#Whsd>}C(MuxBt>452olxJ9FY~*<T<_rtTLnbgG!$Rm1
zAp>d*J4Z5OLeg&{F-hDIX5(!f2WE|9f0+RPFiy4tz-h*g3!zsqI6$JF6WF>5`X4eA
zLh}3!Ovp?KVTUJhQ29x$Y@&Wg$)u2UeW)m8CWR38Pme&M5ECJk^IOOnJ5hhfELe~0
zXV&fLkV2~WMt0{+{m!zDAvx8+L=`uNOtFOk2}?H;)<awc4?kt=X6lcWf9k2w?EExj
ziab>zpPiqEkf(YR-U-FPnr-Z^clF^F+uUvg6P9mtyA32DwuR*Q1c_3&QA^yz5kT!=
z*;)F1<vV1H0+!~*j!-RrPoGE<3gM<YxpL5Gy<P0>S$eO^U0$g)D|Ursv<DeL><Y>2
zvmgPni^l6<idzfG#68Yqv-JXB<sJ`%-@o!ODBjx>Dipa9=m29+2tJ<Q<Se8?f6$pT
zM^F1I4tf}L|Mg%<UO|TtFb;-Fo6&-Ua%uP<3|-xlyQD%I{ok{|JiW5)dkknPL*xAW
zkj$S#1}fi&5ZZU=mSa92WiQUtUoAiCbrXdXN4;*MaN;O+(}$wL5PqFtk@@=4$`hWU
zbXV$x*G;tEoe0VMqJ{jf)Cp=Ze&w`~uC3Ov-~#>K${G)X?n>2o5Oi0n#_MUiD^(LJ
zPIDhoNOz^qavxzgJ?pv$aG`V7bq^q+bM~@(D5P6bmxO!h00JF<$t#_1NnP?vr(05&
zT=xKBAYCH&z%R}qyZ=UE&KT$4i}cn?_>ICq0e{s5iF90<FH|!8Rg=0P0Roy&kpM^x
z@Ii%`B6Q;!G@cG+*Dls)XNMNbBW*AtG_(+{{k0GRIh^_5*LP=!7m7qIG-;{~FGSV>
z`y4`ob)(pC@9TpzqdX+?5~B!-0;eF2^U-XUgTQHYp^U)5gv{tdtW7mYVh51Key1>J
zp<{lapZ0~`Da0!@ho}Igh;bsq@|Ng_v(pL{@s19dP@YzZRMm7Lg!;^6(WUy#?94*x
z7m*}}(9A;k#m|Hg$T{rmrTX^loI)A!AZbh7LQIBDLJ0L)z&3xRe`+r%lpYOvSqLpC
zgh%_Cj`6}_ZF?cY(GQpDr}WVFLcFLj70POuY^`QX*Xq+cRu@Wd1tyHEE|mAOK%#`|
zLfp%ui3Ae!pt>;LmIoh1A}l~@)rE;0_-iO(>Z@IB{wMnNEp~aJ<j-~$%FEf10q8EO
z>I%w$L~x!M&KVr`r4~flOGovD(`ua_Qk+(s^+F@mD{N$}^<;2_4DQDs+@Wv$W52Mt
zszpp-_Y2!1rUwb^eqkI>lffWiaKCVqdw5JwBv07&3zyxE^J~I{_5k)`wf^v31H!Tq
zz$9*1HUdas4hYLe013<iVc7^oibfa^mW>dhUK$i;3qH|XTn7RZW{`(XB@PP9w!l+h
z4+^6#UZ>NMC>GRk4ntd<Q>ZQC&cvPi|M{v$gpJyWmQ^)MjW9B-wBz*y1#pletOE(~
zk*?t&0Y1_-93%`M=^9R?FnlB#F2JEaDy+1X;B@v0(y;EP#*Ff285NdU36MY^6-HJ<
zJ_Y)yaO?&?Ht<xUj|#`zSjXvQr=qYnA)GTGmD}s%m18G%>DwX`!bV-I2L(k%sGK$}
ztju(Fe5wEDtHMvQna2b8_i5pv$o7JSq0_?kL@$GcCDX!qS&TOGAQ8S!3pbk?7RRu}
zK>P)j>0xoPipz+QY(^ND*zV(nLtu7TNu_SK@9FZ_SGsg#_k5$@RtA=6-6CH9*<raX
zgG8yb!|)q4l8UI)=dumo=np?T*HfY1o*R~nKV+aXHw@24&0R#)ys((uM4`Dsx~0)_
zJTEL?c*0XIj1_!a5N#Pl3=+=y!Wq0<|11z%Pm_dh8>%rHADh_o2lSC;n_Mg~fwjpU
z7a)PPiN?i)Tm=ueu%-v~hsw8jDl`YSxRs6Z%5I^`@++q?s_l06{y}|G`F2l-YP;R7
zEo4y4cB(DU6UT_$$$EdMk8Qfs)1hkabgKy&5(=Z5n`u78!`j|(&PeBuL;5CP;oh*3
z5^q1pshWqvY}*cV+%+K3a)(?<kbpcCmg#DcfIJjNx_TYGgb|04+S#yjKI~jLtly+o
z;kRgVJb~g_*A|daJWICFumXu;bvB$nk6}g0P-4)oNIe&p8#Kv5)0_*-4Vq*D=v){Z
zv^%*05crh_+6^?&*oq(Zo6A9qZDE{8Zoh`*mjysV_g8B8$#jYlC$g_|^>KZQuT$TM
zoFCv~e)NsVWC=)Aq;I5H>>EImQUqZI%~X(>seL1LMGk{VF+2K3>fLQEqev}Ii{Kkh
zixc_{zREYeQs_kHjYv@34u=p*c_UK$ItfeB-W!q1Hazl(liM2-5x2BKKyye$Zcji$
zb4WyPPe4L*NW|Tq#3{xb5fR%H5U^#0X9K16MnvTH1W$o9A|kgZAb~U@g81VhjGjbT
z8y(4+#;*Ta|5Ipm1S=npLlZQ3COA`nMjYC4LPSP@-~wtwL`Hxh0W~2ale-|%XcHpg
zYk1!i$ybsIkw|On7`0h~2LC&buSS2t*Zv*XUT{&Fcif%<Nm3E{(lbaD@=gSvYZ?vr
zWLTRQ$@w(mOO5i6y3Z_f)}7H~zWV&Y_oXf`mv!yl<#`<TzR<PvbKUHhyFA|+`RcAO
zls*39lYh5ge1W}ruO7d}?%d6Osq@R-Ap?<auRPbioBiTbc4xcWD^EPprCYbBULijD
zx9;T@<y_PxOqv(Ly><SHj3l+r!U&&QEkK~T7e?d^0SVcK5jnL$!u*91Of9Tls+y!G
z_`tdLygtxZ_JOBFb^ahCmplkT=>zI*a=S_LBum+e3;F{UOWjrj6Roy1BHu*<352DQ
z60tP_352DQhK((HEi*~fa@Omj-n??Thd?u8c|_i-f(#IrM?&Jv79{CJ(phT@dCeq^
z_ciR~Mg6nNH68>F_cfjoG~Cxj<O@+y0mPa}t84ghPttJzL=JZl(EP+5?jWK0i96gu
zLi3Z$!#zoL-7JRtEg)dZX3qv1?wj4=j;BD{><)L3K-x^h{Sl0wR9O2gk~28!OWnzu
zrSSQTslVxM3qFhBy;^Fg6m{%&cIr31dD(WibHD`R_J~~6K>~4m1dBSoRh*)BuO4}~
zaeaBUr$OCW9Wlkbm=J+Rbp)qslox~w`t!??ON?1%UwSHp^JPRH20{cXUq%p?<Gvy^
zKz+mB^ck%yzi}%LCMy1oTXB#;_$DGZN+3yxJlbBGdnxL_1N6daXJ7e&h`f3PE|d;L
zbm3V+Lg_#R2{*d&lA<0v6k#L$Mw>Q=ymDzbddMr6y6#X!z7q%?Kpcu7ls_RVi>^Bw
zVIkEx+3u)^LA%kT?$}H5PCFV2i4YYeFpfr$c1FelW?(mZJfbv8Rj>{L<NDh~!~-^}
z1pZ|bkjEoIx6x_0dOVU4@eqUoc|3x*-1!tvQR?heguSR4Z&#l3Fz8*MQ?4t55HL<f
ziuwENu!FX*ry?y{$-#o%YfXgRsT)_dsqr98K-5I!YlbO>wy!l2`I;d}K-5I=s_Gl$
z4pOvzy%=#m(v3mB%8MQdZD22YO-viuixK&07$^bcVx)dU>l%)M4eW0b*4H$yE&DAZ
zZ}O!02KKjzOf-Om&Tljv#DK#7wHG^TVnFqZUT#5p%d%HgzGazGXye)|nia1%f&@aZ
zC}#5(ibPZNmgOL)lV#kcv>D`K&|8*+qH>vq5HJQsi^Z2kKmub>v~GQC2s!g&#PZRc
z+0Ku-#$aD$L=?*pZSB-z%tLK-6jxyf=NntA@Joar-~(=SR8B>ZfEyjfRHX0&B*Kr;
z(b$BjNXim}!VhgsR2?4`Nm<E*-q@&2%1RcJvg4wZl;t1SD5m*1J*wQ1>f?M}V1$$^
z5Uv$8y{AXz87CxxHa#krL68_))1zT=d5K6K0!@!b#O)5rfe)A-Z7$N*lEq=#+-gk`
zZ2*Z`QM`OP+()Y$dp2y0tpr01_hRn<XGP^L7Lc%MRx~bhLLdP)D~fIKRcPm0VQpSC
z=fA97#AsG9FKXoSJ0-Qy%7F!}N5ts#_yV_bU;=1CROY=w0%$=Ld2b4gK%#OBqR}e8
zg&`7^Lys?r7KwW$lEsxC_>Yx9Z`LBy7P59xBUQH0D~B3!q1%;^fyzSaO7g0;;35Ny
z*y~Z_`l>~4mBGZUSQM3k4M-p?ipt|#kU&@zMY@xYZ$aYtc2U$lz9m|ix+p4-ZzT)I
zw~L~5e7hAxGJrc;%c40au|ll$+Z_-`I5!p<ANxYfqBx{t=$HV%0JWUO;>MWl@~BL<
zf{E^0PNkm`La=QG+Y&cUXI4bzO?6ySg3yX6CShX^1ZpMQmoUmQE2HujI&K&dH;OmW
zOSlXwwTd-P8g;U(qB0YL`$3Rd6~&gAPU&G09N}u``K00Zm9CB|`~Z-+kXjwZ0pLkt
z5?XIfR4K2$pN&Wv747L5zw>Kdy4jsy=EwT?z1;bQZk?a#-u1;7sN$WUD@SnD9f$tJ
z>GXWpZqIk_{=_qoZ_usl3r|1SrJ>!F7SSZjD>h>K<Mgm$6ZXfav=a80Vk413S>od%
zxCI1D)<p5~kQ=$V7%(5R;l)OW%*Rog0>TX+$b1~dx>1|Uz~`@JHN{40)!L{`?%;+F
zWY*HC#swEt5M%L^s8X+XUArTFY|rl2_30NncYg)dc@@|Fp6dEUXENP>s&m)px;)9}
z4Jn~#pd~U-AOZOa72BRe!l$o83)XIF-}}nr-JW>4>q{(}F<NK96d$k2Q%q>Ai{d2g
z?_2{Od_C)$G5%S1J!UIS6BJ@WW<B}2PvI*;!$oh8Dix{aD(mzMqSj2-XrZ(L%T)+M
zVLK@Zee%}Zqxdi%eO?9Xw6<@LHoVT7Eb!pIzjlU|7`2tm*ItL`0_5vxy$1YsjXZMD
z->}c>7;Q7(MCAu)z=X^<QM@QhuXNz<2(GfR@=~L1cDIK^39H?NL$8?RDLAp-6J>)-
zjXSe@qVi1$a3QoOiZz;Yf_Vz=XYP%%bEQU`>|PIvu9xp6BqY@#gjdS;McD&&jeG5V
z9#SEM_7T!tTo8j4-ZDE9bvD#B<|*xupnqkXgduh$ija1?81#7a>_imzESMsqe|aOt
z#%<5;&vfl(-}KrO&vbs_=`QSK1LMA1@51<?&B1l{ix~LgcQ^MoOSjI?cd-!uKVBx|
ze*5{(e;3<<E>D(oc<d#*U=Pu?8ynfkC}olBjRx%7Mn-W7Y;Zd<0t-)2C-$T7B4OdF
ziRN62vUFpkPpBq}v*Y_wKYoGiOq4#1^g#BEJFLKk@);Ud^x6==G4@N8)oWsuKm1En
zzI6#Mgno(Qt;=FA1nMkYQ0+YXo_p`GU+(r?dH2`4i-9gKhvBJsEeRwS#)(lWSH%E3
z7iIIB7<IGfqB1dx`(F?`7e!)}CKxVr;hm@`JJrN!kv;FuLU18;o@OEL_d*D6<wBI*
zRAw~IUht4;%3mNPQ5>fH#V8wIhT<+pWg0u5&-sf{q(AVz5g=jC{~Bdqlo`$JU%iH*
zN&hP~Om(3}fuc6GC});azueei6ih8LV)W{X#=p%pjajXY+sdXDX?(dNCUmD2MH|o%
zA`-QpR&@0rtOi^KlWGR*+1hASHls-6Njk_-6VE7$@hcBRLS;r#>p#*<`XKS}UAC*W
zack3ei!^>LOHASx6*ZEj&_eWXQOnz{|H2Qzt!WF2a0-6cHAZt^Xh9LaU_{>-!RtoY
zY^-tKy4IMlwpdf7@f%ab1=yOReC}<C1lXD)%={hoxDsq07E|s{t*z(0(#BYzJ9BO}
z?l*nq&IflJw<)&`i^<P+Vs!-2u$cTjC`bSei?!-VR|?cLE;q(<K8o=x1!@|g!(&D*
z5gVt;uu(C-y}cR)`gc@J#y%h+J1Qo(w;+K!Du(SXRx344EAnWTy5FdC)o4$JR{GH~
znJb12R7S^;TI1J~(r7$wa!i@(yl}sP>q+=2A{;!xpqU(#AD9CPn8~rE$k>1c%;Xr>
zQi}aRBKDgct2;F&GMdB?Ih(g*GNUP3Xq723WHhnjlf^)p5yMAT{$<~av_W?k_><AI
zB{(A1!*i56!!w?CRWrzVazaqYyGC<k%A%N>8cAPebl59Z#*<axqt)=hMWJoh+?b48
z@f0X?V=`_93ESt!VvArqT_zv~k6Y)()P*q-w@M!L=Er2*Dp`nI7sM!Tr4#Qo&Bn#P
zm^ku&>0v`_x;Q3tN_Yk<7RO{x2_(=K$K0G!nkN)u;zJ!1A2GBxOTDh3J@(R=jJzNT
zprtXHQUVE}r7`TW$I^#7GGT3NEN8m2{}E%18r>ShfZt7xm7%D<I;MOTbA~=<JmRau
zZ_z$@0>J8+3_3vqusS9$TYyCSRL7!U$@U=zZ=anp^-I}4k_Wvn-1d<yw9hWyKIerI
za3K3)%AuI*bbZ|To39FlYXuF|eK8r=XZS$f7eic6BMc<0*cS^Qx@?7r?6q%W>UWo|
zaC7?mV_JyE$fO5jVc3Bf+!9@PlPrwxgE1|y5d}QpVO$=LvFDyN>U28nHaxg!_``0)
zgM@{LWAer_NWdPBAr7SA93%pw!?BV(WGOu2<r1}Tx6-^2P)B0y_>)Ga(-E%_N+cZd
z3ZWr?BqqNkmEnnmBQbeZ9V7}l603EKEQH^R<gn?RtrRZ=tH!Yy`@b$m@e{|qLTE-D
zi^+5F3{N~9ixr9s@E`$kEQat|)P!z_9E;f<WFa&k$jD={lJ-_>UI?h;G3CxwLw4*j
zy+M`m85w#<nE01TE_S(4ngGXR@~S0-QRwlQyy_1Ug&vPJaGQ^=u2Z4MV-0WTr-^7`
z^x3JH(lPas&u;(X3-}~Xcl(*n-JWT}hCO9`*a?r^f@#8>@|u(;%qe%m00sr0ieX6;
zwWZtar($*fC~NC}fb~?Y^iC_oYm1ffbd1e>+Q@b~?G-}zP)>V=P{!kQOn#On!!sVI
zV_2p|A^0>Ep4N72$3IL3Gfv0q+-^1Dg+Sm;jMaO_C~I@ZD}+)aXJT?gpW)&2nOL!l
zN-2>uF@(>H$em^s#Lws9L!L4I+v&WAK}Y)MJwqucay}Lo7ZsrcjPo%BiNa75cASsl
z^$IapOgVkd#~R(sZzp6ZY4R&_cU_H&%3r-gEExK0OeS6+ghGCe)xB1tQqJVpSVbFa
z1-*rkp@@8dQ|nn{mC|WI{BpO^r&0#QWd;O7z!(sh-<bjli~;d-ac2S~3>^@^O5A-U
zQk<6!h&O-KS|>_DoIcX2c;48cbQ<ZELV1>vak+KR@I1@NxcqbzNR%=%4!10tBNwHN
zjMu(PHb<^3Wn{cgM{9?0X$bVkJ5Ro3Jm9Mu@0CKCnDOzT$OvS3CT4s*BXU_FQOfu@
za#^C3Jd`p%-uiK#yT?<Mf{1>6{F=^Kk}R|r=g?KM@$pAH@wFyHn}<p9D?Sg^^+k4R
zfu7eAPf#`<iPzvjq8%s2<-!9JWly3SUJ`=_8;ogjzVLL)C<U0o)4W;~VCYPX%asRD
zfix{HS00c+nij{(LqSb8tj&z)Y>bPbCJV`#ab$LR!Y@lf&FnZ2YS;_i4Xu23T>5=H
zg6QnHjA=jubaosu&0K2UEcx68&Xn#(Q(yUlxI7C1m)LPbd=?KRlorGzQELw+_Oj&8
z9p|@KjC}~rJSD<%JSFnq4k=B=whl@lS2}sG8FiJ)m2MM&izZm<HUUUrtc-_6o*pDA
z#Sv)J`k$qceN9}PDS<#YtZ};mBsAB!-2f7rYc6*~mX?|gvKv4EXoF`1<$O1IHjpFT
z;C2IqfwaNx20N^6j^}(YyTOL!<~R;tc{kY94O>Mwv;YCrt!_VngzQ$gA3y?iEA<1#
zmNqrrwm2)k->7vB2xxBeG^sPT#bt<zr_kIMN0jy{4KSNR%<8!Eb(~%MZ(~yxehN2@
z2Y{(|s|6A;)p5D<fdou-94j9M03az0iP!o%E<#LVh!AsUT!xsEg}(nHju4Z+$SzrU
z69zXr;`Gw+^;dFH!k2M;72|(I(Q9AD)%!$@X~PQb+qiNler1gLY!z4{Zh-*I{x&Y7
zOOOElHZG$}kTCn(c<d0&rs$FwJbKz6SHFvk=u+~acOWjKOUXj?bTCfQB~7rBu=Ybd
z=O^B?alcxEVt<GmS<$s6)V0Ut3=8$d3_Ipph({1T=JqT|lyr=GmR@Hmp;kX0XB~PP
zjcz;c&J}Puo4@T7AR*`+k0T}|OKOL;lkuEh2{F}cL-OS1sa~55IW5N+2z2pj*AkGB
zJ?&Zo5~!!$F;<%_IU~l{^&p^m#?vHw&bVU?Poa5+#u(oT)TS|ZF|PDXT<)cjy^Uw9
zz!JR#0q9?JdkG};FS@-161{XW9_yJ9y+jP&OTWg|9tqJ)k_Wv@ZZAm|dg-^zy;LWx
z^-1Im<ZXjqs)J(tB-{yDhZ?7ULioXEeGRRwe?nS_M-c6wkbV#(O6s3LFVWXP>yY^a
z*b{w?tC|i-$nzsGiJQ>HD@Y)rG9ZD^ZXKn|q@_r`C-8lQHGPdEO2L=}4p1q(TS_*J
zV;{YaL$h%%6qtY-mymD4g9OyL1p2!_&EZlieiExYz!*?5DIw=Cn6%C$<fTTCB$SZf
z)ddNNNeO&cw<AZu44lG_3^4AlnBpOj2bhwO>q{x`q$vsMTtNb1N&?RH295w~8vENo
zqg~}R4}skCG!KC$<Ftf44lCu8aasZa61nG6a?djpVs}>X26ksN6LOKnBPh;H$VCz)
z3Y(d57s*nxb6$ckk~e_>&OFZq^3L--6UaNyOUOkM!a$mrz#=(|-fOHI)>b5PP9>aP
zgNz3L!W9X;hRl6)UFw$AVraAm0nF9z*Z>L4)$Z5;3Cz_rHm1;WR~NmbZA>Veox#J5
zw|!OkDMmdWKyPD0-q8UGy^RTZVFV;b{l-LkGe$jK7$F9YdUaDmUKo)abls+eyf7kJ
z0NRwmg^{ax`4HHez~}Po*hpiuxo;VbnuB(Ypuw{>A<tv$@?PDVfM4&#b%C@U-H^I_
z<VvHMl@2%Bm4kM5sXw<T<iTuR-k;kOIGCk(EbCH#Rwvl-;YN${>V%99z=ckALf(@A
zi4v+4*hu0NInY7F?n<zl;YRD`yAt96fw<7wm8d1oD?vhMR|4mib3_B<otb?J<-3IQ
z=m=vLcCDU)w71xoklw#8-&^cUNbe64Exa!g`%d~5VsO9mZ9+XL{fgwF!2Jp7{Ur;2
z<v@bGKfSkIm-2Im6G};{p3VA?GMZI_5DO_DVIm$*$Xod!VbkG6OuViO64-|m*r(DY
zs7u?_qjD1DGfaY`?j*n?C?0hu0Z1qwy*vr(()Qw{m;@a_pz%+7CeSA1q&o@l6i6rC
zNdOW^CutJgiPS7!DXmH5oJ+7CqmA1`H3_^;gH3n<??A$*C)n4caolnyAycQ|VsxEJ
zAa#mB1VRA*CBf2TjM~{>5;AoPE`)v|S3wC+{?g*v1bcK05}s#e^@t0hvo!o4#!RdS
zkDtit%chJm9tvGd7)d%FQR|Trml7;E)@WaG$*mr^sNN;FdLUuNrG)&HB}i27QUZx#
z^40ao#GY*6SmUaSo=Mq9V4{zDCWGRdJxCHtrbO}pBoKNgkx%Qu5nyN^_RCn~=E^=E
z0u9|hNqJ+W9(R^~k|D8a2ML5eN!V~3Dpx<Oy`IdO$Nn+SxHa{95_4fQ`SJQxyFp1M
zn_A|x|M249*rnmPhVk<_V_pTgVl+Vp<qS$nrwkI74oXU=3=-uGN}{D-;edEJjO`w8
z{H=1Bhd^uhFb{$1IxHyzyZXGY!;)|S{Qp_%Q?HD7-ke~}Rm#RE<tzplO5>C07TO|#
zM6u(ONLIJw#e$l|{%<lmX_8kgtp$_Z2CB~kvq{O2*vf$<og~%*y5v@$d<WK}$wtR^
zQ#=GplT7gt$dgR*5Xh5EAq2V@QJ=bFT2d*)#fXo_7zy^)+eXv2V7SdlcWkC5gJKp!
z8d%ek=?1bs<YA^I8#l4O6deN(Gb^dgWxgrKt}6U;Q7Dx$%WFz<H?xv*;MM2uW)^ii
z#mFGxZe}G*=O#srOboailr%djUlWxqm^LSg7aVWLSZNT}7AA8(NcvKh_Wj*DKi#Dr
z`_ok8h6fiW@!m)hHElqn=D$g$Fcq}hb?erpyM6yXw+j342=?Kb@Yf(=-+z-bhyjVR
z|C_`@g%cCt;NfC+e5#SISnSpiOdu?FYY38r+`$482#aa3z(oK7W5r>&yknH!;CKks
z6OM;K#W+csrh^I)oFv@e4jr{^7}h>X=Ilv2v)(bb`wKrwy7$T&QY|+pd2H4a1TZ(d
z^#TdZ&2GIw0&_FfYXq$i4XMN(N#`%`8Y6w>J3K9_%Z{Yn7(ohJJCX=m$q_fCx_pro
zn?(@lk}r}n903W<FOo7G0SV17l5RNCkjULh9*%SXfuX$HZ4HpHe7D;gAc3?yDZ>$v
zTos<UKea}qu=Z0jX9nI^G5Yxne@f!B&O91vM2&GuGzQzV0IS3)w^n!r#8YltfCS<x
zY72hzwh>u=CdncTjfqXqB;~D9a5-Dv8U+cZGfCVUT}H#d5w*pIB-^*pSl;P^TNQ9o
zl?!fFKmy}JQoa}m5*QbfSQyAdfW*RfAu0cnib#<Vx{$;_QsI6#l>&vH?AJxciHe@M
z$0POVB3@4nZI?tLJyY@zsh~nSDf}T7PN0B*rtZTUzGvK8*~demjeeh$%=JJ92z^o+
ze*8`<K<Jag@%y)w&}c+;8sf}<&v?RDImE-DAaY1bI$a0>V@OKgIRXicAt_u-z(1rA
z1`1?O$M=nuzDnj{kgs4K2Kfq>l5Q6|z+frNB-t2<Cnm5vJ}^#HPVgWol9-T^H)tF2
zNMb^&w#d1G1jK~Y)h+k{ZbS_}IVA=#2xv}D$pH)!g-=e&0SpqFlT+>hZbYHP^b{Y!
zw}3#aPWNn}P-41Q4GJZur{n;JFp#FFFo18x_-zb-m&!So@};h4CueFAR=m`>Dl#jD
zd)U3HwHsp`Yx7fh{l3#uL-AGNr|5P(Kq>RxQb3}V`6+pw1tdzDpF&2Q94kmT*7+&>
zy_DaIA|Xc%j4t|0$%2&n-&BBS5H53}yD)`VE{a^kWhSDzMFlAe=dR<1p*)BE^pR0f
z;dn+-kl>``65p6l8Yd;c$^#O>P6}(_BOC#@be6EEml=PlT;d_n@LJ+ki>Azylw2<w
z^C`0=h4q4N>43y7oh8h-+=$d!lB)Y8e@m9Qe9;IjNj){hM>jJdiISJG*2|5XDwcU=
z(ac$vk|7ObP}Z_ks*F!0kff7pb`}4cNn@HhE7=FjjT_sp^blyhUFp@AX3ol#T(O}7
zgq10*xBOmOV^mFBn^HEi>sH`i8h*K5NpokdS7(|#Yg6*$+|UBb+7x1W(UtU8`Px*Y
zjhDNUP8xVuev(o*T<%KAh3-19D<u<Mxjw|Z@?-KVjcGb=WusRbpS0QPSw*vPt7jF>
z#;xu!h6<3krf>)`Oh8~Zex73ER~c_se(qt=bo|_F9}4V0PlZHMxiO!PpQmufK%d5G
zOw;j;6nl2HQPt)P4}#|97b&?(hY%pXNR^62G)S27MGAikw3Zx8W15!-QcnFf#wWfu
z2RsnER(Ze!p(%MFC0}2J5<m{5@cQB!0fG~PqbaBHT3p>~bJPQ&Yn4Y+@;In5KO#7q
zlAo>t36P_yS{Z8!-eC>k?R8e1Gr=iaXS{8OS#iLmW0C+~F~{+Bu@dJWo2>!~OF;9#
zbD*bKM@AQ8g~j_TAn|ZavG`ykQG(2+@ku0P#}s4T60)Gi7R&eP@a{HbLGm}jAxrDi
z*kYdkB3zg{4uw7_k!aw9=649_DTK!rW5X$cG4RJ1%hv+&sx@Rm^29Y{={CpsV&tHI
z!3Pi2CSh$(an5Sz>utuXO2M3B1Yoq$Z9=u4#~#~Zv}`@ESjJjl0%~5djI}_*s(Dl&
z+AcPs3M@q3v0ZHc%FC~^=XV%!c3_85R0ghy)*!=$E+deCSx5-ia|D?79;;hzRF=Kx
zsSxgaUZK<!?~w{FG@(#X4jWo+v@LTy6>1*GQz5_LkP6*$ZbE)x3A<Qr+)%c}Q=wK`
zQf!I|4jHH{DbCC1FVQz47q^T(v(xxP*)mUsX8p2anJIt_RF)MZQ}8%11><)W+r86x
zvgs;Mg{I`HVi}$_;Zt%I4W3CB`l1Z!=Hi?_&P!hynLwzz7;)mqxIv_rQD^jaCVpdl
z(x_?gv|RAO1z7KNQoO?g66N<!W5xcMI<`El4Nd2)bcX9@d!_EsG~d?v)pC4AX?R*;
zX_Y<#tAiH*a6~+I!88xG7?DPLnvyf(5xQh#T5Wd)2gQsc&f7uQR!+9fcZ!1M)Iiz%
zwCrbaVcYz)>}QZrnx94w;Ib2R@Ng0PE@U=+d=YLFaPJK!antf@I!LH2O5<ue#abZY
zYZj$L;;TzU@&l_y=|X%CAM2y!(1F#Wbn9#Qp>a9Qq4(LVh32(o?|Y_E>F=lI-2=#=
zocGh1XzjRZpgv^Z6q@ZTKTJz^U(N&E57RPK0tti<(_yhu1W7t+ERysxD=fkITF(9)
zHfL5W_aG=@Tb`B?8)N{nJe?62;6Vanc^dC%cIOBfZmU__i1}*8Y7c>ScdI=F8hxwN
zndY*6X!Na4w`|3~CRR@C!&-JKVz#MR>mktku-2;v4aT);8Qekz2y4^g69cFPmWTE1
zxu|(_#d;5cPN3I&2(&t^Ps@!uRDiHPjaNwMHI{N(9X7G!QS*T|n>+;i{>&y1ffk2N
zX_-BR3J^A>@drbj=o>cWv^eZaJH3j`JN#{Sc_0+8?eaiqaoFXVL5ssKGGhQO4&`)w
zyf^LSCe4AqHhVn~S{(LzAas7b*RzBchrMLUB0AYEr}N_@X=g{u{I7E35f6m^?C6LG
zLI=o4(qVDX4<&#cN#lax05LLfJp5ByxjNO34a?x;EeF!(bCqBSr&F%bi{w9fV00h<
zr*v3EH+TxLpVG~m^S1!X>9*&oG#ivLuWfhAgP=p;Q)&591cU%_DxDC~G)O?4N@Lli
zfUum-b8FJdbtznDAam@jnXUxGHHQv$Ytk~<f;6yd(y115z|khZCf)j4>(3kuXS(Oo
z>>pY4FO}y!2s+I@=hcW#bI+y2A|p}GPjk<u8<+7<FqG4k(u-*pwat4gFM1I8h6dP|
z=N|p<(Z#gfra%W)TukHD2wH;5>B8x6Y4(n7wygNggD3>VZyp5wf6;Gg8F)hn5Wl7I
z4@~qYc;$2(wHGTYF<Vsh!leRPS^DFmUYW~Agn`g2BX3?n1qi(|c5Umg903<q`?0<y
zX19ud9zp~N{XB#S5c*{<S0e(1ei>Aw3rD~|Dhy;TYMW124D=B2{(?F%BU7&BN)!kK
zGveMN%#H$KV5aF+*1a47f50%9eNo%Izhbb5Py`zWdo~mSVX#+=A|MQ=T2QX3T*3b}
z3}esKG4H4x<{`v@Fw8@U0by81#=TGh!mteP8uJLVT#4h&Lw2%``Bvo!4<ZhT5gtSw
z5F;{jy8snHjL6h3b?0sZfsM1W)O^ENInKjK0ApN6#&zXN0vO{mh2mW}kiZz1!Np;o
zfh<?>J<7@K^?K%(wv#=GBwBNFM&A5@3?L?F<hw5*0Wmp)cV9lj+JeTwi)4#4isOu`
zZ(bjG3_sn0k%A?Qz1pMzvp6Gnj!*;4;tY0<v=IP_jlkkesgn`OGGbug14G`=;1lDN
zqA6F3DLA>R%q%Hil94Mtn1Ef9ky~4kfL)To)^@jWE4Ap|gC1q(-WyhUmeqn~D?H0;
z0b+$`SuH@UAj=RyD{51`JDthdmT@MQo2z`G^%<PP^8dMNO3V8u_F^-$U*#qj8%)@|
z$sLLyfxRgc6KN5Uz}}QWzV<Yk*Ob=V&sg)T%riH9=0Q*n?lads$dFJ*zRU&^5T9j`
zoIXhAH4AHBXL1f?oTr<c`+cFWGYDqzZ7{VNS+^&{9%^BBZm}mLk5<41*q%%+k%k2c
zuss=U>L@U4M&|6#D4EoKc6+w1xmlkTwKQAZ0G8-e2*9-cu4y2-f?VxE0&RZ=tNk1F
z2LDxI?fXp5PZ>6_r8yw_eFkZOhf&H^WZ4fHC7QZp_~gnYYun0f(-gD_gYguYKV)PK
z0uq=%WDtY!zoWj2Ogx@pb6c4^%a40XWXSQ1eAymCP&%GLLaP((Xdc#1WpdtN3tO9y
z#!itL<cpfa46P=koX@DK&fJhT*O>QKfg=pTb70oEhJXZS4H-fM79<92O(uFC1D385
z5Q85koyn-@GUAY0@}T!iMjj?f7WS-XGn9QGzuKJY^lL_mrAloUy4EZ&1K}D$75g<K
zPqZKjuwOGc(V~-y<`l&BVE=cmd2`zyS#d-|OsMq8#>JH~kWlH7l{fo9BJ}8yZE!D-
zT8ZSrVh?umS~C*rk?nXFpKQ%Zt4~&(&X!+iYEAoO<&?uC6woItryNKw>SmLgQ;at-
z%d<(3f#8%JKOixF24>}A0TM_9v(hJk1k%7PW*+V}1n}Xc!P%VQS@EeiT9^iB14+K|
z#CMU9fy*il_{OsoB%Xp6Z~K5my9}W!--wMTzKBHbI#6MD$PCNMS69G<%&;uB{J1g?
z8BlMrrz_0c?6<P=9VIY{o5fU{L@zPm+bArX^ETU7VNNVy*#Q3tZXisyjAs9-G<#%5
zXXSN%Frhj+i>ZK5S3(9RjAgajn19NQ&C2~Tn2;Hp#TEyX4>F*}v$xuqPiDr;wk9TV
zvp6NYiOZmYCbH-a<}I0tS$W(R=3Cr}SvVDZsTL||@yYD(H<&lpo$TSz)^;-C;6Jw&
z_3E%TJDc-))|Wc#XTF=wi1YIe=5b$Wb{6h~=bW#mYRzLO+nH0!=Vj$^1QQjRmz8@L
zkg#W77JHX<6i!}E)qLMsb)&h#SNVQcb~?D^#<OyD21!!cm<R+x0^|KG{_JE0eQ@Dw
zs_+J9T?ezBTDif)ps0OAR_+lX1dI(?`A^;;fw3Wr6`mG~tBKky$8M)vF?Kh*V;7I0
zxY-@MAi1bJcCV(k+b+iLtsppcxf(Qfx4UB(Pl2@E9lIcbw4KIoZ))HcVeOl2&P6ov
zX+QgGJG0n1c^moXZ?Z;-Xy6vqz<a5I$Fr(CVdP%7mGK17d)-zB3Fy7l%DWX*uLafp
zP}X_xPV-S;<sr9;z(x}t%F5I^NG>Mdf(HqZL)nIn=v6IXpp}ngS;vm%KiVAeAgGm(
zWaR}{2m#_qwpi?<K?34P7Q1Nv{(cK0Ph}nbE^~md@{|WciO5q~nKp$KKu%>t;-f$y
zxfZrk)Kx90!D~cUwFCjp8n>@NLbJy0E0EBv$+~^jf)WoGL|=6P0iX+>4U~ku;Pw@s
z0_lR=S0I6Of%*zTf}*wzYd!6pk?f&+&2Qp8ZTj#7EzT{`L0TVM8DOiaf3sC*u?u+W
zKJ$etu!M7l0ATyr(m8_!Y#&=*HvowhqK_RLV2c%k7<`53Ypbu@Vug@A==HPZ3L#lo
zA^O|2LQu@wk~(6Lt=yHm$!7Q7Z+7eiLM+L6gsKj*rAr0LMP&pJ64--md6^s}y#FBE
z?#OS@5-E;l2H7Qlw04MEV`RL^d=HpA%ii>AN(Q`X%a1a&<Rjrt8>e{mfw-155JoWd
zLG!*FMtFA7Fc@LW;RqQZjIibR5I~ZS-Kw?q3%w`NDy+@3bB@~%d(f;=3+LH*m5IBd
zRy0c%+WZ`_H3-yop=%XLU@o+!Hv$RFg*N8NRPsixV6*n2tt@q3{EIooSB0OV-|zr>
zAKLOF4oK*IXv>Q@Akl9h+Ucd}H_G)8gZfQfV#|v-l7og?V#|v-k_Dh8HZJ1eomS{U
zV7ZNpIB9+nXILk*v<$Rs1U2b$TVBM0Fm#vOI1qY{>w;R%zU^ebP`27rp*CD?%dA=}
z-iE7fWYy?TELzc2TFd_RnA!00wYL0fCYVrJYs=XO61Zz^c}fQo!(pvme6y@5y<32t
z=32YfO+0f%0^m^QXsvx?d%nAFMe}Yw(>t5jRjzk?8%*N5qYxyDU2n@>AV?Iu-bQYm
zUtnuRZe}z4PiJ#L#bytJQZSo62ui_hw!<O~1QkGRwvh&+G+8T3!E9meA2*w}+2SEk
z3TBIkKq;6lc3A9vpaO&~HasA|r`3uAp`Es~;Bj-RulY`|ktyx6)0TNiNI`3-jYXPY
zK5B)ui?+vB4%iHrkFH`JhnfFi&AOPsRe|aDEahDGxNZR&K-gnPV?1yKiQ%=!jvtV2
zff(E^?6uYX(k)0H^!B-KL9*Z$zU6L#yk{#)-yE{}t#fu}fnL-S95gLh;<h<Rm~zOL
zp&Cd)9<p5*+KMta$7~*|JqiK?=$O}-l)gFUH72ERj@dF)gD{Ye*(D-W!$;Xp*f|$%
z5vtMt{e&$)?}@Ld;j)oUpZ6@wp2TdRtU&-=OpcS}LGUe1kWl&AX5*eQ@5uga%NLTt
zh0xD7b|<(b0wGW}Hq*MAf6Ug{GDriLvk{~{#D!qjFE;De)qFVni!GzQ2oI5du}f-8
zB-Her&5jY$Ia|ID9O3Ezb2iSV@LdQLhx%Wz*+b8ot?Uc7j4i=MaTjdFmJ4u$Fn~|6
z4KB%f+nN8Y+0<V!xCFJP7hCbUG(@26$LGxlGeb&brNM;mkP=iH`FY5o(!<!}FPLpJ
z!%E}@D=;B5tOPR@i9*PLdW)@m!F(X|R*9?)n8YnXZSLkWsPYKb;zje`%!m@%EKy$L
z5hZAr_FM)v9>u1;Xx@|=RU+RZkMatSD#5g*z%fb{9?guG%o{VKOJr~fCdwLJg5VMh
z5o9pD#<FK#GVjlfEs?=4n2;G;f?yZv5y)U}j%Q!LWZsb(@5#`stK&%q^A|Fhd=uGC
ze>IzCCYFfNN=(R1EP*4&ISWW+I485W{%W?gCwuKfubfY&_IaOTa(pFjMoG>h_WfVY
z#o-wxxV%QqUqsD6vqY)QKN(pH5={-7AJx%QV9ca?)0d!&s2^rAyPJ7?W|nIUn2?!8
zw)~sRfSSt&bTg|mbKU;L2ik~B{n?JopdaS5dfm<Tb>_S6SH$~aKD8e%-l8n@!@?5$
zO>;Yz_mWwQ&FpSAD*=Pw8>7cSTv$@Oj`br&CauHT;*y*%OW3*Y=F!5%B?wLUs@R(9
z_fd(sxjgJuQ)~WFiS#~rgz9`$A{RxFu<D}{EQ*xZY)y4tQG$DmO<3-uh-mh|YNji|
z5Wxf<V+^b)k--E=E-o+cfCSbGsxSHA)>Qk|?E1f%O)FP>2sA=gm&g-N$N*t=N$E8_
zSqKsct4nZ!gMag-HIW;g8Gkbe`^q<#$VCfWC~Yi}ixx<dqAp)c5lU-n!>#P`znkkS
zw|eDL?6|c=W@I4)h^-|l5xRl|#MTmouH-jc(@5W5A~v@@{(;zgyX<#*1jX$o(qn>z
z;`S2PW45N+?JD6Olg<05skPtbSwQR8F0buq{n}L`9VQe3w5tRTvzLLMy#^k$Bxgu%
zU+Q+7WsU}tPUv6e0e|6%5_f-a4fXNQvX3YAFtzfZ-9E-6VE^p)F-TzlOnpq(Vy>Yk
zKU2a!@A3a_oqv#3#g)fro^PJqn<|wziaO%F$DMm`U%?qb(7-T10e`SbTw`tA)b6Gd
zM7DHA$Msijxw|#uFcL%(REEYyKw?lw2_jB>amy_&iMm7tL;(>8G@GEJ$WY2CD9nCN
zcVAw%YX5uRbI&>5_x$MY`}&u6MZ;iOMtnIq%Kfhb6EcIN_&cN3$l%MPqx6iqUR(Ro
z^pz%=B|k^gR|2Bq=qNX~1ft^TD8`o0%Xi5nU~XtsW?oRLUF<bfc0#}+P;9>lM0{wJ
z8!iJ89~$L`%Ru_Yp;05|1$MYB1k*3x9b~%#J6v`&<mLu$xa>&ui}wUFTo(UMk_ee!
z8Q8@zAe=ToaD5_>YRnIuhk>Y@AEX|hB(bq5upWMSo|kK16u9i*k$L8_1BjwUf%7mB
zMT-JF%(B|-<b3XdpyEj!+^WB`kW8=Z_AVU$KrpP%rtoBO?~=fz@B{#wmjupIKr}B2
zTn+=#yd=QCck*_V#S6=H!@b_W)GsTGh<ld>?$U2~5Lp(m`#|QKCQGU=*KgnJT~oh2
zaQ_8DL}Yp3j&KGdvOHjXL~noyXr;bpzBjdDWw{h_;mW|BPzjGP1vKhn_Q_)Q)z<3z
zgZZS@>eT2wLU46zbRdGOPa1u)82t%n^wSo2xt1qVqw~l-b4CZE=!w+mKomV8M*j&$
zZ{%-{pki;JuU_E&{qU!QVX-xKqZoUgGd2K?>(X}uqH$enY#<ufiLpoXPK{!tXZ8K}
zc^B3{TNV*xKO4AQf(Maj19Is~BZ9H}^q=qZu4?Eji-@AW)IW{J*nQ%ktulw!DAs<Z
zG;5*vR;Kxt^xdIS(^mrb?m%?B61Y({P=o@yu>+ESjbi>yrGNf~H>a|FQ(1@nZLz7W
zLmaUwaPyMLpkq@&_hfRo5l7^<2AOwE4o|G?<hRXUo*=k2aM=q)aBJYQ7fAMQ4Mx1<
zvR4Qud$$GIw_Wx+8gg%?+3QGT@Ai|~+bC`9uHY|5wNNa{j%tBaWmg(ZKveEJ8BC2b
z{^+;CGy{ND`pedkPlW!mHRKbaKaD1s(bO-|^k?aQr?6QpsQ8K;ZYk<@pH`it?|8_2
zefWpLu%eBtDH2y7*|?erK=((f!GP%gD2*#1x<8V*k|3EP;cy_(BYV8RZa$D!4=O4S
zq}2l&E_W_F5ETak#w0SYI7O2BV4$DuVP5fIS%sMIVBq%t!i0*0L1d>nfv7kbxJ83g
z1P!=$5`g4DnzBG72U05o4R6{`PLXIEG*%vJ87!AB(Kc9q0g1N3)V|1|V^Hk-yR)!w
zQ$F{29qTZ*Xs_fCf4nXo-ZY6>d+SWwI1zx#-Z~eDKveeDxwa9A%HBH6`i5+vYm(RP
zD$Rb(d-KeTyF%CILlts(?r1X%0V32DvKz`Qv}(eVxrJe7ahR>?(=(S0YcSt+rPE*V
z&Z+F=flUF}(6TUeDF8&v!qBAvkQ7)Lj#wPp4onCp1?~^CzYJ{$=4i+*3S9^0NTk3o
zLg~O(Rh!qKFYOC6&xhI4<NxVB;>`ruF<O&p6#7EfC;+KcU+8)vAj<nfz71rW0!XF$
z!n)_Fl<XlF0+qtizYX2IT9bJ4h0t`CSX(;F7s`ec2fh%x&XT8Se<4hRph?>8m!3HM
zd#|$frE&$O#eS(=L1{Q%Dpyb%j+a7W;8V%5=6r5rSn+<S$Gzr#GJIp0u6b^j7}ylr
z7yzJhQ|bsHDmR5L27svC6cPiwWPsQ#ZrY-czV7WFyQM56A+RO%?EN9|AhRXpjQ0Dj
z49T=T)RmjOMGf0SxA3Ofczk<!s##2iV)6L)ki}%u-!%)`;S2}Ba63}N0V!@rYB-?b
zO%2y9Hs7N$+_6jfEg&@?kayjanh%JgJ*oMCDB2_D`xPhZWLxsNePP8nVQI!2UXe48
z!*mO3i`Z|!wciu~I`^lx0HSk$YCj-4_ly0Wk&dJV`{h0hGlxlsm2#5Hlltp7y?Z(#
z*+hT=`Onfs03!ccng~E*?z3>jVV4L(Fo|$5%nrCja5UsTPZPnBNQ6Ts5yZqT(#Cxm
zmiq#I+EzxwP;6Jgb87NsYGxoBzdRYAEdq}jGf(F?W<Hjh8Hh=arDg`A=vZoIph$|D
zWp`3*K6fIl_#o1EZ}WZ}od{|F<=VYg7L45!W$ul#a*4yKV7p*UX!`gz?{`;pMcK>E
ze{1#;FEcO7PWuZArF07=Rkt9@EJEGCrrPj?ko57lyt`)H_kU#N19f4PZ7pjPH{2g_
zcXq1nfhg01HvZUkm7|>#ntpk^_jc!lkz37XDkqkHD9YYgRwu?=5^<4ms%~kN`47~|
zm4HTsHp-FYe^N`riaK%^09p!qmqqTXK}$jJ!%=pW97kb|xFX7|M)5zTiaAM0NP5CM
z-VGC1M%k8frQ`#7Rm5%JCySJXcvOlspT?~c_iOaFcbK<Y!=^dPsLDd5UTY%PU;vR>
z6A|!cHAbrhQLlb<hxcH8Z&^lyyf<<U20Y00Ml=|5(rBxgYpwq2POowNT6PG!Vnor}
z$Tb)6AhI^1xfqi5fUUsXt5N3l(jRtuC#tUHr)|=CKrFr*xh5TmnpY#&qytg&YUG-9
zAnEmLRQGyhn{*-ACjGUDCcRr$hqX%kvNI};?)P%1H18}IB(3|-$j!~bML|2GGi)*e
zDQIWJ_(F28RT}r*k^P7QAh|noc?U#tcjWp7Ad<VIw0UclG048id_+wLP?>$@I>>kO
zzVge;U~XUeWo0n8FCy{Q$UVVr`P@*%mYAa-dcV${F%+>uw@d!qZxc6nmwxlH*In7r
z9XmfmMOk<3nFYPVgtG2f4waBbzD?Y-K>zH3x29o1Sw{T4Aa;X!c#v5TGnl{67KEc0
zmnMAb-CsF=acox(qe)aPjz`$5UV#WLj&ad{n}UWhb<`7c4g0`n-s@-f#KTTAYY*Fm
zO~=`Wng;#GK~J^X)46RF@DQu<)LxMQqzE04NK9-2jqI3uvmUrj9Q?4p^mDJd{^2-l
zJ2i-iJRF~8|M3PQ@^H**A8s_F&e(mqe&%!Uiu&bo)}9Rv5s~HbIrdsRAR^0SW>RH=
zL7Vt-g$@sSm({O`vu0hl5D{4sSKA3(AR;SbR`SUb;x-w5uhROE*IK_S<_1H_KZuB|
zifbk14Mb#B+|<JL-6F!Dfvfc?1K!p3tK+N<Mu>>4j?W$IMC5<?)$v6W&D!QR`ET$s
zeb0c`R{vO8ME-bxtSlmbygw!)vgf@`{w!ak4-I%foVX^=+UZD$h^&dvws%7S5m^&A
zjPvi2-nBiSTN_twk1K1wsMNO~_C|Nk>bPUhb;X-IZZFR2xapQTvu~f>P@FdN)?07j
zEKoT_)H#$h(`VksahpQo<j`9><nnEE@cPXi#W@|E#CU7*`i?o*-BwJj#7~{TSYiKv
z4jT1~H+9@OyEvQU8c*Iknkufp?fRLw%%)Pe-ZXR04R@J?J}+qCwtzcsbG4do&M>{&
z*6GfUSu?M7hq<@&_G@G2{N<kAc5*7WF3zmi!;g4Ve#9?(lmT?u*2SmWzyxBXbup`J
zWQYl*Jz5vntdH${nGno0(laqDp=HqNC?wJ|di4>ny5^a<rPaU76p7}(ICDwOoZ{bJ
zKl|pQo|_w%obiw5lu~;lYr=t)x^g^set(u5c6R3l)LdeyJyS^rAbJuKs(rDWy5^}-
z?2fAjQsuswofWb&zFivcQq0ENamA@}Rx8H6Zg!*bR);w~)f}2>JyYZ;{o6S@AOCj9
z=?S)QNk25Cg-dFcV%L77p2AD9`^E-Rcq!%^`*T?_*Dl?_<~Z|KoUQ3Ez5KOzOZGcb
z)a>ibp`7~r$Gr<qE3&b(q1ax$bLN~oX8XG9xYzQX;<dA9&BUk0nZDk9+?$#$&b-;z
z`4e8!iMq5Z(v@s3S4A3;&E={{BeGelVqGU)$>zB57Os;;OjON|)ZUD<+hY64;%LZi
ziQOlQBQa9j8p|ik2gBvBcrF>)6;}+9EN@j7_4vJ2BlHI+yp8!?an*Td)y@cMv)_#~
zW6Y|Z2uR()rnRa9;+1z}{(qvi0`hQotcQlY%L}{Xj9JSqRG4<htmSSuOrZDTp4tA?
z!h3OMv^WPIaqoLEUw1N%U@j8b6ZgF4PpsP$XBr%jYzx^FkH1J3$HId<-;XongIKR#
z?p5n?m40mjf@u}yG2HLRW5@ZN*#X4F{jt7@&0~fBa<MW~(l5o@su7QSWBpnsb=zAm
zSEfq#O1WelnrJNd#ad<j=HkBCoe>NbrhPG+6gh`kxM&~u$EA50wq6zY#~ITk3K_Qj
zF$bu>oi%K<iHG9S?OFeCGQ~sXddZB*A*t6@G-*@wxi8|1<FWoY=U-X<Ma=hBD?vF`
za{ox2`6|{kPW78R`Dxo>9^i;0@ws+qJCH~?5;H>~5d<WHj>O?tM39WggkX|?Fin0(
zp$>yFv;VRo!I5NIc~Dw{BhqJ16^DNtXQG<@giqBlf1m|qqnc-!{M$6Dfri&Di3C!o
zZ)4`VI4(R>#WgT<RmH=4g6FT!&s9~mCi=M9g_X!E(_q((0nq`r=Q0DS;XMkQ%ly>Y
zQkgD2*7wKOcBzcnpCv?ix)iO51kKqJX7lvF`Tixf^U8V*RrK(81U%HNTW|CIF@<jB
z90w7}ZiVCKv*ZaTqOXUIhBTGUJt|}Vsu3z&J&M0-B&va^>QNV8Va`DoNELh3C6~)$
z10G|brTS;5`}MU;m5W=5s936q+nWuKj4$-lr~9`Q2)XY%y%LdHHBRxD;06>ClFM}C
z8UE73vT|J{B9}>Bt|5k|<#UfH&QL#ehX14J5yf5{8OTrLYv@-h^SH|TC**GLY3^%C
zXr&v5`~O~f$zv)z)r5(ChR$CrF7lSZu@qi$jml0lBZ+AelD#VPv>sXQH+AyM9*_u~
zH}6#=?f3(TRIg$InM5Rzi0oDBX=Ni)2qq$*Qm#946iR<exrlTmiO8oE5o!KMm_`uf
z)~n10m92SA@2d8<&jQ(q<Qc|XuiV~TAaz==0@J)u35m${iZr)%k}u-*YQhHUBpo8p
zsZ*XBJgc(f<iev&c6vTnQWd{fnqApT&nPKQDSAM@#-~f%zF69DmS0`@!xxns=|ZKz
z7nM7p6G(wCDn2!&e*)5Eyr}Z_24;bLAsCM8CV!Vzi~L4aV)e+6D?2xq^~#HERBj$&
zx_Oa}ivOvtURgi1QC0uI_>8BbS14!NvlJbL7u%>Nq=g$M3g4(&zvsUq8Ol{Vn^eU%
zRax^~WpO&^NdM`>s^R*?IsOy*P0FqD<kB2w{m3iZTL7sT*v#lv0V(7UiWxo0Gp@#A
zUA5AcHU8+r8zi}jZKyE4A#RY#*K;H_H!J;DHU3qF&1uF$HDofD4?CEs>6=QwP~%T7
zys6v~-%w$CQ?dMnK`u;W>=vatva_YIMY%(-p~AF9B9U`BVIn2BDt+^L{-oko<rWY?
zg=wo|0YMvHzcinFTUETP^lPZfzpYsJB%|m{CH8ly%r1%jOFDr>8`zFofxPYx<!(3t
zQs*6ti2#W<Aknr%1-o1Z2*G5)&NKrYg^KJ<Gr*A~19nOV`~z;{f}uUC;(wHWgF{;K
zdsJ0uTGDgHGw-X+#nv-GY6G_I77)GfOIsmUFt_~lD?Rsoe^Q}eWhNQVK!vGaF%c~N
z;JM<0y-L4(zTaHfn>I~Q4Vk7%)+cZc551z&6KnnU!akKT$2AHSrhRI1qwx$E?XYM@
z=_R#z=7Y55h6>XM(sIkvj&sE`A1Zyg*1x3ip~^J5I*DgKRIP1h$%MIR=Z{KXR`93S
z{jtm>&E+43=|<dlSw6R4ReVYy|3q&Y>DTDj3;y@>`xTS8;>OFwjUTJb0qaH}ZUo!a
z_dpEyu?p-L9*`IOSdF>RxDkjOKUVbzoEwE;-1tfAMn|DSpQLVdByr;>;>H0<H+E<Y
zsEWJwdqw|Hen3?fj2mmjjfZiYapTg!&lN!CL#T>pXg#dBYKq;bKq~r$(ox_y6}~7l
zi4(sNrt=LG=u4&V4j4OqNq88ma(#~>PnztQc*i43|CcZwQEpgQW1M(IF{}%XCY(5^
z^s&H?3WKSqxseA=gW_pfGgKo^{95T2E*CC*oq8H7OkazqZJjXqQKft9DDG$)ST$zB
z%2Da_ibfM%-Z7>3*ZHFg$I`~5#*D&_N#hY2CR)C4l#W9`E_|ah<|Y^_A!D#_6zdo*
z6GO0XmA+A!zAc+TMquA6Ofbr5;zRVf((6M%C>&QA+rP6h8>ZumO=Gs=EX_JWh=x@B
zgvywWZWJeXBb-odbhDb+G&iJlLxiTG^4rPX2Sci{$)81tUY^f&B^5u{9qjR_?n*e>
zTq5&wiOlXKGe6PiSNj)tg0U0?dq55lk9Q~M+f4*O+}54YXh{nLBs9B|WPW1%SRt6u
zyf<-utfNqodlT2kI+BFuy$PYI*}hW6wKoqW70Yr-WzEk|DeA?qRGq2cJK+s4ZH)aJ
zEAtN|E?Cc#V0|!g!5RXoAJ~Q~kdhuuh(zfP&XaI`NH0kIF|`jRE)XHY^H72p81TXa
zTB5fnetYeb#Ek+W3N@iGU}FY6ymgNr&knlUp2T%35aH=bh>Lc^L#!^<T^IP%YL_N%
zP<5UO)ujmm#$8(IAyl>g(*^!Tp)Qvtk*cMvD{<2m`P}lP;!*6-=FD*AXn$h$a&edp
z(611Otw=Jf5*eU>w-b!RAXtY1dFK_W!+=zMMd~mh4qK5VtDM7xU>vqGb(o`2rIo3}
z97!CuQXKZaIE?#qo=hr!Q~KT*uF}mvnN*!`8k3RYpI&TaN7q2A1Gb}UAc}kCT_tt7
z;YL<m&8_!;P<SeFqhg5gJeA0OP%;o5DXw^0AFTHm)jnNjGE`xjX?S?cwR%~DKdZ1d
zaY-`LIB0FcSr>B8*$hTrNyTq<%~=2Ms@Es%{*m~fA?DnWWcpnEgE1!ryHN{B6*naA
zY-b<^ZAe&&DDe-(oEwt3&zVyQ#+=Wk=5!QZ;kneDjwI%M4s%|cyXDr7+dC#~A3Wv4
LVS36qf6V^^ghk`+

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 76bdb5e2..02d39e00 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -904,17 +904,23 @@ func (ResourceMutability) EnumDescriptor() ([]byte, []int) {
 type DenialReason int32
 
 const (
-	DenialReason_DENIAL_REASON_UNSPECIFIED               DenialReason = 0  // output enum; zero = not-applicable on TransactionResultItem.denial_reason, rejected (not_in:[0]) where set on TransactionDenial.reason
-	DenialReason_DENIAL_REASON_ACCOUNT_INACTIVE          DenialReason = 1  // the requester's account (the billing_ref minted at Register) exists but is not active — typically awaiting the Exchange operator's out-of-band activation; the remedy is to wait or contact the operator, NOT to register again
-	DenialReason_DENIAL_REASON_INSUFFICIENT_BALANCE      DenialReason = 2  // Requester's balance too low
-	DenialReason_DENIAL_REASON_RATE_LIMITED              DenialReason = 3  // Too many requests
-	DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE       DenialReason = 4  // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
-	DenialReason_DENIAL_REASON_RESTRICTION_NOT_SATISFIED DenialReason = 5  // Accepted term's restriction not satisfied by the request; the axes are in TransactionDenial.restriction_mismatches (single) / TransactionResultItem.restriction_mismatches (batch), same RestrictionKind vocabulary as the terms
-	DenialReason_DENIAL_REASON_REPORTING_OVERDUE         DenialReason = 6  // Requester has >20% overdue reports (MAY threshold)
-	DenialReason_DENIAL_REASON_OFFER_EXPIRED             DenialReason = 7  // Offer TTL exceeded
-	DenialReason_DENIAL_REASON_SIGNATURE_INVALID         DenialReason = 8  // Offer signature verification failed
-	DenialReason_DENIAL_REASON_QUOTA_EXCEEDED            DenialReason = 9  // Subscription access count exhausted for this period
-	DenialReason_DENIAL_REASON_DELEGATION_INVALID        DenialReason = 10 // Delegation missing, unverifiable, expired, holder binding failed, or scopes/caps do not cover the request
+	DenialReason_DENIAL_REASON_UNSPECIFIED               DenialReason = 0 // output enum; zero = not-applicable on TransactionResultItem.denial_reason, rejected (not_in:[0]) where set on TransactionDenial.reason
+	DenialReason_DENIAL_REASON_ACCOUNT_INACTIVE          DenialReason = 1 // the requester's account (the billing_ref minted at Register) exists but is not active — typically awaiting the Exchange operator's out-of-band activation; the remedy is to wait or contact the operator, NOT to register again
+	DenialReason_DENIAL_REASON_INSUFFICIENT_BALANCE      DenialReason = 2 // Requester's balance too low
+	DenialReason_DENIAL_REASON_RATE_LIMITED              DenialReason = 3 // Too many requests
+	DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE       DenialReason = 4 // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
+	DenialReason_DENIAL_REASON_RESTRICTION_NOT_SATISFIED DenialReason = 5 // Accepted term's restriction not satisfied by the request; decided per item, so the axes are in TransactionResultItem.restriction_mismatches (whatever the item count), same RestrictionKind vocabulary as the terms
+	DenialReason_DENIAL_REASON_REPORTING_OVERDUE         DenialReason = 6 // Requester has >20% overdue reports (MAY threshold)
+	DenialReason_DENIAL_REASON_OFFER_EXPIRED             DenialReason = 7 // Offer TTL exceeded
+	// A signature this item depends on does not verify, or does not cover what
+	// arrived: the offer's Exchange signature (Offer.signature), or the agent's
+	// AgentRequestAcceptance over the request's items. A subrequest whose items
+	// are not exactly the agent's signed set projected onto this Exchange (an item
+	// dropped, added or reordered) has every item denied with this reason, in the
+	// body (see AgentRequestAcceptance).
+	DenialReason_DENIAL_REASON_SIGNATURE_INVALID  DenialReason = 8
+	DenialReason_DENIAL_REASON_QUOTA_EXCEEDED     DenialReason = 9  // Subscription access count exhausted for this period
+	DenialReason_DENIAL_REASON_DELEGATION_INVALID DenialReason = 10 // Delegation missing, unverifiable, expired, holder binding failed, or scopes/caps do not cover the request
 	// DEPRECATED, never sent. An Exchange MUST NOT send this value. An offer the
 	// Exchange presented is honoured until it expires, so a purchase is never
 	// refused for scope. A resource the requester's scopes leave with no
@@ -949,10 +955,15 @@ const (
 	// GetAccountStatus. TransactionDenial.exchange names WHERE to register, so the
 	// agent converges without fetching a manifest first.
 	DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED DenialReason = 18 // no account exists for this caller at this Exchange — the remedy is to call Register
-	// The provider at this Exchange does not accept purchases relayed by a Broker
-	// (BrokerService.ExecuteTransaction). Per item: other items in the same
-	// sub-request may succeed. The remedy is to buy this offer directly, calling
-	// ExchangeService.ExecuteTransaction at offer.exchange.
+	// The provider of this item's resource, the seller of that resource at this
+	// Exchange, does not accept purchases relayed by a Broker
+	// (BrokerService.ExecuteTransaction). Decided PER ITEM, by each offer's own
+	// provider, and answered in the body on that item's denial_reason: other
+	// items in the same sub-request, sold by providers that accept relayed
+	// purchases, may succeed. It is never a refusal of the whole sub-request, and
+	// an Exchange MUST NOT send it as ErrorDetail.transaction_denial. The remedy is
+	// to buy this offer directly, calling ExchangeService.ExecuteTransaction at
+	// offer.exchange.
 	DenialReason_DENIAL_REASON_RELAY_NOT_ACCEPTED DenialReason = 19
 )
 
@@ -4837,6 +4848,17 @@ func (x *AgentAcceptance) GetSignatureAlgorithm() string {
 // names that Exchange. This is what makes removal, append, and reorder visible
 // before request-level idempotency state is claimed.
 //
+// A subrequest whose items are not exactly that projection — an item dropped,
+// an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the
+// Exchange answers OK and denies every item of the subrequest with
+// DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover
+// what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the
+// whole request: the request is well formed, and what fails is the agent's
+// signature over the set. The Exchange purchases nothing and claims no
+// request-level idempotency state for such a subrequest, so a retry carrying the
+// set the agent signed still executes. A direct request from the agent is the
+// degenerate projection, the whole set, and is held to the same rule.
+//
 // A projected subrequest is a NEW HTTP request its sender authors. The party
 // that projects — a Broker, or the agent itself when it splits its own
 // mixed-Exchange set — computes that subrequest's Content-Digest and signs it
@@ -5368,8 +5390,13 @@ func (x *TransactionItem) GetAgentAcceptance() *AgentAcceptance {
 // Items-only: every per-result datum lives in `items`
 // (one TransactionResultItem per committed offer, in original order); the
 // top-level fields carry only the shared aggregate state. A single offer is the
-// degenerate 1-element `items`. The per-item denials remain in-body on
-// TransactionResultItem as partial results of a successful request.
+// degenerate 1-element `items`.
+//
+// Every per-item denial is in the body, on TransactionResultItem.denial_reason,
+// whatever the item count. A one-item purchase that is denied is this response
+// with its one item denied; it is never turned into a non-OK error. Only a
+// refusal of the whole request, which decides no item, is a non-OK error
+// carrying ErrorDetail.transaction_denial (see TransactionDenial).
 type TransactionResponse struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
@@ -5503,7 +5530,9 @@ type TransactionResultItem struct {
 	// Even when cost.amount="0" (subscription), this field carries the value
 	// of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).
 	SubscriptionUnitValue *Cost `protobuf:"bytes,11,opt,name=subscription_unit_value,json=subscriptionUnitValue,proto3,oneof" json:"subscription_unit_value,omitempty"`
-	// Set if this specific item was denied (others may succeed).
+	// Set if this specific item was denied (others may succeed). Every per-item
+	// denial is answered here, in a successful response, also when the request
+	// carried only this item: a denied one-item purchase is never a non-OK error.
 	DenialReason *DenialReason `protobuf:"varint,7,opt,name=denial_reason,json=denialReason,proto3,enum=fora.v1.DenialReason,oneof" json:"denial_reason,omitempty"`
 	// When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the
 	// request failed, in the same RestrictionKind vocabulary the terms use.
@@ -10109,7 +10138,7 @@ type isErrorDetail_Reason interface {
 }
 
 type ErrorDetail_TransactionDenial struct {
-	// `reason` oneof — ExecuteTransaction denial
+	// `reason` oneof — ExecuteTransaction refused as a whole request
 	TransactionDenial *TransactionDenial `protobuf:"bytes,10,opt,name=transaction_denial,json=transactionDenial,proto3,oneof"`
 }
 
@@ -10164,17 +10193,38 @@ func (*ErrorDetail_UsageReportRejection) isErrorDetail_Reason() {}
 
 func (*ErrorDetail_RequestAuthFailure) isErrorDetail_Reason() {}
 
-// TransactionDenial — ExecuteTransaction could not complete. Carries the denial
-// reason the response body no longer holds (denial_reason / restriction_mismatches
-// move here in the response-shape normalization). Reuses the DenialReason vocab.
+// TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the
+// DenialReason vocabulary.
+//
+// This is the only case an ExecuteTransaction answer is a non-OK error carrying
+// a DenialReason: the Exchange refuses the request as a whole and decides no
+// item, for a reason about the caller or the request that would deny every item
+// alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its
+// account is not active (ACCOUNT_INACTIVE), it has overdue reports
+// (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is
+// purchased. Every decision about an item is answered in the body instead, on
+// TransactionResultItem.denial_reason, whatever the item count: a denied
+// one-item purchase is a successful response whose one item is denied, never
+// this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item
+// decisions and are never carried here.
 type TransactionDenial struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// The denial reason (defined-only, non-zero)
 	Reason DenialReason `protobuf:"varint,1,opt,name=reason,proto3,enum=fora.v1.DenialReason" json:"reason,omitempty"`
-	// When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same
-	// RestrictionKind vocabulary the terms use).
+	// DEPRECATED, never set. A whole-request refusal is never
+	// RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed
+	// axes ride on TransactionResultItem.restriction_mismatches. The field is
+	// retained because removing it would break the v1 wire contract; a receiver
+	// ignores it.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 	RestrictionMismatches []RestrictionKind `protobuf:"varint,2,rep,packed,name=restriction_mismatches,json=restrictionMismatches,proto3,enum=fora.v1.RestrictionKind" json:"restriction_mismatches,omitempty"`
-	// Batch mode: the offer this denial pertains to.
+	// DEPRECATED, never set. A whole-request refusal pertains to no one offer; a
+	// denial of one offer rides on that offer's TransactionResultItem. The field
+	// is retained because removing it would break the v1 wire contract; a
+	// receiver ignores it.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 	OfferId *string `protobuf:"bytes,3,opt,name=offer_id,json=offerId,proto3,oneof" json:"offer_id,omitempty"`
 	// Bare host of the Exchange that PRODUCED this denial, in the form "Request
 	// recipient" defines in the file header. Not an echo of what the caller sent:
@@ -10191,10 +10241,10 @@ type TransactionDenial struct {
 	// handing an operator's business data and a signed acceptance of that
 	// Exchange's terms to whoever answers — a caller MUST check the value against
 	// a domain it already trusts for this transaction: the signed `offer.exchange`
-	// of the denied item, or its own RequestConstraints.exchanges set. A value
-	// matching neither is reported to the caller and never dialled, because a
-	// hostile intermediary that could choose it would be choosing where an
-	// unattended agent registers.
+	// of the items in the refused request, or its own RequestConstraints.exchanges
+	// set. A value matching neither is reported to the caller and never dialled,
+	// because a hostile intermediary that could choose it would be choosing where
+	// an unattended agent registers.
 	Exchange      *string `protobuf:"bytes,4,opt,name=exchange,proto3,oneof" json:"exchange,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -10237,6 +10287,7 @@ func (x *TransactionDenial) GetReason() DenialReason {
 	return DenialReason_DENIAL_REASON_UNSPECIFIED
 }
 
+// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 func (x *TransactionDenial) GetRestrictionMismatches() []RestrictionKind {
 	if x != nil {
 		return x.RestrictionMismatches
@@ -10244,6 +10295,7 @@ func (x *TransactionDenial) GetRestrictionMismatches() []RestrictionKind {
 	return nil
 }
 
+// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 func (x *TransactionDenial) GetOfferId() string {
 	if x != nil && x.OfferId != nil {
 		return *x.OfferId
@@ -11371,12 +11423,12 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\rMetadataEntry\x12\x10\n" +
 	"\x03key\x18\x01 \x01(\tR\x03key\x12\x14\n" +
 	"\x05value\x18\x02 \x01(\tR\x05value:\x028\x01B\b\n" +
-	"\x06reason\"\xb8\x03\n" +
+	"\x06reason\"\xc0\x03\n" +
 	"\x11TransactionDenial\x129\n" +
 	"\x06reason\x18\x01 \x01(\x0e2\x15.fora.v1.DenialReasonB\n" +
-	"\xbaH\a\x82\x01\x04\x10\x01 \x00R\x06reason\x12O\n" +
-	"\x16restriction_mismatches\x18\x02 \x03(\x0e2\x18.fora.v1.RestrictionKindR\x15restrictionMismatches\x12\x1e\n" +
-	"\boffer_id\x18\x03 \x01(\tH\x00R\aofferId\x88\x01\x01\x12\xdc\x01\n" +
+	"\xbaH\a\x82\x01\x04\x10\x01 \x00R\x06reason\x12S\n" +
+	"\x16restriction_mismatches\x18\x02 \x03(\x0e2\x18.fora.v1.RestrictionKindB\x02\x18\x01R\x15restrictionMismatches\x12\"\n" +
+	"\boffer_id\x18\x03 \x01(\tB\x02\x18\x01H\x00R\aofferId\x88\x01\x01\x12\xdc\x01\n" +
 	"\bexchange\x18\x04 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$H\x01R\bexchange\x88\x01\x01B\v\n" +
 	"\t_offer_idB\v\n" +
 	"\t_exchange\"~\n" +
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index b087021e..a501aeb8 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -109,6 +109,16 @@ type ExchangeServiceClient interface {
 	DiscoverResources(context.Context, *connect.Request[v1.ResourceQuery]) (*connect.Response[v1.ResourceResponse], error)
 	// Commit to an offer and receive delivery information.
 	// Steps 4-5 in the FORA flow.
+	//
+	// Every per-item decision is answered in the body. The call returns OK with
+	// one TransactionResultItem per item, and an item the Exchange denies carries
+	// its TransactionResultItem.denial_reason. This holds whatever the item count:
+	// a one-item purchase that is denied is a successful response whose only item
+	// is denied, never a non-OK error. A non-OK answer carrying
+	// ErrorDetail.transaction_denial is used only when the Exchange refuses the
+	// whole request and decides no item (see TransactionDenial). Errors of other
+	// classes (a malformed request, a failed request signature, an internal fault)
+	// stay non-OK errors, as for every RPC.
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.TransactionResponse], error)
 	// Submit a post-usage report for a completed transaction.
 	// Step 7 in the FORA flow.
@@ -264,6 +274,16 @@ type ExchangeServiceHandler interface {
 	DiscoverResources(context.Context, *connect.Request[v1.ResourceQuery]) (*connect.Response[v1.ResourceResponse], error)
 	// Commit to an offer and receive delivery information.
 	// Steps 4-5 in the FORA flow.
+	//
+	// Every per-item decision is answered in the body. The call returns OK with
+	// one TransactionResultItem per item, and an item the Exchange denies carries
+	// its TransactionResultItem.denial_reason. This holds whatever the item count:
+	// a one-item purchase that is denied is a successful response whose only item
+	// is denied, never a non-OK error. A non-OK answer carrying
+	// ErrorDetail.transaction_denial is used only when the Exchange refuses the
+	// whole request and decides no item (see TransactionDenial). Errors of other
+	// classes (a malformed request, a failed request signature, an internal fault)
+	// stay non-OK errors, as for every RPC.
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.TransactionResponse], error)
 	// Submit a post-usage report for a completed transaction.
 	// Step 7 in the FORA flow.
@@ -589,7 +609,9 @@ type BrokerServiceClient interface {
 	// signature or the agent's acceptance; it cannot add an item the agent did not
 	// accept; and it cannot drop, add or reorder items within one Exchange's
 	// sub-request without that Exchange seeing it, because the
-	// AgentRequestAcceptance fixes the complete ordered set. No cross-item
+	// AgentRequestAcceptance fixes the complete ordered set: that Exchange denies
+	// every item of such a sub-request with DENIAL_REASON_SIGNATURE_INVALID, in
+	// the body, and purchases none of them. No cross-item
 	// integrity is needed, and none is provided. On the response side, the one
 	// signed value in a result item is retrieval_endpoint, a URL the issuing
 	// Exchange signed, so the Broker cannot forge or alter one. Every other field
@@ -626,7 +648,13 @@ type BrokerServiceClient interface {
 	// an error of the Broker's own: it rides on each affected item as
 	// TransactionResultItem.refusal, and the other Exchanges' results come back
 	// unchanged. An Exchange's per-item denial is that Exchange's result item,
-	// unchanged. DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
+	// unchanged; a one-item sub-request an Exchange denies is such a result item,
+	// because an Exchange answers every per-item denial in the body. A provider
+	// that does not accept relayed purchases is one such per-item denial,
+	// DENIAL_REASON_RELAY_NOT_ACCEPTED, decided by each offer's provider: the
+	// other items of the same sub-request may succeed. Only a refusal of the whole
+	// sub-request, which decides no item, becomes a refusal on each of its items.
+	// DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
 	// upstream failures; the Broker never stamps it, or any denial_reason, onto
 	// an item an Exchange did not deny. If an Exchange answers OK without exactly
 	// one result item per item sent, the Broker cannot attribute the answer, and
@@ -730,7 +758,9 @@ type BrokerServiceHandler interface {
 	// signature or the agent's acceptance; it cannot add an item the agent did not
 	// accept; and it cannot drop, add or reorder items within one Exchange's
 	// sub-request without that Exchange seeing it, because the
-	// AgentRequestAcceptance fixes the complete ordered set. No cross-item
+	// AgentRequestAcceptance fixes the complete ordered set: that Exchange denies
+	// every item of such a sub-request with DENIAL_REASON_SIGNATURE_INVALID, in
+	// the body, and purchases none of them. No cross-item
 	// integrity is needed, and none is provided. On the response side, the one
 	// signed value in a result item is retrieval_endpoint, a URL the issuing
 	// Exchange signed, so the Broker cannot forge or alter one. Every other field
@@ -767,7 +797,13 @@ type BrokerServiceHandler interface {
 	// an error of the Broker's own: it rides on each affected item as
 	// TransactionResultItem.refusal, and the other Exchanges' results come back
 	// unchanged. An Exchange's per-item denial is that Exchange's result item,
-	// unchanged. DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
+	// unchanged; a one-item sub-request an Exchange denies is such a result item,
+	// because an Exchange answers every per-item denial in the body. A provider
+	// that does not accept relayed purchases is one such per-item denial,
+	// DENIAL_REASON_RELAY_NOT_ACCEPTED, decided by each offer's provider: the
+	// other items of the same sub-request may succeed. Only a refusal of the whole
+	// sub-request, which decides no item, becomes a refusal on each of its items.
+	// DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
 	// upstream failures; the Broker never stamps it, or any denial_reason, onto
 	// an item an Exchange did not deny. If an Exchange answers OK without exactly
 	// one result item per item sent, the Broker cannot attribute the answer, and
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
index da6ba58d..d57d2eb9 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
@@ -52,7 +52,7 @@
   },
   "$id": "fora.v1.AgentRequestAcceptance.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
   "properties": {
     "payload": {
       "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
index 218562d3..9726e1fa 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
@@ -55,7 +55,7 @@
   "$id": "fora.v1.AgentRequestAcceptance.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
   "properties": {
     "payload": {
       "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index f09d1a6c..9fccf9f8 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -177,7 +177,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -435,16 +435,16 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -483,7 +483,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -510,7 +510,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.TransactionResultItem": {
@@ -582,7 +582,7 @@
               "type": "integer"
             }
           ],
-          "description": "Set if this specific item was denied (others may succeed).",
+          "description": "Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.",
           "title": "Denial Reason"
         },
         "expires_at": {
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index 31a1503e..ca7da983 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -182,7 +182,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -448,16 +448,16 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -496,7 +496,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -523,7 +523,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.TransactionResultItem": {
@@ -596,7 +596,7 @@
               "type": "integer"
             }
           ],
-          "description": "Set if this specific item was denied (others may succeed).",
+          "description": "Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.",
           "title": "Denial Reason"
         },
         "expires_at": {
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
index d639366c..3ddaeba5 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -236,16 +236,16 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -284,7 +284,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -311,7 +311,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.UsageReportRejection": {
@@ -396,7 +396,7 @@
     },
     "transaction_denial": {
       "$ref": "#/$defs/fora.v1.TransactionDenial",
-      "description": "`reason` oneof — ExecuteTransaction denial"
+      "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
     },
     "usage_report_rejection": {
       "$ref": "#/$defs/fora.v1.UsageReportRejection",
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
index bd0f0cf2..154b94de 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -244,16 +244,16 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -292,7 +292,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -319,7 +319,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.UsageReportRejection": {
@@ -406,7 +406,7 @@
     },
     "transaction_denial": {
       "$ref": "#/$defs/fora.v1.TransactionDenial",
-      "description": "`reason` oneof — ExecuteTransaction denial"
+      "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
     },
     "usage_report_rejection": {
       "$ref": "#/$defs/fora.v1.UsageReportRejection",
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
index 1e9decfe..dc9e6c1d 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
@@ -1,16 +1,16 @@
 {
   "$id": "fora.v1.TransactionDenial.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
   "properties": {
     "exchange": {
-      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "type": "string"
     },
     "offer_id": {
-      "description": "Batch mode: the offer this denial pertains to.",
+      "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
       "type": "string"
     },
     "reason": {
@@ -49,7 +49,7 @@
       "title": "Denial Reason"
     },
     "restriction_mismatches": {
-      "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+      "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
       "items": {
         "anyOf": [
           {
@@ -76,6 +76,6 @@
   "required": [
     "reason"
   ],
-  "title": "Transaction Denial",
+  "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
index 9b087be4..4622d7ab 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
@@ -2,16 +2,16 @@
   "$id": "fora.v1.TransactionDenial.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
   "properties": {
     "exchange": {
-      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "type": "string"
     },
     "offer_id": {
-      "description": "Batch mode: the offer this denial pertains to.",
+      "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
       "type": "string"
     },
     "reason": {
@@ -50,7 +50,7 @@
       "title": "Denial Reason"
     },
     "restriction_mismatches": {
-      "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+      "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
       "items": {
         "anyOf": [
           {
@@ -77,6 +77,6 @@
   "required": [
     "reason"
   ],
-  "title": "Transaction Denial",
+  "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 4a35c30c..784462cb 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -21,7 +21,7 @@
       "type": "object"
     },
     "fora.v1.AgentRequestAcceptance": {
-      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
       "properties": {
         "payload": {
           "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 005e93aa..bed74745 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -23,7 +23,7 @@
     },
     "fora.v1.AgentRequestAcceptance": {
       "additionalProperties": false,
-      "description": "A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
       "properties": {
         "payload": {
           "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 7b5c8a03..eea7d614 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -177,7 +177,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -399,16 +399,16 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -447,7 +447,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -474,7 +474,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.TransactionResultItem": {
@@ -546,7 +546,7 @@
               "type": "integer"
             }
           ],
-          "description": "Set if this specific item was denied (others may succeed).",
+          "description": "Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.",
           "title": "Denial Reason"
         },
         "expires_at": {
@@ -677,7 +677,7 @@
   },
   "$id": "fora.v1.TransactionResponse.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Items-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request.",
+  "description": "Items-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).",
   "properties": {
     "agent_identity_hash": {
       "default": "",
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index e219fc74..00827c2e 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -182,7 +182,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -411,16 +411,16 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -459,7 +459,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -486,7 +486,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.TransactionResultItem": {
@@ -559,7 +559,7 @@
               "type": "integer"
             }
           ],
-          "description": "Set if this specific item was denied (others may succeed).",
+          "description": "Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.",
           "title": "Denial Reason"
         },
         "expires_at": {
@@ -693,7 +693,7 @@
   "$id": "fora.v1.TransactionResponse.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Items-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request.",
+  "description": "Items-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).",
   "properties": {
     "agent_identity_hash": {
       "default": "",
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 4c152cea..215db711 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -177,7 +177,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -357,16 +357,16 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -405,7 +405,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -432,7 +432,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.UpstreamRefusal": {
@@ -564,7 +564,7 @@
           "type": "integer"
         }
       ],
-      "description": "Set if this specific item was denied (others may succeed).",
+      "description": "Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.",
       "title": "Denial Reason"
     },
     "expires_at": {
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index 4611a0ca..e6f3e673 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -182,7 +182,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -368,16 +368,16 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -416,7 +416,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -443,7 +443,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.UpstreamRefusal": {
@@ -578,7 +578,7 @@
           "type": "integer"
         }
       ],
-      "description": "Set if this specific item was denied (others may succeed).",
+      "description": "Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.",
       "title": "Denial Reason"
     },
     "expires_at": {
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index 4956a558..39e04e0a 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -154,7 +154,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -295,16 +295,16 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -343,7 +343,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -370,7 +370,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.UsageReportRejection": {
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index 5a95b621..ad8a331b 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -158,7 +158,7 @@
         },
         "transaction_denial": {
           "$ref": "#/$defs/fora.v1.TransactionDenial",
-          "description": "`reason` oneof — ExecuteTransaction denial"
+          "description": "`reason` oneof — ExecuteTransaction refused as a whole request"
         },
         "usage_report_rejection": {
           "$ref": "#/$defs/fora.v1.UsageReportRejection",
@@ -304,16 +304,16 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
         },
         "offer_id": {
-          "description": "Batch mode: the offer this denial pertains to.",
+          "description": "DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
           "type": "string"
         },
         "reason": {
@@ -352,7 +352,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).",
+          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -379,7 +379,7 @@
       "required": [
         "reason"
       ],
-      "title": "Transaction Denial",
+      "title": "TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.",
       "type": "object"
     },
     "fora.v1.UsageReportRejection": {
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index ef05913d..59f38e85 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1088,17 +1088,18 @@ class TransactionDenial(WireModel):
         | None
     ) = Field(
         None,
-        description='Bare host of the Exchange that PRODUCED this denial, in the form "Request\n recipient" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator\'s business data and a signed acceptance of that\n Exchange\'s terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.',
+        description='Bare host of the Exchange that PRODUCED this denial, in the form "Request\n recipient" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator\'s business data and a signed acceptance of that\n Exchange\'s terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.',
     )
     offer_id: str | None = Field(
-        None, description='Batch mode: the offer this denial pertains to.'
+        None,
+        description="DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.",
     )
     reason: DenialReason = Field(
         ..., description='The denial reason (defined-only, non-zero)'
     )
     restriction_mismatches: list[RestrictionKind] | None = Field(
         None,
-        description='When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).',
+        description='DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.',
     )
 
 
@@ -1809,7 +1810,8 @@ class ErrorDetail(WireModel):
         description='`reason` oneof — signed-URL / proof-of-possession check failed',
     )
     transaction_denial: TransactionDenial | None = Field(
-        None, description='`reason` oneof — ExecuteTransaction denial'
+        None,
+        description='`reason` oneof — ExecuteTransaction refused as a whole request',
     )
     usage_report_rejection: UsageReportRejection | None = Field(
         None, description='`reason` oneof — ReportUsage filing rejected'
@@ -2172,7 +2174,8 @@ class TransactionResultItem(WireModel):
         | None
     ) = Field(0, description='How resource is delivered for this item.')
     denial_reason: DenialReason | None = Field(
-        None, description='Set if this specific item was denied (others may succeed).'
+        None,
+        description='Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.',
     )
     expires_at: AwareDatetime | None = Field(
         None, description='When retrieval_endpoint expires.'
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index edc0f4b7..d686e703 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -14,7 +14,7 @@ export const AgentAcceptanceSchema = wire(z.object({ "signature": z.string().min
 
 export const AgentAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.").default(""), "requester_id": z.string().describe("Requester label (Requester.id) the acceptance is bound to. Never empty.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason."));
 
-export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
+export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
 
 export const AgentRequestAcceptanceItemSchema = wire(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection."));
 
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -76,7 +76,7 @@ export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.st
 
 export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
 
 export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item."));
 
@@ -196,17 +196,17 @@ export const TenantFeeRateSchema = wire(z.object({ "fee_rate_bps": z.coerce.numb
 
 export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]));
 
-export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("TransactionDenial — ExecuteTransaction could not complete. Carries the denial\n reason the response body no longer holds (denial_reason / restriction_mismatches\n move here in the response-shape normalization). Reuses the DenialReason vocab."));
+export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
 export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`. The per-item denials remain in-body on\n TransactionResultItem as partial results of a successful request."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed).").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
-export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the denied item, or its own RequestConstraints.exchanges set. A value\n matching neither is reported to the caller and never dialled, because a\n hostile intermediary that could choose it would be choosing where an\n unattended agent registers.").optional(), "offer_id": z.string().describe("Batch mode: the offer this denial pertains to.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same\n RestrictionKind vocabulary the terms use).").optional() }).describe("`reason` oneof — ExecuteTransaction denial").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
+export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
 export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 81b332fa..b618c1f2 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -313,6 +313,16 @@ service ExchangeService {
 
   // Commit to an offer and receive delivery information.
   // Steps 4-5 in the FORA flow.
+  //
+  // Every per-item decision is answered in the body. The call returns OK with
+  // one TransactionResultItem per item, and an item the Exchange denies carries
+  // its TransactionResultItem.denial_reason. This holds whatever the item count:
+  // a one-item purchase that is denied is a successful response whose only item
+  // is denied, never a non-OK error. A non-OK answer carrying
+  // ErrorDetail.transaction_denial is used only when the Exchange refuses the
+  // whole request and decides no item (see TransactionDenial). Errors of other
+  // classes (a malformed request, a failed request signature, an internal fault)
+  // stay non-OK errors, as for every RPC.
   rpc ExecuteTransaction(TransactionRequest) returns (TransactionResponse);
 
   // Submit a post-usage report for a completed transaction.
@@ -2274,6 +2284,17 @@ message AgentAcceptance {
 // names that Exchange. This is what makes removal, append, and reorder visible
 // before request-level idempotency state is claimed.
 //
+// A subrequest whose items are not exactly that projection — an item dropped,
+// an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the
+// Exchange answers OK and denies every item of the subrequest with
+// DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover
+// what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the
+// whole request: the request is well formed, and what fails is the agent's
+// signature over the set. The Exchange purchases nothing and claims no
+// request-level idempotency state for such a subrequest, so a retry carrying the
+// set the agent signed still executes. A direct request from the agent is the
+// degenerate projection, the whole set, and is held to the same rule.
+//
 // A projected subrequest is a NEW HTTP request its sender authors. The party
 // that projects — a Broker, or the agent itself when it splits its own
 // mixed-Exchange set — computes that subrequest's Content-Digest and signs it
@@ -2474,8 +2495,13 @@ message TransactionItem {
 // Items-only: every per-result datum lives in `items`
 // (one TransactionResultItem per committed offer, in original order); the
 // top-level fields carry only the shared aggregate state. A single offer is the
-// degenerate 1-element `items`. The per-item denials remain in-body on
-// TransactionResultItem as partial results of a successful request.
+// degenerate 1-element `items`.
+//
+// Every per-item denial is in the body, on TransactionResultItem.denial_reason,
+// whatever the item count. A one-item purchase that is denied is this response
+// with its one item denied; it is never turned into a non-OK error. Only a
+// refusal of the whole request, which decides no item, is a non-OK error
+// carrying ErrorDetail.transaction_denial (see TransactionDenial).
 message TransactionResponse {
   // FORA protocol version — "1.0". Stamped by the sender from a single
   // constant; advisory on receive. See "Protocol version" in the file header.
@@ -2539,7 +2565,9 @@ message TransactionResultItem {
   // of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).
   optional Cost subscription_unit_value = 11;
 
-  // Set if this specific item was denied (others may succeed).
+  // Set if this specific item was denied (others may succeed). Every per-item
+  // denial is answered here, in a successful response, also when the request
+  // carried only this item: a denied one-item purchase is never a non-OK error.
   optional DenialReason denial_reason = 7;
 
   // When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the
@@ -2625,10 +2653,16 @@ enum DenialReason {
   DENIAL_REASON_INSUFFICIENT_BALANCE = 2; // Requester's balance too low
   DENIAL_REASON_RATE_LIMITED = 3;         // Too many requests
   DENIAL_REASON_CONTENT_UNAVAILABLE = 4;  // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
-  DENIAL_REASON_RESTRICTION_NOT_SATISFIED = 5;  // Accepted term's restriction not satisfied by the request; the axes are in TransactionDenial.restriction_mismatches (single) / TransactionResultItem.restriction_mismatches (batch), same RestrictionKind vocabulary as the terms
+  DENIAL_REASON_RESTRICTION_NOT_SATISFIED = 5;  // Accepted term's restriction not satisfied by the request; decided per item, so the axes are in TransactionResultItem.restriction_mismatches (whatever the item count), same RestrictionKind vocabulary as the terms
   DENIAL_REASON_REPORTING_OVERDUE = 6;    // Requester has >20% overdue reports (MAY threshold)
   DENIAL_REASON_OFFER_EXPIRED = 7;        // Offer TTL exceeded
-  DENIAL_REASON_SIGNATURE_INVALID = 8;    // Offer signature verification failed
+  // A signature this item depends on does not verify, or does not cover what
+  // arrived: the offer's Exchange signature (Offer.signature), or the agent's
+  // AgentRequestAcceptance over the request's items. A subrequest whose items
+  // are not exactly the agent's signed set projected onto this Exchange (an item
+  // dropped, added or reordered) has every item denied with this reason, in the
+  // body (see AgentRequestAcceptance).
+  DENIAL_REASON_SIGNATURE_INVALID = 8;
   DENIAL_REASON_QUOTA_EXCEEDED = 9;       // Subscription access count exhausted for this period
   DENIAL_REASON_DELEGATION_INVALID = 10;  // Delegation missing, unverifiable, expired, holder binding failed, or scopes/caps do not cover the request
   // DEPRECATED, never sent. An Exchange MUST NOT send this value. An offer the
@@ -2666,10 +2700,15 @@ enum DenialReason {
   // agent converges without fetching a manifest first.
   DENIAL_REASON_ACCOUNT_NOT_REGISTERED = 18;         // no account exists for this caller at this Exchange — the remedy is to call Register
 
-  // The provider at this Exchange does not accept purchases relayed by a Broker
-  // (BrokerService.ExecuteTransaction). Per item: other items in the same
-  // sub-request may succeed. The remedy is to buy this offer directly, calling
-  // ExchangeService.ExecuteTransaction at offer.exchange.
+  // The provider of this item's resource, the seller of that resource at this
+  // Exchange, does not accept purchases relayed by a Broker
+  // (BrokerService.ExecuteTransaction). Decided PER ITEM, by each offer's own
+  // provider, and answered in the body on that item's denial_reason: other
+  // items in the same sub-request, sold by providers that accept relayed
+  // purchases, may succeed. It is never a refusal of the whole sub-request, and
+  // an Exchange MUST NOT send it as ErrorDetail.transaction_denial. The remedy is
+  // to buy this offer directly, calling ExchangeService.ExecuteTransaction at
+  // offer.exchange.
   DENIAL_REASON_RELAY_NOT_ACCEPTED = 19;
 }
 
@@ -2783,7 +2822,9 @@ service BrokerService {
   // signature or the agent's acceptance; it cannot add an item the agent did not
   // accept; and it cannot drop, add or reorder items within one Exchange's
   // sub-request without that Exchange seeing it, because the
-  // AgentRequestAcceptance fixes the complete ordered set. No cross-item
+  // AgentRequestAcceptance fixes the complete ordered set: that Exchange denies
+  // every item of such a sub-request with DENIAL_REASON_SIGNATURE_INVALID, in
+  // the body, and purchases none of them. No cross-item
   // integrity is needed, and none is provided. On the response side, the one
   // signed value in a result item is retrieval_endpoint, a URL the issuing
   // Exchange signed, so the Broker cannot forge or alter one. Every other field
@@ -2820,7 +2861,13 @@ service BrokerService {
   // an error of the Broker's own: it rides on each affected item as
   // TransactionResultItem.refusal, and the other Exchanges' results come back
   // unchanged. An Exchange's per-item denial is that Exchange's result item,
-  // unchanged. DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
+  // unchanged; a one-item sub-request an Exchange denies is such a result item,
+  // because an Exchange answers every per-item denial in the body. A provider
+  // that does not accept relayed purchases is one such per-item denial,
+  // DENIAL_REASON_RELAY_NOT_ACCEPTED, decided by each offer's provider: the
+  // other items of the same sub-request may succeed. Only a refusal of the whole
+  // sub-request, which decides no item, becomes a refusal on each of its items.
+  // DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
   // upstream failures; the Broker never stamps it, or any denial_reason, onto
   // an item an Exchange did not deny. If an Exchange answers OK without exactly
   // one result item per item sent, the Broker cannot attribute the answer, and
@@ -4884,7 +4931,7 @@ message ErrorDetail {
   // generic transport-class failures (e.g. INVALID_ARGUMENT, INTERNAL) that
   // carry no domain-specific reason.
   oneof reason {
-    // `reason` oneof — ExecuteTransaction denial
+    // `reason` oneof — ExecuteTransaction refused as a whole request
     TransactionDenial transaction_denial = 10;
     // `reason` oneof — CatalogService rejection
     CatalogRejection catalog_rejection = 11;
@@ -4903,21 +4950,38 @@ message ErrorDetail {
   }
 }
 
-// TransactionDenial — ExecuteTransaction could not complete. Carries the denial
-// reason the response body no longer holds (denial_reason / restriction_mismatches
-// move here in the response-shape normalization). Reuses the DenialReason vocab.
+// TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the
+// DenialReason vocabulary.
+//
+// This is the only case an ExecuteTransaction answer is a non-OK error carrying
+// a DenialReason: the Exchange refuses the request as a whole and decides no
+// item, for a reason about the caller or the request that would deny every item
+// alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its
+// account is not active (ACCOUNT_INACTIVE), it has overdue reports
+// (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is
+// purchased. Every decision about an item is answered in the body instead, on
+// TransactionResultItem.denial_reason, whatever the item count: a denied
+// one-item purchase is a successful response whose one item is denied, never
+// this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item
+// decisions and are never carried here.
 message TransactionDenial {
   // The denial reason (defined-only, non-zero)
   DenialReason reason = 1 [
     (buf.validate.field).enum = {defined_only: true, not_in: [0]}
   ];
 
-  // When reason = RESTRICTION_NOT_SATISFIED, the failed axes (same
-  // RestrictionKind vocabulary the terms use).
-  repeated RestrictionKind restriction_mismatches = 2;
+  // DEPRECATED, never set. A whole-request refusal is never
+  // RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed
+  // axes ride on TransactionResultItem.restriction_mismatches. The field is
+  // retained because removing it would break the v1 wire contract; a receiver
+  // ignores it.
+  repeated RestrictionKind restriction_mismatches = 2 [deprecated = true];
 
-  // Batch mode: the offer this denial pertains to.
-  optional string offer_id = 3;
+  // DEPRECATED, never set. A whole-request refusal pertains to no one offer; a
+  // denial of one offer rides on that offer's TransactionResultItem. The field
+  // is retained because removing it would break the v1 wire contract; a
+  // receiver ignores it.
+  optional string offer_id = 3 [deprecated = true];
 
   // Bare host of the Exchange that PRODUCED this denial, in the form "Request
   // recipient" defines in the file header. Not an echo of what the caller sent:
@@ -4934,10 +4998,10 @@ message TransactionDenial {
   // handing an operator's business data and a signed acceptance of that
   // Exchange's terms to whoever answers — a caller MUST check the value against
   // a domain it already trusts for this transaction: the signed `offer.exchange`
-  // of the denied item, or its own RequestConstraints.exchanges set. A value
-  // matching neither is reported to the caller and never dialled, because a
-  // hostile intermediary that could choose it would be choosing where an
-  // unattended agent registers.
+  // of the items in the refused request, or its own RequestConstraints.exchanges
+  // set. A value matching neither is reported to the caller and never dialled,
+  // because a hostile intermediary that could choose it would be choosing where
+  // an unattended agent registers.
   optional string exchange = 4 [
     (buf.validate.field).string = {
       max_len: 260,

From 01b1ea258b8d155bae134f2840a576bfd5a9a688 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:43:06 -0400
Subject: [PATCH 067/164] Filter offers over the agent's budget at Resolve in
 the protocol

RequestConstraints.period_budget said that transactions exceeding it
are denied, while OFFER_ABSENCE_REASON_BUDGET_EXCEEDED described a
filter at Resolve. Nothing said what counts as spend, so an
implementation could count a Resolve against the budget or refuse it
with an error.

BrokerService.Resolve now states the rule once. It filters out every
offer priced above max_price, and every offer that would take the
budget_scope's spend in the current budget_period past period_budget,
comparing the most the offer can be charged without a dispute (Q x R
for a metered offer). A URI the budget leaves with no offer, or a
resolve left with none at all, is answered with BUDGET_EXCEEDED as a
successful "no result" answer, never NOT_AUTHORIZED and never a
non-OK error such as RESOURCE_EXHAUSTED. Resolve never charges and
never counts as spend; spend grows only from purchase totals, for a
purchase through the Broker BrokerTransactionResponse.totals.
BUDGET_EXCEEDED, max_price, budget_scope and period_budget point to
that rule.

Comments only; the generated code, the descriptor, the SDK types and
the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 667750 -> 669753 bytes
 gen/go/fora/v1/fora.pb.go                     |  29 ++++++++---
 gen/go/fora/v1/forav1connect/fora.connect.go  |  36 ++++++++++++++
 .../fora.v1.DiscoveryRequest.schema.json      |   6 +--
 ...ora.v1.DiscoveryRequest.schema.strict.json |   6 +--
 .../fora.v1.RequestConstraints.schema.json    |   6 +--
 ...a.v1.RequestConstraints.schema.strict.json |   6 +--
 gen/python/wire/models.py                     |   7 +--
 gen/ts/wire/schemas.ts                        |   4 +-
 proto/fora/v1/fora.proto                      |  47 +++++++++++++++---
 10 files changed, 114 insertions(+), 33 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index ceb20036b70a93a93d5376f2816834183c7e3c23..280f7fcfc3549c714a1512baf0b447889fb36e84 100644
GIT binary patch
delta 44949
zcmag{33yaR)(4EIZ*JeMlTL3*r#qpyun8n6vIz-@;=bTI>Nq2!M8#2HSajxnXWoG9
zAQFjC0<uU1ksStYWM@F5Fo+<s$RdVCkVP5xO}^i$s+-IBpa1tgk38m_Tjy7&PF0;c
zwf5otjX(XR@qodu!OGyw!RiwC-iMW4|4M)Vu)E)To;g*1OAojs8SmVXe&(b*_BYqb
z^xt3B-ZCqg+fv;w#R#Y;RHbQjxI5A1g%`^E^i7oirAOa>%@WV`?}vYX?a}kaM7N%Q
zP4s#p(eI`5R}-)I>i<f2q<Ox)ygP9c-Civ3*{@Mwr0xD<Ipq5GvJ$uT>Gh}bK9837
zd9BCu<t2}l_wDt{YvqX-dc4xFybr|6Un}nu17y$gM6dq++9i7Q>znA^2T2n>`X;(P
z*Xy-%i=CRK<+tX{W{F;XkVNL(uiKx>dA=gQu6>{H)w>+o_w8NYvwNa<x4!+jY>2(t
zPs{FDlCU%HQ{JzCpPqdoN_pVFMBo0;KVROr?+g83Nu+v0=|1Is`@hmJh0^wYy}S={
z?U`U-9W*1&5-&i3Zi&Yqx#zl!6R(uN0G)dDd&x@l>;?0{b`WJhv^T=+yHdkjk$C;3
z@}8tPPuY`7+pS-s+bge>Sc!Z3QBlc!y?Va#*Tn1H{)!AliReS0^4`7r^egY)F42>0
zMfyJ2<*}}v9)IlaE|1*v`#U-}Lss3zM@y6j_{ClBOO*HN17%UPmnw+=$Q_S%dHj*v
z@928RlXrJ|{L#nm=v<O`47sAvuO#~Pf2F)xqDRl?U+LeSs`>Soy7jXX&-d!z6ZHXM
zZc-%ZOQ!g*Ra#<M*_NAHk&8E@hBm1LRR0O}h9=fpm!+s`Ks&8wTx0k3*Vg2mR*hV%
zqot~<k`YkPvgm7Cr{c4!qLVB!0d-b2vTZVxNT1)jg^S?h1vdOOt$pzYN5n;3)$mIZ
z7ep?op<Jt+i$Isl?3dTH7mF{eN`XwHK;*JoSl=cga#?NE*m{VIfcljUeqDQ{^RKGH
z%Lv6XHE>l=krc@U!mn!mCN@bjYH^9RPD6>^0j<)V@qybFU7{t}+fTW3)6M^)HOkDX
zbQ|@on~{l|N<WsB|F71nc&uA7I1HFT9qTspZ4#(s-35hKOD=+s<5<oAYORaMxuwC}
z3YC7G+XzY#D*ZTjUf62EMNs;8S(CqMEsNiEM5y%dx{ZJoQ6TcJJ2%g|k&A$u#76y1
zYf(JO5uxHvavNbOl1Yi&(E_QM8c?UOpZ=z`E}P<(26HPa3^v8>5jF-1gemR@B@#ge
z!W8#SEv)%2o~t{cR<l3;U0c|p+JSHr*X<EC>sH)=sCEbPB!n9f)$T~tnvw~dYXNP(
zJ7Zz`zW>uEyBf@Q^Cpz3YI;Ch;a1kTRcn`K>7a+1nHhqY&K{sWnb~TkTfM>ZS%&-u
zldW>AzqkB#oXmiGwOhUBvc@XVRimo=JUwxc7IGDTZr2^S(C%}$DU<~X?LK#-8Q#HV
z@bOEwd$4v_*_U?tG{uGTeQB2uBqeeOgpol4;Y%{|OpQZ8u^s8IL$t=3#XH=J$*rI%
zRGB;6(3biSNC@qqY@2f#P~Wj7!?l}=zjG@-nT9I!JGVb!la$C^RNv~vMNpZ0Szv^A
zd+A<BQ>x6pZcj{#P-X6Q#~a%u5cay8HseiOQ&6h??ClX+tFrwLf*T0??dE_qK-lkY
z&|D%=UG8_cxY_!MnuDew@gbHuQk!$@AqPSuuG=FzG136ykXv?QkbpSkMkk(UatKuX
zdAD*UeR8BWSFOOGqLXQg4!QGAMd^?`PZrDJ2Gk9b%e&&vv;x!u6x|qRdIQ=8w|d!4
zb~bGu<SwFANLI(v0`5z0ZMDnV6XQBycwM6@;pnDxq*8k-rv!wp1^LW1nkhOV*g#vO
zp%ZQu1~3EaXKdP3ZClA_j*JPJ&or}88qI{vXIeaIO%m<W3aA^?)2C_mTxA<I*$?r5
zRL4e5b|R3#*r)}P62k(<My-BB>qC*RC!l`KuDq{(RQ9z4;Q_?g4ul5~Uuyxo{dfTJ
zwN})?T5j+{X9d)Q>DuX9nOb(x!N@}89n|VtP!=!_YVoF0jVxds)Jkr&R;wH%JD{FQ
z|KUTelTvod!N>;2DNVW*P00qvDXp#zWdq}s)}p2LZ&4I4>Xm)>k#?r+yaV9{#CgqQ
z>+S`_c`bRfRKp91^IGe+)~}+=<pk7`Y0n&OK<2F@^*W2@0Ar-?v8yfz7$fzd-7Ir}
zF;b5uteqAwiZ7s5>&ndZ#`)S4?h5=VMifo)0j65_2zLe&Fx7h4u3R5rs&!PZXqG-S
z%W6F}Q_qx5(1&IjfXD~B+WdMJyu=J*#d+rbfclZHq@w=B9e?Rp-m@>evQW=q3zukG
zbMVDDqbYvie56P0to_LPBg*<$VaPy0U7)kK$D0?~zK=Dn!vd!a0kn(-dR^lpg%;=m
z+f4)jv_MZ5S>sK3XmrR8ddA{(>Jx38>f4|j`PMs>fldx}GpkvqjW6A7LxTzE%{DYh
zKyTIqab8m(0lisI6<K$41bp1eCM?(PE!*lKkbB+gAdq|Ast0l<0=d_%dVa(jER=xZ
zwzI?vZD{Fs2ZDUrb_ar-?RGsNs#@pHcDo*nTX%6K0Jw|QuF&o&+vOl+0%4bfK)!dE
zF2^ukp@DRljxns-%^~1?kEUN*sm)MIk2)9#DAc1426^A3wv}~-hSH;YGG+DV5J-E1
z-LppPQ+C2Zppo>1gFxQ*gdV6TO+nuGgq}!R!*vdUhIuW0VU0F2v&S`E3CUFCZ?EaO
z!s+YW-(J(<^l9J$314?jFMg7bq(lxgeZ(nw0uIvR3BXZN)z|dL9=Aq`^6CL~jG@$z
zZdBRA#d<28{h3y-lz}BWiLU5Se2gI*7)a<a#;9ur<h#chXa&nNx#G}aLV7`sw$fEL
z!ND+4o(YD>u6Xji6O26J0d?+qCm8h`SQ`ZfJa2XSqc62huCi(e!-O8yjvnNRs}0%E
zb%i`}wSk5{N3<n);#uq;8?||5vm6L=#Iqa-a>TQYKm%z%a>TQY#!Yy~)fM>RIR-nm
zP>;3(fdb4iWOoG#$vKAXt{@>f$FRGruE75;GI)2r2LxKwB1eZT=&;DqfxPe{rx@gg
z7f~^Wc+p?sakd&6158)+TsEtC*~m@b{+0HV=G$r*1=cbeat!LZJJV&~YNf7{orWCS
zzy<71Lxw^i0lU+{2>U)+*q~0dKmFl$t=d(x-w~qjx!*9o+#W~-q5XzGU`-~I8Vb7S
zLH3uO+SHPRhK%FEgv>#su#uFZ;OC&xq^b3$kO6sw-LXr1tK^825B0z!hM6U0s0SV~
za(vb}YWs!)d!0|azSCG{$$8u4;6muU5fR=8B!tdWyZb_v2v)t8{(P^t!PWellN0r_
zYla-+4TXByH3LKZ@{pytm4LRy%vhRU{k_)C3M@hUvYKH^u8>JTHkJD9;g`$??8cuo
zEe?{qX8H&-d~71)Ehr&q<nRf5{3q?3_$Q{Y3NexB6H4?Zv;z$?oxbas_LeJ|HWgk5
z;u4!uEmfgTW<XnKW(>B{=Z<Tw72i739kNzY9+{-jdRF?gwkEaSRJdy=CZyM!a5_~Y
zkt?8mVJb&i>=$ip1^(hL66r{nFHE>d3}ZwhpD)bBQ8SbL1ZQj;3cGx1syEXp#yMMu
zB0^U;m}=sB7K*yjREw@>0sCL3+TeN?ur^ivhKDNs>NhM@*yi7Wp^trSs;TS2;GMRZ
z>P^?P;9<7@Mlm>yZ%nn3ld57UVn=nGsWx_aLo?B%zctl{*R#-5xBo^l1U@@{lL~Rn
z&i}w4nu)k%*KgE^v;EFg>l1v1ZAFa!yG=EDeU=!@_xuJwh~WJ<V4;Az?>Dx{4XEG$
zrbKz@q1VHI%j>PytWaClWeFZC?trP@ay<(bchD4Z3)dB?P;rM$wf*&}P;ZB?H$PIL
z-hTXzAnNUii5zE$hKPQpo-mbvv*xF@4=V7N=sKCay`M1S3E2|iE3^}4^51nWQOV>j
z@g!l1mZ)TkmiV)&#;#|fK);x3{CXA&bc&iqE8b%Oeb!V4S}J?wjMkz8f7?oABH>v_
z36vTslLIZgJ7fwa&Y5b7gwK>poOhZ4XF-VzPTS!uU|;-ADp>VWPg8ArJs8Y-*{Mk`
z3A0|gK1)%PznW_6Izds9*G#qSdKR)AV5uFg+j+TxJjh~yKC5+(53<B?h3Zw2Xpn_f
zjECW8uoyJV${5YIoz)%+471!m?)CU$&~QtMbFWulECYd#l9P6W1jKNwUd&1$AC<h`
z2v%`UOT|W53Ln;qi8Lc94I*EVphmLQ=d@&Oq$NTaViK3qBzYQGXB7MOoK_SYWhp!k
zM;fZ4QIw{br$L$CWF60I&Es!6I8>xJDNSb-iB@~8jCa}S^V;n>m6kimi^NxW-e%vQ
z*Ggh<TM7@g++afTZL2{;>wchP^@dh~nqJTzjE!~DP)Wv88Z1X44X7%{E@+R$sx0Y$
zg;TGhG!;AzO7afVFKPp0?>IPAl6NRg2c8Bc8OLT`)NYN9vy>FKES6=EW*nty&C{SE
zjA!a4t!-?)U4dA4L7MTD<~E)N9geZzUqU4_OW}(ZP*Ou0Mrp_*Sc{otWxUT;UV=p?
zS?)Y;5x#Kp9?Q85i@awkd<y0U6O!*)7_{pH9jhJzbuxSUveqy**^;9Om`F33(op}x
zA_uKEO}(tOiA}K-zQ9CG;!>LSJPj-|m7Te)mBpr73J(yFhAc9b(v<Qvu*fvl<%-rJ
zKFzj>#w{|9(maV6$P8#7SQ+23xmUC&8hl_GIWSwMYGNug%TnfAs`Zl#i%O<kR3aX0
zd{sNz@*_)a!Xshv3E9rJ-~wrtNpPUv9O7J{IM}2yc6s`aU$sk0*>Xz;zu=-emRmCT
z1qs_Mx8wu{Bruj+n85r9&j$>AUBmw7(vOy|aUf_8w8nv;AZv{k5FtH80I|jj=kr;V
zNfunk-dFT{OV>FFGzD7cAW$~zEIEOJ2oTm;n85sw>j3I=)+ked^48BCgiIiOZh6Rd
zZs<t^!snJRVv{6e71py>QvhZn0Mm9@%C7Y4Onp`6bNEwC1@HkdI~+wQB->#H#H1Bp
z0kgvr?wwE&z3#A*yWm-A$%YtM#zE8FX{oPTYjaSyRzSOIWvohnuj^~{23IY<hMK8j
z!$f=Aqm1*Y)(jJsYstzbUV43w{(;(ZtOwBw)us3bvsHQ2JFeqEmv=nst=31hj9^ji
zPEWrV(wk;hO!p{asSaEeV7f<I5+sDCdtgbj5=cZE(>(>h7pNfld}_L<@F`v(N&pVB
zp6<EjK0d{gESh3X_x$b&YZQg(7V1lz<x%E&)aWHwB7JARuDV_XLs%7`Vbxh4*~UOZ
zsaYO5!vzVYW_d*TMp&@wEKg#dM_82@ScQNRA9>Upt)K;)36|;wb2eKP(L;^qcrdL0
z$2U~NT#x!71_V+NBlbd%@-aIe(I2Y7U$$n{@D@6nQNvs4k@XEJXtvNJ>l-9ATj)uC
zT&I~LHCyCp##vmm#U8btR7o;{_7CWp{7)_vT|$cT>7_+ku1xQV>MLE%S9%mp))ckp
zl^$I*ZzQ5ro<PtVL(9^hfL7zlIGO&UP=Cu6tnpx3`T(_a4;qEG%cC4h_lW7WnHBg`
ztPJ7<@OF7jfd>+Jy9kdKf<U66yF8&oC@8f+Vthjp^miV$8E+ZH*}@~S-5wDe^F&|)
zcaKLz&^8OTwAX{^rh+<&lmys5kBB5~798dG9(c6tQlWD8dqjk8r-HS9Ah7FFA%d>;
zsP*bt=!1YiaJ{a)Tl&?59;~^)OP<U_HGP!*zDS?g<)}w)bbv`*vLE#ikia?W!OoB*
z(Or&u0z6)!uc&>#YT^mDvdTCpih6?GUSIFn{e(xcQ7Eeu9<T6+9^R-<c;F8ODBm9S
zL^?}LQ&T~heZmvHop(5-Ck}PE6P{Z;S;MHpv#@;Z$*4>puCEVu)j#jy+bo%C7QD(u
zk8%|~<RLhfEa_B;#VQ->U0Pl8sBL&Y;uEyJ>`@<u;S8A=yAW4A>H?S52*t@FpE4ke
zg&OINpC6DVm-fL$c?M+p#Zm`I7->Kjh6pMTNEm5AR#bQ@B6)cRWEFJg<&hjJ&w#8>
zw^=1TBOngSVpALG&7U8XrHFl|EM6OfvO;1d3?wodlm$N_GJ>A~nYd3Bh}Q-THz+H4
zugr+*hZ}BC)?Ig7vuPHcMZ?di^i7TRxvtVtS<(%Fi)J+{ORlzpgg&FPf?@#|Br+bA
zh0P1ZL4W`?hDDm_13Qdy5NP}vlO<go(g0yhRzOrTNRr7yc)BSY)t3!7l9lmxdS?^;
zUs|(;S#nUwM)mz8OG#&`)>Intvt|7WUUZZz(TQz&)d;bJH|c}!U6Q4?;6)e7P_B=&
z)CYK73J&V>lPq<(3+BoMRzTaBrECWF8<vd?uT8x4q87T#-RfUim@H9u=i(F%ZOVcN
zqsAdP0Q@RT9pbV!QxD3f*0GKK*hb${y3Mu&n6TtF+maw*hizFwG2noN9kyj5rlrls
zY%=o>cBZY~`uQDMitt5X5;sc@-5?>dBMU<})jCMj`i`vFJwj8v)^}vZ@8-2m31qGB
z$hzZBtBTggv#HjPr$^tS=eoNdcXXv%Kb|EQ$B_sbAI}Pl-B*yv_;^-BvF-yB86VGT
z{5W?rM2bP_c-9S%S-;XKm`wtw)2@#C0M|38om^;B_jHy=Y>Xihaygyl7aMRONhk{&
zaH4pb$mMia;k`1KOqt8+ta|rYf8?3KO`d1p->P@*dfv%{w$9FH$<@bfv67S}S06zl
zkMmhreH3{hYysKuF_{MiEi}BI&ua9jRY|=hn?}WJ>B*h+v94#XIl0jG+BK(c`O=e9
zw|wb|>Q>}}y<a4b3qJrv<PsrHqO-My;?Zof{^<1R+x2ghXGUkst_Uvj9-S>a5=fY9
zbhhkBAW@Xj+2}|j6Iu`+on7xfSrl3jrlO3_j@@fL&NIQ_P{~%^sXx)7(#eAsd@G$i
zXu-EKTaNnK3N83nW@FU<fcDw3EjK+oV|n_~yY!;WoaxyJ&;Jj|UTXd`*pPem0VOlC
z<+utapk`#tg+Gvhnvso#KR)PqsfEpEH{YjEES~MiP=lYHZ3?f4G?1B{joo$3ACL`-
zGml-mPw!AV&n^I%D8RgI*``1OVP3Xh?DBvF!n|xmd2|ZEOVk3^?|!{i=>i9V{M7;n
zfm-E)Y}qOyLNeKCmA7&Pw7JFX(Ea*tWs4mI8u}JH2ox$W&i0F8z{}g*;%s!=ozyqH
zr0}wI_XqUfyE-g$FlftQnOzY`1dL_bGFk-*EtXL^e!ya;niJ4|&d&HQedR&@S*yX%
zR1xIaa^Ts{Wh<Am;Wabi*>a@UBwl*pQ~DHF#rbTkl96W<-(b-T*;sXOILPN>w)#vR
z-sNoN8t`zgNr=EvN>-f=Roazo#3l|0xL30ghB_SJ{+g|(D(Zj-dzIl{)f%kW$cRgc
zmtOO<p6R-Ii1&K6sOpD$)%zVls>)$rwYPNxY??zYa1=ZD2fgX7qr8e((*_fYjq>J*
zXagifMtNnl0TLZ%lvhR@MDo#j6zld!J?I<dMSwAo>MMs@RAqYbAEDKAm0sDr!6mlW
z6p;-`fLD5Dd;}8UmEOSLd2b|A%!Vqx!AGuVaiPclMssLnghE!aqtEDNB~?y7lzo*~
zF76`@M5?@4+<#9fhmmMP`mwHh%vCYLD?LY!LQQ&tS9%VRz?k5bvkZ{HnBYb9;Keus
z(g21xG0G)1BTq|Hw+Y_lvlvNCo`gq|NcP-Fmo<ta>Kt0SpY2r|N3Up!JNowPkv{dT
z{zhggSYk$j1khr(S9VR1&|<dNF9sEm&|<b1g9=S$b9gsq3%X+}JI_I&PBG6xpiVK*
z>la&M5COtGFSf)c&@Ofkyr{O+tE@}kRj%hN75LLugdFKo#~kEHmwIL2f*4?ydeOHi
z;s=R{f2p@%omWKs#NZMCr(PNH6Gue+%e-P)l1qt*f0;Mcf!nb{CPSqz^WIA5TgZ@H
z68SCn$|zm3V9Vv+6km?DQ$gqD-dmr(UJ#YC;x}2ssju*+_#&Y#h^Du~duzpiNMg}^
zrB}`sWR_SnU-cU;ux7r>o4Wh@EU{+3+AEgnZG5bmulCmek1VlfzS?`Mm?}&7Td-)p
z=6ZbIg4DIwTT!&Le|puY?dFW)e3{Pef#zKHrBi=83jU?nBSNPfzAO2qx4>>lG)R3(
z4e2ON|8poh*_H17vi>Jb^BfEV_T1$(CEAtT<@Jk@1~S0d<!vH%S3wenxA<A%Z$RP{
z6LCtqO51P_N4($e(456nJ@$+>787kZ)YcAoGmfO6?Wy|}-vO`NZ>>YX=;mAS2id^h
z`e(6&Ub*ZBCfdqD>X*;*G|=!6>;7l`x%eTkTvFBf(%d0R!*`3YCyqsXcIeOgn%H5l
zTmlA@xReM}F=Pg%eq`(V=p7S3IzY5G_amh_O{${JpY~>)PpA6oeUzNjUTjA_16jV~
zc!pK?*Po4_@hW^oBPL|eP{*4^rQth_XIbhseRlk;S1wV4i9}~9(EyPM<T-ZiHT{ha
z=ioIcYJntadX5rhK?$t>UG!!Q&T&~DE7MJTz8Ae%-tB=r_>$cvuaZhV%@+1CqwKTS
z_4{LBh=pE!2GAuh_SEm;sUdrXHUEo#U;K(~7A(IZ%@r>qra`0;Uw^yCCj3PolDOuT
zE4^SM(KRo2+75_BFy5dX*5R-E!Ni~(Syfn6L#jbJu-*r>b&E46vvM+~rEmKmy+{wv
z%E95t&&VbDFfM6}a+H6h|1wbTtW@AnvFd;i&~Q<X=^;B%I%Kmb$D6}_5J=R=q8#5p
za)b{e2Kox3iX63+w?N5(7K?L=imzt@XmL*S_SRNER{-Pn_8et*jv8I-XAf^OW9g>`
z>+_8YFl|+6B-@@N7eIV`B-@@N7eGKlmF+p9-B5)NXc2={(RSph-{pt{T9SvHcjBxL
zA2K8h2efwO&;czP;Cy7-eL2b<(c%OfI$Ce@90)Ph!6zuOFUKdwYLEcimm|k&km!&5
za^zS|Bp<8y<;ax*$)TC_z8nnPck<i-QOn|Q>35ga=E$MI$4AE6962(AM7Fg#awq^v
zGC3FumI~{^Essop@Rq*J=sMC@he6}oNM9WWjcX%)GA{S=ac!he#^oTP`beLQ%ZU_m
z`A8q)@*|>=0B(GGCDUJ4%Emjn&=h05PflcfJRltJ%M%lEkkE9z4-;`Zc;urA!~`Ed
zzrg-)qOLWc;FHG}@CoWo@X6x~AR#!xXCGhiDe$;cef;>s?I2L#sg4RXIhg7clqLsL
zeex6r5(8<f562hoN8iQjZnZCC0sDE9exI+}C%4zJMv5a-KGx+Wvr&Bz0QkTscjrK&
zJ$&H9?4mQeBUUm4>P$B7J^jwuOrP8y0uyOw`cNYx4X9b{BBhz-lbsQZk;L_(Gv3Q_
zpw?{m$I0*yv!xXPP91hO)e71MNR)FftC_6d9h>Wu+g@NI&0HU*Z2|{{pU;Y?==Ue)
z`=skbL6K&@55fG*AO!sA2fmEA(i5iWGt8VFI5lS7hx+hSv3IctX6X+U@AAox1|~|l
z%V&yt0Z1sii=dw3BKWw6)y&eLF4^OVP~Y6+GsOavpZCo@J}fZ34d;Yxpv->u&_{Yz
z>3+M`z=Y!a?OFo~i2Zi+1c_YtlOZ1A2%rwI_-y^Lk^|D9fTdn>z*oo*m=j5fd^lfD
zo*Xoc_al3Mw*E%hk4~=CDSq_HU=L{k@uN>3dIbrHAE~*Hrm)pdDxOF`J4erPm7Q=f
z_^~MmgTlQNKEGJ+fDABB_~7FC`Aa{w`P1pSbM<<z($fwGomxHZlLyC<2pFe*^>5^U
z79=oE`)+Q<9g?3K|2gKKua^~{LwlBKsF|Ph$(2u}fyg-@BKv+^b9CoRtk-<~wUSFt
zHBmHi$*CraCN5DmeJTuw=<6B_F3^{ExaKHIN1U!X)kMSHHJ?1?>E}nBu93m`K~cYg
zXl<~cWi8Zal@10aRi!gdgZ<JIfennoe(8xoLXE-xf_mIX`00$(F!swrJ=uJiUwQ{H
zAu`M_y#q*y4D;LG!B2;qM*F#U=nMiCKibKh4mXW<GN;2$qy5r5ATf|e`{5n<c^9n9
zPxNQZO8<Sa-bM*b^t*FtQNoQSaGY%SD>1hJMeV@`AOQke1R5aGz$f|9Md+L|Qse6s
zcFV{5ocI*K+=&JgiKh5r?cE{~$muNe6Mb)dx?e1yLXx`5bU&67FwG$(Xg7mh`$Qid
zo8cgllbAtB6gPROoqxz?rx7=O=$8Q)m`L-XA0yLQEI+%k{QM7p#+tObR6pbL{lo7L
zTZbtFtnFeigJmz%kHnYw6@K`Qm=Ip#$MVxmkqG5Uv(R#VRy^&OZV`*SNR;-&Eq*N$
zfn3gZFW0xmm-}VBgN0b)`q3FSibN>SYWA-c`liHczjSC=Yek~femJz#v;h|gXg~N7
zjefdP|F`b@!H??&)eu$#r0YSp{4;$<mxF%kt-yqG2mSIm6-eZ8(2wI(6tI9qKRD<Q
z-^xP|A`uiIw}bxtj{NdSfa>Z;w%~KUeajymQ1WL#`sI;oqygxURMZ7gC>RWA?*%eG
z47j4xqOA8ZJwM&LM)zm?-U}Ep>kCpfNUBa_Pi)gSJUA^N&Q=i<sM7)o5zK=G>a+m1
zlu1>PP<2|M*&{rdCz3C}O$!u1j6G+<gmg9Q^{xK<hpGdz_+Sz@Ad3$YnAHJUe2~Db
z4#?sYDT-emki`#D{mcxog`ev!+krq=ndx9tjxz(&3it}_nE_Z~IPGYJaI+$iu?SYU
zsE`%H=_%XwKe;OA2aFWLWK|835f%iLPP}}e01i@wb07h}z*Zb2z!%txgM{J>Y{iKb
ziZ39=1vtbP29#SRIPF)0G^~fom?3VKg#o!70TSp716YobUxB_bkk^s73VfC53j^T}
z)=9dYlpD~}fs8LvxbI!OaO{_z`j%iiU^K7>P&AZ_!fC4m%0JWFcInq#75Gy)JA8m=
zUmfs>wOf!-bakMisAZ7QWObmVIgg-0B5Yk9xbdF>v2{ue1YQtX6A%ZXC?{f}p4J9%
z=<G3`ITCypP@>U0ah2`Q{mc8ZNA~FV7K0_Mo6F1pSwIfRAd%~50eB2*Nx4+%HSEhh
z`tM(^aYU%LYXWlEM;eIK1mM%i+_^-35fI&)D3}|hof{3rUj*a@C4A+HF?Mh9z?OLd
ztu~NxDm{9y{<YgzOPz#H2da70J`S;059s5H57}5?0_%|7E<gh75VeaZxClNTVa*Tf
zPn8^TM5qrOu?w5W3wwkL%g>1BQE88}PY&u+OO87-RNCWqX^{rm9H-LqW#2p^e_?|T
z=@Xm(;>b`jf3b^+G?XZSV*ZQzLm0EdK*oaf{fG69F8{@V5w)gKF~d~M0YSE9n>ncs
z2v}}FP+AToAO{5H>N7|{4hUlPxrQ!HgrTH1HmJOlzH~&tQ?0<C!s7S<xv@cMagdN3
z8-yyfHUtu_YHYCHJ3%ooBL+=|)T*GImq`vRQx%l+GRXo^RS@&C2YCKSz=CLJ9jTqM
z)hF~jOF)a+V3>z&ESM#F6-dakAnZPkwj{ztPEFr@QlIYXIyES}2e{}SQ-gAm1SASF
zHCQ0#3m{1-h<JiJDoAwHslf(f?Se?rIi?01K5VU|5G_oj-;8w2U-XWyvKdY;w7oJT
z=-~qzB|<JUf~j^AmcqOl!LklK;s}%1n-vtNszE?<R!{~WAR##`C<70Wken5?1CKBT
zck_c{S^@&P%y)F4<-GYp8TH^Rkmd(v-~kdy^MeRHo<ifv4`_>n8LL_Q)B2OX#X$^t
zJOIt7wv$d*pGE-MB^{KZAGm-@2W9975>V-&T+{^#qosp^wtOHVk`E;5V6csKoNSg)
zZGTnTbyn}`>afbz7hDu(m0dF+DOIpQI4+RLWK|H3YaY!@A^~kvFynZ7-Z_1);@=d+
z*>B$3Bc$=yqP4dK0TX;}w_1>Z{Mv5qAOZO`wRQ|Bsv04+cBF5)q>pqJ?{I`jj~zid
z3Lz1Mc2EtFCyY?%{*L`}S^r(>cXmm@L`l92%IiEJf$&{0Ddq_vf$&}MhNc$XY>W`K
zm%VXCZ&9|_L7-N;Hz*G$Aq^1r27O{>4<yM1>&30FsE0?W4c4+#SM;yTY8?n_g0+qk
z)C6mT@=g&%08txk-Ih1O2sOb&vI&BK<RQBWf`sHDy9t7X<e|DI7@@Kr6HV|g5K!fq
zqXRX;V|Ek7S0Ej;n;=La9it}rG-@;&(0&eP%n!Mu53n1fMjorarr(<La}ZZk$xczK
z*i-D^*Yp;}r|ilB6NsmRa-0PT#8W|xvve^xN_Iap?qQ>S$r(q2s`E_H6uYTN0*Nz0
z>|4<q9Yj!{7sf3!W*1*@L<r|XP;R#&2}CXg5hLT+A0$9sW^cQUHXSb81qTxazibyA
zBoHnK<*WrH$&i=%p87+S>hFzE8aL{mbrru6l1F&JhSVD&UAQ}tka{D8#V<NJ5~V5|
z!m2Wjj%7na(z}64+>q?^Ab~I>B(K$h1j3LI;_6>SVNrD>S&nM_yKJNbK{LaVA=&hz
zyv|03d?IKB35by)tN@=95SSW{VIADY>9R2n1T93533+TA^XoC8d=ZgE`Al(4sPPS=
z$3|(<s*3g0jOnFS4g}qfsR~IqjWj4oRjA-5?m$68i>gq|*0O0};y9k&uNy7O#ybcm
z5XOh(wY;c86UXr(c`Xkl5XOgawR05p{U}WwC#RR|#%NdRWCw#Lj*}g8(!_CcC?G}$
z$N*z<sL>5pTMmJV<1{wdG};wU3(2D|Q9f~;7LpTukPw*`Ld}b|gLz{$J7yYf%Br1A
z=}uyGNZv_|Dl}oN4#mY~K#)MF4x!_IMR8zM!8XIZbXUuGNa--o!Js>d^BnWhoy2*e
z0)D)fWPmX*)S!{|7DWyP0qx^Z#=p`hvQYZq$02xsno_9+=yKYpA!QXC?KL)6;4d-y
zgAce*L$cR_1l*?~^g0^-L1Og(G?ce0B$h&nL8HI6ETpasiKS4<gWU3vTnd#eEQPKJ
z(Nbs?6|aE0UQI~3KRP(QJIC-T6(DRas3+Hi<klim0<9(_M<I}CRyCo3IP60tk3ecd
zL2*(-a?sstLM_B%v1D<W4)<8og$<BmV+eN@t6cO*0ed-MOe_OKMB4@2)o%>R6Cog>
z)5cI(ti^x?*v1g1pEtqIg#m4IC}SJz6f|zk*&H&m`1y=NSlPXW4G0=tpW9*=4om=T
z3CY!FkO0~e!fG?cB_L6_Eul~apFj|a!lA~ugmT3h4awp{zxzKcAEqoM)wZ%uAtPG6
z)yap9xYe#oq=Cp*s!DR8h46;%Z`kmV(Z1pvyU1XoQ+#803XnkfCM0)FK?32M5LOv!
z*AygnO}`1*yQV}7Rlf<zT~o=z2JJT?+BMxw>jgOPv@et~IoB0klbPsT-m^#gwp?Sq
z%eOCty&;B*ar47O-?O~1F(LkaNUm{$iR${Ea{sqT1l{(tufoQe*#3|_+l>Q1NVK0i
zVN(tS>Ib$z-zbj#5R&J%aaxDCA>7+e@-!$^Eo&MvisH2)xdMTcI7m|)!i1D|z@ZV`
z_<{7R5hK$TKM+#*z8i6o>OctlZU==*u--v7CTbjx9SkWqP=z89t(P7QH7n+a+4(`2
zL#(R6=o~u~lB*(MBF!Q4-YK3NJnvz4w!o+#KOB<l9XN@CG>56d&4*h9F51b7blXB>
zp(}R6K{Al)1R>qd6Ty9+WLnI)BX%+*H+ZrY6KPI{u)*_Jo(BH$XVxQT{BMJw(Ho@J
z7SjAoeq<9mD{_MeyckkSqpMWb^}Lyzj>V0ZN=LA40S^Q&l7J{RdBcmL#_iEoG!my_
z@?z+QcGfh32lx0!Zu;${kyPSu<knd<3n*{oHf+pq5M+}F9F)tp6d4`kgK`x<$^a}I
zi3a83<|17)$W}1>7@W(R*Ec%G20KW!7BiTT?&pcH7dwQ#S>JdtHY8V`&d*kIkY-3O
zMm$>W%2se<a45S#I71yAI`KS|aIjj8G`Qh3j6L4Kcq~55!SN%_Fv39qONnsj>Fx9v
z4U7d!{Ow#tyix)#QoWsv;P9X@0j@#4mmc5PctJ_Lms@AYAX2@T3p)<QYJnTR_5Iw8
z*{rasF(l{xTx?3xq9H$TG@UJMYCI8}o-6AWOo&d;MZMBR5`Mm@nl)%<G=Hi(S6;#c
z6KSe*aS5-0rvddru2PW7PCWAH{fRz(Un%MLmwwy<0)V<dzKVM)AbDbJMAYY^sNflF
zUNfU%Y(}nJZ^Kz3q?wV6^){R~0s^|tOm?c7(JD4GS2koYk!EHt8ZwT1A`Lpthpcn4
zabxU52ZuV%hlC^Yf&-kz#ug*5S-Em))XO`~tXxd2@$v+4&}lwm+l!5x5+6Axp-%G=
zndDo)Me&ZdIX7c_x>1R-&B)oDYvj>A1kFVO=oV(RG43tilB;n~Oiajb$qhB87EL4y
zye0SMyRF7tgj^#V*v4p5{7tUL=c!0T*8L_ok8h$A36XDd+dN3uwL#+Jw`^w{<DTZ<
z=4yPOkC?>G&21ucAs_o~ZmavOe<)BGCxZ6mX6#5m)YfR>%G;BRr)&;jUk-Oqpz**w
z^v7-f^t-nhQ`L&ZZTvwb=LMo}y?ejXqr5MF_2)kyO-eKtOFR8;@71$!zdqf1-~pZ+
z=mnl`^35bGfj5!*i1&iTBTaZ#NWN%PLXQb`@6)SyU;eHVz0~vq(pJ3wQm?+{zkOCI
z@oKlfbd|3v(F;QKx{xi=56}Pn_K_v=suJFQy8g8#JQ+l);HjYgefr?>C;MaX@;*I!
zi8q)My(>7;Rmh1)hvXAa{qV%ltG&D7xh4Azq*r_4)h4HOiRZiZOgvYfc>bkseO|<K
zQS`_X-id-Wy7%bYyMMp(cJf80SIfnFQli9MfAOjkRI4cO@d|&t>Q#ErDDiM&9ZNit
zXxz8FJn;~on!=|WN)nxVN^7Aw_VY`^l)&lP3rYzimv?Xf-yVSK_8Q7S+Bq*kK~B6M
zWlF`Z1bcR)JD1Jg=+1dTJloW_mtAnw(JSTj@DzU^i@z7e4J%)QdZnD_;5;uSo{vg&
zvUMdb`2$h*gHdQSc7_ET-FSnl?wKgjoc@1aiQ)qP<&`MQs(U$0<RB`8N+;i)`t3te
z?WC>5gJHt16=cA^cm@o1f;nHpH(>%)uw7~L1u<C=yg1eu$bInw6`Ht|;myaAPkdef
zPS&gC-TL;Y7sa~0h)&bDU*g3+y<Vs1s_>@P3w?UM+Bwm?e;;U$j?k}HzizMeZ6+FS
zH{K|ak!)e~z?Yq}J2EbRwQr(!z&oOuu{p=|LZun5HFh$ix0MJW@$wb*d-$D!c^W@-
zM<l$*z&tNMXG<i!$G|*{vTq~)0gc4l)4e(vRk`<W&(rt;bmBs2dtQVuzYqzb?Rl-c
z&<PZ^UO?NGm+?lJpFmOT0bp02Q7Gnf^~me&$>ZydH-muZ-jgR|c92NBCr_?7f&}WG
zJgmSV%2Ml*Ci__Qaii#_eU1o4sQdEd4g=CaWM3W@Wcg{fdhm?e;XLJNy658tPP5@p
z5t-uy#)HFo9&w-^Bw!BbMZ`iMNWdJ<LkviB7Lb^;9L{TSG*7I96GJTZ{g@}$!6ge;
zIg*EUa73!4F;GtA;VGTJCGP1CufyC=8UtH_Bjzahj$BVT%G1RE1Svn0CjRv>^l7K_
zlnZ%kbR0`onrYU*!suQBKCFfhHVQ2SoX(T;Eqn#a={z~#0twwu=jC01?sW8o7<|5U
zCQm(|C+1s{2f4F(a=s;5m~WlSqxlvckf=xF>}6M;I3dyd_lDN|a-Lj@#5ZVhIZrM{
zf&|*-JbNj!9+`V!m@h@LDNh?(hk@a`s-R_{fnm8Sfs_Cm7?vxMAOSQmjAfvS^d3tr
zpp6S-Wv}*WV}cqS7shC|my8udyV53wm1*g>o;Cj9s=%MZJoo^-Nntrx0tviHVR<qK
zB+N4@9GVsu<{<_*&wF8YYFL;@@*p=kEX^ZXFwc}Qndg$w0l~q{urfESrh7bRyzZ(1
zVQWF{bY@siM`OI5&J1HZN(~Gow3rzV%&pTxOh~m4!|I$mE$oe;Sz*n`r*<R<Wue$d
zVT2rXI8w4;?b%^1s|ig8z(cc~&;HcisQ=7-+w5S%?DK82gM@<f!}8ENNTALSWA;K*
zN|2Z;%nv8;mznT+8c&hB&#K4s0JV^v=x)THS?J_J3tbDHJgB`d49myDVtk=%VOZW(
z0Es*nh70eKdGHgogc`1QrxoRSAQoKAUM@EZpI_|cLA_ydSe}`P@nx~aVZXQl0TKv{
z!<h1ka?nAd#o<I}nFsX+(s6M(dArqy=K*R-Sa~3N13Uh#-nc^eix^!3Cw?8tlhtKP
zjekj4p2|gHWV$3QuX=z)rc1(&ZR63^1<G_u_=fxV&NJ+b3R@ahx<psF5{Rhq>QTQ0
z#(<ZavC0>WPoKdjJ7azd*Rd#dmZf%Q0Sq!;8b+)tN=w%nmWGQSl%=KX4AfedhU-6I
z#dv8E@h)Q@zGx(#S?1(HCzh5udC&sgvao!3C&m}(mW2^}i#+i57`~?L!ts~KkjJuc
z(S24ko(B@FU=3a}O3GF^dC&^pim+V4i}4k_72yIKlveOogfRtOOpY|BU=F&5RlZ~_
zd1j3RL1#bKIBL=o-kNYg9B73IAl8I2=@M$1&|*y(cWXp1F{LTigqu9dkFmsPjc*;B
z-oq#>Tj%6qLCtkxxlD*O$YWi&!7UP$miX3%OFLMr=>|%SX1JTvg)bXxm9Co|40;J?
zb6Bp}ArUY(hvh3`Ac3(tTq4fafP|i#!#9Z|vP6pA)y?4+&sa4g7tDKir%PWozEryI
zc5<P0!QElG)D+|Eg1f`=WiF7&Wp^0vSXd(qx$F+79+K9`lDX^-7j?0=315bJb8WhN
zZ{v5aidrWZS~;u@d&CM>jK5}98;*&ESCGi1HjIT=kxMpmsSUSzj&JqgD{{g7xHjCj
z8-^ka_Tn5ma9A6DrYj#~Vl)*$6u$2DuO7YFuM73;R``Ov@ktEXAYsQtVL9M{MBay}
zgujX=gW38qG2nEKDLLr9$DC5+pyeEMS`IyicFgHS^cdPP8gVF?i3hZk;f%_B5zNGq
z@?;pB4tzT)PQlEnFb`%}&whqha>{o2_=KdV!ZMZt3D8qv#4_{9ym9ij=hD;r8O>cK
z=fZO93|wM|4RN;%B!td|gCT1lEkno2k6%q+>u>CLHNWZz5!O{lh&=aI5~{`;0fayf
z%};y(V$@g4hUQC00yb<gG+&OoAOSKoKOpvyKyoQeo@wBZ(<FREzSx5VfqEE`FY5s$
zBuC`SdH@N@5&3pK#A%cnlg|hKt{?z3#?gWHBgQy7kQW`3FGqeP2GW>(Sr3VTHa0(F
zo~(xiQjX2XUOlge1l7a1d|nSNK>&4Jz8rZ$BJH?*SrH(CIxb%Zl?k#P%V!0T8-;B^
zK$1C<R2wW`#+LXBNtTcBY!kJx1jUw<@|E{l+rJzCs=!~uMS~BNNp`6~0%cOZ9P~f}
zWl}x{JsSBzQv8u$_<p_!Er}sQ%lGnSXen8!`^otTE$LFaWZ@bV4sGSrwea@WbCJW;
ze7t$`A4ySZ)AH5FL~NOW7TSmT%G~_xW6PH-z!Cuq5<u+_^JP>C5}+UE%cv40)c!C(
zZ!XlPsFD~wY?_s?&dC>HljK3}qkI`QNfyGU+4&SUQ3p!~v<3MYAM=V0XR1kLyCC0)
zi<(VR%`O%-%X|Y3t$4AmAwD7LV!L8NBB#Yvv2>X!NmgINZXakgy?05z>|bCKH=p11
za#I?JEXhYKNQ$IzswO|<3)#X_NSV&JdwPoWSSDK-2-NU0TM>{*yUbPuBv6;xEi6Tf
ztPm}%JqSpya3o2e6?O~5S4gg)7RDz4DQaQ=%vWlhN*XuFc)0>BQAtPu`G4A#1QPQ9
zv?~cDD(Rp3c{Q?<h`}pqUB3FctR%^U+<Lo`Bny@FSzRR+1+)$M8DHC#RD^6d)OEii
zGR`JhNjDBbC2g`b#3v-(WZMQLa@s_;p{HJpNd3+1`60$l%{S-EjZH9#o3D!tXdof7
zIUkRz9iy%N`T_0x{EV~dbwiAwl$`JLv9(W|5%o!jAJ~fF*v|dIh5{2%Kjh124nP9x
z2deL3)Pw6&_J>%55yptpLw5HClZKgmdG-|~CCZnNCW8dTp?o}=+=U~c10G>NjW8ZA
zJ>npc12|$kfcm_Wj@YghBoL0|!?kwg2%wI!*GC$i%8oe*<eZN=2-Fvk<;#uQ`n)e5
z%SUuX&bdB0=aa%Yvz$?wl%2GFGd@A^r0ttQBD0fqzPUc>c}Do=&LDtu#!-QM^BG44
z^37*#-;BgSIzzsBHr;7$5YUE1@GjiIH;o%I{X-(SfX*Fr1FDtb5$>4Vf&k?3h-|zd
z0XaM(9WzKk4v(N|OsB!F0V+qUj3{Fx>9;D4X|4+VEm}RkK(I0*j~9W2U}Z!eF9L~H
zUm2-4HX@D}5rbO2`gTMfFOnQo-P;j)yhySD^mYWti*DiyAi=nZQWz~tJl3Zhn>W^I
z(gL)t1T~&<5qVOe0k73@5xDiPToy?0MwI;M!{gQ%1+0FR(Ww};Elc(JZbTj#Xu#|9
z-3X2h(EZv5RG*XB*eat{@uZ0KTwp?EQbZoA0f`JIMKFKF6G#w&VW+S&RYu#JrbNVU
z7cn6+B~mCh)<HsKN(3A0bA^3zuWDvQnUntGJH{MLRUPeUPBAkgJ%0l}r<fU$o*yL4
zJ2R3u2j(TuPYmu<K8&cdBf|4b9`c(Nk)B_&;8Z?}kmqm7)yC{&end$|8z$JW@y3m1
zAjBZrK%qkd^CR-&21w{MKawZzX@dmz{0L^J)B_sO<aAL)EK7J9dcY!>p2wj01i?iS
z8J&QH;G&2foiw0{MLHr*NP&Rm(~b%>zeq=9goLj^N=IaL0uo5+2ztN+*ki$6;^h&X
zkg9msxIbrk1oy2l@pj`rEc`k9?p>pPY(+$Ff`EyJwIYH|kR(q7*p;ksf>9J(8IhYH
zxa*2ED<g9Af?sM~#r`<KXc%85iw1BC2Uk(M|2?{3L%8}##zr=Mg7H+&KO;tj_6pU8
zq``V-O*A@}uD44DCQ7#6E*VIuus$LmC<Td<t&d=ThkSHHYUed<<V549(i#VWoMcVJ
zBW__J4JC?1#cBaaAk;*#eAbyGK+g^A{6yo<vJDObwb>03d61+bcaj?-J~2-R34{%#
z!@Ve5qk#5RB;ySGpGn3&(XXfz{EPf|BP!h1h!T&kbS3WY^*Z~t3I~HuPcr70f-4#l
z(jcF$c3D9})2$I1=Ym8&TglG-IUqi6XM5i>UN773Akdh--9ezTZjZ=#t`RTmcIx<Z
zXm-|!Dy264_GDw8Qe10yUvME*OSM8XBaq0pHiCVpPFx1mA@-+f#_gqtoNQ?fIAj~B
z5s$|XMSNlg2a;qW7z5}iWFzt!7>A}AT{<0c5NKuOh=V{b<cNbnF60Oy;Gzx?koH(a
zDUO!16%&knHuim^`K@5sW~5VJ$08ol0g)P5$0GF_%kq$KITmT!%-SU?2EOH&h;o{_
zrW-pe@RyB3s~5jGrX)}Ei{0=VaZmFLRXT;nAmM3#iPS$0PeYS-V!+cNr&AGmiCD6r
z+P@>X{(2wUO5=cbK9cck#1$<|Jl+?ZR-M?B)keoB&PQ;qD1wqUrdD$?qWGhpM5n%e
z%lpx<WC;E63Hsri@Y5in-$i?b0*SmY(g=l(PvGF=Wp=XKs8@Q~E+LpexNMgYBqg#N
z3rHYbrp5yI00gv^tL&~1jQSm}ItWw~R~-b(=4wQ)%RvMPSIP5j(^1+R0@|C=j1STu
zePDc(>3=h7A9TEd3OP0^W<($WITq)lcx{0M<k+YjctHYkY!t<MhX#flD8q^AKYV12
zca=<Zgs3DFqjEBYL=c)7MW{+1_y#J;<fxb+f<T2#j!G8{5|Wdn(glNr<m9OBf^Q(Q
zI?7#eXAo$})i^sPHKjgK9hEK^Ux8E|l`a@07ljKRMz&~zgG$ki6S&M|49)a^9K}=J
zJP2t*wpc1`!S*f0EPbh6DtrRsQri?Dfw+`R!4GFQA<b8?z#?O6$qJm#;!1%@+^9TQ
z3=%RcqBvN*lG=U~GR0c<{UT#^*R^&*z(hgT+64g#h_z99V-h4F)<!WRkaqxy@oa6h
zKpaIPQmg^3jTYWR7XT;|2-L8vi;Z7OYn)8zSZEEJwS*yS)kKqRZIWc7?MwN?-%ZG4
zY+yGmG43hb;2_Y{enV6)?;s5jHbi6m7z#2akFg<&V<<n+8b%W;)3)@2CC2lvvTY6q
z1&-UCqLQcB7L}*sAOnnTQJkDvMUAZqHI=>TE}s}{TxEM54Du6u9Srgld!y3jLIxOn
zqv%D_7ziT{u=|%9zmy$tASi%15S3@FoA3bQKr|(m*+2r~K=kI8y!kdEgCCa77X%~^
z+szjwGCyoLUyzVIT-SV?Py}&YG~c^Gz^ca`9Vmi0?i7O}h~swiMPeWwkD~eBgVx&=
zzAl=vtiTm*Pd_9SWChEOn}WYYaZrB{S-UA(v353!H%PiJHxyR|{uG@AACSvgI~S11
z<!n@*xB`h>&PK5SPEHjhoa)(V;!-rz3SkY77-(JeD$Tj5dNJzeiw1RE$excPgbQJL
zp^k|l?m}LaqPU-_F*c>fJfJ{{MfbbdnH5HpNBJfs|EVO}*T-)M{nuaOkp~5^_emS&
z_U<a*amVf`{iG7MHJi!bD{^+E<&PBA?JzsPbkwK(RoYVJJLdm?^1MN8f|AatDJX5*
zkm8vE1u`1JS6(FfW)w)+VL$<f>!&T%fG`fe4Ju$Stu+2nG04H7{xGOOIx8ds#-IWj
zRe=P?paKkTbn*=(PQDE)s6R%$7eX|~HYhQuph0&8)_DF_uyFEiP{9jtx#%z!cmNq%
zptOj#!jXV-7?<6?%DANrEW04&1BMpJzzpf3#L$9hG4}x=x%`bc@ppKdk`EYBz&>4N
zbm}z1fuOKqgkuYG0wW4!-~kyxj3_|Zz)yiTMWMB~3Y4k>)_%3|RR#XEH6cInmSYa`
z18)_`r{f_8n70Zr8xhTt-cER{ph;DM-7IO7gg47E1?t!WyID#uWGf5mnx$l-S-zcD
zK+STh=rFLvgaV}~TB)!pYm5;%^iVE0<Z(Kryxa3HCHOCKCAvM|r&r&;iN5${tsXed
zQj&O-|1g)cF>fVkXTEN`U2e?N`HDy6If%Mb4gB;8d;fkj^rZaeG&wr`4ux#{kdK?-
z*oS=FgaSFXHRV2TLIHMi-X%ZTl#V97Uw~!t5t;1$wTRF5uQkFI|F8WDCvecQ{y&e)
z{Kt=xiDNSMDH-d(9h2d|M)pdNSJ5}^gAw%OV>o8Pe{QVqH^!U;CgK;zuIs_#Y>hlI
zB7R~GUVxtxYL7loM@?{yBGJuCVAs4yw^u|ywyk@XQ%&}fCn1opJV?P0Ux59eKL+++
zyuqV&zwhSM4c*y?eeJrT!Q*|W3()NI{Q{rZ^*~*q{k>m+9WZ*ht0@g0Ggyy*8UxB^
zI0!U|%qWnnNJs;O83pylMhQqD%qVEt%KA*yE}HtHbi;K<jjL>tgF$E17daR-d@L%E
zx3HV?;bTz&Zegzz7}&r1G~MJg<1<%>PaO<8qyA}u+^B5IH?Te}kgsZigdU$36vnLS
zxQOq@3mk_EGLEH-YmE2Jz@Y-SNjrFMJd=STuRsa&hpsC?LJ`pXw`AxmBA&wq2nBH$
z4<tVRSRfvZB}$O|mkWqQ+8+xLV2QM#jugmS!FYcHX+iSWERdEWsUrn^b(V0U>QQ9+
zB)Kvokr*^T#X=+!A1%OwhyX@){!}0@H{-nsqy@>hRgjiW5B^ku9g_2SwMA_f&@L5Z
zR2HW9Y%%&PIhP7BQJ{sGW>oAe?AdKbt2S2(Wbh0ou&xxy;29*;x<Un_6^&+8f@>%|
zRy1z!-{&><>Nfne-hpjKZV9*|{6-p{s1AV!murO3o+CiFHwsz9Z;jHDHwx=y2>6Y{
zIvFy?8-<X;@m1ssYDgig{MP7LGQ^P~3k`8($oCH+8M+|SjC}v_LU#3AqeIDXM}{ml
zywDW=0Er+oyfE9#9|LJd1Kg-W)?>SISIH<xhCKVILb;lSM35O(h}Ep;cs^*uV+z^6
z?Z)%X$2c<N?Zy<!*+et$?Zy<M2~D+7BgFx&x-esFy7vwv=Jr(=Vpg*rXI9l>s*x?}
zDSM31o7}jio}6HS3$QKqBI4o&NGPzS9zx9ZRJ|nuZEwAdx8mt{bn`Z)!QOg&5}v7+
z;GMT0>M4insq_}L4qE)k8u8d=(>&a=wjTCS=<zl22^Djop4#a;4)QrjocBFYu7s4k
zn$Go@)$Wq3^<>R~3+1lXlQjntLRagd7I458GWa+k#t!?;lII6t`<@Te;BvOS+5-|Y
z17f(^L(>D0a5w{EKJhRdk$hWqK+KQd<UmL#Is8S`Sev%|SVIZ*rNJ@wy5DSDG8o(K
z5{mL49Fu2bkO&zKj-khO;>v*<7Grz;=4~B@VeebY(41^oOollnydMsW1;ok*NG^m>
zi7w|u7c{dsW9*Ls^TV<?9SoXhycv`83?zaYZ^mNc77<8bycxsQ^L`ux`BlbnFT(6!
zR_Q>{f<&bQL5;977Hc7uq()d7Yt@=RdRRiUjH(zr9W=|zsvHO!fvcR7P@AlZ$w?Vx
z08teakEWm?7=Xve*sCG)j<WF%1Ra$a??BK%F+L_&mmmX(@iE-QdyE$Z^)?~Keh!(B
zmrZaW=uNE&4g`%96Jm0$zl4tz6Jq$SvyJpFR|!owW~K+`nh#`_&2%tmqA}CKppjyx
zqXtbhW|A5sXrw5ilMeIJo`^ZhRW{GTppjypgF#0f<~e%MNHLG}SWL@YC3MtbY5JR}
zxkR~bse?g3y0+B8prZ~;V*zm-1v0=`8pFBt5u$D2Aj8U-a&xp3tBm0_ssr`RS4zRK
z8yY>0vC;vfn@%fZ0TIfU@DmLyV>h<o*Q-kCnEx6!DrUATUE?6oX@xa0dD9GOfUqW(
zFXn(Cq0X8Z2GDlAMA#x&$6Rr<v~-<=Kq2|Mm<*>&_?d%sv1m)#%4jiaU98P5)*m<m
zjvUmmzsAjHN^2YhI%`nll!DG0)WiafB?6r_sEIW#<`2n~(Di{0ESNAKE8XBA;2j`!
zgM&c7xwauDC)5xD!iE^Gnb81LLYE6RvFe1`x^$C+;0MAc2Z4S%ZBtCn5FrADO)>oV
z8~yxd3Ee#Sn&l?VmZe`i2=tq2Upoi^AbcH@M}i;%gs)?Xl=WwhfLjUM*pQ^zw{)9>
z5Cp<D2O$WAZB8kIK-fm5DCY?HEtj3FWy*Z9bf<%WyI|_hnA{R5Q9?l2850NPp>_xe
zJ7djnvL59K`01D3Y)8s`ymYsNkP97lJ38b7VYgF?Tp;YGQqY2EiGp8>*~eZgGVd?j
z=OE+(VV{GL2ZVhwIjMmN5cb7ztE5si@Gw?+*{LFPY+0=X5e7u90}%#9ZA?xROO!Am
zYGbMTc3;g$Sd(5;pZe-i2O}RCM`JRoD^c=+aWv)^SBOCZ<7f=GMEEj!iGp`>PqN_+
z&96G0bRe)Zqn?b(Q%Ohzh?6mSj}RmvPR4MLa0Nyb7z6ij2gQ{k@ic2>wsUvG-*zvJ
zLX|=By5S%SoI!Cpje#6+2F0<)LDM{tnC1<N*B=rWOS;4m)84^x{K5e(C6*`!2sz?n
zDG>y;93Gb=JxHJrkISV*kU$?E$5P^6Vedk`mJ??Ki_Lu<Mmri7Lc`IHhK0Zw?PypC
zjM1ba!e~Wp9?-_eGp42|mze)_`Nzj`RDl1~UUM4VC&XFr8_gjdCfL~ELca-d*(N~(
zdqO-<EaZU%_JlZg7tWA=&1tlq5@$ExWS;FX#lfH@<0-a&NW@dg+rS`!F(r<@l!K(-
zjREbWc*dgi3oXn8uAGnJ2xjokp?V{!H<vxx(tNJv+_>BU1QSqm<Aq|+03@L1#xZrL
z$m~YaW?>x5HjgE4XIomBjaY6gvvmisMAaez6kBL329gWNksc(_7RE8skD@n8Zo=wo
zJYyvr(aIbd`Z$hdtKTD&n@F#8TnR<*ubNgCVYjw6JCuMH@dv&FG98!k2S`As<A^`L
zC41dO8m?e-TbnydRyZ=G#)`OnJOpVVvm%b=*RIf_ML=5<&)CHlwK1OwtRXGPBej4Q
z+Pb*%1xvOydspBukw5srT4(1E5?Jdfe`>8D(OTEVLtmh^(pD!i_*UooxLOkzTb+^z
zxzFNqt5dSD9PxRaRwKx(wxFVHj4OH3`U&Q{#VjcXVJkre+8CGntw;&5jdAR^(&kwU
z3f#V8f4arI^VY8*&xZ{#A@WsRJ}nLsB45Sjc~g)GG`@;Aew2r*MDhUfD|YG@GwAy&
z-sK_Q(^`<!R?*W~Njp<(zSZt%_=F6$+8qrfPin8(x1gwQXPmFuKMR6Wveke@tJ!I{
z8jwKRX?Hh}K-x*&4M%R=c=>I2JmZJBc&n0zrQLCNgikv0vKtQn$Cbw7*OfrxD`;_V
z5+v-hhl+d~CY^ZGjhwZ+)a)GFhbB!{A|}%8i(?H1H?%;4+Rt7rHSbOAkIUPhU=o+Q
z*HpSIhu57B#WQ|pTT0C-IfvqI{x-KeK)M`e|5s)Xh#ij0%VS_d^e}Y*yuFJwP~iwG
z>|j0_I}(?3V=$5CNE{OzbUCB}^%EQ0!R#LUN!ps2#EoMg_YR&020G3{9nHI9$K!H8
zIKZd3$H|l60d0uD;wRZ(JDRsOIO*WfwDu(745N9^%>nIVJmdX@D|#W5x$ZQB>C+v}
zlP=#y@)>+%<Yp??6?UqVIlbi-yE%f1f?SEq2@6Q*b0v-mOAQ5&H&ZbOCzM9frJ1bj
z(^@ip<Ti7<s{>fVYajt!;^2gIi6FT^o`?ZK0&Z{uzqz!U-jKPO%FYt$FFKpIs%6Xp
zp@^L&<OBh!0KyV6@v<yPfUpF{dKxiqCTe0rZ2xz?2km%bLJk=C1i^_3IbeX~N$qxg
zGud$(e(W5-65AOBr|QZ<?RZ*34s7@eq-hB`uz>{9v;^AmAToB#fHpgku_3+XUQ<#0
zvlB*An7AdGcwR!B5UqH?)Jo<hWWUEJAkIrjLxTk3yaWu*FEq5IA}>k*;{mg)t8|HN
z7;s^jB?-C51CmlD<l`YAfw3fkM+R{%S8YkgUCJKpV*YR0QU`%dyEGwBULy?<mL>|s
z<QXIomL@QH=C7W#Byvq!d&nH=DqG`V&?@tqgj_C1B4DgZ_=I-?NkR$CoTz$Ql9AVm
z>S+Z6lI!gH0SU=<cKv{a<hq1iKP_p&;Y(RRAOQ5GqXVrke`(hbz5?k>yM90d=}W2~
zga(S*DxhsnWE@~mJ!<X=Z%)t)HZ;PtLiK1{6UvT+8vQ$4djXS>7alWvR)8g(GZFxH
zYeG6_kbvEqkcVMFVuaY5$lH++BLp${2=Prq-JTF5gycbPTSATyl7$iC+XRge6tT9V
zdiXA(JQTen!5)3w?9vs4=u-HEqJC!=6(mn8<9Cq2{w^V}IDmxr|1Oc}!Z*!{6uXDt
zC6W(X+eE3+F1}~3-<jKszjsPX3VffCFWI!>4dMF)Hk#>)%U0A5YMJ_k`B;ZqM=xpy
zwRU4f8X(jr<Rda5NhZ;{jdh-G?z9eQR}vX3(&L{n&#C?^30$1zUZ^#7k!zxhv;~2p
zUbB?~3CL@99{~x-Yt%=o$r-hV%G$7`G9sDo{YUeCR|WnS^@cAH9F~-4#6UuDSW=!5
z1BrSYmaI1-Db9!ygX&Eko|I?ABnO5Xo|I?ABnv>plQ<)W+i_3;3EoWNj95K>My#@{
zS-%BnTM07hn@M>_42dE8W)l0BuW(sVl}VftdxoD8b3JQ5SOVIXC1X}5<*Hh1Zp_Lg
zR@La2bXrrNs!FoIKWjFAzA7o-{{<H^RY}<oK_Z8$q})~piH1>?EVz@01w`_&pek8-
z2VXam99lQ3O5S!mpI5i09ymV9jBe&F9mXeRg9MkerEdg@e8(r{bPy!+9iPPdI6r3D
znjFr=B&+CV4lkSNV9@Hz#AF=?t-ef52E-Z=WPmX-i8UZvCu>csFYhH;=jY6lviBSa
zT77xXfuPlw_mTlI4T20H-b=z6@&kpfDJuFPz2G_X16PX=96Qr`%Lhrh5{X0*`XGq`
zo1c<vjrA67Zc<s4WY4@~+{C(6n*YOYEH|%JfN9qht+vcfN*4hMAk0mM@^}yl5>0Jx
zGQ0>)je<yGa2GKzsV+<k7a@6&o1c^}LbBi@79`0<kSA?T3pY!W{B8t0w@}Y*1rBTr
zmN@MO5~?go%Ha+qAeSU<ciNg3ZI&hZaQ8<LXhX{!Thh|aGRKy*bh9iehdU$&(y}Dn
zDTQr#Vsce7V?$DeZ8Vc#m6UH4<7G&^Ajlqk$t;PjM#tch7?|iMtCMgh_aS@<Qny&k
zCcb1o5L=s+4_JVSG;5QXo!~?h(tujW+&#=Lv2{rqt$|70B%-yacp5168SB%-d^+}7
zQbv729x8p7Or|6bN?F5>5l&4~KK~HpI{-CF>^|b59pr_gf61PF*=&>eGAScWFp<}n
zNko_nam3Y)2PJnWGk#7lc-d^8nX{Y9OV23a@khj=?8K|)6R|yZdBKG29x5-^=aB~G
z-N&BmY2F&!mz2i<!9<#U)H|^_h%}(~vo$@<-^KRZWdW18RF;Q%8kDz|wd`d+8mqN!
z65{2pC7ayN)1bTu*^FN19kGK+`CdYZm-is`ND3cARNlkP=xyE>JDijuCYZ?Ua1tRV
zh9jgw!#cuV>TNzAJCc+kFPKPkB#Dq0OC(5xUilN--P^oB_LGx_-b?t2(xB%e4SL;i
zcE_L1=CR|loe~pij*~maMhi$RYMx|c|7^BOo^<TPpBN$gd_s{q-n=}U%ovbjNB(Rs
z37k#hh$Y!Sm+XHIeS*JzTOTBB4VrJ&(N|=2jtWjM+UHV5Twsa5=6$gXwlZKM%>`2C
z?>r5t%WOnnvm$ocu28%;NnEPXPCN}N;wo#{&%C|ps%^krUJ+NxfH)eCyigI>lK7eU
zPAt2(S;%JfGjB|Q!B05SXCPinri!c+6ri*TXoFH2AF>Pm%;Ww+DFi5daBM@x8<`UE
zW94h6)?#Ez`W<{iX-1}G{0I_CjZ9%|q~**uRMgQaoULufvYtU)Q~R1(uM7+kQs6V%
z!043pz94yWdCCkVutuj)T=KqcsPL63R{FYG(xK9Upe9n8l3Sce1c=I1eR13fBp@nN
zIBvwB&}u{EyQ%c7*UdLw&EHMQAq#9sy_=Fl7D%29mHrt;Ds9M!lT+;ZznY(yO?Gmo
zAaZg_uF4`2Feay>B7_AAjL9j4u;et`P-CB#60?H=|AX1Vw3Kw0_yoaeDd{djLU3Bj
zc9(6ad^1zrU9$QAYihU8bTpvBYo=p98oXwvq_>11fM%xPE#ELuw{77rQyF_wuIPOU
z7CYvSq<w!g4`ljRrR-@!TdL-@vYMw3Fty^fb~WP@u-Dqv3=-IDshaU1h}xEnzMgFz
zVBS-_-VveNT%VH5Do6v7^(icCbmSta%^G(1K(kY)8oNMk`2n>WyFeg;P?M4&CP*OE
zq!40$qHqY@9@>;rwx-gtO0&dO(U#vP14j&rAR)dfC5J?i5Z{!NQ8P#kiJMY+TT^04
zBnBT6ze=fFQesGyJjiWM$stj)FeHARvWLXB)Ih#<iRx_y3RU*4UB4iq#<zC;f&|>R
zb@khpTE=c!ziS4YTBqHPIVix{?U;ia%5J-UAqb$|RKGa;t=@tgDXENesNRmuGYUPu
zXo%U&|9#3R5`Fj<s@z&pxi^CVa;<GCkU*}rYZoMtYpHf$gPm`oS~$!~hMIpVKJ184
z?H*2<;(iR$K;&==_hV?2=@#m%N7*++&EFLtP058oFd=d@CEub436Y~IL`E16AOh+*
z``s|}wvyvcE>wlbQ}V%Gq@hG9cy;Pjw~*O?mYr(<Fm$S)ZKLB81b?=T4ibVt*BSj5
zGWuC*bnggLD?4i&9iR9&>61VL=&WsYkN`SMM*ky>-VUo9sf@Yo;SuH^{1;P3Lt*Q7
zWa}%^)*t|Q#V!&^0A8_e4HAG?$kt6zq;_PYYwXRDX0wuOjtJTMn%$F-1|rv}Cq2kT
zVCy%E*x`|8m*#I2$;RJ~8~cqSSwA2l^F|TsXEW`bwIi~!DBXRO`L)uavPe2)u%T;Z
zkt{q&WL#M!Lu!y*3gg&M)B)R({aI1E&s*l7T(>d@gw`yW14327isW`AgaE>dFhKEM
z+zwTtO)gTVr|VUkty~rOQ*>W^fZXIF*?mDmZgP?Az97+kCl}>SFB09C7`*#VDN^4r
z65UtwAUCy0c3;Ut_nlT`ci(p8VrLYIi1x1WW^PMx1WQD;Afd{PBI%+*0&+%??V{UJ
z1Tu$JjyEsegTG;vIgTx8axllS1x*g-6iFA2!~mL8gw}M3hTrx9Z9!4SXGN}PhXk8{
z%$?8rSD7{b1w}?eG_3a2us$y01M$rufc>#;FOb0gxJZt~Ac6gH5gHb?lJ?ZFma>9z
z=0l}RZSBAW!ctp1kd&xM{^$TmAS^9HNJ1Nn?Ws>MXCIEk#^Q1Zfo!+DNM21x8Xzn$
zY9KZ@K>}fUkv!nqo~Tu<(|9vkvZ_c9e_%pnm2F#)l&H?O?Wv8e{}8rybzJY{N-b=?
zqc^p%^|n<Z0*Liw)up+xYH2__Q<U*mgY;%*eq#C06xm@-DOvNpux3jTz&vkT6C^Ot
z+tvgL%=2W;jdZcIl*+j!U0!W&3bp!wsyf@?s*dxHONXlq=X55(Rg6Kv6^47x*=r(R
zjfpXO;msC_n>wAgGww8#*zK3tZS86Lsm)Zautx%$g22{J2c{)5DG)5kG_o%i0^4LT
zxQ=;|gvG0Zv1H;9EMWn1h{63myL)`yZ}<P)XP<p}{`;IgyL)y|=3HHnia0mrUNb=s
zB+<znpXr$mR!eEY^qHL3pG#GA=*M3iH^;om6~@2rPcCiX4@-R1uyQ8nh!4cdnVcg&
z5aOT7P3q5C;)}o#|7<RGA!mv2WTZQnbHsNdh<`pO#Q(2yQw<)WjiL8!m@52tr@z&I
z9AL+0OHC+f3|%MyQmDqzF&BvO#*lXcS)>3`sK#*Cv!Pv569I*S8*4(hq_$K%*%aC(
zH30uLg<m$Dc(5sS9gKgm-V`PsY^j9n^`V_11z>1>v78dG*B8qvQDc3voDwzGhj8JF
z^swqox+UZky18%rzn#z$CY$rCg$Y`p==HZQ;x`60A88pU0x_sV*R6mU)FDLZld)m7
z_-bpYZyoVZ&)Hf`Bt+O6`t}Yalt{ES<fe%iY$CeSw$^w2f4_GdpQO2b#L~8Ktl3J2
zUGe(1kga6$sH^tI=;332c0NC7xR;ZL1Cr|Hq~U<1dil$StM*d5_PBq0B|m7iT}h(>
zspGDs(STUll{6X<E4!r8+Bmx{Rg+1#hb8Y6>fiP6DV@+BCZ9#uNUL?2R(p`&SnNm|
z0Eoqoq}6~}?2uO5D^HFZ>YDBhy*I*C#ed47LOb<m@A-`lh-|B)K>E(m^#LI1J44q8
zfY7Zoob(2Clj#f*m_D#SOdSkuA8<0#b%m}EI1zo|K$ryo8VPHM!s2v>{@QUy5=d<9
z=YL9aC~09J77u;d!ZiYqT57HU(8@=XRtC~0N0U|tV(Dno%0QEpR+ca4YBT9yg(Z7*
z!wLVf@K+%bU#<bIWqa6((CZCTa{tU&u-zUeGJX4mzpwsen0nYurP;rzOm~=C@f8V~
z^oS%e*B5%{F!#@iH9R3Aefy;UPpeP=zqIm7dL~TO7OjaJ&W5Q~Ut0Th=zWMaW^`TQ
z2yr6QZ+81V4HrYVcg++|TKa=9^;FTEG~T6<+sl)}4TRorFeg`(nk0lLCz2g-RzxEX
zhVDXAE5YtZp}S+$O0au5Ox+_Vq}WEh5_&@zelju4p;jW&3w!+^-uJsORZ}dKyb@mx
zQ*~dFVD1yi(!34V3hhUP_HA=U62c;+Tq6nLfutD`!kbMPwL+p%z3r60scN*CMo2!I
zL<w|AGb&L+&T6ie=DMZ7|GvLu!L1}pASB7HBuW5Da!aDb7qa`W7MR`~c`rqUci;DK
zmp#sJ8_xL$E^dxoI0s^9bL7G~5IdVA7tVq7ug%e{mm(X^MPS4EixJ`cIoSkOEAf1L
zA%DRiJEnSjF&_!++atFqgA(~{k0#j81SFsB5km@zYPAyAcSQD)03hX#$n`rQDR)Hf
zkpLv+jwpE~)XKP{J+hAk0A*<}mO<W&+lzIT(OY}5t}=RSkLY(lm21oEGU@jsKIQ-Y
z2mbc-g!dx88eb#R`gP*wo<jR?{O3yN^h7Q&A;nlv<eOc*qJ*)YNX|Kt$X+Mz>C->>
zt^d<GeZ@55=f23j38O=rzKHSrI-3!W?k_C7!konX{>W|@#*&!ok0#lhr-3Bu7Y`jZ
z8I3E+q(6+j>w5Ti{*mz?M&rH~JZcJn+Ms^>s{f}|gHg&}J5gu6Js3?=^oKG`i?;`(
z*;Qt<Z=E>uvR?IxUtM)MO4&yiLbAUc-DRh-fh4&cv71LO<f{|MeXRF>;@4Mw9Hs0T
z>Ig~laWvVkj{-^Zam4zlY$2!<hh5RRA^)MOD^beq+7=;6u0-W_T^2}^D-nD1WOs0#
zjH|C|J>=I`U5&V8)fQfc&{w0Z^lhn&456<^OKV*9ndlqRV}_~zP?WN)t26uFhoUKS
zT@smHABq;-XZ9`E$-Lh+-8k&mRb4A4k?Hhn#UwJFeod0dfeUpq1wNvOhW+o(9f?wQ
z!4V-zMxwjzWe`A;j6`$h1ugPj;4%&;h}kmp^fiCunDXahmcQjD>}9Yl-4uIkW1YF-
zFKOVXeWT_N%r(X1tqXyeYl_)nA_FcUJ+vvVSR325BN3Q|l;)VN!1AH0lfbR!n8h&J
zlj}sXw$dEe)CL847B3T?ZH&EdRqXUQa&y$5Tex+@A5;20WHxr7f$uiPZm||<Qn-We
zfs|}x%x47R5Fjqt7~j8I4oo)C{Jpq7Xtdc;qSm<Zm!stI{nlb0LaEl+#iwP4{jITk
zX#`@VHRh$!<{|UBt#Rc7mxoy|X^m&h55AC%V#_29?vA~m7rH+4|D~*fpGi$53hplE
zB2jR6F&F6<yCoOf#u5d0$CW>)jb)U9Sv$&jB~I;)?I^>^NY@^_QHB#S%GeXjDC6Qp
znK|Z$pV#7&<8f)l$<i5met+2{eesU}%gk$W*;KRDWRk?2LhQ}9TTOtJ4Qx7K8IX1>
z#LSk+t%sAuY5Vk@FZ}xKzSuMSjYWvgzL@>S%Zv`_^_Tu8Sdo1__U@IILq(n{ugAQS
z$eg#i!>9A5!@;6iov}B^smMnRo$>qyvX>JTqQm~!n?EzsKiT4!>v^R?HjBXYa`_wW
z{qfv+!2?E{_U+Pt%PpbVu41M#soy1;+H%3B1DdJT71;yDTxC-KfaFTIz${(=peCZ%
zR341o3FHXTIT-WlCkL>L5-d1eSmOmJODhk@p6T8qMeA_PwFx~OJq4zJA1nMQ75uqZ
zd8}9_nb<!jWqOp}xts;`xa7RPoDTjZ(;f3(Ad{5KrE~Vi-ut?KY*5p{FB?#h)BL^h
z6njnp5dZha%%Tf#fbga_&b<$BWY{7C(>G5gebY%O!KtKgI+66vQ_?qYNR(eLZax=#
zVZ}#~rfgg=Tm!OP=0Do{T*76b(RDlafRyQ6%z_Me1bAiKymT=x`AjeLgP&wB#${Q<
zIWALTNQMtA=YZG%+Y{e`l<)&-Z&^gSTMBbY&kcgP*-H?@umvGHm!$U#Te#qe?-TTo
zgW&$`hebO^Dt35xMu(CO=o3LOyK*4$8bVSIh}W9fl7kYoyI!dHBO+P#_1H5L3L-`8
zdd!4^uo;M{>+zy`b2z&|ig-P~|6y4d=WiP5hW^3$pelPKAuK{n+z`V4z0rY;H}&rE
z!84UNV{fsuD`dPGFL^L{5jS86Hje5g6N1(mqs6ia8%L!qe*uG5WYT|#OExJzJR$hA
z=npYpi^$k>1q1khQ{Hnb72NR{e6DZ<cq1!3IWhQg>EcF}T5gD9|HSGVm3rnY5-Rzu
zVhAq}#TCNIX63C@dU|>AU;{txA(Q+;<(t(s`z!^LtXZ+gNk|EVl+7w$rz|N&U`V-E
zxd(=mko{Wa9vDs}q+F{YrFrFD0T0p}l-HtC6>sal@}T<(kR>Jm(ViQW``{T!nKr1I
zCbUopA>{@|C%0vi*SHO8VGCuFM;8B6rVJ(6s8aLfnlUf6lC7|+<YmoHE<KSm=CeVI
zJVsUubGN9%FYXF5rH^h=Zg_^647VtE!YPmpw<yNP^4tItF}A3Tz3^Nhqgta;zBK5w
zc1hn>xa;oVvC@XNqFJd&n{u<MD@{Gx6tk(;tUU7CRQVqppYgAl70K7_d6Z5<z1q~m
zByXcc-fgP(+rc5}qg-&cQ<dyhr4_#@ow4$VKhgsqlugukCI>q*JC)mzI9ckwOL=+Q
zV}TS5Y*wAhfMl{uvFao}jSHzbfwi?Fn4SHZa^W2rDnAn+$O7SH>6*Ls>WbjI+1;2m
z{6{EKMTg~01RaX`ir!ZdEXls2+?@jm(RoF&Hv(FsBO`D<VQNsDZC9S*pa{`v7Y=f&
zDUklSNB<pXWmWD`p4~%<5S=}W74ACRy^2e|R7pV}#!&hHD7NPa=~oHqJCygDA^oBT
zFf>D8hh9J`+M(Q)CO`_@p_r!@ngO9%hno4CqrM0X^<Pb>?<5rD)r9&^B-DRZsQ*_u
zhzq?sRmmZx-{rKMOs6W#nJ79%e6nA8i>yz8lm={L77)Ap6>&lu!Q9~0rT=w$@Ibap
zdEYb*ju4$L#X6-t{iaCsAJBc%gPQCC<$@AIkt%|cET411mOLRBW`pI~gUY+#*%7B4
zR1YjMPT>YE*#@zhL%y<aC>OC2qVt9#V#~IJDdLnj^>8*=oPASyOPw8Y%A2aT&MfDf
z`?KECt15$4v)(G|NRWI>be_U-4`tGaRmuNC-tXyS(}D_pq%wG<{IFtiQ9SsNc<_kw
z-f<oT<3R*=S2&P1JECUVHxwYXJECTP!*~#g2al+#cbo@BU_5v<@t~7XqN9liok%=*
zR6IB=eT**%j;oSi>$5Y0q0DhrR%tv~As#$|$BYMCX9npk$PDDm_z$Zm6t}wZX(W(>
zcI({CpgP-K)Di!6i_UbT1M1NYGlR-(54<pKT4DUxqrUlo)1ijFx=VC=l^elTm`>HJ
z7{TR?9sGAn|9)l=WltqO=8i3_pAsL-HkJzUU!SgK6)@YE_!uENed1$V9@_e}-Z_iB
zPA7b-@Wg+og-<h#9iDM#^x&*uX7)@HEVu^?oih?FLZd^RJFCN75NFRS&)oJz0c5;&
zR<Xm*>M-0or=Jv^bH%#LXzQHR{T^e7_owrEZ!VaXJ+D0bFy|x*bj~ZjW3pvto6rS4
z%&q9z3(7O!TalMs&T>KVy_L1Yw_E+XDhy^-_803VSFiM|B};?9hL;a#(w9`pW&JeY
z8<byCoB%I$d|2o>puCS99l<ma0(-I$5HAm?>Gl|3AkG?)7$pG(2ptEM`pD5y1cr`-
z2_2n;f(#~fbRwbSpwLnCAw?P2S`Dj`(KOwrdCUyG@le^<_1QcA#KJG5;HlEga6-_j
zLeOgoL32RL2euRilG8PzpM?FXLeWq4T1DLdG;sk!bUqaqFtkMnG@`pzuq->0#C?P!
zmAKF60_afd>v}#Pb!D$7lt75ib)m#EqXR{6=rwr;^EVO~Of?j}A=KhpJnTTxn|dH0
zEXds~<|P!pDS3SdH`Qm-w^Yd&v_qY1hVR@P+*f`}9415YdU4q2%DbcV>aoG%1~3jo
zU>yde&Yvd^15)(Q6NdqD*yl>!aSjuKaoFv|VNODkZYK_NB5~MlaoBlr824i}<x5^D
z%@-b-9h@!AH08^tn-DThJk*?bL+KDmfxz~O3dD4Cp4v*M<qj)GRC(Q46+ALyZQi}P
zAVq0yUM_r-VdpgQ#=5-zq$+r!a$Ql&iqU%9C{fer^ZGyL1W(L(KJPlpG~=b`^PI6E
z_ZF^Zn3XSiF|Vi24IV4skmrjO=>@B$QCsrf=Ddt07d3!sR0Q_RAt1$U$-DEgfn?Q^
zXK$SJ0w9grl8-j$?TAtYrcpQL-H6gjsKutd8&NuuH0q{&P3;ruXa3>oe|&mj_suci
L7^fec7tH=YOBhAD

delta 43243
zcmZ5pcVJXi*3Z1Wd2N!(v}8)ilq5sXp!AYZ1UuGsi>oWTihj7R?gF-L0i;O>%N3AN
z0!Rlz89E9GN(Vte44@zaDhi??tnmHLz4!50|4Pnz=lt%u=iYnnx#hiC{(ZyaM;i7U
z=o+XD%pIt{<F30$8N51s_#SuPH$D4b@>_bq9nJZ%VfLZZ?)bl4C$s;4QX6GfzoJ;G
z+oc!*^@OT4i49becRl`i&)$8KJzwb6r*G5bpP%iUeEONEdnO<6)i?QkufG4+>*-|Q
z|Ld9T-Sh9y_UzNQXYU4mAoJK0J^Lmb_RKtyN%nlMXYUu2&k#t1K34K?y?Z^{6JU?_
z?D<%q<h??x>oZUH>D&8}UQhRB#<N;Mv{436`aawH>7I`z|NJ8U@AJ%4&-F|`(uaNB
z-Aq*{pZ~v}PbVLd<untJkM`{KRIjI>fL%|)3Mf7UOL^f|@)=mz`}tmddR9Dz(x2}0
z$e*9;DNM>(R=(w?3cGlX>)WJ4WTVE``z}jS)qr+d&AF($VvAkLd)X(?Y0C>vt45*K
z$x>BS$qA_6vzq6%E*0OaicSc`1mO3ok#Cc^MEd+zJFbF<Kd`(Pv<?+NI4UmUs)k>x
zxS;Zb8Y;AUaurzg6YKke_C&=`s!}Xv6sY{9)+@J3sQjchXlUKdRY3jBj2E?gyZx*x
zyrwWLR|8k|lu4CbApESBH?~RAQ7bamdJPqK2ejetoXKui>>Vx1#@_EP%r1FRYmi$o
z+-;OtEl`M?YCn>l{Fm0MVx(I!I1HFT9qBeBHVM>`?&5k@ORj>4W7zHg)>>DLaZ87}
z6{`Ihw-J;oRQoaRqOjGRtDyF;um%6tT2{Q`s8H=+aT@`tqCn*pcVUrr9ajPMIxF~(
z*1Y0%M}?~Uy4wg#m0S{X$BLz4YCs*&p8k*4x@x>zI?S!8aM*aaNB9^d5XQUH8Hu0*
zVZ8hL=GFoiFV!7TYuM-i(H3>AaUk5pb$dk1x)nDdYTSV$3E>7rjXN5%YI5OoEuhVI
z=giISsMaRA(zD&X3+1Ys9?-IGWu;rS4rrDRdWe~uBY4@d{k1>jwp!*^8(BWfkk8<<
z<!<$lmj5azH{f33R<F3MaTw*QMossAHa<uTxhmeb+YVe<_rBW{#)5=(@4L|rZ{#|7
zxPkQ;tleC-!LFaCxKO_hcKtw-kUJop3=#+%$jLJ`4gte<XO9ln8s=8)b}J_Lf~HVo
z?smgk8b2VRw3~`;#&tmLWo?IP*H`RyD?TYhjk(wDPue62xy#C}E?fnTxu3m0OzT>?
z-?5Y$bHCdYmnzhl``w9#HVK6N?j}un*VYu&>L4o|uC=N<=peX(aM11!kO9I$ce<HG
zptd~dZr;M0P2E9LAbf-k8LrK}@rVPV5!dYzgBUV^IO3Lr7$hK$xG{+5n;ZfSf7Y#>
zcdM~CO*ZvqvmR^cGrZZUBeZ|3)p#PtoTli2IqS5W4w$p#zyj`1-5{8v^X^<LKpjHS
zjUlEtp#9)he{z%CO`8Y3bEqW5uCla%`$xC7)@6Mb=O$r#Sg9%D*tYDXvD*Cw84$J=
z6i8QUrWli818t>-F}Yj#!wjhJvGS?fp3HlWjtQOjG_#)cp$VP$v_#69D7vW?P&a1l
zPt!_VRU0)qEb$kuvr&^{3M4Q#YJrr*uz;~qE3a?8CCc>#)Ge%Etv0)Aiv!^S#1;p_
z1BfkJ!0t{SKy1;<($-3YS2{1C9?m{KU8_>74m%imXv@Re)ee;hjKf-@i8Lb*7>BjY
zb=F#yW8??aZ?Z>bX<d}6Zybz#V0@#=2%{<a!1zYH+NJV=@r~BJrFB+R#fx@j56#ui
zRh@Mpynr~Xd2HLgfH<qAT1YdzfH<qQZfji@Bd{Q#4$6+6r}fM2JV?Ll(E?x$(mi(5
z6#!$99<+OD0Wb#X@uaoi;#Khlv>IKRn!Rh0_Ir0V{uL99ruYC;qkBYj0|}TKJ#06w
z4=^=48dr2nAG&3YUOH9Jm0i$>ZW(~eWL<4`Eek<o3b7KraDPCZt}CT6fAYo``eH_B
zO}A?Wtu)1tvhhI7J0JlxU60yj`%(6ED*LkVWFVl<(b=vm`p?}o;1hMV76J5)Ir`P^
zMJCPB19sd90BMe%DzjcU5wbBtKhSgLXJ=-$*HqsJx)HHnr4n?Cu$$TKtF+fEH`~x)
z0(!Fz4HD3s^+1BR6-YpD)=SH*TQ~w9Zet~@wcDz;IS3SQw>bzDZ@1}zLWw}}cAFlF
zS_6d<sM;<zeYG~Ya+d=^!EKiVLD6@Y9uSSK^XR)vk0-2~xe)-|!yaFw-CDKBLC6Kd
z9tVMf@g7}HYPv!*>mD7GTCJNyz`Mt?->lJQD3!+?3}hJUF$aUf@iE)Wx<Yg7F+Ejk
z{f$FF_5|DZzSg_ygo8j+>j?*e!tn_`P$FGH;rN7}Oj$#94uS4*G5fD|+OXV5FX~E2
zN>Kp5s27S^K<5GYqK;XBW+IS?b{F-EKk%uQ$RVbWIGNugL|R+`92HG{QNQoE)^Jf@
zJ)jQD_S&e8RH}v<vRCPf4r_-QvR8pb!NZKJO-~_vn1QBWnaiz3!LMdpe59>*RlVw9
z7^uXnhR1Gg3b?NtMI!L&Jm9`+l&7sN0s{fJCR?#Z+vcjOaWG8SQRCP_0l3DHy<1l(
z0M{7k-E&0;LIAF1ZMJFiD{CDHiodlE1jXN4BaoI(qxf5EG;GYrtF9pY&Sc5$TB_Mh
zLyk@`p)%8uqZ1@lW*YYB)D^_rc?KVyH-bR_ndcOqhr;JMg;Ug>=h#nCcOKb4$cxd5
z2(!(|xnyJ)?9g&`-!{W2wpP&0V$ksXIQ#x5TBR%Vu_320aDn!*Arl~wK>OIhL^_o`
zYS2hIm~FCOt94}#I!ZJK4;rSI*B?SqI%xO<)+BPFp<oOiX8%2)P0k!PWcCgwbPgN!
z8b}>Vc@7(mn^+@+4#=bIqffO_nWIiQG|Y|~W}eicVRqCg@L8`>2R9VB>1=k;L5<~R
z&f1;^7fNT1s0cA2p>&q|*@vP=aOTDAZHKkZu4WgVl4vMhG~`TfC^VEV8kosfhAhRc
z1hj=_&XR1`&$aeeU?KXG)f6j7g<QJGRLa@TNqRaB5+I;?1g59(!y*$U??M$p<LTS%
zz}MQxiMLJR7Ggr^Z4w#*^FV`KoZa$`Hp-P+Y%07G#3eRKEmL7nZa`aO=3Fte|2VC+
zR(xwrcgR{pW#p1YYuS6>Ywwk=H5DGfi3#nsCPK?ALdX@+)|<*PHtmcyt{VUGKnOXq
zWxa_&i0O(*l(XJU9y4<(8gRy*!Enq5Q*A-B73b_8jKp01z*LjhvQX8HrdoC_3)q`X
zHGM4$SRYpZiibA+=vOSX*ydk>Au4P!)zWLh5QDaw>h;&M5K^}N$}mKT?WWqmk*Xey
z98uk2stq09;9Lyhou*p<S{6p=u3s631ZVfJq>!(C{6F}EbCG}S`IY$yse4VeoZzc%
zFJhMe#8gw)7Ktf)->>k4$k~4d77C~be&vh8fcojLYE*<FdM*53-fnefwc7G(k>H`>
z4w-7ZYguTx!=}hjxUG;v!yPfz4%bSd-9Eq8{g6Vteeo+rwA)b=CC(5X5d%v-VJhFU
zCFiv1)%Z^gom}4EPne0M?1=~#+6goD?bV*B<no?)lCVTiRB}a6JY}l!Ygwq!*QT1d
zmW2v^L*1ekA2ERb-c<f;s_c^=wdU3M-!>u_g5Ntvpw^H~{r9R7xx$DurkauPxzdQU
zP8Z-T81aMCcQ^~!=YAyxul|VP(BxV$xb-KeCAlWtdj8rXMN9r{s;#doiiW&ss#Vvr
zP~;_3?PPW3^#<}~Qz<EJmF)U#pT5uhHTeiOy*e=Myw)Ot2Ry4pd#lj8Y+^U#9t0lj
z4GpkzhO$4L*X|Asu-rZ#2l=MZOO}%0agZH8uW50RF^bx5JOsi^R!Q7SqFj}t;6Rpp
zK`V_9v=lzC6B9B6Nd_4&NKk`V*9%%IKFAV@3o(gHGAS+tZw+PxE@)-(!Ir}FZ^%%S
z4JMfiE`vG_Ve2nw%@RW#9IDX}lIeyT(WZ};^9u9-taS|xx7<NqBfily!crRW8kLJJ
z9?(3~a)SiK2rFIR>W*Ttn?t)o3xC$`jE{6=s7fPA2HR7R0X2#hU)1i6kFsQ77SVnb
z$y9S0RB1FDeo^ZmAMM~!l}3|HM=paZjbV*1X`SO^ETxpY7~3?E8ACFyxeR*9ST^*M
z);2!Yk`0M{7|4tznH#taM&dYj=#thgG0sx><^_zTg~2$IA=hAU=5;IQP1fbVaLwzM
zyNJ7nZ=^6wX)0VJc2Gd`#h4o;Aee=Dy&T10J0zgK!4Cgds~>;ElJg9hka>e-Xar*S
zgEpede$m>*$6E^Dc_JopNu~prfomqP7k<&I;uFv;yxJOX?Fl4P$z|Z0iR|NFw2q01
zwre!*nu#Ry2V_TPK$~pk>}A(o)_$L!Y#9Xr%2iD)X=*LyElagdxv<-0%H1a7v3ZxZ
zlP#xPYGa-ei$^eRhJ_$W+fRZ6^JWs~0_DRd&B9BwA6?NdDpgA@nGb`Dc3Eo4d>ABr
zv(%Cc8IZtOYGEPs6=EYW@O0(tx%$b<l@0<eg;qKUl!mRe0wS}A1`t+S;Rs($ndHDV
zEUoIdRjzRmXeG49L7-CBSaKZ$6(Fp!u#Wj1Hv!c9Y_6*Rq4WC=LM{;Aw>;!JH_W6N
z<9*8)wMo*k>Xle)DMd4pqG`J=Wly%NTVIn~jeo_$84m!n+cAWaw%t}hEMD;xFuN@g
z{|N<Y?QScz#}W%?VqiZ9UHD^5{j2qU0h-ndXcw%U<sNKX7tkhpU+lg2?e)yl$uIi7
zn(UJ7gYELCvi(fGR!?8B_{M9liemw7ghv_UQLPy!8s3r(PrU3ceto*ya-;{j4z;s*
z2A_`ds5f52fuW;4YG-RUZ8lic@{_X3BE3m&^(2oX_V>U=?IwAon?XWpk_T=k7lK5d
zGRaf?M}Z2Guem09>fKM#n+t%0q9=LU-OiU`q$8JMlRUrsy)~RNd<%`K)q0d!9yNB+
zmCSCA>Z<ErFoetT7%s2%$o>ZsM%8-cDi|b;s`ZHEkFenKT2FG8N4T6A*sFjM(^;}u
z4^__asO_zw1=oouDs8*W^dKqtA12!9EsuI9W)CtD^Zi_pvWWeySiid(|JjyNubk^x
zM!j;bM|K8i0eP-Rb_S5JY_2D@=&EIkv}~S7y-t?SS*jQ2&UfsTOrR}*ovHs7g`o?{
zP`(<qsK{m6hwJI9UCowx6iv1ib@pW*UG#kjk(4J8v_|Km2YLe9I#15YZ1=c6$`xGa
z!Cv-J8U!A63T=-^Ig<T0p?{HEjeo`dAszs4kH-{vAc41s@MyaTBr3Yc6FP#5QV%4?
z$CQ8X^{7pG&mhh&p2vOS5t%g?0t>kNJR<+LS@6Yv4|1bw>Qhn^U<W)R54BkcqMv#Y
z?XHnR;~eye{N9#=w>~4VYow5W*Ll>Et1Jvqz#qESRz7C^>R}Hy>ffL!=b@H9#txP1
z6Ye_Zk*6bI5|{i(;{zmcj(KpLBuNaHW1axdcIYWupYN=Af~~A74vMOtV4Ko<r^ils
z6dQ$#I^pq(VCmtV>VyZuQh@S9Ku@%r^fYx9B<UwSv95f;L7q6Y?{UJ@xr;S~8aywc
zo%Q4l&pugSAM9#)*2B+ca@9OUm2)2D0*1!j2r79ps0dc9icQJYqwM;Idh=F4dek<&
zKp_LOfAXlmfd>t#g)@xv9(AG1YJhs>QE<8BVQ)0l8$NN#BM%0^Ma3?8{9=m)B)oOW
zgL#B11`^)7<cW!pMI^7-B~NiTUNOm`ie2(_xxvctf`EA0qjZlY*#rO8Qq=;<g+>Qg
zoLS}ZM!M_?iA^++DE2ai4=IddFME==i|X-4f<G^NQn$%ssoA(cFMDpj#hOEF^E{fe
z2Ind1*u>oAeK=<o2bevxn;Pj8T$Okt;sxYj%HTY?c?%Nu4$cdT{a}zVWpEyjMvzqj
z6x1*_sfpgd<1hz-X0c&;G8RGx2*dIMqBnpfojfGH+w#%Q`G_}pIU}+UHr2Ok>A87w
z_Q*#&FUV6C=c(3YN*nTJLlckP(L%4eZDF3;oI5}~LhTmisdw=96&$qh+j;6x7o3(0
z{eZSHPuUE-0hW!2kWRd8tCqUU-D*=F)?pM2xH_d#ALbzpQ-={80DhFG4suyLXn5sQ
zkJ-Wg(oWx1xx=nInDE{X+j}5U_Z@jbF&lwI-FM_6J*MN!d~)q>_CkBT^`pD<6cMPv
zByOIZ^g%*pcOE8vYI~4q``vl*TZN@|+waax+``+Q1Z3Oq&b#p@>lNB!&!@KkD(ml{
z7rJ|V<=9Fs{Z*daUxyG1{wgml&T~Pc;IH!Pi#;WfDEO<qhQH-8h)6MGeU;bfKI<|~
zk@=)>Iy<Pd-p}>WX{QuACO)0#5l3whLMf;7{NhLtBq`<LNKaHR7p0uet9P3$C0CYm
zI<Mqb>rcE8#L%<s(Hrz0J<d91&|%!!Jh_vZFLtT&<W43?lyNo>JDH*kBs?JN-zUqU
zbSD4@oy}|T8*2=Wm3*2qFJ@C+^>MC;E;^;qf!#%?ZTYsA)3$tDi`rI{g41LOCq!%j
zB1(x8C)v%~MTu-ad4Fiuf201f^3c$HIsCvy*+cW?-~kDD4b7K>2PCR8G#`UU6hb@7
zL-R{+msO!1Wva^1{P=CwZ+Rh@Ifk<vZqa|=akx_kZ5|JI%An2T;rTKp$X96dcz8Zi
zg6VW}kCVMg`8i9o`)<+8atkKqBd`AtkiFFXr!cd--Y+vHUrxGU0%}UW+*AY!s44l_
zROB;~mwMO?mhG-jsF>mCP=}w9Z;IFl8R*Q&$9X*#9w-LYnZ^Edhu*PrmR$ibQGr?c
zvQL2o!mND1I4A-MgjxAW0qI_Wm#8`H!X0|6$~g`K#i%(B0`<x{`Lb6+g>>@KD?4)p
z^tt)0*PZ$eRr4JLniuCg2$W>c&-aU|!OQ#H{Co`C{WLbbWbnJ$6L;!=bai~!!JspT
zckPCN5HQ}&m#HjBSn)2^<8y43ss#b<RDRChY`?qphpqG}Y6yyK1&C~C@|7R+5h-&K
z*$QN&Bwp72fL`OOKAVpXIErlI89e$!J~lKQ4$3)~uRe4Y@27m_BJgmvN2nlBO4d~!
zYP9qDNL(Baa4+N|M|C*B{W)JPt-cC;C0}{Tt6BpU8yQI}@v`0ir02R?^z&Y87Bzi;
zuiD)Kq^2C;RsUu+f=>&m2M%Wcct~&Z=wPoR_RGP9VS~K|A{7A%mBC(_ih#s`8SIs*
z2$6io9_*E=h~&_WJ=lv>q(3!Y0d=q8S)&I`{PS?H?CanX+iQv(2qa1x?v<GoNR%|(
z8~8ULnna34)o^d{-fLN0>Aru_N*o2D#-rF@AJ(ffqnvW6_)%VYiU1j?jPl|X;Z0#2
zrlnW2`ybZhuIg94GK>@`)W2W#$}j>F7_WNedITgeUiBiO@M2N{X#m5U9PW~qQP`yw
z;H%!$!<be~F2Zw8i2Zq(%NkC(cLALd%<w7=WB=8XH}>h<EBox9^#Qq+V2NA;0<dC+
zSB_JVuwsVSFJ>5!uwsT6GYqYW3;393Egr{;c$R}eBV?9?KqF+9*Dns(paO(hUL3HE
zr&I9)gj8*bS6P$Y^0*#Rs`0OF2u0N;jyou-F7e8N1~tGe@nWFS+5jZh21~rfYrJA@
zKn%V%c*iT(2E-9-gLl1R`;%*lwZXgI(vIAZ)lv+N`mVP#U7sOGa!r)C)GPCO$$~GJ
zdQ17XuPp_emwG!taIGR5CHt!)5#h7mQob2!E28UVy`8K7M-!X#%e-<`A&bP`{PJH}
zfxY?V-qKsHEfRb4E4<=3z{bbk{0eXR{}hS6`4!&IVo@#O+hKEl<+b>{2dS&B^`hu!
ztG((2c6UZ~He|;?iSAsr!D&Ao72n|Xh&-x*A9rr>7TX<(W~>d=kxtS^K>?*Id$Q;L
zqW=X8LI=ZuKleCYiH<w>c>N;3fetYCcpHneT9Aa{t$0`jACR~tMVw3z=^M`Bh~4c0
z%~@RPzK5)FSdzP8wsy#yb2NMG8Qrh=4td>vYdx|@H$Tun%-p^858{Wta`O&M^p(Rj
zE+6JHu<!^w(Ods>;)qvn)#`kM?+D58Qz@LV<8XlW>Z89G|J*A#B*7#u31QKO!eG=F
z?B>3Dr{ot75N&>bK{7v(sp#{ky*X#IGyCejm4ee=9D6+kU4FFr9c%Es{&3<uufnG{
zVnX*j8hEp)HvA~_dp7fVeNN(guiWtj6GGpUP(L9A@(g?C1${ufGl&|L!a$QOJwrly
zFamps=e#*rye`XQ<+|xG`J5Nq#=TGm-}w8HHGWb5OZ-Q#+${zZ>OXpME`KYRfyQ~Z
z<VF4V#Ch8p*t>(wc`uTtm&gvjd3TYO{6im<yy%tN#b83{q8I0QM}-hvcG=6;{X;*N
zylgiRcH|&+nS3^#4uo-YrM4hvVs_&{^)fwJTYwvvA5b9jVQSLm6(|d`{~e%rQ>yW=
z*p<KoSU9i1^ib_d4#mtX@D}jM0}`z;ufVsUKtvv5V1yvCC{QbTzmptTF~6X!;#wAf
z<`*>UVD0vE12ARpDo{QtP-E}=>8@8iTQ^8wU{r%?n?m!~t^&D1;^Xtzt^&D10urX|
zDhPc7Q|Ou(F~}5ccY(UMKwR^ZJe2$~Zv60xLb7npYfk}P^P*|ZN3K0kpxhX%NHS}*
z-lj7MvD(2S7;&J$C#GwV06S11r)!WHg$D}cbWJ3mt`D&OqxE3Hfdb6XH}L|XRmW;a
z>$g<Z708(H<5OT=ft&(CqNKV48S_DsP61;6GT|`9-$B`iWAqh9k3qhx7&L(m@?FKC
z32cy0X5&6SferG>Y#b!49psbQIFTY7ALK(eenRvMz>Upz8LvO7RE>2?p@qd*pIpB9
zcp5m?S0t9)AYtiPAC}y7W64L$hF5(owOxy~0>LRU?CBZod(|f|LV$$kt3LZ8gik?i
zo#5jaA=q`3bggQFV*)J+CO8$PCBX!ryvG4W08Q}W9z=HxQtSrT_;Tj3K9ls@3u=7w
zz#iMCxNF6>P0};*$v%0`2PWEnvJZ=iZWwyl&J3tiS+qvKDL&OF50=1$%v2wmLdbxs
zW&b9bTAz%J*q9`)4+HNujstsUu+MAs?(rEu8T7Da2$>nw9Ox7%3oZH<yM3~LOZ+XL
zJTL<jGH>~?N)tG!^=$U`WW9TGwoe8()DSYWeaPKs2BF|bpZDdwoGqE6&oB#i<DQvy
zI~u}I_1(jE&DQUz*yEFf3QW{+kIxj#0FW?r4?*3}Rq${hyM2!SKxUt#LgR3s&lG!1
zem)NO`LM?{7J&%Gz?g$<&m8@g%7b=ufeFJ8+RX(L5C`pk2@<6qBuCuK5kMVcwR83R
zGKZu?0ZYT-kgp!Ur%ogZ`EXC2Vl`+u?+ccmrw^$5!YP$T!xui8&OrtcU-;y$S&)GE
zg8J!5N=*G^;)(3Bd3u4X>V$*AuUR=5l+c~<`Nj4IbbxWfhj7ksZ2GCQpUz&lKreAs
zo^~*(*Pr&uo97S$#%W*qbv&km1jcD!i&i}N_^H#MVJ|P#t18Z*BTE_T-)DSs7Zfs3
zIpag_-j`dBar`6uVWIw9=0~TQC|~%|X(q}SexznvE*ysZ>LO!{^pzbiI)>8isEbZB
z(S&x<C+~&&`R%BS<S>4<)UO~PyW(SG-qvSTU2!nzdejvMgRVziahjU0M_ut1m+;`=
zr|VGz{5&|Y(TjDh*#N(c4R{2_0e%@9KtgeV-;ND_x+FE!FRn0xK=TiULDE}vNouHH
zMnOCU(onw)4j_Rv)Q{l6@6TYT{xyG2ZPxXU-bM+$=64s+PJ|nq;<zC1SK_SyKg>JR
zAOQkeBorXg&0qIppwM+^NaN{vwtA^PH!<EXPqM*;(0D(5eozR3oWzD?^}56)zt}s4
zCJmTLe(WD$IYUUWZVG#8nLaW;#X+J_F@=yQKk`s-pT;uFksnR-%R~!I$V~HNF8UE0
z(r#=>FYxEA%#K{HpL6*Z_}yXaI2C|RUYu^Qu`BfxiG_Y8MJ^*Ilo$H3=QL9Yp+1Y*
z8>{qLiN$^y9I>wpp~Zd#$DKk5<WkmSwZ1#C)Gsp}?6?xwk0G%|2%$bJ*xhUNZOIjW
z8P>3=3ZWH#gtZ^&ye<&XKJz2%tXiv|)qS7&@s>g@l+^&)dYE<Eq|dnfuwTY3Fk#$b
zzr3FX5+xk=<9-&UC?GK!4*SEMd9pzy(g2ip*dOV{-$4mbTYceYllJK?TY*4d`NF}b
z;P!=I-pIyNV1Ge1UKoR&!GOjBIn%O}KGZY$J{B<I)`w(gknEhu4(`=A|8`<PT+|{a
zuqFnQB4Y;$tcd}fK9ijwVdum^(|dWwP9)!On;59L2glQd3GJGI(j|6V@)p)%gI=E{
z_vsaPfh7_m2yhAM2av$82}nPH1b$6G`hiH{hnj%&Ly#J3DtmLE-l64G2b7AP8jucv
z3_zy_;DDiY$`QgV8iAa70axs2h51J6;cV%C{V%TS*#V;z39+h%$P;s5HLoNnco(Fw
z7$m^w1f<0v0Y1mJ7$hv7V_Qt5uy_txEWn{YH=uNu;M8;=4eK8AXo&k`Za{84fCT#7
z05%@vQ=rcc6m{bL0#7CS+(5Xab(&swDhz0g134Q|xx+4AIo9`6eOGXCz(`yDC><(9
z<+K$6Wp(xs2lXqiYWyoA4jv%FuLyX=mMusax*||tG&M+AvLcXa#<OOSNL5z^u3H@t
z$En0X<^`3N0dcj8N+K2-XjK5$*zV(nL*TuD5{um=-yUP1)akcXfF-<J$m{=JKu*jc
zQR;gE#0=_Ah1A;X*d2%TKR&t6QK8me7m(9GWT3JxfT%|9E+lGwKn!f6;BJt1X*40P
z56Cy2@RSQ<4&UX0FN*?NT_ES1tpBjS)9tIHkwW(k)gtO2N7$KT`fC+OY%DN=b;Rx$
zAc1v+`o-_L3LYM1OTN_a&m47BsPiASD_g`Xdz326ubmcAZNFmekL!~&UpYEd+pp}}
zLI%ZrMYZL-y+uTR&GfJI3C+HCbf}tN+tq{&2?bEitu!9OSpNlb=45w%rEhWh&jpN_
zHHE4frfOaau(4y!iETi@bC+yLkbt}tkekjR0eLBaP3KMYx<wd9Y9oWn=<I(^={Kp>
z_*Zxw51=<PC_N4mdLx4{g?52JqF0R!mW&RHwHPsI0i=!!%C(r}z%!$QaxErV02&p<
zTI>#9J_N=E(a$<jKVx0L({IXv7AwFoPu<1^^TenE3Ego)_<ahUM1+Z)kj;LlPjmH{
z5R}6MTnvv1LAf0Q5*3*cEEWp}kfanuUO@vDBnIk)U|Q@_5Ge-7gkb%9tksmNg=zkq
zl3jL2@8qhS;*>(CDpP_UKBbWmN|_QYZ7*Rd-J24u>c}&XFlBqStp63gnBDn<u4QV2
zGV#C@=+y>g;sFwRwLv@a2vdqTo9(=!U+jwiVaRO90NS;i9h7+oo&sogQ05&V0W>>^
zyyJfKoJc^MAIw?7)}GV<;F}-BjK{Ok2z8vr*#<u%3%zS`Q09N&0%~zk=6@gowKypE
zZb8Chi-Uo-d@3Q5PbG_k!8X=6<gf^J{N>p}Kj}}qIxe^E1s8Q$ZZ``^k_r}!s09**
zEDs`T&8NjlG@yML%=s#N{RMrV;{Py+yX3s9N6F$XLEhC{f`ALQ*j*MRAh!f%R|g5m
zEkSg3%qFTDC9`&CS6|YHxhi%$N@U0Gpqzpr1f|{702BtJG_v=yzQ5?dtK4hX1WeRq
zZ&1Dk1QG~)gDJ6C011S>!A4CidOtEs)PAO2)|*%DcMzzH?hneVOppP>{-956;DIEa
zU`fK-PQyD&9k7l)ds*LES?54d|EqJ1p#E1El&>N|1rT+?)@^zJi&FnPLj5n5IbwG`
zFrjk9?s_1ha^z~)i&7<zzlE;nsygnJN}cYw-RU3$h~svr0||)Z)af2T8^!|KsbJ1*
zmhUqDSa2$cH(ALcF>1kY*mEwUdBrz&D}V{0Z-R0*1qq;Uf|yO|J>D2O_&c`OWpv1V
z=crJ_eHS#vSt(?o@?8+8Qncv?9kkpJtfOMgsrbRsA*3II@-z)H(D@;VY#7%8p#thB
zR+wwF>G+dfV=z(UpX?fg1j0{2xk>>^IuuO~Q`e7CQ~eUm4$Czjc2)cml-GB_hSo1Z
zU4%7|(E25ajV-!05~J4X$HH!-Q&qo^jACFCHzbEQNFekJ$rtZH0-;|B8T9v}wrH$D
z3@_=Pts3M&&`NMnNcOTAZ>&KfpU4nF0%A}Id%9-?1eSus*gDPlp=y`|L0ikiLLS@6
z{7srrL}VT@zA_vZYS>5&&KPY-jbdkYV_M}X2ZCOt85NS@7&55Hs8I3sJWzs!6{A8e
zTg%RYh2mJY(=eJ>jdc)AAdC&k7x!WcEfmLw<coVCfiO0NcR`2KFptqf@r`UJ(-`Th
ze8a(@h2k5IJ87Z#MkpX=0q6kZjZlL|R$C5%h2lhJc#QTH6GQU0ON=iOCx+yL9wbyI
zhS2h&?_h;k!=CXNZK`UVLg}r=nvi^JF~*mMHKBxfT@WM?YC;&J+bQ3RDL6Qol|AY)
z?p8X^axmzv#aWK~=&i+Bp<;gjmUMtIE0k_vjiL;pIG`;G<!s9S-HX}>7ljb$Y4M~M
zW6){ugp}pX?=yB(<3BOWgAcfOLUP=J1l&6zj60g;L1LDFCsedNB(^z;L9@K}Zb)4g
z65E`T2fd{sxy>nA*yhZJXq)pDs$MY-y>%g6?HQQu;WvCrH3-`Z8p`WJ@~{w+KwB4*
z6Anmpt97A(xY0u-&otJBg5n~C<Y2t73pE!T!IH&cI^Jqc6Fz{%#t`0Se8oj~eAwxr
zF`)_!kyRJ-sJ<~IFMNQ6O&ddDvG)QJU>ieNXkHIL*9&NyLpeLx2O;CSg3Tc#k6*v2
z2QRy~GPTg?QN7i!9GC#w8j?H7AOW;Bgq>u{KR}{#TSK90zEB_%l|zef4Hb$j7?Q=6
ze)k_M0$0`})3$|_qEah)>u>H#wrqZV8&L^7K{v;v#=^6pxu|SkkigkS?MrdB9%7_>
zJIgCFI#h4B{QxE)w%a2GBoMZT<l!htAZ!m|tC0>zLE><9d&oW<C0f|OJtPlDB@5@U
z+e36Xx`Vb0aIfh=DCdnrSM0sqWVfDA_sVW8GB&t;2SPXkVrVTlzd-aUn-DR^Cq50y
zjZQGphM!XDXN3@KJIL;h8t38%L-HaxF8M&{AdSo>90=5B?6H_p5&tYCFL~pJ4sk<x
z`#Z&DP^mh$FlLk`>Oyh@0=I7<Qy0Q&ln%OK5n}tH?3tL6>q;C7Dg1bixR5#&!tvTM
zVG_J|m<8(@$K!`XN+W7z2+^kL;ZV~Geg&RiZaKojB}TXSk&xUJ0TVJuD5RJ2(h!b6
zXD^l*<%!Qja=Qb!PayL-^}+>+b-+dEIgwpeVk~mSPdG>hq)rf0S1yE@dXf!G7&pdG
zhUAG(zG6b=WC$lZFLD_K%~R~#gz?YBDGU*5wFQ||6kN7p1fw*B#dFyqN#ic1(>X`V
z1F3T)C8|ns@m#232XqjPbZEjn7i!ernj%0DD1QlM3(Jg@lK91OV;)d`3Ds}NUpC06
zSa><aew#KrB`${)KHmT=A3~Qyc-@iSNXS>P-nbHCOCS`#;vmuf%N0VRS0wTkoU`_0
zzWT<U@qUH!{yvzH=~sxkk9N576<iSP&;C^(IQ<K+HZ0wH?q3KT>=Q!<Z%GYc2kIO5
zB?dS+e#i_U9AvE|g!iUKWV<&o7AlDmg^Kvh3Am6NQHYH2m~a7JrDEAwW8-lp$qKJ}
zI|wOO2tN+S{(u`%_RYea8Ei^ZV^HADLL4~KMj^jgGzm8Hjlyzqr3kcm-wq@&CKaMp
z=`9p~qo{_>t}vS2UsEXG=mQfnHHCPiub9h#np~(9m*yw${Z02|?><ju`o7SYhZ6wM
z;Kx((k_$*KjI)Sxu8NkP!miI4_2W|t<z^dh2SH{^AvW7^zX%8zG*j8L8KYHvYN71L
zU_xeUA-XXxeL@C9W*Yl2V_X-X=HSqfnMOFGEX2fGR@4k-)fUQqQ7<1dwS`zy<Lec`
z!H}8G{@Bd8J~`cS2@RR)<dVI9i&7wMb79V|?A&I?9;0A$p;1KdENCvuO1H96ZH?P1
zwiaqUI1>}PTMI)CscRF73U4iJaf{WEt59HM?si7witU9OU!p>Wyt}=yh@X@b36<@I
zZSJHuyg}mOPWE6s<JM+73pIYMM@-@t7B-fpP=wuC*y?s`i2{Rh2WVem&U@KC?TqHG
zqJ4$<91eZ30<WpS;!}l6Wvs@`*6UzQRy&fB;#JU7g&MzjLnOdY6?%CGArj!H3NaeT
zA~=FZ9o7~p_rwM?VQ>FvhO%9|87~&zwzf#)7g9+8`fH1#e3?ch^w$=(zKaf|)sld=
zt|;g0B7PvPmH=yAkx@@1gC%6&2Ss9~1_EvTL6MyBK|=O}BDqon3DggYuu?-bR!hjJ
zO+~EBP@`TO5YXJ@XwrnXsYq_>;VCpX6=Cy+-*G8{E43X(%I<8#2MpYC!M|c+!~=Ao
z9Yr2-&lV(Lb`(X$rT|F5>?p#NL3s~I<UKoz(z}bqo*6O3w!qFJxo0L>aL%qG?3rO=
zBg296NfAES@vr2qkM+c7me&5s=zl#pVm8Kel=_KdJS`qRA>(J#;-Lg%Mf<Es`8@mg
zhm5qV8vojQw0!uiNY3JrgWhLFGD`yqYd<S0`W)8MVKgy#mR47!9w`!8n&d(6P?5~i
zBnw&E;Udb?==`*VhT^dz{>2AYf4f%L3LH2NEZcFk4mnmN_bc!ekjIMb{fZLu@~I+m
zPyzyj|CG}Nw01mIBv&+e3Zzp-a>D{7kWLk0?KpwH^$-temy2+p@6AVy@oMmL5xRXH
zIVp~Ar40-#FK2Ig+<4Gcjemuc@BnxN!!pkT3A}+}d14O|P8t{vy&M)!A_jNTps+eL
zESw~H&>I|<PLeD*X-JrybWzxVC^9;%ycSloW&dY9@2Uo2TS5JEbXcacao#^ihmp!s
z#{vl}Mu!8hUA00av)Y)j`s!6H?9Jk_Va><WLehh=Fl<~Hv5BrqNfzAwN?6NlOgRI1
z=#Gq~pESxJVqw|y!GzmcSh^h~3}j(>pA{rfSr|zUq6Z-$qhR4wcUcHe=eR`a?N$jd
z1Jro-){{n}dc0ExEt1DOWl%pKAC_Mxit|PC_^`aj3=(CG57)a{mcj4S5o);PCM(9v
zK);z7#+8V?<nN#9{aEtRXP$jpOi8d12Q~E2vhEia)3NKsusn9fV-!6x>=#$2K>~PU
z7zv{kM$r?)$!@Y}8YpD?#Bi#s)rJ=hY7(pYi_xyfB&T|`7N6vlL1SQ2Sl-l&^D!_f
zEboGYL>ZI94Q&_F-DWCdQn=CW{FDlHK(kF{t)DWsJv7xRgoejd$A>gLriSJ4fC?%y
zHH>LYRD|v}PYsvdDJw#Eo2h?H4VT|x#d$?A8P>8#{%Ry2s&&esiww0+8MK_Q4a?7X
z#QAc*HjHUml!0#<;c2N|5&k73lu;WlyWMKa%YeWPcKEMGrfP;$2CesJgynia&e!`h
z!o@Zyt@meyk((~2kQrByoX%#qJ#D=6&};{SPKIYYX3~Oxb~qp|v_S<Bv%^TtgqbF+
zm>tGNdoeCd>5AFm#=qf*+;Q3wn8zM`#;B^A=agZ=%z0tCsQ?+2F)y5MCqZdLU|zVg
zqqUZ<qsJ-rU6%di8RLDW$1(@Q1B_*1xxR-GFqVboSBXFZV_7&OPToPn&Sl~2#T7Xs
z#hJ^paPx<(O`;U!#v8If^)^0IdTek?p<RRxVYx7k^Ie1uVfm#WkSJwC7!g=_BM+r)
z2$$Y1y^$wN*$^(f%i1HN7jo+@+4ytD?_AYeoKk3?VN2K}*1K{3b)+rfxY(uviBh(N
zu}vdN$ww($!fpP{_ki&fr67mi5^nnlrXUOc;vBjuye0fl4?efVDP7+lzUFH}y`Ev2
z?OOipFBn=gJP<Ps#Nfs4VL8KqM9JH!ewRgup^qAb#WkJGi-vap9;XTg=r((tZbM&I
z+T)BM`m)lVFeVsET@nFpUpVLIut;4JklYu>4kh1YPEhLdX;`E#Ab|R*9pFJi_S3LT
zT|ff$(=bw(`Q+RLMc2dG2mfI-b7c;P<&HYI#10$cH4l(bIvfs$tV6VAm7utNJiGj#
z#t~Pu<Bk$x9e0!{QXeO!TC5_V1oFFZ_QQW0<x16ewiCdHx!>7N011%q!U3_h43cXh
ztETBbLD~7)u(&P-0zKfY-3}n3dDd<RkkCAPwH*>Pt6UK6&;ta3E;u$&yu9GpK=JZ|
z-4GB4(gnLAk^${fIOp|<Xow^vFNJY_#~UI^4RKjCL<<l=y=*rGNXTBc8v-OyFH=KM
z4w)q1^<$lf8YOM;KNR~#<P;5(o<(E|2@;C^BFMtFQ3p#>3OO*M3}a^p7+b6HpU5D=
z2g<;RoJT<dWne_kaUg**FoHRbCVG&RZba%0i--)87$Sol6p<OEWTEK?N033%yQ`9g
z7b5VTfC#<i+TmI*N*Ef!hZX)u6m9l$M7>X>kV#mfjfp6)Mby}9Y|6`KmNgq>JXsBv
z$WI^uv&TeaDhU#xV<Iw@1PQapM2cR6*_28WgJ(%&BkHRWktInU^u|SGmLyrol3s~W
zmP7+A70}*@<kawXEy`6>DE5trkq`}=qK2Kw{yxNbvjzT#V<*}cf`sVAh#X)bQPRW+
z+Lc~wNRihkv0nxoO>UhOk;4m2;zsy8A8wL?%A^QVKQg2=piPP7ye&IeDI}*v?2%qd
zcGQv`(<*9h3&4a>t!)8Fz}1ok)U!&-f*I7a%395ERLFuEcAtU_RAx}0;+cIZ^{KfL
zWs%b?cfE{e0ZTLs1fW0HZWfTxpKCV@NHojbNYNtMEX3f=GB2Vol+7Y}(3@{Ji)5i$
z7F=zXGF;w|<Se(Fr3}R`iP+<<jNGwQGz<Pmvn;hO1PRflwo^c&q^0B(`fy|!nZJyc
z3^%TCwk#q~J-{SxL>DigfP~7j2tL;IH68Jl<A^Vkb13`o;l?SY;KK-x_-IqIoNU<4
zo*RY3p3OECn1I?Gk?%i)1k`3~;UP3;%c=P7?C>b#<;v~$fCUp{V|zqigab)J5%~#L
zkbu}8!6#Vn;s_XW_<GxD<DSZ04gwANUG|VK=Z&;0B4a5?Anb}DmUiL@p!Trq#~59z
z_BaR>jrTYRH2U^L<S9-$AANfwNQNjHms2#}7ZK4I1gzf|k+UL5Xzq*1SrH^k+ZVBC
z#d0#VE+W=lAOKY7*g(;^&ar`_aa}|vmJkL~T?EtO9D1QGjf?J)oT=Fk<BUeRzS9xB
zamqt+nwsSd?;6bax}h~cWA_X^0pJ<CXMhCY8R{9+XmU%VZM2^w%B4v5me-9bu4?=*
zIz661@#l!VVgM3~KS$&h1CZ$SKSxR~q0`e#Q^cT7uU?GED+ZE-mb(~{R}3TzKo=vp
zVsJe-00NgIO1)TF^1j}WuqWQYh7D-j2<khRBk~wA%^USH#ql0o7fAitnm3F`D*8vS
zs!%KTkIGZTG;hWJQJf;u8+B=F#euB*c%xOtz^IH+U_xbJR352=1n$5nmWB9i3RKWQ
zL)e1xM%&gyqGGR`m{1uKttZafKtg3m6lZPogj@0Q#OSE<YE;EL%XEjmB75ru<3+4R
z9Xn|WF*+(^eVQ*JMn`3=2MPa<juyQd6|tTeJgAI`s;@*vtd~5LJT@w0y<{P%jEhpN
zZ^<iw#RiKisaX9a>++^?T@?s1ZKf4EL1a;ReH$cfV$mY;jwVQ8vnZCIGy>AJ`kW9I
zBLD<6Cq(54013?rQ8@xYLUTgY9sy}uNKA?H5zrL`8exiK1Fa{fMCH_tr$Cw#l_LNo
zkfua20`9=RD_$g=9?hA>+SM4{3#Lc$eg&4+ZoK+NQUBE%qdYz%D)&RdMAw=T#eOJe
z2FL(*Ci|quD2vaG%KcC<Au}^7_c8fPY;UpfWTSrKEm<`vQUdr^6g~fs7=rZ?>!UgE
zum>j__ZQ5K8c{klQ0tQg^Vx>UMz_lOcFn*<&F0%R0|^u6N9C6eL84~!quA=DAYGsA
zTg19eF|My%<RDO#Tom<)JK2ySp=eC(2Y>{^q9``Tx^V>9xrDtv#ki?ziGx7hcS+PE
zURtQnqvVpPPb|4X0$~Z+a2x8@AfRQVId!b%RO41(md3+Y3g8W>ax2-$smAuol{PS#
z0A6WV4kS!l8I|D|B!E|vW1r;+c(|6aX~y$aYaIm2{MI@MRJpZLnX@(Em0KIdSf5MF
zuLjf#Te7#;8uOKkE%wj_7fM^G8EEMP62)$bV$Zn?*8#PirDqylE4MqvQq<pWd!zx+
zxwc1rVu=QlbfSp*bOWjZ#S6?lGmX0{cR2{OtFg;LpzyKFL7?!lix6;69|(}$!<xNi
zbnm>!L7;uRJyDMsXpjNIo@hx!Sqq9Ld!kL6S_g#x5ls$6mCxA9w~YPO_)m=92K<HV
z1C9eJq8zaM7oGy;0JSY8y&w@$4n)g8LqwsqI57}WAoFQdz8ff6FzsLzZ?)ZyF3~Wc
z9f{_A6?Mg`lE3Zq$P+!gu)u7iQ^Aoa-X(~lehsN}e8C=`Z4_60VFx!bVagX#nI?in
zF<(S6>)=!aDtLH|&6;hLR35V{1121G%&rVb60&;(NFW@e-hcrQ1ayYu%r(a-?|9rn
zAXguE5U7~rQMs1}6(Ag^V75m`#To^)AEP-VvyaX(KF;<37`5*(HKO`lit^=Udk}!U
zWLFC$ATQa~0tv`VRIOJj>NlbSUy5Oec~CAp^12btwpxh&#|&6vI)eb0kc%6T(0?h0
zM3mxdBdXNk7>}<lL7*81$7Fm33C+PV8DBv{b8yU#uZ@Tt!TPT?E_TEJ=(8hmYl3$s
zkf_3lm<+EV0W=~e!z)PAj3K-ZA+IzJXf?5%PqL3MHU{VVYhw6_FHbNUlUJt3#G)Gn
zAg9{30tv{eG1=H40Xa1Wukibqjmh#EZ0k~Ea%KiDW^k*(ByLRJ9RvxT88O@)TunW`
zF}Y$68=p1S_LyVW1WXh=$F2!TK+K8Bx1vA-VonU<o+1HA%vN(^#o`tMkzzw<PORRo
zbjOzpfx;q|U1oe=xyUJmE`KeG$?Ic~K_QD`skRc8+_fmyp^|?SxG_bCCG6;O<JPWA
z90bY@m&D{=4P=0@Bo^m~%_x+j!;%;dn?I*5iN;i?)iI?}Y`4P3+@mG3qgEIlT~%O-
z_JaVIknIN&aI0hTZVX7kt&ZWSd<}KM#?)&zX3bT`d-zVcgF(BO8y(M4px79bkrq0@
z*cijul72zHu$5_RjPI+qIuMj8Y>mkqm5q6(ur*dHw$DHUVr#5LOWu<klka!Po(uw-
zJM5ke5{2)udooC9?zq~M8&jsR_bv2fSJhspa7q#OI`&hFu-ERxPyxhV>ch993pYWO
zi{(sYYu+<%2_A^y8tzNv=qBjF+M$?oG#h>2P+Y&mzrw+I0PsULI7omWipeV#AOU_T
zhCOPEq974P55<y4W4TrcduhZ#$D&V79F8Fl{(YShY<wh!bS#9;fvZoEkbNGbgseR`
z1tlDhDe+iSwrHKv_%`ta9FTUQKjDFG7)}1iV{+=oQ?4ezt^yK<9gktEdw^r&w#dmC
z+rQp;u==C}LEY=5Q#TqiCu1@LX~Kuh$rxq`x-J3|*F{do%14WL>50Y!0UJ)n(vR_1
zBqa;iMNY;ZALXJO3{Zm|-^7&Wu~x~ud-r_2XK%J-gVC-EEV~{wq`ryCBnI*@;+t5k
zf)6Q>T>rZ3`3EbS(2)8r#u|NKbm{V)13@$HcaAG)Onn!Vb2fAU@m&lvF27IJ1eMm#
z#gw08Z0-lf_G<iVTS8;$oZ}7}OXp(pd(BV-%()nnc+u4KUh%nD<DaiKH60f4rv5Re
zUWmE*Ru8lU7rH+=?Jk*U_wz-(;WtpoX+p#Ea!e_Uz3XD$O~%XY#d*5F*WY^fPWE~9
znZM!JT^{ZIOrJi<K0W*N!8hvqT<sWiRtG)18Z?|QJJq1!eAyljC<CTkj^Qw3j3^Vs
zc|b9CcKf^7Qy&_U>J0yg(ha?z`3uU$PtH907nJz7o=-oPeB=rI{!E{~_%WMa_?eo=
zpTT2%Zb|%<O%HA%bbCL7ACKYR(CdT8kKh+@o_Y4E$K=o1Bp>PBGl|pHUOgYXYP=5P
zVSsJ?^%O}46kqMuwB{I4>=RqtO?V_3P>f>^`cz93iX?+s<z}N_)nEsLBFf-mxpx2=
zAPg=p7rWsgQUAfkEn8V1P)KY-5oKKV=gr0@SJgNNgRU)(b1*2Rj4PHe;z0)(<BIVj
z-g<$7Ly8I6U$z<_xH?X7FzDLigkpKR)r6l?OemJ$Q2_~z3B~o|)-=3}>BbA!8;f(c
zF5O{FH48QtyG=T!apR?E9Fem{`;AQXrecNv>;N$_|7|KpVvxsWVB3eq;;VspNO1rp
z|N1qNko~Y2)2)yN^--~W5lp<J43cO6kfnL`qhh}IMrFgm%~uP(mk&(P{Bi<4h4AKL
zEQ19wT5(IUe4h<(2*U`Fe9s)RbZ2BsF}A<Y<Ar>+X+S$zoO7l)yYPVVtWt2W7|9|n
zznfBR>sX7=j8<*xie**=Ca~&?W&QvXX4O%JX!Y8ZLe>#f9;?@`&-Q+fb^go<v!$OI
zg&A-~UIiI0bQOU@;}JrjcetBUrH>Y~pFcAyGe;dA0zT@LO3pY+I=H<A9Z<)M*`swv
zr_6CjheFqJM~6b!anhli!c8f3oh)WM>x_<>la3B~>SVDgx<7=VbFw(!%U}O)O7Z!d
zVpe&`xH<EUqeFq|n_{_#0U_voQ;a=~Kl5_XbH6WUZyz!qZT7vRLs8)SVwqbu<x${!
z>Ozw(v`7Uuyz9}Y$`2cHw{KuQq`Mn%Wl61|7FnGA`!Qo<<Lefe$aE82fGsYGiW|5f
zVZh=NWEmT%c{2fRO-aso@$3@?<_$`EO$lFq<*FHc&u3kUvav*^kCp16#n1B)k8Ssx
z$6Ky1!45g?7l}t`m<=UrmuomE=L6zQ^}x6c8FwgqB4F0KGlxoKYl92p4wcB(1_`A@
zC1?d)tAY+5eqO?sN6gHlpX1^JpJl-1Y<b5UBy>J6!5wc(7C|D+d|u)c9{?hfpO}4K
z;>UO0G0RI1otS-I(xxpxjLuNE`m%)G7B$;uzI2SE^1m#R7abskg1#)li0i_Q19hT=
zEsB~qbUaZaLt=)f=qE~KiU$%9CrSchO$(AMVWOw^F<}e3*|#O^x|sP^)wd1?Wu4!a
z$gC4W!1%T#F0PY<1je@|c;T=whd{48Q^G>U=Cf6290*#Jo^c?k6P_uFH<v!5PI#uI
zRcrons|?L#=StYdVza91oC85K(>bRm)F;oC$P^tqfH+qo-j+v2FfpAkVV&!lH&&f@
zAm|kQyaPeg!}$`quK*oDoG-!K7x(dspxrK(uyys!-&S38An0=`7aa(iA1;>2eccS7
zA1;>QXK}XBCs#5wKMcv<S7P3gTQvkn&9b_bat?`KZ4;UwhQzO$LG#0qILvsN=7$U&
zVvoumN}9u6RihjXnjc0v7<7s~Dt^@tnjc2RVaH<H;K<M^_W10~Qu7_9YP^F%zt1z?
z!Jt#@@$rDTX#gEyjF015;>)6M@Qdy&Z4R%jaUkd&=o$xt-hr-(2Somr5f|O#*EQ$2
z>oat>b1HkNzS+LZR0n~MpQpy<iw2MZ!qj*~B>x~`#MC$@OUiCDbdo$huCzyX`)1mV
zu^;N2C6!><j-`xpdR%6MkOtQDc&w##J8eizkGE-OJ;<?eo;-_nZ(u%DIm<zyljK=W
zedr{4Ry-g!PcjOfB+rUBsi2#oum&gJbJ_6*=6#iO9Rz&&L7nR$(9iSCjmtF^RDduy
zj`s~{0?N?c(gp0fhGy%^1rCBA2n!qp`jMRlak*%K3J?~=@jF5E!)+P5c=|Rw(a>yJ
z`L=^VKd$q(gAf41+i`i@11dmxJDx1H{>~9_DfM0Uhel?f%6A=vAQ0Yl5Q0E>*QrGi
z2=7uYdU6E(9Kdp>H#VQBT<##?r2ut#TyFnnln@Y>$HnzXm>mMb@_4iBt>172{CdDD
zHm9-q+saiALLqEe<=9XNgjG&03W2bSYC&6J83jK!u$FabVs@`u>mU>XVXcEu1cbG5
znUg~W2y5fGRLqmvj1tD1rffqKb6n^34n!Cb>m7(NAlAp_DhDcnSRXGfx5sJ(X-ym-
zD*rrb2D7u9n$NnbK-=9j0<6t(nbT#I2(UKC{o?g8kigm;$7Nx@Gn!HGUBn&ifsDDm
z%MJ$uyYcFdxV(4*89?la%NI*P0%AuTFP5yr%mSz2O{`;a<#;^%WHYn9`w{$an-YU5
z$DC@#fO9M^cW$5uoMUmUdTF%+604PC@$%zwvAstOv3mP5j&EVp22(~UM(Ppg8%!+G
z%G6q%jLQihj{tr$F87x}0{mng`%85quG9;tr{hX_Y&&yJGTO2+t;}g1!LTi@2TM;o
zmevE<X~)uf06R^VBAHgyW&!PdJf~mwZ>`OBF8}#B4u<(}G&Q5y{$iYUZEFtdc+tiN
z7v8*R_fe3*z8EhO+dLqFeKC%G=5u6dGn##`#F^I4{ITN|2ZQz&uh{lMh)c=W#6SY$
zN*vqh$H>0x0@|=d&bVy5_U2Jn0dD3;>62FKb!6U1)}+$>bH&JnJO=_3P$Lud#O^Uj
zK#fdbB}$pvb!5$0wxZH}tmD{(bQYK}W^6*vEFeiJA!mD#Kp30AY(Jb{M86&%+fU@w
zum`KmVWHO(*v<GOfUhT8-bg5+Soc?^R7F{^quDV7TBO5x3dlDSG6w+($Tt$mLH3f5
zt|zM|vFeWIzRV;?hs>CikZ+7b20D`x*pTZ1E1CzisR_KHI<S-ZP|;Mff}&D$SfNc%
zD6<o4>=AB<zq9$9YH)-dcn-|zwjCgWIi2jF9t#pZc6uT-J0Xs^h{2DzW+c>E330?F
zdC;4gkVjmSg_ZSN3EEMi2-}>hG%ukP#mbZHXlFB10m3$dDmE`6&)Faeuz3lbv(cGJ
zb4ubCvW{KMn;u;VeLe|+36+Hj`8ipTP+6FeR|r8O=~$R(_#2+K63LUrg^5P@@?=qR
zC|O*Xxa)2{^qLdIl7u)r1A#8RBq7HhNEEjuA;%s_E^F`YHm7`Vc|zQ&YSz`%{<z%k
zN_d2>wA}7WAOW;IAtMAx04+~o+~KB$8{Yz2mB?9_5Z@=G`D#_d9p#HqeCr3BhzX^k
z`0WOecnVs)L<15|T21x80jp7b<%gp9{;p=X_}YYgw*gGZtW99k0T=cm1L}R&zMFYl
z^8JK-^#@GiCNRz>(>oOS(#OU`&Q3PHn^{w^F@cY*V8!nakS&|oJvW;D;+qokT>>zn
zx`{>wzPAV&nD7z%?nd(u@sAR6(F`VJK1yK4gRuu0P+M5fo6N`JTcoRrN!$d^@^0iZ
zaL_jP)lKHj@ofotCK%xB-fanl6nsGyDscY}*8OJlhU5+hht|702xkZ_h*|`+PZK!<
zvI}lD@q2rpQpn)j<}Ii)bqT(0&K|za)LPcr{SuE*iMoVb#ejq@bqTCuHc>{|f~xps
zLTM0NmdkoPprx`aZ!@R4I)Wu)E(FktzD&ru8zfgK5{V&5z<rs(Pj;-OFA21udS6In
zCw4bGt5p{q5K7}OB;=|AQUJM-h>I@?f&|Eg1QGz6K3WiUN%mn7(7a^#VUW<gWcOi^
zT-NTxEy#)elcEnle6Oi>?Vr3_5BM0*WH^K*fcht89|j4a{z>%Vm&nmA1KRLp&fKIc
zb}pAae2WpwuD=&i+CMyLq=d^`lFLWocY5);g_a-yJ}N0=0Z4$4N=l!D1o)^Vd|s!Z
zf-R}`uVn}S*6iV`e9blxT-5Znq&yJ-Nm5DqLODoayq3h*r|_y4AmHcmEcJWypH<@>
z1oHCuq`Y(s86b>L7K_C-NFa<)VsXvigl|dY)a-%Zo5NgHQymQQ_td1^HG>c^rY3zN
zVu2*3Bvw|`QZ32d(~~0FfPm)oq>MHop*cM%qYX%CPEXn`)si+O=7^T+1_D5H92;o+
zbdKFrcnYLBc2j`_(j00k<P3`13U9k6b2hN1515~Y7bWSd1~mJ$Li=b-lFG8A8v8fv
zKSGPKb`P3QSA!)2HUt2>Bq;+nNWd;h%8L;oF>5SI7A;GPS%VmS)_5nWW|LypkUZ$U
zo0PMLWMS4=nxt8SGTK(u4l9$&-LV^!tp1<OyLy5UqYIBv)s=QtL2^-<--879%A~xw
z4iYoM%4G5`ey~cUIBQy&Ox<bi5w%9YcrS@N7$3OUXAhZacI8jz+zN2)N|P<`CFO?>
zTJb*dUJ{3uw1{a%U1B}k_mFvC$Mueh)Fam0{Sq=jSf7;N7ywB+$<}SG^Yq3>>ws35
z%$bz!)x-Qr_17iwW)+W6t!cO%5yPbe2-NzBZ4^jA9<hfDNI)K;;ZjQ>sx?g3P9&96
zXvuNx_ScQ>*>OG1dtKGwiCRGd04I|24iQKIoJh($L?F?WCz2(n(3G?%L=0+5^<+}s
zA(9;U?qpKlA(AWrolN2m5#E!69t6Hk;to*>zeDus6J~h^v~2{r_S>YqLj+;yew)N;
z*Hc^<)R`oE_X+c_nKO<KIr9wG2RtEY&7FBBi48dV!G+c|yv`-r-T!AceDqvWeh(5{
z=$x~MBuF5iqajIKOd!!m&LxX)l2xUb8?ZDzm#lXq&l*So9LgHbC2#1;7vrsIFrH7c
zga2o?>v-O7cyKveMof?>_k2>W96_So^GR%=^V@f=DfV1SvU_`(L#r-17_?Dy$?o3}
z0>-6eKx`L*1jeN#wu@*>tu<}b{E}qhC(TUNFAfB4)coQ=&_>NK$$(fXK?e}OP+a5}
z&015^G$=dZNprfZ^`O+%wxO+=K`FUu2_YyAN?{7;*Qi=!YepNHQpTn1YgBKs+`pPv
zs=>1xm-b~wrev^y0suy)LPb2q1c@FtG8G<|62XEPJXnlMsbf<jSV$i9MyF)3kSqj?
zF)0cb6jNK%7SC&`YhJzr2d)K6T#W|_Q(jBSzzPzOuchq3+M2d^CZ_ll_$LtPLK9Om
z+JJ;BC#J5pC~fjgOvyPAPk}Tsg}_RA96mfYIh8XvCGt30^G{C6?^xo?VYn;BQhzfu
z@hK_!rZkus9#c|?CATA=3DRho#{T*@^N#qmlzhDzOvp@2VcmjTFOUH>o$dddc~^XT
zN~UjM5;ukP?S3u;qh_)j|871IpP7<rV36ldGgGNjiGy0sVr%{moLMRPo^X(#70gQE
zm<``%Kv}5z9M+__*(NzBB~wl?QP!LkQqD!V_vpsA##W_rc4i0kHk;)ZtfKnT`?evf
z?`rnmv*z#PtL^%N3EkCHU+m;V2K8ObT0LiWj;~G0yJ28LW^D?C6WfT80rft6<vH_r
z@%QbzfJt1c%RO8M^<B^O=gr^5*V{e`@%pYOpLFFisP6~th3Cy1;~%8t`?Mim-w#q4
zkd#k`sJ@%n!RO5z;+s-3=L8dFZAu~M#KZ&{bgYk9hZoG>#y?8Q92iW<e3U{CjLj6t
zU{G#h3tlk0$G12#^gittlEJ`*3<ljc7J1QZ7T+fODKR0lErlqIBN>p`{@lTOzG${e
z?Qr}<FQD%r|170c9iKz{B$e}dimiOne5c@(6z<)T{|m|g``CZ}0srr_>kB4y_fdW6
zyT*m&{{!rYf0(z&57;(<37G?A!@s!<sL$Ag|1_)PpV{q*FOU(J+OZ3lf&UM&pZ{rg
zEjwiU4WAl=%pvj{?g^tT`2R=>+Z0{ck>~Ln@&Ejnd0i3=e%p;6L;6Unw9NXJGL$v}
z?N|!GTDaw3<~ROhDP$;oN^C>5`Z~ok$hIKRUSHes1|+KUbxLNCAYs+lDNKp9_1T8%
zdK!ZYTc3w}V(atW|Cl9JV2GpwkAZdC9_ApqxV)eQ5?H6Hz7%xZQ0>p8SV6U!>3GJ0
zpssNyC67KK1c)=Ka&bKcBp}YDa6N^8ZKVy7Kc}+)tTsoun*E%TGZom-`Z*<&N03|$
zjr{@TDs9M%ms6~De{*BiWv66HBQK}qzAc1+aXA$eNi0ZUTuvd0rC`~HI(h$6k${4L
zX8%$dCqY89f2oX<Afeg6)Q*#FsDeXEd7Qij1Z){ndewn6YYi!taS~5~G^A9<NsvGq
zQi?b^z(Di1MW8IrSzYRi-Oi?#TS0c+*KR#~^d<9Xu5WUwy<TWbtv!v68Ed}T0{;Vl
zTB)2|KmvbSscdYJz@Ju%#>VU7YFl#s3^rq^d27WCM}^vSMycF-fech;lw!-H6IVf-
z&SJ$cn_arhvMbe=Uu&9WR|+H$W|hiR6C@C3l_J$#N^6w1AhiXh%97IT8D?f&)nLG8
zaKwZN66y;|<%9?l>I+I`_6!me;)2qmC8c6QBnF=l7nZ7vOT~mJdC*%_DkntA!i4yC
zsU|1Hw$x3Qx@04RLc1-s8yO_bSZX&iNWd+<+Q@CGf2<OXd@~3jt#bT9>CGy~AJkn|
z*^LZgAg!WC#(iM5T>!smoU;#Y+)1?Yw<F9}zV}LvGBK9hQR}Yft;@ELG_{KLwxjR_
zxa;l41qs~s)VR;V&F!cWHZj*I^M#5{jtVvIrc(L)){ue9rc%5zL1$6zXuxh}Ge?=f
ztJqvB_Xoj*%H~q}tzwW+*<6aO2y+2cKy71<Mw>TewmGFx3vMfwA7X?I36&zG)5vN^
zUf(I54gyZ!X*(SxG<Vug2MNucSDoIDoc@V)ItT!LVmloqe<(*5NFaS;I~^pDJ|U<7
z2~Ka1-Hy_nk!7yfUBc-d#+o<!J}ous3#Ydyr`M6wr&ZM1)dCZcb+*4j0<w<$-5Aws
zPi{KGdW<uhW{x;2<nJT)V1f)(j?iGbldHhrM@!lAapqmkjygJobkuI6_T1q|sf~8f
zAzOR$_?gmdn^(-8O2;#H^}$B<&)9tqBtXuT%9I);*TRf;ipF4jYJ&@<*&AOs|KjR=
z!2zM2j0+A3wZ?@~d1MGBfLtiWRK*8!d$fjjxfH)2^F1?LxvKH67{Pb|z039p1_`~(
z_6P=v5q!C{=%q3-f{DRL@Rd?^K$#f9k_WwhWpV^d7DjOYGJ6EKr%*e%?3$Do9KjMP
zEl8L$xJ-s>kboRqW{2wbl!A;X6QLReyfUIphH8*-#)vZ6p+Ev@M41fLAb~WZ3?1rA
znu$9Ev@vBlGtr|uiXQde*KUp7GSS@RA5&%|MYrle-Rku+J}<Wb0sPm?q|-nG|MfB%
zszCz(^)mD>>M9+mPmE`$-!$*89B*3)CJ@Hk7J?+9GWmggkU$t;h75%cB0JFFev|!U
zlKD{8n+^gw@Xa#$mNI03@Mc+B9E*Yk!kcCCPGkq7CYOoBmu5Al)@*W_oDuN|ij!?O
zgXE&Nn>$c<n<3nM4+u_4H-khaW;m6gJ~zX5GoAuz2Dy1zA>3RU(Ds()d{^#@b;I{O
zpXk-6FD~m{_puqyelXd5#q#ehvvZ(I^7Ve<>y{u;$bQ?`AW_JE+t(mb$bRzm7J3P=
zlDx1u+jg$GE!28(xvV3&#4e9E=F4G_P+DA$7rgi-txEV;TT!m8Emvdj@E2y@%6{>l
z8Nr8j%ViTo1PCk2<;(^W2rJ6v%mxzUVnun;+Hx^2h{4Cj%5rs0xfmCc2fbD0a$HCj
z#>MJ#8W)p;yb73PkCrQ6maEwp*O_mckAM(4TqTbbN6Tfu1_`5%mdkz(65vP6v1Xtn
z4v;YFXnEO}FpBQn69Yz}*BmRChjNwFx+ls-zZkO>{o;h<GiuEf<#PBz65uDw?S4^7
z@%(hT*i>D!&D1)ccC4gue%i5;Ldt2!N(w2b%h4^qrqNdw(9V|U3}?!A^OXN=xqaum
ziu%BXaz5T#fdJwKyD>ll@j|&AZy<qqp&Wf+AEl60)KtHevu!)f{h41JCF%pel$+ug
zGav+|U&`^7@)1G_W2`^>c&9lk(;qJ~@s3i(TfKi;=a<p|Os(EOjZ0}X8&(lDFfH;-
z5OD0kwCr&pQQE+?^d3kqYkRMX{5~wrz1Ix{r(`38L}iDiWg~+G(y+8_WRO4_mWKPL
z;Tu3|$AC5}jSv48e{7~){!wZBHQJ8kzt_^-e{Dbj@-@5|#j6Dpkguhs|3CurwKV*<
zkY<>U@Sip@txU-#_EM6Ee{DT-;l#8Y1dxN?#Izg)Akp6@ri-Se#ULOC9|Uiv)yZiw
z2qX`BlhSe!NEQY`P1>FuI#R@|O<yxPfCK-6B_;=uFs0V^FGxVvrfvUrByzU!FDuw@
zYE`q-(!F>DU(B}M3lc!HZTEuYns6_@Z`CQF%}?iyX7}zl?@!N9V=|y$j_ZV*W^bpJ
zchf5UhJg-R+%zK|+qvIdcFW?ldNbc@6OT}tC26(mH5?T34smR_Wocy<;Qnc&p#_M=
zb{;VQaqIH`(WS-finQ9vL8E3^nZ^%5+i35ll?_0{=C3pk@r`)wl~2u&tKUz{YjE5+
z^7Oj2`WFX|e78Q0U&FQGK1eGc0gisvj;kO(NfvFK3KpEWF)e??PH=#`DJ_4NPH=$x
zVOmYmcQk|(x2Bby0DkiSi@NsUDvK+A^O0P+TWjE=5CYsA^4ML82_YCF5x7Y}#MWn9
zopGvTwY4*9r!w`Q&a`7XrfE?_B3fA9_+*gIhz^7s5lrO~83rkYB%}qRR%J-gHiSTQ
z28aHByZdqf`_9?3&+|KH_uFTfFfKVF%S2Dbo~ZhyBzr-oQ2cp5Qi3O~uVzU*_$RZp
z|II1lz1!j4q)x}8<=r7{5roophj0gpnB9cC-PMsIlKRXur(-Wy_GRJ_>U|~NTR;YJ
z`byv}cnfHXjdrpmi098ReMe(AnqTzCuB`;axeWv(^2yL`fJEezbQ@Q=u`mTPI#Lo`
zDoJnbkA0u>D88M4M+mSv5@Hi1(isV{2@>gylz9IR681JyQgjLSM*mKR^Y0f+;NP3L
zzbr*Z)0DpaW$c<U^PA+=d^mJ(l72l0Ldd5{j&rsJ68SVqj6Ue*QuOr8q;qp15ObOI
zW(X27mr3vDKqBTc8Jb~=Hrpbdn*)Kev}DS_-{}_V-5f%ZQj7F%4kS`)k+8$J_}Xo4
zJo=8r(V)Wvu{WdR-jO(a+{k5sTB?0V`cFf#rmXTE(mN_}k=PCyvm1mdgv548-j6|F
zUrY70o7uy$x60cyaj5Zj>3^OfgE;LH<NX(0Mo@W2I(h+<8M8X1+lh>nm{f<H=pHWx
ziAWt18aik*8jIzo{W9n=`$l3P=kAwdufyxhEC9qh&6<m`pOkgVY<Gn@m`JNrPSmiE
z9Li8gmX_Il#I;o9L6dhWHoxqk%yyj^n22&v-r%OaK_bdQi48({$OkE)fe)GIF2$CV
z9g^AZo?b8!<&eyCtE?aq<&eZGD|aN+QelV9=%v`=vcodlZU`q6Q4Y%qZgm$Vq8ygk
z_Q#FKwH${ZF;9-hQe{UZp5}9f=ZO1=OwiU@7mm1($axEV^)WMe)bx&``bTB9LtU-i
zNPkpLp6R1-HvXuryxDGvuH{5wm%0DjSZ!HXCJN`@yE0KY|K7zYJhxxVIrDC__uJTg
zGrMKBTdM>UQM%<Mcegl5MCq306=DTXpw-2rXC!vt)PEOyY0QK(5=-fPOtlUui=LIi
zpfq1yj@2~a(_LJE03>%-<~kLEL~>^(Hm-041`-x}R^|^%x5h+<U3eLg*kw$c^&DVp
zKw|NX+kHKYYcT_IK}w|AC)W{Y=VkDt{4GI2dgJ%8%B+V$I=6v9sO`M;OS~Yhu)jwc
zBnow2;z$B@0TQi$Ue39Lw{Tk023Ic;&$*mXm{FN7yAm6d^~h)@529%_G}k%{{88!u
zFF_)aQHlRcmj~y5M`g0o=V6ytMrFY)afRE?>gWNRRj{J1RXm&1fUmG3^ncCD`vi!g
zBF*Y*CbWoVg-l%Q(*HH9<O=1+8xVKnjpZu)CFRB&o`-lX%8xfZ3*(Je#qq{x<2lKU
zcOs06ysNVEk7X5@S^YT^&5PyY2j;`5Xpb9}GsW&znMilDS_P$UuL?*M5VW<w9FS<c
z)d~|Vus@IpTw{)1BbFrAsKD-ICKEDi6m~M#Ss74kP4!r@FtJtzGuV8PVgIsL;s1n_
z<n}#?b!PQgQI%Myf^sjz$>()yRweg|LI&<(y*W2l%t@?Qfi-S2A+ui1tPr?910))E
zgGt52t%(hpyg2#4fqA*|07)Co>KMwiF_RZ3|2Hx(SOe05#cwj-#l(W-Cgtz31rsux
z6pj|+8ea+l0h`kg2yrYcxmg9)s>y}aW`!HMkK?8y&@k(5>BZNI`-9}ROqsX<u#IK9
z7e-l+C3h9sV|HC9?ul<#_(R}yW<71PO$BK)C08tHz?btQ;G@~w)MR(a93+(ArZDYJ
z(0~MJ+Ej5Gpy5!03~Q1*l{ZPxK?!y$Z<3xxliaCbk{9XR>#5$|3J=4d0b=@c#n3`f
z4#)^YTkj5m4ARQ_J%1okrrin)H@JQ}$id?sAF0T{fW23;Ou?D4*PG;cu`K?P%1Kz%
zO(N>{LK_x!rhmMMCP2Cigb|3M?q$Ps)nyV(wa;K%(#*s@71&crWI|@2f(sy6CJ|oy
z%{_5|Wq&3e%Vj$Fk%kP4c)+|77p2Jqq58l?%mY;4U$L<VLO@+l`WwD<JHJN-cJ6^(
zNcAYpJrK<xkyMYWT0&=FNffb1&AFZH=b+J2y=L|#QI_Zpkqai0=p}N0Yh{2+EcHwh
zOOq#5Q0>ztDo?1ITgBg?4<rOw_L(2%iB&~?nX(X;eJslZfYQQv^puKRKua%i4gK#t
zF<+iiIFQ0I=|T+b|D%F4Dw{8}Ujy0=>@6=nf3o;vR`nMuyWS$l1tRq?6&_Y5mK+C_
z{YqhI&(3inK{}v<bIJ_mi(4D;>24oH02*OHO?7=LNJJY@*fB+vf&@wjlse~8N`^)0
zV2D!BLH2_oN<E7x9VANa&+tOvAv&ajVU?ZVX|_%gU5|lsC`B0Bbx8SRwIETZAysHS
z3<^P%4$<menfQA*q-GDJOzgT4jxzE7;`1uIf=|~3*^98dRz?17`lkvrepKP|pcU*>
z77@UgRr)W}L_F)>%gPVaz($6bmA?@aBr?3LFivJC0unCdvWmOsa!F!zYb7Sk6DM4{
zh~Jn#n-C9XH8kq0$+8}e+Rv0Pvh`@xn1yx8vj1z;6YjD)LnxCa=X!UWq357pje2&N
zw-rL(jXL#Xv6n`RcT=9%k(YE<{`RbbMNd3qzWh9Ay!k|<&p1^e*2kaMet%;gEB}HH
zZgkeWZMuj~2WgkCauA4&UeH*&qSfK86Fh#cgW2Yh3Q<@L($UW6gM{#l8XDn(V;&8*
z*#JWKC7O}GwF)rF)i7iHsXzvWUT$726g7$E+TU>vCS;at?63exA;WRG`Jzyy5-mEg
zh$Is-EgFc#<(D8~rLCs6NX$*P>cH*I1QRl?8VlvMQ2uT4=qoz1+N>@TsrV}zn|x>j
zx6uSv>cE))<%>BcSuCOrAl+~bfvDh0?XS`YiQ=x*nCm9wKmu|rb)nJDS(9PSV3qdH
z+H+8hRoXji&!QQu(lCREpe(!@vrb3efU@o`SoE}cvsnBrzE0;9Tlb3BV9-nIpvoy|
zW(nLYNaxHDh{V@xI1sjjeJN&x`Duxmo7kX(TWp(y37HKVE1&EiCsP9(&DIjJAhA(<
zZv`f~8s3Tv@p#CEeP~pQ`otz3%<<_^FPrq-8mpJd)XS^p*AjYpReM(sCS+dKaOK><
zFqwLJ&Fq7g60hlCo==B*c}=Hk?ZyE6T+8bwPl?-#UeCzTd%jMYr=YvV@#tn9`8yiu
zVT0w$e6v=GJL8)*7AmR4#Z=-J9c*<<EZ0yXNVo4Cfl%TWUFd#XK%#D2bm>i2i6EiG
zExK&0S0Wi!iEoEW^c<Au?NEuHMJ2vXB@WT#a8}`69r*_e`8j&r?OF`vzN>SRR*85Q
zhR0mSRR~>-ZxrY~9oRvB4oD>Zp2h=0IFShwf!odKjbi@v?HL)Wa64tDSs73}bWmfS
zEfsl%i~-6Hpb?*%+@Wuo>qSx9Hq$yoBol4gkMi=Zg|%sn@``P8(Bw{Yc!rRPouRhz
z)C<ztNo{j$Og=T)ZpM|0yAti8w!wr<JGJeK1%Lg%`9mr4dOt)~zTKMfK9N;m(?K`5
z%e0q@!o)7^M~nG(bheA0qr}R<1%6<@Efp&90lbYx4Q|vxULR;|+H*1(n(a38Z-UJ3
zOx-y$+s(R9x9Q*)Yma&ECQ<bBJvwmxJr0UPW{<`xDpzJ~J^B!t6y_GFrB5$?<niAx
zed2eI|4P|D2-W6xBZS)nVI&dxLyZGrE(07X>sVDLijp0f`tm)14qY=({1V8$Js#bs
zBL_`=nRqO|Pveep0`_(S_J9sPwt#H_iIxNHuDk(>Ob_U3?%G(8(BT34F}fX)K<ojn
zKlX?v!y>jbM6Bna9GxLzJ&TC#Bw`I8v%sS($8@AG{ZzSFm6dxe1nU%nwToaaPjrP4
z1QY3X5rXUrrVw<;%|jKUG;us^e=s3)ob8V>Fl0b=o3|=NU7|be0l*}eJpfK8Kn8W|
zF}OzZ=0s132QVSiLp;=38Q`<mJTMER{@$>ir&xUU5?6Sf3F!czCro;ls4O~>$&2_r
z!MyH<E|$cjCw1gA7-+3oS}txd)A4sQ;Uty9A^Q?4<+Khy)n;n0s5YA_;YL6^r63eF
zJ{>9rBno~yR0>Ea<+RqHdZmzImC_$7#dA=g{!l5NMWyspDW|9uywGx1N4`NRKN(Yy
zE}o5pDe<#9XPWgRQ>mH(w3F)$Dyl>@3DR}02t?`wtS(J<DpfS7&HYv4&VoVh|8c;D
z(4gk4LmZb*r8>@O^HG&(PM*t1IX0vowL+-u*V_DMj(Du#>(CmeS~Y#GaXkfJ&AJ2Q
zFCDq4&41^J2jfE;Ct-;7JJ_tlIv8=zxwTqEp9JZ)ej*Ts9M=AlWst~dSYxjpp$-zQ
iI;`c0Z&fmEt6m6O)pJmX3t_8z7F+d#Hdm@e&Hn-4H_#ve

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 02d39e00..335a2736 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -155,10 +155,15 @@ const (
 	// The unrecognized keys SHOULD be listed in the OfferGroup's ext field
 	// under "unrecognized_critical_extensions" for diagnostic purposes.
 	OfferAbsenceReason_OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION OfferAbsenceReason = 7
-	// Offers exist, but none fit within the requester's budget (e.g. every offer's
-	// price exceeds RequestConstraints.period_budget). Returned by Resolve as a
-	// successful "no result" answer when a budget/price ceiling filtered out every
-	// otherwise-licensable offer.
+	// Offers exist, but buying any of them would exceed the agent's budget, so
+	// BrokerService.Resolve filtered every one out: its price is above
+	// RequestConstraints.max_price, or it would take the budget_scope's spend past
+	// RequestConstraints.period_budget. Resolve returns this as a successful "no
+	// result" answer, on OfferGroup.absence_reason for a URI the budget left with
+	// no offer and on DiscoveryResponse.absence_reason when it left none at all.
+	// It is the only way a budget is reported: never as NOT_AUTHORIZED, and never
+	// as a non-OK error such as RESOURCE_EXHAUSTED. The full rule, including what
+	// counts as spend, is on BrokerService.Resolve.
 	OfferAbsenceReason_OFFER_ABSENCE_REASON_BUDGET_EXCEEDED OfferAbsenceReason = 8
 )
 
@@ -7293,7 +7298,10 @@ type RequestConstraints struct {
 	// not an address — the recipient of the request carrying it is a separate
 	// question.
 	Exchanges []string `protobuf:"bytes,1,rep,name=exchanges,proto3" json:"exchanges,omitempty"`
-	// Maximum price the agent is willing to pay.
+	// Maximum price the agent is willing to pay for one offer.
+	// BrokerService.Resolve filters out an offer priced above it, with
+	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see
+	// BrokerService.Resolve).
 	MaxPrice *Cost `protobuf:"bytes,2,opt,name=max_price,json=maxPrice,proto3,oneof" json:"max_price,omitempty"`
 	// Maximum effective cost per unit, as an exact decimal string (not a float).
 	MaxUnitCost *string `protobuf:"bytes,3,opt,name=max_unit_cost,json=maxUnitCost,proto3,oneof" json:"max_unit_cost,omitempty"`
@@ -7307,10 +7315,15 @@ type RequestConstraints struct {
 	PreferredExchanges []string `protobuf:"bytes,6,rep,name=preferred_exchanges,json=preferredExchanges,proto3" json:"preferred_exchanges,omitempty"`
 	// Budget scope identifier for per-period tracking.
 	// E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.
-	// The Broker tracks cumulative spend per scope across sessions.
+	// The Broker tracks the spend of each scope across sessions. Spend grows only
+	// from purchase totals; a Resolve is never spend (see BrokerService.Resolve).
 	BudgetScope *string `protobuf:"bytes,7,opt,name=budget_scope,json=budgetScope,proto3,oneof" json:"budget_scope,omitempty"`
-	// Per-period budget limit. The Broker tracks spend against this
-	// for the budget_scope. Transactions that would exceed are denied.
+	// Per-period budget limit for the budget_scope. BrokerService.Resolve filters
+	// out every offer that would take the scope's spend in the current
+	// budget_period past this limit, and answers a URI left with no offer with
+	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a
+	// denial, and Resolve neither charges against it nor counts as spend (see
+	// BrokerService.Resolve).
 	PeriodBudget *Cost `protobuf:"bytes,8,opt,name=period_budget,json=periodBudget,proto3,oneof" json:"period_budget,omitempty"`
 	// Budget period (e.g. "2592000s" = 30 days; proto-JSON encodes Duration
 	// as seconds). Resets at period boundary.
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index a501aeb8..71843a79 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -580,6 +580,24 @@ type BrokerServiceClient interface {
 	// (→ OK + absence); transport authentication failures are a different axis and,
 	// like malformed requests and internal faults, are non-OK transport errors
 	// carrying an ErrorDetail.
+	//
+	// Budget. Resolve applies the agent's budget (RequestConstraints) as a filter
+	// over the offers it returns. It drops every offer whose price is above
+	// max_price, and every offer that would take the spend of budget_scope in the
+	// current budget_period past period_budget. The price it compares is the most
+	// the offer can be charged without a dispute: for a metered offer that is the
+	// ceiling amount Q × R (see Pricing). An offer the budget drops is not
+	// returned; a URI the budget leaves with no offer is answered with
+	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED, and so is the whole resolve when the
+	// budget leaves no offer at all. A budget is never reported as
+	// OFFER_ABSENCE_REASON_NOT_AUTHORIZED and never as a non-OK error such as
+	// RESOURCE_EXHAUSTED.
+	//
+	// Resolve never charges and never counts as spend: returning an offer
+	// reserves nothing, and an offer the agent never buys costs it nothing. The
+	// spend a budget is measured against grows only from purchase totals, the
+	// amounts charged for purchased items — for a purchase through the Broker,
+	// BrokerTransactionResponse.totals.
 	Resolve(context.Context, *connect.Request[v1.DiscoveryRequest]) (*connect.Response[v1.DiscoveryResponse], error)
 	// ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
 	// in one call. The request is the TransactionRequest an agent would send an
@@ -729,6 +747,24 @@ type BrokerServiceHandler interface {
 	// (→ OK + absence); transport authentication failures are a different axis and,
 	// like malformed requests and internal faults, are non-OK transport errors
 	// carrying an ErrorDetail.
+	//
+	// Budget. Resolve applies the agent's budget (RequestConstraints) as a filter
+	// over the offers it returns. It drops every offer whose price is above
+	// max_price, and every offer that would take the spend of budget_scope in the
+	// current budget_period past period_budget. The price it compares is the most
+	// the offer can be charged without a dispute: for a metered offer that is the
+	// ceiling amount Q × R (see Pricing). An offer the budget drops is not
+	// returned; a URI the budget leaves with no offer is answered with
+	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED, and so is the whole resolve when the
+	// budget leaves no offer at all. A budget is never reported as
+	// OFFER_ABSENCE_REASON_NOT_AUTHORIZED and never as a non-OK error such as
+	// RESOURCE_EXHAUSTED.
+	//
+	// Resolve never charges and never counts as spend: returning an offer
+	// reserves nothing, and an offer the agent never buys costs it nothing. The
+	// spend a budget is measured against grows only from purchase totals, the
+	// amounts charged for purchased items — for a purchase through the Broker,
+	// BrokerTransactionResponse.totals.
 	Resolve(context.Context, *connect.Request[v1.DiscoveryRequest]) (*connect.Response[v1.DiscoveryResponse], error)
 	// ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
 	// in one call. The request is the TransactionRequest an agent would send an
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index 67d9d7c8..3ff5db65 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -157,7 +157,7 @@
           "type": "string"
         },
         "budget_scope": {
-          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
           "type": "string"
         },
         "delivery_preference": {
@@ -206,7 +206,7 @@
         },
         "max_price": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Maximum price the agent is willing to pay."
+          "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
         },
         "max_unit_cost": {
           "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -216,7 +216,7 @@
         },
         "period_budget": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+          "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
         },
         "preferred_exchanges": {
           "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index 0e29da92..54e83dcf 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -161,7 +161,7 @@
           "type": "string"
         },
         "budget_scope": {
-          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
           "type": "string"
         },
         "delivery_preference": {
@@ -210,7 +210,7 @@
         },
         "max_price": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Maximum price the agent is willing to pay."
+          "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
         },
         "max_unit_cost": {
           "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -220,7 +220,7 @@
         },
         "period_budget": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+          "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
         },
         "preferred_exchanges": {
           "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
index 1e90434f..5d6a0070 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
@@ -34,7 +34,7 @@
       "type": "string"
     },
     "budget_scope": {
-      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
       "type": "string"
     },
     "delivery_preference": {
@@ -83,7 +83,7 @@
     },
     "max_price": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Maximum price the agent is willing to pay."
+      "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
     },
     "max_unit_cost": {
       "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -93,7 +93,7 @@
     },
     "period_budget": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+      "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
     },
     "preferred_exchanges": {
       "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
index 758c23f7..f7de5922 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
@@ -36,7 +36,7 @@
       "type": "string"
     },
     "budget_scope": {
-      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.",
+      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
       "type": "string"
     },
     "delivery_preference": {
@@ -85,7 +85,7 @@
     },
     "max_price": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Maximum price the agent is willing to pay."
+      "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
     },
     "max_unit_cost": {
       "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -95,7 +95,7 @@
     },
     "period_budget": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied."
+      "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
     },
     "preferred_exchanges": {
       "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 59f38e85..752f22c3 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -861,7 +861,7 @@ class RequestConstraints(WireModel):
     )
     budget_scope: str | None = Field(
         None,
-        description='Budget scope identifier for per-period tracking.\n E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.\n The Broker tracks cumulative spend per scope across sessions.',
+        description='Budget scope identifier for per-period tracking.\n E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).',
     )
     delivery_preference: list[DeliveryMethod] | None = Field(
         None, description='Preferred delivery methods, in order of preference.'
@@ -887,7 +887,8 @@ class RequestConstraints(WireModel):
         description="Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
     )
     max_price: Cost | None = Field(
-        None, description='Maximum price the agent is willing to pay.'
+        None,
+        description='Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).',
     )
     max_unit_cost: constr(pattern=r'^([0-9]+([.][0-9]+)?)?$', max_length=32) | None = (
         Field(
@@ -897,7 +898,7 @@ class RequestConstraints(WireModel):
     )
     period_budget: Cost | None = Field(
         None,
-        description='Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.',
+        description="Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).",
     )
     preferred_exchanges: (
         list[
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index d686e703..37453b37 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,7 +48,7 @@ export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE",
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
-export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
+export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
 export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
@@ -152,7 +152,7 @@ export const RequestAuthFailureSchema = wire(z.object({ "reason": z.enum(["REQUE
 
 export const RequestAuthFailureReasonSchema = wire(z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]));
 
-export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks cumulative spend per scope across sessions.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit. The Broker tracks spend against this\n for the budget_scope. Transactions that would exceed are denied.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
+export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
 
 export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index b618c1f2..415a916f 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -610,10 +610,15 @@ enum OfferAbsenceReason {
   // under "unrecognized_critical_extensions" for diagnostic purposes.
   OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION = 7;
 
-  // Offers exist, but none fit within the requester's budget (e.g. every offer's
-  // price exceeds RequestConstraints.period_budget). Returned by Resolve as a
-  // successful "no result" answer when a budget/price ceiling filtered out every
-  // otherwise-licensable offer.
+  // Offers exist, but buying any of them would exceed the agent's budget, so
+  // BrokerService.Resolve filtered every one out: its price is above
+  // RequestConstraints.max_price, or it would take the budget_scope's spend past
+  // RequestConstraints.period_budget. Resolve returns this as a successful "no
+  // result" answer, on OfferGroup.absence_reason for a URI the budget left with
+  // no offer and on DiscoveryResponse.absence_reason when it left none at all.
+  // It is the only way a budget is reported: never as NOT_AUTHORIZED, and never
+  // as a non-OK error such as RESOURCE_EXHAUSTED. The full rule, including what
+  // counts as spend, is on BrokerService.Resolve.
   OFFER_ABSENCE_REASON_BUDGET_EXCEEDED = 8;
 }
 
@@ -2792,6 +2797,24 @@ service BrokerService {
   // (→ OK + absence); transport authentication failures are a different axis and,
   // like malformed requests and internal faults, are non-OK transport errors
   // carrying an ErrorDetail.
+  //
+  // Budget. Resolve applies the agent's budget (RequestConstraints) as a filter
+  // over the offers it returns. It drops every offer whose price is above
+  // max_price, and every offer that would take the spend of budget_scope in the
+  // current budget_period past period_budget. The price it compares is the most
+  // the offer can be charged without a dispute: for a metered offer that is the
+  // ceiling amount Q × R (see Pricing). An offer the budget drops is not
+  // returned; a URI the budget leaves with no offer is answered with
+  // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED, and so is the whole resolve when the
+  // budget leaves no offer at all. A budget is never reported as
+  // OFFER_ABSENCE_REASON_NOT_AUTHORIZED and never as a non-OK error such as
+  // RESOURCE_EXHAUSTED.
+  //
+  // Resolve never charges and never counts as spend: returning an offer
+  // reserves nothing, and an offer the agent never buys costs it nothing. The
+  // spend a budget is measured against grows only from purchase totals, the
+  // amounts charged for purchased items — for a purchase through the Broker,
+  // BrokerTransactionResponse.totals.
   rpc Resolve(DiscoveryRequest) returns (DiscoveryResponse);
 
   // ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
@@ -3427,7 +3450,10 @@ message RequestConstraints {
     }
   ];
 
-  // Maximum price the agent is willing to pay.
+  // Maximum price the agent is willing to pay for one offer.
+  // BrokerService.Resolve filters out an offer priced above it, with
+  // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see
+  // BrokerService.Resolve).
   optional Cost max_price = 2;
 
   // Maximum effective cost per unit, as an exact decimal string (not a float).
@@ -3451,11 +3477,16 @@ message RequestConstraints {
 
   // Budget scope identifier for per-period tracking.
   // E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.
-  // The Broker tracks cumulative spend per scope across sessions.
+  // The Broker tracks the spend of each scope across sessions. Spend grows only
+  // from purchase totals; a Resolve is never spend (see BrokerService.Resolve).
   optional string budget_scope = 7;
 
-  // Per-period budget limit. The Broker tracks spend against this
-  // for the budget_scope. Transactions that would exceed are denied.
+  // Per-period budget limit for the budget_scope. BrokerService.Resolve filters
+  // out every offer that would take the scope's spend in the current
+  // budget_period past this limit, and answers a URI left with no offer with
+  // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a
+  // denial, and Resolve neither charges against it nor counts as spend (see
+  // BrokerService.Resolve).
   optional Cost period_budget = 8;
 
   // Budget period (e.g. "2592000s" = 30 days; proto-JSON encodes Duration

From 8feb25ccc4c9af7c1b376fefd10f4da697c88af7 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:44:14 -0400
Subject: [PATCH 068/164] State the dispute refusal reasons in the protocol

DisputeTransaction said only that it standardizes the dispute signal,
and each DisputeFailureReason was a short trailing note, so a reader
could take the RPC for an optional capability and could not tell what
a caller does after each refusal.

The RPC comment states that every Exchange implements it and accepts a
filing that meets its checks, as it does ReportUsage, and that a
refused filing is a non-OK error carrying ErrorDetail.dispute_failure
with one reason. Each reason now names its check: no transaction for
the caller, no accepted report preceding the dispute (empty, unknown,
or for another transaction), the dispute window closed, a dispute
already filed (a retry under the same idempotency_key is a replay, not
a duplicate), and a transaction whose state admits no dispute. The
enum header separates a refusal from an accepted dispute that ends as
RESOLUTION_TYPE_REJECTED.

Comments only; the generated code and the descriptor are regenerated.
---
 gen/descriptor.binpb                         | Bin 669753 -> 671079 bytes
 gen/go/fora/v1/fora.pb.go                    |  31 ++++++++++++----
 gen/go/fora/v1/forav1connect/fora.connect.go |  14 ++++++++
 proto/fora/v1/fora.proto                     |  36 ++++++++++++++++---
 4 files changed, 70 insertions(+), 11 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 280f7fcfc3549c714a1512baf0b447889fb36e84..7724c0b2e85245761e76c988b3c4ac29cb13c0ff 100644
GIT binary patch
delta 46874
zcmZ5pd0<r4)z7?n^R`K5PbM=7vxI#~5M&We5CnIub!lz2713f#t6~MW_OoF#$Sz2^
zg6ykARs|l2f(VF$MzF}DvV#~1f-Fjr<@=p`@5`h9H|M-_e)rt%+;h*p@6D=H&5mAZ
zHeiTnh%&@GL|x|FbB{7~r@ikUU;oM0?kQnQkN6Tfi|jvs?=v;+wBl*Ir7`>aNBZ6N
z>a)JWTf(C?OVx4|Z$#atDBY4*eD>k%wGp1m%+1gBe&)r@%`ZImmtIf(xp$_|lTSa<
z`^nx<_3xMI|Cc`fGWY(vTc+1jf6DZF?6KZYgV`(dc%LWwJoRTh?bSc?WbfYK_37Ww
z$~^X$-jDsQ-}N9eP<y)9GyOAtABR-$%wv6@>79A{nZEt|KGye%R+%UI{H=H9-ri65
zeWw3!`c?M&bMID}r~39sA(_5U_wUp9sa{V2tk=`M9z{9*Uo6XXbxZ8++UeMXvU)w$
z@A=-(^!`)k`9A&slIdk-y7%e#^t1hY-`l(2(|w=n*ZV36823!?$Di%j8%9%Ip7Qm5
zs`TzV*?^bKRz|DL^MC2vuXlzWIN*ytnt7_%lMtf{^nD7Ipz2wilnwBBuRc%o{!^J{
z<yk&zSr0X>R_Krlk%^`b$s4|HS8I!h_k$Wy_po{8+Gk~Z6fG@<ROswcGMyX}I(wAv
zJ*`nf#}`o#u$dLwn6d+|jt@EqluT!-<Acrt<@R3ISRXG(i>P&W&(7LwN?Dzv1*DV)
zr8*^;a!4rEDa|`s3q(PBME!wfx@wDB|Db3EQb>o+4@$huA))hw(&-*+zG^9IPDHz;
z<P5hjb=8_Fp-YO<z<S(L)f^=!q7Lw~_T9BVw;AA7!lX=GwABD_ghLYvtO4Fc(wd3#
zL3<+F5U(<feb!x@aUXv1CMG^wV2Ic6pm=~X#2eu)PEUa{#9LHs1$h}BgHRd_^LnkY
zWzutFs2M>eUiPweH*3)ws=Vs;R@Cx4kJJDFhI-W-{+Edse8sE&$~xmgJz?2cZ_a)e
zyhS@58tXOkt?6X4hw3?=g>ThnmX7x-2CpWVFmSxr%ymfMkM{;c){9&P4_{~dZ`J-;
z`np%~OBt%u>)zaahlI-O-ok{{imSl-H`pt;X=Od%a9YKqC}@>8oK^t|gg2bF1qp;V
zsBNj`K^jCB-ND<0NYN&5c#Chh7Am|DD9o_)Z`WFTDrUH)c+n0sy#9>Dq0v6Wo4w8<
zNy&RdxwScuV_<l{XAitX`&6rV&&5!I@t)V;P%5D{K{jgTkidA)+xi;oEeu_lifV1K
zhu@<uRJw0*F?_^!YwH8X7H_1H#Gv87#oM%*^@ga67SXnOl^tF+Ih;)&X3k~#Zx{uv
z<8QPFE5UdANdw3>uPMfrN6`SX%^NG=0|_Js(l&2=2L@8aGGLg7Mhir=FTCoPUY~48
z&V$~6&`uCD9WgE9+wRrYdaN|B6K2+KuTqi>XIPUOEx)}-(a|Pgi9rk!rtJ16ie-It
zK<@UYv({xX%+P!LylmSQ{lDEkih)+%=eCT2mf7dFi~*#5-Uy%Lu*Lw=K5w?6^}2#_
ztVFb<-kec3dq9hOLPxzup%};t4di1qkSBM<Zy+9Xnh7Kjk2%8`BoL3$aQ>2Pqj9I5
z^eSiB*xzg0EAdOTF8EM8>9j6LsGao2@_FlmMC+dP7Mzu>OAOw+r@ZPJ*}9Sky&s&`
zl`ORGY2LaO+yYFGpS((OvUP?Xeo*UF0YbPAMN!bqKY9Hj-mV~F(@)-T+#!MelQ&sp
zjTBV@`7?X)A#HT$pIr!=0Y7{FVrpVu0pe$GL5YO$l8(1=6YEDBd5VI*8LZk({-8bY
zsTi!*+d)%cu<94x4Jm*ORuf`IfCR{3wMkPxTKL4SQdzb}OST6A%_>z66p+xYQsqDa
z3C$|i87REEBULd_K){%ht_>Qxb)+iYD4qgoq$&prNFa?=F;G^L!}CV8aca&|_IOXt
z4vtfei1iy(&nx_0t4Fj4O2@0Rr@;i$cvbp4kU$!*Vu0MkRq&9pC68$LRWQdEui`<i
zm@4}PBnhdqUqAwZspyxXDu+M^Pq(}D(oCgdx{E=5J6-h)7w6@DJ6$bm$vXxlFs7?z
zt*zGt2FPl=>M<=}si<}_sB^1Te*>vRom;J@glqCD)Vb9vT+;&TTrYL*5_?x~t<2MT
ziHkvfyTrAF`gVz0#1~A`0mc%wO<QXO+SP{zbGe%H0qg!}ZFpq4>Wfjk`uKXeLRA{F
zf&Van#mfGoX(^C=4%0)_e}$SYvF_)xz+cJk{fqY7^h#AJBFiD;fy_!Zm9}PMD1!#M
znr-@vHaE3eRT5H&bJgMo*6mydmc7qL^wI82y{{@+DdUCa`)Z@c)}Ofys=St+?W6U{
ztaS~dfMqQiw8o1%!2x`t=A5%%`m6T7C-RBvi}OnH#c{K$H070QB$h?ceCGH-0%Ws_
znR6ow^3crul&yI}>ze*lRT^_+z=X`FYP04%6oL@Q&spk8ZA|)eRcRuHI9F}n!a9Rq
zf)J|prTyuX+OwY2m#V_Y1974IC5?xNxe)5LllAPYJ(Aj~D!i{CL-pE8eT9(=67yv@
z+tXLOFTL9}i2|?PWYQQcR}ezyAGYs)S{ti$KCCLurA-uR9adYFIwWj5td@1P0+vQP
zG|mpIt-Dw|skh+%BWf*6_0x8zYgMI<RHDeMR&CebVxlB00%z@l{@O$(d)BSJ0jaZ8
z`*k#L)rfXM&8hOSt<Py|gBMgpDrjCfCiwS@Z0hq`*V2osqEiXPgc%oABhMjW<wZ3V
zwmNYYJiNkkU(jwSyW*<QOueESV$D?fOueGQtM}$Auw{^sJ^O<8c-bJI7@Oo2p)<%=
zEEa2!C}xlki}kO$4yc!X%zRP1r~Au3=`dA=Cg#gN88d(c#LK=$Eu^J1F<<tTmRajH
zRN5EOm@nropC`FY%U~Vy<=gMPs5SKlnGXT!wJ60$^`FRU|4(aQI?*Q`7nneu=re^^
z1_{)OK17o3xC$OlW_P}%bts+elTGI1o@%nsh;l<fLS?eAAa1qgDyaW7w&*3TUFkGe
zg{nWz2Nz0>?&H;;=F2azuHh;Gn8||w(%P2JbXBOjGku0wr+nNG&Gf+^3d1mV=dh>#
zrFE#7<20C0Aulw?=NF9(5(smAjfEEiiDKsXFtQh6z`+O%?P_-5U)qw+)h-0ZSk*qc
zKtKi%)jk=mg9Jpi4-w^5OnQ{2E%)Wv_UDz_6i?&jK0b)Ns-{P@^*&{jPqlVymJWKT
z>4noHo;`M;_B(I;4L-HG6+%QMo}tM$`qT#zPdOZK#P^X;z2dRPk=NCz>prtnFKaPR
z>1R&gfeY(C^U2^1B&_?)hk<xA*TKWBtY?*WYsFTlej49LY<21fl7xH_(a0cyu$3Bl
zF1E}l7KZJ$4^?T+yrp}6iphHqTqy0O=#M%RB$W12v8}ldr~~Y};aZ#013pCr9U33I
z2Yg`>LW3kBU&BULSFVE2Jj^Bx*SeJ-b}gmOJnZv}AWq|*dDxe3CJUv`JnU=PiVtm#
z`tm5tAEC9cIO-x$*l^St4v>M_M}3W3O9bl6qrSG+TJvc*XynA|*w7K$TQ}Fa5E^lP
ze!jwx3?S;9Squ^obu^0?nj8Whf7z!D*3{%=lg$`r7PDp{BVf-MslB9D;)w_gH6H0+
zcKeMY-OJQ~w0px-goT%V1%ovabQ6Pzg;#v)AWa0_k_Wv3u#gAcl7+BvphiLWHz{rs
z9OfoXi6=j^r;OEpA1njmSV2+pCe0Lc5^SJt(l95#5ba^oV$^7cw!Q3ASI30Tr<y5Z
zbWJg#^Qnf=i|;u!#fqq3*iB|?4LlWJfRZh3p?AK}<eUN<7++`+zSyF=7BIfh8a1)z
ziE{n4Dh-&W&9B($Liho((}nN@Vy6~yhLax<JGF+5t<?svbZ$gFZa+R-t57SByBN9X
z%i~)8fXW5NaV;%kB~8f%#&NCe8fz`ZN}7@vQP11^-_*J)73W=yJYbyHq=$hJFwSfB
zLn;p#=e4%&tka?@0rV?-_$}>h#bp;F0Eo+)+)Zjq01%h8?6tD3Xd`}E>u{ZQS<Jv-
zL>+67S)dK@b{VVJw`dR;V|BmNbwOZ^)uYZR4FY4Vp2}FeEMApRM61@7h4$S`v<G~Z
z_~~>^2r$*UU*sY*B?OpiJ??aF2r$(;I#&$K5Qb&7Ub0XZNd<`01{x}F>1u1f6_hME
zjRnM_ZJ(xu5&G$T+jsK|{d+&vkF~1Ng6+Xa*?1t<9gqN8qRW^bB+6bwWnUI88A0@?
zi<q9m3Zm+35y9A4q1O*DGHHb_V|oY!X@!oMeu4>?jTyR4&sk;9wY7h%p=~-gf8(hH
zojmLgcISKAgz_B@G?;+i;Xs1~^bS43b5^7R=pA}VL+dt<fQP$TgZH&NDt5aFl(*UK
zB9On`tw+R0O6UG|w~idg5MczWwujArU#lwL<3f;g+v7rz_uZpML}%;V`|i;Z^xn#i
zfJyt=<7>3rEB3nxULfpu5ol%IuggVE=gxS)jzw*jk3*n!PuX>Av^h%oDHj6~hI-1y
zptbds)5<zuTTkhThM(pTkUh&jTc<tK`K*gTOY2z|f!y&~JtDRpI$v7P>Y1$diq0W0
zJgN-)r4O}X-p8s8CC2B6&OLCIkuR13kf?8!fn|V}B9L%*RYvLW_}WV3P%}iFvIpQJ
zEiM2KQg-0o{~K$Bs4ybW33i{4v{6dM1VauhUD09g1VauhkT7?GQQ!CEvnLqn`_*1<
zE()G*U;7E7|BC4@hJjj4H{`xqSIFZ|HwuL30||`j2DTYn1O_~AwOzVJ`^-~O?P8d)
zquRBDJaDxkhqul>aJ7Nq{gxO(@W6{%$IrBd<%?Yia=?pS2y(!SjR@ahpiRgDFE*OB
z;1gC?;D6s{nHnwI`fWo_PcWhKwjrk{NT|GRIMY*C;BZ$OVtRtW09xr5o{Pd)x`mV5
zUFq6SZg(Zw|8fA+6E0@Aku%g@__?O)q1}d2WW7rPkU`UPpS^B}R_-a=XUHWCT!8H}
zWB>#bVEYU#q%){N4Vo!O?UuW=S)Q_^t`g0`qlOvaV+KM{I%<R?))Z<%gJPcJ?BZ^1
zTG??!hVNiP=eSYKQ`#g0o#RG}mLh3l5P6b)@|8Ba?4(-`O|z4RObI}Sgbbtv{!Ihi
zppEop`{l1S=52l1X=revblFG<7XuPXmuZ-NENX<dtTOF8_i3MaT34C%?Lc#>%9KmF
zAu=K+mh#mx>`jsIT5aa6wYweAuD2qqF`g);iXa?q`ktvYVq2%^jT?&`7ijMO=_wlG
zJrhN5L%V=R5%06z$F={Y-#6u!8%zkjPeLPMAA~@zvA5J|qdl25rowAMTw;^dN+iq?
zcWIl=oDuem-)kL}&}I_}fHhPE&#Y`=ADq%YDA{7loj;gR-eSVFye5RO)&AU6PO+Ik
zXyYpJOYHuUFoE3XCLAG_D`25pA(uI2ddV4Z#`Y?-=2la^mR2jy`JxJexw_3%Ggq@v
z(=SZ5;ngf)|Ho7tU(Ev6_R3%I(5GMif`uO2@e43Gg`K8aay1xS&@NMLb2SSdW%n-(
zgM;|WRGYd|l~srl)vrypnaiv4Vg`R>s!gtDVS?`Yg<%MA_WnW&@yfpc!LRZn{@DKu
z^Wjksm}(<}uXI`wtNcMz&0bw3mh3~nz>gwk{{>hqq8|B0TjWR7Z+}sv0!-1X;lJel
zR%=$O?dppJ4;^>RR6AYGLdP99MSQ|-g%moj&csoNGYG&!zn!?c`N2ZJeg6wZ^xH`j
zCC(885%WqtYbyU`@0`_USK^nLIY_&q(6eSbBS#{<gLc-;{<nT4DqcPk&k>d|Lh*``
z_@k+&u4bV^KbdO!Y8J51)39jIXAGb(n#wDd%66R7+E(JXV+7@TF1kjb){xA;VmZ^n
zD~z~gs$~-1D~-794gt=B5m(%?!&$%{VAT&q&O)mWthCgYSA(Hh2U+!FlZ&BQ2U}Ma
ziI&C;eA!Yv)GLC8BC9O5;%XL(9BQdITHScPfjrz&8kDrpbbGd6|GrOVdcDx6-wjOr
zNxL?U2Ry1oe^WARxP@%SJ@7lo3yrpN#<So3r2RTF+VX|C8{}!BF_x0%ZjkN!33*45
zJfrHvLm-T?8l<cY%0;dxqQ1(!=e3g5tCqr}IATKPRgyu(3lh{=*6qBOO^vlg+(Jy^
zl1!G%ptZ)aLFcuGsd1LV<8R1NmyIKtQZ9o!zQ)#{*IK7vb8)CfuaQi5)QFNkR?ajQ
z{;$?8!Yp5u*N7*2Ubm2RB*)%Jq<BE{NXrKj5U*QEI`%*@NZ(LaXz_owU!^9xGE}9B
zB!m1EWI#<~MHjStQ<E&|n1!>SL^9}h$e>DZun`xufvGoK9IDbAB-5G8ph}Zji=VYF
zsmYd1f+8;inaL#6fy-coOkuD5tX-Fy;&dbuFOZo+GB<G<%*3f|@6THI^i)gX$qN`j
z8-uANLrsI+%uFliP1f}ynr5cuE8tDT6DhMSrIlzJkwF2?H<CV(fS6@rU2lY9kPeBc
zv)R6jT9edlORh6uLS{C}&<x}$k~ys5C9Pv>j-~L-6EPt(hh%QxGH9B)?1f8OMQSd(
zh2jp#P}9sMnQ|_JrkTh7b4lx*p64_Tk{*zmM>4-daAZcbx2&84?3&Bk1C8IZj39u#
zs);SlVoQ0)QmtbiWSdNxZ6Y39a9OKux5QFg@PJr60_0K)PLk43f&=s3CeC>ZhfN9#
zKD0l%qFqobKD1;w3@-ZRLraFkAkj7-T5=-;5*Qy^*vK4(Zv+OOZkpiLYs)ve2(%U2
z<RVZQw#kZ!z#bYv*kr{E`DV(b2HeaVtNI<~n_UFj32k-}sFcl?+{Zu#2%9bJV}8p`
z0QDJrOVxkZ<uez-3xv-sKQ)~XW|E`%%nI?d0U}Aq!r8!D3eil2Xxd&&*>89A>1(`|
z_$fBdcmSBat|1h(?X@Ce<BX?(*=q^^Pbi3L_gdNgaJ}&MoPm4}hVVX1ebQPNMAuq4
zulMI{^m~$T2XQ~7U;k(NJVy6HG6x5Y$0d+{xODP_J;2mw>5Yf@dE(Wp;?|4yx?h>>
zSFJfFI^L2UPdxj!us&ODH_?w+hx%DOLz_<Wt2bZ8fuV2s)h^b2N;X*3^YiUYf!@+v
zIo~gDEP#vJ&G*Y@1_`D4etD`65^>6Wf6;>i6(rws&G#4op4XNHz(LXT{hjXQyD-V3
zUD$m8Zy&HmP=s%xGquHjWtm@1Uhrh>%?Vxg+zW<iay&+pFZRpv2NFgt_RC!`NEo%)
zFM>b9LX$7{XO{UzlM_Q6_Ag<XB0W~V)GzNp$S3^%!`ps&|Dm3VK6=NG`ww)8XJJTc
zwqJRVJzb>#x)Q$}%V<>Eu4ObTZND50(1K;QUk(P4u*~*n->bLGxrVUPuU^A%Uyuxp
zRRd_VRj!?q3AA@%XZC+ZVd!cyly62YDsqGUNU{FDr}YNEqVd5FE)3h?*TvWeNmBku
z)EYy%Y=1<n@#6riM@k><iPrd$%RWStz>h(p?e{Bn_KCE9&|8V0B7cYnz}xRP1s+J?
z?I%1+7lA}Y_xodYs3?s<V*H2V?*o3d6(1SI*~VA@gMJZNb0M&Rd&n>1Z-<4pIP6Dk
zR7o>PY69$tU&Nsf3r_S~KfK*lQs|tcei7e0QfRI32<$2;I(+i04eD8#pnyMiwXJ;4
zhSlSKB<f!$FXyM8KE?Jn(kI=0$}dkxz$7lUAGsKiz&Yi|fs!OKT~7HUJldhB=xUx>
z@kiTRbdv8U&v%w>YOLS*r?Y;=L7}3~`UApQLI$8`{cx57ly0`1^(VT^mZqVCApNXA
z*^N&)$P<Sq+*yB@uGUcM@LVLB{W;A3YZJZ7)9kXJpUrsHTzHiMxyq1S6-&PkQk-1~
zR<eRk_v#7OrkUQh-N0P6BQH?M!0bV}>V0TILu%m+V{opz*kd(Cy>iL93}vjD-u%x)
zbLF`Jn5fs#+_1=pfkeHA=3*J4dVxf}hUO-P$0Cx~YiMp!cU~{ap?VF??Rt|{#>)ZX
z@LZ)wGQ%FasAVe!5}mb!D~_ykc^?hWjfor@NEACf7v4h(quAlOnL9=8cpsrThv#PR
zki}B3@#Y+!d+TjhHEqpvso%!sDvgtGcr*9o;@lH`9z(XXx4o&kKFL##C&FDo4yKID
zmAPAxuy<T;RHU*&!jy5jI2l1u1yE2E*p!y~z|Ip~1X{!<<Vsfv86Zr^m3P5Fl1?sS
z-p}&T&3SM)xjC=fe`uwDsx`KA<>HZtZhkjcS%Yq#Mo~ka>}TS!yROxz-myAYZOa=#
zJVNc>%T@2<-77fg-uH9WS3GDmFZ3hY7rDv~;0>}IJa}~C+3nlu9$)+a<YF5}u7Imk
z6tz7UUYN#<-~jN;T=iv-^*PP1JQ^@xv%huHx0QeG)E!K;-q%j+fkfTE&W(!u4<J$Z
zuX7O{(;;CVHSJ#Z!u5KG$M)tb!cT!o++4ZlgM`Z7T&(%j_aM>tdvjB_3rn58-<zAh
zjrTnX$iCm3d-E;UYm{NnqrN|5hi}mHeLc^(wo*@@$(8AK2%+FJxp8sf1tbbSlZy*4
zqF|cCXL6hUhPxm<MKKYA&24_ab(vPkJW{w|zuZM1;Cc9hTMC^LU&xi$NFan#F67E<
zBp^vC7bkk66fa7-kXtP7z~QMZ<w9<Q+pRzHLf}F#v&U}Idp>g6ErZVDF6YWTW}Zk=
z<;pxJNR)9o7kNxk2I3u%P41U9QDqsIbDQ30y-IT>k5<g8JiDZuKGySaRi2z0V569-
zJUKN$qAFE+^_|P_`Q)K<MKL%{#?!QL4iH8$3F2hBTiYm*&7<ZYZ-;Nz|D!xS-YtZ#
z0FBR+vj;*bWPF~SJs?q+@p+g%q7X_bkI!pxr>qMll&M$7=cVr8w}JBL+5%%Y-KIa#
znYm?9?wGk{Q0|!J$&dglD1+r8B$!Pn_qa|sKQHG)d*^L>LvL_?9^(3c!TbP?{{_tK
zp${lqkS7;iFafn7PbL*X0%}1Xl8Ssq3eXT+%IqHcq|&9X4vqMwd8TlFkb%z9Je=2K
z<AGvOon`D_cj=wWmpK&x6BSsNCkGWsAS}xZi-RJNKv<TC5RmQ_1c+L}&flfCFJIvz
zkds>BBG9m0ktc^GR7fWe!?FuUz@S^j`us}2sbZCjK<nZv7lDH8Re52tHU#*fTa|}-
zyNf1AfDB$|fA=f>K~Lv(E(V=BtaCa7Lcmy;Cqr3~uwot6;{fucYA~Yxn3r?F9`I}Z
z5v$3M)Dh&`f^cn@@|1xAxJoZvTTr@6&a<_L^eLXo%X!FhkZ%(Y(WF=MkkN2CC}==H
zeYhTQP(Y~yAg-<p6}U>ts@I`j8yrC7;&OmHB!D2*<pB5PfLc;n4?H5Ei~;Zv#X&~Y
zN<6#!A9b(i+L3{)&7!^^6;OM)fYg_x1M1UOb2Ms@hTu5%kB9Y^kBti`B4G|D3>y~+
zidY0BRK^8lECLcUW?VqVB1G~vdt5-qB9cRE_P79Ik%82EK^kAoHhRLuM_E7)c5sOu
zFhvjq5+$*K45dJ#Bo>Ig#OEfFVpqii(R;6Eai#nJkGA3{2sNI>o_s{FD4XP#L&Z-D
z$YTV^KxI+@#|V>!aafq9+q)joQ=ZD{0qLxQ3Jvh-0qI9T0%LkWZb(1^V|oA~MF7hR
zNCOyw4DP>C&`Go~c6uQD2o{!l78MnEbhyVFLBV&B4hfb9lxE3`TIS|{{rlL@KB^D$
zmV+gt2?)T7r2#onLBfiqfv{L(K*EZp0jx2!B@XgQ&8~eMTjFId0!@)+E&@%FWr46b
zV1o(}mIZLYHj$3SgYc=^+JLgz-txF!s8r&oV+gs`wQh5eTU{HFGYx8hSsTDiqs;+G
zY!222iZ%zt=71P{bMQexZVreeHV5khBLB&?#O7dKprkWz$4V)NPF)x1LicB=A-N{X
z`!FB_ddWgtei$g>d0$5gHh&oC^3c_aSTxrEqDZ*-^??$ejdT<-^wtNuRQ``9_G}vh
za$6ybL~?%PFRVaveq*5IwyTRoa{ePs;;UIm&VLkW^gl%+IsZ|hi`Z35_)f^qZ@L;^
zY+F9Qx)sGZ`y`+~<P2w2XRAH&uNcl1TiyPn%h+23@+N7JA9rpI6gdNlmaMHbkZLJY
z5TsybzkT*^`roi4bTQ}}_I`IL(Q)VgKv+aL&;iE&KnrnJ3z9GbrH=^b0}?w8;*|B2
z4Z%4av4=CEIg3l(|FAU<dvYJl){X^oPTGh2>R}~xEZ_@U>k&Wt_=)~;=6gopm^vPi
z**h>XR*uuWe1yxu!aDZdGy0?Hx`52p;#3|obtJ=&rEtWK(*f3}pZ-DWL_nsN!6YsT
zVb_MjVAS{Q*8cj9neSa7O7VS9GH1wCjQI<JoXhsy{`xaY@InCRUUUzWpKboknm(^T
zlKwd$@2P?b-JfaVy-Bs<XPFn-+~@V`^u>Tod4dU{izGBa2!XuB`o5qKy8aTp2E{PY
zBug)mP%ex>5^+E<XGG9r`7N)H4wDB2kvHyxGI-{1V34(ZQU7atU{L0Z!G-?7AWr7#
z#w<_m4GywpFY0$>1_xzxfD56)LBvgi$r7Hws|vEzKlCB#s-R36gA1vuAkOj*2`RMN
zaJKFr`jO1=pzI=K;UF|Th*q0TN5Z(gvN)JC&;ID2dP6<BIEZVP8_5-gusCTegUY-1
z#X)*^r4m0yVge6PtCc}hyjKDerK}7Fg539jL_e$yhTaVd-$M+{5yTcjwVaPU$$=HC
zf(=WrW&vnbu=Ner7h!Gy7VSMj<zP@vt_#z3uav##WqpxR38rHTtzdhCGDi~PE7+c(
z%#nbEDSLvkgD{0&uOJ4QqU{Z;2ZG|Jm*k=3eYo_)mkP<kO|Shyy6Hs=TZmfrNKm;s
zS(;(i7`<Z`5MsxJM=;_@FeDaikN`UplnXXU%)=u=xnL8?7wjW!;21p`JQBnjeG4xD
zTD5G}82z@2+Mx9MA-)LK2IV3M5+&6JrPl{ZIzf2-m7>Amfydg-Ue(_<dX5d%W6%;d
zHdK#6OW4?u49G)#2^$-d0XaxmJ2oT(aw0`QJ~o7a{5vr&05`?%I#K_tQZdCXh4vOx
zLUIce;*sE#P=VNXgM_71LfCfW2nUS`+36wi_5lb^$*T|`Vc+zSyb1vln$tthRfrJn
z2j+(ORS0&?6kV&B>zY8jg1K%*X;&~eByVy+5kPZ8xCzk%(-aBe>QK%K)^Cb_XRtaX
zkL-~-#dRz8*%ZAj^;Sq8^?`}Le=CIjM0ZR*BrhZCLYA1S-;!Dwl4na`LS|tIT_I#Z
zEoLu~%;J!oc*r{vH-w3I2giXuOWA>`dXLo7keuhp8bW3%bq59o%0iF6!|t4>-<EnO
zB+tyigv>i3Y}5n}YQ3B-ou>E5EDuTdh8jX<c?jYA+$a>n81tc=f7=bF>vPQDUR*V^
z?nFm~slNN!w)y&9rTas2Qh|vY?hlz_Cjb(L?kA|<a}_*1#O|!tA1XWKs?a<<6f#Ag
zDa_~Lp%C&+W8sHT42(I-wpZ(~l^=Dw3rrY()afpefH>-mOOPn_C^f{r90AlZHtQ|@
z{<34TK><tC;aI4cU(zR%ghIHcPTm?c8t;47c!55s;(NDLnhoEFWIzWQKztvP7iU2N
z;(HpWqbM{DlZj{T!wdAFr{b)O!Eai*7!=Z-4TVLD13JJs8-hRQmo~#R*e}@EEYcfz
z$}hMWH0m#e<mGb+0pmib(KWQDpj;aD7ed#z=gucggZ>g5wir?MB@ARKL*x5WNG3ud
z1C>i5MDP8%<(S6<!|d#0{n^$7!}VQDA;Z9MeLqpiFffdMS|wTxAy!qGy}m?$x1uU6
z9Y|QA8&Xwa=|DgNqbe*fhk^t~RTxdi@0UU=qK;r=mg@5>Mz|1kLu!NzK{upEgryIH
z6d*=~iyCn65T+Yaqr==gurY7zTI<na=^XF~ilf8QIe>)X=&<7)!gNn+d|2F*0)hS?
z@0vjOq{h1@&^@W~Vd)(p45aa4cn5xk2HE-<;he>`XPMqniOdN5g8X$8B*t-PKCGnp
z>n4ps0t7UlDL#-G=QG2YDRku-G@j03@2}9`O3w+)(`+yyG>6*!Yas-3J{xN5d(!j6
zB7q7`nlbak$RS`yLrAc00UNwhAC+3*B9X6HKu8oK`DwT>Vr8okA}tEbSPM+ZEDB>W
zI)|jR4@v2F!#SJmQLFT`p3u8tyhiga6@W}Hy~{Ipwf<dtby&Wq116MLhmm-iD}+#=
zHSG2G^f%LM!qPh;xeK8+VR*-_LI~uCtmpgs7wHefGR8sLmAGNdi7i41_4$bXdX4^B
z=A*FmYsjoZ=%X<F+8H{ti$t{V!U#Mo*6OGA(05_HsW1!5YJ_Y(&TibK&-wLnXJms3
z<Bo^r6)lh`;dmHVv}ito#B?|wj(6eF29byZP}=cu;f?%FlnC|J_hB|=r{1nT2#l5Q
zU2O7h--qR`Y&-?__f+G>N!S^UXtN@CJATT?dRbm*R>VkIACsL?vU48$`b&NDZ{|hB
zT`gh)YhENHf_9L=nis(dG}#FfcFv2mx|av-MDnEDyh!OiIHD#@Xjey+uE{$xx3L>G
z=uKE=r(SwDSRx{V0GE*M0227s5!ntPfnObw?Leexhw6xIhbVQ_LN<A)enY#3E+`ed
zFd`cOG5}o|K?A%(Cmk`orV+_m8Sy0ltFX{0J#Lrm(*NeETplq>5EH9vj9Ov^tmc&j
zh1LZrECvbi6%lDMNPw?!ECvaSS2z|EDJ)(=77K8w+YzOU1gEY8X;}AAi^h0+*b$j~
z010$Eg4~0A3UoVCa3dcVcq-BDNW8Q4J-zIdAJNuCa<-y!`#ijItp8W~w&<FO(byV5
z@lZZ0r+pMrKCyrIwSL7@iJxN2jt6k@A4U8kZwnHJeiUgUx*8-b`6z;y#c0b860zz>
zk!wDQh$B^EAoPODrii#+#brb^_HhJP+3x3sL*Ubhl1$!$W9`2`+q)mzu}8n76fDuY
z`Mmz0Mx@6FiBdm}z-Q2K%BSA0VR!A-AN*^Lt3th96OrpbWS~+LfmfsE&L`^gh?v+!
zp}9dirO}G~c|^YLgr{5>i}*G_+Oi;`)kbp8+u?osR$r)=W(wUoR10W))Uh89>;EpT
zbFjb!R-H30Kmx0d#>E3%1rJZMcaG@4FFWa~(BMDmRJMRu_9Ru7Up+0L+MZ$8f2&U`
zJLBq5ZO=Hhg$#;0L$&1@-vT0kV){{iQtO{w9jfL}PBkGzLJ?H+Q<@L)h&CXav%=nb
zRNvwW4~QB`@d9+5syQ^u#*Q`L=m-KWH#90+4kRFlMrGm|Bp`=Ik$B!juUy1oq&6|C
zykY<An0|{|iJzjy@c?=gqq4<8LT_RerqHMYiBUB%+Te|-*o+Z_c0lT+sN9T64q9eX
zRBpy33qX^i*o@u9%ZI?!D8|{1G|pJJllm=Xpv4w2&SST!QTb^BkkFkPMY~U@<A^ws
zb8Y*iKGV~4Zd6VWa4|jRMrB3>Bq}mDS|oN1AW12Tu!1HkNKDkZ(Z(WCL8O=*bE8e}
zvEHXxEl%s-0(<2T`i-9Q1#T&Hw6Y-T7k9!Tgi;nnORkr&6z?sFR&?f(N1VdF#cbde
zy@>tljINa}j>^CTPoTFrDgzIY&|4gJ0*^Swc+1(=EBb|Q_zgpry9Q9=Zh2HjPk0KT
z<xv@TfCSL;DB_OaW8@S@v{liZkJ#F?`tL%kqFC{G7+OdJXN}$T9Kz7M*F<Fi2ri)3
zL}dU75>RWRGJOjYEw&~axsER-MDnF%O*Goks-p%gq=CQDe)&iJDNpB(j=kWbE*qV0
z0ZCF(`N}g$6tXc2ueFeNCy9u*J(_dIZgXB=poF(aai5%jv?4(k?-WD59SAhRPG`u1
z1msR<sDlLLP8#Z1O;j~OX6?1#|5+dIDc$QTksW)ZatVSEl=e~wkQ+?U%s#;SU($bD
ze!!^-n5fBtsC*L$BoGcnvtqXZ5(o#P&0AXZj%0$U!%VxZx2-trBG3>$9F^CZAOnQM
z(U3R|1xY&525GB?yjX$;U@d$0vc9#v)`g()SL+%<<F7U<Uq^xpAZnu>uH)k`LF2EE
z#$UFq&KY`OLZ!|bdLW@vS3mR;RLRrxF!VeXr`=L%(4BS$9b^D;+8J~p0dblJ-9zZZ
zWJLQhnzNkcd5i~xKSuF3D>X=xdhk4Z&SSJKJ@51am;gE-m8&U80G*FwHKn(ClhnXJ
zvoAfy4P`&OD%5d5M@{hxBxIoSa}+02ly`#;dhQDAtQgg0S6m%Jx)PNqYLJ1>l_;WN
zTnU5<s6jDS;59l_42ns20xqgNC?@9_NI(pV$z2Lat^{|okH&tI`f8Xx%xm=Wln#r@
zD?H#rX;@4bZVe=qhQ*NCqMIX0>Yb4+?lW$z80i*Ed%=-zvD8^3WAf!Yr~qMP3=#Ax
zQCoD@SoWIFI9)N;g`lnA*q9t;N#0pwV<8bCf&|3a7}B~w2ng&2C$JAS<4nZ_7lN|O
z6Jma+k@?Fsu|g4fB>C2GLJaSd^U0Z{jMOA{S~q5vPjVsXU7ATT>5d_TicE?X@fXEW
zciJgVinZ$?2M0EaQ`lC+Xj?JGMKFOdB_?0qOY(i<l$d;Z4<rz##PB}o2%6?e+9%Go
zZ#0cjp7Pl)25l5)yUj@(#o00W4HoDCV|J`*bL%<|fsNukX84WkOXtPpm6s&nBF>A+
z9X&{>%!{Gp#n{0Pv6}Vu8yzdE-9qWj#p;-Rb1|vV*04I37OxC~1VVKTbF_xyy(GQ4
zxXeD}H-4>jUgl!Zn~Tfb=A$<km&J<2Cp@47jAgOLO|8)sArwWl_hLE!vHu=G?W6C-
z;OJ@dq!wY)X&=OtjVv58KCi?tvC4xFxDR4--hl+%2Qkb$TIE4vmH!}CurVg`oW!72
zURxJaH^fAqQ}UqqVNB*ZB@21Z^)bqG@{d>)(bTJn;eO8$yJy%4DU~1`D`+a$#N>G)
zB!N~FlM4<=46B-0L|p43l1Cafv8cEWAvu`uHL<oL6D(OArt|F<|3p&}d4w-wc%$((
z4_)+O-$#u}6<~;{8jsP?U&Q3C50J3wi&$JFUqAxvix@VVZP3oe5p72-=WDhxW?U28
z5i@f69gJeMvTqkt^NpUByPV2_37}munMwu;pj|Pfk}3WGiOTJY#VYwmfk;#ihU|*v
zi+dQ7#g%^hFRKu}Sxlzwjw$$#OXl|b?#{Gp+oq$a1fF1+<53IIvY@%B>|c<;*-iaR
zezh1a;`@r_78o~Fe&w_Sn1J}onJFNF@KsEnkAeikS25%o>3kF<&PTtBIp?E93;Vx{
z$@5Xk!ujY|F*+apoYDoj+;k+CGdtgt{J@*(-utOO_D2QA22bcn45vU0Bi6@n5q--h
z6&e%M-^OI76HN5sw^aIRAq3lwvU?N8+0@aPybO+;J`g%eGqWWJ0`(pHQ_?6+eHW7#
zy>U&4xG}r|p5-#AR4rSaG#aLBV=@7OOE!?HjbS%RXWg&}uKk$(L(=ei(#K*7KVc&-
zq>jaK!gg4ggw{LGqQ%CyspB#ENex_bfza_7KB;jNM?weJv3LWcd#WxblOnjm0+~8;
z=_OnS?)U_Iv4PPjeIh2)9k_u4nG-Y$7s1z|a15Ta_InMCC7#q-7m0sXgOIv$A^6mD
zY<SwZIdv{3PjvDW6G-P`IMI2L%fM;=$WEk<e`bEf6rr&RbPF;+l5_bC4hl5f;(&bn
zm5lK#rSpLNdNDu52INCbXpv(akl*YE{=E<=(SkW3zxnmnbb$g-In0hVG)k1zu>AUF
z%mv7>{3gx#3kP}R3x~7&8yj6x!}H}ARltPI@O-@RNG~PiDcEj|U~iMm2p5O4FCz$t
zUXsXDaL_uEg_;<@N{!5yH~7JX%*cGKe3akHQ*cLc6#Ks>#*L{_E)Ly%9z{4v6GH~?
zNsVT^n;7?}N4q#-$c!c&#H=KQH>X~=do(o`E9uws<tJXih1Bc$hzAdg`r~D)S$498
z@wk$i<u+mzQnRQLtLRfZ@Ud^^;}b^HTNy7$-pt2|<8M#`zgjdOHj1y(h)YGF#kY1q
z0%LwY`jp;7;dhFv+5A$Y_3x|m<tu$)LZ&(&uk;mh8BlNKD@7%FnS1Z+k$I-y6J`Bh
z=+B)A0BGvtsd&u=Bp1d}L?f<>ZeGCJlo?G@3-V>E4flf}vmhU-Hry}*0;bGD_H3Ea
zKD97k4q`ANvoIfn823IQg9)>UeOzW-lUn5B(1ck;IHD{}n8mE1HOg9?FSDWnK4BK;
zV@HkeR{#eSW(j++wb3TC#BCCqFiWUOz6@Iw0BJk&bN1M8wKldJ!5#TV0ll@L@vr^t
zVxzA!?kL@ruW{E*Oz7^)k2RxlO(ZJ3EC1TttY%z=+#>UJGFp^=m9O!%4`iryzsfJ*
zN99C9<*WRTzoK`%LE_;z><^uc+gpE=uklkoViGq$zlAJ?{OdRQ?eDbS!SsVm&<^G2
z?6tRdGTM4Vhw|}BoI^O0!;312qF=EKZZM7*?OrL+_)Qz)0_>H703Q%U0_>FnOueyi
zg`i>co&x2b<e-*p={YlIck6Dvn19Ef0{I0<2ta>NL4v1}NFMro3Od|PC(vqxh_=5V
zXIPw{K&uUawZFh97NK7Qvgc3%PeHT;fj&J{AeVQLkUdl&QxG75dZ+;VGWcG#0U33q
zfOUPvDDDUXnnzqsTE31H$P^x)Li0!gQZ@WiO9M2WcA`KzWjA}sz@--a6w4qUV8EOx
zke@6A378WF36TN-378WFSRg3M0f{K*L_y<I1tLR643Px*zCdQkBnypmvH%$}EMsIi
zP|g<M6CMATx&2T0_$XWZM`K_caKze+=P328Ydq}~&XVzSv7A7iK6g~0T(STDu+i94
ziJy)hZ5A#R$Tb^s(7R9|V=|Di_Ci6y6<AAW&&1#{+0O;)<pL3tNgnhr7RZ=PvJjJ9
zDxjE*j!PTR)EgAP>eGJUpy9w07t}$*ltFQsod5~QL2)NL(STa{mAE(-0fEW>O1!=c
zXs7r}TyC526iBbcWqJZ6kY0&nr#Oke?vRRTljGR#Pwr(*RHKvQ80LGZkx~@5&WtPb
z?AsnU{@|&^Ptizt0KA!T8C8J<-psf>pa+RYni-GHi;G4g25+QUadmE7G?L^&Z+2WZ
zl4PNg=ESLyE(jaoH5SH|cjBtu@Gr*mo=Omo6*N8<#%17|;^T8+9DyqhERe8bVLb9q
zy%i#K)fUCox9hENQp1bmT8IaMqz7YR*pfJW5#5cFEHwAhxR%?3A_VX-9GA1ke>ECC
zyxeJaFwyMGon{9K1DD6;4OWmqT^>hBL%}CV#1G5k*&ebG9=vghk~^&iybMq_oA*~E
zU1_^z(2m%4%b;;?$K|((QhY~j$K}mskSN2B7vCz&;1}o!HQwMBE6K~ixLFm)4T#*#
z1AU+Q6F$BB>{DV1f`vGip@)|BdtouZTN;<Atayx~SH;8PmNZBJuZkl)l)@-_RXo#O
z7EKd{OkWkxcC$M2qCu@@Q~zdk>bcsj9__qWyJgTESRI#F^HO{ctd7g;-yl)O>UcA!
z3F$U7m9aYB{7!x*g*u?y*0K&y7@s}7)-8lzyK~!+rpH=mdO!sgSsTZ)B`QL<nb*b}
z{z_KF`Ecjjc%!?l6t4&tzjdtFlSby@b#57SZ(*HV25sKg#pQ=PQhf8iE{<hbl!31o
z;c1Ce5&rEWSg|hN@J_20F9QPW*}f-@vWoR?8MM1!AD6rP6yM#ij~6+hw7Xv)M<n_-
zxy+P;P;?W!<0)g=!<$?PItJe4nn}mNo8l31gAFQx*c3+~Cd@Qp#ils!){A*z%Biv`
z-r_!frk$ew|7P}wzD7mGX15FrW^Rtl6ar*W#^!kAP7;*1|C{6GovpQW0X;>5?hboL
zUt^upbBBxJ2gZ)L+|5G>7(3$fJ47IXu_In44%$J&&K>bK;!Yfq;)G>KyzRr*CQ%9k
z;e+;%&lsO5JrBC2P|o0BTy8^CJZEq)F2C&q5~Um@4=h?E7o{AGm;73`My@R7V7%eo
z)^_2&5J}hCsppK}dMaz(QYfoX8~2OdZHj*nsWzSxNg0qRr8bVFj3^}!rPRhdKFTw`
zc#2XGGuOti>xCuALVIxzT@9{{KireAEh&o5>%`h3z8}=5FDt9j@+Q1sXsz);tS}Hm
zE7mzH3`mq*SHHrfD1JXJRv1?HqM`l%v|EKBhRtbr*wD9>PP;RRzNK`U78nX$(h==k
zJckvE&?ODYb8+M&dDbdTq09NW2wgw`^}OTYK|=O?T!t<nfqFiU&}AVtZkoL7CHoKm
zFj{+BUy958Ik?1*8{!*kAfa?A9*tRhDM6JczdfYTe)pfoK2O<@!g?(N8&X)WMXq{C
zA+%;;+W;+)qwGyD8I6^SQH64q1sCRyDwL}%NMMXAjEF=sNKz_96iv&0nxgSn3&rgy
z5Euck7Rr7A3C&jv<w_3{ny(f*D}9<)l?jD>rGFR%fF`&$kiVSZ+CcttLZMvgAq=Dm
zg|Z_uI5jHFStdIo1IdYnIIZIyk)e*5%>F*qn0zgM19WnsTxdZ;baJ8W2ao`rTqr}x
z47J=;*5wtWK}Y<C;#60W`eJIKj3Dt8ic<>_gndR1DMJzD%tGZ&c6yNUX(fJ%01|wl
z%yjAm5-2kZ<q`)HC^HMO#L+qrlA?{m;x`LL07(oHK+Y<Z0i<N1=VuopfTS;YOBUXM
zz_pD+dad<_tGOs)ZXv#;@IRvHvU!E-{UU<QzzS_qq4G|ln*29?DcWYOUpD?)36=;?
zAON!$70O5wBtRDx%19C<%wAMj@D9wTNRk*lNLpN|zFjDSB*}x`l0q3INfv^nrG*qE
z(frCrv=xOp@9}Oe@Tyr9yQ0uYi+;^gzpfJfir;A1RgQ%qA-c-xSCA-a74<8<#*n2}
zU(GJzJ5jf<cIF9~#4Y46dH6^MDys_-`H>+dI8`sq`CN{#5=gEobS8QU*|Co7m|42c
zu>ed6t#d2@3AlC6$SNTV*3-yp*nYjMLKdud#uQ|rvYy5i59~{5Onp+Q)VSSp_b_w|
zSfX1X0R2y#ZUG7XPn>Q6iEjC%u%JeE3o&@NY%WwkliebD(A(m4i)5i&KCSPTh7oOB
zVa`scTN<L+ZS~WwAvMQ#(JlCmZrScw2oj>(okjtPlD1Q$(3c_`lKDGWgAqoX);kL2
z5eJyWE!4%!CLp1*qYz(bI!@<#jUw8&g*g}Pmqr-Jl;F38IM1UDWFxZSJNDdYoa}t(
zK!FLU?+WD$&maNy9rf@~nzN0l_&T<4v@xu_&Y7@aVs6wG%4=^RNvKeMa}^{Y>I(7A
z)w?+Yrrb$3dyH{U`AHXnru<1~$~WSjbkcF9Ac1g_T<MJ*0n};M=2fF>#c3CTobhQF
zfo9+7LV0A<h|j*$g@}d788;$ld`>!J5U~E7<BUN<^PJ<1L87#C_0G5v8Tzwu#@#^x
z=x5gka>hTqHjp#^*>T1Y2GY;ujH~Glw#E@{WC9<Ux?!Br+#4R5z&obg6E~)A8I#~k
zA`4A0v^HZBa`5625XU5>Ck6?`F$oNfnY6eyM(1cOp-i-IonXxHRN|)?^mqV0mXP-e
zKthit<b48=81yXBU}8etCm;q5diC{$yiXuG=(*Pu@;-rN0qFGv?h~}(<wIa{0^d__
zn7RL%UhL1WBR>P$F@na<<b*skY|J}#asqz5C)WkiG`8k-qgUxPSA}|UT0$NfHs-xJ
zErBCLdWEhr_2Nv{W1`W%bY?=X<X}Q&W<s8yg9Pr(1a^h^P6|}eL37xmiN<vu<|IU7
zo0w3UlPDGkYapRACxL^t1)^2)vc$rK@^(VSTgr4}z0|&alJO$8qOP5^gIJi5zP>Tv
zK`cy2Uk?)PyD(AkHrkhbJu$dbS(H$hCWNn-Je0gRA$`4M!Ko}skgspYD}cSm@`RF2
zHp#HAlZ|UCK!|0tG5=?P<q3IN8zgL6o+uD6Wr76u@&tCDGy@vb=5u92gd-p@16C$v
zI06!yD-$vt0SV2O2`3zBO#6s62_BAg1A$Ih<Jv&mi8Tos65%P3)+A&&0uo4T5|{yZ
zA<c?62R}^UUPPy<Mvvf!3A|5%owX0Ix{=o(Kh<cITAz^VPcSjG)+dnu%yJpPZeTm6
z8Vyq$5;FaXciAAbAtBS2{H3*xEI!R>lHMq*25^f1Hqyv{5L2)Te0?J43-*U;#_xll
zB#Z=|5U5Saf-P*rG^2a@7N=%lqGns1nt_A~TN3iih9FV1EeT|H$w@b%kzT{PPdD0>
z*SHAeC2JCXaRVDNB$P;sbO1;o)FhA>>&_8i=Qg%<x^YXzHWz`0@3w?ryrR&Ad&zBy
zkl1m91j075;SSWTX+--nk@GWaH^aC+^d-%QPsxEdrONGQqh=U2<+~kVFaf;VsT@d{
zwmTssS&#tUO%3}jN5I29jLkHjuh`=vP~^AAMWD*<NywP3DX-ifn(O?pI+{{1)Y^B>
zG8QVOwa(N97fQ9%4YczCiDGLLNHKTi#e%A1jprKO%In->$?MlSEz*?7Ty=?%*r9<W
zodmo-U3Y3q{sJq{T;uNYlP&@!HBPz+<UUTi2;@Fa5&~}J0|Bz9S?hU5k1nTO1WMbT
zPWZ({gA5Q(CmJ-9wIFYDI?=L~wOh15yva`q<pNth&)8LoUt;z)RVXL%liPsgQGRm9
z7oGy;C+b@YdO^aY{FG>P0Um|6;>3VQfz0`Yd>2r%VA_8Zc#G{$42fnD?Q$aL<)kNB
zk@-zO{Et#s7MX9{7`mLmn*#~duNe)F0ZG<tzL6{&fa?Lg3gE()0ZF;)fJ8Y1l2~<c
ziUA!w9F%19=NrWpgK(HHb!a>cN=ionAuc7y14uv&N@6@<$^!z!VMvlG)kee4LtF@I
z?IA7%6*MF%vuV%)#E>NX*>)XuYaY>FOXj>~KUQu0#~Xev>D*arPF0$i<g4lRAOJbh
zsTfE=PIM{;5|9(AV&lp2H>Uz;B#~pr9{}y2U?lAJi;;mW14}dv1h|CU-++Yvj3i=F
za<R>+R<o1b#kK>1o|v7KE*2y-XD6kL1qsdBNyo)DC$gFiTx(qDj^7xz)lRE`L=~!?
zRsjj1>ZJ6rAW1U`4?C1vr3J1eBy-N%kH2kHdBg7|@!?(`W3-@FSu0wl9SA_Kb!r6?
zkZYY*0SU;p)GGYGWec)=J^OTpF|BMpE@JTR29vl+c~=l5bk-+vSMYrr^ew0<K4ueb
zV{Olmotl7&Vn23j0um4(C*^BUAOZ1l5+0wN0Z1%ZA1CGi5D_U-Iv*$TKSa3GONBt8
zhS@8PQ{^>oA#~ZRCMmCrK?a4?B<0@_fh3(I{)Px=L_k1GZ)1m68Mk-a<|0sdxGgEO
zHIM<qwq%O`UjwNCVOtW1%Lgba(Sqvqby8`b{6b-`-lL`M(eE0aJr!Vyi2(sFAtwe%
zz<r&RcVR#R?&~Cu#_<Ok1c$N@+va=52cC+<E(ZCE!*0uwuQ;5PlM6b)I82jEwhKar
zV@z9PoT@nHLeSl!V@Y{~vIP$ojwMS(0u3Y}jwP>c$47DtYWov%B!htF31=jOMByi#
zkqi==C+bIX3knv_%)?0bRGe`Orzqi!Yd=K^XPhw%6+oP!F?>6Qa7#G4WX?La<^$ul
z*iT7ZyB$mo-4Y{MyO>l47TL*lhR0Kh-=c-_1n3tXbdW&5n3Q)YKmz?@5@~Akq#)r*
zFD5esi@a70=`><sWYPB}E+y3gMLwPbsOLiWauV@b4B3KuCL**ep(KT9CutzIq=7t?
zRexywP(HM%-YQ!ChZf1T8!{wRBtNJE639b~u+}}q5pXwTINQ12_+!Oz7lFps@FF>K
zTJrfayhuhMAb~Kv2rC5L4FQR}A;a0<HyF`|!;2dK34y1{xqO-M4KI3pw1;jefCs%%
zY~BXr=JHW)Su|}%70FlyGO%`3QL>azMv$aabWI!nA&QnXZC+)~HX1i|dDTUrb@f%Z
zzBFxKEs`rURDkem5!O|HMXDvLrv1A}nZ&9$;))c0Iekg9<=<|dX}0{kNPdJFT0r@C
z5h8Wbm-Mpmzl&N-s_#oW5a4||p-7!r-<OgLT~<`zmy(ITd_7b|eK}1GGql5W+t_4e
z@ri2JESiARU9)HcPA`&9xFw%}(~EF`@H$Q6mUKA&rv3QG20m%@ri(!{@J+XYC|rND
zC?t}?(1Cex7U6(^K5NpFX5a!=zS$U1vA{*3nYf@xZo44^gat*7L>?I=5Ec~SUtl&0
zE6@@v?f-5zHhC&mx)^l5Z>5VtQ*mXHd}FO8pNcDs@W$GDfr0e?2lk~;jg6kpAGjEF
zz3+n}c`nqF=l4G-lHVKw2|GS0Do$B5@zSCXZzk6j<(yvexiP~G))o0oI^Xc&?P0hL
zwq%!4R(YaG;h*RyCf1D;MOaYrk^)HB_I;7~!X8nA%%w3&BxJuY!ZIafL7gm;FHDJ-
zc|r2P8M3q<oh;&ME5e0=r|Jv6hYxnp{8*o!Likh>c8~%XgZ+mh`Q8^^rG*h7dA1p{
zbi3k*BIJ#K!n^BgtB5wR7+(upwA*-22@Nbpm_-}cR#e%+#jM>oM!SxKi)AzcF0cj{
z%P<Qh%o<#b3em=|6;-~fSP5g}*X`M7o?~6UG2(2+H%5LbxFQ~b3>T_LAg5AA2=uaZ
zE2{J`cK#cqqI8(6Lb$`+La8l=kqU14Kn2uD_UIm?OX)~gg`B}iSB0FxNK&Euw5`Y)
zjA5VeF>Wj!<El_IjVU(8tcDC!#uVoT_)F5Q$ghoKH|#ZTD;?*m&{Q8+EVurUfy%gI
zZ2ceQrC`)fU`zHIe`-C!RiSA(p;(4vt@t#YP>j(t%|d6CMzreUoZWV}eMZU`sxC%^
zxB>Ti)Kcn=UH0D(8y~f3y{mzY(7*-Qt_BJ5ssc!qzpDWj<_*-dWfARg1H5|sc+l*o
zG(Oyb?^(QR8NPb+T?3`Afl8nB)Ip06!4Z$ugw1c;*ET>}nZ86L9-&K)HBh@=#X&L0
zi8I3w+seqcAt}2yV$SrH4#5c@cfer7xFIRo(IBBUB!w=(-6JUB;ZU}+&}{waP@HB;
z6~5r4<Sl5(KxJqOx1cG!0tp8*G!+tG$sv-TG7U|I@$qvki;}}X8kg#L9Y4S=qX9L7
z-JUQzm5y*tqtZvD<lO+spqvpYOtr4uG*F}2;)L0)Vl)l{W#JUkj!wyit&GpV(W!{o
z27)A=6qZJMUlEpIfW5|AC(Sp@UvnWSNP8_MgEYv%h}TjnaoZXsAYM!1eZ2l00mU&E
zEi#`gXD$Nm;+Ts-!;hs>ZKa7c{8*}e2mbk|G78Hkv5iG$=kiG|0xb%Y+-lHhoRpIB
zEL4CnDJ9+|M=h`>Okp<`o41rtaS`auc#4ZaOTv_t+=fF12vbscGvR(-3-s7@wyxOx
zZN+pKfj%ZO-9?}!VR}ktLCg4(Fg=BTjoCsUBq^idY@vOB1M@C##X=W@qO*lA1}zB-
zT`MR$TS!(6qa~q?PJEZydo$(;PsK79gO-G4E(RU>E_3amC1Dxa@iraCmeG;#T6=DZ
zxlE~8>tfK~*Q|9h=*V|%Dk6^Mp#zMyDcso`CWZwLbT=^8*c?&5!G)mLgEzPkbO(Gx
zDk8#|GJc-BA$3h#e(}7Fu03vI4>vKd@4CrFptIUdDR~DUGC<grDim=tNEopxh4t}z
zUJv9<H>Z^Aldag~#%7Y8X<{}g2g4cXbhmhON(NPB{PcBmD%nmBG1|UwPIc^L{effQ
z@U@2ZXlg!OUgILrv1^T6A3AoeNky7T1Uh!DNwqBHZ`YU6)yi$`+otCI<=b2Yd=)|6
z<|5F)*KAA4?FUqVuq}nF__XGf(Z$Q{?73!Uhw|+%LKq0!T?G0Mn(ZkWUPA>4+f(=(
z9r|ChGP;$ylYQ6BY*)V1MWFwl+36zC`;a?R@@fQBfUq-_DY5>}5pZMkYxcY5X20^U
zU4$qQzIG9!K=|6NMHC2MQ!RRP1bi)jAJbcye=gtWBH+Hfx-TV@rDaMC2>Vjv?jX#L
z0byUNbsOtGj)0HrA7s@n%-@tBbP@7l!$H@Ed>|ZjYmpCxgH#Jj9F-~f7XJ};Lrb$q
z#Ss^w00>81gaRNONy*?ADnK}r!iC#c#Q={Z8^$)YG{<$Rbs^$_sC6OYfT&H$Jwcfg
z2SjbEq>(dM3lYhrlveCO#*EtYTba*#DnL8Kvk+LPQZkGyQwo7~Dis!QR)GZ8sT6L~
z@;qXhg3kt?V-J;?HC@iR5XfDt=Th>P24nznE+yZ&011e5DZF#>9+ng|3SLqgo>oTM
zeOjA0_<G@|V@VR03{TfD2uZ*UPs{KcYJeG@#{Q6^evpXzho>8jOp9C?F|f&jAtTcG
zQZ%Jv%9J9+8)@<JfpmLQyLL=kuJd>V@G)tbi2(`lF==FC_J~$5#uo(AN~2^A^Gq?W
zW3RS1XLbg|v9uVLj(06B2H1Gl(qe#(Crc4ND{AYAHYJ@i*M7Q#`JpE?C5=;5{trg2
zX_cSOZo1B_s+jITgNZ6kPs<Ss642Ar1tK2;642Ar$jP21J6qGLI|nyn%^y3@aUm!P
zH^;FKG9;9iZ%=^)#GEuT&WFjmYa-f`bk0h<)Ai;dPjE>ZAq~Fvq+UbDy~A3Tn~#>h
zla@y&U;^r$bg@XZf&|n%X>8{xI=hC9vDv%j=ASy-jxk`u7~3%hBnhSEDi0C}b{ebv
z2zo)g4H8%BoDJ*`73T2Rdui<Y9|Uk4vSm$Li6wiyHoYRjqMgmoWuQe=gr|U9la`?e
zNI<ShBlO_^H{6D-TF)vwn>)+ayE<gX`m}tL8ZyvXpGM-UC#+~2(Ke;==iNhYG#@V5
zL{^YXY6~m0&1vQHw3_V2?Fe@<@2dny*n#K3-0au^5}2FG4jQi@F<v*PW1nNZ(rFMe
z_-W9Vv|5uEr$Lejy-(BfG)S_rKm9CC+f#C{ZK+CMq?LkXqYOLL#VjiY;TS;``ywrm
zq#y~fFVZ-YqT_|O6uN!MI(Id1dF)H*^YsHvsC=20-&zF;l`qrsvK>eS9ABoJ-N%Df
zB6*1TWxDyjJVcZn3K73d-~DSo@!Ar^ZZYxNgTRR1?aVxoC~mhi^FVT0CkNV=;=Fxn
ze$2#LcQdsI_c=oek1&+>IYS8~fc81F4kUo~(X7Lz1Rp+<b1<FrU0Qs)ix#VcX&?W4
zbRRx~gS*garJ49&1CV$MTD)8W5{-0->VFe<pZNR@x$s@x%<icpX?g1(OvoHbW2=v=
z?2rL<lwIH5yd!foEnkTNlejd`rqSC4_yR^<I_F0=ySq6xSeM2}NU+2AMaY&D?4Fy=
z0jU#ddCMM5sGgu%flm=a1}2<jCvP@?mpYl2n`AH{b25!>4(1+YK>fga-(vnL^@D6`
zViGrvW3QXJ3>xSRJ9>+GYwAo|9-l?{KKBfH6ntG2Dro+5tjDe9O__5p4()Hx5f1)e
zSy8WzXah1iZ`zA)HSy<j12S+KJiUA^Rc0{$P!;dQvq$bQwRVFua$MpODls@Cw=N)I
z%is*QE}JNvyq2msBBL}-uJp2=4{2F@^&RF+PX$=Q<3fNudq%oNkX)faM1>#$HzI?-
zvsg=S*k4Qao@!6(VRlt3rn(puzfaA`-2#MwF*PIqycr}gre?7C)7o(@Q8O~)q!a`+
zXJq8!0TP-sGIH?%$z`1(d@Z%%yo?yakKAi&-R8L_po#HJE^&|q(7cRX;y?muUIs&W
zFtu~Lh_*D7vn}IEp7pXvZZneh`g`G|!%H(pR<w9KYVl>F#oK`Z_%f%-K>~c4)8rrl
zzKoijU-NE9wO?&l{l@I+DPQdv2rg>6IwKS3AW14C-?Ih@jMW)@l?iV!sqLtl*Rt#b
z=07Xex(L+DYcuk8DrA7LHd7=v)F6SdHiHc{e?hz*k(=z@517L}6`NcPYVS=MnKgwF
zFg9gE!eN0Vr405|)Kl%Kxi`z60s+m<PEUb^=4Pj-KtgkK#_6ecl!DkQda64J0Bv<`
zpd92@r>pQ3NL!t*0tuw8)Kv%=6t#Us+mXpR##%jOeiPr3p_lz>eQuBb(ROE)y%{z6
z5*s*DOR`RXFrTUfOZaOD0Csmq`fHGY-JOwF2tZ=d*qtfZn-Pl!G5DhKRYu*D5sQZ8
zLGSB~Tr?yLi^ew@S~Mt{ZBPAhAfx;`d2@y}`J;JvZxCW~;Ss8Oz^N)oE-GVtkib5W
zkvF_SVnH~N$=uD4Ac+)5G6yo*Us>BltuZdX&EU4eMi2YuVY4y2@<;QnQgEC~lP%w7
z<oo~l&w3Q_Z3bt0^m(xMMAfpL51aRQu60eM5mD=mOUMABHX~oX2T3}a4jrwZ=+%Y}
z5p8fbXT9C0r}?8A9-PH1N8CYmpy^VT<qqlw5U6!kRvHBokX2dfp+Ew%DvRkdi#${Z
zn5>P?Dz9eM<T!Tc1fz#NuD5xwrxH9-D@XufbXMNB0SSQ7S$W$AB)W2Rw!y1eaodI%
z)RpR(th{X_IcU2vS$W$=vH&zDi`zDMp$LXR;I%An+ce;}Z65ox*{Bq>V+1wrYgu{Q
z2Ex#NEsH~;C%7&s#+Lore5#bWD%6%ND^qSAcw4e8Qf~BD1RZF0O=5Td#cclQq^$f(
zBA8H_l$8?_BycBX<)Ix&jF3s$qFZ>#KqL<tCS{9n<{^XRP{=STds8>Q4evlxaSHqD
zFXr_XQ?hbkf=S%0beAAe?3AqBGJ-_0Q?f{w^Gj+S$nnfz_w+G`mCtY?C_OX7g`o7z
zjBG@th@b+98Cj%=D23L6(lfJI!C%eR6|-CfO3%!45hy(~D;p6TB&YykRu(RiU&iV{
z;nG|7pud{4JssY1+n6#kZ)IhU5<*aVD~rXO-!<xhjEwe9R#}O`CGHx{W8NptE0y3m
z{YvSWce2t?Kmh>nWMc(9xCDv8^-eav5`&9^OJZ<8u`H|FS>Y!n4|>b9(oaYh{KSeZ
z`3Z8T9VoN2I(yX%O5mVj!4lWULBf>PS-JXw1mx<h<5N3OR%cz7uYP|7f#I{xZA!}R
ztaF=^ay#p?a`}TWkk)14Qz?SOr?@s|bGBtg1V>x_jam6=M|?{QpIc(tr_Hj|N0<r}
z$NIp;%=jn^H*zN;nJ7(!kJ*z?n|Gx?&dL{l!Gz4mS?pMFH3TxCHnUw%n|G%+XJz09
zCULU}+<wnxVAQAV=D(W{r9REd05Hm<rcblk5{ZLa*042y2Tn~^zB(J_rvf!u98=+I
z1t<$u-^yA(V|L7J&B|aCOq8`Xi(qpJE(iMX^{s>1oFDB$&zP;f!Gly^dIvQ|^*zKs
zc-DL%b;zkNn9w~$^+nPiGN|tn*8VxOOX^5gUZ4UKGDm1;B6$cIP)FHo&zZkX9d+sg
zCUL1Q_i!21x0dP8oA;$^oi>T_`qomLbmKCp?{W6R^XAQ|<5~HRX^hwRI88^2Bx6+H
z6YT5f&6`puvNGBP6J?#qBHF~71Q`shlkA2U%-^I=W@YpXCS*=#5&a^E0vXK7AK0Q7
z%pR#9Tp4=D^aql`yoC%V-5FN+qS-oiMvhZrLgoxPV4S{yMAq{h>;0nHK6B1(AO1=<
zwa*F)((!??i`kr^?A;g5<-v<t+)bnA&!^_U#QyaUH2)>1x?lqS5>=Nz^_x%4e}$d-
zhk0lEiemzpkhwx8yu@Wd4Ju)O{HOV^^q>+sZt+bn&PG3W<w9uxAtmg>Kh2vO4k?ih
zhp%rzXh;bf4!3Dh8akk=1o?@sZ2$B4>-2yApLtCN41On!9z(jSq@<yBf})d-5p8%$
z&LXzu|IE73@DfBPd^zk$^%~1w9cxa$4!_Y~V@ssJ0g3vIEs?7sNLV$t1gjxsJUdcl
z$CqG%Z^icYM#gjbzmV|+L&Ot!46N}b(rts};_?a)NMMaGL4C>RcBI-f7N~^JWiA4Z
z3|1n~I3WWBR?_G?zGDRm1XhCk8~pPl9f_P~|D)0z<tdw1A{Qxep){>TE>a*#ssvrV
zk%E+t)P%EH`+?@BirH?t6h6)_k-1vP0AhAYQUtFc0WrG-!7F*njx@sOm540@2x!hL
zkxmjMH0PB_CkYao^GX~i*^#QZu!K9w+d#mSg{}>>Vl8xAk5;UOCDKVk7)T3C;3Nkb
z=-TVxB};M+m3WeOvKfu6D7)skPqz;ZHV=728%vyh!gbWsAM>8R7Qcc2vD4Eaf&a17
z(;$KWG4(Xvjk%5*ehZuPig|nK7FUHjbW4fMxIhLfTS}1WxRI-%Lu**kFtcmd8mCg%
z@moJNPNhHsp{7KJm>_{rQ-Tn4g~B25mc{lGWp|1F12fA!mDlm>PvD5v5G2&Mm&nx+
zB-FQ;$fy}4R>SQj1-nbcYDf&e8h%-#?kW+hq2xhtM~PewB@3(J&Jt%eypBf6Hy+u^
zpwMsMIGqd<W_;sxGDyIEQ{Tzg(fBwhI{8)*KsxBQ2Sqjq-S(j2a?t5y2m|RLbuw<u
zs-19=za-}p`uIlC$0tUb?L*&|7!Acd?nJ#?%X^pAj54*-TBo7#1h}<M=Yj-oEp_g5
zXy#7T2`89mwE05m30H+W_e6>O%V)?y<wOZyDxl-1PBdFjvALto-<F;#k!e9N|G%tj
zkB*{9_nCGw(slPPFet<TNs~@@R}&Im0+Kfm6?fOidfmOpd)MoZVUSs4l9LImu4gws
zj^2%60?JJxnz-`N4Y2CL=y0yCKmb>d2zY&khX^Pt4<P~u1Pu50RaIy3>>qQ^{JyUG
z>Z|WjRb5>VWa-J%XZHdkOHUq#MCb^R1?Z&kTg>T2C)1^n1yAPba|w}#66K*ir^uR0
zTJP0L2Y}Lh1Em8ZXK$c%K;-Q0SNc>^`gyH%05CcqC>>Bf)a?==IGqoa4hT-?N$Iyi
z>BX4jurpq<L)kYfrI#!+uO9q>J-}5;FD9iwY}32Mb43r^+A~1~&xdW@ZUTbm!!{H?
z8ucnBJw0lR-#%d$6h4~HLmGe7*5QOi$n&U;aJoU}fySG}x+lz=iki|{h*OiTjZ`c(
z-eki_+v&?%F{xanCO>JuZ<GmJH_M=+`oh-L2Lumc>(MkIWwOzq9i|v8CL6S;X11Eu
zq006&51PPePxBySwA=byCGvnryNzB-#&I!>5m{jy9jP8+P6{>RuL@v1K)w~W4q!m!
zTVd+}21Ed_u!nZoDu9U~19+t!{;RD5SksX2d0PjtCLw@du!8_Drj~Y%ebI0h6h%_Q
zSwM)g#?~!0AXu)kgO<9Oh97Hf)lvgMDQnZppf`iHX=Tux!CG6l)JP0YYi;<`LF$A{
zqLJ6^jID5}a^+APj$}r}tf$R?41UcXU@5OEA+LHvdezet0l@!_Kxu&B|3=_jfZ+cI
z`4;&}33<eNaqJoMrqcC+gdl>$`anWJN@VM^ngPLKy^Y}seS0jS*zOX4Xfyw-tSild
z6xe0!UA#yG4qdjRzJvmTLzk^r43-euVyh1>W82Nh*e$m15b+2Zw*+bilt}|Mmyox;
ztJFLbKqBq8fT+Z~=}M5#y&I?*Pr>P3QuDgYq2|(P<eZHq8qYmzrr6+fb}-l}CC&CJ
z&0YxrmVJR{0l~5_&@3QW_K{}ar9E+_ROjy0RjbYSE}Pt)uWJM<k@K$@Ee9ol$kd&W
z{Z4Y>RVlO?*_Uq|%nxUG%KalRqz-H_vqFs^swhAbaM+ixqW};b_T}p+07Mk*%O83$
zUqt~CWEAYr4}X!bqCnG-??Aqe0!=~`e4bBH@azy-1@x#*jxpZ}r|#=ApD|+qYP41=
zn}sGvHw%Ces>#t_3<%~;4&DyvGX@}pYI5xPj{59I1PBEmdCbwD-Ac)p&5rVdg<IhT
z%}&40$ac++4mP9&^JXXTf>LU{7dvX^^v(CoNcrNll+<=FPD@D*$l|n=)PO8@-~>k~
z*2<!hB@T}AF}9h92QP7g_0MJG1MQBS|G5$X9NV$aMcNM#9NQh;asz^6y8|EigocY{
zWUA$2>vnTz(eiX2a)ITJscwrv8su5-;DGK0Dh~n*_Z06in~Pq+wjNy$aeBeIRIW1v
zUo!d&4%V4b&sRohmD1fL0O)m9pgch2Toot}P^Jx(S4L`oSt)NOfJEBHfT-)sf%X8w
z>E%FsfZ+5pX>S=0zzLT}Bb`phj@0lE%u%7ioldZ+w4BuUx>Da10I+;LPz4}Zz8<I#
z5G-FO^}R&BNjWMV+2|N=rE))_0UiD-wc`QuZFF=D03zQ;N5=pl+-;*X^ewm>O>7WB
z#z2=7-r}ej&@|-R<medCB*egGC+G>vsd;<Hxu_=q1^NX^^#p(r<()vkfMEGfzjKxo
z+^(H-V7D15+a5S49zhq|1N8!e(e^;SfHEi4OS_LMqLB|A9MO4mw|T4cfrFNxE>5e!
z60%PmW49Bg<NGfKR!hi;CU$h2>t=O3;cMlDntFuF>~z92E~222T|^1k?RAU;V0VAO
z4Hh7h*s;_6!*!qiC@;OH?sITqJS|a^{K*Xa9o&B$aQo6R4ucyec(rh7-iRii++}{y
z_?4sAx5><;>93veU1@ftyF(5xgALdnag5_&M|Zl(ENGrIsb2(A;!#K6;HDCR?>COV
zluc2<_m~qNHMO7d3CHLK<KG30apDh=L}ZVdm~_$!m#2lIm*i6pZglQ1lH%YyDpI~5
zSCGG-RsJq2J~bmnX9KszBS?2PaCboDJWK8_S8Y^~C-sTsr{)tA`qFvG)%$|h0%?$^
zk6H^l0JDOW_MmG-vqy{W9i}gSyVv~5co0;xfyc=FpsSk=KxBT<MYC~%Rt#1EMwYs`
z%(`u_*_Ro^U)8$f0bFybt6O(KuvzNr)*TRRmb$ui2Sm6nb?s+d)w&ZwweC;5Xx$&7
z<zp4p&a6(I|H8cVlCst5a%hyk+SQ+IkO<|hb_c1@0z^5hU5qrSm8+n3{zX^4IRhZ)
zi>{7BK;(SU)m;Q2a=z#Wty~3#Y^N)`h?xM8r86x9y*YQL>q;ZL&U9UAWY_5;3|G=+
zua(irhc329Z#`tLhz$DB#YWtRX{NuDtiCJtK#%!IsA!j~+bK}NY?o`wCBKvi%yzkS
zR0K8km1Ld0V&VyNWzpVr9y0h|R}buw26^_n7}!6i3WCKCrXnZJ1)=c=UA49toQTyy
zcc{9$6A+mWl7-%u1r5L#rNgdqPHZ}5{$t=_cfe0^_b>^7WJkqQ-<dZT9(BX&NPG~%
z>!>@FBRn!G4JC353gyb+N;2dzk=1LK6&`cLst*GZS&q4vtLbe(WI5(y{SWT20S73!
zM?BPP&MNG2!|H@u5Rs+F%~F?@0U}F}iw~)^=Ae=cc0!!)HLoc=;fCcBZz3Yg33rJ4
zehY{!CtR%Rqs7FPH0C}fes|ieC_LrjUOFW_jjm6*ITY$t7aCoka!bo~^)Un3D?UDr
z>i4=~<#m;EX?(AH#aNw%X5D+;30KNh&XqJFct-r{j9FQDCY^=m+0Uf2&^-GY%0ipi
zD`{^0tmryp{&MVDH>^HKf`}|<-C^<oH%fynXWgQ4Y!U6nnuh(}9@f`P|K419NpyjS
zkL7fg=rnj)q}ekTiZ9NaC5`x}Ht~ZFZq436WkEo2Yxb}*g@#{%2+(FPd!eVkA`wA;
zTxs#Jc$oGCY6@Jd#lz<@TE(kL^u49UE3aTF>XE0Bn+ebOS@vHIE7kskIU)2LK-FsC
zA*?1m{Sg;XCe{ZC141a_VUGcs0uag<-sJ1(^hpWj<0-S)L#iYQ)0P@@!3>9PZ%Y?J
zzSQRFhH08~`!-L%NdkgLn};_^RRqoOwt2Y|bP@6cN}FemXBTKq*)(eY)_O+j)fV=r
z%trhR>OrmF+H@fl4{OtfP&}-qLX>i;^;_%Zrl4FJY=Em8Y`o%yU-Q&pL(`D2)6;_u
zO~PQ~RgVT6`v%igGVVwCyO;5?7s`G=WQp;6Glz=#MeJY1n-R7y`gbpLxZD6Slp32i
zJ)=OaMFE6>z%u$W0in7#J<Oya`T+58y?FmpHY;bnXUH|mL`0hP9@Z#NlWBl9h$#cu
zjGPUgF`CqeG}O6l@bGRzQ{nO+gpFd!05&OSqh}Q9G&IA!(HlR37J(uS8iy`%WB{9-
z)8!d5w26o`UEbJn3@1qdLb;nng~>{CHl@p=DgI4VmXZgKv{@`MA<yP?Sv1AJnaV;e
zfDht*i}>DT<+)oteSRy5NVCPm7CRhYONrnCTT{Pg?EO&gR?m<zO;n`X>ft2n4{&4;
zFoOD{)HOe0zcO+^O3Osk{2!4_Hz6da<D0sd@wxclpRyaHJ3YJ|(7fezipbrb@u?U-
zkd-&$pK3)whuU|0SE&8gfH3}U4|D6}G=OlL-Cq8ua2gs%5J5)do**JM1rqEDB2tqm
zBKJ^4en(CFbTaP&54WO!36JR>$a-b~DM!XL==wn5$bd4fUegB%nGSgPJcDDGjZ9ox
z@s*cx0lxQSNLXJExJ={@W`B-;<z?nbuNy{Q_cg2`y-w^M%py5}a&KcM9zxWwN%8b;
zWf)0yNMPB~*qlS2A$J)O5or!l3qZ~?jNI$6xG@T6Ih^Jrsl*2_(MSUkkBH?_R*-un
zFdvA>d4$aO-&nYVMDV(Esc&f4TG=_zkh2U#MXGZiW*Nwv0m15=H)$3%1`<NVbKc}@
z=>s`1G<9A~9L5TB&Ig_gB3PU!&#jSZ;Fb8IGmO>c{@@u?G+*+{AH3ocwixyRBe-Rs
z_}47fYWJmOA-C)!S$+*ynh}jW#511aq3l^o(Yvx(ne!0GE)yE*&cLYt&)itR!*nhA
zrNC-bPqb9&73`0p$xS>wT{@0>2Ih}(Tq#Vhq$sHCe2!r~^^7yfM_ahDNF2{*rH%Nf
zPT>O`Drn&&RDTMHTrC{yp~y!8;iE0wTf~)*5<&XtLauuaO+o1kx$ZSIiF|Y+hmXqF
z;2H3SNGms%@No89V%2c=e|G>WAH_3hwUz75rGSvBmFLO!1wxRIwsOS0l8N5zTKU8!
zkcs*&JcmqlZm;0sadcse5uS;avpi#!*gJxWL2Vp|RxP3qWhS}rveY9Z*^tmp%eWq)
zfr|2$aeXi(Aj(_DF+!#u1Q6}VG9Fde#1h27R;CzI%05wSk-sDLbq>2V)Yy?`OV#M$
zda8A%tVRdNRI6f3eP0J3a=o+|o)TN4T&527(-c&zgHH^~mWfby2e0@!J57gk<Fb%W
zp79R+=xZF#ok)r=_Gb<j?{Rb(dn~qiq&3Z|kI$KxjL){_B&riNcUp<06|-t;YYK1t
zx%lP%14f9pKbiv@t$Pv;bD0&tH&)e9eV<iZ6Sr#TSPgUI$v7CqlC?F-BJk2Y8s^3t
ztU0knb&@z;l(cGYyy~tb%3xNksw!UBfO2Cs^h@3ouLq!FP(CEBo7WJ(Ii9Qo=Xl99
z&}J(d3I%hL@*)Pzs*W|p>#aFBZgRFYuO>OKuCBJ8xW{W|BWcnS$3M-?8aoE^G!Trb
zYR9UJn7o6P7N>V|y^u4D{NPn?_^KIuX%vez0?LndnRp1Lzsm8k4r_=3ku$}OiP^uf
z8tPFGC@4`|b9-X8RTH~AP71h~4(TEK)%RA-jn&*4hd$#~s3(+PTTj}ws$$jE@p=eF
z4H9@O=0)sEjZt)pT)hd7h39~8aHA;uY{<HyHm#9)bQ*(IFADNlc4INBO3EOSP<H(8
zx`zA4Ku34g)ZSAwhFK_CNlH4Qgi@Fo6g3wby{Jw_bke>B&NWDqs7Bq8f?b@#OR9q)
zZq|Gf^~r`tX<%)<q%tto^dg}e02=1i*T5@yG9FJ`pYEz^DC$q?_v?j}j*6>}1!|Cb
zK!@-WwXa#!BW&QtnC!pca)3sZrQI@CU!V9rdE6ZG6%yj2+Clcf!|qAc%&xu1s;aI<
zT*z88$SrA5U^3od-Ep7H9@w!2{uGoUc_*ZY%E-F4-@0(yhQ!^_SXB%GXT_=!8vQk*
z0VHHr=dPm$sL=+F<wM(4jnI8<#?$QeAw-#$Q@k>cc{YU|)K`z7lmTfa;dU$#2jLK}
z7v0eTBO9gXTeIiYRVS(tEX9@*Qd+$_b{{<9$5BZ7sjW}knW%|Xr%j>)vR`a^se@p$
zdw}ApKiy2-!)7Hmdd#;uZccwSWHsLMV|~N-6UhcdA_A6*()z25C6mgtEZtbd?x_8J
ze2jI+JgD!V{Vmymx>&K<cPGFLu@=}+R{UZk-5!U9>*v93i>zy8Q-=!Q8B5eyvukCT
zHlRQmlq8K(MSnHvMHCfLE4i~|pZ_+;;+jfyCRaxzTY1L&Vu{TvqFXuE1X7QBHT9_5
zxUqwJ)X5?@A8iPrdbPttFx<xVg%p7B*lir2$fyegL>IP==k3tlDiLJ2x;^MtH3iz<
z9(1dkMBVCk>Q;Y))}L-(;u(9;`rly9tQ9Nr*)7ozd1k&Gtl>^2j9s}gNwsog9Sqh0
z)zAnJ!TckR;Rp`b&BRqo_@FKR&0$k>KIX<%vUvg#X+GvyE<vMhT$V(evsO8*Jm(Xx
z$37qum1FEfi+6Ax624`Kh|8wubaP{}=0o1z&8HTV=8y)?zEjL`Sw+rHt_Ox7BF#>Y
zfgvq=x`M`HyTm4!P088CjZ)2r#$vm8MWtL!BriSMEwVgzwY@u?hQ?yMDa~E5-8Iq3
zXFTHzDCjo&c9t!cdh8d`&p6gMkP)vTBkt$M=gNph97Y6GyHxNHO4-lz)FcQX>b9R3
zjFCnJgc0}i!q2r4i6D)5ATXk)K%N7E5jBa7cz}%9L!)kNYdXX;zK4+eF@ArAvqJ+9
z@yuLlMBJ`KBjiEj7|+Ll2y~bma>5`J5UdY#T*HO^+JJa?RGju%*{GxGG-Se~lxCz%
z1N03yip8G_SXLh80FrOx$WNC1hF>*RCq-?KiI&kUH|H4F?~K{9-8#nc&X_OR!IH<t
z*3rz(IUZOW7bbzvak4for^_Zwek%qQu<LWa4Xh0!(tJzSR$^iNcS77>fU-^mo|P?^
zbDbd1vLqi2s!xh_1uQS;B)UZD5xCR{d`?n_>Buw~Q=JlL3YeF33SG8NBX8K?SmUeG
z$mLvRW02;%blv50E~@(|$p_Olz2c!U%>K__Zm72hoEL(!dO0>+Dw(ld@iYp_8)$iT
zwRN}0@2yK<gyX5MUEM&0=W_2Tv_SW6oaWd&stUmF(=)Aw%(l*?>r1z4oZ-c#tO}lc
zZ8UP8XFTYO8HFr1<UGgW{p7LNlE?OO;{jjvWV1<)z|b8C>NF`p*tCz2R0lEx!is&=
zl2OA02%qia`~hE$=ZPSF_CnyZngU5K1U{=t<g*vZX9bNrae2{We#WAZpTY?1e?o&E
z^R>ecCx@Nyi^1bqVeWii`zoklIp2pL(mUO7^1KDUxNRI8ox8x-9tbKDE%0FlyjLR;
z(Br;%ejKaJecacB0Z=6wg8^)5LLyYK*%z7P*~HvtU;729NYw1ZFQ&;v@Y5Dw{QGz|
zJ-5ZzP1kVgs4YGm40oM@6C8D+FV>A`<L!m%;>c4M`Y7%OSY=i;ve?gf$`55%in=0p
zxfq36k0FbFScj$pW|4JTePf9)Mhs+A#IqC7pa3i5;3=xz>TBZwLiSc)8wU`^Y4!OM
zZ5$#<;|O2BY-tJv625-f(j+pD@L`-iWE|Xh^qimZJfwW@5-XKI5gXc~&-s}nWs5R`
z473cIQr*J1N$3^;)ldr$!F?H3mx6Z$*=f1BWfHqSce$^pPC!JO<vv~FMWcWbWRMkN
z!zA{2&Wdy*Nu@+FnFdu|Dejugs&ZHQIw(d+E3Nc#E(~2kcU?5n;bXDkH<Q_a4C(N(
zdyX9bI#TIs-}swyc+oP2MH0YjUn8DE!qvV$!yFLhtoE@?m;4<NDqZcnf72=@f>i06
WK&6_38mtLas!62MHKK0{EBSvXilrg|

delta 45871
zcmZU6cYqW{_Ww>#Pp8?PowPeUGrJR(9Ci^T2<{@7PR#lA&NH6pdG}S%(+i$=w@8*C
z3oDdlWCh7dv=NDduAoGb4B`?535p0v+~4O_Rnwfm|K`1Z^{H2{s$RW%Ro(OLx#l1K
z(7b0KPama^w~xBOxBDJt`xo}t_xN5OYt5($S$fzP&w11S-Ep6(X-5=KyU&}jdo~((
z*&qGnE4sO8l-E+V9K{<}H!8{viGkkCea}Ag{1gAjvM-wv`%)L}Mb9;PmXAa{B%>8s
zl2nL{H*-ji(5}1nxrYO)VRZ{D?y9XV-=b(~DWsyz7A4c!AyH<Fa^qvx5K+b#R(G)2
zb=uJK9c~#P%Ir`wU1b>`%Ir{jJYfy<@p`nddcfX%omQiiA5gS_l+sY>fRdkbNEAAt
zwCHTj6cy=V^*c7=dTn-_?-Z?23h5~Gof0c|NR;_b>3okhO|=v?C#;=Ta(df;y+LcP
z1WzkQiS-9dRdbY_uzFTu({IwAX?s>tLR6Tzu+>>5%%O<{)>$Q<uqL5?(4Me%QBiua
z>u=WHuEH-%7W2RY7ZtyQ;sMG<CCn{OrGRo#NfulAybg~+C?&nTUMpmo^xWughS7*i
zih7k5vHT884S?C8s9pY-3ACPG_1e<^<-(q?dDT0ulOD7hdJgpFY-fFbrTrKh=rszg
ziPQiOwR(t`Wsm4%t_A_Ehj<l(Hv%NI9^y4~9TN2n@#Y7uS9nQ09L65#p}kr*%&YjN
z3^jC^H@CncQDm66C~mdpMWFqg>|zhC{INH^(o`NrL8WhcrKvyy;Z3hJI7lG8>4m|m
zJ3tylCU512B2pOYO>c1zYnH+*L4ncsz+1I8p32c~Enb*owAY`JI5Y)Dd$ZR#Bo*>r
zTVbuq;}{t8@7t$u)4tFu-*+)oV7%}3H<E>5RFI8ZJ0vjP_qMspnt|~QRne?fcEi2e
zET!8j7sE$vx3xZCtn!8%OAMM5tGvycTVq69w6M0utE{(=KA<H$Rru+2jfQe-yrvjm
z9z{dBHQs0;A5b7Mpw@U}>oK6hmH}Nf*eMX!KKH8Yygq3=&O^B`U>b;-j+hqqt@Ucl
zJXV@F12b%sS1C<|GVJsVW<dv!qQeYeiNOpKs%-Mci)9mZKyLD;v(_asz|djaysX<_
z%(FLo6a$9c<{HC*F}AtJFo3kp8|HHz+899E=FK*;-cm4vm9Vzgo72zEeOQZmLVLYN
zkr=`X4dH!a2($IS(X@{H95dk&5cfGF7$gw)(Fp#EbfclB9r7y2ylP^Vr)FYhoHhQf
z_CXa`!psmr`9qGGL8AO2Z?u4$86?bn$Xj?!nwc2f%!j?|QE6t$L%Hu9GfNiCe1x01
zlB<HL@q<?>PPECehab^8SAr0}L{Svj`v<Q-$PEk<I{n}c#T*jYKX?;KYp`e&$e-By
zN3=J({^UZ?=>N&<7t<1R3J^be3ri)0m&$mXG__9Cs8bYl(gm+Q=6BjZJe3z*5E}j$
zynfN|kOIgBZ(Pg<kN~;hZQ6_v8$PKUyzImaW}*WKlx%QD3`mr0a7GMBlx(;>Vt8}=
zs$#@|fHHm6%eK%kV*0AmS>P#<`l@oofCN%s6(eRL`8;n}8>Hq;XFDI)?EFEh5w;#c
z^Ss>UvA3VleqA<1l|2n6kcOzz*MS7m5EUck9$o|wt67sLwfico9bLSN2d%1BWxs$V
zAyxJZNFY?J=$HN~hd>99vfqDFGnL9wE(Z1ODAh0Ao0s?PC^gxNcMM2ij8e<nSTzCz
zWUYPv_gaBcS?gj@=hmwJ5?P2kw^mIFx8zl*b8A(&rJ2;ZUh3Rw_8re?<({t7Tny^l
zX|5jBx6{-lUqPu1Fs7+(+gXEPS07f;*=o**?88551H-dbUzF_X;|u5<RcXXlJg42+
zSgf3&`D~`AFu)u&TWa0Ug;BvgR`;y-V0xaaBuRD1cpx)RO{J}OFqT1sT)-;+q)kaJ
zP?fk8;#{@3#OlFipxOr`|E%4X`ao5(QpAgbAE=F+SkG_~G<hL=_Rre0O%}TPPz1A(
z^jYdfo8SpPR&$Q4p2Qq4Yn!h}Z0rBD$)5a=RbPxZkFS&~+0y5<U#C{83ZFVYFoCjC
z#nibDHF;=ie!{MPUhAIzL{*w_ZNP-gCu;K+JUD_7$j?~K^V-n#XR6Xv3URL5qNQ~b
z-2@>tYn|Qw1?_L1)H+q+1A@3HyN(9Lqg)6L+rT#eMSDE8K~;EXL53Q(fjSFA7bGUk
zCU)<O+I{Iwu1XY&Z6cM1Vy%J@dVjaQ>P2ms(sj40w2(Sc?6q5MUFML`X}4P5-3nM5
zm7#&QTW!<L+Dg5Jg&?ffvznK+?df_|X)6m+ELN|!?_e=e6PANx_MpFMqm=A1xAg|3
zj#2AZ(8N{4+DSF1L1j1nQ(KmQQbn`^^TIR1)1P9ISG4YBr&L9!8i)xsPN_zoLqf|_
zYA|GV=0))EXZG4F+O_3ByG3ZK{;V2e^;G#({aJ-uf0`G8F6UMD-7DH3%FoNODHaQ`
zi^WO}Cy8p#t5~V;=4C)#QrUn1rQOr@k~6DRg=Xd@RR#<oQSBwQaZ9Nw&CE+`S-G`R
zL!*6Rt=gCKj-B_acD*;h+K0IGYC!v_(ZkuJ|J6E_4fjcR1ty?|`%K}BK>}*H4*_L+
zUIY(Eu;u^NI+l&_Njv$te;VO4BD{8xC^EuV7_-{(B53qmtWlNLzWrNn5gN~L`QSLo
z(mvkiw|oVK)>XU+0LJ*RWR+&_Wy4<4idb!x7AXTu^o)<UcZ|;vD-}py03J~&iNQOb
z?W@u{R*v^c|L#-B4~_Tvg_S`<f$_d3!ViH2!gwEs_H0_~d^EOe*@Hc`xm{~r2#T<3
zeR7F_3?OQKGM)qph*}@w$?=%>s7;&g%b9E6_?kA((`2@fk0P(C>0xcLPg(9$t?inn
zgYIv7;r57UYrVCHyd9SK)D~6{!IgLh^DXtMzd>l_aJ*sPGN0Puv4)f1)u<akwQKrm
zQBT>YPCtSR?LPI%I1VJV`_zY#coQ#!hpXA<{@Sl9S3B*~6xv#>cG?G$gnVIPWRO5u
z?Sql0XdD8HZM7d7pf&fFZS^T8?@5iXGg~PTq>crNLR+cYHoOd|9c<Pht!>#3pCZBz
zjd$h_Uq}SdAW6vAsIk?Z7eQz4X8yt24HdgxO{p_?`}`uF(|Bj@_NAN4N~tq<`&zZ;
z!(5}j+{*?I);d(~brC3V*y{`j$e^uzeNEa(1nSGZzIInz(`Yzo<i!rK3xl;8Hyv;x
zG~)XFe2F0$KpgPNX$%q&2Yi^uvrG<wjz8m5F8I{MSd*Q2Kr3eBLPmh4#~PYl{D$@q
zwF-|#bg1#j_l(<l6#1SZE7GnGPZ1rS@fBY1i6ER9JUaZ@r=ItTAYAfL?krl$gK)`0
zba>83LHMo|*9&fQxu(PtYwd82_HceV2uBNwnwM*)n519>ZMlX?x=9$tq$O$8ByDr~
zCvF)NWj@hN5wmNGi87yPh}rqJLsP7<`nf%(Rx9z`@Hr@HZVO%Xxh5wT*ueN)3-dJ>
z&9#8>xz@O;^{%Mbk5x!hnkL@zu%&ynLKd2=4XFgjLGuG`gNx<|+6FD`3@<;>HfW8S
zSRWa@{kdUvzrAy^R;gC*cQJC&xBIor11uL9`?a))o-`#F82h#ItE^=dJ!wi_SUq7s
zFkS1eRGx4#@_=zdlO6{`z&N2@9%6aGIH9#`Z~Z7*6+joWFK22$Ri1Gn0)RN9$-Skf
z1ORbH%U&(b768N<t>ZP;B{3uO!|Fg=ovrosb{nW)Hb*`%2I_vN7xRHJP>(pHHXj%R
z^;E{%X7Q#3!&<GbOtDwZ(|+x%!cWJlLBQ1Nevz)wlptVg^_bJoLBQ1N=w~rPgBYQ;
zdg&Bh<Q*VR+i4VeM_1eMU7}>ciA*LI?Fcm`gkVtTJHng(`SR1xzr-%QVCHuKA9dq_
zSd%~kXqqnfg&<M)G^(5L3lUl%9MnaWPjLoOms=6W*qEbV9%-b~99>5F5C+m59Z~*B
z6D}Mxc8#7h-%ft0jZlMYbnFY?q`uP0<F04RmuMp^);rK(0(!jz4HD4n^)OFsQ4v6|
z*Gn5&w{QeJ+{A`2)o!ia<RXy&-Q*&W|J|gA#nwva{&$m(j7J}#1e&&m#g}RQDz>-~
z<m|S%5VXv0(Ziy%b?%L~=!k-U#g%|c+u6=#T93-@E`k>b+g${TEVk=%k<+<z-mYVj
ztMzdRSog5~#By!2QgPVDK**sUb}?wJJ?vOn=WFd@9r5vBI0R&mvFlfAf9-nAMWChj
zn2SK}`IsIS8xfr^wa4^K)*7I52n>$~-TrZ<_PY0}23?8r`Jr=<+@KeTWdS7G+n{4v
zprr{UJYR!e_7GodiR^C%iBtY-xJ!!*fP<_ac=tbG4H6ATC_2>MQ>P74Du)_!Sm}xm
zb%z>qSb>DPLygOQPwsoDfxiC;iBtfi;!*b0HQEwS<tP`!Kr2QWawiQTV2m;fg%bn`
zj8O(Q9-j*gINw@((ihrVPi3u(VM32uR}XT=wT2wtI(Npk28Q<xF@oTXr?Q#rv{{u?
zT?q2UQ(Xx1#Z!$i-*G^7^2Jk)<}LYz)fKqn83x~rv$^Xvt<4NWPEtHV!5M~}q##jn
zhT%+7U4h%3XYfhN_H59!uJc?Ca-qRIR|E3B^V~*|@0~}D=o`Qsg`e4E<n**lH)^V0
zxXCb*)*_0E44R|c45ctJL!tbO{lGS?IpyGp#SPB^yUmdC5lFypGqA+IP4+ct;_S62
zZr5r(<$K*iG$r>MW`GYN2%*qkBNVpAkwFdGY3*k(?$jof?>EHOlb9&8-zerua3WD=
zztOUl$f_7b9%5a0X>XJta_ga4cgT=A1IUn&ft<kz8t(?}w9nY*c4^Gp=8R);a8c-t
z5f>f@Bnq9OQTLf>5v<x^*vt27t37QR+^T45H5hV{H$=+Bz#{)q6q{G1#uk`43+;vV
zS{EyS0fralTM@6ry6-d3F|9oPzNzp<fS73i`zC7K2y=i2@(1kBW7?PL4@|ie2NOac
zkkDYL1tE~O-R-#ch9_g23Rj-E#3reQ$gCq8(^i@}eeC1kYn_yWl_nAcOQ{N;aam<5
zjY{XRs+aU)_TZ1&gi<g>Y5<P`v&w|4sS)DXjDKb-hgs~THoOYIM0x-z707*N!ZBj`
z0xJ3ya+$-Xmz)D<Z0-kht~S-HY4zfqP5ltKt7}X(b0rIH{@hd>UC9FW7pB_eN*1uz
zR{es9PF?p47P@TxFTmg=HkfMZm0)m58%?$Cl`MFeO}|hK4&zHxZRSc<^+WimZZ_5C
zF0Y>#Gx{r2ZF(gOQ+3NP6hpwX^%qizU$*@Zem^hbk?p@wA0BpxsWv9~D#wag^>><T
z_R1=;gzx$VegrZ7FTkQ<b<ZzsQ4m(Y{zZ!lF-Nb2|BClpy;-HUzg#7F=(v5R+WATr
zI&Qxy;uWqdq|k8(O!e9;rO<B&uQWfT&~M-Vq9FS1kck>6i-CxVr5-btA6fI$+B;SF
zCFT$kbEx!~na;?O2=|~JGqXQl9*K&VkHq7IB}Ss+6(jL`Q%zmTLW6!V)%2AtV4t92
z(Sgq$K%X*|*DRIYc1CMgh2M@6lngrMDuGr*GW(k4Ob4$};<TxjOL(tT;*2{4I15Vr
z?2aAI0`}QoNWrS-FdbT52?n#CcYBhTgjp|KS*7U7OQzcKazW9N4W?RoB@0#dwAAaY
z8+f~c+}l!0N;_n3_}fb_zwlh<iGM!((zWc>pS7#gc)+7f^fzU@dRxeR+yf7U#8H1M
zX9!#Svvzm5zvT;ZKgjb&11u%Yx_7XeG!_{n&^+nt0||%$R!Pdrpkic$!s_enpJ%nw
z)a#bQ!#ZL@=5>-m2n-U`K(_F#mQ4+`L?A;<;*w03%fMWN*qO6hqtqZv;Q={hsLuwG
zOc|F!BL}l<&S`DZgIyeI(qNLg5ly1Bkd^Zm>vvAOAzW?wBD_gFD>Tefn(-!$Jg;df
zP(1MR;TZsiSx8FWj!KZ}p#)On^V*%M;jRodXgJ9re+3y(HLUu)c5kZ2l73lu{Th;~
z;xcH^n<Fo1uch8}VW>TCl1NuBg7%DH6E0}oQX?#xBSqE*G9yT)BbUMW7|AYP(5^|1
zbh;5~8OV$znd`X><{@MEUDR$&GfUyA4d_VQ1V%Ds7i4b6SUGRA4=%zkV=P}Gw+m0R
zjJ1^3+%D{@OE3&bzN_@%ArQt|Sk)V&7UW98>Ns})C9P>{oFx|-Fd;LJWN7*!H9}dc
zw=QX&QsXU!r=^HVT#~t#%fK)b*s)7mWoiPtgrW|}kYy&2Oa+&LWhSy)8nmwIiH>EE
z5rND^l6eS0k{Q<Cv2u2>$qm}Co4jKg`2g~&CiXW|EoG*qTHkq)iZW#?ig+Wk`r-D|
zEVU&Mj>QuoPPgD7DK#ZH&~65Cex}gaq?q6%yQ@b(r&NAq$<P>F^vXw;42?m;G#^=V
zQv(thA6eMcd<(w_3_M-V{-)}OE0((uv@crjLQoL4+zN{*A4LGM+=><Pos~%jT**fJ
z^jj-dx(Ku_TInKCH7hN-sX-ASthBJHd64S>>Qk1{^oP2A>LPf7@Tuh|)A^t$Ef=3!
zL4I;TB$csna<Gg7G!p@uw$)O$+Y2>)srO0z6uW3V0L)fb5enJ1T4Aw^##6v-wS@C0
z6hyaMt?YLAT{^ud2J$=@!P_kLIcr5ey4J$^zLm4o-e&2`^(GfBo`m(PxY3~v^D86#
zsx{d}-&(S7iDxef>+h)Thx-xBP+y8?Fk6jZz3B=Lba~UScC)5Ya>1hBon()Q>8-p~
zll<}$1Gs3wB)_yINEDjnmuKoA5r<6jCx0VQLGmruB!BV4yg?)Y4yvBy?|d8Ibx9WO
zx+eJ_{IxZRf_V%5rA_rKv;1n}9KyuwlDg`t0z+68k73oRemTZKLaC{Kx$6Z9rKb8t
za7S3M>QsMbmS0$v7~-gZnqS_DkSu;DV!B`6iMY%J+6=#XZ6kgs;xZS#GSiPc5p=3&
zVGwF_{mT37K(T&z6@EF2(m0&!DoW#Uu3vUPN&$MVUv@u8C_2}legCqe&YgsLuA-d9
z6`k)YDw#lg4~nt{C3+~hfRy9=Pm8KqVt-YlFY&Zl;#V|2q``$UOZ>VR;UG!MAC6c<
zDV^;PYjysd<MxWQ{)Q(~=SMnw9}RUs#)Y=suN<(S%<A>tD*O~1EIa_-cE2g`Kmu<&
z;ZcSNBpSEfA3cD^(I6zomlR^}@T;x);2_RM9;)s1i{P0Hfd$-Mei33jEDWLDeuO_&
zG*4tnfbH>%P}5<-RetS<Q@cV69kSOiLU>0CUHJ`xT_HsWP=2-KG7HlX@cXXRmCwwO
zy5Emn{afVB{M5UL*?mp*(RUs8%cBc0iA(k)M*<Q!hy6HIk|bu#VSkthH1rfhlP6RB
zkq#Ce=ljXO9b*;E^y_|q%&#~oRMjzmK)6K60Q8t2E>VC|!r_=dextNB4G+ZO$NY&K
z_?&}0acIsR^LOiR^`{QcMT*&<Q*D3UOz-Dua>mb(YP@PL9Lrh1auJT@Zupg4=~p<5
z4Q!#`+5Vhg?Zhh*&!Fykzj_}mXGm!rUtI93b39fvv?rJRN>7&CQg880&s=#V04Cbg
zGdCnsUm($*p1D{hs68Ojo}Rf0;jD<{?dh4Dypgv@a;QB$bGu(}mGgRl*gIFbJ&|D>
zE^1k}q@`{>1%^1Z%H`eCJ2xsaWgt;w?_Br{Q6qc?$joh`VZ2*l!QQ#qTV;*ZQQU&P
zbANS<HJx_cxztsI?3S(cnVyP4xzY!Ki}5umSLS0uLa{-)5s{t-iHZm1;`9TN5g<Sf
zW#KaYwXQ>51X_!R=1O-586XVJl~=$(Qkh)Dt!wkpk9qJRxjDn^jb-{5TI;#Fa)HQ0
zKfaf%*tx1TffoNf*^z>m805)xXHQ(K7qC6;^<K9w$W`0%rVBB&>-}8y4&JANgFgKr
zR~_JixxBy%YoF&T>w(?Na<JjSiDysmpnH5BzR1P4isn5pPJz+dT=-cUB!UCLb-8L^
zkF}nrQXY+x&1`QMePhLD#|~h^lA9e%f`lD5=SIYh2avGC=3E53bSRidX5Pw<U8{F|
zYHO|{oD!JC&6UeINEF$ci)Ea89VB{vYi_EC(A4Smt-0x2c(0Ry?Deg=H{ER2PzF7Z
zdi|)~uR<^IJ$BU9m3sYXu1udp2o)dAjfpERAW`wrTwHMx71M-0n%n#V?r-oE)r1K)
zx5fR|C0Y^lsK814Tz9>v=h2gHEp#k=GFM(4fe>mrnJX`jfTTjXIKdOOcu~vA++uO#
z4Nqk)Cv!`BSij?yz+awW+iuVwd;E-B2c5m0$(4D^Jdt(Em3c~#sN+m7@|2<ugfJkR
z-Y;810SvX|Om4ILtZJGid9)-p<l5{;eVFIb2Dci1v&ZdRo~Cj;m*4E6&K1?*BpD!S
z;Sm6dYU0Gn+-Pm2;53iSKg8~Lv;L*>=#V@)7r{m4L-OQI0ttH!$&)h)B-%104>L(r
zLJ8v`c_p{Wwot;D+A<_Bbt}LBlSlUys+rwG|8>`Dw+_k;SG#pkZn!#6uK6f}I;!)q
z=D$Nn^|(nlDKF<E`}SM)M&A5Mc?i}23-tpu{wK5l-l6v_pPVOGSTF%KIZtK@K>})W
z9<qdd`3cYvo6cI_sgEw3?v|kuKRwSBZVxgjGd&My_1H_G8Z>7XJ9($xwPKdj05H*j
zS$T3$fds;=ypT8u0ttj!c?kLFPC<aEIqbQ+^bQqsTm*7hb6f-(mUHstutX6mlZRp1
zjU!;t&1ZY=(yy<a?;_A5INwE}xOskFNGu2eKIrD>Vcu?|$q^uh7umnNTmOxx>mnC}
z&J-3o9RVR=EXtFiD@bUuh}!WD5}#^*So=ONXNP_29{q8v>G#wT<l6G#+D_*w=knk-
zy>M;$(rt2{{put7I8W7?JY>|!w~2=^>Cbt{P`DgabT&_Y^fKW2Jf#7ExP~o?z*S1t
z<ucT37xECMxE$bK%tI#1<pB3mo?2RU8MseC84ysdK8k~ku#|ZAhmY!B&((bcSE@yQ
z-!Guv?gCO@_7A9kv0A{W`7{IvvF{(#TRk->pok1Om{4p`AYTL?AW>vcKn5NlF=GY=
zWZ*$0U#JHKWZ)q=v``NUAn<sNdM}^GSGE10$Dv|XbwCbwaETo-MZ^OVHB|>>+yoLe
zRR_ZV;d7Hnu~DiHMDD$k#S7j4Z`xg>BDA<BfFpvkOpp8S%Cv9Swo~S*zy0;EPe1?E
zE19QW`2Euv*6@U$DTj=RX;A`7)CA<A0Z8E01aN3DR%nh@Ym|M*lX}WiH7X#TOuj;+
ze^fv^8IZsj6_C3VkiZxfK%^1Cngh}RMj(Uha1?$LEm|@vkbNAh&Se%=6?k%>#~MUo
zcs?BoOb;l{6Bo41O)tItto_|ndM|GUSYqn|0cbHjAZIa1XfZty5(^MWXfZv21&Fr5
z`FzH+sn1{wJj+F(`7_H!p!qW^5Ngi7BZ>fFRsg4Kqv%XL9}ZVr7*JN)-TtT-DOLFC
zC_+AWp=%EExeEhw8lo6r76vd4X`28N+k}OI<jR29CJ=*f6Fv;cZ31z`HepdfBs+O2
zu}xSMDDBGaSS7{K<BI~_=rRo%l9xn%9|dG+FIlkVM}bnF<aMN=^GAVhzrC^`R+PoR
zs1p8vaiEl^9-V?1mx}}4s{W@WQt?Xya)TkOL?(XeFSI}=ercfemMg17CVp8!B>x?J
zWa5_v8vjp~$iy!TbQ4=_3Evs1_~lpPiw(?*E3GKT*~bC(x6W`zb5`4d|HE*uT<!KB
zUD941kQYny`B~@cK++jVw4SY|fpnPC2Kf}pY`33%PX9CZhAswO&))71B|7We9ter>
z2W5b<J<w7d)Pf|8K-uHMGl9gFDdLnrCT+tx9PxH%wsRJjy8lsYICkVdsIBb_<Q%de
zeo+r8!F>T=$Xbcu(#MbU_p^V!q<@myACTEPFfms4)4Y6~%Rs{e>~}BgPo@t9WL_3W
z@{l<|GW;|O=j%8MV0&KHm!}Q}WF8qz;*t>dZ>S7PeajaAO}{SltqVjcy>Ch8B&muq
ze=?AB#!miS|ErRJGJxYQx|PY#G=E}a|EWKo{wW}Dt%8ZNKheaSO0D51m#0|r6@7a8
zR6u4p!GzE$66z_0K%Qp%U(tJYISsEtQy3*l)6*oB3nh>=JR8XAlkc(ome)ro$!7z|
z5kHGMc&hJQfKB|D{-^Z0fXohqi}L3JIF|3hg;3-|fVFs4zcq8gF$dCh5V{aRP}Q3>
z;rY6T0IPXb?~`r_$OJLCkZK6v;BKFgg4KGnj{nvVWP0bzE<)A~LcQ~0wRh+!7&lj@
z=I2bbul<kSNRLd-$0f{9$Q1>#a%uDOmG|ry`{*|+Rro2~IUYd8dHJSz#RMd3nU^2P
z=e`Fd`e9yv@V$KDdx(KKg1{qRt>7b1a-hZh{6=M0vH&zczs<GQrVv*EEBcmvWoN#c
zSP`<@_t(ELsz5th(8{(YUnWX|d}Z5`FB2sop~aT`=uT)sZ(I<Aw9vNZt2^?=WiQD?
zrQ2}Xhp!Tnh09*s^Xak|EqFmP>YjY%CM<ZYs#@>#3<$9k!XqfLCqF0_a*zPqlP?!?
zkeGsd^5sHKBwxt)<jaLza%dsnlaGb`W?ma0>d{$=YuE&zUdXN<rk7QMA=ZH)Ul!~0
z<+2D83e@MzbpRwUjdft5Fd=;MKzrOUeUb6lz~E&JTGR#xFJsW6HZUmT_aI-?1_ovP
z4ib$R7?kllks^K{7)1PjNQ@M~jkG@)t^Y}>9O>3VTal4Lx#J1)z;R@-Q0&-2Ler5!
z?AYlJQ;;?qqk`h~1Q48(cOpPSzfnPXCjul&jtV+=B7(Gim=NT5B5nYI7Ef?>pk2fS
zx23d;m=KgVJ0J|C2|-+nxE(VWIpNx1&K!1Vynb7_HYm^Rky*v{tDuq<XH_5p0a~2-
zfyCf=Cy0&6jhL25YlhV+?2QTf&8aCtdBy}LWTphsDMAL+RQ4lenoJGKNr|i_af6tY
zw{jdPHa)16Bq}mDv3Wi9IQ#oVy>$vKam<E1Bjl%3Ct=W_UbK29TRu_0B{efB&(Xky
z%*-Hmdjb=tn9Z8Lt>2!R9h7bm&4$eEAoc)LA}A2T1PSK6VGn;>pKRuD#eFpEHgr#j
zjIf>EJVU>uY<p17KrqqT?Lkv)CqP2!?F98OFM@}=*zy_rZ_9VNMQGCQ3YsEA72=b2
zR}dMhVenU|2FmPZJ!a}P6?>gN1QUwyb@~t_Aoe<=6(nliONO|YBY@h+ie~Bem+zCt
z1uRXHeZgXWwVy~53gU7*d3De*-nVS@EWKCdw{ER8N4^cpzz;Hj_%<kS+kyndw={Z(
zPzW0$6_42u&(`xjmB(BRejUrjpwRDFFeLIMC<BaRLHK=s$umS#;G{iyj$Y!aIO$^0
zTsRq&SJoi}jFZ8}SMl%>Brr|}ukOG-Rfwj-X?AI@URiz`qg%?*pg$dysZ+?H$mt-q
z055aRF}u$N*|YQXzqL8%_7jB`=iGjx(Bd5R(}%)h2*nzLEN{NPsItLTm99}WxE)1{
zUqevdAPw<rR1IV@ejhbNcUt=}^*w!BWgieySGq>kCnP-+*nsF0lAZ}9)aVmRmT;dD
zqH9$BL&9f(fSvk>q|X3}lKn%{XMjY>{vpR_gy<gCkdV0S2m%9Oh^qr#q#EMtKo_Zo
zgrv`aFp!3X;4}CY8zlHghjOOce}7-^q=ZL@eEIz46y(xz7eAz=_`5evKmr6bpDI3(
z80cd{m@0Hp8Z@4cXYCg1Gt%Qj@`xKu2#pWH=sSfF$Vu$NLVb67Qb;6VQIe+2q!2O@
z*!mC>w42O+{!ky1n(QKxvzSas6ifMOyuZt87a^8<Hzb2HFd_492us%~<gtCoW4{;5
zS#B#I=|6db?}hNv%|WUFNn&~hNL!*GN-qe>_j|xZ;RPY2ucingw8v(7OZBN~J0x8t
zlEV<PLvWQFgb>J&*yg4Bru0W484MwjOWY79#pgl@?ODb?S*EYeEDK4;hFmR#mWANh
zPSRmsIIMjWLWDYhx&EVG^i2rwH`JoA8YW%$hm`J#H$9nK*xXO_rfkGEJ;F|XrvLsf
zJP?rt#Gvl}ki5$U5_Rqm;Vu{DuRvmk><`7d@j!)0#1W`}f2im>{z^-jdhc5{b+vwN
z`)^%P@^s&Z<c)5~0Q6gG{G0?-j)b+b;hcBFp2Wlid+}x?W|yzg!+F86VIyUIM#@J>
z`HAfAt@@e=CWgfYFJc09VmKp0evm+&7{+-usR|ORP7JrcmxugB@_gRJaM?XL&?Zcj
zt_{N=w_ah7vb(?%rhovKkfs0${MxWI1xVo6hNUTp6sD*ROH)Ls_olGWc9>#{3rf{a
z2}@Hz2B1^IFvS2mF^S@hk8sXBm;x_*b5pSG`ky^jv%^LyB5GBQk|pLqYu-pun4Tbo
z#vlPcCoDAv3Gg|N#vq~b97kg!g~oG8V*!rhbHhqE2~J0%APwtwvS^gsV{TYxE<gf(
zZWx&h`4s4L!-d!Jp@F9oeQr3`)jCcuP8EbTJDjtct=*{~i`ZeKiPe)LrUEocTNYM6
zw%6{`8$4C`DI6dkz>O^n`$ZxcB-C3LZYnw$B<f!l#_MLZ%?F7fcUkzVkHg|jmKX@m
zP-J;n+`r;7B3@e&#$C7jdF2rJB&;M7H)rmB`o+IJ{Sv$FYyH+Tu!Kzuc&k4N%T*dA
zYW*Y(_d$cGfcm(Oef+ilo2oju2=#GYSjGa7L6N#J92^<BfT+*HVvZ99BZG8mqt*Gd
zuzYn2Pq{D_^o@R4urRFEhjUI~czo>7bbsdQ=U?vr)KgFY<>e=yf9h#=)t9<q*Y4Hd
z^9Ac^=FoLTwUEZk0rrQ3`iQavPAy=fmIKZ>0f|};&^Y-uFM@}MSo3f7hszJSMQAb{
za?DW3&2Wg!z^|<qk{yn+Ip69N%8$Bb$PPyxJ3t2293?yO<Z>aAKd^rv(nq)d!7W1u
z_`xv%WJo9s1AIaABZduSIA>18lbE8g<@@!h{pewRz9)D#Y$U`B*D-2vPnJ2NPwLn+
zBFzdWP<uvXnj0igdq$AvuA>(?V$f3?9#P(msEH2@wt^Yg+E*XdHMI&%(J>GK!tjXf
z7?4019)Vso_&{Rt4Ud$(84>$DV$cptt%=Bep5(wxH4(YblPmz$M6l1hgKGi-7Qt}5
zj)o&!_=A3PIcTxFjPY=fMdSwzK%y**pc5w2F-VNa33lrf`XtX|6C!dJfs0u*AtIA4
zAkmNsk)+sqfTThZL?SecL1Gq9h%^y75F*7Knh<GvkF|utyBMvQlkKvT`gNYl$!;xl
zq%%3<&q^E$5hq7VyEr6jnH;I?%7c{{MTk=)B3J=|l2aoxSOJNWQzJ510f~}RBTldq
zqrh->L~L+CK$qFB4wM$09gzVOo&srhL<TD$fiydUVC7+qq@u7kKa#VIwLh&t6r3Ny
zGRcG2A{sunJ@zz$*SqY93>(1(lpT>_BS=8m5t%s#38UGO@HKp?A(AgOb|litI!ZPx
zqKUB7K6gfc-gCoJM_+K!n59n7fF!Aie7_nbDp?wVf15>nns``S8_79}p+DZoo_O4h
z+RM)BHA--81ozeX=Q84?`vw~NW7(w(x>mly8NGM{=nc;J2MOp6H2$&bsA`<l+iJJF
zs1Nj%ZFLKgK3gMlse%v+ZKa+d#~G&?zk?mVq(4}(!)XziXwi;{eAx&j5OzeeVy^)b
z2s<JzT3PgpW}K+q?9~RnUFB{Ufkx}@h`b~P86fPA1jT_YNGcO4Nn7j4yTxfN*0b*#
z^bM8uE(8t5dRGY=iuDos#uJJFqCV2`8a@=`G!zfWp$Gyc4>&^+BuXA|h9XFmJaBm^
z#;L7G#870{DTdblh^qpP#3Rl~gd~8DI3p1xfR4~e{4F{*5!Sws<jjtG5_d4qc_cZ;
zDn_^b?<07{mduo(UOmB%C`P+>C!D?k6No1waxDf4#1j#$#q?frg3SI?1TVj~V#DSd
z5%#3lXw)7I;mh!tKR3l&nIKX4rw9(uDEo)f=-HoPgv2NhD}UBZvdv!O^>T2W;spP5
zM4taa9L0Z*AnL}QM3e?~KEm)tgN~Kw9fN=igPeB^0um7CBXT<gk{5y#`kJOog1WVr
zeMvQ*@Raq6%G*WYqEN4>E}S7q6zUa4s*NtSB&Z|%vcZ~hU1i^>^nG9wH!3{>NFel$
z%C`bR0-<jdk@^p!;potT%+QS=D+js|wC5Zcl>;)tyK-POD1uIqfEXA>p814;z@~F3
z>tq-wD~Gxel<poH^*i?Ful7WXL|BvHd(fd#yzb6taf0$>HS8JFm~?ZE3qf!8)I_Bd
zhYT806HW5>*wJ>{lGa4qca$RrJJOL+r9Iw#{`DW9ex7yrXi@f*Wkf5%6|q%9F#$L-
zD&H&w3BZw2`DP(V0FI2}<<&vtAQH4c9cM4Fj3J(iaV`dJP{+B}r48!1sQg?E$^c_r
zv{?)58V-RC>O}URT%$|-iBWk;C&7276QeSd01`zeMllY=P{PKvHmY<^G{ZaGC4)6w
zx6Ly`m0&rIpjRwwqw*EYghIR1+Gtw5+Xxb9wNcFUbrfeN=oQOZ_CtBb-AdP4E(X0~
zIm@*yy<#~lniO9jK^b7oiZ*Fxy+QFuGOWEH&H2JUm=8-t-j8D0p#7Vg#3a=|j4Df6
zzmT!M3cti$0UvN5M&&#O3AhiVn5PsrfJE5vVYF~*R3v7JL1BZoD5@@rio~qsq1;DN
znV6L<BxV;!DKX2xzmcR_Sr^6aq(1iMun|<MKsZ{^gs+RrgHK2Ttu88;FOV2<b<wc6
znM5QHUFxC{ajipg;1%kk?L^jEvN%lF9v1)HRFeG0=TW?RS>wsv|Hr4<Qw7H8N-#uc
z;V}&Tc~o9s0STQxkH$m-2qeHhk7BRe7IrQUYwM#qn^~7a<Es4iQ6raMCMkxMeH+;;
zg~nq~Zgd(4CV)0ZW$qg!fHp>v`=)>fBpSCd8m;2n5+cz!D6%nHATE?h7BBSRf2|_)
zW-+O@iFJt?iLy;@J!Hg9PFF$(MK)1alFKbd<9%PU*J8%CRbM(y1``wHOJ{<B1j3h5
zd29<32wz5#=A>g=kT|yeGU^=L5-n8yGAfU4B@4&4Uq<QJc0DC0a5-yFG-q6aC$Zd{
zx$)`epS7<oGFEwld!jg;Vi=r0e)H*TmY*<2rN55KBrBNcuCJ-~AB7Nf+so<_#!soe
zQF$jFx04{WmnLK@4g~5OwmoT-rM`*E`{uY>MBFIeQqOW3G^(C8E;bsa>!UK=fr~+q
zsgGitOXu^@2o8Rq{fA=1>q+m6D*WJ&xRBZx#lhcxp%SdOpA9H64yN`;<##`DF$Y5X
zqxkN}^&AO(d4LU088@a5L}dyFw{9SFfE;@%mw{70$d0Fs#_5AmnOwoG8OR)@0XG{i
z4wYk^9JAY|jk%uGF&Bw{`-6~f;6m`M$5}(hxG8l!Di50S6cb3tqc~`Kh0DNKe$SrF
z8n0%)$84Zs2y_cF-;*C%3tt2p-tcVHzL+)cRJxvZ#rzOEOJbrF`NOl(=GXF%nxGIZ
zn`fgfx>yqh3LIoF`}M{~sgmkdaM_Hx0O?iGv^jt6A&=Z%Z??Lr(Jj@xKz{ZGOvv;u
zz)P6)YDAubtx6x(tQlnbxHy#A=|ecTa~Yif_GNvW8F!}o7RVO~@|1kY^ew>pN7=MI
z1veV|u@lXV>r(w(9J-y|k8qHch78`->d)?MZrq>l@8X0Y)1Pn<?2-`P-Wq1FXl~3=
z(!&bmcWA(c)UW~sko!gZ@j};FduS`;4@zci!DU-VAT_oCM(jr)1cEz#y8s_rDkwMl
zhTks0LFfahfnSH31Rcc(fy6~9(BiE>kieK!fIg*HVfa0$T9#^Kv`N(#$QKO3giLJ#
zUNB5@8Bp)AKesVTQtuSV;|^SHB5nbWI~sEt^yg$YrH#=vHMu}$@NjtvGLs9C!Nc_@
z)P=b*g?-n?=#ZLHAV({hkeO0|(Tba>kipD&msMV6T$Os)#i5z;F5!r}Ff*pIL06%!
zsRc6G8sIZyY614(_?QN8Ff*pH^;a2fGt=C*)6AGgZT~7{QM{wAFUZ+qXWAN@jr{cm
zMj^c=q47@+ZDigq#;s)=3pDO-iHWis3!=?w027G@Z!Ea_7OOcgLjI5atBcXH?8^d;
zCypRPX8f|CkRR0(i6UPXbh?vXFb9c;U$Ko{j2>;iD$w}RA~A_uP|#A=LXPySf)2M?
z?_r){?rXaWa<<w%t~J_ug1ZXvfu4Oh0K|(ih@@Y$2UQpcjPlnCHGU0<xBz>tFu;4B
zNPxXoh&eV4J`Xf>-eQlx$*3u~bxWcAEG4)ow52f4b5SIOLR$(u-bKgWYDrkzUYOG>
z#*e+#5&&#3G>S!dS3*kcDiq%|1c8p+RVdeKkdWO~DAN=mfx4>@+cbDqwS+X;!+Jbo
zG-|uYEkdi(o<f=OgA9u7DMTuVU!f_1p|pdA%3*ulBL=R};HOxP@c_f)V4?h88c4t#
zER2h+07$?bEQH^uI0Yo)l!Jv$4i}2t8Zks(;M+o(TazqU<xnAVYgnB~W1t)>#D_ut
zo$2v=WUE;F$BfrHf+OM*JV&j^T;*vSaEz3nf>i>==~GLE%Fl&rVuZprK4-qmmJBlU
z**pD=-&f%&Y=_4V7VQpB7RpEqPl0u^P)1rH(SnnOg+HSObOcTe9%=nlsGcblk(T74
z+^IqtX-O6$t<!}RY0>d)2~EE9o<i};`h+J8t<CvDnZ3X>XmP$!W-mYj?R=q=y(l50
zzZMfmEg&${UyEJt5!y4p7L$7wJO$EgF`2yp38dFz*fWl%?@FY?+K5=rQ9JaMF-nb$
zh+&NHCYz-w5FHa!CfZA$F&^<$;is?<9sqAlOomAyfj1^5uLyvIea6J16Jx?Y#NhTB
z8&fC5gnc9r<;KONeIyI^86PA2oD(|0WlV`FGh?d#*0aVxJXIhZEoit-iOEPb#fR&Z
z7$Q*`XCR@)lvsG?Wi3Q3s=XUiXI$38$t+KeX+a*<Q8_3J#iqsJi0ERLWWn6iV_I%Y
ziUYvI=$y?)|Ji8#=xoRAV8ZOP9kYXkg0o}tZY@Zl&W<5)p=c5$qJ-J8?Cr7=9-?uH
z(%Y;OUI(bTtoZ+o^rLg#I%xMh*R6ww{oI)RDpHE?e&@#IoobM%V{WYYSF#R%dyi0K
zB{y3MUI)g_d^YO;jN(V<yLHfXm>-j8v?;z>o*xT|i`pQ8Fh7Q9Pqc&XG0cx;Zj^P<
zWFQ^q$FetAop>Ff7O=>3M(4*CxOLEWdVyO94fX{wc>yrR2m6AUynzl9bu5TAcWgx$
zs;Q0zu@<-S11*>n{j-qGc+Ob+=t8#=e!0&z7R`f&&OAU7G-P26i<4*wU8r6dYjme<
zi1XRdg|WtWSSj8REOCq2mgkMkql?@+=qkh_w+`BoFN(=;gQWP5d{GRGt*8UvO2X4p
zry=}HNzh_ZtkG>&YhDKg7PI?bFv=?zyLHf(eQ``~*;9PWzBrb2KxxaqIEKJ-KDo-2
zg2-|?TlRvn;L+tS1RWwTch#g#`tn#<+>=8QKrD|Tt`cgR&|-NE*Zai;Fy)+B9&33Y
zKM_ySE`BB3_!pzHa-~~`1vOX3WFi1EsAFZUNoNU4oA{Nnimui&x&xo0xOKgK+l$5u
z<+1fH2AwyrkI8*Fgn+R=CO>rq5*X`a<>HtgB=lS#Yb$Qv5h>1O*2mgCYSoEa5ZCUs
z|NOGCT6t`zTMO;>cgExfGR1fMJ7e<mK_F4f&KO*+utqLw*%>RnTUsMm*0M9!=q_us
za8n43>+PC<7!P`?>fKr>A5b6ji+yQ|e{!ilmJ*p3kf^0ThD?j7B@eaK$2vX9GrxF>
zS`Y%)$F6w-%ZvqkaSmN-s*gST7+*h96l@=eUGa&cXJ25KUNG}I;0fx+Bk|G|NZ9c}
zOfDuMQTG9A;UzI-5Re}ci^-!YB_B@Vh}(*MjGQCx$e}Mb9dRcSeX;2XEhZGMq{G_r
zSWb132v^dOJRU>xk!PdQ6t0|Lo>z@Y<tH334km<7#AKWT5^yJCh*M^fVbkP7Pum+`
zHQIREoQ}yHI=IA+8RC;|AW`UaEE2W$P>Lx{&iP`@Zu1}GYft$_w-kY0bW4#xzDT8N
zu>(LUkp1k6Dx--~*{?`0rQo9V{fgvL3KAIoiozm^43Y{JAx@^{JWcWT>qX))0t9;C
z^&;5=AW`!5BH05VQS$X7rw7usbPO%x%lTs<05sIqfqdmqR|oQyLyP2c4q+e-Es{Nu
z32VcPa%RaM$Ut&<5l--U4`iqZMilXYk?rkmXyqe{<Z6mX5FJq@`vD|CM-<6;F+-MP
zMeNo`jAC|GA46-)+=A2>tVl+UkVHXNgurVpjjRksjbn<Gx7jm&j4!J2O9YMJqfKL+
zHh~1nm?F83fdtB!BCKPyn1iH{qNw=oA`vtaLj;Xui)7F!S?Kw3MF<+{TjG+17cg+&
zqln&{t+<kl8YUFs!wml;iY}X2q~0&0#tgL3-YrsQ7XANG<DaVVKtv)CgYxed$#@YY
zpx-T$@ghhl|87y?OejzBA~AS8G_^>bQ6%Ca$wRqmMKT_eEW|_8izptV>6Hy@bBc1_
z=ban#s##P!r^rZ)-px|)&X>J=-2g)?o9}3dM-ZLw^e#x$G@p8x-lfQr?H91W4lr8X
zx}ZqTF))c+#NRaWkqn9~C_<1&ij?B~y(s51Im${QX%{*3yp;4<B=l$x0{y(mQ3NDp
z7deW61nMGZn3a+ui^VXj0D+Q=-IAowVrQJ;DM~J;amEAuQW|F;7b$hW?5b4*jXzc4
zf#@oT0p(+-t3U$fW2dV?qN_eGDy)-TMGW3mD~r@mWmica%B^y`O0v*ZpIq*$MqzDD
zQO*XZs~Vx&HJ2x1BQnui*;S7XMpvzMG{hr_u5~N~5;d(Q3(+Sl8<G0!+3>+e+cxWq
z<Y@+&#4XarTQDF|WPK6719gN>`x=L}uZwa{**^|8zEkqQF2Wffr5PKO4&SgNLyc?8
zzj2_z1k^W0^0jM_fcl1dy+6(7##H?Qc7L_;dc^@}DuYQ&O_97x2a<$}<kw$80^&ds
zzW#a_N5Et}#Nxw@dnyjO2;>Y7InJOl@1#SHlLZNcL*!(y;|QRRuqnfg?v+Pe1ai|y
zTm+htM~dX>Ok+MHj}#$7A~)Tb-1KqbrdikF*mNCtyfhx6;Bm)GgG6P=FMH|6q~}k<
zOWz0rI6t{6keB|+Re`+pPmY&{Fpz#CFFl>!tZNe1`o{4ktGP8s3vZ}z9Phz$7u|$<
zWk8&}=uRL2IUp_vFGxTRh)W+05|9Jp7#fpk*=vH%(W>LhaC<Q`-p0#HZaM0a>bSgc
z06CPaj>`)NATj8x<0Zr6;=%zjXwa*};_||Q<e=w<#pQ(q$pX-@I4&Ht<@G~gL>xzj
zjWYND^$E6Xl+m&sXfgAe@J<~OmnVfFQFcTe9{w?27SvmD92DL|=Y&nz??xM)%D`|6
zQ-8h{m*<2{cz?bX$2lRr<=2Gza|~NC+UQU=CNBLKm?$zPF3;IPqJ}YXY!C5q78HSD
z$FoLbjBDDCkBdAuF;QfEyjYy3fkct<ah#^j6!yg{8&l%S414exV+MAju6DGqm=c%%
zzX{)0Oo>bX4-)pB5-*$q`;z}B26rm&#?|R@;r}HM^-YaS|1Vi^D%0ZR|J!r5u>+YM
zSF(ww8TP?A<Ely!VnJ=f|E*wlTwV(Y37uxg3&q=_Ab~wQj?E{{fF`u}oEPVTN_!BP
zzw=;x9*BZO$$4=ZsDMPtd2uIDX+paT``s7E8=gwrt(<ljc3ehDkO71pmk|m`K-h7N
z{X39E#k-6j#c^F?_5|bh{Ey;zi32-oA6~wLKWFAdqj73+T;@E%#F$zfN6s_LWdOT`
z-8Ru^lv)y(IZwP@2bm>tnXBZl(Jf_zCmK!DOJ$n?P9fn^8uGuv<ZB8iAJ6%mZJcO4
zod0p$h*SPwZAu!fVx8YMZmd}4v<ytNY?ae8kWgV&Tz*RtBwDsAj=U{-=ceQy>)3~H
z8*MA<Tm*8Db#cGA&J7t7iYG)G03;CV;z*C($Pu9D8rF1@adYJw7lB6Wnz%eSZpvrU
zns`ubz(E3G4e4+z+SV+rt&8XU#HLL$dIZ<e@c)85cQb0-CZ^OH>nb)mz+eJ+lhZhm
zP;FCO2Dcyqyon6^H;#aZTUhQp#y={zxCpdJZ*dW*aa-atjBCalw}mD-|ErK@)C=|Y
z@^_3`N?E-#Q^7@{dg=z+2!TYk^>O5tyYp&69blv1HEyUl;8siS{(xhVW;_5p5D$tC
z8%Qb>hr6eXP|e6aV9A+k+*NVNMW7tVAs2zX#UU4gyu~3xz!iTWK=ufGXR2{~w<9hB
z-S9XP_lp?@86X^qmo%5HAm?!;-m0~=UDzMa<A=C%l3g{;*j9yKV%j$2?|lE@8jxJc
z56<|)Q=t4neM@mLNVt+8;*C$jmC(+d7;q(!IT4pHAW9Zg`!SAJ=WfH0Xdc$i#B(mi
zJ&DT911~-C%+uXj|LMkc51onQHH0|Y*PI5&*|-u);40utFFpNo=7D>A2>tK~ZO1d=
zh(SWXv(6F(5_O-YB?#vhz`?`wah9546jz>ing}i+&O1#6$))5N0SSonG)CYC0D&QL
zG0y%m!)Vm?q6<MiaM6XJiY~@wW({Qkagm(cW*zNq5!MDL@PYYlGmJ02!NCdVQd0|R
z=5Y3+ZH#S?-#{FW>khoTKmu`iLN2W!fjB&YcD+fizXjDd+8#9580je=?G~bzj84d{
z4}?%?bOIqM`PdfJl5q*K83chI8JCbg79>iJOGqCJ5+%na93R_)$l8R+?SjDgt;HP(
zsVNQp+JtnqcnYN2gmkqac~Q99{$z@lxMYyXIcD#C&*<k3zMsH1gL#<Il1#CXOfji^
zq0=5Pfwj;v0!UyjBqQ*PnJr1@#jN{6V?z02+^^v3fJxkhyhjKUWfmuJk8lYM`<7&c
z6)f<fvFx!GP7}aH6IM7)011c{3Hh!SNI<Mez~_@Y0Ex9~MMC})5|JXuvm$|iLc(QW
zsssh<SnEZ`4;6K8C3O3%4kKE^ke%uh@{f>EgvuoFM@Tpt0s>6DhCTF=(W7#Wi$ELr
zH3^x%feaAVBvSlOBd7=v)+BIv{0(I)T2h-f+j~ATp7K;~b}=X@-0U`$oW$mYyw`#<
zz}TF?c{l!>gD_CxZu`GWjOCun-7W@YF?YKd<RW$_<orPyVC+s{{zzjWMA*k(U1t1H
zxzB~5YeV}I@=9e(9vtjTl!`PONI>jMT-}}z+?HhUgL2@4K*@v7zy*oQ4>|)EBuXB<
zJaAi5aBx%%T=v5XL#sUMsz4#aQMVNoA{=$bEeZnYXaeK52Zn7cc)3K*B6ju1#x2nw
z61b4tn{3<)qgFeWP|hXnp&uI_PZfTPS%D`&Kjol<1p29jydD7(=%*4$S(6(D2{(Ew
zkvW&}T2Z9dh=D;xpSw7nP|qfOJST9Oi?U}Dh{~eK9$aQ3F8eu{pup^V8iTE94EJQ|
zRmO>mp2^Ev(bC^DDHm?YkWf;7-vuO)dnU2a{gxx(+DC78`zOZls(QN!G^~0j<!o=o
zr%Lan3_m~up?4C?16}(7iEAIdlZ}UpxAlp}>HrmbC!72pu_r!hDOkAn(L4EvH#~F`
z0X%^8ODgRW9Wr<S_31x6{a4ofQ=@YQSdMXND)mds2nO<KM!#gDjL$5Py!=&d`3Eyv
z(Nub!jr-KNzT4|A0<E^MyM~~t^m<aR*C+yn*OORn`3<O6XtVZ4QmJ9-I^2N5FGmlW
zOmDcxpvm+`Qhp2?rGWBA65+b&WO{G;jbzK3q|?cCYQQ^rXi^=XbUImbQMNjHxsxRm
zojfd<q)wh7#vkl3%Kp!1Mi!sScGaT!Im%Uw=I5xS^vJFF{2Z0UDZ^Vd$6L`k`P=r+
z)y8N~#oI0hP0+Vp15xz;b}}e3$0!5!-cI5a;lCUL6Ld10_qoxta<Yp+6LoS@?!sH~
zi8?viSR|W40%39ze^2v?&;pj2XFvaiQRlf~o{K>@`R2J8G)Lzp<x6p`_#B;=#7l82
z1qRLlK1?d<!~!oXDL0dL%{t>9Pgk&<{-R5LA138FQY(HQ@L^JZCIuu^`Y>6XvL@jb
zNgv*qK9I~gV*hP}@wOR0ko1{!AmYPI&G0ZuCC1+qtpW+1K=c0(pr=@14koeY;)Mv1
zc=&Bnd=8K(LFUpxB@(jVCb6CgSx|?P@;xoQG7MRe`~_sl(!zBp$<tkg3sn!J(qBs?
zngO8su|GY9@Zlu(mI4?v;Jc)J-3%}GLKY;?RYR6;UwoHD*7*$Htyf!zwR1^)*R0V_
z<L^rFToMr(ZE0Imt1l$kwB1Jg@(W2BrGN{p3rQKJfP`8Xs6n(jY)vg_NHYH(?1LNJ
zGGv4Xw+uO*1}a1EV7I1b_F~WNF)GV?6<@A~ka`tgu7+CQs~AOa!3RY^^<`W47~RVH
zx<$w$ecdAD6Z%pSx=`Die8K>B<JZP@WdqzIWS9ZPrWh=cL6HH)c>(^qc5Cu`gV@}!
zja$kFxkYHk4=R>v0LY-opkkx}p5(P)@D627_8Px$Gt@0YvvFv#jL};2**LTq<7I*c
z^OuFS+Txr|_QJhJ$``CHMyR+7S9;Vkvj0Z=-~r>)mTfkc$gmAufNd;^i#HrVqW+B~
zSiV<LUzUfp-6eR*cW2PNL20tPgl}lPYB@gA^G%6zphTswit3<oc!`CKc<hFVd9Xu$
z3DVH?;T-V@U9zu4?S2IZ)$AwE+kWU)PP$zzu^)|^lYC_tOJuKs4dpJD$X)}9QWs0m
z1-N#ELU`Ddl_ktJPxi#gCwJXo5;rBUL4!n*o+(^|rpOB<{7lbOP<+&fNPZ&KGZpH>
zPoyM=f7mY7=^B36TTTP24_lfrJD2srL8U~Z+WVyBg#pN*o<1o|uI^klQ2klsq<O;)
z{c&h0i%^)`KP4Bwa=zyDPld%E5hRsKVd<n7BcUn=*x;1XI>9__NU>SWK24haD!_5j
zD3lwVlA#>Lq0it{O5D5#3ADi}yzcih2Sd%(3?uXJ71b^R?e?l&1R9CesZ=|uEsezL
zRELiI!&T)J$JMYdC1%%(8W(|<i5j;>G%#yYGU`PUAk?J9%j{?nR*8}LRHk`z#Yh){
zj+#fh2((CyOv&v!iU46`3NJL=&s%}c8^t=N%m*t+xd`;7lTj`LMRTK4GEG{}7l~0R
z{I$*J^tF_7isq)+t5fD3-pVO11_g3cTnt(yrnp*AAUB1yc%2rBaylrUW#3n74)Rpa
zaxrLSnB`*7N%1UK4_X;!kskBu47Z$4iWl0+#^wU0a-oYsf2_06#h{bog{iPO%|{tv
zEKK3%-s@t7;2d}f%WY;3>b}H<pjVQYxDa&ddr2xR0-JJv47?<DRXcv`yqqpSE>9^P
z6D?V&nVDceHZzmm!ElBc9ri9y$(#9*2G;UakqEItLY?I)testWi;!MjnNqqWS_`Z{
zHaANuz;LiAXj_?*0arOcyj__}w3ma8HvB77ojO~Oa4ekN*0B}M%||QhTm(9_t#eyO
zhqiU8ut-jnD|BdEmugkUU+yobtCnlnZ(Er6SFCXn@TCTIjf+74u(Kv5cP=Obgf%JL
z$fu>JoGxOnWk*_=9V^zl2q7S>brI-)a@M9~OpYQzSewFM{m}oimD4TF4eWO<&Gr==
zTm<@moDD8Q7zi6u@@@r+0AWKaQ)<1)5paWZGh5rze5qoyix2_AW)~p>gw1X%B0$(o
zt$3Ov;0ylS*uPtu&s1!45pY#r-IkJh)p8{Ygl#Et#Sm&ofv_#rrmb}!N5BXFcd~SA
z^MQ(;E<yox*y-v}0EC@xD+++HlUhNkrg8=U53q;LZEfCOxyMB)1i~H{p%4grQZn#G
z5g_bI;R0^880s<P&sgU&b9iOF3lRfEy$cZoM14wbB+8W-AnH@4jh$Irgn-62%4yaf
zb}@>8aX2O8xpJil7>83K@k$m*U>r{2MlH`cmMi$=;c>R1jk&JdaTfyVZS{CcUhjYm
zAdaWxYZf2@aXf|BEEZ#124mobrrv3#uf69g^IG2%_~}fL1T^WLzPvgl0Mk1yLv9oU
zOz$){le7~6iJd_2bmP8hku@WR*cbIl<HOaItSMKL2tLw0S<@K=lpK(jt3F7e4@k>o
z4M?C5NF!OZTbR2TA1+8MjT7tGiPwy4n6HyLsVf+cs>M)sh^uNbz=pW076WVusfw6d
zQQL&Ik?EWX_JL03$DZKGG)`an-z&ADHGdSdJDdF~M>)`7LeEiYIW$26dQ`elBu+pA
zdQ=+e+n-3!Hnawh$BkL@bl34N1m)(&JK8~pgwpb5Dv*E}pGI<eKWTSWSeus4nP<<w
z*4*dGpO!{|gRfDkSCMiv*~Cio$+DSgd6)twpk}6vMNSqZpk}7A$D>&7DpF=HYtz;I
zeb>2;GGIcPxsEa*NhmGXe2_qxo5q?yh+YA2i_}&+X9?Tb)f^aoKaCv0Zvfnubg|P)
zG;urspW^}7nO)04i$DZV0codYAOaGQb{c^Q|DWWxq}5{f({<+7^2Kf$Qe$yizO@Y*
zlv$ichU+nC(JrhlPvh^#&vr8(EnH4okS}TnEwq(s<+HS!c!KNEue*6)6*xi<JO}1V
zM-Py|TuFM+fCY&GyD}a93<H)<jEKQcj8>)9y0kbkl020ABrQ*jBnz9?Pt&w#CBNE^
zn)G=ZUlnYeQE$HM-tKHq%1p6;U2o==f$gY6P5eA953o=Mu%D-KfJJ8#?I@&M$KJc%
zy!okhK;nxKm?*L?Ek79x5=GXf<%K<vh(6Y(o8QNSSR#4oxGvq|ULHD14uy{E(s$j>
z=U_X6*d*p)2M`$Bo18fa64h;T<{(He>m*FuQT(?p%@d}-1Hmad0YPF^ZF5EyNFZ%<
zCLl;4ZKDZ@dksE(r)Ot6=bN<n$`~zJJJUY?r|v#{hX*&Pndc_6JhdyWi1$pugmHFJ
zyRXOo6Cd6o?|sKj=8dU6Y54*Gn2_0%Mg{<v-5~>NFPn3dd242GTD~0vCUI$|O`sPI
z@ac^M>74Ib{AP1}^gtS4Kf%V|7bX=B0=M)ptmjL58T;?eW)Tbi%Iuf|mxsnA1EhmA
zP4MkRkkIH5`~9!Xhf;^qa@PzdWDcdV3&LcC45;tej$fI-PkkpXPE6vaab$KAmw}m%
zvPW()f0a6#mPc=4zVSUuE(YI9MG@HjI9qXxd41-%i$fdU<Aj6%hgQ_9!`j(&&f9jQ
z9wz=O?=1Nco{_$q+IAt$55C)jK%ZT3#wSR$;zC+(Z9qbq3u$a^>L|v%n%daMHg7jq
zdn)^6WWR%p5!5Fmy(37H$`p$D5F{}AWbh{&%jmuRtEsij&cD;_u2wP^gCcpBk^2S+
z0fS}aUrvJr2Fqaar#0kiqDE&#!XE@mj?Tz61SCq1&d4<cB$su@@6}|vi5Zdb2f?Y!
z?SN(RP_A`&3Z#h{xz>RM(!>nLZ*MYh`>-}Wle5N--)|~PXnMxT3iGxn^Ulf$^MU~6
ztc;xgAOSfmBh3pEkh3x{FTV%go*KQtKL4Qkn5SZaV;XSLzy%qZUk6E28To!TNMJ0;
z;9F35kx6Y&)?LU(K4iXHxzI%*<1Wm|Tdj}*!oo~aY_359VPOWFYyM(+dm@+HcRp+m
z^i(c)G04ozGcv;pAz&=e1cj3VNrf`lR8a@DCo8WM9mLxF*3{apbovL6P;jNwKOj+X
zWya~B_LPlSE&B%qa8|o2P*!ra(?56$q}5LUfCSQN>K{Z4irOKpt<U7_V{boV?ux9>
z(6<6;aqfWb(Kcn2t*rWY=HM#)5}p}+pl!-X&kPc1n=<lh0Z1$qn=*x4Gh(42245(?
z%&1#3Vxf>cl-rz<3x#B1q4+983k8L)9mx7SGRobFn=)+7qvl;tgAgGM9-)OhoEC!Q
zqB4*N3G5vic^@1kT>p+t<}Q9hNu)Th*^$ZKX>Asb#c23CgIf%rc-TFU<F-d@Ki(|w
z|Csq!8Q4zCNujSZ@{<7__;C0-gEKz*9$5z(4fX8y$Ibh@*1LMrV5oP7BxHb4pOJ6t
zgQPN<j-9MC^x8wmuy!Gnv)JDAxOrL)UC7{FB<_eh(oAU(Gllj1gQ<0BaCE{WAT~G?
z1tbs~Xrk1TAL<B=wf<S<^{kp0&XzOdc3XeOyw_6&o@f*#0MI`xZ{mOiK>w_~i31Yd
z**{zIdRE-TAqI7)Iv^`=;z$ncHy|r-;z$;N24ry)2QL~y5eN*<;wDZBzlpQ$k7naC
z(2f#h*}++P69>X5J2;C2r2pe(K~=LB&zjGdRl7yVl+{_8c<abbS)E1Vtr;(Z`B1}F
zJ!`gjvL-7(;n<PSsG6*tiXeeola;4>ATdg6vdNoyfIuV<5Nfi;H}L>LawtHk$zFd0
z-+_0eSvZp2^(V7S<;biYoL~|+E8QbVXgV@0_lO`-?Z_-L=llX&M{+r%*{6RpU#}SL
zLQrOAv<pF*nbFy>$PS?hAVz1A9il{9N6O5MWrO}~wy7NJB2Z>#tcyUInX%ch*cqV+
z5XNTV4EaT^juafdW1so6`HrXUJFbl>8S_q7W-1|sLhod;M)TW89g&RDW@eRn_7~5Y
zxP645PIpoQW@c8p2*{z_%xtuf$C4m1re<bi^Dw3;mLvvu5wo)D+^ldBl817$v(iOK
z7F@)fEV&5spB*WevmncFo3qm|n8|Vw;?fWvL5T%fxxRq}*n+I%KRZ$eXVJUY{l)bB
zW|3<&O5iMVjYbKaMOnG9p$H%rW#Kp}FvEwvmS%I-WJO>`yZEJ9`6bB+P1t2wMSMw;
zEq&3{QXs{LB=Hb)VObV_<2HmS5gPg{SpAFU9jO&4La{6{A+sWjy$SA%fCROY-SJoR
zuGGq`4A8(NZWaOB!(0Z+eZm&~)%<PhldKH%B0L=WB%3XjIG7f7?CO_*Q<s%*%SL$q
zzb=bYDtwm!b-@Iy*~FL3PMOtN8B~Iax>jcqRL;d+K_9;4wKJRZy?y2-vyC^rliE$M
zokpqMyQtkOp40AZ3=(YvEgB9IAiJpH$l5~~5BIR?|1i6y_GIPtDlj3lhbARbhL8cZ
zml^*wA586a8U-eCsZsZE88p0}{rjKheW`lKI8om4dNR%pTm}u_&yM}myeYLmD_=W}
z@`mrHnMko>lp21J-TjJred=IV#*<*8u7g>`lUR}<gUNb`&3(muAay7!<6AHxb0~}W
z7Wop$U^;%s8vV<>J@uU{L$95FM>3eQkimRA%7*;QY?C@FM=UWRbCi594qQMY*Lj@n
z_?OusbKJELe;u3b^8rQW`0CiHY)((s=2i3k@Tn|ru2DY}P(Pf;v=IFO5~c>t&+h0c
z>N!pArq2);P(S?4{`hb6w)D@AE?`3DXVT?ATn5znEZg*N^S|lyPKV;#U!08&?aqbJ
z5f`)Uh5wk>r!P7d#8<u`bdfBG+qS3;J<*V58~$V7ooUF*w~fJtP(!w~k#&q>l1^c*
zcWKVMtlNLhqoLlVh)MWD*ooRTu#|_4*MLBW4J?&T2PE1tuvCVOAfe5`QmllO-t0t;
z98!t}zP0#hOrxG=;|efDJb}l+8d54<Hb^cmZ}Wfz){s)Pll*NbYIQa1-4p({+C`wD
zQC%tzJ0Syv>e9y7@VzNWAXJy)atHt9NGBrSvcK<X4)K(~RVo)Ka8c;3Qn^5ZB&kyL
z^(PdhbRyG@W7B(?b(Q1Xdg&ZtT&YaVLIx1yN)sYv1qq08r3hKcU3Q`&KCx8n2SA|Y
z#8T-mL89cuQt2;2qU6L<$6t1$=1nOT`vDM8Ws0i<tyWW9>(Od8rBu322m@(KDcoi+
z1ATi9{AOv+F1t%#)1!u#mOA@^Yp8Qqh|awl1Rz&9oeL6>E1b>+3CI=HxpY_N8nX2&
zmKbREC|l(gp*~zyDibS^L6KFZNN8Ngi=YqdSoJ`&d$&5L9oO(%Ky^+#KmwtzR7RB`
zflyb9sPY4aL*P}6wWZ1?J2c4b;Hkn-vHV@byK!x)T>e0!+}ctZA%n#7x3;u!Q>j?~
zh{2b?b*1XYQnCC=9?GpRmCK)GVfouo>MVcP(1`e|^z!mo&;cCu6Ifyq1c@em<#Z}Y
zKz?<(Q?H@%uv2vE4IqHF(=`S~F*{vj(D2ylbSi{_w39j&7iiVaxX@pkbDG`uhIxDF
z>r$hUn6I6wOY3Eqf&gH>V<nIPtarK;BmnEFOaBhzb|%vwWPcxO{<G|$TZFpwV5$6f
zX~>|+!BV_cK*vj+X<8m;$!hb#vcsh^=LaT=94?g~1O|yBhf5Lnz~!R|sH1FrwRwH{
zQMVSFg-1)}2M!@aLZ$HBG=(~o$-kFV2n4MCy<=^VDEYl(ZICGW{bg%+CTpLP)&>Ef
zQ;xMk@`us^fdtYi$J!u)bc(F~J6O955*DR7Guf!&<|CoArAAX>?Ji{P3&Ps%K>+ZA
z(<qPtyx>?HBmggvwOgW5UC2lcrR=L3vsGDxTZYWt;LIQhp-cnKpgVaPn7bD%d(*tT
zyjLSR^t*6#_i7}22;~2(>e{2Ls?L0Jyt#6YV+$9G5cTHD$vJ0V9ti{zAn)+DBkFX`
zW4Tt_nH17CBMnG!F;iz&+Ndi5WJrKvuP%^cge6QsoGEyb@K6Q@oK|@R3=lx%S<4_|
z0<qM`{C<1y!?pk2-*>+K?Y+O(-uImSK#@il7COw&X2papsrHrjQLC)QHOUuLG_}Pw
zeFsFfEv}g_1G12d(drKjyJ8wZrrwhFoXn{*ErYKlWLgF-Azkw!5@jGmx)_60=oZ5g
z(U)DT&5dMlNbkLWz5x#)22XS(147Kpu8Cwoh<VvHkqn4Pe%T$|=ITf$K}GUfH}Z<B
zBiYbU?$@q~WJ5wEuXDplE@pb&km;(_Eb~_5O~3}%1TmhW6&qZWnE@efgBxb%V$L_(
zU7eW$pq}=$TKF%ZJ*^i03ut#uW(G4PwYzYu%N%t}V$rQ`#sRr*jeTjrR<~b5`&9}3
zYP+jOT{(KK9UZkjR1h9P;C9yxx_}V4-Gy7xMM~&aJLIgj_LHSM!X|-;ChZ8D1V|>=
z9Q+Ij2|HZOJNPBBgfZPAZ>+U{Sk{r2KxK8fW>YVCAfdzc^mk1_Na%3Q(!mm<JzB4Y
z04TX9R4gD$?g<qOsCYxgmeAAo8^r=BWPBD7z1W}b1^sP*s8~FOr2SOvj_*LRrLkzQ
zi)9#tU$IlpfL=G8&y-TLeOj~Q03fn2R4pJx_JyhigvdUs_P5+2SISNwO>Nn1zc;Ax
zXs&S;P)W`mI$TXV08!{@E_OPpHCCliXY^FAbuKrOy-gnZnY}Ufcl+!inGK+6j|T??
zoXRyG4+sILa*f9W!sAcn4nCKwJ)Q*R@uzbmXLGg38yd=W=NgYUBzXLpTzdSk2dW-m
z{A~2B7raR7lmE8Y*wp}fI##MOLZfFg0w5aI=oz;Kgz!cW^M8Ju07Ro2J@*Aqe@r6*
zje@10_sqw%Qkt^K(-R*6JZtjq>WsE)@=SQ)DWo@fp%;`gYcKV5cmY7r(sVnSE|#X-
z$#k(a-A<;9r5?QC8pEqB7H#!#RL{c0_8<DUdf~$7GCF~j&m6Ja@+9`QD9eEeQPMMk
z1qe~ngY~;O6)dBb*2t=(_Nlxz=`u9_8qd~ORDcI%)_6GQ`z2ilv4ne&kJ<m0w+>r*
zOg)se&bwEw8-rZhd!2`MV;t<th+frdlkrX@rB_3(;SmbH8fpztv4&bJqrx{CtpO-x
ztP2ROZ3?vp2uYhltpP&PCTgt>=iNlgW6>>M#=EJO<Mtz&{kM4G-qLcaZJT`OgxyxO
zEmQ%BkhLvT8z5wDquRD|>?lWPqdProuNTQ)Yw~_&m)+O^n$|lwAYi9w{2vekc6!GD
z0pV&py}^6oYJ7D;g7W_kFS5te{%>d~x63pBZ%FX}-CmgS%bD8tdEc13fdan-NzdH?
z(Ug6mh5;dR-(9~fCp@GzJRJZUJ{0;TAT)d^)G#0<9SSuJsER_v+<H_Ii~i2bc-_y;
zeoQ_-)*dP^ow7^4-+4&?ywI%zYsHRu)^RVw8v*VG)@#K`lT%OIJ7yg9BGc77GyMqN
zI_5<te}jVBI!Ot|b$M1d#61^EgHcG5Q@ib-KYH@d%JN_6DGwLZb1j;ZPlKHHa1V1R
z?L*JH2x)kaYZ`|fN1E(+#_nu5@0o>csxWo_kr#P7Esk2e;NeEvP~0WY`aQ()t~pf%
zNy?D!Hi6o_?3tV8G!x`r@yum$ngY33y~raI?+U)=SvMf~A49=7{)Z&_+*!MJ-2Zuz
z@^qv4XZX5@o2Bno$(Z<rRjU8N74-ccri?Y?@Ef-72^|;^t?LOR01zd67y)V}Mg@JU
zPyYU#y}Y0=U4~BI7bXtypiCbV2hX;wpwjMmRt&3*W*)PXWjaTLjCw)Wi3AWb?u3a1
z5HjvCk$lY+f)#+#6+Z6Pj-9u^%BsfCPz+slg>O<l_#kG5Z&E!V#H{d5ss}{;t?=D{
z_jRf#L8tnaK2rUQTq9P&)U!VI%oY3Id&<_Q>tWJg@0-suU_w3X{r)=E08!6+AJY!z
zy$W{iHD6E04u6ci_nL2_5|2>uHQ$UDfGGHyALhLZhVT|&j}`!E%9eB!_&0e=x~rVl
zZAo{P)4DA_qH+VTrLBxb-}A9Yy6T#}KHC31AKP)C=PUh6+P*V&>!$r;W?rXn@)oEN
z*6G`7O)r@stkdU763qRTG)|Y?*kf<V>q?iQ*}Hu64;eft)8%7+zgSlUyPr!v*K5C&
zIp&<N7Y{=cMV<2p>x)GJQRo~EbVyayFC!Mc=v%#V!fpHDw=eqrzJ+U$*#NLzmfz~L
zzc=c#AJM1kg9urd{lNl3l0_ae`6EWDg}{}x<5jt|&n_#t>PPgT1|o`F^}nOvV*{ed
zRUa#Sc%xD!?e?)BDZq_N&wOqVlKnro^GAW8&!)v=6#m#BqVG)uMB$Hpd@SXnf=Zh1
znw;~wJ#ExAKcZH1lZYbM{DJx#Eg*_q^Rb4HtB5N(^}a4Y{M@b>eci_udAb{%WMB8=
z41M;BlkDq$X}M7Z-u&J0BZYE6pFLR4{-Zsy08qPOrCK6?!ylS&it>f~4ZmQVTIO8I
z7lJoYG<&q}-NirJK>-M1VZL?0nJ&z??l)POyWA`Jro6|GjLELjg`d1*Psj&Bf0x8#
z6z=gKP)ELz8-;uPywOf8H*Hm6Z+L)ZHmN&y%RMoik~mbYDy@PqMw<d_k$mbayQBfX
z^nQQPA+0I+wze}Mq%{Rtpu!0oAfmV_$X*oak4hw{Z!OIMRupp=p`pM5n*)3-<6$#~
z#Lq9yL3xFf;(%U7XKV?q?`Chb5~+b-+Xb252h^zr4`I=kz<kXGRLtgBVL&vhCBXgz
znh6kwX$guR<!O`(s>kDJIE}g{G-lQISDZ-Z>{aO+=y0n7lf0@_Y^(~*zfM4iSQX%3
zr>=o7eOCoJ1*Qh|Ib~Il7~_1+rDau2k?n!?Mi9yV#F0w|^h>0Ymh)6r1BhXdm@M1V
z^)Y_h)Acca+F74gGm~X|kn;xA%*hHW(36$TL1b&7Co6`Aa$5p3SurF`R$dP{Svh|n
zUo_)#hBt$Z!}2fsIUmN}46+_nTOkHB8KnYiguXHh5DfxW(U}DZrKJMAZQ<2bgK4ZC
za+>YTi0=q2wN9Bt@azb%PPt0)0KFwQ+s@?pTY)v4ngb7qptl12jp2)Nb+y7ydB5Wn
z#&-r*p5ftZ=AFTq0xtgq50XcR{0GM=igyH-3V0I1(-Gv4c5vJTAe6aFZgZTH_^xza
zeBr-~b?NrNg?7vP??Zcbr|aSi|J|$$mjXi$vcMi$cb`+9vnMboxq=9uJpnf3;UHTw
z!T1MKzrD{nnwfJTuvCPT3a$eIj-u|wi9f&y@%K|5_d9=M<-DJ66JPqj&o(`YV4Q>x
z>_NsEncv@eB6cjm{|LU(oWxi>9#|j97VL^>z%QK^K!@6o2SfGVY(N<Mcz`$UbP_-~
z$?+if12_q18ziV$JQ2pCp`ZmP!dNsU#^MRa;w`5BNi=VFV0qbBG81y<0O!+kAnmw#
z23>cDjti)G&7wX)w5dD5#~PfqY-QmdjPpUp=kmFj^GfV|kQG<H_5gkDBiKOu8X#l<
ztIdyDfN0@I)Hgq{Jix|WkP8Po`SA;ZrM4WA2%ZZJdHM)$n83CMxql#h<YHQmqEZh2
zW`hSUyCjDUaz^A_3athrN?xMXny^v_OmMc|)Q<)sbCvZ5mU<CED!6(ByojI^142}9
zP&h*!cT0#S_69}M`GFjdp`crG;}B<5{8s3&AVS0~I&7WdfivEgJwu#%Iky9Aypc<1
zyd4ymI4fZW2!c2E$;P41Dz`7)7J6eJ+w!;Ypvkf5pMs3#A~So2`~`Lq$|tg&GVf0T
z_L^`SJQ-8|Ukd9*5#e3x_X6uFKWVA|%y#}Yv#3!-CMkc>&mjDHfqRhYL7IZTz92B?
z=P)^$uGuWC#qxoqQ`7*6egNy!`v9ScX7P|7VgXUMSzs9y9TX4_+AM;_LOUo4%0U+i
zGguf3+OSBN!NQQ}po;_?RQ+k544;TD!`AFpiF?I9XuwbHop^u-EfZ!hDj*uPObk<*
z1udX=E)$4$-5~x4Tqef0qCp(1@Ei?_q52jP8O_^YtjH8BniUzZLcxnNan;FBYU>xw
zuU=3)w{BW(&79d&=g*%zKOyJEouBt#C2$m0D@T|q^zYTFJ8@@V=98<1nb?7f#;g|R
zOi4gAX0^b)nqvwe(#mQP)7RS)VmhoiaI#dF7K`$2sUIYqr!pJb(qh@iHep`WPEmbq
z6L?Xp#d0ug69Z=|i{dH8k}^mi6KE*tbDJ0&)~%ROcblmAOJ^Sg8P||(6d7BghTmi+
zrqtHU!eI^$io|WHT&KNJn01Up*z-+tOs<pn$R=S<-UbokHwk>YVj$we5S(@?tg&)w
zp);%jP-C6_0m1wqv=Kit4q*(p3oCC}RibXLK4IW{HS^}qUyztLzh+j=?3((-f}hqT
zX4lrwdv-xhLd;hW|Gsv1;%Bw>^|f_B$$z%)>AJZK>ypYtC=k^_qE0qL8q|o?E|4Yg
z7YUEi?ajg(Ic#|1$F*~6W+&!8yP&=n_hYk`>N#`fE(9&CZDDQQ?70g=!OQ|Es?WrR
zAhdk5z{(B;4&?Ix10D{`PgLJ6Up;4jLrwMUe@@i=6a1<^@nbmCf}hr+OY^Ji>Z@nb
z&qC>(Ekl3`EsBHmEetK3f(eL}^SZFau%v3|H;U)iFQ|rIAhT}n0#kAIkLJ{bVqH$8
zQB*HEg&@d%U0`)UC7gdME}sz@DfvIbsfhiTz$zvtfvHRa+l2KdlR#+$e(9Mf=#aHd
zn4|Imq04OoulpHofQYtjV%VD|{7F#Zzda0pLqQ9+hv9EX4FBy6|L?;Wal_0`k+BcH
z_;_N<TzM?%{B>-n$jVh?%TRh?hp-Cu*aC<)0qaZ-2<aUH*^_!x7s~9CzZ~vNjPDZG
z1eJzC1kWykFT9)+45bI|mM3und3?7psTxF51yVH^9N@ke&Kt&!a3;m~2&>4*p$F^{
z6N{Ax45bI`l`BU$74f~ojAI~zXRp9G#uXbwX~(za%@NM{_}juNHF9W^w?##zS^%N0
zb9qNj8|h4S-%0au=y-=bPs480V$lO4<A0%{AIQT=CtDsG={y!YAn<{f2AoC%9u(HQ
zI*S7$X#(rj^ng&=K`~7KmjguS4vG;Yl^FqH#)D$iyT*(pC^H@k&1fiS(4o+bhD0+S
zq8UGBPQm_*!y@BD**(g+(f_c>%25W)rU8!#SyAW&xd3R(5n-u6Gg*L;dPLx^A#5-O
z#KU6}mw}YUkEMBNzGLKhSn&XL%3tI=Iq^=og;FW*f+1B*m}q#=!{c%{d5#M+oy}GO
zd|Y5Uo2%r&d?)0ce8-QU2u+N;T_EQKP0R&A*)(65EFbO6jCX}51`#}6G_h_EbbV58
z8jZS6hVF#xS-^9W?vzk+Fz}y}S4KO-;-`@NOq)6IpJHP46c6(HY3Yw~g7|49Q^Uha
z=xKpvh?)m;&~EuOdAiem=M=P?eSbvB!N18f@{KW$8$Tl~J;TAt2jDp)unSDL87r*L
z%9~h<96u{8wSx_v<sATL1$MA$IoJbtPUaOjZsJ_JUp(UfoG31JX2C6|$D$WR##JGo
zDR8P|7X;24r#nukJ6;mj7443IP!X^``vwqJz9b&jr^y1sSeKZgm{kDbj+cbEV%(7g
z<&Kv_cQh0<<Z|eahD3L~Om~#nfRcqfQ$7_LeNjYB^F0aKvM*~;>NjJZf646sY3Q2|
z(l>7^-yD^5GxRu6A^avij^o>d^vchKTvF%^&-pA=JE&m#jB3XmA51_!LLM)4Dsy_m
z(FjyU#$bf~6<|VFdxacZ<c!Vf4IKegF!j<AsuU9(^Ole=7CDo0ZiSkEP<iGpdK4~a
zf+Tq6Z6U7|Ib(8fr>moD-saf%ILtF67QG`fzDEBmb@$~H<DGE>@6b;CUowMs`a)P=
z3EA4;8Q%a5LxG?T1&EG+5gG~*t^Xo46d(-sg%DpELy@2i^<`)%LqU_i3=L&SG}M<g
z)EOEIm##D=GhRwPHUXEc#+s5@539uS5RKEEH2*5(4~v~>98iz*cnG=8NpzKwid#`I
zpOlTo&di)eN%I#DMDQ$1@-`vPzaOG87RyhHou%=`X(mM_Q?=qjCzr@yl{mB9B}o$+
z4=D>RN#fKBUYzwPCYi~Ml}TQl^;Z*|ffAR~OpYx}Vm}Yv|52*7HHi}`nlR$j;+NiI
z1v(npnlvXd1EQ+dBo-3V@d2UF)}+58sb|w9D19zZn%T6WpcBiJW;Sg|)aP<Jvdk&@
Ee@lcKRsaA1

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 335a2736..c117952d 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -1729,15 +1729,34 @@ func (RegistrationFailureReason) EnumDescriptor() ([]byte, []int) {
 // DisputeFailureReason — why a DisputeTransaction filing was refused. Distinct
 // from DisputeReason (why the agent disputes) and DisputeStatus (an accepted
 // dispute's lifecycle).
+//
+// A refused filing is a non-OK error carrying ErrorDetail.dispute_failure with
+// exactly one of these reasons. A filing that fails none of these checks is
+// accepted and answered with a DisputeResponse; a dispute that is accepted and
+// later found unsupported ends as RESOLUTION_TYPE_REJECTED, not as a refusal.
 type DisputeFailureReason int32
 
 const (
-	DisputeFailureReason_DISPUTE_FAILURE_REASON_UNSPECIFIED           DisputeFailureReason = 0 // unset — rejected at ingest
-	DisputeFailureReason_DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND DisputeFailureReason = 1 // transaction_id is unknown
-	DisputeFailureReason_DISPUTE_FAILURE_REASON_REPORT_NOT_FILED      DisputeFailureReason = 2 // no UsageReport precedes the dispute (report_id missing/unknown)
-	DisputeFailureReason_DISPUTE_FAILURE_REASON_WINDOW_EXPIRED        DisputeFailureReason = 3 // filed outside the allowed dispute window
-	DisputeFailureReason_DISPUTE_FAILURE_REASON_DUPLICATE             DisputeFailureReason = 4 // a dispute already exists for this transaction
-	DisputeFailureReason_DISPUTE_FAILURE_REASON_INELIGIBLE            DisputeFailureReason = 5 // the transaction/state is not disputable
+	DisputeFailureReason_DISPUTE_FAILURE_REASON_UNSPECIFIED DisputeFailureReason = 0 // unset — rejected at ingest
+	// transaction_id names no transaction this Exchange executed for the caller.
+	DisputeFailureReason_DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND DisputeFailureReason = 1
+	// No accepted usage report precedes the dispute: report_id is empty, unknown,
+	// or names a report for another transaction. The agent files the
+	// transaction's UsageReport first and disputes with the report_id it returns
+	// (see DisputeRequest.report_id).
+	DisputeFailureReason_DISPUTE_FAILURE_REASON_REPORT_NOT_FILED DisputeFailureReason = 2
+	// The filing arrived after the transaction's dispute window closed. The
+	// window is set by the Exchange; a filing after it is refused for that time
+	// cause alone.
+	DisputeFailureReason_DISPUTE_FAILURE_REASON_WINDOW_EXPIRED DisputeFailureReason = 3
+	// A dispute was already filed for this transaction. A retry of the same
+	// filing under the same idempotency_key is not a duplicate: it is a replay,
+	// answered with the original DisputeResponse.
+	DisputeFailureReason_DISPUTE_FAILURE_REASON_DUPLICATE DisputeFailureReason = 4
+	// The transaction exists and the filing passes the checks above, but the
+	// transaction's state admits no dispute under the Exchange's rules. Filing
+	// again does not change the answer.
+	DisputeFailureReason_DISPUTE_FAILURE_REASON_INELIGIBLE DisputeFailureReason = 5
 )
 
 // Enum value maps for DisputeFailureReason.
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 71843a79..128b6786 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -129,6 +129,13 @@ type ExchangeServiceClient interface {
 	// The Exchange records the dispute and initiates resolution.
 	// Resolution mechanics (refund, credit, re-delivery) are implementation-
 	// specific — this RPC standardizes the dispute signal, not the outcome.
+	//
+	// Every Exchange implements this RPC and accepts a filing that meets its
+	// checks: it is part of the core protocol, like ReportUsage, not an optional
+	// capability. A filing the Exchange accepts is answered with a
+	// DisputeResponse. A filing it refuses is a non-OK error carrying
+	// ErrorDetail.dispute_failure, whose DisputeFailureReason names the one check
+	// the filing failed.
 	DisputeTransaction(context.Context, *connect.Request[v1.DisputeRequest]) (*connect.Response[v1.DisputeResponse], error)
 	// Request a domain verification challenge for provider onboarding.
 	// Used by fora-cli to prove domain control before pushing signing keys.
@@ -294,6 +301,13 @@ type ExchangeServiceHandler interface {
 	// The Exchange records the dispute and initiates resolution.
 	// Resolution mechanics (refund, credit, re-delivery) are implementation-
 	// specific — this RPC standardizes the dispute signal, not the outcome.
+	//
+	// Every Exchange implements this RPC and accepts a filing that meets its
+	// checks: it is part of the core protocol, like ReportUsage, not an optional
+	// capability. A filing the Exchange accepts is answered with a
+	// DisputeResponse. A filing it refuses is a non-OK error carrying
+	// ErrorDetail.dispute_failure, whose DisputeFailureReason names the one check
+	// the filing failed.
 	DisputeTransaction(context.Context, *connect.Request[v1.DisputeRequest]) (*connect.Response[v1.DisputeResponse], error)
 	// Request a domain verification challenge for provider onboarding.
 	// Used by fora-cli to prove domain control before pushing signing keys.
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 415a916f..ec722ff5 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -335,6 +335,13 @@ service ExchangeService {
   // The Exchange records the dispute and initiates resolution.
   // Resolution mechanics (refund, credit, re-delivery) are implementation-
   // specific — this RPC standardizes the dispute signal, not the outcome.
+  //
+  // Every Exchange implements this RPC and accepts a filing that meets its
+  // checks: it is part of the core protocol, like ReportUsage, not an optional
+  // capability. A filing the Exchange accepts is answered with a
+  // DisputeResponse. A filing it refuses is a non-OK error carrying
+  // ErrorDetail.dispute_failure, whose DisputeFailureReason names the one check
+  // the filing failed.
   rpc DisputeTransaction(DisputeRequest) returns (DisputeResponse);
 
   // Request a domain verification challenge for provider onboarding.
@@ -5158,13 +5165,32 @@ message RegistrationFieldError {
 // DisputeFailureReason — why a DisputeTransaction filing was refused. Distinct
 // from DisputeReason (why the agent disputes) and DisputeStatus (an accepted
 // dispute's lifecycle).
+//
+// A refused filing is a non-OK error carrying ErrorDetail.dispute_failure with
+// exactly one of these reasons. A filing that fails none of these checks is
+// accepted and answered with a DisputeResponse; a dispute that is accepted and
+// later found unsupported ends as RESOLUTION_TYPE_REJECTED, not as a refusal.
 enum DisputeFailureReason {
   DISPUTE_FAILURE_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
-  DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND = 1; // transaction_id is unknown
-  DISPUTE_FAILURE_REASON_REPORT_NOT_FILED = 2;      // no UsageReport precedes the dispute (report_id missing/unknown)
-  DISPUTE_FAILURE_REASON_WINDOW_EXPIRED = 3;        // filed outside the allowed dispute window
-  DISPUTE_FAILURE_REASON_DUPLICATE = 4;             // a dispute already exists for this transaction
-  DISPUTE_FAILURE_REASON_INELIGIBLE = 5;            // the transaction/state is not disputable
+  // transaction_id names no transaction this Exchange executed for the caller.
+  DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND = 1;
+  // No accepted usage report precedes the dispute: report_id is empty, unknown,
+  // or names a report for another transaction. The agent files the
+  // transaction's UsageReport first and disputes with the report_id it returns
+  // (see DisputeRequest.report_id).
+  DISPUTE_FAILURE_REASON_REPORT_NOT_FILED = 2;
+  // The filing arrived after the transaction's dispute window closed. The
+  // window is set by the Exchange; a filing after it is refused for that time
+  // cause alone.
+  DISPUTE_FAILURE_REASON_WINDOW_EXPIRED = 3;
+  // A dispute was already filed for this transaction. A retry of the same
+  // filing under the same idempotency_key is not a duplicate: it is a replay,
+  // answered with the original DisputeResponse.
+  DISPUTE_FAILURE_REASON_DUPLICATE = 4;
+  // The transaction exists and the filing passes the checks above, but the
+  // transaction's state admits no dispute under the Exchange's rules. Filing
+  // again does not change the answer.
+  DISPUTE_FAILURE_REASON_INELIGIBLE = 5;
 }
 
 // DisputeFailure — a dispute could not be filed.

From 4deaafa603618853319e48e9a7b9feb4b7141363 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:45:48 -0400
Subject: [PATCH 069/164] Refuse a usage report for time, never for quantity,
 in the protocol

The protocol said a report is never refused because its quantity
differs from the estimate, but the admin ReportingPolicy still set a
quantity_tolerance outside which a report was refused, and the
rejection reasons did not say which Connect code carries them.

UsageReportRejectionReason states that the reported quantity is
unrestricted: no reason refuses a report because its consumed_quantity
differs from the estimate, above or below, and a quantity far from the
estimate is analysed out of band. WINDOW_EXPIRED is the existing
value for the time cause and now says so: the transaction's reporting
window closed, refused with failed_precondition, never used for a
quantity. MALFORMED is a report that breaks a field rule or cannot be
read, refused with invalid_argument; a quantity that differs from the
estimate is not malformed. UsageReport and ReportingObligation.window
state the same refusals. The metered settlement on Pricing is
unchanged: charge min(C, Q) x R and hold the excess.

fora.admin.v1.ReportingPolicy.quantity_tolerance is deprecated and
ignored; an Exchange must not refuse a report on it. Its bounds stay,
because removing the field would break the wire contract.

buf breaking against v1.0.0 passes. The generated code, the
descriptor, the SDK types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 671079 -> 672898 bytes
 gen/go/fora/admin/v1/admin.pb.go              |  20 +++++---
 .../v1/foraadminv1connect/admin.connect.go    |  14 +++---
 gen/go/fora/v1/fora.pb.go                     |  44 +++++++++++++-----
 .../fora.admin.v1.ReportingPolicy.schema.json |   2 +-
 ...dmin.v1.ReportingPolicy.schema.strict.json |   2 +-
 ...n.v1.SetReportingPolicyRequest.schema.json |   2 +-
 ...tReportingPolicyRequest.schema.strict.json |   2 +-
 ....v1.SetReportingPolicyResponse.schema.json |   2 +-
 ...ReportingPolicyResponse.schema.strict.json |   2 +-
 ...a.v1.BrokerTransactionResponse.schema.json |   2 +-
 ...okerTransactionResponse.schema.strict.json |   2 +-
 .../fora.v1.DiscoveryResponse.schema.json     |   2 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |   2 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |   2 +-
 .../fora.v1.Offer.schema.strict.json          |   2 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |   2 +-
 .../fora.v1.OfferGroup.schema.strict.json     |   2 +-
 .../fora.v1.ReportingObligation.schema.json   |   2 +-
 ....v1.ReportingObligation.schema.strict.json |   2 +-
 .../fora.v1.ResourceResponse.schema.json      |   2 +-
 ...ora.v1.ResourceResponse.schema.strict.json |   2 +-
 .../fora.v1.TransactionItem.schema.json       |   2 +-
 ...fora.v1.TransactionItem.schema.strict.json |   2 +-
 .../fora.v1.TransactionRequest.schema.json    |   2 +-
 ...a.v1.TransactionRequest.schema.strict.json |   2 +-
 .../fora.v1.TransactionResponse.schema.json   |   2 +-
 ....v1.TransactionResponse.schema.strict.json |   2 +-
 .../fora.v1.TransactionResultItem.schema.json |   2 +-
 ...1.TransactionResultItem.schema.strict.json |   2 +-
 .../fora.v1.UsageReport.schema.json           |   2 +-
 .../fora.v1.UsageReport.schema.strict.json    |   2 +-
 gen/python/wire/models.py                     |   4 +-
 gen/ts/wire/schemas.ts                        |  28 +++++------
 proto/fora/admin/v1/admin.proto               |  19 +++++---
 proto/fora/v1/fora.proto                      |  40 ++++++++++++----
 36 files changed, 143 insertions(+), 82 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 7724c0b2e85245761e76c988b3c4ac29cb13c0ff..6ce74e6015dcfbc1570c585efbd850732ba8b35b 100644
GIT binary patch
delta 24526
zcma)k33yaR)^_(zchmQxlH5Q@cZb`zyVDzFVN2K&LI@xzC^9;uqmC0HN=8Un#c^f~
z3K-c21e^jC2`~e)IjBevA_@*F$|4AUQ5;YZH&E2DFT(eps=8cezW;x|kLTfe@}67u
z-czT}IknvC`ualRiK)qnlbw^5$!U{a>)n0B%Dmp}#<2Ty=bJ1MasRn^kfx6wUs*G*
zdfe~t8&^A`YD{I#(5mb-)0uGg_Py4>rLOxN{NImdN%4onk?l+!i@1lRsb6%_n(6L{
z<JnZ-xZCG-7N_njbl>Dm-=JtNk3(_lX+_Fi{udOsvAw%o8&fr^cFefyng=zO-N9Yd
z(i}Ius(Ot1aOH^cRp!`Qf*Pyr;EvXrw-2u}hgFRlQ#G`5T-7l1e`;t}kJZe|p+l=i
z(euihVP^G%HML`^hIKb9&GBO^AFMLP>rl|Fsd~6-4DbWv$D;59wPVccabvHN7HHaa
znw!)meLdOQbuj@IKwn4eVH!~Bue7aBO>sGNR}aU{Y;y<q)*E_wTWQ6b%jHlUdRi%)
z(b3(tu2k_-HIjj|RMjm6lG0XL7V-kMzD;YPd8wqgUcCW=?7>>Prdk5%P}-&ZS_x59
z+^Rhd6Qht*cU36;T>d8%vtJe340D;)sftc+#d&Xq(oDXIT2|q0X(3Qlw9eM9=NdY_
zpz!relkadsjWoBO*2fjQRsucxx{})O`AY$AVoN)_|8Un$3O61UQBdcm<{9!8)b%&%
ztu2HX-sBHh2+h7Jr@v%ZsM++q&5hbFvMpLP*fE|xT;$$$!(eY~tpcxfl5K~u+lt+N
z>xM|%LWY+Nk+uZ_$q;E<AiQLVv@IcS+ac1nQh;U*k+zi*qJV9elWm=3+dGxtxcp2p
zhj7<5AE>TMwd&$-?X0^~HXNnU@H=J0fuPf!dWbg_2!wa$M!BVdVCg$!zY&%uSg-2P
z;VxHuZVM?vm0!CGHC<~?Do`2M4JdWDtNS&wyCFoudt5!P5kltC)9!WMqRn&h1}M5~
zxH7`!pW-t6^c_5;Z$<g-ef#8Dky3ytLvZkz7*}hKtr|xWXjZa+b#?peH1qzdaTBVl
zYPhg!?6~TYJQOL^sF;YZYhp8xM`5KEcD3WjjjbLAXB=lvs6?#F=qoVG|4-prXUAvv
ze|w*HHEt=g$JdO3YGbO0A`3tPb7a-HDkK3*3AAb4h^n#X{l6C+<407PwKW>0fXaf0
zI}{8?P2?j>bt}!74^-xjF&`LHJM!NePcN*jsT}cp$|7i=S^EI21cR`{qdl#AiWWi%
znRsf+bf`i~;3Z`4D)OKaJYQ)%2i;#gzGfI$$5gRh5pSRlmK|wMs2z_o_m8Qne2Bk)
zLiLy`%^X@=Gj2@f&~YMN!8a6_o;Lid8&doYzv_k*f5Y`$>4pkiWq3Rx-B5uW4o{9q
z1N0D$7f-8Qt;h!pIIdTT?02rXbV~|RqId|Bubtep(sb8oWgH81cYj?s`l=3;H%2#4
zmv2pj4x=-I76QTOa75~m1|3G{j<Z4`4R1(8bH=!$@||3QDq~&wnue?ZSDxUgbK>tb
z7d38zH>fQnT@;ma!=p-ue+DbBQy*u|OWdv7J}Q%h!jr_K>UCTTAW%NqB3&CtHHqgj
zHn7C~aMfc<3t55!__1`6Dp3OEA4967WDbO+@|drTCu~CXst*ExPdrv!X}afer{gK7
zQ)><#(RkP6POqswOG>6eN7rQbcuzO$gumSYPH0F87!XA#JE5Y4u<c|gbZpBj;$b~I
zUh2;KUA+@ZiZW2rRquqB5~51IQ)cuuQWFq*rek0sNP0pd6?N&JX->x+sVL>!X-;oQ
zDC#0bXOg0e@@HBqLWn{$EfoRrzL})rpP(XjhwEu}bD6vDcTYQ&46YM|Bz5XylmSGQ
zr=5Wu>nT)x+S#UptB9vU#iyM{Z*EJs?wRLwJS$angKD1B8x|_MNkt}XiN9e>W+@7Y
zqRdhh5N~CqXh$fDAyIcNWS4unJ69~U6ortamZE^Dvd~f#5Q;9e6eY-Qxe$u7!cwhk
zYHhi@eY$e$aO$($+~c0p-gzN|W<);6w)%TdxbfeUy7xr0dCxm9r<!JXf0dT8fQFV_
z(&R+8Qs|$iu)Ah^AL)gxD6_`6;g#c%55`nKjJ#F(0MeNzlR(X|+6m^+5w(<kkXEee
z%!KN3!%g<m*KUKcBkmiJxDyq%H8oX3$021P0Y6Y#J)&yZeKeP<tr=E5uDZ4+i5x<n
z13g?^k*m-{u(^m*JmqTUwzUewG$*q23$$B#8xWE|Wh+5{xp~KsfhLV0<L@6?&DuTf
zEi1tTixas7<&c@g8>#6(W$S(mg7c^BHilNlIe|{G<xhLdOHbJhNGq;WHUov$scej~
zf-sHhWMhyGat1W$Y&QF;R`s)<bG)9yv)PL9!CXGIIGgPgJ_v}4XS0JL?J|XEF6sGm
zHtRJ?JwE^dJU`nixcS4YjUbQwIa@cR3T`m{oE?g2dsHNXsP1{j=h*IZ`nRg7SLb?j
z(rV3LQLl;~L$Audrm^t<+v~j3k??EABIl#e;(QF16KHcn_5aNq24j*e2kigNDM*`<
zl_M}Tj<g5R|L`+SI9lDH@`3$s9WtnIpZ_;|bq(h9)x++q9P{A#kySMqviR8dKc)=-
zIf8dLYiiA*!>fiqgi)Gi4*zK}GcmRbLm`{}mb+zSNLA%n;mee8qv(=neBMm0fqFAa
zNn*Z_g^o9SwhI8dZ@y1vTtJka?~@r95ZyQ5hb*x)jaPN*o(7+?H1#_3E^*f3Pm!sk
zJRTZ+s_-X3)NAk|r?o&V0eY!ko25P))x2Clvrg9%pQ}X6z?7bfK!Uhg;)~>8D+19H
zUttfe1AjjX{LQE2_#@`+V=x<A;BDIx*iwQ5=x;u?HTS)!f`J(jlk59<U7#0yO1A$t
zR#2@**}V(BUGgEYDpTyd;8QbYWs02_d|9ovPP{UFel^>=&|8$h+K06R#aEO^&1#?b
zdJCe;YF~N=U-LvMXkKKIXT4oJyy#N`vJ8dCi@qE&??o9@dC`|hYHNgjJ-TOuPuY~3
z@vL{Xvkre++IdiKgHIKyBC2>$Z-cL8D`{U3?7P92wF&msxqUrkP2H37xnA?Rr8&6_
z_5R`W=qN@;=OT~p-stnZ>C`&&mNwH}Z}^muKW4HGi@fbi0YtuvD$S4s-|#hWCEL;r
zI=$h`5=jG3!Tp9WX!2|mrK!|bAI~<O0Z?-*j4x|?QFE(LrW-s(&8<Ew-9#14>)%~5
z`gyOj^j-VqD(v~LPv#kv0mZvMnP&h&@vaYfW{{@1Tj-u0KF0^_#l_x%Eq3_anOazL
zxm%Fq?__F&H`mzdQ?f`G62hl;`h0#Z#LIwo7rVK^8!>kI6rPGv#)&e!d`QK)ybRE8
zHlx8C3+|R}LK%gm<nq5pqKoOC4}FeL+1>{4T`fNJd3{=M7&k^5>}TDUc>9#>w^{}v
zTDIS686Z^H@6&_aR)A>PejlcXg`5Eo8`;Js-VP;=HiHx9ZS*zw$tpBBHTwLf1;Nnh
zi{xs3I0N)Nz+y|i{dyj-8OU1?_?nAZRE*|-fa#VF6iEk2hnvv0xb8XRb4>QLRZG47
z(+`pV@1(>Mr`8=|$};cnk|P!~gkU~mwGI%>M|^US0|fICvg~-yfQMhP>;CGUQ2Le4
zfMulXE1Q8@_mvMTXbQqOPc>grl&^Mk3N)`NwdJqgwMu@I6{>OGpeE`EQHdJV<jZNJ
zmGe44r`f_4-ingb_G@WuJ#CpJu26nB?MoM9D<IYJVQd}58IT{&G2aW`TT9N_3@$L7
zvl(bUdCq2_LG~Om+{77B_9FZ13*Ld{7i|VNI`*Qkxd^eiLfPY@uT4U>g0ja&U%Nc*
z6JdX3kBNR|lAm>0>20jTpCWMMiU;Hq{W5j{K{L@WJq!>u6aDC2O4fi#CKLU+ll*Bs
zagYGX1Z5ugyYj9TLANLTuDi9H;S>qoQ}1{D+3)n1ns?A1Q#q?&<t_VFz2B>AJ~S{v
z-Z9mW#Yl6rd@QY~?-(*b=!Zwp56?uh1B8B4{c;cj#Ji{ZF$e`X4<1fuZB~2RluWl;
zn4ql&*L16efK<pYeFP8;)BW%f<N;^`7n#W(UhU28In!pK2$*RzPz22M>%#J=0*0A>
zB)9#|(AuQ#dCu=xpZa*UcVAlibAE3?jIBv(<We>|<$bO*{s!Yxt5twtTxzun5R6Ny
zRr4tIC+U5wQq$LY|KcoIWmlqxtny<ghx`_WP-&GPTRAkNOHxDD`gx8m0ziMP^~)R!
zh?;BtGRFd<=32j%W0M45@$)HN9{{-TE0!q$q4+D7DFDIrieIK$KwcH8ww_GUR`<N^
zcl@0C^cC-uY3XnKz1hMPZOIhd$rMWqwp;Ci5M0|WBLISHI~idSd2n0Oc_%CXhj($o
zPQTKeHyT2c`mYni4j}66^k@6D&7uyBu$SGi(fj6od#xt4r9C&-UaJX!pxEozdCtdc
zsP%jO$oXVdK#Wy;{ehdfa}(sdPY~q{&`yY#ph6?dd(Hb}Nu&LeG)lYhXGueLYV?P?
zT9E4adz5H5@}|MW2iTpPyaP%P*bFW(9Pl@9Bdbt`IN&#u76iiqe_p<Jn3hIusZB>y
zhc<bKI!lk*95ewxYB!Z~#8E#sI7HhhM;!HIhvN-$v$o_U-=`ki?A_ul{odxF1o6Gi
zK?&k}D|}D~9N$y;NMm4%aFYGuP4ADTCv6Iv9Gvtw7x}TRLX(4&{&0J#22Bo5`a5;z
zj@y<DenvVj0BWAG92XEZ&sdHNh?-}vI&NE<99$BP%YNMI^^{(+RiG)tCA$?gMYv@7
zEh>WOk{^CM0B+k3IWFLMpLKf6+dp$+!0Xp0k&WBIYduo}%Cyv<-|{NXI{Ybe6dr(l
zN<ijNK#)%f=we<62=XZbBgk_oAadxGfH^IYrnS^Gq9vblVM_L7z%@1C)-th&c~y$K
z^#M%ET3#!}wCt($0L{yOAQx;$E<BqBw|RdmnQd!DBmeAx9Jf)13I)=|Fb4?c*#Qi5
zcXI|sch6-5-}c^HH`it$ubOMOi(WG~AjgJwJW}QcFgDzPNCEVMB9J@F$wP%Oh6boG
zHxM1h=af>EM#UcZvy*R8x1(_TOF-%9FER&X-BLA%CEoFND}l%|E=AH`0&)U_@=)S0
z0e?Ps9zb5deFv=<Zw4Z10bBHrw|B1vHUo{d3v5GBBrOQY(YhU9&@KpItlcAQiCvWE
z1IjWMeAoLy9saWPpjdj|HU`Dg^8sDV*4y#f`tt$I)@h&wL?=HVXuIrcC%dgqUL0^O
zz1qoAiZ(RZoh*gu<Rzk$7Yp};9ag6PwA~wWmaeqbqVQa4t3~0tG9VLjJ06}Z1EH`s
zpF+Hyg7ADP_33-wh0c<fYz~Ugmuv%3e7+P&7nuijpx#RXGo(GnDG;BpvX^#vCzify
zGf<qq8jxEc?RcEN8p!P+JBi}-)j;PW?QNk2+<j}RW~cXEXT?^VLj}iHn}b4hYamx-
ziFQ0hw+1>DY5x=)n(lfpfPIwpX{=3w8c5CE?ft8>Cq!0%X)w%t0qm<%vTLVkpnETn
zVY$BsmEH^F7~0ZItP0X~&*^~UVru*z?-Er%9dN5!9;Wl@G*F!hD6Ls}kru531PL%7
za_K3?moowW^@IxJ;n{%L$|EEo-=HLjvS$Mr&aUIcK<5Gq--^UTstU-b*aZ1gJyVv2
zs^{_2Ur|f&lp+9_FD(h8@c96imVy`&a3P@Z0TB<$*8#Z^2%_wTKxRwrtP6=Q4_lf!
zj)qj^Q}4q{i)lHSj?s!Xk6Jy0y>JjK+8H@=<^>_BX5`437a+8nk%RWo(lC!2FpFu2
zyv6ym>?&k}S#}jlIkTur4_*bj%wZ!Bc}w%>*j0#Vj$MV)!yKy8lUD(HhBY4Y_R4?8
zu0r;B#;!sc;Tft@%B#R0^I4zIyk+_G?J8uJ`8ld^l{}sT=I300gVv8%f#W>O)_vyf
zpZ}~~h2s6$9JvRO$K(Ck9P9zy&#S<77qjT+-eHA{?J5+Di*w`zEsw|I;v9I(V%nO|
z*FCS~IF6+L@wwM<r@xYedE&M^z?DzdKb-pNOYb{v3lF!Eb2dmpcDRjCjNO1}<>59M
zySGtK7U-Vu+c=(2eVVRTDADiR@Wo7;tDu?g`KgU^x{ZszKr{o!2Lp^^Bx4ns>Q|kc
z+PF&jzKeK-E;-r8MITPRvM^qAiX=;#L$?CbZD#7;mg+Kh{!Bx<2Bgq!rXgJe5S3;c
z=z)A*2M=ene7{<F|7=6?@Ng^;qmj`}%;Nx2WwvpHSYrYr$;>v=dk97N22eUlGU#ib
z20ds?D4jki&o;Vr)w=NaK>2y>4Zqqgf1a%x`O`c@wTQ`|<{5~ra$W_9vD|=KQNawE
zI12a_ml<+22LuB%bdfj!sg8khb2$wc1^Argdd^Vt{LIN_=BPRBoq+me2_(X|@Eor3
zoFS)ifM9#hFyhh-w9tFbXxol|S}CCMwt+pBqdr{HU^CD{ufb*@M{F>Rj*@{UaScXM
zu~x#>LD^-jdmFW9$ugUP#)xHhi^wmR8FI#3!2NQWff+CD0Tj>>v7D`MqxLIVZZk9k
z!*ZK}Mu_ExT&bf9bXab*32L`<26Wy^R&1!hEL~|cc)_sJW}uneN<(f(7x0<fN+UO>
z?eK64j1U`A?-}Z#w9*YW2TkHO*c>!MY_PSUN!$j~Vk(Ug1qw!p&8c66)#=XC%{B)O
z3!7~Y8WuL&deE@2ne=#>b_@!X=2(NI0=epXrF6T^(HtDxZI0&P*ly@y*(1%tvE7Kq
zwW-2GuA^<E>*DJ4@?AE?b)eW~Q(Om%U4|}ZH3iCbpx9-!@2GX<T3oNY_83aBzb(s%
zV~4&et_I2>uw3kVbow5nx!Cn6P_75p9wS=}oPglkV_@Ly&bhF)y3bI$`|||X@Pyi?
z1OkhTW^DTmIom2wZUEOl!{1ppjh6cRj4s`@dpK7MTKQ~EsJ|&`v>95UWsP>rT7aR^
z(8az)fzkpDjYhkCZ3t&TR3Bh>C)L|a4%iIoU^rkiq=VsrAy+L0N;()081W<@cnXvZ
z-F1*1PpZWw2W^H7FdVcQGQe=qkP~uL0mDJVF!}eb0!7zdpR;@0s+~(dw;6OWd~P%7
zVEEk7#gqtD!0@?YhPBbW6`5E^v0ZJ|u_Z@shD<OVwHY$OaMW%^CK!%VE2=m{OWpMi
z`(r!x!IE!mhL-4yZw$GoTA;K9!#74&p6rX3VED!;?4bREGqloO$5}8>y`$u~&Cm)u
z9Jh671%~5xD_Vi!IJJUynF^FFe5YdT^3;K)Cv1i+Fr2U%vcPb{kh5M?0mBI+(N>!+
zT)j26&RDm6bxvuMP0<<@O*TbqP&65G6;YtH21Sz*&b6X88?%{|w}7Jdyv>mfj`N0`
z%oQlv;5ct&#H1;*!ExS5wiBC;1q!~~US@j=)!n@=+Z5Q^c3n1_i?2^81B%N=u#=?l
zf#R}J+*NxW;|q-8*FAHC$}_1$?bROcO8jXBh##8F4PG4`{Ggc|l=E#=1I^qZ7Lv3K
z0K_t2ZZP+mpx7@XfmjsH3%W+~^=^R@z*Hp2H)^^8K*{+*Ip_m|eST1G)Bu8geh?cq
z2ZgzFbl0MwlI!2ietO*7mASj9OM60KshR^-7ul-jfNYViY7WR2k*b(bE3QJ_vpned
zd+N(B>RZnA<w0)?Z8E*2kcRw~EY(eYvUH_I4I%Vg8I-OG2<nx=EU{?<2<nwV?A)Fb
z6nOd~d$hZHrss<`1#Qc{XlYl-Cj>7Bb+KUr2#Obj*qA;_+O^j`8-tFmsTX^wUpQNA
z3}SxsTPW9_lzW{ul&bgVzaEqyQXs_pUJvGo?FK+ly&l8@kEUwvX+p4t74}qz_1t19
z10j^zVkrYig@SU-2L!{GAjbUZbkwQ?wzYzeU2Jbpby~}}gV-PVHHbTqF7F1Fmi~cr
z8%llbsWP=^0kGJ(#8Xhd8<Z0fKv2FL#6;vHGEoQ8Y9~8YrZyJrwCj)>JA<m&-9j1E
z*%`#{)_u^Tqwd)gbbQOs_fmh8wTHBzT+|U-c=iRAkAp6MCD-H0a`hK=kO)2S9Gv?s
zJpjSEkMtmi1%$)y3%2|i4ohE)NWi}q?GL&dgW_wEl%d{7LHV^vim+n+uORJ8(7Az*
z)TB>?N|ry@bm6mSIXh&i279!(dR;!mmO9kLPlNK~73zTY(;z-x(Oje>t%DA+S9+`c
zh8_YF4^;?J<xsG-_}mVNDu;qGF{1*+?Bh@{@e4k6B#4P3Ns>eO)KN-k>Ub!4>tG&(
z9f{(Ih`}NN`1TPi1_AN9BUTIo^0L-uX-As>eG}xHrS}4GBm)o-UiFRTRe)gn#tJ|{
zFnvP-h;uOR4Bc})==dqf&%wB9z&aju`}is}gFNdy=IpB$7~cgI-flO9FwS?>?%r5X
zW{^=%ut9y*KE{cl!jl{cQRYMt%m4no4A774?|s#q%pZdak2I7aBmYQ|wiwRs*0B-}
zI<7EZKlS;Rr-SYmwCZ>3q{12ShDWi9W1Ho($NH(+Ed55c*npHzjj0Tn&QO^Al2?I7
z=h(0t)jN%ILAhksxkl%LSOg&$Q3W+Fumd-$!;A~k;v^(#5TDEX@-i^fC3a7L^+w}T
zP=0pP`KtF4r5Nn{pbG4MnQiT__BJouJha-qOg#0pM(U({rkakIQjr0wN6DCKB8Tvg
z-kqpzGfe)`yE6d#Y=$ZQ6A-PKValZqAe5P5Vrla(%`rQX)#s(uf$DqC(s`!rcSzwu
z^Gul?0jZRkCFX~K;FxDdW7?Zu&H*h~q*~mfmb*$<*c`MQyTX*~hECk+SD1zv`~ktS
z!o=WDoBf>#tun=CKLBd3GUXToh_|mY<ro6U%Ub^1i7dCy6r24399?Y(`R_VYj&*nn
zrgf$q>j1&D&V>I?BJ+0EJ+GOL11aC_s-k4PX5wrVH*aS$?`COU08nnW%nJz0&6arq
zLAjaCdr(2UI+J;~r7r$bz0X;)%`y$7Xy7(e?yUn-DKjJ{1AySzW+vP6Q@5STm$tLN
z+^PPdbi2(!#@%i<7vmMmfML5C5Nm5dFl;xmwtk8_xii5%sax(+r#Vaa*c@c$J*M1V
zMImtPG1Eno0;EbN7FE<ioyp4kL<h0LyH!u&KC6H52o?8P{R4=K`%J5UI@6Ny6WKoi
z;Q7Q>fwm++vHAy3!SspMKY(ERg!%`w1;tgQdp<KAC)tvF)PH4uX5xtOOd5HL&^?|b
zrt&qLeXlyB4u6Tv3^~}2m@+d1g6)VYj}-u7pg3Y?eQk<?f&_e^_`-C3Wr~49%24m9
zDF+HE!a(t*NdpB<U5m*2$4q6gzpu%j{f&BS6@Zw+;1ODQ%xWPZFDfVUfZ#r6VrQMU
z_yCdmkD2DJd;^-G_*Qew4Bevb7mbBC{9xh)!`n`F+i!8wBd@tPlhxm+&d-O~YB?$N
zgQ<$|dqvzGelYQUkCrS&<PA-1;BVF2dp6m6k~1_}E{QT=Xfi`$atTOv%;GNESvu)d
ztb1mJ96M8oeyg5wWy}b9vqYp6Q>4ra@kGQXKA?JvW`(3qcm&2-A(@8&!8j{~Kv_mE
zS`3XnETk+5x%_k37Umt8YWAQy#90TKXcS6-fQ95K96%7TkUWJ0i0)*eHVZ=H6b=cf
zJ6-cb@)VAgz<%>X@)V8~foOgRr*PVFMNr_m5KiH=;iqsu9<Ju*16xXvWuFVlQ#i%k
zvd@L^@n{6E3#JB^tX6CC8|*4%%7&2KcPr+mYzSfBEzYYT9+t6f)oSwoWg&UavzSNJ
zvXBf#K=3XL$uD|<@RDVrKtDb~Ajl^O%R)JQ`2;~qXo9dT)VqSOz>6sgm$O@cr*<!0
z9+J)pAxT3rJpw}0<srF71jK8Xhp=s4Pp(%?DQ6XX=XdJVl2tYZ?aZvQDQIVARY(_e
z8B_tqst|UEXd|tdc4pSF=?|%erE6>k+L>8nGtkb=nvgD%A*z63O$f=5AJQtO$<g}M
z*@x7>Iy<blZA_an>qBy*5`|D{eF$STKY3J)&uX66L(10F&XFok9^p@`J81*v^^i;v
zD2IBlhgxRwxg;Qb>h)0Tt?((DOOk-6h|M9_mXJshQighOgk*}4BBY2nLzE&Ye-_hT
z&bE*e_Gg&vOsyIy01yX;@CZt53(4^f5M<jzR{kue9h~=9l#NoIzkc5~8g1abZySv^
zaNZBefelqa@qP%2lO|@Fx@ULDaUdinX0(dm9dhe@VwOn(`$0$v@y`S7jnS&d0OWbY
zjfaSZ4?@TrH)D#DNv^+_9T}|-GWMbhr7RMn%-#^zCO9er2(*t48l&E7><h^W8iXVb
zVS;uSF9YR1Vy}%+?>0UP$%$SjpALN#3WX&P!lIFN8VjDrkitJvft;p8jUjxZD&jma
z!6&R?tlGu=BqS%5nTi`_J_%t`xz2;Ox5T70<hYVLJ60`B(~ncTu|@4}N$viQ+P!t8
z=ayVRv<+A^91tYmQNyumkHUC(f~}gM_A*X{<k2b!QRV~%CAJJv2IxoTeMJ4G@uSr!
z2uVtfx{a4X!<*P2A5ni{G+D-J$s688#;M?C(C}02`$yEi#;K6PcWXdS4L?PZNOQ%O
z6w7DW;NPpgjWZ!RpM(%)&V(?Z#E^tC2-b6K-S5>qjB_D5zl9KG&V?|)#eNCOARI5S
z$fN2&<APnL8OmIsG6-3eLA+gJGapq8jZ4yFNr*C+DEH!P3n2D7FS7%Wszv5y+deAF
zTqgT$pjmk<d@>F@X0yUSsITf%!Z@`?{m_c~;mNQP=KT-_gsFi=y8*%RWEkxpzzgHy
zQ(;#9NA)J-sjvtiP*6ua6^1f6l@16ro$dXjT4ziT%MOK*q+xVuIWL2bn8|AXq*fR+
z!_t7Qct^|(!+<#E3?6jEEcU^l)Z5HiVTBLSBm~c_a5$oUPcxD(x@T_Kkz&0bQ@_iY
z8^(-;PZ+yUs}_d&FxV9U-L)_*Qw|_nu`n#hK|tuTFpP1KHaEMFt1Sv+c+X=`ufxC|
znW*NLKp<ulcnq#ZVVST2d2xA;2M}C~sFjp$yHJ}O*rbWbwhcA|IYvWRe&<9PFf@d7
z#jy@RFf@d5tYbQj%3TP)kosYwI@4M3LRbz@kfPEHVL3bjQmHU{`fVB~x{&48vQ<y0
z@0PB$-%DQ+)`sP_EXsglZP+g+tbm|c8^(l{l4Tci@O5Fa8UR4eb+WtZ8EUQz%WMgV
zn(M+=w(LU9+YlD30RX77!PbGsstvaFXsp^0mPr$Z!L%War1^vwecKgTGwk>-)qRTU
zbY<)gTdRSt)VX^_=XL@B<zB0E0YSOf>Rdoj?xoJ9Q!-u2*87=%nmQnVzg>m;aDP~C
ztDp?3><?o*ql{NUA2zbt)70`_jaECl^7B89RyzQ}&={6;N<c6)hB2q4Ut{8}_<_p7
zuyQ1oF<mWk*5OYv_~8NS9SqCC4-oYZhUNSi5QE>raMqEq82m`U2fssM*Ws`j{G<%^
zJ`2miPl_=3eIB+3zpmsFUn0uo;Mb}M67&;9Vh99;DqmWi3JA(CuXbuz@`vNHQvtws
z+%^WyVUF9zAon<Kbt(#j={R*Nj?TKe>7F0Ljwd5*;Gfl-GkyqrBO+kCQJ*%+J_P_{
zlVv7AFg96z3JAs~>eGi|-EL(2Gwk76>LdAQ>?+i!XTs_Yd|Hn(sB$Kpq4Tdx-6$^4
zv%qZim-*+za?1}wR5>5c5z`((R5>5Uw1-ZGbR%?$JwIFRU2w^M3-#ZnuqwXmp$ruY
zBXLs<bt9W!kud}Sb6>H{4TzdoEOP^*=9R1F?ndUG65%ma0RW;Y5t)Gi`9qn30KqgR
zB4Y>;Oj9B-_q{N8ckEY09IvwlbJTk>rbfImVeRf@?HLiC9y<Yma7IKrB_IfAL}Ypd
z1mTPbtlbuk>P|+Q#rDrt^YUleRmj@2A~J$d232N75J9)_DzNq(mOoD&TrkJ3LPT>S
zvV*#FYtM<GgFc{-X5Go$4XM@h)V)e+gVl6Mp=m=zHXRTg4G}q82Bb<6j8(@d?7EZv
zSEM#Fb%e9;3Y&vABv#lQ)DbHp@-rmrfMZ1jLl6($?&t{5+KBRU#O42+!uF0-SFp{~
z)k$@D02(|Ikqii$wGkP~fS_3$k&z6DNM0MsdO0E@nFKtNUyQh3iik*-GSvHfL`Jd{
zA(GcctVr%o>Gf4-gr{a!@GSNLUX92g#xrQ~YD8vcK(M_Uu`+Xanr&<nUeyNx=GkPM
zh1LL@Y_rfBV3XxlC=8}e<W*nNsM|yLycuzP#2TJck7m3X!Ef#OsM~|w>TTgxto`$<
zC;x5BKzIbgw=J&%1mWA{RpcT)$Qib?q0g&>OSW4oK?s$$TPgukp@{rl8z30AM=<H2
z?}$Apq<63%o>zZUy2EB5W9^7E7h@dCfMG`@D!yt0f?-EQ9vbXHXt%Iy5ddoLwhRl1
zn!7E-0`jt!VSA9L?U#lH;7EomAX>5CZUy<<e#@|U3a0&J*nhNwVM}z+<XoJ=$XcSN
zw2aBQ)_kUfEL)!|_7?#_S)VI?4-k~~xiVk@L0O**)9y&ZG9}dL!>P4v)Lku$4(Cc&
zft19#zP3C;0;1C4T>Qd}AFnEbIX&OzDkpMX{`G9nNcDx(uijF#opq22k4Fg*e48sh
z9uNfI=1PwTgvWoIn{^^rcsvQX#~;geeV;2lUdmAKc&_w#DT2p;mrEYMIFq*k<L8{H
zGB4^%o%pBvoLUJWreh^MBg~1)i~tCw=0s&O1O)k<C}#ikWdaaN&51_lMa8Ey5<n^R
z^xUZYlvYAr$)aN71Au2NdevsscPuKy3s1q$qLvqwP|{u$6%!u-5G}Ixq;#>!)|1l3
zB3n;N7mK3sg5wlkrMhQH)bSdd@PT?PeM!_h@?1(zu!4==qb@C2fnT-oo`VonE26UZ
z0YSAQir#OesbDGf(i&F2SN)`5ja`R2e@#>szhXrh)L9e7uUKb@I*6rptpA7Vp9|LE
zM?CU9#I!EjO#B+Dl=t_#D2|NLSXWBD|B5ghGxi}Vy<%Ank5KUy%W8nUsAaWMGWbSm
zH2{ue?*hVV8!f8=f@z~=H9#<JB&#h|V6~pQXLHo?Now|fHRMd+9L3L+c~<I4X4}TL
zexxof-e#EqLU3)f%mxUqZDh8;)7a4yjrF`ARX&Ki{Ljn0->Xr5q7E`)ca#9Z`%&rt
zfFO83D*Yc2uJ(R3>jStNZCsFm`~QxpYj;%mzm%cg&ZzW%DT4p+idq@JC#ALzqu0#c
zAc0>(B<5~_P~}6*!hoRs@Ty<-B>1tg@Qnbl@W+;40>Z){TNVZc)5n&D0eMwen0|Cr
zrhEPsb-WRC`UkRGI;lQ(^b@rt`mZR`|MmD8U>OdIeI8YgMqS!QIw)2q4~mhD^*x~e
zqyOQk>qfp~CLW<#N1`tALu4Vr+rA))MfY`7IS#r%SZwGN60yFYs*eu%=HKel67<`s
zOZ@Vhvr&f}i@N$=W&0tjoCF(oaiwy|aU^5jf2sTGevHafY`ikr{HLhvAzNLtVpG)h
z>#KC9qRKhY;aA6^sYp^%L?_=k3t97Y6gNfK67Zghx{9xnfcI?F73y}C_+nJK0^;9U
z#Q4=XiP#?ws?|l8qOP8HWm*jX9Ch`&MgqFa^h)mgW#s#lVtm{v0zhX^ib)R!gnE-=
zGIIc;>ZBM#fFHytBd4m5v2PElPj{@hE0NpR$7Je2Aylf5A$8CxqcSqvw3wpfl+mCM
z)nuv2(h%dtkc(6T2##qnnMwe`F)fBva)k~EmH~Q}#gxCL^v~7H?n?Y=(U7w)i^*h<
za-dljlgS<sG|OT#*#ja1m&GD~i-}}U0+H<h8bh+5LTALvDEX{Ujs8k)mR7pneh;Pn
z^)dNb28HmR^|5pjZGd>s`WPl2l=;f2X{nf)j(zYgGG8ht;}VZhF%^^J1t2P>VpirW
zqafZK<KsnN0I0IrR)H4Eo9(93#BQ_QRGQdrjv+4pc0B^Km+m<jb4-b+dLLJpdD0KY
z@LSwTw0qEty8nyR>7Udo&VnzjK7<r(U&K^#tQin&U&L^tcNwMsUer5ZvlmXPe=GRf
zu0#F)bxcn2Q3iFsj$w*FO}q#le<JmVQ|b(7#}hGebQnxTbt0A}&dUIz(h2IJ?fgYv
zd^S26Qzpk*w=?QHEl$R~H)w;o1}Jx$-EdYNl7Bje`!VR#OfTNur(;<O3sRw2yL^5U
zxEJ;0SvK>mTH5h!%q0dk2=V^2u~uS92Z$<XV>shOXLNf}&z+CCI{Le^(dX2bEd88X
zm=A$C1Bb_`d_I;fK9>Tb^7$A(m(sC<UetLP*@$y$zx<0am-zh@gs5^cmMOl{0;0;r
z7*6rgG2&h{{r;JKc1|s8|8vYGj)6glDnG{z3V&)OO|*ZGmGqQ`z~0}Ln5&3ooK>^f
zu=8rSj)1}ud+`(US7N?GS(Ucjuf#fb=I5My(U#!jaaWPQy=dJR=hb*e2&~Gq@BVoF
zYGvAYe>{%Lbi+U|+AE(FcXjZWi^_v9s9g&o5ML(o7?mf*Tep*Mrv36s@q+f+)AW<A
za{LNEj)OL-3+n7N{h2sElGC};ayX-h#gzr@uFGnVI{YOT=a7Sq#aoDe1_T?6<A@4P
z+5i#9Ebd<r7oU|#z`wT4kK;%&{kU67;DPhw_*_PZd!>jzz|4>LEYngnsF#yBHpG>i
za4nXZ%Dkd>blw9fk_#T9M;qeudoCa^91uT00EAKvas2#%x(N^+(-1EnfZwfnIOLDJ
z^w*vcZ-O$*UtOZPoWqveZy<+T9+&B>oCnA9xLkPxf?|0bD^KwT+V))@4|bGq;2%_$
z$ITAf6*^p2PDyf8T-g$L`A=wUdWP3bB^B*1cO8UQizr=gvfoGPa+Cc&N|&4HeZtI?
zE;q%4TVQ6Iu;2w^!t#3D^=4d5SfmW~Hpk_JMT#(Cc_U5}md~5hR&$o_c_;4pj9ur|
zKGWZcy94}FM;2wHcjHPs{;4Au5DEeF=yU_ZXz#|c;ezM{#KY~ZpQ`mYw#OBIQkjG(
zvptTJ%H_Na(0go+s#O^8#g(>XIh3J6=)E|WGPE_GMP_}UU9V|H#`|%lK$f8&JiH(8
z(2)*+q70J94)$A3D>in-6&~;;M427&!uDD>UIxb8$<}LH4`ZkOF52?nN$(Q+z=d|P
z>zhNLUG}?Z%YPTW3sC@CWP#nRrn%NLxI3=!pW=}aWp>B$Q@jt5PJz++AEkCQ*Y-Mt
zAH@|O;Uq<=kK!FWY5QEf6hiz^YSZ=F9ZK+!trKngA0nLwBN%(*6MNk89V<-NZq<*(
zv6i4+&E6D?N8`#@Y&L!tQHQ@oT7Vp8KN|Om&*6Zu-qARA+sR1);Uq`nxnIFaXi7r@
z9*bXEu_z_b;7cnOrHEqjONzzQl>2*A_a2WcQU6y?lMTwyek=nLj*Dlo^>NE_0eM+@
ztPc=69gpL4%~JBU*1G4%xZ|k=`=hQk=s(8Y26wjB<ZM5o6NIw?f&^F?91tr0L<XmC
zEUihKCN?2cD>Rzo3XgdbqD&LTJUK~ga;uYUTPB?3q|L*n#Dldq%0RVKEW4%F&OBvx
z8-%ENin^^Hhjma0-ZnXr8rqW91(OpB-;N+LicL;nJA&L85L}ZJMg1uOa0neICyH;R
zkL18G(Ub&RnXTmorzE7$LJE#43HWRcF9d&lGQmz|YqjQ+38jl<CWm}7(Y=Q@4_yH&
zcw~KoP4a2aMCxsI$R+DZonOL@Ds<2Egkx#K>F>`b;+KT%R=-vnou0riPH3`Tfw}+F
z3FVoDOS`OK-dZ8&{v=Di<k$Y>ES{5a_2y0^o`HOB!Zqp|37R`EfyqCOl@;Wl^ApNK
z);g&b*8!p>z~bkSfUw2<M2;9|0a15;0;i$KO9A1f^Aquf3E`zA;9j~QAx8`;fes52
za>S4#^3nwfcqv~!SHLeki}CC1B`nZJ`>#6uDO?l}pwQxk{5dKh6k41J^Yj7@$VC??
z5b{DHS`02ubXo$1Xu!gAD5T@{4GG*pH=ox0eQ<U*;dliGp6bM%cMn$MZna9feWo8>
zTh@2X7+jsmMj6_p>B|#dL)<~whkSf>>VlzVItQ;#$ay`aP-b;P6)SZ>D6=|&=`{^3
zfXFSY6M89Eg&=0dyhLV+)<~mQABu*TQ}>$MUCz3fZCYyM%L%z-i$bXMasoTHf|f?a
zmlK(Tc#q;K(UPR)K=~prL7QJrbh6&fMVzMWX6<YmqB&dlY)&{ngc-g`Gy7DJO%;Xl
zp|8c}ggnQXO-+7-b;#8Uj5iVr-`I0Q2;Mgm_;`g=w17}_3;R>9c296iLZ*BOQDzJE
z$y78Fg#h19oy*mlJA-d0WL|)j#0kXn-zhe-DWKnD;h6SP@V$h>&s2~Qh2BfxOvP?d
z2m!r|HN~_&!CeW3J0%KHIPW5-+$IVkVE3}aaqXSp-h?6!U}p1p-J8I-@?P+PzPjh5
zgyR5vC!v+;A0=?6hhm{G#X@63`GjJjqz-?HSs3JKXJewZm`MUc*Tw|4zsczU;dG6O
z@Fy|~NWi1uV=D@z1ZsY4MS&Di6nsoka1Xk~ht);G@g=(C7PC(+`!K29t{+Ueb9tKe
zQGXmtC`BU80zxNXk<$Rdeu$C?eqQDFQOA779&f94Gd@cwU3of!5M@3~;EN}Xk3Q;v
z&)LUqwVuZ3R?32qq?EGg^Sh6F<uL2qPU~$PPAJ8ahkE63qFZ;e8p@zkj<9*{v@+vJ
zLZ);GQRYYjDV@$Q_$Y~f!G3C|buqq3C?%4Ia_AR{vR?c+fR85nM_Io-t#9P0U4~NV
zQ7ZEg`mLYt`6l7`9u~TneUQ}rY<r$IQ2!=@50=z{{ip+vC6w<(G6Mu9usB-|2&)`R
zgvGiB5RE&QXqU&k5fI&YERp}6>_!ssZai*vqm)3Q<5o9H5q0Bn>c$^wpv12cni7sD
zoJsbteC<SfQ^FnOUFfGSJego+MOr);0NR{PD12(~1_bZPL_r~~vH<b$G>aB$rN(Ky
z40YgXD$|CS0XoAb7HUD`3><?S)z3TdOrmQySq5!9%QjP)vk5u5^YgGeo518Qm-C<l
z&#?=ITFf|Sb+Vs#;5q7KIuPTh4!pp6w$}z37pzW(5E@*dP8RyW+85c%_ITGt%c1-V
zb>KyED3kMG2)x9;YOjTjOIF74^GVqy${0~z1_|zG7VDtJjh_<=Kb8jtXiD~T0>|=1
z8Ga7qAu4m(ZaY7RL2VCl9;~gduyq}@$URpQiWu#2#{hV)B=D;!p)*b#O-w4C!Y$1B
zsM=BYRXs8aH&G6Y^U()yrNc&e&VTAf5S1q;@l!AH0{mF)@gytksD*=%C*`Q`SFS^$
z$CKSlw4rd>8+Ff=q+=Qz)ls`Yb4t>i!#(vz^3?jIGBwGvam1$%7{-G@9AgB;d+U>J
z#IbombYp!I*^4p`AY8RRnV6as<1Puft3H*K<F1rIk*AV!+?677)u)nh)qlC+ssXI{
zl8zOgq|?94E$$p+uXNHL&g9p&{SFuGUA-qwW52$r2H2ne?v2#pZZ=%VSM><4Z5#1>
z++&9O%4#2=+uX)h;XX6EvTQ7_-!pIT-`5<{ckr!4a3!mG+a2Y%+&<v;yUYQ<Fz>i!
zNZ()FK4d@z9u%0j)XGZca9nKqKQ2V0TUv)!;tE%On<y^$8+$!&TpM<ub(1L@-B}A~
z;eONmYahndr?^Y-{;CnR6ZnOvtSsM~RUxieyLu-bza5$GAS^&DEf!IU+Mt=%O|W!#
z+tA^-;jL;Id!w_~Eu@*ls>hBRkNbxcD9CR;9Z^NMznNpiwX4isq?vWs(mqfLh5j$s
ztnyn{^W;6wxXhI+jXPEOC3)gnIoK4}z`5ynMl30lN`R8e{G`%8Y~ZF?x{l`vySYdU
z8IXz8f)en9`AMV=nmPw4wJc!MinMmdf}~6v5TeY2Bti$P7L);6$o3U!<#h{_a>#~|
zq)A#k(ZC*{!Jz@M<KLoObN3yo{O?!y-Cu<Z_o}XGhbiuU#68wz#s9bfaENt-_O17i
zsD7}rj;3Y>lCWw-<tSVYDR1>f@9_H7BdbjAAmWZ&+^JVnIkF0O3D(xYJE^1T!fbg9
z;i$^7<G3S9%Ky0i55>8Je3)PSN7vPA=KprFV4gVvui;m4^DF)64#Tkp<^a5Etn5<j
zUT)l0D0PXCz3P49vPv>3ItMltt7ky^#biSgnX#N(9GQ9vn_R3_B$rtECcrcGk|Z+h
z<Dy%Ts+WVp-{hojVaJNK(674FRfGJx-LZJTxS?10>;vMOCt-HjYz%CPt2yarPI+xP
z8M*Hx2!tBkI6kzprlyu|Ev!U03}IWkYB@pN^ZTE-AtD4QQhA`Vr~cy2>sdQav+rKK
z+FsiFgR)|=7~liSa`LcSkUIP8o>fW5-;tYo$<%af7p-&VDoUcXw(d_!bWKuuG0C1z
z*SgdJBZ)#Fk|-d^*H}pu5dONxN}_;BqHB_g7iAJ90Z*c9tt2WXaQd}Y5|tuKqHB2)
zrKxm|?nxybucrof)joCVsieCNAMSG~GXH^&5C=|w(_QlzfTF2*2;P5CQ)zt7p`hHz
zp6IR(3T{lwZ3qZaW@8fT+37U1&7t^vjh*PO%`{%K3vnqGs^n$R$W3fP4{c~<lQnMT
z@Bx2Q5*M%B4Z9A|J#Qu*+hEs0?6$62ChJ(DRp@Uf@vAhNMGYXcZcQrxWc8RSR^u=6
z%L~Y%<kn<BOs4?xs;x;JhowOY5cb@fjQvyElLXwJZ&~(~5;Wp1%brq1_I!)wm1;fy
E8$GN_VgLXD

delta 22887
zcmY*>33wD$)^>NLyQ!)GNh*+}yF+z#cX}g9hb0MH7LtI18{+6VIyw$uoWW6W0Ckqn
z2?_(l7C?}TXxI^DaYdW&(_s-11SWujfPe^y8e|g$9l-Fv=hiLCpXcFu`kcDwz2~0o
zE_Ex<O-g)oB|dh%bG$S@ZM<uZyMIXfx{BQ#a)0UkH;aeejitA$+Mk~sGGff|F@Jq%
z%*e;;M-3S<tUfQzaK@drx&JqygQj^M{NMTNg!#kaNSzM5?@CirrD_|^9d^u4-5hg!
zWoKDxNQwIvXXat2>hd@wr<PVK-REm|viG~VYjmp@)wt13kuj?NiIJnm3?K0a=IQD#
z>wsr}tRFtgcxuRFPu3fwM-s^fb#+I2sA^l)O`wG8$+IX4l((BjrGcuvSKa7TC6_~U
z^>*CCyxrUz+xM0`s^zN7<&Yd&S_S*Io4aR2g(Q<0@c>z&Xch&KijFxJC4<TxtY)Y(
zwUj3+?ZL>qQ_WNrivb-fder=qLlAX?)R_|R)2X>?rT#A8bCPjWeZ4Vi$e4O#cxpj+
zx8!`VR%#=9qJh=Q9V`kEwYhm}JFcNq286eNn&`s`HPYN#TAeHUOAhqt=Srx5<(+~U
z$XZL?f4^^_#BB#{CCCg+&k|jbe+Fu~7KIK6`urA!VGqn7AkZZmHa+ijv-%&hEk-oR
zF@k+k=KfFnL2|BIhc2CD+reygxx0VEU}0PE(8*w7TTlQQENlx3oeUPXC5qd2u&}LQ
zU>JjiZ3TxQVB1&7woZ(}b+7cG%f}?+E*?t8Bg5-cf9~PVbvE29298!3_`PD_prF&e
zT96MF6aeonh;U1Tf~D_`K4@B+$cc&u9e(5L!fhcq5V_A)qH1b7sX%R9?a}IfSMOi&
z8o)%u-@5wzf(f2SOMAd|hq@n00%=Ke4VCI$zHLsUX4tU$C&tu2jHGyM$e7_z)f*4j
zKQ$b`MvgFs){l9*zJ7#JKYGmY#}Pme8$(7=L&_cyR&Es;Lq;1zRO69RLx$CoU~i)f
zTK)OS;iKyD0P=qsGHi?igkgUyGP)W=c$f6#uXbliW6<Nn#{jlByQQl;)L`eUG31FS
z9vfaiI%!4}w0CJ~LvNUw;%n#)GgEvG)e3}}C75DpEH2C}!OTMw^_H0_z({zQD<;g$
zIS_f+6>G14W11>Wb3H0O&NlUNf79^jjZP^M9!<{_-K3$@N3#MJ1%yXKVbN(CI(@X@
zajVlbbeabJ|Ky5@PB{l6kGYCf6=4qFJmL6@6Tj13G@2*mfI5$Kk=zvQquK5%_w#H+
zrCaShT133WBYw2fmTLeCaHBIa)iESR7*DewD&0>Fds@m6EhrkF&NTBLEztgH<ULg;
zP{@#{z16(>5H(Tpg5j%D)1h6O=Kh=GS*NKUjr(u1VXBu#+C6haJ69JlV5Mh-j-b%`
z8KEO6^!W^Q><k^#D5J)*7pvVxkB)UhNh&~K64wbW1qoM-b&B$Yr!eeTC-lrjl_Zk%
z1P6+?g`zIaGtTLl0!`ClNGcxVoN`coi7e@Ys;&vFq_4ZF+XN>Rqz=GDqX|xEC`j}-
z!3h<g;UaiA*(vq&jbv}tx^q~E8u!DGf{`U!ld_YYnpr&II0#R6`tz-)P<FDjQyo_p
zPfcYfJM~(wtXuO;b2?@VW!-?9=9ELGvgCEw47RJv%}~5yQr8SiWsqn(!%`U}dYwTk
zcZ15P^qOlHTUF~W?K{g-6inh;ih_j5EK5<4P;{21D3RQ%vr<N#`%jtD#QmvhzjBXx
zSv}a4MYFKi@%qH{^KSh2q|(o~nLXcmEw!*wzBes%BH6isG&r3nmH7V3<mctT3{bf_
zz;<!|4bnqox|uR~%B2cATaBUN>Ad2kI*3CeKhClHX32vq&gCH=$yWt5$+*ttp$Z5R
z2<P%NpG5-UTwW(#t>y@zF0ij>$u*T1Yy@Pq>w=Ad&<2TmZ33o|Odbk$fFnTtOL=V1
z9>vH0F<bVOT*{M7#~1Kv>QbK9bUa81Udjsu)mGCW=;dl2n|ZVH-+={^8#q^O72N#c
zjX_WtT+P#Tp@JJoSM!2lb%h7v9nm~fy^i%>r|%_C>e35xewvr!JOY`iUO8J`NZmy!
zbf$Y*R%@G=`hWobbgu|^kZ3#IE5aQl@TYqbJB!n}s8jPWuk@nV<(tVCJ*wQ6y6}=b
z*x3M{nJ*FUC+1bmk%I&P^CILk;1ZBB0d#uNOQlcd44P|QbG@z#H46(FY61@YIoBI5
z{v``QbG;>f)UI3+G<ex7<@>_M-J^!E51Zu9#h@)ED8yd&D!JTB5eXF^B$gBpaam9c
zn0LNBq}u{pgnYZet7Hoi^6dg|POjRWi@+y~y^`jOu(PkoIqZ#B<aTV=e7RjQxNU?8
zm6OF@xt&D<VX-$ei!b*g6pPE4vOw-xzRWB6MH}+wGH<>)<)aNmmU-g|b(LvtkLFqJ
zmEMN6UrJ+lHYvrar3>W0Ivc>WM(P2=YOi9(ctr95VYRnIM`3Oc%)Q#1^ES+_adUgf
zxSHp6uj?(ZTUeL#AoqsXqoEo3fU`WB`%SNBy;CjaCTOF%-t|gBU({ePFOs`df-n;;
zBDF!PzUxizC`Q!=I=$=7F{2$%f&H#GVDL1F(0ser%hRL`1SHpbMV^3!<XW%D6OfQx
z>$UPEB4Kf}&dc+p4g`F%&elPJf!BFOp5Q5v)_FyqfCSPyFY@GeRdQ!&o)5i_kJ#)b
z@@*L(dfnM-NOie0C@(g#b4%m`eUn$pp}`Onk+#X}^{GML2C$o1*QIh;-|UrmDM1@2
z+HCfsloaqbpti74OXX-_ix?W((DG^vCBpqk)Trk9*z5R&rIyO~Wqj<Fy=pCN93>5Q
zu)s38U&Rh<WME=sJFJm`gbF*nT7VlHBu2Kwi<LzQN5I2owqTjuwW8TZaKg&X-gK`J
zp;FrH^%)ikgl2EJK<&p7pywXe_7(Z2sy#LWh3_73x;Y6)Y54#$)6#+RYY*vg3&s}H
zJo~(kt6nza6?s7BK1zt4RCi)Dx`XW7SLEi3gBCKFKt5=V4kVBddPR{23FL!h*(W&y
z9v)#Amdj699<dRyq;?&#5omNryx2`pk&f{KbcAw$rJF-wcrB?{UX@o%#VuCu#`u6*
z$PcCv4XDMN-$||EGN4Ygu`A`eiqm$tG&h{KOcIl*ew_AZnsWn4lJR10xSb;)R?o5P
zE9F5o=WGNQ5YE{MR6owy2sBBYBZONx0@_~iO2xhkwr8oF$Cj^>OKQL{Q!pmE;o=M4
zbTj8b0_%deQ(TOP3d;p=VUc>!^aKjak6!7Dm*uXO_c!3D1>-?CKiamW>hhx%YcXD3
zek4CrF$an2@}sxl3aSg0ZepOipsSy}uA*PEpxb}FuHUM+B0S=nr`7BDr_brDH0~Ka
z<PY^V?D5y->Wo&etf^iMHBNCdmc9SF>~9$B6NL^;s4~_kCMJ;RW~>hrlb?&=;d4Gr
z2knfS(WC3f7&t?Ctlk_{oG&c!^ahDBKIapa0#CWDh!>Cme$Iz@K}~1_We_jp*#mFL
z1y$p12ug?XHUy=^c%Nn(A0mJl??b`c+Xe$pXr5U<$I8^YH{?&#GH3Z@zc~*lXq+#y
zMeoRqlP_B11QS><TH^!>tQTpVvuR35P*00ee_kWcaV8hpLNta&K5T9&e9;I(i+tGK
z(!wM`Ls;rF7bb(=!@^{#PZV4{g5Xl0D7YXYxYTDA+ys#;e7xZH1A!o3Vc7sAY_P(z
z0Z1UN@QH#8l8d6?P9z(2);u5h96zKsrsN4}nIHJ%Jkti9$p-7m1}~T5HxSobg8~V}
z^_C?-0&zWAqKRU-Giknw#XgW1Bsck_bUt!0iR)`?&O{&~v&om|RsU_uz!KZo4<E?u
zAKGROq%&V8ZnFjg5)j*b8n6H8hHS9Shx$*Z1&Qfvo6mm>4{sv*t{klVf$CYa69_aj
zZJm6+qS@{wjY_aD-K@EtxwV>o!JYz@tkvx6Q=#6>hXzCMVO8tpft7n~1Q!tY_|iKG
z5vmq@e0stnfw0F{RIDDO(}>O#podbM*UQ74m4|E$T1+0Yhe}oAkPjPUb8J*44*9S%
zUPrOkSwe?jr5@fWZ*W$AWn)l@_{zqh67iK!qz`0(@fD?yFa}l)r`V89^7+bBHUzB~
zPWjT!TG?5m^};D%sEbg8)(fY6-Aj4&b|!<LF{8H(1SHQ`;R_OyXRPoA3CS}z!nZT6
z7cQFNTL%JGy=dz|>xGN<FlfDS(F$KQ2GT_z!gnB|w-9B{=h(=+AISr<fAq;dbsQPF
z5W(xY=98XHjrmBHoPWYkv&7&5z^_^0AOU{Or<tohkO05t(*wMWf<zg;<};r4r>PxO
zm0&5TTv(?4>~oFvyVYzQ?%d!)w$;auZI!dLuKQ?pc8;R1kfL@Xb8nNsubAk+p$AR;
z6a8Y^MjLA6&opN_kieSg$1L|-jv#67$*kMQ@`DYNZ3GIW$$n8R3wd%(_KU>_NFYr1
zV?t<;<NzrH!e21m$+LrK%m+|mvOn@LUs(zk&I=~{A8B;*)4D<endX<e`O1ttN7X-4
zKZ>>AF88Vc%Q7b=&osYSzo0#aG0pEQ=J5iO%XjIj_T|HXn`f|b+vVE6Gi(H!YG>Gn
zpyZk17n5}%-;d4kW2)V4+7dhO7yQyZ=H4OiYQQf`4@#dGY-3RRyx`Z&)q5ddy}#hc
z>YZjskZ|h@{?7AmxYcdBb&lWl;tjV7F2=z8Sbulmz7|ZZz~^TA$;k`MfP)<triSg5
zgU-r@wpx^t3vIP1BNzHbB`)L{xzHaBsdFi-3ngUatEr9uk>@!pUbQhOC114-L@D{I
zKhrEWkb!!y`i-Fa4-SEpT*cTfd2Hn>8-Y@Dm0#@F3wdg;@)vX!PNLLY<u5H$x0qTW
zz}Kek-Ysu+R<5-%6kx2iF(@h5`U}j$P{@;Vt-pJjy2->)HP?pJZ$6Q?IIA|;7%Hr>
z!H;7&Dr$w23XBc@EGy<!=&`|{ud9o*u@lJDJg5DR3#s4kl@}@6X}?=hi?D>xq-p7l
zU&>_-Pb!fHkN^SA=T~})dE|_rpB__VJUr_+&wPk7Nq%5NB-)<!W7=xVfkB<~OZ@Z-
z4@ndxUse;zpK95nEmS>^PVc3W;3<VYXuiKB5{=LMvA;Bd5%%BvB|h=tAq6-{ZUiFH
z_IrPJ2lYo6>RFNIc{bm{Qp!>JDJkRGd@Q_Zms>=m9>*Gw$z{dk^2NdnOhApx7Yi?t
z&}v*h#zVWpA{xL1cK(=LUOd4TArnlnMX1h9Adx;?1iDOOzd9~g7EiK82xyWmLN#F$
ziBxeBP*d5zkIQ|Fr`jT9kEyl@m4T@wQprVNkLj%Q3Awu4bX$bXGCf~0^SOxU{q+2H
z?bVyO2m<H%d@0Y@lVyG-huOLlvQZ3%xz#S>YwG9o#R&mO^!I!|P6&o_VMOj6mj0Fe
zaLF87gi>)%zF3zP@l>3XkGNStXS&6jXGOl_U~2wXvhL1Yk&lJp=6iruOnx|!+Sww1
z)Vbt9C$Uxo7hnfEdCl1xB>F$l3A6QP@@Z1@eAUVELTY0NrA~@`)roIq(p<?ln&;b2
z(&<hvI=XHH8Yj(|wur|Pxysk2EuCDI{4B<N1m~RU<f2zdvS^HMz9Y_}bm*2O-NvWt
z@{}d+;_<q$4Y<&4ye@(SB!tH6@I^6~!NZ9xTUSbkPShn2Pt2q_8R>1zl^aNiOw`+(
zJ4}$MF%$L7KBgl4P$-i)S@d2*g&uTFlu57FCh9$Usy%o=P<{$qsw=&Ur`W1dWKGc(
z3z#BnijEws;Ub_KnHo^)DjRiC=aYPC+o+344<ry8b<HdxAW25YwD}6n7D>E#z=7)I
zfbwd^EE|GWYqNB*T0<K^%+mFk7(4ClX6c;^`C)vL=2*r?7|K%>%toLc9kUT=vSGU3
zO(0P8F}<u@t>8MK?L1}#m8yz)HUiBH^Xy?zFwWD(!Zyi+ah{HaEp7XgG%Yl-c|ql-
ziY6PO4G@}a1ez6^bg?;y2y|%DI|bCcIRZSkkmZMzUso=)5o91Nv=L~*won%*s7bzH
zTc{UA)g2xVfmva7>Wz?cds^SsHU=%#R@)dfE3CG)przVs(qa<L3P}mG!WvzQvG2Po
z*{MNM<w<8HXfx&U6j*C)ESeqG*!s}yu!i(`n+^+-QaZLADQ8?+Bh{|AG17st-o{7=
z#(G@~3D2YhW4#`Usgum`Xp6HUUFz<uVe1NUG<;!>(vd|Am3u3|wX|vr#LYHhTOe-M
zHFJTJl-dGuv)-kf+LJ5QPIGN#|68c^uGnfLv_k}J)zi&WkEGNN2wU|$bLIpIgsnPe
z&fXjW2d>*$Ns&@fvE4?Xh1zyqEV7bPdmwDreWhYlw5{K+_vocQz!5TNkF&f;`CUb`
zjgWy+G~1)d07A2_nP(75DFX=2dSS787e_!g?_o8?%H0)vY=lf8?6DCtfv`sx`;(-U
z34}d*EWxLqq?Dz(_Od<2N_oXz8zBn_du@a)Anet}${Qj;*sJRXe-)CHG|jc2)g_hE
ziv2c%288`Kf(C^Bx@N9~AOeK_x)D<U%tw)p9TR&esf?~TWFuq);gF4x4TMAXD6)ZY
zh(=M*5jtqDqikr2@`s9}HbMvZ;;1eTRFhH%ARN_mii9sZ0O6=!(pCKxN9d@zjx%=`
z<(`V;HbO_}aNO3RBM^?;qv!~P<1`97TS`hfn(HK+(?z+h@}!NB1B8<{LJkm4>SD1A
z5g?q@<DJzRW|ZgRz>EdDD$iH8*bupZXt5!30nwt1%|lYk1w@M;DzFka59^uK*{;eI
zXXSYtBM%tob+MdFN_oIIuV+PtDe{1EUQZO7M~q1cFZ(XB_qr?1eJ|M%IM;Sv($md%
zCTIhQOM0NYfbat1l3w0Z{Q&a{jN#KflLOM!)aFv9kNfxdX(g!-noJJdm=%10nH&(y
zY={A7asWF<TK$8>>VI;eU~0fT8zY9f7n%}qJ<fNwNy$%3l$x6re<^-L$LRqv*MkK3
z^nf^*0SWNw0i4SmF|D1ixn{H1dn-q)X50GZL%-R!e))iyZR?j0h}onc7SEEaMDsKS
z9IvEy^ie)^W;O-n40Sv~m(cvakTq2*6Dk*4&|pHlg#i(dAOXEFkYk>SfCTiy01jz?
zFd^`C8T);ea=B`m4MC^0%Pj3m`0T$dpqb|(AOW!~fHUZ?NV_hY=goj)ZEAM4a>AMM
zW&n$s-$S`Bq})4fLX9%C^qqisi2^42dnb@@o+f|<)H?xe=4f5kg=YU$K+=788+Gh@
zwGv}>wMuyvSf*Ri0E(q7#XxcaG1-FzS}K6aehS?->56l#fMYXD)hd%SJ_z6>;C^({
zmGoN2?yOTDNUjTrH4&IVS{D!t50F4w7r??}A6cm@DYl7yUZ?C&Zn9;l_e}xCJikI4
z$ZQJW{OTce-c9pt4LH7JNBb$i)3#FQRD-&qbI<mGw2KYuuRPI!U*>uhd|++2`UeTD
z?bJU7C`bh8_CSYS2vB-8L=66FXh*=+957!E2_EEj2E?l&!NSJ$KLOg8(kta|G?Y&Q
zQjV{{U{yCM$zl+e5;UMs0^<D?S_15o0Nzj0qN5w_clNOtZ&Gd=x)1U^A;E;mzCf<|
z;uj=D_64Hm(g`G%8T$h9U-5+@kyr*2Cvg{F7zz$84EF^F-N`ep8$leTObaFtS~&(L
z`Z;Lj7)WYFIo3-4=|;=CqswR9tT^vKY6T0J2$rK(uz&=_Q7gwl0^%s;815Rlvoz1~
zfaBW$ziZ&8iRgI1?dAK+EDD$t0V&S+mn>tT;?Y6!5xemaW;sD4uEmxyi_CG7bswno
z(@!Fh$w<URo09?T>Id*PpuS-*3{-A0z6nS?snCYZ`wb=40>rLc!(KPwxXi8(ROV-#
z4!ARDGw;?&l{0MBEy`H^OhDpmTw+4>42Au#c^jy3j@@#r@*DkJK<t7wuEMzhb~8vc
zh(O|dw&7OgVf}kyV`36FfVW=#c^la0BCEYkxmmv$5O2>kzLC91<pbw85P{t<vE{cZ
zwZ<hIhc>X62xlT~cDiexv4-Q-lybY`kut{`s1N+rc6S=gIF@z4@^UGD!&l=B5s4r%
zh;fG4qJV@h;|y$3w$ie(J6U;3>f9jZV`t?QLlg&aQTV19qVR#FRz{Aw)B_2ODMlo!
zu9rCml$@WsG+3!|RnE6D=p1#vA+`eDd3et^baOHX35@v$CUZKg?@rVrgP+x71a$7T
z$PkkPNc6tQ5R(E(-qs4(?qs;-%Qya7aaJw2JEwqMZiq<>Z2+;{5R(>2KrA;9u;a+A
zrJCn0!?7oI{a!_qGT$<AGlrYBl+3z@%(^(a#xf|Fz*=J&6eO_LkU@_~7)dD^^!?Pa
z`;~{B74KX6fQuo$Z-{enkkrZun$tN*V7zZ6I`f-@r4&5t+5bGC{JnC$jX>sHZ={=(
z5841>z2P@^#UO#O-oUQ-U*y(OBDbbWA5<ngE4SJhWZ12SI2T1DU~Dxq%>o3HgbeJA
z$R(v@*X_b3ARxKjatTOCZns<l5|Y~u%O$0>vD?kyk}Li28#udd73eH+x8)c-1<-EG
zF(3i7n;e4)Uviacp3e-&DK_!<%HiD43|w=ZMm4Goe(@YMq%RDY?-_Q^t@_yPA<Bpb
zu*~v{27o<ii1G^(um=rsJpd%;fP+TP7lt_p5QEPFpBt_thB*fa9^?)gVh#{2%mIfD
zngeJRT1IX-W=MDX`Wx)op~|3#K$tTu9$~1*tf7MBO~slVB(RSeI1Q)sI*_RE#|&c-
zKSCzbe8F<e2;QOYHAjuG_?ndrQ$8#H+8!w>@U@|s@8HUK9DHry9USd8$|ww4Sht6j
zyQ^Aky(kJ=tXM=FAhZ}kb6p6MWQ_72>W>OsP_B8#1s$7Gn;%v#yRyaw<s36N$|*M{
z1o>^69w0E(2|;0gkbs;J6g3AVASVQoB1<SZ%b~KTF(}PQH9e{<b~fOr={7uoTw_pN
zq5%oH#-O-F0}^g)40f6kG%wK*gWTqt9u${o1P6AS9u${o1PegZgSbRf$oofwSwXxt
z?Zhw9tb0r;C<bjQK^C1A6qjhqxkYCM@n+{SE(;{aG9Fh(6f;|dOvr-bh^(BOkOgr>
z7ULpFfO%}i<4R)ayr8(xSI#qNUQpy7NZ`&3iq~x*5e@T#{+sx0Pb8o1=LPfo^Vwc-
zXttjhtgYi4<Z{ZoCRR2=>0Q|r6hR0kaf6}|f`q0`L9wj^iEf*MIN;`2)XJ&GEMluh
zD3dA{*${M|vdD&@^OQwF&0Ls31Q3gYIMbmsuW~w1S;GE2QYooiVk6Lb$`Tua&Qq2I
zHM9Cb1PDulsDAviRXMG6R;G@ORF*o+SK2nFBb1dvai)ky5Ly|;EX?l=mE)b4=bfOm
zHfY@$TF!nqO1a(up5<3MKY1r8Y61iR@J_Hp4qq37L~y+m%w3D%qIDrLcuiOnbfto3
zO%OcDy&DuYL9kF0-V0JqpvqZJM=|dQrI0VnV4v+#I+lS0!-8er4g(2Q-Vcfy4J07n
z4_f83oQ_{M2Knn}7I;$e{AQzVNjihsXj_ubU^WKDyaqu4Z49D((n2g-^K1z^_5{s^
z812Tl1l<~6h-FjueiUTiFKiPl0D)&8AtCr03ncR6qabR?tyq|3Q#x#8+n!Wz*S7^F
zzS|%s+H4DAw}E>eAVF<s-Jenh>Dz;19R?<GgII^%$J;=+oowM#%5U|ZL9w38=8K@6
z!C*+>AXS=~_i5lX2POW33E;E{Y7XKBQyIsB1$MIuPb)o)-9fQ-%*J(KaD!MozKIKg
z?hcygc+hb<b>wNKBuzU`!^R1-y8{jT1O~xIj`ZA701{&ZZ4MkHKu*xWar%zNczBY{
z_`A|qKN%GFqQFF(la#19{6ia1->|cPSAMO3V+{&S;?kf7^EMcG3mf`B%CGbm%QzkQ
zz+1>Tb-WD*{vG@Df0X|EcR`6Cx&WL8{vBl}tq?m<exG6G&nUI}nV?ujf{8X~f>=dj
zIzk)7**P}n8RZ`RTu`iP!9<&LL9A+V?145&(eIh^59K!fd%H~=wE3ReAdS%mIe3wc
z{)bYcUld_WOtiU3^%$>BK;qQ$65H?(rOdcw+ebm0OJtw-Xz|?<uXuxwiL7IT@~(C*
zh%0C0hmPcjpOGQl4-t?sHE46(Ac65Sje8((jEC2QY|vQc7X7-VOh@jB>!b{BBm)s5
z&#}~4r9po#BpeDRaYJxu4Q~TSjAwU0tJH<ZhlBw;az~60!GO3?3miCNLP#pWv1OlU
zlzjHtvq~2O3_eZMV<1ilg~I9?TA=jMJd;C?*ID#A<#guc5EdwW;n;)5H<NXpro7D7
zjZ-|uGee>Z;R!}FGbE-)kkDyn2vZ}SQ1+mZo6Wu-hZD-#AyLA?gyUz2L<t8;jY8tq
z4M-r&rZH0e?Li}EZ1{N8UuGjvSg??IM~OB-V4(u@76wQlun=xxOrhzy2ayX>`^GEN
zoXG_tF=2rVp#>o^VS%JpA^3R<Elzrn-IlT$6O^r$OYMGX)wnby&Q{R|5KBWobIl48
z5KBW?vr^UULE*hTWM0>KeWKziSsoJg5|1FbJS6HRNC++uS@p69jc#?wysiTRnyj`}
zpvh~sZ9JO1R)<8vL}MVW4xwN^C&QgRQ87b~6Debo;&f$h30WI~p5)JM<j=*$+bmat
z39N0FD?tKl8@ZA$v-Bhz@0io53@qMZOOWe!gv8MZnm}Sl2uBmuTmr6ZW=}OLH8sta
z{yq6Eon}jakU(e-iA5wxAT)=th<uMWA3Z^O_J*W`q10_nO48W?28IugIR}D-_}-A1
z13^N3Z%C|*L1GTv8_GEtGUq^I@Huc_$aNrO&Vhmlxz9pk4iqfRf%`+&9N3fM;jmM<
zbHfa{^RVSkJcAa8Eq8(h+Tk1S>`8%e+;k^9J5%x09=EMQtC{1rH7G8QTi%2qfR2+l
zaog3^OY?jka{L@}`l=0f{<PcAMt!Q}%$cI3`|<G%-4E{t>90d_*i719<m48fwB7L=
z9kp0?1Bs?Bma9RcqZV@YQ?Pn3^2r(Yz%1o2#b<00^7WaJ(w?vH(FP)CLRlJrY1E6-
z^gMIUR(@T4J|s@`z=X*8P`<e?0tu1xA*_q&f=4f+F0%2nmD=P*yBBik#gJmYqeB~N
z6halJl<GxJxGa3o{ss8pvgHFjg5YJ#2OuGM`GyaAkq@q!KBxl$oNJa7K=Oy89)SeX
zHOmPgfpm?W@F1Mf8z&ZF$2+WHj`Bd(*svTmZQYw}Jub|558Xika9mgfDM$d03yTs7
z5`g2vFm`8*sW;hZ0{cIv6ctafMab9_!XmNI1|k!}NUS@!2#h_6WzSXaOir>z2xwAR
z_@_5F_M|ZUvx{DV^(Jex)Xcfc9;uRrMJWasnzFDMI!Iu!uvkrlB%v_oty7eZy~+IZ
zQwv^F9&`4cZ)4EW#C#ir95FvEUM@lg81uuJj(A4*h9f*n!_sT1Tbq<JX9Iqksf-7Z
zTN)Or3=(on!y=VIB9)hhb6yLZsZ0!>%FDv8SHos13m)WN35!$~ETr=Cu$9Wasl2WV
z|6(}{j>$5Yvml|$s<0@}AOX25Y?bHUwBC3-%**pY5HQNywlQdD@V0FX+8MkZ7Uda@
zf%JA5v2>DV+di7-y|80v7+*CR?8}rpk1biKY|VNvjIXZvyxWJu>H`s0Ab|aWWiXJy
z{=f<=kih<c!ir*~4@JXzHgK_WXT^F;J1~K;-qH>vH42N*nm__!eHbecdN<gIQu;%-
zZ?W>b$`5S>GTw*bbaTo>8z6ibj+pN!K?32!u(<Nqho~)K^AiCOklYd$Qy@r4Zn10(
zlDD;N+=oJKhiT(}AUGw079>Wo!yW|%+z!jecnYK)WaG6RVdDzTb2W_n6xWt2DK+bA
z*jmz5kZD^@)3S%&R6NO6%d&U`#8%6)Ac5FQmfewnVJc|M2U4@%RQ}VU>wy9>AaIFY
z;O)%oBS;7xD8PqJ{GwC^tm*l(KsuS4xkcIRY`{-5?(qO}UlxeC2MM_^3q;(5MBIN_
zkaM!YjC*46xIb3l`l`T;d%=U;@d6R|f`zz0Q9yCOAe$?W*>qAwni6rP`x>*2{=@z_
z(ir&&n_1+^X6s&6+P}9=c|!R;T9^ku6}&o3iiqj}5}Hnmh+qbZ9w$YxE1(w<Aff4`
zNO(%bd{agYXbPuKj)*s9739@M7Cfx@%kUeI8Y4H%M_z1<h@8VyfHy|0c&MQIJv(A9
zi9i5nwyh@B@7cDRR7hsqYEmJY9YH*NM>$uidFDnOZ?OkIRZeBijaV0$D=8f2M|c4*
z1p&nQ_-=*!5+o4kM??V!3B>sk!~_4}wvrsUgvItL2a`)|848Cb5ykwz5p5u|B!cf7
zr_%DWl9FpVOMa#_7B9zVI-(y!S{`X*etCp8kXatV%`lq$Dv4TQ8V|o=ycL%5KtgbZ
zWjv77^oH>&$?R{M#v1^FQ^Lm}G1NCL<ADUyo0joF0_jaM-eL*HtI|AcB97e=r|)L=
z))8FGn07!>omp!l_==SmtSU0&`=%NDfB^RUmPtSY`+dudAc6fpneh#pU8*p6&&G)K
zQN-n&&jvLqud?VN<+%p1OgEqb<Tpk{rhtU}#)!xikchvHk(`eZe{|qM44x?;MqFDW
zW~K-p<Tgb_rU(`?Wpl)uA*#qbA4kj?B8F&9f-vU>Jc1G*Tc!pHu#az;x{AnM%bz%`
zI4gHq0SYGUu*<SBNI>keYz&fQ$j0<VQMKmzG~#%dtv;gM7x^@TnV=n3cGbB4wLc;q
zin!GOrR!hS;`$fySm77S+5rb5uABMcn)wI=I2du6U!<BGbn-cIEVwTs(s983-9m%)
ziNy+!Dt{Yz^#7BkBZ4m@F7sntjz*?G7IF2zf%bJoIt4Tw><Z;j?uf_E9#uYV_$DIm
zrg34i?za)wpKNu>YAq4h{Wsvgi%91HhtE*Wp`vgJ7Tss#C}hOb5qt@6bAWp$;wt|I
z2e@Y=u3)blz!xIYWdJ{F0pmkrVzD8|l;LF;Bd#i2n0CfLL|lD;!2#SQ>XOHLHO2ZB
zGuF#Mz{gjtSOp37u2``S5~5cq*7-GyY6_y(2-|gBnOWRw3sHc#S~UZWAk<1VgYFAe
zli8kS(@rS8yFMEgB?C-|JR21y10+PAjiO{+r(1s2AU*S<(#xrzPAIMJA^2&Qc07Q(
z^P-}(g9OaHs3`3q0W&WuN;^oT*1Tx=<)~TOiD8!Zm!c@`|D-!#)l_6wrtUqZv`MR6
zY4<}_eq~g=p+O_`voe}#CKE{XvoeYm2UWOgD)O&K&GiBZNWLBwc?S}buSdoF01}d~
zN3HpxnwBMNqI`bn4+6TZv2~y=^BQ}sw7OekkCj$;YobWMW$loEeKpVCsN-5R6+fpe
z@nr6e;&a<^bd1oK-2Hj#&?V)c&gAD&QIx<1+UHTlyrv8iXrD)MLw5<)`M%_yFIeM`
z%Ch7awha0Ci>O%LqYY%fh+=g=+3X08KA9TwlQPxW?PS!v3JfHIIvLF|Z@++q&`EO9
zHr|npS4gL#($y#nTv0yCI2D!Kt9Nn@(C#$*;fius@#(0`ypYhB`}=e>CyvB$1DpJP
zI$BuFZ}#>jSDs~~uPT+rXQM821_KlQpN)1jH*+8%ayE(^J9Ou^FS+hKJ91SSP<%e>
zGH<Ve36b;BJo6PPNQj(|;uR@f8t6+dyTI<crrcC~A?h+ec>)t67oyqbn^}+$xe&!A
zJh}|rmsZ|Cur1e=>f#@wF7qlEm=O6Ps#B8FSZIy?L$snw3?B!7ms!`JmAjIcqb@V<
z`tnQdm!sYiAwp;Gm!sWE`7PzXbPo7al)d${Ql0$CmZ9VJpKKXAZvTm7=)?8CbVPn7
z%Jf#{&XOxpm-z+~T*zFB<`#;6=v@3tG}%R+Ngq?y;4AMKZpSpWDl^iwsWH6$rc0nT
z2sBS)Oq#)}CACijewkZt@PXDC%P@Ti5@?MvTq>dU7f2*&W6U=rX1+}#27k#iJ%&ra
z^j)9eAiAc<@OF%@-wGDJcbOims#a4p6W36rv6ys=?^VfQZ-wO!sdj0q?i>o9Sw7GL
z&SNq0@)jhQ@S7hAfP`i&hK~fuBOu`e7Aqf!uS-0f<d1s{P@glqgGNm;+^oFlWN(J$
zjtsr|*}q+C^Fv@;JyL`<#YDlX;n~m>6T3{1fNY9kmudD$$GuIlKsV7Nf4R~WGrFqR
z>26pJmBqJXQYv-It^UK^fS*<`R2JX1d!e%Uw%rS*$=lS6X>lrxZ^r^DSe#ZIfHhYf
z@5Eg1#mp6l;6ZLpOsqHr3oDLyW3=M<GK&tDb2QJtV~)>aPTwA<!HyoqAE8*#LrrJi
zw(8o9f5+T@{+=U;iqJatWm`3=uZu}M7u{gOg6m>9SV1m=gwpF-Q9E^jzCI@Li^jx6
zoAohVG_K)oKy6^pw^Qr%4Kb-RnGJ1dirEmuo`ufCbI7I}*~NBhS$JbiN{Tl0xx&U+
z*KTxq6Kzl`K8#6SLs90uOU`D$Yp?1$7(C_aF<O5ZE9s*4;;mubO>AC!wU55Z?v+mb
zH&L&qW{9lK>|%Rpw%P8LPW(4hugDO<q7H0fcW0<ofh{qKe>z7@wAm8Fr*pedMnNM6
zcBbCSQ1>_kJ7W^hb>gDc&RDnZ>ZdN=3dz1NwJ1xyM+)q-b)r-MeWcT!NYq-qU5`0V
zu#O$nLD>gm*fY@iW-aCEp_p_e#@?z@d$89#sGbJUW{ts9xZzODYrYQ$32PpT;h>#j
z2P9(WP^{nxVuuzm#NgR_*veMHfgXpgY!xiZ*29#om#FgBlDm(`q=@fp1Wxyk>iIfQ
zW<28=EPmXIXOO(DxUB~gIvtPUoy}qj!CcMrP0Vo}Avnv)g1Xv){VhlRSH?Fnx6Xqv
zmxAwGmX(X(`_?i$m{9RsGCRF!$t7)C*n_!hiQa;^;6Vc>+O$wXprFa6FgwLo<f`TR
zDI14#2?v{Ow1H~hvDRF*(D=@B9+;5)j+{3U7j@7G(RVeL8kk4x{i`vFA43ou&9269
z3_)QH5?EJbWdo=ha1uIRjg{X_Z_h!)MAu?$dcIl|xMoEzxWKqZkvoDnLR9`7W1r`%
zBaNS9QV)SlVfk~ccOP{&TmdM=WowKL@1(vEXtmX$z-%RTevM$N(>%|`9WOFek$WP~
z#qqHSt;p-J!2efVni_Yhtr8Zebz*@}ycE;bXPo7e;;vdAE9Ns`PL8{t_yq@}oD#<h
zpQg$>3eM?qX(s!*NG)e$4a6o$^UFm%gaxL@^UYZnBt)mjasP>86C`4DdOS8WZpJ1t
zcx=vyi<v}lpu&u}m`MbSVsl0uvB|f_b%+MfoVYYM?(%)a+(Gq|KY}u26VG7NIdSpz
zC`jluCm!N;21-zD&WR)AO`T|WHz(eGE_9-~49}qx{*IQ5#qo!<=F--_AMV1&9V_Ba
z-y~$ho^2?h_k`5HXEw!U-TcF8{V0MLr@joS+0J_w$Hf{BTy(uSu9*97km!1G9E)h0
zOhBTLERJiHykjD<_T??IE7biogY~1Je=RQE;oHW(yre`^BMMZ!tN_Q{x#Br*AkJn%
zLj1Kj&SuRHXnuSxo_#y_C7x0T#OZLG=#q0V*4N_QEiE{U!&Kj@{)o%A?mW%2Chqtc
z!~ZtT=r??H${)o`J#9@~Tvp7Z!M_`q66R&a>bUCBLGqJ4Hy#52-8f!e;U+9dD4b%$
z;_3r|R9w`4FwrJOKAD7JqY=mtQeVW?bZ6iL0P~~(m)LP6@*9*Cd6dZ;nA}-?E3hFh
z@mm(eM57IH+_Gpk8zGZ7vjd&g-GR+<iN_@xQ66umxZG?uLZ)tGTMN~X0^8z}dCM}7
zC+fC1-jw%64D{DLJL8T$Y*mq3t?i8Cb`NDkf69jDxU`$Hp`ro5%mo_w7-w@l*IY`1
zgs#nT9C%aEfke<X$3weCA`pWo!Y(Tj1P5yFvJyeCC=qs1B0K=sc(JL7I}XD&cNqOf
zvbDwP-P+!`yMUKfFZpF(Tq@&!DF6wbK%2!3B+&Q8Q9bZ&l-o;=`HcM`srJ%8i%UJZ
z$-zXM&*FIFNz<d39I&6QOR81+{<x@BU=lZuT17A4z2ubx%vYk;>IdRdxxgW>9EkVo
zO;$r2IOQPwTZvk&AB>Ay4kp?hjH8y*?FBDY&(GQZ619i^d0eUxI8;18k5~8QmjS%A
z(m%wCx~TmFhwL^~I}cHtKf!M|X`Z8T$5(7d7xhu?XdEvp$!|B2-;Twl6TFHwfCLg~
z^NKh~7~@zxWbR@>Vob;4g+<(ZAmP1Z@!}K0d&J=0J8pSTaG=L=%X@-F-aAg-J5LiM
zz9eXgJO1m2|BgA?#=cmc7Dcf(JKa^?oY4|@2e==7<i}HNeK$;xr{WS{^Si+W{Hb`d
zgtk^7q48;!-d(NKPup$CeW$5SC*B6s8TLqbH4r(2u;3>3ard2x_v|IwV5n!|+farP
zV~fhv4k22qf@3cCd_2F-#<AQh;E?d-Ire3DH5xf*dE3W5d5*kI_hNkH$?x$He;DXa
z)>y9QvAR+W1uSzGM*}GKJ$c?#6TY~>rsMN|{el%`K7KXh0!5j@F)<-tWIIdMkbcoB
zBR;-RyGUgu!rP$w{lMCmsWJVBxWsSmK^a=6{Se2kJ+lqJnlYH#T(V8VuV#=*f*c21
zu*+;tnHmmUj!Wj;k1zRwb2*OholKo^6Y0k|J5Z+Tfgj@%|1b-krK8c0aeSC%0^v)q
zpW>`zxf%-pWRI*Z8vPXSU7-#`yxy#NuEibCCY-)|C?Gnrk>%>Z>}zp3p9k*E6u7N%
zX>5YE7O7=(dSLnmX<ll?L-?vS-pRZf4-(F7r3yw>2PERQH69<EFsEN)@VLEh#jW5#
zpX*lK3Kqrfb&6X?GlCztITDVUQ1V}C2CHdt`)E(`!~j(_?ie|u9%ujb$52Pt<Ig!h
z^5kgxYmUa_^<(Ns@xK>Ie+CkNBXZafJTZok8Ep(3Ib!sakN@H?L#pg_Pc_6Ixvx!U
zr^=q`rS@XCuaISr5g%P&ud@BURKv$#OuOkTn8^u|Cw|J4DG9crn;I(sfoD?^B3(dY
zR8ta21zH9ADP5+rcYCXa`qYF-1u)TOY65=8G8}C{O=GRS)tZKB2{8$QN!$b`A$-|@
zHn4DGLh2qWz#sE`3}YDi<e1UJAFikIi$8gZKNxE~J$%H&BcJB$6Ouva5HdGDAc5GJ
zK-AW7L}b+Tgj5mgF8)d={lVG86>4c1TyuHo=Lt4Ffn?~yMUY@KfENm}UX^OF(CUXy
zNx(O!Pe0GH8Kn6gh_eBjXLbUs#lcnT?b_@F!i%;Z11P-aB&50Q%__C30l&=10v}j&
z5+brdV%&2QBC<dtvgRb>b46qkgGUxih=rZtV5BS|7IuO~k;M{-tiu#p`I=`@!tn|s
z>pzIB>8J4O5*1NNHCC%@oEeJ}?oPZU=98-zv%xi}Ba5vOf(iV^G(xI7`Q+mztf@x5
zJ+LGpwrOCZ&5{IG`uJXl8i8EOlv;I~zSM5SxzuO~Z-c=uV{2;FVS!}{k=yy)ZOan)
zs}jG3IR|Q<*AlqjR9>gvpZ!__pWe_kGmy-=G9j%tv$X*<Y8x2l-E@#pab?19PCFpc
z(aHqw3R1p;gjH82qN{~fiNUS9%Cf59U<j)$s|prbbrq~S)bqrskz+=7|KxI7k<9Mx
HrxyM{8vY-^

diff --git a/gen/go/fora/admin/v1/admin.pb.go b/gen/go/fora/admin/v1/admin.pb.go
index a6d6fcdf..a6a4106b 100644
--- a/gen/go/fora/admin/v1/admin.pb.go
+++ b/gen/go/fora/admin/v1/admin.pb.go
@@ -139,9 +139,16 @@ type ReportingPolicy struct {
 	// Exchange and may change without a contract change. Names are a set: repeats
 	// are rejected. Empty means no required fields.
 	RequiredFields []string `protobuf:"bytes,2,rep,name=required_fields,json=requiredFields,proto3" json:"required_fields,omitempty"`
-	// Accepted relative deviation between estimated and reported quantity, as a
-	// fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the
-	// receiving Exchange's default tolerance applies.
+	// DEPRECATED, ignored. This used to set the accepted relative deviation
+	// between the estimated and the reported quantity, and a report outside it was
+	// refused. A usage report is never refused for its quantity: the reported
+	// quantity is unrestricted, a metered report settles by the rule on
+	// fora.v1.Pricing, and a quantity far from the estimate is analysed out of
+	// band. An Exchange MUST NOT refuse a report on this setting. The field and
+	// its bounds are retained because removing them would break the wire
+	// contract.
+	//
+	// Deprecated: Marked as deprecated in fora/admin/v1/admin.proto.
 	QuantityTolerance *float64 `protobuf:"fixed64,3,opt,name=quantity_tolerance,json=quantityTolerance,proto3,oneof" json:"quantity_tolerance,omitempty"`
 	// Reporting window in seconds. Applies to obligations minted after this call;
 	// obligations already issued keep the window they were minted with. Capped at
@@ -195,6 +202,7 @@ func (x *ReportingPolicy) GetRequiredFields() []string {
 	return nil
 }
 
+// Deprecated: Marked as deprecated in fora/admin/v1/admin.proto.
 func (x *ReportingPolicy) GetQuantityTolerance() float64 {
 	if x != nil && x.QuantityTolerance != nil {
 		return *x.QuantityTolerance
@@ -443,12 +451,12 @@ const file_fora_admin_v1_admin_proto_rawDesc = "" +
 	"\xbaH\a\x1a\x05\x10\x90N(\x00R\n" +
 	"feeRateBps\x12#\n" +
 	"\x05notes\x18\x03 \x01(\tB\b\xbaH\x05r\x03\x18\x80\bH\x00R\x05notes\x88\x01\x01B\b\n" +
-	"\x06_notes\"\xbd\x02\n" +
+	"\x06_notes\"\xbf\x02\n" +
 	"\x0fReportingPolicy\x12'\n" +
 	"\ttenant_id\x18\x01 \x01(\tB\n" +
 	"\xbaH\ar\x05\x10\x01\x18\xff\x01R\btenantId\x12P\n" +
-	"\x0frequired_fields\x18\x02 \x03(\tB'\xbaH$\x92\x01!\x10 \x18\x01\"\x1br\x19\x10\x01\x18@2\x13^[A-Za-z0-9._:*-]+$R\x0erequiredFields\x12K\n" +
-	"\x12quantity_tolerance\x18\x03 \x01(\x01B\x17\xbaH\x14\x12\x12\x19\x00\x00\x00\x00\x00\x00\xf0?)\x00\x00\x00\x00\x00\x00\x00\x00H\x00R\x11quantityTolerance\x88\x01\x01\x128\n" +
+	"\x0frequired_fields\x18\x02 \x03(\tB'\xbaH$\x92\x01!\x10 \x18\x01\"\x1br\x19\x10\x01\x18@2\x13^[A-Za-z0-9._:*-]+$R\x0erequiredFields\x12M\n" +
+	"\x12quantity_tolerance\x18\x03 \x01(\x01B\x19\xbaH\x14\x12\x12\x19\x00\x00\x00\x00\x00\x00\xf0?)\x00\x00\x00\x00\x00\x00\x00\x00\x18\x01H\x00R\x11quantityTolerance\x88\x01\x01\x128\n" +
 	"\x0ewindow_seconds\x18\x04 \x01(\x05B\f\xbaH\t\x1a\a\x18\x80\xe7\x84\x0f \x00H\x01R\rwindowSeconds\x88\x01\x01B\x15\n" +
 	"\x13_quantity_toleranceB\x11\n" +
 	"\x0f_window_seconds\"e\n" +
diff --git a/gen/go/fora/admin/v1/foraadminv1connect/admin.connect.go b/gen/go/fora/admin/v1/foraadminv1connect/admin.connect.go
index e55db193..8758ed6f 100644
--- a/gen/go/fora/admin/v1/foraadminv1connect/admin.connect.go
+++ b/gen/go/fora/admin/v1/foraadminv1connect/admin.connect.go
@@ -81,9 +81,10 @@ type AdminServiceClient interface {
 	// Sets the tenant's fee rate (basis points) and optional operator note.
 	// Full replace: the previous rate and note are overwritten.
 	SetTenantFeeRate(context.Context, *connect.Request[v1.SetTenantFeeRateRequest]) (*connect.Response[v1.SetTenantFeeRateResponse], error)
-	// Replaces the tenant's reporting policy (required report fields, quantity
-	// tolerance, reporting window). Full replace: omitted optional fields clear
-	// their value so the receiving Exchange's defaults apply.
+	// Replaces the tenant's reporting policy (required report fields, reporting
+	// window). Full replace: omitted optional fields clear their value so the
+	// receiving Exchange's defaults apply. The deprecated quantity_tolerance is
+	// accepted and ignored: a usage report is never refused for its quantity.
 	SetReportingPolicy(context.Context, *connect.Request[v1.SetReportingPolicyRequest]) (*connect.Response[v1.SetReportingPolicyResponse], error)
 }
 
@@ -134,9 +135,10 @@ type AdminServiceHandler interface {
 	// Sets the tenant's fee rate (basis points) and optional operator note.
 	// Full replace: the previous rate and note are overwritten.
 	SetTenantFeeRate(context.Context, *connect.Request[v1.SetTenantFeeRateRequest]) (*connect.Response[v1.SetTenantFeeRateResponse], error)
-	// Replaces the tenant's reporting policy (required report fields, quantity
-	// tolerance, reporting window). Full replace: omitted optional fields clear
-	// their value so the receiving Exchange's defaults apply.
+	// Replaces the tenant's reporting policy (required report fields, reporting
+	// window). Full replace: omitted optional fields clear their value so the
+	// receiving Exchange's defaults apply. The deprecated quantity_tolerance is
+	// accepted and ignored: a usage report is never refused for its quantity.
 	SetReportingPolicy(context.Context, *connect.Request[v1.SetReportingPolicyRequest]) (*connect.Response[v1.SetReportingPolicyResponse], error)
 }
 
diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index c117952d..74d5c9e6 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -1953,21 +1953,34 @@ func (RetrievalAuthFailureReason) EnumDescriptor() ([]byte, []int) {
 }
 
 // UsageReportRejectionReason — why a ReportUsage filing was rejected. Replaces
-// the free-text UsageReportResponse.rejection_reason string.
+// the free-text UsageReportResponse.rejection_reason string. A rejected report
+// is a non-OK error carrying ErrorDetail.usage_report_rejection with exactly one
+// of these reasons.
 //
-// None of these refuses a metered report because its consumed quantity
-// differs from the offer's estimate. A quantity below the estimate is charged
-// as consumed and a quantity above the ceiling is held for dispute (see
-// Pricing); neither is MALFORMED.
+// THE REPORTED QUANTITY IS UNRESTRICTED. No reason here refuses a report
+// because its consumed_quantity differs from the offer's estimate, above or
+// below, and an Exchange MUST NOT refuse a report for that. A quantity below the
+// estimate is charged as consumed and a quantity above the ceiling is held for
+// dispute (the settlement rule on Pricing); neither is MALFORMED. A quantity far
+// from the estimate is analysed out of band, never by refusing the report.
 type UsageReportRejectionReason int32
 
 const (
-	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_UNSPECIFIED             UsageReportRejectionReason = 0 // unset — rejected at ingest
-	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND   UsageReportRejectionReason = 1 // transaction_id is unknown
-	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_DUPLICATE               UsageReportRejectionReason = 2 // a report was already filed for this transaction
-	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED          UsageReportRejectionReason = 3 // filed outside the reporting window
+	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_UNSPECIFIED           UsageReportRejectionReason = 0 // unset — rejected at ingest
+	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND UsageReportRejectionReason = 1 // transaction_id is unknown
+	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_DUPLICATE             UsageReportRejectionReason = 2 // a report was already filed for this transaction
+	// The reporting window closed before the report arrived: the transaction's
+	// ReportingObligation.window elapsed. This is the time cause, and it names
+	// only that: a report past its window is refused with this reason and the
+	// Connect code failed_precondition, whatever it reports. It is never used for
+	// a report's quantity.
+	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED          UsageReportRejectionReason = 3
 	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS UsageReportRejectionReason = 4 // ReportingObligation.required_fields not satisfied
-	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MALFORMED               UsageReportRejectionReason = 5 // report payload failed validation
+	// The report payload failed validation: it breaks a field rule of UsageReport
+	// or carries a value the Exchange cannot read. Refused with the Connect code
+	// invalid_argument. A consumed_quantity that differs from the estimate is not
+	// malformed.
+	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MALFORMED UsageReportRejectionReason = 5
 )
 
 // Enum value maps for UsageReportRejectionReason.
@@ -6576,7 +6589,9 @@ type ReportingObligation struct {
 	// Whether post-usage reporting is required.
 	Required bool `protobuf:"varint,1,opt,name=required,proto3" json:"required,omitempty"`
 	// Duration within which the report must be submitted (e.g. "86400s" = 24
-	// hours; proto-JSON encodes Duration as seconds).
+	// hours; proto-JSON encodes Duration as seconds). A report that arrives after
+	// the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
+	// (Connect code failed_precondition).
 	Window *durationpb.Duration `protobuf:"bytes,2,opt,name=window,proto3,oneof" json:"window,omitempty"`
 	// URL to submit the usage report to (if different from Exchange).
 	Endpoint *string `protobuf:"bytes,3,opt,name=endpoint,proto3,oneof" json:"endpoint,omitempty"`
@@ -6680,6 +6695,13 @@ func (x *ReportingObligation) GetExtCritical() []string {
 //
 // The full rule is on Pricing. The Exchange accepts such a report: a consumed
 // quantity that differs from the estimate is never a reason to refuse it.
+//
+// What refuses a report. A report that arrives after the transaction's
+// reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
+// and the Connect code failed_precondition. A malformed report is refused with
+// USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.
+// The reported quantity is unrestricted: no check on it refuses a report (see
+// UsageReportRejectionReason).
 type UsageReport struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
diff --git a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
index a1e09fb7..1100736d 100644
--- a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
+++ b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
@@ -4,7 +4,7 @@
   "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
   "properties": {
     "quantity_tolerance": {
-      "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+      "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
       "maximum": 1,
       "minimum": 0,
       "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
index 9c29536f..f2827e16 100644
--- a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
+++ b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
@@ -5,7 +5,7 @@
   "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
   "properties": {
     "quantity_tolerance": {
-      "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+      "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
       "maximum": 1,
       "minimum": 0,
       "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
index c3bfe07b..3e37391a 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
@@ -4,7 +4,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
index 1b7a748b..c6b9e3d0 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
@@ -5,7 +5,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
index 752fc5a6..9ad0d0c7 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
@@ -4,7 +4,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
index 0e5d7932..5bf0cfdc 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
@@ -5,7 +5,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 9fccf9f8..c3f5de70 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -317,7 +317,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index ca7da983..e4038629 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -326,7 +326,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index 55b9cb65..76ebbb96 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -609,7 +609,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index 511f92f9..b9d1275b 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -618,7 +618,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index 0d68f713..53146c3d 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -381,7 +381,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index c30a384a..7aad252b 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -388,7 +388,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index 40349e9a..1087fdd8 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -520,7 +520,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index 43dbcd86..0326d0bb 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -528,7 +528,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
index 44b70c58..f337e202 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
@@ -31,7 +31,7 @@
       "type": "array"
     },
     "window": {
-      "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+      "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
       "format": "duration",
       "type": "string"
     }
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
index 63062da1..4efc4e9c 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
@@ -32,7 +32,7 @@
       "type": "array"
     },
     "window": {
-      "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+      "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
       "format": "duration",
       "type": "string"
     }
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index 1138f03e..ba1ef39e 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -640,7 +640,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index ee24352a..a3b7a8bf 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -650,7 +650,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index a05017fe..88abae59 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -540,7 +540,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index 7459f91a..b6b62c0b 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -549,7 +549,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 784462cb..e19daf4e 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -696,7 +696,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index bed74745..f636d6d2 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -709,7 +709,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index eea7d614..5164a736 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -281,7 +281,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 00827c2e..03bf058f 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -289,7 +289,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 215db711..104592e4 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -281,7 +281,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index e6f3e673..8e5a49f3 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -289,7 +289,7 @@
           "type": "array"
         },
         "window": {
-          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).",
+          "description": "Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).",
           "format": "duration",
           "type": "string"
         }
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
index ec19ad42..a9bb0336 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -107,7 +107,7 @@
   },
   "$id": "fora.v1.UsageReport.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
index b327b813..64473041 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -111,7 +111,7 @@
   "$id": "fora.v1.UsageReport.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 752f22c3..c2331280 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -817,14 +817,14 @@ class ReportingObligation(WireModel):
     )
     window: str | None = Field(
         None,
-        description='Duration within which the report must be submitted (e.g. "86400s" = 24\n hours; proto-JSON encodes Duration as seconds).',
+        description='Duration within which the report must be submitted (e.g. "86400s" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).',
     )
 
 
 class ReportingPolicy(WireModel):
     quantity_tolerance: confloat(ge=0.0, le=1.0) | None = Field(
         None,
-        description="Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.",
+        description='DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.',
     )
     required_fields: (
         list[constr(pattern=r'^[A-Za-z0-9._:*-]+$', min_length=1, max_length=64)] | None
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 37453b37..4cb3164c 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -50,7 +50,7 @@ export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","D
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -100,11 +100,11 @@ export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","
 
 export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
@@ -144,9 +144,9 @@ export const RemoveResourcesRequestSchema = wire(z.object({ "exchange": z.string
 
 export const RemoveResourcesResponseSchema = wire(z.object({ "removed": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries removed").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
-export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nFor a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference."));
+export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nFor a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference."));
 
-export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
+export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
 
 export const RequestAuthFailureSchema = wire(z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RequestAuthFailure — an RPC request's HTTP message signature was refused."));
 
@@ -170,7 +170,7 @@ export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC
 
 export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
 export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
@@ -182,9 +182,9 @@ export const RetrievalAuthFailureReasonSchema = wire(z.enum(["RETRIEVAL_AUTH_FAI
 
 export const RoleSchema = wire(z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]));
 
-export const SetReportingPolicyRequestSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetReportingPolicyRequestSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
 
-export const SetReportingPolicyResponseSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("Accepted relative deviation between estimated and reported quantity, as a\n fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the\n receiving Exchange's default tolerance applies.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetReportingPolicyResponseSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
 
 export const SetTenantFeeRateRequestSchema = wire(z.object({ "rate": z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("The fee rate to apply. Required — an absent payload would otherwise skip\n validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
 
@@ -198,13 +198,13 @@ export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TER
 
 export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
 export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
@@ -212,7 +212,7 @@ export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "di
 
 export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report."));
 
-export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it."));
+export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
 
 export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
 
diff --git a/proto/fora/admin/v1/admin.proto b/proto/fora/admin/v1/admin.proto
index 8dd5a7e2..9709ef00 100644
--- a/proto/fora/admin/v1/admin.proto
+++ b/proto/fora/admin/v1/admin.proto
@@ -47,9 +47,10 @@ service AdminService {
   // Sets the tenant's fee rate (basis points) and optional operator note.
   // Full replace: the previous rate and note are overwritten.
   rpc SetTenantFeeRate(SetTenantFeeRateRequest) returns (SetTenantFeeRateResponse);
-  // Replaces the tenant's reporting policy (required report fields, quantity
-  // tolerance, reporting window). Full replace: omitted optional fields clear
-  // their value so the receiving Exchange's defaults apply.
+  // Replaces the tenant's reporting policy (required report fields, reporting
+  // window). Full replace: omitted optional fields clear their value so the
+  // receiving Exchange's defaults apply. The deprecated quantity_tolerance is
+  // accepted and ignored: a usage report is never refused for its quantity.
   rpc SetReportingPolicy(SetReportingPolicyRequest) returns (SetReportingPolicyResponse);
 }
 
@@ -93,10 +94,16 @@ message ReportingPolicy {
     (buf.validate.field).repeated.items.string.pattern = "^[A-Za-z0-9._:*-]+$"
   ];
 
-  // Accepted relative deviation between estimated and reported quantity, as a
-  // fraction: 0 requires an exact match, 1 accepts any deviation. Omitted: the
-  // receiving Exchange's default tolerance applies.
+  // DEPRECATED, ignored. This used to set the accepted relative deviation
+  // between the estimated and the reported quantity, and a report outside it was
+  // refused. A usage report is never refused for its quantity: the reported
+  // quantity is unrestricted, a metered report settles by the rule on
+  // fora.v1.Pricing, and a quantity far from the estimate is analysed out of
+  // band. An Exchange MUST NOT refuse a report on this setting. The field and
+  // its bounds are retained because removing them would break the wire
+  // contract.
   optional double quantity_tolerance = 3 [
+    deprecated = true,
     (buf.validate.field).double.gte = 0,
     (buf.validate.field).double.lte = 1
   ];
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index ec722ff5..23877e78 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -3177,7 +3177,9 @@ message ReportingObligation {
   bool required = 1;
 
   // Duration within which the report must be submitted (e.g. "86400s" = 24
-  // hours; proto-JSON encodes Duration as seconds).
+  // hours; proto-JSON encodes Duration as seconds). A report that arrives after
+  // the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
+  // (Connect code failed_precondition).
   optional google.protobuf.Duration window = 2;
 
   // URL to submit the usage report to (if different from Exchange).
@@ -3210,6 +3212,13 @@ message ReportingObligation {
 //     dispute and never charged automatically.
 // The full rule is on Pricing. The Exchange accepts such a report: a consumed
 // quantity that differs from the estimate is never a reason to refuse it.
+//
+// What refuses a report. A report that arrives after the transaction's
+// reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
+// and the Connect code failed_precondition. A malformed report is refused with
+// USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.
+// The reported quantity is unrestricted: no check on it refuses a report (see
+// UsageReportRejectionReason).
 message UsageReport {
   // FORA protocol version — "1.0". Stamped by the sender from a single
   // constant; advisory on receive. See "Protocol version" in the file header.
@@ -5250,19 +5259,32 @@ message RetrievalAuthFailure {
 }
 
 // UsageReportRejectionReason — why a ReportUsage filing was rejected. Replaces
-// the free-text UsageReportResponse.rejection_reason string.
-//
-// None of these refuses a metered report because its consumed quantity
-// differs from the offer's estimate. A quantity below the estimate is charged
-// as consumed and a quantity above the ceiling is held for dispute (see
-// Pricing); neither is MALFORMED.
+// the free-text UsageReportResponse.rejection_reason string. A rejected report
+// is a non-OK error carrying ErrorDetail.usage_report_rejection with exactly one
+// of these reasons.
+//
+// THE REPORTED QUANTITY IS UNRESTRICTED. No reason here refuses a report
+// because its consumed_quantity differs from the offer's estimate, above or
+// below, and an Exchange MUST NOT refuse a report for that. A quantity below the
+// estimate is charged as consumed and a quantity above the ceiling is held for
+// dispute (the settlement rule on Pricing); neither is MALFORMED. A quantity far
+// from the estimate is analysed out of band, never by refusing the report.
 enum UsageReportRejectionReason {
   USAGE_REPORT_REJECTION_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
   USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND = 1;     // transaction_id is unknown
   USAGE_REPORT_REJECTION_REASON_DUPLICATE = 2;                 // a report was already filed for this transaction
-  USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED = 3;            // filed outside the reporting window
+  // The reporting window closed before the report arrived: the transaction's
+  // ReportingObligation.window elapsed. This is the time cause, and it names
+  // only that: a report past its window is refused with this reason and the
+  // Connect code failed_precondition, whatever it reports. It is never used for
+  // a report's quantity.
+  USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED = 3;
   USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS = 4;   // ReportingObligation.required_fields not satisfied
-  USAGE_REPORT_REJECTION_REASON_MALFORMED = 5;                 // report payload failed validation
+  // The report payload failed validation: it breaks a field rule of UsageReport
+  // or carries a value the Exchange cannot read. Refused with the Connect code
+  // invalid_argument. A consumed_quantity that differs from the estimate is not
+  // malformed.
+  USAGE_REPORT_REJECTION_REASON_MALFORMED = 5;
 }
 
 // UsageReportRejection — a usage report could not be accepted.

From 9d51bb8749215376ab42b91fccbe2b7389ea1d53 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:47:34 -0400
Subject: [PATCH 070/164] Scope idempotency keys per caller and refuse a reused
 key in the protocol

Each idempotency_key repeated its own wording of the scope, and none
said what happens when a caller reuses a key with a different request:
whether it is replayed, executed again or refused.

The file header gains "Idempotency", the one statement of the rule.
A key is scoped to the caller that authenticated the request: the
authenticated agent on a request it signed, and the pair (Broker,
requester the agent acceptances authenticate) on a purchase relayed
through BrokerService.ExecuteTransaction. A key another agent used, the
same agent used through another Broker, or one used at another tenant
is a different key and never a collision. Repeating a key with the
same request is a replay answered from the stored result; the same
request is, for a purchase, the same items in the same order. Repeating
it with a different request, for a purchase different items or another
order, is refused with the Connect code already_exists and an
ErrorDetail with no typed reason block; nothing executes and the stored
result is unchanged. The idempotency_key fields of TransactionRequest,
UsageReport and DisputeRequest point to the section.

Comments only; the generated code, the descriptor, the SDK types and
the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 672898 -> 674409 bytes
 gen/go/fora/v1/fora.pb.go                     |  41 ++++-----
 gen/go/fora/v1/forav1connect/fora.connect.go  |   4 +-
 .../fora.v1.DisputeRequest.schema.json        |   2 +-
 .../fora.v1.DisputeRequest.schema.strict.json |   2 +-
 .../fora.v1.TransactionRequest.schema.json    |   3 +-
 ...a.v1.TransactionRequest.schema.strict.json |   3 +-
 .../fora.v1.UsageReport.schema.json           |   2 +-
 .../fora.v1.UsageReport.schema.strict.json    |   2 +-
 gen/python/wire/models.py                     |   6 +-
 gen/ts/wire/schemas.ts                        |   6 +-
 proto/fora/v1/fora.proto                      |  79 ++++++++++++------
 12 files changed, 83 insertions(+), 67 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 6ce74e6015dcfbc1570c585efbd850732ba8b35b..27c5a6634689d78a1047fd0a74d5df43bce3ca65 100644
GIT binary patch
delta 48410
zcmb5XcbpVe);~O5U0qdO)6;pTr+bF(8j_?Lf`Ew`K|n=ROslTDi;gfVD*^(p&psQ5
zjDRpi?}!M3WDrzBAs|75OH_i0BvCLRN|3ao!uvh<-kL&xpU?Yy-~alYI`@0eJvW_u
zZs<WH8lITgaKI4H5M_vWh`Q7_>Otk;5BBH>ef_7HZ!L|OdeoQ9`rOVw<NMVY9W%*e
zDq2=l+plE3;`OxHR*#*%UAxzQ=Ay5vsj@rFspeLv?iJ7V>D|AgSGT{LruEP>6;|Jh
z=U=Gk*T0|D|C#dsR<~!$dp%uY_3K~Wzry-*z(lsbwic^wV*R0C`O_5-RP^cHx4%{1
ztGj7+=+Upw3;n_3sY%qTDDU=+)vdg5-@jYs)&m{y|3jw-I(D#nxH&%lY{lP8M5ZtF
ztmtPw)w?fpt+2p0t@6Gy+wRsg75Lq|SGS5Ll$TXeNx;3If^6@871mQdDtdPBXZ7jb
zqZhO$*%B1x!EU|#RFqil2+Zoy&+12XcdLJIo<q0to;@olGZeA>1?1VQe~)e`A_QC$
zG_iVB{H>y|X+7Pu_mky4ORO%vP!QOsBN>QG!U(<kTm5=G-3v*3^zT>E^Qk8M1J91~
z{Xern(I{0DR((pZ<pnD1yjd>`igd`Y2MW}keeBf|l`lTiquVp4)vr%Q`Ln`2&z1Lr
zH7R|+CRRUDm}~N?u=<qu=xa5&t#9vVEBZEZDw7wrLZn0X-MUru>0b_e_WMoY8#?9^
zI``^b31jpXsjL_JRdgp6VK6dLzw+m5@aPkmeS5#~^fRcS-aM6~0k2Xdda=A8$FRua
zQU=Yg9OmOSDIiU&<NwGe2isMaTits+^%QCpQoJ6i0$dg^_|3388JgD>K6mTgvuBTf
zJ$m<Qf|8=O{N`(~elG&8yY*Dx-p|#j!C|gL6Y1ZZzV)r>_d?J9)P^e2z<ZXXi9XV!
z|1&*$p$S4uYDZ{?j%kHS`c|Nd(E7@`nlD0}Tj{}e_jGgwO;VDQ5#-JMbKi<?J^J*Z
z!j*Hy`jN6ViThS`Aw`HMHT!M<pq}tQ72VM3P<R-<N3W+*SLHo=i7v%!NOopq-2}ah
zJ>N@@qw}JI(5R>ed-Sh(4!QQ?>Tpi)zTHvh4S3(BudqvRs)7<~<mLTe=v&cH^g<|O
zT4Ds?g8?_T90eZgivpE*>yKJ+kx_CQEh^C>p6byP+CnAjy43AW@so`HKn2>9u)?)<
zElcwMr!GvlGRmzEoo>Iq;{zS<edsZ#LiiX(CM~!6ywDe|t{>{vZCu<mO)NPik!?_e
zj=7u`EUZO?9V)jkd#BVathCB|_N^%I{`bc#{-+1VQ8Yt72J-6ZWp(V^w|CzT75&S5
z^c02cg--l;8k&%(AMEvH&)(ghEwS#EH40o=%jkZ5q^0gB+NjemUg$-2MtpRVwxr4n
zy+kkSPF=cJ#fvp%?qB{a^?J^OFd6(Ir{`Lt&$54=*7Ga*uq+r<K`)l~#TbjGSc8n-
zU|KXj{@v>L!jr|aeni{oR^AIO((2yZ;)B79Jy4@hR&*<;n&mC49gSe^YQ`bAVEn@a
z70<J+ReI3RM^@z8gxzvRZ*ZH*%P5tCxw<`rvIrGwh7AlePA8**1!MBH>ap@3{`>5U
z^|VK#q5X=HFuR$mmZfAx)r0KMH)<6n2Nf-0=9oTWD&Q*l^&HYmWV5#BVINQ9iK-{;
z(>H3LE5#=iEniA`km!VxZ0wLobV6y}$t>q-@bL%s^DSDpk{=W;B4rffD$!aFi6lQL
z4Q?^VXgm$bU+kCLXkl;DU)+4WNc4-6yiO+al9bY-ow?1!6RA;kpqFjCRomWlpjXRC
zDHVwZdaaur5{U+SJ3MZV7KwaOb*PtZZmW%HI@C?%L!zNxt4t>HA<<B8r*d<gFoPCV
z$9nC-?X>Yq)3IJHD8)3S8tV<E9TKU=dK=zkE)-emQFW4+b?BhI)pU|q%ac+%5>4_Z
zN*of2CV6kV-<+qKiV9a|x;JZ)ZFSTdD52?Iqn7!Usj9s4X0k`_(4J{N)2nc!5);)k
z(;MZ;L;`B2H<>bLAb-%Fs5aNDyv5Gkp-r#EFO#w)K5Q`8o9&=@fHKz`<&{fcfil-y
zP-upPut6xb-tv0Qi0P;A#&CZWWtitxo0%~)+hM6eFz0*Kn}5p$+5)e7OP$|xVbFzM
z^<MKF{5KVPF7sv$QQ7sKw6o!5UL)6hgG%6`CcA=t@h5Ex`}i(RYq7$s7`zPl0;N}Y
z{Q-wWHY>cLu=#hM4j)&0l~n3kR=nEi#P08`6&Hh%Ev2c%tG$6-heYDl-u$H5geOKZ
z*0KeiwUWozIyUnt3T(F4u^C7ptaU685(sO_@?>C;29X7Kaf=ZtEVkBL*vWiL;h7-8
zCi}*_wWglZO>Qn;*kzM9+mbk5<g&?IbfZI3BJVA2%&j>b1MUB)J@X!IyH<MC#ZZB9
z)SF#LCW3WA)@|aDz&Pq{+RR*lmJL-=tkd>e4{2{H9ZtI#K4QD2^#S9wH(FO>Q13YH
zy{>`znkb7F)h>9I%U(4#l686AKb!S=!^mTgJ*quc3BFTf8bB_1{i4-*6b&F3yzxBV
z%s`@<UGOF@qnSlb1Bz)dS}>|z^r}C3ebSJehjf=<Cy4nSF)ix*uUA{^F*CeO=y$(*
zmD;I@#rEy;=eF`FI&1=#XyPED%CFvJp)8LM$X~sgBJ+x9b*R0;DjRo)|ECTf#ekIu
ztFrHagk=V+vhRQd(qJ{pM*wJJ0BNvVRL87V(5{uJHcHKU$6ooEmhePIsYbqN*9x`k
zF)E8((O+u=0+3@=X(y0?9HYvX4HA%JRJ80*NI7bF+5}apR@Kx-&xAKhlWg~&wdIvy
z2|Ggo=_jbt&LEL~f*Q}|b_NMMPf+u!Rbgjha63;_Ri+9%OCHiqLR;c?mMqx$6_xB<
z%2h!}c}-OcQ%x<Vchznx10jYOMNwez*VODVw=hWP^qLyslMc#2-Q_hkRbaj>$^>$n
z%KqI|8(lih#h}hGP0bd)6ls7lP0gz<A!#z0rq-)(UZh5-D5$16_MMMw|Klm0<6=-}
zn4@NkiiZ#|=BP>0H$Vboj#~dZ-fnmopRclAyZotEAdqstDw_;Qq@1tHCIb>F=c`VW
z;l+JhHW?7m<!x674fXrB(`4`!NN+n$1|*Q)rY5t3hC**tTdrn(!bUu)*`ejC5jFpS
z(s{)|*rl8HNbw4%rojZ#3a6!j1kws>Dfjav__&Jg>83qcy2{bTt9VeVRZhKtBq66>
zKmuVE)yr^|L!g2;+TFTqex-Dyi$Qg}QOy>EotM|`Mzw%D1JIP}cB5L-)SMtNK<>2X
zJ*DL;r8`{=s@t7vHg^Y*i0XEynihi;NJ^w)kXlG}>!rHgYybR=R^ln!>tayd?sfH`
zy4|Z5@OhQe0AsJ(yoEUmcJ*Oi{Y=d|&Yu3OHZt^?>Wh<IeSBIy@XE8=Bk2RG!aFhX
zQ0xP0QEl@fE&|v??1g8whcky%rGQ!=WXJ<Lq^2|GOtfIoAU|i{J*&-5f37M?Da5&I
zVJ)*0mw`fGuthz!&gm~yrAW$<i}QtAx1RYlmqAI7vBYy)kD_C)LgdjLBZby@Q4|aS
zKd4!+`t0e?X{$Y<A5>q07lzN4r&!P4D9tHV;r+x1CK8{besU`^@K8rQ!@lUPwac7Q
z74G#B6EbJi1`WB71RCTy)~=6Ml{u#>^|_{C5?5{5$UKKife?!GlYP36_JSw<ldACQ
zCoZIZqU!I;g;1WK*`U7K6X~B-g;xz^s60PY)u5q*MECghm44cT^?r3VB7f{x(x?j4
z6l74<FZq<)QUiSK?K;M-w%t#=Te%gihEh9n#a{9?DRxL`_mZ!qof$MWN=^;zC12CF
z=BHF&m;s{dXdk=nZ`yuqv`=X+Q;};n+Sjs`$waQ02&#Sd%`a-zidF5av4jD!Y9B1I
zp1Q0W)u#Hg=CdFFuB{7C^}%_8r7<F5jDN$&KKNg)ZOI!xMW-x?3q{`W895FKJ>T$!
zBj!y!4L-i<W6l1d-Q4<3Hx2dDH+_bfIaS_E-}GTbui$B*%xu^p^@#PzGZpNM|JCAb
z=|8l)ioxWql?F!u%=Q(E`5PoMo$bT?eIEw^HIFs^r}jYEJf9rERfRg}JfHL;KmuW&
zuWlo$Hg(W>zTy&dg9Z!uqS`87)<^cLe`>dRL#upnTCWGPk4*4B3k=X&6~FJ3^AnhW
zdf(?4Lo!G}z3+p&*^(#0$91gN0IhZLI>!J$K1{9i88MzaNF-V3%S)IocoG<31KTw~
zYuR#xn}mwI!H4ma%<khw-r&p4Gn?@w0NCuq%vIZZfZh5JEuY;#P>U6VC928C%e&c!
zrIScb<=yPVz$lbNtKP!K4b)nfZgDK;Q)oEa;>#9B1_=eW`09z_2qX};_|WDTp#ef6
zH2R%P9i+Wow$p_mw`-?QIv0=u#7>`d??D1$rw>l%R15>iP5aE3b<qBCkoLN#-e;mo
zc~wo1YTx*jlRnk_Ofz-R!~I^2e#Env4$&U<w))nmHZ;R<vcxx-?}Sf%3@(<#@kV{$
z`P8c(b36^d8dc+2yWLA#+*5qksYh_3-C3XXGeAPSv(zd(@-+B(o(&qI-BEVlDWAp{
z9_O9%fg~YcR2Uf~5YCg4XJbu>Y@yg7&DKY1*Lh0@X^NlM1=vV6NQ1gmH6W2{kcNDl
z@<gD9YV6OWwPqzlHAVOz8n4cwT15EOAh}eXx@J3`2G#kJ##WBjZYzCBlRZG=_4$&P
zEnGX0$o3^I(?DiR_4$(4xCw9R8dc{gjomaxYgsnRg&-edlqQ=5ga9#0tJhRQP<@Wl
zT3m0=qb8xz7&lg93&v>kJC1cRG|tWzT^T~a7^}&y3=$Y)HFV{-{2T+dKSNXIXliPT
zpWXMmzmUCL?l<f;RoY;+5?_RqsBsT?hE`K~<N?nhBhs1=U*ROq(DLSJ!bv0scM{*!
z)Y+PF5+x7mW<o>mBuW;X#910SiHFi$B@Ch`H6@YSVXvF0{V`Mm!qI}f=aZUWbW*T^
zc2Ywp-7O5_r@88mncCixGj19`(wx!!!goijK$<fe95KEYf!U(!MZ421t(K?#Mc0TX
z>gS>+I~Lf$xTr<>9E{?cz__T@t#8f|`DSB!(v<qCY7evKXnAbyY;ANIIKsKrlx(2=
z?4o4@?Po3OG_Gu*{jAlgXRb1M`2$h4O1DSO(b}kGReB9b0QFj>*EFvHK&teN@S-#&
z0FWxZq?x&vyeLh{iK<g{TV1HNRm!HgAUOb;qSrLA9Dq#GYZ_P%K&I#|TADwKas^Sz
zIvcb|J6Afx#RvjphA!8fni2%Y487=j*+_%Hn4!16(Yzu$WhkmHv)^5;4e+*I=3<0^
zu}sf)Dl!C&WqQnMvmszC)6<r@-{ge}N41^0vdiwfM0><niJy*P!+_bTXN!0SdM{vh
z>ItW+!+_bTqpC$C4Wp6n)NAk3MPLHrw9H15k94&uUoc7*#*vSSMT<jCiNGz?`QotS
z{~$Eqj~&|O548dxdE<kamOuh%uP*(4kjQ&4<$Xn%G71+_7fVF)Jcz0(MHJ2BfL_zs
zNTmb1Tp~gkNC$NI`>*&hile_?(6bKPTUKh5)bIrzOT>wkgHD6)W!7u0_DY+}4m6m6
zzU)AQ1oUM+$|GNt1kjiD+I7r3IRZZZ%G$2e?kfA$MWEQvuPy=&!N2NJvBuK*5d5o-
zNXQVO1d2A$VE<XC4J{pL$O7top)}Bt1q2C<fksr+Hb`hO(12@v2iF4B5QB|euiaTT
z#D(xejUg@sxfeqWIn(KUd>&$8rh5~97zzgaPBiTB2ii=fbfOCa#{>KtJ!piUXh=gN
z5pterz-#WqF(6xQu(KPr=S!<y2%2%LT?iVXs|^vQM7}gaR~uH5`I62t&_w3j(>7@%
zz1`*;N}P8Qoe#<Lja)G^fJCDC24)7DpFm>#n{O09%4b|6hx^0CDR~5grpX1sLEsO(
zhyGxW5+#Ozy3&4mi#A#*UFmA8L)(?EwiL!#Y1C9d4dN>eRR1b3*A^LXv>)ECz3(aA
z=wcWs#70A|s&yW~*l6U5p%5f6HX2xtY!et5f_K{Y?bLR7N_V;#e(15&)q{rQovz_&
zNZx6ng)b0|2t)E7_SnbTTcvwk2pW<1xDYfV?=hl$K?0l5h`h&W(1`b0UBQ67&)^Gl
z)^(SrHQi^(eu_^>xX+ON6eJSvGn{^^D;Rta8KR$pKs!3*st|w*hg=nC1U}@Jf=1v&
zREnWN^izyAzZzK!?2mVAs-E|&VHB7v$vHBppAPmbd8q{oMPqF50Zctj!4Y#Dz5{l!
zU(U230Xx`_nRYrE*r2{M%5Qf$sLk*+9p$E?emTnT5AsF?DWn?Zk3`Ma$)pCkMpb@h
z9oD8ct@2AZA6z7=@)z=OISC<AmA_GA5oIxmoZx3a9M(oRo#5s~U2lS4hMOS7r4U4z
zL`~kHt~bMP&pV>M;w_osmu3eWsb=_-V&nmdR5Sc&djAonf@SC1&wZ(F^)#LDW<|Yg
zzF$uFhKQl~G2O3<V_Az}+2{VOWA;<WwVTb*=V)RSj)mtA10Q9JPiZBYqke_Y1;m5}
zj#7rZU=Ywi{(}8-O52n9LfV6v5c-0IUWQhnL4IkUI<1ZISYP@Tt~+swO;RfmfJcwl
zPWiJI+f&YJHz;|h{D>5+p)7a^=Cog_Q+u(8y>pkpfT`!TX?4I6VFP>z&S^i!n+ZZ5
z>-2MeWunP8pV!7!;wK*<0Yqw@^J9R-JVqq4Jm<G2nqC?rIAiZH*z>$!y`H8q&e=T-
zPP}@-uUgl#Q0j|*wa&FHU|;g9^{!<B>%W!1<DpuA`W*{(cKLT;7%G1DtF^BM!@%^5
zUu}LZ3**eMzf%mu#udMMohwy246dYl)vq>idBeQu*8@zo{<SQ0*n#G6^@r~>=yy`^
zWCokp;t%t}F&Se1))p9Nhni|#g0FO}i0OZrsTN(ECFb(szr&Bgx&IwlJgSZ`e`|}}
zs5;X8ZHe;GPp^glgxA|>vr=tYlO=elxG|=B)3q#AT$L#t7p^O$P;p~T^_FX;P;cYR
zYs?QR)Z6&qB}BbVFp=Xd(Gt<MeATA%y2(Dhq`g^*pQ0NfSchDz&5R|RB8CX9+AMm#
zrYS03-V|RYFwqnhuV{*sO*MTj3nhBZR5RDIfIY=TgKfpT51`*Lm4&9te)_N0q7uIy
zB`9R{hN}dM4auT~HA;Ae64On!M8bQe5;NR3z*$h@O}FuI7O-djP6}q7RcWe?uLXl$
zXS-F&Q^KxuuFX<Z<vdeuU6WAM<a|>ty_SV67ntg;W_w<4ATKhNTD4nQ?O(tN2OP-2
zhWRb5;bram3_fsw6BSM|u|+1rAopVsLP+UdGiwF=$7Sul=)0yb%!fiAQd(jv8CLm%
zzg}GtO9IUUu|AN1SYp;nn-(%gm?)|)W%Ym7YNwZ)3U}~`37MrN17{c{sAcS_pS7a&
zGE?|7#3U}s6mc1tYdM>R6-|1%sc_dEGE`^FNv4>~ppZ8E`e&_a#&&V2NH)oIK#?d$
zWM*w(Eq~G4M^~A?7%vhJ5v?|r>v)maqF*#E4U&h2efS83)h1$>cOw_XeJGr?`xour
z^!u(1mFRtvK`;w4pw_UmU$qC)YfL#bi;;f~$)MUHgA%P}i+<Gxrq{YSRHC&cQ^sXb
zqIK+^D_Yz1I#b3{5yXMaI+AJ4Wza&_vjtbQ8`JBZibRwKGV4j^HZFs%_yO}=)jDK8
zFclu@fC98+_<&@{G6>{sHnX;~?pI-%&89DpTZTtnJ~Wjk!ZJs$!ZINFBGZSDK={za
z++G*CAaoK{|1(L^>!<%?%4r5Xi2R2{sQ>Y3%9csD>o=sgm<o?k5f36;NaPkS0=sOT
z^qO9p-ijI_&jTW4maQbxhKs-~+a_Jq%dBmVRS+40$Tkvr6poTVs(oZ;4b5f`dGv?t
zePkLT0C`nE7CL)O<x^8Nzw;n0<(FY8;<1lB`iYi%O|=pCk;NxqenKN8#i;}b+U+CG
zf5}7klUwk${k@`JR!YA%<<bOP)XCSTToQnUVZJuy@&+U@zBaME`33_cF!1#xtE1^B
z+MIMDXoYmrg&<Gtq!|^?K9T_9q?yR)Yb-w*@D#gK*Y9d`%0-}P&?y&zvN>hS#SM}G
z;gpHR&BI&=P-odrU4OLQSr@?zgtKNg+0F+&X}&mXhWWk%k(9>7zQS7a(fshyv_aX*
zkZk*DLx11<Bz}tpHNF66P<D+u$ZH#v9Tf{|d<D*+Y%%&144m9S*+oOL#e$j`i29%b
z56)JfGuMYuyC%*8WM`eQhXwR?dcC>XJS6K?aVS$;ovp0PR?S&{)UGLOmw5KGaeb!R
z^8IXhGgO)48|=0wTkUua2fD1yR@<8MD9&I~_3p6SC-uhO2X|!40}tS$06Vg!DM2F9
zj%>N@4icWoj_iWR1S&|r)Y_3<_(vL^36wa<dIwuysK;VEvLAlL97S%ti8|8uWGnma
zZwhtOQ;DC#g!ljx?r}^A5*qBumWy4G&|put@Z|^vCft*4?UyDbhS>Vwn=KDZNESaV
z@kzEkEK$P*+P-Y(utW_PRq$yx4olF!o{1)>9n4mavI%MZzDoRZ6s1;o&{dRL-9e|W
zkqXcUow^1IMGs~d9j#H+IiqmMRg|;1qK92YB@<{zplA_4)j@D5rb=z)b5fKqKuyZ>
zTYGRuf8W#W+iXSSjTu}h_HDK<+BQg%%8tg&DvD}nN3|cbvtA9@eTwwap7@X1*eN+i
ztvnkoLK_lL#s=(29sLV$C4P$~7QO&+NWd=;K>~3|0EiSP0*Rsy3B<<+xPQ$Vd&s{Y
z8c>_?c0nS$xSuvGAUsbl1Qu|I2ZT@Qu+Vy53c&TLq!uMp0&GM;_?Zq1<K)Ny2DEFW
zP(7mp!hd(9V6T@6>>4TBm<p)1YFOxjfFE<MuDnyiTMQs*Urhs9Hr4gS08<+1uiiH?
zAU83<<!rgv1QI|K1K4Y#K?Njw%fvvGdo!FI?&krOK&%zt-_NGOtvbL?HqgtuR|gca
zWd$x!s{=tXAc6#HbpQjRK&7KE)q!LO-Usnj^ug*tsyz>PNDhTNssnA?nZv2l1Bf;U
zvR2un8|uS6b!P<lu8mg>U{skIQ04|y%<Vczv6De8c0*&mOUqdS^#-1g_yl!l2h;~)
zIztL$BV$fLUF<QhgOvg_rYvA98|w|9UJ#I517M;!3jz@l0RxHREC^tVpyGf;aTWwp
zVxS_D4=D=*1s!;CB!`N#AkgkMvxMgZ#6<z+?v%y;eN`)B&o<G`ZeWP*s{pT-MS-}8
zmw`l%ivk!zM2=J~ivm_>Q7}G$U>&n4P;{5fk%kl=FIp71<4$uvmbTCnWnXUZZ=x^s
zv{@dILjt&HV9NtCEDI8fEf2&*pc*7HULL?M2)rUdfLh7cmFNS@R=Nl@5v>f!2?R1g
zSQ(H<#XwS;0G!qxIjF`Q3@L%E)pli5eY;lgU_ed|IjF`X0p&|n<20K3b7VadkM(J-
zPrd8&fZBo=SA0TQjt10wcs&XZ>hX(!`jQ7G@*;gyyBJU|18<P&;9>YCp8e<zy2sb*
zQUD7nnrwJ-a)kaHz)(vKLvR52Q$QW+F+ZaIlS3`zDjU;A-&K0mDLa_3-c`qXAW`<K
zftWb<01{=t8i038TY@=c+Ce#NN~zwea!`&Uh9Yn|TTa{{k!Da1CT^-~kf`cGIq6P9
zRi~;4<z(*URZRl2st4tCyxp8Y(eoUtYL=rsoEl<^`w4VRwtwFq{2X#WtHD$DeP#Mj
z>JyL=GXqkfAS_3Q)j>ijmXi>NU_e4CmV-kuLMiINET_RA_y~lrP=QYSv7CkvnOA78
z%%KERbL@HT^-9m<Q{8N6%Xn&zJo5u7WHU8Kp7{aEQ(<>cWaC9PQ*#Q%5jlL7*-Xu;
z)yez|&jmy1j2t$+qu%xL8Ez)D%Q_=RhA(qO94beKFF_)c894}FicH|qfUN(JEDQNF
zRF)Yz*F9*CrH+$BljeN8!|nQbPuKZwF8uIMj_f!PLQ&@D)Koo%h3Ds>>P0TtWd@lM
zV+4eeOOiNN2XhzssySr;6?V%z^*u`06>cVUE@(xL>{}2*CM$Ae-vWtDR^*^>iA*Sr
zydtMoXIT^qBU4dU<fQN7M}%_dNW&^t(OG|_Y?Ye_MT}Ruc~Hc7RgQE3kpy|H%7Fto
zleY13+HOZq*4Oss&UzhhXh#lQ_kTnEAoY%qS(7gMfRc}M<fIEGpgzu#aYK-R`Zx!1
zLp~z~sf~TY4s_8c7k}cWq3-ZWj$aIfkU^SHa<Gq&wFR<4arU$6_vvMA_B#at69w4s
zG%Aol*q;*-J47IXus;V5Ae}b|5_NzT+^@H4bHGKQA?$#QK+W=i(=3sM(&V67w&e(D
zbcfl?_v^Qn9(ECET0HC`kQaS8CnBbZAa8SrsZ;N#-Vr2)zp}F*&>!>M`jv}88x3DM
z6#*e&e3c^|S&-1;D=Nnq2!*Pls5Uv6H8f<;d{BSftT#C*7f~UMeA9!<tRO~GFGjwQ
z97&01H|VNQ^;FIXA|6E}pZEroz8OTo!sQ^NnL)KHT9p?vQEhfmnGZbNs}e~tkV;lf
z8mhH9L3l1M2e@;Ch)lU0;LZ!GwJU3Y7YCIk03M<^$naZ<XFvUf?)6;%_HWdpx_>9A
z-t7WXUA`Ms`<M-3)DShn<?Quxy>YkYK}AHx!GvPVgCXIGfJBnzLFtKrM2}e>l%5EY
zeCl2vl%9y>(A2#=2v1}n)n16&*DAa5lTh)=RYBR<!6kOkFI*sy$Z1tjdQu>f)2d+f
zU%YP;DV9yEg0Tm#W${E0{gW2k$Ot7~!^U>gOH0<c`B3(2f^xF}GDxx}h|Pj2LOD!Z
z8||OF>1j{p#-JSDLkczUjX^n%fCR?Ipj@GV1jfc7+>0RQ9FPVuf))<Nk<&@EP<CUm
z=n2d^H7v?1_~b~BIf}gR5bXne5>y(be$lLs{rdN?t1I+D-Zo%~Nd^MY;*+2p{Xs&D
zPl6FK$$*3wp9C?<(4sfQJ2iW_hyG~W{VoD^k^L?Lb&>tSh}c#`5+LjkVq5K1+7S<7
zOx2DBl~eYq9(uk~iJy)lG^`$T%|XNJv7qc}NCuc=LG(0Q9Du~);8?KWR8TAqh`|>J
z$AfZlKpe3+_$nyEn>>|R9DEh5UB>NLDaBB!Uj^IJSsF4VPl^1#4oZh!vS7=vgSB~F
z*O7wGUkBU%>Dq*tG`{&=mKfr{3D)MpMkgVf-Z#OvmA^@erP#MYxvY>`BKUsdcUmC$
zej-@=&TF$o@clb<;%iw5zJC|2`<pBgeE%-kR;;Nd{7s0ypS%`dEL*<6){3H?{SZ|D
z<TPg#=e)i8IW*_8^KSjoS?%*ddAu~lPpX^`7B~%wrmXYSkWNsXAVl8EkdU3<TmLJT
zgrS;7K*zL)glbwN9W)sdiU=PEi2yPr)JSa6g5)5@Pl(Y6Bo-PZQ1ZC61m|$XyPY1*
zSzPL&uI6|w%Y8aV(=nl}2_f6)r-zliF(F^X+yMX5$2aq<LW)&;Dc?IPW`BA?AD;n7
zYzg5z8ctORo%9JV4sFMVSm1AZxivN<<FeSChtOCO;u})fXvbbah>iZ6zBV&1Bm>Fd
zayF!JMjJUp#qlBb?2CF?(Rde%qI%;A>Kti~J}@<uH6vtieNlg22~Q1S(~FL8^3Ba@
zA=deS^~bGgA$hJ9T%?{BLRXwirQ>^;Z-m&^|JCQ!e<LJ=oZv$04U!rlq(Dv&DaEz>
zTJ6~MUV0O@=^uKRo512d95AH$bV?9_PKYDU3}r12dCY9n>!Tg!nIQy?dmuv|`<un?
z`KSJDdR9mVi@`+lSs`rJcj7WgF^BE@r`|a;$1x6~caWJAf>Sk^bmHN=`K;}~^r4yg
zAsH<O6GHPt*vLC3gkZu&?D)U*udGE*jUfgHp+#iDnY2BO6D@l}S=;Or|JLj1u{|N2
z)!anGR2UPNb||DAu`|Q;4oW3{il7BPK*2*HzqpbD61f}-1w(vX0*N{~6bc^+iE)V-
z=s)l~LTVe{C?yA491hhfzLo``!=a|Pn7bof0Zixv!^*I*npz*RzkEsGZd8JHw4jM?
zU|5Du!hB*I7?z<EkkDdaI6f>a&Vdnww9p2H)uCZ=4ovcp>0q4R;WLP2;T+hIFr5RV
z`7TUG9T8SKriv|AJYK({8wjyV!Y3#(A{-X;I7onv2+MgKBzotFu$;$<<n#E5u$;#w
zhvxASVa(&V^V|S2I?O&CuisHRIxI(pFrO($hviHO68Vk}%c%h*PlTyqg|Hlk>1B53
z3HnOo@ntRs&2!6K44UVbg{9XX=JVXLu=LtNLic51>9rFny!K^bc<tYc1_HSCcK0dz
zUzO7JZZ5O{Ss#|moG^D6*N5}O${i#$T_48E9lJO%Eo3)_#k~a(oRS;$AfeyJusk0D
z5-B%^o%0c4S~P48^YanyL7>E2T^(rcu+=RotsS<8<?$K_18Hj*=OgY$Z$(^qXE^Hs
zd*uzib7*H+?%gBciqlx^%o}=1`lGPi?*kJ};iE8C9UagI5#)@jyI7m)`t9jm7&U3R
zLrlo*3ZpKB45&Tq4an5n6PAM}f{w%uqYK`}aiGs9VWn28jn$DoK1ffpx-;}9X|Ti=
z8zPO6|AguWO$1q>u%EJCGxR&tpN8cg8kmszG>oO4z=Q=pV|!=lcUzx@<?x5nLguqD
z9RArcB#59pM6%wq+rFvK@`ndS5WMP)T8U8EheX(gh5FqkLn5-nfs5h}iTK6h0VK2@
z5&_m9c^Z5i9$~%T(jRL&+)YEBba=!sLR1mnNry)eq8f+s2^m41Q4#jvxAgI)qaw1c
zgA3h9MPyqC35-z@*-k+s-%%0R;sFi;YD|QExJZAn>6nNxFo3CljENNT3jjoNDI9yJ
z0Ub09I6lHUEk?v>yqhoekMR*X^Fjz1<0JCqEl6ODkD%p_CXY5kN>)c~<83|YDXVrt
z_^~V(gj~VuNJPX<kO&~v5sdWw%x8q!|I~>6&^vmer*x_dLOo$>BwKh6kOIimNZn?9
zK@AchQzO^6;=@yfI>Ph_d+S}jP4RS4Qi$68^oWe0f{irOBk=qCbLG*wXR*8``rk@s
zxs^q(#w@q8$kmudmGz!58ho?)Y~>PtRq1?JQ#wyI->oZ}?dC`1fzk*+;yRyf#*e2W
zRa9Nf-d(ECD_!hD(0QuGE(D#YTI^Ogou^tHDX7H<j0l~ldN(2l3=lBWyAe5HfJDl7
zBXYn1iInd~oB<<32dY*?_<+HVF4wiP6|M?&o@#}w0-dK?5s~8s5&~#N1mguiW`j8Y
zrbyNvyRNO@phP!Cd?9{^1p##&w2vrh*1NZMZ#|Fz0nNLM4<y?9X6i0<WEwQSZed5?
z(-&m6MC2Yfm=M}RCO;^IK<;4kSL%l|J0c<oi<H!Bc0>?+z)Faapxwu8_9}gJ`ePS~
zMvRXMiF~PSYVf<+{j2p`t=$pnm4OMF-4V=I7wB>hLfJ<mStsqcSL^3Jg-0T|oAWhg
zfIu<!Mj}f6+MjxGyS!gTfA;)YUySWpqi@N8U&O~fNCEBh2m)BMMJg2VOSWpQJ~#7a
zL=K>c7(?jG2nNuPg%HTE*`Rg$?#$N_=?)>fOI+$C+k_Ab_#NxFUf)slT|^Fd2;f5K
zy9kE6bF{k`jcPAPvnE9C@(=X0dj88%+<$lzsnsZHUlmo_r6zi;J6YEc_4;h=R{g~;
z;0aFx5>T}&Di3#oM1ECK9PXm<6-e}zs%WAucT|XkAA!89qWQP-t1nTi%JFRN0lif#
z{6<R}??Th~H$EzleB&#i$4628#VIHqi)tT6vv%9-w&^7~;SZxm+WZgc93!2#u`B!a
zt$)}S6{o$339M~VORNMy0&80od)K5UNT|6j+T;Pg5+IU?^0q~b@5kmgVIuWTvcp~1
zm?6d<KA@+%fG=zTDJ~{$0TP+)bZh|<ne23IL8P$7PRAB8s=8fdi(6XmazQEYU5*tX
z1JGS$g_mdxC63!5(X2yJPwFRyt*_D(cE^MIv!2S&qDF1_)2bRLa~y!`yriIDVvs^(
zkN`j6)E-EHA8<4V35^dp8WSlrK0q1^a3nt%RoY5$sy~p1c|Vyo&h2q9D#IEefqpQG
zu!j5!^n=m7TY1~SSBZWwnkX|*(G9EIsP<(v>pTkgxrY~y9sP$-XHyUBTVr2Fje6z)
za;0)nLhZY#@`L@4Bl=ZOC4P#K06t)d`!1R-!onb-?RU}oqS8S^o$sQ!vPK~RkZ^jx
zi#GcqDz?Fi0j~{7PDaJ?EG{D)x$mPmi}euC90F&exN?3w-u9r^f!I$+^}C9}5+=^&
zMmQ6dvp7iPdM1jog&I~aRr!ys&lmb*l|Q;ksLFqgN@oEwNb+M8qaWEkm#A}5(cg)J
z%|SZ3(cFD5DsNfgD;LImzbhLC&5LTIV_8#Tp411~7JrPQUCk>M?8si-u<!p;U*e05
zj-fZvaYi+dn$Or6%l%fLSTZ&yvjG>`jE%{b4iednjiJ{+!qed6gc$quTm8|d6Wlb^
zJ0`@WA@aB(Cd6O}ezrA_EWu)|>j`~oQ|2ZjQ?Qsc1%!|hi@_8;+?+?`YcbaNJN?y`
zuepiH2(QJY5g^2+V1(_|WfE9n#<KRn2(!^;YHM*ja8iHQ6P_6}QsSO=f(pHWg|FyS
z+Tb?~yuiT*3G4+i8UF?e>;*BzzfV$IOh8?2c}!UmQ&R_2Hs>|t7WTytdRsh8L$CGF
zBPRSE8hY-Bp29J$-#y8~Us|bnia$EU-^%&zb1UNU8~#{OKj+b>J{5RiMm+g+vjyTe
zuO4+54;-}=`P0|`^Yx^Lc<khwXJSljEa4F!ywbGmUVme}(nRl5k><a9FGajpQciE3
z;29m#spj>R68SQf^N<V|;*ZUUH<5Vp@Q{mq)d=c4&l-sWKJ`M+o>pJHnq~C}_OohV
z^Nbf8cSX;Q(DN<G-hGFMSyPM@yXTZ%w^FEuy|F&MG2P+`7#eI)FQ`RSjOZpHQH#r+
z76KBrxIBgyLPG&a3<b+$wN}K$Dx4U!{#EUmT!l*xnyej@t8hmMNOla%@OyZ3fW#{H
zmml>mC97ic8Hxn=$ydeXGZY|^WEFLUH)v}rLF5Mez>oS2&*K|nax4QEW7&q743B|C
z0XD=6#L5sPC5pjU6s4tIwhgg*B4~xLawOXjtAD@wK6&5?a%#5N2hZ!bdP=vrx$w)3
zv25;^kPvd&603c)ge5P2ORThvyORlW;<v|yI|%~%ZI4NJ5+qV?k4bkDBvNjVIqqbF
zT=(5E;Z9Dwq-&+ST@@&fyE`TqFpvb$?wE8ZK>}!Z4DRF~(UtR~+P+xUG4|yp{n7Bg
z7~B@VyvV2id(gh?zk0~i<zP&D_22^PU`%@TAOUqSCZqWvX*!BUZ{$7zk=zG37>nIt
zeorRLr=jRed+twqFHeUr9eu$?S-x~C1|&(v<h6K^$mGiyCYiTr>6wgbXJc7o<DS%1
zpT&woM$CThXMKVaJ{!Z$f;VWyO_K8GY4Dj*a^7jMU;_5MGwgr_?0Fh?-~~_`eEr!z
zdPN`UDgN0_M7sPOlMWPwkmzTs1e&>$G~iyD#EgeauQ-JP4~4lBlb6Ck0^mxlNUQ`w
z0^mxlVPlhS(<X@;7-x+<M)R_PaoJG81;oI(Ji`VO5Ch|3v3(AbC#sb(cZ$NI84ioH
zS3Sl@rNdkdYKFt&HEK{Z92S>%(~^8KIV|4#M&1mQ)C@<&#VwJwilH?f5tpqHpOA1w
zT(&}x$b3ZHX@yBDY*k!DK|ny2Dpv(+hE;Ld4Dl66RdLx2K?12Nj%N5L)M_fKO^9dh
zX3bRNvG9aAu0fN1QdE(X;%u^NG%uMHmqQP@K$;YnP7z2TO^U-QqMP6;GI({I{iGT<
zx2$&4P(@b9{o=+fgpj5>j?GI7#3B)DataEadey_yQ;h;P$Y+cw21kr`_>SaL;&T5L
zB$7{wV-188qDT#D8oN<5ZYZ7R6dz0!f0|Q#kU*FgmrGNSlqQbh=5y*9DH=>>+Y2?L
z+*3R|E>C=ci$t^Ix(IcGM55VoggWUJkrY+iJa)5T+*&%%&6WZH^W1Ey{^rHyg-s*@
z!n`<ENoPd4QGbira>Mwsbdd`|%l}1A`%CePTNDoq#~&mh7R9jza8^KI{lA2L<u}fi
zE^#4fD`H7J+c7sq1D3?aTUk(?q5(_dc%y*#*A&GmZI+vD%(&flA?Ui59hbv3WB_5u
z3;2TrfS~Ar9dFrMHWUO0R>qZ<xR#Eq{Jmbes>fL*V8lzo6!TX~@dIyVT;BKu3A~kY
zdE*l#@K(lgrFaw#2Pp~_thb*G7^6LH*1H%KD_HLumtqC$<MMSMqyfhI_;n4<8#x4G
z1shr8All)^xI8qK;z5FqaT(PCi6k4T8Hk327{P~e<)+kixLv<(w3cBjf<~kiET<53
z_w~cLy!)C`C{plYJR`20f&|)!)U9`tE0v<Vue)q5WZb8e?Q${b>gz7ouyplxSG+*H
z4udqn*cGpLojHbFy#lO`;#p_xi4j;L|FbwI2wFO;1?ZaE;kfc;TurU@u+u)%VxQyI
zJbNN$yjh74qT@ge=!c!Y3KHmtsjrfo01|G(;dtJcaS<jb2Du5^k+}LrT!hIb59vOS
z%P_fQAxwTWPGNHXUP=LV(UWl;9vfm0iW_025`?1#_5PD_xeE<Rpq-4%c?%@k-^qAX
z92_H(yDBH+F>%I5axg@kjJFVb2$IEN$~u`dgh?QAI*tpn6FlTzu}H$0TndJ$y8=El
zoQ})GL?EHl>3Bkf=0F1MbR1EK<}iC<R67^X`Y-!7VKhseiyHxcvZoM6_g#o913amF
z5vncUVid9a@{QJ&;E9q#0;m__a$5o<P%p%>EkRxlNR;$KJYLBcj6|ZOXbl(Qx#Fac
zWbs4~|J%$*O&5}$7vl<^53)Kv*u`quqWKM?MEHX4fKQE_%*o6boyx{%;9PVD=0c3I
zzDulW(zvDal4BGw0ddLcQ6PbEDK59*K?31Y9D!=uf(MB$_)BqT3!Z49|E0Lxf|o38
z!C#8g7W_vPS;FbMLAhD$b3LhbUaLbzuO9Y^q_NQx8I+4{Muw{M@ndX*bJ>~#quLsr
zE92zgqDBYjBKseO6qFm1%l=kqoXZT!l{X4-)(lcZa?ytyb0|<lbJ<I^j3$|(x$?pQ
zPJ?kao*O9QLMYd;T(+l{QM=x-Tp6CiSuO|-%SB{@j#NM^ObWwul?Jtc#O7y}7GuR}
z<2wr+9+;)?kRP6lE#2cnKiKl6Ty{go_$u>Ku6*DH$EqOpQZ62Nxs8LOzDMM;TP&k}
zW<;(GpW)CHghu3IVyMl9FsP5rWv^RC9cyH+jEv#b6NE<QqKz)XAc_3Zn#SeYM=fKq
zCo|5)qE}wV5mtLHg|T^jE?ZRF=#UwoEB6X>6hDN<=VGt$?_3Du?Sxzwsbl<aW<svK
zHi9!i5SoyS!Dt5tG-QY&^>urG9ixj<_PQ&T4XM{j3XPnEVBFVp@j@cKU_&IT?e*M-
zH=Az=5Dc=j?HlSFwUzX2*Omc*%+9UffZt-tp`mjQd$EDhHa#a-zV-tqWai}JaxL9-
z$x*PLnae&QnYk_w1?T1x4&A)Lc}AL}uWxAFo1T{|uZDmLnR&UGLMb|$qtLBpHm#v?
zYkIzmL#OTM6AtznAcNa?3)n9WjfXM|T$~7G77z|xV-muByk&OpM#f?#vn*E;&kunM
zsb#tFIgg9-<BHxoyR_JNO0m|tMvOsf9T{;L0!KcK!JBfkcCrmkjiKR9x!BhJ19IR8
z+BWAh&$HTnb;Uup%}$Mi1j1&jQM%d0&#`^Twl_1Hra#P;S4P2v%!j$SGFrf8K>dd$
zn;W&#|H+j*SU8$S++6Hn)#Wm%%`NPq=0^SWmRuQr#o;r^Y{^CV701_*7dpyTR^8la
zmEP*KRxly6m0By#7DEP|V;ei!+-R2G=HgJ_*hV-aFZ7M=?4}mTYkRH?od<c>*q)1s
z3EoKo4!Xt;_OBL3b8ClNcIp{BsO+Ca@T@jM80T`cF55d>7<-M-xm+WUF1={{ov91#
zom-5%iZA49d{8DP(q71oH=yQABno^X_xd}{20RH3h^#>yqfzmtT#X0*AVX%nl$*zo
zVGxNVmvV2ommUrPiH|?A$~H!)ra$Fsd~cYT#LdlZBy*vW^{3ocoy{faWa#|bfV`}q
z?MrQp7M}2cJUqp83|qOl=L8RYmVHy1@s)A?tUQe$<03A=X5|I>IZh%0HY*Q3tO`RQ
zXy|-7Pq{xez`p+uqib&9_wk4LqYXt^fn>R`d>|DhkT2)S2U0--`Ep+CE_AX%t%a-P
zd0Dd){A7b#3kiSCGYW+hS&K9skl-%^wgiFN9*~f;B1p&%NXU>ANT3c#VC{#&Sgl3s
z4oa~9{>7->Vvw7L6dRO~0XhgF&7cGVbo>-mEtpdqnNUV2?7O=f38fOh#jJ=gXhkCv
z^5r~`z!{lHiZ}yE;EYUQwjd7(Bs`#ziF%_GB4$bq5i=c?kTFxqf?ZxtAZChLjdTXe
zxCGvY`KN{0POtv#%O{M1t-ujeF}@?$ajy2X+!#mN&sKPHTzp~)WlBO#O`?Y<ZPw*U
z<FA!qIq7NT!4h(fRg14YSVH=3AfYu&<V}Ir^yVZnxZhTtP+v<3zfJOx@2d&vw@DWK
zw#f<d+h`BI7WK<%3HQxOR2~IFz!DcDKth#i3AqFX3CL*)X9-%1tUYVaz;1@;)>&>H
z(AslWLasd_1Bh7(x%LDJh*=4&JtxykBI&61ULtF3zP+xyQLV<_OQ7{1CNrhU$z7XJ
zHrmhjF#hbR#7|)!d;s9ugmkk&0&s0Yp8fy{^Q=w8H%jvmgPUhvLfs(EBY8---Z774
z!8{*u^IR4>U@+O5P(Dtm_U+FaFM29LI9gB>-I|bYZJIaHtqHib)U-fCi>-<1$2D3A
z$5z{xP(P~C!r3#}p3uVFE2MN#7K-giV2Gmgc#;J}?@VZcM&u%ZhX%Qu-T9nRx9e`l
z?qI_1yB)iOgo3*h^3*g)pzcn<zaeiFB>acniK4q@Cfu9j616*<wRj$&_Oh+d8JWtx
zZXUF--s|Q;Eq!l7zJ-<M3+ufJd0HMM^4OawyhG-}4{Z`^qSozZisym3V_yQtYXa6I
zc&;0P)E9d77hO3`Pt?&z)BK~*n6~KmCFB-8J|pXWiHJCv4-&xp5^xu#FtXm4usX=B
zsf&>6`w~U%%^P^up!T!%y^Nb4-|rTWALexPpw_=XA&-NmdF$VwkarG1B9Hxv2962o
z1U==kKhdx=-@b&EQEi9VAA1`+x*l>fq5g5mwITJ7Lr(ud5)|Z60<)PY2%Vrml&EvB
zEQs@#?4d;6d(1R12<F5iY)Bu&>UzY@gHFL5ar2-Uz>$P}AtudZ07nv-okbpaI168E
zI|bp-W<iT1i8`IlCOi)a9A(P$MoH;WHxCLD98Jg|L7E2%jwT8mPzn+pO~4U-mj=zW
z0#Ecfd+vE-Y1iW}1RWtb?y5;~f#Zp&IQxJkfH<Cj8z$8BLyO}HT<8$}!Y{kZ@kFBs
z`EiIe1rEMpm3@uU(r?^6OsM%yLdG5-gFL=T)VoQ7QrzI1M4K{mEnRv@lb3tW{;99A
zUU~eSi$SLi&L!m1A40%5mypk1fdt06M2R?~0TOziOEee9Fo_hqZs!s$x|$z~T;K*@
zwUd7{wkS_rb#tKr!_|abq^5a*;c7xYBn1+=T&1yBSOfRXK-RubS|cEHxtgfc#oQ}K
zFZj{J^6lIHZv4ShIV@k!k!giu5X17b#o`wv3NtJ}ErL5Bk<GAt1b0L>Iml*M{tZv^
zxH7&X8@SBF@^38Xw|yjs&an;4@A^2OR?_60kI28~wW=Py*^yoToL2aPyzxm)FCdZk
zh<rJ{fJELS@}21=O%8ljK96vA1%dIP$}L3*O{Xef&NBE4q^f*5%YXz@RX%1J@?A1f
zZG3*#(tP2&WFR>{A7M@&0Lzf?GKt+k!kE$uzX3WaUyku0Av!5vx-K9AIw>En%UfjM
z3=Oc8^X&ouGD<uplk;Vu9&FAx#4COvk!o^&EN&j5=vIct?&<cSe;Y?VCDYwR1U5at
zCJ~L+(<#xLST`UM$ockn1B`k~>3qiq;6mN`jtxKpV}5>A1gk+(qI~$*G}mXyPk$?4
z?00}bJ-p@A14yKN%c%#DNcmPxJ!EKNSt9D;k01cF#MOa@%q6Z4G-NJu>H)$)TH@4$
z71fsKXYG>pU_o+uKDKIkJy`7S5yo^jW~iYRzvt9|#cSX_rv^X*?memjavm+R*($bv
zs8Of+DmMw4e^tKp9U+4xtMcJ}?VxeUBHwXszOsqs4l}k_;+L3iz(+aOI^_Tfl(qSC
zW&;V7wfUIYXnF@pPDXy=rhMT!5<_^7>++@NC|RiN_4)7|>BV`;!eyJN`awQjq7Gln
zMGhNSpW#M4u`yqLNH~iY^3}HGD<9`y>nwJ!1Rv_+gYZT`Lfvio(q#k*ux<I$WdsRz
zx8>)340Xw6BnJ11w&$xK<qMZl@{n#vzH}KS3qH}#d~zA7D-}hxJ^5LMpUFBbLbiMI
zjf|+nBI--~s4vYZ-sk8BCWQ7mbqEr9?4vrQJ2FLN=l#qYX*BM%-{}ot5;vb;Ao7t6
zlI+iii$^Nd#)ZxNtnZ};wIO-1rZ?9n4UX{M%$kitQ##_PfiI9e;-~=<m`9wZRGZW|
zN=>O28-R4Jj=Jecm!nR5f*{fzrS`<V`P$T;zRp)p{;q<+M+M=7s34F)`P!)<kU;s`
zsUVQ3ps(}uPRa@*2CtxR^40HT1xX&#ed|<^WTApi)KpNNsCEh!bY7aL4zfK})5+?P
zdCs!uN27wyI=X=gp|g%<Kq8N`WEpy!v<@kLj<p?QG;ek;Uv7?oN!)y0+-U-dB<J$+
z($`7aC#)OQ1}C##OWM=N7$=nQ;3RejX@96LWj{2@CXX|2ZaNg(P<)O77hpq^@@_py
zfDKKewqK=Twk|0!3Qv@cH&UL`QAych!Nw3aDk%?2g5+ZItzVD;8I{Cazg;*6y4;u~
zdu)PnU+EYZg6e2YQqCcDc^!>O%JCB<AjTvye%{I<K#fbXZzdRROUJno)DOqG5Y!LH
zCFPb+UEUAJCE*0o5L}mr;E74G*Z1#<*z22^lrtedA>qWNoC!f9w~0w-Cag<}PEPWf
zumcF-Om<bE5qPqz0*%0vlX516FpwrEF%y1F>#cftqbHel+&(kO_(+Yso5XErKK$0B
zs#%s4kNblF<g%n}ydVL&EGg$fkbqp4L<2cM6;uxuq^(XWYm#bei$bSHp6hwb|9Myh
zXEfZ?BJ%%+di0~?8vifnMIIFY3`QqE#2JxWtbP?0zd2J;o2}i9|82;dV$`K06j6`K
z?wMlLp(}kp(hVhna-ti8L`haB<=GmLD9P%iJUIap-EeiX)|#X^IYA8ShU)uCd2&K>
z(3;*)%99h41)%qnI5^RqTLf`GJhJoN>&ErP>)p($C9hA)eb9QmeXUPoPI;WC0m4R>
zoNAP}*ytvq_Ovl6_de_K_OvmHy-&J1T94Y(he;)xs>e>vh7A_aHgecUQ;nQraK&L@
z$N=HPq&zkN64`v1#5xs^0RaKl*~<LWj2l~TP0AD0U?R!ZWT7~C1`<iOCb46<kQ|tL
zSk!2{lgg*4?$^BZT5qvEbDHsYPbHX+nQ2Y4J1M6lqyWP1q@0dG!pysqd7r|}G#wFx
zk9K>K>b|6yjwBE1_9o?YBv}~kK1tGa)RHTM)z5*XQk1H1u_@DyW~Cs+j9!obea3;L
zyo~@7Ivq&niL1#Vfqfu}^)PkKdbAuqEV^bZ5ExnxJAD%*QXY2tCP<__T+=t}(aPqS
z=$q|9piYjtI?w{=nA11$6-dXNz6laY$Ea`KgRn2|&wi84I>{!!Y1|$9CW&i9wGs2g
zg-?w5?DU&P-SoFf8K(skP4L?!;<RvtAOqMFtocl%PWnVr#%aNX%n2I5D89<CZhpu5
z&NS+0zLP~GCS<;&4)7QThx(X1l3ACSJ=6GO=v2~3(yoPCpENkbGP8^hZO%9)0}~}X
z<CF{}R5+8AuX=(+$<8DZYo<A*KIwOkO`ByjZ*$H?paJ|`GFx0KfD8#GQzAeC5(wv#
zh}CuA2+;E)3(PidFTLm@Q1iW*l!rCy^YQy)GAv>MAc1g^bhry;yDq9-PG-Hqs%9IV
z!k4K(Y$t#4Ix5^1_U&wAXXzCO7)$_PaS8_#s$Fp=29N;0LWX^TBjDqp6gxM^_*>Z^
zY((>c=Q=*{3`)tl1tgb}{v=313`(Kz^FOq?j;diy%APaVSg4eY!6v-~A;XPHp(1E7
zgA`JYNg*2Ej%N&NT#5}`VBA(Z&dr$5NGWNQ>qIaz6&A}zkUSA)Bs$@B9iNd>uPij~
zZ8y<Hph(L^7lBVrE&`vLQb53E6CgmArIg}S8@6kvk<aEVG@7;r!!ZNJ6Im)-^g2kR
zKrB_Ofh-UWEiBcziTRnR3=Az(Qpz-z_m;8062BZ23YkoCjY-4Hl$302*YV+HN(vQC
z&N)a7FH=%=r=^5*P7Dk$$m#WzydEoAP;F`o7dtzneKd$_Z>F;5r#z`r@jyj8_S_=l
z*3g?NT#ZShqz$O0%wnq+83mQIa0Y^x08FSdD<!8!kjQ3M3R5HYSdauC=cMpre~#6z
zA5PC({d@H9Ss@CAj~FWOwT46)=Qw4=SDscj7?1#-Lk$Llf(~Rfn0f5ai;cQv^IQn3
zjCn2uWj`+^BY;Q(h<PcDczbmexM5UVk;?kmUbEQP;|;G!IVZRpQaRVK=}U|mC2O2=
zf(fiOPB}pWYYmliBFza6DW}c$^Gl6aJSCgmL{x^&DY+Db5E5-p!F8q~w;>f_OG<b{
zU6#We+LDsq5I!N{mX!2{KqBFml;aIGB=Vya_l7!xfEhn>Yyc8A_{gyVNFaTblHL$V
zo)jbQaI!(8sP;uF>(v7L1KSwt4S$isL)P3KYD7jjPDYs062Ad?+$j}EKpuBY0TPhM
z$rSt~a3fOvTXx-QV_M0#IAg+_37Eu9$wQMMk>=YJ4o$vK?Y<G2;s<tqwXyc`ADoha
ziEMvxN&*rPKcwWnKaha<A%z)$h6a$Bz<x-{Kkp(^1f70J;m^Bp9Gx;jf^#go#yHdF
zoSO-qcRQDoXVoBsOwOg`e|LeTG%5Ud7dE$m083wFWowO2Wfxrp3ME`j$#4>6fN(LD
z=KpX)Nq}%Mg$?j8$X9GcWg1XmZ(3_S=_wmfAR9l}oG(X9kN_D_AP@I|1jv8_Y~bUs
zWC#Q~jwrAz)*EX*Wg}b=8YM;))PT?^F`_{BAS43FhywH=X%2V}RR!$H4aVuxDi?ze
zPgNDjBczSE(@<4VTZHyN0;8(n`j)%}HzJ#lFAyOW5J)+`KsI5J$bEc)Y{DRsa(sc)
zgd365P+cGn?}30}t6d$)X{dI~K~6(;fo#GM22ynans6ty;Kms03bMXt$<4-{u_*;O
z13sAS+!*awn_i&Iw)<~36whDrQw%fs0PyJ!I7om`FOY{mKmvSv0mA4sl!C-iI=#S}
zUEnq2c*lnrXjk;+%8UYaR)LSlHEOs>`zAa3p%IVFEFcf<G_||N)NU6t-+zp=Z5Fy}
z(B!|cK+aN-A)x~K<Pb<eEiAx9_a}~k(<_Tvi!H`qDi^y5)RY#x1)*#f7sxrGG4CFW
z3os|p=@pPTy|TEVZk2dIf@n+$P+@UFz3y;A{al345)gZ8jE9a-fCn|+El^sdT3PpD
zol?=41-BYEwE@eqCUu{83#1PNc_{I2L8_Q{N{~E#v*!Gnmd4b5ma)NGjoaETa}oH>
zT-OlPeU=r-=^9CZu&e-+EkF6y7-iO07AR|(Z=3N^C4M=2Q2$x!8iV@J$^!W?IZ^>-
zWdS^RQLA)yeq}+UwKcU$TNk`mR~4vhYHC$-k#=<feDFAeRe%zr@WS5@^Gcp3+8gY!
z$?mq@D8fGjx@u96+~lf7J#v%Nk{k0Lxv2nK9o5vW8}r?Ld;Jb$vZu`s7lV4_4%a~B
z#_uQyi|94dK)oFW*vg<se;QMd+{M^O#(>gYE&}z;T?H~y02v_cDyS<0-XMXns{ntW
zv`J_IOB}Wz`q=o;Q+n9Npc9OTT@31zhYRGj%*MP=9xlMO%nbqq8xddGkM1@$;WZr>
zgHAAhRUmh;8uOiquL|UgJRqURR|SP>a|SNx`fxXYTwxX~wEw)<c*7qZSLpN8UW^Yn
z=rNEKDhd9=Y9&Z$0-FDc1%1U-GQJRVEN<I?#K#GR;vq_+1R0>_NhD+^6k_HQvY;jw
z${T{XpAK1&{I)w}X^NUy$U|_13tcB6(?=u{wR_O~hys0u@T5X4G6gW&{VRp?q9d-8
zLlz_tk3*JDio8;YNcSZ?>Yz4>YO@RR8k_%f<8Ml6b|IWETIx2TQqN^$zA#!9&n=YB
z7np#WTPU3`kkD!_m4}vwO{f41*qJYk*2N3lBxHgGZW0=37Eltp?%#w8xrjaZrBPbE
z$W1~(i`*ns_C=Hg2a%8j)I03`FO9av@3=|G9`CqGXdHNllF-@VCNvH#WsQy*x3*a7
zCLyydE%b{H4H+a^T9^~$F9S58vCb~U8R;8Y__$GrtvO~`#b5|86rYjUE|g&ckVtG7
zB24fk&ks#^70W(ubZ@%KO+tNfRiX6Fn()53irURI6V*^0)jlfBx?)c~ZlrzTj|$-&
zZp0xZwV3MRS9|*jV{@aXzt)nI9k>AdwN_GG-~fsIf31c2dLz|oNmLt=&RS`&kNevz
z^+%-na>lEc;N_9gX=PkmrH5^G(AYo4w8eR>QNsUK%Q0!ZQBAKkiEpT#s<hhf8V>Rq
zOPuN1P_BfOn`gJr_rK{Yo`(%dJ_>^i<>sYjD*=f_^U|mc9F;;Ed|b$4X@Aov7h>~O
zCgIajTAuxe43aEN<Lo#2S|BmXEKG;RLsCTYJ+X!9$jy9DOmb*XY+?F_8~J{72{o;^
z+03;6rsB6<)hPG3)AA?-WRTC>X>_u7Ts2Tjn3?gnFI|FtOPM+Ow@cE}$tmG8&XROg
ztPnv`nlvU(x`_)_(bQJ3ks1HoHY;2R^4M0SrN;&tD6t})7H7;s0%AoPmrMI|1Z20G
z^|JhbYqQ!#pjF*!7lE4J>U6q=RFRtB>U68t{Drg<^48WetH@v0X03}rGs9Z97}Ofq
zrloU>BtTf377r<)6mZo(V3Ujdx3~GgMW8M24_pMA7d}YK;4P8>;e#}8YCObCfg0Py
z3TyixF5ToJ&~rPRTm+gIHl=0kwuH|Mo6`7yrET<PPYHQ!yY0ob{r7m=?shTASKIAk
z(7dqQ)q;Gr-K50`niooFgZi^H-VHz7+#j>M)c3#ODFy9REzJ*~xmdJQ{h6x|%@3cE
zKJU^VatZBJAGbXX{7aSFj=LE2FHgr^4BDwao{oys1V{sn<7pf;93h$q_MuOtmFrXO
z*qX-v6#MZNe=e)v*#Afya2>7ag8T^=k&eBeNJoW>Q^I$pPo$f*;OFj3=;-G6?7hbR
zo7;TvBG88O_i1?{0Wv`NKAkUoYLL+B`!wdxn|ZMiZavMKHu1M<bJ|59SM79Kx>+TB
z+xT=k)l#-MTHBva-*A)pXO4hf<8y3I6Mxq>=UfEZE<Wd$g0_p#rK2JaQNp*2&!rm|
z^M@r$=uqfI)~?w9P@9V`0^SEvFS-cyH%}MSa*2W@(BWbl_YY|9DWM~yKe1iK{?=`N
zauFgx_{l|}KWq9aEnROU0m4sd{NEJ)KVS)+C;f%BFY&i5{l!I~KWX~KMWFk=zog}{
z4kQ7>FKMf``8-F!S<?X-wzS0Gw{$?JraEJQ7?7zMKVpCwkf|v~3=jh{C`JW`z~4s<
z$*^us{ZEw+aUpOQ0BjjpEm7it7?KeOBB6L35JNIeo0|`E2>ji|@C?(M`5!7B?n2~3
zi{Y*oxquj+sVPV<Ackj95DGDsDENDdkr~FC`8$`5bRqHpG17&|1H{OTba{~m5F;}<
zE<9GW^aLVj8D=&2k1HGFVkCeu#>GegV@yV_Axe}4FvetR*L8YtKD?TYeY&}Sq^E3>
z3z83zNg3(Zl_>cDnUsl$TW25vGAV--z&zeqqTrFu$r)x}@88jOvWtNrH`wxk350+#
zIV10ufCR?m4DOb!#v%*`!IiDW8RZ>&V@v-nz9;b0>8mNIve+$83NVW^a^;9*fLWZu
z%8`}<Ah8TsoT>XxM#Ra8Ar?h%XYg`5#b`>D0&-Q_-Qh22iQmw1X-3ZZAOXHKBNw<J
z0lqYY1@2*C@Ivg=vqd-iKQDXF)vplxz31vz2#EJw{R#o`9_a@!T2Y%uwGT3Qood@H
z{trCi4>H&d=Kt^2l&1Mj?DbOru+mKqG?>tClhY_c0(w&>PlQK60(w&hA=~q$T~nHO
zx3VY7{1?l%x)8KiwAIlLG9;9dx5hvMVrvEg>Eonbv#9n-27iGz@mBvaPw0~joEp4>
zrZywx_OoH_{7<&rpOHH%U;=7?rceZ7K>})j2CF*q&zg}khcZe!^^nz`UA@(R9czD^
zzjYZ{qFNyU#SS@&f#eC~oDULchccM+N71tb%@NbeWSwC4ZT^v=FEWS-Jcdk~lU~Qz
zeeL~!E;*Kwt`V3(I+l_C2S^|t%fSEO|JvQ06#JGPXz%~D>9=kg%Kh7nya*2&r1>_3
zP}bwfyhT*|K9e=nVn;jp{}TP4a;LGV1#;I;XO#1-OGkg7O8gSO8TbG@?I-{eV5dm|
zYM~&}LQiMn=g~rGqlg%2p;7HjMm?7i8%2_bbZ0Yiqe!x_MEx;CVF(&eTTodpW$=$z
zbuCtQyT7CugrfwN=u$@RRzVVAmonI`qMe5p<hWgCuioyz{mIKn&!-$Pk>qklzD5iZ
zNiJvP$v}{BH!f!yJjgv&BDsTjIn(d~?jTAIIf$1tUGC#utp!0`p{`a`a>eOnU?QI@
zPA3CNLe$BwP%~~p?%fc!{$c;+C-9pHOST!1Xfs1BInILw&=5-w1t0-5#6nlYi3%Sc
zgBosSjkd(Abu=vvw|q&y+{9Z?xWHm54a6UMggW`P3`lVa1|MOZmn@X~Hmo-B#uLU|
zi?!_JZ=V@y$=fF2LTIFgWj@Z~LkQH%7JH?Wzf;l6mb}OVE@z{6O`|Iic++K^mGzqS
z%3c1~!{aQxvxDWmFG|Xcx7b^E`71NyEqO@*T%;Xup#$KVP6$DZi5BbJ+5bppq9qr`
z;6iAkg#`}!9E3o<VzKp|{oOLJSYk{gE@xvqtRokKk*Y1${%-&6nQBY!t3~<hw%Wp2
z(v}Os?2|1v_ileXYqE<(%i75nknpGEih6xin`LF~u>JS=@%N6iEQ}UB&U`(UXfBI9
z=AY6Mzfom#E!iwVq9AiExo!aoZRT27w|q#x<n>g{x9!ti{98PwZ#&fvE{4IkEjc%X
zBq=LT_<taQ@wSD(a9L|`3@Ew5zHq<4om#rV#UPJ;gC*Ao*Ymc%!IFP-4iXp}EX?mT
zLtIbPW{bx_Q348wZI(u$Z^(VKC8r3GT-Is5*Hi1=J_oJWQ?}jBoZ9Vnr`<vZ5Zj%0
z3lb39sof4Hv$l+C`>d>s_SHxHiW1&u8AZaZEy=8(ky&SyeC8MwOkjQH7!)M1J|lzj
z1LrNtphxX59`ir$X>-)k2V4~Cs3imBAW6!ScgjHm<EVw##c-2KZAs1NIQ!?H{r@OE
z?jn#mk6ZGbEM$Oi+$s=jWspEPZegv=@4~kv@_W1GU*Kbue(z$CVZXOzxD-Ob_}&VO
z(Fi0ZvanpDDrre}JuRyQ1X7-Msstobo_4APBvPKXoGNKaafS<gK<S9zz`5Y6Kq1Bp
zPQ~CWfG#){0}?<NsA4evD{8B#_Oq2$Rm5I;!hbOFvqf(k(1_Iv6{B6Tl)*)6>R)to
zHN_^D`+HS_B?e;%0QZU|2V;=Hy<*9u10XRYT(R;77l|2x7<@*!YN>;Y#Ec+$NH?HJ
z&Ipo)8DU@%%?RX~wxW6%R;1jQ>S(cnPx`w&0YXf;_=K_!E0TjJNG>Wpb&$XwRwU1w
zgT!b*tjOxZPvR0OwqAx672Rv@6{SYI7*)iYb@P8xGODPisHDNDBKg2UE8Y@D6=8pl
zUbkyS4Pi_XyS}^s!Ll)~X4DYI6v^fYAwY~Nl5Y!u<cV6}U|yobKCPqL+@h>+?2X<1
z7uCqzB3y;yqfTq;9t(=ZVIL4E>;gwCkbqoJB!?Z4fLu_7UUE=@TCJh8_HL1~6cxCY
zANJ|Ye)y}u-v9N)&r>~m_UQGr`G0*O=KuSNpRRrVK~`sqk#LUv-2JTI632d^CCUUf
zMWX_VGQC?QkNto|ncgju$9_PfQN3GKYbhEP1)GRLjY?foB#-?_4r*~pkv#SzSpZs6
zgkwLrdxdm#?8j!ydisltZ8vkOX1hop`+*SB*hScf>dDi9TE#-o`Fj<wa+6TCt}2r8
zyw<#0R}~?iNB;=Yn)>$|Hvc()!zb4i$>&JHM3OZ{a!3FP+%-jVdk`er=$fK}+hqai
zJ_HuIYl;dxa*u=rz#)%hP0?-b`C`5`4F>C3t6u(_OV>LM5KQ7aT>~VtU0)<uZXl8E
z`v0e?bC0s3xbyf-d*@1bqQV`XgWk*So_o7nVGxlS80IM$B}OCJu-WY9v5Dtw%w|t;
zcN0CkMh8)bpc!BQDMW-}K=GKM$Rn5I5LU>_jA0Q$98geD1cAjsKvz^A`}tK@d-LD@
z{`yzHuKK;IZdG+vmg)GJ;`r5)`d(4L`?)=<?v<hly(&-?p;ra6sc8O*B8Ye;%lwnf
z&sEFZPq+HlsrJbF?xF;l`{^!9kh!1kY%2Q8MG+))XGzMP(o<H;Xl!TUovHT9((0W>
z9m{mj&a9aLg^5Btvy2b)E~jdydy;#z)&cxH+U2xL;c%B)pv6ulb3J>rCR0%W0eiFk
z2kNma5U1Lk9dy8CDk11hwJ)34Z!(pkQSPlcQyCJO>TR8=B%xQ!w9&zA@iVP4P*5zS
zXdgY0svOLkjuwc>gV{K%SIbn<k*r>9RGDAe$-g^N)TGQ89Vu#3=8KMG%`lOI2s)BA
z!$i)kJDx51BpVGAW#Zs?)|{DIE*a%SR{f>pa=#M5vlChKX*H0*IU$MdHU>=P5)LO-
z&oAxU(<ig$8)%5|oXql<h<z#Wfc~sT-)ny}{pYM1BSI8vmNDXYH4k+=tvc?t{~>)k
zYX+O;dT@3+n{|yGLgkDaavyTeWX-3<<$B5COqS&^4u0TWXy9YjdY@gB{Wxnzwh(#O
z$5}?UYq(^hjDzZ0-IB#_;obY}s>@QXF71|&ayeCw!Ln;*qmv(jG!Cq{yU0_d%yelv
zYXv|a&T>`z{dQw!mTUHML4|3SOQ<qc2@~isSDm`wo|1Wt&!puKhfp<{c1_kyw7tz$
zcm2x#R;JB03hJ*L-{zvA37Uz<&vDhBU)d8gb6oQwd4JvdIW8e8!`J@O`gT{<JYY9x
z+Fdioh05#NUB<X{l`!FL^IfGLu)m#|@0xKpRG8+wjJuhpfr&_c+*Qtl_HCKRi%jx$
z?&HElIKxCNDp&pDLAxrWTr=*53X^h4$Sn52#8m4OuG;dTedDkvih7c-)}IhP{a*ee
zaJ*iJTk=~qpvB&h>TuaECk7cH23hV}t~N*|5S@eda-lp$#&T)A9Jf6{46;JqG0na$
zy&|p*M0i$6WggHxpl4KJn%$CqCN?aG+6h$*+pKvo$Fu6&57`sEXJZ`>(AIcXbjTKD
z-i0-ubFE6|TE{<NU#)r{vacToLGM<R$4Gq6bv@@J89>#flFz#w%9EdNpX|%$`-7sM
zyGEL~L5*s&m#EDT+sP3dT$7G?LSr_#rr!oqrwuOswoI$mNJ}@WzdX#e>PFWLb0A{;
zjjkEy0ENjl`-Ol=*eGq3L|h{+?ovN}ghbp`lpvnb<(j2cc#zQLR*u#Gl7UF*a@jtj
z4|b^$_{YMVkJxRcRey9%&jpo2e{@aH1r#nZ^DEMY)QH}C)ZA9PyS}IRUK!Q)xMo5a
z9z^uG715X)h=?ASF}0-68gcRMZnV+p`I&Zd<aT3gc|^hOu1TCg3T}7f#91S)+eN_M
zVt;lsfST+oRzZ5PT}9<dFSg4ynG<Ft?Q+SS)B9k~v7}D7WTv+&JIhY=J?_STRK|)u
zPl`P|N1TjJ2@zQ*V^ac=by7?zyKu&ej!!L|ZBH6;s#roycgi&rIj~UTl*>Fyqb`Bz
z&Zv85+s(~q;`)!(+l$V`^#>y1jBCcYKqQ=T8RPz5hJ9m!$#brC!7Y5_DZ8q)1p>{7
z5_N_^il1{$X9%SDIoAx^fpmuF+<_O|XxJ_U-5Gx7CeFLju-(uo_ql6^?S@2W_=PLO
zcCqGI@rP-pUS!Uf=VH!jp6Lg9MlGg!#+*Q;P4i-Njul5}^`d_8&+T@yzST3Kz$5+4
zgaQyjt)8(a5J9aT)?}k@Vq7Zus8_OFjhbhFqu--mA1{i{abn9hFZv1|fWS7-=m&_v
zHqS&S5P@wTCcT$7jT7Csd+Pi1?fa_Qi)F;9?Vh<#9VW`OdwgUeOIqV39v67ZT3}D9
zTHu+PMyQlo;F;5}fs|R`F%%-%QwF3wHDiI@T&0Td5!)%xoKgvs<|1Q@zQ>8a7aMh7
z`8euc9IKm06kHsu8%V*$U#feYsJkOl_XGfPI%0hT^+Tg?Ad)&_eFKryA^QG4`mRkS
zS9&FTRm(#Ad;L~=ee#jMYenCyB7KhrAaGUOCLjV=#rg&!aFyu$TG~`AO5!|gWe*?m
zT(O9#`#I0V5Ihul&Lf8I&_z)9YE{0-zO!m|v4{v-9b2eYYkRd=Xs0aE)rz{i3hj&R
zT~>Wp+;phaw97M12O^`(Gb3oA6!PeyPDtR@iu$(}mOW|zOKH>Aq70cO*;<q#hS=(v
z#ZSs0W2;Bcql32=LnM1VYe(U>r|dDME&Pn4mIsvU@l4bLDc9qfs09+WJ>I|_UKF)L
z&{6xUm-rtqidsXX+@CxXwT490ZujD-t(8pry7yN@SSS%G8o~mp%ImQ&0TKE7m%dah
zgNxqCmnH#FN^ema@^7HGs0{fx&>Q;_%t-1LUpgWk>-bdiZLj3CS6b1)EOnu5uv*b!
zclUeS>oY8JtMTGihm2bRkbNjt7!cWqVz&Y!`;fSm_{ezihQn%7r+sJL;kb4Xk#IP!
z9Z;A&bEG{G35Puf8?tseUV{3ldb891LH*I91X12m&wRlQ4-$@gxoG_qh=ik_*^@Y4
z(D5i-#{ejKJdRf&C6C8C25R0oJ&qSwI~D18B0wXPAAz*uRIwG}aHnD&^At&^M8_Kk
zpyRq!a#<yp3!GnR7o2{}D&x^hov606QfEl@!!>rYs<YC#B9D;RS!og^5Q&|YXm-1N
zCRitJK3|x>#@^At`h2Cy_fUmgIpkVB-T+eQd?g=!>8)IKXfydp&YG1=RIJxus;ny1
zZ?gxNwm^&`02U-Xk~0wiM8YFE69GUX;E~+GS-B_zgrFl}MlSK|ToeI@M!D9Ui2y?)
z0%qnU0+yBQCeVeh&RH+y5?`s9T|VsQyY8MkZ0bL$_Td~ZwfR~5%HQ|c_t^gkM>Gjl
zr}M<>oXHbFYPvdSx+EZPT%F?&fh?5(sp;yR_X0JQ&*OzaO)>xTIkT8oC-z;dvIp#;
zWBARZwYe`9DfV2OGaV;S5xzDTdq$mP@{Kv&aZUsvXJfINlF2s~t0^gEW3if&Qa0xB
zjQ^GBt4}32<x1XE-+#kC(Qi{O-fmqlj<Gctb)5htZjDU@MB>(*@eCjmx90GSy)r(m
z7Xx-H|4sX?s_tSLag6Sq9bL`>4`sS@g9baliOLXW+f`MsJ$uA<J}c7RQ?FfNd+u_*
zi4D2p3fpsRVv}yLUeIfi^7xJNUW=6n<YlkL$^#1Pm&&UbweN|PcPl_6V`Csq-4iPh
zh@?HS@_<O%Bg*UKprAxUD!DIL@^P-T;uiJdJ8U3n+h;qa{r2VJ?{6DKjRzw&jt3z7
zV5|}#vJb{;1S0#OsPP5qXBtpr@<`4)L98s5Q)!-6`Th3v7D!Q~z(DyUaijn#e<Y3+
zApUnGH}Hgs6d~wHIhsoxH<4m!l>0D_6hk6Xj_F7dRX0cy{3sXo6+Yft1&DeH9#M&p
zVpRhX_R*KBZV-5O)jbF7()zQpgF-|PXJZ`$5pg!wF;L2gj^zue##HjtT*+H%^*i==
zbD!qu6XeFhMs})wk+Ux45^^8L<=|+in$XmB@7fzDozEq1(Nk;DBN}iamzeNZ6kc*s
zD6zQdd8;*_aPE(#p?ytK!w=g3@%4xEe_dGqk3N!5G#15)?q}q=h&&eeXx^HQIA)to
z?Z|wZrcNEScegy2H~Z*x^+dnF$tQkRlqY&?%X2YvEN@QUnvXoWUr`q!bs3UOkVYib
zI5%%@Q;aCcZO@x~8zTyG=j9Ww9JUduabezCjNpHc1#=dXCaE94XWu<W<r59XTFF1+
zMR_h)|MHy@4^PND^)z;)xckz4lr;dDd1>CbE0Fpv&6}(Nr0CK-?ymQPG>RW}s@LAP
z=Z)wrmJt{4%$uwM4`n*@WDPk}v{BUdv}!wS*N%ERZ;}Q?iaeb+Ndricr}HF@OR^)e
z5t!VZw_YxsJ8WMp`w>5*<jw<XyE$)?I}kCO^Cr0i5wkgOk~@&#+MM@Z&PT~z2vKtX
zuRO_phU`yklr*!m@SPL(<(Jj(EWStb{LZ{tID(1y?9BI#!U@QGcIFv<NZ>U}n%|v|
zzGnbXa(CWD9*~l|^QMOYQgU}b?jagwh_Wvq^$-B+vaeVN`KP?E*j5?o?JKrbMtb}5
z1mM$h9dlDEc`jelQSeXME0cZC<@rGQVVT8k5@TO1?El1`Q9ANsY%-__yO_82Zen3V
z*u}h@n<0t5Nvt#7S93nKSB{+S8{dGc$!4Svq|kJqk^ZC6n=te&zwqO8_G6`^X8F;^
zWn_u4S^mK20$m`bX8G8tN585MD_gUDzFkXyZg=;c?f1Eo`@f|Mu+8<=C!gDstLFNN
z==un#2%GB<42X;}VbWaJjnMm$o5Ys$eD#Yj?7FIXej@6{pi*X@KOmas22y68&(0#b
zJgiBKx4>8LeqrBIwZKnAr~g8w%mROKbZH=vG7EebZ)I;olUQw`um0w|eRI`9KcV-K
z3zaep{qkth7)Y6gKAQ$*_i~er#25K$+j+a8YLU+skx>I=(7nh{OQcJCWYE3HuWK+m
zVAgN3uWq<tPad(@Pek6=q&MO(_J@o#Wn>0^v46vjdSi8yOad-ZYcAMLBbF44$ejC<
zViB2hUm`{1EB_{$Cts?rxoA%wxztZYi=z-JveX|G-J1cV$Wp)RdZ%5!0BcSq*Z3s|
z3Qt|M=U$dt<Fha?*ZMZ&ZOOI1wO%z^&iEF7MJF9VN7`Eds>qB$q^<SY{UW0<Ac4Bp
zuUPL#D@j7o3oYw>HYv-v%uw*Kbv~<hDfV+2lB~U~^BWqSg7nAD;%r^M_4SHptzqg#
zuTTHN6_+__u6OlK3V{Rbb@^sp8K_H`Lz;oqtjp)K1~CW_6Lk62ljLAd4fW%iTb=3A
z>!{HdpPis*OVt{$&j7{ShN?d#oY#H`IZ9g1ddg^vZ;}>}H*WFGzfK?`xA^?)jNT|y
zy<7au4d#t{fn|$7Y?O0JHnBBJYV7r`{e=@{&Vyww{EXissj;{C7KxPJ;#(wAdgU#V
z#w9iO`kDP`T($@yHX3*A^%HOV(FonpD7ViyBXmPz-0_w#BlJW4WJ;L}M&9#FKKDy2
zc9n9Z^1-r!YFUl*6*c6m&c>_W^UH?nEinTn6TPnvebuQ-zweuqJ|UvP_kCts<es*H
zqME~M_!Z8r>BGLIH%1E)p2I#HqnkAk=mRzH3THz41K+w<)CP}qGavZ;hmompeMQI-
zb@mEpjCaJhstk{OUvb1Ab%Sg+g@<f$)VD^tc~$zYK3qa_rISuW&@nHM;Xdk*yx!pq
z4j|h7P%XaF8K3^J_*R+k|4`l<)eO%%rp{hT&5jk{D%1VP<gG*qa>xV6)wi#58ZyUy
zbKWgPc#ivg?#JoB!h{c;F1&b^v#T_7+P8G13l*-@J_mlkk<eU(`e%jZ{hTS*u+NHh
zlKKA6q)vAds5f!`q+c>KPy_orca&f7`RmY#8{H&<ddasQ3e<}YPK|oLzmseMM=6G<
z*x`~tB>E&Ah!b4$nPeB|0pdKD{K|)dC|rf0!*yC<!qrfy$h5$Ot076aP74UvPbB-_
zB=&9%tX#!WJZJO(=X3)oa%i5R^47qF4N&u%eT6{k)Ecm8!%5aw8TY$97L=?|KN{#P
zPdyftrM1s-Qww9Zz^c;QuyR0Tfc00FWk729n*g=TBFiADOk1FSFvzLOv;~&_&`GE;
zwFP7Z@ft4fVCO)fe#<%fnb}225gAGR?S_fE%?Z?{LC&?AIf1bsRLaf?u-{C!5y6E6
zE-TzRnEY11EU@&%gizsH7BDd(jtxZCvS7@u`e<N*)N)x+eT%G}^B5g<sM%LLBhnp#
zab1Xr=m>D#pKBi6a=CizYUiHJ^1!Mwa>Xr|2esp!1y}+>_+_WM`x<9qrn6WV@ykxB
z%irQl6H>`%f|5TdlE{?YGXWpB$nbOmqx|0m)|w#UT$Jm-Czw&b&<ZN;JWyJ_I!N54
zN2Ad*WIi8o*|&^OBMMD?Az<t-J>>*(&2@pbL0uT`RI6#j@JwKIU?C4_{<`4msFMX!
zbX~yCEb&Yrp1CgYHyF<pg7(byv1b|zRahT;rXh)Et{2bL|Bol&49S-QYg3S@*rv*|
z&hEQGk!SJ@jlL9^uU&!E>7~HcX@*LOXTB5=@KK%QFWyVR=uOl~x-y<qrxZ2l3KG}L
zl}1)#Vk)^MD0wX?t(Zj|?CK$dPH~<4`)&z1=c`?Mnu+4c+X{zVr@VB^w!jR@pz`W%
zfjLeS$g8&njH9J50g^|y1*zylXMqfVHAi`!vo{h;`5l3EM@5f1^ogA>{Jhd(nF31m
z_jRIf+m66YrUNOyBVejFdVzG0JA(4twJmunFAz%q=ukvMp{+ZD(Qz#_lNQr>oAarh
zcFv71`+|~>X#O!yJOAmw7l!6p&P(kJ%x+5VWnrzKV2gHBHU>^I4b;n4WjsXwTLH^f
z?AQg;qW$Ww!1-QgKasD!9U?sY#U`_8HcY@ng?9tzE2Wu3aTG%pvgCsoBqjz+7=NJp
zT<g4;`5-VSVMB!JgMf_|a+wKCMDa1T?^@^e%(1}Ieknwlj)`CXcf>@Po>bk}IomQP
z11s7FI#`G4$$-W3CVb%LRPuCC@`?K0aHlbKI$+b0M8nMz4QB$j022*$E&PhcXV7Wq
znZTUI52UVV0_MNP>3}%hnZW(n1cDHBAe@Z@!BD8?**FjkNdn=l1j6?)4R_a^3rePi
za(w^9scQPGWrNhqACx84w1JMT-W}morOpLql{(uF5i@-jSYx!ADuGlH93?g&FZ)cA
z2`7n`>Dy~QS3jw8#-%?Gtg+fo5aIbeVChpj%OPTqFVyBLry>1CoVg$hRWg^X#B;d}
zlb5Puq;pgHd|*`@Ibx*q!MIvcB0SjWg8I*qPGkB)oY*14b3qcj>}MDvne?LCJJP91
zUkt1|BS$jn#h|gtnV@-y`%7y0_0G-1E){tslU@>@pJB$YrIHVaCBF_;`}NLG%O4I|
zvJ^XhP3$-$v}T6t;&5k73m91tqP^`vbTuP%qdzu4S~VlQZn!ol5OdB5N6ZYP9#;t3
zoUNhhaSer<w1%d~H6$@-Ylt~dOFzjc5N%<}Q)<g7=TzUeuq>l3S0R?09jcdaa7JWi
zhn61nmqA6|?2vnm_{<YX73YTPtD~K|%-kZAm~5^vU89*m?V<X~XeXU(4=p{8rl{Dg
zJsdmEFwwesp;hBvHOyDb$2k2x>D8b_Bfbh9WAj2re3e=z=9?d?_eMLp-2Bkkn5$)w
zIX}e4vOlIm?DseiInwA(HM`mwtR~z@M-D0K$YFs0@eq4Q6-ECGLpAqCC!JYHU9`a~
z^yZ9(A<i{S3#C_7q1thylg+5mWE0MrL6Qo|COOSS5?mCjE5<na%%afJH=9r&8Lce}
z*;E)Y$>xkueM^|0DC$LT&Jew1wIu$DEe@3$<GAU?p%o1QI5GlBi$gxtiYm^wq$kzh
zF-|7^WN7IR%6OYxDDY&+2W62UzEE4D`d2%ix1`uMxi4TzSX<}Zg`?h*N_K=LPZQZw
z)Rrb^fSOwEOe*gPIh|Y__7-v2&d^#JIqbq3x?x~+APo<(S7&%lbmS}$gLZ~wGRZzb
z+_f_dRvLE|f_B#xvAY@y^;r?St09TIt`K)UP=>p5m&@9)WGj{2Q8uhFqsDpD>bo}f
z+M(jL>$KPUl>n-=E_O>G!q<sg%7|>J`0jeOq1L%By*}1HM0nPV_8Aky1KOZ2);i6Z
z4WSt$LKJE!Lv!glhDy5WD*Rx)Gr2U~6?+6!xVpq6nl%#+yGiY+b0%aq#p)lb{dJSL
z)<cmb9Ck}#WW94)X=Y3Ded48C<b8Kwq+3(TSHhA%smTq_?WtG9HZpp@RczB8TCb`#
z4NgM~zaq0hr<vWcS%6fwJ2ndtvvh~StHvxs&}Qk0&0;9jpeHtqA&FUfv{|IX=B}6B
zVaZ-G%VopVoD(bu4$nJwVRoalzVxcyVc9i0t#CDqT;)BvnZJB*#4Ut~{5Pb961QBr
z!eqUAs@b_cvnMn|Wr*<X3FU4h=|8U)BfP2Xo1C`vn?)u~6{a6)9va)L*5BmZmFbP+
z;%aS}-jK5-<j$^1spQ*X$w5^;!TJ00w?jU&5m%oi>O2ry@0#2UCO1HczJdZ$#RH)^
zq8Z4G4utHv6K4ma)dOMvU87YYXsx~zYt>L_!aK264N0{64qE+j@}7U2`irTfcmLmI
M!~3Z3OmwdMf4O30fB*mh

delta 46925
zcmdSCXPgy9_69t+Z{JRL=H{6jX1HO<VP+5s24)07*Bn+|b%TnCE4!|`fE)h1>mWG`
zh!h|of`ANJffh+3AVEM7CAlCVNDcxbBH;U+s_JRhukY{u@P51J^f^zRN~cbps_uJq
zRO4O)8~5zv>7(@V_E8u320x^n-)|3n$k$`M^~t+oOON=Hd8=*z8Q&FOWN{ylrD%B(
zZGn<^R`Im>v_1=;)b6*tUhoa8u<t3?eiI2UP>i_M*;2JUB`>1dY<@efOS!FRajU@c
z5mNzINz`{pFOkjLS$lk3#}iT4*d5zzUn^y66fGg8JWyJrB%3-Ul-4M%@3cB`9Xwpm
z9_XlbE?=)`VJV{!SBcbdNT{q=8r^IS)3^@Eo%a5YTF6_m(=EpfrJYK$p;Ypcl+vQT
z^{Iy|sS$OL!m@X08!PrGT1HB#P}-wpZ*)i~?NK^DX$=)hzKFVCVa0c9!z%W>N<Jv<
zSF%-7$p@wV%AK985uzEih<ZY?ciyRuR4Ps=T0n|v&^n<6(+&x(6H4P7ty!WdJ)(Z6
zu(9`Ovs-<qXhl*=hthXSyxbw7^qq3!gVqeyQdD&26(w(w*OU56$+Gqj`wH#h_i6=7
z@QPy8v7WV5mG@&$HtT-vx$Am*72dwYL{IhfMtC7a0=1_%nX)Fs6wscC*2k+1WVbz_
zy<Lr87L`tXG)Et=-$C&JrH?nl`<b2srH{9`#0m;wgHY-W^m?tZWzut_zZpSw`g+yo
zR@Cx4EHwaTKd*Yz|1yEr->cqS_kX!)+W}tnKI<F?vkE&$c=Pso*?<SN@4_RzMxix{
zYT%*KJIc$pE;io09t6xD<y8z`3y?5-l-JC6NE9^68w^?h<eGRmhCTL>_OG%rUd1nE
zsHS7Q`GpP%l`-B#(rU(4VE&t<AJ)pBeA8(vkD{Q=H=U*e34k}91_ud%H>ts?T|pW|
z7T?7iib&B=Z+c7av}P;33@E&94}Dmx@KnC-mf}ToyzTX8C5{)RyzR~1;E<%`y}7Nm
zp@3sx1}wFId_>!*by(_RsK8k2_1Be3XjG8(nmHsemU=6iTQf1XVJfQisaI*78t-F2
zt}!xp!#`*Ply+c=F#-WDA;$<vz<uhC)RS;DRX+7LY-GJDs-;D=tzKojefmi)<*CL`
zr;{}3ZS|UBsCg6(dRx7*B0jc2Vr*^o#<yc^MJxkmX=t)QMEl&Ue(CkeX5>8RZ9^+T
z%yh)Gi0=!pw!&j&c#Sacc6pW3R5;82cCT63%A@FL5wOI#1_@Jkd6Olw3OXQnc{4fd
zsu*hMyRW_M?XKF79X*PHHvZae3<HhvwL1z7AbstPa1Q`$3?O~&&DFKWC>YF2L_6%w
z8)^qTYjIEbu-8b4!K~0=J|+fpTM&Re=Cl(?Kpt}jGe|%lqrv<o8AroTJMC4@d)3rx
z&+C&aldNGEZBaE?qMacC{nJi6gM|KRZ>*5FGf1@aX>ZYa+0Mk^?R>_oo|Ek?dC>dL
zX=lkoJD=t4T**zrEcwB!l%y)M?Dx-VH&%fVV@6RFH24o*e~7m*NZ9m)H_R6u)PW|;
z58hO<HAK`2<WF9<?OAPT<xegKO@*JlelbO%1B{=%MWqsw7K5L>^&40hXxu3Zx~aE4
z;g8xsJZ*ccwRX@{=&kxi$3qAhz15_c86bhtTW!#gj~hP0`>_YRYPs@$svIj|LZzQ7
z#|lWO^i!R&!s|JNZSAC8>WJU4VTfC{hJGEQ%6WsQ02-pop#l;>LsSfv56JI%Bicwc
zZ$8`mC(RCyRE>!B2x{f!UXQ)=XYJ9lQL5}=Fo85mmF^BCkVdH(ArEpDJY=lV^V&m|
z%(2C*c+d_^mHh#dgjCrdAc4SC^hbY{L!e_P*&jTwnM&m(7lZnAlIj;O&dd9Bl3L7z
z09Z<WI!P_BuwEA!AZzTaFKC5IWsQqLeOjaXc^CjC>eCuEEnE{wQc~fXW>KGdsZZzG
z5Byat_f*YuF{n@Hxpq*W&Qpu|dP+LLn5SOX!WxWr^<h0-sOEjdmUhzyg%+y57`3a9
zuc3=nwzakKKs~W`E>aafiRl@tzevrMS`Twkz<<Ctbk}~9`9M{QY4kycBA^e{bjErI
zBN#NuCG3_S+O+f%RY^)A&Q(k5Sa)(67`BXgU)JtUFH@DAl%Wu3nOd*D^+zs)8n0l_
zzpQo5t#A#Zh-L*DwA_m-!2zsS^S)Q@3omO+J;C*=FU~8)m&grl<=?eO(;HNU&l4Y*
zP~M<op4@^0JTwtEvey65+GjSZ3Xl4T37L&*qsBZ&0uAyrHu@jhYnjhfr2)4TOya7I
zn^@=2IS@j1zO+03Q+wHy{!&%=Fd#0ZzNBIB1Q$YmcCa1)r#+S4p(?zKAVc-pL0yCa
z3lh_07klJi+C%ksxh7FSwu?-94XYG{(B}tL<<?YBAN$&{3RzVXqlumWZ|xrC7VsNO
z8z~?=s5UEeNZ5E#EpKlHER8T|xE)k0+F3iO*RT#m)T5XzuV_27M^)uIsYL<WQMF|&
zi;1GK9Gq9}*Q&KKO7^_l9tOnDQ+uqW39Lr6OKM&}_N!jnN1;n9;uf?w{1QC<WtGKy
zYwgM}tBOuV5Eq7AR*eFOgq@ewP}sVW>)_$fD(l-@yQ%DFSBK{8&#EETPnFNvpH=wv
zE?fu3^kOG^Ykw^3<rAY6#ZYhe@|B3C8YGJ8<-=0_09OIkm-XzU{kp2JPdZFhp$Xd8
zCu0YYK<MkM*F+jh6SS|dtlV0qq0YXD#(a4*?NDFsR&S8`5TRZVWFJ*}EbBBtYgIPZ
zC%qP!fEw#Fg)0ULsIfl8mMyso9*$?L257Cz#`|P5`M8@J?=zyjbdXRP?<<O1Ew~D*
z{1$64P-|KCma9Tle#-~{Ne%7eResA?SY$QlDgc<w`VZ7vludS3sE(6;*d_@Ts^erI
zoS`rbBX}zNcA(a}a;noxK80M+RG(ioEJz?s_0<<H2qX}u`Y^udV3@%O4DcHE_#kaw
zRgDWlQB{pkt`3j^M2%0z?;rtD<3l((5mO$eX$yUMw*9NY+5}Jig+4xTysD;0v{gQ3
ztxvUfX_gMUzv+d?Bc5#z)gJS<TJ2LCTOkBg;u)H3jZgh8!YPO2jrczCsXu$Hk>qkU
z>bgz#=;2z-Q?|+JJ8)s$CZCMmK*G9BK8(HFxDFm}VLL`>zpC2e)KB9(i!Dz5K$4Iz
zA{rSa5VlYwPs9EX#lo<?KKu70wT9mEy*|a{eE~MK_EPjmT>}zYd#T(Ct^{hokIjEW
zYhJ$Jr-)cX<3o18FDxQxkX)*6J*z#}L3bYXvEXR!*2;sfvDBXjeSQ(fX}muV`ZA4V
zvDBXjeNCJ3(XCN;9`><eqqUY*hg}FCAPzf20z$C-u&;iFgrNRB>}zqoHG_tPM(*r{
zZ#2_tZad*ZXq@ZkYYfQ%;)FAMK?33g&EDB2hd}3F^(nnIH8tL3q34Ve+doDdtX6|5
zLP3qkxmVq8qd4~}H6Lx~@D!ooRbNqWO@!RU;Gy8pKDC!7LT<@}UQZauLvG1JDEO*I
zA@_gN+!{E^wVD!7ZL$j|XpaZWK{!@WjJ#Ge#gqgaXlpf0$<IYon6x5|pQU|KzR}e&
zp|eplMTD*?CUiDxh`RVDLsP7X`nf%EwpPc};d4;3kuCJh=bD^SU<2cGEy7n?RM!H=
z=UTl6)^t&>AB&KtG)Rr{u$4!&A{Lvg4XpylLGuG`hl}P1+72z^3@bm-c4&3$TT2XH
z|NMx0T(iHPtF=|Dj=LcF=+fg_?ZC<h$Z;(rVkS+=2gq@)yt%c4VkS)~h^QAe`|$-@
zJEiKP3sL}(i<<N{kOIg>t#)V?0OX?9qNR0K)GL5a*4U0k+PTWBE=B+tS2ek>)RX`)
zu4=jKWy=MCaaC)5gLPF*$6!PqVe21gJ-zKl=(Q~p1jY#6?{s7k7$fwkGhBnf7@?=L
z)=rC8CKS<XbY-@^c8T_=uNps{h7AFxM)!+Ug{Fi6Q=`Y7t_}gFMn_kRK^np!t<g(o
z>mug>aoS2lWu~rH@NJ=F!Gp{q7Ht7FC5#|Y=Uc$r{?Vh$3*Fg-m0DprSYr8s03hb+
zGOP!QQs+^rS4AU65CTr$w^H*|EpiQyU_>m^YsVK^u}GHzJt7Z4EYcCsk2c}5F*~>F
zd5i7zD(ww5v{lF6Zxli6<YBk7Rcp1;ZMQqnU;=u(0}T?;+w}-fX^{$`x9g>KtvfgZ
z9`0gqtkdqQ+T|ipCTEw6K>l`@9ub=-o%`EeI`SJx8Ilobtvx!cvtH|4xyQvI*S5#S
zAn&_JkBAP24y@RtBj)`ThXA!tXJ4<^?x@=5LU;kO&xN41b)PPmHJv--eL9x4DL#$?
zZ+u3#yKK<jQ7X^4Ac!o$mkq6RcYMZaXpkuRjE->lC5{2v^E$hIllIrj^DYD}ujgF|
za>wU&k$yz=$sM29vpH*k&M`0|``PC=X@k6-`x#1%&kCJ8;C@D-SO!2ssh@#mfEFW=
zaC!ZVvd8%HN@RaCM4a+R;U_IF01h&G;640^HCWUbA?Ij&|5k0NQaRd?Q$kmCSUcLN
ztuW;$MjN%=Pkwu}f$m@8<<_F$N%qVyv}K;kNiK$gN=!23c3D@*>rOI?g!cmpj7bLe
z8J`Lac-<O%>UM3Dr?SSyFkwfHYX^DZ8bgk7oqORL10#H<7)0>GbJ^UT+U&}?E(AH@
zxh@1b;kibH?=;XR<b>xMjhgUjsw?op?-}f`_nN6zAW(t#3^_wVLi0UC&QOrhe9v%Z
zsII`_eqe|s4G0XR4_q7aVZ#Tm4dit{aH~OH_XDa%-vA~m{L3yQufJXYD^1mlb{R&o
z^&y2q22Iqj4W%eGQ=vSI{n!C4H!Z;t>l&T|_G?21MIZtDwSm?3ZE9hICeL9*iKa$+
zM|Ut2_R4RxzMcwj9CezZhYd5phZDr1e%J^{tO?Y(2F=jp27CFCHnHNkAtQQlp>*6R
z;Tdrfg3@uLNmG$XF^D{Euv@>?hE|+*OQK15+K~AI2yrRo3*Ml?Z_qCLs$pOKRvYat
zzv{F<*wDIaB!v$G39YL%2-k_~p^5w1A0N{;cq;mtwUwfI*3Xn{y&<wCCf52TG3;EC
z4_jj9t+1Dz&~CCKOEB0d-HIR`ExpuK>M>8bRlmN-fPv;K0zE}jEHzQ`R<sOg6tRpw
z_=C1Bv&@tmaxfvZjD&{3JP3hYZg;q-4fAA|n+mT4afwY*A0XKdC!lRG^9I}B{iwB3
ziZ+<Y4lJi4c-rMtQ>j}z*TeQbU>38-FKchr1xKU^@Ekawns7m{3wi9xKQomxCM&+8
zji|;?ktaZA1%jWM@R?Z6fQwFsVD^mZC9lC5U-U!6ZZXyCX))uR&-)>WSGSsK_F5Kd
z{kf^uy_N;+ZKhiPS{AUrsQv{H{rlxFSm?a%zW~GJ+hMAu*Mh-U?KIWvu4TdX?D~aa
z@FcrUwV^9j-46k!`jx3Ra(Vr{nCkyE)dttHFopO0!Z1WYdw(H?c;@T>!SClqc(U&o
z=EL>wH`RIsU+uIaf`9|2n!C10tn1(W0zZo2{uf}eh<fN3ZBZCezx_pxiZEfXh5wTG
z+flPxZCP6+c<8uerh4PGEOgv)Q-m+vR!E`aPMGS=*Gi$^PF~ymkV3zm`h_C;?X-y!
zr;3q?Ip#ZWDnFWUG}EV4<CmC4$j_nB^JXS1M<QH>cHYeWSUVCGFCU5D6P6f>idT%p
z3#OXBmW2xaV5*sGS-`$X!=e?RJ%GM!Dg!K)-RIF;RO7c}1Z9UVyGEeakjxFRoax{d
zMqDw~atZI1MqG7=0B6C7pWU&;S-|dT)ec0?LaV-7ZK+MK1w*s;vTDaB7ell5wyr5s
z^kiR4ZC$G<I<lXoR$j|Ok^L?87OMlVH;@NeN}bYH*$yvv@A2YavYr0XwfoKN6-B>3
zg9kkHM1NEIYmkM^$Aj=e$Quo_@<y>OivB=wnB@y`m&o%*udxcRUY>r<Qh3VM2PQOM
zv+AU+EXqR)D54H$|MKdk>EV{bBRyh5W;n?p5C#cq1Y6?ObLkP52yBQ+T$0Ig8MM+!
zcFC*PO^>t`9+pFfx@siJlyMo<?R9pus#j!QcX6mDuaiti)P%A@R^D4|psII>Fv}O^
zHQ~viF_zMhJNJ4b4FsBJfPEkVF~&lA@*Wg}6c1&N8v6A6(qmm2s?u1JLEZ{7pvJM+
zefqD{<1Fcsg~K05GU#r|ph|Btucp76e$&OFD!oZERa^#D8qX$cdb{*^OQuVayMfGj
zl4;FlFft~L*7Y0G6P*4-ZU!O~NaR*7f(ba0{YKY2W+qw+&u^f7N<>a18EP4%ZzfxL
z@3O@@T4u84E8;D~b1hRWrI~0Mkz@hQcbGnqfS6)oZLf!7kTHp<@32P=y+QgNOD->9
zLgpQkp^3+{C{x*+hTbMU)lztJikOg@N-{Td8MMqacE->v)6>u^6nsF2T4ox_wB<5r
znd$6qQ?JTScUlHX5y(s@na2<{nGtQKmABtwGfe$A^=Dc}5J+Ct#I|RyrMz#c)-ew<
zQl`vE5s%fg^rJ23S!xp=F^fmQoNvK7Qi@7&VBdShxk&M{Nuj~Vc6+~mNvZtUlJPRQ
z=$DTz883rG<9uw%%??Old~9K}a~M7m7<jst{Ue|sZM)Wmp#9QX7lNX(wN^xg{!jtL
zS}UI5J1&!&a08nV)bDD$!9}3m(gqiSirHYvtqxRxu))Gs=QrF2P@7oYkp5WvO)i2L
z2%9WFwVe-k(o(U>3i0CuB1y->@xcm;(@ex^+Fnc9XW2_b`ZDj+_$_wScmkZgt|b(?
z?X@CeM~$bz*=q^UPcVph_gcAqaJqDgPYk4eFp9sn)W29OgXmog=luS>HTG9A{Ug18
zA3x8)dR5#$(Z=|d@qX2sYNB^7*}KHEKPu7RQCp7nBaora6wlCZ<NWGv*KlCVn|`&O
zHG>ij7Ip6odrVGm>aCvPmzNp9MFnQ~WmAHL(hR>mTL+0CWQM=^w*nO;-+0aNmpslZ
zL;~QT=o$VS@8)|k$)dg34F7K)wFXmwZ=u7qxqfAVUrk-|WbIq)>#C<34AH81j8>iN
zmxBx>jGF70yJ3(pYOY^Ic7%mio$Jpo@QYR@hB)${=a+XQB#YmTnD3W&BWjsId(ZFO
zji}|KSKjyIZUmj|Sr~<y?N^qvBMtNis`1M)lm?>h8cGAv_RH>v7NBjv?0%3i)b{6=
z)*9;EP58hyl(V>@i(Nw{6KEg8&>X+SL2#(1O2cOf8OnF478SYL-q}!J=4rm#uV{RH
zgA2n}`*ktgL6Vd|6185V9JfEBZT9DV@3+@9)`xmxoBc>~e?tS`k3pjC^D8I(_Ong(
z{oZQ)7JDc>0pdQtDG)&daUUU4?g%8Ry3ZdwfvVDwB*r$1w)gwhW_+j+XDg4|4){eJ
z&4s`M?l*oBZ96OssDpk)Le(^Dq$a=)`9;*}u;4qt^~1+qBZclc>=)6zBZc-lLSWZO
z(P5Ndty9awqy+r2Yi;H86tSZpDf}_y+x*nmXZ-BZ=K9zN&iLiQ3Amgs&zC>~=!_rd
zOXO!jVgjA<M|g0<$^ItKxcH;3EIQfulfOIfXYH=jtE$iY6>&@jE>O?=1Hwmw1nPM|
ze5637D=+8$$&RwEX<#5IKkrX<;Byf2#GyHO-rugh)t@>&9~o$W9?SQnE-KmkpMJjU
zA3OEv`r-@O13gD&+h<>Tv3n2u%60mmJ@u~o`H_xS&4&-_nXmN8R}l^9AjOdfvDlF7
z_4`}Cny<FuCWuF<Nw0kMA+)L?g>mB1J71mau^OVP`Q(B6vtUcT@zeeD<rxB)sA>QF
zu*jZ)L{0nWV?m*sf<#UG=cj~QBa+v&e|~XCUQ@}Tn)c6cf2&o_%K_pbHm;@Kyz`)Z
zMVx5m^L`qX9}^iikSJ$RK75KOhx%zye)eur9qv)kqJ#2tcgb?d$M6;%l>e(ctQy*w
z=TqN}w98uQvpj7_=1U&|E=JtQe3`oi33Eo~M@2RpBnlpxk3$kfPk;b5niaOuU#%ML
zBG6(rI$yd&$N*t<zPu_1l63MB)NU$3zZSs9<mZjCzi6Xx)NoEK7mxyU-iP_ha&+EX
z6dn}F-V?mkU=JI1zaD4%tMp!XEy-6~@QMo|)M{zIdN1!s!9hPR%U1_@&{$p|MYPZJ
zmF+<8WjV<3@5Hlb-=cebt+wT3$3=dCt5f9kMLxVR4Gh5n;FtMoUyt<}O|1eN8DFt)
zI_g_1zj9guOtj-yPCJ4`D}0q76?Y;)q7}Z%M?g$xhXvHgd-K_Mx9P2(*_*EjF9j}V
z%Vi!UboS<BnWs(%iB8{}pT1L=>U8?v{LCG^(@8*f`riE8Zns{iWP1U1`ni02(CvE6
z_tZJpTI%(4`7+fGDU^IJKQ6AnfJDjX@^Sq|luQ%&Tz;cRxCg>hloR2&jUTqI(u!F?
z3YYTjt9R?wo+mH4#n7SgrF?n21X3vGQog)h0+MUttWOl<MKPE1OT^VUJe9><%CB>$
z^#@)GT<Fz&_TPK;C!W0O7D8uqSMz0lvp}S$@@0M#Bnr8jkNl=61VIkS1`o@+P>4fy
zxtibbA!|6zlLA^a``Kgf(?@!q=vN@;3AiYwUxAz_AW@Zm1-1Q4dE<Ts=wDF^&Y3}G
zgd>13N=XtY+tJ!e;cEf4|0sLl1Nt`QiBWDLbTepFft*SZLLs9H<WvHQLPix}Dv3fU
z&pfK2&fT&qlxL=@j4DXq#V-jJ&@~3eK72@jw2HZ9P)eD(Wl&0)7093fDky^$ASif;
z4)Sr&Zbm`g$M*dX>vg@s83l;uUxE1nngX-ftB>kE%V!nHMHfs!%_@-TM38`*Re*FN
zUy%Yd#^$q%$MkV!^IaVp^YaT#;rAc|o%sbg$;W;J#h^M1*oDXRs<sQ93V?|UEGUqJ
z3M3E~6okd85lA2`C_qd|Hx2?sEn+V{uD5Et$VDKJwa7)FVY#S44oj$zP638xJC1-s
zx0vmJT)(w)v5P><;$jzp0_(*EVX+Pb_?TN<fSJ3KW=DVwUTHt|Tm845TUNRlbP}=B
z=?Dk`V`YJiZ9&3{l~j-Y$dIbRh<2eMZ-2o4@pt-@R{aaq6Xf24aBo)%lve|AoL;!M
zpmdzXv;Xs~KG9QswE#H{a&O`pn)K%a<S$$f3hEh9pQy#_6;S#C4|mFi3cRIc)#^~M
z^$s9%aXG;46F{EI<p8&DKrOAV1s)twUITC+#X&~gN<4e%bGp}a{gA-5W>Mb{4XF3H
zfYg`60_savV>D`zhTuqcwyWN>^T>cAlI38+u#thFh(tg_Wn@4`A|NqiMh0XgLL^_G
zM+RghB001^j|?CZd6jxENaKsyJ^us~pJo9$*uf=sz!V`6NR-3^GLiy`l2{<}A3isU
z6gw#vi2nLo7FT-s-?RfqL8$RKcIeM~W%)R_94dZXKprMQ1}ftMI7}EXjKkVA$$sE@
zJ?*KU6p+p;sL%kP6p(%dBrqlg<PHTSFeU{MO$4y8fHZ&+$l_WY1)W3-V<!c2Phn}P
zWl>Rqrw4hg!4!Q5>3Cp%Kxve^tYvTO-lHqK^<|^39eP23(%Tk%u?K+^Oqm~$vlS#v
znI8y?l?EhCnIFJPL!03spV@5YU-ie@EpQQNo-A+?Xr3$xgvH?-RDiG`fWx=3bW|RM
zW7Sp!lnr)=ZhAtg#!tr(@~tb}HX+}-A|R(5)Bv+0fayj%1d!MvtOyiu2#6g5G58MQ
zqk!BY5J&6~Rt7}MlWU0`!pcBt6>rRHDTbb18E8k>Yp6B3Cd&IbAftN8LW6!BDCMbM
zM+!E79BB8uYZb9_tolWf@bjwzr91)YC}RAr3bd>KA5HAXRtMzXLKca9{F+}_fqeX$
zK<ORV7KwcPCz#3CvXGDeBv9{vibOvClR!JM*Ou@%A|b!_T70p0S$AzKiov!%p#IJo
z)2PlCJN!3{>8dSm|It<LEdhDUG{~>8YzY)Q1BuqHEi{mhQvM)FA<Mpi{g=P%f5N`d
z1)*Eo``ocaXQBH7VG-y+2_X9dO~gSiNDfl=lyE^Hv85n^@+W0Wa1KYj$C=ig#ibs8
z!WxOaxlf0SJ{HJ39kBoKFFmA$j|F^TYZW3%A3yRx9$>HhM_-*e9+1g9a4}qt)BJpj
z3&F+{0oLgiy;Jr?K&EPOa1WsqB*agq_`&_j06XxCz9MrnAXCcVLh2+*Vf%*iVA!bu
z`>0y4%AIndD9Lw<gwBz@82Oh1c~=8=rl<Z_C3Go((=WQS$<IB13b0AN^e3}F1>|K`
zaH0JZO~7}lPW*WDa)4!e>oc;K12XRkE~GA#R8JuV@=Aam>5Z+#6*v(JX`oByULmP`
z7=lz{&tTr*pvUrCULPGf_Y5L=+!dwp^xvyNrL^>S?6=*u6kFLxzb6fb$R6V{fL;ya
z9G`C3@<d;6*0isFccynxwhfq&=^aEk)tgM>xx9YtjlO!{OuwK^AA<>@enA}QeIta>
zf`izN{q#fGK|$GJNXS8GP!J9H4jmlhe#_io-gLXFzg}05&JE&b<{I)%AuL(i2SMdS
zyT>rSqf(8ZB3*$8sN4rZQ@n!$5~X|)3<S9|0*Nm9AQ<{ED4Y>7Fli8R1l6{DBuWmf
zSRAZdb}b7)i-Q$6Tc3xy0a(iS1eF6pHMKHKSHsfwBO~-VMm3m@DYUNb3Che#h_7pV
zf--Xg5~l14#ty&~dK-fnWQw*osO}Gnt6`FdlE22iAijV|7OsZv3)0mvTJA#BvWJ4o
zZK<*>>orbq(;0-=3E>fpI1~(tWgH~H4h7{h4ifY7P*5)8MDk_)P*5)8l0(b*p&*v=
z+j(h#I2vRnZ|c9QJQ|dXLWnPvM}u;q1c`Ew2IZmvk}F|R_&_ut9P|i#(wq8+#*-sL
zwHUO*jR@6Z&<ZyqB!l)4U*SfCWY7*0wvPzOpq)q&w2ufOXg?xG3E(E!i{H`zq*P9D
zOQHS8gpl0jgm|<#Ayg#x=^$b0gb?=WINU+gLUvL}T%Q2JDS3SYB<!0MlGi6dLUU5c
zxjqr1J;SsRzdq3c1Zq6ZwSl${)7+ZU)?r#m-U5Lzkfw!jec~QWUSx`ELV1hW@ptvR
zBQ+s;qK|wlE@*|6oH*J52?)^Q7!V}J#LN(OA006xk?f49v)PCl`t9l2A$k4;CS+!Z
z&?!O&)LiyG$;=JO35nz*aYLApcX1pTHlICS0~awrB&R>JjF6d69fR?KvQX3a*{T}-
zj`aH>d9DT~WZn;9TPJW({e`UYO#Pnh!jSZTs48R@h7jyei$Wocxe&^G!+v9?KGh8E
z#Vs}KZgfeQD!wno?pmndQ@$@GXB)Vv;=Yh6HVz<R={~}Goa^A>HzBrqq5j*7Z(JRk
zq2Gi|k%J2J8Tw5KIj9lvP$&rI91gL27wID_4?A54E^I&SbR9@w9CijNNR)e++Tzz7
z0@Se(E3x&5DvrrU1u#vHW1$j$?Vm_4g=_BQ(LtjDPleb-8y@|XTP{tGQz04tK?oS9
zLh=qSNMM|zVLOzf*)SP-K4kyl13loWI`4u|1bE&Bp$PDNC@c~qPy)#L5PUtq0~)5m
ze<@_oSge<LDlfSpGz~6=<OOy}0pwDsUUOP`P%=$}OQGvqao-fCS#Tx9lqGuGvMU(b
zQiulpm5|JyLI^rnLWuc$aN{wvUuAz@qW`V@)o^VGQ-twqxVEz>!gw`|&RQ%Q4Ix=S
z7F?<?sq7b)4kfJ6WvhN+=}<rdqF-2EFa-&Seqpp3zpe_ch&q_*%k&wQgIx%^Y&F=0
zpvzW+!_p@~3J`<C#dWy12-9V&VPWAdK%kk1g{8Lu3C&?)=`BD)b6D8%7Gb(<H7YDF
zTY<n380FePm#s#*Hqd3OQDNyVAPl5YVR#FE;|59ox5IgJ?SHP&+bF@e!@eMYbp_dU
zx|qLWrT%DUa#&6|Ffqm_hcQj)(zK7~x~H;MAL}zSQ^WGS8%zjIrKbK$2!Wize*ReB
zlbI0~c~)rBY?%>8z5%-*LV{7V*iWnUq3KyJ5_yVQghWA<p9cCIHf^<jOLk6JhGSqt
zW=<GO)b~hV`;fl=Fr2s6_N~#+dqN+E@g~l<Q~)x-^gfWeRzH$i5|;1!fC=R#VdSW$
z2_dx9au!;rznfVemc9`=U<fS_!#8dbLLfh8JJ#u+XFd+gxCi-K;)XF7J{3Z!&nIl%
zdVN#wld$w^NXbIzlQ6v6IXcseM6@H}ywhQO(FXlHz3507FFZ_vwi+R0kB61^sZk#G
z(gFQucJXulnFqiTu>zjM(BolwsS6}ZJ08ZRE}BvxF(HnJ<L!7nLL?#ulzcp#xP`yZ
z5+NsaD$HhW({E~d%0(srb}B5dctZ%Nr>Nd@Q?ND~(WXT5=0rTHNh$W%GA+SA-Jplq
zL!atJ_G4e@$MZu|B1YO;M-_-t1*Wry_Ujw&n;sE&y@(0?>5;4m`auGJdIZPUWHm@w
zJw4Lw*F5MalBe#bN6H?=`8HufyN3Pwfd1S2Ya+5Gz$9)&wggCE)<k4WfCOeuM79Kx
zq9tk~vL&L_ZL`_TZF;L#_>Flp+lA(<U_>?to&tJy1kEvk&Pif;0VI<5f&I!idVf##
z!iZ6d&{<VuRP#j<r9H0{C_sV~{RR@&E^@2|3CKl`wIE^bBF9=Hg|&;wS^*AqJEF9c
z;B*`c(y;EK7L4(>up=^K0TSqT1Q`qY6zF!O=oUUI@KmDPk$9DLie8v1jA+Xvd0W_)
zL;A_+@`zF2>Pc}?A*!T(5>eLMTfWtQ_Eh7i*xBO&T-GNMzew?dgn6Gt8i)=BiSj>*
z;KeiA*@Hv``$?qv`iMA>B?dw;sH}~Mi&tDmL}lwDxa9UQFB}3JBT6cDd-m5|{`zv4
z?(Dv!`dwvUi8d|dwcZ$!jvgdR-57z-pg~he{kxg1IjaA*db6uSJ-ay~7k|h=Wpe~x
zjT*U-sLvu|ViSc%2I-VWYw>3h`OXxca$&6BTm5LkqKI}hl6Mhv<YRxf{U5u$(4&3l
z&Rt&W(dmWGT}E%!b$jYDeSt50lqL$@Q&fv+xSWWvKb_G>m7j1*0T-p5aK;HplyZW`
z$)j8c4^Kx}v+wlBDo(pPG!src?NG$q;WV`azr9*S4RJ2Q-v3UYSaHr(qLw)4v;>4u
z&^c-eo;fZe@`niPc~&3W@&{Lm+TaJL4Isp&&;}c6V#Fg_&uHGFs3$c|VJl0unBD1|
z{+=h?Gis#7%hqwKbpI&-asXTLy{@(HAC>KkN5JkMm8ooy!0sPKDtj%x)Defd+SsV_
zW>ifrGT7Fa%$r&33wpbf^6bOUb;<VV*6D@rojTKbWy9{-XI}2s>FMXYSS)-|Z`m;0
z0|MQ;bbsl^7rJ*Tx3Z7C&=sTUg)ZH@XS;UKcJKV+OI@DH_IQzPZm88MzKKhB@6zpW
zUAkqT>GI6WFLmjjeW^<~E8B>TIHJd%ZkGLXmwz^HmVKcMN&NBo7oYC*{PX{8mhJvx
zwi7+dc7E=~?p<EUKK;+^i!XG^cE(fE?%e5x7hdd<?fl~N&v$*MOZM+wdpwuz1kQ6^
zy20SiojN}UBVgpq&-Y-THPZ@N`<6y&H8+MpVJOw26Ai3}-BAgu^sU`q{4;EL_Qh_0
z@6_!X)TT%Fk^4H_(f+<)-PRF>XUW2UX1l-qbXhk(e|nGvY=bDB>4K0}J@cZK<)-|-
zYxgeAvQKyE-09`+U9w%+BV}5gjk?b$F35K8`o|Y6(t#=)QKmIwzrWY;SHotqy}KyP
z%HH;m&d+sv;g2x2JKCdLmzSRJ^iNdu8L9!g=<i*+p`Oon!+pFS&voiiD~>k6B|Um3
z+JN_}l|==*KHC*sDjijQ@mUU9_EM+Le@0t8ll5OyJJ!CDR`^J^`%7Iq{kc1}ik1CK
zrx#E<HClJkLod{pC^}vk2^)FI<Ydsiyc^Ny*+!y;n^|l`BP~{)?NmFZq4zR6<b@tx
zJ9p}VCZjQdq4ReP0$v*0@VTz2HHLuY^b@b}OI<tvSq!mGf9WE|%m0jwa^YYx+~IsM
z-i7l4>4{W>mfi<6X2;klW*&K1knpf$qjlbligX1rC`X`<i^_C`<iHh-i^_C`WC3Vg
z6zPh4`7DFL#3+33Ez;-qKr>*#qM|+6iw|iUJ9klUQ4SH2H;MCI&BUnub_YnnO^m|#
zOrnFmIFZxrhkn#2d!C#Ym8%E1SUsjiWnK{^X8yEjvDjFHB&8^#ZCbrRV)dF9tuL~D
zM2fXzTC~A~)-u||#3?+SWk39rev7AamRkxPQqGF{#akB;LMgMNr8h}f+6T>wR#x$V
zJWc_?+^7i1K|phER0iZAp*c4y19FhioEvol@;GgN7DmPP9RzGy=-NOT@P$#iufS6v
zEsV;593+qyMiG!d4)>XeXp5tHpRnIu)gKEjjv^%FJG2D(%;ol~t9sCL|MIBZ7=a6@
z<x#mY0tu+)QF#~w5{<Sz8o7aoR7CQSYI!u;#yUZ5mLT`PW?{~F!E?(R$6PQ`mo-ku
zfFz-){Hy>-l(8m?Wqmen-jfmSi)h}tsJ+=^%v8c(MDex;|2|BTEZ!l!d`l2$f*sCC
z1_{g^j++Mw%pK(B5nHKhlFZs`KkhRIdCK;>N@U31s0_#;1f{*y0~9DEX@T3%Lb~yr
z%Kc7Nz(iH{N99X)Ac3$yniD%|kU-cUZQRtNcaf7s9gMOmx^Z3AK^KCC>A|SH5(ptc
z9E^s<{Q{6&sZPe)OzU})2I0{tix|ddl}B9+8iYq(GiVSVjmmfZpaYDf(bhNcL71dL
zctQ?B5YRl~3__65JmCyNkkC9)I|!3h+p}U2{t5(aIqTX$gYc{~2=Nq1XPrR^5=duh
z5dIFGnu=%_qInBrp47eUf%--fTV)yTLKmWVot#=KMO}L_%A$Vbx)v9m{s9+|7o#%%
z1PRECQN*A04t<K6{--FuP12O*F6wDE%5Nkpz!1I-kNI;`yp9YK%0ESM7EH-)Xrp(3
zj<T=(#*DI`T_pnjIVumaAq1tLqu5m9@-1{g^<wk$jW(6NV$$n?iDu{(lXDRy5PHSr
z9v>v>#Nc(lrumVg?i^^>FEBcJ$_B>dwK;I1G%%(M?*|e}17pY<(^ah$_1_Toe!#e;
za)?_jWm1N?#Zo^GiODx%p#p><G3-Onh}xnbN3e>Zakg@V3qg655ivOsQ@jI5#6n^>
z1riV=VmLziPCy`$GMYURGR{?wb|L5}XLQW(G%|myEhauS2E!?>GCGDYJn#veqHOOt
zHY{vRZadC}pqJXl#iZAU3@S1%R?NTD00>I6jEl8wEyoG6EECxC5u-)r1Q)>s!i1Q7
zc{atfEE8h#<ynwGm=MEz*@MXyq$tbsj{Q}{80u;Jj*CHQmUrCdq%_MrG5G}~=m6uL
zSi{EF4IBb#mg(%Bm~m6t^q9O*mg4!9=`ooQ0|}Ms)bV2IAiYw<{Dl}gHEyBw>Tpd=
zzB-&zD6diz%ZN92K?0#BhFQFsc1<aIb$EeYU1&U@R4s5Z=*{5;Zu8Nb!wX`?;uAX1
z0mgz@{f5>s3Z;u9+R|9wHoG8!+DDhhuozGZLM_Jp(>{tRYuN0h@mV!~iAe-L;694U
z83+<^AH^^ODLw#+_~4^h(VCbzLm&pl2inS*x;iG#5F`(JAIIbwf@I+gVO5OI5ct<*
zifQI;jw$z~`q)3EjF3_d!m)y;^5&R4p@$^UHpk?m1QNq)b1Wk6&=JXFl+CfIxPK%$
znD3ioEyO8{WO10PJ1zbJwPNxJpU3b*@#`LngV~@u#<)r_MCgRaXz0&l@}d<;*z|cU
zE>f2u0rq(e>6+`%&Lt6Tdo1rO)+uc?4{nbc`TW*X30m2=lTAt+Pd>fVsT`O9+8L9_
zG#~-AGlpXt3R6I$ayw(OYQD)P5|x7?J7b07;*(@?rQf__CD5BCWZEv)DPyEs?Q+YZ
zM%?9eC1jwoi@K7WX$dOt+Z|JecuJdOZ)1P`3@-YUj8Uf=JW+p0V212=W(Y{Y?T*Qt
z2p|EsJBB<x-9!M1n+UsO&P@cOh26Vj@+N|0;U>cF7~MqpjFN4*Q+Ozr_fDZF^^rH*
zvC9ix?WeQGYESr33<s?YBh|;R?0p+!ZAy(X*>7X=m;hXK-nUfzSs?}E4#(K(QsZ3a
za7?~$fqQk3I!tr2DTe}eB*r}TjAof5G5InDF2!*+KEjaWLa5i#7`vyQQJOs(lPNr0
zX@k(w7;-msvjkSbtsjfo!|LI9G<z(j@Uv`UL+n@#XW0jZS!lxJF*dKhaVT><CO>I|
zOJ$Hc9>XVXZsl0$-V-slpn=gLb0Q`)i?}idp%diMOSurd@yQq~YG~BWo{Y()A?|!Z
z=p>E8Iq-ETAA{$7%znI~G1rqh?_%-q+7MO;E(NFheT+41Y;??gACu>$1&Rr*?_)SG
z{U;ZK+q@8CgBlzESN{TL2@OvaU_s~t`Ik-bQJ~=&dlo8fQ_EHU4Idld@M)=3f#oRp
zq0qAs3PPW}WY0o;B$7Vg19e(Gdlojn$(kha;5G-^^O_l@N_t>nZL{VBWME-~M*J<G
z0&<Ll*qL&pU3yTV{NNFokQr2n*O2K=paKQEmci`43djt0aVUv7m~iOLBz%F9*4bGV
z#(n7_h4Q@_Fd;Lf5X&H?j0+Up&K=4U&5c{qLtPwt6JaRf;Lrs!cqwrhd%3ysaAuf`
z6Nbz%!a<ZvLU>JajD4iJF;~fqDU@Ge0vA$a3K2ja6!piOi&N}H*Bj3&*(q)#Mj<tY
z8nGXJ01FQH-9mg=tZi$fZ}8nh9P&Sc68O!&8Ei{y<I(htLfNZeLUl$VdX?V!;y3wf
z*llf$ipOgT<twycLZ+q=uh15A8Bj9|mEzKZ?5`iXC)=(2^W{DM(Sv&h0FWENQ}Id}
zNG^;cy?R^~y*rC-YGX7=&nlEjYuw6%%&bBrt#Pjp2$(vvS@;H{ReE-z9LQioW_BS4
zGHzBw2J>bPd*%kCd3uhEL(^ss;fS&@ZRWD~Za`Uc3+4GjfX|w_g~&hQb27leteM9y
z++bXno#!?QO`3VsBwvQ{tyLt1wio8@v43@=@r4oGUT7523ql(I^wv(+<W}RZvYmw*
zchAIx?#{wkBO1;`qQW~1ufM};#8t>evbS$Fnw0G>)OgwyGSs@e3yb*G6e6LryRglD
z^vMN~c=%s-@mAx`ivJdB{M4M7#4RjrB1<7(``^M=cU$jc{=qM3-xTKUwO{IBwD5$!
zDa3cFzQG|k-U>rdJ-~jiqjAW%en64N@3#>bU;~N*{DLcy02@$*88-q>5j1SxQ=~kY
z>Sb@Z*Lb3keO#(VSl3f}=&{Bki$F45NPa68BoOx$$#2Di1md2e*7wuZ54BE2+gFq~
zFwU=jsCA&YugEA70bw1o@S7r@w`&Okz5Gp)T=YRg_M0M^xC05)Z;G&^gIiYXkeP>y
z*o)5?r7aG*I%L?PBAL905OfX|A<fBel+{5qYA1`7Ge!2QXN<T~jo)H%!xN02lST3)
zf*^r&vM4E12OxoSvIy%2g*_k<_M9xLf2K$zo{1rn2d9c;;#soLE~kr-c*gohHUs5+
z5k8>v@9dqF`(Tg%(Rj55I3mo!bCi1CwVt*P=gInMSYx10-ybVdelD_u!wg&!1Op8Q
zj-yVSh)YE>R>M=MUn-KZ8b}y@si^2@7)|#*h{0pEpNiD0MIu&{Jm_66lChd(Ay&Im
zM6nuON~lBAv6m+<(i))9cD>><tpO5d^oq;021vm5iaTkII@Hhu;ykT!8wgDP0rA>i
zpdICaxZFzNDUb%lWm*FykOsuDqZ~(HUr9%_@$tNKal6f*jWKF;d>rF`4>eSpg4xM&
zWx9RfMdSCLYWx%}ga-he9G9UMNB~Zb%NsEu(L$5svFUNqLd4)LG$pQ1i;EVLJm|d>
zmn|e&XrZZbYN1QQ2Dp*gapnEEYA^e%@pn%(2*(N<q_g8PnoaXTIy;VNmIfC{STQ>u
zdB4^Q5zlIK;_7>~Ryb!ZbK_cwM~0*aV`135IGhvRPLwRP_x!k)--O}@@GvA7vK8Hp
zdQU8L+8s=^`$DJPLBha=ae0v(Bv2Q|5$jMy3KBuZ!g%f;SqP8pxJ2pQRvlgjD4VtK
zVPu}L-7;vKY`bO9ShwTyV_|8&O}69m1p<&L!;Y8yN|wRzu@Y*$&h1u;mw|z^m@V&N
zlsvK6ErTY+;<&t`kmkGU#qqFsD*+@B7RM1Iih9ufoyGBNM_C3<2eNT-JlDZ$!^;4*
zgx&D6apRLq+%jn2y~HhpM*EVuyak))qkTzSzHb2%Wh{v|a@vaC9-uOo#2equ&vnt9
z=${pA%ge^5Csw$H@EfjfW6?xd;Y<Xmpdu^cSg=Gz=<R_O@w)fPia1};T@kN$ua)K%
z!LqlK{q#2@`@~AO47vie(k+9w?knT+^Eqk0bzd3B0xZhFhs5x-)Ts#nj2Ns~8LxY{
z)r^+`fmQ6Ee>ci2SGi@--hNeF?(NfjZ@(&D?10kVepMV{=zHWJ(+c9ywd~;EjRjAv
zbs^{q#ah=)x<auw9ub#Cp#q4taYSCiOcPeDjpJn&F#$|DC)UQBJjAbqq-poRfnE5A
zQCYdcEyIGD8{#s702!3AAzuGR2}+y)4e_>B)(U#zBTX^xcKfA&8Y`72x4Rg0+hTiM
z?&To_jO}sx88DE**d8wzcT_;a&h7E*#O+fe#VO_Xc#9{jwW1V6z6b2#|2EbuPaSYe
zp^U+SxZH%MdB)&CTz*&!BuY6zzE-qGK1w+dFMU9^M!qcNK)mk#))&G}A#^?(w-;9%
zk9ew&y2VgZ;b`11Hn(a1IkKbiw8+VTL@`I>$jOLe3Q)|^c$=qrQW#HB45H+t@f$i}
zrLoXpoI{uRj>eyOk}n}?ipNjHulagc*B99<_nHN*@C0S!k$C42BpULBvz&lL*(Yk3
zlQhNbXT@^zBnWtgvu-Vd7&>R&p+g@tJL}FO`k2{ST23fT$waj8<9RG0!judozmFq1
z$@5kj3R5n|d6?1)1W+$J-W()kFUDn<0urbf;|Nn`Qv+wnm0pS4KlC=rJ>^&8GR+P)
z=NsaKh9IGJB_54gdnreiAurv>eyFdp&r{wfQL98?eG;`w<d^#-pfm-01t@_WYIo{y
z)K@BpCghq5F3cU8kZUSPU<^$}M79|uDJ2j?)54yiSbTVbuj?&Apd*GSWJiF6=J14E
z*Fi#ac*0rNGqi+^o*o`#cpe|^7EaD`v|Bhi%h3tBphE=^qZ6_RvN&o=<SmdrkcH&f
z1WvVi4`ita#wSFe2m+|%6LLKT3EA-p*#jVfIzAx-#Vobi!~_M3C2c@JbE2zBy)ZE$
z!$mxW=EMX7u1(~RvJ@^(PAKoPAw!If)%YcXMeu<#*{KyspiEB4r3@rcCMU3z(RvP&
zqKZVxy9p625<>)wQxY;*lq~f5I|&4f^pSnZ!V5>Z`IMj+$=h7ZMG4aq_)N+Fh@!Wq
zC)9^Uw3vkz+MI;)z8x55)b~{5rwBjr0Orm~$S@Hkz~&@mm<ST)&Pf!#4|6F@BnA(H
z<|fql5+VqaJm}3!$RJ3v5CqLnP!L2@Di_ffCGwW?4vl-&9Ex3(FfyV?bJU}YMUP$&
z0xi1OF%cwW7dt%)5=AYh9;MfXa@5>Q7#nUhy=#dxH^3xrg1<}UBN?bHNg%W%OG<GM
zC6V`;99pH2T%K?ycPSaNQVuN;Fl41;2uR4TbPNFr)RoTADkVc!$)N=TnyXw*vS*bu
zwD1&~t7vHPSiY2o*7}69*)AVRy@Q{kcklpu>z&>K3BC1B?|?+_tWOkemc2s^-a8u-
z>L%Gck_Wv{o!*fw^v=fG-l-eWwkGm+IK5LB#cr*gZ*{3rzL32G0#*CMF%cwWzi=7_
zB#Qci8il^tT9@qK&g@afb<MXY<oO1e#7*ep-7b(&*`C0M(2moIU%iO-Z6fb#!cM$l
z992T!CUD|MNy&O-#gPOHk1=klIO2eT3$P;z`HcaP06RimJ(fIfJu=`_!v4Q8M#@up
z%9*raV}6`U$V;OjxtRRwF-U-%O5m%<_j3$PyYEo_vBm?H-?<Pp@4s{AeLdb)-#M-n
zBp|*cS9%MF0ChgWo)~Aet32;QkT*W>LeN}1pOB|E_4r&opFluF-nbrl;~%6q1_Aqj
zaJ(@{X#U`MV~{BBhgxr3k1V~y;EgYJ#BbnSaZMnfe8n|^eDW2?Cqo!OSI8%Cp-oo(
zi1tP@Z=L<e@y2Ir_>Cl9^5zb?K6TBQBzMSdK>%`0QjTGefE<&Q4jCjM$0RX8Cez|p
zA04DkN-C3+YH9@jAmJtRZq{|OQOf*Nj0PTy&hnz{wkbww;{V;1n(F`Wuhhs}6{r#F
zk1B~d3=;L9^lVbzssN1!n3R;aDnMcqPfFIAoD{bzh(VKBeLE>{RY(p7;oC`ht3t8>
z^mY=rDz4)VNs9wJGR3&Q#Z<R&8vj$1^4POJAC*&+SdE_KDgbylsU%VlvVDG|m_7H7
z(Y_1}$8s8v?<VE(XMH{%-%aB9lit9sPvdbW+y0Kxs%&Ob1|?uZWoA-d7yyY9W+t(l
z#mAMPf`*yHZkTG^aNV4wNY)b*Dsz%0;+7vssLV;?lyH_9A9(L?QBqlAzdhBM>8Zv~
z$2!^uElSFjt3KZbElSFj3nZF#QL<<Wnw3^AVsPJRC)E#=V&#%Nl=neWu3VA@-?%tQ
zD_2WyHa1MllS(etAj>|TZZxk1Ar}Ao{C`H4C*|84AYs$;WRZB28ziuoC$U$i8C;*X
z$}5v1PXYoncqJO2hs_|NxiTr^DUi@ynRMc*`g}8#<arX-bB3W+u60e|TcV^4=^zQ9
zwMiLOfdtUnBxdlv$PMFd<4==$pRrXljC+EgCh^i0(f~fZ9*aATEL~&NOK(id<Sm#O
zP#cp--Xg^Y8NhC0Pt_Q8)0>hqc?%|FHYH`!mA~k^nY~?OG{|h0HG?9BubXMS{}wK!
zK}7pJiL<b8YmCQ(pC^qZopPuR_zJ`Bn`v}x`-M|8Ffm@faB2n;CVY{UA4vs?nthQ(
zUYb^#24vq3wt1#;UE3Wl0=fAeNxygv12QC(Oo`kDNFeM;B9YgTBf!qx?B-d<?UlP-
z1RArulk!x&0r&E|lOd5c011TMWW!ykTf>O9H<{OmEuUrF8QM#eU?WA24XJVmSbVmz
zx$=Mm3?_gNIF$nl(+(tMBn}e52dH6R<_LKBZIYGFG5%KdtqVbp=35tnYWHnYMxG6M
z?Y^bC&j0qOA$7yqq`iHPF-s{w>&#fNp>>uzg0^oUQSjL$QsnJ<!JxiRvU&53TPweJ
z3#N7Jd#6zv@)+{_WJqi@L2@OmTXfs2A^C}mNmlWmabNq3E(9fKF1irpH!ivm<ToxR
z0fF~(00G&bl1f>s?dX|Cf^C1#sAvaT%t1UwC;yc6i%AC(P(LN>G?En}fAUkZX)|k=
z=nVLio++g_yX}2rXElB~D3oOBnUd3}A<s7UOv%9p5-2@W=x7S#LBhNAOx5e15@9?s
z;9Vf|YD&IGELkwER|;>y-i`6mD5CXG<qb=DQkB_9y5kOCdp3T7aZ9j&3NI5SQPD;;
zQU<bP3yk9Gfw=6zYXBxHG%zI>P>?8QU<wN;&SRj0hl5kN_fn8;-@SX69$8$X!>v@Q
z>Ote<X)TF54tDAYRjw-s3`hVEPGP{nDd<4PfEmgLFEr{^4Rs-?FNV4hRQ%ACOb$W?
z5JOXNcwgwKaAPE8Q+W&QlM9V)-q84zb9bvT)pIi2ve=khKG~@!n82Fs)DtAICR05}
z(L&IeN~*CZeQ1pKl-IaQREL_B+_XUmN;N4&*5q*;Qx#_8bpm{Dn7y*p&?;u9q{GD{
zD9%nvhYJ#lvr~@4ZA|3*DUp~4fo6Q)X#<dGgZG^_012e`Q_|yt<f`zv{izL_M6@-j
zyeldDyJbdSZ)i;l-v#GEQxj^0b<_ysZ^Catu5)Sy5|HbhrT_`Zb<`C6vUL+OePaq2
zD2I92A0E=~WK%yj9w-M#+!(@hE+Fqqf`t0U6z)qdqbbmYT4gJ%yUJMc<W{FrV8Vi}
zPNhHsVrxpiF$oe7TT@sJ$V-64QnocE|Lu%Ok+IsE!oQv2vOg69g&nN@YU51X9d03X
z*=<Kk-j{<63fYm8e|83vbW-@UGaP;a0gb+!{bh}DXVq>Ofdb#%DVd9c3=npw(){mW
zNCgPHQ#d={Ptku9s?))geSVGcw5RHz3qnEfLAS2tF%G8W^&Thz<X{R%{`mJD0zru<
zQ}(E}#tKi>Nf(41#z_~1!jY3HIhmjYkdri-WOE>fIG180)*GiQ&$$?MVd`8;-X3kj
z!-sRJQjr$~35;{8>s#`{+=SZvf*8!LKtS_?Gnzr7^b5{t1_{jzwWGNSg%6j-Xzl<4
z4SU(Of#QeDZapY|xa^E(2m|SI3ZwZ>4Cbcrdc}Dg*c}^<JEA>{apS%>wR2MpWvy?q
zGRU5?5mz3n@l$vlJOFs#V(C>u0=#drye0w?;C+jcgD0;F5?-}$aduF#*NP!kNDPcC
z`dCfBVs&7#k7qb)xzO!jjJPd^Tu3bwk=uY!F@<iYX&5%8VLY6*+-!W;cDQR5g$2Wl
z<)RK55-OJ8X95Z2;l)@2f5#DU7v^===`-UG)vvn<G_qcI>qW)9UMyFOrhK-%UX0a(
zuD^i9^_SO+>%AsE#6dI`3z+bFas6iyotj*PuOAS5c9@4QVt@xTMi(nBQmwKNbnEhL
zmu{?bi*aLHu$;!F*)+OXMmLa$5u=M!Wqgi;<oeC8<Da`}O0#J!dvA+zYrC;70<FSh
z-G-pqG`3hS<WK>^*kY{0{90I3)LENYtW04ox8hnDemQo~beiZk22H1l#qtaA&;rWD
zVg&S}lj%DI6N{TnsqJJs2H~CjR<Sy{wv#0nx|7^amP~Z=+oF@-62lMeFvA}Cxsmf!
z&T!452|B|yizeudV(F%v@(DVl7{?}KXqGpn%K-E3Guw=Dp0@K{44R<x-3FrgetvOC
zWWu2X^X3=hScE>F)RZRZLiWj*M$gKHE&@%|g~c+{02v@GEUqV#=OBTwuo!<mwMJNh
zmRM=`-fpb*RIYR}=t|>C7lWqg%3}G7Yg0Z&R~F+H*Hr=ohZ^hc{yU8|o?F(t7<8p^
zeX%?ZYsybG))&h!8-au!>x)a$)?~cw?8BE1zAw)Esn{O8+n8iVzAyHfbgtvW_Xyxu
zij_Ej&AS>TECJ2`AcUS`Ww}s{)faC%fyBcfip4iRi4tT!4NoE=`$I9-G$9M>VzGSd
z5-<8g79{^{0Ay*!x>(HfcZ3UDe?*~=N+cThp!tmkdJ5qmi?Qbvz!>+Jisj3rcrPEa
zAbF-8vUIWJQZbU|Ki~@)YO{zos3dQaeZwK+Z%S}b3Boek>NcZV4`Is=W2-x)M22Nx
z0%}N!49h^msv#w)5A7M7Q3YOOnIlH)ve#S{YJ%5X6>>DMkqUh`p&3<jB<pp=s4N@l
zsu0jfSB2_6l2mYy2`Zr8U?+|k?aJP8Rj57Qa8<|;yg@2-eYhF<fidjyqsA>Q#<(if
zEMrPcF`*#?l`$m+0se`FX5{PMEJ2#!26oFaqb@sn)X0{BA>va!hVq*wGED#y%5Rn+
zP4F}?4@37YcGEHAnToeu6`G50mB^^A8J~-9m0;YwWuY6&BHH^Uc?axG$BeWu^nMA#
z#?`pPq?S=X?6-e9ZG6(CVt*YO$$<;7{dJP!RSu9Se}5e;->a!l%Ol#!I(ZZAGbyu!
z(%@trzR~fj<@k8ZcXgES>!|e2U>!8hVzG*G9(%lwd8p;tI>@QhSFgk~^v=0DYWr(A
zDCazJ-uA<|ax!kH-7RfS@s$n5;U@RO;KI0}X*o(jLTP9koq-Ei(80su?ACf_MZ4iR
z$dxL5IZDgx-;jaI@HDP}Q|JW}US@bYBtFPRBtKsp&gR!Mqru_nHaGC&>T()Qqu923
z=8a{eTx+PnQE7SQ0WyFdmBzek&#eK)*p2ng4wVeYp0Yd&c3E1k;N^UgVd;q2E`lVT
zG}g*#wA_}{=o-%!*Eip7JKlw$m~DJo#%z#*5#!ToakCsGAjYTho^B70fZ`^x2@TA@
zwVmW5&=zl!i$Ei8Qaas2nn)vVQo2=Z{&Bf-ir1#F`x}~7ZKt>hv=~frt3d;BN?L}u
zPyxb}wD|S}YJs(28e8AcyuIx-7lD5y!$qK_U|L#k*r5W1X=%Ku@i4CiI%x*GyOH^u
z${8*KeWYlHi$F`kjI>Pmmh+`xMjC%t^(lSnsGMT9MfToC=Dps^MJ@(KYl~bAS_&4q
zR#3FIh^!b$OF=oEZ!fc-Yi17iR4#KdXen6cV$cEiGS?1T3YL)_@6pk7IUR7XvzwQj
z3zW)rE(ZNs);br14!GB)BjOSQbbzrgjVp-*#jwEf^(L0P&K%r!lM6xL5!mEH(0%t!
z>4*ql%K7Q_rgZZb{E~e+-Rj)Jj$CKn)OL%DKnK%X((-)+$N*tWIw8VmkT7CP8tdXs
zydKD@ZevfhFx$4><|0rSwk<6~sB(V1ye*w-DF+tq=(nZY+-UutBj9v-2ixAle4_0R
z7lDqIceu5nW91#`h{!&aD|D>9Bi*!&e}JQ$?u+hbFI{gw+;+E%fRCuCyIlnOd#v4Q
zxf_8B5O$~WvH`6t<#d~L&*+wB>$ZDbfG_~|xB&D|S9{Vj$c6?0_N4JQUGyi4<#f|@
zAM4iAY+1R_MW8>r+UFwBYt#GE^7aQ*fUqx}Ew%p25$OLj((Id-X1B_NE<_X%2VICL
zAP%~<hyvmu)uIcB!2fL=Nwbly%x5c)xDa?H0Bo5|EmvZIIFc4uBVl+95J%D#*I5s7
z2>d_C@ic4I+I+b3xC>DTD~`KX6awP7TaiLQ9H)v<TB%&Y|9PBBvrk%^cUPTqA&LNT
z%7rKb#HqB5W}yR!Q)yfz9xg_99O<$&yT6S&qUx-R5eLRu7b6agvuU|KC|BaZIGZl5
z=giUs0+zI$zQG*isru0cNdV->w2auwl>|V3OozqGWgr3aV;XmZd6KbQ!FNcnrrEbQ
znw#2Pbup0G23y`kfe<jRrsX>&Ac1i;jdx0xV!MR~!HZe1XOuVWb2phc`<}v2XAwxj
zl-D!0i$Dr6uV-W^4K={Lp1~fGB7BgD@L$i=dm|%~W5f{qolzNlZ=Mn}<w`L{Auru)
z7PrK2*f=I5mvfK+ACr-Z8IS-UlR;u;k7)1`dgo_PJM-(R39fx5uy2BEUkM;4xb~F*
zVglKR09jEhBHFYJK1p(^z4@^xG%bTuV*Vd#6|{oSU>iG_{VHcT&|t#485ub!K>~V4
zrbr}0KmvM326@`^WL*WVuXEUI9nA|>b6g0@)6Q|MgA55}<U3&?0Wl|oEc8LLu6aaT
zoXJ~hue#0r#uHqeLA-*m#i`B7xTS32ugs@gF3rfZ6EFd_G*conuOI=nG=mKrg<j3c
zn2$0_I`we211rDXY{<IZVYaRUOLQv)VAw~FVIaAJT-!kc?V}9V_QCY|hU<{X%H(Zg
z-`-&k3a-K1B*^Eh>UCt-T2_6h`TO#<85#9}38b|d8E1e5(%KB-4E~qq*O6fxnR%DF
zqhh10L#1!b$PX<*209xvNLoFK!dpbNEt$Nd85X?T{6l05l}^5>1xm-iLMc1hD|eeO
zRpXZkyTAw7Hpc*v0NX|e&<F*I5xOlC+ldiMheO1`2*s<W8FfcS91cky^uEl<!y(DS
z?sI#FG7RKTTTorT%HU7K>Sftq?lH^DKsZKFjlRmr6Dmjo?5hk;sOY$%1qEn(*}8ko
z+n?SGeZJy=36;GW`N3w8P}!T27YIQjtk|1r^bik1iR7{0-b~|PqaGGv5{K?q?akc(
z0H10t2;u-uwOqvkXOe-5at=6?3?vEBB)dw(xCMoAM>0J7`4k9F$w31WgXV}cXg~t#
zh%?tf0_h0NHC(mu;iFl{GkM=-#FzePT{@oeCHYno-^9Yzt&Gx$ZzWmP{ic=yDPEPq
zL$uBbs`#zgN#a{raJm`R`F^uQ<`hOWH5PFpbSi@_Jg($}1a&6E*4%I2nLCq_Z~1`B
z*_d8$(c2ODD9-npyq`0y;sJ9)==%)5M})n*FGAK_$guxDU{+@?WaJA2;6nKVO#yty
z6hbiLVut<SgXW`|iy67=1s6gWGuXXg)<Fo=r3^dspxHTdNj5lfIUA>7w{an~(&Y^6
z_G|O@%;k(cPK)rZ>t*sL_(Cys(C$|=Y{#$7_Svg0675;9W`KnMZdcUnBig`h-hBIp
zhfMsb<-jcb1y3(uPc<5n6_=zypwotA<;VnynheRxT?t5-GbD>$$yy2<ucvyBveUmY
z*Lx~QWo5^M3r{#ID?K4dlFAl|kPjp<MrH8_I4kH=8rM^Or`z=&Gux|er@I&woKMfn
ztpJ38F+D5)4jv>hrf0Fl(;{&_Q8n!C-<!Genyg$Nz=TRoRxS@9Nhs@#-0P{$=1o8I
zdlP>k@0N<jROe;o@&y?{%*)E<3nU=sWie!XQ-ijQXdh<tcH8Aon2HkmFl*#QgSMmw
zUB=oyWlk<%=CmZ3z*^?CBuHQ_qn6~C&s$RcR@<RY=98Ybs~vm5MJue%$}~7glFG{0
z#z6vObrv6B!>d+mOKQk<Z06JEzbe<c2-J@2vhpe|WPq?PTP(J~Ac3$hi!CsJ-@PS~
zTkOuA5nr_3;$l$xa7$KZK_LW;E!mLpL?B5ii!BlLMN4YeZPXXVt?(O)+ngQ&3B_$r
zkAQ^Yw%Q(PN!f#4S?)`20|A^}t_hSm+~sr(o&sr?(=i}{w2L|hOTVJFifCVF^Uh_N
z{jB*_?CUIjyMVk^D|C!@AgdhCvT1)b2Up{#aKLx~yaQS3fI$N9KvrH60Et!LK(^>`
zR;&WV;H$tlS@qkjSOp{xdIz&|6_6~f0*A7+3Q#oKirW8JR(T+GTb9jx&b<FA5Mq(V
zBh>MjQ%8_oR7U3@fqg71uc3p4hd-9h-p?=T5-AQ=j%9QASzn0SVmzGAvM0NmUzVSC
zt4bD}&dQG$wBjS+bQTA3^x?l&Gyu+K+0%bAAF4X*T1ErltTPND1c<X)`Pl%FT&Z;%
z>j%2~(>kIJ$>nXd&;7}~poWL!@FEoVGp%V_yp|Jpe?XwJujOP1fCS`gIq7FW0`j#S
zX2%rrGp%8>#&XKooQnU<q`N;av6X){8#>p1&I~kl=Iv%C{(p1#2Q@<dQ6(_|L8AWb
z*_^!l0~!s$a`NsENQ^+1t1~ty?*0&iMxZ(-C-4494!V3yPTu{IEC7wk;qDJ!(?UZ+
zU_2Y&%`9s%-YuMl#Q2=N`vV!MjL+dj>UpjLYElkKy(h%opQ7&OePv)cmeXLEl#@xl
z)_gEb$|0#o|Dn>FyulPUqPyAn=_xt+aaS;*G9@P+2uPGLB`1#zL1JW2$razuV;3TM
z>@p=+avP6bB!^;`DY;ua@Lhjv@*UGyNe}a;%4s<{p}-_=PI_~YD0W&-ZdO5}*l9WB
z<onZfX-$r@hP~dy9N4zTg`jLujSE59pqgAnWTc=1h?*QSQk0}?P1&GX?6H^4ipp6o
z0%e0{xd@aEnw5))%^6gHFe?Wa&M&#Ornqf^z4~SI9Z%~8ZW~hqXhBY9K_LXC1v$hK
z{N__@B!IM~Ib|hg$D3aIsPA-k+ds^otHE<RiLyUSbJD*-0RT&Lu_7Mjg2d=rnv1W*
z=%Of>7~H=t%c&pbgnyGf=q=Al|0Y@RZ!2=--^l&9rbN=}9KWE?{&uff*a{ppELh_H
z5=fY`IwzN9kbqpBbC%`SltkK)69FX%44(~dQ&K8vgWHspO4^W<t22awv>}H@fC5T<
zC2(^tZ+A`vl$2xGoRgoRjglk!Ea!ZJ79^g67N4L6i8=CF4j%Dt#8y$78(Z1jf0_5D
zw?c;plwd+;YYzJ-++2YSsBJ9uZ}a~2ww#P7!6a@D@#N!N2G)Ja`v2SfUHZ$M3{0au
zj{7o~E0s8??vBy_0nCn^d?7i?PabyUa4LomLZB!#!7lcf|CnuZyK*uJ1`|c?${`4z
zhyU#G;gf*Jb9q1K>^1)}%e|4~RB?K>7hm#2tV|Vuth;t!eUPXdXi;&HKsiAb$B_Yq
z@$giR{o_^hmdvS~yzB)ogig_9Mfws#pw8sj_E*hEGH0A>fy>#b)`MIKRX>|!cl9!V
zojL2YPmI_7EVWMuE`++D&#@)F%#NA!Ir&0wjMx4=O;QSUV^sSKIhO8iw$EJ1$!Hi{
z6n7zqXc$W@gfQMN=GZH}&4)7=b235)7eW_vh|rPJfe_~Er5yXNw|RHwk}E{-^j;z%
zOlSyUHeSxL-}N!eGneHECN6|7lW)eE4@jh6ujbgheax2Gt8P2dYw%a8ofgq<0-rSO
zTbehVUG8Hp4E8O>eLCupLh6uy?4!Qsqv?L7vd&;awO=XfOrI_<q<$E{TJ<yUP7f#*
zvxu0G8Bhuv{=;QJ4Q3PjnbqmRrLsTqIYHu<qCeYn8T7)?|EH?+kCLjm^7zc7r{%ru
zM(F|6QKs>AzxS$92EoAmW@h*iz$6CuZ1$YZi8)L1&t{X&**!U%Y<5q=62MWS;RG=S
ztSm!R@F*xE(wY&_L=-_VxVS)8euD^uO86-Ooc-LYdUW=`{@!=*t*U!(-Ku_7uS&Oe
z`xEOQ4xQ<S7$-a&VmdZ3qZTL3*N=7k_YR*Qy6?InqGx^>7J`ptcGZ~6J`z@y^<O^V
zpBnT?$mGfl?~T%yC7~JKn*exfN$BzqkVY&C-S7^iE=xj&cX{F3C@owXvTgDXyNj3M
zyx0c8&Wm`AuBD+%<3Pjib`k;6wNzRuIk-{U+@q(@BM0|XG)PGFgl=gS9yIiX#U}Gt
z8i<CTkliHaq?bm4PnBPp=RaKC@KopqEvN`R6}mwSC|n`_-7KR=qgZaW{?SAJo9(MB
z<;whbb?9Ci!-I;|VV#|P15vR$Wb!SUvr%GuO=vfL0+3we+%3<LTobya2}E*Dm?q6e
zY2NzKB+aP+s<OUP2N}WESF9%^*!s{VO_<TNJ|t=WY#_dEB5Q_Kr^4#GFX?|?;SVVf
zpYMM-V9<^*{cqDGUfyZFd=~)SJ5w(M(Y-VEG7#N6#mllwr%8;yOCNv4pEhz=MMRvr
zD|GLF;6Y?p$m^F5BZ4z`>-!e^U7fqr1~r-eN4wJo0nxBKbkk%Y8g_?Flh=Dj1>dvm
z3%$eT{R{oE)ie2Nhr}l1&wZgA5`oC=3*D3-$dI@%9C|pkL!uDOkhnk09187_=xE3t
z2;GqANDPSw!*ob&lF&F7{@IWS1&2YhLn4qS980|mMCGw--ffb==(FCP0zg||#TYWh
z>8lt+;-oM2F3f1^6YsL8H`AQUeiByQU#PC@5a-tFQH%VsgE;G?V0&=0`1XwTt-fKg
zpKUmkT8l?0K9jl@h~hKi+8<)%W^uuVP)}Oy|ES?YMMivkA#~T+!-UL*kgqpn;j39X
z>ZMShSnPkT;Zo?{Q$j`NQs|Bt2O@JRWO_vUM+S5y)Zbg;cQst8lp{U!O6X2eg~@P{
z!=+m_i}m|mw*p}J{?zb5B>Pjt1Ci{%X82|?{M>@+R#N~dnp<#531}X=qy$9M+=A;?
zKs3!QVEFqmd`m9-V4><24F6SY_@6xHPrl*7!ob)XzC{fGke;#9e@uUWsh=JBP{Bnh
zPtf~N!6i;0dLJra_Yt(MMT|9HFJJ24F>-!IM9e<F;JOq%h|Dk0rS35zn4KG)m-^Ei
z7F0w;(Sm~WREx3tf&!j;M;7*4#OyugfBi3ir`O(-S^z2*=qWf00MXG?aI<Tm2o)H_
zPD(#)5jU(X-@n}dUUk>XiVk_-va+H>{IRm&mP(O9$I1eOlj+MX_#?Zz;H@o`4=nT>
zs%Jt#9E$DIK*U!UT$ctSzPjMLG>|U6x-fKY!FFjOm@fTnA@h8}c4<dL?zw{N(vC!z
zUQ<ZBbc-b17xlp>cvbph!F6MZ6#rtuC21gPUM!?Zx<zIjy*8RA0kB7J#SZc(p|@fO
z`IFF_Mib0v>Xm3ZCIfJ5F1x8v^`8F675>p1HWdaAw^7t8QM6g2=+`4Rr#69zs?BKt
z0a3MC0!X5vRs6n1-}#h3y=_Zc8HiM7OIjJAFcsX<@jx_eDKPVprOsCA#@qBOPx;?$
z-&WBe_Ssf&A4bE2hHZt&F1G^Fu&v;BE4B*SQLy740LdMxNr6c2NKFbfys1fBC8%~;
zlj>zp``PikDpiok+Er<UMAoj<q6ngBmss?rAy~96mz`5&>&KC&{c<p9PBER+w24W(
zi}uwh0F~WE7i~aPb{AdO1fsILh-J6Q=Z0<4=0oLwTkmflJnm4@#Rya(7jGV6rXE0q
z4i))+%<SrF!<yL>MepNcrf!}6Cs!`M?cc;V)|FyK@rj}fawO1jqUeGgNRXc>4*j@j
zgIowE$WInC9~EtoI~sC*MHl3bM3A2<N{}zBHBDgbTo8E+qfEJXyZ@L!17PQ5ZKm@t
zh+O9fQmF-zOMgI=FNm1`%PI<xN-c;A3nRPECj=^mryq&jI$xW(Qb#rl06f#tHKU31
zbmTe~PtmTUGz!`zO)rg1n*P;Zf?#Q-mXaTqR%$8vVQHn7k{^~v1VNv4tM*)Wc~tcq
zJ!!9ha?tW9-F@9IF|abSF#tg0O1`=={sW?MW#nQ2h{lx>F|b=Eh3(?1Rr>S)>+fw?
zRgsYpSQYv9Y8!ZvSru__z(ZDs4z)%PdEfuV$TfUq<jN6EYohDS&NcLk)7M1oT$3TL
zUC;~q_wSR9UPz4w5s?>CqXC8Kn$g<D-Y;9DO#&F?oC~CpFQ;Y$qUq(-Y(O-<EN1&P
z#|UM{=dv53s=ej=_WQS0584o=U+Rt*yS;Ah)(Al5>!}TZsC+%O8xWPRi`|}+!D2kE
z&2EjncgiykN}lJZwKort+Zwsx2O_sMa={NI&bCHF-yzQAJ%$iW@NbJUJ0ctWj)vUZ
zkqdrDBKWsQX@(y!dF|ck&n9h92uetH(gvg|@22(zqVnBq_8l*9kG1a<0QTLJh9wYV
z>`CnlMAM$szCa_2edRN#j$HQrsA^+eUH4@@V?UF&XO8$2qW2@RzTE!U!S1w!k#{u8
z$bBN$f$i=zq3PUF|D|b%qRbTYCe1#gS%;&{#6P1@+7Y3o>W)WVAL{-+)rKz&N!K3p
ze|-0c|4&%{g`S8q9Tj!rk&_Ykx~J+siM+F@<CV0l9VyPx^#2_5-<^3na(m}Y^~CCb
zj56P?=o34hiMZ4{)psuPK1HA0O=(2PQH~@#@GJ>?o{!v3l$L_t3z55A(o)cSG0KE;
zScf&^<;d$t@js-BIX20V^t9vt-;cc#WyV)(CI5)8M%-0@txV|@pGleK&v1tX|LoW%
z4FLY09lIa~Qoq@;OBz5#XU7D;*(lN>an-F~{Lo)8rn@2|f!`gwqyY~y-7!f+4i@bY
zv(1aWT-^v=_r70hw@Df@<wCbf1c;7#u}dOAbj*uMBK@*0u>+WWJocU}A2{KERx^X2
zsTv8_$77f4;X}>ivCH*9)I1)$To0rVJ{}jIjBTzLg3a|$#N_(9vSY17lFz#G_|yJ%
z1KQSA%8{(UE_TaIFj3CB_y*hGfRwW?X5Jw=uS1$v*0avC<X4VepM;1=Id%gD5Rr16
z4ip{Ifj6xD{aKd$HdIQL|Hm6Dt&>UIhDz&X61O3yGd?MoS9j*J`{Js(<<Fn@pU4i`
z7xP{7Y+0b_6n`Iyy&-ky^r#U*T>j{?|MluoP;BDjIckr@zS&MJ?5I5w%NZP!^gG2f
z$7B7&tNs(Cj#q@l>BnO?lZOeR<1sV&dA3Zv{&8HM_8FV@Mt@A<gmMkKMA^sjP<s<G
z5UG#FKU+*u16cz*8+&setqI;7d^R5Vc`i$r8o+fv&NS3b(9e6p;788|&11l+PVxEq
zc&Ktkh|kZ*w~sXYkvqkm7vszwbt8?e{y}w690S3Qa6Cr%Vm!pY@&+P&F=juKT+7xe
zj=U6S#;|8t3f8RPjT!^N9u3T6gfGQ6*&7*w2w#d>_?4{@o#N5UaYogRv%-Jn1tS|E
zm~H0r7~#uttzCHrB78Y!v!QHo?vx4n)mU@j%J?x?V=m&f=99Vi)wo^~gIH7M-dE$c
z@y<-V5$umMW1X4w=mFRXf(_D6vuVFSzIl`rmKXK?@t7}|P1v3Crf^n*@SV1{YX$_#
z7znAbyriF%Toaa;^s^F#<!pgYd9gk_$&9Y+vcl{~ZW;x_uEO#d;n~TJ_RbR^!n2cx
zJA+@!w`E;?kDsttXikPJu5*tjto_UN%3XwQRwv$K9S;mzXY$LQv;ZA#I=SAuABZ-c
zu*F8^b3ppIPU;pXb~Q=}W{qZ1!X{@qLdj7G&_xN$gtFztk!0CsQ8K<GD9cFSC9&F*
zcz4%5<qa<%92ktL{szz{9v<S}p2V$P0}Zn~;u%P#dJ?{f5Jv%VO;0jznj8sgpn2Rl
zHTan=iOQ@ff1jFg_J5@a3BMJI%WYkz@2p7NA5b7VRwVoZwMEGL;1x-Jj4Q&d!>mY#
zj}H1#OPOTQ-o$&g%pEL0t(nQsv>}o~dn=_#Z|bd-BE6|sO0m|J4BDIIU&XpIi$SfO
z#k`VaHYIiz<7mijNZc&Ok(kA7Ok@^w@N@FsnTufFNU9F#y@P@Sxi^xUTg;Z4p^~oN
zOuXCemYPp;LAD-fI%o|KG1Z$1FJ0tbyrJTvExNWgm|DLj@yt$YA;PmIVJCH$;Q_s+
ze_R_(tbZ%<Mu@rKkzwhrgg-a(p4{BwvQ__~HW*vKHSro8k9>o%H5oldHm$-#CfTM(
z4i3iEZ%aJW=Y<H*wq(?u0jGNavE|!(*5IJE{_RRxvIOw9lx6Ef;B41_7)*V(SIUwV
zfbCKiv5y|Q{|?<cBp9FHk+?H;A;PmG;k!T%78WKv{$6>}kYHzZ{=LLA{aUDSy_aw{
z_<wVR5}1y?zx=?B!PmUu`zv*lC4l`>r|ERT32Y%qs!k>P>dnDDwTBb_U&uSo3DO0R
zCf)~${$^d!K9ip|9q<6dA5CtyUyuXw_R)m5@De3JqU2~&{D3HtNr(_kA3T=!K}Vqu
z$I?FNNYV$7Ngq5fBf<o6a9`p@bstm@*R1-U9uKmS%QLLqmqsqo@VXs|K<d<&u!O@=
z*j^1c?wn4l9?(;74VLFlCpGmZ*lv_y`y*bk!8UwYkj(?lhnO`yq=J7GgUgD`jZ&90
ziJm+xXvm*QJoE9BP+>YFU0tH&Mv1GliC!=)7@I#^(PYVJ;{P{HRP9`%KNuE_$e&9+
z2Nl_K;<;`%AHhYy%_)znCug<KQJ#52Ayl~LDBe&=AOq1gM~$6oP8$|TE$66lQ)Eq@
z$CzlY{uhqMt)Hu0&_YDTTt(1+-|!HSEcArIKjrUNUZc}10eQb_X$=<Q2ow>K-TJGA
z;8*$XN?jx(yQMCFLljNSWq+=!eyuab;A_#(6(79F^mQWt0)DByM^z^HOs-a+=>7!=
zt^Cts@RRCs3sh!;2^9MbosTFkQkT%N6q>kD@i#z*#)%S?i<GxSkB)=3nf$V6Aws9+
zi`1=lKm{VTNU@bmViHJ9E>g)7Wn)qZCMFjvH!e5|r7u=)TyP|b$;FD8H2<6@5(n93
z%3H27b#LfXaq#Z9KsF|MhB22Z_bn`tIxSP7$tYApVse?Hm)knYf5K(zuI1E8Mkbz9
zryMotQJFjCdMPh6iG9AR>IFSq1^R{+iqpe>DMQ923EXGOZ>pfSdipcUP353c-ZRRb
z!wICkXB5+D86$vXjAvBN-is}e*{|WKZ3}i=waBk6j~EgBZS~Bx6}8fgwaUGNon)G^
zR`Cwjs+G}gt*ZTs@fc4<txyKrqZJ*6X026srDYo?%3iBFz7$*>Ko8|omkp}wT~%H8
zAqS;@=LcoN^`q+RHz>E)@+N8WM*Z2yprL-Faz~p(MDIq$LKPc%Yq)qNmw8p+-4J{u
z|Eh9{93nigirF8ekuU)_mp3;ApR3MqR<5^06|$m_J|_`>lXTLz^e3Z&=ksqVcXT#H
znBG$Cs*tNpV4{z1*PHGPexKj2JQI3CglW5k-s_f$PPkJ)J34qHzf*a3bLdT`6Yf;3
zi+AGY$+_%%s_GB=kugC>?mfl6B#HIO66?E_w^w3)+)N<R1-A1lAg$f4+<E;#YP?(V
zT3ezENObL1;a(T<LNF1(CyjVVp|X3@h<7B3_&pNw-@q~4Ub9bC9a96U>+Z2@1kc?S
zOv>$3HARy|xtWHsM0sOP5-kF$7T6{%AO-A~B*6)!HRjry1NxpX1kLpal-Fdk4Mcbj
zD3&>8_~XtQ`Ml#vrl$1=(~JaBsFIOnxt&X8csr@9#|9JX4=Hb)(<AOVq?%jAeDL6%
z!+OTpprih<atRwEJckttTQ)7+EE)2M-Z(aBtUsc>Hm652<Pp`;Y1aSEl`%(k?YLla
z;b?_NGUQR=`7RFpVlMlks``lNz3-ZhuG5c>3%;EDP_aTO?);*-^Q7`lS$6_)C)jR$
z2V%FADztxOfVA+Wy8RC0P9W|)sYaf1?i7M?XJ6`0N1;}IsXHA>+}S7YJS{^Z-$$HL
zRX?jKRo5M=)?IDE5Z$n~CaYh$EAaKs#^8+`&ZwHaaV_`LFq|oUZ)cF`9ZigmXO(BB
z@ijc6q_c`Uj`;8sNafEfeYPoR%b%|>iDS<T(=fvXx}fwu%|U(s0uf`Z&6PBU+|=xt
zX!k{>e=bZHm7CSonVxr1F{>*YO}O?`rMEN(QU24^|J*WzrccHHvOlIyeETP*|Dq-M
z@@;=g0{|*af06*Ob;1dk@v5HQ9Nbhe|H{&s<H8tNFH6h~H~JU^uPD8)CAckrB~33}
z2?Ns=NiUIMA{$;+`dmv8=dUWy+<Zb+WLkDru@TWS$;J$&n_FS}tYQeWF+*X9+l(gu
zR`o0W)7BuY?^m83@j3DUP5p}Rxoq|2dIG(%HOSZhN69naol%;(lAy$QXI2qkuFcYy
zTZ2M=R>_U<+{J>PS*4b?;M>ISlw5XhscN2XZwtPan_C)qtBKet60zMS??L@MU2`VC
z?D;g%ad&rVm_4%=h|ju9Br{1pKw`DKq#i8U!Bz++Rv#$2!PZfz!2=~X*gBHL>H{TW
z_5B)RmD^o(scI#my1iz&?mAIZSH8bJ==HAGB^RRHyuvuIr*|?eEGoI+gox@zCE`vd
zT(?MYF4m8A2DjHQF1fIS2+!gY)@HH`4`_)#)){o=mz3O~08ywVnRCm~af@V~p7P|b
z;NI%`o{}42pu*KtA_BS$6S28mubU7|%r8&PeTxar<t0LCmeoXTt|$+k7!0T`uBenJ
zvAIIZy9cLC&1Ii1RXs=RJ5A#U>w6~!U#NXr+#?h8sp6hhCGXjiOwb$kJClO!Ot5tl
zPigk5)JZ@pzbbVS5GSoFsb`&&gkYSsI(3qxP@~nUlN?E$wAwgHMsBW#DVM5V5ho28
zUjFOJd?1r6muiNY6mqNh=Os*Kr`Ufth5vIvJH_T9+Fz3PN{8hJ7hd1%Ia7kK<X<ki
ze>4!`dATIF9m#NdtGMJh`t+3G;ricHm<&~zW*8ot+N=L_YVhrRZ`vzvHE!xHahQbM
z-!(0l-BhZ2T@RZUd_A|R#K$<2qo;{UUn_aPlZYRuH%$w&-vQb$rFcjMUn{xOo`Dqe
rT8XW8681nW`dTUeowKMAj75K&TGUZ!z;9EFI+9rQx4Pl(p!NR%9fVAG

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 74d5c9e6..07d66a34 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -5240,21 +5240,14 @@ type TransactionRequest struct {
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns
-	// the original result rather than re-executing. The transaction's durable
-	// identity is the Exchange-assigned transaction_id in the response.
-	// Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
-	// (authenticated caller, key), never globally, so a key chosen by one caller
-	// cannot collide with another's cached result.
-	//
-	// Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.
-	// The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do
-	// otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign
-	// it — so a retry of the same purchase through the Broker reaches every
-	// Exchange as a replay and is answered from that Exchange's stored result. The
-	// verified signer of a re-packaged sub-request is the Broker, which speaks for
-	// many agents, so an Exchange scopes a relayed request's key per (Broker,
-	// requester the agent acceptances authenticate, key): two agents behind one
-	// Broker that pick the same key cannot collide.
+	// the original result rather than re-executing, and the same key with
+	// different items is refused with already_exists. The key is scoped per
+	// caller: per authenticated agent, and per (Broker, requester) on a purchase
+	// relayed through BrokerService.ExecuteTransaction, where the Broker forwards
+	// the agent's key unchanged. A key another agent or tenant used is never a
+	// collision. The full rule is "Idempotency" in the file header. The
+	// transaction's durable identity is the Exchange-assigned transaction_id in
+	// the response.
 	IdempotencyKey string `protobuf:"bytes,2,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
 	// Requester identity — forwarded for authorization and audit.
 	Requester *Requester `protobuf:"bytes,4,opt,name=requester,proto3" json:"requester,omitempty"`
@@ -6708,11 +6701,10 @@ type UsageReport struct {
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
-	// report does not double-count usage. The report's durable identity is the
-	// Exchange-assigned report_id in UsageReportResponse.
-	// Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
-	// (authenticated caller, key), never globally, so a key chosen by one caller
-	// cannot collide with another's cached result.
+	// report does not double-count usage; the same key with a different report is
+	// refused with already_exists. Scoped per caller; see "Idempotency" in the
+	// file header. The report's durable identity is the Exchange-assigned
+	// report_id in UsageReportResponse.
 	IdempotencyKey string `protobuf:"bytes,2,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
 	// Transaction ID from the delivery.
 	TransactionId string `protobuf:"bytes,3,opt,name=transaction_id,json=transactionId,proto3" json:"transaction_id,omitempty"`
@@ -8809,11 +8801,10 @@ type DisputeRequest struct {
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
-	// filing does not open a duplicate case. The dispute's durable identity is the
-	// Exchange-assigned dispute_id in DisputeResponse.
-	// Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
-	// (authenticated caller, key), never globally, so a key chosen by one caller
-	// cannot collide with another's cached result.
+	// filing does not open a duplicate case; the same key with a different filing
+	// is refused with already_exists. Scoped per caller; see "Idempotency" in the
+	// file header. The dispute's durable identity is the Exchange-assigned
+	// dispute_id in DisputeResponse.
 	IdempotencyKey string `protobuf:"bytes,2,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
 	// Transaction being disputed.
 	TransactionId string `protobuf:"bytes,3,opt,name=transaction_id,json=transactionId,proto3" json:"transaction_id,omitempty"`
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 128b6786..832f4161 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -695,7 +695,7 @@ type BrokerServiceClient interface {
 	//
 	// A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
 	// so each Exchange answers a repeated sub-request from its stored result (see
-	// TransactionRequest.idempotency_key).
+	// "Idempotency" in the file header).
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
@@ -862,7 +862,7 @@ type BrokerServiceHandler interface {
 	//
 	// A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
 	// so each Exchange answers a repeated sub-request from its stored result (see
-	// TransactionRequest.idempotency_key).
+	// "Idempotency" in the file header).
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
diff --git a/gen/jsonschema/fora.v1.DisputeRequest.schema.json b/gen/jsonschema/fora.v1.DisputeRequest.schema.json
index 9bb8aa69..5a7c77bc 100644
--- a/gen/jsonschema/fora.v1.DisputeRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DisputeRequest.schema.json
@@ -30,7 +30,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case. The dispute's durable identity is the\n Exchange-assigned dispute_id in DisputeResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json b/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
index 1a25871d..39dc4dd3 100644
--- a/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
@@ -31,7 +31,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case. The dispute's durable identity is the\n Exchange-assigned dispute_id in DisputeResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index e19daf4e..f46cbaf0 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -1052,10 +1052,9 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response.",
       "maxLength": 255,
       "minLength": 1,
-      "title": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
       "type": "string"
     },
     "items": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index f636d6d2..8e433d7d 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -1072,10 +1072,9 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response.",
       "maxLength": 255,
       "minLength": 1,
-      "title": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
       "type": "string"
     },
     "items": {
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
index a9bb0336..f2fc39fc 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -139,7 +139,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
index 64473041..134b7b5e 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -143,7 +143,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index c2331280..a6fd4965 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -262,7 +262,7 @@ class DisputeRequest(WireModel):
     )
     idempotency_key: constr(min_length=1, max_length=255) = Field(
         ...,
-        description="Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case. The dispute's durable identity is the\n Exchange-assigned dispute_id in DisputeResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+        description='Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see "Idempotency" in the\n file header. The dispute\'s durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.',
     )
     reason: DisputeReason = Field(..., description='Reason for the dispute.')
     received_content_hash: str | None = Field(
@@ -1607,7 +1607,7 @@ class UsageReport(WireModel):
     )
     idempotency_key: constr(min_length=1, max_length=255) = Field(
         ...,
-        description="Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.",
+        description='Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see "Idempotency" in the\n file header. The report\'s durable identity is the Exchange-assigned\n report_id in UsageReportResponse.',
     )
     timestamp: AwareDatetime | None = Field(
         None, description='When the resource was used (ISO 8601).'
@@ -2075,7 +2075,7 @@ class TransactionRequest(WireModel):
     )
     idempotency_key: constr(min_length=1, max_length=255) = Field(
         ...,
-        description="Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide.",
+        description='Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent\'s key unchanged. A key another agent or tenant used is never a\n collision. The full rule is "Idempotency" in the file header. The\n transaction\'s durable identity is the Exchange-assigned transaction_id in\n the response.',
     )
     items: list[TransactionItem] | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 4cb3164c..e947f276 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -58,7 +58,7 @@ export const DisputeFailureReasonSchema = wire(z.enum(["DISPUTE_FAILURE_REASON_T
 
 export const DisputeReasonSchema = wire(z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]));
 
-export const DisputeRequestSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).").default(""), "description": z.string().describe("Human-readable description of the issue.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case. The dispute's durable identity is the\n Exchange-assigned dispute_id in DisputeResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result."), "reason": z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]).describe("Reason for the dispute."), "received_content_hash": z.string().describe("Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.").optional(), "received_hash_method": z.string().describe("Hash algorithm the agent used").optional(), "report_id": z.string().describe("Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.").default(""), "transaction_id": z.string().describe("Transaction being disputed.").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeRequest — Agent signals a problem with delivered resource."));
+export const DisputeRequestSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).").default(""), "description": z.string().describe("Human-readable description of the issue.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse."), "reason": z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]).describe("Reason for the dispute."), "received_content_hash": z.string().describe("Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.").optional(), "received_hash_method": z.string().describe("Hash algorithm the agent used").optional(), "report_id": z.string().describe("Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.").default(""), "transaction_id": z.string().describe("Transaction being disputed.").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeRequest — Agent signals a problem with delivered resource."));
 
 export const DisputeResponseSchema = wire(z.object({ "dispute_id": z.string().describe("Exchange-assigned dispute case identifier.").optional(), "estimated_resolution": z.string().describe("Expected resolution timeline.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "resolution": z.enum(["RESOLUTION_TYPE_CREDIT","RESOLUTION_TYPE_REDELIVERY","RESOLUTION_TYPE_REJECTED","RESOLUTION_TYPE_INVESTIGATION"]).describe("Resolution outcome, populated when the dispute reaches a terminal\n state (RESOLVED, SETTLED, or FINAL). Absent while dispute is in\n progress (FILED, UNDER_REVIEW, ESCALATED, etc.).").optional(), "status": z.union([z.string().regex(new RegExp("^DISPUTE_STATUS_UNSPECIFIED$")), z.enum(["DISPUTE_STATUS_FILED","DISPUTE_STATUS_AUTO_RESOLVED","DISPUTE_STATUS_EVIDENCE_NEEDED","DISPUTE_STATUS_UNDER_REVIEW","DISPUTE_STATUS_ESCALATED","DISPUTE_STATUS_RESOLVED","DISPUTE_STATUS_APPEALED","DISPUTE_STATUS_SETTLED","DISPUTE_STATUS_FINAL"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Current lifecycle status of the dispute. Tracks progression through\n the three-tier resolution process:\n   Tier 1 (automated, <1s): FILED → AUTO_RESOLVED or EVIDENCE_NEEDED\n   Tier 2 (rule-based, <24h): UNDER_REVIEW → RESOLVED\n   Tier 3 (pattern investigation, async): ESCALATED → SETTLED → FINAL\n Losing party may appeal: RESOLVED → APPEALED → back to UNDER_REVIEW.").default(0), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeResponse — Exchange acknowledges the dispute."));
 
@@ -200,7 +200,7 @@ export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().re
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing. The transaction's durable\n identity is the Exchange-assigned transaction_id in the response.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result.\n\nThrough a Broker (BrokerService.ExecuteTransaction) the key is the agent's.\n The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do\n otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign\n it — so a retry of the same purchase through the Broker reaches every\n Exchange as a replay and is answered from that Exchange's stored result. The\n verified signer of a re-packaged sub-request is the Broker, which speaks for\n many agents, so an Exchange scopes a relayed request's key per (Broker,\n requester the agent acceptances authenticate, key): two agents behind one\n Broker that pick the same key cannot collide."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
 export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
@@ -212,7 +212,7 @@ export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "di
 
 export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report."));
 
-export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage. The report's durable identity is the\n Exchange-assigned report_id in UsageReportResponse.\n Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per\n (authenticated caller, key), never globally, so a key chosen by one caller\n cannot collide with another's cached result."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
+export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
 
 export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 23877e78..5f87fcd5 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -230,6 +230,42 @@ import "fora/v1/vocab.proto";
 // at each Exchange, on the request the Broker sent it.
 // ============================================================================
 
+// ============================================================================
+// Idempotency
+//
+// The requests that change state — TransactionRequest, UsageReport and
+// DisputeRequest — each carry a REQUIRED idempotency_key. The rules for the key
+// are stated here once, and each of those fields points here.
+//
+// Scope. A key is scoped to the caller that authenticated the request, never
+// global. On a request the agent signed itself, the scope is that authenticated
+// agent, the verified RFC 9421 signer. On a purchase relayed through
+// BrokerService.ExecuteTransaction, the verified signer is the Broker, which
+// speaks for many agents, so the scope is the pair (Broker, requester the agent
+// acceptances authenticate). A key that another agent used, that the same agent
+// used through another Broker, or that was used at another tenant of the same
+// Exchange is a different key in a different scope: it is never a collision,
+// and it is never answered from another scope's stored result.
+//
+// Replay. Within one scope, a request that repeats a key with the SAME request
+// is a replay: the recipient answers it with the result it stored for the key
+// and executes nothing again. The same request is, for ExecuteTransaction, the
+// same items in the same order (each item's offer.signature), and for
+// ReportUsage and DisputeTransaction the same report or filing, field for
+// field.
+//
+// Reuse with a different request. Within one scope, a request that repeats a
+// key with a DIFFERENT request — for a purchase, different items, or the same
+// items in another order — is refused with the Connect code already_exists,
+// carrying an ErrorDetail with no typed reason block. Nothing is executed, and
+// the result stored under the key is unchanged. A new request takes a new key.
+//
+// Through a Broker the key is the agent's. The Broker forwards it unchanged on
+// every sub-request, and cannot do otherwise because each AgentAcceptance and
+// the AgentRequestAcceptance sign it, so a retry of the same purchase through
+// the Broker reaches every Exchange as a replay of its sub-request.
+// ============================================================================
+
 // ============================================================================
 // Edge discovery headers
 //
@@ -2440,21 +2476,14 @@ message TransactionRequest {
   string ver = 1;
 
   // Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns
-  // the original result rather than re-executing. The transaction's durable
-  // identity is the Exchange-assigned transaction_id in the response.
-  // Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
-  // (authenticated caller, key), never globally, so a key chosen by one caller
-  // cannot collide with another's cached result.
-  //
-  // Through a Broker (BrokerService.ExecuteTransaction) the key is the agent's.
-  // The Broker forwards it UNCHANGED on every sub-request it sends — it cannot do
-  // otherwise, because each AgentAcceptance and the AgentRequestAcceptance sign
-  // it — so a retry of the same purchase through the Broker reaches every
-  // Exchange as a replay and is answered from that Exchange's stored result. The
-  // verified signer of a re-packaged sub-request is the Broker, which speaks for
-  // many agents, so an Exchange scopes a relayed request's key per (Broker,
-  // requester the agent acceptances authenticate, key): two agents behind one
-  // Broker that pick the same key cannot collide.
+  // the original result rather than re-executing, and the same key with
+  // different items is refused with already_exists. The key is scoped per
+  // caller: per authenticated agent, and per (Broker, requester) on a purchase
+  // relayed through BrokerService.ExecuteTransaction, where the Broker forwards
+  // the agent's key unchanged. A key another agent or tenant used is never a
+  // collision. The full rule is "Idempotency" in the file header. The
+  // transaction's durable identity is the Exchange-assigned transaction_id in
+  // the response.
   string idempotency_key = 2 [
     (buf.validate.field).string = {min_len: 1, max_len: 255}
   ];
@@ -2906,7 +2935,7 @@ service BrokerService {
   //
   // A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
   // so each Exchange answers a repeated sub-request from its stored result (see
-  // TransactionRequest.idempotency_key).
+  // "Idempotency" in the file header).
   rpc ExecuteTransaction(TransactionRequest) returns (BrokerTransactionResponse);
 }
 
@@ -3225,11 +3254,10 @@ message UsageReport {
   string ver = 1;
 
   // Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
-  // report does not double-count usage. The report's durable identity is the
-  // Exchange-assigned report_id in UsageReportResponse.
-  // Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
-  // (authenticated caller, key), never globally, so a key chosen by one caller
-  // cannot collide with another's cached result.
+  // report does not double-count usage; the same key with a different report is
+  // refused with already_exists. Scoped per caller; see "Idempotency" in the
+  // file header. The report's durable identity is the Exchange-assigned
+  // report_id in UsageReportResponse.
   string idempotency_key = 2 [
     (buf.validate.field).string = {min_len: 1, max_len: 255}
   ];
@@ -4240,11 +4268,10 @@ message DisputeRequest {
   string ver = 1;
 
   // Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
-  // filing does not open a duplicate case. The dispute's durable identity is the
-  // Exchange-assigned dispute_id in DisputeResponse.
-  // Uniqueness is scoped to the verified RFC 9421 signer: the server dedupes per
-  // (authenticated caller, key), never globally, so a key chosen by one caller
-  // cannot collide with another's cached result.
+  // filing does not open a duplicate case; the same key with a different filing
+  // is refused with already_exists. Scoped per caller; see "Idempotency" in the
+  // file header. The dispute's durable identity is the Exchange-assigned
+  // dispute_id in DisputeResponse.
   string idempotency_key = 2 [
     (buf.validate.field).string = {min_len: 1, max_len: 255}
   ];

From 04c4605bd063fbf8d25209aa3c86aa811180a926 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:48:18 -0400
Subject: [PATCH 071/164] Leave total_cost unset across currencies in the
 protocol

TransactionResponse.total_cost was "aggregate cost across all items",
which says nothing about a purchase whose items are priced in
different currencies, so an implementation could sum unlike amounts or
convert them at a rate of its choosing.

total_cost is now the exact decimal sum of the purchased items' costs
in their one shared currency, with unit_cost unset, and it is unset
when those items span more than one currency. Amounts are never summed
across currencies, and currency conversion is out of scope for this
version. BrokerTransactionResponse.totals, already one entry per
currency, says the same about conversion.

Comments only; the generated code, the descriptor, the SDK types and
the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 674409 -> 674841 bytes
 gen/go/fora/v1/fora.pb.go                     |  11 ++++++++---
 ...a.v1.BrokerTransactionResponse.schema.json |   2 +-
 ...okerTransactionResponse.schema.strict.json |   2 +-
 .../fora.v1.TransactionResponse.schema.json   |   2 +-
 ....v1.TransactionResponse.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   5 +++--
 gen/ts/wire/schemas.ts                        |   4 ++--
 proto/fora/v1/fora.proto                      |  11 ++++++++---
 9 files changed, 25 insertions(+), 14 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 27c5a6634689d78a1047fd0a74d5df43bce3ca65..465840e866c6318e64d5c778d21c397e85e7915b 100644
GIT binary patch
delta 28081
zcmaKVd6*PM(sy@FPg7MRGE>t%eGS#u^aV_F57!Jg3ZA&S`|c$!DyzJ!=mPHX?Yld2
zi7+@I;3Ob8q8tixgAJ?*EC|XCA}k^(ATEP~pr9ile80%dqI{q4dA>h<oQTT!Wn@HT
zWMo!W(=a_Vb4KRbvCgr|*u1f>)%i8|D>WB$FWjF$a<+afSEM&F@&k^~#}{14$A9iz
z!G$K9i<~dzc01Lb`PFac=`L45$unHfd6Y<SR$ipnV~-6V^4Q>!Ln4nnHDYAssozIN
zK0YM!^fSXBd3^AQA&*9ejvVsjh)8<m<4=tk68ZB`{QsGekw=FN8#?%jhlURsJmRTg
znXV)<bhyqDvV)&|>X~69BO{)9@=1sf9uXPxm%)#a$Rk6atRDQth*puI!-PQOsbNDR
zBOV_-9PJ)?X87<S!yfr-R*yV0Z0N{`xH3aWfEY1kWH$2id+zV|K;+Ml58<N!k9s4X
z9y~1a<Ws|k02qG(7s^P)t`VWph{)jK>`#ws-fHX7&>>J}@G!e`8o{tX4H-US=u^WY
z=$wWMgN%6Osi%iTe*e^Ppo1$LWFx&Ij|_g|i6O)uJTfwD$dE@z(7+-ipBjmA>h$+8
zvI9&o_>srCB~v3HLw0@|VwQ$@GGfRRzt8G=Q$3%&<KphQNxF$FXl6Zi5?L6uNbbw#
zVSSI2yB4xFtVmV&Rn>SD3&I768c#t)%D4bg<B7JnNI=whDmv?7j*xG-YCY_acWc3p
z0VN-jwI0PUo908Z))OeTNJ!Rt!cqOY=p2owd)VBe?jLRsC~l}S-PXYk-07ZzA}Q(y
z(sYkuS|pIBd!ljuH@e~q8txe$$6=2%csCoEP)pbrUG3RyhDU9#w}Fa5#bLN+F{40j
zS3b+5s2l=JAkOk=q63gXoaOO&^)6fl59hEy7O35_b8HbOaXp$(A~+#3#}f?cZ_sdp
ziek9tvX2YYMdfpC83i(PJzBApp}92IQ{vM*auHDT*os@!PF3@)p$C;b41Jz8bdW%p
z=P`sgK$46nUZ#Jla0r-faW2tR9qcS$>`~mZAM)8^Pm=<RgwSHot<Cf*E`tu1vQ@XL
zJ*t-4-R2Y5?v{MF)MG>?LOu|dddd>|1u<CoZWU|YO#P;6l?~x0t`&Phg`Bp^Q<#zv
zZa}Q^v}mPY6c9}e*IG8HQ2n-Qtqsux5NkaJmW`VLVy(xYkPuA(vDTB$=&uS0)o{JT
zYKzp@D&MgoR6xArDG(taR8&B`;|aBu5Go+v@pPz=v7s5RjqC|SZCAC?M$mw;(Nj<+
zMKmC6^dwqaBoH=w+O^kfC_M%h-EeKo9W~S!oR!;b3?1g&W}8z7#x{>(LF&NR=1FDr
z&K#n^aDBk$dDO1uA9$2P*-rsPKJXM-jxT`72jqAWI=2|EU97;1(Ai~odJ7ca<tY%;
zB&gg1gk7Gnn7JT<u#0By9vAPmso^@5tM;k`mF|aZjHbXiWSg%kFb;V_F{xBjU>x!!
zQhIG3re4T!ANM#e=bHL4`r_jr)u-<x&xA1N+$TNCf7p_My0;pCiD?Hu;7(f84kX}C
z(zI)aTn17lv6BCI@^nL2Ib*zbtKmN7aed***Nb$`;z90nkJ~`An=H4Hf7;{T=+vjt
z@Io~6E_jr?f@5=6gKD8t4Z_lbX7UA()|3wlErE8yQz&u)NQBh|k8!77$aQe4qysp`
zcSsF52h;t6r(NYwSsbSO0R1&#1GKp0QDVVq&d39g4`CCVtFx-W5NS4~C@}OTPeF-P
zg7m%Q@in(dfL-!LqIz4{xzunsdK^Ep!KT`#S))h2MSl=OEQOWxudr85^`VEaSc3x-
zKvz7PSOGu+=!(Y>83-f>cg5qW=6Vx}!9kHL9`6G`WpSZj{6qKiet>wD4Gycpj#uq|
z$cR@hSC(=kUbQl4DY9YyHIFjM8EX;g$Nsn%X?a^%ZC(wY7(ZHIhFr5|2uQ$P^B5sM
zevr`Mn#T<5w<0n?s)QG*aY`i>srNNc^mjZ6s0oIWN6j9d=+yTjKJ%Lz?(ts7Hm@_d
zDKF9&Wk~Mfh`QBTINqCIq%(LazbUN_&$Eh{Iy3ydSK+-A6TW-ii{8HxjiB2Ec0Q(F
zGADQyJ|oe{iAEE=n2{|x5U7cDWoo%O(W~%zjwZAyO!TJGdXzW8m}=OaWokTJ<5l>w
zh&Fj>Q{xRs^ijy@ppnrh<z6UL^PJ&HUL{WUATC->@+MRI=RzYG?*+Cjp?+b$;8ilR
zQ9c^I;B8f|_vT3OYb{%qRQsB>UWI3J0J+ho){9IY<86?ICo^wKEelWfDm?hmrU}|i
z_9FO}BE^A5%+%$6nNpWK%{m)NMXNeO>cbl$l`@vhsQpalRd@=5q=q)k8;$9I<!z8F
zXRrww^>2w8UWMlrw9(OKh8H<yHzqD<WW(3IN@eg}7yDGzy}9l!)DB8_uq=TB2)srD
z!Zef_U-PEBAynKXPAleX-b`2hRe^_8xj47Hl^Rpb#kN6j0mx!+GOc&#ogx{&#V%yk
zp5|L#g|9b&YKk^*dDAUq8)Shc?4H(Wv&6=^6>XLf&Rra*8Lh2vwN~#jmwFXT!)9o+
z)QhDL>n~sn4c9W}Z=?1wm)SUlXtRuPe#YAr8Ls8*nKtSJ;pH|?5!x&#oF)0Zkzu&j
z=gzcImnq@(UL`5*VW8D|Z>FXGxfp-3;d(Fkc6;^rO5{D;h{b629vSgDCuRzg><+Kv
zLsnU#j%&8VoA1$ojvj8M*|C%Dt5E;T+-W%#Oo;9zr<U_JF!wIjuanyPSG&AQm@9EB
zpB%fqvA7=MZ6L85(<|0A^0WKziVPp|M0Vs~M)FL6PH5`mDbIvN^2ULnUdBb?-92n~
zCpBsA@hW^(M;n?nd%Vp}y*+P(IkT4)byho?d#xzGl~0+y6vbKI1~X<Kd$hCK#@uJ)
z(2UtfIHE7inEh;JXY{q-s|4gwXvXaKmNwU0a~#Z=1MIubYTL*G+axq&4v<McD$=R&
zaW{G$H*&XkQ4gxk8og?X-d}gQon+1{tVM72j`AyBH&4mLgzOcsCr#ZEi2+~nw(qZ}
zxd?1?jm_<?wkW^mb$ewSN<G)SC9NzHBG<f~?$K}OB6xV6HTG5qw7Kqedt@83>UFQT
zg+)T-y0_z<`YOynjL<!<#PO^z_s2eJTW8_864k4pDgu~7Dlf{d?5mzuvx`dHe90s(
z&=!^4%BMMzKwDITDK{Cp5Hys&k$dlM^+oR;H%i=mKR{dv-6#pP<SKxK(2bIcd-Yqe
z#5FhEqkWFWKBr!w=ee2#V6;yy6@^}NQevEs?O&(9+#UoxInE~+bC75|&Zpf%s4kE|
z9p`ISNGTU29*$?j9#!LQ$J-*bbdC3Eh7=)1#{0Y_`b<n1$iNzteah6_zaCZnN;Uoz
zOBNm=J|_DL#Qp{(U?%$lqCx`+n8`k@2UN^}L@_hjmze6y<7*Z%#%l&drubZ~f69VY
zUi7)z>R7d?cc9ey6kqUvA_K5<9?5?7m^!K*IHGvLb3oMD%F~9Rj+9@3<pbg_!#&%l
z%=P7()vBhm8Vr~V97~+G2D5!~<AbLVpY4+s7)U5R+gCCdN>c?!3|@iF@ws00i3&{e
zAoq$-R$!8a3as8o6&P&|o74I}&*>9;Lr}2YJfGYff`l6Ld~$CH5^(c;*50r=8G4bA
z?+yEc!1P{Zdx7?bi+pl#h^IhW<db_tkU(1G!`^U~hOjaX_q#sFOSy_as54!~@A?qe
z$H-15Ldw0>r+kn*`IP!wXEpv52Eqg2ZS~3e2_*2g`cOZSS3$x+TYa7nq=AUR4fLMR
z^}aNa<UwwmWgy9dfwpr4T@gAUPwe$6ANgFl4S!Vs?5qZ1X+a^n*C$I<lh2jCK9s0J
z3zVpkG(Nhig(y<p`+Tm0H?^?J)crnpA&)n}h#JXtz=!NZ<+NnM+#mYfx3r+506awG
zVYYFES~lpgWp*%O_QRIhK|;a9K0|EoL1MUveW+q+7J@{{aM%~UOLih_Gq7TJ>dko{
zXn%zD8mWc{9kKhMz3&mb4+`}oK11vVO}_U%;=_(x^pS@?j`&J%mwn{Pu^sU>zfBMF
zJ`guY*}Egv(m_Y<K4?B1^%aP1mZ{KuIO;31KxsZ4^`Y_;ePBL-jP#X#&}<+bkNTp0
z^iI4FP{&y3XVfka9kctO&Ga$54+{2Uz9L@B!8jD`$9$;eL?8L+<CrgP*(zW5am<&w
zQ{PEB!KCSMg6(@o-96}p-3iTu6SlEv9-Oe|0YuQr2_IG@(TN+Kobbi(kppo{W1aAo
z-L0Fv53Fma*wsI&kwK^IKAND9Q+6M;A3x<Y#3sd5Xg_|+hZR=z(FA>*^2MxyG?9Ir
z^2P7eTk$^7;57T|pVe&DX}b^Fu%GtH4ZF!V?5BMp3zRnOr+uh0R|-?0%xqwv|5;r<
zsKJKNpk{-uChgc8e1>Ij4G;}JlvYAb4O%q#GGf1DDw<TY!Pnw`y&G2(W$IV#yT7Pa
zRbSbC=uq=3pF9;X7245%<x6ytptPg^%2(N4--yx-9zzk^n0xxK>SpD4jW$LBFdBVw
zgN{bPX!M2of=DvJX!K><NXP={+30KgkaSrA^rX_R(bsN}zFqW!(sryr_u~Jk?<)_D
z^~-h2ROlRFtY2;|L86<nexEf}=^S9JAGubT;}&!?)*l-vySYVnGu9u!S3fB76pG`T
z+}djO7tZP$yB9hssPPwA!9XVkHGWeZw3rH=6x8@}&?0(iie75`ogU_!YCJ_RD1&SK
zod;u~(J^?=abcma@eg{4uOOy^g1gp_9duEo-(N-!8HSTq_K&-@rXBDEedCc>i9w?8
zTEARPK%(zj8X-SvG!+!((^=6(^~yu|8%bfhJ&0zAoauhKnBXaZru*e$0un&e{a8$>
zL<t*i=69^~ixMS_mduYsMt&9*rV?eApO+{dKmc`?UnX;qXgkX<OB9emo#jV~vV_bV
zrc7F&`)-Wd+L^8QD^0k?z$La{6?qCIgzEjp9{o5SJB2AnFUZ|LPW{Z8U0@3l)&g6I
zvho5FdYvkpFp<l0gU720rD~aF18|}3GRp=afw9bQhyyf`B;-elOsjgBwx=uod{M_Z
z>8N<6<pz+DTxq!hBqUefbVHaHkhKfp2IsHV+MQFXTx)kusdBC50Ehr$t>u7-;r^%J
zaY#BKf|mdEtEO;3gdFg$bN~pTzH2!EB-*}fIRGS3-z5i7jTj-DZSu3H9#u;_fq>*D
zTavu6$uCPqJcZ;YKdP<Wl#L=(DsJ^FJJ_U2>aJ@1B`QVmfwI*a6-c0L^~;3}Bv7{c
zv5?Vf4w7mLf9Vdts1%7ID#iEwvQm^R_<Wlmm1418z{SwYMf=a~epgq$xYJL$=;3|8
ztLlF@g||NNyB-jwVgy>a_xY8Na<|s131>C_6vYP~K;3<QStEi3*gn6k5kW%Teg2Y<
zpf1&j#NZ{+e!uIWU(|?_2e|`&StCjoN}vz@R3p-iiW=^J`yI!*Lw$L!D7yW(UkwY7
zM#-Z`g-6?ifJKj5DuP7Yqn1ZOqN}6i(G1)YC37ERY>L|Qj$_u`0F$_WRUC|ggvc>J
z3OmvyX1G7|J1)x5ilOCaH|KVY6geeB3j`E7Whnv@ZBJQ>fCTC(E3{&y$Y~i`ARu|#
zmLz>nTcL%gkUUMH#S8fuh1QpT<w7nymAr#Lg?I1(a$j2B0SUP;E$@JYcfRzOT#()&
z2KUZae%II1JCX;vbC!1`3*I?@(>rm){jJ~egXNt#y8ZU%e2bG&zLVYofuVh8sR$Bn
zzq5=25?y^qM!^o+6({{0S#G-8wsoUlzOn$5xc(-$^6Uo^B8~ncL;o@#?kO|e&j%c@
z=6o-yXO(8p2h<RMQBy`rOk{;K@S<iS-XU>WFab3&&_p;IB%me+;OLo@Zp*0qDY?JS
zP(#kjDFHcS!Nug55-1Qg14wEWDC65@k^#n)KzUZbmqTFAO=J6Js`ph+vk_>{PYcMU
zq>Q_1T0o{zkU*FgKpO4A5kS?k2WP3hs_JY6O2l<G0!_oZfP4p2#;0Lj0F@9W;xbCa
zGXr9G1p?a749N8mBqV1B<a!7az0C|*>tPuwS|1R*D-Zyxw{@U=TyN_@`M5qH7eq7$
zQhfjm;y&74B@A~i;AqG_He226D#``aVlj0S<d^jUz8ZD|0m$_M8NVO_xjrCQLy&-6
zA3$(?Ozug*J?_l`WlO*n{DAFyTDvPZ^fgs;R)Z%d09pWGb3hY|KS%&<4und1HU)_Z
zusP6tOCXQe8pNOp;QCj<B~I%l2R{5)AYRVP9?1gGzXGkh;mn;Bp==vaN`vvp1H%Wi
zi?6FK+JUx|pfK7NkZ%Lg7_!>}Na+u8Sx_Iq9l`t9X9a4AJw8wERSt$FOrHH9AYTh6
zxMx2I;I$x5v(PadvWp#>r*<sg6_Dism=M_&P{lh7kmzAo02{&zE&>bhWu51%o!jmW
zh*NCfkni>eO2ykVkPz7$z}vI8sDemfQ{g@wP(I1cov$u-R^v}gJK9Mc4#@P6c91(9
zkm(;J?0Yy+@(Juq>7N)p!TdYmIvNn^U-BS#Bp}njWFf(P9H8{yfvbQ$$EN`$8casm
z&V_25DiC4?O(^sx@Y6s6Kk-5*wDb5hP$Ftrkih;lfbAyDg#_(3Ps+If0+J`Kxd0N9
zC#|^v5|Srx&V_`6CG?D#3+&l9Rd>}HTLs!xoUx_?S_0^dH5EVt=nPGTyK#Qn%y54d
za9m(p-c;{u_EjLim>;h<qj_+SnTymi^ISk4aDs`*Iv2nJC(4ifW)w*0+3yyqar1mY
z9&mz*Hs>i_(7|Lgip8(l+(l|K{IwhzF^Nlo|7*;}B(inDagBYkNc~l_Zv$$8UIMt1
zq`_r&&tkQ2<z;JRU}9vKt&xF*3YP<h*z|(L$SwzPc1!6xN%}RiJ&V=0m5nw6rOU=Z
z0Y4+9Hq<B(6x)B0Kxho$D6B6>fSy-bx3|>Ws;=4yl!dMa<V}SnPnTB%g_aI9pRSS)
zcVKKO!+j&*n9tsQOC3;jgC@Z)D!)=RxG_QIU!v}=9D_HpJpY3W<S{{+h(SWPF+rJ#
zK>~S95SD$0L*U_f7G0|TxoW(PKr8il8-YeQJ}Aq#6d&FAAm;jF+J&Xa4byTTEmfB&
z<<o+4!h#E-X+ijbHb5ZJ?X)0Hk$Z6&P<3qC3bjvVo!u?Z|3PVzlsM@N7K)7;NRkO6
z|KH6KDF3tUO7-4eGi?Mq+?Z)2@O8jO;OhV(+`$phc6LxH4_4MKR{iYIO0{)Q(3TbH
zz;1T1K+L!lPbRa2&C_x?luTv^Tei}V2u~oH%nd5@Sie>3zpL?=g+hlEb8SmfYMC39
zk(T1AWo{5&ra~AbQp?<6*}R}Ago%OFf}UOrx?1r>Em=_Q^`PrF`ke@lwBddu=vWqX
z2CE`JA2Il`A-&k_)oPDsZv<6C4`85a3X?_b>}oYsy$BZq_z1v+DvN@083KuJ76q{k
z;e`c6@bIl5l7G`kuMxOZ6d5^m<P$^0pzsj3$J3i6#`u;sMm*)RGFm_a_$`W-nC@x<
zWJJqSR<lMe>%P>6pvkb*hM?}32Ib)zL;$fgh-`PT2?m@o+#7<9k8<bMs2}DPZU~|n
z;(O2xjdKgzw@!U6yTuwOn84a%jT0oWw$M1I(<+dmo_6M5U9Z+Tvpa1e8pF<@-1eXm
zgmwl|n^L;X&=B?ndFjFa@s8?ly(cIu4?Ke4o}jEeKtga&(5gH#L>>%^$^!(<c+j!|
zNZ8<@Wdo2vIvA9d2S_f8bUU7G(86$k5p=wgyRbohF0b&5pz0SkXhAk;AREl?iob!_
zU=0c+5F0E@fCOR#Sz-=_a0}A>Tu=!HYn|-D``rWB{C}wfv*3tZG<eP%+#*&akPtr?
z^au0}LL5f<hQ+t28z1_{8dD3t5B$a&6G%XO6Ews-e~^IqCWwWAQUpjWW8VZr;+g@G
z;=t#dVCew;yyyf1jjY#J^+IK%-ANwh;-I{+)q)$YF&OPEQOR(P!ETlGatNKk=2zL1
z@2LZ-uG$DxK3)yVqa3t>npcA+f2~X+K)4#jYvmJEp|zk`9hdv|J@pZ1)wqzH1>h1p
zB(p9^V2lgN8!sS%F)oBR;qOw|wV)Ht+T675>LzDZt&Kt1qSnTsY*8DMGYK-ls10Ez
zNn@aTn9inrpkAn&ZbMMrFg;Wtl4c8DH%t%3#F-jMKuiy{@4y4O1sR-$L=6oBk}M=6
z86-MqAsNXaA<05kB)6ctVNQrgavu<|>Kt1KDjeq6!=S=pPDn;F8Utxg2$4Jhf!q=q
zFXZ@=_1~rTFP<AxgZdaUa!bUqdqGH9oO^wjsyM6hr^q&V0PqDCI7omm2+4aBAOXH0
zg!604s34J17la~<LwULf$85ylhX#gwVaT;8l+VuxZgL^}MhFF)2PX+PnJC%bEDTZ2
z_BF*|ON!wYtivAlV&w{3E2;-pgyhnNHq<CoC>B4EKwc5T;`bYlfXgAP+2FnEgVn2T
z1PZIw_PD5<)gif3wB%D|bqFg3-3I}Q`yi`BWs}8y5TdbAK!w$z#G@!nHQt1;9ccFZ
zS|{C601s;9LQ1<}$H>6pLw-MGIIG&HcBur*GA>P}Tu7ERXb&ZFp<p?mN+7v>o3?sS
zjs~Z%XDj!qy?d^=5oiToZySQ9()y5G!&~yHv_6CtnBS9Xi7~r3hLo+W!+zY8!e5pi
zG?_Nq#-PcxF=U8J9#YU_V+fVJa57#X0Hwv&n@*-z2sjxs+?ztKEjOJkxscs#J6ST}
z<bMe#*NgCj9d_iV9#EsssvWjkG(UIPYSH}MVFh+eK0kMa@XBEZ&GD8By(!OK_)wkY
ztUO?2&;&hT8;A<~1EE53iVPX3cOZmU3jg2`n4pK)wvW_js}9)+G*J(Q<W{{UpQwjI
zW#Zr&BoGdTI&{?E6I#F$Cv#&CsoR}ZCv6P6<9E`=pecGXR3_3yOFl(UhT3=3w+IZp
z5ICC~|8Mm@XZN!<2Ho*H8<KC5TJkpnXG29+%+nizv!PN`f2~+o@(T@jU8!SsZsN!4
zT+OH}&DZFaNPZ!$SFBX=F=tj!RD*;fp!ut5dWuzrm15z&g*V2-8KnxpsD_6$$w2Zq
z-$bJAj8d#;qAjSIr3!!jkB2m!K=LyYBKcE(_(e)U)miBDzbMX$L}So=uSp~t&nm@U
zQvf6EUoKVnGKhy1;2`-iHIZohaw$%nzjq<KwKCj`OC6hYolmQOQkpF;MMXwi+*UN|
zC2Yfgu*F?cDl0ND0kx!5R%9Td)e;&H?G;<m0G6}x8MUH(xh+B_SZ<3@o>@*J^d6@b
z4RRG5eMYS+UuBCB&?;Mm#=eR~a1RI~px$O*ol$$1zio?<J>IrOC=I+#B6OX$6|Jc2
z*smJY9_`lIB4n0zrJ9(}XakXTrA=?uZ{s2eoOeobJkXi-IIG6lxdt^-4u&XATk*B?
zol<!`020FQl;U{cVJ?iw-Nd?{RUd7$$rhohxT#bYY_0fI+(dCxufq-HhWlWtV~m;G
zb5?DhUv#h(CF53H@Nt!sBSxFKYhSDHwP-!sl#3tOfE#TF#C=te&|tKQ)q5*>HEXzQ
zO~=OEg`n0)Nz|HrkCW%hHZj~&O{LCs>Hl%+O+e#iDV8zfv0paVzUVN`#ECTBsuYjl
zp6RBm*H1X;<|X3HEr4=aQf_H(xT(FKU%nJC26+|+7rHGqWtf13&{7lLz-=VR;Nc3^
zyG(1{a|K?4N)f&snesj~+CXH5iTlu0cY#EfSz#7-6N>QjBD|Yg!B&)M#m!cjojUVZ
zy;%yUHSEJOtxNeDTN~<djVZ4Spbencn3!0-xHh2HvMvd&Pt{tyGL-#Mp}W?Ul~R_^
zwzZ}q@&-tfF|k%Ipyf78;kALSOK5LYZm=P!VB28If(>n;#0Jw8Z<Ij-VuRVDr9P4)
zpu5d%PEz|*<z^d!ws)It1X^J>n`S$yB8A*$vtxx`$q~?YE4w$Pb+6oNBhX^7)gA^#
z;8s)Cwpkv5TTRrqbOey4wO~8@Af??_x!p#fx69jY1X>EVn{uNL5$Lep#K#H`a0EDM
z2fH(^{i14zji3TyhmAlr+YVEnm}dD>u){1%>O0*W0!zW+-0`$_cV5+D8-uE~!!`yj
z1&3`ds9HNrT1=p&AWPT1kLMn5rPVmAj@uZt6dboP=;iQnTMt?aj*}iM>A)aMFNYg)
zZL->GrK-WkC;&!-jX^Jm8%#sIz=sSl8cf{Rn;^mhuYS+7Xj`qO^1Kak3n0$h5cJ~r
zylIH?CCe{>pEujI<G0SU3f}5oWM|rHT`Moz2=r3-qA4%nqYV%)ntrh^f`k$mO{|Mu
z`8aT@dWj8cr&U&7vJt2ZyJX4|D$8HZUNVCnWMI*5{*u|Li~d`VfH$*^>`*&xP-UZy
zK<{K5?NQJ>*+$b4Cl6WvPPWl(Sxy%vVN1-^tL*9a+5?qWZG=J~T(uDjfpFE7dl860
zhpQ%T-_yd9RdChvdR+&tqUyR0Py~SMHb4;ouA8#Rh6Dhvn`T6B#{qB+b5xj(=%BT)
z92LGf%MCz`3g4XN1|UX-<<*I-VgO=PI1<zU$RTh?a~wO_K^svy&PFH(!Z;hD7zpFS
zH%CzngmGbvVhBg@&=utuJ8F+rPOuShMcy?bEDuq$iU$Z2!s6N>2JQjEgmCM&`u!Zi
ziyOwQLxuM9%1JhY7dlL`b?^dVl06D95GK(m=s+o}l;8p!d#^&ft7@{1Py&R>HbMyy
zCWmDy3lShp4&#dL6cN@woRYD7I%!j@rr8iaKuohCe1Mo1mRp0Y;seCAaIDOlp?*{=
zx#pc|hR(7v{J@wMmc?3D@dIO4xQO4Gh30->%nIYqEI(MxDgnIaV5hridwSN}5ID<r
z)raNn4YUD7eOP{80TK}PVSHZk4mMhV#CJ)n!^+#aZ@X&U@_&avt@Iy+Cadky1Oc-;
zEO&<x1I+3$c865kgG6n=I$ZX4SR9EFL+o_cgk4YaU2IkfQ33Mw-CC#v{)Ue0!g3u4
z3Gj7cxrqe{@O5EqVvh-Hm*PD*JJwVCwEMfZex=awU0c6WK)h?~R|<%CNk5dvimSEZ
z-X3=B%U$WE{mWUnJ&d=jV+p!7t=&7=u0GmxRXZ$bFrnQJD;_}tdPlfKoPU4>^o}r2
zW-kc{Jl)GC_tn1ZzSoAJquITdcCC30yf-XAj{*sZy<r?Ye@@!9G29=A9Vc^J`e~<}
z%{~sJQ28B{YeUK%V{2~L9`0}~EMJ#^iT;j-OU20nNI)G6W2;70R~uU9PlOdS_&}r&
z%igA?*zo>ZMR%}-ThRcDov;)G$pz%94iac5!dTU7aNXL~7ROg%$9eWee{Ev3FYsXn
zj__Tswxrh?Ry{!bZT3u9);nMV=}cHw7$AXkCX5Q>BeGIkQtTYl?$8cr&)G86`?;_t
z&Z^J`GUviLt9l5Xw=>)q!;XpU);qO9#zpF!a!@;T?!FXOeqjH&Q+v7^e~Eevd|+L&
z`UeTDOVmFFC`bh8rLgA*1Sq`@A_fA~a9<9)8pGmskmNz`yRdv6Bw5&Yejlcz1xlpt
zXeighN=dLR!k)ZK%a((%l%N4!3(I#>XbG@uVZ4)~>Y^Q0W;fXTcWJjhd;{`)sR0ur
zH^M&gMi(SRZiMBnJCLX+ZiLhK^P-PPej({bIP)`%Lnln)(1oNM;d=-2nbwXV#<01+
z)j}QdH)45AM9wsj=xt0y&NPtJG-4eWwWBI-LWCa|{SE}DWaNNE<V=Xjl>#J?CPZXH
z012cC5llGTQ^+qe+>;`XsS$n$DW8_5Ns;^j-%1uy^t=#J(tIn)y5Fn0O^|%}`FIE$
zy%53hdt)bAM7EjC9==!WYfg^HuQk9#o5>Mu;Bi|WZ9u)qw%)7V5qU8pzj^_axDm{-
zdirj_z_vExc$H-bYOge_i{v+>eS5w^sxWqRp!TfEBJv_Vm=I+V%z<C<Hc(+E`|Ew$
zFU^?|x#2aq3Ns_vxM0=+2NEx{ukX_yHD8vdCMIzsc<<GZw}E}|vF6XT+s!!<`Toq{
zd)7G-<Psd!Km-P_XNP{K^^VlrIJ8%-C!F!Lt7&hz7eyQga-Hwj+)B}+2$BUqR&P&(
zSrQRfyFkEMOCmBZL1Gk3B62eV63Q%zU^B9vs>SwX<~2F<7upBTsx=YmaBvYiYa()4
z21%_VC8E*;35+$7L{i_Vatvtsey;47S}#}S`!)uhpuQiGJAn2)*x!$s{EGneOOg71
z1WP*|*taKYC&g_vyVHtTFwyN!D`G)Xqni=io=moX;f3F7&hGo|UMW=fTcL_JfY@(^
zDo8-=r%)Y32JK+Dk479<bJ;<fq7)vDs8M0i4rI{dtmp5v*RsbgOM(fk<CY~s0_!+g
zlHb?vK$bk6D;%sn<g7ex=>smTa5^H7zClu}NK~xqAc1i@l4(I-AGtbE*fg-k4{Lwx
z(_kZz9UCI@_9@x`p&=3y8()w>Xoy(H)*Xnv7*RsOWqG-wk7&J}ox0i|X8->`2d6K*
z?eD?a;zzYs_eJp8{P4$yJSsot20V-oe6gf}gl-oj@=z5dbh{WS6!{G#R|Y#Q@^J_9
z*Cmmg@HYf6S)K+7!Aq8>K|=7-O;2~AgV!q}H}wSpoGZ2pbP##PayXs>>5AoWkU+XZ
z4o5wqxH=l{XQPhk?CsxcpA<hE#n+%O&=S=V{&tUvD$ld|k7<*t@s~*I-~(+;R3>$h
zKpPX47Y#sSWf>DKc|Iyu7Gm&~Wo*<nJ}Oog$%EXus9aej3oFZWQCeB3w(Uq>t%)iF
zgZ(0G`QzHX4}lOy#v_cdCMvTpNZwSI`XGT_6P5SDL1NXYiAL__FC&Q*uV`wb(R=iR
zVz7v^DQwVC?NIp?d!(eml&B_Nrgr3EH6@A{dbEe>NKrM74gPQKf$r06y~z2~qB6A6
z1_;xl@-uvpBonRZq<>EraViY=lBnaW+_(R&edj7#62%8cJa<*lR9hb9xvLWh40XAs
z6i7fWkILKy5|GQIm~lrHXjK7~-MOf;F1PDx?bps~{3+aq2awA}<^3Cwkjq8o{Tq;Q
zTQ1ss9o$AoJ;Wflxz<MI{Ts=Foz_O>{Ts;w(Ap^O-{2!6$f3bIQM`g}&hOvMAFh?P
z18pfm7JVlw@86&?WZ#M6-Ov+U7SyIF4%h~X`!^*cw0p|Iu!PB&o1*f7t%4hKQxpem
zDK3l|u!X%iLd!h7B`Qu#p$*NUEm1l7K%$2&QTgf)B;sOAG<2IBGJPk2jp>$XX+K^~
zPy<;_Y>D>n!#Cg+H1D>t(ve!%s%@6r!6dE~jv&$Pwy4}Tf<(95qBtHOPr+6}$!iCj
zHd32Vxx<Fwr}Q=iKc$Zv;&2EefY=em;SimdRnWoAF80f3wANL-Yy>)(*<~Zp!OX6x
zA<`;DfUqlywE7w?aurlb9n5WgMw{oXIB46L&SDNm<%uL3LFix<3p>AkRDt(r?oXo1
ziKr|1avm#uTwTce{YAS`4W8vBI*9qi$_@|!z$Z~p39marBFsLC`cBB~Kn$K8jzwLc
z$?PC`kUMT=2gyQq_>^Y{N}UySrt^7}-!o@_x?A&h1P6u%OI$Gn2~|Fi%Hj?rAU}^<
z#a#uR=bVj-;tmAD=d5i?I@LLAo03j-&PHW%hsHoU8<oXfvEe=+bzF&x;*Pfa=cD-s
zFYbzIB7YrKqP(~(1Bs`gc|yqtiOKRcC6qf+?iAD9xX70MO}pE?2pOt}iHSBBqu9{k
z{s>4=-?HHUX!n}mMrCyeCUK*v?taDFK)cIq{QqdbF)v4Dl~~M6tIN@7OyXd;-`D*e
zFyBYzhqJ}}Ex`9tyrAmHVPJwE*pq+PIz@hn%7V05p-(S=h@v1}?nWW$G2AsVM}2PV
z-?i3xMokRkrY}%EH10_;jQf`(-1n4$#Lz&Caf1ZNq!`AH(|a_=!&>&|QCd&4HYTrI
zfr&P?F-%pQBcctcDeR+B+Aqv0_#&9w22A3{FsA!>8;pA@8!%eC-<%qgw(;<BPmRGg
zeRvy;dpcV`TI**{kI65mJ$&HPW0;>*c6w-r*RkefwBBZ2OqQl#qOZCbN>eONXoE<b
z!Tvr*`?)zICQD^7(Pl;rr7{jy&<2xq7P~M;yUUzqx1n!NXHgqWWVFF7oXvhcR%>m}
zj)}k}Cfdx7Avfc-3rHM*zQPuc)jCFAvF$_OXum@Cd7CPFui>5_b1Y}q#%gPt&5z+G
z8~MRYeptXZjnn?iTwo0sOo%R^;SS(!VE#8)$LF*=%{MF+yxjb6kP3h2Z6L9jz4Dw^
zZ7#Ol=;h{LOm6JO+ra!wShw+7A9IOiHZM2-5;7aE;6fjme;J!SUb`={EGEA?1{3JZ
zVzIb>j_Q$4hI>`aahNrIUi+$ORSfkAUlcphSk}k*qSzS(oU}eBvkpiMVtq_5iXfrO
z`WO~PI`Qm80k#3r7;MF&jZKQ#g$Y_&B^aWXz++%-h{;+4ByTRS@qh%@1{x)0-cA&9
zo7ljK$h@0u1PX^uG5Ky2ZGf;TRwnLpfCR#(818cL-yZ2i<omgICTcG@v+u{`QUxxA
z-jB(p3M926|Gr0SMklh|ZuaL%+V-m5cE40H?vBY*TeJbh?pRQi!5{&#JBBit@?|Fq
z>wPhCZ2|-&_epotGf3`>$y5mvlKWy-s_aC=I~3!ovOfr@a>&+!)~!Rf^=REX6qBhE
zje&G1hEzFPg>O3}SH>KZ;?Cfm?2ijHZ!R)fJCj$0-)NA#jLzici^9w8K>+)r<z<k-
zzG!(FB(N`%m+6j7XEORF_Md6mfbvVW2s!goOdi9a4MZ-*a17Fei@=%Rvj?YZy?T9b
z4X87}{qwywAdo=#J|;^`kU;o8hSKtFs<%3WbpIGrM#poXPS-j(tMRv33GoDiKgML8
z3=)Dr#$=rg5-Z`4v69hoQ703FuY}iQu2FGOCrcjWZp37rELm6ypN&(UOrGsbu`w?G
zla&x0cnmDD5`u&(<Koi2AOSfpZn?KJMMh1WyZ3ewK&y$%$pMl-l#>G_kZR)6y&!>9
z6Nh_ooz~UGa8Hgq7Qnkb$h*a?^$e|J;pDg)7gM+kId>`>yil9X3TJBW@~LrYEIa}3
z)VQ3$Ab~qI4%hw(1MEUBsAGL*YJVxOvqi|Yb#YC6dw@0&sf**=1A6h)h34r@c4nsb
zi}IOqc~}T0L}tcIMM(q_A~WMCiRflX7oujfKg`m4XJ^~JkQZmiHSwMgZKzQk>6<Ly
zg)Cnm7jp^(j9zaU9V8^{Eu({kWc^K}cOj$CmqrHxp!t^3LGp*v=pcbK-!eK#Ak8PE
zKM13DHQaB;9iPDH_X?x`eYV!G@XffI6h`k#Mt@5feb^ir{Vi*3cmmwFETe-2?ptK^
z78qMsvehy+caGMoe3>mmMqd_}^9gMrvMi4IbPpGS(O0r7bF_ikm9_{0t+f2ql^cB}
z`Drh`R_jVu-<12yE82dgYLjIFaAAQ>acKdNz}OU*1vN+#iem*kOOvoGxnX<mxw+aC
z&R*MX3_AAMZex%?w#Vg*O2`0XdmJkhpU7R|5BKi4a)3|dtg{*nh=U`hGf0T<j?3u`
z65_k#ayo;=blx2=IUuJqG5B=e6L;;G(^>K$w>K`Qvt(g9@4GpjyHd9Oh<!Fsi?;sA
ziY748{YO?bfdtG)H>0U5)fz`dH1!1mdmOdxK>LEDwjF3+aMX$>GzQX9il)=F`gSwi
zpT-@R*^>*j&kH||s}T`J-6)DqQxv^ce%i7Ln1DKM1rSI;ou&YyXy`_MKf~I*p$)7&
zV<`hBlsRK51CkoW4Uwoo0^v*?We2@z>_(ILOZLti+Mud0Z3ME<mvQ+?FWLa%%XmV(
z>;wsfFXQsAU^k-9%LxhslIJaxf`sIG%cLNATPrJeqoBGZOv>sPY3}ZqY!xW7F4=>i
z$hu@%6oLS{L>67^g+(h3_q;O4ySY<~w47cvugofFD#@e^%XmT45d<I?mdR)X3CM+I
zG9Q8j<iavob|-x*S4m?YmB{_=Z4EySHYy?WJlLEcXu;3YK|*R&0^dLJOI4LHr+Y#|
zsZF?otHtguSGG&@JFCGIQH~}+n2?ZB4iX3x5;Dp`BFZNuN@^2g(IN(q@`(x83kk7k
zNgm{C5;Dpq3sF8PL5o&>F&_g~&Xoyeb;6bV=WcDbHW-Ac$SV2lUzw1zA0(7onUISP
zNPw?QpzNo286ct5%0zrMl%gL;AO@6zt5+rD%eG4LWiBD|GzdJ)*+wJp<q~pn#8aT>
z5>^;gQl8$B;EQA35k$cTTT4n18*D8pL2R(Kqy(`cfhhQr=2ey9-kflJ%=#YD&K7M>
zST~=mC<wME#4$ApAa1vu0TPJY6EX-u0&#l+L2#H#!YXprE_Ult?MQZ)Ekhx&E1~fl
zWYh*SyAnRXK1s-6M(tzXPqf<defYSC$4M1;`o2UH@s$!t$m~nt<`}JURYZNr_I-kM
z^r2-mFwxD2meD{`qnk#nB6}YZM(YcLQ_{I0F~}p9*+2s6h-EgAKsrKZdksHv<LYj>
zk0l&G<Q_b(MV&>*64qy?-N|mB3%hj!0m#oS8-N7l=a$_-0`haR+cH`$y2EbnvkB$v
z+~ChNBzpWQf*%hcch(AikdQlT1wTl{+1W(N*E0Bt!Gr(HgzLNve#wK}S61*#7J~mA
z4}P*~cS>yEBz{t{frFp~OC&;&P~{uTz90el%}x7uC$dr4_jVAlZ=)5KAYqI~%f29i
z)M(ikBo~E!>GPu=hWlE=aXje^-o*wVN5!`Il-4_WErGP(6hG+G19!uoO)6uPE`1%{
z4eKHAhH)M%{#?uTAC+|7&X3Q;GmL9=($(iD9CSB^I2PXcq*4RCzgci_2C<lNTKhi(
zp8sF6bObOV>FQylkw+#bUHxvNO-?G)fQCa{sU1=r@z_VFwGXSOB<0ODt{fTt#iZ*G
zHXNC8YSQ)Vn{d;U$_&8a7k0&1k)kAv4n;W%ne(NjOI$k>9N^X^T@^Mi*_b6=(JnWE
zUrs9Z0RC?a7{B*JEY|-&+R%=(ldkTzFztrtBwam!!U5bX)Fs~t_n^>!Jt<NK2zdMT
zqzqw@Q1A7mOc@{{`g#(f&o659pr~5N)|}C%wp(b+P}na_%9MdNkXe{S%AlXQ>_Jvr
zlvIph3l{uD%T$RJ4L14(U!)L_z*v-&DFh@i7A28FZqS{;9w6OYlFECzPaCxB`GfJN
z1w+BQB`GsK+5u)uQf7LPfZ39inI0r&;Fe_ky`;$W#1NT&YZ94$99<XdL8<3puKNY8
zNnYhayC2H=2b1!p3>u-IgULcM+d!h9gGrPfG&_6H&<?Xv-{QsF;iR0AU_#_@QZ5r9
zA#ylrEfYOx`W{=j?_0chJ7)Jvd*fsF=%|J}W{-|)xMN97#raJ!7ke7+ACr#xxmz!5
z^W5GallUxm44u^WB!7=dDc;~E*1CnB%$>W6ll?3>B5mP0V8^61ewmk=19nV`em;Uy
zeoykuc=pVX+WhQzTZVi-J|*jTw1Ld{6zceiqDwfvHrM~UHp$tx7F{Eb^MOQAwW$*E
zOQj$oRGWf#-sc^ucwsaxrObONU*GPTmQruk2lD>W>ZOz`8|=+iD7xpROL~`fpe;;3
zpHd}h*#&w0rBusueiyhWIg_Pat%BuTmW^=gW$nNas~a9eA(rxr{TxULvlQ+F(S6;X
z<i?pPS3BI-rH&cicC~H?hWKG3JcjVhlwZ7j1qtDqDZG58%LzTnpD(9e>0pHr{+Xhe
zmxCdGeGHEw{Bo*Ty!{0U;g?gm=SP=|dr~z%hrOlfJ=)Dlxx^)TFd;H0Wl~ZgV^ZBc
zCso;9S_ub%^(j|JX(iS+4`u>GL}*WbUA{gQXf1{5T)sZlt^>dS+>=fS=aO(6q3rTJ
zJ=G2jOPJ2&=i0(_CO?;i>9hErbdLUd%GEa5O9(f2>784HAzoPGF@#@F`NYrNfQ0bt
zscaklMf#$vm*HNMa-7JGb?H;`j5R5|ey6*qy%4kRTuNETlB(XV8h?phI`}}#rJ4!v
zg9KVGg)1&p%7MfL&!vLvQsONXG59N)wJBULrs7U=5T0vOc&kQtJ|v6oe5_4%@1f^t
zk?%#Jx+$gH5qv|5<UUjNcFx~|6j=uk;oVIs`T7_nZ!CXp7$lV1l)|?N<S3AE&8Aev
z0Q#j$PV&c{`s<@bPf%uCZWuIiKD5p5f}(F*N+z~meCljV$;~H7U~Efa^C`NZW8iJ6
za68!rf9<j@6=|#A04(}M`aGIaKFjSd(EpKNjX$k{Q2IP-_d=8DsND-qrlZu0ur8&~
zqp9#`ur6Kt0jwxsK1sPgO^NDV@*sCCC98MILIHC;Mb-Of1$5wCg1b;D#|?I*NdMIM
zB9$NFFFZ;pSN$iYv=p~lzBY8X36jsxd_07y{*%Ia3+5+CD0_w#7wi4aGbx4NVJ0Tp
zoJrvhb1&WoR0I2KvEIjQNGUDITxdgUQbP*+8af{@AzPkh9~bK#&9f;bE8EcL4`)+t
z+tGDVv_T^Il9hY(3iHd9!lyhj(dNrk>o$59-Uhb(ijDH<-OR7-zUbWlE9y(=gTOh*
zKK4MLb9P^J?thN@LhJ(;v;REn=GD80&!^<Cyn=}~=TrC`55I9sjo|Uixfx!4zcYL}
zrSN%8T(r8J!p~HH=;Ey~v9ITz_vt@Z!q;t`=<NSG=`;{iu(#nJopwxO*8=*z#^^M5
z7CjI%y=exHO)Jl_2ZMU|YWyXV0r)Wc*mOXAvJDc}8=J=AJH-e{#K_om*>h<z1Bt<B
z;JCD$fsz9a#--&9lq{No<I<RcmuWfZP42BpD~aG2&IrRR-V5D9iMYix*t#YyX9q~$
zR^A5$37u-vcxQv(WLENhhI>ld@doQ(s?Rm1r1MQ4YCa0J7t=~sgj%FILJg$&QC&QQ
zf-k0FZhFn)BVDGlzW6avb81@Q-y9JWZKkF%&nZNF6jamLi_H-t(`+2hB^>O#(FTf5
zXQ!L%EyL5((rI8qa(Wt08;`3$XoOgsmuqbzT~*CXEBs)BxM(#mje`k_VUU2Dm+sh~
z|NbqJP;p+m;&ytCj>oXieD(}}tks;KmhlQEAm*nLufup7#3Ekq#Pp}b3(`s_iA%A#
zAl<c_J{?{F5Q1?byEm@ag%{eoP%theU4DT8>SMSUryc)dt}^}SiN$GrWkR)jAJqOU
z(#o2&OTVt5Z0#d!f8yo-QKtXhS+O$h>dmWE@eG)&(ypg}!od(%r&0UUqS%K5a&1~!
z&)O#S%4+;2e!LHSjC^gnR4k<+A+<J*i&PYlAQ6yj)2a0`Ac?^Pa-9{Bl7rsYSpg|o
z6p-sEAo+f|4}!qGF|BM)yMo);S4sWA!=OY!;u(y&F)cqp1qq!trei#rKnV)SjcH79
zp%d){H>TTfhEB97;W>0NpuwiJtBpQ`_WOMe_qH^Cnm3ZxS>d)ce(>r=S}pog)b7k}
zPwU0bfjiT(gaa4-?M%xbjs%JRcBWB2)A9fk$zo^PsN%g5iK>^kD6Z5G3s}e>$hByp
z|H@f?z=ow^97xL}^1gf+2huot6|l6h9Y`17%{_*v1WO!`_$@%m!LSab+gp9}M(F!M
zy2qXR_w;k!e#3n%?f53`44%Qybq^hpL%5!EHanJ<Hyr&m<m2pmxt=wTr{#}qg9+T@
zX}p}m9ol?9P0-KS9a;Ui;m<Iqc`Sp8HlLB%Ct#3h1oCw5y{ul~44<~9D7eI?DY}dz
z-cNJ1fqmUtUlDFd%O7(F6O9_uxIaPvh6Wm8j-F#1+vxkk=h6xfJz}EKISRe4q7f$H
zMYgo9zAbz)t%xg`em)5=rtt>6C*0i6a9>V4uCQtC^d83LG;Z)vtoNf>|2~adxrp_O
zYLJL7(4wRQiP3(amcJSg5*mM>#%VT17f3|c_vzRVGUAEBBfim!c*%jXjaI}<7Dap`
zMf`8!m;g2uX~(!so-=rlcr~!Bz24XOF`Zw=GiZPub3Lte6t@#VLM_lDVSz*k*C|Qh
zCo}T{<e?kvo(_7K@Qt+6nR^IKw7HSSt4&(@0_2HjGi*Tzy(;`{My4ciIU6a7Ua#|i
znPyamDIN7*;ZYf-LL!laMrFEmB?F=n{4+Yk9`1-mbaX~$Y;e(NbOsrlZYTsONsh^|
zjUDxh@R*EJDUm2kj>+`ssrTWHVEVBc=Bd#8#>d)?C{2!~Mt^`8Z!_G_XB;nNoWTcg
z8mb9<sY1WYcs_$yljPIe$fpxC$|Sa;5<Ue9V9?^?IY`)NVkRc`F(Bd7iJ6wIxKBaC
zrxP>flQLpiB?k9tO-3%Ok^`-3GICj!Eb?hh20pz&iy^*Gn3{3CmJeM|I9abs-OI8&
z^4;v6_PWOQcha{to0`cFbN}MsN1+vMU{5{G_H@SbI4z^_Dn1`i(9yI^wl!_DKtlJI
z*f*W^D)S|~4f*yZYSWyz0aeHD?xKgyx(u90s~G<I6yjz&cad!{XvQW|8<vq3U64;b
zmO({V#&O`;8EktOJ!#IcydUI_ok8BGn=nCg>?~H$Rlhqr%W^)L=xY`^U+4q#zYKq}
zfn9WejBm%Rh{Hc(f~GHL5OEO>hc$3ETh&#MnX@x8x!@OH&}Mc9$tA(tAQ#SI-*(kg
z=A4Ye|M3mzLFL$-4DRcRHvA$+=Wb~8ifsaZ5ra$+<v7?))w92M)8l4+MiGlWez5^K
z^%;CWB~-`FqgUCx-C(9yGYbFC3w_b=<G-50cU}SqUy99TSAi3rYmbY5{(f$zYo-1O
zqV{&fJwM}E#HuRwhmH9ewUo!{?G&dAGs>G3r<K+COI%+BA6{OVX)bQogM_mdW{}4y
z>wrXrF3hCglo3h{9-(ho5h^**;0-H6C5s~T4T{iD@)4o<=S6ZE$94qh?)(Vr)sP>|
zJy)gwQ)!m70y9K`xt0PmYp%884NO3<rFf%KD?~B5j?M0=w=~yT#s(8@){(JM<Dw0y
z_3U&{WRmq6S^9xV+zeIPv}%NCJ=m1%*Gs?8X>PLI4=!45BKP;=jS!Wa+3MbUpYUeO
z+#w#7n<<P&2_%H&wp>XcJ<nOT&F+ulavSw`51i89aPP=C_G0us`QSb5zP@^g;vM83
zs>}P6dv;}%JsCDAsCQy}`|9p$(85W0iec}voCFfe@3Nc(5>DEcN$-(PA_jNTZp%rM
z1C4fDPLeEg(r)e~TD0+RlN`=CJ|QRNMRE`H!)GbR;Y@yWo;XU$KmUfQL}~rI+mSm!
ziqaYnf&OnAFU?i_6CyaTXJc>I?+zcy$dVXLv^kPNNnArKX(_qnV|L+o{RQ)5yAkJ7
zqrtolhI*8}++TkreAJp1rQA(NGx+fa`bVP%817Fqj?Y>10s60vPc!%ihBEU2GU<to
za*AhWwsC;&9tu)?pM-}{@I*%bGBHSWb0UNLbQJa=VbK$r<SA)UVsML|v@9w)7{E!(
PqLM`xJ;}0n=-vJ=z+fG+

delta 27777
zcmZvFcX$=Y)%U&2)n#`@k(PUPo3yv-Hb4Rd5>2AJ;O@BOOXAqZHc9L_<#kE&=6w@k
zim<>G(FSB}n(5V)Tx=0Am}W4h7-PUR2hj`;*fL;<f$w)_W?4Va_x-{1=$t+0H)qZ{
zGjnEk_A+g1=G>&rkm1hZ%J62xU8{3OKcal`b#}}nIj>CDm#)s&n;SU+$MKQ5mvZpW
zoz1<}d}F?Ie0G;p-I-I}QFpllN;AXtnn#HQW0AhU{`E_Pe?91x!I5YG@bW8>LC?PQ
zhnHWD40`d!$n&oZ{@u%^y53UHAq^K-xlOu>%x!HwbrP8uv`CI$6xKg+^5&ph<59W?
zH#k|HrtYW$VF9@SRO88wNKF@jYCO@-773slPenI9%yDuISFMND&C`PA0VM~TwI0PU
zMRTB8>j@NEBs6P1;i!I7m;m8%9yaTF_ceARS9SLtXPe*#>^M(uzSMLBXq?9|EfPTE
zJkhxR3te#q4fjNkW1q(vyq}rRYChJhh1$FIM2}jelVgL5!*ESzZ?sU$$|idhl|z6D
z#K|5_GyoEalRX}<-kq!9;Z%=O7;ML)-#0f|tCp(23mBHNlRwvd63YqYsh(g+UqJl|
zDvIHn4krYsIoaY@v=Do>rCM78j-{?ZeY!_$Bh@ML(>(<~y_{=<n!(z&QoB~ou>28J
zn!z74EPsFm!VHfgA_S6jJn>@vxWXY2+j-d;t<*uzl6fA*E!&|u&hs?SwMZz<^R#NM
zS8*LQu#lDHslBTf+Rf$=*KU^LxzJ-oB|;7m7J7;k`X$kC#B&*2n5TYQwakWa6W7Yh
zphA&c=E+M*2sa>>dD^zuzY!444c97mFkfw|T4h5t2gE8*uI29LfLP`6CnQ93K&<kl
zGx|&cp&G6%Q`@MsE3-C)3W%&HR}6-rq5>l833ZYXDj>3+E)_CiG{f~iJKaVtt9su?
z(17s1C%0ItXh3-1ljvZPKzQF%)>$9jjC)fzTpP2GdDJn^%8fRL4tH*}-Khg(qsOoy
zbzp4tq%wLp4v}lPHZ!w8?a^hkN6C}z<U(b$C*KNuE>t#C;6>`RFkIVcOs670VUa2B
zFk4)p=2w9wMs`qXflh4m<ce_w5@_2zVKK5n0&N?O>`z?Wf|iDBZ}wV&`jFCVuZ__X
z7<+A3wgkprPbel0Yzd6Lo<vF?+YDnfWVjD`9G9{q1MozfLmt(q@1ZD#Feu$eJ<7jW
zDx~hN#$RG=fDgE%*0=--xT7>KTVuupsghd3zdX%!LsvOtq}IxCAM?1r^yKLIx@Pg9
zciiJPAa<MOHgZmQ+#8(wMCx9MM&Wsna$j(G_SHf)PpJlBSwRE*yhm%vI|WIgo%iI4
z$pR!&?7YXgSI^@%I90L%oHqAJ3pfX}z<Ezu<&Rk$rq@7yw(tQYE_#$$aH2Ev=x+uy
zS6HpD0z(8Vq$qIoMNe*lG=l8C=<yX<B)~3uB2m2){9I_bn>>#1*%x88W9uf5+Cu*&
zx>yJ==UisNi2Bqsm#xl$382d!O{^0j0d(18h}j4vI(OOQspfVQiO#{0%O3BeKW1^I
z$N#STc{@P7!oG;8!SXA1JLJSGRwxU(6R%iPY#}DeoU0z?4QH%v<PKK-MDqgHC#n`z
zgD3hA35=Gj)@T6<xT_u`#QP5t7F_k1VZ9YH1EflLk<m_Rq$2IU>WMzhlYm6fm1ZRN
z%qXY68~K^j(r^#;IyQQp!4H~61`PiF^VuU&b+a>Xs5d8HXNXcxOIkjLu@!N3T6maO
z;jI%Bu^Z+^>)#3?*fyN~rda*X9PU;4=!B3HLc_fno$WXfs1fY13AMx=;Z^vchYT$i
zBfP1!9_2FVR1MpbP~+hmufo?&$TWjYjW-<8U&Hhc8q@p8Z1ber%o!f(RpR6j;zDYq
zH<{8Kg-P(<>nxK}Pn)lMm5db1fza#T_9c2hj)cJ0vXZnqz^wHud|C&P8#1+COzSZ&
zgDH6w8<$p#!=t<k&pyaBhs-E1vTqsYJJ3j)y6nERy25GJ*+?p+>IkVn7s9+cfz52I
z-eFGgDtr!trUsb_-e^q!Z!Uw0b0TZjPW_+oM6bdp70Bq2ndrr&vI`>@G^WP4vTwCh
zA5?n1WlQBk>MfEI{-C+>EpNIf62wh9v}V5L&GgV`3J^?|^RjJA)tF+=v%S~?AoIM*
zwBC!igeh=7d!eJ+$DHp~_=*FlmXMk6O}CXY82by@c9L0O<Ftaz0>ZhE<FuyLHQ7mh
zz+C86EDKvhW}z30A68(%<{7R<Y(gisx4Fp1$%D)y!ubi8$v0e!*~L!kqv6FiPCjH7
z6VB2cE@T+4HQ8s%)a6QejaNxZe;ANj<IS|w8%6)y7_JYp9m~~UDUlCsC$@pq2js*W
zC&mY+)-7JgC+r_x)e)_?cym1ZV`!ljjft)7o^I+-&8=1>!G!8oiew3wfxEY{4c*iZ
z<~FYq=0>#QLt>jZ7S}^u1{&L0i|%TXx!tSqi4Nd2B({44LA{vEAdDZeySl4M^CPdq
z7jVeXkod@3Wa^!{3`WEbHoCi7Ztk#hv=tu^J19p>xeUg`PIj!j+R@x;<Is56NjRb{
zjE9d|`yOcPW3LjBHq&_c*jrenci=b}54+eOd#IfvyX?Nxc-TdK|14jp8pqw_bzIMG
z?4j;gTQ_;t0{w2?<#v+aF0*&~tM`;#_PY6uOHAlq_IlFP9FgeoWpC%Z^)y$ZS&xMV
zsBKHGdfi?rLo>@&Z$W#DgvwQK*9Y{wxC$O#V=oO*2X?&Xb$g@?dG(st+twnXa?M+Q
zuf7VS3q5oXDRBI!AbWm*+R2$Wq(JrRC-VWOkjZni?eA1isikuZ+<ZkOF3{!{wBm!9
zNTAIvz}OmxsSY%ZzMk#<pjzj>=X!ygZwH7ArRxQOcH9JzP`X}F@u1!UD_D`?zER+q
z=X2`0dNWrM0B#hhg`%b_A|r<Q*sS5|o1H-*l0$rQtp*9%AwI1Ip}If<b%?KZ9!;nq
z@o*?RJ6Mf(8fvT1$~4rc8B&D|8S3*E=+iJVpaXA=@+o7omA_K`N;UozD-s?cKSud-
z#r6gyU`F`@q8I}Sm{C4V_f)HZM6EK)ml)$~#+M{wjMNOMjP|)Y{Fnu=yy0_o(y=H}
z>p-dVDZb$UMg~4N`1h}{Pk*DnRsoKvP4FBLb+++T``3~2^RPHT-DS9$Pnqs>1t%*k
zGG8rWA576|S)Uiw7pn2VLZQt7^U3`Ww1C2Vvd#ht+nKLmI&7ypix|Aln(A}C=@WI9
z<UwzmPu5wIg*vO=M|Bo$5Q}IPpW#E5lOJJI=4oEm>$j@A12~o!X;U%7CpU=@2jUE$
zwMi@@m(NA$u}K^N0t0=n9S_<i&h^P%BAx<iu21d~K>}&654*&A4GCr%?)Q9-@!1tG
zs?%I;-t!^DkCMksB$s=GPuZM(;=j}<oYnYK_y`Yxx4|b1C6K_|;6tHA@dXJVZSZ+E
zOCJ$~`{)Co>qF@y$%EcT%SVz0A8q13x-M+MjIqO~?D4s>U0+uJ?5qZ1SwYFV!zXJ|
zlaHDmKGdSZ3e=*|H1^!KLR6#foj%v@+g4ch=*K>H9?v|$h+@dK%ZGW0>SoD;yFc-{
zTePLcA3WsdKGywJwfM<>mfOLE+xJ;+2MGiB`3$kk2Z`?P^PyUy@dy&7!9HK~KG}#Y
z!oZ5%s~7P$AitkAysCzu+;6u*8{YkP8<h0>eTLWqnta2%--jKyXrme0*zYU6OSaKW
z_HDnf=uSPz+d$qNVBP+t7Cw8xZo`E(4)}7#-pW*HNF4CxTc9)~4){>wi8e4KKt=}0
zHfTVQjR$<u{(4v52B?ER<^EuXo&8<&G&}w$wZ&6lh{?lLXfJ)xZjI9Zpf8_SZ*UW(
z{Xrk9H_=)ST07`VTVBhNtsV4b?$vkFJYmwnIKuAvv%2faBX%P+B97Q@qY-h$8WB)I
zBS(B#r9>lcG;+ije?WH0E!}p+SA4&2@;0#69b>QlMU6ap%x<GO+BjynLEG_TK11wF
zOog`N$9!0IMH|i0#xY;a>PU0h#xY;~UcEhU0|F;l(_hrmsuOk_v|m5rllyg(@7GWG
zLKZ0P*H8FRSFRMUKw;U)p8Rih^^=V@ga$JkZ8K@Z-sm$de`|nf^r5a2W@@ma(U%ch
z98=MxnT@`-kLW$QnJ7%pus{A)t*Sa>x1qz#Gd_7JU@EksKjTYum!PzvKjW+HrEfr8
zhKQkTZOVT2S9PQEbd!yd3ydb8+>=8H7)`z~UnEHf7)`#?juJ8#b~gDsJtaey3p)*r
z(I#KnllnH%3hLThzHIK_)$Phtx9nzU>wn89catXH`rq>TtU*g#|64Tc3U{<XGq-%P
zhh#G?WHYyX@dx$&V#Y#cT$3$(O?}*1UE{x<<a9Vt<IlB{fer_1{H8c(F%>!-sPW^R
zMYPfqt<?CtKEwCXc#2j~1K0Sw4Z^CUqw}2O!s1`!fAT55oR|u#?OH!yPVV^2D}#Uk
z^7DUSZ_m?Omg5Q9#v`$=fJEE1ez~rIMBBA~Yh5uFROI9Qd|i1G1m=fvb}w2Zb;kMS
zx`L-b8t0em3P>Q0^J871x+QG5C-@z!{i1FOLvn&2Cy)FrDol0DWHxiSI=ghTUry*?
zLTIvI7AznEH`$MZWhpr}OtWcy_Kzdf4$jhgztWuh3S46QRWVnAgi^h~jYmI5=S^Xn
zr)On%)u<<&rL$}$!kT3((ab!Hl;%*K6DD#|_KVlmgi^K0>O8pU{35IKAc3*SZ-|pK
zkfh{C!Ay&Ln6{!z{o?c&1Ol+s3IIrGF0}#x5}HeI2Ovy~$SN5C5CB?b+dy;WD%%E{
zD_2<ofH06&SpkR`?tl0ldu0G3ko<>VHAMg-6oB_A0Ml9Z7}Z_+o)rZ=f#iEu6hH#=
zJ&FRAjS+HOgP)xntQNA}Q0&xTD^esH{IYn2BorI`sK0j6Toj?=af4sk!rWukkE`*Q
znEt^>mo`{k0tu82ez~B51j+_K7BpJbK~inuFWll6wIeY^?f8LT){c^exNr2Mc5I{P
zay3Y~XzRJj@9Lqq$@?)EEqurZjZ;1T&3@OTqFjuiUH4AEvd91bmW$6-<0*{BV^NBL
zgwZ?wvS<Ve$en&!G=hZDJN*TFU^Eqt#NY+d$9~stzbG0d4|==&vS^en6hxo+sc57@
z6*b(S`W=ObWKg4M_EWza7D0_tP!EWp9;;K`B?l}6@dT0wte}EKLkB3R8H6TEE<ecf
zC#dZP9<;^?n8fv~;xr5-R1W%4<dGdQ!~KQdaY339gX9;t2X~CjIL6KBg1_OYW0oBt
zA$rWR10+C?S;-Y6J5Gq?sssVe6SgLqbHd6lJcZ^7$}V2r$0)l_`<3(m-*Dk6u<%%f
z3nZ{kTj2r;tkYJwKq6eH{RQV`xQM~Sb;j@dN`_1Fpm){^mt-Ma=Wd59Zn*!AaD6BJ
z6i2iFzC8xx<fm^$xNc5HxW2Ir#1lw<W4Q?=8v2IZgpIZ<PS!WEPE*uQ9h&^|B?g$p
z^*3+Dr$vxZY4YbA`uQBhtJrW43pn1))=g2rQd$oSs3HD7r<hC_!A4C}dzOv}NGLD?
zH6qYlL>?rdMg$P~X*3TPQ}d&<P1DqnvvPDm4r6dJ$Bho;iZTKuNd=1eu9|d!F*;CE
zsz1mfFc8PGd)`zZt{iJ4P>{w3<l<7ygETfE=U0$G7#qO++M6SQs$-wOsrId`vk_=i
z*4YR&D(eFBtxPc=m309WM>Inh(+oX{y}M8iu|G`5#%oeQE|7Qvy-5MNK!QYDlLFQP
zSxjcu2gJq;1YqiI3uu0>w=JOgxjrBlNC*R|K7a*s4{f{>hI?he(U|@6Ep@jmZ)HGj
zBgS!pqOyj4Fk78nz9t}(7EEBR3CPtEB(T;5kQ0X~DhWizy)K}v54eIKu^}&M_hnDc
zQ8i~Zcp~c|0f2P@O_Tv30kAF*D&#XONM!xGK+*a@GhTHNgR<WB&wxuD)k_XS_s>AQ
zgcm@P1)zThI`qVWI~hVVZvd|d<B>;S8pM7(S8ZDc+A@N&XJbIVA%rk=HwG}hKgD%H
zZAKh|57Ya>1iLU-?OFncrAz_c9FXq^6Fi`s19(4(vo17@NNi&d%~Q)uwgqH)047wn
z1yu3E0wh}47QiO4f~z1}JJ`y3YPU{10^$f8I25!UfkN>b4J1@{1n?Sd2~`vcY%kpV
z0?Oyv(0p~Vvl@R|*3q6~UqCJbkb~a7fLsJX!oT|h1)syev<MJ`&nlk=Tn7ST5s*CS
z?GMOBK(a8ad={WZpbIwvyN|;GB^pdd*c}Vij+G$9YMM~!mEhq(E<X=LBeVxO94HXg
zEJ$D<4qyvPLm)vr(4#a2qNPWz><1GnN3HA!36-O_vp=C=9X&a3k?O2EX*Wtcij!8>
zLj(vXt*i$Lgp-u@_v7HSwc$P!aGYmVi`DyDp9$o&;fLw1Ddo?ysf*QO^K3vKc!G&s
zIvc=&Cu)zJ)|5Ku*x|)$+&mYM2cBR;<{ZrnbWquvvhOPvTB0VyU&$^Jlem=XKgY03
zVp0w`uCk|>s6T7{?|>ShBY#(tEV#tBFHr|nUb1=yCVF<s>KRCwa4BGjtuILQ>{0-S
zwlps%$-X9b_foY}Ws{9S^I}sVm!FxE3<(8-;t&8N5Sjuw8XLe7VCNOKW~q8-)fF3o
zCY&n)d3_<t=fx|5Jj(_eL08Czd(gL(;l3Vl%w*k`sRQ$`Q`&z_#aD_tcQe2yEK_$?
z-n5Xx1@cX+cOYTgO>4#l3FMpP*;hFP9u8%1E?56tH8d#GEyWk<p+PxkgCwD#EZ#r@
zVQ3Jedok_6QWS=<*#}psOO=wbK{-Uhh0@p{;y{}pkWd;M#Hn&$t^=x$Wmc*EE9>lL
z`9vR-E=h@#zhIu&q=6)zASU|zIRc;P7pzhrtej*c&=JQZ8-Y*xHUgjW3E>`&09nR5
zuU7Bt!)ye)(!qkcVrZrKtiggsY1s>!HCV7+d;O3I0A`KpL1hNpuv$G>jlaZrO(}FP
zG2M0`%^}l+GQsc^DAR)oE>*uEF^5bK7S9NZ>X#UpLm=~3(AA#L$dU!q-VVBcq2G&~
zNE_}sLC2z?GguXQ?Bzkf9^97|{6p>i(>X!a&;#gSnzCbVP{|MGM*6<|^59n@kNsqz
zun&)5AD)Rh4kYZG8<dL>NVGjSh(!o*Er5fE^VyPrs700Ytsa62g!xtvL6VS_A|Qb<
zpHd{o5s)DZSx#0h?zPZHpaHPZMxbUE2Ia9@n&->HAm+6F&C%P8;a(eb?8*K*tA5%n
ze{B$z4&QQSsFUl1{HVMK2tcm4x&;!D>#c5qgi-6MTa#$Y&rpL~gE)B}(TuLWw8?f}
zr~b`Z3YKsS1h|CU`hbM~)*y;gnr1VU_8$esUJwLg^HEUN8X%$hQBc+zAffqD(5f{u
zMDB*sbjS+=nY`O_3rO@~x8)X)K-wLYwFXG8idlCgxuvb){xay8mVIG^TGK4=%b@BP
zZfQ$yX`J#QHsXy|cfbQwqvZ~efNCUnyhXX(mP|g&_I#+$C_Nig#H|@Hi5qMo79Nn$
zIUDo`^nVH+_~2{y)@F6XQ(s#>Xv@p;udN<{1jN@tL%i1q35c(QnEh#90EyM=>tIM+
zB_L9q@O&LC9H{?WGy;Vt*04prRM})V(u^ixq_%`1H#G&L-7J!Hf;}tg4G|iFhp(_R
zTh)P8S8N2@zF!H-vm3|&;Y!ftZ;nX?2v>r5bNnS0Vr?l|hh%@ZO?}o`H6$d*Ik?0Q
z$%zsqFouNW4HuBW7!tzE?)8*#Z7D};vn@YTKX6vn+88uf)Y=#{SJZ~&WD6Z&)P^vU
zq%%+?jAQyv^-|S18-mJ%aiLr>Q?}*h!MIRN9HM~)#JEuBE<A7BlEWv2MBajc=7f;U
zTaajcLP+K<NN7$7S$W%*s)VT_p0})em+G#XYMVgC!c@B#R4hyl$+U$cfTo6!wgZv1
z?J(Vi9H-f)UFzL!riav^K8$?a4oT~t6;kG9i#|~mXEpv5(-j^7e3k_c65z8!@@fP~
zfX@oy<eH{akeE(qg(CAp&2$fr)ri552@Ln_kZW!zhaVo?=0bN)2xXZEX9u^LD9ql;
z3sGfuky5Z7rSKBAY`6MN<r3Q}ssWaS<Z=ZW5(?#s1rH>UmxQq3{emOl{>O6m#UAyS
z)yr)J%Btmdzo?nzA-PPn<0EBx2+IUr`2dM4AIn3<<HVH@qOnTAgyo^cb0|JFF2WZM
zi2Z7;lWrk^2QyZNl(JxX<e`@a|7!3{EW20jUI~`vTpCF$L$Z{CJd9Ww3YPGZ1d{7_
z?4<YMXc$RrSo?iyzdmbh1X^|1*p8r)v?e6i?RI=5tqEb(<yWEFq0jF3L&^rWY#**d
z;V;V$8cXln&Y-dMe#j8@I<#QN`ytfpBFK1Q0F<^HZU>oO8Q?6)a5scp>u(2Ha-qA<
z4zgq-$o~{Uo*~i?e%O+2v0sfktG3u?(eT`2n?=KOi<Q{z`0(5k!YhWUG{oB}^tL?v
z!e?r|vvQY>LF03m?I0@OcZKrAsWEh5-mVZ{A^e>~V0`XneLh!*RPD79Xq@g1$$fY`
zK2G<Bip4=QNFeMDbt%`k2rJ-;quCputJ|DaM{Nwc(s$IxpdorRR4itRc6^8)4RtQp
zKNJ{v0dOkoJgjbU_Bv%_(3QSZA^8re9e)FGDwJ>KJiP%p6)H6K*==+sC(m%#6*^ef
zbwr(|8Fhs@8odI^$)m+-LZRYg?{?4=)gWOAX#RSdo?=m%P>5x=1sBG{iG>Qki-w0Z
z$UyS9-$X)oVj<QrAq#3!p~9~K;2{ksko>@dNdA-`b&(M;but?LDdjnl5C+Y6lte;!
zav^q<0vKsOrBLCkARbbJgXD+PL_&5-A<mhvx-h%7H{A0I9qY0yPpf}YTF)y)IYt}V
z_SEYItm`>!WET|55(7*?Ehv<g7f4vOfcir_!uHgG#cbL+wW4IPtwJtXY^%^bvzS!q
zy-j=S<TCcdIkl=}nXN)V%WM_u`!Z6&r5~t(dYAp`E45F_yS57X<6T>Yrh#`!g>KKb
zrv-I2`}8Zdcgbp7h1{~bP!r=BGEiAv*s_&=Cs#q@WLfX?>fI$-TZIOBwoq>U+w(!5
zEyULU8LonSZD6a<tIu_8uvKUPHWbRDtUVuq4U{c2bU44naPKa3+$_r8eL*eC$=_Xw
zLUA+h@VH9I{WprTfBHt<(ze5mBDvy$4Y(Uc0dXl6B#gdMge7}3#j@0J*P4#^vo92C
z{gp(m$#*l&T&2wo_ZU;DGhO-_r`{YiUXEh%A|BgkYNxx5HC<Kwz(qVlP{x_AzCYri
zneoJ#l?&ra$+(5t3t??ePRT;N{^N5mxUg-ZDU$;vlopzZ0WKUt2M?F9bqTG*GfVKQ
zQ>ySq$ds3!Ap?~qCN4cwu>}%y%MvrMr!a({1>p_U5;MOCe*;AVcqc_~pq7|jyYctD
zrIb-C*!@YZd&vshG-`c?DenqE2JNgcF}C`0(?G3atCCv({;TkoP&Q75?J85&N~L_j
ztuhTUb$}!t6U*g1T5(G$!`7Ng`yg|&!n9V%+7)RUdorc{trBbtl1jL>rYzy01EbcO
zrg*6g5|C@nw(ay+I3k)~$9!q+PnGLz1lsPcvk@pC*O_LSG?^Bib!K^mUda(4yMcX_
z)_PTLun}l|*kE^y(sP3;tKCwbo*PV5yL1vzO3TA0)<2`&S-HtZpcl-WYy?^zHktB-
z6e_S`lZg)*9_0v#;1;$eqdi`=#YRwpu*F88DsGD@Pe@Do>afKuPU<_|90IGuzU=>L
ztKHwMYM+fk1>8OxgI0%qwiQ&s?ISB{X>}-7usR&d{;NbA?W{UvW6<hw$i|@e!-s4;
zXmvP5cC4gxgHn1w+?ZX|L0hd<HQE@tz-Y8F=>2e`X^40D&;drHiTirBB2Do2_Z)k(
zOdH+zoDI<e5a(<Ny7qm}G(<&H%CCK&Gdq^?d*`JJUhG~lm5N|nHnU6%ve!Cmp}t^P
zDMoL2FPQQ&KBR$l!Ssto6C}*JU}Dki!Fz;*)r+RmBiLSGUG1zDRf1t*QMGo_l$BN~
ze`9;m40e&pMmzqCX4mfe6C4XKY@66aU9=}Fn`{JnQ`=<sjNa5XnT9x>DCKWzo6L44
zba@i~#n8UOzUrbqT6x7r$OFO^8zBz}S4_EMfeLK6V&YCdtv{s-u3uhbe=XN4s;=1x
z`9Qd4Bjf|&nkkEMr~u)bX-4!ij)1$FKbY+6a;<aa4>p7Wh#zbS0}wx$@=8UiVgTX?
zGZNGPi$mbz<`DKoh4ymgknn9+wgJMB@a@T@4G@NeZ+D{&5Qc=&jlmqjL${T4yK29#
z9Bw1vw!CY2SRSdCDjpyV4~r{?=(z_7!^0gq>5p&(FYX$%WnHz$Do5G~Uf3|ww!sU8
zk>T6D@B(3E7`>pwrc$K<m*rURZrXiSqilo%AdIpR3V<*wEK6Rf0AW-Z_io3FT=(Gw
zjcxCyO{f}cL-+tO)`su_Vr*D$Axae=AjXDc#n!O(qpHcW?lf#C+ZcXeOb*MUu2k^@
zV{$m3U!;ZQeqc-v<036TbSzZ@c-z6A>ZyIwr{0FZ$+oLLEN^u{1`zdO`K1L&K-7ov
zrNugI$N-6Nn3ji?ceB5%)OzL&!k^X%3Br=)c5i}!Sss?VNT>m3c^JD$+5>>Z9$<O6
z_}#ELHzS7F5v>Tje#bYvrAi1jNSJSSyMus{tHW~X2MP4mVY%4_3G~%rY<7<dcNgLf
zc~~h9e!@DfSG%!E{j}M=z_3g$gsJb@rWOM1J=@emfW1eiqMBA*9SrxTuw!TTmHyf$
zXWphTUcU~fMmo^KzlGg-hgMUy#exPCc5bm!6C|LwgbT!p2}nS13F83wI{|^GJD7H-
zcBR)28-kAKc39SR;AQiUu>61uBp`N#aX#Hh)^#-8pM@PqvsHI#C!MW73!}<;8pd@b
z;|{V81GQ&L4u<7>6fn`=!Em8CYXAwTgJJCMsATI%Wx)})exUYTuOpT*V8WOqmN6hn
zC@fcgkU%&R#>zh$SFl~3aHJJ>oMTVlqmA->8OGtj&jH+tY&jWLJi+@W&a4VB-@RI|
zQqZDO!c#z=49ju^Bp^?QQI32@F6u;9on^!B)jlshYwM61XTzE}+JX#p&W3Tc^%Sfq
zGu#)#juGtj`?MzuE|3*87nQ*Z_r<XCUDy>I#O?6juRT%?j<5sIfqBug10*mnk{y(=
zAd#>a!=CSuu=KKs7)V&deJSi}3X7LTk_WwS!t!O2WMRAdZJ3TEXksm+E?o^P1;OG7
zJ9EEQS^~l{f;x6JEZ<l`5@1)ucw<E+NEwxL*IB;@v^$@@4t>7%fC-iBVV`)-3lb{V
z!}4|>NE98{!|6wO*+?Y6xO6?7`3Wx@C5Ot!>){6<;v=t&Aa070R}KOhebX9wAko}S
zYvh6Cveq$E8P$HnBm9`@mmoMLhaE`d((s6!_(1|`ctp++Ab~VIf?<d23_1CRdt}5h
zCc^J3<<L4cGLjSEd(eE!r`Or|hqO}j^@zgzodYJE^LhmR?uV^sJ~?F+JMxe=z#J8k
zA8>#PnNbn!_;JM@GN9gIy&l%?iM$b!U&4S%+z7_k4En0Tz&<$Qc#|!7SbN)37s+W&
z8~q%EOqc-N*dJN1AKW4K_TQQttmRKMKb!Frt-{13UK^7j;3h;cLLTROFl!QP`ib^`
z%t;ZsYc{x9lOos$VH`pQ8dKQwk7&=CQzBx*BPMYpcwu%2mw~UQvh$B<cbQWo^2M9M
zH@;INm|bw*0~I*Go;~!a)-O_T<Isk;o^VFeCaJUGo*QxO%C3A=b1V6CBbYw;*?ec}
z-~z-E*Vwy&K;RZcWRikJFBU}P-UcL$SrEbAW*gO)oyqkpvQvMmedMfK5s|?M7iqL2
zBG+t?Bo!$TwIN7gtcWC%`UaI_z{(G^Z~si|>#F+D#-LN!4<mBV(3xlchY^#1T7Y&b
zZ9j})-KR7D&O~jEh_g}<(A+A$K+n+n)`(m_Kyq0ti93_$J{Czl00gIQ_k)u7V=IaA
z6i6RiNemK5A5#(!BlmVO+y^3#E7=84X^N76AfiTvd%KW(4@vie0OTRdy&wU3$Z{`8
zKprCZ@;l&N$h{}Bqn^>8a#o(OTmvpTcp@Ut)IpL|Br56vkia+*$+V>}mt0*aml|2(
zIqiS?H`)l~+{TE!#|jxBG)6*Va}5#*jS+0FU#B2<A@V{*2?ehy*^|#{{haKHUuo?h
z(Ie0PX3$H&9{imA@EdaQ9t6e83lfc7h{$tSkZ9yWBu`9bAUP^_Tol1B6o!j3f*_!I
z(TX5QXkN4;2ojnXBUS{v(BbT589@*Lx@_A(hn1JD2;wP_E?W@<38c#uL6j1TtK4w^
zC*l~#e)Svei0?lUd=xr{mZfq8(0wza42!yge`D=&4$g}1$0qlGpVtOggD<9YNCEq1
zL{8@*fqgR~FCc)#nsPHzFf1z86k_l-<yOQsG%D5<$%EdIs9aMd3v0@2QCd@|$}Oj8
z)kKwtf_FsN(=TWbJ_SPf9FNf7ny8$1L2^-9^n(O;O;p|;2Z{BfCK`E=zq=$-ywj<P
zMjz1ki>@PkMzdDG)ee-5j^6Gm88AAkiFdE%JY7ad@d}W(Gv$;mV_E)-+M~V3+ICSc
zjE%~ag$xkJM&-BrAW0`$(N(`nH*+cs_kyV7Om@zT+7(y+f+#*y;uBQ`jikj<K2dcA
zfvzsLi~<SB#Zfs?fdu5@C`Qs33aqMt$?la=Wp(y{U($Z=tj3=rY<K{@l~H*w2PE`X
zM&-R6kO<q#XwhnfjlQZS28GSFDk|^gNDln8Dk|^gNEU!rMR6|&pB_OE0@*0;<rMLI
zIgh=f6_<dvj3AF@qw-!3grS>_;$_l{To+UWoA-+L`;rD*g<RMWl}B<F+=UHM9Lc4)
z3P!<t*7sE{^UV6FI9Y`aG>+Cs<p=}`-1SlUh7TmNVSO}or|c+wNr0W{`e@-Dym}x3
zdFZr0+OI#~l~>T%+sHnCRqIi;(F!)0#I=$TB%0kAl^ZUQXm(>1$LJ#|#VTkj+QRz(
zNvo~gVnguLd>ewF=0^>2VgwaHY>DE;h)&ol=(J`VQ~#`WsM=;D&}q#!8-Y%1wnYsw
zNkRn(+oG5xXVVl{L6y_)>??oP-f@=gwtY+oG`pkn3==|7+8xE(&F>;r;5D23^Qdwp
z$_nSJo#=a}zp~5!t=*~y(+Vsd&wL)0lL9n=@Ojizzza=~$ga<$z9Vu{AO@cl4n|#H
z$Vox+pm)fc6eJ6i!eKrs&;(jRCq2ib_V-NX;J~wBi5q7iVaoBSTn9k{@_5vmMJwo(
z=M=^k-gQ3>0{L^w_9dP5oU(mMXFaE)vY3M~kWNKqG1ta$pNl#!M@2D5`~7p#9D^5g
zZD{;{6;-1Ag+eh%JO$0?ksOd1BVW-xaxY4nHZ&wIu&4f}-EUri4i&(}gv^B~wlTO|
z0ut1}*^a+y51Rju%Bl`b;zm)`{fx`Nx=XC<-?d+um!h&dY{Sc^OVMad;-I_VvK4;^
z&bLwdJ#8EQzTn#^US;7|4A2&Q@Et3v*1AT%i^@tAOtke~6qV=-H!4Vv;jW1}>a(v@
zYaN;yH8FIYK1}sc$4AD{@%y`}4-|t$-$09wg9OOP7&?w~ehA}XElUm4`k1vbc^L~#
z$kfI#SaG}v8Bn9yh+*2}=4gB<%$)-!abxJz!(0X(AH%K<(;hL$#H4dPyyIhHa87?N
zgN~15FAUf2FvrE@SJWQf@o_PXP^v9G)bTpDYq-|Wtc%I|6HK&K7eoDtB?&S}wTY}`
zg!Y&@F(&I_Fd;KBhI$xBE0Do3#a9O-wEN7-whVotI+<iJlp%w0$e3QEbud{>*27>z
zhQ%-^cjhuU7oEm_TBDUmrrG|X@3p6qfBr$Gyw`Bgj5!vwB{kZb)-z+c=SFexQXFQn
zKaSLXYR<B{3no-&QFjM&8MuEAJ2g_f*PLUS;N|Y0Lni!<%Rplud*F4g+MH*F(aYUG
zkHXlO%fS5$*!kDB{^kP9ZC>vF1>`o|#DzU@{~~r@t@dzaQA~b}3?|SQ#bR;&YpP1R
z8t!E=$3FJYTJ1vqvKXooz8H3;zO0Gy#jqO)1Zho7PCFpci8V2~7=nZ?YhqXo>G-oN
zCD>YIBaT1mJ`I~WS}U#uL(~v>46L;=Swn#2;_|`|NMNm{Uees#l~S%@${Uz^8*Bi|
zhK87Y2?`MaG{lO<oez)zXo%s?2meiyu0(#Aeen%#jI;E^m|UyCh0=#HxmJNBDGKiv
zS~R+n<F>QZSZ!O?cDr3F8@I>gxh-S>u{{<PRV_$BY>%O;rTMZeW%bUO*fM~C=1v)H
zdIrs%F*#L&gyzneHC1+{?(K!=F;(6T0;cS>ZJ>o~ukAcqxc0{6R0&}q?Tulo9I7I;
z-7r_i93$h-;JqxmK=WqzjMvUK%Rd*h_72@B$QMMAJA(lB1uMuPfqlUWGDu)wpdiy-
znr`Iui;PXy29{j3RVbDhWAgk3GElh~!?{Oqu7X&8%UVv+`u6?S>QFa+OXypxLm+|h
zZA?~_Ac6303>D=+sLbjH(*1o*xe?2bo1%4bR^xB665<IIzmLh45F`}8kIC{FBv!)j
zV+A*2qC6%BUkR_pTtCD_c`SL*yB?F}v1DN-{7;O^V~T7y%8eoMAFYJoAYx#Nl@KIM
z84{P_1qsL@aVxytC^Kr}JiK>-09s94jt!9fp&T0^fm9Qh;ROk#nmEFXySA?GhI>@p
zF$>Y{P0?+`j!)Cd^G3zhxER6RDY#=;{z7d!`=DNPmyC%^XW<EO$He9M1qs|SafJ3y
z=wNpWK^<$V*ZxvcXRA<X>*AXD0s%5msf*(a1bQ9SordWoHuX*I@sde#c|-^%R3^m>
zMNI?}DwE=<iRcPRccK^zP1pLBFuN6sB8zL{Z6IVwD2~~iJl~x>U(d$R(?aF=8$PeM
zd=3(d^_I^;Lb3j~&%2Y)XG))g0M1Oy=OFn*>2r`knrZnQB#>s3&wmM@_b}Y=#2uf*
z=MM^>m%Odrk@rqqO$wj)AfL|{J~wB;=ku+u;R$f(TRsN~-1+45w&+?9a@8XC@C>be
z$s${Ye7-0yhZAI=vM7$>^Z-|Z&zG`AGqi_Fm)a@>wA2by5AO4&6sFzuuB`_-y&;>P
zsqIy&8Y~Zh3lB8Jr3XL)qaiK}YLKK9$NKdZjlmuig-zLtIogZPKAUU|I?LE(V^BOc
z#pT;e=m29=9P1Jv$2|}a_x8B5D?4_I*1=f~8roop!3+}G+v9RDgM{|>xE#zNF_^c<
z3wFiDU?v71%pb*FAIHUDmOSX~h|9q&Ss2Va<JMsAL38aMN~vgvJytS-iRSlM$pjKG
zdu}IF4=OYch-4Z70`53qyMeX^2W&Ucw%~x3Ob`ar0ZOJ*wDk5g+=t_iORQ*t)|huV
zu0})>^`s;^K}j^b<b>rDFadSK${&z`IzjnE$<UL+ev+M7s6AA9(lQ227<1Ax1|$i^
z4KYoD1j5NUY7TnQ*pr6vY4+kGyl6aaBanYi$K{v4kO9K!ctX7P1PO%Gae1S#CsF6b
z@WkIxJZE_nBoxnC9tBCFw>{dEQtG1cD0^^;=I(XTwt({LqTL6|tBaOHp$MRh<j}QV
zIJDAm&nR}hmz}so%j)?vimhU%k~})Qm=`nUAOJbLSSA}tK+Z0flOaez&Mt;ychcu`
zmDJ@QinHz3Y9D*be<+rdJlLEcXv<H|K|<??VtfL{uU=Kco9^KWr8eOTu4du+YAN5o
zW%uvW{LX4T5Qz>kpbSsQL<b3!;R%`OAd%?969u&ik?6$Wi9RCXdOaZ$UGkt;laPrn
zSxEGe2}<-CZFoPhbS_OO%M-5bZ+C0cwLu_6MOMkj|I&mU{~%%1(u7=fKmvSe0%bqF
zy#NWLmL}rMVHEv<0x@6|!o4gZU$<3KJXa<}@dE<SRwiycjv}}+Ay-E{1^UW_wK`VP
zOuaV2S4XzuFj8TyZ6-|;Yi%=Wl2~h-Nt49d1XAHVjjbxfy)NPSjD2@l`zn83!nzS%
zMVYV(_;eTz0*ITeXn+Lbri9D{kU-p&Kqh=nMPU`iY8zXBL_1Wv&DNnj*p|@vWiyh2
z&bEZlufHL5FsgR4El0JnB|Gu84^NgV9`&7x=Hjy@kkHwgz$G(U<*JDKgbg`{Dd`i-
zYha?8Pb{y2B%#}0t0IT*7hW3xf>ScOAkoSFmfJuAX}{$*kU-i`Zkw&ZZM_Wl!Gz<x
zY|9f`)R})UVSRnti~M$6_^m4lKpwYz01}YLEx&;T<Z<%ba#}EY!Ef$U3FWJ7{=c+R
zXEpv5*^dX%J7r}*Na&rivL7T8?Np-RE1CVo;MspV;W{U?U-F=L#>#%lLiV5K*-t+0
zMU&gti67N$;2<l(5|bfFnDVvdUyy+O`nG?25!odCdlv}!x5-LNkZ?wm<zJ9MYO?$b
zlB>eM^mS5i!+ka3IFxh-?_>EVP_td?rMa2*g_g(u>y*|$c{PDWpe23@s5h>b{U@Q^
zO1Sj*=xSMSd9{r5*oUXI?A<>kTzB!aH1P~QypeGA{}Bfb-z1KOH#Di#BwhOdSa1jn
zvDl{5+Fu6_Oa54wP6LJ~UA=8Iip_|m>yF!Kqms&4py3=>T89~rcx=QO?bGVfNqO;&
z8%OScBkB6B4Mz?glXU(3Hr%+RG7)h2$ym`>%vO>`=b{{i96LVg61Ua_2e@@fSA~sB
z-ky+jMZ4byo|07R0sMjmj2{Xj7W@9J_Ix=@x_a5lv@xEVboKcW2XND<NxmoUO@rX=
zq?kNFAntD`Wio?=d2c7><N*?@ZznMb_^plJlwY&i;IFg^WwUJ^8UVACa`J!-bY>?p
zdC*T`_9m~*O)3ViB<(n=Wvaw%4K~^ZUrZ(-fiX8JClipsn4838a*M7M_6F%*pHx1`
zjytd2%o&6~Ef`AM^+`GDLk=+OlXB7r37GXsIq8GMSX`fse~=WDJ~70kzafc9e*|49
z>rIo;?(Dz6(V91_+-<i*)Bo<Id`$x(w6i;zC&nE}w6i;jB80|iZ|d4U*6FeqE!~%t
zV-rlM>`TfO10+=TC9M^sHx1;2^M_p4oV^a(t<paEpxryF=nmSwql)fe5`%JXON`1s
zhWq=ZV`g^!7403j_xmJ1)g4C1wtXnxH<OAt_#HdmPETgvx`D&}QgFlshUb92nbi0V
zU=j!H%_RNO1Wo>ZC^AD?;+8hIbZF|f4#j+EN*48yfzHqriuzHaNd&z%`~5BL4QHp?
zl(=dPB!a3<6^LIj1qr3v6r!`8H>BbX(%2NfKU?F}w|T~<)K>aK+yID;Pq|8i{n#Lv
z?qTmJdiOFg#9fCzJm%w51!)YH95g~PAD?Ph!mkkbp>R$}x!MOygfgn_;xaJAN{7cV
zX+p{?c6T75JRybaL3GWx4+U~k%2gKZCX~lC(>s)bA%4jSkD)v%<rlA8K|*;_3a?w~
zZbBc5=#-Qz9jp+_ic2pk0Ym(786HD<N~(=`-wP7TQ&PAKNOzL^P<1|)J>k-OmrYH%
z#NB!@p)xgP(zHN5r8<0Ss<M}K6HW!|Q?7E$O<%g;CNM;f_Tjhe>r;UaQkjnF>r-W2
z__gUi^fAnIQtl{>eL6=^m4RU?(+T}_TbWMir;{>$D&L1r)!$CJItBX*<y|>?w+>*4
zmza1A<+oEl@vAr>q5O8Lw4+`}Uw!p8+$&O!BiSx)eS9-xMG7z6>3(WoWUYH;N?FYg
zXnN0T{3Z76-~(-Cs<ntdNT97u;ie1Kbs#asSEhoiQ{q(=G58yrRVmz0rb<t8kf5tl
zc(q2qRU=t+<zrQ<S8qK_3w~cp)`paFPjG<}$&T0cGUpQ@#k_-uh;Bnlz8eO~h2?J&
zgM?8HDSW~}fdYxpG^8p9(yv)^l0WWxw?0&~1Y<U4O<c}*KDE(qg0gR8N=|Kk`QX`@
zl6z5*z}T3=UQ{$eXTlp(;WF6-e+#oQ73rkkqDyLhX#zcvQohK()>8j_PBs3tIzkiZ
z0lO8NKo8ih&|o@1tqAYZ1bQG9{sP{mJ3oLG#mwg^*Wr{X<s}b#2UD_?mn;-Bhf-9^
zpU9=t=K|b~N;$5x+BW)e<I7Y|h`;_QpxNqQDWx5M{lR8<bhinTkIx)Dgsc9Q!s!df
zCrB83l6~mW?>0}S6n@W{n2<S{!ae7{Tn1Dl%XszvW@AceOYVXUtxAn4Y;@?bynuXp
zijDH><>slBQYvNWtBF&oPGxj`6f&4dPP3z4y}~@5QuvT3CS*>hI&{>#a~b&Z4C_>&
z_cYJgZP81BGt`!_2Z?i*jVgdWXYID=CBRu~3%L(ijQ(@%e1YC8d@dz_{uNBfoJ-*&
zKK%ME2_fQ_vUmIRz0UBZl)}d~aUpdng&(v2)WxMRu&-si1@y<1@HN{edJ%AqY<dVo
zupfTDG36M^mW1>NjT<TKGI}Ft`q2oyl~P_~EerKt)%Z(H2H?Z(w^9M|bvH<O?^X&Y
z@suMVkt4TK#jmBs2qXp{fkV=A1WFDp7?PGFP_k$Q4oPDKUZw@1ABDFjtt5h{oe{R9
zP`}g*l*n5=gRg7Sa&&;?vhq$KNZ3@9#tR($TC<YlGu)%ojydf6B7K%II-O(kRP#})
zy^&T*MXK#Fk!m2tukGR?416OEchfr;AK5a7eP`+&%rR+&f2u@G$c#y2oKuSUD5=J>
zzG0-uSR03P2?rZ-$iT31Y;ss{7ao_EK?4(-<I)J)NL==T5OQrs_IMc6Rn?5N!VfBl
z3#l1t98^#ag9Ox!bot%<H*$%Di8Im_chS3aJcfT}vP7|7V$Mv<d<7E_Gt<b|-*Xw{
zBHr{A>wgT-N-JF@F6H8^bdR3;Bt!u~NXFUhR<S-MJlnQ~l5sZK@;DNxzu}&jcKnmA
zPUw#%=B4qO3RUa<QT;DTD=X42{icG#wZE+XiI*)+>VI=qEKR%m@j6vJ1Lm@{>yJO;
zpo`1XsOf1@>`w`~Dy^(xU#9fRYWyXB?GJqPd{w$oETtf!wJMFPQ<RV(k&vs>sWmbo
ziNO<cwUv;PgVtAD2`O2WkgF*n`QEudlED3bT3MHN1-G*4X?@=_phQCA8JzikT7I?)
z5;nb`j`7I^Mo>b&pT+<eHqox|{dDJbu!$BWJcmsNENDo(I_gtt??1qBZ%pIod-r5?
zmbWpDpT(-9)nWi;?bhs{+v;tc4{c4$f(%@=w>2$)X%Zyb+nPoJP0IsFOcq<yMip<3
zNYuStqD`g#xqyZKuI%A<`p=xzyKGqM#;&wHFdx9Xu`7*}SOH55+pct*`+3ChlwgVD
z5kDCyIq24|bZ4t=E`+vsrF-A2U!@=N_8ablX~)-TXYee3$ou)1vnxyRR<HHJw7lQw
zr!F62%R1<#=ApFw^=&YLdnk=pRk%}|<EH`o1-srse<J(^#x&1mFd_2=xxE&hgb>IR
z*;hO2xz6wjYlwnNY#O4=DdYV#MjP3TPWrpy#<cvwXD}hun8tMq`ad`zgfV)S{h>_X
z6F!?(c<K=oLT4%UHVYvP!VB!l&idByg|s3rX8QRcypYE0@IDCh9ftc-+Hsln@1plM
zE~RmehjRT6%Jpy4%6F9O71bb-U7$rt1rojeHZ6Zo9waROHjTq=$}W(|u5Z(^?_|ak
zgJ*n`mGP1TW1Fmumn_QoCd&9H5SReA6luqhOfzTj0r95bsd9aQ@qId{n9raA3e2^%
zQZDW)fP`6~#e@YC4P2v10>81D6QBrPXE)3B?&0fcr5leBn2@=i#*0o``2rM)|D@UD
z6?#?pKh~54E@xv(qId25e_Qz>%~oQC5C4!>DkKsG=!bOo9^^m>AwD<K%;<_m^oBKK
zgA1V>G-K0sg#b;GH`DA7UG<9a&9qV}k!Y5@neN?3@6Uzc`dewXxvM@Pe#;i3Y4R2c
z{T5NY({K;VI9|^<gTK7(sOIdBZu))3unb;QQcUlpn2yLOBiW!{h$%<_gBF+1LBc;H
zGBL4_0g0H7$h2$EV+s;69g!&+nGwq>F?dXCGICj!99UJ8k;|%NQA}$xi0LI-4Dq?b
zn2h7C9N7A$lYLXAds*p@95;KhT-VrZ-Sw@l$7FKCJibAS@7O8*^fdc>53G)3GYT)_
zbMOG|jLnpGpj{S7m_DA(hU?AowhV=KJjoPs8BlfXMh`t~)@2l48bgsHTbJq9UCN-(
z6ByzgHYa3cK^NpBZ$btIT`|W&U?;La_tcZ-#EcAnkjHgm2EnImF+qy!WY*AAzdt%T
zBUfuM(bnV)VlV80_orl($|*f{e~fR&GI9wF@;ez*GO#1U(XawC_H3mdGg(GXE%<2|
zps@_5mIRl<OgNRzsnk>E)QrOaQx2Fx#n{vguIvdJekbEB$xO37!0%*`2cjGYd#QR>
zQl-bu`ivr$di=@*aOyMono3xXTS#xR-&es)Z)Oz!B^cVGU(kOugD=4Z4!$Lu&K3hF
zJl*aW{XqWoOpi+aS>)_phI?klF_(Q^r9WfL%-{#RDNFC7ES;TE-k~h5tj1sB1|#?g
z^6X5JxK<Amv6`L1EJkw<NaW}2O!^&}pTyw#ImgOR$$<rPto)QL%Fj8JpGR_#pZIS_
zR%RTVke<78BCPMZoM5)1x89(%UTLLeh|+Qu(z4WCWn~+9Kwd@JMs-$*GIBM$ub<w|
zTy6OpOvtPzU!%Z<45&41az9KXYcjI#1CzKJDzj<H2+?BDkiFbbf7od@SkVU;QVkUS
zzFY`7xsE+IK<^)3XL&osb8;PJ(Q5(;Nx3n*b%5T?S-jD1kFs(jwf6vGa<}2$l5y-n
z=lk%!dzkZ1y-S-d6dfwc@22Q%%P1dZSgS(4E33X!cUOZJF~U=Hdz%#_kT8Cm6(f*{
z(Y8$bBN-!N@EC2kVk9}RXuB07$)Xr-=P{xc8~<g=zKr8@iczyj7ALr$IgNdpoFYDJ
z6jFFTg{wqeoi`9O2S`y@;~~&LrT)@L#s4gVgL~FxpniXNe@52BU_xephW<w$T1E>g
zB%iUF1NAZHXSNXMlF%S7gRUN6_uivF8$MtSib5Wy0~!3_1N~=H0}c1#jN>@lb&vjY
z<8TJw!BD~vB$pn^D98A;%>Hn%?tUJm_&^B{Vc?OB{PkjxXy!-;SL-P2LBgX)GRb4o
dqr~7IJ!*MWa?pXJmPaLvJbIKJyI1e|e*yNiugL%a

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 07d66a34..e05f5f33 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -5440,7 +5440,12 @@ type TransactionResponse struct {
 	AgentIdentityHash string `protobuf:"bytes,10,opt,name=agent_identity_hash,json=agentIdentityHash,proto3" json:"agent_identity_hash,omitempty"`
 	// Per-offer results (one entry per committed item, in original order).
 	Items []*TransactionResultItem `protobuf:"bytes,13,rep,name=items,proto3" json:"items,omitempty"`
-	// Aggregate cost across all items.
+	// Aggregate cost of the purchased items (those without denial_reason): their
+	// cost.amount summed as exact decimals, in their one shared currency.
+	// unit_cost is unset. UNSET when the purchased items span more than one
+	// currency: amounts are never summed across currencies, and currency
+	// conversion is out of scope for this version. A caller that needs the totals
+	// then sums each item's cost per currency itself.
 	TotalCost *Cost `protobuf:"bytes,14,opt,name=total_cost,json=totalCost,proto3,oneof" json:"total_cost,omitempty"`
 	// Post-transaction quota state. Tells the agent how much quota remains
 	// after this transaction. Enables proactive throttling ("1 access left").
@@ -8630,8 +8635,8 @@ type BrokerTransactionResponse struct {
 	// among the charged items. An item is charged when it carries neither
 	// denial_reason nor refusal; its cost.amount is added, as an exact decimal,
 	// into the entry for its cost.currency. Amounts are never summed across
-	// currencies and never converted. unit_cost is unset. Empty when no item was
-	// charged.
+	// currencies and never converted: currency conversion is out of scope for
+	// this version. unit_cost is unset. Empty when no item was charged.
 	Totals []*Cost `protobuf:"bytes,4,rep,name=totals,proto3" json:"totals,omitempty"`
 	// Extension point
 	Ext *structpb.Struct `protobuf:"bytes,15,opt,name=ext,proto3" json:"ext,omitempty"`
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index c3f5de70..d3f655d2 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -741,7 +741,7 @@
       "type": "array"
     },
     "totals": {
-      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.",
+      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.",
       "items": {
         "$ref": "#/$defs/fora.v1.Cost"
       },
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index e4038629..c6191e8a 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -758,7 +758,7 @@
       "type": "array"
     },
     "totals": {
-      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.",
+      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.",
       "items": {
         "$ref": "#/$defs/fora.v1.Cost"
       },
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 5164a736..3b9cdb8c 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -711,7 +711,7 @@
     },
     "total_cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Aggregate cost across all items."
+      "description": "Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself."
     },
     "ver": {
       "default": "",
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 03bf058f..d15cba6a 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -727,7 +727,7 @@
     },
     "total_cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Aggregate cost across all items."
+      "description": "Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself."
     },
     "ver": {
       "default": "",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index a6fd4965..c49f6bc1 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -2228,7 +2228,7 @@ class BrokerTransactionResponse(WireModel):
     )
     totals: list[Cost] | None = Field(
         None,
-        description='Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.',
+        description='Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.',
     )
     ver: str | None = Field(
         '',
@@ -2255,7 +2255,8 @@ class TransactionResponse(WireModel):
         description='Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling ("1 access left").\n Multiple entries for multi-dimensional quotas.',
     )
     total_cost: Cost | None = Field(
-        None, description='Aggregate cost across all items.'
+        None,
+        description="Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.",
     )
     ver: str | None = Field(
         '',
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index e947f276..d91aa5ee 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted. unit_cost is unset. Empty when no item was\n charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -202,7 +202,7 @@ export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.objec
 
 export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost across all items.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
 export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 5f87fcd5..69555248 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2558,7 +2558,12 @@ message TransactionResponse {
   // Per-offer results (one entry per committed item, in original order).
   repeated TransactionResultItem items = 13;
 
-  // Aggregate cost across all items.
+  // Aggregate cost of the purchased items (those without denial_reason): their
+  // cost.amount summed as exact decimals, in their one shared currency.
+  // unit_cost is unset. UNSET when the purchased items span more than one
+  // currency: amounts are never summed across currencies, and currency
+  // conversion is out of scope for this version. A caller that needs the totals
+  // then sums each item's cost per currency itself.
   optional Cost total_cost = 14;
 
   // Post-transaction quota state. Tells the agent how much quota remains
@@ -4200,8 +4205,8 @@ message BrokerTransactionResponse {
   // among the charged items. An item is charged when it carries neither
   // denial_reason nor refusal; its cost.amount is added, as an exact decimal,
   // into the entry for its cost.currency. Amounts are never summed across
-  // currencies and never converted. unit_cost is unset. Empty when no item was
-  // charged.
+  // currencies and never converted: currency conversion is out of scope for
+  // this version. unit_cost is unset. Empty when no item was charged.
   repeated Cost totals = 4;
 
   // Extension point

From 8f345fcb294541c80930b3f95e72cb04f3d7bb0b Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 15:56:20 -0400
Subject: [PATCH 072/164] Carry an offer's price once in the protocol

An offer carried its price twice: Offer.pricing, and the pricing of
the one term it sells, which the Offer.pricing comment called the
authoritative copy. The two could disagree inside one signed offer,
nothing said which one execute charges, and the metered rule looked at
either copy.

Offer.pricing is now the offer's only price: the price execute charges,
a Broker ranks, and a metered purchase settles on. The term inside
Offer.terms carries no pricing, enforced by the new
offer.terms.pricing_unset rule on Offer. Each offer derives from
exactly one catalog term, so the price is stated once and cannot
disagree with itself. offer.metered.requires_estimate reads
Offer.pricing only: an offer is metered when its pricing is PER_UNIT.

Catalog declarations still carry pricing. LicenseTerm.pricing loses its
field-level required rule, because the requirement depends on the
message holding the term, and ResourceEntry gains
resource_entry.terms.pricing_required: every catalog term carries its
price, whatever its semantics. The Offer, LicenseTerm, ResourceEntry,
Universal Licensing Core, TermSemantics and Pricing comments say where
the price lives.

buf breaking against v1.0.0 passes: no field is removed. The rules are
new validation, so a validating peer now refuses an offer whose term
carries pricing, including inside a TransactionRequest, and a standalone
LicenseTerm without pricing is no longer refused on its own. The
generated code, the descriptor, the SDK types, the JSON Schemas and the
validation corpus are regenerated. The field-level corpus drops
LicenseTerm/pricing/missing, and the cross-field corpus gains two
priced-term offers and a ResourceEntry term without pricing, replacing
the metered term-only case. The conformance cases cover both rules, the
license-term entry vectors move the term without pricing from a
structural to a cross-field violation, and the offer examples in the
docs drop their terms' pricing.
---
 conformance/corpus/cases.json                 | 112 +-------------
 conformance/corpus/crossfield.json            |  59 ++++++--
 conformance/corpusgen/main.go                 |  58 ++++---
 conformance/validate_test.go                  |  42 ++++--
 gen/descriptor.binpb                          | Bin 674841 -> 678029 bytes
 gen/go/fora/v1/fora.pb.go                     | 110 +++++++++-----
 .../fora.v1.DiscoveryResponse.schema.json     |  15 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |  15 +-
 .../fora.v1.LicenseTerm.schema.json           |   9 +-
 .../fora.v1.LicenseTerm.schema.strict.json    |   9 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |  15 +-
 .../fora.v1.Offer.schema.strict.json          |  15 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |  15 +-
 .../fora.v1.OfferGroup.schema.strict.json     |  15 +-
 gen/jsonschema/fora.v1.Pricing.schema.json    |   4 +-
 .../fora.v1.Pricing.schema.strict.json        |   4 +-
 .../fora.v1.PushResourcesRequest.schema.json  |  11 +-
 ...v1.PushResourcesRequest.schema.strict.json |  11 +-
 .../fora.v1.ResourceEntry.schema.json         |  11 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |  11 +-
 .../fora.v1.ResourceResponse.schema.json      |  15 +-
 ...ora.v1.ResourceResponse.schema.strict.json |  15 +-
 .../fora.v1.TransactionItem.schema.json       |  15 +-
 ...fora.v1.TransactionItem.schema.strict.json |  15 +-
 .../fora.v1.TransactionRequest.schema.json    |  15 +-
 ...a.v1.TransactionRequest.schema.strict.json |  15 +-
 gen/python/wire/models.py                     |  14 +-
 gen/ts/wire/schemas.ts                        |  20 +--
 proto/fora/v1/fora.proto                      | 142 ++++++++++++------
 .../helpers/gen_licenseterm_vectors_test.go   |   9 +-
 .../helpers/testdata/licenseterm-vectors.json |  36 ++---
 .../transaction_offer_validate_test.go        |   4 +-
 .../docs/getting-started/live-demo-music.mdx  |   3 +-
 .../content/docs/protocol/ext-academic.mdx    |   9 +-
 .../docs/protocol/scenario-walkthrough.mdx    |  30 +---
 .../docs/protocol/transaction-flow.mdx        |  25 +--
 .../docs/protocol/walkthrough-academic.mdx    |  20 +--
 .../protocol/walkthrough-credit-report.mdx    |  10 +-
 .../protocol/walkthrough-due-diligence.mdx    |  56 +------
 .../protocol/walkthrough-eu-regulation.mdx    |  10 +-
 .../protocol/walkthrough-medical-imaging.mdx  |  10 +-
 .../content/docs/protocol/walkthrough-v1.mdx  |  10 +-
 42 files changed, 474 insertions(+), 565 deletions(-)

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index 90d9ed26..3d333e7a 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -4200,17 +4200,6 @@
       "semantics": "TERM_SEMANTICS_ENUMERATED"
     }
   },
-  {
-    "id": "LicenseTerm/pricing/missing",
-    "message": "LicenseTerm",
-    "valid": false,
-    "rules": [
-      "required"
-    ],
-    "json": {
-      "semantics": "TERM_SEMANTICS_ENUMERATED"
-    }
-  },
   {
     "id": "LicenseTerm/quotas/too_many",
     "message": "LicenseTerm",
@@ -4781,10 +4770,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4808,10 +4793,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4835,10 +4816,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4862,10 +4839,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4889,10 +4862,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4916,10 +4885,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4943,10 +4908,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4970,10 +4931,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -4997,10 +4954,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5024,10 +4977,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5051,10 +5000,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5078,10 +5023,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5104,10 +5045,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5131,10 +5068,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5158,10 +5091,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5185,10 +5114,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5212,10 +5137,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5239,10 +5160,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5266,10 +5183,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -5280,6 +5193,7 @@
     "message": "Offer",
     "valid": false,
     "rules": [
+      "offer.terms.pricing_unset",
       "repeated.max_items"
     ],
     "json": {
@@ -5293,10 +5207,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         },
         {
@@ -5324,10 +5234,6 @@
       },
       "terms": [
         {
-          "pricing": {
-            "model": "PRICING_MODEL_FREE",
-            "rate": "0"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
@@ -20384,10 +20290,6 @@
         },
         "terms": [
           {
-            "pricing": {
-              "model": "PRICING_MODEL_FREE",
-              "rate": "0"
-            },
             "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ]
@@ -20414,10 +20316,6 @@
             },
             "terms": [
               {
-                "pricing": {
-                  "model": "PRICING_MODEL_FREE",
-                  "rate": "0"
-                },
                 "semantics": "TERM_SEMANTICS_ENUMERATED"
               }
             ]
@@ -20445,10 +20343,6 @@
             },
             "terms": [
               {
-                "pricing": {
-                  "model": "PRICING_MODEL_FREE",
-                  "rate": "0"
-                },
                 "semantics": "TERM_SEMANTICS_ENUMERATED"
               }
             ]
@@ -20474,10 +20368,6 @@
             },
             "terms": [
               {
-                "pricing": {
-                  "model": "PRICING_MODEL_FREE",
-                  "rate": "0"
-                },
                 "semantics": "TERM_SEMANTICS_ENUMERATED"
               }
             ]
diff --git a/conformance/corpus/crossfield.json b/conformance/corpus/crossfield.json
index ea6e46ff..03e86bbc 100644
--- a/conformance/corpus/crossfield.json
+++ b/conformance/corpus/crossfield.json
@@ -169,8 +169,7 @@
     "message": "LicenseTerm",
     "valid": false,
     "rules": [
-      "license_term.reference_only.requires_uri",
-      "required"
+      "license_term.reference_only.requires_uri"
     ],
     "json": {
       "semantics": "TERM_SEMANTICS_REFERENCE_ONLY"
@@ -206,24 +205,42 @@
       },
       "terms": [
         {
-          "pricing": {
-            "currency": "USD",
-            "model": "PRICING_MODEL_PER_UNIT",
-            "rate": "0.00002",
-            "unit": "tokens"
-          },
           "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ]
     }
   },
   {
-    "id": "Offer/cel/metered_requires_estimate/term_only",
+    "id": "Offer/cel/metered_requires_estimate/zero",
     "message": "Offer",
     "valid": false,
     "rules": [
       "offer.metered.requires_estimate"
     ],
+    "json": {
+      "exchange": "exchange.example",
+      "offer_id": "offer-metered",
+      "pricing": {
+        "currency": "USD",
+        "estimated_quantity": 0,
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "unit": "tokens"
+      },
+      "terms": [
+        {
+          "semantics": "TERM_SEMANTICS_ENUMERATED"
+        }
+      ]
+    }
+  },
+  {
+    "id": "Offer/cel/terms_pricing_unset/per_unit_term",
+    "message": "Offer",
+    "valid": false,
+    "rules": [
+      "offer.terms.pricing_unset"
+    ],
     "json": {
       "exchange": "exchange.example",
       "offer_id": "offer-metered",
@@ -246,18 +263,18 @@
     }
   },
   {
-    "id": "Offer/cel/metered_requires_estimate/zero",
+    "id": "Offer/cel/terms_pricing_unset/same_price",
     "message": "Offer",
     "valid": false,
     "rules": [
-      "offer.metered.requires_estimate"
+      "offer.terms.pricing_unset"
     ],
     "json": {
       "exchange": "exchange.example",
       "offer_id": "offer-metered",
       "pricing": {
         "currency": "USD",
-        "estimated_quantity": 0,
+        "estimated_quantity": 2500,
         "model": "PRICING_MODEL_PER_UNIT",
         "rate": "0.00002",
         "unit": "tokens"
@@ -266,6 +283,7 @@
         {
           "pricing": {
             "currency": "USD",
+            "estimated_quantity": 2500,
             "model": "PRICING_MODEL_PER_UNIT",
             "rate": "0.00002",
             "unit": "tokens"
@@ -331,6 +349,23 @@
       "reason": "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
     }
   },
+  {
+    "id": "ResourceEntry/cel/terms_pricing_required",
+    "message": "ResourceEntry",
+    "valid": false,
+    "rules": [
+      "resource_entry.terms.pricing_required"
+    ],
+    "json": {
+      "domain": "publisher.example",
+      "path": "/article",
+      "terms": [
+        {
+          "semantics": "TERM_SEMANTICS_ENUMERATED"
+        }
+      ]
+    }
+  },
   {
     "id": "Restriction/cel/permitted_prohibited_disjoint",
     "message": "Restriction",
diff --git a/conformance/corpusgen/main.go b/conformance/corpusgen/main.go
index aa82f118..436cc615 100644
--- a/conformance/corpusgen/main.go
+++ b/conformance/corpusgen/main.go
@@ -68,7 +68,8 @@ func seeds() map[string]proto.Message {
 	// and the audience statement of a TransactionRequest), so a seed without it
 	// is not a valid baseline — seeds bypass auto-fill entirely. terms is bounded
 	// to exactly one: an offer IS one licensing arrangement, so the baseline
-	// carries the single term it sells rather than an empty list.
+	// carries the single term it sells rather than an empty list. The term
+	// carries no pricing: the offer states its price once, in Offer.pricing.
 	offer := func() *forav1.Offer {
 		return &forav1.Offer{
 			OfferId:  "offer-seed",
@@ -76,7 +77,6 @@ func seeds() map[string]proto.Message {
 			Pricing:  pricing(),
 			Terms: []*forav1.LicenseTerm{{
 				Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
-				Pricing:   pricing(),
 			}},
 		}
 	}
@@ -342,16 +342,41 @@ func writeCrossField(v protovalidate.Validator) {
 			"offer.metered.requires_estimate",
 		},
 		{
-			// The term's pricing is the authoritative copy, so a PER_UNIT term
-			// makes the offer metered even when the offer's own pricing does not
-			// say so.
-			"Offer/cel/metered_requires_estimate/term_only",
+			// An offer states its price once, in Offer.pricing: a term that
+			// carries pricing of its own is refused, even when the two prices
+			// agree.
+			"Offer/cel/terms_pricing_unset/same_price",
+			func() *forav1.Offer {
+				o := meteredOffer(proto.Int32(2500))
+				o.Terms[0].Pricing = proto.Clone(o.Pricing).(*forav1.Pricing)
+				return o
+			}(),
+			"offer.terms.pricing_unset",
+		},
+		{
+			// A PER_UNIT term under FLAT offer pricing no longer makes the offer
+			// metered — the metered rule reads Offer.pricing only — but the term's
+			// pricing is refused for being there at all.
+			"Offer/cel/terms_pricing_unset/per_unit_term",
 			func() *forav1.Offer {
 				o := meteredOffer(nil)
 				o.Pricing = &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"}
+				o.Terms[0].Pricing = &forav1.Pricing{
+					Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD", Unit: proto.String("tokens"),
+				}
 				return o
 			}(),
-			"offer.metered.requires_estimate",
+			"offer.terms.pricing_unset",
+		},
+		{
+			// A catalog term carries its price: absent Pricing is not free.
+			"ResourceEntry/cel/terms_pricing_required",
+			&forav1.ResourceEntry{
+				Domain: "publisher.example",
+				Path:   "/article",
+				Terms:  []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
+			},
+			"resource_entry.terms.pricing_required",
 		},
 		{
 			"License/cel/digest_required_with_uri",
@@ -499,25 +524,20 @@ func writeCrossField(v protovalidate.Validator) {
 }
 
 // meteredOffer is a PER_UNIT offer, otherwise valid, whose pricing carries the
-// given estimate (nil leaves it unset). The term carries the same price
-// without an estimate, as a publisher pushes it.
+// given estimate (nil leaves it unset). The term carries no pricing: the offer
+// states its price once, in Offer.pricing.
 func meteredOffer(estimate *int32) *forav1.Offer {
-	price := func() *forav1.Pricing {
-		return &forav1.Pricing{
-			Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD", Unit: proto.String("tokens"),
-		}
-	}
-	o := &forav1.Offer{
+	return &forav1.Offer{
 		OfferId:  "offer-metered",
 		Exchange: "exchange.example",
-		Pricing:  price(),
+		Pricing: &forav1.Pricing{
+			Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD", Unit: proto.String("tokens"),
+			EstimatedQuantity: estimate,
+		},
 		Terms: []*forav1.LicenseTerm{{
 			Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
-			Pricing:   price(),
 		}},
 	}
-	o.Pricing.EstimatedQuantity = estimate
-	return o
 }
 
 // ── baseline construction ────────────────────────────────────────────────────
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index 02445411..9ebcbefb 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -125,14 +125,20 @@ func licensingCases() []validationCase {
 		{"pricing free with tolerance rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0", EstimateToleranceBps: proto.Int32(0)}, false, "pricing.estimate_tolerance.requires_per_unit"},
 
 		// Offer message-level CEL: a metered offer carries a positive estimate on
-		// its own pricing. A pushed term needs none, so the term stays bare.
+		// its own pricing, and the offer's term carries no pricing at all.
 		{"offer metered with estimate ok", meteredOffer(meteredPricing(proto.Int32(2500), nil)), true, ""},
 		{"offer metered with estimate and tolerance ok", meteredOffer(meteredPricing(proto.Int32(2500), proto.Int32(0))), true, ""},
 		{"offer metered without estimate rejected", meteredOffer(meteredPricing(nil, nil)), false, "offer.metered.requires_estimate"},
 		{"offer metered zero estimate rejected", meteredOffer(meteredPricing(proto.Int32(0), nil)), false, "offer.metered.requires_estimate"},
 		{"offer metered negative estimate rejected", meteredOffer(meteredPricing(proto.Int32(-5), nil)), false, "offer.metered.requires_estimate"},
-		{"offer metered term under flat pricing rejected", meteredOffer(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}), false, "offer.metered.requires_estimate"},
-		{"offer flat without estimate ok", &forav1.Offer{OfferId: "of_flat", Exchange: exampleExchange, Pricing: &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, Terms: []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}}}}, true, ""},
+		{"offer flat without estimate ok", &forav1.Offer{OfferId: "of_flat", Exchange: exampleExchange, Pricing: &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, Terms: freeTerms()}, true, ""},
+		// Offer.terms carries no pricing: the price is stated once, in
+		// Offer.pricing. The metered rule reads Offer.pricing only, so a PER_UNIT
+		// term under FLAT offer pricing is refused for the term's pricing alone.
+		{"offer term with pricing rejected", pricedTermOffer(meteredPricing(proto.Int32(2500), nil), meteredPricing(proto.Int32(2500), nil)), false, "offer.terms.pricing_unset"},
+		{"offer term with free pricing rejected", pricedTermOffer(freePricing(), freePricing()), false, "offer.terms.pricing_unset"},
+		{"offer per_unit term under flat pricing rejected", pricedTermOffer(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, meteredPricing(nil, nil)), false, "offer.terms.pricing_unset"},
+		{"transaction with priced offer term rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-p", Items: []*forav1.TransactionItem{{Offer: pricedTermOffer(freePricing(), freePricing())}}}, false, "offer.terms.pricing_unset"},
 		{"transaction with unestimated metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil, nil))}}}, false, "offer.metered.requires_estimate"},
 
 		// Pricing.unit format: empty / bare-dashed / vendor:namespaced.
@@ -169,6 +175,9 @@ func licensingCases() []validationCase {
 		{"resource entry title over cap rejected", &forav1.ResourceEntry{Domain: "publisher.example", Path: "/x", Title: proto.String(strings.Repeat("t", 513))}, false, "string.max_len"},
 		{"resource entry negative word count rejected", &forav1.ResourceEntry{Domain: "publisher.example", Path: "/x", WordCount: proto.Int32(-1)}, false, "int32.gte"},
 		{"resource entry 32 terms ok", &forav1.ResourceEntry{Domain: "publisher.example", Path: "/x", Terms: enumeratedTerms(32)}, true, ""},
+		// A catalog term carries its price; the rule is the entry's, because an
+		// offer's term carries none.
+		{"resource entry term missing pricing rejected", &forav1.ResourceEntry{Domain: "publisher.example", Path: "/x", Terms: []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}}}, false, "resource_entry.terms.pricing_required"},
 		{"resource entry 33 terms rejected", &forav1.ResourceEntry{Domain: "publisher.example", Path: "/x", Terms: enumeratedTerms(33)}, false, "repeated.max_items"},
 
 		// Catalog request lists — an empty push or removal asks for nothing.
@@ -190,9 +199,12 @@ func licensingCases() []validationCase {
 		{"license uri with digest ok", &forav1.License{Uri: proto.String("https://x.example/lic"), UriDigest: proto.String("sha256:" + hex64)}, true, ""},
 		{"license uri without digest rejected", &forav1.License{Uri: proto.String("https://x.example/lic")}, false, "license.digest_required_with_uri"},
 
-		// LicenseTerm presence invariants (pricing required; REFERENCE_ONLY needs license.uri).
+		// LicenseTerm presence invariants (REFERENCE_ONLY needs license.uri).
+		// Whether pricing is required depends on the message holding the term
+		// — required on ResourceEntry.terms, unset on Offer.terms — so a term on
+		// its own is valid either way.
 		{"term enumerated with pricing ok", &forav1.LicenseTerm{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: freePricing()}, true, ""},
-		{"term missing pricing rejected", &forav1.LicenseTerm{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}, false, "required"},
+		{"term without pricing ok", &forav1.LicenseTerm{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}, true, ""},
 		{"term reference_only with license uri ok", &forav1.LicenseTerm{Semantics: forav1.TermSemantics_TERM_SEMANTICS_REFERENCE_ONLY, Pricing: freePricing(), License: &forav1.License{Uri: proto.String("https://x.example/lic"), UriDigest: proto.String("sha256:" + hex64)}}, true, ""},
 		{"term reference_only without license uri rejected", &forav1.LicenseTerm{Semantics: forav1.TermSemantics_TERM_SEMANTICS_REFERENCE_ONLY, Pricing: freePricing()}, false, "license_term.reference_only.requires_uri"},
 
@@ -371,12 +383,22 @@ func meteredPricing(estimate, toleranceBps *int32) *forav1.Pricing {
 	}
 }
 
-// meteredOffer is an offer selling a PER_UNIT term as a publisher pushes it —
-// without an estimate — under the given offer pricing.
+// meteredOffer is an offer under the given offer pricing whose term carries no
+// pricing, as every offer's term does: the offer's price is Offer.pricing.
 func meteredOffer(pricing *forav1.Pricing) *forav1.Offer {
 	return &forav1.Offer{
 		OfferId: "of_metered", Exchange: exampleExchange, Pricing: pricing,
-		Terms: []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredPricing(nil, nil)}},
+		Terms: []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
+	}
+}
+
+// pricedTermOffer is an offer under offerPricing whose term carries termPricing
+// — a second copy of the price, which the offer.terms.pricing_unset rule
+// refuses.
+func pricedTermOffer(offerPricing, termPricing *forav1.Pricing) *forav1.Offer {
+	return &forav1.Offer{
+		OfferId: "of_priced_term", Exchange: exampleExchange, Pricing: offerPricing,
+		Terms: []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: termPricing}},
 	}
 }
 
@@ -386,11 +408,11 @@ func freePricing() *forav1.Pricing {
 
 // freeTerms is the single term a valid Offer sells. Offer.terms is bounded to
 // exactly one — an offer IS one licensing arrangement — so a fixture offer
-// carries the term it sells rather than an empty list.
+// carries the term it sells rather than an empty list. The term carries no
+// pricing: the offer's price is Offer.pricing.
 func freeTerms() []*forav1.LicenseTerm {
 	return []*forav1.LicenseTerm{{
 		Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
-		Pricing:   freePricing(),
 	}}
 }
 
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 465840e866c6318e64d5c778d21c397e85e7915b..f50c45decc196fdf8c8b7a39b7312243b295a4b9 100644
GIT binary patch
delta 46840
zcmbrncbHVgwl+S!r+cRfoo6}>-Mf3pFoTjs21LY&Vmux_=c*%&$`QfCfZlWO^$e1c
zBoYci0m%|Y9h;;`5J>_G91|vxAV^R$625m;)t(KU`#s<9d4BxEthHCYwW?~>s#U9M
z?|yw^gON)b^c(0Js0_>==ziZb{DJJt!$O%+4|qP+UEgN@^jA+0cNNQCe*4($*efnG
z+Uu#ODtedpsp$P&W$E+1yLav0^XbR?_N=Vv6S$+ir^TPvtF-93^<3Y|K33QA-o5`}
z_3ULy;Tx?!&s5aN5wpVTUTJmVuu>+L?(<CdN?A#Hj~)f}`!u#v&y-iz?_<~5ph0W^
z+w_Fz`TW;hTv!&J(AQJKww8PJ%va@}1Ey<u=HnioRxVc)cJ?_>DwFEzxi7BlH#2>P
zd78MZ+VpoVzr8B<l3AyBMP;wPy}MRCUeU8p?|)p=zTOpo@7uk1MYq896)#kvHN17b
zp0dg<yO_m`UD;y0DXFWQLM^Fjh)TWJph0HFNY7(W=1kw_H?@E#nl-6mCil3f&1Bcf
z%x%Nfd9JD-J<87>xA|7Kskv2ch>@KYPz5hGGTZ7PyPbD+_lioZd!I_)+Z9%qdpdS%
zY<2HxJt5V3qSSg2-On3PGY(c|MUNhprd9t5KCDkPs6i6LrjeR$ta4_JR|~7~uupl9
zUQf$j=-H>2Ro>GSBWgX@>jfx4$OHvLpn5UDBvqpW<hxltD$1`B?e!vH93gI0Q1``N
zR@Yw7Q@haPy?RzvNX%Y6(f^g*pYB=FO;+BuSKl7ptZv;a%b)IDQPJ4s_4Mq80qFU(
z^&)>*S^f{}#b>&AeFjJsR>gl-bnV-x!s_}=dGDtyDsQx2?A}K_L5&#ZXDWJ=ahfn+
z0fJUMYvXg_Qq%OAx*QZ&!2OfQU3>*c3Ap!o+<(4;lO1sH^|+gxd1f|B1=Qa?%4rPk
ztExS;E}Iv-;9>bA)h?`Zq}q^m9;YVR%8_b4pY=TK6ed)`n^$hK6C>5uUaO+APxt4_
z(U|&`6%{6HGfHh$)d7n4EP1X1V_|m^+EP)`t&%3BT|$^d@4h`MV9w=u=8QqFo<082
z*m|;}Yk6PP=kPIM(K&L^G0N1LVx*~dF&w3RqW|tBtnw#eAq_HZN2@8<4KDQ936Hyh
z(?2fs*h!E3QPXetsw+F-IpuNBbeXRyrrWJ5SpoNj%!F6fkgMc^N72!f9^wM(g2(XN
zB>MS+Cloe2@iKULnSD7%y{+o9M=_<0%LA?_$1Xz3T=oPC?WaJv?1{zAuM7?W#m1{j
zL2RSJXOQjac&i)pp`dBk<(|%uh@L2Q=4J1S=iw*dAu264>NQo*F|8h$6+J6qm+Y<A
z)b>@F5GJ2Bo&FO;+w<v)nu%22=jxe6CfV4k>{T<zFt;kZcf;U_xociCcWLU<#3AJ{
z!L0f<v;GPn_b7yf6Sv3=8jwX`h{^IvT#W2Blcn($kIJo^d-r;_qPNw%yyvr(yfeD?
zdhYphw3=P_kP*tG315T6s>Z1a_Uu@7@uPS2vAR|C?oN*2souSw!-OpF+NZ}qxIJCz
zX4=#=SGp8xRk<|6=led{qkAPf23TEtpwez=E%V=?6;w4AGn%Tldlmq;;ln|6>qZlU
zJjqqFq}1wEPCkMbrK>e0OQ)U|LtfLFS9N=3Mb}<vaMxa)p2zHwV|A6m)Y!{aUb1U>
zPdFO0#)HARSY3Kr?C2AoxPm5i7^fDnw@0cW4<8pcW1L!#y*y4W@>poK$+nDBEp}v_
z+Q4P9g7Io9$~CPq2vSzmXR>?8tIbMa&xW*i1;#&K#jF#vNrCZ?S22B>aN7qpk-als
zy}o3ks`#W#Hi}GC{gzFVkXl^Z?7)k-1MbNze}dYv?PRrP#<^8+)trPZ;s(NGHCf*#
zfiPKZ)Yxps5imQau#pqg7G+Z$1P>6Vs5!M|5f2cisCAmyBoL;kO`Dl-yEp`dXRyl?
z)cKueI1nmv)ttC2qXJ@vT4W=tfS94yt8Xq8(;hCmT2+>-?${d!v*zeUtX*8sXN%_O
zY9={RebHTo$F>vFfK{#5I3W#K)zph#?xHlEunLx|*=B&eo1*DMjQoK5f$CnSdeHZV
z%|p2i)Pz_KOAUCIs_H72xjVs|rU%@YRHZQXStk6Z`iQp)2wMvsT3k|%fNY=+v`cEZ
z!2CjViV<)R(Ab*`)E!L*Xf=fl6dIrzMY52ALIbp9%A72mt{HF-(=t;Rszt7j!?c<K
zH8DuTv>F#`0%VvLNJ$VAAj7oUb<H`V=A3|gl%~{;O?0u<2Vu&g#p=j1aBPR11GG^N
zS`N@gX#v~7a)35UE3RX%(0LE!2Hev#-!E3n+-1`pj9iTFbgjn3a)B{jOE!`k<pN{6
zR(hSe%FQwI0`A3`KfkYbP|6lN7<s^0tkoD<9xxVbHAa>PjKx~h=H~CBRrwfX_OB1r
zlV#NoL_Q#@wH#abd_Yudsb*4*d_YudEnAzHRIY|M;NFnYma6@-J8f_<yujF?<=Ers
z1;z#~Xxpt97#p;NWe&^Z7`}jdKvNEB?%3Jf%$5~uXLr?ua>83Yj-f!Dq9`81%5a99
z`@eh7PJiy$>D~vOFtUxw|8|!DyB~VsK|}=>57GYjB?S(;>dGahCW;VC%GKTwYmEcW
zBZN}x4lG!e70;FT?9;t#Wn;NuQc#CQr4NG2KHYou1pn`Sd-W;D|GlsVJY6oCl?dM|
zDw}XGi&d!4<2}lstmr{blGYK^X>&c4?Auc;x!p3Mk5$uEg<iA`(uWZ^pyd?EVe?@G
z4rqn;9PwcU4$vGC)7yvXeLzbe(z4}L_F;MlP~@QIZgM3Hk;E^=O7d~@2i!+AB^~o)
zh3bQtfW5g|4VQuyk+u2(aYT#Swfa%(5vui)Fuwpos5w8bR$c8*IEn`_lTJ7@iL^MO
z1#G_?0K^F`RcuZ$OvMckH%iYsok^@!$GiQbbUk8@BWR5xt+6^=_o+I*Y^*Lj1zcc{
z)#aQA3GA_YAj!1_3GA_Yy4bv(L*U^AolV%F-cdHefuP81f&)R3*91KfmJo>eKt`hG
zK%oZuYZ5Eks19yB$$?M+G0B0T^=pzI5R*ewX#JX`Cz9rETnkWdvhO!Si8mdDY#_Yp
zAkcF5rXCPuttr`5MvunK86FOS^=x6L+a`6E(srSP;ReP+2ZI*0g}Ur#O>qNbp`J>c
z&vOXKE@7QMQ+t;!aS%Mjbr5JlTcQVQ$*%AKVTo>~%%K{GfIY6wocv6ECA;fdT?t7k
zTEf=qVX=;C3N2x4b*!VbmV?Anu~sh;n-C(07(U{ZK8*Fn<O1NhG1zPM2Olzri}q>(
z_m0d@pQ|I4vK@}L8noTvXiMwe4rlCXz1u-!zapD!i;BO?%-^Yg=qmfp!O+o&@AMpd
zv}v{aPA?E^2G%2Be5cp0V{R50Sgj6ZX8lY3%vE;4!7!l50Y?v7ybd`1PK(z89rit6
z7!Ve(U)kcX)P-fgIuNvU{pvu_()Ftzs3SX#mabp*`VILc)fB8;$8<Jkwh?Oq0u4B(
z%lQcsC6DQHeu6~FW4b**H3iGmDV@F5T|IXT2$<0+M~7VKaLUnv7OPWEGib3oMa>wL
zk7)|;GQr4Nm#Oou>edP-7<$}XPHVGH)AS7kJCpg!*lA_a%%AtDwOq}?5%B<?1NIF=
zMkOEt`-Xw21nC4Sj;AvXB^Y}xn~gcBM>4DTs)JmmVA<tqdd@VAeBL#XNBNnCKVZH|
zy{jvjo^x5Bed^TGxrQPpAebmK*C?td%g}tBYcy<Rju2%)E?^z@tD{O6IQ7sBTwoZv
zvJB0@1%}sWjwjpK6?EN-%*FjG%Pw7E$leDRg;p3*;eJ4(&<X=4xIr`y9lSQP=8(F{
zb=_L0CYohy4H+Tn3eB>$1|p=d3rxkM1k?*gRzH)i{8fEGITz0OkEqq|KzU8xL+&yv
z`4&TIY_hHQXhp2Bi<S&n6}@}+>P?Fb?b2vh$8vvHORB7UMW)Q!Gi(}mIu*3VLS%0z
z%;c)XQzbHk((CGs7+=cl0KO)o$L?P2_k}Rux6vlP5}OF@`ADAjbCsE{zpLA`?cER+
z>eijMHWfX)Rv@oa(=yr})PQ5hXxe&<-Hxp;woq3|k{UJZJFiu2oGSYuAK|2<f|M{o
zjXWXMMdbU~%hU8QE8A}9?9S8b{J;gwY_qZH_9$f57Y(I0Thhd=(-0)a3^ZQ`=_$<a
zA`SE)Oajn&dI{3$)9g=Y)YX(Iy0%^QiDjqCy7&3Fq+<hYx8N}eOMr1(CK6R$qN+ZI
zO@Rh^nW|cnow?(z`roed|6i4n=78e{OyC?Hl`VC{7PABDa5HO5=C^ZdE5$$D^n}ch
zFoQhV)H@?gcEbgAReFS}@RgmoC_Tc&iZfP7A(`~5sVrf!i|T7t_)9b?n>XoI6YC>F
z7Zk&khMcv;%%)5XXY3q|NioKBH>1dfbG{giw4?hq(`{YJg7#xg<h-tsf)3+McbzL)
zz#3n54G;5q!Zj?+R(1^-eC<TjoxTzbOVjJ7`}!+cSZO9*qZk&B$)>xWBULpR`!4qz
zrn|nw8=MW#{-)`!dnF4Vd&)J6VV^Md8YzVR)2_lFoQ*L4t!vcBN;}<j*CzNXyB87h
z%`n}mE2~5hH}e|&V8A`=8n95nJ^Pxz2nXDAu4z#LT<w+cyZE@xGpmqwv_}a%4BULv
zeZ!S34BP@!#Hw6ZNMYa>n(iB~l)|_zy0ZHrg>hSaO+k#?J0@zJB@7Wx)m?2W%f~m;
zW>(=3F^#jixmTM>OBy293ANfxEw3>|C7T=K2LvUQSF(j6W=wbDN*3C))O07WWT8FF
z$SPX!83X7KO=Y9$X7{+Xrd9acRw5gMA392)(U44StWhFcDDjc$E|u`vQi)ZL1#lLW
z_}DQW&I0!8YoySrYcLxcT?vL>UF!@aFNt1VcV(4gAlIAjmNf;%IDTrn%dTXh$_=Kw
zz1fks8_1hYrB=Fy)e+}0NV1jxXZOk***_JnSrQNUHUq=$MybtayvV!{e#ae9x0zYH
z*mgy`*SpR1__$AYlh@hKnq+IGiS4Em<L(knl-zFCN|+YvbCW;&oc(vUmQH+bDm=;~
zCS*P*nIxA1^#xmzt)&uQm?DgY47t89NG8Q)&`Uem`E0E?vBOk&SPmH)svRU#!e!95
zo$N-p)+D*p!J(GyB$->#5>G(=%FOza4RdQ917De*Aa99>TJp82)Z?p5ZII9!G>^Nn
z1W=Q{HtW<iJEIy8HR&5x&!gRw_{Nc;CVfLP_i`Cf-?FhD?f%5Kwm%kY#kVAb;RX(x
zw3}tC+RKUE4h}VGH_5c)GHB9wY`Uu5l=#k6(!7g3d~m)anU-7zmht@rO>3R_-X1>>
z#VzjdN#tfOg8BCY`;(^KlKjC`cupJjtC0DDWT<D<fV$Vr`h_ji&@+2YPXX^4o?rjj
zR2qw(5s7usJd@!835cIfL~^xJjY>VUk3FnwbrbvS)dft*>?0YPcq$F+el}UxS|#?I
z3eU3<lei>vBbPzX9AL+Ftt@c>qrzLQ^1(hpGHtmGdgdUz%h1{-586GW@}4<JGJi&l
zYy{L_&8+EcuAx0#=T}qr0w~*UV269$R8E?1^N<V2EQTgd(1^!so7yieely(-`5A<G
z1l4{g*GMNjf&=wV5a%pyjtnxM0XdnQbF_0xy8$_JXACyRWk8PH8G}UU49Jn&T95!4
zkb`aQ0k}kf;OWpD_K$q+VA)UygSN&)9SjOZhUNssP7h^(F*K(z!gtpO_2KXwHpQ#m
zQ8wIxpsn$62ZAaZo+CH5C<BP$IoR0#iE9CBR1T}{(;mKQlmn3sh*3E?)PEkRN{hv)
z9ADHXd7+|O<|>NJ4MgVZ)Ewol%nG0OQFd4SDe@<H0GO$cCKRhr%?XH12A%?DYL4*z
zgn}K;)ST2?IU;{T45UY4$J27$&zY;e7+*7>ev*?lI5)F9q^;8Ge3GLF`3U3KRQ)<f
z`7Xz8&N48<rW|47Wj-#_X1beylY>x(22?yl&wZQY?sNqQ%IwZ@-(<c`DLIpd_)unI
zN^6u|btp#>d2w*jf<ty+f<&Q1)R)vvAQ6Tf%85TJP(kvY_Mx1jN60&K0dP?Dp`07;
z;+t<OBRAiNa{lzNIh=NMCPqv>o}-+~amUWPtjx`IG`Fh?4AHH4jBY({cPmIJbv#Gr
zK0rdL<2fR>BP?|5@f_=v>{enREd?ch%W+?422J#tV7c?b{5{9r=4vL;PUN_6EWVnH
zVL6%Oz6Xm1>5J9<Y>sk~9jvR}TZO-DMadG+I*O7dp0&pxr2u`_9)FNf^lVP*VvVAT
zRP>yqC}(j+&pV1rCeZ$XqG_q9<U-L4q$p2Gm{jGU+|1YYw3V(VgK`yBjvN{Ipj=JZ
zJEXW+AZU)xhSlW+)X}+FA7s`w&_=m}qjU8<b1xZw4va*7D_2>Vsc59_$*#hmV#|yN
zz<Vp#5O^Sg_f{_OC{qX$EqyCDv@n;4+nlk3!tLp~?#A3wNaS-Kw#~>DfixEa3%E0L
zMYwIVFlw`M5erq3jmeS#o1H7dPMZbqIVTrx?g}Z4&fHuP&f8MxuD1#73Mqu!^K#v_
zYFL<*fS-S*u6&;Q-3xMYa66H_TMiBN685L-v`Jl-<SH8PW-y6M{YUc!Byg7G`o!b{
ziRrT>H^8GCdWzvE2eKqL*upI1plE6}Yk$4gzN$J`u~De1>fC(cB6GM^Rp-J*iaKCb
zcpANh&q+L`=|-GbM?L{1hq7PQxi@t%htPoM2Gmu#SzqP4VrLbrOHE?g+S6~G)xmnc
zS7o2f#p|_aUA0%`>Xe<&cIUzYt<F_G$#o+d&_Ie6hFEMwGp$SWHM#CqTm|t64OyG(
zegJ){OJSUHugi5WcA53i(p+*s8<@Ab*5Jtvx$?vfOtf@Eu3u!%K%)CL<YGagmV!h}
zH{`~IPa~4IbVF|Z7T!|Hp_XpQ?QpYM%Ig8*W;Ut0c3s!axe7T`LZV^XoEs9k9FVAI
zb1oc;e2RKD=UR7(=I~)ck8aLQ-6`v#f#dna&AGSTZqCD|8JKACj!a1lZGo%pj$G*=
zz=gf-$dyMNAW`v-+@Lr$0f~xt<l;yX(Gws*eaXVDw3j=6=^)Tb^<}PHb0GtSFLMK8
z^g&XYTm-cj{214~fO<JMYk!_AcEq3gx|J4Ey74isx%EN0mo|JiZ|4d4aluuGwAbEM
zat?xdP6Sz#iXKnZBvB|e!j9aawavZqIGbmVRGektAI~1O5V@NFFL#i5A)eMLWu4n-
z9dSlX|ELY@^)}iqhM=K1+uug(Q)OqKu0FFtE~F-#RFf3xDo=>&i{uQor?LU>A>IvC
z4NvS`adY76iv!{&373)Q^c7YAmS+)pF#@wH%K!I6_W#>8fSSW}aU%gk!Bb4QJ3;>_
zx5V>g;v5}0E?fkvLb6R<0uUo3FT02fUC-f82I+_9^{#lT7mkO@o$j?WXwOwt0*6kH
za2Mm5UOjL@#_qbtbTNqJI`ius6%V4vN(rF^_cyv#^eDUa{>+m%YVEQcUe1-FN*+8#
z|2$=Ip4*&C!Dyaz6@nKV?qZ|5Xoc*jc3S_t2IRS$@>wQ?Fog!@x$ovqLvY|U2IaYj
zy0{M_<VktT6d?CEZDd3eoHu7td(G2wavpZ~6a?|&6sEtChxMMkkl+CD%{=!Ym${9+
zcpkZ-8F}pITeR(MXXMFQ3od5uj66AOL1NC$$P0=n2qfm*j67_=nsW#|oXw7R(pq+%
zou`NeF^_wg*?BUc1c@TE^AJ#yhXDx>GdnMFhfvk_FthWLw{s6e0@B0G&g*omIToiF
zD23Ln$PBwx3ws`4;pj>pW<{Pn!h;ahS&>&*ENdd4vLdgpNK@k}DqfLS{~^BC5h)_2
z6?qLFG%rzTmPZBFWG>#N^>aP8#;GM6wXDg@5mzH1gj&|*`NdTtkW?rSSBXUPvQf*L
zyrMg0E!nb`HF>q}F#m&Bg0*@*`}S__@rw0M9dvnOeV#lw$>WLd^?CB#1SINMpNDf3
zQ3rx)kaZuFbx<fxG2i;UdJmZ6D8kL7*lcH>l8g;f+0=WqNY%sqlvpH2?F)~%`|^B6
zPguP47gx>&^WP?eyy+qf+moxDJ1a4pFoSG}-sLpwXjYN0H7$PS(|W3VMUQScZ>A~K
z<=PZ3xy`~RLc{wz-S^NP_jkGl+3u&ydv`;U8%hF({?!~ClkZ}GZ==PSr;C=ttr`4d
zzx}2bw6>rLd>1n1R(<5l|KC?XksaoxZ||bDVGI7LnK~|b3D&D!v>Vy3Hd<YFq>I+D
zN?!k>XS@xzvv88n|GS?>yRP!l9Nen^fAzQx#HFaKye*tr)zt?FaG8{azrsa|G&dOl
z%nTMFf_0Fvubs}UrZbYA&a6f%8YE`*=d=aRqiMA#Pw5<6<FRh3=z%eyqjw7j@0lt0
zY9A?&;h_zz!qWES$t4;k0lX(qF3}(XyeAJ!v@l#ct=yAW>n>@ybXrM<yC*Mkr}+@C
z8S&^ow)_F@;r9ESI_O|>pHl}NOzz8*JIy?W4kq{IVW&A$MHql9H)ry)Ud_+k`=FN2
z_MXW@p5UK=&L?+wp1u6A*01z@o{Z(e1lIXHc`OAISm*O_EX4!ed~zt4S(86&lS(f;
zWhjEWoM(uD3Nk2jIj^9Q5*erl?dhM-&iq*`E9;*xy9r!0p?|*gAs_+KKi@CTqd@|q
ze?GRFbU7-YsDb(H?~iEB%LY0S6bub?Ajl03%$IHmWq2XDp_@1aMt?{?+w+Llq1_M%
zf+FrA4g_u4hvfT3jG529%#eII>aWNf=99{!^E2g-YLB>X9_@h8q4wx}IpUB4$mo2T
zfdC0TMpIKxg)kc4fVwU}Yq8fA+n>4c7cFSEvMrj<srW*VTYUV=?lm_Md1OL23wzR)
z7L#57loo7lM_#b<90cZcX=Yu%OaytcLT=7iw&i2(rK{9lx%Lt-^U_n=6j#-jd>jwZ
z3Mrmpq&~|>zSZGC_pSNv$6&1h2j2F4Whd}(b6XU_f-6}yWylyl&&NK?;Q;rGe5BPK
z4sdtmyVF%Qz+dMp-vM}_Vk2XdO}xy?XS8frvv00ai%ja<e0OIDkSt_(zWaHz0S3xT
zmi;69y}Q<^>yP=0ILQSQiv5`H6+0)8DDq>z+&O{7O#Crl?wp9^`-va(<<3cRXg~2|
zK6XwolSO#RYWHRO{S7KUxi4SNA#jPEZ-^}$NYu11UvB(BqNaWMftUE4CsO2n_T>lf
zzmmlZJ@`MAF+@dZ@j<rlS*@(}pi>W3e=uJjbwdV44(8*i`wgKS!keR+dwXaJSJhG5
zTD=O*nxnS0f&|9Ve3?!G35=up*!|=qHUX&vBi|bClA6)#O-ZVw`Kc!mofuq%Z;>JP
zBwm;pK&b*RonBwgSL(-3s#Yi5)MiJX(|*qGUTJ1__teHJWq2msB_yHFWqSsKggTe=
z{UTxk33V>#BVwWSotOIzFI(_;?comny)_Ut|N48SD}fLo`g{H2eh5fF^!MU^$m?_o
z&I?zrj`S)My_s8jYlTV`{<c*i&ppyB=P?9<Gtw*PF-YKy^kN=URs$rm8Y8{&iC&S_
zAO_EBjPlB?2604IW3*Qs)bLUwt1;S}ZpXW{N{V58M|*Fgi{R9!yd>&-)hja*l7()4
z)tlz$Q??Xze${)^U#={O@fmYXl~_f_c+>pY#4ZRc9OJ#I>Z+1BMSRUG^C7ZI93qar
zMhhGwj`gN*zp_dkB98Nlb4wc^hlu06wXdoYhlu06H;MG1gl~gW#PL_+b7OK(xUv_8
z$uY0{FScc)Ia9ouzzbR}SJ@P205!CHiZ@4u=3a%C#VOvnZA-K)PVvH)exZoaOVRJ5
zOph0}XS1soIT$)Rbdh6BbYEwY*Dpe5lmW&fZ$oj}2qa;6OP&yp2qY3A#3_ATb`Ixo
z#Lo8Q<}5Dt;A7@%NGE!rwz|}t^<n0(|E>8I-%_u~Z?46T#KZ5TEn_deq<xZD=9S0U
zV8U3Ic`-+y;4;u~IeX%t+LOuUUU|Bt@k5E_B*PETaYYQFKKtpP+Q*3%UU>)xCUHp!
z`6g5brB<?4Ra$#%r2|CgH7iNx1gQ$6-{8dweWIV%Tk&r2dP3%7D9dl<Y-CgWYfmIM
zdKJEY5))-N($t$vt>JfXHnGG2ZC-MdSDw;<3876S)K3V3+{_LP(E7LA>{a+AMoH3i
zGYREF37mUu^=5tTb<vvVq1#Yfy*TOWjym{Z#Wt^!PXC2<X|2cD>VaD41Q_C|3y%S`
z&5J8$cW`Nx{hT!#q}`SL-0l_}J3!`hFJiO-q!B-N*vZBZ(gr1Wdga{%Fd?+li@OJV
zg%CRLD|W+RZJ+g(JyJMHfY4Xec{Axw6Yi{D^k$vPv>T!oYoUu?-EV$EKFNpmN*(M|
zhWavnM`<0ED*P={t9Swp2m6d19xsAKHG_TmUhafIVmt=>d_#T02@wO61u=}z-IiOR
z<UoxfzT%QASpXX1YjUIcg`aDHg?zqGdB^9Dt@hK!??mRIG1?-%3QSuSTGi(JWR};*
zSGD;*ndJouRp$Fb??4s0?oA9*MP1-?FZPM+-jau!7vicZUp^!Y*S#0{=(;y8c0TIb
z_k2pHSc%2@PtsaF2|{e8@d!%1=ktk093;Tr^T|aVB<ACLKDme!$rthWd~y+&99qQR
z^I;LcmDdJ{42w_JZZFID<XYh4t7OI}*8-5JHsh0P0Z1z2!&<OZ^d9{351DC`wdMNb
zKR6h)wEf^<(9-sUPwoVKd};f^CwBrMq52O#xf38#>;!)BVJC1<SP9?`XO_*>{-%^2
zc50!G%weD0DEs*8ci2}Tl8PXq>0uv|ia3cz&(hNE6F2)na7x}S0}1_(`sB?%kSKZ7
zXW#7eDe$=`ed1;x2(<X5qXX?nPC6|m$9vKzFNQ)GNGE-`+1DA97l&GBeOUwj?AN*4
zoq@AHc>xMXLjm_WpOO*>u^@o~T3lKH37a_Q!=C0AOi3K!;Piuyd0V?R@rO^ImV*hI
zKWJ2h45*9j6v<rlN#BWM7vlObBk$xm(CjjMWS-VJdD$o3BF;k~bD2g4_JO+4)R+Bi
z-8}8K<ja0}4FFsSz3j&hQ2?O>2KZUS`PyC90KasAXf1>W__2YQ9YhH~W`jR#Z)W^_
zZI<C(;72z7E{uwwn!bqLQLWuwvdAx|8<=S0BEKQ_A|RpaB7%B^7s10NY;Cpnm(nFp
z5t^Y({D#Pw`}quA;z!1O3|thdfil&s^9S14w$*-V=wL$gYQHpekbtQ6OCtq|TC4r&
ziu*YNsHH5P(H<;a>K9!KSehG4{Y7=TivmeP{ss-XKgVNq-%9poM(ba;(y5iE#!9~o
z*&qXmm45kh4M;$&^uuUJQXuOm71w0`x>WPJ%GNj-6!xugFevO><M)fK8p;4;jUSGl
zztZ6+%ioZhy9^OS+YJr|O@R&m91$Ww2pAjuwXc&+p((Jz->e09OMaRGo0)5cR#vhZ
zgp?s$-|Ux%JYb{9W<O&6K3sE5>TT@V71|4>+niydm|~kVOcYaWqhVSmh6zE~PUc;y
ztti{+C`wm=cRIsFi{4JZd|AY=P}H%LI*h-1f>OB8!L$#xx68hEAm|G4*A4_-0sh(<
zX}SXZwLe~qI|@Ht0p9HwjsgUFX}4cG3Xmwd+b<mjNR-^|w;hF_t^n`x3r7J0!@tMT
zfvy1Wade<7z<d1CQ9u|-d;D+|{5BvCB9HmAE@u9*N^7NfkNG`bN{M)I=7$qswraKZ
zaPqi4)xd;xAE)_2FGE2H$R}8fHQM~-3BSCT115w{P*;B|gg~BQm)B_DCC~W9c@Rp{
zJUQb>`U1NiLV{A~*&l1Qk%{vT68VVpghZiJ4jK6cHhZ1cK6Sw_V=yowbHR_r=@gFH
zJUC_>8ps+S$f%!aCtUua0Z*a1pK8ES6<!<)F!NLGfHf?j@Vnu}Me$()<Tz&wDYR%r
zfcZCQbF2{o=@@Zb1*s7MIL7Tl3goK+_SFXMbL-WB40~|4#Mzh)n}rnGG%mn4Zq&9|
z;{wvB;rs|v;{xz$C+PY?0PkuA5S3PM(tg(pJ_zWA<_wf}2T0##0i{E1oQplb2id^0
zUufOBfFmLWJcp{w0`kH!NYu70fD6Zz^8$%Uu`Ez{6OTrSM4W(%mjxp2%^NsAimznz
zcW5^@U+I97b6XjZuWSXlb6ZL6UL1q2!GQW(AnQWF6`K}ge=kuZZ1X0~#~#?M6=eRr
zQ#+jN`z@d+%nhV}kn}&r9{5SybkC`PxQa?l;GYUuBGLy5rB4NL(}t7=38ha38sE<&
zeIkb#QR0-`hpRY*iPC4;vwO5hyPUOk29vmUM}P$8S-T@Z0`sih5k!iPIBR!AkVfqf
z>WCIC@i(T<9}YBM0`2a=Q$YVg-7%DobVC7kKrm}?FjKWx8|<nY5Y*F%oZapaHGN=E
z>A+hB3YZ|pxPgSa1A}thKmv1MP>vf&s5>wy$Bjs#?!X|%O@O2LprCS-1gCo&Aa(O@
z>cSB3j6p$}tpEx1K|y3I<Wryz3Kq2IR)MDyeNeEloq5!SHiZM~h+x)~Ap3lu_G@TF
zP_JY5qqr!HHmT!+3JYdF->+SARpD>3qsJ3Cu5rN}aZCUb3XTib6=Mn#8jK5;HsQfE
zNJOyXg4eO2xRFB)#9$~gJ}7R9QdPvls7wgrM(%^Wb_h%gDzVtD*8MnU!z;k|{G#1i
z3YO^AFmLyypj?$fqSi@4cn-3gFb(k=LAL%E?UAZCoH8`JZv^Gy4<VF!BM9e4{TwFh
z&7hduM4_KS+SSo={ASP)XTo^Og|UKvo`X&-2&kE0*7~3;wkF5w@H7qtJ9O<@@qC|h
z941cqT+=eM4r%Xue3>973tg&q7m&p)XWfr$<4cy?m4Jy#mfMyB5|u0`OL>?V!NU((
zqu;bgN<Vap&|LV??uG*14IffB@b@YTs2^6dcYo8SmacZnP&cf$y8$w&W;JyKPevCI
z`3bA~U7OVW6Q>Nd{}a3YkRhQU+P{S+Mj^J2!K{mD|7?Y=POG6z`3db^mw#(ekD1e`
z!G+Y|T|xHNKz%Y>bxKoP?y|A*2-v%VGC2+s*t>#AjvppNEQGe|k3nTm&>j26&0g+p
z+?Z*3T5G6Ofhk4@B0%`j)(#{PekAQEsRR-x_+zlv9+)8IN{K<6DECi6xu269bk<Kn
zxu26P0R0rie(r9r2?X|$QMM<eWaSU2A$H=d*0dB%v6U?3k>0*wu9$xy0kDt8V;bFH
zC?xVo=7DqCbl2lY><I-fCe)Fj%&>q&YmNltVzU8~3I!2{(3A#=DSaeZM<hOo6w~QQ
zu<m{4hZNZr(z<yf^WYy^dso>BrxrT<I}ywgFG)cNwVVj1+elc74o?Kj+VM!Gklf<w
zpommJpycVGj8s6P<msS{R6wHS>7X5{6jDrh0V7Q>D}kUj+|hxOffs@@F2++JT?ooZ
z1tgFz1QDq`0;7rq)PA9?ks<ciOWMQ!ejzNBJaCPWDGdr`)?L!_UH1+O$(RvrfDH=C
zm=Pqv28CpP7$kYZP@pw80V4TQGbj{nW&TRN7NJ=&B2=B$pL4Yv5t7ahTr_7yNRACi
zE)^Hf4kRiW5rVT@NL!j{K%E@QT9x_Cr7uwYlS6pDid%n_RGt#z*53jII$=sk8ZSsd
zP6<i#2MNe2A(%hb9Jf14YRw8|9`)$MT&1&|Ql!YNkX*PSg;KLZ7zA>kQJVL2L(H$~
z50%Ze+X61yGB+e&C<Y0LxuKNUVt@q1+)#r?=G&rTkndz>X!?9t**gvf+3GtXd8;$Z
zZS|dyPb3FHQlU_-q`8%5eUvP*nhiJf?Pb*t1Q}wrqXrpbbx6L~j3R)j4z+B}4KYfF
zxHKdT5d=yu4M{@;iIPi0(hxzS<WlN`OQLcJe}qnlA+jHHbhX1rjtXRlABChHM!6k+
z6q0rb5<nk?V26LfpvD5~no!ouVOQ*Kmgs5}vUa(8d+(Z%Udy}=ZH&>_u45x|^`=eN
z*~0@SR9hF4%Q8qHt_xvVrcf+K9sg-aDT*~>sk2&w<>%><=3oeShR6K5A&&k*qVT67
zoViiL52Z1<o6!le*IjIWA0y8C=IO&qz_E)H{N|86ID|NgZw?{y#!YIJ2DOzn%GX<!
zZMFLYO!UWAyFWkzVQWZkgg{c65IoQiG*e<Us=G2%^YwC9$*z#R{|GJ$?Fwna6M{sc
zT_GgZ=-OS3#_=mw;?vugedSb3o6WDBYH2*b3dvXhQ3MEIg%GMA7wyJ)e#hSS>A#nK
z=RnY2^E=xfV|*mP3;9I62@(+Bg^*ePO+a9?xrcq_*H4t~aUdwcy(g4ocQ@@l_k<!M
zyovF>=bljg24X75C>ge&=|O#Z+x-p%y^p%z_7ac*#QsqHdhT06LW}*O<}IbcU@Q6y
z+aJ`Mmi^)&7(n<XB)=CBQ)nytOGth%03;B83E`s@!)b2DXe)X=^H4}1>1uo2!Jxh9
zai=?JFM2!_5DN#&0ONS5UIVi=hrnL+1WOd?ZJM75$=iW3z6m`Mk|_g_C~|@ZUYHK{
zpr=F14Y7LG{mhzxZwbvW(EaVe5|Lp{p${jV4#^KEfP@04LrL+)0+2vEO*4BdE$lG`
zXBqv%nezpD7o~l_a1983IiX)zdR#~Wq+dAB-(sLb0O=R5Q_mblkw-kB4h?5b4QGZ%
z^%1Vn&@fgB+OoOhn3n2@uremh>c{o1Rrpg(4?F<ih_IZRAOSccjHyY%0!Rc4Bf<q^
z!Xo2J3<?(1kzx0%VUcl_Jd_(1mKj&cLdJD;m@=+osfBTxh?By&;4m=Lw@CLXRUm9F
zXpT<`%hOCq0&P-Qu2vvnWs|}IaX*qs9<WRb2gQXS$$=x76mBYV(vrnt+TCGJ7o7l!
zDPepVV62NiIK<pZeNsCx#CXN|f-og4FE)XMPE*2#BH05HU{k`_-d>NME()mA!&!5}
zY<E&`;+r1UbNM}^BJ{IoW|+k-{jshy?dE|CsF`7z)&>cvnPH^0DTV=w=FJR;s`$2q
zNHh<lJ~JE^myINg7y8pb%?LWPh?JX!>McFmVwO`8UkB~cgb>QiqR}KrTLf3>nH^R}
zxY7-+POR#$S^>K$rPrzgPjmq!FlT0m<w^h&wagC7gIkb*n;k}ClMZe{;^206*gm)=
zS|~m{EDvra3unZ$!*p=FjdB#YGP)$3bsQ_m$Jw~((zAPJcS>L9@+}GDNQz;gJp7W}
zyX>7}{q^L#VVPD16T|l|)lOdtfe>_ik3CacKbd$hEMKMp6GHEWF-IG58Bp)D|Ei;x
zB;F6p7iDk>jksZakS4`t(5PzmNgcg7Ssj)s4_q*VOm!H0T{?tEWpMHzWVE_^wk!ET
zSmC)m;zH_!Fpm3v7Am3lGOR&8eSaboRvOUoLWmNynQ-G0{u&X#=ChQQ)YorGEDg&%
z449Bv8isRE^V;B;m$A|H_1ej0VVPgSl^e(`BLiFnuLoRM&BvK9>g(^g5+6HAI;1`(
zq>fw&-gPyb)==-1SRIz<N_mO_nbl#OEB%AZz<sV^*^Tu7POic1kXoCNSwo)XGfZC8
z1_!w%^JXJ>r*>N$sT@dcAt}*R@{n7?^>2iMs8ohl&Mn~vZOmx`1TJ$|reUd`Rua3M
zUd#o^u5jJ@{B^B7a)ke4f4fe<De<qc!q*)@<w53OVSGJ+Ug^qHuwVI-Z6KL19URK=
zd`UR;iWzQ3(i&U$di|cnS7G@A6qu0tDvTwNa%y=Bu33N0Ub|jzpZMCrq4!C?CLAQB
zA%mAozhTF&*B?xN<KXxq^9|u3)FmOjZu)cP$)@^ZCHZq$;Xx#EA@y?@LFCV({dfcQ
zSmwGG`csN^%<04+q>fQ14n_{b1Mhk=oOO|X&`KZVJsHO7CuJo0O{!Du&er<FiBtAS
zf{CK1Xe8<7J$`fQG+WhLZ<072mhV4<37OMjy#E~MGN8_|+#B>-i8En&tbw~w#0}$E
zqc)epFrH<%-JsV^oDIv&9WFaT=4=?5JKUE-U6>K)*zg<l7KwAVje-f8b7Z5q3lAC0
zhx6?F8}#cE=N%lH59bL-)CEuX2W#90b^Q^RhZ^~OKKv2JE*xLW0uJWG1@?R!{rc1e
zr|mQ!E>PQd;U+rvPU`f6thWm?Yue~Lbl>y>y?|cnQe700&MaWFI_h_n&MZ*5(<LrS
z&nyVlC(9)gO`ciM>~^z0FGGH>fEC@MHz=K5pz{4Igs3NH7ZmW5c_L9}c0sFq=#wZQ
z@o;VdtGq?Oy~*4Hm7g9Gm$SnSWj*9V=N7cM%Y09P(zt-MxFBm@=FlyAQ<raXfgU#Z
z;<OL%@<HjHnZ~#3`}8I|3sio~hqwUSS&+})O(zmyI}0$qM#I~IhSqNvW^U@DzZ$;t
z?Lw8OXNZkbZx=@SE{#Z(db_Y?7dq#5*TQ*GVb-ofe$MT#1%w5KdXb3kYLOO;3;9N^
z83>H#;zGG(gM{qjLb*``3Dm`f*r>s&x@(atOW45*z4-biP7zw2mK4g|A7oHuNg*;i
z{MJk@^pv`+P+6I2`;;D0s_>^+mGA&IvaB#iq?<qjW?5lWWCTD0W?3OzK7}kG5wa{R
zth2IEq}YfdastZ>Wr|I*&?_qnkz&KbL>dF-<3fD?>wl~}x*=!9c08lM+!7oSqTo4d
z{n$~Sb^#xg^0R3dPz%#RU0<kdE_BDnD|EPB!akm03}ZL_P5)aJ9@r?fEm&VD!!48o
z%KAbXZh?gE>kA7uLw7phCI%0;J}q=_Diq<C<e}V#LK$vJ7Q(HKg%oblF>EcGds_?n
zSCH6**+!VPdsbJQfMfR}Z7;SK%IzY=fw;BM-Y(XnF5iivr@RFSO!l45c+h@vXQ7M|
z@DxZp3*~+hB#?F%V!t?vzJ-(ss0RzPHfP@Hp}+3F|6n0ZoG$t$aMABbq4Hay+pMPh
zcnNuNQ1D`JDOM-`UDzw%@vtu<I-k)hwK}jP_h>16{*hj-;O{{&+$XMAg>P^?N#BRG
zKes{eB=9c*(x*b?8w>P#&K~?riTs}SRoAC`UiAV3-I=8CBif(s#06wg<G<fP7Oyi@
z$*=R`TOxQ#LfpChx7Rl4^B9zZ6KzK)9wiHPI55y-g?N9`;h<-a7vinU@5ts7n4ap{
zLggZCZi|A3_Id$dt;EL_dp%d4>GgO04p$YP3d4ge@Xr>?5ELY!&KAm>6(C`FXA46Y
zrQs2S8{WA>_XTNql818VZNrl+7~UV;@Xiah;ED%ClwlEfrd6f>B8~<kHCm7d7!Z+h
zeu8^|0TIOcG<88jivf|qu!t~!VsI@6M%+Uq!u%x<T{9@6`gp`FSx{_n1n!+~w@DUk
zct}LeYe-QQcqlYH!rJuJiyt2zk<JBN81wLmG-i;{aCk)Ca|Q|6;St1v6sm(n&^0`g
z>MU#F5igfW-(}X~m4F%<VJrLUiN{Ael~6`uq*Dp`l93VlVblcAD2$BAw;4d9l97?3
z+hisDJ|u^&b*mZUm0&uKj<6eE(BoZ4JC)FZ_vnZ`@J{dy#OR1$ydwb;5ThdqpG8aP
zF39MJb&ITo91STsI+E&Ww&In58WU0Ojx}HhpVR8IA70RNp8!KR<pg~P0MBb`BX=?;
zA}>|qDQX)Nk*|S(L~Uat_3eK1$lAt48r;Q?3(>V0tnm?c*Ngg=$HzOhkgFN*bR4;w
z@e%22PzJS(k01mPZK9j*<0HlQ$TrbUcY3jMe5Cf>W`ef~fdq@N7yeUEKF*v<=xPab
zDxs7Ii^wmAC3wn%MG(`7O7P7|JWbn8;a{9YB`i{Wm)V$C0)f{f?BsvyCGB2!Dxsvv
z>k+w;Pw=G3>yfyPN=cE|BM95yrPU~*AZ~v%!XE#J{@&wnIv8|9|E8lTrA6M11jNk(
zlmW(@5yY)RQ3HCs8NqutVn!IUH{Ogie1KmzNKoEnT7>=mzx1~4ra6_EP;^>E=3XF#
zN~T5X+#pdYZ!#^?ww<|(-dae|zF<KlbNIjXkCloA4hS9RFNnz82c!V9AR<2+2@)U+
zBBkOE1W0JQAacF9&`6{>09z1g`j~l;E>b4wz<+r}xi9v$%6$LS|5_zh2XgvXtqS(5
zdGt+QlRn$@|9%Zcyh|fKqD<G~@oEQF9=^uZy!C=NRc^&csP6A{Yp44=;RE20v+r{>
zlfC~>y=xVJ<Bk-ePciXg^ig1b<DM9JWv(mUf$aT{fBWEW1uZAN@bb>Jub0$(x|lZ)
zpBnGNzwAU*Wld}C&%Z19;Bo6Jy;jJSucg>87QKkit7p1b>3?%Qj-In;E#;(^M`Vrz
z-HLHp9+BT)1c`B39zhTwEC}!7f=u5lEhtxx%koHZ7jviZ_1LVf&NO{l|C6g~wNncv
ztyV{JMCv5LlUA!E36TH<iCR`ikN_05<e`?;kycNNbxz4cE!dW=j<haE5QI<C2o7DS
zTOE1qaUR_yXal$|a>X|uyZ2&KW*d1e@C0?^kqC1@qJ`@sGRy&qy4O()c~(3@o5W2K
z9_Bm-0)BOq(+V$U+a_nW(Tfk89N$A<3*8h!m_uQ7GN67I$vPGhVRRCbpGA-o=jR<s
z3Zu8PX#@4?rQ7YL5KIVdkI48LB;dA35I--Zj!n`sv@7%cAiasJbXP>4>VQk^h%VlW
z1BpVrBEgXPJtabuw8HJqd^TAB(N((JDMVPiokFyv?WRIAuqj0$koz*<4%O=@W&7;L
zgNw%Rvl|Z*82cgtak2rD3PrGoqgXRZd%=SdaV!A>18~qD0FWqo&>jGgD0#4E0Ft!&
z9+d+C0zgL{9cYO;>gYgA%u#y)APl6V_5fG`^|wgYh^QC<3zEM@aK6k3z@h;-Ndxc(
zs~V}Rr6=uCz!ONGv_}CXFi+Ab&@RTJjyoM;zf|BG#oJJ@>1n4Rjl}7Q+{-``1y4t?
z9r%p=w?%uI^AV+Alxd^%%~kkQOh7z9o6g&90tuM&b|e52Fy|=}pnwP@0;2PgqJB}a
zmm!AO%lr|Mdl|{Xz+Z@9FGC-nkSx4QglmWq`uK$JN-k=+#L7qOp~&Tk`$4gNu~4r%
zII0Yf{`>Z&TNR!{X*?FOBuFSdI4U<WAOSfzDmO78q4eNr!Eh)|n;2s7C~ip9{Yq3s
zagv8}L!)vNBUy+ghec@<L$fLsP)9|xYK@blnnJasqIyz{YKlg6OjI1Ae?JDpI>y!z
zk03fGDkm36)HEiFVWn4hQq<>Tqb%^6-tf+`Q8~B3<!t_9lZS**W^5D@GHH^=ry`?S
zbEG0^NKS~_^E*w7ye<@J4g!7kx~&OF$i8lC0urdNlO|+fY0_kJlp9!E5GXm>DM|WF
zj!Fx|Q<R(>wKtq;vaq+J%IyDj#PAeYcq~Q?B(UDHM+_ve-m*swBu4D5Xu)hbV#MGh
zHa+T|B}Yv1P;Q1jVv>asn^`kr#R2tgjM!q?QN^hC?WjEui>ad)$Pv3V9wWBE))0>%
zy1?!ykf><^^%H$Ay_nQr6lF~(=+`w_gcC`=a)8U(nt1sNB+4v`;xn3u>G-*JK>aA1
z^{>pB3Hl+$`%x6f&y)qPO-g*sUU^-=vGijb3QRzK9F?Cd0STy&Y4BesZ(N(|U!OVg
zx*m76T_2Tm8C-a}^-+1V6C_DRYd7TDfdt0-Xi2Hrg+pLAZe({(*6(Y((LtbL+8C9a
zkJ@~gHb$kF1qp<WQFz(*90Al8_T^-~L)$G50!_^=4gyWhEm3)BSesAHEm4G(<fm(s
zpWeonysgJsuQ!kl*cO$`B%Yw$wy0btL87j0QG1!JO=|AKz#$vZ2?StvIU10c-sNaO
zUV2wlhUgFm(yl0$$?cR4sDoX9G;3-sv*%5HtJ`-Zig)<AkFG<*a-4lUU7z0KxNQ|+
z0_?bL6(9k2oUGy-8kRa37WGV2Ifps0k@f3sbk6LZp&PC$@Py$*0sv>C@}?3<0Gx@+
zyD%VO_-CTE&cX0$lT8dVeD~R?ybB{a7`wAkc^5{q0CYBryD-;tMacg~afDrLJ=nXP
zJv&Qp*c7y_1ewo;s64^0!-w@k6i)teUKU7~F%Yr)=={14`*oJysuT>nFpcQts64-}
z!$<UT6zA9U)@mIZ(f%=Z-)y~kX@8u~a?=ABW%|eD<qwdkqJIqAY<%ksWiVcYV(h)y
zdaI^`V)BYLxF|CyRwNF3L88o{7!G<DP-syH+cR}!OnEJqDVn3>_jB;Ktsw2mM#ki7
z06`QS8I!94NObYYSix&Cu^JGA`<78L_n4Si4I~fcM#to8AX)G&uf}LKXwG%O?rnTb
zNyX|~tkc{2b!8yLvRX%>Q|s|D`Gx{W=rlf7AYOq63GDGP?BZz})S*rM#Fz+IK%nHr
zn4Ab8QF3BTP6UuBIWcBWggUe@n-XKLdHUscQ=HmqUp6Hsr!j<pF(oFa07zg=iD3%d
zjr2ZV&Yd31njK^9=IeL)rpNG7Q5rdJy!#2)8e^}|$2ruDm`u!r3(J}jLt-B51%v=R
zGseE1ucwnUV=^-jE`(;rWJaC8$2lv;iWcZ~tXZ;QC`!TMtQbuHQOv`-@YAuZcVn!4
zf&ORT+c7;#r&I2_q{aLg+qgjQST^5oAGm1We7k)hp~n1}{6INKv~PY42Mpw^>ynO(
zV(gBE7@$QC1o_HEu^jQL0fe|zOypHS0%B1NIow+~1XNuTV;?NkJC!YQAjoi+#N=h0
zy4+bViTOlA10*1pkQR5Mef0urbu8;!)_ReChp(Du!WN3l>QVcau`!GEt!<atz+eJ+
zncX~)&}~^vdSQ?NUPis!mm}cehivj<{l&5m9RymsKXeeNbsxrLey1L9-G?zu`1!PF
zu16!WG1KK8eW6ma(Vn#6qR>Vf3ECEcM70}ZI0EUw%YfR#8oZ}>Y`ev&mOFpDN9yso
zY)i~1wr?P*ObpJS?(5YP&VTNEdY87_90bZ4ZF3O#GT<QaWq=Uy0tyfy`vq(EzTWw!
zFB}BAh4e)%M@%)ypcP-lYSovmAUE<wtWjh0YtjF3BVWdpZ`i8$^{=Y%mzclx6w32_
z>2x6ZlrL=y!&9JqNn=Z4F-Z87FJra8flr~_1~K4MAoEpBz8EW6Q0?m&Ug^9GCQ(12
zejm%)7jwnRtcU3HGaXpL2YUO5zmMS^nJC&<pN!+jnBtG&+G-_!e$9I5{yT(zcm)0M
zO!z#I(C^2Xj4wf=?jK`VmvF=e96a2^7JQ)BYP-j7A(%keW490_3E3tB5(s<9MBog7
z01Nq<c`|zK_CGra)c-#_2vp6_F`21E5g`0bK5nOm);0*JCt_K{<C$kN`WM;$6EXYt
zT?1<6xfl<d+kgP(IlEmTfqBku7f4{9qjrs>MW6xI_;MU)B!jZ)s#Y-5Y^DB^s}wBJ
zFA(4oGG+yd@-N2`vy$I!K&=`W7k(E624`Sg`dyGHIWR8$E=ZId7`Ody10r9E^8n-)
z5LoqIiA&o7i8j0vm);j7kY0&P?+cO_h4&po{n9X?z7fybnfco)eQ>t_jW~XqfyW;W
zsavMTnQN{7R+FiAgTMvY)VLgIkN}$+M~Cnm#SKa68FBXcT762B8F6{-6<p4i*Iq%Q
z(2O{)y?#h@pdod`+&G)EPXFkMxpphSMJwjotpEv(xpDb6AV^@$jbj}k=KvB**xYzr
z+<zfbWX$Hqi|(MC>{JU1EQ+(0pXkTR7CE)hg~dg2dFc^CsAW++)mp+*UoDE?*p~mu
zLqqZyOXBR{dj0mYB@P7b@0Y}7atA_ySQ1b0+YYFfT*i_(Zae%$AzDLf)r!n>pXyy*
zWh)#EiWyfpjU}hCA};S{p$srq#Bo96BQm>&WGU-1c^mbQU1jSW400Lk91L<9>*CVq
zq6{$B#WA5|cOZ7y#LUh5@v==01Vs&-;_?!3LmoA3il;?d5+oot#hW$f*4vP}{4;62
zAW-r%+j>Ew^3QDR1&NZM)mU#siW+tZ>t$7+>1w+jjtUey>~LB^p~DW_cu^2QJK`|j
zJ7Bww;Pv8JZxyk%pXs*+zl`HL`2gzVMzCFVcU<`?Q){cPxT^4{a9el)^xZZ(NTBbI
z%lkYafxbJABLQ-&AmLVb$E}~@*=7idH)6o7=;JQm#oa%~Jv_Tm!$sNe;|SM6NG{Yc
z5wPKXQ;OJ*krg%~D?Y#$ZPR~id%)3(Vu1s3xsXGKgyQnkRUm<UAdZFaFB}1vmJYFR
zx9k5=b;v;=vpVFoi>f&kmjOv5K3NXMv0TtSC6KtMbSPeXwD`aT(O4~@!l8JbZu|{l
z$-+IQL-D6Zx#;Q)ib0JdaiwXj1&-D#o~r20GN0==v<1uVTz*kKE<+l~Ly05tSP7p?
zAbI)guIJx|X+(4BIBWcce)CPo9Ryl^k2@VfQ|WkIuHPsEgyV6nzWfefBeYpP6<5x)
zMPKOKs_>Vs2Ti6^PG`_$Iu)0{yMa<bITc4BF9w-juRj%Uc)n(k=`4m1^69wyT+JX$
zF3O&923ayO$Y=e0kf#dsLtpkQ%H-|TEmymKMKyZS1npNO{c<CIOx&+X`el&7?pK7f
zn~5~Z8_^w)p+%Wzcj>RY%7!{1G)0FN)z}IJ_Ct$&BD0J_02x|@vl;r@P$Qb6BZ^pu
zFZHT+BOC~tt0Ri!HXTBM7*SMPWTQa>Vnk8%7Um~H4|K-FqRgc)_4Tff6CDt`kvh=<
zp?Ny7NWR6{h|klBMR<#ItpK5ul_Goz?EP%E;07a}Nq?iybhQJ^9y7X}I;}{ao;4DO
zEJgC8Kp>&hw4$PfIUVoxdhkyFmZGdLGVa~_TSj0@k;kBeCJ)}bhnFc*3i<2IRUn}g
zX#VR~^c3sNXGK_i@j?$sJlt9&KD$elAo(wY5DD3>MOfE_EU0Zo@*P9G&<<IU{PlRq
z()zWnh$qGf7piVYr4N(Y6A59^{Kg8A5Z+#dt)~FSEcm=gzAA|q&>;(wXR{$omxn$t
zLSp(1J_F%y98iBM$~u#IcfbCE;{B-zQ5tP|8&j+IvR1$7ElTzl$-o0lK<zD(>oiDc
zwU^pM8^^}ffc@<CU-XtG`<)`x1^b;M<aYK`5&AwrV`}6t?7}a4S;;R>5d!+fDMD@k
zg^J)(8j67Wl|6Mxzp3O`rwH}OuTBy23cpejx(D8vyuvZI<B;CI<d{>0y5(4rAxs4_
zC~~YQFQ0!(pfP#A-&y;^`t2pZJ4I;D|6U}M1du_I-;0nWc#_uw(>=}JKdg6aa@r|E
z>*eVp8LBnr)A2M}%TyDcUlLGXsg<=XbK9?a!sC0T7NW;>xQ6B~q26Db>HC|$zG0K4
z2^qbC3$Ue$sJL7W67?@lU;$r8BUu_y*Cp^xioX>Z9hExk5`2r3?JmU?kPQiCOTtax
z@76$zPrMS3eUUKsH{Y1RSNJJ0BOYN$HYMC0uHc}W&BS>t2fCG#Za-&!O&T*iB|qbY
zl{;c^q1(?1X&N9==;s7R09WQv1`iLgm353JPaeQ|vMj<^q=dY@4;d6Wkig}A3cf(X
z%^XPh#J8r1<Ofy<68<*)z)EuH!0JGvRcn5lUP|_KnB861xS`~*qZ-wII3X`(KnC?3
zPGDwr;HrT-%HFGMbnJK($FQ<;3U-esq*E>B)9q*?AU2I4sZ0WEC%w-LRbgKz5=vua
zELc%}qlh)CWf<(Sdd5p_!L}j!t569U(4h>JI*~|-mj*xr@<akJsrKQBsQwHqtZ%%~
z_Kbr-d%!ae0$JmkM53uwnXK_lqD4#ot+rB%=FYQ?^^JCI&pQaTR-AX5MaFqPA){Xu
z0mAu&`04^$g{9&m>)61!wd|sUK!^Aj9Ryk^E+*tA9z}p~F@aZc9^|dS2=+^|^$m=N
z+VxA;bOe2ur(d$BZ)u_Emz25GQod01OX9Z|H`9@HDFt;SlbJ^v8lAJ-jdVaLpd0Cc
z&_XdXS)&I9bR(0{V;C(IrE~;8E}7X|V!YyNH_ic}<zbuyLTB*f98G9>7)P4COZkLS
zI)k5@%*=0Myr;CA>VVLXKTdT(=nQ^pG9WHXpb$W&CUNU@m@pNbu+L1gH<}u+beQR2
z(985Q9Sk}zo|z1Y7^jq<7tc&y*Ob3RQA#&==OmSuv4(6~QzOP+Zf3+gfMMGioeIxM
z$~Q|O4XioIh={g9LZ3NFETL_9n~;T_msHxs8Vjs5&5T-QVAxm`zs*a^*sGME^3F@f
znoEnLT)@0!s~gO}ax5J3E=scdnj8O7w#b2?<K0D0)9842Q8FMB7o`dv?=DI<D&b$H
zD5Z<SOOotxbK`-sB@P6>ECP0o!O*W6E=kI549WmvNfNJ^&>~by_lVz5vj1*jv}pUj
z1K|h6`wj&CG~xS68KI*LAl^^nCn=k92;4HxuwPpk&D&-i1o~ydjDtXL6K9h0_DZP|
z0752drOm%{1l&Mg!T#FPsBF8!K?nk2g@X_T!V0GuK_IN4W>jzl{AA85meb03y6q|l
zA%x*rm6Yk%QY8e0RY`GC7A+3}VO6rp_2vT{0l%=bhAnDkJk)lLgAj%eYaAWIKv?6n
zA`FBz)Cx*Ol`8l_o=;f&)<);DPaK2-AbjE=6ae9qqzr>m1PGrbae@3*VeW;<uCWcR
zjn~RHIuM0`*yunM0%BuQZYxTaLO^Uxrfb`CH-gY6!)`E!yUMmZ7!hD>Ps+%yREYp%
zd(tmnD+CFQ?Md7S=lRG|1uyvTVvpZwY`tlh1A!AZ_pYS8JOdd(>`KZPhd=^iR}wD{
zt;8k`oq<>K4keXeGtad(ZuFGnPkWBUpvfVpH8H>(O3L^f#Q<|CiLE8=3qWFDa41>(
z*QCg)5ku^f4kz(j5tP3vRpJOll01KN0|+R2EGZ)ZkU&3{l=&NwKtGm5{^mQ;-9<Q8
zPb#%zTiNv=>8;tgn~mx1!LU^=f~qGSRf_<2(owYtU?)jcMAwSDNkF}r%o=QE`gSx{
zyZjfEII`uxYuSVXfPNOct&=gRT|Y~Lg9}ajS<*N`0=%D9AW|tH0p8C-diNx0+Ju(m
zK^8M_HBPl3<Y4d*4OnufLx@YsR{}u-V~~aP_0Oc>bpiEND{G>aX?L5k$K`t!@95BH
z)ZEvReq$|m-5o}G=~zpiynqX^u~v~t+kynxSPR=e3f`_GeVD~o-C=ZX&uo3bMTaq4
zACO#1h5;Y}!7PLU!|AIA*CXd;WzDo$`JKkF&>I%=29E;zdQxYKrG#Rg=~oU};ax_%
zCZI*!gr~rqV#(kHBrvB~2u^lUKV46H&9K<OyNrL8&TtBmA~P)cAp!`Y&<qQyug9TB
z(||h1%KDfM?QA?&Fo)D2pVSm;sPimkvE`1Hb49{;8xK^0BNV}NV9v7@0SU}`qzD-<
zNEq%sE40`W2Ta7^2Tb!V_aaLiFi9TDEwJPPlVo8lyU?O^1^L&e)TVbW{O)6I%YAE?
z`#Z4b8X5^^++*aHf^DlqO?=mq=UpfR*mo_QchS*BQ;PGdE!OcKqf^&vK=B0$T$HJ{
z<VUhWqD-|VZ%2YeI8trZe}G4}MDl>L+G=n=4=5#v0?KNu%e{OuHYJE<mPn?8fQc`&
z<YWYi>Xun@GJ@o?b~3doMTM&@MyI*|0fJL<vVeqPt+EXZB#>5F(rJJM(kcrx5tkx7
z_}0`KD{F%#zL7^O*BZ+c<$F_nODf=A%U-?LC{3)j6!E?knCP9g)b5+HCB?_1$c^v5
z*SIC|i6vi70uwTySjY?D?G4C)`joZ1&$!e2)RJ#`fk|ANZ&T@w8GJ-$i<R{+HupYb
zN@$Da;olzi1W1L?fSZ1vwY#7q;rfymV0rf&5jORHqh$h*c+^aSfcuQ53%&pf5^8N@
zC+;`?oY-c`-87hx*=AvXgjoq0P@l8z4;bANpUZA1CUGqsv324y=&K#<@B_wei5-?a
zs|)ZA@eXn~_+&7Op!0XJdml7zPVI7VXd}FfaE8$KsaZh%(aIW{%DnfW;ZgiQk~`r!
z>t@u#y%<P*Mxr?gjND$^OhKX<do8)`0SRsPTG;k{N`YrHYUJU}#D|TIuCl|nTLBk#
zbl7&4AW6z95FsN-U>vsaV^^zmjsZ0<Wu`o0ba0nlaxf^szhuenL^E#sm#l>NoFzzL
zT(S@g(2~-OsFzd1ib0^{%PDEaAW{3vDQU$ZxvXu)&8X{!q_`D#0>LS1#URlaLsHUR
zg9Or$l(b@yKpK*Q6%U~PZ5~j^q_UQzGH*X_xD@}Gl%5j(+noA$9I8P7wg3UlaVhBr
zKmv1IO7<^EV2(?nfBD_~=G4EFQ<>pU8jrckCa0ugV55nXQ!@V!l8ecY4uAy6<P^SZ
zh8OeP&B>gmrdZu>#(%Y&>OfHcPEE;+#1I0+)Kpw-y+HzEYRb-?Hz#sVD)W6eW0k9H
zjsrqnJtrm8YLEiRoRm+vE0DYt_FFVa&8es7$w2~vlJo3A0*R9I>_GyFlJipbAT_6K
z#XDk<ZUF(HcN`rkZ~2ZrNO%gQckDp|38Z&ukPtyA?iK;{gH+Zg_S7@R?!pgJ^!W=~
zhFV~V)MY8<qm(=L5^Ic<IIDFxwz&V(-KeMnU-)cD0ee|W`fQNEUY3$~6hLALS(YmJ
zC?%E<V(=wodCL7EzHv`yjFN|PD^hX^kt{4BD^s+DP;lFVMq_nKxi{9yVo&_d=<+xS
z5#-<z+Pm6rFGwybLw%6IUY(Nn^Fd-wSe>%E$l58%5P&_bPNnWKcZ#NiT+i~KHU3qy
z-f1Z*us$WfgwcYV!}=6X1?l5@Eyx-+GJg-_!S)*+y~q|e+BOLpAZ$#@FHnG_GO3oW
z%rkU>r)5Cho64G=&dls#oO1j3rtq2_cSbE~vg{X=r4<OYb-%3@NMP=_Cksem?x)G}
ztpc@LLTB|zN;#JKpWeo!t}6T~#tjcp?np{r-vNnoM^f_o4oHmKkyNc?7&poi5rf9f
zeKaMn???_h>S#({-;pc;9Zli-4qlu?ISBlo!u6e6{QAyAeT>>Aplv0nOMg$v>pKue
z+22z*S?a;df;!D+_c3~woOX&(AD&Lhd|XT3ho@7>$I(v_wWRrUj&<m3G<fn{N`7?|
zOcXh1PeG8tJ(rRPejs5E=Th-oWkcz84QxrzrHVT75P<~1p%CF*>gJAoKi-li-vzd%
zuhFL61$(r?B(80RAW`jwl-w?YM70-ENT?4X8*53vreB)f@`5q6tY2DMGPuC#mzM4o
zBry7=10rJt5*Yo`$QV(EttDk^`lp%kqEXtezXL((n*I(1rEB`917e$mGJxoxh9jI#
zt5r)1kX}h=`o3t)a5a4;T{AM2p?M`ObC{4qsaMiiqxqesmdMbkucZ~1X1KF-J-v_j
zU+mOBjLTJE+G9)Unb*?NF`xtxUQ34xcx(w02KHLIkfnuVAO?2~W7F;lY2g?o59P+C
zrDKpRIEL|Qat!1|TT-THQd&vJ{1$&7uLU^hT(HDVb&ybHQd%x|AOSfkZF|y|l;oL~
zW)!qN0Rkp8&FM_a^h|R)lQKQi(sH?jFp#FDWzdGN*v(95y^|I}8*TMxrselhgEWO_
zrRDcg>wv^l(Bk{3ATdp5rQu8NLg*5tSurQgo_NXVoScI~6zLKdLUYpCz2MRbNKkL5
z+2)swdy;RbW&8#%XCr=lgbP8x`DxbrpT?uf`FJ&4BGJ*o{4@eVfrJ(>OtU5b1k%E^
zd@nr6&kPo(ak|xlBcUG_r&*%PXlX4@%dj)Z-@sp-M%eideyqZS57(_uXYI=LsWO^m
z2Ub(-k=pizsP${8^>??{@2L$E4FoM(4-)FEq1MwI=pkzTI#zFhaZ_SlTHe+I6Ef@4
zn6$_;LI%`&HfVtHr^I@@Szr>EnspzSLEAU5a|4VA5*zIP2`SX{4QcdGM=pb=Z(@HN
zXmm<!O3Tjygm}w0r7=?}kPOjW-@-l{XxyCGl9s_Hn84YRMzD#s2{N#^t*m5_@laxG
zS_Z#hLS}0k!7oxPkil%ly9$Gh&WY`g483Z-on$bhA%ofY1v3X5O%h*7^Cc!^zDUD2
zH{&wMj_za+4>np@JDvWa4-f35{`r97c6@E`+jQ1`wqUSP?fo{5n{YG^VH$_s?D-+a
z!-?H?bHPN>-PBzAsCJmT|9iG?h;diqds_uCA@e<{@Di5+^%J{is8N;p$sR_0=8m{D
zj2*ZPx_>V_Jk;oz*lTwizGnxSz0_^Exr@5c{rgzwVa9!_eQEhtJ(!T$mrfU(M<_gL
z6;OXkXN@do9}P1O`+rFzKH;lkD{9PfOk0GItwCUvj@!-$BwBGiEkj6<Q090Vt0HAU
zTTv5Fz#NeQrMot4+Hj+GTQEd4fycl)Vb6JxTwLA;0tu`W)J*cht*FtbCyX$fl$~|}
z$Q(|m<*_J40B|~8TU-SJ34qgSTm|9Z*l9)NrA&_z#z<F_OKG`ifr~<y(lTxYNm4Yv
zpU~>jih6E9F{?kySl@O)agF8_K@KRExmySUV?c3C1h621F`yU$EV<2AWY>e)tFw)G
z3;d0OgNvoZ1c`!!i>1Q^iGqWRZHL*4nm3}DJIvcbK$Q`W3bcTYD3%Kto&sq^v2>Uq
zfi$8R4zs_Gv26{HS)8?|*cH2rrREyp%=TA}gW0~B#r8g-H4X9{=6~CGqdEQt^qgY3
zz<>nwoMJh~AOSt67-NiY2Dn>OpU*316UQ63m(Fv_&{)nZmYEj_q0GEuBs|*lG8oH+
z#Vmh<annr;?H0A>*M}C`EdmLMg~c+s1PO?R#Rx7xpn$72NcFv9Woc&A1fzwk3V(|A
z5D!r9y<)i@f<(FZie;b-66@i6#RW@?#d=5#z8=0`?9LR6^-%IquDV#RhmwW$@PlG|
zJ#0<3v7-2j^$;A47+7LG1PN7E*ux7FkSl72w>25YYB9XGfdJZSr!y$VS?zQN8OmyV
zc>hmT*B%{Jk><NE-7UAys?a=y2D@AO_PtdX6Cj#E-VZ=PSs&-@%-K2XoLP1Dj~Qn@
zvuDqloilrOGk`LHG8hAt0ull^vY_B9*gOV#h!`FrLW~TA@Y=&ngiT-$Cdir$`}?Zu
z(!2ll@4H`pRrh;U-Ky#;FhkOT49tuDxRKI$?6XYh9IRVS)*T@)yk!>;`z$jwqa(PK
zjN77&EBCLmV+AdNvhW0QTLRkxLT(G$_7~7`DOupSyt&H$Wx?@$5i;%ZjIIB&03H-M
zp21%hXj!V1!n94kx!V4IL0iU54}ypyZ5ea+H6V(#WiT{C-bWFjQ*zuIyUstAuZ665
zDr1iJ1P?J~kiIFTO09@o`a3&Wj2}>VN1$*(l<Ei+4v116cNJbr3hy)u2Y|vm1BC;s
zhbEo?A*nM^I3Of-lEQxog_p%+7c!wYoN(ePt?+`i_RL`yGDBUh@G?^PWv%dJ6BK?q
zcrQGG+{=N&0U`G?Dcr|<m64vV$Y+}DhYPOci;%*v1hE7j6uCmN^rR{Rg?G!%P4?4;
z-T5LUs5`JxnNoN+*{F?H+sa7e{W-qQK513<2O0ns8t4yP4iGZ>GiF!~NQE-!y{=OH
zm67ug=1Ml$KMU6m=4H^V#b90r*<&zcmJU${G6pl~l~fFu!5*;%j<v|iEn8_9hU-B<
zaZq$91ETl>$AmH<iZ5_XC<7vt7dWFAIXaYyphEd&C-NIdhq9re+$)X=WkW(JFLZ)X
zE~8BQYS^J!ob;qu9TUJHqXDlvCO-p0(5p_6pUY^Z(cq~3JQDyKX>d#z0f<*=aEw0z
zLQ;cc@-rYLH8}96E7bRv$73s;&=yA~H`)I+e1$VKtsSYH9BDObpy@FHh+G|L2M{7x
zJ0>p!LgZ=(u0(!OP9Ct<k(d6%eyVb9&?-<NVr|eWK*eRwu?K{RwGKufwCGq)vE1y)
zf82~k$L72U(p9r#{#*?vh-h}QdJPm1BAOku<FK62My1w7F#t+#43rCqk{bi%0xI4>
zx#i?wo3(P~Q}5Zas?GT(ke6-FzXf^O=0LY72tk`kw>w8cw-xc&Sts;OuJJuP$A+JE
zf^kg+>9))0762l<0^I^aWLKbDK#1%j-5#UA-&N2%=W_l|yLDu7E^E96R3c}``fA1;
z5QTDC{Ci4m%c_7nWBan!p=>0vU8de0TBttfa$mOEW5V@#pq(CUkg_jpoE{KT_GOLJ
z1H$R|Wk(;%YNscHa{B$*$fsHD^oE9V2eQWL4GB(vFiTF~G(x=w`q1vIbu}Bwz1U{2
zv7ZCbW3vjC47#(%eF4#^?yPZNKnU;7;tPNlFaXi0?ri2N8bvcrL_nip?XR<D<*kCu
z*^|}NqyTu<lUE!WuqSK63{N4wCmVP|1*PqqSrumTgR^$5`eweFlrV1Qn@I`dX1<w}
zFm7hy3D+pfD&w(R+0g5*>^p0JJ^WTS*f?EDo-l|CXp$5FA_oI=07B$o)<hW~L=I-*
z38!g%SV_j3@5+7W>_1GJ?;0C|s>rs!e+3YQ=DRrJ{xw|)fwj<;hr8^h1q)rXWv5aZ
zexZAh+II%YWcY<H_MK6eS4n8GoYIF;Bz{AEi(TV)fT(S;Yt#owtZtybO49r?S7#{z
zg^Za2@v_TYV`e}|TIL!v147a=7y4U|qn;vF@mQl9+UDl&yJ)Aw!yDb;f2>ucz*VRM
z3akKt%vFId03magYZM3wnX6nVa2xd_RZw7Tool`0MiOiDrw;u}?!9c!ug3!&6<~vu
zb*_mDKuB5Vny3JT1FmyNzvJqtAcBgDW;e3Y)lp$+D7W4<QDI1kiVbei6;x5y+vMs|
z-PAsNR52(}H%NL^2Z*L@3e*h<k(=(SyNcjet?pR>Q1@2Xs2dQf*&3)D5R$eA>IPIr
zp>FzrQ*}J{p&MH6g%fk-@QWDL-Ker-((bf}$$z?HKb-y0MK3|;5LIIn+Q+W7+l|oG
z8213{O=v`u2d~&WXXo6=EH&$<AK?Xex{>Mshk|-{5hW0}*R>8n+`k6WU?U>QgMYMt
zHRqH6SC&3l_qmbkyfiY+em64nuC&iw>j<P_%GWdwiI8aWl|R|-^@m-vLryi0wEwvq
zc`+}J^x5L#4*8&QM_ua##L?x7stA&pA<+z~CPA;qTyvG8ra<m-*Ie4DDUjRhMjk4?
zEBK^qbwKb>1Hm{Ci%9a@Zu=+2r`$+YzESk)-0qr#jg&YFl`pAE_0e2S5phOG#G?Q(
z`<cL(0nxlOK|}ze=oyL#wXdU^+^b9e!&Uo@qON=y^8YT^WEAkAOc!MoI{USnw06<8
z;@Gxyw96KiI*EgfdO_EF0s$f8Vvt|}A>$$?m^-xhuo^IS+qJ&SExTs_CHg#m24cu-
zZwForK8U#;cr75r+;&Z00Eke$?Pk71C{kZQ1l<?>kBh$G720@KO(|)Km%ILFJ2s?p
ziFdam>K2xGW=RKJsA!2dOvfD{Dq7-UbV3QSn%-@xr#ln?lw9hW5CufZrJl)%fGD}t
z3o>Fg#dD)4=k?ilsv7gP(-(E4XL2E!AfwSUxeyRC8a)K(JNF_wYvQqwyijNElYV<+
zY}7{{{sg>$=6P$#@Vh)~RN@<XVIp&LZx3QUpb!+D$nYFucX_tjF-+_byUU}aEU0U!
zArtMD**o?-g?sa5$oP9b^EC|~l-cXy3t)+^64pPI`}U6gT6oGKR1JrYLK2BO<c(Hy
zkpxlbkOwohsEUSS)#-?bzp?EIv(HB!@rK^Vo>mP2+c7Uvn5dJ_Mc7EW(PE`VAOup$
z_{Y4_+*CrwKjuv=P+N{`$gZtk<l#htE{u<Crw9by58^Qjw|b-W6geOYw|dw~gd3#L
zLa4vZixefM>B38gut`NA=wqDm7=_!sF?tmi5QW=3tisZ!g&H#HNiV_^CAzQ`VFd*s
zsGa2W7==%IBlI#bAPS%Kuyc_1FxSvHzFj^WVbw+L9<Gwq`lAthyO*T=K<cCsd%IUr
zWz>WT#11b~9H{A11Zo07`)Z9v)A}9W*h!`^P3w1fMUSd&)-|;6@-!8mtQ-6HQRWqa
z5EP~v{nPovG^2l-3e&&vYiJh!j2D@bsMUpAqiot_5cI+)9;5IX?*V<FJs=97@d_ui
z2Kw(<Z9I0(3rU_Uj<ID!;@3PZ#MAY|wQ$>5k7r$%U)ij@9>4VGJ?IeE<K3^#4+wER
z9(Kdfzz-0?-s2^%dwThb2x?WQ*Ta@(3V%a^hxU3{kE7FY42c$cdcCS@mZNb%EqQCd
zXFZ<SWTkVjGgcIS7Eos(JcN1sJ+oj8sF=-h+<<6QzlZ-nkfi`&n|`lk4jtjDpn5!Y
zHk+?&LSqJUN$lni|9Bu@1-aiq5dF0(dImi6<q8NH10KFybrm#!Jm95@OciR`X245N
zVRvXlTP>y125zn7kwh<}HQjXXclWX%MC(BeUWt-w12@?QCGbiO{BC^|R}CEXX+2X?
zZQ!YuT#s+SuE#fT@W=|T$2W$Ca*f=KZwv|Jo8_FwHy8hk=B#nK$r>Ko!R3+>?0kF;
zkB(FOT}D&pdYfAl)qgQ$(?}Le0jgMy;vuy5HpiR|VigdrUCZU6k!)6KEw|J*X`+H@
zEyp(LTEzs^#HBxq)uo!a<&*BfM4eR=$7d1Eva8!k)^YjjDE4S-9k&V%6U|?*<5P-g
z<0+VsSDLvzKZ+Hnnz^M?08zoz%qLA|I28jB3SG}-(P&ndTA#0u77*4`b-GP(qz$NU
zG}^QwUmdL=Y@q5843LC;u#wCE9?dG#8@V|J8B{QB<oI784uK{v_`nvPn?nbbr?+rR
z#X6C}wuR$p_x6ZlL$Gh>xze%hZ>-eze7k5NVLP?!X~bn+JhqdE4$Ak&v8UoYIlfG2
zqO^{payPerFYg`Cs_OAeX9&=t|J{77{^K|xtiGFLCZD_o5Z<zzJHLmw(2$4-Dk}GI
z6P1R77VP0BDh-LEat}vT_E9fUM|M8It!(0t;j}zDp53Sd(jJUwQ22qsg8>z<*-!|G
zHXYzt0K&=TRunhN9Oj|(^4kYlbNn!mCY8@UKtA_5%%FYlizJIB0rj!dc!&mmP70?r
zn+K>ZE%KWro0M$fmiq4#5y8{K5&PsQ50Gyik+msSl01@^qo^bYAMfBn!;Z=oDK;^6
zG_V?oD0!5u_8V*r0uwy$Z0<q|DXj7=x76$gQNeYVV|IgF84#k*^5WU*uxNs4;#poY
zi`L}v82agyS%(!QI|HW$5h6OtX<t%2@JFl^Iqc`DbKIJ0<dQp{<7MS+IjjId@W(EB
z$6+f|UHP_<J9bf9z7GeQ9*<q(p>O5(Ec;&e633riXt+Ebp9X*8)-@hsf1x8vr<+d$
zqU8!*_HW^mZXT&qUZS5t=GPn-gp=QB3SRLl$F~9Xl+(!}d%1N(Uh-H)J$~t<89~RJ
z_ww<&e+5LTUXE>6<dA@H$X@Q<Fb+us<&f6{hcpz_em!tVLn4Q~P7bNQx2MAiVtw4Y
zh0J<buHo#|3qaZ-@eIoB<L1AxfM`=6pP*6-8bJ=(M=`G3M4ya({E=H|6LnO0jyA>7
zf_@&EOjjpaks0yW01qt|@}yuZhYxU^0@OfV$P9AZc_Q~qpT)z^%oAp82Qq4$C(PNP
zfT(evzyO;%4L~G}c_OawdM1c*vEmp}!A@(rD8ESLIw!Kf4c9Nq%cVD2B+Qii4D}|9
z1g3MfT<Y%@i4lLTjE1Kqmnb9k0gr})H(Mkg2`X1isC<#AeuCYiL+x=rPooHJ65&KQ
z4z>TuKj%Iyz{23LMq&0tj-i)cF66dJtRS^qn4{=Hh2Z4^i(S}|8^r}WI9E!@?<TRo
zORp3ror4Odl>)k7jQ0c=;A)Zk#bn09>D9snJjjZUK;1@uKZYW;Nyv3m*azt*VGckC
z6<kdMn=|N68gL<0HwgLjBG#7PAS~sAL<QFd0T(=^xe$!+3i+c)*k|c?g{8N1j#1J0
zuE4r_4eUKL9@`>99|$=E1GV@TfsH}r^)t!q-xt<4`CJt%sRx9g0qYSLAl~_XVQyIf
zM62Hym?$Sd1B9QwFD7ggIvEo|`Tka6lChznxm$%v#)d?`zg58ZpM`yJ7tu!|v_}jH
zC!W-+4nHbpGvXhKsH1WzE*e6IBCKMSOS6Dz7O+lTfT&=*K)S%us8Mwb(GDT+6tii`
z9m1NX5)Y_g+99xHO8wwiGRMdAdnK$Y`LQs`2}Gg_Bqv(6#|=T4<dpwe!s?PaVU-v;
zWTKoXEhGJb2Nv2XhfihI$(_PvZV<t<Qy_EGzK5}tEO*J5rn0HYUBap`awu8u64f<~
zb`jvHD|B=6)2VD`W_O;4lI3pVc@ZXjEFSwrgg%8A|M0Go?vXR6vAOY21XerAo{y0|
z_Y3QwwkIIu0_)xDfKc3iF+qRg0OAezi-`{_dji6q`$fS)V^1O|dmaevX((vbfxw=I
zMD{#D_Pjw|BL4KyB0_(NqOF(0^3RoQlq@_Njme)CGh5CpWry!?5z&;gZGvojWMv)W
z^54tQM;;ND8sA6p0QDRZxUdTU`2<AMkID7Wd-7PGhpc*xcpg+dK*!}^8A~OP!(Ei7
zaj6hd#k5kxgLiI~uyHEcD$MXMp#rZ}V0h;!Ik4&p`7h<nO`ZrWk6VHu=LA`vcGx7y
zs$a-GxNq&DF9OSh2%ay<^140H{z;f~WjPx&L4BtMzJ}|5z<H8<Ev=-XA3P;rs9+P4
zr-Iy)P{XoQlv}cj2g$HqZm3{hvRzo}rW!PZ#$@dRI{-D0+S$=fJYVKDpmuhU1|Cv!
z@R`*i3o2PA*&!_5;o}?=$mtOHSC(!$HZ*-DU#f(bz7m%DM;Yp(3nji1lZ%WT{3-3U
z+yXhN)A{$J`yx(@vI_PBe0Ekm)+s_4Wltr0KHe#Cc0GCNEb`JWVO=0Et*FN@eLfB7
zFmji8P@kC#2wQbg3Zr}j2><L7{DSdMA}IenANZ%Cpatgx|1>1>&-3J;=c4dWT*cEP
zLW6M6)@WMRejQEZN~+l&>;9g=Eys~t_QEX-lf8krfd<LF<ZU$C8b=;^UCymz6O-2i
zU4sao>!fQ8bHM|2L$0V}wW%9HX8<Bm1r4{U&lpFEra#wL$DRo%`vdEP3a);#eyw7H
zPu`M0p24Q4ZUx#Nr+o4jdC@#A2~IhXJ3NC82|EM%`p7E>sJ<s*liBguul>*~emGI1
z-hHGDKgJ#%@oOK}p`rO~vd(<pdfAuvjb~G3{bMXv53Fs3r+Dr8zOfM?8b9ARHUfl=
z=KK6*U-t<_P&QiNn?Au%(4qyt=@SfzY_z~98&Ri?OMI64p*PUX)*<N}W_dfp@uhzB
zL6tSelX-sY2czp@bMQq6s7Kd$2<gA|@xBzPxM&Ac{k|-o!{(-!`Q~E=R4^^`>7FX;
zMaPp(UiW459QIo3^*om*gX=lPgqLmb<=n^F^XUfP#Km}JsRkdXNzf&1bK<cTerT01
zPdv_kFk*#|f6|cC&mpx+-+IfJWlym3pW>(flM^1GfzmgpO#`A5>0^@~c|9OBDt-4Y
eqfsI#jlLOZ)KJj=Hv^3t5^3~JUtV~EmHjXB4CJ~1

delta 43836
zcmZ5}d0<pU@_*)K@~+HG=FD7St`P1df*cA7hk(a=;O**uS3qT5b`@Q~>-Y7$kz0%s
z1f&5G1OYV&DAyn;hakv(gK{Y#%Ap7v6#?P*sqTJxDE}~3uj<p))z#hA$9s9@gQgQF
zG<{*HW2iDTcc^n=UiDqM)n^0QQFrC7(;e?-@BN>=$DH~xW$BHFmDnM6U+=spz27_1
zO$Pq6?|`x=`}cjgZ@))b+0%J#GO6dEPjT+RKK&mbP}b+!z5@mhXfm)xYTzH_l%`Fy
z=0kbknvSvAA0NwW=Ww)R&HCk~_3PB7H|BokaAa@pmv={8Ic#L7jLa){X73!8_uxbM
z2eUp?^XEl#zHXXbb|$a=>yG`|U#itwM}u$klv8<5^9$9~oT@g$$j$Mqf*1Q#WwUD3
z9-$}tr}_>YkRrnx4@g;7*VU-a9VY8NK~1twqt!+pGxg+C{U82k?*V;Mz56}F{@z`S
zurtqT8XGfOjTe}yJ_82!eZ2R;KB*=H`t)HRjaJ*0-~G=%=AUp=eFvl-exl!iryd*F
z=aJOFC!R<>)aT*ePXV;=Kz8|(8tR3|Pd?Wn)mv!7X}t%M((T>v?0L^^H{G3jy!XHR
zz}kQINj>q8fAr~}db|%T2Uee_`}9lo{YR>otU<5TGvK3$)PUa4nW-nB(f^sg1NyMD
zqt%c<)vr&VM+T(&JyCCWw)#~y?YK6_;ddU-b2c@-rY=3E_?;*6oDZ13dQPrC?_{3y
zvcnvsm`<mv<oKOuv&Y7$K}YG?JViI%W*%_?bvDoNS!6De!I0UV>)>G>Ycx*1;eon5
z#gsCRJaF^!Efog|<@v+bQy|pk#p32Hl|#U=!KzXiV`}Pl5p1b{pfxGZgmc)QacUwz
z^;qAB`}7-tSTxz?acZZk0Z#~-z60Q7^6wwpK85&2BR@6ppHKAfJFxe_zEAhzjRKsf
z;rhP)QoVQ-|LyNq?DlF}W~S~LfL5ULAMXFefB~g_o<*?qdz4fkf3kP~z5|}<M}d>N
zuD|Pvf1};{_wM&^>K^xwSLZ1``mxk(y^xLWou?Yyeu@GX9IZBED@JOnr!NlzvWq{c
zouDSv_7nvs8#Y00tn}~0HcwDfh}iEZs7+aTqMDA%2zt18|Nebt$cT!vJ0_}Em%??1
zbgTkD4_48@qTv+yd9aF>D(7wnHH>{QQEgc|OjW#6CKoEhRA0&>Nk}bjXm;T$PQUX-
zRxnBJTJfS<-?&Z{Ts1!-Rh&S0QB5|nNFcnZHg92G%@Gg?)oj!xwM}KUjgSX~YBj&1
zRLKKEwOUeckwB<cTU~9w>);R&9zFhbb$0jBHiAk_H9sy@R3MC2i!4AD2&2`;P0Tq4
zN6`H0bX9p<b;c$e%rRLnVqZRG=&Wd=?#iYntIs&A@Yo7>4Or9F`f%5PHJzMTz&nGc
z6IS8dYOd+0exzvn2*cx7-%_2k)I7M}uz1j$0W%?1&r<z)GgWnk!#t4ScIkfSDOCx_
zHfIZ`srMI@gRrd7VZ|xc@XHG7Ks%*|3e6qDCx+j7MrBjpS9g}5v6T!col%V<sboOu
zjG9cFuZ!+&`klY1**8B>iyR$)v3+Txjeb$<JF5whUsQiuf|vmLMQzx~d|Q;9?{{8M
z+4=eEJCzq~jC^2Rurcz1aY6N4QI!vj3u<wRxlHHvcKMw(*)JEUmCni<tv;??Xww?4
zKCWEAsL_(mr5!F{)M#Z_nJb(e!|iuY&fdR7?V?mpwlUnmn5@-DmKzw8wfe|%17ot*
zs<ru}sEY?p%l0l+>nf+)5FS8G*YYjfJ%E_5rLUG|cmOe7YkQ4(NsL_ue&?dB{*n4Z
zZudntMgcGuY57*`6#!$A7O<kV02qt3M9Tc!<W=$d)h(K`U313Pnc2-N)LWd{zkI5y
zjw*1i5!DOCEn0q|G{XzTEn3)WX)h4BXlQ8>q+SH+7A><~%asA?MUeWTvQ=}IU&+GA
zyNy^$ZimnB+@&d*m@n1+*?|~ond@I_0Xwu-Rm;JT$fA9~*`-CTqJ1cO7ZrU;_|)%r
z?$g+yht%J?semV{z7l>!$v&+<(#WEHn%^2o{6N~LrHjq+hN(EwXMfgm4rXuvOnuGi
z`&rW?<~S-rqgm>_#(vqPzE*kO!Uh-E=PhiIz&@|}liX;Kz&@{Kip?821RnmbvClTE
zH&y;_L(r`CyA46J*6*4>Bq1Dt_+5)c&7r~!RBjNvZHqd*VvsIts3{5{2I;bfAOSH*
z_lt%H35Y>@B5B^htpGKYdAGudp*BJ;5Qf?aG(Hd2{i5A9C6{#cXv};ok3+z}<Fezo
zsxy^}aW;k%7~^aV8llJO($AXW1jaZ$oiU%}5Rjd~p4p-Hubf~b<Pq0Kpb>h4?r$Jn
zkq3kcdMa(csBs9yW^K07PW7eSs#;wMN+}wYYxR(r7&L_j<ysvR15HjKG5FQ$rGMoK
z3XvlWFLBE5!-#2e0dSmX>{|Wqd(3K4U(N4asw)j+8=a}Ht#0pvS+pM_bs*;IK9Au4
zzS;7<>VK3<$cT=kDH>|B)UFAQ?o0LhxS-K}sgAf<mdk4bqt;{(exZKss9a-X=&0Zt
zJ>QB18k^VXg<^!%6dIe?=nYHEjRFH>^Oo%1{pw~%<rW*mfE`<GJ7}ohVz&tm)mwDL
z{%jFk7^-)&!w1zll{;++8mM>L5HwKl)cqyWp)^qM)SEQpomo>bPVdo~<6mm54G2_V
zk1o3~NNDcSWfuks%{{u+g*64k^8uZA;hR7p#17atxM0Hp+Xfn>57^b9LHYnyW0(hB
z7^Beddd_Ua5&Ol>dT-Q%*(bkJPpRJDbv<q_r8!Bb&O9Xh?{C!#N9!Smoc+KB><~lF
z!5{%U#K0UpjXbPVuc|hbKx|AdJAJzm$^LX)9p)$lOU#}S;1Y(1y9Olms|}yue1p8J
zE9km4Y}QG2YFUk;h|UQnbZU&E#!`p+YK_sXx%slt0XdcpIHis%8*7(Cy>qN#xTFsC
z&ap;;*L;oog|5JL)3fE@sVui_x*@#}E|jJlQ86@ugwk{aA^4f792{Jmt@}aU;JB*R
zE{S?zts(OPU7;RWYakz37BrPS#jk#8<Qz5F>9gux%KiZBH9@;A`|6MCqfXYZi&n%s
z{i=G3Oj>{RPCecGvA&NW8%7@6r+@z^`nTZgpw8X2AZvQR7HweGC*em%zM1+*|2}=1
zmZk1S#@ZiCqpatgdN7w=>ZBF2i5J!P{9huj%@(FJPobv#%1|0IOxY#PK*D0se4e1E
zaQatN&F%0fXgoa(>C7i=*6-@7R%N`u5??&vtwJQ!4wKr;@D6B@M@a2=CA;~O`oE6S
zdPPFSBkoob<dRTa;)I8C{px8WXWpWBwRVc{w2>Dymy;Q}Wb_XPJF93bGCvp!pNfbJ
z<sS?Tkz<9F!>|5iDC5|UTy0DhehKSxxphAo7|=2ALJe^Sxzso_mqs<t*fkt2RcAP_
zrfHXRb_~bj)%mmGOkK%>@xK_(;wxFO;a9_1awQ8`=c@k1Ly-OUCl*5J{GY%u09-Jf
znJd9CmR>ZREw5x@`1}1&hG8_jWH=k!QdPr|`Z_Ng&L%c*crJ#U7fffPD_Iyu2AO}f
zA4%KbKS?168)9CGKRg#X)ll<~zQEKl%yc#+_$tebNLPlN&h(W<BKa8cC;R}GBYy%5
z`kf=qKl&o%cfMr)u||a$Gp>Z+&D-r2v&z}JzDV%UaHCA;wO6vxa5bh#w79L1Lc@(V
zogJ=}Lc6_cUg3U7q20#(NfGTf)<lUjMIfT5J13aR8|<j6&8WgJ(Y<ncxKA*XDH(|v
zz0?V2`i=TXRC0MFP9!W5iAt`B#7U+zaU}~Cdfjv;uVkS@lTE~H8{TCA{idnBXF8dx
zYptsA+cF{-f^XVJpw^H~zgKTWt}tSn=`54*xzdQ~b_j45jCjkA9nJ#wj6X@it23)i
zXY(t;;MQ4oOL9%P_3bN*6fOC#>1<oCC>pZXbXH!;LXopgXD72OuQ!nAno5IAn^f1Q
z1`K@S@l<c@esy4N4ejbA9`O7a?d^otTr*x|-hpw)=~w5QIZN1!hIYGuzM1FcW2KXZ
zodu?n<YOf(Ff}y+GDg!#9v%W=f!QEorckbv#<hj)YE#Q37McprL5K;Ng(QR29VDnl
zY=Ehy6N^ldfDx0pB$MVc@YZ5B-_(i|i%o?ml#rn&TTC*gTn2T_vY$+?Jejp|s76_m
z>4qBR`PF4+&T7^rU+d~$X66NWjq<2QADK#HUZaK}VKr!;G3J2;#7AaHBl8v%lSfth
zn0=YA-In;+mZ2(rOft7~8BojF%`WZE#Bx&(%wqgsPBLhA;Gjw?*fN(kD6zuEp(?E)
znT}irRa(g&aBH0tD@`TCU7W`oX(h?D<uZtnRcwh{yC$*9YREjAR-LOz<~lBep7;s#
zc(iWGPfUexWx)Vi;(S6f<Qmnlt~GNuvHy7Bnzd$LA$JYmR$FH(Ere^tei~@Lz{~>)
zh;=3sjfN;jCD(k$3JSDFiO)<q&wvS;&q#)Ppi1q!p50ZTwM(ow6~5^~OyZJE2QCBG
zY+&ycXqAZ#Xck^=mACc=lBwV_aLq=R>(x3YH(IVyxob9(%wLhh8Gd!EnKO*_@@n^$
zY&G=)0OdLjEY5bC%3jlHo^)VG){r~0#A64%+KD#1OlLEm*^5UoZ8r^)v>7QlFmDfW
z&QV@(Q1pCbX3zVy-;|Eum@;_>8x8Y~DVI|q;hb+wxgrAzkZ(+^$iBtk2oO9yWwMqb
z?Re!W8-rGLr)&($FHV_$u}FaqFix4_2wxZ)<ipb@ySGrgsq(Z9L94pcHUt%P+LUWD
z=m6rhi8a~1+zL=<O?IGAyRY+E8zL7FXU%-_Umi@QY2&QvjanpEDr#V^pv2KY;;0VJ
zSB7Q>gtg_lRro1ZGk5@)!TI$Lp;U5kzF(}x@f0wF^Ti}UC`iBu=ck9}i){d6V6O^s
zJS5-wxVfqT?Q8ngck**i<U3;X3sQF?!NdM5PYsW}FfP?4MVqaUW#5l$Z)qj(<m&<6
z`q-jZKgw5D<~z-q23p^gtxvq{v&GsBXX}sik?>Gsi)Zla@_c9aD>yK8MZUAM`7Z6E
znAH56v$r?Vn&(z+&R4|#CAg^F=6vaAkWkv34?mL&K_Xe%oF9Kcpn~KJ$j$jh_tOy0
z1;9bkoAa-|nXf5HN3JP1=ihsuSxrk26RoN4%vV0ocgD^;QrYv(HK*fFFoetT7%tyw
zxf~>n+L<qx^dMo>&U}#p5*A#(Ge7mYbU87w^8zDwvD-_vV8!lyXL~bX!gb<_llGJL
z<Rdfq0~2kuH{W?1rVug^lm7mE<tz4Psdjr6ep!}LSnjtiqp;j>1p~Bzyx$52kg#lj
ze)_9=%M@wZfqdsxvUJXJdSLEB+fK;@+9BAP`J*Td{gMpj%V(2{Jf5F@wM_fSQGPsM
zQDsw6v>(scMDRn3i}?d)O)f$(->?3dpEEK0{8id0N8rbN-EAJFUXYKdP=~sd(b)#A
zv?IAy_$iimcmTYiE<@mf1l~{=@M!l7Bx*X;6&&s2SvY6xq%3@x%h`g528nFv+1zlK
z$WOTtSil|O5}BvPf-_!pAw#O7ppu#Z8|f0+sKvri`jQJ{-W5`4oobiJ@+~R2>tzDF
zLJC><D=ue)dKP*p;746)EAO;EXN?PoHxp>6%crIu$2{${Nj=876pgzXOyauWKk6VL
zfiuqK6}<^0`pY<%pXWUE6wS}~iClp;W+ewjRVT1t+i9I1ncz|^6e?<h%Ol3id>&O3
zTo^A!8Hg%8jdtUm5KpOp5hvD__c+O+U7QK7&RxtA)Zi}cpu2LGWhY&u4R<t|?$T+S
zG}r0EurkA?yyJ2r0nk8-Q$E3pRkCd%Ey{Yg$M)?^m$Mx&P{_dSSuW>Y@SrZWaIW>X
z%Q??sHb%W%G`h@Y>)LBgAD!)z2OnUfUb9_3v8MwP&YJDQTtf8%iF(a;#l(<BB(K+O
zSG*gqm*h~rX1lsvXO{7DfH>Es+!9N%YLAw#5=aiTIk+@*5-_#VTvt$RI)Fs6b6prd
z<Wm$o*Oj_i)Q-0i+&R~k{);S@T8(dt&2`;yqgjhJF)-nP#V(~J_IfT~r;B5<KG|P8
zXp<Zjcp}CN$ibAwF1afW5~eJ61;j=-NSLzNg`*#&RsaRHlx?om26bI(BhW0i)Fr1M
z$N*uf%P)cfB<Z-2`EGWjncWy~Tsa@P9kJ!^?5iEMpu&tUT16h6UA173chMp$PTTO0
zE$^arHB-;@9r#Z{=U=CFW7F@~672Eow4T{6-L&g-8|`<=>Bo&YIpk7~AWo)I^5K?&
z!g*}Y4cZ$wf9Z0z;w}`=;GeHt&Rcna2o3_|u*><Pg9jb~{^C;318}fu0b)|%ytiMw
zQOj%ls|(9Hn$Ng8Wn<@D7|1E&1P6e>xtzls=2q&TZVI`}F1GPjZCk}<%YERY0WMn&
z021!I><Wkp4J6!m*@ZN_HHW~%!EEnsTHA*QyA?6ixq0{ucFVj0Bvb~wkvCBIfJFEV
zb|-EUrdr`M*qywQhYtzJ@EPpxe!V%Cjvw3<J}moW4=t3}leuNEfD2ohTOK%oggML|
zE|w)xcrbS(u~~+vD44mM+`~sPBE_V~+)eK`FVQUPCWR^4ukY4ga6CB0E+rSGOmXLn
z(?|%RlqqhXI4A~5N^Tq!i|XZ~lqv3_zsOQ@WhqnK4Q?|3&I`dPJe_@Vuhz3_x?KjH
zS59}!-CMWVesjy+TaYMYx*NN<q739rARFB+%b<*jrtj(Q#&?;csk^yp)~$6b*T)9s
z*6)<nA6HXwm!<CP9=hY6o9^u1jh`dqM8E%Y{A`+{z9`pB^=4=PS5LEd{))Q?xBjYn
z{kV2OTX8A6BY?B!0RziegXi_eto{93z-8iie_%>%#IX-<(86rs{aPcpnR@gIAom+U
z$H#2;{aU9g+-*Sq)<<lKk)`klOcnhfBpgxemi-?joL%d#4?n)8=tlSnN94f~weF-C
z0U-=WM2VB?W^SjP-Aw_q#Es$Zle|>7K9BWzw0HKa2eh@ygJ4=Es_@kkw;V5^ffARv
z<#+)Su3zHDcp*xp6M-e}1~*IB(}@7Neu+Er7xNxoBIe3v%=w^pU#Deu8MMK_%r1jA
z_?Nk5O6*o>gMXPDDe(*yV-gN(H@kDbac3tzsAX~sHoLK)`7fY7)M2-=jlH!O%C@;>
zo&hGXwz=i@E=XW)b7Om#Pr@GR61&-R4{4LicH25M!0&b&V!Ve8bauN7!?fZ;F{sby
zZr0^tt+MiSs|w(v3ZGlO03;wjcl*Sd4@f|K?nd5AC+Z%e_PN=zhqcy~`)mjrnfKWc
z)RFdC9SJ&I2_303hd@{ybh8$ZXk9uUv>_-PIA}xA+Tx(wCuT$s?<WUosQH}wvxiJR
z=FZN3M7!T{-7y=44vvmltpO>39COPQ9wh8IMpZeCZEI(NU!CO18CKwk?Z{sL4=rFi
z`K5^eJgFsa5gXM{;o=M5d4BSV{sYa_!{Q1A;yWJ+1D&c)^2jA=0S57D9%ZHnvqCNg
z@d7z35HGv`No|UwYPts-d^CuQXK0GIJlF!VIWTU9$N3<_5#Yd^<xy&ZhdW6^1#^OA
z)$34ezwJSiXLEr2jt2?7%>nMa9%rVi9(bNdSpeXniiL~}pLp5W04>*X_4|J?i(=*j
zkMkBAkV0U-$N8k$6fIFep}UyfK2U4^@M4c5jy%AGVT(NlB5eZ+mBk*Jwt+-fTkMf(
z8<9M{S?rN%o8(Y>v)F^QZ4fni0fptV?4f}$v1*w|b`o%j?J-2Y2ofbN^T@0dBuZN5
z@&6z1)I^FE=rT{>&MR45>F(!g?*av(#>+jp5LBAF>8>8B)~#B$OFjHl|NedYJ^UO_
z{2u9(V!fW$Qe}`4D*|Z1h~*x6U<49)%RM+Snk+2G^t>iJ_h~KRs9NKZqf>!GeP)eE
zj!qzfvBo1;b|8VV#)H(%gSi!?4h&DK+9A!R*@xEBYdq;*m|YDn!jpH1J@k^ptfoaw
z0i6Nu_9#ta7u8gETrFcYgY{z8?^$hC{uBM>&7QskvaO!e#wwK%6eB0pVB2nwoESmE
zw%s0|n0`URw%r~~zqI90z=sbHQ=ZrE>+-n`L0$248-lvx=N_Lpj)e{&KKI}_b|T%U
zD8Oj09`z`vJ=samYhk4dzb#W}5I<_Wi3ahb9@(X#2b`lGbZJ_AfyCnLs3(5fBNku8
z;ES)XJ#z6y9I^O1<`KKhTuUszj(IX2xqqvq7$V`Ar!(DIBL{O$l=qECE|??>KK{m&
z;k)aW6m0&+)A?^#Dx$Hz{Zo;cP`>qK_@1w&h<N?h)4A#onm7YF?vcwjStO1?PW;IV
z9D$thWNy5&NF0HjM9;sHg(HxYo`!!Y5=S5>J)On2g@kX9GmukP;`7LIes`r8Mf`p5
zasJH;b5y6!ll|ulS_4OAo!x*MYF_8b7kOrZLNjEYCvL?O&5(5zODAYArhrnpq1jIc
zY5&HOyP!S@bU1WqL47>Z5%|yopUD591B{^s&BWP0NWv&6?IngRkXXtQr>v*+1m|$X
zTdZM#v$)jV51M1J>yZbu)lmgGW3%&zX+EWJR6(B4T#fWPk6!_)DNs_Gg$}mmL8FwZ
zFKS~F;D~cMJV)Hr6rk_+;^HuNG+X?l_E2(kf!rO}_@3%$lHn(TxSWCW7}jp2wleW*
zf!xdolei>=6*9_&ePdYYC9P9xj15Hl&0|RBC$bvxKcygNdUoJTT7RWrN&$`<AA~MH
z>7L4dep&04oLZppS(TX3omzli_zqQ!pKQO$2EL-zCf_WOo6KNB=uHxOK?s4I#wtf?
zgRh-dpz!_-O|o<v3Atbdwryt=<jgB@&_tO>cMWC~V5hz>%HVsgGugRO+P@Ps3*-hp
zm{6ZtfGZt0aT#d5%?8zIHz(h=oPoVk$h=*Ed~FEX!8c25*{K?BShBW2?$Cn?q1pl*
zogNiJaM@f|Gg>>AnrpQWwm%^>ms~c3?g`-j)6RmNjoERpYQ<V`XMyfBKczv*i>XaL
zP@o(t$ZnjVbyceHTMYPk0t*im82LPR1c_n}6nF~wC<GF%aG=0@s6dQD#6WLBK2zYV
z;2|hEFymlBap{#T039qS?_lomaSJf#5ArI*z0TMwA6*?xWM{vw&DE>Gv`nE1aFAE-
zMtS)JILIq^qd>xxLEhkSuedNs3^GL>>~#+FiVK61hmwcjniro;BnuY?hkEJ4AkB+j
za_va3(jD_6`+SDh?jaCjVTeaCVx-qA=6jF;8|jtvJxFxOkzP696UpcMkzP69OAgKV
zBfXgKuji!!;uZFvnc9t&uXyD+;N^4XD_%Kgf<&>ec;#dOl61V743-G*VPIaA{bi=M
zRPVXS#-O=vk&Quf+aj-A6?pmFw#X}21t4MiBClK(5Ghs#i@aDB92ZdnxK-JLdD_2}
z%2jqLwAxwamCHUa&qP;w3&m~+NLaeci`@>KpTV;<k$d@V8Mf^MO)X#JmDe@!2<ENv
z%F8k!p}59tU6%1G7;`sx`DGb)X}+d*++bTkE0Ya&J!#zC;FZ^~pa`H1Ufh+r1sxXq
z@LRk&`@HPB1=?TyTfFj81$L})Y0s;q#n}-^V1O0}t{@Q+TfJD_bVG;4ma^ZuoqfAN
zyFRhqD^K{qgv@qo6Cnd?C%bteWOjPxc!|wn;(E~^|H5%#*={y(p>|7hxAX(Rsn71F
zc0qK2MAPo|ve+W+hU8waJh}uILVLYfL<%4{;0rH%VUc!o>I<(N^iW#}ec{DYVpaee
zKJ*1&&WG7ki?o?W!C)V@18+u~_^9eb+0+%<t))YKva^ASIu7+2VpReXrVjN1>VB?*
zha*^YrS`Y75w;5T&k;UD?DY9~{~Y1NPT#8-pim5qsb<qxYGW&^eKO3!gyq#f8Rj4X
zQSFl<3KFGO`{0T@IRdCr>_4ltyURxTgi8TSJ!6!ws1YBaK$4KJX)`{C<1ySfhW)fk
z8(cZYE|ogQ7@wSEAp?jpK6y7ABp}B45VEgOQtKlVCuHY;q7^tQC)gPL=AMl~S>FVo
zPwWsu2N)B480PtvU?0W(l<cL|NEj-n*cf!XdWtV!WC#!f#uQ(}t7KKE2Tbu@-G&cJ
zKI#C|*nOXBm8H`_NEwRtX+F6X4K`G!`LHM$$Sp^gp2=2ysy$sc({3h8DQ4QuL@C8g
zYNiiGGa(17WqsCa%PMPaL+Mgot=&vC(bf9owPT+`Nk=U?j9*=bmfty#{e7MGZsj~1
zf-cp~vmxkG-8{Rc=~CT1U%UYyCVX_MZa$^~T&img0$!T$lj8(PXwLV^aRMYX=liU2
z!bg|tmc0GyXPTqq61#A^O}E4@oNm)C@yQVaDu7tx!wA8zFyWl!Q(w-`?AG<T!xa3~
zmsdc$B6&EH@H^M~ltktR_WLL;#%i8bTa|zdEU-nQ0TN-pmO2Vus)rJuu4mPowAsn^
zK6$ACObD$fpYIn!AUCsnHfslyn|)#j8=BN%Hv6!nfu#^3!N_gwjxE|NiETC#4Hnx7
ziSnj=iuN7s;uft_dWTOYU|>RKhYxeq&o~vx!>Pa_U(P9C_J6i&KRJAde0gE>8!7>N
z?Kouev0mG?Z&P3Tlr)7HaiRXD4;y#0gcNFY#K#`pp}n0t;*%pJHrOF`#D@`bn~(ze
zjgOV>)V8O-@yYB5d*7UmZn05Fp-v}#EV)bDlsf5?gB$j@A$8J+!R;qHI`#Y2m;K02
z^LJ}MYTlRqdf0pm+D<>&Tf^K3wV6F?{Bqy|6ZX~k<pn;FD5A!X3w*Tq1rlAN#vks?
zGZ7+@BcQYzf25OnEeD1A80I*nbtoTWgVNA8#xF1Y`}xo|#*fO*i^0HvUtQ<V*^&MC
zA+5~qUFX*m=4WJJfDGKo-aVylxNW0fT$m#!ur~TrBBcij12_6{4S);;2?IC!TinT0
zdLsFD;6{Jx9k?ezn9$zBR(+>E&|`~bADG0oDh(2tTdYch1m+g2(nN|%Z?P&Jpk~=l
zm2ShPey^#mx7)~kuCr<mK_G9Zn!iXVOhLc;g+J$j-x2#wVW~1ToIUfs_HRek7k)j1
z{MhLXk_-0vl`gz?pwJINii{2<%-(024HDq{EVDtv?0uHmL<+O_k=X(q>ihjlX9-RR
z$RKs|4svCXJ7vFL?p1&U`hGw5D&$k3@AnsW;*o%-5`Div+|fMkK;=Sy^@u;G4wd`T
z!7IluJ)ftso6cw(f=B#%iTMI$MIqEsJ?U4z_h%cQ)h;=z@LMeC@dN|cNq@fB@&*ZW
zPx>2)mIeuXPWsErc`6MO`RhslRp0x?B?4j~1B1#bzqsN?MG*^a^_?I0+3x10L*R^G
ziN&tRt%CnN)n@>k@sswKGO&b?L);5z{Bl+XiBiw_F<?+Mg{a|w^s}Nm?f!rLXzNg;
z|LB*KKZKz3qaR}$c|AnbPkzy*iGtTbTE)?H{FC1hM^$*rg)xI~&xcD3{pu@$oXOcQ
z>$Gio-d6(XDRlAESx8|rnyommy;eFpAhEy%*64uj${>L?I)JWxA6LP{v24%<?f$Z{
zwhDEGu>o1zLSEak0o0aXNG_!6GNxbDrj{{Vhic0LvbK;xF)V=E^4;e`B41~_FKUy@
zU$=Frny&|BH6cSn0aSAnb&D`og#pYUQ-0SrI(#z%ddz&2su`wg&JM7zJo@YHK)`de
zEl7}noE?yx;2;4xJAh5_Qxs-l7^yA}C`%UIqW?>&!Y|=)@S(QYvIHd57Lz5kO#~8A
zwK&jVNkA;nh(W6&XEq=gXp#fRWCL=6CRqT=2CzW8l@||zWdX!lCyF!HCRe|{476Al
zhI!t$EZ`D-3nX-xk=x&-lbkS-tF!Os>eC%PR|jPG02ke3bwF;HfJ8-B2jXJk0Fsmf
zNGhnif<$*+9VijI7(|NBu{zM`4)bHm)50|Qt<Tox>75*v>+MqLRBC-7pU-9_gi_WA
zGVLWS<$CJ_l^uEB5vEjcQ$Q?FI%~RGz9}Hn4m^V5rhrU4Ktgd-z)Cy9l;G_Mh~-H?
zT~|Bquq~i{y&VCW<3bWZI|4HK012QS0VE&yBXS~sbx$DYXn@Vv_4|B#0+{P~5*ne%
z*&oQp4Bg|neSbjae_#V_e?aDcAOW^NAUB0U(ij);U&AL8BKc&pKM-hVen&owQ0N~C
zWS=$l#~oddSSEvw>Kw6}1|%1Yi;)W?N;wk1$Tf%7CsDt8HjwjL&=H%G#|AxRgtC<`
zeT?Ee8^GHKJno}peI1YcY2|fR=z<H_IxFHq0=AAK9&?M+8712;1hVfJ=p!9v7i=vu
z=0ZTu#gKy51!@Qy52Mt>F9q16KK-7`OICfrMSU&><hy1d0dXmi7HbBOfVdQB+T46s
z6by2B_BWqC+fg|@D8n_%!*zI2-Yf$NjNw7A*z5yIO2Gz6a|`wKC<S9RI~>rrRaV;&
z6pPitdNU{%tAp~DH>d!jI@tCa9*a?m#Zf`=VhIRnjta_P1PRSiK^cr7p*bpO1!I(I
zJ1)qB@dgkuWt?pTMdP@jj7B^K(zu|EMvy=n7eqAv4J{k<s}q7bd(pDDvQ$gFZacP6
z?_4k;s5daLLM3C=tdrQ0LcLY#q@Wy-zy#u?pqzF=0&!9h(=Me~G4lKytV>w$Q1*tc
zLQVQc&=AMbkb%k@L7bw|W*v0Urqft$Sg$ReX6q2rw4glygA8=01(7Y|<|b4?&0vEf
zdb`RQR@K2o)n`~$2ML53LAi<nNjgCcIA2oNh*1m9&i)+Hdpk;J2jvwjaG^9isEL6O
zB$Q?cu^&b^dt%gPbJ>uX-l=k~T`a8>=i0?m+szHi_dcNlgt<Ya*Jng!(RK^i<(U3s
z<pLXm7K#h3*o*N-TM+b$6cQvL76h>?d{#hUrMQHZ73n`!F0mnKb9zZI-|{gn9G3(m
zA~%Wgh2xT7lcu7>#%LewBlcheeR{=5HUzz%^-)j`*pLClN5ObYK9qul6(0p#x0SJh
zb>s?Gk<eRJuCNgdAgl<=*G6Lsts_?i<!hrLfv_To7m}-~AI4}Mxi&jHp}*p&SZia@
zLUOI`PFhH=4f@4A0Ucnh4K{9SUc(`<kX+9Oru6ou>x1%2QjD)4*9YZ#A0$-PQ^SkU
z!2)s<+n>_gb=+hZO7F~W3d(n8V+t)GHwBa8WmS+s*hD>d3(eIr1!oU?g4x^CdJm=3
z9vg&Sn%!gjk6xPH6O8k#(xe2CJ;9R3<|xV`;#j5ybAAqH4;AY#JA#LTm<niV<&2}(
zsYim!w?X#b5`9Y*eu`884*+<?>Ukgmc!YW$r2-(43LFU*ej5}Uq{N_9Ks_3CeiIZM
zq>=}{uY+=fRI;!^dMrpAq+_Xuaq4_$g1D0~G`q2p?p3NlSXNMHJ`<GZl#m44nV_7K
zKq9iv1pVUX6_Gq0ITH+s+a{8O9)Bj-N^BuZ7KiD0lQ~^D0TOjVyhA(IL3gp(15Ncw
z9l;Q(cbpISbwPQn1|)2%3x>t+3`l_01+ffm2~QXK)pNm|--E1GGrin<E~vZsC6^-j
zIq!Us{im7!VAXl6df)=;d{FK}g9Oz1Aa<cCO#zAOoeu`9_^N_PR1d9wJ{S@=T_lSu
z-TPlN0%sPHaTkJ0VaBXKh85Mo6T~_mH5a}G%|+$d3KBRMtg*ES<7D2&AbYO4-oEOh
z<qB|tanb58AOUePC{JHO0^(v2JCbzz3KFNU7lYR6E776?7lZQjRkCo<dof6-uUlzP
z0awsQgmTt~9I=(TxTDgqZ?;tneT~CAB7~zPh6c;yH?>}5YMDMU`C>@!hk}V_d@+R5
ze-uKnZ6sS>rq?A#hUCS4T&9B1$PoHxa}EURCAO_xFHO7@l9%#v6N<PYe2E~<Wl*VV
z7Qad_PF9EH76ooOL8dx{wJRO7!y*juFK7RLm7eQJz8q5cCLD1g^>PTubYBaT;JsH^
zRZIPw#491CDK#^MXlM16P>WLj$^yTkGl~sqrFTn=3dwyFFd;K4gn>Q7OT(aC!;ZDm
z8zyT)az6yOW*}1&LLkn?hzDFm&-iSUtM&ICiSag)4yo~k)RhZiWM%A^)_V5@3(4ak
zw_-qsg>W479GAh+If32ZM*rWE2_gA12JVhPW<m%f%w}|Al!n1^dPu2=EqAi#pI19&
zuW75BN=LB7+Zzyo!gNv)wWfh`dZ<YU#EMGlG=WYJHEnOcDey3I&d$DYjh;~wvu%gE
z05Ut&s0n{f#7$%4du(NUy>sHdkiw@QK)E6FUI_2h(yJtH1q+lpEYSfnb8H;ir<p@I
z^lA%k>d{pDd<Xru#N3d4?*dH7%ne~Cr0p=bf;*k_*zpc}r^GxPhpwv6BOGihLk4fR
zz0bN==yxaIw{d)sd7p5Q;gS&EcUziWQlZaNl1oDh&l`ygsih(0jbDrU;}y71v%@>-
z|4>q&+D;5W>Qi#!aO^7NVZhxG%Gt?W*XhFwHiU3$Nt=uOUereR=5_jgiH%mHf(g})
z)Ts2*5WfetiG{lA<@aw2$@ee8gv_Q8-oK1<8Bm+izcTLBop;@m>ObJIvVqSI<iiO7
zsPE&ccqa)Y7siQ2L#~R}-NN4Jsy9k(3CX=U+-QQ#mJs&ha48B1=rdc{;jVg{#8xYc
z!Gz3Kieg;Pg$#PkHrBeEepO<djYB<V8{vquFeYwigS(-u?IF2$>ft?Rdk8CUd`AU1
z=rKFk+HQKw^bXr4)MIv#OLqHA%7fH%p`6R1Y^1xsQ}><=>4o%yiRz%#^n8e2xK+QY
z?0iV&!!vQAeLfUyLIF)As(e0l^^Il|u0tbZi1oisZ(4RSr1Hfqgvh}cLxudzok-|h
z47IzBzAXR}4=;t-`rGsy%P)mgek@2_&JHz`<<KB|Db(g>a{>Aw#szg)Va^NL&OP*2
z4)3r+J!BrmF&^G5g3-0v!ME$j^wzb7D!=JNT!7UUdiaGwA^}!gh+bEN@enkuzFer>
z5qqIIYZ)+u*?ITt&xCHeT&VIr7!rW~<-#amy%7oh%Y|)w&;hoy0S<-2IkUt30NdFB
zScAiQk;noYkUhiL6Hn;VONWK!{0=6BhK1!m1xUaR3uD!Wk=NOPtQo;NKB*VC9AT@_
zv^63uH*z2Yl@VcV<nSvo4d5)bCajFfj(Jj#C{_3=rawGDnAC*x#by#nz|@4JVut`E
zU~0mc7bw30iTtJ}TrwssHqeM6_6SCY<p!E$!5y!Lv4Mu!i!27p_%J>W^L*+i`m_OS
zIzS)P3LG)#;yFqkZyQg`gz;qjELtWsK#x!-hm~pJ?C-DZxb_4F;vXDKofZs}!*a^T
zQ>af4%cKk>jGi1WoCc%mGdINGN!c4==bK@Xlt~`+ri5iuCRs?zriLjgqqEfp)bD0E
z!eYe;3ci~WmMcb(Fk?not{6cAZbsNzF*YDa*M|9uu^R~V@>;tUXvJ6?mMca)1yXHT
zt{6cAsWyxi<0Sf;NW!l!59hp=RiDu(Is?nYi0y;qrvze2T@zN;XUqRj{~z2AvmAs6
zz*`fR2^C1-tqIFxeUNa_ns9KvbPzGPgFX#AKa&oUJm{^p93)wA&^qp*^TGxU7hA*1
z?l9i6tkR!xRDlr9l;D}w*09W4K>}@S7+EXD7D!mJHSFJAZ-vNP)oo$tu6ir1E#&QC
z)ywlg(u1*p+7ZSOM0cws3+~<-R^81gHvkV2xi`$*gY@E_do90%3%~ER{0<U++8dS^
zZb1TeZy4DOC7vLWI_wRnZ;_?&yp2m_ZZ;e6LO^{HW;OUOO3yFsLTF9=g<S{*`xjyP
z1+fHQ6Mqqw7sElKkT1eTH^@Tx)jST{;CeI03qj=U4>Q+bJ>GM_T?loF{b70Dn&4~b
z{b8TDZVnO<`@={AMNQ};!v1ion=FJn1R1$MobGD2<As1a7-qu<>(}%;Xct1u?1Oe8
z6z~Vb@+Mz`2mHaXyhslcg&YhwvD`(suBniN;ifn9vnhBKZFD%y5<~P&JrCQZP-i%7
z`-?imVXHGh2UR&7#_S}jLN~1shl_8MRiT^K6b*;N4R19QyegREj)vJyL-l0Oqjn*5
zq2Z`q2(8tRhUHgb5`3+GG>qw16oM~h;c3RI3ja<P3OO1szS(TS3xU9~Fk3fNFYS2D
zE`(O|$HH<opWv(cW8t`kN~`%}VdR|iX_QPTNIFl1S*v0Cf}SUA3_2G+VH-;8`4eHk
zIM0R-FiwP#X$eCO*l{9^Hx)!jFr+t5gqz*PkGK=G;Qubnx((MWI(}ytV#3hx!gA99
zLMY_BaLKh2l@|Qpg)2ImE9ka-f|A;E;q3C^`bwqhoDD*U$mhax0S_sFoD0j3UV#M2
zxp0{{c?Stg&xKoxTXaN<W0!N`Ru7u%L@~&9hej~#F3C&X{?tQ{^&NoE1(rV2=i$eC
z)5itHt3mAdk@|Jz*W-PI?zi1@Yxg_5+>JLC=*@)zE$ZKBxb>d9?l$pJL%dPYX8@+3
zGB)oe{rNO*V?U1Xi1bVKppO=oaitW#B=Sh#0T0vL2+y(is`UoJ)Bt>M59Q$r-QRwu
zZ~s1K_F%RCFGo*UC#KPaLYo&uBXThe5_KOMk>9ieiMkJsU@8!;gxADCW^R|Q<dStC
z8Y%8!?h?Z&QuylZtXK4V9aYtKDYUy$9myAK?1VzQ8`Y77*c}3iQmP}^9TKIuQA%~B
z-9vn58c$IQlJ)AyHNE*8G?GIXrK%$j_T&>>f|doNB3FDjtM3!c^Doui22W5n9*IN&
zB+4EYk&_)rls$@ScuB-EmJZ`0e6s7APzo?)jk9Y}fQTL!k&_*s0%=@CPIe%HG%kY4
zj&i4@UuBV;4<jOXN<xxFur<oJypxnWO^WcN9`^pLx>`0VBIg=Bg6O1(%%DI5bW#Kv
z)EshelE(R|*{@&K%N=D?BXXx7Tw+Ib@dgh_C{2w7g61LGD@)Q8GAr9<tp1gwY?iG=
zShH*;nlomR(py-tKndi$Y>(IU5~X6E<pOZwf_at;Kmuc4#4k3wL6TAgi9978Nm>xh
zXYVsTT|VFPKbTONZ}}f2ROZ+FKS}f266t>sKv-fIPNVn|yKoxCmstLXFp!p5{!jVU
zWs#gc(*G$)E{otqk^4VI{$DQq-x>r^ms<@060*y!1^@}v<<tO_!luY)D<iDalX}rL
zAfUO@)}&Tg8IhSRo<ehF1j*oLimVi6vTGvBh6wxLN&3br{1jaf4*;{qsuoDVtcl2J
z79?QSL@>=#wgHlIo=DM#h{$A#Au`!dBQlefEHwJs2r^lEr&+S_#t1%h5TUo9*{84T
z1x-JT;9DDi5I|p9A93C-64(^VR<}iz-4RM)8#=1+TjWG|0xP#gWa<hMR&I;P)D<MG
z+!iU^4J#>iB?iyTwnv=1A|iE_Jm~F+$kbJ`keTg_Q0ht@DeYH3kK`QU4H?dLrcvzY
z5j`ndGEFVHU$!I&IC8&bB1p*Yw^|Y;irP;tNpEbV$;$^LZ1@zt*<TJ?odR6W=I^uQ
zkq~qaMv!olDH*@|RV3%EjHwJHzpC%k8M5T4v;+h!Iciw~60%1vOF#nks1;KgvgDYI
zDG<;+W^0l?$E=vbQ)nKenBohJ48_!`h;k;9ZSW?w4}OdG!4oK+vf2kE6i-?00}}0X
zDpGhxwhu9Q`+OI1{vg{&@}T#<)jpDi_BmbOKE;0Zr%29kR{IpA*q`cqS}}R$7wHuc
zsM{}=i69~Si{%xNDC!sT3VkWHnCw3nVY8;|SCyZO$RieTIa?EN*nou2xd=Wgc8X3L
z8~W83qd9M8^WM@=Dg`e_amGjoOAX12m)ND5I9PfK$5?!t0TWO!Mdb_eAOZDK6iq#m
zM%so{{^;zZv-G&5VsupYRdCTkMn~nXJdh+6ZOGU1qyvo6QG5=o2Zum!8_Slzt=~~G
z)<&S-J~k>Rk%qjT#zy4`3K9roqZmOuaRgA~+0F0hT`I@h2s8$dw-Kl(j*rSSqlUaE
zj*lWaqcON4jlmP6jDLa-1gxJJl~W-|XikjEsSqSen;5mG!iHq%)F__{yMqAGRNDp`
zil^E(&`>-zDyKpS18Hg$Q{gsR_m%k7Y&7RYG<$EYzQyUwM)49cABan+VU|Y4M7V99
zuC`qol>v-LfLt1t6Cp@IE{!5O_EGbcpn23)QDt@18C$Qsc8A`9T~%dxv-iEP8;&YG
z5ZwS`Kv@-)cQHT$WmQz(fB=bZuqxVMbyVDdAO>{<=O<Bl1444pke@{54G75s&?iyc
zfN06Bp}{t)6vc{DclYnjzWhLM)(W&`1jW+Ys64_f;cdJ&iV?jh*9Fpgv`Op^_I_B8
zv-X1wll7Xfw<`nJLZCKYAC(81CA^K-M{%G@ZzGma8*hrTPv`5c%Qi)2QUES=Hbv#}
zKS-3bDT-AqzP1A$wBOb!YrH^j*J^82UYG?JI$NVf;^Yq`bhbuu^7kGk5+zvnsC%Qz
zfoOL00=?Ezh2NHewAR@hmD2$Pp}03Hrvs4i^WJFT0r;7w17h&u=JTj?e^g8dk_Wvn
zqH;QrEDSgMqBI?}<~Cqe^kq~@#~P*Bhl}*9DnW>ev_zp}%rB$zwmC@H^kuYAyxIy9
z*k4AmD5j24LTln9qGPbmi*cRfh}AFf2#QCnegP7SN9y}U2`zVyi+;iSWpSP3xNQNg
zd5&A%0+IkaZgmTg06I?H;#O?-;>FAFqB&=xY<^b1+524-uZCo>wTajMFycm;dkGFG
zzK_cNSa1<y-$$_@i#!BE06raMJ(lR1<msr~kOdb)r)l({ja2>$-w#nXdWl|=`a#x?
zxDfh*`oII|n~gAhM{_Pl+3qF!U%fv?^(Y-%I2(}_KSx>RhkDn_pRM|Vi~9X+)ej`h
z_&F*+<Ove>`#Fm3W*Wg8k&Wk~?Bfs7Nat(_8bQxR^Tp+H2yv;H*s1^th;vcw+jZj*
zF!e%|HCw88ue@MGQ1D)e%G(x=_z-#_>J@tgAOUfKtoRG+*VwOKj^@l{?=97Die0AO
zu!*v<##Fx{F(n!M*pa&NiD%eV3vh*@WSKs<0$dSKkU=>^VsfYk2~&r}<WLO~<qV0z
z*-vpmJRHFaKGL759AP8SY(Bz9pvsPj$<(efuk45z27=kNZfr~qGd8>WBYloiIu^(7
ze4YXqN@HVa7+M{HM6qLI*a+{!bwG`0Z>-R}R*bic<ugP~I;gSOrHpySDh?#+#4tn9
z?XAXqhG0c2^&VX&+6c5OGtoxiGlh-7X9_~V8wNmt?BtkI8mnNZm*^3;W~E-<84Syf
zwA(m2mM{7tq*0&Au?9_KeQ1oC9Bbaf{6aJg#+Yd_Wd^%?mHv4Zepx8AxiZamB@H;!
zVlwm^^8sgC42@1%GDr+K(_#&0#6*@%3=B9ZX?je)0x4NA?X4JI-n$vG(!{U66U&(w
zbHpm~0s7vL_UXc2`b6(^-#an94iQC7n^4r$#uQ&HKh<TxfIb6L_uP4tun&)5AD)Q;
z5hU!ZjmhZ?B+9OhVfw;J3~=!9J(gOnH>h~esv(#_c+aXKND{Jw1tbvOqhP@(0R+U#
zT=v{*y<w-hHUhQ8TpNLknH!V4f=~g%+!zMHT^efJ)USRV%h?^v9$2mK$n||3vu<QH
zrCP3z@maYI2w<+Z>ID**tF3y01m<e0*EpIXno@}yW7(R|^w%6^8*MGB%f^^o8bJzL
z8)HagX((<=b=eXVISL3g$(ESRQ9wd-OHAe{AfdS>X5}bNiQE-q(>CarJMOal04{9a
zW%&UlFm}acb^?+sVHh4kerV=bzlr5c$sXFM56|^|6T>&Id2-T>+;Bp;fqA#-YU>kL
zeeei~CoC_31mX$u0>4VyjBNfsh6|CS9IRz7dPKv!)s}4RHvRT;u*LNt2yrQSFA^j$
zzK`Kv<j2$xnvqj}j4}UqeR;1Rt(t+0n*C_i3?wjqjLBEOKmy~(7$ylCDnMe6`!N<5
zw<m}cTU9^Cif*E7%v1^#&c)bOJM<qa&)KEW?aOlra*0F!I~Pk|W072`Lk0hWb~743
zF2vaX?9^|pykJ96s(B$McYGiOhzqd<KO;x6G=N-);f(w+WpmA_R>QJ~cj^y2Du=~o
zmj{>FaXJ2i1jewqyv+j=7{lT?)?ZGc*Noz3RCdsAeWjyvl#M~d#wZ(uhK*5iIRZlm
z7^C9oRMH(tF2=F{?$ys!jI$vqtr!=Vw?v!qv|?O5BlZJ90%BbJ>ef7#n~}>IyJLeM
zZ-d`ZWN{hFAW=4p%TNXhMHaV0xf!JuZ^U`JeFF%1^$ptu$}8TmYe9L%8*v%X5C+m4
zaRl^Di09@Q`QkaJ;*MAc<||eM?ACpH%fPfaE*cLZXE#S&tFz+D?Ch)ibj4AHpJE8Z
z1C%n$Dg`7;nH86}K|rFES#fN|(+~?1L+q@0YIZ!=4B{I$#6Wn_*FD~jJ8R>4d|#oS
z3*C3($m@dGji_fLvwPPYr_}BTipJ&?%^$GL0sU;n2ews|Fnkb~lNn@4C@#Og0}{v|
z#4#QIjU(Wi%R<)Up#Jx&g*F0(*Fw8qRLsJ-oI0BGPO~tMse^90fW$4Ah4F?p;u`}*
zW9EPf3*#k^AbT~q2%k(K_K#5xx_AK|%*e)-R<SnNz3qc-S=RiJer*L<mUF33W#cmM
zfjo@J#$%<tPl4q6SGD9H2Wd`yYAJj3kbYg~r8WZ1$xCfVP?uU7m$N!lfUq=<Iho%C
zYmPdrE8@x;mibcOT7_Sh9n`5-*v_C%wIVJ*U=A&ytcWAy7mZABQm=?NTT|c2bQr=L
zd1c(Wy1tPm7rLwLMwU!8@+Ust$Wul5!4Dha*+F0FDM!Z*wq4XwH`sPjN8MnBcyr!S
zH^gyxGJ!gKbAJ9G&whDWpXjLEVS`Xt-C?_kRscKVUa{>AB^bCPj>8f9+)Q)os(a#W
z(NVps;~pD=I_;jgT;W3q5PRYc#a1;)K<tUPZexBb?0_?l#Iyas*4N^Wv<*Uc8IRZ?
z)L)Op<;#1`d4D|;$IE-G1qhBdPR5aoF3e@A>y3DJ{5SdxM@O)%Hlu5eC*$&rtT{jB
zI2o5;g#ihhPR5H8=5)NunTHp-#~0x}if51O(+vOkqCA66dh+nHHHMoaCCuMqWw-yR
zt5qQRU&o+_m~L1RW@Nm^0TT93C=%a*BubF{3+qHec0v(mJ0S~dVv&5I3@<T579@Wq
z8nQHvO)TOYXoL$(C)F2v2k!)+`DF%r3gJmbSfUDGbb{B5<a=>==@`Hu`5rf9>0Zg}
zMcA(X6)*fdTlm%4MLDaojegRfRtjbpAz`DXaSN*S95(xBy-n$yBAJ_k38*<mGB*PW
ztL9LBXo1;+D)2sY|Dv}oecx6g7rbw)(5Ul1sn9#&EvS+U*pt8Lm8A=86#`mdt5Dq+
zkP5CbK?T%ew(l3cbLnDRg$9Miwh9dji%Eqp5VxQ~;X`)AuX?9eAKEJ9mJf>z5h;*?
z%7;a64}X2U1r2;36=84T8diD^pFG+BtDY(aLnNtq4CRlC<hBAxD1TIhZH0$;d5Gba
ztjRh3k@A(c3iZpCMKY6X!TaS(ikqn>nxWLM?kdU|l3jLAPvm)b6(OZugDXtVQfi06
z*%QC(Ynzo1PRJP%T!0NuM8*AFkSKp}0yFv=YSS{mIx3N~B73Nb(N!rKmEbF&TxS_R
z3N$96j88b}ld~FV@r^>_vFn=~-?Sc^z^*oZ`A0lL<BUr<yIjFRF|QG4T0U$mBirU?
zd$lm$$}63VvraxDgA3c{CS;I+gwosu+5*?Dpo51Wu&Y`b<qv&;lU=F8r>2Cw{|y<a
ze2~EXZ_36%V!Zhv;T0bxB9b3#eUR|A=f_%-L&sVlB-&lWkF(1tvKFybt&D3+7ulv!
z>5CHbRs>{F&Y}eRSQl;@s3olN)kfE@OK>163#W{DNkXPlWxV4pN%+N@5+vy)Fp1J@
zoG=xU_HjaKft;L;Zfz8?^;a9iE5NbPD7pJMA(K0Z!=8^53325dB+x!i;H|}h91JC|
zV%4pUrz=+32(%_#Wg}1^u1X|YNoy$(S0&oC<sa-Sqs(p%t88O*tXN|s(0sARt`WuM
znuN@Rp#p?83Gu=`Duldl9m}>cuCH8YBhX3uIvar|i**UPyoU-9)+O-L#@)OYXuJ&x
z*1oNAPsa^51bvZZgAGBG#fF63iY?=l#fAj_Y|}>is!JJVczYAs&25caay#y|K`6P~
zYlF~avDdbPlDoZR$4Hti%IF;YP$GL@d*dZX$3r#<O%aD|5IP7yWLrX0#38a|KJ7G=
z(Lwl$L^fGrEKoY0utDfANS&}j=pg(=!Y^(tKnWlx61c25QbY-kxlbpUx0CTwm(w-|
zy-t1F#-Ib`(+R)GbISOE^6A7?t@suEGP>}2HlehQHDh;lHe&4OPDZ>E3@gs)*!XNh
zzLx-LV4Y1wMCJ_=_MA;%8g0+(gniq(1iQ7f(V?==hM?4~E+NydGJg77mx#5Nfks;b
zb%}P@n*YNgaQJ&J!9MM5{Jrv=4ME4g=j<BMvG2KrU+iC$@nhd}iRPvJI|OBPt@J{I
z_3UEYRe8aNz_%p8uJ3;Im!mEu<VprQu;M}j?<LR#R7ST>FD2LyU5qvrmuv_hATHSu
z^cSEmC1i3A9Y9=4;LlmL;t;r#I*9eU&S+gRC|U1K`pZv)lJ!Q=`=f)B^5#gH;s?T@
zWGZ9+ha=#=>M*wLI%7b^FdHENgkd&900_g9_0<RfVOSE?=))1{FFdfSuEwJkBW(n{
zI^Z0clv}iAN)QMmlj8m)Y90i_$Ygm-^Dd5nKM3(M%XBmDsd(8&2*HMzZ5u*Bc-gK+
z2na7zEof(|Ou^res9_7b8Mjo{*a(F{sId_Wfl!l_88B3UP?N-U<Iy6@!`N<P72S<7
zm1Av)Fd)X-5Me-!P0AHTnGy!X*kq=m)ny|{YqI&*8`X}=Nj63V7?YARsVh?=z?hWu
ziTBPx0%KAV_lNm@WtoESK2BvjZ!orWo@zs2r`$O;DKD--1`tz|^34;FfS8)Zn<pP(
zeFkUXm92$IWpVcKjYfyO-uP*CvluK{XxAnNn1xBXx`Y~F7ACQ}q$L4JED07S8!k?Y
ztu<nZ1=6A<K4?xGI%P^6Nl21!=v)f|Mt+!-b3RC*f0&f3V30unFo{+0LE-Kq9JeR&
z$ECKgE+PFIruQ(WcLKvQwFsszw@obq*mB#{B7iL?Q;}FJ&T_xHE}63}nLW|NSmp4o
zOX66U|J|^1n({X!*|Ix~VI4PE;NZg24OVc11o(zzq1a6U3GfX`?Dy7@rR6jUZ%wlQ
z-f8^YX{(Jvn|NC-10lqv<a=Zwfw47-?d`A0z^nY~zGTjkWOn{t#u0~iUlJ(}K9=RY
zitIa>WHatDdbd89l&3S`0_<S2NbKW+1lYkOR(zDMT}AdBPAZAm-Knmu=x(Di>vgZu
zwi8&wcMyPShb_}Uas`<KfCSp%ByxaidcnOVcEyr8r;}{=y~arIH%aUsJb+SKl4Zw}
ztlxdc-^!0CWwHb=u#P8XMgkI8$CJoNc9W}Gl4;*3*}40SJ!Rk9N@T$IN%=lDgrM|&
z5*uJWQGP4GdN!H!61(_U<H5qSR6Gq!tx&vLmsEaBI%B=rf4)_tY~=mMT~%O-v<(6P
zt+Olv3D7#Sgn}0&g10Ui{0+fN2T{a8@cPxClg@KVaS$bW(EBAR527RsE7@O@v|B-A
zY%8kN#UwtE*f8b1zQ>(i*x|NDg8knEhN}#0%N(lX#iTqJgAQOXCUGuC#~ZCEyStoZ
z*$0g74_^ippOnCb&gG>1%r8jjTu#c{i6D`QTuwH*i|4aM@-*^tvgw^Xjg%ZpBQGa=
z+|D~>D}or35<9FQ5avTtvO|JIaYItFLxSY8*0xkD$^}QJ__kCp5S)?`1riZ8G9_me
zkU$!lk^=`wAdO6+H{$X{9=<U2aw=y`N_-8CX0Ml1c~QPJ^-)m0l2V$84=jPiQ_$kA
z8<23*D=9eOI;>6c?I0S{Z~wc|Em4z_ueg8-nVJ;#2XMn5GN4{%^Z#!ACG~1bzAFSK
zaZ~7gQ|V<3d^%)&D(6jB^q?`NV0;Q+a>1@Zo}X-CZ2g1A3kjBzZy$gORhB~Mz_%VD
z0~02)M|&E7O-xM5B{Z0jnV7;-2;C7fpk8MOdm4`<UYEWmCUH|Zd+W|+;Gj2H&tAq2
zi8oU65YNw7!EdB6&fq(-P=Uv%vNgSo>(Wzg99sQOC7cnoQo7o&)~0fHq_T~B8+nSa
zHidD7?_pm}wV9LRTluX)pt<IxWNd;&HRhz`3I`;tnUlf_XB{P)S5qYyWnGUL>m8Mg
zQnJaxMer<2$q5`JNu>%!iU<-Ii&FSgEGu-50W&|#`u|~caaMk2V^Bi>SxPP+uIBOn
zSt=nuTnG{vpQVrl&|GpgQ5$9Gf`H~mD|A7k^o>^Ng5<JR=w3~(+b%-4I|xqI*8{G_
zLm9ew3Z(5;=z;{&b_(4g<lokQb$=@7LMq$fF~gzw@cw67__sCr_mJ>!8xX)eWce2)
zFb`S&1qsYU<X?X2y*2swSSowDpYfoh@|fiuuu;WhDY^F!l8edL(Ln;_SPGx8!mC`)
z))Y=BQf$(b#{cVh!iFIKo=C~tyAT4ziBw#yvOxmkM9SJXZ%yRcRQAsQ7%Lo=XKfI2
z_1To%c7+r`&ZfL#i~`BEu)d;3YE7Q5lZ^xdnsrtqfrMtA)kq+rS(maJsWoj;oEMGM
z4FrJB+cwZ%<$0@-@DxbrtwsU~r1R8BNF5Ys8^8KOI%gc)H_$i`cp*(+N1(~44Vp+D
zl2%@1>z^`SuEH-dG=mScA!#`@g9O@;w7jwa5;Mh+bm5C>F;ftO&lE$`&Jk%bQ%D~4
zhNb09Az7FyhNo$!pggt>`M)}?+#c(mV!NI;dh`Jy=43oV4Xe{K3_)^Hnbm^?c6D0b
zeg}!6zdD`j!LQ#EDb91M)9KsHU81rGh|y`>j`-BUUV7FjVRN1_W|x9vRhn!Wot7U+
zXv1S+bQ(v3c;5|%qPVea*t5pnoyOWGQXq^?%YcLo5XPqEhY3KEPP%P7^H;j+)7G!f
zN#}f*&PJXyes=oir18!bABoyhPkBGhN1}EhQ0@0Et3U$t{j?m3KmzmqG<wQ@1!lE{
z&1yESe3(7+U*iEs6@H4^-~sfqX?eQ`B=oXrdAkQBnlPJg@FALzc7upPP3T;bmbZH(
z2R>VpmbZH(3qVWKxZQ)dsGtXdkJ7l^(}3UZS^t93uoY;_2y*F1X?eQ`!qELFjU%PU
zxGt!bY3#r~Sbw|cwo))GW%B0AwA_Jf%e}cWjU71pqZw_fTdih`1{qBsTAh|(nFJFm
ztJAV4f<y_c)AGy@Bw}QBI)1&ZGQA;zCF$yPQFopmkN`N89;{AZ*Of2B+fpA~%Q_D>
z+IL)QwL6%^wL%jlid~zQ%SDhVc5NDa=_4rc+R~7-A<dQyHeRgUU}Nx2eH(*s>Zko;
zqX;^{*pS9X5$&n9rA?YmY4(3ZjIxfKYzW$=*<?e|F3qO2Uo4ZL1Bgv&jEB={(rQb|
z(XMp%#1P{xN2^`7n`vWaS6c2`LJC^D(wM6Gy{5L<m{AX;mBVR<drd9bwqEM9*++*P
z4o4NZR!h;g%mHh-fC?ZEq=SV#u>^@&JCF_^mcs=x_;7JB?fgm(7m^3PL)LI1Sr{(9
z<iiCGrfq45=j$}T%Ffh(si8LDz`J0HE9@X)%GYU`v4I5S*J*1+ZA+UwC)2Fui^k;#
zPTGE?y`7V`A8BvrWLoBG&;iEDw9M7;(X!L&obzdstI;a|bXtB4GeG_L2aGV{7-8N>
zLrsDd-@?R0bd?`yJh>UUOMrUD*)-cV(zqpg7CMyQ5*I>e(^$9Q{s~A>Kc!ixmyFwz
zKc!`|1}<kKS-YPL!MvZ-?7f$a2a-RhW!4wqsnXBsbVeefyZoAFCDlOsH7(yC4)BwL
zU(-0!!Y3S19Nh3*nvJP8+NOR>%N!G26!%*iIp+KL69swrc3E{MXKMC%wNaiMtj?hF
z^d@eQD*tjuNniPyzlPwVo?r_nfCSdd88`tu{m{X~QS9{^qjO?ZMqcLv6EdSR=(X5g
zgbb+B?6(@@-o$9UAkF;*CUG;U-5p#8E*QfeA8p)~7?Y813UUvO$-qrrxePoojvX3p
zbWe=S$QQ|j+yUb<=&F=Z2FU^AS(jIh>k{KLGU)^pWsT1u>BNi$8N}NJHtkj8p2UQV
zOoG9L%!CY*VC=0x2HkZM3yv{vNldb3=oQ>aB!eyu8Fa_V?7w4-^2Fqf2w!4CW^x9@
zG>&LMVpntu+c?H(lbT}thhABqLjGAyxjH_#HZzm+K1+=?76oT!a8-_)BSg(HE2Cuo
z&>Y~x<6!esKN14eEUG?zRXIe>@eaFxoN;sF9m^yzA@dHI^nY9i)NJ<2IHM{t+iF&P
z>5RD4tX;Sanqv;@`I^x+F~@Rah&RU^aw9GPqbxMXJht*R<Bs&ajC?5@OyJDRWQxu2
zDQ#)zR~KY*_GVbC@y03Nf(-H&K4G?_$}P?C3G-?YXtkvoIT(RNEtY2Fgb5PHEX`oT
zq@B=qRK<_kMP^h~e4LS)2ADwjI3qI+kR+6mcY{Cz;bW>C4aM!Ksw>&R2}XJ4N*jTq
zVr532j6wzoD>Dtntq_nvSee1C5dMLdc0_)b{c3{oilh9qjGVl{h0<pkIeCF3DQf0V
zX%=Zm4%?hzlP4K#D>mB&Q$o2pBlmD21dPp@n8;^A0%LOq`7Di|?I^srvBM*bcpLnN
z;x^gJ^azUEGIHDm3B_$0Yus!{)!UO{gC0_U>jna*?6FOtiENMUJ(|e&WaQ`xVIb|v
zVDub}k0dy+!SI>Mc{$ts4a4E|oz7URg=?ru&x$5(4FZs7ttJHt$g@_Hf&}DQYEryP
z?!1P4U6*05>Bfy^b+!&QVqHdVyFds!bs21SbmBT_#9uRP@N}bdw_mNAT*Ge={c6<&
zBp`mx$cz&tAb!mt<6KOs*EJy3-!sbKVrOjT_{n;fef*a3|Ej<dvm%~D{r8MaqCrCa
z_l!)UL1I??JySTiSR~QJ;IrbTjB`-2NTMYVdY3aYiIyzPiZ2vX5>4%T4TZ+AVlgW&
zo?*nxL5TSfk6^^GV%e@B0XD4IYS(KhBC3mdyLJTuoa$oPD?svxvR8lvQgyLxSCBxe
zE=IfJ!mjgLzgknAGmBNsGH&tJ6zj#Jqh3p`I;L23R1g3hQ!M=h5`bfhWk&@Gz%j*W
z)u&OXYsvTH*`se8&z6q2Rj5(N7t6n!4jHJ7FUBhlbPjbb^~{OP^^S3G>BM5WF$gA9
zCKk)@9D{_)#9|~x81SJ2YBH;N$GEO+vRw)_+~i{UVMEA}P%*}Ba`v_4?5V|KzX$|6
z##GDOAfY+c@-|3lPObO$wdC!Y!rM230MJa!+aUQv>1~ienrV3(B#>s3xBm`rxA&{>
z7Uvu&cEoz5*tErY2{xzJxYqY>vEE4dy*>H;J?VE4fPT-a9!NmHXZal@px-0EH$(N>
zle^}zPiGq~O6S=s<o9{SvNJ&jD)WlbnQr4M@cVq0c+a@KY`(2RK=ZApYR~;XpPFhb
zowBtj$FIyze$UvhRIap~04^+DSuC9Z5*RCsWnK-El!`H1oum%fo?2pEwsxNJn4{Y|
z8-sQ)*4Y@;B<qUh(Is?%v91`i5bwn8(Io2TVr9pbop@js*Z=`vbY+kL*<38UGDv`I
zE|y&xB)anE;=&!WD-(lv<t@d|?XoLN9`v>r%dRY0=*rvbyK;LPXm>kAc(LRHLoMHJ
zMHimIirrRpfdty_`siv;NymN}T_E6`{kBtRrLf<23au3OThRq!Anm8<I!4oO2fzAd
zan8>Oua2zz4I{*A7aALVUl!{r5nUZ9x{itHY7GL=$1GQY1oSa0x<CT@7)2L_N(Tyx
z<HhWr#YT_H<Cb;c0^+!39Y`)Ezh({+5XXy=fY3o?2kPagirL}CIEXxDLy+T670Z{M
zAq0q1#U<i66eJ){70Zi=9f&$DyD$i7p0=C}5}KziCxhg&)_~c8Vy;d&xf=*h$pI52
zs!?ZGgCeiaax$I*sg9hyBm^f{_|+K=bCzed4~?wpo6*q9Z7RsQZ#NX%k{|&2c0(D5
zAOZPyLpfxE1mxQd;oOb%-d+V&dQf)C8e?;?&7cxF1%ONJl4vu&g$@!*gG%rs7Qd!d
z0e`9^OO#P1&e%e>YMAj(_Qrii#8CyFh<-=_U}TAmevkkdSt6q!B%*(0N#UpxF_962
zNB>JD&R0srL?(IAt1gkzFIkBGmrH0On;PIXz??e2L|Itk{Qp&5Yj9LW7M{7xj83m5
zFp<}QGehFN-7Nwk3L+*md4LJ1Ao$!;OHsE<S6AFstG3qK4G<6oL<o-td5M4ltkqrA
zx{13KVbQQkPztCG7=xgwBs^3s1h+Koce?vJ?!S9ZpFVx=d3E3JzTN((?eSIdsQ}D$
zP^r!hTV0zQ079s(uI-Khg85b#9|W|R0T4oMb&KADQ1sV4As`ei{ibVI;!4SszH1UW
z0F?Q8ossQ)*LIsI1$W;Kyr7g4`8HQ~o8th0(YCytlsdNM<)qZHEiWgfj%_Zy-~@$Q
zSt7Q>4SnpYN4|=8_TJ$J8?4L73wF8M3sm=Uq=8+5IZy<SyIku80KsvW3nyr!abg)6
ztJPIkcg7D6Z_QUCCunu!=Kc*3p;D`hv(4w5N(idGt{T%7e__~O{9B}5rA!-suX~Z+
zg9grI_`NRnpixIyM$mqvKh^UDMBE>!4@GEgf1o~qnlw;f8EO8IQC|%J4Oue-g!&Ez
z>H`Q)hXVBh1gAr!zE^M}P$Zj(b-1A)+;Fm5O};T+;4eQJXW`x*ZtxRqmh^bc>T%-f
zcx>dcKqV*w>tlf)0fO~0(&HP{yJVrqSeNU3jks8Y;oT-R;_LX#T3}36pd8h^f~Ww9
z>Rmxp0E7c}xqZL3Q9%eD6(`)tX&V(5hk7T2sIVwR#VH*Xr06VVyff}ECOv?Gw*qAb
zc>p2GnLynD!Sc+{-kK%wyis>G0I2(X;H?0m?(>1V0fN){K-~a!Rj8Z(hsq^lKf0mA
zUO0IZX&e7VeH$-ze{|6=(2aCCY(AUrIkUV7U5RiJV6*v*aB9?<cw@~BFH)`N-b@i*
zYo-^e`UM89)e$COH^+14f!#9!H<*M_YSee}KaGFx|LW3L>hoSCm*++Xnd{+J?||Ej
zp0gO-FdJ-zL*^r#`r*6y{@R6}-5IBaBb_huB9G?TkrwMc+;AMQTjDv(!H#a<(^ZhV
zEQ)4S4GP*^>e;*Y3<i9cdG=O6g8^UVMF!Kk97c&NJ!dT#|2ANZladIf9y=R<WaKI@
zlFbW6-^;5#+*AH@lN2Cps7d{$oFo5V@0s2N0F1rfvmOi(;;r{=A_0i1>pcX3-rbQS
zr)p4#zK_?JH00}$*Ee`JkAMbs8a(6?IyN*%THE3|3G7+QcEx3xN!>uBUEobx0SF#j
zJeyVkg2xsQY2^a#Im`i!?ev`Y{2u4y-O*Y+25iVzcY3x503F!u^lT3R5NvjOwg&)+
z0Nm*nz2})8fDon!c-KP@Fq?Lr<tPyy@SMw&-$(V$#8ZDa?div#(no?!eegm3>`(8G
zcRFRD3Z$T(;(%utf4~A#9PoOXPy`4m4tN->Q0V69#oIjH$EfBoiw$q{Y|x?z727=9
z#Q;RbHZRDLIg0QOPj@luG$uK-9eD}pgS#WI2O1W3<n=(q!VV8HyOC}=E>FaM@<JQ^
zk{-BWwAW7_{x7bh>ELqmj5`0zIGY_FR>!SR01IYyJg&DA6A_rzaXR^e`iXL~+#I#y
zS8U_3Ir%!|6LYxzIsgso%;EStm}?q>Q!MZwy98a$hy~p2Sq3L!wSf0E*SP{jr3D<;
z`?qfBVysLp=J?f3Udnd$T+A=N6qjz303chcE?ml{3|-12=G=53!D}h+D-c3aq9Gza
zWT@VOTuw$->MuBIxJ2=Y=>UO56~+6QxpIK0qByn`(bZDrWVRJNQi8p~6}=e_lg5wt
zLxC`d0HYX{SMdI3RTdyBui#jfrJW1qWVw~<-d^m6p(}YrZz3los;uM%W-%Bbs;uPL
zFG$;$%W3GoTJ7z{azj^hTpeg$g9hoVd5RJPy%i18SM$=WRRpFF*Q(OqY)Z*m9x>im
zu6N|G<pYM>Dm0hBmX}<k_f?nEY~nf|8JR3LZ*`zI<0U`@m1!1#UA{8S;;*C1^uvBR
z&AhMYkrBxXQ#mm#+DF}yU`55inw3w`fWvy;&zyG-5FFO?Va03_{Y+Moh`r52N4dW_
z!Cvf<c$;G-o-UoOfG5U$?lh?hecAQ3crqs#01tLP?`f<I5bS)8O)xaX1Bd|kd9sO{
zB`iYd^_)hI?aMUivlzHvBgdLt0z17dik5g9c{ay<>gp@V6`Q#;A-T!P_%L!w_#S{J
z-cbm9HgmgT3{Vr>)0+W8sAi6z9>_=lVU}h-YCIkFsX<+QZ4H}gT7obwem#z_4L{V9
zZ-V@-h1<kdp+lpE+fP=2;L*bI$!eOQiQ^WYF0oDM1)CP08Nn{lR<;UCpY7Z^!XwGk
zOzn9(p7bwEviqX7KnAZwiL^c69)(YPzC8+`c52V)nG$I`PalDvX<rZ;Fe8~yc;r)V
z#`hM7dL7)3?=1==nZumM_eU<lcsGiREWYHS3tV-l+2O>OJUUSCa_LLS=qv6F(JLn|
zKu82wM`siu)b<s}qzzr|)tAh5oU74;S#|n2cl5?+!h+~H$HwRiO$4Zut2KjJWxA6)
zSCaBTL_Jg|$Hx!Nuj@N1y12S9m|c_Z;?6Kjr0>z;BT8t`DTt6iPH;7)kc~{A;EoP@
z!h+KYKD?OW7!82X=t-_#Eo5WTC-cqG(!oh;&d3B$I)&y6A=9aRbF_AFikd?-fD>}T
zX>3p{Vr7}r+@72ZEQn5X{1u3UgNX`GaF+YqaEwGabCx?g;t371vm8f(?~iCQgnT#m
z|LU^aoOE|yE?Pq9Cb@1wU{)q#Geu~=$_O?oF;n0hBnL;Tq_CVNoM+Vx96?))CzB_D
zhyG`Y0p_1_fH3<kfjN6}7l3e=S>lRkg$YYS=&+nEY*<<hB$zF1SXvZ?<!phlJWG8*
zCE0nNaNOjV;f%^k_DvR$abc7};q!zI8GxGB?j-~WndS*B{ovGVCyIMT7K+d&_1Kkc
zUC)Ign$k|!kDP9i8Z?9rODz&s(Lh45MFNVZRhoVzL%n)<2pgWN7mohZiIAYF7YKTC
zkbdM-i`Cmh*r?RvJRglEKKL{T4Fp=E;#aXD=_SHi3rN&lB4DjK*b)RHc-jX4)~k@a
z$~Fi`PhJofR2u{)FUW-fg4G5wvPPdKOdv$uAVyWwf;@_$myK#gF&kR6QCMdM5-c_f
zIP2q@27dUea7qjBSA)ax0`+4tyDJUEwYCLv$XCUf>)8_60W9H>4eH4eY*|r5UMh0P
z29oLyxKLFh_L>O&ON5g(IQSbqW_bxKb6*qq$%RI>RroacyKvqX5!Ow2N>|xW1H$>Q
zl(0XCuiYvlm3kCw%E0_hfg7Z0Tx&3R>$e2H4XDGcBHwHj&O1WAekU7Q3mC5iggF`!
zAav3w2ASR#ASyQsY`r2E1qc^y6#O0QqJ+>c+7!5`#XyLrz(p;JT(pT?RDWz&!98Nz
z@%Q)+b;(HfpNH{i{1XKbXuGgK#sY*u+eM+yFpz-!bGtyu8-eI!al5#B2Lz&y3*`_f
zf##b<q?qp0aUx?Au@({94-G$$Xqf(fw6D5<6nmz3i@?!ci>PxMOa8oD_$NoPM0oOU
zVTW`;qwU?o9?=O9ZSNKsZc}#x5Se7RNSF(M3B)K_Qxuf4Hp3V7_X&T}Xm(e)c3++^
zz0*EnC*#NJciJZ~!)y3bPq<GM+^kKAQsPUP%glj`7K3-(C$0_}*F<Q1pUB<F&d~|!
zxY(sbgwEi#kK=@NTtw}S!P;P=L)iV1{pqC-BkD}g0T4m~)(c=!fN0>bzycU{=mJFH
z5uv7)vb!@!gw6NBg6IfY<9WO<r~rN;{H{{Q!kI6Ehz45Y5z%i@SoEim?iA{>Ec;ug
zQ`n=lfdy5kz{U-_&;(S7=~F@-%d(F$r-Y+DlCYpUMIQOCp+eMtE7blRdoS~?aLn$`
z{yJ>G6<B#MhX;&H#LkM)e}!r+XW4?Y0^5fu7RFI5oD<FuCKgn-g2ie9n=u(m@y_Rj
zJ;EO#q&_Dwhfbac5T18V6#igCfe<<r&Ih4jF%b8B5DFGWp>Uo;;U3rtm)ZOzLbGK!
zIWaSKn%Y^xZcF?mqF3llJAjPTEu4{NW5mQt7E1#(`3;3&-c6YVr<6wZ^)(lSda{y@
zPF)brXq}UQ1<?h8B~<Dp2aqYItM@BeHZ@(^yagm-CGr+6=HqG^%yTNYidCj&NN1Gg
zL*|(wuNy<U0}ZS*Q_ZeoxztQ)(>su$nJJOpX;;Jm%BXefGaRCts*_Hs<wF^@PUgy4
zm8L<o&r;WpW#fuw<!LC7&LWyeVZIv@vFBvy1!(AA)m*`ns%b2{so*(@6;Lwc4P?f-
z(wQ$!N&^g@K$sov0Aa_uve10v0L0tPl|!!5b_57J&Xq&wOVjHTLfdhkw7ssyK%#ll
z_PQ2DcAO_+$8V^w#E%g5GW3dS9ml>-)XQjETQEr$Tr8bpZNV!5LK?t&q#p$czKbPp
zHo`xj08zM9^{r-Qsik=uvfxspxm?o#TBd$q&C;o5($T|bR3r;7lcTS*G<Zj)UMCtQ
z?Km%~158Pb^RCc*V8P|;L^bnL%L6OpdKvIpPFAM9Hc7JJOKNxxyE*kzU}Ydd^AcIv
z$OCP!R4>(_t(AdC;f5H{tR#=hXg=r&SE;rdR+w5PZT7%fG@w}}kv&{ZgS59=^&8K4
zYPEFqMJEt|hGnZIb^;n2y{+ROqFIxFcfGBH-hHs<gYT`iYTbBNboW~6n7$t;NPy2;
ziGQ+;%-GHJG8!rDnc+`Nd*Z&|{P77KWcm=-eGpoueM~6V|CbSn$}h{}659ZNQCp|d
z6IfAtUH*mX(t&kyOeuR1E?b?5ZIq!cYU%{`K*2_d^UcXqtI1Ovq_f$2Dq!di2y=)H
zKs4JRFE^*z0)!PCB$60q9DwlD1}QdMPbGx*)J=h>S_}l)6nLsdk*97VPyHkcPsL3y
zz6|Y(BBJ(0)%{agAC=u5jrm({WdCpye&D(T$#ollc3prF53q4vfM}?Z+>*v=1Icxp
zRP#hOB-Ip{21w8}k!dh61`VKhRD2SvNWUZPxDiOgN*bV3Co+(-PqY8XBsMvmY7U$Q
zSWq>Svs7pzIPVU1@D^5;-VxYfpmyFJ<a9F(CwOm*KV~xP5ze&a+avdFq4p-iQZ<R#
z2Qu`LRQFCnQu%;PMPv9HGF7W|K9uU8Q&?Fo9*vPufER5Ij06zkwgyH52qU#h@u4*m
zA+(Y91V*wL$gn3cl0}h`_Glwf|BXvx+GOYxvQZBV;!i~T`wMTyF)qE@Wb|^KS_YAQ
z4np$V+0gXC;QfFF?}PMy6vDW&1@rz=ZN8n|lsP2r02){j9g=kO5p|=3$Oa!v)#na2
zKmBo@%Ai3tRTJS=+ofv0gFTRG529m`woJRkDHC*q*Z4&2QyDrYRpp)R*9D(S{9{9|
zKc4h?R63t)*T23NkLC|36hOeE(jEg15RDv_*vCgs4-oo1D!tFGJ_(`q`B|V(i-G)~
l1^Too(&uN;=L4}P{xI#SX;<(2zQ<LV9rKX>)Wdf%_kU&bo-+Ud

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index e05f5f33..4625b94e 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -225,8 +225,8 @@ type TermSemantics int32
 
 const (
 	TermSemantics_TERM_SEMANTICS_UNSPECIFIED    TermSemantics = 0 // unset — rejected at ingest
-	TermSemantics_TERM_SEMANTICS_ENUMERATED     TermSemantics = 1 // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction) and are enforced. `Pricing` MUST be present.
-	TermSemantics_TERM_SEMANTICS_REFERENCE_ONLY TermSemantics = 2 // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and are enforced just like ENUMERATED. `Pricing` is still required.
+	TermSemantics_TERM_SEMANTICS_ENUMERATED     TermSemantics = 1 // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction) and are enforced. `Pricing` MUST be present on a catalog term (on an offer it is Offer.pricing).
+	TermSemantics_TERM_SEMANTICS_REFERENCE_ONLY TermSemantics = 2 // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and are enforced just like ENUMERATED. `Pricing` is still required on a catalog term (on an offer it is Offer.pricing).
 )
 
 // Enum value maps for TermSemantics.
@@ -2708,18 +2708,26 @@ type Offer struct {
 	OfferId string `protobuf:"bytes,1,opt,name=offer_id,json=offerId,proto3" json:"offer_id,omitempty"`
 	// Resource title (human-readable, for display/logging).
 	Title *string `protobuf:"bytes,2,opt,name=title,proto3,oneof" json:"title,omitempty"`
-	// Pricing for this offer. An offer represents a single licensing
-	// arrangement: each projected LicenseTerm yields its own offer, so this is
-	// that term's pricing (the authoritative copy lives in `terms[].pricing`).
-	// Used for cross-exchange comparison and Broker ranking. A resource with
+	// The offer's price, and its ONLY price. An offer represents a single
+	// licensing arrangement: each projected LicenseTerm yields its own offer, and
+	// the Exchange moves that term's price here, so the term inside `terms`
+	// carries no pricing of its own (the offer.terms.pricing_unset rule). This is
+	// the price execute charges, the price a Broker ranks and compares across
+	// Exchanges, and the price a metered purchase settles on. A resource with
 	// multiple alternative terms (e.g. dual-licensed) produces multiple separate
 	// offers, one per term — never one offer with a "headline" picked among them.
 	//
-	// On a metered (PER_UNIT) offer this copy MUST carry a positive
-	// estimated_quantity, and it is the copy a metered purchase settles on: the
-	// estimate, the rate and the tolerance are read from here (see Pricing and
-	// the offer.metered.requires_estimate rule above). An Exchange projecting a
-	// term carries the term's estimate_tolerance_bps here unchanged.
+	// It derives from exactly one catalog term: the term's pricing as the
+	// publisher declared it (ResourceEntry.terms), with the Exchange's estimate
+	// added on a metered offer. Each offer derives from one term, and the offer
+	// carries no second copy, so the offer's price and its term's price cannot
+	// disagree.
+	//
+	// On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:
+	// the estimate, the rate and the tolerance a metered purchase settles on are
+	// read from here (see Pricing and the offer.metered.requires_estimate rule
+	// above). An Exchange projecting a term carries the term's
+	// estimate_tolerance_bps here unchanged.
 	Pricing *Pricing `protobuf:"bytes,3,opt,name=pricing,proto3" json:"pricing,omitempty"`
 	// How resource will be delivered.
 	DeliveryMethod DeliveryMethod `protobuf:"varint,4,opt,name=delivery_method,json=deliveryMethod,proto3,enum=fora.v1.DeliveryMethod" json:"delivery_method,omitempty"`
@@ -2902,6 +2910,12 @@ type Offer struct {
 	// dual-licensed resource sells only under whichever arrangement the
 	// publisher happened to store first.
 	//
+	// The term here carries everything the publisher declared EXCEPT its price:
+	// its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because
+	// the offer's price is `pricing` above. Its semantics, license,
+	// restrictions, quotas, obligations, scopes and part_label are the
+	// publisher's, unchanged.
+	//
 	// Where a term is reachable only under an existing subscription, its offer
 	// carries `subscription_id` and prices at zero marginal cost; the terms a
 	// requester may see at all are selected by `LicenseTerm.scopes`.
@@ -3893,14 +3907,21 @@ func (x *Obligation) GetDetail() string {
 // The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and
 // at emission (Offer.terms). The Exchange stores what the publisher pushed
 // and surfaces it on discovery, so agents see the same terms the publisher
-// declared — no translation or reformulation.
+// declared — no translation or reformulation — with one move: on an offer the
+// term's price is Offer.pricing, and the term itself carries none.
 //
 // Validation rules:
-//   - Pricing MUST be present on EVERY term, regardless of semantics.
-//     Absent Pricing → reject at ingest: an agent cannot act on a term with
-//     no price. This holds for REFERENCE_ONLY too — its License governs the
-//     human-readable terms, but the machine-readable price is still stated
+//   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),
+//     regardless of semantics — the resource_entry.terms.pricing_required
+//     rule. Absent Pricing → reject at ingest: an agent cannot act on a term
+//     with no price. This holds for REFERENCE_ONLY too — its License governs
+//     the human-readable terms, but the machine-readable price is still stated
 //     here, not deferred to the document.
+//   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the
+//     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and
+//     each offer derives from exactly one catalog term, so the price is stated
+//     once and cannot disagree with itself. The requirement is therefore a
+//     rule of the message that holds the term, not of LicenseTerm.
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
@@ -3951,12 +3972,18 @@ type LicenseTerm struct {
 	// Post-use behavioral requirements.
 	// At most 64, for the reason quotas carries.
 	Obligations []*Obligation `protobuf:"bytes,5,rep,name=obligations,proto3" json:"obligations,omitempty"`
-	// Pricing for this term. REQUIRED for every term regardless of semantics —
-	// an agent cannot act on a priceless term, so absent Pricing is a validation
-	// error at ingest. model = FREE must be stated explicitly (absent Pricing is
-	// not free). A REFERENCE_ONLY term states its price here too; its License
-	// governs the human-readable terms but does not replace the machine-readable
-	// price.
+	// Pricing for this term. Where it is required depends on the message that
+	// holds the term, so the requirement is a rule of that message rather than of
+	// this field:
+	//   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of
+	//     semantics — an agent cannot act on a priceless term, so absent Pricing
+	//     is a validation error at ingest (resource_entry.terms.pricing_required).
+	//     model = FREE must be stated explicitly (absent Pricing is not free). A
+	//     REFERENCE_ONLY term states its price here too; its License governs the
+	//     human-readable terms but does not replace the machine-readable price.
+	//   - On the term an offer carries (Offer.terms) it MUST be unset
+	//     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated
+	//     once.
 	Pricing *Pricing `protobuf:"bytes,6,opt,name=pricing,proto3,oneof" json:"pricing,omitempty"`
 	// Delegation scope-gating: the Exchange returns this term to an agent iff the
 	// agent's delegation grant covers ALL of these scopes (AND-semantics).
@@ -4226,8 +4253,8 @@ func (x *Preview) GetSize() string {
 // The report that settles is the one UsageReport a transaction accepts. A
 // metered price whose metering is PRICING_METERING_NONE has no report, so E ×
 // R charged at purchase is final. Settlement reads the offer's own `pricing`
-// (Offer.pricing) — the copy execute charges — and never a value the report
-// carries.
+// (Offer.pricing) — the offer's one price, which execute charges — and never
+// a value the report carries.
 type Pricing struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// Provider's pricing model.
@@ -4247,8 +4274,8 @@ type Pricing struct {
 	// For text: token count. For video: duration in seconds.
 	// For documents: page count. For data: record count.
 	//
-	// REQUIRED and positive on every metered offer — an Offer whose pricing or
-	// term is PER_UNIT (see Offer). It is E in the settlement rule above: the
+	// REQUIRED and positive on every metered offer — an Offer whose pricing is
+	// PER_UNIT (see Offer). It is E in the settlement rule above: the
 	// agent accepts E × rate at purchase, and the estimate with
 	// estimate_tolerance_bps fixes the ceiling a usage report settles against.
 	// Without it a metered offer has no amount to accept and no ceiling, so an
@@ -6041,11 +6068,13 @@ type ResourceEntry struct {
 	// carries only its role, determined by the verifier's operator.
 	Attestations []*ResourceAttestation `protobuf:"bytes,12,rep,name=attestations,proto3" json:"attestations,omitempty"`
 	// Publisher-declared licensing terms for this resource.
-	// See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST
-	// be present. For REFERENCE_ONLY terms, License.uri is authoritative.
-	// The Exchange validates ENUMERATED terms at push time and surfaces them
-	// in Offer.terms on discovery. At most 32 terms per entry, stated on the wire
-	// so every implementation refuses the same size. An over-cap entry refuses the
+	// See LicenseTerm for the full model. Every term carries its Pricing (the
+	// resource_entry.terms.pricing_required rule above), whatever its semantics.
+	// For REFERENCE_ONLY terms, License.uri is authoritative.
+	// The Exchange validates ENUMERATED terms at push time and surfaces each term
+	// on its own offer on discovery: the term's price becomes Offer.pricing, and
+	// the term in Offer.terms carries no pricing. At most 32 terms per entry,
+	// stated on the wire so every implementation refuses the same size. An over-cap entry refuses the
 	// whole submission, as every catalog rejection does; what being a wire rule
 	// changes is WHEN — the refusal now happens at the boundary, before any
 	// per-entry classification runs, which is why the rejection reason that named
@@ -10823,7 +10852,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x04unit\x18\x06 \x01(\tH\x01R\x04unit\x88\x01\x01B\f\n" +
 	"\n" +
 	"_resets_atB\a\n" +
-	"\x05_unit\"\xa9\f\n" +
+	"\x05_unit\"\xdb\f\n" +
 	"\x05Offer\x12\x19\n" +
 	"\boffer_id\x18\x01 \x01(\tR\aofferId\x12\x19\n" +
 	"\x05title\x18\x02 \x01(\tH\x00R\x05title\x88\x01\x01\x12*\n" +
@@ -10847,8 +10876,9 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x05terms\x18\x13 \x03(\v2\x14.fora.v1.LicenseTermB\n" +
 	"\xbaH\a\x92\x01\x04\b\x01\x10\x01R\x05terms\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
-	"\fext_critical\x18Z \x03(\tR\vextCritical:\xe5\x02\xbaH\xe1\x02\x1a\xde\x02\n" +
-	"\x1foffer.metered.requires_estimate\x12Ka metered (PER_UNIT) offer must carry a positive pricing.estimated_quantity\x1a\xed\x01!(this.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || this.terms.exists(t, t.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT)) || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)B\b\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical:\x97\x03\xbaH\x93\x03\x1a\x8a\x01\n" +
+	"\x19offer.terms.pricing_unset\x12Ian offer's term must carry no pricing; the offer's price is Offer.pricing\x1a\"this.terms.all(t, !has(t.pricing))\x1a\x83\x02\n" +
+	"\x1foffer.metered.requires_estimate\x12Ka metered (PER_UNIT) offer must carry a positive pricing.estimated_quantity\x1a\x92\x01this.pricing.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)B\b\n" +
 	"\x06_titleB\f\n" +
 	"\n" +
 	"_reportingB\r\n" +
@@ -10927,14 +10957,14 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x06detail\x18\x04 \x01(\tH\x01R\x06detail\x88\x01\x01:\x9c\x02\xbaH\x98\x02\x1a\x95\x02\n" +
 	"-obligation.share_alike.requires_scope_license\x12DSHARE_ALIKE requires scope_license to identify a license (id or uri)\x1a\x9d\x01this.kind != fora.v1.ObligationKind.OBLIGATION_KIND_SHARE_ALIKE || (has(this.scope_license) && (this.scope_license.id != '' || this.scope_license.uri != ''))B\x10\n" +
 	"\x0e_scope_licenseB\t\n" +
-	"\a_detail\"\x93\a\n" +
+	"\a_detail\"\x8b\a\n" +
 	"\vLicenseTerm\x12/\n" +
 	"\alicense\x18\x01 \x01(\v2\x10.fora.v1.LicenseH\x00R\alicense\x88\x01\x01\x12>\n" +
 	"\tsemantics\x18\x02 \x01(\x0e2\x16.fora.v1.TermSemanticsB\b\xbaH\x05\x82\x01\x02 \x00R\tsemantics\x12B\n" +
 	"\frestrictions\x18\x03 \x03(\v2\x14.fora.v1.RestrictionB\b\xbaH\x05\x92\x01\x02\x10\bR\frestrictions\x120\n" +
 	"\x06quotas\x18\x04 \x03(\v2\x0e.fora.v1.QuotaB\b\xbaH\x05\x92\x01\x02\x10@R\x06quotas\x12?\n" +
-	"\vobligations\x18\x05 \x03(\v2\x13.fora.v1.ObligationB\b\xbaH\x05\x92\x01\x02\x10@R\vobligations\x127\n" +
-	"\apricing\x18\x06 \x01(\v2\x10.fora.v1.PricingB\x06\xbaH\x03\xc8\x01\x01H\x01R\apricing\x88\x01\x01\x12 \n" +
+	"\vobligations\x18\x05 \x03(\v2\x13.fora.v1.ObligationB\b\xbaH\x05\x92\x01\x02\x10@R\vobligations\x12/\n" +
+	"\apricing\x18\x06 \x01(\v2\x10.fora.v1.PricingH\x01R\apricing\x88\x01\x01\x12 \n" +
 	"\x06scopes\x18\a \x03(\tB\b\xbaH\x05\x92\x01\x02\x10@R\x06scopes\x12\"\n" +
 	"\n" +
 	"part_label\x18\b \x01(\tH\x02R\tpartLabel\x88\x01\x01:\xb5\x03\xbaH\xb1\x03\x1a\xe2\x01\n" +
@@ -11107,7 +11137,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\tcaller_id\x18\x04 \x01(\tR\bcallerId\x12\xd7\x01\n" +
 	"\bexchange\x18\x05 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
-	"\fext_critical\x18Z \x03(\tR\vextCritical\"\xe1\t\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical\"\xe6\n" +
+	"\n" +
 	"\rResourceEntry\x12\xd3\x01\n" +
 	"\x06domain\x18\x01 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\x06domain\x126\n" +
 	"\x04path\x18\x02 \x01(\tB\"\xbaH\x1fr\x1d\x10\x01\x18\x80\x102\x16^/[^?#\\x00-\\x20\\x7f]*$R\x04path\x12,\n" +
@@ -11128,7 +11159,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x05terms\x18\r \x03(\v2\x14.fora.v1.LicenseTermB\b\xbaH\x05\x92\x01\x02\x10 R\x05terms\x12[\n" +
 	"\x13resource_mutability\x18\x0e \x01(\x0e2\x1b.fora.v1.ResourceMutabilityB\b\xbaH\x05\x82\x01\x02 \x00H\tR\x12resourceMutability\x88\x01\x01\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
-	"\fext_critical\x18Z \x03(\tR\vextCriticalB\r\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical:\x82\x01\xbaH\x7f\x1a}\n" +
+	"%resource_entry.terms.pricing_required\x121every term of a resource entry must carry pricing\x1a!this.terms.all(t, has(t.pricing))B\r\n" +
 	"\v_content_idB\b\n" +
 	"\x06_titleB\r\n" +
 	"\v_word_countB\x15\n" +
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index 76ebbb96..b30bc66d 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -51,7 +51,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -99,7 +99,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -255,8 +254,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -285,7 +284,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -434,7 +433,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -449,7 +448,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index b9d1275b..6baa9b6f 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -53,7 +53,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -101,7 +101,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -259,8 +258,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -289,7 +288,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -441,7 +440,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -456,7 +455,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index fdd717eb..a2265b9a 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -92,7 +92,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -107,7 +107,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -296,7 +296,7 @@
   },
   "$id": "fora.v1.LicenseTerm.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
@@ -316,7 +316,7 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+      "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
     },
     "quotas": {
       "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -364,7 +364,6 @@
     }
   },
   "required": [
-    "pricing",
     "semantics"
   ],
   "title": "LicenseTerm — Universal licensing unit.",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index dc6fe5a6..ead49a20 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -95,7 +95,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -110,7 +110,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -302,7 +302,7 @@
   "$id": "fora.v1.LicenseTerm.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
@@ -322,7 +322,7 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+      "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
     },
     "quotas": {
       "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -370,7 +370,6 @@
     }
   },
   "required": [
-    "pricing",
     "semantics"
   ],
   "title": "LicenseTerm — Universal licensing unit.",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index 53146c3d..25613e4e 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -51,7 +51,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -99,7 +99,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -206,7 +205,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -221,7 +220,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -715,8 +714,8 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-      "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+      "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -745,7 +744,7 @@
       "type": "array"
     },
     "terms": {
-      "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+      "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
       "items": {
         "$ref": "#/$defs/fora.v1.LicenseTerm"
       },
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index 7aad252b..14b89086 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -53,7 +53,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -101,7 +101,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -211,7 +210,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -226,7 +225,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -727,8 +726,8 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-      "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+      "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -757,7 +756,7 @@
       "type": "array"
     },
     "terms": {
-      "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+      "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
       "items": {
         "$ref": "#/$defs/fora.v1.LicenseTerm"
       },
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index 1087fdd8..ae61c499 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -51,7 +51,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -99,7 +99,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -255,8 +254,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -285,7 +284,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -345,7 +344,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -360,7 +359,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index 0326d0bb..b8d2bb2e 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -53,7 +53,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -101,7 +101,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -259,8 +258,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -289,7 +288,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -351,7 +350,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -366,7 +365,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.json b/gen/jsonschema/fora.v1.Pricing.schema.json
index 81ddea1c..d3519774 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.Pricing.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
   "properties": {
     "currency": {
       "default": "",
@@ -16,7 +16,7 @@
       "type": "integer"
     },
     "estimated_quantity": {
-      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.strict.json b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
index f77d65f0..56c1cf50 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.Pricing.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
   "properties": {
     "currency": {
       "default": "",
@@ -17,7 +17,7 @@
       "type": "integer"
     },
     "estimated_quantity": {
-      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 3a599abb..9e1869dd 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -51,7 +51,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -99,7 +99,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -167,7 +166,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -182,7 +181,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -457,7 +456,7 @@
           "title": "Ingestion Source"
         },
         "terms": {
-          "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+          "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 04d68e52..7afbc8de 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -53,7 +53,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -101,7 +101,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -171,7 +170,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -186,7 +185,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -464,7 +463,7 @@
           "title": "Ingestion Source"
         },
         "terms": {
-          "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+          "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index aaf10719..9004c2d4 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -51,7 +51,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -99,7 +99,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -167,7 +166,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -182,7 +181,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -516,7 +515,7 @@
       "title": "Ingestion Source"
     },
     "terms": {
-      "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+      "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
       "items": {
         "$ref": "#/$defs/fora.v1.LicenseTerm"
       },
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index 73e4d078..14ca1add 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -53,7 +53,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -101,7 +101,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -171,7 +170,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -186,7 +185,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -524,7 +523,7 @@
       "title": "Ingestion Source"
     },
     "terms": {
-      "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
+      "description": "Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
       "items": {
         "$ref": "#/$defs/fora.v1.LicenseTerm"
       },
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index ba1ef39e..2b3b95bc 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -51,7 +51,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -99,7 +99,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -255,8 +254,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -285,7 +284,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -434,7 +433,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -449,7 +448,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index a3b7a8bf..f330ecb6 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -53,7 +53,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -101,7 +101,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -259,8 +258,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -289,7 +288,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -441,7 +440,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -456,7 +455,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index 88abae59..45f51073 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -51,7 +51,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -71,7 +71,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -119,7 +119,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -275,8 +274,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -305,7 +304,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -365,7 +364,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -380,7 +379,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index b6b62c0b..c82c30ad 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -54,7 +54,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -74,7 +74,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -122,7 +122,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -280,8 +279,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -310,7 +309,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -372,7 +371,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -387,7 +386,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index f46cbaf0..1700c0d9 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -207,7 +207,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -227,7 +227,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -275,7 +275,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -431,8 +430,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -461,7 +460,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -521,7 +520,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -536,7 +535,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 8e433d7d..0d2df064 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -214,7 +214,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -234,7 +234,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."
+          "description": "Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once."
         },
         "quotas": {
           "description": "Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.",
@@ -282,7 +282,6 @@
         }
       },
       "required": [
-        "pricing",
         "semantics"
       ],
       "title": "LicenseTerm — Universal licensing unit.",
@@ -440,8 +439,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "On a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.",
-          "title": "Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -470,7 +469,7 @@
           "type": "array"
         },
         "terms": {
-          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+          "description": "The distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
           "items": {
             "$ref": "#/$defs/fora.v1.LicenseTerm"
           },
@@ -532,7 +531,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -547,7 +546,7 @@
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index c49f6bc1..442b65f2 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1316,7 +1316,7 @@ class Pricing(WireModel):
     )
     estimated_quantity: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description='Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.',
+        description='Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.',
     )
     license_duration_months: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
@@ -1833,9 +1833,9 @@ class LicenseTerm(WireModel):
         None,
         description='Informational human-readable name for this sub-part (sub-part terms).',
     )
-    pricing: Pricing = Field(
-        ...,
-        description='Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price.',
+    pricing: Pricing | None = Field(
+        None,
+        description="Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.",
     )
     quotas: list[Quota] | None = Field(
         None,
@@ -1905,7 +1905,7 @@ class Offer(WireModel):
     )
     pricing: Pricing | None = Field(
         None,
-        description='Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term\'s pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term\'s estimate_tolerance_bps here unchanged.',
+        description='The offer\'s price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term\'s price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.\n\nIt derives from exactly one catalog term: the term\'s pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange\'s estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer\'s price and its term\'s price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term\'s\n estimate_tolerance_bps here unchanged.',
     )
     reporting: ReportingObligation | None = Field(
         None, description='Post-usage reporting requirements for this offer.'
@@ -1928,7 +1928,7 @@ class Offer(WireModel):
     )
     terms: list[LicenseTerm] | None = Field(
         None,
-        description="The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
+        description="The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.",
         max_length=1,
         min_length=1,
     )
@@ -2013,7 +2013,7 @@ class ResourceEntry(WireModel):
     )
     terms: list[LicenseTerm] | None = Field(
         None,
-        description='Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.',
+        description="Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.",
         max_length=32,
     )
     title: constr(max_length=512) | None = Field(None, description='Content title')
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index d91aa5ee..ca1cac0c 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -50,7 +50,7 @@ export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","D
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -92,7 +92,7 @@ export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datet
 
 export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
 
-export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
+export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
 
 export const ObligationSchema = wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies."));
 
@@ -100,15 +100,15 @@ export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","
 
 export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
-export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the copy execute charges — and never a value the report\n carries."));
+export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries."));
 
 export const PricingMeteringSchema = wire(z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]));
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
@@ -162,7 +162,7 @@ export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOL
 
 export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST\n be present. For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces them\n in Offer.terms on discovery. At most 32 terms per entry, stated on the wire\n so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
 
 export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
 
@@ -170,7 +170,7 @@ export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC
 
 export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
 export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
@@ -198,9 +198,9 @@ export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TER
 
 export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this offer. An offer represents a single licensing\n arrangement: each projected LicenseTerm yields its own offer, so this is\n that term's pricing (the authoritative copy lives in `terms[].pricing`).\n Used for cross-exchange comparison and Broker ranking. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nOn a metered (PER_UNIT) offer this copy MUST carry a positive\n estimated_quantity, and it is the copy a metered purchase settles on: the\n estimate, the rate and the tolerance are read from here (see Pricing and\n the offer.metered.requires_estimate rule above). An Exchange projecting a\n term carries the term's estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing or\n term is PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. REQUIRED for every term regardless of semantics —\n an agent cannot act on a priceless term, so absent Pricing is a validation\n error at ingest. model = FREE must be stated explicitly (absent Pricing is\n not free). A REFERENCE_ONLY term states its price here too; its License\n governs the human-readable terms but does not replace the machine-readable\n price."), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation.\n\n Validation rules:\n   - Pricing MUST be present on EVERY term, regardless of semantics.\n     Absent Pricing → reject at ingest: an agent cannot act on a term with\n     no price. This holds for REFERENCE_ONLY too — its License governs the\n     human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
 export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 69555248..a3129caf 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -728,14 +728,25 @@ message SubscriptionQuotaInfo {
 // Combines pricing, delivery method, resource identity, and reporting terms.
 // CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.
 message Offer {
+  // An offer carries its price ONCE, in `pricing`. The term the offer sells
+  // (`terms`) carries no pricing: an Exchange projecting a catalog term onto an
+  // offer moves the term's price into `pricing` and leaves the term's own
+  // `pricing` unset. Two copies of one price on a signed offer could disagree,
+  // and nothing would say which one execute charges; with one copy there is
+  // nothing to disagree with.
+  option (buf.validate.message).cel = {
+    id: "offer.terms.pricing_unset"
+    message: "an offer's term must carry no pricing; the offer's price is Offer.pricing"
+    expression: "this.terms.all(t, !has(t.pricing))"
+  };
+
   // A metered offer carries its estimate. An offer is metered when its
-  // `pricing` or its term's pricing is PER_UNIT, and then `pricing` MUST carry
-  // a positive estimated_quantity: the agent accepts estimate × rate at
-  // purchase and a usage report settles against a ceiling derived from the
-  // estimate (see Pricing), so a metered offer without one has neither. The
-  // term's pricing is consulted too because it is the authoritative copy; a
-  // term that is PER_UNIT makes the offer metered even if `pricing` were to say
-  // otherwise. A non-metered offer needs no estimate.
+  // `pricing` is PER_UNIT, and then `pricing` MUST carry a positive
+  // estimated_quantity: the agent accepts estimate × rate at purchase and a
+  // usage report settles against a ceiling derived from the estimate (see
+  // Pricing), so a metered offer without one has neither. A non-metered offer
+  // needs no estimate. The rule reads `pricing` only, because `pricing` is the
+  // offer's one price (see offer.terms.pricing_unset above).
   //
   // This is an offer rule, not a Pricing rule, on purpose: a publisher pushes
   // PER_UNIT terms without an estimate (the estimate describes the resource and
@@ -744,7 +755,7 @@ message Offer {
   option (buf.validate.message).cel = {
     id: "offer.metered.requires_estimate"
     message: "a metered (PER_UNIT) offer must carry a positive pricing.estimated_quantity"
-    expression: "!(this.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || this.terms.exists(t, t.pricing.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT)) || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)"
+    expression: "this.pricing.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)"
   };
 
   // Unique identifier for this offer, assigned by the Exchange.
@@ -756,18 +767,26 @@ message Offer {
   // Resource title (human-readable, for display/logging).
   optional string title = 2;
 
-  // Pricing for this offer. An offer represents a single licensing
-  // arrangement: each projected LicenseTerm yields its own offer, so this is
-  // that term's pricing (the authoritative copy lives in `terms[].pricing`).
-  // Used for cross-exchange comparison and Broker ranking. A resource with
+  // The offer's price, and its ONLY price. An offer represents a single
+  // licensing arrangement: each projected LicenseTerm yields its own offer, and
+  // the Exchange moves that term's price here, so the term inside `terms`
+  // carries no pricing of its own (the offer.terms.pricing_unset rule). This is
+  // the price execute charges, the price a Broker ranks and compares across
+  // Exchanges, and the price a metered purchase settles on. A resource with
   // multiple alternative terms (e.g. dual-licensed) produces multiple separate
   // offers, one per term — never one offer with a "headline" picked among them.
   //
-  // On a metered (PER_UNIT) offer this copy MUST carry a positive
-  // estimated_quantity, and it is the copy a metered purchase settles on: the
-  // estimate, the rate and the tolerance are read from here (see Pricing and
-  // the offer.metered.requires_estimate rule above). An Exchange projecting a
-  // term carries the term's estimate_tolerance_bps here unchanged.
+  // It derives from exactly one catalog term: the term's pricing as the
+  // publisher declared it (ResourceEntry.terms), with the Exchange's estimate
+  // added on a metered offer. Each offer derives from one term, and the offer
+  // carries no second copy, so the offer's price and its term's price cannot
+  // disagree.
+  //
+  // On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:
+  // the estimate, the rate and the tolerance a metered purchase settles on are
+  // read from here (see Pricing and the offer.metered.requires_estimate rule
+  // above). An Exchange projecting a term carries the term's
+  // estimate_tolerance_bps here unchanged.
   Pricing pricing = 3;
 
   // How resource will be delivered.
@@ -967,6 +986,12 @@ message Offer {
   // dual-licensed resource sells only under whichever arrangement the
   // publisher happened to store first.
   //
+  // The term here carries everything the publisher declared EXCEPT its price:
+  // its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because
+  // the offer's price is `pricing` above. Its semantics, license,
+  // restrictions, quotas, obligations, scopes and part_label are the
+  // publisher's, unchanged.
+  //
   // Where a term is reachable only under an existing subscription, its offer
   // carries `subscription_id` and prices at zero marginal cost; the terms a
   // requester may see at all are selected by `LicenseTerm.scopes`.
@@ -1223,9 +1248,11 @@ message ResourceAttestation {
 //               metering=NONE, NOTICE obligation
 //     Term 2 — REFERENCE_ONLY — full MCPS/PRS terms at License.uri
 //
-// Pricing is REQUIRED on every term regardless of semantics — absent Pricing
-// is a validation error, and model=FREE must be stated explicitly (absent
-// Pricing ≠ free). The rest of the rules depend on semantics:
+// Pricing is REQUIRED on every term a catalog declares (ResourceEntry.terms),
+// regardless of semantics — absent Pricing is a validation error there, and
+// model=FREE must be stated explicitly (absent Pricing ≠ free). On an offer the
+// price moves to Offer.pricing and the term carries none (see Offer). The rest
+// of the rules depend on semantics:
 //   ENUMERATED  — the machine restrictions/quotas/obligations are the COMPLETE,
 //                 authoritative expression of the term; they must be internally
 //                 consistent (a term may not contradict itself) and are enforced
@@ -1240,15 +1267,17 @@ message ResourceAttestation {
 //                 either way.
 //
 // LicenseTerm lives in ResourceEntry (ingestion) and Offer (emission) — the
-// same shape at both ends. The Exchange stores terms from PushResources and
+// same shape at both ends, with one difference: a catalog term carries its
+// Pricing, and an offer's term carries none, because the offer states its price
+// once, in Offer.pricing. The Exchange stores terms from PushResources and
 // surfaces them on DiscoverResources/ExecuteTransaction.
 // ============================================================================
 
 // TermSemantics — How the Exchange interprets a LicenseTerm's machine fields.
 enum TermSemantics {
   TERM_SEMANTICS_UNSPECIFIED    = 0;  // unset — rejected at ingest
-  TERM_SEMANTICS_ENUMERATED     = 1;  // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction) and are enforced. `Pricing` MUST be present.
-  TERM_SEMANTICS_REFERENCE_ONLY = 2;  // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and are enforced just like ENUMERATED. `Pricing` is still required.
+  TERM_SEMANTICS_ENUMERATED     = 1;  // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction) and are enforced. `Pricing` MUST be present on a catalog term (on an offer it is Offer.pricing).
+  TERM_SEMANTICS_REFERENCE_ONLY = 2;  // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and are enforced just like ENUMERATED. `Pricing` is still required on a catalog term (on an offer it is Offer.pricing).
 }
 
 // RestrictionKind — Which dimension a Restriction constrains.
@@ -1604,14 +1633,21 @@ message Obligation {
 // The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and
 // at emission (Offer.terms). The Exchange stores what the publisher pushed
 // and surfaces it on discovery, so agents see the same terms the publisher
-// declared — no translation or reformulation.
+// declared — no translation or reformulation — with one move: on an offer the
+// term's price is Offer.pricing, and the term itself carries none.
 //
 // Validation rules:
-//   - Pricing MUST be present on EVERY term, regardless of semantics.
-//     Absent Pricing → reject at ingest: an agent cannot act on a term with
-//     no price. This holds for REFERENCE_ONLY too — its License governs the
-//     human-readable terms, but the machine-readable price is still stated
+//   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),
+//     regardless of semantics — the resource_entry.terms.pricing_required
+//     rule. Absent Pricing → reject at ingest: an agent cannot act on a term
+//     with no price. This holds for REFERENCE_ONLY too — its License governs
+//     the human-readable terms, but the machine-readable price is still stated
 //     here, not deferred to the document.
+//   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the
+//     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and
+//     each offer derives from exactly one catalog term, so the price is stated
+//     once and cannot disagree with itself. The requirement is therefore a
+//     rule of the message that holds the term, not of LicenseTerm.
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
@@ -1698,13 +1734,19 @@ message LicenseTerm {
   // At most 64, for the reason quotas carries.
   repeated Obligation obligations = 5 [(buf.validate.field).repeated.max_items = 64];
 
-  // Pricing for this term. REQUIRED for every term regardless of semantics —
-  // an agent cannot act on a priceless term, so absent Pricing is a validation
-  // error at ingest. model = FREE must be stated explicitly (absent Pricing is
-  // not free). A REFERENCE_ONLY term states its price here too; its License
-  // governs the human-readable terms but does not replace the machine-readable
-  // price.
-  optional Pricing pricing = 6 [(buf.validate.field).required = true];
+  // Pricing for this term. Where it is required depends on the message that
+  // holds the term, so the requirement is a rule of that message rather than of
+  // this field:
+  //   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of
+  //     semantics — an agent cannot act on a priceless term, so absent Pricing
+  //     is a validation error at ingest (resource_entry.terms.pricing_required).
+  //     model = FREE must be stated explicitly (absent Pricing is not free). A
+  //     REFERENCE_ONLY term states its price here too; its License governs the
+  //     human-readable terms but does not replace the machine-readable price.
+  //   - On the term an offer carries (Offer.terms) it MUST be unset
+  //     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated
+  //     once.
+  optional Pricing pricing = 6;
 
   // Delegation scope-gating: the Exchange returns this term to an agent iff the
   // agent's delegation grant covers ALL of these scopes (AND-semantics).
@@ -1814,8 +1856,8 @@ message Preview {
 // The report that settles is the one UsageReport a transaction accepts. A
 // metered price whose metering is PRICING_METERING_NONE has no report, so E ×
 // R charged at purchase is final. Settlement reads the offer's own `pricing`
-// (Offer.pricing) — the copy execute charges — and never a value the report
-// carries.
+// (Offer.pricing) — the offer's one price, which execute charges — and never
+// a value the report carries.
 message Pricing {
   // Cross-field structural rules (protovalidate, OR form — CEL has no implies):
   //   PER_UNIT ⇒ unit must be set; FREE ⇒ rate must be 0;
@@ -1864,8 +1906,8 @@ message Pricing {
   // For text: token count. For video: duration in seconds.
   // For documents: page count. For data: record count.
   //
-  // REQUIRED and positive on every metered offer — an Offer whose pricing or
-  // term is PER_UNIT (see Offer). It is E in the settlement rule above: the
+  // REQUIRED and positive on every metered offer — an Offer whose pricing is
+  // PER_UNIT (see Offer). It is E in the settlement rule above: the
   // agent accepts E × rate at purchase, and the estimate with
   // estimate_tolerance_bps fixes the ceiling a usage report settles against.
   // Without it a metered offer has no amount to accept and no ceiling, so an
@@ -3005,6 +3047,16 @@ message PushResourcesRequest {
 // request size the recipient will read; a deployment that exposes CatalogService
 // sets that cap, and the SDK's server binding sets a default.
 message ResourceEntry {
+  // Every catalog term carries its price. An agent cannot act on a priceless
+  // term, and model = FREE must be stated explicitly: absent Pricing is not
+  // free. The rule lives here rather than on LicenseTerm.pricing because the
+  // term an offer carries holds no price (its price is Offer.pricing).
+  option (buf.validate.message).cel = {
+    id: "resource_entry.terms.pricing_required"
+    message: "every term of a resource entry must carry pricing"
+    expression: "this.terms.all(t, has(t.pricing))"
+  };
+
   // Provider domain — the bare host the resource lives on, in the shape
   // "Request recipient" defines in the file header: a port is allowed, a
   // scheme, path, query or userinfo is not. With path it forms the catalog URI
@@ -3065,11 +3117,13 @@ message ResourceEntry {
   repeated ResourceAttestation attestations = 12 [(buf.validate.field).repeated.max_items = 64];
 
   // Publisher-declared licensing terms for this resource.
-  // See LicenseTerm for the full model. For ENUMERATED terms, Pricing MUST
-  // be present. For REFERENCE_ONLY terms, License.uri is authoritative.
-  // The Exchange validates ENUMERATED terms at push time and surfaces them
-  // in Offer.terms on discovery. At most 32 terms per entry, stated on the wire
-  // so every implementation refuses the same size. An over-cap entry refuses the
+  // See LicenseTerm for the full model. Every term carries its Pricing (the
+  // resource_entry.terms.pricing_required rule above), whatever its semantics.
+  // For REFERENCE_ONLY terms, License.uri is authoritative.
+  // The Exchange validates ENUMERATED terms at push time and surfaces each term
+  // on its own offer on discovery: the term's price becomes Offer.pricing, and
+  // the term in Offer.terms carries no pricing. At most 32 terms per entry,
+  // stated on the wire so every implementation refuses the same size. An over-cap entry refuses the
   // whole submission, as every catalog rejection does; what being a wire rule
   // changes is WHEN — the refusal now happens at the boundary, before any
   // per-entry classification runs, which is why the rejection reason that named
diff --git a/sdk/go/helpers/gen_licenseterm_vectors_test.go b/sdk/go/helpers/gen_licenseterm_vectors_test.go
index 34fe4fec..9a0788bd 100644
--- a/sdk/go/helpers/gen_licenseterm_vectors_test.go
+++ b/sdk/go/helpers/gen_licenseterm_vectors_test.go
@@ -652,9 +652,6 @@ func buildLTEntryVectors(t *testing.T) []ltEntryVector {
 		{"structural_padded_token_fails_wire_before_fold", entry(func(e *forav1.ResourceEntry) {
 			e.Terms[0].Restrictions = []*forav1.Restriction{ltRestriction(ltKindGeography, []string{" de "}, nil)}
 		})},
-		{"structural_term_without_pricing", entry(func(e *forav1.ResourceEntry) {
-			e.Terms[0].Pricing = nil
-		})},
 		{"structural_nested_cel_only", entry(func(e *forav1.ResourceEntry) {
 			e.Terms = append(e.Terms, ltEnumerated(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.05", Currency: "USD"}, nil))
 		})},
@@ -667,6 +664,12 @@ func buildLTEntryVectors(t *testing.T) []ltEntryVector {
 		// across languages. Each also stays far under the list bounds, or the
 		// cardinality rule would fire too and be classified as field-level, masking
 		// the rule the case exists to isolate.
+		// A catalog term carries its price. The rule is the entry's, not the
+		// term's, because an offer's term carries none (its price is
+		// Offer.pricing), so a port checks it on the entry it walks.
+		{"cross_field_resource_entry_term_without_pricing", entry(func(e *forav1.ResourceEntry) {
+			e.Terms[0].Pricing = nil
+		})},
 		{"cross_field_restriction_permitted_prohibited_overlap", entry(func(e *forav1.ResourceEntry) {
 			e.Terms[0].Restrictions = []*forav1.Restriction{
 				ltRestriction(ltKindFunction, []string{"ai-train"}, []string{"ai-train"}),
diff --git a/sdk/go/helpers/testdata/licenseterm-vectors.json b/sdk/go/helpers/testdata/licenseterm-vectors.json
index f42c703d..d31bf0ef 100644
--- a/sdk/go/helpers/testdata/licenseterm-vectors.json
+++ b/sdk/go/helpers/testdata/licenseterm-vectors.json
@@ -238,23 +238,6 @@
       "term_rules": [],
       "warnings": []
     },
-    {
-      "name": "structural_term_without_pricing",
-      "entry": {
-        "domain": "publisher.example",
-        "path": "/premium/article-42.html",
-        "terms": [
-          {
-            "semantics": "TERM_SEMANTICS_ENUMERATED"
-          }
-        ]
-      },
-      "ok": false,
-      "structural": true,
-      "cross_field_rules": [],
-      "term_rules": [],
-      "warnings": []
-    },
     {
       "name": "structural_nested_cel_only",
       "entry": {
@@ -286,6 +269,25 @@
       "term_rules": [],
       "warnings": []
     },
+    {
+      "name": "cross_field_resource_entry_term_without_pricing",
+      "entry": {
+        "domain": "publisher.example",
+        "path": "/premium/article-42.html",
+        "terms": [
+          {
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "ok": false,
+      "structural": false,
+      "cross_field_rules": [
+        "resource_entry.terms.pricing_required"
+      ],
+      "term_rules": [],
+      "warnings": []
+    },
     {
       "name": "cross_field_restriction_permitted_prohibited_overlap",
       "entry": {
diff --git a/sdk/go/helpers/transaction_offer_validate_test.go b/sdk/go/helpers/transaction_offer_validate_test.go
index 80471e41..dce067da 100644
--- a/sdk/go/helpers/transaction_offer_validate_test.go
+++ b/sdk/go/helpers/transaction_offer_validate_test.go
@@ -44,10 +44,10 @@ func validOffer() *forav1.Offer {
 		Exchange: "exchange.example",
 		Pricing:  free,
 		// terms is bounded to exactly one: an offer sells a single licensing
-		// arrangement, so a valid offer always carries the term it sells.
+		// arrangement, so a valid offer always carries the term it sells. The
+		// term carries no pricing: the offer's price is Offer.pricing.
 		Terms: []*forav1.LicenseTerm{{
 			Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
-			Pricing:   free,
 		}},
 	}
 }
diff --git a/website/src/content/docs/getting-started/live-demo-music.mdx b/website/src/content/docs/getting-started/live-demo-music.mdx
index d48b1ccf..c530bf88 100644
--- a/website/src/content/docs/getting-started/live-demo-music.mdx
+++ b/website/src/content/docs/getting-started/live-demo-music.mdx
@@ -215,7 +215,7 @@ The Online Creator term has `TERM_SEMANTICS_REFERENCE_ONLY`. This means the lice
 <details>
 <summary>The Online Creator term</summary>
 
-This is the term from the offer the agent received, with the digest shortened:
+This is the term from the offer the agent received, with the digest shortened. It carries no price: an offer states its price once, in `Offer.pricing` (EUR 29 here), and the term it sells carries none.
 
 ```json
 {
@@ -232,7 +232,6 @@ This is the term from the offer the agent received, with the digest shortened:
     { "kind": "RESTRICTION_KIND_GEOGRAPHY", "permitted": ["*"] }
   ],
   "quotas": [{ "limit": "1", "metric": "vendor:productions", "window": "QUOTA_WINDOW_TOTAL" }],
-  "pricing": { "model": "PRICING_MODEL_FLAT", "rate": "29", "currency": "EUR", "metering": "PRICING_METERING_NONE" },
   "obligations": [
     {
       "kind": "OBLIGATION_KIND_NOTICE",
diff --git a/website/src/content/docs/protocol/ext-academic.mdx b/website/src/content/docs/protocol/ext-academic.mdx
index 939ec3c6..c28bfd97 100644
--- a/website/src/content/docs/protocol/ext-academic.mdx
+++ b/website/src/content/docs/protocol/ext-academic.mdx
@@ -310,14 +310,7 @@ An agent queries for a Nature article. No institutional subscription is availabl
   },
   "terms": [
     {
-      "semantics": "TERM_SEMANTICS_ENUMERATED",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "unit_cost": "3199",
-        "currency": "USD",
-        "unit": "items",
-        "estimated_quantity": 1
-      }
+      "semantics": "TERM_SEMANTICS_ENUMERATED"
     }
   ],
   "delivery_method": "DELIVERY_METHOD_DIRECT",
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 0f5d63df..3c5eb79c 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -515,8 +515,7 @@ SSP-Alpha returns `offer_groups` (batch mode -- multiple URIs in query):
           "attestations": [{ "verifier": "gumgum.com", "claims": { "estimated_quantity": 3300, "word_count": 2500 }, "signature": "..." }],
           "terms": [
             {
-              "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit": "accesses", "unit_cost": "0.00001515", "estimated_quantity": 3300 }
+              "semantics": "TERM_SEMANTICS_ENUMERATED"
             }
           ],
           "signature": "base64-ed25519-sig-A...",
@@ -532,8 +531,7 @@ SSP-Alpha returns `offer_groups` (batch mode -- multiple URIs in query):
           "reporting": { "required": true, "window": "86400s", "required_fields": ["transaction_id", "function", "consumed_quantity"] },
           "terms": [
             {
-              "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": { "model": "PRICING_MODEL_FREE", "rate": "0", "currency": "USD", "unit_cost": "0", "estimated_quantity": 3300 }
+              "semantics": "TERM_SEMANTICS_ENUMERATED"
             }
           ],
           "signature": "base64-ed25519-sig-B...",
@@ -571,8 +569,7 @@ Note: SSP-Alpha returns an empty `offers` array for the `theverge.com` URI with
       "attestations": [{ "verifier": "gumgum.com", "claims": { "estimated_quantity": 3100, "word_count": 2350 }, "signature": "..." }],
       "terms": [
         {
-          "semantics": "TERM_SEMANTICS_ENUMERATED",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.07", "currency": "USD", "unit": "accesses", "unit_cost": "0.00002258", "estimated_quantity": 3100 }
+          "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ],
       "signature": "base64-ed25519-sig-C...",
@@ -673,14 +670,7 @@ SDK or Broker commits to the subscription offer.
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_FREE",
-              "rate": "0",
-              "currency": "USD",
-              "unit_cost": "0",
-              "estimated_quantity": 3300
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-sig-B...",
@@ -737,14 +727,7 @@ The agent sends the purchase to the Broker, `POST https://broker.example/fora.v1
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_FREE",
-              "rate": "0",
-              "currency": "USD",
-              "unit_cost": "0",
-              "estimated_quantity": 3300
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-sig-B...",
@@ -1007,8 +990,7 @@ Response includes signed Offer snapshots for every transaction:
         "subscription_id": "SUB-ANTHROPIC-HEARST-2026",
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": { "model": "PRICING_MODEL_FREE", "rate": "0", "currency": "USD" }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-sig-B...",
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 12c3116f..4e93b826 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -164,8 +164,7 @@ When requesting multiple URIs, the response uses `offer_groups` instead of `offe
           "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
           "terms": [
             {
-              "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
+              "semantics": "TERM_SEMANTICS_ENUMERATED"
             }
           ],
           "signature": "a1b2c3...",
@@ -182,8 +181,7 @@ When requesting multiple URIs, the response uses `offer_groups` instead of `offe
           "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
           "terms": [
             {
-              "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
+              "semantics": "TERM_SEMANTICS_ENUMERATED"
             }
           ],
           "signature": "d4e5f6...",
@@ -214,8 +212,7 @@ When the requester has a subscription, the Exchange includes both per-request an
       "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "estimated_quantity": 2500, "unit": "tokens" },
       "terms": [
         {
-          "semantics": "TERM_SEMANTICS_ENUMERATED",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
+          "semantics": "TERM_SEMANTICS_ENUMERATED"
         }
       ],
       "signature": "a1b2c3...",
@@ -333,15 +330,7 @@ Content-Type: application/json
         "expires_at": "2026-03-14T02:30:00Z",
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.00002",
-              "currency": "USD",
-              "unit_cost": "0.00002",
-              "estimated_quantity": 2500,
-              "unit": "tokens"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "a1b2c3d4e5f6...",
@@ -425,8 +414,7 @@ For batch transactions, use the `items` array:
         "expires_at": "2026-03-14T02:30:00Z",
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "a1b2c3...",
@@ -441,8 +429,7 @@ For batch transactions, use the `items` array:
         "expires_at": "2026-03-14T02:30:00Z",
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.00002", "currency": "USD", "unit_cost": "0.00002", "unit": "tokens" }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "d4e5f6...",
diff --git a/website/src/content/docs/protocol/walkthrough-academic.mdx b/website/src/content/docs/protocol/walkthrough-academic.mdx
index fea88120..76a707ae 100644
--- a/website/src/content/docs/protocol/walkthrough-academic.mdx
+++ b/website/src/content/docs/protocol/walkthrough-academic.mdx
@@ -663,15 +663,7 @@ The Broker commits to all 49 selected offers in a single batch `TransactionReque
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_FREE",
-              "rate": "0",
-              "currency": "USD",
-              "unit_cost": "0",
-              "estimated_quantity": 12800,
-              "unit": "tokens"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-arxiv-offer-sig...",
@@ -703,15 +695,7 @@ The Broker commits to all 49 selected offers in a single batch `TransactionReque
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_FREE",
-              "rate": "0",
-              "currency": "USD",
-              "unit_cost": "0",
-              "estimated_quantity": 15200,
-              "unit": "tokens"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-elsevier-sub-offer-sig...",
diff --git a/website/src/content/docs/protocol/walkthrough-credit-report.mdx b/website/src/content/docs/protocol/walkthrough-credit-report.mdx
index 73192a0d..57df9218 100644
--- a/website/src/content/docs/protocol/walkthrough-credit-report.mdx
+++ b/website/src/content/docs/protocol/walkthrough-credit-report.mdx
@@ -430,15 +430,7 @@ The agent selects the **standard tier** ($61.99) — sufficient depth for due di
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "61.99",
-              "currency": "USD",
-              "unit_cost": "61.99",
-              "estimated_quantity": 1,
-              "unit": "records"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-dnb-offer-std-sig...",
diff --git a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
index 51576f2d..4d708f94 100644
--- a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
+++ b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
@@ -356,14 +356,7 @@ Each Exchange returns offers in its domain-specific pricing model. The Broker ag
           },
           "terms": [
             {
-              "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": {
-                "model": "PRICING_MODEL_PER_UNIT",
-                "rate": "0.10",
-                "currency": "USD",
-                "estimated_quantity": 32,
-                "unit": "pages"
-              }
+              "semantics": "TERM_SEMANTICS_ENUMERATED"
             }
           ],
           "signature": "base64-ed25519-legal-offer-sig-002...",
@@ -396,14 +389,7 @@ Each Exchange returns offers in its domain-specific pricing model. The Broker ag
           },
           "terms": [
             {
-              "semantics": "TERM_SEMANTICS_ENUMERATED",
-              "pricing": {
-                "model": "PRICING_MODEL_PER_UNIT",
-                "rate": "0.10",
-                "currency": "USD",
-                "estimated_quantity": 28,
-                "unit": "pages"
-              }
+              "semantics": "TERM_SEMANTICS_ENUMERATED"
             }
           ],
           "signature": "base64-ed25519-legal-offer-sig-003...",
@@ -571,15 +557,7 @@ The Broker sends batch `TransactionRequest` to each Exchange. One request per Ex
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "61.99",
-              "currency": "USD",
-              "unit_cost": "61.99",
-              "estimated_quantity": 1,
-              "unit": "records"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-credit-offer-sig...",
@@ -629,15 +607,7 @@ The Broker sends batch `TransactionRequest` to each Exchange. One request per Ex
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.10",
-              "currency": "USD",
-              "unit_cost": "0.10",
-              "estimated_quantity": 45,
-              "unit": "pages"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-legal-offer-sig-001...",
@@ -662,14 +632,7 @@ The Broker sends batch `TransactionRequest` to each Exchange. One request per Ex
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.10",
-              "currency": "USD",
-              "estimated_quantity": 32,
-              "unit": "pages"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-legal-offer-sig-002...",
@@ -694,14 +657,7 @@ The Broker sends batch `TransactionRequest` to each Exchange. One request per Ex
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.10",
-              "currency": "USD",
-              "estimated_quantity": 28,
-              "unit": "pages"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-legal-offer-sig-003...",
diff --git a/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx b/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx
index 5ba459ec..724e2c4b 100644
--- a/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx
+++ b/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx
@@ -366,15 +366,7 @@ Assume the agent chooses EUR-Lex (free). The `ExecuteTransaction` follows the st
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_FREE",
-              "rate": "0",
-              "currency": "EUR",
-              "unit_cost": "0",
-              "estimated_quantity": 89000,
-              "unit": "tokens"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-eurlex-offer-sig...",
diff --git a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
index beafc3f8..41ba57f0 100644
--- a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
+++ b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
@@ -243,15 +243,7 @@ The agent commits to the offer. Because `medimg.dua_required` was flagged as cri
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "25.00",
-              "currency": "USD",
-              "unit_cost": "0.0295",
-              "estimated_quantity": 847,
-              "unit": "records"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-medimg-offer-sig...",
diff --git a/website/src/content/docs/protocol/walkthrough-v1.mdx b/website/src/content/docs/protocol/walkthrough-v1.mdx
index cd21af5b..0e2a50e6 100644
--- a/website/src/content/docs/protocol/walkthrough-v1.mdx
+++ b/website/src/content/docs/protocol/walkthrough-v1.mdx
@@ -210,15 +210,7 @@ The agent commits to the offer by sending the full signed `offer` back, reflecte
         },
         "terms": [
           {
-            "semantics": "TERM_SEMANTICS_ENUMERATED",
-            "pricing": {
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.05",
-              "currency": "USD",
-              "unit_cost": "0.0000156",
-              "estimated_quantity": 3200,
-              "unit": "accesses"
-            }
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ],
         "signature": "base64-ed25519-offer-sig...",

From 68937467248a50e09334f4f4e178cd8c5b6761e1 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 16:00:10 -0400
Subject: [PATCH 073/164] Carry an offer's price once in the Go SDK

helpers.IsMeteredOffer reads Offer.pricing only: an offer is metered
when its pricing is PER_UNIT, and a term is never consulted, because
the term an offer sells carries no pricing.

helpers gains ErrOfferTermPriced and CheckOfferTermsUnpriced, the
offer.terms.pricing_unset rule as a standalone check for a signer or a
verifier that runs without wire validation. SignOffer refuses an offer
whose term carries pricing, since the Exchange moves a term's price
into Offer.pricing when it builds the offer. core.Verifier rejects
such an offer after the signature and expiry checks, before the
metered estimate check, with ErrOfferTermPriced as the reason.

The offer-verify vectors gain the one-price cases: a term repeating
the offer's own price, which is rejected, and an unpriced term under a
FLAT price, which verifies. The metered offer with an estimate now
sells an unpriced term, and the term-only estimate case is rejected
for its priced term. The emitter signs a priced-term vector over its
canonical bytes directly, so the signature is genuine and only the term
check rejects it. A client test pins the Verifier's rejection through
Discover.
---
 sdk/go/README.md                              |  5 ++
 sdk/go/connect/client_verify_test.go          | 58 +++++++++++++++++
 sdk/go/core/verifier.go                       | 16 +++--
 sdk/go/helpers/gen_vectors_test.go            | 46 +++++++++++--
 sdk/go/helpers/offer.go                       | 31 ++++++++-
 sdk/go/helpers/settlement.go                  | 17 ++---
 sdk/go/helpers/settlement_test.go             | 49 +++++++++++---
 .../testdata/offer-verify-vectors.json        | 64 ++++++++++++++++---
 8 files changed, 247 insertions(+), 39 deletions(-)

diff --git a/sdk/go/README.md b/sdk/go/README.md
index cbbb8204..aa5aec98 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -94,6 +94,11 @@ s, _ := helpers.SettleMeteredUsage(offer.GetPricing(), consumed) // s.ChargedAmo
 err := helpers.CheckMeteredEstimate(offer) // ErrMeteredEstimateMissing; core.Verifier rejects such an offer
 ```
 
+**One price per offer** — an offer's price is `Offer.pricing`, and the term it sells
+carries none. `helpers.CheckOfferTermsUnpriced(offer)` returns `ErrOfferTermPriced` for a
+priced term; `helpers.SignOffer` refuses to sign such an offer, and `core.Verifier`
+rejects one.
+
 **Validation** — wraps protovalidate (the oracle), including cross-field CEL:
 
 ```go
diff --git a/sdk/go/connect/client_verify_test.go b/sdk/go/connect/client_verify_test.go
index 03e6b091..4541ab9b 100644
--- a/sdk/go/connect/client_verify_test.go
+++ b/sdk/go/connect/client_verify_test.go
@@ -18,6 +18,7 @@ package connect_test
 import (
 	"context"
 	"crypto/ed25519"
+	"encoding/hex"
 	"errors"
 	"net/http"
 	"net/http/httptest"
@@ -378,6 +379,63 @@ func TestDiscover_RejectsMeteredOfferWithoutEstimate(t *testing.T) {
 	}
 }
 
+// TestDiscover_RejectsOfferWhoseTermCarriesPricing pins that an offer whose term
+// carries a second copy of the price lands in Rejected even though the Exchange
+// genuinely signed it and it has not expired: an offer states its price once, in
+// Offer.pricing. The same offer with an unpriced term verifies. SignOffer refuses
+// a priced term, so that offer is signed over its canonical bytes directly.
+// Validation is off, the client default, so the Verifier is the only gate.
+func TestDiscover_RejectsOfferWhoseTermCarriesPricing(t *testing.T) {
+	t.Parallel()
+	sig := newSigningFixture(t)
+	exPub, exPriv, err := ed25519.GenerateKey(nil)
+	if err != nil {
+		t.Fatalf("generate exchange offer key: %v", err)
+	}
+	unpriced := sampleOffer("offer-unpriced-term")
+	unpriced.Terms = []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}}
+	sigHex, err := helpers.SignOffer(exPriv, unpriced)
+	if err != nil {
+		t.Fatalf("sign unpriced: %v", err)
+	}
+	unpriced.Signature, unpriced.SignatureAlgorithm = sigHex, helpers.OfferSignatureAlgorithm
+
+	priced := sampleOffer("offer-priced-term")
+	priced.Terms = []*forav1.LicenseTerm{{
+		Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
+		Pricing:   proto.Clone(priced.Pricing).(*forav1.Pricing),
+	}}
+	if _, err := helpers.SignOffer(exPriv, priced); !errors.Is(err, helpers.ErrOfferTermPriced) {
+		t.Fatalf("SignOffer of a priced term: want ErrOfferTermPriced, got %v", err)
+	}
+	payload, err := helpers.CanonicalOfferBytes(priced)
+	if err != nil {
+		t.Fatalf("canonical priced: %v", err)
+	}
+	priced.Signature = hex.EncodeToString(ed25519.Sign(exPriv, payload))
+	priced.SignatureAlgorithm = helpers.OfferSignatureAlgorithm
+
+	srv := newVerifyingServer(t, sig, newMemReplayStore(), []*forav1.Offer{unpriced, priced})
+	client := foraconnect.NewClient(srv.URL,
+		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithOfferKey(exPub),
+	)
+
+	res, err := client.Discover(context.Background(), &forav1.ResourceQuery{})
+	if err != nil {
+		t.Fatalf("Discover: %v", err)
+	}
+	if len(res.Verified()) != 1 || res.Verified()[0].Offer().GetOfferId() != "offer-unpriced-term" {
+		t.Fatalf("want only offer-unpriced-term verified, got %d verified", len(res.Verified()))
+	}
+	if len(res.Rejected()) != 1 || res.Rejected()[0].Offer.GetOfferId() != "offer-priced-term" {
+		t.Fatalf("want only offer-priced-term rejected, got %d rejected", len(res.Rejected()))
+	}
+	if !errors.Is(res.Rejected()[0].Reason, helpers.ErrOfferTermPriced) {
+		t.Fatalf("rejected reason: want ErrOfferTermPriced, got %v", res.Rejected()[0].Reason)
+	}
+}
+
 // TestExecute_AcceptsVerifiedOffer pins that Execute succeeds on a genuinely
 // verified offer produced by Discover — the positive half of the compile guard,
 // exercised at runtime through the full client→server→origin round-trip.
diff --git a/sdk/go/core/verifier.go b/sdk/go/core/verifier.go
index 6c7e4c45..37bb63ae 100644
--- a/sdk/go/core/verifier.go
+++ b/sdk/go/core/verifier.go
@@ -96,8 +96,9 @@ func NewVerifier(mode Mode, resolver helpers.KeyResolver, now func() time.Time)
 // Sort splits offers into verified and rejected per the configured mode. Under Off
 // every offer is surfaced verified with no check. Under Strict each offer is
 // verified against its resolved exchange key and its expiry — a failure of either
-// lands it in Rejected with the reason. A metered offer that carries no positive
-// estimate is rejected too (helpers.ErrMeteredEstimateMissing).
+// lands it in Rejected with the reason. An offer whose term carries pricing is
+// rejected too (helpers.ErrOfferTermPriced), and so is a metered offer that
+// carries no positive estimate (helpers.ErrMeteredEstimateMissing).
 func (v Verifier) Sort(ctx context.Context, offers []*forav1.Offer) Result {
 	res := Result{}
 	for _, off := range offers {
@@ -115,8 +116,9 @@ func (v Verifier) Sort(ctx context.Context, offers []*forav1.Offer) Result {
 }
 
 // check verifies a single offer: resolve the exchange offer-signing key, verify the
-// signature, enforce the not-in-the-past expiry, and require a metered offer to
-// carry its estimate. Any step failing rejects the offer (fail-closed) — including
+// signature, enforce the not-in-the-past expiry, require the offer's term to carry
+// no pricing, and require a metered offer to carry its estimate. Any step failing
+// rejects the offer (fail-closed) — including
 // an unresolvable key, so an offer the client cannot key is rejected under Strict
 // rather than trusted.
 func (v Verifier) check(ctx context.Context, off *forav1.Offer) error {
@@ -130,6 +132,12 @@ func (v Verifier) check(ctx context.Context, off *forav1.Offer) error {
 	if expired(off, v.now()) {
 		return ErrOfferExpired
 	}
+	// An offer states its price once, in Offer.pricing; a term carrying a second
+	// copy could disagree with it (fora.proto Offer). Wire validation refuses it
+	// too, but a Verifier also runs with validation off.
+	if err := helpers.CheckOfferTermsUnpriced(off); err != nil {
+		return err
+	}
 	// A metered offer without an estimate has no amount to accept and no ceiling
 	// for its usage report to settle against (fora.proto Pricing). Wire
 	// validation refuses it too, but a Verifier also runs with validation off.
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index 3d53f574..c077a0f7 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -422,6 +422,16 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 	emit := func(name string, offer *forav1.Offer, tamper func(*forav1.Offer)) offerVerifyVector {
 		offer.Exchange = exchange
 		sig, err := SignOffer(exPriv, offer)
+		if errors.Is(err, ErrOfferTermPriced) {
+			// SignOffer refuses a priced term, so a vector that carries one is
+			// signed over the same canonical bytes directly: the signature is
+			// genuine, and the verdict must come from the term check alone.
+			payload, cerr := CanonicalOfferBytes(offer)
+			if cerr != nil {
+				t.Fatalf("%s: canonical offer: %v", name, cerr)
+			}
+			sig, err = hex.EncodeToString(ed25519.Sign(exPriv, payload)), nil
+		}
 		if err != nil {
 			t.Fatalf("%s: sign offer: %v", name, err)
 		}
@@ -434,7 +444,9 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 		// Freshness is fail-closed and mirrors core.Verifier.expired: a missing
 		// expires_at is expired (not eternal); a present bound is inclusive at now.
 		expired := offer.GetExpiresAt() == nil || offer.GetExpiresAt().AsTime().Before(time.Unix(nowUnix, 0))
-		// A metered offer must carry its estimate (core.Verifier's last check).
+		// The offer's term carries no pricing, and a metered offer carries its
+		// estimate (core.Verifier's last two checks).
+		termErr := CheckOfferTermsUnpriced(offer)
 		estimateErr := CheckMeteredEstimate(offer)
 		return offerVerifyVector{
 			Name:              name,
@@ -442,7 +454,7 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 			ExchangePubB64URL: pubB64URL,
 			OfferJSON:         offerCanonicalProtoJSON(t, offer),
 			NowUnix:           nowUnix,
-			ExpectedVerified:  verifyErr == nil && !expired && estimateErr == nil,
+			ExpectedVerified:  verifyErr == nil && !expired && termErr == nil && estimateErr == nil,
 			ExchangeSeedHex:   hex.EncodeToString(exSeed),
 		}
 	}
@@ -528,7 +540,7 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 			OfferId:   "offer-metered",
 			ExpiresAt: future,
 			Pricing:   meteredVectorPricing(proto.Int32(2500), proto.Int32(1500)),
-			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredVectorPricing(nil, proto.Int32(1500))}},
+			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
 		}, nil),
 		// metered_missing_estimate: no estimate at all → rejected.
 		emit("metered_missing_estimate", &forav1.Offer{
@@ -543,13 +555,37 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 			Pricing:   meteredVectorPricing(proto.Int32(0), nil),
 		}, nil),
 		// metered_term_estimate_only: the term is PER_UNIT and carries an estimate,
-		// the offer's own pricing does not. Settlement reads the offer's pricing, so
-		// the estimate on the term does not count → rejected.
+		// the offer's own pricing does not. An offer's term carries no pricing, so
+		// the priced term alone rejects it, whatever its estimate → rejected.
 		emit("metered_term_estimate_only", &forav1.Offer{
 			OfferId:   "offer-metered-term-only",
 			ExpiresAt: future,
 			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredVectorPricing(proto.Int32(2500), nil)}},
 		}, nil),
+
+		// --- One price dimension: an offer states its price once, in
+		// Offer.pricing, and its term carries none. Every port rejects a priced
+		// term even when its signature and expiry are good. ---
+
+		// term_priced_same_as_offer: the term repeats the offer's own FLAT price
+		// exactly → still rejected; agreement does not make a second copy valid.
+		emit("term_priced_same_as_offer", &forav1.Offer{
+			OfferId:   "offer-term-priced",
+			ExpiresAt: future,
+			Pricing:   &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"},
+			Terms: []*forav1.LicenseTerm{{
+				Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
+				Pricing:   &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"},
+			}},
+		}, nil),
+		// term_unpriced_flat: the conformant shape, a FLAT offer selling a term
+		// with no pricing → verified.
+		emit("term_unpriced_flat", &forav1.Offer{
+			OfferId:   "offer-term-unpriced",
+			ExpiresAt: future,
+			Pricing:   &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"},
+			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
+		}, nil),
 		// flat_without_estimate: a non-metered offer needs no estimate → verified.
 		emit("flat_without_estimate", &forav1.Offer{
 			OfferId:   "offer-flat",
diff --git a/sdk/go/helpers/offer.go b/sdk/go/helpers/offer.go
index 8b4ebd1c..6fe1e202 100644
--- a/sdk/go/helpers/offer.go
+++ b/sdk/go/helpers/offer.go
@@ -25,12 +25,41 @@ const OfferSignatureAlgorithm = "EdDSA"
 // tampered payload — price, terms, expiry, …).
 var ErrOfferSignatureInvalid = errors.New("helpers: offer signature invalid")
 
+// ErrOfferTermPriced signals an offer whose term carries pricing. An offer
+// states its price once, in Offer.pricing, and the term it sells carries none
+// (fora.proto Offer, the offer.terms.pricing_unset rule): a second copy could
+// disagree with the first, and nothing would say which one is charged.
+var ErrOfferTermPriced = errors.New("helpers: an offer's term carries pricing; the offer's price is Offer.pricing")
+
+// CheckOfferTermsUnpriced returns ErrOfferTermPriced when any term of offer
+// carries pricing, and nil otherwise. It is the offer.terms.pricing_unset rule
+// as a standalone check, for a signer or a verifier that runs without wire
+// validation.
+func CheckOfferTermsUnpriced(offer *forav1.Offer) error {
+	if offer == nil {
+		return errors.New("helpers: offer is nil")
+	}
+	for i, t := range offer.GetTerms() {
+		if t.GetPricing() != nil {
+			return fmt.Errorf("%w (terms[%d])", ErrOfferTermPriced, i)
+		}
+	}
+	return nil
+}
+
 // SignOffer signs the canonical serialization of offer with priv and returns
-// the hex-encoded Ed25519 signature for the Offer.signature field.
+// the hex-encoded Ed25519 signature for the Offer.signature field. It refuses
+// an offer whose term carries pricing (ErrOfferTermPriced): the Exchange moves
+// a term's price into Offer.pricing when it builds the offer, so a priced term
+// is an offer built wrong, and a signature over it would only be refused by
+// every verifier.
 func SignOffer(priv ed25519.PrivateKey, offer *forav1.Offer) (string, error) {
 	if len(priv) != ed25519.PrivateKeySize {
 		return "", fmt.Errorf("helpers: ed25519 private key must be %d bytes, got %d", ed25519.PrivateKeySize, len(priv))
 	}
+	if err := CheckOfferTermsUnpriced(offer); err != nil {
+		return "", err
+	}
 	payload, err := CanonicalOfferBytes(offer)
 	if err != nil {
 		return "", err
diff --git a/sdk/go/helpers/settlement.go b/sdk/go/helpers/settlement.go
index 899b2a8c..ed416cef 100644
--- a/sdk/go/helpers/settlement.go
+++ b/sdk/go/helpers/settlement.go
@@ -63,19 +63,12 @@ type MeteredSettlement struct {
 	HeldAmount string
 }
 
-// IsMeteredOffer reports whether offer is metered: its pricing or its term's
-// pricing is PER_UNIT. The term counts because it is the authoritative copy of
-// the price (fora.proto Offer, the offer.metered.requires_estimate rule).
+// IsMeteredOffer reports whether offer is metered: its pricing is PER_UNIT.
+// Offer.pricing is the offer's one price — the term it sells carries none
+// (fora.proto Offer, the offer.metered.requires_estimate and
+// offer.terms.pricing_unset rules) — so a term is never consulted.
 func IsMeteredOffer(offer *forav1.Offer) bool {
-	if offer.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT {
-		return true
-	}
-	for _, t := range offer.GetTerms() {
-		if t.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT {
-			return true
-		}
-	}
-	return false
+	return offer.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT
 }
 
 // CheckMeteredEstimate returns ErrMeteredEstimateMissing when offer is metered
diff --git a/sdk/go/helpers/settlement_test.go b/sdk/go/helpers/settlement_test.go
index 50602ecc..b4e2cebe 100644
--- a/sdk/go/helpers/settlement_test.go
+++ b/sdk/go/helpers/settlement_test.go
@@ -12,28 +12,32 @@ import (
 // every SDK replays. These tests cover what the vectors do not: which offers are
 // metered, the estimate check a verifier runs, and the tolerance default.
 
-func meteredTestOffer(offerModel, termModel forav1.PricingModel, estimate *int32) *forav1.Offer {
+func meteredTestOffer(offerModel forav1.PricingModel, estimate *int32) *forav1.Offer {
 	return &forav1.Offer{
 		Pricing: &forav1.Pricing{Model: offerModel, EstimatedQuantity: estimate},
-		Terms:   []*forav1.LicenseTerm{{Pricing: &forav1.Pricing{Model: termModel}}},
+		Terms:   []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
 	}
 }
 
 func TestCheckMeteredEstimate(t *testing.T) {
 	perUnit, flat := forav1.PricingModel_PRICING_MODEL_PER_UNIT, forav1.PricingModel_PRICING_MODEL_FLAT
+	// A priced term no longer makes an offer metered: Offer.pricing is the
+	// offer's one price, and a term carrying pricing is refused on its own
+	// (CheckOfferTermsUnpriced), not read.
+	pricedTerm := meteredTestOffer(flat, nil)
+	pricedTerm.Terms[0].Pricing = &forav1.Pricing{Model: perUnit, EstimatedQuantity: proto.Int32(10)}
 	cases := []struct {
 		name    string
 		offer   *forav1.Offer
 		metered bool
 		wantErr bool
 	}{
-		{"per_unit_with_estimate", meteredTestOffer(perUnit, perUnit, proto.Int32(1)), true, false},
-		{"per_unit_without_estimate", meteredTestOffer(perUnit, perUnit, nil), true, true},
-		{"per_unit_zero_estimate", meteredTestOffer(perUnit, perUnit, proto.Int32(0)), true, true},
-		{"per_unit_negative_estimate", meteredTestOffer(perUnit, perUnit, proto.Int32(-3)), true, true},
-		{"per_unit_term_under_flat_pricing", meteredTestOffer(flat, perUnit, nil), true, true},
-		{"per_unit_term_estimate_on_flat_pricing", meteredTestOffer(flat, perUnit, proto.Int32(10)), true, false},
-		{"flat_without_estimate", meteredTestOffer(flat, flat, nil), false, false},
+		{"per_unit_with_estimate", meteredTestOffer(perUnit, proto.Int32(1)), true, false},
+		{"per_unit_without_estimate", meteredTestOffer(perUnit, nil), true, true},
+		{"per_unit_zero_estimate", meteredTestOffer(perUnit, proto.Int32(0)), true, true},
+		{"per_unit_negative_estimate", meteredTestOffer(perUnit, proto.Int32(-3)), true, true},
+		{"per_unit_term_under_flat_pricing_is_not_metered", pricedTerm, false, false},
+		{"flat_without_estimate", meteredTestOffer(flat, nil), false, false},
 		{"no_pricing_at_all", &forav1.Offer{}, false, false},
 	}
 	for _, c := range cases {
@@ -55,6 +59,33 @@ func TestCheckMeteredEstimate(t *testing.T) {
 	}
 }
 
+func TestCheckOfferTermsUnpriced(t *testing.T) {
+	unpriced := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
+	if err := CheckOfferTermsUnpriced(unpriced); err != nil {
+		t.Fatalf("unpriced term: got %v, want nil", err)
+	}
+	if err := CheckOfferTermsUnpriced(&forav1.Offer{}); err != nil {
+		t.Fatalf("no terms: got %v, want nil", err)
+	}
+	priced := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
+	priced.Terms[0].Pricing = proto.Clone(priced.Pricing).(*forav1.Pricing)
+	if err := CheckOfferTermsUnpriced(priced); !errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("term repeating the offer price: got %v, want ErrOfferTermPriced", err)
+	}
+	// An empty Pricing is still pricing present on the term.
+	empty := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
+	empty.Terms[0].Pricing = &forav1.Pricing{}
+	if err := CheckOfferTermsUnpriced(empty); !errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("empty term pricing: got %v, want ErrOfferTermPriced", err)
+	}
+	if err := CheckOfferTermsUnpriced(nil); err == nil || errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("nil offer: got %v, want a refusal that is not ErrOfferTermPriced", err)
+	}
+	if _, err := SignOffer(make([]byte, 64), priced); !errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("SignOffer of a priced term: got %v, want ErrOfferTermPriced", err)
+	}
+}
+
 func TestEstimateToleranceBps(t *testing.T) {
 	if got := EstimateToleranceBps(nil); got != DefaultEstimateToleranceBps {
 		t.Fatalf("nil pricing: got %d, want the default %d", got, DefaultEstimateToleranceBps)
diff --git a/sdk/go/helpers/testdata/offer-verify-vectors.json b/sdk/go/helpers/testdata/offer-verify-vectors.json
index 22cda719..470cde97 100644
--- a/sdk/go/helpers/testdata/offer-verify-vectors.json
+++ b/sdk/go/helpers/testdata/offer-verify-vectors.json
@@ -174,17 +174,10 @@
           "rate": "0.00002",
           "unit": "tokens"
         },
-        "signature": "cb5cb34c81e8d3ae99bcfebe5d4c5b4d14077eff98eab4164f5b5572c558d1dd12680e2d616b9a73f3184507414221dede1502ab3b3fac1e8a7b44abdda60c00",
+        "signature": "d81878e5b8b422a0cfe4e0814a2e5c80bf86511a8d572673091bff16caa36aa3f0c4887e0a55a23c30e7a1c2a12d7d496c5171b5bb28116dbc3447c44201ab02",
         "signature_algorithm": "EdDSA",
         "terms": [
           {
-            "pricing": {
-              "currency": "USD",
-              "estimate_tolerance_bps": 1500,
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.00002",
-              "unit": "tokens"
-            },
             "semantics": "TERM_SEMANTICS_ENUMERATED"
           }
         ]
@@ -263,6 +256,61 @@
       "expected_verified": false,
       "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
     },
+    {
+      "name": "term_priced_same_as_offer",
+      "exchange": "exchange.example.com",
+      "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
+      "offer_json": {
+        "exchange": "exchange.example.com",
+        "expires_at": "2023-11-14T22:28:20Z",
+        "offer_id": "offer-term-priced",
+        "pricing": {
+          "currency": "USD",
+          "model": "PRICING_MODEL_FLAT",
+          "rate": "1.00"
+        },
+        "signature": "c297b24fb5b759fd278b003fb517ecc3da247c69cf134186c6c9f4853aaf5230f28d7e5f783db131db13fa9a7a7b50bd16b9610df00fb198281225875c112908",
+        "signature_algorithm": "EdDSA",
+        "terms": [
+          {
+            "pricing": {
+              "currency": "USD",
+              "model": "PRICING_MODEL_FLAT",
+              "rate": "1.00"
+            },
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "now_unix": 1700000100,
+      "expected_verified": false,
+      "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
+    },
+    {
+      "name": "term_unpriced_flat",
+      "exchange": "exchange.example.com",
+      "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
+      "offer_json": {
+        "exchange": "exchange.example.com",
+        "expires_at": "2023-11-14T22:28:20Z",
+        "offer_id": "offer-term-unpriced",
+        "pricing": {
+          "currency": "USD",
+          "model": "PRICING_MODEL_FLAT",
+          "rate": "1.00"
+        },
+        "signature": "88f685195ba487969db3026e95a9089ec24290e97c52c82acc6fbe782162590b83e2f183694d87a0ada512d6b3cf062179e19d566445d70185619d7f36bd4204",
+        "signature_algorithm": "EdDSA",
+        "terms": [
+          {
+            "semantics": "TERM_SEMANTICS_ENUMERATED"
+          }
+        ]
+      },
+      "now_unix": 1700000100,
+      "expected_verified": true,
+      "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
+    },
     {
       "name": "flat_without_estimate",
       "exchange": "exchange.example.com",

From 0a36fc30c944cefe195c6da03bd1cf02700be73c Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 16:06:00 -0400
Subject: [PATCH 074/164] Carry an offer's price once in the Python SDK

is_metered_offer reads the offer's pricing only: a term is never
consulted, because the term an offer sells carries no pricing.

fora_sdk gains check_offer_terms_unpriced, the offer.terms.pricing_unset
rule as a standalone check, which raises ValueError for a term carrying
pricing; a present pricing key counts whatever its value.
sign_offer_jcs refuses such an offer, and the Verifier rejects one
after the signature and expiry checks, before the metered estimate
check.

The cross-field layer gains both rules: the Offer predicates share
check_offer_terms_unpriced and check_metered_estimate with the
Verifier, and ResourceEntry gains resource_entry.terms.pricing_required
with a composed ResourceEntryCrossField. validate_resource_entry checks
the entry itself as a cross-field site, so a catalog term without
pricing is reported as that rule rather than a field error.

The cross-field suite expects the ResourceEntry mutant and gains valid
instances for it, its metered Offer instance sells an unpriced term,
the metered suite pins that a priced term no longer makes an offer
metered and covers the new check, and the sign suite pins the refusal
on every priced-term vector. The wire-canonicalization fixtures drop
their term's pricing.
---
 sdk/python/README.md                          |  4 ++
 sdk/python/fora_sdk/__init__.py               |  2 +
 sdk/python/fora_sdk/core.py                   | 14 ++++++-
 sdk/python/fora_sdk/crossfield.py             | 41 ++++++++++++++++---
 sdk/python/fora_sdk/licenseterm.py            |  5 ++-
 sdk/python/fora_sdk/money.py                  | 37 ++++++++++++-----
 .../tests/fixtures/offer_canonical_go.json    |  2 +-
 .../tests/fixtures/offer_wire_camel.json      |  2 +-
 sdk/python/tests/test_crossfield_parity.py    | 26 +++++++++---
 .../tests/test_metered_settlement_parity.py   | 31 +++++++++++++-
 sdk/python/tests/test_offer_sign_parity.py    | 23 +++++++++++
 11 files changed, 160 insertions(+), 27 deletions(-)

diff --git a/sdk/python/README.md b/sdk/python/README.md
index 2c81ae89..75a7972f 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -241,6 +241,10 @@ consumed)` returns a `MeteredSettlement` with the accepted, ceiling, charged and
 amounts, in exact decimal. `check_metered_estimate(offer)` raises on a metered offer
 without an estimate, and the `Verifier` rejects such an offer.
 
+**One price per offer.** An offer's price is `offer["pricing"]`, and the term it sells
+carries none. `check_offer_terms_unpriced(offer)` raises `ValueError` on a priced term;
+`sign_offer_jcs` refuses to sign such an offer, and the `Verifier` rejects one.
+
 **Registration schema.** An Exchange may publish a JSON Schema for the
 `registration_data` it expects. Both ends validate against it, so the rules live in one
 place: 2020-12 only, same-document `$ref` only, size, depth and evaluation caps, and a
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 17b0cf5f..e2566ab0 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -134,6 +134,7 @@
     MeteredSettlement,
     canonicalize_money,
     check_metered_estimate,
+    check_offer_terms_unpriced,
     estimate_tolerance_bps,
     format_money,
     is_metered_offer,
@@ -296,6 +297,7 @@
     "canonical_restriction_token",
     "canonicalize_money",
     "check_metered_estimate",
+    "check_offer_terms_unpriced",
     "catalog_rejection_detail",
     "check_audience",
     "check_registration_data",
diff --git a/sdk/python/fora_sdk/core.py b/sdk/python/fora_sdk/core.py
index bd6514ea..a2261d67 100644
--- a/sdk/python/fora_sdk/core.py
+++ b/sdk/python/fora_sdk/core.py
@@ -47,7 +47,7 @@
     Ed25519PublicKey,
 )
 
-from .money import check_metered_estimate
+from .money import check_metered_estimate, check_offer_terms_unpriced
 
 # OFFER_SIGNATURE_ALGORITHM / ACCEPTANCE_SIGNATURE_ALGORITHM — the JOSE/JWA algorithm
 # identifier advertised
@@ -258,7 +258,13 @@ def sign_offer_jcs(*, seed: bytes, offer: dict[str, Any]) -> tuple[str, str]:
     signature is byte-identical to the Go oracle (``helpers.SignOffer``). The offer
     must already be canonical proto-JSON (snake_case, enums-as-names,
     omit-unpopulated), as the verify face requires.
+
+    Raises ``ValueError`` for an offer whose term carries pricing: an offer states its
+    price once, in ``Offer.pricing``, so a priced term is an offer built wrong and a
+    signature over it would only be refused by every verifier (Go
+    ``helpers.ErrOfferTermPriced``).
     """
+    check_offer_terms_unpriced(offer)
     payload = canonical_offer_payload(offer)
     priv = Ed25519PrivateKey.from_private_bytes(seed)
     return priv.sign(payload).hex(), OFFER_SIGNATURE_ALGORITHM
@@ -364,6 +370,12 @@ def _check(self, offer: Any) -> str | None:
 
         if self._expired(offer):
             return "offer expires_at is in the past"
+        # An offer states its price once, in Offer.pricing; a term carrying a second
+        # copy could disagree with it (fora.proto Offer).
+        try:
+            check_offer_terms_unpriced(offer)
+        except ValueError as exc:
+            return str(exc)
         # A metered offer without an estimate has no amount to accept and no ceiling
         # for its usage report to settle against (fora.proto Pricing).
         try:
diff --git a/sdk/python/fora_sdk/crossfield.py b/sdk/python/fora_sdk/crossfield.py
index 0de45810..607d3a35 100644
--- a/sdk/python/fora_sdk/crossfield.py
+++ b/sdk/python/fora_sdk/crossfield.py
@@ -29,11 +29,12 @@
     Offer,
     Pricing,
     RegistrationFailure,
+    ResourceEntry,
     Restriction,
     WellKnownManifest,
 )
 
-from .money import check_metered_estimate
+from .money import check_metered_estimate, check_offer_terms_unpriced
 
 if TYPE_CHECKING:
     from collections.abc import Callable
@@ -143,17 +144,43 @@ def _pricing_rules(o: dict[str, Any]) -> list[str]:
 
 
 def _offer_rules(o: dict[str, Any]) -> list[str]:
-    """Offer.metered.requires_estimate.
+    """Offer.terms.pricing_unset + Offer.metered.requires_estimate.
 
-    ``!(metered) || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity
-    > 0)``, where an offer is metered when its pricing or a term's pricing is PER_UNIT. The
-    predicate is the one the agent-side Verifier applies, so this face and that one share
+    - terms.pricing_unset: ``this.terms.all(t, !has(t.pricing))`` — the offer's price
+      is ``Offer.pricing``, stated once.
+    - metered.requires_estimate: ``this.pricing.model != PER_UNIT ||
+      (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)``.
+
+    Both predicates are the ones the agent-side Verifier applies, so this face and that
+    one share :func:`fora_sdk.money.check_offer_terms_unpriced` and
     :func:`fora_sdk.money.check_metered_estimate` rather than keeping two copies.
     """
+    out: list[str] = []
+    try:
+        check_offer_terms_unpriced(o)
+    except ValueError:
+        out.append("offer.terms.pricing_unset")
     try:
         check_metered_estimate(o)
     except ValueError:
-        return ["offer.metered.requires_estimate"]
+        out.append("offer.metered.requires_estimate")
+    return out
+
+
+def _resource_entry_rules(o: dict[str, Any]) -> list[str]:
+    """ResourceEntry.terms.pricing_required: ``this.terms.all(t, has(t.pricing))``.
+
+    A catalog term carries its price; the rule is the entry's because the term an
+    offer carries holds none. A present ``pricing`` counts whatever its value, as
+    ``has()`` does.
+    """
+    terms = _field(o, "terms")
+    if not isinstance(terms, list):
+        return []
+    for t in terms:
+        term = _as_obj(t)
+        if term is None or _field(term, "pricing") is None:
+            return ["resource_entry.terms.pricing_required"]
     return []
 
 
@@ -256,6 +283,7 @@ def _registration_failure_rules(o: dict[str, Any]) -> list[str]:
     "Pricing": _pricing_rules,
     "Restriction": _restriction_rules,
     "RegistrationFailure": _registration_failure_rules,
+    "ResourceEntry": _resource_entry_rules,
     "WellKnownManifest": _well_known_manifest_rules,
 }
 
@@ -316,4 +344,5 @@ def _check(self: Any) -> Any:
 PricingCrossField = _make_cross_field(Pricing, "Pricing")
 RestrictionCrossField = _make_cross_field(Restriction, "Restriction")
 RegistrationFailureCrossField = _make_cross_field(RegistrationFailure, "RegistrationFailure")
+ResourceEntryCrossField = _make_cross_field(ResourceEntry, "ResourceEntry")
 WellKnownManifestCrossField = _make_cross_field(WellKnownManifest, "WellKnownManifest")
diff --git a/sdk/python/fora_sdk/licenseterm.py b/sdk/python/fora_sdk/licenseterm.py
index 3b3e087f..7439cc5b 100644
--- a/sdk/python/fora_sdk/licenseterm.py
+++ b/sdk/python/fora_sdk/licenseterm.py
@@ -367,7 +367,10 @@ def _cross_field_sites(entry: dict[str, Any]) -> list[tuple[str, str, Any]]:
     # Every message instance reachable from an entry that carries a cross-field
     # rule, with its entry-relative path. The generated model is field-level and
     # the composed cross-field models attach per message, so the walk is explicit.
-    sites: list[tuple[str, str, Any]] = []
+    # The entry itself carries one: every catalog term carries its pricing
+    # (resource_entry.terms.pricing_required). It is the entry's rule, not the
+    # term's, because the term an offer carries holds no price.
+    sites: list[tuple[str, str, Any]] = [("", "ResourceEntry", entry)]
     for i, t in enumerate(_as_list(entry.get("terms"))):
         term = _as_obj(t)
         if term is None:
diff --git a/sdk/python/fora_sdk/money.py b/sdk/python/fora_sdk/money.py
index 6ea295f0..4bf6a185 100644
--- a/sdk/python/fora_sdk/money.py
+++ b/sdk/python/fora_sdk/money.py
@@ -148,18 +148,35 @@ def _model(pricing: Any) -> str:
 
 
 def is_metered_offer(offer: Mapping[str, Any]) -> bool:
-    """Whether ``offer`` (canonical proto-JSON) is metered: its pricing or its term's
-    pricing is PER_UNIT. The term counts because it is the authoritative copy of the
-    price (fora.proto Offer, the offer.metered.requires_estimate rule)."""
-    if _model(offer.get("pricing")) == _PRICING_MODEL_PER_UNIT:
-        return True
+    """Whether ``offer`` (canonical proto-JSON) is metered: its pricing is PER_UNIT.
+
+    ``Offer.pricing`` is the offer's one price and the term it sells carries none
+    (fora.proto Offer, the offer.metered.requires_estimate and
+    offer.terms.pricing_unset rules), so a term is never consulted. Python peer of Go
+    ``helpers.IsMeteredOffer``."""
+    return _model(offer.get("pricing")) == _PRICING_MODEL_PER_UNIT
+
+
+def check_offer_terms_unpriced(offer: Mapping[str, Any]) -> None:
+    """Raise ``ValueError`` when any term of ``offer`` (canonical proto-JSON) carries
+    ``pricing``; return quietly otherwise.
+
+    An offer states its price once, in ``Offer.pricing``, and the term it sells carries
+    none (fora.proto Offer, the offer.terms.pricing_unset rule). This is that rule as a
+    standalone check, for a signer or a verifier that runs without wire validation. A
+    present ``pricing`` key counts whatever its value, as ``has()`` does. Python peer of
+    Go ``helpers.CheckOfferTermsUnpriced``.
+    """
+    if not isinstance(offer, Mapping):
+        msg = "money: offer is not an object"
+        raise ValueError(msg)
     terms = offer.get("terms")
     if not isinstance(terms, list):
-        return False
-    return any(
-        isinstance(t, Mapping) and _model(t.get("pricing")) == _PRICING_MODEL_PER_UNIT
-        for t in terms
-    )
+        return
+    for i, t in enumerate(terms):
+        if isinstance(t, Mapping) and t.get("pricing") is not None:
+            msg = f"money: an offer's term carries pricing; the offer's price is Offer.pricing (terms[{i}])"
+            raise ValueError(msg)
 
 
 def check_metered_estimate(offer: Mapping[str, Any]) -> None:
diff --git a/sdk/python/tests/fixtures/offer_canonical_go.json b/sdk/python/tests/fixtures/offer_canonical_go.json
index 17c4a092..dc4a2a0a 100644
--- a/sdk/python/tests/fixtures/offer_canonical_go.json
+++ b/sdk/python/tests/fixtures/offer_canonical_go.json
@@ -1 +1 @@
-{"delivery_method":"DELIVERY_METHOD_INSTRUCTIONS","exchange":"exchange:8081","expires_at":"2026-07-06T09:21:47.154394422Z","identity":{"canonical_url":"http://demo.fora-protocol.org/articles/philosophers/socrates.txt","resource_mutability":"RESOURCE_MUTABILITY_STATIC"},"offer_id":"tenant-demo-philosophy:http://demo.fora-protocol.org/articles/philosophers/socrates.txt","pricing":{"currency":"EUR","model":"PRICING_MODEL_FREE","rate":"0","unit":"","unit_cost":"0"},"terms":[{"license":{"id":"stoa-ai-2026","name":"Stoa Press AI License","uri":"https://demo.fora-protocol.org/licensing/ai","uri_digest":"sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"pricing":{"currency":"EUR","model":"PRICING_MODEL_FREE","rate":"0"},"restrictions":[{"kind":"RESTRICTION_KIND_FUNCTION","permitted":["ai-input","search"],"prohibited":["ai-train"]},{"kind":"RESTRICTION_KIND_USER_TYPE","permitted":["academic"]},{"kind":"RESTRICTION_KIND_GEOGRAPHY","permitted":["EU"]}],"semantics":"TERM_SEMANTICS_ENUMERATED"}]}
+{"delivery_method":"DELIVERY_METHOD_INSTRUCTIONS","exchange":"exchange:8081","expires_at":"2026-07-06T09:21:47.154394422Z","identity":{"canonical_url":"http://demo.fora-protocol.org/articles/philosophers/socrates.txt","resource_mutability":"RESOURCE_MUTABILITY_STATIC"},"offer_id":"tenant-demo-philosophy:http://demo.fora-protocol.org/articles/philosophers/socrates.txt","pricing":{"currency":"EUR","model":"PRICING_MODEL_FREE","rate":"0","unit":"","unit_cost":"0"},"terms":[{"license":{"id":"stoa-ai-2026","name":"Stoa Press AI License","uri":"https://demo.fora-protocol.org/licensing/ai","uri_digest":"sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"restrictions":[{"kind":"RESTRICTION_KIND_FUNCTION","permitted":["ai-input","search"],"prohibited":["ai-train"]},{"kind":"RESTRICTION_KIND_USER_TYPE","permitted":["academic"]},{"kind":"RESTRICTION_KIND_GEOGRAPHY","permitted":["EU"]}],"semantics":"TERM_SEMANTICS_ENUMERATED"}]}
diff --git a/sdk/python/tests/fixtures/offer_wire_camel.json b/sdk/python/tests/fixtures/offer_wire_camel.json
index a79629ca..25da9b00 100644
--- a/sdk/python/tests/fixtures/offer_wire_camel.json
+++ b/sdk/python/tests/fixtures/offer_wire_camel.json
@@ -1 +1 @@
-{"offerId":"tenant-demo-philosophy:http://demo.fora-protocol.org/articles/philosophers/socrates.txt","pricing":{"model":"PRICING_MODEL_FREE","rate":"0","currency":"EUR","unitCost":"0","unit":""},"deliveryMethod":"DELIVERY_METHOD_INSTRUCTIONS","expiresAt":"2026-07-06T09:21:47.154394422Z","identity":{"canonicalUrl":"http://demo.fora-protocol.org/articles/philosophers/socrates.txt","resourceMutability":"RESOURCE_MUTABILITY_STATIC","ext":null,"extCritical":[]},"exchange":"exchange:8081","iabCategories":[],"attestations":[],"subscriptionQuota":[],"previews":[],"terms":[{"license":{"uri":"https://demo.fora-protocol.org/licensing/ai","id":"stoa-ai-2026","name":"Stoa Press AI License","uriDigest":"sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"semantics":"TERM_SEMANTICS_ENUMERATED","restrictions":[{"kind":"RESTRICTION_KIND_FUNCTION","permitted":["ai-input","search"],"prohibited":["ai-train"],"advisory":false},{"kind":"RESTRICTION_KIND_USER_TYPE","permitted":["academic"],"prohibited":[],"advisory":false},{"kind":"RESTRICTION_KIND_GEOGRAPHY","permitted":["EU"],"prohibited":[],"advisory":false}],"quotas":[],"obligations":[],"pricing":{"model":"PRICING_MODEL_FREE","rate":"0","currency":"EUR"},"scopes":[]}],"ext":null,"extCritical":[]}
+{"offerId":"tenant-demo-philosophy:http://demo.fora-protocol.org/articles/philosophers/socrates.txt","pricing":{"model":"PRICING_MODEL_FREE","rate":"0","currency":"EUR","unitCost":"0","unit":""},"deliveryMethod":"DELIVERY_METHOD_INSTRUCTIONS","expiresAt":"2026-07-06T09:21:47.154394422Z","identity":{"canonicalUrl":"http://demo.fora-protocol.org/articles/philosophers/socrates.txt","resourceMutability":"RESOURCE_MUTABILITY_STATIC","ext":null,"extCritical":[]},"exchange":"exchange:8081","iabCategories":[],"attestations":[],"subscriptionQuota":[],"previews":[],"terms":[{"license":{"uri":"https://demo.fora-protocol.org/licensing/ai","id":"stoa-ai-2026","name":"Stoa Press AI License","uriDigest":"sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"semantics":"TERM_SEMANTICS_ENUMERATED","restrictions":[{"kind":"RESTRICTION_KIND_FUNCTION","permitted":["ai-input","search"],"prohibited":["ai-train"],"advisory":false},{"kind":"RESTRICTION_KIND_USER_TYPE","permitted":["academic"],"prohibited":[],"advisory":false},{"kind":"RESTRICTION_KIND_GEOGRAPHY","permitted":["EU"],"prohibited":[],"advisory":false}],"quotas":[],"obligations":[],"scopes":[]}],"ext":null,"extCritical":[]}
diff --git a/sdk/python/tests/test_crossfield_parity.py b/sdk/python/tests/test_crossfield_parity.py
index 9b1bfcad..a169fc56 100644
--- a/sdk/python/tests/test_crossfield_parity.py
+++ b/sdk/python/tests/test_crossfield_parity.py
@@ -49,6 +49,7 @@
     "Offer",
     "Pricing",
     "RegistrationFailure",
+    "ResourceEntry",
     "Restriction",
     "WellKnownManifest",
 }
@@ -137,7 +138,8 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
     },
     {
         # Offer.metered.requires_estimate: a metered offer with a positive estimate on
-        # its own pricing satisfies it, even when the pushed term carries none.
+        # its own pricing satisfies it. Offer.terms.pricing_unset: its term carries no
+        # pricing, because the offer's price is Offer.pricing.
         "name": "Offer metered with estimate",
         "message": "Offer",
         "json": {
@@ -149,18 +151,30 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
                 "unit": "tokens",
                 "estimated_quantity": 2500,
             },
+            "terms": [{"semantics": "TERM_SEMANTICS_ENUMERATED"}],
+        },
+    },
+    {
+        # ResourceEntry.terms.pricing_required: every catalog term carries its price.
+        "name": "ResourceEntry with a priced term",
+        "message": "ResourceEntry",
+        "json": {
+            "domain": "publisher.example",
+            "path": "/article",
             "terms": [
                 {
                     "semantics": "TERM_SEMANTICS_ENUMERATED",
-                    "pricing": {
-                        "model": "PRICING_MODEL_PER_UNIT",
-                        "rate": "0.00002",
-                        "unit": "tokens",
-                    },
+                    "pricing": {"model": "PRICING_MODEL_FREE", "rate": "0"},
                 }
             ],
         },
     },
+    {
+        # An entry with no terms has no term to price.
+        "name": "ResourceEntry without terms",
+        "message": "ResourceEntry",
+        "json": {"domain": "publisher.example", "path": "/article"},
+    },
     {
         # Offer.metered.requires_estimate: a non-metered offer needs no estimate.
         "name": "Offer flat without estimate",
diff --git a/sdk/python/tests/test_metered_settlement_parity.py b/sdk/python/tests/test_metered_settlement_parity.py
index 574f0937..6cd1e7f8 100644
--- a/sdk/python/tests/test_metered_settlement_parity.py
+++ b/sdk/python/tests/test_metered_settlement_parity.py
@@ -19,6 +19,7 @@
 
 from conftest import GO_TESTDATA, load_json
 from fora_sdk import (
+    check_offer_terms_unpriced,
     DEFAULT_ESTIMATE_TOLERANCE_BPS,
     check_metered_estimate,
     estimate_tolerance_bps,
@@ -102,7 +103,9 @@ def test_consumed_must_be_an_integer() -> None:
         ({"pricing": dict(_PER_UNIT)}, True, True),
         ({"pricing": {**_PER_UNIT, "estimated_quantity": 0}}, True, True),
         ({"pricing": {**_PER_UNIT, "estimated_quantity": True}}, True, True),
-        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, True, True),
+        # A priced term no longer makes an offer metered: Offer.pricing is the one
+        # price, and a priced term is refused by check_offer_terms_unpriced instead.
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, False, False),
         ({"pricing": dict(_FLAT)}, False, False),
         ({}, False, False),
     ],
@@ -114,3 +117,29 @@ def test_metered_estimate_check(offer: dict[str, object], metered: bool, refused
             check_metered_estimate(offer)
     else:
         check_metered_estimate(offer)
+
+
+@pytest.mark.parametrize(
+    ("offer", "refused"),
+    [
+        ({"pricing": dict(_FLAT), "terms": [{"semantics": "TERM_SEMANTICS_ENUMERATED"}]}, False),
+        ({"pricing": dict(_FLAT)}, False),
+        ({}, False),
+        # A term repeating the offer's own price is still a second copy.
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_FLAT)}]}, True),
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, True),
+        # An empty pricing object is pricing present, as has() reads it.
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": {}}]}, True),
+    ],
+)
+def test_offer_terms_unpriced_check(offer: dict[str, object], refused: bool) -> None:
+    if refused:
+        with pytest.raises(ValueError, match="Offer.pricing"):
+            check_offer_terms_unpriced(offer)
+    else:
+        check_offer_terms_unpriced(offer)
+
+
+def test_offer_terms_unpriced_refuses_a_non_object() -> None:
+    with pytest.raises(ValueError):
+        check_offer_terms_unpriced("offer")  # type: ignore[arg-type]
diff --git a/sdk/python/tests/test_offer_sign_parity.py b/sdk/python/tests/test_offer_sign_parity.py
index 4e841def..81a7eae4 100644
--- a/sdk/python/tests/test_offer_sign_parity.py
+++ b/sdk/python/tests/test_offer_sign_parity.py
@@ -79,3 +79,26 @@ def test_offer_sign_under_wrong_seed_does_not_match(vector: dict[str, Any]) -> N
     wrong_seed = bytes([0] * 31 + [1])
     sig_hex, _alg = sign_offer_jcs(seed=wrong_seed, offer=vector["offer_json"])
     assert sig_hex != str(vector["offer_json"]["signature"])
+
+
+_PRICED_TERM = [
+    v
+    for v in _VECTORS
+    if any("pricing" in t for t in v["offer_json"].get("terms", []) if isinstance(t, dict))
+]
+
+
+def test_offer_verify_matrix_carries_a_priced_term() -> None:
+    # The refusal below would be vacuous if no vector carried a priced term.
+    assert _PRICED_TERM, "no offer-verify vector carries a priced term"
+
+
+@pytest.mark.parametrize("vector", _PRICED_TERM, ids=[v["name"] for v in _PRICED_TERM])
+def test_offer_sign_refuses_a_priced_term(vector: dict[str, Any]) -> None:
+    # An offer states its price once, in Offer.pricing; the sign face refuses an offer
+    # whose term carries pricing, as Go helpers.SignOffer does (ErrOfferTermPriced),
+    # and every verifier rejects one (expected_verified is false).
+    assert vector["expected_verified"] is False
+    seed = bytes.fromhex(str(vector["exchange_seed_hex"]))
+    with pytest.raises(ValueError, match="Offer.pricing"):
+        sign_offer_jcs(seed=seed, offer=vector["offer_json"])

From dd3ca5b64604313ffa32ca8776440c4ad6e70e6e Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 16:08:17 -0400
Subject: [PATCH 075/164] Carry an offer's price once in the TypeScript SDK

isMeteredOffer reads offer.pricing only: a term is never consulted,
because the term an offer sells carries no pricing.

The money module gains checkOfferTermsUnpriced, the
offer.terms.pricing_unset rule as a standalone check, which throws for
a term carrying pricing; a present value counts whatever it is, and
null is read as absent, as proto-JSON means it. signOffer refuses such
an offer, and the offer Verifier rejects one after the signature and
expiry checks, before the metered estimate check.

The cross-field layer gains both rules: the Offer predicates share
checkOfferTermsUnpriced and checkMeteredEstimate with the Verifier, and
ResourceEntry gains resource_entry.terms.pricing_required with a
composed ResourceEntryCrossFieldSchema. validateResourceEntry checks
the entry itself as a cross-field site.

The cross-field suite expects the ResourceEntry mutant and gains valid
instances for it, its metered Offer instance sells an unpriced term,
the metered suite pins that a priced term no longer makes an offer
metered and covers the new check, and the sign suite pins the refusal
on every priced-term vector.
---
 sdk/ts/README.md                              |  3 ++
 sdk/ts/core/verifier.ts                       | 15 +++++--
 sdk/ts/src/crossfield.ts                      | 40 ++++++++++++++---
 sdk/ts/src/licenseterm.ts                     |  5 ++-
 sdk/ts/src/money.ts                           | 44 +++++++++++++------
 sdk/ts/src/offer-sign.ts                      |  6 +++
 sdk/ts/tests/crossfield.parity.test.ts        | 26 ++++++++---
 .../tests/metered-settlement.parity.test.ts   | 23 +++++++++-
 sdk/ts/tests/offer-sign.parity.test.ts        | 21 +++++++++
 9 files changed, 151 insertions(+), 32 deletions(-)

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 33c61d68..59112136 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -79,6 +79,9 @@ states one); the excess is held for dispute, never charged.
 dispute, and `settleMeteredUsage(offer.pricing, consumed)` returns the accepted,
 ceiling, charged and held amounts, exact on BigInt. `checkMeteredEstimate(offer)` throws
 on a metered offer without an estimate, and the offer `Verifier` rejects such an offer.
+An offer's price is `offer.pricing`, and the term it sells carries none:
+`checkOfferTermsUnpriced(offer)` throws on a priced term, `signOffer` refuses to sign such
+an offer, and the `Verifier` rejects one.
 
 Every module is a named subpath export; there is no package root import. The full list is
 the `exports` map of the package manifest. Source, tests and the release process are in
diff --git a/sdk/ts/core/verifier.ts b/sdk/ts/core/verifier.ts
index 741832da..2bf04da7 100644
--- a/sdk/ts/core/verifier.ts
+++ b/sdk/ts/core/verifier.ts
@@ -22,7 +22,7 @@
 import canonicalize from "canonicalize";
 
 import { utf8Bytes } from "../src/base64url.ts";
-import { checkMeteredEstimate } from "../src/money.ts";
+import { checkMeteredEstimate, checkOfferTermsUnpriced } from "../src/money.ts";
 
 // OFFER_SIGNATURE_ALGORITHM is the JOSE/JWA algorithm identifier advertised on
 // signed offers. Always
@@ -351,9 +351,9 @@ export class Verifier {
 	}
 
 	// check verifies a single offer: resolve the exchange offer-signing key, verify
-	// the JCS signature, enforce the not-in-the-past expiry, and require a metered
-	// offer to carry its estimate. Any step failing rejects the offer (fail-closed) —
-	// including an unresolvable key.
+	// the JCS signature, enforce the not-in-the-past expiry, require the offer's term
+	// to carry no pricing, and require a metered offer to carry its estimate. Any step
+	// failing rejects the offer (fail-closed) — including an unresolvable key.
 	private async check(offer: unknown): Promise<string | undefined> {
 		if (typeof offer !== "object" || offer === null)
 			return "offer is not an object";
@@ -385,6 +385,13 @@ export class Verifier {
 		if (!valid) return "offer signature invalid";
 
 		if (this.expired(rec)) return "offer expires_at is in the past";
+		// An offer states its price once, in Offer.pricing; a term carrying a second
+		// copy could disagree with it (fora.proto Offer).
+		try {
+			checkOfferTermsUnpriced(rec);
+		} catch (cause) {
+			return cause instanceof Error ? cause.message : String(cause);
+		}
 		// A metered offer without an estimate has no amount to accept and no ceiling
 		// for its usage report to settle against (fora.proto Pricing).
 		try {
diff --git a/sdk/ts/src/crossfield.ts b/sdk/ts/src/crossfield.ts
index 24cd5723..07265adc 100644
--- a/sdk/ts/src/crossfield.ts
+++ b/sdk/ts/src/crossfield.ts
@@ -7,10 +7,11 @@ import {
   OfferSchema,
   PricingSchema,
   RegistrationFailureSchema,
+  ResourceEntrySchema,
   RestrictionSchema,
   WellKnownManifestSchema,
 } from "../../../gen/ts/wire/schemas.ts";
-import { checkMeteredEstimate } from "./money.ts";
+import { checkMeteredEstimate, checkOfferTermsUnpriced } from "./money.ts";
 
 // Cross-field (message-CEL) refinements — the one genuinely net-new L1 surface.
 //
@@ -165,17 +166,42 @@ function pricingRules(o: Obj): string[] {
 }
 
 /**
- * Offer.metered.requires_estimate: `!(metered) || (has(this.pricing.estimated_quantity)
- * && this.pricing.estimated_quantity > 0)`, where an offer is metered when its pricing
- * or a term's pricing is PER_UNIT. The predicate is the one the agent-side Verifier
- * applies, so this face and that one share checkMeteredEstimate rather than keeping two
+ * Offer rules:
+ *   - terms.pricing_unset: `this.terms.all(t, !has(t.pricing))` — the offer's price is
+ *     `Offer.pricing`, stated once.
+ *   - metered.requires_estimate: `this.pricing.model != PER_UNIT ||
+ *     (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)`.
+ * Both predicates are the ones the agent-side Verifier applies, so this face and that
+ * one share checkOfferTermsUnpriced and checkMeteredEstimate rather than keeping two
  * copies.
  */
 function offerRules(o: Obj): string[] {
+  const out: string[] = [];
+  try {
+    checkOfferTermsUnpriced(o);
+  } catch {
+    out.push("offer.terms.pricing_unset");
+  }
   try {
     checkMeteredEstimate(o);
   } catch {
-    return ["offer.metered.requires_estimate"];
+    out.push("offer.metered.requires_estimate");
+  }
+  return out;
+}
+
+/**
+ * ResourceEntry.terms.pricing_required: `this.terms.all(t, has(t.pricing))`. A catalog
+ * term carries its price; the rule is the entry's because the term an offer carries
+ * holds none. `null` is proto-JSON for absent.
+ */
+function resourceEntryRules(o: Obj): string[] {
+  const terms = field(o, "terms");
+  if (!Array.isArray(terms)) return [];
+  for (const t of terms) {
+    const term = asObj(t);
+    const pricing = term ? field(term, "pricing") : undefined;
+    if (pricing === undefined || pricing === null) return ["resource_entry.terms.pricing_required"];
   }
   return [];
 }
@@ -282,6 +308,7 @@ const RULES_BY_MESSAGE: Record<string, (o: Obj) => string[]> = {
   Pricing: pricingRules,
   Restriction: restrictionRules,
   RegistrationFailure: registrationFailureRules,
+  ResourceEntry: resourceEntryRules,
   WellKnownManifest: wellKnownManifestRules,
 };
 
@@ -347,4 +374,5 @@ export const OfferCrossFieldSchema: CrossField<typeof OfferSchema> = attach(Offe
 export const PricingCrossFieldSchema: CrossField<typeof PricingSchema> = attach(PricingSchema, "Pricing");
 export const RestrictionCrossFieldSchema: CrossField<typeof RestrictionSchema> = attach(RestrictionSchema, "Restriction");
 export const RegistrationFailureCrossFieldSchema: CrossField<typeof RegistrationFailureSchema> = attach(RegistrationFailureSchema, "RegistrationFailure");
+export const ResourceEntryCrossFieldSchema: CrossField<typeof ResourceEntrySchema> = attach(ResourceEntrySchema, "ResourceEntry");
 export const WellKnownManifestCrossFieldSchema: CrossField<typeof WellKnownManifestSchema> = attach(WellKnownManifestSchema, "WellKnownManifest");
diff --git a/sdk/ts/src/licenseterm.ts b/sdk/ts/src/licenseterm.ts
index 5107d84d..69d90882 100644
--- a/sdk/ts/src/licenseterm.ts
+++ b/sdk/ts/src/licenseterm.ts
@@ -381,7 +381,10 @@ function zodPath(path: readonly PropertyKey[]): string {
 // rule, with its entry-relative path. The generated schema is field-level and
 // the composed cross-field schemas attach per message, so the walk is explicit.
 function crossFieldSites(entry: Obj): Array<{ path: string; message: string; value: unknown }> {
-	const sites: Array<{ path: string; message: string; value: unknown }> = [];
+	// The entry itself carries one: every catalog term carries its pricing
+	// (resource_entry.terms.pricing_required). It is the entry's rule, not the
+	// term's, because the term an offer carries holds no price.
+	const sites: Array<{ path: string; message: string; value: unknown }> = [{ path: "", message: "ResourceEntry", value: entry }];
 	const terms = asArr(entry["terms"]);
 	for (let i = 0; i < terms.length; i++) {
 		const term = asObj(terms[i]);
diff --git a/sdk/ts/src/money.ts b/sdk/ts/src/money.ts
index e6f79269..261b5101 100644
--- a/sdk/ts/src/money.ts
+++ b/sdk/ts/src/money.ts
@@ -176,23 +176,39 @@ function modelOf(pricing: unknown): string {
 
 /**
  * isMeteredOffer reports whether `offer` (canonical proto-JSON) is metered: its
- * pricing or its term's pricing is PER_UNIT. The term counts because it is the
- * authoritative copy of the price (fora.proto Offer, the
- * offer.metered.requires_estimate rule).
+ * pricing is PER_UNIT. `Offer.pricing` is the offer's one price and the term it
+ * sells carries none (fora.proto Offer, the offer.metered.requires_estimate and
+ * offer.terms.pricing_unset rules), so a term is never consulted. TS peer of Go
+ * `helpers.IsMeteredOffer`.
  */
 export function isMeteredOffer(offer: Record<string, unknown>): boolean {
-	if (modelOf(offer.pricing) === PRICING_MODEL_PER_UNIT) return true;
+	return modelOf(offer.pricing) === PRICING_MODEL_PER_UNIT;
+}
+
+/**
+ * checkOfferTermsUnpriced throws when any term of `offer` (canonical proto-JSON)
+ * carries `pricing`, and returns otherwise. An offer states its price once, in
+ * `Offer.pricing`, and the term it sells carries none (fora.proto Offer, the
+ * offer.terms.pricing_unset rule). This is that rule as a standalone check, for a
+ * signer or a verifier that runs without wire validation. A present `pricing`
+ * counts whatever its value, as `has()` does; `null` is proto-JSON for absent. TS
+ * peer of Go `helpers.CheckOfferTermsUnpriced`.
+ */
+export function checkOfferTermsUnpriced(offer: Record<string, unknown>): void {
+	if (typeof offer !== "object" || offer === null) {
+		throw new Error("money: offer is not an object");
+	}
 	const terms = offer.terms;
-	return (
-		Array.isArray(terms) &&
-		terms.some(
-			(t) =>
-				typeof t === "object" &&
-				t !== null &&
-				modelOf((t as Record<string, unknown>).pricing) ===
-					PRICING_MODEL_PER_UNIT,
-		)
-	);
+	if (!Array.isArray(terms)) return;
+	terms.forEach((t, i) => {
+		if (typeof t !== "object" || t === null) return;
+		const pricing = (t as Record<string, unknown>).pricing;
+		if (pricing !== undefined && pricing !== null) {
+			throw new Error(
+				`money: an offer's term carries pricing; the offer's price is Offer.pricing (terms[${i}])`,
+			);
+		}
+	});
 }
 
 /**
diff --git a/sdk/ts/src/offer-sign.ts b/sdk/ts/src/offer-sign.ts
index 738da034..afe446e7 100644
--- a/sdk/ts/src/offer-sign.ts
+++ b/sdk/ts/src/offer-sign.ts
@@ -13,6 +13,7 @@
 // use); the caller supplies the imported CryptoKey, exactly as acceptance.ts does.
 
 import { canonicalOfferPayload, OFFER_SIGNATURE_ALGORITHM } from "../core/verifier.ts";
+import { checkOfferTermsUnpriced } from "./money.ts";
 
 export { OFFER_SIGNATURE_ALGORITHM };
 
@@ -23,11 +24,16 @@ export { OFFER_SIGNATURE_ALGORITHM };
  * canonical proto-JSON (snake_case, enums-as-names, omit-unpopulated), as the
  * verify face requires — canonicalOfferPayload clears the two signature keys and
  * re-JCS-es.
+ *
+ * Throws for an offer whose term carries pricing: an offer states its price once,
+ * in `Offer.pricing`, so a priced term is an offer built wrong and a signature over
+ * it would only be refused by every verifier (Go `helpers.ErrOfferTermPriced`).
  */
 export async function signOffer(
 	offer: Record<string, unknown>,
 	privateKey: CryptoKey,
 ): Promise<string> {
+	checkOfferTermsUnpriced(offer);
 	const payload = canonicalOfferPayload(offer);
 	const sig = new Uint8Array(await crypto.subtle.sign("Ed25519", privateKey, payload));
 	let hex = "";
diff --git a/sdk/ts/tests/crossfield.parity.test.ts b/sdk/ts/tests/crossfield.parity.test.ts
index 7fecfa12..4966df70 100644
--- a/sdk/ts/tests/crossfield.parity.test.ts
+++ b/sdk/ts/tests/crossfield.parity.test.ts
@@ -64,6 +64,7 @@ const expectedMessages = new Set([
   "Offer",
   "Pricing",
   "RegistrationFailure",
+  "ResourceEntry",
   "Restriction",
   "WellKnownManifest",
 ]);
@@ -167,14 +168,27 @@ const validInstances: { name: string; message: string; json: unknown }[] = [
         unit: "tokens",
         estimated_quantity: 2500,
       },
-      terms: [
-        {
-          semantics: "TERM_SEMANTICS_ENUMERATED",
-          pricing: { model: "PRICING_MODEL_PER_UNIT", rate: "0.00002", unit: "tokens" },
-        },
-      ],
+      // Offer.terms.pricing_unset: the term carries no pricing, because the offer's
+      // price is Offer.pricing.
+      terms: [{ semantics: "TERM_SEMANTICS_ENUMERATED" }],
     },
   },
+  {
+    // ResourceEntry.terms.pricing_required: every catalog term carries its price.
+    name: "ResourceEntry with a priced term",
+    message: "ResourceEntry",
+    json: {
+      domain: "publisher.example",
+      path: "/article",
+      terms: [{ semantics: "TERM_SEMANTICS_ENUMERATED", pricing: { model: "PRICING_MODEL_FREE", rate: "0" } }],
+    },
+  },
+  {
+    // An entry with no terms has no term to price.
+    name: "ResourceEntry without terms",
+    message: "ResourceEntry",
+    json: { domain: "publisher.example", path: "/article" },
+  },
   {
     // Offer.metered.requires_estimate: a non-metered offer needs no estimate.
     name: "Offer flat without estimate",
diff --git a/sdk/ts/tests/metered-settlement.parity.test.ts b/sdk/ts/tests/metered-settlement.parity.test.ts
index f74b5e25..6866e194 100644
--- a/sdk/ts/tests/metered-settlement.parity.test.ts
+++ b/sdk/ts/tests/metered-settlement.parity.test.ts
@@ -12,6 +12,7 @@ import { describe, expect, it } from "vitest";
 import {
 	DEFAULT_ESTIMATE_TOLERANCE_BPS,
 	checkMeteredEstimate,
+	checkOfferTermsUnpriced,
 	estimateToleranceBps,
 	isMeteredOffer,
 	meteredSettlementCap,
@@ -111,7 +112,9 @@ describe("sdk/ts metered helpers", () => {
 		["no estimate", { pricing: { ...perUnit } }, true, true],
 		["zero estimate", { pricing: { ...perUnit, estimated_quantity: 0 } }, true, true],
 		["fractional estimate", { pricing: { ...perUnit, estimated_quantity: 1.5 } }, true, true],
-		["term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, true, true],
+		// A priced term no longer makes an offer metered: Offer.pricing is the one price,
+		// and checkOfferTermsUnpriced refuses the priced term instead.
+		["term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, false, false],
 		["flat", { pricing: { ...flat } }, false, false],
 		["no pricing", {}, false, false],
 	];
@@ -125,4 +128,22 @@ describe("sdk/ts metered helpers", () => {
 			}
 		});
 	}
+
+	const unpricedCases: [string, Record<string, unknown>, boolean][] = [
+		["unpriced term", { pricing: { ...flat }, terms: [{ semantics: "TERM_SEMANTICS_ENUMERATED" }] }, false],
+		["no terms", { pricing: { ...flat } }, false],
+		["null term pricing is absent", { pricing: { ...flat }, terms: [{ pricing: null }] }, false],
+		["term repeating the offer price", { pricing: { ...flat }, terms: [{ pricing: { ...flat } }] }, true],
+		["per-unit term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, true],
+		["empty term pricing", { pricing: { ...flat }, terms: [{ pricing: {} }] }, true],
+	];
+	for (const [name, offer, refused] of unpricedCases) {
+		it(`offer terms unpriced check: ${name}`, () => {
+			if (refused) {
+				expect(() => checkOfferTermsUnpriced(offer)).toThrow(/Offer\.pricing/);
+			} else {
+				expect(() => checkOfferTermsUnpriced(offer)).not.toThrow();
+			}
+		});
+	}
 });
diff --git a/sdk/ts/tests/offer-sign.parity.test.ts b/sdk/ts/tests/offer-sign.parity.test.ts
index 66eedcf7..9c040fd6 100644
--- a/sdk/ts/tests/offer-sign.parity.test.ts
+++ b/sdk/ts/tests/offer-sign.parity.test.ts
@@ -109,4 +109,25 @@ describe("sdk/ts offer sign is byte-identical to the Go oracle", () => {
       expect(sigHex).not.toBe(embeddedSig);
     });
   }
+
+  // An offer states its price once, in Offer.pricing; the sign face refuses an offer
+  // whose term carries pricing, as Go helpers.SignOffer does (ErrOfferTermPriced), and
+  // every verifier rejects one.
+  const pricedTerm = doc.vectors.filter((x) =>
+    (Array.isArray(x.offer_json.terms) ? x.offer_json.terms : []).some(
+      (t) => typeof t === "object" && t !== null && "pricing" in t,
+    ),
+  );
+
+  it("the matrix carries a priced-term vector", () => {
+    expect(pricedTerm.length).toBeGreaterThan(0);
+  });
+
+  for (const v of pricedTerm) {
+    it(`${v.name}: TS refuses to sign an offer whose term carries pricing`, async () => {
+      expect(v.expected_verified).toBe(false);
+      const priv = await importSigningKey(v.exchange_seed_hex);
+      await expect(signOffer(v.offer_json, priv)).rejects.toThrow(/Offer\.pricing/);
+    });
+  }
 });

From 83facf26fa6e94ba1d68ab15a4461d370a7147be Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 16:10:06 -0400
Subject: [PATCH 076/164] Map the one-price symbols and regenerate the parity
 matrix

helpers.CheckOfferTermsUnpriced maps to check_offer_terms_unpriced and
checkOfferTermsUnpriced. helpers.ErrOfferTermPriced joins the
Go-idiomatic exclusions: Python raises ValueError and TypeScript throws
for the same offers, and the shared offer-verify vectors pin that every
language rejects them. The matrix now counts 184 symbols at parity and
199 Go-idiomatic exclusions.
---
 docs/sdk-parity-matrix.md  | 4 +++-
 sdk/parity/symbol-map.json | 6 ++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index fdd12253..132d43c4 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 183 symbols at cross-language parity · 17 documented divergences · 198 Go-idiomatic exclusions · 43 conformance corpora, each tri-replayed.
+**At a glance:** 184 symbols at cross-language parity · 17 documented divergences · 199 Go-idiomatic exclusions · 43 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -38,6 +38,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `CatalogRejectionDetail` | `catalog_rejection_detail` | `catalogRejectionDetail` |
 | `CheckAudience` | `check_audience` | `checkAudience` |
 | `CheckMeteredEstimate` | `check_metered_estimate` | `checkMeteredEstimate` |
+| `CheckOfferTermsUnpriced` | `check_offer_terms_unpriced` | `checkOfferTermsUnpriced` |
 | `CheckRegistrationData` | `check_registration_data` | `checkRegistrationData` |
 | `CheckStrict` | `check_strict` | `checkStrict` |
 | `CheckWellKnownManifestVersion` | `manifest_version_refusal` | `manifestVersionRefusal` |
@@ -385,6 +386,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrNotMetered` | Go errors.Is sentinel for a settlement asked of a price that is not PER_UNIT; py raises ValueError and ts throws from the same faces, and the shared metered-settlement vectors pin that every language refuses the same inputs. |
 | `helpers.ErrOfferExpired` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrOfferSignatureInvalid` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrOfferTermPriced` | Go errors.Is sentinel for an offer whose term carries pricing; py raises ValueError and ts throws from the same faces, and the shared offer-verify vectors pin that every language rejects the same offers. |
 | `helpers.ErrProofOfPossessionMismatch` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrRequestAcceptanceSignatureInvalid` | Go errors.Is sentinel; py/ts return false for a request-acceptance mismatch rather than exporting a sentinel. |
 | `helpers.ErrSignatureLifetimeTooLong` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 1ede7111..d6f59197 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -117,6 +117,7 @@
     "helpers.ErrNotMetered": "Go errors.Is sentinel for a settlement asked of a price that is not PER_UNIT; py raises ValueError and ts throws from the same faces, and the shared metered-settlement vectors pin that every language refuses the same inputs.",
     "helpers.ErrOfferExpired": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrOfferSignatureInvalid": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrOfferTermPriced": "Go errors.Is sentinel for an offer whose term carries pricing; py raises ValueError and ts throws from the same faces, and the shared offer-verify vectors pin that every language rejects the same offers.",
     "helpers.ErrProofOfPossessionMismatch": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrRequestAcceptanceSignatureInvalid": "Go errors.Is sentinel; py/ts return false for a request-acceptance mismatch rather than exporting a sentinel.",
     "helpers.ErrSignatureLifetimeTooLong": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
@@ -459,6 +460,11 @@
       "python": "check_metered_estimate",
       "ts": "checkMeteredEstimate"
     },
+    "helpers.CheckOfferTermsUnpriced": {
+      "allowlist_reason": null,
+      "python": "check_offer_terms_unpriced",
+      "ts": "checkOfferTermsUnpriced"
+    },
     "helpers.CheckRegistrationData": {
       "allowlist_reason": null,
       "python": "check_registration_data",

From e5856eff4cafd5b2e82b661353b9c5c56b3ec529 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 16:24:12 -0400
Subject: [PATCH 077/164] Name the provider in the relayed-purchase denial in
 the protocol

The DENIAL_REASON_RELAY_NOT_ACCEPTED comment called the provider that
sells the item's resource its seller, a role synonym the contract does
not use. It now says the provider that sells this item's resource, the
standard role term, and the doc-conformance gate passes again.

Comment only; the generated code and the descriptor are regenerated.
---
 gen/descriptor.binpb      | Bin 678029 -> 678006 bytes
 gen/go/fora/v1/fora.pb.go |  11 +++++------
 proto/fora/v1/fora.proto  |  11 +++++------
 3 files changed, 10 insertions(+), 12 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index f50c45decc196fdf8c8b7a39b7312243b295a4b9..77537d9e8c7061a881943aa5fbfaf6bd98e2a0d8 100644
GIT binary patch
delta 25386
zcmY*?d3+RAwtsh}yQ!+6kP1n6S2w+{2}vM8*piR{D!Ae9=s4oWn{l3_jyf~GH@}$x
zg2*C<MXsVOg0h1sNC!j+0|>|t(NVx1Ws$`}!y+iZ@45FD<@;m&@I7_Ux#ynkuAO=Q
zt?Zd)*<mA{BbAYPBV8-p<8E~x$&J6&otUnV+f|^qG2DK~%cEC+@5cW;xz*pd`BNX~
zsa&R$dTZfbJ6yWUeT7nJxK0)+8FQ^Ga@!w<Mjn6SvA;h2(9kC$PyONkry@@dedLiR
z@y~~!j6D3*&_AW0j65;)$;bZk#Dha4_{!;5J^kPx?tk?6Ln9A8HuTBJqmMnMvtxbL
zBx_%%CY(C!R;Q-eZ}A`edw881WpnD(H2(cTof^s=tyA-y5p*BZuh8A3j6&KZ)B3Yc
zU2$J&cz!5yTx4zgsiWHcP~`5Q-wu_pR2+uuM>eaUdS~dzA|=FGK?LiMMbVgE#@jdz
zS1T*(uU6dETBL+!8z<Vd7RBOvfVTlUQ=|l9S43{P_4>#YPd-xq)YDJtvaJFM_*!g1
z-q>&I3C@~lxX!Za{nb?HY>{HhHhE}swy0xB@5<Y_4A(jKWq-AM=v<M~QMPfR&AFmT
zR4?ak+=lBs>o!2`96E2yaih(7k|X-^7_Oh#hym#9ry|8K<#^EMr=nm-y@JbWW4JD`
z_Xnt5A{T6vv_YE-WRedHbj9N|Jg*fy=I6XusV!=|*NW9*eW330ILVxI*iSd8*OtvG
z_7swQB7%2LafgfrG2l7HT?gtJ&H~%K!Tx-sT2l5#v8PD3A?v<TT-?cmV0ojs$Bp_m
zoCP1}u`M^MgDU0~dpgKA3Q>!TN-PMLdBxqY)0ZnySTQ_HiyaGcb%WJPXZxkaYLWhR
z0c0tp@xI)Mo78XAZu^QoS8#4nA#7jql{_G*5rpk4&i2+{DCJDhdA?V<*&J5Nx)kai
za&O+H{;g=xe6PnR`APrzUVo_t!9U+yHCS(}E3S@)XOY*@;&tlzdY-EzWG(WlL4B4}
zcey%}K1<nSkEyfEmU<PH_=$){OTAiK3qssdZ@cz-l(XRDGFJPz8t<~qW^oeLs~M8T
z36^EvqGJ7Jq$(uBAWdH7-Q1+dRiDy;fAUzR4+xPaZ$2LgL5OMc`Xf?|0x?bActUT-
z^-@$4lYG~krx)lNHCIP#23S^kT@}A3!5pi-t}gmmF-S;R=T*Gs|BDQIXy~I)vFwxT
z@Jdju@#aCqI$QZX-X6-&Rk-pl!?Ve&eBjOf{E8ZKHgr^6h<#8jb{E(;d9?zmv<vK;
zyd8?9(k>{y$y@vZls0q~O1q#m>cjh9*H*7vYRzfj+wAoiXhvh>B#+_V;`OX^>S3-4
z`rYC5GUp#XX7`SY8@AiwRV>@Np~eocKPc63L);E;II905jDW`bylnUbp7R4bDjsC`
zKHCc(2;S$-w?=@312lLzLK6=p?ej+C`ZNvk6f!)Ay^arZp1-LtyOM{!i0vy7SfMtC
z=eSq--s{reQS>&zqqRJTpyf9HUG3)Vae}<m9ySo);G~mYSKY5D=;xHz)m8tL>>fgF
zdd_;4i@Az_sP{M<@K0fIe1Lvuy;?gyQb6#X^%{lT;D9jrS#O7n(%?kk20!O@U62Ns
zH1M6b3@%A9_)py6KM5UBdPew^=X|c5-k|=?*#KZ^K_NfFr|}$ywiNOseC-RQ7EWj}
z!e>0^6K=<Mp~W*k*Jz(`yQIMmBYmFsJQ5@cqDJ{p&?w3!3GRE==V@D_$GC04G?uj;
zt|sms>yyb8QWUsxtWUZT5DJd<86qG6A$6=TEOHA_B^bS4c0#FiC2tYCPVdP302<FG
z3|GVVj<@^BLm%VqJ}7m@`wXvi1*Oh-pBb<q`WWvEUL*U+lYNZ$b-Y?Pc^`<w2`qnv
z8oYOc-3R5@1Ydr8DTVTDg0H|5O8GUx7veJ`tb_alj0}){P}-1=6MWJBdJo<QP$L^P
zLhUuA(eA@dRJ#vKo<?6mTy{yx)96d3Er>oEeHqJEZrMkpFMFN7jnXSbb!-aj_>8*a
z-YIq`lvh)1V^LmB@yWab3p$zN!z4#l7Z9CH@x^bH1Mx^>P4Oje&_lcrOqEmFz>#X?
z-l=vUZP3S5yN@>LW2(>KlQx95K_63nn6yP7ZP3S5U(6av8`;NHU;H|~6Ym2JUSjW$
zRLg5#vindmx|e+Ue6;|fD*AZI7qEn?=;I|{BB{SEOraUBS6P=)>WX_`wMA%9^Hp0-
z4I*Ck8J4{@h<MeP%1AXeXz{8qdz&<cCe?h^S8}V~hpVX@u9>X=vuaJvOuG*qYR>fK
zC!`b|ea!SFdsz^D%=A^)>g(KGL_TK1+<VWe>y;skY#I5GvB;M%YF|jnhm1wOFrQg5
z@_fix<SXwiMdm}#MZPXWq@MZE(?Dh}@>SleAMx;B+G2LfeL6<{W8RQeb}wzw%PL<!
zU!p;5TlBKZ=e07mEqYnyL+KVyYl~i1`C>Q8UfRlDR{7$C^%ha4t}tB9xw+4)cQ_lG
z?Ov`xFU`JuD;BOmFU`JC7b*4%^wR9>R%Jo-((LQ;fT+jH73ifsQF`8w2}y^NoZ`ZQ
zq1kuu5I!M=lq(I_2A>i$3nEuN{nXG$pM3Z+cI6*ES9Hf0^o>tqasou(8+>wd0z}^%
zXoP%n3MuUj*H#~&oQ43PC~UPy(GHQb)sCEYkhIlKqIQt9)rZN6);eLsv)$)7=@V<6
zFj{W+sU5{yCroRdT|V~3mFg>O*+kV-zRRlR_=Kjrd~(GD2%)=tSn(_&^M<LAw&V^?
zR4bh2Ek30Uw-~5I_Nk&w0fMQ;SJ*-SERQoG5Dw((C#zpL%MaL0B<q09L`C@kG0mZc
zQkdYO+~610q*8szG6ASC!6C~8fRJ&>XNYtJBqkpg-LyyuE3n>Swv4IKio=%uK?KWT
z%l?31IegjvVVXEjNc#go!U?-`s+1?}&Z$zKu<Vb<kaWVbf5h;7?{kdv3;RdV@_U~e
z684Xf{eKYl?*;&=KUfX`MB5)M2LM9q59EL-h7=*2wfb1!$JJm@0C2Y2oaBX8pImw3
zD>z$ySiJ3^Vicj3=XsxU$;bXaP2JXje~OhSK0wTQYgm8~bKaWB03qf)O=Pt41jKB9
z-WR-t*_`HNB8ZjePd>Twlq5L)f)6XtLOtJV<+>8Yi#}Ixy^w8sMQxY)+2^YHzYUNp
zzxZ6Yi3Mi_eS1dvm9e>tuc%391O6$N9QXhwNBQMS6A(&{^2?PbAe0>CFCOa`OAaFN
zh0n8o*BHN8a!4BZM*HPTQ<AXodCpHOP0FLF;d$Qgn9Tj?&2vT3?el&$EF2jnM>hI-
zB6S6T9UCnb0nxV6FEa@cT{ZgQ$Sk}OB_mH_qh_e3*G}@wJOYuZepM{z0KqcJkL4U`
z5;Ht6`W<s+M8(kZMZcBNF;e6up-49XDDsk}2q4<NWGMm&sV|Wt6j3o!WSXBxR1W}f
zPO~{lpJ{#>QTPhZX?|-v5Tl5i<yYRw1!s|W@K50#d;s4p%R7MJn`L<i5Z;;PFMdOM
zhX~v|ulZfCOYcY;_-0$)ktBF$&Sme!4bObPW2xnxIJ%whx6&+5Mp-1i1Aw6|vQz{_
z+eMa90MXSVG77fht~lwxguO9a?NYJCuXuQs1CglyHdk5@EKB?ahW?!!?nxM)_xz3z
zbM86nF{Rymel?)?f~W*3v5x)nhT5lmoh1rHh+5}wBODC~QR~RjFH@CGQ1_d1zn`lH
zoYkBBGEYH8a%}SFi<JT(welzUzMFU;W0SwETp!FuAk((6we!@QtGCz^DATw2<+3=z
z-L%Cot0y2NZ1JOd_T>_Qwz2ExtMxV8Yzb6<x7iXX4Y&CXF+V4G8gBDr{X_LPLG^d1
zU+mEUp#4t2oCX2GxzjJFK|u7j({D|K2~xDhFZO5v5Y%GpKxMea)`7}!i(jrK(HN3i
z{FnxJ(;h8}eV5-cBX|2kb(gE)xL++4shcFfoD#vocE725s!mz4flrWl%8Cs@NIXTc
zv7fw?gm*k={K`4M%iOBGc(dAvb#Bnw=k8plYR(3H5J`Y$kaEVaiFqFoQqK4TL0(4z
zkpyS_9nT>NXd_4jN&?qezpI*8R!M;$&-&wKza~M@S${<zy$jcd>a1T0n(@eOPu$Nw
ze@iW?1h$l*P`cpP#I7XCU3|fhVm^fPLeejAiFq?y=2Zi%_i#;T_r0z5C<E1!Kra5p
zukkY_s7aOf7k{yr&c^`Znc-~X+iLf+;ifEOAcAGMsfzs|AXtW**bi257I<$YOD$J>
zb{T0ZVk?tW$cZD(V3Ow+AXrA4nXJB;RuD<-DLms%Wn%7y<?1451O91gM;nRprkn@R
z4t(QHIS&BB$m7l8iKdtbh`=k&^QNoO6!U<jfp3B-=K)DVrFp@md7v9t0b7nKrV=$%
z5w_|bwQ~)Cm_U<C8-(^0GoPQKL0Q^(Ofiea8Ws?;r<mAnQc@&ov&l@J6s&Hg>ZxF+
z%n5t~BQs@A0D_U3R!$@p>?Wq0JSW(rIn`4$-PVBi6w^(a*k}ns(@mKYfDkm@L`vL%
z1KD;sLNpz3u(xvR_3d6W-G#J|cDJK^n9bTYsfo~RQ=XWDi0GPa;=~kl1=>LD9Cl-q
z8V}7e<%ubXXfwx@C!Ou+H1KuyLX(;bzb;1xMou*m{C6WKQ>fae<1N<Gq~6tTzNz~4
zey~i6G+4;0SE&Q47g{3&5hGh@jSLVfEHn+V<pspZ7MeH=rm~$P{g$vbtJE&lOKb^L
zHkX+B{Lq!!P$Sb6n}0w^SYqN}Z2*@5?U%9aYW3=xWwr#WM$626QLR(FY%Vj~TRKqL
zTt+%vi?O8*&kEDApDkXk4l-9z4s55@SDFUbWGZ3vJ!fR#V}E0vm#f7r`L4RO8dMQS
zXoG&5tg!+@(<W1vXF&ARM0WlQ7l@B*Si3dq-)h#_5@`NjV@sg1t}*4AM4FFvjfw1E
zMEkxpIb}<3!y0voQntm)UQofbg}g$0E<kj<#l#_XJ?8=1#-^`R`&VzXyXCWjWuP=)
zoNY7Pi&+7XcudR+H*g6wE3ja*I=FtPErAX?cG?p7>|jgavja)EmP<g}J*HA-R<n~$
zs*i1KRx9d2u*^uOfqTq+k$-7kTK1S7GjcpsTK1Two%BzHV^CT?GL=tQ*Y)bh4fvNO
zg-$F!vQ0^a<|8Zc(!9`oL{6twF(3-fM`q#^6dGC;69I(=J^kBsb^0|4s(oy_eyd-H
zSjiZkPff=m(`nX3Zh!Lr-w&;4WB;Z0z4KF3HFQ5lnxUxq+*At8{7C(iPY!)5a{DcV
zgnsx0{qRi`LO|&ExhYqhfav>k6LS`BNgxLwzhsdOYRBp?tr3C<313<x1f)h*umD2B
zmlP~050HRZ`I`OD1~pOpwJm`X<7-<2b@R0;kJ-Qi313s;YiWbgW)072(=j%8V1v3Z
zui&(a1rk4b&(a{znS2r54FDp~S;GQ^$aB`P03q@m4QmR`3t8%LSZ=}=b*i&$SU}nW
zR3ZoDvK0_a!va{gQUT7=NS<Lgf1pOop9#p)3nEya3CPk52$p98R_V<W95Zj$2dcAn
zOh85mh){J*Ko(s<h!_))MHi5G0w}tpY4jzA=aqnCU+%MQ>a%$TuLM+|7<~zienvp-
z#oO;zJ>6zl<G?3KoDq;d1%$*I0StaRMQ#bHJUgJ6<^(6}l7~D<+~(=RCht~nDhD~A
zhdUbaR&B-H1PB?k13th0o{#}!%wq+6)OADVSpzHK8^U?kzyKj)UceAXG=LB>FMv6L
z>H{Dqw0VKRwLHoRij$vtf#4whr04_;OIXET_5122b|-mMmIL{s4wrE2EeS+>N~vVM
zC4oNGbn%2vP&1aX-|kZf)hx3m(28<dKpyI#4b)r~2xX-Nsu{}yoyzntY1LLjp}IQv
z<v#U6XU%F`2CXGm+e4*g$m)P0&dtCB8LI>7jJ}q_t%Qy?H{^zYs5U!mHrO(#Qf#ng
zP^H)qkVO|fkg*|vJd(!1I$|sP=f7c$t+ohSL2M1=i;7voR}fnRF>$yC2oYNYUAyrB
zE+K<&rvMIg$G^e2-3nts^u65*V?Z!&zZ}LTw1U_h;46r00ASR;whFX_*lUl1mJoZb
zXhvg5+Dp+q2*F&6Vi$1C3Oda`tRU_wWH;<ryA*yDP)+?AGIl9~+H)YFe36^DUsaq9
z_@}5^_<&vxSiJzEmjeMqtO5bi%Ygt6w5h5BqN*MUM7{{*=^b$JMg#<x3s*)51Fp{l
zZhmxdnF`)d16aa!z=6YMA{KF<wGYrL?i9shDaG=)EOt=+PxZI9R<uO;HXtW>w4p|U
z_F@JEgye4nm;rywB`AjbC>#8#`n!gswgd{VqxQI{o1+1_Oey6lb2Nb2;z~X)c+h<`
zka)q#a|WMjvVaOl1IdT@otGr#QM3P=;MDu`j-kf!fKq98kKFXc(El3x1S|ba?Ntqu
zWn4<B;{mzSDdj13JYbgbgaG9HoxA9DTpGN8ip}~=?N@iomO#_+DccZ~Ql|oPA}{3&
z`BMQ*!@Gqo-G=AKfO4M2K38`&;9r&=lvF?3#-OD7F<^+beJM|>9|Kt13n#nb<R1ei
z=Px^%?i9F_TLZ3hmz^xB7{eLc$&v^spDo}{o+-i)cDNMC4gW%oIBPE1dQqZYvh|`w
zy<~-WDNoc(0bD}7M9E&NAW=u>KKoLg=ByqaygW9_)X~Aqp+al@(ZTlOU>Q8nZ*&ls
z4FBXJkg4O?im%mSHREgvl(OT3avNXDQ+8Z1A<m)!Az@swTX%hv&;q7lxj!FLH#_??
zTZRT1%$7mP%7O_|FG_i`vS8Ql`UW9`t_Xrk*j$mvB3EmH+|+N?*PXQ>Sq{@-n3+L&
z%~Y!J>w;i`75_R^ni&j+^x1{jKeRVI+k%cgxu=h)uW81%pj)H+5_fx=$hHR+FT)i<
zlHGJ#^)vwTYjFCAiDr8cb8uVU7W(c8D*ToeA1U7e`7Jv^wA~TJJSW-$?F=gXwE;d-
zW&!fGI6?lEACZv`&~(@3PH*NJ0L(X{^c9VF1+ftof{_8cg9@J+@sVO3ke^`_MBCj#
z97msZq2hHiJYNJIXL6|@)W0h2z6fH0M*H7RH0ZC`qE_sGzY5Cr2Z#{$RZz~`fY9nI
z8V_wGJJA5XVON|{tIEEyS;z$6*eq0Xz9AO6<LN|$Ji;D7qt=uiu~|sa5u1g^euP+R
zISbHtZ2uXxuIxLTg_bDa*(_8Mz9W_z&H{U!WY?Tk`&OQ`S;#CWgPMqxPP_!13|?`i
zel=%7-25kq1B9Ne?3@~B2hOUIG7!X~v=d)?|0gKV4gk^Le}XtWcz`n_hFe+Yocd5j
ztIa}5*&38<w@y4MTPbd4>TpAu;ThA>(Ug1loEmbsAJY+Q$c=bT<SHXS<Z?%UR^KnF
z$c5yp4pa!sh5TYV2Soq55T^5u<kND)vmxa8G51+U>#rm?g!qmp&sC1=`^_O`Tgas!
zcH;WJTwdQ3ja^-;ecNqI2&dL`Xd^zsIa@=n`d?Ad%?CtzEg!m-lWt$<?(3w@ahH9K
zD??t6L4|H#hh&fdg6ZoJe1WG=;K9dlS?5Zv;(>2*A1Yb+ycB99mUd_ZmTyB>ift(%
zs?E2d_I-pR{5%QQR^NsSdh=^5YJiI@y0-c@)T1ZA5iY05I>y#lYQ4&i*{V_R$3pT|
z0otISV<F^NJy#9r1WR|-`u9H(k`<(!uZ2&9<XRXI5>A8+Q9%HSCxjVvE=?Tew46H~
zQaa%ngf({4f^2J7?b&KjM3mt>LgREuuIvCI?Q|$4?w|o7?R2Q5RDX&KLkyl_<GN{o
ztv+K*pgrIjTLMi%XF{P$X-EphGokKPdNr4Tw&z(*cdfSiye)wyi}Ut~C@#;3<RZA7
z$L0AD7Qu9EP)>8jMV9NXU0rk0mO%H>7i|eNRa^|o?L1hZ!^Kd?uznkt0Owr_vEEhM
z?KPKd5h_GnvPIDH?ovn|x0ds{;!-G)(znqKYdJ0N#^<(IX*cB6j1ONnCN1p7hcCN^
z=8Ey*%WBZVZhRPOjG?)rT)|v1Id?~IZJe`avMqxqh{?7Lnjj{JFY7@Q#N;sac$>}@
z$`#xv&&Y+UwG~Ru3|mG%WX!N-(0%fZup#dJ!2=mH!gw_}MuZ4%i|4R*eYJ7*b8Hc9
zA!3d#f-Z~agblI4DOc#Scuu%;rQVZkft%pDVWr9}VK>)lCTs1h1*$=?VvMeY=Z5pe
z$!NJkSHg3{J~4#?Le|_crqJG877k_?u<Prz>goly1X{8!2+QSGIltIl5H`EX7^B_)
zf^d&s`aN6%?sb>2jdj|+)k|y%bfLS%9uHmUE(sgrq@rA*3*9B*(lY%PE&<8BjNMzW
z-B!KKme3v&me~^8L&CDK+`p77?IB@VIGyD)Pq|WHxR$e%^;%W+a$7<HBrLZj6hOlA
zuw0RY1rnBrLlM1_>tGnJmF&KLTDR(zwgdwbR@xHi8QRLQe0Nc<7?7|s9Es_F<`VE!
zbv4`FPkXX@wJo6#5?0$13L#;&J&Hm|SWTlC$|ZC#Tx(fFf9?0xYi$V~;ET0kc?4Uo
zbby4lVeyO+0oef()`ly(=(lnSMTToViw)3juU>CUD1r{_Z5@grVZA+yB1l+Iqo5P0
za;4aCZDh*_XxG<lv?UZn!bV#{F(hmZ%VjTEAYo%TQ=&JD0Qcfpja6TzO{&>qi||6k
z7F&cDBDRF(HlkedLd2GEEMeuU56hWc{?(MLyKEUg$k-K@i@9>e2N}D<1t}SpKFHV=
z&X$UE$#TVy+Y+|#8f|A?i!B0oZmyQFeENYl5YZA2ca<Xi5YZB@>Zz~6rVPd~4bRcA
z@?GxBfm$E;{rIPqVkR^>YLCW*n4@8NKms<1IU2^6lJ)_B*asX9C%y}dBQzq2UD2_y
z>rZ^=TdoAK776pS^IiZ@@?==f^?;CmGAvJU03rQk7$-QN3Udc>jUHAK=1x{$r1oU$
zU~P6S2$rfrsQQDgY7oMHuvHC0*bk&C7SxKX!th)SJ4WS>4A%bTEVvlPeeFo<q=IJp
zOJVlz&DyA%OO|X<q39(mHUS~~Qn*;0p8!Jkr7(_le-twCbtL=8E!vsdkrAn01wX1A
z8Id&{kQzk{adrX-5hEiw!#+gnbv8UNL>w&l)~(vt&UP<Eu&%ie+I1%FCb2oUYY%jr
z6p<G%AVSonNKl+S07BHH2)1~%MC(iofvFKCWZo9R?&CHs&F;HHtEvS_*bNO}x2cw5
zfSf_j`+$%(HG+A69G-%^y5I~f;+Vr)?$E}zdnJO?g1ga47t(7w`_rA;J>}CQa(M(I
zBu$UVH3%RiO^;v=@*!EN3n@06oxM~0clm6ahkBnK(ZpF7+JI+v1ZQ1C(0QfdnHzDe
zV;6s;-CI1DI;VP6iOxL>BFfT;%e<fc`LM^&#@wad+5nPRr=bCaF0d2<gwO?~2t_R*
zqIN-~!_tVjVIl&*VOkh*Es2O5CP@R|qKLd<k|gX~7f0x9f{JS;jp?n3Qfww7uB!*%
zQqR7u(n9PXcWZ6SK(^GOF}@X%7hd3j*ta6M@S=4{B`xPxu$6afS3kG{l6by?2$mHQ
zuedh`1j~wue9;GpmB)%m=2pIJB*<Sot%ziA;mbxzp=INW$l#lJB36=!rii%N1wec^
zMPwoZqPwPuOhiE5);db9q_yAL2tR|m4}c>XO@N4|wN^9%LekoZEEs^0v^Ih)#B&ID
zf#F#nacqw82R3e+wbn=6e!dkgposccM9J{2XaW#lfw=+PfUwfP$N>GY7cC&`Y-Bh6
zP8$%~h)^e+5fN=RMsOH_=k<U<@3Xgmr(GL)KceuoBO*~L?Pk&s9SrP?BaRPQ@Lp|3
zyKND7J30e!8>Gv2w)I|ZSZI4hzWfIftlKFu?%-{p!cO-4A=+<3J0o(-Y;YBJMzHlk
zDnbr8cC$~1Xb**UOIs6>s1e+&UB%nLKzrGc`?PC9dn59G&fvS=y%7``ocn+U7H?r2
z@6-B4T5LJA+if8^qiJW<)$n{Cag5HT?$<m@!RJ&#_)&dV8q8M_aa0cgZ+&G&CLl)f
zRYY!R0HMrR5o~BS)55YVnfX|*?L*pDXU#FIet?SDITn%gHXyZ%6pKY6AY>eiBvbl2
zmCJyZKj)19(&}9`Kie|sSoY_L+%0tF;r??Z#DBtoekoRej$rPm)Bmo7hDAl>0)TT^
zR7Nf!dLI^*kqgM%T9Mn8Eca}bNA3Usj%4Hl!WPd)Wq}5Sq-UctaseUf*(f6S88UA-
z!_ydbEXxHS(G;biF{(y|dApH$Cr5>O0U&a6R3<(kL{5%M^8!NT<S5L`pNMxO^G?hC
z@~Ae%Sv@T()dCd*oEDXb?10oN8Wn2+K**RD&6eo@1JiV)Sen6Jeq8%|%?w)t8Fxlh
zK6phNNSF}~h#fT`B+Q6f2jtxd&duHYXAKABb8Q)9=DAUMW`;(PF*n*?lqW!9ief88
z4(di$ULYL=0L}%Lg8;#~z;X~EI2S}M2X&(}*f*tv03hg1TL(ImeA99ezCzNQmV*Ex
z=}mGFRtt)&yWx2!>e$NmKcyWkd?%`U_2+5U=??#Rnxe{kZ0ldN@eTNwD9WHiT2oXO
zWk5)4ipp0AfS4niqQ&n;#T-EdK1ZyIy4FO+93g4oTOE~igd|~(csELO1T9^=llhyY
z%1!1~5!UioZSYV4F%{zzM%ZkP5Rf;O3wc1uZjQ>g;()07&C$qUegaKU+}bopqc`d;
zVz3B@O;IIkZgR4*PislG<Zs%dGEl5RlP;U0nz&}|&O>2S6t{h}Tj@@bu!W6!TDz@w
zi>)FB!WJtW(FPK>M5AI|2}nHAsvi1Tdbv|&c)p4{Udws^M?2#x_$rE@I`JY@MOpHV
z$dVoa81*-nQh*Tojg=*U5cv&d$pHmgRY7IX@u+e#_x(S$yPXaArx*-AfbV!zKGp#Q
z-|?t?tOE!S9*=fB2@le_4-v?Nt`kxDSVvM|vJ+AHSVxi|=tLBcb@2No@S(wfqIj&+
zkw4biI!sGc0$WOuMgJ3(k9E)(y#I;f=I9a53)G5KFz>zmSm(wv5G-agW@}WQwN-Ir
zwnlN*mgdYzhI8zl;ac{Ab5U`43T-Hz&RK~Fh#t;SBGSbkAVTC^G;p;XGX0zYThMdS
z;8lEKKn>)1(z$5A{(RG2MJafJ)s4`4*IuyP4kA&l$OJ^U7ou{52#9VkL~&+5n&PgC
z3eKe{YZ{?FSAEHr!O!k(8T{-%YKS8t@Ic0;D2{~a^sI`GV}`T;_l#CiGdw2q14L*s
zJSIytAhZ}BGej)}goNQS)WX>`T~*PlXiV<NGurFU$}zFaMy3OpF)?{MiAG==6T=kE
zpD9)00LC*hrc8~o#^q`kw);NM)4AV2t2vzwpjv*S^OuP+Su4N-5fft_iurmH5Ro=9
z=A9Z7wSow|R!oYyUW|!aA!*>79Fw&|l29wA#HdzKC9R^PoR?$#Njf_`S__l|h{tI7
z1SMXM$(ari!d{M9g|vzeaAwZy{G8^zd!}taI=`7|+mFs~X2#?c2NsB!8Iy~%Lc=pB
z=6EwE7H71bpA&N%d~sGt>HB(2iHduIH^*q65FoE2ZhS<BydFapxekk!LQ06aY~L8|
zhR|HF@U<C;Xfrp4Jqq5FpbgM`Ry$T39GV}KYcmju8pGP`F5U*pEo6(vYQGIFjL9`#
zAzv6RjA4x@<RC>Bv&1;aSsYXNWfg?e!f0^}msQ=l9GGA!n>bGE5m_3O>&Zfee(Je2
zhV|q!57vPl3{P{+(ULndPOHf4&`jf|U%Ympaj(Z9V%M;rC$ury3r~A06QE*<AdB$>
zLe_d3KTh$%gO3~7D=%nup$#$lC<{ci*$_jX;^Yu*fHtx7FKBm!Hd$i>k*GAbn|T|I
ze>3}2qjqa(vt^?WeEgfqM*VpkjDIWptWmovv^6Gw>e_*ie`^fMNsGr0l-}D|{Y0%_
zXj@D!FhN9L+hSN?Vv0f=<nIpl+C=U4(2kf~@PddoJ7QSy;`{_{kf6I*he_J?p<Q+x
z`l;(KYJ((38)V=f_RmRLMQD!<Tq2^)o)`)<u3rFg;<=A)o1}G*?6d8oq0K(B&q`XC
z7a5-YF~>J7GFf}4!~PiFyOBGJ$Q=ie9skE2pu*xHi(mQzLev2o{vghSkDs!;rfAoN
zKDAUT;_mpARQd;R1CB4)zouvnp)V}A7IAlcL2j+*ZQzct*pL^s{-LidGZt}od_`u&
z177F{cN}8PFKRbO4#nh;pFxE5L$O#~KSAr19){;g%rTyInW`NxI1<A;h0l;ZXl$oq
zd>z>p08Tq))gM3%;#5qoBLShysTgKRI_T^{0e6~RWH{(NZDl@)kZ{_{d_Zaxlh1qr
zA>lNQjcRWX3cObK)Jv$nt+oUTiq@FC^F$j+XpJSrV-G+`XpP~q$2h9JJqZ4s`{E_-
zd1v|0F*#d-3Z|c9a@hz-t;oxpXxivO_8P%nnWk;784;H?A4K#!A})_;0U=^U+!U)<
zK!_L-$Lf{pWe*DOQE{;~008HxxGb1};2af~1rrdQqvBS<>_NjD7Z+Ot0H`v~)`4cO
zadA2C;437Ji_5wR2ub7OsGB2Hc(f-9XWX$qS2|sDx(epRt*t>%a_QW-a47&p&W+0{
z1rQ?V#-&REA#!dUE~U3KJ;~M!SpIBnP}u^Tg?zXmE{|8x1}qEWIMwLOS>VIPZ1`-g
ze!yaD96kA~pvBfW03l&<T&^zxAz^VG>&un2(&`E5c{{G;;x6-zsjsRz_TC)re;Ys%
z(;&Ws{q4A%1_8nTc3du*0Wl4}9WTzs#WY9+J`FC9yH>`<G$?7{TM?Jjpd?`$d?#*A
zgFPuQR>#FOxbk%^PyryOL41M|t1YhrLfGodUhPQ%(JZ{$9{_TiZEMh)rrEXz#YeN{
zRWydAX7Vat+`4)ho{e$G0aiU%yS`v!T#bt~?L|J_EPV<9ftxM+07Bqq%cp=4xS4$V
zS6H_f*?t@Q{XFgIvTZgC`E*-c6TeSD8?bDP<M#=4!PJZLawls$U%R7hXI!5Cfe4nJ
z@t{})0fJ>`9E%`&BGQY{9`?d~tzY>byBBiYp13Bi_RxkJ#Zj~=hkB8*TVxIaAT3%f
zYXgF_#j-XaI9o1TyBAq|zp(Z|00`P|SsRdllsN<lN&78p147b%vi9#_?cRpxv$$ho
z!f6hUu-8_)Lu|=HtyjTkaWy6E-ka?HrL;Q$M1N@w4-lfiwCoND(O;6?OEA3NWUfPO
z(;}@?*&&;S?0(3~CA0y{A<Cs2IScH5n1vQ=H<cf@SxC@f%T>L(-4BzicF_e|Z!&yq
z?$yQG9;K$$G6Ja3wABhZK*(r~%VjhmF~u=e9is&7O`f=zTll8-h;zV2TLzs|T(o77
zOD@LcWgvJU<6<0B5KrRXaEWI`LK&U-RT4kd05XJtE>al~LPjKHDg#2uh=fdKK&0}B
zMDgf^NM$1MRDLGmdNv_aS<=8aG9go0l90-y5>_hrrZPL$ncyXwg_modim?fq%lHN@
z#wKKi286V+39CZ)rWHqHLR4q~7^g8IX9+-zr!gU;3lNeT6S6`BLQ-P_(e(|@xqS@J
zl!Rj;o47(dR4^r>Mnq8cp`e<U5Cs|l5~o=f0))hA30a^4A#qv)K}8YLhhkwmyKSX*
zQ}uL9ClDcFx}_5!HA)zwZ~;QX^aR!%bh+4va(fp0Vx@L(%`962S!-58{stIrAYoP_
zDK0nxAz@ZRzA5ZOXpS&!cK~qCu`CM+&N-H40eM@?vVADf7D&qia3n1Yh*2!CM?vAX
zz_Kj9Lec`VY*P^|TWxqgNjQGUwOOU*^ny<k)^etrOnXq6wi^IM9<)pg2$2UZ(*i=|
zK{D+&`k7rd4SHp6#zt*NhwdwrGFCt(a?)SIce;RJTA9R8r}&$zYM9frHmPh#y37@9
z{U~jIZs2~+=WGB?ggjb6z}ln?c|ZtQo0K6Bh>%~KEZ&e5Ax{Jz^6QeWe<el8OB(o^
zlQQHb2_e5eNg+S8kdFWp>EWbuH0jEHen5LwyB|QD_*C<Pa5yRB77$7uPRh6igz&>j
zYys$|0uV|aPR5TyDSDz#1SkbhA4$slwQ6$Z@uXM*0pQzl+h*ju<4Kuc_zLOAlU5W|
zQ}sTb6!`@JL8om!sa~A6^`v@n+SZfm#pxuX;5*8%8pCrY>3D(t;jnhB;7rnbCtX89
za52gAi~Vv$^ORq-yn#;;crhu{3lIV?CJ_Vwrj=n0`D!?;JgR+CK0GBo2qIBa8h=(s
zZNM`;<@M>~1rIW66zg?Nn@~O~CEwrFaIcR_wGqE-0tC;f6rPjO)K^33xs<3)?Y={8
zdM+j74WH22b17*%K;G1{T@9IiLQ2>UfFtQ+K-g|VO8OWOk|w02j{zZRLJGE<jX$>I
zsx>^5QjVp$;m5V8vtUxn`kiVm8SmwkFy4(PHBa}KEkocFB)*)I#sh@Jms2p_n>3Bo
z!g!vUDdqK)%bbCA+<eyMls2LP6p;z|4)&QTnF)YkpP7=G0EnQQnJRugB{G2sJQHT6
zTys()6C@3Mucc%rND?w(cFHRLwN&KhrNlbU^G8oncTf<aAc>*~2vz1;RtAK~c`3`v
zwFH+4D_;WuD=$e&D+9vHODrn`Ledh;%7B~|R;FJs^))<ir5uyfPV;(p^L3h^efS@(
zI{8)#GXeeem%eyD_D)J!m2&B;==oS*`FxCMtm?GZG;n3gbqzmL6Q3}wT*}q|R}}Qt
zL=;Qhnv~KEaeud@!6iguRX=F|JLtXt!%Ig4Yg4Yiwls3cx|Hjx%hEQclr4~kLtd#I
zsvXhT`5&}>4VzN(Z5vmPZ2o@A_20HQvf}2H>+Z|qwx*OF5Qo20CWeY~B}sHr%B7Gs
zKS;U6!!$vG+-)gWl`WS{yglWL_PQ*1cS>o2;6GY|@wbPF#2#tY9`3#;<*K!rX;-{A
zCI5g9?||}RA9cw$#C<9LKNj)d4FJym*ot64sQ0mz0Dxfqm=b`$)96b<b&!2>Mw?W5
z(B`42KWJ4Cv;ogSsvh+6s4rRV^OR!X<x%Z1En6eXHOS}}bPtB;rdE*gxm8U7A>(tZ
zCYR{dU|&Gbxs>u#F7KT7i@O2;w8T)Xp0i>V?I7ly6{~;{b1o&TJ|GhCTq^z(5|FAs
z5k%ELpF-6iMeoM?QvDf|Ryvwz-2BhS-T$Y@{_-gOWjOqSxCbBP|IQ8jMLVk0pp~Ts
z%?@MI@=gaLpv9PUdy$HO&|*v)>k}%CeQDt1)1ovsJ9SUR__Rz~d;;V6v@DH)U>u*e
zlD02p_@p#1jqIeNduk`y8qmIaQd(9<w1l8ZX;~QoA!t$>Is3*HNZLBX^LE;?KUbNj
zzwT-Ob{aneeumB(>L@ara^GtDC}(+7T2?hsA*?B_@yEc_2*R4u^tUN!cBmuItzj?c
z>u;2=v3V#a)}-Z@8g0O{CXH>tSkV!JVngncwwPeLY)Fe&$B;y#Hl&NiA6Wqe(}py>
zw}p44;=*Z58b40UUa4<xw<WD!so%sEK(i0nr7QJY%05WD#CwN29tj_$i!(gF0I5;B
zw2Z$Yt|KRJXa8)c*Hms#yTr5yBD&w6E)x4cK(K62<8ctZ?yV!Y?M%BW@w&IZK<~hu
z_;q|42;#{cK7)B@+9xhr0l~a8jf+-#icm+M+s%I0Ucb6*ciJWX8XAaT*_|#F_q%{#
z*`3CtKYD;%M{D%GY<GLTZ`t0oOFXFu5iEPtAu0@RY6F(N>FQc(2pkf&u<8Q+mdcj2
zOGIBCe^TF)_E$(2I;C$(S9aqsqwDC*@T0V=yV+Tcs--|rSAt+M)A{^IHZz^ie?-jm
zv-&zZQ~x;a>SERlW~1C)#O^Tkcm=59LKAHu;p4Pd{G}W~NccEi-dUeWKLo2cJjc?G
zsk!-v-k4_`OXF^x9--DF5Ix7!%1L%@vEHWv{}S7H&>`)3x}9(`Afz2n<53H(>Hv}7
z$J6G?w78if0>7p?k;eOD%6LgZ^qolKrj7o9jU>^NjuYwHzIu*k`g)4Q*0gf1IbVt7
z;Nwc?J%A$J@e%H9P0MRwK;AeYezX7xrCQVY(E|Ah5MF6bR}I3?T|6A}&pig}BScS7
z=0a|gPj@*Vx?p!f;da5w=X#zQ7t(TT3J4h&(%71cF6ealLONV2yWlr57t)a~`Xzdk
zR!`NlF{8YgahWG|w&O3Fnd@NcL);A@T0^2b+L)2`0~{DqW9D*yls%0Z^e600b+j=P
zela5!GH5OqG7~edDH*Ylku>m4%E*O`Bw-;lIYSGXFY@U`x)|@EGL9AO=dk{{@k+)W
z;1?ssREl2BD5c`n3Lq2$=DFzxgw<Zn;A{rD35bu=S&yhbFf=`*@ORBbM4RauylbxK
zZGdL5=~2CZXhudUA<Ll+%}z5i*zC{=dNG-GCi^9-cMr|XDCM#Z{ZL|Nrb{Kg8$}zG
zj#=#Hm|hi{l~H)Q6A^7@Why%By?7fK^ELKHOz#tV&F+hC2417Sgg%I&+3c4X^qFn<
zMK=SpsV}4f#G(ewVMF42ZFo*b;lJf0BHGN!;J19cP)mW~{DrwSaea?7yfCBiJSQqz
zEzDGQ)%Ur0D<t~z+~TBuyAob*>qNH$%Sor3kd6HePcGwF&mtLpu#wAPw?PM>{U{k%
zWt4Z>@QhyDfPabN06NURD&rSF{RV{fR%LJ;PeB5RAX$}3yo(^A#Sam9GOo_ZWRw(W
zusS1?QIaSbS7(rntyK8?k$amnO49t+8DX_q{rg%V5xDpUTQ^&Q3&`8b$AEy)sX2pN
zo!Jy?Uc<8~<M@<4Qlh`sZd1k`;<4tXSbLuZOZD>5`<9tOgktZLndt(?OFC?3e<;-}
zLYp%RPjw=q&E^bJokGJ)!L)_FQ;N{oV$0!Fl7l@s+CZVLOzWhVhPPVI0uh{B$yuZE
zv<Hn4W1r-1?SzU|^GQbGrxZj*t4}gGrJ&dags4w4-3L<Ea|jhb$y8lKx9h;L%YOE9
zXT2=G--=TZA!0wp>7%?2V(>slsgB*pqE4-lUF@v?CJaIk*#kx6flTi{`V{y9A`y-U
z*^^!LsqurhRuqm0Nvk^$Lj4WT7a7OdjME&*{#=4-vaV9ENq&*RZ&PRi-yi#dZ!^lV
zj7$H8{u*R|xgQ`}Zg!>q4`+|V8CO3ZFyb48AIZ2L{}lzJKAORXfM&`56q_e9%Bc)n
zdZ*sK0T@F9LHvdi5H>lH35qEe5X>hsctS-X3WyLrkx8GDAxZ=uq9?5ol@us((h5;Y
zq7XevA<DPa{Sh9XAMqpaGpucQ{i8qNpCUf-0Sf(?kw0byghD@NV!XCM1B%ZdDc^-c
zv_t$c)AbA#qUj3Xp^$;@TQjcC`b%^qFu?F!$T*(MI?XZ2hGARX#q7Q+{qOBBWbmhc
zCeoBLfZ};r?z<|z(0S9atX#%{imr!c<sYU5MAyTzSYp#00*Ep)ENj&8jtOFA%v%&z
z>;D#F!9O~8V^94qXTxY)ERAS%Rvxqu;3FEH#p$gOOS9kTY~c;uf%r;diPAy*twBk_
z2uEkTT7C0I=zDaw?{)fFyyA8H49}#jV;%;5Brh`H;U{yc-njHLCS~O#M;{G&a#qQT
z=>iZ+0rR^pHy}EgoW<Q1-q-@-<BROkYW<$@i&<IbK}4Guvv9>2j24Xmr{#`T>-o;`
zG)U$t0V<KR$mTaGC47|5Ggx7*{#JNKR^bmYh=@irvUq^8Q#3+4&t_lO>bt|UvkH$z
zG@@*tokc8e6pfItbJ^a$`upLzSw+0g^znS1o5gK<9bA8v;aQk<yvcHPdf&o@S-b(F
z9Jq>dU~yJin&mmbYU_1R1F%?t;VVYFIO`QFNI+=3IE#~Uia0<-+~RC(X;xHeBJdPg
zl9g3jQlRXTtgO<KL@BT&ixjvA9`a*Pk#($whi;4vc#LhR*Kaf4&bkx4!urWQ%d<*%
z@yy}Ie!3?FDC!zMLiqA5DhU2Ar`u27S;3y@r}ql2$SOU#-9bc~6<OSh(!}T|FTBIH
z_S0)a?__1U0+Fa$lq<TP_mgW@vSfd~Uub1ksgiQYH7m2ddXwqU2A;{WQT_G4p<Gs0
zbr8`emqk^lXAXWUq)qHA{MFD<Q&y>#a;T6tW&76Y{dpTC`6||9fPPhcmEDHQ=PGLR
z-*Dd5hUdMk<6kh)?^tuaZn9Ma^y>@X%i>a#ym&Qvaa~qfFTB_Q44EK^x9ET{%erh#
z>}LQmx^>yoPTY-vaO1jc*?Q?lB5*f0TW*vTXw+=EQIg1w&E&@KX^O<p7dB@d|7P2-
z(oY$iv+gi=ph*tg0*{IO0)#fed{yrTgxoFJ@(S8r0pjBatoRzeCiH>bhCKKIwdu&)
z0BvJ`zD5s+wjnUMRZZ@}ZP}i^WE+feJ6lR^wrAzC&g99pJ&R>sg3Eyicd+lS(Nm!v
zmX}TL!5!pfdN^Z}2Y0cGf%*-hU6z+Yga*6F%R(PmdpDal5Pj{oBFf|sHFi@(MYtTy
ze|y-!2kNoV9;<Gcd^xs<>PC{cLA~3{yo2;~Xm3{GkNKbgEyng{@t9Av;SV+Lp*H*M
zvGa!-H1;T$gS}M?du@;&|7}ZF5mP??)ClCXWbrd9p)+14eTYtC?IP*NAA5Yr(5D}N
z_=%wprTNr@Ug=R1zVly%5d`yxS^OeQbb#NKeZ<1o>hbVL_JG@>%}3eZ)%t@7*=r2X
z{;cD3cK@~d1BLsuYLG|jH591_v&v^OQh{MR5X9R@Ky-UB+flr*2ZR?7QVFAi1BggH
zn9Y19Bb5j|Qa`mKRZ^hHr&gp&5=H8#6sZT@h|~b~dRfOsH!^C6o85PdUc_p*xjngs
z*Xi#n#&Iij0~ER^E{854)B_fw3y6+RP*~FPEI^@qk~QC`mxfMSt^pBkPLgY|9!49W
zQ%oDI*N0D869b4urHNq|O&<ZOKCQWj2kSRGL#<Y@fQnYF6fE_;5rX#&`}iikfB1~$
zg8&cSGZb{gg(O7pg<S8O^*m?zg54j5?*;1bMtEwV;klG`jAZxRqTgU#B2UrEeIR*i
zc!}~1d-oQs-0?5rBG56+;U&^VfKYaLiF6SlTr|8S^Gu1D6NtcFG@?Y#36cU0MwG}o
zL6XQtBTC3cG;IeB&-fC@#1eQY4=eZY+`e4nt@vXr?Z%h5JMzL3B=0=W?ztUn@8?V8
zEDIt;KVO2uQT_(WDHGWI+w~j56H4R;2Sl`)P=Yn{IGR6$Wd9dfhdcD=Loe8kIF%aR
z&)Z;}jcnZ=`h(%d5}6l4?vut6{3(dv!jgjw&y*6!%dGxR{cdAQ34R$v)p-zEa%ze4
z5?gYoUfqCyiFcu(L$|3V@^2mkqKBy^c#TKF4hTz5ElIs3ElC7!NoHA6QlLAtEGbE3
gNd`+k;KBca#Z!-U-Fqgl6HdTVD0}P=ztNNbA1qRHGXMYp

delta 25291
zcmY*?d3+Q_+W$;vX6WvyNg9%w=^18vj?58AxWkn|xD<4~)?-&!aZ%aB-B(?YJ%8_p
z8w3#}U~wq7f}En@aEK5@<i4}40*WGnC=f-$A?WY>R8`Zyf9yxTPgi~Gspom>si&)J
zvQ2Mh$1l$g8Q~tGjK~||S>YXbm;0yO^LKfZuj+Gl7wOFmZ_qVu^qNL5{^!fBX>9gC
z-QA73Ol$S7=CxmVbdUFXrMclbTdZWv29I_39|l`bKJ~<3|M=+Or>rM_XFc<WKR#{!
z@tMK@lYZKIYVgxfJp0rmgIhy7*m`>KpZ{#P8T8DxhZg=#oph_;-yiwIpvQlY=8rxx
z_-X6$C!VneJ@UxlC!evN1j`==Jw2Fx(NitX)2$3U`mkmx*$Nh^QB!W6^~HbKpK8<?
z{{4K7nvP!6>1mK-1WEMN;6D%g$KXfx+`bw$&uw86as7JTOH)#4PNivmlv`K4HyFO}
zi(OaQ`CjTs<NIQ73;iBU{07Bkc+M9q3ASgVc3TqA&2fZt0D|LuaV)Nv^Tv4C#D46p
zwuv+qD^c0TjW$ii@q`}YZGbMYTl%OiBNvL564^!}X>rihle|ry;kn30^-)uii^Ym5
z+vK6m#p0F`y#sIKF+7*pwmxd7$faVXrEKFtn@h!3Ot0W=yoTp8YuQ(A8@cT8c+uuE
z@rbc}hUW+Nr@k2Lhhiltd3<Q|LvgsJ-iGruGdx$=vc76N>q@a=&%GJiT%ox)6zPi3
zZTRMtxZZfDpL#$om{X#b=>2t%&rSB5$Bx~q-dsMf#MhkYNr<lVN?K%Wi22Sd>Cj)#
z@Gh|8>+Js9)Uxu|OMJz$4O#K^l9JXoM3>h~I^U+>#Jk|(0=E1%bwHa1CB7E24H<Po
zNpYDC(PcqNr(5*573ixNzGWq@g}LnQYI}F#vJ$meKUM@Tg)}~p`_mojakb(=iSK&e
z8&Z%RD7k@8o*IGdKuNZnKA{!w1fAc={rf((uK4CR{JwzfL`uKm54N%)I=$hqyj{Oe
zS3E5Z-(tV3!SB}d^*m2Y5G?kqVSScc_jp>863hIo*Hm?SM*#S7nO{+fhMuAAGQW16
z4Z*t1Ur?yWcuzcB?q`M5)NtpPiW@zbJ3Za}p=QXQZuDI4FD}uiVv&OwHd*ag-p&2%
zNj0F<;-9)~s31sI`}6s<s2yll`-7JK6f~>-iKJe@)l*cWDSg+Urx)oOHCIP#2D+^A
zd)oY51mmprd)nz^#gxIa!LRtu|7Q(&bnxTPFym=;XeUVQY3G4rga4ZHdAvQ8e_i3q
zdko)Zzp~x$F(<RLbF>_r^@{pvZA--i6X1c(;sMKMzg8r5_kd-yzeTas-2>e>`%AV%
zcSBd9y9c@>HGJszZ1a1i@?3^~Tl_u)&1i~T<TJcm{l4{XJ<1irxVzkb=6=j)!iQd%
zaF<`PP3VOhyZphhRKp9pUH)iH|54ZijStLU{;cZmalr9{4~z%=`L^m<a)1VpNT}cg
z#Q}dTp-<BgT@k}~((l@yJNs94s;Bg%AK`sH!YtCv@SXN6-}*iJN=0u5JX*_h30ZE*
zztoQI&S%I=g_yi}1}B~Mduo0r!8nb6PY3-7**$_t^<DHUS95{?RUdHI;-A9OcmVw_
z`n3W+ML_hs=r@{kO9R5v7yT`+N=uV~Tl$jUb46NO%Fyq!ZD}cjrGMa-zASV=@);gb
zo(p(#=l-q!&0Py%Ye6ADJfQJq3~edohX)Faq!w;yF+5;A7ZCo&bD_nEfM-lV_*=?g
zhmiqaArAp50@bJhavDXs6v1z!13rJ59_O|}r*Q%0R<niG=ZVLk8O+)}sWyK!qA1AS
zkc-s?2)~XCNWTI?<8c8)ga#mn85f9(#RjMnjQv86N^9!|-XeaB-jWXrG@ku!s2Z&u
z?~IX$F~&P%&{`TFF#OUtw3fyP%#aN+#`r+^COJl)9AkW-<&C<@$G`+81eAW}b=I$*
zc<NE>ktd#g{26;X9`R7u@1t}T;R|p=Aiq$O(*m3jD6+?*1vnuP;hQBj#?TW2R$n<Z
ztt(P}LLk;h@63k=s$-82Q@cJ?=S<H_QfCZWU3Gz?gdCDqS6v{Lwjsu-3uJ5)dgT~(
zf$S~%c3OWC%6F5QZ@9X1;ACeIT7Q!r8`Aol9FXe|T`<Vx0JcLhYaa%g97x<IC*qSf
zoE%8rsz>-3*i;#7H$t@rGG~lt7=t-uG{YDyVDRl7YBj?cEP(A@jL{5Zut40NNHaMG
z3nXsQTk|o{U@BWSLanHt>Wracc2fiSysiMLiZP}JLN=+2F{TERrTSaK6q@0Am6;>e
z6$4*&C^V?~s-va`idO@MZEp<}uLe>Xsip=kUJYdLmZs38ny&`R?$Wz+HFd)?i?tr5
zR#(q*#?YbWtU!KJvgjCNR-m-24Kc>7KvfTYy_ZwuWB<&(K1!`u9$M^h<bz{zAYbIj
zh>{PE#epc_k1_Lna4Zf~w3U?k&~tI1-9u8(eCTOl1uqV?AE=-7@lmeBE|%N;ocdVa
zLu;H-uEQv60{Og{1MPJfWlg|uFW~Di%9;RjyKvfd7-dZ$euo_8IyuUkK;m}&fJkT8
z8=m^ygz@UV?%H~1l<P4{eIVbCh3hd&eIU|K(q4~I>H{4sZHQ6o1Dzihd0V+2qZE>)
z%OLDnI+WxR56X=Cz`%$2julaEFg%+AO57|$VgAhE$DjV=6YPe^eAjov6O4^VV)p{X
z*qZ`!_X5P&n`nl7_lhV5hG$!V4Sm>miOqab_5FIAGl>EO&Ne4-3P7~YSwjUN+7`eb
zMg>yT@a+t^&IUw*6h+IO0kx$lkfKx|?O`=j)mJ*=-yq#%r+h#(-4l@Y5g<tS1W+F>
zA?rpdy*A`_)~RjW6%7HU88;ZDBo3$|O97%&L!fyJ{gXW232|^ZS2j^S>aIBKbRw?9
zPA5v$hpE$Cs;8m^kLS8fR!f!Y<F*MPg|^3S699tac)$>=5s*3sP@Pi|5v85tWPsNY
zodDp4leQNC(etG31wiyXdCdz^+Eva7FAM|#(HTbv%9m#x9VlO(vE6{iU^-*F!7_Z`
z23*evg&Qoi{5GIQgc~e!!}sKdIpyEm4uBAizPB9!2)ggd0WnO;BAYd_f@x}^eUsCL
z%-<A{#U0w9OH%;F-A+nE7FDK~1Imyfdvuz*y%zrzn++adBA4xn0D|VSy{`d+<}&ST
zRG9)|x4#?+4+)COlmwzO{UIPLQz?SCuLMw;HrMlcH?;EH0O8eur<>lq`_H8q;m3fd
z`u{eCpMDB>?iQt~1ucA|g37qy&r8$CY9SIu3K~G|Q9)Uh0)li@P!^?tP<vFcWE|9{
zqLc)@R2m)hj17t+Mas}`Oi&i3QiM|JxgZs#w4`E&?}eai68EJ)&lAJ2F9g-7aAu60
zSr_Cl9UTB***aTAK(wt3%0&f;q3VM0X%_y8k=ZA*$7iUmZk`yFOA11g231i20;0>r
zAPPXzByRX#4!Y*csEVWI%Rzf_$4QZ?LJ{`wnX0dRs;vheq3Kjx4?vJkB|Rv%;-trP
zwtS|V=rrBwLV8RO%Gg31beSHsUmW5TTeE}8>yCFe%u*k#g-Cb@4bXqK?Hxe$pKW^w
z5Z;*`EO}jehXmX^bAq1Nq<5qY{pQ-<ks^3!-Zk$e4Bs0;*D~8X2@Ly2&|Yc@GRk7<
z9RPS|v8^H?+Ag-O0*Ij&lU4Bg?n#jTOW6x^)OKx_1{EJqco32_*z5)yqRY}?k)eO>
zg?o~Q@4cYwKe;n=)Kf~qdqFj%cLi0Fl-R&dyry=q*kDsZ2&xUiX2Q{cpxQu=o=OQf
zNyBf>-SN5_a#w8*%9RT#7RlydzNi@hsZ}sp#?=7?$L3&pg?>Ayz}nl&=FeB}tlH`@
z(AwV`ly!5GyJ>4sCQ?8!Yz-oj_T&seJ6OjBYOkst4g;m)9S#F6!yQ3G?9@rV40i-k
z2~jFeQYzlfmM>6a6}y9SCxj4Pb_eB72#8^J2ko6ONg6i1{svy-8k|8X_cl0#QtoXC
z$}$o?z|auH7PyCA<4W;r7Ie+b^;oFx_7t5Cs?Eh(EhR@ZifHHz0Ln%?8UR7rXh#De
zC>tpnJ|=&Z!XLg1LFH1eahZCbyB7ZxfsP00cOj^WT^<nqE(Akio;?8(=of-5FCozB
z^^gP<=$?x~PZcj_qy)aY7)+G^Tm+(v!8YCXc6@xwu0bViCak-k8pO6N$3YLUtptV3
zm7peGO-i{NuLP08AL4z%^b?D|r4B0p$>~CV`zfgL(<SId>GP*xiJuP20O7Y`Y{^?{
zr}AN@%uNuY%P><FuZ4i<GR(wlVI}VZbB<&MZ>wD@N1BRwQz=!*Q6tT8DUVP<bQx)8
zvif4G5K8gN;2Uo$FPR>5dLC<>qm}0tzODYlT??T-HF{$hZ^|@}9$*-6$}|rM`;IqD
zUNS|RCjn0+FPNS>Q>1w*L%#{8O!HENMDn6ZX}%*@2JaS=O(kZgEH-DQ+O`@%?3krW
zGpxJGW<EbxgWB|lG1)8;#VR1UC!2WNq?j+Im(3}rC_ezubBZZL9}qpKm@@PM(Q}Gv
zhkmJoEpvv+i@-hraKa2n2YP*&Vak<@r(l|4$|V2@rWq!dz^yo!Ex@^=>3W?_%c;L8
zm}7dI)2p?&fZ~5HJD*dNk-4TkMuiZeHP^&3Ds}_30qs22d6k-o%roUNDuie=&y>fX
z1$0LE8vFYyH5GkLP7NKo)I{Xpk2RP=S~gv8v30A|`wHGL)u7%Rwn>o&i&*JuwQtoT
zdu9+~W{d2Z0YZgErXk*L0Wq^hCXRwBFQ-VqrR=rUYP+hX4g=-IrDi@qiKRBw$TY?4
zKOh*EnmB9g%Nd~ka%QYiZ>(PKFi_T6Zsv=0oZ@+LxmjrIKzVUF>2NdVmNtAVP1hkd
zd5t=ta3!sW9aM0oX>zOCnKkOJs?|0zgdkpRPYw{Otu|%C1qAVGGVHUQ0T0))i)+=t
zRj+dx=sa?r!$6Z;XUb!UG@sl$6Kj1Dz0;-13tMxG-&L0=<y-Bg3n@BnB{$If6d;D(
zYT~H67w-eKgN<6R_Nm(849oMpZILuDw|1C?BF_U-9}{{0R?filymy0od)01-fld*3
zI}AMSI}AMS6T{7%0d4oO7dNQCsM+T*&;j5+GhZyUG|wjc%$6BB3(6+@%vP=SkA(e^
zO%9sM$1Gg0{<jwY600|@&>6%*$AFYk4%+dBr(iiqzNLB>5E<p5nfw?Th0dr*fQ*7R
z|1~|We=dS*ADN!t=(ivwGKTLH({<c*o7L7mPY?S2;9l(MjcU(=PfXR&gP322g5xNw
z->8PlkJ`x%La1`olm#LnhB<0t)4^8{biu>VnfAWgvg&htG7w@ipWBlGq(*i$0D|Fj
ziUurrFd!JdU=P2qCVPD0Fi@y};V{rJUzqaf3|+wR1tqfs%`ma7;X7x##^pA>ukOz)
zI%lG$;fL*6n$IOu9JT|1@{&C*Ku}(?rv(VgOEj%Xl=ZVT;LzOPwx}<=D~5(-qKA~k
zAz5((qSMe2Do#qOS(?d+kVvWku>FXTOsatBIU*#JDj<4}2-!(BOK@z6C)K_Hh}5wm
z85)34d~8T2RX{L}4auYm$h#t`jwV}_8NOFSt^>Ibx2vP_ie3q+0bz?Wvc=4humu1p
zXWG*O1m(<-bTJ?(XNF*lS1D%8NcFj_e2+S_Vs1#u=Yb6&Nki9(?FJBi=7s`6eVyn7
zTP$Fg_o(Y1T42wljK9<^uxA1YiUlD<9IpU^VnGN=p4LAg_NWD+(9Jxa35rvj1)=Z&
z{frm{9hS1dKDDuGsWV6(<=IfaNUUYtTuVc-E|QhZwKUYdioP#l5LkLS>$_haP`%t?
zpx5!`A$cH!Hc)eUD3X;7loOVRT9@meQPovOk-9dwZNK`6yLzp|LB-%&XR1_VtPL6B
z%nN<Mu{M;>=<iXql~Js0%01SgZg5v`ayTd_Y;rg#Cu|DIq>4V^*c8GtlEy%3u#Nrx
zpxRiy&7q*8U|T3(WW+LF6l@E{#laXLD7J+<bmZ|{Mh4$0;+HM`uj*^F(+*!e!q_|Q
z@C8K2o!7#*jB0}YB7FM*z^MBj6{sfI@63W~g8g>*qA{5EhY-F45WTIC)<Uk?Ec&t9
zzxlzCYU;zu#;p*%zQZBqv)n&FRuy+G{wdNX9)SF?O%4e1!y!Xdc7Py19KsnirA<Jj
z&BGz<vrwMi0%v6;;0FMP??}jVH00&)`q!lB`$-7JSPPsAToa-k`?N4b_1IYo!B!N)
zCs_Vr_1mfwj#jkQp9sl~8f~ais8DQdfM7lm!p8O+&Y&3HQ>@Do^}*Ux4g*EiDQ8|Z
z%&CwpH(K$Paw>%F;08V~IL>=2l$_w^O9hW<H-HMKLZy%L?^sflN6misf?Myy2ZkD_
zLrQzIlXb^agMT;pDc0f>wQChbwsC1Coes&0r4?UEr$c5rUk8A^f7^C?4QGSX8`*Q8
zsJ&|%9R}K68y!Q?N@@(r{kat{&KpD6UH1rEdJW(CkaC&jf2!`T#lLJlXf2(0j6rMZ
ze8>>>dMmz`&WBL13nzQw<ny7j%h#Mtp8;^nWB8gvo=ex9ETx#k1;@!!2q#}G;!d6^
z!Vh*B63#t#RJGjIL&DeeqV+i>EE97p`cw`m6Eh&VhlKInU<$4ARtnbVnB0e-sngt5
zV;l}zpku<<LWQdKG2udS7K}dN7!$^Kfq!!fEYRoKtH;zK)z3Q&RJ}hRmhaoG_)2{~
zoD|2$fM9q&+_97XfzSe`n3B8y3-v>H^%RFg1IHAHgVyMja8jg+R(y?433uqEzb`oG
zR6jTHOZ5YHk68|f4r|N`%g;fr6n?B9F0zAOhaR)S;fOw`Ig0;6!?z>s+Ls%2Qk|_8
z><D```mW(Eq+Mz!EBa2YsNES>_~&dAVl&wp#x{E$Zv*9ag%$p_6c1@}0rHRL1krX^
z7<-p!3$#0|@QVX@NXrP27tjRxQ+{woV?)C|*9N_lhdVHTlcc9;yeEt|NkNQo-y2r=
z?uUmI*ns?ynIPKk4dcA{f(Kcxwc-0L?7EOEIH&$qDfldma*JMIThnBZu}SCEPMwd1
zWr+bHsE&o@UJMAWj?sMR{jW7m;7iOM?|*%sed@1l_IcIM{7q_cIi%uk6m58;YYdcb
zz9a_vB-5Ja{1v;eNv$sb%IQM9Upa%4DZZjEJ$M(OZ`k`yYEAh!P8TXezHz!xHu#3R
zRP!z{&so;?g4(nEtkZ?8bT+JsW!;)D|FhxiZ_sb#T@XIsu~#mr{mZ{|y3ktxE-X&~
zTJyF3T^J_-5A!aF+9p<XQGK*ylhcKkVN+PvXs!7&Y@*<qslylLhHq?3*XoGdd{Jl1
z*J>?t>n^HZZ{gUMs2VrnW{{_x+_EaS@2a}FtmCSPEZ`so?W#yn?BIZy@2UuP@J;06
z3d6T4;yNF7n=3tR=viO$+@~3>l~TGX!e3|dJQespza^sVh<Nl9ZhW7wkl*J?#@e*f
zzU;U)g2QGye-V%1rfm^Vub)XU;C7PC&WDy2q~#a60j;&U-tsT-t&b;VNTKBy5$StC
zbowF!uizRJ`rzRS7HqGzdH4jrYsxNscZxI<bsgHE%ZbPh;w2LhIp;*Au)9!%9}VGq
z(}_q?H~zhe8sG~QeQ!Du>D+~X%B`Rn`<g9muXQc|+EI;0|2iVC4WJFi`8tBd*NdwL
zbcPjn(E3!LiO2+7!7JZ05t(2C!Eh#Gh?D|IeInRLU#IP(f@-;Q?8Oe+f~s>41=Vur
zBC?i48&I5!M8p?kKv0~El(o{I;S31D3+$PW+Fz?KI1KcDcfnzxh`bPqw3pVSO723W
zQ>9+T8PN7JOLfwER9$u$XrH+3OoIaSazvKB6+A#MM^N_Cn|}pu6Ia=+PTGytR~-iW
zdVJMkpk3l>M82S-3v{>|X&Ke;<_z%IkSI%3YWGwRiC(j%3W_1oYqq3<Zb(!fiB|A!
zVn{TZ(znz1&<ZN(#^+X6YPaT9k9RnzlpF7G&^9qXdQA-~<;F*$#&fhyR4CXcCgpl|
z)5f{0CpjFnO-yn)Xq%Yi=t0}WB+}z8Iw`17@b!0Qu343~LaCnVaO8tyro%yBe`iJw
z@r53Jz%et5`+v`gxWKpFdF)~jZCuqnhvGU=%yTH{)9$>eA!?fng+A@hi?(gAci~##
zyX}0ozNgl$*L;V8KHJWZ=8N;p3WYw~&W{Gfo(Tws`BChd-8ch|Qx`^+Zf0wCwTEW1
zyKA(TRS<|&SiwKTE{w`b3lLljqh?1LWAtXfFxt7R{s8B~SJ<U&NsTtJYN^9O-(QzH
z^P%srOQVK3g{V;I`|HwZt8)F9oB=C%IlHNsc6ZfshoKM*%N>S7Ff5PCH<k*e5Dd$s
z=`7!eDwHC_vw|J$rBzm~a2Sffu)<*|0>g@^EXL6V3@f4$OK;D0Fbq$Q4d|_PtjakI
z1{iV<16?l5MddAt3dI0JE^5W~zi<XzU0uso_tu`STI(=02g6#2p*a}VI<sgFhP5<{
z!JMIm;aSiA&`0}y)q01a1^l``D$h|XlonuE9~Ji#5s)pwus+(RoqiW*C^kGBS$<#b
zo~n%wLosyN=;%-khK<fFiovjvW<h646-tTW`GCFBSNlcv2M$9C7(Q?qO2F_zR93v`
z0)`KwnKJ!F5#W9tl(Eu&+Dp}29ST1vwmKAkP;8CLH;4+w4~nhPc+y_00Teg6@B7hO
z-Q#csz_BMPOS%dr0FFJ;qLd8F066wUv#rF@VucdK2M+e`P1>%S28ROQ#XJpBc~Jvx
zK+zD5c90Z7P&7m<yXf!YeGJAh4d1D#@=b1Af33TB5dLW|5EGi5a%N+K=2TRc+UN$F
zQ&GG`(klQUUI9);lix(e@fZoj3(?n6&;Rgu-3ldyQY6aHYS@t5G+&3aQMuFO5y;O*
z<xveF$j?S`RC7dFJB*LsQ6*{aV!evhF6`Uev^hN>ur&=s)9)Qk!yx<K(KHOQ?@3dX
z(u${z;kz1jjmqu4UEAm`x*EkN)e$sE8`|B6SZv;%+Q{l5mgI&M#vEeF&;$hc5UWHS
zm;i!%h=p_7?*#{*j%2_4rPkDAq(ebRb0aOe4Yc94;z-L7hb4fZ7-``Y`U_I8t>Jso
za!tuiyGuLfE_l&GE%RGw*Os)K$ezDPd$@d}B|oD;i18*`VR6&|2&#z|Uhb$=YfGCy
zW1)MsM|&_^83>^avy}m)MwZ;)0l~m5?C;}nkK5A@CtH?l9$R;>Hnznp7S0Cl2XQ;n
zWrn4+Fn_`Ra>8e_XMd$tS3n>NB0L7?3`<rWfZ&{Aq3UQL8?_^~=CY%|(hgS4b^4GV
zb1h9AZJ`bN%(ZZ|^$^r(Z}{e0t_|$?ueE_C^GOX#M(v@7Z=t0uvpnV?QY6T>JgXJ4
zc^|7WHt#+yR*Q#1B{T*7LR%$3&@UvFD0l%8ybG-s%PjG=hy?s=(IU&U)DmBdqzwHQ
zTk>m>6yeQviAARqlw;e|?B24J5;JMBzV~Yt<p8!4G{?6r`N;|`LH3q~PgYcfw5I}Y
zC7XG_cH<)}(Vs6?2+?Jw<rg1z0nufpB`@CrqU=~{W$xmIB0+vJX{D9@B`*}EgbKx#
z*6nxjRoI>=R$Jo46adk^+LFr<5W}su<T3>0ZS51&_Ehbyx5Qnf7a!1kzglmH6&@k1
z*4tqP2%`0tOcsD3T5n+q;<|#j$nb5nTw5%D3C2r1)<(-4<S(N|6k6}I(+_ABk@qcy
zPumM2Z1X-%yEk4&i^wJ)u&xhkeIp-O@&-MGX!C&;i_=wkv;q2%O@C0k+4|5@_);Sw
zNolFgq+cl*cp<i2|6$&N+Kd)EEN=n5@p}zYVJCRwPqL3jH!Ek44b%ec%0R6$0x7S9
zsSTKR(mJ`9cY#K`*&PpQzmDv-<SVqnHQH_AEeNX-UC?7M+x(FBXk@Q6I0;E=;p138
z-Uepc&-(vXyD75Yk{{U&{uaESatscA&;?FtU`u|h^|l%u9(wz2AfD0mYSh8-9kpCz
zas`7lpHg&`k_bPY??7`qW{DGN0Ql^f9iD)g#W731#{fc^V;0_HKBUsJ16lp+-1$ee
zt?uftZNEc`0Q%ZakAT$5DiLKNAUM9ZN>loJm2*JLA9Ftp)_QrWe{?wLDE3E7zAtp(
zG5@0#;lED6xD>EITG;*Rz`p~bp)nD@0O&b1Cc_sHqYsVA@CD>;?eOhDmKz=8;X43;
zBbnv_VT;i*nWF*0G&&~Z7Z6ONV~F43WZsU3uP)|V9&?-D=ds^LRWq0TGqQD2T}+J$
zLw6)YPl^dc1Au%|Oy&VVkWY$9Lj!_*QVfRXm%uxcp{M6gJgz<Du9_Z`3POshPLIhW
zc0g(si;21b5FFEE*)shfFj7Z~s+nxqliI(kXF3dI=9w{hRTXW(Ff$esFV}!zm>IK=
z$2$_7pX>G)4aej29S$=1{FppCLnCm^j}?k+1xTG@c&#E=btHQ)l&%6m&xN+D0MT=y
z?J7X@To|)m)sc>3-xRK5wa;k29&b7-(8=VRwx`e%L~q)j0tC^U<SA4Ril>v|dne}F
z#@>HMJM4caruy~qv<G#9dwi>7%6l=7`M>P)bnIb!p4A?&g-GOTGyv`Dn9S9Hpj{o4
z*9!o#VXTgoycZK21_}6vu_oqO7ZV$Xl%e0+nA|X=2ph(`G1@Swob5zzsE;XknEfoa
z?yuVI4*`g}29Ge+dV8vXys0ei0l{4#lefJAu^H6ItlRm4G(qw0ral(CO+O%Jjj-6v
z{`5EPKjoX9nUVsVW19Gu+KI=(<`};7(Q8X53WKfe@xN<#_t@&_MNzQTjzzQq!`4_#
z6qtb2Csx^6zd*NcDh=PUm}|~E|InH|MaN?JEfY^gm9#>>6f2|(05kp4)(H@dU)n1K
z5R6~a3OS@esY+<<I~`Nb!h744$#<&VS=%?&!d$ji)7`arAbf~sU^yL=S8xEqayllj
z-~hshr(-S8!iRJOL;~`m=S)mq!I2Ue?MzHw!I2^mor&QJ4t}nLerWJr3|DYk@+&xR
z4bhVAfo&zoyx+y-6&y51-|u4hg7jzJ7pMt~!W_un^s6D(^DR|p<wLc;<&fG8WZtHj
zJddm7=531MJTA={u*fd48AG+~!<S;>locw`>bhjFOF#^BiPj~3<pV^dT#AKml=G(F
z1>o)UQY_q$mkrcFo-bXB_3p#p$17<?USZi`TDKlo>_C8!q;`M;V%RG&`R)jaVXwq+
zl0KTkuaff5kT{z?OdC@*Brby-Qg953%ghT1jv;YFoE8CsV@MpQMRb~0NhdYK*x=z>
zo9bZ>1D(_ia~SBPW?0-1sS#bkFf5MLIEVJJN~)R0=JpQP=D91!#;+Nf&Su8O<q0Ml
zq0`tn_HKS5sS;;1zL(+(i`y5H=Cfap(tfIi%=Qu;%)Atr2?HHK@KU@*39m2#5o|BT
z{VXmL1_^k=m>BoG92W^g%Fu68TqX=DLc*9Fr-VUiwUW+wro|PyS<ZZq`HDM10?R@q
z?wSEYm1%Lg4FZC4THMa9m2|!{E6%sU2LTX2vm8^>DbFm&lyu57D=xP|GzQbGxGdwE
z8@_pQ*PC%s#?edvytvokWn6Pw+^?}GpF<h<T3q3&#S0-;%4>0?mRnHBG^d3zpS}B>
zc57sQT;Z=UBt)C}alFFd{s<t@8!SCmyFKzoT$XVVk~EGo?mpfIN-biO#%jNbEQ-r=
zusJW97R6Bx3LeaI3A=tAc$UN!{uK-4R5UG#<11Dt&V#8hWB(kdb+(qpW$D>mp&xiI
zi=*^>(}$9=h2g7@yBczP$7yZy3hHUT^vl*3G~bP^V1o9m$VPj<5Tfr!nlFy@(FXI~
z#70ceY9gEB@|G2ZXtODfrHOMyv;o@8KA)i78`*5n1wxY2T<+v;FyAfg-WRpIB3o>m
zwBYmILN@8c+hD%i*oQA_{UY1q@&~Og_<Xm;u^y?AY(Xn}2P>=7dPjD|Ww8k%#@Z1_
zv5CzIZ4g+y*w{Mlp2)7aEPf$Gn_Y1fzc@`n8?4Da>}s9%i^v|Q4gH{X54FL%MH?)-
zeeCxyX>B6=WSo)^ZT7{Hknw2-5a*u<*ov35PSyd(J{sB_Ap5*SC3~^qI}~?)$+U^u
z%7R02Two*f7nAu9vz-%R{=@ckAw<{1G~EHb4b1-u>pe-kCGv@_LNPc0C#1sv@;2!4
z8Cx_-tBrhSyRn#?|1)x9FWv^`KgRk`*7_ul*=8%|=08Se!xdZT1M?q`<Gi95Yg4C%
z*|y1ATMGj5D`q^#ILG7hgnpWel+K3ltGH`CGhf!eDf%joB8BgeooQB$ab81q0D!w1
z?Q{c(=`_Y=4G9RX8spd@>FBdFh1xlGoM}~6=j^o&AsEitYa5Un#pV4TKro!6SyH0y
zOd;3A9-M+i+vG4%I5frOXHT>NLsL8{u6Y20p(&1Q9^)v{b|&~^ZtE0nyu0GZxZIi`
zMW-L*vSb9LR^;CgXpiVjmK)ASOw&HB9-fd}1cVrOctRf40)k?A!W5M&ASi|>P`Ofi
z>`Y-jDj{AF0MK((LS{xl^c<CtnGp~@M<wjc*qNsHe1d02w&xYi*XMah1=^*aPsm*g
zEkX2rLMBE)5IvtjVjQNzp<R#}6RwR3w|R@j{&m_L%(Z`2JC;{CFJZqQbRpl)XG34t
zUg>~;gL{5L?j(TVo}ZAe1qAo}1YAqEXS$Hh7qahXYXiy`I$g+@3ls9h1#Qq}VFJe+
zJ$V=SatV8Ej@GN!5_>{j_`RSd_Jjbzup}XCOF%FzNuaiThbpcvfWEgA%Bn=JX1P}3
zu7v<PLn3xRKy-gQA$LDObbmV`%Vj|9es3pARwcylM*_b4tw?xs39<W08TzeE$lXth
zu=~A}uy?;M6d-He(!W4(*;?DbfKX$t?O#C9t-a>oE)*K|!oU3iz*O(pgG!lt#~u_Z
z^|pi27)<pEI2hMxJzWjo2MO0<__wFUX20WY&Z=M6Iu?GAP!nS5b|v?2A@|NH-(njH
zLU3-e9SaD~E#%n0!o*$40Xx_o^R>U1?{K=1V|OGp@xubNL6;o~{IGz&I(4N*x|^M!
zuiaa|J0Z^mAw-wmiLfYt0MTW40_6`~8R<%BAN%_Pt#`#fXB6_@zJw+|@}UhiN+5UB
zg6c{ZZ;%EDfWaGVg9D;xgKcm?^lZ3h@UCR=Lvlg2U8wnbAF}O@NBo&wP=FvhWZN4M
zM2E=U55nHv4Bw{-*Goyac{{gvguT2_>st6}LQM&KcO!d$E|wGi4d&17$pM1-bKB~G
zVE&w}UWUnaBV!$BOBZRa%a1!<$m+-K<%Blqa-5daZM+Mtev&m?tld#@(&<7(Cv8V{
z<5oXOj@nJ%)Vh(`n{p!;YkQUICff#(LenNY<^aLbl#t~!AazP$|2jo$up9Z|YHs2(
z?a%I-s}2VpTwHZH$RSq~^7|nAfa7Wc`x0Nr-QW=4@T4*(*K@hn2|w*l$_0!E=r=qm
z7ce0D4NuAi42T6hJXta(DHbpZ_yQi0^o&l51uSLgH!>*~uoPhdk4oALxEm$eamk;R
zuaF3lC|?1g%DALV(tw~Gm$Z{~H!3&kk~~TG1%OfNl5(Q}gfZ%pGN=H-RF{-l8W2o%
zNd(n#+IG7ezR5|~BKFS}+80HWld2_RsXN8e^rYB!0l+xjHWMHirzd4@1_a~uB!Y<|
zqdUdG3|9S)c1P6=TPFy?FvHdfkQyZoF<C$`%t)dDq3?{{X+_UwTi?+JR?l`A$YisV
z^2fVq1BThjQt{Oj5Dc@E@<L&ELi3V*`(yvkX}&h|l5+RMBXpc+8y1i^wGG>y;%lKa
zEC5H+uz;AvLT3^bWeaV?;whLGl3`aB!?0C`@8hKF`&{EHEvFZKoU{v?DzfYmVcCuV
zpgdw*77&z2Y|8?I@(5XWJN+oGisqcljozf~Y*Cpjl{12r#HGP9{$dM=PPtP2(1~BX
zs)99r>r0hQr5<wy{~5{rT)U68fV&n#v2mdZ7}l4{xCaEo`cfJ9fQb9`r6rq6Mck8s
z$Nh#<&-<k!?xhU<>PuzZOA+FJV=2Y`%;tOw*h5d2DyK?4xh;pZSF}L@;-IIBCxVlu
zGHwB()X7pAw}2o&S&I6fzE%K2sgtFNQ&5U-qLTnhAx6F`m7m(G$d{)}MHGB`98qxE
zu^IX9bg5ikXbJMurFIllQOZ77DwY=jc+NR$QqDf-s7X2FoTDb?jB}-kg0E?LRU5tw
zrLGs*ohP(YMHfo#OVQO71XoMN$tVCAuiD-K1mo3Gxx4_uc(oKkaFB|_YVy@E7Wzv2
zsA5=3dJsaArZj%vjM|{ju#`WbKQH=VMU7(dQ`!p^qf+wzO*QxWs8loYizPtx8I{64
zGurT~2|bq*6(j%*`&>#!93Vz}E+wr8$lKc1t0ucoND1o!a3q}!h`CNkNhbq>X+lam
z84yepQn20}{6!s455qSx<yw||>>DlSE}EFKe^=Ur%r`B?&DR+Kl+$ce0D^K_N}3N4
zl+#i$-!j@jdcb_XSt;eU+~a4chQmL_BESRmo0XD_01*9VrQ{+2M7+&PmAsY`i+}`t
z5zJ0`=B30UkTUd}lah--im(XgrtIY3gYw&gl#~2f+eQQ@BqAN+IW$>dn->s_3sSau
zdk|bI%*zITtNE&zrlfW82&PzSTNe;SOKs}{@}96R{RpY2;d?9Pn#5**tKC=nRtlM)
z{+vrsTo-#MrL0ML^wo4-tf#y#Mlu%tPFvMKm-5`i&&<Rl%w<)|)8}Ur46>ReHr=|E
zQV+U+*=%qCiCFZU_Rj(D{hz*c4zNDu>FKbM7dE6k{jRZnkW#jS4QIJhIixp|vCq$G
z`)fC+<Xtwd92xq<l;=+l9ocS6%5(oUx@{?C7wGUO%fwWXo}`G5Lpci>aeK-mE}{tu
zcz2{cl@2dic4x{H>w1lNZ%SzZ@nbeI{+JMn*gfa9KX%%e^7L>z(~I!_l>Cc0d;nSo
z2WUwC4&0N%{UZ_X?1d)H*ZCtmYVio#ePl;FAbNg8(avvZ^rT2Sl2U@^P&fX{8te5H
zzTzEg(*9Bop@@4l;caB<00hGkN*#0qsVAB6C>we~>(=h5ojD*xm!o#(07RFglsSH)
z8-hIneV0<o54mqHXg_)f;h!SI;{n3+k{zCapt)p+Cm?7prDTQ&#EQF=O8kHoM;V?3
zBEw%!A;XWP>ta1A)r`&E@}t%)uX=3y+Bj67k4?)DG-!lz#-<C!@&d#-W7DWMDADz#
zTt7Z75*+|~j!(;#2#B8J(=yQkqUZRuy%Kv;Nis1l5*+|^nds<1@5&R?GST5Fm?oxW
zq5}le#59)TYu95f))>CG)2>4~Tpge1D||bRALS0G<AWOV{Oa6pO&{s5Se=$GgA`<|
z(;C0^ON~IbI!%8ig0g)Ld1oCPmao57vCip3ZeEv`Z^vkZKI_sb=f{eH;O9-bd#=NV
z(QZ>(TrUO_QEf_>h`)9Mh)$c*@X!`MkctmTThsVWnQ?>uVZqk4dV_ukR{+hnvy(UI
zzbxOL_K4dIHQd|V(<K=!5ih98+uPHv%K7c!8gk@L_WJ_8x_oEaBepRJG5pSSv3QFE
zM3<du-20(>yEWvv-E41x-oJcz+9PhmL5ME9(*g0_6cAl@r}5pCt{2ph!}hWp3-uez
z_ohAKkCs7*E_>6>#phZ;blIE6Ek3$XTtk)iezv+$?^(V-?Ge}GAw-w`=?E=%nhVv`
z`_olD<n(dQ*T71PF#U$KM?_tXLTBp@>0le#h0fL+((OC)o6a?K?01mOE7EJq4?11w
zH2t8{g-+8CQWyFKdkvj{f5h-|b!VH8(jM{g5khqNDD4-2j|LE3K1x@#)$8atTD=V4
z*J&5a)fxJWdB)did=aP1qrDJizSC*tEbCCBcdy02#G5wcU^|^I5FP{s+vzm!qfiM3
zhy{8&ZJtewZ$~8H-%!q^aaov_tdt<M&ZO~SjQ&iF6wz&rGwB{Z^&D-=y(r9@(#p-|
z0>xs(0(zTV*stfgAAn4x4zz&ln$q&SEg<g^5<fNogl0`?{Mdl}0SFH?r7H*EXDU7p
z`Qy(0^<iQ-Xmlm_uYm4xKXk<zf&%J_y<&Uu*uRpNFOh)YxRS<8q!@w@bFZYM?d1^s
zTgjEQ)lUD3E|m4699Wl8Ue0|I)c@_R#Xs$dP!6oi$h?4dm`Gjb+9<Rt>M|Hbn3!^4
zT_*Z+MpPYWE~<`~GM>p9QFTZe`c2HpszZuUbxg`o)p4|lj*Uxjk169?nQ@zY-4=V{
zsJDdSW5WB!D;aNyf3PT_Z1ZYHX~h~J&`Ohl&<&U`KQAE6_G$))C|G`gcsPUM#k_xH
zMn>Vcl1Yd*Gcvf9+>5sXn#o4R^gfZ98KsO&hc>jQ%*@~gg-*On$gZ>4iJ0CgGApB0
z$Tsw&hgq3+?djGh+8{g3X5Hd?Wn^|n;cJ_OXfr$0rmfzUw}D;fuovQb_sAS)EIP@b
zLt_bj5JYp?i8%C`>x@Mw`EzM3EC$eG!Ovs;6MB#6yo|zsdq+aFnU}$D?{*_y0>k@@
za<3)yz3%9ujKUW+NzrOirhNx}zlXQNs$P+sT&mxrL{~UE(P{n)(&-MY$=-%<RmQcE
zX&L=?V^s!k2y|T8o0jC7jPfpfETi|R#lJ)vfgEOElL?C7UIW5<Yce=Qr+5KGysXJ2
z-$lGo{Xzo1B-du-l9Uo?ur?!?q!iJTT${m?JWsj3H@UYyqm-IoB3N*5wXqM7h+#Z~
zt?TU=2IOt!T|PkQRG-0Dm^l=7e#5sp<N5?)H_^?8{-m~GkC*9VjLjKugh!p9qV7X@
zLqr`Q*noxQ0io-MWO@3A;wQDXusd7nZ6aGT3Sa&tM4K%cEPsj?KgHKpHlr1yWvj!(
zrNo0*X|#ck+t_!l^j6Vrw*MeR&u!$t(YUFDMhLr)b5*U8%BnxkDEzE}q-gbV24@Wv
z&VZo$IMb;=WdaVN;>VfFo9M$hFidrb4Qs2HM-JJc3n3^DQRqI-+aN6Q<)*FvWb|-G
z=`49EEDvY8b=N1sAs|9r9$^o((_fArade@$JVLtMi&*Mo_&&?HF0!Kb`aPweW$?oi
zs=@o9q(6~SzRq~`AL%bN_K_t$$#Ub`>;LQSd@|$d%>za}1Ls#6&yzosV2Y<QsOf1-
z>_f46CZjZFn7g0esTLUeLm+<q2nYk5$%Msz3W&~UGPwRkAqt2PJ(Ec{$`B<157D!B
zh)M~RIBSQf6j6wtr4Z$B!hH}6zVrA^_62snqyC?V@lO$-cmRdYXXKAh0in?OOq}Ny
zXh89Kp4Piih~DhZXF6PfLbPe&ITSK5d{f5LR-Zzz@qG>7m5l2-R$i&I!Ydj41)VzD
zNcvLf4$U2?)SJ8S7@C#k8Kf9*XjcA(NI;A?G>h_>b`C(~j-gqjnvX^hRV{DPyh=YP
zXwiR64nJzaA5$6Q(9$%<WaTk<Up|d7Srh<*miD|c+2*%$ui+`tlB9+BV}4SCX^qKt
zu*c?&F!q>i&s+2hxOwXh7`};F*Mh9uJeg<p{o~WQf^PUeXH3k>yNLms@}#Vi6{{5x
zN&)lFP+mX`Fe!`AP`D!th=(t;UsdT3L|@Lz+zuhyyqtyopTlg?2yl9CUzMKkj!p+N
z4}VBWoW*)wM&Tcz1v`^nsn(ZAXJ!?CF@l6>G&75f5xYbqEZDhhM-P2ZbZ%DR0f<Jl
zUgu^JfSW`ktjPInZBKo3bbeM5w<`mDMb6LS6L$^#-OunX%DUcUvugC7#-c2)>rmkL
zqrhL1RhF@DYxJsG{7Y0_kYk=pvVKt=0z%g%S!|6IV1Nj)CE570tVqfv;1RzxE0eO6
zK+UCDnUtl7B7SKW5&r;u6U19W*0mPCxy|bP1Z%g=>t|0K_xjk@UV7((x3k_PPpCn1
z(F#`3Td#<$$jYn*A?R0Rkty&;FTFwX%u4o~-g?)_%B<3b+Z;l)S((MhOWFy8<bikC
zTfOxjk$18(EkQ`qEYcD_rJxO_nqxQg(R)X7S*23)kXv%uuHDFNXaldTVvqOHdq!4e
zWzL2WZB}KGv+3SJkkaI8wjF<xGqO6XR7oC6ldH2mYxF+64OaCUX7$zkCD%A@C{3=R
zHh+TSZZv%FWnJ&XL=Rf5%{Fh4&FQQE!gw!>Z;s@`8_9(mvdTtsVdZZC!3iwxjswCh
z8?tfnjsl3;ZOFE2%^e8{M{dZLZ<LNC0e57*?MNwsM)j<&pWeKvo_yCx+aP{muqEsI
zFI(A9KWl8sdZXM|Ci!YBoFtYLAQS-R^}81kR9mwZZRjNl5D&MrpKjEvBio%e<h1S7
zrX_C!w1eG$lOB!i$SS-bMn`hmj%=5%vJIxSlQC+uGb>9sldq+nS(I)`&I70IVh3*0
zQ;}V^V@>X~UF2B0yke5m_OL*I{npqX+p!R0tUcsdp$`na7v5qI-lPZO{8h`2C6nKw
z*h{fwaXRd9``Cv5dOWhv&K4%Gy!KJHDCKRC<@UckKu<^ZXBB?e4r)-@wLgoycA^Qt
zLeY=f9B?eauTYQ$Vw?sqPYrDB06h_D$SPtd$KL<}PeT?zcM_W8iqL=9_5rZcf3gby
zffmNfN1Oj-+qRcH_=(p+rrxY4q6eL6U57RYv)!unM-Y-X8NNeV*HL!!&HBT}p)CF&
zHwEHN6o^N%%BMUKYXM;=U~vHv5UxIwZ7Ht21HxlRC_7O`0Yo4k$!0#4fk*-#h@aSj
zC?(M26FZ|w5oMH5C@K$o5tSjl!DU@neONF%y%uZy%4_B(-lDHn3QpT08ln(A!ydd1
z>Ew(Zbr6F43`HH4Qz44Xv+RxA^j49xw#^|#o3mtdl(c9A)X2WOP45+Lw9`C<B&9UJ
zn>K?G<&&n|FK^fHbVr)(Ab=FDnkWc*@kWTv3#|SQy-)OlZS@e3%?lJvLj@Cp^GYsp
zC*C8ISDf)EI<L@px4}344d0M5*T^!rS;Hsaf(`to-m&?RGI)u~@c!hbVP(pQGWMs8
z-nkYSZh}C#2@vxhRwms92<?ZJNjCw)O~cAEBg#bLCjocU@G_bBr35MsFO!L1ipWjF
z%g9Z%D~Ao=_%hc^x!>HSA95Sx%e*al_6U<}UMRCmXF#X}EVfWU5Wi4{xzcJ4laD5_
zx_k6nqZ7*HD+`2ZGocJ6?>O2V!{m+^+0}dW@sSsuMqEmb2JtqSWgS~^ul`81u1qeB
zFn3X18U8B6Z(!H~hHrA2YZ@#2m41Ko$z}Ml3I+WDGAAojrk07y5g6u#K-|d$go><8
z{^4Li48+QC4UVE75awiMsj1SOB;e+pVw+P+Foh|$Ii-lqIR)l?*oXh0iD#bZu&*hv
MwaRY!wchIg1KR0%q5uE@

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 4625b94e..288229c0 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -960,12 +960,11 @@ const (
 	// GetAccountStatus. TransactionDenial.exchange names WHERE to register, so the
 	// agent converges without fetching a manifest first.
 	DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED DenialReason = 18 // no account exists for this caller at this Exchange — the remedy is to call Register
-	// The provider of this item's resource, the seller of that resource at this
-	// Exchange, does not accept purchases relayed by a Broker
-	// (BrokerService.ExecuteTransaction). Decided PER ITEM, by each offer's own
-	// provider, and answered in the body on that item's denial_reason: other
-	// items in the same sub-request, sold by providers that accept relayed
-	// purchases, may succeed. It is never a refusal of the whole sub-request, and
+	// The provider that sells this item's resource at this Exchange does not
+	// accept purchases relayed by a Broker (BrokerService.ExecuteTransaction).
+	// Decided PER ITEM, by each offer's own provider, and answered in the body on
+	// that item's denial_reason: other items in the same sub-request, sold by
+	// providers that accept relayed purchases, may succeed. It is never a refusal of the whole sub-request, and
 	// an Exchange MUST NOT send it as ErrorDetail.transaction_denial. The remedy is
 	// to buy this offer directly, calling ExchangeService.ExecuteTransaction at
 	// offer.exchange.
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index a3129caf..f961f2fa 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2788,12 +2788,11 @@ enum DenialReason {
   // agent converges without fetching a manifest first.
   DENIAL_REASON_ACCOUNT_NOT_REGISTERED = 18;         // no account exists for this caller at this Exchange — the remedy is to call Register
 
-  // The provider of this item's resource, the seller of that resource at this
-  // Exchange, does not accept purchases relayed by a Broker
-  // (BrokerService.ExecuteTransaction). Decided PER ITEM, by each offer's own
-  // provider, and answered in the body on that item's denial_reason: other
-  // items in the same sub-request, sold by providers that accept relayed
-  // purchases, may succeed. It is never a refusal of the whole sub-request, and
+  // The provider that sells this item's resource at this Exchange does not
+  // accept purchases relayed by a Broker (BrokerService.ExecuteTransaction).
+  // Decided PER ITEM, by each offer's own provider, and answered in the body on
+  // that item's denial_reason: other items in the same sub-request, sold by
+  // providers that accept relayed purchases, may succeed. It is never a refusal of the whole sub-request, and
   // an Exchange MUST NOT send it as ErrorDetail.transaction_denial. The remedy is
   // to buy this offer directly, calling ExchangeService.ExecuteTransaction at
   // offer.exchange.

From 106df98f9e965a9b34c4b1ea272dd2499c38b029 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 16:24:31 -0400
Subject: [PATCH 078/164] Read an offer's price from Offer.pricing in the
 onboarding preview

resolvedControls opened the preview's price controls on the price of
the offer's term, falling back to Offer.pricing. An offer states its
price once, in Offer.pricing, and the term it sells carries none, so
the controls now read the offer's pricing alone.

The outline test's paid offer sells an unpriced term, so the price
line is the offer's and the term shows its condition, obligation and
semantics; the free-offer test puts its price on the offer. The
default-preview fixture's offer sells a term without pricing, while
the detected catalog terms and the sample feed keep theirs.
---
 website/src/lib/onboarding/default-preview.test.mjs |  4 +++-
 website/src/lib/onboarding/offer-outline.mjs        |  4 +++-
 website/src/lib/onboarding/offer-outline.test.mjs   | 10 ++++++----
 3 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/website/src/lib/onboarding/default-preview.test.mjs b/website/src/lib/onboarding/default-preview.test.mjs
index 055d7a14..ce7fb0ce 100644
--- a/website/src/lib/onboarding/default-preview.test.mjs
+++ b/website/src/lib/onboarding/default-preview.test.mjs
@@ -10,6 +10,8 @@ const CHECKED = '2026-09-21T13:00:00.000Z';
 const pricing = { model: 'PRICING_MODEL_FREE', rate: '0', currency: 'EUR' };
 const terms = [{ semantics: 'TERM_SEMANTICS_ENUMERATED', pricing,
 	restrictions: [{ kind: 'RESTRICTION_KIND_FUNCTION', permitted: ['search', 'ai-input'], prohibited: ['ai-train'] }] }];
+// An offer states its price once, in Offer.pricing; the term it sells carries none.
+const offerTerms = terms.map(({ pricing: _price, ...term }) => term);
 const manifest = {
 	ver: '1.0', role: 'ROLE_PUBLISHER', domain: 'publisher.example',
 	exchanges: [{ domain: 'exchange.example', endpoint: 'https://exchange.example/fora',
@@ -23,7 +25,7 @@ const response = (overrides = {}) => ({
 	page: { url: SOURCE, canonical_url: 'https://publisher.example/canonical', title: '  A real headline  ', source: 'article_url' },
 	cdn: { provider: 'none', integration: 'contact_us', evidence: null },
 	warnings: null,
-	offers: [{ exchange: 'exchange.example', title: 'A real headline', pricing, terms,
+	offers: [{ exchange: 'exchange.example', title: 'A real headline', pricing, terms: offerTerms,
 		delivery_method: 'DELIVERY_METHOD_INSTRUCTIONS',
 		identity: { canonical_url: 'https://publisher.example/canonical', resource_mutability: 'RESOURCE_MUTABILITY_STATIC' } }],
 	detected_terms: null,
diff --git a/website/src/lib/onboarding/offer-outline.mjs b/website/src/lib/onboarding/offer-outline.mjs
index 89554ddf..ac821cef 100644
--- a/website/src/lib/onboarding/offer-outline.mjs
+++ b/website/src/lib/onboarding/offer-outline.mjs
@@ -234,7 +234,9 @@ export function resolvedControls(offer, offeredUses) {
 	const functions = restrictions.find((r) => r?.kind === 'RESTRICTION_KIND_FUNCTION') ?? restrictions[0] ?? {};
 	const permitted = new Set(Array.isArray(functions.permitted) ? functions.permitted : []);
 
-	const pricing = term.pricing ?? offer.pricing ?? {};
+	// An offer states its price once, in Offer.pricing; the term it sells
+	// carries none, so the price is read from the offer alone.
+	const pricing = offer.pricing ?? {};
 	const paid = pricing.model && pricing.model !== 'PRICING_MODEL_FREE';
 
 	return {
diff --git a/website/src/lib/onboarding/offer-outline.test.mjs b/website/src/lib/onboarding/offer-outline.test.mjs
index 961ff1d5..75d7fc7c 100644
--- a/website/src/lib/onboarding/offer-outline.test.mjs
+++ b/website/src/lib/onboarding/offer-outline.test.mjs
@@ -31,7 +31,6 @@ const PAID_OFFER = {
 			trigger: 'OBLIGATION_TRIGGER_ON_USE',
 			detail: 'Credit demo.fora-protocol.org with a link to the article',
 		}],
-		pricing: { model: 'PRICING_MODEL_PER_UNIT', rate: '0.02', currency: 'EUR', unit: 'accesses' },
 	}],
 };
 
@@ -115,9 +114,12 @@ test('the outline shows every field the offer carries, in reading order', () =>
 	assert.equal(outline.nodes[4].value, 'direct');
 	assert.equal(outline.nodes[5].value, '2026-09-17 06:44 UTC');
 
+	assert.equal(outline.nodes[3].value, 'EUR 0.02 per access');
+
+	// The term carries no price of its own: an offer states its price once, in
+	// Offer.pricing, so the price line is the offer's.
 	const terms = outline.nodes.find((n) => n.label === 'terms');
-	assert.deepEqual(terms.children.map((c) => c.label), ['condition', 'price', 'obligation', 'semantics']);
-	assert.equal(terms.children[1].value, 'EUR 0.02 per access');
+	assert.deepEqual(terms.children.map((c) => c.label), ['condition', 'obligation', 'semantics']);
 });
 
 test('a field the offer adds later still appears', () => {
@@ -165,9 +167,9 @@ test('the controls open on the terms the Exchange resolved', () => {
 
 test('a free offer opens the controls on free, with no price carried over', () => {
 	const controls = resolvedControls({
+		pricing: { model: 'PRICING_MODEL_FREE', rate: '0', currency: 'EUR' },
 		terms: [{
 			restrictions: [{ kind: 'RESTRICTION_KIND_FUNCTION', permitted: ['search'], prohibited: ['ai-train'] }],
-			pricing: { model: 'PRICING_MODEL_FREE', rate: '0', currency: 'EUR' },
 		}],
 	}, ['search', 'ai-input', 'ai-train']);
 	assert.deepEqual(controls, {

From 067948103e40d6a7303e58cc84c0ca6744455fab Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 16:24:32 -0400
Subject: [PATCH 079/164] Describe the purchase answers, the budget, reports
 and one offer price in the docs and changelogs

The transaction-flow page gains "Denials are in the body", with a
one-item denial in a successful response and the whole-request refusal
that is the only use of transaction_denial, and "Idempotency": keys
scoped per caller, a replay answered from the stored result, and a
reused key with different items refused with already_exists. It states
that total_cost is unset across currencies, that a sub-request not
matching the signed request acceptance is denied per item with
SIGNATURE_INVALID, that RELAY_NOT_ACCEPTED is decided per item by each
offer's provider, the report refusals with their codes and the
unrestricted quantity, and the dispute refusal reasons. It drops "no
refunds in the protocol", which contradicted dispute credits.

The Exchange request flow answers every per-item denial in the body
whatever the item count, refuses overdue reporting as a whole request,
scopes the idempotency key per caller, leaves total_cost unset across
currencies, maps a malformed report to MALFORMED and stops checking a
minimum billable quantity. The reference, authentication, threat-model,
dispute-resolution and for-ai-agents pages state the same rules, and
the threat model's underreporting countermeasure no longer refuses a
report for its quantity. The admin reference marks quantity_tolerance
deprecated and ignored.

The Broker pages describe the budget as a filter at Resolve, answered
with BUDGET_EXCEEDED, never charged and never counted as spend, with
spend recorded from purchase totals. They drop the currency converter,
since conversion is out of scope for this version, and the generated
idempotency key, since the Broker forwards the agent's key unchanged.

The money-flow page divides unit_cost by the resource's size rather
than by estimated_quantity, which is always in the price's own unit.
The scenario, academic, EU-regulation, v1, credit-report and news
examples that paired a per-access unit with a token-count estimate now
estimate one access, with their usage reports in accesses; the
medical-imaging offer estimates one record, so the estimate times the
rate is the stated $25.00, and its DUA failure is a denied item in the
body. The licensing-terms and reference pages say an offer's term
carries no pricing, and the remaining offer examples drop it.

The Unreleased entry in both changelogs records the eight changes and
the SDK faces, and the metered-settlement entry no longer says the
metered rule reads the term's pricing.
---
 proto/CHANGELOG.md                            | 111 ++++++++++++-
 .../components/broker/budget-enforcement.mdx  |  94 +++++------
 .../docs/components/broker/deployment.mdx     |  16 +-
 .../docs/components/broker/overview.mdx       |  12 +-
 .../components/broker/selection-engine.mdx    |  23 ++-
 .../components/exchange/request-flows.mdx     | 155 +++++++++---------
 .../docs/getting-started/for-ai-agents.mdx    |   5 +-
 .../docs/getting-started/how-money-flows.mdx  |  28 ++--
 .../content/docs/protocol/authentication.mdx  |   2 +-
 .../docs/protocol/dispute-resolution.mdx      |   2 +-
 .../src/content/docs/protocol/ext-news.mdx    |   4 +-
 .../content/docs/protocol/licensing-terms.mdx |  12 +-
 .../docs/protocol/scenario-walkthrough.mdx    |  27 +--
 .../docs/protocol/transaction-flow.mdx        |  70 ++++++--
 .../docs/protocol/walkthrough-academic.mdx    |  39 ++---
 .../protocol/walkthrough-credit-report.mdx    |   2 +-
 .../protocol/walkthrough-due-diligence.mdx    |   8 +-
 .../protocol/walkthrough-eu-regulation.mdx    |  14 +-
 .../protocol/walkthrough-medical-imaging.mdx  |  32 ++--
 .../content/docs/protocol/walkthrough-v1.mdx  |  16 +-
 .../src/content/docs/reference/changelog.mdx  | 111 ++++++++++++-
 .../content/docs/reference/proto-admin.mdx    |   2 +-
 .../src/content/docs/reference/proto-fora.mdx |  37 +++--
 .../content/docs/security/threat-model.mdx    |   6 +-
 24 files changed, 541 insertions(+), 287 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 560843df..f1516f7c 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,112 @@
 
 ## Unreleased
 
+**An offer carries its price once: `Offer.pricing` (two validation rules added;
+`LicenseTerm.pricing` loses its field-level rule; no field removed).** An offer carried its
+price twice, in `Offer.pricing` and in the pricing of the one term it sells, and the
+comment called the term's copy authoritative. The two could disagree inside one signed
+offer, nothing said which one execute charges, and the metered rule read either copy.
+
+- `Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks and
+  a metered purchase settles on. The term inside `Offer.terms` MUST carry no pricing (rule
+  `offer.terms.pricing_unset`, on `Offer`). Each offer derives from exactly one catalog
+  term, so the price is stated once and cannot disagree with itself.
+- `offer.metered.requires_estimate` reads `Offer.pricing` only: an offer is metered when
+  its pricing is `PER_UNIT`.
+- Catalog terms still carry pricing. `LicenseTerm.pricing` loses its field-level `required`
+  rule, because the requirement depends on the message that holds the term, and
+  `ResourceEntry` gains `resource_entry.terms.pricing_required`: every catalog term carries
+  its price, whatever its semantics. A standalone `LicenseTerm` without pricing is no
+  longer refused on its own.
+- `buf breaking` against v1.0.0 passes. A validating peer now refuses an offer whose term
+  carries pricing, including inside a `TransactionRequest`.
+- The field-level corpus drops `LicenseTerm/pricing/missing`. The cross-field corpus gains
+  two priced-term offers and a `ResourceEntry` term without pricing, replacing the metered
+  term-only case, and the license-term entry vectors report a catalog term without pricing
+  as that cross-field rule.
+
+SDKs, in all three languages: `IsMeteredOffer` / `is_metered_offer` / `isMeteredOffer` read
+the offer's pricing only. New `CheckOfferTermsUnpriced` / `check_offer_terms_unpriced` /
+`checkOfferTermsUnpriced` apply `offer.terms.pricing_unset` without wire validation (Go
+returns `helpers.ErrOfferTermPriced`, new; Python raises `ValueError`; TypeScript throws).
+The offer signers (`helpers.SignOffer`, `sign_offer_jcs`, `signOffer`) refuse an offer whose
+term carries pricing, and the offer verifiers reject one after the signature and expiry
+checks. The Python and TypeScript cross-field layers gain both rules, with a composed
+`ResourceEntry` model, and `validate_resource_entry` / `validateResourceEntry` check the
+entry itself. The offer-verify vectors gain a term repeating the offer's price, which is
+rejected, and an unpriced term under a `FLAT` price, which verifies.
+
+**A per-item purchase denial is always answered in the body (comments and two
+deprecations; no wire change).** A denied one-item purchase was described as a non-OK
+error carrying `ErrorDetail.transaction_denial`, while the same denial in a batch rode in
+the body, so a caller handled one decision in two shapes.
+
+- `ExecuteTransaction`, `TransactionResponse` and `TransactionResultItem.denial_reason`
+  state that every per-item denial is answered in the body, whatever the item count.
+  `TransactionDenial` is used only when the Exchange refuses the whole request and decides
+  no item, for a reason about the caller that would deny every item alike (for example
+  `ACCOUNT_NOT_REGISTERED`, `ACCOUNT_INACTIVE`, `REPORTING_OVERDUE`, `RATE_LIMITED`).
+  `TransactionDenial.restriction_mismatches` and `TransactionDenial.offer_id` are
+  deprecated and never set.
+- `DENIAL_REASON_RELAY_NOT_ACCEPTED` is decided per item by each offer's provider, the
+  provider that sells that resource, and answered in the body. It is never a refusal of the whole
+  sub-request, and an Exchange never sends it as `transaction_denial`.
+- A sub-request whose items are not exactly the agent's `AgentRequestAcceptance` projected
+  onto the Exchange (an item dropped, added or reordered) has every item denied with
+  `DENIAL_REASON_SIGNATURE_INVALID`, in the body: the agent's signature does not cover
+  what arrived. It is not `invalid_argument`, nothing is purchased, and no request-level
+  idempotency state is claimed.
+
+**A usage report is refused for time, never for quantity (comments; one admin field
+deprecated).** `UsageReportRejectionReason` states that the reported quantity is
+unrestricted: no reason refuses a report because its `consumed_quantity` differs from the
+estimate, above or below, and a quantity far from the estimate is analysed out of band.
+The existing `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` is the time cause, refused with
+`failed_precondition`; `USAGE_REPORT_REJECTION_REASON_MALFORMED` is a malformed report,
+refused with `invalid_argument`. The metered settlement on `Pricing` is unchanged.
+`fora.admin.v1.ReportingPolicy.quantity_tolerance` is deprecated and ignored: an Exchange
+must not refuse a report on it.
+
+**Idempotency keys are scoped per caller, and a reused key with a different request is
+refused (comments only).** The file header gains "Idempotency", the one statement of the
+rule for `TransactionRequest`, `UsageReport` and `DisputeRequest`. A key is scoped to the
+authenticated agent, and to the pair (Broker, requester) on a purchase relayed through
+`BrokerService.ExecuteTransaction`; a key another agent or tenant used is never a
+collision. The same key with the same request is a replay answered from the stored result.
+The same key with a different request (for a purchase, different items or another order)
+is refused with the Connect code `already_exists` and an `ErrorDetail` with no typed reason.
+
+**`BrokerService.Resolve` filters offers over the agent's budget (comments only).**
+`Resolve` drops every offer priced above `max_price` or that would take the `budget_scope`'s
+spend past `period_budget`, comparing the most the offer can be charged without a dispute
+(Q × R for a metered offer). A URI left with no offer is answered with
+`OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as
+`RESOURCE_EXHAUSTED`. `Resolve` never charges and never counts as spend; spend grows only
+from purchase totals. `period_budget` no longer says transactions are denied.
+
+**`TransactionResponse.total_cost` is unset when the items span currencies (comments
+only).** It is the exact sum of the purchased items' costs in their one shared currency,
+and unset when they span more than one. Currency conversion is out of scope for this
+version, which `BrokerTransactionResponse.totals` states too.
+
+**`DisputeTransaction` states its refusal reasons (comments only).** Every Exchange
+implements the RPC. Each `DisputeFailureReason` now names its check: no transaction for the
+caller, no accepted report for this transaction, the dispute window closed, a dispute
+already filed (a retry under the same key is a replay), and a transaction whose state
+admits no dispute.
+
+Docs: the transaction-flow page gains "Denials are in the body" and "Idempotency", states
+the report refusals and the dispute refusal reasons, and drops "no refunds in the
+protocol". The Exchange request flow answers every per-item denial in the body, scopes the
+idempotency key per caller, leaves `total_cost` unset across currencies and stops
+checking a minimum billable quantity. The Broker pages describe the budget as a filter at
+`Resolve` and drop the currency converter and the generated idempotency key. The money-flow
+page divides `unit_cost` by the resource's size rather than by `estimated_quantity`, and
+every walkthrough and example that paired a per-access unit with a token-count estimate now
+states the estimate in the price's own unit. The medical-imaging walkthrough answers its
+DUA failure in the body. Offer examples drop their terms' pricing, and the licensing-terms,
+reference and threat-model pages state the same rules.
+
 **A metered offer carries an estimate, and a usage report settles within a tolerance:
 `Pricing.estimate_tolerance_bps` (field 10) is added, with two validation rules.** A
 `PER_UNIT` price is charged per unit consumed, but an offer could carry no
@@ -9,7 +115,7 @@
 how a report of a different quantity settles. Implementations charged one unit and
 refused the honest report.
 
-- An offer whose `pricing` or term pricing is `PER_UNIT` MUST carry a positive
+- An offer whose `pricing` is `PER_UNIT` MUST carry a positive
   `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`, on `Offer`). The
   rule binds the offer and not `Pricing`: a publisher pushes `PER_UNIT` terms without an
   estimate, which describes the resource and may ride on `ResourceEntry.estimated_quantity`.
@@ -39,8 +145,7 @@ refused the honest report.
   estimate, including inside a `TransactionRequest`, and a Go client running with
   `ValidationStrict` refuses a discovery response that carries one.
 - The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
-  tolerance on a `FLAT` price and three unestimated metered offers (missing, zero, and a
-  `PER_UNIT` term under non-metered offer pricing).
+  tolerance on a `FLAT` price and two unestimated metered offers (missing and zero).
 
 SDKs, in all three languages: the offer verifiers reject a metered offer without a
 positive estimate, after the signature and expiry checks (Go: `core.Verifier`, reason
diff --git a/website/src/content/docs/components/broker/budget-enforcement.mdx b/website/src/content/docs/components/broker/budget-enforcement.mdx
index 85fd3986..1c1b17e3 100644
--- a/website/src/content/docs/components/broker/budget-enforcement.mdx
+++ b/website/src/content/docs/components/broker/budget-enforcement.mdx
@@ -5,15 +5,20 @@ description: "How the Broker tracks and enforces per-request, per-session, and p
 
 ## Overview
 
-The Broker enforces three budget layers, analogous to how DSPs manage advertiser budgets in OpenRTB. Budget enforcement is advisory -- the Exchange is the authoritative enforcement point -- but the Broker's pre-filtering prevents unnecessary Exchange round-trips for transactions that would exceed limits.
+The Broker applies three budget layers, analogous to how DSPs manage advertiser budgets in OpenRTB. The budget is a **filter over offers** at `BrokerService.Resolve`: the Broker drops every offer that would take the agent past its budget, and answers a URI left with no offer with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`. The Exchange's balance check stays the authoritative gate on what is actually charged.
+
+Two rules hold at every layer:
+
+- **Resolve never charges and never counts as spend.** Returning an offer reserves nothing, and an offer the agent never buys costs it nothing.
+- **Spend grows only from purchase totals**: the amounts charged for purchased items. For a purchase through the Broker that is `BrokerTransactionResponse.totals`. A budget is never reported as `OFFER_ABSENCE_REASON_NOT_AUTHORIZED`, and never as a non-OK error such as `RESOURCE_EXHAUSTED`.
 
 ## Budget Layers
 
 ```mermaid
 graph TB
     subgraph "Budget Enforcement Layers"
-        L1[Layer 1: Per-Transaction<br/>RequestConstraints.max_price<br/>hard cap per transaction]
-        L2[Layer 2: Per-Session<br/>cumulative spend tracking<br/>in-memory, reset on restart]
+        L1[Layer 1: Per-Offer<br/>RequestConstraints.max_price<br/>offers above it are filtered]
+        L2[Layer 2: Per-Session<br/>spend from purchase totals<br/>in-memory, reset on restart]
         L3[Layer 3: Per-Period<br/>per-month, per-day<br/>persisted in Redis]
         L4[Layer 4: Per-Exchange<br/>balance awareness<br/>advisory, not enforced]
     end
@@ -25,9 +30,9 @@ graph TB
 
 | Layer | Source of Truth | Enforcement | Crash Behavior | Storage |
 |---|---|---|---|---|
-| **Per-transaction** | `RequestConstraints.max_price` | Hard reject if offer exceeds | Stateless -- always enforced | None |
-| **Per-session** | Broker in-memory map | Hard reject if cumulative spend exceeds session budget | Lost on crash; agent re-declares | In-memory |
-| **Per-period** | Redis, keyed by the verified agent identity or sub-account ID | Hard reject if period budget exhausted | Survives restart (persisted in Redis) | Redis |
+| **Per-offer** | `RequestConstraints.max_price` | Drop an offer priced above it | Stateless -- always applied | None |
+| **Per-session** | Broker in-memory map | Drop an offer that would take the session's spend past the session budget | Lost on crash; agent re-declares | In-memory |
+| **Per-period** | Redis, keyed by `budget_scope`, else the verified agent identity | Drop an offer that would take the period's spend past `period_budget` | Survives restart (persisted in Redis) | Redis |
 | **Per-Exchange** | Exchange's billing adapter | Advisory -- Exchange ultimately decides | Not Broker's state | External |
 
 ## Budget Scope Identifiers
@@ -46,6 +51,10 @@ type RequestConstraints struct {
 
 Per-period budgets are keyed by `budget_scope` (or the verified agent identity if no scope is provided) and persisted in Redis with TTLs matching the period (e.g., monthly keys expire at month-end).
 
+## The Price an Offer Is Compared At
+
+The Broker compares the most an offer can be charged without a dispute. For a `FLAT` price that is the rate. For a metered (`PER_UNIT`) price it is the ceiling amount Q × R, where Q = estimate × (10000 + tolerance) / 10000 (see [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase)); the SDKs compute it as `MeteredSettlementCap`. A `FREE` offer costs nothing.
+
 ## Session Budget Tracker
 
 ```go
@@ -53,10 +62,12 @@ type BudgetTracker interface {
     // SetSessionBudget declares the budget for a session.
     SetSessionBudget(sessionID string, amount float64, currency string)
 
-    // CanAfford checks whether the session can afford this transaction.
+    // CanAfford reports whether buying an offer at this price would keep the
+    // spend within the budget. It reserves nothing.
     CanAfford(amount float64, currency string) bool
 
-    // Record logs a completed transaction against the session budget.
+    // Record adds a purchase's charged amount to the spend. It is called only
+    // with purchase totals, never from Resolve.
     Record(ctx context.Context, cost *forav1.Cost)
 
     // Remaining returns the remaining budget for the session.
@@ -79,22 +90,28 @@ type sessionBudget struct {
 func (b *inMemoryBudget) CanAfford(amount float64, currency string) bool {
     b.mu.Lock()
     defer b.mu.Unlock()
-    // Multi-currency: convert via CurrencyConverter if currencies differ.
+    // A budget counts amounts in its own currency. This version of the protocol
+    // defines no currency conversion.
     return (b.current.spent + amount) <= b.current.limit
 }
 ```
 
-## Batch Budget Consumption
+## Batch Selection and Recording Spend
 
-For batch (multi-URI) queries, budget is consumed atomically for the batch total. The selection engine computes the sum of costs across all selected offers before committing. If the total exceeds the remaining budget, the engine drops lower-priority URIs until the total fits (see the [Selection Engine](/components/broker/selection-engine/) batch pipeline).
+For batch (multi-URI) queries, the selection engine sums the prices of the offers it selects. If the total exceeds the remaining budget, it drops lower-priority URIs until the total fits (see the [Selection Engine](/components/broker/selection-engine/) batch pipeline). This is still filtering: nothing is spent or reserved by `Resolve`.
 
-Once the batch `TransactionRequest` is sent and the `TransactionResponse` received, the Broker records the `total_cost` against the session and period budgets in a single operation.
+Spend is recorded only when a purchase completes. For a purchase through the Broker, the Broker adds each entry of `BrokerTransactionResponse.totals` (one `Cost` per currency, covering only the charged items) to the budget of the same currency. A denied item, or an item an Exchange refused, adds nothing.
 
 ```go
-func (b *inMemoryBudget) RecordBatch(ctx context.Context, totalCost *forav1.Cost) {
+func (b *inMemoryBudget) RecordPurchase(ctx context.Context, totals []*forav1.Cost) {
     b.mu.Lock()
     defer b.mu.Unlock()
-    b.current.spent += totalCost.Amount
+    for _, t := range totals {
+        if t.Currency != b.current.currency {
+            continue // amounts are never converted between currencies
+        }
+        b.current.spent += t.Amount
+    }
     b.current.txnCount++
     b.current.lastTxn = time.Now()
 }
@@ -102,26 +119,22 @@ func (b *inMemoryBudget) RecordBatch(ctx context.Context, totalCost *forav1.Cost
 
 ## Overspend Prevention
 
-The Broker checks budget BEFORE making any network call to the Exchange. A budget-exceeded condition never reaches the wire.
+The Broker applies the budget while it selects offers, before it returns them. An offer the agent cannot afford is never returned, so the agent never holds it to buy.
 
 ### Budget Exhaustion Mid-Session
 
-When the session budget is exhausted:
+When the session or period budget leaves no affordable offer for a URI:
 
-1. The Broker returns a Connect error with code `RESOURCE_EXHAUSTED`.
-2. The error details include the remaining budget and the cumulative spend.
-3. The agent can re-declare a higher budget or proceed without the Broker (direct Exchange access).
+1. `Resolve` still returns OK. That URI's `OfferGroup` carries no offers and `absence_reason: OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`; when no URI has an affordable offer, `DiscoveryResponse.absence_reason` is `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`.
+2. It is not an error. The Broker never answers with `RESOURCE_EXHAUSTED` or `NOT_AUTHORIZED` for a budget.
+3. The agent can re-declare a higher budget, or buy directly from an Exchange without the Broker.
 
 ```go
-if !budget.CanAfford(winningOffer.Pricing.Rate, winningOffer.Pricing.Currency) {
-    remaining, currency := budget.Remaining(sessionID)
-    return nil, connect.NewError(
-        connect.CodeResourceExhausted,
-        fmt.Errorf("session budget exhausted: %.4f %s remaining, offer costs %.4f %s",
-            remaining, currency,
-            winningOffer.Pricing.Rate, winningOffer.Pricing.Currency,
-        ),
-    )
+price := maxChargeWithoutDispute(offer.Pricing) // rate, or Q x R when metered
+if !budget.CanAfford(price, offer.Pricing.Currency) {
+    // Drop the offer. If none remains for this URI, answer it with
+    // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. Nothing is charged or counted.
+    continue
 }
 ```
 
@@ -131,28 +144,17 @@ Session budget state is ephemeral. If the Broker crashes, the agent re-declares
 
 This is a deliberate design choice: the Exchange's billing adapter is the authoritative source of truth for "can this requester afford this transaction," not the Broker.
 
-## Currency Conversion
-
-Multi-currency budget tracking requires exchange rates. The `CurrencyConverter` interface handles offers in EUR when the session budget is in USD.
-
-```go
-type CurrencyConverter interface {
-    Convert(amount float64, from, to string) (float64, error)
-    Rate(from, to string) (float64, error)
-}
-```
-
-**Reference implementation**: Fixed rates from configuration file. Sufficient for v1 where most transactions are USD.
+## Currencies
 
-**Production implementation**: ECB daily reference rates or fixer.io API. Rates cached in Redis with 1-hour TTL. Stale rates are acceptable because budget tracking is advisory.
+Currency conversion is out of scope for this version of the protocol. A budget is stated in one currency (`period_budget.currency`), and only amounts in that currency count against it. Purchase totals are never summed across currencies: `BrokerTransactionResponse.totals` carries one entry per currency, and `TransactionResponse.total_cost` is unset when the purchased items span more than one currency.
 
 ## Budget Consistency at Scale
 
-Broker budget tracking is **advisory**. The Exchange is the authoritative enforcement point and rejects transactions if the requester's balance is insufficient. This means:
+The Broker's budget is a filter over the offers it returns, not a reservation. The Exchange is the authoritative point for what is charged, and denies an item, in the body, if the requester's balance is insufficient. This means:
 
-- If two Broker instances both think there is budget remaining and both submit `ExecuteTransaction` simultaneously, the Exchange authorizes the first and denies the second.
-- No overspend occurs because the Exchange is the gatekeeper.
-- The Broker's budget check is a fast pre-filter to avoid unnecessary Exchange round-trips, not a guarantee.
+- If two Broker instances both return an offer the budget still allows, and the agent buys both, the spend can pass the budget by the price of the second purchase. Each purchase's totals are recorded when it completes, and later resolves filter against the new spend.
+- The Exchange's balance check still bounds what the requester can be charged.
+- The Broker's budget filter keeps the agent from buying what its budget does not allow; it is not a guarantee across concurrent purchases.
 
 This model is deliberately simple. Distributed budget consensus (e.g., two-phase commit across Broker instances) adds latency and complexity without value, because the Exchange already provides the authoritative enforcement.
 
@@ -173,7 +175,7 @@ var (
     budgetExhausted = promauto.NewCounter(
         prometheus.CounterOpts{
             Name: "broker_budget_exhausted_total",
-            Help: "Number of requests rejected due to budget exhaustion",
+            Help: "Number of URIs answered with BUDGET_EXCEEDED because the budget left no offer",
         },
     )
 )
diff --git a/website/src/content/docs/components/broker/deployment.mdx b/website/src/content/docs/components/broker/deployment.mdx
index 6a2ba5d8..7ec37b4c 100644
--- a/website/src/content/docs/components/broker/deployment.mdx
+++ b/website/src/content/docs/components/broker/deployment.mdx
@@ -296,19 +296,9 @@ graph TD
 
 ### Idempotency
 
-The Broker generates deterministic idempotency keys for `TransactionRequest.idempotency_key`:
+The Broker never generates `TransactionRequest.idempotency_key`. The key is the agent's, and the Broker forwards it unchanged on every sub-request: it cannot do otherwise, because each `AgentAcceptance` and the `AgentRequestAcceptance` sign it.
 
-```go
-func transactionRequestID(requestID string, offerID string) string {
-    h := sha256.New()
-    h.Write([]byte(requestID))
-    h.Write([]byte(":"))
-    h.Write([]byte(offerID))
-    return "txreq-" + hex.EncodeToString(h.Sum(nil))[:16]
-}
-```
-
-If the agent retries the same request (same `X-Request-ID` and offer), the Broker regenerates the same `TransactionRequest.idempotency_key`, which the Exchange recognizes as a duplicate.
+Each Exchange scopes a relayed key per (Broker, requester the acceptances authenticate), so two agents behind one Broker that choose the same key do not collide. When the agent retries the same purchase with the same key, each Exchange recognizes a replay of its sub-request and answers from its stored result. When a key is reused with different items, or the same items in another order, the Exchange refuses the sub-request with `already_exists`, and the Broker reports that refusal on each affected item's `refusal`.
 
 ## Scaling Considerations
 
@@ -359,7 +349,7 @@ The Broker exposes Prometheus-compatible metrics at `/metrics`:
 | `broker_winning_unit_cost` | Histogram | unit_cost of the selected offer |
 | `broker_unit_cost_savings_ratio` | Histogram | Runner-up vs winning unit_cost |
 | `broker_budget_utilization_ratio` | Histogram | Session budget utilization |
-| `broker_budget_exhausted_total` | Counter | Budget exhaustion rejections |
+| `broker_budget_exhausted_total` | Counter | URIs answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` because the budget left no offer |
 | `broker_reporting_obligations_total` | Counter | Reporting obligations by status |
 | `broker_request_latency_seconds` | Histogram | Total DiscoveryRequest handling time |
 | `broker_requests_total` | Counter | Total DiscoveryRequests handled |
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 1d300fb1..7930f544 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -11,7 +11,7 @@ The FORA Broker is the optional demand-side router in the FORA protocol. It sits
 
 - **Multi-exchange comparison** -- fan out DiscoverResources to N Exchanges, pick cheapest
 - **Multi-exchange purchase** -- buy offers from several Exchanges in one `BrokerService.ExecuteTransaction` call, with the results combined in request order
-- **Budget enforcement** -- per-request, per-session, per-Exchange cumulative tracking
+- **Budget filtering** -- `Resolve` drops offers that would exceed the agent's budget (per offer, per session, per period) and answers a URI left with none with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`; spend grows only from purchase totals
 - **Resource deduplication** -- same article from two Exchanges, compare price
 - **Attestation-aware selection (v1.0)** -- prefer offers with higher attestation levels (Level 2 > Level 1 > Level 0)
 - **Reporting relay** -- forward UsageReports to the correct Exchange, track `report_id` for dispute chain
@@ -56,7 +56,7 @@ graph TB
 | **Exchange Registry** | Knows which Exchanges exist and their health status. Bootstraps from [Exchange Manifest](/protocol/exchange-manifest/) (`/.well-known/fora.json`) instead of HEAD probes -- extracting endpoints, capabilities, and accepted verifiers in a single fetch | Long-lived, refreshed periodically |
 | **Supply Discovery** | Fans out DiscoverResources RPCs to N Exchanges concurrently | Per-request, stateless |
 | **Selection Engine** | Deduplicates, ranks, filters, and selects the best offer | Per-request, stateless |
-| **Budget Tracker** | Tracks cumulative spend per session/period and enforces limits | Per-session in-memory, per-period in Redis |
+| **Budget Tracker** | Tracks spend per session/period from purchase totals, and filters out offers that would exceed the budget | Per-session in-memory, per-period in Redis |
 | **Reporting Relay** | Forwards UsageReports to the winning Exchange, tracks obligations | Per-transaction, short-lived |
 
 ## Internal Call Flow
@@ -114,16 +114,16 @@ The Broker re-packages the agent's purchase. What holds the set together is `Tra
 1. The agent signs one `AgentAcceptance` per offer and one `AgentRequestAcceptance` over every selected offer, in order, across all Exchanges, and sends the request to the Broker, RFC 9421-signed for the Broker's URL. The request terminates at the Broker.
 2. The Broker verifies the agent's signature and checks that `requester.domain` is the agent's verified signing directory (the host of the WBA directory the covered `Signature-Agent` header names). It checks that every item's Exchange is one it can route to and approves for purchases. It refuses anything else before it sends a single sub-request.
 3. It groups the items by `offer.exchange` and sends one `ExchangeService.ExecuteTransaction` to each Exchange. Each sub-request is a new HTTP request the Broker authors and signs with **its own** key. It carries only the items addressed to that Exchange, in request order, with their acceptances, plus the **unchanged** `AgentRequestAcceptance`, `requester` and idempotency key. See [Projected execute requests](/protocol/authentication/#projected-execute-requests) for who signs what and how the Exchange resolves the acceptance verification key.
-4. Each Exchange verifies the acceptance signatures and requires its sub-request to equal the complete in-order projection of the signed set addressed to itself — so the Broker cannot drop, reorder, append, or split the items for that Exchange without being refused.
+4. Each Exchange verifies the acceptance signatures and requires its sub-request to equal the complete in-order projection of the signed set addressed to itself — so the Broker cannot drop, reorder, append, or split the items for that Exchange without that Exchange seeing it. A sub-request that is not that projection has every item denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body, and nothing is bought.
 5. The Broker combines the answers into one `BrokerTransactionResponse`: one result per request item in request order, one `ExchangeOutcome` per Exchange contacted, and charged totals per currency.
 
 **Why re-packaging is safe.** Each item is atomic and its integrity is per resource. Each offer carries its own Exchange's signature, each acceptance binds the agent to that one offer, and each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases. It cannot alter any of them without breaking that item's Exchange signature or the agent's acceptance, and no cross-item integrity is needed. In a result item, the one signed value is the `retrieval_endpoint`, signed by the issuing Exchange; the other fields are the Broker's unsigned report of what each Exchange answered.
 
-**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal` — the Exchange, the Connect code it answered with, and its `ErrorDetail` unchanged — and the other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. An item whose provider does not accept relayed purchases is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, and the agent buys that offer directly.
+**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal` — the Exchange, the Connect code it answered with, and its `ErrorDetail` unchanged — and the other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. Every per-item denial is the Exchange's result item, in the body, also for a one-item sub-request. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, the other items of the sub-request may succeed, and the agent buys that offer directly.
 
 **The Broker's own refusals** are non-OK errors with an `ErrorDetail`: `unauthenticated` with `request_auth_failure` for a bad agent signature, and `SIGNATURE_INVALID` for a `requester.domain` that is not the signing directory; `invalid_argument` for a malformed request; `failed_precondition` for an Exchange it cannot route to or does not approve.
 
-**Idempotency.** The Broker forwards the agent's `idempotency_key` unchanged to every Exchange; it cannot change it, because the acceptances sign it. A retry through the Broker therefore reaches each Exchange as a replay and is answered from that Exchange's stored result.
+**Idempotency.** The Broker forwards the agent's `idempotency_key` unchanged to every Exchange; it cannot change it, because the acceptances sign it. A retry through the Broker therefore reaches each Exchange as a replay and is answered from that Exchange's stored result. Each Exchange scopes the key per (Broker, requester), so two agents behind one Broker never collide, and refuses the same key with different items with `already_exists`.
 
 **Delegation.** The Broker is the wire signer of every sub-request, so each Exchange checks a delegation's `cnf.jkt` against the key the item's `AgentAcceptance` verifies under, not against the Broker. The agent does not need to delegate to the Broker.
 
@@ -371,7 +371,7 @@ sequenceDiagram
 | **Broker is optional** | Agents can query Exchanges directly. The Broker adds multi-exchange intelligence but is not required by the protocol. |
 | **Same protocol, re-packaged purchases** | The Exchange answers the same RPCs whoever calls. A purchase the Broker relays is signed by the Broker, and the Exchange verifies the agent's consent from the body acceptances. |
 | **Signed offer pass-through** | Exchange signatures cover pricing fields. The Broker cannot inflate prices without invalidating the signature. |
-| **Advisory budget enforcement** | The Broker pre-filters transactions by budget, but the Exchange is the authoritative enforcement point. No overspend occurs because the Exchange is the gatekeeper. |
+| **Budget as an offer filter** | `Resolve` drops offers that would exceed the agent's budget and reports `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` when none remain. It never charges, and spend grows only from purchase totals. The Exchange's balance check stays the authoritative gate on what is charged. |
 | **Ed25519 + forwarding signature stack** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature (covering `@method`/`@target-uri`/`content-digest`); Broker adds one labeled RFC 9421 HTTP Message Signature (covering the request plus the prior hop's signature) to the header stack. Exchange verifies both layers and counts hops against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
 | **Partial results are normal** | If 3 of 5 Exchanges respond within the deadline, the Broker proceeds with 3 responses. Availability of any individual Exchange does not block the system. |
 
diff --git a/website/src/content/docs/components/broker/selection-engine.mdx b/website/src/content/docs/components/broker/selection-engine.mdx
index efd19883..792467ec 100644
--- a/website/src/content/docs/components/broker/selection-engine.mdx
+++ b/website/src/content/docs/components/broker/selection-engine.mdx
@@ -170,7 +170,7 @@ graph LR
     C --> D[Select best offer<br/>per URI]
     D --> E[Sum costs across<br/>all URIs]
     E --> F{Total within<br/>budget?}
-    F -->|Yes| G[Build batch<br/>TransactionRequest]
+    F -->|Yes| G[Return one OfferGroup<br/>per URI]
     F -->|No| H[Drop lowest-priority<br/>URIs until budget fits]
 ```
 
@@ -180,8 +180,8 @@ The batch selection algorithm:
 2. Within each URI group, run the full single-URI pipeline (filter, dedup, rank).
 3. Select the best offer per URI.
 4. Sum costs across all selected offers to get the batch total.
-5. If the total exceeds budget, drop offers for the lowest-priority URIs (by position in the original request) until the total fits.
-6. Send a single batch `TransactionRequest` with `items` for all selected offers.
+5. If the total exceeds budget, drop offers for the lowest-priority URIs (by position in the original request) until the total fits. A URI left with no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` on its `OfferGroup`.
+6. Return one `OfferGroup` per URI. `Resolve` is discovery only: it charges nothing and adds nothing to the spend. The agent buys the selected offers in a separate call, and only the totals of that purchase count as spend.
 
 ### Selection Interface
 
@@ -288,8 +288,13 @@ func filterByConstraints(offers []rankedOffer, c *forav1.RequestConstraints, bud
     for _, o := range offers {
         p := o.Offer.Pricing
 
-        // max_price: reject offers above the per-request ceiling
-        if c.MaxPrice != nil && p.Rate > c.MaxPrice.Amount {
+        // The price compared against the budget is the most the offer can be
+        // charged without a dispute: the rate of a FLAT price, and the ceiling
+        // amount Q x R of a metered (PER_UNIT) one (helpers.MeteredSettlementCap).
+        price := maxChargeWithoutDispute(p)
+
+        // max_price: drop offers above the per-offer ceiling
+        if c.MaxPrice != nil && price > c.MaxPrice.Amount {
             continue
         }
 
@@ -312,8 +317,10 @@ func filterByConstraints(offers []rankedOffer, c *forav1.RequestConstraints, bud
             }
         }
 
-        // Session budget: reject if cumulative spend would exceed session budget
-        if !budget.CanAfford(p.Rate, p.Currency) {
+        // Period and session budget: drop the offer if buying it would take the
+        // spend past the budget. Spend grows only from purchase totals; this
+        // filter reserves nothing and counts nothing.
+        if !budget.CanAfford(price, p.Currency) {
             continue
         }
 
@@ -323,6 +330,8 @@ func filterByConstraints(offers []rankedOffer, c *forav1.RequestConstraints, bud
 }
 ```
 
+When the budget drops every offer for a URI, that URI is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, a successful "no result". A budget is never reported as `OFFER_ABSENCE_REASON_NOT_AUTHORIZED`, and never as an error such as `RESOURCE_EXHAUSTED`.
+
 ## Stage 3: Deduplicate by ResourceIdentity
 
 The same article may be offered by multiple Exchanges (e.g., an AP wire story available from Exchange A and Exchange B). The Broker groups offers by resource identity and keeps only the cheapest per group.
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 2d94c0da..f6d4228b 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -402,7 +402,7 @@ sequenceDiagram
 
 A transaction carries one or more `items` (items-only model): there is no single-offer request shape. The handler validates, verifies the requester's RFC 9421 identity, checks idempotency once for the whole request, then **always** iterates `req.Msg.Items` — a single offer is simply a 1-element list. Each item presents the FULL signed offer it received at discovery; the Exchange verifies that presented `item.Offer` against its own offer-signing key (stateless, no reconstruct-from-catalog) and reads pricing, delivery, and domain from `item.Offer` itself.
 
-**Denial semantics**: a **1-element** request that is denied returns a non-OK transport error carrying `ErrorDetail.transaction_denial` (the "single transaction" rule — a lone commitment either succeeds as a body or fails as a transport error). A **multi-element batch** returns 200 with the failed item's `denial_reason` in-body, so surviving items still commit. `transactionDenied(...)` produces the 1-element transport error; the loop records in-body denials for batches.
+**Denial semantics**: every per-item denial is answered **in the body**, whatever the item count. The request returns 200 with the denied item's `denial_reason` set, so surviving items still commit, and a one-item request that is denied is a 200 whose only item is denied. A non-OK error carrying `ErrorDetail.transaction_denial` is produced only for a refusal of the **whole request** that decides no item — a reason about the caller that would deny every item alike, such as overdue reports. `transactionDenied(...)` produces that whole-request error; the loop records every per-item denial in the body.
 
 ```go
 func (h *ExchangeHandler) ExecuteTransaction(
@@ -442,32 +442,39 @@ func (h *ExchangeHandler) ExecuteTransaction(
         return nil, connect.NewError(connect.CodePermissionDenied, err)
     }
 
-    // 3. Idempotency check (idempotency_key — REQUIRED, keyed on the whole request)
-    if cached, ok := h.idempotency.Get(req.Msg.IdempotencyKey); ok {
-        return connect.NewResponse(cached), nil
+    // 3. Idempotency check (idempotency_key — REQUIRED). The key is scoped to the
+    //    caller: the account resolved from the verified key on a direct request,
+    //    and (Broker, requester) on a sub-request a Broker re-packaged. The stored
+    //    entry keeps a digest of the ordered items (each offer.signature), so the
+    //    same key with the same items is a replay, and the same key with different
+    //    items, or another order, is refused with already_exists and no typed reason.
+    scope := idempotencyScope(account, req.Msg)
+    if cached, ok := h.idempotency.Get(scope, req.Msg.IdempotencyKey); ok {
+        if cached.ItemsDigest != itemsDigest(req.Msg.Items) {
+            return nil, connect.NewError(connect.CodeAlreadyExists,
+                errors.New("idempotency_key already used by this caller with a different request"))
+        }
+        return connect.NewResponse(cached.Response), nil
     }
 
-    // 3a. Reporting gate: reject up front if the requester has overdue reports.
-    //     This is a whole-request precondition, so a 1-element request surfaces it
-    //     as a transport-level denial (see the single-vs-batch rule below).
+    // 3a. Reporting gate: refuse up front if the requester has overdue reports.
+    //     This is a reason about the caller that would deny every item alike, so
+    //     it refuses the WHOLE request, whatever the item count: a non-OK error
+    //     carrying ErrorDetail.transaction_denial, and nothing is purchased.
     if blocked, reason := h.reporting.CheckBuyerCompliance(ctx, account.ID); blocked {
         slog.Warn("requester blocked for overdue reporting",
             slog.String("requester_id", requester.Id),
             slog.String("domain", requester.Domain),
             slog.String("reason", reason),
         )
-        if len(req.Msg.Items) == 1 {
-            return nil, transactionDenied(forav1.DenialReason_DENIAL_REASON_REPORTING_OVERDUE)
-        }
-        // multi-element batch: mark every item overdue in-body, return 200
-        return connect.NewResponse(denyAllItems(req, forav1.DenialReason_DENIAL_REASON_REPORTING_OVERDUE)), nil
+        return nil, transactionDenied(forav1.DenialReason_DENIAL_REASON_REPORTING_OVERDUE)
     }
 
     // 4. Items-only pipeline. There is no separate single-offer branch: a single
-    //    offer is the degenerate 1-element `items` list. Process each item
-    //    independently — items are NOT atomic; one can fail (signature invalid,
-    //    resource unavailable, billing denied) while others succeed.
-    singleItem := len(req.Msg.Items) == 1
+    //    offer is the degenerate 1-element `items` list, and its denial is answered
+    //    in the body like any other. Process each item independently — items are
+    //    NOT atomic; one can fail (signature invalid, resource unavailable, billing
+    //    denied) while others succeed.
     agentHash := sha256Hex(requester.Id + ":" + requester.Domain)
     // The account handle (the billing_ref minted at Register) comes from the
     // account resolved in step 2b from the VERIFIED signing key. The request
@@ -475,23 +482,16 @@ func (h *ExchangeHandler) ExecuteTransaction(
     // select the account.
     billingRef := account.BillingRef
     var resultItems []*forav1.TransactionResultItem
-    var totalAmount float64
-    var currency string
+    totals := map[string]float64{} // purchased amount per currency
 
     for _, item := range req.Msg.Items {
         resultItem := &forav1.TransactionResultItem{OfferId: item.Offer.OfferId}
 
-        // deny records a per-item denial in-body for a batch, or — for a lone
-        // 1-element request — bubbles it up as a non-OK transport error carrying
-        // ErrorDetail.transaction_denial (the "single transaction" rule; the
-        // transport code is the error CLASS, the ErrorDetail the typed reason).
-        deny := func(reason forav1.DenialReason) (*connect.Response[forav1.TransactionResponse], error, bool) {
-            if singleItem {
-                return nil, transactionDenied(reason), true
-            }
+        // deny records a per-item denial in the body. It is the same for a
+        // one-item request and a batch: a per-item denial is never a non-OK error.
+        deny := func(reason forav1.DenialReason) {
             resultItem.DenialReason = &reason
             resultItems = append(resultItems, resultItem)
-            return nil, nil, false
         }
 
         // 4a. Verify the PRESENTED signed offer (stateless — no offer storage,
@@ -502,18 +502,14 @@ func (h *ExchangeHandler) ExecuteTransaction(
         //     offer-signing key and returns that same offer to read pricing from.
         offer, err := h.offerVerifier.Verify(item.Offer)
         if err != nil {
-            if resp, denyErr, done := deny(forav1.DenialReason_DENIAL_REASON_SIGNATURE_INVALID); done {
-                return resp, denyErr
-            }
+            deny(forav1.DenialReason_DENIAL_REASON_SIGNATURE_INVALID)
             continue
         }
 
         // Resolve tenant from the offer's Exchange domain (domain→tenant lookup)
         tenantCfg, err := h.tenants.ResolveFromDomain(offer.Exchange)
         if err != nil {
-            if resp, denyErr, done := deny(forav1.DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE); done {
-                return resp, denyErr
-            }
+            deny(forav1.DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE)
             continue
         }
 
@@ -543,9 +539,6 @@ func (h *ExchangeHandler) ExecuteTransaction(
                     slog.String("tenant_id", tenantCfg.ID),
                     slog.Any("error", err),
                 )
-                if singleItem {
-                    return nil, billingErrToConnect(err)
-                }
             }
             if err != nil || !authResp.Approved {
                 if err == nil {
@@ -554,9 +547,7 @@ func (h *ExchangeHandler) ExecuteTransaction(
                         slog.String("reason", authResp.Reason),
                     )
                 }
-                if resp, denyErr, done := deny(txnErrToDenialReason(err)); done {
-                    return resp, denyErr
-                }
+                deny(txnErrToDenialReason(err))
                 continue
             }
             billingID = authResp.BillingID
@@ -595,13 +586,7 @@ func (h *ExchangeHandler) ExecuteTransaction(
                     slog.Any("error", releaseErr),
                 )
             }
-            if singleItem {
-                return nil, connect.NewError(connect.CodeInternal,
-                    fmt.Errorf("transaction log write failed: %w", err))
-            }
-            if resp, denyErr, done := deny(forav1.DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE); done {
-                return resp, denyErr
-            }
+            deny(forav1.DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE)
             continue
         }
 
@@ -618,13 +603,7 @@ func (h *ExchangeHandler) ExecuteTransaction(
                 slog.String("tenant_id", tenantCfg.ID),
                 slog.Any("error", err),
             )
-            if singleItem {
-                return nil, connect.NewError(connect.CodeInternal,
-                    fmt.Errorf("URL signing failed: %w", err))
-            }
-            if resp, denyErr, done := deny(forav1.DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE); done {
-                return resp, denyErr
-            }
+            deny(forav1.DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE)
             continue
         }
 
@@ -660,36 +639,45 @@ func (h *ExchangeHandler) ExecuteTransaction(
         resultItem.ExpiresAt = timestamppb.New(time.Now().Add(tenantCfg.URLTTLOrDefault(5 * time.Minute)))
         resultItems = append(resultItems, resultItem)
 
-        totalAmount += amount
-        currency = offer.Pricing.Currency
+        totals[offer.Pricing.Currency] += amount
     }
 
     // 5. Build response — every per-result datum lives on its TransactionResultItem;
     //    the top-level fields carry only shared aggregate state. Correlation is not
     //    in the body — it rides the X-Request-ID HTTP header across the round-trip.
+    //    total_cost is set only when the purchased items share one currency:
+    //    amounts are never summed across currencies, and this version defines no
+    //    currency conversion.
     resp := &forav1.TransactionResponse{
         Ver:               helpers.ProtocolVersion,
         AgentIdentityHash: agentHash,
         Items:             resultItems,
-        TotalCost:         &forav1.Cost{Amount: totalAmount, Currency: currency},
+    }
+    if len(totals) == 1 {
+        for currency, amount := range totals {
+            resp.TotalCost = &forav1.Cost{Amount: amount, Currency: currency}
+        }
     }
 
-    // 6. Cache for idempotency (keyed by the request's idempotency_key)
-    h.idempotency.Set(req.Msg.IdempotencyKey, resp, 10*time.Minute)
+    // 6. Cache for idempotency, under the caller's scope, with the items digest
+    //    that tells a replay from a reuse of the key with a different request.
+    h.idempotency.Set(scope, req.Msg.IdempotencyKey, cachedResult{
+        Response:    resp,
+        ItemsDigest: itemsDigest(req.Msg.Items),
+    }, 10*time.Minute)
     return connect.NewResponse(resp), nil
 }
 
 // transactionDenied maps a typed DenialReason to a non-OK transport error
-// carrying ErrorDetail.transaction_denial. A denied 1-element transaction is an
-// error, not a success body — the transport code is the error class, the
-// attached ErrorDetail carries the typed reason (and restriction_mismatches
-// when the reason is RESTRICTION_NOT_SATISFIED).
-func transactionDenied(reason forav1.DenialReason, mismatches ...forav1.RestrictionKind) error {
+// carrying ErrorDetail.transaction_denial. It is used ONLY for a refusal of the
+// whole request — a reason about the caller that decides no item — never for a
+// per-item denial, which is answered in the body whatever the item count. The
+// transport code is the error class, the attached ErrorDetail the typed reason.
+func transactionDenied(reason forav1.DenialReason) error {
     detail := &forav1.ErrorDetail{
         Reason: &forav1.ErrorDetail_TransactionDenial{
             TransactionDenial: &forav1.TransactionDenial{
-                Reason:                reason,
-                RestrictionMismatches: mismatches,
+                Reason: reason,
             },
         },
     }
@@ -703,15 +691,16 @@ func transactionDenied(reason forav1.DenialReason, mismatches ...forav1.Restrict
 
 **Latency budget**: 20ms p50, 100ms p99 per item. The billing adapter authorization (5ms p50) and transaction log write (1-2ms p50 for local WAL) dominate. Multi-item requests are processed sequentially, so latency scales with item count.
 
-**Atomicity note**: Multi-item requests are best-effort per item and **NOT atomic**. The Exchange processes items sequentially in original order. If item 3 of 5 fails billing authorization, items 1-2 are already committed (signed URLs issued) and items 4-5 continue processing. The caller MUST check each `TransactionResultItem.denial_reason` to determine which items succeeded. This non-atomic model is deliberate: it matches how programmatic resource access handles multi-slot requests. A 1-element request has nothing to keep partial, so its denial travels as a non-OK transport error carrying `ErrorDetail.transaction_denial` instead of an in-body `denial_reason`.
+**Atomicity note**: Multi-item requests are best-effort per item and **NOT atomic**. The Exchange processes items sequentially in original order. If item 3 of 5 fails billing authorization, items 1-2 are already committed (signed URLs issued) and items 4-5 continue processing. The caller MUST check each `TransactionResultItem.denial_reason` to determine which items succeeded. This non-atomic model is deliberate: it matches how programmatic resource access handles multi-slot requests. A 1-element request follows the same rule: its denial is an in-body `denial_reason`, never a non-OK error.
 
 ### Sub-requests from a Broker
 
 When an agent buys through `BrokerService.ExecuteTransaction`, the Broker sends this Exchange a sub-request it authored: this Exchange's items in request order, each with the agent's `AgentAcceptance`, the agent's `AgentRequestAcceptance`, `requester` and `idempotency_key` unchanged, and the **Broker's** RFC 9421 signature. The pipeline above runs unchanged, with three points to note:
 
 - **Who consented.** The wire signer is the Broker. The agent is authenticated by its body acceptances, verified against the keys published in the WBA directory of `requester.domain`. The delivery URL and `agent_identity_hash` are bound to the agent key the acceptances verify under, and a delegation's `cnf.jkt` is checked against that same key.
-- **Idempotency.** The key is the agent's, forwarded unchanged. Scope it per (Broker, requester the acceptances authenticate, key), so two agents behind one Broker that choose the same key cannot collide.
-- **Answers.** Answer exactly as for a direct request. A provider that does not accept relayed purchases has the item denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`. A refusal of the whole sub-request — including the non-OK `transaction_denial` a one-item request receives — reaches the agent unchanged on each affected item's `TransactionResultItem.refusal`, because the Broker never turns it into an error of its own.
+- **Idempotency.** The key is the agent's, forwarded unchanged. Scope it per (Broker, requester the acceptances authenticate, key), so two agents behind one Broker that choose the same key cannot collide. The same key with different items in that scope is refused with `already_exists`.
+- **The signed set.** If the sub-request's items are not exactly the agent's `AgentRequestAcceptance` projected onto this Exchange — an item dropped, added or reordered — deny every item with `DENIAL_REASON_SIGNATURE_INVALID`, in the body, purchase nothing and claim no idempotency state. It is not an `invalid_argument` error.
+- **Answers.** Answer exactly as for a direct request: every per-item denial in the body, whatever the item count. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, in the body, while the other items may succeed. It is never a refusal of the whole sub-request. Only a refusal of the whole sub-request, which decides no item, is a non-OK error; it reaches the agent unchanged on each affected item's `TransactionResultItem.refusal`, because the Broker never turns it into an error of its own.
 
 ### Partial Failure Handling
 
@@ -719,15 +708,15 @@ The ExecuteTransaction pipeline has multiple steps that can fail independently:
 
 | Step Failed | Already Done | Action |
 |---|---|---|
-| Validation | Nothing | Return `CodeInvalidArgument` |
-| Offer signature verification | Nothing | Return `CodeInvalidArgument` |
-| Billing Authorize | Nothing | Return per timeout policy (sentinel errors) |
-| Transaction log write | Billing authorized | Release billing hold, return `CodeInternal` |
-| URL signing | Billing authorized + log written | Log error, return `CodeInternal` (txn recorded as failed) |
+| Validation | Nothing | Return `CodeInvalidArgument` (the whole request) |
+| Offer signature verification | Nothing | Deny the item in the body (`DENIAL_REASON_SIGNATURE_INVALID`) |
+| Billing Authorize | Nothing | Deny the item in the body, with the reason the timeout policy maps the sentinel error to |
+| Transaction log write | Billing authorized | Release billing hold, deny the item in the body |
+| URL signing | Billing authorized + log written | Log error, deny the item in the body (txn recorded as failed) |
 | Reporting obligation create | Billing + log + URL | Log warning, continue (non-critical) |
 | Billing Record | Billing + log + URL | Log warning, continue (reconciliation catches) |
 
-The key invariant: if the transaction log write fails, no signed URL is ever issued. If the signed URL generation fails, the transaction is recorded as failed for reconciliation.
+The key invariant: if the transaction log write fails, no signed URL is ever issued. If the signed URL generation fails, the transaction is recorded as failed for reconciliation. Every failure in this table that concerns one item is answered on that item, in the body, whatever the item count.
 
 ---
 
@@ -753,8 +742,8 @@ sequenceDiagram
     Handler->>RT: SubmitReport(ctx, UsageReport)
 
     Note over RT: Validate required fields present
-    Note over RT: Check reporting window (not expired)
-    Note over RT: Validate consumed_quantity >= minimum billable
+    Note over RT: Check reporting window (not expired, else WINDOW_EXPIRED)
+    Note over RT: consumed_quantity is never checked against the estimate
     Note over RT: Transition obligation: pending → fulfilled
 
     RT->>TxLog: WriteUsageReport(ctx, UsageReportRecord)
@@ -773,9 +762,11 @@ func (h *ExchangeHandler) ReportUsage(
     ctx context.Context,
     req *connect.Request[forav1.UsageReport],
 ) (*connect.Response[forav1.UsageReportResponse], error) {
-    // 1. Validate
+    // 1. Validate. A malformed report is invalid_argument with its typed reason,
+    //    USAGE_REPORT_REJECTION_REASON_MALFORMED.
     if err := validate(req.Msg); err != nil {
-        return nil, connect.NewError(connect.CodeInvalidArgument, err)
+        return nil, usageReportRejected(connect.CodeInvalidArgument,
+            forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MALFORMED)
     }
 
     // 2. Verify transaction exists and billing_id matches
@@ -791,7 +782,11 @@ func (h *ExchangeHandler) ReportUsage(
 
     // 3. Submit to reporting tracker. A rejection is NOT a success body: it
     //    travels as a non-OK transport error carrying a typed
-    //    ErrorDetail.usage_report_rejection (UsageReportRejectionReason).
+    //    ErrorDetail.usage_report_rejection (UsageReportRejectionReason). A
+    //    report past its reporting window is WINDOW_EXPIRED with the code
+    //    failed_precondition. The tracker never refuses a report for its
+    //    consumed_quantity: the quantity is unrestricted, and a metered report
+    //    settles at min(consumed, ceiling) x rate with the excess held.
     //    Success returns the Exchange-assigned report_id, required to anchor
     //    the dispute chain.
     result, err := h.reporting.SubmitReport(ctx, req.Msg, txn)
@@ -799,7 +794,7 @@ func (h *ExchangeHandler) ReportUsage(
         return nil, connect.NewError(connect.CodeInternal, err)
     }
     if !result.Accepted {
-        return nil, usageReportRejected(result.Reason) // ErrorDetail.usage_report_rejection
+        return nil, usageReportRejected(result.Code, result.Reason) // ErrorDetail.usage_report_rejection
     }
 
     return connect.NewResponse(&forav1.UsageReportResponse{
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 362cfcc7..24389731 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -174,14 +174,15 @@ for _, q := range resp.SubscriptionQuota {
 
 ### Denial Reasons You May Encounter
 
-When a request is denied, the Exchange returns a specific `DenialReason` so your agent knows what went wrong and can respond appropriately:
+When an item is denied, the Exchange returns a specific `DenialReason` so your agent knows what went wrong and can respond appropriately. A denial of an item rides in the response body, on that item's `denial_reason`, also when you bought a single offer. Only a refusal of the whole request — for example no account at that Exchange (`DENIAL_REASON_ACCOUNT_NOT_REGISTERED`) — is an error carrying `ErrorDetail.transaction_denial`.
 
 | Denial Reason | Meaning | What to Do |
 |---|---|---|
 | `DENIAL_REASON_QUOTA_EXCEEDED` | Subscription access count exhausted for this period | Wait for quota reset or upgrade subscription |
 | `DENIAL_REASON_DELEGATION_INVALID` | Delegation missing, unverifiable (broken chain linkage or holder-binding mismatch), expired, or it widens scope beyond its parent | Obtain a fresh delegation from the principal |
 | `DENIAL_REASON_INSUFFICIENT_BALANCE` | Requester's balance too low for this transaction | Add funds or reduce request scope |
-| `DENIAL_REASON_SIGNATURE_INVALID` | Ed25519 signature verification failed | Check your signing key configuration |
+| `DENIAL_REASON_SIGNATURE_INVALID` | A signature the item depends on did not verify: the offer's, or your request acceptance, including when the items that arrived are not the set you signed | Check your signing key configuration, and that the request carries exactly the offers you signed, in order |
+| `DENIAL_REASON_RELAY_NOT_ACCEPTED` | The provider of this offer does not accept purchases relayed by a Broker | Buy this offer directly at its Exchange |
 
 ## What It Costs
 
diff --git a/website/src/content/docs/getting-started/how-money-flows.mdx b/website/src/content/docs/getting-started/how-money-flows.mdx
index c5c8fb9c..66a7ca74 100644
--- a/website/src/content/docs/getting-started/how-money-flows.mdx
+++ b/website/src/content/docs/getting-started/how-money-flows.mdx
@@ -61,21 +61,23 @@ Providers set their preferred pricing model and rate in their RSL file. The Exch
 
 Different pricing models make direct comparison difficult. An article priced at $0.05 per access is not directly comparable to a resource priced at $0.00002 per token.
 
-**unit_cost** normalizes all pricing to a per-unit basis, analogous to eCPM in advertising. The unit is specified by the `Pricing.unit` field (e.g., "tokens", "pages", "seconds", "records"):
+**unit_cost** normalizes all pricing to a per-unit basis, analogous to eCPM in advertising. It is stated in the comparison unit of the content type: tokens for text, seconds for audio and video, pages for documents, records for data.
 
 ```
-unit_cost = total_cost / estimated_quantity
+unit_cost = price of one purchase / size of the resource in the comparison unit
 ```
 
+The denominator is the size of the resource, **not** `estimated_quantity`. `estimated_quantity` is always counted in the offer's own `Pricing.unit`, so it is the comparison size only when the offer is priced in the comparison unit. A price per access has an estimate in accesses — one access — never a token count.
+
 For example:
-- Article at $0.05, estimated 3,300 tokens: unit_cost = $0.00001515 (unit: "tokens")
-- Per-token pricing at $0.00002: unit_cost = $0.00002 (unit: "tokens")
-- Per-page at $0.10, estimated 15 pages: unit_cost = $0.10 (unit: "pages")
-- Audio at $0.50/minute, estimated 45 minutes (2,700 s): unit_cost = $0.0083 (unit: "seconds")
+- Article at $0.05 per access (`unit: "accesses"`, `estimated_quantity: 1`), 3,300 tokens long: unit_cost = $0.05 / 3,300 = $0.00001515 per token
+- Per-token pricing at $0.00002 (`unit: "tokens"`): unit_cost = $0.00002 per token, the rate itself
+- Per-page at $0.10 (`unit: "pages"`, `estimated_quantity: 15`): unit_cost = $0.10 per page, the rate itself
+- Audio at $0.50 per minute (`unit: "minutes"`, `estimated_quantity: 45`): unit_cost = $0.50 / 60 = $0.0083 per second
 
 The Broker uses `unit_cost` to compare offers across Exchanges and pricing models, selecting the most cost-effective option regardless of how the provider originally priced it.
 
-Every `Offer` in a `ResourceResponse` includes both the native pricing and the computed `unit_cost` value:
+Every `Offer` in a `ResourceResponse` includes both the native pricing and the computed `unit_cost` value. Here the article priced per access:
 
 ```json
 {
@@ -84,12 +86,14 @@ Every `Offer` in a `ResourceResponse` includes both the native pricing and the c
     "rate": "0.05",
     "currency": "USD",
     "unit_cost": "0.00001515",
-    "estimated_quantity": 3300,
-    "unit": "tokens"
+    "estimated_quantity": 1,
+    "unit": "accesses"
   }
 }
 ```
 
+The agent accepts estimate × rate = 1 × $0.05 at purchase. Its usage report counts accesses too (`consumed_quantity: 1`, `consumed_unit: "accesses"`), and settles at min(consumed, ceiling) × rate: one access at the default 10% tolerance has a ceiling of 1.1 accesses, so an honest report of one access is charged $0.05.
+
 ## base_currency
 
 Each Exchange declares a `base_currency` in its manifest (ISO 4217 code, e.g., "USD", "EUR"). All `unit_cost` values in offers from that Exchange are denominated in this currency. This enables cross-exchange price comparison by the Broker without requiring currency conversion at query time.
@@ -122,10 +126,10 @@ Subscription transactions include a `subscription_unit_value` field that carries
 
 Two enforcement layers prevent overspend, mirroring how OpenRTB prevents advertiser overspend:
 
-- **Agent/Broker-side**: `RequestConstraints.max_unit_cost` -- the agent will not accept offers above this threshold. The Broker tracks cumulative spend across a session and enforces the agent's budget cap. For a metered offer, the most the purchase can cost without a dispute is the settlement ceiling × rate, which is the figure to budget against.
-- **Exchange-side**: The Exchange operator's Billing Adapter checks the requester's balance or credit before authorizing each transaction. Returns a denial if the requester is over their limit.
+- **Agent/Broker-side**: `RequestConstraints.max_unit_cost` -- the agent will not accept offers above this threshold. `BrokerService.Resolve` filters out every offer that would exceed the agent's budget (`max_price`, and `period_budget` for its `budget_scope`) and answers a URI left with none with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`. Resolve never charges and never counts as spend; the spend grows only from purchase totals. For a metered offer, the most the purchase can cost without a dispute is the settlement ceiling × rate, which is the figure the budget is compared against.
+- **Exchange-side**: The Exchange operator's Billing Adapter checks the requester's balance or credit before authorizing each item. An item the requester cannot afford is denied in the response body (`DENIAL_REASON_INSUFFICIENT_BALANCE`), also when it is the only item.
 
-Each Exchange independently tracks per-requester balance. The Broker maintains its own cumulative view for budget enforcement, but the Exchange is authoritative for "can this requester afford this transaction."
+Each Exchange independently tracks per-requester balance. The Broker keeps its own view of spend for budget filtering, but the Exchange is authoritative for "can this requester afford this transaction." Currency conversion is out of scope for this version: totals are never summed across currencies.
 
 ## Example Transaction: End to End
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 3f98f759..51d33805 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -338,7 +338,7 @@ Instead, each projected subrequest is a **new HTTP request its sender authors**.
 The agent's cryptographic authorization does not ride the transport layer at all. It rides in the body, as two detached Ed25519 signatures that stay valid however the request travels:
 
 - **`agent_acceptance`** on each item — binds that offer to the requester and the idempotency key.
-- **`agent_request_acceptance`** on the request — binds the **complete ordered set** of `(offer signature, exchange)` references, so each Exchange can require its subrequest to be the exact in-order projection of the set the agent signed. See [Broker fan-out and request projection](/components/broker/overview/#execution-separate-step) for the flow.
+- **`agent_request_acceptance`** on the request — binds the **complete ordered set** of `(offer signature, exchange)` references, so each Exchange can require its subrequest to be the exact in-order projection of the set the agent signed. A subrequest that is not that projection (an item dropped, added or reordered) is refused per item, in the body: every item is denied with `DENIAL_REASON_SIGNATURE_INVALID`, because the agent's signature does not cover what arrived. It is not an `invalid_argument` error. See [Broker fan-out and request projection](/components/broker/overview/#execution-separate-step) for the flow.
 
 Both acceptances name the requester: their canonical bytes carry a non-empty `requester_id` and `requester_domain`, copied from the request's `Requester`. A signer refuses to sign bytes that name an empty requester, and a verifier refuses an acceptance whose canonical bytes name one, even when the signature over those bytes verifies. Such bytes bind the agent's consent to nobody, and on a relayed purchase the acceptances are the only agent signatures the Exchange sees. The SDKs enforce this in all three languages: their acceptance signers refuse an empty requester locally as a malformed request, and their verifiers refuse such an acceptance.
 
diff --git a/website/src/content/docs/protocol/dispute-resolution.mdx b/website/src/content/docs/protocol/dispute-resolution.mdx
index 700d741d..e58478d1 100644
--- a/website/src/content/docs/protocol/dispute-resolution.mdx
+++ b/website/src/content/docs/protocol/dispute-resolution.mdx
@@ -22,7 +22,7 @@ Offer
           -> DisputeResponse (dispute_id, status, resolution)
 ```
 
-`DisputeRequest.report_id` is **required** -- the Exchange refuses to file any dispute without a prior usage report. A refusal to file is not a `DisputeResponse` with a rejection field; it is a non-OK transport error carrying a typed `ErrorDetail.dispute_failure` (e.g. `DISPUTE_FAILURE_REASON_REPORT_NOT_FILED`). This prevents fire-and-forget disputes and fabricated usage data. `DisputeRequest.idempotency_key` (required) dedupes retried filings.
+Every Exchange implements `DisputeTransaction`: it is part of the core protocol, not an optional capability, and an Exchange accepts every filing that passes its checks. `DisputeRequest.report_id` is **required** -- the Exchange refuses to file any dispute without a prior usage report. A refusal to file is not a `DisputeResponse` with a rejection field; it is a non-OK transport error carrying a typed `ErrorDetail.dispute_failure`, whose `DisputeFailureReason` names the one check the filing failed: an unknown transaction (`TRANSACTION_NOT_FOUND`), no accepted report for this transaction (`REPORT_NOT_FILED`), a closed dispute window (`WINDOW_EXPIRED`), a dispute already filed (`DUPLICATE`), or a transaction whose state admits no dispute (`INELIGIBLE`). This prevents fire-and-forget disputes and fabricated usage data. `DisputeRequest.idempotency_key` (required) dedupes retried filings: a retry of the same filing under the same key is a replay and returns the original `DisputeResponse`, not `DUPLICATE`, and the same key with a different filing is refused with `already_exists`.
 
 ## What Is Auto-Disputable
 
diff --git a/website/src/content/docs/protocol/ext-news.mdx b/website/src/content/docs/protocol/ext-news.mdx
index 2c62d64a..e43acb82 100644
--- a/website/src/content/docs/protocol/ext-news.mdx
+++ b/website/src/content/docs/protocol/ext-news.mdx
@@ -337,8 +337,8 @@ An Exchange returns an offer for a New York Times article. The article has been
     "rate": "0.15",
     "currency": "USD",
     "unit_cost": "0.000061",
-    "estimated_quantity": 2450,
-    "unit": "tokens"
+    "estimated_quantity": 1,
+    "unit": "accesses"
   },
   "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
   "identity": {
diff --git a/website/src/content/docs/protocol/licensing-terms.mdx b/website/src/content/docs/protocol/licensing-terms.mdx
index 9b891292..08a54f91 100644
--- a/website/src/content/docs/protocol/licensing-terms.mdx
+++ b/website/src/content/docs/protocol/licensing-terms.mdx
@@ -11,7 +11,9 @@ FORA introduces the **Universal Licensing Core**: a structured, cross-domain-por
 The model was designed to cover a wide range of content types and legal arrangements: news articles, stock photos, academic papers, music recordings, patent design files, datasets, and software. The same proto shapes appear at both ends of the pipeline:
 
 - **Ingestion** (`ResourceEntry.terms`) — publishers declare terms when pushing resources into an Exchange catalog via `CatalogService.PushResources`.
-- **Emission** (`Offer.terms`) — the Exchange projects each term the requester is entitled to onto its own offer, and carries that term on it unchanged. No translation or reformulation. A resource with three eligible terms answers `DiscoverResources` with three offers, one per term.
+- **Emission** (`Offer.terms`) — the Exchange projects each term the requester is entitled to onto its own offer. It moves the term's price into `Offer.pricing` and carries the rest of the term on the offer unchanged, with no translation or reformulation. A resource with three eligible terms answers `DiscoverResources` with three offers, one per term.
+
+An offer states its price **once**, in `Offer.pricing`. The term inside the offer carries no `pricing` (rule `offer.terms.pricing_unset`). Each offer derives from exactly one catalog term, so the offer's price and the term's price cannot disagree, and execute charges `Offer.pricing`.
 
 ## Why multiple terms per resource?
 
@@ -27,7 +29,7 @@ One resource entry, multiple terms — each covering a complete, distinct access
 
 Every `LicenseTerm` has a `TermSemantics` value:
 
-`Pricing` is required on **every** term regardless of semantics — absent Pricing is a validation error, and `model = FREE` must be stated explicitly (absent Pricing is not free). An agent cannot act on a priceless term, so the machine-readable price is always present even when the rest of the terms are deferred to a document.
+`Pricing` is required on **every catalog term** regardless of semantics — absent Pricing is a validation error (rule `resource_entry.terms.pricing_required`), and `model = FREE` must be stated explicitly (absent Pricing is not free). An agent cannot act on a priceless term, so the machine-readable price is always present even when the rest of the terms are deferred to a document. On an offer that price is `Offer.pricing`, and the term the offer carries has none.
 
 **`ENUMERATED`** — the machine fields (`restrictions`, `quotas`, `obligations`) are the complete, authoritative expression of the term. They must be internally consistent (a term may not contradict itself), are validated and normalized at ingest — the same checks ship in the SDK as a publisher pre-check (`ValidateResourceEntry` / `NormalizeLicenseTerm` and their Python and TypeScript twins) — and are surfaced on every offer. Restrictions are not an Exchange-side gate the requester must pass to see a term: discovery returns an offer for every scope-covered term and the agent chooses the offer whose restrictions it can honour, bearing compliance; enforcement happens downstream at usage reconciliation. An Exchange or Broker MAY, as a convenience, pre-filter offers using attributes the requester volunteers (function / geography / user-type), but that is advisory, not enforcement. So if a term declares `ai-train` prohibited, that prohibition rides on the offer and binds the transaction the agent accepts.
 
@@ -135,7 +137,7 @@ For CoMP interop, a CoMP `revshare` rate is carried verbatim in the `fora-comp-v
 
 A `PER_UNIT` price is **metered**: the agent pays per unit consumed, and the quantity is known only after use. Two fields bound what such a purchase can cost:
 
-- `Pricing.estimated_quantity` — the estimate, in the price's `unit`. It is **required and positive on every metered offer** (the `offer.metered.requires_estimate` rule): an offer whose pricing or term is `PER_UNIT` and that carries no estimate is invalid, and the SDK verifiers reject it. A term you push does not need one. The estimate describes the resource rather than the arrangement, so you can state it once on `ResourceEntry.estimated_quantity`, and the Exchange puts it on the offer's pricing. An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer for that term. A `FREE` or `FLAT` price needs no estimate.
+- `Pricing.estimated_quantity` — the estimate, in the price's `unit`. It is **required and positive on every metered offer** (the `offer.metered.requires_estimate` rule): an offer whose pricing is `PER_UNIT` and that carries no estimate is invalid, and the SDK verifiers reject it. The estimate counts the price's own unit: a price per access has an estimate in accesses, a price per token an estimate in tokens. A term you push does not need one. The estimate describes the resource rather than the arrangement, so you can state it once on `ResourceEntry.estimated_quantity`, and the Exchange puts it on the offer's pricing. An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer for that term. A `FREE` or `FLAT` price needs no estimate.
 - `Pricing.estimate_tolerance_bps` — optional, on a `PER_UNIT` term only (`pricing.estimate_tolerance.requires_per_unit`). It is the tolerance on the estimate, in basis points from `0` to `10000`. When the term states none, the tolerance is `1000` (10%). An explicit `0` means the estimate is the ceiling. The Exchange carries it unchanged onto the offer.
 
 The agent accepts estimate × rate at purchase. Its usage report settles at the consumed quantity × rate, up to the ceiling estimate × (10000 + tolerance) / 10000. A quantity below the estimate is charged as consumed. A quantity above the ceiling is charged only up to the ceiling, and the excess is held for dispute, never charged automatically. [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase) has the full rule and a worked example.
@@ -175,7 +177,7 @@ obligations:
     detail: "Cite TechCrunch at the original URL"
 ```
 
-An academic RAG agent matches Term 1. A commercial legal research platform matches Term 2. The Exchange emits one offer per term, each priced from the term it carries; the agent picks the applicable **offer**, signs it, and executes it.
+An academic RAG agent matches Term 1. A commercial legal research platform matches Term 2. The Exchange emits one offer per term, each priced from the term it derives from: Term 2's offer carries `pricing: { model: PER_UNIT, unit: "accesses", rate: 0.05, currency: "USD", estimated_quantity: 1 }`, one access, and the term on that offer carries no pricing. The agent picks the applicable **offer**, signs it, and executes it.
 
 ### Stock photo — impressions quota + perpetual license
 
@@ -242,7 +244,7 @@ license:
 pricing: { model: FLAT, rate: 500.00, currency: "USD" }
 ```
 
-`Pricing` is required even on a `REFERENCE_ONLY` term — the human-readable terms live in the referenced document, but the machine-readable price is always stated.
+`Pricing` is required even on a `REFERENCE_ONLY` catalog term — the human-readable terms live in the referenced document, but the machine-readable price is always stated. On the offer, it is `Offer.pricing`.
 
 The Exchange emits an offer for each. A sophisticated agent reads the REFERENCE_ONLY offer's term to verify the machine-enumerable Term 1 matches the authoritative document before committing to either offer.
 
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 3c5eb79c..66d1976d 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -133,8 +133,9 @@ SSP-Alpha's Resource Ingestion Pipeline runs in the background:
      path: "/premium/ai-regulation-2026.html",
      title: "AI Regulation: What Providers Need to Know",
      word_count: 2500,
-     estimated_quantity: 3300,
+     estimated_quantity: 1,   // in the price's unit: one access per purchase
      pricing: { model: PRICING_MODEL_PER_UNIT, rate: "0.05", currency: "USD", unit: "accesses", unit_cost: "0.00001515" },
+     // unit_cost = $0.05 / 3300 tokens (the article's attested size), for comparison only
      identity: {
        canonical_url: "https://techcrunch.com/premium/ai-regulation-2026.html",
        iptc_guid: "urn:newsml:techcrunch:20260315:ai-reg-001",
@@ -285,7 +286,7 @@ The SDK sends `DiscoverResources` to SSP-Alpha — `POST https://exchange.ssp-al
    Offer A (per-request):
      offer_id: "2325749d-50d3-431a-ac34-900d443ee88e"
      pricing: { model: PRICING_MODEL_PER_UNIT, rate: "0.05", currency: "USD",
-                unit: "accesses", unit_cost: "0.00001515", estimated_quantity: 3300 }
+                unit: "accesses", unit_cost: "0.00001515", estimated_quantity: 1 }
      identity: { canonical_url: "https://techcrunch.com/premium/ai-regulation-2026.html",
                  iptc_guid: "urn:newsml:techcrunch:20260315:ai-reg-001",
                  content_hash: "a1b2c3d4e5f6...", hash_method: "simhash-v1" }
@@ -296,7 +297,6 @@ The SDK sends `DiscoverResources` to SSP-Alpha — `POST https://exchange.ssp-al
      ]
      terms: [
        { semantics: TERM_SEMANTICS_ENUMERATED,
-         pricing: { model: PRICING_MODEL_PER_UNIT, rate: "0.05", currency: "USD", unit: "accesses" },
          restrictions: [
            { kind: RESTRICTION_KIND_FUNCTION,
              permitted: ["ai-input", "ai-index", "search"],
@@ -316,7 +316,6 @@ The SDK sends `DiscoverResources` to SSP-Alpha — `POST https://exchange.ssp-al
      attestations: { same as Offer A }
      terms: [
        { semantics: TERM_SEMANTICS_ENUMERATED,
-         pricing: { model: PRICING_MODEL_FREE, rate: "0", currency: "USD" },
          restrictions: [ same as Offer A ],
          scopes: ["subscription:SUB-ANTHROPIC-HEARST-2026"] }
      ]
@@ -344,7 +343,7 @@ The SDK sends `DiscoverResources` to SSP-Alpha — `POST https://exchange.ssp-al
         "currency": "USD",
         "unit": "accesses",
         "unit_cost": "0.00001515",
-        "estimated_quantity": 3300
+        "estimated_quantity": 1
       },
       "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
       "identity": {
@@ -510,7 +509,7 @@ SSP-Alpha returns `offer_groups` (batch mode -- multiple URIs in query):
         {
           "offer_id": "2325749d-50d3-431a-ac34-900d443ee88e",
           "exchange": "exchange.ssp-alpha.com",
-          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit": "accesses", "unit_cost": "0.00001515", "estimated_quantity": 3300 },
+          "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.05", "currency": "USD", "unit": "accesses", "unit_cost": "0.00001515", "estimated_quantity": 1 },
           "identity": { "canonical_url": "https://techcrunch.com/premium/ai-regulation-2026.html", "iptc_guid": "urn:newsml:techcrunch:20260315:ai-reg-001", "content_hash": "a1b2c3d4e5f6...", "hash_method": "simhash-v1" },
           "attestations": [{ "verifier": "gumgum.com", "claims": { "estimated_quantity": 3300, "word_count": 2500 }, "signature": "..." }],
           "terms": [
@@ -559,7 +558,7 @@ Note: SSP-Alpha returns an empty `offers` array for the `theverge.com` URI with
     {
       "offer_id": "ecb6fef4-1d83-4751-ab92-b3bc7c2fee39",
       "exchange": "exchange.ssp-beta.com",
-      "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.07", "currency": "USD", "unit": "accesses", "unit_cost": "0.00002258", "estimated_quantity": 3100 },
+      "pricing": { "model": "PRICING_MODEL_PER_UNIT", "rate": "0.07", "currency": "USD", "unit": "accesses", "unit_cost": "0.00002258", "estimated_quantity": 1 },
       "identity": {
         "canonical_url": "https://theverge.com/premium/ai-regulation-republish.html",
         "iptc_guid": "urn:newsml:techcrunch:20260315:ai-reg-001",
@@ -618,10 +617,14 @@ Step 3: Rank within content group
 
   Selected: 4f155204-a53e-42aa-8471-154f87d7d3d5 (subscription, zero marginal cost, third-party attested)
 
-Step 4: Budget check
-  - Subscription offer: cost = $0 -> always within budget
-  - Cumulative spend for scope "team:claude-rag": $142.50 of $500.00 period budget
-  - Proceed
+Step 4: Budget filter (applied before the offers are returned)
+  - Spend so far for scope "team:claude-rag": $142.50 of the $500.00 period budget.
+    This spend comes only from earlier purchase totals. Resolve never charges
+    and never adds to it.
+  - An offer that would take spend past $500.00 is dropped from the result.
+    All three offers fit, so none is dropped. If none had fitted, the URI would
+    come back with OFFER_ABSENCE_REASON_BUDGET_EXCEEDED (a "no result", not an error).
+  - Subscription offer: cost = $0 -> fits any budget
 ```
 
 ---
@@ -926,7 +929,7 @@ The SDK auto-submits a usage report (background, non-blocking). Usage reporting
 }
 ```
 
-A successful `UsageReportResponse` carries only the Exchange-assigned `report_id` (the durable identity the agent references when filing a dispute). A rejected report is not a success body — it travels as a non-OK transport error carrying `ErrorDetail.usageReportRejection` (e.g. `{ "usage_report_rejection": { "reason": "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED" } }`).
+A successful `UsageReportResponse` carries only the Exchange-assigned `report_id` (the durable identity the agent references when filing a dispute). A rejected report is not a success body — it travels as a non-OK transport error carrying `ErrorDetail.usageReportRejection` (e.g. `{ "usage_report_rejection": { "reason": "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED" } }` with the Connect code `failed_precondition` for a report past its window). A report is never refused because its quantity differs from the estimate.
 
 ---
 
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 4e93b826..65fb4d36 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -378,13 +378,45 @@ For a metered item, `cost.amount` is the amount the agent accepted: the offer's
 
 The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A bearer-only CDN serves it on signature + expiry alone (the URL signature + short TTL + TLS); a capable edge function additionally requires the agent to present its public key and an RFC 9421 signature, verifying the binding offline. See [Signed URL Verification](/components/edge-function/signed-url-verification).
 
+### Denials are in the body
+
+Every decision about an item is answered in the response body. An item the Exchange denies is a `TransactionResultItem` with `denial_reason` set, in a response that returns OK. This holds whatever the item count: a one-item purchase that is denied is a successful response whose only item is denied, and it is never turned into a non-OK error.
+
+```json
+{
+  "ver": "1.0",
+  "items": [
+    {
+      "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
+      "denial_reason": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+      "restriction_mismatches": ["RESTRICTION_KIND_GEOGRAPHY"]
+    }
+  ]
+}
+```
+
+A denied item was not purchased, so it carries no `retrieval_endpoint` and no charge. `restriction_mismatches` names the failed axes when the reason is `DENIAL_REASON_RESTRICTION_NOT_SATISFIED`.
+
+A non-OK error carrying `ErrorDetail.transaction_denial` is used only when the Exchange refuses the **whole request** and decides no item. That happens for a reason about the caller that would deny every item alike: the caller has no account (`DENIAL_REASON_ACCOUNT_NOT_REGISTERED`), its account is not active (`DENIAL_REASON_ACCOUNT_INACTIVE`), it has overdue reports (`DENIAL_REASON_REPORTING_OVERDUE`), or it is rate limited (`DENIAL_REASON_RATE_LIMITED`). Nothing is purchased. Other errors keep their own classes: a malformed request is `invalid_argument`, and a request signature that does not verify is `unauthenticated`.
+
+**Totals across currencies.** `total_cost` is the exact sum of the purchased items' costs in their one shared currency. When the purchased items span more than one currency, `total_cost` is unset: amounts are never summed across currencies, and currency conversion is out of scope for this version. Each item's own `cost` still carries its amount and currency.
+
+### Idempotency
+
+`idempotency_key` is scoped to the caller that authenticated the request: the agent on a request it signed, and the pair (Broker, requester) on a purchase the Broker re-packaged. A key that another agent used, or that was used at another tenant, is a different key and never a collision.
+
+- The same key with the **same** request (the same items in the same order) is a replay. The Exchange answers it with the stored result and executes nothing again.
+- The same key with a **different** request (different items, or the same items in another order) is refused with the Connect code `already_exists`, carrying an `ErrorDetail` with no typed reason. Nothing is executed, and the stored result is unchanged. A new purchase takes a new key.
+
+The same rules apply to `UsageReport.idempotency_key` and `DisputeRequest.idempotency_key`.
+
 ### What Happens Inside the Exchange
 
 1. Validate request (proto validation)
 2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a sub-request the Broker re-packaged. On a direct request, also require `requester.domain` to name the directory the covered `Signature-Agent` header names. On a re-packaged sub-request the agent is authenticated by its body acceptances instead: each item's `AgentAcceptance` is verified against an Ed25519 key in the directory `requester.domain` names, an acceptance whose canonical bytes name an empty requester is refused, and a delegation's holder binding (`cnf.jkt`) is checked against the key the item's `AgentAcceptance` verifies under, not against the Broker
-3. Verify `agent_request_acceptance` when present: the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange. This runs **before** the idempotency lookup — request-level idempotency state is never created or served for a request whose set claim has not been proven, otherwise a mutated request could consume the key and a later honest retry would replay its result
-4. Check idempotency key (prevent double-charge on retry)
-5. Verify offer signature (reconstruct offer from signed token)
+3. Verify `agent_request_acceptance` when present: the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange. A request whose items are not exactly that projection (an item dropped, added or reordered) has every item denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body: the agent's signature does not cover what arrived. It is not an `invalid_argument` error. This runs **before** the idempotency lookup — request-level idempotency state is never created or served for a request whose set claim has not been proven, otherwise a mutated request could consume the key and a later honest retry would replay its result
+4. Check the idempotency key, scoped to the caller: a replay of the same request returns the stored result, and the same key with different items is refused with `already_exists` (see [Idempotency](#idempotency))
+5. Verify each item's offer signature over the presented offer bytes; an item whose signature does not verify is denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body
 6. Authorize billing (`BillingAdapter.Authorize`) -- or skip for subscription offers
 7. Write transaction to WAL (must succeed before signing URL)
 8. Generate the Ed25519 signed delivery URL (or a CloudFront RSA canned policy, per the tenant's signing scheme)
@@ -468,7 +500,7 @@ For batch transactions, use the `items` array:
 }
 ```
 
-Each item gets its own `transaction_id`, `billing_id`, and signed URL. Batch transactions are non-atomic -- individual items can fail independently.
+Each item gets its own `transaction_id`, `billing_id`, and signed URL. Batch transactions are non-atomic -- individual items can fail independently, and each denied item carries its `denial_reason` in the body. `total_cost` is set here because both items are priced in USD; it would be unset if they spanned two currencies.
 
 ### Buying through a Broker
 
@@ -536,7 +568,8 @@ Re-packaging and combining are safe because each item is atomic and its integrit
 - **Upstream refusals ride in the body.** When an Exchange refuses the Broker's whole sub-request, or does not answer it, the Broker does not turn that into an error of its own. Each affected item carries `refusal`: the Exchange, the Connect `code` it answered with, and its `ErrorDetail` unchanged. The other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is not a catch-all for upstream failures.
 - `exchanges` has one `ExchangeOutcome` per Exchange contacted. Its `agent_identity_hash` is what that Exchange's retrieval URLs are bound to.
 - `totals` sums only the charged items (those with neither `denial_reason` nor `refusal`), one `Cost` per currency. Amounts are never summed across currencies.
-- `DENIAL_REASON_RELAY_NOT_ACCEPTED` on an item means the provider at that Exchange does not accept purchases relayed by a Broker. Buy that offer directly.
+- `DENIAL_REASON_RELAY_NOT_ACCEPTED` on an item means the provider that sells that item's resource at that Exchange does not accept purchases relayed by a Broker. It is decided per item, by each offer's provider, and answered in the body: other items of the same sub-request may succeed. It is never a refusal of the whole sub-request. Buy that offer directly.
+- A sub-request whose items are not exactly the agent's signed `AgentRequestAcceptance` projected onto that Exchange has every item denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body, and nothing is purchased.
 
 The Broker's own refusals are non-OK Connect errors carrying an `ErrorDetail`, and nothing was bought: an invalid agent signature is `unauthenticated` with `request_auth_failure`; a `requester.domain` that is not the agent's signing directory is `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; a malformed request is `invalid_argument`; an Exchange the Broker cannot route to or does not approve is `failed_precondition`, with `metadata["exchange"]` naming it.
 
@@ -610,11 +643,12 @@ A successful response carries the Exchange-assigned `report_id` (the handle the
 
 ### What the Exchange Validates
 
-1. Required fields present (as defined by `ReportingObligation.required_fields`)
-2. Report received within the reporting window (typically 24 hours)
-3. Transaction exists and `billing_id` matches
+1. The report is well formed. A malformed report is refused with `USAGE_REPORT_REJECTION_REASON_MALFORMED` and the Connect code `invalid_argument`
+2. Required fields present (as defined by `ReportingObligation.required_fields`)
+3. Report received within the reporting window (typically 24 hours). A report that arrives after the window closed is refused with `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` and the Connect code `failed_precondition`: the typed reason names the time cause
+4. Transaction exists and `billing_id` matches
 
-A consumed quantity that differs from the offer's estimate is **not** a validation failure, in either direction. For a metered offer the Exchange settles the report as described below and never refuses an honest report for its quantity.
+**The reported quantity is unrestricted.** A consumed quantity that differs from the offer's estimate is **not** a validation failure, above or below, and no check on the quantity refuses a report. For a metered offer the Exchange settles the report as described below; a quantity far from the estimate is analysed out of band, never by refusing the report.
 
 ### Settling a metered purchase
 
@@ -622,7 +656,7 @@ A `PER_UNIT` price is metered: it is charged per unit consumed, and the quantity
 
 | Symbol | Field | Meaning |
 |---|---|---|
-| E | `estimated_quantity` | The estimate, in `unit`. **Required and positive on every metered offer.** An offer whose pricing or term is `PER_UNIT` and that carries no estimate fails validation (`offer.metered.requires_estimate`), and the SDK verifiers reject it |
+| E | `estimated_quantity` | The estimate, in `unit`. **Required and positive on every metered offer.** An offer whose pricing is `PER_UNIT` and that carries no estimate fails validation (`offer.metered.requires_estimate`), and the SDK verifiers reject it |
 | R | `rate` | The price of one `unit` |
 | T | `estimate_tolerance_bps` | The tolerance on the estimate, in basis points: `1000` (10%) when the term states none, `0` for none, at most `10000` |
 
@@ -713,10 +747,10 @@ Three independent records -- CDN logs, Exchange transactions, usage reports -- t
 
 FORA uses **at-most-once with reconciliation**, same as OpenRTB:
 
-- Idempotency keys on every `TransactionRequest` (prevent double-charge on retry)
+- Idempotency keys on every `TransactionRequest`, scoped per caller (prevent double-charge on retry; a key reused with different items is refused with `already_exists`)
 - "Authorize first, deliver second" ordering (do not issue signed URL until billing succeeds)
 - Reconciliation via `UsageReport` -- if content was not actually used, the report says so
-- No refunds in the protocol -- handle offline like ad-tech discrepancy resolution (~5-10% tolerance)
+- Credits and refunds come from dispute resolution (`DisputeTransaction`, below), which every Exchange implements; the protocol standardizes the dispute signal, not the settlement between the parties
 
 ## RPC 4: DisputeTransaction
 
@@ -757,7 +791,17 @@ Content-Type: application/json
 }
 ```
 
-A successful response means the dispute was accepted for processing (`dispute_id` + `status` + `resolution`). A refusal to file is not a success body -- it travels as a non-OK transport error carrying `ErrorDetail.dispute_failure` (e.g. `DISPUTE_FAILURE_REASON_REPORT_NOT_FILED`, `DISPUTE_FAILURE_REASON_WINDOW_EXPIRED`). The Exchange resolves most accepted disputes automatically in under 1 second using CDN logs and cryptographic evidence. See [Dispute Resolution](/protocol/dispute-resolution/) for the three-tier resolution system, auto-credit rules, and the complete dispute lifecycle.
+Every Exchange implements `DisputeTransaction`; it is part of the core protocol, not an optional capability. A successful response means the dispute was accepted for processing (`dispute_id` + `status` + `resolution`). A refusal to file is not a success body -- it travels as a non-OK transport error carrying `ErrorDetail.dispute_failure`, whose `DisputeFailureReason` names the one check the filing failed:
+
+| Reason | The filing failed because |
+|---|---|
+| `DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND` | `transaction_id` names no transaction this Exchange executed for the caller |
+| `DISPUTE_FAILURE_REASON_REPORT_NOT_FILED` | No accepted usage report precedes it: `report_id` is empty, unknown, or names a report for another transaction |
+| `DISPUTE_FAILURE_REASON_WINDOW_EXPIRED` | The transaction's dispute window, set by the Exchange, has closed |
+| `DISPUTE_FAILURE_REASON_DUPLICATE` | A dispute was already filed for this transaction. A retry of the same filing under the same `idempotency_key` is a replay and returns the original `DisputeResponse` |
+| `DISPUTE_FAILURE_REASON_INELIGIBLE` | The transaction's state admits no dispute under the Exchange's rules |
+
+A dispute that is accepted and later found unsupported ends as `RESOLUTION_TYPE_REJECTED`; it is not a refusal to file. The Exchange resolves most accepted disputes automatically in under 1 second using CDN logs and cryptographic evidence. See [Dispute Resolution](/protocol/dispute-resolution/) for the three-tier resolution system, auto-credit rules, and the complete dispute lifecycle.
 
 ## Resource Previews
 
diff --git a/website/src/content/docs/protocol/walkthrough-academic.mdx b/website/src/content/docs/protocol/walkthrough-academic.mdx
index 76a707ae..49c12e68 100644
--- a/website/src/content/docs/protocol/walkthrough-academic.mdx
+++ b/website/src/content/docs/protocol/walkthrough-academic.mdx
@@ -382,7 +382,7 @@ The Exchange resolves all 50 DOIs against its catalog, checks the delegation JWT
             "rate": "1.50",
             "currency": "USD",
             "unit_cost": "0.0001136",
-            "estimated_quantity": 13200,
+            "estimated_quantity": 1,
             "unit": "accesses"
           },
           "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -456,7 +456,7 @@ The Exchange resolves all 50 DOIs against its catalog, checks the delegation JWT
             "rate": "1.50",
             "currency": "USD",
             "unit_cost": "0.0001071",
-            "estimated_quantity": 14000,
+            "estimated_quantity": 1,
             "unit": "accesses"
           },
           "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -812,7 +812,7 @@ The agent then fetches all 49 PDFs via the signed URLs. For each paper, because
 
 ## Step 6 — ReportUsage
 
-Usage reporting is mandatory for all 49 transactions. The agent submits an aggregated report with per-DOI consumption data:
+Usage reporting is mandatory for all 49 transactions. A usage report settles one transaction, so the agent files one report per transaction: 49 reports. Each report states consumption in the unit of that item's offer. The 12 arXiv and 20 Elsevier subscription offers are priced in `tokens`, so their reports carry token counts. The 17 paid offers are priced per access, so each of their reports carries one access. Here is the report for the paid CellViT paper:
 
 `POST https://exchange.scholarsgate.com/fora/v1/fora.v1.ExchangeService/ReportUsage`
 
@@ -821,33 +821,18 @@ Usage reporting is mandatory for all 49 transactions. The agent submits an aggre
 {
   "ver": "1.0",
   "exchange": "exchange.scholarsgate.com",
-  "idempotency_key": "ur-litrev-001",
-  "transaction_id": "txn-litrev-batch-001",
-  "billing_id": "bill-litrev-batch-001",
+  "idempotency_key": "ur-litrev-springer-001",
+  "transaction_id": "txn-springer-paid-001",
+  "billing_id": "bill-springer-paid-001",
   "usage": {
     "function": ["ai-input"],
-    "consumed_quantity": 614200,
-    "consumed_unit": "tokens",
+    "consumed_quantity": 1,
+    "consumed_unit": "accesses",
     "displayed_to_user": true,
     "citation_included": true
   },
   "timestamp": "2026-03-20T13:00:00Z",
   "assets": [
-    {
-      "uri": "doi:10.48550/arXiv.2406.11838",
-      "title": "MedViT: A Robust Vision Transformer for Medical Image Classification",
-      "package_id": "PKG-ARXIV-2406-11838"
-    },
-    {
-      "uri": "doi:10.48550/arXiv.2405.09781",
-      "title": "SwinMed: Swin Transformer for Multi-Organ Segmentation",
-      "package_id": "PKG-ARXIV-2405-09781"
-    },
-    {
-      "uri": "doi:10.1016/j.media.2024.103250",
-      "title": "TransUNet++: Rethinking Multi-Scale Feature Fusion for Medical Image Segmentation",
-      "package_id": "PKG-ELSEVIER-MEDIA-103250"
-    },
     {
       "uri": "doi:10.1038/s41592-024-02401-5",
       "title": "CellViT: Vision Transformers for Precise Cell Segmentation and Classification",
@@ -867,10 +852,10 @@ Response:
 
 **Reporting details:**
 
-- **`consumed_quantity: 614200`** — total tokens consumed across all 49 papers. The Exchange cross-references this against the sum of `estimated_quantity` values from the offers to detect significant discrepancies.
+- **`consumed_quantity: 1`, `consumed_unit: "accesses"`** — the unit matches the offer's `pricing.unit`. The offer's estimate was 1 access at $1.50, so the transaction settles at 1 × $1.50 = $1.50, the amount accepted at purchase. A report is never refused because its quantity differs from the estimate. If the agent had reported more than the ceiling (the estimate plus the 10% default tolerance), the excess would be held for dispute, not charged.
 - **`citation_included: true`** — the literature review includes proper citations for all 49 papers. This is relevant for publishers who offer attribution-only pricing or require citation as a license condition.
-- **`assets`** — per-DOI breakdown enables the Exchange to attribute usage to individual publishers. Elsevier sees 20 accesses against Stanford's subscription. Springer sees 15 paid accesses. arXiv sees 12 free accesses. Each publisher receives its share of the usage data.
-- **`report_id: "rpt-litrev-001"`** — enables the dispute chain. If any paper's content hash mismatched during fetch, the agent would reference this report when filing a `DisputeTransaction`.
+- **`assets`** — names the paper the transaction covers, so the Exchange can attribute usage to its publisher. Across the 49 reports, Elsevier sees 20 accesses against Stanford's subscription, the paid publishers see 17 paid accesses, and arXiv sees 12 free accesses.
+- **`report_id: "rpt-litrev-001"`** — enables the dispute chain. If this paper's content hash had not matched on delivery, the agent would reference this report when filing a `DisputeTransaction`.
 
 ---
 
@@ -883,7 +868,7 @@ Response:
 | 3 | -- | Offers at $0, `oa_status: "gold"` | Offers at $0, `subscription_id` set | Offers at $1.50 | Offer with `retraction_status: "retracted"` in `ext_critical` |
 | 4 | -- | Broker selects (free) | Broker selects (free via sub) | Broker selects (cheapest) | Broker flags and excludes |
 | 5 | `ExecuteTransaction` | Batch, cost $0 | Batch, cost $0, sub quota decremented | Batch, cost $1.50/ea | Not transacted |
-| 6 | `ReportUsage` | Aggregated report, 614K tokens across 49 papers | | | |
+| 6 | `ReportUsage` | One report per transaction, in tokens | One report per transaction, in tokens | One report per transaction, 1 access each | No report |
 
 **Authentication at every step:**
 - **Agent to Exchange**: signed with an RFC 9421 HTTP Message Signature (alg=ed25519) in the HTTP headers
diff --git a/website/src/content/docs/protocol/walkthrough-credit-report.mdx b/website/src/content/docs/protocol/walkthrough-credit-report.mdx
index 57df9218..48658647 100644
--- a/website/src/content/docs/protocol/walkthrough-credit-report.mdx
+++ b/website/src/content/docs/protocol/walkthrough-credit-report.mdx
@@ -629,7 +629,7 @@ All credit-specific fields live in `ext` — the core protocol does not need cre
 | Hash verification | SHOULD verify; mismatch is disputable | Informational; mismatch is expected |
 | `data_as_of` | Not set (content does not change) | `2026-03-18T23:59:59Z` |
 | Pricing model | `PER_UNIT` ($0.05) | `PER_UNIT` ($2 / $61.99 / $150) |
-| Metering unit | `tokens` (3,200 estimated) | `reports` (1) |
+| Metering unit | `accesses` (1 estimated) | `records` (1 estimated) |
 | Multi-tier offers | No (single offer per article) | Yes (3 tiers, same D-U-N-S) |
 | Entity resolution | Not needed (URL is the identifier) | Required (company name to D-U-N-S) |
 | Redistribution | Training prohibited | Training, indexing, and (for comprehensive) search prohibited |
diff --git a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
index 4d708f94..f9aaa08e 100644
--- a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
+++ b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
@@ -504,7 +504,7 @@ The Broker collects all 6 `ResourceResponse` results and builds an aggregate cos
 └─────────────────────────────────────────────────────────┴──────────┘
 ```
 
-**Budget check passes**: $85.39 < $1,500.00 available. The Broker proceeds to execute transactions.
+**Budget check passes**: $85.39 < $1,500.00 available. Prior spend comes only from earlier purchases; collecting these offers added nothing to it. The Broker proceeds to execute transactions.
 
 **What the Broker verified before proceeding:**
 1. **Freshness**: Credit report `data_as_of` (today 06:00) is within `max_data_age` (7 days)
@@ -801,7 +801,7 @@ The Broker files a `UsageReport` for every transaction, to every Exchange. All r
 }
 ```
 
-*Reports for property records (consumed_unit: "records"), SEC filings (consumed_unit: "tokens"), news articles (consumed_unit: "tokens"), and patents (consumed_unit: "tokens") follow the same pattern — each targeting its respective Exchange.*
+*Reports for property records (consumed_unit: "records"), SEC filings (consumed_unit: "tokens"), news articles (consumed_unit: "accesses", one per article), and patents (consumed_unit: "tokens") follow the same pattern — each targeting its respective Exchange.*
 
 ### Broker Budget Ledger (Post-Transaction)
 
@@ -861,8 +861,8 @@ The same `ResourceIdentity` message handles both — the `resource_mutability` f
 ### 4. Cross-Exchange Budget Tracking
 
 The `budget_scope: "deal:acme-acquisition"` field in `RequestConstraints` enables deal-level spend tracking across all Exchanges. The Broker:
-1. Checks cumulative spend before each transaction batch
-2. Denies transactions that would exceed the budget
+1. Filters offers at discovery: `BrokerService.Resolve` drops any offer that would take the scope's spend past `period_budget`. When no offer for a URI remains, that URI comes back with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, a successful "no result" rather than an error
+2. Counts spend only from purchase totals. Discovery never charges and never adds to spend; for a purchase made through the Broker, the amount comes from `BrokerTransactionResponse.totals`
 3. Reports actual spend per Exchange in `UsageReport.ext.budget_scope`
 4. Maintains a ledger for audit (which Exchange got how much for what)
 
diff --git a/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx b/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx
index 724e2c4b..9e96b562 100644
--- a/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx
+++ b/website/src/content/docs/protocol/walkthrough-eu-regulation.mdx
@@ -3,7 +3,7 @@ title: "Walkthrough: EU Regulation (Free vs Value-Added)"
 description: "Same legislation available free (EUR-Lex) and paid (Wolters Kluwer annotated), with ELI identifiers, multilingual support, and the fora-legal-v1 extension profile."
 ---
 
-> An AI agent needs the EU AI Act (Regulation 2024/1689). The same legislation is available FREE from EUR-Lex (official text) and for $85 from Wolters Kluwer (annotated, consolidated). FORA enables transparent comparison -- the agent decides whether annotations are worth the price.
+> An AI agent needs the EU AI Act (Regulation 2024/1689). The same legislation is available FREE from EUR-Lex (official text) and for €85 from Wolters Kluwer (annotated, consolidated). FORA enables transparent comparison -- the agent decides whether annotations are worth the price.
 
 ## Scenario
 
@@ -11,7 +11,7 @@ description: "Same legislation available free (EUR-Lex) and paid (Wolters Kluwer
 |---|---|---|
 | **Provider** | EUR-Lex (`eur-lex.europa.eu`) | Wolters Kluwer (`wolterskluwer.com`) |
 | **Content** | Official Journal text (original) | Annotated, consolidated with amendments |
-| **Price** | FREE | $85 per article |
+| **Price** | FREE | €85 per access |
 | **Mutability** | STATIC (original OJ text, never changes) | DYNAMIC (consolidated to latest amendments) |
 | **Attestation** | Level 2 (Official Journal = highest legal authority) | Level 1 (self-attested) |
 | **Format** | Akoma Ntoso XML | HTML with annotations |
@@ -226,7 +226,7 @@ The Broker receives one response from each Exchange. Here are both offers side b
             "rate": "85.00",
             "currency": "EUR",
             "unit_cost": "0.000764",
-            "estimated_quantity": 111200,
+            "estimated_quantity": 1,
             "unit": "accesses"
           },
           "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -311,9 +311,9 @@ The Broker receives one response from each Exchange. Here are both offers side b
 
 | Dimension | EUR-Lex | Wolters Kluwer |
 |---|---|---|
-| **Price** | FREE | $85.00 |
+| **Price** | FREE | €85.00 |
 | **Pricing model** | `PRICING_MODEL_FREE` | `PRICING_MODEL_PER_UNIT` |
-| **Tokens (est.)** | 89,000 | 111,200 (more due to annotations) |
+| **Size (tokens, attested)** | 89,000 | 111,200 (more due to annotations) |
 | **Mutability** | `STATIC` (original OJ text) | `DYNAMIC` (consolidated, updates with amendments) |
 | **Attestation** | Level 2 -- `publications.europa.eu` (Publications Office) | Level 1 -- self-attested by `wolterskluwer.com` |
 | **Consolidation** | `original` (as published July 2024) | `consolidated_to_2026-01-15` (includes all amendments) |
@@ -331,7 +331,7 @@ The agent sees both options with transparent pricing. The free EUR-Lex version c
 The Broker presents both offers. The agent's choice depends on context:
 
 - **Need the original enacted text?** EUR-Lex. Free, STATIC, Level 2 attested, hash-verifiable.
-- **Need the latest consolidated version with expert annotations?** Wolters Kluwer. $85, DYNAMIC, includes 47 cross-references and amendment chain.
+- **Need the latest consolidated version with expert annotations?** Wolters Kluwer. €85, DYNAMIC, includes 47 cross-references and amendment chain.
 
 Assume the agent chooses EUR-Lex (free). The `ExecuteTransaction` follows the standard pattern:
 
@@ -483,7 +483,7 @@ Free does not mean untracked. EUR-Lex gains visibility into how AI agents consum
 
 ### Same Content, Different Value
 
-EU legislation is **public domain** (Decision 2011/833/EU). The raw text is free from EUR-Lex. Wolters Kluwer's $85 price is for the **value-add**: expert annotations, 47 cross-references, and consolidated text that incorporates amendments. FORA makes this transparent -- the agent compares both offers side by side and decides if the annotations are worth the cost.
+EU legislation is **public domain** (Decision 2011/833/EU). The raw text is free from EUR-Lex. Wolters Kluwer's €85 price is for the **value-add**: expert annotations, 47 cross-references, and consolidated text that incorporates amendments. FORA makes this transparent -- the agent compares both offers side by side and decides if the annotations are worth the cost.
 
 ### ELI URI as Universal Identifier
 
diff --git a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
index 41ba57f0..c6fe58aa 100644
--- a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
+++ b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
@@ -118,7 +118,7 @@ The Exchange looks up the study in TCIA's catalog, verifies the agent's identity
             "rate": "25.00",
             "currency": "USD",
             "unit_cost": "0.0295",
-            "estimated_quantity": 847,
+            "estimated_quantity": 1,
             "unit": "records"
           },
           "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -191,7 +191,7 @@ The Exchange looks up the study in TCIA's catalog, verifies the agent's identity
 
 **What the agent learns from this response:**
 
-- **Pricing**: `PRICING_MODEL_PER_UNIT` (`unit: "records"`) at $25.00 per study. The `unit_cost` ($0.0295/instance) and `estimated_quantity` (847 DICOM instances) enable cross-exchange comparison — an alternative Exchange offering the same study at a higher per-instance rate would be less economical.
+- **Pricing**: `PRICING_MODEL_PER_UNIT` (`unit: "records"`) at $25.00 per study, where one study is one record. The `estimated_quantity` is in the same unit: 1 record, so the agent accepts 1 × $25.00 = $25.00 at purchase. The `unit_cost` ($0.0295/instance) is the normalized comparison price: $25.00 divided by the study's 847 DICOM instances. It enables cross-exchange comparison: an alternative Exchange offering the same study at a higher per-instance rate would be less economical.
 
 - **De-identification attestation**: TCIA self-attests (Level 1) that the study was de-identified using HIPAA Safe Harbor method. The claims include specific de-identification steps: `burned_in_text_removed` (no patient name baked into pixel data) and `defacing_applied` (facial features removed from volumetric data). These are not generic quality claims — they are regulatory compliance attestations.
 
@@ -209,7 +209,7 @@ The Exchange looks up the study in TCIA's catalog, verifies the agent's identity
 
 ## Step 4 — ExecuteTransaction (with Compliance Gate)
 
-The agent commits to the offer. Because `medimg.dua_required` was flagged as critical, the agent MUST include a valid DUA reference in `ext`. This is the pre-transaction compliance gate — the Exchange will reject the transaction if the DUA cannot be verified.
+The agent commits to the offer. Because `medimg.dua_required` was flagged as critical, the agent MUST include a valid DUA reference in `ext`. This is the pre-transaction compliance gate — the Exchange denies the item if the DUA cannot be verified.
 
 `POST https://exchange.medimg-exchange.com/fora/v1/fora.v1.ExchangeService/ExecuteTransaction`
 
@@ -229,7 +229,7 @@ The agent commits to the offer. Because `medimg.dua_required` was flagged as cri
           "rate": "25.00",
           "currency": "USD",
           "unit_cost": "0.0295",
-          "estimated_quantity": 847,
+          "estimated_quantity": 1,
           "unit": "records"
         },
         "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -283,24 +283,22 @@ The agent commits to the offer. Because `medimg.dua_required` was flagged as cri
 
 **What happens without a valid DUA:**
 
-A denied transaction is not a 200 success body — it travels as a non-OK transport error carrying an `ErrorDetail`. The compliance gate failure surfaces as `transactionDenial` with `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and the unsatisfied axis:
+The denial comes back in the body of a successful response, like every per-item denial, also when the purchase has only one item. The item names the offer and carries `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` with the unsatisfied axis. It has no `transaction_id`, `billing_id`, `cost` or `retrieval_endpoint`, because nothing was bought:
 
 ```json
 {
-  "message": "DUA-TCIA-2026-042 not found or does not cover brainlab.edu for ai-input",
-  "domain": "fora.v1.ExchangeService",
-  "metadata": {
-    "required_dua_type": "TCIA-Standard-v3",
-    "apply_url": "https://imaging.tcia.org/access/dua-application"
-  },
-  "transaction_denial": {
-    "reason": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
-    "restriction_mismatches": ["RESTRICTION_KIND_FUNCTION"]
-  }
+  "ver": "1.0",
+  "items": [
+    {
+      "offer_id": "78e43486-599b-4016-b5a7-1bed5d22d1c0",
+      "denial_reason": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
+      "restriction_mismatches": ["RESTRICTION_KIND_FUNCTION"]
+    }
+  ]
 }
 ```
 
-The error includes an actionable URL (in `metadata`) where the institution can apply for a DUA. The agent or Broker can surface this to the human researcher. Correlation back to the request rides on the `X-Request-ID` response header.
+The agent already knows which agreement it needs from the offer: `ext["medimg.dua_type"]` is `TCIA-Standard-v3`, and `ext["comp.seller"]` names `imaging.tcia.org` as the party that grants it. The agent or Broker can surface this to the human researcher, who applies to TCIA for that agreement. Correlation back to the request rides on the `X-Request-ID` response header.
 
 **Successful response:**
 
@@ -505,7 +503,7 @@ Response:
 
 **Key differences from text usage reporting:**
 
-- **`consumed_quantity: 1`** with **`consumed_unit: "records"`** — the pricing model is per-study, not per-token. The agent consumed one study regardless of how many of the 847 instances it actually downloaded.
+- **`consumed_quantity: 1`** with **`consumed_unit: "records"`** — the pricing model is per-study, not per-token. The agent consumed one study regardless of how many of the 847 instances it actually downloaded. One record at $25.00 settles the transaction at $25.00, the amount accepted at purchase.
 - **`displayed_to_user: false`** — medical imaging is processed by the AI model, not displayed to a human in a chat interface.
 - **`ext` metadata** — the agent reports which series it accessed (4 of 8), how many instances it downloaded (600 of 847), and which model processed the data. This level of audit detail is important for regulated data — if a DUA violation investigation occurs, the Exchange has a complete record of what data was accessed and how it was used.
 - **7-day reporting window** — the longer window accommodates the reality that imaging analysis pipelines are batch processes, not interactive sessions.
diff --git a/website/src/content/docs/protocol/walkthrough-v1.mdx b/website/src/content/docs/protocol/walkthrough-v1.mdx
index 0e2a50e6..2f47801f 100644
--- a/website/src/content/docs/protocol/walkthrough-v1.mdx
+++ b/website/src/content/docs/protocol/walkthrough-v1.mdx
@@ -117,7 +117,7 @@ The Exchange looks up the article in its catalog and returns one offer for each
             "rate": "0.05",
             "currency": "USD",
             "unit_cost": "0.0000156",
-            "estimated_quantity": 3200,
+            "estimated_quantity": 1,
             "unit": "accesses"
           },
           "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -169,7 +169,7 @@ The Exchange looks up the article in its catalog and returns one offer for each
 
 **What the agent learns from this response:**
 
-- **Pricing**: `PRICING_MODEL_PER_UNIT` (`unit: "accesses"`) at $0.05, with an estimated 3,200 tokens. The `unit_cost` ($0.0000156/token) enables cross-exchange comparison when a Broker aggregates offers.
+- **Pricing**: `PRICING_MODEL_PER_UNIT` (`unit: "accesses"`) at $0.05 per access. The estimate is in the same unit: 1 access, so the agent accepts 1 × $0.05 = $0.05 at purchase. The `unit_cost` ($0.0000156/token) is the normalized comparison price: $0.05 divided by the article's size of about 3,200 tokens. It enables cross-exchange comparison when a Broker aggregates offers.
 - **Content mutability**: `RESOURCE_MUTABILITY_STATIC` — this article will not change. The agent SHOULD verify the SHA-256 hash on delivery. A mismatch is disputable.
 - **Attestation**: Level 1 (self-attested by `techcrunch.com`). The provider signed its own claims about word count and token estimate. A third-party attestation (Level 2, e.g., from `gumgum.com`) would carry higher trust.
 - **Restrictions**: AI input (`ai-input`), indexing (`ai-index`), and search (`search`) are permitted. Training (`ai-train`) is prohibited.
@@ -197,7 +197,7 @@ The agent commits to the offer by sending the full signed `offer` back, reflecte
           "rate": "0.05",
           "currency": "USD",
           "unit_cost": "0.0000156",
-          "estimated_quantity": 3200,
+          "estimated_quantity": 1,
           "unit": "accesses"
         },
         "delivery_method": "DELIVERY_METHOD_INSTRUCTIONS",
@@ -286,7 +286,7 @@ The CDN edge function verifies:
 
 ### Step 6 — ReportUsage
 
-Usage reporting is mandatory. The agent reports actual consumption:
+Usage reporting is mandatory. The agent reports actual consumption, in the unit of the offer's price (`accesses`):
 
 `POST https://exchange.ssp-alpha.com/fora/v1/fora.v1.ExchangeService/ReportUsage`
 
@@ -300,8 +300,8 @@ Usage reporting is mandatory. The agent reports actual consumption:
   "billing_id": "bill-tc-001",
   "usage": {
     "function": ["ai-input"],
-    "consumed_quantity": 3150,
-    "consumed_unit": "tokens",
+    "consumed_quantity": 1,
+    "consumed_unit": "accesses",
     "displayed_to_user": true,
     "citation_included": true
   },
@@ -325,6 +325,8 @@ Response:
 }
 ```
 
+The report settles the transaction at 1 × $0.05 = $0.05, the amount accepted at purchase. A report is never refused because its quantity differs from the estimate: a quantity above the ceiling (the estimate plus the 10% default tolerance) would be charged up to the ceiling, and the rest held for dispute.
+
 The `report_id` enables the dispute chain: if the agent needs to dispute this transaction later, it must reference this report to prove usage was reported first.
 
 ---
@@ -642,7 +644,7 @@ item := tx.GetItems()[0]
 | 3 | — | Offer at $0.05 | Offer at $0.00 + `subscription_id` |
 | 4 | `ExecuteTransaction` | Charge $0.05, generate signed URL | Skip billing (subscription), generate signed URL |
 | 5 | — | Fetch + SHA-256 verify | Fetch + SHA-256 verify |
-| 6 | `ReportUsage` | Report 3,150 tokens consumed | Report 18,200 tokens consumed (tracked against quota) |
+| 6 | `ReportUsage` | Report 1 access consumed | Report 18,200 tokens consumed (tracked against quota) |
 
 **Authentication at every step:**
 - **Agent → Exchange**: RFC 9421 HTTP Message Signature (Ed25519 over the HTTP request — method, target URI, and body content digest — in the `Signature` / `Signature-Input` headers)
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index b31094b4..1d9503bf 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,112 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**An offer carries its price once: `Offer.pricing` (two validation rules added;
+`LicenseTerm.pricing` loses its field-level rule; no field removed).** An offer carried its
+price twice, in `Offer.pricing` and in the pricing of the one term it sells, and the
+comment called the term's copy authoritative. The two could disagree inside one signed
+offer, nothing said which one execute charges, and the metered rule read either copy.
+
+- `Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks and
+  a metered purchase settles on. The term inside `Offer.terms` MUST carry no pricing (rule
+  `offer.terms.pricing_unset`, on `Offer`). Each offer derives from exactly one catalog
+  term, so the price is stated once and cannot disagree with itself.
+- `offer.metered.requires_estimate` reads `Offer.pricing` only: an offer is metered when
+  its pricing is `PER_UNIT`.
+- Catalog terms still carry pricing. `LicenseTerm.pricing` loses its field-level `required`
+  rule, because the requirement depends on the message that holds the term, and
+  `ResourceEntry` gains `resource_entry.terms.pricing_required`: every catalog term carries
+  its price, whatever its semantics. A standalone `LicenseTerm` without pricing is no
+  longer refused on its own.
+- `buf breaking` against v1.0.0 passes. A validating peer now refuses an offer whose term
+  carries pricing, including inside a `TransactionRequest`.
+- The field-level corpus drops `LicenseTerm/pricing/missing`. The cross-field corpus gains
+  two priced-term offers and a `ResourceEntry` term without pricing, replacing the metered
+  term-only case, and the license-term entry vectors report a catalog term without pricing
+  as that cross-field rule.
+
+SDKs, in all three languages: `IsMeteredOffer` / `is_metered_offer` / `isMeteredOffer` read
+the offer's pricing only. New `CheckOfferTermsUnpriced` / `check_offer_terms_unpriced` /
+`checkOfferTermsUnpriced` apply `offer.terms.pricing_unset` without wire validation (Go
+returns `helpers.ErrOfferTermPriced`, new; Python raises `ValueError`; TypeScript throws).
+The offer signers (`helpers.SignOffer`, `sign_offer_jcs`, `signOffer`) refuse an offer whose
+term carries pricing, and the offer verifiers reject one after the signature and expiry
+checks. The Python and TypeScript cross-field layers gain both rules, with a composed
+`ResourceEntry` model, and `validate_resource_entry` / `validateResourceEntry` check the
+entry itself. The offer-verify vectors gain a term repeating the offer's price, which is
+rejected, and an unpriced term under a `FLAT` price, which verifies.
+
+**A per-item purchase denial is always answered in the body (comments and two
+deprecations; no wire change).** A denied one-item purchase was described as a non-OK
+error carrying `ErrorDetail.transaction_denial`, while the same denial in a batch rode in
+the body, so a caller handled one decision in two shapes.
+
+- `ExecuteTransaction`, `TransactionResponse` and `TransactionResultItem.denial_reason`
+  state that every per-item denial is answered in the body, whatever the item count.
+  `TransactionDenial` is used only when the Exchange refuses the whole request and decides
+  no item, for a reason about the caller that would deny every item alike (for example
+  `ACCOUNT_NOT_REGISTERED`, `ACCOUNT_INACTIVE`, `REPORTING_OVERDUE`, `RATE_LIMITED`).
+  `TransactionDenial.restriction_mismatches` and `TransactionDenial.offer_id` are
+  deprecated and never set.
+- `DENIAL_REASON_RELAY_NOT_ACCEPTED` is decided per item by each offer's provider, the
+  provider that sells that resource, and answered in the body. It is never a refusal of the whole
+  sub-request, and an Exchange never sends it as `transaction_denial`.
+- A sub-request whose items are not exactly the agent's `AgentRequestAcceptance` projected
+  onto the Exchange (an item dropped, added or reordered) has every item denied with
+  `DENIAL_REASON_SIGNATURE_INVALID`, in the body: the agent's signature does not cover
+  what arrived. It is not `invalid_argument`, nothing is purchased, and no request-level
+  idempotency state is claimed.
+
+**A usage report is refused for time, never for quantity (comments; one admin field
+deprecated).** `UsageReportRejectionReason` states that the reported quantity is
+unrestricted: no reason refuses a report because its `consumed_quantity` differs from the
+estimate, above or below, and a quantity far from the estimate is analysed out of band.
+The existing `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` is the time cause, refused with
+`failed_precondition`; `USAGE_REPORT_REJECTION_REASON_MALFORMED` is a malformed report,
+refused with `invalid_argument`. The metered settlement on `Pricing` is unchanged.
+`fora.admin.v1.ReportingPolicy.quantity_tolerance` is deprecated and ignored: an Exchange
+must not refuse a report on it.
+
+**Idempotency keys are scoped per caller, and a reused key with a different request is
+refused (comments only).** The file header gains "Idempotency", the one statement of the
+rule for `TransactionRequest`, `UsageReport` and `DisputeRequest`. A key is scoped to the
+authenticated agent, and to the pair (Broker, requester) on a purchase relayed through
+`BrokerService.ExecuteTransaction`; a key another agent or tenant used is never a
+collision. The same key with the same request is a replay answered from the stored result.
+The same key with a different request (for a purchase, different items or another order)
+is refused with the Connect code `already_exists` and an `ErrorDetail` with no typed reason.
+
+**`BrokerService.Resolve` filters offers over the agent's budget (comments only).**
+`Resolve` drops every offer priced above `max_price` or that would take the `budget_scope`'s
+spend past `period_budget`, comparing the most the offer can be charged without a dispute
+(Q × R for a metered offer). A URI left with no offer is answered with
+`OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as
+`RESOURCE_EXHAUSTED`. `Resolve` never charges and never counts as spend; spend grows only
+from purchase totals. `period_budget` no longer says transactions are denied.
+
+**`TransactionResponse.total_cost` is unset when the items span currencies (comments
+only).** It is the exact sum of the purchased items' costs in their one shared currency,
+and unset when they span more than one. Currency conversion is out of scope for this
+version, which `BrokerTransactionResponse.totals` states too.
+
+**`DisputeTransaction` states its refusal reasons (comments only).** Every Exchange
+implements the RPC. Each `DisputeFailureReason` now names its check: no transaction for the
+caller, no accepted report for this transaction, the dispute window closed, a dispute
+already filed (a retry under the same key is a replay), and a transaction whose state
+admits no dispute.
+
+Docs: the transaction-flow page gains "Denials are in the body" and "Idempotency", states
+the report refusals and the dispute refusal reasons, and drops "no refunds in the
+protocol". The Exchange request flow answers every per-item denial in the body, scopes the
+idempotency key per caller, leaves `total_cost` unset across currencies and stops
+checking a minimum billable quantity. The Broker pages describe the budget as a filter at
+`Resolve` and drop the currency converter and the generated idempotency key. The money-flow
+page divides `unit_cost` by the resource's size rather than by `estimated_quantity`, and
+every walkthrough and example that paired a per-access unit with a token-count estimate now
+states the estimate in the price's own unit. The medical-imaging walkthrough answers its
+DUA failure in the body. Offer examples drop their terms' pricing, and the licensing-terms,
+reference and threat-model pages state the same rules.
+
 **A metered offer carries an estimate, and a usage report settles within a tolerance:
 `Pricing.estimate_tolerance_bps` (field 10) is added, with two validation rules.** A
 `PER_UNIT` price is charged per unit consumed, but an offer could carry no
@@ -15,7 +121,7 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 how a report of a different quantity settles. Implementations charged one unit and
 refused the honest report.
 
-- An offer whose `pricing` or term pricing is `PER_UNIT` MUST carry a positive
+- An offer whose `pricing` is `PER_UNIT` MUST carry a positive
   `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`, on `Offer`). The
   rule binds the offer and not `Pricing`: a publisher pushes `PER_UNIT` terms without an
   estimate, which describes the resource and may ride on `ResourceEntry.estimated_quantity`.
@@ -45,8 +151,7 @@ refused the honest report.
   estimate, including inside a `TransactionRequest`, and a Go client running with
   `ValidationStrict` refuses a discovery response that carries one.
 - The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
-  tolerance on a `FLAT` price and three unestimated metered offers (missing, zero, and a
-  `PER_UNIT` term under non-metered offer pricing).
+  tolerance on a `FLAT` price and two unestimated metered offers (missing and zero).
 
 SDKs, in all three languages: the offer verifiers reject a metered offer without a
 positive estimate, after the signature and expiry checks (Go: `core.Verifier`, reason
diff --git a/website/src/content/docs/reference/proto-admin.mdx b/website/src/content/docs/reference/proto-admin.mdx
index 6f4ee4de..7760c0d8 100644
--- a/website/src/content/docs/reference/proto-admin.mdx
+++ b/website/src/content/docs/reference/proto-admin.mdx
@@ -52,7 +52,7 @@ Echoes the `TenantFeeRate` as persisted.
 
 ### ReportingPolicy
 
-The reporting-policy payload shared by the `SetReportingPolicy` request and response, so its rules are stated once: the report field names the usage-report validator requires, the accepted quantity tolerance (a fraction, `0`–`1`, where `0` requires an exact match), and the reporting window in seconds (capped at one year). Omitted optional fields clear their value so the receiving Exchange's defaults apply. The wire constrains only the token shape of `required_fields`; which names are meaningful is defined by the receiving Exchange and may change without a contract change, and names are a set (repeats are rejected). The window applies to obligations minted after the call -- obligations already issued keep the window they were minted with.
+The reporting-policy payload shared by the `SetReportingPolicy` request and response, so its rules are stated once: the report field names the usage-report validator requires, and the reporting window in seconds (capped at one year). `quantity_tolerance` is **deprecated and ignored**: a usage report is never refused for its quantity, so an Exchange MUST NOT refuse a report on this setting. The field and its `0`–`1` bounds stay only for wire compatibility. Omitted optional fields clear their value so the receiving Exchange's defaults apply. The wire constrains only the token shape of `required_fields`; which names are meaningful is defined by the receiving Exchange and may change without a contract change, and names are a set (repeats are rejected). The window applies to obligations minted after the call -- obligations already issued keep the window they were minted with.
 
 ::proto-message{name=ReportingPolicy}
 
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 91c3024c..2e1a2975 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -28,7 +28,9 @@ Two HTTP response headers are part of the contract without being in any message.
 
 ### ExchangeService
 
-The core protocol. Both AI agents and Brokers are valid clients.
+The core protocol. Both AI agents and Brokers are valid clients. Every Exchange implements all of its transaction RPCs, `DisputeTransaction` included.
+
+`ExecuteTransaction` answers every per-item denial in the body: an item the Exchange denies carries `TransactionResultItem.denial_reason` in a successful response, whatever the item count. A non-OK error carrying `ErrorDetail.transaction_denial` is used only when the Exchange refuses the whole request and decides no item.
 
 ::proto-service{name=ExchangeService}
 
@@ -42,9 +44,9 @@ Optional RPC for providers/CMS/third-party intelligence providers to push conten
 
 The Broker entry point. It has two methods.
 
-`Resolve(DiscoveryRequest) → DiscoveryResponse` is discovery-only: a client sends the URIs/query it wants resolved and receives `offer_groups` (one `OfferGroup` per URI, each carrying the full signed `Offer`) or a typed `absence_reason` with empty `offer_groups` when nothing licensable was found. "No result" is a successful answer; malformed requests, auth failures, and internal faults are non-OK transport errors carrying an `ErrorDetail`. Resolve does **not** deliver inline. The per-transaction result (transaction id, billing id, retrieval endpoint, …) comes from the separate execute path, which the agent takes either directly, with `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker.
+`Resolve(DiscoveryRequest) → DiscoveryResponse` is discovery-only: a client sends the URIs/query it wants resolved and receives `offer_groups` (one `OfferGroup` per URI, each carrying the full signed `Offer`) or a typed `absence_reason` with empty `offer_groups` when nothing licensable was found. "No result" is a successful answer; malformed requests, auth failures, and internal faults are non-OK transport errors carrying an `ErrorDetail`. Resolve applies the agent's budget (`RequestConstraints.max_price`, and `period_budget` for `budget_scope`) as a filter: it drops every offer that would exceed it, and a URI left with no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as `RESOURCE_EXHAUSTED`. Resolve never charges and never counts as spend; spend grows only from purchase totals. Resolve does **not** deliver inline. The per-transaction result (transaction id, billing id, retrieval endpoint, …) comes from the separate execute path, which the agent takes either directly, with `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker.
 
-`ExecuteTransaction(TransactionRequest) → BrokerTransactionResponse` buys offers from any number of Exchanges in one call. The Broker verifies the agent's request, groups the items by each signed offer's `exchange`, and sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. The agent's per-item `AgentAcceptance` and its `AgentRequestAcceptance` travel in each sub-request body, so every Exchange still verifies the agent's consent. The Broker combines the answers in request order. Re-packaging is safe because each item is atomic and its integrity is per resource: the offer carries its Exchange's signature, the acceptance binds the agent to that one offer, and the result comes from the Exchange that owns the resource. The Broker's own refusals (a bad agent signature, a `requester.domain` that is not the agent's signing directory, a malformed request, an Exchange it cannot route to or does not approve) are non-OK errors and buy nothing. An Exchange's refusal of its whole sub-request is never turned into a Broker error: it rides in the body, on each affected item's `refusal`.
+`ExecuteTransaction(TransactionRequest) → BrokerTransactionResponse` buys offers from any number of Exchanges in one call. The Broker verifies the agent's request, groups the items by each signed offer's `exchange`, and sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. The agent's per-item `AgentAcceptance` and its `AgentRequestAcceptance` travel in each sub-request body, so every Exchange still verifies the agent's consent. The Broker combines the answers in request order. Re-packaging is safe because each item is atomic and its integrity is per resource: the offer carries its Exchange's signature, the acceptance binds the agent to that one offer, and the result comes from the Exchange that owns the resource. The Broker's own refusals (a bad agent signature, a `requester.domain` that is not the agent's signing directory, a malformed request, an Exchange it cannot route to or does not approve) are non-OK errors and buy nothing. An Exchange's per-item denial, including `DENIAL_REASON_RELAY_NOT_ACCEPTED` (decided per item by each offer's provider), is that Exchange's result item unchanged. An Exchange's refusal of its whole sub-request is never turned into a Broker error: it rides in the body, on each affected item's `refusal`.
 
 ::proto-service{name=BrokerService}
 
@@ -110,8 +112,12 @@ A purchase through a Broker does not use this chain. `BrokerService.ExecuteTrans
 
 ::proto-message{name=Offer}
 
+:::note[An offer carries its price once]
+`Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks, and a metered purchase settles on. The one term the offer sells, in `Offer.terms`, carries no `pricing` (rule `offer.terms.pricing_unset`). Catalog terms (`ResourceEntry.terms`) still carry their pricing; each offer derives from exactly one of them, so the offer's price and its term's price cannot disagree.
+:::
+
 :::note[A metered offer carries its estimate]
-An offer whose `pricing` or term pricing is `PER_UNIT` MUST carry a positive `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`); a non-metered offer needs none. The rule binds the offer rather than `Pricing` because a publisher pushes `PER_UNIT` terms without an estimate. `Offer.pricing` is the copy a metered purchase settles on: the estimate, the rate and `estimate_tolerance_bps` are read from it.
+An offer whose `pricing` is `PER_UNIT` MUST carry a positive `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`); a non-metered offer needs none. The rule reads `Offer.pricing` only, and binds the offer rather than `Pricing` because a publisher pushes `PER_UNIT` terms without an estimate. The estimate is always in the offer's own `pricing.unit`: a price per access has an estimate in accesses, never a token count.
 :::
 
 :::note[Breaking change in v1.0]
@@ -168,8 +174,10 @@ Lightweight resource preview for offer evaluation. The Exchange populates previe
 
 ::proto-message{name=TransactionResponse}
 
-:::note[Denial is not a success body]
-A denied single transaction is **not** returned in this body. It travels as a non-OK transport error carrying [`ErrorDetail.transaction_denial`](#unified-error-model) (`DenialReason` + `restriction_mismatches`). Batch per-item denials remain in-body on `TransactionResultItem` (`denial_reason` / `restriction_mismatches`), as partial results of a successful batch.
+:::note[Denials are in the body]
+Every per-item denial is returned in this body, on `TransactionResultItem` (`denial_reason` / `restriction_mismatches`), whatever the item count: a denied one-item purchase is a successful response whose only item is denied. A non-OK transport error carrying [`ErrorDetail.transaction_denial`](#unified-error-model) is used only when the Exchange refuses the whole request and decides no item, for a reason about the caller such as `DENIAL_REASON_ACCOUNT_NOT_REGISTERED`.
+
+`total_cost` is unset when the purchased items span more than one currency: amounts are never summed across currencies, and currency conversion is out of scope for this version.
 :::
 
 ### TransactionItem
@@ -186,7 +194,7 @@ The agent's detached acceptance signature over an accepted Offer. It travels in
 
 ### AgentRequestAcceptance
 
-The agent's detached authorization of one complete ordered execute set. Its payload travels with the signature so a Broker can forward the same proof unchanged on every per-Exchange projection. A receiving Exchange verifies the agent signature and requires its subrequest to equal the complete in-order projection of signed items addressed to that Exchange before creating or serving request-level idempotency state.
+The agent's detached authorization of one complete ordered execute set. Its payload travels with the signature so a Broker can forward the same proof unchanged on every per-Exchange projection. A receiving Exchange verifies the agent signature and requires its subrequest to equal the complete in-order projection of signed items addressed to that Exchange before creating or serving request-level idempotency state. A subrequest whose items are not exactly that projection (an item dropped, added or reordered) is refused per item, in the body: every item is denied with `DENIAL_REASON_SIGNATURE_INVALID`, because the agent's signature does not cover what arrived. It is not an `invalid_argument` error.
 
 ::proto-message{name=AgentRequestAcceptance}
 
@@ -256,7 +264,7 @@ A single asset included in the usage report.
 
 ### UsageReportResponse
 
-Acknowledgment of a usage report. A successful response means the report was accepted; a rejection travels as a non-OK transport error carrying [`ErrorDetail.usage_report_rejection`](#unified-error-model). A consumed quantity that differs from the estimate is never a reason to refuse a report. When part of a metered report is held for dispute, the response is still a plain success: it carries no amounts, because the agent derives the charge and the held excess exactly from the signed offer and its own report, and the `report_id` identifies the held excess.
+Acknowledgment of a usage report. A successful response means the report was accepted; a rejection travels as a non-OK transport error carrying [`ErrorDetail.usage_report_rejection`](#unified-error-model). A report past its reporting window is refused with `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` and the code `failed_precondition`; a malformed report with `USAGE_REPORT_REJECTION_REASON_MALFORMED` and `invalid_argument`. The reported quantity is unrestricted: a consumed quantity that differs from the estimate, above or below, is never a reason to refuse a report. When part of a metered report is held for dispute, the response is still a plain success: it carries no amounts, because the agent derives the charge and the held excess exactly from the signed offer and its own report, and the `report_id` identifies the held excess.
 
 ::proto-message{name=UsageReportResponse}
 
@@ -270,7 +278,7 @@ Agent signals a content delivery problem for a completed transaction.
 
 ### DisputeResponse
 
-Exchange acknowledges and processes the dispute. A successful response means the dispute was accepted for processing; a refusal to file travels as a non-OK transport error carrying [`ErrorDetail.dispute_failure`](#unified-error-model).
+Exchange acknowledges and processes the dispute. Every Exchange implements `DisputeTransaction`. A successful response means the dispute was accepted for processing; a refusal to file travels as a non-OK transport error carrying [`ErrorDetail.dispute_failure`](#unified-error-model), whose `DisputeFailureReason` names the one check the filing failed.
 
 ::proto-message{name=DisputeResponse}
 
@@ -393,7 +401,7 @@ Agent sends to Broker (Step 1), carried by `BrokerService.Resolve`. Pure discove
 
 ### RequestConstraints
 
-Budget and preference constraints for exchange filtering and offer selection.
+Budget and preference constraints for exchange filtering and offer selection. `BrokerService.Resolve` applies the budget as a filter over offers (`OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` when no offer for a URI remains); it neither denies nor charges, and spend grows only from purchase totals.
 
 ::proto-message{name=RequestConstraints}
 
@@ -405,7 +413,7 @@ Broker returns to Agent (Step 6). Discovery-only: `offer_groups` (field 4, one `
 
 ### BrokerTransactionResponse
 
-The Broker's answer to `BrokerService.ExecuteTransaction`. `items` has one entry per request item, in request order: an Exchange's `TransactionResultItem` unchanged, or an item carrying `refusal`. `exchanges` has one `ExchangeOutcome` per Exchange contacted. `totals` holds the charged amounts, one `Cost` per currency, never summed across currencies. No field is signed; a result item's one signed value is its `retrieval_endpoint`, signed by the issuing Exchange.
+The Broker's answer to `BrokerService.ExecuteTransaction`. `items` has one entry per request item, in request order: an Exchange's `TransactionResultItem` unchanged, or an item carrying `refusal`. `exchanges` has one `ExchangeOutcome` per Exchange contacted. `totals` holds the charged amounts, one `Cost` per currency, never summed across currencies and never converted: currency conversion is out of scope for this version. No field is signed; a result item's one signed value is its `retrieval_endpoint`, signed by the issuing Exchange.
 
 ::proto-message{name=BrokerTransactionResponse}
 
@@ -477,7 +485,8 @@ One complete access arrangement for a resource. Lives at both ingestion (`Resour
 
 Validation rules (wire-enforced via protovalidate unless noted). A parenthetical
 code is the cross-field CEL rule `id:` that enforces the rule (e.g. `license_term.reference_only.requires_uri`); single-field rules use protovalidate's standard constraints (`enum.not_in`, `string.pattern`, …).
-- `pricing` MUST be present on **every** term, any semantics — absent Pricing is a validation error. `model = FREE` must be stated explicitly — absent Pricing is not free.
+- `pricing` MUST be present on **every catalog term** (`ResourceEntry.terms`), any semantics — absent Pricing is a validation error (`resource_entry.terms.pricing_required`). `model = FREE` must be stated explicitly — absent Pricing is not free.
+- `pricing` MUST be **unset** on the term an offer carries (`Offer.terms`), because the offer's price is `Offer.pricing`, stated once (`offer.terms.pricing_unset`). Both rules belong to the message that holds the term, so a `LicenseTerm` on its own is valid with or without pricing.
 - `semantics` MUST be set — `TERM_SEMANTICS_UNSPECIFIED` is rejected (the field's `enum.not_in:[0]` rule).
 - `REFERENCE_ONLY` requires `license.uri` to be non-empty (`license_term.reference_only.requires_uri`); a `License` with a `uri` requires a `uri_digest` (`license.digest_required_with_uri`).
 - At most one `Restriction` per `kind` (`license_term.one_restriction_per_kind`); a token cannot be both permitted and prohibited (`restriction.permitted_prohibited_disjoint`). That rule compares the tokens **as written**, because it runs over the request as received — so two accepted spellings of one token (an alias beside its registered form, or either in another ASCII case) clear it and collide once folded. The ingest tier asserts the same property over the canonicalised tokens as `restriction.canonical_disjoint`; both refuse the term, and a term that fails both is reported by both. Both are scoped to one `Restriction`: what makes one restriction the whole of an axis is `license_term.one_restriction_per_kind`, so the per-axis reading is held by the two rules together.
@@ -524,7 +533,7 @@ A post-use behavioral requirement attached to a `LicenseTerm`. Attribution and c
 
 One way to communicate failure across every RPC. The transport carries a coarse canonical code (gRPC / Connect Code) as the error **class**; an `ErrorDetail` message — attached to the non-OK transport error's details (the same mechanism protovalidate uses to attach its Violations) — carries the precise, machine-readable **reason** and structured context. Clients branch on the typed reason, never on a human string.
 
-**Error vs. body.** A query that ran successfully returns its answer in the response body, and "no results" / per-item absence (`OfferGroup.absence_reason`) is a **success**, not an error. Only a method that could not perform the requested action returns a non-OK code plus an `ErrorDetail`. The per-domain reason enums below are the single source of truth that replaces the former in-body failure fields (`denial_reason`, `rejection_reason`, `accepted`, `verified`, `failure_reason`).
+**Error vs. body.** A query that ran successfully returns its answer in the response body, and "no results" / per-item absence (`OfferGroup.absence_reason`) is a **success**, not an error. Only a method that could not perform the requested action returns a non-OK code plus an `ErrorDetail`. A per-item purchase denial is part of a successful answer, so it stays in the body on `TransactionResultItem.denial_reason`; `transaction_denial` carries only a refusal of the whole request. The per-domain reason enums below are the single source of truth that replaces the former in-body failure fields (`rejection_reason`, `accepted`, `verified`, `failure_reason`).
 
 ### ErrorDetail
 
@@ -536,7 +545,7 @@ Exactly one typed reason block is set, selected by the failing method. The `reas
 
 ### TransactionDenial
 
-ExecuteTransaction could not complete. Reuses the `DenialReason` vocabulary.
+ExecuteTransaction refused the **whole** request and decided no item, for a reason about the caller that would deny every item alike (for example `DENIAL_REASON_ACCOUNT_NOT_REGISTERED` or `DENIAL_REASON_REPORTING_OVERDUE`). Reuses the `DenialReason` vocabulary. A denial of an item is never carried here: it is that item's `TransactionResultItem.denial_reason`, in a successful response, whatever the item count. `restriction_mismatches` and `offer_id` are deprecated and never set.
 
 ::proto-message{name=TransactionDenial}
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index ab01e6a1..ec6ba0f9 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -65,7 +65,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T10: Usage underreporting (token count)
 **Attack**: Agent reports using 500 tokens of a 10,000-token document but ingested the entire thing.
-**Countermeasure (protocol)**: Exchange sets minimum billable quantity equal to document's actual size. UsageReport.consumed_quantity cannot be less than content's known size.
+**Countermeasure (protocol)**: **Out-of-band analysis, never a refused report.** The reported quantity is unrestricted: an Exchange never refuses a usage report because its quantity differs from the estimate, in either direction. A quantity far below the document's known size is analysed out of band — reconciled against CDN logs (bytes served for the signed URL) and the size the attestations state — and pursued through reconciliation and the account relationship. A publisher that must be paid for the whole document prices it per access or flat, not per token, so the charge does not depend on the reported count.
 
 ### T11: Function misreporting (RAG vs training)
 **Attack**: Agent declares `function: ai-input` (cheaper) but uses content for `function: ai-train` (prohibited or more expensive).
@@ -119,7 +119,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 ### T-BRK-1: Request-set mutation during execute fan-out
 **Attack**: The agent commits to an ordered set of offers and hands execution to a Broker (`BrokerService.ExecuteTransaction`). While projecting the set into per-Exchange `ExecuteTransaction` subrequests, the Broker mutates it at the **item** level: it removes an item, appends one the agent never chose, reorders the items, or sends a valid subset first so the agent's idempotency key is consumed by a request the agent did not make — a later honest retry then replays the mutilated result instead of executing the real set.
 **Why the hop stack does not cover this**: The RFC 9421 forwarding-signature stack (T20, T-DEL-4) proves who forwarded a request that travels **byte-for-byte**. A projected subrequest is a new HTTP request the Broker authors and signs itself, so hop-chain integrity says nothing about which items the projected body carries — see [Projected execute requests](/protocol/authentication/#projected-execute-requests).
-**Countermeasure (protocol)**: **`TransactionRequest.agent_request_acceptance`.** The agent signs the complete ordered set of `(offer signature, exchange)` references plus the requester and idempotency key with its own Ed25519 key, and the Broker must forward the envelope unchanged on every subrequest. Each Exchange verifies the signature and requires its subrequest to equal the complete in-order projection of the signed set addressed to itself, **before** creating or serving any request-level idempotency state. A removed, appended, reordered, or subset request fails the projection check and claims nothing. The field is optional for wire compatibility: an older client that omits it keeps per-item execution semantics (each item still carries its own `agent_acceptance`) but gets no request-level set claim.
+**Countermeasure (protocol)**: **`TransactionRequest.agent_request_acceptance`.** The agent signs the complete ordered set of `(offer signature, exchange)` references plus the requester and idempotency key with its own Ed25519 key, and the Broker must forward the envelope unchanged on every subrequest. Each Exchange verifies the signature and requires its subrequest to equal the complete in-order projection of the signed set addressed to itself, **before** creating or serving any request-level idempotency state. A removed, appended, reordered, or subset request fails the projection check: the Exchange denies every item of it with `DENIAL_REASON_SIGNATURE_INVALID`, in the body, purchases nothing and claims nothing. The field is optional for wire compatibility: an older client that omits it keeps per-item execution semantics (each item still carries its own `agent_acceptance`) but gets no request-level set claim.
 
 ### T-BRK-2: Tampering with a relayed purchase
 **Attack**: A Broker relaying a purchase (`BrokerService.ExecuteTransaction`) changes what an item buys: a different offer, a higher price, other terms, another Exchange, or a purchase on behalf of a different requester.
@@ -141,7 +141,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T24: Transaction replay
 **Attack**: Attacker captures valid TransactionRequest and replays it.
-**Countermeasure (protocol)**: **Idempotency keys.** Every state-mutating call carries a required `idempotency_key` — `TransactionRequest`, `UsageReport`, and `DisputeRequest`. Servers dedupe per (verified RFC 9421 signer, key), so a replay returns the original result instead of re-charging or re-filing. Broker `Resolve` (`DiscoveryRequest`) is pure discovery — it executes no transaction, has no replay exposure, and carries no key.
+**Countermeasure (protocol)**: **Idempotency keys.** Every state-mutating call carries a required `idempotency_key` — `TransactionRequest`, `UsageReport`, and `DisputeRequest`. Servers dedupe per caller and key — the verified RFC 9421 signer, or (Broker, requester) on a relayed purchase — so a replay returns the original result instead of re-charging or re-filing. A key reused by the same caller with a different request (different items, or another order) is refused with `already_exists` and changes nothing; a key another caller used is never a collision. Broker `Resolve` (`DiscoveryRequest`) is pure discovery — it executes no transaction, has no replay exposure, and carries no key.
 
 ### T25: Billing_id forgery in usage reports
 **Attack**: Attacker fabricates billing_ids in usage reports.

From 55e0b0c92096552e00db3283c06c42dda02624ac Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 20:08:49 -0400
Subject: [PATCH 080/164] Make a metered offer's estimate optional in the
 protocol

A metered offer had to carry a positive pricing.estimated_quantity,
and an Exchange that could not state one emitted no offer for the term.
That requirement is withdrawn. A PER_UNIT offer may state a rate with
or without an estimate; whether to state one is the publisher's
decision, and nothing requires it, on the pushed term or on the offer.

The offer.metered.requires_estimate rule is replaced by
offer.metered.estimate_positive: an estimate a metered offer states is
positive, because a zero estimate would fix a ceiling of nothing. An
offer with no estimate is valid.

Pricing states the settlement for both shapes. Without an estimate
there is no ceiling: the agent accepts the rate, and the usage report
settles at consumed x rate with nothing held. With an estimate the
tolerance model is unchanged: the agent accepts E x R, and the report
settles at min(C, Q) x R with the excess held for dispute.
estimate_tolerance_bps applies only when an estimate is stated.
TransactionResultItem.cost, ReportingObligation, UsageReport,
Usage.consumed_quantity, UsageReportResponse and
UsageReportRejectionReason say the same. Offer.pricing says that an
estimate the publisher states, on the term's own pricing or once on
ResourceEntry.estimated_quantity, is carried onto the offer, the
term's own taking precedence. A PER_UNIT price with metering NONE and
no estimate is left undefined in this version, and the Resolve budget
paragraph is unchanged.

buf breaking against v1.0.0 passes. The generated code, the
descriptor, the SDK types, the JSON Schemas and the validation corpus
are regenerated. The cross-field corpus drops the missing-estimate
mutant and gains a negative one, and the conformance cases accept a
metered offer without an estimate, alone and inside a
TransactionRequest.
---
 conformance/corpus/crossfield.json            |   9 +-
 conformance/corpusgen/main.go                 |  18 +-
 conformance/validate_test.go                  |  15 +-
 gen/descriptor.binpb                          | Bin 678006 -> 679901 bytes
 gen/go/fora/v1/fora.pb.go                     | 145 +++++++++------
 ...a.v1.BrokerTransactionResponse.schema.json |   4 +-
 ...okerTransactionResponse.schema.strict.json |   4 +-
 .../fora.v1.DiscoveryResponse.schema.json     |  12 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |  12 +-
 .../fora.v1.LicenseTerm.schema.json           |   8 +-
 .../fora.v1.LicenseTerm.schema.strict.json    |   8 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |  12 +-
 .../fora.v1.Offer.schema.strict.json          |  12 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |  12 +-
 .../fora.v1.OfferGroup.schema.strict.json     |  12 +-
 gen/jsonschema/fora.v1.Pricing.schema.json    |   6 +-
 .../fora.v1.Pricing.schema.strict.json        |   6 +-
 .../fora.v1.PushResourcesRequest.schema.json  |   8 +-
 ...v1.PushResourcesRequest.schema.strict.json |   8 +-
 .../fora.v1.ReportingObligation.schema.json   |   2 +-
 ....v1.ReportingObligation.schema.strict.json |   2 +-
 .../fora.v1.ResourceEntry.schema.json         |   8 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |   8 +-
 .../fora.v1.ResourceResponse.schema.json      |  12 +-
 ...ora.v1.ResourceResponse.schema.strict.json |  12 +-
 .../fora.v1.TransactionItem.schema.json       |  12 +-
 ...fora.v1.TransactionItem.schema.strict.json |  12 +-
 .../fora.v1.TransactionRequest.schema.json    |  12 +-
 ...a.v1.TransactionRequest.schema.strict.json |  12 +-
 .../fora.v1.TransactionResponse.schema.json   |   4 +-
 ....v1.TransactionResponse.schema.strict.json |   4 +-
 .../fora.v1.TransactionResultItem.schema.json |   4 +-
 ...1.TransactionResultItem.schema.strict.json |   4 +-
 gen/jsonschema/fora.v1.Usage.schema.json      |   2 +-
 .../fora.v1.Usage.schema.strict.json          |   2 +-
 .../fora.v1.UsageReport.schema.json           |   4 +-
 .../fora.v1.UsageReport.schema.strict.json    |   4 +-
 .../fora.v1.UsageReportResponse.schema.json   |   2 +-
 ....v1.UsageReportResponse.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |  10 +-
 gen/ts/wire/schemas.ts                        |  34 ++--
 proto/fora/v1/fora.proto                      | 169 ++++++++++--------
 42 files changed, 354 insertions(+), 294 deletions(-)

diff --git a/conformance/corpus/crossfield.json b/conformance/corpus/crossfield.json
index 03e86bbc..d13e8b53 100644
--- a/conformance/corpus/crossfield.json
+++ b/conformance/corpus/crossfield.json
@@ -188,17 +188,18 @@
     }
   },
   {
-    "id": "Offer/cel/metered_requires_estimate/missing",
+    "id": "Offer/cel/metered_estimate_positive/negative",
     "message": "Offer",
     "valid": false,
     "rules": [
-      "offer.metered.requires_estimate"
+      "offer.metered.estimate_positive"
     ],
     "json": {
       "exchange": "exchange.example",
       "offer_id": "offer-metered",
       "pricing": {
         "currency": "USD",
+        "estimated_quantity": -1,
         "model": "PRICING_MODEL_PER_UNIT",
         "rate": "0.00002",
         "unit": "tokens"
@@ -211,11 +212,11 @@
     }
   },
   {
-    "id": "Offer/cel/metered_requires_estimate/zero",
+    "id": "Offer/cel/metered_estimate_positive/zero",
     "message": "Offer",
     "valid": false,
     "rules": [
-      "offer.metered.requires_estimate"
+      "offer.metered.estimate_positive"
     ],
     "json": {
       "exchange": "exchange.example",
diff --git a/conformance/corpusgen/main.go b/conformance/corpusgen/main.go
index 436cc615..d85fd10c 100644
--- a/conformance/corpusgen/main.go
+++ b/conformance/corpusgen/main.go
@@ -329,17 +329,17 @@ func writeCrossField(v protovalidate.Validator) {
 			"pricing.estimate_tolerance.requires_per_unit",
 		},
 		{
-			// A metered offer with no estimate has no amount to accept and no
-			// ceiling for a usage report to settle against.
-			"Offer/cel/metered_requires_estimate/missing",
-			meteredOffer(nil),
-			"offer.metered.requires_estimate",
+			// A metered offer may state no estimate (it then settles with no
+			// ceiling), but an estimate it does state is positive: zero would
+			// fix a ceiling of nothing.
+			"Offer/cel/metered_estimate_positive/zero",
+			meteredOffer(proto.Int32(0)),
+			"offer.metered.estimate_positive",
 		},
 		{
-			// Present but zero is still no estimate: the floor is positive.
-			"Offer/cel/metered_requires_estimate/zero",
-			meteredOffer(proto.Int32(0)),
-			"offer.metered.requires_estimate",
+			"Offer/cel/metered_estimate_positive/negative",
+			meteredOffer(proto.Int32(-1)),
+			"offer.metered.estimate_positive",
 		},
 		{
 			// An offer states its price once, in Offer.pricing: a term that
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index 9ebcbefb..f01a8507 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -124,13 +124,15 @@ func licensingCases() []validationCase {
 		{"pricing flat with tolerance rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD", EstimateToleranceBps: proto.Int32(1000)}, false, "pricing.estimate_tolerance.requires_per_unit"},
 		{"pricing free with tolerance rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0", EstimateToleranceBps: proto.Int32(0)}, false, "pricing.estimate_tolerance.requires_per_unit"},
 
-		// Offer message-level CEL: a metered offer carries a positive estimate on
-		// its own pricing, and the offer's term carries no pricing at all.
+		// Offer message-level CEL: a metered offer may state an estimate on its
+		// own pricing, positive when stated, and the offer's term carries no
+		// pricing at all.
 		{"offer metered with estimate ok", meteredOffer(meteredPricing(proto.Int32(2500), nil)), true, ""},
 		{"offer metered with estimate and tolerance ok", meteredOffer(meteredPricing(proto.Int32(2500), proto.Int32(0))), true, ""},
-		{"offer metered without estimate rejected", meteredOffer(meteredPricing(nil, nil)), false, "offer.metered.requires_estimate"},
-		{"offer metered zero estimate rejected", meteredOffer(meteredPricing(proto.Int32(0), nil)), false, "offer.metered.requires_estimate"},
-		{"offer metered negative estimate rejected", meteredOffer(meteredPricing(proto.Int32(-5), nil)), false, "offer.metered.requires_estimate"},
+		{"offer metered without estimate ok", meteredOffer(meteredPricing(nil, nil)), true, ""},
+		{"offer metered without estimate with tolerance ok", meteredOffer(meteredPricing(nil, proto.Int32(500))), true, ""},
+		{"offer metered zero estimate rejected", meteredOffer(meteredPricing(proto.Int32(0), nil)), false, "offer.metered.estimate_positive"},
+		{"offer metered negative estimate rejected", meteredOffer(meteredPricing(proto.Int32(-5), nil)), false, "offer.metered.estimate_positive"},
 		{"offer flat without estimate ok", &forav1.Offer{OfferId: "of_flat", Exchange: exampleExchange, Pricing: &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, Terms: freeTerms()}, true, ""},
 		// Offer.terms carries no pricing: the price is stated once, in
 		// Offer.pricing. The metered rule reads Offer.pricing only, so a PER_UNIT
@@ -139,7 +141,8 @@ func licensingCases() []validationCase {
 		{"offer term with free pricing rejected", pricedTermOffer(freePricing(), freePricing()), false, "offer.terms.pricing_unset"},
 		{"offer per_unit term under flat pricing rejected", pricedTermOffer(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, meteredPricing(nil, nil)), false, "offer.terms.pricing_unset"},
 		{"transaction with priced offer term rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-p", Items: []*forav1.TransactionItem{{Offer: pricedTermOffer(freePricing(), freePricing())}}}, false, "offer.terms.pricing_unset"},
-		{"transaction with unestimated metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil, nil))}}}, false, "offer.metered.requires_estimate"},
+		{"transaction with unestimated metered offer ok", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil, nil))}}}, true, ""},
+		{"transaction with zero-estimate metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-z", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(proto.Int32(0), nil))}}}, false, "offer.metered.estimate_positive"},
 
 		// Pricing.unit format: empty / bare-dashed / vendor:namespaced.
 		{"pricing unit bare ok", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Unit: proto.String("sq-km"), Rate: "1"}, true, ""},
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 77537d9e8c7061a881943aa5fbfaf6bd98e2a0d8..582bfd4ce00dac2a771f49582f3c8b2ff088ac05 100644
GIT binary patch
delta 46401
zcmagHd0<pU);FBK>D(<#?@4zj>Au}zhcw78CI|wKxZ#32>WqjG6-NOHjN{BaPuRo0
zO9>)7h>8d*(|{nG7<N!mR0LTR5D;-d++civr>bsl^queh{6qSjd+JxGs!p9cRdw#o
z<&}*OZ)`ktq-&%yGION+t*r5PEBl^LPrN&8yYBibeea*Lo^)p|$Xs{Ri>&71tjYB!
zDrS7ZqmNb$N<CFExMEO6-&95A;C@f_9$e9D;DE}0gZurp!hbJ&c!M5dQ+j7*xf@nm
z183f-MH0=dXCANUZ&eP4Xy0bmQ$s2TTaQ#&cA@B0w!L@OjjjaqJd#!4_~$>Z!H@T=
zO!2aAtE1H-{oo^6_e?TRANHA=KP!^)uk^YLS=YVb`Z0ZZygEIz!^JG+hb*`Gv1)2=
zRjW2KU4B*YqFYp}vnAEFxboI*o$t5$^d2<mS*v${wq>%~wW{CXO6%c)gZlO9*Z;AH
zg_@OCZ)*_LwVvrW_;G8%ApY-wA%juIwCra0?e+AK-u(yn8~kj_y6^Fd!H-uAvIY+j
z0M>y16;{7WGzASE^2n3@D)AIO(zl{dzsi0C`ZohoU(@P8VDRHfRBH{YczQ^`K^2u&
zzrg^bN_+ROt*9Bheu~;4&jiw-K9BdVtf0c|&)u{zyYQ^0v1wD(!rL6Z1ORDEN|0Jy
zmHq>)J{A3*L~R|oTD>2u=#K{V=~FQf9YBgwi-lqwysGzL&h9gyf8~&;D*9S>bFHmR
z^iHG7iVEuv(Q}PcrfGF{ltxjMM;C~3r(gDncR=s{y<*S+>e&7jkM$<gsco$F%zz<J
zqH7-Q7yBFJq{<jP-dWUFDD`ATWhIMDRU7%uIzuP=o83KC?T~48AIzptRU1}S4gd=5
z^(p*QI}-SX0YPt9@-eU;88D=OU+a-)sryaSYwFUFTz>bZEO+BN9L4YcKFeKU`f6n|
z{aKf@+>2c1G{tngRVBmkzM7@vM@J~uJ^lNozn!L<t`s=BnQLazbAVpWGJH0fNn|i&
zcH^b-aHz@}&QNdcGE`MeDdfr`cD7x{#ijfO_ESI%RilOGOW7O)I?hs|!SmVal{3_B
z3VV&I#UYdT0v}&Ktb97KFPPd!KB5VWv8=%K=nunWjh|PWls2nl8Dt~2@skPiM}r4E
zSuv=0e-!I&vgOaK7Tfc@T2$3IW%Yc#!ZAu3{{aIB!}NPU$)`(yUfLNEZYGd{$sQj%
z1OEzi3>@?t@C@dioTAOh00vNnkKzZn+ltBom>CsR=q~Y_b(p3`>Jbu}4Yj-d4HKvT
zW7M`mgZlA#X7P#9n@!%P=U0&o8Hrt2Z8Hb={tMaMz(Ey#D*9HS*8i9C{h__+Fy6VQ
z^;GX?rLz%_WT*9qEe@%~1jM`_IAG9Vi#^p%%kjd(ZF^5)Dw!-fOHHvmXQ@RllRY&{
zEhxpX8gkGT*uX3mb||b$fep-3VMfil34ofzR?SkcDV?J#UMT~|=$@ncESn@DwWOZe
znHO>U-Se1dw%Vm^o@01!6<jqtCX2X%Fi(v)vPmG!Q=2w3TX6&!=|VPXw%VqAp@WbG
zgoSE$Jy|3R2n*Hv&21703)Pmb%$Hpp0>UrNd_jG+(@PG5N=!AoP!>^v@RC|&1FArH
zNp0B3e9hnpnqOV3D(|GvzMw95SK+5U?=+NKtJcmt4dvEShk5v{)O0GB|Bjkz`e|w_
znqF<>`PFr*dxM&VZZ>Ql%DoMhAXdv#{aNc(b)(DtJjQj<{qEtKQV`vf&R?M3?@58M
zwa}r(aLw?`#^^vBu7&c=4@CP7zq^{fxKcfks&>j4C{wK&MY4>6GSyl<VZI<7j_G$#
zOwU`T7Q4zPYPBxI#Ar;^YF&m2jER~*Au&u~Ow{T%Fkce&X8YaK*iUb$FPBeqAhH25
z&4I`U#5B!sn@=_%rfDVh&9`;l=p4U$Y5I#d)pB?FQU@akgSS+xHJ}_|EY;#or5ZWF
zSgNI3m>b<3BiHYKGkyOWwX;(Grh}0Sj5oDf6Uqg~n_8_2<pSePtz~QT-=Zmb7*}?1
zoqDN!tpkw<h_za_t$Q9I)@q4XQjI)7tkv4KH~*t@H9UUz?zFyM9h%u`w}asU#%?X!
z9y$*&c54CKEIq*3t;H;JY%a&}`qi_Vaz4F%qdG>d!cW_mdjWG+%g&c|djWG+E3gOG
z3z)MsxWX*GFw3)A^1PNQP0$Oo^rOf*&E32%3qJoFV#RsoKEL}rO-V+5aD0O+`d6}?
zCsYqR@}8<T2R|&U_5tTREn-*gL)G6=)&CJ4>G!*T(Acm?)StSlfG4W95q_A)4~}V&
zMn7nN+fDd^^n;ctF=ra4;>L`erf2+|zGJ)koZCB1*Td!vszIZrlCkf1t24`(E}_8$
zG}EQwf&?_v{c)}{NI)|^Sz_MA5%6#}tJ$O8Tt3@Dpw)7=gFvh0Y~3G{2reMZ*258V
zq)-A)o6BzBtBx+4>p&=gnCn20vz@E^#aL?!Ior8<EN=dRD*<W&^X^l-moIP-GJ&wb
zK_K6|K=+GL*OW{uqer6VqAU)9-d&ZRxldi9l&x|w+`w4nV37A+rORH{6gMzd>4~H{
zkV8OrHGAd*bx`?g2O*2N4gz`K)w;h}c10EtR_j*69HVgvSY}PS!H4R&%&Hn)2}&t)
zxHWo6IDJhahg+k=>C?gk63(thFa0Brk%+7|yu?Y}2M=j-0dU+H>KeW0J?41PUd``5
zs4MlNyWCcnmUncv5M#nl2U~rxufV_k(#;R5Pb=k+5z|IfG_>TP(-QLL2OYB@Z+?)>
z;_Xb{5-4>nefU##gRA_QgQ25=$MkI5637=H)ANN-gu4aCF}+@WbC<w?FFu<-cu3vj
zDnILB7|`RaqX+rsv(A{1Z$7KT@?RCk1>byu9XqVPR(`>OAlH1sfgsm>LHE~}9ZIhG
zg5IbJpURp7&wNp5t|!!J8xUx~MO{u{kSKXkmlGHyN?z3M39Kpb$Uo_P0(S=i6Z^^0
zAqP7A<mf<t`6s6t<d=V<W{k?i1cncqZDedWT+z$9toJT0m>zgkJ*#?W8+xI+jus)E
zrt<vsUrwoIuGaGnx!QpX*!hNBb3p=jzJWD&0rjv>vuc^41ftV2+4)O)IDPT7I?9y-
zORSa<;1Wh2?;4OOzs&IY%@?V6bp=y*Ia_*0otIi}C}MJgi89NLqK2{z&DG^blcweb
zQ3m8nR(V#Plv?T3L$h<GVdTg%G&@%s9<TWv%?n*Y*KJHUKc}+H)J8-0KDa2f(TE7o
z1QLZd8Zg1_qH*Zpn)Ib_)t#>9HBL=518WSq{_6_Oz#0SV|EKw;lBM|7p=QR&^f%wB
zf6Vp|g`JqqOm~(-y*tcQ>ah!dGU_(~2@ufSann=u!!Q#ykHT1h#?#?udf`=7by>qr
z(J{n^*l-ft1O-8Z9AT!n|3}^IvPPH+ZwIkCA7X3VP$|=|PBt_4uYOr;r+6ouSwZt1
z^kY^gsWgRMP_#|SDW<|5KQU2uiV2rAT?k<(KEqU2vkx-0X;t{e#|Uzy$_x_@6ssJO
zs0D%gYBQ6(2xlA^jh=bVbhn~Kj&nX3oryYUnr^Eu3vFelyQD4)*w35p`gK{rnpO2X
z9tL&x?^qbJ7k&qZ2{*@dC+mX2cfDx3uc^y|yP5kt#o#^WneK*;RMlvNmhSncyOF~i
zor&qaz;rjL%fhr>_&dcA7cKgo6vCXvzri1!iLhnK@6?AYUTV7Q5qy>1iwF*0GTn)~
zRbr`M_B;H5-~ICMz=D4FE5GZDkl+34?^=|P`BoSHBR*~`%qn;5+A6`rz`bs|udU0%
zz^ybzSi^ON6b5dU>AtS66vpk1y4?>cjN6;PD~NG>%S4S!gdt*Px!0P?JM4t2Ev~{Z
zF?TY#wXZefmb6583w5oTc&FA9l}v7l>j+C&qLL{r@om!`tII-z)|>8lT^1U&fy|-}
zpD}>mY$|(9H&b=3WfgwgN@PNCv!euB4avlwS|u`t5?f4nO2TJKCAK;yz*$h@UB`Af
z3)tI!Cxu>p57VJ(T`+WOjWd$GB)WBb-73XM?lj$PYYU2j+-17U>#|VgZqt3e*@d?o
z$oovCIN8SPf}_6yIEeXMzsl=aTSIFV#{(XXV!Yibwa+XpGVg@jar@N|&5Tdk7(=_m
z|Dl=X<&MxzUgrQ@6?cTpV`^#)WR%=?79IlOfLR<fE!68KH~0~2WopUTN2bEpd}2c8
zBa%U&3=-7GtkTpHv5!rK2Ry_iF3BXg40`Jzd&AU9Vh2ry2XK&~Av;JirCbJW{DfUJ
zwdV0p92{!VCnVDqEz0t%pPLz9vd-CB7ysvGR)DuCi&}KpR2uRY)dLBwLGuVL3nU;8
zoAn!*x1yRXYSIz*MYeW(?1&>nO*%p{cW@a{U$9$pw7X(o*p68^`!7fa!wwuY=_q?U
zM;jJ9>flh5j*?7AE`uf=V-MtNonpsKCCR%uix1K<l4;9jU?IoZnp~}Y?6^IUS+tC~
zkCV&|Tn01o1k20Qy2ekK3O}-f0<@txK{C`es$V^2W_-h*&O_InGPCk|*YK0H)27l)
zbd5MT1I_nvSs(#%+Qh<M57nsDHD5E2M{5xK+FobCgv{3@Lo-mNaXrKC_Gs;5XRw;`
zCV@#@lDUq{pli;uWge|Ob{4}TWvFY;l1v$wLD!sPnO?19{G8o2D({+eB=bjvOom^*
zU}h|34|}!y>R&K*4}db=2DU<%Oyx(@ZJu%AwA!H4>I}hSpL?~hTYqo5oA5|lJVLdX
z$w|_Qq~JikABgiK#nA>?Pj&hypZ2p-UY#vtWpFVr)!A|j1rmKzoh>&&Ac0YxjSbK#
z_(ovh=>*myq<vjB!GWMX)C32D0<j6%ez7G$5kO4HE(r5om_a=_ncb7G-CQ==L7*+v
zWCww&nVc;*Kqvx)$=TQd-OF_VHH{t0*Z$aPnuCxDglXB?)OT6Xla`EW+1`jvQkm?c
zVsj$}X$FEcby2pmBwbmcy^~pmpJL~L2Y^}RC_-V|qHMp|_2MaD7G;YCfKU+ZF3L_U
z$rc-KV&EJIHoQ37{gk=cgRwRJ>W=J;aXGH&8y-4u9E?L#I@sjrmYuCioEJWsURkIu
z((3QX)&qRxadV*_&Q^|PyUisAM&6VoPrUTsO0>o9)<?1t?9f1qXXw)}vfbV4aG>bX
zY<DN~WjdrVY3R?V?`Who&8#|~t%!3#aM8N+b~l4Wq4U(u)P*1ssGQF(d_bUr<eRng
z*+uu0`{n}Rpz8D4*WSYSZ&XI^-_B>>d!IQTAtvMy*j>t2e#&-7e|A~vpPOoK*Ii(U
zF2`eZ`6au{K|-lZ*>d{~5=vdl7SSJJq0292TR+JzCkD<qpv3p=j#4dHemUFS!3>z_
zI`PC!$2C7>BP#d}6Jzvaw)=K0AEY1_{43eYupG9aRO?ZNpSEgbmRB6r$Skke)_`Jw
zzG7PgNT_xtJ25OrSOYPHYFD$}EoAka<<5h?|8W$ROrZS=MH9ajg{DJupef(0npEZ3
z^pupg!PR_hj-tw;B5NO;qY2}O5J~0u1LovRm|(VFot~4iF8$9I+9X$CdXAoJo}gKf
z4XaR><S47s#VxhtnN|2Hwo-Tiyd^n?zyk@qC4@)kOd!$FB{{)WXegN=F+QXSd})rm
z88;2$yw4-KmvTgG&4s`M?y?*af!i$f#mhN}j;hG0WJ!R%k|QEfn*}%eY7YEe9VraX
z@*EN2+fwMQ*9feR6e92yIqu?G7G@~mU$3hxpR_*r${hCt=JVv|vT3AOv%GfN>>jIg
z6peQ?n8c<2qX_~MIIDBKVm5)qd|932=kX3b#pshaS)CJTW0rGJG<7Zep`CVp-?cf4
zjY3te&B+tqGMgLK+8lUGQ3s3)Pa|DrPm`%2OkbN5?ZRgq<cUKkCTnv#bvCPMz;pcS
z)|`yb)3e)aqg{=*=IC?^nd#1fTiKSQ?8tFr@z+3#^+d3u<!paQi?H4ua60;4j=LSN
zP{=^-njH7t=s{hU!Zp_R9QW%kvmx4*L*8XKtLdOMer$J+yg&dG?b@B=6Xz!&(OJ85
zu#ix@K%!l{bE3j!5y{)NJEyQKZ<pjyyLRVvzQIiKdVshuN4Yg>vGI9YqDmmSFy`Qr
z>m*<rqkTC+vB3w4YWL;9eaNS%c3+Nli)bAmBXsA!oW#wtS{gOpo%?eBaFh88How3`
z2OP{%>PKJ5v~W*lJ&Aj-{*@K!AFk78yUOrHxC_WZm4i9*&=(|BIhYd==g1(T%E265
zp&+aRD5yhhPq{X%%OMAWR<T1laxsPs5Dw+|g)xAnGC7EP-}hsfbN%Yb+>EoiuILtj
zdTK}Q6_t5z)J(Q<tfqSD=9=G<nHK$b2OByPqq}LFuCiOYX}NS~ThLHEqigGa{l&d|
zor`4WI+p#To0h~aEB)6;+=k=sTHfTPtlKL9fa`2r+R2+~T-?hmIevADyFa>8<u`G3
z!6uNz4ST=AxGo#;L`5IERvwVP+)bP6sy{MUu7tTT+3H+ne6HJ^M=?;Yv{~Y@<$uuT
z-aIDP-I5Qcc!ZG}o9n)fo2uZzRLAAI$GG?uAiR0G$|B$mH*GvDPsB^lxJh$mwV9ub
zO(nTCUYugW1-V#K$o2&XfD3coqg>`b@)Wsb{L9$R+qCz~mgP!I027w5ELU0rNQ~pM
z+<;hFL1G-2<s#N^%@OeMRd(=pt!<xIa~0upbGaSAnkxeskSOwME&>>`W00`pS94?C
zg{HP0znUAriQ6#=NIQNtx7&^8bR4dt6dJQBJ+Oxs%IdYr(Uq)rQ?9&YfDqK#lv_|D
zYa%<{l-od@kl`sR-jv(u9_~(w6ieKu+{Qi4|Il)uO9g7uU-s07x*n==YRN<`HM!a1
zdJ#gXr6$)WZlys|p<LWbi{@pbmYUq6n`JGTvX+|M;_l|3c_mm5cCjt@YQ1{xa_XQ9
z$X&Ve$TpXsx$Vl8N46kQ$F5u)*@`+4yn$@cQ`SMD8^sa3avR=l&Y-9%msbBz(?jpm
z@-xdnb!wqY%1@oKr9-+;ow21ux=(3r->0BEmpb=U`ojmb50!^bIT$LSPvy#a4k2Ki
z%9ZmRBrs0pVx9|4>D2sGZt*QrQ#v&#O;6><ZZ_}Xm0*oK!`u&P_jNqu)Io>fXPi3d
z5d2K83}tf_Is`wHi%@p43SWZD%PYAV&!uNQq?KfPuH<45^1ndNBkTT^?dq)!ZT@Sn
z3=hBr)UUbn1QaBoe$B-RC|^7C$bd%XvA;i}%_<$4S6hf2^T<3y_-P2C(8#>}0@@{^
z9<-;Lb?T#aEUV6wvj|MIpgK?53`ihU=lR672uL7Q=OJ9B3*|hb#<F#Nv^Hg99R%{H
zV;uw@C*?`2LlG*I2dnGE5nxjjSku1R4doLY1X{u;I0&>Mn2_fa%UB+_sR?<QmY<OA
z=aIrQ(y#Q@9&mM;;b73k%8WcY+7JT9j6Au!0SPT;P&;NsFcKcW`axdCW{)d6Dw6)g
zquMn}@ScH`Dm3`<K^1VF{f9jDNX4K^Hu`a`OBT;pV0$0eN_6<ur<z%n16X{OR=`62
zw5Du-Kdl|>)K6=Z+vAR&-Fw{L`Bt9L!R~xQvl`m@HFfi?ES{s&gYvc-lauagl~YDR
zm?fXk{@LTc?mchnaZgXH^X*o*yL)!Ot#i+A<jsGdFvN2?tpA=cWZflmnNW`P>Zawh
zr~jfgtr~1vT_{foPoF^|P{m)dnsmW>(xEnu2W!jY6;EPad8DFG?;%KP`Y#nzCp|uZ
z(t&#Sf0mZC$E@Cu4EQUOFm6ZY6p>ivDu?vp=~80#;i){8RlHV$bdsj}A=w96AcG#G
zEHui*=xHIDs#YIV^-MopK2aVM^~>)&#R00U7(5smNIWSF^&`E=Svfmn@k1_37Nu!5
zWBs4iBIzwpXw9;EnnEMATIygSJ*qaL3+zYxAvLCh)s6R>7(%W-Psx$lF?G|=FevQX
zJG9V)l}Iw7K9(I}C-Lx>LP^TK>xbcx5F!x;n^fe>V5LSC{cDqAkbhE};|09lPcr{N
zZE^h%^5pr22W#!8dCK8DtlgPdYdv!9CSLl`Ky9w8>a#qYZ_`>Up1}tk%ENh~!@<n>
zJkR|Q{9q<z{OXZB<v8$=+b4=(>6Wb8GUR5y$iuF{;Q;q&9(I5Z2e`-b+{vn1;8S_Z
zSpbhzY-DT+iI<L6YMHK9r+=dsIjgVp+_yS_<b2NLxd)n!;RQV8G|#g;25U|GoX=Cl
zeH55b?0lX_#Q7jm<b0lt^FhMLpU;zVK9M{gKA$J!e957B_<SDX{9)v7Jme5BrjHDU
zid7eFPYW)w^9-@U0EwC|=E-deNYr#O&;LJsH6c<QSzOEu+*Oyw3-$ab9dw~0wD@u!
zvcyWQ?sxaFTDQEWoz-W^ph3uSLeA2Fz7-aG_^+Ckf{fTgq6Cz<oF{MdKmzY_9&YpI
z2+a{iT}iL_s}^%rU9ladM<I88#dee+fpH~I9tD5|#+5w8@_C4XK<dEAv&Orm+7u<w
z;mei0#KVY!3@*ZVdk}kMoXcEExhEdFpqt`R8bufARyQQ2vRnS9&B?btq(#o>S<Hh$
z6&<VrZ1Uf=q@T}!1hfc_xo=FF?51b6`c*Q!tM~7cM&;b;H@F#}N|>#+zP1rfQto>G
zzw=_PK|`LbX#8K&E=@7rd8#S712*MZEyn$``e?tuRaBa6_p@5FDoQUUKl9s6R-qIn
zFv_g6-@EPqQX%(<wRxVLs+))gFCl#!w4sLa+|R22mi(DQX6+r_?&@{V?cIAymqXcZ
zTq&qZb-?BQU+J^8353^?XF?VKzd5s})!;W-v$YPpZq6)xc2D-}RJDYi{<~J3MM<9~
zGykC#vF6j%dR15^DhF5e?u&skX&+P38%qZ5V9<)+q^#D-*0mj`+zLH|#*y>p`GWxJ
zKX`yhE#zY_b0=v<au(c_%vfyP9cv23eK1sEskI~~#}to@hVT@VV~WQo;&hOh98)}q
z)9H-VLxIS2=K3ejNT+*bJOw6k9R!L)rh9xMR|8LhFx`V(jaigm<w4}C&h;oSr)T|B
z3oBLlX)8j(>s*fvXCMcdxgHtLfCS8355gHbECPwcqPd>Jmp$UJh#35^Xr4zN77<4r
z7R~pF8!=u=92U*@Bs=oyT_wffh~|4bJs_t%FNyjVc;o?(ltRZX@Fe+7pbZ9{7kD~7
zShpa2#lqiJi9mXxC&}-p?1FHY3q75xep3?nwTnFRm`PTN>)OS?(*oDEi#^Gk>Q;&C
z+9e)wLu}*Yx^{`D-fybJb?p*QCvnUw;jhJg?b5pV+_AY|s@sdg{VnsjAGEzJn)7=4
zv7zv?U0!#_Pea3B_hgIRs7IlV!Rwwv+mL8u@H!dNUOFW7@C~0w=^fpurMC~$y1M!z
zTiWV9aNv`a89Si=lN3+D;gACm8Nt&3)j3M&ASU<!Bg>qp=Td|r<EnJ_2ra2pZE}>>
zF@T#K+og1zO&*`vmO@D=y~)!=<Qaj)pl$M$J}g#fkT~ihPO6t249?+*x7w>7XK|^X
z51G?&Dx8IWQg?bX_NCt#rTG-^PEVH4+=@+q7Eeao#XhXow#9aNWTFC?FwR{btWOVf
z8ECkh{cDW&NWI-2d0nXSOQzi<^PvDjkv$&8O1{g=#%lMlZDX|tRoBr<V<#0mFAk7L
zv9qE@Oj^6H@DV^E5!Kc%KzzbNTUv`zi?}=m$t#5pIF-axw0SS7&>W*#QHljIF-~h`
zfhDduAprTkr1M4U70l<)JQ+vQgU4xu6whZKWO+OU9G=y4h<!gndpLf`qwoz9F;Vsq
zIhAG9UY^DCIU77tdnNw4M_%xO38BwPXs8eZd6<<?(uQ|DjD?!KAxe_ghe;?0O5n=u
zs3+sB$7N=lnOT%qb<~4f(tfCe-*X-FD9Pl5Y|;&Slod?YZjFH<u1WD2K*u~tWb4kQ
zQT7BIHd(tRe!}h|+*v{9ga<qD5u_2nv^vSoPS!@nPkLkm3z!f(=|KX^2_b}zJi{hW
z(Y{KYv5f*3Q4l&qowt~>qmbx1*_%=AOFuVNOKO41UfpMIBX{dX(5OD|Rc5DmKCg9E
zs_;`pQg{FjpZ6Nsd{qF6YM%GzdANTCiSc;e>z(Zt{*@T;14v=<y34q+OAgeS<t-_#
z%L33WZ}aQS4}4q!1k)S5$`-FXy4lArEHq;2S6|Rp=v83as!(LP!7J|tygahp;Fb3R
zAfd_zZ*U7#p|ogXkSgjsUiW6NNQ;&{)VvX?tvpJTETlzm@={tf1)N^$+HGE?8v;)D
z$zrYDBOt`d7#=~1ZC<Ykq(K5~n^y+XATjl~d1W9?BoCywd1W9iITT25^CFPGk=F)@
z9qj2P+D+v<ymFcI@?dm_S1xlPQSA<|T;@Ph884Q(HKO;h<b0RDyhK~4_xjGkpwolz
z91L2szw^p-9xq?Bzw^p-9*|J|JFh(FAyS<4eCNeE&uL*KfV-OZyskZ=lwWmfp%baA
zUU}~2<>w1mz4_wY86-5l>czP;vKY{_kR9sdIf88eDosrd^~oePJc4>deKJK5Bnl4o
z*(riv1*^$uHg&u9GyBgQnp!^ESKC!|)HK>x+f}rpjP}XgQ<MYFXde;;Z^g{Th3Gh6
z#!S}vP3;!%IG@Z~!_A@JJ>JKj9&0qL4*~$=eKO?*B&=b)4`)?fF&S~OhjerwJN>5C
zEk4mFlPti6&_o{wL<oVJ>|?jS1)<44>7sEZ$Jv;TH*+K?Hr2;gzNOs~n<~2j_%vmw
z`Y<do4v-kx=`6BZyD2u^C(}p3gv@jwj`;)-+W#D@TCLq`J?E3Y4{e3ab3PmnEe)W6
z4->(c@qPO2YHf+(dB=xanOiU*K5F?UHgBVLTj?gBoM~X9k(+#mIA;P0O*awL{k#Ys
zZe@{8+JmXBP7#`%TYZMOaPjfUxz&dYm#Oehs0PZ^u!Wnn>18$cz<~+HYwUpo35Xh>
zv`>(zwT3$4E{*_dCwqFc)-$zJ_9$R!TI}={HQ?R}BnkN%H{q@vkI{L1*~QJ;@bbM*
ztu!n4`eY;v89?my$yZH40%ETZ_BxTaiat{DK>Cd>n#Wasz`>wc_JD&yvFrh#Pn?gV
z3@{G(;N$sg4?Z&b&(i<dsujD+K65bWWs%Q(*&_0R5HLRT)oUS}LgxROuT>lFk$hzR
zhuMAGwDQu!Afyag`eC2E5d<4W4*Rgx9?Uhzd_KlDZ`1yoI_3-$Pb7ARi6;`%Fs&8C
zgwXONt9Va)yZof1DCH5KbcTu6yOTcoa)nQ!*ybd47=J$lr6?=q&o$c1<!2oT$|FAO
zKu{j>S!bjvkNB*wu$cP@ALS9B7e1mj2=vl<+ev^#$@8|80Ev?4Yn_CT@`x|J1SjFT
z{*qHUB@kb7DyIbEOSXSN5kOob|G<+-aa}#kpE22=-oHa@tN4fcvpjUlorSAmq@?<l
z7~4PHxV-^Lpnw*U21pqAa6hI9y&VK;JRRj{6LxE_Sfl(hr3+k0jq;<r4+$xdWBu&j
zJ=*8iSiiVLL|K|FWBoXs#^C~CLBR=rcGq5QLVSXQMSfxeVNo2FO{PA{&#vy(I$D$b
zGI#<PLX-Shp1#M`Y!<F&XZtf=N<X+yyX5lD_GcBCC#eeDcOspX^?F}B9e=^E@GNs;
zqVNlTTv;p?LTJ-m_UH%NviMxT^p3dVgwR|+yyJc$1acuO{ZRWLzR)j&9$Y>W*N+LY
zO9-JwOIhrIw#QoPmrf1$ix67shf}*qsVjcJy4{cHH~S;)-<o&3UoS8hp|IOey6$4R
zhqWa=cKM~p0u##Z^2=mpkf>poAIZwJmj#Kru*+Z2iN_yAA~Ha2yZqtn&1*R*itlBv
zBiePX_d1~D)Asu1+f07$)AmwRUynk;fL|RE$e0vxMdwG^oe$^*>FOhzKi4-RpvTPZ
zq-uavtq!nP&T2dEt`3N_W#R(1I$(+214!sv9Y8h~=?W6MRtK8h#di-xRvQuGl-`MS
zEdoX9aRH@s^k$Y=pmvz~jaGOEXb~jgDSs?G0wlo41!PBn1o*gs><A)7M~n-|jtJ05
zO$@NVe4}+}J<&m>N+$+nPe2H$69edpF?8b}^sCPWGM-0I{G^DUxbThk7gyDD0X>O$
z+3gNeN6duIyosPNAwde2K>~bcK&lK9;4^KNK|<x3w#q~bm1mO50vyFzK<OmGDWM0X
zZr(}#8RQ+p0`e#jB+yv^M}hJw&{-h=dTtqbD$!Y>prd)-g~o+&fDp)7iN<~5;*Def
z`Dd2Kx?j+C2IdCz`sPrIjY4Rlx-@|EiU!|lzq+dMQ=C`e0UX%UK(@H}0|{-H1{#Rb
z1_^bR22#y=JPi^-?9xDsmjfb;hZqRMP~@e6$Tp^$h=pNV7C>fqPhL3$mIst*^hP9k
zJw2qNk}bZd-CPQm=;9FXgyjLbI)g;5%LDKoWKkg+^A)V{lJ>w8E1V)U<SPO)27nBT
ztO&rtQJ;s1dOaZKH&N(wkalgfD!(2uMB)IRa$zjw?`NY!^Zn|MK*lHOFD_~Ov%EWK
zwonSbJD-eXH{1BL_FU<18w*Te?Y4~rB(Qdqaoop?;Nd<t>=*6+)IO&OO@V!OWAk}q
z_fcc{s~Gvz+7Fq2MVpuU&?!T${m^bLWKhkA)LMS2m`~(E_R$q>c8h~f8EWQ1yP1$7
zp#Yk>n<hm8_K1Ou$-(rztJ+SN?`S}en)9ih1=P+{0oHkz{z5wt=(<xjCP-kO3dqY%
zkia|@z~$yyva$kbss1~lTv~mr{)AG6U!upsN3nm~s(?hXf0HV73I-BZ_3uFOC0G^R
zLJ)(tM(&FNxl5BA^vuP8+@(ntfG!5GOS_F%4}l-Z&aNjrV{J0^8&jag-mrkjZ$AWb
z#MA<bvOiG2&!;?=0wRA+znrNrbUpm5Jw3q1^!PO(kApy>A-@I+#qI$l6$&7@pxFu%
zv-Q_NeQ{_)q?jDP1{&OHZlHLrfY!lL!St(HdPi6JsGyvMV56E*!EC;?krb*K6-;)J
zxD@n_3YK@|0Z0MGd}D%QlhR4k)#hV@a+88bC^#l4Hz^=da7@tNq!du3Hz~;9V`BYv
zT`iyFXh7$dlY(-W0!aW(3d&syNB~U=A_}=5wiEWN(}EfE*eYHBqjy>mOCJwL!(=%u
z9Wiu|s|O3pFc4fov7ihCK>~^e<&6tS@^C?adp`6;^7VuT1MSRn)Ma5Z{kiF9OufIW
z%UoMuaM6~zK{+rWNh(+<{1!-5GB*gn^&0I_B7XI?V8;7FS9ER`^Hr<CbXkr*UGcpZ
z#A{dF>LaB4${@G;)*#RsD}&N}K>~bbP+C1mfUgX~>ao1I-4RkSoqpY;k8_o#okFBh
zIw;p92%%7#hJsvTgl73V_NY(4w|t%5CNR;abwT-VEl41&3ns+w0VELC1sgXtUl!GZ
z+=7f{{Z&`_76*e2c1uvE`bN0HZV7tDaVAJA6fBOLdugsm$Q*0fv4Fn6yvBhbW2|x1
zAY-fv%2#|*1Q0dBw(YqwM#va<3S(>o0ws6a)(8?MciPqn5+!%mT4RJ-yI)x2A3#8r
z{f-V~j{9wM#8V*cx6KhGkoJ=~K8Vqc`qcx$jORkG=xyxjC-i(aJzwwSIS|x~%@$~6
zl!o?Wc06BiS^BX(JYWLx<Dgu3K?3pPAl6-qx1!YZpR&#c`gN&Kogy@%p9T$)mIE0S
z`80?G2|B$)84T%R_DX^NO6g&z3?Us3%ES)Hpv>VQVrQh$qX?*@Y*<)t*X5|)bTHBM
zqju9l0^w*-?q@(!nIK%w^W<`)G=g6T6>oH`oBa~jTj9KU05Sl6bJkh+uDcm4jpzle
zTSRX}pF)V}Nj4>-H^%R^5#3^+iQkz~y@WNy|HOq^o$DF<E(aIf_91LD+#^}NpTdVf
z_*Y8kx~*^BEBQK?XUIO_UrB)g9f|+;`b>Vo!M-=+mu7eKyLUq4_h)o{CO?@XFM`kk
zFeCJU$o2(^?)o~Y38xPd-Su@42ZEGj8YOEz$3{f;>&wqM9ZtLDb54ho)t(E=7yMBK
z2<L*>W?T@%jOxB)zee?cmw)F#&}R8Nd)7s{xqcV)iVzwkAifLY0RB4xf!*?DmMYRO
zmS1)t=;GmWFx$2++B{zlhDBT!<(ucr!A6aRyNc35-p}lzVtrxR&kh8=mHV^p6CneL
zpM!<h@KppPwD>vLx~-fQ*h^n!Wih>F$Eyy40fehT`GJ6_LVM|}LHU6IkU+Q^#5X3!
zlLv~@UV3CGy*#E*aFve?$;Aw8^ykQsTuML!WMs%M7D<o*85wHW*lf=+u$!(9u_2az
zZK^sX^JAlYA6*@iryd|traA<p7t;pY=y4(Txuv%)ALmp{A4nJ%k{?KjDzuLt7mAB7
z6MzK7xDeddUNLWQvos^!Bcb1+be!Q}&<7G`gygCcRp<i=GeU*@ogK87K9DdYRKKA)
zi9)DCzd9$B@n-sPi9XR4m=nS}NSjP|Asmi6Kcp;S|5IPzSA}093<4i;^Fz|-fCSw9
z5PS}WK_C$Z%@5@-35gS8Vo(^QE(p07hr|i7<e}WckUSxlESwN83egGibZTB9xt$du
zWCM>(?`oiXl`0Un7UafOgk%N;B!RXfB-dk*u&fm!zeoZml80g|LIII)C^_(TD?%;B
z8M<U~n2z1eg`y82@kR(APMGeZv|#o?V|{ix7-HK|$d|e|LNc!sBy@TsR3J{MKmzQI
z5H{r3pr4EU>c2u6Z?kKf=q)_|3h6mK%drT(oVA7xY@+viWR2Z8FafkCBoE<10%%PL
zhwv1jfkflhgo0IkJ4GZKhY?>B3W-cd$>N3X{a-VTt}G(e*0O7w>e14*PCe9#Ywe+g
z42rC!p`_)b2unfMI`+4w`gK+7>?VVWX|c|p79fGJE+q3eKmuW12#2qfzX1~Y8|y-L
z{sz%P)pa46zad#j6<HUe{EdBdf`Y8)ZJ~@2`L5`uOsi`JKAP0Bnf|WJyDfy<IfjAB
z;wicBF*T*nioX|<N55cVxZb1M|1E@|TMc_BrC*BGgyef-NSlRF4b8%)90=5Qw!gVv
z8rvR{?|>oamAD~%L?*#y(5M}(u!UX{-w~2$GRS9z%#IMY=ai@ejj)96O#iusp6QD3
z3@QA;k+_iB8NyZTmqI1<-Y!;kjeat=E2K200fi8qBJT<{E9Gy<@qE(VY(z`FYixH&
zo)duyncX2c@FcGd&UX*{s-<2pz9%G4fROMBnLT81E8y9H3p+WGZq!O&>53h2kaS2L
zAfzr_2p;q!cDc3QE%s4J-h1UL24p@8;oj?6E&~_&F}uHw{*U?}V>U>wO~`yqeq;|O
zD{6xeJQ`BUqVKp7449#GUR%Aj(h)4XKsE{-r2?YW<PML98eIolQK>i&5kieSnDYf5
z{NvZ@q3!jg68qZe&>Vn#9cs{szm=G)zyY3Nn>y&7VrN1MUuFQ63z;(^d@_OFT+CIl
z2|LST*Fom2gF{DCX9<Viq(n|OEvf&!PQN{NE+k*`0~0dmLRj(W^e<PzYXsl0)7R<O
z$G&lJ=<TR)2nPq~kipB;=UKNhy=VNqgX4qDdBQ;)PeORT`p5K|GW~VM`Z1*N$e6g0
z`Z0vaSoSC0xE`LLuD)KsT}cejukFPE#D?di7f0jdBnzIkIzMAdKD*pmAL*~o$5kzz
zr1GrZG5JafKS`}G@_9jv7xO^^WK2HBmtI%p>AYj}*{?U~srcA@`Q|^k5E`40H~$N{
z5U6qa?A9)NQG8s!yputSE@$ITrXCl<n2yh9)m`-Z@$vcc)Dc;@5E`G4Q%B_SqB=~K
z3HfYS7rk|SLcX+Ka3M4yAJ&UEK_G;gGBKaUy6Vm26CEU)DiaAwR0p>=DW5&r71d43
zm*>QJe6CE&$H4+Veg!1VmC5;RWmmn0HQDI`nk<v43qJCh6zZs}^E1}}tDAm6_pHv>
z^XXMa)kRTvnw_{!zqvG>uW|=WOcYJ$2OE(g6NyHr^IP3yHsVFNr+wgdy-DfXe3kFh
zAwzw+Hb0+dFA#|$YxCRPPG5`xiHC2qRk!Qio4=i}@>@@05;s58MAkyC_3ivNx0r7#
z&=<*zTk<nDq#O6pTe`ek^7W8;0=JZSeH9v?O8?~!{VP3nDqrOpg2V;bsr)=X{zL-o
zR6gd~WOzZ)(0P6OfA80)hHhS8pz<>%;-b*{f(YM^5{W|V3)=Re>v?yvU)@-cak_wC
z&%28Ou(3cd5`kSYDY2zM>_b6dD7O^Il^Y~vw-m^IC`h1gDZoAyzSdn#n!H=UytDP9
zb|6slU8f{1SML_cGfX^1$#)BIOvSUAiqT){?gC|B`X2*zWHaHXSf=p+X0p2=TO5^v
z1kCP&h&cWL37FjlSP&?H0f_)+cR~Gq1>$s&7~%kAPk}rglq_`4-U6HsV%Z|af%0Ji
zKJxWXt2=$NhWRV?VQs(>0Slg^)(;)!X$SNnDZiA?2Z}K#)K3ePBL(j0bL`uNMw-o^
zqxY=>A6<Y4HVSPFJ}r>J7oGy;(*hZMfrRd#7UUm+?sPp*3?6)aR^UEdAc8N+L%Bl*
zGWe1#1Ye&QQ1C^U$i+1Oj=2i>0ZnUA=)z+K@`MH?)HqfkPiQ~_?pT3+LQ_ored?uE
zLv&ZiQ_d*x7a|H|Kn)o{oGOrKGavzRssNke+4PO5m|y*+02wIX{#BplZtzP1%$pK~
zV@MDl8dgSz-R5e_<BiFLW6n#j_=n!g)qYr5zTG1pVw8r5@s=!|$q5cB8WG03wTG$W
zV=z^9d{~(hPDlPnf6!Hh-=eSa1R9PH%P0&a3XTuUR0xph>+#{>l(6V)V(`A65Oz-v
zi@ugTl$#iqeJxq&>q%ki>z{=Za6dD{%ABw}eer+wXIxbvY%R#>XNF~<8{<YlGmJo&
ztQ91*m>KrZsntS+x+)91U#Qi>K5&0Nta^FSNadg`6q^->SEE-cB?}`rJFFHop)dnH
z^xoXCa$7WLb)hdZv1<nEfxckFgM%;T7f9I3+^`&3kkEK;SiXh=64lHNBT%B~6(pjP
zx#7gEvQ{1va*5<EW-+f6)O_~LFg;#1->HMn6XrX0&}^C?mY=+g@$-cFVfk_qNYpVu
zT=WN72TvO&)Nt{QW|Y@~1}qFC`6S1>Z@{3w*q3A9Z#RdMGV#zf?-v@=6kHgVciAz%
zH(wa`i5Hnb0(fB<L8lZ()eFN`S6MYpKvI2SIMKyy$EyalnDrm7U)yW3(>&U}FLvsn
z`L#GKGe2W|ek~5mH?%;aj>X|db{A&JIu?f;-@-5d(90OdWlSBR?|EpMQwhz$WlkT`
z3|tnLGZ014kY!;kh@v6%O471$$?dWs^hy#L%(8I3+sqhm2-ekC*fk?{>!DYiIw()%
z6{ik50C*)Vzc3c#2LP{xvBrx!@Rdb8P1+6N-&jN)uY^l(F`Mx^Ah4XhK2lGWFL&yo
z6N2SoxxbC^6N2U8LK~D$2$qKt-@ZYPIi?`MUCE-O^tT>b=|IqR`$|VmIwDvZ_KP$D
z6amD_FoHUvrU5NhhVlBFm?(zqik0Ceck|4F7@Z-!$(oJU%gf(%>M)_^n_+nj0U6Zs
zX1M;f5|mC5-VB#@G&j;)WHAb#H>Q`4);BA?HaZw|Grut`j{_hCjE!OWy+n|}*ceWU
zbOw;nb7S}#kpW4hxWn2QZuyXTn%;Md(cS%?^m}9VCo+5OacZGMhdp7rkA)Cw*%OxE
zAOwk8_JrZxMQ`9`W01)^WN+liTK0rXdYA`<J3~}{AU%1aey^+QfKv+{OB@Jii|uiY
zA4?nv$Hc)7NYrv5jDsCfOD<|T5N`K~aNJ5RYC-&cAl$w;mNtB9M{p>~>p=LSUVP1p
zQKWw`T<1H7{RXhSC)C_Fc!Ij|NQ3|&(ZYjaxqg8}-3O_K{}CpG-N50nxM7$#MOXiL
z*lC0ZhI8049Qx|xVP_7}S04|Dv5HZM6!)t~!x_UPB1DQq@@N>xx%{X;P9f3>)@hbL
zr!{^9^n~s5K|=IISVl-70eT{g2<bKI-8i||)9F1^_2#bB>9D+@0GHTdUA%n>5`|8O
z13~i$opQy=lYg6TGF?CFN`31TBCKznLgcEyr9z9a1w$c_Kc?G1r`K1?f3&**Txk2F
z-31_l@nhI84(CBqp)ewJ3M1mQQv4F;QA8UM7=>T#Q2>dOzu2Py5+#4B9fdfpD#Idt
z6ncRG(6ESHazOHja>)S+q+t>1%0L2XSVRtk<yS{WGUmx)upl`yg8NWD3>FPTb%Y|-
z1*O#yx#)rmsp^Ov0g%9}j>s6*qD~vjR?X9k+v7JB8S50JQ5YMMAu67t;MfSFygg)C
z7KNx2Bg*s$>pNTDRfV5o&A|h}OpM6(fCS9Mh+N)40%l?a%Ns5FAhGCAj1*0eh!B++
zB1D}Oks+#NVbCW>5TeqDF(eCbFybwO2z^51y1HD{Fg1eDHvL8v!!<49?kQqa3tFhN
zBFfxI-5B+WDzHSX0s*K!D<Y#)kN}+(k<lqgs68u^KNo6KbV>{!G0l#+UyO)|N%Bzc
zg@}xpBnuJKoCrlsG_w+ZbwMQKB|fADneGItT@caZVoVb>ri=NQzR(H;dUmm`B1p(C
zwnr8us#;7VORse$sN0va{&V%FH!qFInFS_sBmAAWERsQyr4ht|q)F1Rz8uL|Cygr!
z$(JMc98Z!W%Y`EBf9L6H>2g~SJc8(QTMv)`U2a=glJr<X7FN<`g;Rv|SYg{1WKd)U
z*%seHB+0hkiYRNH(b+U#f1(O3F**=H`M2!R0g3W&*`oszqw`iIf2|xHV(`&f9dWOb
zqa%4J_b+>NBnzXHt{t5czq&q>vBe&p5>&gscE*)Zr)-p?0|KM7(N+;8WH;Kq0uohi
zq+X$~SeKCgo7tp=`ZcXL<Mxa%6krlJqKS9#K%&Uz2)+sVIlc5;&#!(M$v7KvMJH#m
ziwpHlf2#AnZhpN~`yynWgnaSMZt-3wu8IZ>tfadeew8D>m|uHqR3~+RD>K>Wi}aSk
zI`2%<yQx&pWY@o=7qO0u_2LA7(TQHcl$TI-Uf7~*uP5==>~Jk#lW&ExKcS4vOh3C=
z@8$A*7{OI99nRLHUi^riT7tX1kL<nx6MgYfM1CX&B>Lhbvea3$aMYvzJCwd-sb1(R
zJ7l{aa52jdMP!O3NRo=wYr?x1Brpy|N>gSJ4gu$JguV2VerMSc2Z5Z|5!-py<92o=
zA{PXZKsXY?f^a=Y0CkMDUZ!_0JLVwJl5)&JAU|>}A}_D%aX)e_f{2cmlzOzJe92ZV
z(-WyLBXUIt6Ggs^$Q2zVs`)Zvujuti!!t`?)?HoBIF-^Ga>l8Y){ryy8iEo)I74g5
zHWP+aAB#vd<6lu%^j~JW%PU9@$hnJK1UI6F?3GvbmQ{EO#<EJCmt}r)fBBocM%cvv
z{dOL`4{g5<EIy#oMZEk=FDKKVhTtzai`S&Dt5cP2N`){}=dBW}8(y`h_w9PZ)++f+
zg!LL-)1pNS0WIDqd886Y6^*663)^OAUe&E&Gph^PJU;00NX3%_p5bL!a=G55p?EI^
zPq}g5`G4trr+CeqoqbX(WS<S!qHN`IUB`Ru_%FR?xqgr08yUsNKlu7vpX|6g%1?^g
zgTRPX<BpHp9!QKxbyTjxATc7<QFw#T$eioLoYhHDWlA*t-Rt@vT~+vP7bF{=6qUJA
z5JbUAQJJX&5}s~Sw0KHXWa<!uJe_-TRA%Z(4y~S1nW-aL0Gb>{rp`570SHWwDn-!}
ztLLEJZ2Ky`NeZ;B1WmW;QF+l`pHGA7QLN#;cv&FLj56yD{o&G?P8l-%nNfMsUY{HO
z%qT9}>H7!u$?#{f*WS?El+MCks_Y~({8>?%m;xC9&x+!F0AJ)o5p?Jr=6O?Z-*!$^
z+>;O!Mdn0{#H}ny6qysnt?Y6N73*W~s4k8wFGt<@8V<cBQks6{P5oI{6_|G0XzRE*
zDi?Z`0K(#^T<AffgBM5hUq%PhLQf37lq`w5mqo=wFL@}pG%6Q*$-+|dQj`|@)?68E
zGM7h{M6`j$7OvJ?l!Fj4Q+<W*nwLlAI}sqE)ADG(_@o9%U@wp2*nylzeL8h`Ju2c*
z5GeV2RQe8(DEWF+`VNpN`Fhm$9rbAgxjM?@&@Lb_2&)|(Xdk&cD&sah1=8xMj6*>J
zX>}An<Tf1D<FgNIqZu36?6iKXXKfVkG9__5jn}?$WyZcw>-A#mqViZBOxV`CD2~+=
zTn4ajvvzCrlGxi(d8&^0x*_v+RGx+N7r586zpc?5#MjHF0i5Fg^<?@Fz=<{RtDB-3
zJJ^Ob`u(0wQ9VKzPVNSz!4_73t=_e4i`_CX(XuUe%RoYfEm8U1b&zP;mMHE9Xk~6d
zroN3WS*u@Dw#`AHg=JebTfE=^84`*{#W@g2AZ&}`*tIK1fS%i#f1Q3~`F00^%y)ZK
zrU5nJ3(NMXR~)r~1j2UG;bye0Ax>?h8JE~|>-6s4-83I|Q^?(r8n>UFU#IUa+iwGd
z3E=&9<3K{S{ZYAMfdue=>ewM10S^zbAK%uWx#56=Kym*82Z0)QASwg)hP-hHXtIx^
zZFfT&h2v2r7X2l?YP}wJb^Co3Vke~hCdoxa93pq*zeOReH)38mRxA(V8y>ND^uqg5
ziV{s^ph6$HpwDXXw=etls~k9FaK-N<5c$S<?<b!`#tj7~&N5WzOCKhC^d0?TDViZX
z4;qCwA15oK9Xm+$+VLoET{`n7gZhe%-l%se`^xDxTIavA2ecvIFMJjCijxJ9R3?gb
zo)RG&lDj+2vNq{G%1%27bQpKqK_KsU+Cd=icbX9J&JGYDdzMYvq~F@<tb;&D*=M8K
z!cRa32xp_kjbtmx8J>+cZDxKd%m>c!LR7iPiZ<(?RN<F!J`EK*OS|BVKRLt;_VmD0
zpj;r+qzxNLIK&IldKcjk=?IA!aEOrkE-GJ<mMp0D?<ijGy#*HC$glno&G-*Oj&kcB
z`s*;AS>+b}de0A0yjK)K`x=pL|HL+L(F;p|vVAj{P~|6k)dY!Zexg+qw|FRmhrcjm
zt6p68i`^J7(U@QC#(*Rt+n7ND;TJMy_$wg5mano$w(9k6xauHKS6_7ysG6%$c?66i
zK)6c2_=1LpHTJ6$3NscLx}rPN+qddFT)9pP6@@C_ZqQTsXfKaY?AWG~CIh~HL!l6U
zrT1<_Ip2grJN2<K^~JP8apeR8>P#z?%N0ndGp$et5+I?@v_f>r3|jCSld`kZ&urIc
zx>B>9LevYh3*}ZGLMSx55Zf(UPa0D%yjUpK6A&1;7YpTj0um)(ER^dBNR)iB&|Xg(
z6S=66uP0qWz{(dDO0xn9#TOOI^#ml478T0%1SBtt^`x5mu?g-h3p2h+*X+_qXZltb
z;ty%?psES=#TwZcAON|>ZWc&DuCe<9Bp}yNU+~23CZzg$R=QuGms(#ala9e8ZlO#%
z28lB33z2lZf#ygP>Wj_n=l%M|UYqTffQf21+bsbJh|Pua-Aa&v*j$M9jeG}4EYF(@
z3q^Jgk>ccXb74_;dP9IJL4g_;{y@J_R^wE{KRH$?b4?+GN@@xd?IkL8S54t{W&H1Q
zG$DVolXd-2?_R#sL7*e4orUsH5;8#8Ss3G)8K{)}$<9J#W*noCvkA57KziqgdLO)~
z=3vl9;(*gs@+b!iWvUp;0OLR*l1bhnYimNbayb3ONBSmL`C$ix{K;VlgZ#<iLb;xx
z3@{ECVhYO6KvZ;sJ$6vPP=3OJpm^v+p-jJS!sDS6g-LNZ3=$A03R|`2_S=Ly{G_m7
zw&D|{U!Szi7mrZ)N!xruqTtC|^KC-m&^ckgT|l5y&p9ekICRcw1%*TBZ1aUMkj@pt
ze7nPXo5Cd)W~^iJ&-9xD7YdQNKZ5$WDU4VBzEJr&{rAsw#Z`r$!sX%tz`wV_K?3~y
zLYaC565!t#;vR-vE=aiC?+dM;3p33i&Wniwo1(9vT`qM0RG7sNx@x&7`$Hk(&>)V)
zYMF>cfAkenDEcj#U{f;Tp+zj`b9DRAqFS{m%o$oFgA@pHDfv}DkboXqgjMlD4uPDi
z5k>6U!}_19MmP{;S0jq#tZ&Na%7`KvYk>sBh$1W|lvD*0NmV0?>P;3O#UUDN33M1y
zRKG9cZG(&O<ppAoPI6J64|o6>U8J;(w!vTMt9Z0x5DOmBuPq15?p~Tpql;v?26?n&
zbWyaF&n1w&e2Z)Nht!(VTpC-%#vRc+cOL6N(BeGS=?a=mV~gbSjxvB4TZF}#Cm1$G
zqt!`8%5?PT7y8~R{IoTp`83Jt4w_GsisT<eK{3EgD#CU}3^aYMU{X<&=|%QH({&gh
z=*dOyX+`!xOD@VzDXJZ4$;3cU^%c=T&l4tyo|sjXe&VQZxyolbdeI!6<>*CobXJjc
z&Q19oomGVUv*&4^H>I?b1?ie&IzAw}z`>wNy1?lo+O#Yv@`^hVl!1N=if}(hpXO^y
zlXMAt@q|9Ke2IfVo0la;^1KEzKv+^#Ph6vb1j3S{)@{sfLJM@os`LY2>NT$NRSpJa
z$gXlQXr8VrlCQ-!<@0n^5nhYkDll-nwKo0GNqw8E<5~xU5@gpF$!pQ3{CaC`k^F2P
zNa(S)s3>MG#GBDs_$b0xMHy$)y-({449{0ZSq9zjW#PjG@GZ>uZ#`9YvPj{7N{g6S
zP)-(Msl{thAfeo;BJo9Qq6EqRHVcuEJynGDOUQycT_oSk#D@SN3zC0U0J5}Doi5@h
zw}cA~zpkzHE^hFkdBzMqh49x!*hmXt82p(c`Hm@G+y^j7e%S(9N?kfrgnN@8@c9gP
zGr#(CQO1<wwD+PuMDhGwgm{fM@Xe^TSJ;g2^)~IU6v^NOOkiCplEDc`sC9)JMEl=n
z)Pi5pc<g_>3>oxSw%~i@y%${8Ln&~@ZX7aPs1|`-&aZ?(-&trzjUHai9=NQRrG^*R
zmLcHb#kFOqGlmzV3{vJ$2Gpox_U>i<`qU_=47r3+P8o6uqo@pJr8gs&Fs7JY^Ml?o
zHO47JJvFA-5K|jMC^M!wH;;dnp&9wT@x|=LAM`)89PgB&2|vDAo`OIKWyTld6yy<J
z4@`G*F%oThvIRdN!T;JH^|IDr*quSMa&oZ@+nVuNIk_0NG>?w)O8x4h;*1YsuILn#
zt$N!CrZ@bkXJvU86(f**7nyVJQW~W9(;r;b-)qwP{g{mDzy<94v53h31__<sk6}@N
zmqtA0R}aTBCRwiNY9v2?s|M0vG%}hh^$*AR?kLlpLgLD?nDSN3O<&p9K#MOk6OT1-
zYMg9+Jci2`N>UMzFlZ-Y?#^{MsPIeTEXanIDbn(4x_dKYQC8|IuE4pM1{Ydhjmc33
zi9%On7$Kzjp$r}ljk9P=Bh_bUTppl<%h~c>1CS^)G>&%-C^7>HA2c-X6`$54lHbD)
zjr%(AdsxY#d)T4zcI|nJLyAmpWSqU)(rBL=8Lw52>K_@G`7{thMI+;wjh(r2psM4{
z*UGq|V|83E1t}g6SI6bb2oez0alhDdg5-s;xYEnhP!=XQA<m|@GF~d5;9yXQHz6)V
zJO}|}LOdp3YXAw1330p`JeWhkBB#XJkk-bK@+l4k?HQ*y5M-cJ;<1*pkH|o$#M`vx
zA39A@fHytP8n!XY%cnaKw0KN+T0&+zJuc&6lmW!_xcIaM8iKWBW}Gc(V{|K@=|E6!
z#Y_i+){dERd1`?&fS4J_TTwlELojZ$;;f{taZmXy2ZFw_G|PdY#bZ`n9<-<U;xQ|Z
zKLfdojxACY>Mc#LZfo3@S-#Z4pdfFlgF%bOQb!F6@|KbsV`=e7QEJ3%>FYZf<6Y&i
zIT*Bfyyjp~Zp3Sj9<+G8MtZzKxe+PKjaZY`%8a*^@-+?y{XNPx4hH2$tcm+Y{tC(f
zV@(`+vSWp9AoF1Z`>~@jzHEa7L0>J{;6PB~!-lwD#5^gU_^=_~q9uRHBSpE!o7l$d
zjSihRIS7>0uqiHIc!3NMHpRmt=mrTTHpQ`$cHr&6A@kO_(jnT6UF~Q@S<g;JaTyrG
zIi`4$!q&Kqz(4|PYdqRoS{a=eY>l_O*8CI4LXJWWd##i4P+5(GK-md3PJ1Xjp(gGZ
zXB#PnvJ-0JO-m_P8NG^pik<8aosFJlI~@cs5Oz8U^yesd#^qiHMS!p~j@MpjaY|9P
z^B#7vv(dI}kAr{@zPR@|2=rGa_rztGjv_$V6UX1hY{?Oj3ca6ozrko-w%<XZzb3ig
zLGS}%e_ZAer4&C9_Q$QH`7}pBn)Cs-_6DP}?0|z10Kx$WApnE}PAdXHI6$qa;0X9T
zR-drPyBLp^ec~VlF|MD)<>7Kl2?F7hxX9l{!-GKhB;NcQ^KOoSKYMkEWp_31DLdpK
zgrLJAM~4s)4mqs|0pSp}f=;SZ3jRvg5jLl*aclVz2O%E_M;wHFARLLyI2c8Ma3qc_
z_bI}_3vm3#>UT4yl^=H?3IK83fhYjP@wnVsq?7_c9FHgK*>g3FkSBeq8_m_P9gHwA
zzK+X4FQtTm@parMUg!h~jIZNJTj%GkDFxqAIM3Gq!PwjRyaR#jV)yyDOk;u!AkN3-
zTTLJVaXyZ>n$}~dhR(pdkRvQ*l$G9flhGloH-6hQBnnkVShdSR6gVR+8G)l5a7I|z
zU((J1Bz6WPta_s?aq314u~Qmp;cvIlF-}S;L^xvcV;na0c0+A7#*!;O9szueB~Nic
z0(^{xQ=G%1yNi&LVc}0!?q!`rdVBWW?Z(26VAz@#LDPwjrbPgo=xAC5u!*E8B5cLo
z966j;#=P|VJ&Y|b-%Jas2K<kaHm6m7mc<s|X^bkLWn+Vj-kfDg+XM;hSysL{O92V&
zSr$&OFOj0nY1PFSMeZ^#cbw}$(23t%TRq5-kR@Nw1PO?_7S86sB=uVO)t9Y|Rq5Gx
z8z)?zmo3CJ`23x_1!=dOO}NK+q;$C@FPFds)N-pxoaurD)N%`(J__DikTNS-;k`!R
zjw@|tz=Sd@ZDl}`kR=y+kU&^zVUZtCpNhB!hh7$LQ8wIbj0>)|aBT1ZfUhB4(v}j8
z-pZanrAFD1`;77w7$PvjV_>E&8GC>PX4*pR@e%dWHKf*hcJw~uU~0WnhV)o($?rKp
z24&V;IQ8lUHCp=BO&0zj*;juw9?IWDYLGW-2{qKMma^S)M|+bZ5w?AZ;bV(G(-Um*
z{YIh+4~0q)1^iZ9C6IvMN-B}@f`svIwSwDWymW^~3>dFpeb;i=SmF*%@=$J@CGXHA
z3me+^EZWbKlWj?@+hyU?zV$5D^#LPQ3c^-`+PKS-7kQ8b*e(kfd2}h$lH$0%Y~BOL
zjeYi_JYR>vM3KFg{ObWAQDm<rb5lVg?$~QJx|>I?MDloXuhsZ29xqA`#fy8b9(V9r
z*peVV5VNoi2w3+A_A~^E>OQciAxJK3AEvgXkna;qr0PxilcC=CiEUPR1he|YHY<<-
z`ox}sAOZ9VO+lpbWZ}zQhpdcamiX8pEm?=GtO(zu;>%q4bRqlZPev;Cxuu8~yTC->
zd``{20ee(@ii`aBwSP9c#*SF>EgLW)bHqv{>0J`YfI7-v__J}db<~otqk&0Wnridt
zbsl_>=PN7YTbA{ZF*o>?mBqi&pXDbNP69VMkbPRMm9i%uGQ#Z2Lq^*exI7pp86cgc
zd4kWwf`mq=*&V%%KgLd5a%T-DWKLVy4PiDy2Gkk$UN56>?2PPiViMQFm0>q7gKj#<
zZhF}GL+qR-uO9t;b9|0`3_h!mA{d18?6rrD8?5sV4sD9h6HYa4ky`oHpR9}pX-{uM
zReV2@6XA!|t*C8REPim`1_Z|Jifx`C(TXdU+|Pi7GFL3@XKE<6Y(;GxnMhymV{CVI
z9GQ^57i?J2$b|HdAh}q+2n<02WMl$=Yi=WbEV>mnmnG6yDvVC<a^`?g7|#-N*8nMi
zutZFJeiS4?SONh6EhDXnnw=200U%Ivc0#TrAW?F5LarkqxvXu#t*GzjC%6H32f?Y@
zhL8o%PsrsCPk}T)A(uOlK$@R`1&^Q(ZtYiJNo4FyxT2Rb*~4)?ny&XG{I&0ugq{#x
z-I}`kwS>4M0RiyW64DcZ1o&$S+0`Hc{#pWE&0mvfP0fEReX76F%T@N4-AUl0sc$9Z
z`8!CGO2}_LfCR={34AH;S#(ls>gY9W_(0<y<!c-S>gF{Gnad3sAgoCgifuMXAgoE)
zXXmYn+?4L{w1KnpO%4Wi_@;zBfrSt-HYL2mUxB1T32d!ss9IBhZ<Rv@0wuTFLj@8g
zx7tGm5+%1L?4fE+rxiQIP_e4PhT3t5qXHdS?yyG+k^tIaj}%A%?VyoD?4Y>Y_|<)h
zj1z3@VB_<GeF^&V2(3bGFg)r93FTnI9sM8n^9xwT_75@oSAiwGH3R_rK|*?KkbwOl
zA=55EV#)X*k$*5DmJDL>CF8?{`{RUIG9(Y>4kYA~Az4^5K1$G%K@n{m8ivmj${o>e
z7TfSwqem|gBC^3FH1#vPsUW$ijPF4L`?G|69RehlgU=FH4}R}Sq`27mERnd~JRn*P
zv-pDj<r(AS(l4Brk^)~O<abBfa69-SfeS?1xwIiOIL`Y2&FI<jxT6<Y!ExIbAp?Zt
z3HiYfkW?noww?JBoddP?t5*{l>t{Y|+^oEBuwhH|+tah3HD)U<t`i?T?rnc*m*1w>
ze(%_<&HUqkD*|8BO}G9h1#MRocx8|~w6-+Mh9>zeD+7Vv8k&?N2ohQiP0CpY5?T#S
zVwN3J(6F{>wOXB2#wOj-oyv1}>esOrD|K(Wag|}Zs_;PA0mOh(os{`aAc0byl=)2{
zVF%U8;;~7Q-$V?u1NWGu%x{t$bo`j4%x{t`0F6l^zX@*zLK_H7NFu+fnCCaWG1REn
z611%Z4bg<8%x{7)%1%h)it0&T7Sxoa5{^E^Ru<@m?D{u!la&rLx~9Oj5om~}B;`3@
zTRucnk~rt1KRMQxChGJgn>Wm8)Mt89ei{~Bl$oBClN%)JnVyvQh#+BZ)02fa^5}y|
z9(_zt7Iov%hvZQ7F+F)h7rw7=OVfI0k~JA_T-$MGQkprqoGpDXNYpzsDL0`YQSZzo
z4(hAPh})7Eo1J6}h8ttbW;+;k<}*84i$P~Tvy*;t@`N(Ln4QGQ6P?brr8A#7tYU=G
zynK#>Ku11v90WS@nUnO3y%&lAVNMbbb|I~YZ7KFzoPK|VvDnpivD3|T$g?;pPedVv
zLW`4#0eHGsTO9JJ%ah6~*qliBdWqdN+W55!JbRqzglBnDx*Ze%!181;pGT@7VQ$Nl
z1*>3g6sZz}yPemP?v+X5b|eqwRwSj{ku12K*OTOS$T_#A!=ks6`~?oCKB0!%fP<a|
zOT4%N5~{qFl#3}yK)#i<J#<?-C|Z}~i|L<1z=GB}T}j79>zuBn<Dzv*xtKy2Nb8a^
z9K>e_-$`cdOp0)jP7mHm%FoyaXnJpC1IHp9+=$6RL2(wCm@6BTa8S1(APUgb*v!_C
zHExS-PRdvK!Gz4_B(_3GZ-ES`t*qfVqepCOQig+I5;uu(@O~}>rM9sd<BSJm+wdB^
ztcz|Ywj~i(3LLbuhUJb2PEAt20w3Tv5;aL&lHpq;s0&Ts!TvtpXlLz6$`BSz;Os~u
zgk6bL=`4I;@K7@2+w}Y6jpmu2L)2b+lRQZ6{hWCw8~4RNx7!OQ%6?AmrC02O)ZQa(
z<Yc2$>_}4Puz?AgBQ!U0APE^zN7?bo#=Wtlc3Z$CF16)OE`#<SXZKDq?v5R|`y|MN
z&EwQ3UAPR|`z5QHVswjrnUpV&2YGwHr1?kzX^`4`k~NuX+z>mNltC+)sOw}BK`WLx
z$iT2pvvE_6dt#@PGKdBfGN+RWqH!z(8O+Hu?CMnG*4P<GhTa@MLo%4Rkin!o#~zzz
zG>@H=c1ldhoFkWviyx3UNIlQqnr5^~oOk+%KC*D0`sZI1`r{jj-zPJMmN0X=@s{WN
zB=Q5P|3lROm)V}_=>N-hd%;B6%hX=_!g+}L|3`Mi4C9vAkG2kALgq)(;eWUcs9)Ht
zGmNU(FZMX%i-W|aaqP@x(EnH2P0tx!O0L@d7UKPXmHG`S;HV4z|7#KlADvnAsYVgo
z`JB<h0)uDe(PJR~noO3M-%za6&aaLr$#{uHXBy|cBT5kK@I|s6wQ3w2w$zx@8ox1I
z<4UBv0g2X(E0Jp?NGLU~1ZyOnp|+!@PAp+3nQ>kD#1iSP!3D&`66t9{aw(aA1QHMv
zOVCR4wC$+PQ%cxF&l{<ZQyd5~h$$uVUKK)sm{L+t<dT2{#FP@`lJKtvwIlNR5`4+s
znBYo1Um}+$uu<yy61hBq<YE}&ZM00ZqrQ8Qjht=Nl)vayOhM?2CGyx8GJtroBq~B+
zkbrox1R*ea$aZAe^Gn1|0|ZLWFOkj>BudUNk<Jk$O3p8_ont#{-_jE99NGRkhT3JR
zqXI2dOP%hcg=%Su^o=M8prs}7jl*>eX?r-wl8nzwT+v%B_K$C}BI%Yd8YeQn@08dZ
zjrKIUoB8Or!f#-2wnrBvus7SI3li9yX>{==1b2Jt^mo~%1xEMMcby_Mn(vm#!yCw;
z$h##tDY>2(!D!a7Cl(r=JJ;9^YR|KeYU~Dq1VT-T3{pV?p{4{u>c1%LY7bJ~Q=)uO
zlJ2z1NV%%OfX?8E1rQ{P?<tWBAV?J7QzGMTkXQisl;nR<A{Ibm@C9&hiTnK$u>eXQ
z%IzzW3!r3S0o-3=FM#dIKt6KG@dbq;`^X+&kWk|zdwf9x?xWiAZBM3gNR01IApTEP
z*B)I}aqdqxCr9@5UV#(KBj7oKv(MgpHYPme(S*FiBj^>eUD#H|yRfUPOI-_W>+S08
z?P?ZL8$f|zG~-<$V1$bh0$70)h~SkA7qIdS6d@Ef5JGquVhB-6%l&;bv)SJN&hI<l
zd^7ud&Fq=kGmz90=z~TxErCABQ(AljgBg-q5->3KDTi~Tk<SyMo3L+DmUw4-dWI<Y
zFLPY~&l7zUDtL3rysc#3y6je8NgzUIt8Z99$ZRFU{st<}B?DX(GuN5F&Au2EA;Vrw
znCjad@Sw=W1isy&6|7te(+<(I&U`$(BcZ1kK}3;`gg%TM5Jfr?7y%*gqX^Jd@!R*z
z(wwV7Eo8l`34O>ac!(*1^i2VkOB(Og3I~9~JAH)%qGYG9a6pvoysPkBQh1LJsL>nD
zNNJC+Z~P_y)A<Mxf_i*?142*_>3cTxorjr`L};UxmiegEcTCi7FmwBVo9JsRedm$B
zZ>w;^Z%DrFKO7(=-}bc*2+6le>mD91kCb&sY^paO$hi{~A+6u>!wEbna)-ichAaZD
zS6ZU)M)T28m6ncxJgN3dOIr#MWhyOL>If~+<q@p5Qh(fN9yJQ9EuED?Mq8^btpz|-
zTy5zwG@vYnKI}3@VIEmRSgAKQo6n~ei$DlXf`~u}*+f`+)f0svL|EvYWGLssCXu%-
zqb^nSzBxXv0zXv@;}4X3+tM)%h;naRI)(ue!*5#y>ns(+M36DO(h9$0sTkHYlv`!#
z7}g}j@M_DC;XKN-Ypw4LVnI<PHHZa7Q`TBKPXj{aTFcMVc{J##w`8843;?av2g;!L
zf%-rh^gd8;=|l}?NUFEsS8deyPKri0TcLg8cU#R112$WIvy?kcB6r$m$rscI0U&Xk
zuO>i9+-B*{7Z4J+S@0)vj!EQCjiO+?IWxb}Zxe`+(CD`bkeDoe!vG*8G+G#i(6Z$u
z3hE|taJ%_*K~o@sRMuqaFXh1l2~Ac~EusQKLX)L;E>0q}+fqw5e@K~;QM)bO0pc$d
z-0dqCP_p`pokR|{S1EQ1fJE9=0r3!fgNGn5+v_V9|3cDUQf%Y*q1gOr<c1YmVyC(q
z&FyT!4a*<a<dbT9m1@TUKxVJ6T0qF`^;HW9nZ2aiKhw9T`Sj4oQdN7+L-$QMmeh{~
zDv^^zJURIeh(gDb_#97e@5+ZdBd3$bxnwwVtNd1HU24o3b8uP(h|2N70tu&++VKG)
z;dD|vJ|G<bbaLRiq;h;BNXI{u4F5H$9ADE=t|h4*Uz6bYXOrakt1{#xpdYQYjhF3k
z>OhOR!kh!3W{vV?DyXz|DgZ>IDsAn!fDm43<28U5KLF9FN;~ngtyb=cfJVVdUb6Md
zT|ODJ%2sahc^llI%D$^JGG3Lf;|rV+US<1kkWXoQv900@0CE-w&7{1&IA|s%jm1GT
zDQPUW;RaVIz6zp|Wp-$Tc&y#LJYbpaZ@(@eClI!pW(9ymVQXsuLZYyBd;vnDu;B!!
z(xAZtvegPPw8K1|vmz)%KCr?z)pa=FL75dc?i+Ybl|e|Y79%d3OLA7*dRI?@wEAlM
z9=V$ha>?qeZR}>FPOpH_yGnWE0if7-eeD6Fws(E)0ZLw9dj+KT^;&xX5@{m?;#t@G
z+5?27^}hB1A!$8nuMQ_zg$r?<u^l>?dhV(@JZ(UO?SH;qNb1|F)He|TBDeag0EEb`
zzWM+max1BCGj$<_P+w%HZG4oP`xTAj@KXf={y@2%whjV7l-p_RAOM8F?X(Ae1b?F`
z3?j%NXtKk*Z50HXhH@X;ItVlgL9omAvwtBaxIK1|{l)0(a86KE^2h&Z$sS+5fRMQ7
zu5%U=JfPGop6)Uu1qXcJ#9vUw0bjd-5Ol!TE}$$4?b4TCMbXHoc4(7$r_20l@>3hB
zpN>x|!Y;I<wsFD^(^Vw*0IOYSL=*9^&BpR$c6gecJ5zt*S&rM`vhPq(Ni$J=ai?sf
z1>*k0mj(k6NyNL&-%bDQ|COcJ(bIOgD3C^0IAe#W+?DpZZJdWRObqMBA-xezw04`#
z6<^qTi=1p6Df&x0{Cpsebk}N!pSUaTf^A%aIJ!$#7D0N_B-&`FNKj&%t#6K16v(}3
z>pN-{1#;W%@bKKbg0I*{Cj>v|3&!DHL=v-l%xA}6wZnx$qv&<`nyn9@lHw=~zM?AS
zn{W}id$)3TvE-&1nb_@nE&f95x_xg4M9FUQcDduDh&-v+Hil%*r_)JANe31M&)+nE
znGK@yd$33zojL#^p_ftz9a~#OD!e7;_nLWQZ~2)6L=?H@XAVFVxkZ`d4sARv0*ur+
z#+y#+TCe%{^f~ygQat{Ff7UoU#REc4jiXaMAmr3II>iGb<Z7J6n~qBHL{KUI4F@Uy
z721DRM7d^7>fwKw_w*@P6VyY4^fiuN?g10(S>yCq@db!_);Jh%P^K%QWWUZ)@5=xv
zxz5p{2#AvF9NkX<qU1Wq&vZpJC~0t1KLLQYGz4v+7v_fGS!qPq5Iif5=o%cv;@W>k
zFcwE6ha6lBg-;RIMEW0c@bU9YG+$dxrf*IiG1)6=In9o?8K@A}?3i+MF)=|{vqOin
zP`WQB^PCcu-(zcYP6cJi&ZivxiVPl<IpttXzerUCL!V2{`X}@lW6n8h7c(T0sB_Lh
zIj=|%h0Zy!&;eOdUo1zRcZ?e%dN14G@4VCZUN%!U0BmjI(!K15*=<f(T|`hUt=;Af
zbP*%zkVV#Rb4F&%J;=pm$ae7yoL`;Y?u1o81|q6&cfPMCvjI`0-N8npsj?O*xI-N4
z$I7!ioUl4ix>#DQ!x^krVF6L3!@(*nZC5BJgIy6*`?IOpSDdiiOio19a>dC|tG|FK
za>c>6K-#oiOk?e9Vn=^glzq*?1*59*G^)Pl#3<hBS!h&!&B-s+kB|AjPLUjd$M1B)
z%Ik^^nq%*DhK$lhXpX(p89PpHr!J=Hzb>(604vV!3X0IIdRI_{X4Si>2pzOgOf%u#
z0xwvPjp}y7YAF*$6zO&bsrvx{QKZ|+8O@f_=U^q#$SW?k=`4$~>OL8-xL9G&ho};G
zS)|G}7P?~GK$cg5pXz-Ze?VN7+fSJg5aOy_Y;d7L7$73F%FSHps%0c1$kmhuE_NZ)
zXN;Nx-&){eosEuV(j;17S>P5Hu@rU7CFEz-uJKUjdq$S19Lz?gh7DqU(q@CEatAnI
zyJ}Z20|Uwu`p|Dcw5;02M-5~UK$xJ~oiLqFj+IdUJ+Yiss_M|9S~vCk!KmY3YlAu{
z7u32sKb1)DuXXi{Bp`&;x_FUPb<nhKts5V!>yWD^wQklJc8B(;l~5Y2ca1Hnb3@o4
z(kt-Oe-g@q^+7F^1?z)aC@$)$7Nuj#g7t2E3v^5a4~SI*kBx44v#SOknuc->t{!-3
z5(XZdTpD<MF@PqJap%i+H*~~J%RH8rC6;`VK2Ts;;eVpr-SnYyC(A&}H!0T`DXu?d
zCM`g;4Oj+XIw16xaxs^J00hLJjRJ4y<*`QBkXxOJ2%bh4Tb)ZJ56}+r$Kk9jw!<|%
zQXP1xTiM~_9fjt;<+Uz5Mf-3zKDN^}ax@REVeE9rjHQjF;6Z+95_u!ogjkbn$mk{_
zc$(Z%qgk%xfnGlpOGdCsu@8f~Xion_s!O#8UbIWJk3f5N1$EJ!{w}Hu;Q+A+`Q4&C
z!3yKMU3~;Ih~U}n;zK{2Kut`r{=U@O1Ur@%-{%@KtceP)eJ+lUZw^Z?#P#9Sn@Kjy
zh#wBxMDzNGsZBExm8DpdcSC1|>9R+o$6dT6(5z)C1?36X_=|WBCmC1Zmr5j{L+vNr
zA?h1<K-m3+i`jJY7eM&S3D^1y{Dp=vM36Cg(vL|^K?_d$F{w!ulP4)Adnmh?l6hNP
zBbj*-&VsG5*UNyE592@Ry2bZlK*_6j2Lhr^EiTq$a7en5PIvIQp>N=JHECl0oxb;p
zxgJ{({lZO;Nv|73UiT%ep}Y<d(ty?B*MMm2m!x@GO&LVZY88)-WTRrOt|32aA|iNN
zDgMb@29bZA7b{1?Th0e^B$edgZ5lji;|1~cNH#Kl!M7iXD0zYGSB0%VV1nD-Naa6(
zTvl+yHROB)QNeY?#e4&~Gay9WaL1R+bE*lVi8tH{(`b<#e?wJ0qH;9Lj`jGi3nE1H
zkn7HsJa9`a;f!W4#BaLBL@k%x@}`?NiM;`XKoI=0S3EU_)h2p_wvb=;Qd=H}FO@|j
ze{(~x^R&!zrD;Bv71)1s@$CwY$ICFhpU;g~c$oczPDd@%!+S|fy*8HpK5arJ50^^U
zQGY`EOFaC-cPMz+mpKOb)IFAwmoDJOBGFaMCR708L4eiKmw?d30zOQ2t$--IfMa77
z`6?iMbpdx4apkK-kiNQ*>;6Mi(1wLv_aB->zPgaZSLIuA8Jr@rl=m@~aU4|6PCm1g
zYfr^LXwg!xzj*~ji<a^cGRvR|<f%(JB44$LUh|gn2bZBm)PLcBv?z-Dt9f`d-9lxA
zCu1uv54|h0Cos{!mgAhbWz?rkCMRB=Ix&G|q|IE;^-v8|)VG}L!&w1Q-*S$zGW8*V
z$Rf*mR9*Z{5F=d4k&(|%DX}PDm%?{5KTWHs3&hf6)NwuAI$1tO9milmiKXtZj%Pd~
zt%iR|EK%-L=V)pQ9;=Q&=+`ZoP<I_KdYJXnDf_tpsDX#}z?m-Ll>KLao$8l|CA(+?
z*ZUp^(<5)<23K(lh(-a+b*XefRIrI-T?+ee0rBS+@#B2<RD289Ssq02Y$5$G#M6Qa
za9iqlKKou;d>bUoKme7<9Fe=30%0(P?hbLgfW05z!Sz|}AcAQJ$7Tt-^9M`_-Cg3-
zLUuI1iyP7di3p}$<bit?6JqmY(Nx6#H~uj<)XvSpGB!WvSoSW4y{F)=0Ur89tS)9n
z(S017c*yamkmK*?#zAuY{0jV1BQVhMocp=H;sFqC-OtfUl7j)l!S?eJ2er!+LAv|_
z-{mz0%{<_{ye5&$A0U^13bw&jPltHuBy2MyYw|oX=9Bb6VqRN%L>w$(6Z;+F>6T2b
zL&!vjMZZ#(6Fbax{sIx=4|C)UoHv^;FLpX2o-Ad#u_N60fz&yO;5ovvoJoD+5VF8g
z@uyN&7(2>!f&!7K90`in)N$()W*)`8Wvn!Ij2jcQ95Tx>o|{K%0}rfnT+A(FMX}>t
zXKxU}bDSf4(_VxjlrWod_&b{zYvxA2mO}}%nHLo^TI0uoX6W@q)?_xtIuY<t!aPAd
z&%<z2qmj>e=&w-G>?|?rlk_2?ZZi9q=w}>@kYvKCWWqDtI4g74lYo#3toEe?!jNb9
z2=%@Kh^ITlM?N482?#@;;n`=kA&DRj+2R{gQ_!Lov1|&<7|=qtyG|V<zFuhMp|8cZ
zDXcTv%G2Z0R+(h0^DvSMCqOg+SdQh>0U_!<$6a6eXcG{Bwuw7aSwXBV;31>65zqaS
z2k4@BVj7FbE^<STjZu({c9H)eSM%Vp+JzvVcCH6;nKG8zIR<f-lmnw(5+|lHJ9f!8
zEUp}aoJ(X_+R&0oM!PHqm$OHPU-k_PB6u#7VO4ve;483}m_3aR9wA@5d|%3x`zo%G
zFJ(z_=<BYE|1M`EVpsiafpcXb?kZ)Aq~t-CyH-1$Ik9WpkoVu988iU9#<7b}vB+%|
zQ;6rQKm&4H1!-Wo6oVJ3PO)e@OT;?4q55<jTLL+q9N$u@mSfw{b@Auv(9(5o$gjUp
z7hP9zosS-?<>33VF46ZPmWX!+k43jpbn(1=_A|KTv}mM<hi-|79%9c#dpJ(RCr6w{
zj@ZkMZ&fD>2t5I-^Jf5I>Rx`oI(iro7VD+#L>UDTj@ZlHZ?z*5K|10$z9VW1+VPE_
zQ8bA%$~WYdAJO(6-1D>03;k!rOUv96$r9H)(lb*v53?r?N8MP3V}yP&=h?Zxev!_Q
zQwP_5ckAQad1Ce>ENdvvl*92tKmX0of2FR|`sKgPnfv0iFaCQ@R*9IKmp)cx&0rDS
z!)4E4ZvTazcK)H{{EIyC^bD3AU*u`02Nlg;<iVk7%r=yq{#8$Gn8CdGtDg2~P{H)7
z2YX`R3?`u0JkdRa6=%KX={^KhNv82T^)y2%S-tM1e)K4tnHGQD(;X7XV0+zzi<L+&
zcz%s1_RM6ZSv8){dqbt`*Ld*N`AQai|1B?NJ%$U&t+#?I$@|~(P~{BRzC0RP;f3CT
zc8jHQ?-Nh|kd4b&;lT@Nz+X;Yu+lSDd*XSQO{@Th8-SqP01ywq($j7LhzD5dX*U3b
z8?5x))t(wl5kb1aDo>B4GzCps<>|4MCXpMg^56z%sn^FfMC-lKrqq)^!u80}^<Mh@
zGCK_;18snwRCWSHbAVMB4G6&-=vgTn;G!VB#ENCJ*dy_JPrn?22%dV6?$x5scNke@
zqxkzQwm7yiV3Jf~nj?Aelnvs&$Jx)~4W16XVbVwq9*&xzd-0}6Bky~m?ZW#pdm`g~
z4<Fi4P)#Rwe&89~JdrkqjjsTPIzdn$K>?zPA9(sqa6nY_frqVk6jgvw=Lep>O{<d#
rQk`3Ub!rM8VXLoBO(Jz}g*u;!yzr}eFV1`L_{}~K^c4^PgpK?^{Zd;H

delta 44654
zcmZ_1cYsty5<kB4cJ`$WlXoX9GjC>>41?sfiy)$+o_MCy^G-!rPdo(=@J_!M7RgDn
zGy;N>1d$}d5R{C9t01x_5Je;_K?#C_`~6gRzkTTU_u~(ps#pE#>gww1>hRtk*x2ym
z@`i(kx`rx4vxmCh${BOFa(q<gg}ZZh=&t>l`~H&iq&tUYue)V3d+(8)@pXqNW}@F?
zk5%+fKUFcXqJKs2bpMKfJkzIt#ejz^1`O=;RL_AG{@d6er>W7f_0%&123oy(_V53k
z)zf;q-+(>?`~0)QdYavKlNM2;li1##IXAf)u;`;Xb(MPcSeHk0N?i>z6_4iJJI)-l
z+h=P2oJiJ7nQdotI?iyNUp-cxoZbG%9OYt;+nk`9np@RI7}+krDtOT=IaU`-YGrX9
zdF6d723UOt4qzXSS8uF4@bQYi)+0~%@6)SK-@iR#{o&rb@A-c;G}*+L)PSo4dvk(X
z&ucyXO#fbw_Z(1R_3Yc*>S?lm6V)PCGeJ$VC+;=P$_4`}DopE6f!MH#HJ~3F`&%vk
z)o0-2{hk?U_3K+<0m<rH0R}7xb^G?~+w?cWCZ1OGhD<-pwrAS9=kW@w|1(eGKNUUk
z%+bGJUv~W@HP?R)tIq%n;3oUaB(;NTqG+E1?4?O+{cipGQd7_k6&<KMo_X}iJ_Dcy
ze&K%u(1dPxJ$&yS-S4r`txpZGY^8hltyRQoFp!=9pH`9wOPJPEJ)g7s_vy`Ueo3uc
zDH@K7p(1yOrz-jmv>xr#w>Oagg=#8DE34bHFlFDr!3p~Jd!nM(zyZ*Ns)K0;!ft&<
zx1~+fYwEIlU4Hku9CyQOIEvqWKF9rM(^o5#9q{K|$Z^kenUfUL?N*g6zxzt2^<*{Z
zN?*xQbTi+~Auh14<QP7i%qB7zGQ06IcvzFe{xwCtscTJ+VoD)b4zY9XGA=IVFS4Hk
zq9!LAGe0*t22^`dRSKg!jnyxz+Z9(6c2-e?_tsj_w0idLUC|rO{k@Z<t!_PgJucn0
zcSV1UlmXUb{riz=U_02T33ouUBKK{R{lwJPA^xcT02s7SuL`(w-@g3@nykw-wNV6K
z|Nrga+`kJun7m7DFKfc7{%p`RxcBI(YH^O$vp@W3%`~;R{co%O{~!9?OVP+j`~9<`
zA^f{9>oQ$UE2hO<19J+yTig+z=_{O|H~Lw0jG}V888!(czo?>r<x?2>MHT(jjN2I0
zH1^SSwRzKNs^XP02m|hEs?V}X5>iV_%`Uu%+wY#i(lgYqWi!;;o^_+r8ES4^7I6b%
zhMH(#lR%iEHg00J<OuMBS!~G+wRQO{2O$Rtv((&DStJJtv(&oHY!V2w)D|txMJ^5j
z;khg^Q(fG7t^=VGSIv#dGAbbEs>L><3W&LC{RZX|;a-|wU8O4PGUm(b8}3T{v^`rx
zxm9YdXKN_8iY(^gey{0Nu5g{2ZTe}<D4IUPDDbPRRrgvo2X;1W9?E5)62xj*sy}Cq
zs%~_dU&eVebieyoRVj*om}xyneZZ3jVQZm7i(gg4FB_u+?N>EaXnrgVVEElb*xM`A
z>hut;wv2%?Lo}mUmN8Ifh?Yp2GsHkP{q9kj4R5M-T;-#*+O9Lv9iz0`L1_YGl;%%L
z3=<fmw9<O!Yogv<zk3`DzojlJALl^i0%Dv4kqd}%n&0-HTtJM|O6r>Hb>8Sazk5#R
z*SFMicljI#BM+T7N2~RqJYdYx5{;!AdBB*XrLQwLx;aL^-@PpJ>{_*pQohW=$OpzU
zt=5O~fw4@h^`U%VEYn)FGJh0JDL}uni|f_%<*OWs0zj<Na&6rU0I^C-wv=iV0AiKa
zrk(k#%GL1r-8(Y%-%$r;ci!P(c!04(%eA}C1B@M7z;;UyFm`Bh%N&)@F}!~Dn5LY}
z9NVOhR4eh*9>`w69Mf_OW!+xD9Mg*I&h-N37<I02OE28=n3g)JWlI<I!Y%zMa$Iva
zyOxEhdV*L9Ub)ZjKBXzCs1LKrz>2;D*uPh6o>r>jL)~}~mUa68bV`fZb^B2FDXRNd
zVM#xxmDif@P+gtQIqLi26z3eLAYIOBemg?=0dY=CmY7owQ*mP~j?=R)X8P?^UvzuN
z>3Z0lLeLsbK9gB+mpZj<vMwzHCZH$l(q%ycda~|MaAiRPda|A>F>m1rcsP|E-KE}I
zKGi{>nP{qmKr_))-5-(&E+9<R!x3|+Py#la&Ys$>4lkSTKq!Ei?m#Gjn6CRpFKdbd
zi0OJfVcyJ@0QE9!_L17X{AC9r8wf8u2o!c-*8QTtH6@$M=#i*7H-|$Y?k>r!`beFx
zlr3>E+`w4kU{K&)qDw1liW?Y9^km9>nnOT#1)I88?O(paLC7JlgFu0Ih3>B-O_2kH
z6}pu)M`|1bez7&vty&$O-Dj(=1f>*(+O2v>#CuJlP`gz}yr($_B*NTQz3Kft?I3c5
z;U!M`Pl$~s7XZhNuHLHObFVo@v{&=H_v%V%w93ui-le57fBsypP|Cp)<3m$4D8AQG
zoWk~A#|tQI?<Fr-pUoAA4hJ$<_Nni<$`3dgI@)tU&$T<Ag6;vmPy|23RbU*@OY53d
z0s}$!SmxrF>W8lKV-AJ^J&rkgP!K-mbO8n7V>%ptvG64X;qRw@tu875-a()c{Jn!f
zA^3aUUssxsLh$!`gGPMFY6>Fo8J#`7T8p*@0sYVDa-4!h$uqhfryx=CjBbxpO+n<n
zptCOPjLSEIfJ0qybjX7a7aScZ{$6leLGkwjwPIKShAU#tR3mF!=AYlFZp}N@&|~I0
znqqVst}`>EkE>;_Rx=GbFM$iNnTDKEK>}>1ff@BxGOJD_XP%)1qLZ>&O|}|kMZe?(
zGWAcYPrK6KiwO}@T+AroRsji+d4|t#zD#!26^zk^Z2NcW?DRrI5u*@Hlv!vL*Oz5z
zP%bnYH8#hJG9cezlfGBSrQdMsp<(!jVdTj&Gz{M`JYMrf8UVTitF6!6aY|*`>Gg&*
zJh&*d-iU}01QLbT8*siIqJ^;S)=c0B^?g^ftxioe)V3OOiq{nyYFiCV@n000N{-@J
zuNYZ_GI{6J`*ZzQ;ACbK)19M`iLV+;DO>gzvu-_*00GTIGd+bJu2Rjz&>^7l^j9OZ
z`BznSS-(od5F28@lGr9F2pVLKkvUeQZgyEUhQixHY|e++8aGtR_N!yetPe6fTv}Vj
zJI2fjnj2uqoNUr*Ec3XvO{uY_!b3bUQFyG0;4@hWVR1RZR93Jb+}fl{{NkMiInrf<
ziBO4|j7U^7!L(MG*%U80qk1?@GtqRnq=}4kJ|3QpIwzTK>sl5XJK1!XT+0IX6w_Vz
zS{ATgto$7hy*l-GEc6-s9T*1NG}E2B77S79CDYyfS{5SB^xr9lz%j#g*LS2Uha-J-
z&otc)9NzG34DFXqcfD&_7_zf|rx<dd*}s!QD)Y*3@P}t3HF@=S>LcjRG2NvEUujzr
z3BX*_oxHY6%;xichad2}=l>2Y=yxypoh?Fs_iMjvQ6UE0weX+tetX@lbhoOl5<GO=
zV$<FJS{6F)4O65pTvte;<Cd82j@L?|-<Do$en_F;mi?|E`fa(18s`f~#L#lDGL>~q
z(Y1M%_$3BUHh1?`X2O!5h;X5<GL!3SJyFT#p17K@geNN5!V@#5JAN$-4O(Nm6W6lP
zpta-{t@(%n^gE`q({!`ChSs7IzilP5A^47?1X>Nr<jz_pvV{^GOm|wsXG<kEIxfIj
zP-2tgJDdgV&A*d^RkvU`G`<!LX5H%aBrgfGZo9Th(Ub3*?l!drMMu78y34O+p~@Ym
z`+Bo0Z#R&uOr=h$wbd0HT3C_ye74Vkj_h7jYni|Uo^YbS-6&OM#){29BJQ~T>TWaZ
z6ZV>^-Ra+L=6HD|bW_y%$W#(M60&rzrp7@=DQ@TBArL+?>%>h9^|~nz?qPT3YN@~O
zF%>@D6B9CfNG8E$Kz$6nl+U`WVn7A<Qz~c|p?A;cc*X&FLV*O&dWhr&P&~<t!;pK~
zo?NXYzSmTE76%#X&An7bQ!az%S2KT})+|x&;80_$N#;g0Hpj1iZe|^1kK}1x{hymT
z0p8dgYU~%LQlB@r6eLsu&C|3Tkbw9C^MQFgs>vZe_px8|v^(Pa92siuK9aeU%YfR?
zp2*kkito2$wwMU^lMFlpIB3$BY+t_ieEdrXhnn;y$#mi}Xwm`pT!Gd(e!x^x-1<4Z
z{|=B$8!iLq`HFp3ptXyCW%qFoO>yq8NahAEgF*T=YwFQ%OnhxBd`}1psF3-ZWXLqC
zU;Wn1I>9D*V482uoI-9IzCm@^RGJ9Wh@C0Wd<mBW5)g+?O!}p$MkUi6VQH^cFMh<H
zg205#5t5<7sZzflW&OQc+xSsa;rj=~BreHx<T5bLG4`HUD~}&TxA11Gytj{$Oc|Gf
zX^yj$PwSL8ZktBsra4YB_al=s{Ob2+)*M#p)BaTVdsFuSDBEpdJ#^Mo&YN!Yqzikq
z2JOve2_E~!r=4i^gXwO>(`oSts{KgulXm(92kM<8&Lv8w4f38LnQ%b+St%cqD>G<t
z(Jw=C<vI!^Y%?TRu7W@UV@NJmLB|j_fq|zZS&u^PM3<2c1TCaSIuMkkjm-6nbpeV1
zVq|Vnm@mZ)vf!9pB^K?#u6tc8WaEppW@TWAgdUH9HO9fB3diKi^$?x{YfLWIL-%oQ
zK#gNR7isr*9_Jur17TclE?F@L8q>ToF4r5eNh*_DT*ur<shojSPMw{ryqcL5);45U
z;-{?$EvjZaicoSlJJ&B(zbFQn*|}ntAQWW7vvZTL=8Ba!F|Z*7Z+<1${gk=cgI+fM
z>h|2M;d!p;n;wcS1F^q2un+bv4-J}ved__(K7TT^yI7m6)!m+}2e=Pl!(RO&S2>XD
zHs>4g0aN+_@iMGbo9Aw|FBcgRb-8#3>+a8Wce{oIMZe5-cQzN%ZiPusa5B@cq1HIN
z@?@?eb_Bsi>rUEc28lu^$;@OzkjQ3E=EnXkP(kvw+sWMG2PnpK0dP?D$=vq0@#P$q
zk;}Q0x%d6a978Ju6P>A^%~dYsx}!h4tW2b-=5|$rAxw_PF!@>A<RGEc*<87r1_`Ck
z=86=Nuwe4Dxz+_~a$;b!14{gm>%Ptmn6Q~(xeLJjG1uMUw@jd&%XN1w{Vf+=c0SjA
z2c{g-7fHgUT;*ym+mzON+=ZXErsSoU98JkfFWJt4V!*y+I|oQ;dMP(~wN_I_YI>RV
zY^DV}{Ost)pSWp<=@;lGRg+Apc7;^qYgv=(7?xSqOnb-GY*?P6%B~`BAC{*H=Z6qU
z<@p2V_-wdfu3sIWm$f=Gqq#QD6&RnV=bPWsD9D9ZsITTJOEP6GwL{sJ_$d}#cmTXt
z^9+Fp5_qo?9&I>*M9W^y3ogmyX*y@@r8Ip`p1TQm4HDVI)4jQQA_3<@U;%eto=DSe
z7P@JE9#W`Eaw=I8U<>j@x@xl!P+!YK<hw=+y|FM)ECXyQSZfi1T_c4w{q;O|omv(~
zDBu@gt1BP0KKC1WI1QOb5iggzb_HwNPMh9iMV_K@GlNN7vL6i)kic1y=M|#~B*x2%
zJU>s0=qb9JqREQ9Kx?y{gQBUcSYdnZ`rfPZ6dQ%AT9sEI;$|-QqE&f_o1zYQ5uQeF
z<bx1TX?zhU+Lezu$)OFDRe7Dem?Nme^Ze?@ysXbNYujtXT@5zo>9if0?ao73*_@|r
z&vPRU&_IfrMX;jf>`b8+VS_qin{-Q_yDhI!$UyC_dG5PmL0y*0_UCNNb1!q5_0g_8
ziY`0Y(T-ZfM|b2Y;wS-3v};G6PwcONgt2zyVM?KPfkeA@<V8iuB9gajM_%kk-Y&_Z
zcJ0XPa)X)X^#HMo{i95~u5(qMLa~yNs8g!)f@0kd67^K&AzsL*sHZB=x=l2PcM9xR
z#l9)i0^X{;n{P2+$1)f&Xyo3EyIgz2Rkk-zj(Bk4P<!*_elAGVwKp#ywunKZuDy9U
z9zn_k2vDD~?>lMFcm2#kpn2)DJUP)q1_+<!`9=4Fq%wI(cCYx*aru6=CNJw~zAJjl
zmsx(j_PWYO-K5pYF)jRK%m1r|RXR@W)0Z8-NlQH-PF(pzoKcD6P5T&%j%q8Oe9Xcz
zraVdHr)9OrUQKW^N++rOw2B{H;wX~-(GgkZiJP^FuDUgOaze_7=M2tQhUdG@*_4#z
zOV=SDv$|`uZXJ^EZoy3~9>JJH^WA^o9wRvLm|^+ukuL6ugf~53nFYMTrj3VLf_NGI
zR?U^udPY7LfHcAJ;*_M#%ttII7Ze--zMStK<}!EFfXyc#oXa}((Dszg&6nK=Cc1BK
zzU)4bF#g>9fSBMw!uWIZk$kt}2za=F-FBzert^Y)MTEY5?p+J=WgY<%MHb{Ek09>?
z3GZ5vAMY+SwY_Tr+k7XyYe9auo6O1B<%A&gU!OUArxwb2c)g<@dDr@Uxy=tDXs|xN
zs6>L3KdsNNCw8##6m_l7Z*VUUWJHR2Z+(8ld(2;HqRpoQTQc|GrwwvdY;kJIMlD<N
zbH%uX5Ng?y?-NI_AgNG3j$TEJvQf*H{Nh_>E!nb`E%|l2n}6k%AP~QsuiP8$Vcp60
zwAbS7!TYri4}&FU$$W(l1mDe<8>=8u-@Ey8V-+Oodp92&tD-)nP$28wBkQ9Cie~e7
z^XuPjPNCc-pC;Yv%=!DZ!tC;DrxrRitaiGVHq@$}uB8pNYU<iOlmzFKp$}zl{)@I(
zdFYUXp#u6)z8sqn0>+_yIW|E8<4``vrqGnOvJd6gxlL+HTiK-Pq5Sx*=DoZU%rr;X
zvkz;3>U6}ZgSM)VICaog^^ts;Q06PNRedBM3FSN$;~!^<Kjmjl$mBnwm1KK<%Ey}E
ze?TrE=l+>p-%A_R?B{$rNrMTfpY!EzB}hR1oR8f~K7$pIGu7m?)4jBpn$|dlC|cI!
z8zOi@2!(3$3yWygf_l)N!R)QxTBowX1+qWEL<<HNNdEx|guw+qaaI8m2!jidG|~ZY
z0Z~I)x<YGRHq=3&7&z2HAP*c`AUzO8s7wJouro)1e~n<XE3_NRM>q&Hk&bW>$frgW
z_{3yVz<p{&0Y>HLG!6<#;qjUHW7?lxUB^2ZblNe#K=w9-fHA&6t}#GDi}BQs3qkaR
z$FFWH$Xe!cMUMtE>;I-TR|@WVynjW7)%TgF9<As<z?}Mo)-{KMr^#-4LMt(PKKUdl
zNU(lSXg6hdv&#AH0H*w1OZe{U_Q!j>-_`9#inkU2tmyw7OJ2<>VrQRq8})v3YlYtr
zsJ-DsS7NLlbV;ZoTk(X}k@f$(#>_4Q?W;6w`2;nTS^kvPJV&>>SzDQD-NjD!*XpnZ
z1GKqyw-v}Wr3c}*szBLYfbgA-aO;ubn|PVN1GQPM$`1;#9ZBI<JcA#6Sb*&vhXd>E
zDsVr9v5*ZJzxq*uQVl#@E)qo$y(O!*47u8#0_0~72e=;>Aj5Syz};KmPF2<de^H<u
z0Ps-7Mn*PHyv&k+YT2%q`+lPqIqd!d_w5cKIpCKC?x)R$@B|MHoP+G!e`$?-9V}49
z`2m<v>|lXMWLzLo<Y0l!xIki@A1sg=7m++OIanYwF3F+H<X{0ZuII_+JTxedWd89i
zRDASEfgGaX61%_<sUAqwbfiEgj380dkplmJc|;*nEFO;(1n#<)#S7i@AKH9CMQHJH
z_UUt4dHT3h4^@A>K%TNd21Sk+;FM*iP!4nD=}edZqs3j7r|t3JQD{`2w#NfVV4N<H
z>n@PMI9-4|ssJ+`NF5jj))<%6j3x$J>7Fh~K7x$R;37P=hS;N{UFHy4VtDAxq^3Y=
z5IwJ2-Egmsef4i`X3yI3Kv%(P-Q6A>zq|EC3uWAB;^P2Upm6VsU(&(C8OhBx*R8G@
zEorvxKU!VfJe&CxQrd_AtJSx!&ZyR7eV(ltz~=o|Yf@=if08%KaKq>Km(BPEGu)+m
zs^2rXfkn5fdiAP!8gft>m&$ro^m!60h<j>%aaHGUbWy8+#beJ5z=b1z*XZ${1Fa`}
z_WC<rn@j)hjv8Gv3RhUY`$3ozF}kcqrErzU>cJ-bM@!)*7$s{?J_ppNY3HEllN|tP
z^{yDutAC$IapQ~`m0IH*eyfhPuhfcN2uXC8tWVzo198s{Rrhr+j145M#Pud?z(CwG
zgz8Qg)YkS`zy9F=<|><2@f31OYP+}-NFp4KGDdj?3H>cP9JxRn?l%;;YwW;{$8fTm
z0-s26K*Gst3XtN^#*T+iG_1=YZ0rp7$ms`6APn}%=?5eb277$sycr}A277Sc{1V*`
z@nE7?U+^f?GG7eR!b&B6imU_=0P})JMt_iidBG#2KS;p5;6e1K6)s4ua9{Amrg_8)
zml%A7JI*6lxWo}F-0>c<*Uw9d74CRXsuLe3l~N32cD$!E-L#`|!b_sQ2_CsBl`L3p
zf+xk#IBY5CJi*iX!D|a*%uW1VmB>3LdQyDn-7bj8GSSny@;4=M5;e&q*T%9+97Ik2
zofbHVn(Rs4a&473h??RNXJ0lx4x*-bN`F%&4x*-bI*Yv_3Ev(kQ7>ML&jW;e>a|uB
zVFV|L58BZR&6$;XZ78Bu*I7>gX=wN?Pp-(_JqqPfvpg}|ktmOv<$)uepq$Y|x$;tv
z(lfeG&FI6m8(o<dBebMa37+i_I&8btaVt9hU+VFRWE<syx75=}Tw?&q@tQs&<{6M!
zI+H;9VQDAM;fS}}v758F)IATGld!FngC?kJJX!B#{xn+iDc&`n9G|%rtCt*p*JUkx
zcC5BNzSbj8N5O>Oto0xSKf-08;X3x<3)-Wl>pb!xLgU-l>qv$l$Kvt{76~53N-bmG
zyrA71v#)~kr6S$nbp|`-C!uVF4c2;`R=*Lq3pAmr1PJ0Z1|$arK6Wth6zzGN?H;FH
zZ@um4K&Jw4lMd&ol^8lZJUA*&kJtJuo*kZ?p!pEW@(Thx*|Le+BZ-|Jg{N-BMA@A*
zeixD<_=SM?S$dN8dg6VLJPH64LhqB%ARz>@iv2W68{DbNqwq+8lB8)B3FScvY_9L}
zWPRarnYm_m4&BSx<-vJMAJoBj#CLm?RO&(Ix<!w&J(IQD<6wvb6+8yeZV&Fgbm!72
zyN7k0qTQC*W19uL+mPAg!P;O5X~eg;tJ(Z1+OR~mN1lR%3888aPQkwwLNMOvtow`F
zk>uxgCu5@;LZ6fI=F#;E+z7ks$-3ap^q8upw7^x5?lZSjWb-1GQHOh#k(r?{Yd0#D
z_$fB)@BkVP_Zqo;odOco4EGjzcqjvj{uu7{j`WI9Mhpx&q|aV=8FyaEff^&cB~7no
z0ceD`Sx56@A6Eb=-eRw^-0O~R_OWGSjd-Tw6>X_r38t+I<vWYLa^KL)^PR<Bxo-#(
zsx0;fmqQi0KS>NyMSa8TUgj0|CnXOxFTou+o>)j0?oTfD()~$FgS=$gm0qP=w5i1=
zEz;UP3PLQ|@d!$+^m;{l2NGZ_y)wN6iJ`pGE7Ln7d3v|fE7Lp4q4aL07wO$iyf#2&
zSmW2VTgo$D89}@}f692}i~<tXX1sDn0ZC=Nm{HaU>mj;-omu|6woZTeYX^g-$FCg>
znjXLQ$`z=WPmf=F<q8xeRR7v5SD-|S73kMqtU!+oCjs1dnVl=OCzSH<oLXqD{GC^>
z$h~|D{mxq`cCkQ0)9<|4#llf2EK5n9mo6Du%}#seEf;X1*=eu5UIY?lPJ8X^MP3Cl
z`@EN5FX{>cZ9VVQPAlN^P8%t5pZCgpY7hp}c`vRP-Hu_4(~?WxtfB0ejCPy<l2=}Q
z!Lfqhec7ud`7vKzkbnR!j?F>B87_OVh`teH5!?URM)$HgYqV~OU%c`(7F-DZLj56x
zKwb4RbuEOhdS%4Lo;_z{Fy6|MpjwTWJ+W51EnXu{0el*<HPkEc4UlN;^K9>0?UwlS
zK6wNUCS;!XVgEq@!2&~A`*qsw))1czeP}IYhWM~*T@XM4AI5<%>)Xuyb=rKx^M((b
zwzr`_eAM=(?163CADS-p$$<tY8oAVGhy^f6Xu6c39^ggra0T1DO?xoC!YM*ybA`_k
z`>{SgHdpwtA3G7j3DrQERqQX@waI0xeA30igyO4w(#1gnVwF$2CrH$~$_GQ-#SuWQ
zVU6F_?n$rl35x=jM#UOmaXlWKK$4KJVIv;N@fgN?n=N@)8(jXjQ!5RMw|z3>gA5?v
z_Q^ZxAOZ2V5AON`EpB|I;+D*l?`a-a`4$I*vc@eA24#&~d_J*nhcdv};zNk%*Q0&p
z^E)zYc4&26Wjh=Ux>UZymn(7%2mxb<uk<?E6dD3Md@Wn^faIeQP{n-jYvoO=Ku8(#
z^(vn{FaR4xs(e`g4dj|*IPYfveqZ}%dbiU}l!)whx``5z-PBEMMK>Xdt7eHRZGCyQ
zqbOZNtaiGIrn_pNyoBvjC{?K@gYkRZD24k1tmp%6QP~#`1l>dY!hxWBh+jB8P4^JL
z@Wtxz5aFYHh+ndPtF>5b{DzUf^vO5@5(U5X$v6QL1;6y!al%K}5D)oyoahDuy?@A2
zfvzDQa#Wyeh=+VKPCyt)hkS?={5~4aw9fdluKF^gcWG@D?-^f?hc@AIaDIg2LLd9+
zBkexxtUcDig?pc+0YWbkKnmFBeC(z@+UwRipS%<TE~L(pvG)rpkU#mD_hao#>nEQ$
za6nlaDnI$KXNJWvVL`E<eJpRUHa79IgGEu|XTqYyDVH4mijQUXYMrbrKAF9N3!y7M
z%uN??Zj*y^o00yk7c-%1?Yzr7(w|dg9;GU97=oMlEb^&#JTc0z@GGjsMB!0>?4&Lb
zLTJ-iW__kDOpNu**ofm02#xh4Hhv_8Ku%!CKGQx<Oz_K$2j>{X^<y|x2_dv-3j6$X
z?L%vdUxqXsRX}KpA0h1=oooB?+Jhgd?Dj9TAGN~Oe!a+?i^6U{>AKdhbcs%Ju|Ypz
z(@H<2_3i<V$Pw@ydam`$tB)X2*;+rYKGH5LNDPX#{-Vx24<Qm60xDkX4_|M#=lCf8
zHd}v4>)7gT2b6-_+kW}_gP#Ytx2e_3qR=(qSAXzlUGcl3uSD4oJ@qi#|Appdz4mE^
zna97?zRUCd;Me2k4$?nB`d{#~-e<L)Judjgbx7i(f(w32tPem!>kEF|<RGm<LhB3u
zCU^1m0g)q&2yvSJ5m!A36s0fu*?)e}9_Vq&)*4*SmZks+&`Y){KmzoVZ3-fVDK6Qj
z2vE2ELZ)cl8ox1mesQ4rENB}9PXYZ48Du0K5C;9~kU-Y(%(x%55w6N10X>DJ+3gNe
z+lK~}F1%Hs00~lb97t$8G$6GF3CN)V*>NDD?a+YiI3k6%Lj&kI0gmFs0!n8IPN)7L
zb@O&IVUXKmSU_%Jfdu-n0JgB?Q=ktE6kgBW0#7CSus~5K^Rx?13i;Ksfvj2V;Cby-
zU~E9IYYw7}D1;`dQvwRh9K4{_xGM2eECBHUfon=2R~$rugnCl~^+b<?MEz3&>1I5O
z28q;lO5i#c5H~%Df#eHCUJQtfic}M^&?Qp?xD<L1uN(r?14=Y{6Rv*z;~DHbJ#<OC
zwJBJ_rXk+y=>a(@gG8;<0|*-AH6iNXne3BG+Mg?DIz^~wX9ncd4;d7h89-zsBZr83
zIUoi$Q7|${yEdAPUk(`J@DWeBFy`+)xv*fNU(E!v-VL~-TXL-~w4K$3?|Aj>+pB_k
z4{BOw)n)Ci9B(Fou|oHH-G$^Y>)3NO+KWxs*|mU)TGrWq0ur^XBR}~QFM@~fyx38H
zApMS0g2ur+wiODw72Y8$@cZ3`WQNTzZqa9_H#<eh3Y%>!Km?U+CM)p6k3u51v+*u{
zdaLbD8EXD^yZMkIp#Yly0gZ_wtQZ4XSJC_h3Ts|p4P>5H^p!5(u7DmjU!mp}QFA{D
zuzyU|XRzIFU2XG;jg3dZ{v;p|V?YA?lK>85z9TOzg0||xfO06{j_z}_J67u*GdJbv
zjg(3-Mdv^S2nTKLKmy?)X-7L!AmM-q19c9;0crD`7_@eBe-n_)ILU#nz6r=>oMZv$
zn*f$^f8d%x;0U?o_2iQ5jHcg|1}zqkMLfeh637$74kXGRp`Lh!4#|s%JeBFC>vLR>
zoU%s}xEM*N0&;5xBpPxm5EIJ_kW?su^n*q+NQ~rDfx2Rsgh(-tP6g`y(R_z8x+0n@
z&jm6Srrya_e$J_e&K1uEa>W}OkU}-*0;vuXm(s#>f$~l~MJb|acrm~Z=IU0nivgLP
zfQvF012Q`Si82=hc6L%kY2cNBSjB*#Dch-?_7ATFWGalOK)Mo;*$GG>T?rsNc>t~y
z_N#+}Sue1^=j-=-2L&-T@>DfU{xdAI7sq<89>an%Ndy;A!-6tN1PQ2NL3v03k|JNw
z-;Q@Xk$h?y77VmCzbA8rX(WuzH23IzU7f}TWq1P@jTsx1odS}if-w=^K%$bdL4>y@
zw1SEF)fvI8jhO>p{SC!8BZ!wexW`9G<5@xO@vT6>1hazDVL<|NR#3V;NI=dC!sRi=
zxZM#_YksCrP#^7TI^QWoddv^Xi5fyEG(U(Qpm-Ufk-m^wh5CKv3+<MGiIyx3%J=d>
z0%2h=DOMC9fv_;xu(7#FR10!>W@Vwi*j2vV!5|l19+bBOBiu!o2fbo55hN7~)=8MV
zXq-pL0avjZVf~}>RSpEX-zrB9a=%qU`FbFV0Af|JO*`&>5pusZLGh*z2$WnCluif|
zCD#O{6M{s^HDrQcMdc9Q5adqC&PH{$%LYdU^1%&3>4OpOgBya<2SEa8Ll8drAi6Z_
zSGNSSo)5XAe_%cSX%w+LV*2%-EkV7Gc^%pqrJmi!X2$duEw<Uc114147L=1PNFZ(t
zViKmzD@ulcFQ^np8?)w`9%u1lJ=_Wm5y0@6KR3k10+1;DUJ%E+w6llO=-Vn7A^MVw
z{dbKXW5bH|QBA?IixYfRP@YUf9L1}G$g*)S7o|b%Vjb(~ZM*KW?Exn2vCFmxNFeMA
z%5@J&DicKD`I^Q_lzR1(pyG{wq_9<W^p-`qNQ0x90sNT7KIWnG+(cY&z^>kH8f^MY
zs>vRVW4xN|iMZa-upaC8<dgmWg<I<dEA%4v_>E>h+Z5O9u&?5J34~k;y`;TJFi;<Q
z5*3O&dLW_QCqYd_T9DB0lOVR~=xSJ$9OiR&F`-{y{<+gWTEu?tw2vI;^Pqe`7e#>Z
zc@X*kSz%yQcYyV`^dHL)I1sdkJzzV2l)KD<pjV`^AOUe8h;8m41OyhbhuEu0{apDW
z2ZDCq4+V4Wex)_-p<r0#O;Nt4Jrr!vP(+L<ZLb|=ds6zGvZD?Jy=!;W4n~jx#L-}^
zIS<_+p~cZ)t2WXzvBW*WmX+u&I-PJ33?Q5c%J+Mt3N3L@1m*j^Ac1fqh<C)tP!NdH
z68CH{lPJ~4y2{TwAhgIm>)4YPxo3lZF*BhMK+Xp1H#FOE3@mcb1=;bsdi(S_xQ*16
z*0<+^ax)^z*SF`$$Ap(+d3!O)deqa~lwWkJrT3dJ2Ic$BQH2(^7lR4$VlhZmdyyi?
zE=m=m3XWC=WwzAQ?^HSs3dwK|E-(g#WH<*2j6tCozjIGzfH5dkx4t=!Qkj@v9U01+
zow>82{(>toGK2|;R)6jo2E95qq)cRI8|k|%@k@+7@BueAB*#5Sz>N)I+*9rW61m6N
zP~pUo*taDH<sRw_A@_uk*teBDlp7b4`?ivWecSON+P9rd&5O|}pB_?fj}FarYNC6U
zN)Wad6hNkj<Y_r1fi^uPCqj_$tmz@YxXDK(&wr+e0^+Wc<RHpS548|G+mgj$I(0Ya
z2pd3RRtWDsPj=DwK-h<AeR??<V${a?Y%?n)?_`05PP0NqV&e!Tz-EQ8Qf>}A7yH#Y
zp{&=~yk`1!o;e{skKd3ghLv;Xv2UB{4_D5!8wVzU=7r?eI7k4^3t?-VvLcXZ+`Le*
zlCN)wMB~uo^FkqUGfJ{}q5J-4hGEKLQf+=nDNLDG_q%&oty(m1D;j|(aCAIsBrFS>
zi^~2537q-VzZBPt5t(xqu<x$ZJ60~R?Eoeq7KG$n0}==eLh^P1NFXc-VWX682Y|%w
zfCVA@b^y^r{{<m=J3z8<5n(}yZU^k9{SI7rToKATgE?wbwsm7g-#(f7&Gl_A?}`u(
z#u$1lhhOV^lRei`e<|^1NN&@Di9URjYNyxvAq3r4vgWPy^YN7-`SJ&t5Ly|+&}__Q
zK)uDfw$_`*-wMeWJ8+4PxFLKPBFSaYs8wuSYrQ0~DkOJMa6t|-t3p^h(@hUlhG}GV
z=A+hnwkxqZr0~r_;zDY52nUddg-WnqhW*$^KN`=3l!nyH5TYI5OsGjy{@M$_l(vRl
zY^&cGUlWqMI$%O(O$bpv#cM-EUd!%pr<W$yhU9(?ZjC`^EqUQmggfBEc{XKcw9}Wn
z;+q^K9a5VJsVf&kSl!I}bkMuSH;3dARlZ_CW^)KfRL^l4#LX@2gAV$?>u$jiky@LO
z*+RkPLyTb5hQRniNGXeMaI>>@%n+OLAGJ|taYx-$I)QJO%0;OUsFY|rZ3KQ0YS0l5
zqY?(q)gOc!b}(NNpopBGWX_fADJA}iW7Rx>d=jeHfWL2)PoeQs*0QtSIsR!#;S&&`
z@*(qS2=7SKJ4yKp)<mDNi6rxxgF{<LpAindBZbSIG})f%tlts;JS1P>0TVKxhcFk?
zhF!jbTf$$k2fOIk$G>oJ=xv8D2nRdfkii?2``DT;`aOw#4vr5p`v?cAH3{LJ%EOt)
zH|Wb0>u^ZnX)AFdbvT5yRT>qqS)LAMe!fw^LrI=?tQdgUX|m#QY;xov=AH{>T?w&1
zH|s;a=R!DIrA<$MKk$5rc?PO?))n^x&)Z!L5)kL9i|I8qel74qi1oikPbV&f<lDaB
zLg+#WZ~Ml$5U7hGw(%CdIB^jXhW8<^`f)anP)fNFdi19d`}r2VZsMnq+$O|rJ_!93
z!Zso91EM;NmP;Ylsk`1PamjXIa3OSw92obyA%wwlIm9M**PA6SJ4iHIE)$Zd4&m_U
z5c|42s{1)44^ayEaQQieg+D%O10)QWUqY<pR{c8b7smuNUVb4He1conSh=aM7G^EX
z47gRV);+Hl>V@=<lIo(AcrLr|ZvED#a|=}-nTd(Aa|?qF$Oc5B)pHA5-eNZ3MJTSa
z5AW6+HJx9m@>Mfr$e8mB3;E>%B2i?1VcR?Cdk`S;@HJL?kKVo6YlSL5q$DPB3qy@$
zEfii~D{Ot6xl)0`xB<7cFl$j}<~@1~mv?EQ9x}hhp(5T(gT{L^U)`%8(bIbiResHk
zxB%N*SioP#CK6zK3o+EjBNBp!&I>a?Jfu$y-MX+y<(omoMWKa75xzhq5``8Pwdp~p
z>Fzo>w=K%5F5;)@?m7TiT%;F^jIRzUv9yS<5nF;lUoI_@Q#we<E-jL4M36vTT7)$s
z;;p+5X|kM6e?~89zT7E7bJg-9xy=X}6j@$`?IV7{rw$CIt|?O1XHGw(<AM)<ia8Gt
z;2>*?a>eErNWiQqiilkZkbqfJgxP>n8jwh7))duUUnKVPh#~eN))vYAJjsGp))iqt
z4|5i243v#U_-fC8tnR(BL&k<Zt3Tfc95K=2IcnYLC{Ig}jimenT7uNUXi&EoDeo7#
zqc19Sg#H>kv&QhSz#P4IC7!}|cx+?Qf?<1+oV4*2Slf$aQU($&*j`llK3YJB>BQhk
z*}FyVokb!klRT7ruSh0kl7*yfM-e4ubmUuy#@~moBEDQ@XaA3`Hv6zhu2%63T6|a}
zSF0d__F<8|TCGDy-&-VBtMUKnYNx$UhtO(uZ;{L(APJzoMRK(Y5<q*4uv(o?UxA7H
z)ni3j?`IzUkN%Ro-mxOMINdaj<EH8NMatPCx4DWggvRB~RnE&KpVwQu+MS{vqdhV4
z5FK{92rs@l98`3s2(QZ>pgxGhUDcn8lq*G<v4iyoU6uGP42~zz@TVe~qJc!gpNiz|
z1&}cKPes8i(%{742ESC~{zV#G@=)%wZE(qg!GGok|5+%37&JJnj10Roj}6uT<*Ec>
zYeD`$I4rZ^IQRd-VPwJNxFDg$;IMyWSadrvxE4dg?h#?p?UDyW3=OMZo>58`6dM*s
zWTSg%l7;>o9#-=jQMv&h3XNuu57$c{8XcA+3ruw6=&<ZakWg@RSYBZV3DnVH<VTdr
zf<!VhI-I;+R>CtuE|I#;ti$U7HI|(mt|uzTI(5)eeymdmjia$)`F*%JU&@aS%a;^D
zqK>iQ;+th1{4Oe?hU?s9MtL2WcE*KqJtWWiQ@{SbtzLAAQv`}QzoLkTrul%-n1<cB
zusm+YV^lpZ>=Q3UfCTWkFmg>PjH<_lts7<4H0Vh6ap7cFvn{V0)CBg;2)+Ho6P)JJ
zN`8V<2MwwTVR;QQ&Ii?muzb@4B<h$DZeW`*N7gYR-0(JjLI*3O+orJRM(Q6vG{vce
z2HX_KhBV-&gyn!k5j12<7?YrA2))iQC0ufcYzV#1K<~v(377uCjPr(IE}hEejnb{Z
zPj%{`%N$dkI%qRsYFK_UD9$$nriL-Ei#qVZG(1h&4dI_lLmgAYCAXPPcpVU!7FOy-
z<JK+x{zW@6Y{JcYsJq=&I{FdMYe_VFT39ZE<9r)oS~zCcM%xI}!pL{uq*xtSknqlA
zFO1gTdT6EtK}Y2?9sOw^VP@Dbj`&do5HrKb?}Yva)SDT``!!;~7}7>F!;S9dr~Yx;
zXqe4rkI~D^XFGM6P;+)z?o~hrb<7UeZ7)G-n_+gitdqHsUQLNpI=wg(8LMwr9$xHV
z(6RdBu-r3%5HJ>p<u}nl0%LJFEv_Pfgr1AT&BbLzBE><};&6+H%;R(+GEN8YYcuV~
z>rZ4qyw<6Ob|%(_<zg2?sAX+ferF6MYFQgbtQXe6dxRiUcS>vI$y(NiOL~~qBCH`n
z-;_}%>-V`TH#xP?-o>VHu2@6I`QF8*a9r&EfJ7~u!r1*0wdA9gP2skWiU6+UqZXv%
zo5JmSVxGgNHUx+6XKe~U^e~^m;*|7n4PWyuvp)UUe^+byt?>kP<B`Y;K%#|P!*VtQ
ziMqE^3;Et_oE8Q<!+bV-2n3vOr_%}#JZGolIrM3_ozCc@PrL05V>+XJDdAT?2xpxR
zi+m{o$q&NVc;$QQ3Cfptv!|!(bJDx*s1GKDc86u61QKw&!$_2tkYN)Pa;r0)ncmEm
zt`5tS18|8Q*2UfwNEE6L2ZH8Tv<sG?V7@=|@-+RRE4|+-L|FTsLKMFDQ=z$7h@lY3
z!<og?^}0&=VY~6*qVb3A#)AaL;jmxqpM#`AVPxu*P9!MjKNc37-yqNd$LtOOiIT_c
z4giUg$7(wuK{L%M*#RH`bjs0zV(2MH2a2Jm><)l1kWSehVENUv;jA$c(E%1D&xUbo
z$veQJ4md|0Fq8F|t*hyCb}!%wB+uEs01}wzs23<*wa9Q6!feJfdNG@gf-NpM1*s=4
zgk{nSNff*gM&9=!g(8cR*2`g~Cd@vYtyfjzr-*2HfHqyW+XNCYm+ff}Bw#Mnv`2G4
zNX-40!^Jh2`zat1LnN&~hh@?#S?Ks*!bn=_b$H3bTTwWn3e)TGW!G|1!__dp+VUGw
zblI<A_dOzOwV;JMETW8#{J&Z26P0)%5*LU;`C$>6uYv^hu!zi8K|=Xqk;2gtk+=|p
zCoaPy?oknuxJVw#jflv6RkDyijf_yfN~0@@oySPlWZt<&+3qB&eIcSJMDHf4cPB*n
za)d3NtE){X*c##yL?=Y#AOne-CPdJ^^sZ2nY(I&8GgohX>!gSrVqg+C!e6AyAsG~z
z6hTf%ilqGNi;=7a(#ukid@*7V^AzbZP3X}I1p0ZJtq4fSPO}vO3Djw%2>Drx6qz33
zepUtoC8s+jNuTKv>1cS0lG7vh0wYC^_DV#V|NE|Lxj=uS5)VXIK@2Fb*j)t@D6iOE
z1rlBLN~CbU>?&gLu6i}%o+rCX@=$J$-Bpr>u9{ohRV99PVI*s*-Bl&1c45RGh$UpA
z#j>k*y@sw@Y-@-|5M69r2qbD+OctVV*Orj_OPFh+-n`WkoO|(^15DyZH1U=fNEBHT
z!B^tGqa)5zd`c;j^-07Po#keaEz~y!tY@C4*LvtB8~HMi_+T~LHC)T*-`Qnz7U_Pr
zb34v=ibiMwc6gCq$7QnXU)Sqo{`$K9u*>sK1V^Q`iCRi+*~qFE>mAb@ZI!@;N*g2c
zy9^+q(nj*0mnf>2QZu$^TD_siTxHuMGA4kF;kP{^uN{IUsYq!f-b#?b*dA$`HhXXg
zjOrb1%o6>NWjh=MiYhxIGGQ;}y}ctMqcun%?1&&*U(XRhRk83=y-RtOgFx}V%0Zx^
zT@{fhPo;clS4EI%QM@muc)u$mR*%b<V)eKyBIjE?Lcv`TIp2arWxFEwd|OI-R!79@
z@vCLJ+O^uzfTDf1qX9+x>WEBcQ4m1Y5lpuq(dw}-R*8|USy5MXvyrL49OreeZtRD<
zu{Vhmygc<DdKq4PIyq`JXnx&w*U_i6>7}hl2VfD8H?8i11iN8{-l9Ofbye#Sx4x-c
zVS48aUwO8yrdC%AuTSB{r$;Mr49NcXrrxN2$J!_KwPx#&bfkz6Gxz@+-st)xUdpuY
z;$NI*yWiAf#d!93#gn~pj@VzkZr{7lfTy1s$UlnC!cS|(nZ!!{X2th?1h3xn>8dVy
z))_HMI)Z>%&e+2QB+PQg9ws1RmNPU=_K}0tg@dUVBg!R&gPrV~VaDy5msabBs}ejB
z2_ON0ixGJx2qXY5M&zv%kcb2qBXuqz63}{@7!(QIKSkuN6Ul)W{uGh7P9zIJKSgls
zq&ZiFW~2y?j!Ue2`uAkXHF~2oXj=&y2){(+$#Gropua>g?LExP0_oQXdv1;XNYh`P
zGUSrKM&xmEUG9><MsQqAuOZhZmwX<#yY<#hpT`j;A39*7$n#No(E=oZpO0c?jSp3!
z2n;)vJ-$|N*L-MHUS9?iMTSO;#bGB%6d4-DVdoo^Vb#SlOdT6lCT8}m#eIWH{Ipv{
zYp=0UITu0><;F(kTnG|o9UCp27!`9NF?fJ|A?ltG6?38Fq1?EroC_rj0d{<p=E7E7
z1+3DhM3rQ;p2dDyuU}UVLL?V;6*{<`5|!8fK|-e~(L(V)J4j$piDKPOgSaj&+gVg3
zZ6HvRMdc_4iIOZTM=?m0WKnw**QJHl%TY0km%pQ{<u5xb&~oeLsEkCA1klS-If_97
z=;bIz@gK0cjaRN;jb_bf=ibq8_q-a#+d3(1>Ed-;%rWea4SH#OPE>A1g9(S46UA0E
zW=zNcb}pN+K`)8Vjmn*9Fd;KHD)*21i?j3Co(+1v#5~zD6r>z^UKIZRXM~Y@n608&
zD_G%1{Q=Lys2-tn8h1U?;C1%DjrxscuiGsH6D@n)ZW&0Z@Oo5!h!`YV_Ieci=`>%}
zBmI`JUpMN_%a%9@6z7*jbHyEg$dFJpD)v!80%1uM8<sb61n9Y({e6>uQ~7cSfqZs(
zRNiW-$K(9+s8?)NfCR#F(&1LLt-fD<E1I>Bo!+E(_r67g-~&oc>r>;_u$wpQyUNzs
zz+eJ+jomnqP;E_AP9PuwyoL<>3`fAjx7i=J=>NLmZ3ltUmbV=QYTVmVxt~*?H}35y
zM)+b{1J|cs*b!CY(U}=@tDbPFVs2)hD!q_(i{qxn6CdD3twq~(db!oWt9-fQYbX4z
zTNdB0pKFTpVw?jFmF=MJqZK7csJkPIBZ4lxE>Kmh)4O`tvMNViKHu4vtj|-~s;F12
zd_hu~DCRr5LRX*9ckG>a^&VYzIS90iw97%@6Q6^?Cq6>J`yfDo?4GF7G+M^4+lcGP
z74PZII)fnwE*`@(_C#~VNCk=Z?1|QCAlpMhXiv0p6Y~qvg9t*OMwKsE^?Ul~mH1_&
z(00(LP8U!}`qcK&`aC3kO5Q<h3y=s&pGHf+KuDss1u+nkP}65o`O2$gLAB4Lcv<r{
zI8_6`dLWv081rtqb?*RlMi<t2C$1SCh~n*)2wK{J-0N%h+)h2#^lLjhf(cc=j><e7
zB&zv3idhSXPbh+i->}U)^*UwW*o^@bjrqoI3`i2P{Rt!xz9D}?$N&P|>01_kUoXAk
zTL*!R{;h*R)qES3yO<~fgl{PtR%>WjL%;fCG;4Is6<wMc^uE5+#U{O^2HpMfzBC)R
z4LM)!ACWLKb3VXx-;YuI(p*Do^Q9<XfwTgFYA@MM2Z?Gg*-ZzDYA;dKr_hAbkdzvf
zxox*T)s-F;ld}o9#E!|NA0!G5iXrKz$lZ`yJ0vC|Hwg64keH0zAW?EiOh#^yC^;l%
zNA8A1j*9WfeIp1=nxkUUeLzC-Q85|1K>}%1OoncdyeLBV2(nirTp)~P?aj>iSRbD4
zoe{%F+<EfSh-@*7HUAWw9kcBAfC;QwG1>nhfi)`zBk=pajY#J?%=H;A{LYEVo2g(D
zHzseUf<&1)G2BdjhXz3-GQw+Y*Jt|1hhMXs04AF7n%xADfOst?-_QdIh}UA6Lnusu
z#0>aaEGBM~5Ggj%UW*lXrz_@E2?{J>-+!*3EnDJLLRSly#N_ov$e@xXv1B`mN_JWj
z>sZD=2H%K6$8r|lr*|)3?jX<>$?}-oAA<}KmdE1!(f}%@(6Ky*O9S6fPS=Rqv@SDi
zpWe$=zRtm*ba|cAR0<jEV)AMe$^c_s4EG#1kef9kC)t|m^rgPZRle21pn$Q}!JvS#
zH6~*=$^c_)3}Z|h1Bu5@*6}O-Z23+Hf>Ms1F?mO~5l=aG#!_OR5+opY##*-Gj@yU~
z{(*E{5GeV9?YJOO`3JV+f<(y=Y8|%`r5qm%$7Rb8BIWqlQGrs9kDXRf%JH%7w<rjp
zk7MxL?r_`2h<UNBSJ=6O`YnM^W4P!&glyaxUaRhpDF-ume4{I_O8gWt6%PQu-v$Q>
z@cl7)D+VOM_s4KnKrt00V(R{wbugA~2C;QX4EPj%<>$+o`|DT^-*l<vqU?bfQoSIy
zXKI;9_P+APDBC+jF4&k{_-KqBJOr~Jb=0C%;%H1J0ubU-@}pHC0ev)v3GhJ<f$Kge
zVl4l#{+G%V4g~qt38!UL(TSMMXBzXdaw3M=g6{i(#C@L=vC{G4Yam2pvVaaJVs(4-
zmv$u!_kB*p9vkPPD<~)iJ-&}AEuyXQcb+O9tLV>;AJ*HKgJqkS#?tpOnG!)BN_-!S
zHsxapBrktmbN->A#x$1B#Mnbe^e$b_I1n@spK(k<gXv66&g3Wqh%+(F!~8;AV>DVl
zA5$*FqDS;ymH26ELgVSYV-6Zm=VS7_{3r&P^D(RgL`Ty*@8@HUF4uN69og`Xz7TU?
zs_kgWMcIo^M@uF;`X|xRvxN)75;d_*r(?S1Dz9<$qA^<I=tX0+#`f;Ue2mt_aK<x@
z#(8794lyD#<G4QERW_oywrw;>M-<n33#|)A6nn+?Jjy`75yd#ep-)dWra?M}{o|xQ
zsC<lrK!bHmvD~773=qZ?mx>*IkU$ty+^V&?U1$MQuuS?p{XJJ#=3vl`PUc|HIAz81
z?aIb{oU&rPUAa|Y&_PSFl8C;Q%?{jd#4>lE(&xE4fn|3X-R+!REKl(oi$j-U`GqKu
zP-%8?aon7PcWra<mVH%m)}Bo3Gy1EBzp6OLpyQ|<ya|seQ>+y6_lzq+LMPDtues1u
zOfnx7W8TH9HX!lv!(#C*RiXsR|8@Y8ko~Y2bDEF^wX0aZ_J>!@Aq$efunt+8yml4y
zO+~_ms=HC?{p9sTLKrl^+(9IScNb&TDu6KvJ}Q<kFyfVP$b#et0+6L^HXjvZZ~rHJ
zn8DoyZ;%vcT`bNVzN|l^cn%gLNu$+r6KeJ$_V^X7mJb!nqytP~9V(WSG)Sm*h#Ex8
z&L-4?BkcVvdYkkSrwG~Lh*N~(&Jij?uk1IWRvs^A>8pBK`nXeukd8ZLsP)IG3~qCw
z45;sl*|e+r_37`NGGvnPoH7&_zN0d9mAVPVh110>=U2T``m|GqOmn)}5bgpYlsR3T
zU%+4RZ$iQEhhp}RU-g^QKR9J*)c;T{_ZT3AGCve!kKs{X5B&E+F+2LJ-mBRKrwonA
z3&k>5Yr;q51@f8MCc2=hUmaB^Yfa|a8a<xl9aRT8<2KyjayO+e$Yd6{jdvSemx;^t
z4P1a_;t_E}86*_Q#4(L;qy9|$)vfWY^NGyNX2uOl-K}xH;>mWWacSbcxKb5&)90Ht
z(Bea%#ADeljH9h~#IfT~8#>|<I%a3w-Q^k%>Up0yujWFzG%5FOrcO&^Zch4J9J}&x
z3@()WHZC0mBno{SM=#)>8Oq?{(KtKZ&Pew<io<7FhR;lKc?ljuD04K9OYoF}fkd!5
z8uyCtgAvKk{*K0d9r)Rw<j~pQ(RkZ-{JcF)Zgn!wD%%_F(kC6|sQ#02d6xr1sOV%I
zL#zu|4%DeQJJQ~`q3bCe(8}s5<2@CZ8E={oyi;+%SVn^6g)ocK>$Xr9ZuVnbX%b~F
z_J@u}F&o~&7+wyJjYe7Bk8zpRK^zMG7>|pa_aK4xV;nD#4&-2{`C^=P?`S+ze$j!T
zb>Kw@g52?9Jl;a8OYV3v-ntF{c3+xuy329)OGl%;{IUZ<^TlPSP2`=I<1z(C89-c)
zi;p6pNtiCK#Mv`tMz``S4g?+fUvVI4y0{XTn*k^Th%0ftJ97_j2zsz4&VDL0?k%rz
zAn0Q|H4X&L7d3IYot)<LMNJ%kXsn9Ps?(I*jm?ZIH~x@aJ~mNnPs;1YCTe?!=8Lh3
zS~V!I8=HU{qiDWJ)4}}YOrVP~##KJq!JtWEvV%b<^OF;`de9^>IRQQ1q+N+Loy^b5
z?7zWyODUh_V9;MYo8@58$^5K@UtFs|8DPvx;KJr8;UzeCpUXbzW{l}F*MXon-RC+G
zbnHGi;TLI6njgE*O<dQ4zlV^fORozON}FgSwx^pBWpCbO#JYfCyBQs>FG$F@GawDD
z1&Of8xIsdl1qn=}9e9hdb-O5`bci+)SPgDA>Xd<DV^IpXC?V6YG(Rj~l!&&H{zkh2
zixO?yn}6Y0I4fVmp1;|6sBDRYK!@Z@oR-lc`I3ZR>|CT3IwW6`Xxx;4Fd|J?Y?rgx
zEyg`%%N+!K^uxW}L7+c<wmcyhGAIIs<q5o_L9<YrF5s?Yi*GU7l&y3Sd_Y*~AkZH$
zTbYnKI*I^cWdeVLtp!KG?cCL@PIseK*=h%Y{(jkN2Z7%6U7e7ZT+)gk2&)rT%KQgM
zz|Gxt?1k>efU<QCLI4Qs9E1Q6);X;R0AU@qqJksf@2PBHWw#oCE8E~81ko285_0o4
ztptIvAtCORqTxXxY)CX~Zr;ri@aI=Hv#)P8?k(HwAcUa9W=Dq*5H>rl2mxU;wSsn}
z(hB}s%Qp7(ZN}~8+Z=>KAZ&9G3W2aKA(LPf0m8NfE?!R%u3m&~Hg@?oV^aAJ2cifN
zI~<52K<r4!Wkp&k0>q9)s?;8}VdOTM9k<h{-R)q6fw4OwQ@gYh2FC7$kKd$*=3!v$
zPT(dr-_T4ec=5iPO}N9@)uq~jz#*l(Iw7yqKn4)i3Hb^RNI+C4@Cwe`Sf&9IFVCGw
zDBmSAvwIjFa(d#oJwl>T<%H9mC~!_B<faJ90p~;li%VJ-fW)%kM56S&gxFIfhFB(@
zOyJK0(B@5Ai6IS1@Xed{AfV;xgq;0B0{wJCZr*?d`soBVZw?517vpk50)HiK7yDtc
z(T;7u*O=1@3|rM=sCv#(wHRRM994?}c8*j<eyzBh`PD0ltYMk?_ZeGUzAFiwck{o0
z*NmqAngo0Heq&g9jg1X16s@tH6C|)}5`|(X1thR*64)O;Pl`69sdy;s@PKi#(@;yQ
z2PV`TYRPa8l7uYz?jA@$47ITPeVEj{&aaNQvRJ0?pN(%_p79nE9efhaeI02xi9PZc
z<I$#*EO}-FCZHx+#bWaoB%mf)Sn^TUb{#1*m7V#E(Yw=BTNyB+%v4($kR)WunI9w&
zrdpW!$IzDsnq#la%9_h2{?!;AoMB<p;LiYVPP)8oDZ%LNY{GH;CA01i8Rcm(M7D&-
zz<k+~2?<DGzHA{O`GjoLoYb1b-g?OREIr35Lwd}y<ktZpgEDh0?0G#5HCp)91y<HZ
zw)SD;p~3~E28E**P(xj0DN8MPwCChk$|LNiM~u5G!4Z1kIWQO5dVmDxBGQ9g79?DD
zkriBOiIXW}@RO<6E%y>joJ>g`$}P6!$&_Sa4f}>gdleK~TTqi$SokBprI!1q9(Q$N
zv&xM)>(JB4YYMil4mELwB@fC_2CyqE9F)<iM+?gB-eLoK8aMTN3rKt(0ux2vvgBv7
zL88c8mb^R(5*f%_R)f2FHcKSWA>XnZ-o<lB$)OzbEvv_!d=$1Ih&7hjLInZmUSr8o
z2olw;vE(QO$z|;=)E1NmZm{?k>R&-{O8PiRxYY*Rtv~{4gC(N{NFZ&nFa&XzBnO{=
z+H7ULXNeEi(VVr}%8Br0DL(Jy$7?y8dl~8Y7E2Lt9DxbrY@v4FfYm6z=j2BK&+l#A
z7~f{e*L%Q(%r*=A0eHayGN9gN{dya>TJKu&Jt;7WOG9loy<&pzx>Q;CgG*oZHf9B@
ztQ`IY>Ks3*@BwgBPqY7x)tXLy1TV&RpP!S*c2yYd;&{TdWRe5g2Q*gjMNg2>Y8NYg
z%(y?k%aZG8Fd?(c!kP#p5;CAZV$&ZpddEMKRwpKLEgZ~s<1#SS$E^5o#?A4MEqTD_
z=S$&_EyNjoI2uJ@`)c<5-;5iqY6pjwz}18^f|g7z{p#0N)`-lve>3ohPQRu=!uP3L
zQu_{Be9yiE2=v<_+ebm76^AUj&;bc$4p~^}yho{KOKRguOQ|1Slg%dlO-*LbK4Hvp
zbplI7VhF&YPFiv*2gwWIwLMz&fCSu03xDTmqt4-=@Kr1G(UV4JcllKZg!22VmRwG>
z<b&X<6&D|<1PPF<7V-g_Raz1?C@K6I1WFD{N`D54>IWsIKZE45wm-KdD-KVJBLNVc
zs%;4Q^YEmM*?0=1;YsPwAb~VI34b0!rf%g|CnU3$XTIofD2i`FQcns~w<1$dPI6PX
z0s+X$Nf{160&;Rvni?b^CnsTQes{kWnR<F={WHeHuCnP#sTR0s;Pj;2fd@%aN%?^Q
zkieLp#3#q_ikrI?`PD3T-@lB1m(Ow#$hfnT@?tS$fG{f=6U%OpK$w-Zch6f9xgb;U
ztbyJ01r7$8c|lU{szC@C3zA+Dv_Mj!Bvx9~L9NKji)06ZK*>dR2Z2P%MRo^)M9D=-
zyMtQMR>d;eK_CFM%+Y~%EtlCHgr`7SW_J)sAT6T~LIR<<Tl>{j$*i4>{oD95uqsJk
zsi3K-HTp+glT_Ye!~bK9t;8=8s=)`^nxqWXAc3|fDep9Z#LTfKS@=#;%pAnvGsoJb
z`|YHdIV2C|)+Oc4Az7F?)+cG^pmer1nSWDKxii|$ViW&s^mrJA7)yAB7H+az2$GA+
z<Q^ojHznm|eUO+7HYKed{792Xaip^;nY_cS7LA2FY-iX1&-k?IcBiGJ!1kp4NJVSj
z|J#!|8>H{twWjXh!EUHD?&-9{(TjS2hwX!q0m6=?{5k|kDwAx}*8GXCE4A^fhmu*Z
zvg%6XR^?TLP3)mQnECf0;{_$tZis;d>`)T#r18MihDOT~F<RPzK<kg#dV)kPN9@r8
z615zm(XwBGqHWL$_4}l9I+^)unDKzC62C=P;t2|VpOm+LK%(IHNqOrBB)anZWS!IK
zO4=kM26d(TR8rphksR3WR8rphkt_h6O5)ZJ-ZVow2>g)5t)Dvl*3aq@MrjMswi0CJ
zACmIc4}?+nha}FIp5$dgUBH-#K15%OsLPs<G;U0TVHYL?Ur5TWxi;Lu7n0bTqd!Q~
zhKARrB%3?ZXwd6YQhpc|T$H(F4@r=y;t~x>io+n`ESHk8n`E2m%?>P3FC~k+@x*}y
zz@fz9Qu2nbd~x1}2IDVDmL6ra@AQl94B&FMjFTWy?=MNYeguhne@SA4eFV8+8;U(O
zNj86!F|w@2!QdPHwxdG`7&S@1*ggUYjG832k7%>44Q<>!&-#ounw3AFl0yYdXz_fi
zRtws<c|PSA%O*Sp!t*JF#W^&KwV||WROXY>#ynT^QK?!p(@xE(l-$jP5DJY-Vdm!d
zpW0xjMxB^are<CrYvBG9e%jqbyE7A0GFCti<tC<rg*?jy2?v{)Dw>)Sv4R*pR!mB{
zUrdQuA$ce_IVEF-WFb~eNl~nzNZN)rdR|KLtN-ko)mo@EI4~$!;>tfrsPa-u&UYXI
z`BKUbr)_AHXLgFucaMO8<IHv}NLxL#9ShP{&+L?(?;s4M*(sU7;Tv;vQ(4PWB7dXx
z{@j%Od})Bj@Vu1#d}%32JOwR2UkVb#WL^s4<u;@-0U8wx*ro}_AL0v8hMbd_kXewz
zA_g~5K!RGx8c#HO#22PyA_pdMQ%K|<;4;webvA9H@nHOQyi_f5==9+A6cR##gXX@$
ze3O9lMoPX=9pI-1Z=`Uzg>PD*F4$lx``;v^t+g~IlTR>#vowX|b2<KQNe;dzw<(oX
zo%v*v(Jb4)i5gDtB?qbDo2lWxf$ANlAkj9^qTwI`vY8rAZ*B*v;al0rsYd7c)|9;H
z1tw&+rZ7mcy$Bgl+u6~n#(nYacB8-~E;Z_pTm}t)kNue$cgNqejT7X#;(KJAu3QEU
z-^r?&(Jj6+C10x#@`mqBVPH}|8Kj0+vGg?KhImy<=A2-nuBsGrPRvx0fvbJU#!WNs
zjenSuIWU-z`7nhX7+Wil!QkA@TrU~;$h0FvuO#m#84O^^VD#-_e}Bnn7T+U1mza>*
zlR{X=DGf+$i|%D>UNTxI_d52W7x?#*eO6QUj<4YDOJyBNv4ZKwTb_L>T%x0n2vJAu
zXM3g_e~Rz7+Y2Vj?x*(Bhpt0p{{!r%8OCk#1GWxeLgoPJ@Lw(i>L6P-!>EiOwEGdC
zpd&8zV;3$1`yXPr&osKm57~CZx8@*oi0p=I%cu+XKg^cQH2!EEPRW<h!Gz4=RI0>0
zMfpivzj{2CHI~I+Hoo^APa!|yGh$n6%b66<AKQUIFP*XD4oEcOOiJdDAfd~d6lO%)
z{%lJv{1NVm?N5BbD8O8^jnZ;3L~en{!1~c1?jX6iydeY<SU*xLDde`LHeX1wM`s)9
zP8S>qa)=8lc`yngKwL<bipwA%0dXOP%OLzSHEoH!n#$~&ZH#rLucqWY1vW}uP07>|
zBo{*$Z>Ra9E!l1`8~Lj7UisjXTHPs!99$x|ZXpAR!6i|V!GZ+D;1Xo86f@hBXAdh8
z%L5Q7Ijls6OOPlztVD)OkSIB<#15BjseNNgc(}X;1XLO0=s;7}m=ZbR;3<&Cl*n)i
z5=di85H1JfOA+pNh?gZ<n@e2L+gS6JMj+E{o^dkUH@C!IC$yt}UQojOxg`i-FDQ}o
z3rJuuD3SdP64(n$(9d|q-rbI@zKC5~XmoG7$SFeIxu`^Lz(58?7L{P*<9c2M-T4OV
zyU6I$`3<{4?fCtnH|z$11i~97GT8(Pgf~i%Y_6tss~t%7%@QS(IkU)U?W)92F&W|k
z%Dq`4Cqs}Z_hyMqoIzqTe6yr5Qz9lqV(`guWr=%riI@x}59Qt}k&~fhVKQ7*Vo!$c
z$TilLTr(MhgAM~rOokw#$~wDuK>~7JZSS@t$Jiu#_ht}4+vFI7lA2A9G00Cg*}V&4
zAZ?=F#Z_K+d%wD^Bx^r9_j>BwV%B|$(Zsi{L@yCzxIOjld$Mmq0Qo)JTp)q`p53<~
zf&3oz?LT4V_S6Se?4G5@vrVg<BGk84C5CwQ12QO5Rf1PP=uE0T4b@%j@>1izrn^ey
zE+LpGva3XXm>MLC>?%PzgxHTFp!Tr;EHiFM?{R9Oe%w<czq|<<5-LFmr$N=8Y+o%0
z6$qHU+BQ2#l&rSR4iY7+Yt7!C%)U>W9Rz^(*=7gHAId=m5=i@Ovx5ZEJ~I1XVfGGw
z^{bMsiKVV+4>Eg@jbCBh==-WfuP4mjfz1AmFgvS!(@>j!V>b?u0Q`+@b&vr5hOFKQ
zjq5<hI?UdD(`b@D>=YrZAGSvnWKiTVji@_#5m^0L3Cmk)^k{a>DMLud?4Iht&3=q}
zYBwFZbs)Q6D9MaoX?&z~x?mdtY#8B!?Ry{ra-l>f)F62&%ws2MAa<ahxKfgtw%Yi+
ztIHJ!gmy2kI3Uy~S4!joA_@WIN(m+?KAJnAPt?Js%81g;*+oX$RS5=)gChntNE9Dj
zDhD-46dznF2Q^3x>cORjBTB`fCI%nWLrUGlOU0m;Jd_(+DhIV>VNee%wFh+v3b~`%
z4{MENdUUBA$Y7%S(WNp>g9OazQaem{pqyjEYn|5_u1*t5<s1PfS}>thx)Ml0OemG{
z86+Skl){yc(CpjMuTCk=!nODH#^L{4)wM@QRh;qN%kILCRbWFxSYS86-g{>j!y^(N
z=CKI@2`WfE2Twu7qHRxY&(YS}Kl(ZlEJZA)Av~s_KnPX}2e1ld0|gRA0eMIWhyi2K
z{!tW@P$-F%p!WC8%w^mE_V?{K-^~49Gk0e0O#fAhK6%=OipYi5B~(_HcO8HWt@BiZ
zzaVg3!X#xt2wazd3z0t*k>S_N@&n;n#p}H$fruup_nHJqObK(qJRl^jPhjvtD~?4J
z$93}L0jxOIWh9V#>JsK-Yw$oqUBcGupMa21moPgHiwJEdRSq79-zd1*Qz#$`ZuS%k
zNUXONT0}mzRYIXR<zE`Zq14t)1IVqmW*&juYOAMJl!KhDq}7IOXtg*JI-l_U+fH{i
zhWD`k=M&zjrkM2Fru8}w05aP=#R5WRo2OVn$ZR9U9;Xi%i|LW~q<?=rd~!hH9@}^b
zs6@60CDrRKAPViV@!go(lvNC6h7Q`+Av+M=Eq5*t|2bXwX*k!v5H#)K;DCUGw()R4
z2smgP4+n&YAGC80+1kU2pgg?M4!mt^4>vTFYqE`p8xlPHEt@=iW0raXbe)%M>vKDh
zKJkz6E8ztIdQeuZLjRI&oE8v`x?~%t1%&WRHirJRd;y3?U9v}fjz-Zgb|RorF!X1(
zS#c{SOSap3@B@JV+A}&M<F(r+s_-wQx7%J+6;qzRX6w0800_F4X(y$JYngUZdbpNp
zC#8pLHr(I~3a*k!sN44aLC)?BU+&*+d%LAe$O&%QD!9f0K;kXW9DtB`%Qn#k2#L3B
zIKhWBDl8#mRmu3j!ska-ImUz_64eRot55(@rpm!_^UHM^1k@7gTn$&}FLBHkof2jC
zB~EX(-wble>`NT%H=|yzgwPA})2m2EFF3~4Ktwe!I7V%N#N>EtD<O?nZy9q9$*9^f
zb_EenSM3<P0zyQ!W9$kD5!DX#RgVLZ0;Q2qt>fF7e)`|xVgCNLj`y)|DJg8NqZC#Q
z0Fi6GhX;hnwT@93AVjWpps?4emnen8LK_|HRVNVLV9w%+b%z%(1WgA3I3Qr7V*&sW
z0ya7(007}@8=ah29UTBfPytZq1U5T501OS~HaR8$3<&{H?|3P`lrq~EM~~YsT@7a!
zf&#|`NsrqA(UdKoh5;dR%WVyp65QeFQ8@tgy~9&9Ahfc>Q#2qX?eG*0sER_-^Z`^V
z5_-e&t#tj-2lM3Xoxxn$-LKDGviU}Ml>LT-K7h{TNnv~0Uma_&6QDaOdIRh2Wki!B
z{u6Gf+~WkMsaZ7r7alI{1S<ZAf;t<B;)&buSWOW3D^D6sLnJxkX84!W5By(QdLKRL
z1X3AkWR^xJF!i>ycO2^|q+x>BG!ChbX!4&o!)F%0>zKW7s&S<G!%pDG8F8e`BMvSC
z_Zs(}W1WOJy6I9CL9Q|+njF<6==7Ll?zPku$UW|u8#FZqa!)vcVUunPZg#A*5d0%g
zFb;<zlALoZ{8Zs-Cs3Mc6ulX@IObF%C5{5*3{|OKic=H_tvV3K0l?&~o*x6Ed97X`
z0HSCs1%leQks{Y>lZU?w*A}#8%8>83d6@$|DAPungU&`xk=8CcRs?&JMqUkzQk|<o
zM!lfx&3=H8anZ{pfRJ&KGRZfzt1tx^y5U$io%GeO!(Rm#;I}7-T=s_NvS5Uq8=lJo
zLe34x<a|KH;SFcRO~fJPd?M(a{~rfAe+g|VOHm41mVPM6diN?>hRYyfgCJ26WXoK$
zWCMtLmbv|O%mJdFWiCb^l=)KhY|CBMZ$QKJ(!AU?;R%S6%UzQI0a0?f>m|Sx#d7VI
zPx~-`X>F!*dRwk_O#%cDMAW(_0Rloqt&6z))13&+vPkGn*LNWuXSgUh`%M=g2R~2K
zwq<1Z2G`1tUYBJl=A^&w$L9J+fueI5{)gBGH>`F96FbB<xOCbF^#EmLq5blA5%#B1
z`!i+8_WND)rVJjG+3#Xp|DvuE#y^yvlZ8%X>>*UGbXlg1eaOvG6O9l|#y;f2NJmvg
zeXyu>)Wt_?Ioa$;-=l7yyKo0RH2`eKWP3JyxZs!@@MMv}kGVPAh$e#{b4TW@eZ*yC
z%M)(k?r6Ten#~5t-{!DH0SLO2!`~=;!p+w6+<+*2!o~KW`&4~U`ulF6AUaVO?#yAM
z3qa6^8<#0VzVGJhWmP~Fe&5BiDs4w7BRe*`0UjN%3qLuK<>!N-_J`BosJYqA(hIwQ
zDBSE~D<Ex4E~6oNi##xprN*?lxcHGg5JVJdabuJe6hx60x46_O2eX1_-9VwdlFf4D
z<XkqX08qPUnc8%J)*Uq36s4*8vu?pSwQ;(PCJWD@XmpHjYW>43OP<YT0}4R(B+w-N
zxr_vwq(4Uz=wyL1npkgj17oA*TEeJ7Y~pAT^nxb-M&VX>pgvF@5QSUaQDfK&`W~!2
z61wdA)}&VtVl}<8F1uJ~rwgXb;jW=}*XnfT#G&loh4`so+3^R&wYz<_2LM7`yNj(Z
zG_C_gjJLbdPFJr;5kalabhy~0Oi^zraLo=Et8R2skRj26O@~{WVrlC3%gN)rT<iYm
zpRK&~)uF7w{}`Z72>25g?sCmKFrZ>K=TrltQC%*+Yan9*!aQB>_~~?{se<b736*TI
zt_h9lanp<9te5|LJ()Tvk@R?RU#{Y&$2G5^fDqE-;x$y)K@-D0ZoI(Mp%!3z+`O^u
z8``N>PC2xOTdR2>+R5aLzsCO1z9ajD(!GbVIl+ba$9pi!s5RUq8x+HX)$rSuQh?QP
zRI0U28MTJTS93kG0lOaAtl)uFT#sxF4drUN8QB;TMm8%sjch)-gJz_0tH{gTw_9Fz
z*u}`pJcv&xF#()IdFvH!jZ|M+tl=ya15zPN|3P!FaLmOZWC79E^)kU(Wo$jS)aGX*
zf@eL)=I3(71GGWD$XP{f1Gkc-Jn&FAwSnW6hvv`Kogf?K7n~KwHgao};h}lyjeKkY
zZ72l~a!Z{o6>NO0j$0}V5D`3eeDoNGlRf~U%1yFXu%g(eOkK1tu!-u@?SUWF%P$1l
zQ=h4e)&=URF2n-lAR%m)58~X~_-1a72nG>6n>oJr!wJd61p9AGZ%wk({`fX-sbD86
zxVCYecYY?IxDf5T(rfQ#v#t29Oq*zJU>CJ%7D94zB$Vd9x8$9p*+Y>u$2$j2d`_l_
z+{>-M$)`uN(%JZ>lLP2b`(8dse@qStQ}5-Nn<p0mgp2IuiNC=`XcR;Q6_ES52}nah
z3-(F>7?#y<A4d#!QD-ojEZQXTsn3^FnmiW;5qfR%TojO)xY-a0i29p2)^Bi%w-v-?
zE$?#Q$J|e+c+0UzgM;MBN*vf<HJ1IN-@7~*Q(iWZyzDTSJLWMr0RV}IJxv3mZHGzI
zv;s4b+H^$DE?}c$N4TZFWFjJXj&MXgc?YgTp_Tvo0(i&Kj2uNJId~Zd58C;j>@Hv<
z<L`O)0ud$OBYQ2y9v?8l&CaLG?m^-zInOOMSwU2Ao#&XWAom4?sPnwAQXQF05KTPK
z$4{fhb^Hx=U68+<!17}kJXZw~A})}tKCO7*hFJEQz<v_{h+7kkTyn#Y_`OAJ6|4b4
z@WVFw-HB{XqAk-F^20W2%Omieib&`a?)wtzuFR904h6Gh{v=l7e8Tbl3JsGh@JjGc
zZe8X9_B9>TSz%rY6fIpdiT&C?;Svu_R=%SDg!s=mu4yOl(G)!G=NvBu)LT}NTXt~k
z3YTBcXN3!a@hBkZQyBrFiw-_SceQ{h+`+Mjio6pL-r2$3E5<vCpuDrw^G-uSBRaY1
zE)0pfi%xP?^;%s4w+LP5y{v97Zx*o+p1AJ$EB--?u5<ILD<E2Qoex)e1x+A-y-u;N
zTSPC5*ZDo&Xc2W+_#Z8bp#Cl%7(<s9S%E2$P!IRLAjg(4*{_G=l%y5Zk4zyaUX*Ud
z5ncXSi-Z~2fr|PT33E&+AnIErFu10E0}y#*k%;IEnh9b^tT=G`*N0jx$}de9r5JXG
zEX|0e$5<-NO!^e{7)u4_XSG=B@|KFM8Om(<m&6iffIi~UQ1Dnw#XVl#iV1Zu6{!c<
zmvrts?#HPWzAeHZ{S4>6KlL;D{mM{8zF*1ur1Q(!8GqkeVYWWz(!;NmeJj|g*h*oJ
zZ3huGtQ1(z!p_?uF0;YGTk_EgHZQ(fn8XeucvcG-U>P14On~ds=PKA8{`fj!(k-Y&
z76{(gDHd`mdN-_@%HD`?5awWT(7>}nV6O$;4g($pZ@p}u%9`W#!crbcL@?D0c;Gvl
z3DNnQY`l*hj=v@>y=603Mdxb*tL9~}_tZ#eoAA9ZU!BHMS=$75{E+8QCC}e3terx8
zJ}~?Y1U>Eo#M5pU=0XBMw0OI~+&B3dApC5*7`{{Jyi5e;`8$Nk%Z7s1?hwZF4T(H|
zhk)nLgNbk>(3`@yPxSIfXR7r%*;L7<MBWs^gi5W0$S}KvRj4}f1R$CPtWy~vD%d5E
zK5!;#P~8QzTRuLWO^WRn)<l(uKm^Zjfz?pz4snqW9lpP3IxCI+RhV1_B2fi$6)nl*
zq8`j)%E<j}a%_*V#v3_gpFLvIy`(?zz&vUB?ENeiOAC|8K?F})Ad%CahC!4&8|10`
z*@Rewu!@Zw%AE}&RmNzG0M772hbI#cu&E>VW_T!f?j@cd!-DrkLI;HJZTRtHw{_H8
zzV-lnFzbN8IwslkKC)+{u--EE1cqP`^!9W>D6UZq*Y7%jc*I6A@@{2MK-jZU<iBO?
zNd#rjCeNORf@U>&_B152XA{};U({pblZGS0_hAT){S;kh-8;bn^1@u!SN`Kcb~tiG
z1mnuCxbp{n9PFs<Dlg8!$P7@8@`Lyj^&AzrHVR*K0;1{1WUra5Bz7#rLuNfjJVO-^
z&~Z6`CX2_8!(EiBak&ps#l%U52hV&$zDztPgc;#QRoI;n7~v(99GLZ_Y@NxR*h$ay
zxI_nXPLk<q>r9l)dP)v?h|L&w$}>HP;5kL6*X@D!n_*A6U?$5QuHM)@Z^LysU~MLE
z%TwaeF`kz1Jj8~_PJ4MJss?DMDX-Xy2MMu724*og)*>u*r3>0Y!?PBF?S7g^ZQPhn
zJZCa0P#ZT$1;dmayltJ8)w9@$*jZue5de-Zft<4fUtH;?W2@2!@)Y*0$3762`dSQi
z(LD<v2z)K3<=}g>bMjl?W+UR~GS5ZVD4Y}b7PBYewbLS@3&M9%&ipoeBI|;{Iqu}A
z)5uTTg!Omhr@+t@2>K8jKp4AC4Am#)0>Wl(l*%aY0K!k(1pmA7Qz9ro{n+zULqS76
z_Wab4$WK2eKWz)bPjPomyYSr#!cR{I<zMFD47a;32SaK3FniRx^QS*w@bq&}J@<>e
zA1rv5$py37Ncqxi#v|>X{|+Yq?eP5921K)gwF3j90UhL=G*}x<4%{hZ|3_Fd-szbJ
zR4{dtX)r<t6VMeQ=RU&9@~(J22dIin19j?O22*P466t-9uvz|im**}ZgRP6)rCf2r
zi@Svs-(i#Ux;^_0R&Lx)epjVs!H;`H`uE>qmOtK;sggXohdQg7Fk@vT^o_t(+1ux^
z8Cl<u8EHIUNoK4{TF)otGo#srg}^W)2-=K*c;u?2F(V+FU6nLu1cVu@lKlCk?mmd1
z%(ysdx(`D^Ll!4Z_hCq6#>Gi8BX#k(8fSUZw<7)aT->GGcX={6RHc_8WS*Dg_Ic>f
zUrL%@7(~c>DTxQ8Fvj&XnERJE=CK*PI%!^cKm<>9lCF574t5Bs{|`xP-0<J1Q=@l2
zg+p1FJ;r_*15v*vfkpA4$O2UYk6I)9&Sy`?Ymz2>hA8{gBypw$U79vM5?Yn?t(7b0
zv$>H~Nqkd7p)s9wx+ZD;QGPX_6)(guy=4@1v~*3<96$|-8rCGSNsnRz5XxMWbpB|R
vNd%=#=_%7t&`Rkk(~wA+63Toc^pj_wdG48eTDp7PjVUw-xllGd&g}mJE;SV=

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 288229c0..de30be59 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -525,7 +525,7 @@ type PricingModel int32
 const (
 	PricingModel_PRICING_MODEL_UNSPECIFIED PricingModel = 0 // unset — zero allowed on WellKnownManifest.pricing_models_supported (capability list); rejected (not_in:[0]) as the Pricing.model discriminator (omission cannot default to FREE)
 	PricingModel_PRICING_MODEL_FREE        PricingModel = 1 // no charge; rate must be 0 (state FREE explicitly — absent Pricing is not free)
-	PricingModel_PRICING_MODEL_PER_UNIT    PricingModel = 2 // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: an offer carries a positive estimated_quantity, and settlement follows the rule on Pricing
+	PricingModel_PRICING_MODEL_PER_UNIT    PricingModel = 2 // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: settlement follows the rule on Pricing; an estimated_quantity is optional, and positive when an offer states it
 	PricingModel_PRICING_MODEL_FLAT        PricingModel = 3 // one-time flat fee; rate is the total, no unit
 )
 
@@ -1960,8 +1960,10 @@ func (RetrievalAuthFailureReason) EnumDescriptor() ([]byte, []int) {
 // because its consumed_quantity differs from the offer's estimate, above or
 // below, and an Exchange MUST NOT refuse a report for that. A quantity below the
 // estimate is charged as consumed and a quantity above the ceiling is held for
-// dispute (the settlement rule on Pricing); neither is MALFORMED. A quantity far
-// from the estimate is analysed out of band, never by refusing the report.
+// dispute (the settlement rule on Pricing); neither is MALFORMED. A report
+// against an offer that states no estimate is charged as consumed, whatever
+// the quantity. A quantity far from the estimate is analysed out of band,
+// never by refusing the report.
 type UsageReportRejectionReason int32
 
 const (
@@ -2717,16 +2719,19 @@ type Offer struct {
 	// offers, one per term — never one offer with a "headline" picked among them.
 	//
 	// It derives from exactly one catalog term: the term's pricing as the
-	// publisher declared it (ResourceEntry.terms), with the Exchange's estimate
-	// added on a metered offer. Each offer derives from one term, and the offer
-	// carries no second copy, so the offer's price and its term's price cannot
-	// disagree.
+	// publisher declared it (ResourceEntry.terms). Each offer derives from one
+	// term, and the offer carries no second copy, so the offer's price and its
+	// term's price cannot disagree.
 	//
-	// On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:
-	// the estimate, the rate and the tolerance a metered purchase settles on are
-	// read from here (see Pricing and the offer.metered.requires_estimate rule
-	// above). An Exchange projecting a term carries the term's
-	// estimate_tolerance_bps here unchanged.
+	// On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a
+	// metered purchase settles on are read from here (see Pricing). The
+	// estimate is optional. When the publisher states one — on the term's own
+	// pricing, or once for the resource on ResourceEntry.estimated_quantity —
+	// the Exchange carries it here as estimated_quantity, the term's own
+	// estimate taking precedence. When the publisher states none, the offer
+	// may carry none, and then a usage report settles with no ceiling. An
+	// Exchange projecting a term carries the term's estimate_tolerance_bps here
+	// unchanged.
 	Pricing *Pricing `protobuf:"bytes,3,opt,name=pricing,proto3" json:"pricing,omitempty"`
 	// How resource will be delivered.
 	DeliveryMethod DeliveryMethod `protobuf:"varint,4,opt,name=delivery_method,json=deliveryMethod,proto3,enum=fora.v1.DeliveryMethod" json:"delivery_method,omitempty"`
@@ -3924,10 +3929,11 @@ func (x *Obligation) GetDetail() string {
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
-//   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance
-//     a usage report settles within (default 10%); no other model may carry
-//     it. The estimate itself is required on the offer, not on the pushed
-//     term — see Pricing.estimated_quantity.
+//   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state
+//     Pricing.estimate_tolerance_bps, the tolerance a usage report settles
+//     within when an estimate is stated (default 10%); no other model may
+//     carry a tolerance. Neither is required, on the pushed term or on the
+//     offer it projects to — see Pricing.estimated_quantity.
 //   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A
 //     REFERENCE_ONLY term that references no document is meaningless → reject
 //     at ingest.
@@ -4215,18 +4221,25 @@ func (x *Preview) GetSize() string {
 // license_duration_months, unit, metering, estimate_tolerance_bps.
 //
 // METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit
-// consumed, and the quantity consumed is known only after use. Three numbers
-// on the offer's `pricing` fix what a metered purchase can cost, and the
-// Exchange's offer signature covers all three, so the agent's acceptance of
+// consumed, and the quantity consumed is known only after use. Up to three
+// numbers on the offer's `pricing` fix what a metered purchase can cost, and
+// the Exchange's offer signature covers them, so the agent's acceptance of
 // the offer is its consent to them:
 //
-//	E = estimated_quantity      the estimate, in `unit`; REQUIRED on every
-//	                            metered offer and positive (see Offer)
 //	R = rate                    the price of one `unit`
+//	E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and
+//	                            positive when stated (see Offer)
 //	T = estimate_tolerance_bps  the tolerance on the estimate, in basis points
 //	                            of E; 1000 (10%) when the term states none
 //
-// At purchase, the agent accepts E × R: that is the amount
+// WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and
+// the usage report settles on the reported Usage.consumed_quantity C at
+// C × R, whatever C is: nothing is held, because there is no ceiling to hold
+// anything above. Nothing in such an offer bounds what the purchase is
+// charged, and T has nothing to widen.
+//
+// WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the
+// agent accepts E × R: that is the amount
 // TransactionResultItem.cost carries for a metered item, and the amount the
 // Exchange authorizes. When the usage report arrives, the transaction settles
 // on the reported Usage.consumed_quantity C against the ceiling
@@ -4250,8 +4263,10 @@ func (x *Preview) GetSize() string {
 // cap.
 //
 // The report that settles is the one UsageReport a transaction accepts. A
-// metered price whose metering is PRICING_METERING_NONE has no report, so E ×
-// R charged at purchase is final. Settlement reads the offer's own `pricing`
+// metered price whose metering is PRICING_METERING_NONE has no report, so
+// what is charged at purchase is final: E × R when the price states an
+// estimate. This version does not say what such a price charges when it
+// states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`
 // (Offer.pricing) — the offer's one price, which execute charges — and never
 // a value the report carries.
 type Pricing struct {
@@ -4273,17 +4288,20 @@ type Pricing struct {
 	// For text: token count. For video: duration in seconds.
 	// For documents: page count. For data: record count.
 	//
-	// REQUIRED and positive on every metered offer — an Offer whose pricing is
-	// PER_UNIT (see Offer). It is E in the settlement rule above: the
-	// agent accepts E × rate at purchase, and the estimate with
-	// estimate_tolerance_bps fixes the ceiling a usage report settles against.
-	// Without it a metered offer has no amount to accept and no ceiling, so an
-	// agent refuses one that lacks it. A non-metered price does not need one.
+	// OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.
+	// It is E in the settlement rule above. When a metered offer states it, it
+	// is positive (the offer.metered.estimate_positive rule): the agent accepts
+	// E × rate at purchase, and the estimate with estimate_tolerance_bps fixes
+	// the ceiling a usage report settles against. When a metered offer states
+	// none, there is no ceiling: the agent accepts the rate, and the usage report
+	// settles at the consumed quantity × rate. A PER_UNIT price may state a rate
+	// with or without an estimate; whether to state one is the publisher's
+	// decision, and nothing requires it.
 	//
-	// On a LicenseTerm a publisher pushes, the estimate is optional: it describes
-	// the resource rather than the arrangement, and a publisher may state it once
-	// on ResourceEntry.estimated_quantity instead. An Exchange that cannot state
-	// a positive estimate for a PER_UNIT term emits no offer for that term.
+	// The estimate describes the resource rather than the arrangement, so a
+	// publisher may state it once on ResourceEntry.estimated_quantity instead of
+	// on each term. An estimate the publisher states either way is carried onto
+	// the offer's pricing (see Offer.pricing).
 	EstimatedQuantity *int32 `protobuf:"varint,5,opt,name=estimated_quantity,json=estimatedQuantity,proto3,oneof" json:"estimated_quantity,omitempty"`
 	// License duration in months. How long the granted access remains valid.
 	LicenseDurationMonths *int32 `protobuf:"varint,7,opt,name=license_duration_months,json=licenseDurationMonths,proto3,oneof" json:"license_duration_months,omitempty"`
@@ -4306,7 +4324,8 @@ type Pricing struct {
 	// 10%, 0 is none. It is T in the settlement rule above. A usage report whose
 	// consumed quantity is within estimated_quantity × (10000 + T) / 10000 is
 	// charged in full; anything above that ceiling is held for dispute and never
-	// charged automatically.
+	// charged automatically. It applies only when the price states an estimate:
+	// without one there is no ceiling for it to widen.
 	//
 	// Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no
 	// tolerance, the estimate is the ceiling — stays distinct from "the default".
@@ -5579,11 +5598,13 @@ type TransactionResultItem struct {
 	BillingId string `protobuf:"bytes,3,opt,name=billing_id,json=billingId,proto3" json:"billing_id,omitempty"`
 	// Resource title echoed from the Offer.
 	ResourceTitle *string `protobuf:"bytes,4,opt,name=resource_title,json=resourceTitle,proto3,oneof" json:"resource_title,omitempty"`
-	// Cost for this item. For a metered (PER_UNIT) item this is the amount the
-	// agent accepted at purchase: the offer's estimated_quantity × rate. It is
-	// not the final charge when a usage report follows; the report settles the
-	// transaction at min(consumed, ceiling) × rate, holding any excess above the
-	// ceiling for dispute (see Pricing).
+	// Cost for this item. For a metered (PER_UNIT) item whose offer states an
+	// estimate, this is the amount the agent accepted at purchase: the offer's
+	// estimated_quantity × rate. It is not the final charge when a usage report
+	// follows; the report settles the transaction at min(consumed, ceiling) ×
+	// rate, holding any excess above the ceiling for dispute (see Pricing). When
+	// the offer states no estimate, no amount is fixed at purchase: the agent
+	// accepted the rate, and the report settles the charge at consumed × rate.
 	Cost *Cost `protobuf:"bytes,5,opt,name=cost,proto3" json:"cost,omitempty"`
 	// If under subscription, no per-request charge.
 	SubscriptionId *string `protobuf:"bytes,6,opt,name=subscription_id,json=subscriptionId,proto3,oneof" json:"subscription_id,omitempty"`
@@ -6604,10 +6625,12 @@ func (x *RefreshCatalogResponse) GetStarted() bool {
 // ReportingObligation — Requirements attached to a delivery.
 //
 // For a metered (PER_UNIT) purchase the report is also the settlement: its
-// Usage.consumed_quantity is charged at the offer's rate up to the ceiling
-// estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any
-// quantity above the ceiling is held for dispute, never charged automatically
-// (the rule is stated once, on Pricing). An honest report of a quantity that
+// Usage.consumed_quantity is charged at the offer's rate. When the offer
+// states an estimate, the charge stops at the ceiling estimated_quantity ×
+// (10000 + estimate_tolerance_bps) / 10000, and any quantity above the
+// ceiling is held for dispute, never charged automatically; when it states
+// none, the whole consumed quantity is charged (the rule is stated once, on
+// Pricing). An honest report of a quantity that
 // differs from the estimate, above or below, is a valid report and is never
 // refused for that difference.
 type ReportingObligation struct {
@@ -6712,12 +6735,14 @@ func (x *ReportingObligation) GetExtCritical() []string {
 // Failure to report may result in the Exchange blocking subsequent access.
 //
 // For a metered (PER_UNIT) transaction the report settles the purchase. With
-// E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when
-// absent), R its rate and C this report's Usage.consumed_quantity, the ceiling
-// is Q = E × (10000 + T) / 10000 and:
-//   - C at or below Q (including C below E) is charged C × R;
-//   - C above Q is charged Q × R, and the excess (C − Q) × R is held for
-//     dispute and never charged automatically.
+// R the offer's rate and C this report's Usage.consumed_quantity:
+//   - when the offer states no estimate, there is no ceiling: C is charged
+//     C × R and nothing is held;
+//   - when it states an estimate E, with T its estimate_tolerance_bps (1000
+//     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below
+//     Q (including C below E) is charged C × R, and C above Q is charged
+//     Q × R, the excess (C − Q) × R held for dispute and never charged
+//     automatically.
 //
 // The full rule is on Pricing. The Exchange accepts such a report: a consumed
 // quantity that differs from the estimate is never a reason to refuse it.
@@ -6945,9 +6970,11 @@ type Usage struct {
 	// For text: tokens consumed. For video: seconds watched. For data: records accessed.
 	//
 	// For a metered (PER_UNIT) transaction this is C in the settlement rule on
-	// Pricing: it is charged at the offer's rate up to the ceiling the offer's
-	// estimated_quantity and estimate_tolerance_bps fix, and the quantity above
-	// that ceiling is held for dispute. The agent reports what it consumed, not
+	// Pricing: it is charged at the offer's rate. When the offer states an
+	// estimate, the charge stops at the ceiling the offer's estimated_quantity
+	// and estimate_tolerance_bps fix, and the quantity above that ceiling is
+	// held for dispute; when it states none, all of it is charged. The agent
+	// reports what it consumed, not
 	// what it estimated: an Exchange MUST NOT refuse a report because this
 	// differs from the estimate, in either direction, and MUST NOT charge a
 	// quantity above the ceiling without a dispute resolving it.
@@ -7116,8 +7143,8 @@ func (x *UsageAsset) GetPackageId() string {
 // plain success with a report_id: the report is accepted in full, and the
 // excess is held rather than refused. The response carries no amounts because
 // the settlement is a pure function of values the agent already holds — the
-// signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the
-// consumed quantity it reported — so the agent derives the charge, the ceiling
+// signed offer's rate, and its estimated_quantity and estimate_tolerance_bps
+// when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling
 // and the held excess exactly, with no figure from the Exchange to trust or
 // reconcile. The report_id is what identifies the held excess: it is the
 // reference any dispute over that excess carries (see DisputeRequest).
@@ -10851,7 +10878,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x04unit\x18\x06 \x01(\tH\x01R\x04unit\x88\x01\x01B\f\n" +
 	"\n" +
 	"_resets_atB\a\n" +
-	"\x05_unit\"\xdb\f\n" +
+	"\x05_unit\"\xe5\f\n" +
 	"\x05Offer\x12\x19\n" +
 	"\boffer_id\x18\x01 \x01(\tR\aofferId\x12\x19\n" +
 	"\x05title\x18\x02 \x01(\tH\x00R\x05title\x88\x01\x01\x12*\n" +
@@ -10875,9 +10902,9 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x05terms\x18\x13 \x03(\v2\x14.fora.v1.LicenseTermB\n" +
 	"\xbaH\a\x92\x01\x04\b\x01\x10\x01R\x05terms\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
-	"\fext_critical\x18Z \x03(\tR\vextCritical:\x97\x03\xbaH\x93\x03\x1a\x8a\x01\n" +
-	"\x19offer.terms.pricing_unset\x12Ian offer's term must carry no pricing; the offer's price is Offer.pricing\x1a\"this.terms.all(t, !has(t.pricing))\x1a\x83\x02\n" +
-	"\x1foffer.metered.requires_estimate\x12Ka metered (PER_UNIT) offer must carry a positive pricing.estimated_quantity\x1a\x92\x01this.pricing.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)B\b\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical:\xa1\x03\xbaH\x9d\x03\x1a\x8a\x01\n" +
+	"\x19offer.terms.pricing_unset\x12Ian offer's term must carry no pricing; the offer's price is Offer.pricing\x1a\"this.terms.all(t, !has(t.pricing))\x1a\x8d\x02\n" +
+	"\x1foffer.metered.estimate_positive\x12Va metered (PER_UNIT) offer's pricing.estimated_quantity, when stated, must be positive\x1a\x91\x01this.pricing.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || !has(this.pricing.estimated_quantity) || this.pricing.estimated_quantity > 0B\b\n" +
 	"\x06_titleB\f\n" +
 	"\n" +
 	"_reportingB\r\n" +
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index d3f655d2..45d7c4c6 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -287,7 +287,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -523,7 +523,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
+          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index c6191e8a..b815dfe9 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -296,7 +296,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -537,7 +537,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
+          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index b30bc66d..b643aea3 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -254,7 +254,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -433,7 +433,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -444,11 +444,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -578,7 +578,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index 6baa9b6f..55ccec67 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -258,7 +258,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -440,7 +440,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -451,11 +451,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -587,7 +587,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index a2265b9a..854fe8e7 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -92,7 +92,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -103,11 +103,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -296,7 +296,7 @@
   },
   "$id": "fora.v1.LicenseTerm.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index ead49a20..cfcac91a 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -95,7 +95,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -106,11 +106,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -302,7 +302,7 @@
   "$id": "fora.v1.LicenseTerm.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index 25613e4e..954300d0 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -205,7 +205,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -216,11 +216,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -350,7 +350,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -714,7 +714,7 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
       "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index 14b89086..e1fee7c6 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -210,7 +210,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -221,11 +221,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -357,7 +357,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -726,7 +726,7 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
       "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index ae61c499..1f129499 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -254,7 +254,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -344,7 +344,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -355,11 +355,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -489,7 +489,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index b8d2bb2e..6db211f9 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -258,7 +258,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -350,7 +350,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -361,11 +361,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -497,7 +497,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.json b/gen/jsonschema/fora.v1.Pricing.schema.json
index d3519774..5fdb23b2 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.Pricing.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
   "properties": {
     "currency": {
       "default": "",
@@ -12,11 +12,11 @@
       "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
       "maximum": 10000,
       "minimum": 0,
-      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
       "type": "integer"
     },
     "estimated_quantity": {
-      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+      "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.strict.json b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
index 56c1cf50..ad3de9f7 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.Pricing.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
   "properties": {
     "currency": {
       "default": "",
@@ -13,11 +13,11 @@
       "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
       "maximum": 10000,
       "minimum": 0,
-      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
       "type": "integer"
     },
     "estimated_quantity": {
-      "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+      "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 9e1869dd..02e2c040 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -166,7 +166,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -177,11 +177,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 7afbc8de..9f41d3c9 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -170,7 +170,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -181,11 +181,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
index f337e202..3be1275c 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.ReportingObligation.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
   "properties": {
     "endpoint": {
       "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
index 4efc4e9c..e400c07b 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.ReportingObligation.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
   "properties": {
     "endpoint": {
       "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index 9004c2d4..d18d262d 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -166,7 +166,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -177,11 +177,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index 14ca1add..5dead216 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -170,7 +170,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -181,11 +181,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index 2b3b95bc..13083b15 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -254,7 +254,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -433,7 +433,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -444,11 +444,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -609,7 +609,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index f330ecb6..315c8f30 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -258,7 +258,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -440,7 +440,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -451,11 +451,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -619,7 +619,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index 45f51073..db5560c4 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -51,7 +51,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -274,7 +274,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -364,7 +364,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -375,11 +375,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -509,7 +509,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index c82c30ad..7e508f78 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -54,7 +54,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -279,7 +279,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -371,7 +371,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -382,11 +382,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -518,7 +518,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 1700c0d9..c9c51962 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -207,7 +207,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -430,7 +430,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -520,7 +520,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -531,11 +531,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -665,7 +665,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 0d2df064..22575509 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -214,7 +214,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -439,7 +439,7 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.",
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
           "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
@@ -531,7 +531,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
@@ -542,11 +542,11 @@
           "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
           "maximum": 10000,
           "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.",
+          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
           "type": "integer"
         },
         "estimated_quantity": {
-          "description": "REQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -678,7 +678,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 3b9cdb8c..076cf05a 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -251,7 +251,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -487,7 +487,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
+          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index d15cba6a..721be8b0 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -259,7 +259,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -500,7 +500,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
+          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 104592e4..82e6c92f 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -251,7 +251,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -505,7 +505,7 @@
     },
     "cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
+      "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
     },
     "delivery_method": {
       "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index 8e5a49f3..2b44bbfa 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -259,7 +259,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -519,7 +519,7 @@
     },
     "cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing)."
+      "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
     },
     "delivery_method": {
       "anyOf": [
diff --git a/gen/jsonschema/fora.v1.Usage.schema.json b/gen/jsonschema/fora.v1.Usage.schema.json
index 7202a2de..25f9c662 100644
--- a/gen/jsonschema/fora.v1.Usage.schema.json
+++ b/gen/jsonschema/fora.v1.Usage.schema.json
@@ -52,7 +52,7 @@
     },
     "consumed_quantity": {
       "default": 0,
-      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
diff --git a/gen/jsonschema/fora.v1.Usage.schema.strict.json b/gen/jsonschema/fora.v1.Usage.schema.strict.json
index daa07a39..9102abad 100644
--- a/gen/jsonschema/fora.v1.Usage.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Usage.schema.strict.json
@@ -54,7 +54,7 @@
     },
     "consumed_quantity": {
       "default": 0,
-      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
index f2fc39fc..9eb09622 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -50,7 +50,7 @@
         },
         "consumed_quantity": {
           "default": 0,
-          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
@@ -107,7 +107,7 @@
   },
   "$id": "fora.v1.UsageReport.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n R the offer's rate and C this report's Usage.consumed_quantity:\n   - when the offer states no estimate, there is no ceiling: C is charged\n     C × R and nothing is held;\n   - when it states an estimate E, with T its estimate_tolerance_bps (1000\n     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below\n     Q (including C below E) is charged C × R, and C above Q is charged\n     Q × R, the excess (C − Q) × R held for dispute and never charged\n     automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
index 134b7b5e..c930253e 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -52,7 +52,7 @@
         },
         "consumed_quantity": {
           "default": 0,
-          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
@@ -111,7 +111,7 @@
   "$id": "fora.v1.UsageReport.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n R the offer's rate and C this report's Usage.consumed_quantity:\n   - when the offer states no estimate, there is no ceiling: C is charged\n     C × R and nothing is held;\n   - when it states an estimate E, with T its estimate_tolerance_bps (1000\n     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below\n     Q (including C below E) is charged C × R, and C above Q is charged\n     Q × R, the excess (C − Q) × R held for dispute and never charged\n     automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
index 1f04f70c..4a0aec3b 100644
--- a/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.UsageReportResponse.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the\n consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
+  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's rate, and its estimated_quantity and estimate_tolerance_bps\n when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
   "properties": {
     "ext": {
       "description": "Extension point",
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
index ce634c0e..fce2bab7 100644
--- a/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.UsageReportResponse.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the\n consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
+  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's rate, and its estimated_quantity and estimate_tolerance_bps\n when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
   "properties": {
     "ext": {
       "description": "Extension point",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 442b65f2..0238c098 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1312,11 +1312,11 @@ class Pricing(WireModel):
     )
     estimate_tolerance_bps: conint(ge=0, le=10000) | None = Field(
         None,
-        description='Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from "the default".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer\'s pricing.',
+        description='Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from "the default".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer\'s pricing.',
     )
     estimated_quantity: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description='Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.',
+        description="Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
     )
     license_duration_months: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
@@ -1561,7 +1561,7 @@ class Usage(WireModel):
     )
     consumed_quantity: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description="REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+        description="REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
     )
     consumed_unit: (
         constr(
@@ -1905,7 +1905,7 @@ class Offer(WireModel):
     )
     pricing: Pricing | None = Field(
         None,
-        description='The offer\'s price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term\'s price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.\n\nIt derives from exactly one catalog term: the term\'s pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange\'s estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer\'s price and its term\'s price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term\'s\n estimate_tolerance_bps here unchanged.',
+        description='The offer\'s price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term\'s price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.\n\nIt derives from exactly one catalog term: the term\'s pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer\'s price and its\n term\'s price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term\'s own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term\'s own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term\'s estimate_tolerance_bps here\n unchanged.',
     )
     reporting: ReportingObligation | None = Field(
         None, description='Post-usage reporting requirements for this offer.'
@@ -2166,7 +2166,7 @@ class TransactionResultItem(WireModel):
     )
     cost: Cost | None = Field(
         None,
-        description="Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).",
+        description="Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.",
     )
     delivery_method: (
         constr(pattern=r'^DELIVERY_METHOD_UNSPECIFIED$')
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index ca1cac0c..ba2365c5 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -50,7 +50,7 @@ export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","D
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -92,7 +92,7 @@ export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datet
 
 export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
 
-export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
+export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
 
 export const ObligationSchema = wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies."));
 
@@ -100,15 +100,15 @@ export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","
 
 export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
-export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Three numbers\n on the offer's `pricing` fix what a metered purchase can cost, and the\n Exchange's offer signature covers all three, so the agent's acceptance of\n the offer is its consent to them:\n\n   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every\n                               metered offer and positive (see Offer)\n   R = rate                    the price of one `unit`\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n At purchase, the agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so E ×\n R charged at purchase is final. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries."));
+export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries."));
 
 export const PricingMeteringSchema = wire(z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]));
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
@@ -144,7 +144,7 @@ export const RemoveResourcesRequestSchema = wire(z.object({ "exchange": z.string
 
 export const RemoveResourcesResponseSchema = wire(z.object({ "removed": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries removed").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
-export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nFor a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate up to the ceiling\n estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any\n quantity above the ceiling is held for dispute, never charged automatically\n (the rule is stated once, on Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference."));
+export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nFor a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference."));
 
 export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
 
@@ -162,7 +162,7 @@ export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOL
 
 export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
 
 export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
 
@@ -170,7 +170,7 @@ export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC
 
 export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
 export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
@@ -198,27 +198,27 @@ export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TER
 
 export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms), with the Exchange's estimate\n added on a metered offer. Each offer derives from one term, and the offer\n carries no second copy, so the offer's price and its term's price cannot\n disagree.\n\n On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:\n the estimate, the rate and the tolerance a metered purchase settles on are\n read from here (see Pricing and the offer.metered.requires_estimate rule\n above). An Exchange projecting a term carries the term's\n estimate_tolerance_bps here unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nREQUIRED and positive on every metered offer — an Offer whose pricing is\n PER_UNIT (see Offer). It is E in the settlement rule above: the\n agent accepts E × rate at purchase, and the estimate with\n estimate_tolerance_bps fixes the ceiling a usage report settles against.\n Without it a metered offer has no amount to accept and no ceiling, so an\n agent refuses one that lacks it. A non-metered price does not need one.\n\n On a LicenseTerm a publisher pushes, the estimate is optional: it describes\n the resource rather than the arrangement, and a publisher may state it once\n on ResourceEntry.estimated_quantity instead. An Exchange that cannot state\n a positive estimate for a PER_UNIT term emits no offer for that term.").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance\n     a usage report settles within (default 10%); no other model may carry\n     it. The estimate itself is required on the offer, not on the pushed\n     term — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the amount the\n agent accepted at purchase: the offer's estimated_quantity × rate. It is\n not the final charge when a usage report follows; the report settles the\n transaction at min(consumed, ceiling) × rate, holding any excess above the\n ceiling for dispute (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
 export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
-export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
+export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
 export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report."));
 
-export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate up to the ceiling the offer's\n estimated_quantity and estimate_tolerance_bps fix, and the quantity above\n that ceiling is held for dispute. The agent reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when\n absent), R its rate and C this report's Usage.consumed_quantity, the ceiling\n is Q = E × (10000 + T) / 10000 and:\n   - C at or below Q (including C below E) is charged C × R;\n   - C above Q is charged Q × R, and the excess (C − Q) × R is held for\n     dispute and never charged automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
+export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n R the offer's rate and C this report's Usage.consumed_quantity:\n   - when the offer states no estimate, there is no ceiling: C is charged\n     C × R and nothing is held;\n   - when it states an estimate E, with T its estimate_tolerance_bps (1000\n     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below\n     Q (including C below E) is charged C × R, and C above Q is charged\n     Q × R, the excess (C − Q) × R held for dispute and never charged\n     automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
 
 export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
 
 export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]));
 
-export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report.\n\nWhen part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the\n consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest)."));
+export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report.\n\nWhen part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's rate, and its estimated_quantity and estimate_tolerance_bps\n when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest)."));
 
 export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index f961f2fa..0c422912 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -740,22 +740,23 @@ message Offer {
     expression: "this.terms.all(t, !has(t.pricing))"
   };
 
-  // A metered offer carries its estimate. An offer is metered when its
-  // `pricing` is PER_UNIT, and then `pricing` MUST carry a positive
-  // estimated_quantity: the agent accepts estimate × rate at purchase and a
-  // usage report settles against a ceiling derived from the estimate (see
-  // Pricing), so a metered offer without one has neither. A non-metered offer
-  // needs no estimate. The rule reads `pricing` only, because `pricing` is the
-  // offer's one price (see offer.terms.pricing_unset above).
+  // A metered offer MAY carry an estimate. An offer is metered when its
+  // `pricing` is PER_UNIT, and its `pricing` states a rate with or without an
+  // estimated_quantity. Whether to state one is the publisher's decision, and
+  // nothing requires it. With an estimate, the agent accepts estimate × rate at
+  // purchase and a usage report settles against a ceiling derived from the
+  // estimate. Without one there is no ceiling: the agent accepts the rate, and
+  // a usage report settles at the consumed quantity × rate (see Pricing).
   //
-  // This is an offer rule, not a Pricing rule, on purpose: a publisher pushes
-  // PER_UNIT terms without an estimate (the estimate describes the resource and
-  // may ride on ResourceEntry.estimated_quantity), so the requirement binds
-  // where the Exchange projects a term onto an offer.
+  // An estimate that is stated is positive: a zero or negative estimate would
+  // fix a ceiling of nothing or less. The rule reads `pricing` only, because
+  // `pricing` is the offer's one price (see offer.terms.pricing_unset above).
+  // It is an offer rule, not a Pricing rule, so a term a publisher pushes is
+  // not bound by it.
   option (buf.validate.message).cel = {
-    id: "offer.metered.requires_estimate"
-    message: "a metered (PER_UNIT) offer must carry a positive pricing.estimated_quantity"
-    expression: "this.pricing.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)"
+    id: "offer.metered.estimate_positive"
+    message: "a metered (PER_UNIT) offer's pricing.estimated_quantity, when stated, must be positive"
+    expression: "this.pricing.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || !has(this.pricing.estimated_quantity) || this.pricing.estimated_quantity > 0"
   };
 
   // Unique identifier for this offer, assigned by the Exchange.
@@ -777,16 +778,19 @@ message Offer {
   // offers, one per term — never one offer with a "headline" picked among them.
   //
   // It derives from exactly one catalog term: the term's pricing as the
-  // publisher declared it (ResourceEntry.terms), with the Exchange's estimate
-  // added on a metered offer. Each offer derives from one term, and the offer
-  // carries no second copy, so the offer's price and its term's price cannot
-  // disagree.
+  // publisher declared it (ResourceEntry.terms). Each offer derives from one
+  // term, and the offer carries no second copy, so the offer's price and its
+  // term's price cannot disagree.
   //
-  // On a metered (PER_UNIT) offer it MUST carry a positive estimated_quantity:
-  // the estimate, the rate and the tolerance a metered purchase settles on are
-  // read from here (see Pricing and the offer.metered.requires_estimate rule
-  // above). An Exchange projecting a term carries the term's
-  // estimate_tolerance_bps here unchanged.
+  // On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a
+  // metered purchase settles on are read from here (see Pricing). The
+  // estimate is optional. When the publisher states one — on the term's own
+  // pricing, or once for the resource on ResourceEntry.estimated_quantity —
+  // the Exchange carries it here as estimated_quantity, the term's own
+  // estimate taking precedence. When the publisher states none, the offer
+  // may carry none, and then a usage report settles with no ceiling. An
+  // Exchange projecting a term carries the term's estimate_tolerance_bps here
+  // unchanged.
   Pricing pricing = 3;
 
   // How resource will be delivered.
@@ -1651,10 +1655,11 @@ message Obligation {
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
-//   - A PER_UNIT term MAY state Pricing.estimate_tolerance_bps, the tolerance
-//     a usage report settles within (default 10%); no other model may carry
-//     it. The estimate itself is required on the offer, not on the pushed
-//     term — see Pricing.estimated_quantity.
+//   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state
+//     Pricing.estimate_tolerance_bps, the tolerance a usage report settles
+//     within when an estimate is stated (default 10%); no other model may
+//     carry a tolerance. Neither is required, on the pushed term or on the
+//     offer it projects to — see Pricing.estimated_quantity.
 //   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A
 //     REFERENCE_ONLY term that references no document is meaningless → reject
 //     at ingest.
@@ -1819,18 +1824,25 @@ message Preview {
 // license_duration_months, unit, metering, estimate_tolerance_bps.
 //
 // METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit
-// consumed, and the quantity consumed is known only after use. Three numbers
-// on the offer's `pricing` fix what a metered purchase can cost, and the
-// Exchange's offer signature covers all three, so the agent's acceptance of
+// consumed, and the quantity consumed is known only after use. Up to three
+// numbers on the offer's `pricing` fix what a metered purchase can cost, and
+// the Exchange's offer signature covers them, so the agent's acceptance of
 // the offer is its consent to them:
 //
-//   E = estimated_quantity      the estimate, in `unit`; REQUIRED on every
-//                               metered offer and positive (see Offer)
 //   R = rate                    the price of one `unit`
+//   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and
+//                               positive when stated (see Offer)
 //   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points
 //                               of E; 1000 (10%) when the term states none
 //
-// At purchase, the agent accepts E × R: that is the amount
+// WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and
+// the usage report settles on the reported Usage.consumed_quantity C at
+// C × R, whatever C is: nothing is held, because there is no ceiling to hold
+// anything above. Nothing in such an offer bounds what the purchase is
+// charged, and T has nothing to widen.
+//
+// WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the
+// agent accepts E × R: that is the amount
 // TransactionResultItem.cost carries for a metered item, and the amount the
 // Exchange authorizes. When the usage report arrives, the transaction settles
 // on the reported Usage.consumed_quantity C against the ceiling
@@ -1854,8 +1866,10 @@ message Preview {
 // cap.
 //
 // The report that settles is the one UsageReport a transaction accepts. A
-// metered price whose metering is PRICING_METERING_NONE has no report, so E ×
-// R charged at purchase is final. Settlement reads the offer's own `pricing`
+// metered price whose metering is PRICING_METERING_NONE has no report, so
+// what is charged at purchase is final: E × R when the price states an
+// estimate. This version does not say what such a price charges when it
+// states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`
 // (Offer.pricing) — the offer's one price, which execute charges — and never
 // a value the report carries.
 message Pricing {
@@ -1906,17 +1920,20 @@ message Pricing {
   // For text: token count. For video: duration in seconds.
   // For documents: page count. For data: record count.
   //
-  // REQUIRED and positive on every metered offer — an Offer whose pricing is
-  // PER_UNIT (see Offer). It is E in the settlement rule above: the
-  // agent accepts E × rate at purchase, and the estimate with
-  // estimate_tolerance_bps fixes the ceiling a usage report settles against.
-  // Without it a metered offer has no amount to accept and no ceiling, so an
-  // agent refuses one that lacks it. A non-metered price does not need one.
+  // OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.
+  // It is E in the settlement rule above. When a metered offer states it, it
+  // is positive (the offer.metered.estimate_positive rule): the agent accepts
+  // E × rate at purchase, and the estimate with estimate_tolerance_bps fixes
+  // the ceiling a usage report settles against. When a metered offer states
+  // none, there is no ceiling: the agent accepts the rate, and the usage report
+  // settles at the consumed quantity × rate. A PER_UNIT price may state a rate
+  // with or without an estimate; whether to state one is the publisher's
+  // decision, and nothing requires it.
   //
-  // On a LicenseTerm a publisher pushes, the estimate is optional: it describes
-  // the resource rather than the arrangement, and a publisher may state it once
-  // on ResourceEntry.estimated_quantity instead. An Exchange that cannot state
-  // a positive estimate for a PER_UNIT term emits no offer for that term.
+  // The estimate describes the resource rather than the arrangement, so a
+  // publisher may state it once on ResourceEntry.estimated_quantity instead of
+  // on each term. An estimate the publisher states either way is carried onto
+  // the offer's pricing (see Offer.pricing).
   optional int32 estimated_quantity = 5;
 
   // License duration in months. How long the granted access remains valid.
@@ -1954,7 +1971,8 @@ message Pricing {
   // 10%, 0 is none. It is T in the settlement rule above. A usage report whose
   // consumed quantity is within estimated_quantity × (10000 + T) / 10000 is
   // charged in full; anything above that ceiling is held for dispute and never
-  // charged automatically.
+  // charged automatically. It applies only when the price states an estimate:
+  // without one there is no ceiling for it to widen.
   //
   // Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no
   // tolerance, the estimate is the ceiling — stays distinct from "the default".
@@ -1977,7 +1995,7 @@ message Pricing {
 enum PricingModel {
   PRICING_MODEL_UNSPECIFIED = 0;  // unset — zero allowed on WellKnownManifest.pricing_models_supported (capability list); rejected (not_in:[0]) as the Pricing.model discriminator (omission cannot default to FREE)
   PRICING_MODEL_FREE        = 1;  // no charge; rate must be 0 (state FREE explicitly — absent Pricing is not free)
-  PRICING_MODEL_PER_UNIT    = 2;  // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: an offer carries a positive estimated_quantity, and settlement follows the rule on Pricing
+  PRICING_MODEL_PER_UNIT    = 2;  // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: settlement follows the rule on Pricing; an estimated_quantity is optional, and positive when an offer states it
   PRICING_MODEL_FLAT        = 3;  // one-time flat fee; rate is the total, no unit
 }
 
@@ -2638,11 +2656,13 @@ message TransactionResultItem {
   // Resource title echoed from the Offer.
   optional string resource_title = 4;
 
-  // Cost for this item. For a metered (PER_UNIT) item this is the amount the
-  // agent accepted at purchase: the offer's estimated_quantity × rate. It is
-  // not the final charge when a usage report follows; the report settles the
-  // transaction at min(consumed, ceiling) × rate, holding any excess above the
-  // ceiling for dispute (see Pricing).
+  // Cost for this item. For a metered (PER_UNIT) item whose offer states an
+  // estimate, this is the amount the agent accepted at purchase: the offer's
+  // estimated_quantity × rate. It is not the final charge when a usage report
+  // follows; the report settles the transaction at min(consumed, ceiling) ×
+  // rate, holding any excess above the ceiling for dispute (see Pricing). When
+  // the offer states no estimate, no amount is fixed at purchase: the agent
+  // accepted the rate, and the report settles the charge at consumed × rate.
   Cost cost = 5;
 
   // If under subscription, no per-request charge.
@@ -3253,10 +3273,12 @@ message RefreshCatalogResponse {
 // ReportingObligation — Requirements attached to a delivery.
 //
 // For a metered (PER_UNIT) purchase the report is also the settlement: its
-// Usage.consumed_quantity is charged at the offer's rate up to the ceiling
-// estimated_quantity × (10000 + estimate_tolerance_bps) / 10000, and any
-// quantity above the ceiling is held for dispute, never charged automatically
-// (the rule is stated once, on Pricing). An honest report of a quantity that
+// Usage.consumed_quantity is charged at the offer's rate. When the offer
+// states an estimate, the charge stops at the ceiling estimated_quantity ×
+// (10000 + estimate_tolerance_bps) / 10000, and any quantity above the
+// ceiling is held for dispute, never charged automatically; when it states
+// none, the whole consumed quantity is charged (the rule is stated once, on
+// Pricing). An honest report of a quantity that
 // differs from the estimate, above or below, is a valid report and is never
 // refused for that difference.
 message ReportingObligation {
@@ -3291,12 +3313,14 @@ message ReportingObligation {
 // Failure to report may result in the Exchange blocking subsequent access.
 //
 // For a metered (PER_UNIT) transaction the report settles the purchase. With
-// E the offer's estimated_quantity, T its estimate_tolerance_bps (1000 when
-// absent), R its rate and C this report's Usage.consumed_quantity, the ceiling
-// is Q = E × (10000 + T) / 10000 and:
-//   - C at or below Q (including C below E) is charged C × R;
-//   - C above Q is charged Q × R, and the excess (C − Q) × R is held for
-//     dispute and never charged automatically.
+// R the offer's rate and C this report's Usage.consumed_quantity:
+//   - when the offer states no estimate, there is no ceiling: C is charged
+//     C × R and nothing is held;
+//   - when it states an estimate E, with T its estimate_tolerance_bps (1000
+//     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below
+//     Q (including C below E) is charged C × R, and C above Q is charged
+//     Q × R, the excess (C − Q) × R held for dispute and never charged
+//     automatically.
 // The full rule is on Pricing. The Exchange accepts such a report: a consumed
 // quantity that differs from the estimate is never a reason to refuse it.
 //
@@ -3392,9 +3416,11 @@ message Usage {
   // For text: tokens consumed. For video: seconds watched. For data: records accessed.
   //
   // For a metered (PER_UNIT) transaction this is C in the settlement rule on
-  // Pricing: it is charged at the offer's rate up to the ceiling the offer's
-  // estimated_quantity and estimate_tolerance_bps fix, and the quantity above
-  // that ceiling is held for dispute. The agent reports what it consumed, not
+  // Pricing: it is charged at the offer's rate. When the offer states an
+  // estimate, the charge stops at the ceiling the offer's estimated_quantity
+  // and estimate_tolerance_bps fix, and the quantity above that ceiling is
+  // held for dispute; when it states none, all of it is charged. The agent
+  // reports what it consumed, not
   // what it estimated: an Exchange MUST NOT refuse a report because this
   // differs from the estimate, in either direction, and MUST NOT charge a
   // quantity above the ceiling without a dispute resolving it.
@@ -3435,8 +3461,8 @@ message UsageAsset {
 // plain success with a report_id: the report is accepted in full, and the
 // excess is held rather than refused. The response carries no amounts because
 // the settlement is a pure function of values the agent already holds — the
-// signed offer's estimated_quantity, rate and estimate_tolerance_bps, and the
-// consumed quantity it reported — so the agent derives the charge, the ceiling
+// signed offer's rate, and its estimated_quantity and estimate_tolerance_bps
+// when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling
 // and the held excess exactly, with no figure from the Exchange to trust or
 // reconcile. The report_id is what identifies the held excess: it is the
 // reference any dispute over that excess carries (see DisputeRequest).
@@ -4311,7 +4337,8 @@ message ExchangeOutcome {
 //        → DisputeRequest (transaction_id + report_id) → DisputeResponse
 //
 // The same chain identifies the excess a metered report holds: the quantity
-// above the offer's ceiling (see Pricing) is held under the transaction_id and
+// above the offer's ceiling (see Pricing; only an offer that states an
+// estimate has one) is held under the transaction_id and
 // report_id, not charged, and stays uncharged unless dispute resolution
 // establishes that it is owed. This version defines no DisputeReason for it
 // and no filing by the publisher's side, so how a claim to the held excess is
@@ -5352,8 +5379,10 @@ message RetrievalAuthFailure {
 // because its consumed_quantity differs from the offer's estimate, above or
 // below, and an Exchange MUST NOT refuse a report for that. A quantity below the
 // estimate is charged as consumed and a quantity above the ceiling is held for
-// dispute (the settlement rule on Pricing); neither is MALFORMED. A quantity far
-// from the estimate is analysed out of band, never by refusing the report.
+// dispute (the settlement rule on Pricing); neither is MALFORMED. A report
+// against an offer that states no estimate is charged as consumed, whatever
+// the quantity. A quantity far from the estimate is analysed out of band,
+// never by refusing the report.
 enum UsageReportRejectionReason {
   USAGE_REPORT_REJECTION_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
   USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND = 1;     // transaction_id is unknown

From 8d3188cfcdb16083900ebe6cb24b2837a4adecdb Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 20:09:04 -0400
Subject: [PATCH 081/164] Settle a metered price without an estimate in the Go
 SDK

helpers.SettleMeteredUsage settles a price with no estimate at
consumed x rate and holds nothing. MeteredSettlement gains Estimated;
without an estimate AcceptedAmount, CeilingQuantity and CeilingAmount
are empty. MeteredSettlementCap now returns (amount, capped, err), and
capped is false for a price with no estimate, which has no ceiling.

ErrMeteredEstimateMissing becomes ErrMeteredEstimateNotPositive: a
stated estimate of zero or less is still refused, a missing one is
not. CheckMeteredEstimate applies the offer.metered.estimate_positive
rule, so core.Verifier verifies a metered offer with no estimate and
rejects one whose stated estimate is not positive.

The metered-settlement vectors drop the missing-estimate refusal and
gain five rows of a price with no estimate, among them a stated
tolerance that has nothing to widen and a tiny rate at the int32
quantity limit. The no-estimate rows record the accepted amount and the
ceiling as null. The offer-verify vector metered_missing_estimate is
renamed metered_without_estimate and now verifies. The client test
pins the three shapes through Discover.
---
 sdk/go/README.md                              |   9 +-
 sdk/go/connect/client_verify_test.go          |  32 ++--
 sdk/go/core/verifier.go                       |  15 +-
 sdk/go/helpers/gen_settlement_vectors_test.go |  77 +++++++--
 sdk/go/helpers/gen_vectors_test.go            |  18 ++-
 sdk/go/helpers/settlement.go                  | 152 +++++++++++-------
 sdk/go/helpers/settlement_test.go             |  12 +-
 .../testdata/metered-settlement-vectors.json  | 118 ++++++++++++--
 .../testdata/offer-verify-vectors.json        |   4 +-
 9 files changed, 310 insertions(+), 127 deletions(-)

diff --git a/sdk/go/README.md b/sdk/go/README.md
index aa5aec98..4eb28e49 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -84,14 +84,15 @@ rate, _ := helpers.ParseMoney(offer.GetPricing().GetRate()) // shopspring/decima
 wire, _ := helpers.FormatMoney(rate.Mul(decimal.NewFromInt(qty)))
 ```
 
-**Metered settlement** — a PER_UNIT offer carries an estimate, and a usage report
+**Metered settlement** — a PER_UNIT offer may carry an estimate. Without one there is
+no ceiling, and a usage report settles at consumed × rate. With one, the report
 settles within the price's tolerance (10% by default); the excess is held for
 dispute, never charged. Exact decimal, from the offer's own pricing:
 
 ```go
-capAmount, _ := helpers.MeteredSettlementCap(offer.GetPricing()) // the most charged without a dispute
-s, _ := helpers.SettleMeteredUsage(offer.GetPricing(), consumed) // s.ChargedAmount, s.HeldAmount, ...
-err := helpers.CheckMeteredEstimate(offer) // ErrMeteredEstimateMissing; core.Verifier rejects such an offer
+capAmount, capped, _ := helpers.MeteredSettlementCap(offer.GetPricing()) // the most charged without a dispute; capped is false without an estimate
+s, _ := helpers.SettleMeteredUsage(offer.GetPricing(), consumed) // s.ChargedAmount, s.HeldAmount, s.Estimated, ...
+err := helpers.CheckMeteredEstimate(offer) // ErrMeteredEstimateNotPositive for a stated estimate <= 0; core.Verifier rejects such an offer
 ```
 
 **One price per offer** — an offer's price is `Offer.pricing`, and the term it sells
diff --git a/sdk/go/connect/client_verify_test.go b/sdk/go/connect/client_verify_test.go
index 4541ab9b..10a4f13f 100644
--- a/sdk/go/connect/client_verify_test.go
+++ b/sdk/go/connect/client_verify_test.go
@@ -342,13 +342,14 @@ func TestDiscover_SortsVerifiedAndRejected(t *testing.T) {
 	}
 }
 
-// TestDiscover_RejectsMeteredOfferWithoutEstimate pins that a metered offer
-// lacking an estimate lands in Rejected even though the Exchange genuinely signed
-// it and it has not expired: without an estimate the agent has no amount to
-// accept and no ceiling for its usage report to settle against. The estimated
-// metered offer beside it verifies. Validation is off, the client default, so
-// the Verifier is the only gate the offer meets.
-func TestDiscover_RejectsMeteredOfferWithoutEstimate(t *testing.T) {
+// TestDiscover_MeteredOfferEstimateOptionalButPositive pins how the Verifier
+// treats a metered offer's estimate, for offers the Exchange genuinely signed
+// and that have not expired. An offer with an estimate verifies, and so does
+// one without: the estimate is optional, and without it the purchase settles
+// at consumed × rate with no ceiling. An offer that states a zero estimate
+// lands in Rejected, since a stated estimate is positive. Validation is off,
+// the client default, so the Verifier is the only gate the offers meet.
+func TestDiscover_MeteredOfferEstimateOptionalButPositive(t *testing.T) {
 	t.Parallel()
 	sig := newSigningFixture(t)
 	exPub, exPriv, err := ed25519.GenerateKey(nil)
@@ -358,6 +359,7 @@ func TestDiscover_RejectsMeteredOfferWithoutEstimate(t *testing.T) {
 	srv := newVerifyingServer(t, sig, newMemReplayStore(), []*forav1.Offer{
 		signedMeteredOffer(t, exPriv, "offer-estimated", proto.Int32(2500)),
 		signedMeteredOffer(t, exPriv, "offer-unestimated", nil),
+		signedMeteredOffer(t, exPriv, "offer-zero-estimate", proto.Int32(0)),
 	})
 	client := foraconnect.NewClient(srv.URL,
 		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
@@ -368,14 +370,18 @@ func TestDiscover_RejectsMeteredOfferWithoutEstimate(t *testing.T) {
 	if err != nil {
 		t.Fatalf("Discover: %v", err)
 	}
-	if len(res.Verified()) != 1 || res.Verified()[0].Offer().GetOfferId() != "offer-estimated" {
-		t.Fatalf("want only offer-estimated verified, got %d verified", len(res.Verified()))
+	verified := map[string]bool{}
+	for _, v := range res.Verified() {
+		verified[v.Offer().GetOfferId()] = true
 	}
-	if len(res.Rejected()) != 1 || res.Rejected()[0].Offer.GetOfferId() != "offer-unestimated" {
-		t.Fatalf("want only offer-unestimated rejected, got %d rejected", len(res.Rejected()))
+	if len(verified) != 2 || !verified["offer-estimated"] || !verified["offer-unestimated"] {
+		t.Fatalf("want offer-estimated and offer-unestimated verified, got %v", verified)
 	}
-	if !errors.Is(res.Rejected()[0].Reason, helpers.ErrMeteredEstimateMissing) {
-		t.Fatalf("rejected reason: want ErrMeteredEstimateMissing, got %v", res.Rejected()[0].Reason)
+	if len(res.Rejected()) != 1 || res.Rejected()[0].Offer.GetOfferId() != "offer-zero-estimate" {
+		t.Fatalf("want only offer-zero-estimate rejected, got %d rejected", len(res.Rejected()))
+	}
+	if !errors.Is(res.Rejected()[0].Reason, helpers.ErrMeteredEstimateNotPositive) {
+		t.Fatalf("rejected reason: want ErrMeteredEstimateNotPositive, got %v", res.Rejected()[0].Reason)
 	}
 }
 
diff --git a/sdk/go/core/verifier.go b/sdk/go/core/verifier.go
index 37bb63ae..f09eb45e 100644
--- a/sdk/go/core/verifier.go
+++ b/sdk/go/core/verifier.go
@@ -49,7 +49,7 @@ func (v VerifiedOffer) Offer() *forav1.Offer { return v.offer }
 
 // RejectedOffer is an offer the Verifier could NOT accept: the wrapped Offer plus
 // the Reason it failed (signature invalid, expired, no resolvable key, a metered
-// offer without an estimate). It is
+// offer whose stated estimate is not positive). It is
 // VISIBLE — the application learns which offers failed and why — but not directly
 // executable. Acting on it requires the explicit .Unsafe() escape.
 type RejectedOffer struct {
@@ -98,7 +98,9 @@ func NewVerifier(mode Mode, resolver helpers.KeyResolver, now func() time.Time)
 // verified against its resolved exchange key and its expiry — a failure of either
 // lands it in Rejected with the reason. An offer whose term carries pricing is
 // rejected too (helpers.ErrOfferTermPriced), and so is a metered offer that
-// carries no positive estimate (helpers.ErrMeteredEstimateMissing).
+// states an estimate of zero or less (helpers.ErrMeteredEstimateNotPositive). A
+// metered offer that states no estimate is not rejected for it: the estimate is
+// optional.
 func (v Verifier) Sort(ctx context.Context, offers []*forav1.Offer) Result {
 	res := Result{}
 	for _, off := range offers {
@@ -117,7 +119,7 @@ func (v Verifier) Sort(ctx context.Context, offers []*forav1.Offer) Result {
 
 // check verifies a single offer: resolve the exchange offer-signing key, verify the
 // signature, enforce the not-in-the-past expiry, require the offer's term to carry
-// no pricing, and require a metered offer to carry its estimate. Any step failing
+// no pricing, and require an estimate a metered offer states to be positive. Any step failing
 // rejects the offer (fail-closed) — including
 // an unresolvable key, so an offer the client cannot key is rejected under Strict
 // rather than trusted.
@@ -138,9 +140,10 @@ func (v Verifier) check(ctx context.Context, off *forav1.Offer) error {
 	if err := helpers.CheckOfferTermsUnpriced(off); err != nil {
 		return err
 	}
-	// A metered offer without an estimate has no amount to accept and no ceiling
-	// for its usage report to settle against (fora.proto Pricing). Wire
-	// validation refuses it too, but a Verifier also runs with validation off.
+	// A metered offer may state no estimate, but one it states is positive: a
+	// zero estimate would fix a ceiling of nothing (fora.proto Offer, the
+	// offer.metered.estimate_positive rule). Wire validation refuses it too, but
+	// a Verifier also runs with validation off.
 	if err := helpers.CheckMeteredEstimate(off); err != nil {
 		return err
 	}
diff --git a/sdk/go/helpers/gen_settlement_vectors_test.go b/sdk/go/helpers/gen_settlement_vectors_test.go
index f15f5952..f7036b5d 100644
--- a/sdk/go/helpers/gen_settlement_vectors_test.go
+++ b/sdk/go/helpers/gen_settlement_vectors_test.go
@@ -28,19 +28,43 @@ import (
 	"google.golang.org/protobuf/proto"
 )
 
-// settlementExpectation is MeteredSettlement as the corpus records it.
+// settlementExpectation is MeteredSettlement as the corpus records it. A price
+// that states no estimate has no accepted amount and no ceiling, and the corpus
+// records those three as null.
 type settlementExpectation struct {
-	AcceptedAmount  string `json:"accepted_amount"`
-	CeilingQuantity string `json:"ceiling_quantity"`
-	CeilingAmount   string `json:"ceiling_amount"`
-	ChargedQuantity string `json:"charged_quantity"`
-	ChargedAmount   string `json:"charged_amount"`
-	HeldQuantity    string `json:"held_quantity"`
-	HeldAmount      string `json:"held_amount"`
+	AcceptedAmount  *string `json:"accepted_amount"`
+	CeilingQuantity *string `json:"ceiling_quantity"`
+	CeilingAmount   *string `json:"ceiling_amount"`
+	ChargedQuantity string  `json:"charged_quantity"`
+	ChargedAmount   string  `json:"charged_amount"`
+	HeldQuantity    string  `json:"held_quantity"`
+	HeldAmount      string  `json:"held_amount"`
+}
+
+// settlementExpectationOf records a settlement the way the corpus does.
+func settlementExpectationOf(m MeteredSettlement) settlementExpectation {
+	e := settlementExpectation{
+		ChargedQuantity: m.ChargedQuantity, ChargedAmount: m.ChargedAmount,
+		HeldQuantity: m.HeldQuantity, HeldAmount: m.HeldAmount,
+	}
+	if m.Estimated {
+		e.AcceptedAmount, e.CeilingQuantity, e.CeilingAmount = &m.AcceptedAmount, &m.CeilingQuantity, &m.CeilingAmount
+	}
+	return e
+}
+
+// sameSettlementExpectation compares two recorded settlements by value.
+func sameSettlementExpectation(a, b settlementExpectation) bool {
+	eq := func(x, y *string) bool { return (x == nil) == (y == nil) && (x == nil || *x == *y) }
+	return eq(a.AcceptedAmount, b.AcceptedAmount) && eq(a.CeilingQuantity, b.CeilingQuantity) &&
+		eq(a.CeilingAmount, b.CeilingAmount) && a.ChargedQuantity == b.ChargedQuantity &&
+		a.ChargedAmount == b.ChargedAmount && a.HeldQuantity == b.HeldQuantity && a.HeldAmount == b.HeldAmount
 }
 
 // settlementVector is one SettleMeteredUsage case. pricing is the offer's
-// pricing in canonical proto-JSON. A row with error true is refused by both
+// pricing in canonical proto-JSON. A row whose expected ceiling_amount is null
+// has no cap: MeteredSettlementCap reports it uncapped. A row with error true
+// is refused by both
 // SettleMeteredUsage and MeteredSettlementCap, unless cap_error is false — a
 // negative consumed quantity is the settlement's fault, not the price's.
 type settlementVector struct {
@@ -60,7 +84,13 @@ func perToken(estimate, toleranceBps *int32, rate string) *forav1.Pricing {
 }
 
 func settled(accepted, ceilQ, ceilA, chargedQ, chargedA, heldQ, heldA string) *settlementExpectation {
-	return &settlementExpectation{accepted, ceilQ, ceilA, chargedQ, chargedA, heldQ, heldA}
+	return &settlementExpectation{&accepted, &ceilQ, &ceilA, chargedQ, chargedA, heldQ, heldA}
+}
+
+// unbounded is the settlement of a price that states no estimate: no accepted
+// amount, no ceiling, the whole quantity charged and nothing held.
+func unbounded(chargedQ, chargedA string) *settlementExpectation {
+	return &settlementExpectation{nil, nil, nil, chargedQ, chargedA, "0", "0"}
 }
 
 func buildSettlementVectors(t *testing.T) []settlementVector {
@@ -112,10 +142,23 @@ func buildSettlementVectors(t *testing.T) []settlementVector {
 				"2000600001.0003", "200060000100029999999999999999997999399998.9997",
 				"146883645.9997", "14688364599969999999999999999999853116354.0003"), false},
 
+		// No estimate: no ceiling. The whole consumed quantity is charged at the
+		// rate and nothing is held, however large it is; a stated tolerance has
+		// nothing to widen.
+		{"no_estimate_charged_as_consumed", perToken(nil, nil, rate), 2500,
+			unbounded("2500", "0.05"), false},
+		{"no_estimate_zero_consumed_charges_nothing", perToken(nil, nil, rate), 0,
+			unbounded("0", "0"), false},
+		{"no_estimate_large_quantity_nothing_held", perToken(nil, nil, rate), 2147483647,
+			unbounded("2147483647", "42949.67294"), false},
+		{"no_estimate_tolerance_has_nothing_to_widen", perToken(nil, e(500), rate), 3000,
+			unbounded("3000", "0.06"), false},
+		{"no_estimate_exact_tiny_rate", perToken(nil, nil, tiny), 2147483647,
+			unbounded("2147483647", "0.00000000000000002649994820398"), false},
+
 		// Refusals. Each is refused by the settlement; all but the last by the cap too.
 		{"refused_not_metered", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"}, 1, nil, false},
 		{"refused_free", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"}, 1, nil, false},
-		{"refused_missing_estimate", perToken(nil, nil, rate), 2500, nil, false},
 		{"refused_zero_estimate", perToken(e(0), nil, rate), 2500, nil, false},
 		{"refused_negative_estimate", perToken(e(-1), nil, rate), 2500, nil, false},
 		{"refused_empty_rate", perToken(e(2500), nil, ""), 2500, nil, false},
@@ -133,7 +176,7 @@ func buildSettlementVectors(t *testing.T) []settlementVector {
 			t.Fatalf("%s: marshal pricing: %v", r.name, err)
 		}
 		got, setErr := SettleMeteredUsage(r.pricing, r.consumed)
-		capAmount, capErr := MeteredSettlementCap(r.pricing)
+		capAmount, capped, capErr := MeteredSettlementCap(r.pricing)
 		v := settlementVector{Name: r.name, Pricing: pj, ConsumedQuantity: r.consumed}
 		if r.want == nil {
 			if setErr == nil {
@@ -149,12 +192,12 @@ func buildSettlementVectors(t *testing.T) []settlementVector {
 		if setErr != nil || capErr != nil {
 			t.Fatalf("%s: refused a row its author marked settleable: settle %v, cap %v", r.name, setErr, capErr)
 		}
-		want := settlementExpectation(*r.want)
-		if have := settlementExpectation(got); have != want {
-			t.Fatalf("%s: SettleMeteredUsage = %+v, author expected %+v", r.name, have, want)
+		want := *r.want
+		if have := settlementExpectationOf(got); !sameSettlementExpectation(have, want) {
+			t.Fatalf("%s: SettleMeteredUsage = %+v, author expected %+v", r.name, got, want)
 		}
-		if capAmount != want.CeilingAmount {
-			t.Fatalf("%s: MeteredSettlementCap = %s, author expected %s", r.name, capAmount, want.CeilingAmount)
+		if capped != (want.CeilingAmount != nil) || (capped && capAmount != *want.CeilingAmount) {
+			t.Fatalf("%s: MeteredSettlementCap = %q (capped %v), author expected %v", r.name, capAmount, capped, want.CeilingAmount)
 		}
 		v.Expected = &want
 		out = append(out, v)
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index c077a0f7..68e76dc9 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -444,8 +444,8 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 		// Freshness is fail-closed and mirrors core.Verifier.expired: a missing
 		// expires_at is expired (not eternal); a present bound is inclusive at now.
 		expired := offer.GetExpiresAt() == nil || offer.GetExpiresAt().AsTime().Before(time.Unix(nowUnix, 0))
-		// The offer's term carries no pricing, and a metered offer carries its
-		// estimate (core.Verifier's last two checks).
+		// The offer's term carries no pricing, and an estimate a metered offer
+		// states is positive (core.Verifier's last two checks).
 		termErr := CheckOfferTermsUnpriced(offer)
 		estimateErr := CheckMeteredEstimate(offer)
 		return offerVerifyVector{
@@ -531,9 +531,10 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 			ExpiresAt: timestamppb.New(time.Unix(nowUnix-100, 0).UTC()),
 		}, nil),
 
-		// --- Metered estimate dimension: a PER_UNIT offer must carry a positive
-		// estimated_quantity on its own pricing, or every port rejects it even
-		// though its signature and expiry are good. ---
+		// --- Metered estimate dimension: a PER_UNIT offer may state an
+		// estimated_quantity on its own pricing or none. One it states is
+		// positive, or every port rejects the offer even though its signature
+		// and expiry are good. ---
 
 		// metered_with_estimate_and_tolerance: the conformant metered shape.
 		emit("metered_with_estimate_and_tolerance", &forav1.Offer{
@@ -542,13 +543,14 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 			Pricing:   meteredVectorPricing(proto.Int32(2500), proto.Int32(1500)),
 			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
 		}, nil),
-		// metered_missing_estimate: no estimate at all → rejected.
-		emit("metered_missing_estimate", &forav1.Offer{
+		// metered_without_estimate: no estimate at all. The estimate is
+		// optional, and the purchase settles with no ceiling → verified.
+		emit("metered_without_estimate", &forav1.Offer{
 			OfferId:   "offer-metered-no-estimate",
 			ExpiresAt: future,
 			Pricing:   meteredVectorPricing(nil, nil),
 		}, nil),
-		// metered_zero_estimate: present but zero is no estimate → rejected.
+		// metered_zero_estimate: a stated estimate of zero is not positive → rejected.
 		emit("metered_zero_estimate", &forav1.Offer{
 			OfferId:   "offer-metered-zero-estimate",
 			ExpiresAt: future,
diff --git a/sdk/go/helpers/settlement.go b/sdk/go/helpers/settlement.go
index ed416cef..f191e5f6 100644
--- a/sdk/go/helpers/settlement.go
+++ b/sdk/go/helpers/settlement.go
@@ -9,13 +9,15 @@ import (
 )
 
 // Metered settlement (fora.proto Pricing, "METERED SETTLEMENT"). A PER_UNIT
-// price is charged per unit consumed. Three values on the offer's pricing fix
-// what a metered purchase can cost — the estimate E, the rate R and the
-// tolerance T in basis points (1000 when absent) — and the offer signature
-// covers all three. The agent accepts E × R at purchase; the usage report
-// settles the consumed quantity C at min(C, Q) × R, where the ceiling is
-// Q = E × (10000 + T) / 10000, and the quantity above Q is held for dispute,
-// never charged automatically.
+// price is charged per unit consumed. Up to three values on the offer's
+// pricing fix what a metered purchase can cost — the rate R, the optional
+// estimate E and the tolerance T in basis points (1000 when absent) — and the
+// offer signature covers them. Without an estimate there is no ceiling: the
+// agent accepts the rate, and the usage report settles the consumed quantity
+// C at C × R. With one, the agent accepts E × R at purchase; the usage report
+// settles C at min(C, Q) × R, where the ceiling is Q = E × (10000 + T) /
+// 10000, and the quantity above Q is held for dispute, never charged
+// automatically.
 //
 // Every value here is exact: the inputs are integers and decimal strings and
 // the only division is by 10000, a decimal shift, so no step rounds. The
@@ -33,10 +35,11 @@ const MaxEstimateToleranceBps int32 = 10000
 // decimal places.
 const bpsScale = 10000
 
-// ErrMeteredEstimateMissing signals a metered (PER_UNIT) offer or price that
-// carries no positive estimated_quantity. Such an offer has no amount to accept
-// and no ceiling to settle against, so an agent refuses it.
-var ErrMeteredEstimateMissing = errors.New("helpers: metered offer carries no positive estimated_quantity")
+// ErrMeteredEstimateNotPositive signals a metered (PER_UNIT) offer or price
+// that states an estimated_quantity of zero or less. An estimate is optional,
+// but one that is stated is positive (the offer.metered.estimate_positive
+// rule): a zero estimate would fix a ceiling of nothing.
+var ErrMeteredEstimateNotPositive = errors.New("helpers: metered offer states an estimated_quantity that is not positive")
 
 // ErrNotMetered signals a settlement asked of a price that is not PER_UNIT.
 var ErrNotMetered = errors.New("helpers: pricing is not metered (PER_UNIT)")
@@ -45,37 +48,51 @@ var ErrNotMetered = errors.New("helpers: pricing is not metered (PER_UNIT)")
 // canonical decimal string. Quantities are in the price's unit and may be
 // fractional (CeilingQuantity, and the quantities derived from it); amounts are
 // in the price's currency.
+//
+// When the price states no estimate, Estimated is false and there is no
+// ceiling: AcceptedAmount, CeilingQuantity and CeilingAmount are empty, the
+// whole consumed quantity is charged, and nothing is held.
 type MeteredSettlement struct {
+	// Estimated reports whether the price states an estimate, and so has an
+	// accepted amount and a ceiling.
+	Estimated bool
 	// AcceptedAmount is E × R: what the agent accepted at purchase, and what
-	// TransactionResultItem.cost carries for a metered item.
+	// TransactionResultItem.cost carries for a metered item. Empty without an
+	// estimate.
 	AcceptedAmount string
-	// CeilingQuantity is Q = E × (10000 + T) / 10000.
+	// CeilingQuantity is Q = E × (10000 + T) / 10000. Empty without an
+	// estimate.
 	CeilingQuantity string
-	// CeilingAmount is Q × R: the most the purchase is charged without a dispute.
+	// CeilingAmount is Q × R: the most the purchase is charged without a
+	// dispute. Empty without an estimate.
 	CeilingAmount string
-	// ChargedQuantity is min(C, Q).
+	// ChargedQuantity is min(C, Q), or C without an estimate.
 	ChargedQuantity string
-	// ChargedAmount is min(C, Q) × R: what the report settles to.
+	// ChargedAmount is ChargedQuantity × R: what the report settles to.
 	ChargedAmount string
-	// HeldQuantity is max(0, C − Q): the quantity held for dispute.
+	// HeldQuantity is max(0, C − Q): the quantity held for dispute. Always 0
+	// without an estimate.
 	HeldQuantity string
-	// HeldAmount is max(0, C − Q) × R: held for dispute, never charged automatically.
+	// HeldAmount is HeldQuantity × R: held for dispute, never charged
+	// automatically.
 	HeldAmount string
 }
 
 // IsMeteredOffer reports whether offer is metered: its pricing is PER_UNIT.
 // Offer.pricing is the offer's one price — the term it sells carries none
-// (fora.proto Offer, the offer.metered.requires_estimate and
+// (fora.proto Offer, the offer.metered.estimate_positive and
 // offer.terms.pricing_unset rules) — so a term is never consulted.
 func IsMeteredOffer(offer *forav1.Offer) bool {
 	return offer.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT
 }
 
-// CheckMeteredEstimate returns ErrMeteredEstimateMissing when offer is metered
-// and its pricing carries no positive estimated_quantity, and nil otherwise. It
-// is the offer.metered.requires_estimate rule as a standalone check, for a
-// verifier that runs without wire validation; a non-metered offer passes
-// whatever its pricing says.
+// CheckMeteredEstimate returns ErrMeteredEstimateNotPositive when offer is
+// metered and its pricing states an estimated_quantity of zero or less, and
+// nil otherwise. A metered offer that states no estimate passes: the estimate
+// is optional, and without one the purchase settles with no ceiling. It is the
+// offer.metered.estimate_positive rule as a standalone check, for a verifier
+// that runs without wire validation; a non-metered offer passes whatever its
+// pricing says.
 func CheckMeteredEstimate(offer *forav1.Offer) error {
 	if offer == nil {
 		return errors.New("helpers: offer is nil")
@@ -83,9 +100,8 @@ func CheckMeteredEstimate(offer *forav1.Offer) error {
 	if !IsMeteredOffer(offer) {
 		return nil
 	}
-	p := offer.GetPricing()
-	if p == nil || p.EstimatedQuantity == nil || p.GetEstimatedQuantity() <= 0 {
-		return ErrMeteredEstimateMissing
+	if p := offer.GetPricing(); p.EstimatedQuantity != nil && p.GetEstimatedQuantity() <= 0 {
+		return ErrMeteredEstimateNotPositive
 	}
 	return nil
 }
@@ -102,14 +118,18 @@ func EstimateToleranceBps(pricing *forav1.Pricing) int32 {
 }
 
 // meteredTerms holds the parsed settlement inputs of a metered price.
+// estimated is false when the price states no estimate; estimate and ceiling
+// are then unset.
 type meteredTerms struct {
-	estimate decimal.Decimal
-	rate     decimal.Decimal
-	ceiling  decimal.Decimal
+	estimated bool
+	estimate  decimal.Decimal
+	rate      decimal.Decimal
+	ceiling   decimal.Decimal
 }
 
 // parseMeteredTerms checks pricing is a metered price that can settle and
-// returns its estimate, rate and ceiling quantity.
+// returns its rate, and its estimate and ceiling quantity when it states an
+// estimate.
 func parseMeteredTerms(pricing *forav1.Pricing) (meteredTerms, error) {
 	if pricing == nil {
 		return meteredTerms{}, errors.New("helpers: pricing is nil")
@@ -117,8 +137,8 @@ func parseMeteredTerms(pricing *forav1.Pricing) (meteredTerms, error) {
 	if pricing.GetModel() != forav1.PricingModel_PRICING_MODEL_PER_UNIT {
 		return meteredTerms{}, fmt.Errorf("%w: model is %s", ErrNotMetered, pricing.GetModel())
 	}
-	if pricing.EstimatedQuantity == nil || pricing.GetEstimatedQuantity() <= 0 {
-		return meteredTerms{}, ErrMeteredEstimateMissing
+	if pricing.EstimatedQuantity != nil && pricing.GetEstimatedQuantity() <= 0 {
+		return meteredTerms{}, ErrMeteredEstimateNotPositive
 	}
 	rate, err := ParseMoney(pricing.GetRate())
 	if err != nil {
@@ -128,26 +148,40 @@ func parseMeteredTerms(pricing *forav1.Pricing) (meteredTerms, error) {
 	if bps < 0 || bps > MaxEstimateToleranceBps {
 		return meteredTerms{}, fmt.Errorf("helpers: estimate_tolerance_bps %d is outside 0..%d", bps, MaxEstimateToleranceBps)
 	}
+	if pricing.EstimatedQuantity == nil {
+		return meteredTerms{rate: rate}, nil
+	}
 	estimate := decimal.NewFromInt(int64(pricing.GetEstimatedQuantity()))
 	ceiling := estimate.Mul(decimal.NewFromInt(int64(bpsScale + bps))).Shift(-4)
-	return meteredTerms{estimate: estimate, rate: rate, ceiling: ceiling}, nil
+	return meteredTerms{estimated: true, estimate: estimate, rate: rate, ceiling: ceiling}, nil
 }
 
 // MeteredSettlementCap returns Q × R for a metered price: the most a purchase
 // under it is charged without a dispute, and the amount an agent budgets
-// against a spend cap. It refuses a price that is not PER_UNIT, carries no
-// positive estimate or no valid rate, or states a tolerance outside 0..10000.
-func MeteredSettlementCap(pricing *forav1.Pricing) (string, error) {
+// against a spend cap. capped is false, with an empty amount, when the price
+// states no estimate: it then has no ceiling, and nothing in it bounds the
+// charge. It refuses a price that is not PER_UNIT, states an estimate that is
+// not positive, carries no valid rate, or states a tolerance outside
+// 0..10000.
+func MeteredSettlementCap(pricing *forav1.Pricing) (amount string, capped bool, err error) {
 	terms, err := parseMeteredTerms(pricing)
 	if err != nil {
-		return "", err
+		return "", false, err
+	}
+	if !terms.estimated {
+		return "", false, nil
+	}
+	amount, err = FormatMoney(terms.ceiling.Mul(terms.rate))
+	if err != nil {
+		return "", false, err
 	}
-	return FormatMoney(terms.ceiling.Mul(terms.rate))
+	return amount, true, nil
 }
 
 // SettleMeteredUsage settles a usage report of consumedQuantity against a
 // metered price — the offer's own pricing, which is the copy settlement reads.
-// It refuses what MeteredSettlementCap refuses, and a negative quantity.
+// Without an estimate the whole quantity is charged at the rate and nothing is
+// held. It refuses what MeteredSettlementCap refuses, and a negative quantity.
 func SettleMeteredUsage(pricing *forav1.Pricing, consumedQuantity int64) (MeteredSettlement, error) {
 	terms, err := parseMeteredTerms(pricing)
 	if err != nil {
@@ -157,16 +191,14 @@ func SettleMeteredUsage(pricing *forav1.Pricing, consumedQuantity int64) (Metere
 		return MeteredSettlement{}, fmt.Errorf("helpers: consumed quantity %d is negative", consumedQuantity)
 	}
 	consumed := decimal.NewFromInt(consumedQuantity)
-	charged := decimal.Min(consumed, terms.ceiling)
-	held := decimal.Max(decimal.Zero, consumed.Sub(terms.ceiling))
-	values := []decimal.Decimal{
-		terms.estimate.Mul(terms.rate),
-		terms.ceiling,
-		terms.ceiling.Mul(terms.rate),
-		charged,
-		charged.Mul(terms.rate),
-		held,
-		held.Mul(terms.rate),
+	charged, held := consumed, decimal.Zero
+	if terms.estimated {
+		charged = decimal.Min(consumed, terms.ceiling)
+		held = decimal.Max(decimal.Zero, consumed.Sub(terms.ceiling))
+	}
+	values := []decimal.Decimal{charged, charged.Mul(terms.rate), held, held.Mul(terms.rate)}
+	if terms.estimated {
+		values = append(values, terms.estimate.Mul(terms.rate), terms.ceiling, terms.ceiling.Mul(terms.rate))
 	}
 	out := make([]string, len(values))
 	for i, v := range values {
@@ -176,13 +208,15 @@ func SettleMeteredUsage(pricing *forav1.Pricing, consumedQuantity int64) (Metere
 		}
 		out[i] = s
 	}
-	return MeteredSettlement{
-		AcceptedAmount:  out[0],
-		CeilingQuantity: out[1],
-		CeilingAmount:   out[2],
-		ChargedQuantity: out[3],
-		ChargedAmount:   out[4],
-		HeldQuantity:    out[5],
-		HeldAmount:      out[6],
-	}, nil
+	settlement := MeteredSettlement{
+		Estimated:       terms.estimated,
+		ChargedQuantity: out[0],
+		ChargedAmount:   out[1],
+		HeldQuantity:    out[2],
+		HeldAmount:      out[3],
+	}
+	if terms.estimated {
+		settlement.AcceptedAmount, settlement.CeilingQuantity, settlement.CeilingAmount = out[4], out[5], out[6]
+	}
+	return settlement, nil
 }
diff --git a/sdk/go/helpers/settlement_test.go b/sdk/go/helpers/settlement_test.go
index b4e2cebe..8a1ef07f 100644
--- a/sdk/go/helpers/settlement_test.go
+++ b/sdk/go/helpers/settlement_test.go
@@ -33,7 +33,7 @@ func TestCheckMeteredEstimate(t *testing.T) {
 		wantErr bool
 	}{
 		{"per_unit_with_estimate", meteredTestOffer(perUnit, proto.Int32(1)), true, false},
-		{"per_unit_without_estimate", meteredTestOffer(perUnit, nil), true, true},
+		{"per_unit_without_estimate_is_valid", meteredTestOffer(perUnit, nil), true, false},
 		{"per_unit_zero_estimate", meteredTestOffer(perUnit, proto.Int32(0)), true, true},
 		{"per_unit_negative_estimate", meteredTestOffer(perUnit, proto.Int32(-3)), true, true},
 		{"per_unit_term_under_flat_pricing_is_not_metered", pricedTerm, false, false},
@@ -49,8 +49,8 @@ func TestCheckMeteredEstimate(t *testing.T) {
 			if c.wantErr != (err != nil) {
 				t.Fatalf("CheckMeteredEstimate = %v, want error %v", err, c.wantErr)
 			}
-			if c.wantErr && !errors.Is(err, ErrMeteredEstimateMissing) {
-				t.Fatalf("CheckMeteredEstimate = %v, want ErrMeteredEstimateMissing", err)
+			if c.wantErr && !errors.Is(err, ErrMeteredEstimateNotPositive) {
+				t.Fatalf("CheckMeteredEstimate = %v, want ErrMeteredEstimateNotPositive", err)
 			}
 		})
 	}
@@ -103,9 +103,9 @@ func TestSettleMeteredUsageRefusesNotMetered(t *testing.T) {
 	if !errors.Is(err, ErrNotMetered) {
 		t.Fatalf("FLAT pricing: got %v, want ErrNotMetered", err)
 	}
-	_, err = MeteredSettlementCap(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "1"})
-	if !errors.Is(err, ErrMeteredEstimateMissing) {
-		t.Fatalf("PER_UNIT without estimate: got %v, want ErrMeteredEstimateMissing", err)
+	_, _, err = MeteredSettlementCap(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "1", EstimatedQuantity: proto.Int32(0)})
+	if !errors.Is(err, ErrMeteredEstimateNotPositive) {
+		t.Fatalf("PER_UNIT with a zero estimate: got %v, want ErrMeteredEstimateNotPositive", err)
 	}
 	if _, err := SettleMeteredUsage(nil, 1); err == nil {
 		t.Fatal("nil pricing must refuse")
diff --git a/sdk/go/helpers/testdata/metered-settlement-vectors.json b/sdk/go/helpers/testdata/metered-settlement-vectors.json
index 6a2e876b..b1d50d80 100644
--- a/sdk/go/helpers/testdata/metered-settlement-vectors.json
+++ b/sdk/go/helpers/testdata/metered-settlement-vectors.json
@@ -270,6 +270,112 @@
         "held_amount": "14688364599969999999999999999999853116354.0003"
       }
     },
+    {
+      "name": "no_estimate_charged_as_consumed",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2500,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": null,
+        "ceiling_quantity": null,
+        "ceiling_amount": null,
+        "charged_quantity": "2500",
+        "charged_amount": "0.05",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "no_estimate_zero_consumed_charges_nothing",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "unit": "tokens"
+      },
+      "consumed_quantity": 0,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": null,
+        "ceiling_quantity": null,
+        "ceiling_amount": null,
+        "charged_quantity": "0",
+        "charged_amount": "0",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "no_estimate_large_quantity_nothing_held",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2147483647,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": null,
+        "ceiling_quantity": null,
+        "ceiling_amount": null,
+        "charged_quantity": "2147483647",
+        "charged_amount": "42949.67294",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "no_estimate_tolerance_has_nothing_to_widen",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00002",
+        "currency": "USD",
+        "unit": "tokens",
+        "estimate_tolerance_bps": 500
+      },
+      "consumed_quantity": 3000,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": null,
+        "ceiling_quantity": null,
+        "ceiling_amount": null,
+        "charged_quantity": "3000",
+        "charged_amount": "0.06",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
+    {
+      "name": "no_estimate_exact_tiny_rate",
+      "pricing": {
+        "model": "PRICING_MODEL_PER_UNIT",
+        "rate": "0.00000000000000000000000001234",
+        "currency": "USD",
+        "unit": "tokens"
+      },
+      "consumed_quantity": 2147483647,
+      "error": false,
+      "cap_error": false,
+      "expected": {
+        "accepted_amount": null,
+        "ceiling_quantity": null,
+        "ceiling_amount": null,
+        "charged_quantity": "2147483647",
+        "charged_amount": "0.00000000000000002649994820398",
+        "held_quantity": "0",
+        "held_amount": "0"
+      }
+    },
     {
       "name": "refused_not_metered",
       "pricing": {
@@ -291,18 +397,6 @@
       "error": true,
       "cap_error": true
     },
-    {
-      "name": "refused_missing_estimate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2500,
-      "error": true,
-      "cap_error": true
-    },
     {
       "name": "refused_zero_estimate",
       "pricing": {
diff --git a/sdk/go/helpers/testdata/offer-verify-vectors.json b/sdk/go/helpers/testdata/offer-verify-vectors.json
index 470cde97..8890459f 100644
--- a/sdk/go/helpers/testdata/offer-verify-vectors.json
+++ b/sdk/go/helpers/testdata/offer-verify-vectors.json
@@ -187,7 +187,7 @@
       "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
     },
     {
-      "name": "metered_missing_estimate",
+      "name": "metered_without_estimate",
       "exchange": "exchange.example.com",
       "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
       "offer_json": {
@@ -204,7 +204,7 @@
         "signature_algorithm": "EdDSA"
       },
       "now_unix": 1700000100,
-      "expected_verified": false,
+      "expected_verified": true,
       "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
     },
     {

From ad72474517f06374aabd6b4d301a6544baeb2067 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 20:09:05 -0400
Subject: [PATCH 082/164] Settle a metered price without an estimate in the
 Python SDK

settle_metered_usage settles a price with no estimate at consumed x
rate and holds nothing; the MeteredSettlement's accepted_amount,
ceiling_quantity and ceiling_amount are then None.
metered_settlement_cap returns None for such a price, which has no
ceiling.

check_metered_estimate applies the offer.metered.estimate_positive
rule: it raises for a stated estimate that is not a positive integer
and passes a metered offer that states none (a null estimate is
absent). The Verifier and the cross-field layer share it, so both
accept an unestimated metered offer and refuse a zero one.

The parity suite replays the no-estimate settlement rows and pins
that the corpus keeps both shapes, the offer-verify pins name
metered_without_estimate, and the cross-field suite gains a valid
metered offer without an estimate.
---
 sdk/python/README.md                          | 17 ++--
 sdk/python/fora_sdk/core.py                   |  4 +-
 sdk/python/fora_sdk/crossfield.py             |  8 +-
 sdk/python/fora_sdk/money.py                  | 99 ++++++++++++-------
 .../tests/test_core_offer_verify_parity.py    | 10 +-
 sdk/python/tests/test_crossfield_parity.py    | 20 +++-
 .../tests/test_metered_settlement_parity.py   | 14 ++-
 7 files changed, 118 insertions(+), 54 deletions(-)

diff --git a/sdk/python/README.md b/sdk/python/README.md
index 75a7972f..cb63f741 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -233,13 +233,16 @@ normalize_resource_entry(entry)            # the form the Exchange stores
 **Money.** Exact decimal in and out, canonical decimal string on the wire:
 `parse_money`, `format_money`, `canonicalize_money`. Never floats.
 
-**Metered settlement.** A `PER_UNIT` offer carries an estimate, and its usage report
-settles within the price's tolerance (10% unless the term states one); the excess is
-held for dispute, never charged. `metered_settlement_cap(offer["pricing"])` is the most
-a purchase is charged without a dispute; `settle_metered_usage(offer["pricing"],
-consumed)` returns a `MeteredSettlement` with the accepted, ceiling, charged and held
-amounts, in exact decimal. `check_metered_estimate(offer)` raises on a metered offer
-without an estimate, and the `Verifier` rejects such an offer.
+**Metered settlement.** A `PER_UNIT` offer may carry an estimate. Without one there is no
+ceiling, and its usage report settles at consumed × rate. With one, the report settles
+within the price's tolerance (10% unless the term states one); the excess is held for
+dispute, never charged. `metered_settlement_cap(offer["pricing"])` is the most a
+purchase is charged without a dispute, or `None` when the price states no estimate;
+`settle_metered_usage(offer["pricing"], consumed)` returns a `MeteredSettlement` with
+the accepted, ceiling, charged and held amounts, in exact decimal (the accepted and
+ceiling amounts are `None` without an estimate). `check_metered_estimate(offer)` raises
+on a metered offer whose stated estimate is not positive, and the `Verifier` rejects
+such an offer.
 
 **One price per offer.** An offer's price is `offer["pricing"]`, and the term it sells
 carries none. `check_offer_terms_unpriced(offer)` raises `ValueError` on a priced term;
diff --git a/sdk/python/fora_sdk/core.py b/sdk/python/fora_sdk/core.py
index a2261d67..df1c6074 100644
--- a/sdk/python/fora_sdk/core.py
+++ b/sdk/python/fora_sdk/core.py
@@ -376,8 +376,8 @@ def _check(self, offer: Any) -> str | None:
             check_offer_terms_unpriced(offer)
         except ValueError as exc:
             return str(exc)
-        # A metered offer without an estimate has no amount to accept and no ceiling
-        # for its usage report to settle against (fora.proto Pricing).
+        # A metered offer may state no estimate, but one it states is positive: a zero
+        # estimate would fix a ceiling of nothing (fora.proto Offer).
         try:
             check_metered_estimate(offer)
         except ValueError as exc:
diff --git a/sdk/python/fora_sdk/crossfield.py b/sdk/python/fora_sdk/crossfield.py
index 607d3a35..4929321d 100644
--- a/sdk/python/fora_sdk/crossfield.py
+++ b/sdk/python/fora_sdk/crossfield.py
@@ -144,12 +144,12 @@ def _pricing_rules(o: dict[str, Any]) -> list[str]:
 
 
 def _offer_rules(o: dict[str, Any]) -> list[str]:
-    """Offer.terms.pricing_unset + Offer.metered.requires_estimate.
+    """Offer.terms.pricing_unset + Offer.metered.estimate_positive.
 
     - terms.pricing_unset: ``this.terms.all(t, !has(t.pricing))`` — the offer's price
       is ``Offer.pricing``, stated once.
-    - metered.requires_estimate: ``this.pricing.model != PER_UNIT ||
-      (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)``.
+    - metered.estimate_positive: ``this.pricing.model != PER_UNIT ||
+      !has(this.pricing.estimated_quantity) || this.pricing.estimated_quantity > 0``.
 
     Both predicates are the ones the agent-side Verifier applies, so this face and that
     one share :func:`fora_sdk.money.check_offer_terms_unpriced` and
@@ -163,7 +163,7 @@ def _offer_rules(o: dict[str, Any]) -> list[str]:
     try:
         check_metered_estimate(o)
     except ValueError:
-        out.append("offer.metered.requires_estimate")
+        out.append("offer.metered.estimate_positive")
     return out
 
 
diff --git a/sdk/python/fora_sdk/money.py b/sdk/python/fora_sdk/money.py
index 4bf6a185..db1a1113 100644
--- a/sdk/python/fora_sdk/money.py
+++ b/sdk/python/fora_sdk/money.py
@@ -109,23 +109,27 @@ class MeteredSettlement:
     """What a metered purchase settles to, every value a canonical decimal string.
 
     Quantities are in the price's unit and may be fractional (``ceiling_quantity``
-    and what derives from it); amounts are in the price's currency.
+    and what derives from it); amounts are in the price's currency. When the price
+    states no estimate there is no ceiling: ``accepted_amount``, ``ceiling_quantity``
+    and ``ceiling_amount`` are ``None``, the whole consumed quantity is charged, and
+    nothing is held.
     """
 
-    accepted_amount: str
-    """E x R: what the agent accepted at purchase."""
-    ceiling_quantity: str
-    """Q = E x (10000 + T) / 10000."""
-    ceiling_amount: str
-    """Q x R: the most the purchase is charged without a dispute."""
+    accepted_amount: str | None
+    """E x R: what the agent accepted at purchase. ``None`` without an estimate."""
+    ceiling_quantity: str | None
+    """Q = E x (10000 + T) / 10000. ``None`` without an estimate."""
+    ceiling_amount: str | None
+    """Q x R: the most the purchase is charged without a dispute. ``None`` without an
+    estimate."""
     charged_quantity: str
-    """min(C, Q)."""
+    """min(C, Q), or C without an estimate."""
     charged_amount: str
-    """min(C, Q) x R: what the report settles to."""
+    """charged_quantity x R: what the report settles to."""
     held_quantity: str
-    """max(0, C - Q): the quantity held for dispute."""
+    """max(0, C - Q): the quantity held for dispute. Always 0 without an estimate."""
     held_amount: str
-    """max(0, C - Q) x R: held for dispute, never charged automatically."""
+    """held_quantity x R: held for dispute, never charged automatically."""
 
 
 def _wire_int(v: Any) -> int | None:
@@ -151,7 +155,7 @@ def is_metered_offer(offer: Mapping[str, Any]) -> bool:
     """Whether ``offer`` (canonical proto-JSON) is metered: its pricing is PER_UNIT.
 
     ``Offer.pricing`` is the offer's one price and the term it sells carries none
-    (fora.proto Offer, the offer.metered.requires_estimate and
+    (fora.proto Offer, the offer.metered.estimate_positive and
     offer.terms.pricing_unset rules), so a term is never consulted. Python peer of Go
     ``helpers.IsMeteredOffer``."""
     return _model(offer.get("pricing")) == _PRICING_MODEL_PER_UNIT
@@ -179,13 +183,30 @@ def check_offer_terms_unpriced(offer: Mapping[str, Any]) -> None:
             raise ValueError(msg)
 
 
-def check_metered_estimate(offer: Mapping[str, Any]) -> None:
-    """Raise ``ValueError`` when ``offer`` is metered and its pricing carries no
-    positive ``estimated_quantity``; return quietly otherwise.
+def _stated_estimate(pricing: Mapping[str, Any]) -> int | None:
+    """The ``estimated_quantity`` ``pricing`` states, or ``None`` when it states none.
+
+    Raise ``ValueError`` for a stated estimate that is not a positive integer: an
+    estimate is optional, but one that is stated is positive."""
+    raw = pricing.get("estimated_quantity")
+    if raw is None:
+        return None
+    estimate = _wire_int(raw)
+    if estimate is None or estimate <= 0:
+        msg = f"money: metered pricing states an estimated_quantity that is not positive: {raw!r}"
+        raise ValueError(msg)
+    return estimate
+
 
-    The offer.metered.requires_estimate rule as a standalone check, for a verifier
-    that runs without wire validation. A non-metered offer passes whatever its
-    pricing says.
+def check_metered_estimate(offer: Mapping[str, Any]) -> None:
+    """Raise ``ValueError`` when ``offer`` is metered and its pricing states an
+    ``estimated_quantity`` that is not positive; return quietly otherwise.
+
+    A metered offer that states no estimate passes: the estimate is optional, and
+    without one the purchase settles with no ceiling. The
+    offer.metered.estimate_positive rule as a standalone check, for a verifier that
+    runs without wire validation. A non-metered offer passes whatever its pricing
+    says.
     """
     if not isinstance(offer, Mapping):
         msg = "money: offer is not an object"
@@ -193,12 +214,8 @@ def check_metered_estimate(offer: Mapping[str, Any]) -> None:
     if not is_metered_offer(offer):
         return
     pricing = offer.get("pricing")
-    estimate = None
     if isinstance(pricing, Mapping):
-        estimate = _wire_int(pricing.get("estimated_quantity"))
-    if estimate is None or estimate <= 0:
-        msg = "money: metered offer carries no positive estimated_quantity"
-        raise ValueError(msg)
+        _stated_estimate(pricing)
 
 
 def estimate_tolerance_bps(pricing: Mapping[str, Any]) -> int:
@@ -219,45 +236,51 @@ def _exact() -> Context:
     return Context(prec=200, traps=[Inexact, InvalidOperation, Overflow, DivisionByZero])
 
 
-def _metered_terms(pricing: Mapping[str, Any]) -> tuple[Decimal, Decimal, Decimal]:
-    """Check ``pricing`` is a metered price that can settle; return (E, R, Q)."""
+def _metered_terms(pricing: Mapping[str, Any]) -> tuple[Decimal | None, Decimal, Decimal | None]:
+    """Check ``pricing`` is a metered price that can settle; return (E, R, Q).
+
+    E and Q are ``None`` when the price states no estimate."""
     if not isinstance(pricing, Mapping):
         msg = "money: pricing is not an object"
         raise ValueError(msg)
     if _model(pricing) != _PRICING_MODEL_PER_UNIT:
         msg = f"money: pricing is not metered (PER_UNIT): model is {_model(pricing)!r}"
         raise ValueError(msg)
-    estimate = _wire_int(pricing.get("estimated_quantity"))
-    if estimate is None or estimate <= 0:
-        msg = "money: metered pricing carries no positive estimated_quantity"
-        raise ValueError(msg)
+    estimate = _stated_estimate(pricing)
     rate_raw = pricing.get("rate", "")
     rate = parse_money(rate_raw if isinstance(rate_raw, str) else "")
     bps = estimate_tolerance_bps(pricing)
     if not 0 <= bps <= MAX_ESTIMATE_TOLERANCE_BPS:
         msg = f"money: estimate_tolerance_bps {bps} is outside 0..{MAX_ESTIMATE_TOLERANCE_BPS}"
         raise ValueError(msg)
+    if estimate is None:
+        return None, rate, None
     with localcontext(_exact()):
         e = Decimal(estimate)
         ceiling = (e * Decimal(10000 + bps)).scaleb(-4)
     return e, rate, ceiling
 
 
-def metered_settlement_cap(pricing: Mapping[str, Any]) -> str:
+def metered_settlement_cap(pricing: Mapping[str, Any]) -> str | None:
     """Q x R for a metered price: the most a purchase under it is charged without a
     dispute, and the amount an agent budgets against a spend cap.
 
-    Raises ``ValueError`` for a price that is not PER_UNIT, carries no positive
-    estimate or no valid rate, or states a tolerance outside 0..10000.
+    ``None`` when the price states no estimate: it then has no ceiling, and nothing in
+    it bounds the charge. Raises ``ValueError`` for a price that is not PER_UNIT,
+    states an estimate that is not positive, carries no valid rate, or states a
+    tolerance outside 0..10000.
     """
     _, rate, ceiling = _metered_terms(pricing)
+    if ceiling is None:
+        return None
     with localcontext(_exact()):
         return format_money(ceiling * rate)
 
 
 def settle_metered_usage(pricing: Mapping[str, Any], consumed_quantity: int) -> MeteredSettlement:
     """Settle a usage report of ``consumed_quantity`` against a metered price — the
-    offer's own pricing, which is the copy settlement reads.
+    offer's own pricing, which is the copy settlement reads. Without an estimate the
+    whole quantity is charged at the rate and nothing is held.
 
     Raises ``ValueError`` for what :func:`metered_settlement_cap` refuses, and for a
     quantity that is negative or not an integer.
@@ -271,6 +294,16 @@ def settle_metered_usage(pricing: Mapping[str, Any], consumed_quantity: int) ->
         raise ValueError(msg)
     with localcontext(_exact()):
         consumed = Decimal(consumed_quantity)
+        if estimate is None or ceiling is None:
+            return MeteredSettlement(
+                accepted_amount=None,
+                ceiling_quantity=None,
+                ceiling_amount=None,
+                charged_quantity=format_money(consumed),
+                charged_amount=format_money(consumed * rate),
+                held_quantity="0",
+                held_amount="0",
+            )
         charged = min(consumed, ceiling)
         held = max(Decimal(0), consumed - ceiling)
         return MeteredSettlement(
diff --git a/sdk/python/tests/test_core_offer_verify_parity.py b/sdk/python/tests/test_core_offer_verify_parity.py
index 7432b27c..ba81bbe8 100644
--- a/sdk/python/tests/test_core_offer_verify_parity.py
+++ b/sdk/python/tests/test_core_offer_verify_parity.py
@@ -65,13 +65,13 @@
     "missing_expires_at",
 }
 
-# The metered-estimate dimension: a PER_UNIT offer must carry a positive estimate on
-# its own pricing, or the port rejects it although its signature and expiry are good.
-# Pinned so a regenerated corpus that drops these fails here rather than letting a
-# port accept an offer with no amount to accept and no ceiling to settle against.
+# The metered-estimate dimension: a PER_UNIT offer may state an estimate on its own
+# pricing or none, and the port verifies both; one it states is positive, or the port
+# rejects it although its signature and expiry are good. Pinned so a regenerated corpus
+# that drops these fails here rather than letting a port drift on either side.
 _REQUIRED_METERED = {
     "metered_with_estimate_and_tolerance",
-    "metered_missing_estimate",
+    "metered_without_estimate",
     "metered_zero_estimate",
     "metered_term_estimate_only",
     "flat_without_estimate",
diff --git a/sdk/python/tests/test_crossfield_parity.py b/sdk/python/tests/test_crossfield_parity.py
index a169fc56..2d991b3b 100644
--- a/sdk/python/tests/test_crossfield_parity.py
+++ b/sdk/python/tests/test_crossfield_parity.py
@@ -137,7 +137,7 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
         },
     },
     {
-        # Offer.metered.requires_estimate: a metered offer with a positive estimate on
+        # Offer.metered.estimate_positive: a metered offer with a positive estimate on
         # its own pricing satisfies it. Offer.terms.pricing_unset: its term carries no
         # pricing, because the offer's price is Offer.pricing.
         "name": "Offer metered with estimate",
@@ -176,7 +176,7 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
         "json": {"domain": "publisher.example", "path": "/article"},
     },
     {
-        # Offer.metered.requires_estimate: a non-metered offer needs no estimate.
+        # Offer.metered.estimate_positive: a non-metered offer needs no estimate.
         "name": "Offer flat without estimate",
         "message": "Offer",
         "json": {
@@ -185,6 +185,22 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
             "pricing": {"model": "PRICING_MODEL_FLAT", "rate": "1"},
         },
     },
+    {
+        # Offer.metered.estimate_positive: a metered offer may state no estimate at
+        # all; it then settles at consumed x rate with no ceiling.
+        "name": "Offer metered without estimate",
+        "message": "Offer",
+        "json": {
+            "offer_id": "offer-metered-unestimated",
+            "exchange": "exchange.example",
+            "pricing": {
+                "model": "PRICING_MODEL_PER_UNIT",
+                "rate": "0.00002",
+                "unit": "tokens",
+            },
+            "terms": [{"semantics": "TERM_SEMANTICS_ENUMERATED"}],
+        },
+    },
     {
         # Restriction.permitted_prohibited_disjoint: disjoint permitted/prohibited
         # sets satisfy it.
diff --git a/sdk/python/tests/test_metered_settlement_parity.py b/sdk/python/tests/test_metered_settlement_parity.py
index 6cd1e7f8..a7690d7b 100644
--- a/sdk/python/tests/test_metered_settlement_parity.py
+++ b/sdk/python/tests/test_metered_settlement_parity.py
@@ -61,9 +61,18 @@ def test_settlement_matches_oracle(vec: dict[str, object]) -> None:
     assert got == vec["expected"]
     expected = vec["expected"]
     assert isinstance(expected, dict)
+    # A row without an estimate records a null ceiling, and the cap is then None.
     assert metered_settlement_cap(pricing) == expected["ceiling_amount"]
 
 
+def test_corpus_covers_both_shapes() -> None:
+    """The replay settles a price with an estimate and one without: a corpus that
+    lost either would leave that shape of settlement untested."""
+    settled = [v for v in _VECTORS if not v["error"]]
+    assert any(v["expected"]["ceiling_amount"] is None for v in settled)
+    assert any(v["expected"]["ceiling_amount"] is not None for v in settled)
+
+
 def test_process_context_untouched() -> None:
     """The exact rows run in a local context; the caller's context is left as found."""
     before = getcontext().prec
@@ -100,8 +109,11 @@ def test_consumed_must_be_an_integer() -> None:
     [
         ({"pricing": {**_PER_UNIT, "estimated_quantity": 1}}, True, False),
         ({"pricing": {**_PER_UNIT, "estimated_quantity": "7"}}, True, False),
-        ({"pricing": dict(_PER_UNIT)}, True, True),
+        # The estimate is optional; one that is stated is positive.
+        ({"pricing": dict(_PER_UNIT)}, True, False),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": None}}, True, False),
         ({"pricing": {**_PER_UNIT, "estimated_quantity": 0}}, True, True),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": -3}}, True, True),
         ({"pricing": {**_PER_UNIT, "estimated_quantity": True}}, True, True),
         # A priced term no longer makes an offer metered: Offer.pricing is the one
         # price, and a priced term is refused by check_offer_terms_unpriced instead.

From 26e830c0eba3b656a9e93e3db8cfd61d3c6d409e Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 20:09:05 -0400
Subject: [PATCH 083/164] Settle a metered price without an estimate in the
 TypeScript SDK

settleMeteredUsage settles a price with no estimate at consumed x rate
and holds nothing; the MeteredSettlement's acceptedAmount,
ceilingQuantity and ceilingAmount are then undefined.
meteredSettlementCap returns undefined for such a price, which has no
ceiling.

checkMeteredEstimate applies the offer.metered.estimate_positive rule:
it throws for a stated estimate that is not a positive integer and
passes a metered offer that states none (null is proto-JSON for
absent). The offer Verifier and the cross-field layer share it.

The parity suite replays the no-estimate settlement rows, reading the
corpus's null as undefined, and pins that the corpus keeps both shapes.
The offer-verify pins name metered_without_estimate, and the
cross-field suite gains a valid metered offer without an estimate.
---
 sdk/ts/README.md                              |  13 +-
 sdk/ts/core/verifier.ts                       |   7 +-
 sdk/ts/src/crossfield.ts                      |   6 +-
 sdk/ts/src/money.ts                           | 112 ++++++++++++------
 sdk/ts/tests/core-offer-verify.parity.test.ts |  10 +-
 sdk/ts/tests/crossfield.parity.test.ts        |  16 ++-
 .../tests/metered-settlement.parity.test.ts   |  27 +++--
 7 files changed, 127 insertions(+), 64 deletions(-)

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 59112136..fb224df9 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -72,13 +72,16 @@ URL, bytes and media type; the license reader also verifies the bytes against
 publisher manifest lists (`listed`, `unlisted` or `no_exchange`; the manifest wins). The
 header names are `ContentRulesHeader` and `ExchangeHeader` in `@fora-protocol/sdk/wire`.
 
-`@fora-protocol/sdk/money` settles a metered purchase. A `PER_UNIT` offer carries an
-estimate, and its usage report settles within the price's tolerance (10% unless the term
+`@fora-protocol/sdk/money` settles a metered purchase. A `PER_UNIT` offer may carry an
+estimate. Without one there is no ceiling, and its usage report settles at consumed ×
+rate. With one, the report settles within the price's tolerance (10% unless the term
 states one); the excess is held for dispute, never charged.
 `meteredSettlementCap(offer.pricing)` is the most a purchase is charged without a
-dispute, and `settleMeteredUsage(offer.pricing, consumed)` returns the accepted,
-ceiling, charged and held amounts, exact on BigInt. `checkMeteredEstimate(offer)` throws
-on a metered offer without an estimate, and the offer `Verifier` rejects such an offer.
+dispute, or `undefined` when the price states no estimate, and
+`settleMeteredUsage(offer.pricing, consumed)` returns the accepted, ceiling, charged and
+held amounts, exact on BigInt (the accepted and ceiling amounts are `undefined` without
+an estimate). `checkMeteredEstimate(offer)` throws on a metered offer whose stated
+estimate is not positive, and the offer `Verifier` rejects such an offer.
 An offer's price is `offer.pricing`, and the term it sells carries none:
 `checkOfferTermsUnpriced(offer)` throws on a priced term, `signOffer` refuses to sign such
 an offer, and the `Verifier` rejects one.
diff --git a/sdk/ts/core/verifier.ts b/sdk/ts/core/verifier.ts
index 2bf04da7..7bac5be9 100644
--- a/sdk/ts/core/verifier.ts
+++ b/sdk/ts/core/verifier.ts
@@ -352,7 +352,8 @@ export class Verifier {
 
 	// check verifies a single offer: resolve the exchange offer-signing key, verify
 	// the JCS signature, enforce the not-in-the-past expiry, require the offer's term
-	// to carry no pricing, and require a metered offer to carry its estimate. Any step
+	// to carry no pricing, and require an estimate a metered offer states to be
+	// positive. Any step
 	// failing rejects the offer (fail-closed) — including an unresolvable key.
 	private async check(offer: unknown): Promise<string | undefined> {
 		if (typeof offer !== "object" || offer === null)
@@ -392,8 +393,8 @@ export class Verifier {
 		} catch (cause) {
 			return cause instanceof Error ? cause.message : String(cause);
 		}
-		// A metered offer without an estimate has no amount to accept and no ceiling
-		// for its usage report to settle against (fora.proto Pricing).
+		// A metered offer may state no estimate, but one it states is positive: a
+		// zero estimate would fix a ceiling of nothing (fora.proto Offer).
 		try {
 			checkMeteredEstimate(rec);
 		} catch (cause) {
diff --git a/sdk/ts/src/crossfield.ts b/sdk/ts/src/crossfield.ts
index 07265adc..e6285825 100644
--- a/sdk/ts/src/crossfield.ts
+++ b/sdk/ts/src/crossfield.ts
@@ -169,8 +169,8 @@ function pricingRules(o: Obj): string[] {
  * Offer rules:
  *   - terms.pricing_unset: `this.terms.all(t, !has(t.pricing))` — the offer's price is
  *     `Offer.pricing`, stated once.
- *   - metered.requires_estimate: `this.pricing.model != PER_UNIT ||
- *     (has(this.pricing.estimated_quantity) && this.pricing.estimated_quantity > 0)`.
+ *   - metered.estimate_positive: `this.pricing.model != PER_UNIT ||
+ *     !has(this.pricing.estimated_quantity) || this.pricing.estimated_quantity > 0`.
  * Both predicates are the ones the agent-side Verifier applies, so this face and that
  * one share checkOfferTermsUnpriced and checkMeteredEstimate rather than keeping two
  * copies.
@@ -185,7 +185,7 @@ function offerRules(o: Obj): string[] {
   try {
     checkMeteredEstimate(o);
   } catch {
-    out.push("offer.metered.requires_estimate");
+    out.push("offer.metered.estimate_positive");
   }
   return out;
 }
diff --git a/sdk/ts/src/money.ts b/sdk/ts/src/money.ts
index 261b5101..6b43534d 100644
--- a/sdk/ts/src/money.ts
+++ b/sdk/ts/src/money.ts
@@ -92,22 +92,28 @@ const INT64_MAX = 2n ** 63n - 1n;
 /**
  * What a metered purchase settles to, every value a canonical decimal string.
  * Quantities are in the price's unit and may be fractional (`ceilingQuantity` and
- * what derives from it); amounts are in the price's currency.
+ * what derives from it); amounts are in the price's currency. When the price
+ * states no estimate there is no ceiling: `acceptedAmount`, `ceilingQuantity` and
+ * `ceilingAmount` are undefined, the whole consumed quantity is charged, and
+ * nothing is held.
  */
 export interface MeteredSettlement {
-	/** E x R: what the agent accepted at purchase. */
-	readonly acceptedAmount: string;
-	/** Q = E x (10000 + T) / 10000. */
-	readonly ceilingQuantity: string;
-	/** Q x R: the most the purchase is charged without a dispute. */
-	readonly ceilingAmount: string;
-	/** min(C, Q). */
+	/** E x R: what the agent accepted at purchase. Undefined without an estimate. */
+	readonly acceptedAmount: string | undefined;
+	/** Q = E x (10000 + T) / 10000. Undefined without an estimate. */
+	readonly ceilingQuantity: string | undefined;
+	/**
+	 * Q x R: the most the purchase is charged without a dispute. Undefined without
+	 * an estimate.
+	 */
+	readonly ceilingAmount: string | undefined;
+	/** min(C, Q), or C without an estimate. */
 	readonly chargedQuantity: string;
-	/** min(C, Q) x R: what the report settles to. */
+	/** chargedQuantity x R: what the report settles to. */
 	readonly chargedAmount: string;
-	/** max(0, C - Q): the quantity held for dispute. */
+	/** max(0, C - Q): the quantity held for dispute. Always 0 without an estimate. */
 	readonly heldQuantity: string;
-	/** max(0, C - Q) x R: held for dispute, never charged automatically. */
+	/** heldQuantity x R: held for dispute, never charged automatically. */
 	readonly heldAmount: string;
 }
 
@@ -177,7 +183,7 @@ function modelOf(pricing: unknown): string {
 /**
  * isMeteredOffer reports whether `offer` (canonical proto-JSON) is metered: its
  * pricing is PER_UNIT. `Offer.pricing` is the offer's one price and the term it
- * sells carries none (fora.proto Offer, the offer.metered.requires_estimate and
+ * sells carries none (fora.proto Offer, the offer.metered.estimate_positive and
  * offer.terms.pricing_unset rules), so a term is never consulted. TS peer of Go
  * `helpers.IsMeteredOffer`.
  */
@@ -212,11 +218,29 @@ export function checkOfferTermsUnpriced(offer: Record<string, unknown>): void {
 }
 
 /**
- * checkMeteredEstimate throws when `offer` is metered and its pricing carries no
- * positive `estimated_quantity`, and returns otherwise. The
- * offer.metered.requires_estimate rule as a standalone check, for a verifier that
- * runs without wire validation; a non-metered offer passes whatever its pricing
- * says.
+ * The `estimated_quantity` `pricing` states, or undefined when it states none
+ * (`null` is proto-JSON for absent). Throws for a stated estimate that is not a
+ * positive integer: an estimate is optional, but one that is stated is positive.
+ */
+function statedEstimate(pricing: Record<string, unknown>): bigint | undefined {
+	const raw = pricing.estimated_quantity;
+	if (raw === undefined || raw === null) return undefined;
+	const estimate = wireInt(raw);
+	if (estimate === undefined || estimate <= 0n) {
+		throw new Error(
+			`money: metered pricing states an estimated_quantity that is not positive: ${JSON.stringify(raw)}`,
+		);
+	}
+	return estimate;
+}
+
+/**
+ * checkMeteredEstimate throws when `offer` is metered and its pricing states an
+ * `estimated_quantity` that is not positive, and returns otherwise. A metered
+ * offer that states no estimate passes: the estimate is optional, and without
+ * one the purchase settles with no ceiling. The offer.metered.estimate_positive
+ * rule as a standalone check, for a verifier that runs without wire validation;
+ * a non-metered offer passes whatever its pricing says.
  */
 export function checkMeteredEstimate(offer: Record<string, unknown>): void {
 	if (typeof offer !== "object" || offer === null) {
@@ -224,14 +248,8 @@ export function checkMeteredEstimate(offer: Record<string, unknown>): void {
 	}
 	if (!isMeteredOffer(offer)) return;
 	const pricing = offer.pricing;
-	const estimate =
-		typeof pricing === "object" && pricing !== null
-			? wireInt((pricing as Record<string, unknown>).estimated_quantity)
-			: undefined;
-	if (estimate === undefined || estimate <= 0n) {
-		throw new Error(
-			"money: metered offer carries no positive estimated_quantity",
-		);
+	if (typeof pricing === "object" && pricing !== null) {
+		statedEstimate(pricing as Record<string, unknown>);
 	}
 }
 
@@ -253,11 +271,14 @@ export function estimateToleranceBps(pricing: Record<string, unknown>): number {
 	return Number(bps);
 }
 
-/** Check `pricing` is a metered price that can settle; return E, R and Q. */
+/**
+ * Check `pricing` is a metered price that can settle; return E, R and Q. E and Q
+ * are undefined when the price states no estimate.
+ */
 function meteredTerms(pricing: Record<string, unknown>): {
-	estimate: Dec;
+	estimate: Dec | undefined;
 	rate: Dec;
-	ceiling: Dec;
+	ceiling: Dec | undefined;
 } {
 	if (typeof pricing !== "object" || pricing === null) {
 		throw new Error("money: pricing is not an object");
@@ -268,12 +289,7 @@ function meteredTerms(pricing: Record<string, unknown>): {
 			`money: pricing is not metered (PER_UNIT): model is ${JSON.stringify(model)}`,
 		);
 	}
-	const estimate = wireInt(pricing.estimated_quantity);
-	if (estimate === undefined || estimate <= 0n) {
-		throw new Error(
-			"money: metered pricing carries no positive estimated_quantity",
-		);
-	}
+	const estimate = statedEstimate(pricing);
 	const rate = parseMoney(typeof pricing.rate === "string" ? pricing.rate : "");
 	const bps = estimateToleranceBps(pricing);
 	if (bps < 0 || bps > MAX_ESTIMATE_TOLERANCE_BPS) {
@@ -281,6 +297,9 @@ function meteredTerms(pricing: Record<string, unknown>): {
 			`money: estimate_tolerance_bps ${bps} is outside 0..${MAX_ESTIMATE_TOLERANCE_BPS}`,
 		);
 	}
+	if (estimate === undefined) {
+		return { estimate: undefined, rate: decOf(rate), ceiling: undefined };
+	}
 	return {
 		estimate: { units: estimate, scale: 0 },
 		rate: decOf(rate),
@@ -291,18 +310,24 @@ function meteredTerms(pricing: Record<string, unknown>): {
 /**
  * meteredSettlementCap returns Q x R for a metered price: the most a purchase
  * under it is charged without a dispute, and the amount an agent budgets against
- * a spend cap. Throws for a price that is not PER_UNIT, carries no positive
- * estimate or no valid rate, or states a tolerance outside 0..10000.
+ * a spend cap. Undefined when the price states no estimate: it then has no
+ * ceiling, and nothing in it bounds the charge. Throws for a price that is not
+ * PER_UNIT, states an estimate that is not positive, carries no valid rate, or
+ * states a tolerance outside 0..10000.
  */
-export function meteredSettlementCap(pricing: Record<string, unknown>): string {
+export function meteredSettlementCap(
+	pricing: Record<string, unknown>,
+): string | undefined {
 	const { rate, ceiling } = meteredTerms(pricing);
+	if (ceiling === undefined) return undefined;
 	return decFormat(decMul(ceiling, rate));
 }
 
 /**
  * settleMeteredUsage settles a usage report of `consumedQuantity` against a
  * metered price — the offer's own pricing, which is the copy settlement reads.
- * Throws for what meteredSettlementCap refuses, and for a quantity that is
+ * Without an estimate the whole quantity is charged at the rate and nothing is
+ * held. Throws for what meteredSettlementCap refuses, and for a quantity that is
  * negative, not an integer, or above the int64 range.
  */
 export function settleMeteredUsage(
@@ -326,6 +351,17 @@ export function settleMeteredUsage(
 		);
 	}
 	const consumed: Dec = { units: consumedUnits, scale: 0 };
+	if (estimate === undefined || ceiling === undefined) {
+		return {
+			acceptedAmount: undefined,
+			ceilingQuantity: undefined,
+			ceilingAmount: undefined,
+			chargedQuantity: decFormat(consumed),
+			chargedAmount: decFormat(decMul(consumed, rate)),
+			heldQuantity: "0",
+			heldAmount: "0",
+		};
+	}
 	const charged = decMin(consumed, ceiling);
 	const held = decExcess(consumed, ceiling);
 	return {
diff --git a/sdk/ts/tests/core-offer-verify.parity.test.ts b/sdk/ts/tests/core-offer-verify.parity.test.ts
index 27b9f185..dcf45f6c 100644
--- a/sdk/ts/tests/core-offer-verify.parity.test.ts
+++ b/sdk/ts/tests/core-offer-verify.parity.test.ts
@@ -91,14 +91,14 @@ describe("sdk/ts/core Verifier offer-verify matches the shared JCS oracle matrix
   });
 
   it("matrix covers the metered-estimate dimension", () => {
-    // A PER_UNIT offer must carry a positive estimate on its own pricing, or the port
-    // rejects it although its signature and expiry are good. If the corpus loses these,
-    // this guard goes red before a port can accept an offer with no amount to accept
-    // and no ceiling to settle against.
+    // A PER_UNIT offer may state an estimate on its own pricing or none, and the port
+    // verifies both; one it states is positive, or the port rejects it although its
+    // signature and expiry are good. If the corpus loses these, this guard goes red
+    // before a port can drift on either side.
     const names = new Set(vectors.vectors.map((v) => v.name));
     for (const required of [
       "metered_with_estimate_and_tolerance",
-      "metered_missing_estimate",
+      "metered_without_estimate",
       "metered_zero_estimate",
       "metered_term_estimate_only",
       "flat_without_estimate",
diff --git a/sdk/ts/tests/crossfield.parity.test.ts b/sdk/ts/tests/crossfield.parity.test.ts
index 4966df70..be92c6e0 100644
--- a/sdk/ts/tests/crossfield.parity.test.ts
+++ b/sdk/ts/tests/crossfield.parity.test.ts
@@ -155,7 +155,7 @@ const validInstances: { name: string; message: string; json: unknown }[] = [
     },
   },
   {
-    // Offer.metered.requires_estimate: a metered offer with a positive estimate on its
+    // Offer.metered.estimate_positive: a metered offer with a positive estimate on its
     // own pricing satisfies it, even when the pushed term carries none.
     name: "Offer metered with estimate",
     message: "Offer",
@@ -190,7 +190,7 @@ const validInstances: { name: string; message: string; json: unknown }[] = [
     json: { domain: "publisher.example", path: "/article" },
   },
   {
-    // Offer.metered.requires_estimate: a non-metered offer needs no estimate.
+    // Offer.metered.estimate_positive: a non-metered offer needs no estimate.
     name: "Offer flat without estimate",
     message: "Offer",
     json: {
@@ -199,6 +199,18 @@ const validInstances: { name: string; message: string; json: unknown }[] = [
       pricing: { model: "PRICING_MODEL_FLAT", rate: "1" },
     },
   },
+  {
+    // Offer.metered.estimate_positive: a metered offer may state no estimate at all;
+    // it then settles at consumed x rate with no ceiling.
+    name: "Offer metered without estimate",
+    message: "Offer",
+    json: {
+      offer_id: "offer-metered-unestimated",
+      exchange: "exchange.example",
+      pricing: { model: "PRICING_MODEL_PER_UNIT", rate: "0.00002", unit: "tokens" },
+      terms: [{ semantics: "TERM_SEMANTICS_ENUMERATED" }],
+    },
+  },
   {
     // Restriction.permitted_prohibited_disjoint: disjoint permitted/prohibited
     // sets satisfy it.
diff --git a/sdk/ts/tests/metered-settlement.parity.test.ts b/sdk/ts/tests/metered-settlement.parity.test.ts
index 6866e194..b1d21379 100644
--- a/sdk/ts/tests/metered-settlement.parity.test.ts
+++ b/sdk/ts/tests/metered-settlement.parity.test.ts
@@ -20,10 +20,12 @@ import {
 } from "../src/money.ts";
 import vectorsFile from "../../go/helpers/testdata/metered-settlement-vectors.json";
 
+// A row whose price states no estimate records the accepted amount and the ceiling
+// as null; the TS faces return undefined for them.
 type Expected = {
-	accepted_amount: string;
-	ceiling_quantity: string;
-	ceiling_amount: string;
+	accepted_amount: string | null;
+	ceiling_quantity: string | null;
+	ceiling_amount: string | null;
 	charged_quantity: string;
 	charged_amount: string;
 	held_quantity: string;
@@ -70,17 +72,23 @@ describe("sdk/ts metered settlement matches the sdk/go oracle vectors", () => {
 			const want = v.expected as Expected;
 			const got = settleMeteredUsage(v.pricing, v.consumed_quantity);
 			expect({
-				accepted_amount: got.acceptedAmount,
-				ceiling_quantity: got.ceilingQuantity,
-				ceiling_amount: got.ceilingAmount,
+				accepted_amount: got.acceptedAmount ?? null,
+				ceiling_quantity: got.ceilingQuantity ?? null,
+				ceiling_amount: got.ceilingAmount ?? null,
 				charged_quantity: got.chargedQuantity,
 				charged_amount: got.chargedAmount,
 				held_quantity: got.heldQuantity,
 				held_amount: got.heldAmount,
 			}).toEqual(want);
-			expect(meteredSettlementCap(v.pricing)).toBe(want.ceiling_amount);
+			expect(meteredSettlementCap(v.pricing) ?? null).toBe(want.ceiling_amount);
 		});
 	}
+
+	it("corpus settles a price with an estimate and one without", () => {
+		const settled = doc.vectors.filter((v) => !v.error);
+		expect(settled.some((v) => v.expected?.ceiling_amount === null)).toBe(true);
+		expect(settled.some((v) => typeof v.expected?.ceiling_amount === "string")).toBe(true);
+	});
 });
 
 describe("sdk/ts metered helpers", () => {
@@ -109,8 +117,11 @@ describe("sdk/ts metered helpers", () => {
 	const cases: [string, Record<string, unknown>, boolean, boolean][] = [
 		["estimated", { pricing: { ...perUnit, estimated_quantity: 1 } }, true, false],
 		["string estimate", { pricing: { ...perUnit, estimated_quantity: "7" } }, true, false],
-		["no estimate", { pricing: { ...perUnit } }, true, true],
+		// The estimate is optional; one that is stated is positive.
+		["no estimate", { pricing: { ...perUnit } }, true, false],
+		["null estimate is absent", { pricing: { ...perUnit, estimated_quantity: null } }, true, false],
 		["zero estimate", { pricing: { ...perUnit, estimated_quantity: 0 } }, true, true],
+		["negative estimate", { pricing: { ...perUnit, estimated_quantity: -3 } }, true, true],
 		["fractional estimate", { pricing: { ...perUnit, estimated_quantity: 1.5 } }, true, true],
 		// A priced term no longer makes an offer metered: Offer.pricing is the one price,
 		// and checkOfferTermsUnpriced refuses the priced term instead.

From a6a2facdad7bc7aeb5c691f94b96d6aa1dc53421 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 20:09:05 -0400
Subject: [PATCH 084/164] Map the renamed metered-estimate sentinel and
 regenerate the parity matrix

helpers.ErrMeteredEstimateMissing is now helpers.ErrMeteredEstimateNotPositive. The symbol map carries the new name with the same reason, and the parity matrix is regenerated from it.
---
 docs/sdk-parity-matrix.md  | 2 +-
 sdk/parity/symbol-map.json | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 132d43c4..d1a8396c 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -375,7 +375,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrInvalidPoPInput` | Go errors.Is sentinel for a proof input that cannot be written into a signature base; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrKeyIDMismatch` | Go errors.Is sentinel for a keyid that is not the presented key's thumbprint; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrMalformedSignatureInput` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
-| `helpers.ErrMeteredEstimateMissing` | Go errors.Is sentinel for a metered offer or price that carries no positive estimate; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs. |
+| `helpers.ErrMeteredEstimateNotPositive` | Go errors.Is sentinel for a metered offer or price that states an estimate of zero or less; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs. |
 | `helpers.ErrMissingContentDigest` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingCreated` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingExpires` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index d6f59197..e2ef1e5e 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -106,7 +106,7 @@
     "helpers.ErrInvalidPoPInput": "Go errors.Is sentinel for a proof input that cannot be written into a signature base; py/ts raise/throw instead of exporting sentinels.",
     "helpers.ErrKeyIDMismatch": "Go errors.Is sentinel for a keyid that is not the presented key's thumbprint; py/ts raise/throw instead of exporting sentinels.",
     "helpers.ErrMalformedSignatureInput": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
-    "helpers.ErrMeteredEstimateMissing": "Go errors.Is sentinel for a metered offer or price that carries no positive estimate; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs.",
+    "helpers.ErrMeteredEstimateNotPositive": "Go errors.Is sentinel for a metered offer or price that states an estimate of zero or less; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs.",
     "helpers.ErrMissingContentDigest": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingCreated": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingExpires": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",

From 4266c01331b104f56e2cf6c79539ec9a6da6e53c Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 20:09:45 -0400
Subject: [PATCH 085/164] Describe a metered offer without an estimate in the
 docs and changelogs

The transaction-flow page's "Settling a metered purchase" lists the
estimate as optional and positive when stated, and gives the
settlement without one: no ceiling, the agent accepts the rate, and
the report settles at consumed x rate. Its pricing summary and the
metered cost note say the same, and the metering NONE case without an
estimate is left undefined, as the protocol leaves it. The
licensing-terms, money-flow and reference pages drop the statement
that a metered offer must carry an estimate, and the reference page
names offer.metered.estimate_positive. The budget-enforcement page is
unchanged.

The Unreleased entry in both changelogs now records the estimate as
optional, the replacement rule, both settlement shapes and the SDK
faces for a price with no estimate, and notes that an earlier draft of
this release required one.

The doc-conformance gate bans offer.metered.requires_estimate and
ErrMeteredEstimateMissing outside the changelogs.
---
 proto/CHANGELOG.md                            | 78 +++++++++++--------
 scripts/check-doc-conformance.sh              |  5 ++
 .../docs/getting-started/how-money-flows.mdx  |  2 +-
 .../content/docs/protocol/licensing-terms.mdx |  8 +-
 .../docs/protocol/transaction-flow.mdx        | 20 ++---
 .../src/content/docs/reference/changelog.mdx  | 78 +++++++++++--------
 .../src/content/docs/reference/proto-fora.mdx |  8 +-
 7 files changed, 115 insertions(+), 84 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index f1516f7c..30b53169 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -12,7 +12,7 @@ offer, nothing said which one execute charges, and the metered rule read either
   a metered purchase settles on. The term inside `Offer.terms` MUST carry no pricing (rule
   `offer.terms.pricing_unset`, on `Offer`). Each offer derives from exactly one catalog
   term, so the price is stated once and cannot disagree with itself.
-- `offer.metered.requires_estimate` reads `Offer.pricing` only: an offer is metered when
+- `offer.metered.estimate_positive` reads `Offer.pricing` only: an offer is metered when
   its pricing is `PER_UNIT`.
 - Catalog terms still carry pricing. `LicenseTerm.pricing` loses its field-level `required`
   rule, because the requirement depends on the message that holds the term, and
@@ -108,31 +108,36 @@ states the estimate in the price's own unit. The medical-imaging walkthrough ans
 DUA failure in the body. Offer examples drop their terms' pricing, and the licensing-terms,
 reference and threat-model pages state the same rules.
 
-**A metered offer carries an estimate, and a usage report settles within a tolerance:
-`Pricing.estimate_tolerance_bps` (field 10) is added, with two validation rules.** A
-`PER_UNIT` price is charged per unit consumed, but an offer could carry no
-`estimated_quantity`, and the protocol did not say what the agent accepts at purchase or
-how a report of a different quantity settles. Implementations charged one unit and
-refused the honest report.
-
-- An offer whose `pricing` is `PER_UNIT` MUST carry a positive
-  `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`, on `Offer`). The
-  rule binds the offer and not `Pricing`: a publisher pushes `PER_UNIT` terms without an
-  estimate, which describes the resource and may ride on `ResourceEntry.estimated_quantity`.
-  An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer
-  for that term. A non-metered offer needs no estimate.
+**A metered offer settles at consumed × rate, within a tolerance when it states an
+estimate: `Pricing.estimate_tolerance_bps` (field 10) is added, with two validation
+rules.** A `PER_UNIT` price is charged per unit consumed, but the protocol did not say
+what the agent accepts at purchase or how a report of a different quantity settles.
+Implementations charged one unit and refused the honest report.
+
+- The estimate stays optional. A `PER_UNIT` offer may state a rate with or without
+  `pricing.estimated_quantity`; whether to state one is the publisher's decision, and
+  nothing requires it, on the pushed term or on the offer. An estimate an offer states is
+  positive (rule `offer.metered.estimate_positive`, on `Offer`): a zero estimate would fix
+  a ceiling of nothing. An estimate the publisher states, on the term's own pricing or
+  once on `ResourceEntry.estimated_quantity`, is carried onto `Offer.pricing`, the term's
+  own taking precedence. An earlier draft of this release required an estimate on every
+  metered offer and had an Exchange emit no offer for a term without one; that requirement
+  is withdrawn.
 - `Pricing.estimate_tolerance_bps` is the tolerance on the estimate, in basis points, 0 to
   10000, presence-tracked. It is 1000 (10%) when the term states none, and an explicit 0
   means the estimate is the ceiling. It is allowed only on a `PER_UNIT` price (rule
   `pricing.estimate_tolerance.requires_per_unit`), and the Exchange carries the term's value
   onto the offer unchanged.
-- Settlement, stated once on `Pricing`. With E the estimate, R the rate and T the
-  tolerance, the agent accepts E × R at purchase, which is what `TransactionResultItem.cost`
-  carries for a metered item. The report's `consumed_quantity` C settles at min(C, Q) × R,
+- Settlement, stated once on `Pricing`. With R the rate and C the report's
+  `consumed_quantity`, an offer that states no estimate has no ceiling: the agent accepts
+  the rate, and the report settles at C × R with nothing held. With E the estimate and T
+  the tolerance, the agent accepts E × R at purchase, which is what
+  `TransactionResultItem.cost` carries for such an item, and C settles at min(C, Q) × R,
   where Q = E × (10000 + T) / 10000. A quantity below the estimate is charged as consumed;
   the excess above Q is held for dispute and never charged automatically. The arithmetic
   is exact decimal, and settlement reads `Offer.pricing`. A `PER_UNIT` price with
-  `metering: NONE` has no report, so E × R is final.
+  `metering: NONE` has no report, so E × R is final when it states an estimate; this
+  version does not say what such a price charges without one.
 - `UsageReport`, `Usage.consumed_quantity`, `ReportingObligation` and
   `UsageReportRejectionReason` state that a report whose quantity differs from the
   estimate is never refused for it. `UsageReportResponse` says that a report with a held
@@ -141,16 +146,20 @@ refused the honest report.
   the held excess. This version defines no `DisputeReason` for the excess and no filing by
   the publisher's side.
 - `buf breaking` against v1.0.0 passes: the field is additive. The two rules are new
-  validation: a validating peer now refuses a `PER_UNIT` offer without a positive
-  estimate, including inside a `TransactionRequest`, and a Go client running with
-  `ValidationStrict` refuses a discovery response that carries one.
+  validation: a validating peer now refuses a `PER_UNIT` offer that states a zero or
+  negative estimate, including inside a `TransactionRequest`, and a Go client running
+  with `ValidationStrict` refuses a discovery response that carries one. A `PER_UNIT`
+  offer with no estimate is valid.
 - The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
-  tolerance on a `FLAT` price and two unestimated metered offers (missing and zero).
-
-SDKs, in all three languages: the offer verifiers reject a metered offer without a
-positive estimate, after the signature and expiry checks (Go: `core.Verifier`, reason
-`helpers.ErrMeteredEstimateMissing`). New helpers settle a metered purchase in exact
-decimal over the offer's pricing: Go `helpers.MeteredSettlementCap`,
+  tolerance on a `FLAT` price and two metered offers whose stated estimate is not
+  positive (zero and negative). The conformance cases accept a metered offer with no
+  estimate, alone and inside a `TransactionRequest`.
+
+SDKs, in all three languages: the offer verifiers reject a metered offer whose stated
+estimate is not positive, after the signature and expiry checks (Go: `core.Verifier`,
+reason `helpers.ErrMeteredEstimateNotPositive`), and verify a metered offer that states
+none. New helpers settle a metered purchase in exact decimal over the offer's pricing,
+with no ceiling when the price states no estimate: Go `helpers.MeteredSettlementCap`,
 `helpers.SettleMeteredUsage` (returning `helpers.MeteredSettlement`),
 `helpers.EstimateToleranceBps`, `helpers.IsMeteredOffer`, `helpers.CheckMeteredEstimate`,
 `helpers.DefaultEstimateToleranceBps` and `helpers.MaxEstimateToleranceBps`, with
@@ -158,12 +167,15 @@ decimal over the offer's pricing: Go `helpers.MeteredSettlementCap`,
 `MeteredSettlement`, `estimate_tolerance_bps`, `is_metered_offer`,
 `check_metered_estimate` and the two constants from `fora_sdk`; TypeScript the same
 faces in camelCase from `@fora-protocol/sdk/money`. The Python and TypeScript cross-field
-layers gain both rules. A new shared `metered-settlement-vectors.json` pins the
-arithmetic, including two rows that need 42 significant digits, and the offer-verify
-vectors gain the metered cases.
-
-Docs: the transaction-flow page gains "Settling a metered purchase", its metered examples
-carry an estimate in tokens, and its list of report checks drops the ±20% quantity
+layers gain both rules. Without an estimate, `MeteredSettlementCap` reports no cap (Go
+returns `capped` false, Python `None`, TypeScript `undefined`), and the settlement's
+accepted and ceiling amounts are absent (Go `MeteredSettlement.Estimated` is false). A new
+shared `metered-settlement-vectors.json` pins the arithmetic, including two rows that need
+42 significant digits and the rows of a price with no estimate, and the offer-verify
+vectors gain the metered cases, among them a metered offer with no estimate that verifies.
+
+Docs: the transaction-flow page gains "Settling a metered purchase", with and without an
+estimate, its metered examples carry an estimate in tokens, and its list of report checks drops the ±20% quantity
 tolerance that refused honest reports, as do the Exchange storage model and the scenario
 walkthrough. The licensing-terms page gains "Metered pricing: estimate and tolerance", and
 the money-flow page and the reference page describe the settlement.
diff --git a/scripts/check-doc-conformance.sh b/scripts/check-doc-conformance.sh
index 6856c1d2..ae9c7619 100755
--- a/scripts/check-doc-conformance.sh
+++ b/scripts/check-doc-conformance.sh
@@ -120,6 +120,11 @@ patterns=(
   # signed_url_hash. Anchored to the URL forms so the patterns do NOT collide
   # with the legitimate slog field name `txn_id` in Go samples.
   '&txn_id=' '[?]txn_id=' 'txn_id=txn-' 'baseURL.nexpires'
+  # A metered offer no longer has to carry an estimate: without one it settles at
+  # consumed x rate with no ceiling. The rule that required one was replaced by
+  # offer.metered.estimate_positive (an estimate that is stated is positive), and
+  # the Go sentinel for a missing estimate by ErrMeteredEstimateNotPositive.
+  'offer\.metered\.requires_estimate' 'ErrMeteredEstimateMissing'
 )
 
 # Files where naming a removed identifier is legitimate (they record history).
diff --git a/website/src/content/docs/getting-started/how-money-flows.mdx b/website/src/content/docs/getting-started/how-money-flows.mdx
index 66a7ca74..162deee7 100644
--- a/website/src/content/docs/getting-started/how-money-flows.mdx
+++ b/website/src/content/docs/getting-started/how-money-flows.mdx
@@ -51,7 +51,7 @@ sequenceDiagram
 | `PRICING_MODEL_PER_UNIT` | Rate per `Pricing.unit` (metering basis: `accesses`, `tokens`, `fetches`, `pages`, `minutes`, `records`, …) | crawl / use / inference / training / metered purchase |
 | `PRICING_MODEL_FLAT` | One-time flat fee; `rate` is the total, no unit | one-time purchase |
 
-A `PER_UNIT` price is metered, so every `PER_UNIT` offer carries a positive `estimated_quantity` in its `unit`. The agent accepts estimate × rate at purchase. The usage report then settles at the consumed quantity × rate, up to a ceiling of the estimate plus a tolerance: `estimate_tolerance_bps`, 10% when the term states none. Anything consumed above the ceiling is held for dispute, never charged automatically. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
+A `PER_UNIT` price is metered. A `PER_UNIT` offer may carry an `estimated_quantity` in its `unit`, or none; whether to state one is the publisher's decision. Without an estimate there is no ceiling: the agent accepts the rate, and the usage report settles at the consumed quantity × rate. With an estimate, the agent accepts estimate × rate at purchase. The usage report then settles at the consumed quantity × rate, up to a ceiling of the estimate plus a tolerance: `estimate_tolerance_bps`, 10% when the term states none. Anything consumed above the ceiling is held for dispute, never charged automatically. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
 
 A **subscription** is `FREE` + a `subscription:*` scope (settled off-protocol). **Attribution** and **contribution** are `Obligation`s, not pricing models. There is no revenue-share model — settlement is off-protocol.
 
diff --git a/website/src/content/docs/protocol/licensing-terms.mdx b/website/src/content/docs/protocol/licensing-terms.mdx
index 08a54f91..827d44f7 100644
--- a/website/src/content/docs/protocol/licensing-terms.mdx
+++ b/website/src/content/docs/protocol/licensing-terms.mdx
@@ -135,12 +135,12 @@ For CoMP interop, a CoMP `revshare` rate is carried verbatim in the `fora-comp-v
 
 ## Metered pricing: estimate and tolerance
 
-A `PER_UNIT` price is **metered**: the agent pays per unit consumed, and the quantity is known only after use. Two fields bound what such a purchase can cost:
+A `PER_UNIT` price is **metered**: the agent pays per unit consumed, and the quantity is known only after use. Two optional fields can bound what such a purchase costs:
 
-- `Pricing.estimated_quantity` — the estimate, in the price's `unit`. It is **required and positive on every metered offer** (the `offer.metered.requires_estimate` rule): an offer whose pricing is `PER_UNIT` and that carries no estimate is invalid, and the SDK verifiers reject it. The estimate counts the price's own unit: a price per access has an estimate in accesses, a price per token an estimate in tokens. A term you push does not need one. The estimate describes the resource rather than the arrangement, so you can state it once on `ResourceEntry.estimated_quantity`, and the Exchange puts it on the offer's pricing. An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer for that term. A `FREE` or `FLAT` price needs no estimate.
-- `Pricing.estimate_tolerance_bps` — optional, on a `PER_UNIT` term only (`pricing.estimate_tolerance.requires_per_unit`). It is the tolerance on the estimate, in basis points from `0` to `10000`. When the term states none, the tolerance is `1000` (10%). An explicit `0` means the estimate is the ceiling. The Exchange carries it unchanged onto the offer.
+- `Pricing.estimated_quantity` — the estimate, in the price's `unit`. It is **optional**, on the term you push and on the offer. A `PER_UNIT` price may state a rate with or without an estimate; whether to state one is your decision, and nothing requires it. An estimate that an offer states is positive (the `offer.metered.estimate_positive` rule), and the SDK verifiers reject a zero one. The estimate counts the price's own unit: a price per access has an estimate in accesses, a price per token an estimate in tokens. The estimate describes the resource rather than the arrangement, so you can state it once on `ResourceEntry.estimated_quantity`, and the Exchange puts it on the offer's pricing. An estimate on the term's own pricing takes precedence. A `FREE` or `FLAT` price needs no estimate.
+- `Pricing.estimate_tolerance_bps` — optional, on a `PER_UNIT` term only (`pricing.estimate_tolerance.requires_per_unit`). It is the tolerance on the estimate, in basis points from `0` to `10000`. When the term states none, the tolerance is `1000` (10%). An explicit `0` means the estimate is the ceiling. The Exchange carries it unchanged onto the offer. It applies only when an estimate is stated.
 
-The agent accepts estimate × rate at purchase. Its usage report settles at the consumed quantity × rate, up to the ceiling estimate × (10000 + tolerance) / 10000. A quantity below the estimate is charged as consumed. A quantity above the ceiling is charged only up to the ceiling, and the excess is held for dispute, never charged automatically. [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase) has the full rule and a worked example.
+Without an estimate there is no ceiling: the agent accepts the rate, and its usage report settles at the consumed quantity × rate, whatever the quantity. With an estimate, the agent accepts estimate × rate at purchase. Its usage report settles at the consumed quantity × rate, up to the ceiling estimate × (10000 + tolerance) / 10000. A quantity below the estimate is charged as consumed. A quantity above the ceiling is charged only up to the ceiling, and the excess is held for dispute, never charged automatically. [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase) has the full rule and a worked example.
 
 ```
 pricing: { model: PER_UNIT, unit: "tokens", rate: 0.00002, currency: "USD",
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 65fb4d36..854ca9b9 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -139,7 +139,7 @@ Key fields:
 
 Each `Offer` includes:
 - `Offer.title` (human-readable) plus optional `fora-comp-v1` `comp.*` ext fields carrying CoMP package metadata (`comp.package_id`, `comp.seller`, `comp.citation_required`, `comp.content_types`, `comp.retrieval_type`)
-- FORA `Pricing` with the rate, currency, and normalized unit_cost; a metered (`PER_UNIT`) offer also carries a positive `estimated_quantity` in its `unit`, which fixes the amount the agent accepts and the ceiling its usage report settles against (see [Settling a metered purchase](#settling-a-metered-purchase))
+- FORA `Pricing` with the rate, currency, and normalized unit_cost; a metered (`PER_UNIT`) offer may also carry a positive `estimated_quantity` in its `unit`, which fixes the amount the agent accepts and the ceiling its usage report settles against. Without one there is no ceiling, and the report settles at the consumed quantity × rate (see [Settling a metered purchase](#settling-a-metered-purchase))
 - `ResourceIdentity` for cross-exchange deduplication
 - `LicenseTerm` entries on `terms[]`, each carrying `restrictions` (`repeated Restriction`) derived from the provider's RSL terms
 - `ReportingObligation` defining post-usage reporting requirements
@@ -374,7 +374,7 @@ The request may also carry `agent_request_acceptance` — the agent's detached E
 }
 ```
 
-For a metered item, `cost.amount` is the amount the agent accepted: the offer's `estimated_quantity` × `rate`, here 2,500 tokens × $0.00002 = $0.05. It is not the final charge; the usage report settles it (see [Settling a metered purchase](#settling-a-metered-purchase)).
+For a metered item whose offer states an estimate, `cost.amount` is the amount the agent accepted: the offer's `estimated_quantity` × `rate`, here 2,500 tokens × $0.00002 = $0.05. It is not the final charge; the usage report settles it. When the offer states no estimate, no amount is fixed at purchase, and the report settles the charge at the consumed quantity × rate (see [Settling a metered purchase](#settling-a-metered-purchase)).
 
 The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A bearer-only CDN serves it on signature + expiry alone (the URL signature + short TTL + TLS); a capable edge function additionally requires the agent to present its public key and an RFC 9421 signature, verifying the binding offline. See [Signed URL Verification](/components/edge-function/signed-url-verification).
 
@@ -652,15 +652,17 @@ A successful response carries the Exchange-assigned `report_id` (the handle the
 
 ### Settling a metered purchase
 
-A `PER_UNIT` price is metered: it is charged per unit consumed, and the quantity is known only after use. Three values on the offer's own `pricing` fix what such a purchase can cost, and the offer signature covers all three, so accepting the offer is consenting to them:
+A `PER_UNIT` price is metered: it is charged per unit consumed, and the quantity is known only after use. Up to three values on the offer's own `pricing` fix what such a purchase can cost, and the offer signature covers them, so accepting the offer is consenting to them:
 
 | Symbol | Field | Meaning |
 |---|---|---|
-| E | `estimated_quantity` | The estimate, in `unit`. **Required and positive on every metered offer.** An offer whose pricing is `PER_UNIT` and that carries no estimate fails validation (`offer.metered.requires_estimate`), and the SDK verifiers reject it |
 | R | `rate` | The price of one `unit` |
-| T | `estimate_tolerance_bps` | The tolerance on the estimate, in basis points: `1000` (10%) when the term states none, `0` for none, at most `10000` |
+| E | `estimated_quantity` | The estimate, in `unit`. **Optional.** A `PER_UNIT` offer may state a rate with or without an estimate; whether to state one is the publisher's decision. An estimate that is stated is positive (`offer.metered.estimate_positive`), and the SDK verifiers reject a zero one |
+| T | `estimate_tolerance_bps` | The tolerance on the estimate, in basis points: `1000` (10%) when the term states none, `0` for none, at most `10000`. It applies only when the offer states an estimate |
 
-At purchase the agent accepts **E × R**, the `cost` of the item. When the usage report arrives, its `consumed_quantity` C settles against the ceiling **Q = E × (10000 + T) / 10000**:
+**Without an estimate there is no ceiling.** The agent accepts the rate R. When the usage report arrives, its `consumed_quantity` C is charged **C × R**, whatever C is, and nothing is held. Nothing in such an offer bounds what the purchase is charged.
+
+**With an estimate the purchase settles within a tolerance.** At purchase the agent accepts **E × R**, the `cost` of the item. When the usage report arrives, its `consumed_quantity` C settles against the ceiling **Q = E × (10000 + T) / 10000**:
 
 | Consumed quantity | Charged | Held for dispute |
 |---|---|---|
@@ -668,7 +670,7 @@ At purchase the agent accepts **E × R**, the `cost` of the item. When the usage
 | E < C ≤ Q (within the tolerance) | C × R | nothing |
 | C > Q (above the ceiling) | Q × R | (C − Q) × R |
 
-The quantity above the ceiling is held, never charged automatically: nothing above Q × R is charged unless dispute resolution establishes that it is owed. Q × R is therefore the most a metered purchase costs without a dispute, and the amount an agent budgets against a spend cap. Q can be fractional, and every step is exact decimal arithmetic: the inputs are integers and decimal strings, and the only division is by 10000.
+The quantity above the ceiling is held, never charged automatically: nothing above Q × R is charged unless dispute resolution establishes that it is owed. Q × R is therefore the most an estimated metered purchase costs without a dispute, and the amount an agent budgets against a spend cap. Q can be fractional, and every step is exact decimal arithmetic: the inputs are integers and decimal strings, and the only division is by 10000.
 
 With the offer above (E = 2,500 tokens, R = $0.00002, no stated tolerance, so Q = 2,750):
 
@@ -678,9 +680,9 @@ With the offer above (E = 2,500 tokens, R = $0.00002, no stated tolerance, so Q
 | 2,700 tokens | $0.054 | — |
 | 3,000 tokens | $0.055 | 250 tokens, $0.005 |
 
-The response to a report that holds an excess is still a plain success with a `report_id`; the `transaction_id` and that `report_id` identify the held excess. This version defines no `DisputeReason` for it and no filing by the publisher's side, so how a claim to the excess is raised is left open; what the protocol fixes is that it is never charged automatically. A metered price with `metering: PRICING_METERING_NONE` has no report, so E × R is final.
+The response to a report that holds an excess is still a plain success with a `report_id`; the `transaction_id` and that `report_id` identify the held excess. This version defines no `DisputeReason` for it and no filing by the publisher's side, so how a claim to the excess is raised is left open; what the protocol fixes is that it is never charged automatically. A metered price with `metering: PRICING_METERING_NONE` has no report, so E × R is final when it states an estimate. This version does not say what such a price charges when it states none.
 
-The SDKs compute all of this exactly: `MeteredSettlementCap` / `metered_settlement_cap` / `meteredSettlementCap` returns Q × R, and `SettleMeteredUsage` / `settle_metered_usage` / `settleMeteredUsage` returns the accepted, ceiling, charged and held amounts. The shared metered-settlement vectors pin every language to the same digits.
+The SDKs compute all of this exactly: `MeteredSettlementCap` / `metered_settlement_cap` / `meteredSettlementCap` returns Q × R, or reports that there is no cap when the price states no estimate, and `SettleMeteredUsage` / `settle_metered_usage` / `settleMeteredUsage` returns the accepted, ceiling, charged and held amounts (without an estimate, no accepted amount and no ceiling). The shared metered-settlement vectors pin every language to the same digits.
 
 ## Content Delivery (Outside Protocol Scope)
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 1d9503bf..f1967cc2 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -18,7 +18,7 @@ offer, nothing said which one execute charges, and the metered rule read either
   a metered purchase settles on. The term inside `Offer.terms` MUST carry no pricing (rule
   `offer.terms.pricing_unset`, on `Offer`). Each offer derives from exactly one catalog
   term, so the price is stated once and cannot disagree with itself.
-- `offer.metered.requires_estimate` reads `Offer.pricing` only: an offer is metered when
+- `offer.metered.estimate_positive` reads `Offer.pricing` only: an offer is metered when
   its pricing is `PER_UNIT`.
 - Catalog terms still carry pricing. `LicenseTerm.pricing` loses its field-level `required`
   rule, because the requirement depends on the message that holds the term, and
@@ -114,31 +114,36 @@ states the estimate in the price's own unit. The medical-imaging walkthrough ans
 DUA failure in the body. Offer examples drop their terms' pricing, and the licensing-terms,
 reference and threat-model pages state the same rules.
 
-**A metered offer carries an estimate, and a usage report settles within a tolerance:
-`Pricing.estimate_tolerance_bps` (field 10) is added, with two validation rules.** A
-`PER_UNIT` price is charged per unit consumed, but an offer could carry no
-`estimated_quantity`, and the protocol did not say what the agent accepts at purchase or
-how a report of a different quantity settles. Implementations charged one unit and
-refused the honest report.
-
-- An offer whose `pricing` is `PER_UNIT` MUST carry a positive
-  `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`, on `Offer`). The
-  rule binds the offer and not `Pricing`: a publisher pushes `PER_UNIT` terms without an
-  estimate, which describes the resource and may ride on `ResourceEntry.estimated_quantity`.
-  An Exchange that cannot state a positive estimate for a `PER_UNIT` term emits no offer
-  for that term. A non-metered offer needs no estimate.
+**A metered offer settles at consumed × rate, within a tolerance when it states an
+estimate: `Pricing.estimate_tolerance_bps` (field 10) is added, with two validation
+rules.** A `PER_UNIT` price is charged per unit consumed, but the protocol did not say
+what the agent accepts at purchase or how a report of a different quantity settles.
+Implementations charged one unit and refused the honest report.
+
+- The estimate stays optional. A `PER_UNIT` offer may state a rate with or without
+  `pricing.estimated_quantity`; whether to state one is the publisher's decision, and
+  nothing requires it, on the pushed term or on the offer. An estimate an offer states is
+  positive (rule `offer.metered.estimate_positive`, on `Offer`): a zero estimate would fix
+  a ceiling of nothing. An estimate the publisher states, on the term's own pricing or
+  once on `ResourceEntry.estimated_quantity`, is carried onto `Offer.pricing`, the term's
+  own taking precedence. An earlier draft of this release required an estimate on every
+  metered offer and had an Exchange emit no offer for a term without one; that requirement
+  is withdrawn.
 - `Pricing.estimate_tolerance_bps` is the tolerance on the estimate, in basis points, 0 to
   10000, presence-tracked. It is 1000 (10%) when the term states none, and an explicit 0
   means the estimate is the ceiling. It is allowed only on a `PER_UNIT` price (rule
   `pricing.estimate_tolerance.requires_per_unit`), and the Exchange carries the term's value
   onto the offer unchanged.
-- Settlement, stated once on `Pricing`. With E the estimate, R the rate and T the
-  tolerance, the agent accepts E × R at purchase, which is what `TransactionResultItem.cost`
-  carries for a metered item. The report's `consumed_quantity` C settles at min(C, Q) × R,
+- Settlement, stated once on `Pricing`. With R the rate and C the report's
+  `consumed_quantity`, an offer that states no estimate has no ceiling: the agent accepts
+  the rate, and the report settles at C × R with nothing held. With E the estimate and T
+  the tolerance, the agent accepts E × R at purchase, which is what
+  `TransactionResultItem.cost` carries for such an item, and C settles at min(C, Q) × R,
   where Q = E × (10000 + T) / 10000. A quantity below the estimate is charged as consumed;
   the excess above Q is held for dispute and never charged automatically. The arithmetic
   is exact decimal, and settlement reads `Offer.pricing`. A `PER_UNIT` price with
-  `metering: NONE` has no report, so E × R is final.
+  `metering: NONE` has no report, so E × R is final when it states an estimate; this
+  version does not say what such a price charges without one.
 - `UsageReport`, `Usage.consumed_quantity`, `ReportingObligation` and
   `UsageReportRejectionReason` state that a report whose quantity differs from the
   estimate is never refused for it. `UsageReportResponse` says that a report with a held
@@ -147,16 +152,20 @@ refused the honest report.
   the held excess. This version defines no `DisputeReason` for the excess and no filing by
   the publisher's side.
 - `buf breaking` against v1.0.0 passes: the field is additive. The two rules are new
-  validation: a validating peer now refuses a `PER_UNIT` offer without a positive
-  estimate, including inside a `TransactionRequest`, and a Go client running with
-  `ValidationStrict` refuses a discovery response that carries one.
+  validation: a validating peer now refuses a `PER_UNIT` offer that states a zero or
+  negative estimate, including inside a `TransactionRequest`, and a Go client running
+  with `ValidationStrict` refuses a discovery response that carries one. A `PER_UNIT`
+  offer with no estimate is valid.
 - The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
-  tolerance on a `FLAT` price and two unestimated metered offers (missing and zero).
-
-SDKs, in all three languages: the offer verifiers reject a metered offer without a
-positive estimate, after the signature and expiry checks (Go: `core.Verifier`, reason
-`helpers.ErrMeteredEstimateMissing`). New helpers settle a metered purchase in exact
-decimal over the offer's pricing: Go `helpers.MeteredSettlementCap`,
+  tolerance on a `FLAT` price and two metered offers whose stated estimate is not
+  positive (zero and negative). The conformance cases accept a metered offer with no
+  estimate, alone and inside a `TransactionRequest`.
+
+SDKs, in all three languages: the offer verifiers reject a metered offer whose stated
+estimate is not positive, after the signature and expiry checks (Go: `core.Verifier`,
+reason `helpers.ErrMeteredEstimateNotPositive`), and verify a metered offer that states
+none. New helpers settle a metered purchase in exact decimal over the offer's pricing,
+with no ceiling when the price states no estimate: Go `helpers.MeteredSettlementCap`,
 `helpers.SettleMeteredUsage` (returning `helpers.MeteredSettlement`),
 `helpers.EstimateToleranceBps`, `helpers.IsMeteredOffer`, `helpers.CheckMeteredEstimate`,
 `helpers.DefaultEstimateToleranceBps` and `helpers.MaxEstimateToleranceBps`, with
@@ -164,12 +173,15 @@ decimal over the offer's pricing: Go `helpers.MeteredSettlementCap`,
 `MeteredSettlement`, `estimate_tolerance_bps`, `is_metered_offer`,
 `check_metered_estimate` and the two constants from `fora_sdk`; TypeScript the same
 faces in camelCase from `@fora-protocol/sdk/money`. The Python and TypeScript cross-field
-layers gain both rules. A new shared `metered-settlement-vectors.json` pins the
-arithmetic, including two rows that need 42 significant digits, and the offer-verify
-vectors gain the metered cases.
-
-Docs: the transaction-flow page gains "Settling a metered purchase", its metered examples
-carry an estimate in tokens, and its list of report checks drops the ±20% quantity
+layers gain both rules. Without an estimate, `MeteredSettlementCap` reports no cap (Go
+returns `capped` false, Python `None`, TypeScript `undefined`), and the settlement's
+accepted and ceiling amounts are absent (Go `MeteredSettlement.Estimated` is false). A new
+shared `metered-settlement-vectors.json` pins the arithmetic, including two rows that need
+42 significant digits and the rows of a price with no estimate, and the offer-verify
+vectors gain the metered cases, among them a metered offer with no estimate that verifies.
+
+Docs: the transaction-flow page gains "Settling a metered purchase", with and without an
+estimate, its metered examples carry an estimate in tokens, and its list of report checks drops the ±20% quantity
 tolerance that refused honest reports, as do the Exchange storage model and the scenario
 walkthrough. The licensing-terms page gains "Metered pricing: estimate and tolerance", and
 the money-flow page and the reference page describe the settlement.
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 2e1a2975..f5c9c8e5 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -116,8 +116,8 @@ A purchase through a Broker does not use this chain. `BrokerService.ExecuteTrans
 `Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks, and a metered purchase settles on. The one term the offer sells, in `Offer.terms`, carries no `pricing` (rule `offer.terms.pricing_unset`). Catalog terms (`ResourceEntry.terms`) still carry their pricing; each offer derives from exactly one of them, so the offer's price and its term's price cannot disagree.
 :::
 
-:::note[A metered offer carries its estimate]
-An offer whose `pricing` is `PER_UNIT` MUST carry a positive `pricing.estimated_quantity` (rule `offer.metered.requires_estimate`); a non-metered offer needs none. The rule reads `Offer.pricing` only, and binds the offer rather than `Pricing` because a publisher pushes `PER_UNIT` terms without an estimate. The estimate is always in the offer's own `pricing.unit`: a price per access has an estimate in accesses, never a token count.
+:::note[A metered offer may carry an estimate]
+An offer whose `pricing` is `PER_UNIT` may state `pricing.estimated_quantity` or not; whether to state one is the publisher's decision, and nothing requires it. Without one there is no ceiling, and a usage report settles at the consumed quantity × rate. An estimate that is stated is positive (rule `offer.metered.estimate_positive`). An estimate the publisher stated, on the term or on `ResourceEntry.estimated_quantity`, is carried onto `Offer.pricing`. The estimate is always in the offer's own `pricing.unit`: a price per access has an estimate in accesses, never a token count.
 :::
 
 :::note[Breaking change in v1.0]
@@ -144,7 +144,7 @@ Three verification levels:
 
 `Pricing` has no `ext` / `ext_critical` fields — the licensing core is closed.
 
-**Metered settlement.** With E = `estimated_quantity`, R = `rate`, T = `estimate_tolerance_bps` (1000 when absent; 0 to 10000, `PER_UNIT` only, rule `pricing.estimate_tolerance.requires_per_unit`) and C = the report's `Usage.consumed_quantity`, the agent accepts E × R at purchase and the report settles at min(C, Q) × R, where Q = E × (10000 + T) / 10000. The excess (C − Q) × R above the ceiling is held for dispute and never charged automatically. The arithmetic is exact decimal. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
+**Metered settlement.** With R = `rate` and C = the report's `Usage.consumed_quantity`, an offer that states no estimate has no ceiling: the agent accepts the rate and the report settles at C × R. With E = `estimated_quantity` (optional, positive when stated) and T = `estimate_tolerance_bps` (1000 when absent; 0 to 10000, `PER_UNIT` only, rule `pricing.estimate_tolerance.requires_per_unit`), the agent accepts E × R at purchase and the report settles at min(C, Q) × R, where Q = E × (10000 + T) / 10000. The excess (C − Q) × R above the ceiling is held for dispute and never charged automatically. The arithmetic is exact decimal. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
 
 ### ResourceIdentity
 
@@ -218,7 +218,7 @@ The canonical signing structure for [`AgentAcceptance`](#agentacceptance). It is
 
 ### TransactionResultItem
 
-Result for a single offer in a batch transaction. `refusal` is set only in a `BrokerTransactionResponse`, on an item whose Exchange refused the Broker's whole sub-request or did not answer it. For a metered item, `cost` is the accepted amount, estimate × rate; the usage report settles the final charge.
+Result for a single offer in a batch transaction. `refusal` is set only in a `BrokerTransactionResponse`, on an item whose Exchange refused the Broker's whole sub-request or did not answer it. For a metered item whose offer states an estimate, `cost` is the accepted amount, estimate × rate; the usage report settles the final charge. Without an estimate no amount is fixed at purchase, and the report settles the charge at consumed × rate.
 
 ::proto-message{name=TransactionResultItem}
 

From 6b284cb9d78f39a6127adccbefe27f43c353b7f3 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 20:17:56 -0400
Subject: [PATCH 086/164] Leave how a budget is computed to the party that
 applies it

The protocol said how a Broker computes a budget: it compared the most
an offer can be charged without a dispute (Q x R for a metered offer),
spend grew only from purchase totals (BrokerTransactionResponse.totals
through the Broker), and a Resolve never counted as spend. How a budget
is computed is the Broker's own behaviour, or that of any other party
that applies one; the protocol says how parties transact, not how they
budget.

BrokerService.Resolve keeps the reporting rule and drops the
computation: Resolve may apply the agent's budget as a filter, an offer
it leaves out is not returned, a URI left with no offer is answered
with OFFER_ABSENCE_REASON_BUDGET_EXCEEDED, never NOT_AUTHORIZED and
never a non-OK error, and Resolve never charges. BUDGET_EXCEEDED says
the same. The RequestConstraints budget fields (max_price,
budget_scope, period_budget, budget_period) keep plain one-line
meanings. Pricing no longer calls Q x R the amount an agent budgets
against a spend cap; the settlement arithmetic between the parties is
unchanged.

The reference, money-flow, scenario and due-diligence pages and the
Broker overview, selection-engine and budget-enforcement pages drop
the same rules; the Broker pages say that the budget computation they
describe is one design, not protocol. The SDK docstrings of the
settlement cap drop the budget phrase. The Unreleased entry in both
changelogs records the change.

Comments and docs only; the generated code, the descriptor, the SDK
types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 679901 -> 678560 bytes
 gen/go/fora/v1/fora.pb.go                     |  37 ++++-------
 gen/go/fora/v1/forav1connect/fora.connect.go  |  36 ++++-------
 .../fora.v1.DiscoveryRequest.schema.json      |   8 +--
 ...ora.v1.DiscoveryRequest.schema.strict.json |   8 +--
 .../fora.v1.DiscoveryResponse.schema.json     |   2 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |   2 +-
 .../fora.v1.LicenseTerm.schema.json           |   2 +-
 .../fora.v1.LicenseTerm.schema.strict.json    |   2 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |   2 +-
 .../fora.v1.Offer.schema.strict.json          |   2 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |   2 +-
 .../fora.v1.OfferGroup.schema.strict.json     |   2 +-
 gen/jsonschema/fora.v1.Pricing.schema.json    |   2 +-
 .../fora.v1.Pricing.schema.strict.json        |   2 +-
 .../fora.v1.PushResourcesRequest.schema.json  |   2 +-
 ...v1.PushResourcesRequest.schema.strict.json |   2 +-
 .../fora.v1.RequestConstraints.schema.json    |   8 +--
 ...a.v1.RequestConstraints.schema.strict.json |   8 +--
 .../fora.v1.ResourceEntry.schema.json         |   2 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |   2 +-
 .../fora.v1.ResourceResponse.schema.json      |   2 +-
 ...ora.v1.ResourceResponse.schema.strict.json |   2 +-
 .../fora.v1.TransactionItem.schema.json       |   2 +-
 ...fora.v1.TransactionItem.schema.strict.json |   2 +-
 .../fora.v1.TransactionRequest.schema.json    |   2 +-
 ...a.v1.TransactionRequest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |  10 ++-
 gen/ts/wire/schemas.ts                        |   6 +-
 proto/CHANGELOG.md                            |  16 ++---
 proto/fora/v1/fora.proto                      |  59 ++++++------------
 sdk/go/helpers/settlement.go                  |   3 +-
 sdk/python/fora_sdk/money.py                  |   2 +-
 sdk/ts/src/money.ts                           |   3 +-
 .../components/broker/budget-enforcement.mdx  |  23 +++----
 .../docs/components/broker/overview.mdx       |   6 +-
 .../components/broker/selection-engine.mdx    |  14 ++---
 .../docs/getting-started/how-money-flows.mdx  |   2 +-
 .../docs/protocol/scenario-walkthrough.mdx    |   5 +-
 .../docs/protocol/transaction-flow.mdx        |   2 +-
 .../protocol/walkthrough-due-diligence.mdx    |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  16 ++---
 .../src/content/docs/reference/proto-fora.mdx |   4 +-
 43 files changed, 133 insertions(+), 185 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 582bfd4ce00dac2a771f49582f3c8b2ff088ac05..7e52353e17ef64935aa95b5b3c8f80304a029033 100644
GIT binary patch
delta 43794
zcmZU+cVJdU_CK8G=03NjJUw~xJmG0cP)dRzodm&-4R<YT+0{jj%C0LeVEgTUH%N;F
zLHf{<E*%BAAOfQFfQWzy2v`viX~Lo?_<qjJTrTVT-*e7A=QC&8nKNhR-sixYMsK{+
zs84@Sf2DtRe|4#M@IA_iq4tn_yycUuc{>A^9`qJvO}E#b@*W-FVfMlow4r9nK-E&c
z9>oZ%W4ua}*!k>K*C(H>?%69<{ZjW{y_=>Ud%icD@Q~3c{7m(ey;IdMRQG&2)#KS}
zE7jxq-tAf7m{HI=)$O_Gp6OowM5_1G)sTPUsp{UTZoN|7Qcre&rgwGERJUiJNIlyl
z)q`-YRL|;vbnE_X^%LyYSG2}qkiDLNrgsKHy<V*D*%a6o>(RrEv#GCW3HJA+hNY7}
zv70|&gjmA|jeM4PQPbG@SG2G{)unf;doNyck7u8G*<$g&T2-DX{@EVSmUq3~V%2@M
zv^RBiuj*>Dx4~6ZT@SBsLo3hn5~&c`sIj%yV=1Z{)Fyhf-W=0Ud*3(FYecN;ELByN
zte`rXZSSXbE}!gGbkZayfF^s5JcrCC(jTzeaTPqA%BuQn9m=P=Djwo`jeu0~KxL{o
z9I>jo3M`qyX7<;fDxcw1;!;L|$_#IDsY60#hWDzgt-HAjsM)OD0PT+*XL}V(%4BQc
zdUHw~5(u-srHvhubiCyi)`uD@><wxwyjk1q%>%USvwbVPMg!|wAbY9GD_Lxi)~bA^
zS24IQn1EX8HKPs*sFmJ$vDK2R;Nfca??GDY^3_h2y$V%%wbuwq6{_-TZ$Y8ef~%m)
zYuTYeTFdgat_oFot=9-j6$L75y^#Xz8m<Cr9qUx5wJ2Zbs$@fDo!2OoD%m9Djm4#5
zYEa$CrqpSzt2R2V<W*F((nfENXjqUy*yt^*kO(ReHhP=4uoilFsotQvl?4ZDi#u+0
zA-u%(=7{d}DqcWr^#%(hgclH7y+tu=ayA-T3u=43S^r)3nl{N(wnq$`Y*o{P+Ci`K
zl~=W<W?MSwS~ELK@azwUXm5DB9P+9qmfteuGql(jUiE=1I4I^zui6r&3cS-^<s9%n
z)f_xeP$Ql_?{)3I>{e&IY9m+M1H2!-YPA(`N<a^J&wADA9&3bxs%tb7ez9AP)WV*M
zU!0);E-L$r*A#UJ2`he~p?nk9!NW^l_Tnh*=Bi6hdufUX?RCj%FOXa+C^`)!ATCj-
z&CcN%u#DLkMrm`r<xEpd-m02HgM(=>mnI=dC@~G?Hsd;=#<P#dYt75YYl>gW(BK%a
z1yT-4LRv|w)tReca7<zq6SNyDCuwpDX?$=@(sB|~g$BnYEqS#=0%4NYq$!^&nu1!r
z!4^!=T2;N_B6u;p-q7Umf(#Je(8`)g1R5J}Xf3X_=Fsrc6bR2`$%)#$PBUEyjksEl
z@C1+n#7s?k0+4{1slgL0FgXN9lC3H4+14a&zFLEyV$y1g4n14D+*3OAY-%wdZ$RB3
zy@L0&Y%54ZK+%m_Ge4*;*VL7o7wv31Jm{@}Nf5it(t_T1HEoT@`aHpHz*5pjR|;d>
z>{ipX2YnSF94pA}_R&o-sbL(@`skR{pNIx9gX#eG-dozPiUF>U37rADSu7jPgw6mx
znYJc~foTQR!S?F6wFaK5!TRN{v(O!bbvY@~n7|mU2h$S60>)syw4pUyl$#S&hq35V
zZBErN7a|7`!(50QKn&A^&iKgz#4x?2%vx#iO6S5O+n1JVRch4?7b6#)H$%TXf^vZ|
zLr*r5X5<26hF)=vwFYZ28aOYgzGc6(LhGzlz2#!$0pl(G@)*hk##{R3F_Z_4xAYb*
ztuvx3`RG^n-<8_gD%*v~2ZXKXIJV~l!q(H*N;C2SVe75iT9-6#hA*gYv9DUC^~vtE
z#l`ReV~d{Sbe#_vTlA1KEPcS(q9;<;pgfM@4{Aqs<+%Ob``W8o4StGc3DXfUNA(=x
z9zg=;s9xxFt{*T*sdL4!^kY~a)icNSY&it|7?we(9MjciSF+$Gz9&|a7aj<zCv_zg
z3#4v(sdx3Wz1Y8&>Asel5<uB_AQmo=06M7`Ib{b>_DL%Hl4!|bP(3%h`6kWN@tkXZ
z5QE~JJ1EGOb9&J65J5nk)6*r^7!%GOb8(oF^^@IWvo>1w4>OFYHHx5ha;BqM_#<sh
z<!D2;448l(ZO9=D640ZKV3KzdNI;J^G9}in903o<vcn%~w^faG5y-QSbrHz3jx~Z2
zi9nuptPw4;`U@k_W)s;zwrc|`C%O>i#wNND<Yy-uLD9=P_p=j?MAEv28v(#6tl7s}
zm#Qf)LN*YlxCrESrx<cM)D>Ejrx;icr+YaB{O%(AosYGdO64LK0|AM;$i*PXyU38O
ztShuCFEY{@>p2bq*(GeuPOWFv5*L9M<s~ixIo>5kuz_p}a=c57RN8t~=MWed>+PF%
zX?5A%*BeS$N|CEwZ$yN@*SV`*Z@}NvngbGUZoN@1)?gxQO+Rre{siA>aRG2tboF}U
z-utY<qP}`i-EAnPv3ixg_mQ5lANowIR;s`f^Fvp37{1#zoZR+qcNCD@-c6%mWi~e)
zHXO2l-KVYcR2_0L4Ake4k>hkcIo(4>fpC8CtH3y9l$Kfb0s~I>sQus1wQZiNqb`OC
zJC3?`kP|-Yb^$rzqXq{0JTaEwgink)q%EjA;UbU=KH(ye3qD~4%VhJB3qE07-Iz~V
zU4aKaZLsH->9JNIVE<`D&Qp-kJZ;E%3KE*94QHO}3Ow(5gLQt_{P{)@7*OY38**X8
zdDjN=zvtarkpDeTwHT0(=?Y&n*38;qzwo7|>i)5&5x3r@CC1=^zg>4ktMs&-Y|6C^
zT!2kB<%$XtV3SR(s0iUm2~TI4N+>oWoBfup#aQ7l-jIFOG3_}|1^8k?gcKJu^LeX)
z1jsBi5VR&yyBZ4S=v=n`du>X^TvKiaz=Y0Rv-m2hL&48nvvCvaHK7A?AscaA8(Oi@
zEr+JzLetEZIy4Oznm)fZnkImupw(8{cm1HT?21*UY<O^?w8|_JE(j!)R+$)ln?w!K
zw(ITCX>E(A*?PAmnriD!xx^a^O||tVmiWB|mf}@{+9flqubum&_CQYX5(b&o6x&aQ
zn)o+UDP@cPY?YOP1PEyEn&~Op;WsLI06GLTp7ycdzohA&WFJek3vnUU$AZ-Run#oI
zSM0;TX&-n}uUHDN1#yW@Qp;5slpWNDSXm$0n>>0O#XrRIhOO0TMsGG*G?e*N{r${P
zOW_Wlm{1;S!S#$3LI|oySjrN1TGdC?;1_q4kRww@Sa6hB$B0BRBdpXCE1P0&&e$~&
z4KvbGucc*-b3Pe}m|q=bsi`YjsOo47vHulPz#e0%WmmF*#cF=XL!XZQ9Sc1+?ss6A
zYU3?6b0rvj)C5ayekBWjX5#M*gWH&7saLsDH3Jbms*^4CYL_=K8xwnqr8c~hg$et{
z?+ioaGxc{;2xO-H5B|Vx1SZpeXFgo+3`;E~_!_4bvHZ`p)by1_VlAKbJNytfz`p|v
z2h}%!*A|hWI_GyaD!_ER5`H)DxA|5Lc3(~}frpM;V5#k{WTE30S|V`awn7RWx5!dE
zTq%WqTYP2nLkj)&*6$S2Z*N;Dai$oEm{_W9Dep1G&}Y=(mzX-)e7M_IG9^bMoP}mv
z>Gv*=L?xS##N~t~tXHzdNL*p5i7Q#C(7TqJypn|qt)yYmiq9B8ud$SROJ!xI-l7J-
z9V4<KxW+XCwT5K6{<0C-!ie`RwL-#YOC#30Lx8hj#0T!!;VfW(_&X`I>N-q^CRc)?
zS=YNg$u-fe8?G!;^yDT>ZGBl$bmV4Bt-6whBDYxTb=D2M-ay`FDGf5MQa3!`t9Oro
zq`Dz<)`8t;>DMOlfQOstZxveGEaXZ40KbD2(+(?Z51Vc2cL#S^UO)GPJje72d=>YD
ztRhF(5+GybwY_)<giovn2`hziRq}#6*&lQC%wKj|3SaDr37MTFgHRYGs9nIz1X6#j
z?p56zS-ozLKb?A_+si!OAOWC2g2y~Was{ZTxjGthH`|e;mn3#u3Xj<#L%q41iYVtY
zsQ#xcn5#ESe(K^-Wj`gE8&O%Lm-bm%U$MXD>Nf=US>6z@EYB|Ox0I`RWlKd~2{aGV
zydVLw-zsZp-GO3|LJF#%vrD=9U5U?K8LI8)B!fg4WI!EYf6LSVm^k40Y_Sd;AQ_AZ
z$e>CG*}gpemBc|8hpKdtWIA#gROt|VIbZLTIAkdq-ulQ5LFN$2wB|AxJYTRq`Fh*L
z7fv4|`2(3RNalJjgGu@&EBEO)Ccm^4p5cH28f3mC8EP6Ngub=1zGuUHXqs;=Zvk%_
zo^Cm8DNRMwh&&5uzJc?C1jJzrOMWSeLCz$oe#a{Odc(wb&JqMBWWFOAnw&_H1l1#~
zr(bWAIASS0-9=2|l1v9KgQhvkHv09d#8Gq$ueQc}`zXm&av3zuF_sDF9h1kLra__v
zILAol0mM;eP&;8|&0sYF{ZC~lEW-z&Y}LeW=!~WO*HW!x9^|A<nd2fJ`z4?sZTX|6
zHs&cQ@d%J-$$wJPOK@P`IpX|8p|nX0^Z+{=(l01g19D{i3@-X*K#tr+fkfL3$dP*>
zkiZy_gFVo9aGSuu(>m6*KtI~K&V`_DRGkY!AzEEdQ0xkz0*Jbt!YJQ}nbd+qa+G+i
zJ-cSEUcg>2)SFd;A;Nh)2G$T4iwYc)BX>i13alYH*bUv!tpPQRT`1Ha=rqhl$Ogi&
zoE&OJFD#~YWmt~C$RSB5r?`Q&h5|Vgft)rqN11Mqi0Z4eYw*)Cgtk;uT|+3eo0=08
zdtaylW@?UDB?twv@YJ02^c=D8CI-?$7|qji)PGoOeduK?sBO&2dNtP*d)r68rFYNn
zkN580<Jr_#eMY4^r+RgN_Niy=?Zx_Zy=-F+PyA-9IDpXh=O~AARBNV*F<{9tKs=k3
z>NC`qpXVSVqAnND(7Fe5)SIs0z|ey^YA0(B<ti*11jp?jjr1njHOF%lkq-nHwL9)K
zGe{^Mr)H)m1c_+ocuxEwfeMoE+>YlIKS(~F3xI>7kLR?zop0tyM{eeh=iL7%YcRr4
z$RYYWlcSu^QDYZ8DZ8j#S3Nagh$hElH2E2)$w9)XGdXfE4H8D3$q^wUVWG*-<fP8a
zCMO0`9Wdg@9Q7J2WTDLjOU(!KY>wLgf0;l#m!ozl{a-G+?7uncU08C+UIYmja+Ke4
z*!vZF*FWN?V=0Z&3$CR!N-sEr18Ts&;0z9su=GMs`nSuLD$>$lShr?+xc#rLZTyK!
z`K61nO`0Z|FzphV#&@z7l~HRiYNoI9G^@>3G}%=&+G}%lG58@wQn|s9^*SZfbAsCN
z+^psHgy#BCPiS~94q?8gS&)NKp-s<K7TJ~8>R)Bo;HTJb;Q{cb=b8c!B=Dva9;KT=
zqGr=`!;5lxn9dnHDNLV{t2X6BgG6@laBpU=2*9}zSiqf?E5dY#g>IUiix8@Y29?wV
z*qgZ`Ty<D*sB?1R`L2*cZ_LdV+W<!jtu>Fpu8=~QK0jA&aG8Y}3it(A+R7(wKwX%t
zK4gt0kC#JTyM&du)yH>Tk}D6fz$7lUA59RDz*&-uLo7*RzAVWN@}P*GqPxkPEXfVE
zvZ^>Js%o=>cKUTs*tv>>LPgoR`ND7J@KI#v!fy&tI&idei*DqT5Kn1-5hr#7pK+2y
z=@UD*Q)jD|Iy^V1t<BBaXRm0d5A<BUHkTg`WvjVxD<9@68*^2J0Xj%=dLme{Dt59!
zFJgT<AW6C|S8c-!6f!V-eXe>BTF{VMIQ7_&t1j|bSD{|H<XyI~!yWWSk8R172MJ)J
zUR!blBD(?-jkP5gOA6HsB<i&#Hzr&bk-T18a^pAhdPxq|YfEnD>#Yi24iLAoe^%<(
zblR4yh(oem-YMI1!y@+v66I{mg})Hxz+Zq&-7c!bI|c2xjeS|Ehy2@eZ@JZ)i(N1b
zLM3<GYL!0UQ@J}=&UkP!pmyiVY%WMxusb&-62u@;*6v&!jv!<L1gO32ct`z}j(c4M
zT9@|b%7qp(K-ilb6x|DwbaD~w?g*me@`765ysV@4yzBJ4&9c6Eay`gH#|_9+2IZ;N
z6p9J*WX}<grMl>oZyT7Ww%|1sk5HG|JoQfAVS<AWdo@pe)q_^ahJH|+l&4GuUSG?>
zgOetnZQQ1NysakZVgE(z3s<KYX-XbkDUATZ0pJ^X>Hv?mo#sm(4S`v#V^@7g<*Yo}
zdSIgUX64D&1BtrN$_t701tjV|D-W?R9f;;p)6QYH->tXqG$&6Ho(D|g=E-FoBvj_)
zVHu~+1&Pj`lb7fsEOk0}4qJOSI(JUqO*dO3kz#}(>|bqvbGIJxKDyd9k2-gCp3JdB
z2xYC#D-<WeAW_!pyoMru1QKPf&b#_P?nj6e%g*Y&M)z8mXr0R=h4uCW_v?K;)$83-
z=zw{BUXD0lgAhttpBE74cpynB59fHIM%gH3eO~cxvXpFD%KE$pU97+GLf{8C=PCEa
zx~A@CJKE_9_V5FG`$xeNi&P#zjoX|jvzj1L-sU`+)dY$1Hs>L$Dau0x1G3@0vOJ1k
zXffTKchx=CC<-0&XwBPWpM5|t$gbMsmO>|Xd)%(2Y}OvPYbl$xhq`tL#h`iA(BIm(
z{8`_rJo2rJp#l2aJUKNW1dMO<<kSEOjBoQWHH4*<NB%ai!R^vg$|IAd-{vK5v+m=C
zz|kLJFFmUNspAp149XK9am%1Q@sT_k&*dqUCq9ygcy0zA@8clvLSEKLJMXW0Nw)7o
z9zyc}06Cuq_eFNy<9eTpi+OU51QSpf^JJ<JB%m(lAyvp1kbD|Uec2C>>*LG&=3myK
z;oLXh6s`+0(CM3x^L^|YPz<UwfGvGO?^rn?Uv?*$sK9`HIeb6@VL*OBoC|>j!hn2)
zY;+GHpQu_^QLVSCtaTB{1J$|+JXXk;0}v{tlaB$|i6dZm)v+nn`t?<HE&?rMbuI!8
zsk;1taOL@YNY&+IQhr9$AfF5#VJDu{AM)HV!o{GIh7tL)vmpeG5&1I02MH@iP(412
zq9c4kZF_#!YM&>zIcl$bO26N-@9e4n>M7fvFSkiPxUf(2m3{eeiF6gfCtV`(>}PxH
zlRY(i@{wU97bc#eaX-sP#=_;G$i4aMBN$)VkU_|uuN(p%?*9lCctpv%tV8|xc|Jl8
zmjm1b`3Txv4sZ|Vs|{-|1AmjR90712#X&}ZDR{Bt?5!8{bv4y5Jy-oWE(4{Id+7a4
z^*^eg?ValVbhqBAXXzr5m3kUChj2hwVY$W7K=}55Dn#SwaK3uS6*4g8yL|OIs}VZJ
zN5lC0eC4KCJau=^9xrr%qPpi*y;9F%L&AP~Q7?EL&qRJ5k^uic-zQ=ckihvqU&bUL
zF%`ehmoW*EeC_@|U&bVoLu>c<`G`qgp<&@8dr#T_d`ZvtJa)>N5#SO#-xR?RNR)Ic
zUxrj5QPQdW;Q#SSPo&shoyrgW@k$m~y7%9-Jx4)kh9B9dFY8qmKf2{m@jvFvQwYdF
z<;Q%SLQE9KVLAKR?)?Asgs0|bXUzH(nmIo^V-_SZe$JOW6Oh38IUkWmJ{BX81~Bqd
zgFVtR^4+u-{5e1USHv_X7vaGt#2%~jSc~aI+(%~$Lww5Bv8hJtre3|f+Xw%pU!_)p
zB^){gV8sxh^Z+1X#SmXWEK?w1#SkBsDcT$RXz~qXo%_(<*hQeZH_Sz#xi`!g5C?Wp
z0m3jJ4(!I!@wyMrTAScgX4!lD=uxExKOIBJUr+GKDGWKlOz_Dm3=%LCe3-(tNdSpW
z!USJ@mQQRFh`~1r6Mb@%Kpe42nB)`bQm!R736p%8j=UXfq!>DNlCRT4vTeC0%A4$y
zfxVPMTTb?6c$(M&gUyqDogThY5uGyScSU0DnBvRu<fWsCp*O|Xspfw)k<5R?C$|@}
zNaXUT{>}>I@~8STw_aH!a{1GI;`qS9M=pPwuk?S4q+GtQlh|HM_;!@czY?F1Aa%x-
zttiIXOrQF&Gn{G9W6$o7;aoM}?LQqApYO{N@t2QZb(!yrI|GT<!ud3iKBCQ`kK&zG
zwlYxvIJ;(*i(#NWSGhxp&P-SN0wPF)4lq{v8jG`Ekc8nY|EuswAhF{hPQ|0LZ8(P`
z-r-DW&f-${K4Oi)ZrlsAwT-^4t@fYl^nl{u=<^1w4-s{G`2~SZ?4{TA^@&YBd8h;?
z#>yri=H*|x3@qHt9v-4UmfY-<`CFZ5{Wg=#P5}g!E$s6l`tHOQpUgz#7@xQ#gxwno
zgHiQt`%wM5RJ{vC8PR%@`H@V;nBU{e+HY69uJ=@Ydwe)1djz`tX!J9-Xt@5@<YzvG
zFPy}L?q@Xd-XtUVQRrS)F+!i4-0PERP%t61mxTHVA&~pn`4M{Gj{D#>C^&*9S-Ove
za$y7#iwAsJM|>VD$IAB7iSz*<a>?CM2G0f_^eLIl!_0H55o0?>>USi-5Xodb2GBtt
zPW-!YY3P2zI*ih9Pk!Mv3o?6<`ND_5tRGp#Q+r>tnWOXp$*+C#1Q1LJeeJ^u;MYP3
zjrSevGFtyO^_|mGNYX**J8HZcbg+!OFt7Qu`rCJn(M$BuYku7PTu&a!kA+Jc?N^xH
zf0BNqQiGo&Pk{$8aJ1jd;V~jelrq|%@8d2AB)Vg?-_QKQ1rY;N1*d|3wUQ4&$$=GP
z{3YdAvH&#3->if6Nq`%GP~cs^vc|8*)&|(3*UW@n{f55Kr~%V4g%+}R{W4|Z=L^}p
zewi`>2~*znhu6Rqx;RD*GDTbIS6BPR#WBf4$?xIv4_`4P3m3;$`RU>qt#5v6*$@0!
z#>-P|#2mfNV<5zK36EgJ2Y$a;w?P8z1HW9iL1H?7;Fs$*k$m0$z%SQr$)R=o13%X7
zn|Wz~*ua|1)o-oZ;Fl|bpD&CX{Bk7#iDEbS<w^jObo^KemW$SdS3Y4co~yrWJbJ>#
zpk?iZi$TlU3BQc~{d`$F;g``rNSJ=YFQb1VMf88dkLdr17$ktZU~gWc|4pg7;Fd!B
zlnZ{j8}jq8^Mb!XY~Vq{(hGiU;Bg9smWAv^Ki#fKHM{7S$NS*IvWtFsuL2}=F8ZB&
z6@CT2wqJnXtGEFK>e?@Gxt(bD(JyehooM&bFCZ`IKp05<0=QRk2WBl2#kGN~k?a>+
zzdcwRkSG4gs0P(n14>$)aDW5^XmMf)5`*E@05&i;Vk#o@Nzwb%<@(Kux_~@~0uwTI
z0d$9u0reX5u7J#I0qHZ5tR!v#Gx0W#1H*>0?knIMh6bcNL{<?pLj&j%3=EWonhs+-
zSLnAUh6Uu&8<>z87Qn_&;Gp^=Si5)iJ5nP8((R$DkQouceqmM!3IR-lK-L+1=DYe#
z)3-8!WYz8Hi~v=96?<@<erNfrfShGuqK2yirr3IbgrTbl>Oro8hwrnU>-2{!-gi}K
zV!j_RMII`^C+7PB<e`ScF`*b3vyT0Fy*{#Xozrh%!tixYzkvkAx_}&;AW`Z%YKT8_
z1W+4UlMVX46&q!P0+y!4#y~N@I8P)A1#oemyf|nyUOii|LGN2t@0Ln4qCOx4J;(r}
zJ|J)6f&@f;0AqCsg{%QGafkiPM&0MB+TmhQsJFw#pipl|ARrPZ&;iDd0Ngvj6dIrb
zzsFv_NpIk(+~Z=<RoXp)91$2m2pD?;rPpvL3lbQ60@t?U-Y7uBe;*5M(W}b$fsisZ
z(Dwyoq7-bX><b{O@69d8Tt3MDwMBoS;-K426iFO(yNM!+gVaqcM1vvn`kE!{^_5j$
zyN1%`tFPT|qNVQZfV_GdP$<^;ni`DXUWFFr2MV|9b1ILx5On+Mhzmitua3AqO}DR(
z1mX?2e+ba+tM6HlWqQ07exs4Tmy-j%L6@(-4@f5g5{lmk948T=%U7p`leiHCdjGU*
z0$sj3?V3QBuTDEo0>VH#O-_Q}!$B_pQXuO!d(cO859d<A>!aj{7in|c{0Xp+Ki2P0
z{^m?Ia51`nqxnHMry&LCzU-zQ`n+V{pgal(6GDB1XzKk!2;@NK`$RvG92gW?R%p^Z
z85l&W0{a_6f>nc9&Q5(uVvvhO9%2w7QNWZ#gM2Vswi5x<;Gm4Wz=X`;Al9UFNL720
zs%F8g8Fplse%9k>L2sdTm<mAt7uRxF(Wm;6<k+CX@8l5^%437bUd<9hsLuqJ+M~aj
zoDh^g5gA|zO$fp#ek_DQPGR5e(LYH}3CchRsaxU(F%#;A5b86XefF8YEj2wTy&1Bz
z5Sku@H~W!}@`6EaeGp;j`n~!Yy<mM1FHlT}vKk~?HwBf>u~8n@=d|8|8DHs7bOlGm
z26zrTHwEQgFOVo~QxJE(D6<6;^I=o4uoI6zh(u(7f;R=D*YVe5g4AvGY~@#ahnDrh
z%b?`f>VxvWH)H@>PqkhYgRP;U)+dxTIOK`F5o4#j8Bw->ukL4$@6!wHr@z*}&-M2S
z83}6>*&ibN`?JSS>09pV9}*Y9hzb1up_B;iK?1*j2xr%1G)NfTKh*S(JhUgW)+{1U
z`5$n&O_<QGW&b*@KXi9(NZJf0aYM2pKmxNiBpU)GFl$4yA&3+WQ5%vC5u#433$gdU
z(p$Cyfq7HsVpEBAA=w^y3hcTN+T&F^5(x*j5uvQn_RuqWt*2&0$jBg6R@E?7ePl@K
z%xeV-kRV0Bfdu48$6Szr9O;+~66TI{%q3EoJCe*5;7}hGQaVX+I_CswSa(nphIwO*
z3dxiNNT81jAtfQ70)14d;5t4k@KmCY3Ke#=PSD#|5$vx+Sqs<~XZ0UK6GBFr)rSJ1
z2&$w_4`KiQ#X0>qPYr&G{W~7OWlay|h}<tom^VGtQ1mEBls`RG(ToSrAQ7=n4_z}W
zB+j;pftU*_GeY8O7L`OS^vTQ+uEE{Q3x~j*kP?gCjKl7KK40C7J@S)&TRB*wO(P<s
zACk*4NR&D!1eZahCPE!NkL~_Rf2d}jt3o|HFC-Uz$UtRY2u_U}IYQL@keJs*p^-s4
zrO`4xKP2D5!c#7cm3v1HTCgCfZ3t!U#w7V5C)N2WB;7hc{&@9sy}Ld8cs28Xq3iZL
zKkG}q{tYx$=q96DK;vaId-*qgbopkd6fjZBW@ns$L@AqTocxKa;NjNM9gGJnwz?WL
z5w<$5P{3PZE42c@&sspu@bTymj42f#yDHQQA3Lo85ft(<wF1vK7ZACNz3wr_x7_9G
zQ1y2?)rSlTg;4#iG$#tNPYh+f7WTwuDXjTbTF8D*F_w4&2SP^7dV{K4NY(u&#Qr(P
zn83EHhSvHU2OE!o{Y^;bzd-`~n-KEf-_s~8gtgkqka9Yt#`dY~u4P6C`)04vSg8S1
zbPhy-aMH03BoI!Lb(BB?i2-;r)ZjD*AmvtxL0cyER7mdLBnNGEDkOJrk_DhsA?)7n
z<d#6-EDg!)Xh^b?x^Z&_Xt8H3<gwk^P_CGEAfbDfdg2W_7Az$4SNn0pnC5x(S7#=H
zi<$ImNM=$%q9VVB;$l|;l9WOSJZL6^#7zD*R3;J}M2dOzYpCHLtW^}t71B!C*M7n>
zuJcs(4a@loE=uVe&Jh>VL86qt;Y@o8OYvaea8*Yhn-r2W9Ka6c80lsM!gA{ZCR7H5
zWmEzZDg(k!R8mOc-{7#=x`3eN+AW-teS^bt>w>318XT5e7mz?297a^~AO=!2sJ$M}
zn#lg1XFTA4J&bjchp15+J)`WMI7jhx9Tk?rA-I4V6_&vvNI;DW%akuj@_XT6Ti)qJ
z@`YtoIMl{EPK_0%c`(6l?lYeCbe!PW3oa@%AuPKDBuRzi!nuJ&Arr!IZVPDVQWVtY
zhH;zufZv#}1m=cug`JQ0BC>cvn2-0CAkYL0!g9ER1muFS9Pl6kxgd-Ij|E0mi^!~{
zcK5JR=P6(6Dv=#a!*W%E5R{fu50JMkqIqt!RDp4SmF?67Ow_~<%eRm~0>KWa#ZCew
z5bSWHCe|ELEXXzXk^*C%r)rIhK?8J6Sl)&z;sbO|*e^1FAW13QAZdL>v%H9g-#RuS
zYJ6O^&V``Sx6U<#M&G)yd>INVfLIr9-IkBOA{u=g!{WUJ5YXJ{3__65+~^EKkkH(C
zc@P#+ZMTU*$WFx!t@Ae51R8_eoG}PV0Bv)|AV>ghqcQj}x-^E1qT#F&5l`$+*7XIm
zklhtGuJi2(;}u<c6E;RYyOT|f8!cMwbb1F&AnpvyB^V?ScZRV9(_6_gYWPpXN^z_S
zYpxp!mMAu&Ex{1(3y=A8Q=H_2gz~3h9Hdb;58CM4eQ1Q(I1l^3<wl$hC^iO_gX5?Z
z{JyX}3xqh-_k|H)x8mBM4zLalj5bvVoc4(E#qEI89w32mAT0MgAW0_-w=<SJaEyBO
zu)U~(5mU+!hviivaG`WKtPA%C5=w`|NSV<Ml^FHoQTE@Yab49>w^-U!9(9YQ{yZ9%
zF9|{g2uH(+$xn%Tqd!luo+;x@)d?4Zwv;EF@fhPhc_Qo=u_Z`AoCqUrd|E(YPx&L8
znl^r{`q71;?Ddb~9H+Tyi}_<XDuS69-(vn4zPgc^$T0<8<UHGvF{V|XcOmG7pYx87
zfD9nchvUt;Lj?&d&WBsJmIDSm&I@c&iP56!f{S1R;X+uxWEfLu$9W+vUor#<gbQK3
zs5+SDW{h^6uh@xFV~D5nm56lf;G#KSiAc{15*V*Uf?~A*35-`FS2eQQatLfW`?K%L
zjP~XIBl2oZjBhskM`UIIBvkrG(D7pEV6R!r?rMmkQ|lH=Z&=nw<QtYTg*KVBk)(LF
z5hM_5Bbdz}iJ^nDiQ)DK4UM~%j>BCHdc$&fM7r3RLT^|OkHq=CUsRUfupAyKyUH3$
z!9_f%jf-S0w(o9)+K0wPuqe=WOpRkAYLg<$G<K@7vAqVr#C!lBaFZf(E`kKyqzL9B
zMFSua4NQs@OpAyFDlsS;&?ZOJsS%Mtl|1N8iO2-1WFdk2MuZZmBdL0EntAgg${n%(
zcE_fMU#S7%SV5C|UPPWpLK0~6B64v8iD5M_5)`+Ih~yE;yhun~*pM8|{CSZUBE>9O
z9HwIzYno^SNGyur&C8LV)V)tvvuzc|_$n|&pdRNdz@mt}m;w?uEs7M1Bo0V`Es9|4
z+8pg%9MqOXvX-+M&5Ub&OCm-tza~<QR`$NbzHVkbTJw%mIWPhAPDJLYK?3NV2y)aE
zr+`G|-id^3_>O}}R1Q7<P9!3(he#Gzy8k~`6ir!7rY(yo1sN;V<({somMxmM5tYCb
z40AkcELs*c7nS`B5;)7Kf63Pt!&`c7_Wd<RhZ@^y2QUF)J2M3&5bTINe+3ByJA#}g
zoxg&_`Kujq&R>ZZ_S+G8{wi5G>a`<u{<@tK5V&&nK_shBfhYEUcIw9JXS>@on;Yvq
z{tqHJWn$<pFTdOLA$$2+V_fpXh|HLRi9Y<0N<SlnVB0#@yrpqAu`VJnpyPrPgx1l_
zY{G#+t!Fp1GRhO{Bl2=NZW0kUf>+biTn3fez=pOmN|GBQGNplALXg=I!Dg1u(qR!?
z`$qfYRz|ibxiO;fL>+M<wK0Mdyl;d_XuVDBOl#wCVpBwEM7<0l%D!%jG%e>>@A=J~
z&FsHzj2jc1BQnhbCS*28;L<a^G`Qm}?18pMX>v<MCQxv71~OY{6fT6X11<*74tqjd
zW3eZ(!$qPGhU_4u8@LdB>L;vwd*i0WClPs6l&6@G`6Pm)qL;Z0oaRopwY~ALvYnVB
z(rODbJIT3h!wg1gaEk{bN@Z-d%1$+~B5cCHwZ`_m4u++41mDrhfz|=i5>+QZc_4Ci
z2MidEF!=fzY1H0&Lx93@9=3n1GBQfyu-mG+0683Kcr}0LA&*`@|BhYT$>@~$E~4<&
z2T*yC`7VODH0iyFJO#UyBWyUy9C2|dr*njG=sgYGaHEy>WGCaU#L<X+i2zK<9F1Th
zqy$=?f}4uR*u$NT>k`LY9J+CRjBt>Bh78`~`kpQCY}}jt-o*((=6k|HxJyFxj<((8
zdSj82Iu}vI*IdAb)VT;kN!h4))$6y2ec?vqE+zGw+lnEG{YI@g5NQW5d~W}OtRd{_
zTZ{qz{slPUqy!|tBQ>Ca`Fd-2mx{Yl0}5mhg9O5W0`xGw3B#{O4P^hk)o7L&SRmgw
z1QRj?3-G>SoXdc!Wvg#B8YF59<Vgl@I}x`4CmE$&2Hp88`}tO*VdB*SnX|)vCdj;6
zfSes}M4>FqltHYji_t1Es6dWgFd;Lj0Am-|N+E-JQpbjMF|J9}xi~aW>Ig@a1xGlT
z9qfX#1{cVajC?*%1{Yutj_+vz2lM1LmbuMno_fu#JI#~VsP4N17R5c<+XY!G>|VDS
zyA0pk1x5kAAE9|DJYCA}zsI<(d})EkJu)$&yR;yDHH}{)QQ@Tp*WPMf%~i;svTgSm
zjmwu6Xng+)8EVF51qJ*Bo=B)HD`;~Uy@?JI50|sjdyOv5mKSLJl#rOjEr>LhrI1@)
zUeM}xYl#AbaaCzeLDo`x;=M)-Phw30zVfp+A6WcV)Pn_>f^X;3dksCFd7+wZzt>3G
zIrkfbRP!I*Ugn=WdYL|oRBl-E8%ONphl~a_xAu4u*PAYX0}0<Hdc4O!o_oGGK8+;4
zQDmjA@7d$;{C-l87oSZ%R{eCh7rOU&9-lp;Zyb^8b3J?X?(uk!XHrk}sP2WYCiPDB
z!WF9SPrjV$-n%08C%QWYG0T;EvinOA1pL!IZhH|zy;9Zq&Jr$Nfz`A6xgI@HdV9c&
z&o5nR-ZRzRUa0QHKjcKhR94UG-p}{Mx0#ySUH@#f@vt}kVubIYPc&8cgeZwTjTbv`
zU5h$Syrz4wK;xI3h(v=QEXe0C%MytOKUe@a^g31v(CF7C_UT8A;gQ>x6l(mYFma)@
zq_Bu@Xo-Z<lET(q>BL`c5Y(0xW*sWzC;n;!8W@E}u?U45(9l{@$oI6@g1}&3Q7FS5
zkdR$bDEG7=fx4m)ds?hTY6G%lB^&>|QPO;+t3vDe%0ijLg$z_y79!cjZx1!VVA4J;
zR5sWro;PrN2tP$UfCrdD9~S0_o6jHt^I>6;$eDly%!h?oDJk3oiE!`3!m<s8BKt@T
zku_OYD6@}}g;rT#i0mWQbFvsHTMF?_m4BzYJb`>38}O3xN^5XL5Q66@b&G2}ZJD-^
z@v|tk&;Z^-`?yfqU8u%JD|F63o1I*4`dDb1@k9-tqV4e5!J?hi$AvPW!Bb#;Tqpxp
zkf_1Og$27&13K|11`k+w6so%lMZhX~(EFrN2CR~WfOTgf1*~)~-GCg_XP!d7y=JHW
zpP@DTtWc(S@C;UbRwz?EAc6K-p_AfiK#hK|kf(T9;@^hW@u1rww7Wi7DEA?d1kk}k
znc)Empo4|jU5}@4bR_WBO<~q<`>}r;<J5*{3gHIm+GGOPCeIftzZ9z0J9N7-A+KR_
zo}GThxYpC=C+acE;E9Lmu%8R@Vv@^2K^F?~I@1B_g9Pml`bL#ndvIUl&z>6m6zz=%
zFtBe_Mz0{D*EcF}Sb#)(_l<^YqoTcu!P~oER2>)<?JarG>mQZvEm>&q0a0r23&IAt
z=^;^NWK^}E>~Fm2sR7|wLBoGYRBjLweE1KEVuL{A79^|~5)F>LY=zh&XhWmwh|5+u
zx%}6onx6;Tqz7YR*sv&^KfSynS?IpuQ7yMIMPlHg@kX<!2O6c1jE>5Q1t$7&bX4{u
zNEkReDz7+$1nTH0LPxkFLO`50I-0&i7Q%yME|Iz2YQW0?#n`cdMzV&vWl&n3xn<Ba
zVo~`qssztGu&BJm4iaUsXz?ww41N)kP@@fQwqm>ttjgn}xWbZ~`csddPr&;>|7>sJ
zCld5oIeKVW4+@KE){TqGQ*k^-(c_{4abX@LfX77<hD%`-JuaHMQ5H>ej!YjHP2XU(
z;YEX*z`m?C+C4hKtsZ4KCb(tLoSG1oS1c2JPECl)HvvGRj0w@JohJ0kGA2YD-Of)F
z(aPwyDeUD}jct!iaSNgOHpOj2nr~C0a=t+Y6`2x6oFFPf*WIT?OYV{tq3iB6KBh!V
z@3a!UB8WDovKfPn)ZeGNWzdC_scspRB$*nO-*ZXuB+1k$;vP{3zGj7|8K)xrTUIDz
zYP95bt0^x70@I^P!&o9Emuxod79-Nd=_&(Vh3A(^RC{_<<_8iyy)r!-cS@u5%Je9<
z0&kP6PAJ$5%w|LCjHQpvb|L6Qf3|Bs<yU4$gW@IvQ~)tMiqKcsZ^FFUQM`X4CX6ZD
zXm+&mJ^XS)f)X%u*_6RXRn=U#3=3w?jmjJjWKhQ3XjwZ6O8J+$(aMh28hUjhK|76Q
zcF}9bTIJDYE(V?cFN?}_3WR{MEGj=(1riv`q7~xC1W4GqEZSULdL&Yunk|dAc*HtF
zFIgn$e!x1r-Rs8RvL9XNmO@FJby1lIfDlSq7nL7@0*O-AMd9j2Yv466keRz>YvjsO
z)<sLYTDyc>!``LdRz@24dur<4QYfucAI%Zzg#=IQ)JGE{D+Us!)JKsO6Q$&#l=^6!
z$Ate@@=ywPDfQ8|-LTBzO9+BPcgX6ak37oPuLSLfK8jxPp{edY*#9ll^IG8v%EluR
z6o5nxKZ?r53?$0_h-!FA3>oa1c18JO_DDkUVesv8YvIGl+2xKL`tH^)cXrWtw{}Ib
zno+ov3~GC#SwBZbxRiwCo+$Ff{0JaP;nF_#+!$k8#XiUDg9)L1Q5h$J1l+zT;-m%C
zut{>chwM(wXy&On6qN@Z;1WA(h&O*gLg`R66t)ghb}&iK{IES~tnr1X;;^ekSchFD
za^HtZX*%|(Py%_<o;ThoQ>sonl?NA<Kj~B+Brr}!gCgAzl9Zy@%1|_sq%F~zsL0iW
zKnI+0Ishaz&o~_b5}Ic&cR-R>nxA9`fB?`>t_|cve{yXgANrHi0T2e#PfiD<g4!?9
ztT9ER15%LuC5j_f-T^7<fJ@W?6Is_OhE{RO=><H2<RzyUKmzj;^#Vn!DQdVrMQp<J
zMlqWL#pZpA<f4s7{F#hdK|--l5yHN0G_Fz<v-U4i>e#1KjIA~JB^(;~s8atTxw3);
zO8+9c>VX7G|01k<wDg0-(%-+RxUNWqti%u@>wqE|vPu^EeP9tnR(e@kvhdancD6<I
zva<h5E=qWnHJ@sPql1dndqtF*Lb=+oB4u>Z|36CoTMZtFNCjdrcUX~(PeB4~SdolR
zLBiZ&MFpc_F2$$B;PKM%B6U=eh?gV}dLxQtyd+tOmqr#*yhPI}9n{7aWliS2S(vS+
zQS8_vBPqHwP2D-6h;KjG!s&)qKEbgNk03gsNX{ydC}~0w`jcK)NmFZ2VqZ=-n%p+2
zNX{uRiCe_q0`ig!R3;T62qZ%?LG6vAtheN_%0TjsB4=J_$d2j4j+P+Mv(p_zKtgu9
zV+cr~PA5ZXU}eaVnPOm7f`H~sSCj0SStLgmo<egbjV!*Q$k51|SEMZdeOFyO%lKOj
z9*C}j7*OUpT?G;-^PH{%iLRPgRIpff6)|{M%`Z|H$*z(-=q+%%O0v*Z3omz739`jS
zSu32bDnYSJikz8OLQS+xcGX9-(N)VF3-Jh|%bXShiISF43(=QEOUV4?%=4zvyxDS`
z%kiZGOyU;l;+-OpP+4AtZ+3l7@7k3HwJk+iU)kN>G#<|OZ7ISLEG2?V$%d`0exA{x
zVygoMCZM(!$@kkq0%|Mu`Z#jGrBwVUcFXxj+*A39Gkd{>Yx|@~USkAFQbqF1z950|
zNfEy6+m%CL{_SRi7Z`u2-0dRJ{NL@&|5DydyNje-1qp=RMR2RvaRgAGvFJjhbJb@q
z0y*Z-Tm+hupB2fYvr;}KKPy5=M2@+X9P|DnvCCV$5WBqnMRH-pBPi}Kk_#h96t=&}
zSr|*n&M%9^F7MzX?DD>JEg-l2rE3AX<u8k5)ColZeOZKcalM63DT7}w%35G&78^Hu
z1HTmE{bTNv%cxf_iILF(1RyUtLjxorFF8X4Bp@%*(AY<vQ-;pb2E>%wm>S#6z8qlQ
zVUJs8n4TK&#OQ|v00zY5B^{6e7!Z^9KtN*j4~R9Wjfs08#Guiy4vfirAd*9FH74(Y
zNEUzw#&8d$IX46Xbuk?0mZa|O*^Q-_BXI`WF@gqBT}+<lmhsN5i@~`+%5{M>guS%f
z=vF?&RiWM-5|bymWxO|s#BhR3?_!owZw_PH3Zqr|FdR?vIRPeAhQ;LF2av!W7Q^ll
z-^zgs+I1v*dWF%p`N)_!Xdot3M#hT8K_^J4jEv!+b3R28W!P$H6Jp96_Kp>}0#JjW
zPK9WHF(D@1Kjfe{Atv2FNVMvNSiu`;RdWBt;67zyOq~)F?qBktHz_9FzhuFuOpcNJ
zZ^=!-PGovaNyi$d*e@%MYpOtq6|_vDL)+;wdHo(FY?>Y`5byMY1ore8_NFxc%V=vl
zD<%RH5YU_zlM?_WG-t)+1ON%mSutk<l+k8leoRb&#j6ahYQAd%Z7Jr*<RT790L_od
z2>=p6^JAC*cOtiq_f8kbvX-(RR~dKs7RT_?Oa_Tvyw8a5im|&^8>NZ2Vlo*GCdSiS
zF(jk0NI(X#Z?j>mjgrLMF`0}86EbhdWD=RbnYe`QSZy>+E|E2ZBE^AAXt+Ow8Q3tW
z*|DtmS-~3PL7yEnis+a|ZAccZVE<WT+*rB7sTr84*$Ss-AYsCanEVndNYrda3<-5|
z(GAJI_t>R1M)S(|Tm*8F@5OS&b$ZB<P%I{L1t5X&UJN<88#w~(T*LnUzHxKa8W(}a
z?3$RoXws0o$Tcy)*p7n)!Wy#SHq`AZr1WC=hSQ1njV}HVX%cLu@arn7+(vfGTH~Y2
zjSeuF0N&_S4kS$57?ZviB!D+k!#>Xu@UWi!;REBvs(KfJR_b~efht!YlhNB%ymIw4
z!Ru%Tb`|x)UfcVjk(*t<*O{;2LTN8`1MPl5qS(DLB>X#b9Z;XMjvI^{DnECNC71uX
z(;`>#DD3l?U+mIAl1>aRpYEnzMNZ-nTeZRH+WC-+KpBriE&}<CLoNdOj6;NgS1f=4
z*{^WJBUZ_-S%Yi7)f<gwoxl(i5RcKrU&V67i~|X*uVM|Zmh~ZL@>Q%!Q){p22{@DQ
zV#+bLYoqa54SqQ&l)CuNZAx-2-#H`gD(+goqh6*!7$jWFcd^oAa4obkCk9*#N;(pg
zuYO7vOgkFGON+N-a9oYAVa2k}#XPa9)P23WJyqSAHQ9_CJSSp!A*2X3y_$x}DfaSa
zBVK;W@p53olv6PoLV`pwr(#%qaEb&KJUqkJZZ;ZJo^dJzCMt8rsSHRGa>fNnAe^Cb
zfvFD!42!cYw#6vzc-BRrMnCH!P%&p?GUEmnAe<$yc1lOZ8U?j}@vI5<zqc4Cv;F<z
z&Rw%cRG&et`KQLjmiP_CL2>E3K>~45T-FLC5C_Fkt5M|h8&P?~?c28-V>}hZT_vi>
z@VE>`Aq1u2afG7eTpLkEM#Y751%aj?6_?HxBs53GrE>)d%~5g3xi%tle4IPi8$n>m
zj*rWc0TPCfk4x_g5=i6Y(z}A>s_?G0)D(?_+WdIdH}-^2jDgwy`Eh*cnTHpRsVNpw
zQ%tK^<kSaDU@dYQ0VJ>%Q6um>vW>~+CCsx2mt>d3<!w$di5r)<IYB~aNgTI1SJC)x
zOpUOdeYD3|^XPJ?3SgoN%bhBK1jO>Ve3=a-AeP7B=E(zq#3Hpk9vAmLh!nY;<?-S!
zbS;|-fx>Eb{4?WJ<!ZMOx{$XzE-&>#28FDSr`t+YYNyrl4wd|a(T&L~tYy)CMwhC!
zE&}b;*T!X<1~Ncc8&B|KeH2PwVQn18`d?Di)tKs3Z%^K5JnpHgcQGg!taqzQ-k?4%
zuO2}M81-@7L|9G3tT7FeU3SOMjrToOyIc(N1-o1f@&&u%(yc-V7`x(_KC&?o8|-5p
z4jQMb_PG!g73_=4i>-}$RIo3e5$Q6JfY=wmwk039jj6#8$bkz2ng^VL3lfDNa0V_&
zXdbvca2r!p@U<AYZ1ER}3chwt;I9t3wcxJ~IpY?J0Qx$PaoYvMwh7!>JZm=l@eAYD
z(06fMj_yZo+ytXmJ04d~+jo6wD4rVp6z&oa&_u@_aFDR_cwF9F0SWNqaipxtU4n$W
zJRVP-j%Qn8WYCC#F-0FE`5~^JihFsU;4&AwC*p|4!blTbW+EOt8IDsx)}9-N^3KMU
zM64<M_A8_DZQ>jf;vNhvJaEjU)&Fc<uHAUb)#SH!K%%I#ajbO@b4*;&IUi?v-xz<c
zIqyQyI6Lpwl;+O)xC}v>@VRq7j)j44=zzoxo%8Y1*TokSh{n1A8_vheo<J08auL2%
zK<vq(9=bFF9_+XfS6akc;j<OhPgeJ2N4_!IRe|NygXY$SxQt>T4<jzbW958qf#mwv
zH0K{UX+m@BVw^qlt<kyDMHhmW+>35g(B!%pmy0%Z0C6#nC6`}eYl2E^eT$V^cIaDN
zVZ$%S5Sm_ni={J!7*P5a%TIZO1WMmxMDC*B>1FZ0#f@u=oqnf-1m5rciq(O|PQObo
zbo&=y?sv&VzYn;fnEJghxt=C8V+R*2C9&SA>&4#-^?JO=bJZz)>f_no-Jk4U-Lrk_
z#ix7px_t7EV`@4RXT82NZoWgd7rzJY)`_P3V7E>*-3J#-2af__*WhBDTF~{;CUgU0
zXt9!sHDgnc7!`Lq?Lu$Gf`6HWnL~>&k2~5F3@!GH{4+2BIkXsu6pwRAO#czZO6%Bt
z?1f{-z4GXxi9$yY;5(4y7e*Azy*{1-azt^d$YFy7<cQ*yt*rIr*qV@Em~2;kZ*273
zFxkbRyPcC=3~~vRi{)#N&;iEeV!ZbFp}@e=!mMH?8C#mo4%}hJ?R$POW_UV+<(Nd*
zJZBZlbE_u&m|<42{AdnHz|ATyPFU0M608@mzJF4j^_ku3q%qYDep2i;=>W!y_tSCh
zsaPrGZ~xYSgiWCNpG(kFtY<rmvBcv|7?60lt5|&8ktjj(Pni=5*<Hn0K7}l(-No{y
zJiPb~S&;lSa>&v;xx1KW)d&}+eu_dLpaDW8ghBJ$3`9cs(_-vl1u*($PqBQr5HD&&
z79>xBLzXVy>?uYz`#ipupf-hLEzY`FY=85!@x0>ut{9;n?VX!awU4r=f5qPUXt4~6
zzy#LOVi^>Hgjq+aLbM5ON;Npnw)|?et~l<hP#YX~Rmi0sClz{;zA4r6WHGC_XjE35
zbae>nq^m=<KS?^c+65g@XNuX_i^g>oXIvd>k~6LjxtuekL$jhOxtw#w%zMe`SaHtP
zp{6-kY>MFmA?Tbd&dcYo-8Ut_`cpCc=OyEoil1B^@+dzQ%Zvkrpz~8PG7gXNaxi{>
zEoO%=8IL#n)zzUH`)jcb3!Cy8`zwu^DU|UkM-sR})*Abz-;9LUKdb?w({;GdrIu3{
zthQ&V=7z@CtWL;C5nO<+P85mD${=CD>I5Q&b=02~$mu1reo5LBo0-=uWm^(_-;}LZ
z;FiEg3FVW7O5c;!L5nXB5|3rKFb}ufp1_Br=|+HfgpT<*p?1E4gK~BdXKD_Nt03c!
z*$u8Wr+X`o;h>RwE^uMov4k8TAfa?DfnLC^Gw9&q4+(anty%H-4>)d>Iy6FlNXYB(
z5Q5GR30#M#Xb&X3&kqT|__`C3{Iu(bM4&xC?UEci?fN0nrY%2VuApIcI>Bn%nQbdh
zyT(!ZrxWt_0)$Y|=>(=&XKoy*vkCTXJM;P*&f-W?7Ei(T*@RqAD)_`Zn+S@{C`hh^
z1)5%lg|QfBKPQx?G3H@+b})<C!1m_ADsUV$3Lt+@$N&=JFzDw*LfpXz3ACRRc)znZ
z2Sdph6Rb-I^ZCk)E(Gl+FS-yk94{skEu^_L94{tXwdS8QtDwcG54+I8>{!_+dD#eB
zPWmJ-SBVB^pQH@7p#p?HN%5%y)CkK-Ki0d_yt%TUi@?9B;3ClK(Jv_z15g1%za(C5
zxtCW1{Wp;Px6-`7YM_fi->@0zBG6(nFe#I=6@0N6n8cqR)l*`if)<OB_Mj^B&g`m@
zE(XPqBV7zyEJnIk&|)!?tQbU#MFpKhkGDge&B30k@h%3f5aV48I*1<c+CeMCc(UVd
zI*6{IgXo#|{_D-9O4UpkgZ_PKri(!b(KC}laf<*tz?hlD)y+X-h~SucF57yOIk@v&
z7lPhDpX)-<Df8T9P=rqv{FHfa@|qU>eS`|S{<<KE<+w51ag!NiZ{KXjJA>hjF*-|L
zkd!ZJKpI#Jl2H-agM>K?l2}72Os$|};l)X%J;GFub@eS~gGw+QED8-5CuLX%X<#i*
z##+k3MhS(*$u{k*KXWV`4KHP{++sdbxzt6VGvTFf&FD;cX)-919~BCn2`^1HDd(SY
zsG!TXHjCeC-dkzA2!0^gE&}}xlbw_sCa3_xPU2k+T7oL*D(<^%-mPZq%6DA^e91$7
z*F~T|Q+hWk_X1D>!n;ZQ9~Aw=Uj^OMUBw!7F<VxyauMjilvcS2^bYQ-q`cDs6(Foi
zrZUz)IRftRu4O~In7u03x(Fd4taTAWKv?V6A_RoBREuhkfPZ&b&nj;-pQ>E%B81Tw
z>yt8%TcL!3us$hnnZoQa5Y{J~HMj2J2>3IIP3+KZ=6#i$T!aX0*yP#}0m3G?77-w9
zqFPW=t3ttlN7S?DZa43!s&^3zfKcxu6ab+<DWhws0HHpKE7-%tP%jLs+u6^zn<J{W
zyAXwd*zQ6U0%ChoZdWRlLO^U!W=fq|8%1DaZ@PnK?WZnA6d0c-Wn5RGM1k>XG9X^h
z0||^zlekmObDI?kUW(t(hTUa;)Oo)Pfg?I~e^TBafeaw_C*{jHAOW#IiI;KS!*&pj
zfmhp3C6zNtdrDWcy|){FJ2NB(Q%<?ni2>(SQpV=c1J0==HnFtd0Ezv^sbuMyq)5vV
zLu|iJC-JdzN)lBlal{}=o+N4q0#=?&%B3G9(9b1hk_aTw&n1y0Iw0D+7@Mvn{;}yJ
zc6y%KmaV_foYoNx$JAn&dcifd7+@D%Q;Pw1flNhkt*FhAGE3nj7c=iSKk)ebrEuEI
z|BI^`t@{Jniw|I38<>*NV8YIUDLFPl0(xMoKqPEH0(xKync}l#XER!c2ebAMn*Z%M
z*oB~!;NX;8l^{bxDfwa@NI(ouArJlyS$9oP8<WbKY(M*u`L)M4CWRme9~x7yA>+oe
zzy8^LtbANbp5A~7sBx)ck^Th<sBtOmBq?IMhK!lSPX5_^qT?jT7%*YXB*z$#B$Se?
zK1d);N@3L>OdkPg9@M6#vgWeke=+OA(^AMyJOtq8WXp_{5{})$h8@A5Ds_3ptf~M*
zL`rxJ%o!;ejDQ5@j1+>A-PA_S$*ehS=_BTziaD+h*)b<2U)+ZbbmpXxT6+{`v<PYo
zQdt|=ibu^y3KozV<c(Uu3~g~rc_*dDx{Z9Js)*hESM#14aD*Lr4$Q@l9Uy_ZnCzet
z3lbxCaVq>yN}N#<10y!5y_Hgzro<VQ<U#N4lsu!7EbNV!q-bkQp0x#4X?aR1h?S<)
zo4fw8Gn-sxCRqD!W^OsyjyY7t<tce&1|7gIPvOXn&OcgET(^?->So^j_(~x0We7~D
ztW3#|27`pk%9Ok+2omwf%GA~O@JN<O9zU*3HToluA0>z4$CatBck@Zuf*{tUM5Y!5
z2KSnjoP;1z+?te}gdn-Blc{Y%A>jHH&(!_}1gGRQ0f}L?-WgUPfwVp)odrlBtxsVF
z;v$6?-(=d9%K9iJz92_S)~1xVh;K>p%_aH*!rI5pip1uWB3?ZL6OFT(>U}+SqWH)X
z`R}|Z%o`K+Dft!%n2@PYAy<Gm9v}m18|(3ed0T2*O1>}!CUI%1O`&&9@Wqu+Qdys~
zy-%2v!=I$Q{Cm9KAepcexS8kJe_qqe$NW{ZSeKdJT=r45**1YEJVGWppzWl&f^TDj
zgjKs)>67LIiQOr=hXxZeyHnT?VMam*)E+keN%M)s9@*-|ByI{vbT@GsG}T^K{FHf1
zVsA<w^#%DhcrW=Gd`A~5X#4%_m8Z<>Q~O;U+Wzh*oLbs0T^rO6r?Q6HUq5ByPZkf8
zBjM@rYpH%mQ;fd4&>jT(?Wi+GL82B%Q*x6762=@&VUx3wBF$^5j;B+~Rk7vSY}iv;
z+CKF+bDF0LEa8YDfB|*d@s=RD0^Z-F4G&1bolfCTSJoID4hHwPw?AWcR;&7_FJn+>
z-#;yP64&xM&_A6JUws4#jQ(jv1GJ`GOH^%I3}+C~tWC?|3=*Z+rsZ%3$z`44d@VKN
zkhC~>0KuutHqdY$l9nzTPk}TfEr&BmAPq@lIQOHLZW+{AI?J~A_B0hGz|uxqv~){q
z>G5ga(k(#%a(r5P1CW3mpO!5R5|HE5XlZ^=y(P8uRD0#~=A)j<sZP^?iwaIn%RE0w
zl1j^$_dx<<Y8syb!>ev;OBz-)+5In?|EiklB2eSbOv_uekO9KXbX@GXK>}fB+R4$k
zByxeB|B{Iu{Q?(*nt4H5X4oJEj0I`G@L3>9DUDqgbx=!c<;AjtKtOY`(?KAix!CC-
zkkDM5b~>mfWhs`)4gvw7Wv&gB3|;1Q5S{{QnbScafwYV|2;qaGwhC(RrL#U}>|f^R
zq4(1C1qoV-TA_cmHECrX8~AVYwHo{qo*I0htw~Ey4H9T;((-ZxNGu#{(go|%V&NbL
zUpU@Rs~@Jt!XbIkTbq^(hh$;l_#jOS2L-dOsQEXhmAhj%rP%QQGrK+tLQEw*LJc=M
zH3Z2;WoQo)*c;RGW;#eL1sl_;uKY}tNO5qqF`d54+9fKB;joom_aF1q@~v)7$$+hC
z`2mSmy#KeRakxm|o@+(jznxuQW8T|wyK5Kq{&r^!LIw!i)AGv=AW0|Px{WoP5<snk
z+Oc%j9D7%d+0Yv}mc|Qd+zGX&squrD8f`(Ksy{eJfdu3a&eQ-2$RB8G>{nn_YnZH^
zO)LLR+Xn}j4|;0wTl5>AK=Eu^UiAS9#j|O7)dwW{?QFWif6;H03?c^gn|dxSulh(1
z8tPnHUiFbI0G&(Yst;bFf*u5ZPUEUi1Af(KS*=;x0<>cUHR;c3dDREP(ET}$Bdce)
zE~tx`0I^5tvkhge`K#uQ<zP6<)S4I5G6mO~x8}t(QgHN77_Dh8^<mRqH5)zFCnLYg
z2_{tfWaRV%i4yu`<cT6k42(XR_|3A)^vVLZqJ1*OH}M#O1i+yfp-<-e8~8T7HBG#J
ztbCB!zN%kFjz=(wn~^RNB#P~qksC#jD7Ie)dG%TvZLP`8)Up|a%t4j4E(E1#YF!9Q
z&(vmuB1Z%jK-6ZCBchC2Yf8@yV%_V^W>te+1WL~gauFy!Gbj@j+ass|VNeDRa2hRF
zttmblZtt!$XLy<q&s=U}%E%1Q$do07pfo&#C7NG(YK@GHHZG$~w&%WP;>r_#I(<V~
zm~k2D6(9$_ahY%d4<|ulbdAdtPR<CgKn(5`#%I(?8Q~Qq4|)?a(kn<7yu!o`c?I&B
zttp{1HG_kWK#D!TOpmkz2ki-#xXBI@rcBMql?@~yr)C_-*_x6$vom~U`zr{Hn%Qm(
zQc7pG+k%wRnVpd<8-#&0J0k-%eCBOlCd<x<K#lhG^D^?wp&^>U^E1wuLqXyxXz}Gx
zkeDO$GjJrgBVGy7lvv2#A7<W}SO^`828aong&FKta9IT;sKu<waI<S-aYjaLU=lZj
zi0wfx1MA*qV~3j$C*H<u)Dnk|2;R;h@)J0y?ot*Q0i2~7`3iN29}O(c;B*Whu|Qd9
zgJtYLBg{6bWf>V|f(e{u8AO?jafQ^2Z@O*DWPNV$9$_}i4sN1~)2ql~s`zHAc%Zj-
zS1Cx;4Ya5@NPujniqpH=VXAmNdv%Q2DN&!1ce}uZOg&9eWDy|)Y8yK|#=JkV&8ZZa
z#HC98fy<!c+u1|RyeF~UX`C<*3b#|^+`wf}@g1z5nKvbNWaP`pVP5eaG%qP|3{%B-
zvWl_h^@*Js8C-&ivUX+=Tw+av42IfnHgv3cUt)Jg2D@NFW_Jd`E>b9v!Q|Y-Jmbte
z5_?=3dKq~S$zTFQ2D5K3`};VvSz@moxx|Fb-VA&)j$%L}{kfklA7{2o?|0jWUfJJI
z?X!%+bbN{Kt4!7p8J0iZT<ZHOgL`w-5fSQ$ui1|A=ARN@JM{$<x?fX$=@ZitYX5K9
z%@fSq6W=;EfC-sz$%g;qGN6vIMH9@L#1W?-BfR~OP(OC&GHCx}?2d`%4T)n;yWx9p
z&^$)%hD*LE3+;cLEtqKjA$2?>UpxmBGRHHS66*(wMA`(kQ<<z$EHTME9ypajB*K@&
zHdL4M86GLN1%X~V@Aw^%sKoh<j1)n_mh%}bhm_`QLp8jB;fORRJ|h%jo+)N&6&NCl
zz++%taHcy*E-o(<fdtkCswKJHHZ<lgX4qp>%!;auE(8sTiy3+P2_ZmS%#@1DB_IKD
zF@wt`{Hru=h#X*Vn_>>}R17GQixjv}8c-q^DUc*pf*xK^t3?}Xx;pmiRC8lhUCCwB
zDOjv4kr`UZ0HUrWCPGz^fT$}$s7fxg4GrueC1M`{0-8fgq_+eK%^@YyTY`k<kP^pR
zwxQ~cEaBerRuC{{q-z7MSR+g1qKBtI8d)N}B}gEREP=P|i%&zSZQ(9UvNo4^Vz;yA
zOU#hnY=(I(J20=r*$}j)ZeCczyZKrWz+PA)mlu%0URWZ#86>b5mY|#QZoS%;8vQNy
z)0<|O^0!<S>dm)GWTFK!P<g8a36ATy3VL%Xdv=c5xzkdoLT&kVq@_-UKmuWDiHs^i
z0%2(hqRM3yYPAKay<4KJu}{u1TX|~mQ>=w}0KIoh<XQ+4dheFV2pJ^S!gosw)|7~~
zkQjU|Tv?*7E)i>?<U#Mf61f&i7S_U5CC*ydmWIX$C0DG4;Go065^EtynDT+syC4Di
z!R6j<O9Nw*=-pdD0Bw`o7!=ZMavOuj$tI_FAq=EV)VsL6tF{YjTT8OOM(18fom<Sh
zEHIk}ww4$rVhXpTzTGbS76g#DJIw_W$lIO11qtNs)VD97mD^Dt>}2;YG+!#;>8eoQ
z?kti2Ne&sP>@30i4RrF<j%Mno?B|8%{pFvQ$ZQ~(Q2De(eia%dR6Z?1Gz8ZV6;ONG
zzZaR;SL}65p?=(3B0qi!84@ai2d7EZj@tfnIjKOP**|xh9V9eAcbXj}G(W%G?Cq%8
zzmm-k0zh9m%?^@3l#>c1kiK%79VC#xqGtaKn!P=;7$sTbN<Fcz)a+sQ`dj9Wfx{(6
zL(%N*so9T;W@j~Tn_Br%r*e1%;G<5fg9PwVYW2pbTzhJ)<LvFX&88K{T@`Be<IaqN
z3{;NOjJk`fpw&;7u-qkP*JdYO9YQ+k^i+G^>?f(Gw$sU4dusQKC3f8s^JAszqSFXq
zqY*ATV-F-iE|$n}8YI`kGIoq6VteX|{x(}?KI7@!zf^iiaDmakR5m0?VDvAQhm|0K
z(Z3YS6Q9iO(Ir}4sq%WMeQJ(b;i&-w>fneu4HD{grE*S#gnC`6oYNpNr|U`!UN04M
znizae4=z=QmWnwodC+^URL*J1!kivb>dfi(<Z(x^(<{t$#fVZlkHJLoBTA*01__uE
zrH+?wPZ7u1*`3}sJsroo4M5w0v2Fv<c3^C&bk9%$#Mn}dq;F~M?GV%^mS(-p{<G5j
zCNQzoNQn{Dfkx1@Qtp&l{wj>1X-<>i5df!^N}mi8fYVAbf@nB&pnjjpI<GSCuAJ$Z
z1SU+H>6iqPgi7Vd-9Z9jW+_4sI#=vK)A&ucZ57TH-*geEdEP9QZxBNU2yd2_iBnFH
zKzOrM-e2rM)I4g+cuV|-;ykB8K|*n!)1V+p^m2oCpds}ZLxWymi`SUib#J)_(6D;T
ztpW|Jx13gm9&p~GR$U%Jt5ycJFH5t2DYMV5F_&3^FH4=6rjpwA8_}*UK>+g`r(r<?
z^BbpOK?3s|YS?;uIj@qcyxJaIZ*B{>T3seb2)M*9D{9QMi6Ei0x(x4F@q1U5XiRNG
znNnY-#+I^$ubFS!t-ds)o*MAP2!{j!Hk8Q`4iW$x%H#+Ki4ne`tf0P3jBsM`5x%iZ
z-BKn-xa2`^Q<)s$l7$hzxr|2mln}20R?d@U%IPxI-ujg}(d-67gk+U`=ASH+vlb+b
zI$0(MEl7Z$EJNT=rxYMz)XB1v(=dvzyAuOOp`%Zg$#b<z>dCWZBK84+XJ_3uqs}{9
zCTA6%0{v{6Gpj1eO<yPzIZzM)y5QPL?%{%KC%K0UuASr_E|g&yd{2|BDyUs5%VO-l
z6XvnNr84L4brlVQ{tfx$Y6${}{Ts^e013qY4dv_t3B>*lF$nfhP*_EsHHalonR_b+
zxjHlk1~oLre~>^1I)fVGd+)Ca9ZaYptl?>MX!($a@)k}N@Ae@Lb$+D`xYX@K8sbVB
zEpk;v4P#%PhBF%0P!2UPQOvN0ve`hAP(!ELs;I@s%)aIfoY9zuvR}bO?Zz~e{R;B`
ztLoZ=t1PZ~?#I0svQ~pPBqSHOmq++^_k$1!@)U9t!XuzObVf!fV%2u0)*0LBe{Jm~
zl41d^7>BYLibGHcuYzTOt2`tiLM(-Z5Fo@96Aa>Li(*MYhev;BcRz0X-#zD^J-d5e
zyWj5FU9ec~TD<}Ui`6dVwE-6&1&bo#YBz0f^2Pt84+=b3?fM5=i%4KKMqrZwfMt!}
zd4OP9;|mNRSk{ohcG4hG1c8NXU1z%+jJ|E}mx*<!FDVDkH~=WXpw_hx01ymnUF!e<
zVQaN+_IB4e03oykY<7d&T;l*1hjLq7>i`x72iWTRA-;$r+fLU^+pb(o&l&>^3==3b
zZ3Bp=?DQoJ5G;4zlW-A%dt5Uq2LO5R@dXVKQrY7R8X!3B@dXV~7lokd#8V;?{=iLJ
z%LCCz2dbS{LpiFucdrLj<IVIDLqBja2GBh-31pBRbe+R)klusn3D{(i5l#*HKK=c&
z58dDly@F=`Lgx;-!P5W1pw2qN`0S3lPCeND&gTZz5K0aCA^o>AKmNb6^fh|S4JK0D
zNG-=*Jh<(1`-kf^f*TfcZQ~H?2&caIA^lAGN!O;g>Bf=dPr1PtQtU{U4K5xZ_Sv0w
zowHy^PZ8=Oh*cIv>!Jn)nKrrh;X#7|-!ra#;?Q8gx7iI2nsASCi|e$3@h^PFxbTQj
zYQe4a=f_-dgGH%E(RXpHYj5h&?8rerr7HC&ae^G7-9`=oP<gv=#{kj1cHa>IqG&rg
zg3iuJkZE<QW4F`aEbL5`A=~ftBL`?urjsHE-GrJTsa<iM2r`d`T}zjfO{@kQ^#X75
z`2d2)6+e;y1dl5eN$yhOU;<#cf;&r+-`+{T6M6<eeKusV72Jjf(1A?_x1j+b*i>*E
z@&UpPEBKHl+=P5Wn2`T6N624Fd1DERKvl`PA=b0U<f>FX6#T2W-I)Oq>Z#(rjmrT<
zJyjf&4+?w<>e?!<hmD5-pyVoUy%QixuHrWS0Yu4F+>d_=a^>pUj$SNKRGq4vzLl#}
zouv6(b*hszpR49@%Z>NLFN-7LeH;h0;|!0ZX6@rR3tUNSw#B6OI__jeudCt&bCY*^
zvxR{Xz?cw*|G~D7r|X<wA_v<#PB&Q408mT{!hTMKZ5(klRfbf5l-uuQ(4fpwj#>Q*
zQzdkNBDo+FW5}ozs2b)R0w-d1f@kYhMgmdj1c#F9bw$0fchtz84waq7j%PITUJu~e
zYia<<n$*9t*yDvwJm~Wxg*WkRVOf*HoA|JNohe*Qx@_jb;n93`EsOP0f5>Keg+Q1w
z4u7L?GtV-M+yGIynIi{ix~>mGKgWZG(ebA6)ofN!2!y%FxL7Ol9M3VkrvOp-9LMe{
zB^?x#9$R=&M8}%K&-G>b`9SClaQYiHxA07}eG3qUTR8IlDDk+MX5_8vU|*IP*~;-y
zqLCU+!CQHZVgd<~rr@o7Qjrx7mIT{)aE$sUi)E`RIc!29Kx3Z8I<3Bq=N8zav@YMq
z3m?*{(Z#e<co9XTBTZ8`JkByza}MiM2&~V6R_HILIM53HMdCn*@QZ0xy`2X~MN15a
z5xH!90T5>25`Uv`JMU}mbO(sS?R>;YRz-))N+RL!IMQ<doXg(mk@+3RZaTfHTLN<p
zU*}FYSK|k;iRJidE+oJoV0WEo7z+RhcGo!)T4-7a5I%mLN4w$U6mtooH)gsx(vWGQ
zXE89%E{@GLy8XtYXs@P=7bRGdM*R{p)7#vc72WI%OkNwn3ImG(n!tlUq2b%yZubJz
z#P&{VfN0chj*|<dEPznYZ9aA;-C(Lg{r9*sw#3wg##AQD5j+AvtrYjFpg2+~Y-}sh
zZc{1jM<_t>s1*1JHC51}aHWVB+A8$sOQje%iruAbv=WM-YlO2-1fy4(TJaKcKr@E*
z3MYFGVhcj$_{Z-T1=KaEO3A<0q$(x<T0@l@VN*a|BjW3Xnb)8eGp~6|1pgw;yvE{C
zu3Ff6jYVNzvsTc&ru{xzjmE1U?})Sm>MNIh7I{a6`suutYzkZN3TK!;O0in7a14<4
z*bx4M;NBHjh=IofL|ZqiJi*Fh8-=5@n+XY;jRM)tC7K4%CbdGa(%2^9cqBZ~&>*!*
z;Dd+O&h?udwd!lZ#>8rcGs4o)nslugRY*yrph0NatcoNX8`~@#9Rvson$4nMB*UE;
z03pgP>P^WWj%`WRMSB8Us4mkUn9)}CwM2Wirs|?Sfvr>*TmgI#54NdCaZ7D{o3IxG
z0|}aK0w)J?A2Ja^|GSb~Ja#$|-z6OF>x2c>E`h7f&jd9UoPB@tt>NqmC%!+`CfXO+
zPi>k9kDP){c#-yry1#(UjT{pA;z+=PrjSD(7S2cN#R69J1b&&=06fHgSmc_s;{c)R
z!vgE_WFi1zB8NrZM=%lcM?z?SJR+<=S`1onL<L6TBAp`wF4#q5!4%SHy~0_Z8&m6j
z69p1-t@lk7AQ1_h^#>63*9+|3;LdI*gvU}&inPljKzDYlQT3r*b+U}5tCvTy-}F8y
zLNRS+eaXsB3H8@SjOPIW$5Xzf0itcENYb?X(wExQpq?mX1+fO<=%Y%61Wkj0!;^LN
zC3|XA8wz0^jVV4FOMLJt4jQ!cwCXNo!{VoXeF2G*r%7LbL?RD}U}hc3;?am(lRJc?
zmnsMgst$pr3Nl}SVAUbUl<5nS2}Bb+#Ml|MtB$`Ru1o5baV$S}$v0IX!Qv8`>Wi8N
zW{54HaqL&|&xJG2@+C9;TugkJt%5ed2zJ=1elnh|&g)FIh3v4C+A<%uQyK|>Dbnsj
z++_n*%}1e3l|O+^cE1!jphA=6QhX3x70!1e$nMa^lcn~9K;x2cOkghs#(g7#Q?#v^
zKf(T6fw!>9dJG1=y(aKUK!ar|nPr!7ZU}W}F&k437+nFvTr>y}vgi{1%}5Ing}Ve2
zrN}w~!aBPIzhSMD5ZXGsee1LsG@@JB(ZZr=wCE;N)gRTRFpKal(ZjhTaCU;7efE}b
zulNTox+UzfS%7HKEiqWf6*PhD^%nWMX%T%Y-V&qlphYxV;eWI!g8FZZ;7EEj$O%r3
zgezs*8*0>Krg~RO+yhia!^l)J;$_K}$t*K4Z<)07I$%-XGHGwV1c>^UNldM2+yIEU
zu}ntHd&UG}Myx3^C$aN}Ey}M<KAd1k30aw9OWjy0?K1jQ-HnwJi?fC;jd&|%=4`Dt
z{7Y;J)5qLeXff#4N;%rETN9z~l``=NyFs_S<As`PnYL2~qF>^ccN}>9Sy?!uPL;7<
z$@~($0i01SZGK}8b$+eNC}ksJYo)!U9Z1x$R$?y;>9rv|CxaYZ_2W{uD85eGzz!s6
z)=4N}Il2oXfE$wMO4)sZ_y%diEwF@^aNeEd3pwPyn^sR_e~WLD_8M^DK(k3A&w}1(
z0S%mYt7@Fa8sl4~qb-n-AlfQnfkzDyymN;-G@Tub?~snk%goW<xkF;dycqhP776c?
zX-W0&43@~;C6VewmOqUwf46k@N@MweVP`;?X%|5BcDJ<84**1qcS|gMlbr#Co$Z!`
z_ev9&385{2kF;^wV$j+>(ptVnk>&4^u>3_(5#Hq4C)19|9)ai_y*a1q%GlJ%J{ii>
zp*5EjvtK%6%uA>M(Ja6wlmSEq`z68$uK5h<*LV)7r)RPWu>;Z>uj3GqpgAD16H3Ej
zE@|SR+B=gK#STgvtAHe|M69Cics!MZ6-*VG#iqnQl+IYohxGHIoG_8(2O6m7koxs3
zmWUmaHjo1ennMzSobnlRDR$PWhFNS}tWG+UEFX%Ubuv-RC_MnTU17jed5^GZLk_2C
zD0UtunirtK>5=fqGVSlM<EQS)sHfWW2=0{sSYi{C^f_Jqdj=~ipRUz-T$*H#AVA3L
zxEyT0Z~&rb$K|l$T8#jq#^W;o6RSo-Xf@XRYP1-%rruYhMUfioNsZsqK#9`|4KnSs
zFxuFGk#hafP#@L0kY%V#kFsNt1{sQLb>gud3~f-KR;T)GHYQ{M_1r#$KT%Jk#CuIR
zsR<BG$4S9CY;vqAMMK(bBANl32GAL`cn*ul&cI5vgz>5lVdeM<mIi%pR%?l-S=xzR
zRC`;q#KbO7^MN+cs+Kv-jh*#19@W}BOB$zanJ8)Vyy`!f%^q~#*Eo=<>pW@Pv<KR3
zfg05_b6Cz`{hj6;Sybn0w2+Yv)a)=GUQkEpvca(nemKDuG+=ju!pTrggE-i#g7X-U
zwMs|7+k$q`tgKZcm(S4XT#cDT^Jz*1I#+{4Fi7*kH&&Z^eI6SUYm<%{_;Ilb__RqJ
zrZP>Z*A-L)^3h}el#V_KhPw1)3K9pw3?CdNyQqHj7#kA5nCch3m2go`oW!1kvCfEu
zFUhnkYR+Tq+00847m|~C&Y*D9DV;BDxB(1F0b#DF0SIMx$^quiSAfu2Cq*y{HvnO$
zol<;Z?UWGOPA~g*YB6ZYW#3LMitO|<+36w59>N1P-7@W!kQa!)7gp~rz#|e5d=&~O
z)#EJIBhu~LX+N^l8@`<m1&HPWHiili72O~sq`6o>GSr(=Jvg6v@teL1fCbS_QUNBw
zAOiHgR14>`;(_1$0|T%cP4jRXKKfDQxhs?V=CgT$*j?W&fCkxJGK&&T1#7KP;z?E-
zukdUP>!+=?!h?CeY*@iumnK&{$?#mrQqPV={j|L<^-$p)D61?IUhbv6uC^~=von`_
zP!>(r%Sc(Tdd{Cb^~(Y_t{gCw1%y!+Ky>(3&ngQb8vUwgl?4#Wdeswu^32#k2(7Hw
zJUcd647&81XU7JMB4xeiL0N4ye&dy!)gCU<IkFIs)Ml*qLIZRV=}*d0YWpG#*2?b~
zkl?4NW8|!OX$GH~>gFOgTdeWy_Y9DrS>w@DO*DG;C*i;4IS&o~J>C4Tc07+uM3+Cs
zejWqTd;)<))1b&Rx&*pftuhv~=i=3#b&~#CJJlX8o1izzW=6tqdui{es>N(!<ZTb9
zV#onzl1$focme75Vm7H9zsyl3;L+0cp1m*`AZl3eA^VOjA0ULe-g7rtVG=?Mv&I*u
l#h{fnzA!C{gjoY&J{#80CX8<C?lBz8V=f||djDxQ^uOWASGE8E

delta 45137
zcmagHd3;nw);FHM>AqW*PH#!4)9Jq53CNZp$R;ERf{wW1K90_a2+?641crc)&pgkB
z)v$wr6d?PK>?7E$vWbx$HHwNLi?WL_qN0Ml-&0kWi~iov`}-rGPtLjLeCyPys#Dv!
zw`Z-Xe|U5K0Yh9vlp*Ou+^an!A652GPK|!lQ!?E=eb{Geeoubd+o^Xidd>`WO-U_(
zNgZQUF^}o?xD?&*p6pQ?MuvH;&d)zz(YMm7_(zY*evPc>`uD@%D?NI>V0G>Fiq-ph
ztKVNMUbJ5B-M?pd$aJfy=uRA~>kAdV`rT3q+3qh?K(Dg5Y2Dek_kUINeYB$QOFg<(
zls-~X*}LaU71r}TdiJa63$==uD*DC%*{j0p-M?RJt4F^|t508uT0JVQuFv&;slsIK
zEi=d-`m^e8!Jjm;diRB#EWTgY|El1Hi$c3pcI(}z0yb3ksp!?+>eIEdp8&|}Q_;6a
z@9tfM7&|>cZ4flAz7>`Id-hABT9q$X^aXM+_TckIgtZ%}#(k#Mt2ZhOPvCiXde&#4
z+9t=eI`t##sK&i}^?ZeG7^s$KnO0XA42@nTo$q6wL29C^)Orje&-d@y)9Ty5XGJ5c
zN3U)@`*$ZdzWmp&{Y<M{@BY0|Unp{GAy5g#|GUddO*6~%P%F83Gu5?8g~<91%&jg{
zal8HM3{Tpd9#`bwF4k|5y1_fcqle5pOt;&ur1{;mSlhvB`;u86MI(J;0&bQ^&$7vM
zB6ED^?OX*9=dz`P)ixz_9TgXGJ-Sb-xS%rE6AYOZTm|+lV8J2k3ndFYN`aJ7pt8Ud
zEw)LhEb!b?&wPlhfLhEJ4N)KIxY(ocdcv@D6<kk7kyJ?s!eUQx1DhlrPf4k{T}8D$
zeszN<Z9l5LTD906PkTbCM~AAnq<c4b^g{DC6yl-UZ(_rTsm)6^c@&+)fC<!19wTg%
zK;7gih?>o~3Lb7@=Z2{*O19Xw_b62REgn4}RjBq`Jh^#hQ?7#AZ)Xn<SDTe=cT}kM
z+daBpswhy|?g{0Zw{jIw@39rb)utuyIVx1$_dI%@R7ocxPozK^=JvaHvg{FRi}Ibe
z!#s)`4%_L;5IzP8gq@x`r4qpngq@xyP0i&lUaH6M-p2-xP*=9y=RkOf>&Xx;>rp&_
z*yr)*N(c`i_IdIn=8SasT=lD;dD5<=dXH46yXt%<x=^}X)%@yFkMfnrZO%?NHPF>Y
zdYa&+nv7OwxjG&5xQomjQ<u-+vg022lQ(ft&IymZ8HyEn-+7cDf%l1O<GK7Q@luho
z>f`CnFMHhe9c>rzzW2B*OrKo>n#l8m$353&j#p53mAb;U)V%R(&{cZP?hD|ew%0s{
zs60qmagDn5U0eqb2dM1i1oiIn0jlhzs^Wsf2B^|uAi0!Zv>Hf23{cT(3o|$dESr+*
zF;PXwouVoRcdM#U@0g;(TpExdp)^HBxsACFsA=quscMswX{wSVWvF*dQ+<|Al8{<d
zY_{hr=p8fJ^r>oxvYC#h)H`OX88N9sy<?^tuV<4$n5i~w#K(%NpjLBO^bNIn`5Xtq
z1B5xM>|c-p!W^|uV~IeWV~*PNHghrcFI9o?LN?|Nb;(@|9SD`UYKDjkkO9O(RYnDn
zfLN#^Dl9WN1bWgsRe48sN2VF<;X_80b$Qv)S=$D>%BJ@+wA6}e>Pzk_$cW*rDjERS
zsW+NX1K>JxrI&kF(+M#59W~wbQ{PZDz1qn3tLs(wCe?!mFl-+5Ho#Vh-C(JH&qh_<
z>@vTIapN#q4$_po$llbv+3KIXr66o8C_)d?3^Ckc9MA@7815em&lrApHEXy^tu3u~
zbPVWJYerOh(|}I37EhROh#qVD-J??_|5giK9Y$+6dY_4Q8m-;veI_tQYyO19Fo7{z
zE3RuU6y;|4-QzW-Ze+5H4ZNV{vbk@mqsze&0asNrfHvMi%K+MV&2RUy44{qIit3mf
zbYA~VMDWy$tJQLM`2q(c6AipTyV1)sfw4e~H<T7-0%L(zdaJqF%`vk4?zd8>)~fB5
z^0yp}EMUB)-RNgoz<5i$(a*Ag@s`%KnfV`4t86qetJt7kE??(BWCLQImSNkT4TyDG
z;x=hUHXzn%En1nss@x2(-@PX_X`?zIz1<!M!wZZ(T87<<USRCe0(RH+0%MOBv&`XH
z93#iCp3{^IsVBCm!_+GLYkM^ZFz2)k5koP80dr2vv)efbFz2Y9MGwtE4?U+PFKFqq
zH|C&+`k``Ob2q-3g-G%ZvEsaNpWl5+Q<4#%b=N=oRrIQ4f2mPJrC^D9O;vn=xTNLV
zrTS3nB`Wn-;X}XQ{o}$}HL9!akB;GfbcY|E?m$-jsQK;q;RnQzTB69DWMD49NFA@I
z{hT`TzWTa5XS}Y5&4~o9QK)5X@LqLN8PlatzyvhYWxoXpXr}w)ym>$Zn(4_R^B#_X
zhf~?(`_y~Or#c7}cc(fC6nCfU{*XkVxI0x3=bJ->5%AUw_QgK+)v_551O>Sn4g^Kv
z8M<Gzug0VB3_TV%|G<p^;A}QyzuKvMwu6ukgxL-P1?AbgoGmqlrtH}|X3M!)UBeTI
z%Bxbv2h{mW*(wJEOBeSl2ZO@$DqVURI>1<^Cz56#4guLU%=3}jw|tF*Ky&sQ2Z6%!
z8r@$gT|r@ajcz5(VH$@(Z>&kJ{zx5>-mOMgf>MeCag81lvw_9~agC1IfMz6+h;=o3
ziI|~@tTu9pQ~E~)NRtbI<3>~0=#M>ajuiFP{O*IP*$36pO8G&@S`F47bgZR-eb8xo
z3fKp!={KZvYf<pA)PH@hZgQ0$b1-yN;+URcw>E{_V|uO#dx)sOIHniZF?S0Lgxhne
ziZ9f?uJUsZh5<XyId)L^J?HqH!tXg9y?cr1KnTAVS??q2vhs@#1V!JA4g^Kti@Lv#
zbQ(q9i+a5Ve28iag70@a>$<>*GzWnSe5cFN2@;y$>2h>}gywg;Jvuc7k@hE@&8|^@
z>Ieee=qJa9OxW;~V*|z8pPXt?y#0x)F*F;46tQKhk@kM->!Ye$%bjZI1?GC1U39)N
zFqGWL5@o`y^88fzH0GIRvkW<*;W=Pu8FE?$3D{W%rd2HPNF7fX8A>2BKAl}pS0gO%
z7f&EH>5SUPRSLeC6(PmNjBM^7kN{a^`26N{a<Q&pj4ox(&Z#p?ml|^0048*n8qr&%
z4lRwA8Vwqnql6B~mCSWs9aFl}DTjvPO2f#MIy4Md8r~f9bs7LV4a3c;P3KjX-fXiW
zn*dxWZ8q{n2m%SE%?A46`=W;Ma*ct>eqB2A9n-?8Sr^r%uEt>5m7`HtW5_9AS7_AL
z7?|=u%QY2`;#UWlX+u)~{Ezx%hJOJ1joAnrZiW0l&{T@q{zhh<Iv@c8nn!7R3YQEt
zVZ>0h5@<XflxqB|s=4BWOyMHpLTV66ZGowvK@LtmeqG(>vId(9uMlyGO;T&!Feu%x
zjy2N`q*}VPmP*c8(-Sn`fk!>*WYIYGuXJroa-6B~SWiqSk24X4CI}&{z9*W>8uqMP
z8()S0c+7+xnKIEt%*13yB#N16T5HU7TAXu6?W=Ii>!$lQn#(xn!&k96a8EMb*3B$b
zm6_Ni+$06;$)>x`%`9L|srnrc%{%pXEHvI5zXQYgn`XL`H-jNuO*h?5Ze}6+%=n#Q
z2qrU4_brZ8)vH)cx@Vd0dJgZ^bd2`drn~OVER5ngzcUQWpSi!2!fIyTZ}4AD$LeJM
z@61Q^U0}M43BJnqBGv#4O?TqvA~CHm`W=1%yXN141^w<ff9H#k-@W8_HOj@vyBYpt
z-fqjyDs0p2Rss(Vx59MaelrUVx6%}=7j7%0&~U3vcbl7~&~E>}+5M10yS?>0MYP*$
z6D7_U9T5Y|z0OqLVSm@Oc~$sN44rh|-Pf6MOZG&>4RxKFc;`k>RML4*Tu)fSdL>=-
z#0{o9b~6hV+Gx7tH?vToP1G%#^AQ8+t){ZqbhC-N*0c)$+eV~AaI0ekY7NQ6-Wx`w
z3nR9f?otV#E{)jkbOFwS5$`&EhqHja<9AZ<>U$Ut4Q~d6TWg$_<eG5n`!^RUT5^}^
zZgE3VG~{m6U4AnQMeZ@(cbFY`y@9;nR0@;Ltq%Pw`}Ka&>WZ_%HtbzPyDg3feC3Ju
zc0+5wi4&EF5qEGp^^uwO8Ot@bhx{Lzo*W(r`N32zVik{r#o|Z`bc7<f2P7bB&BB;z
zp<p+K!H?NiQ%lA^HWj`GASPr!CK)V<L4x{(xiYjw>=RQga)?P>l1XqGxa%Nmm!TEK
z4w?#Io<oM(>>$aMa2ZtcQ#LR|YaIX7!J#UBN-`Z$C7e8cVWxe>_Gf4vykD4}0Iw21
zZ92>nnObS=FucTT0wy#Mn|11%_X8a#Nq+Yc_F|^?VC;w^Lp3=<GB_H845%;JXPMd~
zu`lg_EQ0)(B!lLL3~F+eb;{BP#*R8TRFk75)0WGiCdb(6EUjJan5iVCJyerpB-4V+
zpl2LscV}y@V#n<U#2FA|j+4xtTm~cX1e=zvb&Q`d6@JbE160VIAQ|!q&V^2yY2UEx
z+3?6I)04|R!Vg_evxmL#$Z1pIJ2MZM&^&EoMlS|B4ov*+Gi<t7s~bCGPb*+T<_yWu
zfW!HS-+h)H^J*<)XEAs3nt(}Ml4-+b;E{8zMUGY;J7+3<^#Dck$T^ZJ<1+BbdG=b4
z);50L_K3>6>v@uS5(_57uU<6M7O)FB+8^s&G<7cuOLrUC>|8dLE2i5#>%xJQArH8S
z$NuKi&NTbpbT{DVQQ{Gb{efa4op=cj%=?izS7@bd(4<?Ps`hI?E9KQ0a+3runxi^H
zZjwO4H`N((ivtoE)fw30oI)rB2A+;$?}W57?MFEfv`ZT0K+p<oREA$H`k?}dQ5kt*
zzRxnqgJUz4f=FxDWwDmae$CYymw_Snv3Lxuu?`j$I5tCWcJLHfV>7VXd4gL5YCP+a
zr#;zjyn~Pqgz*^}<V6oGrnzE#Mozv>l1@gn(A-SxGz052b#8_-KjjK*@1#G6e{Dl(
z$28Y5gjQ~IGyGy}3pK#Z%@C2FP_XEon~|8GAvV;+z>yC+@w^Q8i{@4@TG{lgJ2TQo
zq!LkWi&kf620z(NcjKl+J)EH&%W#|X4K%YUo0)hiwOE_yZgwOC3mIxv@eB_9GQ)k>
zO&r*AG{fD_TukQ-Cbjd0)RB5x!}O{P8HzaX0~ZyzV0#iIlrE4b$x9%y2)U3^@RUFW
z$@g9tGNON?(98wELD3g7ZoiLj$4EzR$1Y?%@ketcR*#UwqU~~q@>7O8^0UiI4Qr&i
zT~%NRui`PhdfE0WNEmfFL+*w_!l=s`Vr55I@ap9Z>nG_|V&IqpMtq;)zSRtv@R?w_
zv%&l!!`=F~OrZUk;cip>TP|AVN{0JE%oJoV=Ju-@%D_z4xK!)>2>!J#rH**jv6MRE
zRlEJ62JEYL`-6m~S2Gd=Ge!FoLs)u^9Vpd;t$%fF<4@dlHgp}fNz)_~rVYr1X?$C1
zQW?WjvBugaSL5NCiYl9mI`r^NP4sUFkyNHXV2-8J@(jN^Av0}#%50*IaRnx1;=<(w
zb@UAM3Uz*_vMRNtsdhZQ3jc~d1s(uzex@PtKmu<*;n7hMNYre8W^fg1MqQ8?AJOW1
zL8iMA?;6DUfUnXPW{Pz)7Xk~oi!#OP+Ge4d7H4ARQ$?LhY69%dOtH$eS%{fSG7;Qv
zl0s`N%@nJ5TMFJ<MqoEdVRgMc(_MIjg+U1T6*t?;$EDA`GSmH(Ihlf51~u&(Hm#*L
zwey-xd0_=6amjx)KtKX#O(rg^B#H5|CezQ?GV~P9O#x#~W}vxQ&OuStb!=!W?T+s2
zG8G$zidvVMEka`k??vk}5gG+3-Hfiw%<m{YO`QTu@O7Dy4t&Hxo;Y*>vM#e-d$XDv
zJkzgk&rJIwRquA~Rad?3nf&%A-JOZBvLjR3nd!y^uYnY|BZ3tvXV2tn`Rv=)IN*FQ
z)7_F6C}d!EO{V)%cu<#GxYc++)4jrF-hz5%QgqqF9&e-7e{N5vyeI$@_1cr^6GtT=
z;jBHGm^G+gAW^S9nGq4Ph~)L!lUdM_*GqD!UVAdz-)WZea)7v>9c`oCTD3n@5w~EO
zyixXN2F2+aNR+cb6Y)ZngLnbbx=&PxHwyf>KQnQ!EQgwj`)_~dAMP>V#7-90p~eR@
zl{%3(()m4VPh1N3s-(N#uKld;xXewBEz`!i${-^`12oX{4ra<DTaYmIU}iv^0)vE6
z2QzU?f>jgXK^<aGx77x=J>($J9CavDPP&i*!l6vR=m#K4Clia=5BzB1EWbJ=EA3n=
za)<ViQD;b&oH(-3!qr*I$Sk)xlhy}WvWbbu#@?gNxOZ5VyD4{tc!YWm&vHM&TUKz;
zvLmwG!(4D*I`sYO%q(Rt@CKPS9-=w%QZIMXT%P8$var9RD8SWey)-)uF_*fE-~ez=
zmV2nn+)o25i~7nUw(LRegR(_g(tBXSdyBH9_dufVi?RY@A_9rJFUrEIm##*$$hAw@
z`p#O5swG*92vJ}XH%m_GAfd7(3sXAv0+8qhOR{2}gr#;bSdtaLhxY;!kiB3@)?Ig-
z6L7Q$EmUSpmhwboh-p1ui39_>vhRlkfqp%D_o}q&J)i3RkoJ?i3uHtufClQZB}<;T
zgM?9Avhu_|GDsM;C9AGDQUVF1wq(_NoJS@i#q_WxtNvr=uQYRJkwQ(X=5cL+tD?p!
zg|4S-vNFVt9E4CxO_opG{DCB;EZqEws;8rrnyl!(vXpdLN=;T_C-X175JcA9S<2&)
z&elV$-R)Y8?fRqEx(ir#t?2%4ca}W#%;E=DyR+n>CrFgHI}3-NqC6~nK-PUsmPd;o
znx1!O-SVh8krpFaG>d+g>h`3Tn_m8zQwrVjedhE5I@bEk=>v4E^%?bn4`|_<MUFm|
zdi!bZBjuS>4u%ToQ(1BhK?oS9vg8;735-)&7(>ERI$J)KRd}DYl+KpP(o<Qnd(Fpr
zA(%SOvQy7!e{6f!DT9uY&pKt$G4k0gxd_Zs=otBI78Zf?C^-N(d{?v5UQhi`7p*AW
zdo>H|_<sR8n?}KPw){D5K<V`?IqQN6sOwqs_z)zZu4m!+kWWe3)R~5`KX=onmJG?h
zp+o(CNVXw@A!ML4BpWFK*l3^_RHvF1b=TUKRcFiQ1QQjg&X(N=BoL~zed3k~BoL~z
zu?VEpg>0gRv+3Qn=4Hbj1PWEd9R$Am$d(-tDx{N*4%m((pnHvC*%jKI<)a(~nixkp
z2(*$OmF*LgLpJYHqp~r2Kc!)iO$JX)jjqt1a&?&KV9@Qu#BABv5CX=;Y`HA}2`eU2
zJtpR(A-sO|!|b%JURPvjeyYI>+7o73Bc54<WFDDM)AdD4i2+mO63I-WN>E*U^s2-I
zktu`JnXY|O1OBdEb=CPWTW-v}2$Y{?D~GcYcq#M1D+4d_QnM?y8Lq0&vvE#Gfl@p}
z%N)waxrf7ny<cRzpF!tLhm2o6lC2yE9`dGy3gWJ0-O!=N|1ujZAcq6oquE$PIvn60
z%XZhTx&eGDTR8{dA&QNR^{(JWF0!xsYwuQxL?!EaBs-zj75)14tauUWReb(KW)dY%
zS%2-?2Wd`~$PKzt6!oOjzo`^;z%$wI`)`tgIcKxoea!l3Suc%)3)#wDkpk<XzP(@S
zfw>j=Q>^G^Ez%8qabOQA0AI-ViX{?AU|h(SOC*pO#}~5Y5{XE@l(>*Bmq?OBONk5F
zSRxIiKIJ7_ze~+}Sxa|4_nkeQz$JFJA=YLfQPOwWa)k#HC4HCe|6d+4h!h*T@3I4r
z+|1%ikNpoF2%sRi;0NY;MJq4;!6}D|{~=pmYd{7nKV;)tW127yljhY_pI5Y)tLm!V
z;k^nCyQ_AG2MLU;*>a-<5*SyrvGB>plm}7=Mz%H5B`u@CPrJ{n*@<T{=^0#vuZ1D@
z+z6Msk}lW1bV)JJtJI6k)~&lL`}Ig={ZqTeT?Uqz4Ilt3#(8D<00}F`d3|Dz0|_g}
zc`?V)Zrn>FcLM8Eh28iB2Z09e1P6fz?gXz-+yFua2ot=x0h~fN^<G4Jb%s}2oYDtq
zVWkTH+J;cDpW&6`A98@1;g#bbBw%KEG5%@K0up<c8Qy}$Ua@B(2H&&H^vXR8am1cw
zmRB6QaxJlEndMEk<$kP^VrbM^-gZw(-*QcqH`^=s8Bz+qob65W!)6-{HqZ99d-`TY
zG|HUc6^V&wjyK7VKy5{Iy*b`?Rlm{1mB3uD-0jFBaU(GAcUIs=V4gR5&&@^RMqs{I
zTte9RxDlA|E&ffBxDlA|Z6|j768?5v2`so7pZ6g5!kfJ)`q?6{`)Rv7qdF^6pA1HK
zE??oapN5LB@Mefro|h-ktne1t9f>B=71WXT(O%Wd7fY!oL$w3xRa+bk9sb<nbS1iv
z-Qx9$6&7@WvBld!Tqc8r54U(ro)ysuBsM_ADeWSC!#N!BetST37MFVL8FM@i2Rtxa
z-Q`W&pL%t;=2LQac|AUJJJz-yo^i0-t60g^F81KFMhW|Tq&7YVj<}`5b99^CUJTJ^
zxj2m7!$yqKo{R7C%A;b9A35$JnU4e}RQ9rr(b~tcy<T~=jT8amk`VTlC>QqaW515p
z?y&YbKy>D~k7T|htI_>G_of|5{bh{SSMh%C#l71z(B&7fhuD#E+OzRPUWHG<#Dwl4
z8iR|-2!74_1^dfu+MDq&yz=N3ObC5JLIZ>l$iuAecx}+_hY>(%kp)e%^e_o!!U&vd
z9`&Z3^SaCoGu=ZM-$%VTw(fy4_)+9Bc5J-%U$J9ed29_P)Q@?QL(qxKK;s1a+XU^t
z_zBw?I821h2``p)gUJqlns}1cPSA$NPkQA=BA5_5>BU9j2_XcRon`-+sC{jnwc7{h
zf)F}OE}KV}*2t?Fo0C?Z`rp^JA}ugB2U({(C?w@z)>0?uC{t5!P18CmRrpt&o8SQq
zoSb81@D(OVlrlLd+sk7RNHoIaoSdmSA_fryV+A*fIqovv10@GmOvx!KxtRr^DLIYX
zm>>GM0ay!c%2BrExFcJAsh4JId-N*MwiPsqZOW0SH#vL~+ms_uZ$QF|O*z4Bu!2(2
zh(T7U@8r0*=7>}@$wQ%=kwe613&}z%+LjzjMWeYbhn%`22h(?n#kMZeT0RFtY{>8k
zM(oJR5py<3fbGbUb2dl}#T_|v&L)!2**kLNoGm#tXYa_toP9Sh4G=roQ;W5G%6I0-
zSs;f`iaT@UEC3S4?#z+107%lw!7Q*=I1Ul{QtHda+IqdqB?p71v`Y>KO=*{M<hCJ)
zPidEO<hB7MOuv*Pw+%#!ZNsG;Y#UCC{sFjasVo21{-%^)b4sBN&b1u5jmqKc)oVGq
z;)nnwEWMV4BLZ9_!LyJZ;1fw3AUGv620+5T0X~_u0TP-6e0I`Cj)G|Ws*fjabO3=G
zzv{c;E!w=i>bv1B+Pu8#lQ};S2GXlOByHS}!HUD_5x%rZtU*e<&p*N^GY4?Q>vxaz
zDG7071`-gU#myr~bcvBZ?0-69EaE5@d4TLdO1nEY8nKec1TY~p+J{CFGN8t?W@{lc
z)+a+H4oiva!%)1J<G`@j*yOd^{jt}4G793D6Ed&)&@kv8C<`^6z?5~`J+TQsd4mTg
zWG48qZxlGF{_E_o>$Ll=*L^bDp{kI1-G}YQf&dhJ7z)0$?^CtwwE2ej9Uo55?n9IK
zsN!4Lu<hCdC0l%QtbvIdZt)pn=K>OjZXu{YaTPq=&Xjkxr%SgxDl|N|`wVd~=HtV2
zyAKCruOTv_7#LH-M!u^}D66sC4NMqbW49YfK-BnT4+V)*Yse9ga0F1h*i$>S$4Yle
zhXR%c#x7r!=k60pLO$f~Q}6~2=j~%(?9c|4?{i9}ak0-QmwJ!^#6F)){RIh#eLnQq
z(X?pwk%_gbH{R2{uJT$3gBE+W4hAjuYJEO&FasT6)cO$Ld9taGy8Y*=Q#D$ltL$?J
zgZlsHz6`N6fDkY~_Z8pDqbx{ZeD1rgIgd#`>i&mWyPaBj$zc#uhC2FTpFFt*8!Cr=
zSl9RCmSaR8V{h)%UMfB2G!xJ5a+-<fc2P5}6Ar`L>m++{m$sq&q+=+hcAa#ZiDtNy
zKAFerQ)snuk{rgfVxdJ>g?I1P7MGuMASku#oC86rUFV#Zrqr%;zJfv?C47|HbwNf6
z5b)9kIXciBl-hN{juIfDdErKs@KI{lWf3Jhf<W_Mc5I;3uFH-Ml-hOKjuH?C(q)Pg
zJfR1-3j_UWV^eGQQbNx_zsF05CmtN+BRR;=uJ6~Lh!671u?8->_aHw82<2)+3eZDY
zzXRHm_)x#RQU?=4L;djeAt3~EIBWZXb~rxVFV20TNdslLA4eV7;t&$78pT?FsEv+|
za*!xQj3OjjC}mJDAH%->5DTR-e!1cT6Eb7`n3}%F;kgHg=TrS@3sW6G(k{Dlrusd3
z=1D35C(=mfVfTEjosPfZS9r=FF`@j1AE#dngb?a8gLVEyTNIz+mq8I{(h!>AM^HQ<
zgh0+=xd*im<8%CSse?0O;`%WZb_*fYX93eb)%IEo{4$*37#Kne{0L{?(fy&{ufFfc
zO7!xl+JCg%_x*ThV=k24ezJA9Uuhqi=wd4_YHe7{V_Nsl;D{vxp2N=Fewj1|5{2#d
zBWa9I#z0~~?Dpri<0}v%u|Pn<yZzxi_{%wdYPNms>@lrPvwaRI1-5;DnMe*9fbOGO
zuZY0bfL|RPNE;JyMP^0V->-Y}QhknV{;ZtA0X=5EPgV!W>S{LrTW!~a)d7(|Mogeq
z2Q0Cs2MN^b0Itc&RFE*WI?(75zNRO#+Q=tP$-}ruCroIMU~gX3o_c6RKvo}2;s#{(
zK>~9`Kvo|lFh>Mr^@$YK9}$q%4^UH$4zP2_v}VmgV6=>Ou&Kn+0qF%i1@`CwyfBQe
zW`ch8^+4L>)TT>XwX5p&fS$y{*zFEd)h7j%_Pkc000~mG7Dzx&vdskv$Vs-jAYtw#
z+gu`rxs%9T0S<K*P})gwx^D%koA;9ogWMS`AkQK|0-XhL79pPkodt65;C%s4B{~b_
zwKXreP^Azy)`7H@%zIh;CNLwQ*D(jsDky|1sS5(wxO>0XuDh!6uh_Wb0Rq*6K!!Lm
z1_|>P1nP<w1&Q((1WFt8MKee&R~H0sT^tbCsKmg63n~i(BD0H1A{N?YQ2<$VkMY7G
zur#1VB6nMlRQ$bvMI{^kqjqlzSi+|vUhAa+ISYeCsY?S06x3@%)WFM``-=8d)pAFL
zT6TFr&h?Oi%JKk0896yb)QW%@%|yY;Annp<_FWN>FMHuB7siDBK?XdS>sNOM(mut|
z*p^|nrxzL9ck5Qsr(f4z-744}Uus(Ft1H@SPtHynDwGK6&ZYjchb{V5d%a|jT?&{e
zWsluYK%$gA)KC7%Rq${>``dNxPo?`E6&eZqZ8zj{H|!@j@YL8`^20~$(sgZS=|_$Z
z`Qanm50F7IACVvUIdv|P2VZ|jpW5u8qeAsRXxASiBojdW_t2oo!?rMxHa6&rEKpdJ
zThu^mrb~az<vSYCBjzlsZywe6RDiXgroX{{P1n^Hr)+FI0`{qZJT?aj>{9_8o1dd@
zm<MCk{{)oF0e9qcH#_u}-X_)Gtv67rz!a?m5g`1>whkl^{zKN$(Gf`W!2bjaFQW(2
zQ718I!{q)hAh&Ij17Cd?klQxN0?>B>Y}+2-mO$V~>XUa+pJXvjzq=H)*evGpHQkSa
zOfl|2Lia~%iCJ_dnMdUH)Obyw<LYwV9!lV1C|wW8GZc`h$n`*h*i(Qcr2rNjG?YPN
zC|?iM5l0(Dih*=JQ1@YT6RqL$Xo4J?nqcU6xXOnH<$whjr3?*b@Hvl!P|DC?vbBVz
zb>Prod0W0F$)jjEEGTv^AfP!cD0eO(p*bulcP=2IIV@=JT=Ho3Hzp`{E+A;Kc5I;2
zzA-_$bHP&}jS0$~3rHZ131Ut1C-kSVUmYJzo5`kT>QCm34`Np2E7UM`B9>Bc3*+j{
zf^uyLE}&RYt_?u~iUsAFFGz}iL4PaW_C)dth6MvH&GY25FpY*8sb{nGUaqz?Y<s~)
zWo86r%YY=QV1Wp7AW_JSAcEX7+PLKV)n&o74^o*q`clQWEQs`Y-tF_r;*~+(?VEvs
z3sweYuLTLnl|k9>K>~7R5d9t#joY11W~EY-1NsP8Ny<?oJ5oV8J3$CaDQW?Vn)x)`
z*R#$c{fYARc1^%UP1XnH8%-dAus)a&8wrp=SRbt4&|EBv1-UJCJftsim2Yz}sGn{N
z$^@)@-cPp$bHvdfNKy(G#?5^+*z>6u*05c9`hoHq2ZB0bjbjFN!kVCbu?i}Hs0p@c
z#XDg>b;4b;6M}%|F1r(ggyt^06M}^1t{a^&pK5zRbV3%7=xX}|jtSHU57>PWk^nkj
z_d$>VIzWB!X*6lXuhs_BUJtn<53s+#sOPf(iRkUTwL!cSOt0QXsAWH4yCZtjrk~iY
z111nZ3CgJ$BoIFdVk)LLq9f$^&w@%c(vYp1Vg%To1$t34Fhmr?WB%L__rM^b{8<p!
zaCC+TZM5xSI3Y5{#r6*}3fSrbeRv5twmQKd4$7NEh(rBw5X<Z4TpQF;_P40svizv+
zj|iXSj@teJ3526Tx!nOtIzdFA$rOkq)T(DvN1}Q}DLE6AsY~EO=}b@)Q4l1Q&IEB}
zMj0~^YRB`ePF%mE{Jc{vZ7I(?#Zr5o56X8Bp#p^SL9ECxih83xFR|Hi{XgZG90=M`
zUb6dRgtz3SV2)U0f&|2+AkK|12?%T{e_#hJ{k!rX90)qT{vnuQyPI~HKLo>KQ4`@i
z%pZdF>WhIKq4TbvCnfbcWj{Lz^fJ-Uc8Guo5Pl98G~r<tB#ihu*sO)@FW7HhV@HyD
z)ADN$f&qkULHWL7M4|oWwV-@o5hM_<1@T_&NE(_E+HVd?Jy4{Nc9jhY$>0tyyg4K!
z11m^i3<>$goB<LTLqfOIH(PNCY&fe~ZXLaKNp(nO`b79nvpOWt1wcZjI)ru?JqH`j
z5$u2Kpy!Nm3Z<7dM}*|dnh}L|m?J`Q@s=b=AdCoMFz*vR2X_+_Q<v)K4=HUYIvDh_
z=ERVUun~n`)|?nB;0ea4EWNBbF;wRka||sp3jFG{P}*Cms(Pq>U|I-s0`0}z1sI3w
ztdKIF#T)4RtMH!~4&VcBR!9y-kbs*N!ce3&0Z6O~W`%O+hr}T&F=$Po&JMZfg~TDM
z<UwyvNFJg}77kJ8hUgG=0#&bo2Hx_Ja(`q<>cxh7j#34}wt~j=@{qibge1_GhveJ@
z61{49$S;zch~(>%<)MJc_K+M5{N<sh;)GeUI8574<{aSzNc=m5mpCW5DBX!&Ezzfz
zgCW-I1$+YdcSvTnfP_u|4&{j>9FPF}cL@8|Ch&9Auf82h+rU05)o=B_9nv#-j!6_=
z_N-<8#(I~kwRYve1kl=$Jf{W;ptT{KQ`2e%Br3Ny6s+PK4<b=HwD{UkNaU7C7FT-W
zUuGDtjFM^VLP~BDAIf;Nv(>C=la`_qc!F+@M-7B$L32^rz950Kj@p+(Z4|-Mvz|q6
z)!S69xBUPnAlBO>1tbvGhvfY$NFb~a;lz^eUqRyjb$!Ube<fPjzdj`IUnL7yz3W4C
z|GJ+}ACTC!Ba}8c*A>~4Zgs5a)gx7VtNyMlXGaLPObo5%;Tcr#u|-YwDe?D0^1KvG
zwBdVHI=!0=A=p;Kp1n=K9IFY*ly@*8R6`@PA(sL5KI_{|FNwV$lIiS7Ln3YnZ^9?I
z3@WvgZEB_$#dn6}c?MF9AhR=sJuTg(qcBAFU8(EM^mJEzS4iQ<bi{?!t`KhUz7i(E
zd%Ibpg?=)&JEYX7R)!Frz3vV*D&aZ)JgsLBtJ6~N7~2z)XDnbsW={waJ;_T$G~Uaq
zTk6H}y&-veg1j5Z?4@3~9I+0#=sdNlT`l#Mu2`*uq(iEfkUDT7#MF=3<lFVTVjqX(
zO;MI&K<48RZi-&vG6<TVuwQQ1{~7-TLqu9_Lgo_+E_*S8Q5wSH(bVg$_0CG$qmEPt
zq>hr5s4B(9qoI0j&_Ptv;nQWPert1<070NUlS-EBNhNm1@nR-G&V=gL<1bTWDF}sU
z*>iX3?P6y`3ZHBMl?9ozA-wQOFI;3P*qfYVTS(@dgF^>6=Lm;h072dyO{}qY`h&6a
zA^DmDn2<Ri!n{YPWmyUmCBI=K+Ua-1zHx9U;rkoH!C5n8@b1?IcB-BJSp0&6<Aclv
z!olj6gzz@lmDE%1^%aVBC8UVY$AAl|D<P~Lr4#Xj*r420{f_#BiZv+rhOYw<8<Yz#
zzKYWZ4`OU}ZrV7;?$(FqROjLvlTI6XLe;Qb=Iy6GR4fvyhULl@1qp;<xoA;(vxetU
z4QI3dpf`>U&y{Z}f(e=7xp+&lfXjdy!M^!}UKksZEAK6k8b#b(+*=fL88qieR_`9Y
zZfs<(JfK7J6J$o_;(!k6Qz#1~V-)LokKQ~sDp&SZFd;K47kw33t&qXE7|k}{qu&}E
z?cmV37)>~$ECjwWEUOdB8j~x}QnUHE7?X>QH$K+^9E^*x?BPy&6KkwfcN!OCsqP>9
zOj_osYjV>zrsj0gYjy9MTs@cGz))SZ8cngGkLdT7q;gdrfr$y-RBo^y^<N@U;Z*Kz
z_n7s#3dK)$^%1>6$+}#X?^+>4Zd{j}%WvF?gvz?ymJiaa>>%-Q1AFvQy;I{2xhlUI
zBqnilLk(mp6h=4XHown&OM$^iP1=^5wkfsyQN5`vwk;PQ6gq*MJiK)Si%;b$Wf9yS
z$S*swUmw-usn(C{!`&K^lX~{RsZW;yYW+<9btLiGC&bXF^uj89MX7t=-hJ?uDWo#d
zSEZguM$^lG?TsAY-+ckfda>(2y2x)o(U+KRR^aKt;!9LFJ_RMd{e;g{-TX}`e0_;N
z*@V=w{(bx6c&EyKDn1OwKNV&D<|9$!`%Ti8e)w9`i+#Ex`_#@=d$BjZEhWAJ#ZB*q
zthMJVtZskp+V=%~+3MvU{r-wiS|NF>dymRK{rgq4mbqLnR`5?>;e%3KjaNXVzrnVO
z9zFSIwnQG>!`60YJz~|Xtf)Y4R*!CYRKL_}-|L2Ig{*}1Bw%{=hEaVh`t|SItD<|G
z)TyWRmaZzEWhYX`e)r9()>2k{+e_e*ekDHGg{lJWuXrTV^iV(BWcjTxnTCdMgH^&k
zmH3twQu(9~_nyh~^{TqV3o@S#CcaqFwX#2b{Hv?X>U*JY@0aPzS3O^`p6`oS3H$W#
z3olZxckg~(dsa3Q?Iv;qQIK>nWyaZ(-BEDGi<Q>#0TZQ{?I+Of>+9YBg}?Ha5?>>0
zWU>!F)C<}Rc=2T|>dhEUr*c)EcSa<}#HrkD{uVTm7!#**F;k4i#0?t48&m)Kv;JD>
z-i>)GPZ1|Bls4w&^CJc#p|mltMQ6&qa2NX3&3S33^LXZkyAS}I^Yp0LoD|Yn+Lk9y
z89*Q&ZOfA@P>_(_mM2dcKmv7J9!?psJa8A1CGY03oauVBB?xG~>uAyn>)kwg$d0Gb
zd^ZoLkvy-f5W`;Glc(%Y{j*X>UKjoqD>Xbou-lWDAu``V0%lKMzBtnY379>3Si{gl
z93&Rvd-Ce+&lAVP#1N-id-LS+uw=nG`|@x+jFlD{4wR4b@LK)<Se?3KL^A(N`oI?8
zh~*)kqtuTa<7qGZ5gEUL&U^|H*VWJRlp}fW$m<GyA7~-#^RoU*6?irP?Q1{Flj}<;
z0N}Gcxqko&vp>trJp!{S34<7X|L}R9`*5DvKS&<*4&}-HgJfa<@I@Z&A1GCzkmiqL
zdHfSB?D+*os2Mo$AXv5sX@h($PoBErDIkyK*{5!W<nB`oSN%hGwLRrD0?(w*le<F5
z0OC}hJZ=LCh*Nnu>X=HOV2SzFU-FP!^zAG96nEWU@(`pci8Y2K)&XH<NZ4(zp<L6L
zOp4{a)bfAnx4Bvl49nLC#6vXFpfKKAqjOflK|zDVc-QSP`8|f7s*VgR<5J-P`k!4@
z_*b|a4`ATPu-r?4gx<)o%y|I`caIDQ$AyKviNW1HD(oH`7Vefj=#36bcS{!BJtj=<
z{#n?7Npw<JnHF}Zz8k2&?5YA`TR~lZQdn-+V!X>w3S+xQeHA3Em=yL;yJ3acu&FHU
ze&dD}_65u2u$sfSKBNa@Vc3)~re=DxNwUyzQ^RUr16mh@2j|TQD-T41R)^lb`c<$d
zm3p8%*jR&rFGd$gbe9=n*{~pC@r<xcUk8a|W`wb_r#%=*ETd<H6Zgwf`5uN#B=0i|
zd7+?Yv6qMF@v2!)8FcwE%PE7#(yXxjG+B(F3(X447ZgCEj9KC6A7mLkPnA%^g?F0~
zUIr>KCyXqkOzV%m`*s(fF0`wI%T9V|ntu`&Q_8}euuNHq@zbR_VV`&z0wjRvgt1GK
z!YF!9*y<>YrZGsS&j}|wm@RqHpysh&L-pIc%yX(o=TGyTGH7_s3(E}H7$08q!tyN-
zkSJqbxSs7ok1S(exc+_orWamDJ1%1CtNPw&7CD8`09@qwkOttQupEF;K}8mYv8)pn
zp;s9eg^M1P6`@xdsKYD@7e8Rectx-{e3Lb))~#pWbjqM?pf{Z|=m_i0u>5{cj2~gW
z8OAbIlz~r};c3#Y2>*Z?%6Kzebf4LXmjQvLY(=$RTE5gNgATcthUF<uj306>4Hwv;
zbjY<dj1AepDJ;hn?8sKK$S{5NGb<ek%BooDm`SHxE5m+~4FVNFtPEpABFr>k#mX>V
zp%DYckgix6Zty5i5Q)(-*jud8aJ{_zEvF0<X1*1cCuxvD8E=K_+%7@s6zr{VSzB{6
zy?qj+{odx(g5mmBrORdqgAy<{hvlIbgn+R*EWbbo5*VAqr6OwuB<$QAZX!}oi4<3u
zo5M|?F;CNbGBHZg*qeH9l>WE$E_<C)=;&;3Sf0i}2&L=|%ddKYL@9g22=2lgc=r!v
z@*(MsOj*j_a8YNoR)jO`C~H$=$LUYFs%o85=y0tzoFNW*V*GHeHXIXYlORz_Z5U^h
zqLeI@QX6jhoQT`FVBy((wc%D>F}vZb7J@_Be6`_cy6|Z$M!VF5;hVl3)}uG;wZO<~
zjwdJ^kHqu^5;Z&+meUtVlzotD_^aqL*vTFa^GhQ(bAqludDy9h7aixY({boKYKNUM
zMBh<69L6L@3#7PTJsM6MlrI)YaY!Bw<E)-v!^CNUbb_^;rcY~z{{ec!4*4J<dLk^>
zM<4-uB8>IXGV*Sm!t3eO-idl+SLx}nymA7U*kN6~!37dZr^A7ud4vvX;}priO*NRL
zA9a;}>nIV{w~i8p>TgMDE{+eN1oBF%)nvVnQhvpD0l2XCitPfBz_=3ji;EYKq!h+3
zlU5ROnkjw>^Q$}5lkQu7v0DKoG=H&M0VFhkxzP%7npFm}zc1B)?t=e;GcaGyI3Vd+
zzMOGD0%%~qjAS4IG%#Pbg5_6-<fqM)tzbcNNIveoc`I1d3f1|vOr2d)oiFEHa3NKl
zFB<?P@T&9W0@Wg)4QH$7=!GruKMWb}C{iN~&zI{{JcZ)$d@S+yQopijeL6Z{nZUYD
z*Y{N6KQZHg50ue%bwC1TbiSP2KmuiSJ|;Js@<C$CADthakS~^}#1PBVG5K<NDp_dq
zvH4h@(i`lOg%_XjE=4}Q!CrPV7bU!wkME=WMih-TKHvSASf5(3LY<PY%*g-E`n0kN
z4`4l>hy@EsSU)9Su2Mk)drH1srGkX@Q}T0Xz<OGx5`!<Brslh+=Zj^N<U#L^e7S6r
zEG(O*<<qi>hF8L`&dyIOTqs*MfnsOp>v7St32NDSyk+0G4FpV_XPXETvh(cr1&N~O
zQTx&hL<#c#0@iD`-tgW9`Eq!HN!)z?ZkC5+pt2wzi$Ss^=~ox$r>&QUBq6yt-yY~m
zGGwVRg#Bxdu9hsd?Z6|5F176d3DBi>KTDDw%c-9gwOH<`kR8kI9tIhxET<mEHxWtd
zVXO0%b-!;UJb(xAL^Kjez^t|#2_#@v+l>SgjkG#Hcb#k`V(>;<lkZ+D8%gq@_qN?g
zl7&V}-DspDzq%2Pv`zY^2*qx^G5m_iH=AW6fq;pdZ4*I4cC+mqkSJ<1Ifp(ZTSWG6
zWn<>+O&V{-H7TDoz$9+ICf@M^36-t+_$b>K^x|Z(U;QW_FF0SAuRopc{U{$d;&d=y
zOh$ano?NWADgD@n0uxXl=gZF@fCSXX)ZSAl1{YKDhf-S?>jkc|L-sfZ7enSyzDz0w
zNmBXpBhMg#aVQ@jdG5?1FcOcj@DlyuvLg-xHPaD05)|`hI+8DAD@Y(5$wzFxgCl@C
z#^x{4+m|165NI?Wa}a1W9?O?EnZ<lG9?Qq#h@x{bMdz>bMRW!M>%YpEb0kP;ew8oh
zNRTM)t9*NoEG9$GE<|*8wLR+;PI39HQ#i%tvvypD3Lwr>T;5@#J?bDZNAU6X70dLF
z9^a4%UO4ALxehf*bwniQ%zR5%n^fcGlD9A(0kJwFBQr=KR!7h&KBs1>gJx03M6j3p
z<SqSAt}6U%>rqpTiO6Ir$U$#RM5g0_M1LO>DI6CO={Uro{_Y+dk?A;+LlHG1({UsV
zKw~3F$7#aLhromguG5RG$NF|<%h%`)nu4~Cpk6Z}B5%{{@Yb9VL0s>`b%8V~g3I)W
z=`OtvYy7s}vIGoUnHq9ZMBb&>;SD({g1dBjr?w6?<P<jHZM}KP6kHTbXHg4IiO4Jz
z$e@HN5o{gteI%%$siv{--_~0-nHCXuKE#B|v`AE3IfI1Cv<R-8m(nVt4z?BQya@8|
zo=G7YqYD4p*3n*KUPK0c$U$#jL<W73@bA1x?qc|tf<7^LJeePHFN%nuFL}^g5RpM&
zvJg)eMkwev<0fF&u{5G2B6Te`Y@L2<IS4V0)=}vCd}&0!4FM81Esf-gce6nPduasw
zQ0n@1XdAjB!n;26uGiJZE8u(SH@Y=n5s^I~l2BX`v3q_U+EA>Ch?F7_@cbIb1lm`u
ziO7Wso&sr2L@rD~0%=VI1K<H%JK+7{b&<49Y`_Nne($;nURp}x%pI?m;?9p9+MpN5
z)<@($0hs7n>m#@)NN^dzZeWEQ^`h8@h`cAjyQ7fV5RvEm{3X$i?3s;v-S|dXHGtDP
za3gj6r!WHR`qeFww4H43M*UCTEfGDRZp_?u$%1VxW0T&oY@1y(Fj2E@cFjP-gl!S|
zm0OUg*|rGoIw(5VrH;OXjohR+Dcj*7P;}f8$q?@~K!$`O5pga65(qmYIE3rS5n$*0
z?8+wn?(+8?1nRTzM`X%RT^=3ZkK~B0H%K77Pd40(y4`{^yhz$*_Rn|pPLVw{2=>q#
z>=vrrfrt{1Y;sxm^nRILe;bK3m*3Hsmw_uf5@b-$0lTgsVd;U0jKUyM&H?gse-4O;
zwd}}d{pIpn2Z7dwwGIN+wKgJGbhq%j*3!ryLA$bBs8Nom#&6Lx(@T!q!xvmA9j8{I
z9T7+rdpv@xnf6=<)YokHcD+N{*G{n%{J*vxbPHdKeI3aWJ2#M|6G8B&+`(HYW}IgC
zzN>d`f7(Hy!;aGq0)>#%4g!Uc(}aLmUw{DFb4b03l(9`4^)UO-yL#hxVAyV?GsAO{
z3^4#94XksK!g{hk6kE<k8a6UN6AgpdaxtQO$GYy&Kdr)lHVU0uTy$JXk>;Y^@owRf
z<{~vZEsjAV(p-!be}_mzn{{F!(x9YE5&2TCWWlumMDRN4edsIo{OXU9v|l5xNV)hb
zM|-yRJ^hY9{usfFI{Bz+J?b?-MHF8I$+VStd)<2ckxs%sJc50ACL$q7*!Pn?LxDuu
zKhX?@OF-b@;V<mL8ojXW7rTaF0^t|Ch9F7E?kpgI@C$Voga;s?uUumbYxLrd*Bk_D
ziE9o56>}{jPvD>egliP}E^4T4eZM-YAZ=cOE3yl}F5&tHU$;%ZuYZ#68&zN@3D&3j
zjxXR-aBC1iA73DA2omVy3*;OO66oU#P{WBdN7SdXrxxHCd}un)DN9}2qyMj~6fEH(
z2yh9xNdgJ|sRdZVQe3W2^_yNGay>zynWh)Wzzh<a(+gx^1_{mS1$JPrPvqPJ9+*3V
zK=+<oAbSx=)M0Lc49p;bG`BzoW{_MJfw`JI)BsnS1!>=;>K)KuP4}%S!1urT%A^6g
zWvy^aGZ27WYgY>-AlKS%0SU;p<QAUx+<;8q$i~#_GfOuX$OK(5iCZ8ObU{LAV*wI$
zH_?!2K)%?@p8i<h+-0j>6EIQiR=Xx30kO3}zMTjX5L*i{QBcqTiD_<YL4io#AyOO(
zZ7qm)qEve-1PV3ml~44GWi?JA{ChA3GC>nED5Rz!(MqC{yJ`yBl=07rH=sbWi_Jf%
zcPiiIAkb=ZSAjh3fea9K6~uUs1`4G>va0|&8pmki)`03%n`-!}-VHB$IT*B@taYkN
z0i?D-=8-`M7_|jRD|v@HUIXeYhf}*h)3><F4?7qXJ`Ot=6h00Y$VdzwU>q*M;F8Y3
z>f!`@|B!yM{DcER>xvTvGFQ0)Uss$cNQzT8kbpQ*a9cCpe;bg)Pm2D_yoa%_IB9oZ
zJVMzg?d}T_iYIS$-v+d<I4`<y2M}=TdB+4=SDbfhLF<b1cK3xakj@vN`*uR_ZHNe1
zkhY!;IHKPZxLAOE_rc`jhUmQN_XWz&sY6F}#Z`rWMFhhGfPZg;g9P~Z1u_W<B*4Ef
zzyUW!SdfUY-xpXv7o?j(9K;a=eTqIy^Fx9ArveW@L%6|(?vDjn&joSXaD#~z-Id$|
zTGD+>U9cf_;Q>)47CGu-eU9o49_E*x{701NPPz2|{j*EBYNdN=`!<(faN{zTeryTX
zsEzo|HG6H3CyzCMTKCq)oqR<v-0I59U-3Z_gmc^yzerzY;n&k9YdA<P>`11e9blX7
zDq6z~h{_cRo^s3OC!#>2x&xw^qMzo~LdMtNDEsQD{^zQ}4g~e}!BH8B8uIZwI4T!X
zAOSHriusIEzCa@7YjCu9toY;x(U{I)!{BJ0?pRA3T!hbX5PN=%i?Wcw1IVjUrD>!&
z?%6BgLbmysetS7sc0Fi(zZ#WmG03AHuSO#!e0+oC`nNXWpWA6j<9m3NH9xMmZ#Ue5
zpq0XK#}zcdhezdF13G{h9>q$5=R`I{rPVP}9DTig966Er&o+dH_!!3<G{nb5<!9%i
z1(Y#S>_0@`qfZWui8h!Jwfi1jeek|FHtHT9wfmmrLU&yBM&FZ6^u5>aj#A&7DMkex
zF(s-LMaC)Co&1NsEdHBY7Cs!)t6z`jdmxL0U(HwaEs?1e{rYz8_FqUNV1M{Zzq^Wm
z%}rdyTl`5SznZ_1v{BKu+g~MQ*KU1#S61TdH<gw2xvx^|QU0r5PQHL?{ofJ>+92IP
z=A%%uhDdx6`1LAT{XuH{UNkwq+klGLex<NC#qleJy(v*S-$59@nG(fa&twXn4JprO
zb`%Ha!_(PkU+JY)*8l5w&MHkl;{JcrR(|u-Wg=b0&Q>x1Z`mry&8W0`_IR;JzlL^(
z2K|g#C8|&3vuDNg_?0xIp*Vw=C}(KPUnsM`G{k?C4Z(pzNM##@0`9!t2o)wixYw&k
z*Pfyj+qJzafQHr<2^lC=rgQKd5U_vy>t-TM{KikL)gU$J9`Yud0`9b%f~Jqz&Oo7U
z>Fj8ZxCVhRnqqboS7P)PuZA>z%#SK9B7N9nU+a%`r-rYfA64rolX<M?U`O|^eP0oI
z9;AWNpkkLsmt*sz@(c=3QQG`yvAAUciPGjrn>9Cgh=#}LS(Uo<wO-@uu*$)p9Pm{R
z2F*6BqVnbFhJ3bJ6~)WZ+XV(Lzt%;uqgtJg6gZ<Gm3vyB=V}X<Z4#w}uZzkH)Q0>b
zY+Y1-nF}OLS{IGR%sF^f-h(e>d>zFp-IX)?Y{UO`)ML<1pa-9^z+@R!^7uCb*n#hK
zwF)HvIU9P2mD0&5){uB_4kYY76&0VPB}$O|ClrW;?5QXgW<nO!>8N~h7vG40EJ*&v
z3CPk4>~xeL^AavBJ#(YbM|ji(%`<H1DTL2NalRse(JW`9^8I6c(*eLB`SlEBDPQkw
z6gMqD;!7&-Mt=3@Xxg~K)WXYpf5rQA6#EW3*J(txzRDW@h;yB*QMrHy6IfTHasdt!
zW?iKU(E&*#s=;-<ny9xZz3!-x53V~ZG*MkA75e5zBdX<~LU!p#y{vRl;f-PlX;9&f
zVyO0m3Za9HQ0RafTF9QhqTf+E)X|}dWT>M<6Uk80LG~wf;F4j5?ENcx+or=D9dgaE
zLPPWx2tj99VOBQ(LPsN-Ek_pOSgaLW_LE-3p8iR<O2H7D2|R}K$U=E61`^663vn#=
z94`?4cx)kC{FC0T@mNQPg5lUgxdCa!gW=dhbe@@XELq}L=N6`Ym}>L09`oePEySMa
zUF3thOQ<bANcFg`zt`Z_4`Omp0xrNlh~<ly8$iN<4`Nu9zDo^T>Q@iP(#BY+E)9%3
zl{$xGd^ex&E=3;8v6%98%uQds)<BC7rxK67*T^{8?05{<F_g0+9-)O!#N6#~;-H+b
zh%-9_#+8zB*HTAIjJclDYq%2U6FImr?pjPXAxJ1)i=jD?wF(_P91v%#ZZk@&2E^qd
zI=GxI-<|;podI#YJwqD`kO)u%;yL1La76NZ*#U81Ykn^)Idm^OAl|YSPkAV%{xu}7
z1S9pW4qfq+l0CY0?P+!IP0KAzhWIJXUhJ7>Mzj<%w&7&kkhsjf0RW5`62~}f&kYAv
z9cPQ08FzN5j>|Ap%C~scak;Pp35e>rUmTx+<VskZ(OdPX2>RlvxY8)XTr8&revGYC
zbK})=a6~u6bM&22ak+m13A9o1n0TEBB+y31@yd8V4u(!TF3vJr82!t}IS_RIG0uUY
zt~xFrYbrfSU3FZ%c?<qs#Zub6OkkT@7;VcYI0!V0PjIS49d|-p?)9Jogb8u+(G%1N
zllUaovZZl%*(3*n@-Zek2sHUjip!%cr~qM79B;`z#;bw0ox;|&G@dA*;vmrXu%<W&
zG@(q1%L|24KA}vB<7e4+(@|C_ZDJOr?r&v0kY2vP!JzHS0tbU8lm(6zw0&7XRt%>J
zrIfNMmZd&vV~li_FLN+x7Fp(CP&&mj#}1lBmXRI*rgVx@N~c(xno(}7R?62p81$oX
zYaI+qr&t^Ji<B4W0Ap<&Y2m{~7eTVbCN{R6F|z$82ZBCivB`m;T!~F_zgRh!@?42c
z@mrhncbiHnwSG$+vv~vdL3{iTYyb8}K^Yi!AES(jEphq27o>r;B_0+VOOP;UOC0lT
zYhEMVM{H+%+8bqM+Z_bj3v7?eb$lt$YuFx-G?QJ74!*X>Ti$N|nIj;rp@wz5(|D$=
z#zCNjh8m|nl+aKU_t%pMl+aKUZ&<=V15--r`@7hYJB`Q6b~y++K-lFV&~L)+ipyO(
zRDiH6j<>yNb}FUh{=KYM2ct#VUIzhR0&?$l5a{>a_QvG~6e>X28^@2+(QlHLQs(~w
zcC>@htn7e;KtJzxz(Mc>;Xqub9YF;M2jW)J{5wa$TLHD~p^ipnS*?Q*079*U5CB50
zQ;Pr)YN-|#909*F^C`RD(RiWkQwJf4w)iwIuOCX4AP_!{i@bH19R$Ls@y1QeM>zt1
zl;#kdbC>aW*&zoZ1RD-HHiUq1$f-pL2#2T^bog4T;5TfJu-oo7?k_*$Amjq!h=Y&|
zgd=geoq`Gwj>Pd&$2if!^KhcfHr{QFFF)=;<N@Ni1Ca-a<8iq^EmiUWaXg+Zw#RB1
zYo64|KhRh`<6wk=aV9QTe5Fbl7-!->@qRBzV4R8LEe(DoU#j5i8W-53os50$FE|jm
zRd!#9%giUp0OCSizRm{{5EtTjoo^$~Am9wV8#~xihFYoT?loF_y5fI(j74C|VC%-L
z5CP6$OKyaq2b{qcPEKfp2@)I3!B+85OB^2)L+rPQSonbjI-o373a~t}_yOhZAYkP%
zOD+aL0)3bz4=6zbeVBy<%EQ9nQ6zF$N^xW#OY}Edv0)DxbJ~Jon;M0wqa9PD02}R?
z8U@&BG8M~i#oZWrpH|w;)L$Pqwz+a9S;$P_KM&ZLRsvI4>qjx0O|hZDgq>3?**8G~
zdWw}RP6<H*dWwY`jmu<bW14(tuxpPRKeV0UK+q}m4BI-$kdP(c%moRE85XW@z9Q>x
z^{b1mv{k7lj~gdk-o+M{J@`JM`&Ke;DJ%M;@m#Z|mb`QX6HrU7sJNy838<wOjt*!I
zcPkmQ(!$};V^#+??Q!E4cJz-%i?(11w?P1gt+WjT$ra?h4-#lAEzJ8P>B}NbaI|aT
z((SP)jS=2877oXrLLp7at`z&`N#oC@DN8Owzywmtl8X?KKuTFygnUe1YC?u>WH0~8
zI9R&T(V@~eTJjqpkb%xd3n#i=P<T_ny2Zi|2K~=d#xwpcR5-<>rYKz9ZYl4x^G_Ll
zs_>s!1c48%?RNPffwi5=r@jgjeRaDPd>?(4E>($vzUo)swcIt9xKx!q=<TrNrK)7%
z800;RPC+Q9Hl?cUw(ygA#g_Z-&X2TbU0WG3cI{~+vjlA09ID!GOWyH92e7*>-0{+d
zT~k`)?PD$eY~0;#ACUO;0VY)TS@LV;Afd9)l6kBkvEJBc)q9k$YKi1)$$eJ+NBCM&
za%e5N&+7aTAAU^<;zKd~nu9>M{?HzNAW__h_V5GAW$pWcrnKby)Z+I8&w}8T>_i~Z
zi9WSE5lA3?YL7jTK>C!%9@2e0_?p`xEA5yiJ~>H~)gjB1&$p@gS{puKX({!@r|dxD
zDQNNjB1m}Y3v$4n*r(z<Z4|-}JY#f>9YGH#pAi!>N32AWUZVmD>L_d4#kkixYRR`Q
z!6Yt?wwd$-8@}1}wUzcQo7Tmc;r-h3@GpXU{A9~X*6CSeK<uO?-|zwxswZhY;A^^&
zfeEMCsb`HRW2Y^-ody#!r!DM=FajY1>MZ+9SEGCEtn@W8iEH5|`7SO42c2hMb~XMG
zJ8#JwX+Pf)pQpHj&vruv9>2gkK4;u%U2t${Cwzf$s%gV?n_vCON}HWp@SK6)dHsn3
z2fuo`jVg21;x|&wL7=s++C38_YH`()+Z>QE=BkBlP7SRmZ=*U6N#JAO#`~`FAqm;!
zV59R4NywN8l8fOzU)tz^1jvvCeg$eXeZ=@SsxC{7f5B+)E@ut~E!$Z_?h+sb43>zA
zufu`_21{Vhr<vn6qNXOq)fNb7PEE*}10*!3CgjWklFQm%_cn6ftc1AQ0>P;p^`Ndh
zD<Nk%JO$FMgq-0(0%=wPU3W0~x0zpkGm*9{HSI-1QG9PE^n~zlGxG1U1ov+<5P)2k
zkRu-?AeSYie?bCrSpxp$Z%{O&O0Q1+tB=veRkqr84Y;V_>V&*P0!dN{`Hc^dz*wEY
z#{%(6th*U`cP-2BYy7i(t%E?$U7L`3-jD&p+C+iaX@dm9+Jt@m(~QV1sSo-Zxc=GV
zV33=)B;<iTgn+Rnkt5<0NK#5*2Sp9kjJ&*EHV_DCZnql<Bs90%4FnRJ+Y@#JHKSvS
zow9*I0BEOU1D$d2v>OOdfwa?ZAdo=XNezTWg5qxOSNA8<POzt5GQJ4xPtb>EXtrsN
z_EA4fC<j@mmyJ<X_)kP-@PYPWLPlkfK>IKuGjBj*lK3!@doUp;31aX`;-iH7lZ2Qg
zBoBJE2{}nf7AA?06EsQClC?Rx|MP_MP~<L)J@yZya|H-71>+HF__<v}kX%$Q;6VcW
z^Mrgw0wluz=LxGbzo92m+(~|(NIYoPiprupe3?L!&kh$e{~O6rC9fDuO2DxzO}2cQ
zke{4s&bz{w30!c~$10msPdLsz|7|?h_PAprb%f(~cZ3WOjwj@|UO<vgqD4z{A)NuW
z@T=DnX&Y1Qzm2*c-?aqZY2{I<1&xvcNj^$ifk3SXB&AUx0XZNkM+rzk4oG5@98zFa
z3z)1{CzavJ)a(HUlGE_Ns12S#u{tS}(?CM8Iw_OWK%xn&lZC^RA~}s1)P(L~Ntv7`
zIq=!Aq)bkeEC3BlA~_AO_`v`Oj7lOot&k_Dy)wusE(L8HK`tGYl*wrjhVG~&E=GHD
zT~OnaZ1*7J#gcK34mojLQXamw;7%Nu#NiwLgii|^O%qtfV59zX6O!^9zF<OSLQ)Pu
zkN}>Ll-JcD(KRL{3-0DC0wVc}U_vr_7he%b4y_0#B=79NH`y&{=uKi52OF)+CnaT%
z1e3T)85BXH*hxvbAq0tHCna&{UQPY21qGU^?1dr5@Up261RcIibs*^QWoptdPJo~S
zh^a}O0MS`m3p#w6#u^PZ8kbLV5a{q_nu9=xFVm8Ku?>O>5T+#&0_V^))q++-^HP(C
z8uMID=Q%#6^Oku@c~}V{D9uY^YUUYvEpXnVE=?+{lB`QgZ<3l>ZM@>D0>f@qI%!#&
zl+gjw&|aDh=JF*ZNOY~G$-GtQTC{{D29FNQlJ1pB5gjBCddrhCI!G3x!-^zD2a267
z=+I_$lD~Vw*l?qu6okm9!y_26Iw|KikN{hqv_oeLI;vT}@aS;E_0)RDb#zj*-f<nB
z)T~d+NewE1Sf7;ZF?<H{on+dsq*#y9#{He7{Iqa@2JGgf{IoFZGSX0EAjOx3@eo5|
za}sgmKCDjyGy=A=!6S_aVq2lYmt$Z;W@{3=5hP7P2Gn+TVWiPHwmm7AV_*_DiRIXz
zxD1Tj!JZyvJRRGC4=+d@x*gb&#IjD{U~ts1+EKu%Ny?8d1o*8$O%m6g_{<H;f(v%C
z_M?rK*3P6{LV^jLok=VqS0bs|gO5KRN~V3AnmpQQobEqF^`?&(1gYL%P`!Qq)CY?}
zqHdr?#X$n(3#vGM-62R7Kf>;N&1e@pl9VZjU_#~y4NaU4LI%`Pw)i#UiP%xQQeYC7
zD)lgzLB)@=!tutVvE#OLf_xEpoSf5v%b?<4u`%O~yJBA@<>w26yy9Qcc%+45kSczX
zT^euP89SMji%Bq1*2yFmlbDSlgCUC_;GAGQ9y^_si(4=ub2^E|EsjVagF$(gy*t6U
zKX%rUq0bkbB^eA{$Y9i+XQdO3#<BCV#}X4V=P3l^76v2^H7~G#PBfY)E;#<7k9u4n
z|GZ6WaD1}z`()aHBKE;VW3~VLB+@ylAwtv;KVV#lh5!j)gXXt?^b{aJP{rwE^dV}9
zE6kW=+!woI8v`a}u8=YR%Vj|Q!un1!s$##`4T=v(5|<jZJ(od4Tw`8lbckKE9T?&b
zag7{^{Bx9rhPcl9FymqCdQyI~0!-jsPbQ1ZZ)h>n(ytCKN?XW|G2^^%a1j<Gd>U*?
zl^Rhb7K<RzTqBBP$N`B;j3|=RAV}CUq6pI<onp468jdbv%cdA@%10N;XbmnPMi<Fw
z4U$XA{56n(7+r+QQK)T6RUKEv>P$6C%f~qo)FH+d$$L)-0b*QHvB+2g35an;$XMdv
zt!hc+<kYyS#%NdR<RUpafeWR{MRIZiNm4~<;T<$fv?PyBXZKArYRaZN<<c^7dXYSV
zg$y937e&M(6(k_07h#b~L9!)v>{;yD1x7)0{13%hMKVZ&gyO6s86-hMaaNHXBwJGL
z78HpM00>yJz%hX)ss)bsXrfwBBx5CnfwZ6qv2u`(CT)daS%e?*J2b;^xqa^x*&BdX
z)TUcSo8ATjkX!9G1qsNlcAJ6(<W_1^e1pT?id_9J+c4MYRPwH)LT&hNkvu$s3{>7N
z!r{doTm@}d!<x)9+TT@U*P|8BY^$;B0TKu`MRFAh5(qU#SVg`~>#0^C)xAZ^hehtl
zeCK_6FMDym@!wT=AZ9>_0cCHIoB=@sWp9yOAA`gUxVI?x!y+*Q5`)ix`-<Ej6p0y7
z@}RfBNX~$gg&FWbkv#*pqVDl=k(dGT(tJT<5Ml<zBN*|q-MAnD_VJCzZAIPUkZ9Zv
zAb@koaSAPD4mnPtZgR+OTnGc{P!Spz8RhQV{py!RX+N;@3yu4IUl!>_Vz}N;O?zB6
zEeHS}xBUYWfXD5o1qs08)U+?b$+uGzoMd^6jenG!bX2HmPZk;CH5<r4<zx|Fv!P3*
z+i7^7VH+14Pn4V~l1F@CLgh@6{8T(hsGKRn(g*P#Dxl7@JKi+zEIIF#LJfDmNPZd@
zG9*-luuUWBc5?Q&VkF^z432MYXM=>|x3;rELh;)h&c2<T{k?GZA3y--d)wI{`9m3p
zKmzG|+u0z2^gTKIFK~8ioKzI0EiHCMI<t!ljUc=JjVFWsWvOwy@24WYu5f*8a{X25
zdJurWYS$1X;IG=Q2MPGA<oX7vVQcc(b=H5G(Wvygqe8B~ZjUO+K;=4(st36WTtBFo
z?O$eeZak=1j)2zO_k)UMbAg1;pkg%Fe!3}ZP2{-Z)C0?n14{Y0Vi}UbhOOg@r7J+9
z;Bm!r0S%ICVct4RgRwO=2TMJ*%IN93i#Zr{GQk`SY8X~5FCU=;3|5T!h!5!2Xc%>R
zu`;Ll|2v@jRpBYH@K_9MkieQ=EQd8nU`;QU!x|)p_4MN0ImKdF6N3-y8O83|#bQ`X
z9`t4w%V8~97}m3j?P1-TBJX@xv3OHt|7t^RJil0uYdnJ$^NVHB1_`wJ#dgqcP3w;(
z#Uf~ffRC0qzM;Lr62~{RH&{|EgEoYLw4@ka?Q5Ec+xXQL#c4ZO`?rm+d@G7|OZ2Wb
z)VtOc^Lh9-5I|gGdk7>D*A&Zn7$gwa6r*=hS7}4NYb|rHH6AKkYuf}S5Z2l@fh3_~
z`I8VJfv~n1>kzt4Y(wLG0~@#2c&2=VgFxQeP%PhhhYS!l6#t*9t~I)<B1_*KZm!<4
zZQw?E1h_Yl+;dJHO@K&HAx}bhDGu5)KH8oc$8pU#J*#C_|CmSjtV~B)At=ow-6?y)
zLPUGnhyh##FAssyfhOJ4JVKxm0w^E^2oRVAgSr+y-&a+~+w<>!`|R3PXYXCR>Q?Pj
zl{Pz?fRM1G$fn9pCE8^aTLyrVyF$$ZqU5envw)g6)a+FH+a9CYIslEV=K|s__GI6J
zUbiRIES^Hr9%^>$z0hoVBGz9N`MI0fx;_4(7}{SH&T-1A+X187NdS;J5b72XG6zE4
z0z&2hb^Aa3g0!4(-I00hxAFb=ly#)7vw%u+dSsv%7y(hJBaP1ibt+al^cg#zc21|G
z`EBZ-8{@yp-0F&t$f*a-_&hiu;CR~lJRk%dPg|b{gwG#O4?CSUK2L)7`4j2rskHHV
zOGCM?wDoyQg3q5!)92sJ({F&mwZU~>b)%W3r{b&P&jXmXo^l-+8eAI~0MV!h*E%jB
zgg3bON5D-AKs2hsEqv8A8)_t=Q84u@uH8^8r!5;@vn&dLXN~T+I-~I#UE9I%6w({r
z&<)BN%a^#Og8@L$l59H}FqUN7$$+sW+fD|IB`(~chaIdU5nJv?-cutk#V-$C?uH5f
z6?6jS>JFwhT#m;|lxwYlM-Zr7+rI!IP`U7dV>!@Z1#PuToxL1CUa~4%hAyzmjhh>c
zz=JZYTwD|Jx+#M$wMJd)iT}K0jcfC9Dzw$txOeC*GsvaY*SN?s<2YDB^tMr++I<DV
z>FrQ=c!bK{4s{2pSwr1bQ0?oi?f^8hHU@<5)`hwQgrs$$?f@Za9d)-B=cz?2aniIK
z`CVq>wfNYap{;KC33erw*JhP>yEh)2+!iVVk07xvR30ECwo!Q-Ih<5Nd9m%Tv)hg4
zueNi$GuPt{^`M!)01gP)?%KWp2m#w&+ZO=gcH7-yyWw_R*dRgog&l5mmuvchrJ>wM
zuI&q!gubxT4dZ_$<J>3ix6`_N%RqsTf@CIlfN07mp`HOD@{@0Uw34vh=y@gp^xPi$
zC?NFQ9_kqolG;N(1L~sCGe6d=O2q!)MmBgk`H!lON8=;a!oGNU`VTG!1D=djg^aR8
zu5-kV@-~?}fK5gjY3f2>eCw<ZH#$?VtC>f5t;24#_RlD&t&@~c+%ebbg1DcA(qI&l
z)P?@|zt8^k|CQxm)Z=cnDl3f!IpId@zLoZw>zso$Eb!XKA>NUu*4>PE)_?BWbT{2N
z>imow{b5!dwRqOWUFu=uzHpt35XY-bbrA$COJdTTAwiqxU3+n<p+N2h*ItooD3IIj
zM#u707Nf)-*Xf1ee+&iVST2&(=z;i4Wmnv2WwufLvwYRHXG>{u>>1ZsrT(8>#U9XS
zdcY(A7`rd@U_dmlFYE$<DB8y^pmQ^-=u`u$=~jG2=|Hv&y?!8!AK*cm0mcuWq+CU<
zeeF64WE)-UiOUKTut7$>pqr260U_h-FrENH#@CD|e_|qG6=1B{bAFlG{8jvRZasd6
zV(6>Qo{jt9gP3N|#(hADY4&W~2Sf*K_6mRLnYd4aiTl6s5cd}{SFDN==pD})lmBI|
zPNKKB<su2Y;Q1GHx^=;p3F4Ad0j97K93I~B>~;<$pb_tQLrhNuL?hnuFhgN%tm1pW
z>zRq$f<YoS{$0=ZSv*3)cRf3<0HWZ#UKksz*uh&pJ+7$LQ4y<b&9;Dlwp+7m;0&-e
zs|L;hTRn8yU*C;BTb+pQ_i*pm*(mOA9<txVC+@Fst+$$v(V1zvODxPO>GW(+0~NwL
zy|_*iCKH5pdOVJW!$UO<hy9<s#ji__Wy{bdj(PTfHh56xn1_D^i%muFiPM?U-^B<s
z@w8{Mks*nqPJ6@j+9V+go%Ue7c3sh(*lRlHIsNMRV6kuTIq%Nzig~&LU^}li4iQfj
zpZB8XR*7ou2<N?FK6+3tWYH1Md-oOV)Z%K|xLcJB6&0o3Uet_xAfozi?_RSI4u~S%
z9`b=^=vtuQOJ1}T8NWC1;gI@Zs2E=if;knvTAS{YH^S_(0;2FG4|}XkL#U?Zdeq$s
zF{8N0i|X`n5>a1|muI$i0a2vKL!KYAlB+pOzpDN-A*zb6dbn)WyawmvSG^?T0^f@B
z@vB~WrBwtL4SUs<gm|K~*NYnOt9H0j-|LMWZ;NoHzSk?Ar1Pb#xrTVdi<ae2FmLs0
zp72UR2n%ze{zkSi7wT`YFwcsp=Hhyv7oC`2V+toqa_?0?I(0`(ediuAW;`C54NWjY
zOrJO0+z9~)F@0Xi1hJgoHP$3z3w>neJbjN?HYjhQkIi-7>0JYFj5YdBldrxRE~eDu
zr}=A-2N2ij4>qO-gt$f@*({vg0iu&P`uR=1*_k3i@7FByk(bQRZ!HBrxX8y=8xL->
zByQm>@++%Eh68>L{c)M^%*p?aQ;=yJAxd+e12ml;4`I}0zTF1~)Xer!dq6a5nU7Bz
zXemJ0W|=>EHjhNsP(OZfmS`|Fp)oC)X*dNg=kHpwRWMex_%^uJ=>E~-+kdKnkkR7f
zpQ@>XYsM{ps?=7Y_hef9f{Ef!Oh&6=2wm?xoBU}0HKFGI3lcvogF9oH-;WZ{<ksU!
z_+E^t>$8<IqOQ+Y%8s<2l^SI;qOSK-o1kn?X;6!q(!B3SH~MBuV`(VY>f0%eC1Fal
z!RM6b^SiiMjoX1f^dkpV>saww;zK`olulk5#;BC>o%>Ak3LqK;th;G0AXJy}v1o&C
z3W$eWRX5U9l3RU8CpD7@o~=HTnrk!<&^9%<P}C;3`A$IffrsPNHXna{xVWzG_SvpB
z6pFIscHb$nJlrkW?oTXb)+l%oMRus1A~89+!*_JgClNe5{P7b6j&T8mGCxxDi^SCA
zN7=f#Y48#2GVOsQ?Nl4E6_MPTt&5umJ6RVx1LPna>{5f%qB6D1w`Yoj2%cR&zE{PO
z>STfk?9KdBT6E;3_WF+Q@}z=muaDaiI-{Bkef~h^IZw=YQU|ha;>N)NwrL*v<TUKh
z`;n9CkQ9HBIPBw}2Ny`Eu}dEDoj<CHIDxw!zf7C}9cn+~k2Gf<0K(Wue5}{gNdVy_
zNBp8c!bvy{B0=}aqhXJ<6tv)I*dr~8J@P1f<V}tN(`eo<-%00R$SF|Q0&%?($T%*Z
zLDyZO;{s}4n+gbsHg);f@WE98PA+d^@*}s@==;T6Lq7L&liJsY)7Q@UYQa;&D*}Lo
zGoiKt(Y`a(Hn(VovnglQh+;85dDeIImrNvr=PbKDJ!Ck2>YRG9SWGTFmzATbl!L$J
z;6b~-@SREH@Okd3JMvUVvB*n-V62D7knshr*NBWCu*2#4GlNPH$13`LN3UU!3a)-1
zYZ!E9KnU&k%Vy~l*a^|tet+^z?z!VJ6m?V0E)~UvH$%q-5h8BVaet(F;FMqbPWiaM
zQExf8gXR5F@pKA=2W<^>&oBKcQ^hY}7>I;_4yeKhL`&g7wpH}c0k-Nd;ZwDV*f)M;
zh0MvHrN-WmA@uqKqQd>g$EPfu<<{b_!q23$P)5aV9->-n|0-x&=6jRGPjen@kkM({
zh0H@pe?>+Y{22wW{i?*D1rDLL^wvevSuEAZ&xo>mV7wCu=8Q~0C}oixZN^_f6ka5e
zT1BS?gwrmP-ePH-mIUpzP0|h{mV!n!Njr>K5}me5!fExN?pk<CY^faNESLC_LLB{v
zrP8`Ao}fibrTvB*5G`6N$LVl`CeUS<N`wH@BL00`Dj!&m7I7HEbF?Ud`j^S*1l~#J
zM5iPFRz}{2j+@Xy>f3XNsUZ)EpA2b{I9zTyhnneh@s*jC4~e{-c`K!z<bjH+S4w-J
zD<G;~DKY=%*aC>ivQj3@rRjv2Hfs(X*mlf_MftUv+YbvQk*v*%<r}S)c9nO!extP#
ztGq@mN5!==Z?3i=o>D9+_n5OcEd_75Rz48ct(j2wT3Pjo7~oYBxCN_KMn1tyU&K`s
zFZ~!FX<(x;(JF2F;|RX;2I)vMf&ijXz<M_<7Z4R}kk}1F(k&n!Zc@og@my+?w2>b~
z@NA+fn(($@0^E}MRi(HqC$$BVb*BK8WQm@=k)2`$yY@Eq-&Nv+)HZ4F9sm(c+ayvn
zcn1`i(4lv#=4x>$wNpCU8A$}wPCDZr!-O9Dv1+IhzfFBC9h0{?LigB@B{towVfwm6
zY_E*`Uj6+v#Ol2g$wBM{b!ztvQK_y?6S4Yz(q_QcX$|a?_GS}6G<2WDx;Y&U5RSG_
zj{BW;eG;_mw}-B8DQIJR==zpK*KeomKL^9$wy*s%aukMntYG@f>c_R>$;5t{Tcl&{
zNLuB9bjr-PlecR{ED2}=8XiLU0g2Fo<7spC9bX64xas2I<U#2?q}2@~cn(TzpK^#C
zN#!3>|2ADzCJ#v)r$8iCB2IA+9~W?8byFRkE~X_rq@z#uBoRCv^5H4e7$6LCSe4a@
zs^np513QS|IV=&_nFKMC5wugSs1pw+JEc=@+rtRjDXXdla|&>18wNquT_@@ak7Rim
zH;<6#hp^d<MC?-;IRyp%KrN^h`Rb(^;?cZMCAL3lycvvOC!}-IMlfK=1i|E_1HxBN
z$Z_UR4j|s{guL&5ZAL(t@q{csY0XH2He*+4MoU49x<WHr63y5}GhXLliO(3$%E<q!
zpUxD$iL){{r45)*1D=D$Ot%6=Yk>7EKNk>k&q>_;hOapR@em&o&Jq>L^I0BR@H~0O
zXda*oYV2&0N?w3tXszOYE>h(~4_h9*W4HP%@^ni(!OPbc?3S3|6=^xJ;6=4^ws4ad
zLo4ILEy%e@D>JPopBB8VKASD(CNGCp1`#}$X=T$MXuC(vnS;7|LXX0oS>WlRM-^x}
z82GNJ#yMhK@=6#ka99#}t}tArH4nnvRkd%9@RC=hqwjt~12`?aDv{i0cyu<$cOC)H
zwd}j=Y!1HrSS<&CxO&y&kBGwW_e#f%^*C(@a(X2`r!s9u-qLkcGH!5zx8UUkfBoXW
zE_eyo0C;+mgj$)hgy;IpFhUf*E+>@Q3h-^&4RsI|q;6zim>09$kW<RV3vk()iP%jU
z`C1KqRQzq;O^KuR>8Ug6sRPpa%6cj=bO(YtWeE_~4#+X)C}Tiaae$GF0S6GCIw1Y8
ztf!KoJ@r=Tsg{C<+zLI_lIW?o=&8Gzc!b-pnu5r$GE?S?%0Y>yz`E)vy6WP<x~keZ
zPsCDy##8YSau)~iLQcp=(NkXw)RB22NWB(VHv|<-uLUp#X2M_sdOc8M9v9UGuLpJj
z09BJYA?GkLis5EOkok|t#k`#4iolL0AcJj10QacTTyWQB)$@d?O*IELaE;RL+8n^m
zer80$U*E{g{hq+pLvLg&q{F@upu)#sn^}q2svz=~dihB)H?b;!Z8&S6Mcb?noHgpe
zlcI7yei@^HjyGK$Sfc=<wW|Yb6hIhdb>OcF%mj!8ZIm|yI{~s3wBSwk{Ctr&^vwWv
zILRRyw_~jfA{#Ob=i_GU!RvzDF*;<7rXAi>FFz$plJA8t0U|`a$CqHw#0^#WhpBcv
zCFZ8q2X-0^B6!vZyyA@m;%F-RedRqZmL%WLGHEKAp4U8hpH_AFY4Jj;HLxB(TI;?w
zz$qfUyl{3R_CXN&P(AsKcsB7tfNx*u&9kYo&4IH;{ns<1d_I1ePm(}K+cpRGP;Wrg
qusJ{$9^Dua8rvMWTdc-N&>CwCHD)Pjdz*UvS<JxN)QiuGss9Ib?H^45

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index de30be59..c57cef35 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -155,15 +155,13 @@ const (
 	// The unrecognized keys SHOULD be listed in the OfferGroup's ext field
 	// under "unrecognized_critical_extensions" for diagnostic purposes.
 	OfferAbsenceReason_OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION OfferAbsenceReason = 7
-	// Offers exist, but buying any of them would exceed the agent's budget, so
-	// BrokerService.Resolve filtered every one out: its price is above
-	// RequestConstraints.max_price, or it would take the budget_scope's spend past
-	// RequestConstraints.period_budget. Resolve returns this as a successful "no
-	// result" answer, on OfferGroup.absence_reason for a URI the budget left with
-	// no offer and on DiscoveryResponse.absence_reason when it left none at all.
-	// It is the only way a budget is reported: never as NOT_AUTHORIZED, and never
-	// as a non-OK error such as RESOURCE_EXHAUSTED. The full rule, including what
-	// counts as spend, is on BrokerService.Resolve.
+	// Offers exist, but the agent's budget (RequestConstraints) left every one
+	// out: BrokerService.Resolve applied the budget as a filter and no offer
+	// remained. Resolve returns this as a successful "no result" answer, on
+	// OfferGroup.absence_reason for a URI the budget left with no offer and on
+	// DiscoveryResponse.absence_reason when it left none at all. It is the only
+	// way a budget is reported: never as NOT_AUTHORIZED, and never as a non-OK
+	// error such as RESOURCE_EXHAUSTED (see BrokerService.Resolve).
 	OfferAbsenceReason_OFFER_ABSENCE_REASON_BUDGET_EXCEEDED OfferAbsenceReason = 8
 )
 
@@ -4259,8 +4257,7 @@ func (x *Preview) GetSize() string {
 // gives Q = 16.5), and the arithmetic is exact decimal: every input is an
 // integer or a decimal string, and the only division is by 10000, so no step
 // rounds. Q × R is therefore the most a metered purchase can be charged
-// without a dispute, and it is the amount an agent budgets against a spend
-// cap.
+// without a dispute.
 //
 // The report that settles is the one UsageReport a transaction accepts. A
 // metered price whose metering is PRICING_METERING_NONE has no report, so
@@ -7391,10 +7388,7 @@ type RequestConstraints struct {
 	// not an address — the recipient of the request carrying it is a separate
 	// question.
 	Exchanges []string `protobuf:"bytes,1,rep,name=exchanges,proto3" json:"exchanges,omitempty"`
-	// Maximum price the agent is willing to pay for one offer.
-	// BrokerService.Resolve filters out an offer priced above it, with
-	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see
-	// BrokerService.Resolve).
+	// Maximum price the agent is willing to pay.
 	MaxPrice *Cost `protobuf:"bytes,2,opt,name=max_price,json=maxPrice,proto3,oneof" json:"max_price,omitempty"`
 	// Maximum effective cost per unit, as an exact decimal string (not a float).
 	MaxUnitCost *string `protobuf:"bytes,3,opt,name=max_unit_cost,json=maxUnitCost,proto3,oneof" json:"max_unit_cost,omitempty"`
@@ -7406,20 +7400,13 @@ type RequestConstraints struct {
 	// contracts). The Broker SHOULD prefer these when resource is
 	// available — subscription resource has zero marginal cost.
 	PreferredExchanges []string `protobuf:"bytes,6,rep,name=preferred_exchanges,json=preferredExchanges,proto3" json:"preferred_exchanges,omitempty"`
-	// Budget scope identifier for per-period tracking.
+	// Budget scope identifier: whose budget this is.
 	// E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.
-	// The Broker tracks the spend of each scope across sessions. Spend grows only
-	// from purchase totals; a Resolve is never spend (see BrokerService.Resolve).
 	BudgetScope *string `protobuf:"bytes,7,opt,name=budget_scope,json=budgetScope,proto3,oneof" json:"budget_scope,omitempty"`
-	// Per-period budget limit for the budget_scope. BrokerService.Resolve filters
-	// out every offer that would take the scope's spend in the current
-	// budget_period past this limit, and answers a URI left with no offer with
-	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a
-	// denial, and Resolve neither charges against it nor counts as spend (see
-	// BrokerService.Resolve).
+	// Per-period budget limit for the budget_scope.
 	PeriodBudget *Cost `protobuf:"bytes,8,opt,name=period_budget,json=periodBudget,proto3,oneof" json:"period_budget,omitempty"`
 	// Budget period (e.g. "2592000s" = 30 days; proto-JSON encodes Duration
-	// as seconds). Resets at period boundary.
+	// as seconds).
 	BudgetPeriod *durationpb.Duration `protobuf:"bytes,9,opt,name=budget_period,json=budgetPeriod,proto3,oneof" json:"budget_period,omitempty"`
 	// Maximum acceptable age of resource data. The Broker SHOULD
 	// exclude offers where (now - Offer.data_as_of) exceeds this duration.
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 832f4161..1410f363 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -595,23 +595,17 @@ type BrokerServiceClient interface {
 	// like malformed requests and internal faults, are non-OK transport errors
 	// carrying an ErrorDetail.
 	//
-	// Budget. Resolve applies the agent's budget (RequestConstraints) as a filter
-	// over the offers it returns. It drops every offer whose price is above
-	// max_price, and every offer that would take the spend of budget_scope in the
-	// current budget_period past period_budget. The price it compares is the most
-	// the offer can be charged without a dispute: for a metered offer that is the
-	// ceiling amount Q × R (see Pricing). An offer the budget drops is not
-	// returned; a URI the budget leaves with no offer is answered with
+	// Budget. Resolve may apply the agent's budget (RequestConstraints) as a
+	// filter over the offers it returns. How the budget is computed is the
+	// Broker's own behaviour, and the protocol does not specify it. What the
+	// protocol fixes is how its effect is reported: an offer the budget leaves
+	// out is not returned, a URI the budget leaves with no offer is answered with
 	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED, and so is the whole resolve when the
 	// budget leaves no offer at all. A budget is never reported as
 	// OFFER_ABSENCE_REASON_NOT_AUTHORIZED and never as a non-OK error such as
 	// RESOURCE_EXHAUSTED.
 	//
-	// Resolve never charges and never counts as spend: returning an offer
-	// reserves nothing, and an offer the agent never buys costs it nothing. The
-	// spend a budget is measured against grows only from purchase totals, the
-	// amounts charged for purchased items — for a purchase through the Broker,
-	// BrokerTransactionResponse.totals.
+	// Resolve never charges: returning an offer reserves nothing.
 	Resolve(context.Context, *connect.Request[v1.DiscoveryRequest]) (*connect.Response[v1.DiscoveryResponse], error)
 	// ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
 	// in one call. The request is the TransactionRequest an agent would send an
@@ -762,23 +756,17 @@ type BrokerServiceHandler interface {
 	// like malformed requests and internal faults, are non-OK transport errors
 	// carrying an ErrorDetail.
 	//
-	// Budget. Resolve applies the agent's budget (RequestConstraints) as a filter
-	// over the offers it returns. It drops every offer whose price is above
-	// max_price, and every offer that would take the spend of budget_scope in the
-	// current budget_period past period_budget. The price it compares is the most
-	// the offer can be charged without a dispute: for a metered offer that is the
-	// ceiling amount Q × R (see Pricing). An offer the budget drops is not
-	// returned; a URI the budget leaves with no offer is answered with
+	// Budget. Resolve may apply the agent's budget (RequestConstraints) as a
+	// filter over the offers it returns. How the budget is computed is the
+	// Broker's own behaviour, and the protocol does not specify it. What the
+	// protocol fixes is how its effect is reported: an offer the budget leaves
+	// out is not returned, a URI the budget leaves with no offer is answered with
 	// OFFER_ABSENCE_REASON_BUDGET_EXCEEDED, and so is the whole resolve when the
 	// budget leaves no offer at all. A budget is never reported as
 	// OFFER_ABSENCE_REASON_NOT_AUTHORIZED and never as a non-OK error such as
 	// RESOURCE_EXHAUSTED.
 	//
-	// Resolve never charges and never counts as spend: returning an offer
-	// reserves nothing, and an offer the agent never buys costs it nothing. The
-	// spend a budget is measured against grows only from purchase totals, the
-	// amounts charged for purchased items — for a purchase through the Broker,
-	// BrokerTransactionResponse.totals.
+	// Resolve never charges: returning an offer reserves nothing.
 	Resolve(context.Context, *connect.Request[v1.DiscoveryRequest]) (*connect.Response[v1.DiscoveryResponse], error)
 	// ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
 	// in one call. The request is the TransactionRequest an agent would send an
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index 3ff5db65..3ca5e1ce 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -152,12 +152,12 @@
       "description": "RequestConstraints — Budget and preference constraints.",
       "properties": {
         "budget_period": {
-          "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+          "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).",
           "format": "duration",
           "type": "string"
         },
         "budget_scope": {
-          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
+          "description": "Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.",
           "type": "string"
         },
         "delivery_preference": {
@@ -206,7 +206,7 @@
         },
         "max_price": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
+          "description": "Maximum price the agent is willing to pay."
         },
         "max_unit_cost": {
           "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -216,7 +216,7 @@
         },
         "period_budget": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
+          "description": "Per-period budget limit for the budget_scope."
         },
         "preferred_exchanges": {
           "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index 54e83dcf..9646941b 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -156,12 +156,12 @@
       "description": "RequestConstraints — Budget and preference constraints.",
       "properties": {
         "budget_period": {
-          "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+          "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).",
           "format": "duration",
           "type": "string"
         },
         "budget_scope": {
-          "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
+          "description": "Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.",
           "type": "string"
         },
         "delivery_preference": {
@@ -210,7 +210,7 @@
         },
         "max_price": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
+          "description": "Maximum price the agent is willing to pay."
         },
         "max_unit_cost": {
           "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -220,7 +220,7 @@
         },
         "period_budget": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
+          "description": "Per-period budget limit for the budget_scope."
         },
         "preferred_exchanges": {
           "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index b643aea3..760e79bd 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -433,7 +433,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index 55ccec67..4990000c 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -440,7 +440,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index 854fe8e7..d46107cf 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -92,7 +92,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index cfcac91a..e9b89f3d 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -95,7 +95,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index 954300d0..be6e4e09 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -205,7 +205,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index e1fee7c6..1ff815e7 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -210,7 +210,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index 1f129499..5ff1d462 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -344,7 +344,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index 6db211f9..0873aaf2 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -350,7 +350,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.json b/gen/jsonschema/fora.v1.Pricing.schema.json
index 5fdb23b2..9dd0af90 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.Pricing.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
   "properties": {
     "currency": {
       "default": "",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.strict.json b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
index ad3de9f7..1f3ab9ce 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.Pricing.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
   "properties": {
     "currency": {
       "default": "",
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 02e2c040..c52e0aca 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -166,7 +166,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 9f41d3c9..9aa39bf9 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -170,7 +170,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
index 5d6a0070..937831bd 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
@@ -29,12 +29,12 @@
   "description": "RequestConstraints — Budget and preference constraints.",
   "properties": {
     "budget_period": {
-      "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+      "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).",
       "format": "duration",
       "type": "string"
     },
     "budget_scope": {
-      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
+      "description": "Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.",
       "type": "string"
     },
     "delivery_preference": {
@@ -83,7 +83,7 @@
     },
     "max_price": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
+      "description": "Maximum price the agent is willing to pay."
     },
     "max_unit_cost": {
       "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -93,7 +93,7 @@
     },
     "period_budget": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
+      "description": "Per-period budget limit for the budget_scope."
     },
     "preferred_exchanges": {
       "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
index f7de5922..fd07be05 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
@@ -31,12 +31,12 @@
   "description": "RequestConstraints — Budget and preference constraints.",
   "properties": {
     "budget_period": {
-      "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.",
+      "description": "Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).",
       "format": "duration",
       "type": "string"
     },
     "budget_scope": {
-      "description": "Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).",
+      "description": "Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.",
       "type": "string"
     },
     "delivery_preference": {
@@ -85,7 +85,7 @@
     },
     "max_price": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve)."
+      "description": "Maximum price the agent is willing to pay."
     },
     "max_unit_cost": {
       "description": "Maximum effective cost per unit, as an exact decimal string (not a float).",
@@ -95,7 +95,7 @@
     },
     "period_budget": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve)."
+      "description": "Per-period budget limit for the budget_scope."
     },
     "preferred_exchanges": {
       "description": "Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.",
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index d18d262d..6ff5f07a 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -166,7 +166,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index 5dead216..e9eefae5 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -170,7 +170,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index 13083b15..5d752fc2 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -433,7 +433,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index 315c8f30..c1bbcd4d 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -440,7 +440,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index db5560c4..540dd7a6 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -364,7 +364,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index 7e508f78..190b92b9 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -371,7 +371,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index c9c51962..e1779514 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -520,7 +520,7 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 22575509..b6ef97df 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -531,7 +531,7 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
       "properties": {
         "currency": {
           "default": "",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 0238c098..1af4f75a 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -857,11 +857,11 @@ class RequestAuthFailureReason(Enum):
 class RequestConstraints(WireModel):
     budget_period: str | None = Field(
         None,
-        description='Budget period (e.g. "2592000s" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.',
+        description='Budget period (e.g. "2592000s" = 30 days; proto-JSON encodes Duration\n as seconds).',
     )
     budget_scope: str | None = Field(
         None,
-        description='Budget scope identifier for per-period tracking.\n E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).',
+        description='Budget scope identifier: whose budget this is.\n E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.',
     )
     delivery_preference: list[DeliveryMethod] | None = Field(
         None, description='Preferred delivery methods, in order of preference.'
@@ -887,8 +887,7 @@ class RequestConstraints(WireModel):
         description="Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
     )
     max_price: Cost | None = Field(
-        None,
-        description='Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).',
+        None, description='Maximum price the agent is willing to pay.'
     )
     max_unit_cost: constr(pattern=r'^([0-9]+([.][0-9]+)?)?$', max_length=32) | None = (
         Field(
@@ -897,8 +896,7 @@ class RequestConstraints(WireModel):
         )
     )
     period_budget: Cost | None = Field(
-        None,
-        description="Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).",
+        None, description='Per-period budget limit for the budget_scope.'
     )
     preferred_exchanges: (
         list[
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index ba2365c5..7fa5b35a 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,7 +48,7 @@ export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE",
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
-export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
+export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
 export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
@@ -108,7 +108,7 @@ export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
-export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute, and it is the amount an agent budgets against a spend\n cap.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries."));
+export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries."));
 
 export const PricingMeteringSchema = wire(z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]));
 
@@ -152,7 +152,7 @@ export const RequestAuthFailureSchema = wire(z.object({ "reason": z.enum(["REQUE
 
 export const RequestAuthFailureReasonSchema = wire(z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]));
 
-export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds). Resets at period boundary.").optional(), "budget_scope": z.string().describe("Budget scope identifier for per-period tracking.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.\n The Broker tracks the spend of each scope across sessions. Spend grows only\n from purchase totals; a Resolve is never spend (see BrokerService.Resolve).").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay for one offer.\n BrokerService.Resolve filters out an offer priced above it, with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see\n BrokerService.Resolve).").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope. BrokerService.Resolve filters\n out every offer that would take the scope's spend in the current\n budget_period past this limit, and answers a URI left with no offer with\n OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a\n denial, and Resolve neither charges against it nor counts as spend (see\n BrokerService.Resolve).").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
+export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
 
 export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 30b53169..4203176b 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -77,13 +77,15 @@ collision. The same key with the same request is a replay answered from the stor
 The same key with a different request (for a purchase, different items or another order)
 is refused with the Connect code `already_exists` and an `ErrorDetail` with no typed reason.
 
-**`BrokerService.Resolve` filters offers over the agent's budget (comments only).**
-`Resolve` drops every offer priced above `max_price` or that would take the `budget_scope`'s
-spend past `period_budget`, comparing the most the offer can be charged without a dispute
-(Q × R for a metered offer). A URI left with no offer is answered with
-`OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as
-`RESOURCE_EXHAUSTED`. `Resolve` never charges and never counts as spend; spend grows only
-from purchase totals. `period_budget` no longer says transactions are denied.
+**`BrokerService.Resolve` reports a budget as `BUDGET_EXCEEDED` (comments only).**
+`Resolve` may apply the agent's budget (`RequestConstraints`) as a filter over the offers it
+returns. How the budget is computed is the Broker's own behaviour, and the protocol does
+not specify it: which price an offer is compared at, and how spend is counted, are left to
+the party that applies the budget. What the protocol fixes is the report: a URI left with
+no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED`
+and never an error such as `RESOURCE_EXHAUSTED`, and `Resolve` never charges. The
+`RequestConstraints` budget fields keep plain meanings, and `period_budget` no longer says
+transactions are denied.
 
 **`TransactionResponse.total_cost` is unset when the items span currencies (comments
 only).** It is the exact sum of the purchased items' costs in their one shared currency,
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 0c422912..ea7acbb4 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -653,15 +653,13 @@ enum OfferAbsenceReason {
   // under "unrecognized_critical_extensions" for diagnostic purposes.
   OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION = 7;
 
-  // Offers exist, but buying any of them would exceed the agent's budget, so
-  // BrokerService.Resolve filtered every one out: its price is above
-  // RequestConstraints.max_price, or it would take the budget_scope's spend past
-  // RequestConstraints.period_budget. Resolve returns this as a successful "no
-  // result" answer, on OfferGroup.absence_reason for a URI the budget left with
-  // no offer and on DiscoveryResponse.absence_reason when it left none at all.
-  // It is the only way a budget is reported: never as NOT_AUTHORIZED, and never
-  // as a non-OK error such as RESOURCE_EXHAUSTED. The full rule, including what
-  // counts as spend, is on BrokerService.Resolve.
+  // Offers exist, but the agent's budget (RequestConstraints) left every one
+  // out: BrokerService.Resolve applied the budget as a filter and no offer
+  // remained. Resolve returns this as a successful "no result" answer, on
+  // OfferGroup.absence_reason for a URI the budget left with no offer and on
+  // DiscoveryResponse.absence_reason when it left none at all. It is the only
+  // way a budget is reported: never as NOT_AUTHORIZED, and never as a non-OK
+  // error such as RESOURCE_EXHAUSTED (see BrokerService.Resolve).
   OFFER_ABSENCE_REASON_BUDGET_EXCEEDED = 8;
 }
 
@@ -1862,8 +1860,7 @@ message Preview {
 // gives Q = 16.5), and the arithmetic is exact decimal: every input is an
 // integer or a decimal string, and the only division is by 10000, so no step
 // rounds. Q × R is therefore the most a metered purchase can be charged
-// without a dispute, and it is the amount an agent budgets against a spend
-// cap.
+// without a dispute.
 //
 // The report that settles is the one UsageReport a transaction accepts. A
 // metered price whose metering is PRICING_METERING_NONE has no report, so
@@ -1891,8 +1888,8 @@ message Pricing {
   };
   // A tolerance bounds the settlement of a metered price, so it means nothing
   // on a FREE or FLAT one. Stating it there is an authoring error rather than a
-  // harmless extra: an agent reading it would budget for a settlement that
-  // never happens.
+  // harmless extra: an agent reading it would expect a settlement that never
+  // happens.
   option (buf.validate.message).cel = {
     id: "pricing.estimate_tolerance.requires_per_unit"
     message: "estimate_tolerance_bps is allowed only when model is PER_UNIT"
@@ -2900,23 +2897,17 @@ service BrokerService {
   // like malformed requests and internal faults, are non-OK transport errors
   // carrying an ErrorDetail.
   //
-  // Budget. Resolve applies the agent's budget (RequestConstraints) as a filter
-  // over the offers it returns. It drops every offer whose price is above
-  // max_price, and every offer that would take the spend of budget_scope in the
-  // current budget_period past period_budget. The price it compares is the most
-  // the offer can be charged without a dispute: for a metered offer that is the
-  // ceiling amount Q × R (see Pricing). An offer the budget drops is not
-  // returned; a URI the budget leaves with no offer is answered with
+  // Budget. Resolve may apply the agent's budget (RequestConstraints) as a
+  // filter over the offers it returns. How the budget is computed is the
+  // Broker's own behaviour, and the protocol does not specify it. What the
+  // protocol fixes is how its effect is reported: an offer the budget leaves
+  // out is not returned, a URI the budget leaves with no offer is answered with
   // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED, and so is the whole resolve when the
   // budget leaves no offer at all. A budget is never reported as
   // OFFER_ABSENCE_REASON_NOT_AUTHORIZED and never as a non-OK error such as
   // RESOURCE_EXHAUSTED.
   //
-  // Resolve never charges and never counts as spend: returning an offer
-  // reserves nothing, and an offer the agent never buys costs it nothing. The
-  // spend a budget is measured against grows only from purchase totals, the
-  // amounts charged for purchased items — for a purchase through the Broker,
-  // BrokerTransactionResponse.totals.
+  // Resolve never charges: returning an offer reserves nothing.
   rpc Resolve(DiscoveryRequest) returns (DiscoveryResponse);
 
   // ExecuteTransaction buys one or more offers, issued by one or more Exchanges,
@@ -3578,10 +3569,7 @@ message RequestConstraints {
     }
   ];
 
-  // Maximum price the agent is willing to pay for one offer.
-  // BrokerService.Resolve filters out an offer priced above it, with
-  // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED when no offer for a URI remains (see
-  // BrokerService.Resolve).
+  // Maximum price the agent is willing to pay.
   optional Cost max_price = 2;
 
   // Maximum effective cost per unit, as an exact decimal string (not a float).
@@ -3603,22 +3591,15 @@ message RequestConstraints {
     }
   ];
 
-  // Budget scope identifier for per-period tracking.
+  // Budget scope identifier: whose budget this is.
   // E.g. "user:u-12345" for per-user budgets, "team:eng" for per-team.
-  // The Broker tracks the spend of each scope across sessions. Spend grows only
-  // from purchase totals; a Resolve is never spend (see BrokerService.Resolve).
   optional string budget_scope = 7;
 
-  // Per-period budget limit for the budget_scope. BrokerService.Resolve filters
-  // out every offer that would take the scope's spend in the current
-  // budget_period past this limit, and answers a URI left with no offer with
-  // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. The budget filters offers; it is not a
-  // denial, and Resolve neither charges against it nor counts as spend (see
-  // BrokerService.Resolve).
+  // Per-period budget limit for the budget_scope.
   optional Cost period_budget = 8;
 
   // Budget period (e.g. "2592000s" = 30 days; proto-JSON encodes Duration
-  // as seconds). Resets at period boundary.
+  // as seconds).
   optional google.protobuf.Duration budget_period = 9;
 
   // Maximum acceptable age of resource data. The Broker SHOULD
diff --git a/sdk/go/helpers/settlement.go b/sdk/go/helpers/settlement.go
index f191e5f6..d43c4645 100644
--- a/sdk/go/helpers/settlement.go
+++ b/sdk/go/helpers/settlement.go
@@ -157,8 +157,7 @@ func parseMeteredTerms(pricing *forav1.Pricing) (meteredTerms, error) {
 }
 
 // MeteredSettlementCap returns Q × R for a metered price: the most a purchase
-// under it is charged without a dispute, and the amount an agent budgets
-// against a spend cap. capped is false, with an empty amount, when the price
+// under it is charged without a dispute. capped is false, with an empty amount, when the price
 // states no estimate: it then has no ceiling, and nothing in it bounds the
 // charge. It refuses a price that is not PER_UNIT, states an estimate that is
 // not positive, carries no valid rate, or states a tolerance outside
diff --git a/sdk/python/fora_sdk/money.py b/sdk/python/fora_sdk/money.py
index db1a1113..b1b95b33 100644
--- a/sdk/python/fora_sdk/money.py
+++ b/sdk/python/fora_sdk/money.py
@@ -263,7 +263,7 @@ def _metered_terms(pricing: Mapping[str, Any]) -> tuple[Decimal | None, Decimal,
 
 def metered_settlement_cap(pricing: Mapping[str, Any]) -> str | None:
     """Q x R for a metered price: the most a purchase under it is charged without a
-    dispute, and the amount an agent budgets against a spend cap.
+    dispute.
 
     ``None`` when the price states no estimate: it then has no ceiling, and nothing in
     it bounds the charge. Raises ``ValueError`` for a price that is not PER_UNIT,
diff --git a/sdk/ts/src/money.ts b/sdk/ts/src/money.ts
index 6b43534d..c62e950f 100644
--- a/sdk/ts/src/money.ts
+++ b/sdk/ts/src/money.ts
@@ -309,8 +309,7 @@ function meteredTerms(pricing: Record<string, unknown>): {
 
 /**
  * meteredSettlementCap returns Q x R for a metered price: the most a purchase
- * under it is charged without a dispute, and the amount an agent budgets against
- * a spend cap. Undefined when the price states no estimate: it then has no
+ * under it is charged without a dispute. Undefined when the price states no estimate: it then has no
  * ceiling, and nothing in it bounds the charge. Throws for a price that is not
  * PER_UNIT, states an estimate that is not positive, carries no valid rate, or
  * states a tolerance outside 0..10000.
diff --git a/website/src/content/docs/components/broker/budget-enforcement.mdx b/website/src/content/docs/components/broker/budget-enforcement.mdx
index 1c1b17e3..836300e6 100644
--- a/website/src/content/docs/components/broker/budget-enforcement.mdx
+++ b/website/src/content/docs/components/broker/budget-enforcement.mdx
@@ -7,10 +7,10 @@ description: "How the Broker tracks and enforces per-request, per-session, and p
 
 The Broker applies three budget layers, analogous to how DSPs manage advertiser budgets in OpenRTB. The budget is a **filter over offers** at `BrokerService.Resolve`: the Broker drops every offer that would take the agent past its budget, and answers a URI left with no offer with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`. The Exchange's balance check stays the authoritative gate on what is actually charged.
 
-Two rules hold at every layer:
+How a budget is computed — which price an offer counts at and how spend is counted — is the Broker's own behaviour, and the protocol does not specify it. This page describes one design. What the protocol does fix is how a budget's effect is reported, and that Resolve never charges:
 
-- **Resolve never charges and never counts as spend.** Returning an offer reserves nothing, and an offer the agent never buys costs it nothing.
-- **Spend grows only from purchase totals**: the amounts charged for purchased items. For a purchase through the Broker that is `BrokerTransactionResponse.totals`. A budget is never reported as `OFFER_ABSENCE_REASON_NOT_AUTHORIZED`, and never as a non-OK error such as `RESOURCE_EXHAUSTED`.
+- **Resolve never charges.** Returning an offer reserves nothing.
+- **A budget is reported only as `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`**: never as `OFFER_ABSENCE_REASON_NOT_AUTHORIZED`, and never as a non-OK error such as `RESOURCE_EXHAUSTED`.
 
 ## Budget Layers
 
@@ -18,7 +18,7 @@ Two rules hold at every layer:
 graph TB
     subgraph "Budget Enforcement Layers"
         L1[Layer 1: Per-Offer<br/>RequestConstraints.max_price<br/>offers above it are filtered]
-        L2[Layer 2: Per-Session<br/>spend from purchase totals<br/>in-memory, reset on restart]
+        L2[Layer 2: Per-Session<br/>spend tracking<br/>in-memory, reset on restart]
         L3[Layer 3: Per-Period<br/>per-month, per-day<br/>persisted in Redis]
         L4[Layer 4: Per-Exchange<br/>balance awareness<br/>advisory, not enforced]
     end
@@ -51,10 +51,6 @@ type RequestConstraints struct {
 
 Per-period budgets are keyed by `budget_scope` (or the verified agent identity if no scope is provided) and persisted in Redis with TTLs matching the period (e.g., monthly keys expire at month-end).
 
-## The Price an Offer Is Compared At
-
-The Broker compares the most an offer can be charged without a dispute. For a `FLAT` price that is the rate. For a metered (`PER_UNIT`) price it is the ceiling amount Q × R, where Q = estimate × (10000 + tolerance) / 10000 (see [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase)); the SDKs compute it as `MeteredSettlementCap`. A `FREE` offer costs nothing.
-
 ## Session Budget Tracker
 
 ```go
@@ -66,8 +62,7 @@ type BudgetTracker interface {
     // spend within the budget. It reserves nothing.
     CanAfford(amount float64, currency string) bool
 
-    // Record adds a purchase's charged amount to the spend. It is called only
-    // with purchase totals, never from Resolve.
+    // Record adds a purchase's charged amount to the spend.
     Record(ctx context.Context, cost *forav1.Cost)
 
     // Remaining returns the remaining budget for the session.
@@ -98,9 +93,9 @@ func (b *inMemoryBudget) CanAfford(amount float64, currency string) bool {
 
 ## Batch Selection and Recording Spend
 
-For batch (multi-URI) queries, the selection engine sums the prices of the offers it selects. If the total exceeds the remaining budget, it drops lower-priority URIs until the total fits (see the [Selection Engine](/components/broker/selection-engine/) batch pipeline). This is still filtering: nothing is spent or reserved by `Resolve`.
+For batch (multi-URI) queries, the selection engine sums the prices of the offers it selects. If the total exceeds the remaining budget, it drops lower-priority URIs until the total fits (see the [Selection Engine](/components/broker/selection-engine/) batch pipeline). This is still filtering: nothing is reserved by `Resolve`.
 
-Spend is recorded only when a purchase completes. For a purchase through the Broker, the Broker adds each entry of `BrokerTransactionResponse.totals` (one `Cost` per currency, covering only the charged items) to the budget of the same currency. A denied item, or an item an Exchange refused, adds nothing.
+In this design, spend is recorded when a purchase completes: for a purchase through the Broker, the Broker adds each entry of `BrokerTransactionResponse.totals` (one `Cost` per currency, covering only the charged items) to the budget of the same currency.
 
 ```go
 func (b *inMemoryBudget) RecordPurchase(ctx context.Context, totals []*forav1.Cost) {
@@ -130,10 +125,10 @@ When the session or period budget leaves no affordable offer for a URI:
 3. The agent can re-declare a higher budget, or buy directly from an Exchange without the Broker.
 
 ```go
-price := maxChargeWithoutDispute(offer.Pricing) // rate, or Q x R when metered
+price := budgetPrice(offer.Pricing) // the Broker's own choice of price
 if !budget.CanAfford(price, offer.Pricing.Currency) {
     // Drop the offer. If none remains for this URI, answer it with
-    // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. Nothing is charged or counted.
+    // OFFER_ABSENCE_REASON_BUDGET_EXCEEDED. Nothing is charged.
     continue
 }
 ```
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 7930f544..c67469fb 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -11,7 +11,7 @@ The FORA Broker is the optional demand-side router in the FORA protocol. It sits
 
 - **Multi-exchange comparison** -- fan out DiscoverResources to N Exchanges, pick cheapest
 - **Multi-exchange purchase** -- buy offers from several Exchanges in one `BrokerService.ExecuteTransaction` call, with the results combined in request order
-- **Budget filtering** -- `Resolve` drops offers that would exceed the agent's budget (per offer, per session, per period) and answers a URI left with none with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`; spend grows only from purchase totals
+- **Budget filtering** -- `Resolve` drops offers that would exceed the agent's budget (per offer, per session, per period) and answers a URI left with none with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`. How it computes the budget is its own choice, not part of the protocol
 - **Resource deduplication** -- same article from two Exchanges, compare price
 - **Attestation-aware selection (v1.0)** -- prefer offers with higher attestation levels (Level 2 > Level 1 > Level 0)
 - **Reporting relay** -- forward UsageReports to the correct Exchange, track `report_id` for dispute chain
@@ -56,7 +56,7 @@ graph TB
 | **Exchange Registry** | Knows which Exchanges exist and their health status. Bootstraps from [Exchange Manifest](/protocol/exchange-manifest/) (`/.well-known/fora.json`) instead of HEAD probes -- extracting endpoints, capabilities, and accepted verifiers in a single fetch | Long-lived, refreshed periodically |
 | **Supply Discovery** | Fans out DiscoverResources RPCs to N Exchanges concurrently | Per-request, stateless |
 | **Selection Engine** | Deduplicates, ranks, filters, and selects the best offer | Per-request, stateless |
-| **Budget Tracker** | Tracks spend per session/period from purchase totals, and filters out offers that would exceed the budget | Per-session in-memory, per-period in Redis |
+| **Budget Tracker** | Tracks spend per session/period, and filters out offers that would exceed the budget | Per-session in-memory, per-period in Redis |
 | **Reporting Relay** | Forwards UsageReports to the winning Exchange, tracks obligations | Per-transaction, short-lived |
 
 ## Internal Call Flow
@@ -371,7 +371,7 @@ sequenceDiagram
 | **Broker is optional** | Agents can query Exchanges directly. The Broker adds multi-exchange intelligence but is not required by the protocol. |
 | **Same protocol, re-packaged purchases** | The Exchange answers the same RPCs whoever calls. A purchase the Broker relays is signed by the Broker, and the Exchange verifies the agent's consent from the body acceptances. |
 | **Signed offer pass-through** | Exchange signatures cover pricing fields. The Broker cannot inflate prices without invalidating the signature. |
-| **Budget as an offer filter** | `Resolve` drops offers that would exceed the agent's budget and reports `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` when none remain. It never charges, and spend grows only from purchase totals. The Exchange's balance check stays the authoritative gate on what is charged. |
+| **Budget as an offer filter** | `Resolve` drops offers that would exceed the agent's budget and reports `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` when none remain. It never charges. How the budget is computed is the Broker's own behaviour, not part of the protocol. The Exchange's balance check stays the authoritative gate on what is charged. |
 | **Ed25519 + forwarding signature stack** | Requester signs the HTTP request with an RFC 9421 HTTP Message Signature (covering `@method`/`@target-uri`/`content-digest`); Broker adds one labeled RFC 9421 HTTP Message Signature (covering the request plus the prior hop's signature) to the header stack. Exchange verifies both layers and counts hops against `max_hops` / `max_intermediary_hops`. Public keys discoverable via the WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). |
 | **Partial results are normal** | If 3 of 5 Exchanges respond within the deadline, the Broker proceeds with 3 responses. Availability of any individual Exchange does not block the system. |
 
diff --git a/website/src/content/docs/components/broker/selection-engine.mdx b/website/src/content/docs/components/broker/selection-engine.mdx
index 792467ec..eb9b13b8 100644
--- a/website/src/content/docs/components/broker/selection-engine.mdx
+++ b/website/src/content/docs/components/broker/selection-engine.mdx
@@ -181,7 +181,7 @@ The batch selection algorithm:
 3. Select the best offer per URI.
 4. Sum costs across all selected offers to get the batch total.
 5. If the total exceeds budget, drop offers for the lowest-priority URIs (by position in the original request) until the total fits. A URI left with no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` on its `OfferGroup`.
-6. Return one `OfferGroup` per URI. `Resolve` is discovery only: it charges nothing and adds nothing to the spend. The agent buys the selected offers in a separate call, and only the totals of that purchase count as spend.
+6. Return one `OfferGroup` per URI. `Resolve` is discovery only: it charges nothing. The agent buys the selected offers in a separate call.
 
 ### Selection Interface
 
@@ -288,12 +288,11 @@ func filterByConstraints(offers []rankedOffer, c *forav1.RequestConstraints, bud
     for _, o := range offers {
         p := o.Offer.Pricing
 
-        // The price compared against the budget is the most the offer can be
-        // charged without a dispute: the rate of a FLAT price, and the ceiling
-        // amount Q x R of a metered (PER_UNIT) one (helpers.MeteredSettlementCap).
-        price := maxChargeWithoutDispute(p)
+        // The price this Broker counts against the budget. Which price that is
+        // is the Broker's own choice; the protocol does not specify it.
+        price := budgetPrice(p)
 
-        // max_price: drop offers above the per-offer ceiling
+        // max_price: drop offers above it
         if c.MaxPrice != nil && price > c.MaxPrice.Amount {
             continue
         }
@@ -318,8 +317,7 @@ func filterByConstraints(offers []rankedOffer, c *forav1.RequestConstraints, bud
         }
 
         // Period and session budget: drop the offer if buying it would take the
-        // spend past the budget. Spend grows only from purchase totals; this
-        // filter reserves nothing and counts nothing.
+        // spend past the budget. This filter reserves nothing.
         if !budget.CanAfford(price, p.Currency) {
             continue
         }
diff --git a/website/src/content/docs/getting-started/how-money-flows.mdx b/website/src/content/docs/getting-started/how-money-flows.mdx
index 162deee7..8d551c09 100644
--- a/website/src/content/docs/getting-started/how-money-flows.mdx
+++ b/website/src/content/docs/getting-started/how-money-flows.mdx
@@ -126,7 +126,7 @@ Subscription transactions include a `subscription_unit_value` field that carries
 
 Two enforcement layers prevent overspend, mirroring how OpenRTB prevents advertiser overspend:
 
-- **Agent/Broker-side**: `RequestConstraints.max_unit_cost` -- the agent will not accept offers above this threshold. `BrokerService.Resolve` filters out every offer that would exceed the agent's budget (`max_price`, and `period_budget` for its `budget_scope`) and answers a URI left with none with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`. Resolve never charges and never counts as spend; the spend grows only from purchase totals. For a metered offer, the most the purchase can cost without a dispute is the settlement ceiling × rate, which is the figure the budget is compared against.
+- **Agent/Broker-side**: `RequestConstraints.max_unit_cost` -- the agent will not accept offers above this threshold. `BrokerService.Resolve` may filter out offers that would exceed the agent's budget (`max_price`, and `period_budget` for its `budget_scope`) and answers a URI left with none with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`. How the budget is computed is the Broker's own behaviour, not part of the protocol. Resolve never charges.
 - **Exchange-side**: The Exchange operator's Billing Adapter checks the requester's balance or credit before authorizing each item. An item the requester cannot afford is denied in the response body (`DENIAL_REASON_INSUFFICIENT_BALANCE`), also when it is the only item.
 
 Each Exchange independently tracks per-requester balance. The Broker keeps its own view of spend for budget filtering, but the Exchange is authoritative for "can this requester afford this transaction." Currency conversion is out of scope for this version: totals are never summed across currencies.
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 66d1976d..78e1c3b8 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -618,9 +618,8 @@ Step 3: Rank within content group
   Selected: 4f155204-a53e-42aa-8471-154f87d7d3d5 (subscription, zero marginal cost, third-party attested)
 
 Step 4: Budget filter (applied before the offers are returned)
-  - Spend so far for scope "team:claude-rag": $142.50 of the $500.00 period budget.
-    This spend comes only from earlier purchase totals. Resolve never charges
-    and never adds to it.
+  - Spend so far for scope "team:claude-rag", as this Broker counts it: $142.50
+    of the $500.00 period budget. Resolve never charges.
   - An offer that would take spend past $500.00 is dropped from the result.
     All three offers fit, so none is dropped. If none had fitted, the URI would
     come back with OFFER_ABSENCE_REASON_BUDGET_EXCEEDED (a "no result", not an error).
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 854ca9b9..97470d3f 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -670,7 +670,7 @@ A `PER_UNIT` price is metered: it is charged per unit consumed, and the quantity
 | E < C ≤ Q (within the tolerance) | C × R | nothing |
 | C > Q (above the ceiling) | Q × R | (C − Q) × R |
 
-The quantity above the ceiling is held, never charged automatically: nothing above Q × R is charged unless dispute resolution establishes that it is owed. Q × R is therefore the most an estimated metered purchase costs without a dispute, and the amount an agent budgets against a spend cap. Q can be fractional, and every step is exact decimal arithmetic: the inputs are integers and decimal strings, and the only division is by 10000.
+The quantity above the ceiling is held, never charged automatically: nothing above Q × R is charged unless dispute resolution establishes that it is owed. Q × R is therefore the most an estimated metered purchase costs without a dispute. Q can be fractional, and every step is exact decimal arithmetic: the inputs are integers and decimal strings, and the only division is by 10000.
 
 With the offer above (E = 2,500 tokens, R = $0.00002, no stated tolerance, so Q = 2,750):
 
diff --git a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
index f9aaa08e..b38cb10c 100644
--- a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
+++ b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
@@ -862,7 +862,7 @@ The same `ResourceIdentity` message handles both — the `resource_mutability` f
 
 The `budget_scope: "deal:acme-acquisition"` field in `RequestConstraints` enables deal-level spend tracking across all Exchanges. The Broker:
 1. Filters offers at discovery: `BrokerService.Resolve` drops any offer that would take the scope's spend past `period_budget`. When no offer for a URI remains, that URI comes back with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, a successful "no result" rather than an error
-2. Counts spend only from purchase totals. Discovery never charges and never adds to spend; for a purchase made through the Broker, the amount comes from `BrokerTransactionResponse.totals`
+2. Counts the scope's spend in its own way; the protocol leaves the computation to the Broker. Discovery never charges
 3. Reports actual spend per Exchange in `UsageReport.ext.budget_scope`
 4. Maintains a ledger for audit (which Exchange got how much for what)
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index f1967cc2..39baed38 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -83,13 +83,15 @@ collision. The same key with the same request is a replay answered from the stor
 The same key with a different request (for a purchase, different items or another order)
 is refused with the Connect code `already_exists` and an `ErrorDetail` with no typed reason.
 
-**`BrokerService.Resolve` filters offers over the agent's budget (comments only).**
-`Resolve` drops every offer priced above `max_price` or that would take the `budget_scope`'s
-spend past `period_budget`, comparing the most the offer can be charged without a dispute
-(Q × R for a metered offer). A URI left with no offer is answered with
-`OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as
-`RESOURCE_EXHAUSTED`. `Resolve` never charges and never counts as spend; spend grows only
-from purchase totals. `period_budget` no longer says transactions are denied.
+**`BrokerService.Resolve` reports a budget as `BUDGET_EXCEEDED` (comments only).**
+`Resolve` may apply the agent's budget (`RequestConstraints`) as a filter over the offers it
+returns. How the budget is computed is the Broker's own behaviour, and the protocol does
+not specify it: which price an offer is compared at, and how spend is counted, are left to
+the party that applies the budget. What the protocol fixes is the report: a URI left with
+no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED`
+and never an error such as `RESOURCE_EXHAUSTED`, and `Resolve` never charges. The
+`RequestConstraints` budget fields keep plain meanings, and `period_budget` no longer says
+transactions are denied.
 
 **`TransactionResponse.total_cost` is unset when the items span currencies (comments
 only).** It is the exact sum of the purchased items' costs in their one shared currency,
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index f5c9c8e5..702f303d 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -44,7 +44,7 @@ Optional RPC for providers/CMS/third-party intelligence providers to push conten
 
 The Broker entry point. It has two methods.
 
-`Resolve(DiscoveryRequest) → DiscoveryResponse` is discovery-only: a client sends the URIs/query it wants resolved and receives `offer_groups` (one `OfferGroup` per URI, each carrying the full signed `Offer`) or a typed `absence_reason` with empty `offer_groups` when nothing licensable was found. "No result" is a successful answer; malformed requests, auth failures, and internal faults are non-OK transport errors carrying an `ErrorDetail`. Resolve applies the agent's budget (`RequestConstraints.max_price`, and `period_budget` for `budget_scope`) as a filter: it drops every offer that would exceed it, and a URI left with no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as `RESOURCE_EXHAUSTED`. Resolve never charges and never counts as spend; spend grows only from purchase totals. Resolve does **not** deliver inline. The per-transaction result (transaction id, billing id, retrieval endpoint, …) comes from the separate execute path, which the agent takes either directly, with `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker.
+`Resolve(DiscoveryRequest) → DiscoveryResponse` is discovery-only: a client sends the URIs/query it wants resolved and receives `offer_groups` (one `OfferGroup` per URI, each carrying the full signed `Offer`) or a typed `absence_reason` with empty `offer_groups` when nothing licensable was found. "No result" is a successful answer; malformed requests, auth failures, and internal faults are non-OK transport errors carrying an `ErrorDetail`. Resolve may apply the agent's budget (`RequestConstraints`) as a filter. How the budget is computed is the Broker's own behaviour; the protocol fixes how its effect is reported: a URI left with no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as `RESOURCE_EXHAUSTED`. Resolve never charges. Resolve does **not** deliver inline. The per-transaction result (transaction id, billing id, retrieval endpoint, …) comes from the separate execute path, which the agent takes either directly, with `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker.
 
 `ExecuteTransaction(TransactionRequest) → BrokerTransactionResponse` buys offers from any number of Exchanges in one call. The Broker verifies the agent's request, groups the items by each signed offer's `exchange`, and sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. The agent's per-item `AgentAcceptance` and its `AgentRequestAcceptance` travel in each sub-request body, so every Exchange still verifies the agent's consent. The Broker combines the answers in request order. Re-packaging is safe because each item is atomic and its integrity is per resource: the offer carries its Exchange's signature, the acceptance binds the agent to that one offer, and the result comes from the Exchange that owns the resource. The Broker's own refusals (a bad agent signature, a `requester.domain` that is not the agent's signing directory, a malformed request, an Exchange it cannot route to or does not approve) are non-OK errors and buy nothing. An Exchange's per-item denial, including `DENIAL_REASON_RELAY_NOT_ACCEPTED` (decided per item by each offer's provider), is that Exchange's result item unchanged. An Exchange's refusal of its whole sub-request is never turned into a Broker error: it rides in the body, on each affected item's `refusal`.
 
@@ -401,7 +401,7 @@ Agent sends to Broker (Step 1), carried by `BrokerService.Resolve`. Pure discove
 
 ### RequestConstraints
 
-Budget and preference constraints for exchange filtering and offer selection. `BrokerService.Resolve` applies the budget as a filter over offers (`OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` when no offer for a URI remains); it neither denies nor charges, and spend grows only from purchase totals.
+Budget and preference constraints for exchange filtering and offer selection. `BrokerService.Resolve` may apply the budget as a filter over offers (`OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` when no offer for a URI remains); it neither denies nor charges. How the budget is computed is the Broker's own behaviour.
 
 ::proto-message{name=RequestConstraints}
 

From 3647b1e4c8a01abedb4515fe8bfa07dcfcb2fc27 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 22:43:03 -0400
Subject: [PATCH 087/164] Charge a metered purchase once, at purchase, in the
 protocol

A metered purchase settled on its usage report: min(consumed, ceiling)
x rate within estimate_tolerance_bps, with the excess held for
dispute, or consumed x rate with no ceiling when the offer stated no
estimate. The publisher states only the rate and the unit, and a
metered offer is never charged again later.

Pricing now states the rule once: a metered purchase charges E x R,
or one unit, 1 x R, when the offer states no estimate. That is what
TransactionResultItem.cost carries, and the charge is final. A
disagreement about the quantity consumed is a dispute, which this
version does not define further. A price whose metering is NONE is
no different, so its special case is gone.

estimate_tolerance_bps (field 10) and the
pricing.estimate_tolerance.requires_per_unit rule are removed; they
came with the settlement and are in no release. The field number and
name are reserved. offer.metered.estimate_positive stays, and so does
the sentence that the Exchange carries the publisher's stated
estimate onto Offer.pricing.

The usage report is described as a record of the quantity consumed:
ReportingObligation, UsageReport and Usage.consumed_quantity lose the
settlement text, UsageReportResponse loses the held-excess paragraph,
and the dispute chain loses the held-excess note. The reported
quantity stays unrestricted. UsageReportRejectionReason and the
deprecated admin quantity_tolerance say that monitoring how far
reports fall from estimates is the Exchange operator's own business,
not part of the protocol.

buf breaking against v1.0.0 passes: field 10 is not in v1.0.0. The
generated code, the descriptor, the SDK types, the JSON Schemas and
the validation corpus are regenerated; the tolerance mutant and the
tolerance conformance cases are gone.
---
 conformance/corpus/cases.json                 |  28 ---
 conformance/corpus/crossfield.json            |  14 --
 conformance/corpusgen/main.go                 |  13 +-
 conformance/validate_test.go                  |  35 +--
 gen/descriptor.binpb                          | Bin 678560 -> 671283 bytes
 gen/go/fora/admin/v1/admin.pb.go              |   6 +-
 gen/go/fora/v1/fora.pb.go                     | 211 ++++-------------
 .../fora.admin.v1.ReportingPolicy.schema.json |   2 +-
 ...dmin.v1.ReportingPolicy.schema.strict.json |   2 +-
 ...n.v1.SetReportingPolicyRequest.schema.json |   2 +-
 ...tReportingPolicyRequest.schema.strict.json |   2 +-
 ....v1.SetReportingPolicyResponse.schema.json |   2 +-
 ...ReportingPolicyResponse.schema.strict.json |   2 +-
 ...a.v1.BrokerTransactionResponse.schema.json |   4 +-
 ...okerTransactionResponse.schema.strict.json |   4 +-
 .../fora.v1.DiscoveryResponse.schema.json     |  19 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |  19 +-
 .../fora.v1.LicenseTerm.schema.json           |  13 +-
 .../fora.v1.LicenseTerm.schema.strict.json    |  13 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |  19 +-
 .../fora.v1.Offer.schema.strict.json          |  19 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |  19 +-
 .../fora.v1.OfferGroup.schema.strict.json     |  19 +-
 gen/jsonschema/fora.v1.Pricing.schema.json    |  11 +-
 .../fora.v1.Pricing.schema.strict.json        |  11 +-
 .../fora.v1.PushResourcesRequest.schema.json  |  13 +-
 ...v1.PushResourcesRequest.schema.strict.json |  13 +-
 .../fora.v1.ReportingObligation.schema.json   |   2 +-
 ....v1.ReportingObligation.schema.strict.json |   2 +-
 .../fora.v1.ResourceEntry.schema.json         |  13 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |  13 +-
 .../fora.v1.ResourceResponse.schema.json      |  19 +-
 ...ora.v1.ResourceResponse.schema.strict.json |  19 +-
 .../fora.v1.TransactionItem.schema.json       |  19 +-
 ...fora.v1.TransactionItem.schema.strict.json |  19 +-
 .../fora.v1.TransactionRequest.schema.json    |  19 +-
 ...a.v1.TransactionRequest.schema.strict.json |  19 +-
 .../fora.v1.TransactionResponse.schema.json   |   4 +-
 ....v1.TransactionResponse.schema.strict.json |   4 +-
 .../fora.v1.TransactionResultItem.schema.json |   4 +-
 ...1.TransactionResultItem.schema.strict.json |   4 +-
 gen/jsonschema/fora.v1.Usage.schema.json      |   2 +-
 .../fora.v1.Usage.schema.strict.json          |   2 +-
 .../fora.v1.UsageReport.schema.json           |   4 +-
 .../fora.v1.UsageReport.schema.strict.json    |   4 +-
 .../fora.v1.UsageReportResponse.schema.json   |   4 +-
 ....v1.UsageReportResponse.schema.strict.json |   4 +-
 gen/python/wire/models.py                     |  14 +-
 gen/ts/wire/schemas.ts                        |  40 ++--
 proto/fora/admin/v1/admin.proto               |   6 +-
 proto/fora/v1/fora.proto                      | 220 +++++-------------
 sdk/go/helpers/metered.go                     |  45 ++++
 sdk/go/helpers/metered_test.go                |  85 +++++++
 sdk/python/tests/test_metered_offer_parity.py |  72 ++++++
 sdk/ts/tests/metered-offer.parity.test.ts     |  60 +++++
 55 files changed, 537 insertions(+), 700 deletions(-)
 create mode 100644 sdk/go/helpers/metered.go
 create mode 100644 sdk/go/helpers/metered_test.go
 create mode 100644 sdk/python/tests/test_metered_offer_parity.py
 create mode 100644 sdk/ts/tests/metered-offer.parity.test.ts

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index 3d333e7a..996c95ee 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -5239,34 +5239,6 @@
       ]
     }
   },
-  {
-    "id": "Pricing/estimate_tolerance_bps/above_max",
-    "message": "Pricing",
-    "valid": false,
-    "rules": [
-      "int32.gte_lte",
-      "pricing.estimate_tolerance.requires_per_unit"
-    ],
-    "json": {
-      "estimate_tolerance_bps": 10001,
-      "model": "PRICING_MODEL_FREE",
-      "rate": "0"
-    }
-  },
-  {
-    "id": "Pricing/estimate_tolerance_bps/below_min",
-    "message": "Pricing",
-    "valid": false,
-    "rules": [
-      "int32.gte_lte",
-      "pricing.estimate_tolerance.requires_per_unit"
-    ],
-    "json": {
-      "estimate_tolerance_bps": -1,
-      "model": "PRICING_MODEL_FREE",
-      "rate": "0"
-    }
-  },
   {
     "id": "Pricing/model/not_in",
     "message": "Pricing",
diff --git a/conformance/corpus/crossfield.json b/conformance/corpus/crossfield.json
index d13e8b53..65a58c08 100644
--- a/conformance/corpus/crossfield.json
+++ b/conformance/corpus/crossfield.json
@@ -294,20 +294,6 @@
       ]
     }
   },
-  {
-    "id": "Pricing/cel/estimate_tolerance_requires_per_unit",
-    "message": "Pricing",
-    "valid": false,
-    "rules": [
-      "pricing.estimate_tolerance.requires_per_unit"
-    ],
-    "json": {
-      "currency": "USD",
-      "estimate_tolerance_bps": 500,
-      "model": "PRICING_MODEL_FLAT",
-      "rate": "1.00"
-    }
-  },
   {
     "id": "Pricing/cel/free_zero_rate",
     "message": "Pricing",
diff --git a/conformance/corpusgen/main.go b/conformance/corpusgen/main.go
index d85fd10c..89ff5bc3 100644
--- a/conformance/corpusgen/main.go
+++ b/conformance/corpusgen/main.go
@@ -322,16 +322,9 @@ func writeCrossField(v protovalidate.Validator) {
 			"pricing.free.zero_rate",
 		},
 		{
-			// A tolerance bounds a metered settlement; on a FREE or FLAT price
-			// there is nothing for it to bound.
-			"Pricing/cel/estimate_tolerance_requires_per_unit",
-			&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD", EstimateToleranceBps: proto.Int32(500)},
-			"pricing.estimate_tolerance.requires_per_unit",
-		},
-		{
-			// A metered offer may state no estimate (it then settles with no
-			// ceiling), but an estimate it does state is positive: zero would
-			// fix a ceiling of nothing.
+			// A metered offer may state no estimate (the purchase then charges
+			// one unit), but an estimate it does state is positive: zero would
+			// price the purchase at nothing.
 			"Offer/cel/metered_estimate_positive/zero",
 			meteredOffer(proto.Int32(0)),
 			"offer.metered.estimate_positive",
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index f01a8507..97e3ac9c 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -115,34 +115,23 @@ func licensingCases() []validationCase {
 		{"pricing free zero rate ok", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"}, true, ""},
 		{"pricing free nonzero rate rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "1.0"}, false, "pricing.free.zero_rate"},
 
-		// Pricing.estimate_tolerance_bps: basis points 0..10000, PER_UNIT only.
-		{"pricing per_unit tolerance ok", meteredPricing(nil, proto.Int32(500)), true, ""},
-		{"pricing per_unit tolerance zero ok", meteredPricing(nil, proto.Int32(0)), true, ""},
-		{"pricing per_unit tolerance at max ok", meteredPricing(nil, proto.Int32(10000)), true, ""},
-		{"pricing per_unit tolerance above max rejected", meteredPricing(nil, proto.Int32(10001)), false, "int32.gte_lte"},
-		{"pricing per_unit tolerance negative rejected", meteredPricing(nil, proto.Int32(-1)), false, "int32.gte_lte"},
-		{"pricing flat with tolerance rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD", EstimateToleranceBps: proto.Int32(1000)}, false, "pricing.estimate_tolerance.requires_per_unit"},
-		{"pricing free with tolerance rejected", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0", EstimateToleranceBps: proto.Int32(0)}, false, "pricing.estimate_tolerance.requires_per_unit"},
-
 		// Offer message-level CEL: a metered offer may state an estimate on its
 		// own pricing, positive when stated, and the offer's term carries no
 		// pricing at all.
-		{"offer metered with estimate ok", meteredOffer(meteredPricing(proto.Int32(2500), nil)), true, ""},
-		{"offer metered with estimate and tolerance ok", meteredOffer(meteredPricing(proto.Int32(2500), proto.Int32(0))), true, ""},
-		{"offer metered without estimate ok", meteredOffer(meteredPricing(nil, nil)), true, ""},
-		{"offer metered without estimate with tolerance ok", meteredOffer(meteredPricing(nil, proto.Int32(500))), true, ""},
-		{"offer metered zero estimate rejected", meteredOffer(meteredPricing(proto.Int32(0), nil)), false, "offer.metered.estimate_positive"},
-		{"offer metered negative estimate rejected", meteredOffer(meteredPricing(proto.Int32(-5), nil)), false, "offer.metered.estimate_positive"},
+		{"offer metered with estimate ok", meteredOffer(meteredPricing(proto.Int32(2500))), true, ""},
+		{"offer metered without estimate ok", meteredOffer(meteredPricing(nil)), true, ""},
+		{"offer metered zero estimate rejected", meteredOffer(meteredPricing(proto.Int32(0))), false, "offer.metered.estimate_positive"},
+		{"offer metered negative estimate rejected", meteredOffer(meteredPricing(proto.Int32(-5))), false, "offer.metered.estimate_positive"},
 		{"offer flat without estimate ok", &forav1.Offer{OfferId: "of_flat", Exchange: exampleExchange, Pricing: &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, Terms: freeTerms()}, true, ""},
 		// Offer.terms carries no pricing: the price is stated once, in
 		// Offer.pricing. The metered rule reads Offer.pricing only, so a PER_UNIT
 		// term under FLAT offer pricing is refused for the term's pricing alone.
-		{"offer term with pricing rejected", pricedTermOffer(meteredPricing(proto.Int32(2500), nil), meteredPricing(proto.Int32(2500), nil)), false, "offer.terms.pricing_unset"},
+		{"offer term with pricing rejected", pricedTermOffer(meteredPricing(proto.Int32(2500)), meteredPricing(proto.Int32(2500))), false, "offer.terms.pricing_unset"},
 		{"offer term with free pricing rejected", pricedTermOffer(freePricing(), freePricing()), false, "offer.terms.pricing_unset"},
-		{"offer per_unit term under flat pricing rejected", pricedTermOffer(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, meteredPricing(nil, nil)), false, "offer.terms.pricing_unset"},
+		{"offer per_unit term under flat pricing rejected", pricedTermOffer(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, meteredPricing(nil)), false, "offer.terms.pricing_unset"},
 		{"transaction with priced offer term rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-p", Items: []*forav1.TransactionItem{{Offer: pricedTermOffer(freePricing(), freePricing())}}}, false, "offer.terms.pricing_unset"},
-		{"transaction with unestimated metered offer ok", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil, nil))}}}, true, ""},
-		{"transaction with zero-estimate metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-z", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(proto.Int32(0), nil))}}}, false, "offer.metered.estimate_positive"},
+		{"transaction with unestimated metered offer ok", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil))}}}, true, ""},
+		{"transaction with zero-estimate metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-z", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(proto.Int32(0)))}}}, false, "offer.metered.estimate_positive"},
 
 		// Pricing.unit format: empty / bare-dashed / vendor:namespaced.
 		{"pricing unit bare ok", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Unit: proto.String("sq-km"), Rate: "1"}, true, ""},
@@ -377,12 +366,12 @@ func idempotencyCases() []validationCase {
 // to exercise.
 const exampleExchange = "exchange.example"
 
-// meteredPricing is a PER_UNIT price per token with the given estimate and
-// tolerance (nil leaves either unset).
-func meteredPricing(estimate, toleranceBps *int32) *forav1.Pricing {
+// meteredPricing is a PER_UNIT price per token with the given estimate (nil
+// leaves it unset).
+func meteredPricing(estimate *int32) *forav1.Pricing {
 	return &forav1.Pricing{
 		Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Unit: proto.String("tokens"), Currency: "USD", Rate: "0.00002",
-		EstimatedQuantity: estimate, EstimateToleranceBps: toleranceBps,
+		EstimatedQuantity: estimate,
 	}
 }
 
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 7e52353e17ef64935aa95b5b3c8f80304a029033..e377b2badc47d383c27156950fbd2f92204e2466 100644
GIT binary patch
delta 44708
zcmagHd3;nw);^xT>AqXionF)F?xg#62V@V5><|_a6?NPlXY_SJi6b)t3aI0}^G-na
z9Rw+YAUg;MIHI)d1O!At*#reeMOg%7RosyLo>Nsf7ybV6^AA5c=brP_sZ&*_PHoN1
zcN#3eTz|k|*I;FE?qK)Zo~{|!#OzHO&rfdGk!;6$o?`+3M7Qa7yA&npeoA@T9UshE
zwDJ5}*}I3;t55Hq{rmLo+52zSQ+-~rp6uS&>Ra(lpT7P3;qRxPww~<Ur<Z9}^y}ZV
zSNHxE{j8q-to~0`SY7}5#8cgS|E<F6^GrqG?f|IQ&+79+Z|m{r`t|Hx(XU@)t9PIN
z)-&Dv_P6>xNgAg0Oy55J`#jO-=`yQxZ=ugl++mhvceeGcE6Sb!aVR_XUeCuR$}v4#
z@vLWxqP5+xth!~7lD)0J=N=d9^}Oc+?N+yL`t$CY+}{(;e(}8L(2IF{rv*$c=!xYl
zZ;;)5&a-f;>q55AD0O0P$ytwb(c?B3c}&f%YQv0NS5Ota_+$@DjZ@FxbsuW-%yWHF
zm3|c#{@?d+sG(g~YZJ3jwTi}8pT1U~-WAq!@Kj^dy3YCVLeKtB^?9zp)xEdSVu1<j
zW07b2_I#p(d#M(?dw(`?f_kRKIgh)6={I$05Srt>$6a9tYB{+<&jpWrj>~*mL4&DE
zPSE{xcJ9k+*wy4`kD{Ai(?eVr*d8Nblet8OBW72wgO8Wl(TVEKT`qeRQ_8qJ;Ck|G
z6&DG4f>HY`5H5S-33Ii{Az;`<RVj?WVP^YGQm47RXm;VB9#;4M*~nz|BiHq)b`M_7
zT90+NdR6qV=v&bPt!=yYcbcqpih7OLadFRnCj0XgwSyPEqvsRogyd|K%>v8!yMAV}
z@203N1CD0@?*D+e$(mQGEi0{F-Cwkx=-#*Qi|BT}(PFU7{Cx|c3-+#UV!JiVZ0{&4
zudpHAp};#6RWyrmw*v1>RN>#I+&Q2ot4iH?+PVcJrf)?*cKcMdP80C_QUP5JA_2=L
zxkhOnvoqIs2i;X{`c$<``zp1zecZ61O3h136*my7)Kq<&1VWYCsIhrHM?hOnW5utk
zEy|}k2p%9zQ}gOb6%P=msdby$BoL;l&8{~Wx;O-cXR)!bs*AhMav)UVs(A^iqXJ@<
zT5Kb#fS9G$t8XqbID{5dm#fOVsyjZ-V0RxfirJ$t7&`0FP*>UX-iDT4HcfrrT?rYx
z-)aC{uGaQj4S>tZuLZnUYdQfIzN_Y%K^hQ>rVlfGLG^9bomD+(4a4R^?;Y3*v09cI
z^sG?T^)B<XBsWe+hgOwnd}ns<EcLGiWgu)TbXaj&HG;C1I?yhwkwSBi@Qe|34`hx0
ztL`fssMYEi&>5&1#Zt$B&Oj}dHeVIP)C{_ZWt+UEmbkhM(`wt)L^}=BYR8-jjA2?Z
zEip`B4AbgdV=fTo<^|oOHRYQ46c-zKMlED>maAjR!Lj>j9?(WRXn8;ztp)8qmIt)a
zT4`N#wa)9GA9T;m_Ig__cbCs}F!IsBGqu`YmJf`XTB?z>C?6OzwX$o?^)y?kiZ|$9
zl0E*e+F2=I;$V1zu|%uwXI@||(Q5md7Z^*lX3fnDqE<dMF{@aueqX-af$#xhxt3?!
z?gPYfEq%Q-!v~1vTFchv6_uM&5Oi<JPF|x9$nCVn!6*R67A?<i#R6b#(L#3DEda(A
zEoqq}yd1+HRF7)PiR_;@sKeDt{AqjD516A`UZE`8516A`)NW@#V2)BdiyrDn4?U`7
zPH4HZH~P^-gHSo9xtm_iLi{{VtQ0Ri5Okl?luSH;X|I1p?|$szt!ktUtRh)z01&6N
zm|bcBrJkZvuLvIoF-<I(xm9&_IPVx9M0YsvbO*BHycV?MM-UL_wREXD*)SD1M(Sui
z=lks8_tjV2{?WQ#WKJSzjpmmLY|u`1a{CFo^a+@No}kNq3lh*1^k9k`3lh*1^h~LF
z3rE1mN$ma))mzIaIS4e{OmYxtwwa^{BND*{gh_f)%p5F?fVZZw&puR#wx8laD1eya
zKu}1Yq6bC$Y6^wqDS9$x-pq{v^(uSqBeh%ks}4dg5MFf<C@8<G2SrP3N-pW>vA8+M
z!yyor7ia72Qs*h{7dsekU@UepC@e45rI$6u4UENlI%7V=At1YqdG@M(%a=I_9^yI(
z6qc9i!4l~T4-l5=R@xk{aR~Ir>g?Nl)seYRRO?DuN>L!L)+1sz&=d;9)jDPanw~%+
z)>Z3G{=yRrB8M4%;*>pr0BLdoaNKC>YW=?Z%~7JhTF|{aJL`ZtMk(LzSgXO>-Hx>s
zuy;F6PXT*3HT~*bZY>Hvl>Ns+b*-!Xkb|M45{L9WyR|9Y9?}a%*h54G#v#2<U30s@
zK)5}ct@upc=_)_!U>LCDsAC6(-=mJ-Df}MQ(YqIm4utS~lJz;PE-63hKv48O=|E8Q
zJ*fxlN~cluJ*n4k$cLz=AozZ#v+nbacnc7yz<0VFogkt4oi0ZwNN9ei+oMxc5NR*!
zY}Quw=Nmzw8(nm4$cGIV9UCa#UUaHK@%AEBV~7uf6tQKJk+U&-^h?#P6;3krgt>}l
z7o7&_R0G-AVrAmY@>sU$1m>CM;D`wg-vK+-kkcwiz)m$Vt<EA3>ojs^8%iktaxSaM
zRpTuBt0$D5{H^+os|<V_gvRJ>!|-wcKnWnTjX=<xPA=AI<uIQ$Kc&tnn{Oy$6oLtz
z`9^U)sY8QuzR|FeIa=s|T*O?b)v;xZoN{OwE;5XKsYAnXkx}3`U!eh@EAZdS?Ap^R
z%Wb~WkWBzClvWxs5rRNMX{CXF_`awiyj*QyvR|3Y0$*uG*_r3mH(b|(Wmk?yU9};n
zd|jbYS8ZU*|FqClJW5dg#mKp0WdD6ZeIPIR3;Lef*mQdoa{RA`Qipxi*sOaENT7h`
zVVb_eC%=*vL(oj1@%6Hiz4nT#x~$96NyLWOWfI!}V?l%b&B*?_My+;PzZnXz6R|lT
zV(+?PQ*KZlVdi|0ZROHhDgF_rCv2{RQ$4w4(@6H8Tx~;Uq^a<5PfRF}G!cj<3Lz|Y
z#+u49_Ly6Hxe|Zz27?^gGS)=c#C%31iWzHK%gkJg9h|XmD10-{bYD-?8RzU7nu{{W
zn{MlB7AiZzbeCSu0`|+MyYAI2U`?$20}m}c=?^Tl-z$Fr!w{Tox-(aUA!0Gpecjb8
z1fVH@Fbwge%5>Lrq$-CZpL9<(-Sr*b&|D1oS55adSF<pXr~Sb&WI)sZAcchHwcp_n
z%|(JT;}7N|0M9htbqK!F_9D`NS*AOEb&;6aXa4~|6m-w|16Vldp8E%1M1t;lf2dI*
z2H(~2AM<v5-K=ysuPqWhG~7bd-R5c*8g7v(5*ThPq|k7SO?SJirO<9~T<v~Hq1~4J
zK@sh?)I^E%L`THfaxXWPciFR=Hn$RgiNTZ0yZdr8Wyzk1(4j6j)9=>yL?xH^#J34c
z^h70B^u%{eck*f$Dzw6Mr><t9LRsn-E%=B5^lDStYP#7ZU29f}zilIOA-LKx0=0%@
zdTXr_xx$Dwrn^kS=Sm~iI$eOXV8lA7?{F5d*Z)BZUfqD<(CBI~xV748Nv;XEZoIlk
z(UR|(?v}NRq9He%?((ZyC~}MG?r3)5^#<}bQz^-`u(~|guYaFjR`-AQ?AMOHXK2@_
z@PQ|vXm2;PwwZ}y^KQf)cTnAF=ImvKrgm3wr|I$YNa&`h^P#DvcqFU?67>Zgry%YD
z35XBPlB8*&U^fNAk65*-Ws)D63Qq%w37L;bCdFky?P9JxEuGwDiaZB06a#mWOq$EU
zUAtMQJgqdj+f;bo1{rFz-6Ye5%b=2b*uXrkX=;yyLsi;CGB=`1o}jwl%sI?H%G0_O
z>^D6jUL_Az=>SXTYh}p;@Di^Hn9w|cU~k?IbPv_!6V@wVyCeCDBSSU$gk<jGGN3+X
zpXO`#BtNwSvWW7Zk_?&~IH<`%*3GL8OdfP_s3r$VrUREjO%AaWUaeE|kf~&(JyerJ
zB-4`1pl5u>Zt`iZlb_iQ=%ESB{Ta#Jz-2H3KWEc?+Ks8tO@(jpzyK98pOXxEL=CE6
znK{Q<jSn9A%JdX+kMPZ=Bkb-1c;tww@Wq)2OlTf4F{#%9x=J4TnoTdzu1S7vPb*+T
z=4+Cn0jE+ce#5>h&{`$GF%`ahKuqG2Ogk<Ej~rz!{aShQsHyM-0y5;0qa@Rw%fKVY
z*aW}UA$835h|0U`F_QTUawa3Fo-}i2vNL||fx0J6y#Q{@bsJdkoH3OPrrSK}!tS3z
zyMH-?$NnDBzHNTibT{PbviO8z&rwXIojJjQdFP4q6D7+A^_79yVL|N|rF>wXTql8x
z<`|eK*GVAZn}K<9l>-tO1M{%TIgU^W4168R)<v{$I}ddrXrVOJfuJO8XkJj{{ZIkK
z(7b37UuqfT!4Y{%BHorgx=<@*R|>VJ?ZFUBS$qc82nUM_9FZs2JNOE$5qVhe{Fz$=
zYBcK^)&A0Hw1bcfgwc6<<V6oGrnzEto<C-jq?1=%Vy>rD%|NQAPR~<jWL-tty4=U{
zr)>x=nx;F3Q1UiCFDO>GPy@{LJQ4W`1$poEy!4Dbv8E;lc74!^U(0j%GOG*F%4SgA
zl$SF&n=aNiXmvN`=^@_C*!NWr<SB>p+~zz3&1}kMCSF#pqs?_U|0EBI47IBG1_yqc
z=k9tH2eur{b9XWq(pG~>?R+A8xW3jXxAH`uBKH5lMFmdSo&*V{6XZ$q5=bN=C-M>x
z3RIAM`E??%_^%Y2xd1pQ`b1uv+xUu%bmWTcMBbktFh?POgdCE#GkMCzJa_yTmz5pf
zSaZ87!4O`>XL$9D?NyL4>P((o5QBtKXYxd5M_BOcnLO*F^eQp1QvoB+=DDvmLneGC
zSZ*Jf=knZbf6oNk`8;>K(%*B@Di`wHcVMO<doj0P%2R%2Wo6o3_uwzvQ0j-597Cxe
zUb34XT7bS}H$O-idMPjcYptP*H1tQdt4s^G{mC(ne{s|9(9bYUS|*vW>=&|(FHB7;
zV^B8PR9ow6Iw)UJWlK?i9+a<%?hPT5$`6Ljak=PZc|mnde$Lxj^Ez#;D>Now_nKc*
zKhHy_P-o;Ti?fTHX-9G^@uyf--~;ex<QoDHB=BYs9&HwZM9pU8hZpDb<eD?~QgS^r
z-`$w^3=-MRleAg+B5meEU;%e_zDTZZ7FuaeJ`$fw>Qhn^U~}_Dl4-LLGUw$Zwp}HK
z)|j6!l6PAQ-daFlS4kncem&n^Qp>^^1pLCQZRNu<;9ivPe$bpkF)fdpb{U)2N}GD;
zvV2A3ZU&RM<Ubl8Ac3<i-!BFeNDP-{`9Yq_&{s4!#fxS6p%!L22Srtvvmvdujy;y=
zD>e!hwLIS^B4Zx!Ma%OM8ATcBMfe)Kk&i)qrQt=Kco#n4B!{*@mgjfsY!0Ia&kw3=
z^K<rR>$lN{y6UgZ*J&#;*PV~3vOZtgl<&s;u7MPDhhW9a*&~HojGb+ZEzS-3?pC}&
zAp^6k^WFEtgSynhVa~>U_cE7R5B18Y;If6?-%e}r_?CQmQ~)OGwIx3wHcLRlSzGck
zX;8gDqF!6_<04`a$?LTxKXD_km*h~rw&Zud!7StD0C5}pvYmEq<+gl<LM0(lqio9$
zi<LV_l(Q`#;X-~zIotBB+eCGEqriXL^3%7<a;Ta37Sgu-n{P1}(Xu<A=A+&DI0$()
z*P@fOr*Z7n8wY9qpX%P<>QT|RXLekBZM>^JWJG9y272D^e7R{05=QOL4~czXkT7a@
zKF&#yGyxve$LygF+Q2R!I|wvIeVi}nT*v_7<NToL2Ovo&AGs_}1r@h9s9w&``P%D>
zj|pT`9ksVrf0@;-Kb>LXbkel&ADeQMR<9UmluuUlwR+;jvTvWiS3H5k&;EU^BLgN`
z{VLd3UA1WT!cE#gU3D+#%c;kUPEwPv4D!0o8I)moWiKHf8+VKL+N}e;?q=MZ;uBmo
z(Chva?;L`I&he7hJ>11R9pN#r@+$CNGHpD}2gJ+1&`ooBT1@d`g+@~uSEr1t%8RH?
zy-jccIMwSO;xa#?vFWAmHj^#6L)+bcrdKuqm}r2RUfBR3;l7#PkeJFq!hJKn$eWvU
z1bm#sR^6$!teoRjM3nRLjx@(BlLC-Xnd3!LKphDrI?^0(vYW8f?nraIsatqQA_3Wv
z=6Ji_WKN{xMlW@wcfHD=<AY7>{(jwYs*FRm{x}fq-?LBeepdY_vwiN;es(_!8PSoT
zfqJ~_mD~0pVd}fyXsNV<y3V`aYs9`3zQU+?z4h<s!Hq~U6~60jaG!aF=3Xx;tj}(}
zUmM`6SnrgQi&EBm^Te?pgiy+QZ$KQHf+Qs`4oyYXb5Y8AZ}F|Nlw4WLdT&WL^I={H
zg7YS?a)10z>n_%*jh18|JfO9G6fC<|bO^Y~D|b%4eAjD}SMHpGM0uOM*f|yDA#nnE
z&3&>wN}Fhc-{h@#uQ`d*881!5yR%RHMJvoL-|dt_2Zg(xK0te8yPZBjdt<w)5A3GY
z*GrE6BD>-tZLjjk7Y>FB=r6o-7(xgbUwGv(1PP2UycmYUQre*Y!dr5iw3Ife$<i;p
z$y?3)c_Em6j<Dm8Xb*Ha;*>#q(MOyzXfOJRSEi9(h4!M4c#%fVRWa0YO!&PwXH53r
zk7}j41>bwI68I00eKZPwWJ@2{1~mQAD<^I+0rjI-?m>bC)Q?{5LGoG6N1f@imp%N1
zR#kS{QKATX*=vY^3Lz+6_7+BIt%7n;pBgW#(?ct7Ut?DRTvVaP?m!>`QR5AWBM6Xy
zsPQ6^q*GlVQ3KiZ9$Jg`1AVeffC+?wKG_990%4#}c0rJ&<3kth#1YWJ1~XrUc0>7K
z2Z3hS!43jt<AZ$xF~j(HryA_T`2B<if{zRyogGu5J?QE(+QFbhjL|;X+z<lBXrEkK
zfP@vJeW=G&I&3Nks`Gp~zxiD8QAW1m-?VYA0M6O1KXtvY>pfj>wC=j6TbHiv_)}Vo
zdi<Q8j_K*Tz~fK%?DrIcaKHZio(Z`8_Jws%W7hHST2Y%?VSW#zjAk5D#%((N@BVbZ
zK0>$lHU@C4u2y~Ks#3#ceV(CU(*5bi)-!$j_3YpCd1${tcLI2MJ=!7CS6Fw_G|&Lp
z?46!kUGL+4`ajj!0xp@zR(IE9lmD(IE2%b}?VAqHMF;!-NLRWaa?kH?jfhJlVDciV
zZeqp}l{GOP)!uBNnqmHw_iVcN>hoOh{?>hcyZ7$boyWs_*nfKIX5|xo`t|2m9(v-+
z%9FUELN;OstLWu8N?1ftPxeIBaq-6L(G&5tZ$(9~3ZQm>oG!1BHP1fRy?6hf{c(u`
z0r$CHbb$j}-AVkJ=jaN|3s3cY;wgxN`+P;;em&WtyS4muj|u=+SWiCJ7a)Cko5(vB
zh~V9O;Bv>QzFM5A{j}?D!X=`ARy+YP`xXY=n1_6e4sPf9<jTDO^Wb8ivdrf;FDjS^
z3*@{ic=0b3Hou=XoITiIJ6idM4?DUvAqpW3z$HHHkU1Rm%B4Q{BM3q$1;B6ml(zwl
z`$9qm^Q&al>d+YfuMf$x!vXGFJ}fsJ4se(I-1(Je1B{pgiZEFgd_imUMAoN>;}b9e
zl=T&ebQL6YvObxvf<!>f`eeFFBv0$IKAEmc4yAQjAJWx<G&Bn+c&y3Jd_l`~J-)^#
zV;Q)__8B5i28oi^_++*X5+$wi1^<tSULwWXdW|o1&($ohbl<;eZw3XS%IlfuMXkJS
zy;BYqzuqSgnIHp|^*$UjO%ui;``Da)=0z>(s@!bHjRGFMHrsInBrrDn<eC*EFgE*;
zg!+&>fYgEEvqrh3Wi*4*M!;rY`Y~h=1{dM$5{NxM(q#^#^;rQO86EH`_2WOOR#)6p
zW8VMOE_vleBz~``f_eX~HFneRVCDbTTGg!`B3Ip0`rYuQdtdCzzqJzfATH&U*q511
zyYD*p!K~}DBmYlZ<SK^=Vj71*h?WQJhzk<6KHv+8<OC#YeZYt0gf?OdDBvFSv1co_
z2Ra{gASmD-bRa0;9`pt3^9dC?fH>&G0dN&v)F{9ltseC$=X_aXfEHCM@waUX&C^Gn
z2B3NRs2#YW2b`l6xM{@-5-ZlDzQj47Sg{g=uUL=y<cgIzV#RvgCwAPqmRPYK_hmZp
zmaCLv=tjqVogS2}$u&{l37=eLN-4D7315bvG}vIU`Gl|2Lsu)J8+`kRB9SwE>&x){
zZ(9+a{aatB%HL_?Jm{oPu61RRI1W1X2P<$Kbjp{x<?14F9CX?zPM~aj90#5D)%jhK
zI1W1P>m;^%Bz#+(2Yq)nKJT;cGgo_2^z5@f_e1soLUk_rvIhofC9b<JISr_x=9heV
zB111wC<(gcOW1vhlAue}msYtb$f2&kA_m3Za9KC?ta!SIb=|er3*Gx!%+=phn2TON
z`5#)m5@8$@O!wZV^<3}16;D^-@?#IHN8j#G%Db9&jPKJMt2heqJ?vFe--=#+p0DU3
zhEGqdl6pVa>v7E4{JLH5?!78#Hhqz@_lmxdLxj(#{%IhP{p!n;A*z!>!O@`&+F|A-
zpAOJCmwnhZ=9(rnFZ=RJ&6ly?<UtG{T97j;J9LB=Pzr|@cmn1otaUv68q2T(#mc<x
zVs|`dG+_rvX)h<i5$B%xjv|H?AksX>#ZmrnHgdG~c%9(|^6)|9o7lri<}-l_l@Wxw
zlljMJ_lIbjwBvvb1FX*&?b#%R#8C=vrEncUU?T%op>amCD`T{d)<~xq+T$Kc#ayH+
zVZ==?$eEgbc&ye}DVSV<bKXaw%g_87J3L-{EX4{Go~#iQx~u@>{&g~upX^Uz4^Pk*
zrKS|ft$r{eG=+o)2qBPF?3$Ogm)cYnC_I8dlPs+wp?nyDUG!-MISUG0G$DKFuEn$h
z9Fz1!8GP$|I{WHn?H|eM1@f2#OsG#Uz_pcbTm~95*xx5=x20y-&cNn1WM&j#5ip4C
z;Jeqe*}jR|kksq~d2kITgk~4u;QDJJ1eeWc|D2>9P0zPm5Bty%nolm9>qCBtt6bX)
zayI$1|9M5rXyNSzdcfRFanO&cSlw5k>@Uc^Jx%MPRN`;3RfjJyabJOv#{(!xl(VnE
zSHJ@wNHoK~0{{L35%`FK0gA1J0(W~J5+nz9d|Xi4<Z2dxJ}zk5&fF8=79gkixj?y6
z;Eq=Z=uTuZJ86ctRIdcnHiahap9|!!p`TCKKNrYdLy$1#=YsGRm_nBzi9x2QzZAHC
zD-f3;B@ZS4ic4^OW|S;kg1lTnmmp~#_mgi2`jxKnCKjuHU2F9?2(gOCCm1o%?-%(A
zNPrFW%lrf+0_i}%%uk5q`N=@P%ughT@{@sn<R>@r(f~1pJ-AT2rF@8A&Od&h01WZV
zg#$<wJH#&+4j@U#kNM|a;XTX+OR`@q)K=+_E^#nuI$h#m&~&=QFV~uWKAkS{%e5v*
zn7+g>*P29%wdN8()|w|oF9F=j>`!lLe^<&^I;GI6c%@&iz5RTNv(jHEwx&SB(v^N}
zP2uzso`vihzql?0f>ZLY3P{+u#xJi6frRE7zkOZEuOQBE^o#34AW-9tjt#Wp-RRVm
zg8fFnyln<yAZ_&Hy3p+yvp5sk;?LRRXN|Jjt-&pRd1nPj3qki*zmn!BwRJ%P1GG5t
z28lkg)sI#4jTn<S0>CDppY6_ST~piq@`x2&2yLTg5kjE0`&o;3A++5uLn=1zIU9rW
zR*nSQcKTV>yNCfh{W2h8iycBcsd3OnP#kLek)P$R)NW3F<d>(%;6mslKXx1h5`3`R
z&w8%ZZnJj#W#~hNA++0%b?W>OGy)h9{+$12_pQ|C8U9~zFVnmY4HKZ+U-q*Ro3z`@
zF8k$>0~htY>^H=k7bJ|mOjv*AI`~)vtKQQdEUR&JXqeXc4Y4sB;KQ`WkB!+02vjHt
z<_uz^-qR+w9~6+i9Zc9hC?I<~NI(n<$es!k#SRL<8TW7mP(#^+o3;DOh6aRJ0ZRj9
zXrTBS9;ZN(P@q9W9?S6=4jjoo+pN7*KGG?b#>dEj+#-MsAVvn{<#UjL7#Tp%9YcwF
zfJ_{peRYdg;3^;QU{Jm}-oc=Jb9^8mcJ-hGjPU`4dw$(HK;3_G_V`w$D(xpb7&Hzh
z2QXRFt`CHOF*#7@TAKvM<iPbUcx(#LFsNdkwrS-}sz68?>hM(od2#?YRH_14%k<}#
zV`NWfi?(UcmrW1UHZ9#QoF1rcCc0fXJ%DCfDVhlx(QJ0d2iofL*^Z%fxp21AOf=!m
z4#=C-0fjCX&L)TPd)d&!VF|lwySA`=fdfI83l}&Lbh&VW)6#Uga6uqZ!lOliE*CBe
zh-d)<URo58(E=ni7X@Ur013@S0Xtd*=yKtk0Uj;7f<W`X>DWM*3*U5Xpv#4C24u8=
zFp%C1AX@PIWH{Yg8_3xn$gbR}wNwh$20R6{_2$7z5^k=rD<5eOSnC3Ew1J84y)J+e
zLazlN1Zd1>&+XC{S=9k~r2||@Rg<$12`P}91FYk2?K5k0K%6{4mxjvb05;07up=zk
z^?rc0+oO$6z3*UAq<EjOD0RxCj{ZS_9owUINPiHJDH^yC`XGR5>IWR)cyNHTKalfv
zAlr4XcF`5sAMixYV^ju?MX<yQux=k~$E^bag<m}-F4PYMuz@;XNTF5-1MIH-+5+of
zK!!*hjX>&P03mXhkOFx)z@i7V-PYlN%z$uK!PyuR+l3TrbtJ&_PqZD@k$?<sIFEqT
zkpM#5MLNe02Gzkq<ged<qFvAm2M6`2IS1PAAlW-CsC14`a<OISw05l3S6Yud!4WwF
zzQfdEL3w`>BuX0=#QjAYX&^B&h6SUYcwRyzG6obpELhahY{T)PK9ZgMN^94AqytJ3
zZe&otX$bNNH!_HNFN?$0P*7bT%=sYbiqDL*XKV1@>X{>2&>L7E)RX4>WOazF-V|gL
z&uZK5+!PcS8Ho$nO+ia+zJr9Vn}WEnLAHW~t($_4@8SC?L=H1z#A$LjE_4tmw6_G=
z;&a+x@7!YB3NB|$2Y>|V7TW<J0lLL@0FlB0TWkk}sI|6{16s7i-xxRB9B4iX+HSyC
zKyM>A45vfFa8TVH%-I*rt~-xY!phx2J%g0l?G97r_n^smwLk$Aq-ZaYFn5pLULb+F
z$2J!v%-v&~OQbM&51A{#p}se$bdun7@()rs|3p3vb7$-g%B>iXK;Ik0R*d`#^u58t
zj=VSEt3=-$jCL^3xKO7^P(2vTIUQvF@3qt6gF(HnIe;>w2<oIB2`Wc}S^p2(6;~zx
z7W)YJf~a*Qm?zF2K*GQy!D~dLf`kP}f@Mv4It>yz?2+KLM}y)@2QiR^LFMb9xMfI1
z5eu#IO%OLa@8hLI;6zY~$8WOksd)A|JgXY>qjqZ<Si-9jUhfk@8S6o!)DuC34C*)$
zYT}bY=J`qcYvoBthg$b!P)_|2g3iex0vq``Le#0C7}G?-&misMXf8e#G{o5=zH(tq
z-@EhR#KNFDB$P8L<ce?1vpW9`+o_$Oc%tH&{@r^&QNcQXp=sG~e$w9d_=kirUg%b?
zyO6rfaQ6BY?Ug3OL$VYwQOfX;?Aahu%J2||_5)l6A4jpj*Jyt&8|A3bU>FsWekkOA
z7!`sa_*Lyfa>O`xzDAo-HqOx@Ka2}WKR^b>j0?dJ{K%t_$ceA4)2B9{=%`TrCx&GG
zAwn`C)PDyJj40NOp`7ig|9pjAS5FOPXSnp`uE4aA9ye!FeWO(0IU&}0n*J)glB=sN
z=h)cz1nfB>c>)6x*mFWSfjLDTF$!bVr6J|bkUM_R%?>Ts+hw0~>kXAkFh%P?1PDuQ
z>p%iwDOpEbSs>8`mxfB-42cyTF=!d(UKWxoI>~{rmWAYsPO<>BEQA%^pSUFuSRO*B
z>`0xGB{lt~GSFfj8RZ$?@=(4QdLW^@oLXWg9gs(fT%CPc(`UOLTOE>P30#b&)gig1
z0}>Tk9ZHCm21rs0A^o7y3=*Sxb*Qe`ttC>7q}8Eo?l#v_Mi-^IvO1K-gMkjN@@l6T
zI!vq%<%xF}kU}xlp-fweOKD+ssJsJDQKA$Q-wTNp1q3wT3&|7(BsAX($rJ@7G~Wx^
zDN2-*!4E=WK?8y&ZpQ}Ne*7RL6JmS?(gz`#qJRX_2O*>=e?^BX3aTH5at?*qtNHo^
zfe%BN9C^lCMBQj_D4XlmeXhIqhGen`Ho*3VWU>enV0%My;~OMJ!BDU@pJ#~V^UU5*
zsFit|+*U*b;$SG--KY0*bvS673^wX>&~6=&Tr43X9Y~aNFoa0AgqAb0p!#hHr;ho4
z{S77XZ3s^`c-N1S&8J1zZvg^cIBoY_kbpdG_kECnJWYKc6OP**BfBn!vQ;5{gsbeL
zqeX^X49VFVQqa0ctw6CeMq~a`h}{*@@9%KQt_!%R%cYQfX9p4xmqKZ=xBv-=OQ8mh
z%!Q(0kXJ(4uOm8kv#&TH)LpNH<fXtE@2*!uez745l53Tu%nxbI$EY(7Vjo2HUFCzq
zvd4o7h(Y06JE$uT3d{F?_zH+Y;g+p=SBz0t92yo~5d<`chGka-3C*El*%d)Tb7<J^
ziZQD0=rHe!EEU()&Z8X@s3(pN%bo~H0F4gIo(K{^qr>Ql5201#L3MmMXJ^<I{}X$*
zmtM&J9oIV*j1TK2=C!C}oErCKwmq&lYxZ(j#v?F+_;OfI${>OGau|~`C17##{3~Il
zINpf;x5@~y8xneHb1+0O!)N~85H|}zLiv?2j&*6D587zmDmWot<zgSbWF*+z34KHp
zaBOvguL{efX^2C;DvXR9*Kwf@Y8v}{vEHi7G}|9w!XMLYe}DwSw6I(Qfh3(Ug3ume
z09ticSn<a<x!5<w`t>FJAQ1b+S8s~iha+v-uhn|0p7Ton>gV&ndp(ciSCi#0(@R)*
zf*NQ=0WZ$`3d$09_CUh0Sz%2CT#ztqRu~(1bX6=)ePu4Io6<X$&vmLsYuUL@)u_+R
z4a;Y@Pyxc+FctylMAgt|7P46>{X+Rd2ZENe3&XO{$9ZpA81{>l79=1Rh8s3E&kG2w
zWtXyDmVU8(sRKb9_e;Zhc9YW5c4@dsBv5g_v|Spm-$2BRIBmGSH94ctZvU2pK=0_@
z3d?x{B0zX6oVbn$aF8(Kt#I>}vQJ{6`wlyt(VKO6$3ZZF@J?7h)r~8((0wN?pX!1H
z!aHF+2_Hq{KTZqXHR0?XrTS=B`5Fg=mbz;kchXXKO*km#Cny1AO}JhIvo*)SQg?lr
zMeFKq%GRU9NLy)<yFM(pB;tILyPkTN=$}~QZVa>k)YV&d*yt2XPn9=@<x}OjLaW=2
z;gonI3=+j|q?qv`B@A(Ts=Ondy--)bQ|Y+F0in0bI~*6%Tjd?$1ixHQN&wjru3OI>
zOBqc9d%)qGQ{n7@`tU$_Ul=nGEdkvL40!dEu=07BSq=3MEAgioc=!OoPwYVt5`dr3
zpr<4RB$AL%!iArQ#a=EkC<#$N4ZA-Ji@jXQgWkcg+{=|L?ByN`(_SwB>5c>q@nd1-
z_W0mzuSU9GsRUtLLDAz_SRMgG5@^T5awY_czI7}d6nFcG<cZL+a7f%#k{pDXW8r3E
zw_CC}OowjfY~ch*oDAa?^F$Zjy<nG{=u<m@Ayx<pKG&QK%NtoBVbjTQRO}#u1lY+i
zmdn?{)5SscOgQIanC&amoBGd$^?ZIosu+IuoC~v1Q~i<3b9VK>1=P8)+%N|TsB>X#
zm{Ys}iRzsThb#GVhe%Wpt$r>X5jUeGi!1&4KV}gcw3v)LA65!8rq%7<JFVu;u4^T#
zfiLLo_|!=F7Bm-?VI3rJ&f8(V7=hVyA<Poj>TN48*scH<7#Hjj0}>Dy!t&G`Bp@z?
zv2jYL-XL-6eIab0dJ`=wa3L&Dy(J3=>=(jx>irSzec)>2Z{eKP5m$Ueu61KY@1EIx
z*Xr-N0>6cED8|rW9)1DvN|-Hdrcbf1gyp_1xM;^KRQv@Y1><Tk-CnO>OxA?us}Ee$
zgH#O-(MB8!)Bx7Ex!xo>AR=FM;2s@uBltatG?ziO2C}uy_0rV9h}=xU9XZGhj9@iQ
zcNkz3CX$!3HO=*0SL&sR!nX>E3#pePIL7=&*aZI#V(FIpvE-nL(tsKoLbL-sDAKqI
zf9AsPr443vTj@6@2S?-%515b{96@l;@X`>Nhp=I-^g5{_5xH}Ni(`-(5<yp7im(S<
z^q<k$4_fJOx{{+EBpp(t38@PgLU<j+rnJ$!CdWkN;gwf0ATuU{!>bp$4C3cl_G=sc
ze^X;4@&ONSf<b0%1TkhO0u@R_fSi(jr7hxAhbfL!9;Bv_l&C800#1q4Z-*|Tk`B$z
zQz8x8nll9mBIc}Yrd-b`$ytsU^8qp|a!q~yp2$lfaW;FrquwbwJEHJ;2T)$f%#PsM
zGrc+TDp(QCVH-$hj)OycM{@}0b}oa{?71x2NxvgGHzHr^;5H~^=0-3D(srF!!DZoj
zY-A_BV{)E@LvJ4D5f1jdA%o|S^V#uE`hBVS4o(0v^9cv}GzsBB<eS+CJL}7o)SD57
zXR5@7)SD4xs?v#gBe^PD|3)}5y~=T72vV!ai9@l=;X#~TAIW(?f*Zd2VE_6EPF88d
zlivv35Mc%V)w}A7n}8ea76l224b-CaxQt%}td6i*H|u4o>WF-)3oeAJBY3Hs;6k7_
zM%bB~_2SgVh&)5V-9FC78A=^4ga+LdVGVB4>!vnE<n|!0??Gr&1lxnS0Epr+INpn}
zUbpDYQ}5aR6<i3tNBtGIyCH<Ju{pvv+@d#4ZFZ1oaBL<dQ5*u`mI(88LvdRoa#z>K
zN5_^37XA1g8z5nHY>lvcy6M-Zw>mDM;jxum@G-7XBTZJni{yMC$<FDf@74X^Mf5^?
zjHJ3K2|gQPL+{bMm7R^KJQ@=h+Giu-`qYt$M7_^OuD`{s&vhu4M%Zun=ncxwM^wIQ
zh7kGle58>7oB@&0IUi|t2mQ1INPN5)VfWpu-*WB6h{_KviOboMhO!)rsTU(HZZnr-
zz##~zzeIA*7G`(ct6%5x{}Rz7X0;D!{6%+F)_cF+MQd7BsPY>L#06Sap^v|&CK6~>
zg&1z*5dA>I>@$Vg%Ky>FM{Ye+sPYXVVngdpVT>;giG<df!j^Z^k-EDisGcv(nHuFs
z>h2P%c%fb_vb_@W-S>rjW289<wCMMRaxw=A+3ySG&Im}LeqV^yA%d*CgiN_q$o$jw
z;#MG_dCAeFsp?Xp+)2V$XkIGBP7=Q)R05BwR|=JZ+5hdQ7b%taQ%rgIfZlSYFi-4r
zfdtHz!kE~P0122Yg_sE_rvZta=1O7Rfl;xyM+~teQBx@Q_9P3=84$(Z9%d{u94JGg
zc%uJrt6L9jma*XT`oNaph<O&@QR<Lrt?{$~84`u@^J%eOf}x>~iYnuy?)WPTovSZk
z&%B_&SP7mDKnsOYQ8`gV0RW?-G8F>}vqwb>$HQzoRwo9fLF(wJdt6kcVv+~FF;SU{
zNfuJEu~ACJ=<v6MM&QIK|2Y@-<a{H7CZts=Shfdg#W67|SE=|4$ca&Vm0CjXu3GTl
zf9kFdRngi;p!I20RIX1U1Bj}qT%UpjL{${)Q+~rX8B~`<bH-=SzNlBZ>n@3+d($1q
zB<{z&6;)P5-R3)Vc`_+4PZBS?<Ue|ISL@|b`G`P#LmRyv#p^e^+bB3F=bb3t%zaL7
zPg3H$HmYolW@7{Nhg_BTTeurvVBp%QOv*q)acxxIVgLzuuZ@N`N_P{3yL(;KT`k=$
zdC*&LyIZp0?hV}CzX&4`gWiuSA4c8Tiv#r+T$LbfE2zuAAC;MJl6U#{qsV-zuY!aX
z??;0l)><KQUv*p5y|dN|dw=|csOslAB<aCe7`8o%xJGZJBnu6<BdSIlQg#6zytgZ=
z{3#x`y7cLd`-0c?(?b<tBaDMDMi)pl>@K@uLBir)QF)6UB#PM;MSeudEJ!3HyQ1ma
zWvM(D<Pw?N%o1KGs6A2k&%t`Ka*tC8t>*VQh0tKy6P3U2mgKAXJyH2k0VE396D_`3
z7Q(Mta@dla%s4LuHP{!$#gTmLfj)hE;8HN|Alvo9aTR?u%?E|abo#t6Do>x2e7(Le
z8W4{nKmvGQ6xpT}M$!AC){U}g8iZu}zG%9O*@_npYJZgV8KSp-Y`;@KTGH=#3ZVhE
zKPqojCiwu{A4U2o3c;l+e64Rg(IX4lA8l|OKdpnG(UJ$FOdG22s66PDLSyit<3$>S
z2kkKk9aQCD6ceK;g&s8=jF#RZt3r<&sLvdX*7=i}<W<4^`Wf{PzjaIZeox_s`rq(7
zi~XPKWqXn?e|+|cQ#{@N_{=Gub__m?%3lgf@*RWEqDTWo@%XVce9hRE<Uf^$;y;U)
z-bSyvQAY?Ij<Pq0=}kHub_$_Qg~L&~sQ@7qayXi>QE5}*a1>eZTNJgE3ew&qQI;64
zFMsrigF)x#M;t?GTj5AFD9-(%1B@e4q<z9r19lvV;-!rkNQU&&k!Ztv`Bi`<?K>Qe
zvL+++_8pEog_tn(XjJZ9KnR5#jn-`=QEA)ZXtaF?b3MIMNm5#UKAK%HLf@b~cHRM@
z!}jx0xrqQNfSixY-#Y^dkn_<paYF$lEIl8+?onxJ9xM%FjGvD-d&E3J4{DNh9A6X7
zZXK=n%zd=RDTekcYNB%O3n>&+6O}(A1`@^8Q2ZAT!9zoknY&~$`LdXrXz88iJ`wSd
zx)05c8?XP_RXMb%Hj>b0#?YcXv7}Baw3#uqC@J=XK%$hPMc5A#rFc=w(4tn4i`cGs
zQ3{gup+&8`V*<o4Xb28n;Tl@>$fJB_OVV;+MA210RMxW(>pkD_w!jyZjZb2R1BtRn
z6v-J5B+4F9WY2I(1xto;MPeUz#zbBH%Q&YJ1?W5DisU>8NdS#2lJgu$0F5icJV!ZH
zDyY6(l=F6x$e~h@e7OjFuzZI-MLE<ftkX1oT66pj&{vA&tN;?CuN27?3M4>ZDMAXh
zguI)g2s|~rbCTZFRW`Lq9w&fH>>^!kS%HMo)S^(>JWQKoDGK(pvJEHeU%JX>IZA{z
z%Tc0eK8uv*V4Vgfkc+adr|5N+@<p}_z=gGoY!`q8#-gI2*iZ*aN=3-zDcMNTWU{14
z?1qCtD=e{F0VFh+*sTB(noDY1Aw?6<a?uKpfB?{P#|8?h%N-jipf0zY0m499Za0G!
zR96(`?3T@7L2^YA&NO*5Skw$FsTpRMt+X2eObD&C8vrEWR#F2{4r`ImRu@qYn`yS%
z(INk@E|Li#grKv!2npa$ibNJ=uj`AH%|)!obbWgz{uEIZA5fF^c1=J6W_^*I`al9^
zeG#TU$_PLrBUoQlytznZuf!19>xLqky-F6EySfP3E4`GLEIf|FO0S4s%D2CoixM^!
z;dfYmCyIu8ugHC$NM9{jp>8iyb`||DeeG9?53n9zL_Px&)^9J8Ni0ZUZ!eNbEJ#?t
zy{K>(tfwTF7(A=mQRM!pNF=e62fdv|GKrNeWK|y)Q4&i-D;-q#7UdLwDjPM8V)qv5
zDbc8DYSjH=Y~gQMxZk!ABt-YyO$!nw?Wd-tw=ijP{wGDO&n&%Rw@>U*0xoCsCq5n$
zg3c#J$Q8+wOi(>klyh1dl7Zx*+CiQnLk@F8*nej0YT04i4t#;+VcQOnz&vbsu?*Sq
zCGTRz>_aHF{L)b*W4^Te86=_jCG|7D(8y3fJ65Ee`eRGs1N?w5qNP9r=9t}5AOUmC
zZYhvxsbfWjr({bJgSXW2BKJwzQj!O~6Lw2U7Fz1t+LkKCUMX7Yd+DH36nmz2_?41_
z&Wo19->~q!Z6QdAp0_;&5+$7{57Cd<mXi4wi`ck%`nAn37Rl2Va5-BOub4nW=VB3l
z1djF`-F1R$O;HYux#BM=?A$$Om}&F%#<zC1p2M563f%gqpN$sp#`;z~L5ZXI>F59V
zby*qx1oTt*6<)kylWGv{&VG4QZ@{j9T`%>R^rnEVzs^(0o_$^aq@bn<XRCCSR)?xQ
zko{$$-mYvQ4(|AL2PO<37?VHk01}1|jG>EFQOK`DwH=nNUZ^Kr?T5u==l~a^bXZJY
zSOiH@u{sSUBvpP`tVx-9Cx^h`AIXXq>vy*w=^#+27#WkZSsmUfM#f|)2ML6cF@*At
z90AlAHgB=sxqOU+KmlNkgFpdbOiUhD)!_kPObq!LO$K#nG8iA@lR<M3uzq|@PRSsl
zIX)(*WRNIre9WGb>yV+77d-oh?&>nxDV%13$xh)k3rvp5$rvhtm>k1oyq#Xy)(xt!
z$8rv$_1CEE?IrrA>u?HSw;q2i`2W-Bc!~MlKeTA)24yDyxq#ZA5bw?}&h*3UEIc#B
z!z(;66i-xYUnTbJ*A|Zv?YD`{d|hvlE&Z>)%N2M%h8OvKDymBzV{uGeH<__qSDP)4
z$<c~WsM+F}%m_fDW{YDO3kRut)J6AD--;=3$Fc{O>wj@o;%_m`@db)+#pE3rkWhRp
zCU2R5#4vv=R`PaC+%h2s4RiPMn7m~oIp{mfWAc`XWC3V-47W_K;|4$=8^iH%DZTV$
zOW)BOHUn)NLESeSlc&RVdAG{OFsD7rb%C@B-5`E9oekGzO;_lx%D}LdsYk7f$+O|Q
zyhp8y;cS@R9M`2DwKm2kt<am7t&PcC2wdo_jmfJOAW_8H7?#!e5i01Q(`<;bODLz=
zhM2s$3@&sw#EQiMCrIdQh~a?q4a%SDV#TGtA5(V5vX5qQzn~I-+Xm7y>;0IV^B@St
z_hWL-0|^(uA1mAm7t@?a3?50h#oRk$V$PF1=zS2AbDm@&l5UUDoY$P&fCbsEn39fP
zW3k~Y^=r#Ph%BP6LZ`L6V)FJsNZ7P1Rwy2@g9P@j7*^>t4C~U$YOffEtY8(UrM>nj
z#3v~3wMQXHDDJHtg>`8?^(n(B{N+ac4c~w2SU`)aPwlaYuK@bg9*ZCW^eK(SKVfSd
zFRVY0<$M)m16S*}`9F{0txg6zx_CB<NifDfTa7cA!!fxP4K8}u;TX1}k$yo4z+c2z
za*duzeG!ve(cnVp3yM{=fy|$Pei>truF>mSU&`7M7eZfB_kR!p;hLcOO)TfT7@NCB
z|BL^dm>#2(8TU10#jzO6U#oX1KW5htT-5KFT|ba8<5*1os4z&>?^q0b>NGoDLpFXJ
zW24uik-l{xC|-XX%M;i5A;hKPV($bbAij-Zqw+=$0aH)M*w1VAuH~m42<p72WAb4C
z8XmAu$NXY@0wf?#lNGn3e)WRtxmeE2?0?tk-QwqHH0+>Mv>w&(`<Rl7uXWK6z_Xea
zxFYiXI(=z5xS~Hn2IYKj*A^s9{obA!K%$)Q$=T0wKz#fu#=cmuKi}mi2ZDBYe{vwG
zwm-#WVq1^b_9qGgpHK*^M=diTt|a5z6gFjpzQ~~9j9D2wt&2D6_@#-Bddh|8*ms!m
z{KqSv=>8o4otB>cn17RAx2uVV-iY4xLLP7SXaNa86c0qrCQ<x=INDf#MGXeTag@-R
zmkw$W+rCNf(tZ%G1V|a0+6Kj?uj}#Lc2L|emcbxNCyuF&?%CC&Ks1!y`ksDg=b;V)
z?JW&;5GX7Sbr2{l4J8D;8vz1jN5qvT@%C)(8oh{Jcu#NI2@KmB+M^v2&l5u$(!d%K
zFR3qWrEoPO-l(zpsc2(_tFduq0_(n6|D+Os*(kI{G&U|L{Ca$wc5GbsVvs-?8%O`4
z)don!uCeht6XIgEK@7w$$c&522epz#GkF|OL2pC1s~=QfiRVm<yW-{I$51-6cem&r
zA9y8>M=mkcv_5q}7FPmsTs-a9ucE(o|2^G=efR|X@J+;4kf<e#%XtqZ%4TuQdpNlQ
z4n9_~JGSa2?W^n>f(e8wyM`c1C@#AlNFY?j(d`g$fPh~2DqFBsuhZpK2Z37RRR@8J
zc{MI~JfQ-FSL2AKU(#LV20?X3JSU6Vw!<sc?>r%vd0(%mWG1o4zBMxJ-`n+n2WG_W
zdvy({>ht1!j&BPB1<kW73las*vnvY{1<j+%PNEs80hzHRjuVI>x%>`R_WTb0|6FBY
z31>loOUM-{Na!z#V`V@=zX4VC&A3>IgFuVD8JD>iNNBzpm$?^6XucV@bFT(Ou84~p
zk|5C2SJ=)1i8`#Xodps|E8;Q*1Ibkp_J?V3RzpmM@tgtK`n&X@xq<iN_!)Pe`ZOfB
zY!_~60RoWQ?P`Gp<aXOFAOX3Z+`?}QHzd<PinDS1^w*kxgsVAxJb=sD@?tAUD18*i
z#n!bnJQ|WS_Ql!%e5|i~Y@b~ha8d9+yDlJsu`ezk`+)?;zBr~KiXb2{i|&gj#3d9W
z#ctcacyTwnrcR|m;b5HoYrlTB{Gd|`-A6o#zAtgeV+Z5u);7tN+O_9D4BwE#%I9%5
z|A2l=htC}dN}WHC%bhd`0pjy`l3z4Hu@qN6kK>}jR}@+sQmu~1vyDH|A9r;)?toD8
zeB7xm1(f4)c`ph|068AV<%o6E`x;V*ITz3F_*7r->Tu2hp?Gr60ij&zoITp01dwwy
z+N48}z+8&6ZHM5HOAZEqA|96)eH)4=;_-~w)dUHQOY!TQ^KRUby#BN3#;o9TU2Xca
z-HY)Fh5u~#Vvtb$xwaQKq}-)O_F@olY>i_AB`-BjH7I$hv3oIufm9PmFYbm;+$g9H
zO5|)xuz`p5n?r*VxGp}3{M-ngSRI~F#$*p2))iMJ{uDtCAAmkQA%iYRpbt;T`!pbd
zK0JXV1`4_$5p;(qtTBmPGmMQ+VxVWy4+M=!xJM^Ee4nP43*C_kB#mM0=+rWiHjXMt
zP~O;<8;0`6vwwW4w{Jh*F^ZCr@d-J*HR1zid_w*#7Dxb(Phft0h$G;h&_wq2m-@q%
z6CDKVSQDLU(QuiVkaI~RK3payFqhCZA&|HxG%-<UoQrQ86OE|^CQMA!?SahL;39l>
zf!LE{U36~+JeV;#p)`xPu<q(x@nl6`w*D)<O?$9x-_mHBoRB#c<YC0*M7#+fO(41c
zwb$|A7ivVKsfsl}qTkTD%0Zw>y2^0`4W_DuoaUhdgsKE4X?~Ti5$deImQdy-SoR36
z(&10r5E@ReIo_b*^jbpxTtCzR^I8JS3DL;(ZvM4I!#TB$Oou$Yk!K{_vuhh!a-loZ
zX=KSnBhL!(Mt+H+O(Pni3lc2yjXtP+fnyd8&;^cJG(Z<5WPFAWpcf=?CPdd!8_|u5
zMG5xtH+qNiMGgdw&qa=dXl=15;TPNZ&;i7v1kQDy;1C#}OB3v_qk4}HOC1P0wON{w
zI~9%iNL`w!BewoQ0%B>Rc?)wh#hOMmQdcFi7mn&%TwPW<Aaomal><V9bX7vW&x8^{
zRweL0bCUqUsm#U%vfQ_G+02`bM7HpRKG)R|EW5$zUg*YzJoszG4`?<f<nKy>1l-0%
zanhWP_qrau**}xW`96{T`CEOa5j>Od7<5YI!Ml1~5J@Oe{#=>ux~Qv_Ao)M)LLV{D
zoK0W~#%mprF!)?T{3<I^g5>{@0FjVAm%zLxWI>%z$cKY?uMSy|{PjCzY5qE&;5(3n
z3sW!D7J4@y1EBfk5c&$?3kj@#1u(|I#e{qUiTC9I2FXtiAWL_3E+%jQ@FRZQ!QB|4
zt~jSEJO6wAd8J@bF%mdhbvLF;4`Gdd)LS$eQY_OCFab5BSmtUVVbzdg)Q8rtji~~|
z@gPcX*<`q*LM|BYs8G-uPAc^LzcE#E6g&5$UfyJsqe4KV92KhjC{n?FFsOhU%O3nm
z@6=?hqe3xZtfN9PVJxXopKnYtVFKIwlisn}1V@G3GNITIT?H~wnNaNY@m~sPOmS~g
zF?K9kvn4<4rR<@fb*l*&A`io7C{HSuI~E|JJgFEv7LW7t(21w8*MHV~Tsy^4p<y|t
zSf*}``LLW)jD9o2L^CuAs&5qM94g7S|3xqH1l}k{I{6;%g1MVeLmVv0{=G)u+_34v
z5}D6|4Y-3PF>%KkBrG^sg1P)XYSl7q?Uv-Q>>~}0F3L5>O8A;6*IkC&7bi=UGbL{N
z!DkJ$_~B5_V_O>=N1LB2!7%~dwGiLXKBr6Eov-4cobQM;D-YI{k#$3}Up6u3c$y5w
zQ7w<j;KI0}N!d?8LTP9c&4DXx(80$M?9J<qrjL)nk+oEzelj8{FVRB=DkGA(L{FI*
zNW`2GNx%4sD<b((;fQ3QEk7!h96Bl-k!;nPpVOC7=NiL0H#gce8RM8nrH@I<OCgX!
zIb)I-W}UfdpvJQW&5bTy#^XF!7Ebx^_@tcM%lOzEpA3p+CP>mrVj86vyD$}<?Ukg`
zIL=(m-xB}eShp6&(DvZiXq4E!l9Y)Z#9_}X$)va#01{}gB=HorKL<m}RV=Ti@qBre
zgFwr~DhGl3VpTHPOj=8Qu`1c3CI8XCGMX}`CE2=`MtS)(2ZE-IX-<`>Z%#|fG#EO7
zn3fbju7Db0%9xR4ty>vg%V#(cbQNHR13^>9jHKLGh7KTRB=P3vK3)$r-|Qq?)ylZP
z!)yma2gGa#f|9%0Nx89H#;1(gN&Mqu*xMz?V#-*S%>JphaeHouWey1Cb;}$OnlhF-
zcF>fujO-XeQ$`sb<gZ9(541Bzx;m_IKxm>^;egOd{tCwunkZI~C2!G5ei@zQS0}SG
z%8lhphiV6e{`IqJ2ZT=YtCK--83RfHsZQeR=LpeHa8AD^$;NjwMt0ufV9<m4Ee-}9
z({D)zMXpoEkLkB0uWiO(GL+Hv*=<RsWxOHV-Pwq<=Q<mSaxm<kMu+j+lJa>6q=B_9
zStOEfkg#W45|b$<kY#kPz9Y$Yb~f6T?{FX}ecO?gsTYI*u_GC8F1s4-6YNN~YGeKn
zhrp5gt|aSvgYj_rE(d~6(|0*FqSN$U$zXj6L8s}vl8u`1ADk$oOS*fL?28+Wd&~Da
z5cuT~uxke({R3!wlX4jY9YE|&;&}(nLS=M^cYl)g>0-1f-|s*K0I}bJpnuJ5e^Tb>
z&;i8$B>pM3W*h=Hd_PUHueuo5mw)O&(7$H(sRI!N#HUGl_oYk;0^-x8l`)^?5V-#P
zd6M0IqtUnga|a>>h|e8}5FkExDiQ+3=Twmj4uOAC<*Vf6uEvw)UpWYPfdQ`E1TIs;
zK=>*t?xmvcVIX{!Y<it}FGs+?!17I!&FN~~SN@Fy5rGlkI7UPO@r_fD2q3<pdeDwl
znSy_@<#>`czsb0*!*K_q5D>>5h(bUdPs&6XI)FHy#0Bp0qNhjkMmfpW-egSZaLU1m
z0^^i}5e3Gnq+D8*DN$gYN@nWV<F*J1PBJ_CW*WB_9FQV_Tu90UuS_Wd$c1Ep-^qsY
zMF6>w#GP!uD_W-D75|S(c3(GRXQv+>3~b1QEid3e2pB&m<trYL!1ytVS3GO5QUfMl
z-i=NvW3%0FHQIT)<4=3E#bL_mRBb1X17>teX5ml+%;*%>m$WzliN(R_RGqOYvF%0-
zu~r(B!oMg$yE$b_0trcq@8+}t0V5}*<m?X;=o3<MHwPrpC#0~O^SSVNF;++^rB3`q
zmVVA?&4%A)%<c$=ZE7)0o$Q!e46w<Lsl@=BOr|2sR@_ao`<2RhJ(cZww^8j1%t+yk
zod276O=<3*onr0oHHLJUZG(dgOJ}EK4+RPE*{MRYr2-P*vs2hs{+=vtO0)5T6uWY-
z@k7T24hC)TEwBxQ5SNlK|3Cs`K?=L*-;jaV2GzGxIjd6HX7?LMT>iIGNOtfOYVK>v
zzIRfr&I3mG=I^BBArQC#dnZ*a_IN=8?41-Af0VjiOZKcxVUPMgs|%ZUzfq5U`GC=~
zBUr+B5P)ebZPP$<1(^(h1lr0Jl7UgQb9h})U6;z)l4AG&#TemVm%={6gDB-XvTQ?&
zo%xILP}2=5nKgk6tPLrdnt%k>h7?khkI7Znk!hP#?4N%%_BY+^D3Jl1Q}UrbgrKxJ
zg<Y^mQGT<ax-FG+B*p&kLF3`jHY%T@Q!|vW?no)SQ|!A3jXst5QzUNq0JI&p2_S*C
zgG``a3lhC{M=HD<y_OETh=E=kRClJ_yHetyOY)%iVM-o!Nfs8fAEju+f?{kls?EL>
z{=v99miwkV@9E6Cw>FaOw}*`UGO%rPsB-&K^4twNfZdnExf>myG^70PK#H~cAEWCN
z2LQ!q6mX$)ASHii8zgiNq~yg*kjO+1r0U<xGg=~fB6%Ry;2xexN)9EG2U2(5#YbW@
zf;c2bVha%H--qmx2ol8|vPU9FE^F_rHlu9ts}$c?eGCMrWLE--uJo1Nl|TaND|;A%
z1kzVD3~>d;gCCRnCY5s%=Ogs<cQku_lk&v)`V_wvg?ol6rM~z%Es*#MT0C3=2{#=j
z2i$-KDt;siu{p(dKVo!A9Y;qerx6!I$5YrOz{3fUpuSD9>mN0`rN2$d2Up;7Hpbly
zdc1;PiaC?Y`6<PwKWa?(pGkT6&slqdWX{<XyY(@nGIcg3A9jEX<+C(0@ROntf*I#i
z?8IZn1F7>VxtInQLg!Oh6k#wz2-L+Cd!)PZMCzjSIB_`}CwyJG5Zv@bihbGLxGD8R
zN}d%4`HJ`liZl4tY3RW5Kc-mM$BoYE9~~rG3jde_(lA;yT_03mvT_z#*#(aq9wqRS
zg+RjhuCJ#m4Y9;y2oPwtA(rf;AW@YemR#$AggrwntaY|h!g)PabWC=1g|W@mVT>i4
z9$a*yF_sLHAW6z96saOeV2rWwFCnehIR?y}X=Nw=&FF-GDc1p^+<vAdR}$Crjz7~%
zihptwBtT|b$OULNxt^#wmN**#0nIs<oJ~NY_&JuGO+a#4yANMa&Rb~lKHL=qr)n!g
zeR!cIXFYrc(n3qldLV(c&_W*`L=J8qRF_*hd#&vBUWQ8vEVuNuaBy>S@CxDJ79fDR
z!ger7V6Lzo3=)_t$ie*ne{*v1S}R-mjPZ!8e68&quu;XemfV5|$;IUF3V;O2S_?l~
zhG%i^=G3FAEf()<{HsH?13~_+w&Xoz2mzwnN{AIVNI+Cu_U?IeBDY!DJ$;S!uJUaT
z2)TNjCHG(<1(0o)Uj!?VTnj5LYNY1m=^e6>KtOYc-AEvzxx;QGkkH&=*^ShkHZ1nY
zMgjq#J&p~uZ@I^ABzy(Z9=nl10%;F55|RhS-6E)dV&$B+*h9}7hr*v&^cxp6|Fl3G
zsfR4(ON-t5f-$NRe~KuL55PNQ$tVpHc!w-`I|3vojYC%9mzJ0`h`}d~&n)*BmY6go
z4|<<la?+42Od5wRnlvb(Z9y&YwWZt@?`pC8{%PD<0Yc2n_=GxsZPyVb7nKP<NML_$
z$vgfaF$;WcS$Fb{Y9htK&evA@4s)NVExN=B3l}jqyO{Ye+*xVzqOrIP9J|tF%Lz;V
z)<p~68%|g_GNd2QYeAjil*QD48TWQP<=9Al;gsDcAq0q1mi&zgkX)%{E3=C3GPMk<
zzganJ(rn7VjBd&%51VkO`cSsR{~B?HU3gu;H_{T?zgc+e#$!}V8bSloJVvzw0dEXQ
zOJhMoc0gLjD3B;=KpI2nkOFI4qAKdJv@#+)bAa)ns}g^TO5y|bhNb1zB9PD<mX=qG
zK%!-brAtPn#nmEWP|Lc9r{&cm$$=|}r{&cm$pX;uG_Drm@fym9!00rt7M1X;MK8W&
z)M*0RHiA4oIxVjjK^VHD(>QQ?n(KlZ&pvp`=v_A6Q6bNcPs{DOmfW-B)7YM)f8?em
zjk1Yp_T(U={u2|^^5;guh0esZ9GM^iJTWbg0zsn3OiU+k;&}s+Ja3qoF7C?n2Fank
zVPg7*E_{97lE&oZG&?`YXwzYGTJ}_MIa`KIkSKR@TCO8OqTI=8?6nW0e%O*?(9|@0
zYOpc9e5!*%`!`e5wHUO2Gc_F)n@G?B#?&-6k!ZiICGFo#OS2|JjIs{X90=OKndU&y
z{>`*>P%NFG1Bhv91jyMmjkTn-X>K}OHN=?XYBtw#G;P_;P0LM9NI`3E8uK^5QPmP#
zHtHK`<-ci$8&%h3XACo5bX9_3w=C_|ypfiH1JclbBONZ}*(OMIuQ$@s|Dt<Qwn+>g
zIF_W{Z>B}ykUZ!uP0PR`SqL1<(iAu-u(qUapSRP_d$<<hz_DP7*8(76%G+r<1%d?R
z+i5$xwxk`ORcZFs2&3k~RgMd3!)KM_LfY_Im6nqqbbzrcjkrn)9Db{AT{`E3v`FA+
z;lC~|e-AZ8Lw9{z5x<AZ9vx+<DUjmlQ1KC?V|^Nt<u+t8AsP(TX*PJ2aeJy7Iy`>^
z7edu(tYUCe1wx=UrP<k0#vQ3mX_>!)%h|}^{>p`5-sUv>pV7vHsm*Db35Iy$v^ky5
zNF<Dvt!ei0XdrD(%O~0)eul6$jiWC7ItGe^8@8p{4P%U!>1}D5c!G=KwxyAHzKM9|
z!LQUEO6QzK9~xtn<pvK??dh>|m}>tS)jrT)y`wHj)DX0&K1iT^M%Aa+;9;u%;WWE_
zg3&Q`I4!S_feWF-G+43Q2q92krrDwi#{H=;?V5qh*{IpwTnN=al4i-5jeAl@Y#)Vr
z^^c_Cqb^(s)&C~V#=UIZnEECypXY~p^}nGpO37uIs(&oaF1&1XP900j3=~`xcPxzz
z6jK+3(A`d?**z1D`%)*;GAjlbLMPJ5im}@QA&k_MX|{Qyaa-!7BSg=gPm&OZGlVb{
zPp4VaNk&=fwCupdh0tk=%{aaRiOte8Y4-0)Msw?o<0twxfHUN$6_ml_NA`Y5=L}%G
zCK>Mpe@Nqs9yLgW8sriNi)av#@HuFH7)W1%afvEVzpEXg2Kgz?%*n>Bsh@0Xz=hCH
zWX=C^AyB`jS-;7~e^S5NO^YA8<7_l-XD);W`7O=-%(x--o9)I3Z;;=}jkw~B;?N*9
zY4$8L?n>9B<#Ts%fmD;ul$zgB3ezg64$9;#$gm^KI29O_K?=j?$W~Odkr_TmUJnB8
zHZmiF5lGZzWJb=BAYsnP4CYAM9&JU{9K+tIGTOHvlaY}eOdyQO$S4ewgfj9L5lA46
z$)I`^g<DZ&$Fn+9jiw#OI|$S*#%JWADP({!K2t|r6afi@@flnc;lF;<ipVLM?1ZVt
zXjjuI898%-4Xr5|Idg&JVrb;eG=sDvmrc*G+ou^@+D~^%rtEThM(*rF2pH2dagp4D
z1jh6Xl3NO&t*D33WD`ahi5B=9iZe4ZaDs&5%!~}2AfY%jV+YPwRKNKdv339fQ|3D+
z&?GkBaUV@$^D{DhLKsN%GYFqA>1fl|h@Y99&oT=>d(ChM)@AIaLu+c&YSE_6K>)Ja
zZc~tethU<}Bp|D)P4R5s-I|>JUWToiW86~qo})vp_+Cct!axW*?`5zB(vj<+6}M(s
zv$;m6u3PPzwC1;pw%RoT35cy3nS6o-#MTUw&lQwzwFar~%qV*@?)W_Cp?Cr7HP850
zB|eDR5n@2unUS+2NTBS@$g~<HX2+eG!aW%=I}(G>jvr>+yE9^TlsxEtl##QeWMOvP
zm9b~X*3?5j&WPEOjW8lDz(Ko#C1yvEFy&*rkwF6T<Jv}UP2J;=Xyh9~0PT?D8p?JK
zIj*7Za>#CE2m|R5H8SoDyW0fSFETloGVHqr#%+NwGJ2^Pw{576kH|I#0mLJ=n?M5b
zh~35@fp~=4_<8uc4YkCv3@ch_yij(`(V;dzmNCQ|5(q)(SO#xM=&-5{jnr>5Z0$nh
z{<3c~a^DbK=zN=zKYI-lI^SlHAYl%G4ye-^)@hN^xyfm#9BRVT8TpHr5aLn@<TR?<
zklW9SQH8(Z@UynVK|=AY?QoD#JX`DVHstUhgu`zJ0h}LfhlAuFWl#bMq#taDg9OqK
z<nV{#@U}tq=S<EUrLOp$?A!t)%xb>#<gtg}Fxmuu&gj<&@3$rIUzXkn0r<;y4M76_
zvh974fWJ)MZ-^SUC70D?*z-$_MonrQ9rAvSJ;ERaof;ZpcW@ne|0VX}663D2mrCVW
zXv>}dQmJe(kWhK4lpg)ifm~Z6$7gR}YV1}zj4zep8C;k;zEpYwB#IqhDidvxq*RJ|
z>?DoKw$vJ|H2cthjeoehG6#e<IG6)M4Z}+1F(;G&!b&ka@uA%o4WmvkRc4p|zeBr!
zCB6a+pTz(N39RX*a)5&b*7Q<2z(HbwPcJQ;T`C4RG57#~t<*gWkB{i7vgAQ;MyVX&
zl7#_2v(z5oZ7B-RV~@?p&+>irwxKqiS1Ly~zQBfgr80bj1lGJ#JAAjLgk*6k58t<d
zfQuG8o}mTAV#hPIfLL5A!#9M1w73)<?I=yj?SksE(wxocX&u-XuNe{c;0j}VU|Fed
ziB8szI@vp=Vv7v~px?0_1rpHjl**|YB%t3ZMJJ;U(~dgXyQR$Yu5oAiyS8=U0^(iU
zI*?pS{?0u}K)hRu{De*}+tG+$UCJiBYdqY3wF5zJTU{!jcS8set4r&O^HY$3SY0YF
zEw&?S9d~gH{0+r*wvRzVah>gBkR)2`<95{X-V;8)@&Bvp>Z7BouKnb4XLQc13KK;#
ze9Vx{z2{tnfWaU_l1WG~fI!7!mA0-HZGF-z$rHPL@A<m2L}?OVX`o2XYLi+Dw0t!X
zTI>jdE?rP!Tfh(mAwc;M1B4KG2@KNp^!@fZ=Q_Us?%sEwefHg7=iKuNKtaZZ0pcrm
zXTE~GZ?~^wyalJ-q~o{lf{u$Kq5izU&r_)#;S?LxpXYabib%I<t=mEXV43!H3lJ>R
zzHR}6Wtw#RH`*;(MBm(=NPYb;;lJNm*q$(M1GK{Dj8bFn08y$vfqiIdbypGe89JJ<
zPA2T=Hu-P0;q|E-o#7!_HNa`#2L%`$O&H$?2nI(J#`gij_m3t9pG;`qCxr6-V+s32
zLi@hKp<HLe_`X5G_m3yY_kWYEJ^{_`V#j*bu~Q8v!p-6N0Q8_yk;)K@9g`sdLa4=#
zabbX9zSzMJ1I>N_giwo}yjLAPXGaJK1yjG`m^r&5vSqEKM_B>jU9Iz_&d7MRjtMoq
z1@~IV549r7=}R5mQvv`+OEYp(;#iuIlM=_$jGUA>mO5~QZVI*HNNBke*yzZd3*ifc
zmOK6m>|$~Q>8KEsn=c{_NNoO52E;3Hl#YoofZ!+{c)=0sLKc&;njLxeV))~+&6z^v
z1kFxZU(f;~6l!*G^8L?rAq3SbM_%j>FU?<t%}%B!;<d`TMXg)|XEOXM2P@a8Nh~I4
zjn<!h_Yy>0<Esy^P;iZ}K7fkUS6?w{euGxuGyn=RW(ElLZSd6x5S%vn>H`Q)8%TYt
zaWIozf`e<Ezz0rNv{JUu#5t(Hxf~3pW?c>kvj(*|{{G_<Qsy?J%+Gtnp$Xf3z2Fu2
zZ}XK25d621GPh7eQvwBqb~x6%jval&bpK9Y2`{bzPFn*MV6ek6!2u8qb~q+D0KyM<
zID_AXAJVu8Ayja@?bz=)Iyejt<#swII1CEGvCHurh7wAA?>k=^7Xb!N3zY8p0fZ>;
z`&tJGmhXS*v?T<#X{}cRfY#f5rv(VDxA|HJ2u^Lj)&Z)b&^qnYN@8Bo32b(=qBBY9
zIdVx~xXAsxgXV!w4N79&+J}yH$g%0pj9UQfb!!SIyZXYZ>FthPsmA8?JABtc$1eX0
z2Gw;C#^-m$u{y!;C7&IvqEND{Kl~pvKK_4&>2LO^V<$80$Rx)cd+L|${^3|>!48AR
zMm(fIg_9evg%8%8a?G+iB_65$v}6A$!;chs#=)iKzIdNF)_L%wiy&1IBr$`c#d#V9
zg`RWFwT~JDzMnegf=P`5-!8|_r87yi9=jc@7mR=CGsdY^3MGf9!_O36a_o|fRP<Zj
z<Cw#j6hDfU%T%ZOp-xg1^yw%l1OS8g`CbeV^7Z*)01!p{C=Ar9kR&-)+L5o_2rn;4
zX9|()r~RA)A{0tfPNAb)lccwsjupXzr_0@8uSBPDpiwdKI>i74kDGpq0SF#9DaCw2
zOBRy=Ln~ZsrJLIJS@?g0HF);<kjJiYO>+Q3@LA!S<^Ul0tZ+?p01#og!p&Rh>gIqD
zx;c2=MRTx()~qEdE3I{{;nC|swV&8rmHGm0e0xeASrmVB9J^o@gUA<xT8*`?nJ@we
z2(i{3sN)eJgjnmM<3jl|Nguw>Rqc(e9>79l*SRKg@d^dkxu&@Rh=S`}KVK#(%v)U5
z+{ia<7D~2cB%uHDmW&#xi`bG;19cHwTm<g#ZbRgjMne1Cz%@5@)@Ex$gZ8=D>--80
z8JCi8bhs(`FIX-zw!<~a4QR0IaKmajGEsqDhfC*?P^(c&wmag=8Mm>uV~=DCky{*b
z%}+UqQ0Rz@UxwFoRq%_GZff}LSawlx($y=U!HbxkbO)<RZURy2BpI+xRds715<2Tz
z{jNNA2m8ywv+k|8vxk)opgZTv)`4tJ{yEpyC+C+ccR1$`76_#vxRE=YbMG0WRx+28
zrMp}?b`UEn=yGk{CISlyy4<_;s5(HD>2k3k33p9_1@wHuwF|Jw_$sz{$gP9e*nA-L
zdCYi?!WY~jdO{Z<3SV$Bp-ZbDO38rTuDm_Mrsj9Mwpxx(Sd{5@v-M0eK$PirvFMN%
zLYGo^zQ>g>M_5UIkBd7l^_Ni3y~iCvIf6cndhR`LQHfCoh8ufb*%M)N3VK~z`(deC
z-rwuyj5TFw;J?=`xKFLoE~U}OtFB!b9j8C+)ojKKfba{`xc}8mVH)?pN`>hZgHjr+
z?{n>Yqh-2qBtLkUTzKM^ko?-6Z1_05(vznk1e-qhZhh`OK(Og^^T)B}v=OZ=5?aCo
zTX|~UovdL%WC_P?K3#)d2EPo|a;sk6yqis~!IK^Z03PgW`5oHa0Ku-7V<ips{s1D}
zYk9Pu>&Y%cs41X2j>XXQGiESw#X62TJvzb2plDX8j+Z1^iaG#g<dw^~H6yy-il?>>
zVFg)F0My}+m$2(HZYG@pDq?e@Hb4lqjAI)GnF=6`vy4xePKU56P`$o?8e6Puf-sFd
zRUTynvcBJ#se>G^k()eMroyC=n}1q>VA9C(Ppj*o@#aPzD=>AaIi5xyzn6VM3*yQs
zoo?b*E4QPUnVj_^)}fY+x;2#g>rgf?Sc5nIhf#9fl&O@G>!wVl6iu6`Qmt)DuA6wQ
z722jg4r<YToIh}T3)g)dgG0F%Zu&R|g+9(^PJNtHU!!4eT!Zpw9yq||=8^1V<j*`f
zRIQsCObIH*t$Xyk8Gw)ou!_|nKqxQ8F~EaZ1&Eh#ad|$MRmR@pmRf90SP;F%vDmsy
z5dqrH<?K8*CAOVgqez1wqGoG5$KMeR&8vG%c5t~RkKLEIgIoEAh_-O-;P)2LDpn97
zoxIJhdvlT8Pu!9%vCe-)3<#AA=ryR{=3~b(oHqgxs@=)uHxq19Y-grknt|9!^=jeZ
zSi4Yf0>bUe)JroEyQp3S2RI=^yu;-{hZV=);pSXpU_tZ_$96*;vO-jFi9I~^9POBj
z@8Oop0)z(H9*)!6J8VUUG_aqip5Sb*72ltci)JDAlUxrYPNzgd2YKK)m+c;#oqdqw
zcZEh;r%;$4;?`j<56orv*8qn6K<FF-5C%EKbM&@&fbfGu95VpqKLFuBhj`*J{D=BW
zgiz7?ksqxF14%yeqt&1&T0f#_y+*CX6f%4#3_prpPj>p=3@lXM>3cIkMP*hf0)#Z3
z9J5F`m)r{C9-31;aD&U?quHu~r+9FLa=^RE0Z(&T{TSm80I)dis~jLiJ54I5NuRq(
ziZfj1jA8k)Gw=)LG{A!B45b5d8r<!IRSjG|J%$zLoy~C4XmG+GJ%}LMC)~O(cc}KP
z_Ax9w4urNLUW3UeWW!plJpwr#v7e{xeEQSq=aw4%AT-GOIYvLo#Q}nAKQEl7PJ<>8
z^7iuyl{CSR*HG3qE@u?5(RtT=Ck7Tgu8|WjR79}vb#4{qeoy|^!hhEv3fSXuAnrF+
zkfUDblP0s*VHfa(r>40~jAtwJ(iyqPQ`02ZH{o05k<dSR;1?n*I!%rojTZLGcvkHE
zlVfuYb%)FGTk*26mI#}DPKS|}o8Jn;r5?GD{Uq!D#loJVJV?I-^H+pj{S^$p`&EJ8
z3Tj`=$!F_?^_r0H&0~c%fbmU0=#wS^LMwG*m~NZ_qHvwSGB5I3fbiKm!Cw>FX9=Nv
zwqBSP#$X^sy)Z3|L6Oha3;3-1UoVHZgc`7oeYxB@fgOGZk2(qC1q5mkW*;s<2-F~Q
zRStp#<hBh0xj+j<Kbj3<{Bj6H4IJJ>pa`m8ChT!^E0bkcL_&=sum&2g&x*^MHk^et
za3XtYP@}-{Ys;w-svs|K5~=2iERr>+Ntk{h(5Smfm~&A9qV6VvUOKfp0Fh#vL`2_X
zO(6Q#iUJ3l9npMIeziz_@c_edIIA;!>6=yyGgMrmzG=0<P_gDqE#_*GJxiGoZ;3Bq
z?$oDL8VtU1wHWVLu82_iYLR@1rRivUTm;l20`KFq&*NzO1&dOLCu8a{(jv^7%pvsA
zn}y}+wgn)B0<5Ojf&fv$W`XH7EC&XNm#sp^O4zsKt-`bjz=EiitWl5e1r@+IMe0}h
z>&c403EnC$fL3^f_ZEtaAr#-+h1{KFt?})`9EJ`osJ06%386c1K!vd0CFJX+>_B{%
zu#`s<7F4^)BX?^m#O-@RzEZ~a#NQK^UQs$k#qE0n6Z@s`fT@wt9ufGfkk3qECE0rf
z79>$DOr==ZE36N6EXd1KSf~cD?z`bFzIm@OcP{{h)O!U6<H_>?!t?fu+z(7B5JH7Q
zn;!}W1998@P%tP8g*FO>@4!yD{AiyDd;~kqj#pI4MdfU6WS<BoRQ}B&BkdPfq2Ac}
zc{vNk0O|~fmtekMAd}$G*B~x4!YrDQc@=D8?0~Q)D&+$Uq5}dmwA6a$kSRVC@;@tB
zaqL53G8eE4jm$;M1#le^#!7`eT*1m>?ZTR1IFW(c#RHQ_dmw^+4hlJ8Dl3T{6eiyT
z3!;Mp`JUEY<WO4e5OT#-HX+s_tRlmS(rSlDmZ~KT>cXKzLY|+>D)J6xh$x#LBBCF`
zh7V%Rp9q|Qnx2r=<t!=}JjiBde=IP`O16BEY<Wyr$4y=Xj5Gp-UPBKM$~h)-^`8+y
zeBm*1&uC>#fH3AUG3K~2CLxqDJAGps3?%CGjcHJ1%uX`q6>3MZ_2P^O{7;sUKdEGw
zBWFY~rVJS+L!O1@bhH74Jb=}YK@cD~pB1<e3wurh;^jFZ_fBI)BhO`s$dc!XXt*K*
z^r^5W$yqblkUS~^NcFnGfb99HnD~Gp#n*NT`Q7R0p>+w<GmNT$>k{Z0CKNx|^SqGF
z)0q=H?;9Og1%cCfGCHm8iIP1p3VCWen;E<48y#2>T_mGx$)NgfAs?E7>biX&!+k#>
z>K5>^xZ;Gy@sf~rGuX)3B|oF!pd1igqKx7wBBa6|A=_p!H`XI8b!`oVpiW$mz%oQl
zL<>oTyzL<nUCyXLEhHfoj8vTP%hoI8BM-6M@AL{wcM5Rw0yy;wY!B0dV-3|6RFiv0
zoL5&>fA<IfUX25NzRy+DgnDW96yB??ZUmz66)~>B)PUV`SB3l#HRN5*d^KGsaaBwz
z!p3yVu8f4PiNH;G@uTwPN_LkVHIq%xz9w*{J$Z2@d2w1;pBXO(3{?W5kJ|wV0n%c)
zJ|h?)?3$)5M=1#)yf`hyXU2;Op}hEp@5KfKiEj8_Y*6IIH^__ounIbeJA8iX1sa21
zR`e4)m7Il)Tr)Yo=*Lgt_~p!5bu7NH>V^2MvYFT%F>7i?etcHd!UZqjaOQ>oic<++
zj6Xg9c|*Ji&(A&^fBN~V=i)f5aKUppo^BBxafneS7XR`DyQ=CRJU<@{_@a2#iwomV
z{&>*>oNc&hG}TiOubz)%5zSGE)z4SGQ1w*Rvp8mnHXG1Zqn~;v)P_>1)p{n><d%n7
zXaqnVX?TgRuk{c_)YTkHVN)kN9%lE9sPjzp0128p53Yl5K4<{d%VBen4C_79rU6M<
zkN!8P=^IKZvmy0gbJ(1$Sc7L8NMJ$L;K7~C6cIvfnI|tj!luNRc_#S|RUx*_LtwnD
zSs}(&da2ppU{+RqWu`_7vXxZhY<SYNNa&Yd;0;e!&qW^mr3Vk9f0AkBK~0|ZYc%U~
zS#b>>weR2sKDEg+z5@^fH+jZ)0K#{gJn?H!_v{Fve5ctnJv)Pe49%YD*%=i1PO}H!
zIZpi!+)DI&FR%%&vu{8=_1}+TYtX>od%@u<4GtsQtb@>xu`#iA{-*&8w(IEAD9PY@
zpoqQRlRF<{Gvn($)9nWqMC(1eXp36@VPt>}o)nL>pT#z0s5BZ>^A!=ka-%0Z9%oO+
zH+m*=hbgmc^l%^tT~s$c658wq{^ZF==dpR&n>}nnqF|g(s%-VFKYG+vo?L@Ry+aHy
zAYiL!j{63PN?JXvY@{#*2vxRv?jMaR387TE)mNp#K>n@1Dh-NMxfQB>GNe3w{K4x3
QMq>=nMTV9yeTzB&2jM93LjV8(

delta 51781
zcmagHd7KnQ(mp<2(_K|vbM!saT|IPH5BJp^a(FNtBCdFV2d=BTD-JN|>~ihQ;PJk@
zZzHFIAaa-pA|Tg-peRVI2#A0j11boDAmFhoD2ssjqNw<LA~S1hV12(oKKwBemHA|3
zW@Kb!W@Ps2pPS8pwfU&AuCdD4+_CO8o?fM{8QJSgJwLczpJ%%@^?Vud&u|-Vw@Xoi
z?gx}1ZgU*#c$Md;o2;P~H5FAAgRH8G5yPu$tm=xInjsa{)__N>ng=SZs*yt~tl`59
zYw+-@^7Mo4(zjMs4y+t@e=Dne*dVLi`rF9zVKtRCk644tt62AE^`dC`u<{{~R0DAM
z$Qo<-V8a@KlxeF6>wbmND7))w&xUC3v?<~2<U2h38z>iy?4ZASW+{Dwy^NxY>YB=-
z<uw)kYlaW0s45>eu%iEf5!F${ay9c@YrJuTW_qGi`!vhB!E<}qPTS8;dhLkn$6T(f
zm$=`!;dys9x5jh3D`W0<8LdVLiPLrt2R&U?@wbtcRTb6!M^sexA33bDCRp~LsYnK^
zvf3&iGGzEeRIgz}9<d&JpkkOcboii(A@u3iUbpwZvrq4S=Dn#0%B!2zJWyFp#Wnhk
z+BCQR{&%!25{TSo?9Vlx*6hxap1VBP#*E_r*)=0QXCBFW;e&vo1wFBxg)OqHzV$4d
z?fT#BJrmXGxed;El<z%m<3rWZ+^ROgo9hayf@i+1GGmH*CUaM1%>(El%dSi--k0U~
zR}8DM$_Eat7*SJQ_s!bOtSU6RRbFFQBSuyYL=8aj-W^$uJeO-m`TgaU!>R#f4Xmgf
z0$s2MRa8|zh?W^#HGC+Qlriei(-z6XRbf~KeXFXV1{*fq&V2Q6h{hEUB5@@%P|$D7
zQNyzi96qdi<WQ7er;3|%Q6o0BKo7J2PpUWj2Uk8^PuSsu*;`Mlr#hbXxSJb(Lziuc
zVey^EU10?3IJrU3Igfjx%b2EM;HXMY(EU^P^Qmgs)%quoq8kN<hqx}VJ>Gy#<`Nl>
z7`=ENe7wjSO;dl@^P)#FWEz(TTu+{z#YKrc!D9O>5H5PmxUn>kLqIU5Dn;h3yzGn9
z)Ms6WJwk^M%ic9Zeb3cR^se34yz8h1>jsfkZq$wPx(;?w*xgU7O$wYYL;tWRo>sep
zC5KKcYj_nq09K*Fo4nV<P?BNySFnam?G&h&v!?v7&<FMxuw4e5&(v^+G7S5_y6_>=
zQ%4tIC17c6bd)~)FBJo8NW;o47^$Jw!1Ai9N*E_zJusR&YV3?^K3+-D3~S`D9zxPV
zX}j?imA9u?wzh)CXDWJK^rnKwhtv_H4R3o;vsrMK+OG9%Rq@L-7;o;`YQVBdN~AVy
zWc1)!+(GwTHe#0Av&&qyuE*Udbgr70kXhV7n5!n6*(4C=sx4a?S8xPq$9(qfEVX0V
zd<Ve;g!yV-Bbmhmg!yXYHZ}=_`D*(sjAbqkfy9eh`7`PZ-4{C$Dsk1kxXhyhVzF9c
zBdUN{tTt_Ctn_jSEvRNy<<0EPv(**u4F0qgUPHdDTBq<D@@1*Te0(@)I^`>RQ_VGk
zG?ElepWrPFs;{Z;b*cyL?6rBw_c}yEvO1O;^t_>}8(qf72`+;kbdS=MVsm%)p?T`v
zzBCA13LR36(!4=g869Y&v`CS$S2Tb(=pM%|zNqd?k8|>Pk!PIdEs=S=$TLn$ri?ja
zd>cXcq_wNm2ClM6T3yc>=#5EQ-B>jMF-Z%iB!mHoNm`>O#!^viUeG<2-Se`#tZb?S
zkq3yW4n!UxrfNZ3eewV?RcqMTSf}$k=Lg-3vfW=%%iLv)9E^PQ-6E|{f%1W|NK3Yq
zV&ns3k(O?2Y@{h(RSJUcm$PrIReLC9FFP0oz<61!Q=tN2ysXu!PysMr*4lS4&WfrO
zqFdROudC<EvJONcAhKGXEqfs#vRdj2DMle6vRbDrjf*N5!xwb#%vQdkj>_%6)4}io
zW2cs9_nZ$HJGGFll|EqX)Do8Qcmc=o2h|grax&X|gZh}7!Jqax_5<dGmRBUp_5<dG
zR&4jJA227VZ-rL+p_M1J(vw=Q)IdM9GKef+YwkAnSunQW5G%<G4+P!cYD%dYfK95Y
z7*@@G9_sb6Zd+Bg4fs)6bO1QtYB9U$0E+&WioPfsG8lA!ud$am>pxzn0-mV4N(7-A
z-#e;75`C`)Z8H%B()U`bq4BiWP}~@hQ}vu5vM;}*&UE{y>Uz|eK_zH3G0kMZuT`J!
zGE<k(U;=ukE)^Ffpl9mAB$pW^pl9l(4UHQ(0zS@S&336bmd$byXquYkAkZ{5OAkgQ
zf(r<<^k~c&D}+GRo@FoXQpb0B)`3s}@vH+u#`ak~DEeAc$k;xsCz8hRxDcS`vA^wB
zdzZ~~5ORSq&p{yDJ5LXaUe}ad%A?0jW1)vbpmkr$p5Lu5R=T|8V7P(tl7m6k_a$An
zvZlC!@sge@HAZj<q+QJpzOPo5t#%MR#B~tJ`mWZ44P;YzfUsJ(QpRH%hk#~o%}&^(
zPR#ATRae3?71`UZdPEp~O(A=`Rfo~1i3cQX-B!KzAGk+C<OHuD9Cq7&HRRu__q)@W
zB&w(d-TSjO`_;)x*?vbr4Fc|W1SA{1-|20#(fg^l*X42nQP#0+*MsVMSJ^QKLx<eQ
z^gO$R$-*Afi-f6z5e3FEy-{PMR$#!wp2%K#NZsu!JK<n>A;$?v4zjo>oTes=dqRgo
zzaVr57WWjp_G5Kr*(nEtEbb`>f-LSSJ=j>b6It9-db1XMglY;5?irn(8R|7Vf<Oh%
z=yF_wM9wq19G4)G^NenfOHF~HJ+Jd|*&75j=e#3BK4duW$Ux@yyi*M_x96!E;|eh@
zVOnN+bKdc~%>ON58z0sq*}X^AuT}pnuO2tvps7Wt5&B$q*B5FRSNb`xoWsBc>~mf@
zlY#{7b6(7(3#f&48Z1k)oxV~Ry3$LWOf(Fac)f+ZJ&*{QmUsg}V=gtRPOH1+Ogo{@
zOE32-VxWPEJj=Z$O=TV$cgwvkS{hG?JRo0W`%b7+(l0vY&`5jH>&=&WXr#U9_4$pN
zq~p4R_FA8v`nAe(JFNH0CI=Up)_Y^Z%78?s^<L=Rc2Og=>Q*o2^Vf5k>s>9xtUa11
zTYXAh;c5%MnA&xPM%PxaoZ3MGWUCib`$t8F;!%R?MQ_e%Bir}1dRJcXA{5SOWw<>G
zwehcBr4dU9jK)ns0tGa;%JdZt^DBum4m|=IUq>0)+@Dp|WsNdKOA#B%Mj1%<79<7@
z@=+t({1<hT%X-vMc*Tg#`AGJf8#3hv)yYQAyIJE`wX@=%Y<R-P2DGdvmt>m4ZgXjG
zl}<4fZq|v3%u@^)oarJFmT%JxWi`7((WYha7w<KsBUz>yFprqSh(s~d3~RNKOE!Wt
z_Kio|OgG$D&=kfwd&lRZ%o&E;s?S1YXBzH?^;y7v+Hg0n&jJ?9T*gB;&$^6-PJHGv
zFpRs|hP$*r7|hfh!`-ev3s&dZ%LIcFnQOS4I;k?_;WxUUGu+J_-uPUM@_B~4NqrVZ
z@BGUIgV(d*vQ%(lp1%Ztd@h`lg_nsBL%YauHzN3q-HMp{7aQ(W{UR}uFS!gq6m&1W
z3@jXU|MRl8hy>lsE~`-yMqqvT{k-2+7#Vkmx+1|t$E`HnSJh{s<6bm`)52v%Ds<dS
zhWncOsnBn$>Nh`9q2FG<EF=2u6$2$M7K(_m<<1()o9sG|wkU(Y#Nf&0>Yg={mefSp
z4>fC~-mKF^C6{aBYlI~<QOOmW_`2av)MueWZy4@meHJRTj?|(fA2ER5XehOYo87N!
z?KAk>79tl3H#$O~)<~JEtrH?w2=SKTPD}V)Da0m61vm>ryzS@?X90WjWvS4rTQD42
z)(1ngZgqN+=R~u<Q@=>jliLk<r@D-yBX=0?vid9(xzliWGkWrR19`WhG$`$8^&DAU
zgKd=ZhbybEVNBDmNa6$cHPPR0<l1e-ON`rKcicgBkCAhLozS#fgL@2*pIbsVS)IMG
zRooJ?5xS-(K$>L8J@^QOy+(tCVWC_%*})Ik3|%Wtd|)Vi>L(`Bd_Za727?5(kL}a7
zRAQeY+!<mLm(rwo8no7a7V>Hh6Z;K?yJtv4UACXnwB~70#}8RQuhu5{p@Ty;`jFCG
zhZ=c;>LDZNGxoe!>lr*`ctX5J9;(q{Lutxu)CeS`2F?914@f{9hS4`}Mll|$(#Nd3
zq4i08?4+S8eN1U?<!L}2VJi&n_QVm}FbivcgwmkffrBa?WhHsqqlu#q4pr$WrRmDk
zpi0Nsx;(9W;+Ub7@+S81PC7<uI`K5nkWW}FU%N8#iQSPNn#kOrP?~Fb8jQqG+3<Yr
zy5y&Z!gqoo04*0jr8LwuYEb>c$oYot%}3LGVR(vo)9_uXFAb%YXd1B{1)8tWJRkw_
zrGcrw5sFc%X})433bZDPuk3jSOr-gW($EN0sb7z?H3eGd#BoF6y92}|E~UAKr$N)4
zVBSKlEO7$e!mF+F-abKTy6`k;ny=ZQLal4^YrAPw-ZWoRnm@pE@&?sYM$RI(sZhJC
z@hL<10Vvn)#X{$-q5QAmHokUYi_=S6oH>HW%6!_14&NE>7Tix3pCH;fGLp2HCpZxA
zd*b{+F0+@kXI%Ckzji?>8<!^+NZ_Jh#^uQc5=gYoxIDSM0SSz8d05_j1=|P=e4WUi
z3TY?0OmrY<g*4HDAlGbSUQjsv$O4FodBst_#`01NPG)Pv+KpW%I|#Hun(QD@F_ZJ;
z@&;LeFgXv)o8NO8Kuu*`BHACiPjwJ-fiN{MkJ`=yIcdt6n&*$%B<0B~X<%$5x6KQ;
zO<j<uEX?kUXd7||;7_rf#s|PGa0DSoZb4p9tZDHTFbnd;1VAY8c^BlR7UqfNG%>Kr
z108-o&pp)G<U`*YL3LYR&STkgG3_m_@wPlY#5)&T+Unsv<yfBESnNgT8nSbVm;ETE
zEpm7GI1l~|^`-cRW;>GS?p2QiS&rtpyBo`Bm%*UkJ(+#EiPkbVb23j68+qWO0w?X3
z1c^*1sU@kEK*AR}nHRrDpn~M9t&@2rcaw$Y3BW<oC-bhl2|HBKMUlu&rRDwpE@Kkh
zNHF2Moy}9u=ef-bE-U-T7Mk02I~bx>@fodp)^1gh5bA86T>pZEP-pXmgGX3s)w6ll
zdD*JOz$OKR_>R5YQVVxEm*>9P2pMQP@x@L1E#K#1;=hE6Zus9kcOT3UBp~MW3wg?~
z%+*S}HG{uw$w=`oIFga#U9kHbxqy7Z?r)Hg>_T4Z*E-1*DcMhX?zXaY&T<z*+@Bpe
zB@<}BK+e>qNg?P(5|l4W4JvX%_Dm~ny{pZHd_|Q#MfyA;UlZz$M3gE&7&4yBg_7k3
z)u-}vUdtXyYg1gIr}Fgz<8#vUJSc^_Fkg8o`#){9&vG;PQ!Fm<0eB1Zy#fy;@D>st
z?Gu4SMHl9WU&`k`HfMZ5KK7z~cPp+Llw=S0)fVRq@0lk83%E=2g^z8s&=yPc;s0bv
zr({lm{WD+qnl=lDa#=nsTD?^0oaOn#hqqIqwO$~wda2-JugG^dsAFLa0)AzES^2OG
zxL?e7-($=oOO{7Hy_ya0sLk%XI$zOvGlNN7YCjquAc3<w-!BFeNDP<N`9bc{&{y<6
z*^AZrp^iow2Sru0><^u^ZiBM<ij6`=W%CP#J<Q`umCc7e6lFlE@HKWFAA|TR#$Yzz
z?8yh5<j{c2=6CO5OrQ?W52~B;a}H&H>ZFZ#HQSW0(=KAJJ0DhMbH1`I-;L>A11V+<
z!7|HOyRa5xZ(oVs%`N%v&b&a824Zi`ci({))MYLl`n;3xe#vDtMZNOLxa?%juF{%!
z-<dBD0Ki1OcIF4fMhQqX*3NuP6;v;fsMpSXQ&=n_xoz3Wp1Mj4g?HxnxYkH>Xn^d_
zS8g^fb~0Z}WkhBdx*1$DmV`y!vO7O4*6|=w((Zg14EYr$?asGu5*6azf~Cyv{M3!S
z1(BZ0rWV|t|GOKE<yg`J6LsF7uQWF2<XZi3N;IT$Aa*t@vVXW*o9*g?FTz3~9Yoom
zFZXFdLX`daA+hxf5~A$S$EgQ=C4hqZh^4z|kM{h?L7=JWqkK8TA`K8e$`6YE2T6JI
z;mYm_qGt<&>ga-;69q2w?O^t77j2E25l76o^tjuquEAlTVbMQ%{QMh-xpeF!PQvOP
zeEsIhp+KUur^;dCAh+I8DV<L8@~$6bH5*hhxP0W08mnE~#?7yxgR0>;d8(4<zC+6&
z5l91ZD)k5*QQ1e)X{%2K(2){HX={6GO+7pzJJM5Yko~o%_PDF@=mI$-7C?8$6)2Av
zxQ%(_?i5JnB_3PZOMC9d@dfVoyo<#r^xuR6_bps!1qV9&Sb_U77at3RH@84p0KCzL
zjfZK9c-fiPYc5a6=L)cXq#2fHC--k&0j3rj1cC#=`33HAF5^8i83i;7may8Jv^`yx
z6iEF56Z)~FK<Wob^zM>^keFdXqIZ`Rz^(7V5%6&tJ9x9!Y2dN~MHt@#uHDNDq^|-J
zS(X*RS0U{N3GH51kmxNWwY7U$LGlK!-IPFT_p*Xs*BjF@Nh233vmyJpTeOI${{}}^
z(&Y^W@~{AjAkKz@;)b#$(%uaPO~m#XzM|j_1<mf{c9lpm3vVcB-p{y5(|!SE*qZ&~
zc5RgF-mOk4xhQ38L7q4#L?V>3wICqQbwN_50-WoL>gA%8tpz1F%2IM=DO(E~^fvy?
z3&FgwgKh4o_3yvKDT7WDcNEA?+5*1ewxd99(t<=8I|{H#E6RYM2C_*%Sq6D&<WKA<
zXnKb+gS@8#asv)zAH7p6$}KzKltQPC2b{j89k~Ne-_nlU0qWa5<X;z1<9?Cd_Xq6*
z<=!tG3>DB{6v)w!M8No>K#qQp!1$s7qhCl$+uvUlG`LAhO55Kg=@$iw8;v`8A(-rr
zGtZy2ySg5C%AjrU<4zg0?R~sJdaVTtZF?UtfY-W6g@wT(<b{Hq>Dk$T(i-OaE)-z7
z@jpN=B<=o%?dq?MYV%8h^b^1Y)Gq~c`x7Lfeks8AC!a(MNr6Tevj4tMdnP@)ur3ps
z>(PZ?VZD(EnMM~D71M$U<)A*}3fZ;gT3MHIg>o2yiz<vOlu82<5aS91;(!ArAjTEK
zZ>6K*LZT+Hb>&*eE)yICGP4sL1nw~vO0`24%2Non>&_9NR1;aN0ot`?6CDJa%qKbs
z<or)842TJ>kSo>1LX69Ur2K^>@U-j;1GIZwJ*PPsbVM?(P<A&G0b^RBT*-ih6w|04
z2czf;Ur>FoFlU3$W$uV(Zy2OK=}Nb%ix|1|ARp)U)-ApI^}4;+b=Dod`t`fH*DbyJ
z^kc^>w2p`}v132PR6$VzbwMEZC$i^%9X9--VIpp)d@uqDFe_A~tvg4+Vp}y2R8?SZ
z88&k0fQqVWBmxH!PlE?nR3W<HJ{bXVpG83=4?R#$VJ|Xb%5<V-24VskIJ~+>2CUSu
z1B123I)H|@vZ{x(Gq>r*Zi<Cs$@{fb!PTgfW!-L-QQQr4J?xI$OJ!0~R5E0!u<oO1
zr28mcFQl_$I|lWys~=5<TvYp8D+{xk$aam@_tt*B`}XN^vk-`V`mj6MbHwoK${NJ!
zh$)ZHahT$&D=MtMRNLlMSigFOUD^@6FgE{T%?$FA29#H$Wk(FJ99C0p@B%Urz1KCE
zE8DiUn$e6Y3Zkm<;0<14HD=La6=;CFdiT4b@16au9(}A{cl7IhOOJlNs5+O22c@}_
za%toeA@Yc&+wJxSV`O#1--uO`-6>+*5F^C)%+ZT8R!<)6)RRJ=fI;0_@gUTqCzR!C
z2uO~>{iHY#R16u^${J8HupAomTjG%hJurO8AOtB5dqiX_A29quXjdN_Wtdexav+b!
z;!0%=7@iq9Y*4jOCf@IM%vEJIH2Q(^s{1QYC<S2kvk;3_Cl88xsB%!nFd7ondY3ny
zqmFiLk92V^@l1NuSXbIXK-^t|=$FKW_2R8UVOdaiv;m1&K6LoVVKoMOs)t&{w%@M>
zGj*fDs;nU`CvlyW^k=<5p7N0h0jsL~uZn7fgHbpTrMx7ji{g47tg!tzg#J~RBk%{k
zC#z!E15@^-Qok!@JQ{(@h%`RH?C3OS$lM0)=GB9Gl9sl#`Zc%OaE)!tv$Tc^eD?Sv
ztCxsM6P-bgAXEkMNsfUTP=Rnj9^O<pJSnB@K#G^-PM_%KhtQ9<MQUXY<JyK4ydmrX
zoTl`xAz&9N#cltW6g_#!+XysJ1`e$7W2yFa4k!c>h1=4=Gz=a&WQZ)Hr`6T^5AfUM
zXs~;-;^Bc6)zwxrw8&%AtlOIN&s4)3dfj}TUA>HD4XUgjF|r04-<zw8sGD6bdVV+}
zIx7bvc=8cvXz?*(i4y-q){(;ye_CzhBKoj;_>hrY8PHPY1BO&qKfpu4NIf&WObW}S
zQPB(0oDY@{L6qZ=N5oRV>A|6u!<zMMRaXzYmNdepdUHXBmOtFAZ7b>kr_yOi3TGd7
zz#3d7^s;=2)r<^trd>yv65fsWTA{8J4C{W<X=E<5+I32IY+i4aRH4%_jZ_Y#2CaA)
zpa`NIh;Y#%S6ieUkHDCtRq1OvLgHX#EAEGZg2t5F39(A4s?6AtxYYeTFm+JngO$}Z
za*!1<yj;;~5~9^hbxp+x!>Ynq9)yut*Zd@YRRz?Mn>eg)cyOm37i=2~1m6v#CXiig
zaK+0|WG6(DI)Fat2SH>gF}EPLErK{g#tQ3BiYmQbgd4*))f?^QA~qG{tX{+-pB5i_
zU^px=mr2^@TW{~(vv;P?@A`B1pf~>L)3;AAX)&b;RB;F@Em@sX);OjTVhyfD#PZd`
zFx-yB(msjlSWa5h33cNXbwoDwQgtQ!v5%IYsfKd!LWHH4Gr1^^3_TDl5nNku0)$|d
z2yX_PS_RI73~WRv)tM{k6-G_kx`Rh#52e`Ms)};V9K0Q+gF=ptQRk%??8yhTb{S|?
z#XyWn*;m!pXQO6t3(W^71=M1cj1;{s`$`IcQIv-b6$;9FuTXBt`>>+?uuwTvh!tus
zR+K)uLKQr7Qm)mrYIt>Z>%o;YmY|ias8V~l)iq>+>^8g1mw-}OpG}xn7dOqORBB&j
z4iw_pm)51C1o+Db3vrC*aNtCKROr4JYX*o2sSXz^#~>8~r9~Djb0w=T54q$Y7h)^T
z;Q;qYA$Cn24seeax-*$N;C~e=#{oP_v5~QjDtP8e7bbzaF^<`sPv+DmLeqIa!4q;O
zNUlhH2%@)#R$y+kr*uB6m0Q=}-m4decE-B?<{tgX`$L~&$AjxR*AL+oVfe|36wXOS
zRTYc@ydc_Tz(B({1G--|l-tgVhcT+IMwiREo%BY+Jv4kIda2^!5s0jXkoAQAJs+=9
zMII<0F#`KS(1*HaqNT|fmvjg%X}&CU-&`*Zn)0hc_XwjomI^*vT7APV{zYp!@S8$K
zgsgxGoNo$!Vp|X-vV2o0w*^6BCHPID+!iE~Z=ZcrD7OVAhc>moDa5wmqqHXRk!Yv0
zPyAKObqzReugAb8cA;17M}kC2rwiq-CP<WYx-j?;zUCxSoMD_U4BcLz#WVH$JDq%?
zAk_Ffc4mlHmj2Euhl>BMPzLfK4YGV!h(Mlag>cwT`7!&ap<2R~`O#i5`4n2V{b(<k
zKmy~(LU}d-5*R-gVymwZn;{@|U=&)DTv9UHE}#RK9}83WVLQajlkojtBpWc%WvrrT
zQXhrsO!g_w%mupD3zsWcx<+rvN``A6$S88sR`&C7t(BWB6l*m?>zw(Gh<r?~H2uqK
z0(I8Ynb7QU&L@TcYt&;2RRO<*#)|Em{YGei9^F2XcMRBLBeVus=h2#hPw1B~4}L>d
zj!%+0($#l0VTR=m7dda+Zkc0vWlhr<=yb6odt?N*M$6ESVrvwwimsdNlWTU6=(@?i
zfY?p~iLRUM!*&v#+WBa?Jk`h6RB3nhnCd{#a(Su)LCfW-zJLf0L>@p)^&vR$84Bq2
zVTVPX<5QOSvNu<2#YzT$+oI4e%N(Cvb|WEh=J@2Y8zgY%_^|Az;|-8F-k9TyFY$@v
z4Px-)jc0xGc!N0Ncw??lL}~C`;&@}Oue2*yzl=<Vu`t)y{T`{3JSWO~&L@u~WGblO
zbG}j@onnJQ=I4Cf|5!gGba~!oMPkQip0AY0OxPJQV(0m~XD-Q!7^3+;c`zc2L<rG>
z%cMXE(E?xT4fTse2+{LC5w&FFBZTOAU!zNkq!1!scX2K#;jg9`qWbuJ;JFvoZ$&XY
z7yI0Qw5<T0*7&mKLs|n@W`)y%8fw16mnZg3eF|-1t?<QdU7{_l6{Jh=(z%w8wkFs6
zlyY;UX7#gon`voek3VOF;6E1Ww6j1%4@oopUeeWKsZL7;tkzpuZOLV%k!HK{{b)zw
zvYCzF2a`+O9+$4+xQpiO$vEQ)uyT<i#mrPVa*|#7jpZ0*sap(_7_@r11`}HSMK)x^
z7`9CbO5x5tEvuwITHoiXbN;X*$<!@LcvUgg4WU~l&c!aO^kx2ET@zm|Jm3Gvl_pvo
zanG*ag1yIpYI5MP62QVUBlbtc-iC0SApHoebSmH!w#M8&@UPgcfYXi{98)#UXy7`u
z<!;<CIJ9-{hgjs;olpH&-?)<32cPp1zLtVJfeD}A&??PPD!E=M#hUQidV4vS`V^Ne
zHsE&D+X|6BB+4wOJe9*+k)4Kz0}aCJixyar-d?%<wW5M<(be$9PNpVpT}zG=Dv2Hx
zi*Zr{Xd&DfyGKc3AEG@m64$O|bC~7&7xAF{<#m3f>@-}!!}bGpAe^4xI4a8g=fyvM
z(UGt*xrrramF=&S>yA=L2)>VnN{kpuYfxu`sk^dd`|(IKau`$&m!#;zAm3+%NOD^-
zQzx5k#&uXp4D31*7IM8aJ5VV0dS5^sP{0VlD6IFj5TWBBxlw3+pYXy!;`Eaer29*2
z$2lDFX5rbyDHBrhWc}_nrXf(k1Als(FK1Wwkw>(E;@{@;1dPo%{_*hp1>4!||JJr9
zw)+$joeCzb|8^f7l>2xZNVtRj<L}ylMmu~mMoi<8MLQ_X2LcFLcKQ^nbPLP<hjwRu
z7v!)1(EgUdHxcKCs{uSIa^iRy5<t*ecHtjdH>=h`r%<d~LjR7$$JBPfmvcCK_y1^B
zitm6ALAduKFOR)G$PSIt?n@r@DSS_xn8<sOCfI+HWIWdTBX;+r+VUnJ`DFYRm`L;y
zB^o6Xfjs0>T9;PgGV8^Mv{vlS(OTcDz~a+3P)O=Slp!AiA-d^^FXy<=MJp-~MZzEP
zA)u`i<?)cDqwL6N?XQWWJ{iXbCbA#(;T}P6o(4HSVS~qLHzhx@8wNo|Nb`vg=O$xF
zCLUGvIeUMMHZJ+OPevGniA10K5MlheNQCD5iq(wOzDRv#cOW8#kmxIFzC{$pj(avw
z_;bbvvi~(sE7ihJ`1OFXm7EVhoOpGnUt#|2swcFbN(O(6U<!PJh%^1(Jbs7+66MVF
z7y7uj0TNv@)9+_~;cXBDvm)Y-{q8PYGbIOdJne7Tx;_g)Py5?kW9$uZ39znv!>?@g
zyUk63Y}J$6E<FR<mV&(eH~ccB!_U3^H~ccB10<w)!yn!VDd<8PF-Qt^o!`B|FD|4>
z9twREw~DwsEm^pbw%$({(#ZMuQ?tJ9S9+PPEw+A^)_DL3ah8cs5aMmWUo2`s0_<(S
zT-1QX5PjP(7d1rkMa|oOxu}sGTGYJl$D-zXUK$|YVZVPyyP@nIzqAZ~zG`^KFa14`
zDE1w{^!Gqg9zXoO*F?j?s+`Imenxvk?|;g{Aoul@gF)`=DZf0K^K<w0lwY3AfrRL%
z{PJXuNO3ZE%8!$|<3d3IcOiT3dF?Ms*#)N*IzznRmnW5eejs$gUnJrOKtj?Be#8$T
z#1t)yw7>YpJq{3@l9viVLcU-8@*W3B<ov~N-{bHr@T<lI#QiD|sPULUU2D<#;Fv&N
zYmsv`CLnMAATf}}1aObzW(-#ZtW5~yOb@W8OSK#Q69V#H0ph-b?#BY`(WP4J<YNID
zjSMby;jsYD7O%rFL_ii!%mQrpQmt2VVnD{ff{R2G1LzKs2-Fh+*6yELuf|UVq#;Fc
z6=!1{-pG+4)0BYH!0cl6V&6W7xRo{k)LJFM5~dL$P)I)|fc}A&pk!2dYJmOvPwjWf
zsR0?~3oa5(4d94YfT9_u1z5#0?IvqlKpH{R8HuI^aIm)|gd72ki9pWT?EA~K#a{oq
z0Ag!yLf-_a0oDiDxYgRt>Gc6Q>cB;n*9W}fkPsx~UQbwe^E~+Y7NlCO-IIRH$wMRc
zt$<eq&II^KeJg;#nWtc;P!Pn~!X~WIrgzz5cOjUNeT&_NAOW!@Ae9v)irqquaXUu<
zwT=D$Rjpron`~gf(iqtmC~3m26i7-GXx@Tbb$mtx*0O`IYNN|)ol<Ft)CS}V4`~2V
z8<1CiK?0&S0Og%b3;Y0yxF^fjYCc!l9tVS#czYZSTH@^q1VnfP@&IE`0LGr*J`K<a
zIFS83i`7Aw0}ciag#&>+u^d1mU>pcEYAdTkL*YQ+ijLeo1!yE3VqIR>%32=+A=8k~
z9}39GF0hg1Pyl-%HC%EG?xSqU>)M0qqfR%GyK&U%CUQ59Qa8OWx(N%e&)JP{XzR*8
zcLb%2U!ObOMAO~p0eQ(appZlIIW-u+CyQJ-m}l3n)0UMTcOdBE*Kr4eE`A+%dYUeN
z9S_7CaDx$`i(lUaguwuTR{BPc5OfD!{Q4#!4F*W${3c)<i~wEyIwK4Q8?jzfyPa`F
zpnG3u91-Z=*BRShAR~azkiFoyeh_?kF_7~_F#GCyt&`%r81VQgRKbHlKU_6p7dC2l
zS-;wY4NPeFuQWjDiZ&7fdUTNe?JaG&H99CG@4-c?(LuEJVUY^t_#nGxllHMSJ}AP%
zke5cv_#grcupdNNkn8av>-@I%MDlS5iwwo%ghf779_jg{Ap7iXt!rvhP`YT~BGIHE
zCaUidU*|!59Si0x3TAt3*1mHESkO~!d`V>>jtw_~f~?n8?JH|mP~o=%iHq#Bf(STS
zB2uANbAs&VceJHV=LDs(L>wAY%?ZL-zAsXNoEOBsT3o8?$)4D&Hej8%X)7)8L`Xlv
z%Xkuuj#`leHCz~E?(NzxYhh4YIfRfQ)xsdG+;<dm91N;kgK%I^Z`aOh(XBzf*jR|%
z?jXs&J*f0BXSl2z*s0xG6S{f!P+#zb4}laAe0xydIRlCEwg++NjG|LOVwh|X7I)_^
z3X$+2Q1td-w3~4iF9F$WS>I2!j-7%$=(jdl2Tew=HYjhM<13(RsV!bIA#*6Gjtb>W
z3T1EGtF<l&j0))qV><~QBB95I*ptV!9e0imiJND{1=`q<C6)ppfi^aTczO~PBm^BB
zYIQqb3J^KL8zWBZ+YoS1pvXNTgqFCmUPFY~m!D|nt>BB+Kq{V0wgyNPG9e^e10)KW
z5R$Dyq-c!^A=w%s>b!{|cI&6w)g2}}sC<$P$%a58piT^-As(a1&Tvqj7Rs3!a+yCW
z?6#-1;_UuUwZFPD(?WVF+-bKvObs#}vh%8f!cYY%L<R|wr-!7-AOSwz78xW&o^Fdw
zq!4*Ji7dd8eMU&>F2N~o8>DXBM(rBr4KgDnH+Vq;eMSfyyz(p1XM~EnarMAgi9RD#
z+|@YcLggaZb_?aKMCFdTc;(oy|K-tG`d`}4@SKp|*ce5QR0K6t7lxE2p=|ya+C^6e
ze~SenzQDpQ4CRTyE|3s+VW^4dc94)~VJO{(JKiAS@-7UuT@n)E`NV+JhAfLh;^G(;
zMJ)8w;t($B_2Z=@!LpEIn%7&m<5`@FYWDb7+Kp+jL>otVD=Z7i=^G?UT^53UA=Qdd
zr@s(luH)L>nHQWq)afsTq?>?5$n!!7R*+gfLez?o81zJ;)j`_D(Y(DP<Q4Iv_{tMw
zs^61`CM^o8?}T#pqe<V+vwBbfLl1s-NRI}wVTUz6`{{9Qwa5PsjVQWk=`JD#+QAl`
z(q^{aVV43XO4(s64oH-;gB0g3o&_IwvBBSJcc*tbS!j6dvfH7Ex5F-K2Yv;&h#KO3
z_U~`CdFl6^Jk$>F+wFifDCT`?2OdvWMC3m9#%XPKhkZ^SYJh!q10W403ZVgZ(SRw&
z@-me3MA&66QP@)_wNQ4>8Ev)8e<Y-v#(b)9F;)0q?B4IR=iB|uMg<e7{|d>-HjqI5
zR|t`9-;fR#Lr(SEka8y5?i~F24E_||fe*;{tt|~m<olMSp{-?*(7A6z4bDL4=)i~=
zw9Im!4#~xy<e+g*hvZ^UvH)~CgvH)1ynG}$M_Sm8w2+zSwd>QM#S*iayMO0G`C{aO
zMBa1M^z$jUxtPeGvs2D%&%5sX*&aOLV(|PNl3T1GQIVfRaj_BsNtr_MO=vKK#9;n8
z)L3kk5GjVv&!Hx_8SBa2E2f!rbT~WpN3E-?Y;;(TQLs_W=y0C6Fb@*Nj1HGxEpf?b
z933v}%KevOav8^kx&P7u1agiG%LNZe<Qx~4{tHOt92d6zmtyi1C$W@Qzi=J?rdiz)
zfldP^h2?q&UjZ~JEY~|A0W>KL|K)DzPc*1L8P0h&%-GM`U4bXVm@T<C8zrro5zhYl
zvsUQ3bw*e^l3)XDMp!zMAOSWbEDzH_k_`+8ujIW?B%gU^ghQQ;lhkTa8US;`**{;@
zhPtksV~Y$nsxv1nI|n3B78jNcBubeRhGknxOPyFyT^`PP7dro($6~8)^oH5a0cydk
zZS-+UV0jq#?YZK|s0u6b_|tdV9Clx>uC`ejmTHVoC}3q+sy|2+urdtw$1LP_$4JUG
z;q1&@{c%@%jgyPSS`(IY7g8bD8tM|VoG}{l*)Y4=qu<#zYu5~1)GQm8kEMVFL^hlf
z%Mg%&$cCG@G?s~iL2e9Zk9qXvuCk2|2<h&|u)N+C<GQ;s>=&m6AbG9^N#k7_@G;WN
zE$kglf4^*t13`MZ#gT*ba!Xh~+JY>A*b?q^CD+Rs>E$-5mmrXHo2{21k#n1^mmraI
zTb*9UsJgqCLN8ricRPiXM((yX5@`Uj+tx^sfY?nM`A77wiR-N4oM{o(-_Y;&?Fs7*
zjJBwiNxk_2+h*wP+kas92$(?nAS|b3kU;t%j47G?F_YT*!?03fwq$?$UoF9U=jqWj
z7{Zp}Gym=tq1hmj`NJ?`WN9}LxzV48*pqqs^45o(JcM~DEQ5QI26+yJ;e+GWB(i`y
z!UpH-oqHa!D-R|rf5fglNFW>u%S91L$`gj+nMIb@q|W;?toY5x-RzTm{fhfU$cqRX
z{EaXa+WW`myWH~^5qf-+x_&sH*kHFqc*JR`+=Mn*mjXSWu@8G_>z=l_c{Gd+91)=_
zm!8qmOMtZhUVRNuF2hIcGgZDxUO%7*=K%=3vd>ss*?apGO@>IM@|p~eX(@n`q7!hs
zgW~}nbtVGD2+ckWsDG@(gH~@9+xytFr;tK%tb9phA(qBIG(gB5&Qf>~BQ+QuMDvq}
z5hF9=y}Nqn$Ow<&o&-`*`Inv~|3-Di!4jQg*tN8e$`L$4a|(JELjzqa?zDk~9()<r
z_?%WmpP>j}hOuu-cd1Mof+yJF0=-+=2}hM^GvS1zN;DKtgylO_$O42DVJyQ=3k61b
zr`TPE`q{Em4g~EboU%=c$%o>puwSesKmy`a7>5dH1Ozq{zGLHk`gdjDIS_PM`CT~A
z9yheN@Lf16yi$|zEqoVl)?8R&Q^AyQo~`xk&tHGufuL7r&fE4LX#jCP9B(IEiuM}L
zhdXqVBOhB07s5&hvy}HSd#gVz{wo1J+!b8AalHV%5SGtcnF{SZTnNi&tv~|sLKrWj
zO(HXE($2%9k*qtYKjA8SG*Smbdk>FB<iv?o0C_YL6g~k+fIJ#$+T6I3V_@%LY=rF&
z=~t!4M&zw9lkYl=jmSMBkjOJOg3&GP12!EdL|BKg-l^*Zr&xN{YeGam>t!mm-!LJP
z6z^$)1jK|0O!K?KK;U%xsYv#pVZE=??I{O@-t~GaB4<!jp?AHWip2S4bX1t$^?EAO
zxT!IPyvBG?eI}B#Dw6F~j24JK6T!4ki*k1yR#u%GQJ#;u&5bVh$JwgIE=2X^8SsSF
zL<%6!jYyLV63BBSFuCLbf`kV+H&XO`L~OJZgFHa>xrlo~L~OK69`enL$c=W%!bbc2
z2yL`ar>e%u*1izI<+!oghNkXUG9YXz$acRFkwHC33A7g?(hmU%rF$U~6nEl?<X-3t
zk&w7(BRMeeFGSjlQwYi8FkO2a&x_VTikBkTqL}WYh(`8Gi9Wk47((gdd~Sa!A}<ty
zgiJ3*ipAa@NPxW*!R|#nG<iu-T^-4JEy5-?(A)S|NA!Gtzo!HZ?s+xBb~MoM&Ae(?
z4_rXK8j+_NAOZDi1g9BfNkF1{uSUWdzSJZV)kF8c8i|NYK9a>V{r-Q9C>pbbgj*X?
zib@Tu_Z@w$4(;1@7S+HPs69Tl6m1KdCzU-65;$wAhiOtR!L;bfM%bQ&esv~mHwC!B
z$l5~(Bp|X88OH<?5ZMTJw<(SZB;uH|5j&2FXi<S|M8+{m7DA@75sG7akG7?7Iq>aB
z&Zr`n`BtuVUB$4<?8KzL#T9rvf<sD%4)gFkYMbFYr1V+V=7`)}2N(UgnTkIvQbD*a
z5msEPf0x)2k*_4+CK*y~p|RSMLxI}Lnl;p0C$>i93kbLdM%)PAM@;cFsMb5Ix}n}M
z`A$UcbK!~?(!3MFmIg(oK_<-T+p@1V)N@_QZ4rfU;u06BwnY%r@h>40+HX5M&`AF>
zu|1+Rr;bJ<+MC}VY1Nv)55cck?O=x+>(?cAMC9fhm`JlD0;^xjOM}JU$;z7OjgmVf
zaw83Qppa%Ksp5;Uf53(Q?8%O5qOWo#_Bcp7Qtct6o;(rE?q1fXncge0HzE%e3luNX
z?2X`1@e!T|hV%pWax?wElOJH5NU05^`GAbgZVY3T21|J)dsA~5tgc6#RC!2sgi?vB
zlBGNnX?6`%M5R33O^P(X+L$juU^>6d9&D+XDv2+hR?G*;myssT_(L28^yJ}JESlE4
zC%%d(d_n?L0n&UG!DC_cSVw_^<>+ztAf-9(;Lt|ial)a;LvS~dCf|K&y-(sqM80eR
zCeoaUU~Z(H)B**UY`<pR+vwdAUpqMTTEN$YgOdoP!TUkqu(@sYe#vhfoB+~%LpWH?
zP$GI7FzautzoaC;k0^X)KwPByK7y5jY(zXV^lSELdo*I|SEms}NcAf<;&|*Zd0=P9
z7UfJXVtqR5V}oOhaQaPq(fo4TxFV$?`(>lnr?I%!23kBt1ri|RiqNO@KnuUsHol16
z)k#m^GrmYZb_FgHjW5DuS8<*Q)Py1>URq$?e#gyLRrQc`&BHa^pa6kJKfa0wU_kQ3
zH~?$Jv!bIPD`Lkw>5Y?*70F#(+)zWJ$BM9vi#u+Bz@T}&h&Al2cSt^7B=s0vBzn9E
zdW_4{NQ5ynv4}m`S#Oh^=pfOcnMg>YI2guBMQlrF6gR0zo_ZDXQ8TFsTQ7Lx6-XF0
zPZTlzO1*9B38!Ib*gQcEvp-;vr=-48l=FH~_U<e74|M-4MS2lE>Y=)5X|kq>b?Kq^
zPOm9axs@g^a<3^0HzNfn67^nFbj1xuGoFWRY!O@CLvNm5Tcq->3?!mfURzYegF1*r
zp0!1t`_S8nAo20FB4%8x-_Z88B9)&q6PL3iEo3=lYhNqsc$2YOfzSw9-dL2grZ_wL
zTD_gizp+S<7@G=#rjXP}vzvSBJ+%%;i&P#SOI)BGEh^-?K_t+Q7GW4Z39ASiVy`Y%
zZZk)<WIbA_q3kU;=?_P4TwSd44LVAI{Hu#&eCbXk@~<xL)R%%G+zo>2+TxsJ#XK0o
z-GG{)ST7NdVgr)r^<w5L*B7K;FP0NMxJdPSv0SNx1m5e#SgFGRyBm-=>x$XYa=o<O
zIwucJVC#zIHZT$)&$?pl=J7bn252vJbFuPHw%q_ds$}q|m<aI!y0W=APwX{<1kC2*
znAjo$37E~rm><Z~0SQlMb8+K$ipBmaF~la(mSVZTDp_cdt;N`1#XLqL17&A1p1=FM
z)f?BiYS{Kc`lFq|5wkD8qtu;_@U%YMNy0Co4U`5L80!1Q%Kl=vIa6VK{_0)I)<2Ht
zNPj;?AC$pY3<-R;v1pC)ezBa%@fBF_7fW9aBx>+}anXL%fPx~3!F{zo#qNE@!dH_#
z<l9>;eKpB~ul7MP`D%1@-++eVL07RjiUWm)JXkEZvOq$NgT-<y3nbtU7Ta4{4XD+R
z7K^ic5E%JKoi3rBgQLaLCC67F9W9o7Ss;OQv=}=Fv*~Tr1YS-l&e@+`{DA(9yYbm#
zs5;#dNFb)^e6jLVvD<i+LirQ&<^u7u1BdDzTvz@;T}C^W;v0JG$6~xK<8V;Ug<`x&
zbA&n}0aaB;N0kZD?0duXKe{sbTeLX7K)}&a>9~PJ#?et3h5`~TJ~|qn5EU&>4Bp~n
zqVDlg(c+Sad}E`s#U%?ZJ}ycvenAKUdo($!Opm&=%SPxAxiTPZDQEypj!N%1!3V(P
zD7<6RT#%4rax^%-P72{4t5c%xX?0TA=NC^#RX_JLDIbJ|U{j;8ar6R-WTF3_imC-I
z$O8cntv55uR#fQ?`_GKZu>~$Va%NO^BuGd&Gb%4>g9Pl%D10Vza6!UBnHf#pEKA}3
zAx}|ylhJ?|0*Xahx>`^4XHFrs)xw-YXehC$d{aHaw^~?K-n|EjLRhrqcd`&3OwVB(
zTyL1X5UAoaQT9T$9`FB*QwWW*XQDDHAi>x1&qM>_Mn6bEJQIblDQZH2GtWe=>trD`
z!br$xqN$!nXI==XIZ@WQM!)jDIZh$8(x2lLLL+ESR0fwP_z0R4m2VY*L?Lsc&Ftp#
z$U^2so8QEbPSK+1qj^!bzDD2Gf1Xncjjnl4d(r5c7nP$6c~F&kQA~fLDs(%4UbJB!
zSrxjSPuegq+UOP|!K;E<bU~CIAE_t%FK`N>@S6orA+%kvAS$2DP4Ml41yM}tq7b|s
zj<2P5RrtH%C}csj;Y~&>UI-E_jIzNG>aDvjbPAyjg@sYM{7vu;g@w_$jY=B|3#0IC
zUm+WuP~h4wjj}xt>Z|)NbucJ;VW}f1?IA3U21V2b@&IFL6t0~R)C)P5M)4Sg7zke3
z8cU-s?%;tK3EE^>9%Y|Dq<87M+$qF>pv$9jqXLOg$nt38t0XGzF)WXE>1u4GM->v}
zI<Jjp|NOB2mU7=(2ZTZ$)<)%y0a5{EZB#x44iX@1qiGQz0uqw0jkXhUphSu@zqQf!
z_Zr9P{f7hvLu`p=|MA~?Wp4j1PBFAGu_Y?kw@8IzwnXLY+8|NPmMF})Xb?QZ1G4m1
z*&z9{m@UzUeT{v>V!=JH&GyRZzjtM7ol<D$qBfc*mdy#ib5R>jh`k_?D5W-vy&zFa
z0ZOTjb{-&Xvr>Rk;E2~ouPnzLhG!-PhhpezqxbgblT(6R{&%DGUhu9Q&Mpr17IefH
zl#Nef#s`TSz8jSj6-bo*F4gd&P#Y`@_C@(b)jy&5U>){3weUfC_BqN!cjxvwLx~<V
z-xtM1MQ%_ss2+&s{1_E(P!cH*M6u1yPc4$<1|5ouQ;WW1bTxg*HtYC=q=%x?7Xk^;
zLs9rbE2(*tWKxf1$Bfb2xYEa>^27#QVn=oH9tlWfIu;Fujia;`mLzNaW%iS?`X{dR
zmrf?a`qIfn=J`v?v=ECiWCHnZ_SAU2u~PP}-2~vG3BI+P03<NJjRwUj1xU&ig<DPz
zLy{c)vr*wMfIv5#wYvc%a-Oxj0VHyst?Py)%_Kj_ZU6zG9~>FTZvNoNKz8#7yBm-g
zNI%%!U<K8mqB&2;L^oJS`BN0f#Jn3U>V}J=8#;gh>P5RBKqBo$yB|OT^&<5H`J@&#
z-KZG(q$O8^K+aJyIWdFeAEjps5;;f3;N0OCYA7o_)3GsSVvLzj=(QRADLhkr0L<8!
zoIODTW^7DOY#;$MHin6f=68^o-^a#ECdPzkN(|wdj*CgpRI<?b<74nl>E$@d!pk05
zyT#~@xi0m&DB-afo-Vy4DSGYkn7f~FO)W^FPK_xuWB=)z{w0GC!Z|@Q2tPF@ol=m1
zo*I)*DM$!EHC8ke!jn@<4DKR56?4ys2^UH7kZ)Q{x=4}*7ioHoTqGK1sh~P5mh&9%
z-{M?%3dPQf=}FPSDeB-kF+R>ZfI$1su|))lv~yx|pn*hDb7JUVy3d%R#-AHwji>4@
zZk!vF;|yHR=C@@%ln8m|#^CvpD5XJlek|u@scNN2IX`BP_)?N&p_Bv!Bw1)n0upH#
z+LC|->Ozu)RIQXGSu9ko3kc*~?BpbQ7RRKj;VW`3CRO9>h*DCu7h=k)%RB4AY5HF>
z_#iq9$$;{L-B}=k@`Bx2AkkSb#EMqQ&LRfytQ9f$OR}>h5BXNwoh4c5tQYG#t0DGB
zV>z$eoz)P<u8!HGu^~0lTG>P(P|>xvh#--6t=&W*QPf&$BKq-`h9v)MG1hB_-nPSQ
zIBMk62)LZBiOZ-Uk>|A--cSFS-Uw<GRCmU5K8v}`Cp~Q04842q_4wr**VAfIJNpc+
z{;3z;eHnsVI&@CtT%^4k*IaOUNj^1#G<8>x#0i@`f8!@h_1?qa?7B<hbn!?28rCH*
z8Q^VT+@rx^Q~k3sJLM&}stmehlo8Kd*a<GZhF$meg?(G+5$DcU-2t3)9S1eJ{DPJJ
zlto<)>p%B!4UP{p{OY^BNmK70CqCi&nsZ`Scj>)ebI~mx@%v+7@&i!1N;41#hV*-6
z&hcN5VK_k?hAP_c4)EL80+F?SRxf3LnyEJ|<TsLlBrZ6!$uspYd^=-^8KBMWMx<xE
z*rQMD*Q9sZ$^s^oWminTJ_!=avWrIcGc@fsA`RP{{rYJ=?&`AFw%FjpIPQ(fm|c*R
zD%OZ^(oh~??2WZf8+|zhZ0>&6W0rnfm;DX`+5G*s&2Pj<;{KSNPC)`;e+<)UH;w@6
zAbWR~-lOcGgFqAVK?i{h@4=WnE^NdN@4*<HVw#W}(S&?BCMIMMkp6H?`b8j-^KeZ1
zMIcey;h60gH6lSjjfo#o00E#+9T{js{?w6yCge|Ja*2V&K>9QWzi6w0f!7!_ax7=1
z=`z<E?8t0=bKStZr~dm8Tq7?1ojPLKV-uqZ?`jx$T8X&z#~JVZo?t@(#2GFgcM>BM
z_xb4AmAZEy{_itnfd1$GV|p{l9^vB6m7a9|dpj@jvZsXjlL)dX+z{hBovB93y0LEc
z!gEBZgN3`7^?sx6(s3*9ONzp{*ya3kA>J3EYTF0q5bOW--VMER0y8o^Q-w=?IL{Yw
zw^_|_PjJXcejeXbe6e~puUAK8qv{Eh0SJ2S2nAi<2=;3-B++lbBqMD}-`}{cd1-rI
z@`em<EA|5<T?ehR4Y-^qtpRRSvQ5{k;kbN=Lv%GBLa4Jeu*-8h8?CZ;J*(Hc0zbv@
z3L|&>8j}IIC?*>A?sK}@{-Qn4;1g8$qCL-mgz8?TdFBwAfyOWc>Nr!GU}n{M`X5{w
z{4M5Cd_l%>rVL>OiHze+88ZhGbLcp;!30yp%n^g;Q1^IK#>`0$IcuhjnUgF4jW-c9
z*NzK-1QSg}yEL@=Rh6?N^Ys?(LEA!*nVM+IV3)?+d`vXqGWO?rfi&4vqULQZeZRLc
zyLW-!ISq!LnJmX-Q%1cs=9Xi!iKrKPkFGIUj;SWwyg=`eo{IB-KE;BIJX1{>DFzZn
zOf|6wh3C+b2UcOa$r?YecWyu36bE(0MV{$qi3lYCi9FLygc7WvwMt`bVyJUWWxko6
z@;m~hGWgpTkajNSn9`?2LS&p{N}m!Wns|;`G#^b&J|!`@oARvbo@WZ5Qu2^*t|@&=
z$%32moJl@q2QCBlI2M{p%4}k>>>|Bw7ZAcpZ>&&U#6nZvbpi>Q7MexkaYK;6UT9*A
zi_C3f+TmKl$~WtA)^#yfc}vjxvf(HgVu>k@EfON%64N%ejcM;<1zWWlfq(cLO~1ks
zfHp8zm~xeXuK-$MN?QvOKr2kx+FNi`gva+*nK^4rwrYuflYf<oJBg(@3Bkh}_<;zM
z<t@dT=F6r$!T}e`^|Fa09Qd6`1mIUpcFR(|H2I1tk8r?6qE}3L@WLO-SZ%T?OZCRq
zYFRsEr3L3|(*Ap3@S6nHteNwc$v#-B|G}R%^%$LWx|@&`ubb?ef9gHUUbpK9F6#HX
zT|bZz<8@R1niWXY?{yO=ROI+IAsOE^*}8w~ZOh(tAZS{C)65eWmXL_2GR3|lNI<-4
zVvGMe4gpa&nylF}y;s>r2ZD5WqbY;&n(%pfqv;nLejov{k)*g0^=pbF0u#^mFJGqj
zHaF8?*hLGyrc}Rerjj(*<1WJRhgkY~9fw`Z^%u*)73zdEC}*2pTaXZSn<?jikSJ#x
zHTFmjh>x`<D||tJuxG6UK}&*K2ZCx_YszI~Q(oIzvH=rm7pN)q%txk@Fn{u}Z7=A{
z>n7jKrIRm=JpN<G`|W1|>bYg)1J|1qY=^b}lzh4CYhSmn|I||I|JV0rZ42}yUI?M<
z=D+RbQnZ(IQ@hU5v>jZ`fzFJHCv@lyqk6Gs<iytZVdYaKc$kUaQ;?MmibwmzeSRK(
zXR!ZTp(pSgn6p;sNp|BEhFRcToyXG#?C1);aR%=cRM8Jy4j(22yyeb2`dNMY_Orw9
za2NhR<aH)^@)It3ehZ!ro=SUAJoF=j&(OEf1az)2&LE))AJK3tFp53Y_0Xn|OdN;y
z;F<vHV|K$zy=Rw?9c3bK@?%@?oAPD+$EIIw|AC}DCcH@s;BHED!ZEgOrQWy4F$aNm
z&W||=G(#M75NL)tMhLjA2n3}4%v4&NUD(N`dXx=+QE$^74109Y5z}X8p0KV+4Xn@1
z2F<t)1qrOr%$BW;kHmPx%<+|}e9ex&s2|MWFB^q6z`t?^2u&kj*%qZKpGLl-u}u3a
zATf=6Wj6X6(+F+)5(Co+N;+=Jms2DQqMb1D=EqGi0nPC97G}=(@M+7$lV?3x$5nc_
zyH1(7S{Xx4n~^a%Z7Km1R~V|XfVA$sy|<7LpCBK;iD?cb<U4K3eF=~#`?Luc1ZVQV
z!N;?#c9q_s%UQdIU;^Q+T|<zR$Tk5WfpC^g0E|BnU;)mtMlb7)dY*F-s3*=j2vp2D
zQ=Z%)3lPrHw02rUZJP(xG4Y%^ahJJMWfNc4ufd?Cz)WjIIet}|FUjl|<zx^gOv&Y=
z4c;fb-nuwSTlw+!8p1*=<kM&Na3$ALIP3gjA^tiBy=E$X!Ho2WF(^jhy+r=A!&p&c
z;9^*f7=qt0riVFsv?=$v%jLqLf8`(%4eE$lZU=<Qhe+zoi4Y8r720({w5a_cR|a^4
z@oXr5`<gt~Ixz-1PrZqV)N1=x4H3iYY$OnBIW2C;-^J@4^r{~klE2+n&3%0t>N|wq
z_j-iK(Tca;AcT>@6La?uqvt2&Q*lltYyG7~y*-2f+lJB`dY4#16j1Nc&;RH!GK?9~
zeh`4aLn3xbguvqWqD2+N*1;u97h%m&gwPMUeBiGn(z}klw-C=exblA9H1bEMo!<?n
z*EXs~X0RbZZ*aoGV%MN@2%fbO{Xjo+j!vf56)ywQVSFW?VG#mxofKu-vlule^(K~o
z^k^T&Dcdj1VD-b_U!#XjxGve<+pL&$@jCG^qPS31(>!gI&R`pNdrR4gm-W8~#>DL_
z3(d(CJRawpk{v-{;5{CfgC8UY-s5pO_(5XeJs!v4pFz%Xa~hUU#k1G1)@QoXPdT}0
zz&{n2+ki-gTu;TZ4M<*Sa~kk7;$qPc0(NUgT>7CPk#j~|`k^3^b4J|uLz@#hJ1$P`
zLBQV6j!Ux&5|Yo3OGgwWkY>lFBMOpdg(EtFOh${Kx+0$Quk6gV`uN<yintyXYq1v8
z7%$1j00GFC>}r7o<V$vAfCS`A)ENBsRSOb*b)5bDhW=ce)p2=m2wcvV_l7_s)9N_x
z4Xvk1q6Ia^YjL(?oxb6|*X+80i-KRX>jDxOuf^qC3m}2<S{#ls9Z!LTTmM=-F2YQS
z6lZO(#Y=kAB|s_#88*b(S8wXymThoKp&K3>;_{jZ5}}k0@zj+PmRf8>{F*NOH&R>B
z<hm)&LL2lOdTw$cXwPO-T%MyL5g<0j6Fig<#nSA$DUMLWPieW@f@)P8SDKr95k=C%
z+aSAcgWlcM6)Z9JAOTMy`w%4HYU45(8YJLq;|PS@K-$-WRA*m2d(~U|MpxH;4hYS!
z`<%w3`E_4hI-tk|kbQB?KC)@BwmKANo!&;%9C9#dS#>BbZ&bD5%c?{1QgONo5*UZ#
zS9IVC-GbWxh*W40$a%z8XpkuVh^^2dk@HBMLbsrW)#qHHf9?9YQ#!xW?$m%^X}47w
zd4TbG9ID(Kn%olZK|E(^2|Kk#|6S;-IIiH0p~h|rO;%6Fah>jlt-9jM;7`%W_<;5~
zX`_RLgeT)NY!)QYPsR~TK>i0v_#Y?Z)|q&&5yn|3F`!=br2W6+?$dD(Kb)!KBJZg<
zma<_S<J2*+nElolr`7D$TriY(jvahQ@6zR*BNVNX&c)>drzIaX=i>4Q8bAX0TpX_A
zA2|ZTfzPvBx9NY*oOcjNyUsh+qA_zmE*EMo`ItE$hg(I_z#tI~d_LajN%5*7(eSDu
z!ufdPL0GSQc@pkuA=%(5E(%Wt4`N)1EA7pWnCi(WvsT;ntGa+?w=E5+3vs#BLwX2t
zA#S$jLkc9%-?klp5x*r3sbAQF?fSJnesK`UU;V{t2pUnp#HGiJEI{}r4u6%0&bLIJ
z)zKx&gc8<hhyHE`f7*i3NE%%tM-tKjW^{@CEnAR)8C`-+4$;Z<gwg1d786SBPNrxM
z-pON1+~Z5^PL^Ec9a~b@$&!gq9v3K~P99ArrzH)}NhNIbPJK+-Bu6Y7o0A-|Xlza@
zkwzMM06nP$!5?%Tr6mPOPAOs6*6Ll$rZ^BZG^do*X$tLlOeyh;lYHa>#FP?*b`0bY
z7@E^c*!o(1P}gY=1dY*YC32s<B_E^HN*amNe~^HfR??xPv6akBOB$okm1O(x(%*6Q
ze9i%(+aJ$4AT&syE0GUmAQM2IE5QR9n*|60GnSNK@x3OO6{NlK?3j1;MXqjO*&Rmr
zK$euq2%nZbMq^2d{3QgCfLl^hk}#gfgDD<7nY6bg=U_>8@ca6FZ*Xsk$4h}K9z1J=
zDCiQUnExhU1|)<6&42NnzGAldpac^!?m&aY$9*N@cgu(pB>&l6B9V4q31&Bu7S#R{
z`E~;y4MJLw{0SnYrCDr$2|srvT*&$%3cZW8o=7AH&4WFOMB)!iuqh{iF$fNn$X6)v
z$Pdzj<beZ7OR={HN)Q8Z9uIA~Tfx?q<ouEi9o8RId|#DdF+-byt*F)~*sLRZ$JQrG
zr0W7EpiY!X*99b`IzjcJEwxrufs^dQ5xrCElTH?Df|E`bvN|Uz3%$YAiYoan`}0w~
zto64}76SU#$wGDima-u38(Bb|W!sMG-CLh^vQT@Rb+V9AI7?Yb>06Oe_?~q*rgv-o
zy_1ES<@*w^&=sUXmhVdn3i)$Qt;q2Gz~&#*Z)p94lZ8h74<&N@6lsv<hZ1a`4&bFg
zcYkJ)PxL`;e|ECaX#BZEx^1oaX#AP9WgeZAw8jy6gPe_t?6Obv2A;sw25=y^Aky32
znwoz@B75KqeQS$08xqo&0~>G~5;1X=2_z)gkihJ{h59m$^Ug%hPuW_(x2Mu%XM%4F
z<hs*{n|wE+>`l1o=MOc|h+V@>#(Atm$ooZy_Yw#RpeRZ44ZZSy!rh}D2j%P`&VoEh
zmnP}H&fXICF7&ki8bMmz6oU)lzD`K(0EtXrC(sE9M@Jrf{5NZ0dfN>6H$u{67SfJ?
zC&cABN`ox_PT=kwd0`-7YW|(@i^rXb<UvCJP6V#zK|+#4K|=pdbiR_u;iXBX&af9v
z?^UhOIHFPMXA&};6KPP+nFIz`4=x(0b1WS9_Uw5MkzBHH@_o-Gq_t1;5qB;T6dR5p
zDNh2kCq0z{QK4c#CX`ktbFqJvcuUyYxOaRPaBMVk>V8Z}rw+*>&yR_OxUL5hXg?<K
z@J9^?L&?9ehfBN<mi^)&&_>BG4g%@oFNs8ZDJ|*ZFNuzw_^;EXX{H#JWGx$b%gRP2
z>x7`0VpOuON~D{klF|i69zcvriubKhBg_<Il5BAUZ?Cd34g`OL%YmSoVoXwQW+D$D
z#w2lrxgW0wx^H}vHBET$>^k0o&>_Wm2ZFr0@kx1_ndURa_++CdMlEe-rfH^_p3J_H
z@ZOx;b-DvW?%Z?-gl3BAjvO>oOeZ-Wr<o#6A$+rw+3QNZ6J1?rJ0LVa%yvL1hHthb
z3C$0)Ns?D6hA&Mqe2bIW{6^l@O4r2>NFG2IJ0KLpw>TLT!IsDbki|({?08)02_p2C
zC)qDeyc2sYcQELsqU8<-1?VkL28D~0<^g)klWp7c3yW#G9J4a1bTV5oS5vRaK5OcY
z_W;AzGz!C8nUuFWks4SllTqPjgM>UQlbA!vZ%k7}-KwN=wb@Ew{h^t+K^Yh}7P)V$
zlG61;YGAEOnjNIh(U#e&Waq1lKXEKX)vZagSDJbMT(-u6pm@49PSq%$ZcQ>M_V>~X
z#nY`xwrtH`{7TbZoNSWa+}wLdS=NE@10w4{_yLhk$`uUq03w^jbxxXu(sWhljU@ZH
zxwm848x8~>fCIZu^8<i*BPsoJ<N?GR$%JLJ=McEavp&iCwD4Y0w%&mV0%E-bK`*eZ
zPs;Guv=Riw`lMBA{Eb84md~an+t9*WRkq222mxY~0}%qmCZ{4HKy0FlRB#CV^!U~!
z8`{!4xNNHf5k`+}P0F*Wv=Roy)}**+g35;hu{GJIopA?;z)zKLPcnZiZ@;qb4nzb}
zY<HxH0AjmSkq98RQ$=X^Hm%^N&1;ivK`ZY~U27ePB0$tS5JiBfO-fG~c>qzH#6_*C
zLg$O|^8-oNqP6#_uJ1V*#lU#a!6*jCdr7&rNGrv_crRJn$R5E_I5^4dkF9A0f9QZj
z0rFu|dU$Ci3Xl(z0e<%i!bbt}VG?(*_-RdA!RtwflWbEP@9yr09Snpsfh~h@kq8)v
zlk(awNMIaJ;@a+;SgHXN?;4y=Drd9rw)I})DaW7oSTP~WX{SCWU`{8c8;)#%Ii17;
zlU4^Hu{t=NY;-m$wxEe27E5Q6_|09~(@86FI3!8Fr*jnu2>E?d`T-z;{(VyJ>3{_K
z_et#O91$&Ef+bQ?X=J|3T%)~LvhO>2pYH~SEouowz2Jyi0<a5?s3icqK%&CUR@`l{
z6Kv%?VP!w;?A_!FjIj_IH<n6iLtemmi~aK|@3^kxEeQ@TBpq)_4Fw7C@m7)8SOE#}
z@fMD|&It^Bon*1UUhVz9+aw2rHoGTTa=5nPZuBHeKD7W67?UiV?){4dY#UUcwsM}c
zvh%L-e&+H&ZNcrqE4J>oB;PX@d#cP^o_@xXXVc)K$Y-n)aozzEV9!`s{gD&bmi&ad
z7PGo~2X>ol%L6XtnQO}flBbfs07yX0wcra(qUWL71=Z)RoaGjKyQ}x{@beaS5AFeU
zI}&G+rG(9!r_V2ov4^{PyS4!>oF{w*<|0daC?J8k$byHmpW3M%$+gU4Uv%?+*k+lN
zi3C|@$v2#k2$_~y*a+(nIob!+l~&F>7W=xp_s>NuNe;42?IDM{%2Hmn+-5nK<iQ@^
zJ2K!1N$?$@t87U?0(2EgLYfN_n!CyhziNpycw#_vgX+tcdyOT|;3W_FUa{mEykucT
zyV{}!Eg9PORH@f2rO0e#xv%egdk^+*!kb`!xz?MX2HO^g>iC)^LjsTou&-GN3816h
z_T=rYv)H0*y}bsm0~DW`z(t;Qmi$RbkjS&nlGiLi!Y^58HM@iRw?uNca-G%ucJ5Y6
z4!M=<@Y8F2G`1&*jh5J91pyu3XvxtC62)z_<Y)xR)7m?%?a4RXYVjS``#^9?juw#6
ztgW_YfdtZ4OIi((K-y|yC?fdOgC{+=TRHDq;t67!!nRwU7+<8~#ZFuvwv=Xkk=hs}
zzJeB)ltH4Ic2EOci$yA)>V$o^Sl3?Op2=EEULOS)iE1tE6yP!>5`o%nvH88cy;Hj_
zdAS-~&c@iAM;BG`NZ(#7=VOZ**L&xN_gWtQD~z5XiSq%FOGmKz|E;xV!>;#6pZ=Y<
zQxZ(>K~oYSeL$lIKdb-}GVQn6oxk(mmE3R1)it<CwBN#d38NE<Kpn7H?eDw;lLut;
z6PL3QiqMNELYsYLv0HBNUZ4EPl0gkYzC`|r3=e)e5qZ!Hhb{KX4c;E9!wwRyjSpKu
znn3HRD}w5mR?d`EHr(6mQ379*W#QpPS5W;<SR&{c1p4rVt*{_bl@pd+27!b;CoC+3
zwvjJ-1y%G+_Q#vNJ6v7Q*cJv{Xw(_oYJ#Lx7B2bILI@-<&RC6`7#rz_K(3$)k4>%Z
z<L&P5GBzc330z=|P02L|NMMXjCB(zxAb~M91>b;Xmn(>xz)lbK#yjF~WSo$a>I@PY
zC#0l0gQTP>Tb-|<rkkAN>U<*zPSuG(>O46m4L805X>v-cGe{s!PC=c=Q1f;Osw|b0
zO}Wf-xfZ+iTTd+8te^LDJXD#|Q=*|eP(#m7iGvgnK%bqGmH{NtXQyOCg9Q5Q6dIae
z?(0C+Uy#b4{Jr;HSJ?u)mB2=27o_A4JxHERKI8-vAPZ7>PZsy$-5sc*7pK^SKY0JE
z>tY9j8hUX`UQ$9LKrBwh#iAS}AQq?WE%gpWu1saS-R<4z>ax-Sp+;Ysl6!7Q1(1~~
zzp!8+c`hu*sJA*$o39eRg};$;mEBt)k#UvXTOg5fRb6j&ppA^RqPKd10M1%R1lrJC
zYxfqu0%@(?TOfh7mU;_Lh2riQRNqYHyq{v*|KvSf{AP+?7^A7FBf3c4m{PW++~z;%
zr4f_;PY<t`9r?4jA_KlK<46VYjVWoyK>~bZN=9~p#H_M0RkS4~W)))aS>>&idvi+6
zDw2nMn^JOCku1zAZ>MNhA+NV1^~Sc8a;w?PVw>*u_Pq~;aD4Cy72al77$i?BmjNJw
zy)7lL{DH(Yu`Olw<v{{OiZh^XsZ<|hpQt+2V^@le=<nU1-sM!4B-oXb&x>{B`mig7
zlXZI4xFe~<dns0ZpZAVy-*Y4*ZFtYtN+bfrdnx&>7f7C|Q)go-Z5wq8s$ZvamX*59
zUaUtGHOxxNz3r7fUe;re-Zwk1+}lLKaXlT6R+kS&gvkSRI!?beS?^p_o^Lw8YbDRe
z>GdZ3Y9<}mI_LFvbd3{*YoFTJf4k`#L~;+oFK5%Sb_N^y06{p;Z@hKIf7J~!-aHVM
zAJEc|M^JkFCWG_b6rJkg5Sz|w<smOU{Dc4>5uYQD?E#Np#NfZqK)<w!zxYpPW$Y7O
z9z?@`Z;=1w+hspE$fKJ0?+v24aDvQ#1rF!(_%)46#GunVQ*~#)<<<B=u|)I>5_GuE
z53Pq#d=7q@k7Td=t%;`9bX-3OvF*4{@WAkgC}I^M3Pb7lMJZvuLus5_qk`p?h%BHZ
zY(xN2Mx=72p`ax+Brl<Ac+K#E|6f~Y9-mcp=JDk9%`5kIswN;pP~YUf%f0ti0-}U1
zBw^RORA<_mvD<u5t97&mwRNva4UT{yMy&@TTEQX+4hjRjEm#(-5{er3eHfOYVo}gS
zP{!zdpL5RTwV%)Y_x_%H&U4RswzJ&lJ!jnQ`pm1lq=J^QNnEmbeQEKW4ZCk<+N#yH
ziR;SsZE)3?)<>0`d7y`~YKgEPn+Q7qfP;J-Su&8aA4d@uh#7t?5q5VBQ?AC&6UQrK
z9r>?sa(+<Uz)$1sJfPn3N}DMQq~7sLn<)##*^gIV(1Ekdo}&=N+2bcFZKkZH;9Vyw
zZKkXx!RSOKnX(*WKs^e4QAwuk1v*o9$IVW<H#lm9xZxL-HdB_u)cvB8kCeCTx}Z)K
z-s1eCs<Ti<+^)0IZtzxXx9hBAgV)zp2%e3edg~S^xUtc*cLh}I_}l2&zzu|Pqh~)P
z0|_FHUa!%%r}DpHHaQx-^GE5qrWAl8bInF?_z1njQ!O#O$y3+<%o$YM<k{c_Rg>-5
z3Z$(~p51@|^4=zok2H@;XsVVW>QPUv{h2dy=%WQ5vIF?2cbbRn06yxKnQchwz~fPm
zZAjU%t(G0YNuHW=t5a1wslY;Z04Eh#$PVBnugomDsRN5i9^>b1ne9}|RJ+;Be}1d;
zVsXD_@3d}Y)34dH+v1d>R<p-6PbUahv+0+Z;l-Z!6bZtY<iEPjxv#hZLZn&Q?VI7*
zv4qmpp5b-tu2(2P%xi{s-t(RrON5}uk`^!ioM*-oOQYVio*hdpiLqp+Cu50>yVbIB
zILnK9<)sy>gSk>4fJyJ=5sjGT*;x`0X0yC#mQ*dfg>yYUOZo`_)0tZkp==q>Er?LI
z4Ci`wmPBDV&Gqc0pChFgctv^7O!{TVXn|)hGw3R=`-&%*8Te}DI46;O#j}SO@d)2|
z#beO9lId<&afOARIyla`D!I_JM-D-y&_a*3FS&jc0=?#`YsNd*BwzFFj325dGvmKr
z7ou^CJ+)%I^MmAK&hU{5DplnJ)MAgdgW*JXmw4*3JK(g$vj_Ne)nA^Lczhw{5H;!`
zgk_$Zb%#@3xy-Xm6{v7p=CM?HjlXb}aFBGXSF{HUy2GhDqpVf>E=S>XlfJK`C*~*|
zAUy=@G(vd_mvz#8IV-4}bbr047W~SoORo29GBi{Qtru5ix0*trcRl6Y?R-D^ZqzfV
znoQ5G(}n1Mo2Pz#xATw5wn#?ZbobjlWHdq-qWc>?^~v4N$mB-P9(vPFcYmXJsH{M`
zN%uE<>biTJVad&&U8X?gb(=kwDa>Ukgconcitcf~m)z>vr4v*NZS`0>u}4QC{B*mg
z()T)7Cbt&~$)Pvfr4Y_cAslfh{&cTXmE38KSf~`*=@FUv=m%u8eYdA}-|JjfvAZBA
zIV)<n$Z46Z`8fXifLHXf>T{p7wCsRK!nr8qTv5nDT*W8^h|Iy}2zVeo4oc_cHk@-s
zA%{G5>;2Aml82(!K&8+jY0a;7A<&1O+H}A3Q1Zh_wH!LF$*6XiE`&lp^3=EooZ-oj
zA~ABjG=)AAG4j7GUWY=CcxuA~&b5_CJbM%pR0<vOyp;Q~OmGL3C60MTPp8zd2c5r`
z9`l&s>Jf5)^z5Xk*C3Yy(A&u<6aneUNzbl9fHdc%#|SCg>jR{lr_{F|a%yT$Mcxk)
z4yPjT2TCE&=3xTia7rv!V(<XzY^Q2^$mvttS>PaM(dpT5?UaE-r<XQKMnE`pdL$X?
zLlOrFd?b}W_K-8BxX&XgJ8nUy)*~r9ZUJ>Ml>C;A9|J^WlT&Izqx1IA$tgPqLFLVp
zQ}%-Z5FV3L<!0prgvaC*D<27-1H{6orp%TJfSOZNHhKc7IW=XYCy<&`Q&IFBART-v
zrK9H+0NV0Yp$#&IJ(aR!7*FB!RLVwAAe^2`5j`L7f>H+(K2t^OQpM$0R;ckuSYrNb
zlXLKl(gmq#i8)ZzyD(+e@&K4GOxckJ2=j$0t6m_?7p71z=Qza&irg2aRIiE7<yDIc
zbwr_yQg$bgLeyE5V*jj8*Fm96QmT2PQ$K1+)Te<uIc-VQCm<}Ar0l{32#X~t7ADJN
z-Zc=ISe}ZlO2y0P6wVHs)Bw$lkd%PI@{}DRfiPH}va2m1BjoZ__f;t~LJC2TkSkL0
zl_@hqS{n6UPuUUDk{BWXl!`{kfnq0bq)v~J=k|w!@*tUU5=c|th%^m^<r}9pJy49K
z)o6Mo0B)@XsmP3{wICI-nbt_t6oyl)Xqx}Q#0Qln-boc5OsT7;I9Haw!%=?5dk2Yn
z+pKy4aBPdj1cYN-q+TE#+eE#0Bj!P(gv}{+&s680s?CKuqTbCZ$Nc4(Le$xu;xEVY
z$#anS>o)FWecbte)wYz~bB0QtZ7F+c4Ujt9QcRK<38(|wnNq)d+!<E2v+y2K;m(vj
zYo9{86yaQaYmkV2kM%7865kU^97xSQk;H-2+;dvugGAy7ti%B@IuJ=5s2^J20>bG)
zByk{|4v55mjKl}CJC-V%kyb5FI6o|XKh-5`BtBRqe%MMJ0LQ~ouYhno97!Aq$HOA=
z9K9MWVmgviTbrGWdLJp&5s4p(9Ew8JIU){qjjn^lkE-5JI@eYmEmRRsM<XQ-)&f5&
zN@|l&xr0UGo%sb%IvZoPol)nZ($vn#+<@@tOxX!GP%5Pu!9Efv94s1`kj^jvt#e!P
zs0nEsAtA$LLfT3Y2$KnE`+*z?lL=|YCGE+B(M4i%IyNo+cb?qTzysLu#P~B1Hj~rV
zpMkKMoVNZ9#GfapyH86Se-?uF=f~3V$J552Esc6p($=3X34flNj{JGBMBXQh(>iLa
zsu@nA&y#8E$~>bLPo{0q2Ey&hbQH7)%RFRyS_kb>0OT{hAQo9QOfQH<Rt?kBHfU2A
zPSevE)*%^*hm<8|ri&J*)vOlhVCl?smkMK9L&UOXr*)|2ui#FiYIY<c9>H;T+D2+1
z9A~F7EHRQHVh(fC>ZX~_cZbf28U>X`&50TX)TQigR6tnFNi!Rf&)Y-9v*)GNv6+0{
zo>yQY@|u^n#{f|X7W2{>^R*oai+O3A)H+1a0wdb~0BSCXWDBI`f=ISNT{e>K5V5vJ
zMz$jX8d;MA(v3xhZivY(ie$@EI4u&{{^49?TT_<UpC(7B`|q5*Te?3T&2nl)w(Ul?
z{Q<CSkAw?^WqTxCAS~NOxa;L0jT-6n%1nOYeCM5R{a0qJxj@$Ro;kgV4W!n}4F8qa
zIe;|?H1T#OwmuUtU!t04cd1gW^X||8%W9`baRU#G=~E0YZ)dFO1L5*^#+p75(|<eD
zeSOB5z7VwOug%2&k};-lY1C`YSkt#8On+TQO#gRXbw3zak7i<@X5#rz);Keru>iAk
zSYyt_$ym1r(x{^uYrjC4AI-2xkZ)u_8g(?2`jke=AB==RqtN%UjQzS>BMLp9F_R+z
z&yE)aCmKASv3|x=xF63%wooGh{8YyH830D73hk7*ajMWxi5sU1?UcB2DuXTjRs3vd
zS>mfqk;<xj-*pa`ewB$b_J@isOvsvDcK|FWWUW4cu$+*!js}F~ge<nOUFMBLMO%}y
zYIvKoqtB#5B{79bS;t(cNFgds%5qQD6jKS`nwnKtY;dMlP0iZmu%TM>Q?qC4Bu6-l
z=BH*!a+DEpsGujZCQe<rkvR24)*2p<c-s?MD?gwv8p&^{i2j+Zksm-Kt7jmceI{%5
z4207&S*vFtoSw-dzuBD08Lur%v}B8xW%JFOoQmSomTYt=O|1xUmJwhL0G_iVSpeZV
zD-s|Op0h-NugbVmivSaIv$0pQ@$%>G<gR|J^Kb(+;}MjA!Q8C%2p|mRX01m6F}}Ik
z?yqExM+iZC#Jp^LLDqPLrBUzYtn~;>!XxHqqrsq7V&1FSZ%po>V5yMI<PJzvUX3IT
zgypN*NYb?eml{cr0U+t6Su1HEQdt^F8VIMQk)(mTDw3AJ7uS^~{+KO#)-Nu<O4VNK
z^i=C^NSvdNZ+9-v{xQqwAg4ptk>&WOY-~+7E;rkq2{u`dnx;nYaPn8I%*My)eK_-s
z&aKMEM|^|AJ68)O;`e4Y)(XD|B6g@olho*)&VAo`>+dSd+V$;hysp4b^s+V^A9b4D
zJK5L<*zxVaHjfCXY0BB<Y-)HnYm+c_^F;RVW#hLM_=z;zvhg3B=C?5$+X}zZh#ld}
zl4M&|a}lX-%EnCwrJ=xgb2eUG;47lul8t+VPBY$-jqQQ)zekKYt5lQJgS(xd_1~F|
z*A{BaB6?TW9<r(5AWpJd-l><*b>a*AY%l?!^?i{k18LvB$QOWA-6y`FGl%NLy4thq
z@E)hRUwfgF*nfKzOejR9b_phOo`0Rl?SpKrjP$sxH#lLf3E+@<F?5r73WUc8QEUOi
z;{%B;UrT~(9Wc@8#~$|cUH3YjB@O(J_=wpy`ZhpN5I&8*4G=*1H2QWR0OE^{e(GW0
z3<N?j1Ho^627*T<!?8}nQM1n-p&cdqo6R@x{<!f*?$!QfMSfblb2v7XQc){pz-adE
z$3s}qie~>D<CQ>K(d;vGkw{r5J%8Fak+SUrBIVP*^<N%Q@oC>iN+1=V_9OqT6K8Mn
zO{4_S(3V0IWEtL45QNMPTMB}ZxnYZs|IYa~4qRWBSnd}c@bkkDJ1-_mm-`&l(Igwh
z^<o{X{d~t!XF_qG)xM2!kYTslcXZOal!D!AUk<L50i#~D_olC2{?z$>pEnDY#4z6U
z?aG@%RC?2Ap)lFJ3d>mU=O6scd91kKdf(*7!%LX0_q*$@Oo7x|@1w$2{i-f}-rV5F
z_WNqkap&!GHuzo6a<A2Gpxh>3oqfW&u4<DXH<wt|YlGP2cMou;61a&$Z1OMat@GXM
zMb}$=_4o;=rr#DnZiYjsv|x*WuGvEeQfG@#+S+LS9^|~ukM}DdsP5?C#*A}1oIX_$
z%(Wf$T7}#E9_BMYkjmS9KJ!a{OucAuhp&F#;f$)<;m7r#7KF+RclcdRdI69+JA9H<
zC0)K==JC6HwXege?Yqm5n}2~orOqz@LWvU6F`2UO@@s0XFxXz)<H!4}(i2X1b<;^_
zP(Prt$9nx|kUf6SKDMgt_V4lgU8WQI>t)k%FICI?n*JR;>G=I1M3rT;e{Z3(Z1(S!
z%5vgTy=>6$^W&G44>Ogo{oEPY7lQeW&SNU?^UpIEPywmD&#&t1Hp@R2hm|Eh^NXGj
z@_+c;nRZ6mXFmBIHE<n<Q6`T2u?}_pm(Gv|ewoESbl4sD&o;US!tS_FzLiY-fOz|H
zzq|u)mjEmT{k7+WPv*Q#1T6(SJmK?gR}Q+gB>4bz!mq7!^D+q-CMMbG$G%fOFIJK7
z+UfKwz5!^QpNA;5)3@mdKwa2gx&ow8oj!lH5j_FXOs8Lcg`CH)p?*Bza`$2LCK}Te
z#4auWTd}(1fyBA$^{<@6H$jPBCefoQu<>q~c9y2Vu4jR8YYJG;nwQBgb5oG)XJ4kj
z>of%wm$+X`^5ifHtJ8znb3wfP6Ib6#vNUwBFKK`ly-vdG^up^TyiPB?PP}Qlyv_(*
z!t3-P`CMS8I`B7Bof$!VW?-f|mPWmnz)p26iK))BflPJw{ex_4a|PjxLDB1h`gX$I
zTlQj5(o1Jnb(aA3`yh6a$*cm>BCz(=5+L&XeZW=@z6#{woIs5^(;btX6U20KzECMN
zCm=b0m@Wi*DNz4;raL_OQV`3D>?kAy*GmD*BiV}AcL>f6)LC8J%aU`0Sd}d#``UAZ
zOZrK&Gld8z^8z)ti`zdrFNo<7AXEy?3;OhRISUPlL|+cn(k|}c<jaNE$%lrQ<#nb_
znACh;=g_A4h1bc4hWYY3+yYJnh6RBd=eR>F76kTk3#b%Y5b%#wZugK<*udf-|Bl1|
z=_(cnG41t2rr6?uyL&drburw2MUa2}TkiK_6)Otul8+55q+QqIp~J}v35wPQs_$9u
zHC<N)tWabZb+|a_njrS)KsBG`4sGD4i55IS18ahw<`fqoieD43#V-Z}#9-D0=|5vI
z;-Ny&9{NULJ=9WY!yAG1P)iaIeIvj_Psp$^Tr}Mp#4_dY7n5stwtK7&WQ>?+h`cp2
zVxTT-(^rACsWsqZ5tq}%O1Sy)-Js}DpdLKOec_yUgOUri-JK_P_g<hbE_Hh+-;0C|
zm8QKX!j`W(=SeHt0(EbxTa|1JV*1~9LZwh!KnM^kIZq60L!jO&#Y#35I2kgWSi@6@
zMr{mK&oVbxu`yB_RO)UNr9DdG8Kp3|{XzalIen>ie-P9A973kp{(yZBF=Zgk_6Pkh
z*LQ#jq?!AJ>M`=!p2tY%K%idk?p~Zc5Lqo$cpMO`{e>=sK^_d$@$T-pii1IHfaNR(
zc`z6}#C;kqzzU0O4^-26?r&4=h31Gwwo7yV85<f=miRCz`Z_2szg#t*<91Wu?com1
zd>HUwE1BnyVBPRZ5c@2MyI;wv@+0iJL1_6!J=|XxS04@H!?nGbXD~k&#K(VwLU%t6
zSU1S<IYMmnL=Zcv&hy>s1|U5Fn{&m1$l^qBz8QLf)IAZ9*(U}H#6V93{z+?~LeK`<
z5gDkZ(1wo4KrKlOv_lM3FT_V+8i_AC*5fPHtCzd2fuF`Yc|e1{4DA1~fi&pLz|#?i
z7Kn9zDK2jsB&*3UgG;}nK{A5zoCcNg`pzKUSMEEF#YdJUn!=(d!s7Bt#a#1w%dK~j
z#3RRBjJ}oQcShZLCpj}}{Q2(vrA;9xfi}yyGg8cZVwnHm^WC!I>n4VF-Upf1ObqRb
z_dr@RF=SpY;|q}3GBGS0s@o!v*|aXfA-CHNU+PZ_^FO)J<?Oa;1-{bDX`$V<AE|pe
zEo4L3@RdPwTG;h!ty7)~U!im}=a*Xwy`C0c8ogW>;^ouAx+~q2a<LJYaJGa+uOf&K
zx!CB|yYl@j__SEo651@?9@6P&!&qp>5+IEN>(6H;Kwj`{$mcWi#eqD0E>sVB?hh-T
z3+)I1l|s*j=w}lBr4(>>nE%3a-QtSb@Yaq3S<~_ESH)3!h<m>jDuT{y6)%PMDjcYk
zdMPB~LvEa;6z)AgRDVmmZ58vwn6^=&QfhvPjlOA0;lB$*bs*!uRk1LPnH=LD+J6^@
ze7LX2CPtMd7KcUoP_50nwOtp7q#KEIj1uQq62_K=s)z3mY2c@ssqujBE(z_WTR<AT
zBxJW;%n*nfE(yJ5p$XhV(0;Krw1L}FXz9|>25w6dzgQaL7e7Kp+&Q{DEP4YKT~je~
zoZ95O-z!@lmZWve?J4?M5ytu({Qzkb*hD!X+*gEz6%PC_(U*(99;$}}cVP1MFg8#N
z9x8=i5Bd5kLnar4^0%N+?F`(Z$v=fQj6v08!kDB2aPcP_qoL{_y2Fwy!&tTDB+6MC
z4jL?yqY%1T6{_EcZf$Z^XhS_z3attW^^#N3Q$p+NP<<A<)ydUitj2PZ(7HOTt9K<m
zf%8xq6GJs7=Z;LRDHM{>x<(4!hW<vECEf~){(_u-tlE6HT(#!htGd1w^3_!II9l|$
zHjJ&)dhFi-hA9N|uL>ZNTN`?26$GS*Yr~5!*4hN3&9!0gbyk}~(AsQ`v}q}{s5R22
zC5bj$MVrTD@Z`@pZDG;>6o+chMeZkMZDC1LYqDH4xdF`?O#*2TSg!+0fN<UrauF^6
zLI(11Q>e1N-J0a4LLt%QCMk4*E(F>fs^9c>FHCO6Mzm<TI8>7d4zh*l=ax{dltNoV
zJO3-!Znh<4{+HIA(B#%o{cmqKliV7qyIgB>tEgKtcFIMQ+e1}X<zAKC9;q8DuiGx_
zHf=)aJ3=+Tir4LktgBq7hwKQkt_sbGF>+_9KB#gllRKk0!U<w<+9`1)qYDuLcZJID
z<7Sh)!kE6ZkVeRyZC6O%sVOAsA)&fm3hge4K&OX<h@et)VnwzmREzq!-jDW#F*7CL
z5GpwB3Hh&}X}DY^#%sK@EBx`}#{b(-?;X$CX*c<Lh~mAH5yf-;2S|Zb{_l`KK$<u3
zAIiO<Vy56#>@D<Kt`OTB4z6);#D2$=B@To|AB5_TzV6tr2SRQq61yEEcH17t-nVuO
zMuZT|@nb+<+#X(F?ur1S&vuDv5`}=+ZF?BJZ|znH+HMa;c55lL<WOX{mLzt2NbGi%
zq&0DIV@Fu@ABkLX`D=*^b!=S;>w1nU&HwQd_rHp{#dX-}>|1+kE7_kqf%Vp(kNu@S
z{K{s*R*b!?aKe^krH(DsETrv5>AED0Mu&8{6;X<;KAHI&=TzM}`d1w0TsVd`9KtEf
zoK8oEF7>Y-b`}5Cxq8${X{5=_B^~w_Qj9sFN$37XslTf6+uZF*mH(%yoclyh>rctI
zHOFK{xyFCj^P9)ssp@BT>3;3lUyQx|KFN@k1M)aC>jpY{G3QT9eM!F6M{`LcuH?v?
zHgRCyx7;&I<bQG<QB>$9QQ>4171BVSf=yHaqPLUc@G>LrB~jsXb@OHJMHhY^89PME
zd@jb$I)pNyFVw4-5xBpI#$Jd*4P`+jLv$|*?_cN7?(be#ocua+K&X`ZS{!hgE<{jh
z%&CTIcX&l(&JGm4bWmu_;mW@;tcVJa<nsHg-B@w@k(?dvd+D(7NRBsNgY92lmY9?)
zdK}xTx2Dx=pnF-@NjaQAR!^6U6FioSP0h*bX+Q%QCxBp_07%at%ULG?(*DPC)(L<(
z!DG2#YR(MBLeNeyC1;0XOQCyHa&{=TByoZ%Ih<gROqaMy^O;=Hv&Ff5&q3}k{<)Vc
zxj;wn^F>c8Cu<)+1E4u7>MIb&O8P2sl3Oj=5y+|U4soxln4YtXO{f%_o|B7WWy*5C
zXk<oCtr+4?NzN#gGGt1P)rIJ1OHSQf<K9rwlC#0*e66RJ90$zEt=3nRC7#a}y_i!U
z*0|SqeLlyZ>LjjQAtHSt7n_}vc}@QYFd~Iu{`Lr@nJ?t*JvKmI^+JxsONlE$MEXK5
uJKKs>2wJ4GB9U4Oy_gk=)RIJ`vk>VGiSd#fe(9!;GcN9;e)3Nx7yTaymw8qI

diff --git a/gen/go/fora/admin/v1/admin.pb.go b/gen/go/fora/admin/v1/admin.pb.go
index a6a4106b..0ed1d96a 100644
--- a/gen/go/fora/admin/v1/admin.pb.go
+++ b/gen/go/fora/admin/v1/admin.pb.go
@@ -142,9 +142,9 @@ type ReportingPolicy struct {
 	// DEPRECATED, ignored. This used to set the accepted relative deviation
 	// between the estimated and the reported quantity, and a report outside it was
 	// refused. A usage report is never refused for its quantity: the reported
-	// quantity is unrestricted, a metered report settles by the rule on
-	// fora.v1.Pricing, and a quantity far from the estimate is analysed out of
-	// band. An Exchange MUST NOT refuse a report on this setting. The field and
+	// quantity is unrestricted, and monitoring how far reports fall from
+	// estimates is the Exchange operator's own business, not part of the
+	// protocol. An Exchange MUST NOT refuse a report on this setting. The field and
 	// its bounds are retained because removing them would break the wire
 	// contract.
 	//
diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index c57cef35..d5e88154 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -523,7 +523,7 @@ type PricingModel int32
 const (
 	PricingModel_PRICING_MODEL_UNSPECIFIED PricingModel = 0 // unset — zero allowed on WellKnownManifest.pricing_models_supported (capability list); rejected (not_in:[0]) as the Pricing.model discriminator (omission cannot default to FREE)
 	PricingModel_PRICING_MODEL_FREE        PricingModel = 1 // no charge; rate must be 0 (state FREE explicitly — absent Pricing is not free)
-	PricingModel_PRICING_MODEL_PER_UNIT    PricingModel = 2 // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: settlement follows the rule on Pricing; an estimated_quantity is optional, and positive when an offer states it
+	PricingModel_PRICING_MODEL_PER_UNIT    PricingModel = 2 // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: the purchase charge follows the rule on Pricing; an estimated_quantity is optional, and positive when an offer states it
 	PricingModel_PRICING_MODEL_FLAT        PricingModel = 3 // one-time flat fee; rate is the total, no unit
 )
 
@@ -1956,12 +1956,9 @@ func (RetrievalAuthFailureReason) EnumDescriptor() ([]byte, []int) {
 //
 // THE REPORTED QUANTITY IS UNRESTRICTED. No reason here refuses a report
 // because its consumed_quantity differs from the offer's estimate, above or
-// below, and an Exchange MUST NOT refuse a report for that. A quantity below the
-// estimate is charged as consumed and a quantity above the ceiling is held for
-// dispute (the settlement rule on Pricing); neither is MALFORMED. A report
-// against an offer that states no estimate is charged as consumed, whatever
-// the quantity. A quantity far from the estimate is analysed out of band,
-// never by refusing the report.
+// below, and an Exchange MUST NOT refuse a report for that; such a report is
+// not MALFORMED. Monitoring how far reports fall from estimates is the
+// Exchange operator's own business, not part of the protocol.
 type UsageReportRejectionReason int32
 
 const (
@@ -2712,7 +2709,7 @@ type Offer struct {
 	// the Exchange moves that term's price here, so the term inside `terms`
 	// carries no pricing of its own (the offer.terms.pricing_unset rule). This is
 	// the price execute charges, the price a Broker ranks and compares across
-	// Exchanges, and the price a metered purchase settles on. A resource with
+	// Exchanges, and the price a metered purchase is charged at. A resource with
 	// multiple alternative terms (e.g. dual-licensed) produces multiple separate
 	// offers, one per term — never one offer with a "headline" picked among them.
 	//
@@ -2721,15 +2718,13 @@ type Offer struct {
 	// term, and the offer carries no second copy, so the offer's price and its
 	// term's price cannot disagree.
 	//
-	// On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a
-	// metered purchase settles on are read from here (see Pricing). The
-	// estimate is optional. When the publisher states one — on the term's own
-	// pricing, or once for the resource on ResourceEntry.estimated_quantity —
-	// the Exchange carries it here as estimated_quantity, the term's own
-	// estimate taking precedence. When the publisher states none, the offer
-	// may carry none, and then a usage report settles with no ceiling. An
-	// Exchange projecting a term carries the term's estimate_tolerance_bps here
-	// unchanged.
+	// On a metered (PER_UNIT) offer, the rate and the estimate a metered
+	// purchase is charged at are read from here (see Pricing). The estimate is
+	// optional. When the publisher states one — on the term's own pricing, or
+	// once for the resource on ResourceEntry.estimated_quantity — the Exchange
+	// carries it here as estimated_quantity, the term's own estimate taking
+	// precedence. When the publisher states none, the offer may carry none, and
+	// the purchase then charges one unit.
 	Pricing *Pricing `protobuf:"bytes,3,opt,name=pricing,proto3" json:"pricing,omitempty"`
 	// How resource will be delivered.
 	DeliveryMethod DeliveryMethod `protobuf:"varint,4,opt,name=delivery_method,json=deliveryMethod,proto3,enum=fora.v1.DeliveryMethod" json:"delivery_method,omitempty"`
@@ -3927,11 +3922,9 @@ func (x *Obligation) GetDetail() string {
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
-//   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state
-//     Pricing.estimate_tolerance_bps, the tolerance a usage report settles
-//     within when an estimate is stated (default 10%); no other model may
-//     carry a tolerance. Neither is required, on the pushed term or on the
-//     offer it projects to — see Pricing.estimated_quantity.
+//   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not
+//     required, on the pushed term or on the offer it projects to — see
+//     Pricing.estimated_quantity.
 //   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A
 //     REFERENCE_ONLY term that references no document is meaningless → reject
 //     at ingest.
@@ -4216,56 +4209,20 @@ func (x *Preview) GetSize() string {
 // Unit cost is denominated in the Exchange's base currency.
 //
 // Fields: model, rate, currency, unit_cost, estimated_quantity,
-// license_duration_months, unit, metering, estimate_tolerance_bps.
+// license_duration_months, unit, metering.
 //
-// METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit
-// consumed, and the quantity consumed is known only after use. Up to three
-// numbers on the offer's `pricing` fix what a metered purchase can cost, and
-// the Exchange's offer signature covers them, so the agent's acceptance of
-// the offer is its consent to them:
+// METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the
+// publisher states the rate R, the price of one `unit`, and the unit. The
+// offer may also state an estimate E (estimated_quantity, optional, positive
+// when stated; see Offer). The Exchange's offer signature covers both, so the
+// agent's acceptance of the offer is its consent to them.
 //
-//	R = rate                    the price of one `unit`
-//	E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and
-//	                            positive when stated (see Offer)
-//	T = estimate_tolerance_bps  the tolerance on the estimate, in basis points
-//	                            of E; 1000 (10%) when the term states none
-//
-// WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and
-// the usage report settles on the reported Usage.consumed_quantity C at
-// C × R, whatever C is: nothing is held, because there is no ceiling to hold
-// anything above. Nothing in such an offer bounds what the purchase is
-// charged, and T has nothing to widen.
-//
-// WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the
-// agent accepts E × R: that is the amount
-// TransactionResultItem.cost carries for a metered item, and the amount the
-// Exchange authorizes. When the usage report arrives, the transaction settles
-// on the reported Usage.consumed_quantity C against the ceiling
-//
-//	ceiling quantity  Q = E × (10000 + T) / 10000
-//
-//	- C ≤ E: the charge is C × R. A quantity below the estimate is charged for
-//	  what was consumed, never for the estimate.
-//	- E < C ≤ Q: the charge is C × R. Consumption within the tolerance is
-//	  charged in full.
-//	- C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for
-//	  dispute. It is never charged automatically: nothing above Q × R is
-//	  charged unless dispute resolution establishes that it is owed.
-//
-// Equivalently, the charge is min(C, Q) × R and the held amount is
-// max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance
-// gives Q = 16.5), and the arithmetic is exact decimal: every input is an
-// integer or a decimal string, and the only division is by 10000, so no step
-// rounds. Q × R is therefore the most a metered purchase can be charged
-// without a dispute.
-//
-// The report that settles is the one UsageReport a transaction accepts. A
-// metered price whose metering is PRICING_METERING_NONE has no report, so
-// what is charged at purchase is final: E × R when the price states an
-// estimate. This version does not say what such a price charges when it
-// states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`
-// (Offer.pricing) — the offer's one price, which execute charges — and never
-// a value the report carries.
+// A metered purchase charges E × R, or one unit, 1 × R, when the offer states
+// no estimate. That is the amount TransactionResultItem.cost carries for the
+// item, and the charge is final. A disagreement about the quantity consumed
+// is a dispute, which this version does not define further. The charge reads
+// the offer's own `pricing` (Offer.pricing) — the offer's one price, which
+// execute charges.
 type Pricing struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// Provider's pricing model.
@@ -4286,12 +4243,10 @@ type Pricing struct {
 	// For documents: page count. For data: record count.
 	//
 	// OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.
-	// It is E in the settlement rule above. When a metered offer states it, it
-	// is positive (the offer.metered.estimate_positive rule): the agent accepts
-	// E × rate at purchase, and the estimate with estimate_tolerance_bps fixes
-	// the ceiling a usage report settles against. When a metered offer states
-	// none, there is no ceiling: the agent accepts the rate, and the usage report
-	// settles at the consumed quantity × rate. A PER_UNIT price may state a rate
+	// It is E in the metered price rule above. When a metered offer states it,
+	// it is positive (the offer.metered.estimate_positive rule), and the
+	// purchase charges E × rate. When a metered offer states none, the purchase
+	// charges one unit, 1 × rate. A PER_UNIT price may state a rate
 	// with or without an estimate; whether to state one is the publisher's
 	// decision, and nothing requires it.
 	//
@@ -4316,25 +4271,9 @@ type Pricing struct {
 	// Absent = PRICING_METERING_ONLINE (default real-time tracking).
 	// NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.
 	// OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.
-	Metering *PricingMetering `protobuf:"varint,9,opt,name=metering,proto3,enum=fora.v1.PricingMetering,oneof" json:"metering,omitempty"`
-	// Tolerance on estimated_quantity, in basis points of the estimate: 1000 is
-	// 10%, 0 is none. It is T in the settlement rule above. A usage report whose
-	// consumed quantity is within estimated_quantity × (10000 + T) / 10000 is
-	// charged in full; anything above that ceiling is held for dispute and never
-	// charged automatically. It applies only when the price states an estimate:
-	// without one there is no ceiling for it to widen.
-	//
-	// Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no
-	// tolerance, the estimate is the ceiling — stays distinct from "the default".
-	// Basis points rather than a decimal string because the value is a ratio,
-	// not money, and an integer keeps it exact. Bounded at 10000 (100%, a
-	// ceiling of twice the estimate). Allowed only on a PER_UNIT price (the
-	// pricing.estimate_tolerance.requires_per_unit rule). A publisher states it
-	// on the term it pushes, and the Exchange carries it unchanged onto the
-	// offer's pricing.
-	EstimateToleranceBps *int32 `protobuf:"varint,10,opt,name=estimate_tolerance_bps,json=estimateToleranceBps,proto3,oneof" json:"estimate_tolerance_bps,omitempty"`
-	unknownFields        protoimpl.UnknownFields
-	sizeCache            protoimpl.SizeCache
+	Metering      *PricingMetering `protobuf:"varint,9,opt,name=metering,proto3,enum=fora.v1.PricingMetering,oneof" json:"metering,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
 }
 
 func (x *Pricing) Reset() {
@@ -4423,13 +4362,6 @@ func (x *Pricing) GetMetering() PricingMetering {
 	return PricingMetering_PRICING_METERING_ONLINE
 }
 
-func (x *Pricing) GetEstimateToleranceBps() int32 {
-	if x != nil && x.EstimateToleranceBps != nil {
-		return *x.EstimateToleranceBps
-	}
-	return 0
-}
-
 // Requester — Universal identity for any FORA client.
 //
 // Carries identity and entitlements ONLY — who is asking and what they are
@@ -5595,13 +5527,9 @@ type TransactionResultItem struct {
 	BillingId string `protobuf:"bytes,3,opt,name=billing_id,json=billingId,proto3" json:"billing_id,omitempty"`
 	// Resource title echoed from the Offer.
 	ResourceTitle *string `protobuf:"bytes,4,opt,name=resource_title,json=resourceTitle,proto3,oneof" json:"resource_title,omitempty"`
-	// Cost for this item. For a metered (PER_UNIT) item whose offer states an
-	// estimate, this is the amount the agent accepted at purchase: the offer's
-	// estimated_quantity × rate. It is not the final charge when a usage report
-	// follows; the report settles the transaction at min(consumed, ceiling) ×
-	// rate, holding any excess above the ceiling for dispute (see Pricing). When
-	// the offer states no estimate, no amount is fixed at purchase: the agent
-	// accepted the rate, and the report settles the charge at consumed × rate.
+	// Cost for this item. For a metered (PER_UNIT) item this is the purchase
+	// charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when
+	// the offer states no estimate (see Pricing).
 	Cost *Cost `protobuf:"bytes,5,opt,name=cost,proto3" json:"cost,omitempty"`
 	// If under subscription, no per-request charge.
 	SubscriptionId *string `protobuf:"bytes,6,opt,name=subscription_id,json=subscriptionId,proto3,oneof" json:"subscription_id,omitempty"`
@@ -6621,15 +6549,9 @@ func (x *RefreshCatalogResponse) GetStarted() bool {
 
 // ReportingObligation — Requirements attached to a delivery.
 //
-// For a metered (PER_UNIT) purchase the report is also the settlement: its
-// Usage.consumed_quantity is charged at the offer's rate. When the offer
-// states an estimate, the charge stops at the ceiling estimated_quantity ×
-// (10000 + estimate_tolerance_bps) / 10000, and any quantity above the
-// ceiling is held for dispute, never charged automatically; when it states
-// none, the whole consumed quantity is charged (the rule is stated once, on
-// Pricing). An honest report of a quantity that
-// differs from the estimate, above or below, is a valid report and is never
-// refused for that difference.
+// A usage report is a record of the quantity consumed. An honest report of a
+// quantity that differs from the estimate, above or below, is a valid report
+// and is never refused for that difference.
 type ReportingObligation struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// Whether post-usage reporting is required.
@@ -6731,18 +6653,9 @@ func (x *ReportingObligation) GetExtCritical() []string {
 // Filed by the agent or Broker after resource is used.
 // Failure to report may result in the Exchange blocking subsequent access.
 //
-// For a metered (PER_UNIT) transaction the report settles the purchase. With
-// R the offer's rate and C this report's Usage.consumed_quantity:
-//   - when the offer states no estimate, there is no ceiling: C is charged
-//     C × R and nothing is held;
-//   - when it states an estimate E, with T its estimate_tolerance_bps (1000
-//     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below
-//     Q (including C below E) is charged C × R, and C above Q is charged
-//     Q × R, the excess (C − Q) × R held for dispute and never charged
-//     automatically.
-//
-// The full rule is on Pricing. The Exchange accepts such a report: a consumed
-// quantity that differs from the estimate is never a reason to refuse it.
+// The report is a record of the quantity consumed (Usage.consumed_quantity).
+// The Exchange accepts it whatever that quantity is: a consumed quantity that
+// differs from the estimate is never a reason to refuse it.
 //
 // What refuses a report. A report that arrives after the transaction's
 // reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
@@ -6966,15 +6879,9 @@ type Usage struct {
 	// REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.
 	// For text: tokens consumed. For video: seconds watched. For data: records accessed.
 	//
-	// For a metered (PER_UNIT) transaction this is C in the settlement rule on
-	// Pricing: it is charged at the offer's rate. When the offer states an
-	// estimate, the charge stops at the ceiling the offer's estimated_quantity
-	// and estimate_tolerance_bps fix, and the quantity above that ceiling is
-	// held for dispute; when it states none, all of it is charged. The agent
-	// reports what it consumed, not
-	// what it estimated: an Exchange MUST NOT refuse a report because this
-	// differs from the estimate, in either direction, and MUST NOT charge a
-	// quantity above the ceiling without a dispute resolving it.
+	// The agent reports what it consumed, not what it estimated: an Exchange
+	// MUST NOT refuse a report because this differs from the estimate, in either
+	// direction.
 	ConsumedQuantity int32 `protobuf:"varint,3,opt,name=consumed_quantity,json=consumedQuantity,proto3" json:"consumed_quantity,omitempty"`
 	// Whether resource/output was displayed to a human.
 	DisplayedToUser *bool `protobuf:"varint,4,opt,name=displayed_to_user,json=displayedToUser,proto3,oneof" json:"displayed_to_user,omitempty"`
@@ -7134,17 +7041,6 @@ func (x *UsageAsset) GetPackageId() string {
 }
 
 // UsageReportResponse — Acknowledgment of a usage report.
-//
-// When part of a metered report is held for dispute (its consumed quantity
-// exceeds the ceiling the offer fixes — see Pricing), the response is still a
-// plain success with a report_id: the report is accepted in full, and the
-// excess is held rather than refused. The response carries no amounts because
-// the settlement is a pure function of values the agent already holds — the
-// signed offer's rate, and its estimated_quantity and estimate_tolerance_bps
-// when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling
-// and the held excess exactly, with no figure from the Exchange to trust or
-// reconcile. The report_id is what identifies the held excess: it is the
-// reference any dispute over that excess carries (see DisputeRequest).
 type UsageReportResponse struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
@@ -10999,8 +10895,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x06_widthB\t\n" +
 	"\a_heightB\v\n" +
 	"\t_durationB\a\n" +
-	"\x05_size\"\xfa\n" +
-	"\n" +
+	"\x05_size\"\xe6\b\n" +
 	"\aPricing\x125\n" +
 	"\x05model\x18\x01 \x01(\x0e2\x15.fora.v1.PricingModelB\b\xbaH\x05\x82\x01\x02 \x00R\x05model\x124\n" +
 	"\x04rate\x18\x02 \x01(\tB \xbaH\x1dr\x1b\x18 2\x17^([0-9]+([.][0-9]+)?)?$R\x04rate\x12\x1a\n" +
@@ -11010,20 +10905,16 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x17license_duration_months\x18\a \x01(\x05H\x02R\x15licenseDurationMonths\x88\x01\x01\x12\x93\x02\n" +
 	"\x04unit\x18\b \x01(\tB\xf9\x01\xbaH5r3\x18@2/^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$\x8a\xb5\x18\afetches\x8a\xb5\x18\baccesses\x8a\xb5\x18\x06tokens\x8a\xb5\x18\x05calls\x8a\xb5\x18\x05pages\x8a\xb5\x18\aseconds\x8a\xb5\x18\aminutes\x8a\xb5\x18\arecords\x8a\xb5\x18\astreams\x8a\xb5\x18\x06images\x8a\xb5\x18\x05seats\x8a\xb5\x18\x12units-manufactured\x8a\xb5\x18\n" +
 	"characters\x8a\xb5\x18\x05bytes\x8a\xb5\x18\x05items\x8a\xb5\x18\x05sq-km\x9a\xb5\x18\fpricingunitsH\x03R\x04unit\x88\x01\x01\x129\n" +
-	"\bmetering\x18\t \x01(\x0e2\x18.fora.v1.PricingMeteringH\x04R\bmetering\x88\x01\x01\x12E\n" +
-	"\x16estimate_tolerance_bps\x18\n" +
-	" \x01(\x05B\n" +
-	"\xbaH\a\x1a\x05\x18\x90N(\x00H\x05R\x14estimateToleranceBps\x88\x01\x01:\xa6\x04\xbaH\xa2\x04\x1a\x97\x01\n" +
+	"\bmetering\x18\t \x01(\x0e2\x18.fora.v1.PricingMeteringH\x04R\bmetering\x88\x01\x01:\xd6\x02\xbaH\xd2\x02\x1a\x97\x01\n" +
 	"\x1epricing.per_unit.requires_unit\x12'unit is required when model is PER_UNIT\x1aLthis.model != fora.v1.PricingModel.PRICING_MODEL_PER_UNIT || this.unit != ''\x1a\xb5\x01\n" +
-	"\x16pricing.free.zero_rate\x12,rate must be 0 (or empty) when model is FREE\x1amthis.model != fora.v1.PricingModel.PRICING_MODEL_FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')\x1a\xcd\x01\n" +
-	",pricing.estimate_tolerance.requires_per_unit\x12=estimate_tolerance_bps is allowed only when model is PER_UNIT\x1a^!has(this.estimate_tolerance_bps) || this.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNITB\f\n" +
+	"\x16pricing.free.zero_rate\x12,rate must be 0 (or empty) when model is FREE\x1amthis.model != fora.v1.PricingModel.PRICING_MODEL_FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')B\f\n" +
 	"\n" +
 	"_unit_costB\x15\n" +
 	"\x13_estimated_quantityB\x1a\n" +
 	"\x18_license_duration_monthsB\a\n" +
 	"\x05_unitB\v\n" +
-	"\t_meteringB\x19\n" +
-	"\x17_estimate_tolerance_bps\"\x8e\x04\n" +
+	"\t_meteringJ\x04\b\n" +
+	"\x10\vR\x16estimate_tolerance_bps\"\x8e\x04\n" +
 	"\tRequester\x12\x1a\n" +
 	"\x02id\x18\x01 \x01(\tB\n" +
 	"\xbaH\ar\x05\x10\x01\x18\xff\x01R\x02id\x12\xd3\x01\n" +
diff --git a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
index 1100736d..9e953a3e 100644
--- a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
+++ b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.json
@@ -4,7 +4,7 @@
   "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
   "properties": {
     "quantity_tolerance": {
-      "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
+      "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
       "maximum": 1,
       "minimum": 0,
       "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
index f2827e16..de402c6c 100644
--- a/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
+++ b/gen/jsonschema/fora.admin.v1.ReportingPolicy.schema.strict.json
@@ -5,7 +5,7 @@
   "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
   "properties": {
     "quantity_tolerance": {
-      "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
+      "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
       "maximum": 1,
       "minimum": 0,
       "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
index 3e37391a..7d685f77 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.json
@@ -4,7 +4,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
index c6b9e3d0..0d5fbf4a 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyRequest.schema.strict.json
@@ -5,7 +5,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
index 9ad0d0c7..2343b930 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.json
@@ -4,7 +4,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
index 5bf0cfdc..322d8dc9 100644
--- a/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
+++ b/gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json
@@ -5,7 +5,7 @@
       "description": "ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.",
       "properties": {
         "quantity_tolerance": {
-          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
+          "description": "DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
           "maximum": 1,
           "minimum": 0,
           "type": "number"
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 45d7c4c6..19c59a35 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -287,7 +287,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -523,7 +523,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index b815dfe9..b54b85bc 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -296,7 +296,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -537,7 +537,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index 760e79bd..0e9e0730 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -254,8 +254,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -433,22 +433,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -578,7 +571,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index 4990000c..7eb74cd8 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -258,8 +258,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -440,22 +440,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -587,7 +580,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index d46107cf..178c2fe6 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -92,22 +92,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -296,7 +289,7 @@
   },
   "$id": "fora.v1.LicenseTerm.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index e9b89f3d..1d8e0f63 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -95,22 +95,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -302,7 +295,7 @@
   "$id": "fora.v1.LicenseTerm.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+  "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
   "properties": {
     "license": {
       "$ref": "#/$defs/fora.v1.License",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index be6e4e09..5a95d351 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -205,22 +205,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -350,7 +343,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -714,8 +707,8 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-      "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+      "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index 1ff815e7..04b40ed6 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -210,22 +210,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -357,7 +350,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -726,8 +719,8 @@
     },
     "pricing": {
       "$ref": "#/$defs/fora.v1.Pricing",
-      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-      "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+      "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+      "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
     },
     "reporting": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index 5ff1d462..3fa2ab51 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -254,8 +254,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -344,22 +344,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -489,7 +482,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index 0873aaf2..88ab92b0 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -258,8 +258,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -350,22 +350,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -497,7 +490,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.json b/gen/jsonschema/fora.v1.Pricing.schema.json
index 9dd0af90..cfec302b 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.json
@@ -1,22 +1,15 @@
 {
   "$id": "fora.v1.Pricing.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
   "properties": {
     "currency": {
       "default": "",
       "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
       "type": "string"
     },
-    "estimate_tolerance_bps": {
-      "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-      "maximum": 10000,
-      "minimum": 0,
-      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-      "type": "integer"
-    },
     "estimated_quantity": {
-      "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+      "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.Pricing.schema.strict.json b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
index 1f3ab9ce..4cfd071b 100644
--- a/gen/jsonschema/fora.v1.Pricing.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Pricing.schema.strict.json
@@ -2,22 +2,15 @@
   "$id": "fora.v1.Pricing.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+  "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
   "properties": {
     "currency": {
       "default": "",
       "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
       "type": "string"
     },
-    "estimate_tolerance_bps": {
-      "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-      "maximum": 10000,
-      "minimum": 0,
-      "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-      "type": "integer"
-    },
     "estimated_quantity": {
-      "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+      "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index c52e0aca..a35c4020 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -166,22 +166,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 9aa39bf9..f1aeec15 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -170,22 +170,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
index 3be1275c..e6786fda 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.ReportingObligation.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+  "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
   "properties": {
     "endpoint": {
       "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
index e400c07b..a4247b31 100644
--- a/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ReportingObligation.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.ReportingObligation.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+  "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
   "properties": {
     "endpoint": {
       "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index 6ff5f07a..4e4e3809 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -166,22 +166,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index e9eefae5..a359c316 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -170,22 +170,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index 5d752fc2..379ad0d5 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -31,7 +31,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -254,8 +254,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -433,22 +433,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -609,7 +602,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index c1bbcd4d..241cd0ba 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -33,7 +33,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -258,8 +258,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -440,22 +440,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -619,7 +612,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index 540dd7a6..b3b6576c 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -51,7 +51,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -274,8 +274,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -364,22 +364,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -509,7 +502,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index 190b92b9..e9898cec 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -54,7 +54,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -279,8 +279,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -371,22 +371,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -518,7 +511,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index e1779514..950a3377 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -207,7 +207,7 @@
       "type": "object"
     },
     "fora.v1.LicenseTerm": {
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -430,8 +430,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -520,22 +520,15 @@
       "type": "object"
     },
     "fora.v1.Pricing": {
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -665,7 +658,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index b6ef97df..8eb2cda3 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -214,7 +214,7 @@
     },
     "fora.v1.LicenseTerm": {
       "additionalProperties": false,
-      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
+      "description": "One LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).",
       "properties": {
         "license": {
           "$ref": "#/$defs/fora.v1.License",
@@ -439,8 +439,8 @@
         },
         "pricing": {
           "$ref": "#/$defs/fora.v1.Pricing",
-          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.",
-          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
+          "description": "It derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.",
+          "title": "The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them."
         },
         "reporting": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -531,22 +531,15 @@
     },
     "fora.v1.Pricing": {
       "additionalProperties": false,
-      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries.",
+      "description": "Providers set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.",
       "properties": {
         "currency": {
           "default": "",
           "description": "ISO 4217 currency code (e.g. \"USD\", \"EUR\").",
           "type": "string"
         },
-        "estimate_tolerance_bps": {
-          "description": "Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.",
-          "maximum": 10000,
-          "minimum": 0,
-          "title": "Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.",
-          "type": "integer"
-        },
         "estimated_quantity": {
-          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+          "description": "OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.",
@@ -678,7 +671,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 076cf05a..7da554f8 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -251,7 +251,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -487,7 +487,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 721be8b0..f9336b49 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -259,7 +259,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -500,7 +500,7 @@
         },
         "cost": {
           "$ref": "#/$defs/fora.v1.Cost",
-          "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
+          "description": "Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing)."
         },
         "delivery_method": {
           "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 82e6c92f..501145ac 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -251,7 +251,7 @@
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -505,7 +505,7 @@
     },
     "cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
+      "description": "Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing)."
     },
     "delivery_method": {
       "anyOf": [
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index 2b44bbfa..01b26900 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -259,7 +259,7 @@
     },
     "fora.v1.ReportingObligation": {
       "additionalProperties": false,
-      "description": "For a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference.",
+      "description": "A usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.",
       "properties": {
         "endpoint": {
           "description": "URL to submit the usage report to (if different from Exchange).",
@@ -519,7 +519,7 @@
     },
     "cost": {
       "$ref": "#/$defs/fora.v1.Cost",
-      "description": "Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate."
+      "description": "Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing)."
     },
     "delivery_method": {
       "anyOf": [
diff --git a/gen/jsonschema/fora.v1.Usage.schema.json b/gen/jsonschema/fora.v1.Usage.schema.json
index 25f9c662..7604468d 100644
--- a/gen/jsonschema/fora.v1.Usage.schema.json
+++ b/gen/jsonschema/fora.v1.Usage.schema.json
@@ -52,7 +52,7 @@
     },
     "consumed_quantity": {
       "default": 0,
-      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+      "description": "The agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
diff --git a/gen/jsonschema/fora.v1.Usage.schema.strict.json b/gen/jsonschema/fora.v1.Usage.schema.strict.json
index 9102abad..8b546434 100644
--- a/gen/jsonschema/fora.v1.Usage.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Usage.schema.strict.json
@@ -54,7 +54,7 @@
     },
     "consumed_quantity": {
       "default": 0,
-      "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+      "description": "The agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
index 9eb09622..567cdc0d 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -50,7 +50,7 @@
         },
         "consumed_quantity": {
           "default": 0,
-          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+          "description": "The agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
@@ -107,7 +107,7 @@
   },
   "$id": "fora.v1.UsageReport.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n R the offer's rate and C this report's Usage.consumed_quantity:\n   - when the offer states no estimate, there is no ceiling: C is charged\n     C × R and nothing is held;\n   - when it states an estimate E, with T its estimate_tolerance_bps (1000\n     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below\n     Q (including C below E) is charged C × R, and C above Q is charged\n     Q × R, the excess (C − Q) × R held for dispute and never charged\n     automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
index c930253e..12fa44d9 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -52,7 +52,7 @@
         },
         "consumed_quantity": {
           "default": 0,
-          "description": "For a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+          "description": "The agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "title": "REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.",
@@ -111,7 +111,7 @@
   "$id": "fora.v1.UsageReport.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n R the offer's rate and C this report's Usage.consumed_quantity:\n   - when the offer states no estimate, there is no ceiling: C is charged\n     C × R and nothing is held;\n   - when it states an estimate E, with T its estimate_tolerance_bps (1000\n     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below\n     Q (including C below E) is charged C × R, and C above Q is charged\n     Q × R, the excess (C − Q) × R held for dispute and never charged\n     automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
index 4a0aec3b..833ff34b 100644
--- a/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.UsageReportResponse.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's rate, and its estimated_quantity and estimate_tolerance_bps\n when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
+  "description": "UsageReportResponse — Acknowledgment of a usage report.",
   "properties": {
     "ext": {
       "description": "Extension point",
@@ -25,6 +25,6 @@
       "type": "string"
     }
   },
-  "title": "UsageReportResponse — Acknowledgment of a usage report.",
+  "title": "Usage Report Response",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
index fce2bab7..0a6cdea3 100644
--- a/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.UsageReportResponse.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "When part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's rate, and its estimated_quantity and estimate_tolerance_bps\n when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest).",
+  "description": "UsageReportResponse — Acknowledgment of a usage report.",
   "properties": {
     "ext": {
       "description": "Extension point",
@@ -26,6 +26,6 @@
       "type": "string"
     }
   },
-  "title": "UsageReportResponse — Acknowledgment of a usage report.",
+  "title": "Usage Report Response",
   "type": "object"
 }
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 1af4f75a..3216e165 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -824,7 +824,7 @@ class ReportingObligation(WireModel):
 class ReportingPolicy(WireModel):
     quantity_tolerance: confloat(ge=0.0, le=1.0) | None = Field(
         None,
-        description='DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.',
+        description="DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.",
     )
     required_fields: (
         list[constr(pattern=r'^[A-Za-z0-9._:*-]+$', min_length=1, max_length=64)] | None
@@ -1308,13 +1308,9 @@ class Pricing(WireModel):
     currency: str | None = Field(
         '', description='ISO 4217 currency code (e.g. "USD", "EUR").'
     )
-    estimate_tolerance_bps: conint(ge=0, le=10000) | None = Field(
-        None,
-        description='Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from "the default".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer\'s pricing.',
-    )
     estimated_quantity: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description="Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
+        description="Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).",
     )
     license_duration_months: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
@@ -1559,7 +1555,7 @@ class Usage(WireModel):
     )
     consumed_quantity: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description="REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.",
+        description="REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.",
     )
     consumed_unit: (
         constr(
@@ -1903,7 +1899,7 @@ class Offer(WireModel):
     )
     pricing: Pricing | None = Field(
         None,
-        description='The offer\'s price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term\'s price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.\n\nIt derives from exactly one catalog term: the term\'s pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer\'s price and its\n term\'s price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term\'s own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term\'s own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term\'s estimate_tolerance_bps here\n unchanged.',
+        description='The offer\'s price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term\'s price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a "headline" picked among them.\n\nIt derives from exactly one catalog term: the term\'s pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer\'s price and its\n term\'s price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term\'s own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term\'s own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.',
     )
     reporting: ReportingObligation | None = Field(
         None, description='Post-usage reporting requirements for this offer.'
@@ -2164,7 +2160,7 @@ class TransactionResultItem(WireModel):
     )
     cost: Cost | None = Field(
         None,
-        description="Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.",
+        description="Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).",
     )
     delivery_method: (
         constr(pattern=r'^DELIVERY_METHOD_UNSPECIFIED$')
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 7fa5b35a..7f374576 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -50,7 +50,7 @@ export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","D
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -92,7 +92,7 @@ export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datet
 
 export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
 
-export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
+export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
 
 export const ObligationSchema = wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies."));
 
@@ -100,15 +100,15 @@ export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","
 
 export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
-export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering, estimate_tolerance_bps.\n\n METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit\n consumed, and the quantity consumed is known only after use. Up to three\n numbers on the offer's `pricing` fix what a metered purchase can cost, and\n the Exchange's offer signature covers them, so the agent's acceptance of\n the offer is its consent to them:\n\n   R = rate                    the price of one `unit`\n   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and\n                               positive when stated (see Offer)\n   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points\n                               of E; 1000 (10%) when the term states none\n\n WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and\n the usage report settles on the reported Usage.consumed_quantity C at\n C × R, whatever C is: nothing is held, because there is no ceiling to hold\n anything above. Nothing in such an offer bounds what the purchase is\n charged, and T has nothing to widen.\n\n WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the\n agent accepts E × R: that is the amount\n TransactionResultItem.cost carries for a metered item, and the amount the\n Exchange authorizes. When the usage report arrives, the transaction settles\n on the reported Usage.consumed_quantity C against the ceiling\n\n   ceiling quantity  Q = E × (10000 + T) / 10000\n\n   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for\n     what was consumed, never for the estimate.\n   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is\n     charged in full.\n   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for\n     dispute. It is never charged automatically: nothing above Q × R is\n     charged unless dispute resolution establishes that it is owed.\n\n Equivalently, the charge is min(C, Q) × R and the held amount is\n max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance\n gives Q = 16.5), and the arithmetic is exact decimal: every input is an\n integer or a decimal string, and the only division is by 10000, so no step\n rounds. Q × R is therefore the most a metered purchase can be charged\n without a dispute.\n\n The report that settles is the one UsageReport a transaction accepts. A\n metered price whose metering is PRICING_METERING_NONE has no report, so\n what is charged at purchase is final: E × R when the price states an\n estimate. This version does not say what such a price charges when it\n states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`\n (Offer.pricing) — the offer's one price, which execute charges — and never\n a value the report carries."));
+export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges."));
 
 export const PricingMeteringSchema = wire(z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]));
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
@@ -144,9 +144,9 @@ export const RemoveResourcesRequestSchema = wire(z.object({ "exchange": z.string
 
 export const RemoveResourcesResponseSchema = wire(z.object({ "removed": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries removed").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
-export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nFor a metered (PER_UNIT) purchase the report is also the settlement: its\n Usage.consumed_quantity is charged at the offer's rate. When the offer\n states an estimate, the charge stops at the ceiling estimated_quantity ×\n (10000 + estimate_tolerance_bps) / 10000, and any quantity above the\n ceiling is held for dispute, never charged automatically; when it states\n none, the whole consumed quantity is charged (the rule is stated once, on\n Pricing). An honest report of a quantity that\n differs from the estimate, above or below, is a valid report and is never\n refused for that difference."));
+export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nA usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference."));
 
-export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
+export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
 
 export const RequestAuthFailureSchema = wire(z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RequestAuthFailure — an RPC request's HTTP message signature was refused."));
 
@@ -162,7 +162,7 @@ export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOL
 
 export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
 
 export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
 
@@ -170,7 +170,7 @@ export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC
 
 export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
 export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
@@ -182,9 +182,9 @@ export const RetrievalAuthFailureReasonSchema = wire(z.enum(["RETRIEVAL_AUTH_FAI
 
 export const RoleSchema = wire(z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]));
 
-export const SetReportingPolicyRequestSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetReportingPolicyRequestSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
 
-export const SetReportingPolicyResponseSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, a metered report settles by the rule on\n fora.v1.Pricing, and a quantity far from the estimate is analysed out of\n band. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetReportingPolicyResponseSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
 
 export const SetTenantFeeRateRequestSchema = wire(z.object({ "rate": z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("The fee rate to apply. Required — an absent payload would otherwise skip\n validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
 
@@ -198,27 +198,27 @@ export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TER
 
 export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase settles on. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a\n metered purchase settles on are read from here (see Pricing). The\n estimate is optional. When the publisher states one — on the term's own\n pricing, or once for the resource on ResourceEntry.estimated_quantity —\n the Exchange carries it here as estimated_quantity, the term's own\n estimate taking precedence. When the publisher states none, the offer\n may carry none, and then a usage report settles with no ceiling. An\n Exchange projecting a term carries the term's estimate_tolerance_bps here\n unchanged.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimate_tolerance_bps": z.coerce.number().int().gte(0).lte(10000).describe("Tolerance on estimated_quantity, in basis points of the estimate: 1000 is\n 10%, 0 is none. It is T in the settlement rule above. A usage report whose\n consumed quantity is within estimated_quantity × (10000 + T) / 10000 is\n charged in full; anything above that ceiling is held for dispute and never\n charged automatically. It applies only when the price states an estimate:\n without one there is no ceiling for it to widen.\n\nAbsent = 1000 (10%). The field is presence-tracked so an explicit 0 — no\n tolerance, the estimate is the ceiling — stays distinct from \"the default\".\n Basis points rather than a decimal string because the value is a ratio,\n not money, and an integer keeps it exact. Bounded at 10000 (100%, a\n ceiling of twice the estimate). Allowed only on a PER_UNIT price (the\n pricing.estimate_tolerance.requires_per_unit rule). A publisher states it\n on the term it pushes, and the Exchange carries it unchanged onto the\n offer's pricing.").optional(), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the settlement rule above. When a metered offer states it, it\n is positive (the offer.metered.estimate_positive rule): the agent accepts\n E × rate at purchase, and the estimate with estimate_tolerance_bps fixes\n the ceiling a usage report settles against. When a metered offer states\n none, there is no ceiling: the agent accepts the rate, and the usage report\n settles at the consumed quantity × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state\n     Pricing.estimate_tolerance_bps, the tolerance a usage report settles\n     within when an estimate is stated (default 10%); no other model may\n     carry a tolerance. Neither is required, on the pushed term or on the\n     offer it projects to — see Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item whose offer states an\n estimate, this is the amount the agent accepted at purchase: the offer's\n estimated_quantity × rate. It is not the final charge when a usage report\n follows; the report settles the transaction at min(consumed, ceiling) ×\n rate, holding any excess above the ceiling for dispute (see Pricing). When\n the offer states no estimate, no amount is fixed at purchase: the agent\n accepted the rate, and the report settles the charge at consumed × rate.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
 export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
-export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
+export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
 export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report."));
 
-export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nFor a metered (PER_UNIT) transaction this is C in the settlement rule on\n Pricing: it is charged at the offer's rate. When the offer states an\n estimate, the charge stops at the ceiling the offer's estimated_quantity\n and estimate_tolerance_bps fix, and the quantity above that ceiling is\n held for dispute; when it states none, all of it is charged. The agent\n reports what it consumed, not\n what it estimated: an Exchange MUST NOT refuse a report because this\n differs from the estimate, in either direction, and MUST NOT charge a\n quantity above the ceiling without a dispute resolving it.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n For a metered (PER_UNIT) transaction the report settles the purchase. With\n R the offer's rate and C this report's Usage.consumed_quantity:\n   - when the offer states no estimate, there is no ceiling: C is charged\n     C × R and nothing is held;\n   - when it states an estimate E, with T its estimate_tolerance_bps (1000\n     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below\n     Q (including C below E) is charged C × R, and C above Q is charged\n     Q × R, the excess (C − Q) × R held for dispute and never charged\n     automatically.\n The full rule is on Pricing. The Exchange accepts such a report: a consumed\n quantity that differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
+export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
 
 export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
 
 export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]));
 
-export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report.\n\nWhen part of a metered report is held for dispute (its consumed quantity\n exceeds the ceiling the offer fixes — see Pricing), the response is still a\n plain success with a report_id: the report is accepted in full, and the\n excess is held rather than refused. The response carries no amounts because\n the settlement is a pure function of values the agent already holds — the\n signed offer's rate, and its estimated_quantity and estimate_tolerance_bps\n when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling\n and the held excess exactly, with no figure from the Exchange to trust or\n reconcile. The report_id is what identifies the held excess: it is the\n reference any dispute over that excess carries (see DisputeRequest)."));
+export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report."));
 
 export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
 
diff --git a/proto/fora/admin/v1/admin.proto b/proto/fora/admin/v1/admin.proto
index 9709ef00..99cf6b34 100644
--- a/proto/fora/admin/v1/admin.proto
+++ b/proto/fora/admin/v1/admin.proto
@@ -97,9 +97,9 @@ message ReportingPolicy {
   // DEPRECATED, ignored. This used to set the accepted relative deviation
   // between the estimated and the reported quantity, and a report outside it was
   // refused. A usage report is never refused for its quantity: the reported
-  // quantity is unrestricted, a metered report settles by the rule on
-  // fora.v1.Pricing, and a quantity far from the estimate is analysed out of
-  // band. An Exchange MUST NOT refuse a report on this setting. The field and
+  // quantity is unrestricted, and monitoring how far reports fall from
+  // estimates is the Exchange operator's own business, not part of the
+  // protocol. An Exchange MUST NOT refuse a report on this setting. The field and
   // its bounds are retained because removing them would break the wire
   // contract.
   optional double quantity_tolerance = 3 [
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index ea7acbb4..a5ff0353 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -741,13 +741,11 @@ message Offer {
   // A metered offer MAY carry an estimate. An offer is metered when its
   // `pricing` is PER_UNIT, and its `pricing` states a rate with or without an
   // estimated_quantity. Whether to state one is the publisher's decision, and
-  // nothing requires it. With an estimate, the agent accepts estimate × rate at
-  // purchase and a usage report settles against a ceiling derived from the
-  // estimate. Without one there is no ceiling: the agent accepts the rate, and
-  // a usage report settles at the consumed quantity × rate (see Pricing).
+  // nothing requires it. The purchase charges estimate × rate, or one unit,
+  // 1 × rate, without an estimate (see Pricing).
   //
   // An estimate that is stated is positive: a zero or negative estimate would
-  // fix a ceiling of nothing or less. The rule reads `pricing` only, because
+  // price the purchase at nothing or less. The rule reads `pricing` only, because
   // `pricing` is the offer's one price (see offer.terms.pricing_unset above).
   // It is an offer rule, not a Pricing rule, so a term a publisher pushes is
   // not bound by it.
@@ -771,7 +769,7 @@ message Offer {
   // the Exchange moves that term's price here, so the term inside `terms`
   // carries no pricing of its own (the offer.terms.pricing_unset rule). This is
   // the price execute charges, the price a Broker ranks and compares across
-  // Exchanges, and the price a metered purchase settles on. A resource with
+  // Exchanges, and the price a metered purchase is charged at. A resource with
   // multiple alternative terms (e.g. dual-licensed) produces multiple separate
   // offers, one per term — never one offer with a "headline" picked among them.
   //
@@ -780,15 +778,13 @@ message Offer {
   // term, and the offer carries no second copy, so the offer's price and its
   // term's price cannot disagree.
   //
-  // On a metered (PER_UNIT) offer, the rate, the estimate and the tolerance a
-  // metered purchase settles on are read from here (see Pricing). The
-  // estimate is optional. When the publisher states one — on the term's own
-  // pricing, or once for the resource on ResourceEntry.estimated_quantity —
-  // the Exchange carries it here as estimated_quantity, the term's own
-  // estimate taking precedence. When the publisher states none, the offer
-  // may carry none, and then a usage report settles with no ceiling. An
-  // Exchange projecting a term carries the term's estimate_tolerance_bps here
-  // unchanged.
+  // On a metered (PER_UNIT) offer, the rate and the estimate a metered
+  // purchase is charged at are read from here (see Pricing). The estimate is
+  // optional. When the publisher states one — on the term's own pricing, or
+  // once for the resource on ResourceEntry.estimated_quantity — the Exchange
+  // carries it here as estimated_quantity, the term's own estimate taking
+  // precedence. When the publisher states none, the offer may carry none, and
+  // the purchase then charges one unit.
   Pricing pricing = 3;
 
   // How resource will be delivered.
@@ -1653,11 +1649,9 @@ message Obligation {
 //   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE
 //     under an arbitrary license; the agent still needs the price stated so it
 //     knows the access is free rather than unpriced.
-//   - A PER_UNIT term MAY state Pricing.estimated_quantity, and MAY state
-//     Pricing.estimate_tolerance_bps, the tolerance a usage report settles
-//     within when an estimate is stated (default 10%); no other model may
-//     carry a tolerance. Neither is required, on the pushed term or on the
-//     offer it projects to — see Pricing.estimated_quantity.
+//   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not
+//     required, on the pushed term or on the offer it projects to — see
+//     Pricing.estimated_quantity.
 //   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A
 //     REFERENCE_ONLY term that references no document is meaningless → reject
 //     at ingest.
@@ -1819,60 +1813,23 @@ message Preview {
 // Unit cost is denominated in the Exchange's base currency.
 //
 // Fields: model, rate, currency, unit_cost, estimated_quantity,
-// license_duration_months, unit, metering, estimate_tolerance_bps.
-//
-// METERED SETTLEMENT. A PER_UNIT price is metered: it is charged per unit
-// consumed, and the quantity consumed is known only after use. Up to three
-// numbers on the offer's `pricing` fix what a metered purchase can cost, and
-// the Exchange's offer signature covers them, so the agent's acceptance of
-// the offer is its consent to them:
-//
-//   R = rate                    the price of one `unit`
-//   E = estimated_quantity      the estimate, in `unit`; OPTIONAL, and
-//                               positive when stated (see Offer)
-//   T = estimate_tolerance_bps  the tolerance on the estimate, in basis points
-//                               of E; 1000 (10%) when the term states none
-//
-// WITHOUT AN ESTIMATE there is no ceiling. The agent accepts the rate R, and
-// the usage report settles on the reported Usage.consumed_quantity C at
-// C × R, whatever C is: nothing is held, because there is no ceiling to hold
-// anything above. Nothing in such an offer bounds what the purchase is
-// charged, and T has nothing to widen.
-//
-// WITH AN ESTIMATE the purchase settles within a tolerance. At purchase, the
-// agent accepts E × R: that is the amount
-// TransactionResultItem.cost carries for a metered item, and the amount the
-// Exchange authorizes. When the usage report arrives, the transaction settles
-// on the reported Usage.consumed_quantity C against the ceiling
-//
-//   ceiling quantity  Q = E × (10000 + T) / 10000
-//
-//   - C ≤ E: the charge is C × R. A quantity below the estimate is charged for
-//     what was consumed, never for the estimate.
-//   - E < C ≤ Q: the charge is C × R. Consumption within the tolerance is
-//     charged in full.
-//   - C > Q: the charge is Q × R, and the excess (C − Q) × R is HELD for
-//     dispute. It is never charged automatically: nothing above Q × R is
-//     charged unless dispute resolution establishes that it is owed.
-//
-// Equivalently, the charge is min(C, Q) × R and the held amount is
-// max(0, C − Q) × R. Q may be fractional (E = 15 at the default tolerance
-// gives Q = 16.5), and the arithmetic is exact decimal: every input is an
-// integer or a decimal string, and the only division is by 10000, so no step
-// rounds. Q × R is therefore the most a metered purchase can be charged
-// without a dispute.
-//
-// The report that settles is the one UsageReport a transaction accepts. A
-// metered price whose metering is PRICING_METERING_NONE has no report, so
-// what is charged at purchase is final: E × R when the price states an
-// estimate. This version does not say what such a price charges when it
-// states none, since it then carries no quantity at all. Settlement reads the offer's own `pricing`
-// (Offer.pricing) — the offer's one price, which execute charges — and never
-// a value the report carries.
+// license_duration_months, unit, metering.
+//
+// METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the
+// publisher states the rate R, the price of one `unit`, and the unit. The
+// offer may also state an estimate E (estimated_quantity, optional, positive
+// when stated; see Offer). The Exchange's offer signature covers both, so the
+// agent's acceptance of the offer is its consent to them.
+//
+// A metered purchase charges E × R, or one unit, 1 × R, when the offer states
+// no estimate. That is the amount TransactionResultItem.cost carries for the
+// item, and the charge is final. A disagreement about the quantity consumed
+// is a dispute, which this version does not define further. The charge reads
+// the offer's own `pricing` (Offer.pricing) — the offer's one price, which
+// execute charges.
 message Pricing {
   // Cross-field structural rules (protovalidate, OR form — CEL has no implies):
-  //   PER_UNIT ⇒ unit must be set; FREE ⇒ rate must be 0;
-  //   estimate_tolerance_bps set ⇒ PER_UNIT.
+  //   PER_UNIT ⇒ unit must be set; FREE ⇒ rate must be 0.
   // Registry membership (a bare unit must be one of the registered tokens) is
   // NOT here — it is checked at ingest via the generated IsRegistered, so the
   // CEL never re-lists the vocabulary and cannot drift from it.
@@ -1886,15 +1843,6 @@ message Pricing {
     message: "rate must be 0 (or empty) when model is FREE"
     expression: "this.model != fora.v1.PricingModel.PRICING_MODEL_FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')"
   };
-  // A tolerance bounds the settlement of a metered price, so it means nothing
-  // on a FREE or FLAT one. Stating it there is an authoring error rather than a
-  // harmless extra: an agent reading it would expect a settlement that never
-  // happens.
-  option (buf.validate.message).cel = {
-    id: "pricing.estimate_tolerance.requires_per_unit"
-    message: "estimate_tolerance_bps is allowed only when model is PER_UNIT"
-    expression: "!has(this.estimate_tolerance_bps) || this.model == fora.v1.PricingModel.PRICING_MODEL_PER_UNIT"
-  };
 
   // Provider's pricing model.
   PricingModel model = 1 [(buf.validate.field).enum = {not_in: [0]}];
@@ -1918,12 +1866,10 @@ message Pricing {
   // For documents: page count. For data: record count.
   //
   // OPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.
-  // It is E in the settlement rule above. When a metered offer states it, it
-  // is positive (the offer.metered.estimate_positive rule): the agent accepts
-  // E × rate at purchase, and the estimate with estimate_tolerance_bps fixes
-  // the ceiling a usage report settles against. When a metered offer states
-  // none, there is no ceiling: the agent accepts the rate, and the usage report
-  // settles at the consumed quantity × rate. A PER_UNIT price may state a rate
+  // It is E in the metered price rule above. When a metered offer states it,
+  // it is positive (the offer.metered.estimate_positive rule), and the
+  // purchase charges E × rate. When a metered offer states none, the purchase
+  // charges one unit, 1 × rate. A PER_UNIT price may state a rate
   // with or without an estimate; whether to state one is the publisher's
   // decision, and nothing requires it.
   //
@@ -1964,22 +1910,11 @@ message Pricing {
   // OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.
   optional PricingMetering metering = 9;
 
-  // Tolerance on estimated_quantity, in basis points of the estimate: 1000 is
-  // 10%, 0 is none. It is T in the settlement rule above. A usage report whose
-  // consumed quantity is within estimated_quantity × (10000 + T) / 10000 is
-  // charged in full; anything above that ceiling is held for dispute and never
-  // charged automatically. It applies only when the price states an estimate:
-  // without one there is no ceiling for it to widen.
-  //
-  // Absent = 1000 (10%). The field is presence-tracked so an explicit 0 — no
-  // tolerance, the estimate is the ceiling — stays distinct from "the default".
-  // Basis points rather than a decimal string because the value is a ratio,
-  // not money, and an integer keeps it exact. Bounded at 10000 (100%, a
-  // ceiling of twice the estimate). Allowed only on a PER_UNIT price (the
-  // pricing.estimate_tolerance.requires_per_unit rule). A publisher states it
-  // on the term it pushes, and the Exchange carries it unchanged onto the
-  // offer's pricing.
-  optional int32 estimate_tolerance_bps = 10 [(buf.validate.field).int32 = {gte: 0, lte: 10000}];
+  // Field 10 was estimate_tolerance_bps, a tolerance on the estimate that an
+  // unreleased draft of this version defined. It is removed, and its number and
+  // name stay reserved.
+  reserved 10;
+  reserved "estimate_tolerance_bps";
 }
 
 // PricingModel — the charging STRUCTURE only (a genuinely closed, small set;
@@ -1992,7 +1927,7 @@ message Pricing {
 enum PricingModel {
   PRICING_MODEL_UNSPECIFIED = 0;  // unset — zero allowed on WellKnownManifest.pricing_models_supported (capability list); rejected (not_in:[0]) as the Pricing.model discriminator (omission cannot default to FREE)
   PRICING_MODEL_FREE        = 1;  // no charge; rate must be 0 (state FREE explicitly — absent Pricing is not free)
-  PRICING_MODEL_PER_UNIT    = 2;  // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: settlement follows the rule on Pricing; an estimated_quantity is optional, and positive when an offer states it
+  PRICING_MODEL_PER_UNIT    = 2;  // rate per Pricing.unit; unit REQUIRED (registered token or vendor:custom). Metered: the purchase charge follows the rule on Pricing; an estimated_quantity is optional, and positive when an offer states it
   PRICING_MODEL_FLAT        = 3;  // one-time flat fee; rate is the total, no unit
 }
 
@@ -2653,13 +2588,9 @@ message TransactionResultItem {
   // Resource title echoed from the Offer.
   optional string resource_title = 4;
 
-  // Cost for this item. For a metered (PER_UNIT) item whose offer states an
-  // estimate, this is the amount the agent accepted at purchase: the offer's
-  // estimated_quantity × rate. It is not the final charge when a usage report
-  // follows; the report settles the transaction at min(consumed, ceiling) ×
-  // rate, holding any excess above the ceiling for dispute (see Pricing). When
-  // the offer states no estimate, no amount is fixed at purchase: the agent
-  // accepted the rate, and the report settles the charge at consumed × rate.
+  // Cost for this item. For a metered (PER_UNIT) item this is the purchase
+  // charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when
+  // the offer states no estimate (see Pricing).
   Cost cost = 5;
 
   // If under subscription, no per-request charge.
@@ -3263,15 +3194,9 @@ message RefreshCatalogResponse {
 
 // ReportingObligation — Requirements attached to a delivery.
 //
-// For a metered (PER_UNIT) purchase the report is also the settlement: its
-// Usage.consumed_quantity is charged at the offer's rate. When the offer
-// states an estimate, the charge stops at the ceiling estimated_quantity ×
-// (10000 + estimate_tolerance_bps) / 10000, and any quantity above the
-// ceiling is held for dispute, never charged automatically; when it states
-// none, the whole consumed quantity is charged (the rule is stated once, on
-// Pricing). An honest report of a quantity that
-// differs from the estimate, above or below, is a valid report and is never
-// refused for that difference.
+// A usage report is a record of the quantity consumed. An honest report of a
+// quantity that differs from the estimate, above or below, is a valid report
+// and is never refused for that difference.
 message ReportingObligation {
   // Whether post-usage reporting is required.
   bool required = 1;
@@ -3303,17 +3228,9 @@ message ReportingObligation {
 // Filed by the agent or Broker after resource is used.
 // Failure to report may result in the Exchange blocking subsequent access.
 //
-// For a metered (PER_UNIT) transaction the report settles the purchase. With
-// R the offer's rate and C this report's Usage.consumed_quantity:
-//   - when the offer states no estimate, there is no ceiling: C is charged
-//     C × R and nothing is held;
-//   - when it states an estimate E, with T its estimate_tolerance_bps (1000
-//     when absent), the ceiling is Q = E × (10000 + T) / 10000, C at or below
-//     Q (including C below E) is charged C × R, and C above Q is charged
-//     Q × R, the excess (C − Q) × R held for dispute and never charged
-//     automatically.
-// The full rule is on Pricing. The Exchange accepts such a report: a consumed
-// quantity that differs from the estimate is never a reason to refuse it.
+// The report is a record of the quantity consumed (Usage.consumed_quantity).
+// The Exchange accepts it whatever that quantity is: a consumed quantity that
+// differs from the estimate is never a reason to refuse it.
 //
 // What refuses a report. A report that arrives after the transaction's
 // reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
@@ -3406,15 +3323,9 @@ message Usage {
   // REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.
   // For text: tokens consumed. For video: seconds watched. For data: records accessed.
   //
-  // For a metered (PER_UNIT) transaction this is C in the settlement rule on
-  // Pricing: it is charged at the offer's rate. When the offer states an
-  // estimate, the charge stops at the ceiling the offer's estimated_quantity
-  // and estimate_tolerance_bps fix, and the quantity above that ceiling is
-  // held for dispute; when it states none, all of it is charged. The agent
-  // reports what it consumed, not
-  // what it estimated: an Exchange MUST NOT refuse a report because this
-  // differs from the estimate, in either direction, and MUST NOT charge a
-  // quantity above the ceiling without a dispute resolving it.
+  // The agent reports what it consumed, not what it estimated: an Exchange
+  // MUST NOT refuse a report because this differs from the estimate, in either
+  // direction.
   int32 consumed_quantity = 3;
 
   // Whether resource/output was displayed to a human.
@@ -3446,17 +3357,6 @@ message UsageAsset {
 }
 
 // UsageReportResponse — Acknowledgment of a usage report.
-//
-// When part of a metered report is held for dispute (its consumed quantity
-// exceeds the ceiling the offer fixes — see Pricing), the response is still a
-// plain success with a report_id: the report is accepted in full, and the
-// excess is held rather than refused. The response carries no amounts because
-// the settlement is a pure function of values the agent already holds — the
-// signed offer's rate, and its estimated_quantity and estimate_tolerance_bps
-// when it states them, and the consumed quantity it reported — so the agent derives the charge, the ceiling
-// and the held excess exactly, with no figure from the Exchange to trust or
-// reconcile. The report_id is what identifies the held excess: it is the
-// reference any dispute over that excess carries (see DisputeRequest).
 message UsageReportResponse {
   // A successful response means the report was accepted; a rejection travels as
   // a non-OK transport error carrying ErrorDetail.usage_report_rejection.
@@ -4316,15 +4216,6 @@ message ExchangeOutcome {
 //   Offer → Transaction (transaction_id, billing_id)
 //        → UsageReport → UsageReportResponse (report_id)
 //        → DisputeRequest (transaction_id + report_id) → DisputeResponse
-//
-// The same chain identifies the excess a metered report holds: the quantity
-// above the offer's ceiling (see Pricing; only an offer that states an
-// estimate has one) is held under the transaction_id and
-// report_id, not charged, and stays uncharged unless dispute resolution
-// establishes that it is owed. This version defines no DisputeReason for it
-// and no filing by the publisher's side, so how a claim to the held excess is
-// raised is outside this version; what the protocol fixes is that it is never
-// charged automatically.
 // ============================================================================
 
 // DisputeRequest — Agent signals a problem with delivered resource.
@@ -5358,12 +5249,9 @@ message RetrievalAuthFailure {
 //
 // THE REPORTED QUANTITY IS UNRESTRICTED. No reason here refuses a report
 // because its consumed_quantity differs from the offer's estimate, above or
-// below, and an Exchange MUST NOT refuse a report for that. A quantity below the
-// estimate is charged as consumed and a quantity above the ceiling is held for
-// dispute (the settlement rule on Pricing); neither is MALFORMED. A report
-// against an offer that states no estimate is charged as consumed, whatever
-// the quantity. A quantity far from the estimate is analysed out of band,
-// never by refusing the report.
+// below, and an Exchange MUST NOT refuse a report for that; such a report is
+// not MALFORMED. Monitoring how far reports fall from estimates is the
+// Exchange operator's own business, not part of the protocol.
 enum UsageReportRejectionReason {
   USAGE_REPORT_REJECTION_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
   USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND = 1;     // transaction_id is unknown
diff --git a/sdk/go/helpers/metered.go b/sdk/go/helpers/metered.go
new file mode 100644
index 00000000..68731841
--- /dev/null
+++ b/sdk/go/helpers/metered.go
@@ -0,0 +1,45 @@
+package helpers
+
+import (
+	"errors"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+)
+
+// Metered offers (fora.proto Pricing, "METERED PRICE"). A PER_UNIT price is
+// metered: the publisher states the rate and the unit, and the offer may also
+// state an estimate. A metered purchase charges estimate × rate, or one unit,
+// 1 × rate, without an estimate, and the charge is final.
+
+// ErrMeteredEstimateNotPositive signals a metered (PER_UNIT) offer that states
+// an estimated_quantity of zero or less. An estimate is optional, but one that
+// is stated is positive (the offer.metered.estimate_positive rule): a zero
+// estimate would price the purchase at nothing.
+var ErrMeteredEstimateNotPositive = errors.New("helpers: metered offer states an estimated_quantity that is not positive")
+
+// IsMeteredOffer reports whether offer is metered: its pricing is PER_UNIT.
+// Offer.pricing is the offer's one price — the term it sells carries none
+// (fora.proto Offer, the offer.metered.estimate_positive and
+// offer.terms.pricing_unset rules) — so a term is never consulted.
+func IsMeteredOffer(offer *forav1.Offer) bool {
+	return offer.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT
+}
+
+// CheckMeteredEstimate returns ErrMeteredEstimateNotPositive when offer is
+// metered and its pricing states an estimated_quantity of zero or less, and
+// nil otherwise. A metered offer that states no estimate passes: the estimate
+// is optional. It is the offer.metered.estimate_positive rule as a standalone
+// check, for a verifier that runs without wire validation; a non-metered offer
+// passes whatever its pricing says.
+func CheckMeteredEstimate(offer *forav1.Offer) error {
+	if offer == nil {
+		return errors.New("helpers: offer is nil")
+	}
+	if !IsMeteredOffer(offer) {
+		return nil
+	}
+	if p := offer.GetPricing(); p.EstimatedQuantity != nil && p.GetEstimatedQuantity() <= 0 {
+		return ErrMeteredEstimateNotPositive
+	}
+	return nil
+}
diff --git a/sdk/go/helpers/metered_test.go b/sdk/go/helpers/metered_test.go
new file mode 100644
index 00000000..e5dce0ff
--- /dev/null
+++ b/sdk/go/helpers/metered_test.go
@@ -0,0 +1,85 @@
+package helpers
+
+import (
+	"errors"
+	"testing"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"google.golang.org/protobuf/proto"
+)
+
+// Which offers are metered, and the estimate check a verifier runs.
+
+func meteredTestOffer(offerModel forav1.PricingModel, estimate *int32) *forav1.Offer {
+	return &forav1.Offer{
+		Pricing: &forav1.Pricing{Model: offerModel, EstimatedQuantity: estimate},
+		Terms:   []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
+	}
+}
+
+func TestCheckMeteredEstimate(t *testing.T) {
+	perUnit, flat := forav1.PricingModel_PRICING_MODEL_PER_UNIT, forav1.PricingModel_PRICING_MODEL_FLAT
+	// A priced term no longer makes an offer metered: Offer.pricing is the
+	// offer's one price, and a term carrying pricing is refused on its own
+	// (CheckOfferTermsUnpriced), not read.
+	pricedTerm := meteredTestOffer(flat, nil)
+	pricedTerm.Terms[0].Pricing = &forav1.Pricing{Model: perUnit, EstimatedQuantity: proto.Int32(10)}
+	cases := []struct {
+		name    string
+		offer   *forav1.Offer
+		metered bool
+		wantErr bool
+	}{
+		{"per_unit_with_estimate", meteredTestOffer(perUnit, proto.Int32(1)), true, false},
+		{"per_unit_without_estimate_is_valid", meteredTestOffer(perUnit, nil), true, false},
+		{"per_unit_zero_estimate", meteredTestOffer(perUnit, proto.Int32(0)), true, true},
+		{"per_unit_negative_estimate", meteredTestOffer(perUnit, proto.Int32(-3)), true, true},
+		{"per_unit_term_under_flat_pricing_is_not_metered", pricedTerm, false, false},
+		{"flat_without_estimate", meteredTestOffer(flat, nil), false, false},
+		{"no_pricing_at_all", &forav1.Offer{}, false, false},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			if got := IsMeteredOffer(c.offer); got != c.metered {
+				t.Fatalf("IsMeteredOffer = %v, want %v", got, c.metered)
+			}
+			err := CheckMeteredEstimate(c.offer)
+			if c.wantErr != (err != nil) {
+				t.Fatalf("CheckMeteredEstimate = %v, want error %v", err, c.wantErr)
+			}
+			if c.wantErr && !errors.Is(err, ErrMeteredEstimateNotPositive) {
+				t.Fatalf("CheckMeteredEstimate = %v, want ErrMeteredEstimateNotPositive", err)
+			}
+		})
+	}
+	if err := CheckMeteredEstimate(nil); err == nil {
+		t.Fatal("CheckMeteredEstimate(nil) must refuse")
+	}
+}
+
+func TestCheckOfferTermsUnpriced(t *testing.T) {
+	unpriced := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
+	if err := CheckOfferTermsUnpriced(unpriced); err != nil {
+		t.Fatalf("unpriced term: got %v, want nil", err)
+	}
+	if err := CheckOfferTermsUnpriced(&forav1.Offer{}); err != nil {
+		t.Fatalf("no terms: got %v, want nil", err)
+	}
+	priced := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
+	priced.Terms[0].Pricing = proto.Clone(priced.Pricing).(*forav1.Pricing)
+	if err := CheckOfferTermsUnpriced(priced); !errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("term repeating the offer price: got %v, want ErrOfferTermPriced", err)
+	}
+	// An empty Pricing is still pricing present on the term.
+	empty := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
+	empty.Terms[0].Pricing = &forav1.Pricing{}
+	if err := CheckOfferTermsUnpriced(empty); !errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("empty term pricing: got %v, want ErrOfferTermPriced", err)
+	}
+	if err := CheckOfferTermsUnpriced(nil); err == nil || errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("nil offer: got %v, want a refusal that is not ErrOfferTermPriced", err)
+	}
+	if _, err := SignOffer(make([]byte, 64), priced); !errors.Is(err, ErrOfferTermPriced) {
+		t.Fatalf("SignOffer of a priced term: got %v, want ErrOfferTermPriced", err)
+	}
+}
diff --git a/sdk/python/tests/test_metered_offer_parity.py b/sdk/python/tests/test_metered_offer_parity.py
new file mode 100644
index 00000000..63cf7778
--- /dev/null
+++ b/sdk/python/tests/test_metered_offer_parity.py
@@ -0,0 +1,72 @@
+"""Metered offers: which offers are metered, and the checks a verifier and a signer run.
+
+Mirror of the sdk/ts sibling (sdk/ts/tests/metered-offer.parity.test.ts). A PER_UNIT
+offer is metered; it may state an estimate, positive when stated, and the term it
+sells carries no pricing.
+"""
+
+from __future__ import annotations
+
+import pytest
+
+from fora_sdk import (
+    check_metered_estimate,
+    check_offer_terms_unpriced,
+    is_metered_offer,
+)
+
+_PER_UNIT = {"model": "PRICING_MODEL_PER_UNIT"}
+_FLAT = {"model": "PRICING_MODEL_FLAT"}
+
+
+@pytest.mark.parametrize(
+    ("offer", "metered", "refused"),
+    [
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": 1}}, True, False),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": "7"}}, True, False),
+        # The estimate is optional; one that is stated is positive.
+        ({"pricing": dict(_PER_UNIT)}, True, False),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": None}}, True, False),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": 0}}, True, True),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": -3}}, True, True),
+        ({"pricing": {**_PER_UNIT, "estimated_quantity": True}}, True, True),
+        # A priced term no longer makes an offer metered: Offer.pricing is the one
+        # price, and a priced term is refused by check_offer_terms_unpriced instead.
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, False, False),
+        ({"pricing": dict(_FLAT)}, False, False),
+        ({}, False, False),
+    ],
+)
+def test_metered_estimate_check(offer: dict[str, object], metered: bool, refused: bool) -> None:
+    assert is_metered_offer(offer) is metered
+    if refused:
+        with pytest.raises(ValueError):
+            check_metered_estimate(offer)
+    else:
+        check_metered_estimate(offer)
+
+
+@pytest.mark.parametrize(
+    ("offer", "refused"),
+    [
+        ({"pricing": dict(_FLAT), "terms": [{"semantics": "TERM_SEMANTICS_ENUMERATED"}]}, False),
+        ({"pricing": dict(_FLAT)}, False),
+        ({}, False),
+        # A term repeating the offer's own price is still a second copy.
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_FLAT)}]}, True),
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, True),
+        # An empty pricing object is pricing present, as has() reads it.
+        ({"pricing": dict(_FLAT), "terms": [{"pricing": {}}]}, True),
+    ],
+)
+def test_offer_terms_unpriced_check(offer: dict[str, object], refused: bool) -> None:
+    if refused:
+        with pytest.raises(ValueError, match="Offer.pricing"):
+            check_offer_terms_unpriced(offer)
+    else:
+        check_offer_terms_unpriced(offer)
+
+
+def test_offer_terms_unpriced_refuses_a_non_object() -> None:
+    with pytest.raises(ValueError):
+        check_offer_terms_unpriced("offer")  # type: ignore[arg-type]
diff --git a/sdk/ts/tests/metered-offer.parity.test.ts b/sdk/ts/tests/metered-offer.parity.test.ts
new file mode 100644
index 00000000..11f702fa
--- /dev/null
+++ b/sdk/ts/tests/metered-offer.parity.test.ts
@@ -0,0 +1,60 @@
+// Metered offers (TypeScript side): which offers are metered, and the checks a
+// verifier and a signer run.
+//
+// Mirror of the sdk/python sibling (sdk/python/tests/test_metered_offer_parity.py). A
+// PER_UNIT offer is metered; it may state an estimate, positive when stated, and the
+// term it sells carries no pricing.
+import { describe, expect, it } from "vitest";
+import {
+	checkMeteredEstimate,
+	checkOfferTermsUnpriced,
+	isMeteredOffer,
+} from "../src/money.ts";
+
+describe("sdk/ts metered helpers", () => {
+	const perUnit = { model: "PRICING_MODEL_PER_UNIT" };
+	const flat = { model: "PRICING_MODEL_FLAT" };
+	const cases: [string, Record<string, unknown>, boolean, boolean][] = [
+		["estimated", { pricing: { ...perUnit, estimated_quantity: 1 } }, true, false],
+		["string estimate", { pricing: { ...perUnit, estimated_quantity: "7" } }, true, false],
+		// The estimate is optional; one that is stated is positive.
+		["no estimate", { pricing: { ...perUnit } }, true, false],
+		["null estimate is absent", { pricing: { ...perUnit, estimated_quantity: null } }, true, false],
+		["zero estimate", { pricing: { ...perUnit, estimated_quantity: 0 } }, true, true],
+		["negative estimate", { pricing: { ...perUnit, estimated_quantity: -3 } }, true, true],
+		["fractional estimate", { pricing: { ...perUnit, estimated_quantity: 1.5 } }, true, true],
+		// A priced term no longer makes an offer metered: Offer.pricing is the one price,
+		// and checkOfferTermsUnpriced refuses the priced term instead.
+		["term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, false, false],
+		["flat", { pricing: { ...flat } }, false, false],
+		["no pricing", {}, false, false],
+	];
+	for (const [name, offer, metered, refused] of cases) {
+		it(`metered estimate check: ${name}`, () => {
+			expect(isMeteredOffer(offer)).toBe(metered);
+			if (refused) {
+				expect(() => checkMeteredEstimate(offer)).toThrow();
+			} else {
+				expect(() => checkMeteredEstimate(offer)).not.toThrow();
+			}
+		});
+	}
+
+	const unpricedCases: [string, Record<string, unknown>, boolean][] = [
+		["unpriced term", { pricing: { ...flat }, terms: [{ semantics: "TERM_SEMANTICS_ENUMERATED" }] }, false],
+		["no terms", { pricing: { ...flat } }, false],
+		["null term pricing is absent", { pricing: { ...flat }, terms: [{ pricing: null }] }, false],
+		["term repeating the offer price", { pricing: { ...flat }, terms: [{ pricing: { ...flat } }] }, true],
+		["per-unit term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, true],
+		["empty term pricing", { pricing: { ...flat }, terms: [{ pricing: {} }] }, true],
+	];
+	for (const [name, offer, refused] of unpricedCases) {
+		it(`offer terms unpriced check: ${name}`, () => {
+			if (refused) {
+				expect(() => checkOfferTermsUnpriced(offer)).toThrow(/Offer\.pricing/);
+			} else {
+				expect(() => checkOfferTermsUnpriced(offer)).not.toThrow();
+			}
+		});
+	}
+});

From 3768bba8243880413de97c8655af153084313559 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 22:43:04 -0400
Subject: [PATCH 088/164] Drop metered settlement from the Go SDK

The settlement helpers computed what the protocol no longer defines:
MeteredSettlementCap, SettleMeteredUsage and MeteredSettlement,
EstimateToleranceBps with DefaultEstimateToleranceBps and
MaxEstimateToleranceBps, and ErrNotMetered. They are removed, not left
dead, with metered-settlement-vectors.json and its emitter.

What stays moves from settlement.go to metered.go: IsMeteredOffer,
CheckMeteredEstimate and ErrMeteredEstimateNotPositive, which
core.Verifier still applies.

The offer-verify vector metered_with_estimate_and_tolerance becomes
metered_with_estimate, with no tolerance. The license-term entry
vectors drop the two tolerance cases and replace the
tolerance-without-estimate case with
metered_term_with_no_estimate_accepted. The README describes the
final purchase charge.
---
 sdk/go/README.md                              |  15 +-
 .../helpers/gen_licenseterm_vectors_test.go   |  21 +-
 sdk/go/helpers/gen_settlement_vectors_test.go | 219 --------
 sdk/go/helpers/gen_vectors_test.go            |  22 +-
 sdk/go/helpers/settlement.go                  | 221 --------
 sdk/go/helpers/settlement_test.go             | 113 ----
 .../helpers/testdata/licenseterm-vectors.json |  52 +-
 .../testdata/metered-settlement-vectors.json  | 493 ------------------
 .../testdata/offer-verify-vectors.json        |   5 +-
 9 files changed, 23 insertions(+), 1138 deletions(-)
 delete mode 100644 sdk/go/helpers/gen_settlement_vectors_test.go
 delete mode 100644 sdk/go/helpers/settlement.go
 delete mode 100644 sdk/go/helpers/settlement_test.go
 delete mode 100644 sdk/go/helpers/testdata/metered-settlement-vectors.json

diff --git a/sdk/go/README.md b/sdk/go/README.md
index 4eb28e49..4a17d240 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -84,16 +84,11 @@ rate, _ := helpers.ParseMoney(offer.GetPricing().GetRate()) // shopspring/decima
 wire, _ := helpers.FormatMoney(rate.Mul(decimal.NewFromInt(qty)))
 ```
 
-**Metered settlement** — a PER_UNIT offer may carry an estimate. Without one there is
-no ceiling, and a usage report settles at consumed × rate. With one, the report
-settles within the price's tolerance (10% by default); the excess is held for
-dispute, never charged. Exact decimal, from the offer's own pricing:
-
-```go
-capAmount, capped, _ := helpers.MeteredSettlementCap(offer.GetPricing()) // the most charged without a dispute; capped is false without an estimate
-s, _ := helpers.SettleMeteredUsage(offer.GetPricing(), consumed) // s.ChargedAmount, s.HeldAmount, s.Estimated, ...
-err := helpers.CheckMeteredEstimate(offer) // ErrMeteredEstimateNotPositive for a stated estimate <= 0; core.Verifier rejects such an offer
-```
+**Metered offers** — a PER_UNIT offer may carry an estimate. The purchase charges
+estimate × rate, or one unit's rate without an estimate, and the charge is final.
+`helpers.IsMeteredOffer(offer)` says whether an offer is metered, and
+`helpers.CheckMeteredEstimate(offer)` returns `ErrMeteredEstimateNotPositive` for a
+stated estimate of zero or less; `core.Verifier` rejects such an offer.
 
 **One price per offer** — an offer's price is `Offer.pricing`, and the term it sells
 carries none. `helpers.CheckOfferTermsUnpriced(offer)` returns `ErrOfferTermPriced` for a
diff --git a/sdk/go/helpers/gen_licenseterm_vectors_test.go b/sdk/go/helpers/gen_licenseterm_vectors_test.go
index 9a0788bd..312921e8 100644
--- a/sdk/go/helpers/gen_licenseterm_vectors_test.go
+++ b/sdk/go/helpers/gen_licenseterm_vectors_test.go
@@ -707,25 +707,12 @@ func buildLTEntryVectors(t *testing.T) []ltEntryVector {
 				Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0.05", Currency: "USD",
 			}
 		})},
-		// A tolerance bounds a metered settlement, so it is refused on any other
-		// model. The pushed PER_UNIT term beside it needs no estimate: the estimate
-		// is an offer requirement, not a term one.
-		{"cross_field_pricing_estimate_tolerance_requires_per_unit", entry(func(e *forav1.ResourceEntry) {
-			e.Terms[0].Pricing = &forav1.Pricing{
-				Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD",
-				EstimateToleranceBps: proto.Int32(1000),
-			}
-		})},
-		{"metered_term_with_tolerance_and_no_estimate_accepted", entry(func(e *forav1.ResourceEntry) {
-			e.Terms[0].Pricing = &forav1.Pricing{
-				Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD",
-				Unit: proto.String("tokens"), EstimateToleranceBps: proto.Int32(1500),
-			}
-		})},
-		{"structural_estimate_tolerance_above_max", entry(func(e *forav1.ResourceEntry) {
+		// A pushed PER_UNIT term needs no estimate: the estimate is optional on
+		// the term and on the offer.
+		{"metered_term_with_no_estimate_accepted", entry(func(e *forav1.ResourceEntry) {
 			e.Terms[0].Pricing = &forav1.Pricing{
 				Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD",
-				Unit: proto.String("tokens"), EstimateToleranceBps: proto.Int32(10001),
+				Unit: proto.String("tokens"),
 			}
 		})},
 		{"cross_field_license_digest_required_with_uri", entry(func(e *forav1.ResourceEntry) {
diff --git a/sdk/go/helpers/gen_settlement_vectors_test.go b/sdk/go/helpers/gen_settlement_vectors_test.go
deleted file mode 100644
index f7036b5d..00000000
--- a/sdk/go/helpers/gen_settlement_vectors_test.go
+++ /dev/null
@@ -1,219 +0,0 @@
-package helpers
-
-// Metered-settlement golden-vector emitter.
-//
-// The settlement of a metered purchase is arithmetic every party must agree on
-// to the last digit: the agent derives what it owes from the signed offer and
-// its own report, and the Exchange charges it, with no amount on the wire to
-// reconcile the two. Each row states the values its author worked out by hand,
-// and the emitter refuses to write a file where the real SettleMeteredUsage or
-// MeteredSettlementCap disagrees, so a face that drifted cannot publish its
-// drift as the new expectation.
-//
-// The rows reach past every default precision a decimal library ships with:
-// Python's Decimal context carries 28 significant digits, and two rows here
-// need 42. A port that does not do the arithmetic exactly fails them.
-//
-// Verification no-op by default (asserts the committed file matches a fresh
-// emit); (re)writes under FORA_UPDATE_VECTORS=1. TEST INFRASTRUCTURE.
-
-import (
-	"encoding/json"
-	"os"
-	"path/filepath"
-	"testing"
-
-	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
-	"google.golang.org/protobuf/encoding/protojson"
-	"google.golang.org/protobuf/proto"
-)
-
-// settlementExpectation is MeteredSettlement as the corpus records it. A price
-// that states no estimate has no accepted amount and no ceiling, and the corpus
-// records those three as null.
-type settlementExpectation struct {
-	AcceptedAmount  *string `json:"accepted_amount"`
-	CeilingQuantity *string `json:"ceiling_quantity"`
-	CeilingAmount   *string `json:"ceiling_amount"`
-	ChargedQuantity string  `json:"charged_quantity"`
-	ChargedAmount   string  `json:"charged_amount"`
-	HeldQuantity    string  `json:"held_quantity"`
-	HeldAmount      string  `json:"held_amount"`
-}
-
-// settlementExpectationOf records a settlement the way the corpus does.
-func settlementExpectationOf(m MeteredSettlement) settlementExpectation {
-	e := settlementExpectation{
-		ChargedQuantity: m.ChargedQuantity, ChargedAmount: m.ChargedAmount,
-		HeldQuantity: m.HeldQuantity, HeldAmount: m.HeldAmount,
-	}
-	if m.Estimated {
-		e.AcceptedAmount, e.CeilingQuantity, e.CeilingAmount = &m.AcceptedAmount, &m.CeilingQuantity, &m.CeilingAmount
-	}
-	return e
-}
-
-// sameSettlementExpectation compares two recorded settlements by value.
-func sameSettlementExpectation(a, b settlementExpectation) bool {
-	eq := func(x, y *string) bool { return (x == nil) == (y == nil) && (x == nil || *x == *y) }
-	return eq(a.AcceptedAmount, b.AcceptedAmount) && eq(a.CeilingQuantity, b.CeilingQuantity) &&
-		eq(a.CeilingAmount, b.CeilingAmount) && a.ChargedQuantity == b.ChargedQuantity &&
-		a.ChargedAmount == b.ChargedAmount && a.HeldQuantity == b.HeldQuantity && a.HeldAmount == b.HeldAmount
-}
-
-// settlementVector is one SettleMeteredUsage case. pricing is the offer's
-// pricing in canonical proto-JSON. A row whose expected ceiling_amount is null
-// has no cap: MeteredSettlementCap reports it uncapped. A row with error true
-// is refused by both
-// SettleMeteredUsage and MeteredSettlementCap, unless cap_error is false — a
-// negative consumed quantity is the settlement's fault, not the price's.
-type settlementVector struct {
-	Name             string                 `json:"name"`
-	Pricing          json.RawMessage        `json:"pricing"`
-	ConsumedQuantity int64                  `json:"consumed_quantity"`
-	Error            bool                   `json:"error"`
-	CapError         bool                   `json:"cap_error"`
-	Expected         *settlementExpectation `json:"expected,omitempty"`
-}
-
-func perToken(estimate, toleranceBps *int32, rate string) *forav1.Pricing {
-	return &forav1.Pricing{
-		Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: rate, Currency: "USD",
-		Unit: proto.String("tokens"), EstimatedQuantity: estimate, EstimateToleranceBps: toleranceBps,
-	}
-}
-
-func settled(accepted, ceilQ, ceilA, chargedQ, chargedA, heldQ, heldA string) *settlementExpectation {
-	return &settlementExpectation{&accepted, &ceilQ, &ceilA, chargedQ, chargedA, heldQ, heldA}
-}
-
-// unbounded is the settlement of a price that states no estimate: no accepted
-// amount, no ceiling, the whole quantity charged and nothing held.
-func unbounded(chargedQ, chargedA string) *settlementExpectation {
-	return &settlementExpectation{nil, nil, nil, chargedQ, chargedA, "0", "0"}
-}
-
-func buildSettlementVectors(t *testing.T) []settlementVector {
-	t.Helper()
-	const rate = "0.00002" // per token; E = 2500 accepts 0.05
-	tiny := "0.00000000000000000000000001234"
-	huge := "99999999999999999999999999999999"
-	e := proto.Int32
-	type row struct {
-		name     string
-		pricing  *forav1.Pricing
-		consumed int64
-		want     *settlementExpectation // nil: refused
-		capOK    bool                   // a refused row whose price still yields a cap
-	}
-	rows := []row{
-		// The three branches of the rule, at the default 10% tolerance (Q = 2750).
-		{"below_estimate_charged_as_consumed", perToken(e(2500), nil, rate), 2000,
-			settled("0.05", "2750", "0.055", "2000", "0.04", "0", "0"), false},
-		{"zero_consumed_charges_nothing", perToken(e(2500), nil, rate), 0,
-			settled("0.05", "2750", "0.055", "0", "0", "0", "0"), false},
-		{"at_estimate", perToken(e(2500), nil, rate), 2500,
-			settled("0.05", "2750", "0.055", "2500", "0.05", "0", "0"), false},
-		{"within_default_tolerance_charged_in_full", perToken(e(2500), nil, rate), 2700,
-			settled("0.05", "2750", "0.055", "2700", "0.054", "0", "0"), false},
-		{"at_ceiling_inclusive", perToken(e(2500), nil, rate), 2750,
-			settled("0.05", "2750", "0.055", "2750", "0.055", "0", "0"), false},
-		{"above_ceiling_excess_held", perToken(e(2500), nil, rate), 3000,
-			settled("0.05", "2750", "0.055", "2750", "0.055", "250", "0.005"), false},
-
-		// A stated tolerance replaces the default; an explicit 0 is no tolerance.
-		{"explicit_zero_tolerance_estimate_is_ceiling", perToken(e(2500), e(0), rate), 2600,
-			settled("0.05", "2500", "0.05", "2500", "0.05", "100", "0.002"), false},
-		{"explicit_max_tolerance_doubles_estimate", perToken(e(2500), e(10000), rate), 4000,
-			settled("0.05", "5000", "0.1", "4000", "0.08", "0", "0"), false},
-		{"odd_tolerance_fractional_ceiling", perToken(e(333), e(125), "0.0003"), 400,
-			settled("0.0999", "337.1625", "0.10114875", "337.1625", "0.10114875", "62.8375", "0.01885125"), false},
-		{"default_tolerance_fractional_ceiling", perToken(e(15), nil, "0.10"), 20,
-			settled("1.5", "16.5", "1.65", "16.5", "1.65", "3.5", "0.35"), false},
-
-		// Exactness past every default precision: 42 significant digits.
-		{"exact_tiny_rate_large_quantities", perToken(e(2000000001), e(3), tiny), 2147483647,
-			settled("0.00000000000000002468000001234", "2000600001.0003", "0.000000000000000024687404012343702",
-				"2000600001.0003", "0.000000000000000024687404012343702",
-				"146883645.9997", "0.000000000000000001812544191636298"), false},
-		{"exact_huge_rate_large_quantities", perToken(e(2000000001), e(3), huge), 2147483647,
-			settled("200000000099999999999999999999997999999999", "2000600001.0003",
-				"200060000100029999999999999999997999399998.9997",
-				"2000600001.0003", "200060000100029999999999999999997999399998.9997",
-				"146883645.9997", "14688364599969999999999999999999853116354.0003"), false},
-
-		// No estimate: no ceiling. The whole consumed quantity is charged at the
-		// rate and nothing is held, however large it is; a stated tolerance has
-		// nothing to widen.
-		{"no_estimate_charged_as_consumed", perToken(nil, nil, rate), 2500,
-			unbounded("2500", "0.05"), false},
-		{"no_estimate_zero_consumed_charges_nothing", perToken(nil, nil, rate), 0,
-			unbounded("0", "0"), false},
-		{"no_estimate_large_quantity_nothing_held", perToken(nil, nil, rate), 2147483647,
-			unbounded("2147483647", "42949.67294"), false},
-		{"no_estimate_tolerance_has_nothing_to_widen", perToken(nil, e(500), rate), 3000,
-			unbounded("3000", "0.06"), false},
-		{"no_estimate_exact_tiny_rate", perToken(nil, nil, tiny), 2147483647,
-			unbounded("2147483647", "0.00000000000000002649994820398"), false},
-
-		// Refusals. Each is refused by the settlement; all but the last by the cap too.
-		{"refused_not_metered", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1.00", Currency: "USD"}, 1, nil, false},
-		{"refused_free", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"}, 1, nil, false},
-		{"refused_zero_estimate", perToken(e(0), nil, rate), 2500, nil, false},
-		{"refused_negative_estimate", perToken(e(-1), nil, rate), 2500, nil, false},
-		{"refused_empty_rate", perToken(e(2500), nil, ""), 2500, nil, false},
-		{"refused_malformed_rate", perToken(e(2500), nil, "1E-5"), 2500, nil, false},
-		{"refused_tolerance_above_max", perToken(e(2500), e(10001), rate), 2500, nil, false},
-		{"refused_negative_tolerance", perToken(e(2500), e(-1), rate), 2500, nil, false},
-		{"refused_negative_consumed", perToken(e(2500), nil, rate), -1, nil, true},
-	}
-
-	marshal := protojson.MarshalOptions{UseProtoNames: true}
-	out := make([]settlementVector, 0, len(rows))
-	for _, r := range rows {
-		pj, err := marshal.Marshal(r.pricing)
-		if err != nil {
-			t.Fatalf("%s: marshal pricing: %v", r.name, err)
-		}
-		got, setErr := SettleMeteredUsage(r.pricing, r.consumed)
-		capAmount, capped, capErr := MeteredSettlementCap(r.pricing)
-		v := settlementVector{Name: r.name, Pricing: pj, ConsumedQuantity: r.consumed}
-		if r.want == nil {
-			if setErr == nil {
-				t.Fatalf("%s: SettleMeteredUsage accepted a row its author marked refused: %+v", r.name, got)
-			}
-			if r.capOK != (capErr == nil) {
-				t.Fatalf("%s: MeteredSettlementCap err = %v, author expected cap ok = %v", r.name, capErr, r.capOK)
-			}
-			v.Error, v.CapError = true, capErr != nil
-			out = append(out, v)
-			continue
-		}
-		if setErr != nil || capErr != nil {
-			t.Fatalf("%s: refused a row its author marked settleable: settle %v, cap %v", r.name, setErr, capErr)
-		}
-		want := *r.want
-		if have := settlementExpectationOf(got); !sameSettlementExpectation(have, want) {
-			t.Fatalf("%s: SettleMeteredUsage = %+v, author expected %+v", r.name, got, want)
-		}
-		if capped != (want.CeilingAmount != nil) || (capped && capAmount != *want.CeilingAmount) {
-			t.Fatalf("%s: MeteredSettlementCap = %q (capped %v), author expected %v", r.name, capAmount, capped, want.CeilingAmount)
-		}
-		v.Expected = &want
-		out = append(out, v)
-	}
-	return out
-}
-
-func TestGenerateSettlementVectors(t *testing.T) {
-	doc := map[string]any{
-		"default_estimate_tolerance_bps": DefaultEstimateToleranceBps,
-		"vectors":                        buildSettlementVectors(t),
-	}
-	path := filepath.Join("testdata", "metered-settlement-vectors.json")
-	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
-		writeJSON(t, path, doc)
-		return
-	}
-	assertMatches(t, path, doc)
-}
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index 68e76dc9..4b5cc9c2 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -536,25 +536,25 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 		// positive, or every port rejects the offer even though its signature
 		// and expiry are good. ---
 
-		// metered_with_estimate_and_tolerance: the conformant metered shape.
-		emit("metered_with_estimate_and_tolerance", &forav1.Offer{
+		// metered_with_estimate: the metered shape with an estimate.
+		emit("metered_with_estimate", &forav1.Offer{
 			OfferId:   "offer-metered",
 			ExpiresAt: future,
-			Pricing:   meteredVectorPricing(proto.Int32(2500), proto.Int32(1500)),
+			Pricing:   meteredVectorPricing(proto.Int32(2500)),
 			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
 		}, nil),
 		// metered_without_estimate: no estimate at all. The estimate is
-		// optional, and the purchase settles with no ceiling → verified.
+		// optional, and the purchase charges one unit → verified.
 		emit("metered_without_estimate", &forav1.Offer{
 			OfferId:   "offer-metered-no-estimate",
 			ExpiresAt: future,
-			Pricing:   meteredVectorPricing(nil, nil),
+			Pricing:   meteredVectorPricing(nil),
 		}, nil),
 		// metered_zero_estimate: a stated estimate of zero is not positive → rejected.
 		emit("metered_zero_estimate", &forav1.Offer{
 			OfferId:   "offer-metered-zero-estimate",
 			ExpiresAt: future,
-			Pricing:   meteredVectorPricing(proto.Int32(0), nil),
+			Pricing:   meteredVectorPricing(proto.Int32(0)),
 		}, nil),
 		// metered_term_estimate_only: the term is PER_UNIT and carries an estimate,
 		// the offer's own pricing does not. An offer's term carries no pricing, so
@@ -562,7 +562,7 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 		emit("metered_term_estimate_only", &forav1.Offer{
 			OfferId:   "offer-metered-term-only",
 			ExpiresAt: future,
-			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredVectorPricing(proto.Int32(2500), nil)}},
+			Terms:     []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED, Pricing: meteredVectorPricing(proto.Int32(2500))}},
 		}, nil),
 
 		// --- One price dimension: an offer states its price once, in
@@ -604,12 +604,12 @@ func buildOfferVerifyVectors(t *testing.T) []offerVerifyVector {
 	}
 }
 
-// meteredVectorPricing is a PER_UNIT price per token with the given estimate and
-// tolerance (nil leaves either unset).
-func meteredVectorPricing(estimate, toleranceBps *int32) *forav1.Pricing {
+// meteredVectorPricing is a PER_UNIT price per token with the given estimate
+// (nil leaves it unset).
+func meteredVectorPricing(estimate *int32) *forav1.Pricing {
 	return &forav1.Pricing{
 		Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "0.00002", Currency: "USD",
-		Unit: proto.String("tokens"), EstimatedQuantity: estimate, EstimateToleranceBps: toleranceBps,
+		Unit: proto.String("tokens"), EstimatedQuantity: estimate,
 	}
 }
 
diff --git a/sdk/go/helpers/settlement.go b/sdk/go/helpers/settlement.go
deleted file mode 100644
index d43c4645..00000000
--- a/sdk/go/helpers/settlement.go
+++ /dev/null
@@ -1,221 +0,0 @@
-package helpers
-
-import (
-	"errors"
-	"fmt"
-
-	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
-	"github.com/shopspring/decimal"
-)
-
-// Metered settlement (fora.proto Pricing, "METERED SETTLEMENT"). A PER_UNIT
-// price is charged per unit consumed. Up to three values on the offer's
-// pricing fix what a metered purchase can cost — the rate R, the optional
-// estimate E and the tolerance T in basis points (1000 when absent) — and the
-// offer signature covers them. Without an estimate there is no ceiling: the
-// agent accepts the rate, and the usage report settles the consumed quantity
-// C at C × R. With one, the agent accepts E × R at purchase; the usage report
-// settles C at min(C, Q) × R, where the ceiling is Q = E × (10000 + T) /
-// 10000, and the quantity above Q is held for dispute, never charged
-// automatically.
-//
-// Every value here is exact: the inputs are integers and decimal strings and
-// the only division is by 10000, a decimal shift, so no step rounds. The
-// results are canonical decimal strings in the money wire form (FormatMoney).
-
-// DefaultEstimateToleranceBps is the tolerance a metered price settles within
-// when it states none: 1000 basis points, 10% of the estimate.
-const DefaultEstimateToleranceBps int32 = 1000
-
-// MaxEstimateToleranceBps is the largest tolerance the wire accepts: 10000
-// basis points, a ceiling of twice the estimate.
-const MaxEstimateToleranceBps int32 = 10000
-
-// bpsScale is the basis-point denominator; dividing by it is a shift of four
-// decimal places.
-const bpsScale = 10000
-
-// ErrMeteredEstimateNotPositive signals a metered (PER_UNIT) offer or price
-// that states an estimated_quantity of zero or less. An estimate is optional,
-// but one that is stated is positive (the offer.metered.estimate_positive
-// rule): a zero estimate would fix a ceiling of nothing.
-var ErrMeteredEstimateNotPositive = errors.New("helpers: metered offer states an estimated_quantity that is not positive")
-
-// ErrNotMetered signals a settlement asked of a price that is not PER_UNIT.
-var ErrNotMetered = errors.New("helpers: pricing is not metered (PER_UNIT)")
-
-// MeteredSettlement is what a metered purchase settles to, every value a
-// canonical decimal string. Quantities are in the price's unit and may be
-// fractional (CeilingQuantity, and the quantities derived from it); amounts are
-// in the price's currency.
-//
-// When the price states no estimate, Estimated is false and there is no
-// ceiling: AcceptedAmount, CeilingQuantity and CeilingAmount are empty, the
-// whole consumed quantity is charged, and nothing is held.
-type MeteredSettlement struct {
-	// Estimated reports whether the price states an estimate, and so has an
-	// accepted amount and a ceiling.
-	Estimated bool
-	// AcceptedAmount is E × R: what the agent accepted at purchase, and what
-	// TransactionResultItem.cost carries for a metered item. Empty without an
-	// estimate.
-	AcceptedAmount string
-	// CeilingQuantity is Q = E × (10000 + T) / 10000. Empty without an
-	// estimate.
-	CeilingQuantity string
-	// CeilingAmount is Q × R: the most the purchase is charged without a
-	// dispute. Empty without an estimate.
-	CeilingAmount string
-	// ChargedQuantity is min(C, Q), or C without an estimate.
-	ChargedQuantity string
-	// ChargedAmount is ChargedQuantity × R: what the report settles to.
-	ChargedAmount string
-	// HeldQuantity is max(0, C − Q): the quantity held for dispute. Always 0
-	// without an estimate.
-	HeldQuantity string
-	// HeldAmount is HeldQuantity × R: held for dispute, never charged
-	// automatically.
-	HeldAmount string
-}
-
-// IsMeteredOffer reports whether offer is metered: its pricing is PER_UNIT.
-// Offer.pricing is the offer's one price — the term it sells carries none
-// (fora.proto Offer, the offer.metered.estimate_positive and
-// offer.terms.pricing_unset rules) — so a term is never consulted.
-func IsMeteredOffer(offer *forav1.Offer) bool {
-	return offer.GetPricing().GetModel() == forav1.PricingModel_PRICING_MODEL_PER_UNIT
-}
-
-// CheckMeteredEstimate returns ErrMeteredEstimateNotPositive when offer is
-// metered and its pricing states an estimated_quantity of zero or less, and
-// nil otherwise. A metered offer that states no estimate passes: the estimate
-// is optional, and without one the purchase settles with no ceiling. It is the
-// offer.metered.estimate_positive rule as a standalone check, for a verifier
-// that runs without wire validation; a non-metered offer passes whatever its
-// pricing says.
-func CheckMeteredEstimate(offer *forav1.Offer) error {
-	if offer == nil {
-		return errors.New("helpers: offer is nil")
-	}
-	if !IsMeteredOffer(offer) {
-		return nil
-	}
-	if p := offer.GetPricing(); p.EstimatedQuantity != nil && p.GetEstimatedQuantity() <= 0 {
-		return ErrMeteredEstimateNotPositive
-	}
-	return nil
-}
-
-// EstimateToleranceBps returns the tolerance pricing settles within: its
-// estimate_tolerance_bps when present (an explicit 0 included), and
-// DefaultEstimateToleranceBps when absent. It does not check the bounds;
-// SettleMeteredUsage and MeteredSettlementCap do.
-func EstimateToleranceBps(pricing *forav1.Pricing) int32 {
-	if pricing == nil || pricing.EstimateToleranceBps == nil {
-		return DefaultEstimateToleranceBps
-	}
-	return pricing.GetEstimateToleranceBps()
-}
-
-// meteredTerms holds the parsed settlement inputs of a metered price.
-// estimated is false when the price states no estimate; estimate and ceiling
-// are then unset.
-type meteredTerms struct {
-	estimated bool
-	estimate  decimal.Decimal
-	rate      decimal.Decimal
-	ceiling   decimal.Decimal
-}
-
-// parseMeteredTerms checks pricing is a metered price that can settle and
-// returns its rate, and its estimate and ceiling quantity when it states an
-// estimate.
-func parseMeteredTerms(pricing *forav1.Pricing) (meteredTerms, error) {
-	if pricing == nil {
-		return meteredTerms{}, errors.New("helpers: pricing is nil")
-	}
-	if pricing.GetModel() != forav1.PricingModel_PRICING_MODEL_PER_UNIT {
-		return meteredTerms{}, fmt.Errorf("%w: model is %s", ErrNotMetered, pricing.GetModel())
-	}
-	if pricing.EstimatedQuantity != nil && pricing.GetEstimatedQuantity() <= 0 {
-		return meteredTerms{}, ErrMeteredEstimateNotPositive
-	}
-	rate, err := ParseMoney(pricing.GetRate())
-	if err != nil {
-		return meteredTerms{}, fmt.Errorf("helpers: metered rate: %w", err)
-	}
-	bps := EstimateToleranceBps(pricing)
-	if bps < 0 || bps > MaxEstimateToleranceBps {
-		return meteredTerms{}, fmt.Errorf("helpers: estimate_tolerance_bps %d is outside 0..%d", bps, MaxEstimateToleranceBps)
-	}
-	if pricing.EstimatedQuantity == nil {
-		return meteredTerms{rate: rate}, nil
-	}
-	estimate := decimal.NewFromInt(int64(pricing.GetEstimatedQuantity()))
-	ceiling := estimate.Mul(decimal.NewFromInt(int64(bpsScale + bps))).Shift(-4)
-	return meteredTerms{estimated: true, estimate: estimate, rate: rate, ceiling: ceiling}, nil
-}
-
-// MeteredSettlementCap returns Q × R for a metered price: the most a purchase
-// under it is charged without a dispute. capped is false, with an empty amount, when the price
-// states no estimate: it then has no ceiling, and nothing in it bounds the
-// charge. It refuses a price that is not PER_UNIT, states an estimate that is
-// not positive, carries no valid rate, or states a tolerance outside
-// 0..10000.
-func MeteredSettlementCap(pricing *forav1.Pricing) (amount string, capped bool, err error) {
-	terms, err := parseMeteredTerms(pricing)
-	if err != nil {
-		return "", false, err
-	}
-	if !terms.estimated {
-		return "", false, nil
-	}
-	amount, err = FormatMoney(terms.ceiling.Mul(terms.rate))
-	if err != nil {
-		return "", false, err
-	}
-	return amount, true, nil
-}
-
-// SettleMeteredUsage settles a usage report of consumedQuantity against a
-// metered price — the offer's own pricing, which is the copy settlement reads.
-// Without an estimate the whole quantity is charged at the rate and nothing is
-// held. It refuses what MeteredSettlementCap refuses, and a negative quantity.
-func SettleMeteredUsage(pricing *forav1.Pricing, consumedQuantity int64) (MeteredSettlement, error) {
-	terms, err := parseMeteredTerms(pricing)
-	if err != nil {
-		return MeteredSettlement{}, err
-	}
-	if consumedQuantity < 0 {
-		return MeteredSettlement{}, fmt.Errorf("helpers: consumed quantity %d is negative", consumedQuantity)
-	}
-	consumed := decimal.NewFromInt(consumedQuantity)
-	charged, held := consumed, decimal.Zero
-	if terms.estimated {
-		charged = decimal.Min(consumed, terms.ceiling)
-		held = decimal.Max(decimal.Zero, consumed.Sub(terms.ceiling))
-	}
-	values := []decimal.Decimal{charged, charged.Mul(terms.rate), held, held.Mul(terms.rate)}
-	if terms.estimated {
-		values = append(values, terms.estimate.Mul(terms.rate), terms.ceiling, terms.ceiling.Mul(terms.rate))
-	}
-	out := make([]string, len(values))
-	for i, v := range values {
-		s, err := FormatMoney(v)
-		if err != nil {
-			return MeteredSettlement{}, err
-		}
-		out[i] = s
-	}
-	settlement := MeteredSettlement{
-		Estimated:       terms.estimated,
-		ChargedQuantity: out[0],
-		ChargedAmount:   out[1],
-		HeldQuantity:    out[2],
-		HeldAmount:      out[3],
-	}
-	if terms.estimated {
-		settlement.AcceptedAmount, settlement.CeilingQuantity, settlement.CeilingAmount = out[4], out[5], out[6]
-	}
-	return settlement, nil
-}
diff --git a/sdk/go/helpers/settlement_test.go b/sdk/go/helpers/settlement_test.go
deleted file mode 100644
index 8a1ef07f..00000000
--- a/sdk/go/helpers/settlement_test.go
+++ /dev/null
@@ -1,113 +0,0 @@
-package helpers
-
-import (
-	"errors"
-	"testing"
-
-	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
-	"google.golang.org/protobuf/proto"
-)
-
-// The settlement arithmetic is pinned by metered-settlement-vectors.json, which
-// every SDK replays. These tests cover what the vectors do not: which offers are
-// metered, the estimate check a verifier runs, and the tolerance default.
-
-func meteredTestOffer(offerModel forav1.PricingModel, estimate *int32) *forav1.Offer {
-	return &forav1.Offer{
-		Pricing: &forav1.Pricing{Model: offerModel, EstimatedQuantity: estimate},
-		Terms:   []*forav1.LicenseTerm{{Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED}},
-	}
-}
-
-func TestCheckMeteredEstimate(t *testing.T) {
-	perUnit, flat := forav1.PricingModel_PRICING_MODEL_PER_UNIT, forav1.PricingModel_PRICING_MODEL_FLAT
-	// A priced term no longer makes an offer metered: Offer.pricing is the
-	// offer's one price, and a term carrying pricing is refused on its own
-	// (CheckOfferTermsUnpriced), not read.
-	pricedTerm := meteredTestOffer(flat, nil)
-	pricedTerm.Terms[0].Pricing = &forav1.Pricing{Model: perUnit, EstimatedQuantity: proto.Int32(10)}
-	cases := []struct {
-		name    string
-		offer   *forav1.Offer
-		metered bool
-		wantErr bool
-	}{
-		{"per_unit_with_estimate", meteredTestOffer(perUnit, proto.Int32(1)), true, false},
-		{"per_unit_without_estimate_is_valid", meteredTestOffer(perUnit, nil), true, false},
-		{"per_unit_zero_estimate", meteredTestOffer(perUnit, proto.Int32(0)), true, true},
-		{"per_unit_negative_estimate", meteredTestOffer(perUnit, proto.Int32(-3)), true, true},
-		{"per_unit_term_under_flat_pricing_is_not_metered", pricedTerm, false, false},
-		{"flat_without_estimate", meteredTestOffer(flat, nil), false, false},
-		{"no_pricing_at_all", &forav1.Offer{}, false, false},
-	}
-	for _, c := range cases {
-		t.Run(c.name, func(t *testing.T) {
-			if got := IsMeteredOffer(c.offer); got != c.metered {
-				t.Fatalf("IsMeteredOffer = %v, want %v", got, c.metered)
-			}
-			err := CheckMeteredEstimate(c.offer)
-			if c.wantErr != (err != nil) {
-				t.Fatalf("CheckMeteredEstimate = %v, want error %v", err, c.wantErr)
-			}
-			if c.wantErr && !errors.Is(err, ErrMeteredEstimateNotPositive) {
-				t.Fatalf("CheckMeteredEstimate = %v, want ErrMeteredEstimateNotPositive", err)
-			}
-		})
-	}
-	if err := CheckMeteredEstimate(nil); err == nil {
-		t.Fatal("CheckMeteredEstimate(nil) must refuse")
-	}
-}
-
-func TestCheckOfferTermsUnpriced(t *testing.T) {
-	unpriced := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
-	if err := CheckOfferTermsUnpriced(unpriced); err != nil {
-		t.Fatalf("unpriced term: got %v, want nil", err)
-	}
-	if err := CheckOfferTermsUnpriced(&forav1.Offer{}); err != nil {
-		t.Fatalf("no terms: got %v, want nil", err)
-	}
-	priced := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
-	priced.Terms[0].Pricing = proto.Clone(priced.Pricing).(*forav1.Pricing)
-	if err := CheckOfferTermsUnpriced(priced); !errors.Is(err, ErrOfferTermPriced) {
-		t.Fatalf("term repeating the offer price: got %v, want ErrOfferTermPriced", err)
-	}
-	// An empty Pricing is still pricing present on the term.
-	empty := meteredTestOffer(forav1.PricingModel_PRICING_MODEL_FLAT, nil)
-	empty.Terms[0].Pricing = &forav1.Pricing{}
-	if err := CheckOfferTermsUnpriced(empty); !errors.Is(err, ErrOfferTermPriced) {
-		t.Fatalf("empty term pricing: got %v, want ErrOfferTermPriced", err)
-	}
-	if err := CheckOfferTermsUnpriced(nil); err == nil || errors.Is(err, ErrOfferTermPriced) {
-		t.Fatalf("nil offer: got %v, want a refusal that is not ErrOfferTermPriced", err)
-	}
-	if _, err := SignOffer(make([]byte, 64), priced); !errors.Is(err, ErrOfferTermPriced) {
-		t.Fatalf("SignOffer of a priced term: got %v, want ErrOfferTermPriced", err)
-	}
-}
-
-func TestEstimateToleranceBps(t *testing.T) {
-	if got := EstimateToleranceBps(nil); got != DefaultEstimateToleranceBps {
-		t.Fatalf("nil pricing: got %d, want the default %d", got, DefaultEstimateToleranceBps)
-	}
-	if got := EstimateToleranceBps(&forav1.Pricing{}); got != 1000 {
-		t.Fatalf("absent tolerance: got %d, want 1000", got)
-	}
-	if got := EstimateToleranceBps(&forav1.Pricing{EstimateToleranceBps: proto.Int32(0)}); got != 0 {
-		t.Fatalf("explicit zero tolerance: got %d, want 0 (no tolerance, not the default)", got)
-	}
-}
-
-func TestSettleMeteredUsageRefusesNotMetered(t *testing.T) {
-	_, err := SettleMeteredUsage(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1"}, 1)
-	if !errors.Is(err, ErrNotMetered) {
-		t.Fatalf("FLAT pricing: got %v, want ErrNotMetered", err)
-	}
-	_, _, err = MeteredSettlementCap(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Rate: "1", EstimatedQuantity: proto.Int32(0)})
-	if !errors.Is(err, ErrMeteredEstimateNotPositive) {
-		t.Fatalf("PER_UNIT with a zero estimate: got %v, want ErrMeteredEstimateNotPositive", err)
-	}
-	if _, err := SettleMeteredUsage(nil, 1); err == nil {
-		t.Fatal("nil pricing must refuse")
-	}
-}
diff --git a/sdk/go/helpers/testdata/licenseterm-vectors.json b/sdk/go/helpers/testdata/licenseterm-vectors.json
index d31bf0ef..e3ab109c 100644
--- a/sdk/go/helpers/testdata/licenseterm-vectors.json
+++ b/sdk/go/helpers/testdata/licenseterm-vectors.json
@@ -520,7 +520,7 @@
       "warnings": []
     },
     {
-      "name": "cross_field_pricing_estimate_tolerance_requires_per_unit",
+      "name": "metered_term_with_no_estimate_accepted",
       "entry": {
         "domain": "publisher.example",
         "path": "/premium/article-42.html",
@@ -528,32 +528,6 @@
           {
             "pricing": {
               "currency": "USD",
-              "estimate_tolerance_bps": 1000,
-              "model": "PRICING_MODEL_FLAT",
-              "rate": "1.00"
-            },
-            "semantics": "TERM_SEMANTICS_ENUMERATED"
-          }
-        ]
-      },
-      "ok": false,
-      "structural": false,
-      "cross_field_rules": [
-        "pricing.estimate_tolerance.requires_per_unit"
-      ],
-      "term_rules": [],
-      "warnings": []
-    },
-    {
-      "name": "metered_term_with_tolerance_and_no_estimate_accepted",
-      "entry": {
-        "domain": "publisher.example",
-        "path": "/premium/article-42.html",
-        "terms": [
-          {
-            "pricing": {
-              "currency": "USD",
-              "estimate_tolerance_bps": 1500,
               "model": "PRICING_MODEL_PER_UNIT",
               "rate": "0.00002",
               "unit": "tokens"
@@ -568,30 +542,6 @@
       "term_rules": [],
       "warnings": []
     },
-    {
-      "name": "structural_estimate_tolerance_above_max",
-      "entry": {
-        "domain": "publisher.example",
-        "path": "/premium/article-42.html",
-        "terms": [
-          {
-            "pricing": {
-              "currency": "USD",
-              "estimate_tolerance_bps": 10001,
-              "model": "PRICING_MODEL_PER_UNIT",
-              "rate": "0.00002",
-              "unit": "tokens"
-            },
-            "semantics": "TERM_SEMANTICS_ENUMERATED"
-          }
-        ]
-      },
-      "ok": false,
-      "structural": true,
-      "cross_field_rules": [],
-      "term_rules": [],
-      "warnings": []
-    },
     {
       "name": "cross_field_license_digest_required_with_uri",
       "entry": {
diff --git a/sdk/go/helpers/testdata/metered-settlement-vectors.json b/sdk/go/helpers/testdata/metered-settlement-vectors.json
deleted file mode 100644
index b1d50d80..00000000
--- a/sdk/go/helpers/testdata/metered-settlement-vectors.json
+++ /dev/null
@@ -1,493 +0,0 @@
-{
-  "default_estimate_tolerance_bps": 1000,
-  "vectors": [
-    {
-      "name": "below_estimate_charged_as_consumed",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2000,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "2750",
-        "ceiling_amount": "0.055",
-        "charged_quantity": "2000",
-        "charged_amount": "0.04",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "zero_consumed_charges_nothing",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 0,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "2750",
-        "ceiling_amount": "0.055",
-        "charged_quantity": "0",
-        "charged_amount": "0",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "at_estimate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2500,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "2750",
-        "ceiling_amount": "0.055",
-        "charged_quantity": "2500",
-        "charged_amount": "0.05",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "within_default_tolerance_charged_in_full",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2700,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "2750",
-        "ceiling_amount": "0.055",
-        "charged_quantity": "2700",
-        "charged_amount": "0.054",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "at_ceiling_inclusive",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2750,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "2750",
-        "ceiling_amount": "0.055",
-        "charged_quantity": "2750",
-        "charged_amount": "0.055",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "above_ceiling_excess_held",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 3000,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "2750",
-        "ceiling_amount": "0.055",
-        "charged_quantity": "2750",
-        "charged_amount": "0.055",
-        "held_quantity": "250",
-        "held_amount": "0.005"
-      }
-    },
-    {
-      "name": "explicit_zero_tolerance_estimate_is_ceiling",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens",
-        "estimate_tolerance_bps": 0
-      },
-      "consumed_quantity": 2600,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "2500",
-        "ceiling_amount": "0.05",
-        "charged_quantity": "2500",
-        "charged_amount": "0.05",
-        "held_quantity": "100",
-        "held_amount": "0.002"
-      }
-    },
-    {
-      "name": "explicit_max_tolerance_doubles_estimate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens",
-        "estimate_tolerance_bps": 10000
-      },
-      "consumed_quantity": 4000,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.05",
-        "ceiling_quantity": "5000",
-        "ceiling_amount": "0.1",
-        "charged_quantity": "4000",
-        "charged_amount": "0.08",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "odd_tolerance_fractional_ceiling",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.0003",
-        "currency": "USD",
-        "estimated_quantity": 333,
-        "unit": "tokens",
-        "estimate_tolerance_bps": 125
-      },
-      "consumed_quantity": 400,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.0999",
-        "ceiling_quantity": "337.1625",
-        "ceiling_amount": "0.10114875",
-        "charged_quantity": "337.1625",
-        "charged_amount": "0.10114875",
-        "held_quantity": "62.8375",
-        "held_amount": "0.01885125"
-      }
-    },
-    {
-      "name": "default_tolerance_fractional_ceiling",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.10",
-        "currency": "USD",
-        "estimated_quantity": 15,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 20,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "1.5",
-        "ceiling_quantity": "16.5",
-        "ceiling_amount": "1.65",
-        "charged_quantity": "16.5",
-        "charged_amount": "1.65",
-        "held_quantity": "3.5",
-        "held_amount": "0.35"
-      }
-    },
-    {
-      "name": "exact_tiny_rate_large_quantities",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00000000000000000000000001234",
-        "currency": "USD",
-        "estimated_quantity": 2000000001,
-        "unit": "tokens",
-        "estimate_tolerance_bps": 3
-      },
-      "consumed_quantity": 2147483647,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "0.00000000000000002468000001234",
-        "ceiling_quantity": "2000600001.0003",
-        "ceiling_amount": "0.000000000000000024687404012343702",
-        "charged_quantity": "2000600001.0003",
-        "charged_amount": "0.000000000000000024687404012343702",
-        "held_quantity": "146883645.9997",
-        "held_amount": "0.000000000000000001812544191636298"
-      }
-    },
-    {
-      "name": "exact_huge_rate_large_quantities",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "99999999999999999999999999999999",
-        "currency": "USD",
-        "estimated_quantity": 2000000001,
-        "unit": "tokens",
-        "estimate_tolerance_bps": 3
-      },
-      "consumed_quantity": 2147483647,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": "200000000099999999999999999999997999999999",
-        "ceiling_quantity": "2000600001.0003",
-        "ceiling_amount": "200060000100029999999999999999997999399998.9997",
-        "charged_quantity": "2000600001.0003",
-        "charged_amount": "200060000100029999999999999999997999399998.9997",
-        "held_quantity": "146883645.9997",
-        "held_amount": "14688364599969999999999999999999853116354.0003"
-      }
-    },
-    {
-      "name": "no_estimate_charged_as_consumed",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2500,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": null,
-        "ceiling_quantity": null,
-        "ceiling_amount": null,
-        "charged_quantity": "2500",
-        "charged_amount": "0.05",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "no_estimate_zero_consumed_charges_nothing",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "unit": "tokens"
-      },
-      "consumed_quantity": 0,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": null,
-        "ceiling_quantity": null,
-        "ceiling_amount": null,
-        "charged_quantity": "0",
-        "charged_amount": "0",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "no_estimate_large_quantity_nothing_held",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2147483647,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": null,
-        "ceiling_quantity": null,
-        "ceiling_amount": null,
-        "charged_quantity": "2147483647",
-        "charged_amount": "42949.67294",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "no_estimate_tolerance_has_nothing_to_widen",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "unit": "tokens",
-        "estimate_tolerance_bps": 500
-      },
-      "consumed_quantity": 3000,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": null,
-        "ceiling_quantity": null,
-        "ceiling_amount": null,
-        "charged_quantity": "3000",
-        "charged_amount": "0.06",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "no_estimate_exact_tiny_rate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00000000000000000000000001234",
-        "currency": "USD",
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2147483647,
-      "error": false,
-      "cap_error": false,
-      "expected": {
-        "accepted_amount": null,
-        "ceiling_quantity": null,
-        "ceiling_amount": null,
-        "charged_quantity": "2147483647",
-        "charged_amount": "0.00000000000000002649994820398",
-        "held_quantity": "0",
-        "held_amount": "0"
-      }
-    },
-    {
-      "name": "refused_not_metered",
-      "pricing": {
-        "model": "PRICING_MODEL_FLAT",
-        "rate": "1.00",
-        "currency": "USD"
-      },
-      "consumed_quantity": 1,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_free",
-      "pricing": {
-        "model": "PRICING_MODEL_FREE",
-        "rate": "0"
-      },
-      "consumed_quantity": 1,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_zero_estimate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 0,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2500,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_negative_estimate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": -1,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2500,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_empty_rate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2500,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_malformed_rate",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "1E-5",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": 2500,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_tolerance_above_max",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens",
-        "estimate_tolerance_bps": 10001
-      },
-      "consumed_quantity": 2500,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_negative_tolerance",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens",
-        "estimate_tolerance_bps": -1
-      },
-      "consumed_quantity": 2500,
-      "error": true,
-      "cap_error": true
-    },
-    {
-      "name": "refused_negative_consumed",
-      "pricing": {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "currency": "USD",
-        "estimated_quantity": 2500,
-        "unit": "tokens"
-      },
-      "consumed_quantity": -1,
-      "error": true,
-      "cap_error": false
-    }
-  ]
-}
diff --git a/sdk/go/helpers/testdata/offer-verify-vectors.json b/sdk/go/helpers/testdata/offer-verify-vectors.json
index 8890459f..e0d557e3 100644
--- a/sdk/go/helpers/testdata/offer-verify-vectors.json
+++ b/sdk/go/helpers/testdata/offer-verify-vectors.json
@@ -159,7 +159,7 @@
       "exchange_seed_hex": "666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485"
     },
     {
-      "name": "metered_with_estimate_and_tolerance",
+      "name": "metered_with_estimate",
       "exchange": "exchange.example.com",
       "exchange_pub_b64url": "zpI5jIJHFJdW8sf3SDqL5IIPRMSe0MNkTrcaZJD7BKg",
       "offer_json": {
@@ -168,13 +168,12 @@
         "offer_id": "offer-metered",
         "pricing": {
           "currency": "USD",
-          "estimate_tolerance_bps": 1500,
           "estimated_quantity": 2500,
           "model": "PRICING_MODEL_PER_UNIT",
           "rate": "0.00002",
           "unit": "tokens"
         },
-        "signature": "d81878e5b8b422a0cfe4e0814a2e5c80bf86511a8d572673091bff16caa36aa3f0c4887e0a55a23c30e7a1c2a12d7d496c5171b5bb28116dbc3447c44201ab02",
+        "signature": "c2df3163165718b950322ebc070b24f176d367f2314b38b99ae9db7add8f927cf1ff4030a1cd9fb1c1268f0972ce46949ece4c0a2239d62ad9cac079819c2e0b",
         "signature_algorithm": "EdDSA",
         "terms": [
           {

From 288605ee1e5000e2e74c81f6bb248268fc7e1f22 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 22:43:04 -0400
Subject: [PATCH 089/164] Drop metered settlement from the Python SDK

metered_settlement_cap, settle_metered_usage, MeteredSettlement,
estimate_tolerance_bps and the two tolerance constants leave
fora_sdk.money and the package exports. The cross-field layer drops
the tolerance rule on Pricing. is_metered_offer,
check_metered_estimate and check_offer_terms_unpriced stay.

The settlement parity suite becomes test_metered_offer_parity.py with
the estimate and priced-term checks only, the cross-field suite drops
the tolerance instance, and the offer-verify pins name
metered_with_estimate. The README describes the final purchase
charge.
---
 sdk/python/README.md                          |  15 +-
 sdk/python/fora_sdk/__init__.py               |  12 --
 sdk/python/fora_sdk/crossfield.py             |   8 +-
 sdk/python/fora_sdk/money.py                  | 164 +-----------------
 .../tests/test_core_offer_verify_parity.py    |   2 +-
 sdk/python/tests/test_crossfield_parity.py    |  14 +-
 .../tests/test_metered_settlement_parity.py   | 157 -----------------
 7 files changed, 14 insertions(+), 358 deletions(-)
 delete mode 100644 sdk/python/tests/test_metered_settlement_parity.py

diff --git a/sdk/python/README.md b/sdk/python/README.md
index cb63f741..136fa4a2 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -233,16 +233,11 @@ normalize_resource_entry(entry)            # the form the Exchange stores
 **Money.** Exact decimal in and out, canonical decimal string on the wire:
 `parse_money`, `format_money`, `canonicalize_money`. Never floats.
 
-**Metered settlement.** A `PER_UNIT` offer may carry an estimate. Without one there is no
-ceiling, and its usage report settles at consumed × rate. With one, the report settles
-within the price's tolerance (10% unless the term states one); the excess is held for
-dispute, never charged. `metered_settlement_cap(offer["pricing"])` is the most a
-purchase is charged without a dispute, or `None` when the price states no estimate;
-`settle_metered_usage(offer["pricing"], consumed)` returns a `MeteredSettlement` with
-the accepted, ceiling, charged and held amounts, in exact decimal (the accepted and
-ceiling amounts are `None` without an estimate). `check_metered_estimate(offer)` raises
-on a metered offer whose stated estimate is not positive, and the `Verifier` rejects
-such an offer.
+**Metered offers.** A `PER_UNIT` offer may carry an estimate. The purchase charges
+estimate × rate, or one unit's rate without an estimate, and the charge is final.
+`is_metered_offer(offer)` says whether an offer is metered, and
+`check_metered_estimate(offer)` raises on a metered offer whose stated estimate is not
+positive; the `Verifier` rejects such an offer.
 
 **One price per offer.** An offer's price is `offer["pricing"]`, and the term it sells
 carries none. `check_offer_terms_unpriced(offer)` raises `ValueError` on a priced term;
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index e2566ab0..aff069c8 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -129,18 +129,12 @@
     validate_resource_entry,
 )
 from .money import (
-    DEFAULT_ESTIMATE_TOLERANCE_BPS,
-    MAX_ESTIMATE_TOLERANCE_BPS,
-    MeteredSettlement,
     canonicalize_money,
     check_metered_estimate,
     check_offer_terms_unpriced,
-    estimate_tolerance_bps,
     format_money,
     is_metered_offer,
-    metered_settlement_cap,
     parse_money,
-    settle_metered_usage,
 )
 from .pop import AGENT_KEY_HEADER, sign_agent_binding, verify_agent_binding
 from .regschema import (
@@ -212,8 +206,6 @@
     "CatalogClient",
     "Client",
     "ClientConfig",
-    "DEFAULT_ESTIMATE_TOLERANCE_BPS",
-    "MeteredSettlement",
     "RawBody",
     "ConnectProtocolVersion",
     "ConnectProtocolVersionHeader",
@@ -235,7 +227,6 @@
     "KeyResolver",
     "KeyRevokedError",
     "MAX_BARE_DOMAIN_LEN",
-    "MAX_ESTIMATE_TOLERANCE_BPS",
     "MAX_REGISTRATION_DATA_BYTES",
     "MAX_REGISTRATION_DATA_DEPTH",
     "MAX_REGISTRATION_DATA_MEMBERS",
@@ -311,7 +302,6 @@
     "dispute_failure_detail",
     "domain_verification_failure_detail",
     "error_detail_from",
-    "estimate_tolerance_bps",
     "format_money",
     "generate_idempotency_key",
     "generate_key",
@@ -328,14 +318,12 @@
     "jcs_request_acceptance_payload",
     "known_restriction_token",
     "manifest_version_refusal",
-    "metered_settlement_cap",
     "monotonic_window",
     "normalize_license_term",
     "normalize_resource_entry",
     "normalize_scopes",
     "parse_error_detail",
     "parse_money",
-    "settle_metered_usage",
     "reason",
     "registration_failure_detail",
     "request_auth_failure_detail",
diff --git a/sdk/python/fora_sdk/crossfield.py b/sdk/python/fora_sdk/crossfield.py
index 4929321d..d5b105fb 100644
--- a/sdk/python/fora_sdk/crossfield.py
+++ b/sdk/python/fora_sdk/crossfield.py
@@ -125,11 +125,7 @@ def _obligation_rules(o: dict[str, Any]) -> list[str]:
 
 
 def _pricing_rules(o: dict[str, Any]) -> list[str]:
-    """Pricing per_unit.requires_unit + free.zero_rate + estimate_tolerance.requires_per_unit.
-
-    The last is ``!has(this.estimate_tolerance_bps) || this.model == PER_UNIT``; the
-    field is proto3 optional, so a present 0 counts as set, as ``has()`` does.
-    """
+    """Pricing per_unit.requires_unit + free.zero_rate."""
     out: list[str] = []
     model = _str(_field(o, "model"))
     if model == _PRICING_MODEL_PER_UNIT and _str(_field(o, "unit")) == "":
@@ -138,8 +134,6 @@ def _pricing_rules(o: dict[str, Any]) -> list[str]:
         rate = _str(_field(o, "rate"))
         if rate != "" and not _ZERO_RATE_RE.match(rate):
             out.append("pricing.free.zero_rate")
-    if _field(o, "estimate_tolerance_bps") is not None and model != _PRICING_MODEL_PER_UNIT:
-        out.append("pricing.estimate_tolerance.requires_per_unit")
     return out
 
 
diff --git a/sdk/python/fora_sdk/money.py b/sdk/python/fora_sdk/money.py
index b1b95b33..2dd0e01e 100644
--- a/sdk/python/fora_sdk/money.py
+++ b/sdk/python/fora_sdk/money.py
@@ -15,16 +15,7 @@
 
 import re
 from collections.abc import Mapping
-from dataclasses import dataclass
-from decimal import (
-    Context,
-    Decimal,
-    DivisionByZero,
-    Inexact,
-    InvalidOperation,
-    Overflow,
-    localcontext,
-)
+from decimal import Decimal
 from typing import Any
 
 # _MONEY_WIRE mirrors the protovalidate constraint ``^([0-9]+([.][0-9]+)?)?$``
@@ -78,60 +69,16 @@ def canonicalize_money(s: str) -> str:
     return format_money(parse_money(s))
 
 
-# ---- metered settlement ----------------------------------------------------
-# Port of the sdk/go oracle (helpers/settlement.go); fora.proto Pricing states the
-# rule. A PER_UNIT price is charged per unit consumed. The estimate E, the rate R
-# and the tolerance T in basis points (1000 when absent) on the offer's own pricing
-# fix what a metered purchase can cost: the agent accepts E x R at purchase, and the
-# usage report settles the consumed quantity C at min(C, Q) x R, where the ceiling
-# is Q = E x (10000 + T) / 10000. The quantity above Q is held for dispute, never
-# charged automatically.
-#
-# Every value is exact. The arithmetic runs in a local context whose precision far
-# exceeds any input the wire admits (rates are capped at 32 characters, quantities
-# at int64), and with Inexact trapped, so a step that would round raises instead of
-# returning a rounded figure. The process-wide context — 28 digits by default — is
-# never consulted.
-
-DEFAULT_ESTIMATE_TOLERANCE_BPS = 1000
-"""The tolerance a metered price settles within when it states none: 10%."""
-
-MAX_ESTIMATE_TOLERANCE_BPS = 10000
-"""The largest tolerance the wire accepts: a ceiling of twice the estimate."""
+# ---- metered offers ---------------------------------------------------------
+# Port of the sdk/go oracle (helpers/metered.go); fora.proto Pricing states the
+# rule. A PER_UNIT price is metered: the publisher states the rate and the unit,
+# and the offer may also state an estimate. A metered purchase charges estimate x
+# rate, or one unit's rate without an estimate, and the charge is final.
 
 _PRICING_MODEL_PER_UNIT = "PRICING_MODEL_PER_UNIT"
-_INT64_MAX = 2**63 - 1
 _WIRE_INT_RE = re.compile(r"^-?[0-9]+$")
 
 
-@dataclass(frozen=True)
-class MeteredSettlement:
-    """What a metered purchase settles to, every value a canonical decimal string.
-
-    Quantities are in the price's unit and may be fractional (``ceiling_quantity``
-    and what derives from it); amounts are in the price's currency. When the price
-    states no estimate there is no ceiling: ``accepted_amount``, ``ceiling_quantity``
-    and ``ceiling_amount`` are ``None``, the whole consumed quantity is charged, and
-    nothing is held.
-    """
-
-    accepted_amount: str | None
-    """E x R: what the agent accepted at purchase. ``None`` without an estimate."""
-    ceiling_quantity: str | None
-    """Q = E x (10000 + T) / 10000. ``None`` without an estimate."""
-    ceiling_amount: str | None
-    """Q x R: the most the purchase is charged without a dispute. ``None`` without an
-    estimate."""
-    charged_quantity: str
-    """min(C, Q), or C without an estimate."""
-    charged_amount: str
-    """charged_quantity x R: what the report settles to."""
-    held_quantity: str
-    """max(0, C - Q): the quantity held for dispute. Always 0 without an estimate."""
-    held_amount: str
-    """held_quantity x R: held for dispute, never charged automatically."""
-
-
 def _wire_int(v: Any) -> int | None:
     """An int32/int64 proto-JSON value: a JSON integer, or the decimal string form
     proto-JSON also accepts. ``bool`` is not an integer here, though Python says so."""
@@ -216,102 +163,3 @@ def check_metered_estimate(offer: Mapping[str, Any]) -> None:
     pricing = offer.get("pricing")
     if isinstance(pricing, Mapping):
         _stated_estimate(pricing)
-
-
-def estimate_tolerance_bps(pricing: Mapping[str, Any]) -> int:
-    """The tolerance ``pricing`` settles within: its ``estimate_tolerance_bps`` when
-    present (an explicit 0 included), else the 1000 default. Bounds are not checked
-    here; :func:`settle_metered_usage` and :func:`metered_settlement_cap` do."""
-    raw = pricing.get("estimate_tolerance_bps") if isinstance(pricing, Mapping) else None
-    if raw is None:
-        return DEFAULT_ESTIMATE_TOLERANCE_BPS
-    bps = _wire_int(raw)
-    if bps is None:
-        msg = f"money: estimate_tolerance_bps {raw!r} is not an integer"
-        raise ValueError(msg)
-    return bps
-
-
-def _exact() -> Context:
-    return Context(prec=200, traps=[Inexact, InvalidOperation, Overflow, DivisionByZero])
-
-
-def _metered_terms(pricing: Mapping[str, Any]) -> tuple[Decimal | None, Decimal, Decimal | None]:
-    """Check ``pricing`` is a metered price that can settle; return (E, R, Q).
-
-    E and Q are ``None`` when the price states no estimate."""
-    if not isinstance(pricing, Mapping):
-        msg = "money: pricing is not an object"
-        raise ValueError(msg)
-    if _model(pricing) != _PRICING_MODEL_PER_UNIT:
-        msg = f"money: pricing is not metered (PER_UNIT): model is {_model(pricing)!r}"
-        raise ValueError(msg)
-    estimate = _stated_estimate(pricing)
-    rate_raw = pricing.get("rate", "")
-    rate = parse_money(rate_raw if isinstance(rate_raw, str) else "")
-    bps = estimate_tolerance_bps(pricing)
-    if not 0 <= bps <= MAX_ESTIMATE_TOLERANCE_BPS:
-        msg = f"money: estimate_tolerance_bps {bps} is outside 0..{MAX_ESTIMATE_TOLERANCE_BPS}"
-        raise ValueError(msg)
-    if estimate is None:
-        return None, rate, None
-    with localcontext(_exact()):
-        e = Decimal(estimate)
-        ceiling = (e * Decimal(10000 + bps)).scaleb(-4)
-    return e, rate, ceiling
-
-
-def metered_settlement_cap(pricing: Mapping[str, Any]) -> str | None:
-    """Q x R for a metered price: the most a purchase under it is charged without a
-    dispute.
-
-    ``None`` when the price states no estimate: it then has no ceiling, and nothing in
-    it bounds the charge. Raises ``ValueError`` for a price that is not PER_UNIT,
-    states an estimate that is not positive, carries no valid rate, or states a
-    tolerance outside 0..10000.
-    """
-    _, rate, ceiling = _metered_terms(pricing)
-    if ceiling is None:
-        return None
-    with localcontext(_exact()):
-        return format_money(ceiling * rate)
-
-
-def settle_metered_usage(pricing: Mapping[str, Any], consumed_quantity: int) -> MeteredSettlement:
-    """Settle a usage report of ``consumed_quantity`` against a metered price — the
-    offer's own pricing, which is the copy settlement reads. Without an estimate the
-    whole quantity is charged at the rate and nothing is held.
-
-    Raises ``ValueError`` for what :func:`metered_settlement_cap` refuses, and for a
-    quantity that is negative or not an integer.
-    """
-    estimate, rate, ceiling = _metered_terms(pricing)
-    if isinstance(consumed_quantity, bool) or not isinstance(consumed_quantity, int):
-        msg = f"money: consumed quantity {consumed_quantity!r} is not an integer"
-        raise ValueError(msg)
-    if not 0 <= consumed_quantity <= _INT64_MAX:
-        msg = f"money: consumed quantity {consumed_quantity} is outside 0..{_INT64_MAX}"
-        raise ValueError(msg)
-    with localcontext(_exact()):
-        consumed = Decimal(consumed_quantity)
-        if estimate is None or ceiling is None:
-            return MeteredSettlement(
-                accepted_amount=None,
-                ceiling_quantity=None,
-                ceiling_amount=None,
-                charged_quantity=format_money(consumed),
-                charged_amount=format_money(consumed * rate),
-                held_quantity="0",
-                held_amount="0",
-            )
-        charged = min(consumed, ceiling)
-        held = max(Decimal(0), consumed - ceiling)
-        return MeteredSettlement(
-            accepted_amount=format_money(estimate * rate),
-            ceiling_quantity=format_money(ceiling),
-            ceiling_amount=format_money(ceiling * rate),
-            charged_quantity=format_money(charged),
-            charged_amount=format_money(charged * rate),
-            held_quantity=format_money(held),
-            held_amount=format_money(held * rate),
-        )
diff --git a/sdk/python/tests/test_core_offer_verify_parity.py b/sdk/python/tests/test_core_offer_verify_parity.py
index ba81bbe8..9a6c4068 100644
--- a/sdk/python/tests/test_core_offer_verify_parity.py
+++ b/sdk/python/tests/test_core_offer_verify_parity.py
@@ -70,7 +70,7 @@
 # rejects it although its signature and expiry are good. Pinned so a regenerated corpus
 # that drops these fails here rather than letting a port drift on either side.
 _REQUIRED_METERED = {
-    "metered_with_estimate_and_tolerance",
+    "metered_with_estimate",
     "metered_without_estimate",
     "metered_zero_estimate",
     "metered_term_estimate_only",
diff --git a/sdk/python/tests/test_crossfield_parity.py b/sdk/python/tests/test_crossfield_parity.py
index 2d991b3b..068f3bbc 100644
--- a/sdk/python/tests/test_crossfield_parity.py
+++ b/sdk/python/tests/test_crossfield_parity.py
@@ -124,18 +124,6 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
         "message": "Pricing",
         "json": {"model": "PRICING_MODEL_FREE", "rate": "0"},
     },
-    {
-        # Pricing.estimate_tolerance.requires_per_unit: a tolerance on a PER_UNIT
-        # price satisfies it, an explicit 0 included.
-        "name": "Pricing PER_UNIT with zero tolerance",
-        "message": "Pricing",
-        "json": {
-            "model": "PRICING_MODEL_PER_UNIT",
-            "rate": "0.00002",
-            "unit": "tokens",
-            "estimate_tolerance_bps": 0,
-        },
-    },
     {
         # Offer.metered.estimate_positive: a metered offer with a positive estimate on
         # its own pricing satisfies it. Offer.terms.pricing_unset: its term carries no
@@ -187,7 +175,7 @@ def test_crossfield_mutant_rejected_with_matching_rule_ids(case: dict[str, objec
     },
     {
         # Offer.metered.estimate_positive: a metered offer may state no estimate at
-        # all; it then settles at consumed x rate with no ceiling.
+        # all; the purchase then charges one unit.
         "name": "Offer metered without estimate",
         "message": "Offer",
         "json": {
diff --git a/sdk/python/tests/test_metered_settlement_parity.py b/sdk/python/tests/test_metered_settlement_parity.py
deleted file mode 100644
index a7690d7b..00000000
--- a/sdk/python/tests/test_metered_settlement_parity.py
+++ /dev/null
@@ -1,157 +0,0 @@
-"""Metered settlement parity against the Go oracle.
-
-Mirror of the sdk/ts sibling (sdk/ts/tests/metered-settlement.parity.test.ts). The
-settlement of a metered purchase is arithmetic the agent and the Exchange must agree
-on to the last digit: the agent derives what it owes from the signed offer and its
-own report, and no amount travels on the wire to reconcile the two. Every row of
-sdk/go/helpers/testdata/metered-settlement-vectors.json is replayed through
-``settle_metered_usage`` and ``metered_settlement_cap``. Two rows need 42
-significant digits, past the 28 of Python's default decimal context, so a port that
-leaned on that context would round and fail them.
-"""
-
-from __future__ import annotations
-
-import dataclasses
-from decimal import getcontext
-
-import pytest
-
-from conftest import GO_TESTDATA, load_json
-from fora_sdk import (
-    check_offer_terms_unpriced,
-    DEFAULT_ESTIMATE_TOLERANCE_BPS,
-    check_metered_estimate,
-    estimate_tolerance_bps,
-    is_metered_offer,
-    metered_settlement_cap,
-    settle_metered_usage,
-)
-
-_DOC = load_json(GO_TESTDATA / "metered-settlement-vectors.json")
-_VECTORS = _DOC["vectors"]
-
-
-def test_corpus_shape() -> None:
-    assert _VECTORS, "metered-settlement corpus is empty — the replay below would be vacuous"
-    assert any(v["error"] for v in _VECTORS)
-    assert any(not v["error"] for v in _VECTORS)
-
-
-def test_default_tolerance_matches_oracle() -> None:
-    assert _DOC["default_estimate_tolerance_bps"] == DEFAULT_ESTIMATE_TOLERANCE_BPS
-
-
-@pytest.mark.parametrize("vec", _VECTORS, ids=[v["name"] for v in _VECTORS])
-def test_settlement_matches_oracle(vec: dict[str, object]) -> None:
-    pricing = vec["pricing"]
-    consumed = vec["consumed_quantity"]
-    assert isinstance(pricing, dict)
-    assert isinstance(consumed, int)
-    if vec["error"]:
-        with pytest.raises(ValueError):
-            settle_metered_usage(pricing, consumed)
-        if vec["cap_error"]:
-            with pytest.raises(ValueError):
-                metered_settlement_cap(pricing)
-        else:
-            metered_settlement_cap(pricing)
-        return
-    got = dataclasses.asdict(settle_metered_usage(pricing, consumed))
-    assert got == vec["expected"]
-    expected = vec["expected"]
-    assert isinstance(expected, dict)
-    # A row without an estimate records a null ceiling, and the cap is then None.
-    assert metered_settlement_cap(pricing) == expected["ceiling_amount"]
-
-
-def test_corpus_covers_both_shapes() -> None:
-    """The replay settles a price with an estimate and one without: a corpus that
-    lost either would leave that shape of settlement untested."""
-    settled = [v for v in _VECTORS if not v["error"]]
-    assert any(v["expected"]["ceiling_amount"] is None for v in settled)
-    assert any(v["expected"]["ceiling_amount"] is not None for v in settled)
-
-
-def test_process_context_untouched() -> None:
-    """The exact rows run in a local context; the caller's context is left as found."""
-    before = getcontext().prec
-    for vec in _VECTORS:
-        if not vec["error"]:
-            settle_metered_usage(vec["pricing"], vec["consumed_quantity"])
-    assert getcontext().prec == before
-
-
-def test_tolerance_default_and_explicit_zero() -> None:
-    assert estimate_tolerance_bps({}) == 1000
-    assert estimate_tolerance_bps({"estimate_tolerance_bps": 0}) == 0
-    assert estimate_tolerance_bps({"estimate_tolerance_bps": "250"}) == 250
-
-
-def test_consumed_must_be_an_integer() -> None:
-    pricing = {
-        "model": "PRICING_MODEL_PER_UNIT",
-        "rate": "0.00002",
-        "unit": "tokens",
-        "estimated_quantity": 2500,
-    }
-    for bad in (True, 1.5, "10"):
-        with pytest.raises(ValueError):
-            settle_metered_usage(pricing, bad)  # type: ignore[arg-type]
-
-
-_PER_UNIT = {"model": "PRICING_MODEL_PER_UNIT"}
-_FLAT = {"model": "PRICING_MODEL_FLAT"}
-
-
-@pytest.mark.parametrize(
-    ("offer", "metered", "refused"),
-    [
-        ({"pricing": {**_PER_UNIT, "estimated_quantity": 1}}, True, False),
-        ({"pricing": {**_PER_UNIT, "estimated_quantity": "7"}}, True, False),
-        # The estimate is optional; one that is stated is positive.
-        ({"pricing": dict(_PER_UNIT)}, True, False),
-        ({"pricing": {**_PER_UNIT, "estimated_quantity": None}}, True, False),
-        ({"pricing": {**_PER_UNIT, "estimated_quantity": 0}}, True, True),
-        ({"pricing": {**_PER_UNIT, "estimated_quantity": -3}}, True, True),
-        ({"pricing": {**_PER_UNIT, "estimated_quantity": True}}, True, True),
-        # A priced term no longer makes an offer metered: Offer.pricing is the one
-        # price, and a priced term is refused by check_offer_terms_unpriced instead.
-        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, False, False),
-        ({"pricing": dict(_FLAT)}, False, False),
-        ({}, False, False),
-    ],
-)
-def test_metered_estimate_check(offer: dict[str, object], metered: bool, refused: bool) -> None:
-    assert is_metered_offer(offer) is metered
-    if refused:
-        with pytest.raises(ValueError):
-            check_metered_estimate(offer)
-    else:
-        check_metered_estimate(offer)
-
-
-@pytest.mark.parametrize(
-    ("offer", "refused"),
-    [
-        ({"pricing": dict(_FLAT), "terms": [{"semantics": "TERM_SEMANTICS_ENUMERATED"}]}, False),
-        ({"pricing": dict(_FLAT)}, False),
-        ({}, False),
-        # A term repeating the offer's own price is still a second copy.
-        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_FLAT)}]}, True),
-        ({"pricing": dict(_FLAT), "terms": [{"pricing": dict(_PER_UNIT)}]}, True),
-        # An empty pricing object is pricing present, as has() reads it.
-        ({"pricing": dict(_FLAT), "terms": [{"pricing": {}}]}, True),
-    ],
-)
-def test_offer_terms_unpriced_check(offer: dict[str, object], refused: bool) -> None:
-    if refused:
-        with pytest.raises(ValueError, match="Offer.pricing"):
-            check_offer_terms_unpriced(offer)
-    else:
-        check_offer_terms_unpriced(offer)
-
-
-def test_offer_terms_unpriced_refuses_a_non_object() -> None:
-    with pytest.raises(ValueError):
-        check_offer_terms_unpriced("offer")  # type: ignore[arg-type]

From e1f0614ad67ed8d2277f9235c27d0adf384e66aa Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 22:43:04 -0400
Subject: [PATCH 090/164] Drop metered settlement from the TypeScript SDK

meteredSettlementCap, settleMeteredUsage, MeteredSettlement,
estimateToleranceBps and the two tolerance constants leave the money
module, with the BigInt decimal arithmetic only they used. The
cross-field layer drops the tolerance rule on Pricing.
isMeteredOffer, checkMeteredEstimate and checkOfferTermsUnpriced stay.

The settlement parity suite becomes metered-offer.parity.test.ts with
the estimate and priced-term checks only, the cross-field suite drops
the tolerance instance, and the offer-verify pins name
metered_with_estimate. The README describes the final purchase
charge.
---
 sdk/ts/README.md                              |  15 +-
 sdk/ts/src/crossfield.ts                      |   7 -
 sdk/ts/src/money.ts                           | 221 +-----------------
 sdk/ts/tests/core-offer-verify.parity.test.ts |   2 +-
 sdk/ts/tests/crossfield.parity.test.ts        |  14 +-
 .../tests/metered-settlement.parity.test.ts   | 160 -------------
 6 files changed, 12 insertions(+), 407 deletions(-)
 delete mode 100644 sdk/ts/tests/metered-settlement.parity.test.ts

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index fb224df9..ac069bee 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -72,16 +72,11 @@ URL, bytes and media type; the license reader also verifies the bytes against
 publisher manifest lists (`listed`, `unlisted` or `no_exchange`; the manifest wins). The
 header names are `ContentRulesHeader` and `ExchangeHeader` in `@fora-protocol/sdk/wire`.
 
-`@fora-protocol/sdk/money` settles a metered purchase. A `PER_UNIT` offer may carry an
-estimate. Without one there is no ceiling, and its usage report settles at consumed ×
-rate. With one, the report settles within the price's tolerance (10% unless the term
-states one); the excess is held for dispute, never charged.
-`meteredSettlementCap(offer.pricing)` is the most a purchase is charged without a
-dispute, or `undefined` when the price states no estimate, and
-`settleMeteredUsage(offer.pricing, consumed)` returns the accepted, ceiling, charged and
-held amounts, exact on BigInt (the accepted and ceiling amounts are `undefined` without
-an estimate). `checkMeteredEstimate(offer)` throws on a metered offer whose stated
-estimate is not positive, and the offer `Verifier` rejects such an offer.
+`@fora-protocol/sdk/money` holds the metered-offer checks. A `PER_UNIT` offer may carry an
+estimate. The purchase charges estimate × rate, or one unit's rate without an estimate,
+and the charge is final. `isMeteredOffer(offer)` says whether an offer is metered, and
+`checkMeteredEstimate(offer)` throws on a metered offer whose stated estimate is not
+positive; the offer `Verifier` rejects such an offer.
 An offer's price is `offer.pricing`, and the term it sells carries none:
 `checkOfferTermsUnpriced(offer)` throws on a priced term, `signOffer` refuses to sign such
 an offer, and the `Verifier` rejects one.
diff --git a/sdk/ts/src/crossfield.ts b/sdk/ts/src/crossfield.ts
index e6285825..1af2006e 100644
--- a/sdk/ts/src/crossfield.ts
+++ b/sdk/ts/src/crossfield.ts
@@ -142,9 +142,6 @@ function obligationRules(o: Obj): string[] {
  * Pricing rules:
  *  - per_unit.requires_unit: `this.model != PER_UNIT || this.unit != ''`
  *  - free.zero_rate: `this.model != FREE || this.rate == '' || this.rate.matches('^0+([.]0+)?$')`
- *  - estimate_tolerance.requires_per_unit:
- *    `!has(this.estimate_tolerance_bps) || this.model == PER_UNIT`. The field is
- *    proto3 optional, so a present 0 counts as set, as `has()` does.
  */
 function pricingRules(o: Obj): string[] {
   const out: string[] = [];
@@ -158,10 +155,6 @@ function pricingRules(o: Obj): string[] {
       out.push("pricing.free.zero_rate");
     }
   }
-  const tolerance = field(o, "estimate_tolerance_bps");
-  if (tolerance !== undefined && tolerance !== null && model !== PRICING_MODEL_PER_UNIT) {
-    out.push("pricing.estimate_tolerance.requires_per_unit");
-  }
   return out;
 }
 
diff --git a/sdk/ts/src/money.ts b/sdk/ts/src/money.ts
index c62e950f..260aa842 100644
--- a/sdk/ts/src/money.ts
+++ b/sdk/ts/src/money.ts
@@ -66,103 +66,13 @@ export function canonicalizeMoney(s: string): string {
 	return formatMoney(parseMoney(s));
 }
 
-// ---- metered settlement ----------------------------------------------------
-// Port of the sdk/go oracle (helpers/settlement.go); fora.proto Pricing states the
-// rule. A PER_UNIT price is charged per unit consumed. The estimate E, the rate R
-// and the tolerance T in basis points (1000 when absent) on the offer's own pricing
-// fix what a metered purchase can cost: the agent accepts E x R at purchase, and the
-// usage report settles the consumed quantity C at min(C, Q) x R, where the ceiling
-// is Q = E x (10000 + T) / 10000. The quantity above Q is held for dispute, never
-// charged automatically.
-//
-// TS has no decimal type, so the arithmetic runs on BigInt: a value is an integer
-// count of units at a decimal scale. Multiplication adds scales, the division by
-// 10000 adds four to the scale, and comparison and subtraction align the scales
-// first — no step can round, whatever the size of the inputs.
-
-/** The tolerance a metered price settles within when it states none: 10%. */
-export const DEFAULT_ESTIMATE_TOLERANCE_BPS = 1000;
-
-/** The largest tolerance the wire accepts: a ceiling of twice the estimate. */
-export const MAX_ESTIMATE_TOLERANCE_BPS = 10000;
+// ---- metered offers ---------------------------------------------------------
+// Port of the sdk/go oracle (helpers/metered.go); fora.proto Pricing states the
+// rule. A PER_UNIT price is metered: the publisher states the rate and the unit,
+// and the offer may also state an estimate. A metered purchase charges estimate x
+// rate, or one unit's rate without an estimate, and the charge is final.
 
 const PRICING_MODEL_PER_UNIT = "PRICING_MODEL_PER_UNIT";
-const INT64_MAX = 2n ** 63n - 1n;
-
-/**
- * What a metered purchase settles to, every value a canonical decimal string.
- * Quantities are in the price's unit and may be fractional (`ceilingQuantity` and
- * what derives from it); amounts are in the price's currency. When the price
- * states no estimate there is no ceiling: `acceptedAmount`, `ceilingQuantity` and
- * `ceilingAmount` are undefined, the whole consumed quantity is charged, and
- * nothing is held.
- */
-export interface MeteredSettlement {
-	/** E x R: what the agent accepted at purchase. Undefined without an estimate. */
-	readonly acceptedAmount: string | undefined;
-	/** Q = E x (10000 + T) / 10000. Undefined without an estimate. */
-	readonly ceilingQuantity: string | undefined;
-	/**
-	 * Q x R: the most the purchase is charged without a dispute. Undefined without
-	 * an estimate.
-	 */
-	readonly ceilingAmount: string | undefined;
-	/** min(C, Q), or C without an estimate. */
-	readonly chargedQuantity: string;
-	/** chargedQuantity x R: what the report settles to. */
-	readonly chargedAmount: string;
-	/** max(0, C - Q): the quantity held for dispute. Always 0 without an estimate. */
-	readonly heldQuantity: string;
-	/** heldQuantity x R: held for dispute, never charged automatically. */
-	readonly heldAmount: string;
-}
-
-/** An exact non-negative decimal: units / 10^scale. */
-interface Dec {
-	readonly units: bigint;
-	readonly scale: number;
-}
-
-function decOf(s: string): Dec {
-	const dot = s.indexOf(".");
-	if (dot === -1) return { units: BigInt(s), scale: 0 };
-	return {
-		units: BigInt(s.slice(0, dot) + s.slice(dot + 1)),
-		scale: s.length - dot - 1,
-	};
-}
-
-function decMul(a: Dec, b: Dec): Dec {
-	return { units: a.units * b.units, scale: a.scale + b.scale };
-}
-
-function decAligned(a: Dec, b: Dec): [bigint, bigint, number] {
-	const scale = Math.max(a.scale, b.scale);
-	return [
-		a.units * 10n ** BigInt(scale - a.scale),
-		b.units * 10n ** BigInt(scale - b.scale),
-		scale,
-	];
-}
-
-function decMin(a: Dec, b: Dec): Dec {
-	const [x, y] = decAligned(a, b);
-	return x <= y ? a : b;
-}
-
-/** max(0, a - b). */
-function decExcess(a: Dec, b: Dec): Dec {
-	const [x, y, scale] = decAligned(a, b);
-	return x > y ? { units: x - y, scale } : { units: 0n, scale: 0 };
-}
-
-function decFormat(d: Dec): string {
-	const digits = d.units.toString().padStart(d.scale + 1, "0");
-	const cut = digits.length - d.scale;
-	return formatMoney(
-		d.scale === 0 ? digits : `${digits.slice(0, cut)}.${digits.slice(cut)}`,
-	);
-}
 
 /**
  * An int32/int64 proto-JSON value: a JSON integer, or the decimal string form
@@ -252,124 +162,3 @@ export function checkMeteredEstimate(offer: Record<string, unknown>): void {
 		statedEstimate(pricing as Record<string, unknown>);
 	}
 }
-
-/**
- * estimateToleranceBps returns the tolerance `pricing` settles within: its
- * `estimate_tolerance_bps` when present (an explicit 0 included), else the 1000
- * default. Bounds are not checked here; settleMeteredUsage and
- * meteredSettlementCap do.
- */
-export function estimateToleranceBps(pricing: Record<string, unknown>): number {
-	const raw = pricing.estimate_tolerance_bps;
-	if (raw === undefined || raw === null) return DEFAULT_ESTIMATE_TOLERANCE_BPS;
-	const bps = wireInt(raw);
-	if (bps === undefined) {
-		throw new Error(
-			`money: estimate_tolerance_bps ${JSON.stringify(raw)} is not an integer`,
-		);
-	}
-	return Number(bps);
-}
-
-/**
- * Check `pricing` is a metered price that can settle; return E, R and Q. E and Q
- * are undefined when the price states no estimate.
- */
-function meteredTerms(pricing: Record<string, unknown>): {
-	estimate: Dec | undefined;
-	rate: Dec;
-	ceiling: Dec | undefined;
-} {
-	if (typeof pricing !== "object" || pricing === null) {
-		throw new Error("money: pricing is not an object");
-	}
-	const model = modelOf(pricing);
-	if (model !== PRICING_MODEL_PER_UNIT) {
-		throw new Error(
-			`money: pricing is not metered (PER_UNIT): model is ${JSON.stringify(model)}`,
-		);
-	}
-	const estimate = statedEstimate(pricing);
-	const rate = parseMoney(typeof pricing.rate === "string" ? pricing.rate : "");
-	const bps = estimateToleranceBps(pricing);
-	if (bps < 0 || bps > MAX_ESTIMATE_TOLERANCE_BPS) {
-		throw new Error(
-			`money: estimate_tolerance_bps ${bps} is outside 0..${MAX_ESTIMATE_TOLERANCE_BPS}`,
-		);
-	}
-	if (estimate === undefined) {
-		return { estimate: undefined, rate: decOf(rate), ceiling: undefined };
-	}
-	return {
-		estimate: { units: estimate, scale: 0 },
-		rate: decOf(rate),
-		ceiling: { units: estimate * BigInt(10000 + bps), scale: 4 },
-	};
-}
-
-/**
- * meteredSettlementCap returns Q x R for a metered price: the most a purchase
- * under it is charged without a dispute. Undefined when the price states no estimate: it then has no
- * ceiling, and nothing in it bounds the charge. Throws for a price that is not
- * PER_UNIT, states an estimate that is not positive, carries no valid rate, or
- * states a tolerance outside 0..10000.
- */
-export function meteredSettlementCap(
-	pricing: Record<string, unknown>,
-): string | undefined {
-	const { rate, ceiling } = meteredTerms(pricing);
-	if (ceiling === undefined) return undefined;
-	return decFormat(decMul(ceiling, rate));
-}
-
-/**
- * settleMeteredUsage settles a usage report of `consumedQuantity` against a
- * metered price — the offer's own pricing, which is the copy settlement reads.
- * Without an estimate the whole quantity is charged at the rate and nothing is
- * held. Throws for what meteredSettlementCap refuses, and for a quantity that is
- * negative, not an integer, or above the int64 range.
- */
-export function settleMeteredUsage(
-	pricing: Record<string, unknown>,
-	consumedQuantity: number | bigint,
-): MeteredSettlement {
-	const { estimate, rate, ceiling } = meteredTerms(pricing);
-	let consumedUnits: bigint;
-	if (typeof consumedQuantity === "bigint") {
-		consumedUnits = consumedQuantity;
-	} else if (Number.isSafeInteger(consumedQuantity)) {
-		consumedUnits = BigInt(consumedQuantity);
-	} else {
-		throw new Error(
-			`money: consumed quantity ${String(consumedQuantity)} is not an integer`,
-		);
-	}
-	if (consumedUnits < 0n || consumedUnits > INT64_MAX) {
-		throw new Error(
-			`money: consumed quantity ${consumedUnits} is outside 0..${INT64_MAX}`,
-		);
-	}
-	const consumed: Dec = { units: consumedUnits, scale: 0 };
-	if (estimate === undefined || ceiling === undefined) {
-		return {
-			acceptedAmount: undefined,
-			ceilingQuantity: undefined,
-			ceilingAmount: undefined,
-			chargedQuantity: decFormat(consumed),
-			chargedAmount: decFormat(decMul(consumed, rate)),
-			heldQuantity: "0",
-			heldAmount: "0",
-		};
-	}
-	const charged = decMin(consumed, ceiling);
-	const held = decExcess(consumed, ceiling);
-	return {
-		acceptedAmount: decFormat(decMul(estimate, rate)),
-		ceilingQuantity: decFormat(ceiling),
-		ceilingAmount: decFormat(decMul(ceiling, rate)),
-		chargedQuantity: decFormat(charged),
-		chargedAmount: decFormat(decMul(charged, rate)),
-		heldQuantity: decFormat(held),
-		heldAmount: decFormat(decMul(held, rate)),
-	};
-}
diff --git a/sdk/ts/tests/core-offer-verify.parity.test.ts b/sdk/ts/tests/core-offer-verify.parity.test.ts
index dcf45f6c..002c4281 100644
--- a/sdk/ts/tests/core-offer-verify.parity.test.ts
+++ b/sdk/ts/tests/core-offer-verify.parity.test.ts
@@ -97,7 +97,7 @@ describe("sdk/ts/core Verifier offer-verify matches the shared JCS oracle matrix
     // before a port can drift on either side.
     const names = new Set(vectors.vectors.map((v) => v.name));
     for (const required of [
-      "metered_with_estimate_and_tolerance",
+      "metered_with_estimate",
       "metered_without_estimate",
       "metered_zero_estimate",
       "metered_term_estimate_only",
diff --git a/sdk/ts/tests/crossfield.parity.test.ts b/sdk/ts/tests/crossfield.parity.test.ts
index be92c6e0..eb950213 100644
--- a/sdk/ts/tests/crossfield.parity.test.ts
+++ b/sdk/ts/tests/crossfield.parity.test.ts
@@ -142,18 +142,6 @@ const validInstances: { name: string; message: string; json: unknown }[] = [
     message: "Pricing",
     json: { model: "PRICING_MODEL_FREE", rate: "0" },
   },
-  {
-    // Pricing.estimate_tolerance.requires_per_unit: a tolerance on a PER_UNIT price
-    // satisfies it, an explicit 0 included.
-    name: "Pricing PER_UNIT with zero tolerance",
-    message: "Pricing",
-    json: {
-      model: "PRICING_MODEL_PER_UNIT",
-      rate: "0.00002",
-      unit: "tokens",
-      estimate_tolerance_bps: 0,
-    },
-  },
   {
     // Offer.metered.estimate_positive: a metered offer with a positive estimate on its
     // own pricing satisfies it, even when the pushed term carries none.
@@ -201,7 +189,7 @@ const validInstances: { name: string; message: string; json: unknown }[] = [
   },
   {
     // Offer.metered.estimate_positive: a metered offer may state no estimate at all;
-    // it then settles at consumed x rate with no ceiling.
+    // the purchase then charges one unit.
     name: "Offer metered without estimate",
     message: "Offer",
     json: {
diff --git a/sdk/ts/tests/metered-settlement.parity.test.ts b/sdk/ts/tests/metered-settlement.parity.test.ts
deleted file mode 100644
index b1d21379..00000000
--- a/sdk/ts/tests/metered-settlement.parity.test.ts
+++ /dev/null
@@ -1,160 +0,0 @@
-// Metered settlement parity (TypeScript side) against the Go oracle.
-//
-// Mirror of the sdk/python sibling (sdk/python/tests/test_metered_settlement_parity.py).
-// The settlement of a metered purchase is arithmetic the agent and the Exchange must
-// agree on to the last digit: the agent derives what it owes from the signed offer and
-// its own report, and no amount travels on the wire to reconcile the two. Every row of
-// sdk/go/helpers/testdata/metered-settlement-vectors.json is replayed through
-// settleMeteredUsage and meteredSettlementCap. Two rows need 42 significant digits, far
-// past what a JavaScript number holds, so a port that went through floating point
-// would fail them.
-import { describe, expect, it } from "vitest";
-import {
-	DEFAULT_ESTIMATE_TOLERANCE_BPS,
-	checkMeteredEstimate,
-	checkOfferTermsUnpriced,
-	estimateToleranceBps,
-	isMeteredOffer,
-	meteredSettlementCap,
-	settleMeteredUsage,
-} from "../src/money.ts";
-import vectorsFile from "../../go/helpers/testdata/metered-settlement-vectors.json";
-
-// A row whose price states no estimate records the accepted amount and the ceiling
-// as null; the TS faces return undefined for them.
-type Expected = {
-	accepted_amount: string | null;
-	ceiling_quantity: string | null;
-	ceiling_amount: string | null;
-	charged_quantity: string;
-	charged_amount: string;
-	held_quantity: string;
-	held_amount: string;
-};
-type SettlementVector = {
-	name: string;
-	pricing: Record<string, unknown>;
-	consumed_quantity: number;
-	error: boolean;
-	cap_error: boolean;
-	expected?: Expected;
-};
-type SettlementVectorsFile = {
-	default_estimate_tolerance_bps: number;
-	vectors: SettlementVector[];
-};
-
-const doc = vectorsFile as SettlementVectorsFile;
-
-describe("sdk/ts metered settlement matches the sdk/go oracle vectors", () => {
-	it("corpus carries both settleable and refused rows", () => {
-		expect(doc.vectors.some((v) => v.error)).toBe(true);
-		expect(doc.vectors.some((v) => !v.error)).toBe(true);
-	});
-
-	it("default tolerance matches the oracle", () => {
-		expect(DEFAULT_ESTIMATE_TOLERANCE_BPS).toBe(
-			doc.default_estimate_tolerance_bps,
-		);
-	});
-
-	for (const v of doc.vectors) {
-		it(v.name, () => {
-			if (v.error) {
-				expect(() => settleMeteredUsage(v.pricing, v.consumed_quantity)).toThrow();
-				if (v.cap_error) {
-					expect(() => meteredSettlementCap(v.pricing)).toThrow();
-				} else {
-					expect(() => meteredSettlementCap(v.pricing)).not.toThrow();
-				}
-				return;
-			}
-			const want = v.expected as Expected;
-			const got = settleMeteredUsage(v.pricing, v.consumed_quantity);
-			expect({
-				accepted_amount: got.acceptedAmount ?? null,
-				ceiling_quantity: got.ceilingQuantity ?? null,
-				ceiling_amount: got.ceilingAmount ?? null,
-				charged_quantity: got.chargedQuantity,
-				charged_amount: got.chargedAmount,
-				held_quantity: got.heldQuantity,
-				held_amount: got.heldAmount,
-			}).toEqual(want);
-			expect(meteredSettlementCap(v.pricing) ?? null).toBe(want.ceiling_amount);
-		});
-	}
-
-	it("corpus settles a price with an estimate and one without", () => {
-		const settled = doc.vectors.filter((v) => !v.error);
-		expect(settled.some((v) => v.expected?.ceiling_amount === null)).toBe(true);
-		expect(settled.some((v) => typeof v.expected?.ceiling_amount === "string")).toBe(true);
-	});
-});
-
-describe("sdk/ts metered helpers", () => {
-	const pricing = {
-		model: "PRICING_MODEL_PER_UNIT",
-		rate: "0.00002",
-		unit: "tokens",
-		estimated_quantity: 2500,
-	};
-
-	it("applies the default tolerance and keeps an explicit zero", () => {
-		expect(estimateToleranceBps({})).toBe(1000);
-		expect(estimateToleranceBps({ estimate_tolerance_bps: 0 })).toBe(0);
-		expect(estimateToleranceBps({ estimate_tolerance_bps: "250" })).toBe(250);
-	});
-
-	it("accepts a bigint quantity and refuses a fractional or unsafe one", () => {
-		expect(settleMeteredUsage(pricing, 3000n).heldQuantity).toBe("250");
-		expect(() => settleMeteredUsage(pricing, 1.5)).toThrow();
-		expect(() => settleMeteredUsage(pricing, Number.MAX_SAFE_INTEGER + 2)).toThrow();
-		expect(() => settleMeteredUsage(pricing, 2n ** 63n)).toThrow();
-	});
-
-	const perUnit = { model: "PRICING_MODEL_PER_UNIT" };
-	const flat = { model: "PRICING_MODEL_FLAT" };
-	const cases: [string, Record<string, unknown>, boolean, boolean][] = [
-		["estimated", { pricing: { ...perUnit, estimated_quantity: 1 } }, true, false],
-		["string estimate", { pricing: { ...perUnit, estimated_quantity: "7" } }, true, false],
-		// The estimate is optional; one that is stated is positive.
-		["no estimate", { pricing: { ...perUnit } }, true, false],
-		["null estimate is absent", { pricing: { ...perUnit, estimated_quantity: null } }, true, false],
-		["zero estimate", { pricing: { ...perUnit, estimated_quantity: 0 } }, true, true],
-		["negative estimate", { pricing: { ...perUnit, estimated_quantity: -3 } }, true, true],
-		["fractional estimate", { pricing: { ...perUnit, estimated_quantity: 1.5 } }, true, true],
-		// A priced term no longer makes an offer metered: Offer.pricing is the one price,
-		// and checkOfferTermsUnpriced refuses the priced term instead.
-		["term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, false, false],
-		["flat", { pricing: { ...flat } }, false, false],
-		["no pricing", {}, false, false],
-	];
-	for (const [name, offer, metered, refused] of cases) {
-		it(`metered estimate check: ${name}`, () => {
-			expect(isMeteredOffer(offer)).toBe(metered);
-			if (refused) {
-				expect(() => checkMeteredEstimate(offer)).toThrow();
-			} else {
-				expect(() => checkMeteredEstimate(offer)).not.toThrow();
-			}
-		});
-	}
-
-	const unpricedCases: [string, Record<string, unknown>, boolean][] = [
-		["unpriced term", { pricing: { ...flat }, terms: [{ semantics: "TERM_SEMANTICS_ENUMERATED" }] }, false],
-		["no terms", { pricing: { ...flat } }, false],
-		["null term pricing is absent", { pricing: { ...flat }, terms: [{ pricing: null }] }, false],
-		["term repeating the offer price", { pricing: { ...flat }, terms: [{ pricing: { ...flat } }] }, true],
-		["per-unit term under flat pricing", { pricing: { ...flat }, terms: [{ pricing: { ...perUnit } }] }, true],
-		["empty term pricing", { pricing: { ...flat }, terms: [{ pricing: {} }] }, true],
-	];
-	for (const [name, offer, refused] of unpricedCases) {
-		it(`offer terms unpriced check: ${name}`, () => {
-			if (refused) {
-				expect(() => checkOfferTermsUnpriced(offer)).toThrow(/Offer\.pricing/);
-			} else {
-				expect(() => checkOfferTermsUnpriced(offer)).not.toThrow();
-			}
-		});
-	}
-});

From e2f421730942566f059443b7ccb84e3a9af8aee7 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 22:43:04 -0400
Subject: [PATCH 091/164] Unmap the removed settlement symbols and regenerate
 the parity matrix

The seven settlement and tolerance symbols leave the symbol map, ErrMeteredEstimateNotPositive no longer cites the settlement vectors, and the parity matrix is regenerated from the map.
---
 docs/sdk-parity-matrix.md  | 12 ++----------
 sdk/parity/symbol-map.json | 33 +--------------------------------
 2 files changed, 3 insertions(+), 42 deletions(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index d1a8396c..3e8922ec 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 184 symbols at cross-language parity · 17 documented divergences · 199 Go-idiomatic exclusions · 43 conformance corpora, each tri-replayed.
+**At a glance:** 178 symbols at cross-language parity · 17 documented divergences · 198 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -49,7 +49,6 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ContentRulesHeader` | `ContentRulesHeader` | `ContentRulesHeader` |
 | `ContentTypeJSON` | `ContentTypeJSON` | `ContentTypeJSON` |
 | `ContentTypeProto` | `ContentTypeProto` | `ContentTypeProto` |
-| `DefaultEstimateToleranceBps` | `DEFAULT_ESTIMATE_TOLERANCE_BPS` | `DEFAULT_ESTIMATE_TOLERANCE_BPS` |
 | `DefaultKeyValidity` | `DEFAULT_KEY_VALIDITY` | `DEFAULT_KEY_VALIDITY_MS` |
 | `DirectoryDocument` | `directory_document` | `directoryDocument` |
 | `DiscoveryHint` | `DiscoveryHint` | `DiscoveryHint` |
@@ -59,7 +58,6 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ErrManifestVersionRefused` | `ManifestVersionRefusedError` | `ManifestVersionRefused` |
 | `ErrStrictViolation` | `StrictViolationError` | `StrictViolation` |
 | `ErrUnknownKey` | `UnknownKeyError` | `UnknownKey` |
-| `EstimateToleranceBps` | `estimate_tolerance_bps` | `estimateToleranceBps` |
 | `ExchangeHeader` | `ExchangeHeader` | `ExchangeHeader` |
 | `FormatMoney` | `format_money` | `formatMoney` |
 | `GenerateKey` | `generate_key` | `generateKey` |
@@ -75,7 +73,6 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `KeyResolver` | `KeyResolver` | `RequestKeyResolver` |
 | `KnownRestrictionToken` | `known_restriction_token` | `knownRestrictionToken` |
 | `MaxBareDomainLen` | `MAX_BARE_DOMAIN_LEN` | `maxBareDomainLen` |
-| `MaxEstimateToleranceBps` | `MAX_ESTIMATE_TOLERANCE_BPS` | `MAX_ESTIMATE_TOLERANCE_BPS` |
 | `MaxRegistrationDataBytes` | `MAX_REGISTRATION_DATA_BYTES` | `maxRegistrationDataBytes` |
 | `MaxRegistrationDataDepth` | `MAX_REGISTRATION_DATA_DEPTH` | `maxRegistrationDataDepth` |
 | `MaxRegistrationDataMembers` | `MAX_REGISTRATION_DATA_MEMBERS` | `maxRegistrationDataMembers` |
@@ -86,8 +83,6 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `MaxRegistrationSchemaDepth` | `MAX_REGISTRATION_SCHEMA_DEPTH` | `maxRegistrationSchemaDepth` |
 | `MaxRegistrationSchemaEvaluations` | `MAX_REGISTRATION_SCHEMA_EVALUATIONS` | `maxRegistrationSchemaEvaluations` |
 | `MaxRegistrationSchemaRefHops` | `MAX_REGISTRATION_SCHEMA_REF_HOPS` | `maxRegistrationSchemaRefHops` |
-| `MeteredSettlement` | `MeteredSettlement` | `MeteredSettlement` |
-| `MeteredSettlementCap` | `metered_settlement_cap` | `meteredSettlementCap` |
 | `NewIdempotencyKey` | `generate_idempotency_key` | `generateIdempotencyKey` |
 | `NormalizeLicenseTerm` | `normalize_license_term` | `normalizeLicenseTerm` |
 | `NormalizeResourceEntry` | `normalize_resource_entry` | `normalizeResourceEntry` |
@@ -114,7 +109,6 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `RuleWarning` | `RuleWarning` | `RuleWarning` |
 | `SchemaVerdict` | `SchemaVerdict` | `SchemaVerdict` |
 | `ScopesSubset` | `scopes_subset` | `scopesSubset` |
-| `SettleMeteredUsage` | `settle_metered_usage` | `settleMeteredUsage` |
 | `SignAgentBinding` | `sign_agent_binding` | `signInbound` |
 | `SignOffer` | `sign_offer_jcs` | `signOffer` |
 | `SignOfferAcceptance` | `sign_offer_acceptance_jcs` | `signOfferAcceptance` |
@@ -375,7 +369,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrInvalidPoPInput` | Go errors.Is sentinel for a proof input that cannot be written into a signature base; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrKeyIDMismatch` | Go errors.Is sentinel for a keyid that is not the presented key's thumbprint; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrMalformedSignatureInput` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
-| `helpers.ErrMeteredEstimateNotPositive` | Go errors.Is sentinel for a metered offer or price that states an estimate of zero or less; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs. |
+| `helpers.ErrMeteredEstimateNotPositive` | Go errors.Is sentinel for a metered offer that states an estimate of zero or less; py raises ValueError and ts throws from the same faces, and the shared offer-verify vectors pin that every language refuses the same inputs. |
 | `helpers.ErrMissingContentDigest` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingCreated` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingExpires` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
@@ -383,7 +377,6 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrMissingSignature` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingSignatureInput` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrMissingTargetURI` | Go errors.Is sentinel for a proof requested without the URL it binds; py/ts raise/throw instead of exporting sentinels. |
-| `helpers.ErrNotMetered` | Go errors.Is sentinel for a settlement asked of a price that is not PER_UNIT; py raises ValueError and ts throws from the same faces, and the shared metered-settlement vectors pin that every language refuses the same inputs. |
 | `helpers.ErrOfferExpired` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrOfferSignatureInvalid` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrOfferTermPriced` | Go errors.Is sentinel for an offer whose term carries pricing; py raises ValueError and ts throws from the same faces, and the shared offer-verify vectors pin that every language rejects the same offers. |
@@ -485,7 +478,6 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `helpers/testdata/idempotency-validate-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/licenseterm-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/manifest-version-vectors.json` | ✅ | ✅ | ✅ |
-| `helpers/testdata/metered-settlement-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/money-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/multisig-chain-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/offer-verify-vectors.json` | ✅ | ✅ | ✅ |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index e2ef1e5e..b58dbee0 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -106,7 +106,7 @@
     "helpers.ErrInvalidPoPInput": "Go errors.Is sentinel for a proof input that cannot be written into a signature base; py/ts raise/throw instead of exporting sentinels.",
     "helpers.ErrKeyIDMismatch": "Go errors.Is sentinel for a keyid that is not the presented key's thumbprint; py/ts raise/throw instead of exporting sentinels.",
     "helpers.ErrMalformedSignatureInput": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
-    "helpers.ErrMeteredEstimateNotPositive": "Go errors.Is sentinel for a metered offer or price that states an estimate of zero or less; py raises ValueError and ts throws from the same faces, and the shared offer-verify and metered-settlement vectors pin that every language refuses the same inputs.",
+    "helpers.ErrMeteredEstimateNotPositive": "Go errors.Is sentinel for a metered offer that states an estimate of zero or less; py raises ValueError and ts throws from the same faces, and the shared offer-verify vectors pin that every language refuses the same inputs.",
     "helpers.ErrMissingContentDigest": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingCreated": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingExpires": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
@@ -114,7 +114,6 @@
     "helpers.ErrMissingSignature": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingSignatureInput": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrMissingTargetURI": "Go errors.Is sentinel for a proof requested without the URL it binds; py/ts raise/throw instead of exporting sentinels.",
-    "helpers.ErrNotMetered": "Go errors.Is sentinel for a settlement asked of a price that is not PER_UNIT; py raises ValueError and ts throws from the same faces, and the shared metered-settlement vectors pin that every language refuses the same inputs.",
     "helpers.ErrOfferExpired": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrOfferSignatureInvalid": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrOfferTermPriced": "Go errors.Is sentinel for an offer whose term carries pricing; py raises ValueError and ts throws from the same faces, and the shared offer-verify vectors pin that every language rejects the same offers.",
@@ -510,11 +509,6 @@
       "python": "ContentTypeProto",
       "ts": "ContentTypeProto"
     },
-    "helpers.DefaultEstimateToleranceBps": {
-      "allowlist_reason": null,
-      "python": "DEFAULT_ESTIMATE_TOLERANCE_BPS",
-      "ts": "DEFAULT_ESTIMATE_TOLERANCE_BPS"
-    },
     "helpers.DefaultKeyValidity": {
       "allowlist_reason": null,
       "python": "DEFAULT_KEY_VALIDITY",
@@ -555,11 +549,6 @@
       "python": "UnknownKeyError",
       "ts": "UnknownKey"
     },
-    "helpers.EstimateToleranceBps": {
-      "allowlist_reason": null,
-      "python": "estimate_tolerance_bps",
-      "ts": "estimateToleranceBps"
-    },
     "helpers.ExchangeHeader": {
       "allowlist_reason": null,
       "python": "ExchangeHeader",
@@ -635,11 +624,6 @@
       "python": "MAX_BARE_DOMAIN_LEN",
       "ts": "maxBareDomainLen"
     },
-    "helpers.MaxEstimateToleranceBps": {
-      "allowlist_reason": null,
-      "python": "MAX_ESTIMATE_TOLERANCE_BPS",
-      "ts": "MAX_ESTIMATE_TOLERANCE_BPS"
-    },
     "helpers.MaxRegistrationDataBytes": {
       "allowlist_reason": null,
       "python": "MAX_REGISTRATION_DATA_BYTES",
@@ -690,16 +674,6 @@
       "python": "MAX_REGISTRATION_SCHEMA_REF_HOPS",
       "ts": "maxRegistrationSchemaRefHops"
     },
-    "helpers.MeteredSettlement": {
-      "allowlist_reason": null,
-      "python": "MeteredSettlement",
-      "ts": "MeteredSettlement"
-    },
-    "helpers.MeteredSettlementCap": {
-      "allowlist_reason": null,
-      "python": "metered_settlement_cap",
-      "ts": "meteredSettlementCap"
-    },
     "helpers.NewIdempotencyKey": {
       "allowlist_reason": null,
       "python": "generate_idempotency_key",
@@ -760,11 +734,6 @@
       "python": "reconcile_discovery_hint",
       "ts": "reconcileDiscoveryHint"
     },
-    "helpers.SettleMeteredUsage": {
-      "allowlist_reason": null,
-      "python": "settle_metered_usage",
-      "ts": "settleMeteredUsage"
-    },
     "helpers.WellKnownManifestVersion": {
       "allowlist_reason": null,
       "python": "WellKnownManifestVersion",

From 4bae25883be1b7bdbe7f076ac5f79e55fb15f66b Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 22:43:05 -0400
Subject: [PATCH 092/164] Describe the final metered purchase charge in the
 docs and changelogs

The transaction-flow page replaces "Settling a metered purchase" with
"Charging a metered purchase": the purchase charges E x R, or one
unit's rate without an estimate, and the charge is final; a
disagreement about consumption is a dispute. The usage report section
describes the report as a record of the quantity consumed and drops
the held-excess text. The licensing-terms section becomes "Metered
pricing: rate, unit and estimate". The money-flow, reference,
storage-model, request-flow, threat-model, scenario and walkthrough
pages drop the ceiling, the tolerance and the settlement, and say
that monitoring report discrepancies is the Exchange operator's own
business.

The Unreleased changelog entry describes the final state in one
entry, and notes that earlier drafts on this branch required an
estimate and settled within a tolerance. The doc-conformance gate
bans the removed rule and SDK names and the old page anchor.
---
 proto/CHANGELOG.md                            | 104 +++++++-----------
 scripts/check-doc-conformance.sh              |   8 ++
 .../components/exchange/request-flows.mdx     |   4 +-
 .../components/exchange/storage-model.mdx     |   2 +-
 .../docs/getting-started/how-money-flows.mdx  |   4 +-
 .../content/docs/protocol/licensing-terms.mdx |   9 +-
 .../docs/protocol/scenario-walkthrough.mdx    |   2 +-
 .../docs/protocol/transaction-flow.mdx        |  37 ++-----
 .../docs/protocol/walkthrough-academic.mdx    |   2 +-
 .../protocol/walkthrough-medical-imaging.mdx  |   2 +-
 .../content/docs/protocol/walkthrough-v1.mdx  |   2 +-
 .../src/content/docs/reference/changelog.mdx  | 104 +++++++-----------
 .../src/content/docs/reference/proto-fora.mdx |  10 +-
 .../content/docs/security/threat-model.mdx    |   2 +-
 14 files changed, 108 insertions(+), 184 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 4203176b..635414b2 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -9,7 +9,7 @@ comment called the term's copy authoritative. The two could disagree inside one
 offer, nothing said which one execute charges, and the metered rule read either copy.
 
 - `Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks and
-  a metered purchase settles on. The term inside `Offer.terms` MUST carry no pricing (rule
+  a metered purchase is charged at. The term inside `Offer.terms` MUST carry no pricing (rule
   `offer.terms.pricing_unset`, on `Offer`). Each offer derives from exactly one catalog
   term, so the price is stated once and cannot disagree with itself.
 - `offer.metered.estimate_positive` reads `Offer.pricing` only: an offer is metered when
@@ -61,10 +61,11 @@ the body, so a caller handled one decision in two shapes.
 **A usage report is refused for time, never for quantity (comments; one admin field
 deprecated).** `UsageReportRejectionReason` states that the reported quantity is
 unrestricted: no reason refuses a report because its `consumed_quantity` differs from the
-estimate, above or below, and a quantity far from the estimate is analysed out of band.
+estimate, above or below. Monitoring how far reports fall from estimates is the Exchange
+operator's own business, not part of the protocol.
 The existing `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` is the time cause, refused with
 `failed_precondition`; `USAGE_REPORT_REJECTION_REASON_MALFORMED` is a malformed report,
-refused with `invalid_argument`. The metered settlement on `Pricing` is unchanged.
+refused with `invalid_argument`.
 `fora.admin.v1.ReportingPolicy.quantity_tolerance` is deprecated and ignored: an Exchange
 must not refuse a report on it.
 
@@ -110,77 +111,46 @@ states the estimate in the price's own unit. The medical-imaging walkthrough ans
 DUA failure in the body. Offer examples drop their terms' pricing, and the licensing-terms,
 reference and threat-model pages state the same rules.
 
-**A metered offer settles at consumed × rate, within a tolerance when it states an
-estimate: `Pricing.estimate_tolerance_bps` (field 10) is added, with two validation
-rules.** A `PER_UNIT` price is charged per unit consumed, but the protocol did not say
-what the agent accepts at purchase or how a report of a different quantity settles.
-Implementations charged one unit and refused the honest report.
+**A metered purchase charges estimate × rate, or one unit's rate without an estimate, and
+the charge is final (comments and one validation rule; no wire change).** A `PER_UNIT`
+price is charged per unit, but the protocol did not say what a metered purchase charges.
 
-- The estimate stays optional. A `PER_UNIT` offer may state a rate with or without
+- The publisher states the rate and the unit. An offer may state a rate with or without
   `pricing.estimated_quantity`; whether to state one is the publisher's decision, and
   nothing requires it, on the pushed term or on the offer. An estimate an offer states is
-  positive (rule `offer.metered.estimate_positive`, on `Offer`): a zero estimate would fix
-  a ceiling of nothing. An estimate the publisher states, on the term's own pricing or
-  once on `ResourceEntry.estimated_quantity`, is carried onto `Offer.pricing`, the term's
-  own taking precedence. An earlier draft of this release required an estimate on every
-  metered offer and had an Exchange emit no offer for a term without one; that requirement
-  is withdrawn.
-- `Pricing.estimate_tolerance_bps` is the tolerance on the estimate, in basis points, 0 to
-  10000, presence-tracked. It is 1000 (10%) when the term states none, and an explicit 0
-  means the estimate is the ceiling. It is allowed only on a `PER_UNIT` price (rule
-  `pricing.estimate_tolerance.requires_per_unit`), and the Exchange carries the term's value
-  onto the offer unchanged.
-- Settlement, stated once on `Pricing`. With R the rate and C the report's
-  `consumed_quantity`, an offer that states no estimate has no ceiling: the agent accepts
-  the rate, and the report settles at C × R with nothing held. With E the estimate and T
-  the tolerance, the agent accepts E × R at purchase, which is what
-  `TransactionResultItem.cost` carries for such an item, and C settles at min(C, Q) × R,
-  where Q = E × (10000 + T) / 10000. A quantity below the estimate is charged as consumed;
-  the excess above Q is held for dispute and never charged automatically. The arithmetic
-  is exact decimal, and settlement reads `Offer.pricing`. A `PER_UNIT` price with
-  `metering: NONE` has no report, so E × R is final when it states an estimate; this
-  version does not say what such a price charges without one.
-- `UsageReport`, `Usage.consumed_quantity`, `ReportingObligation` and
-  `UsageReportRejectionReason` state that a report whose quantity differs from the
-  estimate is never refused for it. `UsageReportResponse` says that a report with a held
-  excess is a plain success: it carries no amounts, because the settlement is a pure
-  function of the signed offer and the reported quantity, and its `report_id` identifies
-  the held excess. This version defines no `DisputeReason` for the excess and no filing by
-  the publisher's side.
-- `buf breaking` against v1.0.0 passes: the field is additive. The two rules are new
-  validation: a validating peer now refuses a `PER_UNIT` offer that states a zero or
-  negative estimate, including inside a `TransactionRequest`, and a Go client running
-  with `ValidationStrict` refuses a discovery response that carries one. A `PER_UNIT`
-  offer with no estimate is valid.
-- The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
-  tolerance on a `FLAT` price and two metered offers whose stated estimate is not
-  positive (zero and negative). The conformance cases accept a metered offer with no
-  estimate, alone and inside a `TransactionRequest`.
+  positive (rule `offer.metered.estimate_positive`, on `Offer`). An estimate the publisher
+  states, on the term's own pricing or once on `ResourceEntry.estimated_quantity`, is
+  carried onto `Offer.pricing`, the term's own taking precedence.
+- Stated once, on `Pricing`: a metered purchase charges E × R, or one unit, 1 × R, when
+  the offer states no estimate. That is what `TransactionResultItem.cost` carries, and the
+  charge is final. A disagreement about the quantity consumed is a dispute, which this
+  version does not define further. A price whose metering is `NONE` is no different.
+- A usage report is a record of the quantity consumed. `UsageReport`,
+  `Usage.consumed_quantity`, `ReportingObligation` and `UsageReportRejectionReason` state
+  that a report whose quantity differs from the estimate is never refused for it.
+- `buf breaking` against v1.0.0 passes. The rule is new validation: a validating peer
+  refuses a `PER_UNIT` offer that states a zero or negative estimate, including inside a
+  `TransactionRequest`. A `PER_UNIT` offer with no estimate is valid. The cross-field
+  corpus gains the zero and negative cases, and the conformance cases accept a metered
+  offer with no estimate, alone and inside a `TransactionRequest`.
+- Earlier drafts on this branch required an estimate on every metered offer, added an
+  `estimate_tolerance_bps` field (field 10) to `Pricing` and settled the purchase on the
+  usage report within that tolerance. None of that is in this release: field 10 and its name are
+  reserved.
 
 SDKs, in all three languages: the offer verifiers reject a metered offer whose stated
 estimate is not positive, after the signature and expiry checks (Go: `core.Verifier`,
 reason `helpers.ErrMeteredEstimateNotPositive`), and verify a metered offer that states
-none. New helpers settle a metered purchase in exact decimal over the offer's pricing,
-with no ceiling when the price states no estimate: Go `helpers.MeteredSettlementCap`,
-`helpers.SettleMeteredUsage` (returning `helpers.MeteredSettlement`),
-`helpers.EstimateToleranceBps`, `helpers.IsMeteredOffer`, `helpers.CheckMeteredEstimate`,
-`helpers.DefaultEstimateToleranceBps` and `helpers.MaxEstimateToleranceBps`, with
-`helpers.ErrNotMetered`; Python `metered_settlement_cap`, `settle_metered_usage`,
-`MeteredSettlement`, `estimate_tolerance_bps`, `is_metered_offer`,
-`check_metered_estimate` and the two constants from `fora_sdk`; TypeScript the same
-faces in camelCase from `@fora-protocol/sdk/money`. The Python and TypeScript cross-field
-layers gain both rules. Without an estimate, `MeteredSettlementCap` reports no cap (Go
-returns `capped` false, Python `None`, TypeScript `undefined`), and the settlement's
-accepted and ceiling amounts are absent (Go `MeteredSettlement.Estimated` is false). A new
-shared `metered-settlement-vectors.json` pins the arithmetic, including two rows that need
-42 significant digits and the rows of a price with no estimate, and the offer-verify
-vectors gain the metered cases, among them a metered offer with no estimate that verifies.
-
-Docs: the transaction-flow page gains "Settling a metered purchase", with and without an
-estimate, its metered examples carry an estimate in tokens, and its list of report checks drops the ±20% quantity
-tolerance that refused honest reports, as do the Exchange storage model and the scenario
-walkthrough. The licensing-terms page gains "Metered pricing: estimate and tolerance", and
-the money-flow page and the reference page describe the settlement.
+none. New checks `IsMeteredOffer` / `is_metered_offer` / `isMeteredOffer` and
+`CheckMeteredEstimate` / `check_metered_estimate` / `checkMeteredEstimate` apply the rule
+without wire validation. The offer-verify vectors gain the metered cases, among them a
+metered offer with no estimate that verifies.
+
+Docs: the transaction-flow page gains "Charging a metered purchase", and its list of
+report checks drops the ±20% quantity tolerance that refused honest reports, as do the
+Exchange storage model and the scenario walkthrough. The licensing-terms page gains
+"Metered pricing: rate, unit and estimate", and the money-flow page, the reference page
+and the walkthroughs describe the charge.
 
 **An acceptance names its requester: `Requester.id` and `Requester.domain` are required
 (validation rules added; no wire change).** An agent's offer acceptance signs canonical
diff --git a/scripts/check-doc-conformance.sh b/scripts/check-doc-conformance.sh
index ae9c7619..7e255049 100755
--- a/scripts/check-doc-conformance.sh
+++ b/scripts/check-doc-conformance.sh
@@ -125,6 +125,14 @@ patterns=(
   # offer.metered.estimate_positive (an estimate that is stated is positive), and
   # the Go sentinel for a missing estimate by ErrMeteredEstimateNotPositive.
   'offer\.metered\.requires_estimate' 'ErrMeteredEstimateMissing'
+  # A metered purchase's charge is final: estimate x rate, or one unit's rate.
+  # estimate_tolerance_bps and the settlement on the usage report were removed
+  # before any release, with the SDK helpers that computed it. The field name
+  # itself stays legal: the proto reserves it, and the reference page says so.
+  'pricing\.estimate_tolerance\.requires_per_unit' '"?estimate_tolerance_bps"?[[:space:]]*:'
+  'estimateTolerance' 'EstimateToleranceBps' 'MeteredSettlement'
+  'metered_settlement' 'meteredSettlement' 'SettleMeteredUsage' 'settle_metered_usage'
+  'settleMeteredUsage' 'settling-a-metered-purchase'
 )
 
 # Files where naming a removed identifier is legitimate (they record history).
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index f6d4228b..762f5384 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -785,8 +785,8 @@ func (h *ExchangeHandler) ReportUsage(
     //    ErrorDetail.usage_report_rejection (UsageReportRejectionReason). A
     //    report past its reporting window is WINDOW_EXPIRED with the code
     //    failed_precondition. The tracker never refuses a report for its
-    //    consumed_quantity: the quantity is unrestricted, and a metered report
-    //    settles at min(consumed, ceiling) x rate with the excess held.
+    //    consumed_quantity: the quantity is unrestricted, and the report is a
+    //    record of it.
     //    Success returns the Exchange-assigned report_id, required to anchor
     //    the dispute chain.
     result, err := h.reporting.SubmitReport(ctx, req.Msg, txn)
diff --git a/website/src/content/docs/components/exchange/storage-model.mdx b/website/src/content/docs/components/exchange/storage-model.mdx
index 394067ba..00113e16 100644
--- a/website/src/content/docs/components/exchange/storage-model.mdx
+++ b/website/src/content/docs/components/exchange/storage-model.mdx
@@ -254,7 +254,7 @@ The Reporting Tracker tracks two independent metrics that must not be conflated:
 
 **a) Reporting compliance rate**: The percentage of transactions that received a usage report within the reporting window. This measures whether the agent is fulfilling its reporting obligations at all. Providers set the threshold (e.g., 98% required). The protocol RECOMMENDS 95% minimum compliance.
 
-**b) Consumption accuracy**: The deviation between reported consumption (`UsageReport.usage.consumed_quantity`) and estimated consumption (`Offer.pricing.estimated_quantity`). A per-request deviation never refuses a report: a metered report settles as consumed up to the offer's ceiling (the estimate plus `estimate_tolerance_bps`, 10% by default), and the excess above it is held for dispute (see [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase)). Cumulative deviation is tracked but thresholds are Exchange implementation, not protocol.
+**b) Consumption accuracy**: The deviation between reported consumption (`UsageReport.usage.consumed_quantity`) and estimated consumption (`Offer.pricing.estimated_quantity`). A per-request deviation never refuses a report, and a metered purchase's charge is final (see [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase)). Monitoring deviation is the Exchange operator's own business: cumulative deviation is tracked, but thresholds are Exchange implementation, not protocol.
 
 These metrics are INDEPENDENT:
 - An agent could have **100% compliance rate** but consistently underreport tokens (high compliance, low accuracy)
diff --git a/website/src/content/docs/getting-started/how-money-flows.mdx b/website/src/content/docs/getting-started/how-money-flows.mdx
index 8d551c09..d1dfb2b9 100644
--- a/website/src/content/docs/getting-started/how-money-flows.mdx
+++ b/website/src/content/docs/getting-started/how-money-flows.mdx
@@ -51,7 +51,7 @@ sequenceDiagram
 | `PRICING_MODEL_PER_UNIT` | Rate per `Pricing.unit` (metering basis: `accesses`, `tokens`, `fetches`, `pages`, `minutes`, `records`, …) | crawl / use / inference / training / metered purchase |
 | `PRICING_MODEL_FLAT` | One-time flat fee; `rate` is the total, no unit | one-time purchase |
 
-A `PER_UNIT` price is metered. A `PER_UNIT` offer may carry an `estimated_quantity` in its `unit`, or none; whether to state one is the publisher's decision. Without an estimate there is no ceiling: the agent accepts the rate, and the usage report settles at the consumed quantity × rate. With an estimate, the agent accepts estimate × rate at purchase. The usage report then settles at the consumed quantity × rate, up to a ceiling of the estimate plus a tolerance: `estimate_tolerance_bps`, 10% when the term states none. Anything consumed above the ceiling is held for dispute, never charged automatically. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
+A `PER_UNIT` price is metered. A `PER_UNIT` offer may carry an `estimated_quantity` in its `unit`, or none; whether to state one is the publisher's decision. The purchase charges estimate × rate, or one unit's rate without an estimate, and the charge is final. A disagreement about the quantity consumed is a dispute. See [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase).
 
 A **subscription** is `FREE` + a `subscription:*` scope (settled off-protocol). **Attribution** and **contribution** are `Obligation`s, not pricing models. There is no revenue-share model — settlement is off-protocol.
 
@@ -92,7 +92,7 @@ Every `Offer` in a `ResourceResponse` includes both the native pricing and the c
 }
 ```
 
-The agent accepts estimate × rate = 1 × $0.05 at purchase. Its usage report counts accesses too (`consumed_quantity: 1`, `consumed_unit: "accesses"`), and settles at min(consumed, ceiling) × rate: one access at the default 10% tolerance has a ceiling of 1.1 accesses, so an honest report of one access is charged $0.05.
+The purchase charges estimate × rate = 1 × $0.05, and the charge is final. Its usage report counts accesses too (`consumed_quantity: 1`, `consumed_unit: "accesses"`).
 
 ## base_currency
 
diff --git a/website/src/content/docs/protocol/licensing-terms.mdx b/website/src/content/docs/protocol/licensing-terms.mdx
index 827d44f7..2c4e6e1c 100644
--- a/website/src/content/docs/protocol/licensing-terms.mdx
+++ b/website/src/content/docs/protocol/licensing-terms.mdx
@@ -133,18 +133,17 @@ For CoMP interop, a CoMP `revshare` rate is carried verbatim in the `fora-comp-v
 
 `OFFLINE_SELF_REPORTED` is appropriate for IP licenses where consumption events happen outside the digital domain: a design file licensed for manufacturing, a recipe licensed for commercial production, a musical composition licensed for physical pressing.
 
-## Metered pricing: estimate and tolerance
+## Metered pricing: rate, unit and estimate
 
-A `PER_UNIT` price is **metered**: the agent pays per unit consumed, and the quantity is known only after use. Two optional fields can bound what such a purchase costs:
+A `PER_UNIT` price is **metered**: the agent pays per unit. You state the rate and the unit, and you may also state an estimate:
 
 - `Pricing.estimated_quantity` — the estimate, in the price's `unit`. It is **optional**, on the term you push and on the offer. A `PER_UNIT` price may state a rate with or without an estimate; whether to state one is your decision, and nothing requires it. An estimate that an offer states is positive (the `offer.metered.estimate_positive` rule), and the SDK verifiers reject a zero one. The estimate counts the price's own unit: a price per access has an estimate in accesses, a price per token an estimate in tokens. The estimate describes the resource rather than the arrangement, so you can state it once on `ResourceEntry.estimated_quantity`, and the Exchange puts it on the offer's pricing. An estimate on the term's own pricing takes precedence. A `FREE` or `FLAT` price needs no estimate.
-- `Pricing.estimate_tolerance_bps` — optional, on a `PER_UNIT` term only (`pricing.estimate_tolerance.requires_per_unit`). It is the tolerance on the estimate, in basis points from `0` to `10000`. When the term states none, the tolerance is `1000` (10%). An explicit `0` means the estimate is the ceiling. The Exchange carries it unchanged onto the offer. It applies only when an estimate is stated.
 
-Without an estimate there is no ceiling: the agent accepts the rate, and its usage report settles at the consumed quantity × rate, whatever the quantity. With an estimate, the agent accepts estimate × rate at purchase. Its usage report settles at the consumed quantity × rate, up to the ceiling estimate × (10000 + tolerance) / 10000. A quantity below the estimate is charged as consumed. A quantity above the ceiling is charged only up to the ceiling, and the excess is held for dispute, never charged automatically. [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase) has the full rule and a worked example.
+A metered purchase charges estimate × rate, or one unit's rate without an estimate, and the charge is final. A disagreement about the quantity consumed is a dispute. [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase) has the rule and an example.
 
 ```
 pricing: { model: PER_UNIT, unit: "tokens", rate: 0.00002, currency: "USD",
-           estimate_tolerance_bps: 500 }   # settle up to 5% over the estimate
+           estimated_quantity: 2500 }   # the purchase charges 2500 x 0.00002
 ```
 
 ## Cross-domain examples
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 78e1c3b8..098b8f71 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -914,7 +914,7 @@ The SDK auto-submits a usage report (background, non-blocking). Usage reporting
 3. Submit to Reporting Tracker:
    a. Validate required_fields present: transaction_id, function, consumed_quantity -> all present
    b. Check reporting window: deadline 2026-03-16T15:00:00Z, current time 2026-03-15T15:30:00Z -> within window
-   c. Record consumed_quantity: 3150 actual vs 3300 estimated -> a difference is never a refusal; a metered report settles as consumed, up to the ceiling
+   c. Record consumed_quantity: 3150 actual vs 3300 estimated -> a difference is never a refusal; the report records it
    d. Transition obligation: Pending -> Fulfilled
 4. Write usage report to transaction log (durable)
 ```
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 97470d3f..9891295c 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -139,7 +139,7 @@ Key fields:
 
 Each `Offer` includes:
 - `Offer.title` (human-readable) plus optional `fora-comp-v1` `comp.*` ext fields carrying CoMP package metadata (`comp.package_id`, `comp.seller`, `comp.citation_required`, `comp.content_types`, `comp.retrieval_type`)
-- FORA `Pricing` with the rate, currency, and normalized unit_cost; a metered (`PER_UNIT`) offer may also carry a positive `estimated_quantity` in its `unit`, which fixes the amount the agent accepts and the ceiling its usage report settles against. Without one there is no ceiling, and the report settles at the consumed quantity × rate (see [Settling a metered purchase](#settling-a-metered-purchase))
+- FORA `Pricing` with the rate, currency, and normalized unit_cost; a metered (`PER_UNIT`) offer may also carry a positive `estimated_quantity` in its `unit`. The purchase charges the estimate × rate, or one unit's rate without an estimate (see [Charging a metered purchase](#charging-a-metered-purchase))
 - `ResourceIdentity` for cross-exchange deduplication
 - `LicenseTerm` entries on `terms[]`, each carrying `restrictions` (`repeated Restriction`) derived from the provider's RSL terms
 - `ReportingObligation` defining post-usage reporting requirements
@@ -374,7 +374,7 @@ The request may also carry `agent_request_acceptance` — the agent's detached E
 }
 ```
 
-For a metered item whose offer states an estimate, `cost.amount` is the amount the agent accepted: the offer's `estimated_quantity` × `rate`, here 2,500 tokens × $0.00002 = $0.05. It is not the final charge; the usage report settles it. When the offer states no estimate, no amount is fixed at purchase, and the report settles the charge at the consumed quantity × rate (see [Settling a metered purchase](#settling-a-metered-purchase)).
+For a metered item, `cost.amount` is the purchase charge: the offer's `estimated_quantity` × `rate`, here 2,500 tokens × $0.00002 = $0.05, or one unit's rate when the offer states no estimate. The charge is final (see [Charging a metered purchase](#charging-a-metered-purchase)).
 
 The `retrieval_endpoint` is a CDN signed URL bound to `agent_identity_hash`. A bearer-only CDN serves it on signature + expiry alone (the URL signature + short TTL + TLS); a capable edge function additionally requires the agent to present its public key and an RFC 9421 signature, verifying the binding offline. See [Signed URL Verification](/components/edge-function/signed-url-verification).
 
@@ -639,7 +639,7 @@ Content-Type: application/json
 }
 ```
 
-A successful response carries the Exchange-assigned `report_id` (the handle the agent later references in `DisputeRequest`). It carries no amounts, also when part of a metered report is held for dispute: the settlement is a pure function of the signed offer and the reported quantity, so the agent computes it itself (see [Settling a metered purchase](#settling-a-metered-purchase)). A rejected report is not a success body -- it travels as a non-OK transport error carrying `ErrorDetail.usage_report_rejection` (e.g. `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED`, `USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS`).
+A successful response carries the Exchange-assigned `report_id` (the handle the agent later references in `DisputeRequest`). A rejected report is not a success body -- it travels as a non-OK transport error carrying `ErrorDetail.usage_report_rejection` (e.g. `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED`, `USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS`).
 
 ### What the Exchange Validates
 
@@ -648,41 +648,18 @@ A successful response carries the Exchange-assigned `report_id` (the handle the
 3. Report received within the reporting window (typically 24 hours). A report that arrives after the window closed is refused with `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` and the Connect code `failed_precondition`: the typed reason names the time cause
 4. Transaction exists and `billing_id` matches
 
-**The reported quantity is unrestricted.** A consumed quantity that differs from the offer's estimate is **not** a validation failure, above or below, and no check on the quantity refuses a report. For a metered offer the Exchange settles the report as described below; a quantity far from the estimate is analysed out of band, never by refusing the report.
+**The reported quantity is unrestricted.** A consumed quantity that differs from the offer's estimate is **not** a validation failure, above or below, and no check on the quantity refuses a report. The report is a record of the quantity consumed. Monitoring how far reports fall from estimates is the Exchange operator's own business, not part of the protocol.
 
-### Settling a metered purchase
+### Charging a metered purchase
 
-A `PER_UNIT` price is metered: it is charged per unit consumed, and the quantity is known only after use. Up to three values on the offer's own `pricing` fix what such a purchase can cost, and the offer signature covers them, so accepting the offer is consenting to them:
+A `PER_UNIT` price is metered: it is charged per unit. The publisher states the rate and the unit, and the offer may also state an estimate. The offer signature covers them, so accepting the offer is consenting to them:
 
 | Symbol | Field | Meaning |
 |---|---|---|
 | R | `rate` | The price of one `unit` |
 | E | `estimated_quantity` | The estimate, in `unit`. **Optional.** A `PER_UNIT` offer may state a rate with or without an estimate; whether to state one is the publisher's decision. An estimate that is stated is positive (`offer.metered.estimate_positive`), and the SDK verifiers reject a zero one |
-| T | `estimate_tolerance_bps` | The tolerance on the estimate, in basis points: `1000` (10%) when the term states none, `0` for none, at most `10000`. It applies only when the offer states an estimate |
 
-**Without an estimate there is no ceiling.** The agent accepts the rate R. When the usage report arrives, its `consumed_quantity` C is charged **C × R**, whatever C is, and nothing is held. Nothing in such an offer bounds what the purchase is charged.
-
-**With an estimate the purchase settles within a tolerance.** At purchase the agent accepts **E × R**, the `cost` of the item. When the usage report arrives, its `consumed_quantity` C settles against the ceiling **Q = E × (10000 + T) / 10000**:
-
-| Consumed quantity | Charged | Held for dispute |
-|---|---|---|
-| C ≤ E (below the estimate) | C × R | nothing |
-| E < C ≤ Q (within the tolerance) | C × R | nothing |
-| C > Q (above the ceiling) | Q × R | (C − Q) × R |
-
-The quantity above the ceiling is held, never charged automatically: nothing above Q × R is charged unless dispute resolution establishes that it is owed. Q × R is therefore the most an estimated metered purchase costs without a dispute. Q can be fractional, and every step is exact decimal arithmetic: the inputs are integers and decimal strings, and the only division is by 10000.
-
-With the offer above (E = 2,500 tokens, R = $0.00002, no stated tolerance, so Q = 2,750):
-
-| Reported | Charged | Held |
-|---|---|---|
-| 2,400 tokens (the report above) | $0.048 | — |
-| 2,700 tokens | $0.054 | — |
-| 3,000 tokens | $0.055 | 250 tokens, $0.005 |
-
-The response to a report that holds an excess is still a plain success with a `report_id`; the `transaction_id` and that `report_id` identify the held excess. This version defines no `DisputeReason` for it and no filing by the publisher's side, so how a claim to the excess is raised is left open; what the protocol fixes is that it is never charged automatically. A metered price with `metering: PRICING_METERING_NONE` has no report, so E × R is final when it states an estimate. This version does not say what such a price charges when it states none.
-
-The SDKs compute all of this exactly: `MeteredSettlementCap` / `metered_settlement_cap` / `meteredSettlementCap` returns Q × R, or reports that there is no cap when the price states no estimate, and `SettleMeteredUsage` / `settle_metered_usage` / `settleMeteredUsage` returns the accepted, ceiling, charged and held amounts (without an estimate, no accepted amount and no ceiling). The shared metered-settlement vectors pin every language to the same digits.
+A metered purchase charges **E × R**, or one unit, **1 × R**, when the offer states no estimate. That is the item's `cost`, and the charge is final. With the offer above (E = 2,500 tokens, R = $0.00002) the purchase charges $0.05. A disagreement about the quantity consumed is a dispute, which this version does not define further.
 
 ## Content Delivery (Outside Protocol Scope)
 
diff --git a/website/src/content/docs/protocol/walkthrough-academic.mdx b/website/src/content/docs/protocol/walkthrough-academic.mdx
index 49c12e68..ff339600 100644
--- a/website/src/content/docs/protocol/walkthrough-academic.mdx
+++ b/website/src/content/docs/protocol/walkthrough-academic.mdx
@@ -852,7 +852,7 @@ Response:
 
 **Reporting details:**
 
-- **`consumed_quantity: 1`, `consumed_unit: "accesses"`** — the unit matches the offer's `pricing.unit`. The offer's estimate was 1 access at $1.50, so the transaction settles at 1 × $1.50 = $1.50, the amount accepted at purchase. A report is never refused because its quantity differs from the estimate. If the agent had reported more than the ceiling (the estimate plus the 10% default tolerance), the excess would be held for dispute, not charged.
+- **`consumed_quantity: 1`, `consumed_unit: "accesses"`** — the unit matches the offer's `pricing.unit`. The offer's estimate was 1 access at $1.50, so the purchase charged 1 × $1.50 = $1.50, and that charge is final. A report is never refused because its quantity differs from the estimate.
 - **`citation_included: true`** — the literature review includes proper citations for all 49 papers. This is relevant for publishers who offer attribution-only pricing or require citation as a license condition.
 - **`assets`** — names the paper the transaction covers, so the Exchange can attribute usage to its publisher. Across the 49 reports, Elsevier sees 20 accesses against Stanford's subscription, the paid publishers see 17 paid accesses, and arXiv sees 12 free accesses.
 - **`report_id: "rpt-litrev-001"`** — enables the dispute chain. If this paper's content hash had not matched on delivery, the agent would reference this report when filing a `DisputeTransaction`.
diff --git a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
index c6fe58aa..abb8db5b 100644
--- a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
+++ b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
@@ -503,7 +503,7 @@ Response:
 
 **Key differences from text usage reporting:**
 
-- **`consumed_quantity: 1`** with **`consumed_unit: "records"`** — the pricing model is per-study, not per-token. The agent consumed one study regardless of how many of the 847 instances it actually downloaded. One record at $25.00 settles the transaction at $25.00, the amount accepted at purchase.
+- **`consumed_quantity: 1`** with **`consumed_unit: "records"`** — the pricing model is per-study, not per-token. The agent consumed one study regardless of how many of the 847 instances it actually downloaded. The purchase charged one record at $25.00, and that charge is final.
 - **`displayed_to_user: false`** — medical imaging is processed by the AI model, not displayed to a human in a chat interface.
 - **`ext` metadata** — the agent reports which series it accessed (4 of 8), how many instances it downloaded (600 of 847), and which model processed the data. This level of audit detail is important for regulated data — if a DUA violation investigation occurs, the Exchange has a complete record of what data was accessed and how it was used.
 - **7-day reporting window** — the longer window accommodates the reality that imaging analysis pipelines are batch processes, not interactive sessions.
diff --git a/website/src/content/docs/protocol/walkthrough-v1.mdx b/website/src/content/docs/protocol/walkthrough-v1.mdx
index 2f47801f..7fb174e4 100644
--- a/website/src/content/docs/protocol/walkthrough-v1.mdx
+++ b/website/src/content/docs/protocol/walkthrough-v1.mdx
@@ -325,7 +325,7 @@ Response:
 }
 ```
 
-The report settles the transaction at 1 × $0.05 = $0.05, the amount accepted at purchase. A report is never refused because its quantity differs from the estimate: a quantity above the ceiling (the estimate plus the 10% default tolerance) would be charged up to the ceiling, and the rest held for dispute.
+The purchase charged 1 × $0.05 = $0.05, and that charge is final; the report records the quantity consumed. A report is never refused because its quantity differs from the estimate.
 
 The `report_id` enables the dispute chain: if the agent needs to dispute this transaction later, it must reference this report to prove usage was reported first.
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 39baed38..07a9a600 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -15,7 +15,7 @@ comment called the term's copy authoritative. The two could disagree inside one
 offer, nothing said which one execute charges, and the metered rule read either copy.
 
 - `Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks and
-  a metered purchase settles on. The term inside `Offer.terms` MUST carry no pricing (rule
+  a metered purchase is charged at. The term inside `Offer.terms` MUST carry no pricing (rule
   `offer.terms.pricing_unset`, on `Offer`). Each offer derives from exactly one catalog
   term, so the price is stated once and cannot disagree with itself.
 - `offer.metered.estimate_positive` reads `Offer.pricing` only: an offer is metered when
@@ -67,10 +67,11 @@ the body, so a caller handled one decision in two shapes.
 **A usage report is refused for time, never for quantity (comments; one admin field
 deprecated).** `UsageReportRejectionReason` states that the reported quantity is
 unrestricted: no reason refuses a report because its `consumed_quantity` differs from the
-estimate, above or below, and a quantity far from the estimate is analysed out of band.
+estimate, above or below. Monitoring how far reports fall from estimates is the Exchange
+operator's own business, not part of the protocol.
 The existing `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` is the time cause, refused with
 `failed_precondition`; `USAGE_REPORT_REJECTION_REASON_MALFORMED` is a malformed report,
-refused with `invalid_argument`. The metered settlement on `Pricing` is unchanged.
+refused with `invalid_argument`.
 `fora.admin.v1.ReportingPolicy.quantity_tolerance` is deprecated and ignored: an Exchange
 must not refuse a report on it.
 
@@ -116,77 +117,46 @@ states the estimate in the price's own unit. The medical-imaging walkthrough ans
 DUA failure in the body. Offer examples drop their terms' pricing, and the licensing-terms,
 reference and threat-model pages state the same rules.
 
-**A metered offer settles at consumed × rate, within a tolerance when it states an
-estimate: `Pricing.estimate_tolerance_bps` (field 10) is added, with two validation
-rules.** A `PER_UNIT` price is charged per unit consumed, but the protocol did not say
-what the agent accepts at purchase or how a report of a different quantity settles.
-Implementations charged one unit and refused the honest report.
+**A metered purchase charges estimate × rate, or one unit's rate without an estimate, and
+the charge is final (comments and one validation rule; no wire change).** A `PER_UNIT`
+price is charged per unit, but the protocol did not say what a metered purchase charges.
 
-- The estimate stays optional. A `PER_UNIT` offer may state a rate with or without
+- The publisher states the rate and the unit. An offer may state a rate with or without
   `pricing.estimated_quantity`; whether to state one is the publisher's decision, and
   nothing requires it, on the pushed term or on the offer. An estimate an offer states is
-  positive (rule `offer.metered.estimate_positive`, on `Offer`): a zero estimate would fix
-  a ceiling of nothing. An estimate the publisher states, on the term's own pricing or
-  once on `ResourceEntry.estimated_quantity`, is carried onto `Offer.pricing`, the term's
-  own taking precedence. An earlier draft of this release required an estimate on every
-  metered offer and had an Exchange emit no offer for a term without one; that requirement
-  is withdrawn.
-- `Pricing.estimate_tolerance_bps` is the tolerance on the estimate, in basis points, 0 to
-  10000, presence-tracked. It is 1000 (10%) when the term states none, and an explicit 0
-  means the estimate is the ceiling. It is allowed only on a `PER_UNIT` price (rule
-  `pricing.estimate_tolerance.requires_per_unit`), and the Exchange carries the term's value
-  onto the offer unchanged.
-- Settlement, stated once on `Pricing`. With R the rate and C the report's
-  `consumed_quantity`, an offer that states no estimate has no ceiling: the agent accepts
-  the rate, and the report settles at C × R with nothing held. With E the estimate and T
-  the tolerance, the agent accepts E × R at purchase, which is what
-  `TransactionResultItem.cost` carries for such an item, and C settles at min(C, Q) × R,
-  where Q = E × (10000 + T) / 10000. A quantity below the estimate is charged as consumed;
-  the excess above Q is held for dispute and never charged automatically. The arithmetic
-  is exact decimal, and settlement reads `Offer.pricing`. A `PER_UNIT` price with
-  `metering: NONE` has no report, so E × R is final when it states an estimate; this
-  version does not say what such a price charges without one.
-- `UsageReport`, `Usage.consumed_quantity`, `ReportingObligation` and
-  `UsageReportRejectionReason` state that a report whose quantity differs from the
-  estimate is never refused for it. `UsageReportResponse` says that a report with a held
-  excess is a plain success: it carries no amounts, because the settlement is a pure
-  function of the signed offer and the reported quantity, and its `report_id` identifies
-  the held excess. This version defines no `DisputeReason` for the excess and no filing by
-  the publisher's side.
-- `buf breaking` against v1.0.0 passes: the field is additive. The two rules are new
-  validation: a validating peer now refuses a `PER_UNIT` offer that states a zero or
-  negative estimate, including inside a `TransactionRequest`, and a Go client running
-  with `ValidationStrict` refuses a discovery response that carries one. A `PER_UNIT`
-  offer with no estimate is valid.
-- The validation corpus gains the tolerance bounds, and the cross-field corpus gains a
-  tolerance on a `FLAT` price and two metered offers whose stated estimate is not
-  positive (zero and negative). The conformance cases accept a metered offer with no
-  estimate, alone and inside a `TransactionRequest`.
+  positive (rule `offer.metered.estimate_positive`, on `Offer`). An estimate the publisher
+  states, on the term's own pricing or once on `ResourceEntry.estimated_quantity`, is
+  carried onto `Offer.pricing`, the term's own taking precedence.
+- Stated once, on `Pricing`: a metered purchase charges E × R, or one unit, 1 × R, when
+  the offer states no estimate. That is what `TransactionResultItem.cost` carries, and the
+  charge is final. A disagreement about the quantity consumed is a dispute, which this
+  version does not define further. A price whose metering is `NONE` is no different.
+- A usage report is a record of the quantity consumed. `UsageReport`,
+  `Usage.consumed_quantity`, `ReportingObligation` and `UsageReportRejectionReason` state
+  that a report whose quantity differs from the estimate is never refused for it.
+- `buf breaking` against v1.0.0 passes. The rule is new validation: a validating peer
+  refuses a `PER_UNIT` offer that states a zero or negative estimate, including inside a
+  `TransactionRequest`. A `PER_UNIT` offer with no estimate is valid. The cross-field
+  corpus gains the zero and negative cases, and the conformance cases accept a metered
+  offer with no estimate, alone and inside a `TransactionRequest`.
+- Earlier drafts on this branch required an estimate on every metered offer, added an
+  `estimate_tolerance_bps` field (field 10) to `Pricing` and settled the purchase on the
+  usage report within that tolerance. None of that is in this release: field 10 and its name are
+  reserved.
 
 SDKs, in all three languages: the offer verifiers reject a metered offer whose stated
 estimate is not positive, after the signature and expiry checks (Go: `core.Verifier`,
 reason `helpers.ErrMeteredEstimateNotPositive`), and verify a metered offer that states
-none. New helpers settle a metered purchase in exact decimal over the offer's pricing,
-with no ceiling when the price states no estimate: Go `helpers.MeteredSettlementCap`,
-`helpers.SettleMeteredUsage` (returning `helpers.MeteredSettlement`),
-`helpers.EstimateToleranceBps`, `helpers.IsMeteredOffer`, `helpers.CheckMeteredEstimate`,
-`helpers.DefaultEstimateToleranceBps` and `helpers.MaxEstimateToleranceBps`, with
-`helpers.ErrNotMetered`; Python `metered_settlement_cap`, `settle_metered_usage`,
-`MeteredSettlement`, `estimate_tolerance_bps`, `is_metered_offer`,
-`check_metered_estimate` and the two constants from `fora_sdk`; TypeScript the same
-faces in camelCase from `@fora-protocol/sdk/money`. The Python and TypeScript cross-field
-layers gain both rules. Without an estimate, `MeteredSettlementCap` reports no cap (Go
-returns `capped` false, Python `None`, TypeScript `undefined`), and the settlement's
-accepted and ceiling amounts are absent (Go `MeteredSettlement.Estimated` is false). A new
-shared `metered-settlement-vectors.json` pins the arithmetic, including two rows that need
-42 significant digits and the rows of a price with no estimate, and the offer-verify
-vectors gain the metered cases, among them a metered offer with no estimate that verifies.
-
-Docs: the transaction-flow page gains "Settling a metered purchase", with and without an
-estimate, its metered examples carry an estimate in tokens, and its list of report checks drops the ±20% quantity
-tolerance that refused honest reports, as do the Exchange storage model and the scenario
-walkthrough. The licensing-terms page gains "Metered pricing: estimate and tolerance", and
-the money-flow page and the reference page describe the settlement.
+none. New checks `IsMeteredOffer` / `is_metered_offer` / `isMeteredOffer` and
+`CheckMeteredEstimate` / `check_metered_estimate` / `checkMeteredEstimate` apply the rule
+without wire validation. The offer-verify vectors gain the metered cases, among them a
+metered offer with no estimate that verifies.
+
+Docs: the transaction-flow page gains "Charging a metered purchase", and its list of
+report checks drops the ±20% quantity tolerance that refused honest reports, as do the
+Exchange storage model and the scenario walkthrough. The licensing-terms page gains
+"Metered pricing: rate, unit and estimate", and the money-flow page, the reference page
+and the walkthroughs describe the charge.
 
 **An acceptance names its requester: `Requester.id` and `Requester.domain` are required
 (validation rules added; no wire change).** An agent's offer acceptance signs canonical
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 702f303d..dfd8e22b 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -113,11 +113,11 @@ A purchase through a Broker does not use this chain. `BrokerService.ExecuteTrans
 ::proto-message{name=Offer}
 
 :::note[An offer carries its price once]
-`Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks, and a metered purchase settles on. The one term the offer sells, in `Offer.terms`, carries no `pricing` (rule `offer.terms.pricing_unset`). Catalog terms (`ResourceEntry.terms`) still carry their pricing; each offer derives from exactly one of them, so the offer's price and its term's price cannot disagree.
+`Offer.pricing` is the offer's only price: the price execute charges, a Broker ranks, and a metered purchase is charged at. The one term the offer sells, in `Offer.terms`, carries no `pricing` (rule `offer.terms.pricing_unset`). Catalog terms (`ResourceEntry.terms`) still carry their pricing; each offer derives from exactly one of them, so the offer's price and its term's price cannot disagree.
 :::
 
 :::note[A metered offer may carry an estimate]
-An offer whose `pricing` is `PER_UNIT` may state `pricing.estimated_quantity` or not; whether to state one is the publisher's decision, and nothing requires it. Without one there is no ceiling, and a usage report settles at the consumed quantity × rate. An estimate that is stated is positive (rule `offer.metered.estimate_positive`). An estimate the publisher stated, on the term or on `ResourceEntry.estimated_quantity`, is carried onto `Offer.pricing`. The estimate is always in the offer's own `pricing.unit`: a price per access has an estimate in accesses, never a token count.
+An offer whose `pricing` is `PER_UNIT` may state `pricing.estimated_quantity` or not; whether to state one is the publisher's decision, and nothing requires it. Without one the purchase charges one unit. An estimate that is stated is positive (rule `offer.metered.estimate_positive`). An estimate the publisher stated, on the term or on `ResourceEntry.estimated_quantity`, is carried onto `Offer.pricing`. The estimate is always in the offer's own `pricing.unit`: a price per access has an estimate in accesses, never a token count.
 :::
 
 :::note[Breaking change in v1.0]
@@ -144,7 +144,7 @@ Three verification levels:
 
 `Pricing` has no `ext` / `ext_critical` fields — the licensing core is closed.
 
-**Metered settlement.** With R = `rate` and C = the report's `Usage.consumed_quantity`, an offer that states no estimate has no ceiling: the agent accepts the rate and the report settles at C × R. With E = `estimated_quantity` (optional, positive when stated) and T = `estimate_tolerance_bps` (1000 when absent; 0 to 10000, `PER_UNIT` only, rule `pricing.estimate_tolerance.requires_per_unit`), the agent accepts E × R at purchase and the report settles at min(C, Q) × R, where Q = E × (10000 + T) / 10000. The excess (C − Q) × R above the ceiling is held for dispute and never charged automatically. The arithmetic is exact decimal. See [Settling a metered purchase](/protocol/transaction-flow/#settling-a-metered-purchase).
+**Metered price.** With R = `rate` and E = `estimated_quantity` (optional, positive when stated), a metered purchase charges E × R, or one unit, 1 × R, when the offer states no estimate, and the charge is final. A disagreement about the quantity consumed is a dispute, which this version does not define further. Field 10, once `estimate_tolerance_bps` in an unreleased draft, is reserved. See [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase).
 
 ### ResourceIdentity
 
@@ -218,7 +218,7 @@ The canonical signing structure for [`AgentAcceptance`](#agentacceptance). It is
 
 ### TransactionResultItem
 
-Result for a single offer in a batch transaction. `refusal` is set only in a `BrokerTransactionResponse`, on an item whose Exchange refused the Broker's whole sub-request or did not answer it. For a metered item whose offer states an estimate, `cost` is the accepted amount, estimate × rate; the usage report settles the final charge. Without an estimate no amount is fixed at purchase, and the report settles the charge at consumed × rate.
+Result for a single offer in a batch transaction. `refusal` is set only in a `BrokerTransactionResponse`, on an item whose Exchange refused the Broker's whole sub-request or did not answer it. For a metered item, `cost` is the purchase charge: estimate × rate, or one unit's rate without an estimate. The charge is final.
 
 ::proto-message{name=TransactionResultItem}
 
@@ -264,7 +264,7 @@ A single asset included in the usage report.
 
 ### UsageReportResponse
 
-Acknowledgment of a usage report. A successful response means the report was accepted; a rejection travels as a non-OK transport error carrying [`ErrorDetail.usage_report_rejection`](#unified-error-model). A report past its reporting window is refused with `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` and the code `failed_precondition`; a malformed report with `USAGE_REPORT_REJECTION_REASON_MALFORMED` and `invalid_argument`. The reported quantity is unrestricted: a consumed quantity that differs from the estimate, above or below, is never a reason to refuse a report. When part of a metered report is held for dispute, the response is still a plain success: it carries no amounts, because the agent derives the charge and the held excess exactly from the signed offer and its own report, and the `report_id` identifies the held excess.
+Acknowledgment of a usage report. A successful response means the report was accepted; a rejection travels as a non-OK transport error carrying [`ErrorDetail.usage_report_rejection`](#unified-error-model). A report past its reporting window is refused with `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` and the code `failed_precondition`; a malformed report with `USAGE_REPORT_REJECTION_REASON_MALFORMED` and `invalid_argument`. The reported quantity is unrestricted: a consumed quantity that differs from the estimate, above or below, is never a reason to refuse a report.
 
 ::proto-message{name=UsageReportResponse}
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index ec6ba0f9..33a4caec 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -65,7 +65,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T10: Usage underreporting (token count)
 **Attack**: Agent reports using 500 tokens of a 10,000-token document but ingested the entire thing.
-**Countermeasure (protocol)**: **Out-of-band analysis, never a refused report.** The reported quantity is unrestricted: an Exchange never refuses a usage report because its quantity differs from the estimate, in either direction. A quantity far below the document's known size is analysed out of band — reconciled against CDN logs (bytes served for the signed URL) and the size the attestations state — and pursued through reconciliation and the account relationship. A publisher that must be paid for the whole document prices it per access or flat, not per token, so the charge does not depend on the reported count.
+**Countermeasure (protocol)**: **Never a refused report; monitoring is the operator's.** The reported quantity is unrestricted: an Exchange never refuses a usage report because its quantity differs from the estimate, in either direction. Monitoring discrepancies is the Exchange operator's own business, not part of the protocol: an operator may reconcile a quantity far below the document's known size against CDN logs (bytes served for the signed URL) and the size the attestations state, and pursue it through the account relationship or a dispute. A publisher that must be paid for the whole document prices it per access or flat, not per token, so the charge does not depend on the reported count.
 
 ### T11: Function misreporting (RAG vs training)
 **Attack**: Agent declares `function: ai-input` (cheaper) but uses content for `function: ai-train` (prohibited or more expensive).

From 128467de4afcc8b00098c890d392ec751c8e820b Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 23:51:43 -0400
Subject: [PATCH 093/164] Refuse a catalog call with a failed signature as
 request_auth_failure in the protocol

CatalogRejectionReason carried SIGNATURE_INVALID, so a catalog push
had a second way to report a failed request signature. A signed
CatalogService call is now refused like every other signed request:
unauthenticated with ErrorDetail.request_auth_failure
(SIGNATURE_MISSING, SIGNATURE_INVALID or SIGNATURE_STALE).
RequestAuthFailureReason says so.

CATALOG_REJECTION_REASON_SIGNATURE_INVALID is deprecated and never
sent, following the scope-shortfall precedent; its number is retained
and not reused. The Exchange request-flow page drops it from the
reasons a push can produce, and both changelogs record the change.

Comments only; the generated code, the descriptor, the SDK types and
the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 671283 -> 671884 bytes
 gen/go/fora/v1/fora.pb.go                     |  27 +++++++++++++-----
 proto/CHANGELOG.md                            |   8 ++++++
 proto/fora/v1/fora.proto                      |  13 ++++++++-
 .../components/exchange/request-flows.mdx     |   2 +-
 .../src/content/docs/reference/changelog.mdx  |   8 ++++++
 6 files changed, 49 insertions(+), 9 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index e377b2badc47d383c27156950fbd2f92204e2466..b77d9cbd54867cfe2dcbcbfd13340f054772431e 100644
GIT binary patch
delta 4205
zcmYjUZE#f88Q#5nciFsXNG=RXHevS?67IR=3&;l_351XYNQI~boT(pmA}p|DnqU%S
z>{OE|Gx%8z+MZx%uyvxfL#Gr$cPPRSMq`T|1e`GlqB5YZ0s=)oTcFQ-_T0uFJG1X|
zpZlKoywCHVd+(0_is$>>-VOc@#)iNKb7%0`7UR}u$>&>w7oYQAm%U#GkNT&}`@Ra6
znh_)HPd@WiFmDXK_4`a3Wd(D5dpB-77sM}w-zfaT$!+J-?jP?zlDsWMKQS_&HpvW*
zH%!ZX-!U2^*8=ixH#~2wy`r_dwXI_{;ZIwey?#wcm%Mvl+PI!Xm;LiZS68Bab+Ns&
zBi?1VcXZp2#yb<M9<w_-ZCvicjdA=TyEDFOT~~ai-IjPbZpT3arF%`h)9y;FZU^2O
ze`H;}t9!P+yt!`qvPF%}%bM!zmNhom>l58;$ZqWH?C5NWcef_mN;UPt#jWeQ*F3li
z(7MjJEn1ouHrFj%zO?bdB~2|YP0b67?GdP{`JTGPO${iEeuTCxt6SVyZFj}vwtQlL
zFk7CO5{~)lH$~xB>d^<kYD6*JPC;&q!C~1{FAQ)vt%1@h#8(4~J-wc0sU`+3^8>jv
zOx4j39Ak>UCx{duI3=Z2r#K<Y9Fn)EQGImCF-kQj1kR8%Z93H`&M3?LP`0Ph+}MYX
z;cCt(a6WX3OX%Z(B84sUK=PwBI^>TXaEvm|3WIgPnO;txq;yTQ%;Dtj(X`x%4Ug26
z2G%gwbQc-sd@FR!@qI1J(&<j?m=n&XS~AV~hR+HecZ@IPOX)PX2mi8p3C6MM<4#V@
z3(=F~PW~hsle!w_+X}vP0+c~vriVACWmx7Hj#)>Ul;$C*;0tGBIax#=WcnDJTT7Sx
zssOBW$}tKf-}r60WDK3JMMQd4KYD%28J+2cifh?kh?-70lM3i{KN-O+EA*}7>l5;q
z8T7j`-#Wo46{Ce&*rEBIEXt(P=yzV90iv?+xX&eugT$xh`b;W|o_36BoF6y(!8z?z
zR8ocFAUY%8&!np8nUOpOqnyW898`2xW?NJgJL{>HWdy)E%W7>5D-x#gM)DyGU7B;l
zF;cF}QYO6Nlvn7*O{BWvR4!5`#8o!o4X0`$6{#F(%uV^$cq)nBbc~dbvkW%jP4;oS
z;=qKr<i+u{*1qK!Gjv`y;Vox&HNArNW0P=UuaHk=(XS`<ivJhGHtZEB<{nt5-U@9H
zzTXOeWRdL6pmFlfY?@QJL4<RWGho(_vO>=a<5$9@n+A<SyfG~RTQQd0o=uPYtDY0)
zd}Wl>H6(vtm}`H8V6!g>v!3R_67}rKeqp>UvmC1GL5PhY=GB6H6`kl8dHG(5d;3M<
zWaUg;g){qw^Rh@elL6(-O+q_UBdB4M(9YBlJ9CqOGl$uk^@iUH4G6<{Rp#c>r#<+a
zvL!B{paC&@qOQP?f(Ass8gsr41q}#{IgbiL6f_{pUqwMY7z}Jov#|VTVNRt1Sl4W@
zLazzmpU~iE{PxoL>O@y}XKQz&qkTal-nLR5khWZ#N59B;O@yP=Z=k#e_Vr-$dLE7S
z-!&+Vuqp;9iWwAXw|gOq859|*3BpyJCxgP8qe|g$V_LdmjIE*JR9f7>HTgi4e(LYp
zI+B+6xK*U3>$JSbts>L%LZsa)#x7BcHmDt@Gcs<mUWoUcjy-P`<=)x~QfX@Mpeq4P
zaJChCSNJ|c8~zor8xmc~N}JC5$Gj_oIck)%dCN&TEgz$t6h;9r9t4QIN#O{(7lzJ;
zYUVEacs|`9+a>hT3lN-LtjROjBuEJNCa>nxXn$<4(1$Njh6RRs8_!0zf$H|j`~un@
z+b0Z1FUQloPfRJI11S=wc}V`dfDXongrQ7{JNbz+#HM^dMZ&o5mnRBoD7If1lXNB?
z*ZpF$L-XK)Mk{nc_&$+Cld0A^Aj0F-EHv^g92CZ3o`sqo{2Q-Y4jlVDD6%GaA!<D+
z?1{>BxC+x96#0ks6fmHs;E*>38bJkzyeZHSPr)Icg8Ly!jurY;_`ZN7&2~eFJnYai
z>r)XdP<rIB9>c<@l%<(eSbz{UAx@oW2$6l550M$@W)2H;MD_`q6+I%1nW_f>!8szT
zYt%C_hXwdd9uYJ*`kBy27C=S?j;whq4|aM~R=6}jdQ=!yIuEOIRLq*qUBg-s<(PcM
zrP}B*q0e)G;2aY;&np!NntU!VxHKdBxiD&U9@gY@Q9F<76$gWUTrQYGjgyX#aQFy4
z&YXv#+X5?eLioNxhaQk0I~0+Bn?j4N6CylO3Alg-JSmK?Q->Ksq(q!LI}oBPCq=$c
zG9tw0PKu&pB_l$}cv6&ntz~3D$#}|>Q6nhmlqaKxSjJN<<9U8KMy$|j;rov~Rz&Bl
z(;^sC0!CQCGY~8#AVO4wxJWevA@ZIPrDar&W<*%P?`2^L&53?L!eIfwXU+u0L3B>`
zmQXBu4#v=VSio~)<}A&@9?#1?%sDTN>6*g=o)?u>RG{)ezzgzv2~Cb(@I;O%0WYw~
zcPI`7yeQ|E(vs*!PvnSt23};5Q}v+RKgd6pVyz!MLq!Z0@CP=Ot@7Xzcu9U!O8L=C
z-iZ-0_z8H4PmDsv!2x$!PA(%SdRZ9dx@LY2yDX|^Xb#@OuE>X(b7f@j{1SGB_dZeO
zA<Mif|58SiqF05Hde%n_0_Uoj;q_;<WnPmP%24w)VU*~#MuT%rOr5Ut+-8~AW$9F!
zWM3cI*KOcj7qe?<1&q1S3f&aGr(F5SRB9c2Q-t%BAs4bCdtKv6S7tj@*@GB80+7cG
znFt|suRB2<QXE39UKfWHKg|%rk-e^X(oH>H8BmVwbM@m@BdDa$)sI&Vu_OCjIP#(i
zN9J0g7hT_LA=e){W!m!m--F|1#+Gm>xoa9NHLMq1?a^HJ=u58WQG}=uamu3zvC>N}
z{Kqd~x$Mz?xvGMSqW!M+A3$*WU1)$;UT_d?lG`e%F1E?lXFotjU4HTACqyov{R7D{
zm2|g1I^gQ(2vD#FT)3i6k>JwJ@`);{k8O7Kah0oFy4i)h`cj!-(=Exbswm(u*fO#n
zA2eHdy=G{&$O^sg`u>1k%+syNok<ne>n=p&*Yrg!+MsK^DO+daH68y_Y5~WF2R*eA
zqU=FWErd{O&=qfLwHQ!pz2T{)5!CXAr<R6Ttv6V$J*-xq7259l-bI0bHtl3|7X8ED
zV>haAJ^hup^sajTEc8AGyVoFC-})H7DdX*Sq8lHK_!?~O=I=TFuInncTgk3ZeSWsY
zJ0DG~h^Ib66YVS7)~$@MEF~IEfnXjsxZMp-PzP2Xo8fK9ksr0?v`oq`00IJ_)CUwo
z?B#9lE1wa0?1vq)xtf;5cDVZU2_QH-T)dD!$4}=xmVT%FYc;(P-8n*1D3e+h2aSD4
z#xYv4cU(P`dCCs&xKpRmeGsw93hi=zd*wfC=-#or+;BwATN6vS+coy+c|(kO0}xU3
zh7cw0c5_n?1cX><w_8xC<_#ef-0e=@qZMR8DfphJphmET_dEqP#0tI#1s@8n?d<68
QC_j8TP#l&&YY7(p51zXUWdHyG

delta 3894
zcmZ8kYit$A6}~%ncYW`10JBD5Uz@!bV|!=u6C2FS*nmwSO_L@{=ntA!qN!S;wjl~?
zl&Wfgmc}Lz*`y`Y$fQbW6-e4p6B1pa0xE4N5Q+CA6w{VR0t5n>1Tbl;sNb2Lm8<@^
zlE1Uxo;h>A@64>9Ulnfsk6gLhS}j&5SKIG6&psqxKc0X7A?LH_tlMhkznoLadYYux
zo^eXm!gG#i+4&dFIOU`0==#xA;5ns<tzBEMJNUWy72uc3Z@r#=WUO^CU*ytP#HcA`
zJ7b0I*?$Ve<ceywWPd?%>kpSMU%vFQ@8y;~kz4xMlS_WE^gBc&$YG+TnYA$#3>zA0
zhEC&n_IC9LqFMg-Kuj_m2b}FeT|Ld!9M`jVD5sD*{2hU)Hyjt79l_)#YSo+q&)%uN
zTS#r$oq-4qrvRLtL2Vr!Olnffvv=qJT1bbj?CwA`7*-0b-9b|`9kn$p?b!$NTSw3$
zkv%Y6QyQ!TT+;(2?0KGhBuJcAK@oke<VcVzp?0$Ec_QJt#{zL8urm$0hgI*>sWB=D
z$ya|aB6kIzl<<<wLr;zcrP&xJ8CFcBQPI;Br>Q&<B&mo}Oiy*Ci#+>yV9%w|l#U~)
z=y))pnLMI6WG6V*)=sx9T@cn82t-xpf|XPAN7G;@kQN3nSm^ygP&nEYVQH?Hiy>+n
z2qsq228)C<&U4QMi93On`6V)~JPY%*RS>E59zErq2^^nl(YtYIfPEGkDXW00Dglub
zIMM?U6`y52>NFV-&#7g_)Zm|klXzWZu)sMNOqoh-vvC6GyxLw&E&lo8JUYsGLd`*?
zAF84;RFnNMR&|_6;>{0P)vlB#!LK*-i^rgQvu_5X(X3{Jbu(z55<{fA8BASBBgw_$
zb`mAt3|baYjn09F-BPcXP@R7(5RswB2{!93HuPhf1GC;%S4!yd-0eV2GkMvpw}Y9p
z=vR;hiQ(3vK>ehY)@6r=i($JCaWP+q#X3Cqiy-l$YRJ%{sxN|68B!(fjsnkJCB-kK
zO<xKs0PadB;X01x-^kEUt(Kojd!F`9^b9$FF73zvCxSh$mUaithC@2ovfWZVt44*?
zvH}qG1M_MQKScw&WqCym@ou-Qs@6uuQy8^d2G7dKs2tEnT_cTAO$0Tpk;bSd#712s
zVbl-Us2#%c+#V^!T2(xrPJA1GMlQtz6x1UNCzuM@r9HAjp91_E3hI$K1$c4*QBaR;
zUW<ZwPB_q&_ON`fv>WNyaI)R$xi87YZ`Hj%siK!;%BQsg6?C$7`|_XqRBSEklOm<p
zLlo=v$@GXAV!b|D6wM5t;za3_-fX=Z!>;s5%_wfA52Cbqe}feFXZETuucxc?D|1wD
ztw1DRfH$;3rbn6uctacHXfK9XV1q2aPs`V-w=<F>W4>yZ<PDC*1~<s&xC$N8Y1;3l
zp(Lia#B<-0iN8oIb19kYT)JF6yukJH?G-d&d2dOlR1a?ncVM#=VKlses0_H0OK||P
z%4QizS_})9Krp*s{iu>2$@WWgC?g0?Kg+QOn+FN--TYuB6<XPMk=bO@VTtkmBTqw#
zK&{(Urkb{7w@DEg63_28IjM#YL?q1b4t2Sj4rO;pq5X(Ad3<-UAK!~e7|>nn?*aWS
zyGx3RCKC_nE?FJW9LPW4b9c+c`)a48c5k;#jn!i?pT}U26#IA#T36t&vHY@)IQF?m
zjvF6C)VfFJCTPFmDg3raR_rqazyUn~d*cBx5mc}@9sm>K0ocm}@CXDd_1yh3aU25O
zpX*$ve%G5WQl~=d^!7`qQma$S>Ku?_YNQSz3ImP~GC(YGK;rC}hL)DHItSH{C(#W5
zpcK<}BM=1Vpq$mJugp?b;gC8siQ4=_(wtNXa#Z4^nxpezyN6Y64bAfpOVMKTur!C|
zjG5dztOaF`sOM{_-9IADF^(WOM<kB%shR^}j;fDqXqtaiidK_{g*htQ=TL{{V9<}L
zwpyA$@z^kjPtIe^`98$E+jCFK#6QrcZ>raN)5U6AEj{F&l&J|?#k*O>Q&OCc4l_Wc
z1dh%QKy>AltdLquKy2=mtf|#n0z%7EvhK9ek^@@HfmlluK|uqtmL|kn4zQMkd{<^X
z_nb_8>Y~iExGZ<>b25Bc7OF4n=)F<rq?6T(W?0el>To^P`{$*o(M>@R`OnMx2AYMY
zWLU_L)c6LP?SC}PVIe<a&UnoMx}ctFpsarZ1~GY9$P04%48y@*FRFK$b5V*W!(kyW
z%Bd|>sq;X{OX|}Gs;;^ei=ELzUShHD)f@<U84oknxd+s%O;n;5HKKlmqWe3eufxkM
zd{i40xT0Qb#JX2vlVt>pdWB7v(>ZY)exm-_NEQAk@llcyd>MYiM@g0D;2gZF{K*vf
zSEXn+_4Ak8RoODlaPZ-FO+Ct-Yr}ou@3w2)hY30ldG>X+X);apuS*eK`x!ytT$j`0
zUKM)wp!#?+Y95rL&a71k&Y)~;GI{Ru>>H}Oi6-W54DahMaBj$%t@J3&y1;X9$;7{<
zTG~WQyjwC=u1&gtO*$mS=aESP(IVh-UdIN6;zM%0KD-!0xFJ5g_<{q3Nr$BT+?bRD
z+N5`4lbQ$$xf7ezgxI8a*rcD?Flm|RJ`*Nh%CBvvCxrJ*XiQngrtAtuV|2^_q8#AJ
zoq$N(6~cM^<yFS+>{j1up&GwCG|od1obC`E$2T!JKx@>-7Mhz~6PhakL5_y}WzH8x
z8D9ZC`GRTmpyl_3<~l(Xtey}an5#+fXRms4I(1}wLvvu2X@B;H@Y1R%6AZd8e{wn{
zt;%)7>+w;uj@P>%$}IHUm&3$wLMt;Trv~>qV^r}>no{y|2#NSRej!WL7m8QH|ND+#
zfhSN4k0P}I(Sg3us0E09^o2$(K&aIh%2&eZ`-lTtt@WY#J~9y$w>~uAM<&E-tq-Br
zX}-YAJ@@r6@p~5~?@#8`)9*Va`TAM(j#Wm5lyu5b#p|InUY{%FEa65pF_I7vPl2P`
z7Z9s$<W}%Nm$QVM)W+F#Uv^Vy{v|>XoJ}D<o}c4;wVc&@Llw8t3;r9!Bpqea63xNZ
z-&8x>=+W$(p_!U;t>Bws<7D~<`hJh+ZVnS$)tq)(T)a6<W%NMY!`<!=#oM7O3Tf&x
zVDuP)jGhQUl-M7ZMW;9*7U~ZxtMo(wqR0JV_1mV$9MC=968G3du!Svgk4=bsyhS}Y
Hhi3g3X!n_!

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index d5e88154..ad80ce74 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -1563,10 +1563,21 @@ const (
 	CatalogRejectionReason_CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR CatalogRejectionReason = 1 // caller is not an authorized contributor for the domain
 	CatalogRejectionReason_CATALOG_REJECTION_REASON_TENANT_MISMATCH         CatalogRejectionReason = 2 // tenant_id does not match the authenticated caller
 	CatalogRejectionReason_CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED     CatalogRejectionReason = 3 // contributing domain is not verified
-	CatalogRejectionReason_CATALOG_REJECTION_REASON_SIGNATURE_INVALID       CatalogRejectionReason = 4 // request signature missing or invalid
-	CatalogRejectionReason_CATALOG_REJECTION_REASON_MALFORMED_ENTRY         CatalogRejectionReason = 5 // a resource entry failed schema/validation
-	CatalogRejectionReason_CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN     CatalogRejectionReason = 6 // an unregistered vocab token in a restriction/term
-	CatalogRejectionReason_CATALOG_REJECTION_REASON_QUOTA_EXCEEDED          CatalogRejectionReason = 7 // contributor push quota exceeded (per-caller)
+	// DEPRECATED, never sent. An Exchange MUST NOT send this value. A catalog
+	// call whose request signature is missing, does not verify or is stale is
+	// refused like every other signed request: UNAUTHENTICATED with
+	// ErrorDetail.request_auth_failure (SIGNATURE_MISSING, SIGNATURE_INVALID or
+	// SIGNATURE_STALE; see RequestAuthFailureReason). A receiver treats this value
+	// as unknown.
+	//
+	// The number is retained because removing it would break the v1 wire
+	// contract, and it MUST NOT be reused or given a new meaning.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_SIGNATURE_INVALID   CatalogRejectionReason = 4
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_MALFORMED_ENTRY     CatalogRejectionReason = 5 // a resource entry failed schema/validation
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN CatalogRejectionReason = 6 // an unregistered vocab token in a restriction/term
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_QUOTA_EXCEEDED      CatalogRejectionReason = 7 // contributor push quota exceeded (per-caller)
 	// A single entry carries more license terms than ResourceEntry.terms allows.
 	// Retired on the PushResources path: the cap is a wire rule now, so a push
 	// carrying an over-cap entry is refused whole, before any per-entry
@@ -2032,6 +2043,8 @@ func (UsageReportRejectionReason) EnumDescriptor() ([]byte, []int) {
 // validation step failed, so a refusal tells a forger nothing about how far its
 // request got. Distinct from RetrievalAuthFailureReason, which covers the
 // signed-URL / proof-of-possession check at the delivery edge, not an RPC.
+// Every signed RPC is refused this way when its signature fails, a
+// CatalogService call included.
 type RequestAuthFailureReason int32
 
 const (
@@ -11605,13 +11618,13 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x16RESOLUTION_TYPE_CREDIT\x10\x01\x12\x1e\n" +
 	"\x1aRESOLUTION_TYPE_REDELIVERY\x10\x02\x12\x1c\n" +
 	"\x18RESOLUTION_TYPE_REJECTED\x10\x03\x12!\n" +
-	"\x1dRESOLUTION_TYPE_INVESTIGATION\x10\x04*\xf6\x03\n" +
+	"\x1dRESOLUTION_TYPE_INVESTIGATION\x10\x04*\xfa\x03\n" +
 	"\x16CatalogRejectionReason\x12(\n" +
 	"$CATALOG_REJECTION_REASON_UNSPECIFIED\x10\x00\x124\n" +
 	"0CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR\x10\x01\x12,\n" +
 	"(CATALOG_REJECTION_REASON_TENANT_MISMATCH\x10\x02\x120\n" +
-	",CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED\x10\x03\x12.\n" +
-	"*CATALOG_REJECTION_REASON_SIGNATURE_INVALID\x10\x04\x12,\n" +
+	",CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED\x10\x03\x122\n" +
+	"*CATALOG_REJECTION_REASON_SIGNATURE_INVALID\x10\x04\x1a\x02\b\x01\x12,\n" +
 	"(CATALOG_REJECTION_REASON_MALFORMED_ENTRY\x10\x05\x120\n" +
 	",CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN\x10\x06\x12+\n" +
 	"'CATALOG_REJECTION_REASON_QUOTA_EXCEEDED\x10\a\x121\n" +
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 635414b2..815ed10f 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+**A catalog call whose signature fails is refused with `request_auth_failure`;
+`CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
+`CatalogService` call is refused like every other signed request when its signature is
+missing, does not verify or is stale: `unauthenticated` with
+`ErrorDetail.request_auth_failure` (`SIGNATURE_MISSING`, `SIGNATURE_INVALID` or
+`SIGNATURE_STALE`). `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is never sent; its number
+is retained and is not reused. The Exchange request-flow page no longer lists it.
+
 **An offer carries its price once: `Offer.pricing` (two validation rules added;
 `LicenseTerm.pricing` loses its field-level rule; no field removed).** An offer carried its
 price twice, in `Offer.pricing` and in the pricing of the one term it sells, and the
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index a5ff0353..251f3ff0 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -5049,7 +5049,16 @@ enum CatalogRejectionReason {
   CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR = 1; // caller is not an authorized contributor for the domain
   CATALOG_REJECTION_REASON_TENANT_MISMATCH = 2;         // tenant_id does not match the authenticated caller
   CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED = 3;     // contributing domain is not verified
-  CATALOG_REJECTION_REASON_SIGNATURE_INVALID = 4;       // request signature missing or invalid
+  // DEPRECATED, never sent. An Exchange MUST NOT send this value. A catalog
+  // call whose request signature is missing, does not verify or is stale is
+  // refused like every other signed request: UNAUTHENTICATED with
+  // ErrorDetail.request_auth_failure (SIGNATURE_MISSING, SIGNATURE_INVALID or
+  // SIGNATURE_STALE; see RequestAuthFailureReason). A receiver treats this value
+  // as unknown.
+  //
+  // The number is retained because removing it would break the v1 wire
+  // contract, and it MUST NOT be reused or given a new meaning.
+  CATALOG_REJECTION_REASON_SIGNATURE_INVALID = 4 [deprecated = true];
   CATALOG_REJECTION_REASON_MALFORMED_ENTRY = 5;         // a resource entry failed schema/validation
   CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN = 6;     // an unregistered vocab token in a restriction/term
   CATALOG_REJECTION_REASON_QUOTA_EXCEEDED = 7;          // contributor push quota exceeded (per-caller)
@@ -5284,6 +5293,8 @@ message UsageReportRejection {
 // validation step failed, so a refusal tells a forger nothing about how far its
 // request got. Distinct from RetrievalAuthFailureReason, which covers the
 // signed-URL / proof-of-possession check at the delivery edge, not an RPC.
+// Every signed RPC is refused this way when its signature fails, a
+// CatalogService call included.
 enum RequestAuthFailureReason {
   REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
   REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING = 1;  // no signature, or none that parses; remedy: sign the request
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 762f5384..3e09ac8a 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -852,7 +852,7 @@ sequenceDiagram
 
 The loop checks each entry, but the verdict is not per-entry: a push is all-or-nothing, so a single failing entry refuses the submission and nothing is persisted. `rejected_paths` names which entries the refusal is about — it is reporting, not a list of what was dropped from an otherwise applied batch.
 
-**Rejection reasons** come from [`CatalogRejectionReason`](/reference/proto-fora/#catalogrejectionreason). The ones this flow can produce are `CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR` (the caller is not authorized for the domain), `CATALOG_REJECTION_REASON_SIGNATURE_INVALID`, `CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED` and `CATALOG_REJECTION_REASON_MALFORMED_ENTRY`, which the envelope rules make the common one. The attestation-specific failures — a bad attestation signature, an unknown verifier, oversized claims — have no dedicated value in that enum; they travel in the refusal's human-readable message.
+**Rejection reasons** come from [`CatalogRejectionReason`](/reference/proto-fora/#catalogrejectionreason). The ones this flow can produce are `CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR` (the caller is not authorized for the domain), `CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED` and `CATALOG_REJECTION_REASON_MALFORMED_ENTRY`, which the envelope rules make the common one. A push whose request signature fails never reaches this loop: step 1 refuses it like every other signed request, `unauthenticated` with `ErrorDetail.request_auth_failure` (`SIGNATURE_MISSING`, `SIGNATURE_INVALID` or `SIGNATURE_STALE`). `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated and never sent. The attestation-specific failures — a bad attestation signature, an unknown verifier, oversized claims — have no dedicated value in that enum; they travel in the refusal's human-readable message.
 
 See [Content Attestation](/protocol/content-attestation/) for the full attestation system design.
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 07a9a600..ab663da0 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,14 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**A catalog call whose signature fails is refused with `request_auth_failure`;
+`CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
+`CatalogService` call is refused like every other signed request when its signature is
+missing, does not verify or is stale: `unauthenticated` with
+`ErrorDetail.request_auth_failure` (`SIGNATURE_MISSING`, `SIGNATURE_INVALID` or
+`SIGNATURE_STALE`). `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is never sent; its number
+is retained and is not reused. The Exchange request-flow page no longer lists it.
+
 **An offer carries its price once: `Offer.pricing` (two validation rules added;
 `LicenseTerm.pricing` loses its field-level rule; no field removed).** An offer carried its
 price twice, in `Offer.pricing` and in the pricing of the one term it sells, and the

From f803e8d1f1bd039504243d26a37a6170fb45237e Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 23:56:56 -0400
Subject: [PATCH 094/164] State who a critical extension is for, and add
 UNKNOWN_CRITICAL_EXTENSION to three reasons

ext_critical said only that a consumer rejects an unknown key, and
only discovery had a reason for it. The file header gains "Critical
extensions", stated once: a request's ext_critical is for the party
that receives that request, which answers with the
UNKNOWN_CRITICAL_EXTENSION reason of its RPC. ResourceEntry.ext_critical
is for the agent: the Exchange carries it onto Offer.ext_critical and
does not consume it, so it never refuses a push; its field comment
says so.

New values: CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION (10),
DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION (20, every item of the
request denied in the body) and
USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION (6, refused
invalid_argument). Discovery and Resolve keep
OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION.

The Python and TypeScript error-detail decoders know the new values,
and the error-detail wire vectors are regenerated. The
extension-profiles page states both halves of the rule, and the
academic walkthrough and the what-is-FORA page no longer have an
agent answer with an Exchange's absence reason. Both changelogs record
the change.

buf breaking against v1.0.0 passes: the values are additive. The
generated code, the descriptor, the SDK types and the JSON Schemas are
regenerated.
---
 gen/descriptor.binpb                          | Bin 671884 -> 674142 bytes
 gen/go/fora/v1/fora.pb.go                     | 135 ++++++++++--------
 ...a.v1.BrokerTransactionResponse.schema.json |  18 ++-
 ...okerTransactionResponse.schema.strict.json |  18 ++-
 .../fora.v1.CatalogRejection.schema.json      |   5 +-
 ...ora.v1.CatalogRejection.schema.strict.json |   5 +-
 .../fora.v1.ErrorDetail.schema.json           |  15 +-
 .../fora.v1.ErrorDetail.schema.strict.json    |  15 +-
 .../fora.v1.PushResourcesRequest.schema.json  |   2 +-
 ...v1.PushResourcesRequest.schema.strict.json |   2 +-
 .../fora.v1.ResourceEntry.schema.json         |   2 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |   2 +-
 .../fora.v1.TransactionDenial.schema.json     |   5 +-
 ...ra.v1.TransactionDenial.schema.strict.json |   5 +-
 .../fora.v1.TransactionResponse.schema.json   |  18 ++-
 ....v1.TransactionResponse.schema.strict.json |  18 ++-
 .../fora.v1.TransactionResultItem.schema.json |  18 ++-
 ...1.TransactionResultItem.schema.strict.json |  18 ++-
 .../fora.v1.UpstreamRefusal.schema.json       |  15 +-
 ...fora.v1.UpstreamRefusal.schema.strict.json |  15 +-
 .../fora.v1.UsageReportRejection.schema.json  |   5 +-
 ...v1.UsageReportRejection.schema.strict.json |   5 +-
 gen/python/wire/models.py                     |  11 +-
 gen/ts/wire/schemas.ts                        |  26 ++--
 proto/CHANGELOG.md                            |  15 ++
 proto/fora/v1/fora.proto                      |  44 +++++-
 .../testdata/error-detail-wire-vectors.json   |   5 +-
 sdk/python/fora_sdk/_errordetail_wire.py      |   3 +
 sdk/ts/src/errordetail-wire.ts                |   3 +
 .../docs/getting-started/what-is-fora.mdx     |   2 +-
 .../docs/protocol/extension-profiles.mdx      |   9 +-
 .../docs/protocol/walkthrough-academic.mdx    |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  15 ++
 33 files changed, 315 insertions(+), 161 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index b77d9cbd54867cfe2dcbcbfd13340f054772431e..3470373cefc67543c16c68d01229ab4d823e7b81 100644
GIT binary patch
delta 47625
zcmZs^cYqW{+CRS2)6?D4J3D!Hc4n8E9&*|Rkzm**h<IYcbm!^aiHNA&o#+92-h1!8
zOHKlkw8%)#IW&SKB`BgGC`VcZ6<tLoiHHaC{XA9G+nm4OfAc*3JfC{1>Zz)yo~rH{
z*}u{8agF*7@(fZ2c?YR$d?OxGK00lWe8^`G^t@%WgT9d0j5akJ-rniH&K>SyTlV<s
zc;fcF!@k2lWwmPe|J3)hM~${IZ)6Xg^rhLmdwgk+Y5()2@6WnA+-s&^pKhdW@7KO&
zkSaHCV$Xl=%dlO0e8rm9__)U`V*j_>S7dkj#`l=d{A6Xs)T6#s-e>meGrp_7f@w26
zrlRFVwKGcIQhU=yUz?jeBbg_nbzy&d#)$o{k7-&Rtmk_4>C^3*9@gJ`_I=js*2{XL
z$IE@6upa8$`^D~kt!{tq^Ssr)TkqaId-UN?x_0l~vv1Gt-TwN-Emq%Wdsu(z@sB>%
z^G^#c)9Tr`4~uL!QkvC}o-%8IzgDHyp_kR;xflBW!}@E_K7CD;*sWI|tH(<{djEs;
zYt*fteXKs+p6+4wectN%Ot0sA_bB5Q_U`ew7kl*S+W<N*_pLF2q@RAiH@D)2ZoPrt
z_t|cJt=>Jl_vrZ&td-Q?UaW*}nbpB`9+3(JpL!lby`JxDz1Zui9=-eY?bhols~fk6
zEGJ8?Ufs|*u3$Gb$n(9ZK*HiSHARa-tyiDF141+*Y5(@VyYK7r$bDTqKG^x;&MY**
zC@6<Uw?5EDTcMGx2k-BAi)r27vrqTu(GCyx==1!Gy}P3@f+Om$FZGbHR+qck-$v*O
z)_;#LL4BWAZnap4dyUvlPPtv~HbvQ@O?&q3@tpNkk6t}{JZ1Id_F7Lq|I|OMZhb7*
z4{O)H)kJ-}ckA2jug^bYz3^h6XQ@Sd_jvlnKG5UdP~(&-lMBB{j>7JmX0+jUR8sdi
zrg!SqxA#BFe%(RTzD_4~db#_v-FiLKqs;2;G%fcYYB1pTBF}gct?u@Ra4|=(#t(Z^
zH^4_KyFC4LkKX@PX49HJFr_2&BA~(hQgl~M&v$>mSDzQ3>wyk|f7En+O?i$Sck3R1
zefm1f$O(Gqph+&|bS+F0%|}mpi?Va=wEOJ~rP?FW&>6)@n%zxR%Tw~A>Us8Pd#y*a
z^NN-<3rrs|6>ycJdJgF&vUz*6%Exs)QMI4f{;s`tTq*14)rzE;2U`8SsU{8yt$yCt
zoy~4s2@eN(+2xMflg$QswTKi_I6GR)A)zzK+wfL%w8oV{j`!LlZr4KIvhi+7UTBT?
zrW!~sFBfak!F=DtwbZCOk?s18_Q9<ay;@cZsnD6|wQhDu=uGt9-qjo>bbL{Ds#ocr
zuCzKn-|Oj~y`N*@LH-2$;!f?kvZ*eL4=7W;R$GbU1Ikoy=Wga$(K1?8oo`om*2XJk
z^SxS7N@-A<?+s-f5=!&EjczuVh@$nVx`egAM_blxiB~I>LOOJoc#~xg37sY0n;$S2
zs-~i19$oLv+hNzbS8J$*)_aXw=F_IC^4{FY9`2$&d&5Sr!rPdb=&z05C`Tp|P#e9e
zv^fjKgZ4zVEna0i`>u;N^FjPFsYv3ZNw#?N9TX2xws@nwv*{^Nws?z6%#aW^2&L9`
zuh)#2etK>U^+!>Mt?b18TKv{+UiB6;X68Fj)FAZV_Nur3Hxupmj#s_Uynxk0g<*TV
zc~e-k2ek9yJzgVWzCjjy$Y=Mm8y?hVmG1Q_1~(T>*tgf~4>%<7_j*HN^B-IV4-dTl
zkoM2g170OxicpOXcmoNCgvJ4HQOaz}HDLQew%{SHtm{FiO+1Q%HaY0D2}mFubXpc9
z5DrqyQUiiCh%CN~w+NA<MGksPI-5%sUI-M9*{vSdnt3XYxutl~49C3rmc;R*lw;o9
zO%6#)-doGf-31&2-hRoR`CDy|*7lN%p#tNQH@}WlLSurg+teX}amm}Pxw#mA3sX_8
zA*#LjkJ=LD_93ct0kAn=x&TOk3{j(XB?vkH5Vb)=bBd^p7S%?o%2-uRk6_O+|2+2U
zY@?7p@`UzSCHPK1X#g3i`h{D06b&FF)p#NIBarZ;k!o_Ride-oV3~$i3r4k3syasX
z$(H0i=#54tA?A0)w5ab@Romh*v%FFmR})mFb~<9Q!v030l}FLhC}0U61_@IpsHqZJ
zA03br)NIcDMYtKdZ?eif1N@h7_b3LMd9vFw23lsaTGKKHkS429KEh#*0i?-lu8uiT
zfgdYTZI+t%u5CZ5B|VW@s!=2ySs_QBtFjxO@=s|40+4f^b^-~=xvKPMkbs=4!k<4O
z<H+;0MXIu#t$a%RxDvla^MVhxMNadAgxVrCp5V<363x3vEnF^}ml(Wx7pv+r*}Rem
zy(LcbN*0=TDR15iZUF|!Dpe^-H?x@fw03g^2r+diih_1trRIlu!-9lOtJDZzU0^y5
zlT~WE*c>UU0&*SupQp9a73*9G8UyRpd@(qo0*G~LVQq;>GyXcYUVZaNay>;s=WMn+
zJ)^zsso3md&=}aP=8Nuz5HL2YDKR8K0%NmUzXA6aKC-u|EYjadw*mppZH}XWgyuHK
zQ9wd-TaBae+U}B$0s^+|a&6GitGgUW!BZgZavTLDkam%ytfvXj8`VBg^S)(6{;b)d
z4^$&+{uZ_KiuvxIzi5w??sYmEOd#!b`~xJA_L6@*z*X>YKil^g?V*bOjxAorgIeu(
zx&<T&Io$#h2>Yp9hN>I_{d?4Y;;))tsW|FlP}d$+^TizJ<z0JJE#_-JETyhJs+Kh~
z#|sRQr|fyXw1iS|%Eh3*J*DRJMITDkx2M#Mn43V7l8U)$3H7a)`u4Q_(+gUer|oGM
zgZlQgYX|l1X|<Rym!t!X)9MW^%vaE^J}j4K)x7_(r+RB6qGwfKoZ8jLSIcv%QiplA
z>i4nx`e<4PBp<`{5cNN&=4zV{b6MbDV7>cjzsp`wm11&3$WX*{LCs{%Iq+oAAb(_E
z_0i^KepHo|6yjX9q?Xy4%fPaq*y6t0-I<?MB`0Mlp!rFyThDxk%b?0Xv-pczPwQvb
zAPQi9CWAJ6Q74T5LB70Y_OutZO`hl=pD)QP#TUoHKBWP#R6VgQg60Fq2NEEIeHb|H
zP>_cP=1?E|^zT}GYp74*@g8v@G}PCy5s!^PgB;;w?OxVKTO)i*eQq<joZYCgc>(<d
zDO7BX&;IUZt*<9L#;0(XAU4Ft_}~(cb1779oR9VUAFXS4oKNBX1tF^2I3M~8-U||A
zW`d9X@;};x*$J*$6njk|vtGrb1u1yI4Ey<iYGakQGki)TX%+=rGki@;9TH~E@RfBi
zgQiA0<ZLs1&Dxv)rY^%85LM@}w*RLc&d%{EH%KK4zUKH^wlasnjUj}UV5!}@QZp25
zsoMYsq?Y>70NZHrs!?sVFK-KbyuY?JwAzPg1x<{(33L2fRysiIP`cKq=u`kPVZ~aX
zQQ(j;a;+~MF>mH7c(|TT8KB)-y53cx(YoGeh;>utqjkLx6MGM?0#i0J??COD(v3dh
zo??+uH~LD%dW~5UrEK(Jy}qBTfZEL1K<&Y{n|*TTRuvkWn|(5D0Et33`|389cGA$?
z>?<uZ-_cNGUsT)Y%lpD^Fi5-28`|eX6nZ0&eN^TB?B$_atJ3{GxiEnVsQo^_n2bRJ
zYQGQhV@s}rho7(`L$%hWpEy<a@d@e^pAqAwgM`W_zQUy0f~%m)hgiiht!3#USA{(K
zkPkB_wX=^``H(MBXg236065B~57Szd9(7fyjz@ji5D68k<53@`L17sD^*FmaOlw_n
z+-W7BLX*#NU%qHqkU%)@t0yKOkU%(2&b*A)Hy?TP=j?^y+KP6cyATvweeRP11Y`j5
zxlhLEAOZ2Y50T__jCGWzeecT~ZrEK%Xj47)z88+;RW&`TUGyoJeX2RrYwDnf`n{O!
zh-X_PwKqI>{peHcm|;Xx;u+fPl285pbsQA*lTU4l$_u<9nleID%|$*34-*aN+1QgU
zP+AYw)JCp4%@o5lwFd$-Sp+)CH(XO^d(3e(eQV?lV>G*Zj282hjnSk#fQ<@|(PS71
z5_XKy;Le@65+07%Sfg>;9Tnp>>6{whk&M@5n}Os~QPFWA0Wn@f$89t@225LIFBzv*
z_(~UPil29{#uuzb8tkRs1_`A_RBkh_18ONNoT%MUx>Qp{_@ePauvCkPa2zBFX?5zF
z9k>b{WCiOxQR`T~!nKqfWQCS5;z5l&$O<jnP!>uKvO;Upln)n;{9`q{Fi~q&vD!tT
z2xPS;T?{g)>uRlDGl@X{v07_!qq&e=OrxoAJ?k+^TikxV3!xEL%jb&~$pB)#CT9bX
zfLO0#HdyNC5b&klnzGlvf3mhjt;A0eQEEI&-tG1jMajFV#c1P)r-&$bYlV9?5wH`3
zN0jet>W7*L*d-5odted|*d+@Q<p&xC?8h?P2F$bLbtRep!2ah9?a@#f2*(PFu*d6u
zF|c7A(8lW+*!x8T_-V_pEZ06Ro9OEJp)*nUi})Tc0G)|C;(NYdK|4j&={7o|mZxI6
zUgKmYx?{Rt<76f<rt49@P@}pgFsAEu>zngMx%p9bHhX-fwy<Kh3y}|q*)BvrAZF`P
z$A9txF<Y-w&)jJ6N(Z8<ZQs61t57R!7bAeqv-KJe3IM~_vm(yYlmIYny{x&ph2ktt
zDTu1u?ak}74oby#7oz|e+w~eBDgefIy~c+MfU#X~(b7CGsuD!Mvhp{zA1Zdc5J5of
z*5y`IQ-Xllt><o(Zb+N>-FoYr%wLeMff=EwT4g`CLF?yjU*%$ifKjFAJ6#t7MwK3O
z+%g1=Dm`PF!)ZH<Q5V&&=*l&_bh9>0tHe*SslWrkT+#DI8UrL?uINdpbHjkSLY*tz
zG7Pu8qSwBri+lvcY4;74tGe2ZZzClOv&1jNqAjDQM55{dgKrr-z1+7)uRg4#zY%H$
zKFY=ev3P+5&;Ubj96_S&0fw`2L;!+G(cl}$P85w0Ra1*7d}EkV<6dOaFhgz}Aq=Ep
z2KEE5`!VlhNX|C$Uh&)Oc4`yU@N5G+#|hL~I?bvJ*kkW&ua_@yu)zfO0tXu;uooCn
zo&X~iU@tIg*D>$p2za=dHQl4#Rk7Gbpq$TQ7lCHj#YR+Y!gM~vE;f)M86=EA-IlY}
zd$b|t%UuYX&X&6nv>-1xqN2BTKHn}k5HbIT8v&D6u@^tkI#;Z65xhWH<s#7fyvmSE
zqt2(_RR)&E*@yyBEi~`j_J2Om<|^fHyBG*g)VEy>TA|-|ni)DM_iY2A^a~sUvOC$a
zeOm8|oh||`&^uiOnt*p2B2kG_X#(D9SUGc;&LQ9*hwN8A(nff@A2O6UA0IlOat|2^
zG4F$f(jf!$KCL|<G2I<9O2ukS<WPT@IAxDujx@OdI7s$^_waAcS44dguvXhIf1-_2
zI##>Z>ae!jwU#m))o$0*oLx;_ztPLBMZxC{rG9#em+jf4XY8jBX_Gt^V2QDY85H$7
zZ^+#@NWh&p3dJM{5^(1Y>{i|vaF~3r*yTsG4?JzJxEOwzbj3A^CgUq^7tmyUg*<(+
z@Fh&f{r&7W$FwCC{rxp|&}7`-FGmZe0$}v_NBKSl?L(7se}BWqeDLZD=Hfwqv4aPJ
z8VvHw5epKUgZy&Df`sNEzcXTW1#|ESzex3ffJ=>VZ3w`I5v~n16OZuA5es1;jqsx$
zgM%2cm~|HW^A6i@9oJMnyx4CPn;R$$GHAfAwD+CT$~|Q({c=?U7ho&>G716-u$6wS
ztqA8x2~Xd&Z~01_?J0ZHRiaV(rr#grZUiAHz3Goc&1uw<25rkWvHY*K8D*RNaw`BP
zbT;`*c*dM$ptH%}xQR%?7({MkhrZTEmu+*)p@Fx}FEdb(At66946l*P8#M6t*%Q9e
zn78FVr=h`x(msDmOgbQ;w9gOEdsoy5ZF$I#75+^xi+rRP*?<3DTjFUBmRRQv9_SqM
z%XJ<k^bh&5&L1wsrWcvCv1Z<Drv1=a?UDTGShxpeYZ2$8dB>SbUFOlvdi6!}3^ZRH
z=qcJ{oCzxi(^i!?#(2}#uV|Xb8gI(&JlGH$PhwkPEW|)gFzwQ-+BT0h!Blvih|T#B
zTaR2k4AkB*^G@2qYg!wn@C_5$h0W*)A5YuNG?hBFmwVWjJN(7$C67L%HaH@~fak!O
zX<`-{FXRzv&oz~utc{|NtHdvnWk6yEa&t}0nONEYi~fe3wbS%c9L^aZ4?#1{Gu0bu
zW#gRvL$DE0=bNf^Jqvxaz{G~&Iw@c;G}U_7vw*dz@>e``_Tpc$(3MMm1%@%V)KqI<
z4~FS#nW^4zJqxqX@?RN-8Dxd2HgKgXhajF*SDI==mp8<V5x&Y)>tD~p$X)#_!w?Lu
z`IQu6o3;OiKg5ezW!<mL$LwpHYF&b_bXpM+!Fp58U0)=Y_cwoqAB(CRegziCX8Tud
zk%+2q{i;TV7>C!xf5Q81i&=>+nbS+)q2soi>dn`)&~e*L5zBB}A%%{6+r*K|b&BY>
zcdl=KNTJ`h|4I@4w!=h;bA=;fn5nx>WiPwar_ZUxFENgg-b10g&8#Io5z~gY+sy5)
z@kGVTJ@I|Q5=JOq;fZ@pHFG@+75czbv)8kL{UNzUD?WGtz28)hn=1Q@rnjiXZ^sBq
zDD8KRK&>H}J6>aiR~T`?RLdm1R~qrL>jInwBR+9`hqHiv@K;i3)qi6+G`SuO&3ee~
zNv?@zJ$!wUq9>1<YU>(B(UHeYwc>gfimWo#c4kLjZy=vAm0Go1Ssifz{rq!Qx0ieN
zxs^@P^&7Kzz#~xfHzmwYm`I;IfGG&6r!UOBZ`gObet+}}(--EGB2PV?!nDOF#kwNt
z1e&LAeINmG%B+<!EfkD|QdIqtO*Hh{nJ-O+M|{MD%$FpC@E9bhuh=0&&t<+cMUX>G
z;*v~`%b>ZcS<<i9$yA#P57r?=eO65}rCbJ;{F?pVuQ$tn?cz|Cz9yO5Q6=P-zBBVK
zvUz^JWAr=I7vojpsip5t%5GwwXO^jJ8IU}Y?88GKe2@9xya%NqUldi(u-i@jzRVd{
zhH7+%WRL`d45+hgg{eQ7IqOW!V&XqbGU#^5phoAIm9O{DoO5xgM(0STEtf%!&a*A~
zdi%_IQzl!H2!hOcl4;Fl;2{@St$==0=7Q6a$n-$w0?FLQWiS$dV0{Am?b#npg=aQk
z0Bs_EAQ@^IB!hl3^L}9m18A9_OkW{y8J=gkY${Df%iLdpmI2B4oIX4R!etZdeO;7-
zR0-vm`xfZ+Ge0}a449DlnPg}HA~O<I|HIZ7=xs9p!NN+h1~G|CGPiOWw9FM&5Y#I&
zSI{X^hFazd$&_;$w9HlZY*25Tz3Q|K5+abfN;1Dk(BzM5{qyr|wj-!NQonz`5dx4`
z^<(!lIA0l_ubSU@kc{%n<QC_#+d_JE%OUw{W1fo=&wx2JACn}dy95XJ4I|D^6gvAU
zNSJ6p9@c+WDkkR37!zFd%fx&cV}eBEOw5;i9+1G8n2$ZrSC|`tfv3~hYcc)n@@Xyv
zZJVaK5EP(I%a4j(08{`mEk9YrH(q{f!Z+B4xPDjp8!iIvn%-~`sF*kM<(>yBKzJh`
zd!FBM8$iuw?GyU%+s}3pyg-<ppHGeFgPpWw%+3$<LkJ>CCm)9pTPS$*BY4x+<SXm!
zLkWGe_euN|kv|>)W{qnIg>!52qhgnhr+`_LFBSkoLA<*rKesMl?6Qf0<PUs!ZNB=P
zxh;gwHKW>*{JbglPbqz?Uhhag&*pkn+z!*e&sWZ)cjx-iyQb`2;@MR>eU94lOg`cn
z>Pztq&2~0l?Q|Unww%jX+nWn1`CwA-UbENM*PD1NujR|j58$E#*PNCF38ib)lGI8d
z5sO^QFMdp*g5+DUYxyOQ(hSW7z(LX1@^8MI@5)F=?#iy^|Lzg<6$<Z7^p`d`po|Ep
z>7PB8-L<i<dMd#Xt%}EJ)xiPjV<2JF;DFo|gM?9o10uj9EVSz2fHfi@T9p{$=D?7E
z+MM5)kSsMwE+3FLD{7cP8x~M+t^41i=#}9CT&<w<K@(1>jS48^0!(YFcd5ir$5L{{
zQLd%rh@%3s|Dgu#Q32WiAYtjKKyF-(rOq9P(XOSO#Vvi+wNx^JHU^gFq@|JzOUII>
ze6wm&k(2F<P4!KlW|ISoCVP(jdvZV*?hYZ63PfY(tCTR$k7{!QdGFgN%k<Hn*qi_k
zT0SSg&xey}>jKK#_JHR4XWmNu6#EW50N%QQU*LfR-a5jgbP`BZbX_3+HY!RUNsI#&
zbK3#6DfblOe8gk7^#Ku0b0M&R`({AI+zt!9wjqFcsFHk4Y65IyK*XL73p3|i0nBjM
zNuhH#1w>5mNTIbh6WDc9h`F}})LJzxj7h+6z1~(nOe5;Hfcls@k!H4h>gk=VPb+<L
zmz@E5Pz5G&sr_iYfCSFY01m1oiQ%&|5akgLJ%yjr{IN3-Yh}_Ufqa_mcC$aW*4sU`
zJD@lyRMhT3P|S~z0qE`k=0^car)|3fsoP~slT#ot-yKMI<O2}$&H&sUXy3scN*x}E
zY99ykzO%2j)`xiNejMNjKwdR~S>|9sITBE@-0L94`3SMt!khFiE&m-*+wgM4BUpPV
zpgx3#Go&z1GY$vT<sP#EsuQ3&riwMaS#R`ARY0B(fQjl<1tKC#1`^e&3Sh;c>VQOb
zssd>-aS_R@Qxzz_omWS4D9ck7=y01^#>)ZXiGXrX+G1w|dX81ytef4z5GP>)-YX{p
zagkI5i4srH{2@xj`~lLsTU3nq3L5Z4Aa|E6k@|_}l}-eHbEmn8cIE-<scQSKTl6KK
z@@i)~02l669gw+OkT9$|5EH3vkSMr1fTIuuN`L_MEo)J(_iy{Hi$Lqrx6XtD86bQc
zkk`mSl1>0|?9>Rlu^_6AFUb4ZK3A?!G3t#kkc&kDy7Bb_WpaUP;u^887RY`i9$VQ-
zpMDoBP+Rcoibtr+!~*qR-j9NVew<XG4)dUiywHzo%L<fLz#CvXc$mS7XHU9A_xM^Z
zFTmD{hB{ZL&}c;g=2>zK!2#gP0(G#*+)JaUfIP!yd+*jiDz^*dWC|u)&n}Ry2NHF+
z3u0pN0g1ZX1qgWQq_KdSb^|+hkKVfbh5|**LtqlOKrZ7Tp|YU>%Q*EkNc8lEf=p*&
zsngRN3bJ?do+bg=(;Esp-C>TWgRuhY>Am)g_v#5>*S)T-)YE$lWO^M!D0pu{Qe2h+
ziGueQ;IfP;n8xVdf`-54Qw*M>m?*&(G<w+lg;vA@QaEUT{h;2@^Y}rx6gpo%SRii(
zK?tQBERZ*YK$21cj_^b&UX*gMphR4t!&6zx!Gc<y%|G!%Fhw3=yB^lNc0J;jL5FWg
z3S{!KfM=wR6v*TyNR)A;0Le>H20|E+^&gfsp#X+za-^WaL*@huEDC5vthNXLRxk8c
zRJ*0n0bRA*x0D~QcKep{R@KzEA5rL8K#lvOedzc40p;-@T@1P$^kabx3m^oH9}DEz
z011pA3otf>rIarIv7px7(o#wnlchfvWbWekgbL^`!)50Gqy9+S%WfHz8NTe6L7Cyp
z1#&@$3d*=#fCYUHo#^AD-7CSoIrj8F>UF%~SAqz|{}1K|$-74f*+*UV%4Va3a?J!6
zSfhh7K?o99qk~8g@&zSG9yC74Dxc6Nm5q0m$fL&x{bDME5R}FTaj1{o0t!NfUJtT6
zy6F|=uLtEg0vC07Jt(~fBp_Z7M#M=FNI<+EL`+Aw4}wHZWLvuFt;#352s8^#bP>q!
zCI+S7L4|aJ@VoXL0bVtQHGfjStzwFcKnvRx7l8ufDZz-C<%8U-rUWrC50Uo=$>7=c
z@+bAjJnd$?7<8sEJ1F}bLco|Elu<rNSTURGF_{j3LQ(ClVBUm~edkm9M77>q)EP8+
zg)n)&9aMG(Rl0bigBFV#@oZmDy|<_GogmU?G<k_<Xw&UMq#;}m3fd7=AFsjN6;$2_
z9^TmyDwqo;t44>q?cE?k50?Yn_ku__xg6l`4yu7lvk@90L|*eDQ~shi>Hc9*5$S3$
z0rX)oBo=>=(D^VZ7k`j&@(+V@@h6h6mLCS?;x9S0T7DSB;@_WIJ4F6)z#j7#-RpVs
zfa7W45<BP@Q3ptrbRZ~W7mz6FKrs3*KAeaYJC_5&*n`)zxYEP_OB-Gkgeo6o7yqhP
zlpS=-q2dn)WfC7UP&pVx5`U^N4lBhm`-$iDjHmLL;|d{#9P*gs3Lt@TEGTybAc1i#
zh!s7Ec^;$zjG%?fY!u}YEsQ-D%sqjbzJ^6b1)m(@F^5vL8=@5b_d%s$`X|lm)TeJx
z)}pUb$F`o=|KKeLUxfUSf+^oSo(&SFd>@R6nI9xf`96r5pZ1<1a_n==?ydj6!#Nj$
z{Q8`WKz@BL7!k)_PyxcZAdbBz(P4E6bD?%6s0<C+_xI70N+o_fme727#cdRt53e}m
z1A4%@LgRyCa*&A0uLO&S;<YC3fne~M{Ay6f<Rl_u@?U}?)yTC(O#Vx-c3a+>l~N2{
z`%AF>W3q+0Cd#`OlyS6_LW^Dt;&m0#4_pd1UkkSX!}To8_WeTtT_on_excet@#k0p
z2kaMWU-@5}NQCzf$!J~{i9Gm#(0^NjJotc6?K`h85_#}}A(47_@R0`}7^?eUMIsMA
zFw|abZYBIJNQ4i%9$)Mh28XU|Md58jLh2tJr$%)~h3w4VbzGhp6{_h#x?nvjByWd?
z_|=h7p<>6CXt5a;f-7zC&_ss1jtjAuU)DF?H7=AdhpC_DhwDl73n%kQ1#K}tgltrR
z9LdBiFg}!D#~g<Ztq;@Uv{2qG`(OXiBT9H$$QLo+L1^aVXXVq`^ndC*GSfryPz6lj
zP7h&(J;7yA=nU5XfAuG`GeR=6iSusA%pjR#0tn<AO!=37Jo83KW@2%oO<WSfh6jbA
ziZj_S|I*u8GhHA`iOnRL3uGz$c4;VYrTwS>(|aqSr6HUcJq}%dM!1X}@25YJT^5qp
zN5O>dvJghk0y2W12`*=U>aQ=#E)U5JA(#+aPD1^J5Xcp*{s4Wz%_~9*ABWH+OIMIk
z07f9`wmOuzIpi_Xus%ART^&M}wI|BpiLy29<N*CInKdDqT?G^BYeG2k?#yMNv5x(D
zpni9DozoadbwOrb2qDWrvV-Tk-eeyS)CXtZ49RmZFd_722<Kj(3n4VwCie0m{gk!I
z=^rGlAhd~^Y!02P;!?<Gp}ZsZzXt1d^w?)1T!Y*}lSvqBjCMMtd}ps7so$<t;-}cq
z;{gmj9rBBpJwT$A)1hF9PaYuA38zEh@8sk`3^+OVA|bV$4=c%m72k&HlwQvQ(6^yx
zx0?GS+yJbVW5UX7VKu!i!g?`(#-8x1zRaiu(=mk>qA_8aTL|-oXiQk<7C^$3G2!@Y
zVR3_s7-WhzHmptviyKsuhmyzP77U;9B?~vG#)s(!6|GNUYT1clrBk}pV%sL_ZJq=n
zb`p35BPNE!V%-G^u!&*0?t;W*G%+mKT_X9qJ25QRUCE(!cVZap?j5`|Kul$iP15hI
zm>QN-K$tIVQ^PXG0f}O#hGmQcl61nD!`F+}!+g5k{&bSQ!RWf(#h?{wyNf|9()O^7
zi^F_H+8&m1F-VxcJuKs5B1K%hJ&d@xS~v;d_Srwp(*LYf>~l+@2!3B!?i0d18rv5x
z6nk5cuykJ-ds`fRpk*O@AS^ByfZ&w8TmTaG9SF<I1t6h$AnaT&2vb;oILt2>bOeDK
zA9ih^==`u-Q;N<Hhvnr02m|SG7?%s~!H7jBwJMzVHETRyzdKqLmPg;nN8+|=SjmY~
z9*}?lEl$fo!X=J}5#ZmB0f`hL5&>-AeEp8hiLgAK0TVJOs8fUtsLxo-1(5kHEayw4
z`iL9Gc)W|_z_2ga#0C02nJ>a}Dnt?vGG9=~z&%hFYWgKp7V39qz6{G#Com!NWf&VH
zfrIK-vu79T_gK|oIpv|Mkf{zMn4TAdLIgu0g4bt0UZ~IYhsQ>c+qoNE5}}HZkFepZ
z^?S<3N914w7gZb|@r%G5BrF{t0oJ2j2M=G5Fz*`uv9i})9U7poNBkm#6X65&^$0RJ
zV=+OYAeb|my|P9hUp_e^{Txh~J~<-&93&tnN2HH}M6r`2Xo?3p0;p;1v9<ccWz!;}
zNdZekV_Kwy-=`;%gd(_3PIEYDG~Y~iY^^?^Vy0Uvjf|NQxf6m6AZAA7)l`sxm>Gf3
zj-t>rLMG0)r>xUMo{IS{21RT0T?~rW=0_qTrvM#b%#UE2=eHyy<oHYNuWT&z<x5=*
z8UafqSbJ%23L#)Djnr-Kkib|Pxv>?Wl_E3%R<QPO>J_CcKu8&K^%W7BSp*v@D<X)_
z`*O=Mrq{4VZ|X0Vt#P}Ft|6^)yNRwLt)XsuQ#2Uji8tAO8}yA8Z@PxkEu=TyZlZ<m
z&4|2<8R1t#-=qfP*EykuWGcI3qrR|WvkO6&kT$yzbO~v*+tYLjX>+8w7M~{~bO{OT
z0Dp}L1X^iZM9vc+p}8$0=LwL|+!k@>i3nXn+7%I(kU*gOceysuC8S-h4Ri@<S47Se
z5C+n&2<8cXBL&&-k0W^Ve*GrBjS~7e;tTOtLy%~uOZLBP(I3fv5|M)qOnCPvG(hMo
zv5%*L53#;m^~Kpk5qS;_CWH=AQy&#VAdj)O+w`jJv53e@LX*bHu?V*E*ryN@jQW(_
z^0q!I^QntObHt~FMB!3CIr&L;>TQHeCnGZM0uwSPBUqa*(wi>G?S2<QQt<Y7^dCIo
z?;?29<x466nN#dc*quA{>g@LsMZ8J_CX~OAAipzD2%)9Uu`WCH1r5$c<gAE{DTK~N
zFe~m8LLe_jaPJcreLAu+`?Xr^)?ND2EO_E<8L3V#f?@H#&_LxbGyPrt1M6}`PHxC%
zLg;b?liLM4`ie%iDN#hEKfJ4-*9)ga@ruE0D63I2e0o&rke=XS%TMUHvNj*-PjvxD
z1Ppi%qo+sZB`A<6Y<d)zplGmx#Ne17O}6Jj36TgFQ1J9<Q9J$uNtEWIne3a7^jllb
zbU|s7n;Dh2p&<j%nNc*s@-%FXMYV&`ypvH+`i(Su;ul}ieqp~JEeIcs8X5ClvN}dq
zA7SG@)py@_Bq}aL5fi9KqLxSuf&}W3C=PbXRFE+BNVMsLe1}HlP=AUzr4QibmoTAS
z#TK2=AL~-(SPCX_o$7-GW|dQYkie{Rs!yb-ew9=G7<JVNs(!0h_>F;c!iDAwpwkF=
z3g{Em2*c<UAs*GLqj{(8O(*rCp33T|Q5&JMs>Z42U!%Wxr9c4^r06V=u=Z=mT9APJ
z+OZZSto_=tmPldk*JP~#hx#{BrM(2FlR}V&c`vnKoVUd{QJGu-3G{EGNG`~yK>sFM
z*p9mbo=Ws@qRF=A_w-g$BC4H><_(Oo@E7{Gv2#(Qp4pFLq6F%sU5+YO?9eIwnx_&!
z#U>mNFlk+m=8FU=NZ5BdT3_@iNEmQAir2Yl6Alu=>*Z+kD^YP)NeqNvQ29A3?j~^=
z5t02TihE!W^THu;Evlr`ci@{1^zjNd>MQ-OGO$FWCU~{4MdgYN5~W^?V%8w9Nl*v(
zk1=1h{%B?YSd9+#ZU2~D`5^?I{xM8!)XWK@2E@d0CJN0A(kYIX;sG)FauS|$VXWRC
z<)aM?quSJ1-r|@i{dT_9fxZsWp?mipFW@U3-FvWhdv)FZqFP_$3r~$<tk7LPwU9h!
z23zpG{#xk_rxY+z%8ZyC)*w;Jj2MRXBU}X!XR$w@(H||F<*Lw7m=%-lP{`Y1Rt)XH
z?|K$eL(F66&ge7B=D9l54)dILfDDS6NA1AVvV}x0Vw=zElUpuwb*KRrISl|A5{jV#
z_RzRUVy_s>`wR^*Phk&S^~LQs&grW>k<~FHEna0#QiV6f_^Zt9mkYYqdV_<FN5I|?
zlWAg*z}^r;n)oz1ViMMBJ7UVNn3_JKvfvEkR{O;t^u|ghn4)_i0)!oobs&MTgRCPT
z1PLG95v#Q;CK5r!pbeC|GbZ<Pl7q(D8IyZC$pX;M81{1aa!VkvI|i?8M_$P?m-IWz
zK#Lt@l1F&EWAbwWAfdaPy5bEwKT8t1-yU~KpXKSgKPCqgxEM_PV=^HE5*67WD;9eU
zkfant_(7u?Bu4Z8SUr({BvK5e{jvHFn42h~OVWCI$R2-LZ|A8v<d#Aw9*1K2;(j)S
zP|BfL?OP-)MTLiA6>WKhlB5aoXiP*XAfS0PCL<J(&^#KG5ei6X9*sE>N|Iv1lQFTA
z0YPiGYXjx(PR3+BjHf_48IutTNFbezAwqc+{!|pzPQ~)hv&mQV--l1durBg=wTPVP
z8(X=Gc(uznF&Qa>3#e~mGExKysBdC2j|-Bfz*zJqzQhp8mzZy2u{P$n)MiCA9M0KK
z{G#{rv_0q83oa^i&gmJDBo&h{GJ`}R=VF-VmeNKh71jF1^X9A#7)z8$zc_An^Dj}P
z$l!r-?)9xepallTrPG20;=s6cdyqgJ7>C<qsZrGwSv4YVPx2bWJ!K<YEwW=oT&~iP
zg4T#QdVuE56pi;$adyAY_-)%!ap`2>qAH`}@+BRRfEX3eiG2k~K#YnvYGN)F1%rGo
zZh!7G7I`XOb3w>cUyIB8Ln-d5uf@aStP&*Gs+BcAr1>pHemI%!){T7?lU)dM!^y54
z<c5>u@?{~Y0Ag~y^-bIjQ{;xz;=&C<KyzALx*<qtPK!%71PRS))Cj+b!XZ36&fSn@
zO+)K2+ckl_aCTgJVTya<?6~wokN}z;hZp_<otlnn^W%A6#69VIS?-#@ko~V|v=7aX
z<26=#TQp6byO6za8ZBBZbovKOn6@x3*JF@CTo}iCOmFU{spXf%@lAv#?1>-s47)eq
zC~66Yn8)y#Klh6_7C}OJNgT&cl-h$fdUpjHAw9{%DrOqRY)!r~yc8Tqo#0o*<<S|$
zp}r!HcpDe?pbcs@`*Xl(Q?c4<4=~XltDW`$353;gx%~l2I&sWD`-K7M)%EOn!1%ay
zeO%tON%PrceOwpQAV}z}k0X&r7d+C`jT_mg1xCAyjc%#5!`$eWO5M3JF5jVp3J^BN
z5uu+IrJ_5xvOffk^A%fN2-;w7b=)z{J92A0EW%8XfY=&u+|)cLAh5&S!A69P3l%$D
z2ueopi03=4O&iV~aq&?j7)~3`9dW!(&WCcE5@7GK4Pj$e`Fkz|y$ADNTu$GR0mOUp
zV*Z*qAZP>nUc6;%=`YxS?qL%nMvIC)E`lEjd*bpPytG35&pmPZ4jxD#?1|$&&R1w`
zrfL6qz}BP2C{OtT7lSsS2i)eQ4d{Wm{0s|pfN>z+ppkhKhrkB(Alnx+ZfSWiF0ZJh
z`OfoTT;>TtLggU!yYL)rJP*f}o6`-f2ichiv_dv@qUL9RiW`v%@I_phR_Kky!*TgW
zB1l+qIGz=+0)hnOVH({Z(yE@OHxfU$7srkJm3E)I81zQs=Wct_8;PICi^W$xpaYE0
z<MkStqbcerMus+?Hy~l(k~BtoicZI|PSAEuEyl>y&cu};;%a(}hjpE-S?vD0hR%E`
zV|FDTi17k3z@Kr(DoDVep|MI~14x7oXX1rF#JxzU8k|94gLXEqUWkjlD+z%Iy>oGy
zca<#UUC+lU@5(=PQA{KAY8)4K2H6eLMp&r?;aEX~{%TwvLqZa0SL1T|0tvsn8jp(0
zIz;l&<!U@8Zaqj2W`?Wr79uk(SsbQqXLFWl5=it<U<W(iV?F$A54NtvnA{c&(Rsyu
ziRhn@w>v<>rv8bf$oYT-SpNhzw>O~OOQPD~MBa!58(qt279N~10{pT?30mDZG{HWo
zWjx+}XhK#GTtE#?$mBLiKn+bGxlJJrNK|iVB3{WiC`6)q@PVO;gt&1bSzPIN|7RAV
zdrQc;VJJRhq*@Jg3!-)$mXI?qgrGAlA!pta%$>gB31y_Gc4Mm(`|v5fke$yMwJO0A
zO#lguqTva-G=K!$@Ps^Z1qry}3FJ5F#1$k?T!$x|6IY^z;lmU1#8t9z;yOG*C$4)b
zRe}3U6B2m`6Q1-|uXQ`VdS{Q$8rwaQ2??A=F?5uVUle*R!Mf*+iPmcgnO+4K{r4Ib
ze_lwzxYrY`xVCX2^Lj#F<HmI!NWGrGxNX9rKrz;|j!~Ln33){ucX5cDz<b>}E`w@K
zWPh(?)TuWyA=4kYNduXQ32b}m{2Vr6-k+3E8rDAVVUgKJjP0*ue3J!-r}yYN<R>L?
zaQB6<4lOyE9j$A8nVFoBAKt(<83;{I;KLiYaZL2`6!vL7<MzyygiOxhN(*GBBrx^Y
z<}#SJr?L+9jk?*X37KiZl@!QKC1+fQIT3}!gJ#=<>KiLOnb|H9eSBj!A$8<Jn0x22
z2OAolGIJ90ps7IdLuO6_2TlLrGMHTFvb7D3e`e=mq>zIG-Gt2C1m>I%FmHjz^ts&b
z(#Ytdv|a8><wI&YNeLyIKbI%)nL7HY2y|#!U7l!ki}{8C!GyZrKGwvjtz_1_tr!5v
z`b7PP{FQ+Mnjzn0C1pnY%$o^Ce0l{;$h?`rD~<G8L4kr@%m(&9B(uTAp=8en!nudb
z;QV$YJ5*-em)V$*m+*0a3^E%NSRg6QR)CkP)wkH~&5U-Lw_F^$*ZdaYAV&=uyy>)w
z&1_~ooZaN&L?E+?a1aNR5Z-;-WyhNv%a!b|g!~i?xRBbFK!_<D5wAmiWPjEIjad1S
z+lVnpeMF5&F(k0?hSVnsr8(wsnzHb{!vEh-Yl;tFx?jWW-J^TY7kXk7?tTo@{Ys;0
zHSE))hgG|y{4%Iz;wzANkGm(nu82=%`QuijGOH8++9&@qCBA@3-$#^1<Kv2b*cS~9
zs|Ei^B|a%Bx;u{Ug{6%h67~2bQQFKLf((lfE5?yT-skLrR>t7ykpvENe~a4jD^o|&
z*8Dp>b;VsN(Bj=ckia-fu1PP%@T*eC*ki4YW|?CN`JN$|kU5sXdxpha22>TB-`c2^
zsY=MB8{B;&ZURR)b-4`u@;LjfwNXEFJR!4^xZMPq;|XLXaX$)WVX%M7>bEgkWj=KV
z9hi{$lm;E{pF#!$`~>?)8>4yVgo{H1`~=~MvM|6;vR!RZ*2#p-CI|TdKbb(X0pHUA
z4hHyVEdM6shTLav-D!Y-Ms@!LcRsOC)P@!2y;^Ah=_ccV5gt}(6w-?l8vl~fh(gxB
zgVDKcM4`r46yidAL}9!kbq0~B@`%D4?=%~79rV=5LS}a`8kLPK)OeZ<Le!EY3k&&+
z*F-{RWMP~8=p}TJcsRO{1#dI%Y(BbB;|HX~<?ICSbRwZMy0F#V=4wnCn8vi%3iC!J
z?IE`rH+aIY72<P0+k!yjZ=$ZTcXc#6>aErkYW!9Mae=m`Fvz=~NT97L#DwuGW^&Ll
zdw5cLAl<Kt_?)W!;N8aG6L$?y%8zS80szC4^5dEy0Wdt-x(l7<tF@xq$YkEyBtOen
zYf&2{jS>;q)}n39t4WcWS=P<a%3e*%wHuEh`f5^cQ9%Oq)g-p4SUS{NWYpLs`|DVv
zg#7}=8^*edv=)y|%1jm{p*S{)OcuZ4QwvR}O-d?L?N(13MM@=piZvJy;53tx@{4RB
z0W&F?66p|-fSHuU@<ss~NCaq;lJ%x0MQ)K8A|Wz4DRYaGg{GO3L~aqwFxd^1H<EbA
z_<ya=`0{LDw&y9Me+zI#K!)ci^$pi}+628p#?QlI2z9&~GcTzuPTFsbGH_=L42%YF
z9Cg~(&P&QT1W%zpFDau+kT7~)vT!ksrl^t_6wzt(lj@?Rh$<xydJB>=s+255l?#*3
z2MlY`C|u@AiajzYwB53#+#`d88OxG#j|>uU%aYC>xfV6_nxr^P0)a8V#_a{#B(F)z
zNC;1Xv?eJx$smEWCW%clzlNBJYVRiVme>oQH72R`-c7>M=@w!J*KIyXDjy|Pb1mIM
z%*b1a#Iv7y&S>dr^C9&T-OLit&`Eofcw5Kipqzb4yyH_v?Vh2a{!mh>viJ8g{^+U1
zPto9b0Q(LlWrPV5dWVwo`UFTc_@QLHN;Wt#c!M8Ks>fu5OCI!&I1MgYXz-)F!G9Ju
zU^4nVseGMO?WHdmfA>^^aI7Gg|2!$f_zZXX&yxt_$yY(biqDhLuWPIjfxPxbQmwAB
z!b#7cN@`&q5R)E^g<)SNF~QNLGRZ>seU;P#jVVw94~=)4E$?mAef+f3jbNf1PdnWR
z5(b`5%A36)fqFWL7!UI#As~!8oy^@M3*qrBm#BTWS&Nqe>N|ErA0zwtcWxP!Klsiq
zgNDv`N%_g849_2Ymz4LlL86TBk|n>9W$;^ygqo~%hnePOzz@%`Wqpj2$IrNB(D*u&
zlxNx*o^LpljEGC%Ac1fuiO5*ggKm4ANm{qdGH7&>jc1a%j%FKP2B>qaVPE6suIJn`
z_zgw33>rM=lJbsYh7X=|NyN9J4BXJd(}qr4`D7XAl8x@>$A4%}^v^}MwXgBP;}_jR
zXk1-%8;i!(MQ2<=1r@oN#Ih#}q3hfilXdQs6>+|4dNEn|UNgfhg2nR^JN=?zJ$}h8
zgD#9*a?7Bk#-*hEEJ=nZH7+HwjEgexaV9*i?No$+nh921O4hlX-Wo+cAaI%We90)Q
zxa^ieS&z#}ne~7S%D9{?c0eiXaXE>|dlgN$83m#DRrc{q#+t5IT?jgMzv`MvX^*SP
zsJJcw6+m1~BJvbw`eDV@Bwig51HdoG#MNZuhxiSG4CO`o6|t}WZj`s}S0q;xaA9Y^
zBAHtOi9-4n)w@}uQeLEAQF&W)3thp_P-H){$nN&Cu~m6uqzgi4^dpO8S_4u58CfJh
zv;-0$Ba6z!#RibDbY#&DU8SY@u#{rokwq;YH>>GwfefAEPcE|i|I_H{?K;^lhO#G<
zi{u6zQYdC}k^FiQNE9=<2(!0n5WK$xviAM5n1C#1a#5Ww=Eq{D!tP<F-MP~Eou_i9
zTMFe@W)|g(eSJou{L0LtjL27kL@6_ikgpP@6rhxuMQxrGQ?gQkQm{{$S#(o3EM0hC
zUvTKo*UX~FyYjSchIS-#imv-YQqSjEroRzu38r{~3nD0WPLW)hK%&$+RJWtTa_m<Y
z7b$hqdldTgf9uLy#E1LoEARM1JmPf|F*!bpPl0)d-*md~;a`7>y^L=cYCetLUH&Bi
z<e%doV>hk;@5k8r$LyVts9Vm*)=A~ArWXEJpj$6|QT;Eyp8tC<{_S;qQN4%Ni#}m*
z%I~Q6sriulueTV#+F|%<he7`^V6vIh{jIuYln`b;)L6toATcx+7s=HZBwA~6kz9R2
zqO}$mVfCfJE*sUB73J+K5`kS7lFN#ap5__LECqHei+Ety5(H3J7Rl8LBxF|>$;b{Q
zP*)ZqvRg`hkfo(!ojr7*(ack}u1FrVfJ^KmLwxrRB$U<_#p331N={~J5!z&bF~~UK
zDcj^K5!NPGiI$yBq%<2_VJLyzX`dfr)KkiLI&A<htljCf0Z3r%EQ*T529TswgpCGW
zz01;u<vkYekA!%y;fB`iJ;&4V1bXi|o(2+n?~$kdLNimA*2ld?JO=6t0x)}B3ur;u
z>smky!d|BrAPl6vPA^zdZGTbTcd{2ONbWDfNiXjOi+bS`(F-?%0O}`BFMx#XCr&Sb
z1nMW$3lv{l)Nuc1e;I4kYJ=ZU{I{z}J@M}%8DHZm6#rd>5cLD9m__mR(IVv}t2NTt
zQ;A=~wZI3;QKwQMfpWA+uGS!da<mAmHH9o75waXDDmhss!fRrP@cLMh46h{%{a#gs
z@R~l~E?IcP1$)XOdh@u=^<0$jX%Rke@n52tlTH+=4~zKPf)(0VMasAKj8R5CPbGee
z2n!Ej?pH-Jum%aRuZm<~4HD*lRaE#b%%#AZ7(C9aE>ceyiNIR&p!ao=46G#!ao#sY
z6j;-!%0;y^MR^x_e<r<Z4#l1+GP0sWbJU^dWru=5i=KB(1PR&mPKSa-QRk^c>3x?R
zHTMs!;TWUIT|YSE15Dx;@t1deBm<QniV(e$CAFj4rJ}rHDKWllL-JD1_^wTc{45Ot
z0YiRv3;_w*pB+O$0`+IdvucweSID#Kw7BA`kRewbpMnfju8>dhZBK3TsR1cvXv*F?
z)~M^L#Bb3rcml-%DcLU|p*SEV`voNWWk9NMXiD@8F?hcWOsPXsqF*ErdV^B3UnC3t
zGC1Y*OP#1TB9%9Ww+8y94vHO-at2x*YK~DUG2MYcbBuCK1PR$uDLLJNL{Xzs=ok8`
zXC1Qt)fDSI!D!y>RU88H<qurW*2Q~CAffYW3ZK!UOs-lts!d7dt+p3TFh2BzrlfG>
zODBAF$%<)g@ax8{Wz!reFab3!C0|Ad38-l)^zkH`ZR=9`v+eI+H;O&wvr}@gf{Sr6
zJ0-7Bf+VSw{M0T;V9ZY8Q@dR_1cuu@)@h>gK>0iufrk6Mlw3*b@_w3^lCvmCAk0f)
z7H!87KrLkZCmJ0p7P<&D4=;2PXap`y$%DGOd;~5`A=0CHxGv4ZOHyJt3If(INy#-I
zBs7<#<eCo>r7cN0GjUxqbX7|1MnM2*m1_gd#H(BzXeM5jlItOafwU@x_3(XqL9t#`
z+n&n%(LOfWxXT;ap27>ld>XDt{jy7VM;j1;+~s%&NI>p#yaOa4cae7-q3)@N?$JI>
zDf?{y4C7HxC4LIW#{=knn3A`GKtk`sl)QEV5|002s@6U@KJ96VL5{EPP04E~l7p_>
zo08W~Bnv=$Q@D0=11}!}2U0jRu46siyBj<ChS9hbv||K$&w-RYGp@&b^*{=fcvr3q
zq=W3HnMSwLgRTm7<H3|XC$7i4@n8z)#Poh-J?h58Z0Ag)Rq5fBT>8O;%Hfo}V*wJl
zhf~<y;>$HqL318s4QClQ-Eb@=uP=iMm1C(AaZd~+RF0)^p1Ophg?iW_X<ww2ukEq3
zjK!Wx{B$Zr+oCU==>&4n`@)${K%!N@NELo9rxRlE>Eu*Ot(Mb?<U#LCXF8EAOebIQ
z>7*q$0UM}qQ%Wvf-(nl*7|km{h?TM)|0jrVQ}XUVNZ9mks!+UY3liAhrm%M=$FE15
zq%+d-LBR3PIF1hznr9rx2MNtHHI848Hb)nQ<Fgm$8Cu0f*96)kU3B~&k^s8s_&rDf
zT_nH17dd9U3wk+~ca^Q4XWSFIoWgrLwUJ)M%aEA$S#Z8lH}i8!ri8(SKmD9SN*GZF
zWB~ggcK>{%PUb%;nGyyQGXJ5ufl|5rwZ<!K?0loXbw$>Un2@<b?*14CUVYqvN#_ku
zvwzPwejo0aHd1uVqt+)A2BcZL1xCk;0XU21b1S&0+kmv3nLxsb0crUqQjn<IfHV@@
zG(FcR3kRp!mIdgc!7c<%kAu_s;vPSQxKvuCGe81ja2lz?+c^YG9hPQI7aE-^hPe>r
zx5Lu%N=tn{KMqTWMJ53xAcm0@ccFd_kU~x8En~|T8l58}(-;VQDAZ~|^&69B#v<c`
ziZKo{xIiA`)DI+#8<UnZFGwJdNuzaN<Pdl`A<d$Tjh8AWxDXWaO>iNoeiPC%R%^iP
zHzAE-eu(C%2Gkc*?H!Aa$2_G|ad&|?Gq_NiN_{~aI*=%LY8uJ+4qOM+40g{_qht9D
zw^*9-XE<%rfX7@j(qXaj1W7t+%=mO6t^rLIv)KDfjV>K#xd@c5ndKtT%rVPFpqXP9
zA>jQEAV79*S}9GJv$OM!BGzY_(X2ff!cXuRojf<4FUB26V9ia}YAEYNQ_9?Qlcwfj
z(HEFf7NwP??6YOYp-TL6P$=)R$ZblRU=}&v)__kii>RL|>;;JlW>LEC(zFPBiGc|Q
zB`r?NHy$O67PvItc)T0#(J-p5Oy{jnd(suwZ|R@MI<T8p80{Wena0~FDb%zfIm+s^
z5=rBVXrDek`dYtzu(Plak6<63i3t!S>|33d!3s!}y*iEM2**6Y!Nav|?+T+<`C6xj
zU;<&SQ$vs><TwjRAgm>4!K?rT_=?RMt~Bc2X1fT~6Sj*$#n@??EQAUW>@+646Le{~
zQB>QQ&O3nG-pV?>VZ_<2mBy~f#<X+qtr1mrTUx|oAOOA1sUAo`Z*!^#642YIdJ||}
zXha3SXLnw0yzVJ`&sCxty_c379tc6{y)=STnt&TojrOEP<N*R5vnMSh50KE@la`SO
zNNDa!JCR2tBKN07<N*Q>z29jQkT86|(<UH+v_CB)50G3HGw@IyZPFOaQaW#{J!zdW
z#2fh{jZZQ2$fGf}#aFT|KmhV9r&=HZ`IXZaAOZOmwFSSv+n7v0&8}@QW|W=Ar5x_{
zU=lYi@0o&x&gnGnnQo#%(3sldEZeiu*wXc^Qxh;z>{+KKAOUeUEnm6=35c_4tOzts
zfW&%sHZA{`ib#>fI-AD-QsL4#6#|7H**9+)XUl(d3!xi=Kf=Ey3^mt}Y5BKQP$8W(
z{+0@dYCu3sUuK1yjm~W^y9g9CUQWyO6l8#KIi2DE+(9ZpxSYlXf|E4oHKsZZEVid@
zHlFmf9at<!JJ_5r*A|cf8CWcDLxBXyz+zl~z`vvr2ud7TY*%bGws_i(bU|p!7+G8c
zLQ}@bVmbRl2_PejF`#5~AdnbWj8|EVGZo`p47y)7u2|l>ZOmhcamBSost_bF#ueY#
zlDlwYYV+5MxeK#??;wluTCwzCJVN2G6-y5W3B}in9S?3yA;gqo?!j!?c7za9Tni|K
znBvxgLWn8F(t)7}pee<0;Lh;hCQ)rhao(rw+;-#6*o<Oa+#X1++yw5c%_&wE+V|`*
z6i+37idhQ}06xb72MO>w#qz!kNPy2NMp~X`Rgjof=M-BDi@jzXxkF;WtLTFwbBoml
z#Xg=9sNq6)UNLrpapVqam<ZnHhl*)4cndcS<t<^yb{gg7OI)KUDp*o1m-HrltSl*(
zpT_|S;3dUa0RO-da3^Rvdw7@er^@9n0=d<4w^}q*mKV#=qzNA?%ZssC&@~{CxCXSm
zxbCas!wW=Xt$+#3i|ajwG=!gv@Z|$yPmlJ{Z4~fe#;RhaMY@%BKmLWWM{m~rUE}6*
zu$;D~p|q-41~-t05vz*RrF>+8<oeBT;GZLDLPKdSoBOVDTl=*x0<FSp-G-o{w6<8T
z<4^&@+G4E2{K8xl)LGk5tZZQo-ZS?88NVDmXe@1T8-vEuhGO}BZD;{yLoq^n(Z}@S
z`iA1hTWb244n}w%Z!A_f*YvUELia89#BL)V*~B|_0L?5-Xgt2d2JbcomA~VfL8I{<
z*9;ns?>K%86+pdHjDr)paoU9L6zpW3-Z$En?{pDpEberhgW~y}#bJ>LhYApO7UNi?
zJ4e7++|9PWZ}h0x?IKWIzq?p&$D8m$xx2WoNS%WO!tP@HBhU_-R+`YDJZL|;$JpiR
zc+kb5%bo{a3>uFIi{)F9&;iE5V!Rdkj=;d7#_?h$n_h!&VVC)f?V%qUb3E<9a(ajE
zeI75C2V+h6`Nr{L`N<iOfID7Xk}+rDEm<GlkRMT!H>Sk?^FHGZe{@8N&re4@KD@^s
zRbMGla2AYDrdEQ4QK0$1G0;=2C$E%XrNvt^An|ZyiTHRTQGyJRUlIw~ktJBZge<60
zCGw>`ydVx)ko<LX$kIABs)Xmc2p6`FMxl>LByxDr{B{IAh4APSY&Qik9RAf3`R*ZJ
z=!Psvo|T3y-BfwC1PSI#_?Cj&6w_Ks-da0()Obk=%_u=QM!VdmRO^{+Y87_5GfQOT
z1ty?omdMBpB&?cA^`Y%zQ>wrm_Dhw~x^#}KLQOEoRiPPX4yn-l_D!jh^I5m!Mn&m-
zSA~G)yDC)o`J{p?T~GnFh`oQ@XkWU>RiXA+<f_mFu!vO1<D1e1u$0~OsnM>*QdfnV
zWoe0D_zGm8vb3Zi$Y0HGN|W4*5?m#}iDgb0b=aOy4XYFk5rX0|lvk9<3;{?euP8x=
z;7MK{ym$>uoiLtiw#HSVLAj<xMrcj>pj<<KGs8qTl;V~^N!}%U$q6Il3%^@}NO3!^
zL8+zG4?o&RP8mBJH~X=cT=KvL*pIbR;>8z`DF4S=ShTlOpOzt^m_hDsZ`j{asXqYM
zK;boBwG3AdhGdix8I``ps)H6EKH@xfQ_O#=<<Jar&y<W2&(J%=GHQqGI4Ea0ac1Vj
zxH2+smi<87KigM23+J4C`UMxp&B{nG0STp98FU7&YC#7N=dxVd->h;j&UB>;dCA<2
zydw`8sLajajywfiATi<0&4k65l8EF7ZF4h`Tlhhn<j_Ie+)SIB_%U`Fxz@sr5>Gd>
zI(F;zd@uT+YutEyt{cwC`t<1iQqNv&Z`xl{3K_?4GHqc--je_Tj98e#2<*V^2DOA0
z75h7OT!N!gX&FVpOENMHD&y<Wl1x<WCqa@<2FoeEN{f2H4_9WCrU<85{}O)*+feKu
zQVx!TM&aGcj12D}4trK+GU8MnB+yo7@M>sZ4u+D~vi~jdzf``~MWFrQS{H%bbZsWn
zLRw31x;E3QHUCyv87(F2Sy?TA+w%1;0xc!$-5QbCuFuFw7%D(mpAla=K!vcBY-9^+
z`R^#-=pxVw`$iXmmXeJbxwnT35H@D;BFw|Q7U<c{tZ~NwyNb;&0{uDYW*33tyUiJy
zRW0L7$>t3HLI@d6YE>*H@7tR){(HR@@4FZj+P&{$&{FcgYXvPO?~@hyV|K#8QnKIv
zO>O@xo{If02CX0aT?{%O-|yN%>&JewV-=l`m(lrnl^v?<U!zo1xft|cMpZ5b9gkOK
zqT&(*bbwKn!IjS8!b5QQ{n_gc{I8UM<|5Fm>z}y@bn^XKCMsf`GJf*?S*Cdl{`Nu{
zU5Y)$b~W(dQhv%spi}Kr8TldyWPorgQzQaykg(xY2Fogijb(H|UCk;Q`pe6!T?C5R
zsxva)f(#I<GwGJnuW0vQooREk`A3d`1L|*aPuTx>`L`|to!Wlu)`CuLzs*D&N(4H!
z{WjC2lz;A_jIP_BVO<*eA1*)RBH)W1>KPY-{=eu<M($gn0)#Ueyv0FlQ5jvvJ<mRE
z<ZoSm-bIK2;k=7L|3Y*=BO`LC0O5QFf22fzk5@)FbuY398v9$8Uvv@Z--j-`2vHzh
z%*fj#Pyxclj8)tG8%Mw`-pg!TV}GCW%Pv9;2$x-i7!WSIwTJ=XGS#97N5Bo=tL%j)
z{%0z#x(IlaLcN-isn;@vF4tboh`X6EI}U`anPxYb4{-$iWkSC!i#PQ@T+uIEGtneq
zM89m!w3Prvzidr45`gHJMKve|Ri+eTLzrcAoBHo=JJ5wF1jIlWq7V=Rvoi994j=|*
zaSeNn@arUAS;(@oQvcYtLtTs{FowDqNni}k%B@71k_5)kZ0)+v7%f7KleMpw`bT)$
zj&?zc05Uo&gS;}O2q2@g5%KaKNPvva;$}5ZN0upgdwzVD?P%uzp#69k18H!u<sB9X
z0b_htzM2CP7~`{eHRmnt%+Mfs@ohm?S!C~T?!VR74L_avI}KA7xb;Z`W<geNC!q$I
z1zBt-X*U28yMYDSx{I<Rk46l!H(Hp*x4$WGQ>GLnCdu+mZ%Ys`a%onE03d<BG%I(#
zAc4L#i(PM(Xz>#4h}c`L{hzj7<r-K516R2QmH=XvYhVc=R*`{-uNAc!l33Zi?e^g|
z{<l5hjai()^1rQWMyvj2w)kfMkc!O?G?=h%b5?pKNI-AS7K)S!NI-ASBBT2QS=WqK
z+ILv5Tl_z^eaD5MB;7lXb&w&UtbErFBp}|&B4hmpS=T(OeVENVXwSOU|G6jhVHPnC
zK18NAC*wY16Ds^qw)`k7k6OS4)JNG8k);I*sE@MP-BGyKoQ(M-t7Os-<J%Pl<^Bfj
zfwunEZNU=#3IQ1QiDMW@t{_)=kU;w+i&g#=%KhCC)sAHIK4UxD`bUJ0WRWL$429f4
zb{%7nxAXt8>{wPt9AE<JSXM?HAc1r&i-?2&NA(S4*hyC1&j0VSldcYxeljcHXon1R
zPG*tb>Wac!M72{{{I|h(?fs8OPf_7C6SY9$T6I?Wj{T{F|Ak8Y5)lvhz^Zo22MMfd
zDxW+QBs{b_8~+X-N;d|G0S}F8UuV^Cv*Ki0@}T!kR-Q~t7P1kivy_aW*|Y^!<!n|d
zOxLy8J-7MGN<lbAP=(HB<?%Qq0d_Wv<8eBfXhC7z1vdXS{~g^gK%XxcU_#|WR(@O;
zBvdYB<@H052r4dQ8$QJ2Rw8-0cp=;9K^`tj4uy*svR&@yL#+itToOaA6$m)<C1<FC
zL~)m#p$3x6Itiv06xLnEpM>Cl&Yu9mDd{>O;W}3x*8vHntImi638bqu;&7S4hwn7?
zv+{;m;)`;$IQ6r9DZUBCXPEGUnWZ%3o6ve7@f5UpzX&8+slSB=xDA_7e18d(uf=Zb
z<nNdrXvtS5z=hC23uyqn9RMLvgDp0vlfQFruqEG+0++Kf%4X2J8TbOr2rF-b#e#SE
zr-esYKK?yhUzE&w1&4xn_$#xoSn}lsaH0H)g^_?yT|x+EjI!9Hzwtkk9c9T4Gq?~M
zWntrk!3QBwuUc&HZ~Wb}uUcYqBQ9s-?5q<PLNkrE*aLU^@5qj|<RM&??|R2tm{jo9
zS?HkQ$6IXOo&FBico&JbyW=e&;a|BG^~R_+-OAf(Cp-J`w}aCyOdC84eIwOqrX@1+
zAkb?wE$N{kQInaL+|Yo8IWsM6Xm(NXcq7$wp?&pk|9hT_g_i7jaN$D>Ejb~ABq^&<
z1b!favCzU_l58<J2CRI`_TK03pq9VoVo-?wmL)d?H*&Xs%aVWe4H6h{Sy<|6vAB__
zEv(;z{#>&yviihCv0E&;N`NFG%W>Tssm*p+BD)WQQ#BPJ*WF>sAOTN-w8N6C8Au@Q
zu;97_sa;z}wY^r}8N1+NzoJC;T1HN^YfEa^{jyy_0CK<6t{?%q-)UEnfZR{*$}hCH
zq;@@QpZT4?tEc?1(<b1eO%7W!iw=^cEcvoNNMIbc8a1X@*3_2dMpbOY@BRO*sB#gg
zRjVv{Jr^=SsIrR1UK%72sw^h~-jc{u_HB>)w|Xj0xfnD<oU&vd6+*x`WrfB31d^02
zY?G*GT2d=lTjKZy1T?Fi4gv|yYNvxhLbJN2gIZD^;(O6Soj?HSd)Ed^K7Q|X5S{|*
zd#8gy0_l6|AOr-8+A6C3VC4<Vu|0qEA5H#X(KjP#DQ<-h(k@xb6-!P3i(UmzvqOLK
z_o@U-%+C-2?j=jk&me(&$&%NXKw^=&WEEbq#3DfqzDWFJssFLWA|ZLuyKKotLb9+(
z{A|%8LBVP(>WFKWa(}v$#dbXI@6rQ=Sc35gb-m`)6(kpxp*u)mU$f*LcaT^Bu31(W
ze*Kq7aX@p;%H3yvENTtM7?i`+h8-UE&nNu#SY;HiZLaL<pI8RAQ*$zCP)>eJq80ay
zK{*`q(KqQ@kz)+avA;jzf2i%yT#cdR7(;W?Js|{$p*i^t2asH;bsKXM-NtDh)h6Zg
z4%tRGe~~vlDTg<=_-xdgM$J^#{3-veR#P2wzy#LRoScS00&8jx!{w*~ds@R-ZFWwX
zn^V)fS-}kB9{Zsle$!J4o~REb05Cfz@8f_3!0ep7j{_1tIXhQtZcg0CAqMrNIwvRZ
z<46vgZca|#$B`@m&B@_D4qnEBArM%Q!+o4u{65aHr~P$HK|4lJqb|tF`#2DW?t&bS
zivG%VK`mjW&-i<lE^$?;5trm-wyia9#3eao+vq<fTGQxS&fa~-->CiaocvlRm{3`s
zlLHbYaF^%g2_8r|$nsqA9XvuHl1B*3*$vP7W1;1_+dA^ybZZ)YtJp)&`fsUN<@7L^
z#LdZh5hO}lm6Mw%kSJ+Y4yp2?<Y=vFu35)+KkFY}zRrc9B+EJ%f|4xja#4}!feIkj
z<&fy1gjs7!vaDyX_VhQaSnncGl4ZS%KuMPMxv1FnKm`cvbC?BZ(F)a?0-~+<e|q}o
zcy8G0HY?>-w&r9;5<*bgn#01(FCeu>UPXI1r+i@V`->kJknq##LCU4Po0Ag)<e>L%
zE?&r^Mv!o$cXP=P;6@ZR5`#|&@8#4zIWZwf9`ttS<b)tum=NC2(S$$~XKPB!?91`X
z@~p7Gkzk=-eytfe;-);F!;*bDxw?S_;=Y`-y0xZ^%t3tDlL9jk@RNgX15#e*pxc0y
zmpPb|s~d!YbTEg>lL9k*+wDj$@5`JB%xK4cBqzTf8l#bV6cdT~dMHRd1uecF3KC=C
zC`}o6BSeXj>sPTapZDLJse%p#v&4i<RSvrm+!+B0>QnZ>3;r&dPjfOX1CzKpgk_I%
z8CZ9cZGOT3hs?>GjPGJR96FiH)s{G@?&qw{-+=RZPQD%;<H`Teb2yR0hbvGP+TawM
z^EZE++^L)lCc#8mr*a4;S746v;hS!ka(S=Rwy*rnU*?ToqMFkSx^b%cPrT+^_513A
zMCCw>nu7$&PgHYy5j##b|Cud&(ceDvb57p00uwSn)2Ku)5Hg^yu)s_H-({{iwE~m4
zRI3NL3~K%h>-W<CEA3pvtSHVrKGQjKq}ybL10sw%XVPc-bhp4DC<4PUGu#5`#s@cX
zpC`K}S)#_6L~$YBH-cQ`G9Zi~g`xw9y1|_Ufg}eaq5=v?e1eJ~WPw49Paq;7;Sw&x
z{@$u;kDCwsWxt*Od)|7x>b=#atE=2^W!n<%bkZ$v6YUJqJhXg*uRg!e9h#ls+t1=V
z>84Nc2}~I+c9Nz~^wrJxyMwY5eLJLt%F`zL3@Pc5U?O-Y`|3CMyWh@E_U$kiDom4o
zhPkYdz(jmL=Bwxd_lE3aMJD-3_c382h+!fEr}^rM2i)rHG~W($p~5uHCj;}&1twN9
zXZUL01ManzGyE^KBwyjr@X^w5Wk}9}bWMKAGwPZL-QQ%Ie73TQH7*rvJmEXO{#-f$
zqHwS|eG!O^C#3Om_VlG<jd{Mh>mm30?7XBlP+^)UwfVVb0x4hZc*uPut9)x$PKDEC
z>^ev@VUMSLHSS?|aPFx@jhAYJJSA#m^DU3VAParISQ(_gb3e=8e|^}!x)OrkNG5+H
za-r|%yu&h5>B}1_zhr|N`XBD6?HBnBRCJ%%S6cX@YWTVPT#pxhn~NaQlox&5CjzO@
zi#~m#tY!9<b}mzwJi=P$GT-*l5HbBS-{x<iF!^>T4-g5<eA*|;x39FeMNNH#<l9n|
zAb!!}+gF|NAfd&t>Zd2CKqR#IY~;{q()1Ph>%#Fz+*zg7zxHhh1(ia-_H73R6fQCH
zo6>Fc6_u?~znb7~s$Eljt_&U5_;wW*9z?A1%gw+Qh=?^l16RqNeZ|4osuhpAU$0(k
zO)Nx;to3ce1X5(JpCrt_(ysL{PIOD_))yZtebxG+x}>jK@7qL42_&rdNt6@YVY_~0
zO26cEp>C2}n(DCIPo@F=#CUsrJ-xaHfXF?G4S|T<lh_c5$US01*$C55l-sH*rnw_~
zv=)nq(OP}GZ~_lST74ES>U9x}c0kRW<_;QkAZbTGy~XE1(heXJ4)}Hi2}HsHpAqD5
zWiZtbm_Fz`pZSF!E4R9IJOt_t#q@zdiXZfC9|)xQLEjFFf%Jg~{m!5HrVkW??gJ0`
zsl&eM11*hmfAMV}Xi4;epZZB3*iSs+nAq`hwReV_u0EC+lYgkgvBa1_WF7m$nEk{7
zPR*a_o*Bwdgq$j>LPjvBimDK&IF*<bX5^d_ld^L*)jyLy>z6!{Q=?|OH*`4bx67Gu
z>@OB=GZwuTfW)>$J3u71B^CuDu}v&`AG+-?nxB|c56^P%ub!B*8ilIK_Ev5nWhUnM
zoIu_a^_MuDl2etByEj))$=P*1sFazKvnN0UDKjO<u!j^+8PK$xTKc#<sCruQIbykK
zIeW?_Oqz>4Em6~7wB499Q#Anb(3rEM4Im{Ob2fN@lx)l;!P8&#-IP<KXS){$Hsx%#
zfvU+i+W?W#l(XRjL`G8%U4Iu{*JRR9=1MlJXXm)Lw0|<!E^ky_BdT7Y_Ahgvxt8C^
zTadH{h`a?koBx2wTaZK3SJ9dpQP0Ah+STNC>#?v{Ml`)JXM+bO$}G$gJU8kxXu4VT
zdcqx5-CQgplA3eYI5k?)&0?HC$g8g!(R52;`4jHD&cK$W=}@U^OU^bOh>Vt;9Vi2(
zP>wF?kVIUKXns}U)hFGbmNu*^%8*5fRYe(Mf>k;DGLbUKSe2un(NSB23DRqF&bq>#
z%I#A+o}VUM`Gaz6ayDFnlv|Ut;R+;N*W@~{%b9Q$f)3Z;<x;QaOt@Ma<zC6zaJ3}D
zb!{#Q*BVKoZ{&(Y);>@S$&6WnROOAti-3rH;|njUk<r8^4n1Mas{ZY1H$8Y$Q5Q1i
z-&E9vjQKYuu0%luZOY+Ff0ABwKqkF4SF%4>T3)A?%yB!aSDtp?X}>ksuF^Qw0CB2!
zwNqWgZzR8)XbXtscN3=qBKci$Dshkj;tJc<9nZL<YPTnKgNTIfN!@_Ll(VO~1Cg*j
z$H+on5Dt)F-l>j1<9=`8&Y}d-+|Hc+7#SWU?92t`B_$9EJ9Bn7-~d6pZI}WmxjP9{
zASHJv3I=N4Buod0pS2nV4+UssgB3_CT8pg^Z);67%)dx#6%DVx6b;vA(sQaxUMiF?
zatmIEIaSF(rB*aMx5_Lf0uVX3$~qztk#nnTyaEw9w+hv6l`r6GrO}5AD_(Nn>D23R
zl}$WQg<RG3Dm}meQs{6MpEl{eRJEuxeWJ=aQ&|3*yRmdUKaJP(2jxywS+56D?nIUK
zdLUkZqN?+mD&zG+&|ZJCD)qN2<MozCxl>iv>n#bdKV2nWzo?_GIQ?aF;4BVOh0ot`
zpK(V6%+gJ*P6N$>O#?tG)g0Ii2t;^u!1!L?IRL3tbC6pcn73j=pi&rkQDEPS)rtj|
z1|~-X_-|?Og{s74O9Pvu`4{O+gT(l?lB1UeX1x=Dpk>8+N~T^`tf!=mWyN|*%2*a)
z{J%(e4a}r}8I-)G9)8C?)Zv#wvYC0H*nU-DY!5)<D!ysab^{`DRbXuoMB=Id+wYVi
z-#{_eYBlT+?yl<9#WG_0)q!hn9f5~3s{>AUpJ~bvNo&<VZgU^6Udtyu_BkSHZE%s^
z9EMym``UobVba456!e<a9supVmS_)1$=4F?0X1);y@8_mH;wkxsQ29TkT(<M@fS^f
zGf^H8L2o9?10v{6QQmVL{*$W9q_+eme+o*=hgYilS2!#E<@emO(hggK<Rj8L(c?Cw
z#{mF@Z%cFnMEJHuk3fWP6Fn}Mj--y(r*{O-AA?kRv${*UzfeOza3_w3Wb6O~<#z-&
zEP#~X5!kQ*;(<GY&VR%MW&J`3IxKbusojAI3rnNihk*?XOCl_G1xaU6Cy8!v@TJZG
z3JQm0Is+h8*_$XFh{(NPxNDujkB!2I08szOiN=8_<>N%-KqP&fXdI}EqH+27s6Lba
zb5QcO+Pc&IPVnb|K0x+^)w3V$)4(|zq~rpKi@;_-n9$V758c%x4hN~>dWp>ZMQc6_
zQbWE(;UPzal88GVIHwTza3T#;2uY3H<vuj>um7v8Og2vhsrsTcvBSxL8>$m&X9MQ~
z(pa&zl_Sv!O?`E@`~LWIf!(X7D<`TxAEbU#6er4S3%H&)5jP?4OwOB2`g9RemL<uK
zH$y^+kLK-_e1?MDiFteZpP?XkQa<JP|3dK8ywix_A1Br103=OP6aMJ_sL!-~s;*co
znd?r^+hcsRJc*4N@=QI=tryRqo!1$p4*(<2&Rfp~Qoq@Gn?ZmSot?+?^)8Egai+O>
zb@;#CrrvXlg~Z+G=4}dri9&Ppq!2mov|jW!KksD9uTnQ{b7Qq@kNeeL5KJ!NZwk-P
z+gt*q@ccZv<brGftOur-=baUW&U@XqveEoBNuNKc`0~6>`ar}i&)cLAM9lKMP5MAW
zZh1bpB5#tu5KPj4IZx7`BHO&`CHcHwxc6iCqOS~mz4#nS|F7rmdl;B_&g=R1CcJ<=
z=k+|}4oQ9WlKnU2O~(PC<c7SBL?9(M<ZZ_Rq~wNtlKSc;Y`5ff$1w~*UA7eKAT#7G
z#kR@-Z%eVQGQiuCClX)y8ll*bNgvFYG=+t49CVka+aJvH1@0tSq-_wxA1VCph&!dU
z`bc6us7O1KclGXFVM5xGyc`c99YBMa=eTM)=DtvUyjVsoemrjn`0!BXc%A|N4D%pN
zex@+~b9ZKG?=yL`O&Ccc>P)_~K4DEDh0chHHtPqqE6JoU<efR88u(ZDtxgy6?f!u)
zp``}!JsPH}%LmUt>2^}xPPqMhgUtmC{EO5_!_E=GQYOrryIT*v{kK7EIw?$bFYlqt
zzI4K^ss@|Rj(;gTDZJDyY6B@dDP$`Tw<946rB4afxfAa2>M3E$98wIGGE>4X`lLEx
zqRf<#SERC;ph2uSHB|q8(jC@&YM9bnxP?lYsbNR+Y8FVDsUdsvWb<%?49KU4srvGs
zx{l{gy7_9b*%{Bjl${<{NHUQ2$sl}sSX*ax!>V6ns79S~Z>nw#Q^qSB^w#*suxn3S
zM%LXM!`|2G{ml)s2skTLe>mmVSI;Vzku~>O#WJ$yK1<5T*X<3mPCh$SwWr-tJ!gk0
z^A-{+WoCz$nVTnol$jk?U+p!?_gI56=_O&wJB3$HyK}yhSrYOlTyBsZgd3)phRzG>
zyXV{i<N0O2?}v`GrQs#Uut20O4cT`h<2E26yfiF-Av7<KgrMK4JRh=KSdJyK6nyXb
zkk?^yK#nEJMvUjfx_Yl5{r4d8!<NvwzWf(XW#O{(Ztv1tfF`f-CnjtO?Ymo`X0``P
z1F2L?$X5np4Iuh&39lO|$Bb&I|L!}&n`oXyWmXnmXmeAgx2-HbLOg3_Xj9i99TzJ@
zJLLo-V`a#c(>y{Jc2|bk-u4mtCCbXMvX^&3_KFRX1i2}6ejldFKlAiS%fIR2eWz?Z
zw4_CnDK`}#Cjqmm_&5oeP4YOSX33PB!tC!+vkXp<Zw4ou!_?N$3{EVKa$7<>II$!K
zCvS%`IBC6DR+71v<Grxtv}&LB_FeK`Sa!MIYQnV|d@rxs(q47N`=LFd6e7BMKV)fz
z;4AAaHrlSPzsMU=u|0J3_F^Hzvpr;c@gU6u`ar#WkvF8`gV3J+*;y|ie-JWvkri)!
zm&Oj&p`F(!yCZa}MW;ff<c_dcZ*N*kGm#})3%9pppZvhq(9xj{m-M8qVNX3l6i9<x
z!(K!6k+K4*Vr$rYh}U1sK*{@6i{}lf*k7!StoHAh%9sk{S|6#hi>dHO#mdNH|3^|8
zqJzhf4GyRuUhLIn4}|vQUWo7<2>I}iqc4OBpEy+5aIyDpY4%X)=r|WDT!%u=Du3TJ
zi$FhKSoJmUX6Kv7i*=IK{^L?7nH5lq&^{G91Ijm>LtgK>cifM{ag}n;66Yp;|JLN3
z)-Rp%ss?`IUKacxXS)8~flK2#aOt0JA2;USvA5nn?Czh9eX#n=lI2X-${&sytB-FQ
zEtj|GqoDNJPL=nJ9dp~gx85#iJHa*f_R-_U+-*;NrRG?Gs_S5shS0E6VZRzuqmvrU
zNG>dy5|x$@u2kLId)Ie48#0NK<=erMfzF4{1!AUW<+s(GNBDr29kCVa_4ZzRJpY(H
z3Lg(RA9gk0qXY4P^C7PhBvgQe%K5PB0-++~J0a+d)Rtr<OQBkANk+0H$w+OIkxoe8
zH(0!Va^wW%pOjXrVI91qLqR5d`47*U9NBCE)Vy}nB9J;wj(9W0DdSEV_rOe#N|w-S
zP8nAd_Lp^4b-w4RXENRcndwnkg^oaOcws~sIn`#f7Z90X{h4POkQ&d3@HTm~beUAH
zF;e$*^s2Lsk)yx25-LoM5t)$f&_K}4NWI#TK$}^VWXMQj@c}04IxA8gI(b)B&Wfzt
zLZ$4i2)CWeP9?aA#%H6#zjl(j(X)|b;tw)x&qgfJNDKoJ_H5K=gbqi6RP)*By5X`#
zfWJ{%bEKAZ@w#W5BOB6Ck<lCx(syen;&D-=KJDU-$u5eVzE-jX<f5o%fHzM9<T8oK
z#p<E1-u&$1Vr?WM7fWsa8D|@kNk1QzyrO!Rdp8HqM|@i&Q-UE(e_o25UqvaeO-|q(
zVy8bsD=aJbeqMUre?_Um+Ih@>$ZUyH_k4*$BYzn&|B;cx5b@g;k+Vu&5_{K;2U35q
zIfoI523AB@m{A6hvMVAsfQh#P@zxblxGFN<Dg^DVD<j)~S_*Yo8QK2RlEhnAMtG}U
zM;L-bq*wDr`tMZ7E4>{*;HPm_{-8puBm2EAkP5Aie4TZvfw=1Gh(u>9B-7y4(KWxL
zLehQnKNZUG_%%`LYPkx@Ne#`UUyDk9uWqRDRQuN=P8w>Ges!q$@5aLC6<){En>R*w
z@&c9TZH(*zpg^9tF=8qq9Vw8cxiQL^+m;0~1JE2DYrUODEakUG&W+`pRof9aUzkwo
z@n!~!nb!~14cZ#nMQR|$w?-^dn+M2XU~AOzo7#N*D-RG#Cv&=^rO?2w(KSgeG?Nxn
ze}i|5eaB^7y|W`K`3oWZXHKZ+xa)5ZPiG4CJ{S9Cc0_i&W*5=GPU6h$3II}duzpil
z2IMI_Bi_`pH5kaByVSi^-YwZ(M7?%%i16$Zb4;i4Fah@#j#haWmuB}S5e!wxk_(ng
zFm#a+{z#SQy%pJyB72rOM3_E`*iWL*4eufm{E0f0_qJs}i5%^Zl$7}WMEr51kwk<Z
zQoBO$t?Z%5G5bur=m0$wu{EFp^AF3UKZ{C^t96lApZP3e^OA(YFbRXBk@LBPLG5^c
znc*mO+IcjxcP0R->(PkyfAKdU{&qC-KequO1RVg!k^rz2s(CC4085epI3@vb3kKq<
zp_5Tb8wR?ua_AWK{2aHv+8ujCGbf|6DxF`uigiv!P9I|(AQc0fOa|l;rzCf99BNrt
zvCe7r;8kA#iqnzPPg@5fJf|bx@ye)xD}vbCrnYhDe8u0AL<Lc(lBi_E0XG0KpHkhs
zd4ns?M9y_qj+o|5)W1el2M?Axt7dld>MPDBsT?9aXC;-(o{g@OI?t(t-MqdP=OU-p
z%8|@@E~;<PJ0Lh$i=I%`b@ztl&KG$kah?~RpJ2RiWYUkuC6C3W<=-{$2iA1=zSZ&3
zm^Zd!#czleC&kW`ShZ)f$apX^A($=nK-4lR_RYKwNb4rW-MVXI0x{;KxW|;(WHTXX
zV@{53HnS9JG&#1}%#y^IlVgl|RC-K4wP=h>7N)7^e!9$cTgu9%%e+{%_3$=k8soC8
zHfgz-bY|>aZMsY#)dTCPPZ^L0&5XH?imy(A{P}pSDtdag*~g1aV$;Wk=}OH6njNbL
zdwLbw*|8nPaA%Mv_v>$&X!e{~{Z^Rf#C9NDt^;mP%s{wGOTwy6u{z$<3xcNDnx1=r
zkkk}odf6IOE@qv}pPaQcN-gf~bx}88?N#3b$@J(jz&|&}4NUbg$Gq67^)IOm@49o`
zxI6E@<NM?8yd%`P9&s|K<$u#@0x3K%#uqE~!{{@gjMcuYy{~7VjBU!{R2-O|j7d3x
zW+GqCk5#spm(R|R9eqy?f@KstKV}D`VPX)gVs)D^siKx-5UXOe^mQ$XG3<g^E$ij^
z*#)s<h6o&L0n>t*uf|M+*sS$btPb@;l~2Wv{=ALH$;A;*#eCjoB+22hu?l-5>FHwY
z<YI`Y<C<DNPj^zoGwJ5IWU2a5Z|?^kn`6##7l$4$4!t;bp0f@OMuQN{(K$dAwm81h
zoUjYTvWsIfon$8<4!t;zp0f@u1ntmE5{I@FDzYSTXiE}@ULp>CoQ=|DT*|XNF4<6M
zy2cypWR@ome7QLA%ZUS50jUnyI4}^wFN<%=NbPcQ;1%k7*LmG4RwPP?2+s;pI-_WK
zKr6ZKz#EiZ8QZZVM4`qqQ;}Zfa!E?73m5hEZYr%<oj3wixK@iJ4AM;a?;3SqKW|8O
zO``M5wfn9Sk9yQd!hhElKJ4dxrSyh%#pj9Bu9N4n!Yt22=j&sqzWk-+%8Gl&jQtt&
znJ>>cD*qpInUu_B)XUw{myPf^rS`VlEAPDfzR^Fu^S1Ag9(%{VcQJdh(-W$K5~)j#
z&Y(bQx<2NTzZ>zP5t;N`amiM)PD7<Sx}~g>>R97l+vP3sCYhs*5O3NXJ8#E-H%A%I
zKeUm*j9&qH%;v<efM|Sk;#WZYYI7XDZT(6J+OM`Geq||CZcE}<mLz_)Mf~bj@hdJJ
z`XDaZUEm|>S|{^CTy~{Sj8}+X?ZC38uLDvYu$fB$5xhg}BT0xmff$#l{~YLjGrKdk
z699<t?2P4(EwSMh;zA#)j&<IwiVurSnkr1AH4m-arPkGXw`O-Gv3!Mgt6ee2a>(s*
zBQxneG2clw)O-KZaZk*rN)o0cMX~#0XTJ&4F<{gQ!F)&tq>B4udzLnk2knd5J1Job
jM4kKM{C=xWA!v2BChD{ln$Vi4(~?A;t?H%*Z@~WmZjk5r

delta 45860
zcmZ5pcVJXi*3Z0o^IDSW$z&#BN(h~VUetsl>WZRR*VWw>%d)$!uDa^BZ+8s{gbqQ3
zO9Z5Yf|M2IQN$3cG^v7gL7IR_6C1+!JNMqlWBqT=dFTA@x$WF@&%N)>!PlD%>)WJH
ze@}m<zqh~ozHi8b%C$ZAum^osKhFr8?eYb@_Rc-NJwD|JuRZ^e?+1^s>HA(Q&i<0H
z;){;>dg$s##Y(Vkw^~vAcVGJ2;rT(2Rlr`|;482%o$@{Av)-N(vh=Vop7oLat8>1e
zeBlveJeHzmg|*L=tg&8C>x~Uq^$@eCz38&<iw^eNZM0v81D`2I%zD~VwJaqotnOpE
zcWAv^>{GOum23Hkser2#G;l~SkuAGe2Yg(|6IQ=e>?wC>2bHof6|F#ud7$;B5^v^^
z(E3to-`#qWE8*c+3Y*(qd#c4(iWZVW3TKDwIV5zxQX1c4jnKFf$SaE7=`JncExY2D
z<b~E1CEiGCdAV5YuGU5m*HXi3U-qwiw9RFGy;@2NsnF@`P2c2@(CO>Ft(P@i==j3w
z0QR?gwUK25Tpb^D26)q*q>c|d1H9dzv_^?`(86l9-KM8DS}CjcYJMrDL8;msNIE2x
zs=ZBavfdR1>0xyYyL7)cuf-UzmM?{L=#25k${Z3pW4t%rZ@r^hii*CR;?0_8Z+k#%
ztOTZbje6GaEmh@xH=P*|YkzDt-K+2xB_?`jx;M;`i3HSiZ#-d5Me(3LVeM_NGM7zx
zSesIbUltWfd^Et@-fRcO1C+PDVcxa$6ew?d3yZ9P5H<*<-dwNO3RxySHwKzv)Zrbk
z+R}<x*$zwfgE`x)-u%Bzpw02Bw-o;`7tQ&uSH0J|hykp^&JVm<{n;14)GmZR@EUp6
zWU7FN2JB)lYxS%-z9R@&z1XW5yb>T`^<uA?<B%w4u{RL3{>e4*@I$YXNIc6vxuO@a
zdMk}qOnFo*Ed@7Qs!+W@^ycI_BoIFI7R0UQ908T7Wxsh;E9+J3w46s#U_-6bav*_F
z>$E>eAk<R(Q!|4!h%CH|w;Pe7-D<r>-L1I_F9Zr}>@OeHT6ikfxTSc}I%~YyX^G=S
zDQmo$jt)sm-doD84Y?cxGvIUk;a_W;v`(M97%DJ6_h#3ZN@!z{CCwcY7@vDvw6x}6
zbi-6s>uayw>nZJBrR&!&h>!E-K!FrMzV?PoBnVBBuf2^LTjND#w6OM#m)u*A-dfyK
ziQi6NX;A#eYl;EqQ8Xxi<BjI?5e5<?>>F?F2aK?=WxyH@E#(hum%ZxuUY~3|&V$~!
zXdH-{j+hqqedpC`JywcW1T*d@uTq={rCHUZW?nmwqN5?e5~CX=O!>(hFOqf80r`_R
zm9egh5r;18r!voA^ZVO8ih-u>r^;yq60Olsz1|uIkou`%KKEgb0i=FvroJ^!!H`zM
z+E6v?zxK0#)MB2{P}L|9V_KmxJwoMUnw9-Y)7p<vWi#Os5J#wTNP`682o*#6Q?iW)
zn>Jci#;IyzwTC@<rx|Dc{-iCc1W&XxBmgj4mF)}?0Hf7t9&cxmXy?&t{y0^%GckBO
zzoDv3740l}&>MpR#M@c2(9UC3YUc`W3uec7RVhleNVCPyYByDY5Z*;m6g2pFH9N>#
z7$j^OuZH+?gG$gG8LuV^tzn{4ASbc1=d=+OlUxXz0F%^gF*Bh8h)HUGu|%XLV3OLP
zp>>(YouZ(ZX4&6Ar~SiIG0VlE2{22|7X1z(V9ZkEVm^Qb#w@jABR*{Sw4SZ9zK@!T
zb|9cRTa_aQBs6EMa>Rgy=4{m&F}$`5<cI+QTNb!BXc#dIoDqYkKw9987?40(KqF=`
zIYDn&Tcl=v%5Hv9vjdA%BWyj4+IhJT9QzmTk<!IZKZ6IL#m+zh382L^Q10g%c({!9
z|BLou#WKefui`<amN~rwl7yUI0SSa<)GGs34uS4nZAV|yOr>JAi$OiRTFn;z&C7ds
zwOYty02oR=yIL)4VT~3TAV0AmdqvArDn4;BsB1q_vw08zCF<Hw)THoBAW2DuUwW6i
z)=OQx(|-4FTA8QQP8Wl^cBg9xb?r{IkT0mD1B{(&tJc;~G^-B_>K--gC@c7fHYBh|
z^+l;!eSAIL%l`Wh?UCeORpE1(n5g$&HB)Ro#ASfHpEdla_RG|MRVk#=2N{Zd_N&R1
zH5~&OG{{42{6Dps$wR6VmqMJY7S*%5a~W84nDzQU?e64ZRmn&h3TzImB@L`Ua2Ztf
z3-<B<Y0sp;a1EkB<_j|DBQNR#2k@1e#q9h4r7iaazfyfMUKzelo>f`$Kd|(ys_=Q@
z0~g9?X`XaO0Unx%=TtWOKU$acIaT5D9&sUbPHo(T$3~z*UR2q||7au97gePpw-sE@
zZqn4ch<<?-D)hZ-PkB{)#gqD8RrnAfHpITCA@DetLY010S=&BZuhfsK!utn8RHq-Q
ze=u4>Vv78vviJIE4>b76HH)ILpUA9{SfC(<9v|dWZcX&@v1bETXZw$RwH`_*u$o8<
zDH0pxYhLP*uyByCtgGd>G*YK=Hpthai?y424a-1S9nLQF)Apo>`;=Bvi6XP%zP9bG
zDvV$VVKEqMpX#p}N_wpCdRrKf8tX$_)X}t6!`cL2*4r#RP+Jk0;6v<!)`nMtn}3TP
z9;kIKeaollQ~)ty#alij*CAo#TfSh(x{0gc;S|<$kakP^DXt1l)G0ngES)N!s8f7!
z>AkrMOqq^0NIa5$<d40XXOI?UI|pfZm4eB~E4fDiO!pOuMH?i_obJP-eIEw^HH+On
zSbLz;ET8n?szP&gmQThGAb~K;SJG5kO>=aXue8isrJ?@5u(rgPwb|Y`Si995SmHy#
z+6KrzYJg>|`EadW=`x>OpuhywGM_1&GDtuz^C8r1%T@63BQ|2V*1q&3rvZH2Q+?z!
zBD{2vQ2EH0AG2C>6*NE{J3m}&+qTYCp(@w;;6bU?eZ0zbzPx;^C07B!Y9E%a;`9To
z*C4Hc{bhs}DFsXPl8@JSwGX={p-%N(?SpR=Mq*H}WB(nYwXay`w3tsJkF?I0EgBgl
z3|QxDAUqOCAguFY#LvUvgFzVbn^?(6Z9(TvE(FC|n|w05fD9lu`DADh5)hkw2rb`&
zBS2}|ZeP{~-Hudi6Fd!eiy`GzH9f2y^eIPtsx`%H>7WOiUU)#_**iyRlRbAG@~QQ$
zAi^y14DI*1PyN*m929ier?y4q1>V;_<s$HA`y4!YA<nZu8m+ypv_I!lo4D%aPR{$(
z-iX>{5$G`A1)n<2W4%s3U88~Vz0aO7R*QJbzITQO*r@RLJ{h}!gdN}0K);<U;o%h@
zJHWI%Dy}$frtyu;6{pQWa;dQBIFNw2LLIlv;utV(wEe_5t-@D2T2oBky&9h%qczw|
zy$updqcxP<g6n`9%Qj5ZT9uB~6cN&Be1MGALLxo~NkUrv600j$!2qdYjo;F`mDgx;
zN@;w6)M(ivSOf`6YqV5jStt#V8m(D#K6Nx29~0QDx3qQ@6I=v}N+xJ>h(QJj6SM{`
zBm#|(30mtm);l!BH1d~ISbUN;=k_TsghpH~TX+V@0Ah+JJp)KUOwr&O=9(M=V`-tL
zEY{S-1e4v@TPtE)e`gvjIorswZ<?(AU9H4p5qWAntX`;H?>!2u7g8(I9uiLxc`nrQ
z7i%K&BnFQ>-`7-I6OpInLGJ^Y$s<q6LgcwfqsViAlG_EZd__}YiOqJ48QP<PG7ydx
z6p~-jOfm7n2HF)36MwsC6q9lVi{96Emi5)I>zL5#tD9m&fMEfhzB<A?zNtamh1G%f
z;t#ZXo^Av6>)mOgiw5d)vO)+L1NAUp*->2!7z6c^hSn@mZgyB5rYj8-<2-Dnt>v>a
zTN_>hj)<5wB^zkNT(oSU4b#KU@X7|-Fui^QYnj38pA%Lm+uzw*g<3J$#mGV5PS&pv
zupD4a)>9%j)07-wOxDX<TD26LX-aNboom1Jq1IKYnCoKX0%NXzeTd}(W3GOEh~)xf
zuHL$>bwSk1k1l5CKGH5#EOa6KfLN%@t*fT^0kKfew2`CK4~T_&`;OLCq<mmTAgr#n
zGb^+{-Y#ohi~um!>e)^&27s|vk2s??0F1SIGHnf}?Jp)}SUaXGC+)+lv_V=Wemboh
z1k5o#TO>yy2bg1e%<1PKV2)8gixC>c2tB43pVUQ`1LCw>hstqXZNayok_9Jnf>^ZO
z)Ra(IJ+1TY=I#G@rT6nMvtf^#fp*}dY&;O_97q72*5wugB+5QbWnUF78HUf)`KI%B
z3S)@6UW+is#(8&akV)rtx#@&3kk0GaLX0)BEMUeCGqNrj_MbLsZ>Ygx26mlqP!T#g
z-BHZHO&eQ2%8=M#0(+DpM=?lXk21nMiAE~G9%U5Qx9;Q!c=!hUe4BPx#TzaHWs=@-
z5y%0*VT8rLP3I2y4FegK{=x{<Z5;c<cCD&>oC`tTZk!82Yxg)KEP7k#?s%MmX!{r3
z2$(dUHQAwcuNdzlc!4n9MWAqHydhUkoqOl;23F2#h$K-hH18aH{tj)1Qa;DUKpdma
zaWTk0&oN{(LkH!~F%X8o$RQv*pH=VDUaFYyBGCFh-$fw*Jl_z>PLxXidA^a(Sc7y9
zf$>piciycH@jhK=C{aE?bncPsj6AU{fP_+=fn|Y~CXn!abw;UJtce_G28mPl2;8N`
z1;9ZH5xj>UwuXxOBGTPvH{YiXSGsL;t<_=eHrHCpifnVcp4|5~>iT6~ZY>JlXTX8I
z>t%gb=}9|rP^<A&fF<S{oGI$F&yX8-kbv7~<O_cY5^(zr>~uB?IQZdX_PImaW>2SM
zE`|w{j=3h0Uq0q`0r}-)21fcEF_z$$PZ{jT!`izQr(6v3%coon^2?`;FyHH-eaJ7L
zG8#AKlUG;ZmcKIirk`CsqG>I@GUSBCBPf1l$O#J)ieDMdgw++e;ERUH5`n;oy6Bpa
z0~0Q~CXge(=vIRq@kOe}06!)yoX#6&)=K-uqnfJczhN4M)=~<R44SWRno53Rj>0oN
z_O#Pjfy%%VOC1D&`=%)uT#&$h)5L;{xR3PlbgF&!j5f_vHq}+4`8m}z{d_<{2uf4U
zP}rJCZEDaaZziift4%7KY0CWrn9!MN7V-Q$$v|hO*|eF+-xx&BX2ZVLMwHEV%b_Va
z+mwkc$dHhU{KOa<{02?ICH9@?H0CW^V#+oL7fMUaxNtupp|r%r82nh&2+dk&=U&n_
zcv{xECDAmiGv$hJ@M%_OV#VK+kNq-|a6gz?S4~^LtUZz){sAM5lDpUupm~2Zl@jLh
zTMZhD#2aY7HqcWv#E(?;0NU;H7Pw;C%RIW~NnepILu`m$A+Z&(5H!f2O#85+*Ll)E
znF_B6u{j@Ni;>`mAJ7I{SsUz?s@_2f4z`ex_z11<<B6Uj%+&Q2#X~HakpL6QLo9fn
z(LxBp_Xtaw&ra+5>y`M${UnshmJt^GB$hKGQOpP{J>T+DXwDfstI(h$Ewv4;W}LIV
z3VQ>!+EUXuve2NTEbI|(kOKDWmfGM(7O+NF{)~riedA{=blRAofx%OZwbbGp!Qi5p
zrM9|}1&=fCXNJLR)L3dGSE{lK;iUSer8ahXRbI^M@s`@~Mi!>)gr6CP0BGXRq!7=%
z^*{JkUc@Jper7&A?qo|XA^1wC6%hqYvDD0sMPf;x`ZN4USe^DWuqgK8KWmG;usY*s
zHOj|~yAl3V-fwSPmDr^@y#yXQ?j1|L=|&bhZnh=j7j7%0&~bAt^_Cl@&~NYF*!++}
zzs>!bBKmEfg%W3ofrz=KF0_=z?24sNuf#7gd5{J~p$n~4T8>0G2yLO2S$usYDqcPk
z-zO|#z2X%k@dHau-pE3Q7FlZQMi#Jb8W!#Ni~;mAOIc^BES00TuEcN02uegPbB#c)
zA(>fs-3YHR;zLU<lki??#Bz5Ca2AaC$Q?VJ1?<|NNugC&U^+Cr5e&^*=k_GmM6<5E
zu}IOAt1Y$tbw$yUYb>?mMiz=(YpI>BZoJ+=UT-P&irb~T{q^NnUifqR$$vca@-3`q
zuHGhv2R!OTe^a7uy@l+`{qQ@;Q*E}gcCabA`h9`TmM_RXA<t8NGS;t`B|otgp4jz)
z2gOgUdPysd;*fI+t6NwPzh0c&VktbfBPL|FkW7lpfZEE2`Snb4t0lr2$k0&ON-`NP
zgGSoMHv0AY$!(Ux!*a+_Pi-TaQZ9q4ZD%<Fy+vxfi$fLJPBOQlB1kyxva$}c#{zn{
z@Gi?2;T7Terrnm(h`aO>k!b?W^UOYwfY=RRZ}mVi$RdT+&)9bX{odqft_)S_Gm=4S
z3^Jhhu-^ss2a<ane=MB*9+E+CLk3ma%XS9!zRA5V4pnI{$#mi}sM0?6a!Buz+-J$$
zEK)*{*+(+%xeNxzezq;7cTDbg`VToD$m}PXTe%D--~rYstlyS8U@1Ju0Rw2iaDZf}
zX^<8=Y-OEbL&9j9!<H|fHx19Y9I=$<qG?2?1vKAZ`alBWh=mos1jQh0LV4)M5xrsZ
z3uk!&6Ea_r3{5;FNy6$;_FP2okUVNBJn2PD;*!iQTn0^ZjMYW-isUhL3q>4|p{6-T
zGUZ$bO>>+TMfFap<4)5cHv*aCB=ajoNM=|&Wo1of|BUL7G(2S)0RVYb6FZ%=mU6*T
zty3Q4rA(RU;yiXas-JB8wWT)YX({mxnCHkjQszr=VBdM-d`DrjNfAL`JDjiopj7nD
zmT@h(=$O9Qa)$&Gjng+<?r%T>qi;6$Hz(i|fq|!0tb1Jlvb@TLpe<6B3qc`RRd!fJ
z{7?ZzRd%d^Z?a5k!olqMgnn1~U>AXQNP}GjDrRuD+}}V22!pe+zxgG%0n{*dDWU(W
z%P<$g3xr|W+0=MG*hx#pu<Rf|tRRwfvT;~ZOW~P`@JySStxU3q73v>(pTbWO<>LWh
zCc1`Dz&0^EEOyj*3Ydx6!toOdg4>DNnMv7VM@<amd@zXL%2xku)dkSGR#;n=oz>rd
zH>I!88?4IaNnWptJ1*MpY-L}zYRxdwyO!)-;@P7b>C@G=pJgMCp}rK)&}@6M)!T32
zz?Qw)Y8UGrN;Fv1yC>~un(NKHl_#_1^$BoMfs;;4f`rmZYDsD(kcdG}W*0stP(kwT
z*2(OmN69mD0dP?C$?Ti%<~uObkvp)H*}r_m8jA1{a){Z^W-Ax7)x-~;v>j=wtDZ_Q
zM62R4TJ@~csvu$1*=)H11_`6iW{bd%u+XY!v(p!4s}e)pD)>5E-o}tDejDRlw!DpT
zoe8w_+3GDN{5HmQE_&rcHg03k`JshDs9nxhe#~Y|Tj@Rjh@Xz7G!QSlmeN4H?DRj>
zfPLBNe~_^Ba(3p&>y|qAAHH=h<t%RLciHSOt@TKQ?_r#@O+JKeKag#FD{4_8{p@#I
z>&rbY`sFB^>?<14{c?0Mz#&9ZIpK&klCtI5VQqL$*8BFDw)zN9WOxqFU%sG`o{eFl
zP0CT`*zMcvN4%BzDRx(Q0K7>#roaOUyh(&d$s&-b+N7N5oE#oqbH)yet|#ZH&H30M
zk!?Imo022qW-bI4aHr;o=-Odn1Wn69<WotbN@@aZdX9)P9Tt4$j2!s18>G-3Gjl}r
z?nt4vW)av8Qi!hK&Qa@KXJHls{+%0b<r6cc&dyOEv&NAx%cj1a&l=sLzu9wsjyxFw
zlepA=G($iFXMPUOuOx{HGe0NHV;Opikx3q7eomwvzcr9e?rk9pmg}7>7v?Aq3Kg|5
z$1gl0WB|G_2Od#?(jnZ!ocL{g7UHRxg$r{M-T0J~97=jD%<0nA8b}?U6V{gJWbMlF
zB)(J9J)e5+nLj-F$}=xKpFYy(jda)ai!Z$Viv3Bs{;a2Dc@94$@~Sy-Ikh>;svH%I
zzYbEIn-Girwv*no?TQ?=12;iDLPhFw)CbX~h7`sr$I2XazQ<~W=F1_6vzC3{NpJGh
z+8lXq048d>HYX&~V<1t}wK-TmsHPxM)3rGX;l+sL{$_1X;cdL8l0!9Jo744HtBjWe
z#P#gi&U(wI*XJnWj4X$D)B2pK$f1EmIqP%aLPR-mAt2Lti|X)h!lq_@PUbFI4s{$)
zBdyQ*#hun{+J5Iy*KM<}cGlnZlyA$C9syj8w{1BxRSOd4Y|Dv=%r!_9ye$U@BM6oN
z0qRqBysO@~)2A*1Elr>1$Q2ecK=?FA-bDjRIyneoCxp<ixnb=}PSzLpj9c~bM)NB<
za=pk!=UvND`sJ$DB#H)dW$y`IVyGwGm8I^|^H|@z_1Es|ldHDoRTpBYSKnOq9^R9J
zgPwdXR~_U*b9sRk)>y7G9@wv04mKP*@$7qg=pJ9Yak<!G(OSgSDN?G*h1;c}Avgeh
zGglqpv9{3E%B8U}nf1G0-&Q_3SGFXWXvxXBvL!*H9VX{S#99Or?JzkP5ip%W=2A0H
zW7QAn?Vp~Os|Y6rCUJA+styt=({iz@Q?G+WuTRTOb{Cd9y*@2Bbtmt25|F(<E%)|2
ztkHC2mP@_9*lzNmp6Bbe*tL~<eQ~bLtV0L|FV2mLt2H1|@Zwxttq}#&1YVrm_+jpU
z@D#<+?ZL&lO&+qY(gK-F3bppcU+H~3kJq}T&?$6nuDnMCA(T>^EAJ73B&A#&?uk;o
zD5W;HNZhr<Q&~!FZoTf-Z+Ri`pR3rv9@BgETIH5O=eDbIW!^HEr=V8l%Dg2=l(8xo
zc}r0SA{vklACfhpc!p}SD!0*t)*BRO<kAAU&A#c^dcL<}n_CJU-EDLGmU33x+`gsM
z@HXn(Z4`;-QsW-7hdr+EP#!<zV$fBhL%DLEKnNIza^*Y$35-Lzm?y$g$`l{Ut#`My
zlrqI+>7m@@UHn#2F5Q1P!j?a&Kho)lTLvYCkGN$}Qus)&jPIa=GLGaTzMD?x{<xoa
zDK~4l{lHUteQ)qmE+X?+VZNV6_qVxhKySUW#kaX~K?N6B-{#7UAV^?+n~RJfUv2y}
zg0AGUHow<v%C5LdG@`HMn!>F?2ufFSarBSP0}4WguH~{Hey>-QUvugJF6wa288sjQ
zaV<9_4uL=d;#w|3Ji4RcC#o-d`44)#^1gmK6Tt*RU%wo8Ac4@=FUK87((z;5b>RpY
zRsGq~Kj^ns^mh?x)$8vfP@LS~9}<4v&qq~%KPKj9H2VEy@G$%7KkAQpIuCO(=s01R
zU-mbIfHBN3gMN^(VwfNGc$3b30%2{2KkFyIedQT_oZ4W9Uv85Ea9(r#%6z{{_jYtO
zARQy|>?P0ZFL^58^&@*m&PzN)o6hwk8{u+L&^*8TI0lv%GGT3jUwI#RxQH%P;0q<|
zx(;>QfBlF{Tn=#G^CPlzIlx`$S92<@CTN5JjT)ORdQorI#r7*AKMf{;Y=1yR1|Xqh
z`(<PR5`*0K%gBI8zFyia^A|l5wEYMM`ceZ2Xb600-}V>X>v`%!zZ{X^65DTzC<G+H
zKlIC31|+~g^oRe$XAqHM@A9EP^1zKOuJq8qY0Ha(P|I5O&P#elS*=?R6<_O@iF(LD
zrPhx`{RCkg7Kb%<^kqHisa)gqet?g`HBRq?1jZV_+!KHV#u`5sbU$1>NCO!DG_Jc*
z)JL>1c8x#t1f2VI78T`xYKX@gNYQVA((t?eO5?<LTKe{vUwMXo`hP}!d*>_quf65q
zi=ZD;7>K)_!3+|n?DmI*vj+)NcKhM%Y4;hRvAmZ(`w#tBUH7^OG?e$c2sD)U`a|N7
z3o1a^>&GEi4INDf;Qq8@e&w9sR{yETluG<|EFl+o%xx5MfybOF0X^UxqbWf#I!MIm
z$NYuo{31pt29ME?`(=zy91)|R@QWlP*Ag-M34d`X-kOzC3|)J|-{mpc!dw&Oo%GAN
zT1ufsPx^~_a@7HY%_sd`etn}N9Q>C*D-!PbOMfv>`8kRhfM5E%RQ``9QsAfjGP;*V
zA_IQ<XI3Bse%fDr=Z!@o1AfLYlI{*ZGT>+YCI3?-GT>+YUBvcQ!godr{Hq)B#qQzk
zjjbp~+t+^e*Uq3ubuQD$8m_RW{q@$&{EvRT0vx9&=}z`#zr08q;Fm`(`wN{hMGMVk
z8dFO><aAK!AN{QPtNOCLe)MO{`D&7HxRFE$aWb1!&?r~@NKEC>h_c{YuK2U-Td!kp
z>w^oc3S<qnTUF{ICBG`*3t6iWmihP*`M`jZE`Hy`YVR>i*?_+K>q&6L5euH9h=Bpj
zx+l0e${)nqy{12v8WfNjPn>u|W)R8j7nmRivqi7z2a|&XGB1lWZQ_y;u2Q31)OHAa
zub<vIJ;Vi~MA;CMxkyH1ERPLjy=jN~>n|yRu>l+!Jq}%dOvu>lRr(Vt7Lb=u!Gtag
zU`D-7M)0%1aV#`YpPd>PkcmSuAvBJJ`UoMAHEi!d{k2Xt0fo;^Xp*HhB$NXqkcyiS
z$eI=KSZHG(9nVe(Ap80Z%HZj<i2<d!_}8q{zs&@De~{iI35H0&;xT|G25|h{ol8S^
z5=#!&?@mo}ngyva$V>_#hUrHZ@m$zcHfXRuAT>20&%?lk(9{6V!@dwgXuO%M`4IhB
zdZyD;NN7Q5CN<u4KUPOv5ZM^WT4lEys@K;e8w0pYxrSU#5Q~nsGob9U|M0qgn^K9N
zV*8H=FmPwU6fcT^L@7H1{s4C^AkiH=1HoMZ;aZ4+DS(YiKrQE!PI6$yr-AyVH?jcq
zX`sa|*7guL0E_4M0p)5yP1J?xidE9SbBsREs07n7g_f!B12Pj4<jd6e0hx&a2~)lg
zM6bdWdUb*rWQz7fK>aBoE>=k%O8yZSYxsH~S-4nrB|sOeX!QzG%k~W_w<k)|?5}U>
z9i9Rqwib8<Bl-q|Vj%_zu)aaL5QBuP>Kl{`F_C;B?i-X_bjhKOYu_MN<vVz3fEd91
zlk__)1_Y&F2=ZlbKu`ufAW`gqpbUCIl1>mFez9mhc-y)5=t=rgqt{#)gVw9LE(Wbv
zbAvKa4)XPCZcqlwAYuC4pbV6W6oK;GAOhu+VvqoCiT&=|`k$1FC2lDc(k}_hjYE)!
zXG?<lV&e-EmM#fm<BP))v@B#l4DyQxZ9#BKo_d3XeIEwpO#_h7{4nU;Gze0hzH-)-
zIl8A}rCT_~=_}nTQk=drC@-r(1rRHPxMI))lNKq~wZW|I?BKil-Ql%Cc>s<?C2ph!
zl?*=;U{B1|wIoP!dWMG>3hRQ1^l!sNM3Rtl4E^WocO=&b<+%-*kXcWiA!I;pWG6{x
zV^DfbqyUK<#5}x<<G`-Xtj9cfhRs3g43VmX%x3Bk3=5QnKHb6=&C~BpZVAfsC@>+j
zC5Ro8z(MV|v7-5UkMy>nbb6>MWVQtnRnLq-A%rOq#OpVM=Ib-e;19UnW!;Ug2vNPS
z1X;xry+_%VpqymjqKa37rijo%!qO{*^(fcD!)rliFVP<>yXNZ9#Jm<XMKUMEC+4*v
zk~yQ`m{1VR>Bl-R)kl~23(4^fCQR=alH(gBAo_*m*aV4U`-RXH4{!ufRm{Ikf2gb~
zB$^bkG$pD+Mf_eqkt7ttU3Bu|pwWCoSoJdfwTdBbsWc;ogye<>GJqHolDAhu0%AxA
zV|6$Mq#-h~+V1(G9`ICDyBHM1Rl67z!&QeuBDnw^U{r_T-ub1;5DoaT_W0#`Jx}>q
z7lTIr*bo+C+N44V7-K^vEgcdVV?%A)ac>l&fnUQeeWX{E)_{;QG}3EAGXDrRRBA$q
z*<az7V=hl*kJsvdE1MX)-nDcUX=3PlH_=t3i6L~;6477?E~YYNg}$s}s%t3SM4IY$
z6D@U9L-Iamh~E&MN)5(ucR~v(SN6jS{hf+gE(Bdfn&m>!MWk77Pt!%DS)syu+&_fq
zBGT-Tc>4$hT4{Dj`UjBEoE?(>0VFhMhaCS9qMJwyLgFS82z37f*9N+Yw7|82ZXzuR
zNjCvuAT0>NP4H_e$dNA(Wo@*dTZL;W;pHJ;fWKOTbTrPtLrRjR|D)a803<*_^O@oU
ziDCXx2s4GQ9fQWxI@WltJ||Tdl1Ig0La2_~e4h{kxrSX>s~<?M35lE~G-<-D31M@O
zZ44p7x{uk}b^7q+$1V~%i;oG3BByK`?HgFl$B3LZgk%T?CS*2*usD5#RIm@J;9Vi4
z48QwWzvKz-3gMNR<5U2$so1!%D;xBasofz(ypsbaly`@a@tG-vP@lcbyGegLwKpW)
zBl4*b+8cs<+$w}X9%LIf>DyBWLo(t)?vuDQB{m8n)aM9WwprhtJ`$3S4e3n?9SOm)
zU8Li%a9HafMriu>C;A0F*guRn5T-#{4U??{+3a2VjGhC-a%6)E;|7N1)hCcBVPF_n
zpJ;Z0#B3NCj&<SD2a$*iP};z7L1+HDNtpU-2zzU{eoNaSE+~1mAz^tN8ZrPK5=K?$
zCtzSCtks6IHiSKi$qDvRsa9Y&_)HJw25ZAc()yT8jgYCU*d5384fn1Jiz`sX1nR1A
zTBHO)0(DgwC%j}TNSL}R-24Ha9UyX`87EHZ{Wt<9OlYrVj~~|`>$%pk6inhe)dva8
zwNCXx0&}fXeIiBm*E-dYQ2(r_>bGl$-<T=uU1%zBz0(MI3h4FJ2!rTwAsW`Ug|l|r
ze>tHK^i*yO8^wr@RW(XA-yT-F@=AdMBuEj)fdu4s$6Anp-0oNl64q{atR+%dyPd2R
z;85QYR=P-VIx+-lSPxJOMtNK82+JG;NTBZsBgY`00)0m~zcU{Scq-9%gkznov-A#A
zURc{3&N_pBJ>*HVUa$J{*`Y7>ZIQiUqk+|j!k|3VPCF7-j@heD>DN4!_$l^scmRKO
zB%Cdhq#$AGk#IxNw;*B4kucr}qg^>j#H&ZbEsur8p)fHJaY5yau(+ngWke8mG>j`@
z5Anhwa59Xyx$j6n(EBfc?fo+A`jviH8Caru^LPWC3`;K$5~ZFD!%xuo$)m156=qAm
z(jWcPDOZPj`BYdg`VfN7sW4m_HFzFTr^8}46NLr`=@dt+@aeF8jR{Y=Fc$7@*=WuD
zur?r)^@jcLv-(zFa6klegD&r>`7}ZXvEN+M$CM6=NGvdcH7FvdF-TwyieMT)!d38a
zC`*2$KUy}_RiU9jG$L!8&ucq0g4*(HocUDUk!;2{`lPavt`609WJJ~$GAL$b1hwS}
z*nA>KvzIRGZ?+ii>QFUDM`Sf2LqZW$a}&*j7`B5EtQfa^t8es#CPa*cc*8kH)tnaL
zZ#Z`VftH)*K!OD1w1~_Dg9PNX2=c(EX_Uoaq&6?2EU>@)9`SZ1eu@^y1L)0jOaTeK
zd1ML=E07pg^CI;YM8uAa7_<#i=SSp@OmfgN^CNOcCRqTQAHk079$r2K7Dh18I@3U7
z+pp+%lz|rez!;C$7DnU;13*G|A+`HtIwFe^xy-)fCw;1?*RqJ5AK+qsEQ`oo2S`+8
zS)@?x6hM+v1i=JNRgjpf%OVX#j*&<)JC;Qn-fu0Z_$)??UY-4mYkFr-MV(s;9c0u+
zvc-*S2%(g^Nb$`QmSViRNJS?eZ^X#kt&WKO2ncAdj>vceBs5n?WV`_qnyVvDyb+_w
zZo{mQ$M95aa0{oz+=hq@Yas)O4G|e=fCR*b2m*~qF=`6J+9#2$ee7Pv_*L+e2$nb=
zb{5c}*<mkIjDV--j))BSzy;Kfhz$5Z0%}J@CTT&EV~d14@`Zy)zHsb_L^@b!sIdxY
z(C@XQs`0$1(_Y73a8ZlBPM3frsfc`!86*nX8-dH3OZ$;{So<=9bB+~0<6R~6Wdv8W
z`Nt{ZWbqj>%-exL6P$5|D@Z_|afUfaK%Svtjuk{z<7C#wh<%S~4EB^=bhXHkixIi_
zLJC?JsqM)L#%Wq#jxaUbc(~JLr!L^4E|(+ng&UB7xE#rd{Q*coT#htpX1yZ{26;7N
zvutCwr{by$LSyu5MBWdI^D%lg5)_AzAh}k(l=TU@u{e#ue(cp;V{1jfs2t{C0-|5^
zx*aqC`$gr8KX?j=e$n<F`2dX50IZ6NfENTbtD<rMf`n#OR1QFp(5#9&129h29Tw#Q
z?=L{Wlwqz7G!BPF<v7GsAPtMkaR?Gf!=f06zecwv!di7SYjf0-xQAslE1$It8eIa_
zQM|s|5|vC)@4n6|gGTGp*Q3%4feFOdqjH@E3B=c<SZC?|-2^rL7<Mpd+)_5iRiQo|
z6E(#<iI9QHm?(~qC^rWkbZQOzMaY<4TI1>vQcYBzdqD;|HBp4dxO@i{P!m`(Y;>rY
z;8Yz<RDFU|b&x=q5S3dNkfalZm)R~#MYBy|uZNADrBkBv4o!mlj44rFI6IKgnG!|P
z3$Zpz1^#q4I%0ILnC_NJyTa*isnm7Tqw+O4r~qMl6v6a4Q7XFb9Ttch7b@OyA!t+h
zPE-!P1n;wVqCpWUf&|1n(WcF<^8y09!g;Jyo^i2ao(n<Q<ayC-r-^BkI4>$bXavJ)
zlQ=JmH_7?5O;EDxJ@$OQF}3_X7lPhjc`quRG-LqrUbK+E7Y+#8G`<&Y+g=V0>={2`
zJz_@diVs`_69^wf<-2nUh4zdeMCH44Ac62f6t8CvrFod3J>!S=vY0X4Q~sfgL7T=8
z-R7iC<A+iCxfSRD<HKm9CRRrdflXsA>mN66F0GBq8zu?9Tda-By*)^%)Kb5Tk%P_R
zN_IMqk+ae*lwKTM8I>;%CKTEwu8gL{8+#yuu#zV3C$vB(=*7WJcCUnSpVE1gi$O0A
zZgQKCUL4#MEfnADfDSM=MH@7-Mo`>Ph~#NB>vYsUTVxFLM0Q582GB-IEySGDK8q>`
z*zlyWr4qly;txLXK69oWNZ@@&(~cH@kXZabi{>AQiX130Xz|zfMAiLKkpq=H=<SWl
z9H?X=2f8mxIZ*!5ib9%s$D>M*M1Ol<$_OfzARH@bCLfQ=14Bpx?RZqKMIbS*jz`1d
zRt=Fn0689wh${(_gXw-e+FE3ZC5yv!>TXRHZ2*Z=QM^$&+LL|=uk`<^*m$!O7$Vv(
z<nI1dR9?LR37bwuV<Ha&5@4sI*mSl+Ll=d$v(c=JQFd#6qebv+)X3pCA&St<zH{)t
z^^M0X&pFit7f|P-GSLhYQ0JmZG*e&#64g5wjaKqK1d*s7I{jQUPh5wPEUxs+SFHl{
zXAv29KC0lmE$QwL_Dr{J-KvAA2A*J~<54rwwxGGFbgUqObKY^RMR1b73sE+>#JIWg
zg3}b>0^@=+TR;NhLR6lSf&|2cC~}W<MhX&Vq!*&j87a}C0vDq4j8w94MtUJiXQW#w
zdw>f^KSi^a<#`e-yy@F|KmUw<YXf7oC-hSk$3_et=Hs_{u0~m`kuffPH7Zk|;G!R|
zQt=mr6pXtTWm_5<7n9eb^6EA2+(7CY&Cg~W3REBVd1IqA*(Xn4tHy;H;^yJC><pJd
zwfeGVO^o`fzIieuf$J`i>6?cgDxG-4CiwT)>_0a#yq?r+c?wUs5f@Ug<>6fIsIUp`
z*N=^CY8+4Y%ah;Hzzr4%^~=L|G;ZZc=;QuubTi|&WdA&wCBbbI$n?*HV=v}1aLNPN
zH_eQa)POvh|G;e#$PCECP@D&khr%&_hS?pP8w)(iVJ;GVOJf)zb>l+ttizdBX55|}
zo+podaupLY!}D<D^G_}V*ExbcQ)c|D!H7J0ogTM8ATuHlE@m^_6iS109G9n*Cq7c?
zb0J;q?kx;c=>(SeHVOowFpd;3yh$F-IxY|2qNC4+5Q+X8m)GQGYqG$D=bU0!w=#;A
z<P^6-a{w|WuVG_;(La}b<5ae_jnO4JHBWwD1x(0H&BHr~^fExMf=$UZR@N3W(_9=%
z%uFMk9$W@TuG87Dw#L25>3Q<zJZ^bGW_li0LP~w*;;m<O2K%n9(K$K8#i7f{GYAI>
zWXRyPq?zpDcE&@gnJ!KUGBXJW(Jcw#MWqGy$L);yN@_u#{Kg5mkXn$3xKXwz-d$R1
zkL_smRMJb`MvOpeDK%mheQ5_Sw>B^9V|M8lV?ekz4`-AQqXd2-Xa#KK8N?EC69}~U
z<PJz+tf1bd_dobWpgQ(bxzQq7mnYw#0~0cJd3b}akjsEt$?mE!>Lpj^$@2)@>>+L*
z&Lc{=4El2w8&F|1Os>k4={DTmfy}Brq}y=&2W4TFtY+&gjCRS@&bS2=GOKCa;(jG$
zFh|y~qE1H3<Qf-;=Exet5oKYHtYv@dgtFG=$;_yq&ylrx*kI#362QS6S;yveGFoNU
zxpk*GvX1KhDQ-6+TGhVF%es`esI#%d2!54k<kL$58vnY_*Lm!VUl`rXzRuIQM<y<m
zzs`#`rV&geYW#Ixn>($>T!;K=9((Lgqe<EMJdJ09AVdv$J};lYP)sCr&gXTwmtL+0
ziH8^S*njUd?reE6PveJu#O3U~rm`IJs~7Xy-EA$zq=O^Se#p!EI^S;6-Du?r{*Z_7
z-_-em#$U0lvHx_J(M@krldth(d*TAECg0C{pGct9<YS(Vga-r-v(M(+`|mfZ^X@vE
zFTXYkHnh&>%dbs>gx1;o_C4uXTCEq>&gW;n8RN&&YCWoWzELEiy?PYJU&`mXh_)cm
zo0szCf({b0m-1yU0who`<ztfuN2}H&Q!eMT=f)XD9Y8?yva3nU)#ZGdv%ynnUd~6(
zhF@W+hZfVW<|}>e&;Do>D3$mrmOVVcP`R2fzexrXFjw>AA{PJ>Fjw=j8c<vV5^>Gd
z{04nvB3DKXkqx+(FLPy*g~sU<L#_;~78wqd0Wo|Z<KOA-zw7<{E9`}5jlQkG5o;};
zqtpSh>&DaGU_cDU&&1jRb-evCG^SMBndgiKo=W_5^k_>rG$z+*$U$#tOh#cKVeQaZ
zel@J6lW1b_C~R0v9T^i*nB+lkcuYoNl7%R2M2w;^Ixnq9lWuhEhL8AxgN6f3TnYyX
zQ%1++9uXuUN5`B!Vm)f*nwU5g0fA{=6T998v`4Io$vq;T0;wh@_lO{YR1?D<k>9IJ
zhPAn|tZKW*3r3CFU~UY9o36nnafjr+n6fCQS|8B0x}>~TM?Bkl#c1p4urMa?1dC_r
zq4#5W8-=dF2@cBnAcl8X4p5^fDe_$&Q&!r4{j2dCPbGeeM#lr#w>&1JGLX<)9+Sua
zAkpZ{W6_ne(TTwu{iB##CmUVzpjYcOx@4izSMWyvLD&HQ^Knf1B&OQ;{oVMxrxJu?
z1&#NQV>0wj^6~z0452R#RFJUZ<5>8U>sE;1S6d%bH($5H$vSU{X+a)Dk{*nOVH;y`
zYIJo?ve12-Vp>j93NOGz<85UR{L?6@-0E~AnCQl>PB(&tfm>tpswzmJZjB)xqTm%I
zf{(4SOb=NIkNvnr@!eKEUIwV`G3CxgAl>bS=kXzrSJJOM^U8C*#k@@_UW}pbvERr+
z1RAApcT1-kwLK=kJA|hkO<qj~iPE>nihdzW=eP5?M7=w#1TP)vJK6pJXB0iY)2$($
z+U|_WQ`;opo$ri=#C>OwK-d{Wd?{*3_ZW7@(znSnXzr1XJ7bw{RtH`Ns9kL1{~0&+
z+U1r(`}bXL88oeS#pK<-B%fBhVu%+-8MuXnr;VLf^vN=I#hTpB54q6L=()Y@>3<oU
zAK&X1LNji!+gLQ?_Bt~TDyYcb7}h{h2;E%X8>@e>tcdf~&%Lpdd#og{2v*YlY{b8f
z^yB;8GU!Icezy!t0ql>-k8dP-3SfT>Yq}@{Un9cPVy7bfTSTy8f2{u9^ui?S0fB=o
z=RZbS#X+|W$`Krl$s7S>P{zSnp#w@ef`c(cvhR@>PAUjxkFdZ0$9TWj5f_3EmXEk*
zQj*|EEG!Php#q2_F@$fzOcPcdiQ$&Km>Q;>Ek|NaALM7`Ny;J|i?JcE8s*)NxrJD;
z^H@w~A|Ql9j>Q_>BvC1ga4c5d$*QH>=1Gc_&&QM}5(|9ns;$+t8&(=`DNlgqjD0$f
zJ|C0$0muXHd`x~=2qfUn$I8SZK1kSnKGv$2v^g6#hcSQ8$67yboun)BNjkB<7PCuU
zGoJDGy5<%`X^3kvxv_;5in$h(U+V#hVy=;g7fplLc0d;2CyU9E#axTk?`iE6-VDKb
zm3?M_@k>w7s)Fm4p+rShLAKa0ClyLmR23veo(CjKsVYF8N0gF_QmP6%JSE(=l8aIh
zc2}`c1C2<qs^IZne7Q<eOh34QXEWI+0}ZXk-~zc&;SmZLTp$-JkSJhqfwNF0>H9|`
z3;06S3k2N2NY~T=#>&V7xlrLLkVY2Bg$g8)MiyY9q7Wz*)?P2jdcQz~Kq*MRUVua<
zPk5y$1R7HyLLd-89aA73J4ncmDUcx$NT7}>KnOIK8Zkv)^-X)=5TgY?JyIZ(^57D?
zzz|<U0|})!3nEeLAmz4F<gcgLM~51pd&;J`N`y7VRU!{Pg_NdYg9Rm!v+WDRjRs1^
zY^M#tg|)MtHUJ5X*#%*dmj+2n1qj0_YDiHyKUa3c^VR5vxlT9W5ftY--2f7bbFX(p
ziq?{avKv4EXQ68XxyXgC3FIOdI^6(aAT4ydAsyBh6=ZFb-H?Xlq5>TL@oq>{H!Km|
z&;|rhmpI)360%F2ZU70?CDaWRiKeOLma%8Y8TC5gHx!q-iqsX$3S=yYr%+s0fLLxb
zIiWNKqO}Fe8dh(#v8fWj#GD2nD78+dKmw(<K(1dPfl^z5^^2BwkXYVp3yRhhh&YrO
zA`V?qAmdQULdVw?AP%K(f=d=&Z@{*!fZjswa3dEbtSZ1K4*o|Jb8~fp`j7}j)38F@
zSfFgRC%r*|D1M4)1P@^D#sV3Lf&|#c0vU*cgt;3F^0&fV3Pg#)W1>w3>Xrf#h)N#x
zHW$c1RI(5geNsSyC{3$OSldyMwTJg-%&TTl?2ZB>B|0=i9lA?)C<wIZF2_WWklp2U
zC`c5wi#n8EcF0h3f5sX!quE`bITHj-;ui2XH+&=mmCp(g>5(PHVQpVQ))_gniXpl0
z`UEc~Lk>zqK){fLjv*i+d(bfiBv21JBdeGU`J6^p{nnqmDrCs#&X|G>R6eIM#rFrr
zG^UOhD5neT72}K&PbGefe!&wc9(Vc$BovQ3{Q?sGa=ak_wCopR@P0W_pq`TbB6-j|
z>GX?ap<lkd-Y@l$*euAp<n&8@6npmiM5|BDabEg65NM9`j)@>4d){ddkSOXrH3xm{
zu|C;<v4C|SZ?tT2u|S@SfXmsscqs)WbS@U)qe+w@R7=9zwE}#S_wDh<C!WBy0vr$0
zVNeNK(U%RFh{K@1IC|nM3YdWE8<(#sg9KFHIQqDT+-(V!KhQoq(J1tk4~)yn3NGfw
zz_`3N2a=@X@@uRhfiW<Sud(*z5SVU5*zJ>y`^$&82sGV?#N|>_!ux4RT)I(^Ko}B-
z8|};yKn-WxCmCHUhPw#lh=;ofGy{jn<v~vgpMk^Uh<(Trmyjc_j*HVh5U{>FE*C_Q
z(5#Nj1ra1ltByMhVhI^KHZFE<AOJMhwSheGSl0&f#AD-fL4+`n#>TNAZlt%<8icjC
z<5_#{{Zov)yrH+_cvF<S;Re(%bK>H10ti6PiOT^D5|DG^ay0}A$T@M0j=j`94bVN>
zdvWD`+ni}U>Z!y}G4SyKdhf;MJqeJ|doM08CxFDje=lC|{kXWCKnxoA>cY6ZoFF;q
zx`lChIYF`jv@nj#39Wef5U}I;aBcncLoYqa4$m^0mV$PSpwVN;<w0Wu-m7*TPP`Y_
z1=3R1@onSD(xt8nb>q^wJZEgcyK!k8=Zy4nTm$OH<!tTSM!VAGak=(`36<q>c_0rG
zxXa_%3F0#*P(gF9V2$4~I<{I7mseK7gvyF|k+>iP5-Ka=IFEam!i5IdGiV>jmCg33
zcZ@mMbh_5jM&aYQbn}pd-p6t2=0T!WKaS^bMyryWCkA&X>*MOCxN!552fYn(>E<O1
z?qp+}+<aSZ0=5)e<4PvcFwK_DF<MrD5G!Q^{_g=><MN(2NZ7PBo-f|B1PSb|aqKf`
z;5VRc!wxy{L15tTa0Wg|Xzp+ZK1gWpxIXY3&~{;u82IePxrSD;$2EaA4SSq%4@m&+
zamGDJ0PUf1e-BcycoFbGJnJx9IM?VAI1tC%8O6vx;@voSedeEMlq3(vWyTatjHiQf
zWK0odKnAdf*nRVi`pH9anK1<uGKa`FP^Oc=;PyEiHP2|6{#@3Kn2`CLhWlffcn!na
z(RkKZakhINE_fV`8*w^FP#cm7$K$N?e4|^%ai?zJqHf2Xx`Bid$K&z~lps;J<8kDD
z$vrnD3%`uB+WF|AFI@<7k6*^K#ocWPajAsZ`hx_-mvQ9OZsQOz^-P>KUtru`amIz9
zaeF47E#7u$$o=D)cu?%EK?33oS#cNY*C?!=i)X#g<}EO~htAPN*hHaLBdXt}I5Ylh
zY_7QEAcG6!OHTbj!njM0=LHGmOVql5<q&xIU7UsAGyYcboeMz`-*+wq)$hBwjMW<P
z`h7>!{4?@Vji@jB*lXT19`ls;!Pz%ocff^Gp9K1XHZ~wpZl45l(_Og^sD7-+`$o6&
zemG^8GUW05C1jg4;xSjhL{MzNK$1=Z9-ppFH6mA0#Wucg^z2&YB2WUO%0(d0QRO0#
z=cpnC-024bWCtgd(nL8sH_s?wFMnXP=mLgg4dwp^C$h!7gEX)PC+anpwvtO3oM_hE
z+9Ub`E@ebQ8O4r#V0>1IUk(aoB1R<SI@pNk{zfF^Xafn95ef7&g}or*U`8ZLMkPep
zOAI&|$c#+LHwYz*7Pti7eY+dOqj6XplgOHo@FXhI55N56A9{CXH`zw#N5&-Z20|P)
zZA=4&C6rJiJKgo=mwUgGe)xgz!ah8LeRw83I!M%#CFF7h5@oXlmLr^k00$3i*cRKU
zS6<`P5KJJ{I5h-GLJ2uoKmwsAfx!Z=00fMc@vQM;qvY1{E&}z$co%_+8K01eHK+h#
zd;$*dbGkR$B&<zJWZ9_gEv)M-Bg&>OHr9nEC7e4_O{lUn5@PQO0?;#@>VX9G45xY^
z0X>7N_Xe#CO{n0xcK4;mSWnqpSBYvgHz7AX5Q5U&1cFm?z)h$|3lbvo0D+EKkdToF
zNN6rd$jAdEG#4bC$fF67ixML80D%F$$Y~RhFnp2ICLn>dC?O*ckX#iWc%Y6pX^Lej
zk=4hpS#DH$Lmwyb30@v~G^MuKDBA)AAU8VI0tv{CPFsKk<VI=>extJ~nZAWxt1~8*
zZNa4uKI*|FZbIHh1PPrj3EW0pPLrT1wZ%@hX{AxyYo}8aFj4GIrzRi)u`?lGumTB)
zoe8W6<R(C3J=>X(|6fF;NapNJ;QxzoZ<q>!!d`Z2m2s|ouUiP+CfkegEn%p+_9o=t
z7eR$|68QTf96A93Eq#FHuQ9rJI^ZHu(0Cvr(=?C)!huAR|J4Jj0O3FaN7RSO=QX7|
zok-Xd*BDQEI-PJqC|*3_)|Gt5iG;jO10{f*NZ?o<|ExhEDDhmvu2^T(dODqRLC9sC
zb3rI3Ip<6$C;{XgO(@wM2qZ2i*v;#WuPZLQ82oM5guI*CRJ`q)C>AL*kifW{Xw#Mt
z;ilB)--{v4`fNZJ<9lZW;}Ht~-WkClq4@pv5!{qQh-+d5vw0g4LR@n#pb+AkTMG&y
zt~mo3iU7KnzyR)!@!Kq{^()L;#m;Xu?u_&+#I4?b)XL2;e6>M^%5b~KCPVR5;-~Oh
zcmVK0h0?2n1o)src@G05zy}o~QB7VIB)saN!u0S$uNB27Mu>q?MPHK`T&NB!^zn?q
zbuM&=6e4tsB6o0|iQsK$ppc@so4H{qubS=OY?PN*yGBt|P+cgOuV#F%R2Rx`qksf(
zbs-kOUvmW9FB#1q`o#Ec<!BdyhSg}dS~OKg7s|z=8J{Yn3$a+x^%9V{UNX9{WTb~@
zB#Fja0TV_SHuxQX<x;Y6y<~LZ??-s(z5~=?#@Irob)sGRzL$FczV}P4<rd?na<H7X
zrKvQwPzE=UhY@276Qz7+f#muvTk&sEG^43h!)9zTZtYUzBG4*a<2D3MrJ6#yjza|q
zHHBD(`3<aQsI&G~p)!p%+G=e16Mi{%&|G@UZ48=AZxzb#Dnkn>Zxte>7kx~xE5B9P
zblUYkrlSJh$CC=xsn`2ha-ln!J+aM*hNkdNeT_UzGn$XH*nn+D|MFR`88jPbxn|I8
zoK+|tF;oCGs}M&CbYrm@9l6hDw{JH(m(O+)XfDonn}g!{*@Z!o4~7a5W*6e1;AxJ4
zxj2ul*lzT$nCBu;TtBZ+ZpWMPNja~uM5K^G0%2Yu{z7IAxs_%#DVN$$?J(APx-E4v
z=(6Ba7lY>G(n9$r9CU!Ov=DE?tr8eW^RFyaQi=DyEY!{{v<H4_O!ssK%jq4uH@LD;
z9u+m?8UK}q@_Qp70k^WSC}~Z_n~^@e4SlvS>r$cpr`^V6GkmttXVRgE5AQ7F0zsjI
zb5nd1xe_Fd0?og|PfxL)d|il@7OzKu#KUui;zN2w2{MPqC6SOlSBT|H$bvdwDBsV*
z%fOHY$%Adk(mHj%kmtDw7q(tNp^r!;8t|a`?E!iU;R}V>ZVF%w_=|<|H8Z@t3t5mn
zEe%<^$Z@d{8Rl>C2EE!GZmlS*#*Q5^{-y-_6(Jm>U2b!#^#C^ED0aC6ie%&kCZGls
z$;b;NtQt^+`p|Z<IaOc~yL!}UUpmNDp(YsQs*r~nL@M-db#toZQ1;|8qoQ=Et3p6S
zT@|YPP*TB7A*g^F!8RT<x|EJ^Rj55ixGLlTMvw}P_~zsQMzM~^jn1t{xhm8wql!#1
zRv-hFQAN3a{u*|3a&m7JDFum+EP2AH&o&)5(xqUC5EPH0{6>+?5P*d88%4+vJjKhy
zC?3b+Cyd{<80V_cq#RcyBedpxQjROaxS3?38%o34yG2?1>~~KXNnh~YB1DR-aZ5-o
zrGD6J?>%FzZQ5dQJsGrt3$VTQ;^OrPkSKp|JuKR*sZYz0P^^dC+m@KwO=)<%9^c=1
z)iNB<pQ@*vt*6p=Id#zDV{V+sIws6xZBN%j?wJnb#WVEInR;s18#pNEE8<MahH+(N
zT$O!)p*hW0T7{E8?ta0AaaBn<N<c!XDv8d(O(y8z;b4}@m@O&?<CIgX&?p(4ly|Hl
z1C_x^+_9#B3nU!Q;ABvICWlCV;50ZHx*2N-z8fq!^dkM>WQUIYV7H8h*6^efO*Bb&
zd-C}go`2@)C!b6I?u9=;`ONd_mwUhTw`ZPbTQX)*DP$bG$+Y1~d8YsXFk*NTGq5YS
z8&owbC^oxwtH$A>w2UI)>ZDxb%lJA}oeYcpBuLUpVmYO^CSfMV;h3b-9Ki@~nVLmx
zX|Y*V4vvFH;oX>|4DTQgd&VS_;+z>I(8eV3cHk=<3?<jFf7dtvR$k*G(0;JSMWA6?
zlT5aj*3vMoNw#axKNM9)OUVRQR$_K4pWq_UQZm7<5slgjNf`-41qc(8;_Y@+2usN%
z_I8PRNBJZdfzF&Kxd^nBOiIeEDpY_lDT$XR9^$n?&rW4c8<@YWnCc?XA4*Pj5h%W!
znv_}9GQN~dP2yi<kkO=8#ZofgUf#gG$6GPq#h}n`zKcOi$$ZxeT1w`V6@zIhDWenP
zMfNY6m_t1ki(Cv^KNh(dbYi^7wS(4=MP$c&bYfgaC&qPlpqcr;Qc>q((0|y}xfpaz
zT$c=sV}0lVqb`Y?f`i2f!6ES4v1R7a^0h7ky{^30MW7SlwaKuEb;|e&@Y-a{*8KK+
z8Qry9&(@WhH<zz>5$JSxeNw&%02v^xPZo$k8zgL4pTx3CVPhGc+HPVMEzI)rO)dh(
zY@3oY-hvDeHYF2n<+!5V|E6Szo2=h(1f1S(WgoOKA1~kPBG9qzR<{;(Y`ZlXZY&Y#
z*mi5OSt)<Tzl?5i?qEGznh%xla1rp426cyvK>u5_BPsVSPyxb@B;Ep`wWy5lc<y3{
zTAJ<4cew~5AnbAx=-+2{C1peo6(H<N;tzCMa|B!f-NWv0WwtHf<08<%&g^j!!a&%Q
zl=msh_`lBVNv4afzi<Rx4n4r?TA44GA8-*OKsewcM1XL>twjVj9H3hC<_P!>{$ciF
zYx55khg}5R)K?EDW$Lv|i2~tpQrulc#iKwtoNUp`dXOXFv-wApEZW9=sN$##kq0A=
zx<=#y;;37VJU|?!YETNQOu=XNPbArlHs;-(PPh>HfH>ho<OAYFQbxYe0mO+UZueG;
zaUH{Zp-J5DHAi(i?PA1$aoWX*0poO1ZY9c;7%)yJi%Xn2T7VcQY5&yL9OCJ8!38M*
z$c3Z~^2(F~fLut1#EV`a0dgUU3%fiWS*G9x>Ti>5O?z{5mv3DRq`|?KcR3&gjBk_j
zT@R4J_%?}mJwC)@g9gDnQo~Zp2zz@6^A_Ke`04oX1WXy0y1p7D05dEl!*HkpW>^Z_
zN!ks7#BN|%s$@h;<k5&B_C~`~_zpDXZOW8F#3U)6w`mIkMvh9!5CA05N2O%m1|-l&
zrI5EdAX>Z#J0kXBg?XscSl7TJ7&z87um})iT?2~%F_sKOe66T0ki<%5y>0L5WUllC
zC#7%#%m1#Z1+Ds1*_<wBRmD^X8cbL>H6=$SNI*|b<%^UFNI*|bA)|YVtZP9l?JV|u
zSMzeGSuO-6>1H|BL574<@?9;EfS8p+#`-8(*D|cVm&#gdPrcRr!V`Eeg%}5)pHf?r
zaUZZZZZn^1`$0+`wSWnz4^l-UOA8WEAEdCmqj0Sy8M7p%Bohy%yRqDEW+Qh0?PmK<
zV2OT(01R8=7zUCn$W<OB(3YgI$`7U7U#qb8Q7UUKTXVZPB=AuRd4k7KNGq~y1$+Ds
z^EYKHQZnKI6G$skGU5OUq!lSd9Q==sTajUF*vUK0-DPWB9V&fIO1|U_8R)D@A-&ZL
zg|`lC>r+`r*jK+W9}lmm!pRf0M&a6~l(LQe_D=J~O8gQL5BR{^<dhE*SevMP8lfOD
zLN}$N+b}}uD2W*SC~0#_-I@|dNs<S>Pg3$INwScQ*pi}T1bNfeRF$16{BKW5n)T>z
zmX(5VjGzkbOv&>sNCIqU3g=mLGSQmCxZP}4ck_;?cSD~q7hpnVcS?R)6(m%4r{sk^
zkO(Svry4)V<5nVhxVSsj<N+QoN)CmKyHh>y<5R6QLF^M#tsMvq=6%jo1Bv4HIa3WJ
zmvvI4ttqTKoZ>0cCqQsY4jqsfI)|O10}@Dwof!ubNQY_0;WC2{-{v`*$~u)2-w~t5
z>1fKw|8?DmPw(J%T1simH=zwc;wfnH1`9~E(lKg)Td@hnH+SHCQ|#6rX1CM{3~XvN
z;zH;|3TXh`o(Bo)%M_d5!|a~<G9}-<0hhBe%O=sQ3;6QJ*;LkdDdxY&oESWt^6`(E
z`od(+*D1E_9<ws_bxPjt2N%j;(@ele4<Q6I&ZpR;_nMES&Zp#t8C(dRPhsPO$p;}&
z7gKD@z2?)Yi?YRu%h@<PyPXT6nZ8M}`+J&qq`pbXL%1;C^?pN61)m&+4jTU36kF8O
z?3(`8MWXHQw<#duADk7nO;~#^oi*Ez-Dl$O=3Yy~ZSX8~8>-QOw8+SVK(7r*%Ml6^
zH5rhW8yb)>XFwVonspRBwxN0sw|{!TT<@tEo|ZiiF2>OCv~-9dNh+N$0zZ(z7@o%e
zQ`8z916EG9y$_pR)$++M28HO8({e-5h7bG6Y5AwnAb~MCjisIzi#9|}V|^YqGcBg2
z<thOtik+60s{}|AN;^Zh4Yk=jX_4Ir!Kv#NprQLtTCQez3Z!?^ay0`9q<7L7y8WnK
z+lIA;>8u@g?ypTn2`x+;8PTq7sa+Szb_D^*MNYed1mq&8T|okJ5w$D7{N0w?b-DfZ
zZ_Qqw^5ssOfQvR+o|aj3kR+9sFLr|j#_}{i{DhaH)V4H?>e!H8=D#ZHTm)*>y0pBo
z3K<~Or3=Mg8YB?v(oO=rEs^W(Tc0pjc*@ti7~~<=r)3@$Lcmy`4hsJSl9bZeCQ;9{
zrB>cVJyX~YzoEFv=^v0#+~o8RNGNW)-al<A4Y6JH&+Q<9v)wg;a*x}c{=riqZFl+y
zB#^dK{~#Vv)OKO*vvk&(G~4vFxi9irn!YbUD{(vYkG3zZe9o5s&Ky>WU&1Sc54e44
z>6JkOZeLp7G60FCVP87`^R!qRh{2bJ{b}`3S}YBc2fYJnxim-?mWG3AS{f)sZAZ=j
zMOwKpaeJDr>23Dx4MHruc!Vl`;ZzYM7nK1!NML`FmUq2D!tH;NPWR-gW+KJ0%opj*
zz1B`qSqz7hX<TSn<6-~$gV}(+^?P$p88}X*$(EC8`Jn;)<2?#EnZ~IeeR!-LQK!@F
z?|(2K>~z|-kw(I4XFNg(5U11f1%HrSseK2lhOXbV4{JZAvp%$qKbi&J;7@71%EaAI
zdzvPFSj%V4sqOk?q&Z*$t4~Jy9gx84lfnGhr@)@}FjgCwQ3hw!#0Hi-)97J8_?&5Z
zD!~)=fdl{sX5<ANkN_B%kr!}4q7w&Z>J83_3pm7}PE-eF<OLkbL8}eQ$O|}<1)xD0
zT)@HGNiYNg!!o#lQ;%Q3+5cy=q!hGc1U2fgjJ$vYVdxIa;B4qQt_!M~l|FAiUs~;|
zP$O1nWO}VVZ^Y^h(rfe|0_|x!jb<M|Z#L;NIwL>D2qsiUXXFe73Ea^cd1MC?V`Frt
z@D3gl5XnP=(X7=AW+X5=b89!geQr<lZ7h561@q>Lu^BlE!6a@*Izo^rX>3Mr`aq(j
zu^HsX2htd8PtN5{w&4YHaQT}q1Z7p;bRj6K@@6J1GCNQK#G4spb|^#Ep0X+v*vJ>n
z78Mg*1j?#Ra1ki0G9eQd+Z?C>VL}FOZz?TG?I{A9ZvXhAIo;E0y4$RjNSU6IDM$!G
zX?g}LF~4!t9*Gp~-Hh^Id+SRkZXDsK(}R>ec{d|{0py_fZYG+~!$go6M(<`~|HUw(
zFp(JC7tGD53o^nNNFMa&Wuz~VEck-?8S(|>Dce&X=KYNOh7$|?)zn&mBVKUAb6E0z
zMlNR{f%tyLS<c#13T7$3-8k6%{s|BmCrjN1q(sb8w*e^;vos@@GYA7|X$J0+A~Af=
z>!VE8hKz{BXp8<)Mt&hOLNm2Cqlhm=mVm@l(Bc!3ATbweGjJJqBPNN^(63|1|7PBk
ztb+~@#K441T?X3^ToQo{s8#I#zneXit1>bU1CzKJ#9@ze8CbW5ee`$p*U2>*8PG*|
z{Ie#LDV8{>?mE`tAHZ3ck+0cCc(#9C21ii%(gDgs8?0y3|6z8>tk1~k5lob|K7;6S
z0eqAX-|^a)$@)5DU-^ew<_+(on$rubQL6cVsyTh~t^_112U^q|BvAHK&FO{SDAoKR
zoA+<COY&ewUabNXG6!i^BKZdyP@m&<67!eI&z)L<NnEPc{agk$Kf?O_$9yn##A%%<
zulW&boo-wPH9wkR7ye`3mO7e|Z(2ur)sND|r0_6GRX?6#55H=5O&!n37!q8Rc07X^
z5^E8JFnLdA*axqg52a3KWLyg_gidA<*CHVTA<WNH8P>ScygPNu6{43`PmvHNF@!J!
z&t%x^m1bG$j2yqjh0q!Dz&K<9iPYuU3_Db5woRXPTZvxmK1;2%h+=SjgzTG4Rv*@;
zkNH9Pn+)!*QE%i?Z(PPy5g#A~i3SJFPweO^FfLQ&>BGW#)EnPr*q{5Fccs2_tN|B7
z-;p){;X<H(%&=X3%~w-DI{k|8e{nYYwJR4wfBckTFTZBqTK^}f8S{9D{6x)&+qNhU
z9da$Blq9;cM_)yr`_gM>%jRJ4n`87Ckk>NB^{uZcHt7)7`W0u*D)uBgrf+-Z<rn|@
zN^iE!XXLZr_cJ#H`xPTr;frJks`3!lrN23~bV#vuPGF*LLyF}h2@(blDaIm6*~|`9
z@!>2m0NKpp#nPdJiLo%eSUPl&BvdT#@_+=w@M2V$ym1Grel;670N%LTMWBIFT`Uhf
zAp?Z!;*yShdkPW=)y25V!M|$Kfyi<8#R2AUPuaL)xnh9}rE$e_#R5rE#pv}lw2pM3
zHk`=j4K&x4Pjt(r=y77P%)>$k5EF|NB6I}_h>67rUCEhtpb<Zr{dbU=DVtm@Jt&w^
znOrPAC`hPGE_OU<2ddZ1nS)JFr<rb{w0O;Qn~N5&nZ?p`LIVghi{Uw6GtikG;W~@6
z_S>C?m>xCsQL(cT=t!McSIjq9Z9o9B&gnytfUI-+5F{Y$s1NBXOh;<m)hs#E>|VOs
zRiRE>T`W^4kb%nTVx%rQa}{*jI`+m$v+Hf^oO*QRmweVa^#BQkb;UB81PO$7#fT;s
zQFPT2q_(+O*<P$BX0V>UHT(f^wK=pBEU_v=0Q#GY<*Eo0`kRYogbWg^;^yM~?ZskM
zBnDp<KPgtX6^m6-@}Re+Sgwkag;jBDv9l_6q@nO>u~-%DL1rF1ILg$@z!9q=p2Lz)
zojwH##80pHX-66d`^FA7f4B`l0kzL<5sGZ~xh+CtW1rKr5C+aZ>RDW&Rc{Jwhl;Z<
z7qk0Dn|J?zRp%aDMV06Aq`irB&p60M5rXE%+;sQ32tiN;LP)|JW=9Ll+Nqi?tkqrJ
z8AsO#Gy58AClIyJS#c6k4!HP0g04nHM&JTbriw*md@ab7F(RP66vJ}^Mi?Ob`JHo`
z>;Bi@U;oapPyb%$be~thJ(Yd3HY&%8VfR|YUJpRx-b6=0B<@WN3q;~xG3-C1;;~|Y
zgO&Qhr~H4ZK3FItmOWVM4r7LiG6ySJS0DpMV<j99k@TMS|GN56rTf7Ll`@Aa-S)pg
z${ebsJ4EWI4CrvBUiP#<Vc6lqbHsj!E8Wh2Fc~iLw*=2v(fKh6p24HICMu34>IPEq
zSfXwq1&>`&_gGQ)sY-qOLce$XsYKOK4cX-!ATmxRss<wCl&JbvR9%xUJzZJ!ntoRM
zv-+K`>=Ri{*NCRiI!yx*cs6+(AOg=Ong$~9tY~@&Z&M@c>8;eAi~MVb^%lyArhAhZ
zf{8M{5<@qcGHAL<k67%_tZvFWr>`-JZpu3204dUxl|>&i238}mIlpqTzug<(oOSsY
zDphUHx_1Zi*ygP3Km(;vmZs_(3A`H7yw1P9#J{I_vM$JwzY)41Lu{b4Zd8#n$k18Z
z9}~Pa*r4>;toLH}`@#E2BXp#2!-g;rDbHqI2m_JwY}SP^kPv=0JK)8v4Phae5PmM3
zTAH;X>}ZsGKI=l*kqF@zvPlTnNM2p8`z^$sxE7Fg(F>#!%d;*c0}-}7n`Gn~>20)S
zO`lfZw$v}3*jCVqd=s=4bRypbZCRI?DTtu9EIxHWTG?^w(v{hwce2H0b$Y4x`|I|l
z{)hcmX8TlF?;0oGwI*v5Gyu_S5=8+Ky(a4#Ss<d<WbrQXlyTx+>-5i;`7>+RC6$AS
zgmp>ffWnk@dwK(rur5p2Lxv2;NmRG%?qv)awihIb(%Q3b!7e;VXwQar*b<0@_N<#9
zI8M+;t6;7vxG_;Mkb)Z%1p|fkf`Z41ziqY(o(wR^c`lHb*j#uC@w&~4hPjKR&7$FT
zm!sj@bm_@#(G&Tym;8Lt?_@UVx73Ped#q-!2OzR1(JT;=J&9(4i0l!~zAsDSYUQ1`
z=U1)rKfG+j_A2KxP=#DIXo%@=04cP+inUH=a#bzbEbXlFcIQ`a@i!MYa%ugY8<gv;
za{dmaTxXT@cOd@WSv6pHmGyTa7=Qn)Dz&T1`n#i1ZfBMAcSpkCKd%yhf4;w|IL&8M
z=sg^!^8dTlU*g{muzz)GO*&`_T{-|#six4mEfC>NA^m?DgaA^hrZD?(Xoty!K&3G7
zL!lccs}&2*3+?n~0QcsF7gQxCn-{w1;x5wXg-LYPO0u3G+8>|*1kEqhQ<BB}LOmr}
z%rDealEwTG<9A7TjZc@hghj9F2mkDU)2}5=W;c%)+w0K&R|X(av&hBR4TwY?x~Kvo
zQHR*RLwbPY#aK)9lu!K5>LrCTV)`YaZ;zaShcZh-cJ+STmLZT{&_C($pQwI;H9hV*
zBI$+jVl!I|xnlMgLS~CeOE+H7GN(NN+FO=r4@k*niS~eoH__gBQT!`bdwOQ4UpncP
zM0woeRbNSz2Sm^-iSmF5dPS7?BD>|J>ex>tEc#PeTsEyjUwyRXiu@a$eo1k^6=AZf
zv`+N6+Uju}0O6|>od6NOI?*E#;j2ZDE2TlH<Lyf~gx(*+RM~U3CpYnP|KUbR)($XG
zenaTO0!aA{p$iKj9=IVK@JBpQ{%;7ughhLp+8Elfa5T!j6}qr+B*NnDFlh$rB+qRM
z3;#DpK|$e=Y*!9QRW>CG2O@IQ1$V6zxYa6r5&-pYO*9TfDO(eb1Cg{f(Kyf)MdPv>
zsh)wou;_LD{%-$g;RhjYfb8E=&jhh;q4(!7C8q#f47L-*gr;Zg@z+h?9;T+5UugCg
zZ}V}On)E#i57{A<L|jMc?L^#zi8M?hBt7E`|2H!}{eNZUW3)5mEO(iIX5@<<J_|X%
zIFYs|^!6c*pSiAbBs!t#AAafYX#65{lh;gPQT3N$>h6L#QQqE=lUx&V`$O+*#L1Cu
zrU)s^kuFq0lz1R?2eerx<Q@#&QE--m+^@n^rR*eOmDm+}#}NF>L@-+i8Iqo}*Z;++
z!(pnfP%HTsJ`%b;aEv^Ojid5R^VM4~p5JXfe-r>CcPE|;q<-Cr=L0F)EuL?tUDS&+
z^@RG!KEGvTPoa>wdry)=V4_fuq!8IZvtIOeCiK!}L-frZeolAp_kTD7g3Tq|rtq00
zmjEezMsi87%m}OpmM)0Ar}G02_~%P*=h7y9Zcy<BkxTkO#4Lzh(gz}DLFAG?kdRvt
zWuK00(iehF`cFk9{YPZpSG^>k*8D$p`4?X_zP0ciN&l^p8<>HK=d?zb+VBGMoYshL
zhoruG$^I`#w&4I!^5w`yB9M|VN3P)jQu5^}NqzMawksmja7+PEmlcIN$OrR^!n;Zb
zZ$;r<rGvL3A`+KhLMS$*OFxW?PDS~t$Ngocmwp(rB=;ftiQ6EC-;qE4t^Y`I^^V9T
zE2v1@5&331uP`BPM<g3YNCVIy=IPL{edjN)?kJQIi+4osV;LUGbVPLYe`g<r$#>@)
zPy3G-kK7&EdBaE&QM;o7X82ejg?5XHwwed^DN2{_i@cMO9{(4A%VqnbK0o4!V5tFo
z2clGU*~EqC{LAz;XZ^7w!FJPq?jrR-G(Zt7CBkgDuNh|M12>3Gzlu^r%Z8b<ub%a*
zs=>Cg<1S^tiY~W5y@8bdDq?OAN8}(1r5}p)*|Yw%>O)b=?s^NAGKZppW@|TLqRgR)
zF;kgc&>&Xqiu42L{3#>5qLi7_EmX>MMg8qqEs!!@5tH;}HgSV=$d5#+`m*7sj%UyL
zQ8n03mFF&Hk3{8?4CMW!6MiJBt#i8Jui&vr&phwnTzxD`S+8s`bLEdkgNC~@@?ZW~
zH1c{g;kiM65}t_k|D5;ht4|cl$UpfLg);I_{)Ci~<?apgAH6%$wY~n#;oVWn4ogC%
zOm}pJJ%a#9neM3i+Mq=iXiZ3$J`!^@P<yZ6d{O$5n4xhwPjmuqSUNBE9@Dp86pU-+
z$}aeaj<k7kUu#$((&oiXM3H_QkPx01mpvBS!6hM>F_%YUrVq=`J&uC!JsLAyCKGub
zNoHm|8rRhad1=2Vh#xk`-jB=v%d5z<x7f(ySwNdtxQPjyV>g%!G|X;?Vjz`jj#+jf
z)&Qda=J<vgvYn-Y=Jx36L6dzFm06fy&Zlhg9SaMO5YJi|yVNzo#KpqceR=|su`uS-
z(>_9e{4R_$Bi$p+Aj`tIVnom@lgB1Vf^3VuH{w*;(Lis!gEQgEU+q(xA9iu@vyw*c
zB=05pvaRq?37fXULnUn5<e^sCk}uoh%o`|Mx+pxwc2Qo7Q!8WJMR7FBt%zM0#gXWu
zydFyz<%=K4|7MP9SQ{68sxQ4H*wc4yTr$`!gWv!LmeK3;mju=2`Pl7;2@#FuV}7&{
zf+YjQQtR}Oe-unFUl)63*0B)bSr;?wc!J>pt=Dh-D40~fKK6!)*5Hv=XMM~UjQkfj
zr!H*J{rU!@G8<yA+VRLDhYj(Fk-?)W!$hvwoWHX#)91%;jy)6L6qWXLb3EL9B?{z)
zH^(C;i#ZIWikst+lLB_50Hfr0^lSZsapmt6DkEb8??`2Ag>kSgnn93B<y#7sks*OC
zQW;_dIpl<Q^*^M8y3D(=+cFj+JnzP=$74qfVZt*$%Kvvd*j}9ZDE3UW3l*-9Vz$8E
zVPA`I@5sN&CZS$MN1;wKCeR^unn|cmWQZm%IuPrMfx%7boiSe<^4oKwgzB!?+oR_U
z4C)%WvIzz{Z@nuXWLItjQOd5E|L@{GK)h#HT(t-9k&cfLOsMWoLe){I!tNwg9Z5oU
zw}k2`X%r@k1MH8zu<Rh`rHmgG9IpdekLDiA-k*3h(D1tHeL(88KW0dW{hqxN4$(Li
z7tPgomjz4HhvJfQ<Aj`x!59lhu+yM`$N-xKkR?EB_>CxBhG4Fc%5=s07lVW9Ojqog
zl}JK`sY_A<6NQ1G!?9j77+*VFkYve7;wu~`>UJd7%nKM&aU`)ERLUL^%gtjB4_r9p
zxj28zmGY5rF7~VoLWb>J%#R9jbs)md#iOPhj}%BX&&4-Pld*Jeqonh(UR)6j&74oX
z8Y(i*i&x)km~hG7Snsb0?#uMX-e@OTe6lyL85cZ-F%X4Q&e5~44i;wTs0+0br<|jx
z%};TpN$JvuRndQ{;<D-b{<7dQUC$!1@L|RB6Y0xN;)CFK%6mek<V5m|!S;hdX!)g;
z!M_)e{tuO!XuQVWL-^w=b^rG$yzP9&7lE{$lf*$=l(#_X#_7SRMlf#z!S3D%L>DdU
zO55-PDcqu%Bqe?d#7|pPyg*q$6@u~8CzWeb9ED0esa%udNaCkYD*V)ZT2I0?N*A$e
z`x(voJfAdjX`PfCRA`ZMYf^z!XpyQkDTo?~lP*$3y{(XZ87@-SJwt`0MdLmdO7r-|
zDs`=#AmgPbGmBOgy@rM#E9UH!pWpSXU(de%*LU4_@6@~QyyuQ7vuEEoyF%X<1;4rU
zdBvVsEz%B67B_Fre-j1$i)Xef*Ykr)Wm=WnZ4yXjS`}SyX?TF7msXXw2iFRu$80$I
z*9IL{EaltsH>!YLTG|R?<sI9U`=vYCyknc<m#!5nO=g?wf1@!ecSWpFF0<PNItuUH
zrmjn#ZJ2m=o2vh-phq?g=XjH~s_1>x@HHET-}S3}IE2B!zH616;5blTnIo!)O7o)J
z9^Vj=n^z2IF^9H<6G)`#_{X8atjv1lngxjPtQVU+#!JEk+?fA*Xz+vL%tqx>15_a^
z0(zyy#z2YaO*&m2tjcUsZZBzwFl|!I!;k|#U?QNm=)Kj!w#*jg8K)E?Ok2b$H(MqG
z_C39Qc(5h&p7QL3%z-9e-%|{!H{b(P(xo4%q8)newLyLVj}()BBp9YhFl<xa$1WJa
z_#On?TLbdC+mzeG9!Qn9DSnfS?*Z|>ZL0EP7Ysr$!LU6E21lW`+mm2$BngJ?5)8Aj
z4ClCfqKbB_i;Bx`vOk7@`KOXg^qvvH==3M5q{<}TL1LZ`<&83lw+cwzz&6DJc}j;Q
z753CDF~_)ksvj5`j4l6Ed1Fj=f(Xy2ia}9nF$ak~I`!6(L0x&Lav2PwP!$<WhU__D
zh3|h|bzLyA{4?d<;N*yrK2u|BM2YZVqn-NU>w^07oyz5Si16%G<an9&Fi3Lh=laX*
zg3;xlE3ekck(Bzms&6oJ2-u2>CQ;vTeJ~}vtH2`}b(iqmjTxt=OTSb_2l3%st)f<4
zAKcRaOT`eU*mJ7bbD#1KID3MT3Bk@f2colms?vV>0C~H8>YAa(o<QumPYpZZ>?s6e
z&;5x#9fcb0PweSPV$c0z&*Rc`vO1wl75$}H=?_K)N7G%ZBx7t?CN?~b&1~Zdq&{Ht
zHBbUX@?pjCKCH|Ha`ULt14ak6nWF_JG2&5Sy2>ztjw$`X=%74v4DT?S<y;m+9y8W4
z@t(((eqET3E7vP5GqHAD(JQPnk}%^5rMpH4Vdg|)YtC9h(h0G(%%&+5J9aBQd`$3@
zOm|{zs4#Vlv2C4D`bnjq8N=gFCZ1L1i6u{pXH^(UG>xZ}?idqXojH}H61Ihb>6E0B
z&@hqtzE%2)u|bsiR(a;+4=N%3wQm(O`YaROwH~Es2~$r&1=3yXQK;Z*BZ<$k@04CT
zHmIESo$_o?fL#b+`cAQI%2u4oOQ(5EW#5YU{`>C#+dKdD{<~)1c}HwoCY~!3mbh=$
zeF>!SX~nuP`vew_ol!bd6I5o-6y91k;y<HmYFW4KrKY7z&#R(`^ldf4-=)th_5v5T
zohEKOC+9Wk-%by1Xau4_u-#Gy$YbZ^uCjZv0<q?t9EnY`5D>4OlT%GO+awFYc<tPr
zYmyy>dd$taCfSk1Yv<<h+HNKgmvH*Y?{h`Zm*k4e_NVl=iNWPMx+LhAUp+3E=B0n1
zb51;1oVYpXoVW@|^}yDNfjp==hkr`HZLm0Ti~ea{a7}qj&bcQ<cv^DUhCVYqpeOb7
zb-{$plR4L1Kon|Dy6)1b43<o^DBoKb++19~DCe3UsBkUH;V%;m6F$6H-%CQtEY7)<
zHrTlE;v9}Q*Gj^NpUZD+2reqlJXd(0`0#V`yqhr8^mOTqxuTc#2NQ!E`@fjOP|~}f
zE{1B&c`xPk+=0R9MlhCwU@ZmYZCevd0jYCqVksb&YR##aoTY?dEVVqbl%r6Q<%y*n
zNi4NoEcLcnisMsO<%-spVyV|t75caDl?+@vIVktit8yh*nM`w~80inF$+i|iY6iC5
zbRf_8gS@OnHHVt8nVbH%slknzH*@Z*2qHXh=Hy@?X=Sezd#u(6rUvuNR~MKJRhVu!
zJiPE4-8?P$`^=i0i<2vjjn?GY3qnq}nvpJDpDWs^)6;{$Nw3ebK1M=dhG@1u=e;c<
zP<szocG(hi>eilfdl>_HLVJ#hd*b{+RN9`4-gYV#f>G&PiAo)Xy1$jE)R9D`Z=q6s
J^DQM~{ttFJvnl`p

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index ad80ce74..e272bcb7 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -967,6 +967,10 @@ const (
 	// to buy this offer directly, calling ExchangeService.ExecuteTransaction at
 	// offer.exchange.
 	DenialReason_DENIAL_REASON_RELAY_NOT_ACCEPTED DenialReason = 19
+	// The request's ext_critical names a key the recipient does not understand
+	// (see "Critical extensions" in the file header). Every item of the request
+	// is denied with this reason, in the body.
+	DenialReason_DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION DenialReason = 20
 )
 
 // Enum value maps for DenialReason.
@@ -992,28 +996,30 @@ var (
 		17: "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
 		18: "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
 		19: "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+		20: "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION",
 	}
 	DenialReason_value = map[string]int32{
-		"DENIAL_REASON_UNSPECIFIED":               0,
-		"DENIAL_REASON_ACCOUNT_INACTIVE":          1,
-		"DENIAL_REASON_INSUFFICIENT_BALANCE":      2,
-		"DENIAL_REASON_RATE_LIMITED":              3,
-		"DENIAL_REASON_CONTENT_UNAVAILABLE":       4,
-		"DENIAL_REASON_RESTRICTION_NOT_SATISFIED": 5,
-		"DENIAL_REASON_REPORTING_OVERDUE":         6,
-		"DENIAL_REASON_OFFER_EXPIRED":             7,
-		"DENIAL_REASON_SIGNATURE_INVALID":         8,
-		"DENIAL_REASON_QUOTA_EXCEEDED":            9,
-		"DENIAL_REASON_DELEGATION_INVALID":        10,
-		"DENIAL_REASON_SCOPE_INSUFFICIENT":        11,
-		"DENIAL_REASON_ENTITLEMENT_MISSING":       12,
-		"DENIAL_REASON_ENTITLEMENT_MALFORMED":     13,
-		"DENIAL_REASON_ENTITLEMENT_EXPIRED":       14,
-		"DENIAL_REASON_ENTITLEMENT_WRONG_BUYER":   15,
-		"DENIAL_REASON_SUBSCRIPTION_LAPSED":       16,
-		"DENIAL_REASON_ENTITLEMENT_NOT_GRANTED":   17,
-		"DENIAL_REASON_ACCOUNT_NOT_REGISTERED":    18,
-		"DENIAL_REASON_RELAY_NOT_ACCEPTED":        19,
+		"DENIAL_REASON_UNSPECIFIED":                0,
+		"DENIAL_REASON_ACCOUNT_INACTIVE":           1,
+		"DENIAL_REASON_INSUFFICIENT_BALANCE":       2,
+		"DENIAL_REASON_RATE_LIMITED":               3,
+		"DENIAL_REASON_CONTENT_UNAVAILABLE":        4,
+		"DENIAL_REASON_RESTRICTION_NOT_SATISFIED":  5,
+		"DENIAL_REASON_REPORTING_OVERDUE":          6,
+		"DENIAL_REASON_OFFER_EXPIRED":              7,
+		"DENIAL_REASON_SIGNATURE_INVALID":          8,
+		"DENIAL_REASON_QUOTA_EXCEEDED":             9,
+		"DENIAL_REASON_DELEGATION_INVALID":         10,
+		"DENIAL_REASON_SCOPE_INSUFFICIENT":         11,
+		"DENIAL_REASON_ENTITLEMENT_MISSING":        12,
+		"DENIAL_REASON_ENTITLEMENT_MALFORMED":      13,
+		"DENIAL_REASON_ENTITLEMENT_EXPIRED":        14,
+		"DENIAL_REASON_ENTITLEMENT_WRONG_BUYER":    15,
+		"DENIAL_REASON_SUBSCRIPTION_LAPSED":        16,
+		"DENIAL_REASON_ENTITLEMENT_NOT_GRANTED":    17,
+		"DENIAL_REASON_ACCOUNT_NOT_REGISTERED":     18,
+		"DENIAL_REASON_RELAY_NOT_ACCEPTED":         19,
+		"DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION": 20,
 	}
 )
 
@@ -1594,33 +1600,39 @@ const (
 	// to see full ownership); the human-readable message routes the caller there
 	// without confirming who, if anyone, holds the URI.
 	CatalogRejectionReason_CATALOG_REJECTION_REASON_URI_UNAVAILABLE CatalogRejectionReason = 9
+	// The push's own ext_critical names a key the Exchange does not understand
+	// (see "Critical extensions" in the file header). ResourceEntry.ext_critical
+	// is for the agent and never produces this reason.
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION CatalogRejectionReason = 10
 )
 
 // Enum value maps for CatalogRejectionReason.
 var (
 	CatalogRejectionReason_name = map[int32]string{
-		0: "CATALOG_REJECTION_REASON_UNSPECIFIED",
-		1: "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
-		2: "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
-		3: "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
-		4: "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
-		5: "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
-		6: "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
-		7: "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
-		8: "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-		9: "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+		0:  "CATALOG_REJECTION_REASON_UNSPECIFIED",
+		1:  "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+		2:  "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
+		3:  "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
+		4:  "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
+		5:  "CATALOG_REJECTION_REASON_MALFORMED_ENTRY",
+		6:  "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
+		7:  "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
+		8:  "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
+		9:  "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+		10: "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
 	}
 	CatalogRejectionReason_value = map[string]int32{
-		"CATALOG_REJECTION_REASON_UNSPECIFIED":             0,
-		"CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR": 1,
-		"CATALOG_REJECTION_REASON_TENANT_MISMATCH":         2,
-		"CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED":     3,
-		"CATALOG_REJECTION_REASON_SIGNATURE_INVALID":       4,
-		"CATALOG_REJECTION_REASON_MALFORMED_ENTRY":         5,
-		"CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN":     6,
-		"CATALOG_REJECTION_REASON_QUOTA_EXCEEDED":          7,
-		"CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED":    8,
-		"CATALOG_REJECTION_REASON_URI_UNAVAILABLE":         9,
+		"CATALOG_REJECTION_REASON_UNSPECIFIED":                0,
+		"CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR":    1,
+		"CATALOG_REJECTION_REASON_TENANT_MISMATCH":            2,
+		"CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED":        3,
+		"CATALOG_REJECTION_REASON_SIGNATURE_INVALID":          4,
+		"CATALOG_REJECTION_REASON_MALFORMED_ENTRY":            5,
+		"CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN":        6,
+		"CATALOG_REJECTION_REASON_QUOTA_EXCEEDED":             7,
+		"CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED":       8,
+		"CATALOG_REJECTION_REASON_URI_UNAVAILABLE":            9,
+		"CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION": 10,
 	}
 )
 
@@ -1988,6 +2000,10 @@ const (
 	// invalid_argument. A consumed_quantity that differs from the estimate is not
 	// malformed.
 	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MALFORMED UsageReportRejectionReason = 5
+	// The report's ext_critical names a key the Exchange does not understand
+	// (see "Critical extensions" in the file header). Refused with the Connect
+	// code invalid_argument.
+	UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION UsageReportRejectionReason = 6
 )
 
 // Enum value maps for UsageReportRejectionReason.
@@ -1999,14 +2015,16 @@ var (
 		3: "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
 		4: "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
 		5: "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+		6: "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
 	}
 	UsageReportRejectionReason_value = map[string]int32{
-		"USAGE_REPORT_REJECTION_REASON_UNSPECIFIED":             0,
-		"USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND":   1,
-		"USAGE_REPORT_REJECTION_REASON_DUPLICATE":               2,
-		"USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED":          3,
-		"USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS": 4,
-		"USAGE_REPORT_REJECTION_REASON_MALFORMED":               5,
+		"USAGE_REPORT_REJECTION_REASON_UNSPECIFIED":                0,
+		"USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND":      1,
+		"USAGE_REPORT_REJECTION_REASON_DUPLICATE":                  2,
+		"USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED":             3,
+		"USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS":    4,
+		"USAGE_REPORT_REJECTION_REASON_MALFORMED":                  5,
+		"USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION": 6,
 	}
 )
 
@@ -6046,10 +6064,11 @@ type ResourceEntry struct {
 	ResourceMutability *ResourceMutability `protobuf:"varint,14,opt,name=resource_mutability,json=resourceMutability,proto3,enum=fora.v1.ResourceMutability,oneof" json:"resource_mutability,omitempty"`
 	// Extension point
 	Ext *structpb.Struct `protobuf:"bytes,15,opt,name=ext,proto3" json:"ext,omitempty"`
-	// Critical extension keys (COSE crit pattern, RFC 9052).
-	// Lists keys within ext that the consumer MUST understand.
-	// Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.
-	// Empty (default) → all ext keys are safe to ignore.
+	// Critical extension keys (COSE crit pattern, RFC 9052): keys within ext
+	// that the AGENT must understand. The Exchange carries them onto
+	// Offer.ext_critical and does not consume them, so an unknown key here never
+	// refuses the push (see "Critical extensions" in the file header). Empty
+	// (default) → all ext keys are safe to ignore.
 	ExtCritical   []string `protobuf:"bytes,90,rep,name=ext_critical,json=extCritical,proto3" json:"ext_critical,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -11541,7 +11560,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x1fRESOURCE_MUTABILITY_UNSPECIFIED\x10\x00\x12\x1e\n" +
 	"\x1aRESOURCE_MUTABILITY_STATIC\x10\x01\x12\x1f\n" +
 	"\x1bRESOURCE_MUTABILITY_DYNAMIC\x10\x02\x12\x1c\n" +
-	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\x8e\x06\n" +
+	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\xbc\x06\n" +
 	"\fDenialReason\x12\x1d\n" +
 	"\x19DENIAL_REASON_UNSPECIFIED\x10\x00\x12\"\n" +
 	"\x1eDENIAL_REASON_ACCOUNT_INACTIVE\x10\x01\x12&\n" +
@@ -11563,7 +11582,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"!DENIAL_REASON_SUBSCRIPTION_LAPSED\x10\x10\x12)\n" +
 	"%DENIAL_REASON_ENTITLEMENT_NOT_GRANTED\x10\x11\x12(\n" +
 	"$DENIAL_REASON_ACCOUNT_NOT_REGISTERED\x10\x12\x12$\n" +
-	" DENIAL_REASON_RELAY_NOT_ACCEPTED\x10\x13*\x8c\x02\n" +
+	" DENIAL_REASON_RELAY_NOT_ACCEPTED\x10\x13\x12,\n" +
+	"(DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\x14*\x8c\x02\n" +
 	"\x0fIngestionSource\x12 \n" +
 	"\x1cINGESTION_SOURCE_UNSPECIFIED\x10\x00\x12!\n" +
 	"\x1dINGESTION_SOURCE_FORA_SITEMAP\x10\x01\x12\x18\n" +
@@ -11618,7 +11638,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x16RESOLUTION_TYPE_CREDIT\x10\x01\x12\x1e\n" +
 	"\x1aRESOLUTION_TYPE_REDELIVERY\x10\x02\x12\x1c\n" +
 	"\x18RESOLUTION_TYPE_REJECTED\x10\x03\x12!\n" +
-	"\x1dRESOLUTION_TYPE_INVESTIGATION\x10\x04*\xfa\x03\n" +
+	"\x1dRESOLUTION_TYPE_INVESTIGATION\x10\x04*\xb3\x04\n" +
 	"\x16CatalogRejectionReason\x12(\n" +
 	"$CATALOG_REJECTION_REASON_UNSPECIFIED\x10\x00\x124\n" +
 	"0CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR\x10\x01\x12,\n" +
@@ -11629,7 +11649,9 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	",CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN\x10\x06\x12+\n" +
 	"'CATALOG_REJECTION_REASON_QUOTA_EXCEEDED\x10\a\x121\n" +
 	"-CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED\x10\b\x12,\n" +
-	"(CATALOG_REJECTION_REASON_URI_UNAVAILABLE\x10\t*\xb4\x03\n" +
+	"(CATALOG_REJECTION_REASON_URI_UNAVAILABLE\x10\t\x127\n" +
+	"3CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\n" +
+	"*\xb4\x03\n" +
 	"\x19RegistrationFailureReason\x12+\n" +
 	"'REGISTRATION_FAILURE_REASON_UNSPECIFIED\x10\x00\x123\n" +
 	"/REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED\x10\x01\x12+\n" +
@@ -11668,14 +11690,15 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"2RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING\x10\n" +
 	"\x12/\n" +
 	"+RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED\x10\v\x129\n" +
-	"5RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID\x10\f*\xcb\x02\n" +
+	"5RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID\x10\f*\x89\x03\n" +
 	"\x1aUsageReportRejectionReason\x12-\n" +
 	")USAGE_REPORT_REJECTION_REASON_UNSPECIFIED\x10\x00\x127\n" +
 	"3USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND\x10\x01\x12+\n" +
 	"'USAGE_REPORT_REJECTION_REASON_DUPLICATE\x10\x02\x120\n" +
 	",USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\x10\x03\x129\n" +
 	"5USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS\x10\x04\x12+\n" +
-	"'USAGE_REPORT_REJECTION_REASON_MALFORMED\x10\x05*\xde\x01\n" +
+	"'USAGE_REPORT_REJECTION_REASON_MALFORMED\x10\x05\x12<\n" +
+	"8USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\x06*\xde\x01\n" +
 	"\x18RequestAuthFailureReason\x12+\n" +
 	"'REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED\x10\x00\x121\n" +
 	"-REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING\x10\x01\x121\n" +
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 19c59a35..478adc19 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -15,12 +15,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -469,12 +470,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -572,7 +574,8 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
@@ -690,12 +693,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index b54b85bc..6bfd13ea 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -482,12 +483,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -586,7 +588,8 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
@@ -706,12 +709,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.CatalogRejection.schema.json b/gen/jsonschema/fora.v1.CatalogRejection.schema.json
index cff11e7a..5fdd8a8f 100644
--- a/gen/jsonschema/fora.v1.CatalogRejection.schema.json
+++ b/gen/jsonschema/fora.v1.CatalogRejection.schema.json
@@ -15,12 +15,13 @@
             "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
             "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
             "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-            "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+            "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+            "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 9,
+          "maximum": 10,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json b/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
index f0024fa6..bab8e5f7 100644
--- a/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
+++ b/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
@@ -16,12 +16,13 @@
             "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
             "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
             "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-            "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+            "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+            "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 9,
+          "maximum": 10,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
index 3ddaeba5..11e6ac42 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -15,12 +15,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -270,12 +271,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -325,12 +327,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
index 154b94de..8ded51b7 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -278,12 +279,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -334,12 +336,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index a35c4020..88af042e 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -377,7 +377,7 @@
           "type": "object"
         },
         "ext_critical": {
-          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.",
           "items": {
             "type": "string"
           },
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index f1aeec15..2c79f51c 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -384,7 +384,7 @@
           "type": "object"
         },
         "ext_critical": {
-          "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+          "description": "Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.",
           "items": {
             "type": "string"
           },
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index 4e4e3809..78949537 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -436,7 +436,7 @@
       "type": "object"
     },
     "ext_critical": {
-      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.",
       "items": {
         "type": "string"
       },
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index a359c316..dcf8dfa3 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -444,7 +444,7 @@
       "type": "object"
     },
     "ext_critical": {
-      "description": "Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.",
+      "description": "Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.",
       "items": {
         "type": "string"
       },
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
index dc9e6c1d..a1c127ff 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
@@ -35,12 +35,13 @@
             "DENIAL_REASON_SUBSCRIPTION_LAPSED",
             "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
             "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+            "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 19,
+          "maximum": 20,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
index 4622d7ab..f6e25997 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
@@ -36,12 +36,13 @@
             "DENIAL_REASON_SUBSCRIPTION_LAPSED",
             "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
             "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+            "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 19,
+          "maximum": 20,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 7da554f8..0a068373 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -15,12 +15,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -433,12 +434,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -536,7 +538,8 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
@@ -654,12 +657,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index f9336b49..0f91b1ca 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -445,12 +446,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -549,7 +551,8 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
@@ -669,12 +672,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 501145ac..81bf7fdc 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -15,12 +15,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -391,12 +392,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -473,12 +475,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -554,7 +557,8 @@
             "DENIAL_REASON_SUBSCRIPTION_LAPSED",
             "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
             "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+            "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index 01b26900..c8dd678f 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -402,12 +403,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -486,12 +488,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -568,7 +571,8 @@
             "DENIAL_REASON_SUBSCRIPTION_LAPSED",
             "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
             "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-            "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+            "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+            "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index 39e04e0a..8c01cec9 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -15,12 +15,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -329,12 +330,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -384,12 +386,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index ad8a331b..6b38f783 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN",
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
-                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE"
+                "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 9,
+              "maximum": 10,
               "minimum": 1,
               "type": "integer"
             }
@@ -338,12 +339,13 @@
                 "DENIAL_REASON_SUBSCRIPTION_LAPSED",
                 "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED",
                 "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
-                "DENIAL_REASON_RELAY_NOT_ACCEPTED"
+                "DENIAL_REASON_RELAY_NOT_ACCEPTED",
+                "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 19,
+              "maximum": 20,
               "minimum": 1,
               "type": "integer"
             }
@@ -394,12 +396,13 @@
                 "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
                 "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
                 "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-                "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+                "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+                "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.UsageReportRejection.schema.json b/gen/jsonschema/fora.v1.UsageReportRejection.schema.json
index 3d26aee8..aca96cc0 100644
--- a/gen/jsonschema/fora.v1.UsageReportRejection.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReportRejection.schema.json
@@ -11,12 +11,13 @@
             "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
             "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
             "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-            "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+            "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+            "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 5,
+          "maximum": 6,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json b/gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json
index 4ba13fe3..683672de 100644
--- a/gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReportRejection.schema.strict.json
@@ -12,12 +12,13 @@
             "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
             "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
             "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-            "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+            "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+            "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 5,
+          "maximum": 6,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 3216e165..6e881ef4 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -120,6 +120,9 @@ class CatalogRejectionReason(Enum):
     CATALOG_REJECTION_REASON_URI_UNAVAILABLE = (
         'CATALOG_REJECTION_REASON_URI_UNAVAILABLE'
     )
+    CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION = (
+        'CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION'
+    )
 
 
 class CitationFormat(Enum):
@@ -213,6 +216,9 @@ class DenialReason(Enum):
     DENIAL_REASON_ENTITLEMENT_NOT_GRANTED = 'DENIAL_REASON_ENTITLEMENT_NOT_GRANTED'
     DENIAL_REASON_ACCOUNT_NOT_REGISTERED = 'DENIAL_REASON_ACCOUNT_NOT_REGISTERED'
     DENIAL_REASON_RELAY_NOT_ACCEPTED = 'DENIAL_REASON_RELAY_NOT_ACCEPTED'
+    DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION = (
+        'DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION'
+    )
 
 
 class DiscoveryMethod(Enum):
@@ -1120,6 +1126,9 @@ class UsageReportRejectionReason(Enum):
         'USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS'
     )
     USAGE_REPORT_REJECTION_REASON_MALFORMED = 'USAGE_REPORT_REJECTION_REASON_MALFORMED'
+    USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION = (
+        'USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION'
+    )
 
 
 class UsageReportResponse(WireModel):
@@ -1980,7 +1989,7 @@ class ResourceEntry(WireModel):
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
         None,
-        description='Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.',
+        description='Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see "Critical extensions" in the file header). Empty\n (default) → all ext keys are safe to ignore.',
     )
     hash_method: constr(max_length=64) | None = Field(
         None, description='Hash algorithm'
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 7f374576..d38d9b55 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,15 +26,15 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
 export const CatalogContributorSchema = wire(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider."));
 
-export const CatalogRejectionSchema = wire(z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("CatalogRejection — a CatalogService call could not be applied."));
+export const CatalogRejectionSchema = wire(z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("CatalogRejection — a CatalogService call could not be applied."));
 
-export const CatalogRejectionReasonSchema = wire(z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]));
+export const CatalogRejectionReasonSchema = wire(z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]));
 
 export const CitationFormatSchema = wire(z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]));
 
@@ -44,7 +44,7 @@ export const DelegationSchema = wire(z.object({ "expires_at": z.string().datetim
 
 export const DeliveryMethodSchema = wire(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]));
 
-export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]));
+export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]));
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
@@ -76,7 +76,7 @@ export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.st
 
 export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
 
 export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item."));
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
@@ -162,7 +162,7 @@ export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOL
 
 export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
 
 export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
 
@@ -196,17 +196,17 @@ export const TenantFeeRateSchema = wire(z.object({ "fee_rate_bps": z.coerce.numb
 
 export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]));
 
-export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
+export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
 export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
-export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
+export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
 export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
@@ -214,9 +214,9 @@ export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describ
 
 export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
 
-export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
+export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
 
-export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED"]));
+export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]));
 
 export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 815ed10f..3486bc07 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,21 @@
 
 ## Unreleased
 
+**A request's critical extensions are for its receiver, and an entry's are for the agent:
+`UNKNOWN_CRITICAL_EXTENSION` is added to three reason enums (additive enum values).** The
+file header gains "Critical extensions", the one statement of the rule. A request's
+`ext_critical` is for the party that receives that request; a receiver that does not
+understand a listed key answers with its RPC's reason: OK with no offers and
+`OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION` on discovery and `Resolve`, OK with
+every item denied as the new `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION` (20) on a
+purchase, the new `CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (10) on a catalog
+push, and the new `USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (6,
+`invalid_argument`) on a usage report. `ResourceEntry.ext_critical` is for the agent: the
+Exchange carries it onto `Offer.ext_critical` and does not consume it, so it never
+refuses a push. The SDK error-detail decoders in Python and TypeScript know the new
+values, and the extension-profiles, academic walkthrough and what-is-FORA pages state
+the rule.
+
 **A catalog call whose signature fails is refused with `request_auth_failure`;
 `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
 `CatalogService` call is refused like every other signed request when its signature is
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 251f3ff0..cb37c848 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -266,6 +266,29 @@ import "fora/v1/vocab.proto";
 // the Broker reaches every Exchange as a replay of its sub-request.
 // ============================================================================
 
+// ============================================================================
+// Critical extensions
+//
+// A message with an `ext` Struct also carries `ext_critical`: the keys of `ext`
+// its consumer MUST understand (the COSE crit pattern, RFC 9052). An empty list
+// means every key of `ext` is safe to ignore.
+//
+// A request's ext_critical is for the party that receives that request. A
+// receiver that does not understand a key the list names does not act on the
+// request, and answers with the UNKNOWN_CRITICAL_EXTENSION reason of its RPC:
+// DiscoverResources and Resolve answer OK with no offers and
+// OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION; ExecuteTransaction answers OK
+// with every item denied in the body as DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION;
+// a catalog push is refused with CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION;
+// a usage report is refused with
+// USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION.
+//
+// ResourceEntry.ext_critical is not for the Exchange. It names keys the agent
+// must understand: the Exchange carries it onto Offer.ext_critical, with the
+// `ext` keys it names, and does not consume it. A key the Exchange does not
+// itself understand there is no reason to refuse the push.
+// ============================================================================
+
 // ============================================================================
 // Edge discovery headers
 //
@@ -2745,6 +2768,10 @@ enum DenialReason {
   // to buy this offer directly, calling ExchangeService.ExecuteTransaction at
   // offer.exchange.
   DENIAL_REASON_RELAY_NOT_ACCEPTED = 19;
+  // The request's ext_critical names a key the recipient does not understand
+  // (see "Critical extensions" in the file header). Every item of the request
+  // is denied with this reason, in the body.
+  DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION = 20;
 }
 
 // IngestionSource — How the catalog entry was discovered.
@@ -3081,10 +3108,11 @@ message ResourceEntry {
   // Extension point
   google.protobuf.Struct ext = 15;
 
-  // Critical extension keys (COSE crit pattern, RFC 9052).
-  // Lists keys within ext that the consumer MUST understand.
-  // Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.
-  // Empty (default) → all ext keys are safe to ignore.
+  // Critical extension keys (COSE crit pattern, RFC 9052): keys within ext
+  // that the AGENT must understand. The Exchange carries them onto
+  // Offer.ext_critical and does not consume them, so an unknown key here never
+  // refuses the push (see "Critical extensions" in the file header). Empty
+  // (default) → all ext keys are safe to ignore.
   repeated string ext_critical = 90;
 }
 
@@ -5078,6 +5106,10 @@ enum CatalogRejectionReason {
   // to see full ownership); the human-readable message routes the caller there
   // without confirming who, if anyone, holds the URI.
   CATALOG_REJECTION_REASON_URI_UNAVAILABLE = 9;
+  // The push's own ext_critical names a key the Exchange does not understand
+  // (see "Critical extensions" in the file header). ResourceEntry.ext_critical
+  // is for the agent and never produces this reason.
+  CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION = 10;
 }
 
 // CatalogRejection — a CatalogService call could not be applied.
@@ -5277,6 +5309,10 @@ enum UsageReportRejectionReason {
   // invalid_argument. A consumed_quantity that differs from the estimate is not
   // malformed.
   USAGE_REPORT_REJECTION_REASON_MALFORMED = 5;
+  // The report's ext_critical names a key the Exchange does not understand
+  // (see "Critical extensions" in the file header). Refused with the Connect
+  // code invalid_argument.
+  USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION = 6;
 }
 
 // UsageReportRejection — a usage report could not be accepted.
diff --git a/sdk/go/connect/testdata/error-detail-wire-vectors.json b/sdk/go/connect/testdata/error-detail-wire-vectors.json
index ed7d491a..ad611c05 100644
--- a/sdk/go/connect/testdata/error-detail-wire-vectors.json
+++ b/sdk/go/connect/testdata/error-detail-wire-vectors.json
@@ -184,6 +184,7 @@
       "fora.v1.CatalogRejectionReason": {
         "0": "CATALOG_REJECTION_REASON_UNSPECIFIED",
         "1": "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
+        "10": "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
         "2": "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
         "3": "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
         "4": "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
@@ -207,6 +208,7 @@
         "18": "DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
         "19": "DENIAL_REASON_RELAY_NOT_ACCEPTED",
         "2": "DENIAL_REASON_INSUFFICIENT_BALANCE",
+        "20": "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION",
         "3": "DENIAL_REASON_RATE_LIMITED",
         "4": "DENIAL_REASON_CONTENT_UNAVAILABLE",
         "5": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
@@ -276,7 +278,8 @@
         "2": "USAGE_REPORT_REJECTION_REASON_DUPLICATE",
         "3": "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED",
         "4": "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS",
-        "5": "USAGE_REPORT_REJECTION_REASON_MALFORMED"
+        "5": "USAGE_REPORT_REJECTION_REASON_MALFORMED",
+        "6": "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
       }
     },
     "messages": {
diff --git a/sdk/python/fora_sdk/_errordetail_wire.py b/sdk/python/fora_sdk/_errordetail_wire.py
index d35f36a8..ba992ed1 100644
--- a/sdk/python/fora_sdk/_errordetail_wire.py
+++ b/sdk/python/fora_sdk/_errordetail_wire.py
@@ -141,6 +141,7 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
         "ENTITLEMENT_NOT_GRANTED",
         "ACCOUNT_NOT_REGISTERED",
         "RELAY_NOT_ACCEPTED",
+        "UNKNOWN_CRITICAL_EXTENSION",
     ),
     "fora.v1.RestrictionKind": _names(
         "RESTRICTION_KIND", "UNSPECIFIED", "FUNCTION", "GEOGRAPHY", "USER_TYPE", "OTHER"
@@ -157,6 +158,7 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
         "QUOTA_EXCEEDED",
         "TERMS_LIMIT_EXCEEDED",
         "URI_UNAVAILABLE",
+        "UNKNOWN_CRITICAL_EXTENSION",
     ),
     "fora.v1.RegistrationFailureReason": _names(
         "REGISTRATION_FAILURE_REASON",
@@ -212,6 +214,7 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
         "WINDOW_EXPIRED",
         "MISSING_REQUIRED_FIELDS",
         "MALFORMED",
+        "UNKNOWN_CRITICAL_EXTENSION",
     ),
     "fora.v1.RequestAuthFailureReason": _names(
         "REQUEST_AUTH_FAILURE_REASON",
diff --git a/sdk/ts/src/errordetail-wire.ts b/sdk/ts/src/errordetail-wire.ts
index 8a7aa670..f6bb4baa 100644
--- a/sdk/ts/src/errordetail-wire.ts
+++ b/sdk/ts/src/errordetail-wire.ts
@@ -129,6 +129,7 @@ export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<st
 		"QUOTA_EXCEEDED",
 		"TERMS_LIMIT_EXCEEDED",
 		"URI_UNAVAILABLE",
+		"UNKNOWN_CRITICAL_EXTENSION",
 	]),
 	"fora.v1.DenialReason": prefixed("DENIAL_REASON", [
 		"UNSPECIFIED",
@@ -151,6 +152,7 @@ export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<st
 		"ENTITLEMENT_NOT_GRANTED",
 		"ACCOUNT_NOT_REGISTERED",
 		"RELAY_NOT_ACCEPTED",
+		"UNKNOWN_CRITICAL_EXTENSION",
 	]),
 	"fora.v1.DisputeFailureReason": prefixed("DISPUTE_FAILURE_REASON", [
 		"UNSPECIFIED",
@@ -214,6 +216,7 @@ export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<st
 		"WINDOW_EXPIRED",
 		"MISSING_REQUIRED_FIELDS",
 		"MALFORMED",
+		"UNKNOWN_CRITICAL_EXTENSION",
 	]),
 };
 
diff --git a/website/src/content/docs/getting-started/what-is-fora.mdx b/website/src/content/docs/getting-started/what-is-fora.mdx
index ecbe57f1..24c8e386 100644
--- a/website/src/content/docs/getting-started/what-is-fora.mdx
+++ b/website/src/content/docs/getting-started/what-is-fora.mdx
@@ -101,7 +101,7 @@ Every request carries a `Requester` message — a universal actor identity with
 
 **Multi-hop forwarding** records request provenance when a request passes through intermediaries (e.g., agent to broker to Exchange) as a stack of RFC 9421 HTTP Message Signatures in the HTTP headers. Each forwarding party adds one labeled signature covering the request plus the prior hop's signature; the ordered set is the forwarding chain. The Exchange verifies the whole stack and counts hops against `max_hops` / `max_intermediary_hops`.
 
-**`ext_critical`** flags extension keys that an Exchange MUST understand to process the request. See [Extension Profiles](/protocol/extension-profiles/) for details.
+**`ext_critical`** flags extension keys the receiver of a message MUST understand: on a request, the party that receives it; on an offer, the agent. See [Extension Profiles](/protocol/extension-profiles/) for details.
 
 For the full identity model — key lookup, child delegation JWT examples, scope-based catalog filtering, and denial reasons — see [Authentication](/protocol/authentication/).
 
diff --git a/website/src/content/docs/protocol/extension-profiles.mdx b/website/src/content/docs/protocol/extension-profiles.mdx
index c4bf7787..1c1fd5bd 100644
--- a/website/src/content/docs/protocol/extension-profiles.mdx
+++ b/website/src/content/docs/protocol/extension-profiles.mdx
@@ -104,7 +104,12 @@ FORA adopts the COSE enumeration approach: the sender lists which ext keys are c
 ### Behavior
 
 - **Regular ext keys** (not listed in `ext_critical`): safely ignored per the robustness principle. A consumer that does not recognize `analytics.view_count` simply skips it.
-- **Keys listed in `ext_critical`**: the consumer **MUST** understand the key's semantics or reject the message. Rejection uses `OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION`.
+- **Keys listed in `ext_critical`**: the consumer **MUST** understand the key's semantics or not act on the message.
+
+Who the consumer is depends on the message:
+
+- **A request's `ext_critical` is for the party that receives that request.** A receiver that does not understand a listed key answers with the `UNKNOWN_CRITICAL_EXTENSION` reason of its RPC: discovery and `Resolve` answer OK with no offers and `OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION`; a purchase answers OK with every item denied as `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION`; a catalog push is refused with `CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION`; a usage report is refused with `USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION`.
+- **`ResourceEntry.ext_critical` is for the agent.** The Exchange carries it onto `Offer.ext_critical`, with the `ext` keys it names, and does not consume it, so a key the Exchange does not understand there never refuses the push. An agent that does not understand a key an offer lists does not use that offer.
 
 ### Example
 
@@ -123,7 +128,7 @@ FORA adopts the COSE enumeration approach: the sender lists which ext keys are c
 In this example:
 
 - `analytics.view_count` is informational -- a consumer that does not understand it simply ignores the field.
-- `medimg.irb_approval_required` is listed in `ext_critical` -- the consumer **must** understand IRB approval requirements or reject the offer with `OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION`.
+- `medimg.irb_approval_required` is listed in `ext_critical` -- the agent **must** understand IRB approval requirements or not use the offer.
 - `medimg.deidentification_method` is not in `ext_critical`, so it is also safely ignorable despite being in the same domain namespace.
 
 ### Why This Matters
diff --git a/website/src/content/docs/protocol/walkthrough-academic.mdx b/website/src/content/docs/protocol/walkthrough-academic.mdx
index ff339600..784b4869 100644
--- a/website/src/content/docs/protocol/walkthrough-academic.mdx
+++ b/website/src/content/docs/protocol/walkthrough-academic.mdx
@@ -562,7 +562,7 @@ The retracted paper (DOI `10.1038/s41592-024-02467-x`) is immediately identifiab
 
 1. **Attestation claim**: `academic.retraction_status: "retracted"` in `ResourceAttestation.claims`, signed by `springer.com`.
 2. **Ext field**: `academic.retraction_status: "retracted"` in `Offer.ext`.
-3. **Critical signaling**: `ext_critical: ["academic.retraction_status"]` — the consumer MUST understand retraction semantics. An agent that does not support `fora-academic-v1` would reject this offer with `OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION` rather than silently consuming a retracted paper.
+3. **Critical signaling**: `ext_critical: ["academic.retraction_status"]` — the consumer MUST understand retraction semantics. An agent that does not support `fora-academic-v1` does not use this offer, rather than silently consuming a retracted paper.
 4. **Offer.title**: Prefixed with "RETRACTED:" as a human-readable signal.
 
 ### Content Identity and Dedup
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index ab663da0..3dd2b08d 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,21 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**A request's critical extensions are for its receiver, and an entry's are for the agent:
+`UNKNOWN_CRITICAL_EXTENSION` is added to three reason enums (additive enum values).** The
+file header gains "Critical extensions", the one statement of the rule. A request's
+`ext_critical` is for the party that receives that request; a receiver that does not
+understand a listed key answers with its RPC's reason: OK with no offers and
+`OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION` on discovery and `Resolve`, OK with
+every item denied as the new `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION` (20) on a
+purchase, the new `CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (10) on a catalog
+push, and the new `USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (6,
+`invalid_argument`) on a usage report. `ResourceEntry.ext_critical` is for the agent: the
+Exchange carries it onto `Offer.ext_critical` and does not consume it, so it never
+refuses a push. The SDK error-detail decoders in Python and TypeScript know the new
+values, and the extension-profiles, academic walkthrough and what-is-FORA pages state
+the rule.
+
 **A catalog call whose signature fails is refused with `request_auth_failure`;
 `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
 `CatalogService` call is refused like every other signed request when its signature is

From 313b230762cf79855015cbd43610a0684efde8e4 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sat, 3 Oct 2026 23:58:26 -0400
Subject: [PATCH 095/164] Forward supported_profiles through the Broker without
 routing by them

DiscoveryRequest.supported_profiles said the Broker routes queries
to Exchanges that support the agent's profiles. The Broker MUST
forward the list unchanged in ResourceQuery.supported_profiles on
every query it sends, and an absent list as absent; it does not
route by it, and each Exchange answers for its own profiles.

The Broker overview's "Profile-Based Routing" becomes "Profiles Are
Forwarded, Not Routed", and the extension-profiles, news and legal
profile pages and the for-AI-platforms, for-AI-agents, for-Exchange-
operators, what-is-FORA and industry-landscape pages drop the routing
claim. Both changelogs record the change.

Comments and docs only; the generated code, the descriptor, the SDK
types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 674142 -> 674255 bytes
 gen/go/fora/v1/fora.pb.go                     |   9 +++++----
 .../fora.v1.DiscoveryRequest.schema.json      |   2 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |   2 +-
 proto/CHANGELOG.md                            |   7 +++++++
 proto/fora/v1/fora.proto                      |   9 +++++----
 .../docs/components/broker/overview.mdx       |  18 +++++-------------
 .../docs/getting-started/for-ai-agents.mdx    |   6 +++---
 .../docs/getting-started/for-ai-platforms.mdx |  13 +++++--------
 .../for-exchange-operators.mdx                |   2 +-
 .../getting-started/industry-landscape.mdx    |   2 +-
 .../docs/getting-started/what-is-fora.mdx     |   2 +-
 .../src/content/docs/protocol/ext-legal.mdx   |   2 +-
 .../src/content/docs/protocol/ext-news.mdx    |   2 +-
 .../docs/protocol/extension-profiles.mdx      |   2 +-
 .../src/content/docs/reference/changelog.mdx  |   7 +++++++
 18 files changed, 47 insertions(+), 42 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 3470373cefc67543c16c68d01229ab4d823e7b81..6fad0ae0be9292d625437750b784d864220588d6 100644
GIT binary patch
delta 18137
zcmY*>d3+Q_+JB}qGfZ^^k`4rz3Ee$2nF~lblW-&<5I}H6ynpMi?uvrSt_v=@y2q>G
z2=|RhiHjl;P+`MHg3KF)1(h2-fYl%>$RRFXpt1-8;r%{U)wI7q<dg5yRo{N<x$5W|
zk1R~R_jGDPji*Md$*l3N_szUbd+Y1;?Av^AE!B6d%h6jHz782Drv37)5C8eozdYNb
z@*U6f=_Q*37h2>T$ke^wPMXi~)`YZF@a;@qyFJjqVE7%k-EKcHZu}D?$B(ifduYs~
z_QPWyea!yT*!v$EIrhQPqwFzbbv|rIAY5&a8*7h#eDwIg*nj*J{X6C{`_a*3M?Gqf
z9BU8$vuxf4V3dB14^KwkhenS{(vfH@V39rSF?-aw(U00=$313`ANQxnM%(uhV_*A;
zhsNCh&^5kCb$SiGZ_Mpz4edsazJJUps0C%lJ@(M(@%Dr04lTr+?a?ED))~4y`o!q*
zkCHl|0oS-E#@dgJANRnRhe4Knbo6L3GA&ia*X#(~UJk?PdQ06$W)gPF%5k8F%w`lg
zFq2>+ssBqF)o*y`q|0^&wtC9vxEy|P%n4oN@PlJc$Y`fH{NR`q3WoG=J;E_94DZvt
z&+fq4@~2&j7GQolloeKeT7cr|P^6m!LGg5`XD{6n3<1NtIK(I3#e#goo`ApW;*i!}
zwG5!+;!uZt2cqNRkQLUO<-3{TT^iz^8SEloyEou3U+QYWFo>n@AQ*_2h73~?F%T^c
zg`@f~UGsJ}{4a(wKI7l*4GhhFF%$^ulQk&TS<5i|D?{4q^o{!hnx`6nN-N_5$X7b#
zfFNHPGD3nJ5acUErlq%rO8^5zW3LWn>TPsg2&O^tR)&97$op!@r|0Tft`vP=4*3l<
z{h82j_+Dup@^A6zeT8CpUmgGCoj_SxovV}wHm?h1wN_eqs8J}pg9AZa7s~Ib|5`9;
zhOeIA{%+u&>Ux)flC0hxmIj9UkYOnX4Gi_6NK|hnhNT5S5h|GH(Q|YL{k6a})(R@r
zhhn32!xd#xvj^sS^eXXUkTis}9>HS!=JBH+7(JeMdoR$Z3?j$2nc!#$WjT6hLWzb@
zuuv(HDf)Nou2%{+ui@RmSH2e*Sh>Mv@M0JnTtj%lupyK!W3jX51;d6=K}>(2VyH95
z?0+MqZRLsg1MmF~e>r+kCcWVr!v~f(LPkvK;RDMXp=3(=*asiK5$d${nvZ?3hVb#G
zkax>9A1f*PZszyy546eomvHJNsR;(YjZfJhs43g#szJ%P%~gYvahnszoi$3vZJ}^P
zFBfA$F7D)m4+Q#`?Q|I^7k9empj_M;%I>HJ(gF-SLv~odUoapS_wua=0;9|Kx(op@
z><wi_RToOiy`h5c4g|yAP_JTrI~A4A8php}zVBdQr>CmP<zV1waycj;n?eP$BA^dA
znnFE`^|vL5Zg`J|G%L71ljjt(P<q-2ffb$#h#c?eFw4<UR<_bX2i?(7juSLG=#GZ+
zO}#c(*L>NAe^!3Rg7lcCz;b5H%J(t7i|+MhBfq_~^R;%|(@Kw31A+wDAWnL!5p0{M
zUnd&l;hcO;6jnT>>;k+_we_Iwocz|=sx8pme65XoNO=S(5))lD@zlswZK3Ksy!8L6
z#uV?sEggu)^YXKERAa>Z{CusgdPtECD2xDNFWSz}&uyds=tWiQf~uCEu_4{=c;IoZ
z^^5rdL+=UybfHn#@}(yO#f7!`T7alX2&&qACdNY$TGi5cdWkN0xRN)Y43reEbi0rV
zR=Qn0=(3W!^b=j6%PV~3=YjIVSKKaSiC5e%R8d}`E)}8+&>Ft?^FU?c8n+ACV~yK|
z@_!9=p@8qA!5(XQ?^A*PJ=VHi$SiB~nG6-QL6^1pEnDeBL>C0kYx!FHU~g`I5s31A
zrvi2%1dbsn&tJ=Dxymk-=db1GwbSntoe{*Z^A2AGMs<DN?Ls;EdOj0z1Dz-*U#GZP
zro#<|hJSZ{#)b4hz6hAU?A`f+kiP8>a21jteoP<!I<TWt*B?8o84psB{n)XCoUs8x
z_G3rP*xSgbMTUQ}nXx|oUOQH$#U`5p3iwQKQ47OA&D3U@Ui}M?-U4_U%f#eGGF}>F
zr+Q5{z2$ng9#D_qoEfHfz|SOj%}kOk&w_46q}xmBTSDw5U*SupvJIrr?IlwM2_QPX
zWWpDPq7NRf;^8psTD{8D{K9@kB2QMCEwUVlF00H|a*o1Nl$%v%c0Z{I;53#^lAOMn
zL3HRLBwlE<$}H`zmx}j5`PHV@CYZ9TMvfgfcFg@FAI6&O4<pBn#ky|%<73A1_rff{
z5N)JSi!=(m)h2V^N@2I!L;?;Fd_Z-)eS}q2)tRck6ls|VlR8tafdIi!XBx7;08$?l
zlj$m|+(i_I>rAankbC&VD9h&?BW!9JBr*i?9C5SG%#t-15NzvAGog$^0lLoY)LDN_
zkm1c6`2R%N<7FFM1|JwUxC|7f8%(o@VxTD9U>29?Wr6{18+lOyt0-%98E7JDbVo!%
z+h`hjih+W*(d-b^2MGpDB%Amv1#C#!CYPZF7&f^KG?8pFji6$niDZ-6(b8`h4Djq0
z-YLfJEZ^cX1i-MxWuS><i)qN2xkw9uVT)N1*Z2Ab1tyYx>CG`VJhObC%RvjfeJ%%0
zB>P+~Xd>B1TFjt{q)5X=axi^;ip}zrA9Oir_BiNr(Cl&0)q`e_gQUkgpWw(cyhqZl
zJG1p#`4N{R3mivWjx2B-F^!0_Miw}Zn6ZRDLq^DThWEtcA~vh+gv)Rp7*4nh*MZ@L
zX~>mMk#-#zPMF<#=)Hv!Ee-D}zO#t+Ej#5hw1lTmnOSmaUZk}I!zr`9oKyk9aLUA_
zN{hxKt(D<D&C9#8va-`I1FhIjn`*U%Hefhy279Sdv;xCvv$T(Xw_s>(c)#JVcV)jR
z`^IHxjZu8#j-oXfzA=rYVrUJ9Z_Lhx`mKTi*?pFe=*Dg@JL@uJgW;^pkPU{jrrNU<
zY1v>nYbH`+Dk{=)4DS#8Xg5|;_Jhli1BM@5h8!^bV5;>vx`5#a)3o&-LI=a}p69o8
zXT8eKy9@>x&btf-7|xr9lduLD&YN~b|D#~YHM~FZH@mY(%YJeha>4ME%a99(pWIR8
zg5f6`#c09M#_%@tM|!Xa%bHz=Ht<EWnI&d-_^S;Vn$5f}%93rs&}???uHPmY+8W-8
zJhvyiqimvet<JQC4il|wRjVx+CR*1<(H0C7EsWv@!H|c&AYajw-B@1ZGUS1w#%0I@
zLye_Yy+v9c7;3C!Cw;z*>UM^AIxp<S7M4$UDcXTzx=Yax6w@uWizw3CfnvH9DR2_B
zJ=Qnr%e^Q;=eZp1!7<NL%ex}2JvioBIdNr*_TZRjr8?{Tq#7Lz?;^gfguPq2$ff82
zYc8^~<c_aM>i~*Hmeo^HbO6O7tE9KS3G)n$9W?x}TH2cQfl}7bHxhq3r8@{sUUf$k
z1kJ0K+DD=rXkN9jkEE?0AhrRoS_NyYOtC2<f!q|Ww!D83yWJu!gw=>8cDua*pyXOh
zP5yvjUu&uDE+E*~TG;M>D#w|Rtq|W-&W=_zxC-V&!3I~sd{8vF3g&~NffU5TTJv@_
z{F|(d?dgvy*jt|LO;(__UPIJfX~N&a*Hp5p<y#zT2%+5;O9dn#sJB>ovfu-PdW+T3
z)Xzx@Jl)2}4q)diwz(7@Xt&MLuB%uMY_kkocmWU;+pK7Tev-87X87N;GMdu01K9~r
z>-Q|IZtjJ0-AK6ue9<6wU#|m}CU@Bo;(Z6Kd^vdlg6e>UZ5=Jty3vgPp{1F@+wCge
zvWg}6ErVG}1w_)XXaL1NbQA*=9n=I52(}L`Oz^WjP^`P*|Jcen!M6`)Gh2Ub;eg;*
zcu9BC>r?)lA?)s=Pc60BfDlZdT57QY2&PXhEH*wMD|IKuj`RNvVNFHH-9Gg8;}(;d
zk2dIY+-l!J|1DnL!|<Q7GOqG(u4lh7PSMM$2=&0r{iiMMTYk?__DD7Ul8YV4!FAes
zKOneH)B7nx0TH36tv25xLJcejNq`77{9jt$Z!DjPS|vljuPhuy&{kfFa18OaMW+x{
zNPEywzO%HvV1dnV9L9<Y0URZ0K;KzR9z&re$iB1Mv=yt19<%{E$6p@ChTMM+{Y5N5
zh%V=>c5;&mh%V=>xLhLvVm)!rO5P?`iUh?<@tl>qRjd@1gjR~@tPwYhRO>+$7i6jx
z10a|$IH?AR*IjT@4N$aoPL_JmimurbCrkGN2&6&>5TVoTgbpB>nw^XT1XD9*+;!M`
z<{18ocE&W@qi5-vKAM*%+P)5A`<X-GGs)JHV*6PDh^N5906suiX_5^C48-;`hpbb>
z2i(X8nKia1iW&*grpCthf2e2!G?l+}BfG(#YHK3L(1xr%)kcmjLn!+U?1k-&XL!ru
z?1k2|Y+q~rDRebRm)U&da5ll5ZEIqgOG0#=Z6gcr6m6iwT>i_O*e}hww%R2dLWQ|D
zc00&BbU}~#{N0<_D099o%NhwuYKQXm!J-Wew2<FCf?aPev^7yp&?XaY7TTyLIM@M%
z#TW6{N3enRBA16YxQmEq8f}Jp8vbQ=#?ExRo0(tBS!SbLyhu6LlLk|3^X|WAfA0kV
zZ`Il=G66A)T3hX50HI8+jXlgxS}*n_Gp|lxxs~nql&`jx$00@RthQAl1f*7Wo?Pnz
zf@8HEi|bngf&*G^PG{c126)RhyBr!gHrr|s&{Kr_X4{mrJ0LhV+nC+yNVF%Rt$e~=
zEZlXg8a@f}+O4*l9RR73?SyPkGT9DWgzO*yfvydJLUxC(76y0<rX9AL#Q?#y!$!zX
zCcE}B{O{WtXVWcz%``3NeLE1AcI`!WJ*eyo0Lp`oT>(LP(6K8ZC=ZfdKh-dxUS!w9
z=`;7R-+IapJ2rt7HaTo($>{))TG?Sa%>#ntu$}6p|3y&1tVj6F-?G1zA8{GTsz>ZB
zIVbfJRy|^e<n9>|3`cC|yt@~{Q|W>CvaO!7Q!WQphEujWI7K69amvn?bqSC<+1MG8
zXL^y9Pm^at#rPW?PdokrM90&Pe*n?(^fmwVqQliQ%0B?$IpeB8hmB_(|KKT@&N%)7
z1k)Mv57q&ix7hIi*Up&1_ukJw$^EY#Xs6GiurG#t{1<HP3g0-2&925@vKT`SwhOi@
z#(-eEV51n*i~xuk;ewra#g;Py3B-(W(e_@p<&2<Y==YPYW&|a|jBv@O8G#n1#pLA)
zVeRJNV4H6r%|?s{kn=4bVT2RHDgpsTQ?*0~1own6j?C#a3J}$PLf9T5<|BeQOojU=
zgu^%K|CWOVoD$Z;!R;RYw+C5_zwiKCQwWJOXwqd0&H)r7xqeF6vc*26n9y|o_=D{B
zis`P36bIA8DjLxS4AaA5xncyQKH-v5eTg4VC^7ucg)=@%2OeVWGqaxy2l8Z+lu(j9
z&%6De)fPYRXaga*o)4?40|>6?!^n=0DLYD_tA9mUTNU;O_wbgh0ym~_dzk5-YRKep
z&;kT2!c2Y_0R+K{Fe)MW5D-3G5$?DuoGIo<5|9tQE5qJ0VM8T>(N>0|g+CX8Xl1x-
zKfSY11PxvdYx%*B_U+?G@=yN23JQT8CCH|)hMC-MmWb?nHH<Go4~xEFs^f)Y+1SE5
zw+k7uF078zN`w*X!Z=P#h%QKidcJEcOI6l~<@qQELuphWR`~}A-uf`|k3s_wp-~?W
z4N(L2%7s8Z?>>&@wyqBktP=a>63Vs)e%m<Kx4gmeFoYy^f)EgIY6z?S5g^{w5XMpX
zGzzg2DlKWgXB?YRmUb!V7$xme&@oCnY{+E_x_}}b#!(I(iIr$LMrq{p9${U}8(juE
zMrm{z=oqCjY{;UAE?{U3qv+Mrgj7Q7o;TB%9$_my-QRT0N+&08hSiZH8llshVNAmR
zkewI~9mCqY>G#L8HJ)nx>3EP%OLm7<DJT)g?z_Wn@>CcxgwgJByLS;rv^d0bSqk=q
zz3+r&DNr)JZ*N$Y0wqEz*cYZ!Ky|W&4qo<$wMa0>=2P!tZF%cIF@IM`oCu~fm;GTi
znV~rt_lKRytVF|^OH){`zW@*?O|Ajy<fX|qAf3E4h1Fz+#$aj+qgc}VD;F#GaK;y5
zx&ER(`Nv_OA=Y2Hl&PPfgvj+5Af5t?is1u9E_^~2;}=+v<WlG#;in#F!_6b;L%~Qw
zv^f&SrenBh1N0fc<q0;z{4A{2U%6uO^H~_{ue(GWXm_0d>k0O2^LSXT<8sB~=Xf|A
zQ9Ky#NnZMA@SF^5;)@gBMT?)4VSI5a7Cf-QDZb**tkgagR%^yw&4)Ip!dNrbqel7K
zps<HCW~VRxnRU%HF3`Yn^6YCv1HVWEx1aRiQ~-#v0n32{g5)9%9H;VVjE9%_+W%pd
z=B2P)tdkIJE>TkAun!RE3cv12cBgs885D#hr9s^y+F;;U`GhCgZRS<SIBmqhuaa@9
zL>mlzBLD75HrSjP(Zt~k$Z6mcBS=eH8MdLsp3HB5iVZX;N7U*OLbRD2!Rit75ZWMf
zr||Vpu{+Eu5w)6y5N)PJu$sm32ihPvr}0EJyV0EHwrPPj)2I#d7j2MyGx&mP*43O5
zQL9-9(Pl;jwHKdL&<3ZJv-pu}R&39TT(b{Dn^_UqX9F#|+Zz6bk&Neg&k5{xV`0RX
zEBw%w{P1){i%35J!qmWW+<@SCn#Mg0?`cbZc!obbk^RDa#?b{rw0VYfc~Z0idX|4M
zkyV?|MwCC>3O_s>fj<X`Ht@r9eEcL<6@AXJUt8ga=g58|L>u^FX+$ds4&Zk^h2!jV
zlUTPd5Qym+s*p#PMj}!D8(NQ);zLs;V_U=%>}?Mk^XMbE6v6lV0(ty_$!t&dixDhP
z#Jaqc#``j_tYNi<FGo~Kf)E3HIijXUK<M{!1XCj&T9(qNSM%0WaA>(YqSg`+A_i7R
z)LH_N8bu5_)dPZIHI0{Qa4AJ$9iKJ@HMq`Ypa`jps4tpm1BSXtL2og~0D_?|(yvUP
zMdh@V;Oprhrm#7lqSqs8o`MveUXQ4G3Xocn%eT|)QA!KNjePAiwzF)b`(9cxZj7ko
zR<r@d#z;^uR{=q>F@ohPmC#a(^v(RW=`38dS$Uj<=(0JY>Lwt%Y>qf}vy{g5_Np1o
zQ}MR@Qkt^fcFjdo*4q(PFVO=GZ%0rsCk5cl-YA%njEm`tnatzO`8eV%{(F=2jzq+!
zswV&_k2pRA1mzLOhk&3wLO#46<LFJsJ;u#>Y*^tjw+lJ#SVSF@pbfeli{O}|zvu#|
zo#cz=u>pflI^*cAkwH#6;{XK1$%tA)0)pXW1WU*bw5I9}=>IaJor!pZEBT1g{#AU-
zd^W2ZA~_eL0s4O#QF9?6`hOWw%VI#xg<nSU&P3!~NCL4e{wm`AHX`RjB}2cjBWf;G
zBFu%~M4Y*>H-*CY$a9(t)6+2*9$CQrMUcq35YM5>_l{2i!T9|(pZ2C<UsybY{ZxfN
zL3P2k2(4!>xE7(<xZrpejlpw)JUbkY?PK^aM>3w~Bc5hA=3I^hqB1G_kYBGVzXE{p
zs$(KR5MFis3JAih<k!bx;XY*l$^5U2*q;k0N0n6}Bx#hj5~&1;E|a4<hWIMfhmvtB
zx1M2l7EX<-lROB~Wok5Eu7Cj1Woi^FAiCnwhtLdO`wSacIKzDl`EEv($?tJ!Lye*+
z+mtwc$lkMg&SE6a?5Hv_gy=FmsuBkfU1mp}#OXsuUik98i<zf<VN?|w2uT`Mg$585
z3!^G?070=Z3j5vz`}Q^bi=!F4`SYCJowGO^h)etSCHpRk%De#p;Sy&UfFN8FRkaTg
zgiE5ZZzl|+FPUX2KlCi?Qn=LZLiSx6Re6Ip=(045ytzqqfqj?p?n~IsMa$eSM6}Ft
zNnc^#W#p3g=<`-zGH_k`pG(+&t-Q_|I;7CF&KWu&IO?KmsSHS+qL`b$q-5($7GIy<
zyp%oc8MNNzpi_tSE(dvFeN=rgL?3Xhk7CXd3ELMQ@NbN2TcSTt*eTVJg9Q&{+5&=Q
zV^pOrAXqj=RoVg~Z8t{qwnSyxl0c;G8&U7SqB3oj4E;7mRoW^M(spyyN!z|uOW&d}
z3KipT0!}aiLW#GWU;+f$Ti1fAFRd+hMaAls-@Bao2kvrhLaYB>u1#q5zsm_JbOg~Z
z3aQU&X6<MA_eC>~M?Jv`zMQjM{>F0lPR_n)z?Q+)kAmxf3N8RpA8-r>2<ih)Z~=n)
z00kFCN<WH;5BP&Gv75_2aFl}(3?Dek0aBx=A<GmX7(R$%u|Z!0`%x|*;y=8EuYreL
z1~S^AXqKGO&;|^LqA~eJ5)cfBqUz#bKSCc%1LJRW{Ma!tAUb~R7#NV6UNdk%inn9Z
zz=Hq;Qb`MlK^$`jK~Z<iu`r&3=@?n~f7`;sWrlx2LB^VNa1~4I*$WDswMrRTb`d{T
z&uWVn6{y&Q5L}B2RK5a&Yf%AAx;F)jl+j?nO~3XUd#6qJZwpl6ft17r9Xg4M2#8MK
z78DlA>r!PfqyKz?b}9YO9c-JY8h^?_#{={`U!VdV5dF><s6Yoqpr0?uyHp?podhD#
ze=P9+R3HOg$<XgYfeLgbLZDwPpg>=iD-_3Exh$qFk9pJI?_x{YNC0_mQzq)bvY0A?
zfKX~#OqD=DkS~j2jZfzgfKX~#EV?`<zkiVcO2M-)#?<$(GIHIDnE3ux41i}VV%JPX
zzFHAeH5yOBz9Qz-=rXF&t7Gzn697c3T|KEvtakOJDzVztld8n(7`*-!<yE=iUmMHV
z$^Z6m_GQl6SfIU3r*d-o`j|X81_0ywm~sao7}v*??*YNMJ_g@6(Q>bxoYlw&f5<*6
zYIOUM>l<TCTm+*w=+hW$*Iu73`yhih^BbGk+@j4fbz`PnxP5c1g}4BQKIHbzF<bzn
zsjZyQR%JZ^SZ}LiJwUu|t7APt(blnEIT?P3v>w0tBj&H#;TR8(Fw`B6@c==z!!aHp
zh<1?iYBd<I!tn2jWt@t6g4f$T{H?EDy8a{P^W^M_1uSXD3bNyVX~%v5Am8uU1Q6u=
z9XkSod_URopEQ$Hz>fZ=nD$A`8+<`7+XjBZYN{cUX@Lgl-xO160f_!hF_jj8h`^>;
z-Y1AaI>I1<NQ*-;@5eEj7D|SGAH`H!C=t@)aLlRy6;$Ak#@r)}Vn|?ch-5(ogepfJ
zg9C!{=(TXIAo#g7cohK5|G8svKp5q7$Krrs`rNTNpy&#V{|W~0k1uwyjJ<sC5q4MX
zbPUCx?tJyfov&|V+IKOp-bi=8`l~x%B;&)5vi}|WZOnVUI3<&hFq$(lZ`IEvc*$9k
zICSS?+6B=4&0&KpNW_PI#{PQ4fB(O}wC_A0^Y(Yy$PYipyo0Z?U5;rJ;$AwgRm!2z
z2^nvBj2)=H5>q$Qgmz@>=9u^QE+1L%YRvnqYkU*q+7$5N*8*~^s98!x_u2#tS#eU_
zE3cDD33w;Ry(KO$nYJeG4fnZ5JUy<>2J!D4Vz1#R5wAYZ#uU$pdn??|wDFx8_g4N)
z0=ilBO0mW5Pmw=AE-MHCoIF3SA{P+q&5x@J0*J2j<A{85nW8@h(<1)$3AV7uBDW7k
z`=Yq2AZUX=i{hvtbSbDmS&hdvBiM=G(!^5yqm%5q?hyDfHXl7kXC7Cj1Q4Bh9Hrzc
zUGnP>=&z4!>(Y6jvu58&{3&Zb9zgH<xT^VppsA0mnhyw?`nan3fXKM|cywJ{)_fAk
zn*UlHHGc|S<?2th=gst=zG5vh%inb0L)HJyxccydMtIMg@obr0fOyZFaV$5e^7W_U
zzb!834FL4q7FUS~h@RWxYTf`u&uww1^7W^z-4mDd1^{%~<LW@0<2~+JX<@g=9V;#D
z_Qa8hD_bHHD-Hjb@r;G(!DrbDfA*L0K(0QSP6#T=?Pt>$&$B6>qO*?kAO+dkIFpx@
z0YP>)j{CVUQTeYV@0{cRxWHBxopbw;!_URl`W|i2=Ug1?`<e1Z@c5;4^+h(@)BRFh
zUIYdcQC*7X$-6Fq=yZuZv`f4wfDc0x650Y@c8Tq5Ga(UZrQa+RK(k2+Z&7gI;w!8T
z?|hl{DFl|c5GsY+CnfTdBA5V0>&}JZes3jtw1zLZ%*qRE5?(pMK?pr+5^d#94iH^x
z61b;BH*YJ+gH!pX%WP=j)Pz@lM1T-orY73U@1TI_GBttkpmYzhk~}w^KXQc)=`lUw
zl^1LwM3?D_T>1GG5M8DxaMg~k1Xt49duGDhKiE|a>hcv9F9eo1x$qQyXC_R_ejhbP
z-<gTB3S|(S_s!-bn%S*|vlCt!hm{(gwa-p;=&HKVS^Mlnk6z-^awQ%A&E@Ylv&zD`
zZWlUcpX+v^ONn!-3r^SYQXGxX=l!m-Te{9qc;#nC2+?JJqFrb87CH}~pD604FKB_l
z8({cr6B+NO-?+-=XBxE$eCno~o&ykf{uK#r6~8A_?^lh#<hC1fu&qe6maYT@+lmA(
zl+ZE_5GlJN5nPp!pNmK!u2ZZ`;07@LnnOttY%3G^07iFlm56RwtV~q&*V8mz51_!S
zOK3L)U(xJzJFniub2p%@BX|h+)g{!&SwPV^B!4#m2&L*0_}u`x0uaWpOOy=5&rAFQ
zipQlx^-1zgP^KZh5?fZ!s0Q~H6jTifRjLMvL}*B;EhZp18WPxI%2&{NZbQQAp<W?A
zn=~Zs?)p`_1U7&Q;;w}DPQn}fR_Fg3h2JBYs{{UYVGI2(Up1aM<D&Yw%Y7-;$6fAA
zDN%OOOQo@?KJH3b@4(o!BEehaiez`fyDuSEBua*UdlG6zqC{Ac>`l;$<g+X~NX|3-
z2NM|=d3H<vXzPOsUr2n($fNS}Z{FNeFEam~&_wq6AcV#KoxnK?vJVhSe!y>Nr4Kbf
zNND2XFbUD-g9I)P4-jpDKIHYS^eXeigw~0yhBh?Ie3-z7h0eS4$fQj?r?p;eH6^qn
z)rM|wG$p$C(5HJvBUFcD>Cvrm0lxfLLKDf2t~7lfOLP^xL4u$<mgqi++#w)TJeKHD
zrS}mWF!FK!j~u<9dE8Zo4*HLiGE!j#*a?pB8dc^AR~b6!KS9bMN5G4MaFRb@=oQw<
zgqBhY(?S2qM3+MSJ=9e+LS%fEe%sLZd#tY#n#gsMqSaT49zFGga#%?AbLoaQ`W>2e
z&ee$y`_GY1v=u-v<o5-hXs3T<T}Wsmyh(^g7ZSbuqS9#IfmjM9GH?>sULTQrIe`rb
z9eWO>bZ$;)6Ow#ld%e6Gf65w!2QW=@qJ#WC4hYLNCvX5yAqI#LYfcnQNXmRBfyn2p
zPChFMRJiKovl3B0U!{EhFHIE#DN3d!wOH_!$L8f7^s^N}GVJjT9+{F<xdtfOs=IuE
z&}m8%pK@v`Qrj8+naPY={`;W5+?bj4nIcl#QKZgFYDMy!8z4A<rB?u<;jARQLZ4sS
zkutOSgCV`EIXkI|vOz+$nVm%0z)w>Ef#&e_A-%+$<MIe8@nBz$HqdM?59I5et+`3%
zTL{r}ZW6wohFd#mgphq9eQQ3dU-=73O~xpsX!Sx8Cl-_ofS`IISv*vPEJ3LFLbBv~
z`h1SZFwipoEWSLL%aSVUAq2&;B%*$-XoHY_k)N>jN30i<TB+itkbN=Px1YX<LZ}_Z
z>~cOntS^o(cXgqdT~4~(i4dwX{40|go06X3Q2t0zZ^QfJM_{p)N&LQq*7H@^9;``f
z|4e%IW(_ObDz!ZzS$cUyf6`O>kEC~?Sjfs}Ag@b$ANiRCV_loX{($DyDvHf@No{?S
zR}a;TtAQ~P2;_B4Kv-g3GG9*0fats~i91mgp@4|cb;-nf6`>>$5!#ScGmer#iH4+_
zag>N6v>}NI6&vj;1ckpbscCQUteE~`HU5<0i3d=qF{yrY3J8T7lMzv&paF$vV-iI{
zDn$Fl#$?Yopb$-Xcn*aOynbWS+f9F#P6-AX{;kQ3cVOWe9{bkO58~&=<3~O=X582z
zV@5wbYVi2+_;oJ7H?IFRduuXa>I-O^8bkrUJ^f`|&-L8AJ*k%dkV2X5NhUY-fKX<8
z5-V|<mjF?HwkM5pp$b7Pphb(^GQCOCqW`}1@T7j1r+S}DOJm%ZREO<@#2EJ_ak49E
zX-3_b%pERVil;<Nk~TN07YPZ*yf4|)dAAVZ-TRXLf1&?~Te-gW*ia`kzJ?k8lS$wA
z(y>nX?$^30sqQhhry(EW;Vzhc4ka~l^5=sPyoZwbmW8XbfKc=>|3er3ZtF18Uqn5G
zXmgl+G6RD|Bfz8S|8&u_Jl0VsnIR=HCG$TiH`-G+pWsH3{+e|nsfmjhBt)YVNnE^m
zS2jX6f5DFz>F--#BsCF~Xhg~U1qJ0c*$C<S72n@g-(h`~)a1R(_99)sO5z)OC1PN(
z;XjkiIL9}1)BES1N#d3dCBtA!hVPQv4=Nde5ql8G#T+1p`(3h~Tyz3L<?oU>EvMK6
zMC^T+jQpUIfdnEMzIT#ANucfbPBJJFCByfW40ppb9Sr}E$&9PXOi%D8c|QER-M*Im
zXm`ET_%Z1#5GA(*x#vPsE0!e}5V`@&0tbk<T%e+YA6NN0ke@E{Klaf3m=}{;Z{a5h
z(dJ?j-$Q9a?LhwciSO#6SC~IJ6%0a>QU#;0^c~1amv})>eV}<Msg)=ma?+(_pT1;7
zw1JN<^O~M|fAg|a-XTPr%T(U!nnMSws8{&0o_eWyC8?Du9;&EUlKm_7D$xeEZ{{Vv
z^uf_)w+&U)W@__$xN(T#pOng&mhuGek%oG$mwuZuDTS|_<j*1G&zh7rl|MC9FR2Cu
zC9u3(4hXB%q#|-B1c<@aq&jyI?gWH8Yf^<%Q*!ntfpF)Pl&Wn?0)?ieRBclta_5v3
z+<BJfO#B96b}C~j-&?GoF=nTHmT+K@95^SXb(0PRgf_rpr{Dtw@0?UoSK5~W;^92r
zwp1@S=ecdjf%B+MN6`joK7XWCx6Jt|wLl392hLCR?xWgZj0<=jwONo-%f+C`vIQwD
z7YhUr9Jr8wS*pj)g(>Capm5;A6r4==W`g9vMZBoDKHOZCQgb+j&|pytPL}$>+RyMM
zz45MRQff*Jit8HBq!3WH;K7Wzn19$?kC=;7s(=JFnh_VLP(Wg$4eA}|d42SR$y1uR
zw+97i4aZZsw<p_R3HL1jHMM!x9XqYyo~5ye1rHW*OZba@^r*QcrOBy3C>C%_Qur;D
z)EO6)p5w>*K<DRDn)uBY-jxNO=Ti91mgK>YzW&b5zIxR9yF0Gy(B|){zGe8qwdTFv
z@Gnbctl;<d)$cQwrLab!c)XtCad}F6NyZ}}ECeiXH~_-Q%TpcYRe3=8YIzD3i^>Zi
z;&FK@`I3r95{P)Lb>dM;phv9}k4i-GSWEHv11<vlLO9q-Wo+{yZBBam`vdj1Jl;~z
zNw4pxU#}VUPJo6eKwrBSpny;hSOzE{Ui2CTA1%g06rk()ofUd#bDiS=2+?L8IRNWm
zv;k`1%PRB%RzpfH4k09Iik9p&TZE{@G^Vds=(l*xMkgd7MXN>%i2<S!LUbb^i%MZ_
zbX*V;A-a)5YocUAjBZK4U#Vw$tS#>QC`h-^`*6NW?}HEC=HCy{->}|JX?;a0f)I_~
zPL)^StD5E=YWR1iGWPL(1NGs#JIR~0tRG6=+?~?)rf6ATS`7>;2&6j!VUpdBI{`7U
z-Htl};m+Nu<X+`Y5(szhaonjSP-KteP9-9D?jd(>CU@o={tr_bAN%3XwO*S)wa3?f
z!yw(%j1N=3j-u4$lP8;COId0Fp&77To&(|?O=J;D?R@g&A^w*k`f%$|N-e7)M4Lk?
zEURac)$++{AMwwJ=yS}E+(tr5jYf(#81P{}|9bs?>#&nc`NENhQ}{nU{2G=WX84b!
z@CzJcsQxSCND4oKp*$Hzmi;WH9j81gdl-MoTcVIdx6e``S-=7DhR;&Cr$-qA2$O!6
iiXT@dC4n&MF~_7z0^N@}CRHLb=`om;-*TI;_x}NUZ&^M7

delta 17962
zcmY*>d3+RAx^}u!-Snv_Nh%OXx~Zz}PH$p55JK3pK@iaq_wkO~j2q)P;}u1n<=#(&
zBp4v<C<g}w*%X{GNDw;+0>i#IDyTsm!zvDLfHDw4f&09tPEme;$giKb&UxxR?{=0t
z@%@>}12d9i8axe3LuP~erg!3P%AT*&lWy~FnyY=hGFR)QdkZp-H2&(87ytRvzdF^a
z=AWLq>6hN||IjJ-u%fBzRf<<v>jO%%aIeA_ZuM8!J^kd!C#|P`_Xz$OHBhrGt9Qz}
zb=1>OjkKP4dgSOw=;0{qnm<4IyZaw|ShT$VDeK9nAAfw*=%>(a<dY+<$48I)?IVwl
ze3CksrmSJ3M*r#l(GStX%a5!_9<y#8`Q)glM?X077SR4BB`HSoob7(iPhI<@tn2vM
z2YiwIKmBgxW7g=APdz>Qu}2<z7{8u;`q8JJ<iYL!+bf~Frd_FdX(VDOS-B4M(8%;6
z2WAqCC$#mMV%$Dmos?d_-M`UOImzYlfn!qOGKUWwlLC4-$>9UXq(EUnJK+%=opf~u
ze|@L_ROJkpq7#^B1hPW1PbW~!2!wk%5EL^4eabXbF!*)##Q^`u^{lY(Rf-=yUkoVS
zWm7+Tz8EM7IuJcy445J9qWyBFt8)T;@LlX2H{bR9D(AQ=FpOf3I|>G(IRV{}L<~f8
z0-=a@ou;Tgb>I9z#zFqTyZ+&M^8@}ut)Akdr;?%j76+7N>381sE1o+1w9SkMAYbf|
z1A=^UKo1CVK#(sE7^apDp8)!a##$E0)VgSz5Hv#Z&bn_&KwTQ}YI$0gD@ET|13n#1
ze<t+l-q*4Nz6~C2pim6&Yvv=~^H)?fyGnUry5>Muw$#EyjRH9Z4g_&?AlO5@TQDfP
zcLm@2p8wvu6)poM!U}g-3K&)dbW<`YU|10dN3_mjSc)GMfugA%EmvdEU-37x&QM`R
zAo`G|yP`~L_S-2Qtya7kBrO4@w6L#r^XQSk9XXmWc;7#u0wTw@nc!#%WI1|gLW!0@
zVX;&qQ}plETdNUls;;i)`5*X))U0+HR19OaYX}t#s{=W9F!oebFsu#~MYRtohI(Sm
zzPAI)20r@(|NFnkFGmkbrMF#Uc){{^K#xj2ykL1dkVr}&d*S1^16OUh>|-yiA$+_x
zpsv5{V<|=7b$rhrf0x{Mgj2`bnqc6Y`Pn`GhKkLu8kCKjT{S2hH#>3MQ=x3!90-NA
zN--8B<2L@*UVnAPHkW~tahq!nO2%!0oE~x@oxrdyV1={?1p|_C7w`R{e`Mt@mw}RU
zS0F1QyHHZ@3KaErAQ*N9%KB<ssjBo;Fz&YWhadX4dn(&p4hD`kmxJ=LEl^~a1oQz%
zTcA&0ZL`gx>FR;>zK{J|Jyi!>4h^<A5Xj1rFV?_uAdu@siUy7YfuNx+%+nNaj_#Wn
z%$Sz`bf13#(<cVKOuJfBy*Wr~wJE4{;|qpq(K<ko0PDm_PZfe)^R+8PV?3M`R75$&
zLrN*YD`Z;_+D-~)=g77|lY>eZ`H+$aP-G*zD&nc0C)+~RDR}9B$;K4qz*jmDji&^2
za%E!#`P87&RX(I}1{6jBv5K}+gLz%F4i%;BYLv2I#_II=BmO@s+4F;bUF!p<Tuq~1
zz^^>!?_0besQ8JBgrHgwWMVu7q16H!Pnqa~hl}~BWB&5u#cmfe!D6?I2VE9ZmqDTn
zba{>MJ?5`0e$DMdmUzwWLS^JN>QW`T0KLvDzVO!+zwUM+d%W&;p`?GEx=@r~t-v13
z`LZwk)uqebE@YPFL1t$!+Mvtw;FX=VVWJBH=Z&D!y|6!@`fq=PSN_{?6+_?{f|C1<
zAj^|>q2zuenBPr%Ky*grzR4&4+y79>n{F3M#5aRX#0_+!M0}ItX1)eD6zjen!HkY{
zkK=yBo3kV64`^F{39e%D!`bvNzV&ars^n}BIn6-|va>x3?0FgxWM_L|p58(}P3gX|
zM#idiO?OtSM8_I_3iwPl)k*g~ZzvNDRr|L`>jd1$GBIP3j4v%@Uz9Z(YNeK=`Q;-x
zXS|^f{+R@?nLv^SS<o#-x-Cp^3a~}q;)RB^4W!U*p&^3=5S<np@I|rcgNIA_j1ViS
zSz;(YVZW5flO;x{EC-^?5~H&{G2tm{%n~DKkgW({Bg-KcPnhLpFERS{*ZK)+=(~(Z
z!fZhCGFKZ4rey|mxG0#G8Az+aq6<(npAcrXmCc4M<S8W+&Tls4dIk^-&4zAQ4M6H+
zU|xKcig1d8Yb9q9wzOiUOQ9kJRvKA$%|shetTc?c93REnO5>`Y+Eao7uUpN(jj%sf
ztacf^U|8)kP{6G=j8e%!0k_)dTdq|I2DEME^NUzjMXSp|6G5vx42r*2L(i8C6o0Ko
zL7_HOFkm8B%L}4xSjAeGp%WO^x(qZCtTpsP$v_jqTBC=l-7Xm5r1gAGl-*Ie-evHE
zVZF;h6Tx~zw`bOr;s?WeqbR2B_6Z711iRCz7#opUx!dKSh1qVGgC>IAt`;;A>?SQH
z&_s|@FcIucw<cMWr*f~$K@-7VmxCsPy{;ZK5$q*BTD*cIOIO>|V|ubTmCAOPBMThu
zE=LwP+6_G{t&s(eb|V_sCfH$dg{~gqPo!8=#Sxd{3Q!zzDXsv;5kt3^Dk<d(P#iIO
zm1_Nk7FX)(G2Xv~4XilkGF%B)A2YJ-#dS)#5)8+T?)Iz*2!>+@W<^@{rIgOPdYu2g
zgjG}=cNu8Ob=;84CA0y<aig$I4x=*|jvM_3X!i()Y+e0^$9l0}SA63#WMdTHxTDAh
z!#9SWkPO*i_{Qj2tlcUYkf|s6#$N39ijyuw4j4|l3^`ypX~<niO34AkNh6*V(@ILo
z)z$C$&AnN9#rG~lE*QRd8FIn!y&)IW=mLiC4a3q(g$}x|p5dE%v$BdaE`tt+GcJP;
zhBJolWULN`Glmt`o)8Rqx_XY6ma-=+&bbVEU^wS8<bmOwJBmCooTE{U6bxN-^#VU!
z${wz`;4*Z9FD@8aVy1?_x`5$=k$<(cWEU`8FiLuBw+V)>x;ln8^kKiO7-L?pRb8RO
z81r(i>I#N2=H*dz1;ZE<qqtr$<YPC-yOyyVD(hW_d@$6z4EbQFH|4T5rR0O5-b`Gj
zO|!$go31wUd1Y)yWur^c4HS(oMK@41nsOVEQo4bn(F_+k8QL9dmGpo2r3{_oa&!mB
z6jLtMQc8DlOfhp~(iGjnF~v;w)ZVq#DA3iJyl+4DUd>FGq5#&MX=d45wv<u;ikYU_
zM^Y4kVy0Q%Ut5Pg6^vb|`<9x@>*?D5Y>@Xp{IpjBcmPe7x}zxs%~Dft1o0F!OHFJ9
zX|D!|b^KDZ=yfww>}p70?`oEr>VJ#<YDx*v@?+!mEKr8u&~dpb=W#%gFE{0O6%gdh
zO>9@&?O_J7mEpxz>|j-kt6vcMwYd5PLDAys7X(EM>4$}}qL%2swPwba^!3$jlP71b
z>Ce_0h`NO4?)5x4m_1*)-l2vN+O0QbJOYAxy_s(pd_YjIH+vY`e{2do-OLXTW@oE5
zyA&R1x7pFIM9l1)P2Cbs00hNmGg72|PTKX-eeanWZRxyPcGQ#oo{5FZeNe6!DYu7v
zuVD|A?J*U5mkc4^x5o_HlLsKE_L$g~(VD9lP4gd{icxsGRm-2PWpTdg8dhEfk?mGA
zfMOpziUEoaa#jZf+s7tm^(GG#>#h4fH8YOz@?mUZ_NOK`_;=wYy-Ban`1`}yJ*m%3
zx!!>gOrM!@g#ier&rGZ^J|-*mCdCf(JFjK?Qit6>^!CFhvlAa}(C4t(y+Hd7US6vE
zj+q%3`LBnwU+c%{<y3=8@p9jBQ~8#^H=I3QhhO$u6moDKcis;OuH*E63Q#}<=y9{l
zw+K)jD?1V(Ky}}jruvQP6+tUy==YV0g9O@&OA(F{zBcI;f$C@}4ds-n<QEoM{GIDq
zsu;jgf(CTTWcE1{T7vA9*`=#kU6j&Z<}~kqJsbAGY4jJd03o`ZHoMuIL_l;oZN}_1
z5+K$Sr_ID|V$nxXEc#BH$y=eI24#dqg-1@CH{C2Ut&}J_DAPhE9Zrrxi1&0jIR;3L
zD96N+P${k7E|}s-=so~}WXu2}W-d4}0|=%IPO1Td=>nzN71%!J>b@~n#`Bg(%hEEv
zG#`zzyai$lnM-l=oTVhh7Lrf7f%yzTF>o&)!aC1c82AwEAalto^}OW<Hq@xM6j94a
zh&J^Ww(Y}38=!H#%LsP8HO^8*ZlMiXd7OpZnvW3n>e$X&887f>N3eO>6D@DH_AI*U
zq)HR-c_SNRG+ByR(~=Nfn=C~C9ik0Xn9O(H$bMx^w&X@v7b;A)uwg;Ip$mFU<<&Q_
zhm5I~UCu~IQY#SDt`TiupXvM`H?eDt>6Rj@2-;+#&2$S@1P3yJF!)R!yO|BKX1YAI
zN1aJLjkKTXqx<Gr8Qaq1Z)QFvXP$*J@e1Wu9~#U8KJ8vMw+z4Gs|A(}NI(o?fhBh#
zfY4=ug<Z&YS|;`(D=$kwb{pI2sa$4Be?yA;x6G3D50F|}`SubI5FE>_XiVGS7aUM>
zUHYkCvcYP_I+sHM$2v<c{riY0UuPNioDK+%br$AyI?C)rXaoQ5P8LdSkfSFdUc14P
zlL8<$vYdeJLl)cmTFqU|Q?=E7D@E#7ORfXZ1{7N@IcWicVylHnttWey>Av@^jFahS
z?`DdU^S<Q|+4d|Wd+sHBE==upED0gF_BxgX1lL}&WV?bPl#wO(r|<hU`;Dh!zoQSN
zu)=;T%dY!?)XECk(>WkG_FKuTw7&=n7_y!J_#5`WmF+GA*|FWqvL~N1VaIkWVDESV
z!O(6wC(~sFkEK`L$2NK@j=3CkG<eLCC!A;mEsj|^b^!vUP8PO6<cl)0>v8f$pbWp!
z@wnp=Ky*Crcmxm~k6-pk8J&Wj;PA-#q4*7&6RrkyD0ss03!Z}LgyR=L5S<{uV7^z>
zzPj%}R>pW<@eung??0Bmn>Lxkyf571>#&rcc+Zh+QXPKTMHh0gby%|K0)nl>LeZtl
z4~WX&Vdej1*_EFJqVoS>sXtnF<(D$_J7>wtFGZ;Q=Pj!IwD#;vPQGL*Hy2)G@$%oY
zn??fI^C});gqNHV0*a<`B@PJgOBRl{=>Q23RsE7>-6ZB6f;jYq_b*wY8?}$@!2&jf
zlu+ST5C7(27UkIwv%eKX;tZN}X$Ud<gukx{goco5iS0&Tii1Y}?}yp#RgIy`DpD9U
zhGa0J4Hz0jA$ws6NPR-({j`^Sa6-B6dnuIhN%}9pW8E`zUJCj1?c^w@<e1AB{DCd(
zJJ-<$LU7Fu$ua{7uDKy3$G<2!%Au=oQAk-5QVVzSD_`~Bklykr(>!&M*~38#5G)EY
z`}+kT2o{A<`N)TW@Zq9Rk0qf@F%Ob}e5fuCsTIP8QUaqb4n>N8E&|cwP{|;zr%(h9
zmWGsIVGrx}(f9KakFla+U`GkE>CzChca`PBrb|QkWb>%#3#Mj1?=kjRakJZnjMyBK
zCt&5mh|M9KfW<`@B*6+kU=&L}up(q1X<{&xMJqxw{Q$wcB82p#&;UeetOx~$$$_dE
zDE5vkLcwdqgij41p$UIQXh^NtBbQU=weT&Y*ucsb$K4Q;G$d;wAYR)Nl6xXRytXBT
z^Xo>6w{j{oZ}CBovk4V%xfFDE@|H_MXD4rkbbD=rE}(cTg!3CZ(kfSQcG5cQ306|s
z>Jre=NvlghM<=Zz-L8M=0fN>L>fb_|jml}QvoZbX6Kt`k_eR&mbXu}8Bu@;{2%R>D
zFabB)ofysxL&`tXgP&x7^VH#|<4rmt*%6Xup<Eo5?+A6tmm$RvQaeK3{)v#H1tFe`
zkn-&esqcpDvLI!6->#4>3sQu#uscL$fl6jM9kzTBQo@C~7T<O~>&nMG&3q-0IMGb!
zEFXmAOorxQ{2=7aWaSFZS=vJO*SNp`k@@awbL~fmEp4v-=&+?NB<C}91W{WEb(2<J
zd04E6GQJ4eD=*rGe;V@YV&#=bN&7EU6S49t0>o2bQ9QhWNQ-|_@%RPSB6*Yr?fk#~
z#6}qH=tFTyLbPcQVV^NVv;jKEH~op-WE>31rB|L<_Z$pi>2;@Q1MLp;l0UP%jl&_i
zgv%4_p2ML~Sn?o4j`F2{2G7xuB0dt~U9|2w8p21SzJdofIL5pFh4r(Jh2(NEPw}G7
zu@IJvZ=hUxyP(F0GMdtl{)Lrf>K!z2oEv+)(7=D7fm_e`ZY%=C*nsVU1A^oS8aU3>
z(HIZUbMqNiW1J7!>vIyK&3VdCobLew{luSnhTUQO<O~WzlG31V5p6K=i~PH1*lor|
z$2eWYz%P<<YDF6id<=i!S$2&vCaj3#7Le1x$ApoTv?%OCX+4&2eU=R|#)jp>5kj;X
z8^*#BQxe)BZyR{Dj{VYT2+M^mglN+c#zGbc9%zHie4fv)V>cMjyKOq5&GXa-*^4&F
zz42Tb!%B?tVY!fn5N*bXQHJp`1Z{9IIg#HqhV`{3hA-QPq0PiF?DH0_x4Y`T>EVpI
zeDN5zTAv>F<_SM^B|ppvD`DFYfG{<%J#Ij7%%E{!hxc?PKfJ)(pJTr;UT}1Q5N%!{
zU7itbfH)sEmem<NEdAM4_<@Jv&%vS%{O}S#I+oQ&UUKZ$Rruj0vfoXj4g4@CtP~Xv
z=DVI{K|Zpc^|BxkGc{BpkIV^&BigsLH0g)WMB$9he04qhCTD&aOB1mI??=OXm9K1I
z3yWV3%K`);#_?)cPKtm~=hZMKMLL!2M}u6($Be_N<g&1wq9KIKmxX1`2Bbz|-JawD
z!LW>mM+LVZ1zj`$VH_%Mv&%pM(HxfF9MJ|0&EcZ{Vs-%pLvwggh1NvHvme1X(+@q*
zCVNtEhUE+eDLTCwmNOI}wIUC1rKzGHtq|96b3EH#xyF4jEfv><<#{UFfMQL!&|aqk
zf?`b=>r^V3{V1^4g~io{G63{kC;d#%&~sf_7E3_%To-nVWj`9;rq`aBfMx$C_vJKC
zZF0><^VFuWER*O0icMjZ$+3R;us`Z#IOB)(iiyml=6o7<mi_(7iS6XXxqa{(jO~sq
z0m0brxDpVI?c~a9F`WKn<3oJvRCZnQA-4<p?oe2shoB9*917z+qFQu;?~ZcsG&XqX
zQD+$a6|&1wXBdEBI2x8~NI)<g4Py=Y7A>m!1Ny!UD<{Hg;Szq+NZ+fx*L2oY2a!Di
zq5=AU8I}_uAo_n9mg{0bOn_g8^G}5B36KP0UHny8{Wfe*fKrBjUx(!cC`Fh6zX>}N
zV1J5;@4`Qu0B@SXd?`rm2@ubr$#;%V0m1m)WuNw^VRvx&^n5LTgR8?e2`yqeT$506
zbU2<xV-R(aXGg%X19aby;fxu4<4kr#&W~Y##7@ou<kyR~U-27!7abD;g72c^S3vMx
zB)|R<79K$MAIraff&IC7Y(!cWLXt*UXOU5W=rT5vtBcP+11KlQ@o6uzJBr6e<dGeO
z=rS%6w3j`A=rS&XWe?rO7(i$|&zr@Dq{h2%A>WOUF#Bs8+EAkiiZ$iW0J3*e#Lgc8
zq(oCh+8Pi&n<6rQ0MWB4;^fZ&vi0=W_RM0Q%IOhVb|55aM3x;uP)v`=`~d{T^a!kc
zFRVOJ_q`a&*ugu`X7}X281ct!D-R?q&yMiv_p&*C06;j~84Vx^XGdfu1O(yi2+VvH
zMl+DCGlyUI61%#1j@yOIJSQU42W`-0P6X+5qv!%N&*KYUVmGJexm}28p5vK;!p!r?
zGw;*qtbt_b=Ct)!wnwRKc7_fqG;MZ<4hW9sh+HKDQl|(ermraH29n`drBg4nM?FJV
zxg2!ru*&5i53GvF4}|Cgj#Uv%I3jNc!UMiF5oLYk=XpD>4sx*Ift|g8U|AE9*$W7k
zH4&M;fXLo8k^J=$J9|kWviI$X`cA~oUMWMrwGo-UQiSYX7jd$8AeGdAcw{&M5p=={
z5NiCx2`50%{o`^t4Wy;Tc8+j5KNP=Vo$anwXzjn<wF<5Mw>v?F#vs}rK~No|iFJ_f
z+a1X`%)2gRpXct5_$@oC22oV)kx>Nz#yyUO0KvG&i7G%a?xCon5E(?l@DcxH5xcqK
zBS$9)!SIoz6CgE;=ysU`1j9!WEHUV--yq86ef*)t?AMk1Tn4h%zDSlmv7rqZ_C=!h
zmq$P_?2E`NdV>gkDh&&Oo}W5~1w_wJ9m4{OwoaZ7qDVVr8y3F_xGGS%9dZXj;daO|
zEE<F85E-_$D-2tq`=%9Tyq<1)m8G@ZX+_SGrGhLwvq<DCKd}<!dS;OfJv;*A%p#et
zfMA?i1jFu5!Y&mw<ZsjA7WU6By}vDzbq7)s7ZqG3>LMUIeOpwVvTrw4z?i->MaucK
zwViG8)ZwQc=XijAXNqK;1ESxVA{pm^i1RZ=`R9x5I46OK^Rq?jxgtBxr40Q#ie#Ki
z5#s!ZB8v0*c|vi_nDe5_D^WH5;7&G|-49?N-&BY)FfS@AARv^Q7nKzd5ajcsSl`oe
z1R#`}7md6UwZC?e07}8V^P}=>R|WZRQPjSj34mvdqL)oY9$OTZB^pn`z9{OrzJf~h
zvZ&Y(4g~<wGFMM363bjYsYony^`s)PEDGO$O-WU$`<6#Dw()O1VqfJhkNUgYNmWU%
zUlkRuF9QJMs;G1aAQ)FgrSAd3xGD<Y@1wO}B{{2=ztzU}r&`@U<oebq6IZyX4f?c3
zyLHzl*?o{l>-anS*p$?|sJ!b^Dcrs;+DTm9LLYMbx+t!0(F9jXXoIvK0Iavcu^u4a
zw!yI;plIt@uaXSE)wbSs00K!b17fUO9qR#tX{%#BKrn43>n&7Zy(-<eGn#QM>M6X|
z;-M4XZt2jc%<IYB8TFgCA*;xcAJ~Q*1OW069HRh&`~%03fFS>X47q}4k}4R|*A`X&
z6;%u8*{iozpRtBIi0r&T1N3i;%DezX|F)>i3qXWmTQvV)2thi&Ac4q>eNpw(sGS#5
zhJK$!WnM@T@?w9~ssB|}=MF^e)!SR`EKmYqS42F55(gYx1A^?p<w&g}__=NCS^(Jk
zb0<;(VUEuoTLXgWbH~<zqAP5D7ffA^Z*$R%UA*ETyEA$`it0}nwW@JZ>zk-@DynL0
z=%QA&yr@Mo{`NuEI{e$HdaXDovmap`C!%WY&m?%sNs>5pr=v;-=>FGXgA+)^-#*0t
z=lcKre|>4Yc_yk>yKLlvvr+Y$%WOYJl}lj5fvr>yHBQL*vxnK<x}T!*8kx|Jtb8G=
z{=wxV>s^ehcU|Ti6H^*uDh@9t9m<sy(PcEjLRNe(rrLMFYzcVB#?*3`mrPq9Q$qtT
z6F0_`CJ_JLAy#!CiTJ4_?2*3XV``P#nfALAVrtFLB%qr}uM}I|YKr-(F}rvGz{yi%
zGG+mx-qe^Z9)RdNHHMfMw<fA7m}c^OKW8(FXS#hT&S%DC@jx5&nHfXzpxZyyWVKm5
zc#I9~Ju4<_2ZZP{D<*3PAiB(op>|xN`*_uWz7;WLWxDYgyXd_iKkXuq2hes!Ocr@S
z(5#5bA`b|f6){=l0g+)VVv&_GyU3HkF7j{0P~^waRjq0&HXGAle9by#R&I3PL*;&B
zOnz@cBfMv0EXU3%K)h#T466((b=6euH^=OW0suWX$7K2eqUYwAoG1X%b92lob=9;K
z*%`AZ3IOP`)762t#5>)w(lTzRJ62l8?TjJ)mRyPatI>U5#xka--#Wz>`*OaF`SY}T
zIv=PZXP->}zJrbPq)s|6gA`;ZW6Zu!3<$E5F<hlxMD@OgymOlOILDTxPP=``&8K5>
zJ&!i%b2^6g{6zaj@bmffsdH?Sr}z1oeP<U;M0GxvZ(n5rM5puQp&jByetZzR6jP@0
z<v+6RT`tA^owb{V0%-PJTul`Y;ZIy(UHIIe*nm<9>}v)!!tc+;^ApGqFJ3}^e=gp$
zSlq>}A(z(2)vF7O?aqM<_(lMMJ-OjARH~16wfAy>=v*JijU2i!TSLwq#~;1Gh8K^E
ztM+#U2+?I+yu1DF6A)d-#qsTvt{m2o6C3&A3v5_vV_dbb#X^WKjqyDDlPe&)G{$kO
zjxO@n(4u=nT&*rFu~q!<i!4?QfqiKUkI{KT+@SoY@zF|qLcF3%8V3h`O?=};c587{
zT(x7eMxitIrg%Y#>_TVkP4Ut)ao4zp&iy9y>PxJqc(U7tj@Ku<UFZVhWa@%rHM|r@
z;!}C^C3Z{6)VOMYX@n46rpCMVly9MP@Tu`sFKv1!1mR%aw;-PJ&(&9J(=zo1aeUpT
zOPzxeg1$v@WeI;TQyWx=U-rfua*!>GXWLE%1lgiE?vBtB4G`J8C|<ZEZhtW%f%uTJ
zIF5U}^oJKxg1B28$2Ty#Od&<|ZDn!1s#;6aOg)%lusN<=U$|7U(&JUF)N>D@T~hE6
z?rV<A&$ED{alpRf4+y22<GA8ao&bdHo8#rz;V(ga0*c4|hHGQ(H$j<}bUrGJ=b;w&
z6%<r0aapwni=1eQ%iSd)I9lS^UD~gpbKI7=St?&4zLvDat=`%t3=r=`ZQLGL-i@n;
zCp2C%k`;2}b-yn?uakDCw+>I7aZ#z<?!J^t<#zX_lrr1trM9uDRBn%(@50!$7{OcY
z#mJ7hx;t(!Mx+e=cE;smM2fH&*%hb7$e}DcK+e~Fd*c~D@aL}74rcF-djsMNMm|-d
z5BaFhTFUq^u88dOLI{g}7{^HpvJVhSe#F;y)`lA&#T9W!n1pEaQ5<)K2a7g9AM;SQ
zR%?75SFR$fp$$zlAIGs-p>ythGHDwho2~UV+u}+}wxJ6fZSmfv8e)JNp-vo1w`Jqn
zdgY<GB9fb=Xmu!FBKCs>L3JqJdnma>K&W^qURtXS5F9Y_VctX61{sH4W$1waFezgz
zi~u{r|ENRZBd#)Zz<-34L5_eI1>q>)r)yQ_(YTV73ey4q(fHNH+WRQ6XoSf4DqWVR
z?eUmj#TAk2Bt@&Q;-!7G5A9(g*H5R5x@x~v%+sz;bjW|2bfRqldLg|#`0Q@lezPO4
zi0~#M8g<0`4@99+)FD_4#WQdg)?K?P@5eYcA9V0Jgwpv!T)7nIFV|}Q>VPpm2<$=x
z2m@V+7uX-l0b#!jaU8!>paCM#F2sv2A<$?^L;{i37oDt@5-4)f$!aO0tiDKDeTL?a
zArvbO3BI&IJ6qL|kYNugJkpSmxdtd&$!mLn(54}QPdE!HQoHHC35kpa{If!BLC%DP
z*AS7~jUshog3lkO#ft#IFfk#00tn3}Cg2nL=+cdpXyTs)v=XB!p@^bELbPd0plIOF
zNdSQ+@n}#hk4$oTgp_!&BS#zPH94V_g#)}-j@E_G2x__sf$d{F2FK(CeB6i|J7|v3
zeL1~3h$>k5aze3V6;iZ%If1ha$_YS_zMSYgT!bz`DEo4v{95{wj>j<6JkCN|ab#XX
zMn8n0n3q8GKPKA1weu57Mfg5`%L#uTe>9~1%7mbwd;<mX{KUXP+6xp^-6)D*;YUN-
ztjH^_RusjrkXCmfsA_fJ;zY*Ugr{&gKU|2BzJb5siY`vz??h;cUyB{X>j~xW301qO
zV6j^(cMK#;>k;i4Prtt<)FC2v>}McvPN<LnOoCA_PhiVHGi@zJ>&k?(D#1?;*ZS50
zV@MF#cQFBBla+~}Jxv3m^U4HnMp3i^B3f4_;;RyNw30wXYfD1TK~e%GS`u;&k|K)M
zmIR_zY`bd_D8AN&qP)%jUsP**06*<IjR#PuH6j0E6c7rvCc>g-K?4fd)&$Cgtq^S*
zTN8cWhC(z2;yDzeizjOmYA<azof!<(eH#)P@A5Ze8qe8~@Eh86nwy4FRBuV&9oO<a
zH*ZPE1wW*C-<AZkckzID-<AYc;xrinqU3Bz=#}Da1hIe?E%GX~eKsxn?@q5zXm@(*
zcDuARjNJ)&#y(UGV|M~4xi&3Lqq`G%BZSxRlxRuP<p%j8A;GYAC;B+=79zZRccS_i
zS_f|3db?u-oyhnav2;As8v4kS=~-9dBcI-ukk=Kv(~$Qe<?N5<fKUopocwtK@q&E`
zeA2?5SU^17&ktO!-DB=g$T<T-wAoMgpMcS#5#WLJoyA&~$2{O9Go&P@WL`me(4DgR
z2(M3RE6pPbMO?NZAsQV?;IhSgb|d8Q7yPyo?E~|RgdzeEjVOh`pa9%rH$swr#fS9L
zwwYfg6#JrOcafxDCGh3E2L8TA_nk;&oaXV~T6Nxu1g`l|;9o<5e=4DTZwEgAdvDEG
z2W&6o@D!sxmFQ+KI02#YsRT~RDa-&7W~UP2?`7PRK*arbPTWfgl>N?$dnuy0|BmAR
z9(brg_nl2-T!e>iw1$r2eM+_4^|J|Yk*Ko;<erX%(pR{LuP@bn2B2Nc@DSu3R5tK8
zQQiXb&JX-ZsW!m)A))ja^#?+<`5}Rip)`pWkQdJJ0e!S8<D65YAS5Z(DEcB_K(0B@
zU+kj|G0rEHa>+xkIiDCXkW7a*@XU|=OdqY<_|Ylq5TebGRMhE8LjhIKpZKlN&iDxh
zQu0vs{3%ggBW?&3(8k~bf2~ZrCUU`TLpAdPwfO^_H%#|Em&|xR=_$OI<L_k(d9tr|
zgZ^9+pESvf!^n&ENo5>AIb18R0|X_oeRUiVR;f>h?R^j+23Mc#dA0B&AiP+gEFPD%
zs}~7`7aNkYdPxZsYDmiJB}L@Lh9tarisniDg+Ws?V-Bw<*G}q9Nv|pVS4jSwlvH}z
z=>-UFfW_v(3kcpx$y5pL$^h|j3V*(zR%uLe+mHjNP@5j24bW76xSwVkQ<HL0QYaia
zHQ9fFY=bdQ<3@k9nU<7G#6po<(~?*s76~3Wa5}%czZNs5C#91Mg#)K2;bgiaQ%DY+
z$>;aiMi?`ba^{8*8q7?>$+kYQ_6r;<J=1t0DJQ)`aW&(GBm&A3Jec!d<kt?+!p4h9
zSvCq4n)6;vqHIJ(8<e|Qym5dQH)bUjaa|7z(7J6_64&+YHdwZC{w}rQ?$~M7#%b&!
z!GlHHY@Rz%i`+dsso2wep;)xdPU0_}Y@Klz=_R}*oNdJ)ANBZeM*jKnM@El)C@!WO
zyp=8>;ko!zErNK#OG$*D{Q~^4*I)TmyukdcJK!tO=C8?t75GDGMZH${%}Zu1;(G>a
z59srf{-6ldYbj7)Nh%BNKm~;9fbDw^fOzXG$sYC<c|bVvl_Uxnl^Z|=>MO~_LK&ze
z5P`bD2~;V89t)g6l_Cn%1r(^KaUs|nz=2OPW3w0e^ts9h*J@okzf#LhM=P{z6@7&h
zxdDpYH!epmAk+i4BNq@adV`{p)@A{U+?9NLmDbZ(>39Z0v{^}>!J-&#fLeG?wKmvn
zNy@b%gd|PU`kf|^0M(w>^yAgqEgqxQi4{oEs+D48uxNzXUBeHegqUj_7X(D?uA!KF
z&SpaJu1^mhtYv!4_3ry9de_tYaN0`mgAX?G2Zv~D%}q&Vpr}z0qS2;gWfeZMDe7?D
zw=J2mn^)FqBlK<LO<Lm*CvWaZD!cgHTCJ)MzidB34qNPS{0N8<?Qr}E2tV#fCU!|b
zl0f)zr{hN{fd)GrKS~k#aVPol9r9yP_kEnq_!MsZyK3=gcX_+>d&)JI{-2>*S0(%7
zq_>BtKtb|j8=p4}d&)M)3=o39jm$ua9whhe<6jNaMwt7OazPCt+U!eWLES{A3X-Qj
z;dflCO*TGp8wn{jx?i-xVE1#+aP2{Jzmq^g;l2Gy{BIfVhB>d(eeFs7xlR3W?Jm7N
ziNAQEDt;ZA^I%drOvzF4D1O;jMInc72a^H2oCD$w2a~v=M`-~Fa~@2_4oh>AK$!E8
ZV@@f7?uQ(6N)eg!5X{MMxy{@E{{Z#*E9L+I

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index e272bcb7..45fa3104 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -7177,10 +7177,11 @@ type DiscoveryRequest struct {
 	Constraints *RequestConstraints `protobuf:"bytes,4,opt,name=constraints,proto3,oneof" json:"constraints,omitempty"`
 	// Domain extension profiles the agent understands.
 	//
-	// The Broker uses this to:
-	//  1. Route queries to Exchanges that support these profiles
-	//  2. Forward the profiles in ResourceQuery.supported_profiles
-	//  3. Include profile-specific ext fields when returning results
+	// The Broker MUST forward this list unchanged in
+	// ResourceQuery.supported_profiles on every query it sends an Exchange, and
+	// forward an absent list as absent. It does not route by it: which Exchanges
+	// it queries is decided on other grounds, and each Exchange answers for its
+	// own profiles (see ResourceQuery.supported_profiles).
 	//
 	// Examples: ["fora-academic-v1"] — agent working on literature review
 	SupportedProfiles []string `protobuf:"bytes,5,rep,name=supported_profiles,json=supportedProfiles,proto3" json:"supported_profiles,omitempty"`
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index 3ca5e1ce..6fd5984e 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -349,7 +349,7 @@
       "type": "object"
     },
     "supported_profiles": {
-      "description": "The Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review",
+      "description": "The Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review",
       "items": {
         "type": "string"
       },
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index 9646941b..d42e775c 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -355,7 +355,7 @@
       "type": "object"
     },
     "supported_profiles": {
-      "description": "The Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review",
+      "description": "The Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review",
       "items": {
         "type": "string"
       },
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 6e881ef4..26c7406d 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1767,7 +1767,7 @@ class DiscoveryRequest(WireModel):
     )
     supported_profiles: list[str] | None = Field(
         None,
-        description='Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: ["fora-academic-v1"] — agent working on literature review',
+        description='Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: ["fora-academic-v1"] — agent working on literature review',
     )
     uris: list[str] | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index d38d9b55..97ac384d 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,7 +48,7 @@ export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE",
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
-export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker uses this to:\n   1. Route queries to Exchanges that support these profiles\n   2. Forward the profiles in ResourceQuery.supported_profiles\n   3. Include profile-specific ext fields when returning results\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
+export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
 export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 3486bc07..463f19cd 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+**A Broker forwards the agent's `supported_profiles` and does not route by them
+(comments only).** `DiscoveryRequest.supported_profiles` said the Broker routes queries to
+Exchanges that support the agent's profiles. The Broker MUST forward the list unchanged in
+`ResourceQuery.supported_profiles` on every query, and an absent list as absent; it does
+not choose Exchanges by profile, and each Exchange answers for its own profiles. The
+Broker overview, the extension-profile pages and the getting-started pages say the same.
+
 **A request's critical extensions are for its receiver, and an entry's are for the agent:
 `UNKNOWN_CRITICAL_EXTENSION` is added to three reason enums (additive enum values).** The
 file header gains "Critical extensions", the one statement of the rule. A request's
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index cb37c848..01b59b8a 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -3451,10 +3451,11 @@ message DiscoveryRequest {
 
   // Domain extension profiles the agent understands.
   //
-  // The Broker uses this to:
-  //   1. Route queries to Exchanges that support these profiles
-  //   2. Forward the profiles in ResourceQuery.supported_profiles
-  //   3. Include profile-specific ext fields when returning results
+  // The Broker MUST forward this list unchanged in
+  // ResourceQuery.supported_profiles on every query it sends an Exchange, and
+  // forward an absent list as absent. It does not route by it: which Exchanges
+  // it queries is decided on other grounds, and each Exchange answers for its
+  // own profiles (see ResourceQuery.supported_profiles).
   //
   // Examples: ["fora-academic-v1"] — agent working on literature review
   repeated string supported_profiles = 5;
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index c67469fb..d64af665 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -174,16 +174,13 @@ All signatures must pass. The Exchange counts the number of forwarding hops in t
 
 The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). An Exchange verifies the Broker's signatures against keys it has loaded from that directory into its configured key set. The covered `Signature-Agent` header stays the agent's directory and does not point at the Broker's, so the Exchange must know the Broker — for example, through registration — before it can verify the hop.
 
-## Profile-Based Routing
+## Profiles Are Forwarded, Not Routed
 
-The Broker uses domain profiles to route queries to the right Exchanges.
-
-### How It Works
+The Broker does not route queries by profile. It forwards the agent's declared profiles, and each Exchange answers for its own.
 
 1. **Agent declares profiles** -- `DiscoveryRequest.supported_profiles` lists which domain extension profiles the agent understands (e.g., `["fora-academic-v1"]`)
-2. **Broker filters Exchanges** -- the Exchange Registry checks each Exchange's `WellKnownManifest.supported_profiles` and routes queries only to Exchanges that support at least one of the requested profiles
-3. **Broker forwards profiles** -- the declared profiles are forwarded in `ResourceQuery.supported_profiles`, so the Exchange knows which profile-specific `ext` fields to include in offers
-4. **Exchange responds with profile data** -- the Exchange includes profile-specific metadata (e.g., retraction status, citation counts for academic content) only when the caller declares support
+2. **Broker forwards them** -- the Broker MUST copy the declared profiles unchanged into `ResourceQuery.supported_profiles` on every Exchange it queries, and forward an absent list as absent. It chooses which Exchanges to query on other grounds, never by profile
+3. **Each Exchange answers for its own profiles** -- an Exchange includes the profile-specific `ext` fields of the profiles it declares in its `WellKnownManifest.supported_profiles`; an Exchange that declares none of the agent's profiles answers with the core fields
 
 ### Example: Academic Research Agent
 
@@ -195,12 +192,7 @@ An agent working on a literature review sends:
 }
 ```
 
-The Broker's Exchange Registry contains three Exchanges:
-- **academic-mp.example.com** -- `supported_profiles: ["fora-academic-v1", "fora-legal-v1"]`
-- **news-mp.example.com** -- `supported_profiles: ["fora-news-v1"]`
-- **general-mp.example.com** -- `supported_profiles: []` (no profiles)
-
-The Broker queries only **academic-mp.example.com** (profile match) and **general-mp.example.com** (no profile restriction -- always included). It skips **news-mp.example.com** (no matching profile).
+The Broker queries its Exchanges as it would without the profile, and each query carries `supported_profiles: ["fora-academic-v1"]`. An Exchange that declares `fora-academic-v1` returns offers with academic metadata (e.g., retraction status); one that does not returns its offers with the core fields only.
 
 ## Scope Forwarding, Token Narrowing, and Quota Aggregation
 
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 24389731..2cc71caa 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -88,7 +88,7 @@ The SDK handles:
 - **Offer verification** -- every offer's signature checked against the issuing Exchange's published key before you can buy it, and a rejected offer keeps its reason
 - **Ed25519 signing** -- every request signed with your key under RFC 9421
 - **Bound delivery** -- the delivery URL is tied to your key and the client presents the matching proof of possession, so a copied link fetches nothing
-- **Profile routing** -- `supported_profiles` on the query tells a Broker which domains you work in
+- **Profile fields** -- `supported_profiles` on the query tells each Exchange which domain fields you understand
 
 Two things the SDK does **not** do, both part of a deferred layer: there is no spend cap
 of any kind, and usage reports are not submitted automatically -- you call `ReportUsage`
@@ -96,7 +96,7 @@ yourself. See [Budget and Usage Reporting](/components/agent-sdk/budget-reportin
 
 ## Extension Profiles
 
-Your agent declares which domains it understands via `supported_profiles` on the `DiscoveryRequest`. The Broker uses this to route queries to capable Exchanges and filter offers to relevant domains.
+Your agent declares which domains it understands via `supported_profiles` on the `DiscoveryRequest`. A Broker forwards it to every Exchange it queries and does not route by it; each Exchange answers for its own profiles.
 
 Three v1 profiles exist:
 
@@ -106,7 +106,7 @@ Three v1 profiles exist:
 | **fora-academic-v1** | Journal papers, preprints, datasets | CrossRef, OpenAlex, JATS XML, COUNTER 5.1 |
 | **fora-legal-v1** | Legislation, case law, patents | ELI, ECLI, Akoma Ntoso, WIPO ST.3/ST.16 |
 
-Exchanges declare conformance in their manifest. When your agent declares `supported_profiles: ["fora-academic-v1"]`, the Broker routes your query only to Exchanges that also declare `fora-academic-v1`, and returned offers include profile-specific metadata (e.g., `academic.doi`, `academic.oa_status`, `academic.version`).
+Exchanges declare conformance in their manifest. When your agent declares `supported_profiles: ["fora-academic-v1"]`, the Broker forwards that to every Exchange it queries, and offers from Exchanges that also declare `fora-academic-v1` include profile-specific metadata (e.g., `academic.doi`, `academic.oa_status`, `academic.version`).
 
 If you omit `supported_profiles`, you get offers from all Exchanges -- useful for broad discovery, less useful for domain-specific queries.
 
diff --git a/website/src/content/docs/getting-started/for-ai-platforms.mdx b/website/src/content/docs/getting-started/for-ai-platforms.mdx
index d78deea3..0975d4e0 100644
--- a/website/src/content/docs/getting-started/for-ai-platforms.mdx
+++ b/website/src/content/docs/getting-started/for-ai-platforms.mdx
@@ -145,21 +145,18 @@ Internal resources are typically `PRICING_MODEL_FREE` — no money changes hands
 
 Even at $0, the transaction creates an audit trail: who accessed what, when, which agent, which function. For regulated industries (finance, healthcare, government), this audit trail is not optional.
 
-### External Exchange Routing
+### External Exchanges and Profiles
 
-The Broker routes external requests based on the agent's `supported_profiles` and the Exchange's declared capabilities:
+The Broker forwards the agent's `supported_profiles` to every Exchange it queries and does not route by them. Each Exchange answers for its own profiles:
 
 ```
 Agent: supported_profiles: ["fora-legal-v1", "fora-news-v1"]
   │
-  ├── Legal request (court filing) → routes to Legal Exchange
-  │   (declared: supported_profiles: ["fora-legal-v1"])
+  ├── Legal Exchange (declares fora-legal-v1) → offers with legal.* fields
   │
-  ├── News request (article) → routes to Media Exchange
-  │   (declared: supported_profiles: ["fora-news-v1"])
+  ├── Media Exchange (declares fora-news-v1) → offers with news.* fields
   │
-  └── Credit request (D&B report) → routes to Financial Exchange
-      (no profile needed — core protocol handles it)
+  └── Financial Exchange (declares no profile) → offers with core fields
 ```
 
 ## What You Can Do Today
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index 2e63e77a..6d39b0eb 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -71,7 +71,7 @@ Your Exchange declares which domain profiles it supports in its manifest. This t
 { "supported_profiles": ["fora-news-v1", "fora-academic-v1"] }
 ```
 
-Agents declare which profiles they understand. The Broker routes queries to Exchanges that support the requested profile. An academic research agent requesting `fora-academic-v1` is routed to your Exchange if you declare that profile.
+Agents declare which profiles they understand, and a Broker forwards that list to your Exchange unchanged; it does not route by profile. When an academic research agent declares `fora-academic-v1` and you declare that profile, your offers carry its fields.
 
 Profile conformance means your Exchange sets the required `ext` fields defined in the profile spec and validates them against the profile's JSON Schema:
 
diff --git a/website/src/content/docs/getting-started/industry-landscape.mdx b/website/src/content/docs/getting-started/industry-landscape.mdx
index 837d405b..2794cdcf 100644
--- a/website/src/content/docs/getting-started/industry-landscape.mdx
+++ b/website/src/content/docs/getting-started/industry-landscape.mdx
@@ -99,7 +99,7 @@ FORA v1.0 prevents protocol fragmentation through a three-layer governance model
 
 Three domain extension profiles ship with v1.0: `fora-news-v1` (news, podcasts, broadcasting), `fora-academic-v1` (scholarly articles, preprints, datasets), and `fora-legal-v1` (legislation, case law, patents). Each profile is grounded in existing industry standards (IPTC NewsML-G2, CrossRef/OpenAlex, ELI/ECLI/Akoma Ntoso).
 
-Exchanges declare conformance via `supported_profiles` in their manifest. Agents declare which profiles they understand in the request. The Broker uses these declarations for routing -- a legal research agent requesting `fora-legal-v1` is routed to Exchanges that support that profile.
+Exchanges declare conformance via `supported_profiles` in their manifest. Agents declare which profiles they understand in the request. A Broker forwards the agent's declaration to each Exchange it queries and does not route by it; an Exchange that supports `fora-legal-v1` answers a legal research agent with that profile's fields.
 
 ## Scope Boundary
 
diff --git a/website/src/content/docs/getting-started/what-is-fora.mdx b/website/src/content/docs/getting-started/what-is-fora.mdx
index 24c8e386..c1dbcea1 100644
--- a/website/src/content/docs/getting-started/what-is-fora.mdx
+++ b/website/src/content/docs/getting-started/what-is-fora.mdx
@@ -82,7 +82,7 @@ A three-layer governance model prevents fragmentation:
 | **Standard extensions** | Cross-domain conventions in `fora.*` namespace | `fora.compliance.dua_required` |
 | **Domain profiles** | Industry-specific vocabularies | `news.iptc_guid`, `academic.doi`, `legal.eli` |
 
-Exchanges declare which profiles they support. Agents declare which profiles they understand. The Broker routes accordingly.
+Exchanges declare which profiles they support. Agents declare which profiles they understand. A Broker forwards the agent's profiles to each Exchange, and each Exchange answers for its own.
 
 Three v1 profiles exist:
 - **fora-news-v1** — articles, podcasts, broadcasting (IPTC NewsML-G2, Podcasting 2.0)
diff --git a/website/src/content/docs/protocol/ext-legal.mdx b/website/src/content/docs/protocol/ext-legal.mdx
index 31011ca7..210aecd0 100644
--- a/website/src/content/docs/protocol/ext-legal.mdx
+++ b/website/src/content/docs/protocol/ext-legal.mdx
@@ -45,7 +45,7 @@ A Exchange declares support for this profile by including `"fora-legal-v1"` in t
 }
 ```
 
-A Broker uses `supported_profiles` to route legal queries only to Exchanges that understand this vocabulary.
+A Broker forwards the agent's `supported_profiles` to the Exchanges it queries and does not route by them; an Exchange that declares this profile includes its fields.
 
 ## Field Naming Conventions
 
diff --git a/website/src/content/docs/protocol/ext-news.mdx b/website/src/content/docs/protocol/ext-news.mdx
index e43acb82..9897d32e 100644
--- a/website/src/content/docs/protocol/ext-news.mdx
+++ b/website/src/content/docs/protocol/ext-news.mdx
@@ -46,7 +46,7 @@ An Exchange declares support for this profile by including `"fora-news-v1"` in i
 }
 ```
 
-Brokers use `supported_profiles` to route news-specific queries to Exchanges that understand this vocabulary.
+A Broker forwards the agent's `supported_profiles` to the Exchanges it queries and does not route by them; an Exchange that declares this profile includes its fields.
 
 ---
 
diff --git a/website/src/content/docs/protocol/extension-profiles.mdx b/website/src/content/docs/protocol/extension-profiles.mdx
index 1c1fd5bd..1d7a735b 100644
--- a/website/src/content/docs/protocol/extension-profiles.mdx
+++ b/website/src/content/docs/protocol/extension-profiles.mdx
@@ -58,7 +58,7 @@ Agent                    Broker                 Exchange
 
 ### WellKnownManifest.supported_profiles (field 23)
 
-The Exchange declares which domain extension profiles it conforms to. Published in `/.well-known/fora.json` (`role=ROLE_EXCHANGE`). The Broker reads this at discovery time to route queries to capable Exchanges.
+The Exchange declares which domain extension profiles it conforms to. Published in `/.well-known/fora.json` (`role=ROLE_EXCHANGE`). A Broker does not route by it: it forwards the agent's `supported_profiles` to every Exchange it queries, and each Exchange answers for its own profiles.
 
 ```json
 {
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 3dd2b08d..d0a76a28 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,13 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**A Broker forwards the agent's `supported_profiles` and does not route by them
+(comments only).** `DiscoveryRequest.supported_profiles` said the Broker routes queries to
+Exchanges that support the agent's profiles. The Broker MUST forward the list unchanged in
+`ResourceQuery.supported_profiles` on every query, and an absent list as absent; it does
+not choose Exchanges by profile, and each Exchange answers for its own profiles. The
+Broker overview, the extension-profile pages and the getting-started pages say the same.
+
 **A request's critical extensions are for its receiver, and an entry's are for the agent:
 `UNKNOWN_CRITICAL_EXTENSION` is added to three reason enums (additive enum values).** The
 file header gains "Critical extensions", the one statement of the rule. A request's

From 8767e2dee77ab10dfab1abb7007715ec5665303d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:00:22 -0400
Subject: [PATCH 096/164] State the catalog push refusals, and add
 EXCHANGE_NOT_LISTED in the protocol

- PushResourcesRequest.entries says its two bounds are wire rules: a
  push with no entries or more than 256 is a malformed request,
  refused invalid_argument by wire validation with no
  catalog_rejection, because no entry was examined.
- NOT_CATALOG_CONTRIBUTOR says who may push for a domain (its
  publisher, or a contributor its manifest lists) and covers an entry
  naming a resource owner the signer may not push for.
- New CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED (11): the
  publisher's manifest does not list this Exchange in
  WellKnownManifest.exchanges.

The Python and TypeScript error-detail decoders know the new value,
and the error-detail wire vectors are regenerated. The reference and
Exchange request-flow pages state the bounds and the two reasons.
Both changelogs record the change.

buf breaking against v1.0.0 passes: the value is additive. The
generated code, the descriptor, the SDK types and the JSON Schemas are
regenerated.
---
 gen/descriptor.binpb                          | Bin 674255 -> 675065 bytes
 gen/go/fora/v1/fora.pb.go                     |  25 +++++++++++++++---
 ...a.v1.BrokerTransactionResponse.schema.json |   5 ++--
 ...okerTransactionResponse.schema.strict.json |   5 ++--
 .../fora.v1.CatalogRejection.schema.json      |   5 ++--
 ...ora.v1.CatalogRejection.schema.strict.json |   5 ++--
 .../fora.v1.ErrorDetail.schema.json           |   5 ++--
 .../fora.v1.ErrorDetail.schema.strict.json    |   5 ++--
 .../fora.v1.PushResourcesRequest.schema.json  |   3 ++-
 ...v1.PushResourcesRequest.schema.strict.json |   3 ++-
 .../fora.v1.TransactionResponse.schema.json   |   5 ++--
 ....v1.TransactionResponse.schema.strict.json |   5 ++--
 .../fora.v1.TransactionResultItem.schema.json |   5 ++--
 ...1.TransactionResultItem.schema.strict.json |   5 ++--
 .../fora.v1.UpstreamRefusal.schema.json       |   5 ++--
 ...fora.v1.UpstreamRefusal.schema.strict.json |   5 ++--
 gen/python/wire/models.py                     |   5 +++-
 gen/ts/wire/schemas.ts                        |  16 +++++------
 proto/CHANGELOG.md                            |  11 ++++++++
 proto/fora/v1/fora.proto                      |  16 ++++++++++-
 .../testdata/error-detail-wire-vectors.json   |   1 +
 sdk/python/fora_sdk/_errordetail_wire.py      |   1 +
 sdk/ts/src/errordetail-wire.ts                |   1 +
 .../components/exchange/request-flows.mdx     |   4 +--
 .../src/content/docs/reference/changelog.mdx  |  11 ++++++++
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 26 files changed, 116 insertions(+), 43 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 6fad0ae0be9292d625437750b784d864220588d6..032fc206239f9ed1184759d6ae2e857b455371fb 100644
GIT binary patch
delta 25118
zcmZvEd7KnQvj23^-BcASGc_>XT|IPHcTZoy%y10DH3JMFg14*gTaT3mnN@ZX6mZpj
zPltOrmD6OrSXkr~28V^_P_E^W<q}b05e4NC1Q8K*xqsit%%Xgs_xl4r6Hyu8jEsnk
zjLOWeJ=4;cYSP0-xkf3Y>Wy;$!!!Ot<;?la#0Nc*iLT?BrH4HwirZ+RH)rdQcmn3_
zzw6es;@&%M?|tum5B0vg*Mkq;-aWfP(|^>{11x`=C$RDx&%L+l>sICH^$kxT>&NQf
zo%7(IH}ku5^($U*t;xLcl-k0TyU44%-Axq5@V?_yX8YV`jW_e<)2gOaSzQMWecI|f
z==p*DhFE<DS6VOh$A5#LA5b~ON<GtmVDJ7zE1$uWf&Hv!`n)KqzLf(8y^t=lDy(Op
zAM&&{==q^T`uD5Ut)Wj>K4bMqYqTBk$3cUisqAMBu6*wK${|CW<BvZ+KLm`vFNr?>
z(q};bex5!<`wtq(PIc8&Rn~z1f38GNFIiBja`6Af=xFsHYCYL!@ZkPXZr~ste-G_5
zV9-;&2Uq^7@<{?}ZuPBvvJbk!W2<uD(81`d&k(Ef#XcBHWxpa_zg72;A>4)=mbgiJ
zL00)1`0d9odK|E9vL2DK0==OSR>_R<*}i&uj;;}!TCEunndNgA|C*&3?!WomE%os(
zZhfG<>r;H@|5&~HLAU-xG0;Df%`lDu11ee7pVjADqJ=8Etp~_=eVSpDT)uIhK2PCr
zZo|9Sr!31v2B>jY75=p4+>l%B({iMo8*+<%jT%es-OzrqFK-#NH*^)+yP^GUhW9<6
zyVmEC>T@3CmiW8|n$aLR%WHU+`n>C1dYG%=G2F|2O4Q7;*w#C>#%-D?9#|4A+mIfp
zvfLNQm#TOGx!f0y=+}is(0H|vRXnO)>fS{0!Y8X8pLhYj+SkAyg%?PxeMU$kd4aUr
z7m4X_Xu9GK8QxvKtoJi_4^nH~@m)T(F`CtLhw2;NPkhSfKDWL?(d&b**6L*mUPd3P
zmblvPBbQ~v4&oU+_NmX^<yRc^^O?`xTK|%a9#SCvrBC@L^ZfJb<E|?FDU6N>(C<s1
z){yH55^`Vqj9hMXkTCj}zDD0jqZ5N0{VSjQYiV@JgWO@;=#mAaAK^y7EOc-g-jhD%
ztk0df{{{60R}~0b3m3FF>C<kNTDX9A(wChhwQxa;lRo3@O)XqPi&H-L_cyiRJlNqo
zpEsLFLrCE)K%Mq^bAQc(`_A~hw=~tG+%^z8$A0sYT2OV)c4J6U;Kp;d8$m+Bb3Q`^
z1W2Hs^M%Dk1E~@jxm$KZ^XfL<B6^qJg!cjJyie(AHnh488aNcQ$ih4tP$?#INU4Vy
zI`4a2PHfQV{k+pV&8YJ}!zayCkE5AEn?&#Deff9D-s{QU&-<G6&`sVu&@ZqD{;K9b
zalsj(8+}~xHOQ7IH2W_2a%@nVeHVP8u>BN$T<}@lWgj%DNXHAlNH@JL?*r7&Y{y^K
z_Pu|0`tT6f>4T=#&%T_P1f^;9voDdfN%ZlvFJ)WNBm4N-m%dBiK@%^ez;l<`lmD&m
zdg8Lv3C+06j<IOQUAAW&M9|4)UnD9!@uHK<zSzBTAYN&#%f5np^bqf(zTv*gUi}}{
zdg7|nM}72h)#;-?`nc*dnn=+4=;Nx-ir6Ijxay1A1F0|jxay1Dr8nn&puu%^%gbs}
zr|V81Dn@tR*T9r0D*CwY3)-M6`nc{Zi0gI26q?~4;b$+ttS*0Ig#TvXXwY+nUuK_>
zq5)%s->?m?0b_(ek&-=VP-BEY{gAYUCiNWQZ~CC#k?W}&?$K=AD{6VS(M}&a^c?MP
zP#{rs^fB5WZ*P<6W3<1llfK@=AsQI&DSqV-<}wevp7A!xB&yVRl-^+3vEKl2Q~V7?
zh72hU05`=SZYJRx0B(xEsD({J<thG_y`{<xpt6DaJH_AX3H>A$3nAqeENGe72=!0(
zde3rtxdpw<@;AtnIJcmeS$>~ApKn1gv;0W#w9Enmz0C4Q@0Y#YB72$TkKLz#Dw5f)
zhI?M-%xLwuuKVUWz1)gk=J^}gad9hpndc9+l(4s=mwEn@Qkz6C^Zaf5ima{Nie9q8
zVN<Hr-0XS&CwlYMDx}<IxEK1_#yd5W?XFh6B@6v>ox&q@u+T5pDUj%3Ar0dTp=3kD
zz09u^m^&5La)-Ax(`l?4aXkW-ZTp4@mt{`4Gz8o-zg(<BN<+Xc^JB5P1#4B<@Gkdf
zedc%R4X{Lo(Q>(8ZKD5;qA`s1#l6zcru<%evjhZCSNdgg2Z^>T{n{;j*dT$r(%&#!
zUqVWTDYLH4RF7AST}5mCN`2XiR)n>FRb(eLg3wxjZX^AxdRz!T-;_BvK|SIs+T;ik
z)+R@Yvh*er`n#J8f!vWfKS_-%<vVN}gn6#rVcP&CFn0J2F$+PGkiSWY`yx#B*KX;H
zfs<8l@ow7}cm%=Swl6?Ja5wpa*9>7=Pd@eYnxQuc;C$++Kxy(*M+HigpW1FfV<3HM
zyTLNN`~6wxr5h}?-0xRI!VMO=;h=CsYY;#^XuAO<+8(ss01~JN$qf<M#v;odVt<~g
zHff8$A$Z6UBv%~r%X$t^A$Z7-dTtlF-lF3Ch+jFunoLu7R^cxZTi^rbh&?EfKsn-<
zYZyqN9PwifquLZCmiQz7{1bjrn-W9RreFJIZ7NxC{5O8orn!0pE{0a_+rT{PcX!Zp
z+y0u19*+6l<^Q`WCg^d$`yo+`TF}CK#;^RCnKhk?QT!<?5<GyqXZ*4l1qrY-ep!ry
zgt}+^c|Ss3Dn^OH>!R=d?sI-oj7lEl&iZ9BDp{zDe(+N<O4BN0crW;~E^~kS>bWE6
z_JUsx3x`I?p}$Cnf`CPTu~h_#w!hd81&OYHA%~{nmI#^q5=$|)*`1f{2?8c@{i>+;
zKtkk_AJrad5;eS6{aKR&VuDA}^6JeA9wkL?$O#Stirlaj0g1LZY(+o<^@bf;QBq`h
zfDM?bMq3UKNc)1z*)pg=LS}fteo2T@P*n$%iJA2?$uIa*_yrFjR~?Xk0SUS4fb<JU
z_@z3KH!&dmLJaPgu>tplfbfgtL2g_?`bDzfm+=AHFEPXWS|Do%w+8$YL$|L5?1>g5
zb4(5JeAgNT%rVtg5hU794aj^45?xIVz%Rw{ON{iN&U(J7wk(+*P`o_bfl1sz{o8C3
zBGUsohQ6mB98+L;{}#wv6>ym&6t<zW-YB#2O?8E<;okykP;U>=0#auV8~wK0v1pDB
z3MN431nLWCg9PZD0GwSzdAEQRS&%vVwi<MmEeOb23oa(ef<OaNF@U62fr6%7F_6Gm
z5GX9t@8b}dcZ=EWv(yL57CQ(u?-vJT2~xlvwm2a3DM%nJ4j`X)<_MscvQK8I73E7E
z1gb2TItVlsmj(>6I2Z7#xHN!5h~DK2C?mfg;HzUB5YYbpfLtCyLh}89TpmH9xAy~f
zN-iKpGXe1$2LeDDM+ZvD8Ak_7$(ev$8POO>nE+PC9bPynZg{r`vaVzf%~tQMm$N;f
z=8EYXC%^0zVbT@^Aa~kf0uqor?Jxle$ek1>2gyBgxW~IMpnR6m=Bbaks_>_n0eAqp
zeF06ps)B^vzCbXaCsL4@0s8_?KEn*4*F$2^3~+xMaF_9NMsnb~PXn>SU$X%8X`r~H
z-jer^1_uI4z8SL~8r+9{Jzs5F2-;SHqUS(B6K^DO?$rYUWb@u!7D!*Pb_>)#g<m)#
z<i;-oS}qTzICtY0fjpnynv1~tU$LzV)Ha1*1!NHr=l=UDpo-T*kih*afY-uOE&_9Y
z%~A{1b}hdSDB`^(u8^a?4&=vWFXX7N1F5wB9@PzTyg+zQ1(dUyDGSxbt}6U#4~X6x
zPT6?{?I3r`&MP2c)l-4Ivofy`gXfj+0`Bi+UXeV=owoCeWFfDd;d!NmtAO{59|KCn
zOjvB~Vzos%2(e_wmHG(Z9|H|&7r+B$=`G{OK%OX4K?3{70A4yN@Z<E(c|is~2uNPA
z10N(LFW7+(5|S5g27X+@nt53SK6`eF>g{ydQGs3{F57XBmH@hJ$2~{@U8cCdM^`)z
z4e#|p)(DgRV~KiK!|MT0F1=8D8uGP*-L_OM2;T@Oyy7M%0_sK}U{bvS61c-m_P|m#
z8XjgUyxJlz8Vxg%9SV3OP{U0&b*UN;4>!fEMk6c^U?bum#oS96-qB{(tL*co>LU$D
zn`%Js3hN|DhicZTR_$I^ZA$xsiNRHyGBtsO64j<5-f=-<aMfls#uIgdG#t;?)v7Ja
z#ybd<9><#v0^CDrLyb&R>;r%V!gv!KZr!;K&~p-NwoL6&KFL9#tTV}MAhL3Tr^iWV
zwyguD$4R8aofuov@J=zamb0bH)Lz+BOw5CwRB|P0a5Gr__to8HGi+cm0X)MV97w1(
z!<2a!B!Fj-WuNB=cv!=7>eLs?Ya9fs`)V8n8eEMjE4CybT#bo2et;5GlDsfGv!zab
z)Kxg!lv5U52+bxpPzZxWx3kUsCVB;z0X3K1{SUQU*<7bvO80YZizIpFHP_4*=^iA>
zm`L~ca0KLu`E18O)cY#tI|#IuG2cO;v_IcLptLcc5bop%XuHT%3e7ThZmH^LLsqE8
zUBD1?Fv)iU7nu#jqyq`8MP`$f91rD_MP{?+`oD!IkWXq&rH*~GLOoE0zibrRlc;q}
zN!g{=j<h7tF16%kDt<vCyVRNmb*3nOiGl2bo|c*J<~&177Oifk`!W441V_s7t~9eg
zG+k!7_3)5BPgPd1_8GPFf2}lCLl0o2DGHNSrjlbeuquWOsT^uO{F`1vKRkkdcqXzR
zNa(l9lqCyD^u5Z&S`_3sc({h`$*4`r*4QIV@t1@(_6R{zBRg0?0$~jW3o-&UL9Beh
zQmfR0t{*rEG!s5>5GZm!Fy$5-M1b&tiEMYoh0&%B?*=pL07l!9Rm@i#u{o>MZ8;lE
zR6zU<G);ruYKk{d5P;rl4-X`ux7x!43Fxgfyy>(kq^aZGnO<wu*Ih-s9U&UgZc|pM
zXau3%CMs0QzG)iKUQ?7EAmEt2GC|QZNbWUd*#Q!gdriCSNE5l=6lDhp1oVE}CLp2s
ze%mG>fwbS0Wd}$uiu7AuA2w-<HOb7Hld1Vo9aAsol&SiKEt--o&PZE;0OT2aSRes;
z#<m4WK%OC6yiEb!lvF>*ZfsO%6`eDc20ZG)B(8ajSeHOT=A7vd=pPCh*y1AFxk+8$
z`=ULPru_BqqCFCjfVgNHV*dpsATF9%4Jb{3#A0^Q4Bp9uok+2*bJ5K2rJog@K;R1d
z?w{(pvMWv}^<elbh;Io)=DK1=+Sw$@m>tXXJNVFG>FX?Si`uLFx`RL!<8@Q+*fix8
z$8|H5mI#zOuA9vZ^-m~Lno`7$%e=Kk{nS-HE+{8ExWo?1Wd$U(7#B3e{uoGLj0+}H
z`Z|Gu4yR_8Y*RP5%BMOQlrW|`7?d!k24(JT$`i)aAf}Tv25N|zY|(c0T=`4~f~tp^
z!3H96Hs#gB%wSaPoPmTIGlQ*5c>FdcgTEOR@e2ZyZw6)A3=*Bc8I<u05|VEQ?f7j<
z)x+!{k6#wvsd~$2J1S81FxwdgRS&a+GJGKjpxHr$Z!bh|GsF9CFzYz$yHo9%`)*J*
z^^vr$G(+%u7X_8t%!fNw#Z`qrMb5$lfG@JaK>~bH&=7?mNPsU2V#AtpDoEtiMM0}J
zSWj=H>zu*23UG)NbT18h_^tpo<6OwT7sT6OBkUjCWTI|c(lAIbgdMnI=&z35vs*1I
zt8<j1f}k!am-A+Prql(q#qtLdz;!_^e~)nl#qg|PTXw6zuUg?CP*AOKhD8%)MNk$c
z&G<xF5yVn)8y^<@=2;Oec+JIU3Leu+0TosR<Nf%7mt@tWW`BIurFY{ULyc8IrIp#n
zx*x}xm4n&rJ!<<hux#7XL|PS;bxkv#cUA?>LOu;Za`_f5^)4I@6KO5W`&jMTWvzoi
zYw%jf5VQub4a!x#886+}2C)WzOtZNe#_Zh?RJO30AFF%*guiS(Xew=Rj6qXrL(mY_
zJfxt<h9IhW;bRYcydl_h%S|8CkpZ@Y4DZIEd-F{nOD<$LvAuiMMmhiFP8}gM!N9k(
zpZBVx%C<Xd&}`i9s6n%FyB){P_-x!B#F0Wd9}6bqPPXzBwR71{2Z1KzPRATn%I^$j
zi;dxCd@}9~;=tfZj)2MdF>AR`tt|i8L7++baZtXAH{+A?<6wc<O9qMId>kxkqi><C
z(u^kMq0GL0>NZ#TAqPVP#vuoT=HsDYfk+9E0mh+V>o)p71qOEek7f3MrfzX{I_6;L
zu*I>UJSS?V(02c^V2&N(Ixvm}^F#WaTwU>G8{WzJS+8df?pJ4P#^ijDMh70AY+8|~
z<SRZlyN4dH0tpb%{D_#IVg;F!kG1s{-WU(3<}3UJ6%T3g0m-+IiA39}`B<<-TTs*T
zl|~e(cu126BrmRs<WKqj7AXN$r=!#Vl8tG#0L|Yn=_wjd&&S)P07j6{$XEE1hldo-
zAo+GQk!U+3A3MvxxRJ`5BbDW6t<8-6M*WM@@ZEeAVDwVkoJKvL-Fh4^we$03tpz5a
z=I6^=3na9fPvfDt!{#)AMQqS<wX|@NBSI!v<cLsKSwtdqNYk7KxrBXkTrDqL;)oE?
z5=Vr_zJx?NaS>3<SlJ1+OW`s{gzT}*5ur)Hj6^8Po6|naa<=e<+PT$oM}*9>JYN&D
z7i}Q2Jpb0)^d4LUfwMAS@tf_~Yu~CdR{pJO6@np(&gOibT$wL71VBP~Wj;0p`f_1J
z?ix1!TeV;D8b^dC;+lL}lQriPaSg@IEFEqrG`zd>v#w>DoK!=e?A`gO4L3gwtU~g`
z)y!Srt6Q5EUu`0nIdB1XwMjs%(;(6R)h1Y{H<M3`4DZ-b*6K_bzt&BOj}7rRntJXc
z9L-M*DU(BP{aY7~=8NRfJn`59Q#(;IDTFO&+IkU>;G9=O?uuV=(9LVancV=o6_IWW
zGMj?h-#vv3Lee(iLbnAW86+Sfv>*gu6ml6nT+F6MwBjy{alpxwbP=B?i$nEA%?1)8
zi$k}G_e_w;F^fal9fcx%R|tnqi<v8`<u+U#YTJ$<;}%gc)v{PrYhPIFXhXqN8<Lj<
z&<4=8Axx_Zt_`R<HZH1lE3XU5L|()T*}9Odi9iCOE@X(T0g_}wSQqC}5-y_P$}laa
zEhx)45LB9FLb5bN8$e`2A#qv^5)heC(`Ncmj(}KO%f63ke<@q*AkeLjwGINUCTl~X
zR?=V;aBD+tO7$|1fVS({tOBi5**XV-7J_xoFev`kg=7_5#N%&W2vsb-?-wap2sW}n
zT<cM`(Ltb-<BbjiEd(1w^0gcy&|zb!Nmze~Bfv?U*_(0gx8<811QiII9R#Y*HizVP
zXc1osHirrlv=vE8U?JF>DN1Pf)GOcXU{GPU*TJBLV6USEEd+Z>i*d9N6e(B;4rErP
zwF$2B0}ci)1P2@pS_lp}deA~}fb^)NbKfEb=e|cX!<uRTP|A-w7!81N)WM*`-lHKy
z9L_@q7)L|#q&`lB1&(r0vgeAl31uf8h+6=0(t)6p+>;?glqy9Eo#dVjwP>Zc<67XD
z_B3l(taT_m?I6%8?debhv3Xgf&?)WdkYB8dAc1f?gjJEMz9Kq(J<FCBYh`6;9Rw=5
z&W2>Ugf>7p8!}5|V9~4l*-+c|`r{k{r?BT)qJ{QE*?9+nPF~MDqo9-5^C3fQGZgWY
z*Ylxfh5Bze0%qz(wxNagP}xNXAsYx69fWKkTnx##jv^%+I$R7T(|lPeQgRIUf7tyk
zwbHWxI0!jF_>Y5-1BCyCWI+uPAp9p3vh-G52ZP?fHnr4B%C0yF1`w_|2nG<Ygygk|
zBE<m0m5>$HpW_I**Z^d$T4_VdZ#W3KK)B%`<O1P_Gm2aw+@MiZa)d^Pdt{h>(@Ohe
z*~swCRMQB~7#WtkrbS94K#UCMHJ8q41c;I0;+Fb@9HOz|9>Yep)*db!;~+GK5@W(Q
zlT~9Nj0xWyMq?n131b+ve^jL8;dPERF468TALk(C0b!hjkOzcuVOh6A1PJ58siyj5
z5!XK27<{Khn_51}f$#xhk^|ub#H6r%4=7T6fS44H7T8nNk76bBOdFb_(;W;yFs6rP
ztyZM?fiXRtlaQwH17mtP-ArsF7AXPR1Z>k*+ufzcfxzaqyCy8JW1tNnYQo{x5+VSI
zns8}5{R6yI!5F6DT^hz^zHaTbj-Ef@Pf-fs0W?|ajK&1a(y)9J#8bd54dYFa3VDzy
z<d=pEmW9Oz7%{|aO>Nly41ZxQQi4=}Y`9Ykmf&ybxI8Qua*zOD9+vN`AOXHSjQ7<q
zg|+kXYQqXUX@@(la`elGeybe)@&U2R(Jvnmt4Kdo#)`WbFBIXde`W6MtZi~-Zw%x7
zbQD1s)8f6E<yUB9$~W84U_!gic07Uv^yYA$*y;cY=*?kl#9j~(c)Fb(uF!t&wB3QA
zo!ITRcEx;Y-ySx^HU~&RY!73b`50-}!tj0?&N`II?WP@dHT*P;O63nwt_3N#pLuTA
z`j+eu%kvR1(ck`XzStxH38?*Hyq8hY)q>XfFTzU5e8}p?Ug@SK*{0jI(oSFrx1s?Q
z`@&WXBo~m&I!K^>5yrAUf%fcL;z&Q7b&{3#(8f1B62=?;qv)h1>GciU(?ff_=$o)C
zc)$eGH(^;~fCSPvVU!r3k(FAKV&Aey?$GuZf9uFl@85<su`Pu*koh)@ZK>Yqyp`cS
z9nKnMvEDtk-y5f?cgjMo(7X3+Sow+V?x{Ung}+2K3O>Nj+6sUK*jZA5A`~Pd^lZ4%
zPl!-D@Fxa80Qw>9J|7kb%aRAVb76U~ELqq{_%TfT2$V@%(O7;CD|u#t#Xjt%6%~T8
zm7o#*9G0isXbG^N!#Lfh`l1!pW|x@%POV4ZOOWR?5=@9(3j4%?El7x53d=inAW>0V
z3a1|AWgn6Jj?txX`ZpMdPME}T!zGu(_ubE@S}TIMMpG?Pbj_Y*V4|OE_9O#IjcAfx
zCkM5n3T`Cp@~C$C5BQr1OU4XH#LP%bW>=5^8fnQ?01`kWElf4sLGa`l-Z56zM2p`+
z@X&%Z#_|OCJ7f;UO|_+@_&X$f^={1@0?Ehi!9y6Q+QPWI;uSK7j53bZ-K}*Gjk6Sf
zwTzf(GtR<$dr#g5)CAV(9_>zRf~D}eg*Ig52^QwoEQGMf!27I~^#*(89_^imlPym}
z{S}BBq{<Z5>|SkHXo{uqqL!Etonj&Sf6LoIg=uX2z1r_W(=7R>Yj72&S$Jc?e1ixi
zX0XopY5hVoEP1{KCUGsCZ{5z@z&?y^yidC$#4LGGX7HC)W+97UM+P`BcnwS3uXVL*
z92|N{ts$IhdZB4;c;{MKJ2PYN*St#hTnlM}@0_=$!OUlqf3Lk&g1_Ob`Id}FkQl^#
zOTLDHgf8<fyoPL}I<Ylbxi&NKL2bLMyw>(NxX6FCmRyfPQY$M@)Oa9)QESB$`g)aP
zK*>#+p$}^n?y^k|2JNVCvSjVwng{tND<sx*kighvVNIvK_|`;iVLv{Cc-<mLPfT>X
z#gdBxNNQx+@!Fa!wqrix)zxW-(<?>l4m(oO1`s>!NCgRq9Tce}$(|*K_cJT&V&;{{
zG)2k&%u*x5o+V_@17y!RMF(t4f(fhxwk1IV>i}7j-_I@~OCHYr;R&s`tL(6?54f<x
zVM}grgQQkgL@ehZfpOSMH`QN)6-p>-j<PGgwf`<Z>L8FEk6Q9hDcS(xs1+2iydZ&a
z)UvmxONcz3S^fuYgRAVcgF$<Pr!Bd~iAKOUZDou61CoR+yaSOh=qDg3m*I<G3I2xQ
zS=%EZA$ZpI2uKK?z3Gt>+6KMAGe~#*4VVj#2DB@9!S)ND0_cM67mxtDKz_k`uejS7
z-pdvagv<JAhZ<eBRG&VHGE^J5#e2<CMnqWiN^L?F{uD_U4*++~l1UdN;I3KnN)bq8
z{%cm=h=|Di#Ne6#y5$}o5t(1|Aa}!(nP0My`G-X)^HcHJhO9q2qTFxZZn4roYWG!w
z5DP0FVThw6GD(8uO=T?(64;|7@-{X|WcASz>ps2-Or$t286An-tA8p+i)a`h!7YO=
zE_UWAEzTM~r7bQ5#~w84GCrb-W6m}_62?bx+D0!NZ72{Xv2UN!9_lp7QIX<cQba~0
z+5llvBqAz9kR%f+ZL8PNm6%e)J1dg)RpzCqHGjSASrIi)%#Ko;9dp?1KWlT^%(1lr
z6IgR1GS7en)|?1t#}^9JDTS`yg%M?O#BKhI-8xUbJF|I!rn{=Z6T?9Z04$8iOEDk;
zurMMo#ejql7e<;ah7W0Hh8W~S_o9fr6eBq>+M<ZO6eC#xS`@*hm}XoNG*}wJrI;rC
zQp`OAwSq#>wi0C1r4e~4rj*-sX#|Hh1Gp@Z>exF2wSk3ojtCjCE+Y59O1Tm1BG>~<
zauLje6|DUrE!}rTL~Lq8cbY~kB69wL1n!E6JV^tI&{z=(_K*Xmi~4wbToK8?oiF&*
zKrZ+zB3--jx8zcqdaKyxL0X6MRkpjqB(5EiAkporh<qsmiEdX#u!CJq@m5NC<^$I8
zS#4a|2Mz@7o_ydy(C*0x5ku_YKm-sUM6iQHn_8u`d$R8J=d|MTbq)Y+o~&~KX!B%U
z#1IJ(5&&2iK?0mZ%TX!SI$JXXp3~;KT5ferO#3BUBXZ9WjUco&f)$wG2r9*XiFbEI
z*_WvpqTxmm{<OVGdnCIfGA*DT<aS3I<?(_LBtmL;#J5kT1!C~DuqWdFM5YDFgWSgv
znHD4qX<;u<3zRcUX}jg~i1TwKHtc!LTMUl4;)UnX<nxGJ%0L3~^N78amC{bjp@=w-
zTlyEx`{*IZeze_k$gv-7w;YPd(hGtBIuwzmS1zjcNY<H%D81-C{7A%O@X{-nChgbA
zCcN}20EwrddGhdp#I*RDlE+;rMsjHu9A*FYf_6{nC}gNiB_`S&jo?KC*Em3eI?gt|
zpxqZb9+9;dn8b~s_IiZ3fp*`r;up2YLf=MY4VTLcpKl|PsKmhxImH&d2%J+9g&z|E
zoC=>)5gZe>;W)6tY1a59t*v!BBJ0Im#e+7dBd8abAzgVIA;(9urep@Zq!rgQuF=4;
zbL?qE1HVoKw_f(%8wZK8fffS?36SeFaO|q1F&++!qN&z7JS-|NK7ory!=jj=*y2MY
zP$Q!3m6x@L!y}?{Sm1IthV=k%grSd$vhy!%zX^?sO8Ye8V;>cTeY){R82cF3_Z98-
z(3q&gPnG~rV;>X6yrjag5zXweY|ATJ*U;FgEFQr`o3T+8k64w^22*!Di&tq6hsH-`
zF$*TzjE|z2#ij?^U~*1mGpn?_Lld1g_0eV`wZQ~N8%)1fnKDc(4!s(c#VnX;^J)~C
z7$+iVgWbu=?7m@I8*8#-Aq{ONlZ94N&E44WvS`*EHg}k|!eCL{DkE1kCRfaiDr8^p
zy#*j)ZO~%eAb~NH#@&lI#=|$*m&3KYLT}i*H0GXogLHYBw}Hgltj7qgD)e?#y0kHO
z#M@E0w1T&RBWAIqBeZU@S+@Neb3e=?`{5QW6oVgTNAW9*3ihv8w0u@MQfpy>!LM}D
zWArmS8jb1SQ+d)BXGPJh?QF$J?M(K&QIsdV3U5opdyl<8N}E&oUR35FFfoqzqH<jX
z33c9!VqK)I$+i@4wQSgEY)#fiWg!73TwWWMg#<`y6qUDXKmwtbhDSNKEk#`&`_E`3
z-8u(>0-`P|4<6A52zAi{aj60%5bC11R55{)Zd)SPWcrQKCb^2%MCBp{E`-)Z<st==
zT9Jph&}z|^Otzkd$7<Wk*E{`Exwt+mH&xLF5bL9+s8vA%Vto{~D&@?!6xf@h{Qg1-
z2uN;{ex_%T+!U4h5+o!yMeTgqmWKDy{O87@^#91|oR+GO9JA3<^-)x2N{9gBqbM@v
z2o*kThg2EOx}K>WuesdWN1}G=-;SJkl$`ihYy1twqqZwS0`aKrN{~Q2O0J~4DecI{
zC)jJRX}t<hI3nb`6H&P*f;JF25yh57XD$NYonoHJT1EF$_AuJ<TQ{fdVSog}si-U?
zK?31a6lLT}s;k<8^!^Z4E=1ktyX?M7?>yFG3QA+J#2SbOkpCen*Fcbv{~;<%V~|(_
ze~9K?h>Fsf7<>&p7j^#>6{WG{LGH(>TmvNwYvB1PmB!@Hb`%l6M1Qpg-ZxeA7J(zy
zKs<*gzt}zn3B+G+`m`N|!!-t<Uham!fpyI>3Dq&z9FtIRT(dok#sIoTp2dw;cYDJ-
zJeD<+ZJ4IroijY9#>C`oPktR06W9Gg0B}@H+6W{7N5$kE1qr}WF*x=w7*~68z*u&A
zy7pq>SVx2$J2s|?>;7m1k+Csc_oqXk_B1Icu*oyD-xf}Y$$dL8Au=JBFG?Sf5Sb7|
z=|eX%+7tCE%Y9wzTJ);Z3pwxAm?qBL(1setkgdt!?aAO%VqyY;z?_&8lg0)K$tf{8
zfj~lXO3a=>?aA0|{@&L$S2>HxyaOh2V>0i61O$u82?P=lECw_G9%k-fc;Ad=?Pj;l
z)E>`yGo~hlnLCh~-;rhp0l;_c(SQWtJGPlY0`MI&b5o3_16gM_>s6yQFP!a&keO%4
z<orP!h|G>*{@lw&VCK1OPK|bd(OgG_facns>A=lAmprqF4z)Uvo$E5z8`@r_yv`mv
zxX`rD9y&;1)Wu|_43dOmSed?~N!Ni4zdBR&wl=`keYJx@TMw%p4D!J0m^>zg3@}#5
zu;TEE+W{W%u8%33W51rbqpQFN3Lc2*3lb>nV{-a}1j_oDoW3A2eb>kGHpj&DB?h0q
z8)EK%#>DiMJjiW~$>}Run7*50_Vn#QIdz*$h7%|v?QjAKHMZH|1QKxDZiZ6_sx5Xg
zgwy5j_#4*Q<yeL4|6Pt%sQ%w&2NfCvXcq<5aavhB8s5FJtZ!N4Ioh$Dy)o4iQPq*6
zYQKys5J22-TL>f&_uEkg5{UaLswhM{QZO832mY?zUv|*e2}~dyv~>bWjbet#Qy_tG
zFoqg~&i*>mT>g^vo2xxh{-uLJ*7`Cge?W^iK=?8i7w3;4f$(KaUexPI)DdY|5Rg1#
z8x|xakJyF<$=llVv?E2@31L|LO@yNYh1&^d5EO1FY{Q~4fKHHMS2c!V%M9=91zF27
z6Xt0dJ?HfTyJjgP%hnX|w8+lBk9=KIAVUw2fLK!?vm!_!))c_7JLuPGWi;fUGSND1
zSEE)x70A2;F0l&&P5IU~NC^E@fL|N&J5FUVruRyLGAy2nY}5Yfs>0tQ(D4L<R|;gH
zgM{Ff0vYHa5$IP6@`lAlpc8`!`qcvWjRFzqk_WkK1v1bj3xR&UfC7D1F4r7u=G?e4
zFYeAfxm|lp>jOgU;gs<_FgGq!AV?@RH!f2kNPy3cqr|5Z1&~l`Zag**O3~LihykVG
z-*@Bk%&UwXxG*j*X@bDBh4GuVB9|?U%N&iTKwlWQeP2d7x;8E@8G`^&t)nMpiCRZb
z$`ZAXo|GkO<8c0InpNfa*>5~+Cp+`0_Fc~MxP8aCoP57JF78`{0OD%=&V)M-BoJ4}
zrSm}oadjNd-%r(FIXP<`Tlu;6@1k{%4EcUtT;n&ns10P+#eIH#qL9Hv+QdHGuf1Bd
z2|ufm{SeZoczyBvpmOf^O>x}dq7|;3f?$iZ9tc=(i)}rSklbQh4<v7ETd$l9ze8BB
z7YI&CFN4Hbci7eg38Wpi^*{n?2U%~90_$}$ynEtVr{ga34vR(3dVHD4LCxdJ*%P;a
z;@OD|`MEG;M-Tx2+%^hGfPZcq5+uMsCqvfKQql>-_a2HXU&r0%JEDGDen=Zt1(t9G
z8bJO~T+R!SkUtcc^8zG7@K8MOYdJ57!RN)7arcq9m=}@<xv%1KUPu<^#o@TU0Cb{6
zcPuXIx0PRN!D0|1CE^j3IA+@#B*2c{jMPp<ekW|*4FqicogJwlVUF)?TZ07BcebrT
za#7ftehAbV2XyhQk6GDa?UDG|IMP3TN~JUIYn_iPKgZqrYPzr0S>D$o9$Rx*Th;TY
zxcd&iStcG~92es5ZolH7lZ(W$;V#9MYk>Q28x2k%7F%;f`)jYu|4Wu${jbE`ogFmt
zz}2|>_M2$K6Uyj>n|5uba!7K-V=sTL?W-D*keA80a%AL@3HP5JI5OU-g!|E(aAOk6
zc);PaN@A$UR+2><pB#mZSe<Z-n_z+i+_4FFse?<F9hY!N+TR48lu)Js_)j)4zT!hH
zcJ3Rkf16hm?oN&{z3{%4kYA(W9nhqhOkMJK-Od#9GZG?qfPjx@BxJ~fgnBa)GIxN4
z=!^tHo?o5lOtDnMet%4xT3F-AP?*;wWbQy4$kZf|JLnEjXR_K`EdRLHq2*f%nL5CP
z$Xf}SIzU3?tprlX4Z4-r8KiebLdj&Rk89UGeekEq@pu4jS0rSP2ML%J37O+T0%k=*
z=6H~pU@H=_OhV*%Vu&2SGJzaFnl5a0rd+c%bK<mCzh3!Pryt7pTNCoo1&z?p)<m|L
zQXtXK)&!~y%5<G6*>6vXbpiw=w<qN60}09P3As*ygyi;wo#{GLDY7Ra)(H^MWsjo+
zy%X<o#!6+}9%rmn#_dU9_Pu*6re7Ds`$Hm&WmcZk=6bV#NZ>cHBWZ)63px8@=1;$9
zqg_Q8ZI^)yu!{+eU#O)<0K1r=Pc=}w??T?W#F|{v-Yvf5$dH>aC1gF1HjufLKs`TR
zbOb*SOJ;t&ggY@Uhb6_;T|g1muw<V2z6eN24NJmBAMu`491D$3DzCF8SF~-7Mkm$V
z^!vF6XjYwc7nxnzbJw&+?5(R>`&M9x%LZMz<ExW-DNGO#Iw8kbCz}=WE4f|Br{j|D
z=4PP~4qn4S0T^O&!(*s4F4<VT%z=dPxFqi7(6!kv<jo0ez%{LB;e@1HTv7uQA`_B+
zaRLewA`_B00i~M(UC4`**w@#z9<3%N-QvSrU_xY4GFKeDf`rJVBrey{ecmoqb-$K$
zcQ%WKiqBlv5`|!h8|rur;n$KON&qxIDz#rrmUWWG!B*cCw&A+=o5Cqcw+PBE{D%6J
zWT04z&_?@|WUCT><+uy&{7qw>Z)jZ#r#T|D$3D#wp*{9#Btkzg??U_HGuV4Kv<Hf3
zB;De?5lo28NczP0VL(D;MzW}dK81b~RbhDNC$sjgXs%DLXUtFHjGOLuRv-qw3zN!X
zw!5C*u?l~QH*fF(wlLXHI29zo7AA3ngi17!n7#{>=HjF{HX;T;O<9!0^<663BnN@F
zD2anGx=|rnbfaQXvQuY0Lo0O!#b8}hxzk*rSedbIy_M^6kRqqxA>3D&l!vq+dE=nC
z=?@Z0)g^J$pF9B)wy#T;_QDTByqx5Z+xFB)h@PO#s!SeIi>u!%rwa<IRY{q)D)^jO
zm6WfSAc3(eiPuZf1?}XnN`_m>F8Gnjs-)FYzkvawPb9}(N#&EI+dQkY;!1p%CbUTP
zX5Oi<KjNvv6MI~gD|b1aQm)+PbV^fZ7j-I(O}TPcGW-dQO*d@Nizr5RC*6CKq8O1p
z$n8nWVnnh~jC`D=V&q5;Z6W6w-UG?3>Xgge>$2GUhdp`h?OXMKHaw8@1o??Z9%ZF}
zvq87%MOFV!Dtsb(z=ZMsoy4xnWY`ik6#goyv^9q-)<gK*-H`rI4aE2T@S(tggN9mt
zo*(-3puzqBicbR$9V9*|h))ONJAmQ?e#s$Lzd_IR=|8Xoef^JQD*Myt0qJXleTK?s
zXcT<*`Mv}C51|hS4kU5wNqit|aR0u~4;?g^eOTc&tMGK_5Uc+{=evQwYBHqAs*pWe
z1L<plPXS_Z<&Z(o4}P-J8uS7wOrPqLx<AwBB~o5@^o3?apT>WKEBg!?G!R1>B)&FC
z!{_7ASNMf#qG6t|lDIHk!L0-8FpD(QyM+!Xm8KLsXhW;*;UwPKXum&?0_zAH(NJ#_
zK9W?5WE=XW#gSyoRyt+^HKLj?^Lazu;V=I#sqhp>T(tTwS<GLHi3HSl$(G$IC^-q`
zzDu_1rsE43pb=`PSrbF=7&`4J!w-2#8KE$y*%|g10}7vUl%a!;Go%bM1#plSzi0am
zy;J!6q{4p&NKCZ(K8c?J;(Hv_2=n7YrX*M2>k3~;Dm>v47p*QNTea5riD4n*UCR_S
z)*n`^YmQEI*l~??qL(2^A;}F-u^OL#AUQmx@L5h=v>Kjj*FnD`TH%auOiC#+&$z6I
z*!l{upY<)#gH1a8-*D5dA(eywf)7phVHNGXKCkt{(}RXovX-a4jjNt~y3fF;@TlJ)
z{vk?)0Yavd$H(BxC;LC!A0MV`ZVeg4Ik&$kn*aafeMsei0ciHCNJe;yPuty$A3AP?
z*0$Rl<YG``QY~9!5mDS-4e$6=)^s-6uis~kPvOO~Gm=YJO4Son%B$>0zuu_|e~Hxv
ze1J_%1;h{KK_VO`rf{l4*#ji9$HY{@t0|GHiNRC#q?An6k^>DUrDUp>EK1drQb^So
zVQN63pJ^#2Zk|BuSQ^mJbpj<a8lEA{rln*W1<BjWdzm1i)3g-M=jKon@)_QlsjOw}
zkg3nko|*E5c;@j@=BY`sSv~Y*0SF+}q-3Chgnl(C1R9;F`AC&F*nyy49C{<A@b!S0
zX!Ax2>p=-`1L{o{&(}+1Z#p<M3*RIh?6yDzdcB3{i3VAVY`qbiny(vSFht<uF<QTs
zLf}^8N*0=9KE9XvXFe9V^7m4Tn1JA-)q5%IOVLCJ3DEaaZF=(gNF<bfFI9R6-ITy%
z7-|XAB6?wLNlH#>Fafb7g(*Fdx50c|no`Q5e_#)sRdd;Zi2l1U7;R+_G&7f`I&{>h
z(;V>8)U0JkBl_#HT1P9Inzf|WZxK`7uvwAH`WNzkPxiHmkuJk;^y14?_$3g%y>-LO
z;Odm}Valyvr|)WZlP`nB%itq<FT2{VNx8f7HyQB^;A>OvXMe@Ps6R;IZIFtnZWOE=
zQp%<jJJ(ZhQw17B0z>>J6(nr3A(byGFpv=5kiykBidm3|*$t`WCK<ED;4!<=j#<fp
z5*zK9l`M+cjTEzdN2MDA#k&nZncvR-C$4|q7k`R?#RDj`EhT>w3=#@$OGWvNga#C_
z+fvAVLLu4@*p_O&9STu(gXd6)KCkyt%H2YrN!vl)4e#z$))(v_37uu{PT_+{Q>g6d
zPEoxt^H@^Pb=|)&C12*iMSuHJ^1GfO(ciul-m<990Es-hFJ+YT-iXA@5pR)OrtcT9
zkUyANm(uYGoP!Q54dY-+o}YB*!#J42F1>)I3h7`f_a5#wJSAA-G!h?VlpGA}V5+s<
zH*bW#52iZbrT>C!)gHg$J)X+Cj95BZ&+6WPNappXIKefJr{sN9KMnZ=rW~W+G!}q_
zQlR;Hr3WNBIFZ76B`!UK#KV*9tLFOS;gfbo1QTselKsa~z2T=>`+eq-LcM`2{JlMy
z!6i0L=31HuewxicvXMpl`{5r`3cpN4Of>p2h08R%MI+4Ni|oN-{p0Y(l)?iLjc5vA
zqyXG38ex)NVqIJ4TdhkeMckzI^GSLsg_{vw;P2aUF(Q>UBF$1Q^-jjM6z*|R<ljz_
ze<P&~XFv4ROWD$vy0;3XsL}BdqrH*xiFXN*(D+6QCm<ANAQ5IaQqkdQk*kTp<9=9L
z=4#1-vcu9cS4$Sf{jfCR{&9FHfH${v)}*w{yw~bJh_!B|KV*zfdkT1-4Ul`rq?I<@
zJ#1Yo-5Ulek{KQXd`uc?10OH-1jswpX?7I98VXmZm3BM<fs01fX&iM^X%HYcj7_r+
zt@ZNo*tE=2;Bq#y6kWIokaNbR+3T(KitxC!QYw+iJLA&rJCO0v2+kRwW<R$^l`%do
z6FazQG(L^QPS;if{53Gm9xTyI!xPd<nM9%#Iw9S;3%>(`Z+&4EOtS?gdiU5wrx9h&
ziPY%NaA6PJVNPewfSG>J@Vh9JrQ7It8<W#GwI)~gAXiRJE7Q3vt3U!1wD^SpNZ4j-
zIx1dtL1KVY)6JT5UxI`$r=|<1OJ5R$`*ND?OUZ#k(`;W#7Wr}-`SKjCmiQsb8|kb?
ztgKZ3!FVI>33D%+<i$7PHZjRSLL1Qh?au=exNoM5is`i*Bp$xa#<bPTLvK56$ct}N
zn<l&ssCU@cZS`>I9YhDWs>z-BPP$!t*#={r#X{}SW>#8Ozb2nyv(l)33pfsZ_&4@g
zJ3SHlo9$<lyYO%1XSxYxk_+dsS?%<DLUU|4g9#1hkeh`*u=d{>ir8@I?{-j`{PxY?
z(+Dby<6z~R%kF5eM?-VdvYf&fcYrfDjpPyMZIJZdW!3HVWa!<r!Y^e)0V+w~P2*Cg
zXoHG$9@|N6<~d`hf^;5@J;HHNkIrW~9rV~^^V5o0?D4e>w3(mAFWQ98s74o{lW0RL
z`Rt%)dsn{rEIz*8FUc1j^h$Lfp7WpN5eeZ1X@s8W06*$m$X-JS;f2nCZ$X=d=?-Q3
zlZe<m4DXV3Rvp{hLGNoUNvruhQ175XtxYTMi$Dbl(}5OOSV5xK+H@1~LkN&?Vr?2}
zjFJvW1Zr(M^}Y;LV(>s+W(TU|K#yg1ph^}6>M{z{pK$Nn6EwW*(pjH)FrSXOSw%O!
zF=MytIhi;<Gol#l?8psL<gULNxgen)Xc4&}(b0N}N~+L;6uBGNwoZDp&<5KxV4}?i
z@(e0tv;nn|Wp_qq*_f6UBbdZZ)2j(BAwkMN+cM8~)*o<%w%M@)E?RA)SgGKR5W63-
z!^k1wk8BqNdF*~fF*jTwA$WIXDk}7PuJA6WKZ@R6)E~CfsXzE&FMG19zBar!t#shi
z2~0HFn=bE!V^qc6)9`+l&N|4-yXp5BpOH7I(C<m!+@Dtd&ED#ULLYw#KY|Zi?6>_0
z5+mAg`w=AkxIdlxxAY@1xE~MLev}+&aKQGXWRV{akRLxJKjs_WW9h6@aN|<9#a{WB
z$Il)w)wRrDyX%dWhR4#LCOiY>lOK<>cY5eWq2sn0zy$trG6PNYd~)9j_FWJCp74pZ
zEUUppn-gi2)%Z0OH3Io9`|Tb2q|mocBhIBpeRvxT_9S!l)SnEWv?owL_uk1gKELr8
z%-PHEo=In+0O+YdYMe>qcTJSVdyzTMrj>IvIm!m$FY$Xb@S)q;wET=TNc3<vjeD3h
oEkMGYXVZyu(wxNL=KR4nr{qBQA8d0<7Mb%0n3Fy5pr_sc1It;ZBLDyZ

delta 24483
zcmY*hd3;nww(h>^ZtlH7AU7f1eLM8N29mHOVN2LuaUGW#9cNHSW}a_+I^#I=W;FrA
z9wZ`Cf+#ykFbD+cL1d5-*+dZ-42ps*f`~{^_Vs<IsxH^}2frWZ+&W*KI_K1>Q%mQ<
z^vw1bGqrWjI;AeB&b87#;a=t6-)8IYbw}!*&Do{<-Q|kAcx8_6XGNRb{%rSy?mOG*
z8&~A%Z49^HacJy>RyY26vJ+a{4E$f`TiI>DQM)?xr@M5QtCOM_p6Om?rq^YTb7k8<
zp=wIa4Z52?xC|G*=(;35MCSS|(n+L0Y>_!c#^QQ=A*&K<Vx~7o&(k#mQ^#rsL}qwh
zWj|&qhU*ottD8Q-$&~@hY%hELNp)hyY_Fn9@Ei!v_G*Sj@>U%S^@R!-av7e5US$bJ
z@Dhv6*0L=0l=|N_U|I4m$S?G2c~ag5`Gwwsj#5__bY18zTmoGUU4^bL=-STkEb_V<
zy>6*2=Rxjuug5?$8WLxD4EJKMXPr|IaaG)gYpGX>nt5SX_#02h@=l5yW&_JIn;WVu
z_4<pXDsDh7^@bw)RWW`vUb*O=r&VXamA2(QKwat0wbb_jVx`vzN(c`iR(c~beTJqh
zuAt%B>~*}6o%}m>x+}5St9C@Q99OW7;rY<3?C`quw-mh%=&@RkL-4Y9{824;_WX!E
z(*Xt$-{6?-Ue|yhanR4lURMwO3$l7pf%G1)@<sNae^MWI*5JRw+V}wd_IS1STtASI
z+v7FzxwS#U+IzeOUr1{cgIoJkuj_MZZOMb&XO^`k3)bGtt$k7G;50mkyvi}JEBoS~
z)&F(YfUvZ1LW@IQ?FOlZ6KIFL9rC0WPH1t+YaF|-g;Qv8*z5ZGx)z)VJACE!bl_nS
zR5%MzN4%c=AG6@Mqh3$jVm-=j1EJ&WrN652UmmyI7*rIv@wnwikWlcr*AS5a5~#<$
zAu*poszgR^mz~h`X~$bchw7bpAD~V!@88r=%?Z1Y9Q1L*?t>=I39sRmM#v!<uNkmN
z^l`#lbhGRuNA_{T+vz6V<b5Cmob)O;nr*{BefpWl!@qj^k54@-@<C8>iI2MeAms<p
z==!8Lw}S+yId{^VXZ1yM?xZ&uvc970liu(U*)>fiQvIYiGFb1)y9RZNwfno;d)O&^
zcy8j_eb8h&<;{ypP?}7qyvdYBqK{MFv}HoK?BkR-GgSY8rdv>f+s?3se^)>J<r%vZ
znr>%o8`5+;V@)@Rpp!G+NK|&>K__Rtu{-5JJko||yzx8qAn&7%;X225{6h`@@|@jA
z8}xC`?xPL*IOjDwNzgXv<D54fu}JiB&KtD`(nj`i&Kn!5cj0}Y!3B2Lb82b73w9qW
zMt8xRYf2OqeO&McEKn7FT=2#d`U+tR&2U}uvNg}C&A+^2V`$Lximj&xj4NKlGPnke
zE8b*U_MkzHE8fg~(iWQ3^NP3lUcE2ZQ#V|-Y+H?5J-F5<7nY!+L(f`YZd{`1=%dz`
z=xvecqt;i|PhaQe5V?k{-lsfbE_1W4|MYaqK2fW_rVIniipyNU)%$WqdJHPLfUEa~
zI!m}*z}5RoyILevuJ?5tCRNUb$_6HHy|4Q(^{+j=!?swovcDds{&&u>8Fnvi(aQ{9
zZlT0!i(Y2<yw+rHi(Y2<kk-Z2Xp3HE_@Z~qUfRlDX82-v>HiU#>;}U%CtEgFeZW~W
z$L{3@^fJenYsJM4=w*&C*iFLTfL`YK$}24rz0C3Td`zTl<p%W9fjGS$#e$_H+BwJN
zAl@&B@dYcWv@=}ueSE>X@z2i=f9elUJk5f?@!Ze{U(h!`iG>R!`kwET3l~WAJ)cIn
zSLol~a4qpEadVr(^4hDF*%9N_i1R_PEVr~rBrWmDMJ%Ya2iy{$T*N>EZix?zSX-=N
zA;YuO=lIy?)N`?Ph0t=TPwk}7ra%p0-El4Vu^orCSIR*Eb-7O_eUNCo+^4nW76A#=
z<-YbE^d?d=L>YHgcI!m7%vrw5r?io+Xr)-?Q$^xJBM7bX<rnDta<~w}VXaT;Xl~D8
zzk6Bjm>o1pecxFMmL*THYi)T-<ZDTO9@SSNA~$9$CaVdhdZT3yaH04{%N!tqvC(IU
zxeAhme4T>aNg*o4w)j}yZ#-rN2>4}-<rk2U++z6!BqX<xUwA<gqBUo`k3IVDHW%3b
zDXQne?Y0V(Ot;%AP%_<ac?5z0+HQFyY<PD194Dkl!f3hErv`;b!sL<N(jy>%y4&&y
zNVMH;c?2X-caujVuuYgO*WzPuPFIV1f`DX;ElF-^@yVhOUm@AzL(%skg+Z9g*1bOE
z0DEMrx@|cAC*llzpzO6q1rjKGeR2f^36#A)tbkOef<zgx*H?7FC(2Y}h%)tapDa@)
z3qkM&d*LOuVBkKVtB;<q=W=N@cF|1O?{iiEe<qytrO$PrC{e@c)^pUSeCzvhiTZdA
z_|O&~M9~5g+8*`ELKP&SkNRYx3KH5L^%Z^#ZK+Tt1}~ky_PLJxM4>8qkUQp+g{ows
zbo$0eg(}Ukh~YWub96c*9U4KmCw*#2I5a{I{a!e<2MDP6y`>^ZwEf<4C`femJvlT3
zuSCe&r`c~`Ry*Hz+L|C>64$4Sf)FG`PWw<0k|t5ZbI#`&=NEH5ik9cD&-ExNa#2PW
z2q<#VQUoO0UbGYe3Dk>LWJO7l%RI886_;%p(&VxgQ)mR4%M??5BN3&T8tGTY`v1R|
zz(>#cAiM+;C?oySOCW(V(l5OP5?&hVFC6O^ULpqf(kQ=cj9++3@*r2|mtK-AcxklX
z@>0z3Oz=B8HAv&c(Cq}jHSJ<#oJoG32z!8lijyoAL89#>zf6Q6(bXhByi^7+#Yq3j
zY~oC{TiIm4;^Ao!Oyc_6w6jQvO!ns)`t}^SDQ<XP@jIHc$7iY^IorSDR|9%)K*dRk
zSJ~#*)V`&!T2NpD>Q#Rm;c$?EdeskyPp32-r|#!vyUkJq&Z>ESIdQ?ol$qzx6}1IO
zYUPg?b9F!hW1hdHRKJTuU_LHn<7TV(R4ud-$W06Va*2s^H!bwboC*>M3;oEc{W$`t
z#jN8Tbzt>k8-b?dVjF>`<6^%dmhm{Bj*I;$nP{&Ur>y*jpJ(NA5YYY&zg#UrLh=p2
zTrEMOw>SJ&R*sXRD;6D?gKgdlyK~CNE9}lGAFuGs6%rzVSmDPC`GE)iNEn_Ce#hBt
zXr6joPTmH;nlI*Vf*i6*L`6>!fZSw71xP?{vZ4YcAU9D|d`5mrz%QPU{L07K+ZU-1
zI&1J>5%Bl`xsUvsC<Q=5?jwJoh$m5y2>6fuojyju)Ao@V6!5O?epeN*cq9it+wPB*
z{Fnux?f$a9dN<xb8tn2bMP@8~-!qT0_+quV1hl0Dh0QL%CiXH3?#^9)Wb$EL7D%74
zzb#fD?f!`^LjL>2ujTU?N^t*u;xF{-J-7(`_o-ho%mll8g<8nsjjCA!hFI1U+=ZX|
zRk48ti5@=nV*^>qg<;sw*>4-wUX`Ew6|u=lDCDxw{Y44cAGz#ve>$VTL6t-TyA97_
zzj6%e<&_+E&lg%r*0V(Yi?aqyYml_rIBcaBNC4rmm0Cc;(ue(p$7E_D22U+t`CVVj
z)FOG1J7T34$wF#5%2P`@R|eaXZ~aQdOorLjH`K1xAjA@yP}(4tzxC(R$$=Yc)8^z`
zf1#*tK?3_*KQ^i~3lg+XJt=1a2uPl^W&ub@p0s8GNJyT%J_`~G7SA&bv*6+o{2$&p
zW2->>jx*L=z*hjBvE~9u0G*+^aEGqA+Z&z>e#aF*JGWFF+Wvyyoll!^cYD5guzTKA
z<DrXwg%|3?M37zd`%Nl9KmzxYpG|#JjfO7y6<&T37mY4as)+MOpf3B_?l;v$=&~Ff
z8ez2n8?)dc%*UkRsWlzrnSYu3VEbBA_3MLRoh0cnl8soV4yhVxO8bI|!HqO!o&pIa
zMw*7$8iT~(Mw-zW&(%rNa5Qr+SG!e>wh<^-jy7}s+(T$XjZ9OV9e@PFXcK2~L%0sm
za~ykWxq4IeI2(ad&^R+!r068imE+6~mJXCF$B_=VVQeYGQ*Sz!vQx{|TRYU7m=W8k
z1WVE28rW?s)Q_qfEMPDJ++Yn3BvflKWfBGn;06<x{Ub-f$EobTX7zuor`iZq2TrvS
zXmC?aS;3|F;HH|G_j@R5rN|32v+7FqA!o@<Q%+uRAvBZRKp_kg-Oe<NI_U$s45(Rb
z@>}ZQs#$iol>28{7D@3^Y?j$U<bIGOV<Pw8!4VLxb6LAp>RnZHZ3H?2nQJ4^8Zg&J
zpae3P5N_iLXuE(-U!~qYV1bQ5hlLBwTrt&BJfAEuJEi3)D4#4aJ9p7P74}CyX*884
zmdL7mYVbcXe^Uw_U^LnWq@2=d#TUK;rICC~B``?jltwe&WQr1)7|1DTv&3|D;kjC}
zpxPUz>*xAVghbl#EH@qhG@WL3`2IgU`kUbc+28-E_HV!3R1Mva@uev^n%UNWs)3qj
zQ>HgCp-QtU%My_2rrE>-6yPHG_?C(Me?xfSAO0}>+3>SZJp1HuF{rfSgvs&sI*Bp9
zWsMPExvUHlkN|#*f&`hM4U|EUWZ7?5tMPtW8-k`l)`p;v$(r&!4kCcann-hBIx*mk
z;aOukcCimvtNZiTm?(evZZt!~TyKiqC<q{~w?+#Ri0iG<f&}7v8tqhC4l>l=mTdhR
zb(*tui!DSW*<#9V4;n#ei-{7IvTcS2vdt7bK@f1sHdEFdAR)QUlr;xPNNzK&nj=Hx
zPLuBhhk$@JcUq<Z3B`9>rT__~ou({3Kyp!}+p%q6iejumrsLJ@=l@d2<m4STRiCg$
zG1=m%umx-Pp6V$-YK;n?fOyn01xO$sB~!dgkz7ogA2$`#eBL?jN*f=0<UMsnDHypt
z@bQ^{Zz~ogkdQuZ`uzG@Aq}Invi2L)b;DY%Ar<qQz112LNI<ljhB&VQ35Zq`%K+sE
zkXXf9&A@Fu-iZ{)K&@uct@?MO69}ATCGV@PRcGx^a^QipX0AxQ#oTUZ%}6haN_IPI
z_N~%y=7WUEFR%wUs<&2Ouo0+kykN=`o?>2fTrh(fi9k8yg4v}+-$@};Oc7g`-M>-&
zkF&ZiAm;+O#16>y1SE!97cj(m8c1N&1yX7KUjhRiPRh1!R^N42PqHy6XH2p&C}&Ix
z$oW*vbH=0q=94rAiia23iLGjD^@}zHl?^Wjaz(~0=4Hc+fv7lX0|_-=4D=}Hfm}=m
zpB4~-3<8qV0y2<6qVs718OR_ZIW1rXaxs++GXp%3Zw3LY&a`!)x?!e045}Mu24o<k
zF_2~k5XiS8jyoHk*#XCw0jJrQ9f*4J**hPq-STG#R8t>COG{_Ovu8m-X<YS@syJ)#
zKaqRDM<)xcPC%lQ1pz}8fgsVzf&fmsDZhe5eq9g<HwJR_0-VATgP$7U&MDwp9B}hv
zgX>(#E(%~vSbzhD>r7N`ueT4-uCNc+3;i{*hV5!qRg<k0l>|)zxuAFEQ>H1<K`ekE
z0o)Y80{C-|pcw9DO#N8>Ma?oBfud`fJuI3r%L1}2>C9)$vH+Hic6?ZHpnF*$KH15q
z3_jDU0Tq@75|8uyG0DoIX1{*ksSoBILyhKu(%q~G-~G(+Uk`tV9sXGDT?Lk9TbfbL
z0a@8}<}<1}V3zRt0Fujh?WPalXz=|i_TUb6(12Ao0<FTUY(vm0yec5q@y@)AUlqVA
z{4q`I&KR?2O+a~<?cJenufhK;J!np?v5i4<YE8fpl|7`O$C>~td*Nd@e7q)5{O)xh
z(_I5jh78X;0oS_gK9*d_uC;wEneg$yI&dG46pFzP8(8mMYF*U^TPvES8*Hs;mTs`Z
zyEC7q8v?kRsOCe%B;CX=>{9zzZL$$)l5VoCL$&>;KnHQa+?h|(O#xgy{E8!Bl77IR
z{f|1l`U4w*ChG?QxlixRC+i1+xHyvriP3!!D6i1pr)<-iCTmN!aJRb2S>0k|XuxQ(
zF=(2$1mYr9Kn55sfgTn5djbQu2K%#S3yxj;?YA*>*kXS`-Zynt=-Oa^AkPYT9T@uq
zML~UTzOJ}C7@mnmju*0>K2_&v#>67GMi(dU4zy&|7b#wLpnaP}4M>21<`>QM6)Q`9
z5f<OJyfHpbDpL40EI!hr1d^XM6N$Eyim;@KwxFIbQVJ+;@sZ{dNM3Cd$-nXwFj4}l
zPDZCcm5pij1<f~}^c9UK7h&TmfD!WzMG9XE@sXk%BtN?*5^WobaQ1x8g$&mP8Lr5&
zD*M49^-oIs*+r<$Xy@C7Mm?9^eMGJ3Ik!mGW?%wpZjr3bKtijzG#=V6cA)_*z}T@}
z9Q?;;{=|N9MD?;=N7Rlb;EK&F+VDo#5h&*@AOyPm=|W?Eopn5_R+qePixBSXcBf>D
z*GZ%w7Xh_|)f`m^lq|7D$UIAI5lRV5NQ8pE3mwWVW#1lE`<E=WMaW7^i!?E}(FP(*
zi*9JA-^4`_N6XpIzE*E3S#FEagkN4Hj}E%<3BSAuM+c8_5rpqs?8C3s$IITbMQAp@
zRU|97E_^n=MZq&mhc8MD&z2&``RpUd)S$b=mLgP;8}0{I2|43j_WAGBjm2f>I>|K<
zT!5YH<QI!LNT__S6Bh9e<k(WfGb-p<nH}ZV1}lkCLB7w)ah2kde{4{h7<B1Jow(#L
zm6!a)W5)y9k@9gtoKw>wjratYj1Rg7{)mHaCJ<*%E_5p;-R5Q8owRxGl6gVtXK<n0
zyrA?mNC?df!UH8-1|Ju)-BGRVv4yxT<%zqLhsMHS8&S}Kgvi2RJF)u&iA1w7*rBgb
zgr6Vb=4xRuuMfYuq6WCjqMNIQ!JfVN1#v0GQzQFzOzU0JXsbr?)EJa+56}kvGzKxz
z26ELvHL-0mZE$rHt{tUnRQomsW%X3bSDdDxA@T@Fk_lqrTu5oTl;UdzyFISGUbVu8
zpdxNXP!@4$10_}jgW?_<Bp_A<i#zMjas+g@igitBf2vw#Bhbcgm5o5rw<;LyE>)!E
zW>v7FQm^6&XuFynOlbY8R@(@)G_1CVLBY5>DC^x)9*nDlsCVf|pj5%q@D6)8sohld
zj*UQf((l*^v^2aElsk8bK!<mNokIG39049%$Mz+)2ddZE2r3ZP*$7m}tqaQI(^9@P
ztP94Ibb?7rU}@Nv{e4QiBd2<sjX@RMHXDPMhHbVMv@~oZEymN*P^w^Q*p<ChtW9)Q
z@3JvyY1n0B(9*EW)`OOYU8Khfx=}7waHG60`(77qr7~!rjgbqCeKrPNBkv0u;@TfF
zz}Oc|r1bG3EO1GDD5&%>2eR6(n#p#RX-`&xVZ~TmfE}{I=(hM!&=6HksY18Khk{+Z
z>%F)>xC%bP{?=9NQ+32fpqt<$!CZ0rS*p-Y@R6WTte7Bya3qKolM2LAy3{?!PIc9)
zs*c$RRGl3Q%E}6DfN(5mmdg;M9sjXl&))jO90Aw4C)g9+v|m=8uo37A_k=wPy23pX
zG{osdDZj!!5$s%||AZr80=Kf9?%I7-tu{gjAhg;D9e~gplslDDr2}+m4W=@D$thLx
z4A&3r#qL^V)ekm89uR)85%PfWLr~V<5COsu!C+YL&UG+o&*tu-l~<j$5ey)lwGj*;
zoDIsS7o~~;gtNhLRR29k$j50R`(qF757ifKgnS@ev=Q=waM2z`J`gU_D28){0>gDR
z$P(q+udA-w5Cw3?)u23LEmaBtaWz=jMLMGZ5Lbg`-Sm4oL`TClf^90-?ynjVx*k#;
zp~Q&L^|aLy2qQw*htUxTBSIJk9X6FJh1deJpH*nLSJ&AHg+QpY5ek7&7m_6|M1W8i
zN*C)5BEr3Nig=(xn^HZ_hVTMnoDJax#JG^$GL$M_K#U7T<JM&Lp^(WgtE9;~*~ahz
zV{%B=aixk67?VSJNofinFeZmGoyD1Bsp6*-!$0@ZJ{mC9hQLX;YidY7`9K>$Obvy4
zNC-b5riLne>F;3w1!I_oXK_ebk{#1q>+605|FveR2~8H;qcH)qI3zcZ5ChEO5H^og
z^Mgdqzc>_M5)$WT#1K26#*piO_$Ieh2~aT->90jfmxkoZ4kloihUD%RBw&|@u)F<2
z*trP%ANITc+Wvmcwq`}ptl8GA2oTM-W<`K#Ce2VUE3Pu^Izo>3vy%pB|8{nGCxm;~
zI)W~v)qEWrHb@&&z0QIL6Si9yl931!(Cb2l;$Q?Mpx1?PUVB<V;Ohn!9ju-0x50*>
z1KSOjc4d66-w-myp$JGoYzW~r`Y>tN)$nW&Ia;z04ABlb+iwq{ba@2IbtUC?vRiJ_
z9xLA&k{2pqqQ9M?B5|Yu5>Pus*t}5{)|J-!PeMx2ye~YMtskPLnEPg}vL9H&p=bcb
zKCu)7$pz%n4iadegs`+vq!YewcnJ`49AbaDS({L>H-uAwhtNqk((8+mQefWx;_PZa
z>w1gUuN1T>dGQsHUxZ}60TPg3givqnCUbQo4G*%Jw`eV82W=Tr<6uY=r&(wNnS&vm
zW(|WD-3`x?kmFj2&AnCog>i(`phVOiYIu%?l<!#HZQAc@@IRpd_y9X*DF6~+$4CJR
zQjiGJW1)iY5Tx{CfEfJ3=$nx1L`d94OCIEohvZ$fWMNDCZHP`CD4BMrv78Dig=RcF
zZKzgSg8y4O(11>b<b60A0_#)=_u*7)bf-G)H2e8b?WO^zA<pL{m=HM~@`}q|kPtZ?
zk}vl_qPjR8O5e-tK_dA}rqk@eP%Xdx>Cjzw^ZC`Cq|Vd)3b5eqny2i%HOcS=_~)%j
z29jFRB)dv}=}uML)et{IdISWgWYB;_&|I~G1|*QKT5}B~kgn2P!{Y^ap5Yl0c8m@4
z#|v&+i$;Xqe!jKLqre#%R?>WH83&24p!ta1AYqn~VT^bXww8HhjyiVc4sA%VF0AmU
zYs5sGx-j<hx9~Qg#;~8>sofSH6IS@_LK`ygm@sD7ECjLJz&<zZc!{mQQ+uub#IU=)
z{v1RN(xsj~b(dBftPd-^v?V4)>%)lu2Y4H(@H}gKxAwE(^I^FIHn<AUhp~yljDrXy
z8raCYwa0@EVUf^?N!&0l!fxbkV4x|?b&qy)a7tL-s2O|{J0*-ff`c1~z~WQc6ZdF?
z5>ss)+PqFBoUydW>0x+gg&mv1PV;;YJM~j7KYQpN?K@|OSz)9Me)!&lhBcQRxL2E7
zIyWq%5ljqZZdmS4Kti9nVeC#eQN`GUEZvx0exJ6*S=|_xP6roRurVyNAV_KzE)>-s
zNMJOE6G?rY$}ynm+HCd#ZJ?`qt&Ks)@oU3!7tn);_}Xw#tmz<uu{Mk~oeuJQ5cO`D
zpMSEuey({+-<5WtPw4#Juv{QO@}^eo_8{ABWCI`9E)K!}iLf=G(A^l8H37Z?Xk%C|
zU?2gsF^te1MfNQ>JRgT0t=aVtYl_n0<FFbLRxKy1?jozsWKR!+X1grY;tK$GS*8UE
zz+Gfo{vy1bO#4}O-Y{*Lv+6TTDR5zy&%*MI93-_0N5uLL5*VL_GsXH}V3u+UrG2d5
zquSr9_t^+!*nMI7kQHr!urC}CTVs$w*cZ0Wx66q<l0EyVhV$(sHU^z59tq3iQ8WU^
zk#Gl*jzE%77~3OqPC1$Qm~c)x2uL2YyaN)F$1LxFgygZX<sJME16SOO;2meblXmBH
zn0V6i3)%qUq~#ZofH+BhK?R_=Dh$t=Fm94-hHIY}oC&L5eG=uY3b@5{KCD~`v!{Qp
zO{~FxMf$}Dz?~1v^a~Pj=fm<j5=blo=fj0p!eR*^244a$gk6`zVhNBu$XyJ}B|x&U
z1Y8Q!5<rD$1sT3JqTFrX7-oO@jds^?5MrstCk(MRB0~=(Zz}6@kif2u$k*Q>k>6`0
z;k)?RF_GfBr8W||Q~!?`EdpV51kV%Rce1i4v;-UOQ}fyI|I%JA0oximDKt8wiR;n|
z9too(xU!=iNCgGLI9B|Gc3;17ww@FR<03K|(FO?PA`ww4f+U$pWlw!NJ+i4ZJToGW
zPqXhlq4{$1W<=CNF-0nAio6=(w|=ble>6|UtCmjq1jJV(GW~!A;;RwNk-Z9(s)WX#
z`4MGd#AR+}cP~<J&$f9=)15Woi9w+S0Om*JV;hhFm>-dkZ9u}E^CO)WM#N(qVvsvs
z3nKEdjpV?73nKEdjbs66K?IL&I&($PU~vSOt)2K|n}(;gcnN4r39{_sh<t2Q$t}A$
zg8QE*xh#;H*ny|Dr%IY^5i(^{M4p&ca#J=%aAKC?BA8Ok*x!GrWgc4=5$B*V2F;~q
z5jhJ%0(V(NUdn+)lq`z`ZsJt{k-Q367Ad-sp9)D1oeC|B3>wTg&y_U)npvCQYkjJl
zEvJJ?Tq`(1qTA+(+$(`Zx6Kh8dXJ^htE6m`WzYRy8()>RA?SD|YeUfSN;YDMBOZtV
zA{)UG4;_J3((%e_HuxE>ta`PLK*uYqZ3H@ASsgJ%9)t)GR!5Kr=h8A&Nfprg?3>SM
z^PQFJZ5z{x%KC^rVnibdt&d=J<`0Z2aiZec5>Y-vaES*-i&)n`YS(JOv;0cODO(~k
zS3m#&TOtL8yj%o{;Mx-LeuUtna*-H3S8R>AK8%Q5A$gGdAR=>xWFc2<i%_nh99l^y
zGdm*oFQF>HfnmWCugE|`l^qee%z*^tj);{=E9q3GCBjRzUw}aPwAiMkvzZp#lyo-J
z5|Qg18Uv{%f_zFPT0YA9h~sEPlxVb7-y3loyhO{VY5Y06^Uqpo@N-NBDox#BVrG0!
zS!5_mm3*2A``C;>Yj*_qAs@*$RGICIU?YOpAZP>XOXmKIc31Grh^)-OByI$i*@L_d
zlsd?s`HS}R;K7Kj@bY<CbTAT$N*s*xFgs2-ha(EVYXUfxMTaA}YpUQl82S<Rv%hLR
z!$%^rn#@<+XmccjYH}I!mb(BMKjNs*zWG<JET{c>8ZVBT-32t>3+%){w4a79SmOl~
zvKMH)ICDoEjQ3K6{pvZbf9O&~KAQp;jV{sD#OWUzfw~f5>z~u^4_&cF11@J{H23gE
z81c0TtEka_61--arGO9l8kuD<Z-gO_U<+!r8-pXF3crQ|JPmn76f=^l#R8hsqnKK&
z4GNBm%8C+9v>6peMTw;eZ4g_d*?-k)_XkHuWrYhS+Ki5(!o?{F+F)9aWqWJ2+k<26
zHf_*mEVaSZMH|e!@$AMCT3K*>R93iPqRsdyaxkt>&;|#W6WNpzT19wb^ty#Kw3!%%
zg;r4^-qG+(i8@|oM@MLH8B?NolSUrsNFI1Gszh1qKeRjJAYpCLV%#8s@gj};R^AvN
zUt-}=+R)%jmM$H+Ctf05{=wTo;$=2|lvWdbIVwZABX`8hQMhy<Zv#inV97ddaBPNU
zzmD7wGsu2;Pz%N2hnZ3Qeq$iJp;jwmuh(f^!(i|SVe}dO%#223`U$F0dg5X!>e#@}
z*J<D8&5oi*;RSh58s4I)SQi_{Xr7WqQJH!038PsQmFpr%D77exb&*aids5UjviHW|
z#Ii9eYYH&o_{ONLDL_)AsC=LU5(tenNXofADfXIJ-?7NKO*R6BMN?GXRiX_Lnxb*>
zJ_95Wnxc50F_Cg^Pa@ySE*h&%a+baom5UU(5PB;r7b%d`iv0XOtrk7WaBs86#%r6Z
z-?saun(^(ZJZnW8K)f9_Ma2pd5N}6Ou~Me&N#VUVDz*Z(6R?e4E1gZBAh<Rvb0kOz
zu8mqbvL}u1y(rI-Z0SVJGx$AQ16r@%vu#J~)q7EyA|VK%_o7IVBUQMw7jk6OaUtq7
zhlbhE6Zi#jhkET$PTt<AwJGRDp4}%sJF5Yn-Di0gpMbs3@+?ST?<3FBtCwD6@&jyV
zgLZ4l0b7Jzc_1o}P0$7+2ckH&=+8yq%ERoI7qo!`4_gE3#ozNBwgv<e2#2Gxzyt||
z!%-BNtEkNC1=90PR5=;V24`!f&KfXa4{*df2omDoMCCdN65`)PWz7r{>)<!h!jn<4
z4ibZ}gU6$;@1kNIlsw3N8<p#zWMLgV5w+IAUKAhSJB52IK*43-TmA(JHNLm}3lebO
zU-xe>ij4Epzwb`fJcG{L=Ae@1yloB&l=GH<Aqb%J<X=3Hb@etpm!pmsV@|U_HV-G<
z0Tz2n>ymdls>Z~;?M>djCcN7N1fZ{3rUD7*YnFRK0{R-c_fIf%Z*s#ZRys}lbIGWf
zv@V#$jcMYi1Rx<YDu$mD(A80InyF*hu4&o>C1Yapqz_DpjENPAatI_u#>7w#(L;~k
zM2%+;Fl|uDc)J(!;rN&)ZtBp68pV*vX;$?nyVtXU3vo8|CBvkukIBLVUm#Z>lamT0
z<mzMAr0PvZpAr+3s@-(WQ#~an6B0i0Z!#f)1kjY2oKzqIG$jV3{{lwuV|b>;99!5u
z)3t~5rp45xFm)d?_4Jtd)dmOvPPaw`5`fcVGDm_0;Pe<wU5pX+Aq&l9^)s|CB{OXi
zGWE=uoJnW{k(n{fq&v9?Og)QzHAB0*be1hbK(j3G^x>wSMc&y?*I|9g)=k-8y`t?<
zs++8#g9}ZYVshvpfzcF`B{WD9iecgUhNfR1GXBc!?_blNbPiZ)W6<%$N*jaxureku
z7$F0Ul`$+xd<yr0A3Sfzly%uov$YCm4gM?UE<Ql+?U<aqAR+g5OwL`9n7ePs3fINN
z+$9E|yK7>uf5pVyl|0D36O(gSvM_ho#;m#9hw|&cW1@z=d7;*^0vy2-H7rP|@^34Y
zKmzjL*F&if6&#yIC=CGtqinW~LEC}NwlQcsu-S?wGzQXUilwh;z3ppww#6I=+0W)_
zhx4|@)UXJqz7$M5WiWvN;!ev<Ac45k3MP<1+)2Sik<pi8U^fda(C)6<ZRrFi5O!NS
zfuu$;Lkt!q5O&8<dC(PMUz)~y*rElvBHUvmkjeJM<ZpS=1_*m%32{vc5(s-@@(o~L
zqW01hjg;=SW+#{s*=v~;BsIEj(!LZ~2NpFf#QDkryH^UV1Ge52SO+XyLIe;8$d>=?
z2wPSeo)_YdCE1S_X<0q*g}7C`RFN^K#>G=!5P+N-moWztkW=GwW`YFd)Hsa!0sZW)
ziiY`Jc6hV)VL|10ahYhqC3f6j%+I_*Lg>3Ve!|3`MpeOpp0jb~Qru;(<Ua>llx@F7
z^Eqq46rqkLKsXzhp$-xVXX7%|K_b-8#tSdSMW_>lhx)m=>tbAly5vFbd|ZaQWFgcq
z#3|Hg<?|t6#hjH;<|JI%g<G|m+M^)E*-jOo`?C^q?t_F<vl24xfdu%h1gd_zasUaX
zW+h^C65?Kr7*GmfF*_me#j41O^Ao({DF=aX^Ap#NM$Vg`kl7hufj&QBW#=l&&W(#s
z{RjSUv=yYh+-NIE38K+fkP<{=0{%ZvbEz6XE>1W$v9eFJZ}OHVtk=uc<o=Zj;eHT6
zT!~+-aMytZ;>v_{KS&_1Ou+puR0CF%msYb2E!wB0t8E$b{_2FrpMX&t$gECyeR{o+
z!Sq=>?Njaf(zW<~j_ihj)+XABpBz<lcdt$0<rl4J)#UtlrPV;dYVTTB0}07@Evtd#
zZ7r)+lfgGKSncAi_&*Vr?LcCr8!g*`1kgsyb|3+?k!&|tf$jPko~;STk%ZH{In4U6
zaeK3m@73JSysZiAx1;^Yj5~xG`+@-Y4$CAU0lvdBBS?VnATz#6t42SJ-qVs$K2NyJ
z*XZxKyw1*lp^dBoOSl0IAm5UZ(*Y#pTM}|QfJEfABnm%A<k9H`G5B=YlW^@#i0L4C
zkoz<tr-Ni+I((L}GJiixZu=AV=>==IA1C49h+K&8&}6@5Z;(LTe?3b35&0Fj_h9@V
z_WsJUH%OS|E6d&>0rZt+Z;&KO_NE^d^~dF1!tnvC`BHl@aV&wfPk+j#KVEsANGPWg
zE`2q<^6D>Nc@d9Y`BMAmE#D<vH}gX?@d;x&nQ#sM5eJ>L632o&olwpL?r#<v96>C0
z<$(6rThIJISvm+fn{f5F(Z~zu60RGsqg_rYwMiEp<Vxj`=!nPOJ*e%fxss4i(71AB
z=&K3WZ*4fT-L-`4q3duXlFDen;g1=Kp(0U97CmI+C}hNuNtbv(COE(ym2_3wxMbP7
zq$|?<I`FupQV-z&wt(?xgowp@9M+yFAD?vfvxRB<J0U6m8V>J(CdNeSlJ9)`Q`k4K
zj}PN2sv#-k6-?;Wkd$cyBxD+rh<E;^qCdsZR5tr7ZA!^hTZUqMYEq^Rw1LdjB+>@G
z4eC$kVr<wEtxq?WlxYJ@h_Iwg8z3RVl1LlZ=n-Fkke+2pWkq)D5$&q`QT$irb$mc5
zE=$V14iYfSk}|J@1kAFe%<CXAyOt$mE0Q9w6GP<n<w@lA(e$LNKjoSA*~|&8O-}WC
zyC2H%>yz^C1&z?p`eX+&l|Z7O^+}W!l;!$Ug5QwjYeNMHNNz~VSqBo58<KKu013$r
zNh{0sr`ls{l2`6SKtPwRwhpu(-fEAP3b(EHSgCN^n#8nQa0BMu0K@Z5(lI4_;gmMt
z)8U&Weq1|>P6!5&ms_(<=e5z!(pJl5-~y~Qsqsg+)Cgd$N%{j2l<5bMcTTfME@}(P
zPTMl%=F>@8x1$YYPA5^fPY@l!&zF+f@=JIt)9q4HJog0@VO>fViob0F5>l7QMVom~
zDz1oXQ_2gh^|H39eQio@r{B#rK(mo-;}z{EB_mTV@$O&%clXFtVH)$n4QO)r$W-SN
z{#thcd9se(cvY(|sY|)U8U`l1uS<0ln>3IRsY~H)4!xrtK%N`J-n^>aQZgpx5)akD
zgvgkbPuzlngvgi_Zb9j7zyR{tI2OOA-BdCz<r0713rvWNOXZ8pSC9}Hm%>v!df+>N
zYU&A$UDNuPOh~!JyLB)jG9eYDxlLoC>Ulz{s-GM_&h+YE%F%yPQlD~(s2jkat=Fgg
zWm1Ap((6;*%lX6O0d&Im{7WPC0VU7d5_EL_ye&aT=g*S_{UCh+9d|dpbW*>ktRdwR
zw~F9Fq9NrKe|iQaBpOnsUG*2}XH)|X&)k&bqwLd8y&=b#o5HO&z3v={81u|eDGOPi
zTkm^6{wH?P-~(-bs=aU@NTAJ6;n@h4T_7<%=cmktDRD1E41Qg*Acfbw^e5OP2Z6PK
z&B3ou3KyjM_1Cks@(!f1YDy`$nXfBsSR1`-_M%(QaXt)|NEK)RPc^0F6)Z?D5D<_4
zK|+_N6dwJP`9Z?qO{vOT@lz2GC;8`|x9B59Z_uGR`(PX0<s8;*cR}&foRZmSAP@EC
zl-wPH1V(cTyF<|hozpg_LfvH-{3fJ174D{Aqc>gyDd%lYDIaFvQT6BCHTbVJ5XyO*
z?OrJ7ZMJ)%NwArE5k{q)w>cI15Jshn0<fZ@*phN>ONoj?@*uZ0B`XTaLPhaGiYkgP
z^XNpl(D3X^IWDA}<_>3=E#L1hWM8(^-!pcl+yQ<aQApY4KPja%e=*VrBy<DKXPX-&
z%=VuYjzloqK;q->l+rWWEBvcRpL}xoGvO!x5Ps_EXTy&^#ma8ce7%1C^fTdS|7&>o
z@u&ai(I=kb!zU>r#vc|F3C!IoJS-l_F+qL8%JTHV!B0|3F_{`|XwCT~g>4HReixD-
zT3AD#UXf@?DW$Rv{YIfB)vdce&cz!cdmKpN?}lB-p?K=Z?k-b1XNwJegR>fZo(up*
ztLlMN8Q&ce3Frf<ZbQhYoP@3iQr!pZ_)8O@;kbjWbAjGBc+ggkZUGLGa$*38(nGAS
z00TH=D@V5ghe$chFW?}79A;k?=>0;6Qwsl~9Wl}7a0)-P!(Y3gMhLIt*+Cuk9nR44
zl)|$Fanb5{s(TN8ml!6}#OZ8zuYSK0K5gqnHvy+fC)yoA3aR0IiY@Z%dqU?^3ZEpz
zMXU3vUVV_G6xSeBNGZn{_I5zO%eb7vri4yH2T?A#nnLA-)v;d<{wJ~*_%O}YlwbT@
z8zd}uHHFi83R{o}+pDQ~ZCd04V(?sW&B_Im0}ZaFaQ97r9ZIt3HuV}MhBLIH45BC-
zomLX&5yb4CBE7XAC^41r4IUYtmJ=2vZ!4eufrL(@)41oEOVRH&JQLE6xy%#P=NJ>x
z?jR3&FNOTXv{K4Lp6v_jo*+o!6nun&6Vq@CUCnq&mwJX9iLzjQTH&dOm}pa<M(Qc&
zZ9q+8cZKxI*d!Z=B6t$vV6zSpDE53>DUSx&oF!U5TNBdrLtqFe<1<=6pN5mi;;|2!
zBbHywo(Lg@R=<{3M6iO3R<EUTltGgOBtTzFSKPv5mq;l4TDtOPx@^a1SZWsQ5!XwC
zv(hsB!34ytG{XNW-UhKdn>`oTe;1maR(eWYirv}iK7IA66iZ$T-Z|`sggz}a$JT{{
zcMj?D077Z7;aQM&yu<#T(C<$yNaJ@VROJuGreR51c{A<OuhQRt94t2t#LHGC^?x`k
z-$=U#@rqY`17=g&^}8Q&FvO*4>>6kt9!#ORBCV`sCsTS=4gM#7{s=xsz9L;DR&S7y
zT9L-nDGE)H2+bAg)Jhqe#NeUXoR-U!<e>NFv<ywjqR?zkBQ*J@doaSmvpTJ;NxRIA
ztTC<cd<>KbO?-nfSEuDqQ9(kd)#)hDR#1XMb9EXCLFh#L#?|Q_YoHS?l=u#v3~2Cn
z+SOHmnGOwx7@l|2jt|+sjLtf|o5tVZd4ZO)Ar!ywXGa(7`OdrFPs_R=T=e&TTK?@x
zkm&FIGzxNByFenjyq`9zd2d9bj^-`$tMnED3;Au?uRH7bGc4O|SQ^H*v^-WH!iTXf
zje}bOORMg-bp9ROWB5w2#3>MeH&AjgtZnHYR^Pl4`relAKU6=5_qlE#_Rwj^w`r&O
zbxwH56Mta44!QH#D>v&}_OlXwm(yrT%NLG58vGv2GV#I@B-8`VZ@Jtc(bb+bZn^M|
z79>7?#?-F*!=cYG;dyw2i8h~+C&pvkXasV9c2rkA*BRPx&0lbdP4o9nngl+Yz=v2<
zH+^~NP+H+nFo=mphthb0@sVhRX?v9Yqr3ib=xAEu(TGMgYmZViZV-(yFORb)d*~a(
z$J2^<n(5>7@^~7T=>y>T8}XO2(vH(<_7l{G#>q6^08#wkNb!Fvt^7doUs(eZ5eHh7
zejqX2Q)#cLPeDTEQ)!%!Q^bKp#GOh<e~`0)7<?9dZ_NV9fwtdUvp}+F7JN^$;9)q+
zZ+On79oN$Arxp4`9nPiQah_KF<eBqnw!T6y37xm{1h~LEPk91=Vbkp=k6cKz8!Gi)
zp$loH7k3G`XmlZsOHo=a{bc%!Y4&)fULCq<r6q7V8)=Cy=>6o7OKJ8l%81aVv{EUN
z$Rn51z59^C&<GB>oMz#kSa>g6`5Rm`x=i_-UN`tDQC>;2fArKVLs!yDl|-UUc_rO{
zfIgTvf~l{j+0LH&kl0nb5v9tj)abWx+f9aNWX3Tz<1~N49;(nyc5g5Jc4K4)7n<b0
zo5+228D$Jx-V5mq{}WHl!G~4qGEuQB0*Rs3Wjc4^jspqD)n!V?WW>r!4DPtm8JWH$
z2da$D$n+&y<haopIIfk}L;MDzKI51P{SG+8)B5QJthTql+o;dDL)?WXxo}cO=_)1{
zNazKc?<L$I(Zi%nX&LR-K;q+MwhWdIPPW^SCnr;zPP`4M2A11b4+R@CvI;S|BO5Zk
zddoH#?F;M{YV$%y5k;cOXVwcD6p3+;13yk-qx<T~;FOH?waMK$B?Dj6qZyOjIF)Vb
ztKSisnvqL2n9yKq2Cf$Rz>6<slq%M)ukMS|o)45*_Due8<E0GZE6m}r>P=(6uhOHz
zX&IS2@TXn?H!XwQk>G8R{TN$brKf@{qwx29(1Qv#mce^I(FXO}%j_(*dD%7rm1{4P
z2_hT^)!KB{w_1+{r)LzgyyLGmpw09QejO!L$J?YC?C;eu(~OM5f5nBqa?xf+2EXDG
zIQT`_D{M7zLa*54YKu0nWcpO$_tlE)X2UZp<CxDbRqKx#vodNC56zn?H0NZLc@&zJ
zH6URq(BhFJNLXr4rjvL%4-zh$lR>hg%mNYtIwzB!Cj*oiJV57K0V+ArW3CmTl0^YJ
zmjd($JP&pUaN3h`Z15mL54*ywb&I<oi*G+ujAd4g1}H|CUyo6cPz|(*QIP0lImI89
zT>*;G73|bNy>oDdWqdHvW(64^^)A|gYG!=~A&)d?WElu1aWhn#(;^X|Y_mE$V~~E2
zGq&0a2XN79HHE`K-Uw0pHli!qgSF073s`iBUK|2L1XzH_>)RAyBLpS_c3t+jL$K=&
zt+RWkh+RiL<Div#h9}-*lWx@4#NW#(eRy&L6OG=>RQJQhn&P^}@NCLBw!vxxgwa^-
zO?r9$Ch{(o^tX_Aw`7zLGOVab@5!#-q<d;W3-979thB}QE=Y`Zi{)LA@a~pO`UB}*
zVsP(nwY)1i&}ggWUCAQvZYA%oCGQp)o=-B4y-;(hE1Vs5vtFqfpJd#fc<w18zqY`#
zqAG8_6;(M%QI+E(&|AnTG}Vj9t$SF(ZTcOdJsDX;gNZhKGN_^P(;8|7@>5oOn?5P{
zsojWksnMgn4Tky|>pWEdRp>KoQWbHpewM)>eE2zxd#mBum%&eTnuh8R8T&H$Z4Bk|
zTgjwfW|V_`!mzt;*F8^y6u)4?M=1DZM*i7jkm%;i3|{Whd;tlIewj%glollhx99=O
YqLPCF9Iz}ZS!B@zuqeCdUU#qm1N|N23IG5A

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 45fa3104..f5354285 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -1565,8 +1565,12 @@ func (ResolutionType) EnumDescriptor() ([]byte, []int) {
 type CatalogRejectionReason int32
 
 const (
-	CatalogRejectionReason_CATALOG_REJECTION_REASON_UNSPECIFIED             CatalogRejectionReason = 0 // unset — rejected at ingest
-	CatalogRejectionReason_CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR CatalogRejectionReason = 1 // caller is not an authorized contributor for the domain
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_UNSPECIFIED CatalogRejectionReason = 0 // unset — rejected at ingest
+	// The signer is not authorized to push for an entry's domain: it is neither
+	// that domain's publisher nor a contributor the publisher's manifest lists in
+	// catalog_contributors. An entry naming a resource owner the signer may not
+	// push for is this reason too.
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR CatalogRejectionReason = 1
 	CatalogRejectionReason_CATALOG_REJECTION_REASON_TENANT_MISMATCH         CatalogRejectionReason = 2 // tenant_id does not match the authenticated caller
 	CatalogRejectionReason_CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED     CatalogRejectionReason = 3 // contributing domain is not verified
 	// DEPRECATED, never sent. An Exchange MUST NOT send this value. A catalog
@@ -1604,6 +1608,11 @@ const (
 	// (see "Critical extensions" in the file header). ResourceEntry.ext_critical
 	// is for the agent and never produces this reason.
 	CatalogRejectionReason_CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION CatalogRejectionReason = 10
+	// The publisher's manifest does not list this Exchange: an entry's domain
+	// serves a /.well-known/fora.json whose WellKnownManifest.exchanges does not
+	// name the recipient, so the Exchange is not authorized to sell that domain's
+	// content.
+	CatalogRejectionReason_CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED CatalogRejectionReason = 11
 )
 
 // Enum value maps for CatalogRejectionReason.
@@ -1620,6 +1629,7 @@ var (
 		8:  "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
 		9:  "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
 		10: "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+		11: "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED",
 	}
 	CatalogRejectionReason_value = map[string]int32{
 		"CATALOG_REJECTION_REASON_UNSPECIFIED":                0,
@@ -1633,6 +1643,7 @@ var (
 		"CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED":       8,
 		"CATALOG_REJECTION_REASON_URI_UNAVAILABLE":            9,
 		"CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION": 10,
+		"CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED":        11,
 	}
 )
 
@@ -5881,6 +5892,11 @@ type PushResourcesRequest struct {
 	// over entries because a submission is stored or refused whole, and a refusal
 	// names each entry that failed; it does not bound the work of checking a
 	// submission, which the recipient bounds at the transport.
+	//
+	// Both bounds are wire rules (min_items and max_items below). A push outside
+	// them is a malformed request, refused by wire validation with the Connect
+	// code invalid_argument like any other malformed request; it carries no
+	// catalog_rejection, because no entry was examined.
 	Entries []*ResourceEntry `protobuf:"bytes,3,rep,name=entries,proto3" json:"entries,omitempty"`
 	// Identity of the caller (who is pushing this data).
 	// The Exchange verifies this matches a registered CatalogService client.
@@ -11639,7 +11655,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x16RESOLUTION_TYPE_CREDIT\x10\x01\x12\x1e\n" +
 	"\x1aRESOLUTION_TYPE_REDELIVERY\x10\x02\x12\x1c\n" +
 	"\x18RESOLUTION_TYPE_REJECTED\x10\x03\x12!\n" +
-	"\x1dRESOLUTION_TYPE_INVESTIGATION\x10\x04*\xb3\x04\n" +
+	"\x1dRESOLUTION_TYPE_INVESTIGATION\x10\x04*\xe5\x04\n" +
 	"\x16CatalogRejectionReason\x12(\n" +
 	"$CATALOG_REJECTION_REASON_UNSPECIFIED\x10\x00\x124\n" +
 	"0CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR\x10\x01\x12,\n" +
@@ -11652,7 +11668,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"-CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED\x10\b\x12,\n" +
 	"(CATALOG_REJECTION_REASON_URI_UNAVAILABLE\x10\t\x127\n" +
 	"3CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\n" +
-	"*\xb4\x03\n" +
+	"\x120\n" +
+	",CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED\x10\v*\xb4\x03\n" +
 	"\x19RegistrationFailureReason\x12+\n" +
 	"'REGISTRATION_FAILURE_REASON_UNSPECIFIED\x10\x00\x123\n" +
 	"/REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED\x10\x01\x12+\n" +
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 478adc19..71c24173 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index 6bfd13ea..c05f0719 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -17,12 +17,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.CatalogRejection.schema.json b/gen/jsonschema/fora.v1.CatalogRejection.schema.json
index 5fdd8a8f..7972222e 100644
--- a/gen/jsonschema/fora.v1.CatalogRejection.schema.json
+++ b/gen/jsonschema/fora.v1.CatalogRejection.schema.json
@@ -16,12 +16,13 @@
             "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
             "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
             "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-            "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+            "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+            "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
           ],
           "type": "string"
         },
         {
-          "maximum": 10,
+          "maximum": 11,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json b/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
index bab8e5f7..50403e4e 100644
--- a/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
+++ b/gen/jsonschema/fora.v1.CatalogRejection.schema.strict.json
@@ -17,12 +17,13 @@
             "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
             "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
             "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-            "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+            "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+            "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
           ],
           "type": "string"
         },
         {
-          "maximum": 10,
+          "maximum": 11,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
index 11e6ac42..9b908f38 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
index 8ded51b7..3ce46a72 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -17,12 +17,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 88af042e..e9d30281 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -542,12 +542,13 @@
       "type": "string"
     },
     "entries": {
-      "description": "Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.",
+      "description": "Both bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.",
       "items": {
         "$ref": "#/$defs/fora.v1.ResourceEntry"
       },
       "maxItems": 256,
       "minItems": 1,
+      "title": "Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.",
       "type": "array"
     },
     "exchange": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 2c79f51c..4d2758b5 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -551,12 +551,13 @@
       "type": "string"
     },
     "entries": {
-      "description": "Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.",
+      "description": "Both bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.",
       "items": {
         "$ref": "#/$defs/fora.v1.ResourceEntry"
       },
       "maxItems": 256,
       "minItems": 1,
+      "title": "Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.",
       "type": "array"
     },
     "exchange": {
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 0a068373..54e59dfa 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 0f91b1ca..b23c85bb 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -17,12 +17,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 81bf7fdc..07a64769 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index c8dd678f..ccb18073 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -17,12 +17,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index 8c01cec9..db11e3ef 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -16,12 +16,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index 6b38f783..578b5591 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -17,12 +17,13 @@
                 "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED",
                 "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED",
                 "CATALOG_REJECTION_REASON_URI_UNAVAILABLE",
-                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"
+                "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+                "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"
               ],
               "type": "string"
             },
             {
-              "maximum": 10,
+              "maximum": 11,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 26c7406d..31af7982 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -123,6 +123,9 @@ class CatalogRejectionReason(Enum):
     CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION = (
         'CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION'
     )
+    CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED = (
+        'CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED'
+    )
 
 
 class CitationFormat(Enum):
@@ -2139,7 +2142,7 @@ class PushResourcesRequest(WireModel):
     )
     entries: list[ResourceEntry] | None = Field(
         None,
-        description='Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.',
+        description='Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.',
         max_length=256,
         min_length=1,
     )
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 97ac384d..b7103270 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,15 +26,15 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
 export const CatalogContributorSchema = wire(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider."));
 
-export const CatalogRejectionSchema = wire(z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("CatalogRejection — a CatalogService call could not be applied."));
+export const CatalogRejectionSchema = wire(z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("CatalogRejection — a CatalogService call could not be applied."));
 
-export const CatalogRejectionReasonSchema = wire(z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]));
+export const CatalogRejectionReasonSchema = wire(z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]));
 
 export const CitationFormatSchema = wire(z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]));
 
@@ -76,7 +76,7 @@ export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.st
 
 export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
 
 export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item."));
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
@@ -202,11 +202,11 @@ export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.objec
 
 export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
-export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
+export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
 export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 463f19cd..bfb8b00c 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,17 @@
 
 ## Unreleased
 
+**Catalog push refusals: wire bounds, the contributor reason and
+`CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED` (one additive enum value).** A push with no
+entries or more than 256 is a malformed request: the existing `min_items` and `max_items`
+rules refuse it at wire validation, `invalid_argument` with no `catalog_rejection`. An
+entry naming a resource owner the signer may not push for is
+`CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR`, whose comment now says who may push.
+The new `CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED` (11) refuses a push for a domain
+whose manifest does not list the recipient Exchange. The SDK error-detail decoders in
+Python and TypeScript know the new value; the reference and Exchange request-flow pages
+state the same.
+
 **A Broker forwards the agent's `supported_profiles` and does not route by them
 (comments only).** `DiscoveryRequest.supported_profiles` said the Broker routes queries to
 Exchanges that support the agent's profiles. The Broker MUST forward the list unchanged in
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 01b59b8a..0f9f9b0e 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2967,6 +2967,11 @@ message PushResourcesRequest {
   // over entries because a submission is stored or refused whole, and a refusal
   // names each entry that failed; it does not bound the work of checking a
   // submission, which the recipient bounds at the transport.
+  //
+  // Both bounds are wire rules (min_items and max_items below). A push outside
+  // them is a malformed request, refused by wire validation with the Connect
+  // code invalid_argument like any other malformed request; it carries no
+  // catalog_rejection, because no entry was examined.
   repeated ResourceEntry entries = 3 [
     (buf.validate.field).repeated.min_items = 1,
     (buf.validate.field).repeated.max_items = 256
@@ -5075,7 +5080,11 @@ message TransactionDenial {
 // "tenant mismatch", "signature middleware missing").
 enum CatalogRejectionReason {
   CATALOG_REJECTION_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
-  CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR = 1; // caller is not an authorized contributor for the domain
+  // The signer is not authorized to push for an entry's domain: it is neither
+  // that domain's publisher nor a contributor the publisher's manifest lists in
+  // catalog_contributors. An entry naming a resource owner the signer may not
+  // push for is this reason too.
+  CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR = 1;
   CATALOG_REJECTION_REASON_TENANT_MISMATCH = 2;         // tenant_id does not match the authenticated caller
   CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED = 3;     // contributing domain is not verified
   // DEPRECATED, never sent. An Exchange MUST NOT send this value. A catalog
@@ -5111,6 +5120,11 @@ enum CatalogRejectionReason {
   // (see "Critical extensions" in the file header). ResourceEntry.ext_critical
   // is for the agent and never produces this reason.
   CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION = 10;
+  // The publisher's manifest does not list this Exchange: an entry's domain
+  // serves a /.well-known/fora.json whose WellKnownManifest.exchanges does not
+  // name the recipient, so the Exchange is not authorized to sell that domain's
+  // content.
+  CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED = 11;
 }
 
 // CatalogRejection — a CatalogService call could not be applied.
diff --git a/sdk/go/connect/testdata/error-detail-wire-vectors.json b/sdk/go/connect/testdata/error-detail-wire-vectors.json
index ad611c05..e04af80a 100644
--- a/sdk/go/connect/testdata/error-detail-wire-vectors.json
+++ b/sdk/go/connect/testdata/error-detail-wire-vectors.json
@@ -185,6 +185,7 @@
         "0": "CATALOG_REJECTION_REASON_UNSPECIFIED",
         "1": "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR",
         "10": "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION",
+        "11": "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED",
         "2": "CATALOG_REJECTION_REASON_TENANT_MISMATCH",
         "3": "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED",
         "4": "CATALOG_REJECTION_REASON_SIGNATURE_INVALID",
diff --git a/sdk/python/fora_sdk/_errordetail_wire.py b/sdk/python/fora_sdk/_errordetail_wire.py
index ba992ed1..6b694d2f 100644
--- a/sdk/python/fora_sdk/_errordetail_wire.py
+++ b/sdk/python/fora_sdk/_errordetail_wire.py
@@ -159,6 +159,7 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
         "TERMS_LIMIT_EXCEEDED",
         "URI_UNAVAILABLE",
         "UNKNOWN_CRITICAL_EXTENSION",
+        "EXCHANGE_NOT_LISTED",
     ),
     "fora.v1.RegistrationFailureReason": _names(
         "REGISTRATION_FAILURE_REASON",
diff --git a/sdk/ts/src/errordetail-wire.ts b/sdk/ts/src/errordetail-wire.ts
index f6bb4baa..36accaa2 100644
--- a/sdk/ts/src/errordetail-wire.ts
+++ b/sdk/ts/src/errordetail-wire.ts
@@ -130,6 +130,7 @@ export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<st
 		"TERMS_LIMIT_EXCEEDED",
 		"URI_UNAVAILABLE",
 		"UNKNOWN_CRITICAL_EXTENSION",
+		"EXCHANGE_NOT_LISTED",
 	]),
 	"fora.v1.DenialReason": prefixed("DENIAL_REASON", [
 		"UNSPECIFIED",
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 3e09ac8a..84bf5950 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -809,7 +809,7 @@ func (h *ExchangeHandler) ReportUsage(
 
 ## Attestation Verification at Catalog Push
 
-Before the handler below runs, the wire tier has already refused a malformed push: the `ResourceEntry` envelope rules (bare-host `domain`, absolute `path`, bounded fields, at most 32 terms, and at most 256 entries in the submission) and the `LicenseTerm` rules (including at most 8 restrictions, and at most 64 quotas or obligations, per term) are protovalidate rules applied at the boundary. That tier is something a deployment turns on: an Exchange built on the Go SDK mounts its handler with `connectserver.WithValidation(connect.ValidationStrict)`, which is what composes protovalidate onto it — the option is not the default, and the reference implementation passes it on every mount. The handler then canonicalises the terms and applies registry membership — the ingest tier — before the attestation checks. The ingest tier also re-asserts that no token is both permitted and prohibited (`restriction.canonical_disjoint`), because the boundary rule compares the tokens as written and two spellings of one token become one token only once folded. That is the check a mount without the wire tier still gets, and the one that keeps a self-contradictory term out of the catalog — a stored term that violates the contract would fail validation again on the way out, on every offer that carries it. Both tiers ship in the SDK as a publisher pre-check, so a conforming feed rarely reaches this flow with a refusable entry.
+Before the handler below runs, the wire tier has already refused a malformed push: the `ResourceEntry` envelope rules (bare-host `domain`, absolute `path`, bounded fields, at most 32 terms, and at most 256 entries in the submission) and the `LicenseTerm` rules (including at most 8 restrictions, and at most 64 quotas or obligations, per term) are protovalidate rules applied at the boundary. A submission with no entries or more than 256 is a malformed request, refused `invalid_argument` by wire validation with no `catalog_rejection`, because no entry was examined. That tier is something a deployment turns on: an Exchange built on the Go SDK mounts its handler with `connectserver.WithValidation(connect.ValidationStrict)`, which is what composes protovalidate onto it — the option is not the default, and the reference implementation passes it on every mount. The handler then canonicalises the terms and applies registry membership — the ingest tier — before the attestation checks. The ingest tier also re-asserts that no token is both permitted and prohibited (`restriction.canonical_disjoint`), because the boundary rule compares the tokens as written and two spellings of one token become one token only once folded. That is the check a mount without the wire tier still gets, and the one that keeps a self-contradictory term out of the catalog — a stored term that violates the contract would fail validation again on the way out, on every offer that carries it. Both tiers ship in the SDK as a publisher pre-check, so a conforming feed rarely reaches this flow with a refusable entry.
 
 When `CatalogService.PushResources` includes attestations, the Exchange performs additional verification before accepting entries into the resource catalog.
 
@@ -852,7 +852,7 @@ sequenceDiagram
 
 The loop checks each entry, but the verdict is not per-entry: a push is all-or-nothing, so a single failing entry refuses the submission and nothing is persisted. `rejected_paths` names which entries the refusal is about — it is reporting, not a list of what was dropped from an otherwise applied batch.
 
-**Rejection reasons** come from [`CatalogRejectionReason`](/reference/proto-fora/#catalogrejectionreason). The ones this flow can produce are `CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR` (the caller is not authorized for the domain), `CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED` and `CATALOG_REJECTION_REASON_MALFORMED_ENTRY`, which the envelope rules make the common one. A push whose request signature fails never reaches this loop: step 1 refuses it like every other signed request, `unauthenticated` with `ErrorDetail.request_auth_failure` (`SIGNATURE_MISSING`, `SIGNATURE_INVALID` or `SIGNATURE_STALE`). `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated and never sent. The attestation-specific failures — a bad attestation signature, an unknown verifier, oversized claims — have no dedicated value in that enum; they travel in the refusal's human-readable message.
+**Rejection reasons** come from [`CatalogRejectionReason`](/reference/proto-fora/#catalogrejectionreason). The ones this flow can produce are `CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR` (the signer is not authorized for the entry's domain, a resource-owner mismatch included), `CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED` (the publisher's manifest does not list this Exchange), `CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED` and `CATALOG_REJECTION_REASON_MALFORMED_ENTRY`, which the envelope rules make the common one. A push whose request signature fails never reaches this loop: step 1 refuses it like every other signed request, `unauthenticated` with `ErrorDetail.request_auth_failure` (`SIGNATURE_MISSING`, `SIGNATURE_INVALID` or `SIGNATURE_STALE`). `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated and never sent. The attestation-specific failures — a bad attestation signature, an unknown verifier, oversized claims — have no dedicated value in that enum; they travel in the refusal's human-readable message.
 
 See [Content Attestation](/protocol/content-attestation/) for the full attestation system design.
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index d0a76a28..a983e2ab 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,17 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Catalog push refusals: wire bounds, the contributor reason and
+`CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED` (one additive enum value).** A push with no
+entries or more than 256 is a malformed request: the existing `min_items` and `max_items`
+rules refuse it at wire validation, `invalid_argument` with no `catalog_rejection`. An
+entry naming a resource owner the signer may not push for is
+`CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR`, whose comment now says who may push.
+The new `CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED` (11) refuses a push for a domain
+whose manifest does not list the recipient Exchange. The SDK error-detail decoders in
+Python and TypeScript know the new value; the reference and Exchange request-flow pages
+state the same.
+
 **A Broker forwards the agent's `supported_profiles` and does not route by them
 (comments only).** `DiscoveryRequest.supported_profiles` said the Broker routes queries to
 Exchanges that support the agent's profiles. The Broker MUST forward the list unchanged in
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index dfd8e22b..22eb4c2c 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -431,7 +431,7 @@ Every pushed entry is checked in two tiers, and both are stated so a publisher c
 
 ### PushResourcesRequest
 
-Push or update content entries in the Exchange catalog. `entries` carries at least one entry and at most 256 — an empty push is refused rather than answered with zero counts, and a larger feed is pushed in several submissions. The cap bounds one submission, not the work of checking it: that is bounded by the maximum request size the recipient will read. `exchange` is the bare domain of the Exchange the push is meant for (the recipient-addressing rule), and `caller_id` names the contributor whose key signed the request.
+Push or update content entries in the Exchange catalog. `entries` carries at least one entry and at most 256 — an empty push is refused rather than answered with zero counts, and a larger feed is pushed in several submissions. Both bounds are wire rules: a push outside them is a malformed request, refused `invalid_argument` by wire validation with no `catalog_rejection`. The cap bounds one submission, not the work of checking it: that is bounded by the maximum request size the recipient will read. `exchange` is the bare domain of the Exchange the push is meant for (the recipient-addressing rule), and `caller_id` names the contributor whose key signed the request.
 
 ::proto-message{name=PushResourcesRequest}
 

From da455884165d717b8dde021b61741510190dc459 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:01:30 -0400
Subject: [PATCH 097/164] Refuse a mis-addressed request before processing, for
 every RPC, in the protocol

"Request recipient" required a recipient to reject a request whose
exchange is not its own, but did not say when. It now applies to
every RPC that carries exchange, before the request is processed, so
nothing in a mis-addressed request is acted on, and the refusal never
uses an RPC's own reason family.

PushResourcesResponse.accepted said every push that could not be
applied carries catalog_rejection. That now holds for pushes the
Exchange processed; a push refused before processing follows the
general rules: invalid_argument with no typed reason when it is
mis-addressed or malformed, unauthenticated with request_auth_failure
when its signature fails. The reference page says the same, and both
changelogs record the change.

Comments only; the generated code, the descriptor, the SDK types and
the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 675065 -> 675647 bytes
 gen/go/fora/v1/fora.pb.go                     |   8 ++++++--
 .../fora.v1.PushResourcesResponse.schema.json |   2 +-
 ...1.PushResourcesResponse.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |   2 +-
 proto/CHANGELOG.md                            |   8 ++++++++
 proto/fora/v1/fora.proto                      |  15 +++++++++++----
 .../src/content/docs/reference/changelog.mdx  |   8 ++++++++
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 10 files changed, 38 insertions(+), 11 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 032fc206239f9ed1184759d6ae2e857b455371fb..f4860f4afff60d0dd5372295934c30a989a2bf49 100644
GIT binary patch
delta 46367
zcmZ5pcYqW{*5B#r>9n&uc_%FsmLy@9Ai=Op5cEtZrqfgJL{wDnJoEtXJ1@B893>P;
zMkE-BvMpKC5fnubgd>Y0f+7-B6y^K9s%o0^zj?3U`_-$eS5>cGRrg$+)L`wj2EF@x
z`YZjt{nfX9L+?|Td~XlG&v$-`)qi!!(!;)F!4LM(GrpgF;n!z+EJZ5_YiE^$MP5(y
z_v*5H&YGR<6W{sTrIo!61@&TBJ5yBMHP_>XXS?Q}dG6UKd*+^cu1Bux-@5jA(aPO>
zcZXcBXS(#tJ<+8{k8WLi<{s<%_a~m|(*5bKk2TJ9>HZ`hLbdA?-Jb8(wR^8zm*<~<
zmZZA%%H4GHEuHSYIrn^z=bq@=vuC&NPm`zx*}uNfwP&vza^0Wn^$c;lb<cIlW&YBw
zXL*+=pX>qAu1`8bxo$mkU7qOG^-1=4PJ6pU<6O_@phh;;@0ok<|GGo2OV8)J=bq~F
zmu}C#n7gKn1v7hfdG@)dJNM}Nr>;-*>h@fBSebjWYxizlo~2*xo3>U-Q3C>gfeJ!R
z?MPm$RX1=}G2+$}mZ}vf1!469YkP~<wc>)J#jPUCM@$7=B~jNQy+k%`XC3r$9Zy*8
zXYag4JFJxV^J)nx<$+Q^Z?cg?LaCp()ooT6u7ihz*rD6BCn^ScwUCrii0cj4a!9BQ
z@?LYJHB#d`ASc+*-L3__6%*WYyil6pP1cu6UXt=QZ*RTl;Yw;)oy^|)t+u^lvRBJW
zAr(54y}9ch5;~K;9XneigpMz)PG|G((neKGcXfQwneNTCkvcx;O!wZ_#Tp|TK?|#|
z+g&?pW0i{6y;`x9(xCLZH;{2iD824&aJ}`WC`b>h3t7E;wFNB~dbJWMq(f(+H(ue8
z&{^oc{vK<-YAGr_dZo8ui`SFdujE*}`+YGxbDvhE1Xg;DTGmsRs`5Tu!*2MU_Dr)i
zUWK<UG0{tFykTAlkw9JJO{T0_umrRxtgZJdo7t}4X)~+w%c9bWkG5FvEp$*kKw0k%
z^FF4hKw0lims$ZKY!FJV&0en+vP^nz3^K#0&IYgA)QVVz4ofWtbE8+i;eVMx+vHVm
zWal2xLZSb7)w`^77{w}V`_Nl3jl~|+&W1kp8Zm1I8SNow-RWf?eP&L+4g@US=~WDF
zI7nE!(`))264*PvfuQvw*Tlm;UL}?K^Ms%E1bb|Q(TuftNGmS~vruYKRrh%PF^2@e
z9&aLPHRb@Ye;*t9kXF%opVL?#MS%(XoW=qPgndqvg9O4pYI15>kOq<I+j&zFDVl1Z
zxAZpaErk~Xg~N9GVXcX$>abgi7p`{LTbPqLUX*g!o4?K>Ny&R-rM0byW5EA^v<E$+
zy{}dM=whhA_|aQfTPmT6LDp&PkihuS+oY-W27DW)qFO`j(T{6yDeZ=+(lx*(wkll%
zBrt}k;W`q7#>Wt~{x#NQQ5P+&jZ&3y_P@JoDNi+iIvu4!Z<J~Z5A!G*^hT-C67EtU
z;Zmd2_&C*Tg)IZNXlSS6ur^v%$ErTrcAN*jF{l>AOh-%$`(9SHwH_<WtAWwRRHZBx
z%CVBCwR95@!jV0S4kMVFES1LV0Ap%4Z~Y=14P7-=WnI?m7dv_s15G;BZ3Y9)Fx71a
z14vWVFdy--!vNA$HDBABsKAqzu=bi-@SZ*O87=M!y`~xo;mQiR@;sHhGJEV#n$~Kb
z(?ECx#CfXpWRO6dr^1tWlWpW=+FPo!L{(E8J!5B7CE2n+X*Jbgi3WxM^xtwC7$o%H
zQll~6z#!4UZ>c3qWCIg}H}C>gT`U_|@}RfSX<*4h125tYT*Xbnpjf6VrKu)4cJj~K
z^;ICmJfbKH9B!Ff7~~BM5;iSULwtcj9cXAQQ&VYcxTq7z<?OL%wUJfJT?q2~<!YfA
zkWc}{a<!yPBGSCST&-Kr`i}ffQP4^2>_&gl{_d$<=VFlGuTu*}w?haR>(rze1|Wg4
zPOVp;`wJh<8(9#Z(h|R+xY6+!kWk#{_zOrVZoJ|zyt3P*zkq-#+guYg_{%oOU+@%2
z+Z=xZ38Zc0FYnOI=M8H+)Pir=v(IaGV25git>2+?UOw@$=6}^5EZ^z$Gnhcy>G%mq
zAnhbSxreLZ;ciy*SM9#4-Ht6@#e-Vyc6tRQ2|2w25(vAgR|csZ0^NJazNLp|DpiME
z4C>iKYN43cyu4=*scF9K!&2(mLuy46YplQkdBPsvON%L0CtM8b+7oIaU-+R!U3)^!
zi0KF<DXEx_-c-09XwTF3p}%Pro;Igl4C>m`t{v31r`0rHMFB}&ds=PQ+!}^<^<fn~
zrxyIeZvVSBG<;6=MX6nVeC0f^Dz({}f17vJ5o;!BK9=bz8sNN|FSG9F!YJT7_WKvL
z2eRL(N}AjdG8FZEr)IL&Y<MzgkQdqZ7qvN=i>i{8LY%9X*0OHnGBE8YHs&AN9hsk0
zB`;+ttocc;Q`dT$%b?CbvmgJVb<6$i8bo2t&t%XVFDiwJV34n1vEA>V+G<Z=kk1$A
zwc^X<VAkp1+Jl+FK824LADGY`?8A6z3w#fa$DwTFzqR(+p+1ENdc=gxP~SBTcw7V;
z<Oo*hC2dr8gioo*4F!|9z6K4gbLbrip*CafoiAxGcrs&s3ikuzLTaoJe()$4LUqQo
zuD!L#GUI&;?<2@ib;kS9NAOsX7$=M!>#f~am$@cU6voJ;QCONFgifF3Q*KK2_OZ^o
z6|<l3qy0^316BiR9z|fYe2vQ;66VeFRkXK?EsfO4)n@scw6i{;{=z~KR_C%h{k47B
zxjv<tRHBG%uCGN)YapB$LRbzK*`)(CL&+_28^VCpB5H_rG<4OlR^uyJ&pHm$-VN0F
z5VWA7F)?AHe}_c|YwgS5@hLhLKulQij?XA^NErE!FBr0}=PG!(lJyy^-B`ZTRiUxE
z(r1WeQ{`iIr4O@uSFQq6*03)JYfqQ2@d@9gIT0#re5GQA28mME_^?9X%~e3HWB(qa
z-P>lJPfpvaLIZQ1PsRx#fw0b3r=hfy2Ie|nd4;t>Lydi5ZI`d$3%h8jc9S=-%ZGUM
zS|IzV%DdU4Bea&~yM1z10uxZXeWsX+K>}*G50PXGu7Zbq*}EgOR^@x0D*O2KwAW`u
zc<CUave#D<x0-VmRCzzEJyL7YV!x|GRo?Hzyh-is<5k}8i<MYSxe5Rd`LJG<<?dx;
z25SlS>PRh84wmQ_AFuBrA2vrqo$7nYhY3*_2`4_vj*Zk>RULI&%%{*abktWU8W|)E
zIO?k_rXi3(I7%+QfEGF*`S@}6z$k4|o8vA71y;v>GO&USAddTF<PH)L$9)JRr(w{e
zH0@ho!En3dXl<&e?zh5+ysD;$wI6)SC7)`|^jbRTL8ce89`S7LWo?G%wu?TswiQH7
zC7z-Ae)Orozlwu$e)6d;P<MehL{mm+s`a|h!NY_@Jo}rm+I*$uP)%*%YSYv)OjEle
zLX#z+yL`hn^;M7cGEL(exy4v}`vfiODIcpzzW^7t9jnQ35G1S^tHG~t<~n#dffY~G
zep59;lTNDfJ<0@4wiiee(!!$CKmuWchE7{)aR?apmi_WXt;$#amZq4zYc)PL-qK(#
z^)yH*y+y?~;X0reu}f36X61`CMZ_=~caB9`NW|eFNl2?*$7;`2;2cZY!_%}5l}lYq
z$vKv4g(5iAxN|Jkve(E$$vKv4jT-Y|qmggauzl0CmQ^(_0>vRUnshJ7psqDq-6j%&
ze4|Edeyug1+)Ja`aV5KBy7tD+D_sbUxLP4!u}B6GD>XSQfCR)!4YR^qCWn9{ZP%2Y
znwpwovU?7irS^j}v|(yBm?FT`c<{X4?J^3Uw^Q5ErVvjNU~bn+c4{JmCk78NKhV^V
zG!el|9`rthaXf;TECiT4G>YI4WVkh$c_-*fJhk2K@|yNgpaO(r1qI#{bW;p<7zeZo
zI)?gA(G(`-0ZzQFeOxiw)iI$nSvN)44`+bRWF28Y-?N~_!s<-><T9<6r^8JBio03p
zn3?(&ce8*oQxEfX8`ZUdF;lNo&zdXBEexx3bfsQuqKB=swG#H2t&OMxM+C;2QV6s;
zE?Obb=ICL^sS1HMN3UJiT50h5`@`xAyWu-pm0GpJ#qgs?SLj#V$`6bcdRByBn&Jn>
z3caGKwU$CKO(_bio9)@FwDwBXW*4If7@PGgj#UJV&H5F`Dgwr4y?G1ktf*Bnx|o%%
z)y`LKcOi-av0axNQ%xxb#CAP@t@O=eKy24rU1$A*Y!1u_gw-SVeeY_$z3q><7y)1$
z(F>hk3;^SZ9&vm%0E{DgCT9(y%`JvvSi7t%eGNOhQ5&RH<G0hSLEv203q`sEg21_~
z$DNK20_QSyv~bZNT=cSD*4Geu3y9NZ94fsHwF%#2N*3mhKE$H^q^5+z>Hvf9CvX0H
zuddyDveKuuKuhpZHXewj4J3dD7;<k35@ioCoV_K&6HJtb*jrMpLe!O7gy9^+j4Q52
zCJi&>-V(w<8fIXxFu}x1fPp&4C>Uu^eqS4}2Im;qTaKg7(rKc7gSGoen^5_N0}Upi
z-*BKo0{RUj%oAj!0_Zo4vf9?I903m(u<%ap_NoOg0;Pr)xCk`uE-=Dkd#3YgcY%R?
zNq=Dks<wnp+Nlk!T;f8|9Jj=Upw)Vb5f;6z^GSG#fmr%C+z6Poj6JeTyRB-Oi{J&q
zG8cgYlx2ooD|J36FEg-KzKUoO)k5oTvXAc4UQ;SJxfqCC)J-l1E!mr#R)!AB-DDuh
zex5@>b}L)IN9$3w)kUBcd#j5;v+`C$<S|hy&B|MiT;3Y2a|pP{e*3SVXhXeE>^GDs
zA0IlOhxZ#Xu^51a(tZPr0WC-%G4t&=%EkIj<RCLhoQelAU0PfK9Ha-qyZ?9AFi~Gb
zv#0Dw_iH1Rs#C7DI;=hAT1&Z)Q*PJO^nHrDex;XNi-IrM*Brv0qUwT+VW1Kh47nM{
zgbIucMv0gNK?37~fz8W%0t1upWxMQ%w%t>8*~Ktn$7R<Jnv5^I?M{>NW%BMfgactR
z?#~*3s=Za!-;@Ic!yOR)O*ue70;0be=KB}43C+d*&1)L+@v1ABiU*l2^t6^@O^<0>
zlR>5&qj&_xL8cs|AfY(ObjGNzVA>sF@-fOD{Y=w3jBqXR!-5g61vK}LFy#=1B7jDi
zsKkI`3{gxo3(SH8rYH4X5o@|hkJ>9g(@tq63rr(zt)QsLpuzgKsg$JNP$-#W?>>dq
zrve<Y%;7l-c-xfm5l9s9wu!|SVIHaD=_)(-wf3r~VwI~zV{?^h7ISBU5R_J#p|CZT
zn%1Bl+`H`C)7tckcTKrl024aznx#CiPBPGW*KF8Gq-YExH?lR~Xd^2&y5-RD+i1#E
z6=X=rL<(X&Ile)|Z<qa#GaB<&>~h*3Tqx}_lVa)t38h^o{BMh>5!!dZ-S)h;&C_JR
zTM`Yi{ia;)4L-#7n^^7lm0%}~G}}0<V4{89ciQg@1LNQ%l(j|pkH#I(rhD{??08Gz
zivclF{qYtG96%dbUhfI^R~}vWWG7g1V-GH*CXm#-Fbh&3nH~1(>peMUDcpGC5}Tyn
zL9!m>UVGIl_{=`9>aCUFs}}MMYtZ68p1_&SZq)U6%Vt|LzW^qbXIq$Q#tI?C*Yhl8
zE30MbFIVH2$T1)<1G#w?=0&Vtz(Q|AF1OY4Quxgo9}h$$&bQQSY4PHmodXg6tFK#X
z?rIhq@eK>xfUBf{{idbXy_yBAx2k`|Lsu^N6$>4;@K<1%Bo<j}+0|f}k``NPv#VK{
zVV3;LFiaRrEw#QYRXq^lqx!a`UgPoxdNHDxS!%tjSs1D{zcLH~kNqnt#4qps5B@+e
z;*sUQG9NSS3QMg+@YPN$V$ok|srjpm#0tLZSNM^zy82gOQS7#V)fTa^y7pH!D#0kb
z8h$tLxAj&vHeyaMfrpOUV5!$%%|gd*v_!bVZG{v%Zj+_nc(oMz?LSvHKcvuan}4N<
ze%oT9#Mgu)VmztaEoCRGDAZ?H<ChpZ$nK%g?N&A?JrR?Fw%y9_yyA(9mwVy|ge9z3
zyuuSdwA9SiEL3QRrDm^Y0sA9zi<W%E0D8Bj9JN$-k6&+Ijo*$Dlv>*D8i86vGJo`n
z5nf@$9!sr|@Lp-eC$0-{7L3^I`VMCSd*835(5nCai={TY8Vt?4-|b1RiDo@;b&;Yc
z4_RufD~h5c4_j*0)hrZw#8TT@9eBNge2hI;q~Dx9W{Kqry-S(0V-~U{_h6Pmrs)f-
z;A^(4NWVM$h2;zK$&P25PGDwYM+17@IwHpen&)YKAOUg0s+F;FC<ghXu=*u?saP+|
zd}%2>h9f3qz9bpMyC6ZGWNV7`eCDJj!WLo@mt^u>290xy{amcq&YZFo9(_ZGdgv6%
zlyezW=_}SIpf|~W<>FA4z9N~9s1j01XRLxB*zkbfA#ld>MR=8XCh1#tD4<tlzO@vd
zE%t#4&2KGaGVcUB(n4YNENd9l@5-EYWvC`+N#<@Y1L_=`5Y+F@oO7mMF{Pg)8O(LS
zK~2sxEu{C!oOf}kCg(|}4VOVpF0j`^db`X8OJ-J)<AKZtl4-?d;0NC^Z&<%B^PSUy
zNa8@|JCeDH%V4~H&mIcv9dqAX3Qt_X0NM?FPcqaZ$n*SU74#`&tHb(DfuAg232zdf
zMY+U^BWRLKmcqA<J}{wr$--h?2k=ONQ1bZUh+Z%Av$KkT37MZshQ=2%9%1ztHZ7vJ
z&irC2JbOh<;*!jbTn0^YnVpO1RoTmy!UF@yP?KCHnMy8$Ch1+sIz=JWyHK_XG93`=
zT?nDyBMdUbTK~d=73__u{$Snyg+>5jiB~nTff-z=3@=ozlOCj)OqsGG9;+YIzict2
zP;JOFOyUtBhZbTEq#Tyuz`kL``GKNelUDo5cE=L^N2O|Vp$r+pMTbl-lp!NXG|uEg
zxorUnjLC)AwtRu94;XklgZ(q9e_1)hg`l0!3>Si;s~Lr15y(RY5Hkwn3BGqSsR>_Y
zGgA8Pm9M%8wDEb>MWA9{EtK09r~u*BLTp<e;5LAo!|J8=-?y9NB6xu?r?8OP&Idbb
zMVM0<<R=V7l1?E`7}iqcWg_y@>_TO^y(X=%@ji~9VxNo$fU#XeC>FB|!(yL|r+~2w
z#r#ev2w?5P{PIGvPbLOZIdI;03e~?@>jLOoE36$XESP2=%Ifdxbq^NuY^_(t<s9wX
zLgfNF_carpYst<fp1q;IK3i>hwh-Y8^`&@*W;<7?-h34Ywwy0i+gbA|e_&DX_VwFS
z8tV<c)qVZ)o&(sZL0`XYN|4a%>z9Y_AQ5Zy^`{>eups$1s;|HFA)0{+l{hH7umAcx
z_|8hQXlK>e|G<ORFbdNxbeJ~SuZ-}ksUJN#`{t&)>UkOr(X4okW*zL8P6iT24fe~8
zEl3zO*e?P&!a}nS_UA_UMY9q^+yxlom)9mFi(i`<$`&=#qxFaRv9QyXiYw3155xVq
zGePHl7Tiu7?N`RLQ_b|dtMSXRj683&YZ-aoXus@mXu-14e%aw5VcBSZe*6{7oLdTG
zT+29%TlTVFUg#i2)Ig<_&sf-*mxf9%3>`;?@(rd%MNYN%H`iBtnoRX88h2=LVc1l^
zF8muLN%_MOYZPU@3&Yx6f58X#<`()$Ph_qiCnv|q(F@@f+H$|L$$qAl{;9VbKgGTY
z4}iDaZwfq+z*|mulmP;XiZ1s@H=&~Bg2dQGG4u+*+L(I=aX#X)*h;^Mj=2z6z+L4R
zF|@;i|E%^SzNsdkl9~Wp;}@}{!@^X#){iOeDk*f%yM7U)J5p$^bp&>m6k_Q0ezn#W
z76u{UH(YHiAD1C@qhEd4nn+VwA@%fD_Rx*`E1kCb<p~Fv#HIG5X#^y2w)%1MBuNaH
zt^P2NSm-Hwl_rd>{zyxUj{FO0cH7Qws?^)I+wNB!6e?=FzgSF&kOAm+KPE&0O2=p0
z{mG89rO7D}Xm4lhD)mTcyT4s~YY_FZKdgP?FF0d=Ua1fC)cM5E4{^MzA2Z25zjDy8
zVlCG}ih~Veu~BXGPA&fHS6g#v@dyU)_pA4ztqduQbBF_eb)m<qj~e)C9y!9oZS@9^
zAMwlFKA5P%5r0S|vp}K-NBme7s0JWWgCqWwn4E~@H8|o=cjQxs<j|CH#NYlVtAdvU
z#A9q~TfONM$NY*o!}9ayKjx2$j2B3hbBrbiQ4S^skhwcVb$IimrH=XYx65*<LwM5X
znEyAoTCdZF*-u?^%5K_Df74TW${F|I!jDe*WnvX1%sJ(ch&(e$6nx5$!wbYdfB^Lk
zOWdUQY4eSXKr7BS&ddQBAbjJOSHVD%jvpcEln^?vD6CB=D)`y{<R*Qx(Rf0UTn38J
zd6SBisYR+ao!0mw*?WSQ8s^EhXZPH$$Jo+4^uD*hQlvKLRTpBY*W@Dgx4b6>2R%8Z
zNFD4!b9sRk))p5j%Yfb2a<DN?6VI-`Q}_5<E-AwPh{iWprvPYa5vDA14Z#86+ePXC
zkM$u9nIiIy6>Ql(`bU*3isTFmCR%buk!(qjXonR=5pn+kB-&v`5#m@nBP^n3Ud`6u
ztG9Y$H7@D#eg%`bMRKtQ36<4FSgfhnL88}J7iDe}mO8z@x+r@q?{yN8y}r8W=3A_>
zbgWfGy}r|a<UT#->%7yom3n<=kxYX_2nFvfii`U$AW`tnBHVWo1=GOXS#-_s_`HIr
zC?-s>MGfw^exYTrh!pnOAO2qN?Rj*cTMC^L?<<m*dmw~T_7%y?Js?S`2nTSY6fa8I
zS5zwQz2T`WWnWRP+pItGLNG5LWN$sJckX=9ErX8E4i?FTV-Zgp9W0UwN02DvU=b3I
zq6`EoAnV;PYeHcP)#PAN{rjwO6h0KuGI+}V^CNnRx9XHz3LUSVa{HFDOsCwwr9|#2
z>f4Vfz$~K1y=bp_RNtjMdeOz83qBW%<k}A*U|cMc;{+ryE*4>&2umrid$Fk29nw<D
z>yo7xi!!(KyFNv9BjFPJri=byn@esPl)}B_mO&}pOGR=OhYHHLRD@N0Hl54kw%o|#
zg1L78$MxFYz{q06+b_ZVV)E`Wtfs5pyJAeSTqnT<)R<zK!UGAYF~vyX@kOMV9B2Z2
z@+tk5@(HdE`SXNgQ%q`*fzE_t9L!@!fMQUcNvzS+dYj5g#c~jVi3&_AmM#Ml2$PCK
z;<yGR5GEBPYNHDT#Y9bJuRX1|teos3&~!A}MIfh}Tr8aqDx^~kr)$R%;8N3A$us&*
zRnuGqTFR!m2o(EHD-MZCzL>kzv|^0Pz2y4EWbhn&{4@H)o;Gt_49fh^DVCiLAz;iY
zmeD6jSTTp{@d};L1j5?d;sR!u|4E;u)?G^-K@(R16W69<WoxlYS7>z5Vo4*OeX6_O
z!&CjAV&uJO;u6o$qMM76M{qePXG^jA=oP$e#mWc3!=-qkf_YG~uINywy;qD_!{q??
z{bGcbE(f^Vi&cNM)c|b}AdmToop@ev^u$NSipVB|380UP17fuY37wCM<!TQS4*pTG
zT<wYEYvo79sSbQLlN?$rKPtx3--jAIK<==|{@Y)5ujlbSj-P=`>|#@d86Z*8o?;oS
zfJ8}qio^frLy1VSH`!Ahx%X-oSGxaSw53HssPaCxzlUB`vCl1sir-f(bL^0T%D!Uc
z*ry2Nuu2@ZZ|SLLa4pyIgn&Z+c-Zj-kia-xEJJ>fz&KotmAx2qJV*l=Y-TS#Qs;1S
z{xLL#$+<j|^BpdJe5l77L=kO(lIGvqdwc0ayp`X&rIGJ`>-a8&P};Y}Au+LoL}}j^
zV`8TbWPn`vJe&G=Y#`6O2;{lvT?F#n^Ti=?`~(#soG-@l(<C}H4q&R&E*C39?Upa<
z38fl8#eM=00CU-`HqCaIodJNSfVoTqfWmB$2(vF2r-ueam`w~GX7>)rFq=3c%<dBq
z*+8x(!t6eQvNpUYtECt^uTP-e!?Jg|Cd%s@kfE`ZLId^<l<_R60|uM>2HHJxwIb&7
ze!nUbGjG2@8PCl*ig2-hfp*pZqlt}9|9}k8Wsyi#5BQZ8NL3FAl-+uDkw{e!42bNw
zgO618z(Ae<DH5sbfq`~ne=6bIB3C`=YJ9N)7<_dr3g;gZP#<yJ7S$OYP_9XhP}m>(
z>&@AX|JILJg5&h0jwTo#kQX@v{8q>4K-zIBT2n>`;8H6*G-sjG<Jliy(pTL+K2RtJ
zq)9Wu)g=0dlZB*#HklAWX30<fWMRBd2o%<~UdC3{hY4^-px`z8iE2Hh#AXD1A!`Ey
zFdsj<o*7VbWpA@~x?ajgb~3}v?xVk)0aqM{KnBIk3}9$I##La$EcSF?{qgLqfXq_j
zG#WCqNaldR1^FsF(N{l|c{L!jsyJ^ZE(u|4gR)WK+3d4^dfVJ=7l^W5vq|P084h<|
z6exJx?$BTFp#&BMaKQ5@bonXXVzzOh{#bT#KwkR<6S|877*q4e2!2+#gmoCCzn)zZ
zkXb)4A+&^qdJ7?tOPPPL-nY$CbRI<w&?HNjl8_%pAe~kdC|DQpSZHS-oubwRkTLCs
zGI$Qm4k%@1kFZ63%@jL6Sids^hRB`bF@Wp<j;3$p($HPb?jEAwkzMXI3-VczSsp;d
z(vK|S39VIZ#Snc!c2z*0U4aRqRRNq`9TP%mym#57L-o&d?>aq&tQ3UarN*00r=hsK
z@p+)&p#8)!y|y0tJb=55n`p8LVwurS2b44Rq?h%MN;Q6pO*|gJz|#R!yrKaTrJN2F
z2l(s)65Vk+5IiGi7h+%(U|SMUEBUyS99Z#9pmzDyEC78IXmX>qGsF$Rayd4rObn{2
zbs@U+l(GLYUSD8TgXx$;Yth)C%qIl-S~NB&^9dkf%Gh9ZVo+RqA_keFjSH$QC@wuo
z9!egM%PM>YkStt!nh>N*Pqah@sbwbzm77!LIW~8i-uiJ6Vk3b^Fk*5rD3)H30Gk|?
zOD{;wR+EEr=_Qgcy_17->6IK>dM5|5^xnct1H^RJZn}PJ)%2j88iIUnn;w)=4oDO`
zJt(6bkfamDB>#?RJxsWp?M>756-MXHE(Wbwn_UcAu{H-~SRCXl*5;rLi$TKl%|RI!
z6Dh*t%|V34Cxnv#ZkK&%p8hALYL{CI1@OCqa+?t3@z}0liP+|Xgr&QJ*yiFu11$^L
zJwb6HVEP-n)?`mmUI@S=n71b=F9d*u;+~*$As|RW`GFw65YPbxDty2-fnxImZbd0J
zKM<5R0w4^e13}yfxD!Jc+0rAyg0EQcE&Y!0k)S-MM#>SlM1x9R9NmBf1ZZ*K1ri={
zG>GuNBgP}rf0S6Lc}u?~b1W#2T)>3PG3pZ`1L|{@S^$~PgL2|Tl8(4R49D9!4h;K(
zy|e%m#22z108T^p3+fkm2T0WPOLk&`erx8-pgc+f6Ea^0u`LofsQxK-*Fycy+^L|P
z`%qQLoC+eEo)dvW2qPhc_h42m)L%0L<3h;o+<_hmQN<^)?#uPxmQM)Dp#~;uI3Z+;
zz#JqDoe%=lLtF(9C$SUD^+zfuxhga|CxuLrzX|ctIVptv%^1v1C<ew%Wq)0vkFA^<
zl1>gL44)d3P7V?fQ$x~0L88>DAvDCj90Ak})^4SKf5nWDXi&h?xR?<t<u~JrB%u&4
zgws?G8jUxbtzW74t(xtYO2cAyNN$861Blrnd8rg6AZCZ)up=n+43UYi+kIB)0Z-NI
zE(V2iue%r&%Do;6iF^Wdfbn_=b3DJ*7$UD<WN%-s*YZ>@axv&u=%Nr-WZIWP2pEe(
zb(%UPFcyWbZONyk5V`+SR&T9dRlXF2lp#l78j`6*u%WUvgy_5%w;Ti7W~0~Yf2*+F
zZlY^Lw%bi~ZOEo>S}qz4LB=Z9;$3}Z)hgFex;3=Q?Iv39R)yq+$q>K7xr!Q$U%!MF
zvZt)^I(>fSIv0X&4Xtw_=+@9Wx2NgW(7I5%7M~<SbZclM3$54l6&pixdH@qD8$)t>
z011_iA!m9B(S4z9b01r;d)jPsOQoAa+uTy=rqH&KoEM-1h;1Rv3;gB?65OAJ3O=`|
zZNSZu@FyW(fWOOuTr!TRLrR9fp;8wlKtS`M;R6ZB-b+J+?*D?u)BWt>|LAXI_am_4
z!2_5O+E1;#UkHIb%<62`4`vUCL}C(}G(--Eu!qO{GK2){K4rNr`iRV@E)q=+pAr%U
zOoim%pRxD0AYl3|BqJ{{A@f-XYtjWIb$v+co(Ul@*l??U-V;0%!aFL*sQ{!*v14Hs
z@98J9--Z<N5)7D7{x*cP&Kx0x`kZGi-`D45&xho6h@>fm&WA7^?hryCe_)s1*LP-r
z2+2SP2~OhDAb3v*p+1+`*W2~&xl18Aks*f(p-Ul5WasE8D;(CQg%Oqh_XGW`9-J1&
zYXGl8Sq+n|GueSX`fHtLhUF{;CXAaImN$|>qJ)`Y+(@GF1QPx~GaPTngAO7Q4xqG|
z;Y3^hmPeTSYBt;PiGE{?*)FJuxM6ug88QH!9Y$3breI(stnCXId=~bkW~A7eaxGy$
zxK|Gq1^0!GjJ1VKjgYAa+223cx7~FxEN&?g6Q~EnIg$4R3DkpO9L|!dAYtmkaN~P<
z8h}V#j3Z9@JvhB3OlTirqmSzkcRJ!&3MO%#>VpL45vTeffqBHKK9QpON1W<MsDF-8
z^;@#;U+7wkV=gk4cg$%62m<*SwZULIC5VQ#Q{jTsXoHIiwL#oo`-T2zPxYy=QHJPP
zRio4dUxk(Symp{43PFl64kW<8a?Az^@UI-RLBi~>9J7fOW`9Ly3vj4^9ah>&a60w_
zX;}AAQ$~5Cd>xjF1du@gI*deud<yih!zFFGPvEIU|2iCRW1XgVh+<*we7Im>#FIMg
z;gw^fPwF~LoYc2P&WDY<R&NT0VyK~ZDXd(!FPzjbd#dqMZ0Ya-llrA_p-78@gteE#
z^+ZR5ggKYOcqfZC=O7WYUJ5t892Uor#6Z*qm7l}nS`n8Kf!Hr$T;aN(7Y>2G5xh!$
zOYUC&c>~t-YyI|eutXEbcq8<U$h8<GO6?oLq(ROUqkiwtPJXRF{HOk|3Uzt^h+Od@
z1C{;}Ol#EUF`@=U#K<NJZ4S~Yjn?1+5&2#bo^oL<+aDF8K}*8g^hm)1d%<aahc7ri
zf^kB3?bH%-l38rzd3}8OEC&lrV9koiAq^5(vmzMM4{{Yee2v|GL4T;?HCKg(!D~)s
zOL%2pqssD|mL*i%`RtPm`t*wVt`609zEfMspqTkoTb^<)A@VIY`#b%WCU3bqRL!@X
zYC?vDBB<v3G$`WO5k|0j{N;Q7Jx{16Vx+`t#&N3V>Ii?$xDo_fZnXmm5|FDSGV==(
zkgFre{GK8wi^E85OGMcgQB(iL9jv*=jrJoy>J61@Fh$!#1PEIkqd)>-3mHZJ1rq+X
zB~oi!L?nNRL3<)~Yea6(BnNG@H6piXk_Dix5p2(X%PoPxcJjEk<Z(>>S-+(MwAd8J
zdEB-=BH!Bw3El0~12gD!EKcNZ`|m&Nvpk)5N8~^O7XxK?MCLv~q9VH^X|ZhpNlFm}
z6*O)^V%+YI)D>ApBE>M-9jSMZwVL9zI4y<y?H4cWZ9P@{-BRcbV}GPj+>(Y6O4%PN
zyFtQIthYZ>)rQ9%aSHVgMa1SL;4!o&haxiiz#}Lgipb~#Boq%toaiG?0p4d3u{i-j
ztFmhXrRzS6$RHO_f%I8K1|cAU^jQQ!$V2d=L|8i!DY(FTE5`4GCn8w>co3Q(C;Hkx
zp%?*Ar>`S2`~w$IUq@v42NF<UM`UsqB+Ye^@O6AqA(AgDUq>RXt*@xb5;O?T+qbAj
zcTdOjj=kWbGUuI+0ZCF3`F1f#6mmX-8SE|En<T?pzi7eSs3$eemt)P&_#*7cA55Pe
z)Qpizs9zM9toer{l2n6%Q9cY>fIyQBj7ld4i6RC@<uCw=A_hh=46xj&YLd(xVZUS=
zLp|jqTqUw=L{zTR5Q5T(D0+mZ$Rv&W(X3^m@j%t+sB}3nQM1ue`L+y5AdHUY#ohrV
z5JpEEG_vN4VnI%{w-g$0c&aA4805ASqw*3^lDqB1XiywQf+VGAt*rF{&2dR`%BgHo
zk+Gv{stZ9rIn_0Td~#}3zO(}sKunFcx{mu~l6-PTl>1~$5YU_vl}-r~nlqx(DM3PW
z1~tJiqHqY$iE^j>O_Dq19M=YN$~jT#lz0lHIZ^49Ab~U|3a5MoeVhtwuSW~MKp+2>
z{Z%vK?1`Y!Ht>2BFPk<+B~#S3Z?eTfqj~w8PWONb#5bdI9R>-+H=|gG>HXRiwfsUB
z3>i1JSm>%yk1mXw;w?hRKxJVR=Sh^igATfMDe9h@<YB$%8)^1R$QV)%j+hGZ9O_G>
z@<<FM)R#sPPUEs2v_aLdyTeB7sv4&iz(gz5IIRE@2sKf;u>nasQOrR*g#qZym26|!
z__%y!R9>1%@fl@hR2NerNa(DLB0olVHB!`jYuKiU(Y9)hTPp1x*SMupFRqEox7nZq
zgf&qF;Acds=*11JebhKxwZVm;t>XsA3sb!NHbjFWx&#S`4bg^;t#1Vc_KsWF^D*OG
z)fN|ma?e|$g-&bJR&q;Jd~gVc(^hgz6fb@A;hUno*86Nmi7~74eHVh>NO?ahr*Oys
z;{9lvzrqa&+FHIJZP7}433iqrvX|mU^QsSB1QQ4!M&&DTDTQ{HA4cUXa3F#3VHEFH
z4x<s7qMhX)`|G$d!c)1&#h|U_9=ADZYq=*XKZ*h!VC;$3Z(v==A+WXF$7+(s4dwfy
z^6E*7Z!PylWd;BwRQ6H73(vvM@&K!qg6AA?3#Iq}4n*bqe<_7_mItC)@!}mwARM4E
z`~fZGDSH3!xIHFi+^w`Z?qbmUf5+YCqxb)gN7Lf#8qfj8@o3%p)<}vk(#W$$3kKNP
zTBv>GbQDVi?Y-1AMxS;zs(jDZW{eN3@k<N`@Bw$$8Gs-Gca{bqMFt=d8Jvxld><9r
zQeseKpq-1V-$g~XRPvyAJ}R@Nl7(#Pg(zi9`4=YAH1K-Ilsi-X?V_9!RH{KZR?wL4
z9h2vWkOW%qm|UVj!mWD8!s50Kkvux-9gB#o3X+3?-#gY^<dY?f!?d~0;-6AV^N2Qv
z*8<0Sa`!*el}#x#Ua9IIlk+|vqoMo9<dqDNu&IA6E|N7M0oFf;eQGnbb7@!`94i>X
zde%0Y1_s9rKffSRidOawWlL%sovVjBl>-w%Lt`=_4H7^@V@OC-%mNaX8ybsN^SuU<
zs2mI#8jFcb5|YK09(c)0pf^j&v|%v?pIFJ=c3-Dli{{N*i;V@Iz|HZfp=epqTvSf5
zAb~S1CMVcZw1{swTT#cjv3j`E4qyUecuY?EAb~JECeKSj0%3Rzxk)-N1&Q<0;jtW&
z5p)fXXkq{Gm^?g{EF8@akI~`jhm>u=EhH8z*cbDp-u31>;zMY5ue!!YPmslM!o=XQ
zK7Pe#BD=M|F)2GSCNra8qL(L9>1TxyY@0OU8smIsQcT{l#w{GkOp0M(HsUy-USZ(|
zMtSCyn7luYD>TH7;brPPmqDE-vp+U4YG)_MWcmUZU?4L&hW#uZeZwG3>{ION4Gga*
zJ0+&@d>nBhH6@1Qx6gz{XuPRxT|?t|W@=1+>jHOLAT%|GZ(ZEPk<h=>*rrBC$IP^t
zOsU}h31p_lFr$}o8O+AhS^dUFo$U0OOqSsO2xO*{6E471hr;1IbL>AgHWqm@b6h0)
z-o+e3>cE9CrOsv7RTwvC=Emf)P?2InW^N3}LN9U|%$f7p<O<`Tb?0G(kZS_ng3P=a
z=9cZ4pFm?)ToO|%Q)^W5Nsqgm7%h}GU^xnfP*_3=LZ4>HB{6&^jy~xDby_%=#2VaS
z%@BB)GFRH`n;B(FW~JMpet@iu)w_n@<S(L0aTQZq80|8vV)FYZU_xe94DS!pZT}(#
zdzIDfF_KyB;!qZ6HR0UJWpFaPhOKE~+?81qlUL+%?+Y?(VpswxPgaDtmesYaVN0WJ
zX03}umyXvG4)V*8!D~kEvOz74`?K%5I3dWqOE?I3NeC|<ZL@!DX)IK-+hX#AEZ{<F
zTMVJ2Y)`z4^s&9=I-`@4{n%~92&6uyMx@{nSa>~YFKcz9u_Lz^<61Ut6heDr<xQ-C
z^wk{9$OmHu$638fV?g*|42PY+gDSsAbO;p@U(FFWh(L?4=70poA#wqF`Ga2|I?S3>
z8BH>WWAe2*Fd=g|hS%oOTn5w;_OB|VR^|w%A8rfo1Q9oe6OB4t2AzJC*;Pip%+Z)k
z;NjK}WRAv=z{9;El!c-6Df_9)Xqoxcac(dn^C>wuu4O_71L+vMtBuh#bIiq|fpm;;
zL|GU}pRp-zP}XNLnQJZP1L?CEw(0mp1aL5rK4(YT7|n8@yLG35^f}diH!ejYtks5<
z6ufLVYioRL1csFuCG?7b#y`+Af<<pNZZ98EqVXA<n9v<j61|41Pb4ZlqU73Jt!uan
ze0&recB|2_d{l|X6H1VwW*k*g!rvJt5-OugTHi(QPlLq6G3?V@joX@xDbe_mAu)+t
z65}0CBvi(fw7kPwieZVVLYr7pFv5QLHlw*GII#pDu~}CPEdC;;ZBMz~=%82FB^p2f
zCoaJ3l49QTL;}n%!9W~^DH1fz@OII?#+cac!{hQhk>EmUcwBxb5+sy{$6IxxqiwZT
zSQ`~DSRLm_+iESUblfNvVPGu^^<R#QT^tB><jZln)PscV%W=7j0}0fZ<JiSvB35gW
zCFA03;UuH9H3(>qb2Vux8yA;JA3TNTxHytNuhYH3T4*nAW?Y$VTiuKX-fH|5OClb?
zOJ>I9r^P@5W@bDoQV1XcGc%6Wf+8M}h<Ikk>&}jgTpKY&5@A+c=Gr6+jq_?8xi&0m
zR60=R#qs@%f8}n&hdq0-CC?gtT7o0iVLV5v^IYR;(=d;WpM$jp>Ua%gL0nlHS5xCz
zeuinYY<J^N)nGaLwEbHUm+Ls>p}!z5<1~=4dO^HoDXgZC@ezZ^X$#}(lDLS|BoBIv
z;xbN?EW~Mx<IczUYSFl>iC_5`U#tZ<Xh5*UHF1zIr6w--lOO?E6L<ELwWzgM&AsP2
z!_#J!+Xu9fTosow1!MrRDlRvYAOW!|j*TS0jh6{)JL0&zG3t2(xAAtw;oNi^FN4b{
zyW`5fxN0q<+jtpy8;^MQZ(lH4cv|nFKB7Bv;u*T=lQ`Z>aXBbwZyay49HdsyP*8j%
zu6%C4^EcxUo@)FQt&In;??_yRY#^a`Brfj|fJAE_iAO(|txXKx+DGH+XR@^=4|<<E
ztu0w-?PI*Pe-t)g?l~1#zKyH)*uNY9hy1u}1v&hwxQvQ3+~H5f5fziCf`k>P;^A+v
zSRvwK?W?$Y=86?pQrB@U$Rjk;gRwB|bR07p1#Oare)}e_`5RLF0UjFf92@@+qt2t}
zoNfdY-FVLFMvyS@TwLC61qsx1aRf{h*@8rLaxR{~Qx?J_LoQKvhgFN00qO#a|I^4;
zUvSHy-S!2y3>r8W;_{<G8NS=T5SMqBL86Qc@zUSOGAQFmb-NI+b&HkaWniiKK8{No
z{@jDl^>{M(#B(on?<Ho241EiX9$MBz!eTn|{XQ;_eDN4Xe;*Ht`_Ui){Cym;rxZrf
z-^X(uWzjU^$n@{y`3_cVUNoqStoUEX^_?%e)uV0wMYjwZOc&$weqe?Vri*bzlcEgV
zW5UyGoF??iGA_m&+`-Sw(8}nxpV^#$8QUNI*)4>I+s|$r(s29P8E#NPMShNB@e_s6
zP3NEEweOM@alYC4bG*)PtqiXSme9-WqkkK@&X?UX=r+Y=w+zY*T#n06Yh-w4;Bp*`
zxhMnQ8p6{ury~4IL$Km<y!IXRx+LlWfj$X#_e(~3RiA{MyTL{E`XprT03-_OlSn(L
zlso8?K%l#XCgF^NNOu5R@sjcOqXS$BI+h-gkW&w205KpD7RTuz0Wlzf=uX&a!i)h4
zT&ouY!<7CsAkpwXe!`xi?80F7ezj56VX#|<1v3XHWP$=RC}VJ<?)4Isk_&?qm2IrG
zbUQsmarC%^@>pt-k2QTqt7UiVZA?=-gXQ>TA>hU(WZD4ofE$;PpA7;DxN(UJaRUG(
zOdgkL)>)cd2$Lz$9G7VRsC9yt#tfZ$&$6HDXZ*?Ad6ruWB`0Pj<bD@IC}mbceu)Pp
zN|}|wv@RM3Z~1^MyIYpxm!-@~)b3<`EM_u9>htX;gNz3})$`p_D19+MQ7E?28HLgp
z^Aj17{Q-$m<|mN-5v3HNl=+F)kBcc=DMBfT$>%4o>%#9OL!LNvF=~F|(at>gnW5<a
z&BRq-`|0)^%RH?W-GC=38;``o1rlYynUD(?NR<61)o{PCA3KDl38hZzeT9VrMk~9|
z5F_t-2rQ>t0`R1zt|!qakd`LoB9>9;6G%%FSi~qk%Hp6WQE(t3;-f4iYZAzW@-$hN
z;-lpW9v|HR0;tOqa_IpH+2sitAAtnw@&w|e<JdE)S(<UzCzM#~6P4{4W=y%cYwl+G
z>2v3!=J<d(eF7a5-Lp^9_ssd{&tIgEi*o{>C-3?EbKQG(&Efm$U7mgR27DHst=(hZ
z$o3C6B2VSo=bnF|=QEIcihqmz@vit9c~=LUe;U0f@O%DW*B&V7@fZ20)}QX$y=#vy
z&+@Oe_r$l;d-m$u<;fc?eA@hfzo5>Muj$#fD{Eh=#n^qHo8jsP+**7j{V!dfMNxkN
z>T}&;9188${cl~K?e=8nE<K)p;V<+d_y6nG>lymidaoCshnV=zy7=Hbsr=tF&-KK&
z+<SI=x_g&iFF^mPF5RAmIX!bPbno&4zVqI_S2ui#9hw~H<{mws>(P;|4_m4B6{3sL
zyyy(Hug?7uByVm*d{_=7I%9nz615IdrZG!v<W}m8554U9iAK!6X@s%KQvsHvPu;aO
zaYdgN$gQORs_0CRJMEUEjJitIPRGr%Jl(w0aWjy>*qI26vjdQ%l)w&%Zpvk8C$&2v
z68|9J@4Fp;2MNvHj=zJ1=5F%$Uud?>(ptVhA-<h+_+>+TXuoR$EmHek6KIjz?|3>C
z0kq%o^jugwlqk3;Jv|4>LkXPTa!=2Zrymub-U0+rk2;<X60%1fPX`IqqvYwd6Ub4^
z9ZQIv00?Lvb2X`3jwR$y08gQLEP-HpJ5?-4JAp3}%Gd0%amM>y@k?|r_(1u>sTD||
ze36im1xTQLkw9cY;T1@PS6?JbzfOpa05QZy;6y@h1SAVi@Fg2F-iWq8nUJs9$|w9a
z+fxaAM1o!izQRN&eU(t}7omR+#cJmg$`6UFL;okM!H2bYAVN}*u=ZR+ZU8{S+H(oH
z0RRbW&m~HJfVH#%AO;Uf&nMLH6Ji4(dC<F%kQ)HWLP+{uf;Ip&bLGR@Pl<wBeUf78
z%A?qy5=K^ZXr4Os7ulg8VB#;1i69~Si_@VXQPeNgq4bJMo?5$il07@oXn1??q#PmO
zayEbA#z#WX>77KRO{SEEwSLKhanh19NcKxQlV}-PGBC*}(Q84#l7UItSRf%gFexWd
zkU$-nl&)1qmJDVKCK<I`4t7<@kikjmQ;>nm;H0xbD<hv8nN-Fm|F@UGN5Oa?dI=;@
zMkZx1fdtCPr0gY-=%ta#lCeqAOT^&4G%BgSoD{tzdC(i3l)WTb=%q19r<ZDnwF$|B
zT2o}()JCxrlFqQJO>HwtwhaiFILR>)BxEN!Z37ZTO`^6zwnVK>_D^QRrWnndOvV8p
zp9aAsZc-QT6@i4x<RrdQMY&wHPFS0pELdxwnqqw53CvC6Fqcm6>W~rh*_LU>jTQ49
zC@=vvKPlfH2MMV8)Zde64X#7QFSMIYH`1QUg-JPZ!NrhSn3Pu_L6THbe(V+`Fcv29
zvD;1@0^@NB8$83fr*eslK;5(?DTBZ|yqlIJ<(vu<2uqTfQ`>R`P|H|srqRA?nTtTf
zahZ!i!*N+s9>>+;!*N*>ktof|b!b+8C&_2!79e2#J4qRZfQ05dNg0KJL}~9NomsgK
z8M<cf(V2#)?HadmeirB!PV@1aq>MbE0*Ez9L>}+aTZMJ8eNGniP1(6ujoZAT9Z9_6
z%V*=d)FZouTeJp&l6E<60TP(I9Jc@o%w6Ob|D}$pi;mI$n^X?icg{5)@>Jue@OV6c
z-hY$wS`SF*{WmGEmVkuE|2J9d06d;{;lv=1SNA97)e^};r|nP5t0j^Jp#4c)EosKf
zhrr<^z6e}9cYlvAtj>Jo*FZZ)kl!3m$}{1*ygv^oF_m}bx<LAr{d2z2rTM3>3U%P8
zNqG)jmv`W&Nt^@Ii;Z=u13ynH;Z$9A_Y$Lo)p^}Wm4hMHbv%ah=Sg{`0whZKJc*q-
zJ}d)eH0%lX=huzvTAfJBE689%<wUYn-1q_sl@m#voW4n+L|ts-v@=QN0_K;=UV5>i
z+}7SOUi4Ih=~R+-ac7*l1sXs&<IF7}(b8v<B^Tt}LJU5)e4A9y%eh7Jpm)}pTO<o}
z%Q-%`wBW{IzxP8@$*1b&*e`DyO{+kNHMFim=fOWD<u!hgu<3_niFj!iB(Q%-A_G9f
zpf2s{eiFl=B?xH#<O~Cl(EQ061|XsN)0JURm$q_!QsSx%2y{mu9MbaX2qYS~Pf8AE
zkU;8_lA{46kou%B8h(q+INt0WkSZ9$zFT12861$p+c#xM3gg{IEC?xf??R(?W?)KY
zvcZLy4NM`EjSvJvz#YWKlFXo#%w&TJnL#O;f#$C%4rU)OH0ossr^FD4A_aznQy2sf
zV?5RiYr|6o<5_Z%@larR%1F{7kXnyS7|Hr9GCEd{bgBj>sy5Q88c3KhG9^F$2@+Ks
znL;+6=IVN6-x%guY&5GJ<08;pIVM#o?&L#;gi<MylK}~YF)3s_J8}frIgWK-Y}`^c
z&P5>q9hZ`KSL*S(a$G7X(jFjzFpg}v9d)aZJah^l4ElDlaa(X=3IpPO3c>1A<)*OP
zmlz*ZPH}+21n?B6av)*al$4x=K>~ORHS7x<0S{-e`<EL3S2e>$pg3@bi$Il|k&+Qy
zeO|d4DGd9)G-uVPUYKVaZyOJL%ID#(0{0$pp)`-Wfwr6=QS7`FP7B&|9Z+wuQOk@D
zm2bGk(%k=s(<1eGDE3AwD7MBRNhgK5pDw}Gr>SEBE3Pp*RW5K5D6_P{MWFd(fr~)%
z#{xpYdm2E1>|!>l#<;WHVi$puu!~cLVx&O^2#Zs-u93B%>11)LQDbYLXn#y6H7R8|
zt7{v3tMN+=o%;Nx&>FV^X-cVa{0mQkQbT=9AuvcxDK)7&%Tpo*CI+Sy$k-|QR;Xmb
zw0BZ?pYaa3#5G}Ub*f-v%9E<f{jO)1r@OXi|9S^EfmWyRE=dygyM~-&E!*~vk*;2g
z`yadpV8WEODH*bXL@{eqSbuQv1Qk47m%{X4lxvUw;_8*_)vedFT}7qv5KWG!S4gzq
zI;W0!%5|lafCTV5auQ4gI*{Qc8`z(h8+F=ja3QD*Hn<Q}{Dzdwb3z3W8&a6%j?i7;
z24QV;s^Bo&zT7w*+MIIkvNfP;Zcm9*5D-Az?$j0}5Vt$E1qsCMRNHa18Z@BtcH6^O
z8WTJfyIm!!$?lX4Q6U7S-6@2qG}$(witJ5^ogfHw$zC}j(KBf7P05%8BsBM?oS35l
zk%z=&+Ytm>^N`aNAYu3+rzt=J>5wzog5;{0YzOIRiiTK%QU&wv18a<d-q4v8zI4nZ
zkA~D1=R{ku;tht@;+#_}JObi5rzt=J@f<Y;znI&QEdL&}Z)&8+`A4We6<~;)RCvsv
z%S)voq5XXdmr7UDIA}<Xa)|{t8fzcB<WvbvROymaC6Iu)l#(yafds@QS_Ei*0EtEH
zQcC_C6p<pmb}5B_gTh^KDg+9B)2w2X@l93Vv~)vo(FJ|e@){vXl+rgX{|yQxSHizR
z;Rp~AX!8MSybxmCS~b9hpvZARTIS9m1c(9Y4F3ZS(gDPPG%gkFB&TUewHj?7{*Upo
zr)so|L80U5v|KD91dP#XdG84%Fh-|w4+4KwLKrA;l6_{2@vf(8l8Zs<<Vh|D%^H)^
zazsG~7?aW%QL;Js&4sVG8E2}dyATvNOi#-jwhejQFg;x+a+n|iF+F{43+~DdsmW)h
zg)4)A=B%^~pFyJVS!wCYAfY)c?YMG7iW}yo#cf6qXx4eI4HP%bbE`pd!@RVN8z2m%
zd1<)vZSdqqVeQRy!B=Td>PB|7OpCBp+l^+CH`BPV-H#TRM(}8DaayUV`M^*-)%Yc5
zAMjDgVy6(0C}eS3-kt%8LKdfShCnkcNX)Q{)47_o*NWn6F~op-(T72nq}63<A5R=y
z;X-$58k@o>vI$q12;JTeq-kGx1Gfw1EoY-YG%72XyGBt^uski7^hSKpEKkeN+<*k|
z@-&vfM>qm51+8Mn4&#s2t6T)~u2pWeXw0li%fO@&A2X}cSUBiX5J+4KT9vLdN?Zye
z8tVp3Se35(B!8b)vT!MARr;xs9=fOkHJGtBtu#-y%-xOjW7i(+vmM6um0&q-OG9dH
zTE;ezhY@Sjsd7G2L2~`3&G?r^8qtti&mQ{7xT)QG7lGE{^=?DZh+3bPD>+nvus)4-
zm|vP}ggR@R)5`m7|3|nqhhL5zG^RGYjX`5-b6S4f8d^ZvoJMFb`k3BD-<)pv{*^wa
zQykvMThi)#SNd3Tp}W=XW64AxZwvB1?n^UHBO0bV*!8=N{*^mit7w$&aIK<Iy2EjA
zr~r9K8izh~<+KsqirB?2?lRg|?s5@mknVC@hl2ZE>7Yp6Lj?%C(m2w2f+Jv%e!_Zv
zY;>*q#6_UN`bk>u)En`^`boNu$o7K-!Y66`UC$<(Z5q*FJ!Y5eHa2^zj=30g+w+)<
zLBsS|TE6fI9bg<w<Aui!0t4qUr|i@xNW8W=<zmon&r@l6lGlhI$ec>cFUWud#;J5^
z#+rq9UVV7oos||$wQKD&X5uRbr9P96q<nZM9e2%2l{kOdw;Ci20nPsbfu3S*nOKVD
z7w^7+#KTFY;$w$I3DQrlNhD+^m10p7vY=iml`rDqWpBuW<gboHme#CSN_h&5aAE3X
z6#Ae<BA*A%FLuyV2v07>&Qk!x=ckm)_X+WGHe^Ba>@{ThO|?>FpTEZ!64b_+;YthE
z+wUDS{-y-pEJbuiTi?c1>jmuY<3`KY3rb~l1}2~ul*;G~B&=FM^`ZS@W2(Sn)E)c9
z4lnfh8~fvNT>sv6+=!KfE8;uIaG@&*H0LZP1bUUeG1d8P7W=}eDu3HmA>6m!La8a<
zCKX)zf(j^`Rexc$E4N)0Y98BFp((*86>|E<G$pKHUwvV;EnnfPP%Et{HO1J53{+N>
z78Uci?i<szx0?O_gmG*6YFC8@{OVGfJAe#SR+l1o@Hj68?z@g{KVdxCbe*e0qj6oS
zjNKaZ(YTJBXS#*HD96o)(t`dOyUUkGEnjGNDT2t2xWc8DQ*ZRk*rQGxn;JIhmyxR=
z*nsPoNs1R=K*EB487$))scS26IVV%_uH7$bc2Me$%J998SFOMWim@4mWmNixst#Iw
z&WL#IRN6e=Vq6BfYRc1yN9dIC8MXaY927HwI5P`jTm>1o(Dv0bU-gwQ#NjNThrxwy
z3p28(K|*O^27Q2QX3)XIC2V(@+2rvhIEj`j<Qz*f@_IaEpt2-`>+uwVfy7j^Boh>$
zKO&N!3NFcnZs4bal0&D0OERsm<A?7R<WV*3soLiC<u$HpRC-ND-s^x2%Bjg<sI}*&
zfm+VquWfdyT8=YZSvbYN%QG^5s^DwR@=RFl9zl{$21_Ts2Mbf-VQbi(b<BB{Yg`Bl
z<JM$k7zY^`u_lwLFAE@tTa&>{p1n8%id)Z`);0fDx!y&f&EI+#f&6cMCevIZkpHdE
zv~0yc>s3LE!zT7=U9(N)CKrJghfQuZ$Q?IjWXuZ{AZ*Hrj}o93SRA&nKh!gCsodfs
z(0TtB7lFSCkdeE0r~qM02CuZ-&uf7mdygHeXFgE%o{K<#$oZa&K#|;g8JR+@;ETh1
z8T>yFvY6DASRD4+f30u+)?2mL#h@5&uZuy8!(P`4S{(M06+>uosG!68!}d=N&0+W;
zl#4-&!(kVLPU{c5cF^K*nCw_Wr}Y(dT7S~s(Aa!ix#^^fLH`bP(#4=7`jeTkxKaTf
zV4Te04(AZz7C3<aCZk-NYR`H%#m8QDH8G#91jF$$dI9|#7mQBgzsZC}TvNeM;=jo>
zZO-3KsGtk6XW2iSnm1IQbrI;4{cJ|QrU4lsoXsRecnuQfoXud(q!6)!4$LpGZ=0Hx
zl^0wDiq9@&WNZZ)AY90#T1Xe;mufPtuebid5pYy~k#%ckK3aLvMWEyHi*7CGc>H1}
zEHV@o{CNCgrcpWnOhW}-wY|i=&CUBOFS!W#&W3u)MWFu%x|ET76{w&Vmoj)qgBG0%
zx`=z3jcsnWs=DkVgn)3_MWBE9xtx*FH&lRdIfH*GqCcjqpj*0qvrN0zytb-u_DW~a
zU;FgUUK#LVK=jSZdo9obMBi+#%=#;bz!lzsS@ySU%^sBlU5E%E2D%UtKn%=YsYe75
z1GA_{R}O*uy+c`@7Ut8HLtO;CN}&$T$~0?*5(UE0thhf4!=peLnr+g|x{o8^-wH;s
z%`ME|RgQ2GVz6O^YeNhOBiw4lfG~opK^dnC1%GZZn*F||d1uvV7oh|Qqg{j&AdJq+
zC>JU~7@frx?9sx-<CID~+R}WvYMcuZ2gEoRA`XagS-ESdP~w0Xmo2N~jMfBV8GBJH
z8m*IEj07+yXJsf?p(KDYIU5qM<ADUm<Sgz~^TcC?f*0avu)kkte$Z})3xRC6IwLFZ
z(?A9gGqUnE9FTyRk;Q8`tFQ$_W8h7;Wm(0x2VQU9=z9!5one}SCCl8}qyV!lEBB93
z1I)54_Ky_ygGAWBEL+FUisTtF#3raFi%)V>%BDg|Q#_JyYvwCfWaZKhCSX@&<pvid
zU{_?Z!96J2xfFXI_Iz9OaGSNRWu>ret!r5+AlAB;l>%ZdS%#2VQJaLdE!l#P>=EtE
z^`79CEY4o}KS4F2<@`O?`6hE<)q4&!m}tBA98UxZ==ZWEB0B;S(C=lDv^`JOHKFx&
z2P^Afe%EG)3qe`i9gcO7A)%~%e-0!dc4U!~{*0_^8rJq_3y#?jbTp570{gRwUGViV
zwJ8~Qh~0XN`FM*%S$U`eCZG;wOGPFYB%lsuv45jLtSK4uX;#Uk?$32#>pGhCneR7d
zt2SVX4ut>=`_wTEBv+7YJ4m2?n#I~ajM99~a2+6vfBb#%H|Egj7g;0%9!4R}$gVH5
zN;GvR|BL6Qx0-D#K#N!iPXYO5Rt6j(0r_PX0SEt!=w@W$X*T6n^OK6xt`3=TIxAnx
zhYWO1XOYtC3@e(4wX@lRVQl7Y=A+@WWChJb&0&RhA*=kzLbsdGSL2r`AADe4aLNY>
ztP4~=`6x*E=!I<bNBAh+8XyKgGx{#8Ud)Q~Xvu@#_gQ%!Em_!<{*a}-15KvQsVYBb
z@%Kn|aue<_D=P5Yv4QIIb5@>-Ll9U$XK^M@M-a^^PV1dxf4IZE`H9{+aS}sZ==9FX
z@8N=kPVbz&76}sJMep1-_wmS-NFEUO&NaA~2ZWMC0b%c4r@Q%JYfcdTb3CcUGIyF<
zMgN=}a(IN&`sd`31Ib05oKkZN>V~rRPnthIhTlZwqz8e72Mx{1#R4RNhUVmy01`k$
za~OEI&EUhQl}6+W#^%J=;AmwUk@N9?t@q*6NjTWaDc6YaN`b^v(Bd5<kZ7clRQ;Q<
z)x<}WXtuuaTeD+kbWXm_0VZTd=di!Wn+uQu^)h?#F7x)>%Q^XG6qv-#VW>@~w?^<8
z6_zWQ$=2OvP7AP{kAHpE7baUKvhJPC-kFIx`BDX#P@R~=V8DkfAp;X$Vg9?#-)COQ
z$sIA6ka;DCO$~-0WI#<}eeX7(%uJC@O-$nEa5Q!^mq7zfW9mKTZ!*(z@`x?WH?`Ap
zm{jnISg4@IXRvPfm^am(;o{I{b_U_#FR&H$+OYOUu3%TrllsBSzJ1V)*vIZMPkVxI
z<S>8m6!f)Jtp)7peder+1v%-PV4@-ma&oT%680>}VXv~8;>T;Lnl<*~`^~MMsv4)$
z!NrtVlaq@xNRrBxh}aJ#Fluu6caXIP$AF<*ZTkVUy;`-^#h@sCYfkP7uI2u|H7EaA
z8zeBc=CHuiI&m#g?@QP1^axz{eaCh22!+4zxGqR8>bUN;)OI_$>vqI%B3ui|b$2?h
zi>CnE>9{UP0PQ5#?MLm~BCH+A6<o5{{lQd};DMZx7p>ZYTJ<os>J;`|XIOUFX<9r1
z;9;j}K?3kFH7&n;--4R<xczEpv$Lo2xMLK!XqMwSnKTDUQaSnVJxE|2&oyXBFRiI9
z$dyjAHeJkrR-JSas9{g$<c(p-0O4dVEjG#^fp9YC<hxrCdDi}}i-~;qSr>!yjAwH)
zT?!#!oXrKr7lS~OQVyFX>YNtT#1};8v;YCk3r_EVgysdOcR)h(LeA-(7L;80X)Y!f
zPn)0I!YR4<lhZGd0mM&Ezkme9Pt-362NbnsSnHF=*>ZJP^FX9ep1uS@>u^hSi`GA{
z3}M}$GKW{=mzaye2U`EUoQpvMt$$wLPXdYcpntw(NM5W5#Ng|}fV?_5FV+LegWkZr
zTn{7*>%pKrtp^m8wxo6+o>%Tp-JD}DK5cgD3PLQqc!U}b&&x>@Bo~!II!Is-&&zA}
zATieu&*wVvi^oKY^OxcI{9V?^qO$OVF?n29*yLeNx|wxZ*Mt#aU7s;0mV@oooD3S1
zmmh*?$sJ)#9%p#;)wq`A2jf`7Zsz@M#<_Nq8;r|KXM_w8#^vP~7(kLvzEx{$65YCK
z71rkD@nx4)-OPkHG$)T&$oRa|iblx%JU<3xz5ilrE$2Hn;Smt$=jH4J5{UEj7$W->
z7}W|EYm4&AlDwMQ#_pbL+-d9GP0Ldao~RTg0I(=8FW-O!z@ogod;=2QxhP+23A&S#
zI>eyvR2S#v<r~RC`z_AP%Qun*pv8GyzQOxp(1XCTJWgM0@yj=(pEK)}gLaIdmR**Y
zmv0~p-DP<k2R+MmK`m!TpEJ9cFLza_DVOJE0<9Hq%H??^(CTv)jHp%YU(cHj9$%H0
zU({^HhtjIN9E2c&yDBeF=|I9uR^`*T$coa-7}#O1%9q~EBLWhT7sprSZ|cBz(yeIt
zt!4UO%^RxLI-L$CaUJIb2}{@J<@OIGid~yW4tx-~UMrexHn5leY7VK~;6hNYWrGVr
zxt0z2u*mm71rQtZ$oEh_tQF;2Hn9#p%qCTvTm;IsY;qAO*Rm-e7JDA30AW)e)8H&x
zrCL!mwB26V!<_ADwcTxFO0R6s%Zww0ptL=Y#hG6?YK8QQwmYx<7tSRv9L;4-UobCM
zgXi=s<yLk(a|ILtusa_u;jtq~IM?oc{J(OpAO@c+_T<%la;}g(=zZeM6_SOyVlSU7
zXbNpbX_|w1_m#7j;Gki_5;ylj!jyw~8K8j#<iWf%kG7%|&9OW`^!p<SxX&@SDJfBN
z%xy|a)Evvp2o1tOI+m9a8a~_hMZVx%UPNfLYyToIzx;`>t<j~fyZ&xgWKLixP+G(X
zCPu~ynnmtFq!OWlaFV_9ck{QIlbDaB3`IpJ^VpQ&dI)4deZ_n)nw>IV<z-+7CUNr!
z%pT%0FzPhx@uK-i=5$^Lco7~IozCaWBo1nMhMgjuGkN)5bcCn)&*X9Rgl|%yEL8n0
z`~5%6*15BJ8BBtSvd-oaOfJH_<-=#%`j_D!IT!xJY~l^}FGGFl-Qg(JcR(3C{crPu
z%z!dkVQ`^5pbQnJ7q6pK;X&;2m&|sVL1pq56_}72RED96R3KzP4Po!T1e_sw(VI64
zn8YnZW$xiJsPHh>qT0MKGptNDN|aZ4SQ#3n1D8RCN3hqb&6_hL%H#|2QC{H@Wf+eX
zDn_ZoqnOd#yeTuPOoo$SqO4J62q&>HK?a^RhCS2U{9R^DnGA2igv^*Sgty3tKn8<y
zEZg7PyfZV_m7#Zr$C3;NE@Uw3#<QFIm`yU{%Y>s66Efq=FazT(1tfBqjJ@2)Y?)(j
z`_QZRjM}G$qHuglZdzHveD*~jb6I#=8E&Xi`^TvLr<W;Z;@xeKXll^>ERLQ6V>;EF
zJ`WwEewfK}{meTuGaXyNgv?B`<=<Qe)ND4SpIM!m?er%;;6_~P&-Ppf{eV9->u+|b
zJ;!Ok81IKU)PA^Mi?YxU^UCm=OnX+;+bm`C`kPI2VDS54^caZq%F1e6UsHh68mCNU
z1v}Ue{mrjJZ<ZlI;j3b6s@~Evu_}%pXlmt4%jCR+N2txxGPx>(gi%Y&uqsmWvNct;
zhHV&#<Yi5nj3~fF$Jdm}hyo-DmC5@$Ac0Urm82QBHC1^zyKxX^+~qC;xyAA_d2k6C
zAS^Gda~-)WsQ_Vl8E$LvPt3F?a-BVQkU7Frv93%mQQ$&pU71{>K#~;o^Cns=T2sUQ
zhdn;T++6klO`Us`6~&#$XPSGjbZ4V-L4*PC#oN=jyTt(!fnnY}6woAU9&X|>C&#$^
zN7n2nIeX5Y-Lsp3h(Z)_covR`JmjGx2vO&XnlPKlV|)PWh{#4@B8W#F0UxM<xSwBD
zH8=nD_t#aws{Xy|*Im_BJId`!!nmVgKf6)}7CQ=6CS3)>Vn=~=RpR70G4HN|d4-*E
zpPL!kWtA<rsMuAo5fVtnu0j$a$H~*}DVTpfHr?-LChaNrKt`)QW!cGSwWnYMBo$$_
zr$B(5*%x)z5+Mr}_xP1nHw;rZ^ri=wE}rYY+o#{LLh?pXE1LblYW9&<H2XoKS#H7m
zgG94Hcz+<8l{GN6BJy7KdaFCFrng*0RM}gwA5bVmmEHm$Fq(B0RCz*8UEofba3Xo2
zTD`pIMDjpDIGiZh^b!b%69v-C4oR|VftgbU=S-oLTj`FdoDKnbKry2rkm{!jHe&`-
z{Zzqb%s@uLQ-y(N3MOL~f*u9GD5OpoOvY?!)cdkvGiFO-6#S|n8MA1&R_x<krBUw~
z5Gp&D=od&g&L#Q<!tUI8{nm<Q%<_$XI~Ti|iL-p`8{E?OtZx8eG|RX81;S{SkA7J#
zn;OryHh#q;sJD5T`c-dwi1L@XSN5CZ_w|k6ju-9T@0-6a0I<H_x1s{V`hMR!E)drD
z`>6Lnc)anVh6mJ$rS5;$JW#G8>V3es=U-EXDi8SlSs=4W<Hb`KsyCLpx6~~3?KeM&
zR9WcTy_|tmS?H4tF#=Epv_##a+=(?y%B_eFm-u$qO3FwfpFl2hA1`uWrY5X&hp58}
zr&{LQw1Yd;TjpD*0#a|8pE%Wc5&8-%^a~$!GmR?}p>s>$vqA^LXhkA)AdFUs(0_{1
z>#~{Ee#M*W<_F!|`mOf+7LBOuMAU1or~xosn>-N^hHDd117WyUM12KMR3{SJpysx@
zSJrGOR}oQf@U16NhAJC;Jn4J73ZiaTN88++Mzoi!2&48yJ9S#r?V_DMGBZ{uvff&{
z<01Dor*UiY=uqkDR^L845FT57n?M7llFz{Pfw*6t2*0!Rn-%UaD_c6tJmlL%XPJlS
zq0_f>jnsihr_X?-UAPWCWOn$@%caX!x??z!r`&%L`wrjwF6F4V!?(T*#CLc217G%y
z?+QWt?oL1Tl5c$1(x|t~x4vsh_->b<_->uV*WJF!V5h8eFBt>HkW2;(q$|4<Qv$+r
z_jyyQlZ2z&n9^hbLg_9GLtX~D%fgVCf$qeXC=91=v8AIj-qvR``~8ZK)sNS>NBZse
z`wlb4R4>MK&>9l}jt3Jl0pWNsF(x1!4~j8~Wz>re^r#_g-J2SEl0HF%Lr>BtpcL}$
zmh3<{^!Q{RGFw<LZhS<oU(0OakunDn*%9CVGEEsc9PtA)V+n-A5#KHdtQT}lT=eo0
z#}e;^NR?xWNP$x5yh!WCvU=CIuH)lMZ@E=5tlo0J#jtu4SyBZSy&}tJFF}?K+04V$
z6{XVd^=`@Q_i%NRyfla~S5}*qy#QFQthPZA2+Nh#HV6V?xw0BzzAS&iHOOP0F8%XU
z?yCdFp02im2C9&&2VbGn4Iq_HSMx`cUMJOn05dZKXLgXPdRqS+vc7atmpiC(Iz%%}
zQ3MV%18eF)ILr*JsRJ?fnZdx>fiZO<Xj8vCNZlJ4Q@1qg%?hlkTN0*zPavlLNPqnZ
zjF|0#voT1O*1hB|cW(!nFFOs|_uB*O`#?I?9@w!42=n%Uq+ezqfOM)o@Hf&a`P*Iy
zbPBV0BCs=L4Wh)&fzEiY0dQ|~a9(Jlyv>1)&fJCj<{*jA4HBI@)}QP~{~hHHN?h(J
zcTfUEN4bL%AUXo{|DpI&V>a_#Q1ONuxzGKe-*Z8-n7L8Z-x(P71K`-1=m7}F&cLc4
z2*=I<^}i)KV54YhyZY)a_w5ne%XLKi+XL4e7D5^7Y!BF&eXgm4`*baR+nqn6i@$ZW
zg*0k)cLf*dWni!sb$10U1CtT0QP3+^Y5=76N+LBNjlGgc4XDc|Qfm}}zpjwl>1kXG
zNMr}(NncN72ZYh<iR^$ddR=6<nhlClP1(%8pyHFDvTDjO)%<+=($YWupPR1iw=YP3
zC2bNhzGK8#4}keQiAaDje<u+m5a#cQ7@w3;qX{u)-VL1haflVNUCsve<vZ@o>5z;&
zP=NaHChh>F{=11g0I|GxgMsf`cMyVhha*Aim~{tBqu$ZP9V`iVcu%{7$ht{_+lN8<
z+l9LD5TC)Jn843{dh%f+Zy+2$Ja45<0#9mrPvRPRpG@QpL?kB@c>`f|GLbh>YKpw&
zAERdG@q&uC)bzvdPlC?_!oKX7)69aeuL9@mASLHETmUu;zJ#W}KI}d_?R1cuqCc6L
zTRh8|AT{alC^T|bC<(h6MQ2tq<^6ZU4Mk{@I@ja=*R;Eee_vVNKW7$G&1H6?hP#WL
z9i6b7Q*`FSj_<g(cSJg&sm{N-Z%qGv(Jn{Ry%R~_S4`bmW+%eCzsNbd3A=ekX94Ww
za6MgxNM%X#{nL<;;{2jLO3zT>`#{ki+Gi;6Z7rrQm;F186c-nrWibAigfZJS2}zAU
z;{M{ACB;-zxl{7~yR>L`9n$Q?Gn6!`Uwxa!?w6~*N0^9OUbF@ak$x>N+PDFv&hjD#
zuUA(zixI6<E04MhYgU%)h>@=>+PFa(>Z~jhH)IdfW)asK^|SZfx>0M2Hf}(q%9^5$
z8$hb8DH1onkp+Ftz|0Fp=TD`V-gD2TZ|Bkkc5YycFBENH2g2rsq7Cdo*t}4*fgOl@
zy-@W3R5XEI2qv)qu}EOQN0xUrOQ3nR6!*Fp^l5yx+>V6!SBrM$g+jFRYVl&@OF-Ir
zwMbqeuGcIPes56^4r2h++*`D62c+iSq8%K7)ZAN4!d$Z?ANz{>eQ7d)zU(XaL0*XW
zm7i5Iw|(VjmCS8l5x-meZ5*#9n>khFRQ0b;x{qcqK2_vj+q>nXY>R05Y-!_{?md+w
z&n7B^3bV6CS1-wxLNGg9lno&y)VGLsW`yeY)9#}qW`x!@plY(s+<{b@5t6yzXIeth
zvrD7TxN|E<%?{1tUswsR+2KI_!A&5QW{0R~mu{&q6GU@E=V5i?th@7~xnbW6IkZ`N
zK(YC1$Jg%nYvzY3a~=Xjc+C$7M)*To%1EJbc#U4W+aj85Ro9+#8*5s_lo`YzQl&M#
z#C);_Ql&Lyna*{(6(qb+J$cTZTC*@rnZ1Quw8|ESgY+hOv?3~77%~Sc>jYXvV~bVw
zH|}*ci^G&&gDpf_SseB^Q?Ed(EDl+AC(C_XB&lAi)HiN(&C-yQ2TkWCeO?;o#JA;H
zBz;~QHZ<AC=cC@TC4Ic_*DMQD#_C%1BKBqB;E}e5d`MpwUVV*ThTI~b_}Z4t^jd1#
z$~EN6d0V-Ld^vBE8uEjBi+t@~zT~)f^T_34%FHQ3qsH>^QgZ+VkQ&Rw5m$K&<hQB`
z+03S};y~$Fm0oL~?52=8Z8^Yo0ydV}96Enc{nB3jkGL{F=tGCw=I|n;J|NsShpZrx
zybFkXZVs#d5SnQrA?VqXEg>s=B@?q0>}rcz#Xl$mw}eg2UP*@D31U`TL+ARc4UTLA
zdR6Ik+Urw!8zd7dD1fH6hIRrLs4Lj*o`LjbYsfDEB7PtO-x`jcCR>DRsBe#(>diE*
z(T8oNpIqRjDu1@E+=O`kw$MhS3EI@Rh4%Fj2#;+cuZN}y`B1wp%wKJr&=Vos!eOJl
zZ)CaG1c`awAzR43(AWE2dODZMgGkKlF1I31&|PjtoS<7;F+!D?*B$2HMyRrs2DT=p
zcr#4x4^4(`Y1G>n+6>#0NGaY5CBr`4Pd*8A7{;NnVt!Ov^;+dHwdGKHpgMe^_m}LU
zFg-;7n!t${Y)BV6!}WTR07&1!+S}4V#CAC3n@B5C1atRj=^GAutjrw^9ldN=sFXSy
zvTS&QE(Cf{jqK-5%DorbeMUL*LZ~5cBJw?3pLlUhwf6JI1jj;Wga}xOlsOiTy4st=
zt~OxFVnTLY`>K!LCRVXc?C{bRS?|TlM(EnTr4+SJh9mV0pFqTNG8{Eo?-eVMKA#M)
zp5(EY1h-MeCu;ZruRixlxpR6ZLpo<30K5BC%^JW1d|K|DeAxd~I)}%=hmi1@Iy%5>
z%6}Hx-FYEW=ChC=>DbRg3Sls3N)s>fkp7v_(S9#fN}UPWX8aBFm^l8ds5JUg?}tu)
zR&-us@^yb!M5iR<ryAZqN39#|y`7&EIoj-nNTE4VZJl?<6k-Bvo?21meVv~dotLZZ
zraLbhHJZ@mq$XxF3!;jL)N@0;8?y@{UPhX+-iZ<d7Ddhy#h}<UohuWxpd-IU(O~n}
zHW2YHiufuo)(XU07e&=eA`=3HphLjo$c6w*p$Cg2X1uewiY3Xas>KoU;B&eTk#^c5
zC#ZT4Q{6w*JJAF(9>hJ=))rYm1?sYP;UADbwMESDusyev=4g~hqKcBr<h)hcN1}92
zTRNwmkklX(ZRzS@&dcP0`WMJFH|gNY2+hfq%%#$oRf?I2k-1foqklRQB4t)ZL>!h4
z13|0Rjd^dZzq-svQ-u#N>6D>kYa-{G!VtBp-R-ZQ&wKsz5R4^o8y;&SEMYb)d?=2=
zKUM0@6FD27iX3CnP$~6P#3u~#5+F>UipEUU1}>1!J{66fB2(<#Mp93!(bZl}?&-+-
z2t-&s9pNMYrpsX9&#2#3d%w;<6FK87Uor4!qPlu-v6#}OV&NU?+kv+<-%;+1Sa^r@
z<rYk767RK9#cS%%f%l`}xrl#FB+Z?~%R*=5ycnhANcjuE=4C->rG}#S+sd*38>J@d
zMAzJd=bxk0um6t1BmO1g6+njHNn)BiBd1Fp550!zT$z0oq4VTBqoHQd22yKh#Cj<)
zO(3SZGYY$`X$nD`=B~svErr&1C8lXfVw$_eH1*5&B+MbRJ973$sj407@yL7q=OAO6
z+(VeVBl|xpkUs5>3Oc0G2{Fyx5mCeRN!}NCN2B-BCmA2PPoJ{%U{92~N=^fEQj@cp
zH=~Nbse`enE`Bp&E1m^1f=w3tJy5#m3a@|VO$Q>I(m|!Y1Cia@6G(dpBJyw<vVcUO
z15wtTHY||zS(oVF;JszoQopD4{&0`YSbEBA<uQ69`#F8GevF=o54MJ_47NQ{|L<yz
zaaY(1Wq{e1(NcJ<o@jK^wk|~5JyG)w-WRfWJEzZl6jj_6S602x-tE8mclE}*>3-^=
zDV|$8P~*K(nf)lT%NhsC!}sE4W?3VU?t%5}RvJiCy%DoptfU2U^SJ7Jm3LeIcoGC5
zQs%g5;`cI?4H8HFtaSHP-nT0ApC$eaRmkGMPl^)^5(oZLZ5-uo$$uHy&AuU0=*x(O
z7kXpuLE^S&)o-u%_6|E6IocYjDPDV4tno#|3BQ~XtA8EsZO_k$9kU>Fkao-&F>~lG
zsQy}}&|~%(x%nEeIXf$6<&W6^wPOGG#?BnIrPdoe9f-w&O~wc0aqo@o@d7})d~eKm
zaj`fc7I$x4m=l`-Ed=cavtt{eErs6Bj%|RpB=LgTF<x*R%HrgmxpBqfSpDM|@79av
z#_4JuRtJk_=Bdsx-iX}1*oG{Ku$vbXCfL6;txwdMul`}IH$FE%c4~FJfk>J8F;k&3
zpmH3J%<9}R)@#Z=5ZjmpQK&I7NoM6a?nYh^wvF{B=2~M%Z}lid%CyGg>qJ;Ul(9hN
z$9c`U1+fj?5Gk`DCUnbkhQSge7pngm=Z(uPjGYGCABm9*<K`A`k}iXg7pd3AdDr@j
z%4H-*E|M~LqOR*$_8M0#$9{jRZXM%QsUOsO-^r?&8BEdJb)vTiW9K2!Tf=m&%<6LJ
zXzanbVBUg&Jl2Ep@GG^(fN1Q&xaJ|NF(GJ;wIv#}6uQ!uXv~sCV{M|b6EYC;`@yQX
zVhjE2sT{Vn$s3?%jQ8Hmu8Pxnt-C7G-D;F(yb4Ia!1~=G4WxzDF-I@)XC;uEkE+dx
zIrnI}j41I@DRY@F16r%TRqy3<Yh#<Ea59ci<J$4I3{SgGO_eh1Vw*x%X(g_UNg=B>
zAC$OW-Ba%sbL$gDbJh)f){CNLjZBp&@iEoKiD8#NmM9t`WgZhnoBp80$I+g;u-+R~
zkas+g8Skp}N{z?GwuWhT40rA7Hw|7P*B;x<iLG8>*B%oz0$ql%$H_wtUYL6#cJ$#Z
z^h46QCt{ZGnKEQ^8`UW(v#~4!$>lbR2rk!rNaZ%E`bN*sZHgT;uCu8GWj4k98D+Xo
zCif&e<RhjhV@LnNMO%`|JsI-{m*K<TV4Kxe_~bX2pG%HC*c{h2cz0l<Q?i+-<BF|p
zk?;LH`*h6C>SCHx#56l%=UEd{fCvg~_Jjc<sgC$Ev$ZV{m32svl8^$#Ks(~-S!<v|
z&<0vc4AfHSM=3E-OA-SuiGhB~V&F7~%xsS<-p*j5M^eMoiLUg368C=WWVa_aIz()A
z$9WqC(lxNLQ6P=%5c`vSYlztBPIYpEH$1m95k5r9>=faX=u!r>OVv&ECggX;HvfYt
z)L1fi86Ad5q}g3+o9NwK>F-X=0V<_-i#bftg|N~+SXW`RI<dU(09BamU6F@i3~Y$D
z*F9ojcNv}-Y<KC-$-L#}yUQ($#db@}d|8#2(Zqf=?^^Hq>iw}(r(+XD3hj?MIPQDs
zbZR#9*SMkwskIoPsTtRK*Yy9ZXjgLisiNJ3v2!?9Lx+0f)Vb@t%yh8PE_adA!9=@2
zp7mg&T_D;$7)OV#c7>p|dnnParO=~8iFPeXw0lUj`$y3(N85ZDSDc`mn^MC{cTe%g
zI@u57^kq8s3>Ce8gk()ReqtKwIMAfy+=Tl_A{23T4x3?kR|Bs1zMJojZSo9}GQF{!
z)+B-(DjNJ)&A8s1m;1O}NK>WI?Yaz)dRz^^!Mh`WJaMX_TC2xnwtJA%$EIa7pT-r8
z`8RmCW<QPjFGd_@nuzrCm}8G*3|2RO$IJW@XntPeCLR1dw!29KY3B2og?i#IKqUHk
iT>QdHR0vw4rxJ-;3J-89k*Fn!L{A}6b@LC>wf_(2rk{!c

delta 45918
zcmZsEcbHbi_5Z&2z3**X-o9^J-Uf?+?jqf?OA$@P-lB;n5;Z0<#Ux5h@=fB>%OXf0
zK<NTf7ipI!O^OuhAW{^>0)hw#C`kEz&dgjc@%cT^{;}uWb3Sus=FFKh<=%J2*v1z|
zHSXHe(^Ki`?WxZ9)jq16IAg!|sPF8X*78L`OAq-H1*h%WQ@+c-(3o)^OVJ8K+BZtU
zEU%~ergC=pXW9eym*;&QQp%=Ag8FAjJ6+6*bJ{GseqKwK`@d0)nDv~cY6VI`NIk>u
z`>FPP<rzhbS;dx*m<qT`yxbwZMBd!qI_Tp%o{-wr{^Y0HCrU+EuNIe59w>G7CT?^{
zD0TI=?qof~b?~q!JARM$TxCzM7L+myalN5>4hfZ>-bS}u12wJ#a;W{Ed$oYKa;RI5
z7fM6Di5sMnm!!PSJ6M}MTuBY7BiWJ%v=1srdbNxcQlT@_o4wT`p)=BZXJ>1G(D8-T
zH`#&*wbv`(bai~tdDEM1D|LL(dDGkJ8Edd;1TCaawO@Kj8>&=J^=c(jN`ul=uRraO
zP@3v(e5*B66r_jLnXJX5+U%w?y;`Xh(xEfc8>@6k=*;xq`mi-kwG<V7yU1Ix)($+T
zHB$VGyhc6ix0b5%j$6up`ndM{W=p*aZ%|^QYnFOL9GOT!E%hdn)<hH!+7r@Nc$GEm
z(Bs;K8vJKbk;F#>tnd~(C?24!@P>HD(o>+U@TSTvzYsPErQRB^*9uxDJvaK8A=F`|
zSH0N^TZIlwEdg_tSH10jnLu0ZRd3J#FBi@Eo>zUq`W6nY!p_a!f;U+H=h~UzX0H*o
z##046<gHu1Y~|a=8*Jq-G_CnouVU~z;1P`8>NSfT62)xw`UBR#xFR0z^eV~ZAKAdQ
zMkm(cNv)y+j6x|*HQwnhiaI2ecY5Oq>n5&@YV2WeJgHT7-s7~HM^Vsbdz>}{34}dP
z%Yy{M9%^}NV2}opse5>f5h+@1kGHIoHA~@zK;eMh=qatKr}}_fiWlv2z+0G=I9`-;
zz?-|pAxX)5dzH1Zm}9{Azq5z^QroOmf9GPT!1&HvSYIlkbwM_`$svL9oww=D)(rSH
zOhvVN+hd;7W-0A^tI|WjCAKO(1SBwetDy!GgT_X0^@c{)8=@{+NPA6H2HUm2)smhX
z{Ofd*2EEr*Q#hJO(V+L58Y$(T1rnb1ni?CddaaOUz!nYdR1(q#sOliqC)<wmpf?cJ
zf|%)uX(8Y1s<y&oWq36((uS!@J{ioig>^=>l}FLh3}6Yb1_@J!sfjXK1s#yX)J)F0
zB0LQpHd<weXX+R3^e6@zcC_0V1{!0u+ZYCrMynw{=3$Kiq|s`wzBN*TD=Q&wqFV62
zJ^ckO<_Szxjkxe-g?xE3+x`b_V(ZCH1Az&w$*S~XkieR(!i#s4RpeyabXBQS)#Mt_
z(DBs?w)&6S!Wytd1497%)13we3H|A6B+45YBpP_ST3RO?m>9f)XQ=9I*}#$qy_rq}
zOBNb<7H{BcZVCp)TvaJcHqEl{{-oVn4MKzyMN!bwbJfBCZ(5MBX|5XNlMCuVLu0O*
zOj)mqI)Pls{`_ZcVD&;5g8Y7=S||o2Q~<G1EzL_riunuG@`l!V@;606_bj(>c~SeP
zr+T@IL4LnnEfgINAz&<56Ji*E1jcf;;SJnh_-J0GvUlo?WGfKRT;;e5NNBEdTm>XF
zS6y=zUfcE3RY1U&^{x#XTxGrEDtHQ{^^U861k!qPl|>ZwydmuawcrH%*WWbT|AA_R
zte>HFULN#VyO*>lDz-Wu4JMGbI*tMoNL$HK9_A`|xP!g-lJ;oz4#yU+;z6x;INbu0
zgq&^x34|TgEqzoDf&SfZKl-v}D%Ja44C>nbYN3d0Uf#9))fAueVJUU(ezmfxHB?}L
z{M;V(cP*+^f9_&X-+rzZ@>w5B)VH6jX%UY=l9GyeG?V()OMQFXKK>7_($n_1i$Q&R
z+_i)H_PCnjQz+>G<G9+axz!)->cbRzN-g+-J@GHC)_+R%MW|hUd<H$uPW?-JB7Is_
z_~<1j>U~<x<*moK3~;|?&;OtHc;;JGNs;?OhBBRR)pW*s3myy_<axI5|FkLT^Qw}N
zLY%9X)w4Qr8Cdi^8~bnV-t_mXl9Mu&%6zXjD7SvcWl+_NO#hGeLiVC-5Tz~`$)M$4
z)CB>cr>|hPJ?KB$yB>c}pD)HM!)L}`?3b^iGQE5XA16LAq1(%cancU>9vX*z*!EYo
z4w*hag(r8!giIe_qsBZJ0u8d3HLKBH&(!*qhTKpviR)|J#QGMU0wL69ko`%G_IFQu
zkWb;=Ph3b1@}c{m=0d2>5cX0x?bqocK81G;WT-kreCQfDDo6~EVeC{l?a}gKu1S=6
z4I`6Y$CLyi^z}HOa!0bOkKG)x+SyaPYxgN_!D=kcqpWM3@1_cegn8q9l^v`SOCxpi
zuyMYo?X3@~zYzLE>RYT?FYTkuTRx?kRH7{GEnmx4R&V$&gfIcjvK#l-3?)0uZ3qKW
zv#23f(TG(;+B{#u3ifbcZKZ#n4|xh28UYEReF4k%(>hcv@F_YKKulP%z-JUYB#d0(
z3k0oOxe6XGVgvhWx3^y8s?ZQ!<TJ!{sq!JZ$cJeDJXe7!OVI|&C$dlc{(08EpB7=^
zTJ4?+FuA9S2?H`^VxC5zM43x{n5Q4&0HBt$+FI?Aw#$7oc&iGH&gDLtEr5gx%Y6-+
zNULddF85VbTJLG7zb~Y1^A&t%C;Mx6c>UXaNKRV-*+&hqgZ*)!)~aHMPtHwX0&0iP
z6!91&pmz9>R<`6Sc(|K=Fi>k<vD;|?ACFPHeMXp<4iYN6eWfw0Iafgg>}5B<uC=V#
z>#C5K@AV;gQmgxTmG}ChrPj?{1pxcm;McY075iNks^fkimPA5@>bT#BNGJ@08-L7B
zy{@&c{@7_HpF;8HV_%_YSdc*Y*jFy%4@e+<Oin(VrZ^vY`4RTqAZ<?DBQ6A`R7ZR=
zrGg9~j`(Ei4iXSYd`KY2V%VcJ?WC`upZ)M)ZH%Y<r0^oIs_7x^oKLynQ>_VJO9$P@
z^dj65&khgO#(O%Q_o?-*0J16Z3{Cc(PyP9I9F+6DPi=|13%uT%Qmd)fbf1HVkV8EC
z(lBkB(yEW9Hg>fsc=XlO=aHMq63|7yewsSTV-2DBt&uAXviC79;;9&<NnZdLwH>6%
zL=Ysb7^K0o@8UXmIFzMEX+NzVs!7Mx_#$PfCff@n327nGX&`|xR70mNwKxO}n{JOA
zrB(YXrfZ7HyH?}#)pQNkQcr_~(sU}eDc1oti<#rJW-VuFipX9xJ^*HEL6L!jBq6PS
z1FHj9fpg5!l!|1F>_cqTP9w~|`nguZULU8Ws=yZsk;c7cj#el#M369jj+SX8tsrli
zquqEDA3GX3%RKhQIIUInJQsm7l6ji+H^=~Co>tyeB9ODp)0(%irjfsC6fhUDpO4pO
z+_lJs(1@!QiqHTVKrGT^XaEU_MH)iGER#dPvo>nVR!vR5X|mUUtCg`tp;cnPG(r2X
zT7xGd;na8<z0vJRN~1SYi_%&VPmyqL)JnH%BBLh;PdGPe>K098^pXd?&9IPX^pb^y
z^8<}C`U7ch5+d?YU5O<>uwR^_{lZ@f!m)x<@S(aX20e@e+E5*XeuroellBD8EzovV
zj&yZQ=#11&u>gRJKxd?m1pr^epxHv|So^z$T0KwoSp8a0TIijz`ZXuCfH77N@%bFp
zwSX~JZ_v=1D#|Sksgu~li?nIglU#^GKumHW3IQ=m4>|r-2#85~{c>xm!7E)9Qf<4<
zVy#-Owq1-O^rfv|bEqO<*m_2!VVY6|3|p_f*;+wqn5Gnm)HU`y?`j>C>NPG#F)-HX
z*IcR?7;E%vE>#SSHG1=w))`Ti67(x;x>7q^z0rjz0mMdKu1+<j1P~kbTnp)yC4ktd
zx4y-?g6$lb;SZ???O(6bx_UbtbTRzEIH(soUFQeJK|SnvsUH{z^>o(iM=M;6%8+(R
zSFY-IZmrfwtHJ-y7z+UBl3pmbJ|GC3OM1-d-2iYdQSS=B48Sih>G`X=*u#K0t;nHr
zSy!9#g{EX7j9eiWEh;r77*e|%d{KGVKf65t;>&DVo#Af<KFY=eF|&aLP<KNvEkUB}
z?uN6pM6QCEX^5pIB`!o=t3?RT(bu@<Uu05WLoO{L45YpW)(ay{ObQsHlZ=A?_S+w5
z!_~kf153+c)LA;k+_%~NJG2p1Z#&Rn0{U$S8YH0KHbQ)dj8p*qwvn%I-OUm3a0bil
z)b6RC;UdsB(F_-XBJd0&B-Us;kH9kwY?|~GMxbhSY|2ipcU7GWLD8+wg`mm0&IpO#
z)_FXxGmu#Slp6t)=Ca@K(mGYobrHNknCl|Y+&$Nj)27bD^IQYd<|L$!s1{mxwS97z
zHd(1!?P4HtQCGVd6pvRstqdKMyV^j;{Z|eF*>!B|huTZk>s$nyyw|x16pz;#Vj~l!
zQaoN~WOG(uokPGq_S&!R)oQ)Z?KPALA0Il8z<Z6Tm<B*XX|I84faWHU2zPsp3Ncj^
z*~bhJr}7EJNQ(=AgZ)A99{ZWqU(^?=?NR%W2ebi7$D^*bI;=hFT1#6WN8PTcn0=JG
zeyNvRi-OM>O2gz#FI%xjPusuvL>uL)21^VzL{QY{j3F22AOUyAC>22vB;d{%Sk!D1
za0tGa?52mc4?NYETnrN?U2;vLV0_8#0t&{L$kAsAUqUeM#%?{L&8qHZUNeJYaW_+r
z6$Ao6bTdPIU4!PKSlrEQ)PxURT|p@BY4Y`bOAx3)Pg9OpkkIUD%JB*knmtWtyy^-<
zaP8E;eWrQZ*1Clkq3~L_aEidSrW~kH0Yt3{`+JpOpd#4JFbh7i>ps_1y>y0Yq^u>B
z92qoF-!YZa<P3#&bL>w~V7jRUN6c$@4%l~0nI?e*>^mlAS7dvnj;D+5ij&$TPvv4)
ziN@t((=6eR1R*FbHiIE+47H^}OSyO1m2b3hmG7Ezp#Uay-ZjhkraH+$=UubOjbe|+
zAaWJkbV?goxymhvhTbYu?o~mCgiLHf3@4{IXy|RT`<&L8w{n})*5E>Eo0$+{2PBlX
znee^$MUBv^d+qzqX&XIF_qrv~@Y-w2>D}PNYp;pv{i9MWiLt{r*eV!q-}RmL^TN<z
zcm-|SBJ)S%4zZL5EO?()UM{xQK=T=ao}wLwSSYy{EopfJ47D#Py6(vgwd7JCTu2Qi
zsg<w~QXq%f8C75H$qus=UJK$9o1_+D%N~PY8*ddHwmq8OMhT3!u;H*AP4DA7ITP63
zhQ2aC!IC=;U_yC<g>W-e2qE8|Y$@wl6H^~jga3GNgff{j*+Ou{6h<V9nQUd(Szb!V
zIb&CEwB{5`Z9y{_=j`Z><$yZXQnS~y(3)>sSQcC-1?*{-T7EqXSkr5M#6zFX_z?>|
zHuFbd7+te0HGe%A;?itOZFW5iVW#d!h9OkUvD6z}shZwM9MyL$wUNu~?ZsH0YpD&d
zXJL%a`;lSDdglK~3Q5d@|H1F=MN+cxN9H5U+LqdY;A@;##LU0QQghcAiD`WCkMP4G
zb;*ywB3N<%s4b!)b=i+<REpttJ^XIoZ!4@CEX<r<0uLRx(o%1|o`sHEWr>`H+X^Xk
z+-gg`{dy_%+k4kHKcvuaYks7Nep_py#L2=DF|gE)ma>)IUZlTOga5?P!8RWX-DqX9
z(i0IKw2fA7>oreQyxbEv5tguC@d{7eY^mw%S*XwlmYTVq1?(;47OnV*0rU<_`Pfp~
z)5Uu88vO4VL7PoGTq96xNajAiW`tK5vC~p3CA?P}vCDM<&VmuUUEkp>VDI^n6k7E|
z42K)92Sc;&b$gO)qFFz>zDUuN`z^KgHAT^p2Q0PvdKQX2XsPY2j=bJLK4dBN@~yHR
z|Ne59zx+A-%s*dv`F1w2L~oJ71D<K3ziBt^kcB;zhY@$M8}*r0@D)2$qCe#S%<=_z
z9OS!EpR;y;y)yl|rSP3wADGbm+^UzhvM3K*OCj|O*59w^(_dH$&*+E=nJ-8N*)K>?
zU$RYpJ(vE{5=jg(iAyp$E`wG&%B+B1KYi3vcrFeZ>Z+q8Q^93Ww`1(yfZjB7%*COa
z93z=KQ4{PdeQgz-W1|9k$I#c7FU)Jgx0Oy>$_+fCHxL_2p!r6!4<sN?TG;Kp55-`!
zD5QSF+646n(%-l;RHbi720LJo0d<N^3hIxfPdNcu1o=}WgYJe5s&tx#LwdLLX%~m8
zbed$^av4<V44WI$+o#W1a`zRxK#(~@GOf7`JmXsy2<x|`zjZng+dPo@mSpbWG8lnp
z*>A)8o!PUN!nZbH04);Ek_<Hsc7ndQ3a(geV_3f<^u6UP<!!_FSuR-0O`>hY1`BAu
ztn`5d#sv!#dIOY$-4fbq{#`_Gn7-&tFknLFBFWIu!{$gx{ejJh=xx$JU>2ohf|$f5
zncKMx+UC-Ts9v49gl>@{)HIh!q>786X)asrmn3xAX&Y>TK<F|F{T%s`8Pd8H7T9c2
zRDYtpTcP0xl2<jczUft{^ea@YuRPd{GUetL@mR}J{aDN1g=!PN7bPA6vQHtRBkgtx
z4$SLIobM?)HYp((X+Ip(FDlg|3uPJ!E;?ppp-dw|qHRVN%2f?WV2mups^&`sMPT6R
z7}htbAFCSULeRo!j0-^t*qFkQ$n&8Bh%tq+IA2<s)Pm#LtdxFF)p!?y)<xr81S)2H
zp<LBK1qkB{v8s8T+W=}3Yf+~Ey!|8>!3%^*g@x31KG;cf#iYUjKaC)gbP91Av4WB_
z6Umu2zff6dZz|K5d!NO>BDco_z|40Ip>%D2VMr{a@f0xg3q|B76lAvZ3v&w##WI>0
z*xrE?FDO+1Y_0O6Z>^BFudv_^`*>Dgsh967<a@bZ71vm_lZDC|bnavmoomU?C7!*l
zk^Yw2>YG9&GSrvi8Jg`>p?cSK9N2QYP;GBbqwNKYdiQFfJ*`4-;;p$_D6d3-jT&5a
zni3?mu2NG{Gl4`Fa<wq^q<{s<S6NpJ%YH$znG1k}vac52dM{sik&aw=T`he439CP4
z@)kNw>s6%G7OBaLo~->yGhOx6fFYU{kI}5Xilmc)gi*bU<hmCmjOtY+Qai#zv-T>=
z))t9oC5E^!(7Q<9u#hZ%!=g`-ykT*T3ADaN>h1OU4U21BbW6V?+_0b%LJMA~4JcBE
zu<x7e57pp5$53*_0j{Cshy#jb|3eGV1Bzt-gM^_2igH7)8R}eY80Z?xS=`XqT|*@k
zXoFyAP8uq?Fmx~(%9o=S6*<~I+CqQV({yx^qREaU{~leW3wMVQNfm{{*6XxgUKrBe
zDk|7y?`owF^n~9k!lBC%^7}$KiMFsvS#AHljsB^(2LFnc79Id^VUa2DKmu<e;n98(
zNK|xTQDikLN*+m!os?|bMe0r5QHZmhCvA(0L>kS7zyj{#B9Ux6EV$E>A|ygJ<YH12
zU`vZc(&?}eIhPe7!d)kY&Uv>;B=e3GT5CChT_=TPdqt62?-~nZ67Vapx0Mgmpt`C^
zebO39k*$z=dL8?1l|K5xbw%>f3QXcs`_XU#37mCBIJA-^M$fvU5KnFBDcqFe$GW0$
zD~oOk6jHF;$R4cL+tq9=QXCX2YGYA}h>wr~=*A+%M*&JFZySpecgmI~r$9!&u_)P*
zk3Yye<8Nb8`wmtg>hPkFwyUV%>mpC`dnNnevwwQwch7Wr;V&;{KkYg!+adeczr5VV
zE^e#;(bHg85kDF7sznGudy15OMJiGO9i%upAr^bHo&I3U4~x_`+ywCm71>*)K8iLq
zq%aOTJ}Oe{Jk|}UX%U5=gDlftZ~W}RB6)ZKCTe=HC@8kbK%%Axi!hl`O+lij2aA#-
zrV+_&dax*UC$FjG&=$|Zq7HXhmAo7v9%9qm>o-4ls7Mh9V@1514i!bjJ{m}rbBN-J
zC<pNbWcFTB9o|i7(L+VKdt^D(aeOQ3P|;8Cwx-ikyokE)s9oJbpXsSO>cj_d;crKa
z<aRAcm~*r!EOxI!qTr)NI2}Ri1PD+kSb0aiTiX*Z0!>sWoCpIMAe<<Ym(4(uP7yNN
zH-qTc;*d79xZtAwSx5a1qkL$woIQ%sc_WII(Z#BT3y`{6EPIc5?5+FsvG=fIwK=b@
zc!au)ELQL5y(c*6y-~$#Uk{qd3;mEbyI7eEyzZ8Rhlox*`?dRZkFQl-F&0@g_PIKx
zN^^=4cgY<D2Y~MstGztdRvJ#l<PSDm{fNH3$}X1C6->0AT`XG<B<gM#hs9(B5_PwW
zkpt7gV=*=D61MeGz4dcTiWL!<z$9+5oYz4@Wl1sSb?Rx5=;<ZJ=}y8@r>B<`XYS@b
zO#-r~mlWUi6Kg1)l@(J@Z?%8_m>%_Y-s;*)J-xM9Zm2^D1#c~miR&{UQSjDcT%QpI
z)1cj2+~{XK=HMxc2@z~@<HxKkG(#4X!XEp;FZ8aSr}wy}&~fvgVtH2xLMUZVvAin;
zl9Y;ZswYbEqLe+wW#Sqgp2|}86xZuy{fZZYn7NNFc}nlxd7oPb9oFtEmiv{(d<$w{
zvD~i&i8A&TW4}_Aft&_p!^dPzD5Ig8>?^+EQEM1w8pSk49<~4ZOTE-vebg<5j_8iM
zeM@^*N8P@qE#afox7#TfEvCjjZ*S_X?^K>X?_$t(q4UKuO@I(E&KJwE0TLMJi!nBY
zrL;qQzPR4K(o)(XCQHv3r|;o6hl=T<!v%KfS^bH&7u+&vGx&mA25kmkD3&ukR8Yo+
zV$ASw(E&d$-}Nskc*`FAoL=AS?_Yw{{8gA=Lf$=)z4u$aYvsTaIfsG?sDUMNLl7jO
z29{t$kWVlr<Um8&-+rf$t{Cd-kUtMCF-0JQ40MK;;DjHG2NZ+qj9|C?UT<49qC^fN
zFj0XKCDLU;0%1f+P#pY#1j2|CBzSZap@gWBZ0_&%R#hWi1PVbTT?BHvktNdUph7w&
zaJu#!0WS3htN((2NA(*n0!?#oxCoRczflqtfxU#g)Egxjm3ztcOUU3!_QV(TCp~Q^
zxfpbYFsVd#HiUpNsYK@dAYsKMs>f(L>+y%QWhDi}?A!jRk5bE*QAbeV@*{AqE>YH%
zsB|+&2Q8*C;@RK-MSsat^Ii!y&nR$-XK2wiCD@E`IVfjsiTd<4y!9o@Cg9<wxllnI
zl&oty)M@XRAP;dlz}--SO(&NF+>Iq_QH|9YZQv)5*}~5KO~0{bONk=(rojZzmJ+|n
z1VBP(ONq<`K*GVdl*mkgNIpMqDUq3g<k0-Mr39HkH)?D@xx>y9<<;aFPxhggUU=^L
z><ceuyZrw7>|bB{%PTMZ=J}V{xR>-VpM{7>{h+`#Op%>{gb_PSWR3$8M(ivJ{g;n2
zBE<@4XG!>x>segsvH#Gz7&f3a_OPQb>(!Ne+;YgWJtcB8A2LwcQ-aO>H-+7pKn~cC
zcG1(GngfoL_!V;11CEn`1jd09xo`jpi~}W@=t~g(K^nj)$>P=<WrIWuV-J+%evJv>
z8jFf5dA8PL^`WfTPh0gTOO!^*@3rh*FL!x?mH*eMZ--yepYm3LFO~+7f+;5*p9cw3
zPL>44ga8tzoGihFKx<S#x%_E1{a;w4o^}z)<4?N?<ngCVg5m%SDnK}0f&;KobZqTM
zh}15XD1GcZ{!fo9HTc&tgrejnw@oNYUUCKw)Btmd1`eg}Ad$LXDoOS6i`1PMJaxZZ
zB2#zbh}8W`iP(zdS|WA7Qj%}W8?#1=p=Ym@w0}}IFxNzRS4(8NEv3+)S4;AI3)TUH
z%~wm>KXtt#=76sL|1A;`yQ@FXHwGO=_+M9l`<nmJ#722HzfAgNk=Q5i?*CsauutCI
zpTGP1BC${2!!Nex9enJQ_wYCPpCYkO-oxKsEP*Bbt=K5<c|E>ZRP^#+*NVc~di&L<
z9G^yY2H1gD;nP(E{MY)AZekDc%S)tweuZR!Kjk<Q%|HYEaHJ(3ig2jv5cY=}ec3%j
z{DpFiniMy#C($dMEF=xI#85wWtcu8sEJTN){=)j!5G;Cq2$y601rzPRcGZJQV2s}v
zwBAFy=Ho}^W7**D`r7nZzdUjQ6S!mj7+$~TGAMK$>(WDiHZ#sIH$ZXh4ViHyb3g!r
z9M8`6&_7O(_se}+9BdPpgs>_?VW{B*cDkqDE<3>mqJ6UoB=ap<3a_2zFL=j(sF(hd
z;-BTmA=1;(<wu6I+4esAuQRj#^0FzI(4Fna(0QAT;0J?s?4iE;^h}*!?jwQ;p*j-k
zDuh7JVTpcv_qKEV3Lk{fBunRzP!Wv4#@sxA!E(RHLc{v#jCP(Mo3SsT48EH-->>BJ
zPqAlS)spPne)@fBFvM;w9s_8;A7|j5xHNPZvR~Ee_huG4&4QgV$Sm|Dq3J;u@vX7N
zY<;cXE3?=y&&R-o&|*K%$BqagG~T=HkNx$}v+p`Rh5aoEy-SVv79F_amdL06f_?U1
zU(@UB;ZOazLAjP<N&vHvcHFOgZBH4h->KB#Uoi>b0Sr9uH^mDfAW_P3e~F(55s>JP
z<Nm<cGKdfZ&W@FeU#;T9OLAbv34i^H>sbIg;ct4owIj$4z-&4wpbQVF$yGtRSCzK=
zjL>HrHDEfX(0nu~Ah#j{d_Ec!kXsQTValLDWOzVasUilMq74qH!vf+;mE@u1A-EO8
z1HWY9O4ZN+U8$mJDnKneGN9a*tjMzY<McMqf)MKrJc1D;0|7BJg9O;ffSj2@A}Eav
z$eEc)J~NLD$eCGkXl5Q6z|8y;UK$|YWcQEP@2-9`AY(y*&u?!AWD*1t#l9JkNf1cV
z2_Tl^#Wyk-adnNoW4yk^=)A_opowXXi$N39nt;rjp#zLH0hu*}gz0MnGHWJMWX)>=
z$eND|Cjs0x`}j2d4@%WGw-n0nw*}-XBEZwNZGlp;@&$=fwgs^A#aRgqh3rl?c&47K
z+!>Jf48Vk8I|K5b0Z6Fq3^?};0+g+PH1*I--BbOMTPkJiAGvj-Z2hBvyk`IvKztOy
zJ%jr&TCvr7Fi>!e)tjx~8#)+}=iu0{#AVcglH(@>Y}{;JOM?{0Xm|)8_&9)k|4xiR
z>=n}P!h5szpQH~3<oOMlkU2!XAY?#&%5JEG%%=evDzOzv+yDmPJsbyiea8CNAtZbz
z>kn`mq@Phwz#l-OGrwTx>h!zQUj*d26qu0tB7k+0z(MVgvZv<g_hpX;WVAy~A#*f<
z^m<Ad3PJdO5O3J5pQBGU{ey$p;JFul5Ttq!W&d8H-(N8_C<hmqsNv9{DKd4CFmz}T
zP`}_RcsPQcTcSTzIl@(;@i-!AicOp#ACDt~*u)u(c!XkL%xL!NQhjLE=%93KFk$%U
zpmb}HfEXQ=E(sE)jt-(B9^nX}#<2UB>5o;835o^<ERBRQ!7_dWpGXo4;^H|4Z_sGG
z32f^!y?gZpw^SMk6M}MO1Q|d~2+FIgAOSHU2p1hd31^T@oN5nzSND6Wr@9!FqfK=&
zC`X$b42lf~=m2AC5K*1qk_?ic&$9O|*XwzzX1N%2)pS-6lP)b(Aq0$B!3H-wBrs+L
zTeRXqC`fKUhqYL#S69pdA!W$V=LF@xBiK-x6GTqlg<FmxJfDqOslQS=-|Z&4hBV*p
zCc1_+pSo$WXfWgvi&=+N`qJvfuAy`bX|dZ)G{Y?p%Db3BekF7<H5k9n2`y~3vRhZ{
z)2f%d5OfP^xeGzJke0hWO}CJi2UGQUSP0TBB!qqbmJtZF(yE}04j`eqDk!4^NNBDK
zI?*9Ww~*Ec#jQaQ=>GMt4Rjf4y=wzqMp_?~K?1@+S|3D^;I~t-H@+)a@Tomx4Q{9S
zcLjZZ{ssxQq3Htt>2>-OncYD-)WC#y@22rVH;a9IlXx%t-FkgSW^YiQ6N3q%z0}nE
zg%HRCtl9he!OVf6*rJ3cjgtdGtn9HmAtV^}39Hzk4@iIFB2k3+gpeptDkLXA%=T_T
zo^&`U6D}|zb2x~p=p4NegPq^6gV-T#vr#|m349&I3o&0%0oXjndW7A+SwEUN8C1j@
zH()~fWDuJ@Q-ly&>NLCK1O4sH>7a~>*gl2O=^$d_HX#J^95c7*J2K~jGQYuACvj;c
zY!X7K&jogIi~d3OLQqCC>}EpfLJ-mHTRIC1g|s(9$UeW^s-MvVZ-ns1!6YcFA+mKW
zJNBVI`N6Rv8LGg9abrXB))PpSFgAo+Pc*1NVi1fC#oF^+gGginC~a&g-j2Ug5~7$h
zfgRkd-`;A13rfLkLP*|vh73R_gizJGBn%9Pv^}AM!y!*{d@{>Azv?Sxm$vFbyURzq
zr#P@DWTdV4$>1;<ypQ$zLf`nnzL2;EMNDAt3uVQgAV^^E3*n5H3<e2<_l0hHgl`cL
z*~d%}r{ZB80uv^*53(^|>Q6p+(6JXx;yR505|{^_MgR%SgH9t5DH`FR(+FYer9;#R
zty<xK43k4HG@tC8rodA`AEKt{OD77EkajdwaNM4ARPW=dIT|wZ$cR-nLNz}YQabQT
zfdV8*k-C9|wZ|N5K?3raV=YKnd(5$xNMY?UvQ~gY{i~4DUV_u1AxOh|gjz7d+v2N`
z+&};c^shqLK#)&?{#B^79d`&kmFQoEVr{LH^tMtoq@4~G^ay*BpLk^NUj09x&dQJL
z8^fnVM!D6M@}DTGs9gvtmu%&Pe$`Whf5pNZ4-l~~gbKx0DM*-mA=FTGFi6;QA%xez
zXyFYKiRy*W&6h&r6q6W8wV-k_B<?G58IgVc5W?NC$9UloxEjKn+CRxY^8DZa{`||V
z>q-5d3a~^QM|mq;4aw;kBuc#+LdYN|ic)`fW8a<BpRDN?zNSJw-7PF9eaJwiTNpu&
z8a+x>_plh(M4{0^I;GJx+&wH`TEbH<jG23TAzHLFq`es~n1L2uU6}3gyXRl*(&4%1
zp8so?XI^~nd3)P8`chxu%`gTH-Rx6K$#urDH_qw9E5<nmfQbUeh2<y*i2}xjG0LCd
zDtI`N{p!5_i^_?v3XO@0Vc7zuyagtP(E|K}XDKzo6!zJ9eO%=fSBIKliqiy;K`~RP
z3HaV@DUs9JJKyP}TTXX%sP5C9x<iJ9!l?UZ8Xz&O4Z{VWqV7`^)=e`a_R#P3xt`#>
zu#pt6ILD~MOTzqh{Wc)buuB|pkN{s2mYc;O0lp-R&En(agE5$^tqm*d?M6Q!4X?q!
zqC@ZidTSk{KtgXV8AVP95>B@^TyK3??Di0YR!8c(uw1A~4%%p4ST58g3qb3_Sg764
z%ZI?mFx;>mxgi^})`+n3D|+)vFvS`%#*?~@VfoPjkO0_7-7ucc&tgRGuzOw6Cwe;X
z2+JV^E{4#Ku-y9qiQ4Q4r^G4(Bq@cFanO(ki6OlsTrM^mi4+59N4Vj`*1MF%#b}D$
zyP&tx&QrD5Erbp{_J#|^jcmxEkiFsjZ4#C8z`fz>wmc_^QBd5^@V;ZNa(`GRBVa;h
ze^@3XAfd89>?9*GO8X8^eF!(ds}H-S(ze{;u*`WO1Bk<6nT3D^#NjZqkYB)g;vwzx
zaKRZiz-#<G@Oc;$A<s$U<S}2_=e&mB^WaxunGJ#qsIS5@8w3fcuflSN79<6}aOf63
zu@K28maoF$Hr5Ghq&WHhY5P&1@uH{gX~$l0QH#?~SAZm`uzZ&pBnmklMl_p6OO-@O
z>l(p9$W_glsRX-5aD|(Hk|IGC_lR&GZwUfT&?6#!6(k^gM5K>{1Z0m0d>k{3swT*+
zTD!kx)OspvT_v)kHX>(e2tlbff~KeNn4rNufZb7KJYGE@BAp6M)MP+JzJ~)62m>NH
zv2*|lgaMJpH(Jv~u^@-ryNiq&p6cN)207;Nh`c|P;Ep*w5)em|AW11wFJo<?P?jLK
z8_nJ=F}78Yb|J{^M!RN^+l`LM*MXn{h|!VOw{W*hklT%kh*TH^G{;1w_ko1wn27W~
zkkA}MO>jjN4&g}=o(lgo!C$za<k~<^I4L5X5Kn<LDI%Q^B#<UW;Dk@1Pm>{SYNX(^
zh$neJ>(<C9Wq%18?fp|Dc#D-@7EMyuPGif1M)QhkPWONb#Ay*Z34;XUv<N0)dW|<p
zEkBdh3mLap&U96%M`uP%@v0(ZpfWRp^CjA>gATfM4(lB<rdP~ybqHxrM4pR520C*h
z$ewXG4=SMMv0sIaHr4Z-s)LED&vU8{5(x7maxnvvbRq~XJ4C7I!9{F)*w|IEC?apw
zBzdG*6wyV50|}i)5$uA|WsW3u*;2M6VzjGX>Xu6D#ieek)OAZE@{KsC0AXna`SvMM
zD!OhZdmw6@sb1+q&~kC5<9bQnXDcHCkw$_9#L7sMo2=6U0_(-K?7yYPx7BN12-;F!
z8!2>}n3j)gBjN)_Fr1c;Ya@7}oR8Tg?OttQvtq`?stqm#z16ZIA|o?o0I?yG;;)AT
zf|ipTA}w1>*T8CWGwUBWnpbaj5lkR#j>tFak_xRRH%H_fbs&MTIf9oo`_nK?(rR+2
zeKBqf@Ko(|F=#ot(``;#PVS7z53N847&{|3G`4Qx5Liy`Veci4+bZ@%<eifwUq|kV
z$W=c`sO+JB7oLM<<VUPY3ZC<kTPVFw_)$c@PMB0^{rFKNBi`c!351Vm;BKL*IZ3Y*
z9<j%!jE9uAM_dego$!d;eDpfukw{8>u>(55I1(wp!5T=pLkhd8k%I2_O=;9Vd_02q
zPfIN|g(0VX6H(5x%^72B4gM3eKKOw9#u;@W0rw4!I-2!CV%GmAQhGMx#b&3$88qu_
zry}aN5wRyqLf}E~bVTlnN*4A+&qQcXlz+4$MFa10M7b~7(@y4$fKmg(v4RHj<%m2f
zge1@|N8~&N5^i-l5)#*Jh~$~a<w#iESCAZx_REpxV%J!*I8574)<n?;kmwf0TZThD
z*~jo=|FrtX=xQ)T5}xA0zFSn@%K!<Rx<zARg9aqPx<#=pZH9I(3u(Qg1+}be1LJ0Y
zuc%SPZ%LG)m3@8KiUvmKXZu8D<-i0`pQzk+1__`(QEWR?DgqLf>l2OC@YMy8s2qB{
zPc$lSN=O!0di+%@j@~RI)B3Wm<@lybU$-1;#J*7(Kp_K_zEK%K%Mc8G{i4cio_v$+
zU2N4K^-}hExlykMJW+p0V1)FG$_Nh<aQ&k4L=+_8`bDu1NhhKpaU$9;>YRuYE$r?W
zl_#Q-g%i<!Q92RbN}CF}b~G$nuqWzCuJmT_eE!83>~0N>HJ-q*C=QGmddbJ{_Y7x0
zYh;Yd43ElPP%zPV!>RN$LI}2vV8xA%v*{60c^4aZa3C}yiV=Au2Li=drioFJW>I<1
z8W(7Y8^!C`IWB`rjbwjlV${!!jLK~aTz`Sg$S4-9bnp#}5Yb23Gn*J*Pi9n9;hS&7
zh194hj?+F9CZY94vn@9oU!+Gz<p(ryqXj~vqxgWv9UKWA`v%)_lW}MIji}r@!R-^s
zyb(nx&vO}s;Wt^!3Zp^h&8XZI!R-;qyh+|S8!--r!)Yej|EMtLc+!(xB>ITPBtq)Q
zg%C^MVs|w)?n=KEm8U+%iV2ywqB!;W7neb>oXp;CYW%x=GKL2EB+xC$OpYR`e1O0N
z8sV@ms#GPHtMr|a_IBT!4O3|gmZMMzg*s9Y`V<=LqWIn%eJ2F!G-K998{cM)7kG%3
zi|nn<jl7ax<Thv#Ko&(CHsV+Rizyl|X8u-2`}E?dB0j1DCS(>z@$w<P9#E`c0kVYs
znPir@IJ8@{gmCWTGB{sd$~Lt!9!M{Z%DeQq^#z%wQOtd`A6AUFpVeioO>3iFdYOwu
zx09C<4mOh^gEy7lWy4w<k7eF<ae|O}mvE5Gk`UfqT5s!Zj5;N=J}STR0xqQ1N0BJX
z_QdN<+wI-A8V@R&?QSE6A+?<vky1fm;SHzVtYek2ExS9aG?7gkfza+~MN_LceSrs|
zcwe;O2y0Po^a|{Y;w<xLQ02FX_D9+2e`yaj5Vwc+I}QL62>Zza=%o>UdFTMEYHKu2
zABf8L?!bi1fhgX)OK}-c2U)+iM!odGs64#DeIVjSad^>y%b?3YW^39S4bvY-<u)B|
z{6Oa8D7NWvX9#6sAbrA&c1El8Cyr}_37JpGwQ&s-G8jgO*i-F{o70C}92!Q42uGBK
zVRV>HYlpH9N9B%c2_Hs>qgZ+4n-jpnF#42z-Ogy1{nV{H4Wmz~?z?db5-F_Kx3u7O
zyKQ@8m*MYQYLwEO1RDS5Pc6%JGVZCUE!B9SCMI-iOCyb_BZx$WYfD?)Z8hR5@bK5z
z$WBI+iq}dtzH<Z_YR1<}OZl6}L_+1Y(l!s!Ti77+a3K4plhLW^z*3E$2NILGrBUA9
zL_%d?X{&p!c^H%k6x#68f?E4`_ZZDRf#Ie2F3zeFVDVQn=iAfnH9G2*^Gh{;nonGS
z%`YwCpT{5)VDn2c3|~ip1Wf_nPCjZ3j^5KRCO<a`E|mJk<mV<qLaAS@^@G^cQPg@N
z?X_6Jk{Ca?R_jrvV@8?C{_0U$|9VV(L~zgxhF0-<OwNIL1ku-Ha=``?ps&ZUU_%sE
z>yaUY*?TV-^_vZLRcJaJ9FzMukb%nJ81`@QnGw=KTa1k<6YSU@jK<y?{41t0Jb-tM
zjmfW*fdtIhSVC+BfCS9g80H8{a6lr#85=8~5EFZ8#1LBn<6?3zO|sA^<73!M!%Rk{
z17&gypUn7Aw$pF0JH=M~+33~`9FfrAIZB=E8c%D4$z=Q#%qURDTOu=J${hP|FB;{Z
z8vN_%(b8^4OwQqugWimoOvgaN+8MFZIk1+}F=9|Eq|J<}bup2SNgniO#bi1rSxCob
z$DHr@)uVAXFLvE`{J=rOfhDesgM=ybVsfnr5|Hy^&RVe^wesSaI5q)+k-gaM0$M9B
zj>${{Pl2>JCfAA}fwVY=wIaWOmkwzk#Bd+u&A%DAfcHTRK1~<!(zsEwBc|+$sn!Cz
zfR~mR@Q7zW`HIof(`F}i5nYQD&(K4=Vt8xC<)ED1F}&+?kQzNrDe%FV@~OS{AI2{|
zHTYLFIv&8jgE5()frQ?{n7kJN5{-T^7Wq^*Ix%>oe;iW}%SM+x=zZcex@4iz5AjC7
zC~QE;IT}+=##DR!zl?ui|J${K{QYQ5=D=z0??+?Efyq%p!iuA@(8+67h%8t;7E`~z
zX2rFw>6jMa`6TJVSQvIZhCoJ_*CY$wcOs@0HKC*fJT%@ZHu2v^gPK!LH-d?7JmqvF
zNEmo3CNH#t1nQ|6vLwo5K_VqN70cZx3*q@7m&o61)#GJ=IuldwPWrPQ|MDWf^3f&R
z<%KSPdR~m%wBm&ior(QYj$_a${ft{Wji@s*`B@@7<!JH(Gf0$vCRX-SSvtR;$0h3h
z#7gqgfqs@v_>WQc^jWutbgp|gCeL-#e3gDS78JLlK?31y3`wV`Azg4d8_V7)%b>AG
zHlB^;I$CXb8KBOy)PIdzJD+#UpmqFtw+tFq=VS7AUz!iA^D$(Rq6}P5!qY}hEBa&^
z=VOiU<>z5&X!P7gHt)a22Txyg3!xEr(QPamaTlEt2NhK0Vhq!sD1`1eUyRj%Kvu;0
z@aM%?gZr&CuLvg3OYGxUjcn&jZW(lA;*whiZ3SG4$xm~n`BuQC7^ZPi20l=Pr+KF$
z{PRSx;!>>sz4Trs>H&c(G4`t(qoVqXTL^6yT#3oe0tlgyE3uS=N}B~&Vn}f3QW#Dv
z$Z)%}^)<%)r@P0mIS!pYcaO{H0~tVckB7vWIY>Zsk0YxScA7AwdmNYP#n>?AaOoaz
z@+dz>Pt$fnFZNMaqq<`+w+str_KM3L3CN&~Uh(o<B`EDC^om!twN}ub^fcwqgX7At
zlXHBmda+i|ex;i+R_P3u<NI`CJvc7+2_O%+!EyQ7A&`I@9Iq6|{2*cS;CQpn(&R#z
zObO=Tc=M;Nqcl0D=}dc^{c=y^58lq>+)`*aVq9D<a3O?J#>M5Ad_ba<ad8BA(J*+Q
z2W0*sSxS*CWn8@egVrt)%#fi^v8(zTk9!`R;+8`D6;tAcV%?lpXuo1gJT10+K%$f>
zacuX9Qi@T^lz5wGMbuV`Q3`VLDeQ1RBOI6#f4Vc@)J#*NKP}ETHCejW&{|H5%Xtcq
zP{6dfoTosdfN4~X{lZA3|8wF>gXCs~b@;2++8$VI<UGFs%V~Q*++~jIF7%zGIdM5z
zr4{;4(wsOZD@uPdIGTwU?2e1{Cj-fOacpYx&94llKMUhL{kaVUP#4DK6ax~n3*$2X
z0SVNFapXU<$jA&u)}?VJnjEXJgRdEHD$jIbP19DCO&DO*i)OpL^vo;I|LNuIGx*EC
z_?H(e9=z9L%OBAivI_%@uy8tHphSS^yk$XhOhbHa4J1lj8V^UTk7<)ELjixa{pZ(>
zL!Qdjt`ZrtI(|)wLi}n{nuK*5lt6B>|2^0!SE@HT4G1m@-sChONMLM=hr|XqNK%R;
zb*KAV8Cn8t5gpkI1YBi{(~}^fxy9*8kkH&hJ$Z!&dxmDCU2&dqbOr&SU9JrjWOunX
zP>|i_bRvX-w9DzlY)JbsUT{WsViuAg#&ML$J26Y0xKDH<%Zxw{yU*!EJc8&xrw>5_
zbRYF0<*-?5xdZHx5y)W=xGK~M2jVh^g$z^<#E}MmKsCxz4tprBe8HxSFgDlVKjD(#
zqc(?}+JFSgp}3s-Kmz4Z98(`<1|X3c9Ez8H5f>>eF+>V`I4)CI$wHTZ8b=CCUlNxr
zyh4HP!#KU?8n~W|5<X*|kwzr`d0c%=WUX10tDT4|r{ijJxWcx+VoqiLNv5CO^cUkd
zHFyf6@mM5PAYt^0xXffh0`f#$X0jk*^oe-sX&6nJEHQXe^>ti56&IPT<U#LbTxPP8
zg{116IAyXlCUYU}Y`mb}McJP@6ni#qWJG`Fs6W4x{rT!>L#zDGu@H|S`km9CAW_nH
z)SvWPMULA1LY&PVZ8W*(f-^wC<!t_vh>wJzb0LmYku1sMK771jKte=^JR~n&iw=1*
z<f<^F1qig&RmT#LkiF_y0urcK9nZ>>CEeKBH;nqNyCr1vf=S$j^em82>6UO77<uxn
zJ_+Tu#Q(3W@D#=4vFIw0!0MBbT?G<YeG;;(K%%SqBuZaPh^`_A@2b8DwSPi%mE=LM
zUqW`3WTC5S6HZsv4{5I_3d)Ad7OIb8Ur#tguRgWV5VqoN<4rbpEJofC$3Q%R<dB4n
zo*+@skOX>)zAjmxtRKd<k2RV#9fpG_9{#{2ZbBFD!+?a!umrx<MB9*RgOD~pQLxBv
zHqO}M@sCg7(2-7=8juMSS;+*PGEH=#zy#F9gnT0!B%mfH(C4Elb~m8n-?slT!AN<k
z-cHCN3@$?3+X;D74<tz?<kwz70^{ujzV`Ychrl45!M02^9<G|<B2XvINXRs%0q>+4
z2^m&F0%1l1VYMAc05zLEHOc5uHQPm?5jopMpb<GcAy1GR@DVvXfn16La{~&@@31*_
zMyeJ5hw<+u<O~ZEiti-k3=0y4y_0a_as#r{PVl&V7YN|kt_c*EZPx^f%XUIet`G*2
zoxtR}iQb7T4`~|`1wSP0-%d6<c>@~~cqx@f<#Otm&Ey&rTWxl{0!)BycDw>4z&4Xt
z?4y1uN55!06UuH3fep;_SMxsm(`kn3sR2*;JtP3IGa;{_fCRwKguL+p5`MokQExZ=
zo|crvAir04CFG3<$wBAsO2``zk_Dh$3EX&S#tnhM-UL4AUO)TTOV6-B%)lNIXvYZh
zpS=lrhFQ-0b#DT}y))MZ(tfsThVe|repiJ$a(_Y|VV3ib+@HV^CcT(fP96C%dvK=F
zs^a5>%m%=O%Et+L&<_&0A1AQ5#1~Ycf=)Wj-kE9K((G_T-jf9rDu)wg;!YAss2on<
zsBb1E5an2gXvY%DNjo_U=iN2<*QpS#J&rli1ai<j=0p>aXw_qh(vvcp5Q9gPuM+Cl
zGMY#p^o~2xM6wV~PVi{blAC~4%ISoXOE%21JL`;_t3Zeuw4DDY!Rds&Qw|a~olcaB
z7d$}%`*Z?JS91MwT8W$`*UvRQ>o`4_P&w;3JxHjWz2@}gwDPzpoW3InwE0E1a9V&|
zbetYffppPvdXPZ6NKSu0HgNI!;gv)|cUJX|abMs{0`Gw2v3rRZ@Gt`;*vNN``su3)
zx#bEjT<K~8TdqhsAOzg5>?4xtnv`3vU_z#AQf`&<7v{RL<Xod+rdv`BXed(l*DVQ8
ze-gv4A<nXr1p`^<xyCR2y^=<P&MMS~WI`Xdey(w6RUe#>@~{dfs@5kdgAz!X&?hOs
zbqNwx>yyN`F$Ly^WM3`&={%!ZRjrFafw4AODDH_vhJ=zyv5No_2(?LU&)vxpVCMif
zf1dG^>H#hSx$A(Wyin1Q2gU)(fLNu21i}Ea;U3iO23%oJ7R+O9<{O;?gOl+8&6IiF
zK$RQL2F*9NR1J54!36Mdr*a@++VG@|xF7*MoErA;903nUvC#{Re^ifh5hw>A<swk!
zMkQt9b_1{6s3gYrUW!mRP%lidA6RHS>8Y52vvl6X;6iBvbpx%CK%&?QNo;F(;5wk*
zV!LglW7S)3u@vava$4jDo_f8N42YE+NYY6n(9;F18z??ZWsfZ~9;}+`BG5+2R2PB5
z#Z(u8!o^fVz`FxLfb4Yk$s*&v_S0Pi+C7|}EEGcwGC-J~tk+1^f}+Rt<c&93ABpxy
z^r%ZJbJ-sk8+&W;pYX366xzqAa~qIiNuA?gcnXv{>RZZuK_ZsaB^%65ip-Z7h$WDj
zlaw#dNfu3KNxVFFFI=KgNL!dJcsJ=uR%d_q@-x4Cz5`pm#AxSVn8f=H3DmC<ImaRv
zSZbsy7U6yZuK}1aWl>V*ARtl9q9kS;oRB~T50|i?FE#2_EpaLXCMvVUsSHRGa=ZZ~
z5SEZPV8jCf&ajNVv(#wNcA1MnO})%TpkkIK<qjNFfUqoyFm{M;p*9X_E0YC#S$LW8
zNpNM-xk%NRs<SRBw&lmZixhaBQz<+G;5w&LAOX0JDm9E^d}AtZi@oDrV}z%2i>pNS
z*pif~CxoE1C5hCNf@x!_$M&RHsn1zqXic}vutSfaxIHQJ2#`?Ro^<kv#zcOY<aq@9
zc%`AW{m^L#JVHBs=(Gb!0DYL0X#_~FiHO=qM>{mZ1e3&N@cb&Hw>Nk!iLdwaETRcD
z#0k+5EkOYCgi|SyfIQ)}1V})hpqAiQKbw%{r&!;$#<<E;xcR|d0!-p2<vm4^&^eXF
zJ;is)$D2?~oMS&*XRP@3Ij1IIqS$jzO+W(TTvEQ41riYFk_hlL_CaE1I+v8cZbYQm
z={c9guN&d!F%<%ZACj!gdgGhwAKX&t&e;!1d2bCuDCLKw{B<LcTnWE!gmWlBARt^x
zvhnX5cXzzvLQoEPB`LRYAOwgj$u$3A2+{$>l_bu!caWzvp<4Az;U^Q`^Rlh2%zF0S
z8;o~6)nJK%4FN78Ck~K+>z9((Z$JXBUka!4_$>~CL)k;@)|-r#p6Vek1_g&9scRS%
z9EPN1bcGHuhNLi_WXm8s7|B|EV4SKR=|a$TrjaRmfwKwE3r42$VrLB`AV#KIwB)Yb
zgj)ZNl(<O;0-A56WKIkcg};%Kz6=tYZ=@VwZbIq7gcSGXjv&y&6I>f8J(%EDgVKWu
zDe24*2GWESoVgQx`9^$-G*$39JHFMpJ3Kjs3&1^S>bMcEtW8fTb@orT8H%R{|B80T
z1AtF=z(E3hdP-j6015EvDeP!d00oHvIz5%GOL?sbzF0yGco==0Vn#}xo$~Rmf@@sp
z&P-u>7r{=!H6~KBS^gBQ@NVOVp}e_l&vv7#YOZS(&G~ava>l-qkDIwE`Kc9<0G^w|
z4EGdAz(th>?13G|uWA;!2;^W3+-lLVS&))>$Blg0EJ$Hqpt~s`aW`c_s=@2xZGECK
zEx?2Ysq)|Omo_B}cT*Omeml@Z*Cn6^GZv+k=E+w0yutIo#rF)F>@;qz0?TPz8dZx@
zGIfDGj98RPR`9_JlI!2xjDOwYMjBO1*|?p?9qpI82sF(ubsK^P)zXxlsG$Ocr729a
z{La>msI#^*rL1MSUAVJ_{~SALEUk1KgT~Uzl>9z3w1BcQg+yKSF}?7-GSy`5wLYdZ
z1>VQ2QtFy(eJr`qUG4U<WTKDX3-CVfPC@5J8lD?i&2FP-)dtrp8l4+lt7vp?aNHUy
zK;DqT5d__Mypc}lH?wwojCNI<T?87Oo88u-q<wQLAU2Yr0))*e956h`5imHnu_b$q
z=c~852sB8yrR1vnMm|Wlr5cF6XOKYHmclR5tfeS(BMs66_Afs)*5jAqTnxHwc)-P=
z;dvk>-?4)ZFb<^fj@^3#1E&L@*}wkCSnFx~nTtV}4L?iCbEO;k@xW&(`4tn8!1ydx
zmbND1HA^4fsUB2TFv5OrzcIlK4Jz}QbU@<6i_h58FH>Ut_0k%UFa$LJo<BXs^fI^%
z({2$L#={|H;@f<9NHY`2B63Y4Av>fDvzd?uHMC5=_Juc!Aq$efpA1==wuYAREiEzv
zrVc})Pe>&4dC>fV0X>EAurjP81u%Smc$s{A4Q~KL79`(+hAiFl7+!|W<nQnrzIqcP
zTUo(UJNSk1isGMKhUANuuQySxr?L@8v3#9cCX+8P0X4NuCSM?7)l{kvtpjhO3QT9;
zA2nK6Om|hN38uR$6lA883ca9x6IF5+d+L}`T`|j5A)r~V3e|lUso<^=R6xyPYmXW2
zE9ST=)E;wO6^a3KNQJ!oCW-;`So5!pb`|qn6>64wWu_R+kb%m)vf>i{F856o=N7WD
zUm15-EOb?9gfA?U3x3EzWnmc>{Lk`I;IB(q__*<#o0qsMH2jv7$t3M2KKz!Dw~VvU
z_!S{-OIg9?diK=gMm=9}OBs^IHMlvXR#5X_s%P&$Wvp$|^in-J-GL3bOZ5`s{Rxn;
z;8H!z*K4RRD{+q|U9i~RkTN?e<$cq9?c!A{afJU`S{am9=^LLqXz>jl;<09F^NW@P
z()d&_ZLWw%=#+tJwZnBB6!SW9CKSTBN;2+k``(N>$yf0<&IWnl1sArxotDl45=w8U
z(FeHS1RXq_!BXXB(`RSkAXKW5bIeG~>)4Qi%8WFwV^i7%60v1QIv~EeLnJ?xnvo9P
zhS>w(AQl{Y34cbq%`N=ww~{=nj?FALZ>^|vO{3E5((+~jWKd3B8e^*iHx1NW7HVjA
z>^K)kh_Y}>b?2sKl2geinYrnZSPg<CoiygkDHMq-$;0fla#NCd*uQTu%h>#eX74I+
z95l+}?6l0{AP#%%bXuG?g9MtL#*2hqI2cM^%3is_e5Gosi$LqTr7i-w;?i`wxwMvC
zacR0$YyMfON}3p!vqp`~wpGhr1ezF@yEP)uT%MLGFI0fAJT2aVM};sktYQ-znLnvo
z<s#6@^C}mCCWcjMxiE(c5LTt}3dLi*7U;Y+tU+V*@#-}$0{yb&8W(}Gw>4?G6<WzB
zhBayYybSgssZ}vCY`5*k=KbF4?Jfr8ZQET8ni#gbR?x(-ovi3b6GJ5(8}GF{RG9re
z)q7nGni%%F7<6vD*R_KthP`CRTsk+dq;umVw%OF2uT&p#G3a-0j<^_fSbQWM5{LWH
z0mhLuZV~nq9)hFbqwHccvwzi57lPhvKI%fyN$}BhNMtgV{3Q5j`sU{RGJGXn#5~Sc
zH8*eTaNI?pQ{Llg`Cb5IfN(q=7l|}T7;!v}S(1{%N;<tgnO1H~-o&mpGn4G`7G}LF
zFdQeP-0Wmp=2ege*2#3TrF1b`(4S1Vxz+k5$HIB;8CKWAe7fq4i$G_%XWaVG8Sa^M
zNNhe-@-y5s=^HEfR{<*NvgbM0sipZ?)j1adUv*H=xd`+tH|NrFeF7EOa4wD418Bmj
zq^qFcvyWPut*gIx5rRPY-bJ9_s`)-GGjFH>;rldxZ>Kp&z&+6)((JxgW{c_{TnPG+
znjc(<5Fma?%NrJz{6}hjNN4lb-#7#=kzP%+Wv$GYs;;^aVL)7UA;N&T>eeF+E3Q&K
zp63v_VcLWJp|$zDsvenZy@6Z&YLATEI;~V9K<JSXcNkIi2oQQ?nl`f@<p}uXes5OX
z#{5}TZx<m78+vE1g|H|PdS|XxBMOAx8B~KdlPVQ_p}!v++s3@Fx}S?s3WR<xLMagX
zWn_j66(ID>;1cj4;o>pcCA{Glb4c|77a|6T0WL%g5CbxD#Zall05KqwZ{Up9IPw_#
z{4F$Ehq)MWU<}L1G_F#K17lbwC|>^p35;PG-0J0fij@jpx*o-r-)3%UKgxx`4z@Zf
zBX4#<1`wk%@(mD>fEbm*8z9Rtub?sT=G5#A?gehX-MroR4E}Y7ND`LJc59Oa%<PO@
zGeQk8volyTQpyh!DgW$DgE<+oFGdWp0IJL2>(R7LQ>mnob!7P3_Er!ua$ZJG_8@^i
zFC*8sAb~zFgSG8J(cEQN_GECQVhj7*@3mXlw;jxhZNYF%ErY3xTvN*cw#YTL3}B1M
zROHW!+BBrC$`ow0civ&H_5@aCaIngM<fti4^=sJVJI&tJYaD1WVdomhH9-P;O{P@r
zmVgBGnhZ8*&yt-@Y3|*?et(yFzU>AVg7)M#IMzXigfjA7E|7rOkiquzXJp;YA#GQt
z;DG(+Ps}48|E>)38ho!xy_t;rkPW=se754lj65#^6Hp&!%EYcKNI-p<!D5b*w42G8
z{j6Rm^EYkxJH~(sWA;17fFz-eoa;dXVSfg5eSg~CYlc()Ou<pMqLW!0Ih4Uxz>@%O
zMz(yKQ6kCv_|F!<a*x@z612#T@Dz}rW@G{a5|E!}kbv-?J#I!;eaSw($NaGJOIL@?
z_%b8kf`$xqzRX}-t23-<9@36y3VO0H?=_z;Jx*3oFlr7fw38X-+l-oghTGBQKJ(EU
zaD*Lr4$PB|9Uy^ulI$Rd1qp{enTdQ0ho##9#NdZQ-(=J?8F9ocdC)tRkw?suh1Kcl
z3~fMAWNl7WI-kKW|1`+5pWJU&R)TPhpo*Q($a8K;0_=PS=iGGG(3}#u3mG=?e)F#9
zE&zbfKHx&<LPma_6(n>nWaM={kVrNzWEwrnQ&u8*rg$OK_z|8dN)Ba;7cvh%#D`vU
zg19V(UMmoA>C4X01Bv1;J3|j7mvy$4np3*hBg?myeg%S4a@>K0Gxf;Is0$KEJ+d-H
zfCN&HEXEyfD){hapWfMm*RtaCV>DCs&ieR|vitDm9y<5==0USE-6yMvmtDX_>-5Q@
z-gjWNiBI)V(7yd4^Uid?tbDTsOvv=hVu_DS^pFA7pN)CQyeHc~D__w8lek$7uyOSI
z0>0ZZC|fX^=?|M@BZIO&{t;APh)fs^-27kJ1BRYryB;=wod$y^!Som)gR>YI_#z@m
z7&DYT@`(BK^w6wa9)k&)p;;_=F#I3`YB+oU5%V|c;aPbM1}1T{I0n0m%b<lAyXR5!
zr)idz$7vzH!ev<m6@0T4IB4=wtnN|sj_fEGhrbC#IQWHUMQst%-pUqiwu6tE_=&o=
zvWOad|G5QKYid@!(F_9JH8m@J6C`ReH7ge}AYshZEEX~ADVuCTb*!_$d)(aMsjkb)
zE(aIRQ<s%fHAs@mmWoUeBrxi-_<4&J2FE~cSKF6=Zgx<sSGyRLv#-v|6+#Q{@2j)&
zN25UkV|5nOJ<S>|h+3N!JE9<<xmLCUJwxehvvSq|$z>haZ9y%!Nw{t&5S+SJ4|3g2
zj_cwnkTyB43ld11$aQ;A^R^6WyR!x7vYzBwFMIe2BWXA6jPM-Xoi%czp<7Zz@0AS=
z0^oa{h6V}ny-q`e1o&QRXnsk&B{lRX_OWNo&Yr4IoJIl{RsAF@_tQa=R93zR4iXrj
zWbp|pyi%pMB(FNcdOm0VyZVTWK+Sw4EAO>J1_(#8DY2dg34|kAXaBn;k;m<--<a6{
zKJH>rgCEbzZBz&W<9Ie8A{9td%3>i!UDcA>`=snD5YRm7bQMTwo^-kjBs5QEovvz0
zdk|+uSKSE$KxbVWXz%f?(^Ys1q_a*}fdtZ7>MEoPirOlqUCiQSdF}7a1F?%)`WOMt
z%&pKr+U2a$J*OuB%eG?@VgI?$G}->&o6pyPFTypXfPFbD!!<}?U(U*FNgy$2T+Wtu
z&xtvM7<|sSl2yCq#GD~{(7T$IbB1JL&ghz>IfJs;R@522a>_%=yRvM>3+98JL5OSy
zk5J!UIT=+!a#5Mpg9LW3oV+0p64ODiT=qeJXO>8DUeha=d%)Tyst)I<Wq<yIxu>Ew
zcde#mKy6NbnV=Q-hT0s?^&a8Yp^O3SuYWWjYdgTTi+o`~PI_c3?h6BQ@{<4{NhjC3
zjWvoc*0c_3<8lQb+sdEJxHmX1hxeR#L~2a~Wnzv;q&6T>)rpQ#AYs(RoQy~y0XZ>;
zfwEtLRjpyNHZ7;jurL3`e9}{ce?_<90raNj<gFTz(3_T%w`xG5+ot8}%|N%&#t$*5
z+tlefd8<Zp&`#5H@>Y#x0cd&-w`%b667(Q2JBM2}_4uutJ%2MBRDgDjpcb8-lecOh
z4Bgo|oDKbn>w=ogZg|Ojv0|>PLc?ipPHwWb=1n*^hfOy66@u0@oEEUvFPV*>U67OC
zas(493vzM<f&}h@oIJe)32#`COZ`Mvl-?J>(sMzs>@J=hkN`N894yG)(UC8<ThrKE
z#O{CDysdhX)7fAW*KtCSD0Wd!E~r4F*hM*PjQ1fIYfX`68C&zR*{^Du3qhMO%UlTB
zgjtpgiH#tr0Ag7V8$q;Z)|xh9ma~3c%%;`LT?E>MS?(gxCd~3&NGyh+0)*u`#K4I(
zVYQ~jXq|noi}{wP**dq4Y2RgCPVP!V2uka6n56lgqSn}V(YEB2o%Y68Ox!8LzfO13
zUdxu83<Z#b-j-aXl&6m%;Zs|3v7Is$5QB$;tvPjv3<Z)0y=^%e3M31mU^@>56gFGa
zw#}a0b+1K%gZ2bVycPu#rtHbdX$~YH_vD<|*_yU&4&-=-_G=LEngebN(#FjJw*_hA
z=0HwnXb=X{ft<|H@WHS{xq=fpk)hEl{!mVScQQ<)_Ha%S-<@m#5>G*k4^M)`$T&>V
z<6dMeVHyZW*rES3?@u3r4rR5(gv^l~7ALq80ut2c?B0Ky52ioQ$y5zY;^vU5{esKD
zx-Z$Hf16LGzs$*$FU+%}FLSxP#6fkBv1b1P&as?)WjD<C{g35v9)<5Dpe(e(aW?ip
zW}EEsoJ=plL|MmkNH6CgUit8eu*<oE!S=cTm`%N*%T#fCtu;awzd{x7{Hpdq1CXd2
zXi;&H0J%aHr+0%RRPnCt?XG6~bl1GRK?Npcy5=!Nu~!HgP~Dl<&3ruF9q%IZ#sQPK
zc~t6QE`y5qWdGOAd^FuNFB>PqE8a7Y#_7mqQ1RaEcsKK|bnm=;XFI|x-aC(RNvUIm
zD&Chp(A~Tv-8V1OOE6JZ-#pSwOhk}@tJSjE-OZn+Yx6SQ1rsv0d8E78Fo6sP=W8t2
z!@Mv3nkz#uw!TI(7{HLh=o`rT_b{8L2j*qE3npX+<`Ic;&;l83at>m9dzh`VgWUF^
zx5Ecf`z)mV93M7g`GSe8qNlmQ&+@pPM*R?_ei(_*ESpcHM>^F76RIPry7XP*C^i3R
z_S;_Oz3I`831C8IG@0;UE(2-|+uF;lNsr0PZp25#h?_?@cHlB-{&DP2z0Hp4aZa=0
zYhjQXN6m)&vnUJAKY@MF+k7}XAur!y1`{$9^7;DK*OZI2!Ff}@U;}I0$2<|7oJTIg
zr@%H;mzjA!1-1ZzPMVpQVFx5CF*7fxK#;IyW*$=@?P|868rCthpIKE^mzVhhm_Vq@
z%X|SO3FYOD9gsk%qq<R?Z9_Gk%ewVLoSo|;kQ2<!%QH;K0AX&v!7Y3}3K9r&^SHag
zKX%fF$R+mI{mcQL$|ZR@F@X!EC3!h9fg~yF)wMK3w4wG|!QSp~uCHF<mP<L}ioD!~
zg$y88<dY&p1qp~1d1R;*CfkrRug;5w00?NVmYqz`pt(9PBP2*@uFg9VvJF-5{XCD5
zcY}Z_@4Gh8EcL$IdNfPDpO+C5!a#aIj|kb_K#$&n5ScHylJ_L<We<-r!}fy%&9A({
zLwRQ%a0~VA5!tsOfPKX2Tads$;`A*@U>~8rr8_aVP@{jr;zP|&6<@e2)R|x8<z@<G
zpz=i?n;7l53Oe%`8#vVL(EgZHp<DQMpJPsiKmy@dUZ#&Afp9F3^l>5ORJVZCzR4?R
zZT~Q{m8S;(iun%@p!ZE)&VL}G_f1}=!XPpKeUmRen-{4tG5Gv<DzAQ<7pbu1LGN^4
z&VQ1H`R`1gQeo=YTgWxO%U?JDfrAbMOU!>DVaj(-?}7y6ch`FN7IKWsqIZ7^0%(`r
z#-KFjvfCKsCzqYxg)opVQ}5zlta@um>sG&DWPMMv9d&LQdx4oZ1-sQZ>WguEEA?&9
z`eNLI0CLazvbjJ4xo3SjZb1UMXMObTE2!eF)CYZ8myzZ_EBd-B)VF=>%inf}3{?8o
z$NK_wrgSR})c!0n%6z<{e|@>(2PRbd*Owm>1__n^^^pM~+(QM_|EucCqoX*^{7ic^
z(B;Iy00M+PBk1X_YCr;nIdqPMWR49GJI)^2bzY1U|KTKWO?F@QExT`@zz+9i0iq%h
zV6Z?I1`F`ABW*TZu@M9djCnyIbI7|OW0}hfBoAZE{=TYeCi`FizW(Z~>hJ36u4|>N
zud^rTt<2Oyc3kP0{Sv`LOb)U(>AsM3UnBc9*h9zT8d|S$jMf2Bu*NYl1&D$*P7qUt
zq;=`2n3@UzInps12~gcM83_=Qq+?<V5R#+=t^W{OFN#GsIH42J`gcj|17!0CyQ<#?
zr?;oIUPM~oq_r+L*W1y&O~JF_76fk!lnw~Nn@H&+@N7k-t1a^5dV5sfmP`>+`WD9o
z6nIc%i-UlgrHVl54RYj0``P@4Oc4^)5ZI|mDZPR0bdpBQib(5w(@h)gQ&#ETKn0*e
z1$!N%0zk;v>zMvCAQf`(;_9I&EFv?srqgfQKMz;5W@OMmiq?z_GDxdq#voA!GFlzH
zkW?fW!64BCj`hBi?z`5`4_AYL;-Kh&21M}#jtOW$6hGjYfCfZBA8@kYcXU7#K?U?d
zC-OT-2ehG~+#$yVv>_p&4?96X7g4%xBc~dc-xjzNh^W3Ta3?^BX?x^OMbyP;Z+x-A
z4wtoO6hQs|_KX6k|KA??5sE-WJNeNSdfOJqqNkkDXL8dv`*OciPVZdpKgHxf9maq1
z8{t14fl6=-0y_f#0ffK~@*i@BVlsQDoZV<YThbXc2}CrhGiVYZF*#;4a6m}tbkNzL
zfx}{o;S2J5BL)sHWF(M!E;wc#FL)r~g5&C8Oh8Du;F$S<#e}+aeBv4fy8?v*qF`5`
zP(WgRq|jn=scs#g@}nj@TGpLu0r^#T<{8MZx&yVMAOv-jT3ZG}ttGMOx@2f~dcY1l
z&HAlN2ECXP(raB(|5^lq$hxHQH9&~0OPXv52$6M3DE2rlbSt4pzMXz&pWQxS{OzPk
zIG_?aIb?+Db^xN#?Iac~si{*XP-gUg(wgT+a{gVO_$T}A^j{vg2ZyUc(;f~E2)Lg#
z9u5cr_mjrM0pa2IliBlJ?cqdF9{zPQ@-V4A+|W?&LDG1*A;H7HNs@<e?ysHzugwP6
z+U`cu*FLoC?H2*`@0$`8`3<g#d_Xj+!8OSb5W*W=^z>;M0uYUAaGmXF6s-m)0vZKF
zZ*$GKSqWLPNrulON8=i|n%qY!BhxjxCP(8ggg3cCjxM1b-R!CyT?GI+&6#FWc4*Et
zld?l|rkRu-nq4@-7Zh8iScL3`K9s*aYxneh&kd$Gmy!>(%2&_XTk~77UPT!WM2Kp2
zjqw2?s?~+@JE$jEN=Di*Q=Rs?{Qa3SWc&TDt&gYx56bL!u`l>?T?T=4SWfxGUYU0o
z>vBvzB<Zl*OHB-eTr&4z7Zbzi%~ne21Jc^C{0{<sfrug>1o{FbrbqfJB~2f1eD*w&
z(D6V~AVN{c14RKs#PL8;fDmz<6txw*<wVM2(UUHAnqGOq9v1F<(hU}cmXW5;$O9Mc
ztrN}!PYohuoe4Ar2w7)HQ_b{ND8utb&%4&A@OUiJR*PTDy6o4gLDQ-R2LzmVjmHB*
zz<JkrJRqFwyqo>0@pvLAkH6qXx?Jt?hK6z%UE}eF1dqSu206WqQrTr!chY*Dw+D^~
z1+EB^?xX>tDVGD)0z%~FN2)C&*rQ!>DgYGS6KEI^8tw@+3<ya*frbH9QD~S}4y7<^
z=Y~G=!Z|argOoi)4(`?a33=<k?R@u!i=0pUxTG)%?0;SBk8Xs{3+M%`CxH=7R{oFO
zGX1t2nW}z~>05ZVJ8q=%&nT$!E>Qw;_gw1%#Qkd^4VF<PS#{Z-JN>KwSC~FH@4Gnt
zoqjf|3dk&9yEyMS5I5hm7I+c*KWkct+(tARy<(rPe$6ve)Kp>8{OexiXBly%%U^jo
z>@^U#(6g389G&u}iXb@|(xWDjP8WIROgGI0xr;q>dYq;}?h-FDtniWG6`oZC!9NWI
zV-F!B$+_M3E8|ysk+Mvq=+k$VXZFHT;wUoSpeof@Z;B$I*3<6`0GPbiGky$+=GA&8
zWdNdRt%pERvn^8OT6MDfGkbMGU8W5Aew}Ah26#}W&O^$e?KD%QwR+Er<&2Qu`NZ~1
zb#ew7^@6Tb2q0wCdnSbdLPouZ6!MTJ|D^z<`#dY1?)$m@P1bB&24cu#_jxAAgAZc%
zc_zmLLd-tT<aj`Y;XcnvdpgGxLFf4Y@Q~vd(EP6yrJf_{S8v+A9xFYPsfW`25zh?2
zfC=>+@%rkJ14KPXJoGjw<E7})j(O?>`Dp-@Jm#6`1VqVWo_SFKqU13zcu}M%lutH>
zZzJ)Y%v4Ta#wRlmNgcS8nTMnf+({2%x$WDC%ko(CrWcaw)E&Da+V`f1b+oV3U)gdp
z``z^Iuj~ck(RTymfeK-FJzGuGB_;^F>(Q<cl<&*QEcZOw__f`Te=k#rEPl^3eRnXS
z&^-@*_occfn0#J(?gM*yc<el`rvyV3$(qNr)t@$kC^V15Hb+%Wy)iDdfLrV2gok!p
zp9Q@46F5ScS^&01wcldjD_F!MdRKnXAZiiM7Ko25Vj&(rGEdF#Ehh^u;gL}}dA0r6
zfZ7I@ECAFmG~7hdC48X%bq$E3OE~87Oi`6V(aU(GAZHR4l~07(=mKE90dBdn-7-E{
zZRv(;$#%;)#z$!mK{=Uj1&@fF399VtVV0K%tfp+!UDUgR_t)dIfGE3yW2PQW7A~hw
z_bQ2Tv(%VX9LLS+$D&^LDjugSKu<}%>{Yy^%;*Kb`D%D%d~F|=Enl)&VF8f#$8t6I
zy@n4NZA#Lw_8MOBw3^IZPCx(Fpk&S%)zD8Z#tVRhvh=%sO{OgUZeK%XX|;Me{UWdB
zk+C@ys_d-C*rd_GdKeOSQMQ&3(q|U{qHHbCAH!;BZB|7r+Q>tv)B7G{Z#))j<QN;L
z^GGY;n9(L~y(9m+7b~vDm0q_GI;1u6KHBJjkk-U87lk@(fC%O$p7RdZgGoeCV=Oy3
z<_uF8&QRctJ2(c%X!fol(Xh)7UY25Mdc9YWWA5eFU*x=P<)-`fW(DCF0Ck4JP1toW
zH-oo;irMU742VYU<yclgHUflI_VNkSY4b}3)$NJX*lW5bG^QoJ*=CXOPg*inP{L^8
zCW%$3KxyIT^AZp;S~xy0brtk~w}mGPOciPzrG@8?We;f@Sp}uac5Z#lBRMx14Y1~>
z`Qz*dS=As0k3>ncJyRb=Q+uX9il%m|PwSbIW;;)O3_a8Q98{qDE+=^86xV$hLqoZf
z-1J=x34NE3IQ3n+`q4jS9PMzHhZc!&&M6$0vF8$wLRnhD9+zYLv6k3bo;6ghe#oX&
zb&gvj_2F8%F&0e#s*ugXO(^jk$G?_0pi^M9{$lzWoX8fAU*wjWoJ>@3UF4XYT%nkN
zF3Df^XO;0w-0Y{Bt^PJ&;`p$kpW^DchAw%gKO3Lu;#NMXn}{gc#m5$~#n=W1m^w`9
z5m+&0mG*E;r2?XYtA~$P-;M;KiXJ|;O6`G45N+(?1(ggtP2e`v|AqWTHY<*Qk!g$?
z2BF622E*&F$=_$A!Phd4q0xYA)EEQ~<REKYmm>$Uvcz?6cAW(gJl8o^=V7-CVuHKe
zNiQD6pz%B0QYnF`;JU-HZ}w^ZSjY(vczW&-_I)eyAk!!s5_mw3qE7}CL-@~^*M_ol
ze7>-h(-RR)^Tnhhc3(4L7;K@ip3b?3t(N6ClcR$rQrd+CXn|5`%h-it>^P({D>6A2
zT`EFr*WrhLY^lH}O$vTInX<xiVXc(2<E*S2S2{m|4qYx6L-dkwK&X1Tz@L8dRzP^`
za*<pqbXFjO$_gul$qI&o2CNV!D;N@Gg%tu>;VvEnqEOEoVYxZoa8>-Ky;TOJBMA3k
z!ZpG~ETG~wGYJ9FrZoZsMA&=U%EFl*zZRk0az-xO()ZUQE3TY;5IK3BkbPz_o&<n|
zI$?|mi1yV97?Fl_22oSi%W1>d==geJsTEB`1kZYb)Ps4+fIu5$?JzbWz9Az=QArLy
z_rZg9)yvO^v5|>-VO#-3l&lwUg+-Vu1SWX+&h)t9$e^V=g{55@RB-JS_#HxF0SHk$
z#rSE;!wI5^JH>>lG(eBrP|q$o*JF9{UBUzjh!C+$AV~gR@xa61mG66OPU2l*O*C@J
z!`~G}#cVD4(jap2X8Am4>zw9HTgb(msV#p6_o>7uu?YPhIc1uBE*Ed@T)|4+_XL);
zP`A7i-yp5R`mKo2k?FmF^*0F7(ys~jZ{dmmDI$|q|5@LI@ZX5YoIj)BS^rDmBZS`7
zmE@QQg>_iS7iY2Y)xdZV5cI}@fY8K2@uYsy1ETOjfr(h;pMdbsgMuG6{z(MopN9hf
zG!!)AP~e}2ME-e*{8N3tSHdZxZCD3>OkNwo&b)+6?VPxQ2DJ&Z&J_?1Y7@g%?4bqZ
zoNWR*L^p^&P20q{V`vb)G;tpdqAlf)ipUr`$i|9P#iA!f=o6V7#bn<T0-N^K(A%tv
zJot3__$byt{OoCAJ|RFweW!)l%MuXvofhcI)9VWm`RKHW>638@q6e-x`j@Z{Ef(cF
z)A{-A2jS|@j97Y%PGNr1SE<M76!`h8#nOwnQ}myytcJTJmM8=CCWMB9$LbX0g1QwG
z>h2V&@32477Ugt;iU@rLU%HAd%3t}%baV_x5Mx(_nIJis9=RLgrQS?QKr{+i4U}a8
zqJnOLfig_b1;ov(a#jI*A#pXxeISD8D(Qa-y}kxhgkDb{D`1a@6W4>l1(nDYxXly?
zgDG;ql()yRJ&7-c*~l71FnuX7bK`_&Lge0+zk8Z}lzUfL$^lW50{1RC;QN{hp?Ocp
z_plH$aZgx!j^|(%oA(3;;mcw0XD|jYurZ08z*4aXIK)GF{xjtH4}~>f{%97PAmbBR
zv>H(N{csac`%suI^8wM~hXOy=$;|-aW)H>i`M%D}L{NS|&o_D5P|(<UzRAmmM1DWd
zhu^;d3*pF^1%7CSAI_PTTlK2^{zkj6{OPf*Z_9%d*~HiaKP#!S>ku;3Lf;y%yAb)4
zSTqi(lNoNJnuR_R2)6Fb!f7!0e30Lp#0uk!d~1@*L?D7^k&nSvde;sidn}eslUP}N
zv2U^!h(z^~t!R`V=egipLS_}R$?+w=HNnUsBQ5a@i%5syfsK~RmkU`czSK9V97OOe
z^^wYHn#2&wp3CInLN+nJ%(qI69Lk={{8YJ`b$|`3XePj*BKC~4Ji|lTb2;(+3|5?i
z3ATQy7OMK88Y7jfi`etAH+&3{QX-o|=3MPtYn3^x0U;7t&tV6IR#yAN^*0tE9&WWi
za+I<sAndu?&s%HkNd#rjHGw@11r1sg*wc{6o@>aSx9IJNRS)a^&<?q?nB9!6_p=hp
zemP{n4KSDvG(fZlSbbS!0YdHuALj^RMJFI`Zj^s4VWshn86Gm=M&fx&@c?a-&y})7
zd=vaaDHSKc5Y?YlXn639o8?O4+3cI1WR8lm%|3dPNhJpcd{Z7TWnTQvz{oh$1#;db
zBh$Q_95Ucm*{6)njBgE$3?g{8l96?LpzXKhzu>&6_*;QP;aC>%yhRR`tK{JA*C5kn
zY<RrEH=QT!6$73I9|^=&JV<=o<e$nIk8krWb-D-|K;64-KIQ;w9`x?E%aRm$wr8H5
z`gYst*@r1P=-M^P`6=f7U88U5*E}|a08gWj^;f#h=-IuEN{08z<#S%0^P`vldCn{U
z@bXW%dhwuEn$(2*YAG2(6n@*sQZiiu7Na%Eho~UYlzCv<_rJ+6Dq%l{$4-q!cln{c
zvZ9>56x-!vb8&LispP25zO_d?Dj-w`taqCMM6J#KQ+khAKp3&vM<%1h0|-ZL_Qf9K
zs6<eXx;t=GLqR)s2aak;<fyyJQEy}JaTbnO+3$xw&O$t0j>tXJ*ueC!D%jsxvHgM5
z4kf2O@W^Qa(K2A|w1BAN068Re#)gv99+VTS*vR<7z$hSs=O7sconY_)9g_2^SViKH
zZ#st{64j?3KD|MPQrc-tcU7_H!tu7iO+W=#8@Wk^VuITqmEWDhDicQo?GIIMdz9R5
zzLo^PZBOr+!f@C{d!{~e+;*xDKXIu(sQ;8aJ(c|?amu%fR3w22rc*x7Kbr+ZPK!nV
z;D<Wpu4!y$><?r}>eEjnLw5MqIr**W=+om$n-Fy9q9ZUNAfBirFd-mJ*x`$F#)L#r
zCOjLM&`{8Vvw;Z>iA;EwO!!+eAx>_&?1w&w1>cS2%9jSR!ScgmW~Y0mvw>Eh%YN2V
zD)~G~cDy2=n8EVnR{}MF2>Dk?4HV-zVg;{y`L{FJ%tW_u`qChRr`xCFh)7jWlBGVA
zM`o}U@y{|$ib_ng6%QWvs{F-F_G9O25IavQ>s|G+p#+_&H9Z!+=7+vSyJyPT16h9w
zC0E9-`B;HN0WzKRdc(JFQGk^E99Mc(6zFK=4d3jb42Y_3_?Y=ep#ccJ-tfI!Mz2Ir
cdc7Iw)ll#dHv_#I66y6O^eUfwK5Nqd0on@yh5!Hn

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index f5354285..da0c3354 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -6239,8 +6239,12 @@ type PushResourcesResponse struct {
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Number of entries accepted. A push is all-or-nothing, so a successful push
 	// stored every entry it carried and this is the submission's own size. A push
-	// that could not be applied is not a response at all: it travels as a non-OK
-	// transport error carrying ErrorDetail.catalog_rejection.
+	// the Exchange processed and could not apply is not a response at all: it
+	// travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.
+	// A push refused before processing is answered by the general rules instead:
+	// a mis-addressed push (see "Request recipient" in the file header) and a
+	// malformed one are invalid_argument with no typed reason, and one whose
+	// signature fails is unauthenticated with ErrorDetail.request_auth_failure.
 	Accepted int32 `protobuf:"varint,2,opt,name=accepted,proto3" json:"accepted,omitempty"`
 	// Number of entries rejected. Structurally always 0 on this path, and kept for
 	// the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a
diff --git a/gen/jsonschema/fora.v1.PushResourcesResponse.schema.json b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.json
index 549e7cdb..da339582 100644
--- a/gen/jsonschema/fora.v1.PushResourcesResponse.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.json
@@ -4,7 +4,7 @@
   "properties": {
     "accepted": {
       "default": 0,
-      "description": "Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.",
+      "description": "Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json
index 4ccc3a05..ccb45202 100644
--- a/gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json
@@ -5,7 +5,7 @@
   "properties": {
     "accepted": {
       "default": 0,
-      "description": "Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.",
+      "description": "Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 31af7982..7d2aefce 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -621,7 +621,7 @@ class ProviderRelationship(Enum):
 class PushResourcesResponse(WireModel):
     accepted: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description="Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.",
+        description='Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission\'s own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see "Request recipient" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index b7103270..63e892a3 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -118,7 +118,7 @@ export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DI
 
 export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
-export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n that could not be applied is not a response at all: it travels as a non-OK\n transport error carrying ErrorDetail.catalog_rejection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
+export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
 export const QuotaSchema = wire(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index bfb8b00c..ca9d9a08 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+**A mis-addressed request is refused before processing, for every RPC (comments only).**
+"Request recipient" says the recipient applies the `exchange` check to every RPC that
+carries it, before processing the request, and never answers it with an RPC's own reason
+family. `PushResourcesResponse` limits its "a push that could not be applied carries
+`catalog_rejection`" to pushes the Exchange processed: a mis-addressed or malformed push
+is `invalid_argument` with no typed reason, and one whose signature fails is
+`unauthenticated` with `request_auth_failure`. The reference page says the same.
+
 **Catalog push refusals: wire bounds, the contributor reason and
 `CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED` (one additive enum value).** A push with no
 entries or more than 256 is a malformed request: the existing `min_items` and `max_items`
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 0f9f9b0e..9715097d 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -206,10 +206,13 @@ import "fora/v1/vocab.proto";
 //
 // A recipient MUST reject a request whose `exchange` is not its own domain — an
 // Exchange has exactly one identity, the domain it stamps into the offers it
-// issues, which may differ from the host it listens on. That rejection is
+// issues, which may differ from the host it listens on. The rule holds for every
+// RPC that carries `exchange`, and the recipient applies it BEFORE processing the
+// request: nothing in a mis-addressed request is acted on. That rejection is
 // INVALID_ARGUMENT with NO typed reason: a
 // mis-addressed request is malformed rather than a domain-level failure, and no
-// ErrorDetail reason family covers it.
+// ErrorDetail reason family covers it, so no RPC's own reason family (a
+// catalog_rejection, a denial, a usage_report_rejection) is used for it.
 //
 // Two messages deliberately do NOT carry the field, and both absences are
 // load-bearing rather than oversights. DiscoveryRequest travels one direct hop
@@ -3127,8 +3130,12 @@ message PushResourcesResponse {
   string ver = 1;
   // Number of entries accepted. A push is all-or-nothing, so a successful push
   // stored every entry it carried and this is the submission's own size. A push
-  // that could not be applied is not a response at all: it travels as a non-OK
-  // transport error carrying ErrorDetail.catalog_rejection.
+  // the Exchange processed and could not apply is not a response at all: it
+  // travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.
+  // A push refused before processing is answered by the general rules instead:
+  // a mis-addressed push (see "Request recipient" in the file header) and a
+  // malformed one are invalid_argument with no typed reason, and one whose
+  // signature fails is unauthenticated with ErrorDetail.request_auth_failure.
   int32 accepted = 2;
   // Number of entries rejected. Structurally always 0 on this path, and kept for
   // the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index a983e2ab..d53f38cd 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,14 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**A mis-addressed request is refused before processing, for every RPC (comments only).**
+"Request recipient" says the recipient applies the `exchange` check to every RPC that
+carries it, before processing the request, and never answers it with an RPC's own reason
+family. `PushResourcesResponse` limits its "a push that could not be applied carries
+`catalog_rejection`" to pushes the Exchange processed: a mis-addressed or malformed push
+is `invalid_argument` with no typed reason, and one whose signature fails is
+`unauthenticated` with `request_auth_failure`. The reference page says the same.
+
 **Catalog push refusals: wire bounds, the contributor reason and
 `CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED` (one additive enum value).** A push with no
 entries or more than 256 is a malformed request: the existing `min_items` and `max_items`
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 22eb4c2c..188eb5e9 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -451,7 +451,7 @@ A single resource catalog entry. The envelope carries its own wire rules, so an
 
 ### PushResourcesResponse
 
-`accepted` tallies the entries a successful push stored — and because a push is all-or-nothing, a success stores every entry it carried. A push that could not be applied travels as a non-OK transport error carrying [`ErrorDetail.catalog_rejection`](#unified-error-model).
+`accepted` tallies the entries a successful push stored — and because a push is all-or-nothing, a success stores every entry it carried. A push the Exchange processed and could not apply travels as a non-OK transport error carrying [`ErrorDetail.catalog_rejection`](#unified-error-model). A push refused before processing follows the general rules instead: a mis-addressed or malformed push is `invalid_argument` with no typed reason, and one whose signature fails is `unauthenticated` with `request_auth_failure`.
 
 ::proto-message{name=PushResourcesResponse}
 

From 64376802667570b963d413f63e6950a5cc13d405 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:06:32 -0400
Subject: [PATCH 098/164] Name the resources RemoveResources removes by domain
 and path in the protocol

RemoveResourcesRequest named resources by bare paths, from which no
domain can be taken, so the Exchange could not tell whose resource a
path was or whether the signer may remove it. The new
RemoveResourcesRequest.resources (field 5, 1 to 256 items) carries
ResourceRef items: a domain and a path under ResourceEntry's rules,
the way a push names a resource. RemoveResources resolves
/.well-known/fora.json from each item's domain and checks that the
signer of the request may push for that domain, exactly as for
PushResources. There is no caller_id: the caller is the party that
signs.

RemoveResourcesRequest.paths is in v1.0.8, so it is deprecated and
ignored rather than removed. It loses its min_items rule, and a
request that carries only paths is refused by the min_items rule on
resources.

The conformance cases cover resources and a paths-only request, the
domain and path pattern guards count the two new fields, the Go SDK
client comment and catalog tests and the TypeScript raw-body test use
resources, and the reference and multi-tenant pages say the same.
Both changelogs record the change.

buf breaking against v1.0.0 passes: the field and message are
additive. The generated code, the descriptor, the SDK types, the JSON
Schemas and the validation corpus are regenerated.
---
 conformance/corpus/cases.json                 | 1679 ++++++++++++++++-
 conformance/corpusgen/main.go                 |    4 +-
 conformance/domain_constraint_test.go         |    8 +-
 conformance/validate_test.go                  |    8 +-
 gen/descriptor.binpb                          |  Bin 675647 -> 677541 bytes
 gen/go/fora/v1/fora.pb.go                     |  721 +++----
 gen/go/fora/v1/forav1connect/fora.connect.go  |   14 +-
 ...fora.v1.RemoveResourcesRequest.schema.json |   36 +-
 ....RemoveResourcesRequest.schema.strict.json |   37 +-
 .../fora.v1.ResourceRef.schema.json           |   26 +
 .../fora.v1.ResourceRef.schema.strict.json    |   27 +
 gen/python/wire/models.py                     |   65 +-
 gen/ts/wire/schemas.ts                        |    4 +-
 proto/CHANGELOG.md                            |   12 +
 proto/fora/v1/fora.proto                      |   46 +-
 sdk/go/connect/catalog.go                     |    3 +-
 sdk/go/connect/catalog_test.go                |    7 +-
 sdk/ts/tests/raw-body.test.ts                 |    7 +-
 .../docs/components/exchange/multi-tenant.mdx |    2 +-
 .../src/content/docs/reference/changelog.mdx  |   12 +
 .../src/content/docs/reference/proto-fora.mdx |    8 +-
 21 files changed, 2345 insertions(+), 381 deletions(-)
 create mode 100644 gen/jsonschema/fora.v1.ResourceRef.schema.json
 create mode 100644 gen/jsonschema/fora.v1.ResourceRef.schema.strict.json

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index 996c95ee..70f772ab 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -1552,7 +1552,7 @@
       "enum.defined_only"
     ],
     "json": {
-      "reason": 10
+      "reason": 12
     }
   },
   {
@@ -14518,6 +14518,12 @@
       "exchange": "https://exchange.example",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14532,6 +14538,12 @@
       "exchange": "exchange.example/register",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14546,6 +14558,12 @@
       "exchange": "exchange.example:0",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14560,6 +14578,12 @@
       "exchange": "exchange.example:99999",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14574,6 +14598,12 @@
       "exchange": "exchange.example?x=1",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14588,6 +14618,12 @@
       "exchange": "user@exchange.example",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14602,6 +14638,12 @@
       "exchange": "exchange.example:123456",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14616,6 +14658,12 @@
       "exchange": "exchange.example:",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14630,6 +14678,12 @@
       "exchange": "exchange.example.",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14644,6 +14698,12 @@
       "exchange": "exchange..example",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14658,6 +14718,12 @@
       "exchange": "-exchange.example",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14672,6 +14738,12 @@
       "exchange": "[::1]:443",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14685,6 +14757,12 @@
     "json": {
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14699,6 +14777,12 @@
       "exchange": "two words",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14713,6 +14797,12 @@
       "exchange": "!!bad!!",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14727,6 +14817,12 @@
       "exchange": "\u0000ctl\u0000",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14741,6 +14837,12 @@
       "exchange": " ",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14755,6 +14857,12 @@
       "exchange": "-5",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14769,6 +14877,12 @@
       "exchange": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14784,6 +14898,12 @@
       "paths": [
         "/x",
         "x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14799,6 +14919,12 @@
       "paths": [
         "/x",
         "/a?b"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14814,6 +14940,12 @@
       "paths": [
         "/x",
         "/a#b"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14829,6 +14961,12 @@
       "paths": [
         "/x",
         "/a b"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14844,6 +14982,12 @@
       "paths": [
         "/x",
         "/a"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14859,6 +15003,12 @@
       "paths": [
         "/x",
         "two words"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14875,6 +15025,12 @@
       "paths": [
         "/x",
         "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -14891,6 +15047,12 @@
       "paths": [
         "/x",
         ""
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -15161,6 +15323,1056 @@
         "/x",
         "/x",
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
+      ]
+    }
+  },
+  {
+    "id": "RemoveResourcesRequest/resources/too_many",
+    "message": "RemoveResourcesRequest",
+    "valid": false,
+    "rules": [
+      "repeated.max_items"
+    ],
+    "json": {
+      "exchange": "x",
+      "paths": [
+        "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        },
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -15172,6 +16384,12 @@
       "exchange": "x",
       "paths": [
         "/x"
+      ],
+      "resources": [
+        {
+          "domain": "x",
+          "path": "/x"
+        }
       ]
     }
   },
@@ -19296,15 +20514,456 @@
     }
   },
   {
-    "id": "ResourceQuery/valid",
-    "message": "ResourceQuery",
+    "id": "ResourceQuery/valid",
+    "message": "ResourceQuery",
+    "valid": true,
+    "json": {
+      "deadline": "90s",
+      "exchange": "x",
+      "uris": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#0",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "https://exchange.example",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#1",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange.example/register",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#10",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange.example:0",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#11",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange.example:99999",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#2",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange.example?x=1",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#3",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "user@exchange.example",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#4",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange.example:123456",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#5",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange.example:",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#6",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange.example.",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#7",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "exchange..example",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#8",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "-exchange.example",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/killer#9",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "[::1]:443",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/missing_empty",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/pattern#0",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "two words",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/pattern#2",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "!!bad!!",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/pattern#3",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "\u0000ctl\u0000",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/pattern#4",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": " ",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/pattern#5",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "-5",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/domain/too_long",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.max_len"
+    ],
+    "json": {
+      "domain": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "path": "/x"
+    }
+  },
+  {
+    "id": "ResourceRef/path/killer#0",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "x"
+    }
+  },
+  {
+    "id": "ResourceRef/path/killer#1",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "/a?b"
+    }
+  },
+  {
+    "id": "ResourceRef/path/killer#2",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "/a#b"
+    }
+  },
+  {
+    "id": "ResourceRef/path/killer#3",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "/a b"
+    }
+  },
+  {
+    "id": "ResourceRef/path/killer#4",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "/a"
+    }
+  },
+  {
+    "id": "ResourceRef/path/missing_empty",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.min_len",
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#0",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "two words"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#1",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "1.2.3"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#2",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "!!bad!!"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#3",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "\u0000ctl\u0000"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#4",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": " "
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#5",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "-5"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#6",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "NaN"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#7",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "Infinity"
+    }
+  },
+  {
+    "id": "ResourceRef/path/pattern#8",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "1E3"
+    }
+  },
+  {
+    "id": "ResourceRef/path/too_long",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.max_len",
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x",
+      "path": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+    }
+  },
+  {
+    "id": "ResourceRef/path/too_short",
+    "message": "ResourceRef",
+    "valid": false,
+    "rules": [
+      "string.min_len",
+      "string.pattern"
+    ],
+    "json": {
+      "domain": "x"
+    }
+  },
+  {
+    "id": "ResourceRef/valid",
+    "message": "ResourceRef",
     "valid": true,
     "json": {
-      "deadline": "90s",
-      "exchange": "x",
-      "uris": [
-        "x"
-      ]
+      "domain": "x",
+      "path": "/x"
     }
   },
   {
@@ -20227,7 +21886,7 @@
     ],
     "json": {
       "exchange": "x",
-      "reason": 20
+      "reason": 21
     }
   },
   {
@@ -21020,7 +22679,7 @@
       "enum.defined_only"
     ],
     "json": {
-      "reason": 6
+      "reason": 7
     }
   },
   {
diff --git a/conformance/corpusgen/main.go b/conformance/corpusgen/main.go
index 89ff5bc3..2711231b 100644
--- a/conformance/corpusgen/main.go
+++ b/conformance/corpusgen/main.go
@@ -212,8 +212,8 @@ var patternKillers = map[string][]string{
 	},
 }
 
-// resourcePathPattern is the absolute-path shape ResourceEntry.path and
-// RemoveResourcesRequest.paths carry, quoted from the proto for the same
+// resourcePathPattern is the absolute-path shape ResourceEntry.path,
+// ResourceRef.path and the deprecated RemoveResourcesRequest.paths carry, quoted from the proto for the same
 // reason bareDomainPattern is — and, like it, a drift between this copy and the
 // fields is caught by conformance's own descriptor guard, not here. That matters
 // more for this one than for a plain constant: the killer table above is keyed by
diff --git a/conformance/domain_constraint_test.go b/conformance/domain_constraint_test.go
index be8bcd34..a829a7c3 100644
--- a/conformance/domain_constraint_test.go
+++ b/conformance/domain_constraint_test.go
@@ -43,7 +43,7 @@ var malformedDomains = []struct{ name, value string }{
 
 // wantDomainFields is the number of fields the shared domain constraint is meant
 // to be on. It is a ratchet, not a description: see the exact-count check below.
-const wantDomainFields = 20
+const wantDomainFields = 21
 
 // digestPattern is the "method:hexdigest" shape. Several fields carry it, and which
 // ones is read from the descriptor by the membership check below rather than listed
@@ -54,8 +54,8 @@ const digestPattern = `^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]
 
 const wantDigestFields = 4
 
-// resourcePathPattern is the absolute-path shape, carried by ResourceEntry.path
-// and RemoveResourcesRequest.paths. It is the third shared pattern in the
+// resourcePathPattern is the absolute-path shape, carried by ResourceEntry.path,
+// ResourceRef.path and the deprecated RemoveResourcesRequest.paths. It is the third shared pattern in the
 // contract, and it gets the same descriptor-derived membership check the other two
 // have for a reason the corpus generator depends on: corpusgen keys its
 // pattern-specific killer table BY THE PATTERN STRING, so if the proto's copy moves
@@ -64,7 +64,7 @@ const wantDigestFields = 4
 // makes that drift loud.
 const resourcePathPattern = `^/[^?#\x00-\x20\x7f]*$`
 
-const wantResourcePathFields = 2
+const wantResourcePathFields = 3
 
 func fieldNames(fs []domainField) string {
 	names := make([]string, 0, len(fs))
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index 97e3ac9c..31ae7cef 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -175,9 +175,11 @@ func licensingCases() []validationCase {
 		// Catalog request lists — an empty push or removal asks for nothing.
 		{"push request with one entry ok", &forav1.PushResourcesRequest{Exchange: "exchange.example", Entries: []*forav1.ResourceEntry{{Domain: "publisher.example", Path: "/x"}}}, true, ""},
 		{"push request without entries rejected", &forav1.PushResourcesRequest{Exchange: "exchange.example"}, false, "repeated.min_items"},
-		{"remove request with one path ok", &forav1.RemoveResourcesRequest{Exchange: "exchange.example", Paths: []string{"/x"}}, true, ""},
-		{"remove request without paths rejected", &forav1.RemoveResourcesRequest{Exchange: "exchange.example"}, false, "repeated.min_items"},
-		{"remove request relative path rejected", &forav1.RemoveResourcesRequest{Exchange: "exchange.example", Paths: []string{"x"}}, false, "string.pattern"},
+		{"remove request with one resource ok", &forav1.RemoveResourcesRequest{Exchange: "exchange.example", Resources: []*forav1.ResourceRef{{Domain: "publisher.example", Path: "/x"}}}, true, ""},
+		{"remove request without resources rejected", &forav1.RemoveResourcesRequest{Exchange: "exchange.example"}, false, "repeated.min_items"},
+		{"remove request with only deprecated paths rejected", &forav1.RemoveResourcesRequest{Exchange: "exchange.example", Paths: []string{"/x"}}, false, "repeated.min_items"},
+		{"remove request relative path rejected", &forav1.RemoveResourcesRequest{Exchange: "exchange.example", Resources: []*forav1.ResourceRef{{Domain: "publisher.example", Path: "x"}}}, false, "string.pattern"},
+		{"remove request schemed domain rejected", &forav1.RemoveResourcesRequest{Exchange: "exchange.example", Resources: []*forav1.ResourceRef{{Domain: "https://publisher.example", Path: "/x"}}}, false, "string.pattern"},
 
 		// Quota.metric format — bare-dashed or vendor:namespaced; empty rejected.
 		// window set so the only variable under test is metric.
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index f4860f4afff60d0dd5372295934c30a989a2bf49..8ace498cb2b40061f922230488502d1f0cef0564 100644
GIT binary patch
delta 27749
zcmZX7d3;nw)^_@)ySev9w$9Ssw?p^s?xdFxh>(P^LkJ)Ug4-<bI3q@l%8Y_SbjEj_
ziR=OjB1;)%6WKv_=pd_#JBqSOFisRf*#wmlM8xkoRdsXq{r=$h%TsmEQ>W^j+UqvE
z<|miDl6-Q!W4tmxeY|s%Ysziu&ri%sJ#(9@TQ}#@bUlZ)IPc0~4HI40GtYFF#~FXl
zk;e+AyYdvDgAJMP`urA8FI^i|HG1Tuqwc91?Q@ywiHwd}?e7~os<QoK9opY2b8fA=
zuTRFS1JvgnF4fWMN##~sC-S1AXZ%WzwOipj!XBUODoYhT>$>HxjH&Oo)|+`;{<OIT
zlcrv9;h#G-^+K}^Lme#Dv$uM))_Qlk?sPj8hsQZ9N4eQppU&nDRQ-d@+aIVhM^!!Y
zXw~Ryb42AsRin+S%6lF_k}%h-M*iO`A2%z_haVmNfNtJ9vTAgpdH3V^<DtsoBh1PX
z_nHq^RzF}ScspF*-qIYMY;X1-IZDut98slns($~t=Yh%*_fwgpM?Uyi)o6BegX-&X
z->8ufnZv6`|C;rl2deJ*+h|g&tme9-hu=S<YLq$hK8`G-hmU4|@#wxHE+&jB)Xl1Y
zRNhnlAj}?ZqMgl~VY}6SFds&<8BX1(p*oqvN5h)?9vxkEuWtVRfvOQOgwjTgtZvVn
z=bp+3A4IuGqQ-c*a#Z!>!YDFGBuZo2>w0tDMa|6H*_~}cg_=F5(1Pg%%ZBLs4csZn
zox{!#R0kH#$#G{%A%#+NvI{H-ojEzBgY=DxuDBJCdtOf3bE*4pR69Ca&C5}<_19W}
zOHtB1&h4ocgVc&<?YHN+n{#cXf^2(Ei=YKTwmm1=RiECLE5X_sDdRSEM)r*}yl$VA
zazJT@*WcEHP@3WGG*rJ%SDbA;?pfZn*S!usLr-_Mq3U|oTz#QKcRJgU5zNbWFIQh=
z&kk4J?U+|liG{Kt%Dmcj76d8twrr(`xgs)a*&D;vXop%`g&MQgt9hh~11h!N>>Pci
zo9m!0mU@*HDeqs^WO@z$<W4|QireE{>doNQAqbkKUcV`66woa7M)UNR+%82Wn*0^s
zbiK8%k+?cZ^FU>p*ID%IBs9u$ud{<bMN}0muXq)&@q{_>-l`GRY}Z5Tm<~v>>YEOV
zS8U_cxjc+ts&M0-9`{DCQkQyUgqrWD!Jn3%6M7rHT5D;o6M7rHS=rKBC#>D*&8dU6
z9$kgCPFUN*<KE<Tro1j`E>DBrX0O`=F{%_#a(i4`yzX5NJ;Y7GkhRULM2yxZ+p<>8
zE^VW@&~Qky8qNh%wt4-z(i9gcw|PTh{hDY22*2iKpRaEAW8XH4+exU&1#XbP=FPBb
z;Re%dUJnmLSmOrMYu<2Fe?db?1wHOV-n6Z$xsRx|&iq4O#B_7SR<N1JUGG&s^E&m-
zirx%(l9rw((o%nVOf7Mg9U~XDLOX~&c<58Fv-hu3P)>u_S*$luqX!Y5?h{_+bn4B&
ztABRX;7`%$$bfw(yjn|MQ$XmQ@Om<NqXVMRPk6IV%SNXJ-smU2&Qr3{Wg7IpvKn0`
zq0ztQjebSg;PALFc$FXEuZ54Re|OXXSXNNHU+`+Y@4{M&_Y2-ut)&$XSaHGY`Ju@Q
zhp^&Xuk*i6R`4{m!*^bHD;^D?Au&*W?{#PXItlK(=yhLLphtMyK<P4D^iMUf=Cb9+
zprXKymn}B}!obU3j|d1ruwM3tM8^VD35EyDLZ}~6xtG0>L3$fr2GA9+GQenQR*W1`
zjb39`53hc(O7z>Hl8zX<;{CG>B4Ct$#V(zC)D^GCE1g6=>WbG0SP-RO@#fwjOHY@j
zU-7o-uN%B{uwP{_J)!2_dDX6=6J=cWX0(zl)cdY_TU(^m`>uL}AuAVUT=klLWf|0|
z$i}PQaD`sR%K*B@0{>FG+;z<^!$qlf8Pu(=d0R&%DRrxB-dNm%DC3$pVYQ-5mT}FS
z9HhTb9WO}3+gKml^e=Vqu(7_T)}k&q)+f6hgiy*@pX_pgC}pfK9Fe8CQOa0fbcn2p
zTej9%U*1i6kQdU-;~ei}|M|BXx^ui;NHY{N-Y%pW3K{S7w2`dMP{??n8MYt_8Sjf&
zRcR&*8Sje@(hGSZ5SYmRT%)${G0`qVMg1oFG7QP0qKt{YfJLgJjETOye0_sx49(-5
z!rrb?H{ChKrqE#K6x&P<6jOX2tHm`?O!37MvH%TMOz|aemu;a*GpG0pZqvJQGj)&i
z8FutZwMWG>b{RU%e8!iNCs}lq@r*COiv>}}GrsOU^<6Gbk%76(r`%<%bFm&<-EC5j
zjZx<-!;oYJe+KAkeHmhi3@RC*tM!HW91NFdfUefp{(8xt0h4Qe9fnDhGhng@9k|xl
z@lO3~njM46b(q0YqsOa%O&_+*F6BCuvdou}BYCbvDa(9bt3zLhQkMBJ!qb!u3Y4<U
z7r9xMa-A$?nJ+q2KPX1C<{syoRQIRU-#dn`u}f)=Qr7q~tgvW~Qr7r_9VBgYl(NQG
z(#e7-WsR@wZZT{t%~47#q_EE?tC_9V`0gCWr>mgS!sA@;W9!$d1`AG6-6iXNa-u>O
z3Rv%x6BQr|SWneBCX8(9an|{iJY%oI${%)jN==)hh8_QdB&+RPB3$b1aA^s;I=kz%
z1YMmEvlXp>LLT=vU)twBvHl4`a+^<WBi275TL0|y@%2v$09beW<me6v*_}SQ00IQ-
zP9GLPC!O$Dh=$g;Q%9awA5hxA?NgfZ#z872`&2PJ0Yd3*UuKs68CLaBg3mupJv3cy
zbhQ7_RwAwsZ6z9}KP07>MM;21QvaNx<|{ppSZxsEgY6Nk4FJJ$#OD#65RjC7ZGzkv
zAq7Kez3@dT0K8pqIRg-y^_DXLp;=GP;H!oZ%_xmNzG@f-0HQ|Q1{x?EZ5wEyY_$9U
zVK6mXelR`m<G!?~{K5|=B#-;lpzwo9emE)oz(RAd4n1kP0a*||X}JLqq$kM@VKk^o
zE%!CMb&eXX`Px<?Cw%Rb>rlu*<!c|7az9acnQ(&p8=rE~=QK_$X5W4{-`cOD{Puo*
z3r*}2Mvkhwx4l_z-d#D0b`aPuiM`f{k#fgVXpSDqw--$tq<bnyU<Xoz{ZG|{4`N?3
za<teq(I!&vP_VJVeg&J7QCwB-j~>EqZB*4mBOfEN_T~_5>i8y1w>Ndzx82pWPrJ(;
zK4NrrRpq_iu*tJ_ReU#fPvxj#qlRNkIC2EGQe^gM^8xIrMvSz%M)Mt@y@jG3*F%*L
zV$<~yRhhPz_YJRl@LnN?9p3Qjs)x)`k3I-mGzR;Rs^_xoZmw+BLepE-h#eHQCPD(u
zDY_;gLgE`MBmm)xZ+vnM00>un<HH(&*7AT@B7Nh_z35BVTj*|{0D<#9XEq<gNI(pf
z7kpUAXX+VT1W8V#1-jC=K4;h8q|!k09dkUdX8FGNId2zhcN2xWulST-;PBZB+xM8Z
zjJ14OYsm^ns`u6)7ZxL1Eb0JZ@fDw3&jW(;ichZR0b%hKU(PSEnAY=@z?YUk`JC5$
zVm&X@pm)_L*Yh$7OUs{qw4OggQ=y5La}OKuS0?$L##;{VfhJ#@)gxtW6pD>Gh2g!l
zou{qs|J~AyJ--aq;nh0HeevWhv$C39nxkIt&{>?RZCF31CTpDV7YeofMT5b3znoxT
z5^6u*?-ff#K-6NqU+%pCQTy@!{7HVX_o4)`_nP3BdoP&;=S=j&W$!vL1cyEDXZ&gN
z{0`$)hgoCo?s1C3ZN!O#c~50^<%1*dZ;JauUX^=!UFl5YH>Uzk)$GdaY4P<NQ9bJM
z_P=VG-)2y!C^R1(amT$@C#3Gi!@CfjbND?tGN~SUzv!gYDR|+QVZXa|AOfCt&|x&t
zGk!Hw9|{+SX@@f1ugro6dzrVh#=m1Zj(+vqqJ>Se!$1Y`1|1P^fFPXims=S?wD@$t
z+{yr=#i#qTW}(F?-Y9{`+p~V>OuvXXnFhTXe#Bc1Z6IYD0`56K1zdk_EVeRp{K{My
z+vzva7Do@i8>c*vR*NwY=Pv)Z4%B>2HE^H?AhK#e!|fcu+y;ef_;@?VFZV%V>}RN0
z&)lXe$bAs=J6~+7g0&BN-Y@q-q$l<xwSKt|l1T{I7yRx5KD$Re?gjp|C304Yz>ozk
z{c1=|D-oJj7O`E+)w#v^8%8g(j0S}4BEOv70nvPm{FqjfXsHN|T8r8G7u5Wr_#29g
z{c?r}q&&YWww{1cTulC=#YWWQUgl4$ljcMrxy)}ZHlk$BN^T9CKVNm%th9_l4kTAv
z#sGqIB^g6=T$GGi?Z?SQrg?kSh)Qh2hSLGYaE#WYL@$O2Y=n&P2q0IH6Cfb?R{O29
zj3`Zj8~n|b6awM@9}tlZvJEyFmA}C+2Snt8Y=d78h=B0!27gXUdY2M-fNu0Vw@B~G
zH0W)j0HyepNr=zQJU*%M@;vTW{b{+oW$Wdk*jN455+RRTZ-?+D{)UA+EDHf4y2ENd
zK$NtDny(1Wmq+IBVjs^}+m_;QDDLtrZoXOrq&$DK78Zo!E`Mu}zAqj2<a^xj`_qo6
zIxJA%b7ba2^nJe?(7S*%pRD<SwRlM_Ey3R){lFpxgyaYQW+FfULHYp&NG+{C^2wY7
zslUIZW;^--U@$&l4aR_o?F0S{vF`ySS$|#uHxCd@2mI~Y^Pwl7){=+Whl|uf;Gs$Q
zu+2jrJnWZSOXPy*uwSkX0l{<FkF{YhZV=E>cE`(VH}KGo{;17EQ{z#aho;7(evjC0
zK$tZB*xAwXR6d#TDO<NzZBtBh%BOz0+D8V|KK0AhJ|NUS^;-+fe6sZmzc`ix0LvG)
z0kpvU!Zv^wm|yti9vQ-5`ofQe{`+qDE9P-u^rtONRV`8br)R|=dXdIye$p8uhh5^~
z(+z)v^^z4nfDpZ8g%2QDFH!i^lfz<YJoh!f@}%K3-er!5wZW+`R;cNY8f1V5Iik}6
zg65iE6Nhntpt<G`<npBsAo|HQf14+bbiQw*1nMWwU;NJQe6b@_;MHIJ(RRO10?{x2
zqHcNzZVm*-8A>j@ca>VuImSCHuw?|fdYqw&GZ*AScbtLs)-bLMG|^Ce#x1OHl$OuV
ztWrCa#P|XT$rc59d7`0Z@~A^DSIY6~#he2EnQX9|SF7!zNsgXu$e|Gsnv)GxoQDBI
zbFzVXpcB_bYdvkS4Xf1-Fq=*;pEeY6ZUYF-r;XfvStdF5X(N%;SJSpBh65D$EJLX^
zQh`_0#nkk4c7hbkWI8*UWym24xlo^F$RP?4O+U-XsYTP%97+j%h?;FUpEtxDD$}4h
z$B;vmOu`Vw44OhqxFtAcnd>lEueEAXMNDai)|hL^wG<#KHP^`CmkB6_4qN6LIbyR8
z2==)KPT#1z#OUyCfx)-Or2x=e0ME$!(-F!7L-rWtLUVy(^_ZA~_3sjc_ZZlq!G<Na
z4Rn&S#E@MdxnNpi$Q}a-rX>b?%uTxDYUy#WFw$OO-PfywTdpu%nRK$~YANO^wqDH(
zt~3;W@<54*yOoCDpg9Q;w5!<B^=dS@%24>GlM*4b%D}*q$7O(4Gh>4q3$2z_gA5H@
zs||FEKcUOUJ??cz+EzAfgZjJ7I5^iCs$cJe_KA}f8`#?$)Si9tH|n^-sv{ukxWTF;
zAQU$k9&zXgh&paCB2hm4$H~&o?1qhMTkz0uyV>TU;dZl;;peT6ToN@5vGxT7&t?N_
z-@e=)*j>jqZB%<##QAVrXY<eyR%c|05g)nWsWVzx_D~<JBYSQ{jT0XCb|dXGR<=p)
zmz99vcIq#CX+MylD(_~`Zc^XrgTG<wZmS4D6tUZ?G9WZ}8*)SkL=n5G;UDEZ$lSwT
z*sMNMk>FL{WAo6Mwa4b6D(^Am_6)+{*+av{Cp7dW$X9z)L$;{5JBk6Iy4ULLfKc5_
z?xM3NK&b9Da@*+TToY&?JCss;pei(}?6XavNoAkaTF3>@KBJYGQ~*iSz@%~$=Yi^e
zc6*&V5InSV*>CgEN$`G~hX$YhHV+Lx`-$g9&I8#)>_2sC|NaR+#~iYGXec^lWQcBx
zT<{z++9YJXXec^lv@O(+3Ljx8syCDd_P4F-{+a~8MgbP<FhG=3Z#OTEOZ8S{A{Sis
z6bZEZ1;n^iZ{#&#T%wySN)RjFV}`Tv*GVw&Q^R?OJ_rGn^teAa(!MqvMh}y1e^o8d
zOrns_4b`LjQPU&^(Q(#lo0?sNzhTaCYnTLt<Z(l;c>!V0aRU=wfGZ;N1SS@vxmiAX
zbk%Q;`jb42kSpp52;vh~Jps9{3?o1gpD>yujxeCWB!tmdZ2dMh*bjfhiC@`76jWc?
zL=;qC8S=sc!XWyJhRjCVM;3V8XN<IQ0hYC0t<Nri=oteGGCsi<P`$r3#8DmqXuq{8
z4hY$At%?JJ_FJm>ESg>lsL&r%`**0%I!XYb`lGE%Rr}G9OKIdn^+y9sX&S@}sAgB?
zAPxXOU9|>rKxkgI25~@WUTqr03kZ%4h-D7|T4iiNHZLG-7#om-I3SqD2IL?P$W<|j
zPilr%X^Y7%koG|;@|rp}J-aPLX9ZNBXqC3qDlEWTr4#_PEFfo1K*+Ly3<p5avH)6T
z9z}XvGXKQ@oBXEwJXC3@d@-P8@LmDPGp`df9UxR+4EX%|4xx%>Sr}lye@m^aY0Evn
z(5f3Cj96&Z4G>HV10Hd}4G5-%0ZcPAssLh^To?%4$a@1paU8TTkULQSMwA7Gr2(af
z@gH%5^5F1?=y?L2l2qPbHG)0!w)#<@w!DEMCgK+m)ma+I5JNp6j93~7cb27611}A9
z>rS`+Fao|=!4|xuRt&`71Z*B!0IdkfgLCA9XGI{Glsq&Btq2sh)Av)HwWXSG3MfhA
zjdZrJRBMwO@UFVbQGs-jBEvF{7QLJ77NP-ZQ@|tcEg%fiO@Vkq-zi98!H!g?_tjU4
ziEedw*i1AW?Xa0>INA}A-4w!L+7Uo6l`V<2%^R%v1NAhBXl3(;O++i3Hv$=AkVY<u
z-Uvj*?FJx--Ut+z@J`W|eD+pAtZV?F`Bp%#YyhG8RzR+70HOI-z*^a~rIpQI*(m^E
z!(Q74TG{NiD?=-ry;i4yFqrlR&?yF@PZWCG9|h8$&1GlzsTJNrNPZMh4SgKVYK7<%
z?n42kp7sAoy;=i^Vt_^K1EQEiRxyB3J{0hXg(@J5ITXMJBMsqz7{U()%=$pOo~7$N
zfleoJ!GAd5JQ{HE(@7HJsn9(V!16K+2bnT4+t~su%ufQe!tBbeLwODC@W*PWK81YL
zZLm$FPS_BT>kQ<QXrPstfdN6^5Woz42j@{du0}RwzxoGMkwUo9=Al4rw5v#6urVOl
zPY?!AV*s;M3tmOI)72Qro9^I!5ZN?I!H~v4{=IxJFO$+q?7nFZy@D4HlH&oTqfu(I
zyaQ?%REEYlBw6iDUGR87F20ZpBaR1*cD(BVa{cQ&=)E}`R8O)62h{HU3wakjY4gxB
z;H2Fs)CErl<Z=SS;5iw<GT<W`EecU{_nCllfrSsM@1kL-=K)(bQO`SLHw^W>GXam-
zl|UF=X9C!j2;aNl`!j)p3r)VKt6%Q>vjOM%Cg00c=$^BE&l7XF@4w-`A1lm5n_Ofy
zhtz+gy{Io=v~8ole9^Xz`tn69{2>hfive60_u$n;SH8r09p>#$UHOvDLtXij-Cop{
zF9lkOtG`0tl`jQwBYY3%L0A5Xy?R(3*0)em!Sj>NLmm64fIO=}E_i+l<cT{&K-lwB
zprllPlSZjR>e!QVQ-3+4?skBRdiJE;re@bbH7U1=ihA~>+&nS5Kp0e$a*Ip#Hv|<f
zcc<s3Dvzo=iAo36bel>?D^1Up&jXMPs_D6{tuCU2YI<&NP+ydZ{ZA{8ds}YWYpHvV
zsV`}sZMiOuZn<5pXwuxCt9V)K!FqlTAV`4uvnI;L?6y4@OMvURFfw=KD*WLLGO14j
z@>f#?A-f|NbE=R9+L^2Hhhxa3eh0|64Fq{EKS?AbVCpUu`UmO|1R)H}_tpd<yek)b
zYe9@g*qy8J=@^;R2LSmcBtgjT&c%J=B`3zlb{HFT(@v&ZpHxRFne8C@Q7#sbw7YLd
zHQ&$Xe61E0<8L(O{#?0Q0EFcJT)A2Rgnj#|X0$JEM^!n*E`P0F4@Fu*9kLavNe<bH
zG)x^LMY^hQN0t7B-Em4SgCdPfpV*2-`iZSbE%FH|_T-8{$Jm>v)UHsZ_0ln0k=p8*
ztw>|ZF;b+y(T>K#&sfLPY8NQd;PIKQNDcQ{t|o>9<U;YY+~zI#@p(J4?sGQ(wAu%X
zG*WzSE7C~ud9FM&K`s<O&&8R^-MmDE_X(DHM!mDN9p53GuobBrpU9QVOXNcF1jW_@
z9j<EcasQZ`wmh};jB2>D+C%imTr7C^{0^+`$ydu#2QR3*3rYb{#<HNCW&t6)Ea(?&
z20+j*3u4W%ha#W|Ptt;EU#8v-XuXtV5kxlz`93b)S%f!Ssi3kg=+wV*;0;%ie8WX)
ztV2+1=pj;|Qx|mh;73^^1%BKbbe8`r1!cZUDKBNf+#)jfKx$A(o98M9K=U04%Gd$~
z-+`cvEkLLq2*P3QxF#|Wvp~L<e4vQ0Ll5J144)<dDKFSeEK32QcsSTXY{UUEd>sz9
z>L!fhCvJGDa5&hyD<&=-HqjYeD<>>F94zb1Uj!9VK-RO>`C2i|B$wCQW>P@b2jx`_
za#31+5FNIhn+epwJTa}uz#=}^H3a1V2MC^qpj^)bf~O(q5u*|yX$CQIFQrMKhywJB
zpi*cs2m5DS%VnEl+LL{dEYd}A0>a~81m)5b5S(8GgW^>ZAUMAW7PQr?IVH+J$sUVq
z4}*v1ypy(VwEaD4^H3z83<f*O2Bt_p87%Fjcjr8iJ;f3UtuuINemZ6I(EN1Dt|JBZ
zsi0ifLl``#f>_tnVM>vL`ROcMl+b#EhvuiVHV?g6I&1UL{B$-bPdXqBp0mL=A^mpF
z0|%dHc}eZ&iXuKgows>Z@SL}KXnr~$lxNov2G99mUW|^8$so*6S5v8^c0+n!09bU@
zW}=1XRhx;Xr>nL_G(BA<izd_bRHR^f8W&3SX{U{MfQqK4aiOL_py_E`s3{O=dKwpM
zGK!|BaUmGBf!-h$DR_f4EtJxWv{w{RWq@j$O_c$vX*LzTKbjWui1%U;2Gz7seq5g{
zVhXQ|W`@{L9klT`6e-t%X{OC|9hhd?O!UTRX2>H}Vh{$?%+U26_0HTTJRq7AQaTw0
z?3WIj!5TYi*<frAMkHIYN$-i~gfhe_G;+Z>C*%_oIv^P5gfOAgg13m?3Dt&_u129?
z{C%<Jg*RJ(5y=)KtvG8#a<zzDFxG~Q5*ej*?_V1#>!SaeGvfWwybxPgto;E*EkQKT
zCZeZ9^X$sf)1i4Gk2vjtFo@=b+P2eg<wO`Q7KYf3CE86OY6YT&Hc=}OEwqVRfoNe!
z?$RI(qJ^P&l24CCN^6hv<q)ec(TWi8twHp%P1G7hFWW?|LG*G+Za5$eqL)KKQ}4(v
z@?dAm29;{<!Q%nXQk%yEo~1UA2Rutd@~Iz$!Lu}EM)XHGPbS?(ZY$Lu0#7D*R@yw7
z;8|(&WP)d<U9n8?tfY!nah@!C`SsUMS|xb0z_Z5Y$%4z)gyd;Ba>27EB%ap8>sjDg
z6DsPU-^O{e@dAuBFVlvCCmTHLZJun{v);BR8$9dndS!!WJ=KfO`HGYrY>wIdGOa%x
zmIIzmHct+CHrYHm;Mo+Ci+c!zXHzIqpg$`*j2AN;i+9$Z29Xy;bvBU~M0GZi7esX-
zxqX5#i0VR-JZn7gVWF1#p|du@0VW@qcG*lmFzpJ-)hcqqv@6s)CZpO1rd^?ATX8&G
zr1<GrcV}1ao&NY6M0;!^+^Yi0$B4)U(VkGKSQ7a`v?tW5v%Vd(9vaE;xQ~XEW2wE}
zv{Kjoz#v0{)z=JIb=0n(0kWeZdHMulkR1(SqfNUYK<t8!hVqVu#33dni2Y%G$oUXI
z5GYatSVo2Tfj}1knEF{ru2cZQ{#i&K2mpfpvk(ph8iX5iu`3MWDd30fkq6wJ+4tqz
z+`dIhE(}JpWpFMGK5iSF3(DiR!MUJ3P6lKDpg6DhxX*^t{+l|`N89Phx*nouL%7Tz
zPsLqNi<I+hNnh>B3jB>i&Rc~5!tV1{I0HiSd?-g8Q~{!p^C6tTUlc^hy~rNur(NiG
zJ>SJ&w25eWe9^KNxg;9$h@&V#5M2!6*5OOCwu8t0ODJuUnVQ#M`^=Hm0kXe@uvWVZ
z)^;Fk$C_;V0PT(v0N6Lyls9UC5FKmgiW3_^(2g~+52h7q2U^HXG+A(<_LqJDsOUsf
zwk9C#n`p{83Xsdn#R?#ZCYo5ROr;~)jvn_^Gi|2Hb`R7h_&P##s)>V^KcSG0WZpBT
zl4T5@xv+<yJ$9qkxfF?DN2<8F1BA*mrd(11g8dm2OR7WEj2+3&=S+6|M(v{#0H{7^
ztCC^QnVL9*L@rdHGjRqv40aWJ+;hydwd|`w+MkSK2+kq1Xy_}3S?*d>nQuCcN^V&7
zVC|+FB!eC4!Z1K6)mnxDg1wduqo@Z&)YqC>^G$K3ND2H(@deX4&lFdRG7Wk!n(|6f
zCgH$mu1N<zG^7_(9ba;oto$aeT`>^Mc*!<{D*2KrZ#Iz&x|dAcY|=8SnAWO`*-JNR
zy@%s(_<yk}?&~NEii=IJcuD{W#l@z4v<`@c(_%Am8($d{<ZpNvo5@@G%2=k*%6PFk
z^k&|Ti-}^nDbDo(P~37;c4I&kx7?K77?8_a=X%Aoq+Mh3!|uNTa3tdm5H((7#Ty`)
z)|hg*0R+<;6TKHtL|m;s?)7F`%H)qoT{Kg!H(h?dYi~{Awt<}=s<jVpFcn^J7ZTA#
z8>rrWuvu?Sjk1Y#yIJcS++-^J={6-oW|N7tlL1@?XbYQnvv#Ao#Z-8=gbX$H78Bia
z0m9zp!O4M{_9km~i#9)No9Sw){~M|vGGRM-BM-A7YO?@4c#C#d5D9#tPuU>ZPJQS1
zTpGsgWVha`{V}-Hl&1?GZp=;-J3w?)s6b;kd*@c|-r#Q8*px`AChk!CaT&DG>+Htc
zv>Sr2oANH!!w(2vH!&dL01YZ=@;z+rZCW35kIh2|1AB;P5^W1hJnnsF+ND(M+cibW
zE`fFXObj*rdZmP_wjbRbUy79gz-9ZbAO(c%ep7DW0AbL66Wh19X+>N@jb5L+^n2|M
zM+E>Zska6jK!j1fDHjQVBx~k~RV*Nw>dpL^zDwmyu=iZ*=Ra!QoM56lowJ!J{?D0m
zKZIN`oil^{OFq~@!F$fca)a(|N(fz$p$q`c3sxutLi2(Z%79$f3gr?i^#>8k0|7Xa
zp$v$2`N0ZhKrsDag)$(RexOhuN6lU8aX%SOTNrj27t`4-e^8B7Y?$^RM|LTco(!vD
z(eS0z@Z-Yb1_uBIj0?*_3J|j6!m{B3QNXw`8lHbXRZ2}TC7e24sr}JW0R&s8gr%*3
zsP&YvyaEB_!eO!Y00h;PaI!#u9PL#~0XHqoCfuV{_XPmaG@FPTep*<5{()Q&O$!Ia
z(E}ieriHERic*4e!l@qjYFo)BIuo8_Q;{d;gyjJ@azQmG+)CUH0digJA<2iOWJPUQ
z3`YRatPRWI2oRdJVL2QDLbEn(`LL9>^$Wt{?hOD$3v3(cWM@HGPJhS+(}J)ZjsU^5
zAPgU3eWEx!dE86Fc)#%G{n{siPLNy@R=xT&G<S7^<J`-`$}3@~@h|pq2wy=wF<8^s
zu?MtaHONFM$Q82<Aas|9<uDJ3QkIA10~SEcHp{~~uY|>HLkWDgSrK-w4vX1Fra^CI
zSk5*w3A4?rFwHi!(C$RuS;w{x*M?T%Z`6F9RdYbtw9cwIAc=<MMg$Pt>%#KWDnQI2
z>%!(xek(vw+{~>Dhll6~MFSvcHnWHRs(r*RKBD<B%+Q@)Cms=-!?@I?Jys_Qh&uN0
z-?Sn9@HY&qvkjtfsIx*8xiF|M92TouK++6%D${G}^;en4{a!e2awL`hpq81QT?X0r
z!fKA_MP<~BJ`laA3;-4Vz-oLz$bMk;B0%tdK)vV~cJIzIw3z!~SUH^fd8Br`qXrn-
zND!_Ag!aL(eD(zh?So-dmKF+taNWUho5OG&efLNS<T~e}uzdC<Q_xn2!t&XdOajrN
zFrIzk%U|e0;Aj}nzCL<H%PR(i5x|xa<kq8M`Roh1&^;Q)&EA7t7pQ^7M`;g0ksn3b
ziqxhJVR>+gToMiA;4;n?;f_Z3`Y0{>KpF30jbU+G4ST4EHClZW5Q>dqd2b7d=x7WF
z`pZhwGjZ&t8^gK%`1*nb<jGrOxK9N?S}3C`9cMR<)=DbyH;O)PMFJq@S)mDt!jFgL
z-WCvr9}nZwViE;j84XBZu|1=;aeeSNh`zFk=#=U!n}|-Sz6yK9sTqVp^i>$AW_0ja
zMyFJ#*yL(034`dA>Xgkxr&OnG9y+Bu750eH6T;v*MWg2;ngPpbwe@Z4zt!4&2cnM-
zroOd3KnGLbhUEz`a-sTd81p}W`c{U6Dff?I<yz{!$FwCBeRLRw1k3Ss81<tya3B}j
zKZdh%Wc1-nIcR&Y$$<m;Jo?;M!p@)Nz#-G1_meen$RrFLSNXs}!)+OzYmIS4#CQvY
zHXaj^<1HY}7!#4>Eg<N|M6B_)j1ICUMfiAo7XVsvQbf)}fT+-<h#YSL!89o%$6G)!
zO^V3nUnX`Nku(+&%Rf4pm>O|;`0_84dic{3CCo2v@&S<x%m*D8Ao|bK5ezzmupG*y
z?lKJq{jWASG!05LGEpjorbWctBS4^MBW&<LwIQKrBXT8(RGy5L;Qw$Y*!Nt7ZT+YA
zr_gf|xuneGtFPxGSW@B@6PQrrSrOLp2{6ryDEvN=Qo%GUg8Rf$E`)ZN6JZOU&^noO
zB60znskk6CCxQj+I*f9zEKCHEwC$<?KA{z*dzMq}aT(ysqS~*Z+7J7;dq^H2DhMoU
z4+xSKRC`>VKp2^;*zzZ}-oaH7`M?i}kXaQ$55~zVWPn~_?lIc$gRfZCLL#M7wQk`u
zsQX&>zhku9f@`hz$>LRC8$tV2a2Zs6Jv%c->la)fQTQz*$f@S*Bj~WSIL)GtzmW|Y
ztMv(PjK~En5+SoOf(0z*Eyy6=HnTNjwciCdN92MUiICYG!GaoxKafFxO|kGeZE!GU
z%QS;bie%8IA%m{Cl}#O|6$Q7-@TEk^Y>i;h#w{2i4uiL`PsVAb<~F;1G{|hD_Sr%^
zfNYQZ^+?(WtlfBRbIaEwcsogc$R<C$!M+`@{UP{<Rb3=P^$n`-KrVykf0NxeK^qi&
z(=s8OH~*Vt!oRo-G~QwRCTKOmcPuw%^X7kt+*r<K(ERVQ2PbM3!S}3Y%jV7h9yJ@j
zPk}vX{=MvjiP|mZ-iX3qBvK;S_eLU7{TwY~I^#kxl6H~xoTPo7-5JJx6u}~fFZ(-F
zeU3!<>a!RCjye*NV-Fx?k3{6^6A<<siD2HOW8KaaWc5s&taa*xzhOqb)#U-fQ*U*7
zKoX6}M_+*8si#`fAl#Wku7Qo2j6oQGgQvmfp`d7p$a`btf~O&pCtmRYf~O&ZS3FZ`
z5bjLyMC#mRZIYt|0IDY<ayA2m>WPS4X#$cg`T9+oP&!kwr`htU+H0_Zmi(t}8))Hq
zIwB9Ikqe^J5kstg0YP*+g4HjLp`9tv&&eSa0Gj8lArugr=d2+V5Sr(jhS1Jb)$hd+
zIsgDRd~e%8liK%od(x!#y)}eF7);;O5IR<cx4U2rji#-LI*dW=mU&ucYUniWWO{ZN
z=uC}TyN)j8_i0hF-2(vsw5aquAY`XSrQZR;KP?Ks(`%_N<b)Yf=AWtcDFJ}y3|o^t
zJtHbldyosw8BrXn^x~TE^sFeGK2z&@Ll^GqSy4Gl0D@>%RL&BBAet4GYg0fF&5B}e
zx`mc(T>#xLM3n{6RI6E9dq)itppFzVYXU<3g{WL^148|Us9bIXV%B^inzJA(mfMuT
zm)kE!o%5q&xh>P6H#aJm+cF8W=Da8^x5?vOC~_9D){C`3DgK5J7e(cq2?!$=Mdh3c
z2(m>{YtHOK6<!|Yb0%7YmP5<!)}ZCka=SGsbe2cuoC#qtEsw(Cc;xNu>T$1*ro91w
z_acAivf)fiWOs$e>ZlqO-MlNgd#!LcTQFC1w_9tq6|x|@*77zW$k&p$A4C1Rk{>p*
z>gTml#rPXmZL}51*&Cyp__zkSP}~^B$2D|w*Oj{U7Ur+jZiXTS_m-$Ux&(ycmT0b6
zOaVf1OB9PKdJ5E)&{j6LR_hK$a_d&RL~`ras3z`JkxQacjQr$^uH=gC<cc;O$r0Nv
zM<4@g+bu@`LT!7KBf63!UT1eL)~@y=FT8Gf0U4BIc>xeKuUlRK1kLN@g}=ZH-8}BM
zqG><E3q#2ZS#0f#TJP*`(0D7V#)KETkr&>TUTD7zUU=848nPhzuH^+lkiSb_C_vS^
zQG@Me`{!!0V*CxO_S%Z%g}qjnLoO8eQkNUT72$<_tnEDQ#*%Kli|w-&iFBXkKIB4i
zAGvQI-A#5Q*pON=PkUdf06@buSPcUR6B?|B0R&S+RIb(mNi~Yu@HBPSZseCQQ>lg8
zeU2Ld2-!?@pz@{7M4tLGDldZ}45lxmnCp1A?*>n~Pe+yWR<}n2)R7{(Js{LiTiqTI
z>Zh%44~TAmI+}A{c6&<T-Tq9}`Hk%MG7WlXt!^)q(CyDPb^C4<(BFw}kG~06(FO=3
zzO$kY5M<vqMO!yo!(0~Kz8?Tu<FefvwCT8Pw+3xGE?WTyVK7~$fIC66dUuceYBcS+
zJhoto_MhzT5WN~zO%Z9`DbmK~iQydpv}5yRD*-}wY@Qt60YN)951~d8)19JXLLR$&
znKrNj0QODDlY=xMh$iI8K^l<Ddc;R9fFPQXhZPQ8(sri-;Hf<J%`#ll0)Xf#n~2))
zsXX~p9moaIQ+fH~{umHMPvyzyrrilm%@g|)0BBCd54!QQ20&;|&68s+AeXhq*zQ#7
zj687;1i(>KWhnG!*p;Esn~^8SSO|k@MjjfwE*p*A!{dG}FYQ<=Yo)eP&+Y-y*Yd12
zR1a$GJ$dZmquNVFd#q+gDx~&U%?t>_J=Dza(-){csLJ#6Q>!;?Z)J4@Lbc}S%W47g
zTz>(tB_MR?=i|db{@AVun%2EEUs;v!G&ZphAJdkne)m3pA*%)%s1tHTe*gr{(tJ4$
z0)l2~zMKXD(I1xP=d8*X(;y}A{;(|HxiVi&gE9?z%k$+lD3j11R^-z(xFC~P2Q#vB
zU%v8j>hxaidF{R)e8@n8xWWU3W&84F=m5g9efhGr0a3!feC#{uPz4Z{?aPmT49n=l
z2}*!vXrhnu<(*>>a_vFp_*9Pe2ko{aM;^?VAptp1AI!Hxq6f85J-hi+?P?zy?dxp|
zX)LL?Eu^ue-nNj&lKOna!x`#)Jw5Kv^3yJ{M?cX{X7z;RXZhBX{GJpJU$R}FX^Yx_
zX}JQ45c)D-b~-@NeVLDF;J*~mlN@!5^{Uqnl;Cd|a>~}ESU8oh@kfPD<U;dQzSpNe
zO-t9F)XmPZ{>QYZit#rz&*jU<Q-IJsm)}f$t_KLsbNP5uNYiCcLKmn31Eu&IZF|9L
zLO>{9u$mB%M4OthCpG;K`Mg*41K>#d84xD?V6`G3n0~NY5fDs2P%AFNZ|6CC;inez
z)8@od(;Kv0M|LmBUdgvU?(RkHI3~u&u<iih9fL3Bc#i;t?3kErPC)REiJ>{y(v;H+
z6?adHDNo0o#(epM5Iq~UCu)!Z8su0s)V7mivV$NOG?QYog8(87C&hA}j)@LJ3A}?m
z6?0CFi4G#upf@=tJBUm|2bmJH)``8yP17AQK8lq9p}nWaWOoOI8Pj7jWC1}pJ!XY$
zFM_j~<9jSnXda#&lZ}lG)Mj=}b}B&7%#O)U1xR`^G&X&S*W2T+jivn*a~OkJ_nw-c
z`I@OM*o7~&f`Z;qtBqmqpdWebjR%7BV#-S~r@oaQ2=<l_1bG_kdt6&{i%5df{Fw6w
zegG&^P{jo?XT`5lV8B93v4|JPl;t4)r^O35Q4*{8QhVf9PC^b@@*5I5wpbc-_OfZo
zOUq);eoeHiW6C<v;#6ANi}8`tnEQnGUJd7^7JelrA2f;-@UDqD|7P=2JFks7|J200
zKBjC2FMiNdGy}#snM6muoQ0ZvL(C~&Ac_?5Zj3oQS-b^WIyquf%-N-hxGtt_2k~Dm
zV*E}BC9%g(YIpVIEYxqd#+*GZ7A>9j^smO`kLd{+&~Br$`BuI+^_ShEzmxzVG<I8o
z4hX*8R(}D6>Tc>U{4q>#YMnjo<X76$o$)s`_t=``kv%av{2&*adtw-V=(SjH3hTFH
ziU+U71|8FqJ;Z2_WN;wejT*a13LJ08<Uj-nj<;hNh<>4$qrCy$jWOkmRI5|kW!L?{
zh;k%YWEAC%R+J+bWQ|so1A?qECZ`TS^x4K(^b7P^nmQ;!OdX%cFm+6z$AG<Q0Q)vI
z^1S9quK*xqmqvSsZ)5U`3b`ol+gK~H-T*{t-^Q@Up)s^KRr8|k)Bw=DXmx5pXkN5B
zH6S!EHg)RWGy+_qPJN{>{)P!xY!hg^f5omaEhw+p6{ZE{73$VYnxkKrd)zO?(_T;Y
zx~MI5XO~0tg*ZNnA4f+b<rESN<Ee{Rw0}EFfWW&jE(bqA2rrCl{1rLLf_Gt@ewB(Q
zmU8mhVz%_Ewg8$G6N_z4iiyQ>xy?r|G#AIQ=a?c&MNq6tJ^r&c(NR{;hq_g9@pK)m
zM7t`UBYss45UQ)<@ZLMTP!)G->*C65tkW;rYuV*0nYb>lw$N|pCP8?^?CbQwoy+-*
zwIPn*5uykKgy4pFPQrpD8E@N;zd<i2e{YIA3ypTOTkBb~7wbU~ke`t#rd2=?Y>H=#
zJt-gvHpTHYi+)(8ocz2c?(ArECIZ&Np(nvW{zj^J1PKU+EpeZ?kOl<9mN+h?=_N-w
zxw|gzOc<Rw!#IZ?FGiwB6~Ctn2!^_Nrnnpj1VddMPdw>adpT_!US+tI?9vH;L-EzP
zQ+(6`2*p?9K^kDFF=(UkYP@?-*=jfu-5z(A&TffcNWNRqi(xu_+krF@)qv379`_eX
zeY&F99`9JfAL5tOY3WYr8`pEwKUefH80eD@q*@GgO|jEvplgbq#6UlyQ%+Y4yW`Fd
zMmc8~lCF0wMIsoGDlUHk!LU2-6~C_s2!`G9_Sfq(=o`pB9{2uu+O^c?bp7e{oIViU
zAIH-Ldb8XILGC^nR}Qm3G}B9K0Kp3^jwJvgd@$Zp1PUN{561C|h*p|_7%mRRjl*$q
zeMbrWChJff58G(~ktqo2Lvh?p(z9}zM2}|<#e4SBQ?%yjLxJ58Pi3fjN5|bjh`ENi
z9K!%%R6|_ep#yT^fcTgO5Jok`@i7hg4-g(}h<6&ue>009&n_FFj};}snB#1LreFJO
zAHK0VZkI!mdOR*y1jt1>$K!H84G5y+aqOo>IdoQjJRa&O%i&j3$Kz%P{TF&h*oVgD
z%W>uBxYPJXryFiF70=LbbD@oCghrMap#f3qWxG`BjF;_FX@tH^rHUq}5&CjG^fQ{A
zeysu8Vpa8H+<7%FR#h?$dRO9dRV9<Ks`|+rr)5<mozmxc+~X2y8xjuVW4y3h{~!GP
z_mpxygLP=F*LlVzTmgP}ltbg-_=M7y-yJd2qq|K&-q&5oM0<`;;QZ-XG%ql$pPWeb
z_vo!1p~(q_zm%tBh)qu5rF=P;0-BOwk7eq8LQ@h-0W~RvXhNKlz)p=W8gi(;rzY5u
zOufXMno!zHA^NswYNA6&{V6AxLSxQOq}pcbn$mN2Lg6C_lxfDFohahFVuB!>o#@b)
zyu~5xoSo=cq2mW@fZ>8U2{tN6?;4t8+rw{{$R1%dqL3xn`#CV0+4j&a3nP2bpTLBH
z=J^CG^y)p#=MxJ5)|FBr^n3!}y5hHUND8sDAd#Bv#fNvH1qp?Z9h3~Q1&NNu`T<cl
z3?9o<|M2U-Q$ovav*@m6IhjS<A828KSk2A`^rP|B359n9N`%nrMCY#hPeKTnjO!Ch
ziE$Pm0<&v<+&+c@upxvrt6?*su|CnE7z3Z;tnj!uC(?G!3F?D#D$rJ&6WF5lLSR?W
zh>=PtTUljL?_2|jW&svs86bpH3BUMx2SBuYDuK%s3SU5kZz_?uH6ca}O5h_#T|$l+
zG6km8CFF=9lW4@KOJKzKFDe8ol(RFzd?EcpUjRhG&V=kzfbi$egzU(GTvk3J1%ypI
z6S#w0M7_Z4alesBJH`f^`b(|eNVtML>b(^8dlIbWU_G7(0ERu5I{{(e9&#t$nt92T
zH`#!&UKD&Yq3~ge5+U<u0>e@XmjQZ<%?|6Gf^XS86!32m4^B0p0=wR3r^0&M(A!o_
zAQ3WeQ%p?4D=!G4rbkl65!%@wNhl(|kqW6J37q;+PXYwhkwobL9_|ET;*mtB8|b+N
zve7)Bu*YM1yWl5Qk3k|RKA|2ng3G|IN7<g3{&47MLMfBH6zoS6UAyVCD5|^^?e*-o
zxIQOZZ`(q_UQf3C9)Z*soBc%Ee=*1mV7Hi<|ILKnCD|ADe3ro1TC}<8i(S)~3FYgA
zQ@=((jonx7nkX$bHlbHLdW$3|ok%$Q@MXP7K}jbQ&WC@Mf{K5Yz^;j={k{~dXA;V}
z1iNbprZ-^J3JKzSWk4{VN#u$(10a;oB=De)f)x<KdL|J+Cxev|c(9(ef>ox#h_hC(
z$|MTbvlOiSgrYAZ#Qhz91>_<-TcCdgJ1Aa}Af^C7nDt#ken1Wgv%X72c*let6tCaW
z2qVm*jrDhl;)^hg=2+yzEDwzMKH<Dxf1XZQ`gz<xCekJ*9mZq_es1sn;iIcZRaOrl
zIif%Ph9&D(s6Ua_4~6`gz%Pi+pn0($#rw6?`xrhQe*i#)TuaEsE+AyDCFF0|0m7hb
z32Z@VCIrN2b}ixQ!ObCvJp-4>?5-aX<j|jxOck})Z*|o4<K1&YvWcClJ0U5rLXZpH
z2}zu#3wD~%CnPg(;yy+$u~SNx_#tMQg6dC57F#B8Ax_h4kbVhI#a%v+``KjL612#c
z>-Fy)o@bNtWvq`XJ|n3l#nT8tSOd)OC|!VHo{_{IC0=a<B6DVv4ehAkVa`m-p%bYP
znwf-$CetM7qi+3tGWA|ZU3ZwzgPZprB=dB1_qEh}eAM6PCfUVeeVsWssqkkulnSZ2
zNj$UpP)H$E7AD!A5`AB2VN&6-3MuOF3zLY|Jwgf&Tg*0;>TiV>Cl&F&*T=i`;v}9&
z^hQwh$LokBe$a?@(!1sKM@5z=@dAwcNq_1mE0fA<Hf)IAsRj`72rO2YfDm4p^oj*D
zAnab5#1#d_BOu~&WiqllDaLe4;N4_ZQjX~|1qQE5$}wFgQ8!tYL^t^}T;#{@C7D*2
zOm`SV_~k46>$|SzY<HPn=2@3?<?(UZPwrZuR7%Baq<v@I9Rw7^ATm+N`Xq)P{C>I1
zPu|+VZtbjh32sO#ow*l~2$>B@+<eo7?I)jXWGg!BJ%byQa-2gVr6w`X;Z_YYsPHD{
z>Z11vZb~YhBoFy%Q?g4}YC_1sO`BO&7rj?-b5c$MNQBJhBqjlR#Ny{WA@+I~y)3vT
zsdSe-H12Lm_Uf%ya2Ygxig~;0{h}#bhQ{3#$@~qDyaDg4lWDsV%YPB=^juecXwD6&
z?6xHCsL7)@kVkhUm0iN4fS?5yA3Oj;ct<iKc6@-S;ErV5LheyOcyvdy-7e`-O5h&d
zX?awpz^I*;M`aRubSHWA0?n=Xl;+K3+99^On||K&X3`bnJ~YUOZ^3EYhk1ao2AJ<&
zT!7$xE7`t?_Md>re24weUGEWm$Ce={zC$u?xD3#{?3NySDEKa7gEy?fo%n9Da~COt
zI=;uIk<5EZxh^%tgODWFrFonOPJExe-$RcD-?toXa3{V`j;7a9208Hq*0QI5Q}6@J
z(MW^^ACRMkJ!tI@+5h%LSsz+KW$^bnA5u`6oCkB~KK!>fdL+2d8cFc`QQ+A}BS}7&
z!Pxf^yVO&U2R}+G{Ani)pjF~WNj&WoGFT*j%)0l2%*S@!X^r?X)jiC4uteO?#`Myo
zckE9pVv&Gf8G_9IB)$t2He-c&0EI+an(>E6K0K`I9}f@5&ppTa9EDQp=^66*hmQoI
zd?1MrA4LK9g7P5y1qFl-+7-SIG6$1gyX*HLY6p1SpCr>7Sb1;#&YS@t`y`3~X@!Dy
z00nD(Qu$N_D<GN=SUiaZgm8Vbjrdpt5RR;;L5+qVKm==jGV!SlR!ZQ(ddvz|nF3pm
zS-~okC|HkCuzrsx=dOUqeJYvuvkU#|OD9`DK+jH%FW3L5curY?8=$~F-4wWhunbrP
zE+EP{O+iV^xc~+38CKR;ZyP*gIR=T4IYW-YVj40)XW5f|_43eJYo0(Nr6y^&K+{Qp
zhM(_JjeYf79Kr9bP(doBzN1hn=RyeG@7d7)dPV4a%L4%(y5CdCjS)<U-OH)<{q=N5
z=(1fN1@C1l4~N!N9-99uJ8*-(&Aggay7JzHL<n6?_UMV5PQ^LU<9@OrZ9)NCGe95U
z9f+DfSpaX+24Nt1b8LY!zJN6!sF&3MgAWP9oq&)YTOi#Dh}w-UknRM8JI59z#utd$
zgc7(r#}&xgM5e%+aRqWVkxAsvaRqSa4svI%$349uZI-LRVXSeo%52@w_IA^?)aikG
zw$f^PfvXK4jB?4R&lb=^zg_6r0y$SB6$Lz7fHt8{pG&@+QNZpPtPeJ46v+J=QXw>>
z0Bdu6?nP37&lRw@2kTFVp0lMyGNdZG5b8U#fQ`CIzdJg!K=!9x?#-D6_(_*L(7ZQ#
z+^hiq36{gSi7d}#X!Ks*8({=1z?WLoX>O!ut}RerED&p3U^Ful#5Z?<kghF||Iq{>
zimffc>rLu4fN190g4m0)nJIxc^9xop%M{e;1*@555;gM+Xy&`!504sIJ+gTJ59x&}
KyYn_z+y4i_ZaDJ*

delta 26195
zcmY+Nd7M<$mB+gt)x~=c6)2!<YijN8s$yyOeW!8Xw<Mz(4N1)CBrZ{BGMObTf}pb7
zdI1pumq1W<x@-qUG$;fY;))xHL@_9`1($$2-*ex6yv!edKK;A*oZmh7oO9QA3m<)=
zym@hX;*`)7Yf76b;SJSyU*2ZjSDh*|FRvap%=*|;f0|W&Rir#G)L@5HX?As;x@dOw
z-pZ`G)tCOH-IS+0x^1J?iK?&5(+(V|=D$egz>&7=E)LDBJUGU_#A#o0!;z2`iiT&`
zSeGP|>bvvo#1Pj#-K~~lT^{M;LrcVJdib!7z(E(eXKM~B=c@e|*yr||TNCMQWGpGI
z>C(-IsLZVyaK5|Va;=CJjm)p9npwH_Lc4FM!~7b%i@W6vxGbwG8m?59USv159Z;!>
zoUXMgg{)F@M%ssvRcgvZ-Pzr>62{JmS(hd!cF(FyN7$VzJ$_*SrptLVVv)Gf2thC-
zmgw$72xi0vUhJOcTH&tI$n03v)3K1-&TSL!Dm{<cweFIT8xD6BgXYClpI=2D=m)44
zWZ6O^b;!<(Ij8v$)_Jk^9o(GOq_SE4@2~7apXNYC9NQdoqDCczN^`7Bjr)g)*1<7L
zW7Z>;_BYz)HWT<$2ZW}qNHn}O)=u|FAT&#3iL9ZqpjjF#)Vb}oU6w60^^e5bxE)<b
z#O-NL6qRMMaIb$X!YdEQ!hPJky}rV-JZ8m`|D8Se=hxkIyQ<t`PwGpF-`_S+EDwxt
zqvbLFF-sdCjz(6+to5<V>WA%gXhK&jjJqiD)x)T-ia8yP(P7kA#X5H}Mu#zaRjg(`
zMn_#6qr(_|Ml`ZI7G4*tHdgC0^wz{8QN*Ngx+oH@UK@*S4!Id^3GKFoV(Q2fZIc7K
zTGjZjC1&})tHz9$SfbXLQ4L*7ER%D;^PGV2rkMKk$B}Q;CAZs=k(+`bMBv>NYv*?$
z0@0>eRA(iIL?GG}%N5*(4q26sMs~)kHdLB#w-<!#cg9HZ(@C#%+i2v?nDtI9>~6H&
zw%}<_n<}rYa@lX~{-Hr{Nsv0=0<Vr3y&VgW{)ZCU*%b@-b3YKbr^(RBhcWBp%G3X8
z|2Q;(KRtg_fqfswoc6k-K=eM0MLTJK1M&BVvCbbGe@lV(_ug3eFUH@d484zhf14uw
zy-)l5@16~zXymh)btD$9%>QruH=zjt-wMh2&ti@q%2+EI|5>a<M`J|@D?W=wkDRh1
z<XQ1~EPVKs6}k*R9E?Re=tO`<#Gv{j7U}elMMUpVEOJ^mH?Mtz(lNF0cXr)1$NVs+
zEsHQ7^TP<lz+<tfmk&T#kHs?H&;r^5a~GIKWF$$u$71>O-LAR~&~a5e!OmQBJZPg0
zZ5$8Ukdbpd7LA!u$jCV!OQw8C8^>d{XPY+Km^O~bx}N1GbsOPm_$#$wf?fNwuYxvY
zczqRX*TJyJ@cJs&(I=JR^;ImL@oQ=0t5|lNX+uVh*!Wc}*W?b;ZGgUsSr;bD>b&2y
zEveBH?bCijfj0xCt!iC=sx=u!-^4l=484q^Z(<EaAJW=4v6An#YSY>`vGV!u4jE@@
znb5wCsmCYUFJ1d>(25MPZv(%{5c}32V(8Gyx3OH_v=X6}Z)1gvOrIjgZ{No1E_Bnn
zk+#wB_c8VMB!csO&`4Vv`95f*EscC1i*_}vZE58DST^TF8u>n!_q)>8H1d6{aK76^
zH-f+<b;V@6am1wfDR<fQZ&JKn(y-XHF)5z%Np0Gg6tAmy*LluxqT#7(^JII&HB$o$
z2Q#O}&2*Et94My7qrS%-D5l06N~Qq^E2hTFR~TP7#>}blZkM~mw3%)+JYD_y4tvCi
z=|LMVW=@Z{t1~PvZA_2X5Ah*wOpgyA>29vp6zy28D(6qJw^-LU2ORC-XpXn@=E1bp
z4vyw{Mz6KRxg8wM@y6bUvK@9d$NOAs>}-dfQATNVyze#cr?Lp9t<zYjD!-g&|7)9T
zmj$hyMk~wW?P?6qX|%E|9`i@-X|%E|&MYn~GZeJ4ES|r_v~rqhWm&v%vHONMWt|=k
zuc-9D$NoWR!iu1k(`jWzyq%v5r_;)cc)E|FJ)Kro#QP8QA+4;45BjM$H(RIEN(U(!
zJf5}5#SC2%W(%<*e$BOdZAx2bM8l8At$ea$_RRmd{kofOyWwW_-4kt3A4&~vQ{}Bw
zK-zvhZq_LvZ9gtOe9yDLeKfp2Zq+4Uvech%hzzXUIn&OC{)r-gz_urS)(7d+9=i2$
zvs$IC_Ry`5vs%d(C=-pe#H-$qdt0Ckk}Yw&tG5Np$QGzIuD3w_0kF2l&Fl_Dwl!|H
zKtNbq<7|OG2@}eUOs&sVUY%`UZ#6y_x7upIQ7Xl8+ncz6C_NYN)Y;wLMk|pH+bh@2
zvp)<qZV!}%YkQz1)AV*xdf00T_*&(*X1m@R@tW_0j3ratYrYSFaJ&|edV>-uO7X5~
z9hr>9B>QGuZyMC0`|U`tH~m;ph2oojEPyD!DY4LdhKwvI@5S|=;aUJZ?*%5vy!l>W
zg3O!m`C&j9ruY0XWTTPY@v3i37_vz2j@xN33|R@oUK0iYtb6@10FmA6hXDxdUI{}E
zhi1id`{HWTuk70E0ch?EG$j`M;$}liEt>n{?CD;Xi7Cr2KC(Y<9gK&Qn?l)3#@~MZ
zZQ0vz&fa?6jW_@Mb=i+5HfL|Y{<`e=pWb%!um0`!>w4aTK=!ul$KP_DnzY33bb9t@
z<8Qt7hU;$YksW`#tF}F8_g3FLXm<^{s%EiWo**8F-Ah>7!m|Cor+`?tKW^4cAeQZq
zvu4U37s$q8f4uf!+}q<yfw#x~G;a2|rig6%Yn(l9C%2teLn?d*g$Lrp!$bdnDJ^^!
z50Ci&g$&Bi<KZj3O>Pz|BFEy^*KxDSr2wlb@wPiatUeYun_M8A$Kqy_3&iSU@tUu(
zS~j^-pf_EAi-*68dz)NShTieG+2oocHeFxFWs@sIHW!VYh*x!;l<>xEj%H89?TnW!
zIZ2l9ykzMIz{Kx-6M@Kn=O+u0roNM8DHHLWczvRZEwk${;cpZtCd{}6N?pSCHk3dV
zCnnfXiaq&g<c>sDvoR-+<Q)lr3dxH(cP6|k1OV%u3F9#!vUeuT6as|x&V<R`yqGgR
zp>uZ-0L|%vrr0w*VRDyRG^Z#0^GIHDcUHo>x3cPCI}@4!Mw<dJQb4q4B}}A%XwOQR
zNCAn|tVGSd2`^Gopd&Rq5uTUuB4x_Zo0Bk+GDSpcZo-dLAsV?qQPp*kaZQ0{?@#!{
zx*)Du;JKzB023GZCIXRN;JXG$Qwzj3y@*sn?0-NFdd%)VfWJ|EAYn!H3=5RHMB6ib
zh~fi@j#2m3HiW7!8u@*qYI8+BX8$SFsSeTKC+w6v1kyS&XN9_bxjmpie?z*$Cj}z8
zBGJ|hKM>Lt68;6UAk~REt1BNYx4VSK0vOt>6J}@w8AYoT?YzAUP-GKz-L!c?m{uox
zHo6yUA_nI=)&CFn`S8dTu`b||5Uxv@EfKZwtV@{r90<?41oQbQ%>&w~w*0{!)>LP;
zfoEgDBZGEhz$1fpV<PJ99uOAI1iLdiP1cDCPbR#>B!HegnJ|kq5X~nOW|0P>`DDUh
z80y5_XA*j07zcppnZO2F7@i4ikcHuygjt^vhUu9E>+_BXA*<&!nW&mv+3~o2R+}#M
zi0(|-oxH(bFEM-FOQFF4XkYhJ2#D<KehLAheO*%MT?tw}4vf5;u-;EpzFA{m7Mef-
z>Xdkc1c>^(3CG)$08xK8k*d{`Fpxp=Zlde^3=%o8N`VZL@Oz2yaJ}_1B}DYSM4{(D
z7D4o0qSr9Dk2V8=JqfE;{b`-ut$)29sbJp-3G<$W<DH(UMR!kvmEc;f3;HObO6%>b
z(3HS_6lh9dKT0^AbfQtKWou$?KdnhTK2E5X^>!ng64;OZxekct#|hgzwgS=oIKi=X
zpw^_7PZKJ>!R~{{<$mGQgykK)fM|Z2sI50`N+3T?l*;bovb(A0+!HyRu#P7xlQ!6o
zh{xr~Ly6y6Ir1F#rzL7pKkQFSKs<gpQFGi(OH!bxr6Y;(-^{dR%FsLNPfMnVY3Z1r
zmilW;I2?T)N~lL$>|RavR$ILBwV$0pI`ws;oxTCYYB?i)ov87)+d$aAPH;$;5mGN_
z<P&Cu0MI<)j}Rc5C;SltMDxU{5mIll8c#~<5rPd4HcU#ISp$e?CMC^i2f{QdX+{VT
zrb$Ug$c3&|-98$bnyk7@Eql_wp#9Wjbtkz1sBW(p9`)^$c3t|;q@~XeQb@YpnM@>Q
zdjy1bni|z=7t+&`mfjmmAu`jF%q4YN1~gqwY_%IQ)05udM@H^ArzaT=S208zqLCTN
zs{7Q|R{P3M4RFp#+6i|o{%H^^W~rV}*(1mDH+`Jt_Yp`RXZd{uqBtuV^-k?T`Zz0@
zFX$P+K`foCo_Nac4v);Ra|0fkVdo~>C3MzNE27DycZ&gpXKs=U!g1Oj>~2=c|FuUq
zHRu_(IpC2gt2x=uo8+m5r#acdw?~Fvv)FSUJuY&Ko2+_DJ@~)&ndu^e^OKC1mt^Bu
zlrAqyTAAe2q3k&~|3>9D*fpwVlf8T_Raj1)x9tPc;v(MzK!_G4&72OT#YGZ_f77&7
zF1i0{``1lH?SLf#jZ9oi0vd6^lBC%^A`H!vBy+|tnfHnkx#g7&Puo|7`T<Z~o;2GW
zAgaqHcyg8mqPjd;+tnSTH9;%Yu+8=edLpaJ%D@Dfd{+9tqZXc($qwGC0u;?8tICC%
z2h~;Tsm=DeXBVxofPhEen+7~G6|D+*WGY%EJm+a1+FYBodM1afJ*{?J{q$M8d{$Af
zH5B_kmMLm&vYj`4sfBTEvTMooP^PH0$?iSecf8m!MYSZYR`us+?bjw0tq9hEeJ+`=
zS^`JQeAVJ-EW&WLNQTHZ9mssulB{b@dfRj<V7@}8k_`9I>wzi4z$cU8tKIWStWq@c
zbh7G?$xw1cR^^|w$6Q^ak*AY()J@Rmk|fvWq}4ImE<5J7+pfDkd*x;4de%{eb<}yY
zDG<fYNwc{G((>jc%U??KP`O1t^PC+UThi&Y#qT8$o-KYafg<Xs6A+#)l1|Jr*h4lw
zuVT;J>2vrSZ#^IINNznJ@JMbwpEQ?^2*dMyl6myQ5dAJkBQGYa_R#NPs`om(vzq(7
z{d|`)DlaD4py@9XW$FCONxhdI3V{A)zq>$WU-r8Tg#KmeZnLaCWoi7)Bp3Ws+o(yM
z_)c=^RxWG%Qw|Fip3{I@&g`p!u)LXMUoDe;SvtEb>1~Gq#BG<E5v2~zT}iVY0;0Jq
z>2HV10(X0p{Wt)Q+U+|Ehz+}aM*(5l?N9bVt;%FStu2n~#v+)kT2Yz4&7Rz*OE*Lh
zC+)cBpl;%zW1fQs0H8hQcMXW_G2cNzXpf159+b@QCgy*YREJ)&=c6i9>Q_mtogO7X
zU3r?fA_7tUDj83>PkXAk<z!NAdf9&Rx^6lNPWpWVV#G<mZ$Ow%CZpa}77(VBvK+~L
z17tNlnM|FhM~6V~hU{dr_FVT1uPqcNt9M?p52$h5>}YT7oSbUs&Gp^1=O(9egAJW{
zZgOhaaQRpVJ5Hafs(0E=P5dn&Wd=47o~bEw_XWhtsi}0?@W`|?HPxf1`<moZH|f%x
z$~`;nS3)q!)^<+7BwO1#DYI}>3)7rb)VpK^!ZasUEV<8kOf<WovgkGYDPfYyW<kIt
zlg)yFNhX^GDKo1h4AX)X!_fGJ9nC{(!5j7gh-5$WP(UR6nTJyCyvdkah#pGiy<15j
zL=UC<_17uhO(L)?<)t_P&1EUG;|HR-EM-z0h~~1CpW@wQKeIgL?f3!MuspCq_A|?a
z&d7dddCKf(5Qb@aiWEQBwZh$_k;hY2pQqGiZ`)0=?npkKvXkx|vU+tV!y{``R*QQ4
zZTsW|AkBciDG*3AYyD<`D6dULz3nNGX4a<oE+7*$kO_KiD%+B3<96oGQVR49Ni?!9
z72cSt)|VltO3_`P;;h@5%M?@CCCt5L^@fxjcZX{0Xs=Zbf5#p;w!5BHTLaT%NVTTS
z?t)qoO?B{AS|IeTDOTF6HIEgo-lR6XWB-sYO5Sb?cqIEa1znT@wJBwGO$fuYDa9Ie
zhVCNatlpHWn;p_4ifUPcFl1Az{^$B5qA6-4V!xOba+`GXkZev_eUk&S>h5>#A#_G&
zEQ)+Tw}E4G%51r)#fZ(RWKTU_fLgzIA9u87L-jdT{hmGitnPZ;Js0rEa{pZ56d8BV
zrOdVgVR)WPvE1*JvEQAZM_x=>FR5wo+1qi9j6AS!lZ?C<1INh7dodOD&LRlI^<s*%
zh!^{6V*g^Q+e@cnFW+gn9g9Y`rNTQ-#om;nyFG}#F09e9|C5gWWY0W&vQvHhzWqD=
zC1ZJKV4IBPoq=sKmUsH;k1+f@Q+(SQp}WaYeqBBKf%dx$<<|oq8OpB*{*s~mda8qW
zW#3&7<=0buzWJHvVJN??vb*hT$91=Cc-{_pWMIFYGM5t6!t-{j&b#XeV$a*D{sY{t
zGD~%rfxRzPd49M3Z0KANRQm!d2daGmm5l6tsXA|VK^UriseS|8=RGRE#C(=wZ@i(6
z`t@ihRoVZcy*Pw@E~HfWv2^j*XDRc=jao=QOLg=Iiwo&zsoJ!=tdnb1cZfz*ZPkO7
z?H}1oov5m<cI4w!bq84t=hs>>wX{Rq`UyZt!211x)Us;LuVraJO$$@Gpw`mgx2crT
z3DnOU1R}ejmbKE81ud+#^m7j?Wds8Cu|c4&)mMXJ1g1Vfqd%0PArN7(K3fY!_<>r^
z)*dlVSX682WtK`A4M6>^Kp?V<YPt6RD$Fd|gITh+>bc5q4%)X`oq8bpcrBYmIo<b=
zp083T581u?@i(qqRckglKqObynq46f`&LQM<XqfCy0TVXbJ*^UqU?;;28!a6wSl5c
zSZhU5zOeO>PH#|K4%>rJlo@J6peUpp0!8u222mWT6+so%{fIpjMcD^c0!8svB~X-E
zr6P(lN_xnw_>`J|#2zx3zfpWDP!z{KRqJ@kL@kO>)t-KadzMy2_UT$Ho*b-xchoMZ
z9!KpYZOiOIv9}KdLh*F1xjg|w@pLV>CqLB`r2H23+oSe11A6E?j4gqp4DBtoW&=qr
zid!Vh9&!m<PhLCJR!ym#cFayzckYSko3-q2|9B;=Jtb;)REB<SKih2pfHv+(o23_s
z>>cTZw~qiqdq<jm#2+OW8hOT(u6nl8tKf{X%8iK5PU|yVn{XqKF78cRDjjzBhj?_+
zXdYcinNs!62P3=^behxL|I1yLS3*SZONYn&LkVr(FC|OcVQ!<CySlQr!FjN{9{~5Q
zP8;_D;ai<HSq4OPb(+xi)S6VTQ<Hi)<q3^?r@4;L+j{8$N?p3GxA6p`xGsH$cO(Zg
zrL9YM80HzJuiW_RxGvpssQ&6G0(^&*ua4`|g9hu5`;C&CEorNBvYc%if78u3-SD&V
zzsmmn<{QV~a8p*5dpfmPFByxB7knT_w4}}J5g<miq#4m;wDq7?^&dT*5$87QWwAAF
zrY#^mt!cCQ1H#jqj(XD;P&Cu5@sG)R(I^@GOxo&^R3Wvu(WzC*MrYz!ioJ3#dx0dv
zGikFm1;Y7EI_<qS0K)l9x?6Ymc1=n9&#Cttom=3M<?*?|HaQ1B7w|}eKbKDTHGY=_
ze=a>>pgUaiAiGt~>g5cEN0zd!0go(YTZ2AIzHd#N4L!o}Y)!MFm)n*`i=}LvvU@wD
z;gO|mTfieP5w-<9vXpI0o4XH$;n|k%nsKktJj8v6y1Tb?NmHX<%60@iHat559$CtE
zq|JRc!tm@!*EPspvKYitwyV;$k8^gLaR4mZ6)?#jbyvV7E7`8VB3a3HiA8tGO4ewx
zlI=-XmiKq2grJi3YfnHW>(`!uO4hGEfl;!4?GdBa$=iZPi?;;_(v@2VI!{<owS($F
zK-CVa0|AvhF*uNpdhb9GhU!4NzUbcN<rEJH4yD!jA<h&$bs9{E0;bboIutO;GlE0u
zsJCfD7^Xw%-hJJ{+9uuz98IgzP^TY6r$cl!Ad;5?N7L=ROKEB$I+~7qOFj^yqiL3W
z*%CL(NB`q#wRosA0HQM>Ivx<oR`ht<Y$K_K=y*EW-{hp+l^jnG8sh#~6Y<smo3yGK
z=KK(%_7Hs&5XlGsZ-TDL2mf!<(UKvO5B}ezyZ3Z2(?m=eC(~-pFy}&uIzV(XAnE|o
z$$+Q>L?_ec_=Ye<C)35UUM(A~jy#V^tI@-qUZi(Nh`tYqIzse)K-3YU@6+Zaf-pqi
zr_))tueK;EhuXEnokn<~@J!B}no^?hOwOE|Qljuo&X@-~2*Wculg+!o);yiK+*P>|
z&W-SNg6GbFrxQGP20WeMxifRBW1Zl+GegI&(>$G{;k(t&5zcscI>U2!z|)zK-JLO)
z<J7`)cgA}jORzh`b9bg!ANO+2(<K_7scswTTntYacxDDXU9e|nU{4o#W(NK00?$n8
zmt6EUS~Z-SRd|$h76Ge)XHLLV1J9g*rv{!m8MEt07@j$qQa5*wH#}l2b86-&X9h$u
zh?)bU7(~qhQ4FHyj5${!3{i6?U+0hhIQzEBk4HOGLomf*dLUqm!}LJLY+k8_>48kg
z29u0&m>$TKyL-3AjaGu&SyeaI*>)CxL$o9y;u{9gye^^^q9vJ3KSPv&Xh~+^V0ROT
zSDciLMmA=wN~Ld;Gobokz>rbkuOmsU+8FdN3E9SsIe{Y#*~Sbfa5)|UIUa4y)KxOx
z-K7+G2gjC7_(pwG&}gODRb})|L4N?IK9w=s6(H<SWz0<h5ca1s+!TD^g`t+?qN+XD
zd1qXsRg0OM12bzeb8}#3Ekv6GGixE*EM{_?u)@7Kt!1kITp4nn^Gv97FGROx_(VTN
z8tEnblO3wv1<u4K{-%)~ej`Av-Qg!O5X~K#8t)bgNFzHk+`IqHBcgVvdgTJ=@R_~z
zp?+sTBzxqYzO~efXeR1iM*$()nc>sJU&Pwp(a3w5s(qPCn~R*?q0YULeJ{f{?I&2<
zTddukQO7TKt{w`&zTFw~Sq+Hj?o6$BfdhngcZOrJY({&_X62)dl}=ufZBjR0<P_D~
zOPt<kQcj<#@Zt}|)Q@~qfm+S%O@MHIlwogjkKD%g;ekn}>QF{CT<T2i+y~M98LnWi
zqP;$1>0dKy^QF#}0|2o8HDh*8Kt%tVF*_$9tbfh0b9z%e*+)$MBBRc|%-Pu=fa({4
zsu=V|#_{eLsYUgR40nvzVo%>_<Y=bq9(Cd6&Q-C#2p$!4WX|i0Ig#TT>+c!$%;nAv
z6Tr|?;O*srNFVnt0z!LSERsA2lIO=Wo&Qdr%cB%2(BBll%!I$mcuyTn8G2u3%u@$b
z#NE%=8M*tBNxZLg?%PmC{r(E4XFm{Td>fb{z56y}UR+QM-M1NDT*x-5uWV5#s<u};
zqi^7EVm~qKeXx@%6enh5-tz$<iW9Tuu_=&^(Zp=&a=jrIsGs3Y%$6_H8)8!;8{&!C
zi!adwx35r4$$D3O0GgYUH3Jt&b5pWr-~zR*f5q2Vwybw&^%dVw02-MD1JdKWvu33N
z!gP1mOfW#0?#?oDc`;MnF&deft-3d>AMjMm+Bh>?ozTbjj*?%qvQ|kS+v|YTg0%yx
zf%s~cIAAQt_KxD6Icn(-opI?oSxY~|ltN_YWVuf{N6UcbsWv}y&dbirT6%0EBR-#(
zWo$k~!dFMRL&#PwRX6^~S=?S_tJ}N3Lp3V4%vZ^OawewdXDz*tmqJwMXBjI$&@z~?
zP(Ari&X3Xyv*vaos!dp!<=n>@MFovTs_`o4=jlbp*HS2@S-zp3sbz4`VzuTf=j`<2
ztoarj)fWVdv&=<YrJ;hym#8jRJ7cp;0v@>-SRy>r<S^JT8d;gGdcE?Ss~yYg(huua
zW|?L57nFX|p;cM$H4=b`t;(9A0z`II)*RY^7_=(Oq3uQ4@b(i|w^aW58t3^?697wE
zvL^OGvZy6%b_GC@&DMCER3J<(+4=@|v#pu1cYEb$KXHbIVUj*=511tVw`a|9hgz7n
zXVd!UH`pM#yFJVPLcYiJ6ZDeFWB{5k`I!tv^Cdr%fm+tj<bKlXYhEUw3DD?NZzPjn
z^D~)Rm|pWU83@yBlF4_7yZc8Y?`Nw{W-B-S!udATr9ZOoXYHKl@BZTNJ)XY@0N~x@
z`x}Vt9^c<Uc=w3E^^Y6+OV2;aRxY{0`BA6|go&T{ZUWNTPqOC22T%*=ygddGs!y`z
zZtib!Q-8^`16lRizdE;%13+{jAQFEc$ePF6)IxM1oAT}%fDj$X`rj-13p|>wJp4<i
zH8d6k)zN@T0&p~IZn&w1>S(ru_o)Y{bvYSI==zHl$JK{Fce?hI1MYD@Zd9Ol+>aX&
zwc}YoZvEw?e!`0zeUT&XiNFB4!#Ux{jarya_;CZmbVB0BCd3L4h(;#mc(c&`W@lGw
z0Fsk(cFdhA>(l_E7MYT>?#hLe|D)C}izL<HTb%1BP)-9>cxwv~wJA9>sRL<XO3pl^
z1G2VE$<^GI^VSwA&}+-oTzGoUTU$&SdUxi`+G2`WTc+h?ZIO-i0Ex;BmHD-EF-Axx
z%*dH!1!B{ToSAlkBAPP?4Itbza^|NHK-P;Hx$MRIbAUka1KW&T?jrXMukR$w+?<t5
zZVhFxxPJWYJk|c$_2X~)m+OkRWv{q(ygGEN(@}l*Yv<8^1N5~Cvc5aS%DFkm`_fJ=
zP0!8ofmcpl0|Ygzw{CSVI+MTYLUYgsNu1`KNoH!{Y0l-meJ)Tma{~vt3*<T2z-Z*L
zT-C?9$_=+Uo!WF6i0orIyT%)D17*Ce$m#iQ7y#F-@a+R4yCP@iHz2$#a*Vh4IK77l
zVtr&y&RR#%|D;Z?u`j5s|BVw4O`rlAYP@a&p;?nN@4|r4tjU>oVL+n3Cf9WxQJ1?k
zDUhg#*XGQ-FjIn?*XGQ-FjEB4+8pn~_+=k@2yD#pE^Od$ojUdKtxi1Uowun$aAS^7
zf4|a#pjI{Wx6bwb26`7zfvMuj)||P;q*g?8++r5BB0<=sO8@B;=%Wn6O*!upo5p1j
zZpxXl3q)~K&U~f?l0}<xsk2NE<p(vKsW;_n&(ymP5ir+qn{s2D^o7De8MvEsJpS*N
zJ?GzU9Dh^KTdy1c^YK6Z)pgmQU#I@`pH9~%M6d`MZ^sJMDkigm*t9ukj=n%_+MMHK
z$27^?fijOhue$x0bH`ZzhUoc#NUp4&_lF3z5IvuZdRJ&bh@Q`Jg(jDi1LewUt2*>w
zP8oyb%4%!CBUe^i10K1u+M0`clP<#WY|Sz0E|c|gplr=vu3Y`!&f?G@0IDwsfstFP
zmviQpm|9d{&aqq259J1OOBH!DXT4kL{X6GT$w0Z8qQK8UxtV&?pLeK5`^{YE8oj3l
zl7VmLV(*%HM+)@3^HwhWj+u8%8G3K~^NuNE-r1$+9hs#E$|ctap`5o@1mWWka%Qgx
z#EcJeX0Hf@?t`2^QxB9|t$jIfuL!`C`vOnOrPjW{lX9uGFK70O2*b25XZDJnIE&<}
zj^(_)qTE~T&s9hDUa^x5_fMIu^j@(ZNG({;K-ECT(5Es3ozLc}lT1$sa_a2K&IOqR
zD9JHeN)bAc<21$FBp~SXoLV>8xhV5_&g>Q`)y3=<|49pB-xoQRxx=|C^F_{VJ3HyU
z+84Q8-Z0VQ!#Oqo4ww$-Ed3o4e%Y)Y&hZ^`fM&uEM{}xriZd{KG-o!sovdnvj^^0p
zu3^fn?#w!pubN-EdWzGlO>|10-t)nry0i3tYM$OdGa+(O9gq%!z1{;MnVP5fd}u+K
z%4zD1>CWi%w7hu^NFg%Q@(gUQS&;$VrG7Qt`9b=wyy+H&Qkth*mueaMevkTax^sE@
zp1ko-XWjLC^7yAo%h2_i>e9QMGt)Ekmi{^kx%7Nyo&hUc+0HT_%vKxja>k}-=goGP
zLS$y=+3vFJAw#~+Rh{p4u1wF(o9#D+$jr^N{pM~68OH0qYTDh-1?hVOnYPH>D>95}
zWEhI~sUvqgz0&vPz4VnrWbVr|ar4a#$jz`)Bkyte<{kLQK}LyxTI7__B^p_ruUet*
zy~o)YU7Y8orNp6&#Nna5mG|NR#MNN0-#|DXl7647g{fSsUYg;YpI++Q(nZH%so3&A
zS_X|r)PR}Jg!ChRJiF*PJR<QNqh*N0W9qe;PE+AA-+x_n93B(@@thpPh{N(cKa?7y
zTJPcm!xgif-dPItlSZkgo#pv_!96HDqCtF7%vbGHkIZsD?J@{6AJ4NR(&vUj(#7?8
zHTU10r9Ic@%|t{gQtR_(MFnEh`aCPD-24ubjB8Oh&v6Eh<!?-B$(yMiNc3CsW@-nD
zXx=;x1H#iHJ(U@GkmO&h+CPUGnZMy_4R|C&TJz>RHns4y=IgxoKR|d|^SuALM`q+f
z0=HBypX*Eu^#`E3C2v+dAgWvPX2k=FtOS0mtS*D3*%#Cq_c~kXi<}l-2yBq0^M$;*
z#HJRa7xGDO2MvVig*-cGnNSBw)^ArGo1N4E{zh@T$pNWCaeLlOr$7|9=l$t)ko5G`
zy!W~WfC;Y#CddN!YT!;;;9kv}=@em@Ud=O|PPPg2VCK_&)zr%3`<!pvbRLZ8{=9!)
z87y%=pq9*bmNg#m!%QJU2mCMt;X5E<mS<Ii#peg}YQjQiY<~cj91Juium|(zK8RX0
z59Yaj8KpG|?BTpRzR($Z-e4Ws!+w{55FPfr1cc~t-fU}u5FO65t!<IL+hAbi%e-|W
zA5K21UVXr>sNRd5+b2*C3l-kN354a#yxFh=Vfiv|Htawa&M)&dC-UBgT?+KV`Bgsr
z_q?}ZH)ZI3oi`hHQ^dmgO<p$a66e8^FW*U=z2nVyew3-egzx+)1EKovRFnrxucs8$
z_-5zC7}*U?DVQNcjjl371_;lTf{8H@o+$-l%!}~wkZ5Fjq3R*Eda-j(mmvsFFW3cd
zBoC1Y-&4>#<bD81?<pAn0Fk|?V8$~L(t8R7`rql(5DCF-_3lH?ttd*IX9tQB=h+3v
z`_T=xD9$eMqZ|2pH$(>TJT+m7a|w!)$MXv2Y7>a!yh5$FhXSHFufQHkUJeZrbf2=8
zI>S+vP~I1`D51Qs;CSCwsTI)z6TY~Ah`4{g`t?#LrA9vJM0(9Hm`w{c=*=&fQ3gbB
ze!(AQL&X1!3wo3_0iapzM*yfRO$2~2E%qY-glVxv;Gc=W&}d{?q3TWb?K0;_U4|mK
ztY9~I5f~~Fc+^Ay0O_NCw}8k#>PG+w>7x>XZggv?IBU5Y{D{-gkH1k|9w<r#mKV%O
zqZY;G1xDIMT9F8>RC6D3&g(x^kF1q}qL8liLq{!&D<yQV%D2g(0$VHXA9Z$EO#mFy
z>N^C839SX=5Fkvg1+zg1ifVy%?|_Wap%Rm4D_xg6zX+WN5EL-UjmxtElLYD6g83MX
zFig)DSk?4sA4-rSFBGgDh5tX=DTjp$Z?pqpd7)rNI}nx^3TCte8SO6=YIYR7(Jlpg
zw7*yg|Eb`Oc2kDlwt^Y$rijtLz2J}bp_0?DNV;|H8<9W#Y@-4bUh%UH2-Pd6vTdmB
zUEWa7E_F_xB`1wH0)NO!<Bh-{a?*IiPc_t_c|%g|V_CO{MI*ZkRbLcB$&o7bu+vGU
zo^ZBz8HUQPf}Qn}ZkQz9ZZGNj1EAmSI|_*GZa?XO(C?O{liV35`LVa4wyko`Z31BD
zUf)h2M0<TZfm$}|{bULV(cS{P8u@@bOs0Xq6x0=~oga<`K=hY@NL=`rg84B%wGjQK
zQ15+G214|gf_bAlOwfKkx(Dz#iu-+s15w=XI~*vYryM>^8a?O@?{NT)%mfRhF9(CZ
zNDdzKeNHV*2gT=4cERVvqmc*esw$QLT<ffNI}b<n!8(7lG+cbWM2*?xEE>Syur8@H
zISE8`Nu8Ntfv_&A!__<F7pTLf+kdaCM4xtE=sXBS-~L`_rY@kaO?1=W|A6TJy^fy_
z>Q{Qhac^XDy)~`U{x!aaO#ss}1>R@?qCL6Zj0Paulk3fB05TdT*Vjy|_eO&h=+SUT
zefZ9LZ#0-P^rqCC(O`-g4O8o7G(6Nv_kz_pyt3YUqH@U_&V1)zhU<BQ0`FiC#Ilw3
zX5Ii|*~)selmTgBWj*H&`9uT6vX%9PC$LQZMIR}^GCcEmz4;V5T*A7h-aDlNs9RHi
z%4-tGHT7n~rxx}#_5OrET%6QW?`^995VZt$%6!ri*eUZ#OJJwWCoT14#Ah-JM?@n}
z)mOc)-rM7R(q#maPu2U+@<&KQJX`PGx&vT+){hGi*=OrbMgU=bww{c5TQ;5}Bx+mL
zqkEm#`|~%NTLVqWhpqLFeupTMXl|{K#oZa6Cc|yJdi*12I-1hW?feu@rw$O!?e%TF
zU-$vh++NQsL|HsX2ztqQ6M#2g^1TT}^CjP#KrQQgbA$xqHP4&p0yHvF2V%o(zBhp|
zz2<up2-9og&1Dwe92t$gRbO?qK9oE=s}^snj#WB*?1VyHMxyjqz5iS9k>c17JjV_L
z(7*@2dw|G(;5!yb10RTESIcrV5*I}F)mxv|hm(tC%eY)Uvfugd36#S^g*R+~u<Y}P
z4G@-n{;&a(ocro)J~hKe3iPn~OMQ6188)U2y^sB2V~Q9ypXgyDZXYSr<7Xk`cMyL6
z%=bGGGd}bE4utNrQ&~Jx;1SR7O#u9U#Lr?N9XjIs9SGAA-|s-Jir?jje53dpT3_|H
z>VCkvvfC&GkJqz;$UojRig$$H)LY-yhuv0rM>xv7Bh+Q;4+or8mwH7g{k=YXw!Rwl
zO6b>#`f$@fl+ff!De;LXHds>{!tQ_hyo5%I)QZoXUtgw4Bnp!n{*gp(E+#jGM+LMJ
znmZc8XP%;+-eApumV0euFEgZ+sb78W{Aq&b6}R5iVBS4?CGg(e5dLMrE6%;AA$-*-
z-kA;7TzL6c<~%nr-I*e}@zpHi<XH`2@1des0`KgG@Iarpo6|;IKc^u)<P>ppgEb%G
zfAxv^SH+}A?K$ZDWTa-1L33Y2c%;wbw2?FX{SD?H$?{~NRnoRTx{s1EvZ%qEd;lcF
zq6U-QK=>9ln8^o->Y@h5h<+|JO1!f~U2w>mF_^#6ToPzXM3yv|$%k4rmozZ>$m_9D
zlFJV_SkYuRwe};YJi?p!DTae`ZyEx^@o<BghJbK9+`u&Sy*w}-1&nNJu%4;>`(fwn
z>Iq=-ngX9p@_JK)Sw*OYY*T|-MSzfPYA~w^kb%0Xq3}$Dw~9!Cw~9R7z$!9T9tVz+
z+3V#7t84PhYCe7NZ+qN$^S|A6yZ6t0{H${DOXsgv6GEPpZ-uNjFE^NvUesd6%MBg8
z9S{&JUT$CqBtv|Zbbn`qw@v}j+}U8(DIl6V8_YTdM000@KeLXK>ENvfZ=C{Q!&`wT
z<oN$q;0f7uz7=>vHl1%ZFv1@_ogqFt8u_xJYH{V!6V8%Im(hrR*}%`~?~ogk(UL1C
z8!A^>?(ahVLGYgRLk>jvWP_vMql+xOCmZCSp^^1wv;=daIxXxzgr+3R#G*+vpwt!3
z;RJ~0#3F~2yS-M)mT8qeVfW6^pwW8bn^yE5!NV%F(~33Tzpw;Eby|_IZqtq0e5spJ
zv>sH8BJP&tXj@F2QMAu+FVQ9;JgXRPOpaAQvE9z<p0;kkexvo0MzQzO1c=V8Voix*
zSWSbHIJ1h~d+LYnqa`Qis3UFNK`2VB=M=-<f(t}(PO*!3b_Jq1r^v%Dd1gLZVm(h?
zZM$Pplu*wrhP@9sKosW{<K9PYAd2&feAJf5AfqMH&1$FZjvmb40*Ybp-%JFe*j()7
zeOCvf*j(iCr@V+CEvJe5i{VkpUS4m1?6_IlmY<AJ?EOXr2*v%yv`jkETRBSHUmQNt
zIE;(Z`D(S}UVx(fMr3|5?4>dg#refVFQX`*Ean&c_Set&N6YQ$Le=QHLs67pge(jc
z<!i;lKvBL{EEGlg7cWN37luXZ0oOf$0Dq&ns2KLX7z0sURE&B5nidenMa9P6?p*mD
z<d|q=Rk7;bN~)bZqfN~iL{}Ag<{;0P$B@R6HAQQkdio4^zyu(?VDEMUi13<XdoTV#
zc-ItpX(aniAT!09Vsc&4`+z3}`t#P>B2V9C2Wm=4+O<VKQp!JfWs2mT&D!F~QEo-H
z7-J-LTZ@%nw|D!7ehMO$T8n1-0%BBa(R_FZYT=ak6C5B$wHEmaj)VzFU|Nd<&*f)b
z5e;?qpmW^GUP~CWSygv*zx&rQ`ed~^Xh#xpbJ0wb)Y8u8qB&XvA=+HzXzjHlH|3j)
znZBkS{b6czG26%eUfvjvktz9&qV-NOoczL-FXP$D%&2>LH9nTfnJRBu1k&moL8~&x
z-UwQiG4_VE>bYDd=QoO(cW}A9!b02IMZH-J?<#tS4^xKTTSasDFh%U5-tJhG)5nK$
zM_&_->?u~wQn$q2JstKGt5f<*QH{)O9~RZM3AbnV!=k0fY&E4g?!zMYO>^)g7&AXE
zRvu5d9YdLqi<W*JFU5#`T;z597%c_*q^RCcx??k+6s>OJJA`D>`=rQuOui@7h-3E`
z)rgeaKfAwZH5wuL!O#9;pT6$&u$IDWM~aoXDc7+^9w}OSN<djw^&`bz`ur;pvLnSl
z<0LE^V&{=!-zJxTxCV@`j~3OguI|vx(ZC-45lQUvj3(WV6;+=!Mjs38k&h|I#2y9?
zOiUqvE2?>EcSQDYMN9wwRZ0>1Tan+t@^9#f6iITTSUHsDcX^o;MN3Z!QjFM%V&8u5
z>t5fO6Q)#lXWc8U%#_k8H_0cJDJ9I30}fhD0MpfF1^1oI^pd6XT?!GJUK%{qJ>d!Q
zEpetgug?88GqZHcm+cUmS?be|xyuTVjYj5{svc0ksCUn=8H<1BmN<WnB5TLWbZ~FU
zx=+1W?+%^-#1&v~Vgn+4Zz<vZI}bp7eQ$}6B9faxa`WC&-F+o*I*<ZA9W<BBbYM!b
zrMYCL15+f^L34@e;5eOtigp&3)bASH!{-5r{KAqMFF<0ruw+IlP|KQ!q(E$1SmN{A
zGD-1RH1bfXs!|Fi?+s<ue{HKysQ(${y6U~6`ybJVO4Vtd@-a#IC3s88@89ZxaDu&{
z0<m~WiJ;0SvX~gRRIMtxz0yldmY#*A5SgVVW}*IC2DD6_D7gdE%K{!r`(?tz4F)P$
z`mnmV>~_yQTr!zKAu<n_$c$+`07Hnrudgg9GntN9U$VR`rxdC6C2o0SJOQCvUm9?Z
zPI`fuxV|*-Y<V9+H4fXL_F#T`L&=OA3Zd9gV%*%MWeD^})veLJC9|<)4Klov@*7J-
zhq=v?TQSM`7S-D5-k)g+Y>||25nFyhZZ&bXFID|n-PFsywA_RlPnG!9mYiOiI2Juy
zvi?{KyWh#bY1?FuMN(Gzw3mB(XtY;^(w0(qtlqbKB{c9{DSXR6l+fSjOPq0JHE)un
zeX(S1FR6=1x&zer^=@PW*!w9nwGh5os`YjPKy+U$@xo4$7D&>*SSoHeNh<|9X}9@F
zYf7+To1e6%NRoD&B(1)GXd*8nuavBvrEu~E^@G0dOE*wN_$c$HdLUkYrDT3y4#cuo
zN_jouVTz>gD<viv&oVhMzf$VA6U$^Rr5?+o*zsy9+}oWmH!0(ykvB_KAC=TS{oHw-
z$3gdIiGMR}uB>$9B&px6^dUz=R|80bcS~lQ2}JhYlKJ;`fi(SYiSvZ4Z9t~2cT3R`
zx?zDF0JKD>;qKcWIr@7`)<wx}>Ke;!sB9kKmO>N8>A^|4cO?MSV&-E95R$zmZp^)A
zWU1a;>U5zFEVa^%lyvs~8C6q4kN1}P`L<{wO*86z_bVQYSI47~&r4O4%AsWC7lYhm
zq3Gu&^FTH(E;z{e)8ksr8RAAVK>fY3no5`tmiXStV{IU&9xADgL)@#ghy0n7QiKjk
zQ0|gtFD^s)Z>37_p{^Us{>>lS6zg(^_G%d^aT(iRm(*3m+%?&+OO}2=Bc(`vUE=-B
zE1neDak8Yk4R>G7oGe*7Ly?lfeNr;?kDe5fo2cR=+!rzv%a-@JH?D{8#4_(5Mw16;
z^6a6^ziagE2zOY`nRH}InRi|?IL?&8ac9|@t}Yts4x9ia1;O6N5s2`e<(RkS1!DJ|
zWj;hm3Ia*NJInd$Wp7580zEjUmCcN9N-%g@+05vsNCwBWGK1sCgebw$qg>ToZWBsg
z<XyZcM!DmnGs@L<dIC;Jpk|h>0p0`*#4NBk-2rJ}W|=95e}lL>A(5J;o*d;4NzW=<
zgY{fRAu_Yde8HCGIU(_wt=f-vN2X_&&3s0ol$M##<XuHVf;30{a<n@(J*R99G&~Zc
zIprZk#eK*SqPc3vXm?b4ZrM!s6e2UX%w#VwQxe|!r8LGJl%7|%h8rH4U+0xajdq)~
zj4Y(;f5y0HX6_ASWPZI@WPV8y&*EWqxoVNxJI4J*%~|wOmHF5#K|D)>xS(u3AVC~H
zfxo=pH&Bk)f^yzFkOAq@f^zpBI($IFx1ikf0TVtc(BWI?htHH?#X>)PrbxoKP{Mau
zmQj8$v$R~bmLay6Wwh&#>ZB~A?bL`S_mAzDma8*5ib;v$GIi<sZmEvHF>P7d(npeN
zAdM_5H};aVB9O{Q)Q`uxBhrrqG7`c^M5e2j0X?cJ<J`>EkCGbNtw|liN6UkU7#TYJ
z81c=w&lYdI;kMguxanW6z3xA5De4KAW@I6x-rJl4p?s{&=Cn>XKx}`n`kd)D)c@X(
ze^STx_Y!}336+%CuAnm6kiA4bdzl+o&1breX^Oms9|1U5NG^Cr6X!pu56^Tn=|A{+
zm(=fY{vdgm)toG&D;580cRszcY_@3pyHfD1EHly6YZ<1-$JIZd<rdSAmo5Fi6JuoC
z_;{K3ot_N4#wXM=k$EC;kZc;C5C`Qn4|~Q{YX4boA-$?>dHV(a#TjH)mHD}#XER&I
z)v9zhHm@#Q`bUnmC0oYTWq#!7@$hTOHR`&v-9lzf(67^wSyLW5-2EB(dv-Lkp<LCf
zet))mP0iUjenXl6L4xG(*^<94W$Q_A5(45Su=o5Gh;U1}tM|hVAVF=BsZAy!AX(f}
zE<I_oSPFC&SNtqCCD>B&v)B|#7FQ&TkMaJzIu(s<Emyr$*?Eq8tJQw1pSCGU+ZQBl
z8`CfN$w(o5FGw=VW-TQN`=WaAe7Af0Mc>yHBJ-m7n$0sZpl#}t^W8C-ZDq50q)<xB
zaw3ogBqfv1E0wb@a4!v|U-6?)DN?UU^v7r+GV@in@j|yL^Q!Odl+MgoC5t9`Or+);
zmDojYn^5MBpgqaQH>5o-pQSxqy-N+b*!|zSU1e*i9z_%)w5vQ~B;PHq@Hx@Q`{k;=
zjPB7{HD+sdXVv2pw|DFuy8OO`P)-KtNC<bAtq;p;TfIAI0vKWnychzJ-tET_NH=%;
zF$5CB-R07UCWca=W4OnUp((+vJ$?*Lk;HJ1#PDf}VQn<>S-I+Ps9foGsXNSyepasT
zswbaXiQ?xtR4*a*KnwzVdw3w!pNm^$Sl3E850=%I%iRmI2g_#jO({YL%WS^+X_rU=
zzbLDoSGY4WUj$NKF;e5T5IsFqR=cinf0{ky51(2c&_iYZVVA4%@VU{*u`>UY6?N5>
z?v*v?()h75zsi!aajrP_c-i{O8yi6U3if_s2SoUI+5D66Kw3Lq<_V^Z4Iq9!UT*lx
v_*DwDU%&MIYD(zHm%d+3k@)pX{QA?#Ew|o$`_27c`?5_BTU~Q`b@%@RYA|l1

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index da0c3354..64295456 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -6351,15 +6351,23 @@ type RemoveResourcesRequest struct {
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Tenant identifier
 	TenantId string `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
-	// Paths to remove — the absolute-path shape ResourceEntry.path carries, at
-	// least one and at most 256, the same batch bound PushResourcesRequest.entries
-	// carries and for the same reason.
+	// DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot
+	// tell whose resource it is or whether the signer may remove it. Name each
+	// resource in `resources` instead; a request that carries only paths has no
+	// resources and is refused as malformed. The field and its item rules are
+	// retained because removing them would break the v1 wire contract.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 	Paths []string `protobuf:"bytes,3,rep,name=paths,proto3" json:"paths,omitempty"`
 	// REQUIRED. Bare host of the recipient this request is addressed to (e.g.
 	// "exchange.example" or "exchange.example:8081"). See "Request recipient" in
 	// the file header. Distinct from `tenant_id` above, which names a publisher
 	// tenant WITHIN an Exchange, not the Exchange itself.
-	Exchange      string `protobuf:"bytes,4,opt,name=exchange,proto3" json:"exchange,omitempty"`
+	Exchange string `protobuf:"bytes,4,opt,name=exchange,proto3" json:"exchange,omitempty"`
+	// The resources to remove, each named by the domain and path a push names it
+	// by — at least one and at most 256, the same batch bound
+	// PushResourcesRequest.entries carries and for the same reason.
+	Resources     []*ResourceRef `protobuf:"bytes,5,rep,name=resources,proto3" json:"resources,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -6408,6 +6416,7 @@ func (x *RemoveResourcesRequest) GetTenantId() string {
 	return ""
 }
 
+// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 func (x *RemoveResourcesRequest) GetPaths() []string {
 	if x != nil {
 		return x.Paths
@@ -6422,6 +6431,70 @@ func (x *RemoveResourcesRequest) GetExchange() string {
 	return ""
 }
 
+func (x *RemoveResourcesRequest) GetResources() []*ResourceRef {
+	if x != nil {
+		return x.Resources
+	}
+	return nil
+}
+
+// ResourceRef — one catalog resource, named the way PushResources names it:
+// by ResourceEntry.domain and ResourceEntry.path, under the same rules, which
+// together form the catalog URI.
+type ResourceRef struct {
+	state protoimpl.MessageState `protogen:"open.v1"`
+	// The bare host the resource lives on, as ResourceEntry.domain.
+	Domain string `protobuf:"bytes,1,opt,name=domain,proto3" json:"domain,omitempty"`
+	// The resource's absolute path, as ResourceEntry.path.
+	Path          string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ResourceRef) Reset() {
+	*x = ResourceRef{}
+	mi := &file_fora_v1_fora_proto_msgTypes[33]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ResourceRef) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ResourceRef) ProtoMessage() {}
+
+func (x *ResourceRef) ProtoReflect() protoreflect.Message {
+	mi := &file_fora_v1_fora_proto_msgTypes[33]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ResourceRef.ProtoReflect.Descriptor instead.
+func (*ResourceRef) Descriptor() ([]byte, []int) {
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{33}
+}
+
+func (x *ResourceRef) GetDomain() string {
+	if x != nil {
+		return x.Domain
+	}
+	return ""
+}
+
+func (x *ResourceRef) GetPath() string {
+	if x != nil {
+		return x.Path
+	}
+	return ""
+}
+
 type RemoveResourcesResponse struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
@@ -6435,7 +6508,7 @@ type RemoveResourcesResponse struct {
 
 func (x *RemoveResourcesResponse) Reset() {
 	*x = RemoveResourcesResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[33]
+	mi := &file_fora_v1_fora_proto_msgTypes[34]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6447,7 +6520,7 @@ func (x *RemoveResourcesResponse) String() string {
 func (*RemoveResourcesResponse) ProtoMessage() {}
 
 func (x *RemoveResourcesResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[33]
+	mi := &file_fora_v1_fora_proto_msgTypes[34]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6460,7 +6533,7 @@ func (x *RemoveResourcesResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveResourcesResponse.ProtoReflect.Descriptor instead.
 func (*RemoveResourcesResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{33}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{34}
 }
 
 func (x *RemoveResourcesResponse) GetVer() string {
@@ -6495,7 +6568,7 @@ type RefreshCatalogRequest struct {
 
 func (x *RefreshCatalogRequest) Reset() {
 	*x = RefreshCatalogRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[34]
+	mi := &file_fora_v1_fora_proto_msgTypes[35]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6507,7 +6580,7 @@ func (x *RefreshCatalogRequest) String() string {
 func (*RefreshCatalogRequest) ProtoMessage() {}
 
 func (x *RefreshCatalogRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[34]
+	mi := &file_fora_v1_fora_proto_msgTypes[35]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6520,7 +6593,7 @@ func (x *RefreshCatalogRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RefreshCatalogRequest.ProtoReflect.Descriptor instead.
 func (*RefreshCatalogRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{34}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{35}
 }
 
 func (x *RefreshCatalogRequest) GetVer() string {
@@ -6557,7 +6630,7 @@ type RefreshCatalogResponse struct {
 
 func (x *RefreshCatalogResponse) Reset() {
 	*x = RefreshCatalogResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[35]
+	mi := &file_fora_v1_fora_proto_msgTypes[36]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6569,7 +6642,7 @@ func (x *RefreshCatalogResponse) String() string {
 func (*RefreshCatalogResponse) ProtoMessage() {}
 
 func (x *RefreshCatalogResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[35]
+	mi := &file_fora_v1_fora_proto_msgTypes[36]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6582,7 +6655,7 @@ func (x *RefreshCatalogResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RefreshCatalogResponse.ProtoReflect.Descriptor instead.
 func (*RefreshCatalogResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{35}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{36}
 }
 
 func (x *RefreshCatalogResponse) GetVer() string {
@@ -6630,7 +6703,7 @@ type ReportingObligation struct {
 
 func (x *ReportingObligation) Reset() {
 	*x = ReportingObligation{}
-	mi := &file_fora_v1_fora_proto_msgTypes[36]
+	mi := &file_fora_v1_fora_proto_msgTypes[37]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6642,7 +6715,7 @@ func (x *ReportingObligation) String() string {
 func (*ReportingObligation) ProtoMessage() {}
 
 func (x *ReportingObligation) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[36]
+	mi := &file_fora_v1_fora_proto_msgTypes[37]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6655,7 +6728,7 @@ func (x *ReportingObligation) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ReportingObligation.ProtoReflect.Descriptor instead.
 func (*ReportingObligation) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{36}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{37}
 }
 
 func (x *ReportingObligation) GetRequired() bool {
@@ -6756,7 +6829,7 @@ type UsageReport struct {
 
 func (x *UsageReport) Reset() {
 	*x = UsageReport{}
-	mi := &file_fora_v1_fora_proto_msgTypes[37]
+	mi := &file_fora_v1_fora_proto_msgTypes[38]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6768,7 +6841,7 @@ func (x *UsageReport) String() string {
 func (*UsageReport) ProtoMessage() {}
 
 func (x *UsageReport) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[37]
+	mi := &file_fora_v1_fora_proto_msgTypes[38]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6781,7 +6854,7 @@ func (x *UsageReport) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageReport.ProtoReflect.Descriptor instead.
 func (*UsageReport) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{37}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{38}
 }
 
 func (x *UsageReport) GetVer() string {
@@ -6869,7 +6942,7 @@ type AttributionDetail struct {
 
 func (x *AttributionDetail) Reset() {
 	*x = AttributionDetail{}
-	mi := &file_fora_v1_fora_proto_msgTypes[38]
+	mi := &file_fora_v1_fora_proto_msgTypes[39]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6881,7 +6954,7 @@ func (x *AttributionDetail) String() string {
 func (*AttributionDetail) ProtoMessage() {}
 
 func (x *AttributionDetail) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[38]
+	mi := &file_fora_v1_fora_proto_msgTypes[39]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6894,7 +6967,7 @@ func (x *AttributionDetail) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use AttributionDetail.ProtoReflect.Descriptor instead.
 func (*AttributionDetail) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{38}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{39}
 }
 
 func (x *AttributionDetail) GetDisplayedUrl() string {
@@ -6951,7 +7024,7 @@ type Usage struct {
 
 func (x *Usage) Reset() {
 	*x = Usage{}
-	mi := &file_fora_v1_fora_proto_msgTypes[39]
+	mi := &file_fora_v1_fora_proto_msgTypes[40]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -6963,7 +7036,7 @@ func (x *Usage) String() string {
 func (*Usage) ProtoMessage() {}
 
 func (x *Usage) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[39]
+	mi := &file_fora_v1_fora_proto_msgTypes[40]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -6976,7 +7049,7 @@ func (x *Usage) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Usage.ProtoReflect.Descriptor instead.
 func (*Usage) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{39}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{40}
 }
 
 func (x *Usage) GetFunction() []string {
@@ -7043,7 +7116,7 @@ type UsageAsset struct {
 
 func (x *UsageAsset) Reset() {
 	*x = UsageAsset{}
-	mi := &file_fora_v1_fora_proto_msgTypes[40]
+	mi := &file_fora_v1_fora_proto_msgTypes[41]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7055,7 +7128,7 @@ func (x *UsageAsset) String() string {
 func (*UsageAsset) ProtoMessage() {}
 
 func (x *UsageAsset) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[40]
+	mi := &file_fora_v1_fora_proto_msgTypes[41]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7068,7 +7141,7 @@ func (x *UsageAsset) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageAsset.ProtoReflect.Descriptor instead.
 func (*UsageAsset) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{40}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{41}
 }
 
 func (x *UsageAsset) GetUri() string {
@@ -7119,7 +7192,7 @@ type UsageReportResponse struct {
 
 func (x *UsageReportResponse) Reset() {
 	*x = UsageReportResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[41]
+	mi := &file_fora_v1_fora_proto_msgTypes[42]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7131,7 +7204,7 @@ func (x *UsageReportResponse) String() string {
 func (*UsageReportResponse) ProtoMessage() {}
 
 func (x *UsageReportResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[41]
+	mi := &file_fora_v1_fora_proto_msgTypes[42]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7144,7 +7217,7 @@ func (x *UsageReportResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageReportResponse.ProtoReflect.Descriptor instead.
 func (*UsageReportResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{41}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{42}
 }
 
 func (x *UsageReportResponse) GetVer() string {
@@ -7231,7 +7304,7 @@ type DiscoveryRequest struct {
 
 func (x *DiscoveryRequest) Reset() {
 	*x = DiscoveryRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[42]
+	mi := &file_fora_v1_fora_proto_msgTypes[43]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7243,7 +7316,7 @@ func (x *DiscoveryRequest) String() string {
 func (*DiscoveryRequest) ProtoMessage() {}
 
 func (x *DiscoveryRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[42]
+	mi := &file_fora_v1_fora_proto_msgTypes[43]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7256,7 +7329,7 @@ func (x *DiscoveryRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DiscoveryRequest.ProtoReflect.Descriptor instead.
 func (*DiscoveryRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{42}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{43}
 }
 
 func (x *DiscoveryRequest) GetVer() string {
@@ -7382,7 +7455,7 @@ type RequestConstraints struct {
 
 func (x *RequestConstraints) Reset() {
 	*x = RequestConstraints{}
-	mi := &file_fora_v1_fora_proto_msgTypes[43]
+	mi := &file_fora_v1_fora_proto_msgTypes[44]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7394,7 +7467,7 @@ func (x *RequestConstraints) String() string {
 func (*RequestConstraints) ProtoMessage() {}
 
 func (x *RequestConstraints) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[43]
+	mi := &file_fora_v1_fora_proto_msgTypes[44]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7407,7 +7480,7 @@ func (x *RequestConstraints) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RequestConstraints.ProtoReflect.Descriptor instead.
 func (*RequestConstraints) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{43}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{44}
 }
 
 func (x *RequestConstraints) GetExchanges() []string {
@@ -7523,7 +7596,7 @@ type JsonWebKey struct {
 
 func (x *JsonWebKey) Reset() {
 	*x = JsonWebKey{}
-	mi := &file_fora_v1_fora_proto_msgTypes[44]
+	mi := &file_fora_v1_fora_proto_msgTypes[45]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7535,7 +7608,7 @@ func (x *JsonWebKey) String() string {
 func (*JsonWebKey) ProtoMessage() {}
 
 func (x *JsonWebKey) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[44]
+	mi := &file_fora_v1_fora_proto_msgTypes[45]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7548,7 +7621,7 @@ func (x *JsonWebKey) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use JsonWebKey.ProtoReflect.Descriptor instead.
 func (*JsonWebKey) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{44}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{45}
 }
 
 func (x *JsonWebKey) GetKty() string {
@@ -7799,7 +7872,7 @@ type AccountRegistration struct {
 
 func (x *AccountRegistration) Reset() {
 	*x = AccountRegistration{}
-	mi := &file_fora_v1_fora_proto_msgTypes[45]
+	mi := &file_fora_v1_fora_proto_msgTypes[46]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7811,7 +7884,7 @@ func (x *AccountRegistration) String() string {
 func (*AccountRegistration) ProtoMessage() {}
 
 func (x *AccountRegistration) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[45]
+	mi := &file_fora_v1_fora_proto_msgTypes[46]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -7824,7 +7897,7 @@ func (x *AccountRegistration) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use AccountRegistration.ProtoReflect.Descriptor instead.
 func (*AccountRegistration) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{45}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{46}
 }
 
 func (x *AccountRegistration) GetDataSchema() *structpb.Struct {
@@ -7985,7 +8058,7 @@ type WellKnownManifest struct {
 
 func (x *WellKnownManifest) Reset() {
 	*x = WellKnownManifest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[46]
+	mi := &file_fora_v1_fora_proto_msgTypes[47]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -7997,7 +8070,7 @@ func (x *WellKnownManifest) String() string {
 func (*WellKnownManifest) ProtoMessage() {}
 
 func (x *WellKnownManifest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[46]
+	mi := &file_fora_v1_fora_proto_msgTypes[47]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8010,7 +8083,7 @@ func (x *WellKnownManifest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use WellKnownManifest.ProtoReflect.Descriptor instead.
 func (*WellKnownManifest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{46}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{47}
 }
 
 func (x *WellKnownManifest) GetVer() string {
@@ -8237,7 +8310,7 @@ type WBAFile struct {
 
 func (x *WBAFile) Reset() {
 	*x = WBAFile{}
-	mi := &file_fora_v1_fora_proto_msgTypes[47]
+	mi := &file_fora_v1_fora_proto_msgTypes[48]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8249,7 +8322,7 @@ func (x *WBAFile) String() string {
 func (*WBAFile) ProtoMessage() {}
 
 func (x *WBAFile) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[47]
+	mi := &file_fora_v1_fora_proto_msgTypes[48]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8262,7 +8335,7 @@ func (x *WBAFile) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use WBAFile.ProtoReflect.Descriptor instead.
 func (*WBAFile) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{47}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{48}
 }
 
 func (x *WBAFile) GetKeys() []*JsonWebKey {
@@ -8301,7 +8374,7 @@ type KeyRevocationList struct {
 
 func (x *KeyRevocationList) Reset() {
 	*x = KeyRevocationList{}
-	mi := &file_fora_v1_fora_proto_msgTypes[48]
+	mi := &file_fora_v1_fora_proto_msgTypes[49]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8313,7 +8386,7 @@ func (x *KeyRevocationList) String() string {
 func (*KeyRevocationList) ProtoMessage() {}
 
 func (x *KeyRevocationList) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[48]
+	mi := &file_fora_v1_fora_proto_msgTypes[49]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8326,7 +8399,7 @@ func (x *KeyRevocationList) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use KeyRevocationList.ProtoReflect.Descriptor instead.
 func (*KeyRevocationList) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{48}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{49}
 }
 
 func (x *KeyRevocationList) GetAsOf() *timestamppb.Timestamp {
@@ -8359,7 +8432,7 @@ type CatalogContributor struct {
 
 func (x *CatalogContributor) Reset() {
 	*x = CatalogContributor{}
-	mi := &file_fora_v1_fora_proto_msgTypes[49]
+	mi := &file_fora_v1_fora_proto_msgTypes[50]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8371,7 +8444,7 @@ func (x *CatalogContributor) String() string {
 func (*CatalogContributor) ProtoMessage() {}
 
 func (x *CatalogContributor) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[49]
+	mi := &file_fora_v1_fora_proto_msgTypes[50]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8384,7 +8457,7 @@ func (x *CatalogContributor) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CatalogContributor.ProtoReflect.Descriptor instead.
 func (*CatalogContributor) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{49}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{50}
 }
 
 func (x *CatalogContributor) GetDomain() string {
@@ -8424,7 +8497,7 @@ type AuthorizedExchange struct {
 
 func (x *AuthorizedExchange) Reset() {
 	*x = AuthorizedExchange{}
-	mi := &file_fora_v1_fora_proto_msgTypes[50]
+	mi := &file_fora_v1_fora_proto_msgTypes[51]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8436,7 +8509,7 @@ func (x *AuthorizedExchange) String() string {
 func (*AuthorizedExchange) ProtoMessage() {}
 
 func (x *AuthorizedExchange) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[50]
+	mi := &file_fora_v1_fora_proto_msgTypes[51]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8449,7 +8522,7 @@ func (x *AuthorizedExchange) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use AuthorizedExchange.ProtoReflect.Descriptor instead.
 func (*AuthorizedExchange) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{50}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{51}
 }
 
 func (x *AuthorizedExchange) GetDomain() string {
@@ -8538,7 +8611,7 @@ type DiscoveryResponse struct {
 
 func (x *DiscoveryResponse) Reset() {
 	*x = DiscoveryResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[51]
+	mi := &file_fora_v1_fora_proto_msgTypes[52]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8550,7 +8623,7 @@ func (x *DiscoveryResponse) String() string {
 func (*DiscoveryResponse) ProtoMessage() {}
 
 func (x *DiscoveryResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[51]
+	mi := &file_fora_v1_fora_proto_msgTypes[52]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8563,7 +8636,7 @@ func (x *DiscoveryResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DiscoveryResponse.ProtoReflect.Descriptor instead.
 func (*DiscoveryResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{51}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{52}
 }
 
 func (x *DiscoveryResponse) GetVer() string {
@@ -8642,7 +8715,7 @@ type BrokerTransactionResponse struct {
 
 func (x *BrokerTransactionResponse) Reset() {
 	*x = BrokerTransactionResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[52]
+	mi := &file_fora_v1_fora_proto_msgTypes[53]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8654,7 +8727,7 @@ func (x *BrokerTransactionResponse) String() string {
 func (*BrokerTransactionResponse) ProtoMessage() {}
 
 func (x *BrokerTransactionResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[52]
+	mi := &file_fora_v1_fora_proto_msgTypes[53]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8667,7 +8740,7 @@ func (x *BrokerTransactionResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use BrokerTransactionResponse.ProtoReflect.Descriptor instead.
 func (*BrokerTransactionResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{52}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{53}
 }
 
 func (x *BrokerTransactionResponse) GetVer() string {
@@ -8734,7 +8807,7 @@ type ExchangeOutcome struct {
 
 func (x *ExchangeOutcome) Reset() {
 	*x = ExchangeOutcome{}
-	mi := &file_fora_v1_fora_proto_msgTypes[53]
+	mi := &file_fora_v1_fora_proto_msgTypes[54]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8746,7 +8819,7 @@ func (x *ExchangeOutcome) String() string {
 func (*ExchangeOutcome) ProtoMessage() {}
 
 func (x *ExchangeOutcome) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[53]
+	mi := &file_fora_v1_fora_proto_msgTypes[54]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8759,7 +8832,7 @@ func (x *ExchangeOutcome) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ExchangeOutcome.ProtoReflect.Descriptor instead.
 func (*ExchangeOutcome) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{53}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{54}
 }
 
 func (x *ExchangeOutcome) GetExchange() string {
@@ -8843,7 +8916,7 @@ type DisputeRequest struct {
 
 func (x *DisputeRequest) Reset() {
 	*x = DisputeRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[54]
+	mi := &file_fora_v1_fora_proto_msgTypes[55]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -8855,7 +8928,7 @@ func (x *DisputeRequest) String() string {
 func (*DisputeRequest) ProtoMessage() {}
 
 func (x *DisputeRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[54]
+	mi := &file_fora_v1_fora_proto_msgTypes[55]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -8868,7 +8941,7 @@ func (x *DisputeRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisputeRequest.ProtoReflect.Descriptor instead.
 func (*DisputeRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{54}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{55}
 }
 
 func (x *DisputeRequest) GetVer() string {
@@ -8991,7 +9064,7 @@ type DisputeResponse struct {
 
 func (x *DisputeResponse) Reset() {
 	*x = DisputeResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[55]
+	mi := &file_fora_v1_fora_proto_msgTypes[56]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9003,7 +9076,7 @@ func (x *DisputeResponse) String() string {
 func (*DisputeResponse) ProtoMessage() {}
 
 func (x *DisputeResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[55]
+	mi := &file_fora_v1_fora_proto_msgTypes[56]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9016,7 +9089,7 @@ func (x *DisputeResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisputeResponse.ProtoReflect.Descriptor instead.
 func (*DisputeResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{55}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{56}
 }
 
 func (x *DisputeResponse) GetVer() string {
@@ -9096,7 +9169,7 @@ type DomainVerificationRequest struct {
 
 func (x *DomainVerificationRequest) Reset() {
 	*x = DomainVerificationRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[56]
+	mi := &file_fora_v1_fora_proto_msgTypes[57]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9108,7 +9181,7 @@ func (x *DomainVerificationRequest) String() string {
 func (*DomainVerificationRequest) ProtoMessage() {}
 
 func (x *DomainVerificationRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[56]
+	mi := &file_fora_v1_fora_proto_msgTypes[57]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9121,7 +9194,7 @@ func (x *DomainVerificationRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationRequest.ProtoReflect.Descriptor instead.
 func (*DomainVerificationRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{56}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{57}
 }
 
 func (x *DomainVerificationRequest) GetVer() string {
@@ -9192,7 +9265,7 @@ type DomainVerificationChallenge struct {
 
 func (x *DomainVerificationChallenge) Reset() {
 	*x = DomainVerificationChallenge{}
-	mi := &file_fora_v1_fora_proto_msgTypes[57]
+	mi := &file_fora_v1_fora_proto_msgTypes[58]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9204,7 +9277,7 @@ func (x *DomainVerificationChallenge) String() string {
 func (*DomainVerificationChallenge) ProtoMessage() {}
 
 func (x *DomainVerificationChallenge) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[57]
+	mi := &file_fora_v1_fora_proto_msgTypes[58]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9217,7 +9290,7 @@ func (x *DomainVerificationChallenge) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationChallenge.ProtoReflect.Descriptor instead.
 func (*DomainVerificationChallenge) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{57}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{58}
 }
 
 func (x *DomainVerificationChallenge) GetVer() string {
@@ -9309,7 +9382,7 @@ type DomainVerificationConfirmation struct {
 
 func (x *DomainVerificationConfirmation) Reset() {
 	*x = DomainVerificationConfirmation{}
-	mi := &file_fora_v1_fora_proto_msgTypes[58]
+	mi := &file_fora_v1_fora_proto_msgTypes[59]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9321,7 +9394,7 @@ func (x *DomainVerificationConfirmation) String() string {
 func (*DomainVerificationConfirmation) ProtoMessage() {}
 
 func (x *DomainVerificationConfirmation) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[58]
+	mi := &file_fora_v1_fora_proto_msgTypes[59]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9334,7 +9407,7 @@ func (x *DomainVerificationConfirmation) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationConfirmation.ProtoReflect.Descriptor instead.
 func (*DomainVerificationConfirmation) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{58}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{59}
 }
 
 func (x *DomainVerificationConfirmation) GetVer() string {
@@ -9416,7 +9489,7 @@ type DomainVerificationResult struct {
 
 func (x *DomainVerificationResult) Reset() {
 	*x = DomainVerificationResult{}
-	mi := &file_fora_v1_fora_proto_msgTypes[59]
+	mi := &file_fora_v1_fora_proto_msgTypes[60]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9428,7 +9501,7 @@ func (x *DomainVerificationResult) String() string {
 func (*DomainVerificationResult) ProtoMessage() {}
 
 func (x *DomainVerificationResult) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[59]
+	mi := &file_fora_v1_fora_proto_msgTypes[60]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9441,7 +9514,7 @@ func (x *DomainVerificationResult) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationResult.ProtoReflect.Descriptor instead.
 func (*DomainVerificationResult) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{59}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{60}
 }
 
 func (x *DomainVerificationResult) GetVer() string {
@@ -9629,7 +9702,7 @@ type RegisterRequest struct {
 
 func (x *RegisterRequest) Reset() {
 	*x = RegisterRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[60]
+	mi := &file_fora_v1_fora_proto_msgTypes[61]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9641,7 +9714,7 @@ func (x *RegisterRequest) String() string {
 func (*RegisterRequest) ProtoMessage() {}
 
 func (x *RegisterRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[60]
+	mi := &file_fora_v1_fora_proto_msgTypes[61]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9654,7 +9727,7 @@ func (x *RegisterRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegisterRequest.ProtoReflect.Descriptor instead.
 func (*RegisterRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{60}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{61}
 }
 
 func (x *RegisterRequest) GetVer() string {
@@ -9725,7 +9798,7 @@ type RegisterResponse struct {
 
 func (x *RegisterResponse) Reset() {
 	*x = RegisterResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[61]
+	mi := &file_fora_v1_fora_proto_msgTypes[62]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9737,7 +9810,7 @@ func (x *RegisterResponse) String() string {
 func (*RegisterResponse) ProtoMessage() {}
 
 func (x *RegisterResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[61]
+	mi := &file_fora_v1_fora_proto_msgTypes[62]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9750,7 +9823,7 @@ func (x *RegisterResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegisterResponse.ProtoReflect.Descriptor instead.
 func (*RegisterResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{61}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{62}
 }
 
 func (x *RegisterResponse) GetVer() string {
@@ -9812,7 +9885,7 @@ type GetAccountStatusRequest struct {
 
 func (x *GetAccountStatusRequest) Reset() {
 	*x = GetAccountStatusRequest{}
-	mi := &file_fora_v1_fora_proto_msgTypes[62]
+	mi := &file_fora_v1_fora_proto_msgTypes[63]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9824,7 +9897,7 @@ func (x *GetAccountStatusRequest) String() string {
 func (*GetAccountStatusRequest) ProtoMessage() {}
 
 func (x *GetAccountStatusRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[62]
+	mi := &file_fora_v1_fora_proto_msgTypes[63]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9837,7 +9910,7 @@ func (x *GetAccountStatusRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GetAccountStatusRequest.ProtoReflect.Descriptor instead.
 func (*GetAccountStatusRequest) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{62}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{63}
 }
 
 func (x *GetAccountStatusRequest) GetVer() string {
@@ -9930,7 +10003,7 @@ type GetAccountStatusResponse struct {
 
 func (x *GetAccountStatusResponse) Reset() {
 	*x = GetAccountStatusResponse{}
-	mi := &file_fora_v1_fora_proto_msgTypes[63]
+	mi := &file_fora_v1_fora_proto_msgTypes[64]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -9942,7 +10015,7 @@ func (x *GetAccountStatusResponse) String() string {
 func (*GetAccountStatusResponse) ProtoMessage() {}
 
 func (x *GetAccountStatusResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[63]
+	mi := &file_fora_v1_fora_proto_msgTypes[64]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -9955,7 +10028,7 @@ func (x *GetAccountStatusResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GetAccountStatusResponse.ProtoReflect.Descriptor instead.
 func (*GetAccountStatusResponse) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{63}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{64}
 }
 
 func (x *GetAccountStatusResponse) GetVer() string {
@@ -10046,7 +10119,7 @@ type ErrorDetail struct {
 
 func (x *ErrorDetail) Reset() {
 	*x = ErrorDetail{}
-	mi := &file_fora_v1_fora_proto_msgTypes[64]
+	mi := &file_fora_v1_fora_proto_msgTypes[65]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10058,7 +10131,7 @@ func (x *ErrorDetail) String() string {
 func (*ErrorDetail) ProtoMessage() {}
 
 func (x *ErrorDetail) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[64]
+	mi := &file_fora_v1_fora_proto_msgTypes[65]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10071,7 +10144,7 @@ func (x *ErrorDetail) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ErrorDetail.ProtoReflect.Descriptor instead.
 func (*ErrorDetail) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{64}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{65}
 }
 
 func (x *ErrorDetail) GetMessage() string {
@@ -10293,7 +10366,7 @@ type TransactionDenial struct {
 
 func (x *TransactionDenial) Reset() {
 	*x = TransactionDenial{}
-	mi := &file_fora_v1_fora_proto_msgTypes[65]
+	mi := &file_fora_v1_fora_proto_msgTypes[66]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10305,7 +10378,7 @@ func (x *TransactionDenial) String() string {
 func (*TransactionDenial) ProtoMessage() {}
 
 func (x *TransactionDenial) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[65]
+	mi := &file_fora_v1_fora_proto_msgTypes[66]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10318,7 +10391,7 @@ func (x *TransactionDenial) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use TransactionDenial.ProtoReflect.Descriptor instead.
 func (*TransactionDenial) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{65}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{66}
 }
 
 func (x *TransactionDenial) GetReason() DenialReason {
@@ -10366,7 +10439,7 @@ type CatalogRejection struct {
 
 func (x *CatalogRejection) Reset() {
 	*x = CatalogRejection{}
-	mi := &file_fora_v1_fora_proto_msgTypes[66]
+	mi := &file_fora_v1_fora_proto_msgTypes[67]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10378,7 +10451,7 @@ func (x *CatalogRejection) String() string {
 func (*CatalogRejection) ProtoMessage() {}
 
 func (x *CatalogRejection) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[66]
+	mi := &file_fora_v1_fora_proto_msgTypes[67]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10391,7 +10464,7 @@ func (x *CatalogRejection) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CatalogRejection.ProtoReflect.Descriptor instead.
 func (*CatalogRejection) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{66}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{67}
 }
 
 func (x *CatalogRejection) GetReason() CatalogRejectionReason {
@@ -10423,7 +10496,7 @@ type RegistrationFailure struct {
 
 func (x *RegistrationFailure) Reset() {
 	*x = RegistrationFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[67]
+	mi := &file_fora_v1_fora_proto_msgTypes[68]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10435,7 +10508,7 @@ func (x *RegistrationFailure) String() string {
 func (*RegistrationFailure) ProtoMessage() {}
 
 func (x *RegistrationFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[67]
+	mi := &file_fora_v1_fora_proto_msgTypes[68]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10448,7 +10521,7 @@ func (x *RegistrationFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegistrationFailure.ProtoReflect.Descriptor instead.
 func (*RegistrationFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{67}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{68}
 }
 
 func (x *RegistrationFailure) GetReason() RegistrationFailureReason {
@@ -10486,7 +10559,7 @@ type RegistrationFieldError struct {
 
 func (x *RegistrationFieldError) Reset() {
 	*x = RegistrationFieldError{}
-	mi := &file_fora_v1_fora_proto_msgTypes[68]
+	mi := &file_fora_v1_fora_proto_msgTypes[69]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10498,7 +10571,7 @@ func (x *RegistrationFieldError) String() string {
 func (*RegistrationFieldError) ProtoMessage() {}
 
 func (x *RegistrationFieldError) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[68]
+	mi := &file_fora_v1_fora_proto_msgTypes[69]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10511,7 +10584,7 @@ func (x *RegistrationFieldError) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RegistrationFieldError.ProtoReflect.Descriptor instead.
 func (*RegistrationFieldError) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{68}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{69}
 }
 
 func (x *RegistrationFieldError) GetPath() string {
@@ -10539,7 +10612,7 @@ type DisputeFailure struct {
 
 func (x *DisputeFailure) Reset() {
 	*x = DisputeFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[69]
+	mi := &file_fora_v1_fora_proto_msgTypes[70]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10551,7 +10624,7 @@ func (x *DisputeFailure) String() string {
 func (*DisputeFailure) ProtoMessage() {}
 
 func (x *DisputeFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[69]
+	mi := &file_fora_v1_fora_proto_msgTypes[70]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10564,7 +10637,7 @@ func (x *DisputeFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisputeFailure.ProtoReflect.Descriptor instead.
 func (*DisputeFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{69}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{70}
 }
 
 func (x *DisputeFailure) GetReason() DisputeFailureReason {
@@ -10585,7 +10658,7 @@ type DomainVerificationFailure struct {
 
 func (x *DomainVerificationFailure) Reset() {
 	*x = DomainVerificationFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[70]
+	mi := &file_fora_v1_fora_proto_msgTypes[71]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10597,7 +10670,7 @@ func (x *DomainVerificationFailure) String() string {
 func (*DomainVerificationFailure) ProtoMessage() {}
 
 func (x *DomainVerificationFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[70]
+	mi := &file_fora_v1_fora_proto_msgTypes[71]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10610,7 +10683,7 @@ func (x *DomainVerificationFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DomainVerificationFailure.ProtoReflect.Descriptor instead.
 func (*DomainVerificationFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{70}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{71}
 }
 
 func (x *DomainVerificationFailure) GetReason() DomainVerificationFailureReason {
@@ -10631,7 +10704,7 @@ type RetrievalAuthFailure struct {
 
 func (x *RetrievalAuthFailure) Reset() {
 	*x = RetrievalAuthFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[71]
+	mi := &file_fora_v1_fora_proto_msgTypes[72]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10643,7 +10716,7 @@ func (x *RetrievalAuthFailure) String() string {
 func (*RetrievalAuthFailure) ProtoMessage() {}
 
 func (x *RetrievalAuthFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[71]
+	mi := &file_fora_v1_fora_proto_msgTypes[72]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10656,7 +10729,7 @@ func (x *RetrievalAuthFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RetrievalAuthFailure.ProtoReflect.Descriptor instead.
 func (*RetrievalAuthFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{71}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{72}
 }
 
 func (x *RetrievalAuthFailure) GetReason() RetrievalAuthFailureReason {
@@ -10677,7 +10750,7 @@ type UsageReportRejection struct {
 
 func (x *UsageReportRejection) Reset() {
 	*x = UsageReportRejection{}
-	mi := &file_fora_v1_fora_proto_msgTypes[72]
+	mi := &file_fora_v1_fora_proto_msgTypes[73]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10689,7 +10762,7 @@ func (x *UsageReportRejection) String() string {
 func (*UsageReportRejection) ProtoMessage() {}
 
 func (x *UsageReportRejection) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[72]
+	mi := &file_fora_v1_fora_proto_msgTypes[73]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10702,7 +10775,7 @@ func (x *UsageReportRejection) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UsageReportRejection.ProtoReflect.Descriptor instead.
 func (*UsageReportRejection) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{72}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{73}
 }
 
 func (x *UsageReportRejection) GetReason() UsageReportRejectionReason {
@@ -10723,7 +10796,7 @@ type RequestAuthFailure struct {
 
 func (x *RequestAuthFailure) Reset() {
 	*x = RequestAuthFailure{}
-	mi := &file_fora_v1_fora_proto_msgTypes[73]
+	mi := &file_fora_v1_fora_proto_msgTypes[74]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -10735,7 +10808,7 @@ func (x *RequestAuthFailure) String() string {
 func (*RequestAuthFailure) ProtoMessage() {}
 
 func (x *RequestAuthFailure) ProtoReflect() protoreflect.Message {
-	mi := &file_fora_v1_fora_proto_msgTypes[73]
+	mi := &file_fora_v1_fora_proto_msgTypes[74]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -10748,7 +10821,7 @@ func (x *RequestAuthFailure) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RequestAuthFailure.ProtoReflect.Descriptor instead.
 func (*RequestAuthFailure) Descriptor() ([]byte, []int) {
-	return file_fora_v1_fora_proto_rawDescGZIP(), []int{73}
+	return file_fora_v1_fora_proto_rawDescGZIP(), []int{74}
 }
 
 func (x *RequestAuthFailure) GetReason() RequestAuthFailureReason {
@@ -11134,12 +11207,16 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\brejected\x18\x03 \x01(\x05R\brejected\x12\x1a\n" +
 	"\bwarnings\x18\x04 \x03(\tR\bwarnings\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
-	"\fext_critical\x18Z \x03(\tR\vextCritical\"\xe5\x02\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical\"\xa6\x03\n" +
 	"\x16RemoveResourcesRequest\x12\x10\n" +
 	"\x03ver\x18\x01 \x01(\tR\x03ver\x12\x1b\n" +
 	"\ttenant_id\x18\x02 \x01(\tR\btenantId\x12B\n" +
-	"\x05paths\x18\x03 \x03(\tB,\xbaH)\x92\x01&\b\x01\x10\x80\x02\"\x1fr\x1d\x10\x01\x18\x80\x102\x16^/[^?#\\x00-\\x20\\x7f]*$R\x05paths\x12\xd7\x01\n" +
-	"\bexchange\x18\x04 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\"E\n" +
+	"\x05paths\x18\x03 \x03(\tB,\xbaH'\x92\x01$\x10\x80\x02\"\x1fr\x1d\x10\x01\x18\x80\x102\x16^/[^?#\\x00-\\x20\\x7f]*$\x18\x01R\x05paths\x12\xd7\x01\n" +
+	"\bexchange\x18\x04 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\x12?\n" +
+	"\tresources\x18\x05 \x03(\v2\x14.fora.v1.ResourceRefB\v\xbaH\b\x92\x01\x05\b\x01\x10\x80\x02R\tresources\"\x9b\x02\n" +
+	"\vResourceRef\x12\xd3\x01\n" +
+	"\x06domain\x18\x01 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\x06domain\x126\n" +
+	"\x04path\x18\x02 \x01(\tB\"\xbaH\x1fr\x1d\x10\x01\x18\x80\x102\x16^/[^?#\\x00-\\x20\\x7f]*$R\x04path\"E\n" +
 	"\x17RemoveResourcesResponse\x12\x10\n" +
 	"\x03ver\x18\x01 \x01(\tR\x03ver\x12\x18\n" +
 	"\aremoved\x18\x02 \x01(\x05R\aremoved\"\xa0\x02\n" +
@@ -11757,7 +11834,7 @@ func file_fora_v1_fora_proto_rawDescGZIP() []byte {
 }
 
 var file_fora_v1_fora_proto_enumTypes = make([]protoimpl.EnumInfo, 29)
-var file_fora_v1_fora_proto_msgTypes = make([]protoimpl.MessageInfo, 75)
+var file_fora_v1_fora_proto_msgTypes = make([]protoimpl.MessageInfo, 76)
 var file_fora_v1_fora_proto_goTypes = []any{
 	(DiscoveryMethod)(0),                   // 0: fora.v1.DiscoveryMethod
 	(OfferAbsenceReason)(0),                // 1: fora.v1.OfferAbsenceReason
@@ -11821,85 +11898,86 @@ var file_fora_v1_fora_proto_goTypes = []any{
 	(*ResourceEntry)(nil),                  // 59: fora.v1.ResourceEntry
 	(*PushResourcesResponse)(nil),          // 60: fora.v1.PushResourcesResponse
 	(*RemoveResourcesRequest)(nil),         // 61: fora.v1.RemoveResourcesRequest
-	(*RemoveResourcesResponse)(nil),        // 62: fora.v1.RemoveResourcesResponse
-	(*RefreshCatalogRequest)(nil),          // 63: fora.v1.RefreshCatalogRequest
-	(*RefreshCatalogResponse)(nil),         // 64: fora.v1.RefreshCatalogResponse
-	(*ReportingObligation)(nil),            // 65: fora.v1.ReportingObligation
-	(*UsageReport)(nil),                    // 66: fora.v1.UsageReport
-	(*AttributionDetail)(nil),              // 67: fora.v1.AttributionDetail
-	(*Usage)(nil),                          // 68: fora.v1.Usage
-	(*UsageAsset)(nil),                     // 69: fora.v1.UsageAsset
-	(*UsageReportResponse)(nil),            // 70: fora.v1.UsageReportResponse
-	(*DiscoveryRequest)(nil),               // 71: fora.v1.DiscoveryRequest
-	(*RequestConstraints)(nil),             // 72: fora.v1.RequestConstraints
-	(*JsonWebKey)(nil),                     // 73: fora.v1.JsonWebKey
-	(*AccountRegistration)(nil),            // 74: fora.v1.AccountRegistration
-	(*WellKnownManifest)(nil),              // 75: fora.v1.WellKnownManifest
-	(*WBAFile)(nil),                        // 76: fora.v1.WBAFile
-	(*KeyRevocationList)(nil),              // 77: fora.v1.KeyRevocationList
-	(*CatalogContributor)(nil),             // 78: fora.v1.CatalogContributor
-	(*AuthorizedExchange)(nil),             // 79: fora.v1.AuthorizedExchange
-	(*DiscoveryResponse)(nil),              // 80: fora.v1.DiscoveryResponse
-	(*BrokerTransactionResponse)(nil),      // 81: fora.v1.BrokerTransactionResponse
-	(*ExchangeOutcome)(nil),                // 82: fora.v1.ExchangeOutcome
-	(*DisputeRequest)(nil),                 // 83: fora.v1.DisputeRequest
-	(*DisputeResponse)(nil),                // 84: fora.v1.DisputeResponse
-	(*DomainVerificationRequest)(nil),      // 85: fora.v1.DomainVerificationRequest
-	(*DomainVerificationChallenge)(nil),    // 86: fora.v1.DomainVerificationChallenge
-	(*DomainVerificationConfirmation)(nil), // 87: fora.v1.DomainVerificationConfirmation
-	(*DomainVerificationResult)(nil),       // 88: fora.v1.DomainVerificationResult
-	(*RegisterRequest)(nil),                // 89: fora.v1.RegisterRequest
-	(*RegisterResponse)(nil),               // 90: fora.v1.RegisterResponse
-	(*GetAccountStatusRequest)(nil),        // 91: fora.v1.GetAccountStatusRequest
-	(*GetAccountStatusResponse)(nil),       // 92: fora.v1.GetAccountStatusResponse
-	(*ErrorDetail)(nil),                    // 93: fora.v1.ErrorDetail
-	(*TransactionDenial)(nil),              // 94: fora.v1.TransactionDenial
-	(*CatalogRejection)(nil),               // 95: fora.v1.CatalogRejection
-	(*RegistrationFailure)(nil),            // 96: fora.v1.RegistrationFailure
-	(*RegistrationFieldError)(nil),         // 97: fora.v1.RegistrationFieldError
-	(*DisputeFailure)(nil),                 // 98: fora.v1.DisputeFailure
-	(*DomainVerificationFailure)(nil),      // 99: fora.v1.DomainVerificationFailure
-	(*RetrievalAuthFailure)(nil),           // 100: fora.v1.RetrievalAuthFailure
-	(*UsageReportRejection)(nil),           // 101: fora.v1.UsageReportRejection
-	(*RequestAuthFailure)(nil),             // 102: fora.v1.RequestAuthFailure
-	nil,                                    // 103: fora.v1.ErrorDetail.MetadataEntry
-	(*durationpb.Duration)(nil),            // 104: google.protobuf.Duration
-	(*structpb.Struct)(nil),                // 105: google.protobuf.Struct
-	(*timestamppb.Timestamp)(nil),          // 106: google.protobuf.Timestamp
+	(*ResourceRef)(nil),                    // 62: fora.v1.ResourceRef
+	(*RemoveResourcesResponse)(nil),        // 63: fora.v1.RemoveResourcesResponse
+	(*RefreshCatalogRequest)(nil),          // 64: fora.v1.RefreshCatalogRequest
+	(*RefreshCatalogResponse)(nil),         // 65: fora.v1.RefreshCatalogResponse
+	(*ReportingObligation)(nil),            // 66: fora.v1.ReportingObligation
+	(*UsageReport)(nil),                    // 67: fora.v1.UsageReport
+	(*AttributionDetail)(nil),              // 68: fora.v1.AttributionDetail
+	(*Usage)(nil),                          // 69: fora.v1.Usage
+	(*UsageAsset)(nil),                     // 70: fora.v1.UsageAsset
+	(*UsageReportResponse)(nil),            // 71: fora.v1.UsageReportResponse
+	(*DiscoveryRequest)(nil),               // 72: fora.v1.DiscoveryRequest
+	(*RequestConstraints)(nil),             // 73: fora.v1.RequestConstraints
+	(*JsonWebKey)(nil),                     // 74: fora.v1.JsonWebKey
+	(*AccountRegistration)(nil),            // 75: fora.v1.AccountRegistration
+	(*WellKnownManifest)(nil),              // 76: fora.v1.WellKnownManifest
+	(*WBAFile)(nil),                        // 77: fora.v1.WBAFile
+	(*KeyRevocationList)(nil),              // 78: fora.v1.KeyRevocationList
+	(*CatalogContributor)(nil),             // 79: fora.v1.CatalogContributor
+	(*AuthorizedExchange)(nil),             // 80: fora.v1.AuthorizedExchange
+	(*DiscoveryResponse)(nil),              // 81: fora.v1.DiscoveryResponse
+	(*BrokerTransactionResponse)(nil),      // 82: fora.v1.BrokerTransactionResponse
+	(*ExchangeOutcome)(nil),                // 83: fora.v1.ExchangeOutcome
+	(*DisputeRequest)(nil),                 // 84: fora.v1.DisputeRequest
+	(*DisputeResponse)(nil),                // 85: fora.v1.DisputeResponse
+	(*DomainVerificationRequest)(nil),      // 86: fora.v1.DomainVerificationRequest
+	(*DomainVerificationChallenge)(nil),    // 87: fora.v1.DomainVerificationChallenge
+	(*DomainVerificationConfirmation)(nil), // 88: fora.v1.DomainVerificationConfirmation
+	(*DomainVerificationResult)(nil),       // 89: fora.v1.DomainVerificationResult
+	(*RegisterRequest)(nil),                // 90: fora.v1.RegisterRequest
+	(*RegisterResponse)(nil),               // 91: fora.v1.RegisterResponse
+	(*GetAccountStatusRequest)(nil),        // 92: fora.v1.GetAccountStatusRequest
+	(*GetAccountStatusResponse)(nil),       // 93: fora.v1.GetAccountStatusResponse
+	(*ErrorDetail)(nil),                    // 94: fora.v1.ErrorDetail
+	(*TransactionDenial)(nil),              // 95: fora.v1.TransactionDenial
+	(*CatalogRejection)(nil),               // 96: fora.v1.CatalogRejection
+	(*RegistrationFailure)(nil),            // 97: fora.v1.RegistrationFailure
+	(*RegistrationFieldError)(nil),         // 98: fora.v1.RegistrationFieldError
+	(*DisputeFailure)(nil),                 // 99: fora.v1.DisputeFailure
+	(*DomainVerificationFailure)(nil),      // 100: fora.v1.DomainVerificationFailure
+	(*RetrievalAuthFailure)(nil),           // 101: fora.v1.RetrievalAuthFailure
+	(*UsageReportRejection)(nil),           // 102: fora.v1.UsageReportRejection
+	(*RequestAuthFailure)(nil),             // 103: fora.v1.RequestAuthFailure
+	nil,                                    // 104: fora.v1.ErrorDetail.MetadataEntry
+	(*durationpb.Duration)(nil),            // 105: google.protobuf.Duration
+	(*structpb.Struct)(nil),                // 106: google.protobuf.Struct
+	(*timestamppb.Timestamp)(nil),          // 107: google.protobuf.Timestamp
 }
 var file_fora_v1_fora_proto_depIdxs = []int32{
 	3,   // 0: fora.v1.AcceptableRestriction.axis:type_name -> fora.v1.RestrictionKind
 	45,  // 1: fora.v1.ResourceQuery.requester:type_name -> fora.v1.Requester
 	29,  // 2: fora.v1.ResourceQuery.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
-	104, // 3: fora.v1.ResourceQuery.deadline:type_name -> google.protobuf.Duration
-	105, // 4: fora.v1.ResourceQuery.ext:type_name -> google.protobuf.Struct
+	105, // 3: fora.v1.ResourceQuery.deadline:type_name -> google.protobuf.Duration
+	106, // 4: fora.v1.ResourceQuery.ext:type_name -> google.protobuf.Struct
 	35,  // 5: fora.v1.ResourceResponse.offers:type_name -> fora.v1.Offer
 	32,  // 6: fora.v1.ResourceResponse.offer_groups:type_name -> fora.v1.OfferGroup
 	33,  // 7: fora.v1.ResourceResponse.rate_limit:type_name -> fora.v1.RateLimitInfo
-	105, // 8: fora.v1.ResourceResponse.ext:type_name -> google.protobuf.Struct
+	106, // 8: fora.v1.ResourceResponse.ext:type_name -> google.protobuf.Struct
 	35,  // 9: fora.v1.OfferGroup.offers:type_name -> fora.v1.Offer
 	0,   // 10: fora.v1.OfferGroup.discovery_method:type_name -> fora.v1.DiscoveryMethod
 	1,   // 11: fora.v1.OfferGroup.absence_reason:type_name -> fora.v1.OfferAbsenceReason
 	3,   // 12: fora.v1.OfferGroup.restriction_filters:type_name -> fora.v1.RestrictionKind
-	106, // 13: fora.v1.RateLimitInfo.reset_at:type_name -> google.protobuf.Timestamp
-	104, // 14: fora.v1.RateLimitInfo.window:type_name -> google.protobuf.Duration
-	106, // 15: fora.v1.SubscriptionQuotaInfo.resets_at:type_name -> google.protobuf.Timestamp
+	107, // 13: fora.v1.RateLimitInfo.reset_at:type_name -> google.protobuf.Timestamp
+	105, // 14: fora.v1.RateLimitInfo.window:type_name -> google.protobuf.Duration
+	107, // 15: fora.v1.SubscriptionQuotaInfo.resets_at:type_name -> google.protobuf.Timestamp
 	44,  // 16: fora.v1.Offer.pricing:type_name -> fora.v1.Pricing
 	9,   // 17: fora.v1.Offer.delivery_method:type_name -> fora.v1.DeliveryMethod
-	65,  // 18: fora.v1.Offer.reporting:type_name -> fora.v1.ReportingObligation
-	106, // 19: fora.v1.Offer.expires_at:type_name -> google.protobuf.Timestamp
+	66,  // 18: fora.v1.Offer.reporting:type_name -> fora.v1.ReportingObligation
+	107, // 19: fora.v1.Offer.expires_at:type_name -> google.protobuf.Timestamp
 	36,  // 20: fora.v1.Offer.identity:type_name -> fora.v1.ResourceIdentity
 	37,  // 21: fora.v1.Offer.attestations:type_name -> fora.v1.ResourceAttestation
-	106, // 22: fora.v1.Offer.data_as_of:type_name -> google.protobuf.Timestamp
+	107, // 22: fora.v1.Offer.data_as_of:type_name -> google.protobuf.Timestamp
 	34,  // 23: fora.v1.Offer.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
 	43,  // 24: fora.v1.Offer.previews:type_name -> fora.v1.Preview
 	42,  // 25: fora.v1.Offer.terms:type_name -> fora.v1.LicenseTerm
-	105, // 26: fora.v1.Offer.ext:type_name -> google.protobuf.Struct
+	106, // 26: fora.v1.Offer.ext:type_name -> google.protobuf.Struct
 	12,  // 27: fora.v1.ResourceIdentity.resource_mutability:type_name -> fora.v1.ResourceMutability
 	11,  // 28: fora.v1.ResourceIdentity.c2pa_status:type_name -> fora.v1.C2PAStatus
-	105, // 29: fora.v1.ResourceIdentity.ext:type_name -> google.protobuf.Struct
-	106, // 30: fora.v1.ResourceAttestation.attested_at:type_name -> google.protobuf.Timestamp
-	105, // 31: fora.v1.ResourceAttestation.claims:type_name -> google.protobuf.Struct
+	106, // 29: fora.v1.ResourceIdentity.ext:type_name -> google.protobuf.Struct
+	107, // 30: fora.v1.ResourceAttestation.attested_at:type_name -> google.protobuf.Timestamp
+	106, // 31: fora.v1.ResourceAttestation.claims:type_name -> google.protobuf.Struct
 	3,   // 32: fora.v1.Restriction.kind:type_name -> fora.v1.RestrictionKind
 	4,   // 33: fora.v1.Quota.window:type_name -> fora.v1.QuotaWindow
 	5,   // 34: fora.v1.Obligation.kind:type_name -> fora.v1.ObligationKind
@@ -11915,148 +11993,149 @@ var file_fora_v1_fora_proto_depIdxs = []int32{
 	8,   // 44: fora.v1.Pricing.metering:type_name -> fora.v1.PricingMetering
 	10,  // 45: fora.v1.Requester.type:type_name -> fora.v1.RequesterType
 	46,  // 46: fora.v1.Requester.delegation:type_name -> fora.v1.Delegation
-	105, // 47: fora.v1.Requester.ext:type_name -> google.protobuf.Struct
-	106, // 48: fora.v1.Delegation.expires_at:type_name -> google.protobuf.Timestamp
-	104, // 49: fora.v1.Delegation.quota_period:type_name -> google.protobuf.Duration
-	105, // 50: fora.v1.Delegation.ext:type_name -> google.protobuf.Struct
+	106, // 47: fora.v1.Requester.ext:type_name -> google.protobuf.Struct
+	107, // 48: fora.v1.Delegation.expires_at:type_name -> google.protobuf.Timestamp
+	105, // 49: fora.v1.Delegation.quota_period:type_name -> google.protobuf.Duration
+	106, // 50: fora.v1.Delegation.ext:type_name -> google.protobuf.Struct
 	50,  // 51: fora.v1.AgentRequestAcceptance.payload:type_name -> fora.v1.AgentRequestAcceptancePayload
 	49,  // 52: fora.v1.AgentRequestAcceptancePayload.items:type_name -> fora.v1.AgentRequestAcceptanceItem
 	45,  // 53: fora.v1.TransactionRequest.requester:type_name -> fora.v1.Requester
 	53,  // 54: fora.v1.TransactionRequest.items:type_name -> fora.v1.TransactionItem
 	48,  // 55: fora.v1.TransactionRequest.agent_request_acceptance:type_name -> fora.v1.AgentRequestAcceptance
-	105, // 56: fora.v1.TransactionRequest.ext:type_name -> google.protobuf.Struct
+	106, // 56: fora.v1.TransactionRequest.ext:type_name -> google.protobuf.Struct
 	35,  // 57: fora.v1.TransactionItem.offer:type_name -> fora.v1.Offer
 	47,  // 58: fora.v1.TransactionItem.agent_acceptance:type_name -> fora.v1.AgentAcceptance
 	55,  // 59: fora.v1.TransactionResponse.items:type_name -> fora.v1.TransactionResultItem
 	57,  // 60: fora.v1.TransactionResponse.total_cost:type_name -> fora.v1.Cost
 	34,  // 61: fora.v1.TransactionResponse.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
-	105, // 62: fora.v1.TransactionResponse.ext:type_name -> google.protobuf.Struct
+	106, // 62: fora.v1.TransactionResponse.ext:type_name -> google.protobuf.Struct
 	57,  // 63: fora.v1.TransactionResultItem.cost:type_name -> fora.v1.Cost
 	57,  // 64: fora.v1.TransactionResultItem.subscription_unit_value:type_name -> fora.v1.Cost
 	13,  // 65: fora.v1.TransactionResultItem.denial_reason:type_name -> fora.v1.DenialReason
 	3,   // 66: fora.v1.TransactionResultItem.restriction_mismatches:type_name -> fora.v1.RestrictionKind
-	106, // 67: fora.v1.TransactionResultItem.expires_at:type_name -> google.protobuf.Timestamp
+	107, // 67: fora.v1.TransactionResultItem.expires_at:type_name -> google.protobuf.Timestamp
 	9,   // 68: fora.v1.TransactionResultItem.delivery_method:type_name -> fora.v1.DeliveryMethod
-	65,  // 69: fora.v1.TransactionResultItem.reporting_obligation:type_name -> fora.v1.ReportingObligation
+	66,  // 69: fora.v1.TransactionResultItem.reporting_obligation:type_name -> fora.v1.ReportingObligation
 	56,  // 70: fora.v1.TransactionResultItem.refusal:type_name -> fora.v1.UpstreamRefusal
-	93,  // 71: fora.v1.UpstreamRefusal.detail:type_name -> fora.v1.ErrorDetail
+	94,  // 71: fora.v1.UpstreamRefusal.detail:type_name -> fora.v1.ErrorDetail
 	59,  // 72: fora.v1.PushResourcesRequest.entries:type_name -> fora.v1.ResourceEntry
-	105, // 73: fora.v1.PushResourcesRequest.ext:type_name -> google.protobuf.Struct
+	106, // 73: fora.v1.PushResourcesRequest.ext:type_name -> google.protobuf.Struct
 	14,  // 74: fora.v1.ResourceEntry.source:type_name -> fora.v1.IngestionSource
-	106, // 75: fora.v1.ResourceEntry.provenance_timestamp:type_name -> google.protobuf.Timestamp
+	107, // 75: fora.v1.ResourceEntry.provenance_timestamp:type_name -> google.protobuf.Timestamp
 	37,  // 76: fora.v1.ResourceEntry.attestations:type_name -> fora.v1.ResourceAttestation
 	42,  // 77: fora.v1.ResourceEntry.terms:type_name -> fora.v1.LicenseTerm
 	12,  // 78: fora.v1.ResourceEntry.resource_mutability:type_name -> fora.v1.ResourceMutability
-	105, // 79: fora.v1.ResourceEntry.ext:type_name -> google.protobuf.Struct
-	105, // 80: fora.v1.PushResourcesResponse.ext:type_name -> google.protobuf.Struct
-	104, // 81: fora.v1.ReportingObligation.window:type_name -> google.protobuf.Duration
-	105, // 82: fora.v1.ReportingObligation.ext:type_name -> google.protobuf.Struct
-	68,  // 83: fora.v1.UsageReport.usage:type_name -> fora.v1.Usage
-	106, // 84: fora.v1.UsageReport.timestamp:type_name -> google.protobuf.Timestamp
-	69,  // 85: fora.v1.UsageReport.assets:type_name -> fora.v1.UsageAsset
-	105, // 86: fora.v1.UsageReport.ext:type_name -> google.protobuf.Struct
-	15,  // 87: fora.v1.AttributionDetail.format:type_name -> fora.v1.CitationFormat
-	67,  // 88: fora.v1.Usage.attribution:type_name -> fora.v1.AttributionDetail
-	105, // 89: fora.v1.UsageReportResponse.ext:type_name -> google.protobuf.Struct
-	45,  // 90: fora.v1.DiscoveryRequest.requester:type_name -> fora.v1.Requester
-	29,  // 91: fora.v1.DiscoveryRequest.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
-	72,  // 92: fora.v1.DiscoveryRequest.constraints:type_name -> fora.v1.RequestConstraints
-	105, // 93: fora.v1.DiscoveryRequest.search_filters:type_name -> google.protobuf.Struct
-	105, // 94: fora.v1.DiscoveryRequest.ext:type_name -> google.protobuf.Struct
-	57,  // 95: fora.v1.RequestConstraints.max_price:type_name -> fora.v1.Cost
-	9,   // 96: fora.v1.RequestConstraints.delivery_preference:type_name -> fora.v1.DeliveryMethod
-	57,  // 97: fora.v1.RequestConstraints.period_budget:type_name -> fora.v1.Cost
-	104, // 98: fora.v1.RequestConstraints.budget_period:type_name -> google.protobuf.Duration
-	104, // 99: fora.v1.RequestConstraints.max_data_age:type_name -> google.protobuf.Duration
-	105, // 100: fora.v1.AccountRegistration.data_schema:type_name -> google.protobuf.Struct
-	16,  // 101: fora.v1.WellKnownManifest.role:type_name -> fora.v1.Role
-	79,  // 102: fora.v1.WellKnownManifest.exchanges:type_name -> fora.v1.AuthorizedExchange
-	78,  // 103: fora.v1.WellKnownManifest.catalog_contributors:type_name -> fora.v1.CatalogContributor
-	7,   // 104: fora.v1.WellKnownManifest.pricing_models_supported:type_name -> fora.v1.PricingModel
-	9,   // 105: fora.v1.WellKnownManifest.delivery_methods_supported:type_name -> fora.v1.DeliveryMethod
-	18,  // 106: fora.v1.WellKnownManifest.supported_auth_methods:type_name -> fora.v1.AuthMethod
-	74,  // 107: fora.v1.WellKnownManifest.account_registration:type_name -> fora.v1.AccountRegistration
-	105, // 108: fora.v1.WellKnownManifest.ext:type_name -> google.protobuf.Struct
-	73,  // 109: fora.v1.WBAFile.keys:type_name -> fora.v1.JsonWebKey
-	106, // 110: fora.v1.KeyRevocationList.as_of:type_name -> google.protobuf.Timestamp
-	17,  // 111: fora.v1.AuthorizedExchange.relationship:type_name -> fora.v1.ProviderRelationship
-	105, // 112: fora.v1.AuthorizedExchange.ext:type_name -> google.protobuf.Struct
-	32,  // 113: fora.v1.DiscoveryResponse.offer_groups:type_name -> fora.v1.OfferGroup
-	1,   // 114: fora.v1.DiscoveryResponse.absence_reason:type_name -> fora.v1.OfferAbsenceReason
-	105, // 115: fora.v1.DiscoveryResponse.ext:type_name -> google.protobuf.Struct
-	55,  // 116: fora.v1.BrokerTransactionResponse.items:type_name -> fora.v1.TransactionResultItem
-	82,  // 117: fora.v1.BrokerTransactionResponse.exchanges:type_name -> fora.v1.ExchangeOutcome
-	57,  // 118: fora.v1.BrokerTransactionResponse.totals:type_name -> fora.v1.Cost
-	105, // 119: fora.v1.BrokerTransactionResponse.ext:type_name -> google.protobuf.Struct
-	34,  // 120: fora.v1.ExchangeOutcome.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
-	19,  // 121: fora.v1.DisputeRequest.reason:type_name -> fora.v1.DisputeReason
-	105, // 122: fora.v1.DisputeRequest.ext:type_name -> google.protobuf.Struct
-	104, // 123: fora.v1.DisputeResponse.estimated_resolution:type_name -> google.protobuf.Duration
-	20,  // 124: fora.v1.DisputeResponse.status:type_name -> fora.v1.DisputeStatus
-	21,  // 125: fora.v1.DisputeResponse.resolution:type_name -> fora.v1.ResolutionType
-	105, // 126: fora.v1.DisputeResponse.ext:type_name -> google.protobuf.Struct
-	105, // 127: fora.v1.DomainVerificationRequest.ext:type_name -> google.protobuf.Struct
-	106, // 128: fora.v1.DomainVerificationChallenge.expires_at:type_name -> google.protobuf.Timestamp
-	105, // 129: fora.v1.DomainVerificationChallenge.ext:type_name -> google.protobuf.Struct
-	105, // 130: fora.v1.DomainVerificationConfirmation.ext:type_name -> google.protobuf.Struct
-	106, // 131: fora.v1.DomainVerificationResult.valid_until:type_name -> google.protobuf.Timestamp
-	105, // 132: fora.v1.DomainVerificationResult.ext:type_name -> google.protobuf.Struct
-	105, // 133: fora.v1.RegisterRequest.registration_data:type_name -> google.protobuf.Struct
-	105, // 134: fora.v1.RegisterRequest.ext:type_name -> google.protobuf.Struct
-	105, // 135: fora.v1.RegisterResponse.ext:type_name -> google.protobuf.Struct
-	105, // 136: fora.v1.GetAccountStatusRequest.ext:type_name -> google.protobuf.Struct
-	57,  // 137: fora.v1.GetAccountStatusResponse.balances:type_name -> fora.v1.Cost
-	105, // 138: fora.v1.GetAccountStatusResponse.ext:type_name -> google.protobuf.Struct
-	103, // 139: fora.v1.ErrorDetail.metadata:type_name -> fora.v1.ErrorDetail.MetadataEntry
-	94,  // 140: fora.v1.ErrorDetail.transaction_denial:type_name -> fora.v1.TransactionDenial
-	95,  // 141: fora.v1.ErrorDetail.catalog_rejection:type_name -> fora.v1.CatalogRejection
-	96,  // 142: fora.v1.ErrorDetail.registration_failure:type_name -> fora.v1.RegistrationFailure
-	98,  // 143: fora.v1.ErrorDetail.dispute_failure:type_name -> fora.v1.DisputeFailure
-	99,  // 144: fora.v1.ErrorDetail.domain_verification_failure:type_name -> fora.v1.DomainVerificationFailure
-	100, // 145: fora.v1.ErrorDetail.retrieval_auth_failure:type_name -> fora.v1.RetrievalAuthFailure
-	101, // 146: fora.v1.ErrorDetail.usage_report_rejection:type_name -> fora.v1.UsageReportRejection
-	102, // 147: fora.v1.ErrorDetail.request_auth_failure:type_name -> fora.v1.RequestAuthFailure
-	13,  // 148: fora.v1.TransactionDenial.reason:type_name -> fora.v1.DenialReason
-	3,   // 149: fora.v1.TransactionDenial.restriction_mismatches:type_name -> fora.v1.RestrictionKind
-	22,  // 150: fora.v1.CatalogRejection.reason:type_name -> fora.v1.CatalogRejectionReason
-	23,  // 151: fora.v1.RegistrationFailure.reason:type_name -> fora.v1.RegistrationFailureReason
-	97,  // 152: fora.v1.RegistrationFailure.field_errors:type_name -> fora.v1.RegistrationFieldError
-	24,  // 153: fora.v1.DisputeFailure.reason:type_name -> fora.v1.DisputeFailureReason
-	25,  // 154: fora.v1.DomainVerificationFailure.reason:type_name -> fora.v1.DomainVerificationFailureReason
-	26,  // 155: fora.v1.RetrievalAuthFailure.reason:type_name -> fora.v1.RetrievalAuthFailureReason
-	27,  // 156: fora.v1.UsageReportRejection.reason:type_name -> fora.v1.UsageReportRejectionReason
-	28,  // 157: fora.v1.RequestAuthFailure.reason:type_name -> fora.v1.RequestAuthFailureReason
-	30,  // 158: fora.v1.ExchangeService.DiscoverResources:input_type -> fora.v1.ResourceQuery
-	52,  // 159: fora.v1.ExchangeService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
-	66,  // 160: fora.v1.ExchangeService.ReportUsage:input_type -> fora.v1.UsageReport
-	83,  // 161: fora.v1.ExchangeService.DisputeTransaction:input_type -> fora.v1.DisputeRequest
-	85,  // 162: fora.v1.ExchangeService.RequestDomainVerification:input_type -> fora.v1.DomainVerificationRequest
-	87,  // 163: fora.v1.ExchangeService.ConfirmDomainVerification:input_type -> fora.v1.DomainVerificationConfirmation
-	89,  // 164: fora.v1.ExchangeService.Register:input_type -> fora.v1.RegisterRequest
-	91,  // 165: fora.v1.ExchangeService.GetAccountStatus:input_type -> fora.v1.GetAccountStatusRequest
-	58,  // 166: fora.v1.CatalogService.PushResources:input_type -> fora.v1.PushResourcesRequest
-	61,  // 167: fora.v1.CatalogService.RemoveResources:input_type -> fora.v1.RemoveResourcesRequest
-	63,  // 168: fora.v1.CatalogService.RefreshCatalog:input_type -> fora.v1.RefreshCatalogRequest
-	71,  // 169: fora.v1.BrokerService.Resolve:input_type -> fora.v1.DiscoveryRequest
-	52,  // 170: fora.v1.BrokerService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
-	31,  // 171: fora.v1.ExchangeService.DiscoverResources:output_type -> fora.v1.ResourceResponse
-	54,  // 172: fora.v1.ExchangeService.ExecuteTransaction:output_type -> fora.v1.TransactionResponse
-	70,  // 173: fora.v1.ExchangeService.ReportUsage:output_type -> fora.v1.UsageReportResponse
-	84,  // 174: fora.v1.ExchangeService.DisputeTransaction:output_type -> fora.v1.DisputeResponse
-	86,  // 175: fora.v1.ExchangeService.RequestDomainVerification:output_type -> fora.v1.DomainVerificationChallenge
-	88,  // 176: fora.v1.ExchangeService.ConfirmDomainVerification:output_type -> fora.v1.DomainVerificationResult
-	90,  // 177: fora.v1.ExchangeService.Register:output_type -> fora.v1.RegisterResponse
-	92,  // 178: fora.v1.ExchangeService.GetAccountStatus:output_type -> fora.v1.GetAccountStatusResponse
-	60,  // 179: fora.v1.CatalogService.PushResources:output_type -> fora.v1.PushResourcesResponse
-	62,  // 180: fora.v1.CatalogService.RemoveResources:output_type -> fora.v1.RemoveResourcesResponse
-	64,  // 181: fora.v1.CatalogService.RefreshCatalog:output_type -> fora.v1.RefreshCatalogResponse
-	80,  // 182: fora.v1.BrokerService.Resolve:output_type -> fora.v1.DiscoveryResponse
-	81,  // 183: fora.v1.BrokerService.ExecuteTransaction:output_type -> fora.v1.BrokerTransactionResponse
-	171, // [171:184] is the sub-list for method output_type
-	158, // [158:171] is the sub-list for method input_type
-	158, // [158:158] is the sub-list for extension type_name
-	158, // [158:158] is the sub-list for extension extendee
-	0,   // [0:158] is the sub-list for field type_name
+	106, // 79: fora.v1.ResourceEntry.ext:type_name -> google.protobuf.Struct
+	106, // 80: fora.v1.PushResourcesResponse.ext:type_name -> google.protobuf.Struct
+	62,  // 81: fora.v1.RemoveResourcesRequest.resources:type_name -> fora.v1.ResourceRef
+	105, // 82: fora.v1.ReportingObligation.window:type_name -> google.protobuf.Duration
+	106, // 83: fora.v1.ReportingObligation.ext:type_name -> google.protobuf.Struct
+	69,  // 84: fora.v1.UsageReport.usage:type_name -> fora.v1.Usage
+	107, // 85: fora.v1.UsageReport.timestamp:type_name -> google.protobuf.Timestamp
+	70,  // 86: fora.v1.UsageReport.assets:type_name -> fora.v1.UsageAsset
+	106, // 87: fora.v1.UsageReport.ext:type_name -> google.protobuf.Struct
+	15,  // 88: fora.v1.AttributionDetail.format:type_name -> fora.v1.CitationFormat
+	68,  // 89: fora.v1.Usage.attribution:type_name -> fora.v1.AttributionDetail
+	106, // 90: fora.v1.UsageReportResponse.ext:type_name -> google.protobuf.Struct
+	45,  // 91: fora.v1.DiscoveryRequest.requester:type_name -> fora.v1.Requester
+	29,  // 92: fora.v1.DiscoveryRequest.acceptable_restrictions:type_name -> fora.v1.AcceptableRestriction
+	73,  // 93: fora.v1.DiscoveryRequest.constraints:type_name -> fora.v1.RequestConstraints
+	106, // 94: fora.v1.DiscoveryRequest.search_filters:type_name -> google.protobuf.Struct
+	106, // 95: fora.v1.DiscoveryRequest.ext:type_name -> google.protobuf.Struct
+	57,  // 96: fora.v1.RequestConstraints.max_price:type_name -> fora.v1.Cost
+	9,   // 97: fora.v1.RequestConstraints.delivery_preference:type_name -> fora.v1.DeliveryMethod
+	57,  // 98: fora.v1.RequestConstraints.period_budget:type_name -> fora.v1.Cost
+	105, // 99: fora.v1.RequestConstraints.budget_period:type_name -> google.protobuf.Duration
+	105, // 100: fora.v1.RequestConstraints.max_data_age:type_name -> google.protobuf.Duration
+	106, // 101: fora.v1.AccountRegistration.data_schema:type_name -> google.protobuf.Struct
+	16,  // 102: fora.v1.WellKnownManifest.role:type_name -> fora.v1.Role
+	80,  // 103: fora.v1.WellKnownManifest.exchanges:type_name -> fora.v1.AuthorizedExchange
+	79,  // 104: fora.v1.WellKnownManifest.catalog_contributors:type_name -> fora.v1.CatalogContributor
+	7,   // 105: fora.v1.WellKnownManifest.pricing_models_supported:type_name -> fora.v1.PricingModel
+	9,   // 106: fora.v1.WellKnownManifest.delivery_methods_supported:type_name -> fora.v1.DeliveryMethod
+	18,  // 107: fora.v1.WellKnownManifest.supported_auth_methods:type_name -> fora.v1.AuthMethod
+	75,  // 108: fora.v1.WellKnownManifest.account_registration:type_name -> fora.v1.AccountRegistration
+	106, // 109: fora.v1.WellKnownManifest.ext:type_name -> google.protobuf.Struct
+	74,  // 110: fora.v1.WBAFile.keys:type_name -> fora.v1.JsonWebKey
+	107, // 111: fora.v1.KeyRevocationList.as_of:type_name -> google.protobuf.Timestamp
+	17,  // 112: fora.v1.AuthorizedExchange.relationship:type_name -> fora.v1.ProviderRelationship
+	106, // 113: fora.v1.AuthorizedExchange.ext:type_name -> google.protobuf.Struct
+	32,  // 114: fora.v1.DiscoveryResponse.offer_groups:type_name -> fora.v1.OfferGroup
+	1,   // 115: fora.v1.DiscoveryResponse.absence_reason:type_name -> fora.v1.OfferAbsenceReason
+	106, // 116: fora.v1.DiscoveryResponse.ext:type_name -> google.protobuf.Struct
+	55,  // 117: fora.v1.BrokerTransactionResponse.items:type_name -> fora.v1.TransactionResultItem
+	83,  // 118: fora.v1.BrokerTransactionResponse.exchanges:type_name -> fora.v1.ExchangeOutcome
+	57,  // 119: fora.v1.BrokerTransactionResponse.totals:type_name -> fora.v1.Cost
+	106, // 120: fora.v1.BrokerTransactionResponse.ext:type_name -> google.protobuf.Struct
+	34,  // 121: fora.v1.ExchangeOutcome.subscription_quota:type_name -> fora.v1.SubscriptionQuotaInfo
+	19,  // 122: fora.v1.DisputeRequest.reason:type_name -> fora.v1.DisputeReason
+	106, // 123: fora.v1.DisputeRequest.ext:type_name -> google.protobuf.Struct
+	105, // 124: fora.v1.DisputeResponse.estimated_resolution:type_name -> google.protobuf.Duration
+	20,  // 125: fora.v1.DisputeResponse.status:type_name -> fora.v1.DisputeStatus
+	21,  // 126: fora.v1.DisputeResponse.resolution:type_name -> fora.v1.ResolutionType
+	106, // 127: fora.v1.DisputeResponse.ext:type_name -> google.protobuf.Struct
+	106, // 128: fora.v1.DomainVerificationRequest.ext:type_name -> google.protobuf.Struct
+	107, // 129: fora.v1.DomainVerificationChallenge.expires_at:type_name -> google.protobuf.Timestamp
+	106, // 130: fora.v1.DomainVerificationChallenge.ext:type_name -> google.protobuf.Struct
+	106, // 131: fora.v1.DomainVerificationConfirmation.ext:type_name -> google.protobuf.Struct
+	107, // 132: fora.v1.DomainVerificationResult.valid_until:type_name -> google.protobuf.Timestamp
+	106, // 133: fora.v1.DomainVerificationResult.ext:type_name -> google.protobuf.Struct
+	106, // 134: fora.v1.RegisterRequest.registration_data:type_name -> google.protobuf.Struct
+	106, // 135: fora.v1.RegisterRequest.ext:type_name -> google.protobuf.Struct
+	106, // 136: fora.v1.RegisterResponse.ext:type_name -> google.protobuf.Struct
+	106, // 137: fora.v1.GetAccountStatusRequest.ext:type_name -> google.protobuf.Struct
+	57,  // 138: fora.v1.GetAccountStatusResponse.balances:type_name -> fora.v1.Cost
+	106, // 139: fora.v1.GetAccountStatusResponse.ext:type_name -> google.protobuf.Struct
+	104, // 140: fora.v1.ErrorDetail.metadata:type_name -> fora.v1.ErrorDetail.MetadataEntry
+	95,  // 141: fora.v1.ErrorDetail.transaction_denial:type_name -> fora.v1.TransactionDenial
+	96,  // 142: fora.v1.ErrorDetail.catalog_rejection:type_name -> fora.v1.CatalogRejection
+	97,  // 143: fora.v1.ErrorDetail.registration_failure:type_name -> fora.v1.RegistrationFailure
+	99,  // 144: fora.v1.ErrorDetail.dispute_failure:type_name -> fora.v1.DisputeFailure
+	100, // 145: fora.v1.ErrorDetail.domain_verification_failure:type_name -> fora.v1.DomainVerificationFailure
+	101, // 146: fora.v1.ErrorDetail.retrieval_auth_failure:type_name -> fora.v1.RetrievalAuthFailure
+	102, // 147: fora.v1.ErrorDetail.usage_report_rejection:type_name -> fora.v1.UsageReportRejection
+	103, // 148: fora.v1.ErrorDetail.request_auth_failure:type_name -> fora.v1.RequestAuthFailure
+	13,  // 149: fora.v1.TransactionDenial.reason:type_name -> fora.v1.DenialReason
+	3,   // 150: fora.v1.TransactionDenial.restriction_mismatches:type_name -> fora.v1.RestrictionKind
+	22,  // 151: fora.v1.CatalogRejection.reason:type_name -> fora.v1.CatalogRejectionReason
+	23,  // 152: fora.v1.RegistrationFailure.reason:type_name -> fora.v1.RegistrationFailureReason
+	98,  // 153: fora.v1.RegistrationFailure.field_errors:type_name -> fora.v1.RegistrationFieldError
+	24,  // 154: fora.v1.DisputeFailure.reason:type_name -> fora.v1.DisputeFailureReason
+	25,  // 155: fora.v1.DomainVerificationFailure.reason:type_name -> fora.v1.DomainVerificationFailureReason
+	26,  // 156: fora.v1.RetrievalAuthFailure.reason:type_name -> fora.v1.RetrievalAuthFailureReason
+	27,  // 157: fora.v1.UsageReportRejection.reason:type_name -> fora.v1.UsageReportRejectionReason
+	28,  // 158: fora.v1.RequestAuthFailure.reason:type_name -> fora.v1.RequestAuthFailureReason
+	30,  // 159: fora.v1.ExchangeService.DiscoverResources:input_type -> fora.v1.ResourceQuery
+	52,  // 160: fora.v1.ExchangeService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
+	67,  // 161: fora.v1.ExchangeService.ReportUsage:input_type -> fora.v1.UsageReport
+	84,  // 162: fora.v1.ExchangeService.DisputeTransaction:input_type -> fora.v1.DisputeRequest
+	86,  // 163: fora.v1.ExchangeService.RequestDomainVerification:input_type -> fora.v1.DomainVerificationRequest
+	88,  // 164: fora.v1.ExchangeService.ConfirmDomainVerification:input_type -> fora.v1.DomainVerificationConfirmation
+	90,  // 165: fora.v1.ExchangeService.Register:input_type -> fora.v1.RegisterRequest
+	92,  // 166: fora.v1.ExchangeService.GetAccountStatus:input_type -> fora.v1.GetAccountStatusRequest
+	58,  // 167: fora.v1.CatalogService.PushResources:input_type -> fora.v1.PushResourcesRequest
+	61,  // 168: fora.v1.CatalogService.RemoveResources:input_type -> fora.v1.RemoveResourcesRequest
+	64,  // 169: fora.v1.CatalogService.RefreshCatalog:input_type -> fora.v1.RefreshCatalogRequest
+	72,  // 170: fora.v1.BrokerService.Resolve:input_type -> fora.v1.DiscoveryRequest
+	52,  // 171: fora.v1.BrokerService.ExecuteTransaction:input_type -> fora.v1.TransactionRequest
+	31,  // 172: fora.v1.ExchangeService.DiscoverResources:output_type -> fora.v1.ResourceResponse
+	54,  // 173: fora.v1.ExchangeService.ExecuteTransaction:output_type -> fora.v1.TransactionResponse
+	71,  // 174: fora.v1.ExchangeService.ReportUsage:output_type -> fora.v1.UsageReportResponse
+	85,  // 175: fora.v1.ExchangeService.DisputeTransaction:output_type -> fora.v1.DisputeResponse
+	87,  // 176: fora.v1.ExchangeService.RequestDomainVerification:output_type -> fora.v1.DomainVerificationChallenge
+	89,  // 177: fora.v1.ExchangeService.ConfirmDomainVerification:output_type -> fora.v1.DomainVerificationResult
+	91,  // 178: fora.v1.ExchangeService.Register:output_type -> fora.v1.RegisterResponse
+	93,  // 179: fora.v1.ExchangeService.GetAccountStatus:output_type -> fora.v1.GetAccountStatusResponse
+	60,  // 180: fora.v1.CatalogService.PushResources:output_type -> fora.v1.PushResourcesResponse
+	63,  // 181: fora.v1.CatalogService.RemoveResources:output_type -> fora.v1.RemoveResourcesResponse
+	65,  // 182: fora.v1.CatalogService.RefreshCatalog:output_type -> fora.v1.RefreshCatalogResponse
+	81,  // 183: fora.v1.BrokerService.Resolve:output_type -> fora.v1.DiscoveryResponse
+	82,  // 184: fora.v1.BrokerService.ExecuteTransaction:output_type -> fora.v1.BrokerTransactionResponse
+	172, // [172:185] is the sub-list for method output_type
+	159, // [159:172] is the sub-list for method input_type
+	159, // [159:159] is the sub-list for extension type_name
+	159, // [159:159] is the sub-list for extension extendee
+	0,   // [0:159] is the sub-list for field type_name
 }
 
 func init() { file_fora_v1_fora_proto_init() }
@@ -12086,23 +12165,23 @@ func file_fora_v1_fora_proto_init() {
 	file_fora_v1_fora_proto_msgTypes[27].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[28].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[30].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[36].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[38].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[37].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[39].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[40].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[42].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[41].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[43].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[46].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[44].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[47].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[51].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[54].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[48].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[52].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[55].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[56].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[58].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[57].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[59].OneofWrappers = []any{}
 	file_fora_v1_fora_proto_msgTypes[60].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[63].OneofWrappers = []any{}
-	file_fora_v1_fora_proto_msgTypes[64].OneofWrappers = []any{
+	file_fora_v1_fora_proto_msgTypes[61].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[64].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[65].OneofWrappers = []any{
 		(*ErrorDetail_TransactionDenial)(nil),
 		(*ErrorDetail_CatalogRejection)(nil),
 		(*ErrorDetail_RegistrationFailure)(nil),
@@ -12112,14 +12191,14 @@ func file_fora_v1_fora_proto_init() {
 		(*ErrorDetail_UsageReportRejection)(nil),
 		(*ErrorDetail_RequestAuthFailure)(nil),
 	}
-	file_fora_v1_fora_proto_msgTypes[65].OneofWrappers = []any{}
+	file_fora_v1_fora_proto_msgTypes[66].OneofWrappers = []any{}
 	type x struct{}
 	out := protoimpl.TypeBuilder{
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_fora_v1_fora_proto_rawDesc), len(file_fora_v1_fora_proto_rawDesc)),
 			NumEnums:      29,
-			NumMessages:   75,
+			NumMessages:   76,
 			NumExtensions: 0,
 			NumServices:   3,
 		},
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 1410f363..3ebd7528 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -450,7 +450,12 @@ func (UnimplementedExchangeServiceHandler) GetAccountStatus(context.Context, *co
 type CatalogServiceClient interface {
 	// Push or update resource entries in the Exchange catalog.
 	PushResources(context.Context, *connect.Request[v1.PushResourcesRequest]) (*connect.Response[v1.PushResourcesResponse], error)
-	// Remove resource entries.
+	// Remove resource entries. The request names each resource the way a push
+	// does, by domain and path (RemoveResourcesRequest.resources). For each one
+	// the Exchange resolves /.well-known/fora.json from its domain and checks
+	// that the signer of the request is authorized to push for that domain,
+	// exactly as for PushResources, and refuses the request as a push is refused
+	// when it is not. The caller is the party that signs the request.
 	RemoveResources(context.Context, *connect.Request[v1.RemoveResourcesRequest]) (*connect.Response[v1.RemoveResourcesResponse], error)
 	// Trigger a full catalog refresh from configured sources.
 	RefreshCatalog(context.Context, *connect.Request[v1.RefreshCatalogRequest]) (*connect.Response[v1.RefreshCatalogResponse], error)
@@ -514,7 +519,12 @@ func (c *catalogServiceClient) RefreshCatalog(ctx context.Context, req *connect.
 type CatalogServiceHandler interface {
 	// Push or update resource entries in the Exchange catalog.
 	PushResources(context.Context, *connect.Request[v1.PushResourcesRequest]) (*connect.Response[v1.PushResourcesResponse], error)
-	// Remove resource entries.
+	// Remove resource entries. The request names each resource the way a push
+	// does, by domain and path (RemoveResourcesRequest.resources). For each one
+	// the Exchange resolves /.well-known/fora.json from its domain and checks
+	// that the signer of the request is authorized to push for that domain,
+	// exactly as for PushResources, and refuses the request as a push is refused
+	// when it is not. The caller is the party that signs the request.
 	RemoveResources(context.Context, *connect.Request[v1.RemoveResourcesRequest]) (*connect.Response[v1.RemoveResourcesResponse], error)
 	// Trigger a full catalog refresh from configured sources.
 	RefreshCatalog(context.Context, *connect.Request[v1.RefreshCatalogRequest]) (*connect.Response[v1.RefreshCatalogResponse], error)
diff --git a/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json
index 337c4f8c..6fce9631 100644
--- a/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.json
@@ -1,4 +1,30 @@
 {
+  "$defs": {
+    "fora.v1.ResourceRef": {
+      "description": "ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.",
+      "properties": {
+        "domain": {
+          "description": "The bare host the resource lives on, as ResourceEntry.domain.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "path": {
+          "description": "The resource's absolute path, as ResourceEntry.path.",
+          "maxLength": 2048,
+          "minLength": 1,
+          "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "domain",
+        "path"
+      ],
+      "title": "Resource Ref",
+      "type": "object"
+    }
+  },
   "$id": "fora.v1.RemoveResourcesRequest.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "properties": {
@@ -9,7 +35,7 @@
       "type": "string"
     },
     "paths": {
-      "description": "Paths to remove — the absolute-path shape ResourceEntry.path carries, at\n least one and at most 256, the same batch bound PushResourcesRequest.entries\n carries and for the same reason.",
+      "description": "DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot\n tell whose resource it is or whether the signer may remove it. Name each\n resource in `resources` instead; a request that carries only paths has no\n resources and is refused as malformed. The field and its item rules are\n retained because removing them would break the v1 wire contract.",
       "items": {
         "maxLength": 2048,
         "minLength": 1,
@@ -17,6 +43,14 @@
         "type": "string"
       },
       "maxItems": 256,
+      "type": "array"
+    },
+    "resources": {
+      "description": "The resources to remove, each named by the domain and path a push names it\n by — at least one and at most 256, the same batch bound\n PushResourcesRequest.entries carries and for the same reason.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceRef"
+      },
+      "maxItems": 256,
       "minItems": 1,
       "type": "array"
     },
diff --git a/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json
index a33e63a8..eb61f870 100644
--- a/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.RemoveResourcesRequest.schema.strict.json
@@ -1,4 +1,31 @@
 {
+  "$defs": {
+    "fora.v1.ResourceRef": {
+      "additionalProperties": false,
+      "description": "ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.",
+      "properties": {
+        "domain": {
+          "description": "The bare host the resource lives on, as ResourceEntry.domain.",
+          "maxLength": 260,
+          "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+          "type": "string"
+        },
+        "path": {
+          "description": "The resource's absolute path, as ResourceEntry.path.",
+          "maxLength": 2048,
+          "minLength": 1,
+          "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+          "type": "string"
+        }
+      },
+      "required": [
+        "domain",
+        "path"
+      ],
+      "title": "Resource Ref",
+      "type": "object"
+    }
+  },
   "$id": "fora.v1.RemoveResourcesRequest.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
@@ -10,7 +37,7 @@
       "type": "string"
     },
     "paths": {
-      "description": "Paths to remove — the absolute-path shape ResourceEntry.path carries, at\n least one and at most 256, the same batch bound PushResourcesRequest.entries\n carries and for the same reason.",
+      "description": "DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot\n tell whose resource it is or whether the signer may remove it. Name each\n resource in `resources` instead; a request that carries only paths has no\n resources and is refused as malformed. The field and its item rules are\n retained because removing them would break the v1 wire contract.",
       "items": {
         "maxLength": 2048,
         "minLength": 1,
@@ -18,6 +45,14 @@
         "type": "string"
       },
       "maxItems": 256,
+      "type": "array"
+    },
+    "resources": {
+      "description": "The resources to remove, each named by the domain and path a push names it\n by — at least one and at most 256, the same batch bound\n PushResourcesRequest.entries carries and for the same reason.",
+      "items": {
+        "$ref": "#/$defs/fora.v1.ResourceRef"
+      },
+      "maxItems": 256,
       "minItems": 1,
       "type": "array"
     },
diff --git a/gen/jsonschema/fora.v1.ResourceRef.schema.json b/gen/jsonschema/fora.v1.ResourceRef.schema.json
new file mode 100644
index 00000000..401c98fb
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceRef.schema.json
@@ -0,0 +1,26 @@
+{
+  "$id": "fora.v1.ResourceRef.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.",
+  "properties": {
+    "domain": {
+      "description": "The bare host the resource lives on, as ResourceEntry.domain.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "path": {
+      "description": "The resource's absolute path, as ResourceEntry.path.",
+      "maxLength": 2048,
+      "minLength": 1,
+      "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+      "type": "string"
+    }
+  },
+  "required": [
+    "domain",
+    "path"
+  ],
+  "title": "Resource Ref",
+  "type": "object"
+}
diff --git a/gen/jsonschema/fora.v1.ResourceRef.schema.strict.json b/gen/jsonschema/fora.v1.ResourceRef.schema.strict.json
new file mode 100644
index 00000000..bb4a8b84
--- /dev/null
+++ b/gen/jsonschema/fora.v1.ResourceRef.schema.strict.json
@@ -0,0 +1,27 @@
+{
+  "$id": "fora.v1.ResourceRef.schema.strict.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "description": "ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.",
+  "properties": {
+    "domain": {
+      "description": "The bare host the resource lives on, as ResourceEntry.domain.",
+      "maxLength": 260,
+      "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
+      "type": "string"
+    },
+    "path": {
+      "description": "The resource's absolute path, as ResourceEntry.path.",
+      "maxLength": 2048,
+      "minLength": 1,
+      "pattern": "^/[^?#\\x00-\\x20\\x7f]*$",
+      "type": "string"
+    }
+  },
+  "required": [
+    "domain",
+    "path"
+  ],
+  "title": "Resource Ref",
+  "type": "object"
+}
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 7d2aefce..cdaf7596 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -774,30 +774,6 @@ class RegistrationFieldError(WireModel):
     )
 
 
-class RemoveResourcesRequest(WireModel):
-    exchange: constr(
-        pattern=r'^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$',
-        max_length=260,
-    ) = Field(
-        ...,
-        description='REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n "exchange.example" or "exchange.example:8081"). See "Request recipient" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.',
-    )
-    paths: (
-        list[constr(pattern=r'^/[^?#\x00-\x20\x7f]*$', min_length=1, max_length=2048)]
-        | None
-    ) = Field(
-        None,
-        description='Paths to remove — the absolute-path shape ResourceEntry.path carries, at\n least one and at most 256, the same batch bound PushResourcesRequest.entries\n carries and for the same reason.',
-        max_length=256,
-        min_length=1,
-    )
-    tenant_id: str | None = Field('', description='Tenant identifier')
-    ver: str | None = Field(
-        '',
-        description='FORA protocol version — "1.0". Stamped by the sender from a single\n constant; advisory on receive. See "Protocol version" in the file header.',
-    )
-
-
 class RemoveResourcesResponse(WireModel):
     removed: conint(ge=-2147483648, le=2147483647) | None = Field(
         None, description='Number of entries removed'
@@ -972,6 +948,18 @@ class ResourceMutability(Enum):
     RESOURCE_MUTABILITY_LIVE = 'RESOURCE_MUTABILITY_LIVE'
 
 
+class ResourceRef(WireModel):
+    domain: constr(
+        pattern=r'^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$',
+        max_length=260,
+    ) = Field(
+        ..., description='The bare host the resource lives on, as ResourceEntry.domain.'
+    )
+    path: constr(pattern=r'^/[^?#\x00-\x20\x7f]*$', min_length=1, max_length=2048) = (
+        Field(..., description="The resource's absolute path, as ResourceEntry.path.")
+    )
+
+
 class RestrictionKind(Enum):
     RESTRICTION_KIND_FUNCTION = 'RESTRICTION_KIND_FUNCTION'
     RESTRICTION_KIND_GEOGRAPHY = 'RESTRICTION_KIND_GEOGRAPHY'
@@ -1379,6 +1367,35 @@ class RegistrationFailure(WireModel):
     )
 
 
+class RemoveResourcesRequest(WireModel):
+    exchange: constr(
+        pattern=r'^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$',
+        max_length=260,
+    ) = Field(
+        ...,
+        description='REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n "exchange.example" or "exchange.example:8081"). See "Request recipient" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself.',
+    )
+    paths: (
+        list[constr(pattern=r'^/[^?#\x00-\x20\x7f]*$', min_length=1, max_length=2048)]
+        | None
+    ) = Field(
+        None,
+        description='DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot\n tell whose resource it is or whether the signer may remove it. Name each\n resource in `resources` instead; a request that carries only paths has no\n resources and is refused as malformed. The field and its item rules are\n retained because removing them would break the v1 wire contract.',
+        max_length=256,
+    )
+    resources: list[ResourceRef] | None = Field(
+        None,
+        description='The resources to remove, each named by the domain and path a push names it\n by — at least one and at most 256, the same batch bound\n PushResourcesRequest.entries carries and for the same reason.',
+        max_length=256,
+        min_length=1,
+    )
+    tenant_id: str | None = Field('', description='Tenant identifier')
+    ver: str | None = Field(
+        '',
+        description='FORA protocol version — "1.0". Stamped by the sender from a single\n constant; advisory on receive. See "Protocol version" in the file header.',
+    )
+
+
 class RequestAuthFailure(WireModel):
     reason: RequestAuthFailureReason = Field(
         ..., description='The failure reason (defined-only, non-zero)'
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 63e892a3..c01cc104 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -140,7 +140,7 @@ export const RegistrationFailureReasonSchema = wire(z.enum(["REGISTRATION_FAILUR
 
 export const RegistrationFieldErrorSchema = wire(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema)."));
 
-export const RemoveResourcesRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "paths": z.array(z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048)).min(1).max(256).describe("Paths to remove — the absolute-path shape ResourceEntry.path carries, at\n least one and at most 256, the same batch bound PushResourcesRequest.entries\n carries and for the same reason.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const RemoveResourcesRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "paths": z.array(z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048)).max(256).describe("DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot\n tell whose resource it is or whether the signer may remove it. Name each\n resource in `resources` instead; a request that carries only paths has no\n resources and is refused as malformed. The field and its item rules are\n retained because removing them would break the v1 wire contract.").optional(), "resources": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")).min(1).max(256).describe("The resources to remove, each named by the domain and path a push names it\n by — at least one and at most 256, the same batch bound\n PushResourcesRequest.entries carries and for the same reason.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const RemoveResourcesResponseSchema = wire(z.object({ "removed": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries removed").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
@@ -170,6 +170,8 @@ export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC
 
 export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
+export const ResourceRefSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI."));
+
 export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
 export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index ca9d9a08..506f718c 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,18 @@
 
 ## Unreleased
 
+**RemoveResources names each resource by domain and path (additive field and message;
+`RemoveResourcesRequest.paths` deprecated).** A bare path names no domain, so the Exchange
+could not tell whose resource it was or whether the signer may remove it. The new
+`RemoveResourcesRequest.resources` (field 5, 1 to 256 items) carries `ResourceRef`
+items, each a `domain` and a `path` under `ResourceEntry`'s rules. For each item the
+Exchange resolves `/.well-known/fora.json` from its domain and checks that the request's
+signer is authorized to push for that domain, exactly as for a push; the caller is the
+party that signs. `paths` is deprecated and ignored, and loses its `min_items` rule, so a
+request carrying only `paths` is refused by the `min_items` rule on `resources`. The Go
+SDK's client comment and tests, the TypeScript raw-body test and the conformance cases
+use `resources`; the reference and multi-tenant pages say the same.
+
 **A mis-addressed request is refused before processing, for every RPC (comments only).**
 "Request recipient" says the recipient applies the `exchange` check to every RPC that
 carries it, before processing the request, and never answers it with an RPC's own reason
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 9715097d..dac16eab 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2828,7 +2828,12 @@ enum IngestionSource {
 service CatalogService {
   // Push or update resource entries in the Exchange catalog.
   rpc PushResources(PushResourcesRequest) returns (PushResourcesResponse);
-  // Remove resource entries.
+  // Remove resource entries. The request names each resource the way a push
+  // does, by domain and path (RemoveResourcesRequest.resources). For each one
+  // the Exchange resolves /.well-known/fora.json from its domain and checks
+  // that the signer of the request is authorized to push for that domain,
+  // exactly as for PushResources, and refuses the request as a push is refused
+  // when it is not. The caller is the party that signs the request.
   rpc RemoveResources(RemoveResourcesRequest) returns (RemoveResourcesResponse);
   // Trigger a full catalog refresh from configured sources.
   rpc RefreshCatalog(RefreshCatalogRequest) returns (RefreshCatalogResponse);
@@ -3170,11 +3175,13 @@ message RemoveResourcesRequest {
   string ver = 1;
   // Tenant identifier
   string tenant_id = 2;
-  // Paths to remove — the absolute-path shape ResourceEntry.path carries, at
-  // least one and at most 256, the same batch bound PushResourcesRequest.entries
-  // carries and for the same reason.
+  // DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot
+  // tell whose resource it is or whether the signer may remove it. Name each
+  // resource in `resources` instead; a request that carries only paths has no
+  // resources and is refused as malformed. The field and its item rules are
+  // retained because removing them would break the v1 wire contract.
   repeated string paths = 3 [
-    (buf.validate.field).repeated.min_items = 1,
+    deprecated = true,
     (buf.validate.field).repeated.max_items = 256,
     (buf.validate.field).repeated.items.string.min_len = 1,
     (buf.validate.field).repeated.items.string.max_len = 2048,
@@ -3191,6 +3198,35 @@ message RemoveResourcesRequest {
       pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"
     }
   ];
+
+  // The resources to remove, each named by the domain and path a push names it
+  // by — at least one and at most 256, the same batch bound
+  // PushResourcesRequest.entries carries and for the same reason.
+  repeated ResourceRef resources = 5 [
+    (buf.validate.field).repeated.min_items = 1,
+    (buf.validate.field).repeated.max_items = 256
+  ];
+}
+
+// ResourceRef — one catalog resource, named the way PushResources names it:
+// by ResourceEntry.domain and ResourceEntry.path, under the same rules, which
+// together form the catalog URI.
+message ResourceRef {
+  // The bare host the resource lives on, as ResourceEntry.domain.
+  string domain = 1 [
+    (buf.validate.field).string = {
+      max_len: 260,
+      pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"
+    }
+  ];
+  // The resource's absolute path, as ResourceEntry.path.
+  string path = 2 [
+    (buf.validate.field).string = {
+      min_len: 1,
+      max_len: 2048,
+      pattern: "^/[^?#\\x00-\\x20\\x7f]*$"
+    }
+  ];
 }
 
 message RemoveResourcesResponse {
diff --git a/sdk/go/connect/catalog.go b/sdk/go/connect/catalog.go
index c4956a52..e246b9fe 100644
--- a/sdk/go/connect/catalog.go
+++ b/sdk/go/connect/catalog.go
@@ -106,7 +106,8 @@ func (c *CatalogClient) PushResources(ctx context.Context, req *forav1.PushResou
 	return resp.Msg, nil
 }
 
-// RemoveResources removes the catalog entries the request's paths name. Same
+// RemoveResources removes the catalog entries the request's resources name, each
+// by domain and path as a push names it. Same
 // envelope rule as PushResources: `ver` filled when empty, no idempotency key,
 // `exchange` required and refused locally when it is not a bare domain.
 func (c *CatalogClient) RemoveResources(ctx context.Context, req *forav1.RemoveResourcesRequest, opts ...CallOption) (*forav1.RemoveResourcesResponse, error) {
diff --git a/sdk/go/connect/catalog_test.go b/sdk/go/connect/catalog_test.go
index 6b68870d..b34c2157 100644
--- a/sdk/go/connect/catalog_test.go
+++ b/sdk/go/connect/catalog_test.go
@@ -146,7 +146,8 @@ func TestCatalog_RemoveAndRefreshKeepTheCallersVersion(t *testing.T) {
 	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
 
 	if _, err := client.RemoveResources(context.Background(), &forav1.RemoveResourcesRequest{
-		Exchange: "exchange.test", TenantId: "tenant-1", Paths: []string{"/x"}, Ver: "9.9",
+		Exchange: "exchange.test", TenantId: "tenant-1", Ver: "9.9",
+		Resources: []*forav1.ResourceRef{{Domain: "publisher.test", Path: "/x"}},
 	}); err != nil {
 		t.Fatalf("RemoveResources: %v", err)
 	}
@@ -197,7 +198,9 @@ func TestCatalog_RefusesAnUnaddressedRequestBeforeSending(t *testing.T) {
 			t.Errorf("%s: error = %v, want a CallNotSent CallError", name, err)
 		}
 	}
-	if _, err := client.RemoveResources(context.Background(), &forav1.RemoveResourcesRequest{Paths: []string{"/x"}}); err == nil {
+	if _, err := client.RemoveResources(context.Background(), &forav1.RemoveResourcesRequest{
+		Resources: []*forav1.ResourceRef{{Domain: "publisher.test", Path: "/x"}},
+	}); err == nil {
 		t.Error("remove with no exchange must be refused")
 	}
 	if _, err := client.RefreshCatalog(context.Background(), nil); err == nil {
diff --git a/sdk/ts/tests/raw-body.test.ts b/sdk/ts/tests/raw-body.test.ts
index 846b4f2a..c119f9d8 100644
--- a/sdk/ts/tests/raw-body.test.ts
+++ b/sdk/ts/tests/raw-body.test.ts
@@ -52,8 +52,11 @@ describe("RawBody", () => {
 		const { peer, options } = await fixture(ok({}));
 		const catalog = createCatalogClient("https://exchange.test", options);
 		await catalog.pushResources(new RawBody("not json at all"));
-		await catalog.removeResources(new RawBody({ paths: ["/x"] }));
-		expect(peer.seen.map((s) => s.body)).toEqual(["not json at all", '{"paths":["/x"]}']);
+		await catalog.removeResources(new RawBody({ resources: [{ domain: "publisher.test", path: "/x" }] }));
+		expect(peer.seen.map((s) => s.body)).toEqual([
+			"not json at all",
+			'{"resources":[{"domain":"publisher.test","path":"/x"}]}',
+		]);
 	});
 
 	it("skips the validation and the local refusals a built request gets", async () => {
diff --git a/website/src/content/docs/components/exchange/multi-tenant.mdx b/website/src/content/docs/components/exchange/multi-tenant.mdx
index b4569704..f38d7c8a 100644
--- a/website/src/content/docs/components/exchange/multi-tenant.mdx
+++ b/website/src/content/docs/components/exchange/multi-tenant.mdx
@@ -237,6 +237,6 @@ The Exchange exposes `CatalogService` (PushResources, RemoveResources, RefreshCa
    - Authorized `tenant_id` set — which providers this caller can push for
    - Caller type — "cms_plugin", "intelligence_provider", "syndicator"
 
-This prevents unauthorized parties from injecting or modifying catalog entries. The same authentication mechanism applies to RemoveResources and RefreshCatalog calls.
+This prevents unauthorized parties from injecting or modifying catalog entries. The same authentication mechanism applies to RemoveResources and RefreshCatalog calls. RemoveResources names each resource by domain and path, as a push does, and the Exchange checks that the signer is authorized for each item's domain exactly as for a push.
 
 An Exchange implemented on the Go SDK mounts the service through `connectserver.NewCatalogServiceHandler`, which composes the same request-id · verify · validate · error-detail stack as the Exchange and Broker bindings: an unsigned push never reaches the handler, the wire tier (the `ResourceEntry` envelope rules and the `LicenseTerm` rules) refuses a malformed entry before it **on a mount that passes `connectserver.WithValidation(connect.ValidationStrict)`** — that option composes protovalidate and is not the default, so a deployment relying on the boundary rules names it explicitly — and the proven signer is available to the handler from the request context. Steps 2 and 3 above — contributor authorisation and tenant binding — and the ingest-tier term checks (`helpers.ValidateResourceEntry`) are the handler implementation's job.
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index d53f38cd..9e7cd797 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,18 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**RemoveResources names each resource by domain and path (additive field and message;
+`RemoveResourcesRequest.paths` deprecated).** A bare path names no domain, so the Exchange
+could not tell whose resource it was or whether the signer may remove it. The new
+`RemoveResourcesRequest.resources` (field 5, 1 to 256 items) carries `ResourceRef`
+items, each a `domain` and a `path` under `ResourceEntry`'s rules. For each item the
+Exchange resolves `/.well-known/fora.json` from its domain and checks that the request's
+signer is authorized to push for that domain, exactly as for a push; the caller is the
+party that signs. `paths` is deprecated and ignored, and loses its `min_items` rule, so a
+request carrying only `paths` is refused by the `min_items` rule on `resources`. The Go
+SDK's client comment and tests, the TypeScript raw-body test and the conformance cases
+use `resources`; the reference and multi-tenant pages say the same.
+
 **A mis-addressed request is refused before processing, for every RPC (comments only).**
 "Request recipient" says the recipient applies the `exchange` check to every RPC that
 carries it, before processing the request, and never answers it with an RPC's own reason
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 188eb5e9..d1009038 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -457,10 +457,16 @@ A single resource catalog entry. The envelope carries its own wire rules, so an
 
 ### RemoveResourcesRequest
 
-`paths` carries at least one path and at most 256 — the same batch bound `PushResourcesRequest.entries` carries — each in the same absolute-path shape `ResourceEntry.path` carries.
+`resources` names at least one resource and at most 256 — the same batch bound `PushResourcesRequest.entries` carries — each by the domain and path a push names it by (`ResourceRef`). For each one the Exchange resolves `/.well-known/fora.json` from its domain and checks that the request's signer is authorized to push for that domain, exactly as for a push; the caller is whoever signs. `paths` is deprecated and ignored: a bare path names no domain, and a request carrying only `paths` has no `resources` and is refused as malformed.
 
 ::proto-message{name=RemoveResourcesRequest}
 
+### ResourceRef
+
+One catalog resource, named the way a push names it: `ResourceEntry.domain` and `ResourceEntry.path`, under the same rules.
+
+::proto-message{name=ResourceRef}
+
 ### RemoveResourcesResponse
 
 ::proto-message{name=RemoveResourcesResponse}

From 040748ccd42ab0e4f917b2d467373adcb27a4e7b Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:10:51 -0400
Subject: [PATCH 099/164] Describe restrictions as declared terms the Exchange
 never enforces in the protocol

The licensing-core header said the machine restrictions, quotas and
obligations "are enforced by the Exchange", the ENUMERATED and
REFERENCE_ONLY comments said they "are enforced", and Quota said it
"gates whether this LicenseTerm remains valid". Restrictions are
declared terms the parties agree to when the agent accepts the offer;
the Exchange never enforces one. The header, both TermSemantics
comments, Restriction and Quota now say that, without naming an
enforcing party.

DENIAL_REASON_RESTRICTION_NOT_SATISFIED is deprecated and never sent,
and TransactionResultItem.restriction_mismatches is deprecated and
never set, following the scope-shortfall precedent; their numbers are
retained and not reused. TransactionDenial's comments follow.

The licensing-terms, transaction-flow, reference and C2PA pages drop
the enforcement claims; the transaction-flow denial example uses
OFFER_EXPIRED; the medical-imaging walkthrough records the agent's DUA
with the transaction instead of denying the item with a restriction
reason. Both changelogs record the change.

Comments and docs only; the generated code, the descriptor, the SDK
types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 677541 -> 678088 bytes
 gen/go/fora/v1/fora.pb.go                     |  73 +++++++++++-------
 ...a.v1.BrokerTransactionResponse.schema.json |   6 +-
 ...okerTransactionResponse.schema.strict.json |   6 +-
 .../fora.v1.DiscoveryResponse.schema.json     |   8 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |   8 +-
 .../fora.v1.ErrorDetail.schema.json           |   4 +-
 .../fora.v1.ErrorDetail.schema.strict.json    |   4 +-
 .../fora.v1.LicenseTerm.schema.json           |   8 +-
 .../fora.v1.LicenseTerm.schema.strict.json    |   8 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |   8 +-
 .../fora.v1.Offer.schema.strict.json          |   8 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |   8 +-
 .../fora.v1.OfferGroup.schema.strict.json     |   8 +-
 .../fora.v1.PushResourcesRequest.schema.json  |   8 +-
 ...v1.PushResourcesRequest.schema.strict.json |   8 +-
 gen/jsonschema/fora.v1.Quota.schema.json      |   4 +-
 .../fora.v1.Quota.schema.strict.json          |   4 +-
 .../fora.v1.ResourceEntry.schema.json         |   8 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |   8 +-
 .../fora.v1.ResourceResponse.schema.json      |   8 +-
 ...ora.v1.ResourceResponse.schema.strict.json |   8 +-
 .../fora.v1.Restriction.schema.json           |   4 +-
 .../fora.v1.Restriction.schema.strict.json    |   4 +-
 .../fora.v1.TransactionDenial.schema.json     |   4 +-
 ...ra.v1.TransactionDenial.schema.strict.json |   4 +-
 .../fora.v1.TransactionItem.schema.json       |   8 +-
 ...fora.v1.TransactionItem.schema.strict.json |   8 +-
 .../fora.v1.TransactionRequest.schema.json    |   8 +-
 ...a.v1.TransactionRequest.schema.strict.json |   8 +-
 .../fora.v1.TransactionResponse.schema.json   |   6 +-
 ....v1.TransactionResponse.schema.strict.json |   6 +-
 .../fora.v1.TransactionResultItem.schema.json |   6 +-
 ...1.TransactionResultItem.schema.strict.json |   6 +-
 .../fora.v1.UpstreamRefusal.schema.json       |   4 +-
 ...fora.v1.UpstreamRefusal.schema.strict.json |   4 +-
 gen/python/wire/models.py                     |   6 +-
 gen/ts/wire/schemas.ts                        |  34 ++++----
 proto/CHANGELOG.md                            |  12 +++
 proto/fora/v1/fora.proto                      |  59 ++++++++------
 .../src/content/docs/protocol/ext-c2pa.mdx    |   2 +-
 .../content/docs/protocol/licensing-terms.mdx |   4 +-
 .../docs/protocol/transaction-flow.mdx        |   5 +-
 .../protocol/walkthrough-medical-imaging.mdx  |  29 ++-----
 .../src/content/docs/reference/changelog.mdx  |  12 +++
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 46 files changed, 247 insertions(+), 211 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 8ace498cb2b40061f922230488502d1f0cef0564..a4c80bc4ec59d1b96cf1d556fa45dc2eecae99a1 100644
GIT binary patch
delta 41398
zcmbTfcbrv4(gr;D%$a+_+?ku_rs1ZEgqZ;(2{U9}(;C^J?#iOhuI#Izz~+5-kQ^i<
zEm6{l1O-VKkSq!k6ct?%mMDWD5>-%9zNfnTa9F?Z_a*+|cdJg<)7910)z#sgsei5U
zjyD<)9O4+F49Om%uFM(rkn-lJ%nJ|Y461Of&$yq@8RE!($Shzf5B^&+C@0Crzmrp#
z`D{>*_ZN=M?3;h*Y;{zzwfl3Ls!>IEWIo%U^L^NSWsld?d^wS<1;bBY%*mX-=v?Y_
z%?g=Hj^cB^Xl6}i^RGI4C>smdoCW%QnLEFA{;%_wmB}7Y)&4Ent6!~|{OP|ZYoB-;
z51vd8sO|Sm|KxzDYLn0Q>NlWwZU1DiKlH1uO%CXr{L53defX1Jf2i#<Ald7QCu*M^
z(4UR_F{dD>@9%$K+b?tVx^uT9=keZso)m0NVz8qQt-S32T<bHvo_MNvpW2FkwY{F~
z_4w0&OFmWGuQpSqXnP#K7tI`>+00aP6eY{2PBE2YHpiotGzID4bfKAN=Fn4x$aImp
zPT{5Tl%aHbvBDlxwaK@)PyYXJ9B(df8_Ukoep3wKn5@=;Y8h3#Et^*h@+GQvRc3IG
z*3sc1E8J{HvO$P_=G1<ZM7e}SQMedT)~M*bY@c(!nRPPrJ56h=6wEhs0_H{s(6h+|
z^`=skUg}_phm9E9VQ4R>!HIJmJO@s_nM#|JM0tnLxzJR0vXQ1Xu@1k4*4YYaz0iy&
zOgC%?5;ZO~lRM39(_`wKv2R$mPhDiHx0qhj;G7SKWuyAVrkcE&1v4)()uNkOz<$kC
zOKxTX>-D;y@Km3=^e3zwpStWPU{0U<hN-4+2Ge}%a#L+_GfVfWD}JJw;Zs+dYMEWC
zZdkVIQ&*X4xy>7vo$FIqn`-IJESFEs{6w)lpStEJrSg61+W*2ImhJYb>wcoX$EUt&
zs>K9fXIatfQ`ehn>gFnaK6S%S@clk@<4?c>K6TSiY!URSn}5=x0-w6&X84bJzrAJF
zsjY5Q2_8Cbo2lM<GYcK}wy9R#%tFV#W2zl)W})A<-)w$hq2G4=L=gS<u8A7!g(D&!
zsqdM}M{HW2Hop$P#IVg)$n)Pb6G`cb3Ow;WGxgC8PgJtGC%#Wu!V{Hj;fZ@qHGVS-
z4f?=T6F0Mf{UNzUYd&}Y{fVg@H&wPFUu#*1-<A^DDENu3L^dy(I(|cmY@x)zO|??O
zXG<ma+b+OaP~w2?JDdgVPk&MhRy~N}(DY_7nDvm|lUx#J{m;!+ik>`Ts%>rvijF*L
zsx>#WP~|aG?PPZ2?FRB^rqU?gI@#?{{Ri}YCfVz+z591yU%Ith5_k}nu|tK_XJ)L>
zd;lRx^*KK`v(B+j9_@bj=Vp$F$6%EL&}lZyqgBRFn@W^Rf(gmfW}~>7M186P8=PTh
zJX$(_##Dl`3`LwXR3^d8fck<p@oK5~7p4-BWylx4pfV|5239)DdV95^_*qjakY%W=
z&Qh5QUIuOZk}dLTRf#Wc9BRpzRHi#xlH+q;G_$^CSG`&{-$gUW&s&m1ExBYWWqdX%
z1_`Y}H{#WR1jHq?q}03z)#Ol<F0&~<?cVrhy9_nyGL^ZXmjU$^Q~cV4@vp3ajA@Cu
zR0iD*95m@`*3Yj!AOG6Mp(cGzWjgXQXwo;#8_+t(zcH1x)Q6h%4V7ub%fK_Pu)YDU
zUHppGfjKnkt5>K@S6&7q@G5&dpmk4NHI<OWaiYvsDnq7m`kdFytU;_i2-93Ma|*a=
zoMf6GOr@DH4M?;ebdp1W1jG+!lcr`ds&SHOeq`?iwbJ;H*8Bn{%KS)WXyiG`2-lfe
zptVh0$J{7!IG4(F;ALQ%fw}B=1zL4{V6IXo3z2OG=AuwFF9h2>&(;-a9TU&zO4~RU
zvd!~U=GUg88b0UH+^jcQD5U+WWN5DL22i$YXg=r2TxCqIYMybJ8tCB$W;4!XlS10*
zR-<y&CN%lUM}Qoii|A-`px+C`xte3DszElIky#ejzEf&u<SHhqOI&o!jNDwWMZ!2U
za(#RZ&{JT{$PGu#QwWNn@pKM571K^v&#@sKfS6-LIH*vrj}H+N0mPi#P}sbKBS6jh
z%+*M{t9rhTpa5aMjX>4R&-L*E1O)QI`MHs(`Ad!fY5|+rNc(l?1vWx95EkU-lI^Hf
zG*>Lh^+YU^WO54|nVU2YfmpF7S6P>764y3n{~kXrYp8%(V=JNpW=*b-2VJ15fLW6(
zB0rHj!KBvZW>X~NjNwK;oOo@n`i!~PjlMN~&cnG`FS{JkE$rU3cCL<RvHzd)Ium*9
zO<Aj**zv45+2v=q-P<GCzxL_hSKz<eCkBWdn6hEyy?y)FCi~U)AJDJ&69anp?bBaP
z_8wreaYb6Py%4|cuTMPHtIr>5lYMIcT-z^M+voRv`#nLq^UY%IO^79X_fOt?Uyo$3
zKFnLJ-Qw)qFZuYN{+8)htZmOJIh?EeVe4!a$-VPZuJR4sw%&l-n$m5Fm#J!^%~xAp
z&P9qwUMil!A->90Z@Y;DD}SA<b~YC}(OD+>?cj`7rR{S#pX%GE@1Oc*jy2aFaMTTU
zDZ*<}1pPGFB^?GN5C*&8Fyss%k!uZh#U2q=fE;ch$r<b_e3<te6#xf%40hdmx9KxY
zE(4ZIRl9!qD|0jwbTE;dj&vzwU260@M>6w9OHFmufgzj+kKsHcU2-Uagi<42KAymm
zFq9hU5(zAkaGsH_<XD$*9%2kPd{APPOKooYO&CzH)O;{UyVUmo%>>#DF0}(|)k^dF
z#<<jbF$t26NLwbjlqu|2t+e~=@XJz;hS&sKIT~UUT+*{41-J<=>DeHm+yqx@$_?cd
zsoX?cInLtBO|q4fOrTAMaw(~@<YHvJNQ%CRbq6#>p;?)qwbnK``pj}EPT5&Ba%Z_T
zF_2M+O1XS~TC6B)uFtv1mGuFJ)2i&`1Apo}pjYzvz{$xj$v^eSAW1&a>sdZLxbw@k
zQ~yfSM1kjc;r;`94XEwU#<$f{b${yfBpjaBi@f;bweWoWehO<$&ZzzCv%N8NlJN6q
zkc1>3r;*gB_78mr^ajY2mC1X0|4;3IkCSF{nDn|az$MoI#j4ckTPa%5pPg!}RX9u*
zXs5mAU*yvB%o7x)a^d*S^)6*cW?wt)cy=9r>fA<n02{4$8Nx;&VWahABP@+b44t>$
z71)8!qfthTk7#MM!KF6i4o{p9c#6HzB^Eur5Lm$7<Pu9Giv{P~>_XaFM<Gs10&I&*
zED<agrn#*y%ttqsg2TP#5=$?u6g*%Xf!$OJOQW}4YNH!0L{PxLbF;2IsCw1yF7*-f
zC7OqF$$NLRw`;U%_w9BmnluXyxZPww8ulmyoZT*uh!G$W1$Mi9JQ1a*@MwzmyIua)
zW(@~LQ}?phJ8GSt-0M;-6sl^kD__iJxqP7PbzwFWbzq?2X{5WfG&wp#%U)Ns8;>I>
zPaKLPdtIHon8V45T|VchuB^+M2RdoP9L1lybRWR7RTm=XA(wL0r6N1iK#KXESnT`G
z+I_A5<5Ju5dc-4Wd)TEu1jFgFaJDb!h)Z4SFw4*!7sbsJ>|b59#*d$HDITscm}t%k
zmsia1AYr2uF3j)L9FS<v30G7EV<LHTPPk&-d2=L(nsdU{rK?%V>j7c|GrDTcpJ;F?
zGz$<C^+kg#Ac7xA)YCx0Pd-IG4X)(fqB*=TV73NV>MmIi^$s^%gX?E^n2RW2xG4KN
zmzmL3TjHobX9YHJ;Z)~bxnxADnELCS%g<9kB2n=<S5Yx#vmilTVne!X&v&|HBT(*e
z$qJ1q1B6R1pXg$cB;&#&V}=)<m*;a%&C42?pXq*^Hcf9fHBZiadFZ_vdCKfO)qI)K
zwLIB<f)^d_NOoaeM(6<+zgHW4*UUV%C2zYZhK9|`Q-998QgG0fFXyQv9B5QFuzb#y
zdCD4K4>B!m%tge@d~vVl$Z5SQ4~t+L?OdF4+0}WNF~~Or2Y{J8b*RI9p9WAKImZT;
z>Y;s5y&+G|5n#fU8}g(nLBbFl^88{N1qnlJ$io_?6-U6s&8+elTAL>}=P4o-<?(Lc
zoG0@xkPz9NhrEmW1|+(Db6)&Tp{dpFoAVNP@NTC9vfDT3-FCY<2{SRI(3p=i+kc@2
zb9#Pk>q_1JabB*-5m5;0e4H05k~L9Bf1Fp!b8><}#UJOD|AI#uBE?kuabDvd=8rVD
z=aImnOovCcfsV%x*|lV&mP2{DV)UR8YB`kW<x3NiA)&meaB`5S<xpPXU9y&JS<9ik
zMt7RO<&_{x9%Yf=YCU@%wd+t($I-l8F(mU8$~lkb6{KWKDCazyS6pI|sN-l}X%AV4
zD(g6!SN4!OnewGPn&{7E{{366AiL(AT?>{@>N&e_b5P4UyKk|92NHez0j(AC$hg-s
zO?qh`DUV&VF`R(DmM0S&6avPzJULK60^?d928!rxCp5j5*XVAksZ(ltEiZnT`3qhN
zLjQI4=#$#7I$pQy&``&9yABO?T+fqvN}i&jj_Y~IQ|3D{81s>(<Yz6)TzFC|%63o4
z$I|IvK+Y%cp3KruX#*=K=gV0WOh8S}H(Xplkbs(;@Ail(C7&E<D%<;%Hmzc+Ekj{!
zYQ7<&8p=RsYJNe8)^?}{o;icD-de}%8ToP$fr$pp$d@hy5(qQ$y~0mH0%1lzQqx;F
z0;pNc`$w&H^(-5K;?XP{foDYd(&_R=MwAby>&y}0Qghg#KWbfT=GX`{vCXj&$ff4w
zdqtGb=gXKm`52Y^$@TL|;e{E;|7edmIxe&^unnOu%$J>wLcmy<FH>xg(0n1aW14}E
zaQmEF^RuR9rarArRZF%~M^NB$BXI4=S9a&C=4Aze%PoT<@iM=9PV48Wdp94On-sXj
zGgx$IJ~oSN4(i#JuReAIZ%@AR0q}5&AVd%cCF_O^b=rIR$UJNgaNp0zrl8FM?%sUW
zRcAJa4cz20`&f_uTGP6H`AR-_5ikL?FW)WZevpvamoMjjkZ|yQ`Eu?jl24ZV^5xtw
zIW$@B%g5aRJQ>?f?r<Pq`B(IkBY8hoWwpuP;%MU8etrMk8yPA4vA=feaTF2B9t60A
zA@UKBP~t$o%xXYFi39n*|K+2MNU;Jvknex+W)>If@lV>gfDW+6A@;LBX*HFH?0QJE
zL-~eCmrw>Ghw=kKbB53x6Ugz*@;_;DN8NGDN!$v#>T%0SKmy}<zFhKv1jg}v%=-BV
z{~&c><R?cvq-GQ#X}NqnKlM9I00u9@^FI`Oe3Zi+PI<6ffs22YuarlxI+M5cAJ98<
z-(R$UWmkhG);1^rExxkc9VE2)D&H&S0+7(+t9;A_w0+<vZ@<Efe_;FIij6?de#J&0
zXTOr~Eth^k&VD7oX)|-G$|0}|HOQ@u$;|nO7FO!;(^7;2<RG^kGj1Lr2f5{#0STBv
zZj2eq(?KFnALNdWaf>{i7(7oO?3Q^taYUXz#4UD-xs=G$hq%)nxgG0dF?8w>cjrf>
zZMh`s8|s$1wJZf&4t1yb?zja8ork(RKYFtuI%U{Tszk6J=1%iHTT2kGH_Y9+?!P2)
zhB4eNGkjSkjxa|2L<<~YjBuy#xVcIkVT^Q(QxgjxM;IgB#s5_$jxa{LJBxL@gufMM
z7^7~+=N_bvzS)Yx&t7n=k6P}G=1j`;t%EyPPqO<@L&GPzb4AAER%r5><c?X6M3c`X
zHyml5gMu5H`VxD0ptk<5m)yB>cp4NkZYI$yoXjN&SYoOhyNNFHA`^jOsynyHoQSn>
z4kG0|ch;+!_n+6iif5iX$7{ZYOf5&F$TXi_7_7Y=pYN8ZVPFDxz8fR!cf1TLt!Ez%
z(H>9KyXD@r#&<O9smvh(1d&%*kD=P(_$zL?g|6}4-dCs)mO!WsEnL9vAEtFmF0g@U
zM{@y{xlEeEYgf3lGMS~rw0??vg&RkGk3m)^MOU)sBemZpR=O2F*ANr3E8Q46uaXiv
z1({WB=}2u+VwGEN@q&p$tEkXGQ3&K}_SaF`ppL8E3Lk`!q^Px;3b~*J_Dt8hv$nY%
zCJdWn0ClY!`{cb*2jA#i=T_3`N7?2&XOulSTDvC>hS(^_V*sslCsXE~yfkFjv-P93
zyA$gzvtZK_W!Afq%M2!sumy>QF)MvR8=BbUmPeOh64#BR%M+pyjQ1AX`GR&b`IgmF
z*oj1;x5#+&^D$9+a7f|KI+}TZj8>%iKX>b1^KFVL9$3$L(XCw0<h-bLSL*On#D6@1
zf*0LJE{{bZQOiYlzMBUTkm!z!ZqH>IM2G=r$BM<RR`cN{Ind&gyQt!37Jx3ft2&q;
zdbt9aNT+y|=^iz@#mn|i*W;N6roFD$foZ8iQ_&QU+;{Nssc4Ev?mK{lDpNdx=^h+f
zVnQbdsp4cFb($wf*35aR`6Z9j$78-M=Je%E^*A><_zdMC%g*vBw?!+G%s)qK`#1=(
z#K0pcG0Wo-lQKwv&GN`e86<+zERUR&iR6>=ERUR&C5I;ESsqNvxAUe0VlG=UN4ukD
zu1Cgl51-oRdSomIiE8J1WGn|sG9JY8HNtv`t2;9-=4$Koo;z&}nwWOl7&I~M^vHzS
z!zZSl9+@zMgz7szGGQiCEK+uQkT8EPoCI*6WbRt5{ZXm@#IA)>`%gS_0pa19+9#d@
zu>uAOO+WEq1&m`XbPCEIU>9D~QdI{$A_@=_iXHGoMCuL_A_qK)l=&kZ8;=nzk9gPz
zC!ODR1A(R<u`8#1{fON}3YkYdK7P7Sl0Z7*NfqHxO3A@y_z6$edG^nx+TFer9(hXw
z+pjpq^C&5Pc*A~NsyX8z#X%<?!WBOAAmi_jfru?pY!k5bGVS(wgGZjQfr&B=)ES}-
zsL$CjD)YHVMoesJ64!%qco)ZkUO4evhRAS6ngQT6R?kp}z%4+cp=Vi-H?%wAXFc-d
z5KNRg>%mG%;Gp&A*t$2gdy?loGU%bDD09w(1p5^~1iTmm-mLdBrOUN?!_B<d@3|Xh
z^-{a1vQOXCeqJ%vE5{g^XyH_^A#!z)P;{ynP!DqvJe<LLtk)i`oMDU5u$<vF!~)XG
zhvf_}_H-st?|G@=v)O;vYm=&Hd!=`S3B_l7rFVk_#B8thOpvH`wikwYkRyPa$Chl+
zdQ{Hy3WEZc2E;sXVJVMGAgPeIaT6ZH@fgNiz$!OtgK8GowbFQ4;FW75lmWy7uUB{~
zNI)#`!c)gk%IPH)U(0;CQFA+LUb8VMReR0Gpj7QOuUBj_Kn57Ec@f;F3k<mXip;H>
zwMLHW6*h*G*j~)Nv{dzS_g~>HZf=plSmC{;HIGGJ^8VFq;ufu@Vl@a^hWvcBSMD`}
z4UyGeWaR_6<`~KA*tIR%pDWkd-K0Zgo!w13MAlI^trgvbbYc^my;Xa&W|OU`fyQpK
zyNM>cO<td6Far>q$Y2Wu1oDe*?4`G~g*Dr32;4?ex7iRTAhy{(Z31GOH`a(p2d{#}
zY`d3Td`*kC1_3K=_sSpv5|Z1!GDv`g<aVzWB)kd|xIJDTB)Wq@_wTWFa6yMXwhk^J
z?eWSWfx<xA<3*6*SBbF4|EV|Y^Njfpt`fOF_2#%~yC4T!&$xoX?%$#PDsj*&hZ>mh
z?t?Tw7QzH51mwf)ogLcZ#9^;I$p;gK4wI=5ib5cdv+?h0|4AJ8iXBTx(l|Np#o8Y0
z6GDPgC)o=-wK4INHWEdMlY~U+QZ709Db{wE)+u$$EAuWeQRb8vGt$@C?aje%?`3b+
zKwpOK(k?qZm%TY5vw>>BW-8VtY}y{}^TbzPh41$e6VhLKvETEGD1-)GVRPQoUQJx_
z%AkntR1~`6MNr%;3W5BdJ@vl!Vd8tQ%yY2yNn9EVyF?*0=sJ6NueK+7-7CWxb~jPz
zx)<T>G96d?e9k#OWTCfzpk2}m=J@oGIS<0Bk93{yQ@TVaJDB6N)`5*YpgnmXI3hK`
zbLctWXNX-`kf?0FFDQ0BKw?15_k}w1B!EaH2B>(xFWkwzmE%Kv0jvI0>(FX}4N8G+
zfzJ@rl8*<r1wOQTX%xEpea=I^tW!Qmbas?ISEYy9Z$8jGnU6lz9C@BYK0R*kAl3b(
z`cd}TDQ)MyM}6Y@8ZiNV)Rz<+gdm~sQ6CQEDIkD^zDIq{9_0H4L=HD1#Hn}yC-#I1
z=@abQ=h`Fpov_pelem@*KmzlGWdo4FJYm^@NMVB$mJR&WUkzk~)~)dyBc{QI=JTFq
z2|NXK16g7O9Vi5R&U3!3iy8MBZMdWEoKH_9M^@DUwfsCfjW-GuAVG>A0|{-<TiSvI
z<atY5kkIzLr7e*{+w-KY0EhSmpVC=^)7d9T-Moh^7~r<J;FG%vAc20thusAE6zCUx
z1)aD*;HgBv;0tv$&pFVfpwD^5mo<|0I;(vdxZ=}G%z=~v1<@qub)PcGpLzUC?MFu)
zev7p?o*-IX_vMO>QjpN^y0299C`c%9-B($~(`Jy!Rj>P+5AuuCS7IRBg2+I>xJ^b?
z5et3tydO9Bdhps&V5nb-MsH6(So_?caFTfBymnUwSi-15-t3`%ITeFMtwa3?7vwcT
z>fqt*mlw20>W14Q)V0I?a>7R$hz$25pplh>M2+x^Ax#vl4AQENrr;5NL!4CLDKCs!
z`-5DVu)yb>>(6?_?}%>AO?IIx1YP*O*Is>|z)jVQ+M79^xqgfix_7A-kgwFU@4nGq
ztf;pt0239|`{k$xi3;ld7}dYxB6#>JTYp7+xbjt7ga*N@mIVs91zsf!%oNqY1WQ=A
ztJ=$zOKcf3!4k^^1>6Kn$OQbbuYhc@jCsD*rnOpT%TU{wS#3udD&$AochiUnVR`7!
z`W$V4MPbi<rTH@#ztvVaylee>)SOM4gs8!r{j9~)&gty_YnrpoW(ymSfW6r-cZxv*
zd$S)q#b1yQhM=u;mtWcASEHY*?1yD~hs^eCS`(!XOwlta0)$<bb|8VUi?pMiACU0A
zUH(RU;C-|qNeo&ksk{Ah(Iz=C)^5LCv`H3#cKfkt`#IMH1@@9Zb|Qad&tBJVuLLcY
ziXooV?e)9FpaTinz0?)6={PM!<o?WO*R{Ehp8NfB7=epnwBIkcKtQ4)`~5MIaeyQt
zKQay)#~?9|_xnr4RwI#O5bgJuK45O31S~{T<l)Rohu+Cieb}yr&O8qLbHyPC3Za(6
z{&af@ONroNe@#c8l!Pc09%H}D)>Bo-{4yH>6C%g_G8+L2kz;-<8wt@e=agS8SwPS{
zZC6gabf^3>_r+5no$||U1SF77`H_u03`Yw4oL~5}uClYL{%g+{e$0nFHw}~bT*&mu
z(cO;wF8F0u2ri&5_+?fI5>OZXa<3L7MLoZ-9q)7^`K)rm?{90KC1ZtY99+pPcj|o{
z9j{pWf{VsnvAP5#mGZ|#WCMvxuJ{qzUZW*T#OE9qz>&yfy1qp54h!fp;qMXBcw~V4
zdn*ty!N`DgSCD`l8ITSS5|ASUaCl5Fsv04+#%Ipt>Z2SL<82|*V|+l)&L{+-@d5Mz
zg~|xUx=CzKp8m_4Ndf6xV4@|H0=dGQKmuV>ASIR%Ab~I`(736&P*e+YdZtyrzSvPS
z-NqmXogR=ky&~K}rw2S@%MK(71sWyH_h^(y$o*!sLXW<;X0{DM-Z$G;gS>BcAax7(
zK8OHfcA!l=?tKyRzIg$W5`%!`ynu8<kdT}gkWL5^lJm#}KZ?pxcwvA$;m;!62^ZQr
zkP|KpNGHToAT10?Cj<$kg#kF>qv+G9&-q#)>ukUg{W*Kyi?=P_^XZ-4uLbl*W^*($
zN?p5@HS+5%E0$W_111oc2ILG35{OF!n1LzZijw7*vw!;a4y~5kBGjYH1BN)>L>Y)I
z58$MU_U<5qE?tebN2fYivlV)bIRpC03UEZw!*htQ4#>kYkPu%TKthchm5>ItmaPxy
zZEMzARsa)LSZi4UBoNjH<oX6A$pjE>J`@U|GdHs4L49Av#(=yq6y>pFV?Yx@4<uwZ
z2CzRycRHffds|qG0=-ks7Q0qjLT<5ZrC!_;@QGjq5g=>{AOpW3YDF);!(J=UFV(zb
zL(mHH9m@-&y!+k>ctko05)khMnlv*n3J5GAcd<hu{c_zd8-g~QcLj1SYtxEyS0F6%
zmndIR?h2GQ7I74B(BQ6kK)E~mx{~aE+x-vT)~!pA+qyTC*Y^6?4ya7tIUw1m*E94c
z4DK}Dbm<S5r{#sd=l<lwUBKk;d-Z-A#rOp%Gs)iEpHtSY87>R<e&Q**<R@+d_D90d
zo<mtz1kL~3JA%n__QUheu&4IvCkdoq?SNi*LFP%5-RCj8)FpfWp%1QC^~VJ%+{dEH
z11&;#qDePMnB#+hoOtMsAtGZftirJ92Z2^?ERvg}?OixoauO6RrauU@yHgGbtflt_
zlvdGn@>lfgPe1leL@%uY%c{&kW%~lTVjhbsw65M4D5;X@w65M4XnBh{ngUT&!Mgfj
z=HaM5#!-FH#-N4uLEDRHVSO;*vmj|<eK1hg*lfoku&_SN(uI2aR)+)fGES7Qs1FC^
z{s%~i942=c0|pD~V*%yXXj$?>*5wgr0XsL_X|Sb*y0->=t0gY9<X9kAY`8@gT3R0q
zBt$F&3CLp<%ig2ZC92>^<%`S@h5G$U$1iM*JYalbn?4U1Uj$<OA~(qZ<BLE^nK_nH
zs~Fa^fvi!P(FvF%d^vzAkrtt93{l8=C7@gjsL@Rh_QqUilHH%u7uA6$0t89`_=**h
zKmzy*g(S*~Kq4!;5-7M95c|i(psdJwHK2YU5c|iH2f1$pa{pMeuz&nrfcB3kQA1-C
ziiQT2d!j=!e@p8gr4EFp1x2}`L3yBxl0X|8l#?__c-GLMPh3qRl4oW^gMM+XLvj!b
zhXz}U9d^m$FdgqS=L&0}#K@qMj!tsW%WF(8(WljbA-XNbXTp&|d3^;WbQ&29iCrv^
z02>*^(!B*NUg&d<31&@XM@sbO?lD2##V?Z-!rnRKSiDs4`S>`iabN;yTu^S&g9OmH
zAhzgf$bm%T#svd)eBDJP8i&3g7YvFEC6dL3e)%sm3{w`8YUA0FQa##wyj>5U{DX3K
zK^cgQ56ao45Hm&2grM?*Bi$r<8%sW;6|nAQdZRk<MEg+!gJ(iePJbX#$%LRhI0gy0
z2|;Yu(!nuE92`#wS_j8O3%w@<<-xIJ;f#7hkPeRDr=1sE)tV8^IvI3CH)kii*Y@e1
zIa;P~b9iP1ak$3NOF8@+)J(Rru|731Gbp!;!9?H9q}nfuLeOm%d%B7KReV-ZzEgm!
zN+>idh{4*F1A%&({i~^75q~)--xt6=BjN_j%K6(N{EE?R_HI+XC^0)Iw{pNlnb|=s
z<>`I^G(u3ElgVwSXFE#f1QotRNnDhg6U5Qu1Vkjzu-?L;(lt6Ln{6NL?9}SPo9=ky
z!Z<Fn{y)Du$evwg1e*Q#y>HxCeX91EWO;wQIC&Fh<7UbJeUrV|oUrbXJqc4{`oMMB
zWZyoumAG8nul9-B-nc$)vR8&WU+D(*U^3{}nB0!Eh4u@B%_=Msy}K}2*@c2PJ*8QH
zVX&$*e+z`)JzB(CRO;R1i-K}n3`{^Q3Sv@D^Y&vxUCbs`>cxr0LAl|D%Rwl!m`2U(
z!bouT<(W?^^<|FuavMoUspW*!jU!>ISi$Bu*Kdoj2+EVaJjFnn6+xWr{f(DF{9nnm
z7WzLDD>0;HD@>GG8AMpzgNTD>Ai{6V%xR(Dr*zzCm&!${jZ{ilf<pYpV0j1G^jvEC
z#$e<2=4=6in7=(!*-B3<@$Gi+y8yC1SX$0sx5=X*zJv8?qjyg22r4{ZK=pYjvm;pE
zM3%v7@?CTQd#(-c9G+;SH;#j}yovVS-X*+yxaK%O-^rS^)$fh(49eG7aH9`pb_S8c
z&`xKbg6o;P*p#+<r}!=#hwjYpA{-nOpbXv;+|4ex)q5m%+c;j7*-bcDo=_pYH~2~B
z_wDqhO5&5C!c%|ZqSPlrr2f*Fc$M&Ird0<RGjY^5rXQt_k})Z{hZNo}{EW@5(f1}l
z3o1>di32F~S+JtY9EOdg9Lyi5gISl@#E$w<&*>lzt7$Wt-w-<!WcUBWd4I9E8Ft3%
zeULynL%mNgZ1Ia>U$E(&^s4w5LHYVCm?-l_5U;<+co|S<+2@_~M)9*jc`SvyUc?RJ
zSgM$pLDzrDiaP71@h^jN{}s2nQ0B`Z_Fr)y40U1jpJRXMthbJzv-}!NlsQL!jr+DJ
zgRy^}t?R5ekDs@3Xo#IB98nj7`UR$UL0uPua<4p}kD&`e?5k999E_oh?4B-qi{wSS
z?KFliQrkbqZC5NxoU9;gUS?(&eV^`T1$qI!#p86)ieoApc$a=x<<tTvpIwLv*{KDA
za_R^o(cq~Cx7=ZF#&84;SD&4^dY8V{Q8Bx~$#*4)3!&Ks1<j-oO(e4m+TLsajLYER
zTz2Xn{m!bn1x|kC3lXyG+=3wQa3Ucxx1jai<_ZNW<Nb$)1zEE)J%6sZba)mP=s|N!
zKCt-9*gG<F?$x_#t#=eS`GpPQ0&GV?KF^<s1lW!O49Iba>!6|Z%#iXxbYRmYd!R=5
zXPW&||4Z<$nIR|Nb)ymhm>G)j<v5W5m>FtwA6-*W8~L2GLs{>I_%#K!5m_Ll7m5{m
zBQoN=5MPns0s`GSFC>!`kSIGZBv<4hfjTdQ6?qC%awF2Jp1t|BUeu!A7NIG*J|s8m
zPzECPA#BzyqHCdzU^M6Qkg_V{enxMcU5B4yD#imi%kogJ*hK^hnB}2}Sfhgk%<>TC
zIZDz%B1u~wDp?g08>hq&dp;{da^qC8V3n02Y@A{?rrLqBHl&22|4iPA`C|afJgYz7
z5*(3~;W=tuYb(!Jex&>>v@y~M<HETqq-+aimd?|00}TwA3mi+FmhhWGG9AHFRJSQ4
zGfR+AdQ+%i8<eJ-3B=%;<>rw3R!C%)k_WjhA(>f97Bb7NA<8W2{Jas3zU_{X*be{&
z+iefY{Q!_qV|z&M2Y>|J_K>w7(1;AZC&c#y*!=@^XU9EuC(w4lo{-FkP!d3ULUKC*
zB!KpWupPi}TgH9PW1+0KGm{7CxNUhX1Q(~<mT}x6Y6vN3LaMonZd=CXZA;>19{ii$
z%F*@|brNkkif8Df&qH|8%I2V+(;>W`^&c{OoKpIWA-uS?;qUry9Ci39?2QM|?_x-%
znIIu|F(hw-fP}p-h63M6dlQ4(`%*~#TH0IkAa~iaw`9TIUvYbXCv-pzx)xFfh1JYU
z|J48Dr~_eXK^}iCBs2Lq_xNieWb)*yAfd&zkZ({}^g1!P7C(g4=fk4cB@cG^G34~{
ztXQ(3*!2)18@;I_S?IliVP{?wN<qMb(2y{j{x7|#=a8@*OyHs)hlFK6f`o=c!t(ku
zNWcyWBiTcQBnV_EL&B+hWGy_c<t5U0n~iuSpoWE6qdGm_bC_KT?V1d;E1|J7EbJ2-
z330w_GAt}_rGrEz!@`9>la=sGmmIdy?Pio$f=OpYm`$tGV^55*E1?lKA}r79<9wTC
zMA$3tx`PD7h%j<w(Gt45G9sMpE-Rt&#m_3jscvRlUJ1}fg_WO28?(FqqLs7G19ewV
zFhmfF(@W2Iexo)TNTb5?3MZbTwozfEzoItWK?7NC*)2!bHY(isZhqJa)1tG+vc&`S
zJ&%pGE1^L)*0viBvaw+~$RL7B#)dKViAw1H`q*&My|PJkf1Tb;8XGSDxf$n8!UQ^=
zee%4Xd~Cd32i=DmZ`VP)I^)AWv9OEtU7hh^Oy!~u4RwqUr>%x)vX1fLqPxvzybctY
z$a)OYD{Cg&b?9i_#IW2diSw<JiQ$+9N_!y_!$@$KQ|OH=$Z)5yO@s86k4>>5=wiVX
zTTR*knG*Ji3lR_j#FQ`+JE5ilEvAI=u7ns3hE#J(xXDBOjzpYxNT#w62J1C7Q|&rT
zs5vz(H(5{ybxaMH+$uq7gJf#Bx}&*?UO9+U{#>8Adx*Y8=~-`M&>e*Ou-x82Az;*p
z6JqZhBrxj3mEz(CNa$G~ZqZZfnF~EBv8)fbe9ZiuX2Ce!Qdp7spW*r+vwN<vYoSe)
z6=As=M<LX*A{-Lu&LC0CiZH^sum)b(0-3&F*5Z=2tOys~XYLa*3mN*lOsmoQFCBI3
z>{@7>WnDPe@&(#vSr?9r9j-XvW?2`OJ6s@9%erve$3<`k$uF|43%BcqISk*C5FEP5
zwl4fwPd+)t6=eMz!q{~1CU5)efZ9I&d-r8OzNY21#}m|zM`Dr(iMlt0<wOM%E!;pY
zJSg<XieOt<DUR+|*ay9xZ8F2g=qbm;U|GY}4fok*yN?@i+w76#2HdtVrYp*U5<chl
zaMqV$kpm@Aa(fs%*ZdSNK{?RQusD?f0o0vg8Qwvn?9Q;vfj|OvXBat91J+7vf<o&@
znfJ%(Pbrljh2;?pxWo?Y;*A}U5c(+W515CMghB}J@M)%YqJGp-`Kc{LSfAQL6sA8V
zp?RVvkS8+zC+j6j%?Zl}3BGrI!m<HKV4Mj1#6bi|5(*<Br?eqKiG4$uXASK96x~_X
zVD$waL9oH<3y=_OpuYH#hHru<l(S);H1q@koU^tH6gAJ<Dp1rsYjpz(1L>^Q4N0H#
zd^l@zM07(ECC`U(`pdf^N!@Tsb^{2YUb4CYB+6d0x&b6mFHtv8Dw-tAeHCWwpVkZ8
zfq>*!wj}k%S7Div;wdD*3L~lep1dqc8R>UnWnd)p@>KnAjyn7n?u947`Oaz=NZ@>D
zO>iKA^BqlaG|z*?JpWy|a9|{x?*<bC1-=ifK|Vr>7IENO82Ko@SuI(3^#$LB2+KFC
zTixJ7`o}OnPx4<yF@COx)gB@tO+p3du!u4`^ZGnJ;iv-*jlmF^2}o!>EF$w!kboQ(
zk@+Y{Xgn-ZFd7<DK1vLpnGBDpqaq?Rkvzzah{$|YvXCE*j8H!MZ}N{MrN-*`h%$*i
zGgJSh4!<lT(ka*Yhzx2d2bIQ0LL&D73Fz?=nb(7aO5-CXlb{j>d18pXenLd%^^ygX
zO^m>f@6t7ml+QUelC?16h^}+ceo<exb(X%-H#LH{BJYECDas(HN0ixY;>-HIb@(L=
z1U|Hx9+3$oNN6)XA`?iE&}MohFk2dk7~DWJBI?W1K#~W!nU;Yh3kI6S4TM{q&;a@4
z+=%jOM2)hZv-PfZAS@-wKj%hd{)mzQn;Vh&BS<JQH{yHsh7vM=oEK3S+)#q^V3YX~
znLm=8$Q0@$GJljTbjK?ZCvHemR80Gviz8WY$l;iVB8ww>LJY?=4ae6bVr2*duJyX5
zG)R<vJtCtbNGSb!1jCWuV@lIVS;j(h^`>_%i^!M=CUGPDrK}t(1CeE9Y*M5M*ZCt^
z+oU2zD7hkHh36ttWVKMF6$mJ@+EN50%C5E)0SVOAqzJ`@B2r{cgvW)pARxKMmLz@F
zL}XmRQ%J6fSc|<PiVGVf%3CzHN*s0gDf$Z!Ah*#PRUjd^(Hd1C(O(-Q1#ijzA_jMw
zO%Zjg>@UfK+-A#ZBnwWng*y$|q}b<tCz7?B+a#2&7NgpCB37_0CZoJ7dj|xX_O7KO
zNR)loG73mk^)49&TP|ub>A#D$eMN6kwF_swJf8rQxDidfbOsV4yCPm6-^5l+e9nJI
zvd(ANEBbp5_rD`J&!+?25>ny-8}O>$q4IzQ1ty>lMC8X4KmzIjb@WsUxFuBmk<5Qy
z)nkt8BUYRM7mj%(A}_;&q*9UMCR{s^z&H}AsO00hgyzrVtkoj@f$HNn0)^}25xM9=
z86X^w$e9o%5ROMM6L#WCfI7*xEYiEwoU{=re4exsD14rb$P?KT9zIV-kkQgyT0(Q_
z=Mk|22LbIrkI2LZBqTqN$ixODYWqB5O{OKJ=(z}=OuK^s&^cQNnoQ5xI?!Z#E+SV4
zC=8@?5#%(x=*`nopL1X|Yk6kZ68)}h@4zVH9iK@{sb2<1`Os|(0+54oJjrbd5|D$V
za_E8t<lrcr<5TLMQkcy-DyqDYxw=e$*ina{mK=4-sHnW>g>sM^6_vM%K*H}wMH{^k
z6}O3qL4L1}j>_9al7p@r9hJ9<Bnv>Jqqt4fg4d4%<DyDov?$r5UoW<Ix!$A#w50^~
z>bR)998k)8bzBsaa8E7^q=~F-h2E=TqAfz*I58?O1eEe_oEXK00DAYel)CXnwrYjm
zy5dC~cS{pd|GgNMH)v1>xGzQ#lJOBKh`^jLvCvArU5l5Z@*+Bz5P2zDC=Sj+Lgb|=
z4$hZQ##f4!pmTOqsm}~tiHjt4_-QqWmVdLOa*jqh$jy$*IT|FaIy+iW53AA~O$;7Q
z=0w%`Q87nL9^~dm<s2<ph$i!*G)K4MDqx}bYE(%@OOtHTYQ1?42r)^QDs&0p)u?=T
z10-~MHCiB69w34JY83kg<oKnuU9dPR93KQE7e}SzgM{SbsC0agkX#(K9KVznfp0{`
z)>F?ly0hjDTLoGQz7dt97bOAoMpXJeNC3SNh2Q@iyXkn(cU3fNEt|VWzsJ2QiZ`y(
z*h<Emt_c0?hc$X}e05ZAe}f5sS{=pqHzov>0c?hKTB{euGf}zy4JOKDqH^1sznHp)
z4P2|2Cf3N7L6Bn38glnXF!0KJ&h^o(x7pik^@rW-qk4o6jnp#IU?Zzor+2U3XtfMX
zv}~i*GLTSVW7H@1EI^`V8>865r`TLZ`fXvat<zgnZ?O?5Hg1XLinlRPh6+WaB8LJA
zge_6zP~ABK^xVdxZ|b+#Y_k!_XSYS=b)_;M8@EM0mJSpfw~-Eap>5?p=Z<LB88-7x
z{m$qP8U(v3#Ve=A?T#vm=mtmfj=q0ksg-&GD_F0;UJb5rB$PotyREi@gr>WrG6sW0
zJ-f-yf8v06xOd71{Vz3pZ2+31_u2r|)V)!;sZ`FJx|fFgeu`D))F=BhD>vwmI4bsA
zqZeEV?Wazml`=@wx<85ohb~+O)Iru^liscRpj|CR{)3i%%6Z~^FzOL&ZIC1rMdYXZ
zj^z|G4zqQe^!vITwh?Hf>adMK5#+FqKoR6HA>e%-AfW8As8SKFW=GcI%J}1(^{UQb
zSXQL{++)#PG5$~*SjVD`%4K^fv>b~zZDt-2{esZa5LHgI4>s%j>+s7$p?#(X+msY&
z8Z5sn=Yghy`ka<8AQ5O9qQ$2XXeje0hR7dJMdf?Ik_FX1kKzs1yWuL0ea<hVSzkpR
z(VFBh=-WqKSov1H)33ga;_adcTH2VL=6qD~MsfMKKkf%5fAQd*LO(o$et0GVAxP+V
z-kO#`qLt@qTEfv5aPaUV+qhM4RDIEEA(%k8XtfX|6|$TKBoHo=vmiPE0lspXh2GMO
zyI!^ts3$Jl2vp7GsN5)p2oNq);5$moj3&4k63rSHb3{9^=F4%QIpHmRyZ1`ey4=`=
z8vBEob=!jg^bc0^Kmz&)t9c*+{R1^`GR+T7sN$h9oJ<VOX3zU^!1KV{`u{pA!4l>{
z0bW98s~{miG=^-IVsaB|+=!Tn$so{2BVsZpgM{RWn2gCFAvq#u#pEVLj*W?A1O$A0
zY)rZkNVH*WOa^6;KpGp9K^Y_$MNl5D!8}bdQ^m3lWJc`Jhh=+b$MmpBMw*gY=EcPB
z3J5^Xvzi4Gkn>_P8375%c`=xUU({|&sxM&YcIz)!E{Mq+#b6RQCT|pjgv^2%ZWM2z
z@qiB;)8+0r_vo8?F0onyCaPUxwFD#}mc-<Hlpq1IB!)?XA_hoIaZ6$`ao2`Ov2tG$
zE4-6l44_INu$&!uPrp#T+^&Q!g)WcDi=`-oN|wh`?IbFhYk90gH61Df0hV6Ha`x(X
z)~vD-D34qflbdrW1B6wvIKRO_B0yLb!wrTH$!VHWn>J@g@74D?YBt*#ltFH`n@Z7R
zb4=a{gA6b>$8Z~DqrgCg?`CFvsBd=EylZ1n?0DD4pxE(lOorj6Ja)Vr!^o1xKxXki
zo4QZGQ1iYGK{>_yF?qSVDbFe1kEO*XDM+aCe(aW3+<%*r!9NuK%Z`4Gjj0bU_r)XB
z{h{T)AR+kS4fkzIDaC%_zAXRWNGbN)8c<5H-);n@6#Fgjg&=_T$Kbtp!g-tFHJ(`3
z4EDgk^*j8BVz{3_m}Zz}@LlJzn9`70@^8E#UWcC|df@@Uk6GX#0e&nduMU9(_^}uc
zCMddsM07nCOE$!^%>cGdi2;|QFUK5@sV8GOe3Rz}7qTZ}NaX_9B)Y*wGWVG~M%i3@
zt{Cb&&8iRR)zznMr6^H29h1|1Gd@sG$K-dAKmz!53=`p_90Av(&a#yU^xxK<wGqgt
z&f3kQadI{$la*$CoScne(x4krAaNt=Y^->k_>>0Gm@}Zl*;vVw$X5+sgij+V_WQ98
zy6gfT)HokgT1H#r+atBV$Hzv-f2!YF4VGnF8b{}2GT%XYC~-a(<rjBIoXa<F!9P9I
zjK<L=mUB?=+WC@=K(p~B+YmI4F2&@04iO++ieWb9cLtlG&CV+^<r*7)P=EiA_+{xq
zBk7853>rySVm^`LLkcKYVo32tAJZoZuEd&LyV1vVAjJFlYE1q9MjuNqWWQyb59tBl
zcf3;vQCMk4k$YevYdEA2t{GT(Lk}8_0}EvsMj_}iuuz6!kiZ&Ph!Z2aYut=p6dhd1
zUipvSv1YIhL8EbS;SJBA41aK;M;rn`1`vY_aUk>rhrnnYUdU31^(SkF+YprM4=<D}
z^k#fq4lgVg2L~VlF}$!<Yx8Z2E6r$JPReXOtZ#R8n`C3qjn_#w1`Wwch4PhG$N*zf
zAzpcXOJLwUXL=zr&Xw8hxz0u`bLyx*-_a2)tAptB>-0i-Ue}DD?MyF}Ul;-jxaoz3
zadR$SfX=~354IO(?a91*T%Tk3wio6Ybhwp+FB9OdMWGU6^m+U`kkAP<e}|BsVmjGT
zh=~?&LV?7?cMHWAKZz0~|CkezDEn?9W-n0|)XqZrLMC4MM_G{k0|F>Z)6~vFzWqhG
zP<0n7{T0m>M4~Wgem#Up6y8;c1*iaq%kM6f@0H>eeUt^s&l*sc?&<6<#IeB@d?!P#
zKwvA(x|I3Lm-?R-_n|^0X0-0DpjIDd*Un?zd$>?08DIkHaG{)yK|-s;)E-(uR!{?u
zvBxgxZ7Po0B4mPNwg|<TV<bY~_^F^qe#W+3&}%9_vqcE#Gh2k({uznjGtLkJb&55;
zsCTY7Ws8tKPT3+90#1<#xqJnMfHUl+i+ZP)XKWEN%b7w$xC+WZ<V;~+KL6N41%<gU
z3-J~~JNB<jdJ$`ONl#XQA+jwzhVYk#a?b!Hgug7rp26e1J~;73_P0y=lT{aO5gL^j
z3uS^<!AIpq@|%}UbVDV+uG}bVWyW<`kLP%XHbTz04OhU_O6rFdnf6!pcbZhKh|8P}
zT!5{JN5nO5kf?t}9Fz7o>eDLRBZ+5S$W#>>-IS6|alX>YR;zIH;;p!{J+9Jsk~Prc
z+l|Cyti)(&wJnbG1iEG+9-(vIj;md6;-H#$h%+Y_x>b>GM>21e8uM~0j^Kco=P}?y
zw<B@sBp@MlB#yqoJvGSS;c@nSGoz~RI1aO=2sz2|xO_VTWgv1qj<+Ky-2#btb3E=5
z-^C)5A2J?~d)xCvM#-T=#^dp}?f6N46?s-eTnR)QC%g6P)3;CWCwe`de6sH|xbBb7
z5cm6Y?>?-m!YHgj8B1?ctsyQq`vCwY8sZp$UAW$$PP4yO7~Q&^#v!rPjPl>paT$24
z_^3P`_lboiNRo+TKBbqW(GIxbxwz6S${g%irBTSDmBz4Ya4a-R?#{(!a);v3=UhB4
zt`mR++POGh{vE)<Q1c~rsM7dz^(7mD7KWE>1oF~L@pwzAEqUpsc<VO&yKq%Bmwe5}
zRv8_uzqS!*D*4)O5jpMGahV501PEWp#V0J#AWS7!ncm#Ez51$+KvxT{+6Xk0T#d^m
zK16_UHI6r*dhk}DXTN8onj63D_`Qvw1L1ocffBs$<8qs|N*tTTi%V&XldOt~WJDqp
zZ(-b%T{9wa!<dxZjY!<+8k$K)ByOldGs%bq)EG%KNfq4;7?)Yl${6ja8E0eA^fAuH
zpsNAn5;qi~>0?|1iY%wA0abK0U|Obc8)KzXGtI`x1;#WRgRTZlOZdd~4afjvS^{@P
zM+z6g!T-zbcefg&t6#Pu=(_|j+Yof_|8l}7(w!=P?*DS4c}xBZM-^SWoy*GF8||y-
z+6Z)}KQ|#?;z1c8%uR$vt_>1O%uQfgrOdI4j_2#y%=Sigb-j&1X<L0lrd%ikg!)9Z
zmGmq+nXgZ@z192;N5H}SLKf^`JXXEXMxev^g?20GFn(deS1u9gFn(d8X$Ak5M-^S<
zUBZ@jFnUxku@Ues7Ile@-~qytgj~2l1PDtKc$I}Fqbj=QyOedRHriA#wGq5PSZX79
zfv_|olX8dvVQC_sG+S~6+yP$B-l#TORWG*@d_Y)kBlv)@JRvX6R4G0nEKelU=5rhY
z_k&lnRE^QUdbN$<2f}I_!4HJhb}RfqSWT^{<p{VtypHXyG5%1!&PKpXCF;6_+>NbL
z0zg=o5O-72@Bk3jC8}DO4{-$iA(IWPe@EjN)f;StAavMZ>ktIO2D=qOAZ(yk&}LMX
zg1>vRnW>$Odule@2n9gcY$Fr^VRJ&Jz7PSz<^-;Jj~8woqCLkkos5Y!+iZvsAhy{M
zAwX<P$fZP;5(31wM7r1-p<!e=ncsA#5xUF92m@nRLMC`sN*EZs5?=ADCP-lHO5naW
z-=VBh@O6Z}thlT3Ugy0w1diC$y$N}D2W0@UHz8k50ttw{3A~!L9_um~18+H=Oem)^
zExQ>Va(dyX6}+R+<fPr2C}2(|WDX87z?@8AF-dCykXQ?xOcb9=h}|?|h?P-80^j7P
zEt@JOhI}N!w`^L0fRbkta{31e^fL*$WdjoEXA;=5`HwJnA=X2z@J{1Mr}MUgg;4Ok
ztzaP_&f5wW0^&R=h}2q9oBNzs6IstEGwts(wm3Xj6F8L}LfFk|&i|g}-eU~w_`QV<
zCe-`h@<@=t{ytG4wo5<)`}+j8b-xl2csel2-oMBAy5qp4G+=YSSvN2#12#xrO1@+X
z5*P!M*u?&f^lRaBj!tGx$|(05Cmin4Nn|+q#GKlKv>VI5y3csL)!3vwdI1wqW0Qqq
zw-zLz#wM}4qhzfG&H59QN<7*l*^NDOuTjR{xZh~g5iHTOC;-Dvv=jr$1>__T5@-{X
znB+&(9$-scMNekE%t{_GM!8uM`vi}ml9r^`RJQQ}<2RL4lQQ7|6G&5&GT{ITq^U_H
z93PXJT9RV3*c}fV|E`>6%TVpJlJe6HC<B>UN$hR)MCG^moO6@-6CFQ)$au^*mnx?)
zbPFnX)+d!kY{Nswvvv3-5+3k@Rd3Y~5?J+AKlvy~_-K7HuqY{xmWTl#^*LWjstc3i
zXi4%Qw;(BxmLv<i5w9j`GlD|tE!33Pl1f3eILVguFe)oRSV~ZXUQ5dJEtCY<Ye}4M
z(P70cl*KJ$+AoaTpI8QYK39MVk!4Bw6=jeRS(cR7E<qxvSe7h*h^MVY@@#QgvhjmF
zTa+Bi7MCUOyPprXTL@xhQtXd{fH$v9%E1N_)vZj*!3L6-wf0AEp{#CQlJAfH4g{y9
z>wtvotg~DPB#_o6Wl#VKq;*M*Ih^L_;QLz}l38yh#kT@!X4;U<iSQ*TzORKdprlgH
zXbD;j5>G*k7iB=gN*l=lU9kl9l65w-IlnTx$2Y^T$!5evnaxRT0^rREkf64*>|Yyq
zCATK!%VJ;>m&Vx3^iB%Cva>yz^#Ob4*TyXO_GAwKYH^N_blJh84;usHJCgFH4KN|P
zgGK?qUWzhMVJBPju<`5o&ZJx^gNZUblUVU!+@TDp-K_Ev<H`7LX=`E<H;GfU+jtom
z=smXV5#wj^_mc87&c_$K?<EmV@M&R)z~XyZ@KK{{YOjq$i`>10Gn^Jgt$fad$*jSt
z%wHchaun}DiWmGKycM<Pa8m3&gFts3wp<e=nsGQO7cwBB&EX^#GTSL<Y(<T1$o%#(
z<6TEhgB2~nh4VBd<>U;KN+k<Kz6TN*4N3f&piMf*fSTWCp7@>7MXmnU#-P;v+oW6w
zwBr8$Z8FYZK0&?YtluUv!P7j^il}Ss=#xgO>YC-VV4~V<md}EuLP^VKTanEMrNo{-
z2u?|#1qmYzO36435=etm(q};eX;2D2JD3dH+UI;Bm9-@E%<u7?N$(3OJtgegn(R6*
zCF}|UkmFKv$b$srxRkUjNI;HD!LIx|e`~Vql+1m-jh>F`DJiKIxUk8Tl-xT9Nu^Tq
zqYNN{F(rjtOL!GdZB1S@jh*?U@sFBmHUe37T1wtWMj0SXOU1+z8YB>=rL2AL)<n+D
z%>5q&``&YH3<?c%Q*xUOg@7?P<q?4iBnhRkJffayO;)Z?iJ$@klJzMWR6s(qJ|%++
zNJ!SFtPW~T+YgIn2Y~?4Vp|8=bzE$95S{{QvDHB!fwY)92)Tfww(&XNNZ}y5X<y?|
z=#3P88H6U6Hs~Mc%9OG;rAGgk-hz&@cF!7p>cA3l83h2lG9}|ONWiX4$$JMNF*&SE
z6|7B($$=Pra#)p8*QCVcAbF5mosyG-WMOj1q-b)W47CmQ!}^qRfAqE_D|ybiuNH)u
zdhrNNU2ioNBrhuSb&$YbpOUxxK_c+4PbKf;2b4sLQ<?Rt)V=0D(Q5d`mXwl;zU^QK
z`xzzd$LEa272sHnCSA6q<i|qVaG%(c!ucM3V6Y9j#5VRxKch#-ZMKT!5!)=kL>VA#
zOUbWvfFzkzo3`dux{uS==lmp<^<w6!{zf?4^GOOXs_`(?mWIm#HvZ4X+|~yyZNLQ9
z0c)Iq1l9o>CkGX%(-yiqkEWF4=)#@s+A{r~%!<DlrlSr#(HxWjz|oYvkpmI{M^o}f
z4oLLj(Nv@3=tJ7`AqMrKdMqVx<VX&Tb}S`t<VY5Pj-_xT2XCK24h2r8a3iM?zmZe@
zH>0=$w50^u^khoj$U$Mqo=o9v=xHts>NFekH=|F*X<LMhcseC_*V=L;o=#zRjs9Xt
zTN+kpS^3|M#+}cm<o8y=gveQIB!UF)SsID7g9H+;aW)mZT{e_%jbep)mQDD(;dh@+
zb?wF%&uwYgoo6flZnUpCZ}l*k#I>9dBx*XJl1o02sOfwPTjRsY#oAJkxy+jU!x&k8
z*@mE9mCH5+?W$Z(`NYl+L;!I)g`FMRA!|#!Dqpkn|1hd*zP1r)SLJIPfp%5CPWi+_
z2O>cDn!?{)nwr{D3iLzf(SI8A9W8&b%}N_7KcwUiBnm<3hZN>xeg&y5Hd35J)5@rH
zrp3REMUFcBwz`luPll#tEI>gB4owFNc%ldrel#>48kH8YfEYX$3`?sc(;^l~9^{6n
zWh{^^#DWoNiUkxh+tNPFm^6PifQ2R-LDqMm;j98jyb*xs&}2+nhE0$_9Fw-fW?R~V
znUof}7zjAZq_m7BAYs8tX*sWf1k$9moYz1CX;NC|V)$quOJ~hXi(HIW=qxS21M8=u
z`chgE-+?U#iKn3XU5p%%7z{6^5i;&Za)R&Y(L{9nAmiupX^`Q$7?>zCEiJB#pbV%P
z?2SRjeeoG-nTvr*+%$5rhdB<ko5kXTjYs3N@Y1!!p<Vx3Y2<Xcb^;tUcQ#{#fipWT
zU$_PnWoD;w2!*e8pbTs<m#IUHw#m6^nLmPwGIP_&AD1CW<={JgE7Ms!GLH^1s<M46
zsp0f8a)27XiW<JL&UtS!NVE;KXgElKtfGcvmmY=jFvIdk7@gypw7hEtCdy>e7?s%k
zLm5zO+0!G8U&hy3jRKRn)Tjq|88rM&c65aCQ2b5HI02pkzDdUE#>=4L8`uLQjoacI
z((*O?0B`t)G{z-mi2-W(Cbn{<(KWs)Ei*|lQP-w4GD%ECD1)K9g#|_#zld*1%gh!`
zl-ZI-W{b@bl)>P9iwz%T+!KGxE<>*)zeQy*fKdjc?`?K*lu;FbTY4@rQReM5f-jC&
zKw{T&JL@>wXr0_{+lOB0-%j>fO$j)@F8E$L>j0ZH+F0d#FO6$#)DJ=Ghxai?L_dIp
zsX_CjI(iC>_o?0V-S8mw!v}2l3&!2?4=i24M41mrm;dEuK<#6##~5|-eO7-4c|Yu<
z{_MibpdUVAAC57)6@6maFUb4h6S5y}(W5T(!~Qhh$LYe>j>PtMkFiGc6d3##89hcl
z`_t(n^GnK1+Tq|Soi(tC)sHp4@El4bHQ{q%J8ItvHhY{gx8j5qg1|&WPNZed2on07
zNMkOfEz5S)$_CbVJhm(wtN{-u`n<s!@F1yBTHf6O34{h}9|hfZ<aMXnsqqN9r)>oC
zh|_6#qKPs<IGrvQ_ccHQ;dC1JHTd^;+7Wp%^UwrijHB{mT24&hLg->zridV^6m{|2
zG+neKn|;IbCmGwTzp?A3T=AQ<+-yY|Kzx&qicA$GAihZ>Q>BpEjy(HY=ACS$D!;Yj
zB$yES){2uLA@c2wIN6Tcb$!9_CL4~9*X>$qlDcl&izcb-R)B;EAg)t@9HgW7ZbgJF
z%376~^`hZWy{yPe{BNb+n^wdV|64!+a$1p`M?eB{T9NETkbs<4gifRjFSn9)XR?1y
zGw!UIX^T*=%`B38Bq#%snMK&6=)^_PYqQx`(~K_NXBWvpe=EPrGrLFzdXPYvT_lr6
zkU*GSgrspbWl^_+biPugEG|-`_3ZuWdWJQhVf?)gEHU|^0OVgOl9L}u$iGq~6Jd~;
z{9Y+4SX?9~KVtC7Z$Xi|s7OqHk_Wk0i{#`dS(yA57Fm<ut>g=@7m3O5FLN;Yb)1RG
z4;(T1;W;#Uy+}@eAc6RLku~|<N{+Cyh);gqKmcr|Z4=62R@ycp_gGmZCqEPh(#j(A
zEpE@M?S0NQMOp8&rL&BCylaZ|A~7!8Q_sFBdlm!$-?WSb5`b@7Jqr?mZ&J_x88&WD
zJ+O&=`m*uYicPi%_3Wl1L%dLcG7#BRgcl0vV5mKf$E~bxw(-k~twnMp4@`(`Es`Je
z1__a^MaX&(;voX+ZKljIx>mex*FwGbc9HyUDaufxB1CE$JMGEhJJ@q`Fm`rWW(E@?
zJ1jGUgvgE?W^PYres96%IT$<dS@s2!xR!lE0^&W(z90ed9@+P|ux|&S^TVR7p~dXS
zxyGa34~z6tVc-sA;E$z&K>+b%s~sSL__1YRkU;#H4BQ0m=s<Sa&)Us5npNz#MaaPW
zt)YW55ZO;d=Uy%X10Q4)<{S4{9<)UW=%Cdn9k_uHQlGp}CtMxK!lyItdgBA7=Csvz
zaG~jGtL-3xak@z6#~?|l2=mby8gCuQ<QFoHUNxR}biZI@(5Ax$8-u#wLXkYJgA6b(
z6k(p>W3~gj!1+y)^8J5}*#ULn0|gJn$OQ?MZ>*6E5-8tTBNrq_?l(mR-^-Cp3_fzN
z6sh0Ikt=zSyK0SG$->C}_QuHVK=JfP@}pR5{3gQkCXi6#N6VW)0_?{d-qeBei6O;&
z(6Y@-3}@FN#WIfJ5n3~(SjI7s02)#($1F$y4Jn3Cout{c+UFcmoHeW15$(tv^9(<W
zy=Lt3j40NV!nvx+xyG_C>x~(=;5U%R7E3#U1oGHo8J0l;d2BI!iyWnzTw(&-{<?90
z^#n^dFo7_^(hVdPDwZGS2ML4;#mFz{IIx<=@?`eVQsc3j$u<JnY;v)D?HXl(FuAxy
z97%!%!sKFk{jZuRRxEZ>KtPfe%cuwvlB`%pMUcF#6&0(=-)0H}cL%{KX<?9P#Z0>u
z<aIMG3*#w}W|D>11YzMC`~|P#tW%l4zhPud&z@o{U#TI>?j_64t=wzb6ii_4wQLF!
zSbNE)yXXbD8fxvLjCX^vC(vS1iEIkE#4d?6;j31V5L#4%mzwyMsT$bPxx7TlWZWMb
z+Z=WHDI6USAh*0kPEjBsx4cA7Q6S;y%S#F}C1Q#q26yxoCF<%DF-1up<W`o*DN3^7
z=&MR-ih9}46~}aWutfP!iJEzEpE1Me1ww4r)bKcPutfSRNGNr%MEWa8fFCSDUQeeB
zAfeR3lA`}WDY{Qi3@C-3Jyar3z-p-Lj+TgC2Z3itZBtQS9W9Z)j;BCBT4MEj4F&0j
z5<aYM0|B50TThA-4Yr;XB^qo!DM~bypx3{kan;f1JX4Z2xRf0_Vx0D#DX}gsccfmw
zP$D)sK>+fC)gK@Md7(rOD3E}>P=e0q@4|MZ-ujx=A2SYAer?N8-+x_Vh(8#EGLZSY
z1fS=Bf%3$TG={!qOO6|3E59v~*Ji+k%(o>PzXe8RAoFbrZh_I{){&@d(tIFbzH65G
zKtl4GWj>I+tYyBAWcfj*A}THW%y4!aR4RKJkI>XXrLvbn0%%aF>}8Mu8dM7F&Ba%a
z)J}MTxHM~SsU!NcB%8H9CzSD=G;$o?VWrkfq@Bo)V@kOlJAeTA7`zt52LMQbk13UQ
z1PSmlrLf~tno2sM_0CD9%1fncbQYy<ud?~4j6ro^S@LAlNu_dJpgiO!mCA7e5-vEY
zwBV&uF)oO~$HnAQm6eKdA$gE{u~d!=$-=mpQfj4cov3@Jmx|Qwo7c2pYj9w2ute?#
z5~@rumHrA6kkd;ogLfiwjxcz45HSB7%i<tmlsT5gK>}%xWpR*P6c(rVjymJWt~6_S
z8EbaN_;pErDZ)Q}bEh+Iel09jUMp4U&v<B{#mz6`v4v-hHFqp3Re#1e$HXHvXK|_8
z?IsRtSwb8OZds|a5^(>p(9jpeVhg`8{(k2h|0PSS&E=(PCmW4AVnr$bn!1Iyrc_xE
zH0;t!<q+zK$DTfGd{no#R9;Kt%8{+tm8$<^!;$sgEXAK)w%|6DDq8?Ye|?dQAZSSz
zZFCA2thljM{;fs90q&+!`BxnU2e_L{)f9aTL>O^fsj>sWf3$${Ry(oSkuQzjt=}$H
zJK9RoYWJN|`Pm{4M`L3<Rms=6oyqfe3(s!_0-e0u@?4NmZ@1<7AR)S&JfGjE=uFPE
zm)&#TnAmc!EkoYEw^T+Dl!46NQbZ8?v}<Rw+DD~|FWQ8?aolLkZoOc*T7V&L;NdZZ
zKPr`>1SEt%Dn%%{PB;BJgLIxPRnBGpe8KoJrx$*TppOU8`>f@hAOUmMa!!zdIa?}&
zK1htXv!zAnFybia6GH_3FG~^hhthqn&J=ro$b9^bp=H<nVAn(8|A$g}@Pb09=Z8{{
z7+oMy&kv<YI4JUUrszMgOiUagAUUv14n&ZU99Sj?B1lLMEVBk;XBxG`%6R1K4g$Ii
zE4$HFS|ATAlc5h!fi$d4hCYx$8dipZSf7WH*v033r3`;gss4LozSHwc8D6~|Onb9k
zsN0uh9#+huj>;uvGE{*Juq9;%zobir0JfxzzU@KbzYF!wGKRmoU0=D(mZ1(`RwmcR
zC<B>gWk~QxiHgwUnamLtGf0a}nYaxMB!bG674SVoA|aG1Ll5oX73nw^T3@E@VKbcO
z_Q3iwJs*GOn-oB?jb&<Ov@83aZU)$B&Ahb&4Dr=|JO=8<vVwAqlpHF}i#M&{w|u)$
zmu_YkHM6E-bD1h;I4~iyxhyEQut7p(a~baH(Dx9!P#11xkLu<f6<f<x@y#eOA+ohB
zEDl0JLS$<h4npa!Ko{z|ZEUY@-rjOsnJWIo3z!huR^}JyuOK0^tqk|==wfge%D&$z
zQ#(bgM5}&dn57k9h->e74B>am;xzuLRg`kSQ&!zkngrW?JJ?dge6V6inJPT73%~Wg
zqbwr6(F_tIJIY$N;&+$3(5~N3hEGd(uGndd(C+$9TZDGkcajKwnxYHsi0@|8P4j_U
zc9*H*pb<=n>@Ew54-A2X$nLVr=H@H(qE%O)^Ke<#$Z|)NWfHk&GW%!uba}Yvz4!I#
z*`-^z+wR8)x#`o_y^_z?_N(YU0N+u?M_7B~BRqYQz54L4VvCQhKGCaRKYT&eOg>fH
zueKRIV@us;wB>()d^_1|K(g1<Poqurw<Ehkuft_HU8lc1+!e0wJX)q4XB+a(4t4k?
z*81S1*wHe#a2}9Q|7aO5u~2FV5>eu4S@d|BIF}*@Kdw1ehMUI}HzWuCeXI;8ZS<ib
z$)Z~w$I3c(GB1-icO_r{yiB<(`k5nH@PGY1a^9xu|85iipty;T6Fu=%uRedM{eSa8
zan{LW{_!`cOT<Og3~&6rOdd9a<eJFugo8wjKQF_}5ad`O;Yy#EwYigj8HPyyxa}S0
zAWC$)QtUpL$?=-1<H>V&6*NZ9S>XtUP{p}2xn>3ljB{mJGm9!{Q~F$4qNS{YJLb8v
zWDD~;-D~Sg0e*0~GNN3Ko-_Gpu`^?Q=EFI4U|LP0P(Qd_hCfK4zQN@;>Z2h)xE%F~
zPNYyjxI8hUTqIX0E|RMu<?8Tqkz7e0<c5~Z<Vv!TTn#Iy<mzZHZG_`*#EdP^+Q6O-
zn@8MZ%X4D<R!jj!(sAsuh*_B!S1!NN3MPy-t{j^}<6*m;0<y~F%;JdYbHpc?EBq=n
zaZ&33XzJ`@qdKlQzI*FkrIQERB~tvwT^DSaxlj|JU@+#x^%@f>5C~Lio2DvJTG6zD
zmOezPkXwO7+zMhOl2HP<U_+2VDy=AN+CXp&r8Y>34Ftk>0@#q3mNvnT6q)pQ=FZA}
z+jH)@Gv}W3pEEN%GiSDIwnEoCA*fgF)l$_EzN&qSRxWrEu4eir|JZYP3p)&KU74Dm
zeN6||Vpd@y^O~MARlQu~got#z^Q~oU>7TP(2QE+{<rZP|WH-4LlA?C&DLL_lBhhiU
zp4y<unE{QN_t;Bg)a-E2h%&NNu}74N6$V}H_K6UM+eeg<rHXb@hSo<p1h)>mEmU)}
z9oi>3hKWpv=7=E4r$q=@9LWER8`YE913GYFOSniK(4>|>AAc5c>u~-?g<2J450B{N
z@(+tnGOyt+LRH?b7^g00^Ez<Y7A8gI^~_rJMJ&V;-7&kUQVnO1jc6|UhmYwg(}=7=
zQ9~x(sS{`HPpZ_iOs8hbC4crdNHpov!72OCDmAy6UvbEVkNLWENqkrx66<zpmKg+y
zkN~kuSDpfhGWZjQizX+vk0zdj1}C+TCY~kH<fJB=JV15cq@ErfRFw`SE9|E6>V6I?
zZX7(rYdwX=0qJD@?nOv+>d`D%k#;>uaqrK2Ix#?iChfZYO?RrqZm3bpUY(#`%Dksj
zp~E*f`mmCNjpAKjkdz4>r>llU<M+jrvgq`<DA#NMq}AlGR|oFUl`xU%)x;V0L_<RL
z*)O!35%!Ig<G4}||4bl*rswQ3qb6q074QI)H_r(kHnVLBAz*$h|GJTh`z;;BxQ2_=
zEzO@c(l#I|>Xx3q(7{|tRJ^5UG|8?39%HcE_9p6ww+k%=CPmzqmhz&L0p@pXRIS!!
z@93b$mn$&8qibiY?SiPs1?T<tZ`JCxivAH@1n2#t%XdLkE|dO5Cw^<}+R18V)hC+M
zH8P^lF)jMH4nEaI>Y=0}&G~7O@bdR2s}0GT`?~1c4ma^L3jL2RTK9h(zVW}Bd6A4K
zastso9el3svbkz{Gc+FnBTh#Ni3J9Ac{~__<mExlW-vi2BuE|96F&Dy6^29VPywl)
zgAzjpq<WShbx4rv{$a=ghV(Fr4ZgH1rmBmp`5D8M2PibG{h?b(6dKlJT{J@jf$6XW
zkXRv^AP?(lU!st7yF5ps4Ano>MNi1JS3yx@CcVidw%OlLQ}*kd4B3aaNte|q*ljU+
zMlqS>sutsixv;6Q#rRxSkW|=Wm}W>P1xYk&F`4)-Z6TQ*IEm49>QY=T@3)#@X=%58
zHc;d9C#I|FWHX$2%HQa|sMYvY1xQ|RHT;7eS0Ej2s~Nq-IgqDPfp8v+b6a{2U)XA<
z6|`_du9$g?)sUp@=engGCh=#JEWJm{{x$3KKd)g;Gqc0^{hC~w#NxdPjBB~Jb(Ttp
zkZ%1h#Y4*9X;{BwYcM2V)Mo$6(TQxE@%;)+WZDd#Xpvs5SlVbuesZmPG@0$7VAm4h
z3fs_h4@pZXmbSa!es8w=OLo8UDbisgwBNA1#HAxImbQD)nmW~+J!k?4Mc$OAd(Z&I
zQ*lW&&O^3%jyjz^WP*5~X|ZdZhYb4!=HvMVne<_kc*_pYQS&l~4O^L{2`rE%aKr?8
zyL7IqYvxxxWQEUn9x?vz2uO52VptXss6hg?BW7&g#8Fxp4*N%qkJ6rlnn#U~(w-&Q
zKWf1KGq{F}rQSA)lelJSMQ*Jv>iFu{Y{@*8%e-w;l`gE7h;xpaV0s)@AyEuE4q}j0
zam)}nNC=y9mr5PCZ*l))c-#ato!wy~bKJ1<D;;f#c;Ov8YQCBqzGHlpf+<`>l#=}i
zCE}VB_605v2v3+`hA&54bHdE371JT(rb%b#t9fCk@gW>0GM$DHE*m(wyh-*b=z3KX
zzH5RyUyel0cg?){O7=sLXNwNdZm3s{*{%^8iJDy^^8(Im%A`-5#98}sz4}?^v|;sD
zoYy4I>o&m|ao&t(NJ@f^H_k(1scthip5#IDP2FbVB<Dg%T-a^CdB(d?7|w+~1s8e_
zdh`@r=vm^z9&zD)=^i;^(Q6VPrE%iN^p9iCrb?xMeALcqP^U)qnpD;~vQ!+|XO}Nl
zx{}}M)@K4YBT7M1OP}GoF^-u+^6<QUCa30v=SO73i|0jVjFW-7VDmYZ{lNv$;VfI~
zym-OPoaJTs;tz1~*ijV|ez9i#`ZX{9^heLXv~Gfnu2dsE9M9uHCL~3EU>Iapx(aab
zMLVTYjjy^`fB+XkA#+h6Ap3<%#l0W$kQ_`;+0GTJ*lurB)gi37M@Inp4+Rdf(m3d{
z{iso8!^;Keajz3Hmj!wiu1xyJE0#3MW5X+j07EVuWUfensd6&J#jEy*3)F=0stMe+
zJSZchz^jJMi?IxYz-zW$WUh@ENXCHI#6aJ0<uC-iZtpHo<HGAEhz9~BQ$gms;dEH6
zGb6woRyU#Z4HLLiY}6$qz#E2BY;if9gS%;;Z&Ks3H%GopE||D!YU|W<KzLy$ecL4N
z+5Jswb>_Btq})Mxp+LCb1b1TyLt-K5I8_cL9_lw^;tax&IJ93PnnWQ;Alz^CT@PVl
zI0z3EAnZBlF;IZ8X9<J{1j3)PFFM8bL!X(%%gHF;w^02u81-2Jv}FR?2Ljsa@Ie8J
zFe&kYKvBkE+|<Lk!0uYCCWeCrOT$EFP%O=87#XM`JFr;QXNL+M0!-mbhw#318)Xu8
zhVu))qn0Pb;ezksA~h_&uXjS=@}WJlL^V`AEZDlt;qswi=y!2R0CQuMFJ7vGWW~nF
z_dsP1jvFH?<bP$U5NmIaZ0$1j_sY#tQ0rO|Tq@igaZ@6%7d^?@ohZ>7B}?a5*!q8@
z9<!64Qr{Z=hX@zSK>tZ`;g%?PC9>UBs-_v5QenhCgv2~sBJV>;K5|RseF%vUw?z7t
zDDFvw;e5C?@;!;?pwiaJ_avSrKHM7N!{g#ZE;M>0O8hZzmaDoT^G1{!<HAn4cyLEl
z7?wk#4s_fnLsIY#v4}M2a&hHO+xfIwlHD2k=@m?5c1Ch@msqV_ytd0uTB){#yGDc@
zSA>4-WcbQ9dugS5F54FQR#Wag*%p!NLN4H2lu5To2?hYG)b~fXM;!l=puR}Vxi<>l
zjN(BlH0Fd6?~R2-#l4Zw%MD3Idm}a{N|S)ZoO`43Z+deI!<lnm!JMAMC+sVj)3d~!
c`!MI~^txZI{q@>u=LWwr=@I+v)2WI715r|$M*si-

delta 40883
zcmZ_1d3;vI^*^5H=H|Iep5)o{Y~k6mfsjOY)Pz;7Tg8RCwbi1gl~%z5+WKj0*aT%0
z5E&z~h!7S5*&mc$aibuLfU*Q50TclNjS7hHd!L!PT<Z7r;}2fXId{%`&YU@O=FD<$
zK3Ljn&Z1UBMmR<&BeF-RD{@BPsk}5YGxpA$Vdak18TZhf5e`Rh_J{X!B5cvHoJ8j1
zVL7dS=UB_meU|gKqcvOic~0xh@y~O94x3{>^qQJ4CzAEbsMDu&GN(^F-*CG26qrhm
z;&V<mvtD8g&p7)iXM=2_-`SfT-0BQx`ki&wINK%r_J26pcVJDjrvIM@41B2OVKe#b
ze-A#D9Q;U4^16RM^hn?Sf2mp7P21`yyz$Qee+gEuXf4Z<kM(`%k$(Ma$_Li;eYo#~
zk3N-rq-J2v{{x@-x1w!x_$He<KC_Lf<|s;*Pkqr;idpXwMhP3DYR(dng=U_aLk|^t
znl3V*QFvj8Po09o=^q_zh*N9N4yamR@Bh;%_DqiUhhh|rNf-xUrVz}=Yz_mG5zNv|
zj#KOEa9wT@YEFp#Rnz{EM45y{P`C&XR;w^`w$J&RnRO_0MAJGep4ZHrfVtiQ<ZNoq
zY*ub+8`HB*CC-Jxgz#)Ll{Q}xg&aQTJX86QxpTEiwfH5}%vMOvd1gFey3u%$sAis-
z{LsucJ*LhXJ4a^w)cK~`-t?LV=j<4njXD>YYVvXx?DV>+7G2H)_CixFxts;8MYX@;
zsXle_uUI)g^^ISFIeqF9Q%zqEruo#RrrP#$mhMxR{Yo*zr!F_uGP_jm$ZXT6t}xY>
zHg9Bhu1{TQs->5+Tt0QxuN2GkshMAu%J-?O{|A3$w%ez^`78B3KJ_hAEhhL{%Zgr~
zy2eyfmsjcYscV0Q@As+eegzirsq24bi=a>4@T(RT_|%P;!|&q#_O@B8cDPg}c<8uy
zO!cbES?IXUrdoM93mx~asa|tA3;p)q<>m(#`tAK+38LRVFj3<i;fM$q>NZo^!IJsf
z>{|R1<1Skvci(0vlF}0uc;YrQwd0Z}D%so<KO!vQiAuKc#O<aUznp~zeQc_U%UQtw
zgxsPdA2ER5Wh!5qD(mIe+STH>r9?Ig?y{B0<|R{KUQ!}kD6!jAD<pijRN^z+1vm>z
zd~W*=X90W9uS&tHdml5^)|Z39to!Vq<dQJ!{>!TrJ$b-XJ6#eK9r=Z+R$tCSm5rv_
z&Fsb74df=)*P~sRXfl<sj1(%$G?}qN^L9iT)#v=m%sRo|^=P;GzA|$>JYuR8W4=aY
z;t{hLBw7bL${|1k;%l=-+)SbxRl&of>~XJ_jvqCZpe#dy<|vg(@G_vjVN1MPD*lbB
z1Y{X<fp4fxikE?Lj<J(ottfuXR0?Dn>Y-y)rks~Sla8}1eOhJWxQ#<iI!<M-MU!%T
z&QoUA8TPbK>*YRW=J<J&a;QnC*~dPuB7WLbT5xnQA$i&?DK&2adJeVZJ67n|ZjFCu
zm!Xz?M`do~Wk7w;p7m>Y#J{(~FJ=+qQW?ZL;GiYV?2KO<8gI67s3px*rYkRlmi)k2
zK<gg=!Bo;xA8N@DRHhRz13&nY{SeT)#DBCpFo$Mf^+zhxlb6AG`-$Bg)UHkZWGW$v
z<3yRCs0>-e>2v;UW({SFgRscYW=;XOh?6XGeo6rha^6&uTo616o;R;(Z59LENe20a
z-BO^H#(%Nq5HL~Z7b-)e%SlbYz$O%Eof8)@;Yl3Mr83v>GBC(RlN~A0s^S+-rA!tg
zi(I5aRlE=^GK6&xX<ZXTa-~I_3Rz@GF3Q|vDyrdgj>ye=i%kn@cbAOF)!hKfRt?SP
zd^T4Zo2#1NI7|)nC<8MV=dnmwJKEv7T=fc?;N&Afj?P5{v^mgk3~|onn5t@!Wu|62
zMYMBD_0(L&Bz1|4?wFdJ>$ON2XKJpGJ3KuF#?;(!#QX|@4>X?6WRDeUN2_Mq5Dq}h
zv>_Z+DA&iw1Bn1)W^O2K-oO!{=4)(H3+<+=*K7m@2(Q@)RLyI-K0aE2K%VznZX{~n
z#SuW&vv6Fyr+dAPkPU?T++4C9wTkA0`dm-MB1tB<u!Xrn;}D1tnOx<~%#ygaKD!n_
zEo-QN$=HghfXU?gcwhyp3Ybi;i0(w{1e1C*H=CjrXN)rP;kv7H)yK?DZuG6`b2j8=
zO?Nq>%iPI3Y6cA+*zcji{RZ?;9vm_`*&{iqU;n>6%1)%UU0sqreskTeeUkkK@hoy+
z&7j8z^dHpk!AEP7kM|uo_$e;XZ*X!@&7*%V$A2{s4dx|H)~Z;G<t88M+duipfc^uX
z7|1r><qSU9h9`G2TYapi|6nuuNZ-dFujxN1`S5^$^oJrfeIHBq9h~g@&_gwk4^AE&
zIVm}?=J5dot)CAK=>Jf^M{6oB*LqNr624n|_W`)cW)y4fGkc1)_i{=aa&<pUovk9h
zcAm~vet_4`G2peP^jhL&HeaF5Ry%x`i!6+sR6K(}e4ndccNqspZq8M^oAaIME0f%I
zSmu>VZKuO2nv;35t#-Skc9=^MPKzSwreQAWFCc+1%msfTUjT`8YM3i_pQr-lC<A%S
zFjwKdyxXV%IM8F5>#CbgpJ{R#uvDtrb=TeI7$nhPBK>^UrHpf_(Q}Su=KA)U>i7#7
z!guf(zVob0jwFy!>RFeM=cptMrJi+(9F<7;&a<xMIG6ApVvI6;P~th4dZp<%VL-uB
z^T8a=mUhqrWn)~(UH<18oNcU2y%p0QDTuUWf=hXk9q*vsR*PSjW;DDe*qYJsn&6UN
z4Jl|g!6m&KBs81gO1*eVGev4P(bkN!xMq`F>eW&u$pqR9&@=VFTqru36kUUb1T;mV
zX_@^UwRMj6(_D&E_7siUX)a9+ViclME}!3gJ{v<R*XNw;%K8XHX$afeS&Mdq^Zupp
z;F>|ne>_rymDfNF9E_e@`aJ|Eujx}W@G&^_V}1L<<DcyNXupRmOfz}=69WeK9h7{u
z-(&p-Gp&o3>hxd@)^jy{%nc@yntwjt4}&i`V4#_N?1@2xlMmJarhm;}1`O_p${wyr
z_Iae{DYm4GR?ZG|(H8mVy7WA=iNZ=QT-EueOL;dl{VMHXb}fGDykU5NhP~-BM8iO$
zVQ*5yuwEfCSo}>_;9Xdp#sx7xrS-~NF0~DJQQ~~U^WHTsu@d2hzyj`Cmsqb@EV#=$
z7jns3ib+xuVC!8XZ?{;Omo~UCfm~J!Ub4|8)<ae)blWBZyQ~z}D{s5h7MEBEd4PZC
za$R{8^s1X(>V4)*G;!pT%YDe6@2b7r`$LzaNwd%p`H<{K0~KX}^P$TlMm0!`+Yenn
zo*mLtxFLn-4_*F_W;F*zQ@62ycGJ2&yv?OpC{)!pSH75ja=CYJb7A@sb-=svG;*!9
zH2Exo!8TX47a#d3PaGQg+g#myn4`$^Tt4S#uB=m;Sa)rtqvdBV-3PF2)rDBM$E7s5
zR3uRvNHIYRR<xSswa_B$U=OWbhrKSfGp|sTf!h0A>YcElE~T=4Is0Ae8xFG!?Q&7b
zYh*X{)LM0KbSWOLIhbfyqsuF1W{@yeqYE=LwF@NL)#!?fI7%dMS0h{6Q}eqUT|Ii5
z6&xBMP3+U2+LaGAxfF`oBuxF#<O+yT1rpFr6sqJ?KsULPH;WeVet^lET&bJ5$xz-h
zS(EEGH<$}(gu5tJI+po!FKwZt>X;RYz=cB{bLEl&sbcD@V=h0>(}+aH$6Q6llyHIs
zb&}nBoi?=FNgIJC`jb{HLm42PbooU0f+QIi)&Z}0(Q$b`=ajsxU-B~f*K059B~$X`
zER~0ztIJcS<*DWj%B}Kb*Ab6xyH%Th)602kJKkRL2#uMVr~a1rnBbttUddCRb)X^H
zkoP&4<|!+IH_Wu~Fk28Wv$D75$mzH&4=Yg`-CUfK&E<KBoa6$61Hct|>N5^=I}MmT
z@`1P5u|C=-Rd40VKn^C%_g0=XA4oL*tvtV&=s=?JZ{=ad(19c1;W~EacUq^1*5xT8
z^yKlbUY92mBajeTmxsiN`U51odR<=pMxm+I)$8&SH}I~e0&;Y$%e(G+^99V6kV0d2
zWG3FF1#=$QVe3j=y(2GIBylJNb#~;1ieydHxjXVodD2V}sCY+S%ir;+LZp}scjUF|
zV_u-yH;)ANWODwX4RPGR$F3zCwd~2u6@vtYP|Kb?FJCc`3<>2$g=2$6Eqn3`Z<4iS
z%Ubs2wYbszBd-Kev4J)HQG4Kl2D=Uwbu{GVijkM6P*T{CSCEn|p`@@Oueih_QAa~w
zX&+gKD(h&-E4$O2Oc_lc&Bn(vuimc}WLF=vYr%>}J!bc94r)1O_bs;0K%#Fyp=3Uf
zjC(fI+*kWlx&N$<;RN*AJeh)^5HQZ>$-w~<7-#b^I7DYVq3PMY7B@>xol?`YdGVXf
z-|<Qi>d&*18tv|`=j}Q))N$UfLqi?s^JFrSr)a3-d>)dC*-i|=e4lfCe%9Q~TQyoy
zwtIX&);3QAIiI|HB0K(wHl$)=zMLh&1k}WQ!^QOj38;zrZjYEk^2vdwu$TL3FPBfT
zWhit_$u~qKLm9|S$u9`e;tSQlGwWF2ziM5p>hk3v0uv3W%a<+#5(stqUg4)8fl!x^
z<gq<R05z5E`>WQmYO0MuF=(odKu$L`Upierce<(haJuds0WLM2-SRiBXZ3U&fhMx)
zHUhcS^n9-f=J|Y`F+Crn@^f<id{VeR^WVQ|_c^-O+ZfmsQ0wz$XQL1>>hon13=*2x
zQ#)QZ&=GE*b3=X>%RKa$R;QM1ppKxx<woFoH(&WMUp2p15V+hj5E3tw8mJ9))V`OG
z9YzXV;u$RZem-_=Y!2%AAYZ-z65f`4<s;x>r(K934ocP~8S1qE<|EUvIl$eTkL=dw
z0C!uy>Z&zc!3J*fm`_-Iu-5vaPx6&~?jm3U=#zZ6nCn48=97Fm*Mo$Ef08ffdLsFp
z_({H;>m`Tg`cLvP*AFFQyU87PXBH0DvK<fZw)_lSV&@wo$pDF(cIV4f1te<Po$vb(
zA4)`ub>QxN{~edJxKN*e)Aj)>LX-C}?~__}#U8sJs(w$tA#xy;fykcxK+t?eD2G|%
zi_E{D)Z&iXFDy@RE98$~Se^h97+>Vel?O;*e36goJRdP0qz;Vy<QRw4jG`bdTEECo
z{RvUt;6->+hhh(oc9^3mxpgb><J0*{%jg+r^14BT`(+~k)Sk|+0!yqiPykw-wtN~S
zv^bsb6#*Y4v^brQfKQ8fH@S2(`}AK}#5dar<k8JG0(o?EzPF|9Z1U*l{MK#EI+a6U
z2k2tHGCK3Oe`{f-7C$XTC<<P*%|TJ{qBStwJPKZ<fkDYPNF?7E^JAmkBKal;Priq^
zW%5lNk$ewzi~U$GC6e!<?sQjf$68qoojTOr{XS`1E(x`Vxn;sEOTm`I+-bfKZGl1O
zVeam~zg!TVGW=InA|elWr}^%vB?#9W?(SauKaw~t7~z&_yQ~t21<(9S3mg_a<4)gj
zd6hUU80i-06Ba%W3r4z&|EEeE7L0Uv7t3b}e-%y(MqQ52JxG1_aw`fyd(N%?-g0L&
zXF}$xA#mra3GPe%r=j5!+_@sHaVs>#OmN36N1_>Kf*X$XmV+V~n))JpVW_tDrWf70
za(EgP7cM8!E1b+F30Pu^8+&>#@*)$Xe~LS|$ee^#X%52SOn26tOx-Zes}#(1=XlL`
zkdEbO6n<WHE6MZ<2mAZ)jdFHkgf=M-jyQtCb5!xF8-wgmyg2Hg#il)@J(!r~mOH~5
z-(s9aW%dh9h`h$)BeetZ*W7X^TjQIquTdc^aZoQBJDWvEY2A{uZ6MlWoK0oEC#B)Q
zOWav2GEa@t1}g3)ZXBxJ4_TdbUdqlrr~N6h)UEKjg_w|C>c%LVM@r}vZ<evAMr#X7
zm$~ImE0`#>j0z1Ag+MNME9L2d$sQ~|RBOYY7^C&R3M@W0fkMG-ISII+5H>VdxwAI8
z9VYCZW1xmrZtPh1Lw$S~GQ)luqx~(OamyWRFd?3CCsXE)ybL7XWFyCFHz(e-41;|{
zlzG#Q>}5FVgk3=_ec7q8+B1o@Zh2w|CUM<3F>DfrV7`rP@;L2qa--E(*c?Qmjby&r
z`Is6#KIdU~Rzs$4yjG<754&}*`7Q+*5A5gs)~%e%Y=2R^R;k5Lv7E;PDEO`0$mM|v
zBx?EAo$uxm1tdD;Tes(wj3~r_=VM*sR;&0}lN@Mq(p^-3ISW81-IdpvJG@*0Or0-y
zl$ShebdxtT=_PHeUJKgNf~KSwJaSXP!>6PdJaSV3B(!+J6L`skV?xZ{#2_u4lRYZ)
z<j6`n50$>?ar$`dm&KgEoGBjX1_z(1JY>|V9_6}dd6G4}s&#%4gji4D5tNwf@rW51
zB*3P6<O~cF!D*^T&cH<S8F;Ek&cKpGGw@UoX5j02s{t{CJvmFep?Zc##sm+a;%0bc
zvI7#;&hW@&2PDaO5Ytx+!y&%DpZR%~_Lly@`!)tmQ19CqG(o-Zk=e0_Pf+iBWOfV^
zs=x1%*)fq~Me@D}+40xHKLGb>Ca_TZt5W@`T?^&$pL*nK!Nb$CPdx=<i3<{%e(J#z
z7bi&Q6qMcVVG|eW(T*TEB_aVmgMPa`5s|Kggye2dB4u8HYvVCu=Y9{n{T}0NFA!+)
zep?61(f8Xer3kv;<KxHbBnhPbo>URehm;)bP&azAj<f5RXg9kXJ@R@1Hbs5vmu%(|
z9He~dktd5_!V|vqAiKX7Ll7I3*al$7muT0=n>_Mt3rv)0qP`GiKpkecE!D0sIqZ?q
z5_^oq^<V_v#Brd{S01HBv?_TWb5Fvq$<C!(n>bkFcn>>)DE}4p4Lk((qOnI=e3^Db
z{HRBs-+_rTM?F{}2~1ev7#p!nyCr$dBZD7Wi!#SNNUZDq5b$C&c(eYSIkiliW4I@K
zv9EJ8OzWk#PhqpyYQHU?;+4Y<Otf~2*AO{6NGLtU3#fa!2p-n4_&V+P6?L`<jnF!;
zAr_8aK0@of*s_^OJ?JGPOk;D`X)jbw^GZht6N*psN=F9?h-qHwq##l2G%pNs2S)%k
zlRdd!>r*k)D~t<R8XGgcg{3??fuus-R#)&?j>j<GY<6b7HmrKKT`LWZ*<QIOLK#5J
z_IicWf&|2DFPwH9WuabDaX}`tL32B*7uXn-y)CdYD0^Gr^@^<p$N*!37a@MCz<{qW
z$z*TRS~#kf*cdbfmUuB8(-PIohrkkV@s$<{j3wUo9eG&t(g;}2{_wU|UA`QIEJMD&
z+$;AK!G_3kFB0{^TyqTS414cw?a7La-Ay_~GIlrV5Xn$Cy(zj08OB=n*LSov)oX1<
z4K#MG-Ay#ft@ZjWgBgHWO9q=OAdqrwVh?WC=2vgBA#jyP-DE?UfY@aBv<Zk!-dGDB
zD7*@Cwas1;C_unUo4qnnfP~~`uM89*A-UOW1q!c%oNkMk2MRXfJ<Zv5i>-nSDr~V;
zZ~<tGSH=kl0%(gDaf097!T$Sa-mJr!o$ul9j_)&Xj+=G~a<IdUO9Eac&c1!lxU~c%
zKtPLp10=lsa~db}VG5MS(|v5hhuZ6jeO`I44kiliBa`nFg+PA6?%Sd@B);&9T}nvO
zc=^JMwLO+Dgaqvlvb+APjf)?&ktk9eBqU0oa>>~bF~?S|Tk4Qk=3!u>%por(sUNVr
zn}glmQ{Jp!yqUgRweKCCQ{J4Ad4y`fE-IER?BS2JuM?-e3g7P`CZtb$vENfK3ZX&G
z>~Gt(d5LDP43yXsMWJRd0_De|5XdvE-N)LFvNK+p^<cY`xHKgGD+-}O=e<fIy4I2G
z#XjEWEMd2OqRmW#C+;X<dlM4py@+w&)8V4e=bY|Cw(8lTeWw*n_vs<?H6W=zQv6k)
z(jz+A!5Zf}uV#1b)oOZ!BT@%EhtjY546zLh5;ec-3yLiekQgPe`a<1#l0YO92UPs3
zFWk+%isM6kHXHDb*0H0HAA8NVp&j(hXNXw~PXRsK2SdCOg~ooLbB_=AzaHPGRpfd0
z`1H8>0cq?fjT_kFueB|AHu%KlF=7I%!Iu=9gdl;{;KQjo1qYB&v%%Nq4!&nV<R~LT
zobuaotWKDaZX_$*B#e;rjTY+-hA;vi^XJkCAc5X!8382F8!aOcDU8r)8NpAz*F;9R
zrbCkr%I8F@`6vU>CTjk(bdV76Igk0WzV$hxXBGDM8Codw!#CRB9JR-MdK#Itss_jo
z$DuQCA}EYckV0dS(D=C3Z6E=D+|n2%G(K)=Or+5GIB6`vA%4QAbeG_CUI|h+Zzp>O
zxIIqz<kka7pr7zz>p?yR`Uzh_H|`X8D$!5)LS4;o9cWz8=WO<6jr2RBUto=d#<7e4
zm!q*;PiR{L%|5-v970)B5G{0`_bC^BnKs{Q7aX<tE!ORLg0Obpmn(KsK|<a0zEaWM
zAfeBBUqvO)vOyxhJ@32nqE8&45(60;M1Jv!J6}{4vCvHye7IlNhu4k*!~9A#dOgmy
z|NcbHAU6M$c2hZ6!p1>vg<*a<XM;qo!~BRR<WfQE^ARk0TDz}yge^jSKEf|E1C)Wt
z2tOho89hkUGk!7ViGtBVTD8$!{fyrb#}|0Y3uAi!Bo`Jf@HuDrvlhdmZ|5d^`~`>j
zJ@{dL-~JEPu<?g9J>&RJTb|>Y;m0_lE0Ssf`Ohr2`6ung@>y0bV4{{;e(C8TQOhhp
zhWp)I1P|x1k!Q4fE9TfDG&ts1W+>ohm_ufmCaQrQ=Ci!B+Kh_%whY-}zGa63Zio3~
z2Yv)tK!#Yv_MX*V?y$&~Ap<P341h9J$PWW-rSTHNLeigg7zU_U*wP;~e`d`&ZMnm{
z%CASwnWRaG8obWW{{E3ZwKE7<cbx?e65#9nazhy;z}NY)p?r)yF$8s;ANZ9mncIIs
z3SWz#qF3+$avxYqfrQ)#q!jHKfrRIM;BT?TFLsQGK`SfuL%&?#Ne*oEp<k}=Bnv<v
z`mw(IEw3L1wvjJ(BVT;+YW?~OkYZ68;)&ljze@~1kPzKQ9WaxQ*Fr?@TDe%C<#=G1
zUk)HJF@SdY<;Dp}G-H=PCXy16B;!X?LIWBk2J|j}iP)edQVgG6{?gmcb(EupX!hKf
zc|*~=IjZ;Bwa{_MK7Xz_|3D$svd^EsTEbGUxX)kRmFF!XN)-?IMcx7ek_Y@UZvhF(
z1AdvefP~}$zm>OyXl-=JFBUi;XePIHpe?>bewiiXDUc5NW#R%7NQeALT<(Pvg?-Mi
z{aHV-RXO@Sp0E9wBzYDaCeJyMi92<-qxT8F%pbu8)Cs@LA3*}@gkNs-f}|+u_jTcO
z4v~D$IpOzrHjk6d!ZZe&Gym4~{*JEAmcHPkG0j%bfTU9Xm<VkkQAx8Op=}W@ZX!PC
z@Bj`?S{nL7#XCHp$Aqs(NaK+K?(1xbOLta`3`m#7BOs0pNLL35#E}8GI_4c!jgVI3
zGAmsAXh-=tTZq&c7m#x`3PEUG03AS~GD5L#0{dIOepmH`fOIi1(U1v&T;Wq7fiNME
z5^D{RK$s9{)!Ljdss;H{=0d*yx}*9f8-v{RrGUJv72$6BQotj&`#_RVphd#`hz59s
zoNyXD;?X~@o@PUk4^FeyARn9-NVVra2oXR`3v}wjeK0~kI5WU~umcE4&J0K&1PRHR
z0qKJvAvu#wa6wd#!u4}|_;g2gy<IsuUwuG2UxYhfeLy-NNI=vF;C#PFUq*e-1%a%u
z*wcRfKKFuv-om^RjfzrFE@WT%^>*zRTHOIAbXgdX6EH{sEev1+rkpEEmVP6k6h>RK
ze_zz%tY1J6SAZd679R8GhB)~I3E?*aIE12YK1ic8m$Nql`hxQ1whUn|56Htal!46h
z01|9mfrJRCRcvHX?_9mgYCD){`zovLAc3$dAlE%0NhW|0vqRL1zFWi21@)cfYXb6?
zPm~9YH33ZoI*^cA6Tt2n-RX!@XRT*H7wFxp*W0zy(sI3BD|OoXfKNmqhyY=I02%oy
zQ7by_9rllq{$2GuHUzCK-?5x7$~*0yfJda3AOZ1C;EFcpX#s(y<p-=jtbc#+2Q~!l
zOMei^wM<Ma%?|=$k*-AfO7nw2%T{8rMrrG7Ye4B7o#;s3{YXv!<ij=n`}KYF0o=PA
zg!_NhNw)2Cys<L;DQCos*F6UEY-Diq&wX*}?qRm^DQCOiCZ8BogIh}!t^o&I0`C$D
zUA6{fsK-<2vNaHEYZXRwwgx(MlHP_D>~{8eOmA1c-9|8gusx6~rh}+LE7<LUl1hm{
zE7<LUcJ0kEG?JqVR<OG>U&Qorj;h@@1}$NC+x<dI*xdo21xZWT-GQ=JW)}{DCF~wH
zuZ4bf`JRBh)e_}v*F6Eb(*P18d&q%=3u5WIpSk03!TolnE-1b~kSlhxq6#fq_XiSU
z?1Kctej589(Ig*LaC~tjGd!-}rgS}GW8?wjh;6<+U>pg=_=RPX0mhL)NtrpGvXB_I
za|2n=WV|V~-v4a?GYGBf)EGvw^SglZ6I+_rx7XsA7>nQo?mKHBg9O}nG>|EO0EztJ
zyFkHD0kJbn49Xvz-v`tm17c@Z@*vk7kUO)Ig`L?S0<<&x0yQs2BX~$qxg|OxbFoPG
zD77FgEhr)k3Cbf&lmyz4pq$A-!as)ued1ORkvxYP67-AP5t4(jF(lYdY+Fkfhv|Bw
zIZN08B}N35bo2!W-Hc=7OZAtl!4Q5L<MYLcpu7bF5;~0thQy{2NPvw9Vg=k5b}sZe
zpABY>V>M;^mF{PQx{Ke*D1?=BMzh&v`UAD2t;T@~pwU6O`3(|4ql4J|rojRdjT;>d
z)bhm&k!T!xd~`4<?qx_87rN_dGYnG}l4@guN<rF8-gsy4WQTTbJBvo(3EUiyt`L?5
z&5O!F4H7tGf-+DSBGl%LWeZ#C*VK-+>;NVp#s=k_0TKvfgYt+LBoM|1u^&oDv><Ur
zJ2q$?(Go569~+cMw33C>;ITnEqTNm#8My7lf?0clj_Ahh<h6)4nLoGEH#<Bmh+`~<
z-pb*(ie6$@x7O<tF9qdpESTuSm#FsdL?P%_$G&T=H^=LO@(w+2{-97@5F@iS2Lkmn
zQ_J=8_{%|gKOWb1h#M?x$zOfoH+H77-sO5xVro$CjDU$UQ-fF$({VdALRfnxGqGIH
zcGSKSRQSdpaZ&1(AP)Hs36)^IX+fnTy~~m8!Ph`F4=3rqX4xP_PWx7M{{grm-FI-m
zL4WRt0`iSK8CtJF1b(RB!{9%TyQ2LD*F4rHIcNaC`PuiMxbfN7iF=^^`X|}n7v%&U
z73}`^atf4WOZM1J&XCfo4g26JXQ~q}kK(E+uX+&o4(Lj=5tM61zDFcfpB8LW&fjF<
z7j>qy;aBR{#-|769uk-+Gd+kIE6r_y*=7bie5GETm=Tn_L%2zUGBapwEJg$dE?l}k
z)3U9;#1XHzk#v-*C!}7y5F-6t_G3H!y7=6nJQT}Q43wE0#G%+zybMD5Ja%t;{a+>X
zFmR>TCd$kUBIIpDTtRIJ*2{uQRdl_|whwo9%XI0Wn@U%(EP-4IEF%HYY6{%Tf-SFs
z2Rlie5`$&IR#%%d1s)>#n#_<+dRmFEvAfv?kTt>5mi+CJJc`w8*~Tt<_xReN!sk^$
z<)O^lV9P6H87#EcvG`Rev(Cn$?WuKya|>4<XVL4~zpv77jjs>N_cCw;4rSH{F~!r)
zV4i|2j2qb3SLxm28*Ci91-^lBu)U5lc(rXKyY6bePhz8u<3*W`go9+A3gKn9Et%C<
z>u)HDEkT86!o)?XEkR_$(w=z#ZD(d=wccAv?6i&ON2#4;M9Os`g;(M}XU*O8kCUGx
z+(^>~Q0Vhud8IiL+blVlC>nxUN7$k6`ZK<UAP#$J7na|sI)H}oUD#rAmkP9alM*B_
z4v-7b3rGAa)fenU54|$}MNqz~2`0*X5yY#SF<u5#BfGk%-Xh+JsK|A}?I_{~akx{=
z%b?T0WKZ<eOXFV#<t8QWKcUQ*L2Odu1{LbU06)my?5TH*AGDksOq4lD&W&5CD1+hM
z#9Y1fE8|Tz4h^Ix!Vz^Lejj4@^+H{Tf^v5`pAV!%LF_S9avTh#!)$sly>0Ta-F6yC
zhpFwma3>TiMdz3T+=M#WOW&!x#}w!V^kRzBK`Hq-w&NE4riyU|PCk(k6SCt90xhZe
zM54jt3fkYm--iVaC!d_T>9_jZj`GO`PQF$rE`%l*6ts~-G(Ai%=zOdB8(t3{PGMK|
z)^DtwQsCt0rVt^!PALfTE+-NqQwloXY%W)zGOqPcE6AFZS=w7~=kQD`(1Yftd|>f+
zfY)ZezfJF@by!>A<hLJ)3$V2X`MmFm1lZaF48`XWx<Nzfi6Q0o=#bWIV|!;H^YlIX
zKY}++3_1BO6cvE{#88B<PKkv4#89W+bhfXyz?oSn>+KLf+gDqV0YZAA$a!0k4OxgU
zP}_q*ud<L#M?j)13&|BKNT9M1R;VdVzAZ?pI+iy;FKSz7i_kn<7n1u{C<BqY5caJW
z&^^i)u$i+yq|DFs9iX?$uEkF=U*iFMr9PA^cGW-vralxAYgUkesSjZ$qjU@;(y{tb
z$^4MmNF;{X37H#`8;OzytIP{wBN6j0)ee+JAte<3ck)K0_Jf%*NFUk`9FZj8Ici;G
zE6;bfNcno&Cuo6T;anb4R);c<dL6g9z<{~HvBYUfyF4Uw3_L}3%R@4U1PP^=hYD6h
zX*%5}2G1c^gw#w(<dBjFxs@TALrNBM$W<ZAA?Xad1r5G6j*!@+0R`Kw3CZ;_NT{(U
zB-h6v0k<Y(t&dxfp*My29?i8NFw{5My+F(4O(B``;3<$ch2%0BB#<_RuuSIn6XQPT
zu29ySnIli?xSzNy1Q)0KiE&)W*&9+0gj91S-A|0m`-#NM%>I|&!O?ji^%C706wlB}
z`$Kqn$mXD)h7evkY9PDEDQ7<%QohN!|D*rGQH!6#;CKN24u@n$2@-OLL-INWNErNZ
zDDaImI5D`vkA&2t(%_N@xvwmPOBM|NH8=P<p#x&jsgUv``s$mf^?x{OL0DRl%byC#
zq&?1E{!|D_JNYU|XmKj!`|*+%B5ik`4yiv}(!$!B|1RY8@C2CTpez*oK7`0d?{Y{M
zy01Cp%)5f}5b$8UGa+_jh+g!-8LJ<`ML(Xg`Vk~FJQI=^enA5EObGcLW!@l>rkn|-
zZjrU{%$1i&-)y$vm4G@IVgrWi@dwV?mC(MzIlB@XJm*3_vDA+9eT8!&d5;?;DmfP_
z{Ee)H-(cjhEv`4Cyb^fg`4BrkRF6Gy-mZj(*!hq=<&N`>i1Q(@xE&4>5a&ZkgGEc|
z0?7GL@>*F54KPyjd??k+?93|xbs@z5JWTKMzy-S!+N-!=S3(2mLP%bNjPn6>A%w(M
zRD#P}c-qo3SB|XYLa5cv{8SJYMIQ}gzYNp2-9IcWBOI8hWLQ{^Es&^WSXhoNkZ8%U
zFlIba30?Fa7B0F~wuCNvlQRqp7ys6b^Oj)V9Kl+S(3AI%u<M{pBqQuPXuD%X*e8~5
zalYL#B8(Ya)S;n{5#hAe5KY!GB3yJcy_k!3puk90KSHml9%<L1qje+0avK9>P{+t{
z%mSs8_>o~Gx63Hx#ua3@qnY;^eZ~EwZ3sGvA8o5i`xv9cK5>HpB7hhjMn)&pG@!-k
zFkUJUgTRn#jt*aOC%;q>r;UzrtZ1ZOT|LgO!-SgS!g8+!Wl+bsaLH8?l=eBsg{!)n
z8|ZF+oO0*7%(RjECgp)T8-ot*>%wx|0)>E47fy&RV35G53s;Dn4j`dtUAXN7QqNrI
zNf~8bxZVBc*EIXZ=~#bmX5Dl8U$Y;WYu7@XBXh%Yy^TVsWo|emPGdo$mbqbsZ($9*
z$pkWeo2<npYndA^>TT{6p$aMa;>^f#`dyCN#da;UeX=;5Yxx3gpDYf?#qLv_Z=Wm<
zWA{nal80IrhdVzgVzQElT9AA%4tME`xeH%C5FEM$wm5wM1AJ17D@gN~hOw>S#RpXe
z<AuI{1K9LMdR_-SLEU&HCU=midudosP$1F5rPRWGLVqj;R%c#$UjL)xp4GPgZurb<
z+h^RsSZxm<H!xO*F*Q-blkhp$gtNX3i-aeEl54`)#^t9^2}*d@v)d=?vntkyWef)s
zh1Q2<rUMdi>%+)&j$kRICMbTspGi&9A5kja56g20aETq(#fvN;A@qLOA21Kl{#$}V
z^GBJ?WWCW*@sTY=SRdI!6pKG1q1QxBAV15zJ4G*1sz0+DpWs`#pIMCu35?IeKC%4{
zl7zy@x+ytGQ1-qzEOG-7F#TT3^dKR**D^gwNbV)mU!c*NplPEqEbg5Qcv*Me(`c(e
zF|yHCfnsE%Wq$|)sL`^2(&uanXFVGc_D`Z@Qy9mc-2O?j{}HnPD;@9~phv7;0EwbU
ztX=>K&?D3fly4@<a9@X6{s6tO3kXPlZA(&Dd>xi)C!Rv`>o796pUI_?ly-g_R+__^
z(^K`Q9JTl@@=iPf&bL;xKmzC6u$;s|0_WQ>CNY}JL1HfdHeA>o&ZadpXQ05zuo~pU
zkqU@Ge=3ZmlivE3EW8kc8z^D<-Yq*iO?S2WE{soR{7)Hl)%Rhwk4QI@sM~oitXvGs
zbQ28d3XaG-Ktk7ZVVQ1%gevF4GTj6TUC)IJE<#sIH;KWspP$3(g|J9BB@c4v!!q5J
zEMz~wgel$pjQk==nXft`qKsl2X6U<X@yjwFxz~t@j9n-Pl}1EDBC`Mq=n)Z_wu6L9
zBO)cEA|h=khDh6=iO95FvS6%{5m@j;x}=cuImbn^rbQglw;c3l`v4YrRbTHL7r~o>
zy`f!-^26sN%4BxvRsGgl{1OHNAKE-0k?A2wX!CqTriUP*&GV7KWN1SMA_h0mgoye=
zL>Nf&AU8204J27G(4+_%i0;3p;5E)E5#^PL8f8mo={;*fSW1v*PKn6u5G4UNB_gv!
zkWgYu#P`Z2C1iHUBI?vjN?6(9OA(nJlAK5g>LM~blq__|%MmAT4pJOU<1#`dYmOX;
zX(%!yq9?>SOw%}=6%h+R5OA$omeL?mc2-1&Ly%B<Rs;i)-s?%z7@5ub&DLArG&>@L
zA(+IC@RyWws0>7Ald(yWBD@D4$yzNHDMHD)5i1}Uks=F(A{{_Lkp-3_AW?RKr3gr%
zE+9oHA{3D#3nM%tbOr&*g|;N=voInf0-i#0VZ>U?6;VW37Ev;*>h%&wEq;ma0v}?_
zB63iHgxIo(98@6DUCSZ`8QERL;6AfFqOOwNC3%orVfl<?!Dm)-pCOYJ`<!n@vNm#)
zgtFCQRQp!M3X;WSlXbFlK%iyoEEPeb>^jRPAW_vivI+K6)MC<q1AA_s-nMcB4mSCG
z4kmFUns^5bBt$kuygt4Ot(N$l|BYldWsc6%KXSPL8^Pf<9bcA^65H5&3-oI$wpmbM
z0%}`CzVHtcP}``V>nPHeQ1zc?Dqq)Qj;c?sFaa+7^3#aCBMOpAMT+^>3CRHC(@1#*
zAI>E-Z|-Iz7wWfH?Y0ppPVbJ$>=|W%usb4WK#)M#9l;FPjVl3a5A!e5dsOYQ5h!}@
zu@NYG?up0)$r2tt_e7Al(i~bsbLf6HVUeDy+#iv73z!huACY+rNK~^wVojbUq~XDc
zSXhGq!a=)onmrHNmDB8bFd~zG6b9142(p*|(i@nixRn*js?W4|L%%88+e~qePo1UI
zAwLPP=nMjoKUrP@5|BSxUI7x2Kap4LrG6=ey_^>!%8<-W%k_I5wfHF<9uFXQAtJ9c
zfrQ+Jh`cxh5)OYM(qc$dT$~{WIlOu?A}`KJ4*Kk3L|&YcEC5}M;NnbMUOx&9kK!o2
zDA{LVUzT2}Ur`R)Qi8g3cvPN*m-6l$9>ui#0G9>QNcPl9y>Gjbwg~m#$f!IBFXjC=
zGKzz6dIz+W`tP}@;)|BBTi5Fa%)MUEW0kA)ymD|gJ}6KI2+u|3wGoi0=D8>$Gd_6)
z1Xy=0>$ghp(rIi|-qQvXB4eY4;`|sSM8-yOe!P$}zEZ6FoRgzUT~v)u&1M@1>E#(U
zL-_`nR!eEwH#sWf3nYLrIV$4|NSJ$aw4e^=ra6fiJifdbRbPsVIZ5&$Hzg|PB*{X2
zVNsfsI&fvMKzt>tq@txsc7C;fWi<#fYnLi?D*j4TzV84MI=vDt5GxLlz<wo)?ExAJ
zrL+i~5f$kq2uRL|$`Jt)k~5-mM1X|kjHoptN@?*oCn~N3fk2<kv2~y|;GC!&(0B@@
zIZ-(xKmut_6eHrd*gwacu=Ar?i&*np`YrDHQM{Lw#?~?31;u2*dau!o;|rp4yBkb+
z+JY#yyD>$e3}9bp6W8cP@z<kryBkcDc|9t(srg%-3)zk}dTC;zY#Ib93@waeAl!!`
zS%&wuqFHaU&|3Xo_mZd{p_3xDj5JurYS-%5RxPty1}0jz%xW1(sIV;R6MGaO(XwSx
zY}r$|E+hR`vWsi=wpA-_1PYfcqq*X}1(cye(WuC(KmuW96j{}^907W+W{<AZudiNh
zBar*9j>`KwWjtK2j(RK|C|s^49d1I~TKb%8qge;o$#wdTp0zX{wo=m9k{Y*>-LPK&
zsA{7H3?_g#T8#q<)iy?D90m#Cjbzv-I07DSW_N7R|53f!Mxc3mvyDKF+Z>e{cT3*5
z%{25sr?}OUdSPqExlzB*QNGn0y5K@+D|G`cS3#oMtx+5)^x!g}wzF}Y^j=ll?P@9f
zZ?`Pck|)pGqaLxW21znegnzo`*OJ1=4(57W@7-gEjX+ybJ8T3BA3JOW3LiTN0q?Q^
z0cCeZmGWp6Yr9qtvlVaamEFM*BM^_#!@HunV#t96)~;xama;t*S9V2Pw=wsKo<LmL
z8&w)u(L4I*wfJSB(3a9(+msYr_FA6SlE;?4)XTJZ0g2eMH(K0)*g`ug#1J{;zNma{
zR<fYl{wQAfycy2X%IEwtn)P+m5v@-CZcyL9)bwEgw^{FY_m@$;c@sfPTalYIMHO!p
z_gx1Ksu`U8-5oay{qP9-;hBhiAfaDVRA!YR(aNSMrYIa<0S6BcGtawvi>kv`3&8}!
zVXK88sgUI?Ac1h0oCWa!2=JA!Sig7m;;vuW2-Fi_*$7n4S5dhY3K1ZDMX|1tmKs;!
zvUfCVIQ#Fr`WN0~QR^1p71YMlQJyPz1Odd;R;xe)@wC+{kU%_5t(r`8!WC5C*=T0W
z`}&KHinF#9wd8D6rl%+csk2d}rxbIqpq8AMF&6|n<h&JgK|=Dp6>~vC^8BTkdj*lh
zVj>Fx0Y@Gdll}q{nh%S~m<tj}!(uY#g5;uzxuZ1LqBUlsSk|`8-YxpbY|rGF9u`?h
zYcd97kAH*>6c&?x3ns8wO!h5EV6hmiz%L)SCY`6U?%VYl6;osKzATu;jmi76AR#j~
zhWoPX$m?5^5oWTykM#`?%(R*SCYmtQY63_=%#6vG3PA#5W(>if;sQv_T{B}baXp4e
zu{xg_E4+~|z*8j<sAsJ|(N9&?+m+C5$9jCBO~R0!>SL)c7D+O(YpUpQ5C|~we0KK^
z{l@C~HUh1S=f~u38_ED-ek{)K8;}SP=Erc~U<dg~YiiSqOv4U+r=xm>jX^o%3cINk
zBUZ%ZO)ba(V?_)XH`WUbRJbnl?M{88qk5f<K@nn|jX@D&T}%es);vP2i(&joV<2UC
zhaKCkpQ?VxhM;8OotV5k+?po~@5It#*Apbvcqi7r19#lkWbpT5B3S?d$@gM1SpbR3
z-;2p)0VE{fi&@D+Yf2Wj3dd!C+M_$Gx7sRDuCUc^1?37`Ex&~zfVRfqw>QFV+xVOx
z$Fe4{*Y@Z)_&<)}()n<jNZP<_ox5Vn-pqwPcvrd>KShwj1Ay<cz(E3hS4>{>0SWM3
zF`O_^5Cw@Kx+|948_PBW*a#&Ce2PArvOA{kiRJJOol9KEeilQL7Qjx>B_`6e&)qS~
z)2`-<p}qz-exF`d)nF?{89+l!&fjhLNNI@4PXK`ga6=69-S0U9ZZ9=5=YIW<wT(6c
zIaQ<GEE*_{F`0$5;RB^HhPi=mFM-7ErN&tC^Wp;&L}O}z3XQRnhmnaIya=ByQ0&j+
z9dvaCJgCtWQ`$v4CT|;9^XHm@?BIU=sw%K7+tNU4ipfL<<)K7VELzS75=bt8Wn2E$
zl{Pexj<CBM^q$?1*a$S~9<dEU1L;UiPTLRx!jTvzU4FZ-4chEH7E?~KJq@_shhLT+
zG?b3n#-O2eEanqwJfwhfEQT~*^fA4ie=K&zsY`uKM?AcbkH^%Lm-<+8A$!8^W64Ax
zf9vIaJdDCj8w%mgG1lb^eRy@Vtrm^WW?L;9oz0eCLk7^zF&qieE!#Hq>f}!`cIFGc
zYxPey1dYz0Z2M3u|5MB(cKIO#h@WCO@p*_tV08W*V}ly?hpT_KA!wNX9FvRlHhh@=
z94i(l10VtMbF4#0^IeKFZD^Q|$^^dD-*;4xD!gQ1x|uqv@Dc`%&{2i*B~Zu!V^kqt
z0)0nd;K1hjOt?vZ*U|NP8-s49K3^!0`r7alo97GV2X;UL<N3nExH${&0q5Wg0BZ`f
zHf3Um^;Zqwn!+4|j;wO<nm#U06e=P9!QfhuPy{r8YmS~`PFY)sX%_GKfW*Ufh2oQx
zL<y3A%ZNynT~~-HOq2z+zEHl8h?n3|79@YA9%X5+T3^U_y9gJmZa}4Xlb;ib!l3zG
z4<b=`Lm?KL0vK+;u~5ENiI>(<79>AYKv}wUv#}7z13%%j5o$StTVd9b%!eoSCl&X{
zg~-8Zxm!-H-obADPVZR0qfk!CU;=7Kp`4OILaQCr9$FrjQv-IfCEw|t%6Hi!WP)9`
z2*sIQBtl=mDW^t$&ivo&)#abtA_VlgEkbSooJ8<(VTgd*$NuxZ-o1REEkgF#XNyo6
z*heDd=j9Xz4zO>&*SoblV2hAh4ip+<JfjRm4ix6)^X=Di3Uyx=D&c4s_Hnab#GY=}
zljUHDyc3Th{AHosDgX)LFAK3%@F1@bo_m=6w^@I<@~|yJL-BB-OwY>sP&`b2Gs8qT
zRQQ}{3$x~B?*BoL=XlN*B2V0m8(nGz^~2oE*mL@OS5(f8%ZU$MfX$6Z#2sspsDEx8
zGxuid(@NY5iR1msp(REyrDS=WFKV*YN?fDJ#FaI1mA>Pvffk=CBpy3jW*q6TI*#)L
zx-%gjp>y7ht358`pqjUc^J*@1t0dh%&1APSUdt)}6vwta27?RTK8;H!0STc`<LC=q
zI)e-z?q;7>7?lt1#u2p?At%`#moEdL3`BOv@iGAATp$r-cE>&9vrt6xqr=^C@70({
z@QHT8p`*jy@y=cNv3w<Y)?W5-rEyjHURyP)eQ#WD-=hrb*&D|g>%mn6)xfq?8ojC;
zaJnlirv$elE)(2JKJXgiKCw&$NiuOvoAeqmG=ZlbWH()D%&R(RLr~^+FfKDUlz|cl
z<8g8L4-yau<9MHSFh@XjM_5H$<H@QcHUh2fj@Ss~eMjQ)c2Y(1z9aFDo%rX@DrsUk
z${O1mU8|1T2sAGowVOfCcr-4PT!;YSXk2`)0j<EiaGc%O&bYqnxQ##;0gl@UG%XyD
z%Vj!5fN(sH_jUU4R-ngDvi<FhySkpV5p*D&v=JzII~kYTrImbEI2kW4r5#H$C1!>5
z@yz4xja#z2pSM9MaXW8=(6n&gR)eO6^Q6XeG%ZxpIsWj3Qicy;8vcyCv+;zZ8no57
zG(8MYT<Tjo&>x<-q!3LH!xK<w86D_X(t-Z?%%(2J3Z>_G8zUDO<82H&&>x@hiAxud
z0mk?Qu68~r`~%1JFC>)q(H`vSDkI7!-RBIlBi9&rSAlD3MX%$(U?bAu{R;`7$Z#t8
z;r$DVE8FqcDJto*>=gD?m2q{|6dQpK=BFg&D=H`hgei%z$ge>{rzr_cos=wA(iwXl
zJ6UB^Rn^%Dl&RGvWR`_8K&VSZJ4lD4<Mp~k=c~*=a0HyLPh)?nHtw&QW+Twy`ZT*0
zbhth(;S<{tl?olMPfN5e=U=d>q-(e{nWL-Gr)s8+fUl6KGi?M95N0OiVg({Vn3=$9
zB{cU`(k0#3*u<_zr>fU%1TPR?vk|;Ncr79GaEJimwM0B=w&Mu6!CTL=yBQs->TLuc
z5bA9N9}wyj^7c!m;sZi`BAGV-&Jl3CcL5vJ%@|a*z(()`VS$a{2f_lo6@DNrpjOmy
z1l;^x%+lSBzf>)@5%BJZx;P=XRx6bN5EduIy;3wh0EESf%C_d6907kjV<~&LyYaiK
zr8YtkIxMwy2m)cL-HIR(mQpKdo2gR4pW0Z#?&@LOQoX`PC;-9=8=(LQD-tr>g$NK<
zByc%<g7ESX?H_*8!<baP+J*=LVzmts0>tWsTs>4OAwaB7q>HVA8%9EtS=`eY<EY+X
zV}yaRAtCd*N+k@84GFJ!?+_#~HY9M{n(sDND)<h-X7=Q@#z);Z+YmTGQ#U8%1ss$C
z#O8#2ZwMqHHYf1j&{|9^Fb3Y-+mlfCWky_QT$9rmKdnI;g(iFK)<glbCn5JeAO@H{
z39KI}{RfHke@~)#UqbAY5koA7_9pO&c-o(-RANX!5`3B40R)shkdU)INT44`$Ym}_
zpdUzJncE=DU5F(R>wmNHMYkqf!9pn5WGh$*h$dUXLO?W;f=Hhg^-7=fcp~eEL}u(Q
z#wLg7cmijxBMAFSn&MBgKi+DL?0V9|1{3O?v^)|duumom#1;uiV4qB2$F^BO;AwM$
zrFt7bbZxdVXdABC((g*1DK{tND}*3{(VW1B^dZu(t<QNeku@sQ=Qg9s;l7waLW2*i
zsclKSVeI-lj0ZamOUe@!Fj3*KWTDuH1qrBONi66nH)~57z{sQ$kM_aWH8$L4l(FnP
zjZR&`5<QCoP;6vUP6{BofSm9_0&Qdx6aE<5-D`(y<jJfT*gx(xM!Ux(u{CfXDrrZ0
zjbolZ#vdxiC1qX&CXmJ@W%2<MNaK=7K6a6r+L2<D*voy4&nhO_GF1Ddr2Gy6%0OmP
z68l*Xpz`)U=agjD8*Ik!jQf34sB#KJ?NPb2E~!js?z@b~Yw=6uW#9v=&Z-|Iu<EFO
z@==iR(Yj<{dQzMd5d%KzbH1EZrzOQXk>o*cYEqsPNfs8TuOw;zfkJ6}YRaogr65|I
zWEbu-D#}4vN>GDdP0GV6lmytTNgP(u!9#mW+GewR?>4S~a5m)mYy&1lW+&x0gF!-M
zc2eG*1c_8*cCzK2JWC~#Cx^3>t?uB-q2y3<I6K+<Ha^(e6U02`xW`CU%uC8q1}5s6
zmz1LnBo#_pn@Q~{wOc&*wtEc6eTyw;0Ta%$*m4$-fLNTAVE`l`7AG;va6F%b?@TRC
zW@VD%dw4V#EluV`_!`qo4znz&v=o2FYx}*1GY(R`28D+(%Q9+lPb@LLWR4Z=`+JRR
z<166EWF%su%!(vd_IQl}B&b#FclQ}LC08Zo%UfU)H;F+tgI*!QcVpHhv)*MJ?lY#l
z*CccJM|pF6q{>?M=<kgo@wG|$h6R`qT}y6{?{=aLR9Mf<KN$DK*C*vl7)+E|pTvp=
z0}W+BZDd3KU_2b(C~Ztk;wEtfb{#JR`@GGRKN`P@znzpvX+FM~eLIQxfiLGm1a{xd
z{_;noXKJ&JLyOqWgfog3JRN+_?a8d4l9?@kG;$R0_9OxXKi}>^t=WN>x$t3#4j|B5
zJ1k!WiDv9b%7qF@XtN`Uh06PsJ9eN(?#;aMC*wm$^<JyT!A0!bo0PLLNGg>q5cwWR
zVC+rekJD_>IR?}`ky-hm(L=2|VPjB=ej+Is1Rc18pGd~}n<A)}yz@j7GdfKS9f&$b
zz8XUVX!Glo<*^`9`6<g|K~m969@~K|_alSHp1T&miLf;wzx~njTRa8OkCxwp1kjJ<
zx5LT09evIrsjQiq4Ugc<ik=}UJtd6Wk&HW>eezdhR>km?9N}OBYj{dp6(q2Rr(jin
z^S&clb#&&{zZnlWsz#?|&;=I_8=aEd;~=S2N`6oPBrry&a0LmkuBjc#hsLw2$Bchf
zkGB!XrsGrc4l&9AVSFkk7RVrhFg|5%ZFeMcN~ZZSW22*Lij6_$osyDUq$mW8DJhSL
zLm){gg+&teOGmP99XmAuF{CafV+fcKsY}Ti0umy1DJzC_q+Nv>Z0KLmBlrz~8Ft;Y
zpEx5WryV>6(2SIfBp?AaBZVHpl&`3re9k#3oE`t?@5X-roD_Y`g65D;=n&_;l(L9D
zI?xzfi(ew@f)BKLDH(M^0&QMOUJ(F^&_6F#uqY)$KQVadpPy0}rbOtMJjg9b$<QxZ
z2>q|8DD+eQ*@?`)B&FOIy)McAG05m$142x!c!U-%v04a{7nRvKNMJ8X$$R%85!RQa
zlD+xCB9Y>pWl1V^tGQD&7H+UIh1&@4I#~G=`0Iza4K`jc2ghnO>9R5<ziZKnyTHm6
z&gJN%d7a1uR<o8*7=3!KwpAntSZ%o>$^c<?N`6oRB*~;YbvEnhPEBW@b4x1gxwIpC
z9h=a~8JN4{2_xIHC52bXc<kv+!($r_k5|~!PZ`dR+bq@a1i;&@F#;06+h~mJQ=nUC
zDDK>uQg)}*=oWVCa{ZP}&i@&vqZT~THk1Is&Xl}j0}=o`Q}T)pNOb7VREyo{P}<EQ
z26d>qD<!YkNDeHxD<!YkNEU#0rEtXtFNr}81@@$H#ij+nVl)0<MsYc4O9?XYo|L>|
zgTj#Alfu!@qg)nL1N-7%M*s2#TZAmykdpgmow-FDQrI`6zj)D^hEyZ_zkeI89&Aj>
zZ;OHnkw$A2f&^|OjY8TR0tr89OvSF34W;X!SWGsi3a{hSKNSFnrvJuN&t81d+?j@9
z6U+IJadmZ*)%Rc$*K$vgsJ1C3mwF&kZBq){-lNF*I#aayiv9aP#&cC)*$}kJ@|6ui
zn=D_Yd}5;qB7pcRg^eEC2<uFnEJs<7r;W<$qc#F<vK+M$Xp`k=$|n{$5COtbii5Lg
zhU!eI&*{vfr;XW;PN!`f)4s~-l-y`UAqbsLVOr)liaKLo#d$WRT!3?l8%1+j#Zcp7
zEqGSH(w@p$D_TGR0B2Ky0-h*>gmaxug)YcwK@1)(&ZX2}WVDbx$o*_Z3&}#XIM1U6
z#n8^QJu@`T@AtDQi}YYea9~)l#JzryP-SRZ##4}h9GbS`X=mD!8I=~7%TEqBocD}M
z%V>i~u;i$;jHe(0G%79QDM$c~O3Ta)-=iCo&SGhinb8V;Oj>>c)lY+XY?{5gL@O%>
zfoEgW@-23d7$0NP2q`xsQ^D8aXkL10gz?+>__Tb<8%&fLpBC3ZPzKZlmi>&;J3b*T
z6EiT0n?_=GFUNsyli1_W7{8BC!i&;8!SnO1Xi^#p9<GxB2Sa5tJ4!f{)AA*0Fo82U
zjZ-IlHv?s0fhp{+kw)j_l(bAH!9<xUX(W?N5X5ruExLK>thJd%BaO;z_dIGgy+|CO
zX3uBGo-^)_&$rqOCS>PRd$ALbGHCDX>`$YO?(x^t^0E||DD!$6;}aW!C<AH{TR+;k
zE568T3z)>Ew%pFkpuKOfc4Le?<8N3t3Gnv5K{n~d%b>kW*=u8r>*7n(^5ysdZ|~AH
z1|?;R0c!7Z<{WGEj4w~iY!Xb=wLFb%67v(vz`a(oKaVwj7hjo{*)5nTvoekB7CRs)
zgOQnGd&U~K#4~modVe@WWiWbC21D;n)@z(m8GloHD=|^#%{0O=j!-~i2XhUZFwW?h
zTw~jZUc+BQ_E|+qI6jy6b~<YtJ3P)<>3chkduU{Se6tQm;20R<J#LUNHE4bYM^AzA
z4z-&;lpUmgc$dYWH*Su<Yv}?e%DhXu{D+qT^#L38yiptf!0OMSLjCXo^=A)W2K}&w
z6;CjF6>YKX7v%l0h3tom@u&;^ur;j|V*@jHtWn77Cm2_zz~I-w=rIttrqe~{3CdHt
z;BYCO)tqKOO)!pmKTac2;ZtK5YTsvRo|d!mlMHA1XK5LI@CeQMEG_d#kkIP0H0DOy
zt?WW=-ODyj!fxeWYpjEbp5JSYb&ymjEidGN1j1fwCB@w?)aC|u)eDHb4K@P#MMGL1
zHlhp=8q&q$dIm@!G^BAogMS963z3I2b6zmUIVujP<wON8gbt@=x(Jd=QAfW^Ge#G(
z+&An`FB<Pxe`D86M+4ua<vuIQ0OFf;RAj9n0r5>5St~`$F67@Q(tL}EJw3&6R-Ulp
zBpyNVgcT=2Lh!_;IN60-_q~Xd*Mfj1-`gtCr1iaRJest=w*n;!1L=DTl*91l2lXmM
z%A&0KnN!SgsGc!J)>7aq>d^7b@rp64e0-7YN-%*nzDRZ@NMMaGLRZo)m#fIe6WPbF
z7&n$rv_+`zCKky}5|n|+#3F1`bmJoEyUFbOX-1E0Cl|>`e-*#KGr34cdXPYvTqN^K
zkU*GRguHSU<yKdLbiQ1q%qUW$b69G+o?*Ke8iQ-WhZ*od%z+?*@^X>Pm_Y*N<sz9e
zgTx&8a#6vIB9So@gU^9ei`3~wB4d_3$h}e|GiJ%c95}6rGG^-4tH>{AIf_KLPMCpi
zomC{KKRkmLvx?;O2NGzrimd7HDsqT<MPm9}Khtnl&$Ep}*~~oKDC8gWisbYMK>*Dw
zLa*X3ta`Q2xv(hf9p-q|xW%)uNG}qD^lIwUH>givX^-E)d&4phNZ`F;^(;u>y+J+u
zB${+J^}ur0W|r~K^5wP&_3ZK@L%cA6G7wo_gck<r!02ikm8;k%vy8jSR~5;fJTM`$
zsz`pr8YDzk6(RjWxQ7U+H(8(8jGh&5+O<%>y;&r`!ih3es0dM;Y<)G^daX3|f!AQ_
zwU(*z2!d-ZQ-g%y+DoRsnoRw+F!i+{fb+IxYmoe*bU=_mdfT!!NFcpUw*Dh*eT~og
zUQyQBB6iyx<M*ETiu6)p>}$x_9|~jRHvm7h+5{4SA6mu+3BV7@*jJ!U*N~02veETM
zoARx;2pM~;HH=UOB3o$~-O5E^?Cq?n-ngw|yDdUM+pYe&h8uf3_0M)X{kn#%-H_=!
z*Z4%KZm^mTE;Mbh+zccz8j57n43dP3Fi(9$WA7R=|Dnu)1;(R}YY*8Nv=?#6#-NTk
zR3r};Ap?v<MVNp1_`L=l;rymZIr%^1_y20a5+fG{ApeauazR4=8*Ai(#K`@osNkd=
zxy0Zj_gInotsJ?M2f5?c$dxRN+!L2Z?llxuzbm>ddj&_ZMD_|2s(fep6i7gRcgd%&
zp*-V^^eGT9&KcV%v=BIB8-*4EXDpvWVIZ9$pE^v_Y?aS>z9?%FyXy_(koSC%o)kV+
zMLspGSiFw~0*J$krI|niaagg8%^-m|tQby39#TcV@C=JAHEyeVrdS4AFoEz)vGjA0
zRH#^flpZ7yo+(DcL5G4>G@zelbCw$SS3hebkjb7cmTyp_3=p0zE)fTlAc62~vAp<K
zMbwyL9v3@;faI8B85luAa!j!dj39YgD==1(qfIOpH&#J#>QXDn-6q<tAa|QsEF&Wd
z18HJ0EW0`g%U1iGn~JmcWwtIiGNyM^v6aA7lW8{#)3VA9hO=U`Wm!A|;%3XTAc44<
zEc;)2)vcP^JU#Q!24h>G?er4aAaIFY61jpeYe7P2dI{cN;#Z`qVNGX!iSl};?@nX0
zqZU7fx8nii>PzH21rl=gC32nu32(12DR{j^%u~eR-afZPT~H$CDanJ}yb?K2Nfx|)
zehJM}GyGg}%$(axlut_3+~|0J^16o}8IT<CXXgFA;b-GBMt<hw-Nxg_pHM_>_*C=Y
zu)Re33rMKCy+m3XB&ytAf<*wGKY)a)+e?Z*fvR+uoET6Qz5a2DJR_^7Zr#adHX5nQ
zowntu19z54S3nuS?kurfp_&5s-V*K#*MR`SURyy5+<R>WDRS(!6{N_qw*;<mj0Ra(
zpYuRT)=wp@;-GQVd!WR+yxf&s;ZTX#Vg>=oLss{I1mvL-Im$o+@=ytUfxiUXl{)Vz
z`>Dy;Q*qRmAy+tBVu(Mcf-;afT7vJ?kEJ}aD-Em@?7|^qe8q_pd4UE@$ebwA_<b-c
z1DO*gxDQ6tURR<{m57l90yaHmnGYl+Pg&*z$;(>i>q;j7QJC)r5S)_z3leSp(J~)M
zApK~W4<wL&B=gO}*NfC{cy+iWYf7mj`WrU%I4)!S@hfa;dC!$tZ;y5(I}R=7cDx1z
zu!rLHA3h#H0()qwv?EAh4=sfq-=K-58(QxiRjQ0FRio1>shh`sJZcQ91<R5rn~o}#
z!vy6aKdMv?6Oiz|QKbcAOT{oD1|KHRma1b)#W0aP$URpohlylin2av9(z$NbJ<pel
zN#Un&j93K-F&*F$lz6^WdMZeOJzr{>x*L%%&h388aCCjKRN5F!*x|)eIfg(2;>A)q
zhCq@`DQrw{6m`b|UTN0PrR?eB#yur<rI-ik>p9(V?Q2@8@@lC{f677wEv|hLkNtey
zSbf9vQuQ}{|4ckW3uct6y)NURmYKw{;AWR9^8oiR3k~Kc7W?^x@qahY`5#$YhSry=
z-E1_n{oGRgt#1o$VX3kNXxP=2$|2YhkFEdK__TIWsl1cMl_T>mE>-_#!;#tED8-)`
zw&0eQDk}j;e|eCLAZ$q%?S%>!thlUH{+&U=0q*ir`4<fZ2e>Or)f9c+Ll|*&sj?Qp
zf3<+|20O7>+fzorj&GK#U2Uak8T?kM`~VS$qtUR2s^kmc?&Rzng|l}6fll6NIV(u0
zx6yKTkPzKS&dzUFbSE#`%%-0<CY5itWyrxdm&%}lGLYF^il9LsUF}X*d!POBJLBrM
z@8iurv?zy|5P82;#te`UdA}4f<04(|>kiV{SgIV%eDIxdA*U~Xim;9c(6-TXNsxeP
zv|JJ-U>ZwhSO<xr)mU0|5JQW?Ix$38|FRTe{TaII)t!RO=}g&KL&IMZwCka@@##`|
z8iPWp=X9w@3?`7M=X5F34GMAHDa<#s(-?3a@f(88*02K!!DegNfrMc5rD4~dQj&9}
zB3A$bRnFNe(AxN%-Bilw&e=_+eC`~LzBzdqem#87m&>x=&iwR?G27{RxlH$)!)cqg
z2le&L%<HQ8jH6;^nG8wb0&HfP!LQ{~A%M*+qpx;QnD0TIGn?J-H0M;zwq>Z7XP3#<
zG0H$@b{W$8(V`-B^Xr+m8fJ>Nua}AYzd$0W*UJj{Mk0|Adc6!C^Z~C($C=TRGG!C{
zRyW^wFDcXW@pr6A0Tf%tHXG(0<;%+OH45?>FoCtKte~YuQlYZe<@`2p59-Gite0t4
zm#-*O#ry>(L{^jq#U3_Dh^#2XB^~<AK@aM;Rcw)I-cY`(Ocft`0uv&u%EID66eL7e
zmEk~?E(!FY4qMIAx#sodtIJgJ$4kJ3$m%k`IEMuZk=13mcSje1dr+qR7JD(*>{k9(
z8U6;NXba`kZ<WPqfK$^br+%xfs;g{1Hu%;uhYQVLTc!%9>%lLwuPuv+&m)6`$l9`Y
z9r(@U9<<-L9-m}4yO*!GMQAg9y)8nU>FY^^zBAE-Ho!Ns6E5@i_8ZGoanJ}RL^hU%
z#7BWZLS$oE#g*nndWov1&$**4>q40$IxO?|JTsZiwtt=zs!jIo|8Vk->u%|B?*q5?
z?(;y8UcIint<QDWCi~)ZrufonIeqEW<ljEUM|AoR;>GD%|C%T99n^>V4jf3|N`0he
zAbo3^{y<_+D6yjq2kBK%v?qMnxwA~!U8Y9c&=-DzMBlN-XIJ@mtXr}wuUS-!5@LCe
z@(|xy<`#Yf5^dO7hKnnd?14m7*jX0cT_z5wh{4Zoc9r3BF~teVfkW>q!}%Ls^OY<*
z%Gp)cwVRotslO*VcSD(SQ*@q^WFHTA23RjY-u~-1NVLopAK31Cb+RvXwLcMy=l}0_
zV9A921`m>7-!_wd>4UHX@v&HTdxc)e{`6i>fZgXa2R?`jMKDD5@WzHRdF%|5t0TX_
z4HC_6D8ri$<YFM<R1IaFZsebOA(B7te1kbmv<1y=D#Pv2?;Z5H)gU$H=%2u`Dx=ZT
zR3?*wo(i?SsZ6evK?1F*3@c?(8EsKFl_lEA%DA&Ol_lGn7wKwSPm1qn%9LNqGGhbg
ze{yQ^+p2~F{299%8uMrDYAC>;p=v}|Qh+~GmiPr-N$-~fSL9A-%hdB_B6pHJ$ek;b
zxszleclx=Ea;L^z+6~8_IvL(FYZ-eXYJTA!-ZCe~Z^sl+03E@G#>|Suh?er(s$jxe
zBU)lNXabCvQ$WUeF7r{$^f}_swN&`sXyT&Ob1iW<x(6==YBal0X!eSaZYe*lia$|8
z+?H5u(Y8JQ`UsYm?12_$$C5EEl?t*ZF;Qkr%eL*zXH{MZq3*?&_+yA?G5+YwxMx~m
zpSKz;9<(4pDZq;@EBV@%NT9yhvhB6h8=Qo?FScyg%fxpvK*Qow*tvvxO?-;27eA^Y
zy@c-YG{){sLU(5CMMoEm^ujO&4g%dvYy}Qz5-+us-y#MRW&XdW&M&Cy<BH?={)Wr6
z>q94(bfk#Ci-@xOqe+cMP(=AJ5Cw*$*v>S0X!DfmzqFmawS&>nrVp(WGF>&!=!2PB
zwG%OtYubXDNkG&wh}wc+I@2b#iI7YNlBsD8)6d!8-qN>w&hPwo&z|$$v%7cqclLnh
z+dvXTix9v#LLPH9k<1*?feU8BMe2wq*ZcLjg+#OC+2m@~9b}F#=_K11$3-Vu!SEIV
z?38_Gjk=jRr2~g^VIp)&Z>m=RiG|pv8?fJBt3J;RENL#Og9r3O8;G|-USm3cP$$ST
zQm#7FgPO%vEg)@_u#?rn>-J8$+SbFbI1t0fd|CaK`0H~>tee$rI|wEr!DLpKy{_Z%
zA`BN^&S@WBJO>TVX&+uZOTx=JO?def)hUX4hIO!}=ytNi{#L7xo1o%;!ZW-!tbKQc
zbh7>kBP2QvYc{Y*kshSD#O6(%n9)f|k#4)jQU&%Sqn=N{sZ*gtITzC~Wy3t~3|JW?
z#X-jjr6E!FEpejkKP?x%M(jkSz7~$?z<pRHOk_qh;f6EOkWiyGtWcHV=u$b3E9LNS
z1TrXj!Tz{HRb(#Ypa7FMF9;NV!6_z$0Q+S2PZhE(pVUDNX}CyDYW}W~9s)^GlX_#T
zL%5KrIH@aJ<R}4;vDK92-3P*{Tql7^5mVAhe&A$4_)XisPCcEuse>wCt|0uTuHK?v
z6fi9ph)>&F>(p<`rk8XPh);_yy8u%YOLd+26kE4?Q~&NEwRO#3HDA@pWWI?N(R(_0
zU+1Ys$tT+6S46_gE?cjDmaO`R&TDYf`S=;7-`06g{~w3O{!_CglKDlGz;spzA8Pw-
zliJt=O-o?JIVB-6#jGxlCnu1+JgYe*CTN8Ot+TrPLyuNrIJC~?(CRrTF_%NDX9-&8
z1g-A>geFjtKTqz0PwX=ftG|4QpD|Q<fI{=ye{l<mLi4)R1vfMhsLo3ei4~IN@Vwse
z2@1(r%ySe<Q~iR@TPOE81$oWs{Lgga=l1s-mA&sXO_rfP8N!+c#EUxHT}c@3UetcF
z3!4fTwNF_ENrj7=wT28;kVK?KosMsp7Lp}`lPIWBlX1Dc-)n-7qA`0qPp!@Vy-Gcp
z?12+6@S9zWdX3**faLXF!@t*Y1v2pVnu2!cK%Pnk!nr@rROvaiu-9zJY2k!iF||9?
zza+IjcL?n_iI+{X=zUV_KlPLBzRm1&ruQ3vjFX#y`18;NCho$JXbtVQ^HPvh&}Z1r
z<B%{U5Bu%p7WH_h-}rF`CNlj7SNu{&wL<Bw2eOaWsAb8_0ZMj#0<N$Po%j{$6NS=?
z58Iz^RRfvB#-}=miO^xgc@vjbyij`aQM+@Sx|%s^0*6K3lumrqfW^1slIW(#?3P+J
znmJ~I_yB65>!!yHX9ntU{dSHF7*eN{)T!F^al>&Z=>yxP51cT;Df^>3Rnx<-cs2{4
zcAhZ)vIj_XJz>}r5UfFhwG*cFl!-&NFdX<#8Xu}X2Q^O`AF4e|z<<&J{>SkR*Cm}c
ziF5d-qonDFw(E9krERNMRbM)7Qe`f{avhQkL;LF0gW-VjQ4A&}4;Uf`*<4fHe#C;t
z&eW^T;TaQba^{AK%o)S}uMD!>ZzS7W>l@Uz@Kxi(6ine7!W5fR$k58O_SX%nAv|k>
zN?(q6<gD3TEfzxthYZ?}8dPmKXnYKZiOirOhRYcat|F54(GGIWhOe2R#+M^u^EFdj
zr{rt|d9>ub!qG<6T$Wvuk+7K+neXDW7S8&b#2Z-Wi4xm+n;U0Jo7B$q9}OG0;=LB}
z-jE5-i}xzO1xcCE@fmtZ%raz3<7FQtts62GUv)l&#D_!Xf%D#n!f-wu&iT-D&}i7+
z*Q^Sb4~yGAmT{2}EJjS?&uI2H#>G{aQ$@DBS&gShOe*8tRwQm4#b0r!f<zZ+w>nBe
zQtGJT)+|0Kh2-Iw?b)ujhGR=I;=eJGS?Oe;F52nsDidBbe$G<l{CCl8+U#X$;U&Ag
z1({36PbRt8h&L}8CX;2Z9Q=3Le!WGl4KL?>%tc1XToxb8nV=%^-xYhHMYXTGlJhZ4
zWUh#hV|}po+c?g?vt1RI%0d<@9{sqI2+_9%Rwb@D2ETDz*Q!dx@m$Oxg$**}5;N8~
z8Dia4ySr7DhgVJDF2q3(ncZDAoL!7%nA}a+5s{f#GJ(wPCd34*Tschbu33(ltPZc4
zARgt(fr896!>3=d>dfq}+Z}C~>ADHrCu-CsGrQ|%-FjaR-@M(h&r?p>jiq+Uoewum
zb&Yxwc($hVr%d7<K+x?laKC-GO|_+`3_0Zmo~;7UX%pOX@a%!aWYBT08%S(6ZC1wF
zej#z*w1g`OF_6G>+UQ#zp2BeOoXNq{bI@oe7h*h1Ld=X{b%BG>DXswez$89Tq33&f
zw(iUqR#@&cU6u`ZsFoo8K@PDi1hIGihge9|gN_jkNkw-AjWPq{Ivpkh_KkK`5zgjZ
z0TY>7aRt+0WT58k7dupaW-d1fz!a_w0^>4NtdNj1pM9!BbtS|395~=2H80?(cS2xx
z!A^Cm#*&4cGgdgvE(pk;jY|TwcTIK+6Z2%r-K7czws)mM{zsMyal$=gpXgG5Sbfg~
z)h;-}Me3g6>c0*=+m_DX9VL3BWKo?M?8~<EQT1@a?g+=q1iwujyC({si|lN<s_KEJ
zP#CdiA+gS$$a@x&HtvbMXCd+Io=86z#e;`1oM-n&e(>-dG};^a!Naq}vwI^vJ0zav
z(xH7(;>GOF$5c&_-WR1-y4X`Jp4=b#Ik`RGt@1<2cogO#<?fHLhjjH~ab%x;w_CMm
z`Xaxof{9FDBsXY@&5FfmFWAmq>Q~_lOG1t-Lf>{WG_v3RdzX50b${eLRk8D9e?(>r
zxlrzrbiR!ehcRor?RrcV*#2**#sVAh4UqJgN5rfLqu`~;O-OC{O_l#W==jhqPf_(?
x<P&T|QsKdfBZ|^rAhGJfXzfehs={zqJ(RPm=g^cxIjee>SoIKAMXA)L{{pTi_?iF!

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 64295456..a9dd62b3 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -223,8 +223,8 @@ type TermSemantics int32
 
 const (
 	TermSemantics_TERM_SEMANTICS_UNSPECIFIED    TermSemantics = 0 // unset — rejected at ingest
-	TermSemantics_TERM_SEMANTICS_ENUMERATED     TermSemantics = 1 // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction) and are enforced. `Pricing` MUST be present on a catalog term (on an offer it is Offer.pricing).
-	TermSemantics_TERM_SEMANTICS_REFERENCE_ONLY TermSemantics = 2 // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and are enforced just like ENUMERATED. `Pricing` is still required on a catalog term (on an offer it is Offer.pricing).
+	TermSemantics_TERM_SEMANTICS_ENUMERATED     TermSemantics = 1 // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction): declared terms the parties agree to when the agent accepts the offer. `Pricing` MUST be present on a catalog term (on an offer it is Offer.pricing).
+	TermSemantics_TERM_SEMANTICS_REFERENCE_ONLY TermSemantics = 2 // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and bind the parties just like ENUMERATED. `Pricing` is still required on a catalog term (on an offer it is Offer.pricing).
 )
 
 // Enum value maps for TermSemantics.
@@ -907,12 +907,21 @@ func (ResourceMutability) EnumDescriptor() ([]byte, []int) {
 type DenialReason int32
 
 const (
-	DenialReason_DENIAL_REASON_UNSPECIFIED               DenialReason = 0 // output enum; zero = not-applicable on TransactionResultItem.denial_reason, rejected (not_in:[0]) where set on TransactionDenial.reason
-	DenialReason_DENIAL_REASON_ACCOUNT_INACTIVE          DenialReason = 1 // the requester's account (the billing_ref minted at Register) exists but is not active — typically awaiting the Exchange operator's out-of-band activation; the remedy is to wait or contact the operator, NOT to register again
-	DenialReason_DENIAL_REASON_INSUFFICIENT_BALANCE      DenialReason = 2 // Requester's balance too low
-	DenialReason_DENIAL_REASON_RATE_LIMITED              DenialReason = 3 // Too many requests
-	DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE       DenialReason = 4 // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
-	DenialReason_DENIAL_REASON_RESTRICTION_NOT_SATISFIED DenialReason = 5 // Accepted term's restriction not satisfied by the request; decided per item, so the axes are in TransactionResultItem.restriction_mismatches (whatever the item count), same RestrictionKind vocabulary as the terms
+	DenialReason_DENIAL_REASON_UNSPECIFIED          DenialReason = 0 // output enum; zero = not-applicable on TransactionResultItem.denial_reason, rejected (not_in:[0]) where set on TransactionDenial.reason
+	DenialReason_DENIAL_REASON_ACCOUNT_INACTIVE     DenialReason = 1 // the requester's account (the billing_ref minted at Register) exists but is not active — typically awaiting the Exchange operator's out-of-band activation; the remedy is to wait or contact the operator, NOT to register again
+	DenialReason_DENIAL_REASON_INSUFFICIENT_BALANCE DenialReason = 2 // Requester's balance too low
+	DenialReason_DENIAL_REASON_RATE_LIMITED         DenialReason = 3 // Too many requests
+	DenialReason_DENIAL_REASON_CONTENT_UNAVAILABLE  DenialReason = 4 // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
+	// DEPRECATED, never sent. An Exchange MUST NOT send this value. Restrictions
+	// are declared terms the parties agree to, and the Exchange never enforces
+	// them (see Restriction), so a purchase is never denied for one. A receiver
+	// treats this value as unknown.
+	//
+	// The number is retained because removing it would break the v1 wire
+	// contract, and it MUST NOT be reused or given a new meaning.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
+	DenialReason_DENIAL_REASON_RESTRICTION_NOT_SATISFIED DenialReason = 5
 	DenialReason_DENIAL_REASON_REPORTING_OVERDUE         DenialReason = 6 // Requester has >20% overdue reports (MAY threshold)
 	DenialReason_DENIAL_REASON_OFFER_EXPIRED             DenialReason = 7 // Offer TTL exceeded
 	// A signature this item depends on does not verify, or does not cover what
@@ -3642,10 +3651,10 @@ func (x *License) GetUriDigest() string {
 //
 // Restrictions model allowed and prohibited values on one axis (function,
 // geography, or user-type). They are validated and normalized at ingest and
-// RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the
-// term whose restrictions it can honour and bears compliance, and enforcement
-// happens downstream at accept → report → reconcile. Restrictions are NOT an
-// Exchange-side gate the requester must pass to see a term.
+// RIDE ON THE OFFER: they are declared terms the parties agree to when the
+// agent accepts the offer. The AGENT self-selects the term whose restrictions it
+// can honour and bears compliance. The Exchange never enforces a restriction:
+// it is NOT an Exchange-side gate the requester must pass to see or buy a term.
 //
 // An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it
 // returns against the limits the query states in ResourceQuery.acceptable_restrictions
@@ -3681,7 +3690,7 @@ type Restriction struct {
 	// so a new number was never the extension mechanism — accepting one would
 	// admit a restriction no consumer can evaluate onto a term whose default is
 	// BINDING (see advisory below), which fails open on the axis a publisher most
-	// needs enforced. Closing the axis does NOT bound the cost of the one-per-kind
+	// needs honoured. Closing the axis does NOT bound the cost of the one-per-kind
 	// rule below, and must not be read as doing so: a number this rule refuses is
 	// still distinct from every other, so that rule's all() finds no duplicate to
 	// stop on and walks the list in full anyway. Its cost is bounded by the size
@@ -3763,10 +3772,12 @@ func (x *Restriction) GetAdvisory() bool {
 	return false
 }
 
-// Quota — A usage cap that gates whether this LicenseTerm remains valid.
+// Quota — A usage cap the term declares.
 //
-// Quotas limit how much a licensee may consume before the term expires or
-// must be renegotiated. They are NOT billing quantities — billing is in Pricing.
+// A quota states how much a licensee may consume under the term before the
+// term expires or must be renegotiated. Like a restriction, it is a declared
+// term the parties agree to. Quotas are NOT billing quantities — billing is in
+// Pricing.
 //
 // The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on
 // Quota.metric below; the quotametrics constants + IsRegistered derive from it.
@@ -5583,8 +5594,12 @@ type TransactionResultItem struct {
 	// denial is answered here, in a successful response, also when the request
 	// carried only this item: a denied one-item purchase is never a non-OK error.
 	DenialReason *DenialReason `protobuf:"varint,7,opt,name=denial_reason,json=denialReason,proto3,enum=fora.v1.DenialReason,oneof" json:"denial_reason,omitempty"`
-	// When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the
-	// request failed, in the same RestrictionKind vocabulary the terms use.
+	// DEPRECATED, never set. It named the restriction axes a request failed under
+	// DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange
+	// never enforces a restriction (see Restriction). The field is retained
+	// because removing it would break the v1 wire contract; a receiver ignores it.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 	RestrictionMismatches []RestrictionKind `protobuf:"varint,13,rep,packed,name=restriction_mismatches,json=restrictionMismatches,proto3,enum=fora.v1.RestrictionKind" json:"restriction_mismatches,omitempty"`
 	// When retrieval_endpoint expires.
 	ExpiresAt *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=expires_at,json=expiresAt,proto3,oneof" json:"expires_at,omitempty"`
@@ -5697,6 +5712,7 @@ func (x *TransactionResultItem) GetDenialReason() DenialReason {
 	return DenialReason_DENIAL_REASON_UNSPECIFIED
 }
 
+// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 func (x *TransactionResultItem) GetRestrictionMismatches() []RestrictionKind {
 	if x != nil {
 		return x.RestrictionMismatches
@@ -10319,15 +10335,14 @@ func (*ErrorDetail_RequestAuthFailure) isErrorDetail_Reason() {}
 // purchased. Every decision about an item is answered in the body instead, on
 // TransactionResultItem.denial_reason, whatever the item count: a denied
 // one-item purchase is a successful response whose one item is denied, never
-// this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item
-// decisions and are never carried here.
+// this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried
+// here, and RESTRICTION_NOT_SATISFIED is never sent at all.
 type TransactionDenial struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// The denial reason (defined-only, non-zero)
 	Reason DenialReason `protobuf:"varint,1,opt,name=reason,proto3,enum=fora.v1.DenialReason" json:"reason,omitempty"`
-	// DEPRECATED, never set. A whole-request refusal is never
-	// RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed
-	// axes ride on TransactionResultItem.restriction_mismatches. The field is
+	// DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the
+	// Exchange never enforces a restriction (see Restriction). The field is
 	// retained because removing it would break the v1 wire contract; a receiver
 	// ignores it.
 	//
@@ -11121,7 +11136,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x12subscription_quota\x18\x11 \x03(\v2\x1e.fora.v1.SubscriptionQuotaInfoR\x11subscriptionQuota\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
 	"\fext_critical\x18Z \x03(\tR\vextCriticalB\r\n" +
-	"\v_total_cost\"\xb8\a\n" +
+	"\v_total_cost\"\xbc\a\n" +
 	"\x15TransactionResultItem\x12\x19\n" +
 	"\boffer_id\x18\x01 \x01(\tR\aofferId\x12%\n" +
 	"\x0etransaction_id\x18\x02 \x01(\tR\rtransactionId\x12\x1d\n" +
@@ -11131,8 +11146,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x04cost\x18\x05 \x01(\v2\r.fora.v1.CostR\x04cost\x12,\n" +
 	"\x0fsubscription_id\x18\x06 \x01(\tH\x01R\x0esubscriptionId\x88\x01\x01\x12J\n" +
 	"\x17subscription_unit_value\x18\v \x01(\v2\r.fora.v1.CostH\x02R\x15subscriptionUnitValue\x88\x01\x01\x12?\n" +
-	"\rdenial_reason\x18\a \x01(\x0e2\x15.fora.v1.DenialReasonH\x03R\fdenialReason\x88\x01\x01\x12O\n" +
-	"\x16restriction_mismatches\x18\r \x03(\x0e2\x18.fora.v1.RestrictionKindR\x15restrictionMismatches\x12>\n" +
+	"\rdenial_reason\x18\a \x01(\x0e2\x15.fora.v1.DenialReasonH\x03R\fdenialReason\x88\x01\x01\x12S\n" +
+	"\x16restriction_mismatches\x18\r \x03(\x0e2\x18.fora.v1.RestrictionKindB\x02\x18\x01R\x15restrictionMismatches\x12>\n" +
 	"\n" +
 	"expires_at\x18\b \x01(\v2\x1a.google.protobuf.TimestampH\x04R\texpiresAt\x88\x01\x01\x122\n" +
 	"\x12retrieval_endpoint\x18\f \x01(\tH\x05R\x11retrievalEndpoint\x88\x01\x01\x12@\n" +
@@ -11658,14 +11673,14 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x1fRESOURCE_MUTABILITY_UNSPECIFIED\x10\x00\x12\x1e\n" +
 	"\x1aRESOURCE_MUTABILITY_STATIC\x10\x01\x12\x1f\n" +
 	"\x1bRESOURCE_MUTABILITY_DYNAMIC\x10\x02\x12\x1c\n" +
-	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\xbc\x06\n" +
+	"\x18RESOURCE_MUTABILITY_LIVE\x10\x03*\xc0\x06\n" +
 	"\fDenialReason\x12\x1d\n" +
 	"\x19DENIAL_REASON_UNSPECIFIED\x10\x00\x12\"\n" +
 	"\x1eDENIAL_REASON_ACCOUNT_INACTIVE\x10\x01\x12&\n" +
 	"\"DENIAL_REASON_INSUFFICIENT_BALANCE\x10\x02\x12\x1e\n" +
 	"\x1aDENIAL_REASON_RATE_LIMITED\x10\x03\x12%\n" +
-	"!DENIAL_REASON_CONTENT_UNAVAILABLE\x10\x04\x12+\n" +
-	"'DENIAL_REASON_RESTRICTION_NOT_SATISFIED\x10\x05\x12#\n" +
+	"!DENIAL_REASON_CONTENT_UNAVAILABLE\x10\x04\x12/\n" +
+	"'DENIAL_REASON_RESTRICTION_NOT_SATISFIED\x10\x05\x1a\x02\b\x01\x12#\n" +
 	"\x1fDENIAL_REASON_REPORTING_OVERDUE\x10\x06\x12\x1f\n" +
 	"\x1bDENIAL_REASON_OFFER_EXPIRED\x10\a\x12#\n" +
 	"\x1fDENIAL_REASON_SIGNATURE_INVALID\x10\b\x12 \n" +
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 71c24173..3774f455 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -437,7 +437,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -486,7 +486,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -612,7 +612,7 @@
           "type": "string"
         },
         "restriction_mismatches": {
-          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "description": "DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index c05f0719..03e414c8 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -450,7 +450,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -499,7 +499,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -626,7 +626,7 @@
           "type": "string"
         },
         "restriction_mismatches": {
-          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "description": "DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index 0e9e0730..71e4ff51 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -519,7 +519,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -567,7 +567,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -746,7 +746,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -770,7 +770,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index 7eb74cd8..bb913a19 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -527,7 +527,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -575,7 +575,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -758,7 +758,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -782,7 +782,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
index 9b908f38..f61ec84d 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -238,7 +238,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -287,7 +287,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
index 3ce46a72..43934b12 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -246,7 +246,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -295,7 +295,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index 178c2fe6..3647f731 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -178,7 +178,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -226,11 +226,11 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -254,7 +254,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index 1d8e0f63..e7156cc1 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -182,7 +182,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -230,12 +230,12 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -259,7 +259,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index 5a95d351..e8fb4c84 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -291,7 +291,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -339,7 +339,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -518,7 +518,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -542,7 +542,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index 04b40ed6..612dc9bc 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -297,7 +297,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -345,7 +345,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -528,7 +528,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -552,7 +552,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index 3fa2ab51..f0908117 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -430,7 +430,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -478,7 +478,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -657,7 +657,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -681,7 +681,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index 88ab92b0..a8aba48f 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -437,7 +437,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -485,7 +485,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -668,7 +668,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -692,7 +692,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index e9d30281..5c9f9392 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -252,7 +252,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -300,7 +300,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
@@ -476,7 +476,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -500,7 +500,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 4d2758b5..3ffc17b1 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -257,7 +257,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -305,7 +305,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
@@ -484,7 +484,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -508,7 +508,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.Quota.schema.json b/gen/jsonschema/fora.v1.Quota.schema.json
index 94aa2e5e..bfc1c9ed 100644
--- a/gen/jsonschema/fora.v1.Quota.schema.json
+++ b/gen/jsonschema/fora.v1.Quota.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.Quota.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+  "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
   "properties": {
     "limit": {
       "anyOf": [
@@ -49,6 +49,6 @@
     "metric",
     "window"
   ],
-  "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+  "title": "Quota — A usage cap the term declares.",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.Quota.schema.strict.json b/gen/jsonschema/fora.v1.Quota.schema.strict.json
index 1f4fb63c..2c522fcd 100644
--- a/gen/jsonschema/fora.v1.Quota.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Quota.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.Quota.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+  "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
   "properties": {
     "limit": {
       "anyOf": [
@@ -50,6 +50,6 @@
     "metric",
     "window"
   ],
-  "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+  "title": "Quota — A usage cap the term declares.",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index 78949537..0e7f3757 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -252,7 +252,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -300,7 +300,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
@@ -340,7 +340,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -364,7 +364,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index dcf8dfa3..9684a009 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -257,7 +257,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -305,7 +305,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ResourceAttestation": {
@@ -347,7 +347,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -371,7 +371,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index 379ad0d5..be9197e3 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -519,7 +519,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -567,7 +567,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.RateLimitInfo": {
@@ -777,7 +777,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -801,7 +801,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index 241cd0ba..48af1d17 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -527,7 +527,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -575,7 +575,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.RateLimitInfo": {
@@ -790,7 +790,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -814,7 +814,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.Restriction.schema.json b/gen/jsonschema/fora.v1.Restriction.schema.json
index 8ff68884..842a8e5b 100644
--- a/gen/jsonschema/fora.v1.Restriction.schema.json
+++ b/gen/jsonschema/fora.v1.Restriction.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.Restriction.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
   "properties": {
     "advisory": {
       "default": false,
@@ -25,7 +25,7 @@
           "type": "integer"
         }
       ],
-      "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+      "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
       "title": "Restriction Kind"
     },
     "permitted": {
diff --git a/gen/jsonschema/fora.v1.Restriction.schema.strict.json b/gen/jsonschema/fora.v1.Restriction.schema.strict.json
index 83f444c7..5b5feb32 100644
--- a/gen/jsonschema/fora.v1.Restriction.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Restriction.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.Restriction.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
   "properties": {
     "advisory": {
       "default": false,
@@ -26,7 +26,7 @@
           "type": "integer"
         }
       ],
-      "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+      "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
       "title": "Restriction Kind"
     },
     "permitted": {
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
index a1c127ff..9c53f02c 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.TransactionDenial.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
   "properties": {
     "exchange": {
       "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -50,7 +50,7 @@
       "title": "Denial Reason"
     },
     "restriction_mismatches": {
-      "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+      "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
       "items": {
         "anyOf": [
           {
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
index f6e25997..39bfc38b 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.TransactionDenial.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
   "properties": {
     "exchange": {
       "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -51,7 +51,7 @@
       "title": "Denial Reason"
     },
     "restriction_mismatches": {
-      "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+      "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
       "items": {
         "anyOf": [
           {
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index b3b6576c..a86dedd4 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -450,7 +450,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -498,7 +498,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -677,7 +677,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -701,7 +701,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index e9898cec..daf7a51d 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -458,7 +458,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -506,7 +506,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -689,7 +689,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -713,7 +713,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 950a3377..21d9c8e6 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -606,7 +606,7 @@
       "type": "object"
     },
     "fora.v1.Quota": {
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -654,7 +654,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -907,7 +907,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -931,7 +931,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 8eb2cda3..0270f718 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -618,7 +618,7 @@
     },
     "fora.v1.Quota": {
       "additionalProperties": false,
-      "description": "Quotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
+      "description": "A quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.",
       "properties": {
         "limit": {
           "anyOf": [
@@ -666,7 +666,7 @@
         "metric",
         "window"
       ],
-      "title": "Quota — A usage cap that gates whether this LicenseTerm remains valid.",
+      "title": "Quota — A usage cap the term declares.",
       "type": "object"
     },
     "fora.v1.ReportingObligation": {
@@ -924,7 +924,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -948,7 +948,7 @@
               "type": "integer"
             }
           ],
-          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+          "description": "Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
           "title": "Restriction Kind"
         },
         "permitted": {
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 54e59dfa..b498ebcd 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -401,7 +401,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -450,7 +450,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -576,7 +576,7 @@
           "type": "string"
         },
         "restriction_mismatches": {
-          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "description": "DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index b23c85bb..1b5e46b3 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -413,7 +413,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -462,7 +462,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -589,7 +589,7 @@
           "type": "string"
         },
         "restriction_mismatches": {
-          "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+          "description": "DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 07a64769..9629d19e 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -359,7 +359,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -408,7 +408,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -595,7 +595,7 @@
       "type": "string"
     },
     "restriction_mismatches": {
-      "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+      "description": "DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.",
       "items": {
         "anyOf": [
           {
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index ccb18073..1eca2182 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -370,7 +370,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -419,7 +419,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
@@ -609,7 +609,7 @@
       "type": "string"
     },
     "restriction_mismatches": {
-      "description": "When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.",
+      "description": "DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.",
       "items": {
         "anyOf": [
           {
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index db11e3ef..90d5b754 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -297,7 +297,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -346,7 +346,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index 578b5591..4324f836 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -306,7 +306,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -355,7 +355,7 @@
           "title": "Denial Reason"
         },
         "restriction_mismatches": {
-          "description": "DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
+          "description": "DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.",
           "items": {
             "anyOf": [
               {
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index cdaf7596..f51ece42 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1095,7 +1095,7 @@ class TransactionDenial(WireModel):
     )
     restriction_mismatches: list[RestrictionKind] | None = Field(
         None,
-        description='DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.',
+        description='DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.',
     )
 
 
@@ -1531,7 +1531,7 @@ class Restriction(WireModel):
     )
     kind: RestrictionKind = Field(
         ...,
-        description="Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
+        description="Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries.",
     )
     permitted: (
         list[constr(pattern=r'^[A-Za-z0-9._:*-]+$', min_length=1, max_length=64)] | None
@@ -2217,7 +2217,7 @@ class TransactionResultItem(WireModel):
     )
     restriction_mismatches: list[RestrictionKind] | None = Field(
         None,
-        description='When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.',
+        description='DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.',
     )
     retrieval_endpoint: str | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index c01cc104..a02735e9 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -50,7 +50,7 @@ export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","D
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -76,7 +76,7 @@ export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.st
 
 export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
 
 export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item."));
 
@@ -92,7 +92,7 @@ export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datet
 
 export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
 
-export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
+export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
 
 export const ObligationSchema = wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies."));
 
@@ -100,11 +100,11 @@ export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","
 
 export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
@@ -116,11 +116,11 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
-export const QuotaSchema = wire(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it."));
+export const QuotaSchema = wire(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it."));
 
 export const QuotaWindowSchema = wire(z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]));
 
@@ -162,7 +162,7 @@ export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOL
 
 export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
 
 export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
 
@@ -172,9 +172,9 @@ export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.
 
 export const ResourceRefSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
-export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
+export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
 export const RestrictionKindSchema = wire(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]));
 
@@ -198,17 +198,17 @@ export const TenantFeeRateSchema = wire(z.object({ "fee_rate_bps": z.coerce.numb
 
 export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]));
 
-export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item\n decisions and are never carried here."));
+export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all."));
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap that gates whether this LicenseTerm remains valid.\n\nQuotas limit how much a licensee may consume before the term expires or\n must be renegotiated. They are NOT billing quantities — billing is in Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs enforced. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the\n term whose restrictions it can honour and bears compliance, and enforcement\n happens downstream at accept → report → reconcile. Restrictions are NOT an\n Exchange-side gate the requester must pass to see a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the\n request failed, in the same RestrictionKind vocabulary the terms use.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
-export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. A whole-request refusal is never\n RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed\n axes ride on TransactionResultItem.restriction_mismatches. The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
+export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
 
 export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 506f718c..626cb2cf 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,18 @@
 
 ## Unreleased
 
+**Restrictions are declared terms, never enforced by the Exchange;
+`DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and `TransactionResultItem.restriction_mismatches`
+are deprecated (comments only).** The licensing-core header, the ENUMERATED and
+REFERENCE_ONLY comments and the Quota comment said restrictions and quotas are enforced
+or gate a term's validity. They are declared terms the parties agree to when the agent
+accepts the offer, and the Exchange never enforces a restriction, so a purchase is never
+denied for one. `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` is never sent and
+`TransactionResultItem.restriction_mismatches` is never set; their numbers are retained
+and not reused. The licensing-terms, transaction-flow, reference, C2PA and medical-imaging
+pages follow: the medical-imaging walkthrough records the agent's DUA instead of denying
+the purchase with a restriction reason.
+
 **RemoveResources names each resource by domain and path (additive field and message;
 `RemoveResourcesRequest.paths` deprecated).** A bare path names no domain, so the Exchange
 could not tell whose resource it was or whether the signer may remove it. The new
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index dac16eab..2a7c6da4 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -1279,16 +1279,17 @@ message ResourceAttestation {
 // of the rules depend on semantics:
 //   ENUMERATED  — the machine restrictions/quotas/obligations are the COMPLETE,
 //                 authoritative expression of the term; they must be internally
-//                 consistent (a term may not contradict itself) and are enforced
-//                 by the Exchange.
+//                 consistent (a term may not contradict itself). They are
+//                 declared terms the parties agree to when the agent accepts the
+//                 offer.
 //   REFERENCE_ONLY — the document at License.uri (which MUST be present) is the
 //                 authoritative, complete source; the agent MUST read it before
 //                 using. The machine restrictions/quotas/obligations are
 //                 OPTIONAL here — the publisher MAY send Pricing alone — but any
 //                 that ARE sent must be accurate: they MUST NOT contradict the
-//                 referenced document, and whatever is expressed IS enforced
-//                 just like ENUMERATED. Pricing is stated machine-readably here
-//                 either way.
+//                 referenced document, and whatever is expressed binds the
+//                 parties just like ENUMERATED. Pricing is stated
+//                 machine-readably here either way.
 //
 // LicenseTerm lives in ResourceEntry (ingestion) and Offer (emission) — the
 // same shape at both ends, with one difference: a catalog term carries its
@@ -1300,8 +1301,8 @@ message ResourceAttestation {
 // TermSemantics — How the Exchange interprets a LicenseTerm's machine fields.
 enum TermSemantics {
   TERM_SEMANTICS_UNSPECIFIED    = 0;  // unset — rejected at ingest
-  TERM_SEMANTICS_ENUMERATED     = 1;  // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction) and are enforced. `Pricing` MUST be present on a catalog term (on an offer it is Offer.pricing).
-  TERM_SEMANTICS_REFERENCE_ONLY = 2;  // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and are enforced just like ENUMERATED. `Pricing` is still required on a catalog term (on an offer it is Offer.pricing).
+  TERM_SEMANTICS_ENUMERATED     = 1;  // Machine `restrictions`/`quotas`/`obligations` are the complete, authoritative expression of the term (internally consistent, no self-contradiction): declared terms the parties agree to when the agent accepts the offer. `Pricing` MUST be present on a catalog term (on an offer it is Offer.pricing).
+  TERM_SEMANTICS_REFERENCE_ONLY = 2;  // The document at `License.uri` (MUST be non-empty) is the authoritative, complete source; the agent reads it before using. Machine `restrictions`/`quotas`/`obligations` are optional here (the publisher MAY send `Pricing` alone) but any that are sent must be accurate (MUST NOT contradict the referenced document) and bind the parties just like ENUMERATED. `Pricing` is still required on a catalog term (on an offer it is Offer.pricing).
 }
 
 // RestrictionKind — Which dimension a Restriction constrains.
@@ -1470,10 +1471,10 @@ message License {
 //
 // Restrictions model allowed and prohibited values on one axis (function,
 // geography, or user-type). They are validated and normalized at ingest and
-// RIDE ON THE OFFER: the AGENT is the responsible party — it self-selects the
-// term whose restrictions it can honour and bears compliance, and enforcement
-// happens downstream at accept → report → reconcile. Restrictions are NOT an
-// Exchange-side gate the requester must pass to see a term.
+// RIDE ON THE OFFER: they are declared terms the parties agree to when the
+// agent accepts the offer. The AGENT self-selects the term whose restrictions it
+// can honour and bears compliance. The Exchange never enforces a restriction:
+// it is NOT an Exchange-side gate the requester must pass to see or buy a term.
 //
 // An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it
 // returns against the limits the query states in ResourceQuery.acceptable_restrictions
@@ -1531,7 +1532,7 @@ message Restriction {
   // so a new number was never the extension mechanism — accepting one would
   // admit a restriction no consumer can evaluate onto a term whose default is
   // BINDING (see advisory below), which fails open on the axis a publisher most
-  // needs enforced. Closing the axis does NOT bound the cost of the one-per-kind
+  // needs honoured. Closing the axis does NOT bound the cost of the one-per-kind
   // rule below, and must not be read as doing so: a number this rule refuses is
   // still distinct from every other, so that rule's all() finds no duplicate to
   // stop on and walks the list in full anyway. Its cost is bounded by the size
@@ -1566,10 +1567,12 @@ message Restriction {
   bool advisory = 4;
 }
 
-// Quota — A usage cap that gates whether this LicenseTerm remains valid.
+// Quota — A usage cap the term declares.
 //
-// Quotas limit how much a licensee may consume before the term expires or
-// must be renegotiated. They are NOT billing quantities — billing is in Pricing.
+// A quota states how much a licensee may consume under the term before the
+// term expires or must be renegotiated. Like a restriction, it is a declared
+// term the parties agree to. Quotas are NOT billing quantities — billing is in
+// Pricing.
 //
 // The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on
 // Quota.metric below; the quotametrics constants + IsRegistered derive from it.
@@ -2632,9 +2635,11 @@ message TransactionResultItem {
   // carried only this item: a denied one-item purchase is never a non-OK error.
   optional DenialReason denial_reason = 7;
 
-  // When denial_reason = RESTRICTION_NOT_SATISFIED, the restriction axes the
-  // request failed, in the same RestrictionKind vocabulary the terms use.
-  repeated RestrictionKind restriction_mismatches = 13;
+  // DEPRECATED, never set. It named the restriction axes a request failed under
+  // DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange
+  // never enforces a restriction (see Restriction). The field is retained
+  // because removing it would break the v1 wire contract; a receiver ignores it.
+  repeated RestrictionKind restriction_mismatches = 13 [deprecated = true];
 
   // When retrieval_endpoint expires.
   optional google.protobuf.Timestamp expires_at = 8;
@@ -2715,7 +2720,14 @@ enum DenialReason {
   DENIAL_REASON_INSUFFICIENT_BALANCE = 2; // Requester's balance too low
   DENIAL_REASON_RATE_LIMITED = 3;         // Too many requests
   DENIAL_REASON_CONTENT_UNAVAILABLE = 4;  // the Exchange that owns the resource reports it no longer available; NOT a catch-all for upstream failures — a Broker reports an Exchange that refused or did not answer its sub-request on TransactionResultItem.refusal, never as this reason
-  DENIAL_REASON_RESTRICTION_NOT_SATISFIED = 5;  // Accepted term's restriction not satisfied by the request; decided per item, so the axes are in TransactionResultItem.restriction_mismatches (whatever the item count), same RestrictionKind vocabulary as the terms
+  // DEPRECATED, never sent. An Exchange MUST NOT send this value. Restrictions
+  // are declared terms the parties agree to, and the Exchange never enforces
+  // them (see Restriction), so a purchase is never denied for one. A receiver
+  // treats this value as unknown.
+  //
+  // The number is retained because removing it would break the v1 wire
+  // contract, and it MUST NOT be reused or given a new meaning.
+  DENIAL_REASON_RESTRICTION_NOT_SATISFIED = 5 [deprecated = true];
   DENIAL_REASON_REPORTING_OVERDUE = 6;    // Requester has >20% overdue reports (MAY threshold)
   DENIAL_REASON_OFFER_EXPIRED = 7;        // Offer TTL exceeded
   // A signature this item depends on does not verify, or does not cover what
@@ -5070,17 +5082,16 @@ message ErrorDetail {
 // purchased. Every decision about an item is answered in the body instead, on
 // TransactionResultItem.denial_reason, whatever the item count: a denied
 // one-item purchase is a successful response whose one item is denied, never
-// this error. RESTRICTION_NOT_SATISFIED and RELAY_NOT_ACCEPTED are per-item
-// decisions and are never carried here.
+// this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried
+// here, and RESTRICTION_NOT_SATISFIED is never sent at all.
 message TransactionDenial {
   // The denial reason (defined-only, non-zero)
   DenialReason reason = 1 [
     (buf.validate.field).enum = {defined_only: true, not_in: [0]}
   ];
 
-  // DEPRECATED, never set. A whole-request refusal is never
-  // RESTRICTION_NOT_SATISFIED: a restriction is decided per item, and its failed
-  // axes ride on TransactionResultItem.restriction_mismatches. The field is
+  // DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the
+  // Exchange never enforces a restriction (see Restriction). The field is
   // retained because removing it would break the v1 wire contract; a receiver
   // ignores it.
   repeated RestrictionKind restriction_mismatches = 2 [deprecated = true];
diff --git a/website/src/content/docs/protocol/ext-c2pa.mdx b/website/src/content/docs/protocol/ext-c2pa.mdx
index 95796326..0cca3a7e 100644
--- a/website/src/content/docs/protocol/ext-c2pa.mdx
+++ b/website/src/content/docs/protocol/ext-c2pa.mdx
@@ -8,7 +8,7 @@ description: "C2PA content credentials integration — provenance verification,
 FORA-C2PA v1 integrates the C2PA (Coalition for Content Provenance and Authenticity) standard into FORA, enabling agents and Exchanges to:
 
 - **Verify** content provenance — who created it, what tools were used, whether it's been modified
-- **Enforce** creator-declared training/mining restrictions commercially via FORA access controls
+- **Carry** creator-declared training/mining restrictions into the terms an agent agrees to when it buys through FORA
 - **Resolve** disputes with stronger evidence using C2PA hard and soft content bindings
 - **Filter** for provenance-verified content at discovery time
 
diff --git a/website/src/content/docs/protocol/licensing-terms.mdx b/website/src/content/docs/protocol/licensing-terms.mdx
index 2c4e6e1c..0bfb7039 100644
--- a/website/src/content/docs/protocol/licensing-terms.mdx
+++ b/website/src/content/docs/protocol/licensing-terms.mdx
@@ -31,9 +31,9 @@ Every `LicenseTerm` has a `TermSemantics` value:
 
 `Pricing` is required on **every catalog term** regardless of semantics — absent Pricing is a validation error (rule `resource_entry.terms.pricing_required`), and `model = FREE` must be stated explicitly (absent Pricing is not free). An agent cannot act on a priceless term, so the machine-readable price is always present even when the rest of the terms are deferred to a document. On an offer that price is `Offer.pricing`, and the term the offer carries has none.
 
-**`ENUMERATED`** — the machine fields (`restrictions`, `quotas`, `obligations`) are the complete, authoritative expression of the term. They must be internally consistent (a term may not contradict itself), are validated and normalized at ingest — the same checks ship in the SDK as a publisher pre-check (`ValidateResourceEntry` / `NormalizeLicenseTerm` and their Python and TypeScript twins) — and are surfaced on every offer. Restrictions are not an Exchange-side gate the requester must pass to see a term: discovery returns an offer for every scope-covered term and the agent chooses the offer whose restrictions it can honour, bearing compliance; enforcement happens downstream at usage reconciliation. An Exchange or Broker MAY, as a convenience, pre-filter offers using attributes the requester volunteers (function / geography / user-type), but that is advisory, not enforcement. So if a term declares `ai-train` prohibited, that prohibition rides on the offer and binds the transaction the agent accepts.
+**`ENUMERATED`** — the machine fields (`restrictions`, `quotas`, `obligations`) are the complete, authoritative expression of the term. They must be internally consistent (a term may not contradict itself), are validated and normalized at ingest — the same checks ship in the SDK as a publisher pre-check (`ValidateResourceEntry` / `NormalizeLicenseTerm` and their Python and TypeScript twins) — and are surfaced on every offer. Restrictions are not an Exchange-side gate the requester must pass to see a term: discovery returns an offer for every scope-covered term and the agent chooses the offer whose restrictions it can honour, bearing compliance. Restrictions are declared terms the parties agree to when the agent accepts the offer, and the Exchange never enforces them. An Exchange or Broker MAY, as a convenience, pre-filter offers using attributes the requester volunteers (function / geography / user-type), but that is advisory, not enforcement. So if a term declares `ai-train` prohibited, that prohibition rides on the offer and binds the transaction the agent accepts.
 
-**`REFERENCE_ONLY`** — the document at `License.uri` (which must be present) is the authoritative, complete source for `restrictions`, `quotas`, and `obligations`, and the agent must fetch and read it before using the resource. The machine fields are **optional** in this mode — the publisher MAY send `Pricing` alone — but any `restrictions`/`quotas`/`obligations` they **do** include must be accurate: they MUST NOT contradict the referenced document, and whatever is expressed **is** enforced, exactly as under ENUMERATED. Because `License.uri` is always present for REFERENCE_ONLY, `License.uri_digest` (a `method:hexdigest` pin of the document) MUST be present so the agent can verify the fetched bytes match what was offered. The same requirement applies to any ENUMERATED term that carries a `uri` (mutable or not) — a pinned digest is what makes the referenced document tamper-evident. `Pricing` is still stated machine-readably. This mode is designed for complex license arrangements (music rights, patent portfolios, MCPS/PRS collective management agreements) whose terms cannot be fully enumerated in a machine-readable form.
+**`REFERENCE_ONLY`** — the document at `License.uri` (which must be present) is the authoritative, complete source for `restrictions`, `quotas`, and `obligations`, and the agent must fetch and read it before using the resource. The machine fields are **optional** in this mode — the publisher MAY send `Pricing` alone — but any `restrictions`/`quotas`/`obligations` they **do** include must be accurate: they MUST NOT contradict the referenced document, and whatever is expressed **binds** the parties, exactly as under ENUMERATED. Because `License.uri` is always present for REFERENCE_ONLY, `License.uri_digest` (a `method:hexdigest` pin of the document) MUST be present so the agent can verify the fetched bytes match what was offered. The same requirement applies to any ENUMERATED term that carries a `uri` (mutable or not) — a pinned digest is what makes the referenced document tamper-evident. `Pricing` is still stated machine-readably. This mode is designed for complex license arrangements (music rights, patent portfolios, MCPS/PRS collective management agreements) whose terms cannot be fully enumerated in a machine-readable form.
 
 :::caution[Fetching `License.uri` safely]
 `License.uri` MUST NOT be URL-validated (TDL identifiers use non-URL schemes), but that means *do not reject* — **not** *fetch blindly*. A consumer that dereferences the URI must apply the SSRF countermeasures in the [threat model (T-LIC-1)](/security/threat-model/#t-lic-1-ssrf--phishing-via-licenseuri): scheme allowlist, block loopback/private/metadata addresses (resolve-then-check), fetch via an egress proxy, and treat the response as untrusted. Always verify the fetched bytes against `License.uri_digest`.
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 9891295c..4e0c1f23 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -388,14 +388,13 @@ Every decision about an item is answered in the response body. An item the Excha
   "items": [
     {
       "offer_id": "9d5735d7-1f17-4801-8dcf-7cac0b7b32b0",
-      "denial_reason": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
-      "restriction_mismatches": ["RESTRICTION_KIND_GEOGRAPHY"]
+      "denial_reason": "DENIAL_REASON_OFFER_EXPIRED"
     }
   ]
 }
 ```
 
-A denied item was not purchased, so it carries no `retrieval_endpoint` and no charge. `restriction_mismatches` names the failed axes when the reason is `DENIAL_REASON_RESTRICTION_NOT_SATISFIED`.
+A denied item was not purchased, so it carries no `retrieval_endpoint` and no charge. A purchase is never denied for a restriction: restrictions are declared terms the parties agree to, and the Exchange never enforces them, so `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and `restriction_mismatches` are deprecated and never set.
 
 A non-OK error carrying `ErrorDetail.transaction_denial` is used only when the Exchange refuses the **whole request** and decides no item. That happens for a reason about the caller that would deny every item alike: the caller has no account (`DENIAL_REASON_ACCOUNT_NOT_REGISTERED`), its account is not active (`DENIAL_REASON_ACCOUNT_INACTIVE`), it has overdue reports (`DENIAL_REASON_REPORTING_OVERDUE`), or it is rate limited (`DENIAL_REASON_RATE_LIMITED`). Nothing is purchased. Other errors keep their own classes: a malformed request is `invalid_argument`, and a request signature that does not verify is `unauthenticated`.
 
diff --git a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
index abb8db5b..0aaee558 100644
--- a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
+++ b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
@@ -1,6 +1,6 @@
 ---
 title: "Walkthrough: Medical Imaging (Brain MRI)"
-description: "Pre-transaction compliance gate (DUA), multi-file DICOM delivery, de-identification attestation, per-study metering, and the fora-medimg-v1 extension profile."
+description: "DUA compliance as a declared term, multi-file DICOM delivery, de-identification attestation, per-study metering, and the fora-medimg-v1 extension profile."
 ---
 
 > Complete walkthrough of a regulated medical imaging transaction. Shows how FORA handles pre-transaction legal gates, multi-file binary delivery, de-identification attestation, per-study metering, and regulatory dispute escalation — all via standard protocol messages plus the `fora-medimg-v1` extension profile.
@@ -20,7 +20,7 @@ Medical imaging stresses FORA in ways that text content does not:
 | **Delivery** | Single signed URL | Delivery manifest (847 signed URLs) |
 | **Content hash** | SHA-256 of HTML body | Merkle root over 847 instance hashes |
 
-This walkthrough follows the same six-step flow as the [core walkthrough](/protocol/walkthrough-v1), but exercises three protocol mechanisms that text-only scenarios never touch: **`ext_critical`** (must-understand extension keys), **pre-transaction compliance gates**, and **multi-file delivery manifests**.
+This walkthrough follows the same six-step flow as the [core walkthrough](/protocol/walkthrough-v1), but exercises three protocol mechanisms that text-only scenarios never touch: **`ext_critical`** (must-understand extension keys), **compliance agreements carried as declared terms**, and **multi-file delivery manifests**.
 
 ```
 Discovery -> ResourceQuery -> ResourceResponse -> ExecuteTransaction -> Delivery -> ReportUsage
@@ -207,9 +207,9 @@ The Exchange looks up the study in TCIA's catalog, verifies the agent's identity
 
 ---
 
-## Step 4 — ExecuteTransaction (with Compliance Gate)
+## Step 4 — ExecuteTransaction (with the DUA on record)
 
-The agent commits to the offer. Because `medimg.dua_required` was flagged as critical, the agent MUST include a valid DUA reference in `ext`. This is the pre-transaction compliance gate — the Exchange denies the item if the DUA cannot be verified.
+The agent commits to the offer. Because `medimg.dua_required` was flagged as critical, the agent had to understand it before buying, and it includes its DUA reference in `ext`. The DUA is a declared term of the offer that the agent agrees to by accepting it, like the offer's restrictions; the purchase puts the agent's DUA reference on record with the transaction.
 
 `POST https://exchange.medimg-exchange.com/fora/v1/fora.v1.ExchangeService/ExecuteTransaction`
 
@@ -276,27 +276,14 @@ The agent commits to the offer. Because `medimg.dua_required` was flagged as cri
 
 1. **Signature verification** — verifies `offer.signature` is its own Ed25519 signature over the reflected Offer (stateless, no stored offers).
 2. **Agent authentication** — verifies the request's RFC 9421 HTTP Message Signature (alg=ed25519, carried in HTTP headers) against the agent's public key published in the WBA directory at `brainlab.edu/.well-known/http-message-signatures-directory`.
-3. **DUA verification** — looks up `DUA-TCIA-2026-042` in its compliance registry. Verifies the DUA is (a) signed, (b) covers `brainlab.edu`, (c) covers `ai-input` use, (d) has not expired. **If the DUA is invalid, missing, or does not cover the requested use, the transaction is denied.**
+3. **DUA record** — `compliance.dua_id` is listed in the request's `ext_critical`, so the Exchange must understand it; it records `DUA-TCIA-2026-042` with the transaction, so the agreement the purchase relied on is on record.
 4. **Balance check** — confirms `neuro-bot@brainlab.edu` has sufficient balance ($25.00).
 5. **WAL write** — records the transaction before generating delivery credentials (write-before-sign invariant).
 6. **Delivery manifest generation** — instead of a single signed URL, generates a manifest containing 847 per-instance signed URLs grouped by series.
 
-**What happens without a valid DUA:**
+**What happens without a DUA:**
 
-The denial comes back in the body of a successful response, like every per-item denial, also when the purchase has only one item. The item names the offer and carries `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` with the unsatisfied axis. It has no `transaction_id`, `billing_id`, `cost` or `retrieval_endpoint`, because nothing was bought:
-
-```json
-{
-  "ver": "1.0",
-  "items": [
-    {
-      "offer_id": "78e43486-599b-4016-b5a7-1bed5d22d1c0",
-      "denial_reason": "DENIAL_REASON_RESTRICTION_NOT_SATISFIED",
-      "restriction_mismatches": ["RESTRICTION_KIND_FUNCTION"]
-    }
-  ]
-}
-```
+An agent without the agreement does not buy the offer. The DUA is a declared term the agent agrees to by accepting the offer, not a restriction the Exchange checks, so meeting it is the agent's responsibility, and it bears the compliance.
 
 The agent already knows which agreement it needs from the offer: `ext["medimg.dua_type"]` is `TCIA-Standard-v3`, and `ext["comp.seller"]` names `imaging.tcia.org` as the party that grants it. The agent or Broker can surface this to the human researcher, who applies to TCIA for that agreement. Correlation back to the request rides on the `X-Request-ID` response header.
 
@@ -587,7 +574,7 @@ The Exchange generates a regulatory incident ID, notifies the provider (TCIA), a
 | Mechanism | How This Walkthrough Uses It |
 |---|---|
 | **`ext_critical`** | `medimg.dua_required` on Offer forces agent to acknowledge DUA requirement. `medimg.dispute_type` on Dispute forces Exchange to handle regulatory escalation. |
-| **Pre-transaction gate** | DUA reference in `ExecuteTransaction.ext` — Exchange denies transaction if DUA is invalid. |
+| **DUA on record** | DUA reference in `ExecuteTransaction.ext`, a critical extension the Exchange records with the transaction. |
 | **Multi-file delivery** | Manifest of 847 signed URLs with per-instance hashes and Merkle verification tree. |
 | **Merkle content hash** | `sha256-merkle` hash method enables partial verification without downloading all files. |
 | **Domain extension profile** | `fora-medimg-v1` vocabulary: `medimg.*` claims in attestations, `compliance.*` fields in transactions. |
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 9e7cd797..dd50aa2b 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,18 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Restrictions are declared terms, never enforced by the Exchange;
+`DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and `TransactionResultItem.restriction_mismatches`
+are deprecated (comments only).** The licensing-core header, the ENUMERATED and
+REFERENCE_ONLY comments and the Quota comment said restrictions and quotas are enforced
+or gate a term's validity. They are declared terms the parties agree to when the agent
+accepts the offer, and the Exchange never enforces a restriction, so a purchase is never
+denied for one. `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` is never sent and
+`TransactionResultItem.restriction_mismatches` is never set; their numbers are retained
+and not reused. The licensing-terms, transaction-flow, reference, C2PA and medical-imaging
+pages follow: the medical-imaging walkthrough records the agent's DUA instead of denying
+the purchase with a restriction reason.
+
 **RemoveResources names each resource by domain and path (additive field and message;
 `RemoveResourcesRequest.paths` deprecated).** A bare path names no domain, so the Exchange
 could not tell whose resource it was or whether the signer may remove it. The new
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index d1009038..b3d2725e 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -175,7 +175,7 @@ Lightweight resource preview for offer evaluation. The Exchange populates previe
 ::proto-message{name=TransactionResponse}
 
 :::note[Denials are in the body]
-Every per-item denial is returned in this body, on `TransactionResultItem` (`denial_reason` / `restriction_mismatches`), whatever the item count: a denied one-item purchase is a successful response whose only item is denied. A non-OK transport error carrying [`ErrorDetail.transaction_denial`](#unified-error-model) is used only when the Exchange refuses the whole request and decides no item, for a reason about the caller such as `DENIAL_REASON_ACCOUNT_NOT_REGISTERED`.
+Every per-item denial is returned in this body, on `TransactionResultItem` (`denial_reason`), whatever the item count: a denied one-item purchase is a successful response whose only item is denied. A non-OK transport error carrying [`ErrorDetail.transaction_denial`](#unified-error-model) is used only when the Exchange refuses the whole request and decides no item, for a reason about the caller such as `DENIAL_REASON_ACCOUNT_NOT_REGISTERED`.
 
 `total_cost` is unset when the purchased items span more than one currency: amounts are never summed across currencies, and currency conversion is out of scope for this version.
 :::

From f4f424e12f6d9a3284649c244ef2a6b00765b3b9 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:11:36 -0400
Subject: [PATCH 100/164] Match term scopes against the requester's signed
 request in the protocol

LicenseTerm.scopes said the Exchange returns a term iff the agent's
delegation grant covers its scopes, and the Restriction header said
term visibility is gated by delegation scope coverage. The Exchange
returns an offer for a term when the scopes in the requester's signed
request (Requester.scopes) cover the term's scopes; delegation is not
part of that rule. Both comments now say so.

The threat model's T-DEL-5 (scope pollution) no longer says declared
scopes without a delegation grant give nothing, and T-LIC-3 states the
gate the same way. Both changelogs record the change.

Comments and docs only; the generated code, the descriptor, the SDK
types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 678088 -> 678123 bytes
 gen/go/fora/v1/fora.pb.go                     |  14 ++++++------
 .../fora.v1.DiscoveryResponse.schema.json     |   6 +++---
 ...ra.v1.DiscoveryResponse.schema.strict.json |   6 +++---
 .../fora.v1.LicenseTerm.schema.json           |   6 +++---
 .../fora.v1.LicenseTerm.schema.strict.json    |   6 +++---
 gen/jsonschema/fora.v1.Offer.schema.json      |   6 +++---
 .../fora.v1.Offer.schema.strict.json          |   6 +++---
 gen/jsonschema/fora.v1.OfferGroup.schema.json |   6 +++---
 .../fora.v1.OfferGroup.schema.strict.json     |   6 +++---
 .../fora.v1.PushResourcesRequest.schema.json  |   6 +++---
 ...v1.PushResourcesRequest.schema.strict.json |   6 +++---
 .../fora.v1.ResourceEntry.schema.json         |   6 +++---
 .../fora.v1.ResourceEntry.schema.strict.json  |   6 +++---
 .../fora.v1.ResourceResponse.schema.json      |   6 +++---
 ...ora.v1.ResourceResponse.schema.strict.json |   6 +++---
 .../fora.v1.Restriction.schema.json           |   2 +-
 .../fora.v1.Restriction.schema.strict.json    |   2 +-
 .../fora.v1.TransactionItem.schema.json       |   6 +++---
 ...fora.v1.TransactionItem.schema.strict.json |   6 +++---
 .../fora.v1.TransactionRequest.schema.json    |   6 +++---
 ...a.v1.TransactionRequest.schema.strict.json |   6 +++---
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |  20 +++++++++---------
 proto/CHANGELOG.md                            |   7 ++++++
 proto/fora/v1/fora.proto                      |  14 ++++++------
 .../src/content/docs/reference/changelog.mdx  |   7 ++++++
 .../content/docs/security/threat-model.mdx    |   6 +++---
 28 files changed, 98 insertions(+), 84 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index a4c80bc4ec59d1b96cf1d556fa45dc2eecae99a1..cf7b19aeeb5d264be940d4ce72b3ffec93fd9342 100644
GIT binary patch
delta 317
zcmX@HQS<di&4w1n7N!>F7M3lnUBQg^ws!}!#>`_p+5X}q>-HBP+3pw!JmcqLV&M{E
zyT{EipNCQE`t~bI?2N1yNtFsE8L0}z$@vAT#R{2uU|vybVQFe{NotXLu|jcXdR}S@
zmjYBw;ZegBh2qrI?cdeeKUoUjW94FD;bmeIV)?_%<Rf*SRUvpfdlI`+ePW(Mep*^;
zkwRL25zx%cVg;aaxeA$SX{h#b;jj>HpGFYOF?tY3YAPh>mjMlS^zi{&0n%O!b3d1Y
yhNGX0ZgFZZM`B({W^%En-t^uic57xX1?}mllh^|p_1ZO(*@2j2yGAnSg0BFVrEYHk

delta 281
zcmaF8QS-z`&4w1n7N!>F7M3lnUBQgIw|57##>`_}*8bun>-HBP+3pw!T;S(oV&M{E
zyT{EipNCQE;Pxv@?2N2RDXBTB>4_zo`FRS($@vAT3d#9psYQwDsS1x8rYIDrrgClP
z)nNZ*DR+^Ti-m=kiA{**4=<CC)FD;{7bLCIg_78nQc5y1ixo;zi*gl8@)Z*E6oAI$
zl_+GUr74tTq;f&H>ct93cBU640#$(RELL#z@lnVJt1V82xTaV^!_m)0w>UKys4O$N
oSW}N{`tBrlYi0#)uIWFM*aLa=kqm41PG$#Uj_uyboD04J09!s`LjV8(

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index a9dd62b3..05de8cb4 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -3665,8 +3665,8 @@ func (x *License) GetUriDigest() string {
 // matched to the request, never an enforcement verdict. When an Exchange does
 // drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED
 // (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise
-// gated only by resource_id/URI and delegation scope coverage — see
-// LicenseTerm.scopes.
+// gated only by resource_id/URI and by the scopes in the requester's signed
+// request — see LicenseTerm.scopes.
 //
 // Reading a restriction:
 //
@@ -4034,12 +4034,12 @@ type LicenseTerm struct {
 	//     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated
 	//     once.
 	Pricing *Pricing `protobuf:"bytes,6,opt,name=pricing,proto3,oneof" json:"pricing,omitempty"`
-	// Delegation scope-gating: the Exchange returns this term to an agent iff the
-	// agent's delegation grant covers ALL of these scopes (AND-semantics).
-	// Empty = public. A subscription term is Pricing{model:FREE} +
-	// scopes:["subscription:..."].
+	// Scope-gating: the Exchange returns an offer for this term iff the scopes in
+	// the requester's signed request (Requester.scopes) cover ALL of these scopes
+	// (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}
+	// + scopes:["subscription:..."].
 	//
-	// Coverage uses the SAME matching rule as Requester/delegation scopes:
+	// Coverage uses the SAME matching rule as Requester.scopes:
 	// segment-wise (":" separated), each granted segment must equal the
 	// corresponding required segment or be "*", a terminal "*" matches all
 	// remaining segments, and there is NO implicit prefix match (a grant
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index 71e4ff51..a0de5911 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -746,7 +746,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index bb913a19..f6810954 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -758,7 +758,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index 3647f731..ec3c6533 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -230,7 +230,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -329,12 +329,12 @@
       "type": "array"
     },
     "scopes": {
-      "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+      "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
       "items": {
         "type": "string"
       },
       "maxItems": 64,
-      "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+      "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
       "type": "array"
     },
     "semantics": {
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index e7156cc1..41e19a8d 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -235,7 +235,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
@@ -335,12 +335,12 @@
       "type": "array"
     },
     "scopes": {
-      "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+      "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
       "items": {
         "type": "string"
       },
       "maxItems": 64,
-      "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+      "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
       "type": "array"
     },
     "semantics": {
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index e8fb4c84..19afba48 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -518,7 +518,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index 612dc9bc..9b1c7374 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -528,7 +528,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index f0908117..daebf196 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -657,7 +657,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index a8aba48f..7f443c9b 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -668,7 +668,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 5c9f9392..980fc5e8 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -476,7 +476,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 3ffc17b1..52be4526 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -484,7 +484,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index 0e7f3757..c42702d2 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -340,7 +340,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index 9684a009..94b51a6c 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -347,7 +347,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index be9197e3..a2d9fc96 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -777,7 +777,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index 48af1d17..186eb07a 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -790,7 +790,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.Restriction.schema.json b/gen/jsonschema/fora.v1.Restriction.schema.json
index 842a8e5b..82932327 100644
--- a/gen/jsonschema/fora.v1.Restriction.schema.json
+++ b/gen/jsonschema/fora.v1.Restriction.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.Restriction.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
   "properties": {
     "advisory": {
       "default": false,
diff --git a/gen/jsonschema/fora.v1.Restriction.schema.strict.json b/gen/jsonschema/fora.v1.Restriction.schema.strict.json
index 5b5feb32..32f65f44 100644
--- a/gen/jsonschema/fora.v1.Restriction.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Restriction.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.Restriction.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+  "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
   "properties": {
     "advisory": {
       "default": false,
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index a86dedd4..304074d8 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -91,12 +91,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -677,7 +677,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index daf7a51d..54c3eb56 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -94,12 +94,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -689,7 +689,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 21d9c8e6..05843054 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -247,12 +247,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -907,7 +907,7 @@
       "type": "object"
     },
     "fora.v1.Restriction": {
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 0270f718..04bfd5db 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -254,12 +254,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -924,7 +924,7 @@
     },
     "fora.v1.Restriction": {
       "additionalProperties": false,
-      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
+      "description": "Restrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories",
       "properties": {
         "advisory": {
           "default": false,
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index f51ece42..9a8c5431 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1872,7 +1872,7 @@ class LicenseTerm(WireModel):
     )
     scopes: list[str] | None = Field(
         None,
-        description='Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent\'s delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:["subscription:..."].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (":" separated), each granted segment must equal the\n corresponding required segment or be "*", a terminal "*" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). "dist:*" covers\n "dist:US" and "dist:US:CA"; "dist" covers only "dist". There is exactly\n one scope-matching algorithm across the protocol.',
+        description='Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester\'s signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:["subscription:..."].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (":" separated), each granted segment must equal the\n corresponding required segment or be "*", a terminal "*" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). "dist:*" covers\n "dist:US" and "dist:US:CA"; "dist" covers only "dist". There is exactly\n one scope-matching algorithm across the protocol.',
         max_length=64,
     )
     semantics: TermSemantics = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index a02735e9..6f563342 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -50,7 +50,7 @@ export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","D
 
 export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
 export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
 
@@ -92,7 +92,7 @@ export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datet
 
 export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
 
-export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
+export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
 
 export const ObligationSchema = wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies."));
 
@@ -100,11 +100,11 @@ export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","
 
 export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
 
 export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
 
 export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
@@ -162,7 +162,7 @@ export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOL
 
 export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
 
 export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
 
@@ -172,9 +172,9 @@ export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.
 
 export const ResourceRefSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI."));
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
 
-export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
+export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
 
 export const RestrictionKindSchema = wire(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]));
 
@@ -200,9 +200,9 @@ export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TER
 
 export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all."));
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and delegation scope coverage — see\n LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Delegation scope-gating: the Exchange returns this term to an agent iff the\n agent's delegation grant covers ALL of these scopes (AND-semantics).\n Empty = public. A subscription term is Pricing{model:FREE} +\n scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester/delegation scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
 export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 626cb2cf..0fdc9151 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+**Term scopes are matched against the scopes in the requester's signed request
+(comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's
+delegation grant covers its scopes, and the Restriction header said term visibility is
+gated by delegation scope coverage. The Exchange returns an offer for a term when the
+scopes in the requester's signed request (`Requester.scopes`) cover the term's scopes.
+The threat model's scope-pollution and scope-gating entries say the same.
+
 **Restrictions are declared terms, never enforced by the Exchange;
 `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and `TransactionResultItem.restriction_mismatches`
 are deprecated (comments only).** The licensing-core header, the ENUMERATED and
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 2a7c6da4..731d7ec8 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -1485,8 +1485,8 @@ message License {
 // matched to the request, never an enforcement verdict. When an Exchange does
 // drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED
 // (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise
-// gated only by resource_id/URI and delegation scope coverage — see
-// LicenseTerm.scopes.
+// gated only by resource_id/URI and by the scopes in the requester's signed
+// request — see LicenseTerm.scopes.
 //
 // Reading a restriction:
 //   A value is in-scope when it matches at least one permitted[] token
@@ -1774,12 +1774,12 @@ message LicenseTerm {
   //     once.
   optional Pricing pricing = 6;
 
-  // Delegation scope-gating: the Exchange returns this term to an agent iff the
-  // agent's delegation grant covers ALL of these scopes (AND-semantics).
-  // Empty = public. A subscription term is Pricing{model:FREE} +
-  // scopes:["subscription:..."].
+  // Scope-gating: the Exchange returns an offer for this term iff the scopes in
+  // the requester's signed request (Requester.scopes) cover ALL of these scopes
+  // (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}
+  // + scopes:["subscription:..."].
   //
-  // Coverage uses the SAME matching rule as Requester/delegation scopes:
+  // Coverage uses the SAME matching rule as Requester.scopes:
   // segment-wise (":" separated), each granted segment must equal the
   // corresponding required segment or be "*", a terminal "*" matches all
   // remaining segments, and there is NO implicit prefix match (a grant
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index dd50aa2b..cebe584d 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,13 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Term scopes are matched against the scopes in the requester's signed request
+(comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's
+delegation grant covers its scopes, and the Restriction header said term visibility is
+gated by delegation scope coverage. The Exchange returns an offer for a term when the
+scopes in the requester's signed request (`Requester.scopes`) cover the term's scopes.
+The threat model's scope-pollution and scope-gating entries say the same.
+
 **Restrictions are declared terms, never enforced by the Exchange;
 `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and `TransactionResultItem.restriction_mismatches`
 are deprecated (comments only).** The licensing-core header, the ENUMERATED and
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 33a4caec..e5eff899 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -265,8 +265,8 @@ The forwarding chain covers requests forwarded byte-for-byte, such as discovery
 
 ### T-DEL-5: Scope pollution
 
-**Attack**: Agent declares scopes it doesn't actually have (no delegation token to prove entitlement), hoping the Exchange trusts the declared scopes and returns premium content.
-**Countermeasure (protocol)**: Exchange treats `Requester.scopes` as an **upper bound for catalog filtering only**. Actual entitlements are verified via the delegation JWT at transaction time. Without a valid delegation token, the Exchange applies its default access policy (typically public resources only). Declared scopes without a matching delegation grant no additional access.
+**Attack**: Agent declares scopes it doesn't actually have, hoping the Exchange returns premium content.
+**Countermeasure (protocol)**: The Exchange returns an offer for a term only when the scopes in the requester's signed request (`Requester.scopes`) cover the term's `LicenseTerm.scopes`. Those scopes are part of the request the agent signs, so they are the signer's own statement under its RFC 9421 signature.
 
 ### T-DEL-6: Quota gaming via multiple tokens
 
@@ -304,7 +304,7 @@ The last row is the deliberate one — nobody but the operator can point that UR
 
 ### T-LIC-3: Scope-gating escalation
 
-**Attack**: Term visibility is gated by delegation scope coverage (`LicenseTerm.scopes`, AND-semantics, empty = public). Two failure modes: (a) a publisher forgets `scopes` on a premium term → it defaults to public and leaks for free; (b) two implementations match scopes differently — naive prefix matching lets `sub:` cover `subscription:premium`, or `dist:*` is read as covering `dist:US:internal` on one Exchange but not another → an agent's grant is read as covering a term it should not.
+**Attack**: Term visibility is gated by scope coverage: the scopes in the requester's signed request must cover `LicenseTerm.scopes` (AND-semantics, empty = public). Two failure modes: (a) a publisher forgets `scopes` on a premium term → it defaults to public and leaks for free; (b) two implementations match scopes differently — naive prefix matching lets `sub:` cover `subscription:premium`, or `dist:*` is read as covering `dist:US:internal` on one Exchange but not another → an agent's grant is read as covering a term it should not.
 **Countermeasure (protocol)**: Scope matching follows the single normative rule defined in [Scope Matching](/protocol/authentication/#scope-matching), and the **same rule applies to both** `Requester`/delegation scopes **and** `LicenseTerm.scopes` — there is exactly one matching algorithm: matching is **segment-wise** (`:`-delimited), never substring/prefix; a granted `*` segment matches one level and a **terminal `*` matches all remaining segments**; there is no implicit prefix match and a grant narrower than the requirement does not cover it. This is the authoritative string-segment definition. An Exchange MAY implement coverage however it likes (e.g. a compiled matcher rather than literal string comparison), but the result MUST be **identical** to the segment-wise definition — an alternate implementation is conformant only if it produces the same verdicts, never a second, divergent rule. So the example failures (`sub:` covering `subscription:premium`, or one Exchange reading `dist:*` as covering `dist:US:internal` and another not) are excluded by construction. `empty = public` stays the explicit, documented default; backfilling a sentinel scope (e.g. `r:all`) is **not** required — it only relocates the "forgot to set it" failure and forces every publisher to issue an extra scope grant, without adding enforcement. (cf. OAuth 2.0 and AWS IAM: exact-match with explicitly-defined wildcard expansion, no implicit hierarchy.)
 
 ### T-LIC-4: Referenced-document swap

From 9a4dba29146de82f2c020c84e16a51a6ec82f543 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:13:03 -0400
Subject: [PATCH 101/164] Align the CoMP, self-push and custodied-signing
 passages in the docs

- licensing-terms: the CoMP interop line cited a comp.license[].revshare
  key, but canonical CoMP V1 has no revshare field, as the CoMP page
  notes; fora-comp-v1 keys are flat dotted keys in ext like every other
  profile's. The revenue-share example gates its term on the scope the
  agent states in its signed request, not on a delegation JWT.
- for-providers: a publisher may always push for its own domain;
  besides that, only contributors listed in catalog_contributors may.
- identity overview: the custody section said the registry signs the
  acceptance, while the rest of the page says each agent signs with its
  own custodied key. It now agrees.

Both changelogs record the change.
---
 proto/CHANGELOG.md                                        | 8 ++++++++
 website/src/content/docs/components/identity/overview.mdx | 2 +-
 .../src/content/docs/getting-started/for-providers.mdx    | 2 +-
 website/src/content/docs/protocol/licensing-terms.mdx     | 4 ++--
 website/src/content/docs/reference/changelog.mdx          | 8 ++++++++
 5 files changed, 20 insertions(+), 4 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 0fdc9151..df24b953 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+**Docs: CoMP keys, self-push and custodied signing (docs only).** The licensing-terms page
+no longer cites a CoMP `revshare` key: canonical CoMP V1 has none, and `fora-comp-v1`
+keys are flat dotted keys in `ext` like every other profile's, as the CoMP page says. Its
+revenue-share example gates the term on the scope the agent states in its signed request.
+The for-providers page says a publisher may always push for its own domain, and only
+listed contributors besides. The identity overview says the service signs an acceptance
+with the agent's own custodied key.
+
 **Term scopes are matched against the scopes in the requester's signed request
 (comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's
 delegation grant covers its scopes, and the Restriction header said term visibility is
diff --git a/website/src/content/docs/components/identity/overview.mdx b/website/src/content/docs/components/identity/overview.mdx
index ba65e46d..8e6c21a2 100644
--- a/website/src/content/docs/components/identity/overview.mdx
+++ b/website/src/content/docs/components/identity/overview.mdx
@@ -132,7 +132,7 @@ The endpoint is `/mcp` and speaks MCP over Streamable HTTP. It is stateless: eve
 
 Two decisions collided here, and the resolution is worth understanding before deploying this.
 
-A signed delivery URL is bound to the thumbprint of the key that signed the offer acceptance, and a capable edge refuses any fetcher that cannot prove possession of that key. That is what makes a stolen URL worthless. But under custody the *registry* signs the acceptance, so the URL is bound to the registry's key — and the agent, which holds no key, can never produce the proof. Composed naively, every URL issued through this flow could only be used by the service itself, and every agent fetch got a 403.
+A signed delivery URL is bound to the thumbprint of the key that signed the offer acceptance, and a capable edge refuses any fetcher that cannot prove possession of that key. That is what makes a stolen URL worthless. But under custody the service signs the acceptance with that agent's own custodied key, so the URL is bound to a key the agent never holds — and the agent can never produce the proof. Composed naively, every URL issued through this flow could only be used by the service itself, and every agent fetch got a 403.
 
 The resolution: **the service fetches the licensed bytes itself**, presenting the custodied key as the proof of possession, and returns the content to the agent inside the tool result. The constraint was never that nobody could produce the proof, only that the *agent* could not. Moving the fetch to where the key already lives makes the proof producible by construction, with no change to the protocol, the Exchange, the edge's contract, or any agent client.
 
diff --git a/website/src/content/docs/getting-started/for-providers.mdx b/website/src/content/docs/getting-started/for-providers.mdx
index a8d708ba..11af450b 100644
--- a/website/src/content/docs/getting-started/for-providers.mdx
+++ b/website/src/content/docs/getting-started/for-providers.mdx
@@ -177,7 +177,7 @@ Attestation is most useful for STATIC resources where the hash remains stable. F
 
 **Key publication**: Your domain hosts a WBA directory — a JWK Set at `/.well-known/http-message-signatures-directory` — carrying your public keys (inline RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint). Agents and Exchanges fetch this to verify your attestation signatures; keys no longer live in `fora.json`. FORA has no dedicated verifier role; a verifier publishes under its operator's role — here `ROLE_PUBLISHER` for self-attestation.
 
-**`catalog_contributors`**: You can authorize third-party verification vendors to push attestations on your behalf. Declare authorized contributors in your provider manifest. Only contributors listed in `catalog_contributors` can push resource metadata to the Exchange for your domain.
+**`catalog_contributors`**: You can authorize third-party verification vendors to push attestations on your behalf. Declare authorized contributors in your provider manifest. You may always push for your own domain; besides your own domain, only contributors listed in `catalog_contributors` can push resource metadata to the Exchange for it.
 
 ## Extension Profiles
 
diff --git a/website/src/content/docs/protocol/licensing-terms.mdx b/website/src/content/docs/protocol/licensing-terms.mdx
index 0bfb7039..a064863d 100644
--- a/website/src/content/docs/protocol/licensing-terms.mdx
+++ b/website/src/content/docs/protocol/licensing-terms.mdx
@@ -116,12 +116,12 @@ FORA has no revenue-share pricing model, and that is deliberate. `PricingModel`
 Instead, a revenue-share arrangement is expressed with primitives already in the core, exactly like a subscription:
 
 - A `Pricing{model: FREE}` term — there is no per-access charge.
-- Gated by an agreement scope, e.g. `scopes: ["revshare:publisher-x"]`. The agent that has signed the deal holds a delegation JWT carrying the matching scope; everyone else never sees the term.
+- Gated by an agreement scope, e.g. `scopes: ["revshare:publisher-x"]`. The agent that has signed the deal states the matching scope in its signed request (`Requester.scopes`); everyone else never sees the term.
 - A `ReportingObligation` (the offer-level reporting requirement) so usage is reported. Revenue is then settled off-protocol from those reports.
 
 So "pay per crawl **or** enter the revenue-share deal" is just two `LicenseTerm`s on the same resource: a public `PER_UNIT` term and a scope-gated `FREE` term. They reach the agent as two offers, and the agent buys one of them. This is the same shape as the [academic dataset subscription example](#academic-dataset--seat-quota--share-alike) below.
 
-For CoMP interop, a CoMP `revshare` rate is carried verbatim in the `fora-comp-v1` ext (`comp.license[].revshare`) rather than mapped onto a pricing model — see [CoMP extension](/protocol/ext-comp/#license-on-offerext). Parity by mapping, not by duplication.
+For CoMP interop there is nothing to carry: canonical CoMP V1 has no `revshare` field, and the `fora-comp-v1` profile's keys are flat dotted keys in `ext` (`comp.package_id`, `comp.countries`, …), like every other profile's — see [CoMP extension](/protocol/ext-comp/#license-on-offerext).
 
 ## Metering modes
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index cebe584d..c6136951 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,14 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Docs: CoMP keys, self-push and custodied signing (docs only).** The licensing-terms page
+no longer cites a CoMP `revshare` key: canonical CoMP V1 has none, and `fora-comp-v1`
+keys are flat dotted keys in `ext` like every other profile's, as the CoMP page says. Its
+revenue-share example gates the term on the scope the agent states in its signed request.
+The for-providers page says a publisher may always push for its own domain, and only
+listed contributors besides. The identity overview says the service signs an acceptance
+with the agent's own custodied key.
+
 **Term scopes are matched against the scopes in the requester's signed request
 (comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's
 delegation grant covers its scopes, and the Restriction header said term visibility is

From 80e0d9974efcf51648332b2db6833245e31837e3 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:17:31 -0400
Subject: [PATCH 102/164] Deprecate PushResourcesRequest.caller_id as never
 needed in the protocol

caller_id named the pusher beside the request signature. It was never
needed: each entry's domain names whose resource it is, and the caller
is the party that signs the request, which the Exchange checks against
each entry's domain (NOT_CATALOG_CONTRIBUTOR when it may not push).
The field is in a release, so it is deprecated, not removed: a sender
leaves it empty and the Exchange ignores it.

The Go connectserver and catalog client comments and the Python and
TypeScript catalog client docstrings identify the caller by the
request signature. The SDK test fixtures in all three languages stop
setting caller_id. The reference, multi-tenant, request-flow, content
sources, verification-vendor, publisher-onboarding, deployment-model
and threat-model pages describe the signer as the caller and drop
caller_id from their examples. Both changelogs record the change.

Comments, docs and tests; the generated code, the descriptor, the SDK
types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 678123 -> 678416 bytes
 gen/go/fora/v1/fora.pb.go                     |  17 ++++++++++++-----
 .../fora.v1.PushResourcesRequest.schema.json  |   2 +-
 ...v1.PushResourcesRequest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |   2 +-
 proto/CHANGELOG.md                            |   8 ++++++++
 proto/fora/v1/fora.proto                      |  10 +++++++---
 sdk/go/connect/beforesign_test.go             |   2 +-
 sdk/go/connect/catalog.go                     |   6 +++---
 sdk/go/connect/catalog_test.go                |   8 ++++----
 .../gen_client_request_vectors_test.go        |   6 +++---
 sdk/go/connectserver/catalog_handler_test.go  |   2 +-
 sdk/go/connectserver/handler.go               |   9 +++++----
 sdk/go/connectserver/read_cap_test.go         |   4 ++--
 sdk/python/fora_sdk/client/__init__.py        |   4 ++--
 sdk/python/tests/test_before_sign.py          |   1 -
 .../tests/test_catalog_recipient_redaction.py |   1 -
 .../tests/test_client_request_parity.py       |   1 -
 sdk/python/tests/test_typed_inputs.py         |   3 +--
 sdk/ts/client/index.ts                        |   4 ++--
 sdk/ts/tests/before-sign.test.ts              |   1 -
 .../tests/catalog-recipient-redaction.test.ts |   1 -
 sdk/ts/tests/client-request.parity.test.ts    |   1 -
 .../docs/architecture/deployment-models.mdx   |   2 +-
 .../components/content-ingestion/sources.mdx  |  12 ++++++------
 .../docs/components/exchange/multi-tenant.mdx |  10 +++-------
 .../components/exchange/request-flows.mdx     |   4 ++--
 .../for-verification-vendors.mdx              |   7 +++----
 .../getting-started/publisher-onboarding.mdx  |   2 +-
 .../src/content/docs/reference/changelog.mdx  |   8 ++++++++
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 .../content/docs/security/threat-model.mdx    |   2 +-
 33 files changed, 81 insertions(+), 65 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index cf7b19aeeb5d264be940d4ce72b3ffec93fd9342..f53cd05c7688a9e2b6314f65f64e11e5ecf85c3c 100644
GIT binary patch
delta 25024
zcmZX6d3aPs)_(U*cXRIz2)O~$eY@$t-JRY7Nm#<30AW*Hah(~*Wl))sZ`?+7{G9n_
z0uosRNI*&v*+dXGP=RKXeF@4YqNoF+tP++ltO|<!-cwbV>-YTr;CVRb)_LpHIj2sY
zS~@2_$h@>TGpyQOtyJe!dlq}g-l>cjpRKvmThYP2oqaOWJF;a&*B&19*kgmAesIVm
zevjo&YrPe}JNwWm?~DJX*YC{J8yVh!>zz?&&Uo?9mpyZ)(Ov)J-kt6Lgu2U<SCgZA
zJgt-*!}D>0(%QVDu-o(X{F|N_Jou5pkF>D{J@JS&<S$P=`SjpNO00f^9)8ps{KPX)
zKc5<EJ@Vw^gN8g|Ju&F<!9%U*9({7?VBLCp@X#lpefr_S){tkcAwz}qGwi~xYH_fe
z^~|Ga(eJ+>ess_ie;I5&{OI6^|2h=RLC-L&wXa3$@j=g9Pdz*IQR~l7K5Y&D|9jG{
z^w7bBEw=W1Z-71fy|*BhDX}W8p@W}zWbo70V}l3%9eNCTMz;n({?s$imsoc_I@tR2
zkim~V!XAw1y&ovi^(MNPM(X85Rc+Euq-NM8H$;n;HmTCrf+GDo-AA%2|Lo7`^Av72
zkKx-;pwty)D`%)-cU3FJ19Wg~bPv!s6li%8&I9oc1<hONO}Q!_mBd@t73AoKt^(hq
zj?%6(d>acqTME2-p03$E$Zaa{8EAHm<ukmS3w&$bdW36&em`{=u)j@I&5o@UuMcE_
z;+Oq;p~j~LfsjoC?$d%uRR7h@WzqPv0=9OmdZ}+K#pfYPvCZWJ@Mi_N_6U4H`mDeR
zOC%qVJ}ZdE^=X=}c*2J7NP%l>R(no;)sr|<pteA>98b8B;j1rDP8WFeC5qk%^e8RI
zC3x8_|5VG|olg{aO7&*2f%v8vo|6ThUccd>pHl^%4*Gtwdsu<=g#zVrw*9}<``lId
zuP``1K)(wGT2rncNXT6%F!H&<LBik{3YuS*1}6qL_{9RxC24TUgWQj{!6gd@|A`y?
zve3b8_=fqFk$z9MNtODXy9$J@g&SH7^J`6{7H*&o^Eb<rTDYObFuyU<FWeqh+(L`t
ze$R`3;daS`9bWMJn(;`GEI^I$`|^Lwg8QodzQ#p*jN1l6qgm78YT*N;{nCwLMS&Yf
z`=uK}Lc!5~Lj(j!ppN!OEUB-8s2}Z*-Yh#&NIl*nc9Y(U_W^1wn>1XFJTTVjgJ#xP
zr;i-;G1hMsNYEUT@tZ-LL?2`Qq3dNIIkJzj{#N~UllOr*tYO!^poSi(ar&V7RpZZX
zCQ)d9)%f#lP?}#g{&2+piau)mR$ti%%`Vch#vkpYcjkS7n!rZCpmu$5g42hWxK1B5
zc_#St;u6%0J|_5+DVsze6Z~o0R$kf11b^lx{ZpD=VFmuFW!4CF`vbL3Cp52W9b?hF
zs`blx1rc;o>yO4{Cq8si>yO_m2jY{)s`VG%qKA1OjSSBec2l)#Jut=TqY?U;;`Gr7
zeN6Eitt4n8^fAS6MQsv&O!3F;fi#kRO!3EW(%bMp&|oUtTCJ8;Om+HDF}kV#TvMW`
z=wqrsXoFI|oa!%3=pPDGXohDRD|=C0{J=B^LW7#q95ppSO!FJIy){5g^C#1?0}WbC
z^JngorqHCC)BHtu>fO1Ty5V`9^&hELRJ`u=p+n8r{keq_MMod6`x9Ml5`DbxFYlqR
z@p6b<!?Pf}cBHyad2oS)kqe9k{#=p!!b&bM7WgBrB}OhV7Whlr+9dQ`;BWV!)H4@)
z8km_2{OupmfAH~M8XKN$_Pa6af8{)wb$V%xUb6mNu>ysa#^@#MFR*87WAu{sBX!ea
zhOg))>yHhTy)>4+Wc~5m^gSX?H8DJ^vkS(n_qeN8JH0ePFRT5zb}TeOFRT6Gb`rJ;
zdRgr+>tvJYWwpQaLn0q5P0&j-;&d5=1xbe*oa1p3?|}#Tf)rM+Gd%13O3ci|n*Yq;
zCx#ArlKp$4nqLB@SeDQPy{_}iWeFsDT}Na4kI=lS;i=26nW*0H{(YUJc~eA7of9oh
zfl=p7oTk92^J773jP)pD_&)W!&iLJWE|#GPT7K$RTj{eX79&_gJUdv!G<7;_R;&8T
zcG&3~U(j-gUu(>V4-%L={7swbM?G8+U-$Zz7Uo_Ln>1I=&)#3F-lmj+)kq3Z`rqqU
zMUsjrl>Ybn^PB76QmqwH5C-3p{LUPbZ;`z)Mcw2s0n3)B?EI}GPuclfl7B<=5As;{
zhpB2pDL-c0CBo~PW42vD0^^w95c3iw3He)vxpN{4a%(+%YN8tKi2oxL>TRchgkZhx
z6p#?CC#UdQAwug&gP+$54}btpgQEf^&IU&XN}LV0YtR@-4Yq46!*|Z_dL<xSW1;0a
zzZw><vB)(S$u)CIF4|rJ6OAs~UI7WXi{zCkjB1g|e)6++PpYBLAfU)kjwJcxC%>%m
z@D-9j`BCHjOmSwxAHHAxN_94Wy7~`y75*z~AAA7Jul9IA0_InHK?4bxUui+3Vh$u$
z^<Vv=>Oc-J7KwodSN)zAd~y;kQoyi)r=6a!=W-daJl7#0h6g;|II~PP^w4a0A>gU_
zzfIw*5dqI#qW-j?f^Td<nV9W0Lru7=@Ly4Z-~)6W8<2%3NPvwE$ifpObR8RLIT5;2
z;Ykc$2aOAOCImzUB6*Oj3CO}zvQP(&4^ZK`m*$a$Sn^E?C@kP%hi9sLs_=i?eiT_#
z0y34MA#|D&C=gW!NMKJ1#0#bUs2H9SNHFL`g)hF7y&&>(0JY(7Sg_VqGT~M?rg+rw
zy&iDA7jT;^+}0h~ez4B7)z!x90X1L04eCXyRGb-5=CVd})LX0YKVc#80X;JyD@Bmd
zW@bQEiXfrQ%s}(G(n7@G7Md0Cydf<ld61iJTS&5Cp*h?_{kaAx6z2t$cLN@i?U|$Y
zt^#2zL6JExAPdDPkIZ=iStx>p67vGayVsPEh2s2x=bdXxa2{;(RzMbtBqs{C1p!$o
zN*3JlcEFb@;>j^)_!b6SOXLiUL6L<4H6mtUjAr160d{7Z`dSANm<J!)N`pk(4+Ani
zf`kP=3}7N=FxnVRlEtiMuG)IQ;(*L(U=lZ=in1IeL>7~=DNDx<UpC;XlZwRAG8?e7
zbet4fG4)Mkf)%y`;GxY5TLF+jTR{p?CWw;)s{$eufPm_&97)n+RX}C}e1+ty05SpJ
z&c!JctPdz#XgWpQRiGgahVT|hNUygi6-Y?0w<i@ycx!#2<re8JV(^gJ5b$i4-jY1X
zZL~v1vJf(xc*u}N3Ju>U0avSC(j<lG_LG2}9Sg}M+of+nK*jC0iXhQ;yKNef=xRHe
zrWB?rB>i`?ci&RmmF^5EKE7IkN!&oA>ueGtI|F%!zB31^Bn;nw0<Lq}#tYOP?xz0<
zs6o9epc16Ses=tAwR_2a8wyN7?GH2(ZUzac{p99XDbXgV`$O3~-cf_@@<Vo(02g6-
zD3B}aJ&@EYP*}v(0SSylf#MQAn-jEl9%T#ORc|jp>L8Gtjt1oB25o?FG$5BgkU%&Z
zz|z-~D*@^_>-3&lS#jJ!pl!i%2Z6HZ@qi(!tOU=V#{;NhX{()}#q(r<@3h&D_f%i$
z$$+eA@Ckw^1G1t4iOx<2?8P%ddY%o4jW!72oOM*7#q+GA0xh0r19C%v#y~n7Kwa~x
z4_-+czG~C8G}~*TdSgyrwTWcMi<%_4Wt7S1ZD$aG9A(Pz1qsMerkuAR0XfP<Y<xrB
zNy2Kr38wN=_VJI@Ke(&#UlI2B0J#aKCaN}&kegrzLp*PTMA%O-TfJoF@bZut6!xBp
zrl*{zZOMV>CYtf$-?9KS(Jbw*x8wbz!DLejnQ`l`rw6fqOVpxb(6$of)XAnMc9Ti&
z)X63m-v_xYkfyTfOVmN_r#d3!#i^#2&m$?xy*SluS)g~|BC!6erec^0_P5n)OV)3x
zY8HbbYOo~t<g2DCw(ua)!>cATb0;ng!%k;4OVuu&rkje`eI^xh*>p3Mko}R%rkm-E
z{w|e$No)gsb4_J|=`ml+VgLKOR-8>`)#u$+VA_MEUEo|(uG)|Q!dz3X+8|-+xn|1+
zur#gO#NY|$P1Ez1DOPRCgWNn*uG*4?1T){HRlAHUgZ<*WrV=%i7K<!b+g5-Ot9DXp
zg!%ZcnM-FkUUWjc#&^w@Vgmva*zcM+DxkTLq?3Y$rZ{y10m+4?oD3i#xzLo80VE_B
zn)YN!DyV#xn0zwy0ReX`ade<9;Sy8MXnY0I5>rkFkU&~uVlv#KE8eDtZ@KCEm=&y4
zZ*IEW^ybqsh_@+UIM~xG)xz)!Q{lTQVj{>^m;sZP3Xp(Z$ri6v<KdO2!b@dhqRmPZ
z`J#}w0kw)<Sg9r>tK`tohVsxVngjP@Hl_^UTGO?abz7zWq3K#v4d}gLn-poVp3PaM
z_AOs;j|@zVY`r})kWgX0X^0aGkQmu|GZyFhIz{?zVzH0acIBHK1j?72%-jI?586;8
z(-c(|NFZ!7QC0QjIzZ1lHt}P%e?^^xKzXRn%oS-m#q(vI+052~@?{<Aa3jW+HhkMm
z*J);~RtGfOM)P4CRefn1+%ERl)#{G&T{bY70N!N}4kT3DWy(Yh62QC2u+MS?eB8sH
zU86o%vByE6^?HwkK!e+3$}^-iAKV_A^<PoSN|P7%WixBld)>wR?5PVbg!YjeD1bqt
z+kIxJm0rnZKpkL<)~S8U4>;XY{y$(_B+aYm17<Uk|3Q+BiTr;HM?k0^WTorX+sY3*
z2y`%Y&_SSu;Gly*>Ej?F+{h8o_6S?CUcI^35eI?JY>$|^VxpyaHaTLpO3P7DHaTLp
zZlixK?2l|xZz`u){|)L_RrsHny=jHcmFgV>Qbwt_;|pJbQcu36Jqt)=lzOx96fz1G
z*u)T(;|bH#=C>@UcGC3xQNIZxkuiK{OxI7Q+pMte9y;hRgDctV8`Yjo&zP#A2Qa=2
z1;;sdVxt<YI%g+0Frmshd-(wgRnF1!6XYWJc!9Ei6RUFQ(814G&kT9yvB6?c8O05g
z<LfmNW4vIG5ns8i3=)t4zCb~OJkSWrAV_{>HJjAJ9zQw|GzETiASh&hH060HL;&$4
zCAsftk5Od!el}f`+38K{fxMqhlt6s3Euvu#5Awyf3<MB|2W2V;3B=(+x!8gP;_x6w
zJB1d5BI<8U_Ps6YRCn<hM~Fr;CMe5OG=k8WAj(t9wM8_L8urvyHCj>=lt~s$h|~mS
zk_8EonxLIzi-@e9zh<lI?ok_*_5%~D)&^yE1qq1Spv<lyNhXNwI;s%{-x_O9(6v8%
z<r8&ePTt(0>KCJLO{1SLM$bxj;s9m7Jq~;V;(UAXAb~ia2LC$6ZfjEcouFcx6Wr{<
zKl%o+4|l2qOTfwHv5xP&L1VE3frR)wL4QF1Sct<8i&)!T>Y4`^*<)(WOZ7$em_Pzz
zQP2>lXdnTxD2TjIDFGywtwq7$jXcDO6g%@p!O#HxwCDr^OWCcTsSV{zolbHv50(aV
zMXqhl4YxEH?IKaha7%;T%k}H|C=s*E**|ux11gp~2(%?$9+c;9t$CHPJQ&VM1WFUj
zgKdiS-4rFQDM&Xi{aoGSuGr{6P@%Zd87WmA8-s>8*@OrnHU?8^eYJo<f7`QpU#M%{
z726#Q$`ach49XJQgK`G7=2>EU5Hm>H0>#4T?7F>bL&fI~1eFP&2XjS^Y|YDr&x0{>
z{0S0jd>-sj#zVI?+55{NFB8f@K=MmFf<dD5FYO2h3CS<7MR02>6ZSDg@Z~=EKWw_s
zQGu$2ea<MTO4w(|F&YDCAI0$igmD|g_g&C6i*5c|y&?a*pla$PXbEY9DE1u*D)rgu
zH>%>U!hc1Q!3TgJvB5zC{7BFcwH`=-9|_{7ff6Z5B+?^6t3H^cH^+%6G5E=j;X4}i
z91nW=A<i`}WRC?=o;AlI&^0Csv>%!VsY2_<6+?fg*a!bn%gawWO3~VXDkxX(HhiL-
z3N{lf9Y_G53Sy=EBS%mSZv)HhQ}3^8a1bb_8k}L#JZT8Z`lAh>Ck;WY57+Tw!EfG%
zVBthJpD6fD%L7zs2qqrkcaf5nL(Tp?!L9e<9Yc+CL8ZOf(Hi*l;6D$3ntAuDUCY6;
zZA<g$Tu_!UZTLJo7c`6cEC9*n+qTntaWwe+BKyaFwRh!32Z5H`i;f{^xxE;a3w9e`
ztzQgcx!pyRxednb`#Go#3$ZKv)gAZXzqTSYmwtAvL38Qnpdl)Fh(VE`gQ(zzlf7{A
z&%vT$A=}Ax*@NRd!}m+jbCpF8sQJk&j$h?h`1M!r))#~>7<x6k_kdbmULCro2hGRo
zkj%(!6q=9KA(@duLXYYYZi6cLXfPc|G4ngMXZa`xfu`fA(6z{*s(n<bnK<8X!>8k@
z5bk;&<_MUM<JimJse>!VIS4c@$A#oRybYh0<3fevN&qBu7#Aw*sBfaY(uSrb%Xa==
z-Quob4u%E{=3vl_WT8Tl6d(f(7V6MZ-ykq>Q!_K${SZ#Sd(3n&bl75MNM7-^QRu2>
zW+=~&aUB>lL!q!fCm+RsGo0{;T%Too98qU$O+O8JHM*<vHlxL98#{ekEvecTQuyUQ
zF|l%N3t>HN%-aBXdr09o+xSR}4oH6JPbAuI4`Iy`Z9(k_Da|QD@sVZ?NM1k_$-naB
zEb1E??!4CN?L4|c^PMDpMdO_z>?8#+qI*|J;Y%GpQXGTiHwQ$b?XD0`{(tl!hZQ4-
zg<Kc2C;wOdyVCT#5Xvpu$`;dL53;|VRXcV*7?K4Dn1DJMk_8AzXmyarL;JsC8o&{Z
z9s9pN&p!Qk_V2T50Xu(IZBY!a*o~qMZ*&cTvda-dplh~b8uJgV(>b-G_y<RXaDQ+*
zB~$!BB0abWs1t0~Iki{u2}gvgj}wjvP5u)kLa|;<XDz2$lk;lN;?s@@S?P306O$Ni
zAaXj?<T{;>TZ<{dong<PS8pgj<A~7AJ`<8>0cZn}Ga;M>Jj6v1wHMgw^Xem|7aS3q
zgcm}x7%S$J@B#(TOdY-`F??fMxt3*zUr@u|W@B2RDBO5Auu8}o+3dp0>gJ--Y*?0Q
z-~ucg4v1A6B>K;Wu}W_w$Clz5NZ55gJ2#>AQ4$-%eCv|qDaE^qEn(%;utz`U#=D79
z`EG)EtZ`a9T2>dv{Qy0i5TD?Ztzl2)Z#d}Y6XMLyg>I#!+o5bSqrKrRJ`|RI1{b;=
z3QIqOgwUZdJW$MK@bM_SSfZ6abQJf}JVlrC&^Q`yBnmc=5IGvYPHZSaBEK9BH|s7G
z;RiyvFFYE~>&EX3sR3>f>Avu2xN{eN6<<p6RL@40YF&%#9n~nF>cjGo9&ON1eHat1
zlB)*l6gyR_^{F@&mZ`Lq7q_RvGL?b^!l|$!(g#SA31f+zN7=ZP;_EDXysh?D`B?{o
zinOy~S)`#2AkK!v;>I5&AkK!1TI<hn1cci~c6&SR@8uUA1lr48bPy=|E{4PHrS&NK
zE`~dH(#tsl+FoKg?X@1|mmCCI5iU8ypkTZdmi25Y55`Mj)U&k9FIBK2{KEd#Uh7}}
zi-SP7|Gzj0v?BZxmYZ>iK!;z#ts?qe904A?%C5H8?y0!yAgDmN>L5^|b~P+dMN7r?
zR=6-pN0OujR)m^tZ3pd^oQj&rHFr>rRuj4A4q6dvBG<H_6`>{qEymD_P^w@>n4ArD
z*2cLjCOa6kB20ELXhoPDxuyrL2$Lhw<3qZ<FI8}PKO=j%i?&$lJ;TAs1;z{qgD&r9
zL=5r30y4mu5lN)<F(NE*HUCCL>0nl}+2xwa&Ue=yD+fbloKmGRz}|4c=#Ku4h#~41
zd<EDWk+$viE?gg6z|UjT%e8Km^Be@af1el06~~#S3f;fYi}=Mt2@(kNB3LM?6fC8y
z^aT;6o7qNa)2>2mRSt%&4OL_dBC?u7YhW#im}N59=pJ!Fq;psOK8}S;_4nA=3hjaN
z_Z$SeQ-9AH58bK17cs=qL#aY{>hDEb7wdO$1We^ctgwf6SNS3bp&1YsIS9>wuqYxo
zC8bI;AS{ZcGJNqVRq_naM{IEqtyB3&4niIfK5`K9fbda7*4q#P!bg#?rMKrg7_>V}
z_SDMCmpTXr5SBU!1`w7;<a3u&#Q?(6h!xZS#u4&y5Xh$X)P|O?a1io=u);ye2f_+x
z6!}0{L8BPV5t`$<1MAmI`%C$12cbE9u{t6TPfL~NKv*4V*+%-JIS^JyO55poa)cIm
z@4$ZOrQKb=&OvAa9o9KIv;e|7XA~`fu#QGS2T7$$OKkSo^Of4o6&oFdmO$9(AhZO+
z#)vFxAp(Srk#v#%k_hzzIw4egYqb@14nzSU>KupyK-5L#E}>K@07P9RR%p*!KPsB+
zXT53G?sPExz}Oj)bzCW)q!O8zl&0_lV`n7OTAU}ADginTe6_E(qt_k>0+(c-JrVih
z25kVbClcu(Ap(Hd6Y11NUxh6fjA0tS;}PXVc78vtyLS-&YflgpnjCjVV*=)QL{`@j
z1I+OV_K8&GgG7~oJW_ZfBF@B!AvQhr5zpg%J6oy*QE)`Wb`}JbJROlMJxHLRj>rQU
zkU&2j!GX+vVeSxiK5WuW+JPSD90fyA@SLMy2oUES1w(*1M+%~BRy=L7-H5ne%)WoK
zw%*<Bmk2IZs|mU-t?pOZuv@i}6<2L&FrnR5J0L*<`f8-5I0yj==&KPN$(|Pw_*%{S
z+@@XZQEf@{wdHrH)s{@*AgPgMh(i#NfT*@`;Cz_0YiIZ-S}vA-ZlHF^-E^XbQsz%k
zt{o{?%ZA*cJycw4$r}?e0aa^-#2EreK-F5<woz5qj@JIE?58`lM|w=Pl>rl`nrbTp
zk{VfZc?SuEsTP*^addFk-tfI<x!z#Y?$pLMf6c<C|6TyMCtY5*l;-BmtnF!^$?mvI
zt0)0O)V=r&%-1bhbbtir>lTWRFUUsiNv%2T<GZxIC374Z(qoRLi6bktfy^8WM^+C)
zjShxyp5<D@*59o?&~hHBK`E#M)bK5^l=m%<IcV~%iU7Oq9_`L5aD*QC4$K9%9w33a
zfb^g^1&KIaU^Rc=61PFb;I~0<Tb}nUaT_FgkbB3Hw?UGHP3gN9oi$K8?Lb5Nz*1V8
zg%*qcPAe$}VJkrc`@oV{QfLXV4=h|sQQ^^ninhh<e}1R+e|RzE`Md-ZB8#m8aiI$m
zB8x5gU=k!sjm1{_PF@@m$sdy~wla6{;!tv^I9zPqHjq!a4g|5x5?8K0f3NvUmsxVY
z;S+jWX36;mk~g&vKs!)@w;GSe@wWL-AUGuh8zf?BwH-?!fwbC^c>yGlR$G{MxRUqg
z8NPLvYm3F-D|u;gT4#9!e6yKH@wDDj((KG>HBkr>UqSQndqKiT>uLPGvFpqu<7{Lt
z@74N-H(CmROGr$#*=S*he*<p=YBT%qd$k*_&6dI^8rqPtH`7F$iP-iU*!fznFWA9*
zwHZx6wY*LBe?!zDUAD1_f7FJBw^<6WdWi|qZ8R<J;ccM84pw}h_WSS-OKy%0uEGur
z`x{I?h(KZ&d*eRsk?<~QYhn`D!nIdF-UbHR%@X%(*N1mo^7_o+``g_XQVLFQAOef;
zVPo&tdRu!O9NO3JA)HaP{V6ki2Q1g9?8*BzpOSZgat1$OFQdU6wD<u#oAD>jS9Z{j
zOMJp04q9^40us6$w6JN}LWN`*S-IX)Qs%N8_Vp9KX!g>dv^nkyu*8~x2FQ!`mRzVo
za)Fkj9s~)vdMlCC*Qgv0`d-O?^^jKSskq``(97N{mfR<l@wmTYg~ehI5*Sx3EcSGI
zUq;lhs0iVw{(=x57L_54Pw0GDRE97}-qa4^GBV-FC=X#a<5A7mXJqu+C@6wQMrCS7
zO8||G$_NGtppj8T@CY(<N5l70)U_z;HqYm<)%U4p);$DCI`5^Z8WjfbNCuxA6$XFl
zubQu9a#SV)d;<35s5Cf8U{8+1;QU2?M>6=d?8d)p54y{z+4_MC3r&m419OnnDjF3v
z07zg=i{d@f^RQ4y3a%OK!N;|KR?Kh^$i_3G@_jMd0AWTnDE84HfiNR#pLTa7a$dIJ
z2@R*+^BfF1Zk!jDXJcptjCs*!B3*$bp(yrJ<fo2g?FG_LB~QUm3v55(69gC7egX->
z1yS2i9qHg<q3}~*5WrdJs6Ype3vEZ?E07l2jsgj!h2$s{35uta;ad{Lee$foY5Ve*
zMAZU)Jgq#P;2qzxsPZwJ__S72h5v~h4L;D8MP-f#3AANV`D_3r7K&xjmLEsOLO~3^
zP%MvnRz<}^A$gEn5tR#tWMQFL8Ks4SD%MV9{k2hLpxMu2(}rrd4F(}56h2{uYwZz&
z<V|J$4ieaFqw-}wNGt+tqt<QwT$xC50kbw5y;a{M28(Fe6vYdLO>Q>uSuMf-5mNKn
z$Y-=yiov!=P6};`YU0kc6Ay<?QQX_nPNfq?Lmj*6S?#VKb&j4C40U!$q74x0qES&(
zf+U$}r_TDT^v<TU;rk})dNsTMS<Ro5_f1r7DJDv1nkf6lMClF!L*H*J1rm_^?U@1+
zko#$-{6~RSouRVta8x-O^_ZWqzkQ_MoK62j)7@3ziBX{i01ijxgBy?lI2@G^Za~7H
zhoh~I!k={XLk#k#=SWmOxRD$f@JLiXxRERX9f{(>O>3?Q8XS+}%C!}LaPz@GwZitG
zZ6(OG$D{JWO=oV}<5AoRJ;r5$bP5y0e1Oefq9$0I|IzvugJBDkRZm6baa(6@)l*R%
zx23o+rbYvM{eQH~Lk&@Jh>B6r<Z7^IB}nwpK(mr=>_8%58lu7ea>(>H6#LMIXs92r
z8mNIhQfi3y?!$N9ooPazW9ffs-73!6{s)t|cASDlx96gAmk1Kwo{Qq3d=y1tXUaZ5
zvYG$V#+3i)K+xIDj}8Q#&HNZO#Q6|J0P$lK=R<UU)|t*`F0n`ct(Eq;<RH-5%q0hb
z&Sow}4Urci0)$JH7w6Do)|o1%;j!#z|JL4ccN!kMW@I{#86J}dlxPL1;V~@W{Jl|U
zoX7aa#FPm!`@PY8w(}p_b?m|6+L<bRuw6wbGGk&gc|Zy%V`9x)@+uP~f^AH!U_wkJ
z4`T4-F*fEI9}~$#@*p=ZCX<I`A$ioqD0xt3?M#O|lVbcA0qpM+)fOGWfqB6aFUvqe
zl}RzV4uS;aq?nywJJZ1qi}7{veh>&E7L(ZrBn--8av=l>Bo>nkAxI#xm@MV;u`7tV
z=Ep=SM|=F&VqSxna``l`r?V%kwUY4kn8MSF7fj5Q=`p00n^4l^)5Ms;R#t1bglEJQ
zzIP!e+RTWFHzFWG&0@(HwcEn8VzPn*lejTdaDU)9P-+gF{G#^9@SK>e1oL_MG$)2i
z5N}O@gHg_9jYk4!ZcO3#Qp5z#+!*eqI`TFc`aJghNUgIqFD9$be8r14^J1tv7a@^(
zn_~%xxwd6@jnqnWnl7X9;<Vb^oW{GHT{l+yU3j@YUN9lMoW_e|d$hrLSF#afwO-+s
zG5L}TOte`U!~DegA=-fYn0-H1yC?jyJr*#DOJlj6x50SVu)D`;cZS#4HfhesyM}Di
zhqu9a*Rjpxw0_}rF@@h=0i4FWE`~`-C1rD()*D!+M(Z8k5R+vmm}s*hhO!e271|)M
zHnA}^+TGzzF<AzKi8h;JD1&i$f;O0$Ti7o(+RfoDPMbz(vxVAV_M#1@-d6VK@mgtk
ztBg}(qRrMA5;Cq|K;q!@Q})q#t)um+V;>D|J|+7srE0x};oBW^?Pux)ZHcivhDT~-
z{uX5Z&oL!f-dOF{LXa>uXfbY(!1$cTJ%BgH$1hmrMD3>V7q%`fxF5bCUH-+}K;kR*
z_C&2J{FUv`7TgbCkv}VW8~EWHcKu6QpZGVn{aSE8d_(rbt9d8}KkSPsg*X5$snJ4g
z>q}Z&3k?27j6S2EeX&?vKSc#g7hFumT-7WvNjsVMT?_>auiv}S@Q%fJIoSaO{C3RF
zJ0LNfV=-Azf`nGbVpt{V$g>N@Ts=EntCg46+mjqjAk^EF93(Z0$wxaNflyDQq`cdO
zV(%2YZ?aZeamqoUxHuJ)cbsSggj2CX@qhy)5KhJLfMXox-7Z94$kt8P#=A={#N<K+
zE`%<`Wcdh^T9KnS(TdT9EO(iWcv;(0aoOpYZWJ!Z<Pj~}0OE4Y6jdxpKwOTYilsc+
zh2r~4jPDdWf`H@|J4J$o<P|$bf`sIiYbmk|4R1tTY!!AgY!ybtWroBjz>bK^3<(lI
zBjPecf&|crI5Ol5DjeDsDKhR_9(S8JS?vDB-axk9E83x)yw~FPR-r5Tc1B!m71mDI
ze8n^3a!J7_V9$t4*MbE0j5u6N?_#==&1bW7)3pJ`vmFug<?OgTb3q%3%#P!%qbC=E
zFXyr$uWOaP=Gp`5%3u7<wFd+e2y^4I-~<VTxp5SnOR4JW3exv>Tv?dy@vc_tt^y5n
zfFV{vkdS^mE>}U2kbXNZOK6Z-1>cUhTo@OtATjtV_)gsOeq5}Ak_WkW<8l?0EUbd>
z#qCwFE5*l$?znI-D0u9{xLg52LX8jOas>nlxDVs@3fPq*W0`R84IqHD%rOVmHOm}x
zP@pWc{fovxT1NiGlUYwU!?!B#`W)`<X|XFyyg}A?w$`TEs<;{#Gq)RgcMTghTbon7
z#x@d|z+7Yd6(lg%kYE1}3wI;?Z(z60(f+%5gCjzI-4NHrj|<QSA{*lPaRJ>rb)z}D
znVp}b-BY|dE)NC4gvjQ2NEAaLA+kA+Vu)UYbR%jjd+rUbcga?#7xLcLxF#<7(1set
zk;7>|bt8*!lLiL?gKx794ib{vY=eV@<hE-D??wjSE$36|o0_lpZrk4Y#J|b;1QI~I
zZF_?R&~CE#{jhg;!}n#}HKx#Q-e$2&OTA(C@|#-Myf5QwQrNpY+52lTn>v61^w;+2
zKmz(}+w33#{WY1r2&3yx*4oG3o2RuY-sgyr+4tGg32h*<kEYYDTm)u6z<l$yfh7kV
z5du13d#XD(`vLOQPP$d=PIf<)t)8!arc|7=jQ}n*J!J<SNMM|b%VHWN3B|E~)zcj8
zPL4RAt$ka2%-!p}gF$B)=N%04$oaUuA%qMt&d0GX@p;@G9`Rj{D_3bAcXU_bzhVaC
z1LQ8-GZ-Y~F55F0BxdmCc+0DD1`~tN;Gg53U*!yzJjnfG&tS>I48C%026v|<`$C~p
z$CiO3SfY*v2~}Pwl(QHlAYUl7XK{C`J4Uk)KGZJv#s6WG(S<TegM=+c7s{Xl382x1
zGD(93(C9)0)e%~C%MD*mp=%C%exY_auclD7L@bq4EY%i@RTl&hYYU~7KmxJ0P^M;(
zK&&l9EKy*TQwY4w%0JKsmcMN41SSw(wsitYjS3AhR**n=xe)aST`!i?jDCgHeV{#1
z@rr{$7JH>o{`eYgfbdFTLR@x&1i~wY@~L1sQLh#9^jHQ0lCKrY^av7?ui1tL$=lk7
zEvNXJJs*a3_n7T;PT@7%QJ=zVwrx^~0Ae<obXg0Sw8HRxR_HpB{ojwYte*E-p<T&T
zkWKdpo0fq9<R06mAOX3@wkb$J?jf6gN<WCJpwYgc9l1u^-n`TM2{{ySiJb@(@%=4G
z2)&=c&z$)4stVZAw=|)wOnA)2{Kq2mvu(f7{O&3+MZlv85SAw7k_8e7OA~U*0*QcM
znrOK)A(kv+@PN-IJS!4n$&x(CElbEHOR^B~%M-L@&CKURz~Xrzp?sh4WVd{&P1gp2
z5XU|hJOdm^$cP0Ar4A%y#DWC)fdqB{bY}q)N*zeVzlT!v-kcav3O@cWA@9~I$ccyX
zn;iTd6ZY+QIDb3r*o=I4I3ed1S_1rV!ghZJCF}YGFMj%h08YK5CS~h-M@>o=^^Tg9
zEb0@8f)g~cdKkXb3D+n#@Ss+ocRFFec<w<#a6Z8&Rv8E&p0~XL5{Ty$a$<o5;`s!E
zfd5Fg2l?s}GY@NDmt1mWC<ZPiH2$j0gEo-4lqm4)HB?FVpt*E~MUQ9`O0Fd2%NsBu
zb0yJ8{4NP3WUeIenv9mZ9z+dGirNAM3_C0-BMu}ahb5);K=QV>^?H!qM<#{!KyXSr
z86?I!GAW%55=bMH(#ar!G%^Y6%~4>zp7?2T(lswT<d_z9HyfL@e^c6%%r}XhY0##3
z#{Yph3BL*A;SUmslakVUAb~h33F|GSg`+3N>|;q~diL?-T8X;~|Fz}Ff-EWL0NO#0
zCFL9diEv}dmeZ4B4iJOSfmf2A*OFomNFL-~P0BeSS(pRUl6KkFlbkU#=_GwtdIGTt
zj>v=f4ozm-)&&W~nMvEaJ&Al%Sho)dSoh7Ov@S^4;!WGSAc6FzZC#LD6xOAm8uh}R
zU(z*>%{r<5A+aEdoKJsXrxzZIy_ZxzNP6_;^iZsqd?-dd7CxmdyW#z$=X!p0CO%;>
z3zMEczu};hMZ~e;7AKWufcvM71`iO6g->h$7_j93$kIu`(xj)SgGO%1CO!SGp{+_P
zYk`K7U8x+>8}Zopr?t<kK2FM4Y+O0A^y;MNuMQj;Z%xv3?=`q}No5n@@RzN`P?4S_
ziw;CN3K?;I(j%Ur2@Y^KBt4xRT(a!Oq$k?-8gN}w*#_YMvVrl_c4D!+8nhv0Ta%t1
zjxg<jKS|2JQN%l-Y49m^$v3~fDBO2ZxX&rsWd|&n&})|+=pZ4pivpcL#^^;sw1=%b
zqtzDgabzgS_atSSKpV*HNg_?q^P*m4uDxv7S*=^Uz4)mghT<hAMD`|SmH-Kny-8$=
ztMm@A7f4@2QaPJFaaQ})`w;#svN=8=6dUYN1PPc1I}||zrXeY_IY>;ehGhIKrWa*%
zVu);hCW&nRBE1UhMQLStDtpr<&6iU#Jaw%jD#M4T<dqCsp`+ocW@0jdL`TC@C@Ltc
z^`gXHof26M1SG3da^8W2WOYhrHIR_3PTBLW7gZi(QzEN@fHGqp9cV{9HYKwfz5;1%
zN@g{XKpLCEynC|=CSIlCdpqUYoi%^e=K7kwox(3}N6;ZbCAoP~c85oQ(Ot4AB@+|4
z09%yO_(NW51h7RZ`V$_M+AGODi`j6W{$|NyM~3{oI3@SMXakwWDHQEvMMrS-%IsZ@
zusXC`nG!FCfkaR%Q!T|Gr2z?{l_|KWj(4Qu%4ls$`Hbah`j)0^Q|fj4K&}9qt!KwH
z{f^@GDg1>BikeF9?)9mbX`7@*sn*5(!EYsbawGe*u2&RqOnJnb1tz-Rm}((5Yak)A
zF@;w>^c1&}9JiV6()AmPH>W(}ts9sS*_`r=Yf_L9*_^^PDZMDDB!|_pez|)8;<}Va
z{8ctEAySvh7q_z@AySvZYdv}+TuJrxCu~`+-n00Vlt;XH2NNQnq{1|}X=qeBf08Qi
zA%~A+y=|<pF^0b_<q=U=$zQy0O9e`$2%V>IOSLcKkC!Xyly3)nqp{wrc!wiGhvz#S
z5js5IK_c|0Co1W{dlzfgM8CasSIQ%<8^MIgu2g~evq2ysvMW{6R-Z?|w(4#84yIh=
zvoAH#-^?)%rf?NbZ$x_|%6x}Y%29TGp5DC*{}UT(@PT$X)l_&8B+w40@a}}_Es&U@
zhg0U!l(;G)2ER8slERx{nzNFF&^nUB9T@#JAIYKz7)Me)dg|vWka|;?olGe=nupyM
zyCYvOV17g2dmmULb)W$}cQPd}YC&>=p!oR!NGNtPg`W?QJ3zt#CsUmU@IRG8B>&v`
z2K@zE@Ox8IJDa@;#i#qhvrZQjPiO53i$>_;Y)bAFK?37!3Ohy71s&a<O-0(vF8KAx
z*_72zze=ygdQ%P@l~!u9?>E=~?XALp?SW7Z9F>-70qxMssPwg7C<l&8qZeUe%7LTO
zk(#t9G0<F;7^BmkacNOvNFL<Iq-BXAStv2arm4jEE|(68TN=LFv}+w(YU&4!+O#*w
z?<87MhMAmJTJz^636M|-G@o)_kg(O{G|op}g6Tlx>nqtaLEUhNUr8(c$uV)!>XkH}
z99Qy2pk8IsR(hZCt7)Z(EQU5@^;gr_gV3>dOETv)_ChPYV`5rbDUogH*9+6q?b_?3
zJ-iW;!rZjd&%BgFe>buPJ3PWylnsV)7+L{7pW}ey7Z&MKzT+bj&~wx6`jTrn37zMr
z+xOA&rzJqc{%^8Ymfk)5rlTC4@4rdPi2)$k=CQw97{EM7IXd5;N6KN&00((tKHH01
zjL7`7!hd2%OthJw#!u|<=PjraqU8N-Sycbb9eF>k@VQT1w0b|?zJva`7$zovHd`3i
z?^YsNM<+Vt&yr45<U<PceI<J(p?@7&nO1nH6BCVArn_|0e-@2!i?x=$l+>?8);gN!
zqS4xPyADWCil>j^+n9FkVDF~%+l-BA>_6xfv=8Ng&1t2MHA(9|s_;LNx4?(_Hm3vP
z_uC+0-OXv7%~OPeM1*cm7uF#{sX8JC&jDM~G6zTwG}w}sIY6=~2W&|r2V8*akVHS*
z(@MfTiX8AsT5sqJO3WI3gV(m(vj!w@D<27hgihPjxaFBcfnH$vcBftSX}38UNVnH{
z^Vz67^`^|iOAups+8gG9UqFHXIc&rOpY1BrePNKok@yIOKPN}hMNI+ewuhZB(o4g8
z(hAQy#6+7tX=I%;-UbvdP+IGq;$Jv86!l*a4tDDhfudigm9kinwQHj1v-eu-`4KQg
zVBj-ae@THc3J-(O9PxiNd!RLKW{;*75#ZpW)zLJLG-zUh1nALp#~XOO6A5LHraN6v
z_we`(%N=7l4k->Fv!@K0fH+1|<_X>g@%{sQs;&N1<cGA<S>jT>|B&w1U7tdsRX_oM
zoLz0JPc1y|=t2R1oOHPdq1D&$ol3i^Gj8(+Y4~mJ^oqo(G=9HArGH=SB+jLkAJZQF
zSNc<(edSJqc-fNn`oG+r&Zj-Sc_fK%K);aoJoOt62757$tpqL3eJN-!r<GsW_Z{@|
zD*R9UfD(Mz;Bq=7mUNJix}3&?D+*eW2-?f()Gsn<iNS;RXFF&m2fhDn2d!jL(Edz8
z%Xi*=5g5MV8D&JqV{T^C%k<q3ff7NBZ!qidjQkBNNa!>?6XUrKN>I=a&mf%$ooF{X
zJkw!BMwGkw4xJ2W@IuDZR)2*~4*D6s(HYmvY*$B}H5;A5pX`}L>sddF<nh_(I_dfD
zf#Wl>NCX%CjnBxx{sa>JjnAM;rv(foQq%a1QNb5#B2irP7Ww7+UI7dFDcNs2>-c*u
zQyf?t#*~aabMME8F(reOTmef<@03jbE!<=HO0dLfF8=bP<X~7+G9B!`c_Z{aCDZdJ
z{YSj>_4*Cp%#3R>0_lewtM8DZ*$=zoF0kp$jC>U7ry<W`?|0Wr!m~08zv=RV3EWv3
z+;rg~E=VXkhh6Tj-xryakxLAiXfub*K86-FKh4ki*=Ni3Tz6!CMoxcliJif;T}ZL-
zr+NDhn^~cM5P2t~@TVBWM5A{yc#5$@G{S6M$e!$>?}{wUC_MDgh$id83_@?CXoTtb
z5qqGgzB%$yMiGxV{d_upl)-g+FSxnC;mc-Rt5~02dQT&p!K)yO_5Kv=%QMPKHt0sZ
zQx!-=7idxVfy8K+X9`4t3KAMG&){&Jq6;LVYk4NN646CznixFdS7c<GmK-R%A|unZ
zWKqPg$ROhHgJS}QZ%xLvCF60Mw_5DBquvM`f2XdoXDjs*V@<|e$a8Ce+_N^LbQEt^
zK|(puB7uQKH)}IU8u&A*-T?V&9s9LX?;2j0QM&N#118$6%iy+@R@(siV?DdOx85VX
zJ|i;}n8eK>L($EBfSj~}eb8I)9o~>pI!PRI(uPdeZe&EX;oFS7K6=ma#*9qlV4}^&
z3=%oLcnDC&+{B*1A8`$D$|&U$hcf1-OwV3=AKnJW-^@1j(fbu{cG^(J+)Qo$3O8PF
z_&&+Fb|QxF=avevetq?ujZZST<Rph)PY&IdQFaK2f&?aL@mw7w%(5*L6Wb+_7~Qr^
z>o(k>AmPw$nc^MNp~T=0-EKQna-h+6+o6(04&6=;ZJ^Z>KWo^NaUJ$T&+pyr%m7qb
z-`=JBgj<LA(>EJ?GTsPxt4VJC0&Wyb=D+)6$pp#w8eV)vUteTON@+s}66)_|bNcHQ
z;k`~9^6Fk{(~7qN^%c9)Uyp>pLbPy8o7}5kWx8~gZ7}YyS-0!a=Ie|sI88qFzRsZF
zEaW)w>No7U>-A*#8{6|H_v$y~d3sl4l2`Y!mDlUHMEBXA2NN3XBhL$c;DP;c=hW+U
ze~fm8AjE2D^4A^vDb_5GhQ;t(_V5jQEc~sVTkt1hfc7ormIQBuRCs{Baf6-;AIK>D
z2_V#<+V4OHPXI+5lz!i_AE?cDjs>Xl`;IIS<v1w(zGuY)^mzFDj3QQj{HYPN`96am
zUJ1=n_Z?(U41kpmW)%KYG4w@s-@y!iDkgC7v$I3&9pFR`Ipb=KHit6Z%Jqj4vo{#N
zV;R>;c4~nBkZ~-dhIpjjK#_Vpqnw~fEw94=#EVGqVWZ=jR^lx_NcieFr7=o6AQ7X-
zGwBmDMv1{=wBC+U$$<v-c8p3E#b`an=sCPC_67~#PZ?KDk=s1%v9h6?^v4wACp#*G
z6qT2*Mdg}X5S1WBRN^DhFHyu%0T!gFyvz>WqPGrTw(Sij+FT}kqY_3NP(QOax9XMF
z&-RJ{CUI#+*h%X~kdn>tqU`uv^?~mA@FKaqfQ@Fuix2{pycGiTg(9Uq)`8_MP@A*n
z1NEW^7$T^GJVak8LQoACpoq~?+4~3TIqt})BDoj^d614OLf1HcrLGaB<5<=0`pU?-
zBBdLjHDIFSaYYq9aMz}I2H<xxMXo9A4|nLd<WDSuAF0M4Kz^K5q)aYi*QNE&tl<vb
zR|Q&l6JKGRNk!6|ATh*AMbeuf;mt`!>B&W62_XjeW^IvNLL>)z)E3DlM6$@6wMFpe
z$K=hB;hRz9dIR2kAKrZSPQ8<2%qa4<;yETn-kb@0ilqZ2lmad4a*%+ZNw%O#9U^zm
zV!nIyTOzZHWEBl2+RQ3K6+MpZ6(Y~gW>4Rvj}Omw8gVW)8pPXRtaDha-{}uW<`l{K
z6XMRCQ-nVi@kiM7M#DF+$b~B4cly1?ydwP0hO+pLWYf2bl($*#@AdK__@8)F3O;mu
zt4RK>YLMvRts=bOqqzYR)_kid`L?tsF}O7s*w&OB=)S<Vreu*d7qCUY*Sr5e`3!z9

delta 24963
zcmZ8}d3+Q_+JB}qGjw-2k`5#@Jz=J2CYd9UgaF}8!mWY_-mb^WvdXUR`l_$G?!7^7
zK>`9&a$_){!phAcauZGw;>Cg}rv&06r+|pa@B36$)4sny_<Z<2UG=S}p698jp04W2
z#1+Z^E=>*{;ToZgNFU)|;Te0Ma%gPowfj639b7xvu2G&*MnKn|82rpLLtYs4^piff
z<w|I&-;MT+{DZ#p<1D?2;qj*}7=7uy2midOOXr*1{}0!m)PQHzdiQN(UAo)dT1hwD
zALJ^z=0B|dPY!wZrKex|tM%OPte2h|VhLU=@#m+Wvz~s@dj3x@KK1mozsDnhCkMYY
zI9aS)_dhj+HBVP_tE~SS{L&Lo4SCTTY`rk#_fNn0(vTO1JZbeovuB?B{e44Tc=_ok
z!1&D57@}C$o9P}J+QY|IZRjGX88+mawaU@wD_l{x;oXp{)aAO(Hx%pMe)l}k|K5Im
zi>=;+Ul?LN#g4q9O=XM!r2e%Ejci6Y7&qi<S(4EW#tpeGTj?$M@NShDbLw)_bwgL7
zk6RtBH8;E)bKP5VJ$ja|*)sIol<PIn?54<TcsA#HH@Nf=R}M4To~uO6EQ>98Sq&5e
z_~fV_D6u`)pJzjmZO;vb^`C|Py@vba1?OH?U6mi_Dz;_3;QKf?!&cl2ijQ-Rprr7E
z;^W+KRG+TtiaTg{kLIRrO%?w|o#rk$nya=#vvhZ`iQ#R?Rld!2>njz#3GiqwJx$0`
zr~jdLbag(N>n_nVF?I1wG2Ewe-93LH!8nb%?hg9b<bj}q-sf|b%c+O{r9S4W!heOG
z@c{ar&(&IR{Q%MLe6Eqr?F<MzpU-W1S=yNd+|Czr-It`Dr40Qp+IE&A*!g>I=O2X*
zF2nm%t}@K$PPHGZ{@GOpU~A!m7C+@`&7>ACu>F*qnI*MwL5rVqjbT3F?V#ckT3pX{
zzv2_#mNMAk=Ui_l4*)3w)s0+l_Af>7+fbjkX`vqBwn3*6tm7~>|M3w%>BgX<z>On(
z(v5&naD>kgkpKwR5x$Tm^;J}Y;XC9Y3aQ6iL~hqx^D%%%u~oy=P}L}B3|d5^oH5cd
z#weeWD@oI-kIxL)5Mzw;<=raBNS9-b^0mH2H~AQD!#&2Q^fQ}U4?Xw7lhzZ@{ps14
zL{tV9w|J=Q57YVu#?WJY8JUutR@)d~mOU1&wlTh7$bO2U$M~$ia%fs>r1}_NxR2hM
z4-GVy{d>6Db<kL6dLEKGW6)w6>&uEtQV+%$>x;#0h%v_c61E9Fa*VOQ<n8)LwA_LU
z+*Zx{jZi;+yxJLrmRq%BLt1XtKDpe`1%p)k!Vx)$7lTy$qIb!Oc%==ieff9lK|V$k
z!#$BbKT@?GpXiLy1Y=Be#%O{uCi;xllC%lNnCP>@HpCbceGz*iP2?C8ebL+XwtNgU
zn8ePEREsMnIb*1p-6UUzDOpsEG07LONmYz7$(LWCFB7KF4EI#_@F;b~<5L|94Qftx
z)YL#R)o0lD)<7}U7fZ+iG-xr^m%Lw^LX&Dv^%dTycjs#AhI<<O<7l;_Vwy9C4mGFw
zGV&#hjxnbB3cA`5V@&gvSLz!)oFc<;*QQR4RyQewY8{RYaMb!TL`n=Q8Q`e(h1y7t
z3~<!?ird)`de-_%2T46Mpr?TaTkC88xPHpZM`>!fm!~}A)IX#TTJDU}6r(KnW#mYn
zrWj?pFV|kcO)<)HA5ytk4oxx2a$n?bIZ9JG%5q<Hp#HhYUd;^mn$(_Z^+8wF8fTPd
z7-fww!;Xb!7-fwwSSo3oVU#t#j-70XQP%i6|5l`Fr5Q%aBuSUS*q(GmIG4E7NcQ+3
zzC8t%=7xKnk8e-?{_@h0XJ35!IktX{+KerksCql%iP)>q4nwc=$-N2?L$9L=9u(@g
zFx+)MCEwhwOnp=9l(Jq|!>)%Ru@giK1W%n4JT1Uh=d7a^V5{?C+iHqkD`a@L`_jJi
zx%3QdRw1<9?o(Uqb15`K*lFCmd~D()-WeSMz`DyP(>x&B?(%6(xjg{Ey35xhQ*Utd
zu6X)c>gmbqQ%dn?KBb9lMSH_%K2@ZukV1RIXTI!~`k{2*3BmAX>c$)D5m)h-PAAIO
zUpk#AUw=uR=82I2kEfcwsTL>|$88&gcu{lQwgDhGj{6L;Bmt?DuXT|7C8QvsHu%`m
zHL6(#fG}vVeF2D`4Yn@;(X)Yk!Rv+)Z7rvLtaNdctAhYQblTB@lICeg2TGc!Z9kwf
zm`>Y%ung~6U)mJE@PmbxXMJi=_`xDSTo8Wf007ntwjTh|_JZvPK(JmQKZIdXi%j=D
z`(~yZE&bl<LSFdZCo4R(L6`4+sPL{)cv*^Kcz^UMLsMO5sef}-;lCoT@BkzKXwL@_
zG(XyV93W_Zq&<$xIzVjnKl<{9`qTC1x|a*k;F{0fiZ4uRAeR46K6j~}t!MBi5V@Np
z46gg!-MFx;Z0M#%@Uzcd@qe4bS2uj_`$chTK?Uz9zcS8G#VOnSinf4i(HE=m0IK7O
zs8Il+`Y6AwNCCk;$}cNYK&U>-pEC}sQ$<PwUMY?CyT|%PjUr{}H^wh3QYk{E^s1jK
z(*MvJvJhKd_e8%knKgM!-B*SG+18{uo9LHG4eg-PM1QU*LjXZN(I3s1)}$hNqQ77=
zRHA|y&&hh|^12_z<1a+8-6TH@y3>W#9X7nv{Aus{UFI5>b?=ZDpJR{JsOybsel=Sk
z2<^gDOV02sb6MMY>Rna%pD+;Qpq}BEr6eG<nc<hEBp|ez;cq!t8i)kkKr{XBInqE<
zhJLeb14$7KG@Bdf7Onv*$r``%4qV2r&Qp6=0oY1VoYwedB^l;%TH}|MBp{Ti@f+{l
zR6<sg^Zf1wH<jQr*yL@$tR$(QsOW0_vXYb{xMRNGn=IscF=BWZ`qP%m^%#L73;k+H
ztj7qg$M^j_FS38ts@|gaZJqH5P2cy+v<L_Tyzj?yOk%PTS}{x5(pt66fF*vJ6d@$3
zUlnCLAi69eTT_0H8s6ppv^uFr6fKwg?fe`iJyr=lIshQVSJ{dHqU|bM5kRo6B1I@K
zL`jj=?ECp@w9{&*3n{YNFY^N0pv!8%{pJ^?ys+M{Z2A8e7am|_JP~dK1kHMTaRGv6
zy}h^q;kNbuoGsFAB;c{L!SCKI-6mz|x6zIrDMIXQ;;}=v$v3>){AsOsOXK8Y*lm70
zY37r0c1kDBeiu&KX={i_Xu8w34IoC^Nwz70ZSqO|kJu;gs--0#`4unUxgaE|ze#f&
zqRU7AEJNR$4owOS?|=MhXH%u`se4>4{^M5zdRI^tkPZh}^F?a+;sZ7ngrGX$ZzB8+
z2&x0*?`f2N3uySmsXs4L1FrJJcD8^N;d$7fAu2#XYUR%_<mv!|<FLP|n6K&rc*=c@
z?fJKQPx&#2fxL9gFW-XD1`Nmiaz_LN!!bX0#2#D;pcCxT_tjn%CmaS!q9+^%N}?zH
zhN!y=coIF~M_o&=;svy)p7M)56#&|w^2_=L5Is-%WqkvP(N6j8J+*)oJ>%zlYF_{l
zopE%aJ@t&E1MR72{PG<Ejlp!rkJ{!VFWeF{yhF{jWvL-c)B)+4Lrr8oUf9IQFT>e}
z<!VjYa8t%Dgy0%(%B2ekuHh!4;!E;N4EFMlHI>&)x4DzK{;u7TI<`X9Tvd>Xz()%Z
zj5Re;#Q}m~tQpATDI5@iKh|vhnwidPMiNlqyT_UCa-PAZ1kM|0MvHza0?|0Lq`O|q
z6+wdurjlnyt@~dX%>J-SEi3}Il_0-PFg5Y!8RLGPU}9Gu#QTD265F&&9b7cY=|Ya2
zWNO(wm}1<Klgyl4y#wz8`@g{krqr^cH%ytcV%&pon5uZm2L$gMCQ@@J-UU8-lPyiD
zT}t0H74ae(Q^-|snt26s6mr#@W+JICqS`NpH$v}RQ>jgvtJQ_BD*V@;5WNP@HRWE7
zcIY?PlzTNGtUA}ssfAT(uO<OcCvTbVw@tBEOBwprm~yX{BBYafChgT7xe9n;e8*J6
zX3S!J*Qo8v0mNn<Q<@-v-!U`jOvi&k=(X`3Ge^9E0D}7+6GsRX`Y}2|Sjd*FQNtw*
zO&RkLqRT>4#ylXpEHv$yk142omYO`~`vAb^OP#^#WpJq}S1z7{X{jk=9uQ1RO~m}2
zy5ebJcvqTfAF%SZ>K!dsnx1Sr7xA><I|XBF)%@TpQ{nGXBt#^wGW{m)34owYu>)(>
zXfS0eyiz71+N4b6g?!!yXf-p}sj<*%IW@GQe6yMY{Shp>xZz!Erfp?|)~OG-SZk_&
zy*G>!Ck@uK?d#OO<?HR4L5P{Hw`T?j71o=EII94}%+{NcD9_7r(r**Hb-h|zzR6*r
zytv8C@N>tY4K*@NQAGiQVUvj}sxQ|8de*TO>(yH->Kq12H+5!)NXK!W7wgPSTL;RE
zb)>@p%q?MfcbIA4vd$aS{+T-{{C884m!Qe*W)nB4d&+m)#1Mjbw>>#PsJ7db2^SE=
zyUDPB;tY6L&!%rw|6Eb;Fu1@_?=aBh>P>m5l;D%Ar=`805>$e`us?OzCiM|l(SCcS
zLW)lN$qf{_fEaeanb%tH#rpsqWM6Dn`;;GahNV1z(6&f|7t06DOp)gSsgH>~e<x=^
zs2*bXZ&3%9A95JzNa~QoK>7ZV!$8^M5HSqk3}}0l9p0ke(etRo;DKL{ni*n+C3x~U
zYPL?uSy1vgYPM;s9}xCO@@O!XM)t=#b$=E9CzfqOp%bMB$AFYd8tnMOQ?N9UZ|RK%
z5UHfW%x^?0p@NzOqEb9*y4(IzM4OrEepJ65A(1q^-<fIOn=Z4$df>&uzaP?zZQiQ(
zXz`t?8oD3zOHy#0WtrR5K+#z{t3e1=&f1#|AXGU^n@xas!Nc?HSKHLq<>&3mBo&H=
z^Y&x_sgWHGfM7UJ(SQYyK@kiW+0t!lexHjD1BLoUhk-)lqA3qT(FF__DT^JUcZWj5
zd&Nwf5OA5@Ew*%;C!4j|u5Qn|VxqX=yJ#Uz?7At+;MqG=Z}D||dUyot>-O{jL4BR3
zH-(aYAq_k-_2~|Es;hWpKxTSKNgR;%Cm=eF450p`tXfDj8WZ3J1zWO9^_GkY$lQuY
z=r|@Ib1NV^jtSVgwUA(Sfag|r=p)rzSsjo8f=94ObwH+8KoC_2WNHQEJ&{^RH-Sak
zV5bSB9Y{rXtE1Ah<_1)sFhm<N#JqqwCjkKEJbO}rpqv+wRRtg@=LKMiSroZ#Nb?13
zOuag%ctJqP;NcA+NdryAZUcxu3j#jBzE1RkB^I#<K2bLeT4c|p4KKnM*)stI#iD>A
zj?4f-u_%C4PgwvEThyXJU;vM5g5p(tQ6R6sent#}4$Ih!pQ`7|mpOx^BlMRAGDLc9
z!_BoU5bh#b$z00<-OKe``P7gZR<b#tsr~z`bQq`-Tp5suY;AZQu`&=$N(RadD+6td
z^iL^H+EBc13@Ax+OFG-zQ)`{N?Q?ahs{$giz|nxWkp2V2tTzS>aij?dx{ZN&LSHZF
zF!s(=r+w;1SH(_;gObEf$8wY;b_QgYZNrnq&H&bxv<r%ay{yB2^<2eXhl0w3y@3po
zBHQrtU~eEI&OHI4#@;}Ojy#atknKMefm{ZFo}b#042Z!$wIdl2JwLq}$!(}g*e@da
zRsa}yzoP?H3HzOCP?fOX4rMe3)BXTLxj!Pgt>OJDkTx?9Ynv_I=*?!zLA5mdtAJ|i
z!)Y&Ri-`6f4JZw%TMnv<s|x=W2FC-8a?~CL5ThIo;QEu|3J{|l4dAkYGAbZ4>d}DJ
z5J=Zs;!u<X{D8;s9t*fn1U&pK=cW{Wj|WhowZvJ_O(9COZ(0PXM(f5E!+4Es-&bmR
zd84Bg6#<O_xrMjo%cn7rDYiU75H|*}<vq$76vK0x-SxHl>#EZZ14Y_tXIiv+P6uQm
z(w48D(*bN0&H1$8LC@(x{sb3aK6p&~1XMU3D0q@zPD)WaHTzw)OYg%6h8kxBN_(@+
zy8DG8zZ>!bD?FrjEr-aqEv>Gz0a?qm<*Vy#z$}usrPXyd(5_VP$=Tri3vA9IwRf)z
z4g>AG7aT*-zI!1cckZ^lO1}`mzFSXAye;PJy%JD<3b4pwbx#%kYb!#l>WX6xT2)s9
zhN#@p4T@X|pmG;Z_Q1(k0);=_bTZxd;1tjB{t$3qyXj;pMc=EAlcf+&{xOp~d6>`)
zh8W7Kj;JHbhvwbXiq`4SJh|4}Dzr|A=E+<Q2<D-AxE`wDbHg$n&UzeGdz24%7-*Re
z&$}5XRK*X^%M=IxZTT`Co`=hyCpZI^>1ej*s5+!#w8KElb#$J54R6br>*&0EaYq0M
z9Y*JMEYr7AzG+L#b#m&lW9oKS#bk#=1IJ{CgBI%KynK-?&<7lo^E#C2TLcHLZf2x@
z^NqUIRXM}q&|!-idGgM$twMJ<GxD<Rh}Xd}BQGzg*JR_JAQNZ&d1)V~o@h|t(v0nS
z9*r)qJejm@?Z{JdS$!M5pb8Kq!2IH$o?@HXk%#TKDQ}F2JM$EN6^@6rLjm&Be}ZVc
zGY`9(XbZF}PiaYki-)wB0C|B;kU!<;TciY3{Ro3TBpcHX49s6F=_wk2l!q5fL5!f^
zou}}95f3T60r_nLLA2eShl_zLZsfQk<hZ=F3#qL0>dQ)tukuii(fe!>&H50VdJ*rl
zhw^0U0U@Xk<;h(d5Lz9g`Ou4D5l!GI`{AP6spzQFg-meN=|WlND0QJ5w<4P4H|){x
z)rz8ToGwK4jnjqZ{tb1h<XwPHvaR2%J&R5{UC16Moi3CFPEr?&@*+B9`Ifc6r1mKK
z*6BiK`8H1ziy3Xu<=ebw&2>6&EuuvC9h-egy{+gwrwgs{@ABjc0NS9-cX>Dg_$}{(
zcs<XuFRM?Mop-v>@;jd=i?t%Y{LWLf%+X=|V#7PKb=r!c%bciNY;b2iJGJ4mieMPo
z8s%f%1E4J?M=Vc$eoft0Sh74QYdJ{4yFBO@TR0$8Ssug|UPn$X!KWg@v~#JQF|ChM
zup!7_Ytr2%_{d^QP}v@I>nC0K$f87kWI-}kn$#LP)&+5MK;Kx1NAS+ppu5*EBp7BJ
zN#4qUZY8AK;neMg+B{Fu;h>BXNTJ)|po|hgbUGY_Gm3a0JUqq%?X;5L9>Z-l&)Ow?
zp&Sb~5tSVvx*Q8O7cZNDNHWKQncamV{6q-1h{u9i-S{mcHNd?h-69?fcJ9J2=u0TH
z8rY(CTGyfmM>PtqhM+vKM;naO5X2(u#Z?1pWJamhr%z*0=F<{h`!)t;J_Q6rW6%&e
z1d#d!v1`t!lw3lgb|$E_HJOY3y}g#lR+MU^${`V9hUbWqGeKF{0fOyJFep9=00i5a
zU|}2mB~FGQyue;=uf1G;!C|0Rz6%Zm#pH!xu)Q=S#pH!xStq@mGobAymgt~WmS1uh
zXotAu%!oqtQc%{wB|Jng1yKXjVL*w39pVR8(?PqX{0E1DJ`ec8VW1u2hoF3CM;GYu
zL$Gy7zn?R}dDmEeNA1CiYYu}7hHDN36?E5v@{qKI?-195`7t`6Bqgvzj7g<BYImkr
zj0xSeC6#hxLN`4_JH(jKO)Y4L7!!gPuhI@tqF{%Zkm}V%8|SK+;Be3mF~Q-W9b!W0
zrXI9IOb9`bWpuk=qTqIadP?i2txzhaI~*C{nC@`U?f&$TA-=#sA8<?$6~y&dMTFq)
zeh&MwTpL$D$DwEnia8DiUER+K8KR~sQRwP^PN-dby$ja@_wqGtQ-#*8SB=9!*YY)?
z3~``YqR_Q`O~@y<OF%Hxgs@#wd00X>?6o1Ko7tA#DA!E(V5Qc&90EH?sY<I2$qEat
z!BrbFJIWBFE5_PT=dSu=oD0|N@3O^}+T-Q#It+BT{;o40x?6uYWQcQ#5{2&8-wm}X
z((mOASj&r8{~p@?<%=AKOfW2R7&5`IC?sE5N|a16EDFVweCH`qvJCfPcA$sWseG}+
zkOhXt4nr0g7KdaFjxJzW912=`d#-~)?{T;H)H;?ga~KRTEOQtPFf0qnuV6|P0}RVT
zRz&|_&XA2$LiS-#?Zxs{4nsB=RyhpWU|8kMA{z{=Xcj{_LrZ)G!T!)o`+fNuhoL2W
zu_h#sR7;eWU|18%X)Arv5)5lXC8hd(oS_xIfMCsfYY&vKa~N7dhjoq)t-!F(nMErw
ztfN`bDN~7(gI7T|ySH{n#YTrA2Mik>h8!?#49P+lUBIw0lql3EiU7~0<HL9#ZBj*@
zLy-%LI)@?`6m=o_=1`*Kf}$=I$+y?459Lhiavxf&A2}R8aC{V!)m(|<1II_9te7-~
z4;&wbl5NCcV~OIYqr&z5v^_oR9SU5Ox$8snLmadLMSUpLK~nfZQ6K8mMPG~8Fc`x$
zyeC4+$<*#!wC<k4_^-V{OlWe#nT-jW6Cqh+qZ?>Wgzyqcl|LXV{}ZA7lOb_nMgs97
z)DUw24}aM$Q35DFLj2UGD*%-IHYB%tK(K!slE*fHVE;CRW1Fvqx%2S86T)XMd)Uzv
z-Y)Fo9a>E#1h%SqQ1z^%Y97eWI;!S@>@2B@GFoxB!^=o0?UmGLcWRqmnLmVZ**by-
zX-6CVHC8)N8&z@5riKuDUb90J5Y*Q~IpXjH5Y*Q~IJx~^P~hoM_SD_l<;tO!)UF*r
ztQ%^{6b?v@EJGZe0D@wug>&g|NV`(QJI+d*oSJ!$cHGrsoQ109H&CvWl&fad_i4W^
zs<z}k3WT7lw(`VT10blXExgoGtyW59z$DiCe(lN1NwzW&!c>!NWdNy>C3kv2Fif(r
z(~qNbzxIZgS!r|FhWoX#Et!QQfk!~xo^+XJDJ{)ACeN+#vzH&xDvN=|B@Lc}a+)Q}
z4?s{(vrv9~K_+TXTFqw19?<?%Jlp9*YRtAYams}@=rh~GDc2xq(ZTT6SZN=!lMiZ-
z=hToEl#4n*3vaEZyl1)1!Ca4*9@6fsf<)+n=isch^#BBCE$Kl43y6TNwOYPsiOV7q
z@XMn4mit{xToy?g`Yo{JWswx&CG{PP4k9S8cAzQ!+fs7Oe2d-kE3LQ)z*d4L_HRqx
zSfM4z{%zsLit3IIRK6`?Z~aQU<%uQe&lf0!=(5Dh71z6f=(5C;A5;RO(pX|8?&D=5
zLH@DX5-WKxFB7GN%ETqsz`Oa%>p&DMaB@o@H31-^S6Fi80b;lnmRxy&ysdp;+JS1l
zH5NZG{WSnbGOz&=OKa>{0tC|<OJ)c_Fs-q$>~KNv$uhj_th6l_|ES4B+tfPC<L57*
zSrkv}+1W?5;^2Bq;q&%D2;;1$dH2RUXBHV{BkTUC);GA(QusH9Bt)By7GCsk<86R8
zvssU71FX%K!q*qtkdZgj`kI4~_852pw$eUfO&-%`x7coZTIl~mSA$g8!B#w`4Gr$F
z6khj|5M6iBYIu;hfeO3Wy}#Ce72IXXS7U>#u*<^B4%QsHpvP{u<Ja1g!QIltBqXVY
zOR;{u4eYXq4R~C;HMqx;mum)pyWL|Uli)}PU0~>Xw)k<aw^i@(&|7Ui@r<SyppJ(3
zpp`Z}l{HB7Dp?09Rq(_3jx?D=mN<h3fRhf{0SSm%9J1tl3m}v^WZ}JKI~9-}$;=I@
zD}%M2u8IabX+VmQX|Uw}3`ni498vrMf}_DIi0K<t&H*j2rmjDs^>SBSbvWod->a5<
zDd@<f{HhfcdpsaGu3FgR>43i@p`T>H0-)zlcEAE+^q=g21>|k*fbB?@8y4mPI{<(q
z8L)t`#jvo<#DHKL7M1}E2&Q3S1nh7!Z<*nJEu6L}>@vSkw^+M>d;F=`ACQ!@UJI*X
zVd*lm^n|dmGyvEqgyqr)1p9=rv@{^tCxl^X{^@=hS$b-!@fmH9t9)u$Y6vOjIyEd$
z)d8thI4rh*KyXYA<GZB4!b)WnR@2#tXSKgqOm`T_&eOy4i(|9_!}M@Kyh8(mVS3m;
z1}`I6lPZ5s!!dY`!$B6W3CqJVGy+FWI8!7jK<X66%M<ykj0|2I7RdzwJ!``<xd5VP
zZCEB3K=iB)+rBEJ1BivfSA79Mw9wIk4jvcUzQR*5Ewp_F2&RSPD-;NdyOZHv8pcKQ
z))%y|a+ikHTzx!kHl5%f?~1VULD+5nldY@qn(QABX&O8DqBf)oa*?Fb3fwEgGD!o1
zdqr4&Rse{dVnsOTgRs~sNWgcBm0|blu-GZ24E<Jx<xU|**eOzB+9{}Z?L^L48&>W%
z`&n$mOWMFe0HTJ$Bg}WLJzqfHR95nU;9eV+pY8)<7g!s%2J%y9g5uI<Z8&_F{<)Ys
zf@2f=pFe5)iZ(ejB?UHxHF1^NiATexFs}LN9i<ZmLmhkmW$pgTI!7;xg*rPT(FP24
z;jpMC0jW>8Q)hh|ePz?x@a_wzy^&J>tohQj_J!3Pu~0hGLOCE7N@oB}^?<DuASe&m
z3k49A2WX)jRG?L7sO&uwR*t2v|4n<uRfYcwx8VW$9SO^CYyi>kNLYSj0|>Vr3Aa85
zx6xq_3CL~kqha}tjg-JnN5k?P8z}<O(J;QTX~V}ygA-wVW7C>{W3%rcT7D6*tpr*0
zL|A@f)0tcJL>N~@&+xurYGm<$YR?umI$g+wjbVAh)|s2IF^m(oIPZd0aGGuYr<VNf
z>99B`h3>SDPTMOG5WJ^p1=3XuAfn-PIB<)cD18r#*Ui)6ynehUpa$~j=ybSuAO3>f
znbzJ}cIUseZWU*3XG2I*I|u<W?Afq<83e?zXTvxZA59_FnKI2qR`)OM)$)rD1s%Lx
zbSUWH<zm<nhd<~7ii=?!{?IvDXF7Pf#9pn^N-8fo40P~v$zh;_mrG$o<Un)*!zIdr
zHMC=Orh4dlICZ&7o98OM?iiU4Tds%YnIu}F*Yz;AY5s{(XB@V8M@E#fsa>yV_{0eR
zwf#v4EF&W_7oZ*bjf}L+;Z-9bf@)+WcWgxD0uu0CFe>7HH6n6>l%e0~h|C32gj_Ht
zLb-tQW@kF986OcpP+PS|ZB+&d3<{C>XbcdljE~6V2?)yZ5j%NyrgNIf5x&v=1^{6*
zIU<t@AWS$pA~!lfFinogjSdh@lOwV+%SMqONt+iDl^MOfvxvvwm030|+czUhm|qLz
z1L7$#PahsYER8oKNFTSOX33_NFr6J4sofczjy@EdBt)C(5%Gx#Aka*9`zUQ-aAri7
zXb_S#f)edv&I9dcv(=-tM}xB?vee7w_0jAIN<DmP0v=3vE-M`kp1Bc)-$s!TJaZ$s
zjVj}9V1pVqd$iWss)@+5GF$PWO-%%4<q{+;PfMisNZO9nrO{eRy0L;Ljss~=OPcsf
zn)u^?_uiEch`9lai35UUB~2Ws^=OQTDfZ4dt!FS5kzZ6nh&HJR)+i1L(FW)P=6y|j
zF!+HzDF{hQle&ku!Nfmge|t^4FZiKtoR)mzAChtU@HUwEI`-e!w0^;L5rtn@ft)73
zE`o(g#bZla+8fwi<F($w4G~#jLWnjSA}BDi6QK=4Z4-Ncy!JqFQ$!ZL5Tebd2nt@D
zlb{V&=N1;O*6s*yaoRLNn=RA^D;RCC{I;@j)mlk#tBhO{qRrL_QZcSs0CBRpo$asI
z%B<~<eKfS$PWD+vb$KhpyC;%%fE7*9R<_s^!N+RkhgRf=z3lu1?V;dad%6&!>t32}
zf8GY>|AhT+qIP@m6I+E=-29)A3jgG7(BpHqccNAm{M>e9D{lVJ$&I~u8<>9|d**em
zPjH`YwpQHy`^aqgNFMsY{QKF*uWR>M`y&efFpPv?-yexY_3x+{>4Mv)NZL?VIY~R6
z^;HDL2rtXK&|Hp3c(K?408Tn?ryW2{;&?<Bi-6GOcm#VO9c6Z*0Bc~{6s^3x!CvDK
zf}z1)<ABsCBER4P1VaPOjS_7a3baP{$`q}nqS0ZXAZU!p8%(qTLt`Xge8K?;hQ<g!
z;TT7WwhO`Ysqdy}<6Xt)BXVbg6rIjTWNipYt;nleX^ZGW_PWg8nW}BCxa^EeMdIa%
zJbFbNP+X3fqC^D*#pMV}R7#UwD44HCM0p8-o>%P*35cFo?F<Qso>y;X$SyR!8zMvA
z1^`uVI6BZab;Ge9ZBsYw42i~Ix<MIom<o?}MT(53t&F<N+u1$uXxXWO)3k5Xvsl!A
z5$H<3ogNjw1pxQ-sN7Nj!96`HeG3Tg=~4KWK8@*0MxVuev$g(3vz#vE%vn)+hJrTe
zGAoL+iypiSoH>_O&(?bNoEw!XzbpUfXKqxcd_XYFjmr8F5Dasps2^8RQPmaDJ3p!{
zOtqM!mAR_$U$Ot;0s764%KZ-z{pLqyEeweLZ+<jqVN~pYB;fnsf~fnwsM!Cc4E^4T
z%KcA@u>ZXqwfDcS6dLbGf3g2T0*65)_CG+V@_tnAe}JHTKWguPT`4eDMEU-AD*)J5
zIL4qlW`$!6ijx&lx&NUtm{vsLU3@0%?q+ybN7MGgxjo3adF<&Lt!>uos2UaPwj25O
zL+M)pFn?&93lPj7+P(z@^M~Zymto~@<bw_DrFq(4iZ(c1$hRA!n)vwu+MvsZD1JUb
z7fIb{p>AgWx3ve0Hb><-AB5<#IhrR*AV75497PF4pMP{Cw3W?#TkBoC)ft8SxHYPY
zD?GHJMp0yKT2$T0_B*0tQ31g0J8ZK9qUR3V?11RG<EGiWk=gf1vjc!=k8O59{!qps
zAei>pW(Ne*9y0r{VfOBZ_tR+F$b6SMkj&naWu`nCY|VVFYu2YxH70D|ooxSwusxfz
zK=T%TVb2hc!2X48dO)y$L8dRn47-!X_OnkHXl;x3J6*{1`|V|gHt4dSmepOn3rv5I
zwRuOoyZE5fg@_K?-s;Xxe~`SjmoCe?lkFQ*@4lmbqEs~6c7POiXtcu*5FCwBSw;g=
zrzp0sZ)q)dCuf{Xr50+>xO$#*IOwe6oWnt0ITw`|f9L~_b5U$dd_8xESG<>_$~9Wg
zC9W!9^oBsJYC!b9Y_DoS^uBDbYCx>&%h8-`a#fRnuj(sN_m6T_OBwq8V6SQ^!m7S{
zb5(bzocps&gjPo&f_7*DLXDs8&;kVA&o@J>JJlN_7W`(h=BgZ#FY_9Nn8}EI8B>6u
z7?CfRG9V~M<Rhj|(AHaSc*o?Y&1SQgXy0Uw$yY5AM&%Sn)%iR<v*Kk4qw0KV8ax7F
zb-v8bfFP{SM;K8|l#};gXM>k%cbC6zs{|obdfiqDkQ(J1B5eVJ;q`n}9&~kBP78Vp
z`)(Po4yQN_WTq+k^7qzg1BNO21>zzT5DZiD<wt_$gc!?OtOd&Oe{^K|GDQNSBg>a5
z5|Ena+bOb~B5PJYPm!#Ch32iC<!C_RHOrX;h1V?Gtmp`$S!CALtzgy)!~1c5+R0SQ
zm0C*A`Z(V%X)4IB^}?<l0YF)A8x|0h^|oOFL0M0R{fK`5RzXvKFST%^_HoOy_X^~M
zASH2uzmUJ#0;1D<1^6)&|B9*t#`G>LP*MeMa|PS;iuO+Gfqk0KRRx)dbhH4$vI4n(
z0fJyzf!x0U5$Veca#96i{~`g8^yLNaRRv=Ik}~vLQ6Tp(DMF;LETH{sPBxzb_Rxa`
z%GU+%)an0dGqu40;xMOzCxC+mGH3yz)WHH7w16N#Sb(yht|9=T)WL%2*HDT+HYWj;
zf}_7GkauSl<jEriB4GpI*%8NP<hvsUG6?V#>_-ahAgG{(-B7@Tpf3Q38XP?-O*A-q
zQkrOR^rSS=P=F}-FD<T0!~1PP+Hm%#<Jz~G-xk=PJXcZ>oMX>@qtz6jv;6=esLmD0
zWd#VTa|Q4||0!%GdFc}CaY8##e97rU&c9Tk@sGvaXoEhN3UYn=Yg9{C(n`9@ZfVe}
zi?0^Qk7^)9pQ{B;#IKJ4(dTLbJ`$sSu9DDC!fYJ@V78xZvjL*#Pqx_rd0X3Tm1OZ@
z3+_INWHc-${R$!MH7q9m3J8i}G3i%8Pz;N~UNs8r)dRmAj-}P4s!wTQSLUdg{hQGq
zWU%pUL!(yHX*_=Y!$TcHaE*^ig8_nTd<+I#Oq)axOw&6#ro0(*o3rK5nJfRR4Xc98
zCLrrgj>*VJ2M|n-$;bypkWG%|ycrXbPXZqKQ(|rw6Ok`v==VlUM!pmw@~6h^%B=@E
zVn$3<ZcR>Vt;!&QX(19R5D==&h{=cq1m%pFZQ33L--_{wybS<`e#^EnAT0crZDBw#
zy=7Y%kavZJ>E}f~af2628y$C<cUbJmS&xrBrK!!?x$m^%g4!68KmF02p7<W@-I((4
zm|OpVz6a|mzXu~3>vKk1ecO96_pSWoOgzHm7RKCtej&k_i%4SAEr}^BK=*f>4Xz;(
z>vLB7TmPm1r!O4>EQ`5&IBevW<uP}^n{2CN%384D)K)5o97i(dJ*RzE^+8O2tj3ii
z%dd&K|LD+>EkBI8AGt}lE~ab(9sbgkm@1N#6wxUtXCa%ekGaK{W<mnq4Ka5ohnEb!
zG3E|;y-8dbQ+9y(4>mD=%uXWq*Yn!bWm{wJN~bfu4{wXfzgxrypp~(mhUBlpJ!u8(
zj){8{0Jwa&9mjxBZ@0Y=0MT_fEd>7MMNbN?de(43o7BGE=|iz!ACs8_ZP2GahRi|V
z67?jjeHK#;vyk21pd~9rl7<-LLhi*BJ=6*upT%S*0R+cqF=Ub(^ci4JK=0|8awe7e
zz4o)`xA?D3LlJx0j##t<&1pMg0YP&*CUZR?mf`7G^bD3E<$4l`T>o7Rxqc*l3D%QR
z&-Ga9`5!fJdc}2TAWHk!WAau8tuWB_Sf*HWfEeg{3}pvpzMeF<p>e)pbOb=pp>er9
z0nu}4TrN*Q^c)(umuF8}%cB;!en#dS6~8%4dS4zDmzfW3Krt#VGan!*M#Zr%Ynx$V
z_A<Ql<7s<RJ#J`kdo$<9@nhTJbcWE2{Jto4(W8%a6)%d*%mpdP7R5FG@h&w2*`hf8
zRS(Mhy~r<1*!(7XZSfMP4|#k^T)rWr4f-sJqm&;j27=2|slTe&I!aS<@s%)`h$<D&
z5r3iv5S>zS_+|$mNX2c@+PLyD>!j=3Tda+%&Goyv0%*3LHO<iPZNEN_zga=y(u@0f
zeLN>&LuwRnQ^ddd?L{u!7<acdi&$2M-jcnYq35@UKx}Pz3`I7^TZtDsKy=<1$7enC
zU2ZS(-R8Kvz1c-{Zr)TcX%B(;><y36d2`$+u1*2bd2<|Br}RxhFY;bp+?_BxiO$2D
z>P1Bmh`-^6$LL%a&lY#LfaqKo$A^3L5pgf7z_+olo9aE<ZHv3b$M6uM%eHusQUOhz
zO73m(@=9qO902Z!yUSRM3_XYawwd0wJ)j86Ui_o@9dUn&>`JHbJL2s-@~@nG(YfF*
zbT!)vRgX5)<Lx1^JJV78E~hgc#qXld^yeyi(ee52xVzNsB|6{LT<=l>fw-i^V|3mf
z&lP`u2oRlj$BWzPh$F?_+wdNWr@fk5*<7zpHx9*dbxxm>_C|bqkHnQ@>={GvUWNaO
zmvqR%b|l_H_#O~!N8<QCg$g)8Eb1e1^H^M5HIabdz#NU^D`HyaQi7m78pqWc{Z$|-
zq7OBW#w&a17bygLQ-Gd|D+A1LTo#LE>t`MV5{U-S;M!Ahd9w@1+XloB4gjIksW^Uc
zKwbibUrxn4_2++ag&=?2`8ItR)f2rbC!R??-%@wGo;>3WL7{iXUgc<nA<o3*OD7;W
z&cyN3DTbi4-!t)0dpQKZV>uJIO7$D`Wm#{^n8Opwn1tIrqtorHmHMHT{;;PCLVHS-
zJBKG^RzVMpH#~83Jj$KJ6BtjJnR4gwL}*MxlrU&6N|+G|_vnNuVWbTGMkZtlBSk1-
zMkT0(Ig&x=%{hj*I+3=H9SrD)jp~Faz%M*<C_zm~C~f$KM*$!d0_N+~0|={4NZ{aQ
zB8&)(r&Cfnt#!i{oRU!Z=gA~Rt0@V5p4^K!0(yhp64d(y-$*EhWIMDW`@fOEiw&KS
z=a6BivIRlCEHpKt6w5aBgNLb!()RioH*bWTGB<TCh>z+k<|Y)r{Lz(PdL&BtyCXqR
z%}tc{C8ux*9p@(6_tEiJD1c$_w^;A6-aYu1qYPaQyhX|gg%M^oY(^Lg*Eq`1)j$m?
zgM|VfB#L?Lr?6fbnwL=cPxeTNHuDnr$sYa^1~o!_yq9`7qJQEFy_ZmU5+EsBy_aa;
zLH|rl3t3=!s(-%zfD&5n=tS28%Sk7CVL&e|_Y_+f(+|W`355qa3DGE(=+aHUCK};N
zY;8j6Xr6Xi_p`UUd2`w4as5yTGTWvZ=&?3Y+5yQ+arZI28xv`}*e3~nVD`oY-e~B2
zwGU;1%?YJ0!4BQ0cdi14MIaD)2@odTobZdEg#*Ikn-e(wrzizPlx|Ms*C9%&;vxZ0
z23ry`8Au5f*^-dSK#C|CY)K#)T*7qF6XWbmu*Rf*xpJqyW*~(RciL+PkhhYb69Ph;
zoe5kQ)lit{;#wt<*1%e~(cjA4lkfz2nCDWM?@h2H59;xJ05I&ey$A@+_L3Lrf+v@h
zsAvARdP%T8q3~owLbRz*AlY=}ZGdnC(^l^k{lwv+5dVaD@V<{O(Cbt9CK6!1?#0gx
zKW(dLhaeD9fyZe5DMiI-d_;ui2=-$scM-i0A4@1Ax*<iYV+ov$&?*81>9IuFZ9Lcs
zLfK=9PPfv{Js!hQ$Ju~Vy(oCxUM~=W;yA6BXL%dA_8ay_ss4QEn}pI?@=~yWljzo6
zpF(k!OVNIU<+s<ThE6!TP_&;QT^>Xz^)<YW30(RdXs<s|(3rq4Tj*_}FJ3;*CX|Z_
zxBfHz#m~O-<%49Y`#R|Vbag(LaQEhcBA$Wse8T<wFC>`ag#_L{XoK!cp?Nu>{E%R!
z59?)Bz|bE8@uN#X7~pauPwei1=zKYWFS95#0TG&)6Y(EpXp(@3<`p|Mr36Y`u|rde
zC^WB7X!7^>zK9C%^+dXIBf-{}>0dl`-40JYfkxL8^7pTR(CB(1!q*>Epzyp-X+&s5
zZ>8509d1A)+9&ZG8W|Y>=Y+eR{w5te^fSC8l4-9eUFNIU6F=GE$zfTY^}lD1NaFAN
zyiS{0KMLnpQ#0|?BG=uoCS_R(DTaPEDgR~^AclT5iGrSXFF<6cSCd8sADAHOaNZ)j
zT>p=tMgNJZ8(s8=T~!kuTAI<sq&&ax$7eJ#i4$Q#OZ)D`WcHohgLq1`Bxx!Ba-@`C
zh7*$=?6G+xj6E^g<97WDJ_Gjn4DXC&+7e9qRJzso=@(P~>4wWiV@6VbGwGu#&rB*w
zaWfAHrGWVzng<XA%uM1A4Ik_R;^Ax-s?Z+`%}&Zx2qD_cPQn$h(q`tP<vK4ly+Y4$
zh30{oF9k?RoWv?#OiRH>%Xk5+tJIf<79<t^RR;;tXh9NRb?gz1uy_};DLwT1(88p`
zgAt8r?Ji6r80$nMtj@)3cu##>XmL^zUw!)c>Rg<}^?Xmb{uaZ#JejtdJ=II^k-a>L
zuZd_8+(L_BWl~8c`66Ivd+FXPU{U$uDQ3GenJcPSKxn)&iPLt9I6y?)%48&!6zQ1+
zd=0Eh%JeKHP<B;Pre`UlHLxm)HSicb<Ttz@CeyaSLw8wypJOle*6%kyOnUNpg7uSo
z)+UuQ?jCldx9$xBiY$hQAYYqA=D=TB_4vs<>sS;!bZ}i#>B8*}A=<1<;`WvHTR(YW
zJ^Nc9y)w8yDbo~$Buyes(Y3#yT(g1g>!ah^KdE$*Jmi`U$*$eVbZA5GC9G3ly+?3k
zQf6}q(Pm>3*_^(c@Kf5{#3uLEI|nx<m2$~LX>(JuM^C*EZ$mpGJJnb37v1c%p|rV~
z+WZmDyVdY+OQwAU1O1x)Z*SdXf9R**k-aU6J5%!Ft>ncWNoAMx;?MoyMPTtQJD$QS
zJCYIcdIgBd?MSw1%e@E)FYZVd?UG(30r%og+lx{Hg?8Frlp^xtPV(Y8+92`khx%mN
z5omc7*=6`GdZSUF^n|z<P4eO=aGO|UfY1q;zf*Vs!Tw3IxP)H$0P*lMw*6MUBK(=t
zhTQlWwQ0@U0DYcRy0N?Z>%Iu}020NF$-Vh`vP)Ol6che}4Z2Ma1;0qj($eG$?TaKz
z%Y04;Z|-9=Z_{JJeYVF<?#+GVar!F9Bya9#M{d*a4DPo*4j~lTPaYR)!J7xz?fo&<
z0Xw=({xQe_iY|-uU=RF~jp?sPf?wJ>1b<luJYP}{Dd268`wp@l{q=b8U{c|q2tom>
z_YNlUiJ)kMa_=kFYyjGP<;<O`y{~BQVa|hM?`wAN06qHX*GWZe_V~*sX!CUvKgkk0
zqt-iwK_V@z`18*_KWNBbo_`vD-#pIWEHEm4@`UI7*JT9J`A`zSE)xUb_i2Y&JqE}>
z>`b^R+8j=HE7zYu_}*rCk0;YkAut}WSk@^|OV;Lgy?^%cq?*U$_cn^(6G`Qyh~Fw;
zSP=s8Z6zQSIFW2EKH~?3KTl9%qcjAF06vjSoRk4f0v^B(b^uEWRBEsTSc)is8z_J;
z;xlDW!0>*bOdFHxeuw^oVtjAMZh&I<(#_ZfggU??b^$?riQ<xqvj9cnWu^|)+XOG$
zPJs|@E|XJG6{8K%6?V@+y_a>x-X0(%DQypXX%h)h4!WL9EgPuc?FwDD;{;+fyH0V^
zi?>4D{+wjtd-UF+pKbdGc;Nm_0r!gFLgWrl4ZBBAcZG%*$_**NLw9%~M#OP0jR>oc
zW^doCe;68FsC47m3POxGy0D@Ww|I)XKYmkFm^P99>puNXV_YE|NM(M1a^UzvWdi&9
zKE1LE{}Y~r9M%|LC_M*=IgKxro&$vE#up|g6p9Um1l)7gg>nOt5@=9eC^rx(BF|M9
z!gK4$b9sh$dSTj}LYMiz+e%HpU+<)}m|o~<&2vv4`ELe0{GeVOoMBHMLa@%D$<x}-
zBe%_DZ64C^49zT*l{AECGqVtt^f)q59(iaMV-M-$gR`7QTuO}w^EQ~`Y}Wf%`V*nq
zg>ud0ai`5L#9x_s6h<6icxwvNu=W2+f5fOM#IJBDiw__pzFnxyXYC%=%OAl1#5bvs
zL$|jJ<zKo6#0YN};xj-Be?S=V?ZVi6X+#omBi7nRloIG(%Qii%XS-`*H+Ii`o-Y3n
D5xYxG

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 05de8cb4..4b73b207 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -5914,8 +5914,14 @@ type PushResourcesRequest struct {
 	// code invalid_argument like any other malformed request; it carries no
 	// catalog_rejection, because no entry was examined.
 	Entries []*ResourceEntry `protobuf:"bytes,3,rep,name=entries,proto3" json:"entries,omitempty"`
-	// Identity of the caller (who is pushing this data).
-	// The Exchange verifies this matches a registered CatalogService client.
+	// DEPRECATED, never needed, and ignored. Each entry's domain names whose
+	// resource it is, and the caller is the party that signs the request: the
+	// Exchange checks that the verified signer may push for each entry's domain
+	// (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it
+	// empty. The field is retained because removing it would break the v1 wire
+	// contract.
+	//
+	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 	CallerId string `protobuf:"bytes,4,opt,name=caller_id,json=callerId,proto3" json:"caller_id,omitempty"`
 	// REQUIRED. Bare host of the recipient this request is addressed to (e.g.
 	// "exchange.example" or "exchange.example:8081"). See "Request recipient" in
@@ -5984,6 +5990,7 @@ func (x *PushResourcesRequest) GetEntries() []*ResourceEntry {
 	return nil
 }
 
+// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 func (x *PushResourcesRequest) GetCallerId() string {
 	if x != nil {
 		return x.CallerId
@@ -11174,12 +11181,12 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\bcurrency\x18\x02 \x01(\tR\bcurrency\x12B\n" +
 	"\tunit_cost\x18\x03 \x01(\tB \xbaH\x1dr\x1b\x18 2\x17^([0-9]+([.][0-9]+)?)?$H\x00R\bunitCost\x88\x01\x01B\f\n" +
 	"\n" +
-	"_unit_cost\"\xc9\x03\n" +
+	"_unit_cost\"\xcd\x03\n" +
 	"\x14PushResourcesRequest\x12\x10\n" +
 	"\x03ver\x18\x01 \x01(\tR\x03ver\x12\x1b\n" +
 	"\ttenant_id\x18\x02 \x01(\tR\btenantId\x12=\n" +
-	"\aentries\x18\x03 \x03(\v2\x16.fora.v1.ResourceEntryB\v\xbaH\b\x92\x01\x05\b\x01\x10\x80\x02R\aentries\x12\x1b\n" +
-	"\tcaller_id\x18\x04 \x01(\tR\bcallerId\x12\xd7\x01\n" +
+	"\aentries\x18\x03 \x03(\v2\x16.fora.v1.ResourceEntryB\v\xbaH\b\x92\x01\x05\b\x01\x10\x80\x02R\aentries\x12\x1f\n" +
+	"\tcaller_id\x18\x04 \x01(\tB\x02\x18\x01R\bcallerId\x12\xd7\x01\n" +
 	"\bexchange\x18\x05 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
 	"\fext_critical\x18Z \x03(\tR\vextCritical\"\xe6\n" +
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 980fc5e8..a5905471 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -538,7 +538,7 @@
   "properties": {
     "caller_id": {
       "default": "",
-      "description": "Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.",
+      "description": "DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.",
       "type": "string"
     },
     "entries": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 52be4526..d5696dee 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -547,7 +547,7 @@
   "properties": {
     "caller_id": {
       "default": "",
-      "description": "Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.",
+      "description": "DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.",
       "type": "string"
     },
     "entries": {
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 9a8c5431..4b32c690 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -2155,7 +2155,7 @@ class DiscoveryResponse(WireModel):
 class PushResourcesRequest(WireModel):
     caller_id: str | None = Field(
         '',
-        description='Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.',
+        description="DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.",
     )
     entries: list[ResourceEntry] | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 6f563342..91b754a2 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("Identity of the caller (who is pushing this data).\n The Exchange verifies this matches a registered CatalogService client.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index df24b953..cb7f9f07 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+**`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
+each entry's domain names whose resource it is, and the caller is the party that signs
+the request; the Exchange checks that the verified signer may push for each entry's
+domain. A sender leaves it empty and the Exchange ignores it; the field is retained for
+the v1 wire contract. The SDK docs, test fixtures and the catalog pages (reference,
+multi-tenant, request flows, content sources, verification vendors, publisher onboarding,
+deployment models, threat model) no longer set or rely on it.
+
 **Docs: CoMP keys, self-push and custodied signing (docs only).** The licensing-terms page
 no longer cites a CoMP `revshare` key: canonical CoMP V1 has none, and `fora-comp-v1`
 keys are flat dotted keys in `ext` like every other profile's, as the CoMP page says. Its
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 731d7ec8..9c51cba5 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2997,9 +2997,13 @@ message PushResourcesRequest {
     (buf.validate.field).repeated.max_items = 256
   ];
 
-  // Identity of the caller (who is pushing this data).
-  // The Exchange verifies this matches a registered CatalogService client.
-  string caller_id = 4;
+  // DEPRECATED, never needed, and ignored. Each entry's domain names whose
+  // resource it is, and the caller is the party that signs the request: the
+  // Exchange checks that the verified signer may push for each entry's domain
+  // (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it
+  // empty. The field is retained because removing it would break the v1 wire
+  // contract.
+  string caller_id = 4 [deprecated = true];
 
   // REQUIRED. Bare host of the recipient this request is addressed to (e.g.
   // "exchange.example" or "exchange.example:8081"). See "Request recipient" in
diff --git a/sdk/go/connect/beforesign_test.go b/sdk/go/connect/beforesign_test.go
index 855e779c..94af4e87 100644
--- a/sdk/go/connect/beforesign_test.go
+++ b/sdk/go/connect/beforesign_test.go
@@ -51,7 +51,7 @@ func (c *strictCatalog) PushResources(
 
 func validPush() *forav1.PushResourcesRequest {
 	return &forav1.PushResourcesRequest{
-		Exchange: "exchange.test", TenantId: "tenant-1", CallerId: "publisher.test",
+		Exchange: "exchange.test", TenantId: "tenant-1",
 		Entries: []*forav1.ResourceEntry{catalogEntry()},
 	}
 }
diff --git a/sdk/go/connect/catalog.go b/sdk/go/connect/catalog.go
index e246b9fe..686d7fd6 100644
--- a/sdk/go/connect/catalog.go
+++ b/sdk/go/connect/catalog.go
@@ -21,8 +21,8 @@ import (
 // reason: the address is a different one. An Exchange advertises CatalogService
 // at WellKnownManifest.catalog_endpoint, distinct from the ExchangeService
 // endpoint the agent client dials, and the caller is a different party holding
-// a different key — a contributor's, published in its own WBA directory and
-// named by caller_id, never an agent's. Hanging the catalog verbs on the agent
+// a different key — a publisher's or a contributor's, published in its own WBA
+// directory and identified by the request signature, never an agent's. Hanging the catalog verbs on the agent
 // client would carry every agent-only holder (the offer Verifier, the
 // requester, the delivery fetcher) into a client that uses none of them, and
 // point one of the two roles at the wrong address.
@@ -52,7 +52,7 @@ type CatalogClient struct {
 // The options a catalog call has no use for are inert rather than errors, so one
 // option set can build every face: WithOfferKey, WithKeyResolver and
 // WithVerification (offer verification — nothing here returns an offer),
-// WithRequester (the caller is named by caller_id, not a Requester), WithAgentKey,
+// WithRequester (the caller is the request's signer, not a Requester), WithAgentKey,
 // WithProofWindow, WithContentTimeout and WithMaxContentBytes (the delivery
 // fetch), and WithEndpointResolver and WithGuardedBaseTransport (the
 // offer-derived leg).
diff --git a/sdk/go/connect/catalog_test.go b/sdk/go/connect/catalog_test.go
index b34c2157..5a671150 100644
--- a/sdk/go/connect/catalog_test.go
+++ b/sdk/go/connect/catalog_test.go
@@ -116,7 +116,7 @@ func TestCatalog_PushIsSignedStampedAndAnswered(t *testing.T) {
 	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
 
 	req := &forav1.PushResourcesRequest{
-		Exchange: "exchange.test", TenantId: "tenant-1", CallerId: "publisher.test",
+		Exchange: "exchange.test", TenantId: "tenant-1",
 		Entries: []*forav1.ResourceEntry{catalogEntry()},
 	}
 	resp, err := client.PushResources(context.Background(), req)
@@ -129,8 +129,8 @@ func TestCatalog_PushIsSignedStampedAndAnswered(t *testing.T) {
 	if origin.push.GetVer() != helpers.ProtocolVersion {
 		t.Errorf("ver on the wire = %q, want %q", origin.push.GetVer(), helpers.ProtocolVersion)
 	}
-	if origin.push.GetExchange() != "exchange.test" || origin.push.GetCallerId() != "publisher.test" {
-		t.Errorf("addressing on the wire = %q/%q, want the caller's own", origin.push.GetExchange(), origin.push.GetCallerId())
+	if origin.push.GetExchange() != "exchange.test" {
+		t.Errorf("addressing on the wire = %q, want the caller's own", origin.push.GetExchange())
 	}
 	if req.GetVer() != "" {
 		t.Error("the caller's request was modified; the client must stamp a clone")
@@ -283,7 +283,7 @@ func TestCatalog_RefusalRedactsACredentialInTheRecipient(t *testing.T) {
 	client := foraconnect.NewCatalogClient("https://exchange.test")
 
 	_, err := client.PushResources(context.Background(), &forav1.PushResourcesRequest{
-		Exchange: "publisher:s3cr3t@exchange.test", TenantId: "t", CallerId: "c",
+		Exchange: "publisher:s3cr3t@exchange.test", TenantId: "t",
 		Entries: []*forav1.ResourceEntry{{Domain: "publisher.test", Path: "/x"}},
 	})
 	if err == nil {
diff --git a/sdk/go/connect/gen_client_request_vectors_test.go b/sdk/go/connect/gen_client_request_vectors_test.go
index b80b7f91..e397923c 100644
--- a/sdk/go/connect/gen_client_request_vectors_test.go
+++ b/sdk/go/connect/gen_client_request_vectors_test.go
@@ -226,7 +226,7 @@ func buildClientRequestVectors(t *testing.T) []clientRequestVector {
 // separately from the ExchangeService endpoint — and its caller is a different
 // party with a different key. They carry no idempotency key by design (the catalog
 // upsert and delete are naturally idempotent, so a key there would be ceremony)
-// and forward no requester (the caller is named by caller_id), so both columns
+// and forward no requester (the caller is the request's signer), so both columns
 // record empty: a client that minted a key or stamped the requester it was built
 // with would move them.
 func catalogVectors(t *testing.T, baseOpts []foraconnect.ClientOption) []clientRequestVector {
@@ -254,7 +254,7 @@ func catalogVectors(t *testing.T, baseOpts []foraconnect.ClientOption) []clientR
 	}}}
 	capture("push_resources", "pushResources", func(c *foraconnect.CatalogClient, exchange string) error {
 		_, err := c.PushResources(context.Background(), &forav1.PushResourcesRequest{
-			Exchange: exchange, TenantId: "tenant-1", CallerId: "publisher.test",
+			Exchange: exchange, TenantId: "tenant-1",
 			Entries: []*forav1.ResourceEntry{entry},
 		})
 		return err
@@ -265,7 +265,7 @@ func catalogVectors(t *testing.T, baseOpts []foraconnect.ClientOption) []clientR
 	// deliberately — stayed green here while Go's own tests caught it.
 	capture("push_resources_caller_ver_wins", "pushResources", func(c *foraconnect.CatalogClient, exchange string) error {
 		_, err := c.PushResources(context.Background(), &forav1.PushResourcesRequest{
-			Exchange: exchange, TenantId: "tenant-1", CallerId: "publisher.test", Ver: "9.9",
+			Exchange: exchange, TenantId: "tenant-1", Ver: "9.9",
 			Entries: []*forav1.ResourceEntry{entry},
 		})
 		return err
diff --git a/sdk/go/connectserver/catalog_handler_test.go b/sdk/go/connectserver/catalog_handler_test.go
index 4102d44d..a318bc7e 100644
--- a/sdk/go/connectserver/catalog_handler_test.go
+++ b/sdk/go/connectserver/catalog_handler_test.go
@@ -68,7 +68,7 @@ func mountCatalog(t *testing.T, origin forav1connect.CatalogServiceHandler, opts
 
 func validPush() *forav1.PushResourcesRequest {
 	return &forav1.PushResourcesRequest{
-		Exchange: "exchange.test", TenantId: "tenant-1", CallerId: "publisher.test",
+		Exchange: "exchange.test", TenantId: "tenant-1",
 		Entries: []*forav1.ResourceEntry{{Domain: "publisher.test", Path: "/x", Terms: []*forav1.LicenseTerm{{
 			Semantics: forav1.TermSemantics_TERM_SEMANTICS_ENUMERATED,
 			Pricing:   &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"},
diff --git a/sdk/go/connectserver/handler.go b/sdk/go/connectserver/handler.go
index 3bc547dc..141fe8b6 100644
--- a/sdk/go/connectserver/handler.go
+++ b/sdk/go/connectserver/handler.go
@@ -62,10 +62,11 @@ func NewBrokerServiceHandler(svc forav1connect.BrokerServiceHandler, opts ...Ser
 // rejection reason assumes.
 //
 // What stays the handler implementation's job is everything the contract leaves to
-// the Exchange: that caller_id names the verified signer, that the caller is among
-// the publisher's catalog_contributors, that tenant_id matches, the ingest-tier term
-// checks (sdk/go/helpers), and the per-entry verdicts. An Exchange that resolves a
-// contributor's key by caller_id narrows the seam with WithVerifyGate and verifies
+// the Exchange: that the verified signer may push for each entry's domain (the
+// domain's publisher, or one of its catalog_contributors), that tenant_id matches,
+// the ingest-tier term checks (sdk/go/helpers), and the per-entry verdicts. The
+// deprecated caller_id is ignored. An Exchange that resolves a contributor's key
+// from the request narrows the seam with WithVerifyGate and verifies
 // inside the handler, where the decoded request is in scope — WithKeyResolver cannot
 // carry that policy, because KeyResolver.Resolve is handed the signature's keyid and
 // never the message.
diff --git a/sdk/go/connectserver/read_cap_test.go b/sdk/go/connectserver/read_cap_test.go
index b0eeb56f..6914ff7c 100644
--- a/sdk/go/connectserver/read_cap_test.go
+++ b/sdk/go/connectserver/read_cap_test.go
@@ -53,7 +53,7 @@ func postRaw(t *testing.T, url string, body []byte) *http.Response {
 // oversizeJSON builds a syntactically valid PushResources body of at least n bytes.
 func oversizeJSON(n int) []byte {
 	return fmt.Appendf(nil,
-		`{"ver":"1.0","exchange":"exchange.test","tenant_id":"t","caller_id":"c","entries":[{"domain":"publisher.test","path":"/%s"}]}`,
+		`{"ver":"1.0","exchange":"exchange.test","tenant_id":"t","entries":[{"domain":"publisher.test","path":"/%s"}]}`,
 		strings.Repeat("a", n))
 }
 
@@ -142,7 +142,7 @@ func gzipCatalogClient(
 func inflatingPush() *forav1.PushResourcesRequest {
 	req := &forav1.PushResourcesRequest{
 		Ver: helpers.ProtocolVersion, Exchange: "exchange.test",
-		TenantId: "tenant-1", CallerId: "publisher.test",
+		TenantId: "tenant-1",
 	}
 	for i := 0; i < 256; i++ {
 		req.Entries = append(req.Entries, &forav1.ResourceEntry{
diff --git a/sdk/python/fora_sdk/client/__init__.py b/sdk/python/fora_sdk/client/__init__.py
index 0887ddcb..63a00040 100644
--- a/sdk/python/fora_sdk/client/__init__.py
+++ b/sdk/python/fora_sdk/client/__init__.py
@@ -438,8 +438,8 @@ class CatalogClient(_Face):
     A SEPARATE class, as the Broker's is, and for a related reason: the address is a
     different one. An Exchange advertises CatalogService at its manifest's
     ``catalog_endpoint``, distinct from the ExchangeService endpoint the agent client
-    dials, and the caller is a different party holding a different key — a contributor's,
-    named by ``caller_id``, never an agent's. The publisher chose the Exchange, so the
+    dials, and the caller is a different party holding a different key — a publisher's or
+    a contributor's, identified by the request signature, never an agent's. The publisher chose the Exchange, so the
     origin is configuration and every call runs on the plain transport — the posture of
     the agent client's home Exchange, not of its offer-derived leg.
 
diff --git a/sdk/python/tests/test_before_sign.py b/sdk/python/tests/test_before_sign.py
index 11ff03ac..22747c03 100644
--- a/sdk/python/tests/test_before_sign.py
+++ b/sdk/python/tests/test_before_sign.py
@@ -65,7 +65,6 @@ def _push() -> dict[str, Any]:
     return {
         "exchange": "exchange.test",
         "tenant_id": "tenant-1",
-        "caller_id": "publisher.test",
         "entries": [
             {
                 "domain": "publisher.test",
diff --git a/sdk/python/tests/test_catalog_recipient_redaction.py b/sdk/python/tests/test_catalog_recipient_redaction.py
index 5854b620..906e274f 100644
--- a/sdk/python/tests/test_catalog_recipient_redaction.py
+++ b/sdk/python/tests/test_catalog_recipient_redaction.py
@@ -45,7 +45,6 @@ def _push(exchange: str) -> None:
             {
                 "exchange": exchange,
                 "tenant_id": "t",
-                "caller_id": "c",
                 "entries": [{"domain": "publisher.test", "path": "/x"}],
             }
         )
diff --git a/sdk/python/tests/test_client_request_parity.py b/sdk/python/tests/test_client_request_parity.py
index 28a8a957..b76d5a8f 100644
--- a/sdk/python/tests/test_client_request_parity.py
+++ b/sdk/python/tests/test_client_request_parity.py
@@ -153,7 +153,6 @@ def _call(name: str) -> httpx.Request:
         push: dict[str, Any] = {
             "exchange": "exchange.test",
             "tenant_id": "tenant-1",
-            "caller_id": "publisher.test",
             "entries": [
                 {
                     "domain": "publisher.test",
diff --git a/sdk/python/tests/test_typed_inputs.py b/sdk/python/tests/test_typed_inputs.py
index 241a492c..84810be4 100644
--- a/sdk/python/tests/test_typed_inputs.py
+++ b/sdk/python/tests/test_typed_inputs.py
@@ -85,8 +85,7 @@ class _Case:
     _Case("get_account_status", "Client", GetAccountStatusRequest,
           {"exchange": "exchange.test"}),
     _Case("push_resources", "CatalogClient", PushResourcesRequest,
-          {"caller_id": "publisher.test",
-           "entries": [{"domain": "publisher.test", "path": "/x",
+          {"entries": [{"domain": "publisher.test", "path": "/x",
                         "terms": [{"pricing": {"model": "PRICING_MODEL_FREE", "rate": "0"},
                                    "semantics": "TERM_SEMANTICS_ENUMERATED"}]}],
            "exchange": "exchange.test", "tenant_id": "tenant-1"}),
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index b438ff74..b039a45c 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -1135,8 +1135,8 @@ export interface CatalogClient {
  * A SEPARATE constructor, as the Broker's is, and for a related reason: the address is a
  * different one. An Exchange advertises CatalogService at its manifest's
  * `catalog_endpoint`, distinct from the ExchangeService endpoint the agent client dials,
- * and the caller is a different party holding a different key — a contributor's, named
- * by `caller_id`, never an agent's. Hanging the catalog verbs on the agent client would
+ * and the caller is a different party holding a different key — a publisher's or a
+ * contributor's, identified by the request signature, never an agent's. Hanging the catalog verbs on the agent client would
  * carry every agent-only holder into a client that uses none of them, and point one of
  * the two roles at the wrong address.
  *
diff --git a/sdk/ts/tests/before-sign.test.ts b/sdk/ts/tests/before-sign.test.ts
index 93009c2d..fb0257fe 100644
--- a/sdk/ts/tests/before-sign.test.ts
+++ b/sdk/ts/tests/before-sign.test.ts
@@ -29,7 +29,6 @@ function push(): Record<string, unknown> {
 	return {
 		exchange: "exchange.test",
 		tenant_id: "tenant-1",
-		caller_id: "publisher.test",
 		entries: [
 			{
 				domain: "publisher.test",
diff --git a/sdk/ts/tests/catalog-recipient-redaction.test.ts b/sdk/ts/tests/catalog-recipient-redaction.test.ts
index 021c2b38..c6a7b9d1 100644
--- a/sdk/ts/tests/catalog-recipient-redaction.test.ts
+++ b/sdk/ts/tests/catalog-recipient-redaction.test.ts
@@ -27,7 +27,6 @@ function push(exchange: string): Promise<unknown> {
 	return client.pushResources({
 		exchange,
 		tenant_id: "t",
-		caller_id: "c",
 		entries: [{ domain: "publisher.test", path: "/x" }],
 	});
 }
diff --git a/sdk/ts/tests/client-request.parity.test.ts b/sdk/ts/tests/client-request.parity.test.ts
index fc61ba8c..9f056f89 100644
--- a/sdk/ts/tests/client-request.parity.test.ts
+++ b/sdk/ts/tests/client-request.parity.test.ts
@@ -155,7 +155,6 @@ async function call(name: string): Promise<UnaryRequest> {
 		const push: Record<string, unknown> = {
 			exchange: "exchange.test",
 			tenant_id: "tenant-1",
-			caller_id: "publisher.test",
 			entries: [
 				{
 					domain: "publisher.test",
diff --git a/website/src/content/docs/architecture/deployment-models.mdx b/website/src/content/docs/architecture/deployment-models.mdx
index cfa8b9a9..f04e013c 100644
--- a/website/src/content/docs/architecture/deployment-models.mdx
+++ b/website/src/content/docs/architecture/deployment-models.mdx
@@ -136,7 +136,7 @@ Content published in WordPress
   -> Extract: title, word count, URL path, categories
   -> Compute: estimated_quantity = word_count * 1.32
   -> Pre-check each entry with helpers.ValidateResourceEntry (advisory; the Exchange re-runs it)
-  -> Build PushResourcesRequest (caller_id) with the SDK's catalog client, which stamps ver, refuses a non-bare-domain exchange, and signs it (RFC 9421)
+  -> Build PushResourcesRequest with the SDK's catalog client, which stamps ver, refuses a non-bare-domain exchange, and signs it (RFC 9421)
   -> POST to Exchange CatalogService.PushResources
   -> Exchange adds/updates catalog entry
 ```
diff --git a/website/src/content/docs/components/content-ingestion/sources.mdx b/website/src/content/docs/components/content-ingestion/sources.mdx
index 12a7492a..5c30fddb 100644
--- a/website/src/content/docs/components/content-ingestion/sources.mdx
+++ b/website/src/content/docs/components/content-ingestion/sources.mdx
@@ -252,13 +252,13 @@ CatalogService is NOT how Exchange operators push their own inventory. Exchange
 
 ### Authentication and Authorization
 
-`PushResources` requests must be signed. The `caller_id` field (field 4) identifies the registered CatalogService client, and the request itself is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field.
+`PushResources` requests must be signed. The request's signer is the caller; the deprecated `caller_id` field (field 4) is ignored. The request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field.
 
-The Exchange verifies the RFC 9421 signature against the caller's published Ed25519 key in its WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and confirms that `caller_id` is authorized to push content for the specified `tenant_id`.
+The Exchange verifies the RFC 9421 signature against the caller's published Ed25519 key in its WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and confirms that the signer is authorized to push content for each entry's domain and the specified `tenant_id`.
 
 ### Pushing with the Publisher SDK
 
-The SDK carries the publisher role in all three languages: a catalog client that signs and sends the three CatalogService verbs, and the Exchange's own two validation tiers as a pre-check. The client is a separate constructor from the agent client because CatalogService is a separate address (the manifest's `catalog_endpoint`) and its caller holds a contributor key named by `caller_id`; the publisher chose the Exchange, so the origin is configuration.
+The SDK carries the publisher role in all three languages: a catalog client that signs and sends the three CatalogService verbs, and the Exchange's own two validation tiers as a pre-check. The client is a separate constructor from the agent client because CatalogService is a separate address (the manifest's `catalog_endpoint`) and its caller holds a publisher's or contributor's key, identified by the request signature; the publisher chose the Exchange, so the origin is configuration.
 
 ```go
 client := connect.NewCatalogClient(catalogEndpoint, connect.WithSigner(contributorSigner))
@@ -266,7 +266,7 @@ if v := helpers.ValidateResourceEntry(entry); !v.OK() {   // what the Exchange w
     return fmt.Errorf("entry refused: %+v", v.Violations)
 }
 resp, err := client.PushResources(ctx, &forav1.PushResourcesRequest{
-    Exchange: "exchange.example", TenantId: tenantID, CallerId: "publisher.example",
+    Exchange: "exchange.example", TenantId: tenantID,
     Entries:  []*forav1.ResourceEntry{entry},
 })
 ```
@@ -279,7 +279,7 @@ const client = createCatalogClient(catalogEndpoint, { signer: contributorSigner
 const verdict = validateResourceEntry(entry);
 if (!verdict.ok) throw new Error(JSON.stringify(verdict.violations));
 const resp = await client.pushResources({
-  exchange: "exchange.example", tenant_id: tenantId, caller_id: "publisher.example",
+  exchange: "exchange.example", tenant_id: tenantId,
   entries: [entry],
 });
 ```
@@ -293,7 +293,7 @@ if not verdict.ok:
     raise ValueError(verdict.violations)
 async with CatalogClient(ClientConfig(base_url=catalog_endpoint, signer=contributor_signer)) as client:
     resp = await client.push_resources({
-        "exchange": "exchange.example", "tenant_id": tenant_id, "caller_id": "publisher.example",
+        "exchange": "exchange.example", "tenant_id": tenant_id,
         "entries": [entry],
     })
 ```
diff --git a/website/src/content/docs/components/exchange/multi-tenant.mdx b/website/src/content/docs/components/exchange/multi-tenant.mdx
index f38d7c8a..bedc8393 100644
--- a/website/src/content/docs/components/exchange/multi-tenant.mdx
+++ b/website/src/content/docs/components/exchange/multi-tenant.mdx
@@ -227,15 +227,11 @@ Since the default offer signature algorithm is Ed25519, these are **public keys*
 
 The Exchange exposes `CatalogService` (PushResources, RemoveResources, RefreshCatalog) for external parties to push resource metadata. Every CatalogService request is authenticated:
 
-1. **Verify the RFC 9421 HTTP Message Signature**: The `caller_id` field identifies the pusher, and the request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field. The Exchange verifies it against the caller's published Ed25519 key in the caller's WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Invalid signatures are rejected with `CodeUnauthenticated` and an `ErrorDetail.request_auth_failure` reason: `SIGNATURE_MISSING`, `SIGNATURE_INVALID` or `SIGNATURE_STALE`.
+1. **Verify the RFC 9421 HTTP Message Signature**: The request's signer is the pusher. The request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field. The Exchange verifies it against the caller's published Ed25519 key in the caller's WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Invalid signatures are rejected with `CodeUnauthenticated` and an `ErrorDetail.request_auth_failure` reason: `SIGNATURE_MISSING`, `SIGNATURE_INVALID` or `SIGNATURE_STALE`.
 
-2. **Check `caller_id` authorization**: The Exchange verifies that `caller_id` is registered and authorized to push resources for the specified `tenant_id`. Unauthorized tenant access is rejected with `CodePermissionDenied`.
+2. **Check the signer's authorization**: For each entry, the Exchange resolves `/.well-known/fora.json` from the entry's domain and verifies that the signer is that domain's publisher or one of its `catalog_contributors`. Unauthorized tenant access is rejected with `CodePermissionDenied`. The deprecated `caller_id` field is ignored: the caller is whoever signs.
 
-3. **Caller registration**: CatalogService callers are registered out-of-band (admin API or configuration). Registration includes:
-   - `caller_id` — unique identifier for the caller
-   - Caller domain — where the Ed25519 signing key is published (the WBA directory at `{domain}/.well-known/http-message-signatures-directory`)
-   - Authorized `tenant_id` set — which providers this caller can push for
-   - Caller type — "cms_plugin", "intelligence_provider", "syndicator"
+3. **Caller registration**: CatalogService callers may also be registered out-of-band (admin API or configuration), for example with the domain where the Ed25519 signing key is published (the WBA directory at `{domain}/.well-known/http-message-signatures-directory`), the authorized `tenant_id` set, and a caller type ("cms_plugin", "intelligence_provider", "syndicator").
 
 This prevents unauthorized parties from injecting or modifying catalog entries. The same authentication mechanism applies to RemoveResources and RefreshCatalog calls. RemoveResources names each resource by domain and path, as a push does, and the Exchange checks that the signer is authorized for each item's domain exactly as for a push.
 
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 84bf5950..db8f5d87 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -825,12 +825,12 @@ sequenceDiagram
     Note over Handler: 1. Verify caller's RFC 9421 HTTP Message Signature (headers)
 
     loop For each ResourceEntry with attestations
-        Handler->>Handler: Is caller_id == attestation.verifier?
+        Handler->>Handler: Is the signer == attestation.verifier?
 
         alt Direct push (provider or vendor pushing own attestation)
             Note over Handler: Authorized directly
         else Third-party push
-            Handler->>Manifest: Is caller_id in catalog_contributors?
+            Handler->>Manifest: Is the signer in catalog_contributors?
             Manifest-->>Handler: Yes / No
             Note over Handler: Record which entry failed — the submission is refused whole
         end
diff --git a/website/src/content/docs/getting-started/for-verification-vendors.mdx b/website/src/content/docs/getting-started/for-verification-vendors.mdx
index d33ba726..bcd9ab30 100644
--- a/website/src/content/docs/getting-started/for-verification-vendors.mdx
+++ b/website/src/content/docs/getting-started/for-verification-vendors.mdx
@@ -138,14 +138,13 @@ You push signed `ResourceAttestation` entries to Exchanges via the **CatalogServ
         }
       ]
     }
-  ],
-  "caller_id": "gumgum.com"
+  ]
 }
 ```
 
 `exchange` is REQUIRED and names the bare host of the Exchange this push is addressed to. The SDK's catalog client refuses a request without it **before signing**, so omitting it fails locally rather than at the Exchange.
 
-The request itself is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) in the HTTP headers (not an in-message field); `caller_id` identifies the pusher.
+The request itself is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) in the HTTP headers (not an in-message field); its signer is the pusher.
 
 You do not hand-roll that call. The SDK's catalog client — `connect.NewCatalogClient` (Go), `createCatalogClient` (TypeScript), `fora_sdk.client.CatalogClient` (Python) — builds, signs and sends it against the CatalogService address you have configured for that Exchange. The client itself does not inspect your entries; the Exchange's own envelope and term checks ship beside it as `validateResourceEntry` and its twins, which you call on each entry before the push. See [Source 7: CatalogService API Push](/components/content-ingestion/sources/#source-7-catalogservice-api-push) for the three-language example.
 
@@ -207,7 +206,7 @@ Your Analysis Pipeline (crawlers, APIs, audit tools, QA systems)
 
 Every `PushResources` request is signed with your Ed25519 private key. Each `ResourceAttestation` also carries its own Ed25519 signature over JCS-canonicalized claims. The Exchange verifies both:
 
-1. **Request-level**: The request carries `caller_id` and is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) in the HTTP headers (not an in-message field), proving the request came from your domain
+1. **Request-level**: The request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) in the HTTP headers (not an in-message field), proving the request came from your domain
 2. **Attestation-level**: The `signature` field on each `ResourceAttestation` proves the claims were signed by the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
 
 The Exchange fetches your public keys from your WBA directory (the JWK Set at `https://yourcompany.com/.well-known/http-message-signatures-directory`) — no shared secrets.
diff --git a/website/src/content/docs/getting-started/publisher-onboarding.mdx b/website/src/content/docs/getting-started/publisher-onboarding.mdx
index 3548aadf..01165a1a 100644
--- a/website/src/content/docs/getting-started/publisher-onboarding.mdx
+++ b/website/src/content/docs/getting-started/publisher-onboarding.mdx
@@ -169,7 +169,7 @@ Whatever your source material — a JSONL feed, a sitemap, an RSL file, a crawl,
 
 1. Build a `ResourceEntry` per resource: `domain` (your bare host), `path` (an absolute URL path), the metadata you have, and one or more `terms` — every term carries a `pricing` (`model: FREE` is stated, never implied).
 2. Pre-check it with `validate_resource_entry` (Python), `validateResourceEntry` (TypeScript) or `helpers.ValidateResourceEntry` (Go). The verdict lists every rule the Exchange would refuse the entry on, with its field path, and the warnings the accepted terms would carry — the exact strings that come back in `PushResourcesResponse.warnings`. Token spellings and aliases (`generative-ai` → `ai-input`, `de` → `DE`) are canonicalised for you — which is also why a term must stay disjoint **after** canonicalisation: `permitted: ["scrape"]` with `prohibited: ["crawl"]` names one token on both sides and is refused.
-3. Push with the catalog client — `fora_sdk.client.CatalogClient`, `createCatalogClient`, `connect.NewCatalogClient` — built against the CatalogService address you have configured for that Exchange, and your contributor signing key. The address is configuration, the way the agent client's home Exchange is: nobody but you named it, so the client dials only what you gave it. An Exchange MAY advertise the address as `catalog_endpoint` in its `/.well-known/fora.json`, and a deployment that reads it from there MUST itself check the binding that field states — same host and port as the manifest, or a subdomain of that host on that port, no userinfo — before dialling it; a manifest naming an unrelated host would otherwise redirect a signed push to a party the signature never covered. Set `exchange` to the Exchange's bare domain, `tenant_id` to your tenant and `caller_id` to your domain; the client stamps `ver`, signs the request with your key and refuses before signing a request whose `exchange` is not a bare domain — the shape the wire rule admits, which is narrower than a usable host.
+3. Push with the catalog client — `fora_sdk.client.CatalogClient`, `createCatalogClient`, `connect.NewCatalogClient` — built against the CatalogService address you have configured for that Exchange, and your contributor signing key. The address is configuration, the way the agent client's home Exchange is: nobody but you named it, so the client dials only what you gave it. An Exchange MAY advertise the address as `catalog_endpoint` in its `/.well-known/fora.json`, and a deployment that reads it from there MUST itself check the binding that field states — same host and port as the manifest, or a subdomain of that host on that port, no userinfo — before dialling it; a manifest naming an unrelated host would otherwise redirect a signed push to a party the signature never covered. Set `exchange` to the Exchange's bare domain and `tenant_id` to your tenant (the caller is whoever signs, so there is no caller field to set); the client stamps `ver`, signs the request with your key and refuses before signing a request whose `exchange` is not a bare domain — the shape the wire rule admits, which is narrower than a usable host.
 
 A push is all-or-nothing: an entry that fails a hard rule refuses the whole submission with the offending entry named, and nothing is persisted. Warnings never block. The pre-check is advice about what the Exchange will say; the Exchange re-runs both tiers on every push and its verdict decides. Worked examples in all three languages are in [Source 7: CatalogService API Push](/components/content-ingestion/sources/#source-7-catalogservice-api-push); the feed format is in [JSONL Ingestion Feed](/protocol/jsonl-ingestion/).
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index c6136951..9d975fb0 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,14 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
+each entry's domain names whose resource it is, and the caller is the party that signs
+the request; the Exchange checks that the verified signer may push for each entry's
+domain. A sender leaves it empty and the Exchange ignores it; the field is retained for
+the v1 wire contract. The SDK docs, test fixtures and the catalog pages (reference,
+multi-tenant, request flows, content sources, verification vendors, publisher onboarding,
+deployment models, threat model) no longer set or rely on it.
+
 **Docs: CoMP keys, self-push and custodied signing (docs only).** The licensing-terms page
 no longer cites a CoMP `revshare` key: canonical CoMP V1 has none, and `fora-comp-v1`
 keys are flat dotted keys in `ext` like every other profile's, as the CoMP page says. Its
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index b3d2725e..910b451c 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -431,7 +431,7 @@ Every pushed entry is checked in two tiers, and both are stated so a publisher c
 
 ### PushResourcesRequest
 
-Push or update content entries in the Exchange catalog. `entries` carries at least one entry and at most 256 — an empty push is refused rather than answered with zero counts, and a larger feed is pushed in several submissions. Both bounds are wire rules: a push outside them is a malformed request, refused `invalid_argument` by wire validation with no `catalog_rejection`. The cap bounds one submission, not the work of checking it: that is bounded by the maximum request size the recipient will read. `exchange` is the bare domain of the Exchange the push is meant for (the recipient-addressing rule), and `caller_id` names the contributor whose key signed the request.
+Push or update content entries in the Exchange catalog. `entries` carries at least one entry and at most 256 — an empty push is refused rather than answered with zero counts, and a larger feed is pushed in several submissions. Both bounds are wire rules: a push outside them is a malformed request, refused `invalid_argument` by wire validation with no `catalog_rejection`. The cap bounds one submission, not the work of checking it: that is bounded by the maximum request size the recipient will read. `exchange` is the bare domain of the Exchange the push is meant for (the recipient-addressing rule), and the caller is whoever signs the request: `caller_id` is deprecated and ignored, because each entry's domain names whose resource it is and the Exchange checks the signer against it.
 
 ::proto-message{name=PushResourcesRequest}
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index e5eff899..8d10b1b5 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -214,7 +214,7 @@ Line 3: Legal/contractual enforcement
 ### T-ATT-1: Forged attestation injection
 
 **Attack**: Attacker crafts a fake `ResourceAttestation` with a fabricated `verifier` domain and pushes it via `CatalogService.PushResources`.
-**Countermeasure (protocol)**: Exchange verifies `caller_id` is listed in the provider's `catalog_contributors` (from `fora.json`). Exchange verifies the attestation `signature` against the verifier's public key in its WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). FORA has no dedicated verifier role; a verifier publishes under its operator's role (`ROLE_PUBLISHER` for a self-attesting publisher, `ROLE_EXCHANGE` for a standalone vendor). Both checks must pass.
+**Countermeasure (protocol)**: Exchange verifies that the request's signer is the provider itself or listed in the provider's `catalog_contributors` (from `fora.json`). Exchange verifies the attestation `signature` against the verifier's public key in its WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`). FORA has no dedicated verifier role; a verifier publishes under its operator's role (`ROLE_PUBLISHER` for a self-attesting publisher, `ROLE_EXCHANGE` for a standalone vendor). Both checks must pass.
 
 ### T-ATT-2: Stale attestation exploitation
 

From 9295ed4120bba3db83693060703d724a8594533f Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 00:22:33 -0400
Subject: [PATCH 103/164] Keep caller_id's deprecation in its comment until
 implementations stop reading it
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

PushResourcesRequest.caller_id carried the deprecated field option,
which makes an implementation that still reads the field fail lint
(staticcheck SA1019) without a product change. The deprecation stays
in the comment, the docs and the changelog — the field is not needed,
the caller is whoever signs, and the domain comes from each entry —
and the field option is dropped for now. The comment says the option
follows once implementations no longer read the field.

The Go connectserver comment and the multi-tenant, content-sources and
reference pages say the field is not needed rather than ignored, and
both changelogs say when the option follows.

The generated code, the descriptor, the SDK types and the JSON Schemas
are regenerated.
---
 gen/descriptor.binpb                          | Bin 678416 -> 678537 bytes
 gen/go/fora/v1/fora.pb.go                     |  23 +++++++++---------
 .../fora.v1.PushResourcesRequest.schema.json  |   2 +-
 ...v1.PushResourcesRequest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |   2 +-
 proto/CHANGELOG.md                            |   5 ++--
 proto/fora/v1/fora.proto                      |  16 ++++++------
 sdk/go/connectserver/handler.go               |   2 +-
 .../components/content-ingestion/sources.mdx  |   2 +-
 .../docs/components/exchange/multi-tenant.mdx |   2 +-
 .../src/content/docs/reference/changelog.mdx  |   5 ++--
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 13 files changed, 34 insertions(+), 31 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index f53cd05c7688a9e2b6314f65f64e11e5ecf85c3c..eaeb32d157a03eda290baa239557e5dbed629d4d 100644
GIT binary patch
delta 25113
zcmZ8}d3+Q_+JB~*8M-?lqyx!J&oI+7lgtrF!hI&;R>1>r*JEW_VOMrp@fFrxci-Iz
z;gBoh3KS@E3t>??78&mQmRpRnx*W<Wfw0J>fc(BsRW<GV`-9Ji@6%P^dg^(edg|$_
zo=jYx8uLl&jS;R9%7{86+{-;<A9vkKk9*ux*2=Yu?H=VBWdwBX#eRbZ4S2Qh!2UkB
z<w|Pl-;DN*{GER0K$c$D@c1)68h!P@9{lsBul~306aVWvobLUydcd7k<<{NqCQ2Q{
zy&+f0HK)0mE39X;vLULMJvu~<WLd8c7&7>euf90I8aUJ%IHZ}*Du$@-v#g$fe(|M#
zFaLIc_2NqdUi|$Ko$VQ-cC2e9hYT2?TkO$qJ%0B32~TcOs+raA<^EPb@Vq!+;A;b3
zwfYYpFvNO!@K7D1L9bhbU$%z6G;oOZn}Guc^=HovRol6AHgSfUQ*QMddbhFl`hcO<
zi~U}G^>wr!VEwB9fLB1+Z|H#jzY;yI!LJM*IQZpex;135HSiCw3>xr<0WS~jN3tR4
z(r>6WWaz*_gD_^l{xp@}4;b)@_3J+l9Mpf{%fIc!Nd<%To56zy4gS**{aL7nX=Aw8
zp{_M(FlI~I7wLL^-9tw6aI2{{bP?1H8*-aA&e7*9+{A9fyDeAQo$EFyD{TKTZ2?>S
zNA>k`$ZP^P2)5;FS(3mFf^E5t8tV=CXl|7Va(3s|(G6Y2@NRXqc8}rRp6lL~>(R4x
z&6c6xj$E&SW_Lwi!?QEjyTPT0xh_zAZ>|zGvn;mYH8oHK;FF_zpv2x>f6#^?+nXDX
z=s&r5Pp{$rY{8}1R9D$&xr%KFFZe#o&9oKwg5tAWBP1!jp!h5|64T$+bj2Mqyk~MV
zK1~<>S)Jz2Ka;CAMzcEZP+h}YldD|Hb?cufdR^erTAd6bOV|9b+S=9bLaw`5Z-}Xj
zXNuvznCtHHGYQ72&2_iZ|3d~3Dd>GYSGkpb`tR!Vu5$cW*clI?-}PLr0oM-@{jTR4
z+1$>6u=DlYMz^G$Nx<!VBiDUX+F8ob?+4q?QUp8y$nE^2(7|PRhx?Q_eeQJ2H`G75
z$^mRGT+m{;PpdDraDi>OuVI$d!UZjc`;0ez!rLLmCA6sUxkvkix1|hr7~%6a<N+W>
zpc?7(X8&9Szm4*F>lNrxZX0wO%UTat^IjP1lWq(t3fwr>C*24L1;_df5ea}`9qS8Q
zQeQ<S7<o_*qL6yLMf3r^2_FM!JX<kb4VRC1#-KGb-Wj6~#u)E2awTaU>f<v5HpCd?
zeZl+W7<J?r<9$u;)lEKz+i+L<l%8fi>*>L-_P1Uf{KuDvil_`JZt+mppP}UnjG-%i
znGGd5t+q;EmOU1&wn|?pY(K@&l|HM79Gcb|sb1-ebl2PQp@Al{k1Es-eJ488^N`dT
zgBH_7Usg<#dN9UBUp!$$j4{!dv`y%dV@&j=9?(Cf<rY%lwn?n#2zBoZlbk_lxlM9x
zNXu=KPcAof!61`-k*FNRi$Ny&Vh_uSc%=;|`SKppLwt<7hI<NoWu$7oFvS_8F2<PR
zj8PY3Oz{~_BxzlYF~w&^Y=|+Y_@eei>dG;u_+k&}&G;B-FqK^#sTP$^b;eLJyQ#iR
zQ?jTSW2!G;ld2eFsxL2JUnWeU8Sd%qnNjNU7p6ND8q}QbsHuTsy3erft$|{?FP@YG
zXwYK1FZF~pg(lUU?kjj)@5I&A4fjm;`_XD?=}cz~9cs?>W#&m19b?S&<#(_l#+d0V
zDbqK2I7O!6UX(sHTHU1dUF2|Nf@6^{Q>4U@k_nDQzHn2?kqM4PzM|$fgr19hE&575
zGohz}1-r=C@&)~@myc4<aIZ>x#;L!n(|46KN<ECS%9oiVdFo-5RlZz%0oTJQt9(f1
zVmZ{qD64$YN8~8=<S46ru|E1?k-h30?v3evmFiQj@{P_Y^)bpuU#1-k^)bpuU#Nwo
zt&dSQ`dYWOAx7EgYxirBrj_~_r6Eb$_rvz2Bf`1Fok6k}`tt25q}*e;xA^$>)br0n
z2fRFF;9$0XwOXGonW%bO<B8a-&<;ay@yWdk5JPXF34SHiZ(z80`;<I$k1}Pd);4Xu
ztwvnWKw>9|1_++rPVh7U+iqtaH2~XgAGWP}*tNojcdswwd!I|s#AX#n%e_9ei9U-$
zGmM?aeZa>iKI?t2H2_!-*l8XRZ4dagdfXm>U_Ib#&`>{3g;$tz?2+`qchr}Zq9Z<~
zu53kn!x5h<QWYAZ(-B{GBmHO{-U-2QJbh=fdfZiX-04JI$DK};ua8rwxnd;1bLsk1
z)qJJ&oNa?JuVK#FHUI?2IiDexBp`M2H3@OQgcT&z8XsG_S~c4MAPj13UjU+KjqM9S
z^sFIY@VX&PTgzo1Yq7ZQ4}AeZblK5?lICSc2TGckZ9kwfm@eCXung~2U&gzB;Rg#X
zulm%G@PkEuxFP(|3IMD(Y(D^^?G4)xfMC5reu%)L7Mboxc5=EJYw@Ggg}m^iPZo4&
zgDyY%P|)3^@Uj%e@V?<!My1=oul~hVj{l0d!UK%_hF|WZfS`H9FZVb=(7fTt9!F&z
zAU66p{J~NFI{H1jmkZEfnBU!)FHCA6mj7_SyM>;uXYwWxx$i+3RQTN;xv+z5=%z(5
z!tXBqzfIw*k$(3Rq87EFf_J=MdE5VgYSAI(cmUP$MARsNP<^~#R-}O79`BbGDIioI
z@6UM~s#8Tu0$wRi@Vh7aMU5h5=vV2N6{!@VQhLiz73mkWhAhOE*FD9rOk;IttJUTB
zpKVQwvnhU=)X)wpP4VZ7G6WFRQ~a?!X-z7Ur}*=yK_x1P@tmxOF3gYO@n<5~ZYmjc
zmkX;qVt8lzGZy<@=4zMq7~Xf-^K;bo#!SDOt@nX;5vnC;`<3~u*<AJEa{Nyi2y#%*
z_RCTd5ZcW4%Tf{$+RXMhnlBAR0&bu=e)k8`KvIT&b8Q1j5ezhs8|YrH0V>HVzw$9$
z#(tQqb}I+4m7qAS^2<sx!sE2cFDpqvC{g7%KEA7jtRxru-5=dmg3Dl&fBI!5N&Q4c
zx5zImNhyLmKJ<H21w1cC4ewHaMp~}NC=^-hSHogGMrl1R_w&5S{{DgLEnIHvj7Mm?
z+%MB2APlhFkL8%cWTUiVR<NZXs7-sX@XMqKAxZtJDBA(iWd+%q@^j4auJUK>mU_g{
za+TlC&oR<tt<a+t0787Ntq366uC)~b1nXK-gz`d+6j{%%%vWP=*E?NEk@bF=7tjV>
z*8A-jy%^<%t$t<K|G&8K03+jxa2p_Kw%Use5Hwru#RUkrZT08ul5QgbkDYCP_fF|H
zDMP>QcI-$IVrK`B9kNZH;oalUXmUszClAB!@!Lr=kBqZlI%&p2IBCDFAs(UWe%m&H
z7->J*rWm%#BlQomgA3Ib#RvV0m+xE<lGI=K9vh;|L4TH^@2>+*@(u5Q{25o%E&i$Q
zb2a#nUk&ITK$TBA9Ao!<sCFtkW>Y~3s$>4T!ry?PI!6AUM(H=7hCh}5(}!xnRdUMC
z7LX!5Px&)N1qev3{CNdj9YAoL@)s8IRh<t{xzDnFAE}R)oOKw;OK0uujW%F7>z6ws
zAQ;a2u_JcoN&uZ_&wZ?REj{lrP!c`wFi;Xb?>9u<mCuvtc|Yn}dKJ&7J@ukr?5P0I
z{-R&jH-PAQ(J$*8K#X?LZ||x3r05kt-&1=4far>&1MR6-935y+z2cYe2xttZD}K~A
zpL*ezxZxdTW~@vPSfci>({PlDtj7zRIQeA^+wd=SPMa~Nj9Uo7HO7=n7Z6-yOhm=M
z$uDu(%RA9j{$aY!UCi}Y?ZNan%T>))4w(piv;e_GQxjDjAP6R!fgn%efC&7FW|M!I
zb$HE40t$Th+orpOXK*Qj^WHXNg+CX8=xwvOliq?Wf(DaKC1}R1CtmHxez!s`C<L~Z
zAiqvFHSy*d=YE}RVps0V`+{jI+q6RMS2)$_LXMnjYS}!P;@pu_&754l74HK3zsLHd
z)i#CinKEa^xd-1fRq>J!2;TQhq~^A~3w$(#ElsQKTg)&O@gf>m$W=4UV7?rMTs6Z?
zrt}Y~_KV|<&^zB$7NyOV>LOP;{%cQ&UIXWwa<4`^^qX(Wy&4c!op0tWf>mj+CIL?;
z3rzPvO|e%?8TwV3a<7&mq?3gv?bWTh3V31s*i<5B++saetIbOQ#AY2=>LP$YHZ$o=
z$AdxWwee#!N4$Xmg8O3=M+g-9aXLX*%9gBFBgIQi8S@aL%TiOuJRrI(HSL&>E2w+Y
zCXe~<0I+%58Ju1Q)26Ju@DxmGQ^q_Xn9?R<{vloQG%&nt%#01JWUcyOgEgino6bc%
z4fsyM*jhC&wANJkdlU%~No!5NNqYhyXxFhLYt>k2ovH9jnS^Mw&O~0w<86S}Gjp99
z53iR~LmSFB>nYHm#iC0X-pyvlr>yTf^_d2nP1Ub=gHaNs!B)0oo!X;ht35LaF|)1q
z%mAUnR?`q?6@Zx8Rx=voc{xG)?O^w<S6h_qa2O~r?l3d`+%afFjZ9NiQGj6BVWNua
z!F7P1yV>&f>b<4A9R^A_yUk3IjuSjD?lv3RI#6ERO*-_(+>(ZOpP6xqwcDWfYPgTW
ze-9OTNt)atHgSWxujG(T3?YaQ*^>i=YKKgjZ~;Mlhz$Ej&VYy2?A?v(pGvD81{WBr
z9R`|QwJ8hkB%fS0E$uHUK_$rxN7D~)QlE7d9<^60r08^%+(3~Fh+&VK!6tfF-UsLe
z`+T$7z2t;5EamwVwndV>SUzDk6nP$y`k2V`4{-*B>Phy*7PU{wNr!=sq)s{vl<!YE
z43sTS5<_p!fVOAYu`TL@UCuZR9{BZ)nJHFSk|&QdW|O3x1tpI&X47W+5n+EMj~Y{{
zWxwC5ep!zHiDjEq=tQZ;F(9Rq8aux56f8C5TY6&wL@KE<^J<YwsGuf+s1z@l?q)w1
z(Pn14pVJ>eNTdw!_h!bArpqj~o*dHew*$Je&D+$@4Zb&3L-%8TDGH9Otl@SwP<YkO
zY7jz|tM+CC2vx4qW)t9D@bEhO#dftx$#r`&DTSipx;+^{YGg+PAQ-MwG+@DFPz1vd
zZ0UA2ulo-U1BLnz4g-b852ic_MHevqKw0cKy*m^b-rHuz<bccUWU-~wJlU-24s}P?
zZ4<=}-$e^(Vif^V2G7{3dW$LoGHK%xs4D_;F9ig3MF7*AM9IE@1|F9_v{RkpDjMf>
zq8W_~$odnF&}m!%^(ST30-8}}fEN^O$!^tKTp5tL6_3!dG9Ys+AUakC?A%&Fa8iKh
zR(AAL)mt_xAOi%CV3A1ynOXrsG$|lcD<JQQ)H=E@EYcJ^O(5e~I=V+4RVQnHK=lbj
zG$lhU6ozOG0Lq2-qyRy=(6$61C>N3?-lxcIN}7Mf-aMerEcz&*Wb*KakfecnVz&WA
zpN|4QzrIfNfhCr)Cl9I{`Yy9)(v%nB%j}r|f?`>~5JzT!pjZ|_s;4Xfh%IVaAkdpf
zH9_$zzAO;zrC$_-pu<Ww<dAx)WTi7m9fbbMK&D8qO}V*N1|sbxE17F$pi_x{AD<dB
z!x}d8GqqRuH4Xz+f@=cukgX}NBh~~$Dak;YVNIY}p?-+sq$$Pg_JEQyx71<#yJ$_)
z_a9c5x=JAu3mgr23+X>V%zAsk5J#GTpxYiuB=z-z4rA|6x2;w;x=Qyu9F!#XJC>s)
zu|FWQY*U^j_6M-8q+L)Xe9l^Zsa`7m+@YZI;PXJHNRdr>dGL84D$YFtp~mNdR;_s;
zHznJDDFV3-0D69DM=~G=|I&_RK=l0bZX`FQD&eSz<of_%;G>QXR3#jBra@K0Q9G2;
z7)(b42<2Xg<YtEVn?S~#Al5cpy3w1>l&{nl+1~_IQ?H=Cq!}XGdnTaNr0@MoRb1ux
zuP`_sV3afVD1aE{OaS+^6jy*4<xBvV4U|y<kx|bCteQX_y%7#YNx%<y4DZ>1`+UH|
z&vNcc(f3>c1zIDV1>F^*MEkBmfNHdkTrrGS%c{RtOG;`TrKkv~4ahCL8DBoNfrets
z0|aqx09)R3oIx=>m)XPrQGZ!}*<qkayX;JhR?p>tEJT{|)pI$3jp80YEqKs#Igt03
zi!UEMrhNh`Tn^;-=a-XGREL`VrqZQ%=L18Hs{y5@*~WV0)d9a5@G2`fs&*)W$hIx5
zuB!oA%QWMw>uSI(l(wbSbv4kuh2Dj;!TC4X%%f_zE;k$o+IMd_hM;}-MnLY|&3Ki5
zBY=JP04?!mn6vkGKpD;=$JG7h_@Au@Evnm&F=$cU4j7_vM=$7cJAlGn_}Bv<-wqTE
z586Ja>mD598Qz})?qNaO$5M*EcN`x}A$<Hs!yx&1xKIps7{$tut0PKA1@CG_%XCyw
zF7;*#Ez?m!nW_Q7JSvFWp;A6ItkN;8^9i+c$ry)$R_U1F-7ujdeoU~TIPY)9SLv7_
z?tWh63|OTT*y<DNfYJ#L1FhBxLHQQmjIY)S!8~zA00<o>1Y5V!w^6!jMyqvN`uT6v
z9j?-84u=MgX$}Xi(`msxkt@&#9MgiW+UQ#Z2X1a=r+;-)-R3Hr?QrO@#q6NG@@uBh
z)y?c+mL2dqIA#ZfA$?9ZUI`lFh(DO|S^CA(>TJ!}8}w*&cjakFyVky-lFJS>)$_{%
zK?2OL`ROTknSDX*zV&!xJlr2t_)Rz-(gp>{5B~|G?fxJ(HPII6Ku~E!af^qvmH>Hu
zO^`q3$6KTXR6U46pO%ej0|w^rmGl&i4+imGDTopChk^><7V(gx8<1Zn5JcNULEH;m
zcO%6WBE<zWZltsRtG=c*_$G*Ij9zC8Y1Sv%l<)C6don1?6$n9fGAPRxKxlQ6=0op=
zg*1UP?8f(M+rl$W7c#*arwb*SGt`AH+zM%u-?8VesHKJ9IbDe8JEsfH{X6PX#=8Jr
zVB4;!T?#KaUC166oGz3DE>IVW@<KXexx`vtRXZ16a=MUNE(JBQn9&AZE(Pn~qtkI~
zA?3O6*^H~|{e|B<U1)`WACw0GXoD`_2XO%KYu*L%dYxroQ~S5M?sTE$cReU;wL-r9
zu2Zzk)M5N0!#l1?#_EvEoQQ8``nA)u(;Kd-2!?S@P(5ya60}9+h*jysH`VP0#j8TH
zl!Fw!t3rOUg9Ad9RUz!)Tgj=#_);X4aV@<ou60-Pw}tpyO&xbJzOmR9Quc=2`WY9#
zu_%_`SdfghNNJ~A?+)SOfIhJhkKmn8L+-9WlVF%VB$=HF-HJ)KQ|Si^w7H(bQz028
zkV3apAsHor=yWOsXB6^2czBitnrp?sK8wq0p0tbkLOC0%D+)V6bU7QkN4#qSBFUT$
zHS8o5;RiyvL_8bH>c}q<sR6DP=@Rj5s9k%0KVM9tRl`1Pu5~D^aa5zwstL*SdbGhf
zH6bjru3R;sT4uD+x_7S)$$VPOOW)d%%%^~0s0|q+hX7Ka5H`*El#+`n)UJe-W+rp7
zzqZtZY<UZ9R0$*^%<vphawR0|IzX^p35CQL0f1n;5-Mn_59MSC!W-<hmfCA2Hyj3f
z<GbN7P)yzkg<48OQcT_mwP~xDa0ax!$&#(KvXYw)1MLtuof%Px-VDhSxR{6N%@9gp
zItwUPutWUB=Cso8E&a)1psxddau{fb_$ee`+0g|${1j>u)}P=EaNe*m%WthcSvo9y
z*AOZwhK28%l?u9HVR=Ye%(sYP;k-B<P?8qdA}Z7A*4jgLN-G@>D&;C24%#9r!*|u7
zEuu0EHO9~uQLJE#n4Ip~UK{5so$PSX7BSi3pe<suqX%sflSz+dbh}@y;C6pjTI;AS
zS4w9&9GT#l<#5pL{;aSezQ8~qaLfwlC-gBQL~wWi0sFB;8&~pyLs1VDA2<|rb^k%w
z5H(G)LRa@6gqye2+jA{&FJHwrm1-TkRyhoGEngMR6bG8c3SG-rg?(bb1O!7>82cra
zhsAWmz9_78G@G$IC7Q{eD$|;jKww8HRcVXDvcf`Za4ia(t!0eS72~3CyAJyEoD0|N
zi`n8b?S+!X4g=k-FLvfbck7G8hB%ifR_Jbhaky!r{upP#VqV62b=ICJS>`Y_1j90i
zp&=NSh2<+tvC<F>%fg8i-+GFbEW`Z?JJMNeTk?s+kOhWM9EL0~d=i#5IJ$u0lW@q=
zTXG!?dXIaci`KeirNdx=VWq=hfMI1=eg#vk7+_c#wxas~aE5H060$X2v>_#H9foW$
ztaTW&!LZhuMK&1L(kupWhDP`bg8i<m_S=$;4nrgOVq;hysTM1Zz_2l#(@grJ5g0ax
zi(BZAbB4zF0)o}=raf7*#bIa+9kw_+GzP;KXBLgYu!Uwpr%c644qgS>jBeV4rQ02b
z958Hm7;?a{JuE9-bOFQmaI!$3C;~i}jt>*vwSScEb|`W|vD=}@1;y^Ld~+yPazU{>
z9L=-Wst@%{`dW8ds|OtpA2<$%WjR-@_`q>6oE4X*@PXrCIMq}fHWn*>Ix1Y>Q`^_2
z+M&QjnY%hHKg2;BP*jJ*tt5pX6xHFj?e(>I4TCXE!+SogTuAS^SL@{IhyU6O#Dpg2
zo!OY6IUklqHoAf4d>Aj0RQdy=^gkcYyAT!!W+V_VLN#IcANb2|u@XS_5$2~h9RQ%@
zrLf%V0l|JLERSsf!G0->W1Ig7a|iLh6UJvQ``C$7-uCSK2emn65ZI~)q3Tsf)gZ{O
zI;sXic9m2`9j&;V<836IF*^O(L)vCn)=yzvwvM1dn$u1{%wqHVXd_F9S&|!4C_2oN
zu?Yz7VOEYfJplywFbhYwR|E&1j$$u8qFpN+<xtRR-6%`$1I>9MFv>E-$q67RMp-zR
zK1u4eFuZSD8Pn3!AJx8fHF(=XUGpnw*MhX0#3~=xeqA`pk{2luV!TOKP#iV@f@+e5
zw>qlUT2LV{l{I-n>t8n2Rt7>SGu2iGkQ!NXuLlIfR116kI6C-iX?WkaGCp7%p3ufN
zdf&pCz_TE3NxICmlt$)*@60Oov)7)~%8G!+Ee)Q6a;7B<5I|7Qv`~P2P9|zeTFqnM
zJgI$AG|%ZnYRt1Vam<A_=rhm4F;`z`(aP{vSs9zynWwZDa;iuRN=B`qg?EvqEV0~X
zKd#5nr?tn+ArX4uIXD;DdH{lR5$Qn@3y6qaWHnl1iQ6I)@Y|vfE%#ze+!je0`h8@{
z+af8#YwE`qy`@rOZADZ1m!;&Gc^13(7g|vvfUN{g>|d6=vO-Ic{ma6Y6;&RssDN9+
zX8%IF_r(?H&sQjf=(57f75BS<=(56+UsM93)>vUBALoT4LH@Pb3M=&(FBGMO3dI#x
zpGWx8Yef{Radb;xH31-^S6g!F0b;n-mRx#(ysdp=+KQ^ZjTS#K{UrcLa%})2mNwe4
z1PG>$mP`?VVA^P5-QkAblVy0fSQ)!4{#BEQ_NgtF$Io9svnZanvf5|0qR>`L;q&%D
z2;*#}d3VEGXBHV{JL~kE)+4mtQus%PBt)C-7GCx5=WT#?viG0UdRsd!g|9EPAtUdk
z^)(YA?J@8QY-N1G>OQZ{Xt3AvG|>N!t_G>Fk1c;*dn2^ZQh4P{LUi3ntKli$1}Yq2
zkNr~nMd*MfUyco~!T}4fJ6Ln*f*yz1&R=T%Lx-e^Nk~!)w_-hc8`$MA>-~auU+AzU
zZ`Ta|etVcQ3C?uT1%|F>i(k;XS=9~?z1LO~&uDrDYHfH=SQ%r|S$#FHl68Vo1wV~%
zO_MokiI4RF;G~mwKmuYGCoTEr0tjVJT6lBWK^0_cGILG(dOvNKtF*>W8jvDnYV0Hk
zNUf|KQT+jeqsGdQ>l;+g0WI&OZ@;K@b(h|8IOs#)JC=McXw9SijujG{JRmskSlHz0
zgugYR;SmwA0O&b9A_Eo>qYsbBfCc1j?SO4fmU}b81GYB+M>1dmVT(5-G7|%W>CK1?
zSU@nn89~5Ska^n}-hV_gmPK6Vl{yw{{*lL@j{goxIqM%0H6kqChAcffA}kF6_Q?^s
z^Z~&>IU+3$2=>VlSek#k--awbJ$-JF*4I@sJt8%P6my*(k;m$Q)G87Y`#&H!rbqB$
z((ABN8w#sgY{bjjUrT2>3}ok75&6k6+JIqJBp}|R0l_dUVxNPzAy}0z8LZ(PyvpGq
zi&sVD@faF`qbkx+Bq%`Y6v68g`Kk>We3A4O0D3O6eFcb~i)>#3qUWNB?W;C)1hG{3
zss{jwmO47n(c@CvS9l7hrM9mC!L*cog$hA&w>7-!2yU9Uy{dhkn~tct`UKi++QL8H
z)e&Vw#BKhKt()UD+5bMRY3!>Z+JJJ%MUqA<aIcQYBn=4e)e-q!0U&mY)sdVH5wTN{
zfbSG*BJTAOu~SGH`mK$~okEJRQ>=^7PC><MTXM$ci1LWp(_$NjYJK_wh$04$FyGDg
zd;xh=S;_-~dvip7yAOz6U~|Ok!;hT_id&n_k;udPVKH?C#}4*~KWf#5JDi!40y`p_
zxJzxzqhUt`_k8q{(w2f@H+$tZ?TND8j$RZCyX}ZX8!+sSL_|3WNPQx0+v(HjGn;mX
z_v=W;duioQny*gQ*AX>GER=S%P>zX((hdMqJ!UHf2+CvjLIDKjF<K~JDbT7NRQ8^Z
zC}-2R|DrwXD#w3?+wcJWPDkWNHh}1NIwC)^0fgI5N1B|4+vvE51mrgNnTY(zMoM6(
zGZFcbjTC|COavd<H09%?!TAV2vT4FUvZ?-GEw2#RR)Q>gJ|aJ|X~!*kK7u=<LA)=R
zYFXlM+RKHtP8Tv^ZA6~2wc{qNjo^$e!Mk7;TxOg9rlo#;IU<fqp*yXk%k~Nc1n*^9
zfppgbh-kPR3EV3uN*{#cee-f8*pt@;)Ic5{U5<3?&fl=x(b~Jp9{Ri1vGl6#YzRqe
z2O%Jay&92kgMb+JY6R!vqbbDNQKtEUZT-78rsM~Qf{tE(a46{L<%ftNj(^Yv6hB08
z{6i;Y?da&`CL2?(6_?(080hHbro%u-FE=BG$bskrhMSZF=g^MTj_RR`^wn~0o~uPg
z^sZazu%#j@4<*qEohqW(rTHgD?Qq!Q9T!z5rgsn1@QD%rYrB&USjI(VDnL8*8y9Vq
z!;3~h#MHQG?!>4_1tj39V0_g5R#c<{DMP;rQJD&)2&telN~wU-W;;5oc_%7<ptfSQ
z+PDoQuqQ;~qcK3J@=jFlbAX_HCu--;c63fNEz0+~UjZO$rbT5g0fYsoMddyR2&QRK
zxz7QDX<AekX4$CmqZtdMqA;VE_xGb7gBNDmv}$KWl?cBV$OFVvV4giZfLIwbqR1W(
zpk&FWg)oa9AE`YQnuR_Tnj}P<SyAzc2q4fL_P{8uPiRh5R%j5CG>QuC8O{Uk=CPHd
zwC6(eqO#J<=H=16C@MXCY62cicRp(|8a(r(3crpbA$aCTaUIo$w}B0+*o@IyJF6-x
ztIBM}gEm!BRFzARuRM*A*`pcz(pN`o#dVC;G;y3rdm7Qi*U-dY_^bEfJV4A1SWFxc
zBx`8mIIc%yJY2`B#%Wzb>!R|DDhSbLT@*_cCxmDNw1IiYYfptX*pq^gq%^5Vc^gc8
z6Z^|}?eWki+c=H*#5a*~y7M-e_!f44yw)?cC93fIDv;B}w?wfnsdj8cD|;Jzc!Jg~
zv@I&@O9;_sTNL#rHX^h^sO?}MPtcwW?TE^H7echz5k<X=a}u<{;@rg|mD+=$T~3?2
zXtRsjU;(2IR^O*=T%}eV`cy_P3DM@$C^9kbSpadextD!eskO28I`+}fW-r-i1(oHE
z4e#M-#xYj-mi9@5!%=*!Mt*2ae)ydI_bu(|(C7AaAw<{DX}Z058<_tK_M3^?1EDW$
z6&iE%e?cnzjkiIMf3y7)werxvZ8tXN=KnXju`6!_^MB0-y{&Z*eQleqF*pC$WHx*x
z4}D<%qipZn+N0LdsKP%CBO%z2Mx!zP0@WhzaorTn7{$u|q19x46Gbh;tMc|Vmvd2G
zE4BiFlg`;`2N07u7nQXlAapqw#TH0Mne8dSYM3@jD=De5*Eob=sIk{LAT^50FL(gK
zP(yR0JlmcEt(Fa&ggjg8Fi;TGM&%VI+JK=pnkPQt00cvA6rXU6qdeQ5;Pv!{N!kQg
z(e<d@m>@-`>rq)60#YmT>NeUT+LOI*v8pNBj?!DsxKtzFiprx`v;oDfs3|H`Kv3L@
zqC%xK*`9*=PE@=J0HEg`J3|7Z=N&sk0;1=gyBV@QO>bn3XUO{jpvuUY%#eWK9T}4u
z5)e!yV=_Ymf@x$78FIJ^k9I(cjAg8exy%RHqg7gVy3aK2yE<9#$L#lj4&>WeG2vSP
zaL<a#Ed>zVvtrV>fZ(1LgKz26m=0w0xy(01>s2_{=|aw&8<R&UXoD_uV>r6#%)7vu
z^I7E#t!tP0_Jlg{kACLc69NRo{Fp2s0l_dohVpR*)l?k-y&uMurRfGUwKlGD{8#LM
zcz}K%#^nA7h<+c&WGM`Y{qMtA&eE9J|46|1zmH<>B{8x8Ng4Wm9FzN>6k-2c9JBYo
z4ip;8V?W#fAc4am68j$@R9POA`yU`Em&fe=uLA|fYT@1c0Km4|F$R?}s~uxdoUFFJ
zi^gDDP2R<4vhI$CcYQ45b2zs%IXB1#&e57>t&gcOv2Ht(Z#PNb0)TmwZ7x7CZ?b(0
z2<A=X+t*;_j^u-FZ0KC=&xPBZF67&7F-`n@0Bz7^TMR!Rpqr$Qv`}|4|2*xf!ksaB
z%m*R5?2H9P1q6sLJ7cJT=<|<`gg#}{=V{%FK6OSRKYkk1#2p^mP@@>KHZ7`-Wcz(F
zv8VuG_I<Y50nu}xZFWHP+;`XP9m(v6rP%>Mbl5gKAb%(q6(E=n+hzv@)8QD*{!5s>
zli~d`mN72RW%ePnH)0Lbo=moSzSbe@%a|G$w(mr?|4P`N&0L^)3%{~wh(}=m$~HY9
z*uNsv7hr~+$YMv?p#@sA!lO<XGW}6|S)mQO9HnLTFz*7>pI}X^v`30gI9-V7gzc?P
z-1H~NTl?v<tP|P3HodS)JE)Y_+ID~xcBr+(4-g!+F<C_eQl}WUukUCrb|Pn7OQ#oU
zgIry&IUICUan0c%uUw1Ci$C-M$F&%?CBB|J!7JWdF=bd@y5UT%$W;yjx<ewCH6Xg*
zvX?a=y5F*wH6WJttys>mJh7}vz?b#ynEQ=9v8<&G{eH5SwG?4l-?_W2J5kad!Lk->
zk)jcKaw$WI;YZ}jr3?s~5qb7f?nH&g*ag2@thvg@=E)2VA!aZ(PX-epD8}Z=3=Ig1
zv3UrlQ?%!n7~aafjCpLv676JGWu9t@_$i_InUu%#GAmk!_?eU^O@c=toRlZiG9U;i
z<sp737)r?PjP+ZlJyODKl^}#l%vK4I8s!-xUjc%F<)P%DJHrxM$?viY%W!A-uERj)
zc{fk~&>C&P@NQndxWNPj!@GI%>%bC1?~^G5ZSa3|eBU-GAUeKp8x)Y5-Zf|mh1A?U
zzVopI%QbJ=Tt@?ntGUh`D6Zz(W<^I3%_Xz0Yz(uO8s5+HGA^VWeWIoHtk3f7TBelj
zS}p9_8UU2lwqXH5S#28@5R}zq*iY$)Z>2QlCFw;QwY`nnEXkJ<0x5~}{RRAu77(45
z<l|RN{QId=7}L8lUs;#$HkY$~!?ddOlhvBfRSubmaI^ry%6z$T0fJy<zTCI~5#cNI
zbJpdH2qyuL@KyQlwfQ2#r40R6=gW;tiV)#z@@eCmnayW_&GSUQ@@>95UGs%DUF!!R
z4slBP%0H1WgBB1<oyeC#3kdQP`Kb5l3IY&Hoyd=U3#I5Qa}q!)IQpA>d1+Qko;;l|
zGBp66opx+SzB`>SR~4Ru{dB&)s!AzS*W~jc=m7wt8b?n`4>gXSlpbmvJt;lZ<Rc2s
z)8Z;KyqEGb#;`wrt9{q-QojAIa~TD}H8%L9HmB&C?FR@!buC{mD?m_P%ZK;*Z(z&F
zOE+2PQ`(WDn@%5c{>^-ie<tQe8}zxEpX<}dQxRE4E9nlq_q0}7cqd<eP6HwO+{v#i
zes%<iK6mo*c^GYQWrT(^*BNA?;c*#b5TeWQxU?4_HHzEzDkD?Bx!{pA$U<+%r9&Zv
zq27#3hXR7)&A4<ZASm99!%%Y+7^*XVD;&?LN>`rMBCdwx<MyvaJCmi}VH?hAbK1Ux
z-}~?whY(!v#HFPG!SzlYmRd~PLTAj+J1wrvh`Y@h@{j41o!5q!LuM0@*`~#1$fE-Y
zrp0B*10uSn#dBuFMaYwYhy1&7_xo`X@=}I=@5N=vOA$hTdfcwnI+F)x$3?AH_l(xK
z4I~Ifh(zuKgetRb(*lBW_FdC<Cb%FjDscc9dVy_WKv;NzZDBw#EwC*N$h*SA^n;=<
zxU!39Oh~xQ2Q7BI*5hL@Y3e=f(gm$3e^DG+pZ?5F7kmP?IIjFF?$%e)CtzLVCtxIF
z-7jh@?_Uyk-^Y*2#3M{@Y24lYXA+FLj3hSQiny{Gbbqzk;2ILK?zP%qdZqtQUwZ9d
z8FzPf*vKub;_jYz+1AIE&0xbZtyB)ljbzMwN&BpPLtK8J#+4(>Z;ZQt@6eGgH^tr0
z-lf|TS9X97e*{ZR71>FO=-899kWIJ7-QwdiAp!5UxVx>xONQPacSkzhCEguZ_JR0!
zHZgv_P9paDf3<;aK8?G}oX+$HyeBUIQV}13R>oc$lE3_Rp%ri_E-p#{;POLu90NkV
zL-s-dMAt*K5csziT`07w+3CyLKU!8heJJ*;<1%HS4f<5akuvD(p)O>#BXPwr3)lmv
zwN$Cd&Jbf<$i0}NhgyN-NL;26KyVz1BZb_dFaNp#dN0S7E9r(;w4Xfv@L!vTBKEQ!
zv1kXH%XY*9g648uCV4<C!^`p56)Zza@+1&R{`)wR{7Cxts|%%`iuB+gwYqgmD-w6d
zp>$u7khd^sgmEeo4aJfJ#5ffRlpB=sy3o`{CHO|s8UQ^<CFJS^M9)zPnfL(Fb5z1k
zd|hZMk6+;W35jpKGdR5<k59<Nhc=)XpOA?U5ESDRSe75u$GYrlct1>J98Pz>qs{X+
z{4jxE*H+M>L05A7vh?>JeWa^sSwbc*NI|wNq4CdksS(JQCFsw1P`>X<Zdt+R*VR8L
zTH*8|hp$M;S7Nk5pA`wz?qkJ3@c6p)>ngU47V8q?yI?R8)w)EE_?t9<=(H{Y*X-m2
zskj~5oKQYvZFPM|gUt!`9{mxn0Ge%O^)mIxT5e6?k5o{!bmeZ|n#f7okQybL7V@ur
zyOIaDC)~}<LY9@OH)8WL^}Lo4h%F6|p~&_`WAO$Dh|b#+_>PCZ#O+GH+nI2;G~0{L
z_teviTS6edbHihF-kI=;t5QI8-kHEvDSboGmAtn*;ZB-uMdylodSM|1;%~I!F*@%~
zWQ)66Ky==nz?XXT*>G2?y!WvG)YCgR-;;2Q&)*?LmpzFPWdfQwmD+m}C1uh$IPu$;
zaJOL%GW8tx>-u_!mVhECyYkQA_a*$rvMU|C?@P37&A)5zN(X@l(A8`%R6S8&Pqc)<
z?o4Oz2b|7y_I`jm)8D7)O6TQ=67CjeSJC<5d-V3j5Qs}jJVxh3iCppbh5*s|P@<^0
zjyO`>-3;%^M8;d`Pwvq_sAHT=;HsQH9_@zs^qx*AXW1Y_?^KTeiMMjd!FD>)K=>XI
zY^M|W9)$`wK&<K03G-}1TrH7+-?*Gf;Jaa3<x+y6Jd?mx8T}a`DWVTE&Lqk@>)%rd
zcB25jm{59~CtVhcXX_WA2NHP(&*0jN33-zX$lC_QPYeK|)5QdSVnAL3gkLTu+V<jq
zVuc`o-0psTIF%FKC?#G=ztTu|yZT>ohM>^9Vy|*E!Vp&y@+}h(99I%}%M?S<Vegeh
zxTPF|U#eV5SS|EB^eI_4N|<AkN@db*UexKf)k@!JtUu!^htQr9rOq))nN`pO<Bdt)
z9gkAym?Xv%W~S6RCK;|wiV6nJMFlf9>7I}j6^xXj-?*f#V5A5Y%=jc#Fvm0LfH}wT
zPD*BMVP6IGW5%SUC%|twawtJfPAX0L4M#p86awb!)B^~sO-|yZWg?6SjHmCWbDHRe
zEA(zs;U6TE6s_J(;)CR_yb;iQ?B0;xJ@j5uDInXS4cY&_BwlFfNIZuOJDn{E>21Q(
zlS+|nLqBnto@~)lf78tyA*akw-wfe1`qKGHg)e_}<+mKkV*buZ5LEM%EqahsIE0S#
zlP$aJ__Gthu=fJiEuwb{EpU{fyMP6xj8GV1R>j_nK;bG!8M+IoB4w~pz=K4wkll*t
zW#NTMh5ts6glMxciQnkqPhU_Y#K)5KGg1AZE4(DB@FYM|v|5sE*-HORObc0HRk~N6
z{-hFK<>*BB0jo$SdQm_xEcbP6U0gqsSeI0IkdqLN)+O6_)NhJLxC7gqR9c%gF6#+4
zyQ4Rk9Zu*+!;slF%|wsQ$ri1UycBnL!@E71aey66>V2}eC-Ejj2ddpE3+zlPyOZqb
z<9fStU|0kKk(U5r(w#}a_#HSPEWR^|<9>=#Kt$=zWZrH>DHU8K;K^WDQYHf_fg-z-
zG8sq_C4*f_B!jD%4tipo{YiE%rC%%CZ?73h;lus*ngQgk<mZEc&}M%U_d|0i%yV&%
zlFX=KO`7Vn8y-%2LOjfKDa=1lvg1$bi97%>d~SOY5So2XUZfkHTvDQ%`J3s*q3Wc<
zlMM;craFma)0(#d!j(%iy>09ZhlfJ^3*y0hKDt1!FX5YLfOUNgzbib{OwSHOAff_~
z(fUh@iqZIJ2+a}fXVdONdJjIER77+`idJWnI1!;$1PIcz$u{@%U?&J=&nDa6M>q9&
z3`3n`y<6yop>y_nfe;kuXuZ75+rYKovB@p;SHj;Vm3ESsg8jQ>$4>erimP0T_VX;S
zr9LHm-qD4k{XFUN6hf(o;jK;Lmgh)I{mJ~=B!0_6FAF{J?r}A#{E&3(KhdA~>>=Mh
zNS1!QmHszZyK6~zHy$YB891*e-LL#if+^le;^l)j=pGcBx01?FN!H>Sy-hhV^oKzF
z$`TL;xRnfw-5n5}Zzb_17KJ7tLi1KK@skWq67bNxZHK0mK#ALSXi5=<=4}d1{@&gL
zQQ@t?@4`p2b#3(Om+)Va(eVHZRixzaT>+s`MJmddA2guotVkh?2!-gKv?A4NWJ(mn
zcn*aO3_l{}Zmv(I(}tdgcWf$yrCjD1Y>5YVdU9A+JN>T>$ENW2eBP$LtS3eDTj}Ze
zEs^Vyw^FjIgcL)+m6CrW3J^oTl|ngBn-?IG(_1N{l<&_3QHAps*(LfHf)@R!r0=xX
zpK+B>acF5qQ&RH0z9*m2loU>Y1ubp6Q&QOvaR=fl(UPQ*_)C#ef*DRpwX(<NjWG6<
zRObiu>-g%|<1@UoQyD8T>9cjL9s`G@zvzg|L}PYJej@3kDbGnMDRC1I2&I7eotXy^
z1I$U`&J5q@0^;F37B1DF56?@<Ob8*`%p+Hfp}ovUt94=e-BLZ%6<!Etz7ilMaSDrg
zF|7n2t>TZ^)-ru*_@k7<KjI)E8hw<)M;!Y^Bdpz}Y*J_aKzM0N;jxHDv~-uI5Q|$y
zBP`BOSVb3od-#)-B0lo;@x}Q`3fJ*n;QD(F@2XVBdiGLRy>s@e6h0oJHE=Jjfi)>*
zU5c*(R@+tgmII5z4^J`MHK|-tyaGbwH7T5~Q^Wxx;?|_1>kx62ok_r#z}l3|&Qbzp
z*QR84mLggLYg1SP&%;B0!@DV!u?rr0*y=Hu4eh2sVQfly@_2srlY2I&ls4Qw>`ph`
z8v+zb3=cuRIfcZ5zpCo-lXteT7&hq8mXy+-+Z{r**^<I-D{Z%a^1@d3m+pF5XlqJl
zDF{iLLYAUyem}Wp8>{ZF<C;IEw3R&Mnr*2L9m#ZPL$4*QZ4bS3XnRT~a|qF9dkV>%
zzLW4%*4)9~>7lm^?MNvll83V9j#TF^dUxK2Hbi!|hu$-`(`iFlb0@X=J)C!+;oXzU
zI0ys%lKoFN-DJP(sXv&#Cxtsw^5T8u#eFH|fb`-|J>f-Q@##9A!YcbxQSo*Kh{^3s
zHEqVd2na9kOBEiFUL*nc;(ptUQUZnc+g_9+^5TB-;w9Q2@oR_bRK{s&c>>v`;$Hon
zQJwOHxff0H;umn6SY&|E37Ef9cmTovMXIQn-uM9V@Ce&+pI#a{;<O<*9-%f(cpIR9
zr<9KD;a<8gN<Dx?En{+T{yWvagKUZkf5rOVuZKflrDSDk@`d(Q3YBFZr-L`YX4CK2
z<Dsu@kDJ_^Uz5k_D;$%&d6XT$Uw<fc)b==pP~<3iT&M+a9%B#m!dS=b=rR@Z<}r#c
zi}PR$JkH+irAI@@?Hq!?B!f1`DTn0qHpqP^*v?*hB6K39@Gk<P0F`?uQurcJv_ZA^
z4XfW9ZN72lPQ~6gH1`PSL9O>Kd#tw}d+ytmBKCUxr4qFHHie&H37t{uox~u~23F#g
z!LRfk@aI<szB-_Pf^S0@l|FI8bN*{Gg6MoQg<q420q}dYQ|tf+$UEgsxE|V^N_8yJ
zUqtxcZ+Oq8GA<%8p0rrjSx+O@^Z~tB_PLZA<neny#qar)azVszIWVjUf%udX5DJ`6
zH4$I!1Hzx@DX~!+0z?3xPbDwN044zs;2JxCr35O~*a0j>6u>nUz~AGmWKY2G{+P<B
zOm})ve^oJlv|~3wv3v7w>;gg^U=h23Aiha)NwrykBJmbe`{+$Ww``|Ch&H##DJY83
z2Iw|>w2$63eB0h0AS5Ym5Bq5o2~ZBINH6W9Kk5oq6v(XxQnaclK$vvpjS#jYnDwaM
zJv^d7CbIw!+Yto_w_$<_aXThG{87D*D?Fw^ZbtzgxMK=19*%NpJlK2!oA;Q$COn})
z>Bw^xgcxo@L1`JT?i6<~{D7t)V+#BG<N8C!+XZkR)%d;0eeV<~li7bB*UQTBKjAmX
zVT*SPq~8EBqjw6V-vHsacM6h|3&i$80`9j-1#<h45@;}~KyDvWM1Gr80KcsxzXc8N
ztb&XW3S8#LZY%xn6M9>v!K?yL6P|g3<h|MK*i(8@Xtq6h2*Em=CQmCnNKTu>nm(;R
z6rNKc%V-GEW=;Xh=y7DAAo*u5V^8Z7LUWx)TuP1l@iv&^Jl5?O`itRt1#-m%xzFYm
z;BQJi2P5`2yj2Am*!X{;KWkJK;3qef!+Vnv|5>1X$eKT+mpqC8i4RaAhi?BYkbl=2
w5F`Av03ZEP@B_k#|15}qD2+%0Zp1~l5v2sWFJhaX(X-u)U^n*Y<DT~a5A}G4&;S4c

delta 24849
zcmY*>d3;nwwtx3ccXRIzN^%29_wA<F^cF}W5cVVx7I(#UW^^1JRNjp99A-vmeA{m(
zY!a4$5*P|mK@fu=0xHmKvW5_36{DyFqO1}PFR}`V{Jy8EF4y;me)yhS=hUflPMtcn
zbSAAzzqB$vdc1SIGCpg(Yo&YggU)f8DG$0UdpP&74=1=M<cD<a$q~;yGxFKTpMJ{g
z3OiHUAjRv<JW=C*;SYMtzFfVX;r2P+uKE6ZH~#ZvzW=`6L;uftAam;|b-$};ZI<qG
zbyl(r*9Qek7xS7D9y0X42Zj!=dT8j7uHjK5pC9=w{y*}mkxz9Ej~Mk-`03w``qQ(l
z@;Nn@tB0Q*`P`rW_Uw}*!%zP;{Pc5O*|X27eLx=ipHKdN#Hinm3_tn%kx%~nb8P){
zYQJ`RIQ87fkzuy^YqyVe`m5^omxQar&y5`Q6nc1O<cQ}-J_j*+c;p}d{MY|tkN#Ed
z&2oCF`NK<e{U+T_D!RFjss)_{HN%2@1fB9NsM6PhBK>CFL%b^g>`m+S3Lme_@N6qk
znhG*U=BYtvb!Wu|>7ZEBU68)5K+BclTwvc;(6N)=fve(Di9NrmAWJuN74ltbjdru)
zX(({*C~)h!x@OV9x4pn)pxF(Q$8a|mcs4op5Z46#?s68eukY5(o}Cr92e3f#%6{EY
zV^@JMU_pr6RS=5kKRG!s8h=#4<}X(-59zFUT!a+MTpkGis36-Kfd`U4Dlmdlk_VDL
zDu~4NIhwAxf`;crfn#T8(SNEhyW%Gb)J|xY<qEblJS_#vnF5!-O3~W^*JxP|LCcK%
zyISV#{cVA(RL_A8#5cuoeOKTb_%jOnX)SQ|&<~T{g9^AW6ew3R`~RUn=B&m)g~9Ow
z`dui{I&l2}!FQp+$m0eFguyQqbi5)BP6Tf7iv_OB(%_N?zDt(DB?$)qfgAja(7|bV
zMthYBURUPr(dvIVs{t%6oX}#lSG!4S;e@o&-ke;ig%etg_8Jqs!tFuDDYO{lb-myf
zZkIIJVXW7a!y`eGAZnb~llOBH+&A9qX<wvAxoyBSk-alkEgU}4E8Q4W6u5DsSGo}p
z3QqJIA|L=Eb)q*Emij7)`ib7i-Leyf)Z;Cpcj=vZA3&2?={Pkse6rmK&8*3GA6e*Q
zvezh(LbHg+Yx*sSJ|=qux5+-TWFM2gop04m-Us5amMtBp28P$#ebD@>^=9WtDKx)o
zy}6c9nqRfvV95H4K5D(;A+iseU8G~JH!@i7&HDhF#uDSzzK>6{`*0K0?t>=JG;eN9
z3U#B8Y2HNAg6LzKH)Yw%E&G_}P2Z*OqUjY>;Ga6SalE=`c%9t|&8s@wSTwKdymDTF
z1)bD+BT?Cj2c6V;WB1B|c%-rFyoLAZLEc9@!!?tgenAZnpK15e4t>nD`)G$gW_pdz
zQfNE$G1D84SP*^8^hT|Lw3B_z^v3SeyYfEJU>5t`1hu4MmfeSn(arK^n^KC3K4y9S
zmQc!<v%H0I{XJm{&2Y_O2PUX1htIJ^Xi#&Gt)>PMbG(LSZw(^mcoQkvfd(z+c+(F_
zQ)p7nIo_fN_5NH<-Eh6ej@PIa6|dQS=uq=DZ+4-SqN9)3yz#ykL?5qt%PaLwZZ0C*
za4pUZpQvt89$#$B$cBu?-fWTkf=V`IEcS-FNEz9XvDjO3iv^+QVsE#{rJmW))4<GJ
z?Cm~W|Hi|6X>YhPnSV@C|B&@~#_pv(ddYaR#R?Qu+M}0@x4@dI?a@odi_}ev8NQ;I
zj5m6p?4`ZzCF6|^)0;(_y2)^D%-r^(`U_|EM!T1r(91?|wiOFEp_h%`U^glDCiJq=
zTh_~h=w+j~_Y)!?D>tE+9HR6Yfdxs28l2*C5N-J5d_f8-Hyf@kUL|VgVjchM$WhNd
z{U>(jZtbQrd_mv%Bo-$?^u5I^7bigUy@f{jFQI=2!_}1e&2;rQ&PSST{W~CLn(UbA
z02xj8^yvT@O<pWZ?XfC_49_mF<9n}D&&FaDLd#uVwX^;@MPvvoiEFQy%^#t?!j{cY
zJtcdsERIiTy4S0<=T-oO(7oOcIr>Q#=fu~8nWHn*-z#MYy-GXTic<eUuPPE$NTJk!
z(3{s$|B?!%kb)5S(yMeb_hqrtdbLw##w>NavjilIpEC28Ha}(NFNyyR(JA1m%!Ju$
zT&Xx^StG=2np2iF03qX)*AR0OkeIxkgWNG81$ni_D+&bw_@c$~1t2(EEMEYEvxR)Y
z3xyCZB5g1h3I%q{tE%UbHd_Tsnr*fUlr-Bchky}++AN2J4bM5RW42E?B#f5lylPN5
zBuoyuC>&A-0I3%(j{u_WMav_Akb03k5`k^QWVs)_tlOW|KyLtW{$O*GTYm7$G7n$D
z`GXf_-c<^+Fx=w#$*YXdy!)E^-_C0MQ<OjW05LyV!vchupR6?v5Mq9!HI3>yKrHM(
zc?08pS-f5(0vcTRx;pXsNmyio(LPr<Jx|Z(JRrGlMqG^Xx%zP;#?2eLXex~Lxhno|
zQ+RBg&-IWfLBmkNGufxSnAx&O4LPfUp)m-e6aj?BlYO!R1%$}SK3RbRLgUH4{1>4y
zRiH%R1<@3rYno4#B9aEaTA!>yB?$%5R3BBK2WcvW5m+AAOrOHo==tiW)%cfXL<+K*
zKAF<c4l2#`6^LpB5Ta-LVujL(R20wj#Tith0vO-PXkhuL4>jV?NHEzfvg1xCCV9m0
zyykPf<8zwpoZ$zspJ1OXP&XQ{`P4jp7_^H}$vDraEM#xKq261Ke+dJD4$<>`vSI{;
zHuHS4Vg!UX^L!l_N&^vr8|ZbP>kVljNdw<}%RrI@11;bNx|M5yg0bGGEcLle_UuA+
zP&I(11chh4PZo?39-j3+Sug@ZiF%*0^oA0$U|i&Ly?sLoPJ>O}^2vgc_(b8h*e44{
zNrF3;_&n(%o*tuyXSvU@O3ub86j|<5Lt-{YX*Ry+<LR*n07C0MOKCu~ea|QJBOomB
zo)5DzjnPJFrmSQ|^=g+pSNddj1CgjcRg~v|U|C7VraT=pJQ<&(Nh%UU%Z$&;(=k$H
zolv9<0E(=$6ahrrb(SK4kh+c(p|lVqMK<_ES^xm&2Ah-g+2E6D0bjwn!H2ZKw|6m0
z3tN544w_qWXEpvQ{DlwT+iJ}!K=5s~W)&d(wbhruL;8ydJZQH0T#eFSk_Ns8D`+GM
zL9?9)4cVm7@O<cV?B_Nq$Z{2;+YfzKt}G;@?2+C9z|i(sDgvVI9?K|z=xPrcr4&Xf
zB>nfXJC~^4O85B`4_~`LB&x67%@zd9K3}e(@5_QJal`X3pW|F+$r5$1v%|l9s$cI5
zQE^h@FsoUr_AfbXi2@O#4*S{(M*~9CVRH1#lyBqI{jp5jQq}J)KW60#P!X8NeA%M%
z1Ef~I!XmB?AY>f#6_@b&9H*7^B)e^ydVl#zTLPu)lRml4K^sUo>5~f~AS9ghVIdsA
zl>j=;nwP0n<)>{4ls-?}5-5G1_8Fqyiu3e&+J}0UHr;VrO21?GFIOWa-}z)c10q<y
z^T~P!5Z!#|v)0f!X?S+g>&sPV<ypH|T0PI&z0&G=)+cuZV1bCUK9n=NJa9z9@QgPd
zt21A&Q18sj9d9DT@meN9o~SYTWbF+Aku|1_SU`xZG38_hgvc5b;qV1HBmqNtrkTo1
zne0{SBhG64Q$#vGfNz?qiDC^9eA7&SfG2A}MEW$d^GjwHuMLSnk?wlYbd~d5Eh%u;
zi)O6&=OhSv(Jbw+cjNt|!3<Lgn6dCf&yHZnR;xwDz?Kr^#~G$3wvq|%#~CJ;-N!jE
zB+X*|GU|x#vuqY}+$>Ye<H3{Qj+<rX7wA1W3mo^dsTgLQb=a)tvtt?6ECxXoVF~WS
zmrYgd-vQCX%O=usFU}0ZzRHT$sC|09YARyunNY}OubP3l?2labs+mgbOR4TlU=Qe7
zXex_Mm-$K-8}m1{IJ13?`d`j!5UoMd7I2{{S88xT!a`H7)PS(`LNk9cEKMsl5qM5{
z({#OMij`W@z*ld|m0FUJQx=)DQkQXMuvuJcDiJdgW*@9mZ>azfOLanNhbg$!%%+1I
zH#(s$<5DwU>^=Y?d#Q<Y0t){G9TO}!MI{LU&gG_@1%TjOZpv8z2+rlEH4737YMxaH
zRaBCL0pN~Rwhpu(TxH5hjIWTi%9N7<5Rz7zm<;#mio1j1S!+5zV5>H$cXwE8y7TA^
z#NC0f7A)rjwJ^BORQOhkhzPQErq85x0T5!>vj;v<W5M;N!fRzBqRn~}DWZ_K0ouT3
ze4r*m8|2W?hEmT4ngfqwHYN?vX4A2gefEL+NQcd)>eC0oHc8T8D;u~`9a6s48X1Tf
z*;Z?0fKXwpX^7(rK#Xjw8IAE2oh1FXv&|dTZspr;36vtYo7q0@AGD!HrYTA(KuFkb
zqLdoKb%35ttay`pYekbSff7)YnJqGNlBdWfGsn__Qe+e9a3{u=GCaFY#~HR_lX^$a
zZki9fsnSc);Px|Zv%0r@za<z%2;OfE4iKvCH)ZYxgy8*T*uQZJ_}I+ywy6J6(QHeg
z#ktv*K!a;G<pENP53ZSJ{b!W2Qsjk0nH^iyN1erotf>nsm=2K}D1ZUc?IAPJS+C+e
zKu6fU+tk73N9=AX<sY#ulHwKf5i>`md_dwck@D~15)i6K*`96cu=1m}1Ui*EYD=IM
z;HWKu(#KJfa3`05wkO!H8q~W7p0Fj*f$a%1TTHYR&n73#&M7$x$|fhwE?xD{h5eCD
zT1=&t9dA%StH!^?>`f_jsMKN`kTOb(6<_!YDJ|q%+N}U0qqLZXt;i@;RTDv!i{F~A
zu0JP1weL*Vul2hS5^2Npz3KSDbea|6ho2kqyOC9_f1^5}!}q3Y=st`uO~G-FO=?vA
z#pkT#1|n2BXDvT~P~{vgKYq@Fj~CcSjcVue3)W!Lyi~hj4F-@JS<wIp2^T0DFyYZD
zg5eS?+MyO!Ua}=ns9&-rP-t8-<)J57AmI`vv#)3aQDk_onvNN)c87W-=c<Y7hA*l`
zG@LQ4+kW-cGW;6?$M|K&286&dez~RsLf{xb1~rp%ei3yyDRb9Ob(XValFdZpnB<ow
zCmMlik{=}}rPLxCN3CC^Q~+4M)-O{kAUJFNGNl57v(|5=)FOg)esPKqfH<x5%fJAH
z;&pzRQUM{U&M#9cAZJBNt!W2KbiqR7cO1^VvRj>ym9x;VdW9*vkSP|CDHfD0vc>}<
zWG%9c00>!&$Ox}dsCFTp-)7E_)OjUu`;}}S&ma=j-(IXTfZ%!C@Ac^)2p$+=1>5_P
zy6N#1))2bzo%jlC2!If=!f%LUGC+t};YV(#X%C2{X@%c^Cl6zSV&A>OAGkw5BRT=Y
zYWCd$wXJ-$-ANWKzS^HH@@W@tr`7&QA1RgWwA$alT)&ME4JKa8yv^zz6>Dt?wAWqh
zmj`QIcqOscA52RLlnU1RyB6yQC`7tYfHq|2Hml9fiUwN-Rf7%oP^q+N@EhXn5<HO6
z;7_LXjY0-G+>=@Usk+%&vB#D{sbG&SgHpjBzs#jwcq-WA$Lx{DKt=E|Tl$&WR`Ibd
zf@*<}{n;WBcHy<a$Ns1|-~@ykANzZh@xbju2LDtBE&w<`wE`CqoquWtE+9BRy%D%w
zs1`UR0(UR~ta`}Sfog$6_AsaxIAjGb8bi_{KLYm-#BEo@^OfK6I(zD0>g{=7`BhUN
zM+-$)gsta<Uunr~`j@IWtMN~fF7W}vPgueMA^e2j5EUIDgrD%^GJ(=1AkyUtf4Ie;
zrFX=kClUC`jo~@zcb)dT`60~>DtJ%%QG|8GA<qpW%CK)b_^A%-#}z|=t!&s~wY<F5
zR*F{mR=-@IyYi{h>dz7D86X6=`mvt<noCd&cN^PrSp7{!n=OH&s?8o2&6GC3tTMXt
znbPLRDsVF&790l=BfeDgVr~BTQ~ZVzjl@#mZu9@!G^ak8_l2I%G4`c8wEUdi7fqOR
zep!!n<rC(d-z?_g4oE!yTe|53xdgcOBJ&<m2MxSvOQ5y$qCH+(J1_d>>f4o<-WUB?
zJNMJ9?TVp!uKJbHY|asNUp4+^xss;LReQ`dWv==SQH_HOdR+CR8W*l~!<AS4MWX|j
zE9uq-hj51HN5AX(4OdDkc(2*6ltj4lryTCeu|hG}VLbccD|LMN_`nUVXcCSO$h6y4
zp-DJCAk!`&B##f^lBa?X4Rf%Dt@&CVP+nt8pgC9*xDgFhkJkip#Ib!>J_l<8xWajo
zOTZkQ!g?H4M^;R+CD2@)5|Eqfu6!;|2^5Nxen99jB~aE=-%iP-E6qig`Q)g&!&$*>
z85(3TTL#TS7AO>%06dVv0zG=_+k^~Uz|6~hejEqemGf*FI&3j7AaCxvDs%%gFOX}+
zwGJ8c0)e2uAP;4I4vy>tj*l{jPO9@YV^_ef(G`?ChgP870i}TDOwi)hfDi)AFYoCq
z7LMHktflRFV|?5bQ25O?KGK>4$WQYLqV1jl)+x~zXm3F2NO6mgG-UvJjZBb#<;PT{
z1XSIJPJbyI(_#wDH;eQYjrRqxSrmd1^ZNq|U+M6Xq8pIk4iH4!{Q;crUveRV6(fNK
z92YZ_zgM4EI(!vCMMb;SVjA^P*5SO`v-oI079Su&)X{(}J^-QBQ5p|z@rr2xC)i)k
ztG$X(*eqm%6E+Lwk`u&2_h!X3$ZuHld9|YW8=Hj$ePgrG*uNo`O3niGEvvks4lMrG
zW+8igYqL-e_?B2G%8Tj9<P3ZJf;yo48JmU7awedO$&5B&ITN_)W}VJWiz%IbA5gqz
zA2$7>8e;=4s^MY~#J(Ay!Tfzd?(_k{{CxmB{U<mxBKHETy{JA_dckI)iFhF(Yp`NI
z5id~O%+uk962mj8vtvyrbV&`mb0&30DcJBZWR;K~GMRgRR2z#*GeKFFfeK-npieB%
zfapIH#PZxgJ}t!ykD%jxW>8Wati-nk`Nky6Rf;DOJA%rtpi4jH#FL0p`6Pm9Y)M)>
zS=JQ9xj(&#5TD?jok3UC&nW2TL!!*jhHj;#+p$bTk@kkW_*hWd22|*FEGUBn5KPB{
z@I^7_!N-$q<}F(36DM)y%yV`rpC>1S?L?^t2$qw<o5gk!5IN>#FsHvzgdg|dD)3}5
zw;#U>qz1Sgq^rP_!QOrNEqf_NRtt-F)A|;-*s4)vwFKq4JKCV1mLTR>6;}<Yl}+iU
z4X$Vn%5+-FtJv0{Os9a5&>A#E3IQaZAeP2@%E+Y@X=hn>ckQk6v$hB-&&~#Ad4@I+
zaW)tfm-&DYaW+`gMgJ?8fWW)R{<pjKeECIN0`1f;+7c-GE(U|$rS&NKE(Uw{(#yF7
zw7tyc_s}ZKFWVAmRk&;qgM#sLP*$>~JQyzrQOVLCzEr`g@FVk=X}4DVXiK1r{U2=!
zv?}}<lv{1EK!+cLokRLVTmn3HJ;>&kX%AOiw?(KBaorX{CEE3%Jm)MG_g2Be1f4jN
z7FZT)Gq?2A?#ZgC4c+hu6=$`f8~&hWp*D0w4O$jzLr`N9EeoXzmW3Iab$zrc&Wahf
z3|bau*fMBYm=U_62Q3RTLeS$qx|lCja4|nOGq#_$QW-SYmXQq^b8Q)PF+VqCh{qG)
zfsDDKcv7Dv;sV$1Z-kT{W)&MyshO;<LVKnh1d)77mG%(!hAoWl-`@xsqN2f92zw)R
zOLx5w*9VvD^{ii|)~~$YmOyvw^`UHWT3M>l-Fkh<D^^QDNT?5CwWJ!bl&;AavlW$E
zdHG^n0^N`=4#}ztZ6INB$SjjFM%RLiL%sXzk8ugOAb*FY257^}-?1go{rEffDCmCt
zosc2U6G|1jAAcv*rC5J}OTY|X!L|<29x7j9OUQwQ6}E&NNLUe)n~+i^2NG6<l4-u&
zlq$J~>wWgXK&@B#`?iE!NO<3tkP8X#hh%vT7D#wM6b$R#xef+x#~KD|W#y}F2?ivr
zwj~&lusS3ku#_qWB&-gFqxxUCggl(?v9c=dx$<?kggi)CXG_R~gmv~P@*rUyjbbF1
z&=C(9*s&_@cjX&x2_4~!jUjm=TB>w}gpHy6uF@ABAz@>vw444Qm(U4s7ubYB+Qa2r
zYzdv9!xmeIPLQz09z`ce*g~VA)1gu&ADcT?Fj%|0qQRDs4+#yngnUS72+8UeERfI;
zN)_oZi2yIa5gvPeuvS;mWQ!<(h$dS^0Yo%~<ffohDS(KkP_)pRt6tPFnLiDoxw_Am
z;f0KSAz8we;&mv&+=MiR7c%yR(p|(MVX5MyBfj3ZYI_GZ+ahq;<!TPeH#BGi5zV1c
z4=KV25zV1qee@03VZj)t;W-^rzRe81P3!OeE&gduQWKh-wnt+^%;}IUtic8`r$g8l
zQn?R^a{qLw@Y|3$=pq6Rx}Zo)$n{6QeJxe|RF-^ow-zZm6Ot=Ch!A@wBoABwA@)oN
z2QG(&oddKXD!oTLQhCnSEC9{U*_s6);+(Bn03yzjW+;^v*Dcs^gd8tq?!H&s>dgHy
zgnQBPB>EOw&98@8=sxX*itCnaP@(g6D-;1C`+6u}oOu93_Vo}>SkDU?_&T0_eV=x*
za(q}C?iPNiHa;v<HXt<$8{)hJ5F*BhaejQ9)azz=UJN@}rqcu3F=vMt!>C<;3+=j*
zc6F@XL)sH%bzyk{0wP4!g#+TW01%?;!q~V`8P<&!`&nTnXg(Ak%tk+;C0WBmTCYlw
zgh$Z;cAI4>2FMxY+71Y5v%*;0r_fnlcf<2a*zpGI^RPC#!z*Fz^dChh-AS+4*hdd*
zkCnU@mL(8~kn~zu))|11^ja8o#wTQ@?xffP_Um702TK;%Jk<MwuqMu@&;~pU!Z@FL
z9G&+tJoRD6CidH3YQv3s>YUO~4|MKX99EXG{lC=yT#bK;@)UH)T5R<X2w97%e~L{&
z#OC5~$7Nx0twRKUt+OQTdM7NdbtDaZZ-?czjwE3dx-?A336w&6&`{nDEBR(&m~Hx%
zR#FULDM15zH!Sa#&=SJl4dZT!YK$IKpRHu(BigM`t^_}yiy(q!Ww=0G#sY$6WmrCY
z1VmM_GMsvl*MS82ldzTH^aH#OloYB1SB8h($0u1260s)C4>!vI5X@`Ba;^cQyES1s
z*8q82>u|FN6>}RG<vyx8AKhrh42X!CjaJM6Ld3?f%mRQAu`!IfhKqD}uHo4dcI*iA
zH%D$-infH^KEA8WrMTG|R#JRd$zJ-k<_QAwfxGb$*4at}AB0V1E?K34t^Bn%B-ns>
zCR-5^Z5qPZ$=}Y~05!7w$Fw`cjbVk)EwmvkH`3gihY)rf*x`m9pRm!7X>&X53cEY#
z{{X8&s_bUPztKhqcZU^T*%A?~yD9pA!P`KEy=>QSv|k1HhUMPZ;4175V-JJ*1{QGa
zXH~<sr-J*XjfqIqFfOi!@;0!~0k&<pc3bd3SYCh`eEWJJj4Xm98?eCc%`Ek}HYnU|
z%b{&+Gs&r;El!!?ITCi%WF|kZd6b+ZlqUGmc^M7nD0_W`wxHyw6^bB2{i9*IB>{vM
zN5j~X?4T;KjO^Qz`STOnPG?1n<!MkUTZiQ$3`niQ`J%!Dgp8JOJfUw=xeTaxE%W?S
zT9vE(nk|D))31eP>0id<`&u|C7IHwyxE97jPUrAtghsP>|DyTX%};Bd($NtasQ7}u
zM@M9!0#eI}6{uxoun7@y3J<`M%yEE-*9j4sd;uY8LPW+ZAS6wQAYR9jReKtqmm-c8
znbCjH6eahih#C=A?MYUhfgb3^V#yyhPsxmkoaXohi8CV7wt$d0BLds<SMxo|wsSI1
z{84+{Sw1HswE`7(nG=y`-hk995)rF9AY{ym;H}Vq!7e>1g66VoqqP62m}^TQ%g&9+
zH^68E33DTUu^|S8gt-yxyt*gB`pl|7X`7wp^|lO32lWwo(1k{jQ6I?>$q0~`BG?p>
zcY2bM7n64)C5tV`fC!ewmSX_HviOE$deSMv^7>~rXXSFcQ#v(VZaD-^AYr-X5I{&+
zP7c9(uef>{o>dWC^j1En9m-o3Q492`w1V`4KRjz9$_K3YuUc(2{v~oQ=#aK1B6BVv
zq^*g_`+Pto{xy;O4<aJ*6M-lGwGr2bh)DdB2EKI>nfN6MiGO{B5<gX)y~y61Bg%c|
z&@k)sH*MHR0I{s%6Gph%8X+KWDr;~+$le^0@8toJ)Hg@M!}zTUL2+xcITE>7Zx(}v
z|F=i*bYQ!aoq1l1v;PjLd93hxZFVup*2qbr?Ga5}X7=I%uswo{Hrj3UBL6qB)6Z)U
z4QjIWB=<L2L5Mbx&=iS?x)6|fBE5R+FVh2<-iGIkh~wp`(;UiPN_#pkn(-f6R_+%O
zHD64T-ZVuH%PBJ8e>6|e!<KIN1j&c3DFO(|hiQuZOM!B|p}FUHL^&C8nIEzatJJ$Q
zjsK(R&T7!a;LrjBjz{E!7(fU(9+3}X0O8i-k<KUKRyw>P0=d<7A|fBeNDAzDA|fBe
zND>5{h~Pm?7p@2zoQ~i@OlSTeX4v1g!eU@c39|6%h<p&!n_KvF1lKvwa9&7iWv~BT
z8&%wDvye$!Bl4K6H#cc(1jl4a&Vm`$#`^z5OFz*T5$B%Jon};<H3<PBw~Zzt-LU~8
zTG}H1TjfCMnI<-pZIQrGUII`9c@)$Z88n!0n0wPKJjWXUq4ldcXE`54qFO-;h;GkC
z<Teiw-JXl!kh_LLus0=}ORS<=n^b<u7C~n!muwMqrgAA_h;tpVK*Xg8&UNVAt2dpg
zTxQB>t+e8@ErHHdF5435OyzRK5NQxBkZ_sO-~w8vdQ<r`CNpZZw$RyYO!S6Z=oDp4
zRGurM5tznAu_p6JK)rE_;+YgxrbVqsK#SP_j@7PLgJ$`aj!-5=WzGNt1Wbx{%;&`-
zAcAXBv|w6P<P0M4oH04-ni>^3L(;%EB`R}<Bq3+iMk!}d3hhm&G1H^`c|JRNx7MjA
zC@?HY;-wcLRGA)?>l`3NPLEpaTyHvwVNvlEe8mfz=a(!ha}GYik}N8hIY0<vQMt?k
zLJ*6}vMdjkeAKZhD#|k2oxc)w8@w#bqgnhayJ><}5_~nP@MPi!5fkIpD3Zxts88}}
z9?WHrOwjHL&W$R3??FVgnHv>PHUNQMXAKjyVZqm<vK#}Es8N(-k8n9qY60t3qy0L#
zAS%ncJYEYeh@z~+(+|kO99hVg)IiR{sKT$7hzL0gqqth?$=hJ)^{il`);nAul_g}J
z;zpbLC`!l`NMG)bNc>U9?#!r(T4|QChQ^EIWp_s!?^+Ck4cyu8-a<f(4Ok2u5JJ|{
zz;X1B#`w6NMQXKy!Szx3!U;sQSs%p=#mOJq0DZu!YqehlKd=S`B2j5j_wzOw_$GF)
zR(mkG$udqyKJZOsoWZ;e2EK(oHB}oL+!9sz-4le<z_&y(EvZoKNE3S-+c8xe6x<e-
z#UzMmvn`5Z66+M&Ai%b><TUN!;P$92Zb3ww?NJoBIR8K!%*`Ea&NS`r;10V@JG9wB
zZ7_e)29s|mbG@jQ26xJMB_i7Fj3N=^&IAxAmb=*fFKRu*yKMVtXtRs#vzlt~PKM_|
z)Nz>Azo@M;4n*;IjQr4v{O~cRhVTO*Obsl?4G0+@)41>8jq&jlcH|}PuHYw@E}gg^
zJ|SKH&f9?FGj{uQtvdLb<<Cys51)}gt9Tpu;R|+Rx;8lWg=N1^+z(%n{qTexiop+u
zqDmo7E_YAW0_=Bn+AU!a_}eY|jD8M9qcOde>XkmYO^Q0kvrL`#UG7&=)GNFy??b~o
zg_%qB<FJ{Ur~4@@{ooTub1Ew9M?ffbDvHICjw<_5$h9Co&93bJomlnf%+w0YK@g<|
zJ|hHLtZ5I(o6FZWfRNQf!=)75hk~$`U73j#+-ggp0BMcNt4g$igw|-Gczpo~39V7Q
zzL-KOxDUY#nScAIHq}{jAu87_P{DK|Dho$IYDFI3PK!q$GT{{#VcL$0D|WwhDR3n!
zk6Y0OBCbSDQNIF0#FZ%OS4y0HDA2D(`6iYPn2oK$H7jM}6Bw^qDH9Nk*KVZDJ~X;<
zF|joOfF|Q&H;hN?*SMI>nfMAx<6<&r0z%Tb7;@%V6`t*jq#1Lp&Aj`v=5*!060^1j
zeaW?R(F3`5_*~6XJU1p+7JP!lxiRTlKuDY$gKOz2OJB0|d^UZqc1Q7in}s|$KPFF3
z&;~5?V>r1Oz**qIg{<8?t*UCFHH^Oek<LPE7=VzlFeb}QKuA~^L%F${imkqYo+UA5
zc`S4I9j(M!4FaqHidYQ+!M-FWS3^LsFNw(t8W5}Dl34!om{<*oz*ob!W3FW}u^LJm
z_?E`xYA8uq4d01bt6^UXi}#!{@$L!;o_a4PS3*Fj@m@@>gn$tDUd&nv`%*xx5pHGG
z3pCH5HMTjZuvuf9gW_Y2<yA03&>He8Ub4FS8J-O>$Hy_JIUvlgt#bR>(FI!9+zl}`
zCMIq_^6n<#-5vlCy~#2aAVhDn+zSZNo5;P-!_fW64cl1j8`^&sZ?jp*z1w1%c<qli
zVA&SKYk#^m>PHi_k<~5Keo@>QlV^M&f~7GQ5JeFnSQ=v}is*SqKSDcMr#H1hB|Gh2
z$cH;)nz*Dx8)_6oCa1~NkL<o%n4Qgg6O(DTWp#W4<8I69fMDEx!|MIW>Ia0?2LnLP
z0n6-w{G*&qfRJ>+GCLq79U!y+24?SXcs`9eCb67F+GDw&#?*u`c7HPV=hD~!5cs(@
zCO`=M+%h&G1b$A&F2b1llZ_6syWY~e79X-%$k>Ohxr8=gIYe{mUd{qzA7KmM((Wrc
zVzZE-BbI;qb7LPN|Lmiyu>NH2)=YG<_K{N2Y7HG!XxeH;93W)0#$+iCNK7%TT`e>L
z`;+<4XKq=lJ>#r8Z_A)#iu1M%a>V(Vyw(E`WSoy-P2!WdKOEt?5>u}8NnGZv#=ph%
z#TPJMv8FE|7_V5<7ZB6;N-Y1noW4Zh)Awr3^^=^wk_NsXt?4UCn7-F;OyB;LS;rRs
zte6EwkVG*H2vx=w$|(#8kz)(3Dcqlmj){dLGXuaX6ANW#281;x7Rq1(grtduGBX20
z(!@dp(+OI0%MDL$p<@9ncvm}~TU)4xMKqODG}WO4B<3CfkXTnJ%>)REb%ioB143e5
zA)<*wqnv`^pX`hGwEN2cY3T$aB>dCT36L5U8e*`3knqn!R3CIdSWYu}Hv6~taX&cQ
zmOv((T_}GKjW&=lyD%>9C;=g1cA<RRS5D}aSu3?j=_`dYDS`%$S1gMHQkxqVEvLwu
zFD(kdk+divw4ZNlPw_S1vM9bn(tNV$noh82h2i<A(D7|%>MAXx=YCXZl`$1$(q>^&
z*0vePV9l0A@d*-}EsFv|Vl!EE7yUA=g2uWmQ@BOj)3MjGxEv6uM2`E4`0f@EOv~c<
zwGn?9RRJq{R>zg~ahJK0|A1prX78t(*I5msh<7xBgw=7mTmeGD>bP9401@x2<N533
zV!0v$kM~U6wJt7}D@g<2nz&r9Bnk1pHcrdcygWVxtei*U%GYsMX5?qutJ-e?L>X4W
zGr*C!j8{M?btEq16%fLY#8Lgz^#dT3Iueh44W;M}I1!)}V&kj0yc(+@R~~00j^eQG
zxNR+R+VQxYP-p|O$K%$7s-W!LvS`IooVK;tno(MAu{ERg&|+&w>7gYKzkf?JsnYPA
zi92f8nPXZ@?wPpt2Dy^lem>4;QW*dwp0^wT2#M$8awY*n;`uoI&VQd;N$$DK)|}8j
zFS%^<klQcEHU9F;g*M>1953+dwNx)w(&V|uHl5U_m0XL<Co&*{=UTj-_<0Z@c&^3q
z;)~X_N<yO(;+6vdwj7<1K?VrU(FtibK;G6eTP2x#0&})%SBBu<1QOD%fEen8gmfz)
z1Wiatw*o@YganMYK!NcF;77d)M}4N<X)WT+ot&_K&N+arH$B0v*B<~Pr{kwNJmLW%
za(Y5q4-g`!Ct$thv{nqjm_00^yqa*CbJ^&>sc*5&x7yfhkSu<(BumKfM|<$IgbaT`
zL>f!vznT!?PXr$RvlFgY5+eL14SX*rWcW)G!hcS}s@4XOQ|2Y?bYBJv%nXvqfPheC
zo@Hi0h@6+O%shbLn~Pv(XT_VAfkA{d-n0x12oY~u1_mS^GBEw-XCUtE5{@aX@{IOK
zd~pJ4p8m|uK)mUCC!xHXaOrF5P1ivAri*B7!x?SO?aLCb+xTgj_=I6BPq+sEjDk*9
z5XBO=GNG)2xc{-F!3RWQ8~#`O?>kogA70w}uTHoI*wV-WnS^WT4QU$^%4SHzNv>25
zIgMznx=s7I`h$dgaK@D*8*faw{@oTwR@;<tJ$ggjmV~k$;_!!|#88owB#BNwxfC+u
z)`UyE784Z6-Ij3mvgMLx8xpQa-y4FP63T7}{(~hLzbhvaJNv!%bkCg$SEbENTiy>7
z@-GGP4rnIqqAvMvcOXUlei89y0PyjCD`Ekm-hM0M0l~VTBA&ma7)U|X%pO0d)fG3}
zJQU^437Id@20YCP<O_NaG?1)zkOj|c{kk2*Pwy}yHxa>dFd@?gAXpA2kS?y%%e{es
zp0<Q?HZ$qG_LF-A{wXp!K0w<xD<T0Qrp<~-K!|Be$V?81`PG()oyGj3Oil!m$-hq^
zlfOXExCT;w8I$?uiq<ZxVodTzKeXK$layC4XoP;oBy+@E0z^M!lBgyqyA7nwK0YZn
zN&w&-pOn)M5S-(aGP?nSb9~a8b^~dSPELv{3jn%IwsoNW@8qORZ}<vHlan&N0YcK`
zBxc{6H(~l!8J;Cc$AQe6>)Jw3&XOd406UJ31ggl{D>Bb`^cS2ZE0QuXfeK+Ok{W+>
zON}6GMUwuc2Br8a^3F;YQuQ}WR@yw|=9Njg_eC4<tW2U_pDa3ppVw#3s#qnutxt;A
zy^utr)+h7DABX`2)A}Sl)WkbdaZ$86seHti>-vrko0ICz`h8phG~3Ev$krby-kQXp
zilCsW;@;kx%uiX68YR0F^S8QH<j4l*YOhxmHzZwR?E(?qHzYfW-5DTQ8j^UAL$7G7
z$Z?HqRD1pQ;>M&)yiEfUER9L8xC8|ROJfq3p!6=FiX7I&j<wfsEpAG>#9v4Q5iCu~
zJaP952$rTKUf0p{-YTl3KV-kSNgq)BVbUd@se=fX50gQf;WRX=nLkXHSIXhzG;cTC
zdJ~4fJLwWpSH+*H?@szkB@3OT?@o3v<L{2E=x}c@tGZbqSiIL}p|kV7HVd7d?<E%c
z^AA;Y-o2kKyIH@#bbrz%t`$K9%l>46_!B;WVA-E6xkaz1-$4yBJV%p`shN@v`kPtC
z(IoD*=~3q(M49J!QaQ;^7<&I|{7dYhL5H;C$qvGUfRJ`PiB}_3Y5`(`9#5Jllj3HG
z2>in2L=um9Y063pLhD2lH(&IZbtH+NQJhFt4$#k0APu50`!1>6X&!fmXPIgNTb-vL
zd<+zkIPe{g`z|T(V*z=4zj*Qw2)({b;>kaG0}%HAF4^l2{wGTa^3T0**T>SjKZsJ=
z+05yVy36_aS-T4gr?b|4MI&@^HYxXrfRJ%Ei9Mp|f(~rYCPUq27yMr2Y%<(UzfRA*
z22lpANh!6NyYuybxU2C`Yao;XYf>^RpdEUtN!{p$GGI*#y$AzS2CPYiYEz=ZKyy)H
zOia0^q(p@wY2cfbk`;y|p~9G)q6*`yY&sgwH#~JI#}@WbKtE#CrQCjgC6P}FW=2Zs
z!e5HS0ih5upK)$L*lI=!=OHh_binvJJM&^^-EanHrxgA~n5bwqJB260RlE_<%WP9n
z9~^u+r4*6H(1xu3atgZ-I?T=|bIxJmklr&sC#96gHuOV-IjL^l^@%Rt2svS4N*QWi
z&SLw<c?M+GhH&Uv0TQ3xkixGjQl)&8M-WmMrn(IwuW$%;7pA%o*70W@fMNPK+4_jy
zKlrAt7ai!oNqPz05oh(RV-&jA+j`M~em&`h*#bGp2#eU?qIzX$QA**zgCio^EK1>b
zaQM>_)Cd8xEOQ{Lf8-1;ODTNT6BVtNrMmafKNcgzw9jO=7U~Zxp^U8)9qMODCo1#7
zg_*vd^-AiWht{VQ9_2(tqxGpi{q(D%5w5Q`vyzm4EwtIzJR6NRr@Hk(Vp3d#4NpVL
zv6tPM)`uAlDeOS#+;cF^{>GHj#NJNpmDTu{$XKAme2poe_#rhQtlOBvVLSyVAcC_o
zRoH~!r0R$WeD?21$=NR{&|pVO&VEUv*}o%&*?$45gA@JiNhxvjq%+KZU!=DU0TL4i
z-{7@9)`S7%ZRPVmK<Kn5g=?J!6ypVk=RnHQl5(0eAnE=lcOF~bMW1LKNV$VN+zTk&
zKZbe4!>CbRbx#mb_z)kV>&N6nx|As(wVGL7SG_dYoKkqMAtKr|r;uyPcpD&GmUPv7
z1wXOnP^^DKa<DrG3v~RH^(fZ6gg&(*0YtR<lp>)9FMQAlv3@f1_hQ<zo=hnsqCrKg
zlPMfq&?EwcsFSIlxAOoe2o+DJdfi4h?Dz~*onqU%>BYfQ)*Jy5B2Lj98O7Tmz`tQP
zch~<M`X;6HmU1b;ze)A$ug|1dDxe5I&0g!S&ni4^>p~HJnsoUEVrhusX-zrCr=8~Q
z($atEp;yFPQ}}HO)%ruQbvTz&E~Q-hPxKcuhsdo1(K5Sx=zn+iI-hb4;-MqHLHdQ1
z>(4)<V6Ycc*gMcVJcOe3N=o^WRrl1(tMM=KqejqSgDa_kSiJ$kbtQ$DQxv6uh|(*m
z<c~5+iNK@usuiV@g5IxMQ7TCkrB^9R`DS|v!of2pt&B^%%tqF)mww<0AQ7eb2D6Sy
z%O92kLZ>n5D9>w9f}(Ux8u>%$L>tF3=^o?KqOiqx=wv{Hv1!*W`fNHZ7;1PXrXBxe
zqk8KsXJQ(EA7?tPT|+5;r)E0!(es=SPfg2u5LEOxH7)<x5+M4UnnpcNixnVp(bTk2
z!PjJhD5H6cymI}Z5DWg9Y2{wCiT%Z+Co*sJ)p2_Pir5Jc<pY|TmM80gV4s=B$*t&s
z7TlTXynDFs@Rd3sN=Nah7bOJ)oSE)nX~7$DF$3<>FX3^n+iQ5{r5!5~Qr~2ShdljU
z=Dz;8_cP|D<*P<74gU4ClID}Q5D;1e^II)9AUb$Gjaw}|odv|l1#EVO{#a;1TCOl4
zqRj&G#3WkJyfjf4W%4TZY-eZ@B=hM2Dv{HezsqSlcxeK^%_;`y?}pw^EBplp5z*-F
zG+tor6^$@~m$RD&>ia{>(+ZD9G@|*tJdJ2<5REWH-)BD#)Eh(Zrxo!Y)5~Y*`)ORJ
z4}|A$H9VQLV*~rTN*`ck(s%(x;eRWI|Jt;&o>kqd_o@a&zyXW04-lhWn=TOLDIhdn
zo5ra)1sos(Zf!cc9sx(Gnh1OntV_#OEh$iTU0SAUNuo)xE{#d>7(C=NJe$&v9ch=-
zyf@5-opgs-mxpzY<qg(LI&4b23we_Dk)JlR`#=nCPRmpVBBXClBYoiSl)8Q7o-OQE
zEX~0!X{8T0JcwwsC5;PFT4;UbhOO+}V7)T9H7#=$h(t{zSJ5rKk9@O@4I82l3T{g)
zy`&uS&9-#keq=ke;d_haL-YZ`hO|uNAfin}8i|~qIru1dZfEU>>b-;8(@MFNL%DN%
zdcZ(^FmD5!H?k2!^`V80b{oo_jnwAf;l0}o&xdKpKE&{ExPg4^*iij$<HIy=G|7**
zkso)b71a8-B8}l+;&nObFv#w7RP2rbF|OU|E?v0?0pY>j>EgZ8gGAsS++%rAQlQHo
z%Y%|c9^6A7Y@;O-zdvYBJB~xaudzf%cDYUA!q9DcqtTpphqwz(a^WZNotSEX&<>by
zE8KwS=aY0vDec_=@$n!Vc)MN^JZQHeUmm13op~Fe&)6%s>!ILhX<5UV+?SuF`}CD<
zFy_zMXVm8Nv@9-7KF>Z+qqr>Oa^TA^Sf@MmMDPpC-zN9v7vyhxLSvFI53xt?(C>*H
zviuDqG&n^57W%-Khv7sv_jcVIr5zxUSPo78fa5TQSeT2$YWO8{-l<1}Us{<2f1L&5
zzNAbN=WUPykFcsc^<?l!TH%lUpa)fZN78uYC)%Lc`-)AVHecB$pjz)MGC_pPL8<pO
z+jXZN3x1te#IldS{(&}Mr}6VBp*kwPqpba1Fw@br!hgnvzNpeWn#Rw#gdF@N>=?V_
zE<ILw%pO;Jv^kdUSFS&aP`%yooJu>sLnJ)R1EC{Zc$a>MaVo6_c&Oe^p?W&4d@E88
zAWQ}<-arDvW~bAg#cO&%IPWwiF-kdr2-wr<)VDHViNFK4#R^zSfkrJ>z)BJYYzqbK
zIlLNn`wh<zX-BQQ$Y~yTG3QFv&;A_HvolBT)^AgcAFPP=Q^a1r5wU<!4_HJjAUe8C
z(MTnkpCa}O8#7Gr61-x$0z|aALasnrj5a`5*@wgQs?b$yX#kO^v^4Ca1;kJ3XH2H(
zKK*`Ya7>Y0W<W)&F+~WDD&7b&JC?nCzdkrLwnzq<pU3RjA_UnOAqhcSlev1op5+YH
z6v?H?&!e`c2>syzmimJarm)Tr>g!`uij;mlO@WB+rW93F;(|?a-GSe@6gg(XUIWQo
zomkF8dRg9!MQ|&X`*)CArxz(RirCV$-kVK(NcU6&3%BAcOf$Vmx)l%uoL(f|3JAAO
zFG|fQ5-SN2xLfOr<VqqbP^hj*t|XE~ZmlbVTR$MT1`N;KBF7uha+xcf$$MDur5JOI
z+?{#)36L}A!JMK@AN@;|>40K+#z#n>M>e6^9w1-7&KCYszbEv1k=$s3h&Hbmp}d|#
zb_<Z(=Chn%=~ILA?M9qRjYjY`80rGH{#W{wp#?>9UIn--7Zl+SKKvTCz0>g27dcQ1
zJfc6ES6_r*%1~0jlT7+nk+P(SjmC1qjy$4!o&grmO7RsMzEvduf;1rdd8-I-`Dms9
m!lZ8%C6-8&5`mj^v1L+8!3Y*xCY2;I>0+3a-T$Dw&;JK{kuP}w

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 4b73b207..cf2442cc 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -5914,14 +5914,14 @@ type PushResourcesRequest struct {
 	// code invalid_argument like any other malformed request; it carries no
 	// catalog_rejection, because no entry was examined.
 	Entries []*ResourceEntry `protobuf:"bytes,3,rep,name=entries,proto3" json:"entries,omitempty"`
-	// DEPRECATED, never needed, and ignored. Each entry's domain names whose
-	// resource it is, and the caller is the party that signs the request: the
-	// Exchange checks that the verified signer may push for each entry's domain
-	// (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it
-	// empty. The field is retained because removing it would break the v1 wire
-	// contract.
-	//
-	// Deprecated: Marked as deprecated in fora/v1/fora.proto.
+	// DEPRECATED, never needed. Each entry's domain names whose resource it is,
+	// and the caller is the party that signs the request: the Exchange checks
+	// that the verified signer may push for each entry's domain (see
+	// CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not
+	// rely on this field. The field is retained because removing it would break
+	// the v1 wire contract. It does not yet carry the `deprecated` field option,
+	// so implementations that still read it keep building; the option follows
+	// once they no longer do.
 	CallerId string `protobuf:"bytes,4,opt,name=caller_id,json=callerId,proto3" json:"caller_id,omitempty"`
 	// REQUIRED. Bare host of the recipient this request is addressed to (e.g.
 	// "exchange.example" or "exchange.example:8081"). See "Request recipient" in
@@ -5990,7 +5990,6 @@ func (x *PushResourcesRequest) GetEntries() []*ResourceEntry {
 	return nil
 }
 
-// Deprecated: Marked as deprecated in fora/v1/fora.proto.
 func (x *PushResourcesRequest) GetCallerId() string {
 	if x != nil {
 		return x.CallerId
@@ -11181,12 +11180,12 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\bcurrency\x18\x02 \x01(\tR\bcurrency\x12B\n" +
 	"\tunit_cost\x18\x03 \x01(\tB \xbaH\x1dr\x1b\x18 2\x17^([0-9]+([.][0-9]+)?)?$H\x00R\bunitCost\x88\x01\x01B\f\n" +
 	"\n" +
-	"_unit_cost\"\xcd\x03\n" +
+	"_unit_cost\"\xc9\x03\n" +
 	"\x14PushResourcesRequest\x12\x10\n" +
 	"\x03ver\x18\x01 \x01(\tR\x03ver\x12\x1b\n" +
 	"\ttenant_id\x18\x02 \x01(\tR\btenantId\x12=\n" +
-	"\aentries\x18\x03 \x03(\v2\x16.fora.v1.ResourceEntryB\v\xbaH\b\x92\x01\x05\b\x01\x10\x80\x02R\aentries\x12\x1f\n" +
-	"\tcaller_id\x18\x04 \x01(\tB\x02\x18\x01R\bcallerId\x12\xd7\x01\n" +
+	"\aentries\x18\x03 \x03(\v2\x16.fora.v1.ResourceEntryB\v\xbaH\b\x92\x01\x05\b\x01\x10\x80\x02R\aentries\x12\x1b\n" +
+	"\tcaller_id\x18\x04 \x01(\tR\bcallerId\x12\xd7\x01\n" +
 	"\bexchange\x18\x05 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
 	"\fext_critical\x18Z \x03(\tR\vextCritical\"\xe6\n" +
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index a5905471..80a4bd10 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -538,7 +538,7 @@
   "properties": {
     "caller_id": {
       "default": "",
-      "description": "DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.",
+      "description": "DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.",
       "type": "string"
     },
     "entries": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index d5696dee..2e0d3ba5 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -547,7 +547,7 @@
   "properties": {
     "caller_id": {
       "default": "",
-      "description": "DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.",
+      "description": "DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.",
       "type": "string"
     },
     "entries": {
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 4b32c690..d3fee2b9 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -2155,7 +2155,7 @@ class DiscoveryResponse(WireModel):
 class PushResourcesRequest(WireModel):
     caller_id: str | None = Field(
         '',
-        description="DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.",
+        description="DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.",
     )
     entries: list[ResourceEntry] | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 91b754a2..056e3d8c 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -116,7 +116,7 @@ export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MOD
 
 export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("DEPRECATED, never needed, and ignored. Each entry's domain names whose\n resource it is, and the caller is the party that signs the request: the\n Exchange checks that the verified signer may push for each entry's domain\n (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it\n empty. The field is retained because removing it would break the v1 wire\n contract.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
 
 export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index cb7f9f07..89734850 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -5,8 +5,9 @@
 **`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
 each entry's domain names whose resource it is, and the caller is the party that signs
 the request; the Exchange checks that the verified signer may push for each entry's
-domain. A sender leaves it empty and the Exchange ignores it; the field is retained for
-the v1 wire contract. The SDK docs, test fixtures and the catalog pages (reference,
+domain, and a receiver does not rely on it. The field is retained for the v1 wire
+contract; it does not yet carry the `deprecated` field option, which follows once
+implementations no longer read it. The SDK docs, test fixtures and the catalog pages (reference,
 multi-tenant, request flows, content sources, verification vendors, publisher onboarding,
 deployment models, threat model) no longer set or rely on it.
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 9c51cba5..cd8f9324 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2997,13 +2997,15 @@ message PushResourcesRequest {
     (buf.validate.field).repeated.max_items = 256
   ];
 
-  // DEPRECATED, never needed, and ignored. Each entry's domain names whose
-  // resource it is, and the caller is the party that signs the request: the
-  // Exchange checks that the verified signer may push for each entry's domain
-  // (see CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR). A sender leaves it
-  // empty. The field is retained because removing it would break the v1 wire
-  // contract.
-  string caller_id = 4 [deprecated = true];
+  // DEPRECATED, never needed. Each entry's domain names whose resource it is,
+  // and the caller is the party that signs the request: the Exchange checks
+  // that the verified signer may push for each entry's domain (see
+  // CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not
+  // rely on this field. The field is retained because removing it would break
+  // the v1 wire contract. It does not yet carry the `deprecated` field option,
+  // so implementations that still read it keep building; the option follows
+  // once they no longer do.
+  string caller_id = 4;
 
   // REQUIRED. Bare host of the recipient this request is addressed to (e.g.
   // "exchange.example" or "exchange.example:8081"). See "Request recipient" in
diff --git a/sdk/go/connectserver/handler.go b/sdk/go/connectserver/handler.go
index 141fe8b6..7b1ae4fc 100644
--- a/sdk/go/connectserver/handler.go
+++ b/sdk/go/connectserver/handler.go
@@ -65,7 +65,7 @@ func NewBrokerServiceHandler(svc forav1connect.BrokerServiceHandler, opts ...Ser
 // the Exchange: that the verified signer may push for each entry's domain (the
 // domain's publisher, or one of its catalog_contributors), that tenant_id matches,
 // the ingest-tier term checks (sdk/go/helpers), and the per-entry verdicts. The
-// deprecated caller_id is ignored. An Exchange that resolves a contributor's key
+// deprecated caller_id is not relied on. An Exchange that resolves a contributor's key
 // from the request narrows the seam with WithVerifyGate and verifies
 // inside the handler, where the decoded request is in scope — WithKeyResolver cannot
 // carry that policy, because KeyResolver.Resolve is handed the signature's keyid and
diff --git a/website/src/content/docs/components/content-ingestion/sources.mdx b/website/src/content/docs/components/content-ingestion/sources.mdx
index 5c30fddb..7bcf8762 100644
--- a/website/src/content/docs/components/content-ingestion/sources.mdx
+++ b/website/src/content/docs/components/content-ingestion/sources.mdx
@@ -252,7 +252,7 @@ CatalogService is NOT how Exchange operators push their own inventory. Exchange
 
 ### Authentication and Authorization
 
-`PushResources` requests must be signed. The request's signer is the caller; the deprecated `caller_id` field (field 4) is ignored. The request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field.
+`PushResources` requests must be signed. The request's signer is the caller; the deprecated `caller_id` field (field 4) is not needed. The request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field.
 
 The Exchange verifies the RFC 9421 signature against the caller's published Ed25519 key in its WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and confirms that the signer is authorized to push content for each entry's domain and the specified `tenant_id`.
 
diff --git a/website/src/content/docs/components/exchange/multi-tenant.mdx b/website/src/content/docs/components/exchange/multi-tenant.mdx
index bedc8393..9c8751be 100644
--- a/website/src/content/docs/components/exchange/multi-tenant.mdx
+++ b/website/src/content/docs/components/exchange/multi-tenant.mdx
@@ -229,7 +229,7 @@ The Exchange exposes `CatalogService` (PushResources, RemoveResources, RefreshCa
 
 1. **Verify the RFC 9421 HTTP Message Signature**: The request's signer is the pusher. The request is signed with an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) carried in the HTTP headers (`Signature` / `Signature-Input`, with a `Content-Digest` over the body) — there is no in-message caller signature field. The Exchange verifies it against the caller's published Ed25519 key in the caller's WBA directory (the JWK Set at `{caller domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Invalid signatures are rejected with `CodeUnauthenticated` and an `ErrorDetail.request_auth_failure` reason: `SIGNATURE_MISSING`, `SIGNATURE_INVALID` or `SIGNATURE_STALE`.
 
-2. **Check the signer's authorization**: For each entry, the Exchange resolves `/.well-known/fora.json` from the entry's domain and verifies that the signer is that domain's publisher or one of its `catalog_contributors`. Unauthorized tenant access is rejected with `CodePermissionDenied`. The deprecated `caller_id` field is ignored: the caller is whoever signs.
+2. **Check the signer's authorization**: For each entry, the Exchange resolves `/.well-known/fora.json` from the entry's domain and verifies that the signer is that domain's publisher or one of its `catalog_contributors`. Unauthorized tenant access is rejected with `CodePermissionDenied`. The deprecated `caller_id` field is not needed: the caller is whoever signs.
 
 3. **Caller registration**: CatalogService callers may also be registered out-of-band (admin API or configuration), for example with the domain where the Ed25519 signing key is published (the WBA directory at `{domain}/.well-known/http-message-signatures-directory`), the authorized `tenant_id` set, and a caller type ("cms_plugin", "intelligence_provider", "syndicator").
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 9d975fb0..68b6bbf7 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -11,8 +11,9 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 **`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
 each entry's domain names whose resource it is, and the caller is the party that signs
 the request; the Exchange checks that the verified signer may push for each entry's
-domain. A sender leaves it empty and the Exchange ignores it; the field is retained for
-the v1 wire contract. The SDK docs, test fixtures and the catalog pages (reference,
+domain, and a receiver does not rely on it. The field is retained for the v1 wire
+contract; it does not yet carry the `deprecated` field option, which follows once
+implementations no longer read it. The SDK docs, test fixtures and the catalog pages (reference,
 multi-tenant, request flows, content sources, verification vendors, publisher onboarding,
 deployment models, threat model) no longer set or rely on it.
 
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 910b451c..1a3a2c31 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -431,7 +431,7 @@ Every pushed entry is checked in two tiers, and both are stated so a publisher c
 
 ### PushResourcesRequest
 
-Push or update content entries in the Exchange catalog. `entries` carries at least one entry and at most 256 — an empty push is refused rather than answered with zero counts, and a larger feed is pushed in several submissions. Both bounds are wire rules: a push outside them is a malformed request, refused `invalid_argument` by wire validation with no `catalog_rejection`. The cap bounds one submission, not the work of checking it: that is bounded by the maximum request size the recipient will read. `exchange` is the bare domain of the Exchange the push is meant for (the recipient-addressing rule), and the caller is whoever signs the request: `caller_id` is deprecated and ignored, because each entry's domain names whose resource it is and the Exchange checks the signer against it.
+Push or update content entries in the Exchange catalog. `entries` carries at least one entry and at most 256 — an empty push is refused rather than answered with zero counts, and a larger feed is pushed in several submissions. Both bounds are wire rules: a push outside them is a malformed request, refused `invalid_argument` by wire validation with no `catalog_rejection`. The cap bounds one submission, not the work of checking it: that is bounded by the maximum request size the recipient will read. `exchange` is the bare domain of the Exchange the push is meant for (the recipient-addressing rule), and the caller is whoever signs the request: `caller_id` is deprecated and not needed, because each entry's domain names whose resource it is and the Exchange checks the signer against it.
 
 ::proto-message{name=PushResourcesRequest}
 

From a383c534b3361b3349b7804e681989b2819855de Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 01:31:49 -0400
Subject: [PATCH 104/164] Describe a metered purchase's final charge where the
 SDKs still said it settles

Four comments still described the reversed settlement: the Python and
TypeScript estimate-check docstrings, the Go verifier test's comment and the
doc-conformance script said a metered purchase without an estimate settles
at consumed x rate with no ceiling. Each now states the final rule: the
purchase charges the estimate times the rate (E x R), or one unit (1 x R)
without an estimate, the charge is final, and a usage report is only a
record.

Comments only.
---
 scripts/check-doc-conformance.sh     |  5 +++--
 sdk/go/connect/client_verify_test.go | 10 ++++++----
 sdk/python/fora_sdk/money.py         |  9 +++++----
 sdk/ts/src/money.ts                  |  8 +++++---
 4 files changed, 19 insertions(+), 13 deletions(-)

diff --git a/scripts/check-doc-conformance.sh b/scripts/check-doc-conformance.sh
index 7e255049..9354a6b0 100755
--- a/scripts/check-doc-conformance.sh
+++ b/scripts/check-doc-conformance.sh
@@ -120,8 +120,9 @@ patterns=(
   # signed_url_hash. Anchored to the URL forms so the patterns do NOT collide
   # with the legitimate slog field name `txn_id` in Go samples.
   '&txn_id=' '[?]txn_id=' 'txn_id=txn-' 'baseURL.nexpires'
-  # A metered offer no longer has to carry an estimate: without one it settles at
-  # consumed x rate with no ceiling. The rule that required one was replaced by
+  # A metered offer no longer has to carry an estimate: without one the purchase
+  # charges one unit at the rate (1 x R) instead of E x R, and either charge is
+  # final; a usage report is only a record. The rule that required one was replaced by
   # offer.metered.estimate_positive (an estimate that is stated is positive), and
   # the Go sentinel for a missing estimate by ErrMeteredEstimateNotPositive.
   'offer\.metered\.requires_estimate' 'ErrMeteredEstimateMissing'
diff --git a/sdk/go/connect/client_verify_test.go b/sdk/go/connect/client_verify_test.go
index 10a4f13f..7f7a4b8f 100644
--- a/sdk/go/connect/client_verify_test.go
+++ b/sdk/go/connect/client_verify_test.go
@@ -345,10 +345,12 @@ func TestDiscover_SortsVerifiedAndRejected(t *testing.T) {
 // TestDiscover_MeteredOfferEstimateOptionalButPositive pins how the Verifier
 // treats a metered offer's estimate, for offers the Exchange genuinely signed
 // and that have not expired. An offer with an estimate verifies, and so does
-// one without: the estimate is optional, and without it the purchase settles
-// at consumed × rate with no ceiling. An offer that states a zero estimate
-// lands in Rejected, since a stated estimate is positive. Validation is off,
-// the client default, so the Verifier is the only gate the offers meet.
+// one without: the estimate is optional, and without it the purchase charges
+// one unit at the rate (1 × R) instead of the estimate times the rate (E × R).
+// Either charge is final, and a usage report afterwards is only a record. An
+// offer that states a zero estimate lands in Rejected, since a stated estimate
+// is positive. Validation is off, the client default, so the Verifier is the
+// only gate the offers meet.
 func TestDiscover_MeteredOfferEstimateOptionalButPositive(t *testing.T) {
 	t.Parallel()
 	sig := newSigningFixture(t)
diff --git a/sdk/python/fora_sdk/money.py b/sdk/python/fora_sdk/money.py
index 2dd0e01e..290e6681 100644
--- a/sdk/python/fora_sdk/money.py
+++ b/sdk/python/fora_sdk/money.py
@@ -150,10 +150,11 @@ def check_metered_estimate(offer: Mapping[str, Any]) -> None:
     ``estimated_quantity`` that is not positive; return quietly otherwise.
 
     A metered offer that states no estimate passes: the estimate is optional, and
-    without one the purchase settles with no ceiling. The
-    offer.metered.estimate_positive rule as a standalone check, for a verifier that
-    runs without wire validation. A non-metered offer passes whatever its pricing
-    says.
+    without one the purchase charges one unit at the rate (1 × R) instead of the
+    estimate times the rate (E × R). Either charge is final, and a usage report
+    afterwards is only a record. The offer.metered.estimate_positive rule as a
+    standalone check, for a verifier that runs without wire validation. A
+    non-metered offer passes whatever its pricing says.
     """
     if not isinstance(offer, Mapping):
         msg = "money: offer is not an object"
diff --git a/sdk/ts/src/money.ts b/sdk/ts/src/money.ts
index 260aa842..4d8469cf 100644
--- a/sdk/ts/src/money.ts
+++ b/sdk/ts/src/money.ts
@@ -148,9 +148,11 @@ function statedEstimate(pricing: Record<string, unknown>): bigint | undefined {
  * checkMeteredEstimate throws when `offer` is metered and its pricing states an
  * `estimated_quantity` that is not positive, and returns otherwise. A metered
  * offer that states no estimate passes: the estimate is optional, and without
- * one the purchase settles with no ceiling. The offer.metered.estimate_positive
- * rule as a standalone check, for a verifier that runs without wire validation;
- * a non-metered offer passes whatever its pricing says.
+ * one the purchase charges one unit at the rate (1 × R) instead of the estimate
+ * times the rate (E × R). Either charge is final, and a usage report afterwards
+ * is only a record. The offer.metered.estimate_positive rule as a standalone
+ * check, for a verifier that runs without wire validation; a non-metered offer
+ * passes whatever its pricing says.
  */
 export function checkMeteredEstimate(offer: Record<string, unknown>): void {
 	if (typeof offer !== "object" || offer === null) {

From 6c7d47e16e0b395b5011f6a7c5ba060165749c48 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 01:33:57 -0400
Subject: [PATCH 105/164] Describe only the final state in the Unreleased
 changelog

Two Unreleased entries told the history of this branch instead of what
changed since v1.0.8. The metered-pricing entry ended with a bullet about
earlier drafts that required an estimate and added a tolerance field; it
is removed. The SDK delivery-URL bullet said a check in the client was
considered and left to the edge; it now states what the SDKs do: hand back
each retrieval URL as the Exchange issued it, with the new pass-through
tests. The website changelog mirrors both changes.
---
 proto/CHANGELOG.md                            | 20 ++++++-------------
 .../src/content/docs/reference/changelog.mdx  | 20 ++++++-------------
 2 files changed, 12 insertions(+), 28 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 89734850..0a793422 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -230,10 +230,6 @@ price is charged per unit, but the protocol did not say what a metered purchase
   `TransactionRequest`. A `PER_UNIT` offer with no estimate is valid. The cross-field
   corpus gains the zero and negative cases, and the conformance cases accept a metered
   offer with no estimate, alone and inside a `TransactionRequest`.
-- Earlier drafts on this branch required an estimate on every metered offer, added an
-  `estimate_tolerance_bps` field (field 10) to `Pricing` and settled the purchase on the
-  usage report within that tolerance. None of that is in this release: field 10 and its name are
-  reserved.
 
 SDKs, in all three languages: the offer verifiers reject a metered offer whose stated
 estimate is not positive, after the signature and expiry checks (Go: `core.Verifier`,
@@ -499,16 +495,12 @@ request only where it means to, and check every answer through the SDK's own dec
   (Go). `connect-error-vectors.json` now pins the code and the whole detail, including
   rows carrying only `value`, and the new `error-detail-wire-vectors.json` pins the
   binary decoding of every field of the ErrorDetail subtree against the descriptor.
-- **Delivery URLs are checked by the edge.** Verifying a retrieval URL in the agent SDKs
-  was considered and left to the delivery edge. The edge verifies the URL signature and,
-  where it can, the agent binding against the proof of possession the agent presents on
-  fetch; an edge that cannot check the binding (CloudFront with its pre-arranged RSA key
-  pair) checks its own signature and treats the URL as a bearer token. A check in the
-  client would run after the Exchange has already charged, so a refusal would only lose
-  the purchase answer, and the client cannot read a CloudFront signed URL, so every
-  CloudFront-delivered purchase would fail. Execute, the Broker purchase and fetch pass a
-  retrieval URL through as the Exchange issued it, and fetch still presents the agent's
-  proof of possession.
+- **Delivery URLs pass through unchanged.** Execute, the Broker purchase and fetch hand
+  back each retrieval URL as the Exchange issued it, and fetch presents the agent's proof
+  of possession. The delivery edge verifies the URL signature and, where it can, the agent
+  binding against that proof; an edge that cannot check the binding (CloudFront with its
+  pre-arranged RSA key pair) checks its own signature and treats the URL as a bearer
+  token. New tests in all three SDKs pin the pass-through.
 - **Admin client.** `AdminClient` covers `fora.admin.v1.AdminService`
   (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
   `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 68b6bbf7..8af11649 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -236,10 +236,6 @@ price is charged per unit, but the protocol did not say what a metered purchase
   `TransactionRequest`. A `PER_UNIT` offer with no estimate is valid. The cross-field
   corpus gains the zero and negative cases, and the conformance cases accept a metered
   offer with no estimate, alone and inside a `TransactionRequest`.
-- Earlier drafts on this branch required an estimate on every metered offer, added an
-  `estimate_tolerance_bps` field (field 10) to `Pricing` and settled the purchase on the
-  usage report within that tolerance. None of that is in this release: field 10 and its name are
-  reserved.
 
 SDKs, in all three languages: the offer verifiers reject a metered offer whose stated
 estimate is not positive, after the signature and expiry checks (Go: `core.Verifier`,
@@ -511,16 +507,12 @@ summarizes them per language.
   (Go). `connect-error-vectors.json` now pins the code and the whole detail, including
   rows carrying only `value`, and the new `error-detail-wire-vectors.json` pins the
   binary decoding of every field of the ErrorDetail subtree against the descriptor.
-- **Delivery URLs are checked by the edge.** Verifying a retrieval URL in the agent SDKs
-  was considered and left to the delivery edge. The edge verifies the URL signature and,
-  where it can, the agent binding against the proof of possession the agent presents on
-  fetch; an edge that cannot check the binding (CloudFront with its pre-arranged RSA key
-  pair) checks its own signature and treats the URL as a bearer token. A check in the
-  client would run after the Exchange has already charged, so a refusal would only lose
-  the purchase answer, and the client cannot read a CloudFront signed URL, so every
-  CloudFront-delivered purchase would fail. Execute, the Broker purchase and fetch pass a
-  retrieval URL through as the Exchange issued it, and fetch still presents the agent's
-  proof of possession.
+- **Delivery URLs pass through unchanged.** Execute, the Broker purchase and fetch hand
+  back each retrieval URL as the Exchange issued it, and fetch presents the agent's proof
+  of possession. The delivery edge verifies the URL signature and, where it can, the agent
+  binding against that proof; an edge that cannot check the binding (CloudFront with its
+  pre-arranged RSA key pair) checks its own signature and treats the URL as a bearer
+  token. New tests in all three SDKs pin the pass-through.
 - **Admin client.** `AdminClient` covers `fora.admin.v1.AdminService`
   (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
   `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python

From 78bc9cc99f3dfd16fc55bf7f9f385f8b2ee663ad Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 01:35:06 -0400
Subject: [PATCH 106/164] Drop the reservation of a Pricing field that was
 never released

Pricing reserved field 10 and the name estimate_tolerance_bps. The field
existed only on this branch and was never in a release, so no consumer can
hold data under that number and the reservation protects nothing. It is
removed, with the reference page's sentence about it and the
doc-conformance comment that relied on it. buf breaking passes against
v1.0.8 and against v1.0.0.

The generated Go code and the descriptor are regenerated.
---
 gen/descriptor.binpb                          | Bin 678537 -> 678247 bytes
 gen/go/fora/v1/fora.pb.go                     |   5 ++---
 proto/fora/v1/fora.proto                      |   6 ------
 scripts/check-doc-conformance.sh              |   4 ++--
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 5 files changed, 5 insertions(+), 12 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index eaeb32d157a03eda290baa239557e5dbed629d4d..aa320ea27550a93823eab4122540d8cf39ef21d0 100644
GIT binary patch
delta 33236
zcmY*?cVJY<wfF92wR`WSX!q`}wux<$wg@EAs{{ye!N$fliQ^VK@p~_MiSv@Y<duAh
zFuj;!zzm2k447iTw8iuyI>s_Cq1bd}gfZ1%V;l4R&dgkH-hX?}o%5SBXU?2CQ|{f-
zYqMXh$_^f8AEpdzHq5amZ_Ja*v9Y<=pUnHTwS8~ymw(6`;K=R&b6)HJr=LCK(OpJf
z$hK(YwQG5~YuB7p{%W6+8}U0=%GY9&Ls#-#hI3ZFtuD7|h|8n6XXWR4^qqFyk>^ru
zhGRDSe3)xjbauWH(Oc?y#8kk|kH++0@G^G8F^6p%?s_>kCtvZ&GIo@iLuEb_Kp^L`
z>JhFJ(Yg6bP!>{%ONFX9P&30Zk5!Fy^^VW8fSRGqJSua8G*u1fJNdSEb2CS}{;1@?
zlb`3)Ux2JiiY{lZ$GCnGTb{3kI6jz=U7p{jt^PJCp(@aH1)Dj>wIsD7UkS)Ur0EJO
zG*}b@xiViVOa3ul&8lB>wPn-Bx(0OzD<cI+>y;$X0t#t{b9KILOTJxit~blmP{Zo{
zJg@$1)TfbBYgqhs*S|;C<SVVYIG7M$lOIp$19%xotYeE`cRd_iXBtLRNT+rAkwSea
z>7-GO?=kN<*YMbT`ASp*ac+Jhsh<^vV7|>PH_mlFzS-<6O(FAbCiA`3N>?0i!+9p(
zb}YAPysOCNJ(I6`^j!|!;c!D$=a>1)SGntNy80_M_^DDY^Z*KenXffBN!0RXeye;v
zUpz&Je3|e5D!-ZT)>SI5j?`Kij!XHDO5LMtCI?zv$}cMWXBL1i<yZ974|})*cEdT*
zt-R@WgtvQgYp1ymsx_cZE$q-@qFc+CTG$~x(QSC87ItVc(d~QF-Ap&Q7Iv<M^9{FS
ziaSqM%6X8R<aQb;Myhd^)5x3bc5b!nJ-HsxbedbaFI*O%TIcHeGJcztlKV_^ySax$
zSOL~FcYymckt&g){?ZN#G;k9q+z*xMyZ|^3xWqJfpKASnUKt=}vgviM2dief6<s#2
zSsu9V<{pzowKLsDfk~2#I~3N}3%fZCM}00j-?c$~vEIUP0HfZ*Z~&v;ZJ4?`fKl&;
zdx<V~K=pce>xZSG98leW8S359hx7}=Jpk8`>$=SK8>OnjswK|}w!67s;^d*026sW+
zBvDI)yQo-?@wTGuM{ag{pcd}zR-Bv?fdIB~Lh>Vb$W+J)$&cKzg#IHu8;@Ov<EWd>
zTcO_W2LdfVYU$vDYDcY>x`1@lZSXNdl0Z7@P88__F;;cM`MKNH#D2Zf^|1SMcb=iQ
z#pu#$n4WO6RwJ}@F$e&ha4TFDdIm$BaL3|$e_j+1PqF-WUH3;%xfR|eC_|(56m^Lx
z1L_R>6O}pRmN8RTXt17fV;nxjaiG>Y_K$a61Ec5MG92oBte&H8fpY*B?QCS#t6UF8
z8{JBnj7m)4G`d?yB@P;Yfh}6)8W_LemSGPKMVSlk!q)miF9bY>^9_$}Z_c~gwLr^%
z!=oDd!?3D{nmw8A+2nepY_dlVG%(S^$sUbIP$~mOCwl<(3>U$}sjPal>)G<DmI#f_
zsUA&ufk&aSIn@&k>2FZyd8pyFZ2xB0<jPu)^l>nuc&$hJI7mR$dZd4X1VpU|hIoP_
zfSSdoZ*e_UKFcEv3fN{4ndK==ac2Wbg*@3(9>wt(#+%0?TU|q{=2^AUsF>$z?v^q%
zD&~1S!e1c*h<P6P>o|p1i^7X?$F{oi?Ny5`j67mn807PdJRTn0QEeVD7I_fdX9x_q
z`8&DPc2{eA<vSJzdH*|}=0#Eu^8R-`#qCTI81HyGcIE-eL(adF)$DLpm8}FJ%aEI|
z^r$UO5+W--Zjb(-Tyu=)HLPie>o4VNtZq^vvc~Er6(Vb>o8A-Mq|p>JZl`Nw)q9qr
z8XEha)lD?Lz2`AZgK2<xj|{d*K<I{J3mabVT3ofog3tl6#e&cQvBm0X9S~bQk=8s$
zc$DUbW4lMh2oSK+c8`n^AR)QkBVz<eNN)F-F~Xy?FdTb4JVx{ff$ra9>Cgf??6Guc
z0i-=186!{_NP9ep5$h?#Xl^(^_SnwkzS-^Ss^ov{$;;QD#&B#-!{rlJwa@j_*e4!2
z)WC#ye?sG9F-(9$Kt94&?{h7U9q}l9L=Y2&j*zL3i$WkjV}IN4`aJfTNAXe@q7aRf
z&pZVIeXJ-1rB1T{Ip7)>J!v7)Y<`lEC}C<&PJWsdA9VFjoc74f3rv(b?ZLcsvl*Jx
z!f<}&v3=*s4Lj(%VRwJ!$qVR>R6`4D&}BCAkn2M1vPVg9HNb@QWlwR5zEBiGgRZgh
zAGqF*UGvDG*n&6cng>C#K@@__P4;wy>u~y}N9H*#c!O@zP&gn8p+UDjN-Vs|9`DB*
zjyp@(pFVWWje{p*TMHilZhH{hZsb$+Gn_LFB&8h>yRN$mW*BNfpARI5L5j~dl<M#l
zJ3F<=*@ON0nCq26;D}@a&!O~eLo@i`0EwDs8-6i?g2d>UZ3O!8*^WpgENH-NBiLK-
z&ha5Wk7bX$dUl#;fl`#4XJ}%IGI*4mXTSt2!qC-gI6pOPrww~}ZkXA>bOmxNj=PMO
z?oSOhs_!MOy`=Rq_TdHB{wI$aN{s6UCQy$V@w7=o)ni6!8<T{p$Bed5@SFmLp=yXY
zWsmDW<Cu{CoGkH>Fhu5}D>4WSVF<56I)82&0wmBsHw^(2=%1U0AW|6ObJGxBa>-L<
zh|Zny8)N8{1x=oQ$}|U_0{Rr0V-%du;WL~U4BMBvA1=B^+G{QtY7)7!!{H+vG(lh9
zJWzlHDYOL%$R<-;kbrD5wFL=nn@nwq6xueCwgMdD7Y(J41h)emq^b|3B*({XanaC3
zRs|C17Y(17v_Jy=qEXPBI|Y#f{h|@*rC+wANq)n5&9Dt+kACI)%6H9BOZ35%8Trv9
z=WRpz!N?7|?E2AOgWn>L!xO}>+eY&et`JD*ciTvbz6A*dZX4wlJcR{`6!x~!?gyh8
zSAiJF!XWaU;i&j$7W(9S!_i)Uir0<;cMT;RzCZrND}VU&D}Q1Kueu&814|gy&zpVM
zkdre=)Oy!I03rYJQwP7s`dxGV{P(YU?}<>?zUGxF0Lnn*H7`OOS=mq25U&{IM8V1+
z&Dv;E9^%zRo{6WtFy`?Oo5O?!hI6LZw$y76?`Y2EopS|q#n)Y{^V~DN7$lQvkQ9)E
z%wb=A<9f4fj)@8;Q0I8%cm@g7IbMwCpK=jAtYeG6bv;vFXNi#K*Lh{L3wX2ZylD0;
zQ4QL?khQz*np3{elA(4lG}~Rk+r5z5Jx$1<)+OxDZC7olC6){|c!}BI0^Z;yUNrb1
z4TAvIhF;qlG<c!Hs&Bb`xs%_yR@vRFy=qvWOQ->A@CG*T2UlH}4JIm>K;7WgT5!(+
ziK;hv^WFNF<Z=P%>D=X2_IMrPV-DtCtM<&Tx#KETYQPj7fg(WIW$FbI2)jrxTD5_M
zv+eS>-s2UkHe$fv4aaV;T(wCK%(UApS8b97pxs`q+8*JWpum1F+^;veAN%FAPT!k<
zP&<@^C)SGrp4sj9wh-eCB;@x~N6c-;0YDyJ`=MHAfAO$a4xE6}3<Kw|w>h5{pe@<>
zus0&I4v-|{Mb<&%8YD*UVQ<M3e2fq&hRtDb>T!KDC1C-YCXeI}D{60h)e)-}2WmOu
zZO$h?Duh~&c#}OOEG2_Syj8t;ViKU>cibxy6A+L*?v;rNNJt*{%ESaDB#(Q|#3Z1g
z@M*7Dynvu7+tR@a+|yo}2IDD^PJ3ly0uo54y+}-+findS=XtN~Iy;)D{>**ei`kH;
zsX_9fi@9p2nr|O;(JK=~Z~=AED-%SJfV${Kf=EUKN#V|GbmJ2Xk$hsg==FBhFOkiH
zG#0Mq=D5^X?Y*v<`httbTr+zHB$e_;L`VaPO0Ibk(%zwkO2}{y_SxRbJ*=tA6whFv
z8WBDpB8`Xo*u0mt8J$4D1Veq&aX|uds86~+NI(wt!Syk(I2<8TYfSDREz~jgvN4tr
z=`qG9=Vlaw&=?<jfMR5bg4{SZzLolus&PK)V_>2s<9yA9Q-K7+IA21nCO`sVoG;r(
zUo5Hx`DQMWuP(J$y=h^PpT6m9F7^jP+)v;1xrN(;Bq3kxn0|;xdWgKRmT4Zfp{mw`
zASbM~)F3CU^(8v;Zh{CPYJFY0aVHFs6VCE+CuHpm)mbsiCw&l)AUMk>eGnuBXORVd
z6m_GP`LH+^(Ch`T>a3b?X+SPG-zQx##9eT{Pr4vT0L}No1)oKah7IQ;pRJM2^Qu43
zU*uC;>+R68F!kqRru)<m9TuB?0wy$C?342?NB}MNVZNmlD@^8I=2Hs8ZP?@cR4;qY
zrxtYrLxe9p=Fc_0MMtF}yv!Gl@O?bc=+TvEdw9B?_0FjgcEhKRE(6CDC-{{<ji=UB
z9O5f|NUb~bx<RdGi~VZXs@0|$!h9lIZJGfj5LWx-N(Us#_z-grlRd-Km+M*U0`=pv
z^*+VPdkaj+toOM@<O2zr^*-#BAy<b8%)F6B18VQ8jaIF+nA~X9O1-$zXNZsl5g=^z
zAs4?YYDF(@W3>VGdet@yg4UATOeYNU{@dnri-Zy+Ah!8R+v?W@1QwIK*uJ28qiUB0
z;R3`iUvtyiw6@&k3yQoY%(qZ>`7&7%O~bU$bs%>;glPKg0SiL~#sQy<*(d~z1HMRm
zX&PE=9`JSQVv>a6>-v!1N_WCEs(9ROfb=IUMGvvb5w%0rA*%un6&&(47hylF&{Fh}
zucSgE(o*!0uR}+DEDhMOf~DvuIi*k?XRrLk!l1S2CziQsE&7SiFd=Cz`iU={)w^*B
ztVNHo1Fh8_osRevv1JhEi_jxJxn%$nB1gzCglAz5dfcaU52xc#uv2rLG4`{l>Zt-t
zq=aFm1sZYO*IevQfrJ9beK9fIK?3bK4fjJd&xe(khU0v0VN`ug>2==1XbFt-mZe()
z<Ge4Dl!j;tjPt&dv_76PkO)?PKHIQdrvxk!{K|(}gO+TL2*#}QnoqgqbA-3r+2aLz
zoZU{UOKQLqg9s%6e9audAOU=h1~8=%Adx~`^A+6kHRD^Z#Gn+ydEMu@=@VP7k_WjP
zKDp&8S=e&@+DBWilc}K*8m@PJ%E0ijT(VeoD>WcYEhrM)^=V?G10{iW*C*#OkZ`2C
zKI36Nj}gh!n7cmjLp&Xj9E6Lzz7AqPTCzAyuK{|Uum(yD^()EnWPALne|v?!n^J45
zz!2RQ;giKse{->d1PPsn`U7Im2PD9T`mxY$4~rKX&XIoG>ugk7ZI?gNueQ*iM-vNS
z@4V4$Pg;GkX0%^64om=z_RC#ukN_I($F4R_(jd{e(SBbIZwirU9QuB=-~ZG<v$)Vt
z{;mgkJwP1eR|=APe87`~;+;CQ?<yKmsL+B4k4lAQLGz+AK!XI%7{3hAg$S{EW7!88
zwP(#((+*$)Vys`z6(E5y)^G4*A?QnX80*ItXDhBg0!7|fe;nHxbPj;WQvb33#4q^%
zyJR(^VlR)e>mSg5MN7ju)o(lLw}-bii}!!!)nDgEXVrSUd#WFYQVhM7*OKNN#-4AZ
zPLDCa++YP0eaNWx>!J{Jo5uWY)vu$|{0g7uAxS$i)BG5(Z8#99=`3BQmPM!g6&?mq
zhGv)P{&Yr9@G@vrE&F4cS`@4G%MFm0e5az;kLB)b$d(|3`CvwFO_|!vUNXb4@O?ev
z0%?XnmDb-tPy!9>&G##P!$X>}4~9B>=OPvAqxLGWvee^L00Q&<ZOcp&b<g*gS5ugz
zr!*<e_gD1M`*Jw=!dq-%JGFoGEx+8qX{k5?@s=NRMv|97ykEf7_G)o#fnV;-v{YOu
zvw$3SxzG!Kwk-E>dv&Efy39gSQEC|>_2Wng%I~mHNA<qwJAQct)l$(=<{dwdp#F!K
zLDXH&{$EG+uO-Vdnq(_<lv(aaM0y{C9nC;oUGG;a!&@A}3eR>@b)^?rra*HDtS13s
z6pFFy{h6N93eCw1>;2gt`dopBpu0Uczl)kwqT4Oow*bg?e=4K*;*}zl?qFxTsePh5
z{0g7hph-)V+2PNW$}(60?PS&6QD&!wLt8^T31=Y3$;Yt>o6}u=G+OUhObzo<rrwW9
zmUiV@DmeDp#hUj}dq;O!IBt~LML5{fMi~#5QS9G(s87XqTR0w+*-bdepQ(^Rhc3r^
zs4J9MgJ0pfDREJ%!H?Wj+S7|2q1@ssb&wJ}W*O0oQpd=Mlzl?Vhhq#D=%Y5oPap<J
z)A~^8gukppAAv27JVfuae%mGHs#b>^XZ<)@rH#*4G~CXiA*|0n*Q3QCVSmu#6cQvb
z&XEh0@xpj`p1J#~718s4vC9Pn8g}RX$s#?%%YbTR&-YbZM;j5UxGt^uuxs?=5T%%x
zL8pJgru9`*(J%aRgRm7Jc3=3hLD-R(!Kk~yKI^M?j$SaGyA>aF7s$EGc^QnkCRWi;
zZ5M5_aA=%05ss(}1L-3BTR+rw(Jyy)Tk(N((U0YS1;@ca`jTz$r?!uOX|<gO(wEfs
zPdqwhUd}fPY_oDkfAwQE|BV8*Kz~qoIPGM>$?WDp^`Y{~1x_B_i3!=s1-=Y5pGY)#
zazV!j^=%lFpkc?_-0vPyci78n3!HrUOk4=n78JCVLKL%W3%Wk4Kfq=1a3*_hkUF4Z
zW`UC*Q$mEo*~|hz?{Xp`GP9ub!}@9kDl3L_et~UT?&Cpf2fKTIf$G<{w*r<zI`7C8
zJg)Y0b=pzj<kK&40k)%{74Lf@0k)$6LvaG)DQGCo0?Omz!EM;Kj!s{0-p|zk@(*AE
zC*KgF0+45c5MMA733(RiGKfyn9jy&#ZNPRYz)#X0t;qlZwNR`XTa!Ms*h{afb!D>x
za{dGpg=PihVi6?ZW(BZVMC5j~CT-@hcE4AP+Rw2>Xx5t(kb6le1Ccoa>?JL6av2z8
zSwLBl8}@rO+pGpZ#q8OdrvS?W&Be|ZNWd%$gv9a@Bw&^WFt1Q@1QN;7vOvj-fY{6<
zhS-&OCm=WTBn#$P9>8Ya+X!Wl1Il{=B@mwOi1)wmu_tnE|D?v04q%Bn8wF79dzSXJ
zEP0Q#Ur3Ag)|iHzTLVgcAa`<(8nxGe0rv;T6sHx+)_|Py@f6})12Uxp39YvV3hJRX
zouU(ir*zu_j-3IK(n%iVwg+TNCs|18b_6J;qr=|TG}Y~~2gHU6D2%W@0l8QO2{rZv
z<YE;h;PwQ}#cFF>nZF+pCpjQ6$ltfRfmW;U2V@3<r$Bl?AXlp(f%JX=tJPW!4iz<=
zrvtWKxkdl2PIr`?4#2rv>dhQc+;(XUC>H|`eXXLqK#$a#Asr@O?v=l(o$Ot|pl+i3
z4B{Dj=|aHK=bt#Jrzzm*sDDm&kHR^f*8<9|T*Keh=j=83DGZJW(C=D6CU_trcP${V
zEr6sPI^eq{4NeS^LkAo;rNJc+ayLwaOBUtO+~D5{9T0tf2q;5>j@;70>VMg5K$u#P
z&;JmRIdqi!{0{--(B!Njp~VjYV@ObRJ2AKxcLI*rf}-0c4|e!5;B@nRPO_lb-2h@5
zrFfEs?i(C*wkV|x1Uv{0WA6-6i(eQPl%okubmOp~>_(7Ka9Gd~XDc9qIxL9nit=EP
z$WMj^69Z)>Jdflhk`L>xc^#leu!^B-?1d3l9kew)!m5LY&WNBP7P(Qrq8|~&mV&5*
zb`eJe3m=em&@N&tLJhXQUk~#-;D@8wvY~3>3!|($Xnc(d$^+#n-vJmE^q8PDzD5O+
zl8QR$n#HJKyuYl2Mi=QgDwyb}cja|}8pBe<)b1~ivFe~bf-zPdG<e1YJ>u**$_LMw
zAaYDm2QEnAX~wiwo~&a`F#9k+hl4rMKjYb!Ve0!YjJGPGaW&pD7LBX%K{>7<f`*I_
zVxAL~I8n*?V9}$pAx>$m@xkIp^eAr#X3L4JX}B7HVWL$B-PD+9)j`_~6N83WMMe2G
z!^9xwZBd5{bxaH<&4##S9TS5^57Vs;v;zeuv40(*mRC)(>Y#0iNkO>{fikFLQZQnI
z(munaAX3^@NQwY~oOUWZJVIUb!c+@_&b+5uYSKo-)SzM7n>HGz29d`JH8p54HJB9(
zG5|_7rv^)(<j40>+KHIX&W%*7s-|0Y=umTdP;O?R4C<I3Ea@&mX(M8Ku(FrF6?q`k
zM8>=z_rfT3yYk`!3xkfw7X;;A0tx|RK`<uvVnG69L9krhDF6vQ7X;hCD7&mV^rSp;
zL9oLM`URT$qI7`1I`{Xn>TjC8xZ0|Pb}Uv0<<b|0P|NCIz#OTxW3f7j&@HUd0=29T
zCLfcvw2-x|4i*j4KNevMiTH-x0~6Gr*lRXewa}i%hG28k7idpoLoh0KkD?0gX>16}
z-6N2wWkay*%OW0w<TtH01iQV&Z(30SdDCh`@P!xogcMbf+;0wIh3|>q_uv2d%Bz3+
z_3zo`fm+K>c!Ij|NX+aYQTOJcoSZ<S?#<M~<3fL00OX#3Lw(-<OueOlK76L$@|k>K
z)LX+R9~kvPOiPsJ#0=-2pzW)mNONK+xhII7RDK*3qcmrKkZ+B%<&#xs`Tn4c;&_Cj
z`-3vs0SVCkK_okklsm*IgnpDeGg<vNrPD`2c?<w9v4g7Ez5)rMkAhyGegau0gx~_l
zf{H)<K{HmdQ1#~~PgQr>%fWK-9z_AjAG72sG9M%P`Jz&gXLBQ_sU=F)S<@OZzL$E|
zv<66EoDCXcUmPR}1(AGHrVyj0b7N2>3LwxIjb>kfgk+=H7a$?oNPY1m4c{0|B9~w+
z+SP71Q*}Ob$x?xW<|Ru73YwS94uK$mE}0z?H=I|3wkaXeA#s$v62yTd?~pik$aT>n
zoj?Hfy4fQjQTDpoBOrl#oqB}Q&p27`>mY0Yd$q7D2uOZyNm93b9h6xpo<j2LAo95H
z$;smA7Uy?CWpM7@S?d4VYw%NKp?Cn8@62X_1k88loCXpw-_e{#6FW#u?B4|o2Zx&R
zeO6+i!1qCipN~(XMHKiUh!oVTH|H{7IcU*)C+O(GnP@jJ=%AtSW6)9ce~Y5W?gkxC
zi4-&r6`UhN%GliYMQY4m0~#8GAyN^L(0D{hW}qMeIU*!8P>|4gM5tgaG^Pxc7(5jj
z8FGvXiBv@LAU7%`Gf>GwLNq!=8R$RAJK~fKJ0^yd$!zdE_0t;sGL1-1HZdea8p=VX
ziJ^eVHb4S;Vo0X)AfeL4P|0MdL^%#IL@NJANT%|V1(Qt*!H)arwm`ygP7m1@hwR}E
zb{viV>G$lDI(3UNJ*0Z|LC`KiDdUWgGM6owuRdCXU&27(Lz@{PnK6QdHZwvpV+09p
zW`ulmrGbdS4Ky?4m?I4&d61iB8c4EWpxN9&boVp?-*MK3l($2UF#F?MYTp_VrV`|y
zbs?EBq9nlTLNZ|l2_@=6#@qLlkO|}bkYmw3B{&Z@c`GCnMv@ar)q;>r7$pncu`uMs
z)jbN2NyE7`WP4YR#v~M38d76oG$v^@E)VhW*bxL=Yq_a3NR(Y3lJOBFlwKafXw0Iu
zNg63DS?NNx%|k0gGP;3D+>j~`@IXRjB^jF(DZ=4>$W|{EDMHEBAu~=Fks|AaBAq}$
zk#(jbAW?RmsR&4*t|LV#EEJI<>q8<efPmzBOOo_iACh4KPa(NJWG?TDC@gFVDLZLw
zmDp?WQ}h=eKyHgUsz5?+i#e)5qQAC;3U<o=A_jMwts%z_*<X?exoxJ?NEV!CJ9iqg
zNwMMF9kLzdHVHIy6r<YRAv0DMlTr4`-T{H8?K4#biL(1lqku$J`^YHRU2znX{s-7Y
zOVsui2XN-d=N>SL8*;TWNr)T>c?`Z!>?kpu{|MQx<d!T^583no5yI&*oh+7+5=Ys{
zWopmzqb3xXfI1p-iH-&dsH4=;(<$DTQ1vHsSC^>~d*w+pPJj!?JQ<R=G(l3SP%+;~
zAsJwt43(Ah@mxYP=^6IGa`o}bGZq4c>oXy_%t09-oC(Q^5F`-JgfJ2I=1PD%&puwR
zR#%?45GZ_}w-6|No)5_b!V(@n&xerD(o|YPQ|Sfv_zE>qejz0D889JoAtdt|kf`QD
z$ecq<NW;sE=B`lfy)Ij|((HNJs+DHX%OSZMfCwNihmg)3aKa~2hI4S(wkmgGrTS1a
z&)_g39G^N<)DuI)e6V%}0mz{^>f@aW5|Bf~a<GB~<j^qO;TUyD3Wjoy2`jJXny*!#
zvDe_IDMy_!CM+))p&aDKgyp>!knr>|;nuH*#l03{kf%GwhUL8$$w6n04a<8ik_Di#
zVcctJ&+A8l31J*h7sa3Y<4f%9I<>S6w5bI3<Akt0olfz7oDjye`y!VG(j?X+r@qu-
zk|jbNHz_Pnq*J`(CWUb#jg3q+7ajLzSTVvSEPtC?z|Q8>a2XgP3BzLuzZsTyIY6R@
zH^T_WUAQm|JB^jDSG#qY7M8c8Q+$hMTDVZ0;ev$7v@p(amr>rA!Wz&yH>@lOJHj)X
zvDf~rmgRP>SO3Re1E$$XS^~}u%b6MyK$shrGc`z9dTzL20W3{3H8FThnHP4v6&5qK
z<Uy`3EN5!TLQI(-rkT1ER|bp4x5G*zoQku}8`O4HAjDLiQs`v*?XY~o03>vJJ6s@E
zA0UDKb{P8v<o+pI5H1aiOcDenmxkpi013&ZVL1vwLUL)?90e&_2)+wfr56l9pgZ2R
zbfER%yJ0zq@f1k!hUH)Y38Z(!7z~eK2R+|#t_|DXV{1351M}C0@g7hTo5%TlwqWkf
zYH@U3SZ;WO2`5_@#)dcM1(X47jy<tiEsEyCa>E-;l*xtVMs+>~ne}Y)W;GRCFPjEI
z&ZRN%bBxBc;oKCq?P5nZtIy<b3acSHD{`bsgDtGj7PWun7PDnwqGemmmVtx{Tf&Ce
zt^kRaZ3$!3o<ek*^xMw1ZBg4-ZnqF9L~ai^7jFxo3>6B8MJfdn2;0L*rTTLOXkX9D
zwyO76)msP@fa=5Y4o#Ye$ojC`)PX`|J?Zce+Lke#d&9PiY~@yUfO{{Ehl7;qWvFon
znYK+mRC&+@1{1&s&BlR*Y6rtI_JRcPK{D*0IRYLwFz<Htzp5H61e%;1ECgy?Ls)Jg
zWq9KnXw)B}kd>icIFj45UH!Se?1(vZ!G+Kf>IPaMgG9AQ!Z=i@<}#p;vqyKT{VI=J
z)l$emZdxS6Gv?!Aw^(9>B$+TmK3%}eP~<ql-ruPXsytyK(5}=83xUGN2@8S3#|c8f
zn<zj)+0*Q2_3FSrr!559ust1aE(RLP0O54Fbw;*=qRHuSo3{E<VShxE#<0@F&ef|&
zYVb>p-i$(<N{yBQDWWu*{)MMNX{5fT)e1;Nl*Vvz6Cw&F+Qbm);um2@+ka+3wF_a#
zvv`R`ab$77A#D3PY!6q(pZ?QJ|N2Tb>$zL)o&QxBZ@GlfzAQP%6*hXe8Y#PC1~)LF
z$`y0^0SQ&E(DZ}zDTv_VHTL0dwRPn+voT<zG1tt-fTTjEH-H4fHSz`wcp$(TZm`ll
zYH_a{76O_2hJ`@Y+z87}Ply2F1_iTIw16lzoZp0P6WHr})RUfX!sgw%Qfkf}F{yR}
z0mM6It3U$rj@c@ZK)ge(nnFRpl<FIvdw8EZ)m}b4BI7)`#E!_E6C{L&N04(;Of98`
zjEabu3Ie7d6_GI&BqT>gWK0DK$x#tArj`;pJ|ed9LBLVRN2F(fgyQ2PGNytA()fss
zsUW#1V(Lg2Owk52O~iIIH{+l>qM3VcL=B1rqYc?&K5O5g)|JmU+XE)B=0{{^0TNjA
zBQOHL`P+tcUc~Gls&mR0MdT$_Fo_$HmsCMQW>Ex}R5z1<w;>}eV~0Lex4yW{Yyy~Q
z!ZNc7AOW!~BHz*j35aD81a}(uATc*Bi$uh&6e7jKds(D#09`MqN+7U`T{^5@tz2bQ
zLN^RoMdU3-ltCq{B8hGimF%=C(zB9||9}7!uVulH)d5v&Ed*NZu8qi@HIxCu+DMdN
zI3N)qtc~Ep!C`WdHq@qVx!E79AKR<8Ss0WKZnK(7(O_FdUYmjpFt$Z-Ut){EK!y8q
zD?U}X*{k+h7!(WkSr`-x_C;hcZNp>1z6geoGzL<F57@FJ>eZ?bEC@;lK8VN*yKQ(f
z@IfRgb~r&ojSnInJ8{QtLk2%A9Tx;751Wn)5|tk|9Ty}d58rd#Hk1q;5supr1gv_*
z(t(nJBUUpg88~7(E(!zbNCb{M0DjxnaDEoC&1Aniu0H7fEP^ZFLusaH3%7Nijwp?}
zt;g|3at(fpc!>u9KW&181o-KQyj}wm;HM)vO`v!Q67lkMB;FWlru*=IDKYrgjo~~K
zah#9j@m-pGT*#h{APe(hm**Z6dDyx92qj`YxMHZUi4FQ(t*mUal%grVDIzE6wtT2G
zMciUS0}0@!2qv^=IRb7CU1EDaSD&xCWFe4OU9y@*Bjr*=rWtMdNVycjG(fk8K;qWW
zCHB$@)mwBaQt~Tgmm25txghUS<X^_y=|T#4sQC(GC)E2YuUK`_fVmQp2?@%et}Br+
zzfeOWBok@ZUhl&Z(6!fD@TA(e`nrWcljn7-y)<C1N96R|mJgWg5lo)^8eLm7&G}74
z`60q)oKz3h;HTM_G-kfB8ck#7n}{Luafm^YZz9OYMPJfu?cYR7f4J9|bZ&!fIK%mE
z#PR*TzLZ?Z-nRNuGSQdcxp`j>p?K1kV)bD5?J0Fw<>115TG1#RTqxr%%0R2Zg);7f
z1oGfQ9P`kP)wcBF;ZU~zwA#CJsD(g-aA@H@cc6@XXrWtd+(QHiLkn?;^Gl9^K{%3i
zJfpr+HPS+$!8o!|F00$}!8o$8SnTzK1j5L|PM!5#6iwRFV4R%$<czw<UNzampv$0>
zEeslllMCewl#l_&<U+haxl>@^2xdm^=s9d{_nKj0&}GmWh4SpKEkA>qQRp!po6cZn
z6c$GHI=n-hhxg|96x!a;eb%VX(~LcZc^Vx;<<V>Nj=hCSfVoF#B{kw@dC>gLGkS`d
zV{aiQQ@lC@5?bynRQMfyq6Eob@*omr_Z4EI5@kW{FO=`};pK9a1<Cg>P?lz-{e^s^
zig2Oo0aW@^nihyeVbJ`}29YRypb*PN0Su=<SSVjjbo2QDBtIWOS-P=yun_zE-{4h9
zM;Rhmq3wEZ%r*5dO8#es$f;<(T1Krt!ScUWJC~g(l!*kGsP;smoOnS(s}s~7TI7{c
z15UF)e64mVJ8g-O2~Jxg6iiN&2)&74MvXkjKK@#*Dm!P15YRbGgxY?NL~zXuBA~ut
zy>6;~%D%8f$R1x<A`}F^AQAHNGMY6nvZXiG-W@JlA~fnR7HVQJqYOkY7Pf4~-`X#u
zc=lBxuAg^fZ`@LgSnpeEybKJna>io_e^n^g`XC|vRUy{;FZ24~x!2h1x71%%T(d-I
zAYLn!Nmv;lh}Xz(=IH2#a>F^iwQWr<_Kh0Na}RHgWUwALvmE8r536&J{GjeGtymqE
zc^S9>TOAFFYt0~0|LQ2_=X&bX3f%FC+OFpMrnP=b$<`=enly7%;8MiSsIn*O(7&+b
zQbdKk6hS<;B&#)cs*hslpYBA6N9degQAhPZaZt@};>>Ff-6}}8lezj*ZGK+aNgTxT
zlm%Sqb}}lR1SEt`M$s3zJO&v&Jj156(<)v*gF|O2LQZlfDzDX}3`EXEajl**E0BmW
zXQJ+&LJ_{<gZp=9qMja@I&@w@9tNI?cJ0Q`*(=Di8d*tut$SIcr5e@V7?nHkD1&+$
zqZnh=Ts2TlY;1e2UsV&%Yh~q>#x_M|IIZ9VuPJJX5CW29qL>@$Ra$5QPrJ;TchKIh
zylg>Ges(!3^D~rz5|^V<ahwkl5SOEPAM`&t0;;>tu5{4;QhD7%ptag{3xT}vdNkTW
zsz}~<J=(d8Uda(q_9mOxQR`KC(?XzG;ilCLa>kocnaWmhXS^8|UpGK2Fe`k^BAvAR
ztG=}m=xG023xQ^ZZ=-Ut4H4+@Z4__9JjHcDk9{9yvpZ=|SAB0msDSw1f}kAj`>5RM
ztPm$x(c%>CIg%|gEsV;w>#RM}tZG#3UVl(_HY#?nKWJJQ6}zVfO$(!9P-8Sr3l(%S
zKOwiFn>N;7HNnE5X<>qeK}YiwV)yi*X<<SPdaR<O`3gFkugwkVp{-H+)>;_Nfl+H=
z(9wKt%n;WnAOnor7_MfH7Jh+)_c<}8W4N02?xls<q$=&Vm0*}oMlY|=vB2mAeoo8~
zDNO}`XJAgOT?hWsLIu4tP{(@o(t1?ZSqOBxUKf+^cc2Uq>S95WID>>bburAAlmu4L
zLHPo<vX@p_xxhl8Gx7y7nO30;5EjJ3ourS^!Qg^e*Y5gr905n<i&>_(_Cn=i3xQ6^
z7hA2M6Y|9|L+mJ2D0D);IM$|&fAFD#ZqP1cJ9=wRRW7p-@VySlG7G^Cgk>?g3V{d^
zmc{V$22D2=biZ~5d!molrE-OZ-~qx43&8_~6)~A#Lj(vbV$rzXfg|AZ?J8E^N9$C%
z%0e)Ju*yO(fUqhiudq}o1`t-o;z|7v903<|*Rf93+Mg=dSqNSrtg{fjKv-wB!V83T
z)QVR)0xs=tU}vkff34hLA>dsK$A*~P6Rl8uK-dryS3=Qn9}qUgD%$H$as)qaFR&4P
zwWljLTL^yWu-VeV4}{HDEBrv%Os$~(p$eq{t2-9xrwy#yW+4;+VVi|e0EBHZncYGJ
z2-{+~S3OZUcz`zk=JwMjRn=P%0YKDS5CK5c$K<M@LJ0t(K9(#t$7&EcOz!vnX{;Ww
zFoM815R)lfg%SkDftZJ1l!oR(U>u0yqBP$otWfakd;{xxzjmlkg9U-(E=NO5-l9Pn
zKs3bU8#y2W(GbHMIh!z-01|J&osTJB<nDVw>zVfp{4@t?7@C~7S`!A$`It<sAqJT9
zF{}$I-3N(u|9q_Yi<sEzA_kT>P^2;D_#I!rRwxllOHK{c66F_Ta%Kk;uoq);#|0!{
zFUGLr^0}~cA+3li9??$rx?*Wo2+gioniT@#iltd0Ag+*RNR<^wJ1jV2w%2k4AJul)
zJ>SM~GCGW)+tF<PeT>B((}q`lZ(@TBoxe9-5hSp`j}?eb50JqAK88KkuLTC44rZqx
z({A+|9G8Y`$G6o6$7RR{NrmF_y*rSA7#znA@;Oqkz2O`iw@uFZpU}?Q^T)=KyWk6C
zj`pP8c;<Rad%4s2xI6*@6Hw#hg<|6rB%sE}v2vp{tUXQklj2G={8YRj8~lWpX7x{L
zU3!5fdK3j<w@IdAAi02?+d%?tQXF&pSlX@YU^rRaHivb4S{swk;#lhc9F=q+y{5Ad
zpVpo$pB|Sf5ST!k9+!CrNFYs*BhUDRtki)No6Vm6iT023*_I5|K07X7XGa;x%#LG&
z>P1xE(QwwqZ5!DyeyY7-)KTRWembIZ=YqJhgf;wB`;Qv@5-Aw?z*=C|4-!}lsDAQI
zknqg~ao>`-IM^WuKiF9qcPx&JgB{6(+@iQV*pVzOLf?+legcKij?|QQ;z~idIL@~I
zOe-$~VJblldM7SVmrxR5@5FJsL?;CuDL-4u!p~^;|8gbd`78q_L{`QF;vybMh^&mu
zi;p0YRjiC>p5%ETk^EBF%6Rq(o(D<}eST|Ye9&WjkaZ-8HF3VX*$D)kc}-l7HIS%o
zO<ayOki4w9yV;SFxebdvKiBL(-(dO-nDChmrq6%`#D=(x0w4jgA&#+zqx3v{m1%R_
zwlgli8%I;o=6GI+uPQy{H(TOLhOa8w#Ah{U6r^~o2oGVME!6P7SX6q*D%;qaXSM#(
zZSZHZ6){m}TO2ESynp}_)DBkgoc2(BM_j%O1txK6Y|WvUKk&7cJ#pKIZ18j1?EF3P
zynOxd5H(1Zy{zncZE$pNT)rCtCPep=_y2^KfeQQCf#<cKMfb<$+SlMJ?2ls&gYgC&
zNE~F<FKEAt9+WmFCUN69y1I{-fqf3KoiAt)L=VN~5tzZ3uZQA@BG|Km2<+a#GB0X<
z;|&%LEn6E1XCy6gIvLL6aof<`m=`st;yzAcf}cotqQ;zHb6?Wx%1@ZC2qx4&5tmC6
zkkH~p97~ctlqGf|`!?qO<7I81y{ggdX>ci8$K@mpl1jz#)*UTMKmwyNUXs$csvHCA
z-Ol~xS6a2B>b8YJTQs-hGWGAo{rh%2%HQn(207>LI3{x1i0?$y55iSht6yu*iXTi*
z#UoVygXyUtc~R3-JCVhPB*Z>E2u{f$2NDiDBq5_ONFWVKNQVUpq#+47>`*dmXT$k=
z!nQ0o_&4|-q3894nh<8~OlF;c8t^_pEB~G5ET52&;~bBGI3Xd83lfME5-={mINzC!
zJ2m(6@3a@~l~WT^D{x_$sR_C34U$SF<h%JGfiX3K>q2<v%+Z-#sFvM%Rr_mIt%X3Q
ztxd>lz$gQR+C)UGh(Q9OHev2qcP6qfxAyniHhX2Ag+cM4E+KciPzV@x3AczwAW0~J
zRS|VhXEO2v_U<1rT`x$;5CSGd79?Z{0SS=>3A1B5(>B7=g@4rSy_Q;)(zfAJvqMk>
z2usZl0SSbq)FGJg6-O7t`ECMdy}kaVedc{PL0^QRDWnVf!?`A*yvNG^Q+vGzzeLal
zA82b5GU$Q?+M0ws(g%siza~-eUP45EV(`enHsM&G5RqT<Ah#|dBfn%J^5+s1`6=z}
zLiXO2P#z247iZo6tPOevgqT<H2rb-Xwh$yQDwA-Kz}}RQSLQ(?s&7if2l4YiBE`AM
zrbOaV{bSKs^#Aq*ZV&9Tv&(<cO4$Dv;(G$cf6=Cufo-;&6xyDUABgC}9bkI`XKnO-
zxh~ZI^{nYH+Eab&Ej_9G>rE#_86ear<d+#hl1!pYSA9C&f$3^EKTX))OxnZuv58ry
zZ_(uc(wccbP2deM9(lUb5IHJ`NbkRD&dx_o-S7y=N6jGu639nsh#Xg-TvurBJe5$+
zBpl)WEPt&!Ft_`!nr^QFPc#lC0B|ZH@5F!vz^R1169W?6dMeTS47!zeZ-_zN>NuT{
zcVZ+5c08SscVZ+9K&KP96N8t#Acq3y6Sx!8n%{{T^f#@z478~PS@?WH-ibkB$evH&
zK<Bqy7E}|P`#0^?vL;J}Oxl!?`($0YNt+VbCrfh?jHpYj=ijyL%a;=J6P#W7h`MAB
zLXg0{M1zpRE=YLGr9|X@*-*NviIwD~MB#lr2cQCSFX&RDZ$G|b?n<NZ3fuj6tw+@r
zv-80uuIZ#8q3M-`T<3vAwO10@<sL~c*p-6K4OUg7jjp_5LC~hk4GV%cRc<5<v9SXY
zK-@@RV}~}ry3(e~O{NUiDtg_t5NK27riDP8DmN2`SlvJb2sbGV*3mrGmGYlEiQMl8
zYxC`0?pQ{qeUv*1xwD8;kh+t=tjsS0b;Ul4b9ho2lQb^^En-)OXm@MCGdq?xQHCdF
z(0~8{h9`XmJY56{?;4&Aj7f^1K@1)=MkF1hlOkwH9^^(QWzdi;1dUNi3K|qcyV8El
zxFo-#&l(46{?6dQvS5j;`5>XnxTK7yAOSfpX~xs8v==iuDXxRB9IiQkIyotW4j#dj
zlaq3u0|}tXNjcAf1kmK9Ow8~pH<q-`Pm08h*5@oKzZB}FVLXks9HEs*rzPdf;9z28
zOiLn~Jd6wl-%+Cp>6sDQBhlKVd@UPHl&MXMYa1v7Y9^~6p$&@8Ov;1|OyVYykUhh3
zpww*Eex&wnbT(dX=82t`XG61-NbGR^12`BYbJ>!Sz?qwruQh`SoViIHF5#mTD1)Zg
zvA`&;YrHNglSnX8rY?yjawXzd9=_MMCW%jkzB)>)XlAUT_R_1rK5Fk;G(x=k3lePu
z&98;fQ-G|chGX*`Bp&8i;&rW0G?$dOoWMkxToOYRdw(bc>OEHTy7rUkduF4+BrY}T
zab5-u-^gyfu00vuXd1`I8@`c@(~p-y!#A^EjnnRnZcfVg+I_s?o0Axqlq&kD;al0B
zaa!N#)}%})!9-nKlSn5qQK1YRY&%Pj*Pf1UPs;QbOqAK4M0$%I5R}2-+{tRkYXhS@
ztuplL?@lU%0gN&jeY==rf>sgTCH<9{D6=bxNQ_exkl3@_!yccYb&l_`>_czR?;-oF
zqbwX>nLCuU9c2qAXlso_Nn9YKe(+O2e1M@L`T-<N4Vs_2(Nkc2K<%b4O8coFK4d2+
zY7a+0G<5+JWj-Wb{>ICI`j|cVhE@~(*z8X~?}v}6KdX5e^uwp@{2N-oqEAix`FTHl
zO7_DwcGQJ_IFeL~v3GfJoL0#Gb&}RD4hFx!MUPR>kz}$+|B4cpZa7a$+6J@SB<+&t
zvm_E0K09`!=AFgJr37-&6wTS;tQmgr2(3ArlnEqAD0Mc8*^xFYyHQgc;h*8Q;xj_E
zQ?%krFhs6_$8dp0bJ&CA#pR6~kicrB=28sqMo!qozMG;|R5e)$<RDE+d02@uKxj%9
ziwhVafzXu11q}YxnQla0%l*rn+BkdpwWOT1z=hDYq|6*aQYq^3T{L@iBNN_Y38w9-
zx@FZ%#{##Ka>Es60C6iB76~j!K-@|qfu+FNjU4@Uk}qRf?`c>Y+%`id9zpQ788Sga
z@b<ls*^OFvSA@*|AfU-zO9h(1?pns93GA*JGf@~wcPVBL!Pgrc-4Qg4Y-@AxPS@-X
z4=Xa)2HmM^Yl}qJzA#&Jmem%?nFWu4SX(5!79<dBi_o=no25HhdKP<Qwl<(_mL)<x
zIIBqRouCXvW))%YqBj>o56)$-Ia+n~+#=}%-T6J8xkWPcg9O6dBAIW31j5`R<eTd#
z+v*O|xv)rCT9o_z9j)A60|u-Bj+hNWLVRJ7oDD%jd|{DHp+RCcTv$}Fv`EZ`#Ne~x
zq9VtVA~73E9^~FGlCz;?VK!V`WX^`&$t{-Ki^SC{Q0S@UMRFzt2{o1%$(ax&;FcGe
zGhugfh&3=ey%<$fr#btsvCKi4%^J%b<R5E_<V*-b0IexPui`eVqle*KUu65B$d1qZ
zu{&$?BJ50^*4DGWNG%crw+Hp^M$x++K>&KAX)2I_-e`6&NI-9-?)?i4-GjPeEBk7`
z_TOb&EfMP8twox+@sBbP*;<4f|8#EDg9hjhHt8+xCuKW|<SrkW5ZO^AKLZUCB0GwZ
z710fk9z^Y8{smg!@?BOf)Q7u@<o7L6h6)uSlG9-7L3ZCO%+BU4z+l>IS{;udxYx8g
zNC@t|XZ0Rr^+Uqy{XhWckZE?1{Gs$hkU%<QnjIvN4w2cPhuM1?&cj8v;mo~Ad(LyX
zNKFZ2_atL~B8?3KfS;Ic0tvuROk;xt;3s74QnaZj+2{y+_-(Ci*%3>GjD5r$ODF@8
zBQ%yC<svZlarV~R+GFL%EfE4bZuU=4ZtUaKKOfLxSWmKcQ!cq!`%tNBGMf%AG;K0H
z4kR#|iexSgl7xydcU`0b*ptkEHP>#L_FH@PRSSdmDXv-=)Dc&U<iQ?ffN`}5a}poK
zJ<$=)TSdzEd=PiC*WkApzIXz`TjuZu3Bg<D@CAwCd#kA6dpUfG!H4fRMUL;}@RdBs
zeQOS1$-?lxeQ)^oq{#YX(LW`#;0TsTW<f%gA5CWh3CJJsIa5zcI))XCT^kUv%CKS?
z(m=u*!-}Odfdta9VmXFE0%=$=oasExxs`@<RIzO~3%skH^NcE1<HDON$(zQb0?fG`
zK>%@lu{0A%AdWAVkr^Zq#}~t!$Tcd-3Ep7GR%wq_zG3PFCJ^2*bplC+isc90K?328
zVq_n5LRd*7c?$cN)i@!XVj+;prWDI}qEQA2Q;JK(DJ4iCOevPv`zncIQ`cyT3RWzG
zB6yHs#WE;@q%y^3P^=`+nk6j?f>Y9>Aff#%OMCLKS*Att6iBnkqU-&zXqDl7zu5Lg
zZroZer+eNnHq)3YGHHV_DZ9E2`(O>GMezuT4W>mw0<nQCdVt<etD?3p$rW$c-uHD`
zQX(4!F0o5OrF?k{5<*K#@Wv6p8dU`=I#-n_xe`Zs4S$JaQSQ*ETF_ntrto(Z0m7;h
zIbDGS!m1KEU4ewZuPQ0Xm5Awz7~J1impImyi0Ml5Ah)JOPFIoze_vZd)72a=Zvtk{
z<0Z=HC63%HN3@yRFF=Sitcpi~<0aBxK|-nHCDLC(0{nOhvVS^&012gzmlS;trRW|w
zF`yKD<FgWZI95end5XPs2D@#iENfAxohp&tk1~KgRbqC36-DR9MJvx>yRFgEjKXrG
zr5S~XMoTja4~-@0_b+KA^)j3nOYjBg%V)KVo{J^sHRN8@?N>|qNa_Rvh*!-H013pa
zC2}Nz1me{a^gDk?wHI~IO}75LcC`GaB}3hQvqTgBGlDXZxmkkmxxY^NVlNszx7pT4
zZG7475_w4mOvv0Waq&A}R0cA)OK|6l=Coc!{Xq7LKtbBq`oXjsNC^I5S`8!>y=S#v
zWa%Ny{+0G!fBYsQC3_VlS~?^pdle*rhNNV#f&|cz6l_<A?+iJ5<GtP#zUA&}(h_#h
zh?Mz8XKymzxD+>DPY{3{hqrUM!-E9mxRf*=NI;HD!FVfZs_2a-J13`<X(>l|HXHnB
z^=+2>QX5hOmMKq$oSc&0kMfY8oRZ!T5{@=GRWL0jyq_4{`=_KFEG4{O@*wwSN_xL!
z!TYDC%w(-M^~sEs7418L12cmqqCH5cG9x9O6C@yKq)g}RP2{{qFtfdCo@rn(VU2mF
zfk6Udo@ro^Btr(K*M9oo&@N>g$$DMZo+(+7LX@X3-SokwuEi<kos@(A<iQ16eCdXG
zY|~|J{ew$VjtBT|nRtX|EKNE3{Syb3EF+Eyw=$)y0o-3rH1q+n*rqGm{|<Qf|H#sc
zb5+XG+d`ubSe<g*cMolSO4$T7?Bq)25YmXpYOZP@)x4LIH_o_nWaAAf$G=-}WVMYc
z$ItJ<ZB8lM0f&FP5=})&k}TT!<S1msEh&e%E+#m@-I{WAv2e+<+ft51_j|zgDP=E!
ze`5mU)pBC7>({hjcixq9^s<C$#k)HtKNiF*ppmeLs^p8^KIHKSg~xXSfj&NHdMrq&
zchK~BkPtmc9?vgQ^dTo|U@zX#CY3c<GUVkADH$$M1~LsPgbVtLX&<uMM=bia)}#GL
zc>4}5$|EL3K1#`G0TLn~r4TLd($&2_Af1;|%H`bXueBfZUdB%m$ngN$UNSurBw#L?
z9tjdKmr^p2gT(l{lq$N6@kN207$T5=l|mpNPWQO_P<*+Q$~AqbIh$48u_~hF&YhGz
zdqF8wbSLE&g9#)mx|2dSLD8)bMfSmIu}}g5$-!wk?m$9va9WN#kdPdlHpg8b8l)rA
zBFh2+Wk#g$HI~-DBhoUy;VF<tq-A^q38WEe48H{}G5)Fz=fbq@P;UKQ?JcK!VHz*N
z4yA3`YU=G}x!*eV;r8-nX&ITo1=zB*#;@H{A%HDQ(`Pj(#8*@ItYk4&Ur@f%lA(TH
znU-r`l!463H1hQ^q9Sy3E_YqUEYUuf7WaFBL{PbO0pC6(5<<B&x@a%2NX1FfrnK@t
zTcPWF@;9Z`R{CRH0TjbOxir_GDBF_8=OV~!s(E*BNf%^Hk_x5Ul=0iT)zp*Qn4^VW
zRkkhd5OWupsD4}8FZQfKLS$PSH*)9;1l81WJJ_o&^asm!q#feJOkhG}M>;5uK|w-f
zM;gbVbTgouI;@_ZZK2;^R-bl=KllI>BK2vnIDG{Pk@__5*U<&vYRaT{v!ArodzbA_
zJH$nGFd?!#9i<^oO{1K7ce=8dY(94L_Ocx<(fqw>hw!>;eo=jII#eM=XeWJdx<e;^
z^SGKe_x7{uR(hYZ{gw#ro$t3qXzzSKiO?q?s%gLbAY0x_f4t&g+9A#r!Gy@cbU=K@
z2P8xerpw#u3+Yv;zJ~Ke+BP~@p06)xW}HalWSg#a_Jx-@Po<SJ?7X4(tidm_f(9RG
zr_%YN2SEbuR2uh2DAfXq5qc^eK9d$lL&V@GCa2T5#!F*Xa^PC0(>VH~3$>C(7b#As
zd-c|DkR$aaH@lEl9txkc$ESwX09)tP|M46+B68q4I_^SR9>{{^<>lw0K|-$!X<YiJ
z-T(>vUr2Wuz&~3;B!ArXL462K{Cz2=UCuT6bcg-L%T^WSPM6K`ibAO3a$2qtK?37)
z8f!#R1#Q?~PRBaPD)_m`<#fEgewQwK^`#IvG^32l4J^?Ao>zmPW<w|h4$a7@fO4p1
zXy#rm6at54P>V1yg}|Yi*r<$1F;HBj7{fA-kr|O<NFL;dXJm>YSx7NPWGKZr)tt75
z@$VVqGq%m_sY3mvF+P(Q;dey}D8Nj}C~f#%krI$l2s9sYc_3k{2^s8%OoZt`<LQ*#
zgx0!Yk50)b{E{$nQEEyCmxQZ%Ay99!tx>&S^v#U?Rw(`sgSZ*2K4>!=|8#*vcovW8
zolB->lyb5vF;Qk}rhNx}l!F&SOqiR&f9c(pAH01phE2~Zu=wbP06(h8RPaR}kwBfB
zY2TlEg_BTsZl*&&9iMgp4b#tK8xwlZ=sZg=+R&dzdI{a(XLZb%gzj~gUbLZKM|xqj
z00$9aKKpZ0?-iS$k>B106J_RS@G2ZWLrjI>AWL$Gllq7D*piIGM?G;-YDos)8UIMM
z5W{|TZbz~Hv=Uow=|r3Qt4SwH^C5+io?~6o`q5Y}qi`=LCJN;;-FoQXi$XZQ+QiB;
z`kmM&OLO`b?xsxpjtESOqo3j2ma*+;4`ua1#<mPrAhhq<k4FEFj8e~*X7ye*_$4A1
z_%Pp&Oh~*;4HDMfk-=s>IVVUs=Z;KqJ)D!$BVzE;zcV98zvMuJof$d$C5uM?&J0HX
zO{fk@)Uz+6l!P1YarSSe`qloR#DKvw^x8giz<}gs<pn>G&}m-=$2#~Bw~~iHOgWUX
zHD>JeA#V2g-aIc`(MBI-9LnTHxx3@PP;k@%^N6caueQ~lQIO*M$#@7|KcGIOLzw`n
z)xajT)hnV68HK-KL`;-v$RO6>qA*BMI4o(acZq&z;czbDV0Df%(D5+qSf;m$9X34y
zOh_IkPZ)_iJ}3lVKa=}g87*1QWEA1i;G)!-47M$3fPe(lnM~&gxq}l470+b4JU~b6
zcnnjWWjovJWzn<d7y%OyXK9SQ%FDpP&#_h=^#6#R%P3tXE;;zQOpl)W6!N72dH8uY
ztAjqZ_`IbHdH8wK<tOl^{)V$DV;h{chaZ%d{!K@{s-!7{w@WD5?~k>^m5g#D<IsPk
zuVnU@YX{=x4tCW4X76$}<LJv>M?3@iwT$CG{)vOeUe93hK=W{a^3q!w<y%(MS+A_Y
zFY%Q`@L_{nnL;spgM`$r4DL>mmx6?s-pZuEm0n5=?xo+DUMe}L{TtIuC5ycD8}d@V
z*zON^aNfx%cQcOgZq}oVe)wfj!b|ZCX1$Y<@0NmuPIod%9@n4*dFdUBA3`TuIo`>1
zybGOZmc(=DWI%%-GmdujcR`BdKEpXIYkPye+Er)nVOe}5=M9>>?j!#lo%46oz4oU^
zXJtMJF6tYdl^<LJiTXxok&x451ro7nbk?ZiwGoLtnwRia>i-b1ke`@U9u4nhe{kxl
z-2Co3PA|X_OX2%?gC=I>&N@hlPt0QHR#ZR}?!>J35#D!rN)-^tCqBO@IcVU-Y)4ZI
zUWmi=epvs8KHZLgsF{(qt%OTmz^B`P{iobxJ#p@5%*e`njrgA#9B^lqEFZkZAfYvA
z@!@rls9<Imr&_o?n-`?fJDW|b(w~dX&dM1EOq7|OMNf>T`7B5Sb$-s<OK)zE%?C0c
z4&V|yi}AaHhC`4B@FG^#TYopUC@a6(4JHaL%Hj$J|3Y?<2JlkWvX9;nTbfn4H$sxe
z@6s&1v0flygsxye^wD?6R%8`%BQwZH=!z^3)BB+3?>C&Qv$pl@bhX~wSe?ZcAaeiv
z$^F-6l^m<SU++=_5)KDiq<tXK+O=8vmjWQ6@!BkQ#mV77!r|6tlew%2)x_X~U|m**
zYRQ4J>#{ObOBM}+by*C8=g>p=OP-Bc+s>@R9)2{=1~ulzSevJHjd}a&<@p=4dBr@)
z;$L@YDtZje=%%a;Wncn*Qx@R^-zv@H|HQMI&BW9k-JDgral?a&GMlqF5T%JWMBT83
z-RP(Hif+luSOq3=vxrr6N*|)W*~$j>*KtapRk}zV>YJ_E?mftMD8ttlEBfobqua7F
zkb{Xb+p-Acbj<;Od1K%tzr}re*XZ`FQYmpLc5cu1?xWMK0elV$6Ciu(KK;Jp9ab5N
zoja(^zoYjaFr2%ywgd3t=edDG?CgE|Kx20nCz{lc4^Thu%__+C??)KJFLA#deDvVn
zY*MU_K%!lHvu)b)9t4RV+?y@iFME&}ya)H0Jt#TQWuMuDl0`kZk9zPbO_6v5p&@HK
z1qDxIicB2H3yUs{J)rM48nSsY-i2Z6!Vl4RVyJ<HcA)vPA`c|$`7n!rYQmeAAo1`c
z*5^UJD*BOChWhd&D$|;m0rfGP@t_`yew>v#OqloO$JuV(Wf`>j6Ly5ke3F&PCH^}H
zlAmOeTo!X2^yR0_KR{1KKQ;Rs|CNI>pHhF*6`C;h<q`JG0R54~5wpL+M42Ph-$Ebs
z<xzAZoBg03OwtMvl$Z|juQw=qlw2&%;V>H>WA=yiWb~LBN$`ahlsQI`q=c721U$~F
zAJWs&<5`9OAq(`NZ0~p$xBNsIBzvE+5me?g%LJ6`eMTloa2%w1pR)rG=|$1cvx=DZ
z@dXf+`8<mkq=f3o^iHrA55r6+vI>8Z3w2SZcOr`yxdaYg3OmULJggTLpS0RVe`;_t
z+oMwdC0zAE!+ADqy8usknmdAzz4fp@z&M-5N7KnwA0$^jpH;pPAqON(23ma71te^C
zKHFN{rw577J5NE3LJmkc?D=fw3+b@L;11hpI;`YCqejzVC5s%kksS60t_|nmFKE8b
z+D7G-+Qa7@%)SPH*YqESdh^`Lf%*fA@wMr(5%SoZ_dFIP)B`O%79=XVN!~~)8UDlt
zNdkLqklrSG%j^m;QRWtP1=3=a0rd^rKS-~Re`8J!U=o+6h7V{0iBR~tlg+hxOn=NC
zyJLC>*eG^~yrY_zg46z(Wwnp%ePchG-4Wql`y;v8YXS>yJ2dzG<9aiDY-p*Rj3V4`
zhnAv7?7>ov=!KE2^^^L>qLHOa4<4w%M13Pm@pp5NqGt!-J(p73L|Cj38O+bzPwAb!
zV@uJol<*IrjvZI3Oekf`vU*oG{wdvA16p(}p29feN@d4_L=(rA%8mtzjvZH;nNTX`
z5@PU<9bYQv63Kx=<4fgSB3ab2<4e)8o2g^*PdBxtwmHypxg(zQKCO3AjM~z?);s_e
zQg_ZMH52v0KSiPrQcTcz2=p0b6B_S@)SENeTR+twiOnpPOD!-_W@ah<r4!k$kUDM_
zbN@^q7oBAl;#?~95-)?M&So2brvEZFyHt*>Lf)6NOYzkQ`VX^*3};=b4cWjm`p>;}
zrFdJ0#>zuv(zi;Lg{5pTCKPt^8Qu9?(Bft(o<hU7O67N?L86|wN^zTy#tKN7^sUm=
hLTOTBaFZ@DO)5EP!2;8yl0_z60F$!EpUms_{{ea$`_}*f

delta 33604
zcmZvFcbpVO`u<EaJJa0@>`c$hPFg1I?u3QiCC6Q|0dqc2Pdz=kJ1=;5>gBK!B?k#5
zN?0<8NK%HJlZ!+V10F$%vIGeNg7ACZs%rYapU>~VdETz~t+(EK>#es!_ncUq9sFVT
z_5Sw$O8*A^9UtTkc~rSEJU8soy!}n=$8*2<Q(iAe^d5(*yYn9@?EUI%Fa7@c*Lpwq
z+8=(``<3Tk{zdQSUijmyx%d8@*W_RNiQOLEW#oly^WXU7yS&^d-#N$r)Bbku*S~kA
zd^IcVdILv+W;os|P#TBdv&ZjzsrT<*jJIeW|LgOw#{d6vo5i1x->xYBhnM58{kr$<
zq5#jo7JvR_J^tsHU+Mk3-p{|<`^ET+uRQ<D*W!QpB_6)?YWy#~UwQQ<u)Wy(mo+cF
z-226fc(2#upuf`l_kZ|H?-wEd<rm{Gz4mJS<v;)ah2F0a)Z;Hd|NGwYS6_Sn?<n?a
z?^jT+Lf0GW4k&LU?eiPyjr2T1_WuhN3G=C;y5X2mpp*zk-DVKXFV^35=t`c;a856<
z&B?vp$K_Gn(+l!E`bN9%$a5*EU<O;+&$T%^qd<vJJw$}y83oap{&QXiwa#Rd`@3F<
z%`8xSvWy*NW>T52gdo6KEH=P(FgmM13CcnWQK?Wh7u3LT%w~~+t}gM}mY@bGGn>j>
zBu!Prxun3B%l%`Z>lLM7NkN`Ze-^wdDf$7sKFIa+*arnlh|32NydM-aZKls5B~%5P
ze#rhY*!6Dg!vZBB3z4QDQlZyHA;6`q#}HTF4oeG^j4VW&E~P>Zp@e2QmlxPJ71(uH
zHcx}p<pp_O{Uy|)ks>SD%^|MeMpqOlO*lJ<U|&%XPw2gP8E~v(Zwz(a8(U=>LsLkP
zRRxhEy&vhJQH^WacSBtRVrvVOs1(Gh1&O5ojVJ_@ZDiwyxsJs*n*F0GWU`H9vKfta
z#o;!bCkt$cb8ioK6}!AA3sjH3*#YlyLsjQ@1<J+T?y;_(N)3LhR0}<Tg5MQr`6fgy
z-xV}2&<n&<bi#K9?u!KtbhoZjarF(YvEjH-;Hc6)x@J<K#f5_6^8Y14(1n7^PWoOC
zSHNyK$Geqx+>Y>iPi_ozeXQ01n_AeR#dx<?AhocAdA!^3N-gZrV!Ye;j=O<wa4qay
z3nz0s-gf87N;wUDZ@HZYijiuZ<TUaoxSeb5dMB<2G@a~L?g*F1*}+;@yB7e=TFGZ7
zyWQNa!L2~pWOsl&FhP}IsHZf90u|gu3HLy4Ixhf<13od?-L;#3C$9}6rm??Hb=_S(
z&8_INbq(@Bb?19bh-#;~jY1O=k2@6BmkGl;3`bq=##Gk|^|?Arh66I{EEx{SsB;^p
zt`5kkbHl$xA3LCWox91s(oznnZom$8?&v-GN#P$5w?F5f=lYFOz2B-O&k3?S-!J9l
zp_cvb!ng@h%YJupi5}x^McFUhZ0eI*xQ$zJawJASY~uvy7w(X$kQ1C=xMK<ZCR`hj
zU54Y3n<aj&UF!jW79X;7a6z?0R!d!wbjWS+K|-96bjY13*6+h$)eYx2ZreF_*8<nQ
z1>d;y480kKmrmpKD4V*#RS`YvR=5sCgawYeV{yGFF9Wg1*_j2dJEO<l3hxV)p>cYg
z`a+ZeI>{bh=(@A?q+3QvU7=xm(v1;#50?XdzI7{2!d3A*n0vG<#6Df<Y8C}a1VWvU
z*l($C;3232jjd;~MXtM}^=>6hmL(!&*1MZTrA%1hEE}-Mbzl6fTLwI|7G=)5i<;=O
zykPJcPUf-g%zd}WHB&2K9@WtAg=sz1_6cm}O4t466FhRbfr!>l@Mt`CQW+>c!2?l0
z<t%tOk;PWIp01c^vCs&e=+T5LcoZ6;6FtF@KAL*aLq@1&b5^;=RMmQ<qk{;=YdzA@
z0U@H+Bb^iwB5FM_#3Nh+&~*0K)vm`Xrh9~OA+`ZnrhAG~+~WYLkSANl<2N3|c(d8H
z)vmtPv#nZbXw3HHyCn||joBWLa9XfH#B2|ocDTZ;MdA6mWoujo_UieTj65P+GRX1g
zdptbEquM;knD0S|e@DoGuP@0t*14M4tCm<YXb3FvVBV!c=;1?PiKnEw2_a*Nr&Svs
zmOL~9ma=EoyQ<5V0?0Dt>q|YVnDapf%TkZqqrb*A$Dm%pwyt;mrDBEEO)6McSly(8
zWd(K9a?wplf!4C$Zg8!vUTZ0;p|NYNZlXzUt;aA8ra{D7GT3Y(0?EZD_KS_Kxz(F2
z5jsR{vP9?*vB~Ob9U?Y)B29Rp@F@9)W2;953IJGXt49V3KyYsL$Up%I&aECZP<WJv
zhGU0^2a28m=>8p+4h^Bh4oioIkhH@i0|g30(hd&-#WKn*@(t&g9^1*>r<+~vl!7lk
zc?J687>@ZgTn@0vHrG#L2Rw49fe7zDK;vUBOn^d=e2|Ua=9(8f=u!BHAR-DKBvT&{
zg#f>1Pk-e4Z|rN2;-wx%AsQ!NdkO>kP*Dg<9b-SKa}AFkvn0`+evBkhs+3Poeu636
zU0o6<JTm735oJzzFgaarfaWwboEJT|*Nxl@+g%s!?u(whfPS26Xh;pZ#Cq>=os3=b
zC<(3xh~U2DDJj)wi9%@5752NGt~u!|9vL7T@&;Y;AVBUGg}`&&qa?%Y?eQM$<1d{}
z*ps_l^JAci)TbeD-E|rl+XV+&cZ-$mcI}AY^2pfMkjKAU9>lhb1r+@Z=TrmfsArGs
zf-5-HPy_mOFgpxVe1@TP3y-zO?`8%2T`BhMY^T8<{leAzK|Bzd1ByZS8HQ%?Ap?jy
zXBd7lnF3;v%rF97`OHTU*$dh+!w7cKJMe12KAZjVl&eh}L$SkyW?P~u<jpoTF=^o`
zM9(&0j|E{U?lqiW8MYI-KYi({XypFNP^0=bQrt_5A7%?qxauB1Y$!3V7l@E`*odc1
z2w8`XvZf}4num>MkMP_Ag`sAMDCH09PjZ>y{)UWk&;PN7^OP&{An3vtUWF9?#<T?>
zD*48=1t2Q<#<T@NVT*4}TX@MikCQDrwLWeMC2v1&S^;Gs^f*~z5FF3pGn{7)+joXN
zd`)33>Ro}{_orOHwbz_A)Fkp}hr>taI0w~vOMzfwK%p@pgr74t288f)rpAEK_?)RR
zL80+E(pU%w`*}m@Duq-30jm0a6moss9_I~BBwB!we%|njDGU(O&l`nZxNi^?($5=#
z&iYw98s|5hR}9-=)~w!j#&^X~OZC?&S@NSv&Rd4k*PAOp<GN|D!Ece;;R&MIEhE2_
zD+CDrZW$@j&45tgmQhj3(^^2JwYQAseZ3913PeC+2A0>oj>`Wfp<nuV9WC_7c<m@K
zz^jDAcg7#-{ii?oewDp@&UH^YNW!Ro-s}NhIaLFq)&X9G6LKX#b@Cf5ao+V*%^MaA
zb@CftnGm21Sl;j=;E|R6ga&!VC?^Cf1Ddtb6g|kRiPRHMd11`zd-7qzLc=-DYg^>C
zhd1QMyZx&7%dd6&#V>mQ@ikh!vytDp)SU92Ye}Aaniu0|42_>ca+sNH^Y^ZC<ulD%
zKtwGwy>gfXqL!In4D+9G7CfB8-nioWX~i6ig+{|1(+q{&40Ff~lSDPJ!+WgpRo9e?
z_beW=!+WM33b`HLBRjk$cu?y?cHpY(?bZt|9x}i}(*T9s01Le^z{fN|0$4wKZ6{%X
zSql5ptvp|D^)=UGyJxvq4ePZeH9!qs=VjlGR^O=tfOXfI!T}+ComXqf9SRT{tn(JQ
z_0!~u0jTTT?p1bp9pNt>?CcV?Q|`?ht}>+tMA1Je0twqq^#CDZJE=ztJV5y1c5jm%
z@IhMO5dp)%aD42Q3p`1IwLbRB1)d~9(8pdZ@b2fDpuleO$}Z%U?2f0MKK9@(SIY_z
z#o98!^S|BRhGP5yLcnh7klF@Z0^sMl1-D$&?9YAfl_M&kG{A`Z+?&rcW2i^Q{@fc8
z$q67ad6AsZfCt2o{@h#o2p>EI#d!MMn|fGZO}SctX48YYg?6=zz51Y4ivzVB^yc&V
zkqV)fgWhCEDVB1^gWl@SJbwvLR(r%N@)rPb9`VZj1rVG^yfS|Q1m_X2nZE=S6h7e<
z3mpKO*)1KMkbA-_vt>Mmq!V75zW_qg2`}=OpTetxhV!)7c9rEE>XYu%UQC)in+=jH
zozKPc)B^j1=e;tI1Qnvrdu1L82vO&~$Ro*UfD{M4Mtkl61o`B1-s^3r*OSeHG$^j*
z{_Rv>ws*c_>I*6wbH(f#Kq}>ph*$@RO0IYj>*mvXCS*7V`fTs!va0%?;u+{uBf|MZ
zr14-McmCD@Fu`D-bX`D*9PE?M4+xQieQ<tEJq|~R)EbrhFkc;FFCS$wkshOba@Iy6
zFpct|2Pk-kDEf_IziXsEQ9Z^deGEjjWQ;FgI29lyjPWJJq5}{T#`v;L^|_*2z;|-D
z8maT_)$dp`$WPz#<%_+95ckt}d~V^kfW+i$64Q6mkPnd;*0K`?>h9`VO9VM#t)&Jz
zVXZIGigy!OAfndSwmo;k5INy=A9q65*rPftr~9N2;t?39`=k#7f^j-o;HIb>waoPi
z9}ICHoNK8-J~-DWeGpF}X|7NDARr{o^}z?9Mwf;S=X{^7p4AxYQw8&VY7@OVnii%G
zUBFHnYRi@j%uWFjf)@DXObiG?3w)S~DF+Lay%+nGqHt68@0+eD`;Au(R)8QP7#{QI
z8sEgD(qLZf3rF})A27OfDO>1O-z{Hi@sP}=K8@$yR0cdteaO4p@Ct#Jvp0NdyXxg;
z+rxZbTW+=;5E7RA<T415czlR7d&!Dn>cKVax=-C#zQ(6Gc^`oYo;5y~2zY?tS>wZI
z8WMT1z_#nz4Zqr@dc9REtu)tLwNl@$_ZcD(fdvxQ`;e%g7qz1Awy?hysu!xaSR!bl
zxy5w7Fz>W2KDS6U0U=_GudJE=oe+VQ=5{tapkC~;-4fw~i0!_7)5Ns!-0lmCG$za!
zp4)wytcamu+6mj^Q|=AFudqe^oc`Q}pju*o8YGbhp#a3~@yVbK2yuISkrvWQv?$%<
zYu(m_TwJ?*^v1dqR#L^|_PwM(Vad9W{VA-rtlno;prL|&zI+k)!wM}~_xVaIr9@h?
z?(?;5r4OYM8&<GnJ&-#bR)^cG4p=g1&3eGHJgr#|_zY7dtyvHF(pkMd7lAeFK{mHY
z?O1-$r--eEFkh@5^vSISK(HJn7ZFZ|wdxV(ZUQGeVpZA@iXZXii|wnhLW|TRzL*%}
zfRJ#6#`sQ}-or{G!*M#-zlr*g()qL{qY-4BwyfI-GEVy<N!j>Dka5~qn$|~9{t>~-
z&}SQxGva7{@S+b>1uf?s5sXvk6`yj$=LoO0vr4}nXR$)v#SSLa={0yD1|Nz+`W18J
z0z&!~8o87{03v<3;w!x26Faj+p!C6c)#teG6Fak#2EJ=Pxic$C*qQyoM?14)sI?Iq
zvIG3eec}E~i&eK$gWskS6afbKHL($bf)F;qFDEcSIM4vUaW9|12=WYOfZux$&jTa{
zVPb&4rP#HWBrc|NFMXP@2uck0V}U!y9)IlDNKZ@Ex2r)AP95R1#9)8ESXu%?r@{V!
z*b@STu)%(;eOtilMTT>@-}WZ^WlC*cFx;;;)Sp2Mi(vD-k!)s4eXeGt**Fj(Xry26
zeFH+!NI&+zX?6xg<3{>@HM}VV(Kz(~NWcHF|0QvzC;p=cc|DLg%C8hA^?0vGAB?wd
z*`l3jL=j)&;!&BfEHE!B12Z7xjPlFCT!he?H=4~)tDR~_n|1&Z<7Tv9&Jlo+FxqeM
z10(25b{Or)c4%X+K4L}QXn!2r9dufN$5Q{%{>0DuF1;i*pkgl!vFp2NKckW1oanb5
z^V`Gg8pM0{e)*-`uQKW;yL+M^$5jlymDh;onMtfunK~gh$uBo!K|~);qS`NrLeOn8
zyI7`Pica<`e0~Qf?bJ;6W1KeSf`F#5yk=^7bc!E`W-vR-(5y1WpU&tBUIvY-We+t|
zi%V<$a)YE1-^r-;V=3GRX%cuaB~0}zndAjK`!1(?*}P`zx22%)9YA^xnN$6#v_2YP
z2^e;q>sPvm`!=93+9h|bTz$Y^4N_JrL0i0Y{msfv2rcINE4opjBzBsi=K3qU>fO0G
zc*VP{f2G<p`mSH@^fXeO5b>@b6G)PmLGYi)j#sKBv3Y*EZPQ3`q0BsT-S>rF@VLdf
zY;$#?J-XPEq@vVflGKAsLRenHuC!3^h%WKVBdbP=hB8b1II{XXFN3)I0eh;Y`p?o2
zFs@`Pbd>qPkNC6$qaMvbWL@J|s={j=!U`Q)sk+h`B$FW@3~Pu%^bAGWHU3N|X@z{U
z!Ww_Jqh2fIA?$9=^=YFfmFQN>_6;Fqt3Q>|JM&5rShunD?bNQ(ZGMGMbI_y_%53vz
z%48X=f<9ug_9*j_C5Lv8J|a2yaXAGzMPdJLuRaj1^DCx?1t?SJ$Baw+ca0RB5^ZOv
z+N)in+bub6l-W*lu=$NL9;~I<ogLK2Vjo*_JSg)q$w3NDg>a6$KexPtx<HBT_bWU-
zB`Qko_ai-(_Vi-oDECH{`k)d!Y#GsuQisWilz@WEM@J%;JFC0nM-dIAX?-Yk)L&ky
z55)FI9>Vx3zwH7$)<qp)obu!Nm9|J5)4=-{4Pnu3t_Mm0VSiw8Y6%D#-;xWI^TK#|
znw{;cRz^?z#by{J&;UH`PZsMDUIwV1b?T-ziPj@%aa|ho0a)+H(Mt(0gHAug{?biN
zMbG%<R$^m50MGcbmDq}x!T3ANR&-O_M9-Se-Ix!$v*g?rybQ+NIo7DV+B|yBl0)O{
z9LW)NVIZAnPj^RM=lyaIxG^6{=l$3UsN`}mkiKJ6x~nbX-&t*^f%F}<{Zo%lX_%80
z+NS5ucUSkR1*}jl)bG|EPCFTJ0{i4%^`43eg-#yli3r{ag}w|mpCB4Mp|I86`Z|nB
zVA!!Xckg}b277sJp_4D6i3+CL!op^fiK2IHVY>(PyEqRXPGcP(P<vHQD|GTxO|Vd4
zn^x%OT}}`z(+b<%t1nTYvSK*r7TPA~7C)f2w7cgPs(yWaW5`lS=WV%552`&}ZMGFU
z`9w@q2-{ZJnD;$F2-{YOp*Rwe6&OlS3MdbUUvC;`e@Z*OxtgD-fA!xpDd6P0MN|R;
zCIv!#(MS*iCI#9)NJsCECWf;%VA~hqNAHd%WPyNMB-V{hNTKNgzHV#<fNq^0km&*-
z%1#f+bt538P7h$+h*<7uLR!sajbB!aTg<drXdavyko!w01D2Tq>@U6R<UBCU;(+pD
z?uD1tY=av76!U2lo)jz&<cr-eK!{l!2#J*>AjB*VV5XsL2@u)R;y~$#0kPpn1hGM}
zBp^5ZBnejeAb<_OIS6UsgOs%aB@mwAi1)nXp+|E1D{4$>36hw_Q2^DhwX~<T%39KX
z7Omf#U}AD^4k&ejT<t71YOetS_5#IZr)A6LfJ_4L6zrP=GRFgi)|&%`b<mnl--*C;
zye$F8M*)%JNgDXJ24s#WNyzcG1t`a(GvX#R<?XNs#NG)IM%s>mT(<&3jU55GZUuz6
z9RYLQ+JqMAp9I9&4*&-HCssGmy7iNQ%t`PRl0FH@bt@nweG<UB^=%D)6*ZhE0=DhB
z0e@8|I7&|h;N*>PYbJ`DG4%oEe88c9sOT=>H?#&wl8Kh<@h`Qtz1<n=CfX(w&(KR}
z1CFl$LqR>~0*+Stf64Aq_^9(rK)I27|KIA*>^1l)42}oT?@B<Xe1PD)5|Gy&04b>s
z_-;sp6G0@^0mpS|a7hE-HPhgdL`gL__zyw{M4`SxWl+$O8(gFQ)m{T&YC%5VHz>2}
zDEIlkL1fkBtbov>Z_pSN6x~h)u0_9~<Bg!`c1eRB`UjnEp5aLn6dMpkY@?)4lF)qv
zgU*I!l!<@_rXg%-AGPG!AwfBsKtwkV3CeB+gn~nYhB$x$gw!EH<Xe;(10qiu5=`7D
zE8&?XFOj@gZ^G*U8pay+Rb$T%v+AJj>tR+MG<1dq4YBf#@@4+8AT}379kii1ELe1x
ztb;Zb8<W&vlRNb=uLFKKf(_}b7Ck${s)NSYh@d=zj`D4R5kZeBl*ZSHAd*y32i?vX
z5sdegb<pS{9Y+KcJ@j_G4xmxY(NFF0+$gIK+Bg_x)j@-2RL~<%o1=X2j0z&x6m{S-
z6`p2HTjj|*Mg_C?^20iq6a6!mP3))ccy_E+35~0<ma%ADjSb3i1r{`9Y!LIEsKkj%
z#s-TYkPUH4V~q`#+^<J@LojQOXIuNL@n^?db<hQm@m3wQ_b@(ah;>zz?>&qUV*VC&
zxKPLVVA5=eOV%+ySbVSEjMsqzZ?QWDs1?<3S#{8c#9KkRAra*p5^n_~rcl~(cq@q1
zb}^D8m;$-&M7D5%`oXgkEfI7|KG9N>wj3q~4b$GV<uEabd`_sTL5qpOtXQH!pj2~W
zu<TKO;2)(ui79NuK()GhidBaWHKzpSwg$?ejw!*?4pJy>NlXb=b=KD+AB397oag1L
z-cZ*o&&{)B(1H5Apxj|VA;_2)jEQYoK**REtPr;l0HNo+V2kHum*qoG$|vUqTRy9w
zq^U1TNAAmWKO3U{ronT|ty*XwV|h?6hEWK$EDr|EkxKg*%Yz8r!Ws=x%kp6IAz4d9
zS<CWZ@q_w45vGukugjH=P@k~Ztg~vNosM<EeA5?br(<0(D)y103hi{P3(9>YK-97>
z*zN@pj{*4wt#!fn&+`jfR6t(PS{HowIX)pp6(so^gIM!>;&=S*wcan|#wL6JNv%<9
zJVD)fBxZI%)V(n%CnrGEy^&gYK<G~kfn29i>NEBy>n!~X;4^iW&lEsLoi%(4Afqmb
zX^FC(nBm+Jv|S8}Y$t}2JA&9#<wry@%64|M^P|;i6}!#&4I&Ed4$3qK5aM<Rk>(ty
ztRY6h^NZZNH`QM&6<-A9SpcX+4ys}c3lL0S1ie1}Ao5Hwq4N*to*1VdwpSdsm`K)P
zi-`j9VPcvtY63i!dy%Q7O7$tT@iD%iddh4(AY_~h8e&HrkeGtVxhXM-(b~B_D7Lc?
zPr!C|y=i$o0%N^tc|b7MljU#HV2#m~aUsal0@nB))%oNFO9Kj#7c31ZL|!n>4@L;O
zV46Q}I4=inZ-<2W<0yGKh$BgE{y3TcDw%&`Yy5`Lt7azvqUcq#696IfDs=+onsKt*
z4?$M&vRc#*0GvNqoYWIP1ZB#Jr{Me{h@|a0c~l%d;e0)$49tz3sQ$xVgP$Vh!~=+V
zJtQYdK!|xgBquOHh<QDP35;fOK+NK=hl&P<8u0B^BA`H@ki*XhBVjS*`-YHjdi8wH
z1CoPQy8S|qj-1E_O;#Ib`iC6V|F;ar$bgXJF_CD-QMYqgNEw}*GE0rwYk;9D2qNJC
zgsQ_rGS38rCc{E9&jf_3!$O6lp(^E>MBoX>@Q`CvNF*GR2EGv?nP*B8(w>na$}>MB
zuZUC1>lhzWCa`B~)%`X2Wm=C8S;mKC;6gd5G(Hp%IRzj@j}OU&9S|yw50y@UN|ebE
zK_u)fBolT?g00>n1AavJ1`>vIO31b#WDl>f<23ZuKd>cJ)iuVHkm}VRgmwu^45x;a
zS*+hQ^?@4v5(WYt+Dr|}ybuuDObyAr5D?l-4f$qC0}+86Xj;fIQyNIpz&G7AkR-uC
zGq{21Vrl|T<D3&x-VZs#?4jvu_Zk3G3G&N1A(<AUB!tZg$+Qp<O3Vov@84EJriF7u
zj`_Eh;569e-H=QRiBF_X^FlH$lq7V=dm$&T^idE@8qP%_TTYI`BotW`Qe$EiCTSFY
z5E4s10Jzo%rqX~Y`$0&?LO>|}K?uVzi`FJ-h%9C5OttAfOG7def=JYmDo*SG!LpQ$
zO^Oub*gj;dlZq6h<noXijf+W<RYH;008nI=sR$s-t}+z?gw$1}2*rb9Qe;g?!~+0u
zuCX{tpEV&F5AYP6YeMECu9)J%rjYUxjjd994StIL!UOPaGDj64_%@lN3K0FZDOC88
z>@Om4r`a5GY?J*ZY2e#pI*la3X|{5wA)AyK&W}U3z1${&296R``*FyOktJl5U9xuo
z(6n8qihwA)%QOlgs@g?H!Cs1^g!JFTGIP}ym3wf;$a4k|i5hY>HX&H{ggge{A9j=)
z&i{sNmve*Wsypok{|(_dnNAW*Nr^+O_dK;z#UWD^h!Axs<PseX2vLWqqbE?HEv4#@
z<#x_fBlfCeW}E;Oj(IF3Z*KxpsZa^uHX$C!I2J0e;N!WJX3dkVbiVp<)k#YN#p#n~
zoJJW)I2n@jA0Q;03}OE3!j%9z%@)sByH%gIBvAM~ZAqZ;c{(J|21|MPJRL&TN;7CF
z&7fyPj9<S7fc9rYGI;?6=h=`<UI0<s*^oJfmXe~ELSkhN06~{59cT`{Wa&V2=%tWc
z0iZA>T?!$E+3tjgqzvc4ux(jx)dKaN2A+Xo#5+ELrl?;AhxyQL2LO?SanQ%R77!u_
zhvm=(gvh~RILDXNJt>&YIV!BYnLD*a{i(eMKTSUBl2KuK@d)L>H!3VIwgAHKM}?cb
z85S2?h(Lbt7#)@uTO<WtH##gYwn!2LjSk~tOAB5<3XBWmaJo4D*elPo^&hHb<-n#A
z)T`sd@@zWAdv#nGv+r}97n0s$!KLc+<!@Om)QxY2<<WGCcjH@O98F^r6U~M7-(j<s
zs%^^O!NIFE5%u3YVR?ZAWgz#RFhX)$&H{5zW@=7t-(qrD-keVH&6LUEB5{NZ2$soV
z9O1r4d0q;uJ?E^jGB5Y19PTmH;HTLjTH?(L%Q+h5z&9%_=V(A!bym1=9;`}pG!b|-
znH_e#8y0i4q=9cvSkBRsglIB1OmlQ=t^yW=?}wE{I2C8_ELWRX1BgjFrO<Ko`(gRs
z0U&gGKU^qQ7l4rcei-`z<oGGt23Qmpjt>CNMPcdqfZ$vdmW~ey&P8F<@l&+W%Y{Ym
z_|Qt#S)H>~pyggJEVC?>grHnl`aK{7<-+j$`>|18U^rKXZEM+>mFj&3E5mp_D2YAd
z0zOT!vn$n-=&G>X*9H;(v?`2!ZA=I#1F@@F^HpkbbahznYlDa~tHW|Xx`3j~8uq7E
zYAUuywhWA%O78v?24325ZV219v!$!lpB8Kgt06iPa->OvO)R=v?OC<SY#E4X*(S4P
zfKXvm*buuBfN0sKF!tstHm6Cyt!(mYwMErdO9I8lt>Jv}`T)vMp>SB_P=JuIHH;jp
zCzk;2>sbC8_0H-#O9F+Qy0E-0ljgCpF6=gSpx9VPI^2V{Wen%eu<bk>u}1CX-bsVt
zV@mNd)VRIu#2R&H)m~FDh!DKjY#bm|+Z&ca7Z8H?l41YMCE($H_T5_buhsi42{bG3
zw<J*G_J?J9o#Bn!PXqjOicT5og@d`7>(r<0<p<623M!ZmQa8~07ZBAR4CCye8|MK!
z!kTSRdsH2<s-;+e#I#6;r^-jdZn1&}B%Uy0JzciTP>?vv=50_P>~_?WK$}iSEeRAe
zj#?5ZW*j96cufToQ1(PvDGyh%-K*3fdvv2(*%bsa0Pz?-d?K7LMjRkyod`F{$o5b$
zIT3E!O#edk1cFI@SUJZwY*at5!7oz^?H<)zrlinPZ+cpWhn9NkWm>5KBDB<pOU@y*
zP_9h`kujbLJDUA3396k9JD$e-Es7(H>kVPs4`F+_I{x^p&;P1-Hx}BgcKON0FkXNO
zp`}@JlgnYn6UP11S6}V@TKw@xdI|mT2>Rif2z`Li@3J`&0iu<cX(GZY73ARI6}Dir
z+NA1=*+LK@;fmQpKq_Q93m_z1A!k86fCTu;HKuM+OS)gPBv4OWvm{V8*TQnk6D*K$
zjY8dFT3D1B&L6|JaS?mC6H9!k`dHsB>Q>K>Ve>X!88x<FMBJtWfarb^**rjq?iZ2s
zEFeVpi=cU9X+|iciihU1+tl&)ilG)0wP<KWCZ#9@rlAoer4)M0s6`_pBJ={FV@5<|
z=miAlh=>fmfZ!YvF+*<|!LbpMa{$1h$3~>z07CJx5gB^{A!%$x#$G_qirD*x3pQzr
z2`OSbl>7U3bzlR}tcV&EIY(2n#aw9%0EnDxHVY6U=bE+vgvhyM3w}4aDXBi69onT%
zshA&;*H=L#YD8XN1q9Fh2(GWLra{n@Y_XWVw_9EN++wpOAfnpEW=jAeVsS*i>IVoB
zizAo|C`<riCR-edh+8WJ#manfq^K8NNT*7`u#DC1QO{Q`vnrvhhsz@J`Xb7pl4X%Z
zdnuL7wJg%9iVg)K0hV6LzTd0%s$OYHpmcF%MDDYp3?!_KMENxYVu6H}5nMyqOP<n{
z+O#G2uTRu{_UbK`3`!KYSWTsnu_Yp}Q-KFEwnT8BVvUf23U}p(f2yvtSMRc9P{7z_
z$)JF-D<WfWQywsOMKGMCF_1uf%7%QVp0EDY5<#iMrxAIRw<%8@K8+;BekUN*_%zb0
zHTU19Wbn_W{{n#XbJKqTQTgYl{{n*Z^V|O0lv0O-!hhMVFOWJMv{azf;h@zDN*xZG
z?h8f;Iv9cb_Ja2|Gn`*XY|~ixFV(xfUq^5!ydTXg&EUMw6A`68H|a~f%3On=B4*(M
zgr6{l148(Th`fCR2;nCpI9i~X3W%6`A`-8UG|+u`N0kVCYsYY&j5tn5^7v-XZ7O(A
zMUb-junTmXh@|b?f(T`89l2tt?;I=tO0B9oXDLMq!MTW>&YSU(axUT)(;pxNpNnAn
zdzwqYrJ@UL=2z-7H5V)i<Wv`|X3;>o5RpkqGd@r*L@-s*r6NFFD!LFU87VFm5yngb
z6)r?dUqoK2@gjWkK(Swru+x<l(4fZUh|)6LCjQVXy?@#J71rm!YKJP2Oxw~xx*U;t
z4a!4_%aJg@enae>zj+J2E0>0Wbd`PoU$uL;tCj?sgRfeKpn-HXB4_btd>~zoU=HS2
z@S35`&L1O6-y-(+gX+%T;HRkwjinzgYtUHwF=B{Z9&AwL#|UzH(aH3p{Ev~czC~sy
z)9DWO?+oY7h@(%D*~yX$-dk+ZA=T%3y@-0XF9nun6uSqq{fE^4RRfD|t3ktYV3CZ&
zC<8SH7Rfja2vGxzaQcI5E|7rHIGBw;tahmyY)PQeIJoGxV^AVLxX3N`^T7fMgNtys
z^9wEkqj5O%98r5$54R-Hs2pA-*Wu0hs2pBYB8~t6Az^q?>o)pk3M<WMR8Gh(Iiha0
zS5L5H&~4EPmJAw@6N==UnBako2}O7lbEA-flbNZx+&AiGd*`W^47x2kwMZW6HRDG!
zQ;R&Ni__7})S{xOJ`FG9=HWH`9YwZJax0FhQ#E5pQJzL;Q+f0jzGG*R5@0R5>!mf~
z-FsmE?ixMC6tc4jlPli30fd&jiWGiJpOAq3MG%50yQ>H@mM9CfyGXtqh*#B77Ladv
zpe#*IyNmeF7RiOGdr;|5Xnr7w!od7W2SF6xQ-rmp5DYKhTO{9cbn}S;kRKkPEL~{Z
zTZD6fD|n~UQI1$vWV@RC^?CI#O2OAf$iQexTTZP$%FbNClJ;nk%tk;&wMUC&HUbE(
zj#7JQZCFkXIKdvgsJ1OXVX=@2PFO4yR!$HLz1Uw)jr^7^zNl80e`~Rjpl>Y}YWugu
zf?Hr<0XoBqE~#D1&sZ#Ek24kvjrudhLS9}@)8~0M_>$VC<#~&RhWYs-O^jZY0n7QK
zMveJ50Lm${T`W?9;r8qgm(^m{<gyws2SH?=cns!?MRGd;5X={gupRIMuMeJkh5hET
z`eNl3i-iW_l_HsxmGgmkh5TlUj&7(hoI{(~R^)!XtVZ+PLz^Hu+=Po;jtc6B<+-NU
z)h%U}%cC++0~NxSM?>P?Ga%|;9>qkxiTbn>S3jb*?{o2#)<Y@X9OX-z298SHmG~&C
z?1(z_6L#E{sFZglh{gtGwBxPoqBts`s}kZ7I%j*-(d~aIsODp$OwEUGm89FT+_bDV
zJ+J&2&S!b<0xEPn7L`r{2&Q9E^abvgfd>yyvR5j#%C0AI7A;xGNlr%P6?~Kd%gHFN
z;8ThPh!}G+>h2^I;d?^3o_CTRsnom$C!_7!^Aq<<a;AFLpt;teyx!7=Dy)yn-FcLO
z==vyzRX45;&^h)}bFD}9Ih@?e`Y4k<7nKpTl8?1>QA0!xK;nsFVx-q_p&gv-5<Asg
zn^Sek5<$7yrKrr!PzFj|iblo3J|IL~isD7m*SG{!ca`mEq5Y-mswIIIb5|`1<ZxG`
z(Uww0a=5F}Hf{APE&*k)vznG#=c?<L1eyr0Tg@Q<yB?KkY$f-<>rwHQ1hfJZ!A*9p
zrFLiaO-lkD^53*1&_r-ED%a&;fetsLcs=GZt^+!$PmKMmmG*dbpV)0%su0m9cH5Se
zpY@5!-Ox&LtQ9Ls(M}}U5;MVwT;tZ-{SB%|STZOz8)3<ynP5chwi+}OjEF&v!88+8
z(i#1@+*|Fmq4w%=mJFH+##u7xkbaz{2h9ZINRP#INMA{Z^tHL4chEjis%tG7`H)d-
z$)H2}+L$3OQh*0CYGb&pIav4wj^JmqhpV)qRWmIS^t$^@O9Y+3&x{!&S*hf263mP>
zZ^>U@sH7JO=CEM3*0E}iC4o-Y=fvboA1DI}b7Db}Dg#1^IWbI&l=oHALHRs3qFSq}
znrBI%q-$PGCQK*;3G-s%*3z@+jC@|KT?hSVTmp{B7cggM?b)gYmIOK>UtqO@PRJL;
z46)Hrsn7}ef>_gX{)vc6x=Fj3)pph%t6FSHz-K-ji!BLmNLU<`>khC$!r~ZS<Dhw^
zlJ41l$eMT2+E#sNN$^0zhn55nBzzc?DK%Ii;lo%ouD9e8a0z!Ao7P2ZUA4@TU_in$
zOM(Fj%VP2hOQm8!!m?OAssD*fzy;k^%;>7UTD8iO;Dv-$mIN;(tg>3+g@jeqir!oT
zF7K{m>$_^ds#<4Bz{?embuqbTTB-OTVO>mI4MoF!kgzUR*+PGmOYr0N0(-HW_ITAs
zOM)LdY_xRnL&8R@6@EzANUfj^q)Md_>p6D0n|5FI7E3}QBy6!H6hgw5n9N(j0ts7U
zxL-X=xOISb2LIDtd$YRE5)puiI!i<VBI;stAyBCVAfhgoEHOuD5XnmJ{vI?!_gFH5
zkg+EwbG1q(2pM}~9)4jOng=0cPYf5P`95N$f;a8=Gyfgh&aV3{5jY5Q?2pM?G$;cR
z`(yGw9YBcKAH#b(tFWqqNW2SoI;Nb-72m0K%6lF^&G;XNCa0~|gdyg1OlHtvgP7AX
zECnf%2Sg%&I#zNfCU(GxAl5bYF~{%uinUUSAhn1wI^}5%042}I<V+3->E~l|#|045
z&&ROi@?T-@BCKXuqx-Z&oiAGo7D2(wmV!kPaoJL^2qG?%f=G=OM{}$wVzxJOW%p|v
z?4Fx39G&(j(amZ0?h|J}KA;V#?h}`d2Nmk|iA#?JgzP@?Lb2Nc2-$t&*o(a+WZ>yQ
zw)R2o`_2O`5wyQHFfL<$bDjhbjLUcO03l*v96QZNNxc?^b9CG`A$Rd1?HhZ+=s0o}
ze6-Bbg0vgUjy<Bi(0XiKo{xZt`o_kK#0D!MM2(GOX+~*R3!3TQiYw9ZWAPsB*@v|>
zoA#*IwlhegV^IK#y=5u}$Qk6s4hU&)#WArDrER;GhI3NfHj@=TrVS~W6vra}DOA#u
z^qRsJJf{7uVoF@5JRm~Sl(<YX03m5g97)EfWTlp**bLU;aqY8;85R%KJ|iw)_(vJ=
z%!p%W>N!;2%5ct!+t#zrPiW5?bEtBPLak7_b6#9o$liZK`(q7$iIfX;$eL%?4+vTF
zsD5%$K)C3<xNl)xoc|C3E^0X6i#ry?#rcn<fp30Xp8rS^wi4ct)0&eaX)9{VlDJYB
zE{U^AKhY}60Zb*RK}+KD5DFzBY)Kr4P;{cuijuRX?CMXnJ6~7|em>cN2$rSsfVhtb
z2$rRBdH)d*DaF!w=24#a5#)Enmd3M>@VjA>LLcv18h`L1KGs^1h!t$lue3-T{Dv>D
zh|8e{h}u@f<xm5pqH%L`vlS(B>*9QK^XC8@NzVa<=d3e52N06h#brnUgrs$Gj5wUQ
z=i#GH8{@W*;^O0TG%sz8=Y{xM5+7~CIZa&2@U<j+`6<mA1r)Cu;UR3aiJIRXOGyve
zW(#}sDXnL83%r^vMnsg^636--ZzTW%ZDW_7((Z|Gi_2G~KqM-SuqpIL2tL-bBX0YQ
zJ^Qpa*|#H}SD^m~tOlvF6LOP(Wb6C6%31Z#v<IRf@HCemL&#1V4NvgWP-Zuq`!nsy
z=<c{&`x;!C-Epj8F#f;-j=e1QjP_!5uQWOli5ka|*B!hJEVYkKeMY-0x-Tw|&J4bM
z-A7Rcn>1j7>Gw0|vs(A~eoGE5TlbTkH)x5|+Hf9;+Xm-;{jBCxJVz*O@I&j?)U2a%
zv6&8lZaZpvC?HyKG%i;rfKcXW94nKplsUF0gV*OCcwYO+UR`en4N&1k^=3c>q*8Ib
zrAKQMK**?%m!|Z!DwhE*Z{;5Qh1Shcean(TJ2kiBayihNyZx<rl)nK28RWCK;+W=X
zf4()Lz6mi~0D!Y^Lb@;@YVVtnE)2-anl9X$EH`L&{MVYj^Pq(ET@Yb}K?xa-0U=^g
zLi#QsL<~y6cl(iD+ZfI_6Sl><XJ5ki4c%`h)P%5W8?x&-*5~iq#Mbx?iQ^J--~&S9
zxP&w-AS8}Uz^wd2eH$|C#9Y_kY0ufKCYoA-iiS;0$o+3XDwUA0?*l@{!~`xF;hi)`
z8}gxAcHsBgKdWmk31rmTguEV%GLTT4h=?UIASBc#%)RS21n1<&ysTmGdX6Q7%sVF`
zx4KXWGUg=QB0K>SQvz!w>X<fU-FdQO0KhrV>=;0B&NDj(5S;T8X2-Ol?Sw@P9rHs^
z{Dz!GmI}0OxXA1tJcXb|X7>O>&?4#{<O7PMt>MfiaAaKciuRQ^m!MBb&<xWSz2jVw
zP}Z{iSG8d^_$6X8=#aJ|A!9Niq^(HEivfU`7*-?-*CxcoKm<N9tV}r8B*erZY2aIx
zkQ0L>VPaUFpoxK!)3#*&4GHC;@Evhh_?q@$ZvZjv;t^W7!E7NQFDg@YK*-*ZkQeI#
z5%f1C;t%q}LxSQwWkVwIfWA*O7T&NmfjbDB?d;<}Yo+YmYudbWP|QY?E?X1wV-jt-
zCu~jNIF3G9*OnZij&1$3_E_gSOGWa7I@23b1`_HL@+%I2#FJ>-PM<&*X4)CfuM)O*
zazFix7Hr`DDuGwTc<gCMW8@Hxk!fuXnc9E|S%=Kg0SH-#XmlJ<piVpJ>O7uMP9_}T
zI(BA>dS7nFKQ!H51Da?KN<hHzguF5X2m!|v^2!V#`tW$7$w~Af?c5N7`p|JAA+O9x
z3XFClA+O9x5(J${;K~f%`vM;doKE1%OcQ=(ru<)8Njb2o1lja-LSC6cVep<#;8f>#
zoEPXE`_I3$m&?ytEM&xU3AsnsjvMh@0()d>&VoU3frb99WnZ|EkRS7G$4AixbNm59
z?gbiu6l($D8W$3gJ7q)ZS|=8l7ZOEx@O*#@$h+bf65V_7MRYqFd6(IYe`_79FPq&B
zB2i6`1cauS6LRSXh-xn<u*3ZZ`CB`RGuK$;Kic4`YnBMwUAbn7pxu>g2}A7gfCVD1
zC9uOon_lf`cjY=e{2#5d^L0xC?XFz6B+%~4^@Jf7JYa!@>l6W}(d5*Qa-n|7-2FA$
zbbE__$=m%x8!G*ha#s<hz|}8_8JXW0YKILK=g_1wDwpV^;l>btn*B+eC_|GnFrXax
zh9-T5JYxieQw>c9MkPgHAOa5z!;+4XNf8(%4Sd6sGB8LI0>g+T1qO<m?Pxz{Op;&L
zXS1Hv{OsrbG-m}U;*LI^Lz6K{Ii&$Y;+UivIor`z%mnr@(|%wh`fJXoCM0E8!4ueT
zLQ>9afRHmGDd#mn$eECoIT^nDHYsVFn-n=2t<xtZ<%dSSG-@X&l?2bpN&xW`nBStv
z1H`zPoJ91v7r6;Oz(zAsy8+t$(OU5EqzpuqsZEND9w-AejZGV%Js6#qlt~$gL`@<o
z`ze<L?Pjoof!fp28F=Se%Asxi8A&8}xG(}a7$URSpn;GxD=FW11`%auC2@{~?^U1-
zY%qsi9;mg8&q>Ne5=4}llSCr95b-JxpL<)8#8*b|dqb;iV632q(>uXFYWPZOIDaP?
z5N!h%4F`mfmDF&0`PxSfU(Id}(Yi)gC*{2;5K(4z5(5-lfG7jBmOV36dm_5lY!rw@
zrA9r>%b?-w*`A@=qtW%IaeO=hTu;X7!ONiG8(H^Z+8xo2N%_LNk2ic{5~GrmL?1PL
zGn+X~>mJ>ll!+vWsB3c)i6rJEl)=E=%JPP5k4LvAWnv2=%4|&{vBj1M%3x@I#Qrv1
zyD$2YRfgUP{)oz8_@WHP-gfr&aIG@BUHUB%QD%D*akv#PgRRRQta60bCceY654~Ey
zgY2`EGI4yGZeP-Ni1i<#eQ4}U;>sEIgP;20Q;ZPN4}dT=Fh6gjr;za}wVOUo?WcbD
zjIAE2-5dSP)CEM8`HXb=H!lP9B}<LcYNB77{psiZ@Fn$UH(mz)@D<xQO6yVlm1#de
z?}x9*ez@_Dy3h{?lS)ar8+&({R>bZYtu>E>z;ArfW7KmnnJm`NP;Sy5CrL@$KsIi)
zR`32giQI(GitVX+r`YH>wQ1$2%=iN$+Hoo=b4Ea@b1I2hk@hXyQzPry&&Ocjvfdo;
zAfn6b&G8OMg_82p4Im`cQ}Za|wkM}M$37pURaT#~B#=X#OUh$Ol!1hE$r5qr0uU0;
zC2{A1e}JYv!7I6*W3}P-iYrMuMS%*YD@mCm0#YgJ;mtHxv?r6@V7JC;TdQwa^-`{Q
zBPn-WQ3fJzB*P+81%!wjNo1-NFWZx2-%5(~9{`-U%vcEs&Rb@z1O(@;+p)4eHE#f0
zGy_>CenXQ1#WGj|LhOKI87u)IXh5+HmVgj6pcuijFFxbo=zwThY+IQd`IcsPxF;2x
zi+~Q)m9?yPBD%7+SWYD%LRM|D>`Fk$sx3xW($$p?WaH`V50kWB<<l(|>bvR1a=!#+
zz%soU`xRX{3;J#rJ2pw{)^nEGfDZgp&MdP5fRHe&SSFExkT9zlN#s(>syYBV-z!!Y
z6+6N+*}BPUj{SMQ_F4_-FasWlSr8CX-Yb@~ARwf?S1i+GK+J;g6&Efl7PBA`_$)ZT
z*s-u!%z}~zzW0meEGS8s1s4>XvtS4Eix2F@yjxjiEoQ(EiscN5XVBt<VmSi>LfQw#
z<_y?@9AX9U)gJf_IV&uqP#&|wG77oJ3bR*H7=l(%uj0O|qod(mQ*8T`)lSv!^Q<XW
zi^cHlNPW7#SiGPC0D<dG`v5}Vdb4W*A#go)?O$Nzj?@L4+4gDL-^w>zEY!7|i#72I
z0Lp-6b1_~4phKdLG%UBVKTg-4DBo5rclAI7%eG?qy=XwNY%50QLsvFB657r#PS?6u
zY`1Emj@w==KYfWZRHzv7nubtEGWJek>(&4m6+2C11A=p>X>34n?!0a6j%4h8voVD1
z)%#2{gGf}<%zzNF&onb2MC>bunV*4~I~mT;i)};M*_qnUJf9b<DPiVLWab0X%m5I0
zz-$d51RgNW3<!Y-$joJEO((L>L6)7ZH7h@8v5=V$nj;8hz;cjA&;y(WW<J9D&ek5P
zIAXDopd)6_bmC?{LOrvK&b&I2ozE?uqwP_u&zUU;5sIEOTMh^j=Za;b3`ji1n3}$&
zQP+v={(Y|TJneV(p5I$CX#e4RO9pko_r>z~4m^<YeKDpSK5{#u1DrRCl|Ci^J97U~
z1CkiCC;<K&=9mQp{|$4@0%FYGC@$<%BE~Ec_?Z2%*ztOa7_*WFzMJNll_ZSWTert-
zCkm(iORUVb4Jd*nQddBz(!WFwTtJBIUt$j2PLx^<DG|3N0braVB{CiZ!YD&ZWIP6h
zq#-3T9s@$skP^7mF`8Mc4Cjav+YEMjfp*k0qC|}gpQ<9C8e1ZUE&wEsEs<sdgv7BW
zGAaW?;@A@S6gfy0xdLO$7HJPvF;gcHA%U4X0aBq7`Q>*&NMI$%G3a2hibnF=tmk6w
z+3L3~31qUjOXRE2C<6&^mz0XbNkB+=yF}jOt0FY1gh#|S0N|WdB10k|I47Bw1>|K-
z%T|%2O_!Dh;7D2)5UrSQwSwGjx@lQFg{0|Z*=2rMw%TxhQer!k`|Sr>PWOCLVkRxs
zWZM10v~1^EgzNpLW$_3S_nVdlgv9-1+3ob&S~azKVNO}6?eMi&SSlL?Dv?V=Wqc_M
z2&RRlcom6XfvSczoy$s<)k{CsHrZ?NOE^2|U|UuyCn!L$Ei0816d;^^S!v<wQsL}G
z;Lg6h)Um2mIJ=~QZ$+t`pd<;-zOs}is3~5qH>S)ZrOG#@j$Dt=w29jD0Ad5Dnn!^n
zrP5geq12I5>8yYdexwu$KAkoILa8IA#os_Fx)M$VD249*x>O#BRa5^RFBM%6fM>@o
zOHqd%FO`D|Pa*wysoC|_6rk%%#h?O!pn6MBiqrL$o)jtSEj=kx)R&^`Pt&04Y&g%C
z;yckFf31D%IbUktK<-RE|9z?0Kn8%s@6GN2gv9Sl<)8wD#P3Vd_5A(S&eU1g+4!T{
z7Zukn9_sn)rJDGI5|jbY^-_ETei$W;ooO81Vv~+(BPwo{%KI=Ng6CGLi(l`eGT^yY
zitAl8y>%wkHzlkG0PFQlNk0PwXWx{x9w0AkTCX!1eo#tS4}c@t%YbO>pp@)oKu8*t
zlD!NFNrO_b-ZXr3$k7FF{ig5*_+uxugxxbNWxns(h0Hf5#m(0V03yfW4Ib|GfDkz*
zCCvv2kz-OY-vXLGx}ed{2`OcA$`PJSN!uJY?pv*I4M-+GnQ}r(js}zm|Adqr4S;aG
z38})#DKQ#|z(>Q|DaWLg7!8sJzIRe`G)NLg!^D)Cu63banVJ%zfBb1JQVAe}J|01d
zsiuViA#7^Ov~U-KvxS9w0KmetQ_{kKFvo1u!hn!8+q5tsXN867<)E%OvP;>9v!XNF
zPfO>e5cBDCH(hasYe7m`l5)_0L%4v&=Wd9`-aex(yL(~EaTnho6OYi2MJY#*|Dm9g
z#Y8d1ElnvaAnu>0G;{)y*xP5dfAq@zA6{BzE=xJOSkkBmmZuzd+?KW`rEGvSY}88S
z5ZH*uo;jy|QnNNC@0W4q$jIwbj^A41$aw2hj;C&m+n7?eLLB}iOf(fSN|I==lS?5Z
zZb~`C<uE~k+|4ORTT3okc1y~U=x|$bT}s&r!M`yD<IQs-vEApjm)dMkIXYX+w95TB
zCBGQNE1;pUgR0~U+^*#Edxgul20$P0HC+}E>g_dM9uTa1$>sTNimv2K`&sn`?alK2
z77w}k{*;UuC<C7TDMSqVsA*TS+86A`1+8O?FYt;UT9ijbuzZn{0Rs>$U!)K)ZqY@(
zu7J)9Ddke`R~NOLc`x9ni0pU(Z7-M}2?#M4OpgSFm<uTx*#R-YE~JVtVSrI&CxVFV
z7gLDr1Lz7@SBfzG(z&hIG-reAe(Bp4QIPMKmIo~;g^K#6-C|4uqN09j<Q5d*x>AfE
zm=*yJ0GtEUa`*v)b6{EqI6!a?Oq;{6D<vSq(jveCK$&5d4zvaymX-kyPa$boS_U{k
zNE(*L@SE8P<FA|Hd@pU=mm7amo8ff7m&RMM{b(b$8};_$+&y{v0DHyav<yw4LfGQ8
z#xL1YAqZQXrjKn<l<!8}vy}bl)Mr*KwRotXm!{<^7-hh-G>sg7h^Po1y*jtsg^8lY
z>a@7c3rQqub-Ivm84?83>NL8D|BppC)n+(1q?J$Da82Lp+mKcp>kn}SP;67$Q4#LW
z9?sW&>|eUxp(P07v+mt^$8Sm(X1F^6^5RX)`7PaU)Tdk0j%ML<!F*lUOUgkIQyLya
zr7dZ{*trG-^OiKO>d;3Ex>09tWB29jcb9KVJH!{8Km^OSbWogt0)k~*8YiH1SD+hp
zVjWwbuix3SF6|J15&|Mv>e60u@Cpc)x-_oa(G}lrlxu&Sc613>3Kj2fsHe(75SP~R
z7|b81qZ9!0s5F>APFHo7#=-vHPFCAcf24e8+97<h8^5%^GaagwEVQ$}Gu^T^zlGe5
zZYu6(u||5=^4%5-ZL06KSZGsyH?h$7Bf8N>_+B=wk^XSy-n2s;F@gw|z3G7X(hne5
z_NFVE>$B)JsqTjJXxcV1*RZiZvw?9mjZ<#A@7Wzb=sccQPO^<2y;BW-iPbjfkaj#>
zAbJ%L(vGKbr-U*yK#bqx>F~+4I4U9nKS4Q>#+6<g(UJnkJCVlW7yUz;B+(^{6Y0)f
z^o!)r-N^~hrj>ibN9}R8xF7yDV6>rs`2t8Hu%H0?@N8Nh&H{1<`7vogD0ViDHvp(R
z0MP+w(`|e4ubmL&kK5g?_oc+3JB7SUX{A;8qMd)bntkonPdx{USsD4*C39e-I4Zl8
zmMcs^NV}BA3R6@@ySbOrv6iwjeq?ef9dDuEqHAH@DOL{7C?j%Ze*HgrHTY@PLa}mi
zMurcRLoI_dw`-vxGdP1<gsmx74$j0zWJEH8;vyLtl5q^rh-5_4z&A7_lMzWmGBPYf
z$;jb++Be4kag5E_HnNrx{ZPT!OkRXvCMl#yG>*lK^orQHjQp}Fh%nZ;40caO!FG9t
zWQ(_Rzc11ad-Uy$!tW0g6{X(J;QnwoUI^$NHmQl;Bl=E8epnR$qe0XR)+n^Wjlami
zi9Ea6L~m0%F{4zFF^PyW6EiJZ>Vq7-5F*8_4F0I^n*2I0i(+H68YDi_!N89%GL?Ku
zNDxwIWm@#4&fpO0&dRjxq2tRCz_9piHX*Keiq5w5qD}tUq?gbgjy8u~h(q@|mR_{U
zKZo?fc!3;5hq>(0gx)zeHzPmP3nI$Q&EO3=e7%?o!7mo(7AEvP_SnLV!pA*PQEFiZ
zpC$i9v=9S-d9Jote_V+zw{)V7{^g_-tpvb@vA&x5Qu-IM)ft7mIT2B4b*6ns{kkZG
zqpc0BVOsw&w!zYzKAgKD)1nnZlj7)MIJabMyICfqKWJ>pV39&Qq&;Z-Z_6lkY%o5J
zTZ3OBW`Pd#ZOeqjE7^ds?zRjz=*cGm;gj1kC3WygN}q_p$NxteIsPRD8hn(I<6n|!
z{C||e_`eL*!HIfyWt7tJag6^vv-<g-Kw_NW8G3D(IZgn1S$X{r5IXJ3;HU@R?^g2g
zPb>Q}w)%{nzTeHB-<B6*W6Jct#=cBmlzTb;Jq5=fFpoH%1B5tW@wH_@DEldOBAwI(
zNU#0uk4^Q;=>Ckt-!~#6%Iwb|+Tc1dAP`Pan(A$%pILG^mE>R%k1|m5bLMHLH;sL6
zx&nyc{G43j4czrXAvpWV+|$iyk$W<u2$u#GrA}tB%RwUq5TZ_I+T6`OoFG&@nQ40$
zox0;OY;}rFZLXI`Pnm-RM2I*=gXCpi1|I$`t8cFVG4^dnX(#29hku*t*hwEt&J-XQ
zKh6HxLLVPHZRtWTewuW70?yRaaGuNHfCl%=A1^(Z!7C=T2Iz?;#pR50E#uH{(ib#)
z$|VKSa__d(|7~ygea6w9dyIGnnO8E7KmHE|O}v`Hnu4a{p5&Z2GRn;i^K{eO)Br<&
z5X6TR0bzg}nIbWd1A_TR1{bKvM*-oZH!|s)(npEFee_4uM<oSH{Al{9B$1E)NIuF}
z<2~UE&VJbj%785Mx6wa+p<h;dD4sy0ep&gtDIhfJmre4R1{KId`(+V3ghsTi?3Zmd
zAS<$7JcmXG>hGU*G^hU<QXF>}&LLSFWB0YynR`eUpVt{p6W1N&yCZWK+v;BX<0G>&
zR|FOHjm*k#H36c&ky#|`G(Q0%4vowj)qF-Kh#Z@j@K))c39;ZGpH&_RZ(|SU>8V_w
z_IicA1{ASQzJoVtd{*wk1A={g7CXJ70-9~dXTA6H4#ZQcfG9rkeMU(^1IK4unOg8d
zTuhgH^(*wXcl?{p)U0i3)*e2Iuf4zYYObOq&H;_7S$WqH|4D-b@2rv)0~Zil1B-99
z1EPXyS)6*|T5VpC2JQ^@mn!{du^Cx8yMTx?GpHv9(_9v$F*-N*U6r11kIjW-J`zAB
zau!2(0gZ$pjotYy(pg^=o1c}R_XZJ#=4WvsgMUgpNMm;qJKb5|9b1%DxG#c}hVG&)
zd~uVIgu(eC`?8C^CH7%f5w|phd~kl4#o>Ba^!%NMb9vUbhOO<YcQKY{aTSQhz@0P(
zR%Vse%-v0|dK|w*x(7PixiTyNe*h4=uFPTsom>qNuC_9pTn$&F08Iq${HwAuKuZeL
zT*an#)4l#xS@`?U&>i@%p7mMVN9c|R;;hB-ycj##O>bAQKATs<<0$@!hi03K?s`RZ
zLskYW5Fu(q76Ag^EY0J8&a;vIqr2WAx-qM?=k^5=Wj1DUE=qGL{#ger3AU%Z-Z{D{
zE29yJM9m@^(cyfEx?nRa@1f&xKC85qa;OV7XFGHx6QK+(D%kKIdY9;ytPIs4qRf^o
zLN(oPz`x+o0sgl=^mfs$S*1$Kq3F0Z+oh{cmj&>_D9mxJOHcidl5JKQijLc;%x}?2
zcNxx)v$j33%`@CKA-2A!exLDi76+TuU3XD;?aV5>sk_?N0753PxMmKBPTQGHip3Ei
zTDLRXv>ER-Ky=#9Z24~4X++?iw#)1^Nr6VYvT|0HB#KzOs0Yu}T!{A(_GfL!ozU|L
zCd1vE@_g*<9r~xn{%l^1cVd`2@iX+E7*l}I44AJT@&HlCXIcDx6JD+a#KSLG^e(+R
z`h``7dh-h^(}b4+`jY+qE<G0gGAk36Fz?MTv+X;`GHCAswv@^o$jS^7f2{+~16gE{
zC0q`A^DB1oE<IKHmD%HA-kV=hkJH_mF!km^JjAzy9%57P(Sz)XyY-3$NMfQ!0mwW^
zy)Se_FC0RbvVYyB2a~k?0}|68{vZcM50S&gxoFIOhuNXK^<?z089wk~7nC_n;iHt7
zLD)OOV!iZq^hj3Wf8GL}D7`z9#nnDh2HD-$>_sZ`wPg-U?!G2-B)A;pcHgkMz4YSf
zH(5nY^Y}6d%6yZ>Yg0mXq;^Nyx4mGpqgjQ&-i5j-wL6-{^eg1x1+il+eUDyTa?ENM
z{pG>2Y{x477jWFW4d<z>?JOMPap@0z@6mf1r?U8>Iyvs$<hZA^${FFffG`=b_yP<d
zY<4=^L|m^2L`R;c$VJfx5RQ8~n>iyLmk8W(>rKa%6lhd$I<6#<<JOboUc{y0Jp5hF
z4_VuYyfS<EsDm9^tVY-a5j{V*`d<Am#rVPW-UxZ`_1oSH2=#!4_X47#>*Se~g5l3z
zkQcD$9?+XcZ<t*HBFfyLu0S4)GC)7FIS=UF;y;@60f<DU`Cu2#8W9Rc{mOFMgZe}E
zSidqkxqysf{mS4S-FPWDaQ`y)w}<rZvHoS!%_7```<KDZ`UqKY;la5t9?~1wV}r}&
z3>4vhJGcxrVpEoCL@x|y*B{nb77s5|I`XguBI+AnhX12`06p6auf3Gn#=~M=$zXnV
z_7T0ccXSy#mNNWa)UjjAlyPNjNJej00}PoUh@J(6b;gv*o&`i3$CSyQ1w_w|Da(v2
z6Y~fWc+ZY4lk<qAK%=o`G9*b7_3YR(^z3TtS^OnVZJBLm?)0O2m15ME<u&1PsEB%U
zDon}a5PS9s-5CWG6EYq`?o=`d4f`VM$Z4$a6Z-wJX=QR*1tQ8!E2DpVB9j$SpG{|H
zpU{U#r(1<Ml?px2%b<}n*o2?xzlhB!lY^>=cjJsQeBgop-s~R3Ij78q+5buXDes&z
zyf;I`<Q}r-yJgCIWg;a7hBZMD7fS)5;=5(?%hG_T=-o10=c91~2y4DumU>TGlL*|J
q^Gs_>3Ysv_w5BAHHRr*aFF61B${$|)L#w^tH)y7^XCKXL`u_k`I&E(N

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index cf2442cc..20e30bd1 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -11042,7 +11042,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x06_widthB\t\n" +
 	"\a_heightB\v\n" +
 	"\t_durationB\a\n" +
-	"\x05_size\"\xe6\b\n" +
+	"\x05_size\"\xc8\b\n" +
 	"\aPricing\x125\n" +
 	"\x05model\x18\x01 \x01(\x0e2\x15.fora.v1.PricingModelB\b\xbaH\x05\x82\x01\x02 \x00R\x05model\x124\n" +
 	"\x04rate\x18\x02 \x01(\tB \xbaH\x1dr\x1b\x18 2\x17^([0-9]+([.][0-9]+)?)?$R\x04rate\x12\x1a\n" +
@@ -11060,8 +11060,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x13_estimated_quantityB\x1a\n" +
 	"\x18_license_duration_monthsB\a\n" +
 	"\x05_unitB\v\n" +
-	"\t_meteringJ\x04\b\n" +
-	"\x10\vR\x16estimate_tolerance_bps\"\x8e\x04\n" +
+	"\t_metering\"\x8e\x04\n" +
 	"\tRequester\x12\x1a\n" +
 	"\x02id\x18\x01 \x01(\tB\n" +
 	"\xbaH\ar\x05\x10\x01\x18\xff\x01R\x02id\x12\xd3\x01\n" +
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index cd8f9324..71da4adb 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -1938,12 +1938,6 @@ message Pricing {
   // NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.
   // OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.
   optional PricingMetering metering = 9;
-
-  // Field 10 was estimate_tolerance_bps, a tolerance on the estimate that an
-  // unreleased draft of this version defined. It is removed, and its number and
-  // name stay reserved.
-  reserved 10;
-  reserved "estimate_tolerance_bps";
 }
 
 // PricingModel — the charging STRUCTURE only (a genuinely closed, small set;
diff --git a/scripts/check-doc-conformance.sh b/scripts/check-doc-conformance.sh
index 9354a6b0..c8629c70 100755
--- a/scripts/check-doc-conformance.sh
+++ b/scripts/check-doc-conformance.sh
@@ -128,8 +128,8 @@ patterns=(
   'offer\.metered\.requires_estimate' 'ErrMeteredEstimateMissing'
   # A metered purchase's charge is final: estimate x rate, or one unit's rate.
   # estimate_tolerance_bps and the settlement on the usage report were removed
-  # before any release, with the SDK helpers that computed it. The field name
-  # itself stays legal: the proto reserves it, and the reference page says so.
+  # before any release, with the SDK helpers that computed it. The field was
+  # never released, so the proto does not reserve its number or name.
   'pricing\.estimate_tolerance\.requires_per_unit' '"?estimate_tolerance_bps"?[[:space:]]*:'
   'estimateTolerance' 'EstimateToleranceBps' 'MeteredSettlement'
   'metered_settlement' 'meteredSettlement' 'SettleMeteredUsage' 'settle_metered_usage'
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 1a3a2c31..b3a482bd 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -144,7 +144,7 @@ Three verification levels:
 
 `Pricing` has no `ext` / `ext_critical` fields — the licensing core is closed.
 
-**Metered price.** With R = `rate` and E = `estimated_quantity` (optional, positive when stated), a metered purchase charges E × R, or one unit, 1 × R, when the offer states no estimate, and the charge is final. A disagreement about the quantity consumed is a dispute, which this version does not define further. Field 10, once `estimate_tolerance_bps` in an unreleased draft, is reserved. See [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase).
+**Metered price.** With R = `rate` and E = `estimated_quantity` (optional, positive when stated), a metered purchase charges E × R, or one unit, 1 × R, when the offer states no estimate, and the charge is final. A disagreement about the quantity consumed is a dispute, which this version does not define further. See [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase).
 
 ### ResourceIdentity
 

From c09014712f8ede8b16ee9acf77e5da33b00d6ef3 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 01:36:29 -0400
Subject: [PATCH 107/164] Name the admin client factory as the parity matrix's
 17th divergence

The parity matrix went from 16 documented divergences at v1.0.8 to 17,
and nothing outside the matrix said why. The 17th is connect.NewAdminClient:
Python exposes the AdminClient class and no separate factory, the same fold
every other client factory makes, and the symbol map already carries that
reason. The admin-client changelog entry now says so in both changelogs,
and the ratchet comment in the API-surface parity test counts 14 partial
gaps instead of 13 and names the client factories among them. The
regenerated matrix is unchanged.
---
 proto/CHANGELOG.md                               | 3 +++
 sdk/python/tests/test_api_surface_parity.py      | 9 +++++----
 website/src/content/docs/reference/changelog.mdx | 3 +++
 3 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 0a793422..f4b906bd 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -505,6 +505,9 @@ request only where it means to, and check every answer through the SDK's own dec
   (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
   `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python
   (async and sync), `createAdminClient` in TypeScript, `connect.NewAdminClient` in Go.
+  Python has no separate factory: as for every other client, the Go factory folds into
+  the `AdminClient` constructor. The SDK parity matrix records it with that reason, as
+  its 17th documented divergence (16 at v1.0.8).
 - **Identity helpers.** Mint a fresh agent: a key and its thumbprint, the Web Bot Auth
   directory document for a key set, and a signer that signs as it.
   `generate_key`, `directory_document`, `signing_transport_for` (Python, in
diff --git a/sdk/python/tests/test_api_surface_parity.py b/sdk/python/tests/test_api_surface_parity.py
index c87aee6f..e71bbdf1 100644
--- a/sdk/python/tests/test_api_surface_parity.py
+++ b/sdk/python/tests/test_api_surface_parity.py
@@ -74,10 +74,11 @@
 #     docs/sdk-parity-matrix.md reached via decision_anchor (the three connectserver
 #     handler bindings).
 #   * PARTIAL gap (one language present, the other genuinely absent) — backed by an
-#     inline allowlist_reason naming the one-sided divergence. The 13 partial gaps are
-#     all language-idiom folds absorbed from the old BASELINE_PY_ONLY_GAP ratchet —
-#     Go NewX constructor funcs that fold into Python class constructors, and Go/TS
-#     options types that fold into Python constructor kwargs. Each carries
+#     inline allowlist_reason naming the one-sided divergence. The 14 partial gaps are
+#     all language-idiom folds, most absorbed from the old BASELINE_PY_ONLY_GAP ratchet —
+#     Go NewX constructor funcs that fold into Python class constructors (among them
+#     the four client factories, connect.NewAdminClient included), and Go/TS options
+#     types that fold into Python constructor kwargs. Each carries
 #     a per-entry reason; none is a symbol Python is missing. (The two former
 #     ErrUnknownKey partial gaps are RESOLVED: TS now exports the UnknownKey error
 #     class, completing the resolver error taxonomy in all three languages.)
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 8af11649..a15f7d47 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -517,6 +517,9 @@ summarizes them per language.
   (`SetTenantFeeRate`, `SetReportingPolicy`) and the two domain-verification RPCs,
   `RequestDomainVerification` and `ConfirmDomainVerification`: `AdminClient` in Python
   (async and sync), `createAdminClient` in TypeScript, `connect.NewAdminClient` in Go.
+  Python has no separate factory: as for every other client, the Go factory folds into
+  the `AdminClient` constructor. The SDK parity matrix records it with that reason, as
+  its 17th documented divergence (16 at v1.0.8).
 - **Identity helpers.** Mint a fresh agent: a key and its thumbprint, the Web Bot Auth
   directory document for a key set, and a signer that signs as it.
   `generate_key`, `directory_document`, `signing_transport_for` (Python, in

From fb885f4b7515e357b4e610162440e12cc368ef40 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 01:39:06 -0400
Subject: [PATCH 108/164] State that revocation is scoped to the signer, and
 the redirect rule for directory fetches

The spec said how a consumer polls a revocation list, but not whose keys a
list may revoke, nor whether a key-directory or revocation-list fetch may
follow a redirect. It now states both, in the file header,
WBAFile.revocation_url, KeyRevocationList, the Well-Known Discovery block
and the authentication page.

Revocation: each signature is verified against its own signer's key
directory and the revocation list that directory names, and against no
other party's. A Broker's list covers only the Broker's keys and an agent's
list only that agent's keys, so no party's list can revoke another party's
key. A request carrying several request signatures is refused if any one
fails, and a request signed only by the agent never depends on the
Broker's directory being reachable.

Redirects, as the design history records the guarded fetch: a party
fetching a key directory, a revocation list or another public well-known
document MAY follow up to five redirects, re-pinning the address and
re-vetting the scheme at each hop.

Both changelogs record the change. The generated code, the descriptor,
the SDK types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 678247 -> 679479 bytes
 gen/go/fora/v1/fora.pb.go                     |   7 ++++++
 .../fora.v1.KeyRevocationList.schema.json     |   2 +-
 ...ra.v1.KeyRevocationList.schema.strict.json |   2 +-
 gen/jsonschema/fora.v1.WBAFile.schema.json    |   2 +-
 .../fora.v1.WBAFile.schema.strict.json        |   2 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |   4 ++--
 proto/CHANGELOG.md                            |  13 +++++++++++
 proto/fora/v1/fora.proto                      |  21 ++++++++++++++++++
 .../content/docs/protocol/authentication.mdx  |  14 ++++++++++++
 .../src/content/docs/reference/changelog.mdx  |  13 +++++++++++
 12 files changed, 75 insertions(+), 7 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index aa320ea27550a93823eab4122540d8cf39ef21d0..2d2080deaae2aea7549a95b52318ae56453d12ef 100644
GIT binary patch
delta 47636
zcmagHd6*PM@;*LYU0qdO(=&a~^f7c-4~HPk3?PWCGYEL>dg6WV>LQNH>VgaCuKU^D
z;l4#KNkQbk<W`iD`xXH~1W^&i<q`qqMp!PtZ)9ds=<|D?-+vuZ5pPCjMn*;+RekWi
z2KLeh-Ftg_E4{tF)%Se^A5dn#VGn-5S2fOD@KxB<BfezbQhWOe-z8sU@l=ngXn7Is
zf|9q$>uI{H0c$c;Z)Z0-=i8>%ywbTt`)(aOcd|NmwYqlb{8IHZR=3Vpx96*^t{tE2
zRNbZAy0v|W=Q+{7+sj?5N$!>EE*+ok2+8)(weQ%eYd5Q7x2~qu`R|>i&NW@F7ph;i
zp6S@7x<j|lU0$`?cLFLPyHsB(?!}JK>-Kz2`)*gsb!z|D>aLAUF7IG>>TGp}ZWrsN
z_FcNYdQI2gS?#U1T{^!|-37&Pln$L?P*<ySrx#!4r8rMbvZ8Avpuy1UPTd@NDTtEW
zKUX98j^HyEijxIN@b;ZdZubk-0Q!|B1Yd5o!PCFJT+M3($PVqhbm>@)wycIx?O${r
znr;hrr6%lB{p`zK(SkJ{p9SozFuvOA{4AOOSL@mK9bbe{H&p5BChhQib%z&F9+@Kw
z<URC^sQA;O?!2N_Co0@}ruwDoPR~%o{Hj^p_BO4j3#&VJdJcf-<MvO#SZ!ar=o@fn
z@Pc9#n;lG5%Tw|q>SgxEAGGT7%ZgTP7MMO_D&Q)Kx(?|jvT<wkTOZf)MAX4{{oA$g
zl(NBIEg_{mP#Ww_HgrfR4fbAtyV;)W;Nei#>@KZC`B1MGmNE))y^&fD36-JV`Zt<G
zG_C`3yuI!&E#xg9@0R0*(s*z38mZ(ZDR0v@<|YqUQX}dV=Dk<jTt3CCWu=e`ohe?c
zr9(nziuabM%-4jDFQU$1m+#eHFQ4J+_@FbxYqgR(KIqKw-rn9ECK^GDs0-{R_h}=P
z@&#V4P)cb~THp<491=<kybW5KvqeFAME#Kc>p^X9^AEjRkrdLQ^P#u6+##X!p||CI
z<~ypXs2JC4y?LK`J*i!a#ach;i`(5E(h8K|TCY*deAZM|-iPbi&_}fAo2>ULylshz
zURv*s@Ir_L>UwW7Wln-6pgj?7lULcw8a%2^d=9@%DxLUfi%s5q2gL)FP2LFaV|ogd
zP2O~g85F_>q14*y^_pSRPtT2h{s^k`iC1lGM$LSOr51v@nKgM#i`CoWRd4+DGc@I=
zUiBXH6atwF!@lz7O=mAWrkxCb<u&5w1hUvep1RA+P7E{Nx()=)+~rjaZZ$}lxy$Ph
zI3&#6<qd|+SGgu0e#a`G(EhLNJFk*2WvFJ~c>{5Wgvxi`MAB@;RbcL3w*LvO{HeW8
z+jtZOh3<9Q1|$&nIxP$m2z#l8sUblcM5gcHEkmSenZ4eU+s!!&F9Zrd*nj(@R^e&&
zgIkIh&GCab-;y|9l=6c&cY{NclJ~|+b7KL=fV=ln?cIOUHfdG8RN0LlMFmJNHNUph
zLaTzT)5swK(o3yqY|er&!&cO5xc&Vz+8pJU;Vy=c*s62|2mxcb8mS{OXgmy8uc>do
zB`Tvuv^Q1dZB<PTWGlxR(^%&ZjUqPUdF}BU@STp*0P?2l7w+XzG=RLR#)`N<frLN3
zsTRMjdd-Mwz%UK1Rv6JntLj+QCtH&9pf?6}gqYtE(;~jNRBeUF%<?*6s7+9n(p1=D
z(;oH5n|l-;Z333?Wsopsf|@Lm_0a)2LCxmO%fj8zebZEyd*1&)Ht#Q*)@qvDFa{cC
zn%gi2fTpPtKIUPJ0ibDWuD1E60(Vv-+FUj7bNkd^v|>+qu4*KNKP%+V@2cFNTYv!M
zyG}EK1mwG_^k<NOd{>1(?;zXA@wA1ivV{HgqV{<Weu>rvA8HGo)&&W*g=#F$TNfl+
zccEIeM7Az5c<b7#x>&ZZ<U#L4r*$O@t-FY~ZWXrx<72t1l%y&UlR9ZFZvi19h@vQH
z=H+UBh_@?9*tA>?^Qi@<(<oW4rqbqMQ5BG@Rppx0f2?+F{3k|+?dqg;tOCn{qv5bx
z%@^Yo>VR9V7L`hLivFwBy7kPT$qN+)!(pS{qqFu8Pt`^jgGR$fHDB~Rgn+S8O^U$*
z5*QoRde?Br;e&j$$|gSQPqBOdrfC(M9hbo)C~kIK1|$?WUvU{;@$J%O{?i36v)#2o
zL;r4fTn3T=+U~dvNC0gom-&z)pf{rJRP)ZU)m=0@xKlME=0m8Pmj^)BzpM60*)FHc
z!35GS$5TK8X%~6QeOv_(ce6k@?SZP@jxAorgVxyXbPz}qaykek5Oz}s^;0<nditO}
zwwvZxst&ps)X4|cd=c!typs>AX+HPEQtIS`YI%h@LSTSAVefrKiz`(pTny^j6KX!6
z{h>rXdqT~K7zL7)C`Qeup7m1Cp0%63s+D_gI_qLk&z^Pdpq@RerukG#I>0!qHfd@O
zLc97fm0ncy`uW(ze`*6F7gb-38rH|>&r7OOn`J)M@2MkZPSAWj(^Is-B{f%SKFEbp
z!Y^#@|7j0fzo<%@+z>L9`~0G2vgQ<cHE57MeXP#Ew5i#iJ|!uo1iPe`c{>+^alL))
zhkt2zWPAIRoD`z;rnj$7UGq6EglhNovHSk5J#Y2(U9pMsnZ7>QwA_n|Ash_#<t?^%
z{##q-i467mih0HOlsU|&Tq7zbW=YU|?D#+eWS9?Q=O&cop>aBbrMhcvvLk#7PyL7q
znGwGF4S1#m8ssSU&+gjmbw~M>dfa3%iR)`{t$7Mv1tC;ytWRm2+OM#h?poZwxrg?+
zCj%Du4-$aFSRef3NiL5%j$=!DYJbj*^C`UVAVXCg=R@DYlR;wqOkgd0X%A#4xYkjM
zHi4{r9rGB3;0&|uS-rGjN~>8urGYe$a<W;zMr95O^Je+V+n9x>MmpqovwRh;%`d6%
zFfT;Z`Rt#4wVm1dKBb9Nq8x3$uUT`mFFYDTm>m|`UHWN;Vl8qT!hqBwYKT=dj@5{^
z!k4#+jTxY=46g7YlR-lxNFngAVjTx+ZOT^p6rBnnCahTHGYT9MMy~RO!e&dZf`@C_
zmjksM%htLoG;r7Y3^A9geBiG2A=+1S6_~P~-84vhu57(e_^FsV)b+j+F^3~uqLlSM
z%;EQP6;K=5_CebHtv32({8beir5k-RlK_cAH~Q*aEA6CFy3towZm!W#V_!u3#+P^8
z?l4$u>kWS6Lxy@CkbP9;-R%9>wdQ5JeR8$}6HvQ-ei4;H0&2Gpxn(o1f`@xp(NOLB
zvOP|feLPm}@flHGI!LJO@f8)DO}PrHyq~=~RBKkY-&G;M-tR*YrFQo5D)0Bji_FGc
z1po)x*F&|YWd~gqs^dW)mPkT{>UhwHh$sw$w;pCKhiTVW9d=sD$MdbjzI@TJAc1h$
zS69R#kU%(0zC4#EJs&yqF*bXcHow&|7lP8QV?LQ~K?V@Vd@_Fr35a7pWS8SG;t}<<
z^S-<{>@mZ&w>|aF3%~KInjX=5Xi6VVH79ya9dtjx7h#X{>_3gv#(Qq>sj0Qi5V9-r
z5N*~=Qy;yGgMxZ%YBN+`01nrbQ2?Cja{v);h-cqAN_$6XK0;F)xY`siMrvv`ay3~3
z`pEZ&rcU;l!zqw!<O^f%+M~6Yr);byodH}_cdRB8Ly)jytOjSkmFwW)c=pT~?e|sV
zHR+ieU#g7PWP^buAuS?$4I~i8Yv{ElCWnAw3+*4qXjQ(lg_`2$eXH?_YoP{fsjERk
zX(1I`!F50_V)swbnv^Zl6p_$qd;~1g!XiHhNkUrfI%XTL0`FML=1<UWu3YL`O0(2b
zEnj4a8uyN+TDHC{l)Pi9*02#DD;hb+3RW>uYhJa&MeqS(g(m$AGN|hct!{-xAm>=2
zHNDP!hx|*UIJlNgoT$xez1D@$h^yuEDT`zPu~w6z03;yRY6t~${2T(F^o6GEvIkGn
zW~(*$DRNAWr_Eou9YtyL7t~_3BE(bVm|ti`yEKu(6NBfNUux>tn#kZK4|-q0B%Z-b
z7IMs;8fEa`WVj6ovg387IJMcfr)!S|%Rx9+P|iJG_lr>t<A63^$Ee;W8o*DR0Ih88
z^YSUKjvqQxbiYXW;R4W^q9ftw3mCLhM4f53{!pvsshX)@aWWI#F;l<dWF|0X>JdI!
zqq-(AX6kk7nbSqN`4M#<8?#7zr)r)Hkq?M@E<`>c=IIf~fARq_Pp@6qTw?G_2O{bk
zyZd6TO08PsVg%56YxFA~6adB=JuC7pO$h*Fjb7f^TtWGkrW8cft@iolS{tQmtBX+p
zjIH_=A1VOGR{e?(6#!$a-n5x{QdFf7{mTBaN;_Tkg$q##h%a=xHr13uKzyO+u9I$9
z2#7EA>u)eGWB&$b1S9Gp`<>NVcW>)ME=CX-hxB}>>w>^Iq(>dM3<Bejp0UgUw7$it
zi)j4~Wsu$RBdxzygP&qufCqr-Z{&;p4UmB8ZxlP78v;y!1Dz|}G6c8mZ<G!)#6|_g
zX*mv+0ft(^*OiimC^3*&w1(7_a6}zq@HOPE|L9iTsVkfPs6WVRHe*!)zL>Zm1)L#<
zTu6dM(L<<czK}%nfrx1Eh2$-ii4b+A5)rt@NaKokkwqg7xsrr1kVYC<7L4*E=3_+8
zGxC^yVvF{M8k%QdB{`D1N~ehWJ{z@N8&&zf0}Upi-*=!v0{VR;!Z*Z71<>ysrM1mJ
za0EQG+4G-kcU0Lf0&NA^E&|0@+lYvTn9k#?ZD7Nsw=e=#Tf&ZguJx^4;zCd`TjD~{
zT)f1Hh`!c&v|VB#YyLeq0wyhI@9xlUuUhURc!99oMWCs9xglpood@6L24=;{NB~hS
zwC)zW#TVLCrE-glfxJZB;$qO`yv1o{=%Cy!26E|_I0R(3vBXZTOVu_Pf#&9IE&_$$
zZHCylM5z>hw;5K>?5}eOc;<e4{Z4J5xAlHQiSf~)^MJeGh>NHX5=#3GM17ihKqA=f
zH_F6BOk_WQ2pl%-TP+&eZ#?*rIY?9y>FH_v{cp9`l&aINfjSI4?HWjX8>ijgrXYQq
zdV7hN8;G(l+yD75Rtv2zyBG%SzHG>qHo_(_E*nK6)PV%XWdrMyO#%ZUw!hzgb+7h`
zr>ehSdbF<iVMu?!^k|R(>F<{w4H6*z{qX2n!f6n5Ut>M@Yjdhzb0H|?zUD$u$bHQp
z;VTj}6ouT^{PnNpLsVA~afkZ(YP~rK)L^Jz4or~H9O{<?6C^Z;`kjHPD~PnC{Cr^E
z4g#(-%C#W?8%DV{P`n-GR)ga0D5^%ELJUmA7Tce9!0$=@T)@WnGvapSpmtab*?uE!
zE~cc%pdq@<4jk1gJ<XQ+<tzp+V3+x2(gPB(%lw#2k-U)-p04vN(bRA+YkZGCVUIkf
z_3@O0C1ybga0!1Q_aTtbU*``;%(tm^4O*6MV81`1jW6HemrDRJp|inX!ne;!209!3
z*ESUUF$R&FS?r`Xq<phm4vo6aez_e584~hili>~WcY{XVH}=+(8uK>$#%X<Uq4bSE
zDIyL?D1GCH4}L5vhX&s7$K<}q%l7=BC+r13YqLESU^$heLAKv7r+9-8vi*Kc@#BiI
z<i)nyI5TgOJ>;DBc79|WT!uDok=~=B$D2wW)}*ajx31Vo1I?!edWt3)Z^8)b7SJeS
zg56KmD?Ql>rd-W~3#kbtwHBsA3gkq4uTTHTV@)&_ULoQVo1{L(K0QK!Hpk36YJaTj
zEtJq46PpXm(F;DlZ8MhzO?_qQTvIOK!G!W$6G3N$5JFD<o~dkSCro{K4StD@1?<K^
z?mZJB67v|a(8G|kwwqo`xjEzWzG&D5rg|MsW1O?CFLHkMeN(lrW}&Jdm`MGvk^=TZ
zQ>}Y73s`o|Z+Ph54}Zf#=PmjT7>3?rQ!Tw3454a?sW!Qqg~+q?H-;gQEHl+>T&bGA
zNFLSYrdr?S_4Q()uQ1hmSF<pHSN_H@WIn5YBZWj}^{?>zdXbo{`HlGqwrfqb4#C$r
zt%&J=ovG%oE)tXZN58?3Vh#NpuvkR>_&044$1wX%jf${zz8Zc9@3&9P8Z5q?UIGst
zx7k!%Ud=+sZ81gS!fk~VI_^^w2P;=8qTjY&-TaV3zkT)_MfBS?6D8slnY<MPOa0PR
zzF|tCKBWe~#L&S56#Au^wWKE^P-tJ8xo@s`qT=PA_!VIZBNVUj#GR&^xtfIveQm1Q
zt69L_MQ+iY+W_eAOy!8FvbsUNX$^imM$pF5cdikrH6(LKt{CAJM*P=Q%O$*58nMT9
z0nUOEdtKk*EMV{ZjTBmSKZZlYtHIE$2i%_InrPPVuP##b<PWBL{S`&gk%vsR>S`8>
zJZ!2rnK$!#1NkRYsa4wCy7}d<-8%o(YX6UpU2kL$h4kyPc);^bbP?^0{bXXJ<UYh5
zY%-lN^UkvAA^qOS3DXziagc8^okXnSagddVbu9yuZ`b<p5C|vDS{c(qx!5_1sHfQd
zVZHQEr%Z+Ccf^FuDUv}d3=-67;FX50`>VTF<LsJ_l&xplzsmD*5&#M$c(y|%SAcqs
ztD_;$u+PGJ?aUcd;W;~Gs5j405oKHk)&H4AB6@}Ovx`HO{h4HLL1nSObl%MCna|os
z^tO@nrZ38C%lDTqnAqr~s9#6yEP>`b%RZ36xL{(V^DdNwU89J4kzJ1H_hc@*GF07*
zB!jIm$bh=U{u0&i&s=hXwwMSmkqle{GN{vK_H|V6k-6;RP@OK5Oe-#fI{m_4jp?nk
zznF647283O`GsVz=Q8k~?)mJinBF4WJzw@RHhdt|Js(1Cxe$hFk9<}h*Kf}D$XEC#
z2TY&^MGq39*1@JwpZvT*Y$${xee!)pym9!3OW%B@k(d(2P77$h{`7$aMBjWQ0Ci9f
zwoM{xzkF6vq}R>%%a_v-xDe_`LNq|JO@b^gpLH$Lug~<)SNNtEaXA}8H*z5~&j7Z*
zNUzEa$X9r}0U2tZ0R&XZWzakWS!uD}DmyS=HV?K(ATy9;9z}BHk7z^k^VYJOV*Qc2
zL-LIvaviVg$6{!BzA`FbH4l5RFXfjTUBqJ-iuFUyM&zs4@@*;c2#_Q55kzU@OK@P`
z8^k$BX|<p7hN*TUsh?M>rsm6R7F_hr)O?xEf<)^~&6i6ckieLlk0sDS#7<z~=}gwH
zL_btH(}kc_)JzwGQns1-5wR$M3Ls|Y7bo~S%ug*ihjpu^-%&ZoMW99092bF#nUgP<
zKu`g~oO~>S9_BWHn$OPH(jRR--$n2OVSau-wVe-k(v&hkKg5qEh$NkS980XAbk2`-
zPFt0)tg(k@^yS_f{1i)WJOIop*APnZR^>;;k{eF}vnpRq5QKuXcvXIGO}<!i69YRz
zaO2ha>R-+8gXmi`q8-f7n-TD&z6?@W>DHxV2Yy#+Z}*Y7chePDS6;L~E!98P>mJPK
zo4#HZcb~Ki`N}Wo`Kf;NyeWI0c=pn3^(ktzi}^@~sH4R*wCSaM_13F6F!XZ1+S+`F
zwkb^N`oZ?d3caDXW^h2>p8yxN8yt|$3=&F%1M+kqBodjyf%M}76(nD-4Gxq%M&X@6
ziG!jC2U^~VJucH>;X(&^4?kiKLIw&ZZKehk7En{?J(k_-I$ibDfFYV3kJ04A1JVIO
z!l>Z^xqt=<qlO1Wc1T!g^5FrC1w@k*LtHu-5s=q0B#U3i7#UE1$M0cWVFK-qfO=!?
zUvtrAqXM{{K_`kPJX9MKP{y<U&GdU~@XIljoOFz9C^_kvfb<P$0eVb8`UXfCIwp`C
zf5lMecEnq*p`67H9qSq@nLv9RhO!0C^>An$8OIm4CKWT?{=B)q%u_KvplICR!G$r?
z1G;d3kR%m|L@B*j)clCHAdvU9y|RVA#uHr-z!A(o8VC9C3vFFM`OF^GQs3*X!B4R=
z!2{r}3-|>dNZ_p_JlbmliOQ`D#6Cmi$O(zDopSV#0%{}f9K`vI=X&b{BKzh-U;+2z
zfXLAu7F=jU0Qpl5xs}ue*v5d!RUH-r>81c8-c?fQkWT_)4d6(jD>oC^RZ_^&w*=H$
zS6CRMfdBMrTlugJt6Kx=<K~+b>GG*}cd&k~^fB#r1mqDGn8c;_qbLIsI6DG3!jdFL
z%#J{WXGHWAu1WD^M<CkVq&o%q6#RCwmu}K;s@WM(926>QXP{8TOUM9pX8`e1fYLeK
z&Oq`O+0x`5NaS}0QaAH42YKSqnA;g>-Nx)k9Uh2i`vQ3v5p~WfR=cNP?D(9xASr^*
zOP#xRv&&oSFL>(g3-D7TuNpwiIS^0|1yp1QI!JM<LM*ndjoz-=_W`v9H$gl?MGgkk
z2hgU56vi3I4*_+a$GiqL4N%1Sk+p8CH+cHTfIL?K6E*!Y5ElDuAW_pF1DIT>rXW$%
z9|I{7#)#xK{V|Zfh1XPasHQ&#+O##xc{xBl#x}Lp8+SMsP{g5GfOpfeKum1HfkZjS
zD29k~5JNy(cZ%xpZbFM53*_#Q<xt1*7CjdD{U6MkSRunY)cCCZ<jwkQPvu!BCV&fn
zI~$NYy&z%E*+5ime1k;6X9GAmK{f>lP#4&3x9UAwU2qX-;=15O703YLLO|X|14%jo
zB*J6E=+}aXHmM+QfbF|Yf6HhzsX$H`1?aq~1<E@GsyUugg#y`of|nZPvD&Z`ZyIs7
z=N`T19n%Wbro8Gx4E35`px(`UQgG0dGYZuH9yFI1SP^YmfwBtNJxvE25uJGUoOZg$
zSGBwV>okf3T%Gc$6$Oa9<Qjqlz?B7RACLJd4Xpz5jgJbHY-**)`aPRatS6cJkUqZ>
zJP~RkfoA=vKsGB#G|EQ>QE?RmBpT(T0wm0IT3JACzJVQoNWZ?r23#8CoeU;%3uFQS
z5-J-CkN}VifP@QdD9GF{%ywL0LqYZr+yzKLy1<5lTW>Q*(D_;cxxj9Fz{7gn_tb9J
zR&s&e1#*`jLMV85L9w`b0}=)AF2KzjQ810>-39d@;=u?{QA~tj3mQCVUZ&}?fD{hc
zm!8nOd!9VtmO^LL2MXksBM70C0|oNR5lB)hz)7Ge#fwr76qJaId3Y*IIZ#mRcJoiX
z5CqdhY}cRkr=B|GmO*EDhYIBGXaV2dI#eKcM?s>DLj~9!6=fj#0a@=sSrbZqs3wOB
zu6e*5Nm)k$&6j8G(NF3{-d1PbQs|uTtlPJ=2X@x&TiR$oOMSbWlGXxh+&+c&Pwn;Z
zl&AU>UU3k*Y}BVvCJm4RNS{JEYCr;{Pa#H)FqJl*`xMr?Q<_Q}&tz(!!pt4~-cbQv
zi0EI)8dmEMx9aZ}LOag=-9l)`xqqRY@S%f3`WIrtpF;NnaD{J7Vcr6JMYUer8yr)J
zEdD>JKp{E%+w8>idiV0T3+40*CZOIfl)H@}0rhqvb{qNJQ%Ei}iH+~5k13nv>X1iI
zD)fsO2N~#0D#XPAEHh9H>NAx+`xm`c<y5BvV4?z33#HS51j5w9usBZw352PI$oJ?1
zLm^Sq*?<3{H?N%TB2aXi?jrCsqfojXR7j@~Zr7S4z^P`k`(Du7R?Tz~Xa=0=B2Y#>
zvoI`Tej#_NnS~gaUy<_{lELrUTVK#0_q2M?#h|l^_neM^5HQ{=lzA&iSn(d!V+@@k
z1#w@uFz;>q`M>I;)w-LgBPfmq5yw6&RCW}qbcII;EoM04+4Z{UT|7103b7qWaZEfz
zi*7H(_J+$rIiDA*PhP?MqEPu7cz9Vss30s#))gJ<v@Z*hqPQI3epQHVESCe^orP+k
z#%zE#2$IKq%W8Mi8+Q1%P!Sv7U;^md!k|bJKtku+LYX9hgol4yD3b&t`PBJsp-d7a
zho;VN3y~!BpvDf8JM6XJ?WTJ@Pw#d73|wLt`bBmE5+&^|lsOJal(e@n@^3zth!iWH
zy@k>HuV!(j2meLuWE6xdA7DkV=vCzh+;XV+1BLQr05VWHP>7R(vBEe^8b|CNujm<1
z%@M~Ff(rTL5yuli0^>-bTr7YD#*soy^o5A>APry?TDTcU*&xxv*dv9xKO@dxVNp?q
zPY?8%{U|FA(q{jqLZyD{oMzqHwOdC!^AG($-YT%f^aKG|amn#%kg(!XVOWHGkg(!X
zAwoVaSA*oz-GglB|LKpk?jF1XK`z}rD2FD50MR`d7AI#Q0nt5(le5uu+8sm`)CL7{
zALXTg=?SF<KOIXb4h{;+I0!kw3<}DT0TM8Sf*2W;wu404J}8(T6%=VZF?iZOI4IM0
z;)t~UwV>F&<XR$ae=S(riZ^796hp7R7Hs{vY+SC1@`eOusx76^m_vf4eAm_igUv&N
zt)IAB5n=xI-xP_M{CcpI?<G2l@V(cAt!sXziM{oqL7DK&BC)kT>^D|mYkgR-^bc1T
ziLLeFL9v_f;A3ljc(Bf|ip19X@L+4P<dyI(v9~_rYJ9Pv7<qLo3P*b*s6OHNGpaMz
zZq*(B+-j`be{^AcY*1b@4f2~OV}ohOlW2+=8-ynf$FkIi2sSO4H_IN=Lk}yVX+dAu
zT!Vzl$4|$nvn9Rsb(!fwxuFFn`e%9&gW=Cy2A(m4jq9yHot+VsTbMZEhRh6-`9=VN
ze1~QG=({uT1m!jz&ajC~LRiC~FxWJcrTgkPSu<TA+Vq-9GN;H=_}RiBZfpLtuiixo
zE)3$N=t=1EGeVnP=&%1dYX{|>Q81xvle5ntBlwx%hwPsN^qJWYgK`@XObC5QLfwTB
z$VKetfqKuDi-HOtHqazX7m-i^MqpcQX)ten&|~JCULT#(E)8NgwIj;ldtuAi<$?MO
znPow_i3%pvmj!XieLI(d#tPPNkbY-&h0_?=&4SE|AX1B7WC!2QTFp)j()(mr2j$Th
zm=IbW#L?G2A%rITh`ljbKVW_2^bhu=AoLM6*%Ufq#U+p<!MuI;nAh~$dh|#TcOKW#
z*biYk&`t-HpY5$9^;?u0{1j_+Jb;0xgMRV02S}81I#?LwgB>I~;dC(cvmETifKy^O
zI;d9iVIVoM;!Lo1+0`rnoe5UlXl@I012C<P4k_b8YHC&39>Mfaj2h666*OIp4#}N@
z5T7nahvZHHNLVpC6dM;3m!*h7R%l~F>f0f4SxWLy=v%n(!sD`J;j+}&5M7p{StLY_
zIx(c&nkuu{?g@H}r$LBpACF+f#861gjvxUxF(hY4kcb--LvnT`lFyD4LvnVM9GV>`
zhA=zc#!CalRQC6Y`X8#MhGe)6@#$x3NQPUGD0XT{hFg%N6GFKCP&6Du-)8&bM18UG
z)MgihCXdZ722CEDLo#&@@yTOzNT#kJVfyBfOkIf-sq5wtQr91Ze*kW$9iOHDMXB29
zmO@$f&XCOILwtVO87dMBQ;@K9X9x>ZoP3~VA^S~8+%N#aDS5*HB<%YpBySjigyuIP
z=Y~OuGUvS^e#78q5UBB9*9OX;_qsKu{CRIkUX*|^koJaf!{9CqR_v30AIdw)em_sY
zGx&W-o^@l7kuI-JoTry(4u<3r8JO^dgCS(zw_pfjYY(dq_R~E5w#=cBJa_>UGKZ)y
zgbb)7?7sQ>ZFP@?WQ4>X9dSb#fp>5m*z;3Jsg<g<Ze^iiSe5RWuQ$qoB~GQVs|NX>
zsBhpQC>NDI#<K6~f5;pQ$#W+#A#*H*^^3qn3!Gqm-qr82PK0E@Lv0~*B7~%OS`-Rl
zjD~RDXZDGA^{M{gm@sx^?nJMIsqSOh)Ft}eWn;r~xPgh<jt%=o{tOaEj|~IrF|LA#
z<5_m8{zUnBSA|CC_^@B>x`g=%9UsQ7%P<5d6a!->vl&bE5tWm}($T?$;giGC(Ln-Y
za#%VkNR&D`jE1<MBY>L5{=Q6quzXrrG%jFiY)lK6@C)=rl291;#wmV-M&r$7|68W_
zteWYT%GU~EnG`_=5HrK_8Y)OY%nZY6U!x2$OeW5^KU}T{Jyr8v3`(r#yBL&M%@2pg
z!XG-om>))n=Qkq5<oOG2b){a*Q@PN^pdqj@oG+$f2mxbZxK3lfoCFDsh2iU(^RN`A
z5wM8;X_a18wg`ljAzxn<mK%j&LuFAINpv@EIR^DIwtkiVO8GLko9HsqGPj%PGSV{Y
zrbVK`kmsysFRa#=RIPRmrK?D*-EN{uZgp7RyA1QINUN#A_|;8l(S7+2YxH-j*1HgN
z6=}T-L06I1yFE=;k=BRPwRoTi(^aI6VG$@mpp`a;WuO2F&5dChC_qAUW7r84VY-U6
zH7xE3f<X6gb#0)lNLyVS=ql3IunZIs2GZ6r0tLT?g3au2!+A&S9qVulCHQUF7vyh(
zVBZ+qC@lT4{z!IrSPnHX;oZAwe9*OFAK%s8!-jpV&&uuz%X45bA+(2@dY2Fad4N5!
zLH{;;AT0J2p-JQ9Kp5+7EGGyFM*YAZ*{Hvk`N2h^2=N0UQL2<rPJWmvoAjG<hr=@G
z0uwTa!<d}T(2FhDs{J{f*DGQ_y-7di3H=<#n=Ri{3E1w$P6(^stpAWb8&<@-Ghjmd
zY#6&R(}WP3>O6aKi$3F;^I;hvvEd1!^I-(YtwIRo<uERJuJTwnvroR(YOzN@)#q5?
ziSuLZRB{oFi%miUwd)ySb+_uDSUn>$xM4REQavLGZl~yMD-zMBM39e$Khsa@i764h
zO)weSYJ@DG9#Pt)MtZD2u;3SZJ$87y7GV$U)T`U!fk+)72IHqk<n<?zD0F%R*Pm$D
z1|&ww^hj}Qo|zDd!~x|`k0fs5uZ%<}D9vOq9nzaO$8WgMOc$DB-pq)+2#u$Jo*6-d
z%uB)WD6UjQ@($a7`&utA2z?hZGUmr*c$5s^$L1Z>H$Jp4B5pwu6IlBqme|4r39Nk)
zoZXU{AYtadNTd7tdY;IB{v>hA?!)0OVM6<RYK%L6)fU<zJ>3p`(H4;6VzMnjqLA;M
zwg8DjzIWP!NYNJGJ8coA{yRi%abvSXE-0TGomPMhKo3zX^ru6D7_L=B@=ixQssAag
z$&Y%m{qrH53Dlg37^O&{RW(M<aT2EUnu0<TgA^8ngvBSF-UA8nla9q8Vev`FVj_jb
zC&^*~4)s$JrL_d7{sU>4cTuy(czc|R$lU>uKtC11?tpv>^iz?do49Y_sYE{&DQ;yR
zr5BUpxJD7l8_XL0sQ(l@A2I5h-6>m&qe@!OsM05Dm;Iz)_SE3FSW4pw!dcH~zS!Rc
z3Hy3R>xpg#2?KgY@je$Vr9mRE?HO&{Co0Y%iGj=vD!roO(h`>u$y)CyE{HwIONT)J
zsFF(EhO=P$00NtNOuwTHEYYZOUhV!-Iah;3sr{pfC*(?T>g0hecU*tGW}vG=ojfoq
zGXls!WndH$k6JlS)S##s=0u^DK{}<;96cy1Ur)kQE{tjYvwSpRQAC>>&3ixUNv+Pe
z+R)c0+H~kp{ZhB~ojO#r*Z1j$t(?#o_(D^o7(aB!Pc0&cnZefmtiMq<!zl$!lrkeK
zT^l4ynGwY>e}t>x;Vjngto~T}ELVj_!z`y6ig+{3qGsT?K8vUw=CQ(a`uOsBt`4=s
zJf|HXgJR}UJMcZ#A|e;CUFY;M%@(*i)Bp>d27n9+MbQAC&;TjM0y3I+1Pw4vVSoF@
z7qgfBPk+x7UK%x0;tl6ws_>d9f5W*F1X_2E0}c}4Yoc<K7bL*fM6t<xggmhr=4xA_
z%GRiw`dVd27Z^9%!!PRBDm7q={(%S(wm9a21i}_Fk9-g$d~i#&)>il+?IjX})>i7L
zQMtmC9JJP_QMtmCEC78P#R~6kZV3dolULqEUde8KLW{9>zvxZN!4!+jVx9nQkIGL8
zfCRvH>W~R^I95#LE_>cD`XtX&yPOdPE=JU@sNCEDiQ4Rnro|crBq>FaozRd5i6Ol!
zT375M5-G;hu4ujc%w?4D71MOO$DZ#oZt_&^aZ907i#^eNafus3C}mHy^mh`LlEyvJ
zs#ZLKDW;rpe^eweAfUNFDiaux(A*!D2@FVR?vFYNOfjX3hofSp1A?Y@*9O{#I~<ki
zGM)nIa8xERAc1r^iUj5{cvT{z9gXH)V76*J8af)qq{-9S1i8{FJL@xoo_43AGLZxq
zP^Y3Ykpu~-Q&G7a3zFhsG;#xX03!M1b1E8bVg5*MmY_j#-u|~{bn>)1@7N12Ds$fH
z8IU9umG3r#L?P!X*3F?+PBNkmh~>?(8yLoHB|IR88{hnM6-lyqaEv>DGZ1Kk!7=H&
zAOSfzCY>K7AP2|b{Fr)FHA!ZTus_H*271ayxJqQlh?tzUAq1rnG4uch&m@idQS8M6
z<Ke1NF&VYNL`_D;<m);hfiNnT6RQr8Ko}Kk(9nEG6bo{k{Y!x{%TqPZ#UMW&7n65~
zlH5<n#X{n=5hN+aYGutW6yuWQg_GIAps}@TvI{{@IN3FWoN#hXzBL3DKunHZe*<^I
zBst-<7<WQe7&f$uX))=8cm&01G3kRKp*W3N;Ib$irOb{AA53x|ob8%GJ~%rjeGpH9
zG&?4J5G0Uh$KZocpi5H`ZGJ587^{gGj|b<+@D3}zDw?7WeUJSRF`71g&*>B}0rXx>
z&cq-A^j-`zF}=2%qW1nEhOZ<vWdFXbXK<g;NR)#iA{ZX?=YH|VB1kBI5W|5HZS_GL
zUAl<Pj~X+}7P&fvxhN(Nx*!9cMKL7axR?hOP)k|An9-tYsZ)0_QTL@z-9Z9jX-uwz
zK$1=jk!G7H6+O6$U5FW<m#vD)8#E~%H&(@T5%54lXH^WlX>@TTMP0U*U5pzyRjqYP
zrKRRtw^Zu8wK4hP98`d?Hik_7xF{8Uw}Jhm$T(TG!G)le<_5?0QoPeP#6lv~1PO=@
zv1=QdCj<nRnp@cPV&l}!TU-d*Lf#U~cbb@1o?Bw#!$vTiR-Rj8cz>M7&=hTjeI8Tp
zOwCo;yS?z@`pJY*$MXbOA`OB7;69JZpbZjmpU2YtC2_#fs`T?%v+H?u1<B!B+(9pz
z(^K*IhTEk-Va@s_`&-IrTJ@z{fFA{X8I$kmrTFVJU&iD+dLU82modEOIfzDViq@>V
z?f<5X*F2TGT?|^Z?si+A7OlHu^1Ch20mkmwH4V%gI0P20d)PZA#_!7Z#N<_!6ko0G
ziOIbMkWkq}E+U)^i`D%sR0~eF-z}70P~0DrFDRxITBYufWyPC;Ac3%-#`qSR-c$5~
z;!(SIE#qFL)lnCNUQj&hwl2M(cr=z4pZb6fFpkFRUSkfS{3DH}VJz=8J7S^siJxPb
zDrh~YrZG;n^D*U@n3`JQVHI)HV%Z{7XS;L8<QhB>gAZarKktlOkU&3ABbU+#kVqfS
z$BKT5iLF^;Q2L-<h^d!jVry3Npm#AQw`L^^TeFv9v^C2=f03pk+dr<{mFm5)wh>Zl
z@Y^whB0&GRJWhll!1~AK1O^fg)IS~(cX5d18BG6pRNP&V9E6Gf@up(iTCzAytJ}><
zqD3GvIF1$W2#@vP^GHwY8e^)!5Kf)uv&7)IyrTgUHVuv!i%lVr02>^~;<pJ}y(FRy
zjpx0=o~>sz4i1eQ0e)km1a0mc&ZgEgo~jw{R1Qo44UfysZ;${Q9>?Z4r8FQ>x#96x
z4PT`YiOQk>hsWdM)`VnnrHB7xCeXJfWZH<hg0H_=w?EL%YSy$#3sDI?fz#vBwW4J~
zb5R+XK>}w)Tn6S6gjU~3Hs>1S#+s2%JAes@k#RXkfCR$GxI8`u351bx?1$3vDM%cj
zj*L6Ur$h_;N5<vxsbt~!bYz^4Pd}v%4ct*0AJ6+C?n$lmTDMep>S#Y#-&pGjjgRBJ
zilMiB`~uJfcH_0i=<I~J+>HejeK>(iKPiM@+eCKiTH|zPVq9M3#=RT}O^jolHsnB{
zCNW<lqbxHiE-z{0QVntAc+We>Wl*Wf?A}I3?YfiWa)$(0Vjwd)j-@aig~K9D2~*-q
z{nC>jcEUEIY*r)Va9wct79c%`{FFFO;)WqCfkr#djw@|bJ-rl0Z?gYaX58bc0!w_6
z0|HQ(9hYC^00}E*$K@9}h(zsX$MHpuwj2&#F^Bc8FmB1riOa1X++qR5oH!<sQZ9qw
zKbL)9Vbsaajmv!-Ttb1&TyovH!Y+8+2X=$T#(Yoa0~d)t+VKG)-OP~?mKU<KO^jPJ
z3*++4szC8WW?>v>R<Cjy#9f;`-qiTNx;DlYIW%f*LdK3GK5a&f1C7YKDy~$fmaC!_
zT3%<EN-MA&g?uQiA_bvOQFc`vU%#X8l0cnWVO6}r@5~7T4`COdHfnB^Dw&OL+Xn!$
zF<!4ef8U^h0_!HWs)f-yvneh=;sPdQHpTJEB)yYRpkNjB3CrF9nNM6C+CBP&aOfQg
z+!Vvf3j6mB#yy$Mad~+kOvr4GW5%ToyaK$MjS2VA4aQBGEiMk-dEP=e*!_kKUZMJw
z-PY20F#D;C6Nb#Ego6~Cgz!?;PJ2;HW1f=T8JAy`0T)s`<48|sd*VH-eRjV}qn(o7
z=Qd&#Qv0Y8DFFo*UcEZV&a^VNS_csgWYfkVbTD34VfLl(03nS37|%Py4%}q)iToJH
z`RhYa<(H9uLPf;aa>O+x(Bd;dAc64{xd6Sa!fzoRWk*{Z6`7-P`AQ&|kU1L1D}iY)
z1L_#Nv5iqHa|}U?+k%Tl#Es+Zr4E-trypmpv@z;sj>qLzBCZZW=6D=iiMV`(vM~Nm
zu*GeR=9v?YbAt()6Xe{u>IoT)xs$A*t<gAh(#4^1c9L*JSr|yC*b{A0)~UGM1TN$Q
z=~NtB0r=zva4?Wgv+-?>Ce~@U?lh22Q{8vqq9t-?ZA?+#H2Zj4<8vc8rpPFww-+@2
zxuLOa`<=!e<ztI99_NV(-LXZn`c!=)QQ@&g*Zsj<i7^QpPCnVb^Dbkxr)+YO#<#GD
z3#G|LMf~MxBB3<7sKq_>qBuxAoXUQ8k8yj&)FO=^YZ8;VMRDHcL_%e1QS&>^1sIqJ
z7TWBhyovUE_ZUq*q1i?F7SF0eVDa}wH`%A#88_?AHx+68UJr2rwyCI)_dSsS+f;<1
z_&OphXc#@ASh+9Ny`jbac8wObYaTKF9=~HkvHTb&Bmgj>Sbhu>BmgE9U*C?--ql(W
zZE|tmm&N?-U9CkeP;8Wlbz?1BW=t#Q>&ELqpj)RE%X9%GWTzF&bt6ciPAkT`5wTpY
zMOMvVg`JGrO=h?%G!M=wmitSPfy#_x>@UrvTZpyLXxazG%7^yTos0(F8vGRVDIUOC
zJ}8!-Oalp+4~mmwdjce2J}AaaL)j8YWJ@0u*Zr_qZ1@pFY)~vLmK%POg;uePvEerZ
zAq{#!SzU~GfJdv=Ew|o#zioCgvPx61#4HX06ua8Bp4KX>$@*!uey@drp?zGeY%aDZ
zOfzs53JkOtIF354G(RquNdTTg{o`Vp<AH?L9~T#GhSl`7L1OS6Z$q*ANwLWBBoBHU
zi)D@{S;+A=6+2%WtVP3btEX7(oq$5)Z7r7TR**1bYq4Cnf&|>wVrSi2i(2}NVsZEb
z0)zbvw;O2P`bDwKN$?a%UlhxAD@Y)HQH*sfzucFJXorjQw%C3CZs2m?;bJ&BUGB@^
zYRs`><y5h1en6M|GV*dC@$8%bWi<1&I8NO}+hpPydg(+l-j8uPDCcA`-m3YQ+C9Tl
z>|(rcGxy)dA3Zhaod(AP*mu5IrhFiwcfMHOcK}IAb#d$$+2F+B4Su0my(}AC@}PIo
zX>iG+q?$MQd0_*hP@jY{D52T|YK*^oYCwo?&+y!@PeNwZAc58=fvlRG6(p?alZXsT
zh;Anax1w)C9heZ^E_rB&ehDqaGgQd}RR08G8{L_cEOg(1gci7#G7<2g^cow~!>IG*
zYY91;z(hB`mXO^D63z5lLSB{y3DnmT$hRmn28lf7wM6bNSqRT8xkTxmW-VR@sMlFR
zPb2%}>uwpe%zxc2gNDxQ3Hdps3}5EIo{*QIL86S;6D7ZwW$?>?gqo;zo0;Nezz>J9
zfjy0qCx^LZ(D)jbkY~^tzAZ2;5f(SAK>}e|0!gZ<2VKt?mauM-Wzgs%8;2!wH=8YZ
z8K6cmwU^QIsS$1&v~e)PErSNnh=ja9nBjwGL;|^{C<C{t@U*_uRz6wAh(v=s`Dq=R
z6aB;3*j~owCz)FajVtCh7L6;GkmCv}s0d47z7vJe6={~JeUGe&^8r$psB^cO;T6HG
zIhw8SZCFo^cFUj}9;4kdXzyWkLVh$P!}lIWCoq4DGVtLfJS}x9!ath?D@G@3-)T1D
zWkBF9c55G_yy`8t4BC)*D<L-|GJHegtwh=Zr5%U25=d>|Lvn<sKyEvp&F^Ep|KxZV
zf{w|@yJpfc`S?Uc9PdK~5aScb=Y*MlSTR0<`}kr2_-W{HiEAI=C;l1QlbFO-_cf}j
zCb?ypFmqBuZfigWWlT!cZ7D%%OJY)@vX!}luC-?<bDnEg_A^!~PtA2P=tO;PLhdj?
z2pDq{@)JlPfiX8xF0LVfgq?E}O`ei==EF|PC+8-bK570yQ(uP8+?U#a9BBN-`_xjm
z6xzpFnvjcO2%(gv3HezekSJwo0-;;923`;XS$eN5B_K;#nyB5*{9J@7B;;%Cx<ibI
zJvD3GQfQ}RO(I{cu`>$obgW5a#6A*8l(Hrv_mM!Nlr@PKPm6dAlHbr;lenQhe;<Pc
z<og(F5>GzGw^1{c<bRa7>eEFXJF~fu`U{%j3ChMJ@d_14l>JdcPEH_E_D591UBZ4^
z2-r6cHU8vzbhB%J5I(cn^%?qx(`I-0&^MemConBhwv&x$TN8OdCq%ZBh2+)*_Eh;U
zd6u%B?d<q4V^aBcCw_woq3sEo=70p;_5{+L?<s4@Qt<r7UOC)&UMc@3A<qK9C3eCP
zUugpgrEe0^n7JEyCX~?m`|O9`F#hW)-{&e3);?E>0`Wdlnk-5J`J?>|GwLc;KRT7q
z^8M5woyvm*#*c}J*bxUwN(toLbbBmIx%;t%*v|g%Xl!R6b6Oscpm@w_d5};%MlFAt
z25Xk4j57(I7O=v%4DHb~t_2h#&$t#)h&<yoKNJCU#%X>lqMb|Ry`2=zZ$a{00!Na(
z`7LVx3)K8$o8dP=FF2h55~3HJP5=qe3)BgeYg*K9ml7=4$tY<70-BdxP3nnD37K-@
zDKsx7khEPOkFqG`?3Gjo*sqT@{^_Z~Pmyxs0bqJ1<s=CbFujs;0s{${UP(+~G>e18
zEZ!?wG9c;Y+pENYK<}g)=Yx@GG35Isk#Ewc$R!K!QQ(F5q<r_4^&e*h>i0|HvkbqI
z!5HbER38+HriHS#*OSUfd;Byb>!|?^Q^61k2S}LudQ#?@AYsYtNttJYgsHD5i$=m!
z$}@?<6ON%tbwpAm9FhmUVM&>1N*2<d;YrFfza+1)DCJd0CzY}6$qB|6HTdPU9v!lb
zPRhUqIhZs$SuAo2kboYYlnFaXm^3<BcPvbzKu!#iu#ZW~gk7@GR&P-QZlHSuxrjC?
znfG4OlUnSd_q98-1rv?skx5CsYS#|d<tQ<nl2qPdy(Ss=)ZmwBAn;+$l%&iHLBg6T
zNtqXdgf&x=v3Fzx5ra3-)TBB?Hjv~&Z<^CUl7$AE&Krnsrsm)@+N`AVZc@e9n<pD>
zYd|<gkYCP9%Cr!Y0GpMRX(31$F)JB)_lglREu5WH=U*{`^Ux-9k}@qMJuwB&P0F-T
zvd|s#k{a&xQ4lPRXzwTU7Ryms3Pavc8d)(4OKB9^NwMSu0oSq}qd`K}PRdva5=Pre
z3`2Swrj&-rB4$iA8s4!eDI+16#7**7dwe7Vl||IpWJqls+b8ojOG9cya%s|u#<j_i
z6~d5aAYjM}#}JT^UEvr45~wT45Q+!2$&gh^5f4B>bCs(}_N+?Ecz~zST$OYdakVKP
ztWPSR(AcW$sliXtUw8n$_0FgQ3BC2sr~--pTAwWXMD`akxYK-`R5!`~l04{baGXZ6
z;4~Y#(@>k#iD;iD^LFqyDfX&$Q0%8kCq~wxM%gBN2L!6N%`p)qWVbnu0un`Sqej7A
zidu*4|D4r-$7oXVInEe)&HyHHle&0y2_#fLPvV<hv_GuYjcET(=AE<qzhi9i1pk}F
zaWb7G)+HnMvg%pJjpchCC@=xFH!0t12MMUX)X}3U(AK5mf3UaAGSZ&PADlP=E*$fR
zq`bZflBAOId%hrn@k0{d^QG}zmuAf)tnM7+zRDvm0>$YgPMn4e5RN3}{09;UN0ONT
zZsG`_j<WaW7;UPKx(F0LkGcpHK945l*<f8BK944mwbBe)m+yWh#mX84tUr;I$qPtm
zo=D2%1tdy4k#wfex@73tq*z&lz*KzJwSnf)v#t#^hn`K!6##^RbT)|;W)r=?STCXt
zNaZcDm(DZp@P-GZ5byW|T95i=aEcGz79apQ7zcg4r$GX8a7qqckboSVf^&RL-BS<E
zrj1A`Z`g+x7>{{s@YB(wE*X)M7mpwZy%8ySu>~ajenhI)8!2(Ig&5@b>d2J5*djUT
zx{)b)u|=`~G%|&YElqg&5O_0%!|B@AgI(IQRUa7FmVtJRpk945CC{eo@m_s1h1vHh
zt_!5MSYn~kzU(bmg}U*rlsuZQ$Gh>Z6pp6p4a$1djpNv~g+}wTaX5IDO+@`SE+sE;
zKnA$uQV7ZTFb-7EoD-R08#gqWn37kg!Gy}hREfBW1`;Y0Q#it%O?h5DtoF2bQp#NW
zZ#M2R)ZnL6AzI?Slag~Z<e>LXO3u+B(W>vHisqtKX^tiak0vuy>YS9Aqa_b|vr=-7
zmMlb**(sW%n{gAc7<@OS<Wlu4_SPb!aTN$LN!R0lLGf-%zIXr<HocoF60hQd1opcr
z>;sVF*Q0HK_fx|0LBR3fPf5oI3C;IY((yq;^Zk_L`1NR^w>Two$9tC;TGe9L1X}Jb
zPRT3_k^owql70^oK#NoG`@6AGj<-dZr}9>_5lf7_g3D8QKd2OY#CTs4p`RUHV${j3
zNXdO|FyT)tQrOqVga8@9u4Iju8nrVkQ*vJ$OvtQE$^B^l=Hn{%x1~nC>?&C^C{oN>
zMehDM2HrIhZCxsF3tPC<cr3UsWhCiHNWF$ESkE%cj9V(#J2e9nHCyl03?xigpORlZ
z1&NxiPhoGKV)Hd*-$piWnbD+jql-YXabqf9ygvXL5=x~+4h0ej8&k-kZs7>9b2H0d
zZroP2*+n3q-JFuQWv=0|adRppc0@n|VKdoq2kKToqJ5UiJH>`9H*ODoMuXrJO7ZGb
z<#w=x%Z)9SI~-sz0ldSh97ve9BPD|_NC5AkhJBeM;NeboVukVds+}$Z&B{An1ghN5
zluWPd^UCd{0sa+5r~1?jd+ezzjmJG@dz|qKE|m6AH_-YQB#PaW!r4I^t^;a6YqZ+9
zxpKc-EXDf$PK(s%sq+3*NUWeil1>V-o-W(fryy~V&01}=Yje;=piQTPE&|1jgDwKa
zjDv)LcS?W&*~2NNELF+2E;SPDfi*@&YcRwB#AEdE;Z(jDaUg+pI902@tPcf~!>NXi
z%$=eq5KNAxl#^`r8sn=P{Blre_vo10loVQyIi6OZhn8d1%d}DfiO_N^Rp%r^3+39x
z5E<j~lzg*PvS?~c;ho4k;T#Qcy&;u%DdkC3Sr2t>|6Fw&mRx7t^vKUCyaAI$O&gG#
zoJ%R;6z-pP#TVJEhwi^!*oQ~356?vC0}1=iITH~`)bbonL^!1a4j!Io^VS))D$hGL
z1QQ77of?89A;(!j0^vM43*rF~;42rI@sUxd?L`-Xdg7vsK*d~4$t_Q)0O2Bqy8qI`
z;@XJTJ)QSv+LOAG<vuWCtmj9@`f&HObDQp3s%+o1xJ?HF(0$XgdLRMaH!bH`kbv%+
zM)gM0jBqU#Jj8DBu`$Y1KEzd`8VyOyq!dC>8j?m*N}=~!s?o4CqyK<u4gwuBEG<JX
zNN5gA%g_rFn#0mg=)IOmmKHe&2skuLOTPgL!&zF!UXVayX&HM#a#h6MemdHuAtt1B
z-d_9FO-5gD_?<L9_snyShSV0bWm|v%<ZP!}AOShsX$z2moK0=P?*=y{)917AJ~hUd
z&ri$it6&m0Ew8VFgwFgluCFemLC}!e;sZ8&tFhv#51g8SiDEx+Y621vAEf2Gejowy
zK^k)bg$a<D$v#NSzrrF?tjs@1<FBxAA)N|=!V<ReGvj#W61Nb#dblJluP;Idg)B+S
zf5HMuI%)h977hi0fR<j)e%@x_>(MR(rHjkca-R({Kv<s6@M{R90)*vhTtnDKp3;!&
zw88$@cH?tT)dm-X62%Q}RVid_NXzR~&;iDVH11R2pI8V31#Yun+hMHqRBdxHC}3=J
zF(_bcOUu{`9bjxrV>rpiKmzd<8~CMhyy`0#f^M>Xm6kVo8}iiQt8}T@?*s{muhQ2w
z<Nn)_8hn@ZUl7pT<@hg16u!&xUy#t;b;W-hQtGfr_%HiqCsKz!t_hSn>~U*Bsly(}
zeW3`TJ!!b_?eN}45$!-aZz^m1weg4Ofi&)f_o8{F5u8^$oK}w6Z-0%~mTT}+#4J1j
z_+bYeB)|`+<?S1g06(0@(E`O(kcg>=)7G)H*NoxwGsJ*T(RW6Uq}8KoAK%Qm!iDaS
zX{2m1>;he3B5C_6n5L}lcib?PcaoKTV^mh2bd92f;AC1(=Z*MCIhmH<%>fDElW9zU
zPjCcWDmufaeq;Qp=8TI#PIbnu77dg$X_=HX;sfPO8dC*bDgud1MQ74=UKihFAR03T
zOgNLS`wa3@KNsPX2gIHo;-M=m;K7V@X{BkZxpgo8ce1(*>+!A8vJxz(ZD}B#OUt|l
z@-X6DI#tGpCrGZ}xC#GINh2Ca7ue6=8g1KLa1m$@zTh?l4WtWcIg3LD2p7_rgZUM_
zMyRvay+r9#!d~5NY^lLd#}FDz-AiNugdAYHm&i|hg9J?X66Ertlj%+Q?j_guDRDZP
zPIq`G_b5?&mpGj)xzO!da;1|c6P?^ER6?EHlj2Mx8lD5#7vCAZD+jn%(dZoDT1BIC
zK#2^?PyzCQ5*!B6W!FY@L1Hi)^<U$r%E2xI4bH(OSNw$X`oSe3vAqu!APg?SQBMbs
zfWbMGh4&cMRYP3_8l*!@<g&aGAEZM|>WC8okU$t(g1;YHM^UB`4brjpf<4B1Pt{l#
zgD#JbbunmsjxCXIW<m!TV@vR6<{E*4gPJL}z0X+ZX*I>gpv$9EO5_P&BYsjdr9^&_
z1|%@1l$2!5IdQBH@LK+klDu7P@d4v&Wqnlq?d*Z?jnlrG`>Vyj!}7m#{nekv;{RIl
zf26<upIGPrW98qkzKoBubug{JSHJjT*$bWMPg0-h+~MWF;w77|{Qp;9#lN_Ad!GK-
z6n|y=Vs-l$8d+UC1D5}>tMzPkw+=P@DgEi{-EAH-t!F#G_+sb3TQ9#v3eR?Yr5YAU
z`x@bA*-ITeb>eXN58L+7JkzDRYgdbG!lPHJyLFR~@E@=EkJi6Jq?`Eq?em>qD#v#!
zU+moJIs6?f{$aIaC;8{De)>0DGUR!C$B#x|C9<Q$=cjW#A3iLAGy4*yn17D71|)h3
zH2*scdWz}xixMOvctZ&!9)4LOzDY@xAOkdTiG=KzC79iXEU2$a<eQXuZ6C5A`9}aC
zOVjvQC43i<aM6!DQRt%*i6R1Me*J}>LU?Bh*5Lve5#j3+`9dgOvxh85e$WD0x`*_2
z3C>K;;^P)-8RBwDUiVsd$K%G!O7L(A(p6gjmr=EUWIvt6`v1ognYw`qtRG8c>IM>K
z{YVv}g>)I!;23Ln%DBGln5#l<aLiSq7<`OW=ragqRLhg>y;DY2*-2N0fKIw9RQZ#n
zg6nWl0d<CzoHkmQopDvDLC&};6e7=%3dMjj3X$j7fYZiJP0zV1)Gp^r{36sr1}f)D
z3JUob6Ut~BxKN@bQa7;9XN=mc))~Vp14E?fcnswWC35csB$O|dVDIE<ULMBvFYGU8
zjAtr-aaAZx{Zb+`*fJibej&#hZ=xT{u}M@bZ?%2tjFIt$M$|$ky%x9J)N<;FRd&M*
z#z)sytjfrw7F>X>$|S}6Mj%oCstmH4wbZE<5p8oO@3L*x^WUu0-JId;Kd)LrUyaHr
zJ2EPL09OYszZwM|>tEmheY0&DoU70+67dL~vpu7>xr&2gJ}1t^eAre&w*6#JYT%#j
zEBgtD*?fKi7q<PBkxl{<N<U@L7r2NA9XveFx>WcpS|7*3y;LD5Ii8X4D?kP+$1`|e
zf$~w1h``4)A@P+dBKd*paki(z9}OPQw77v^PpBYgI?cR|{VmH*yVg*Fr!(>>12TX<
zox!+j!>s{zmUV3Gzq#rxj=5!dl=h#^$XTy~Prqj~5wVB{Nje#15%khBtb=o1WQQ92
zXH;EuAt;f(n30JrWMIU_Oh(*-011eT8N7AdjU%AA?pd~_iT~xQ?%69=(9*Yi_6h`_
zd$XCQ(ndb_W}9EnznE4*^JK3q>)zB~Rn^Odpoy|q_DV&_1AAp<)(;(6(JL#yDuH@n
zqU@Vx=bQR(t?KJS(4~mJE(Fb#eY0{O13G}{o5kxy5Auqjp9W;vzpnE?R5iebpub-o
z;6hM7J0L4}k1P08IUtL_WWvrZH7BOZQFdW7|J~lIQ7#6hvZGuKnkq-RX3$hQip&^5
zQ)LC+X?WXyvxR?<r|NANgQm*2T@1R^@V09QO_gtx9q-Ylh6=jWFvI?HOaJ>y)eIMd
z{u^qBi$RwfW@IDc;t6zsF(Zr1tpkK>;L5@rc3-7`P~{vKg1!$h$AzF93v;p&k=#}A
z8w+!?jhph<Ju2va@O+l2^8c=KzKcM&5$0#*OEQoF!u)JPEG<C7i1}IM4U{KW(8YoU
zY)F;AvT}ioKuPL?tV}Q=1B3<HR5R&Ybf;iJwna<xj~oG43T&pe@;_N=y9jinz;<gv
zHwx@*L~P7dD0HL1&NeLL-_)p}o5zdUgjW6sD;K*6_%4dN*hQc}gj$@H>olkUVR06(
zz0lNBLHClEvBo#~udiI@B7}jk%tfI8by}8{OAx34VObXcOhtb-SV5PTSF%Yr`I}X)
zbP?$PoL0IB5g@G0$}2xm0m90xRcii?Bj7^wS{7;T?^?OmMTi1nt&0!^!dkZ$Q6Q|P
zT2ylc`kx85s<r>Q%8y+Hyo{oLoRxdb6-o>UA7{l?T9_RJ!pGT)CguYi0e?%ei9OTC
z|4`*77a<NCHn}#$fw0M~MH~p5s1~&0R-xcuEVi&SZTxptZE+EbfUw0yC<4NktjzPF
z0)#DD+(#cO+`1UcU-qB2{^3>IT!>;oY;z%s0kJJB7fuyQF(9^OOY1lzG=YT0zWZhx
zp*vlS1Tc1HWinf#B!ICq8y4?Bf&|9SEH0Syeb)*FUnbbi;<x&@wBGGP;NVc*ot3wa
zAOncqS@~WQNI>k);=QJ&ScRf7@b2KLta8S#eVhMAUwiy?rhpVIIpx+S1(;J=xx|1P
zU`}PRbf$$5NGyC#W$T>DiXB5@h;`uUEIyr1J5&`)8remb(GFEJ5HRvwR!-(1fqpJ4
zcc?%D{ahA1RNso`F2Q{aR&ba9yH=N61504wCD*_bKwNSSECIwNG7xJAMQt3>`dWD-
z>}&7#ul9udS~zOve*)H+Ch!3kyL6Ag&&>lYS$S|_-T+H_BuHQnu!_X)5J+GTu&{SM
zk}lmerulWarPNLJQQ5k7{sYg_J4@D!9lLhp%Z3-KyINRJbhSD^Yhex0)e?Dp=Ps{W
zojbkw>hG`&=+L=SSF9E&Bd_l80y23d?j4`&)V|xxU68v!hb$dfl%R7^j#F*1f;aWz
znrEzzSYrSmtCUX9m{zCiSAf(0rI%jph;n&(TnWpF_Ou4UL%!&^hAWk0F~F04VVo@B
z|8E6i)$dweZI#lBsisSHhi+X<t(QAJ1LQ|&{c|T@|J>5CYlqG-<<$n|!lTek$P>^`
zS4i~Va7#|jc*<K*zT^oKZ9Lq<(Z&BLpKB7)CRlkhEKlmNYTa4=>iy1g%=X>q-+=oq
z4|M4KQZ+T@ubQ3O_o}w9zN+c}{(R@Iw5W2Hbx*zA<wdJg`@dFqHPNEfF5RAg`L9pE
z)TLvmZqzvcAB|^W@gy3!?CQRjD?L;jAF5NEpjs0w<e&I#pW1}nZ8AG>zyIlGlP!5b
z2qt7ETP5Oz0VJwE*}~ogrP58vyQW)8CiNgb_VVO?{%hEz2mIH!0!uU`1kjMvorVO-
z6=bpo5@^#cBx{3c-@0i;n{DO2&x#)O4-C$>u*>y03TaAq&1Lf*^#8GZt|il0Fo87J
zl8GZoAkDRqIP(8=Z%T$OU@af=e_6i3)uGZCSn`V(kb%wu3tO{Kq44V>nr-E6Wvw3e
zKN+#9aGF-GL*d$DOIg9@KJ0&~2ERla4L-0IJLQ7})?zB3Vh%{eoW)jbg(VI^iGi3C
z(Uw^1a!VY5N*?r<TJiu?varpv%%WWuni{X8s;st@qEsD=z5R&4ybOe61XXCYB~M`?
z39!``PGRXt?K(=h*RgYt_-}i99rStj047w{S@N6FAfd9(k{5tMB1c?j)qj95Dv0E{
z{5q?_{rqyI<k08q)>-ZD<-zkhg4n=5d(NM3j^7AQ8!Q<+L87z`mW-VsNz`(7_phVm
z{8NkX?*ADCr=;hAgy($fcn(M)eQL=V4-!b9S_q-Ia^k~h&9+&2Us>Ywi<D?=vwTUu
zK@cYI*={NI#b5VydfcyNK#F(m@Q@Z!RQ<Nt9|%+1>|nzm_urD)0k5VOBPL{aSlF?`
zYdIi6eaTKg?!UwO(vt5Af=OJ82;=FMD15Ex8!PX7_T&@(aj|bKAOAkHFG8k#3*6F|
z*s5N78LRrE|DFsOeCa}u0rD-427JsFB#ilvz4J%^qnYn4xuF3jWWKYoF2(qR45&RU
z`zQZ1nLV=6iAh`wXTG;`8MM?sHt|pX-)Ht&^6WUm_ayewG=a}4Lj_HLfN4+q+gb-)
z9NLRGKsfmCdPQv((T-brZ`#j4>Bqlv9;dLuPf(gswN6>$GzkQ{?Udu8AW@4`mRxOu
zgfXWqtTxxvQlJ^t@q&F%dxXhW7o4C0E}ZCsGsA%-DGRTu(s~mlFfLg5m!1^{$AFbX
za`r<V{H@ihAvx(k&G<Rfkepngfdt5qTt@ssBuIb^$suv0`M()a!*XK&2Z7>;<)jaT
zgyyiE^kI-(*74zH)O2jR^}OHHin)c8^Rk?rKOh4LmXpp45)dp0=j}xe+dQI8%;l}J
zpX`XQd4?wDjGSoL=G3rLSdUlzW1HbO5U1qi$Oj3;DLL7$Ab~g~hj!(!lr*Qx&azv-
z=zq#nIm@vMTvTjUPM!dPB&nSIfCWfk%*x@49p1`Ro0AjGW4r$9|G%nvE&{D&=jG%D
zdB^}^UM?;6IY0toUd}naX-=eVkLcvb>5c7TQ1jY3xw{J?VA#2kh)*C%DTie*bxd<=
z-NmwFKtOY`(=i~Sx!CC#kkDM5b2_Fu?GdeH=$P}j;5Tqqx+c)Z`AVmI@DxBRo$dh%
zpq11;$nX^P`iS;XF7Inr(#8Kx^rIYoM1>N+>(M*fhMcm6<#+WDuE8%6l)(quhMWw_
zAc3|aC$GkU#LTcESF|N3W(H#LnPFp2-JBCMgXBSPQ%=qdl7*S!lN`+qwA{F!TK}`0
za&PKZixqYAx2pyr=3P8O4L@^g2$GA+#TQ6mf0mQ4mViXm|14*<<0tAwiW9}pa=ClV
z&qZb74PWGN3um2&ee$xuE<4uEKdTHJr_yB07diPkmFu}De38R}G<~)4dUAxFZ2imr
z2V3oQO(Z|q>3Ab#fUq+szheTDbaL0XFh|psu@({SNG@-t{n#u1gg0~~hnFOI@M%F~
z<S31iNzIQs)_@7Dqt56639O?uI(8{Arv+@)&g7J{IW@JB{j|Wi%bxO2zv-y~PgDmI
z063GAm&QN>;7m?l8Uu+wJd>++7JW$Dam1iLRDaINOJkCQM*BG@FO5kSfPT*5(iq-+
zgdPOW=WuDP7QZxB_Ah^(GSH3@)TZZi^3oWDp?f}ubIljIE~v}wKmYP~D!=TiP$OQ>
z$&Jqzyb&+wu<=QMl+uC*Q;$-X`nSJ+haRQ!gSOy8r$?zAfFJ?fqg0+YgM@GNC{5oc
zYf3kpv0u=mwB%Nv5s-j<U7|;6+nf2mNDCTzy-V5DfBRdu>Rl>*5?s!fK@lX%?OiID
z^B_@f?@}D=^dpaJL6N3^DJ%JpzkgMK7lZc9`j=k8pgptxr4g}n2OVJaFU8IsZDzKh
zJ+pzOY|nrE<*f#~5VU7D(1oBqvw@`%v5bWdAO@Bq3QnRKss$xP!%OYEYy6WvO@^0V
z=^NT68(u26iy;NA;iZ_C`MtRo*e27)lq%!xTn|6)&Ecohr?fRTrc?$8$U$#RX{?B+
zjUeGzV@iw1mx|y(3?3ZbDpkjoir^r5&>LGSgM(xtIJ{j-!GR)Y3;yO%DSu^!O?%WI
zXMgVH*UBfA%4rSHVacRYIjw;N;-pe1dbZ#jZ0tVfKhK8r_G^#NaNCb>vbpWYH`z+%
z+y*`1%qW$K8NPlvyEN~^QjwU^?#t{_`MupJjodk<N>2RCAV@p~&F>QVKw@mnDMbXi
z6A21FLrAkxi$4ClGxMOsGczzDGp|%!cY+M4ciE&q{&tynOJ!yTCUHxVnLWmFVBG>1
z?CXCbvjA`YOB_0&Sx|}$57(xEgJJUjsyg#1tBO01cRydZ+^ZSou>=}?jqkp9m#5tb
z24rb^17wLI8js8tGl`i$CgYijXC{-ANixF`f{8Q`Y0v^$Mp=xgIc$N4q5(z;i>+xk
z8_<>@G_nM2APCaZ&gWNEH!t(w`~KdqepU6`s_w12RU6eWo<PpVjQ#2#B0L*2tfq2m
z3q1HxL0x{rxo1!zV`q~P;VER8O|B(pm2v3d?o3I0;l7_cgKtRfmX6Dp@x7(vd!*y(
zT{lk20_hvrbR39~J<@SGUZA&hyhVL6%i(x|jNKgw5uO%_QC{rA1A13I+~iD6zZ-W7
zqEMw%4`?1b-m3OCIS-~=W99VLv%pqS&RESu$M>nm+0OX%zKlKgp||e%K8Z`2DfX6*
zA5g1iJB{fB89SSVNL>dq%qAI^;30J1Q)P3Uhtlt5?CcgIJnv<g-SVOf9=$8$M{}I}
z(uayX@@4!X;URwEA@+`_kLEao(?_h|3K5<o8FKO6nuizCAE?1|oneDMDC$QJnD{{S
zvq`4o9ME_?Q*vJYY_790bv(nyOR+;AvBL=>#Ml9ds=?-%QXn!;NWbNT_C8{Vlj@CM
zI$uqnjN1Yco|Dp+|I$35)5?F!nU+2s+p~|h!)dW+gXX~wXVsfeIb*%EvHtpKJDe5$
zu}_@3u*11bB3sd*UYhL;RO9D4cMXDIu1e-_>N%Imc<wowpNvSAU&wHX%+vFnKi+yF
z!~8^#j3cCbSJk{`XL;4tIR8MTA6GMW-Uy^QS2K)^@-}*ebh1l*dp>WYyW)6<h{?O+
zcn1no#%?_WBB4vVCn<M?I9<0oG~XFq+g+3(4$+;ltMTw4p*xcuq382JBy?xkd8ChF
z8X@oruP}arGrM%~6P_KWAXDlI&kj>S&4!70$Z#=2bk^iO^NjPmF-@KwaUfE0lV@L~
z0};{WRha225D`rt(^W~BBgC`kdgd7bK*_nDO_o4P&h>1v1X6OY7bnXR(!T|2-AbmK
z{H7%ficOFKYk_A6EdE8%0?%ekAc7WnWXtKCW|AC9y7Wr+6n?qTDNWw`iWff#j1*h0
zQO_;GmTNpamOw<-8qeAih^#dpwv-)QBSp#U)%TY=ld9Gii-_^od-kmfJQP{)@z$bF
z7r}TNRmW1NVcf>J10&7ew73I6By9BTOcIEMjUF?}O)|9_2`t~@CAN9VidAacvK|HX
zAHQ~fFbz6t;14ql0+F)Cv%??|DO)@{M+PzsZt?nV^UN?P1U(GC?j^T+W*D?I%Dv&)
zVbGEo27l|t!{A8qi#JP+S=Hd@7y{pnt;&D2;?3BqK%~9-XRD4BhuE#HI+owa*<DnM
z-o;i_inzz_*s3riXt!9EZQsdJEcbdPC)9J#JNNZ`$Lryl_#7oRZS~A|N&qTrjr9XW
zU~6nzAOc&(v_C}2qr?OU)Z5FQA5|SF77^1P@a*mN@KEG{$Cog&_BTr6vQ0g<!kJpt
z=Gk|95Gm5;*>lr@6lwFA`jF`<0y?5Dt#BHvj}&VW!yWPL39#@8lSjgq5E>=QZnq%>
zAS&8pWdkYM9xEG2$@V`hdz2{q_^$||(lN(lHA56?tY#o0j>l>SBI3BH`C-&NI#vF$
zSMsbnzsmV$&yT$xzESgNQS%wAW&i@u#JvF`@Jy^`AOg>bn)CE#v}os?ihkwXS#_>h
zMAUpPjv#m_a!w*>iY|hhJJs}GIrmq07K@0W&e$@ewVFG{GQXFl%+aFf?oBT`dlR+Y
zanB*r(C)bBKtyzVcCHMRG9F{o8Hu{lqW78E!Ywa5kCu*`nYHN;GD2o%ZSDagWM<Z`
z4g(P~Gs~c(Lw7V5C~wLpp344Z=>B*bBonkSP`)W^gBD2nrmPKGAVJ%d?fX>L1g#Ks
z(9X^#f0;EwYiX35leIx>Nd)cOY#g+sC7;gE7U!<Rpcs<*%o<2j=4Wj_1|o8PHqOVR
zWpc47YjzC-(9WWwQuH|jMWx8}e^J&ZWSEh(D2q>Z$k<wwDqor{*`O}3aZdDHn(Z;j
zI8}`})rzc%T>xrc5vvJ^#1&bamVroIk;SRRLu$kqUQnCYIrrDR5Vr{;5?+Yg1Qe#M
zy#fJ<gcq{RGGxKGMnZYD8n@p0)|k~r38J#qS$iY^JV;ob&6!1KAQDz*?S9r8L9b->
zNH+{X$yc&=qytj&l~}Vt%^PdBMm%l3)hs|G>ux}LvA);~akurcX89LM>qWDh+3c1a
zlPdoxTk?6~(cd@)x93OMc-k^XRNG-xtKQv8zV3)M%U?+Bh&2mDVuxt<ZTWn2jP!YH
zA+gPQr}vPpIolzqLeBNi>)8g7LR)iulBf6njX|5`J9CMaO$VK~_*^n)ogF&GcIK?J
z11YvMXPq60v+vCHZOIvD7lL;7UAg4jIpge>M!DTN>+F_<v+v1?v;R*o-EPLr&RpVR
zE?F4c<}7i(12C^~#^^NAnX?fLq*0wY>#RV8cjlPl%c292Ms?=Ai!@3;jSvEj!n_x9
zcA;~O*za=Am>$4?my4PbgI&(qpyFSoU(Us*A0rvMD`$cVfS|5oJ0($f727G9qN~_W
z$rN2VOn+8_sy0>rMXqF_YWc`H)ANg5yc54xEI-rNK{X73#F>1GrOgIJ;!NKL6%dIt
zeN3;v<E|BB&GMBx;T#$~t5`@(Kg)N_RXs3KXqL}y2(x9%SSx`v*H_CroH^BV`S#4#
zB(moEH|ouM!bG9DKAZPsgsT-a&o}x5puc&(^)w(Q=lNEDK+PNLuU1sAe4{^rM%K<i
zdaHbEXCRW4Z|w|3lJe2ta!%h$)}_i9`z3`!$H&g?r9Bt>@t4naqQK=wfujM4TpsHJ
zh{)x!0)dEJE(%;DBS;;cE`QNa{Mt`eER%WLi|Xk!&h%-Ji~(Sv{ENPg2O#BN^ldx<
zalIG)zQ6WOJP1L@!)ibIif`h<(kS<mZ{xv|h=-T`IQiF!S=Ra{`9E{k888@N(msFD
zh_$hXfe2gc#~Q8^xXEaEEC3B}@~wt}sAE&CVIYz=#To|cqG(t?ldEU#&M#S_2A*^N
zHusuO)|Z2y>e-+7TR-u?ep0SUxe;vk=Lt<cd(PQBajT!4pkI@jzv#y{KRNa<C{(gt
zD6zO5equM`eiBQ=2trcNo_Bsc>39FHtUPJ%^pkZ(X<~t0J~y$)(%$hCdy&QqTiZBN
zo6yw5pE&!cz3bb}gSv5|<lp<rM~mV_d96NoQpe)<`HA-sCpS*&B4jB`l6RhlgcA4r
z_I^o2LGA(H-ehSg$UW#MZy)(*!H4}sJA(f?7R(t8LQ<`r&i95L@sqX1M#+=z`@TIp
zON*0G_&}=E54rW?^2dzJe+7VzkHszvq<P0;mj_bxn7F*&CsQxJ)S<>)begL=ie<#j
zJK~f94`n(eWytZq^`f;?>hp`vsG+CggaMHvr{aVGq{t~r7+=UP%z9w?<3VCZQ23`y
z&h@fK_-&Fq|IpmW0~_=}<UAhOpa&x7@xUf`AQAR>;LQk3au<S0?$ZO3`%KxLS1&21
zIVkM>%qhQNOmnd!$@9&DU2%bnikgF4O;7=;s5xMIAsMb-()`nb$#4KlJ{{Qj15)zo
zz-BlgC7%xB_^X#W$l}0cH~@`VTx^3p2QMymRwi(Zi=CAT+~R=vTlFOZupw2xCE$X(
zXS$u0<+pAL_&|Jyyp3%Tb8jz9E^}v=R&Nh%Zi0%i?SZ5BPzw{nwg+<VjO6(SvCj^5
zz1&?@y`xx0480?;Pr~p}W=Ft0ewL{SOScqSZ)B(#(h``>+DH;nEkR%X-cTTgTEs-V
zbVWT_5!xFhK2mcWcW3XtL65)Uf^%sAZ2N;`bw#6k;3l`X`l;)V916kQFv8zR-5>M~
ziI6hk*6epw={?vDV$*{`^3IAXQ@G1@vsDnxpvK=6J{a^dudjg=J{YhIOV00T5M#Ef
z`)+b4R<#95b8I(6inIm&%u*<jB5eUnp|WeBL5z4<ZNJIAcj)0DsrS(fks^nKUS<gv
zNRh(<J1J!YcY{o~-w%>?6@yI^zjm|hS3xizZ16XQ-w)D~0i=I2#eP4iskO@CC11OG
z?q>HJRqa92_+*3rV52?gKiC$L*X!-U(68t{<_)q5^{A@+l3QPOv{*#mtRF2FkvHo{
zrHCB8&>(NakEz*TavvCcEJ&KQMu-$S7JS*<y8@)hv7q`c_XYW4urXDBDJWT1xcRT#
zRX3zA1*~_=^~a6)VEN@BaYen^(;YpHU*_xy=t#R9++wT>MB3$m-6b+P0}{WNgNiG}
zujEf5=#`XD12$~Sbj?z5yiWsG!BT92vn1JW@o7+7=Ux&wYZNEE9wa7LoG2Zn*3aMu
zjd>~e$Rm(UVu1l0UJvXlEl?M*=c)r~*!6&~U&I_h3~)UdK1m<^BT)Z+&qQ~+%nTYO
z=gkNccUN30)u*_tk9xVM{{c!|nfTa@&}K2%scc4QA2NYRn-TJmX)2Rfx--Jcp|&!;
zZZabrG{pTvcKkI;vRoJ@mKO4T-2X0{#?QDG$(0L>wMfV;EY>0+vruX=x|UqIFsxh}
zn%M|q&1_^*m|PN?*@&f4?%B}JMl6Zh$l_3DBY(I_ULJEb&5E#OpBg&AJ$lQEuxx<d
zR?=58(MmOFpj%zJGPH;6LPS|BL*Ae~h3?AwiY`_c{$-$>Dow8r6MA#FP~ln~vN^m#
zGl5=GOK)?>re6x}8M|C5Bh-+`6nV?dZ80p(tM1#}VY!#XM71bWi154|4jJnHf~|gF
zGR4M_ODjLK2SuwiFGt5f(vdC<6xbLJ)=z~3k-9M)GER)4A<f+w4jt=qND3H@Z&Hf}
zxuesYitUm&{hOp+rtLUdL0ud~+Y7~Z$(#Oyw2OE_4%uO|dhm9)wsLc5&#Z<B&*qSi
zMLDQNnDC3Og|)Z4drK>~h6x?_LWOH<$O--XO%DnDU4`d7_n}1Pu40?yZT~K5lROMi
zidb(^y?ys^WlNaQZZ1TaTEY>d+%Ch!2J*e?=D@vPxwqJIIYWAHIOJ|pQzAJwRemrm
zIjX|Y{d($P$a9LkB^@jA-xekgt0y@ndK$k>&Vr8m+QR<kbOIpSZ3}rzFFpyxC)>j8
zVSG~JUkEz>4}~`VErk{w3T^yblEnX^kodn$(<w<kABJq{JW2fD8@Zk1KqgN35379`
z#|cpL+Kr1q+Vo+_dJjk0C(5{V=y+Jt6_(0T_Ub#k%KEGMd3Sp1cvzO!Ud}~Atbw2&
zvqlF*9M~K@4y3Us#E7z7^JQsQhkEP|cW}BROz3azga}VZNVZ|8I1t1#${p_T^vR+e
zO%*vj$HPM-KUO{ObnmGAICceyl>As+;pgo7feB~7QuzBj<vI6Cm@qC46|O5GFFGVb
zfQY&h4x6YwTp&%n5)Pjr%kTV+uCA)*?{cfsSK}aoh={8aB>$>;@bJ&nAMbJ>tNbiX
z++*d6hkq818tpC+XZo_Z_%-#DA?`Dk*NSZs7r!QLnTj)wOO<zrtkUr5z(am_$Ol9+
z&mPA!#m}O|FQTN|Er-dDv(FToR(N@+`_t0lGoxgqb{X?0LZ66|kNpLOKK?x7sY1r$
zapIj#QDTm|wZR=e4M_XJ=1fr_3TTQ3nsFRR*`|oCRN|vRe6%SF=0wIvg`j<Oc4U3j
zQfR~M$oi-yiI2{X@KOChJ`P_fZ;ozAEQnN}VeY|4nj`C>{6mYHBm3nwkQOyZ8J*K;
zf_P|iMD8#xlIP0i=<WryNXAJ1r$s61pC2XflIyk-$?>W3MN!EM>b~Kwx^+>+NmKJ=
z;2JN!yR2|&xZA7rp=FVsD?+8dWsyC$3`l*;B4+C{J^{%?%c7LImRlfmY|YWD#%(iV
zDZeU8OsUwVzFy|~g~vy@)uq#*m<Q$Yx<jiX`yL)h@l_FTdrbv0+OCRveNEesf29JU
z^fpJ8S_&Op72O@TLNjSGbzgO_$i)X-?6fv2*%6gioZ{kx@BMqBdK8O+skM>a^~m*1
zta?X@$OJBsR)h7*R~e8B)<vv*vB4I|pBvN<Yus;EZiwvY0ui1KVu>eZEbAvRy18(n
z#=WVuax;>3BtR8%MCh)ONa!cA`??xX>#nPOJ+dd=Lxkz|h;14ARQY}qyW7;+TDP@w
zTa?hgNJ$CZZQ_e>8A$}^Tk1%i`@71wqJ-J6*-r=OTM;Yl^;rJiRQax`<Q=uO-mOdR
zir5n*A#ksRz@8}4A|X)o5WmcH4?6wa6WOacfV6c_#7lH>H6X6GC(5)~=NE!@{<mZ2
zw-lQBwtBw7?bYXP@%L|H4z8_gjY<w-jwyrGkdtMV>QsY!&n>M{Syt!K{$h^3s=Cpw
zPVbFuvVw@Hy%7n5<9o}vf=X83f86MfOz(>lBeZ@Y!m}@8aa6|A{-W*uYHy=ko8BMU
zYy?rL5!pyq==+Na4ydZJE-Um=Vz`wfCO8m{93?7(M;<EFoUv|Q`e0;JHAHw0Mx<)l
z;=qMavWkC(!-doDMTr_KN3!F4QC+<&I|evAjWJHujdRCm+loAr9ovNGQH(SpRsMcd
z@&|PDu+~j~wSAm>U+Vpc#Z58S1Tj~8lsIZK77&?Wv*8?wTH2$Gc{l>nyY}dgJGIe(
z7_B|3I%<t31Z}hrW20FLE&4FdSe7Ii>qD_%r;LSsYSIyvTrQ`b#~2J--zw{^&X0Ew
zraGdsN^QgnG2%(AXJQIS%fR~Sp$teJCnIh$<I`Cnf1Xn53GSHmsUnY9^OW%1rg=c8
z)qhTKE7PYVJ5j07);t}J7-@Ov?-{j8c+Nz22FWc`lspqLgUo6<So5s9G{N<AXJd<3
zXltGoi^~R@3bE!n{^S^~`_=Q4-F|B7M7R2ONM@jh0h#B-`lfAI;XEc)Kb_$A%gEy&
z$P9nn6$R^gakxQRG^5`q>gYr_ll~-5ADnRn&nJ>Ta+-&<*QqKexk0)!O6YrxXp>Cu
zIwSV@86IYL7t}ur&xN8oWO8>w)N#9(!`$woT0P12(ifwI8Rj`82cC-&U&NWFGqt;<
z&P+mOm!gFJa*w)XYIiAO_%(9)_U}(BnCyDlKNb5Ww}1R88dc+d7ss8LD!&?)T*o0E
zvi>lAvO6htHR5ssaomaGxYwe@=f-h?s0?flLjt0+Yte1y<Yyp;ye64TvJDW&y%vR^
zTgMfGcHFMmaV>=wb;XWrN#eL&;<%UCJzU1kO;6@amX_s9D^4WU(e*tBs3`;7n+k7y
z)t!(?J(;)OJ3zd5R^EDV4oLIB#(RNOG%Js1$`p)ykC+$a)wid(`O2oebxo)+HRZ7d
z6JeM@v-4{86t{lR?7STjplY(r>}A{-AnB+%UvR$e-d|eToVUXZWZ0VX_(y~0!iDGO
z)sOCX8!PAMt)mUlK0H5<qdjh9;lv9Ihwpc9D6L#rtWi97VV)X!FDo@-hb5}(0e6eH
zB%c_i6Bk67mgKpdaSFDb#3wuXl2z!eUR2gco&SdWm0r)~F|Ew;Cy8m7=MyXQYF6mp
zGYyPP2*$QR^s_u~Z40E2%k$Q@Ky14_AFj-sX_OGOZCB*&G|EzF(TcpCMp=^Bc10fB
zz9F{deyBD1lHU~0KIqmYQfu;Mx9LnYP;9vtRq9NnzBSb?PXo=6%%8|zE9#KIA1J0=
zr>0MJzgD>}Zy&56!m}<fSD%T>xLk>~Idy)jJ14!q$fT*l^c~GZCpV}?f9-y^azoyR
z)j(~=4S7yGk-PpTr^*ZY62||(asRGYA<s875-5{Jo3G{*Tk@)BgF9>*7;Qo@pR56C
z;;VUk%sP;YUd^+sPa*|~Heb#ATdX#Pptbp0tW8Uy3$Ml6v?S5yYiRS4^2h$|`#<>p
R-TOYh;m#iFTMw4q@qdnJDXIVf

delta 46453
zcmZ5pXMk1JwVr$Kxu?yYxqWUMZlego%m7j(&L9XHThv&h(WgXxK9iTkm}v4+-pkOd
zfH1(OBTb|u?N9^;7({6zih>|jMnS~T6l}b2?Y$3&`0uWD*829^d#}Cr+U1;UztQT`
zrLB7R_w-l#d;6=)eM28mJ{o4f^nkBss&#x<$kM~UWYHY^y|cdWec^f2J(i*sg|%}^
z(Gstx{r2Xp`)K`MyWJ(<9@UOq@%6haa85De*3*`%6)8nw^&*>nr}j+cMMaBSC6<qv
z3b;z5xkGx1Y}?KH*vEA|VYQ!q<6YWerJ|o#OGqgXl=^v-tsN3d{k)y-u%6^PcsPjl
zyhnSwa*$UGNg0K>-f$C#gvuaq%bTnb8rK0i&fa^E7W7t*bIb8UX`DBComBFYl(&6%
zYrBUlsbO^zi`=j6teoW4vQkKe&LnTHi$g+ZlDB6sYq-$yh1F@S^Z{*T<uq5v2c2o&
zTvw^%gU&SX9Zy=LL?dWnb)LQb0j*A{oafa_rIZGxdEP+AA)z$S+p3GTKoq2h)y3?k
zUucUuF7|3=Qb>o+VsE_CA)&L_+vVrhT-8!kbmUrZ(OX_m>VT4C-5&JC?EVjHB}!ne
z*Jxt>m!+z_57)C-eyRPs-FmOW+m@K<rS;x0FN8>-uJ<NW)(ltz+7s3`d6liK%cI)#
zXYtFT(ut3@*yJsCP&`1{<PGyarl&yJ<V}}b0U>M<N|UW#uNAUPdTtCd!>G<?uiDm%
zSj7%YEd{fIb$?8Yw%FoTZ~FIVXv#Oe>OIzZc&-Y=-tiVqW&e0gI~RJ#Ys9Qq$YKw9
z>K-rij4>wN00L(2@hS$l8YIlz<2C&b2{ZS213~L=ToVsJV0S;R{iEUouTm^!sAeB{
z{V|7x$_L&=(rUw1VD5f);c>09*M6sMJc@!s_d9I^5(xX976u7~{nWzLkRS~r(|7Wg
zAyTx=esB35)<T6B0)@kNpC_~`PuIh4DPA<kVQ+Cx;&@TYVQ>CMha@HMP1V-65{?0P
z|Hf;d>7{MgdVJ%8r~vuKTijG?p;bXPYvYgr`Nmt-)|wArhOMaA5LIcFn(SlUdzek^
z<g?mPr6*XzD<Hrnq*s6h+z>U~Ov2I77@}U+(wZddrG>STsxn4ZQ$yMASBzI#?HZ$u
z&HQie(OU4GKGOg)QZ<FAc@zyGBh_dbcP)@`t&wVcjOw+*mH`_zG+=31ds$WMRG(~A
z&V$}4R2O2VBc_FYqg8E#$I9~RVbn2IDWpO<_Ls-aSVxbdqj|s*ZVeKqFf~~&>!Smb
zsoA{sgYZ1`<P?>i{hfK4ZTOw0b)DiijDd!kqF!wn13**MFdzOf#sJV1HQ&@4ufVgF
zur^yQ+HQM)uf;u~*{YEcuC0)3zov56?hFEuuQ|;G5|FQ{(zQVX@--E%y_akwAJi7A
z%2M|IbK3j0_$68we5fsSS{EeL7OK%0Z(WdR-Gyq|QrWu1;H|qzRbQ8_D|ygc?6j_A
zp>>z=)~(?dV5qE6mGV?oj@|dX)}<#1;Wmn*pqW>w#X;V#AYs!AHN<Bbm`(#`g_=rR
zFNvyvT&*hCrT&?_mo469WZ37=Yrm-h%Ymbjv05z_Ll)|QTdkHABsxt5tJUT$tgpxm
z6$K+>qdn@6+Fw028(j<<7#r1M(en@j#zr+M#tBGZY*brZ#~p`{_Xd^y@o_W7e)WQ;
zRW&#+gGW$oa9jo?6dSI(46pb$=`tf;gv)GmEzr=v+Z>mHB!IR#E&~!k+sI{BQ84s|
zwcTpbmu%0AnjP4!8e!`p)XmFdAshc^?cs_&PM3oTq&<$OfCSPW@|2%*6+GO_%KxH0
zP_x&u#jAMG8hf1%0!czn2Z02_Uh1GhDu+N%AF>zxMKhI}LoNn&@*%ZY#62(X<U?wj
zrvb2(I{A=VS!LA;43MAM=l-h2l$y_64C>j>)MB0pK#6+xGc_Z^6-ZK25v~?c&w8n6
z&)7Zxp;dZrKI39g&z^DZpq@RWrunQ&I>0!iwrg(<L%aGgtDaYjeo)!#|EmoNpI3cR
zYFHniN-wBNQ&zc6zo(g)L_zcMOi$4Q7u0;gdXNjFgs<58|I>bv`$|>P<c5%;H0Uce
zleK2St3iXjtg;UO)MjTdt4dNz33hoC>kcji<GxkdrGIL7X1`UHycD8L=UcT|bL&|y
zgld1UvL|b`U+2DeZKBlXd$MW07ZpP|800H@-9A~Xt@DHj`FwF+F+O_^_9@qiiirsm
zG#@)YkN_F%!`QhQC3$F^4rSN()w*Yg`V^i85)(2*eJxw@qzN?0;cRGMZDjM|KBWaW
z8BF5(T3v6QM^`}z6|3_pZBw5pY-C?8W<StRd(@Kwi~9!&K%veD|9FDSqmE<Q_Ws(h
zGGl!T?>op)703F}ckpD87(a~NF+h7D%UtUyTVrJ1NK9!Ef-}sp*ACD|DP3pylvdI_
zO3!Ba+Eh3s%$wn>>~57>8tIVV&G1!qvp%H0!@Lky=dhuJwf)&SKBb*hqI7MJuR}*`
zAUqmEm>rhbeTQg<l3U_7gaN4~)DRnK9IIh%rLSlcn>S3W53KYdsX;>{NFngAVt;!{
z>t3<Sr|47wF=53jpHbqFFmjbI7_z!>6+B$aK7C2Msba0GLIZcL&k%E|$_MURAENy;
zTm`1AXZH@*o~>B#6MjnZ5i09_<zfy8iBi`4Fo)mARX}ZI$A@e8cirfd@mE!7ly3CN
zqyi)mHu{=fFYTmJy3torX>Ha}V_#T%&sX%R{lW<C7H{A^AClD@fb63x?_~|6w2l>f
zeR8$}6Ht47rijWQ0kzkMG_wO&!NYy5#b~Wl#XhIXJ|3&~`HToJ9VArt`O4x}d#-{i
zA7Dd9YaJ>MxGGfT13m;%YG)s>@&RA0%xcS30C0$%8m+ajIOM8O9S`}iS`sQ$$3s3u
zL}3`b^(ecePU}>2)M+K3LUHJ*uUIrJNFW^bH5YLRBoL00FE64=&qvPO$lj>amUL}&
zAt>Ey^vSFOGJt6G$y6RBAR2v0G^b+3qcrWTujnOv-WY9)r^Q*}H(piK!`daE@|{n$
zrh6?N^dQrVu*Z4!@5gD=Ja=67sZFgQvMccrZT5{%edHPr3i{Tkc0lC?;1Eq2uBp~M
zp96?+Lp=MT@!DLa<4{d)<!V#B7^bPuAXk$mppSenY3fXmHJSpsM!ryI-!MswdMfHP
z=?vhax^<dN3_-$*It|WzE7!rpaqPv(+D~i7Y0@(_zG@k#$p!;SLRwh#8b~0F)6i>c
zEe-+07TT94Yc;-#g_>gWzSa1ESg65T>S~ZsT1drKaUD=g*i$pKb`?uBMI<yD9|23W
zkVw@*l91N4nbn=Ez&n<)`Wae}>SeB_<Q>bjVv!+g+&h+O*_N_U@{VO%>o$C>XyhC#
z+08Sxjx{S?1RoGqYSO<TgSxKNnpa5#a*mZ+`x~se<X;-a!L{u5ncDnrYh4J9xLPrv
zvPcFHYc&}PKmuZ|hETB3<Ph+rotm=8o;*uipw{B2$T2mZHt%#hiqhtt)MB(a#8c#$
zJGHVsn#kaZ!E?-An)<FLGI+^@-a9afXYi7R9CNou8T`Qvw*f(RoUX)EJMFD=wO<A*
zK{!@W&OJ^y#i)jHKpUrHRPPZDVA6iTJ*&0%D<`=+CUhq0rbzhV0??VHBjM)@7_?JZ
zoo?T^Mr-1!nXX@TG7H@?UBBvN7BHskVLn--x)v~|>&;qNb40ntVf9ruZ>=`B=2aJ>
z7!a?z5XFFaRS!G<Qw)e#^`_0OwFa-WKdi2?Uw%WYQES$?7=Co#8vUvV`GK)U&x(9Y
zQ~bbKqgS@IHc-B$DJ5Zbt8H!6x+^tXU5pZ7Y}K#&Pzf-$>Q{ZJ1Q=WO_8qKqqAI26
zS2lRFcA;jc3sDM)ow{76YDy^}cIx>Xq#Kq3VyE8eM(YP`<-m+USUqB|ZqRyryB%>c
z0>C(;7du@S0LBqL;<#l17)SI>&Kg2XU5vW0c12hE+JAdX8?4phr&t%@0bs7^#bT=i
zBw()Sai?>GfVo1QE8H>&x4fbk`Wj--0^+nXhe~flt>WuS$wHLqLo8ZDYDy@q4lwu{
z^47n;_{?)Ju>XDB46u>#+bZzI#04qf3^3$E5+sTqU^oj&Bp--~246__q)ddUtCa}D
zHHH~iy^AawX2_K!gn=~7z_MVRiI|TO`KnPg!uGtYja7rM8dyn=p{~*?qRwZp?$yRs
z&v&4~1oV6d8YH0S8)3dTMk;`wZxotZw{rwMT*UtRfp%xjA{T*ng%-I86kit^VX+X?
zd3;@DVDF^AFalLu%C3B%4Xj@3LQpVU>O#<5ywnJbzSeoPU1}g}{wX&CCaqu_Kh*B1
zS>Ymhfw00wps9I<A!kLM2j3M2X2qFE08uTp?iTx}`?T3g^%fTcd5OBk#h}S~i_^-`
zLAhHD<kHV`2*|$8S{~5;RP(lrKy&lkE&_$$w+*p{iBc*2zHQ|4)?l4Oz%vinA0E(#
zdb=Gklqeq^IuE!9jF^b}Afa@?K-8z12PA^s0i!}p#6%7<gW#~~hqXxXfbrl%)-X{;
zq^F<T4TrViO3ml4fjSKQ+%=H)Ha>TIn}YP`)Z1&l+(49d(H?OOtA(x?T?_+uUo_-O
z8(|X|7mYFz>OcbHqJeeEc7cHqd&RJae4_2})Ld~vOc-*-HH2dB6}PP^=3XI>o-dpR
zF}FV(-KZ_B>2JzGfe{Xf{-zuhAOX?e4D%HU8j3=0f3xNFe2D4_BJLoQuhu()Kn(_&
za$tgl<{(oJOpwqVWI6*=R}g83n|xs20RpZw+_k|E8-}|!P`n*(%7F=CAPqNBjRB<?
zn20Tl%%X#)C-qecTRg;w*@ctZDJ{6jG}6`@N_q?$qRZ{_e`(d84$DnBi-8N+<)%z}
zKmvBTiMbTX8!6%G8>SLTjrOvPuBGf(&uaZVm0*ck5CUAnEag4~68dkLp|CZDTGyau
zSv`CByf&?}-jquKFria#mh+u-l7UXWd3|fKA7c>Nz?xmqMpQPq<<O{WFy(d>WJt)w
zCc{|rcY{XVd-jnF8uNB|&uM*dq4b`a6cGm`l-@JpgKvq-p@9#WnA}%;+1XQi!rpvI
zTi~ez%c&d<vIC}^;tf8?4w#tYr^d15#kSg5t7w8f^&4$Uad<3ThW2og-lL(%SxPhJ
z`Ki^sx!6bp&8G!=iY6In!3gRW&?ti0Ow+49S!T)AJh+fzB-H>@Aq8^0eNNZk^yJ1{
z3a=1xiA_?guw{=Bpv|(1PT2cQy|WUWWnpt+J$k{%w{2##tY5D$%(mpF0+>*qZ6WB?
z2_fXvb1h{X^OWeLYw=5LEMPYVa&s+&NX%ovLJvbOx6SfW%FP+?4@ASxv(y`C8snTj
z1CjHq^DQ-ZEelm$U?KItMhe&qEw%ZzEMP6F{Sgn{yZA>ebl#F5fnn&qZmET9!4RsJ
zT57v%S%^H#eq<N|$#P4*&XuYih~!aSVW}-$-asz~`btY}aV-l2*#41W$b44)ND7I}
z>VLx@=tW|(=11lu*sitIW&~gBv?8YeH!L-OZIPJF*Zl}Tf;IGyz@lMw!;jh`hGF)j
z8kJ$`d@cN5-fx?&S}eYtUIGst*I=n#u4SR)wpb!@;kH5w9rvb%GnQ)<(QjL?ZGK3h
z-`@I>BKqxZ3nk7Lj);M!?y{8kSU9N9s>Lrcbg-v~LU&o&ob*Hl3T>B_fA6X%Dqil1
z?+}(SLh%Yu+-<3uYgwq!yOx^0mIdrR<Q5(IhynBmmU7HeS;vsxz81e7BWUC31J?-D
z8j|^ASB>xrBR;g$N(t|kM(lH4fU{u4e%E(63)mn1ND8fb0K=j6wP0x0gKkf9O*HGr
z*A^*y^01|Lx~eET@`$C@T+2d{M=kYcs|T+)kUz1MCWVf<9)Et}#XtN$_vBxH^TJK+
znXrCC77uv7iT<XYu}>^)l>8iV2b)ZvSw&}<9oFv)e`fiDJPz_rrjv+OJPxw15naoG
z<lD7AJOsi?t4YSnp<L`7h1FB+sfb>9{FJ5e{EnEAIYlyAE(7Xw;1xo-`=5E?nHOKk
zJ@e$#zs~*VlYis+IOGWh5<J@>k}E(x&(+b8r`gen-ZXRCQh3e|8S2f`R73@rLG{02
zg{WSY`@+Sc%6>sIJyBWgFP*iDE?ex6QT>+iS<4sUwdMOu=PYb=Qq*rIc9uZ%on;?L
zV4SnC(Rnw@!LCtQJ<m#G`aPNRt_)T8JjvY0Wk6kEe~;<+XD&EFTTBEONCqwe9MtI|
zI~CLWWG=cmRHut1)0NAhPG7MhWqP;lSC-s(#dZ*6z9N}UTn66rwZ%Rw(>rIsc6u2b
zJ`nnvgl^$N7^asj)-|s8$X>D(zR3X-XhCs_gs63}DfFFH)R(;iq40N>uZ%Yi-*EZf
zQrd_qQS7vU=Ic)%NI-mVApvNHa<FX@R)4VA%?Z7E_6KJg0vAF*kPr<}Y?C01vsk}`
z-YIhhlP#qm#N})V-Nc2^JiXb63B4xMyIA4r24tvtdKW{cn#-Vh`mpv%y=%5lv1}e}
zk3gmm$vlGO$_#4*ii_5=kxBjG<^zh201ES}CKf|Oik0ETs&&ePeJN9JbP<mgr}UE@
zh8C;W^KB{d2#~{y5kzU@OK@P`OT@WEX|+jt!(_W<TK`6=nOrPWQE<^WlZ$043KFd|
zxmYfNKmucOF_u7|B6b1;Pp7k98U1ASbQgkFQPW)rO4+6thsB}*Du9??98d6dm`N=-
zi}laycUI4G5oi%L%SE7KW);gN5LAFLs~Ah5UvL{h&0$tff27+S7r_gJImN})c0Sli
zQ_7s;AU~EMl5~o3EU|&oITPuewyIcJW6#Lx>%F!3DVE%L0GL&-A(Y^)Dh`V!H=Y7!
zRk4^L2nA{Js^a{bVzJ~V26lqr#;c3f-&>6V^sN=v4iy(o^LtVs1}Ln&_^01I{o-%_
z@LcX#?=iXVxfg!(+_S&44>!}_(wiSD=9|7=7584WbH&P6==s?udft*fPds}^8-14A
z;e0WYA?j%H3~hR$SiSWc4h+3mtah{J(l&)fUEj~1)lP5it?lQRS1G_n?fUs;GlPUu
zKfgTa2Z=<cpFjPmKn2N{YyJG?zohU^pu|DZ{rp|-!XB69uyD5nyk9(Q4WosDh0fH5
z_>~cUHT8`rXW!FNS3R|0h$hElH2Dy}bU=_WYKUJhph3c@A%2k^5*C_#h(9;NFPfYf
z;{L%<zr2|tS^Q?kFu(c}ekJ276KF5_)tj3BI~QFx+>eVIbfRd%L$y(UWgNTENx!ca
zzZ^r!Nk_Scl9P_|OW%MNphx+oZ-9iMqx|`CR}FP8N{n_5<t%P!oolFM0&NToWt%(e
zq2O3DjxTI2DrTzvNoReXr)sKS(YU{Z3uC7Gb>aRXNy;CNP<pSZ#bIrpzvx|icNcxL
zCo<2EBbehf4vOIy+8ci5E&J7*^kd#y{1ht_JOJJsepBFq1l}8jM|({mQMot#(YH`J
zazbLfM>+aBzuJa72XWrzx!!ue$iBG{Sis%j7dg7af(zCAkw4XvTS-lTZS;#=)nOr!
zZt^4IT_c4K+3Xi<07nX4*+5{|NFhhx;#ZqoWnqj0{>^J`<-<0lZuP5=TH`6w6;to-
zV62-y@!lPNd4vTfajE?%%76sU4nK~tB#9BT!yo1u5j}-#Qast=k94%?PC+pRzul~N
zcm3wt-G0SEp`v#COGUhd3_y4L5ibQOox|<+Cwt14Cig%hzuTYc!N(lri9=&<x4&C=
zYY=s~KdgP^FFKE?b4khF`_%7#^X!w?1fA#q@WP9B*IV@8dYXOY=ch(q)sL8S(61cv
ztH=&?km6K@SZrqx{oW2A`_<0e1n~$JIpkL#K${v;7-t}d{pw<mbscKzr-*Z$-PcoZ
z_0(~{JXZh{H9hVRiTyQ@sOfP(CKswHNYwPWKPAE#k-VnI{pp^(rjkQ7J?`&*i&e?X
z0b(ON&{J>wbfaGphh~1>O^yDj*n|U#avCXyh;k4^K<4fe)#2TQ7H#zB@08_G$MF_z
z^#AmBYaT7;{nT}5?B{OP7kH}AI57cS_}dx3-01}gbI$l9V&fYm3O?h<!3nY{K!7^O
ze(_ViPuFuU0!>`!oTvgBAe{5di)kQ9$B#sKatQre64oY^6!o@ax9gLPHWNzZgi(Ud
zn_Qy2QleVZC{-wty(f67VV+!f=9y%~*xCE^zIRS3QQPyX3o+DdYKi(Y-jjlZo}5;q
z4)&nAyub=;%S)71!0u}~*of%Fv)BDx_xNg7lwh4kae%8+9<{OrahF^}Z~$nRr~^FK
zJ2bRP$T!xNDA`oKC-+mfB&jD^^kIETHFzS_LITaYu0%E~NHog2l8Cs90TPX}t^^4)
zomQ4mo7azfMDO%;J+2S(J_e7NC35};361&^%>U#8AmIV^C7C;f)s6?$mt=3}9zX)p
z1L{j|z0Inl<Fyj<fW7vFNA#Gl*Iw6D@_@Z1a+4lHD0pv4TwJ^XiGuf*;Np!am<IFS
zl9mtgScIo2CQPs;tsb;~pxLs76b{-YPw2fpPaJehp(E;pCGy4*giy-C5_#hYBq^2P
zAW)RzMJWeM%Ec8uJe8#!ENOCw^*ApCvGfT0yqDgq*Acf2I>I|rA~#1%_~zD;61h1F
z5@j4I!RDwa1Gx{#77xmrQ07B5IZ|@n1J)QyI!b7|JY&!Om0srUdd4k<j`_~GT}xYF
zXWXu(edaUNwTCEYEuqH!uEhTSY5lO$>pK^O?izhpB69{v0pz<9IcPuv<hv3K8euB!
zJAYTw<SuC{?K_jH-<4$U<kyZ$=sv`i5_Z$G`Y*a(aSNdh=PPa@wBdZEM9%lnK_OR4
zFyGIjYXP{yH>$K~p8d|VdQ)#;R4J19f1(1V<m+RY=eK(A$}y#Kb_EkqV@l;_BS=7v
zDaB?ZpL$Bkg(k4YzttyJOmKC`qbHP_BE&%kIulB9F953y6odLqW`Fse-nDvisT@UM
zq5_jkrPF`}!sODBI8Fiygvq5y_vrpYDN$3|zka88te)y3P;i>+BJeDuRJt8hNT(ET
z*Nr2<siw0hf3M$CGu=g?32?fLKneBq(vS%GrQE5emttJ*Bj+zAgXh{uey>03={ncN
zpreVorLwmn1dO?*GHnG3E9O!?CYtDo0B-J<7LBq0`Uic2+I$mr1ck8x!q{7-%8pW%
zZt&=!#RNw@yVHyMpFFj1mtr@L!kBo57Ts2g-3^z6a<-SMPh7>@S*pAXJls<kDu{}b
zbybHtZC5EW6qf_scS^B~<#K?#yHxepTCLCq0rHsl*$scuTR;7NsUr5h!35Czr2&y6
zfP~Kbr7}kV2@ik2ROSdo@|pAfQkf%24$YkJmm){#Lya9Eci3-l{EP1OJhk8PGjNGr
zYKr6pBud&}DpMSgC~1Fb`2YA=B2p}P_LoNPzm~<79{gWgCZix!`5<fYSG}h4pj!?V
zf3Q>@3_u1d2TO4<Fj*LfIpdf;>aTjnQ+v$ugn&Z+c+Bwxkia-rD%T1ifpM%9^L#0y
zJV*l=r8!)Tqhye1VeGNe{I3w_ud=A9(x--ctU;6%2WYSVLaEX+bxF(J`ofF9u`B<s
z|I=FomYAI&04pvyJ`EC9Tqq5RkPi}8Tqs4zr`2kJT>9%$cJlx9hr504LXb;;?Lv@C
ze_a|92WQX$#Mh-bIGaF+-2p^Ft#1I=QF{MVPbjtc=~zN>ux~()49EedZ$OR=kbvnM
zz{sGi9VD{$zJc`cfXLd3!L#;$0hzTEM`Z2&17h=%Yl*DAf1uEnH)O38L$CG^bbC}b
zF4shP0|GMBmQrZU0f7SFv~|E>^MF9N$F5aGm>>9~A`z1Z1`2#D(NTo&4GeUv{Wnc)
ztq%&wd|wuco%O*#vI0Bng9C-zuPqWg>q7!!GvC3-&iar*vwtfRJL^LN-NcGl!gs;e
z`p|3f#d>1cwXG-|?WKVFnB&i=PMv*EU-)y^I=BDmzII(e-Z2gEizjt~wBt!M#nc7h
zNu#kU^&x^y2^7t+=k?P=N^nZR7qT`ZpYrj;@u_V40DVhlYCs;VfQkN@8o*%q6_<f$
zOk;}%>Q7~-1>_DU4!9vRjbsiAAds)HszLgp%qs!87mFio;*t=SFenT*O=qnK>o@17
zyFj$(HJxP6lcn&pg#ldF96DJ4lM+}Mz(LUy(B(&ji&*h6{a4vV0eNK<Oz18Oz}a6T
zBlwZvVm5S`J}<jCAa?=5gwSFV>MevoE@2P6r1$NzB%ttN15L7Y2?_aO1a{Sy1&Y=O
zJXW#g_0b{ivH&(ye}gjkR@ib@I$Zy4W_dvFp@IqZ<pG>=-@#>|v68Xj`d!(TPGev*
z3o<JMNG<x29eg)yHS>(n2V_?V<jEJ95Lz9;$=7iqgeF_ZW{=QM<kmU;gDoitt)nKJ
zMF*_719B`-^pQPpq~27I91Gye;}#nGK}-kQ=K<vl`^Y%Gr&5cbVu_9iF!1w$Dc<`4
ziBdiflm_@<2Z>JjJP`as4t8R|DX|$HP^<YckQ`WXI?%M@S{8s#2dZwe_Jp_rnATnn
zDr19cYGcTrIYHlH)Pi=bpy}e}pxh`3^6BE`pxh_`2`gR>M#l!lT`6La722qvIwmOY
zN=Y6H9gX`gJT6NX?n>1K>8=#bB0*}@@j>O*R7H-RnW1-n3WUh^@d!qY4+h2T2ohl9
zgK~BRiMTO7C}&3^`Rq78C}&5>q1kbK5VPZLyfi>eW`kzxx7SP#%5WRx)6e9f47VUr
z?Bt*fw;)L;h;X|~G#o--gYBQCuQ7TxxEM5fG`JWvc{BuN>Kf#eM?+Ait{`E0Lr|u!
zM2gh4A&AuVGvObA+if>rsQ<T8v)e6&vh3YKnac-x%CtLJCf21OVd?H5)}=W3K+8h*
zy`Z>Y0D@EUf&oa__g+w5FaQb7_kzv^gCJ$j`-A*~K@Sk9@qX6^%AfbUHKqJ{e^6d9
zfH08u2XVpRZVXmzlYSg5I>{b>UB4^vaZnz0V~dgQuD<@dUYR)*lqY0h!V?Y!k$LyT
z5X8<NRvqm7*Y(>nM}qR)1x&~sp}r6@ppLO8m+H4QKNge`5?ge{4Ppe|$#G!MCqbo2
zsycTo%hh2~dSa>GCIgl@l)|PO<UgUlfrp@6RJM^-Ez@t$GzR6d6PS=`3}XEvFwp{^
zv9ZhayK|ofWxzviA@f-fN$;x>D1<N?LPc-cp5^*%GcYQI4Vk;pD<P_T9b2(Z|5-&{
zNDenJQQNwZDe`BKFuE=Ts9$mwJRHZW*6WW|j&oILgpLcDV$&tWN9ec^HeE&`IH4FA
zGm))Yuh&&i3`s`^6NXO=Nk<0>h>0QTq##l1#1I<devSZY3LCURf3R{&NHi{BX>3dh
zmGk@aM3PVl*TyM+gGS>`XJ)<Lw`RIqDqkyv<az}%fS4YVw@^U>VtNQpJDf7a5Sci~
zeyd&&cxvXj7?fDeaWN>dniC3%g+FwFF(-r&&o4xV$nzK4(M@_2PxV3<gNDGuP_dYX
zAq0$tp=NFQauOsk7KU!<$iq^IM!*vG`^|by#S#!whJ1ZVNbVDY4V5J!B+)N&%Q2{z
zvky1xf2myVb`#x2TJCle-9=hX-LzUX81kIe>>myK+M3m_p>z{zwcAZJ$*m5_YnLH@
z`*Srl7{9p*ExIoM!WMmQ&3YGtZX&IBA?PO3dbg+PCer#)x(N>yA-ajQF(d*72(;41
zkPH+cp}8?60|iKEZVWkrB1AWlwuZzNK@jNvt*#Ap6KSh!1KmX08j^tm!a&*@LZIN6
zP_UQ%eyHe}ePSyvp#<I!`2ze!5NsP`8-=yrrazqB8<Il}OnCQR8Xt6P*vB_@_p#~Q
z^!eF+A$bf8CWQ7;Qy&mQAP=(NZr4A~9t?>sMQGAEIT*rv8_Nkof>DRrvpe+RnZqs;
zMTo<MM5$6SIr&i*-l^Z5KN^xb7nqPa8p7msk=|>;PVE<=qHjX>pLXi!J;5(Rc(J9C
zO2BR>c0$;n-_bwIo(U=9)fq6MeI|rmm{)}mn(8e3-`)Ca*PRW?0Ezuh2%QZfK<*Yo
zATNe+$8)16*Ml8As5N1~epg?Z15X?uW22IbU|eh$8mQgn5bL-{-;ui<lEDp|k&wC^
zLU21zM_b{rHYtpJH2<D{PESk<<7I-G&{o4_`P8t|JvGLYyPakC=`GkdbG0yg`hfn-
zy?7u}2Z+J=sbP8h2_y=g8piD>+O+|RQ8G0g@5VC|B9S<t{Hfu@&HRm#Fa@RQtoP@7
z$By_77n<%uQ_PzlmiM6X6wuSdXpqGz7#_imig3|UyU#(rvLyIH*vMFKk>L?C{3EvE
zq`vK;kHX>-6fuGIQ8*{I@IV6VqcDzc$xM(i^P_N^`}umFNZiIFPQ}l0wo91M{+Jr$
z&VOr*vd{JOz2J+sfD{*#Z2=O6eC)IZNEGt1(-uUEw)og-iwO1K5o(K@IvjC9`PAsN
z0%QPsgj!)Roe@NFt0G+VdDxS>tg!B9^ti2^#*sknXJMm&1X@+2)Ep;aI<F}xG%-kF
zF-TZ^(&;^r06*zi3=$TfbSx%PSbUN!7T{1n6;`@QaOyvhhIKbJYm~Rgsj%D~015O{
zVeAgbr$9dyF1wlg2A)dvQ{i}5>kPe@6vHiwa8W;2eMbKxdNyn{w|Y~y6hoD?%VFia
zuwC<|{)49$zr|7-PY}*7hl|DjCP>(KIov{YGe{V4IgHo2XekX6dF|zJ+wa2S7?K#s
z%%Jj3Sln6SG9p>~HjMjW5AxC>a3!pyQn%qK_>X^n<^{IqtbS(&SfWv5yxLd7a;^r6
zQm=#&Pso*G)X9BVyL0-ZwS6L2Rj8BuL}W$)8L0G$AmULg$B6115yPA)v@%GiG@7IP
zM&#Q`c*=z_t-o80CM*kUlOsj*Bc9Zz;#~J<pLy=Z?oU7c%=0fk`P|dbuxTfB!w#R<
zm-&K|BN#t)#ZN6GhndFqUed=_Omj*B6QxXxNY@65Ql>>P%pc||csPTx%la=XXSgaf
z8fHXfGnDaWm=QrU@JpX%)DEw*%s2Y9%2!<-YKK>yc7P0ud6n9M@2Qp%Igfq*jXtr%
zJXePrV4l+ekRhQ68ej(vkT@2Qk)mU0fL9gP$D>8<o!{z9J)vb0BPCvNj#Gu#MEDEN
z)gaKiYaDQp0ACZ4o4g<az9xcA-p|Ps<1km-5>d8B)YL~R`(cG~lRe`H{d%PqOwm6O
z0m2r?Jdi-xLgtYVf`kuli8R?75!*S$ptY6yW<;*=BnPeaW<;*=Bnv=qMzF&B8Mg!i
z+amDFo5?HLLyv1w*2`nGuLM&pF5^4_+!m1^6#xl<ZPX#J(Aij=$UXK3k1@m3YfnUu
zC~z^N_C)0721wLqPb4kYARtL8g6xEbG)N5TJ(1>O7m-LYp7umq{M=ec316J1(|vZm
z*SOhJv(GJsPA&FDip3pn2%(gHk-|?TEG3QmA~juk0u!g4@jyf*Fd(3LAR-eOkkC93
zkqHb)XdZ|-2~3<)#iJ3i(g8tJyK4h&!yS#tbQw>9bTlFp7?40Z8bJc{OL$cxteuDy
zonu=y<B{Nr2qsOQ&L+r}PT5tu5%Ao5Dk2j}Z~=8HA`?lFfI1bCyRjfC4o1Q^^2vut
zKKY!AL^@lism&5JD9+l$4dXda*Rzhj;G!~Tot^<nQW5!TGe{J2HiB5UkXAX#u+}?T
zG|TQ{84Hw9?<g*O^AA@f$>M%d?))7<pb7d#rR#zOWWT6%evp9d7lrd<>QU7snKjhj
zQeq7CR19^M$c~{=Icq}*N<*XQ0ScZ;8ui23{|1a-)C`YG9|IFL86K5y>wpBp@MvDF
zIzR$pc(he(Ypy63<XAfpH0FD1#=02fr(>h?>QIvV>DXvc95#X^rD&6^wToh0lDu#t
z`#NOou9@gUkP}XH%^)Y77?m##K?M*Kqn&Q#PM9PooD$_u$TAT_tC|v(K8Qz9oD!8j
z2oj1@s0DryWuugtQQ?D0?t?R36UYZ=Mx_tpDUfDHr4NDx(#$A)@G*30Dy+?k7B#Yw
zQRC6ToG4ylZHua<s6*$nOHreJ`?*f1fC-?vQ8^QX1kl_lW@374H%0BeAc~J9v>rPg
zA2#@V%t%y%76A-T`D0VOuLu&l3!*qLqMbe{qeqvp`j|1VVu`CmkV~TSoC`A0SrSFw
zjca*O0kw>=GNW_NGN<ZbqUy_>s)Gc=vZ!1Jfh3(M0?i&#Dmri#D~=oQSFDQ4`!gvX
zHdaM-5$`}kXH^uNX>@HPMLo8b`4h&?HEZ2cX{EW=EtR@%ZB)KC2NfW!jUrM1mnaoo
zSI-6~jB_>hE(9$!>mAQa@jk1M21TX`5)k##>)Tjo1q4=_TbP|R&iB~jLeLKKmT0ll
z#I*3-5*1%Kg5k9A+!Dpx<2;0>XeVrYRJkj)NMRcX;I(xnZ8Y;d2A0TzAON`SQ5myA
z0&aUW&0i4*94$(>M>}-l!4)Kj>wG7@W=>DV;~Vdg?t~@lF4m{qXkW9-Ex<$pyQ1<9
zy_7;r)?HEgh8{>1uq%qUJcrSMP0^Bdul=ubW4Nb!uZuxz*1c}a)0%Z}RDQJuI>6W)
zy{?sYBZt76bst-uF@939FDfshr1)ZWUsP@_fP~6EauMNVSgRgjxh$OQfLkcNo_HWC
zUr$Uav`9S=&5HK|K?30b4e?zxyQk>&#1r<ItZ|>x^@NK-uP2^xTbEu>JP}Qc4}Cxf
z7$>65ud_x_`jN)UFj~~#E)-Dv#1~P_6ttXE(-@}O*{JeWR84L0uq#O`$G%KiIy=+U
zm|2SlV(>u>=x3dQ3livOY2Z@!020~5*=X5UQ7^V!4bGtKK|2>!FGj`AED3=Jz4KAI
zGb>rxnY|FDomu|zi!=?{D^ca{RDV0z+z2YQARH?w1YC*A<3vaT?MhTmU?AZ^SE6BY
z6^BTk!CZ+(#N7qSL7cb}Z7;U1C5yv!y~COzngkO4Vp!qUd2$c_8tLhE#>5&hgjc8e
zEYU9}?`VL8P5okVu_*)+VEtlP{I)~0mxr}Mv7(pQUs@V%1A}6QpWm1$N2B|OuoW$h
zUbRDFvT|SoXh=+MeuD(ikQg?<DWw64$_<G{YxydLNK_6EFeDZew<aWuEB)f1Rsx+{
zPNofwDfswH?v4lU&2?zsuCu5Fp1|wz=z7tzpt-0F%pid?G$sRcIby4C7+crMxT$uS
z(+*$)VpvSh5g>suEGCanK>}e|4Ev#Ud<qiBr^8~-@hQ>5{$VkBd@5NuJ{=aL<I{I&
zLjzZo#>I*b$2_TeZ?5Mv&;7>!pX-eVPjFle=T!{7<>U8%7`v;DF(J!hayJ%C^dY0t
z&j}&eHlBGaj0>6ZF?o|4_i`XKK8AtXngfBFz+#m~MP@=w-qFUT8sf(Ans=Vdpi&dr
zuPTkE%_qj>4hgQrKxSeLOJO<+heenZCdHJNg>xR}Sz|=l+DhY8b8z?;AU%itq!>=(
zMj<YNMmx@oDYvBhdMS?HY@2P3dptE@i4Sr>017i>@`D^8Va3dt{2&LBsNKvMKFDzk
zhl5wlVq@AFJu|ana;pcoSO76Ah8d*5Wf1*mv#;72&9bv&a^D7*P#`m#Tz8SM3m&(?
z?$X{^;>j#<k?5Np3kazPM?zd)$n*}zt(k=}d1h6jn2=c*!<p6JxC{dCBKF@MjDIv=
zgmFa<japlfSrkKn+KC_s8liPnOsP(-S4At_(b2G!u3$L|#ZXv93PPX4?5Y^PgGZkw
zfjYIqs#vR^Sg!~?#9e&ZsIyT}G8^5t_XA{OtVK)yx<Ls=)=li)E=IS^rkMPO3z(4E
z6vG>n^h!dBf>qFFR`nCeY<6*I_h>WW&?^$SDTb33HvA{XJ(-4>yt@x3WEx_aa%lsv
z1aD?z#=ZO#<L1m37l*DqZy_A)enSRtP`$~1ag*_2_DvTj1erGp2PrfO;hn18_S-iZ
zi<Ru|nEa>=xRBZ%LwYLP6R%l)WV5cuy-M~Yw-F<d`iL5l5>Q~_&8tJq*WK8iJA`N;
zn>GreL$Qh~Yao3F2yy&)tmrhm*xeWqJ|4sQ>qAiGmytd}Ma0K)#5E+);wwNPf$<5s
z0KKciZy}vvKipzeWlqH88-ZX#=0pr{1g5zRs77{I52Hz@5kZUFf{R7Ojp6L28J9t)
zf64~-Fj{0jjmfP<TpfbUr!j0L;_?y7!ub1)ZR=rl%zWlJH<*z5jGP-cJt2cJcak;f
zX|&Cpba7~$og^Gl76#HO_S>E)>r_l`0+;fEbSj3e0DSQRI2cHuv&B7)cDc{py3;`V
zoa(+8_bib+Yop4FrmVcxc;5(&Dl^LH-35(*Y^aVM|Cw=TWnG!Z!#pveT2~frNwp^u
z^{p$r;dZMYLlQK6e4_o>J;o+a#l$j=?_d!ZN)yY<_^Z)GLTO@I=X>Ziagca8ncaDx
zaYxnUGL4^V5|g-PG2Y`uLS=GU$Gfa$7?+3@+RU<|@%E<sjP{=3%rbn5XJaX__}ikJ
zZ1sMlhu(2hnZ~d65Eo#Z%1U|H6A7?QWf+Mg5m-UPXckv~p6cB?$NIF=BKF8%8vhf!
zlf~s%F(Cl}7MEYe1PK5Z?{qI6y{k>a+QfL#t~ft>SDR1^#Eo*XY-~cSj45&Py+aV_
z)hTf~p@M|$l(<|rf&}W6IF^kF<!TeMY8uNtZ!~Q;%~hdka9Uh$FF^(>)8g1(nn#xq
zo1oFO1#xAu{io-RR^D3t6w@glz*iQ;<p<M10%k!xDRw770%k!R6AficAdxLCh&Nvx
z7yEt05c?Ag<8r@Gvd}7v;@Izd4G|4`Kv^Bf8^9CPT+dtYyWdW|Xk?Z4V2Mc_0w{L1
zYdx)1R+IIw((=6t#)Y;at~A8$C9fH{2?Yk)3miwC7MdI4G6%p@sBehN91kR{-ViTq
zfYp@a5rgt8tv;@9j*A>m@}RddE^|D|LXNj7?tE*o35~w3p19aL0folf8kfsfkT7Fw
zTrOKd0&Z*ES++Kzmfjf`XFnh?)_1zyK+D#haha0fDUf!?<+2qdkaotgY~^?RGGXm#
zyl9I(_HPF6_8pDG$?0xi1~+3G<I1VHYOSEVeHnSTk9hV2|1>&yI)6&tL^tllGxXAD
zal9Sla!}66INquGnA$zVQ|vh2wpm|m{D-IZtkd9l0Q=6yWyS{*dS~PEx&uf`s^ihG
zWP=lfH~6`@dQmpG<U#Me)8LXtNi}cqZ-fm9Lf^%ez6sTy(8u^6Pb~=1?HQi>eHWKW
zHAtX+7e`V}&I%G%d>0S*O^9wM2Djq-xY{Qnx?S?n4nM@TAWu*w3s6_$h;4LbPO{K_
zy%U=MdP+pVgHnGssh`p8iT(*Wn!rRi_D{%e1c_$qpOANDK?1dZ0_hed#vqZV^iSmP
zmWA-dl1misvYPNRKn-L~`Wx9N2D)X?GJl|31`VBo3HdRk3}5CCOvpRXAW_D^MEOr;
z8T{@ap(dK#W~F!;@Wa7uVt=FjiNS6eG`<EW<Pmg+Zwm}ggv7;akU$umK#nTvLANso
zCvrVy88o`c#=(hv534gT1JqC!9bk0nHPkJGHV%fmWzgUmnvmBAGkow2O(4}2W#BRu
zp0;$_$|uVhnrL+wKdeJ@qJKuP1p|zoPmFL2p>Z|BZ7dpBBNB34K?M~Vk-&5(3ZWa)
zBN9#Tkri=1KRP1O>}OVnR|J#h%k0B}M(&B1-7@Hc$IEURwD<6GLVhwN!}lIuPGI^L
zW#F?(cv^5O!ate>D_%}Cy^CJrL_HudnmshgsH_?7mO&d5qZ4vN0x~FLbRzA5(vHLE
z1Tx#D$c+Gj)OH-JA7m_lVw?*>r{v>YGil3VTp}z^_n`uaaS5bz!b}rZj7#7;z8C-|
z4IM6V{R8~KKSO&G6WE@?MorBGw+strPDsdY4alI335n)iBq(i3Oh{CBwKmYL_6#M?
zv+cWw7#o#dvt0~2P@kQUI}8v4#_WXr01`-G%uZB_TL>Uw=j=qgUeeBD*h%T+>_qz~
ztj}ob%g~YgGW&Ng8UO9=wahJr_A!<v<XRX)C}mkfepCn~N?Ddb=oYPk*MmS7?vthX
zWhu)NP4Bhd7hwwd_!_(8%f>G}wQJl`Xs2UMqF5}kGYai=tVv|VJ`zZjvL+$-kwBu9
zHHpqoiFgc>U(i~UxbaEMTX?fxaOi^8n#2>m_%3ROa{P6PYd&1`n?JCBK5mwDz!Q{>
zN8$x4kSKdyLQYN~QT95j;Q?Vktpn`4MjMZN9%*px55Q*{T%VyYI5oJ#hrZy{kifJ=
z*-kdBZA}z?kr3HV7Lr>N*iz-2<XOsgwv8KO%&6R!kl`CV$ZSi<EC(dewk43|G*Z%#
zrP%qNy?c!DYo+qNggglVm)HqIe4-5`l-^53qShg#nNULCe`Nm`GmdyFKXR1_>myf*
z;_yeLG*grW^0@ut1f#i9bKI$WmT#vXcj^uj7{?P~u^$eSloH6e>F!vTGWW)W*v$Ud
zBy46kIt`CUP;7J>9wZbSso{U1v6`hB<8*>&1uQeg&>lJMT0jx<v}*xH$kR^iLlHoy
zoz~BVwJ#GzW0IovbCCQpfdfh2`Z;R-b7=j^9q<#F=bSzO3CVL#AAkhrIqCz-G;`E!
z7ZNP{yiwj61T-(Wn$!^&5;Eb$Q)pgDAZ7cO{3%BX=QjzZw>@pD@pn%xeu{(>4*>Ix
zQz?*u`No;PKmz6)n!acb2Z=fSn?!l<q?d255(5I?Ce#=oibRV6|6KyvCVi1yvhWfG
zUUpB&_g>lfR}6p49}@T^!@tR3gj`9e4~jH1hqASSNoAP5_%$QzsRa#F!4T;NNSHb>
zDYHzFuw-CTW|<&i>cC{#FqleNCNX%rF(|1HO^S3w@}M_3DYHz;LeeuNNm=HH<P<qd
zc-5DaN*#M{hVelyemSj2CoC@~W!QooOnNyP7a0XeK);-n={iW5^m4L!9ZaGyP7IN*
zk4nmPU9!+tqmyXBx9QSAKCDeh7R^n1QfoZ)uJ#|;=9$L&@Ps5@v%448<tZ(klvG|}
zb+e3nYVk`n5csfWQc`AxAYsj<q|6FI!kS6R=qs{;h`}3Za#Ecp8%Xk?H^pfn$wC87
z<qbsFQuA;cZAMagEve$m&9jYLYC$+gkYCP7%A^pI0GpANNg+rWF(Vm%?Wz$nDV&*9
z=Ug>{^Ux-<k}@eIJuv~!PRgWEvd|r`CN*5>qYzjKYx9#uuggJLfFbjfMpg{M0u91N
zNwMGq0oPjO7!4A#i;^-Ff`rkFk{E{cDolZf$P$*AW3;|=Nm2$vFo~Pw@Addd1}aOa
zvB{98II~X{HAq96LULKsiN#IHkd?xa4j^F2O2-h8kX`8*0urbz$q<SMP05f|Nf8e~
zKy#I=N%pKt%6NdM&|H;tmT*le9;{C)n`vw{_tfI2=r25g-g;+LfrQ?AXH<bif2~iJ
zZI=B-4DK`=lIkYeUy=vCddF!b3r@3<I}No-v#|DNvS<fylekxHhGO4LIw7(dHOkwv
zcR-+OZ#yP}gzVc+qku$FZ&RaSBSmdS_HSo5&NtdsZN~v4&ltcYZc-QTErEo}_9VX7
zMVrHF^RV_|vgk{D{Cs1VC-7ksXUTMo*qn^m&;Gp7xT$i#0|h3a_9x{#?H~cQpE`O1
z1={9R{9*ghLL=>|KJ3H^aN(GTlk)B+NRmp*Z~1}*#^EHs<xAtaIZc|!SjWZ2&#RBQ
z2o$G}CFN2EGC(+%l+zzbARJ3#`n#DUfI7i8EjGH>oNy5+e4cO-D14qs%9Fw7Jba!=
zB4?!uv^n4UN{V$g2w4AFQl>5-q4`--rY;~++Gj~;25nA;o=J*zH3-baXIvX-3O(c6
zKvU?Mq|E;z45TwjBrx0Q<;50Zt#_(uslDTM<4$j=cM9>2&z~)*U;3r^(CrKYko|DX
z$9oziAp51{&;<#|eknM|N7Own&}`b!l=6~&d4=&yPc42rdekLDQ}Wgk<e)b+C2zHW
zgx?QMHF+r|ZnY4D{9YZFlDAqU2VFNTC2zGz7J!DOaI2*qFCPLUQ#hG!ntSk1PqKGy
z<N6BFjuF(WBUAEZx&`mmktxi+y|^xrMzfZyj3+BbyDHR;qf_!=x&`mX(J35E)9aHh
zs2j(!m8*=76=QMiDw~M<Z){55-hd2n$EFaH@lhP8pgG60#A@TlcH>j>-ZYp{8J{W_
z*U&&hWqb+;xC<!FYk{?%_DV{bZTDG?OANL6=~Rdoc(0`791S_>y^@l1G)T1SE2*;C
zXjPh{iNT}E^prX)CFW?!gWimkoTDWR(PU<d=I9RG1S|z#ODXwOiyWK3)@WM;LQK*v
z_}@>wmXdEBfP_u2rOL#6xFCW3S_-=W<oGRUxi>#093KQ6e|}0jK1gWJPf5oI3C;N_
z$MIXxGVk@2NF9H*&d_RJcTJ$h-s>qjdLap**HhB(K?3OY6#V{Y*d@oSqAOBGtJ%zT
z#@&GxDZCt1zy>j1mPF`hKddvFWmcx-rZ$-Hr<EyeYGXox3}9{6ZN1SnW2fY%HkgpH
zQ*tw!zxKF_^;vJU$gYw#gCfP8RpjoEV&GjD*4{`JZDDV&H+~s-BV{D%JV?EcELhJf
zHyAyu*E=->6E$1!)C?p{Sf7$#I|YfFtxsWNo?`QLWZy=%XoJzNdZUX#v2kOnSiC#{
z84^mRL=FWK2pdz#p?Y!z*xA6+^~P;A4K4!tY(q+3mAQ_`#)ec-?1z8^LIc@wC+gNR
zti6>gI>n~e8+QcXqCv2OQoNQ_xgG55dSh4h4hI-a0Pk=r2NI_3NXeiJ62LpCVgJk#
z@NhTtY%>0*X19w#v+`~ifhxB<C3lBf^2+U|0ltr-Q%mZFefEk?#-pB!ea?6V7fSo6
z8))?l62<OI;ozV<*8z2aRW}$tst>ruQmjAVv`9;yDj!G%#rhc}>7)?r>84#v3KECd
z+6Lp^?uT3i+HyMNB2dgY<RVbaI7A3|p#%t!J(^M~Qq}CpdLzM}-eOdB149fzJVp;6
zO%;m~2NGCEQ%zdR`cN=Anrhv~+An$n!K5*zoMd~p82f7R%R!;NqeizWDYP^?p4O6w
zmPYDjTB(3UXlYC}JBiRjxi&FG#`tMUzE&z(G_|GhLgZa=j#jwbkSe;6@}z2V554f@
zv(I#At+pCBKm0`sufHTw(^ljrU#65$3YSk`z}MJv58Z!<un&)5AD)TO2NL#u=}bf*
zQOhrBBEk_BaPaUf+pyJWQhnB`A(%io>(me=2|3OJ5(sC>Sr89^0AD%J5^ovJZaMEF
zP*0q95vZ8+DY@YZ6(F3aP<MnD7T1ThuTw=M)1K5#tetH{+32^7t)Z_|&Q-eWsj}aT
zdA0)xK!5L44<w+!cd7>x(BD(_#?Xv#Jrz8_?y}7o=cyc!mTdwqvC}ds1qr1AX(Xi-
zdatJ%4Ni;D3j!T8I4wgjNN5gD%g_rFnuF6$=)IoE5owWgfPh1fNK3x~3ByOEW$XnB
zq!DQudqHwl#NI(V+N3omq;%1Kd&o{>pf~hN8lQURIY(=1i<xP0tq=qtXFAma3CNjg
znR9>y<jgeMf?o`7O{ULbU%qQhtDKXTcUQqAZd%@51qq!wY2001M}wd>wZ#JV#vWrs
zuLVv`z(lbNoSJ|H#DcVZ(GMgb7Njv3P?!LTnQTE?{v#HVVr9M{jeo?#ZFDLG3QO5X
z?-~E9Ug{P?_YRk)<=sWdppd0$`G;5_Nhggz#KMsv5YW;qn6}rzm!n+-N*7n8<t`g!
zfUqK+;dc;71qdtBxP!2VJf$_&sos8RukpU8rryP%M6uqjDus;tw7g6O9bnX_ahU@D
z!a^7*@NIj_heo}p=4}^)0>;}e1_g|_(=zr#2N-XsF`Q&$Ac1&?P26w%tL7aSg6^@s
zla|+bTl3W6opeF$c7g=NJLwxbaQ|&h4ZcVEF9>Mvar_q~3g6@SFGy(ax$3{IDRtN<
z{Fem|B6Zm3nn0<;KDQQ>I_z`Y7m5JdmxlY^0q<=S)()nNCbRnw8n;Idrg0&>AI&Rm
z;Jn(=w9;rVJcxIeYw=UWEIa`CQ3o6(z>lWo)f<oiKbpqD0>xC2h^a@@xyH2Diedwl
z81O0j$jGs@dLr%Pn>kmx&^?|;$`-{g&{Zaqwod|S%G!Ry4MTY+S<NA%y85JR6eR>F
z({eg*!$-==wESoeNC2NqWBPlHBj85SX}02!@p$cN7lEAWv|BA2D5ujhDQUw8%IP$w
z3c67Q5;uxYr<;uwA7mgJGX+dIoo@c0$V*Kw!Y2=i{nrQ&-B$q*W_+1e+NV0^?)%d-
z|MkqD*r>xsmuj$_wxxmeWm@JnkcSaprc)Jsc!K2mZQJp$l(eCNbdG69j9a>&a}j6`
zKIb+B4Wx5vIg3LD2<Ot6gZTx#HmI}qbz1o@&4wH?cGcpiV+f6<uie(5vGjFXe%2dm
zfcZL&TwZiCy(a&4`ugv#b~2sq@J_yzR=>U4$&w4*%Wfx2COY|>An)Y96ldDd@a)YR
zj~e}}dzW9eibiMeav7E(1FL$M%diX*$i2&P6hv2D+tBTZe(cp_#?96JTm%}N{mQTU
z3FY<u%7bEaA1XlTSB`_8r#S)!=OC6pZah;n$VH$*I;dPO%iHilI;gyvI1c~`ghA!_
z>!B?aW!lgnt+O{DH@13e>Rb%EI$Gyq(D<w?m#<|)2N-qbcrA0Yz`!xhBzx-#V~eNj
zBo~9Oj!r6<=X-7VInAVU`8gVpz?f8Cp0Q@&&0HVe$=_ODw3BW7)c8nwBP9NA^x|j6
z1)qK4OQWw6-dgT6>Fmmfcj?3GTjdI_HQ?*4wIE>|X#NKf^c0iKTjiL3@lp;*Jbb%c
ze1(xHLHfyEiG=Li<(SiiEU0be^5sFisSa6?{JnR`(&V+RobP=RF09{<LLZSxG!8)X
zD<AX}!rRNS`V_zz2Rq8;JCJy@9I_z!=>lZw>dlUF929(w?>VRyh<4>g=gRH==Z!xr
zfrI5p(rDFNLDfFQjIXfjJyb4p4={mss9a9cAYs-ast_$7E2suX*?)g!bgDS&s!$so
zbyX<x93>Tc^S^>>`3c+kl~GgiiK{|DpSUVi`A<j%H^86*>QmPFYolAmr>+V$$fvFf
z1%^*ag*?B40>ddb>uclYic_u%wack;Qw(s(K;=|<Nh$wGKm`TAFIe!BaeKuVt_qF%
zFUsXU0c4=^MLG5fp5mpzhtIMBmyG}HaMo3!A$hi3W@{CENS-BknP#E&E5q7=CPm9L
zp47|MxK38oZg<&$qYP+*^sxc=y3|VQhGq6`KNxRbU$rbFGdXa9x-63vZ`go@A<HtD
z${VOpt8g_WQ}i$UrdDPTrTK;oU-Wp@D%_>moKd!BRQlqp4qALCiFj;gYqPOKLk5Ql
zba6sFLf>r3sNJvOpqMv_GrbtLRgrCn?R9O;nZAm{IKSmV8C=+QI3s-oB$N(k&=t6P
z1|2*+#)h{ytDZWBvudeAK5{H0ujoStD#tRoqEAT}NQ9kZnV|Tt5|R82@mMDG6Mlv$
zIdq12EYtZ$emq}Aj@8IAH<(>28eP+<^u~<b%!drhY0O}Zb?2smI?4LqVD{*7634u<
za7uhnW@Ln|;uFxxOjs-<L6S}e^C-Qu3sd1}XEI6~<ooQ44rV!P(ZL*81CE16S>2h8
z%<3Qxd(LDs;z9sOpq<I!{nHmY7)m~uVJAD7f37*_LeM(!oC`rNc`lP_FU=*FJeTR%
ziGMq+iYASV88)e-SyOY-g`ipEqFX0&(Tf?G0z(H77c=7f3aAohjY}C8>tx<qbIFCE
z`vI3+2%0u7W#pnBI)J#8!HYEy@`|AUzRfV!$$Y5hTNi@<hxA()f|9#$Gjc1nN}P#h
z@ZUt(#-x_TyfN5r)!F=+w`OqmYI{;%H#mE>cWB-ioV{uW%^QQWFk=YK8&!0?Khj?I
z6LXlSW~7Tj^TtRQgU<IyX0O^o^Tx<5>{v?Y`&D$lKhge2wYglWndoBBpCnCmG3b1M
zVm2)9U_b{L6SKJHIYf8~PVc9&-`#8u>psnepf}~Gxe#=CKP?*;nNAfyyq}hB+n&Gq
zP(?RoXJnO5sq5JvZ^l1;-rvnkcL&39GdiN5k(F<bKpI#xvI&uKgM>LVvY1XOeXOF>
z_SsqGC#g09>#c5PlWH&=EXv|$XJrNkX<*IHraDM}qa*j(+0I?8|KM0Sai7cb-OVSe
z=eh`V;6B%_86CLK&4$I!MU_Ga?sK!PEBF^Ds_0(s0=Blh`C#<|7Xe=lQ5U!f^lwQE
zvT`8<6(B6g;;j&xg{tV*?qYV=EoP_c#V$e!2#Z|=`qQJuS(&3l1qh3?_}ixT906B)
zm$G%Ym>sH@x(M`VM@wCVFc6kz<&Bss{%1!^v$=xxM~;B&zAITp5A%iUl`cXA2rFHL
z2oP4fwTQrml~jvoI0CK$uVDv!n9o+PaS`yYhPoyzH({%kC=k|U#Z6OGJPL$0*{XKd
z0~`VW*|3h)_B0==UgsjjV8c4sh8PgmxwVJ^VI9?icBHBl{KZ2(3*KtpT~qHOlmVgM
zMJNM8eO4yIPys@H7Pqxu7Oozrt;PwrnxktPT!=Uz8eE7tAR4lAWl^QX0nv~xG;>C6
z0=bR->)UA5Zg(*fz}TLZ*<O{B0LJ!gNW2{g5*XXFxPHwyCaV;@x4)aUz1`f^ZMO@7
zlQngBR$j`13?O!A<!e760kJ!a*M8o>G7XJ^H|tJhl~3)icbGT%p2SaQfTUo_3AZ*W
zz?{g+92{zZIg!QMl2!&Fu`)Q3ZT4waY^f1LER-6v_^vo@;Z!MUBqCY9h0_HDj69W<
z6F*3xpUTQD9FRaimBkj$$D+B*u{_Eu%~HGAeLIXB*)#W=GrEG|m|6}~zjRG42iTXc
zspSCsl1xRKt*C9o+NEq!AN$t(%uSxqr7TWm`F~}#rD^}$EKA&P4(Rc%gAFbW{nqhK
zkih;nTP8MAKmz;QEVg+skfCj9BJQ12nx{^9*pd6q6Zi0N0yZX4@P)k~VQ=r84DTSh
zmVEmUBrtpDu&ezE+1oCx4a*hP<vgjqUi*fJ%nv+qd>u?}2c2O#q(Jyqn%a(RAHh~U
zY(7;nA}0@Kz=X_*T)EiU1qs{{IjjjOt!qc7j%Ga{G5@pcXvZ=zVcBTMGLR&clW74+
zAdJo-Ef_|7gzdu`%N0#yjgOc^11yIfg+~G0o@|-GYJX||N9BZ^%$~pm(uAB$Q9uG|
zLJlbk|L^SfWXx1%K5BkgIn~vn(x>L+JN1x(&eR;X!Fr+a8^YR*9R7iz^fB{^@C+)P
zBGe5iT$`O!=COZ1W<FnwUm|-0A6T=U@<9S?HkD8A3li=-I~Sdo6NgR2fcu8ES99vz
zoH%TfJm}5I$-^ee!jks29Bo@rl)ZtfvM{HVrJCi~@BhQBtN`H{K^0n<lP6w~1lYnH
zPQ2*&;s#3Xmaw<}!@TXOCD7-d1140K<mAVBK|*CoPF}SHi4<f>uH^$fmnD*?kV|r{
z?&m3_<WLH^BzNz9d>r0D5X;%~kDK|b<vBS3!9+RBb8-NJB%z$Mhk64gfNOGm5A|0d
zI3>LqBz$I#<1-+Ev?eD51xO&R$zk;2VBd!?N3F{hZO(}=+|g{cF6T?~1u4D^h2x-{
z(o+68N-tB(fE2GY;UQXQJyrY`tVcuCD)sECUS`iseNMg&0w!eYbJ!Qas}GO?wTU(K
zGVjc7%E{NUz$7jWu4(kv2|ft3HCOa5tNfKYHM%wD<DbCwg~^n+fLnN;y*og!U?oqQ
z_hi7}=`lS9$XhfH@V!isFlHP3+mq%anQb|_fCdvX+j3YDVYER8)DHILljeVBcF0C2
zCUJ8(S-X|Xprv-PKR#vtG_xxwPw2vY4ZJId2!k)yLIq8~n|<(<c}s4$i$iPQ-GqaG
z2UpY%VeLS!sGoh~(<c7+@Bjq~zE9nOs&yzQ_NhUj+YULt2@<t9l#|OFkTB*@4$GUZ
zlw)?FIyTyw|1#h9bZvCP1-J-~jX61SgCwb({2O?Xz-Y|je^53U90OKf&e_d>ZFW<u
zFS{U=&0o&R#X|?~@t1S*AICug<Z=$PKTRSXi29D4H{Aihq4=HS!XQ!lca95#B+;ub
z+<{uI@0@@A&h&Kco0q-|CK{n{UPfY&fasf-z6%l%ee>|$e$=iV!`e&vq6K#4bNF6j
z@TI(w7wy`S+I1xR`9ICc9q=27BlB{|g9PHpylhsGKpdGzv+`T}9jRHz*}*@Wy*$<9
z9IL=Z#m433Hakd?%F9m#fCR?4Jnk{!y*ITZ`Ori*|4-&WY9_h})TR^j@(wa&fG{zi
z7VBz|K$w_!w#YjYIm3SX1+(5$J;TMI=ADt3TWAmh#*BPW1SXKAl*e+4`lTba?rb*w
zcjy=VhT`nJ3@sp`I6E&x3rHx=&O4!{Bkf4c$5))qZ+hZ4VCK6P(B|ZPr+4raK=Ym6
z0STb_)H_HL6tz=Wdp(bX>C=BP4@O?k(^o2JO74Wt(U#|x)$G9km@n1hmk7q-18sR;
z24j#wTb`HK4?to@Se`Fiofk6#G5CzIBCoE>iy1-kptmwFX9UT@j9}+!Mxczf6E*%D
zdF8&;tvS~CSM%OyK!{8Lk5I!moEn1UqB4I63G6rW^71}NMEf`LxqJDkC6VIP=8b&*
z9_xKkSvbSSypm6C@vzB%H=DB!e>3M-fa6q}Y}uHX->c}v9bsc0hko=~yiVi?4UGNW
ze6VYSYa+QpgX4^l0YXDwekcMY>Et_gwkFWEoX%nGgM86gyVXC;gg5v>9<QPC(9@ZQ
z$bK3kGdk{ftN{~P`<=l75?K3ba2!xzPG{Jv9my-l@@i@u`+kLSxBX(RX?beF6V-tP
z0FLD4#T<|TIFgqab3mdGkK~&iLm$%a4>70@)uVZNF-LOHXh-w%Vvb}1=x81nbMS5%
z^dN8|kBd1?_{E&>dz;NFKs!cIo1Vzai#ZU6?uk6kj(*2=L7imx^f8~SJn5=XBc9C5
z4Y$s`5l`l^;YNQ%(V525={!5t$87oZ>Ad`6D7er$?TkN=06tCQk2aG)!Z%Lm)3?c*
z((O?!IZx-yZ{?W)34lYH!0G%gJ@|6FGY!2j^X$)k%`RQPbUGYd&XzF|B+C6VFIR*h
zQSO&{Y@H7xkLyf<=6s%=?rRRNIqzc7R?K<FuOS4C^ZBsY5CRE|^LcCt(cW2S+KRcD
zXRr4&E4yBFA!sY+q6<M=F&Fb;u@Zs~ATCl6oI&$bXG(;=&)ZG<n=?J_zIPj%c3-~F
z%WX<XLF@ZGCS`s%sWWz8v;hTWsC{;TiMvVo>GUb>xC|)B-~c)34Jbs*c)AD@jy0eV
zA6gK>ffzhE3@oTa3L-d29`ptkWN?ry1c$)|3Jw%FJJaUP@B)7+fc@ohGsfBuHnl2n
z#Jd1^4oij?Wb_0H#Nh=edUmFLo4SIySM<aXQ+u?oAY%(2p#kd(SNoARZ|VwiZo^Xm
z)fHr3hVRR<Leb2E$jfL2&kFL3rV$#t;|oe&{EZt(JO#}!Z1_N8aEvb?gxrPv1Rr{%
z*+?I1{wy;QI^>+hgv`W(xKjcW)MWOjq2|4r$px91fl1r~60=`&99TD%9Uf{vmYIro
zt0fMd2TUy>!Nc7Y;9#7*!X6n0oL36+y=pKa^GX3nR`@UmWY7jP*p^{t=iH2fOeVpE
z%!~q($t4I{K73Ygc>$j@Eq}?Z@`jgF#p&JSC{=s~RlIVWeor%ys2gZeagYF6K^3PL
zxT92Yo4qsA?3S?$@(LE1kg*FGq}VWo45-zt;$`y}nbl6Ez$7kJ>gQYr6<^Dyzid8`
zS?e@TlqZ2}sd0L68B}~73y(5y&8#cP7we<E;_C_+n3O0+sp1>hpGTRuWHuCJG6^Qi
z+E73;iHQj^7`q$U-cja5nT-XR+=2<2jRhpP*ernz2IppW`)Kp-%w|`H-aXz-G8n*+
z!Qk7%mX0>7GFznM5)(383JAtHcL9lw&aLdqXtQH(tJ^;G3jbDWpOuu2;}dwh3Pt<b
zgLUSL@U8-Gw^2XDs2|?J5E1<V5={+Sd<YUGFy5hh(>JhV)DQ2n;bY9ZGVeOJfC-s*
z$(H})GN9gPUyU(qGw(b78RPx%KJ{mJE`xsffYpsPdo=yPX+L~#4w@fO`{6P!%0fTv
zD_~oqJNx@6?25<6nQe1mi2tI+V@U5S6q;IJP=azJj-(1jz1cJ4%+tYx1tchZYP^xE
zcbq-R%o!EOod5(T>T$dv^G1*`=Xe2ABkgV8NR@14ZO5C{)s4=02NPZ1=!|!eBvg?1
zdq4uAk*Y^A_eOHMlkBzeW>wddE&@5k$$~ucgbWZ)7Mk72rx=hxI9b5;4*sQ^8;Lwy
zuwxU<mpoNx3v!+U8(L=zGEW4_#n8oDXui0S+U%<W+da{Iv*s(eWJ(#oD#+bf2m#}(
zLQ3STAc65!0r@J0%p1wIFBimJAP~^J?1W2@(7fz~OOVjKd^KF&NEN&y!evhou;q$t
z1I<}i-1eh6>xvUEAq=D|6fgVYixFxU1k9#IE9_oVOph95O`Wws7wXN4?D^^F&52Fr
zbOPr8S9ShTQWaMopLzDQbh!!AD8hi#!0UcLT4xXx5#~3)QADE$cM~;x)U(M^&nCK?
zvuBg+Sqvb;?t-wQl_Np`1r=B^{IH22;DBUA#1X_rK}7@<!{Q_gh-Pp<x2m3<{MX<6
z?!B-2{;GPf>Q$lZao>3ph_1(dyeSK1hKrdO>gJ`H3AGE$BI3S<zI$N;4<ZYFURX36
z5!|;}uV0#J9lh9h1%J3%0<_q71s{lp#l9O%0@1M8XE6DKjIM?Q)60EtrJt%^raKmQ
zE9o(7GC!LF9W!vj_JlyREcabc2t><r-wl(2^n}a(UMqdu6AHofgirga6~65W9Syl>
zeAg2?5<TIwe$o>Tm&kao(l>t9-#nE`*FEREUXW|F;yK^-f<UxA=O?}3aEXX@dcYHz
zuSW43J?qLwk<rY$vQZ>H*7>d%gc(Kae7wr)+SG__dV^o_hQ4okW@3*GemCD{=m_!Y
zM&Eu80zl!$#6Cb2ZcJPYMBzqp?Z05;5#oX^dco6~f34k877^EO@!bL8@F23q=Ys>8
zRT?3g*``~b$=p)g=DSyU5D{tf-QLtdMB02tKh%0eK(FX+&tyi{y;8o5IPMkS?Xn4v
zF!_{h$)OQq>~?GGs{o`$dtz)LlI@AHfk?K0YwQtX?A=fQ>e)<X<L<=F5QUnU8HkGA
ziJ5_@*ezzh9W&Qw(|i1i2leI^ncI5o@w)}q%=KdCea_4P6z)s@4G@L<5;Fr)xKGSn
z<loebb@uDCD>IkZ?k|gonfE6d1P>znC4(jz5zKr*-?S=oW8HzWh$uRcc&6T%`G9!l
z4VfgX7dsy>b*##~=`|fs{yJ1zdOZ2-Ky)1U-FO)&LO$Kor;>K{V)#zK^ug-Py_KUo
z%Sz-$L}yuvxS-Q_Gkyr6q|>M0F}Yih3(}{3@9V$H-Cs<BWV03q<WDDA3q<~OlC?mx
z_O##YYnQb`Fj;%XPkrUG*3pprGRay;B5Tino3-^)QP271@#|11mShL8K$>zci6$T_
z&wU$B^)kMgp0}$r0a#~x-W4<;Mwy;>1r3O%>3NsCKr~Iy6I4f~du_<3XXYyw=~vce
zj`WzB@7CW&Rf9y;oV-n502=4yotc1WoRfET8HmO?d7?@}q(OpVo}T$a=EjD3Nt+;|
zVP4WEpfKg#KJ!2{%*!*-ka@!f$>sU_qEhCEjq}SI#ANgH?!#+%&@ew=u(OyzG|bPt
zb%PCpbl&!L03>zZ6-6MDI`4`i(C{Wju|Xnjp|dQ&AZJ-1|6*bJUr4wuOf1V)G%Xa%
zZnzlBHfGbW=PN!g)&DM2QaxVJCnJ|eF>Qx6tzNX9g58l=mP=^tNGuCPV~1GwHTg`g
zQU3Fa(w^;^*Do5pqTv1zR3R7o6wQDGh|r1xpFWv2R*hIQy{6!mN*(WHwpUK!r;T<l
zAh)LA`Y0fBYYMK90ut?O3cX4N+eZn(MElx8>V<;sqZ|#nbp_W)ITF#nz94<nZ+e=B
z(`z0mc<&WbrJe^fPh{=@*mpUNrVbn^xM&5^r~?HTtw59?C@{>I83!PZI#BT6qfxR3
zT?jM^{~j#33A09V;Gu%`J%DS6%BB*J9V$5Aa~17}3W@I<rA8ks*sKDe=vcX(QmT)Y
z+bN~uSh<~2DvlNK{U0Q&nzHFn3+zh$#K)OWdwg0*mOM9!>pKf3tA+y5*qOKkh{n!>
z%PJrmI}7;Ud@$Q2&N@}lKR%w>Kj>6hNPK^)kg*4%z=Y7L0(;K?mkb-5B$Lh-^iMv`
z%&t3Ia0_gpB6PNJzF99OObDGVuwG31xF$h=cJ>2czdtAT10wn7#C|}-o7k^OOg}ZS
z_5&E?{0!vZP7R!&foPf<I6ni?G&R6}OWEWo)y#*+0XxpGKam+w*<(hKd}7)x2Amxj
z1J(mjIh&7$OyC1iIXiF$1fp_wfB{!a7t+k1PCpWOzYbE>i)7^XjQ)quGE=8OO60|s
zj|46s;79(Ez~uvw(0e54_3OaqgAhzU%nwpJu=(I<$UPdkd~hW4;jthYvo(ub76i8X
z|EM$5cM!nVeJ;_61%ZoDAj%d5iG`a5F0mFK1;D~f0%u_$=2((g7>K4NiG_hi6bsAu
zNG(j<1r-nJ6MxKnzpyNz?92W-EvyN9Ht_x@NXcOo=Y#E<Frn#t{*>7;enpTPXWo_B
zOZ<<OL2A@rP`Jq|p(N^_54?4#`(>gHCkRR3^LgeM6Mp+wvhuXKCP+1xwTTDT1{`;t
zXxk8Yo6yEvTh};ho6vOa7n!|Neiyg}Yo>8x<QId~y=8S`yo~_||0e2Q3cQz5C+GSZ
z5vr6U$%{`*!ibv#cZ#2-pm$5)&I_~@^llAO1BQRAczfWrqxhagF(11NNiRN?xqIj<
zL8__TD0$l55x6aij5<k$-^(q{gKmq2{4N{vR{`+xt|VlEG;dcD@<2p)NywY^7A+D>
z9r`<GGXGuMQI?S~?+9GUfCrh5fRZ7*sJ4jJ_Uc_{G9!lU<*PvcQI!x8*&Dcm0YqeP
zK*9J%R{pgB(<cJ&WKg>1%S>0*o&2`Nohvl=L=uuf^qfdS5{RA?fh+DnGVDa)pCrSi
zxC_A+_x}qh?hne!uNEmWT|r5o%cRe1>?+?#>U>w=W?kUoMqR;$HmQKzs4HN6Ar-Dg
z%KQVN?I8e2J`lS610wlA=<*MU<O5-ne=RZynGxCw2cR)C!f*eqJPFSTU4`Q+nr4Kq
z!U54VBP9QpeTM{W&8C-!6}wA6I*(&TFI*n-CGIqNCEF_QURA1A>cPsoRiUd*P*Juj
z%$Q}n!i2I_q3rJ=b-q>n^Splj0=2B}`Lc{S`uWg33&VrV^C2Vo|FAd0)1}hlzoDxb
zTng>_U^I!UQrOG9I~0geDa1wX=0@F^7TOeguj|{ttA2mcrm)+0IYn9;0Nds;RaZSy
z54ccWq$hS)!-qhy=QwZ~t((JMk%=duVZW@_Ec<O0pKc9Pmsi(X;n%vWd@Tgqsc{+M
zt>MM?9X1f*ts$#<WTS*uab}zDccB_z+ZLwm?#K`kX$yOsUH60sk+zW8P+2n2Do)(4
z=Uu4A4%r^2%+hTkBC<W~X;<k15!oKHN>A1dx5{{XN0@4^9%P$%X%7|DLa;02xs33R
zutq9Cm2e}xBW!4L#^FU@yS}f7x~aB3Oxc)hH7n!W!#;zYh`eKO4~JZ3mNmD^d%vCf
zvmUCYc4t{cUa#*gi^%KsogyONxVOqH@m>11toq)dU17@3H$p^YS9pm%-2#ZnuCVS3
zwOl^U8ktSMA6CpN9n7j_=VjjynevuHW=9f(=|iD+SU=KB)lcD<{m36W+75-?tyh6)
zI~20CL<VO-^7l|!eK@oeM?x^uDIbO`5|)g16aw$Vkf|`)^2d>6hULSssabt4VK!2N
z@RQKHw)#kAf8F*V=M>y=iF)@=NVc%RfDb<j-Apae2)OO5fi&!skk1Un9Y7rLNqF@H
zv%`u&b9vZ!HC09iBc<k@481F>Kd&^KW$QJ))$zZFlH5#U>|~PIuyeDMp?k^%qU~hJ
zQ>ML{yw*J#=7zYNnaPurVgJGE8(BFvQi|oY$eUUEs*n2jsww<T?jp5vTI9+HeB5PP
z^zB_FWu`^k#oAhG<+La_GqR%**zIU!dX#!7vZE14L+-)IjYb@a(a4NQMk9wVkQc}t
z05T`4cu6y<@Im)EQB_~FvZR+(qK9>7e^r-zIC5K=Lc~}PN4!Isi|wj<i7n=r8V9Is
zWzGD^GYgM}3fKIIg~zRi3G}G`$AM~8&7+aq$&`aTgc|XjB5%4mlY{Aby?dY<T6iq-
z>cp5rgy*qn@DMdKWtgZGizAK(JnOdO{jtvr(nd%o(-AQ97||f}SSS#!i=)A##Tf?D
z+{Mw5QHtFtz*u~VzPq66YnGJTC2#weNV{y?3AClUjV*O+mX_NkZ~K=@yT}*xP#vDs
zexRCiPeyKMV2JQM8SzyfJ7NeEaj~NGK%m~N%&mw#llMY}YemFH=zHxyB=Ogl?u*o9
zFSoYbCVAt(R@x*F14xnUC4Ho*-pQ3B&xE-UVJbz}j8I=&CMLNy>4TT4uH2?_%VnqD
zP0`>hDNSB#R5raes@SQ&yj<Oo-5T+nBJW8@N&dG*-gf={TGcd#U$$mJ$9!#3ANv_N
z5bL%@ys4L%1QL^NQGPoyDdQ(0nEc-sx%_t&TCgp0`R_=Q|Jx$+{}fF}lKZ?Gu^{jm
z`QNKfb&dwvJmDH%do{@upy74P0D-jW)rdJCHVpTwIND`*RB<e-lnul69qm<p^j(A0
z)a>r4s>Vb)$F(pIf_dyb9T0V3yS+1z#=ap=lqs7_q+K1l<q9>ZrX%vqM@>S6rz4`;
zu;Lg9Vk+edb#={~Wj%%}dU%kBheqzvA6}s@%k4=*0V0xnBorQE;SWp%`{B}MgXKB*
zaOByLh6>l=h&LUQAwX0ej)smm5iXD>9*(XaCv)&z##SHc`-iI9nvaqsfryHaBuRc^
zc!=;LdecyKU+zfc4Rd-W!jD8F>eYM+rb{HmkLv5LR*&V5mfIpBepK3W3&Auxn?4>@
zJn+~sH90sQ@y&`1vq$qt@mb`39;M{i`}4u}k;2eQzZ|Cit#Vjrlp1Lw#$H6{AEVTL
ze?j3d{wd<2Lb~G75}c<a@5@MkI7SVf0;c^C?ADDy3~)N?XZvv=!lxrvQ%Q^hiP6(h
z_@#?cA($9Flf<Z_(1<fhj5?CU=oyJo^FThDSV(t8=Xu{m`si@A@6N6yLb*bVx+3?9
zE07j-MFUMuqX`nBT~a%2i{!boE4uO<S|oiW*J)9f`=5(aSID78UTRD>Jw2|Nr~B0_
zec|+&Eq&%m$2CS`cUEazz3N#xc~<Pkicq=Vtk~@j1>}CSVn*xIKLM#jv*N5h{8%7k
zY{SvBLH(~)i~QW!n^fJdb4mrJ?=`Br$|+FngYp>jhvvraO*|0sxiRm1?G2>2og4SO
z-Z+q}as#1UWOsyg6#n4c_{yXehRLXDzD}Ky?d3T>XF*)?d|X-m3ERux{m-RyO-u-8
z7sPJiBZuHH^BsG!O<W+Y2Aj#RDj+v_B4+Z7)wMt_F4ALL)or;&vFlwR!m}vG6SJf*
z>n%C@Wa;HrbwOqBNi>^GfGXse)Lku^&|7l%Y5j+h>bJS4W4E6;M3|nAS({<@?(QwQ
zyHal)r8;seW6#7Ql9IYBV`6c;)kJcx)+<J<9l6!9XP0dDHp#g<W|qAL&yUTf*Txka
z^uuFRb9Qaa!XU|kv62JpW3QwSjZqDg`DKTD(D|S1V|U;IkhZRmd5bQg1|-zh#{)~T
zEzm+R!T&<+3bdop%op_iV^z<KUx<nK+i(Ym18s~ew&9LR{q^8uRXM$3tQyvRV_cOt
zb(E8Tq_;UYR@K#Pie0gSh^kF71%h2ttITOYFX?N?so^y*#ojf>z7XMgDQ1FH`qDmP
z?ag}0IMr0MId;_uqEKV1k<8Nf5f^OHUE>t9^s#rf(<3g}5)U6CCW1#ED)jB+RddbO
z*p+IC@NA7K)w0ZiV|QdG|HbiYSk23^*WmO>b$mH)Zc(yofK96C<8=24YD~VZ%p=vY
zO?d9bN#nBV9dX5L*yeU)n?8Ep1T`_cBW8M2+%-<z)gF60#a&lV0iqLZSC|8FT6;Xu
zJ{$r0ckS_Imm8-6aawy^yVE&M2*zozCQfq{TJ&n{dR0e~iuI~^uv7X%K3V99D-NY;
z=ZAEL9owre(wnbU`?4KzRn9oETAcVM-m^Icq-9|9^iT!l9&g5+7sc0_KrZgpC$CeD
zHG9iE;?2FnbE)A0y`?8iRJoeBVmDB!Hr{+IzGk@N;s5T_GlXYf>_(6r=7Z$Em=R>&
z=)s$B>unQNP<T7>c(w87+v0IqL{lx^+|Nb!E4oqNe}n3+gX>k@07$l@h5?=X#rw8x
zc;OvfswYlVy$8zUAINrp9LWRgI}&jHjcR(oclGM))xer}lk&l4GVr`B<)dJDD0>I=
zXV<H+=0NP3<6>x&4DSxaEcCNHjP4HVt0uv7uxt()+#M8i3@~~a+r6iMK1umC@5P?&
z=Glz|p7&zDtg=mKX!pK;aS|qbKlaR5VcbiGcJIf06=wDDUD*fv40`e(l>e8UvG74W
zqCwq7;EvCxKZ+|pAs{BZc(~~XH6i;^%pUF%xZ@>okH+4|HgJKM3~YCu0b;YG@uhZy
zT_BD;DwRvB4UoV+8b=?yz!icC++#`LItnd1mISUNN#Gun!2O&R#8n)S^F>@Sv#MBG
zeI%tnTi30x=HsjjO0#cN<Gkz_N%Z!W=slH0Zvja2z&3h;+~|}<rVPP2U50T%tgpCP
z6?3N(UqFTFwD^L7FifB`vHtnZs-^##q(^{i$n*$rNWaln%28Kbdgo?!V`Z)@i4VxI
zbxC}*8ZJWkT&%}WRwHxg5{L9PF?>z}?N?S8K|HPW>|}LbWo}y0^+A12<W4JcN8ZcI
z9r43M`n6lsM*pFrH^LMyh}`d?B1hm&!nYIn0H#<m7n`++$u8EL|5jbq^FNEYR>t@f
z#I>`F-or)xgIYCg3K*RbtZ#wXXLix~7RY~`U39($;@jE9=;5O6NrYg0JE!P+5=Ws$
zbBeAgIg<ExP7&X}B);Vop2v$7zbS3}JJsN2A1_v2YAR7b@#TV|8<y+3TUELSXuD)C
zqIZFqLlVEAxRM<@ZdKRko+!EpD~RwsQIr#=#AN-%XAAY_Th;8Eg=Ho~6{b534}Wrz
zzWX+HS8h?!rBy%U#zjT8m5>wFuFa;G7AxrgZ&N?$xwOa!G?FOSiZ!1qddrJ;PzuJH
z5bQcrAWeL#=ytOPa-*k;tn8Ca0b<RkiotScO(7U-E=#QGDEx(Gi8UQbtho$p-kHAd
XpMLtYpI*7=^m&(e(?7hq>aza_9Tr?q

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 20e30bd1..62eeb647 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -8325,6 +8325,10 @@ type WBAFile struct {
 	// Directory-level emergency revocation channel. One per directory; the list
 	// it points to enumerates revoked key thumbprints. Consumers poll on a 300s
 	// cadence (±10% jitter) and replace their local revoked set with the response.
+	// The list revokes keys of this directory only: a consumer checks a
+	// signature against the list of the directory that published its key, and
+	// never applies this list to another party's key. A fetch of the list MAY
+	// follow up to five redirects (see "Redirects" under Well-Known Discovery).
 	RevocationUrl *string `protobuf:"bytes,2,opt,name=revocation_url,json=revocationUrl,proto3,oneof" json:"revocation_url,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -8382,6 +8386,9 @@ func (x *WBAFile) GetRevocationUrl() string {
 // thumbprint stays revoked permanently; once dropped from the list, consumers
 // MAY drop it from their local set but the corresponding key SHOULD NOT be
 // re-introduced into WBAFile.keys.
+//
+// Scope: a list revokes only keys of the directory whose revocation_url names
+// it. A thumbprint of another party's key in this list revokes nothing.
 type KeyRevocationList struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// Server's response time (RFC3339, UTC). Consumers use this to detect
diff --git a/gen/jsonschema/fora.v1.KeyRevocationList.schema.json b/gen/jsonschema/fora.v1.KeyRevocationList.schema.json
index 4e33b885..d9289b7f 100644
--- a/gen/jsonschema/fora.v1.KeyRevocationList.schema.json
+++ b/gen/jsonschema/fora.v1.KeyRevocationList.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.KeyRevocationList.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Snapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.",
+  "description": "Snapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.\n\n Scope: a list revokes only keys of the directory whose revocation_url names\n it. A thumbprint of another party's key in this list revokes nothing.",
   "properties": {
     "as_of": {
       "description": "Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.",
diff --git a/gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json b/gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json
index 773281ae..acea7223 100644
--- a/gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json
+++ b/gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.KeyRevocationList.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Snapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.",
+  "description": "Snapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.\n\n Scope: a list revokes only keys of the directory whose revocation_url names\n it. A thumbprint of another party's key in this list revokes nothing.",
   "properties": {
     "as_of": {
       "description": "Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.",
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.json b/gen/jsonschema/fora.v1.WBAFile.schema.json
index 71d6919a..d8c200aa 100644
--- a/gen/jsonschema/fora.v1.WBAFile.schema.json
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.json
@@ -55,7 +55,7 @@
       "type": "array"
     },
     "revocation_url": {
-      "description": "Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.",
+      "description": "Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).",
       "type": "string"
     }
   },
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.strict.json b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
index 4cddcd71..218c8694 100644
--- a/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
@@ -57,7 +57,7 @@
       "type": "array"
     },
     "revocation_url": {
-      "description": "Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.",
+      "description": "Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).",
       "type": "string"
     }
   },
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index d3fee2b9..df79bf3e 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1145,7 +1145,7 @@ class WBAFile(WireModel):
     )
     revocation_url: str | None = Field(
         None,
-        description='Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.',
+        description='Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party\'s key. A fetch of the list MAY\n follow up to five redirects (see "Redirects" under Well-Known Discovery).',
     )
 
 
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 056e3d8c..3a16a661 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -88,7 +88,7 @@ export const IngestionSourceSchema = wire(z.enum(["INGESTION_SOURCE_FORA_SITEMAP
 
 export const JsonWebKeySchema = wire(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed."));
 
-export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datetime({ offset: true }).describe("Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.").optional(), "revoked": z.array(z.string()).describe("Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.").optional() }).describe("KeyRevocationList — Body served at WBAFile.revocation_url.\n\nSnapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys."));
+export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datetime({ offset: true }).describe("Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.").optional(), "revoked": z.array(z.string()).describe("Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.").optional() }).describe("KeyRevocationList — Body served at WBAFile.revocation_url.\n\nSnapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.\n\n Scope: a list revokes only keys of the directory whose revocation_url names\n it. A thumbprint of another party's key in this list revokes nothing."));
 
 export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
 
@@ -222,7 +222,7 @@ export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJEC
 
 export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report."));
 
-export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
+export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
 
 export const WellKnownManifestSchema = wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index f4b906bd..d5553eeb 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,19 @@
 
 ## Unreleased
 
+**Revocation is scoped to the signer, and directory fetches may follow up to five
+redirects (comments and docs only).** Each signature is verified against its own signer's
+key directory and the revocation list that directory names, and against no other party's.
+A Broker's list covers only the Broker's keys, and an agent's list covers only that
+agent's keys, so no party's list can revoke another party's key. A request that carries
+several request signatures is refused if any one of them fails, and a request signed only
+by the agent never depends on the Broker's directory being reachable. A party fetching a
+key directory, a revocation list or another public well-known document MAY follow up to
+five redirects, re-pinning the address and re-vetting the scheme at each hop. The file
+header, `WBAFile.revocation_url`, `KeyRevocationList` and the Well-Known Discovery block
+state both rules, and the authentication page gains "Whose list revokes whose key" and
+"Fetching directories and revocation lists".
+
 **`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
 each entry's domain names whose resource it is, and the caller is the party that signs
 the request; the Exchange checks that the verified signer may push for each entry's
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 71da4adb..e96109cd 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -62,6 +62,15 @@ import "fora/v1/vocab.proto";
 // emergency-revoked keys; consumers poll on a 300s cadence (±10% jitter)
 // and sync-fetch on an unknown thumbprint.
 //
+// Revocation is scoped to the signer. Each signature is verified against its
+// own signer's key directory and the revocation list that directory names,
+// and against no other party's: a Broker's list covers only the Broker's
+// keys, an agent's list only that agent's keys, and no party's list can
+// revoke another party's key. A request that carries several request
+// signatures is refused if any one of them fails its own signer's check. A
+// request signed only by the agent never depends on the Broker's directory
+// being reachable.
+//
 // Request authentication via RFC 9421 HTTP Message Signatures (alg=ed25519).
 // Every request carries the signature of the party that AUTHORED it:
 //   Agent → Exchange:  the agent's signature. A direct purchase is this shape.
@@ -3640,6 +3649,11 @@ message RequestConstraints {
 //   grants access against a stale revocation set bears that as its own
 //   business risk — it is not a protocol deficiency.
 //
+// Redirects: a key directory, a revocation list and the other public
+// well-known documents carry nothing to leak, so a party fetching one MAY
+// follow up to five redirects, re-pinning the address and re-vetting the
+// scheme at each hop. A longer chain fails the fetch.
+//
 // Domainless requesters — an individual agent with no public domain of its
 // own — are accommodated without a protocol change: a registry (operated by
 // an Exchange/Broker or a third party) hosts the agent's WellKnownManifest,
@@ -4094,6 +4108,10 @@ message WBAFile {
   // Directory-level emergency revocation channel. One per directory; the list
   // it points to enumerates revoked key thumbprints. Consumers poll on a 300s
   // cadence (±10% jitter) and replace their local revoked set with the response.
+  // The list revokes keys of this directory only: a consumer checks a
+  // signature against the list of the directory that published its key, and
+  // never applies this list to another party's key. A fetch of the list MAY
+  // follow up to five redirects (see "Redirects" under Well-Known Discovery).
   optional string revocation_url = 2;
 }
 
@@ -4105,6 +4123,9 @@ message WBAFile {
 // thumbprint stays revoked permanently; once dropped from the list, consumers
 // MAY drop it from their local set but the corresponding key SHOULD NOT be
 // re-introduced into WBAFile.keys.
+//
+// Scope: a list revokes only keys of the directory whose revocation_url names
+// it. A thumbprint of another party's key in this list revokes nothing.
 message KeyRevocationList {
   // Server's response time (RFC3339, UTC). Consumers use this to detect
   // clock skew.
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 51d33805..2093e2ed 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -106,6 +106,8 @@ The Exchange verifies it by:
 3. Reconstructing the signed content from the declared components and verifying the Ed25519 signature in the `Signature` header against that key
 4. Confirming the `Content-Digest` matches the request body, and that the directory that published the key is the identity the caller is authorised as
 
+Each signature is checked against its own signer's directory and that directory's revocation list, never against another party's; see [Whose list revokes whose key](#whose-list-revokes-whose-key).
+
 If verification fails, the Exchange rejects the request. No fallback, no degraded mode. See [How RFC 9421 Signatures Work](#how-rfc-9421-signatures-work) below for the header details.
 
 ## Delegation
@@ -660,6 +662,18 @@ Enforcement is operational, not protocol-guaranteed: a consumer that grants acce
 
 When a WBA directory sets `revocation_url`, consumers poll it on a 300s cadence (±10% jitter) and replace their local revoked set with the response — a `KeyRevocationList` (thumbprint-only snapshot: `as_of` + `revoked[]`). A revoked thumbprint stays revoked; reject any signature whose key thumbprint is in the set. When `revocation_url` is unset, consumers rely on routine rotation and `not_after` expiry.
 
+### Whose list revokes whose key
+
+Revocation is scoped to the signer. Each signature is verified against its own signer's key directory and the revocation list that directory names, and against no other party's:
+
+- A Broker's revocation list covers only the Broker's keys, and an agent's list covers only that agent's keys. No party's list can revoke another party's key, even if it names that key's thumbprint.
+- A request that carries several request signatures, such as the hop signatures of a forwarded request, is refused if any one of them fails its own signer's check.
+- A request signed only by the agent is verified against the agent's directory and list alone. It never depends on the Broker's directory being reachable.
+
+### Fetching directories and revocation lists
+
+A key directory, a revocation list and the other public well-known documents carry nothing to leak, so a party fetching one MAY follow up to five redirects, re-pinning the address and re-vetting the scheme at each hop. The cap is five hops; a longer chain fails the fetch.
+
 ### Domainless Agents
 
 An individual agent with no public domain of its own is accommodated **without a protocol change**: a registry (operated by an Exchange/Broker or a third party) hosts the agent's `WellKnownManifest`, and the agent sets `Requester.domain` to that registry host (e.g. `agent-7.registry.example`). The agent generates its own keypair; the registry publishes the public half in its WBA directory at `{registry}/.well-known/http-message-signatures-directory`. The domain + well-known paradigm is preserved end to end. Relaxing the discovery anchor (an explicit per-requester keys URL) is a deliberate deferral.
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index a15f7d47..80f4fd62 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,19 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Revocation is scoped to the signer, and directory fetches may follow up to five
+redirects (comments and docs only).** Each signature is verified against its own signer's
+key directory and the revocation list that directory names, and against no other party's.
+A Broker's list covers only the Broker's keys, and an agent's list covers only that
+agent's keys, so no party's list can revoke another party's key. A request that carries
+several request signatures is refused if any one of them fails, and a request signed only
+by the agent never depends on the Broker's directory being reachable. A party fetching a
+key directory, a revocation list or another public well-known document MAY follow up to
+five redirects, re-pinning the address and re-vetting the scheme at each hop. The file
+header, `WBAFile.revocation_url`, `KeyRevocationList` and the Well-Known Discovery block
+state both rules, and the authentication page gains "Whose list revokes whose key" and
+"Fetching directories and revocation lists".
+
 **`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
 each entry's domain names whose resource it is, and the caller is the party that signs
 the request; the Exchange checks that the verified signer may push for each entry's

From 946df8c20ea770135aad4cdebfea14672a402aa0 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 13:16:48 -0400
Subject: [PATCH 109/164] State the Web Bot Auth profile in the proto comments
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The proto comments still described the forwarding chain the profile
replaces: a ResourceQuery forwarded byte-for-byte, each hop covering the
previous signature, one Signature-Agent header for the whole request, and
an Exchange taking a hop's key from the key set it is configured with.

The file header now states the profile once: Signature-Agent is a
dictionary with one member per signature label, each signature's keyid is
resolved in the directory its own covered member names, a Broker signs its
own request and only its own member, and the WG-00 §5.2.2 rule governs a
party that forwards unchanged. ResourceQuery describes Broker-led discovery,
Requester.domain and BrokerService.ExecuteTransaction speak of the covered
member, and AgentRequestAcceptance says a Broker is never delegated to.

The Redirects block says a key directory is never fetched through a
redirect and is served as application/http-message-signatures-directory+json;
the five-redirect rule stays for revocation lists and fora.json. JsonWebKey
records that its alg stays EdDSA, the deliberate deviation from WG-00
§5.5.1, and WBAFile states the signed directory response.

The generated code, the descriptor, the SDK types and the JSON Schemas are
regenerated.
---
 gen/descriptor.binpb                          | Bin 679479 -> 680441 bytes
 gen/go/fora/v1/fora.pb.go                     |  34 +++---
 gen/go/fora/v1/forav1connect/fora.connect.go  |   4 +-
 ...fora.v1.AgentRequestAcceptance.schema.json |   2 +-
 ....AgentRequestAcceptance.schema.strict.json |   2 +-
 .../fora.v1.DiscoveryRequest.schema.json      |   2 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   2 +-
 gen/jsonschema/fora.v1.JsonWebKey.schema.json |   2 +-
 .../fora.v1.JsonWebKey.schema.strict.json     |   2 +-
 gen/jsonschema/fora.v1.Requester.schema.json  |   2 +-
 .../fora.v1.Requester.schema.strict.json      |   2 +-
 .../fora.v1.ResourceQuery.schema.json         |   2 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   2 +-
 .../fora.v1.TransactionRequest.schema.json    |   4 +-
 ...a.v1.TransactionRequest.schema.strict.json |   4 +-
 gen/jsonschema/fora.v1.WBAFile.schema.json    |   4 +-
 .../fora.v1.WBAFile.schema.strict.json        |   4 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |  14 +--
 proto/fora/v1/fora.proto                      | 113 ++++++++++--------
 20 files changed, 112 insertions(+), 91 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 2d2080deaae2aea7549a95b52318ae56453d12ef..87cd31a3e6ff92a160cc96739c38c096ba439191 100644
GIT binary patch
delta 49206
zcmZs^d3+Q_`ahoO>FMt2Ofq*eM>5k1hg?YjK}8b;L0xp$+tt-o3=owSfra3%pZ$C`
z9CCvQBBhAjpnwKBbPz;tL@o((C<+40AtE3ki0}n|@29GoW_|tgSDvTqdDl}<J@wR6
z)m1&2PaFTXrg8sQT(2mvxL;8hdqzC0{4^;u>S0gCWb@qjK~oQT;#r$AU!C?`_Jl6Y
zb(xBm719Q~v(~s>Ehm++_T%*XGc7K78tXO9OzYWRJ$m%|NB5r3S=G;1S&vn9vF_+q
zZME-L{k+w?Pp@aY_o%XZJ!^IAQ~7LlN%yMiXG{K3)ul_X>Pi$SdA_>3ci-;Mm7rjC
zudcm%lr(Q{T8#*Y9#{3O?%uVsx_hslR`1H^s;s`%mDN>!t?t!U_ny|X{d)9hTvTe^
zS=se@3m82stNZn-vby)RdQ^6)>QU9LnN``do5|Ae==p4at*+PLQ6(_?^y^9`yOliK
zy{bnyt6TT3R6}K-m#u$vht9ovR#`7rz1XFyk7@O;>f=B+vz{sE&}}P<x!$*ym6iAE
z)BU;bJ=+#P)6DAH>!m8dT9tiGtN5BiB~ZL)b@6R4R29EmQ7i$9ORe@6N_U3}eXKrJ
zeS7tI2@R`aUv|}^s)^>YzhBg&%`4H;>b_R5fAqYDE>yF6R=!x(m$#5?(X*G;3+C#R
zdE%<)tSb%!3B6#hZdRji-TQLgUN+f*f2w&6s-N%EtKW0a!x(q;>Gc8>fMLXcB`{m#
zW)QY2*#MUob_ogghD&ScvmQaW$ab-9iXLG<|5Np};Lv?}-wTi%gu;EQ{@$;uZ#8uS
zY}(^xyCnj$#lv=wm9!@VNs~9TdRD<M5aR8ztLsx$D#S9|U7BC1k$Q`=&-Uu`kIFvX
z(78P=Zfq!ESKhB@*XJvHK3CPPlxvTgs`^y+u=@0aQ$o(FL?2i7seT#i!`9t;p%WTC
zb~n7xTK#V8(w3zy8{bOq_NVrL5gkBvR8`jW=|TN=t&e3tJd2{HDA)Ho51_t(x#Dq-
z^XS8mSd~5c_L6AVxk>k)z58)Dp`v6nvct;+_hN6jBrNo})uVgg>b`KDn(LL84TQ|g
z)=QN=`c<LeKPvlj!G6^L<d)W-P_t>>cmE@@=EpH`r~;=E=p=ZAZMYZvq3ckf`?D{L
z*3p=JzE^LnYh~}gZj4bjb+wl70jF;>_FywJ%;r>S(MV&!_v;BORQBjWqaIQ(W`=q+
z|DA!sZX@69YN}e6k`+>ix!LS{v~H!t+*-bwV|s|I5IfeuCf!6fZ)fiHa3NPnoshZZ
zUhR9OWP)3Z$x<!|O>oDX+9ZS~xNquYR&p6UoX9%fr*$oz=+=U=j6z&@sL&=MGSS`W
zHuF`D%YdAd*?FH9aF@<;>TyG8jyryX6mnB3cgyzXCKne{LuxGxKcsCbt#xZ@SxALU
zt=np2laQ%(ckFDA7BZfYx{&2Qtc@vM=*V~=v(Rm|l`<a4EOd9OG{*`fXd!iZX4Avk
z>q_Zzx0WkQX%JfO_NQzTLd)Ha+nDc*iu91WnvMFiR@-{DTg#J$bjYlB=a<?fWLCS|
zJZR2QO+`ht-|Ei#*6m7st5~evBc5pHmB+Lk#lO{U6q?VPs>(aDj!pfG_I!&vx58~p
zO!QKnJH#s?5~y|Vc*2|xO+dRs+D^B!hqZY^oAw<3GpTms!xlT;**1y`C_CLD-pBM5
zC_CNB0@E)F8-!B0$L%(Qrk9=@L%kt1XO~-TZidZlo2BN0xtq0rQj0YF+O6L9-_Kym
zZ`|sA=2=W{Dik~D&YH*m^`v$tc+hP`&8eiZi(K`vo4LjtZ{G+4Y94kg2G<%S)I99=
z`fL(v9(MZ!=F40X509}wKBfJu<d|E@mSw1A$K1ZCO+w_DI~F&aaS^Ed6Z_>Ut+ew`
zwryOBf=Yj~Z37YrKiL)r351`>!emI029e2oxMheGmiftD(8>Hj;gvw(OlH8-TA8cj
zj8lsn<~ZZdwj_=lwVZJm-C~m@<i4%kJnH2baQC6?L}zWeGR0u;KcoHQCJ{v`B8sWN
zjw1-3eXDvRIP<v`lbOk9GdV@GiX(=_x>stc8iWi4J$tr$=6BP>GuKbkVhSv^I@<FZ
z!pwiqXqZ8-pVDsSvy(kHToZdp&QR4=eO_dlCya>3QxB8XcGU`NFb|SO6!+wGb8SxT
zi#ed{^QQF>ChmTHx>h~dk0R-{rjnSj1Xz_l5WQt`Ksl1#Lfb$n43k_pKgyZVRm!$>
z)k@go#|<CzbkoAwG|OWq!36LKTQF9S=8zJ^=?=T~WW6uyc_B<<*JdR#53}qlBbjR_
zG$L(a4^(LbD%)Q-i%=G4&!X4nfNPWI@8`eYO@CIup4~9Tz*44l{S3>3SM+eR-%qHw
zS$Ez4P<tr%Uz0dZy_n<QepX9$7^=#^;8Ik$<xn-dp7cYEQ;_wW*(BU@s9M(CoQLQL
z@5e})pel_MlRT__2XA2}{+u>K=?IpHGbq4I$T$NMa1+!}eF;awc7l3CBlB%BQnZjZ
zNmZt)YGMT2Hr1HTYL*&#Y{uWTCu+dAqksmGNvc=GE|;PKWRe=m<G~6fg4HB7f12tx
zL#6>8H4MqzkoJzMPE|c}m~tNECZoA1=CzAyA<q<5Tj4U(ym^S@GgYNH5wzG#PkE!Q
zU5XC#fF%MYNT@PXjTgxF=zyH5ri;ugB9<XG%vIUx9^T*BiXNKQcCKR>1BRKaUNejV
zpt)*@Pbg5v0MJ~usGj+zf>^19w1sNc*BSSVTD~i|P&HyASSl1OKT>(Hycq-_KeEjP
z5|AIMGFXBH<VPxk<xUscMo~>$swykk<(}G(8vG}$3qHh_+SUaLv88Gx%B>3$)?KRR
zt&r9w2Dk1qRsBp_SMnhDscl`!f_0a3>sD|LXg*Yxf<&3c9_X#L=?Fr&jiM+p^J+Ca
z!0ieWI;~cNJa2*O6oOZ)iKID7GzH{(Rk<PYZ|i<Gf2)yV$9rqtE5NehDAul5v&AF;
zaloxt^NJ-pr55Ye1`W;g<b{fYSi3bd_V3z1T@_m$3>p|))oju8C<KhHYFvyHkigig
zHoSp54xd5lRQC6$yb1P9Urj5kvt0&{AXsO+3`hvpU2_@U@ZHj7Uaf}9>~=KJ(7(HF
zmqAGY?Y3P8B!G64%PgVk)g99Is#*V!ZLiic{=KRZG9N|T+~hFdvp4%`kCl9HcR83q
z`rh^wkU;vLJmo<yf`<oL!Asi16$foy+=>g<IB0heNGfD^5J(^#qz)RYatQSF@yz=#
zX<nt`xPw8Rd|b^IGpU<*@^LlE6H91HoqSv^Ei+#i7$DDO&iqr0Di!A(4C>i)YBo<T
zAw)fUPECn$1(Jj)T)j^{>!zN)l<D{{t<=@_l7m4#d&$v*diIi<<arv&0OOL{qNO<!
zcJ&}n>+i`L$v*sFZA7TQ#}gsDdU$R&z@yY-r5pA88i=e6G#}3N6b2aJDJnJ};e}Db
zAP-ydf7+wzK^`SZZiqsZSP$}~(&kKfHE57S*p2_zW~YXDl(;O!xt@YTvlA}^-G;GW
z|E=Ad8s<@oWEskwhk5EZFrVXP(C88DnHsITHNw$|GUXAZ(PwV73bA0kC+oA!u^Mf;
zD>UBY$>+`D$=Dkn<p$oY`Xc`V%?FMLBtYKqVBp-2id-~E8EZ07YoBHwg)b_Ii89R7
zs4>sML4%ygMhw)(G??g78gh-nB(A4%6Z0(k35C$CsUD?y;*i3|4Ai2ThX-j-xKdzo
z=b!=*nCgLZJk86aiPPDpSF~qR(>)6BIFz9#PWPbW;Km>^cxJLrgSCg#Gac<H`JYMJ
zjlq0|Lhyw7nPr2uu}a(d9;LBVkFx#wo@OOB3H9cCO52;crbaU4bn`uB?abZOahMcB
z>S8uxnD$M2u}5hkg(&-9>}l2790GSnAxsU+GXsZfhGH#u3}K+uax%m!8pLWyTjR<4
zlFc2dt@N+)AV-Fw5uq@M*RhvJY3)nac@&*0ASSd}=P`0@5=yS~1cGK8E`o;}*wIni
zZ6zBV5gN4{JcgJ^RX%Drco6EVxCm6)#O@!hJy)_xI;og8)J>iOF@YmiqLxh_OyCc2
z5l~y%e@1H$wcYBG!B<sih;H@Bi~=Mo-Rh~|MCwUHbgQSN)Lf&X#h#G1-;?!ArthoT
z9d7@A57s_60@*`NKFHRN)moPv^vJ0SOh6s<ctuDC38;e}tXf)e5j;H18jjO$DmiR7
z*~0_XVUH2!wS$DnVNYJZ*^-N($v?2+<Fr;KKR6=f*FSg=LCMY@-sB%V(LA#`7XiR=
z_TxCMWyx_zgxYxAgVnbXp*9}(ARG$C;H@WFr`NTcDo)x~^6<Rtq$gV#79<c(dK!oz
z1QG}*$(L(s#`BOfpJkuEu6@|{tOG&0)>)5CDNqIwXFYOd2oexyJy^F)#)wDA)2?{3
z-pb4!uf5}Ha7FlyTh(;zI%>*rO*N;vO&#=5ubXxv!OQfRpiOmk8ltK7%m6Yg@eC##
zs;Q4($3Z>AG_@7lF7PI3%0%GJ_1JibHpI(3`ldEVY0WgXu_I04;!RDhLY^jTKo@!5
z($pC)a~uV6ja*@B=Ek?Rh^u6(CVc^1w05c{lR}WtVyXsTzLU$~;S5$iNxQpZh9(_T
z<7?m<nzR>4Dx`%(r-1~*3=N&O%;XSIY-#4gB(1_zvQ$&NylXW+X)V>DE%h`=2rZ>*
z%eV}v<*dtetwqUlO%chA#s|Q1EhrX#AgPd6ufExyi@-TnvX#@d4&^HyO=*T&sb!1o
zP~*<AQcE|Im6CI;)S5QqLq#LsSi^3gp|!49;~;o|utt;ag)(UC8m&Q@L?GW-qqV%z
zoI~!VQ5f977R=D*wcFr8XvEdB`E*5P0I@-nkpLthHfV?hAJBqTLlD&VXv+7QNi((g
z)f)UO@=H8`+#aW+C}rM57Ne~OJVk!FN6Y(O6WKd4cz*e<rtZ^3_AYsl`wlAc>|L^u
zU+&c?d;c!QbwG@rp)2``Et${fXn*mSg0Quqe0zrO6@wbe0d0nkLA_lVz#CHEWA}Zc
z?I?ZEk?}(2J>4skeYgN*-qVrn^TiA7gw3YR1533+S4FLU&B;u3N3DL%$xL9>>LET=
zqq!z9YW4aJ&38q;*&%fio4ZV#Q?bZ_$OgnB2O=8~i}aA~KiPm-q}OX;E;D$eeIfPp
z%xj-&6>7!j4u%h%_ql$}gM7gFTu+N!OH+Kn_*^e-ZmytQOH*<}>W+-LN^7rF>~Ju0
zfU!fr=0iEa*r8wZp&VfB&|9`L&xoevqF>ptHQFx~dmM;dK<v@wriZ5F0%DI|bfa{`
zTtMv6Z@R_2f{j6_;SZ@NGM}u~`n%hma4`J9IH70TUFQeJ2|aAPr5_k4^ps@|&*2z>
zkT%Lt#$;aJpbgV%@UK`CU^oJ1l#wkq&OicYl#y?DZU8W&40Nt=%K+SRlu<m!5IbNf
zPWwC%8EvR#d`&4?h!U?7i`I{t5)7&148DH6^PkmKJ^Ql%eah=+W4^?S0DLiTp%ie&
z8FCQ`5>=0*s`(-kxd$Sm!55JoDG?#+S|dVmjW>;J-bEU{X~<P13Ipj)151JlUW9y%
z$VEoh+Zk7#_J$f*WMCCJp1Mk>h`NN$-l<I}Ut&Xp3Fsv@G)O=%F+zN&l|%r&#3-(3
z{(&Rl;WGBmUD`br%NzvSV_fDSP<&lxgv26D=kax!ft|Qlgc4}l3U+muHl%!o13|%T
zg#$rT@d_g(`da7Fc7=hA`EITRR9eke?bbR~tacFGKv?Y{(9FErkdva$gYRkslj02I
ze`pr0yFGLF*V-(le7l2zv_#$RV9?yW-L^7hQ15mFsdR4+fwH?;qi?l76}ub+nwobx
z2o!#I8Dc{mwNm)qWmrY#Fr7odGk?hJ{#F~|Zuf(sMEK~?dBFX_h>EBW5<)*1i25}1
zfJCtS!6*?EF_A;P0dUx~@3nB?2jh`P&5@#s$WAY0)_$*zR@z>06x5;M1xG;&(ifcG
zrXYQRdV86hD~P%VdNX4VYM;6)270A8B2Yr{fnK@H1__XX-aHZOKmuf-7t4}O0t7L3
zRA$&AZHud7l!M`gBBQ+0qjiO1?kKPHXpq1d<%LJj6HbGeJC=<*qJ2;?)`6gqJJx}q
zkUQ2J;tLWOibC#KZ=)uBi0TR=?szX>ska7!28{R0fe8|l<GpfVf`sIFuRSnz1(9~5
zmk-QNAmBO^9UXkoVWOi0#oLKaGbr9pq-G4x#lS>tS?0|;=5-~`=dk(1jcBI$nD(O<
zSmrg7=2A*}3>u=VG6g?t<*rt%ymA%;7qF|mGU)*c*i~N4rO4e#2v5K8D&fR9H%sYS
zA~XB6Hpo>9mY4-mfS2&*avuT-`7gY|kogW-*PvC|7WUX#ZA$4DuUMuM6Ea)81^m4X
zk&xNqZPHZi#TZ1^vHHJgua?$1_0XuR^UAF#l%YaiY%sh*{%+8y+n?G0i^klo_S@D6
z7ef2JaS?GqLTJAiKDa?N4hH_gi^=^HH#_~K9?Pt`puO)Z1Iun44YD7+a*8+jAp60K
zDSmQ3R=n6!n{H;!&P=|jy^|f94ws=f0?6)R=ozL`pSkWf8#EA`XrTGDKu=+k877pV
zZUK!dW@ebCm%Gw4O}UZ>7o}!WskKlQr9jTgoYD35E^C&l@CFf=*i>o>UH~BkXba4&
zGnucw`prsUfr*`k&(I4VzGbtJrG5I!;)SN%Q2-Od3rz%_*F_=Z)E}G5Zsy9-$JO9J
zv8jNa7?k_iM2N&Z1}yY2%2~TjH>KR1v114fn=#cJX&U34?L(0At4mDPx}Jrmeqti^
zzpfOpmzrvW>si2BR`WX^y7$xHvCw(Te+P!4_nD~{Uk`>*wZc?eT+c$}S@}D~5Jy&-
z>J3h*njuIY)zzlj$l(ofW1z1w)rQxzFo4(oPBCOY>wZ@XiOl-{!XM&BV)FU#)JL%0
zV5;>AzQ(p9rvEQYwdndPF_~}t9ex-~=-+`wLh9z<*&>Qz_PZA4VdZ>1{7&9)+sqm)
zzU*EC4;@!$s%@@kq2sojB5~omq7*vrD-&<*t`kJR?YQ3jD20C8`8z@M+b$C|&JvD@
zfu(+HD*IU|pwFzqe`4rhKM$3DYo;yfi3k+hw`S4)Yo4gMxhH-{SV9TKEj)3rsiv-H
zp+WmhHGMq`*x!>|wB{oQ(El-&Q>MyV2lbXU_}^B7_Kp7ID1la^WYMW>O1Om*hfK9p
z!n>sshaDH-EGTir@g2?r_R-&!f>nROaA<lx7|eRi=}9gLv;KH}m7*tqGS!=|35t$9
zVX76^vry$pQ@!2nz}pSv)232b+}i4Z!vwuvv?~AEz3*+TDx}|-#si*jqQ7Zl?6iq}
zk_QoYu*Y=H%(}!fA^m~SInxv1aggsZoky(VagenQ>sksV->UWCArQ`+g(=fQz1TPk
zslT!=VZHdNUrmMQcf>@QU#U!*mjQJFc*Q|_hgXFoHvC;$x5}4!K92H)f)YI2A(9I~
zyoig#kiW45VZC1JH&fv`JIYXR{zg@l@G@xrMOGZq%hDGe9BS-ED$@~-#rDz_GiwOz
z9nm|4u9%)MZ!F(kx@uyZlLvjVuLPQJDtkZz;;M;l&Of3W>=}jB{@KhQ)&G?4pM9+m
zHMf5@3SlP<g+L9+X8(%n52goX%cw18f&o+rK7m4L)WB?ZJgWCk4|I^IRRgI|TV4pQ
z8kEgO<mtDk24%~wS8NEO&>$*w6E6e@dW9X$({D+=k}dlgJ3c7$3YEEom%%_C%qsHr
zj_JYK3g6{`3bdjaOl8PC*c2L`oi&C{&4+o0XM6IvdH9aYh-{@9H&1=B)dHF?Ks_J<
zF(MloKz&q$eUp$nlC_QL4O1ht<un8)%8aBkG(fRUf-H^=jOjP0MrA8}%Zr%Ar82ki
zGBD0)wmYU*q()~eJljASvdw5JQ_jo4Hm|alalLK&RogV!9YL8_sm$ZZt-K*^Tz1w5
zHYTn=)?i$=;YX_DR=rpYO~_UzW~=6pE^JGA<u(`bSaw1`){14TP57>qcm&8dvk^mS
z-%D_y-dn`EKv}hy(uO&iMoImmQZXl6CdA;PU*=@XWELcBGbdZFfItFcPBvCRM-e)K
zfv2^sb4ou}Uh6>6BC6Jbpp30HJ0#Ww5CKGOc7BX6!@Oj{1?-iyeoy%V2Z7d53mgQh
zW<j=G0YL-^3$n2S`ZL!7)M92@`s3{uI|yzdEY8j*+j*cT%_xhr1N@Z)ktCCiR}w2I
zoAV-@)7E7xpJ%39`e*JM{3}-6cmSAnjv|!bt;-IH6*ry&W?i<J9|#3m@w)7y&$Gpf
zn;6&#f)B6HR$nxa_|dm!NIRaL^}f%Q*zKpNQr$-!EVK^xACJ?1eev?YN9Ozb`Ubt>
z@oc{3>sE2nQoEY14DzYwEH8TAls(URnJvxq8EUKkJ|sib)8ZkFI>4vic^wCu4)m$*
z%sI48VN&0}mYLZ?Z|bgj%_k4$fQ#n6=96{?38B|~^4JJSBr>o0l1~U!kbJrJny=t5
z6y6DxIH>wHUz>Ze$7R|qoD>4@&ySfSX<=ZZH?;{q<!zsuxahJn_qEnlR}C1#=6DR7
zPw+_(1PP@k_~Zf_B$S%q6WJkQ!R8Zu*4sW|b7F|oEX*g*`A8N&=kumdy_FyExyA(A
zTR!!+djHKupH1}P*blu;G~uG!WS=sF{c@B3Kn?!06(uj7>?lfJI@u?k15$vV?32y`
z5{gdt70tM&sD12ailZoJaYd&(ib^KXra@7*=4L$@m`=*^g{?`|%*!0QSzqodo99zB
z?(pD3nRz~4_&-Q0<qL%=y;s!ike2af?aORyqpxv=Gd{e5`40_*Z1{!tg-_X;nSGmn
z&|QOn#mWQ^fcJ&ZEAT)9?+e1Cy(W-o+!wycPBf03kQiT4j=s^SHsj7goI0NCZSsli
zn->BLxSM?<N4HsUp)Ee-Pc`ILQW9WWeIi%2S%{=x`VjK2D}@f(<`ZiGyA-;zj=-)f
zg&cjmPc6L0!XO3wSJ&&x$8AvE;ZvV5-=t8NO}+aKW9{^b_kZJ)Z?M25F4>R53`pR7
z<HH*)Nn*r&;|uYOh@QeVDWH7g3%54uJV7=^zrCz~d;RvBy*|Z8p{n-!az(&I8G!Ef
zAz%tndJVVN7w;%7P40n2ey=alfsZ+qCk~Cdy}ows&7suczL0j*m(@SVmAIf-_jl>h
z{W)=9T11`Rz4}&X+TNkR;HrPr$6p$`RUd-RF`se*LFWO)9G{Fi#9~`I==Zn!(Wl<b
zRS=KRkmEk}Vc67=h4BvLC!adsW!`|6`Y7W3%pT~dH}3MYPrg?G6D|GO7Zm$zAkosF
zeVARSr6AGLpM41t#)#xC{n?l7$XhBo)Y6}Q?e8#4c|AZp%f9WXH}87Zr-*lEKHg1d
zeG#z<2NLz1r5GaWK@0(D-7A{Iy9pLO>nplP)<Ye~Eqc~>_aDr;w3zo%*Iml=yi<SQ
zRes5i3E;xtF8Sn6FG#3!$rlzI-yl)(B_Cd#AejOLsH^PHck2V%UUd*?=DKP}6_f$O
zRi8ZO2$E!cNQ5T^(XTlnZFWx9=uGqv`rAgc**S8?$U*1L$x%MYQOzloE9A)D6THMo
zm(`xR-ZrA_^aJ|9d*<e-EqT*LF|=!5j`}CwlY)bud_PAW=7PE0zzS)ra+Gzz9%$Ow
zi0H)2EPqgUc`8=tV4X&BfQwTewI&B~ms~?|0Jt_s9qcl{q@k5VzOgY!Nhemith?EV
zaXro=kLe$lgC{~QO2DiebEH{8!YCVa!r~YPNEl^f4iaX1S(!sN-!kEG{id#4a2S>M
zF?htxkqH1uNNmYL0ze)B5+1N6C)G)4ZF|6$ob(^K2T%d&0b6qJyvux@Ua#el2OP}2
z^|&7ObUx^)N*-`9M{d%i5Gp>HlP?b4fJDUyb8zTJR7`{UU{0e)c`U+HR1+fDoW_rs
zS7^4(A%SC=oTv5vuBVSVwa^>tV>$A)5elJ}V>$A)5l9ls!HYmqiyO5Z%P9~CKJir6
zaxAB?llc^{1hMo4JKkCE-1&r42fe~Okt6p;bNJ@gi5$5%3KDgk$id#Ir~}Cl$cB%|
zmQd<LEjf{M!^7ryN;-0Ay1bN`^NgP7uDImXLa+HQIbBOzV3(Y(rG4g0)V2F4Y0V+y
z4$u6*uKIrE>EXH8+=Gr84bPP+0}26Sc&;2XAb~MF7h^_fO54uEa|`d4n$os2X*xVN
zbq_yrltZT>MzLF;(;sU)%Bh34n@2fy(022vTshlA1a*wc#cV&5&II7>-sIe@Oy<ky
z^m=ap<Xq(N|AzXx<muCx>jk}k>9kxqw}J_%X}NN%5hS3d<zlOmPdvHgK(pEW7xalG
zvmF`o=h?Yl5#Ue;GP84WC;*ELRD<TsVK4R2+m_F<8vrI6Feg{K3`ii%$qkB^Ng#nR
zCl|>c9bU*KY99N!hu*q;o`XQ4X`X|?bBtW+bPyq#TsU1jjsTacWtA`LcU06m2sHiG
zItY|c*X9OAz|Z9_Rhx@Z`8BzIE-CzRX8()&6Rx%&I~eq0;$yobPzV?w=gOoNB((UL
z+A)z{Ao)Yum$_NfGXLzQzoj<#k~)Hdm>)rGXRh*1u1d#ubkO3=0P!+6RqK6RHM?@L
z7e_%%JcC7d=VEWe;h>(cbJeG>;qA#)_5lwUql5@zqGVl@p-%fY7x{_90q%FX*u!!-
zz}=gx`fAL^uz{aE<^a3#CB13a1G$RW^#&6_2Xg%)LjVbx1GzFo00{>_kSj9;BKf>|
zAXjDxl0)<6fm~z=1IXBZa)%?CRWIpoSC=EUpMgv4T(3w?K%%B2xiY~4iJFe&hW?Ka
zB_hRo=SXh&q3c;(=#l@WRWd3<laH~6|I{l=k2&>F^~ZAMYXOvj$gy0!7MLWI!;En%
zGxnc)%2jj9_5{B|{&>pv1dzZul`B^YAc1iz7qfgWVmwF#7`YaX#8E0pv{3d`ZqYM{
z^4C~YRc@CNE^{cQ#D3c8AK+ISB`#>zoqemjXG;G^|F^pwEHO8s0JIq3m*WZ~v>4zI
zihvIiS`6?b;L~E&PcHom`{DnvSbfDoAdh~<K_HKQ#UB)J%^(7VSNwQu_7=VA_9Fyp
zWBfRa(*NIjOsT=YwjvY-$M|IwL^;5W@yme$5-?-@7#NhYgG9<c#-E(%7b!b2c*_2o
zU#9HD5h?pvzu39tQX*v^>o0E0?N}p=p;O2D+dUy|%Oz3YIKND@WhvNloWGdw*xF#w
zd7Qu9lh+F(#=ri%DiM)i_ZRbhL|YK9_qxAb&3{Q^Uwyn^Ci}8VY^%TVJ1wxS{)WH!
z57$?TZS@I$v6FA(V_SWKzy5z!iEZ@>{&r%yE8*K<U!7f#FBTJTUT;O=XK(q{CvA5|
zbEanQ8whu9JJsnwI;cI>FAtac`Kgns{-o_lG{a0KM;eDEsRsdUu0LyjX6_(8s08Nv
zJwbB~k|_^=Gd_=P8mzBN&GXC6EHKeO^ZXbK&+szvjQ3gX5WP$KeZSnk#M^C@d7sLB
zCxAeHz{-Z|`%)kH<pv$zUlW%KVf}*2pi?btI!wRas&#;9$E%jgoFz@+XG{G!s5xSo
z-be8-_2Vtk(~#xw2bZzzk@_>~Wqx^B6imo2BWHh)l;H0JKV>6E>T}bd`sEHFm?-oq
z73wbvfn3fW9;FX#vm7Iprg=z`rpu|24@zK9ZKXeJliy`#n{E%ip<U_6R%&<D!8gKI
zvE0%63#nCpxj70Z#8>(8g1Zwh1Bo?^jn?l?ud$7Rtt^yT<40mKi1grlS?ihWRef-J
zy<cvif{8-w{dn#5A5jP<+sJ0UsvovC+WmtKDHPgBCYwobS8)L3lt1feX6_iho*q8s
z$8pDXH1-3S4YUh><zi<41ihnDgMY>P91o!21;1BZAp(h7F8Fi(e6WK=CtUCcF3Q19
z3^*lrqWx+)9|n>GEq?RYE4iKppx^vux0$PgTmj5#?*x?T0X6Yqkkw5!Qkhk6>3>r4
ztu9qvEBp1u<qrCz`!M__4NFbZV;+95l07#`PkH!rHh7ZWsJ^_zV&CR`whwmytDnc6
z9De1tRFtekNp=O24Fs~dE+}uVqB!odTz}a$)8-w0x}phIX3rFTnkyo%kkGAF>)It(
zHfoxlH0--N?1O3g>Ke4mwkFMb?*!y-M}W_I?*!y-2S`}+oj_!IKpglY23b>^98jkP
z#DOo#gYl-|&<>woBnt<=rUvN17fpr%a*kO6<<3Nj#ZFGwZ|(v@ELrdfO3Vrb#3T<A
zV6y^pk_U<SH!C0~c_R5FKPw<7dC8$kepUdJ{9U{@K+Iu7XXt;Zm=loGMu5+va{_YO
z0Euen1mv^<l4JsyHkJqnKnSnP_-5)$jm~ur2F-zW4hGGEbpe@x2lyOV7mx`!NT^;H
zkO?@EA_1=pAOZhD_&MPAW*U5;FLSBXm+VljKCfc0Qy(oF_6FqAB*1gPy@5Qj%mxXa
z_Xe=c#(Nyt7-jbd#CZu2oRa4yKtj{~0eM~mBqa9-?DG-<S_vEp@beNKK%nhM935yu
zaKvddEeMVT<gpJF2GWrL&P)6e;RoBkKL)bSv&R<b_xgVf$T#=cF{P8Z3l`|5spA3p
z!VgUN#PI-@5*-m#uu+Lc6uZ1YzbkbjAYUVai83dsS40_5r&#4e{jLV50y5@f$C0=J
z#FTqD4)i%4Pzn>})}73H9c%2v3-x9xu*5qy>=B~;Y3e2T3hG5;&$6;b`X5qf1M)2z
zm?(2LfaRFLgayvAHx}uCw9W-&2uEvC=3D?-{Om9Uf*2RUteqLxVttm^KRJl~rF+pU
zL2CO{_R(_vPbE`>a^Qi9)=mw2#ex7Nl%5&{)L*y=9?oE8pXpDQ&TvF%tj-8}#U4_S
zkJTAL>>-UsxJ5Nk=3TbrGyV1QcZ1U9!Gz-P2Bph`1jM^R>8>DA>$^c1;vtRzYAzeP
zLVu)mZcrE(urx~M1`GIY03xYS5QpGtMgk4v)iUo&ePBhcQ!8Km1ZAR#GJvQJ%0smv
z0Z|)-(~hQ;H%KZj&TLqz`&|`_9Slkp7dse~DlQHN#XbgPfU!7;NsFKF43g(B%|uq~
zg|70Y4h9W@rNL~GSfCIvmImuL=gVV|z*ri*u{94+K^g(e*^6uRijw6ZWEt}H<w3da
z2{uHQ2eB%s=9*)8uVTB`=r5J7a=M95R;_ZniB49nqHg*`7z~-)diJli`m&1kj-qt1
zYQ57<G;OaB%2T94ez0mi8H^u9g%lnB@4HT)Q?bc`po3ML90)pCwaMveI#{(Sm@MRh
zB1i|TwgyF@00Ap)4az_P5|UekGEjho<kp}aD1vmbYDZ9<cm#p&-{I&$2dj2CI?%zY
z9YGl=P#8!%f(R7+Obxc?4+OJLWe$IiGd2DLL64tbYr!r!c7<5ejrwEhgF!jez=U@n
zr13$Apgnw#`Y@ZeQJ<GS9F%Xh!9=0MWa@84A&|$|3!C)4>0?2$LkdY6C&z-=K*0Kl
zkf790?77YQ=+sXR5=Drg2#J!vY;y9GEVKp5-^rlNBEdwNlR->V=dkhY!N&8&VAjyg
z-?!+$xB?f0xTSN1D!|??_H|glFZCbNmx7A81_UOAF9oruG+PvcrLM65-KM{H!<C?n
zkJ!CMp({be$8Dkz$bli8SY73^I<W7)(+b)1b@~Ts@Wk72Y`gLz7#5p^1R6Jlwc4(4
zv4(_XXv5Ab3JnP%w4J3Fb)k^<UI_Vh(O3EzJ@#G*7b9jsSPhZl^Fm7d#CVtW2bTU?
zZ^$mr(L${2w|dq6cpy>;6oc;bLh>jVNYptmgri)v2L%#iWL_x09nZ9gL;`{O=Y?Xo
z^V=^W3Q4uB|8c$bt@s}fRO>)f#H$U-L)~}^=-LqMu_g}1!?>g#$~qBpB^Jk7`;&Tp
z=AG~K`a1I+(l3;^x8!|VWLe_77~Sv@6ub;TZdBb%+^!aUq;tLS@erQLJ>RPbuI^?k
z59{}-frB9<Wo{r-gvk^~*otHN#z&8Y#2GPSLc1d&OYCrhgmy<lc(qLp2Z@Fs2{n6&
zZ+H+n)Eg&G$%A<JO_-2AM&`ZezpR^gTu<H)zOXJz@nX`tAW_LN+qxi8$uZlyL<;L3
zv#lE@hxm!Cdt0lY98jwJC)=(l1JIwyuEXdRN+hKH63Y4&cKuBecGZ5u8<Uz}LPjx`
z7^)f}bDV?fyrrPfX&{BhAOU{P_6LvvKWA$U5*nYgH6~JMe2z30;1E9_Qrbyy@(7TI
z`A0HqgxlkMNN%5i1p4_9wol|!pq~%r-OjxYPbK>KP<~tUB;DGIhP2BeoT4Z{sh<d6
z4jB#1{*;GB(IjnfSQ(ZnKc!!F)!<*T*MJ9zj)TM5V)qv$)EgXbD0&$r>K`1&T{qfm
z0EvWoaJc!fuy{#J45WMz84?yJx_B9p1r814^xPx7augUDRuYN3@TQzT6T_CC*6%3+
zOV~8ZTRk!?r+$#Abz~Ufi99JveLR}AIHNyNGujcMJ{}#G2?okQWONt-l#CoD>ea9a
z8$`j#Ann>{%6~O1uWsQfFN`dqE*loiL%axQWx}q+>TIh$eXOQ^*REB)t1EkUtzuIS
z>qaJYR$t@^ycfpsp#zX=9*-n!=LP+Zl6iJ5V4{|JVd>c*QOmqA;>KfK1P^N&`%V8#
zX{{r|<AH64JP{Ab4E#uJ9@$|bOI_5blrD5+$PNo_JD?1zSx9!^d(L@8e$0+v)F-z3
z*pVRvd~6#4WvEaX2G~sFBR{0A2xpyy0cI=oS)fQ}%O!oGE4U(TB*fM4d}{FeFu(d;
z4g%I)Z-avb`1-Ki1P2N5^<iv+A16o5hq_u_SotcfCibZ8%16d+ndw*bCQ1#MqJK~X
z2z9o4Ac0Uv>X8qEgb&t*3%`O7(q1buXwjx_56dO6<iJ|n!*U5MSpeD|#uE5XToV-7
zMP7M3c_n-FDJ{Y}yNs5lV2aguKF=q2h2;l4KmuSFb;wkDbC^%$zRU`jG2PX9pFN_$
z#faJ$mb*V7(VBhXq*&5`B%v^p9U9RfF{1Z{8;D(2BE@*x7jF2Vxt#LHe43pPWmdY4
z+g%lhoLcCe&Y^I&IN**#sO3<&_*Mx^Iq0EqMO&T^<x>iJG%WHV5Rg0?miZ7!NFEK#
zd<Y~YkB04hD4#OV6JfD%0s&o4I6BZi<%zJ&zVQ@DC&Drx0tuuOVdO)9fmg*s+UaoC
z752GiJRUe5#w^UU;~2Tp`AnH^_+9s(56iq1TtJ-<%e)jMpw5ToZZ${>gW=FE+yRK>
zbI<v3_-6AbvRRA<#pTRs!|3U1d)d|(Tr}pg-7_GmR9Ig628l{8Q>^=d7EN(nx`||c
zm}z4g?<>Jk5gdo-ABl;R#$zJf`CEa23C2XE>w*O2n22<KkboQ$f%9YLQPnu9H6gPu
z#~9%%ncxVK9up!m4L~6XO^BceD0s$c)W604*Kho};;o2`+F+t3Z$;!?CXhgQD^esD
zF(85PR-|!LbB?GM<g|=GV9aw>Omi^EPp3uX$*MT_(`k`_cohqhgd&A$b1TKTIC<f0
z_G{4CRx#UwASayds6kFRJ0h=CK?D%9BRAc`oiI*LI48oLkfp+gRyHRheGrczI42@~
z5F`ZWkOi)Yx>3vgi15KU_rdv&3gm<HBhm-)6iD+U(g#5TX?_Gg_$0bC5z-b#vd*wE
z5#tH}q6qHy(ly!yb?8UzLd0m<@*}%bzy#1o5jhcq1kgtjOvH4hIYIVb62a#qn!Yg_
zpM3bAs1Yj#Edm&x^2c6rn-e5tmqhSBjkZD|j2``zt&AFTOFngE2=dd2d=H2+koh!%
zG#-Z*Ap&XzV|m8S6)WtfgNdfEu$vAN2rD9TRRxk{A_z3wMXl(-wJbZ|*io`JB2O13
zc-UAQ(M7xi37NGK>^9P&mIU?K=gb!~Zm;;<sg)M4pF6cu*L@z5mkJ>QgwG>L{C^g;
zqU$!ZVKL)O#byVB)~%au&r9$=+Z+jqL=z++Hb<H?GfxW$EL`hYCT^VVQ0G9<7JFSJ
z+cq(+W9uT~YhqBG*0FUFT&?FJG(lTzyCcfIiCTrN8jL&rO46wBdJ-&=1)%`oc1L8)
z1_`*`ktDxA4>(%m?vAv&i3eAZ9PZ|O=ng(T6_0P}B;5%s;5}?Wfzh&Jk5hpc73_(~
z`-=&FwP;U7-d_ZX3id>B2X-V4*aWSB4`hBWFh;w|4>%aK1U}$co|eD|BJz7SkO9Vl
z$PJCnTQ~%kz=zl;DdX0XLlJpQC&Aaghaz&P0whEZk&6f?!_xOCv(j*~qfVuCdGlyQ
zUfxV7wB|h;NsC*PAc1g{hWJ*R-4k?q^K@o>+IT=|d)mRE%bTYi>(b@T(~)GcG$&o&
zJRNCpgZV0@AIXsRTO{kXOmQ(<ANwtWnSz#wY7)a#yBtvlM%Ba$7rPoaEp{ql>g;4a
zV@3@gh{1<qK)-AcT#!J&Oaqs)2aw1fE=TePM#YvdF(`Y`u0+%UQL*JKd62srkz2l!
zg)QIyQQGq5p9M+MkR2IS{+M_r6KG%rlo}AW78C+TM&;{PlmyzysGPt+!h=ReL*k$k
zkvxML84Zh*9g>4MF*4dx?CVPwhiTi%oGwg)5@VuRF~9Dj4<529Hy9Huzz|-Y<g>(>
zs64>}5;~2E=8HWhkN_JK#bUYz%w7=EUXNzI$zEz?H21$AHGKR$Ndb)Rd4qk_$mm@2
zhTS+Y0rW;x?y7?X&>K<gs#8h>5{-K!8mZxn6e7_$IKUgxs5nz1SzPGP|2AXj+yYW<
zLR7(LajZ@c-*2^Q+2Ur=2t0w;<53e~S<t+w49p;bGa)Jia{*$jhq2|2joWINZ3i#`
z!J=}G00{&Zm9LjU0)a)by-Kf_LE`l?i`uW3i5B{^sC>OFS$Mt7qV#(COWGg70j}xM
ztm9EvVx`;aSk<$8<{wRrwXVSQC|>9>^p=O8j+(*lZDzcco)MLsyI`UZXHe~DL?P%l
zletTbUs5xp@|ZhLEuqlNC<ba%4g_izi<TNCsaa8ZgdInYh#SQv_#$2gjhfA#DK+Xf
zm>rcnE;ulRGP9#t3DZ#lXoNZ8-Kf&2_>7CWmKtHUtkn3i0XTd|k)EUcyHUKV9E-RF
z8g`r?RqjX(bW<F?J>zX|+~=wQOMI;a1t2g#D!*0&5?aiU%CD6WiPp`J;%g;$a5#9y
zhirTcqhspBsN6cjAs;||7{v@y%*!D9FJR|e81>T&qH-SyhjdV80l99i&<h^7B-5s)
z@u4fV#6hADnk*rt4jc(_`4gtMGVV-$5|uCYauhGhd=kY=y_b0z1m30WZ>@}fHCT#q
zMGlQtn<%q1iU73*K@K!R>)NPNp7=}^R_N5)FqO7o*#g-RSW5yzp2F<fD84yK-)w<6
zSz&Fo@vY`mfrq%eB{TMBqgY98acu7c$d+isM*J#94n@|jtgemGF10l(KX3yk%506|
zJ}F(-$WgEg`jVC1iZWk1IJ6!0CE?Hw5}c#M$yzr0R^z_Zwy3<?04B<8i(<;9{lFXr
zhbHUTZ?_t^r|KLWIuKq*IM_@_8Qd@1&i;Ix@kn~RgA+uV?Sz9AnhN2@*>{;QZZqa9
z>F=WQi#y<=)OS&&r_!Fdgmxsu+8XyO=_8I2!zguxj7SM6uy8N!N9Jj7Y_onuG?1o^
zpwN%ek}`7$eIN;O{8TjS0z22<7#unk#S7|3A<7SH{fvf)FA0fbTA;-Tl0X9EXL13$
z$-_@+on}|=Fv?P=qw>Bam?(2Piu;mDUIx?|c5erxFm(n&i|c}eSHz9tRZe|g2AzJE
z4e4MsOr4F&y-6IcLYcEs>`mfu7V5(I`-N@nV6;yCVmmjODDw+BH_pML4946!R@l*K
zo;v5?@K-a0BkICHI?rC{h`P>4<(_gbA4un;*b2b+K!AgR^eda+(P&})>a?8((y!F^
zoj8Sx+*x}kFKf=ncN#kk|2ug`9$oFw_?MWbu>btYxTkbVp2ovGF(Eo7FVcuwPbAtq
zCGW;Rm@6?PLBq#qXP&&zSnVpAou}~)EaF0Fc3vL8I8G#lX6M~}A6=pciHGm8dmb=4
zmA#jz@z<rqByL`m_c)Odc`vW^z2+i}OT-FoeqPqh%<2b>maf43Jbb2TRW7jjUD~Y~
z^&z8!-g;}E#*aM_7hqfSa(UMi39zks7>TbTu!4rtGxC)O69bxBY(QfzoEh^M<Av;y
zc)jer48Nf-|IQ+RqnT+^WqjwoXGXsKNG(86$BcaWky?<bV@Cc>_tWtOwJ@a3&d=JD
z&yO#tg=D0Bqd=@I3uz%TCtrMi6a+ecPQFYiK%(rNe7Uj&3Di0HSXm<4tA(WaJeKNh
z)N3)%5uurKUcTIcLK%q6%f}AXTsp;B2)k-a@|9(oKD~{`?i&0nW?VdgJ1xnVUz-C7
zm?imfv4H^+FiY|=7g0h55((9k{07VN#g-s3#1_UU`EpB8vS5{^`PdSC4?z!dKv|cM
zE7WhPR>wOZcqo&oHquH<u*5u%0;qPKqdhHW){*wJX@y^ip`&feSGMJ6K77x>VKOja
zFK}#eT8nPVmuUi?LVQ!cOanne>rMH2+n_alsF4^v4cwfsewi=QK*@vLmVB88N*2<<
zt@-wc8VhNFe&xy+yDOkzysz@*$`&Nl_$ptnY(WC<t9*N9TS%7vCSSa50)cSwjnfUZ
zvi&AsW-WLMq;K-&$`&M$zRAbRmLHEyg|rj-S#_B=UN&$%@<cwy0UeJ_;dIfNeC2$;
zYJNn=BUAEtB=Is2|J!Kgy5%f&6K$l4XXvG0@^QV$;h>&#`M8v{m+YS6S$MuOFqT<S
zV?61qxole;PoUuCe3=!3gy7|TdDa3XCEodwfiYomVsMLJ$yW!&gvBKfa#wAOOBN;G
zF|znYp#%ceu$b~{OwGJC!1#x&288JM6i*L_#bn|Q5@^F>NW95gK|+gRvCym6v=FJc
zHaw<|zNUq}tv({A1$Yuma!?jfBV&kvbnH;F(0`+1ny(2ZE8xL;ud%lW8TFrjEhdK(
znCQpXVzM7W!c4El<auL|Kz%KSl#G&RkVs`-ixvG*R>G4{UZVJ3vyj&TY8)$k#YjIr
z&Z&d80>(LY(AXIllb@4H@vVSyF?os{B<dI!E4W+M!Ou?;YOL@sGr{YCBaUYiUoi@v
z9`Dpa18jUuzV%M=t%LEgpg5Wi5(wjC$YVu2=xE6JnAK6%LBor593Ly{VBXB@05yR{
z1{-ZUPjKp>&4me09W;6-#N-jo6dyekVn|0t9XOGOr;Th|d1M_EVvX<RF9=~y^v^{0
z{$OLv(-WOaXkblrj70-$VoVM!h@c@8W0(>}C3MJqVyxbMvLW`zTPMcq|H(}8hG1fy
z#C8uctfwbAb<mlTNlqQKKQSpLKf03Q`xBF5nBqkp`0x~-7TXQspPhmhlVbJmrCYFQ
z2MSDPj}A3TD<(U2(5A)YnB25L8PqX3mb5`>S7LGu+3!N+Pk=!BJDsf@YAk+wx&uKk
z=BGPq(u?`&v5+`W01-e;k0Ip~YI>o?^cXHQhymc0V`6%&$;14NL5lV*X0h$VjEag`
zP8}xHoE4K>A1H%5X2lw`k)X6~F)LQy)?7jN0#cM*FUb6HxUov<yuiVrclZlpau))H
zfUzJZKOqGY7z<*h;@|^F=(!-)qO;U98+ua8xggf^Y4Zn~`%?6le?_LpDC2ML&MTZ+
zXs=^MOs<zv2(_$;$<H!@L@g^~h~2^(xL^gc_yJjqPu8*`R_}guhX_;1+1F=Uzh?Z|
zRkPlyg?2;M$FjvTJf+ZX$og1H>@|TzE$d@)uL&e-Ss%N(iwMXd`RTCrv0ExJapBtp
zf<vdn*2kXi%y(K-v<~<pcHO6+y7yxLe#)EE3Qtfs9*HYxAW`=hF*!SdMBQId3%?cm
z(^?^O?>OTr*W=q9{r&KnZH~{-H?X!j!-u|swJnBuiPD{PNc$?5^;=A&J86{sDu!)W
zzLB1$bZ6Iu@y7JhU3T~e4`p`6WSRpKXuD!abB<8fkfzxAeP-Ku<9Vg@`<Q%N04}j(
zhWN-GNC<r&3rEa-NJSxpzCV(AmKpn9rAHhg!aCvzQ5-%(LNi27AWvng-!d8~6{qaB
zr^P{ayX_!>aVi!Pd*&cXD2A+@j;p09yFU{X8{R*^jScTJw&C#zf@f^QgM{E2GW-=9
zt7)1sF2s0Rz*6rR+T#}-4Jblha5SI@dBL_m1Oarxw!Rh8F2%B@#)b7Ql)MzfOG|Ej
zi>!YI)}Pc0{{r)h-3K61@`~LDAc1*>`hZeRi_F$P&eFY&f}24=vVUAoz99KSnQ?-I
zWdAsFwoBws7G<16;>xJZl*z{bxN7jP$T;x;Fhk;UiUbLmA#pi<fdtHuIHoU}!$D#W
z9}+JZ6?gLuSYn{S(6}1qLy>4P;D^PLZqhFVNER-l;C4`4-W+CcPBnauM#S+^i~lNv
z5i&BaJ|gl=3w3Mb;tI>mf6qv}YCuC(Fhsfm5~_}i%QO=tG#M9{X(mXhIxe2apem)A
z#NbKK>v45LTqHe`2f6WanPy5BlAbr>l=SQ-r?4pFRVT%jDXiyoV^<CSv#m#OVJ5|8
z*g`p|G%21hG76A@o)nk)I!LHADc)cTRH86W43V$D6PNkAWWiRG$$($bxq_mQHY=X>
zQQVbS>Z0rJz1W%=#%G~faa>fqAKDdBUifZYd7r&L)3~n&{|N(u4{hF!%d8M2w0So!
zvqF&2=G}PYeQ6+Ka09&;SLaCsNgm|p*ang;7-%jx5S@uFg41ZVab<B_#doh~8F$ox
zu$3Uctc}a05G4Ut8<$BTNGMSo4=ui?giH$O$JIsGl(3V+592Z^Bsq~3E{MydP_ob+
z3*#Ej5K;&%#ue>&)^a%ri=hZ!Wu(O*ET%!YG%i+rAmCa{ZKXk??9#Xlg&?8y(l~}8
zT_-B0A@V7Uy=yeR=hL_hgkTak&hJKfs0>6tC1aB!_3&Olp0!OXQV%6p#O+vIj}%!g
z6lnzlimbL30g1A!ZACx=bu}qM@t__lvR1|e5RhE!NRmEl<1!xLDJ0iYJm71%dK3>f
z#+5H=Y&CGz;9t>ScmTPL_NW30xsCRy0*U_G7|;7s_7^d@(`<^XTV;Pq9^^LLP9s@x
znl0RE$R_ne+V*(X*W4!gZnZwD-5$3?WPLKqPT4yk(6pVliXc&Tr)?CFsA?w}g+9Jo
zpY-3&ZkcDaDBF#fkUV1mlelqR-2DOxk==28@r*W*)dnH$Kk=+fnK$PdTV4MD#PPnF
zUNtr#B@VNG9~ifl9=4&t1k~ZU{3-xQKpm!zev1Na1FHUbX5R-!(p7%kjuYU*F^|XP
zaZ!*|DlR{U3=$Z}<M<ddjpqh5X`W=Q=Nk`}pL7r?PM@^nG|B+sWL!>vAc1f)j_L1q
zjsWU3TRq=sUvb(&pzwLxL7?z?IxgQHHsIm&bR0P=O`r|<_E=mjtU*BgU*a-#0SU=p
z;xcssiQ0aN+cRhbQuJb6EUZCbCcfzCKvU>NM+cfhFUDp5kHSE@7)JuLi7tRP3~8eh
zxb(7lfpL#JI4Xg7$LG(6)GuQaeCXZ`0+3_yDv<XyNI;HB$e{}okYf^Xjy=>p4PiEI
zLPB{n^V>(pU+~2YM~=E=LPDNQLOIAyNXU~fAmR5D5`}Lj#K{+8kl(8;Ay2+Y4!Vvd
z<jEJw0uW2!<Vy=)KMK5^z}xG3)+2o?SzX3xQUcmmo_h7|gnWD5koW4_3CzBoxh#+-
zvqnpd%96>B2zBG+gnW73kay$c1YTa#71V~*jnml2ON`bf)9`9mnuz*uT0)-iKpEgp
zOCTiUn?ewQIcKuiC&n!;W+voOZ7?A+Gf^Ops)2;a%miNYzE5dhL#*|*_Y=y3%z#gD
z(4hwZ+6|%w-unqTN246%-cQIm8YHaxej;xHtV(k<F?cljAfbMk5OcKTL9R9-=V-}7
zG?|~EIl2{B0ZYNf38g5}&|>qJ8O<v|h)KF3|M8B+33<^0By?Jw$P-tYK>~Ym0=od@
z_zh{fmq`f62LZ>=B&6emgk&Zm9UmklGYQ-A8`3gwc|xR)&n!2zisg<9wAfpokXaT=
z0%&<c`aMVhEl<Gj|Ad`%T(@17$Xdr{EI0n>UzNZOt72>-<H9LIKfAKrsGnM$kQ?7%
z!k<<ru<?xv0c8NYhPC_5sFzxkkQ?7%qRg6v+_2_XN7u3epBW9)Yh}wINHJ$Ex%(3s
zcsGQ!4T-Eew*E8YFa8Y)BTny()Eh{HjjVKq(Xo7^-7+xIvW<4jKthF$3HiNPkZ9S)
z1UBy}Hs3({ZDF-5j27iv90ZDuTN2sgz5>cnp+rLDP#}S@C4n5OBS(Oq+gNg?aaYAQ
z2Z4NcTS6YExq-*VZHa)`4*>~;ZKT6JXj`L@wj+UCB$HPfodP>(5NxItuMsuwYxe6(
zV{7@>HZYg~{@QLFNT~L8LIz!s0REZ`+m9pQ;djin+W1GscMby0%HKH%)VS{wGQDoZ
z8}}Uz@UJO4HKJZPl=*12@r0}7kUd_(h0r1D23q}sM74(!c)8G?%YZt{%GVkl%8xqL
zQmj8}Tci<Bm5(L@V*Lz~WD<z=bQ-S_1&JTovbDzj?SFI-Xv^tG2Z3V7j}8LGj2{UB
zcUXXcvL_NsNur$X|ICQ7uIr4lc3_ABh{x#R6Nzjw;y?oHM53^fY!3yK6N#qH%x^?b
zAefv<DCgMrb;j2<_|Hb6y`wXZDJis^u|2I34=rb?muaN}5~1ZxqW(FA7Rt4WAu`6Z
z33)eHvS?~c;8y9qaE`_}0FlV*pL8WEtVjFe@?Cq@_;cg-$9_xT#!Vb8ZA@-*DWL=t
zIH1}W-?OtGeW;Vr509W9o{7*068c@TCnAt&<t3Vk@EQv^czBtu_}nNgzihV<Odwpg
zTL_X0+0FtI2$#uO5D$O=U%AR+8;tsQTy+qrC$2gORL#|d-0*}55Ux_F+fNINCLwK5
zGV5)$_BPfcV?@}v4aVoeK}q|#T@z~T@T53y2LjN;ld^dr0X;k^=UI?|9-c(=#?y?@
zgeo4JX|vIo;3^&K2vLj1CS_8JLJ%68L{dtjw+Xdqd{Ts75a^ikNf~-ULUMdkhF*}6
z9G|p9ZxbRXCPmHx0uDVfDg6c{6rY%su@@weCMIR<1<6Gbdxz?<NmEQn$*jYf;aiL$
z?%?}Ld@P&i98Jj<^QA370CK+FERcYlZ`%SSAm@`U_~GHEr1~Ous?L~Fx+p2nw}MIB
zq&(jW5;BXDIN!RQ20>G@#S-@Ec4I~7C3Z`|M72xomVgArlBB$42oexWl9&r9On}5p
zwj?Qkp^iwgGGCI!FVx|{I#mLJ&)A-?jGxOtb1I>;iJv9q`9_pMC7&hb57dDqnIwLo
z4zCS?086i8+D@ZW#VQAZ(#2Itxyyz!Kv<Pb@pB3!0)$mboKx6Np3;=sv^g_sr?JCT
zvDv|(L~*mzR0<iJlk&h7WPq_bi31n-85_btg*!9v>^4@qDt0;;6fkx=7!)veCS~k}
z3@~;kF`T3^kU)IPCVpf5T=A^~L1*2*P0FLbO?m3@ZL(PGc7g=Nx5*n@asO>f2Hz+B
z7X&2t+5QU>mG86t7bGP2UGv|jlsX&|{>%K|A$2(9s6eU1A*U6TIvldy7lHsfl!W_s
zg7-EHX+I>h-eV7aXZ#`jLlTF^2hqIJ49=^aNGfMCAAE<4-!=GG#4J1j_z4>vB*0H3
z<?$Sl06&q$iv^0QAQ4kfB&{<^w;90(C^6tu^r4oMN%eHn!#8uTaUpvuiIgpZU7%}B
zByB(Yla#gH$`wO>=UBx)qrCi_qZB0s=aO<dZ^lQ;xupE;5J&)@OJe$ak|W^M(FOL=
zKI5sH3l0J~)di<nG*B)iWm3|N50nc@OciwM2qaD&T}aj+BR*<DG-e8@a3R^C8}d>w
zFTy7e6npkn7oBMV4{BUWDlHSOtq1y4JzLd>js4zeQx2AGTN+50k}|JBc_?uynJD4I
z6C{^!-hzMWr5O#RD@@yO+|llegFtie6~_=Xkgg=<EDjMMTuEXM=7;o}q0QQ$0%aH*
zw%_>jZ}`vFgND+e0vZ2M3@C#N<ag0Q0%cGEQhCwG^r?YC1x<z(*nLc|c6cAZQlJhk
zu=`kYAv>6@I$%VCLkg%<2U1*VM#FIwJ95ByrF@j5293s1jv6!?M-|903=u$$D!{8B
zI{w;>PE3qpvkw}#mydA}XfTc`xaJp>$B!uph|PS60AWl4UhH(`2pEj7v!eePRTZy0
z2s9{PFObXdW_(b-UQl1`|APd=>jn6&rgaomn$e(~l3DW~<8xQV6bFNjlTL9kXgp3S
zkT*Xe1B@vJxcRw8VBodPyP3}q8|z$c-*qtPIO)3u@_k-2{$A$Y0{ICakidAipde+k
z7}f*$kip)9tpBi$M~ywof;{n?;OBlYa<%sK<D2rQnX9V1K2I0WuKhkIejvMhpQ^6a
zrB)~Wwsl|pIB1`js^}Lm=|_tBuWDPB)hu}2C~HMOm08u}S^62yzW=D|gI^A9iQi@B
zzavT?A$So;l~(o3z41MQ-o1N>9|~vfFL~<KH2quOUOn;4<n%+FmCo;MSNEx^#HW5M
z@dKAaiDvjk<rg51Urv@kH;o?{??*qYO{K1VQ2;-VS=qe@elnbX3mQ+lb?Z~rw=Zc=
zdR%uDgnoJx&A12m>t5_$EpFb?&vTQM{B>~CdiekMhp$WViO@b(FZGf?cTT_bOzN|h
zVJ)V0t?YxJf@XK0GD_IQN4y0}Gn0)wWi(;SPZ{-GW@i5>V}cUeTj251%Rvvm_<%58
zpy1#LJ{w;H63zgc|3(Qt#Vo$B0Qn7WMuEh`?+e6-LWvTjkKzH5DEoZ@k_J&0)cyi_
zAr#*sKv|Ids|F}b*}?t-zPU)aaF+w9^sf?$0u5+>?uMSC@PPs>?*%Xd&A|eBuNB`7
zKv|Id^$p6>`KN;gcoTD(HegCZ+PQ+Pk%g|rNsSFVYrOMk>zT?P&pl&z$UXNzd?){X
zbnBtJI#@TiZgDey%)3=-E7R&$^=$W^Ref)>oS*n^UD^V67awaC{VBgWQQhnHKv{kp
zcyc8!OX3HwpQ-BBvUTegZJwbYhP7VkNk7U?4u)%%-Mipd#jC6E?@QhJ*B9w0S`X~;
zM(^Q2FAf0w#H_7k&+9y(6aDBn=}q4DETT32&bRnkdV<D-Vp(f(rv5L+PM7~&0djuY
zL@A+8{*@W$v5E3)fy{rwgynuMkohl2bi%LHeY6`<Lj84-{q4MQQ^`d~gnIm<BSI6|
zMH0D<i@@}k*_QK0Md@Wngn%wPBGlEFNd$)uQ46U4h3uAJjoVB67hcnh`oDkSHO*+E
z>0byLimW9x(F`hNvwk(&mJV`c$PWe;dc~B1LXa6$n3Kytc~L^M>5xJeykOj2I>eEo
ziDXEj+<8JF$P6jO&Qlj&52ECVLN?@r(Y4hGM~0&Qh(fslDB)3mL?H&q6ched8qy{g
zW^GBi60eyPZZad87QY!78j}mLB3X;$glZ{u#pcXiSB&*dnr}|Y#R0fL-JFVxi(Me0
z$>tQY!?pN!j#?JdzD{Kgw=(68y>}=LzE1Ilv|BC10iEws%Knr}A7a))i|>~akIiW6
zJ<@7#3NNVWG>&+L4%(Me+h4~)J>L^&S~ip`Bjqk+mN)ax@RVG@nE*b~gA3&@q-1x1
zgwTZ)x&ucZA%lmP*yxttvM!f!{y~b6qg+bKt05=@kxMCD4WYyyB&N1Yset(28Ik<G
z^rckrR{maEa_GJErPR&0@FO2(VzrpM(c7l<s-qg!el;au5TOj}xtc;)Y0p&yH89Nv
z-{`%g!@#u6Cd&9~YG7Js6CeRGFdY(m6Ck+|k~6w|4qf4GL(@t#Y}T?9t-J-SVJq*D
za&UyB;W^x7Xj(26Kmu)OIwek-fCSpmH10iDb1=B!NcKZ3?@Q$)9R%8280jF8Q;tlh
zT1s1yQ;tlxzKMU+uZ$9tSJ}kY-nQkhItY}Qyy~=wT=dnnTvb5?2(PBaS3=MrBqn27
z<R<T3<zpQLI&m`AL7>EBY+7y;K?De6)40y{2yX>?Z#<iDllRXR;~fP0S>W*w0<9Lt
zr{&&!8Ba{cr}1-P*cT_OA~BhkX?(NyPwt9o4hAh0ra2gtm`roDpu}VvX)&A<lQKFl
z@?K`qt=^HYiuW80N=)8!FzCR@dyXEIn7l`NETjV?WprR<QRZLe-o;AAA_s&2ZkdBY
z2Syg9L*h^mWPq_KjkCqWg@@oc$P(7$cJIjcOB@LL+QSkDf=+`hNry!0T*gm>EJ-(S
z$*<d#(ednMY2~Iw6ZZGp@x!|hweu$1gJHWEo%vXnme-X~8d%HHF|mXL33ZmGk+0Eu
zq>PSle3n*jO*9i&8`^mb%fYa*Xj$-CTBh_U4Xn@7iB{6t=nTha>6_b_f8|&>!m*ka
zwf8<<zS=>c6CA6ZmeC20)#;Gf3M*6S1jp)h(-QvGlrlODzK$(x?|r0vor8cc->B;x
z1o{E9b!oXWh6oVWrEwLB=Akk=D!zf;dx!U?@(m6`5C|I_1o|Da4QaXPg9s2dr148?
z^xK$abdG!zTYiVPRrw|dfqs8%lY<Zf!ltx5Vg(T(Y)V_j=HEF2&X|A6N;-J^mVfCW
zgn{s-gAfM7mrg6fK=_hcQN<B({`@QUT?g-T<zG1nxFDo{m6p5uWl97HU!}$IW~dzj
z!dL0C7Usho0Y9U%i`8`WK3cxZL5M<!U5*Y>AnbBl5e337Y6Wd^mMQqvm2X(!PVXNp
zzHt!pfbfljkOzcs(sF495g>e%#ub6rgsbP{i%RURJH6v7_Bs&xfY|Fm<O5=FS}s+~
zlzc$!O&8a<M{NwN{mk=s(WpJ-V8noNC@q&0Wl9VfhtffDB^4wv4yAGCpYL>+Dfm{z
zG1mMK-mUGAIS_bNs~$_sQ(h<oh+}Da*9;^ej-_$e>{G1!VGLa7ypmS>TbbKCd2jVR
zga7Rjl7K2#oaQ8eb0sZTd5{Cnl{9uMXt4<ri_I(P`u#1jNlOf|^uC(L$Np(kuuMrJ
z6Jfod@+RBhe<(S~lG8p&fDf|do*+no53;Z)xL26F0LM=)rG8>7dtkG13#+={JG}!K
zwx$KpbeMH*A}avcFzcG81ppgnLDNNaBe{7<d&A0_Zn+XOJvb%r9a7Qkx`k9TzE(1=
zzI;)`7f+N__Uv`t`iB-e|Gjv+oiCp7i8fpxqs+K>ubzFYC==z2n{HMweD%QUjdYfl
zC|KIPQ1!CauO~htVp`Re&s7w&{zvtq=Ecp#f(Ji(U=_Ek>{tCfmPyqw7vI*W>hF{_
zn|Rz4zd=}C(yjY*NWa;(2fPt>_yKQym&v>jdanfDuyAOB{}^9$%3$7P`46FeZ`y_e
z6IOrIk^>DS4E3g!C$<?u!ccEocnLC|4sSK5lww+D&qLlkrR_8agLby3*~Ug8DrL$0
zvLJym&B8mL-zZ^g5z^*c`0#J(quzfi{`nU2HGFYVZ9&>CWFI}|?NYMPl5Zx#1k^&S
zK)l)j38;k@Hbp24Z9&?6%sM{q?bh~VTNyB+%*VDeAgPcgQy7py_}D@UGm<vRTZXh{
zR@NGJ<Z<r^|1t|(YEJ;TCF!!9)%?Z#*V5&dO!dG7(sE1YQy_t~+(JIJlN_=oDYKe+
zpYZN3UG2zF?W-;M{SB0X%xVk!z@1U~jUjElmGwQ#ebW1MXgyU<5%oq?u6<!CTiL&#
z^!Bd7e<IZcA6Q@5^@9Y~7gRruHjo%?Us#c?7;W^nl^7UpIL~3JTP*RmRq`OW$&znd
zB?}vOn=RVnp;_TZYD%4@<R$7`?8U!&OG`l5N>GF9Ecwb8B>`4v;gv7Fzq^t0&>d{U
zU%hvA*#UVzae@hv9hUsQH%N%=u;f`|kjR*JSdAX$i8qlv-`!y~eu(G0l0*6K4(t90
zc-Xj+Aik!sQB?M|9WcN|Jzv`a10)rqfN_QT=SE6a_gVZU!ZRQ^C8GsM_{=`rXFvjJ
zpB*hg0%;#b3!H56;A?FMtgNG!_)aFxt_LhnoNpN5Yiw9xTS_DO`%0a?S_-7N^M{AD
z{HBKAf&GFYS>+Jx(%IWFb;y!erocp*Lsn5S-48+;P)FF>&fa^hBbL0g2qtl9JWZji
zS@;aoaVzT_D}Ba0Ida_c@b74Q@WG^z`V(-Ad$YR1dI`&^^xl^OgQxQJ7$85<IKW4D
zK|-06?Bz=D<EfLD+~5EcWlmaHzhShY45**ksY-9R)X&oB#3ZhTSIc+uGO*Mc_V+H{
zyHjT@`HDKk_bAR#5W#1!Ap+C?!gh7>-eLXX;PAUygfo<aM5~Z?)yjG|b4yn*euDKX
z1quG5rWG}7AbarN-bt<TKYDFok#tRvXvDxGxfBBlT?Q6mDfT&~#I2}_BZ@NVXT2L-
z6(fpd*Mp7tH=;<!Kaji_uFKMD3?x8C6ycYYRu~)vt$im`|9NkFwfr3igH|5z6v=f?
zEAH^`6s5$Ec!C7RJ4HxVXv%9v)KoUDhqtJ7YLT4mz(loEi{xYnk_r{szT1jSHv8S5
zdw5-KXFIi$)6OoEQyj_wVs??7;y?mob`hL*5E-;}Nc*rTYg?wYCqB0t_^`+*5(aHe
z23^Dr+6w;zagl9MkU(5y8x-XKSJj!vNm-nEe5UPbd0#gXnnM_{hkm=KyWf@>L<7Sy
z0}MBccm+3!ntaqx+%?B)jGN7xPnJUt85skJmY^gKqMXKnV56AfZ~(yw#0zjR3<AU9
zh{z$wa_sl1s+Z3G*T1Kqdfuw%s(P#HtwQ1(qEP+8N>5Sf+qu@ia(=?mc|on9qKmiV
zc7X{fTycAV1`ru<$JxQhSE1pa;ym?g$)nEis_OF+M4R<-yZas<B-F<{o7aCJ66)i@
z;!sb48*>l*+F4szxiK$8X6HA??PM}c$k-TfZ88#23dMQr6N~f|?QRx}bVdd8%DOqQ
z3y^}F1G@kzxcRbOddk$vHqL-|&JE!=Vz%XLAoKFu0_*TEg0=<L0U~IdSclO}DBLR=
z`6OO&Shf7d+1>V&xSZi4Ija}OiR_GrK39$Z<xCsPFO!9#BW-8gW?>-GcE;_-8z5c5
z&UlB<<EASRg6;}-#lySfrYo>C%6%5MU4bRh6*R`BE0CdeFHwF|Jak*}(5|Zax6Z9U
z1(+cgf6>CGpoKuqYF{*f$Zm?;&sKn>`KEZ+TlIRqK(k)i6pxQ~KQ@iU84kqR<Flbq
zz4*9Os@D9sv!o14&}ga4fw(=*rI&Vu196tS<qXPR;s=M6dffSb|3mpIiW?jXoDm)*
z9E#gxRDe<@-mAi$E%Tuj(a5=Y!CN{1cTUGETAz#ak*3Z$6%ryBBt+)*yb#m|BC;+7
z!2v|p1qqJE5Y?%mu91meXtEbB-l8t7Y&9zP*jUFc91G1f2Mz>G^z4>2AOa?Oc1s!%
z8&34Do$Q${X+jVih9`M;OPZyiv`L=bl4eN=n&h!1jV~{$2n<s_wxnIFx1?Pd=OoL)
zK_x_|Q$4#S4Q9$t^;k9ig)R%K_0+B7onMyK=F5l{Ydt$NSfRC8>oGGZx7bujFils7
z$2<Q0(>;4oFGPw=_iX$D5j@?qYuP}2W4hOQm>vQM)I)&jUYDVI2w*8P1eop(8m#99
zDkSutQIAb<`c^&TS(k(;RL`bFAdh{<vv00I9{Y^P8qySTxC+TLN_{!OnOdpxB4oZu
z<weMRk@BKu&Wa+4P#$wuGQU?L^F_1OU!HKfSIy2#kolt7c?mLKG~0`s_ce+jVYWvG
zoG0B<g$#e{a$P1m^9y^_<#jAmM0K8>Nrj0*bsjyj-jP?q6j5Z67y5JVn@J8k^7t9p
zQ>KL$c{VY?N4Z5_yAFDc2*jxtdDr|Ir;;(E5OiW#?1f+ROk%J!$}RD1Vz49<!%|NY
zgCxxgnPFPy=}%$QZ|-&4tLvY1BHf{wFJSnenk@5dj|N2IGB4=SDr9mg=b7DfKc4DD
zew54WPiB~MdHu-@Q_i#f8U+!Q^Xy=Zqa0Uz1)DrG7?Wv+)t)^%xUGckJ6<SmE;t18
zFIaC=DgqK1?|7t-n;DdF0;2RpSJpVU#Of&{y}uCQsrSrIDj;aBdbGy5HMZ8XqcMm=
z^%#x)P|Klq>(!nb=kC~gP93mvWRYgQ$Ec1SS;!$o8q^P-LQaEcPaJ><PlLxwEl0+{
zgAO*T4No~0T{n7m1PKwIjUFS&zmTwsIB#*MSJ0B{GR^6JMRcb$T)xV0Ck@{v4KLqv
z<>(}kwt-E<fe6_p4VR-0+DXG3)wVx417nSz-FOHQo<<2!CN<#!eXh!;J9ouC4;lqg
zsM4t0H4hEnqw1zRcgFSv%4w%ZetSeYgEbEg->afCoT0J3o;`A+oo@JEiAotAwv&eM
zQ~x=`85G;+*%2f}p0&?o1WBg^4}p6?eKNxt6FcD95iLY`4tR`cnbCoV&^)L{%ydS@
z4(55}tNeq)L-@i&>>XCiXFA<uhppoZ5uU@6h*=&2G8_A)x-`@2+4al3e&leAFGW9Z
z$`G8hA&+|n7u5HkaaKl;d+g~HJG2)&oFGJu9e}7BY>r$7BIAU#TaM3fFLpSkYG*k&
z$4&)xfe6njsmt#*59o~gc9t_Xb|$bV2Q&&*>{+dOu){g^%(Kqm#JNC!oWuyvInf_m
z(0LYiIPWocQmr1J!L)t*=bY=iLNIq&^Ece*J$6uhC4-aR(a5+&!F=`8=bV-{;}Q%`
zbhp@Bnl~k3_KyLu+mwXOLqM7{C1J<nKx#E5LGLK@u)U?NH3`+@d8c1hO~NK`sEDXZ
z*yIh=Ty}RG5D_&AnkkvLw=}vop%y*wlvmZ}MTlqAChQIXm=IB$NcPr)c_1Qc6YOr%
zhe7og_-wA-Y^S!c{Mm%<tDsWo*@W$@fWno))ElJJ=q<XNqqfa)HdW2ZKUYSLa}svu
z7#>8-NfetQD-aQL5)4@-bM_VwpPSGd;l2l;<lKbKnm|g<P1vjnq~zR0kTrWt^Il#M
zf06fqm-7#o9_!`2-lWHRIbri9MG*0Ff_yoFvsA);NSKL&UAdpkbqd3+S0{q^fIec)
zdi6-1Gq0>ZFe5}{)dyw-BCB4^DBHvOh<4Yh0rQ-ZW$W@q#BA#lc9sMlimXd8OEEwf
z!E6m`<vgc)NJG$oK6>L@L(l*q5*iYAAPGc5LxO?in=-QM1B`4*gtjHZ#jmLCFSW|4
zq061e#zIF8{9$@RAX2s@Y)=S8%9ey3A_M6Ow<J1jOPHQe2)ZYHKM~%VFg>BAQSNUE
z+Y?$6J>dt5peO7j9`RwJF{rvU--(oe7}%5lsKtkYJ%LF3@UlJoh%4+=*z??Aej{gR
zUMVt^*_l_0IL6MvsxTvHr&yIe<>9_8btVc<s7GFPMzz_UXq7M#+E;A4$3*Cj00iy{
z^aDiTp1`y~1nv>j{stxY6%*`JFD!6=TedG>L`=Ic;h4{C;GxLA1fSW+%2!{B$YwQg
zp>tPRbHdKwL8M4?!X5$-q)2mu!4J8fBA~<S-G$De^27P3h~W+=?D@0s2vdTTEy2@Q
zl-**32S7Zu1j+_dvL#S9kdiHzmEBjAeSE?AMNVPW@j%TGg&L?Ch=}8Xnt_NoE^59P
zHTR1~zD*P?QuT|Sd)j=PXq7T*?k8$KYt;-u;Mt%xKm?u*)C@%6Sy6MA*7OtYoL6U;
zINi$5=ZlD%&j%3%4@J&P1dY~3Q1c~q$5Q9E?w9gKM9`(cGX1ogFNtNg$x2>7(Q|Dw
z_xGjF_E1%A(k5KURJAr~6D|-TwMjc#2I^AuPe&x~`ibUe<^J)y^NYeEv+^=z5@J?f
zhL~Vh(k_lt1{t%G^gB9s`(c8}oMh-v$$yUB$Hzi4Q40g*=Ok^^0x3TyX`>cM)XqtE
z_*2qEtq^q7zK{(6F=?XK(kS<0(nhT%5w&xZLDcq>R5~x2AHVj5Vn}8H3#2OZk~S3s
z5jigzq~d-uzF3$vdy)YtXJK9`@&>RluM~L$SeUdK8D=CcOyX1rq<gK5MwTWE)~gLG
zoc(Q<CR=qiUR5bxwLEFQU<4p>d7vgB5|<}!_X<Sf@+4j*E>bDZuu?twrgK~6%AigV
zk+3qT6Hu6v_Cg0B5>_S|XvpGbrNr_o)h_4!xN22if~ag&(jGSe4-!@-OU+U%5DBZ2
zcDHP$pw&sU+Z#a1)k)jQ0V%mU&@52%2AZuDM_Xq!I~1Uiby*;-SeI{wxZAowv;2#s
zb)wl-?a^#iH1bWd;Hgxu@-630x6L=nVCYgMx;<%htNz$P#y%OSmcI~rGEglLktap9
z@5|SrRnq9Kxepth58CzET54MaRmi2CvU;Eaq|nw<zWCEy4XaRR<kQknV{ZE{r-6I(
zO0B!|2jxC3weAk2+^411-GR9Kr==YlOO3k=LA(2o((q@c#@#KAayv_{yIT_OzN=K+
z{ZDOm#pyOLm4?Qr!dDeP-L~t{2mbxxt`9$`Ztv!{RTtiIzMC7c+j+#f4;C}MQ>C-R
zrBa(6fK>HTsdZu?kGxdM=wDVJfK>HTX<~fJtn~?js$%wWDZAEJC3c;dGA;q&zlo{K
z3KT<5Oxa-LU!+e=1ujt~sk<g+f(?M6n$+cbN(Qe<U9P8OkebxxdP)YVN#PP-O0e~h
zMxIU;EKn~VbdI!nIu-2y?=KE9D`m#A03^=h12An(AQES#Y_I{5I4gxm=&#57iwS3|
z2M;^D%4g@xh(pXyIp$^}cqlVFbxlWinhYZQOMJ~$zdYhRT|SrZ-RyHj(%jUQdS{>T
zP-bq5oqf{r^%wM#)gA!ty%cB<NXeH1?Ey7!puPU0_*bp=02*2C0cq>2f%bq%dNt4<
z5J|6!_U3UWSa?7*vN%<+F}JeCi5Iq6oC?0S9w6#lX4KaYfXHQmDu9Sw7N`%1$Yr9w
z*QHw-K%*nMROp>lxcHAUoLi`V`n5A*EF`0T7$~1h*%$#*K9{mF0>trhsSfYpcrv9S
z1RW!*QsLDp6C;*Jxwld_Ml6XKc{>$!2?N9`Yf`35c<`9hxjVpg2K+@O)&v>`B5ciN
z{~RE2gVFF{02<y9_$Lr`YzQ<AMAC*p!$4gW4a=u_16jgL6)aIL-#9-k-JGH?kh7)+
zvX$+FROs)iuv`UmCD?3b6Po(jac9+tt*P*EJ$YvSq8-~(;lckz;UU|F5{Uaa721io
z-v!bzf{@hDPB@Q`{N(?Yl~>SDQ{e%5X<~sLsqoOt(srjpO-N%J*H(^vCp1-d()noY
z=PA3-PFGHp{Et-l=Xr6Wygeyy5f3W2Hx)X7IJqWN7a?<5lI+$qB$W6?%3ca;D9GKH
zve%Cq3Uc?S!tp+r1s_U<S`hrRKrrV%2uZzk%6X{g;Z(SPzEbiEd?aO$>(b&R6uy*4
z>bKv4;_}CA#sFaBV}Z*8sot@`<$)AECN8gciVPHAI;p;M+L>8)GG9jA{A7?Z;GxV(
z$ry6z@IcYpY4x|$PTwA<gM<N*BBz6d0i?)jNf?)8!{R_-WO_O@GgooOxma``KTT%m
z4{AF-Z8IhiG1JpFV*(K~J#8~PkN}&WPRvZ3%q|3z*=MB5?2}~6+Ca%Lb-Cv*I#;q~
zE&m+J@pWmt2m=$(sY|yuAqC_)b!mnilHUeOil3i0y#s)f^V2r^fRvn{w!H(8lJnC+
zej6y`lErD$I{>K5;(Q(C<#=(vtum-voNucP>K3PozE{3O_*F+EThax`a}Qp@9mTD;
zr1>QM37Mp=7GrPE6}#@F!t(8Do0*^@Y<t?#+pC2MVcXMk(2XSdYO&78>VvD?SIR%m
zmk~36oVKsW@KEOCG=uvZ^C0Zpn0x78=qGwKrp-QXB#EfTbO$}1D3C&pVxjl+gIcjl
z)RYc=qwf8#yQy7My482NkX|YP+ZX9@dGR0>Z|$~Iqpo)Q+yKGcdBWdF{UY5VLwpno
zw`RYtOmA4O7L)Ezhr1P*nZoa1?Iz10m>!M4DZD@3-ppzPDZD?;E+jcIq*{#Gth%&z
zN0c?E!{#V)h!kl~cQnhQK#DY{Sr(P81Jz>0Luy8Aci0Vw(qX;DUWgPqlx}NQV}TSo
zlxBCKY<8}eA^4GWctCM?Q^jlBxT!J-=93Zrrtpz;OyXbKC&TU|>B|0AIn4dFs7Knk
zca*iH!^S78^(P}O=}z5k5t(*xN#F22y&=0=rUH+uuiLl-%Z}!Y$c+2Zd=Z&(KPpA!
zu!m}yB|oO_iMqFUKb8)g<wuAVIhMZ0Tm=K9$gy<!_3o?kjpCqaWJ0FkwcPHg`^pt<
zCuCUqmK&=F;e(Nhnb72nn$^MWJC>j3J)A!fH!*XyF)I*p6Eo~Fk&zjY_??(3o}4iY
zNkY)eE0Z#8ZI+K`Ed|e;lwoO14!^P_S#g<^=|8|dA$~SUyl`43bW`#E!meulByRP%
z?;7{B`yrXc0s}^zma!|hKwZEd_70?C(=vR3BlZAdfoYjuBlTHB0`=b&BisoxFc>5$
zZ)PTRWATYXeYCt<-qAh$6DYyM#K~r6Y!-u^ht15`H%}naW@dQvG!K)h-kF(_8|=gM
zg38QH*B<UA+443>a^-?dXld?TC-;Af#_}_GisZ@#`KL(CEXY4aVrGFn#pqgc<$_Gf
zQgkhY5yYCo$ihr`NyZFDERAxDGIlUxNeo67XJjzabd^jhb6w8zOu=5oLc^Y`muHGP
z>n$c7Bo)1(j&*g*OWw%XgMT5StT!^ut4v3CMIA&Jt8!IwH_EZinULNtEmXKxW!NrV
zt(ib?sb6~T;MiLkd+smS+z2(ptBcHjbAt`b^=hl<_AGrn6Dk*F3K5>SGd*r_pJY=Q
zm{ie_;fBt$_VDU|OE6hl1xbgxFi@Z&(_OzR3Pfr{rpFL5hK5wPA#=lEmvdRbXnccu
zsMPHj+mNr9tN?6~dYQW8XdBgf4xo;0%-2g+05(d!2pHs$9yX~&%I#mWDPzykh6vB5
z4Bw}6HjFUg7h7}VQtsaiOSWc0I`D-G*VYWz27F{%NaXLxJ(6+9gi3bg>m;iHJETtX
zCO|2Iy;1GYy1PmmGa>EfLWHR?)4Q+xzlMp0uO_woI`=|JQ@-YMu60wU$BpEsP<U`O
zvOiOBRGsPO-WuJX;Uz`pP6tZ@XwHNVsUMcP{m1glBrWKuuQ}7n9Ebo!yUiJ9@5Lv9
z_+)b?c?h4B;gb+_{2vVB-%_Z-!65!EN#g&Y#Q!O(PD!5gRVGwg+)Vs;D0hzy0hu`A
zKdkmu5GO#*YqtObsnb^()`2))KUBm;NXIh;HGZKSudnWVuc(uHpu0OEdOTAU(_YTy
zMy!pX9<z1_L>$;0h7P2%C&Y-djB}0D>!ccZz1ux@G859D`w0=Alag)NDh&j&ymGzU
zD|RX`M^i-(@AmLe$#2!(>)q?RejB&~L`r@ut}uliKrrF#ll@$`9_X_FWItql8ZvB?
zeWpJoM1aVe?Drg@U0fh_ob2}+E{pQ~jk2cr>d~HVw~{Ho4HKxynBo&A|Dl=i@h5%t
z*PiafU7z$r6;`r1`ICO%e(o&sr)$K^r}}DCFZbD!srl-Nn@^SM+=W98iAHMug89!?
zxMNCdeLlC5k@gVYDxUE}$`892<pkRy_N_u_xyLKq-xv0p<%b7pr!oH_@>xIp$UjkN
z<a0i+71A9K5&xXyhh9`oL)~6ufz%&tjxhzIfjNE`)0G1$JI7~Zm3S!-FP-D3U-XTa
z3PF463%>28EQLC};M-oxlEh12@bOapK0X9*h}3Zy!pmxZANSMy`Dt8~Kd4ZhZ@=~i
zQlUEE(@BjQh>O<wBo9*|d9SSVZ+w{wNhitwR4B^h=lS95<qoh=cxW`T&@Wi2y7Y5Z
z>xDk2Tg{N3Yp6KyYq@v(xor!_yyn}{B2=FDns1Lv1M<Ard`9ciK><lbulZ4PnYus*
z*_xwmrMtt3rThv%G`jdbRpPp--0f9vdEr<n=0$m^ZqN$fPR|1=zQSh`*gQbG+ZBG>
zTeSK3R~{ggcII$YOQC@){2PN>XeKRYz|HPyxs8F_rq=ic9}~KVxQ*eVU*|6NXO%Fz
z#<yD_J4)l%`XS#$E|6M-^-@?7kO!>wSqfvHEs#Igt6|mdJtgaX+r2=9XT4Zrs&r-@
zB}g~r)>XS#6_#v5vW^3&LiUN>*Ch@*O7Om~z8vH(D|z3y$L~Xg>3yH=8v3aFjuO1v
z)at?R_L6OWNV_5>C3LrmD>fKO1m{O;@ep@o$wz+3Y~JjsWAh`QrT2kYepocJ!!Ova
z{xH-X5Z&RkQ%E9Um_)!XKh!7@P&tNQX21uXcJA`+{UAW<y31!~U0e-_tL^f=M(g`R
z(7yj!;QN+BH9u3o8s@fb|CzY^J(z>LwD$M~2QkO!uBu0KQHfeL%&oY3k6)D3iL{fL
zqe)#H=9b5rg6sehQB9H^I54<~d$D9${-)t>pV(eM)LZKpB0PJ27E7fw?Iha%Le&j-
z`^UZrauGzKN-mP6`%Yqled@w+cTjAfAL?c0hza)jefo-u;E~q~b?*pwKy1Hnb2UVG
z_WR^&+56B*vf}~u_6WBkcEAr+S~-#&5BLKHy0Vpk^V;a-)YT*1p~>bvkL1Q?;rTg6
z8Xk=t@e962H}`7YbW$@$x}%~;eAYb0T*Jj&Eq>^zNmxK+g3VrYAZlsxJ@a}5q;)O+
zb=|blfEcaCFFR_DCIoG?uL7f43N`vFNLZF63F|Ad;4$e8`Pky5UobI}EiB$kZ@9go
zsGX|6$^9gH(l08}Ml2R1p2B)2rhwE8tluAsfIQ=r&-H42X$s`e)9UEWZdL4bo=2>C
zT6nJ2JfJgb<S4f!cE-0Om11qpGk)(rmWTG9Rg;D1tZ#>q+<isKvpz$}q?Us<&#8Au
zxvA1~fyIlpHP4B~WoJ#XSo1u8a&*^i>Q}eA9aZWUw>%EX^wcmQ^SoH!)D0_Kz@%!_
zD7T|0FMuG^`Ei34tQW-Lx@yt%eHYd1x42&HVvs&KR|%erl0Hf`4{7g``uY|(U2@3}
z>D!g4lZ@{!`Rx2NJPhx~WmV77ZmMKl_Od=?csDMKKH^#sqr350_4sJlD;b{+nU0>L
zd0-l!<*P7Lc}8~=vTF5cH&!ws8`7V&@i-aYO~~>|n~}svaZhB`86+j2$X;%nTubsq
zwr{2T0M0ui8kv$Un1)k~u|9Fft?tOSQ?lG?AkI5NoOfzA^i)>u9qRTR3r24c^e!Ly
z8^uk{UTY4V24c;rS<;uJ93b91HJf=VYr0z@Xz#7b+V0j;s8UVVcDI%!-dmH!drz>h
zxQI)op3fF6Euy0P!|Ll5tvV~dExRgLdz(8v6n#ExUAVKj@a$~h!a%AAHZBb0L9?^C
zrwqink%_T^>VBttU2INZ4v6r~5pysah6nV5`t6-=b;%1^+bKX4YL-r6n{*wWB_q}4
zcHZgUUKp#(+71RPTy<GIq*^oK#PihfG49}!d4V-LYbTzU#nZ+cNqF&s+@dk=6@?`W
z^3N03T_De6Vpg7q4VI|)?{ZfsmSjVHb>@Ny(~>M#Mvlg?Bl-L#Td)Fs4HR{?SM~qu
zey{E8VpkdEj}*Hu%ZA>_svniP6=T83gkbCnL^sO<y8>z9vcRrD?7A$QdBfUO2->d8
z1G`!ZHCi6n)sn=n%f+sL6}xh4ReiSL-Q4OQxRs%3eYWUYor=1M9oL{qor+ZX-EJfX
zG<`CEB6p3bLn6P6m~pMT<8JqslC@d;Y6TIVwOP55O;pxJEVfS7-|g1M*5#QrRhaJ6
zJT!8>dgvbafs*w>P<7E(T%YBL6}f@%rf6hiwtxY^J?@X%Zp`v6jYP>!qRscRp)EE_
zz-SYK`Me2872nI+lih(l=)Ela{Ul0&X!E^nYKzsT5VSTo2imk0ny@+0rX`6sH>1t_
ZBab}#@M90(_~Ex#bZe!4d}q;h{|AUoJF@@)

delta 48324
zcmZ5}X@C?(()M(9byamu&-6Xh$IxBFB_K1S$l)=AAmDnRtgh~^IKn8rDzJe1y8C_(
ziXg~+ND6Y_aw|f~eT#q~qM!)ka*2R)BP^HS6PZ~Qt3PleD&on=%*e>dtjy~FtgUY^
ztKai&&)dq|-nZ3HeD6N4%zV!t@VKvHoVnn;u&GCU$(&{O*Qb0}e32znJ*J}NM6^pv
z&SI~p(eC=}&7k(Mee(rhecdkfXlFc`F3(#%I#yX7I(2W~<<+WguUpSob}s4iN{@zC
zmu^-i`-fL6WJAyEQP$V1)#apJscJ!`x?9yhUa9Kd!+O3;x7RAWb*SoK-St%4HYImI
z{8$P70n~0?UU{LT)v0rjs%|e=b?8*tty5KZ>&2?7uHAW&UAlF8p;PC|mrSdBrx!X`
z_IRaRl~vifgY`mXr_SB2E}g5au2tO}_)eW)usU|>YSnxBm6v*S>iSYuwe|Qlt&UZd
z9jdx@Z)jCjw(n?KydtDP73<oq6Dk6<`gh1uAqr!=SM{(u2}5KJNTYp66kckz?O54E
z{B4p@hpOj0b%qWEtxD^$s_tE0=~mso>d{xIy}DJsRQWm{_UJ;*fErkB{ueNvU#PO`
zb+4*2rMwicUuw0qy1vp465Xq=wNa&YSGO)NqP8fka}~P5sW#z~Ew5F+e!JC)EH+VK
zN!QBu#*39N;OTR(v#-YMwe0&0Ew4@Jl42B^?M+q7QF0>cRfWCqpw^-Es-hK|d8UuJ
z3b7M)9MVhVO)bnHd|b&BQ3u%nc~JXNDH-6^5>m<or2*dLjSdN=0p6zfnw4A!4~H<{
zqgwmYAzm#kWfbCiBQ+cnDnq>W?l1>wTnFTMd*q{9$XhzzEyoL`@!sSOQprnF-bO9W
z%^t3#M${?no3`4P(kWgoD}_|(Oz~Q`IV5zZcw4tK2MQfuM4iFD{IfQ=bcU<rgU$@E
z)m-ZMpfkgJZ>2d@G=dgU7uW-y(1t6e3%pvsl+vKIz#GgsB$O6->)&S176s`M^;7oX
zQ`+3JPrX`!6w;ydskgAyA))iB_qIpP4^>l9F)Y`4bH1`0JgwDJg6q6S4fA<ZRe8^C
zV3mK<I^Mj&tMCRTCc0*WH^PyL1k?s^GG$Ie@t{2sZL?R|#xDL%n^=v%Oe&K2Xn@V$
zTnEJil+E4<?^t>Yl+E6Bkr@=i2BFm0=JlFk(@)Qhcl;65;R~;NlNmL09hRC8<`%Dd
z`+qZmw$-cNQS-mKXwEOa>O<xk#3B`Te&@}Z&dQ(BPKUqq8gX+1Rlq~;y4%Z6UC}?d
z1q7_#?Ntn336QXQx7QzVNR+eN8w{DRb4@(_k>x$B{j20huaYZesG>i51969h%8%Ye
z(rn08VEul!@L8?2-F~O3Jc@!s_d87m5(xX91_ud*{nX&pt{@E})A#X)B2qNees9se
z<{X6=0)?OLyDGIZPsPt}DPA<k&)!^1;&@TY&)(u&9g>v1ca)o(@;C-uz89POoVHwf
zE5KfEuf10Hx>(h<vRjYWt;!A^x+5|mV7}Jbda3fcs+X!dm~8w{hQ)60pk;C!@|em4
zBWw9@f2_I+0YpUZt}neJ0-%VI2(LGEzb+Q<?>WNi-sSqBiAas8i5cTs!0v9{`#6`l
z&MqE98(KXoUq<{csd}|jhpNs!xD{P6O;mR)d9KSVoja78*2A5liin4J_grO<PA`{8
z5QMd^l|4GjlKCXjgMu>x9)PH9USrdGwndN1ZZA~zD0!t@r)Tk)CXOCl?e2RYYWV;v
z+P+iQPEbO<x*=-6^lDXyN~@}Khpt^PD_Qk0KbY5|b^V4`=Pp8<hji=Dk3B#k7ZcY@
z-S6O2ixZW}7}5Gb=qx4*1ZLR_Y@0`mU7H>&sp$4qolrD|{+Fw|cSk*7B%*rTHjh0B
zL)*4_+_XT_bS3A3daa%L_%YF0_4(8Q``m`UofI%<UZ+OW1Ch^nD!|0*)?YXQp0HCL
zv>HmO$p%$vCG2W{BbRNc(xNp@)E!gv>)mPYb3LSeWj8))Km1S|R`$G>t`;+`MXmuf
zSWR7m)_wA>mS`wcv`3e2uQzmzL`S~TS<HnrQ&}{#$qAD~NbhpyOPbnvCkd}~uwj;{
zX+x`;@`E0gFCvd1k9NwT{t(_vvd?$x^0H_KqWC<|r~39?IzQj(1!Nf=tk*ihz3Nq!
zzECO~oI2@+PTi5II8QtEs1FyV#&FDopR&I`uf0*-mYkM*xmDS<>r2RLP+XVmQ>bex
z(Q~i&s3Ny6p+8Ekd*M!9U_3b*siI<CkWu_GA3(cGyBb=rb?k(S3b%N?s@tob+Oy*s
zGu~8W0h9z_Fmwh?=c?CG2|lu=7f4?c1E%sN<UpnD^%t~EMK4uO5FSNEJnE(9){+4T
z0UBiOh7O5%)JrY9$()6$5n&G@a+v+i3)&o|#V{AcM{HG2G7tjBFf~$JV$k$DOueC=
z`GJUwT10zaRmR$@|3^!Cs_~~2<~8WOulmJY<xw=~y|2a!_~Zl<lhgZZ;aJscMoa^?
zXo$J_5p9&Jj!}Iw4s#y#Mx$B~^E+Z%#P@-!t@M~#UJXpv6I7*UDr~V=m-^$Z%S)P8
z29B5)J&F!XCaB3GSpyx26Vz<6c~#6+i2c)4c51%ypVl75K#ZQ|wuOPVnC7;H0i<ba
zgl7#f#sJbZwYZk~zJke6iD+}xoNw%XFKdOK@LbhMh}lq~+3+KjfZ4Da2ta=1G!sZb
zex%CT5F{W!QZXCuAmeD-(iW-8QntH`_DwbZ60Hk9)D}6d3leIJ)L5LiE=aWQBDG+t
zY+YjT*0oi2iELfTgWji3>q-_{cQJ3>3T^>r*A=Q#lq$1W=|8mFT7wYjh@vR)wiRk_
zh&L=q*t9|o^W+q!(;T}(O{L8NqADQQsLBngH>`(Q_)8<hHvU8FQ~{O)N0aFqHCN2?
zPzT%^wV<X%r~Gk^TBol08#$h$prba~UAk%i>#5k}V$cBCq~?mQhY&C}sYx*&Kmucv
zTK5L-I6OtzqOyN1^`}_#9`Knhj?dr`6t_4&0}_f`uK5hF_}9{BK){r*T@y5P@Yjyd
z;3<&4c6<gTkiI6L`IHhUZ$#Ur=3HR&U(xK~F4c&be@5lJJbz-ZzN$T0vfJr%FoCq&
zaTSn2+D)$VC|AM5z3k$v+T#^_9b3GL2hFk9=^>CL<n$0oAnc_cdPn6D=<37vyRT_}
zrQ)!QLA`uf%@w(lm-q5vHO-d~u#|fFuv%JX4i^|8PubgE*WyaWDHnsf_LQ2-7Z6aQ
zu05q@L|g(%N)(r7Q`dT_YtP#?|4%FRG(YcRP}iP!?Vzqbucmo6PCCFiuio6q?2mT!
zAsfG}=DfoO{Xgy9$Ys?RqjvT2Wc-S%)MDA;{)g&_G#oS^&-4@xa78VyX}0CUDByRM
zjeSG=bM|*tNs}K!h?Y;ktC_4h1#S%*<XbFUtxe0k<x`SUh;w~KHOzat3~YOw?Wor7
z&%EtZilq##kKXpxu4BHyWl-rpta(qZlhwy}%_3S4_3^=?6<*W|!C;6lXNkR`r?%V^
z8RGL5@@nyPd#F#jfmf@x$gn~4k>djikfA<|oI6pFheqjeX7tipW{3L}zH}reWQP0d
z)#ocM&>%;$j=i+O*^xe_F1Hv=;`-`0FwdZ$AcSg-u?ybTUh!nc_!RCD#D&xtA3Wk2
zE`)lGV;}a`p3RK&AyuJ9#5@I=aX$1Gd>14}%mj8rAMNq%1lJ^5*G(Xk24l8@5W0Vs
zJ*tm3RB1lTr_`57w2+(SYgpotuxXaBw56GEYNSJ+Hp^Gm!u*zc3v)q4ozFV<({^R&
z`;?od5-sfJ`x-Yf`@n}Ggc)J6{p`D%p;(LE+8dBsOtoK4BUg=RD}6beS>FNLs^Cf=
zmOf}*#3jV~)$GZETFa8vK1HVjhzToJ`;0t?gpsR#p|E)ySHZ(|Z2ds(j*@k*3JukD
zK0{2ODj%xrd<gJWTm`0VU?qdJ7fLqxglCG$Lfzmi5;HX-Bud%f!%Y1MR{^z&tsbO3
z)_jvshFn#lak<GS^97J7bd#@k18FCX%T2zLQgf|_8v7#J9$(H$`_aMLUEbgxA6B@x
z0NF=X-peKp)0&j*^~nheOhE1R`9&ZG38=k3tW6tp6+GO>)Ztpwl6_8<eLOnt^BGZI
zI!LJO^A!}DjkpS`e2~2`Tx(o%&{ZL4KIlW(q;~f4Dj)R43(T9i3IGnX&xdP`N)Ed!
zRL8?UY^(?ss^eiFVxTY#-g=bXFhXluanxxgAJ3|e`f^3Xf&{`*UmX#7Kmy??`SM(v
z=X~VMC)nr_+Wh7xTnI|4PWWU}1sOn`@X7T*NI;zMVL3Vu!yIu=yXeb#&+hx4Hr7+;
zqVOB9s_7B!O-<>ospdqlse^vU??s>^o_!zFCV1|BOH*r^A>>oy8Jet@rvBwR4$663
zQyZi10&ke6j0E0HpM!@GLp=MIQQC(}li`|L-_@oVF+x+Tke$gA&_%xYG<CAa97d5_
zBUcz>hsS6!Pstcf`U1G9?HEm_f*@f9MB-)}u7ii;*<)k1KUIv^q+@D)r(?V(+Y2NK
zX%W$BAb~JmL#Hh@IRp$_WbYiSRrpF4X^NkBt;T1nMH;N7o(2h}MO17V*8#PdwV15k
zT(VeGL<*zv0kBvLi}gH664GkbHd}HPIL9(JZnD;@e3@%0O-swPT#*xM+&PwM*?O{2
za*k!%jScxw(a1MevKmvgCKW4P1RoGqYSO(RgSxKN>Xb<Y@{N^Rqg%`m$-OiRgX`Gf
zDcY<y>s$zpxLPisqeuo2>oge&KmuZ&hDb2S&mrJQJ2hpurl!XD*_)&FBKw1>T7R_~
zOp#w|JZIkNb{XZ&JE`qxYY9)0U+&Zjc55PgCkD?iztz<5HIcnb9`wG0aXfpMEaaEF
zG|JxhWVkhmw&QiBFtx>=I#YWpSPH_ig7WS0x?c=$7zecRI)?Xl(G-5#LTtE1`=)e?
ztK)~x6x}bfeK-Sjrs&A_`FaH{7Ex!~rAxIMo{E|JHFq=7F*EgR?q&jGrXJxlHL7a@
zW2Roat~p(ln;TK*vA)Z+4=d)m5V?Su=R)KHVxAsxJSi6t^YmJE%%ujebReRxwL34@
zD%6U#E=B;|xK_XBO95c4)w3ei(v$!&*6O7<nJX#P(v-Z2y3PK1wboLp*ydv70b`qf
z&71Oou}#0`O?klBrZ;MAo)%TfN58V?*J)=fcDfMxfY_<aT`f(?2gFXj_!jAq`GDA|
zH@(%oirrtB5sauuY_?wO>1}bu#Rvl9h@R_oT@V;Y^r+*YL0}xwGnUzpcE&LNB3fTV
z>2E)|QR}N!<4>_BzyrYaHFCv9DM-NdH42^14FRUFfzB0f8G>8(HEQ-Z#EvJ#X(JCR
z{S38?uPG%9@#0-#(fUzS!Vz_l!Pk#%{<lX}=kDzPmimK@!AIG6Af_;o02*Y-Wh6+H
zJ&4NY%Sfal2#(VyZqq!?N4Vxk;1nZ_Ykozxj4<T-5h{QfVPGvV(vPr@Q8~}ZVfK$-
zY453_c?Q;xBdC*fimIQmw|8nI%Rh0T!36Xt4m3zWe_}-VMmnhg`V*sOE%P3ZfQL4F
z;#=*$3fo1X-DKNEpcrc#5wZNzd5pCUY_h&Bj6j<$Wj}nY^(kNKLQp_k>O#<Tywr$@
zUe<ZUU1}gz{u4I>CaqxOztirmSm7dgfw00wpxJqaAty$i2jCS3CdSFg0Z}bP;H`F@
zUD{Noe5;Fr)I{CtV$l4&)oEqupxmtna_Fuc0<zngwnyt$vE4<W>3O@0Kp}X$A>MbO
zR0_e{4XfDft8)nW#X)=F9_?Lk^+7|4@o}N^pnK4Wi^vZWN(T)@ewuwiBFr5$O2lML
z<U9TlaY~;=Y&5w5ICzZ!UfVyL{Y8C|uAViN+NsT|)vD1WE%7c4uivoO*&Z8P_<tvR
z#lN+GD9s@w28^!gsL5HkCbai))^!Vt<7de&mU?+jVANH^e))j5%u{jI1u;;=tA<>O
zBeVkKs!<@qAxMB+HL!5mEI<&3``XVR(zbXi`ueXK;)fx9{nGVyg~D=QzjS?&!079T
z>(3J2g|Ix3bv>-jsTk-&P*fi1LQqs5=#TIv3mS}~@<4yR27DCj3WD+wKVQr@0f7n(
z@ynqL5}HH&a_EAD<`BO#bae&6c%+~20No1$J~q;|Apjdjx;9Wq9_dztLh?weM(=!#
zV1ysrpL59XN&S|`!tWaKMMt%xTFCYrX>$oBNCpk%<@UvsTDhn3a=)DCzy<1Zzf6!o
z0(H3`vn}#GQo_^qekGb3=4C(nwG^v+*%!6hX|1cL6nrsRLW+y|^SQ%;1ju@SIAV^a
z7B*<@wvjbCtBo(+=$A_dFrl;2U&P<hkqmS;`WxIRwrmU{w=m_LHmG!qTMiA;Eq=LU
z1sM|ZV;kZ<8XN`<(LMHxa~kuO?s0kmTqy1FCq;My38g)L_~GZGhG^u2cCY_vn>=L)
z-I8b+9`wuU-{8aWpdZu!xI!$3vE4S#%$a2W-z9BqZe$#Mg<c0?4S*&dZz{Ffn;+|S
z*dw~G)d9(840?!W7;mCr>JQK;VFH9}&QjPTe*G4EuC9AMS+K-%9|BOAKnm+%DHK3X
zw6_`hXC7;!sqp#`m)IorDc%JlTxfI5oa6Q)Q*Wk(=9t)iSb<LP@qL}S>`FjiRdcQ>
z7x`d9d9H~7HCzZG2mjbqzGgq>>BFk=moNp}HIVz*L^#E42P||j<gBkvFQw?5@l7AJ
z>jG1~g(f@B+1>|B1oabBwXSEO)(cH66|R#4_99cQb3F@KcJ&{4=-p5Mz(U_G{sS0B
z-x5=;c|8~+*-}%z`Fa+D&$2%lhETHHRBv#ls{0_tR9Bd4J(t(Vi?P1aRO?>P!Wdrl
z2g8sbt^R`)(w#N`h2O`E^kwZI%tv5eXR5UczS?O;Bnj(HwfOoXG2?&s2mC0O+<yRz
zMbyv#&=zrwvOm<Q04we5;dk(U`@*coV$JC#@X&EvO!c<wS?IW}rbutNt&l>;eQBz9
zTrY)w+jf2PLkj)&)gKhmZ`)0jh=V5Ntr%kJx2Cd(oeb$ys_~Z?MR<ThzcsU#^hCr7
z?OU^W&oxg}yxbGNBP?OP;uW5_%TzPhvrwV$O*MNx3)s8KEt+r}0R5w>95YoGjp&W4
z@wa0H?KA!88i86vviR6FBfP?hf17Hlg!f7#_PH*=SukS1>pPqU>;r$0LaQEp*;H@5
z9t_QT$n8n4iDv!j`XWV7{%opEuPKU-JYuR9*RxRMQB%FsY{lyh<X_p%QN2y}S5wSm
z=n&dA`_;rQ%A<%f*nv7_=A38mMfFD_r%Ydn$3MOUbsCY0$G_TQ?+G;DzV(3w#A&le
z#<Wlj_LU;)8P+1E*UX$T6`uML6EbH=2Kg~aP-j`sm|mPYYl>`#n8YQSVlIQmImcGU
z^jev7royvz$WRZRBbgE|gDU+tGOm|pe{*4|M!%6rYt#rkOc%|Zx7b5*y;bm{>5K9j
z@eQU+Y(iWw&0aDUzK84s6PlMy>}oy$aO@UE)XOIOHLgFHz3d86O)irV_P`(n>Wayp
zD$pOzUUA~Di0M~I2*D0QsLEB7Z7k4xX0N(PRF|tH)SL^UF29?sW1)U$=66%>v|=j=
zLcfzxQ!WHo=*iX>>bGWk=E^?AUJqn?=0fH!E`uTWCQB#u*4a066~4a#6KGTOO_HHj
z!FEvZ+?@XGjRabycdoC1w+i2D>BF`q^wLb9T!pVQePBYfPcCNg+CaxfNkn~z6(#k$
znRjyKJOU<U-XR$pVb~WzCdQsk>di8Ja}~bFMNHz7%pF_?ZPJe|OzIVxez^+I79c}S
z(vM`yxeS`*T^35|&9m?3$`-+P2xQ(RnZF=E@<+5mxjF0D%PIZII)ieJAW{{t>c_%o
zSgtZMS2d4%un*;z`&z_fM^gHc#=~>f27DVzJObp1Tm(Vd=n@>5_a1RBP}c0H3}C9Q
z73mk1imACWAq5xRF*R2vq#)5YQ*-5V2P812=3=>X7_ko+csi3+Wc4HEGhGN;G0k)#
zDC3%$8xactr~qPSZefD2x%||EbJ%m1eqZ?<7l9T`b6f-}W=^hL?mz_yb8@lVd4k&j
zYCikf(*M$8zKh@m!u;G^YC9k7q$y#3Ziv5lAd+-)@#0}6Wn+G1W7_ImWv$(_SYP3N
z4u6Vu0v-TnwQC6FXRC7~VquM^fLWa@0z9E0vt6BAyf#-XtcijB9=PtBT=ix1ry%;)
zjA(~*b7t5R>gb2`x`%W5Hm+C22}bQwuJSuNcd8$qYs${$JbPA&K3Q#iITr~Fb*6ZT
zcDs_Rwz-Z2W3J|^EzA#T!@;EP9bmuJNWalrJs=>DRDp{c3<$`k1PP@90eQj)B$AB*
zf%MY?6(nDN4G0uHMIo3#iG!jC1a7;ZugD~eR%8PLPdsV%N5Tj>+8_-mETE<?dMvwP
zQ(g5`gCUv~kI}5d0@BGq!l+>ZxgZ7!qlN`U21i(E)?opQ1w^wFLmWIB9*`%rB#WQW
z8WE5uw5~CM_Fh1}qZU7*b&ZQ|85zI{EqX0z!V9(00cAYf-b{a_8h<&4k|U0G4JAh$
z9gzJGEkKVB$o>ZjLq`XS$6qtlIU)6dYba-NL&vy=N+!_8!q8%AsN}-Xabzf8i<(sA
zbbHOM`f^X%^njvq{{|O^O%Le8-9eI6AQGi?Tv2l)+JZpN_x9Y|^|hYpf&kvI93a2X
zg^y_K1IkzS+vWOxZ#DiDt0X)C-ui%F;DH3*dcva}B#@}+`atX}RFoW&7++IP{aHY5
z$Q^|^U-8^*LqKH9TnH@SejX4xwZnotZ44masU{bbngH7r5V@tpLg3sSK!m$a3Z3&s
zK;-O>6k2Nwfn6tsoO)|Ot#OToF$wrDueX&C)3CZNpgwKBPmwK`dU^+YrKLXl;T-|_
zh6+sLQu|R<0STNP0lcA-Bu3AUK!j&7^b~GN@nc6I+Qg(&0=X3IcClyf((kO^6;K=$
zDr#3CU&Keq0CZOX@lk-%Yqnj1WNX>d<P=D}cLh?d`1pf7acKPQ3bbfxzC#@zh-e1_
zIhO;T)CI+Q__>!ly?~QuT{`pQM>vSvrF##%sFnVrr}lvWe<|cu0|-Ee0?LtqiX1=(
zDPEcoi_L1SKiv4IfZB|kAReJ2hXd;4Xj4N9;~mG(0d=0oya6>0Q1tnQmA29AKle*O
zzBd39HT@+J7JFwPQPW=nm`tdqAW_p_0x1#Fh~zc>C6I2-YbrTZ(_aED?=nkyIY2zY
z7PrxFYJVc2h<9QE-c2V0F|ol066Ktrcp}O{JOOFlFRH`42`zdeP<)>(hdPe8=!w9e
z?lEU#MGNat<MZ|dck8n~<>#IF051IPd_eBsf`mEe15vS^4H5;P58%ZJQYJuvy2Kja
zqrchwl8ZnS)g>pwKn4hx0`jmbNYV))l^qjCzve}>NqIT_>@)Z19~gBe<;mG251ltP
zPx&xUHOEtGkSBYOcx=I=`ndb1<*AK$b;TppWqO|aAn!fFLGR7TQ~P?*L|*7ewB>oq
zYT&(PI(Ufa#IrwmO!xSjtjNP!ipD-yr&MWW9^x*!gWv#gRi4`0V}41)DUbZ&GxpV!
z`d8(j<;my@CR*>aJlT36QTNaCqT&bzNYwqaJS4sJ&M}Xgb|c&S7rklwjd_X)Okff>
zPtNNgp|UX#^E&l3Nc8l^yv)7AQm3ak=4J2UJxv0#r#I%cx!W90ugUVLr}x^gJ*CHe
z?e@C1Qcv&AlUwW%Lcx3U3dNBbkSKU>9*)e2f@#q1&8zok9&_*%#Y6};uYOzeD$S62
zq;SYS_Ke=s^UNW)6nfKqC{Lahf)GkMlqb&$fh46oywDS+cu~rsydrTP7f)p=hw^IN
zYyO=Vf|z-PZG2X5*Y1d02EB?qk|(z<^Z1_AkvzF=2@+)-$-}m#C<8eS$hvK1O(>(G
znjFcy;c;^WB^r4&MV`0csniR+73bYj=ylzBw{K~a>b%>xv{!td`gSknqIuM~z3uNi
z=>Jxp>79SgKj@55?|hjiKnNJU^X1q835?$P7#qS;+B)u?U*mphDQz8-rM>er_wnOG
zd336wFH3aPpKRXOErWJ~`?_V&PH^9RIm1H*W%SL*3_pe5?c?O#==_`o_MDD-EpKpi
zK2q~HV17P%_gMDhi+az}vH5Zi1rtzX^W_d8NI;Fv#||K$VDia<Cb5Ap>7z>~xjN*}
zlk)u{kU<7Ilk)L$A8Q8`gX&CWZC}=#mrr#n046FhHD9_6NFYqj4~thpAb~J79|;~E
zLdYj-I@|iP-lTlGi$Ec0x{JVbiG1mFP$8XsI9&^l0GFD{?(D4JRWZ{=plNQVi$H1e
z%>1wj?D^cKX69p5en+mKPX>Q%ujs5l?P>n8i$O0JK6W|+LcsVqUnZ&`Va3N(kJ0oJ
zD2Oxr`8i|lC%WpR)H<7~BPehM5xBm}S9av9boNFEEv7Nz*|AsjZl3Dx`Pd_)z$Koc
zMZeC+o`cIlIp5@~&s@XXnXh~gJX|soDu{!Ubxnsl?c03hAub2F-{oU($>jidSH2pk
zHtVAeg5)tju<&d8jqQKPSHxyCm;m}AKPWN*kkI)dUuFUz;ov{y%S?bsK0p4DFEatj
zq51KLd}IP|Qey|n9roMfU&DUwbNd}X1DDwOevyKJL`nPeWg-I-CGF3T{69XFh!o41
z{rS<yu4i$jw*N<qUlfEYA7bk3dPV6Ww;U?|P`=!<hYVB><zvf!j4%$f#4)?e>w3mh
zea!KMphEt5%<%+}z&MsKR|g=0aV#IRc|Kx1NCO!87S6L#%15*?_E>)LvxxH7SX5O0
zbMJc0cPRA@(gysMe5GFMf@Zbp-lG%i+1sdPm;FostG66{k^e&qrd)9x8zfA*k{=dP
zA0$k<l8>lQ3(+9?bx-!$8(4_;3|>PZx9%B~!xJ(<=ot))*Iyuk&@+hFU!&+{br5k-
z>mS6yl4q**gi?(^9YZJ-_7BQX2syy?56aO25-|OP7#)<KgG7GbKbRgF6!|$Zcz!-0
zDD!jTi2QtDP;4u5Es>uO4AyMU8?#!9p=SpMTRbfrm}{cEK|z^QODQzypkPhDo$7$W
z=0U+0f4yE2fqw8GibPl*9IVMV`5Z;~-{4@2>i^QjruUGb%<N^6*z+Fx2P?4WJv3PJ
zp6iRmp7*ez*k*U|vFAN3So^<<#Gd!CU<<L%mGHM=(|h>!_+sTS;`&w;&h}nV{j1~C
zsLmL>VK4Y}^D%D!>8SXapgbNL<OfH_1k;Wq(KItA2uB)*wWtqKY+5j9mfiPlJ*<SL
z1$|+2EwU&df5knWeb`4|pP3$%8&zPUf2Id9AfDwi@QfL3z&rYL*%?8(4~f^*keNX;
zdjt^34_RJceQ)N&pxkrAi)iAK5Ed&a3^vVV{(kzM)=U?OcC%)Z%o(y2ezquxqm~`}
z>D`pzq99)3JOf?+0?%eg`s>eT?VvpF2_|%Ha`qWy1b<=oDeE{upPBtMC^z-MgwUrX
z)Kdt7T+D7BsK0gF;-JEZ4K&Hp#UvDf5!f$V7R=cY^q9G(*GF$qmj$sY+6iUwO|Iqa
zmx20=ndL#bDGDakmk05t`d%&rjg{<`LHhmKl}=+|n+h^3gUBv=ksW-WY7P5wkls7H
zCMe%YfeE2CLA;YXAcW9lpRrzp^+VQYPXA!D2|}MylTD$wpE$#DESPh^?mI-UrALni
zadvS%jr|a&1nq24`ORLz^wvr>{uGOGJb-~`gMM+%3nWT88_W;#!449ga5fnFO%8Tq
zz$vk%98}BsFpwNraV}V^<a!o>&IQZvFt>-f0hroGg_Ln2HMKfy<G|C4%2WKhjkxe)
zTJ&FcdasUKFwU(Dy8l!4((~ftESR_!>ReF4r4rmE`om=q+%4fi%o?j_SgWymJyQVF
zB^%atte#?n!So3s8$vbc?iH2z?BmYe*OHcW1Ls+~tYlvtt4~tw$rJPmo<`U14>|XF
zOL6%~++1}ot~z&2tjbq<bnMcN{d1DOrW&<&+L|WDQ6ahU5#kf$sF2+F0ExC96^e}u
zi4$GKptjaVht#nlaiUA|(6k@mR1TkkBnv0H#)RlZ7tNO;a-E4GrA?~DVoN9M&7K1x
zRyBA8BPNDIA`buwu!$j=2Y^I$oEVaM0FgWom>80IfaFjfFfoKY;BH<TAdosv(eJ64
z8j_Prh)=XrLvm69iDIXQ<fH<UbV8U^J{9hP0KdiFHAP=ywA<oh&<wf7#h@8-OGxJE
zAwENH3CSECBuw8Dk~un&B1hj6LXQ5k7zKdaWuKm-FZHP0B|e&`&#KtvmPhM~T_L%8
z3Gw-KSExX&xIx0^T_LQv@lFP94B0&)aoPa{r{rk|kg#-5NS<~83C%qr=d?qJ77P1B
z{Io+W5UBfp*9KZM?04%-Yli(Hd1wQ|K-wR|X@>_8oUq~hQz+*&tNpQlfAFV}eEp7H
zQ#y3}#>aRqaX2L3)qx40I2^)iqcuVfb}F&XVw*nJ@6H?v$+tydLgondijV<yjFm3X
z@2+z!BxeL{L=rcIh;tvufjz&5lp3jWs|~w4Tu-u(7w8Q$VDUXB6hsl~SL!AB3P@D;
z1iQRIzbA7dB;SaE37Hcitk?u5THq9W?i2k1>r_Yvc+?g$r$R{dr$wO<#<&RMuJ6`Q
z^r`;f=rFdL?nkeLsqSOgTPySjOU8udzylMt9TWD8H3LW(JthpOr??6pj%Sxw=zlF8
z@2b#P9Uu0K?W8attK-AiP8y0}jACHSWY&A7KD>N#Sh_rzFnn@Yx;#igOb$zT1&LB8
zhtUv^aRgA)Sld;4+tO)a(YS!6Q8F!D#83MZNkZZJ4fuQo8jUxT?Odh5RWZ{om9LM&
zG6{qXAZCW;`B{*Fm>GuC4y3F&OeW5^-&?H*Jr(m^3`!*DyBL&6&JTyhRtI!|F+Yqc
zjUV6)ljkq8_pQ-uc*+;K7&HVHg>yyP0U=;43fI1gub@E!V^R2)COkleX#^~0x3AMH
zN*05VGUV%v!*T}{Y^W>_W8u()TaMwqoK0D$zgoK7?It=GwcPC{Iv2H^x@ocKCggQ%
z*gfm@r4?&jL+M!58n>HhQeP96$3(;YSkxM7Fn-b$T6E68#b^456&qX#Iu^CTg`i_m
z8{D3zV^JHz=^8vxgy~q+rm(o<)MA6Km2C>kIDtn{+!U5^0wfeSg`GGNrc+Vd!aPo}
z&Y$aA^KGsLbSP?@YXKdK+7^~!0*V0I7DkxhhheZs|3f(EnEmnRI1Cf{A?yqCODot8
z$F@;e$%wl+AOQlJ4-+3qIQd>0CUoo>G@kBboj2>VvirjFMKzcZ+D9$ETL^(X#BTjU
z{~>!QEcQ&HNyFt(7+VckNf8pP`<XS~q7Tgc>>^R1_?eI>L(C;#KgxdGf(-F!Sf-j_
zLgr`~v(-7ejDxM{-@-Y)?B-kbv!2jzVO+-fi3-4OE_Q&}UEB1Zv**K#xa|Wbl+TB;
z`!r1mp*|Pcy<h1wtczh8Cb6Fjp^IUJ$!$Ui<kc_>Z`Z%dUJc7651X%?jS;a~NTEV+
zG0)ff7VE8ujB40lh0t3OM71;Yb}kaprbLi<AOBiEt%s&WaQ$I2l+_3sJDr`}txtV;
zdPIgSFk#*Fh&*@&5+zKJ;NTVQM}fp(m>wx?!4obbktv|G>5;^p{6<TJI%_7|cT8_`
z2mXey%ygkCw9Smj<Jou$=$R4JcwP!-Msb8Al5;fTNli#utmPZN0{ee{&}-}W(#2g|
z2`-__uj11p-FsBFf6<Z`cJV<Fe)*QJ9E&Tn*QILzm8Y=*2lb18C%8&}{ruYf-Og3W
z>UwlB@pX`ws_<3;7qP`<d2#I)m!kP)WPCD&GB$Y^7a}4tq`TtIwO@P9A^jmW^kc-x
zn4eQ4N2!qyFzcwk>G1;*ab}E|Xo&+6OYE$IL`xiq;7vI-GDtM?fk?y0_(ltn@A#9%
zDR~sH(g_pVKSh+5sr%UcncD5_wPSkvVK79xhsXT6>_U)0|H<h>kU;;*=|Un!7yjgQ
zVU&FA2zB8dWk+04D)flcd5{6<5$e3Y^lm1G^C*#=v-bVJ=<j%{PeqKHSj4DmjB0-x
zmhy^$f<J&1c7g=tX~)$-0`jzDCrH?N+Od;JVdrVGQ-DMLOhjoR!O7V`8s-DkiZR{_
zXCiW!1|-nWM6gREp91|%q~K2O$apHz&qNBFo5$&rR~!dYA~^%t*yH-I(TfqIj@grP
zxj3q%y%oi^o3SVK-#yj%Q|xBo0p_8%qPb#|86?bmD_U1{DoB+7Ruos`Xg32SlJ2*n
zH}#H+_rJtI+6a|iQE{M)%ZN<!?I;e<wdI9Fpl?)3rS8TGfV`chPwV%UfF;^A&THK_
zD$@s$D79}Cv5g!jPCffB8+KZMy82yLg?jegs7z8I1C@89h`!XwaiaQ1Mf@QOjSSK$
zjnanxQF+q~Pq{EMjjwXif&~$6YBcAQs3)~1*W!ztmhIbDb?s5vxqa2hpLE0Senwy5
z3r&q;u+Z^GwSe4Z25b5s{k@VIP9b2TkQq_w&LC09j3^?~lUxN4XR!<a(Vr@v<*LvK
znB}xW0dIv_)C&AOYymaHJXU>CA747p)uCpX=QIOkP|Q4P2EMahK;#1Uz$JZj;{~n`
z)qjCgf5?zf6!rgt21Oy3@X?%OsQ)yD4LPsJ?9$8n$DYu#sF4!a!wadxYuU*w`lP07
z9aJ!Zx;85J*g*nyZ4`U#$H)N-VW+k=s%(p@sqa<x>>}e1+xxrTK&b{(^b16Qu+^~(
zBoMZeUF3Tp;d@)7HMYU`Xe*Z(wBS>}jLOBe<e-_pjLOBeWC7^QC>GZba!VlaHF@Km
z<c(~$$GE!`v{=#?@-+18sQhvZNa%h|oiKskJr)wV+qM*AlBeBnXApslL9{z6x0FDl
zBD<q$u@VAFN>SuUG>AcB5buuG5&O49iXpT+TK7?NIi;P2G@I|Ui&f)JPsKjB6na~<
zFPbY(wL=J{?2FdCUBXi8x-VMMoTpKRl(`;^iuD!<XdaBpJPIT<4@PAk1rnMEqfQ=G
zND1rFs90}-pv=Oxfi^#nMrG2Dr$9Oym5CHcARUb&k$MWAl!$1@qdAvYJ>B?A=y((}
zI8Uk*<UVKYA-WOtJbWf9(^+r<btWp)S&)D_6P5emASv=iBe(LtCz8)DXQI(&<}cJ{
z2^t6&?c;{g+0*=@V=uU<%tfbXK$28c-USDVLM~Exn?q}@WJK#1%b8=3HjUXzxL*v1
z;Q7~ql4S9K82=tZV-RS90Ws;dAOSfbCjA~HAP2<Y_n2Z-HA!X-x9jE`?|MpxyGmro
z@R&?0AOxl1G4ue%%Os8Tk?e<{@kGVQm<-flq9!9_@{SWoAdHL^i?t6(AdHOFztQ|q
z6bo{k-8E#)@>Gm-G00EH#pF?}B=^&Cv5<Jn3zC##HL~Vbifc*o!pZC}5o24$WEX;*
zaI$L#IpO4(ylMp%KunG`y_Gv*lALf_Oyu&_Q9~=67Lz`RM^Ky=lRgL%iqohCu8Oiz
z%51bazH!ki$$fCPYXbS;?3naHJO$G1nDjxAK$;zc5B?Qhnu=)iV>u_-$(ZqUaDEIo
zfa#)biaPXT_Eg+x)aYZUQ@{k!$1yqgf&|dVG0eSm={ZI1y)cH)O5DgMZZe{5TimEs
z3Wf+?c+8*s#f49hP+l0rt2)|Xg*Li$F)J=GW|k~=bqI5DOuk}-40IO9koV)5BUC^w
zV;2gHW);hvx`T<jFLUY+5(vv;ay15$bYh4!+eNA9!PV@gLgSl~)iHTMDaGT)>X<G9
z9!Th{j$sdz&c&pt%W&Q?Vcc1<&MlP|yzAUjsqfas<ZVN!0AXDWD}|GyRP^0Ob|hh(
zuGr{8(0X^H<9aFHX&Yl9kxPOE#Ku^IhUO^&fd%hYmPi?AT5WY9XyblsEZ1pbTK{g1
ziEqila9aOvjp6n^kD)2rn)@cE+@G4Ouy#de!hSw&6np*(mdJb{0Jv{rGH8PY+&8f_
zzhVzKS{r{8YuuDaSCAa8*?n|PpPq`xx85uL2`lGs+5RG<QN_1z0e%$lZA@NlOz{gv
z-^S#{Mvy4r+Ze9N_NNh>qLuSr`_UT4Ku`Hz7lW40d)=0&rSsmH{I(5rfU!4rLw)mB
z4uPffK9<TFx0mdT$&)@QzG&VTlRF$Bp|X!$L^v7N%m>+<Svc82w@|v(c`zn#b*2<r
zEgy_!#dS)MKsZQad@IfDDZ15p+&-5z9#NVfcQNQz=W(}n=~n0QSXz7=1v<bu9;<VM
zIf!zOG*+guoPl<)ny7u^w-}}hT2HEJj8pAmO!+;grdE2`>KdlS?x}6etOievJ4gWd
zqBCeg0{9{gT1px~B5Al7EBHMoc8Q5WNrQGNre2MSU1G_D-sPCwC6+Ag5?_hYE;0X7
zNSa1#-?;KX>TUZUb&QZw4Z^X4Mt|S9e2EK5p!JQ*$qOW$r*AwWjyVy@6PLd6s5mbo
zIS3Jb<Bi0N0?Fbq&F?iQiPnI`fH>}b4)@T9p+?p-Mpu9q{+#9$#DKUw76TF{4Tu+t
zT`7>j8W6`C{AM(GQA8UO&v}o1ThF*DI3#Wa_#u@dG`DXUE2wX@s~+am4NL$Hi_3j@
zkN_GM$38q|Gaym7VewcsUy=}sx}ocb#pB|jiez!6C*Cj<=++`KZFpS4mvZp=wui08
zjc#rxDuE~PcRXq!8WuDcl`$D4aE8ZaOfEuH^^IVe2F4xLBb;^s6A&Zfa(Vy>gb{K1
z&Ke{TM#QlpOYf{f;+^$~xbx1MXkq_|xO`_VS$JnXB2MqDzoe}coc<ag&-pp-Nv-l)
zt*bhBvcGF!tn-A%$MJ%Yp|gDanAHR}yP+{EJ0UK&gTX`>PN33H3nADxk##6B&SoaY
z<&k(Cg@Vw;IELtr90=4T_G+n7l9?2j$K7#`iMVmxkT2#ksMKV(y40wZog9~&GdP6=
znaOdicIo^9EW&Is#rBpNUQeAVafR<Z5*Jca;&|aX6mbYNT5on-xhwUSmyPeE-D&^N
zO~yl>3b4cnOdtS-*>U*+6Obr-c3ghIgh<qBb{rotxr@WW7v`{YHyf=pbK-Ju3Fn0X
zF(-~0qb8R@w4ckKY-H5V&W+1WBb@hv%v^HVxxy~^*+P4CBV)cNv(QDNZ=5V7q*fdW
zad;8y*w|>3SrnJA2J;j@WEREoYVdU~gFtJu&5ezJ)v+;{$c<5J6Eb!j0ci_@8fb*l
z)p4afwL%rGFtdqaD$T)i6mp@kniPaSh1Jz@d|{M6;{tVRh1K!;x0@3L9^&jK`*bs-
zrjps@wtWB~o8oor@jDuM6iGL;Mz<R+GMnS_LpNYTW^)|3M(G|$o`Mz67i<X0eBt8I
zZq^rsLsv_1BoD84*zwzqhca8@^6~?ikl7N)6iXY1dAPui8TRQrj5{-1T^u@3zLjvW
z=?)oOA^VcqcNlH6U%EJ9$b3mS$eBq9m&$h84a$vqN_JOVet8F6NbQOvAC>Kidu9jh
z3(bv(mFxkx5u=bgK#fQlC$Mn!>@a)2rLoOAj2IxBHU^=?@scvL4}B;J!TXnZ&N=qP
zT}JQ7FLAu){xekhxvyVQ5%EPKapDWK_)ro^VEjrhKo@)Xfv@ANT`Qw3b387uM1l#K
z<8fSxOmi7fC)n&(Mvcq~geq<e&TtVoj#oalxePk}Bs<*7sGB(%mm8Tlr3IOjacpGb
zoEOT%s5`}OY;82joN}BSOvs!f=f=@l$Y9K!W^c4MZpxf?acG>KCLB=~2GSY!MQfCG
zCN4Lf^Z7tJ6UTZVp9ldC2GUs;YGd4NoptL@1L-W)eFqM%B3af(7vxN{E87^~7{Sp6
zMgiUa(D)~r#<1288TXZrDbRRyCnj{q6vXOL^@&7<#}wRhkGTqC5;UBAvc2pfV~wX|
za)HKosfY`u$pr=cA~}&znq1KAA-Yr#5)Y@cS&ta^mQ5|t_<L1i61O1EyPQa<Of6_~
zzqtSd6Tw28U63=;uJx$V$P=1ffKL~#&IcC1IlI}eddz60-?F(t<43573$V=v`MmFm
z1lZ;R48_5Sr=Vf<ghJ)fR8M>NQ%29+@PB<fk~T~ErzZI;PkTU>vB!V!ghKf(VkiT9
zLZSQ?F-TxfC~W#LoqkYjM6}6;Io}rY(+_G5YMer&NUR}i(2`>s`>2aCsbpHA%p1Uj
z(6mCicmxT!X@yukBC4x3$kG|CXIG=v%`;pTnh|Fd%8ez+KxIZDHkM}65zrcFNNr)E
z@~QnzSEIhS8h?tJ6%XJ*3k&6k=0E~wVPR72QGf)@!a~eBlsADy-n6i=&ZmW9qmLM3
zmts+&+~|`mG>2V?jlLNObI=3InnHXUWt3{QZu7`v_W$)TvPvVc#C#3`6uZW?o)#=?
z$ogrth_8XcqJ3VdY$>$MCK@=21_p)(IF33kH$N|w=>VQW{qsVZ?SX{VpBENvfz|Yl
zMq==6Z)2hQMWM*{BoBI<3T3t@S;+P_7dqc)tU*I^o2O80pnyW-Z7Y<ESCBAcTcKRM
zf&|>QLTB+>gIaoLAz!?<27v&u)9nUYyzVTN*$JKkX=kBayn+PM&O$6+`Ps@$L_1oT
zv(-NTx`DHmM+@Qjbha{sQ%NTZl{1B^xsc9QX5`sQ;@Jz|FdBPqJxSd}+hpPydg)Xl
z?jyMzlykZex0rsQcF*uUyHNSP&@S$2{MA!^(P?o!fq@qbW%dUWiWdvzDGZR5Ul+!H
zmn}{V-r|=E)vL0_B@cR+ofelY%CC8gUlc|lH1$p>{S&Hv=}qG`Pc;b9?-`y3_D;zB
z8YIwqCy-y0w}ONfy%UlC3DNJw;8yfWsP863ze^q(;+=#R;>oIH0jh5T0guisN*4OB
zUqTBsp!5VhC=Fy+dKtB!8JLj62~70kz=Z5akZ7iX33*r<Bv1z?ka|&)3=+x9z(nx_
zvJjqRa*3Mvn>BbDpa!$*w~g#GgWWP{u|L=?gT~I_g#4ydhA;L9C*%=ykSJqtqUcYu
z41V~MP!l!oHdDL|IO0%t`E8@<nW1hOG{A-?<ooap-y9g42#a&=Ab~J6fqYfegAR=h
zO<1jE88p1e#-WMgR%SC^2B_ie)!xQ!?S{K$(DuP_w+tFR!xQr8W`>WR;Rz(5q70m5
z!_#_BTlr)e!xQ!I=kE{Eoai6M^7|NDo?&hwG_aW4STwL$LJlmbpdu`RNl+9*C)8P@
z)<d!)&Uaf`qV|JkhF1hr=_q#FJBIblD7OqcZ8FL&gLWWBCFECEGJFSOR05N_C<EV|
z!qb{gMfew|V8y6Jt^4UhEb0M)519RqQCjhVTLx`Qe2|da5|BX|A0*NaDD69ZkU+ls
zF)}7VAmJU)YW6igd1kx|L9gt`yJpfW`|*j0IBEbDK#Wfy$rEP!Va50aZbOIx;HRO(
zB^o@=PakAxXJQg-+|Q_}nB<mW!puntxw!!ulrbq$=QasS8xxZf<;~5Nbg3Xi>GWKC
zZa-tS(r&JcK_5Mtn~?hq5CX>Bg#3CGNMOuOl!_w}AYtd+#Lexbow=}+lFYe@M$ec(
z)7+P#0|3kHtpkkz@wQv$mO{H3%Mx;33?Y=VEFr(h1QMkzOCWZO*1#<+kToBXr37Rt
z%M!I7Hop;J3R(JEn+-9Z@KmpLOQHRawTWD@+|DSp-?2845xYqsQOeqc+)V<BQr0G#
zJtqP(NPcc?ZQ|BSejA1a<ZYO>iD%mJ&D0EK{+}hT`|4AtF6@n^{=CL`g0k^Q+*1RI
zvOi16*$E`d{)}q4Ti8#l1AERe<L{oQwz&2O;WJxYpP|oRZE=SWeg0}o0`n5(IoXJ|
zEs^tELgYDFNN!7DXO-`jXDQG5I>GnK+0_w-R{FIQ#qkKDUngX?0}`NLCy?#@M9D*z
zLg*g5(R)TmrSYDGd@lelu@i>);2lUP?MXyq=3b<rP=X5_NGS2tmtIyq-H6)<n6chd
z3YN}$6avsc;ObLkK0x}DMWG;nv3HI#>L?YzIIWT8+pNDhtpO4kza%1JqZ}kDC6JlZ
z(Y7pQ_$Lw~QviX!IN|gKNNApL`T`_0Pf%Z6rQw^UN#q<F3)|eR=U78~>YQr=1<iA=
z2^2KXIUNE;0G)F>#ENJa5;<d&qC+f5UP$2eB<~Q5I^>e*kj5Z@ddcY#kdVFP^ax0x
zUZNhM{L`YAyOLmUb~TEcfq>=}SChKsN<yZgcnZxc2_$lt$jK~9LwhBaezs@4@lQ`R
z{uF5_9ss6SQqG$o0n;lf=QNOj>6OHsMiV<oOzgdqMg5XqzVAv52)vzC<9vJ)Euuj0
zByv#tg$T*Q)fRkKASv%3quyLlrJ?Xn5?`_SFH!VZ-=x}B<e(Nz&;}=!5q9`PBkQRK
z4U54LsR&3|JUA&+P>_HeoRldjNLV~LSug??QwmB9o{9`fs>72a6_GsX4Nb}vRI-o|
z4NFoA`Ym~fMcJ@ADyfWN+a?)1tMQl9h~#9Wk}{-04knFC7K&^GB%ntnWiAgACXGtg
z83U6j#1lj0@}rY7mzOLw*$32)8|frLaYUPx%=tL!NiFg4gS)KG6k|nXQW7^EABJ_s
zlrv6A;#%XmDaJ$9_)9bp_^@V5Qf7=GVa=4J%ost!nkmWHhq8f)!5e65Qk@|iNb;aJ
z&1oRXLIX|b4MZnti{U%ktfcZ$QcbZnQ;oZ-K{!T`d(KMAgb|Veo0XIaBS;uAD;fFd
znh`Q#oSjtXUo(R9&?a+|GGQb=F*(jn%7js}&>i!V8crTkc&r)GK1t>*k)yFD4EZE!
zWW{K#Nu$wDiXR#Q0oSq}qd`K}PRjTQ5=Prej7GYrRFg)^V)oDJ#*OzaPRi&8CUKMe
z(v^>7pt6`6n+&OiSNX}DEz*!$kX)8@;&d%CWTh~qF$fs4(lG=iWLG+dfCTDFGK9iH
zEiz<vQiKH%&|K|ml0B=FGA!UJG*>5`^<6Cr3mcNk7c{o&c&hQI=r25g-Ueq>frQ=$
zXH<bie{Dz>d?EXb7~E+-PpX?`e@PznHabotS#X+7+-ayyYDcs$lQ}zhn-qH0+9>wR
zq!TM^Q=@E`y#oSO+wPbM60+N!MgfVUwo{|f*I8?m{ok<Bvy7X|zQH?4KKFo0+@vlp
zm4SrHH%WZqj5d+gIuY&P$(#%J#aYHyPw?MKyl$p9jdjR~{p{O0#vP^m9VjpXwLd98
zD*zHu`>CTxQM|1~#s6%#m}{gx<v%-d0$e!e&q;a66eLL{<=2uy0^{c-zLremxem>w
z#~7PuJX(ItMWAqf%n8?!0m8AQoCrYz;aCzA;hh`-)NxjOzR|M$xQjsH^SFyZ;q!P>
zzB{bL!{_lN@>!Zn>xj*=iSv!((o;#9&wvS)Q%RZ6fJ8B;lFl4jhb%ll{p5VZ)BL<!
zD$Snf-BM}xJfD=S0jL1td=lx*X1YsSH=^}R<t(*JKQ`|3hWn)u;rP^9mwIAAO8gE2
z2tW?Nt3TeiAOSfbB?l`=Kn_U39loaysf&ivhNqPG?7uEDp7K=VPe+eBVR%ZOK7t(d
zhNt8y7m)Du;i($$rNk*0Vvwh+BU18|i{zlQMx^8^7s&$9h!jq_+|0{|!22n@uC8UZ
z?N-Td`P67o0@^Wx`tkjgd|O?Y_v8C1OuOy4E|5N8?|y1jHu}I-p^p0?C0|z8<sJ7y
z3NNeaHfvq#xN#{ZlB&bntu_kSEsKp*2^b;?!(%9qOUc6>AW_1&6v8n+I|OAk>_qm@
z#m22oC#K}#ZZM%TF;yfErh$aY#1vld&ZfMtF4lnBhbd)lN=<#>WnaB&l-Thl#_OJH
zFr7-$67a*6oT;G!gb!14rUr?Y{xDTA7cEUQH8FThnVC}Oq{K`udC;4ck~6hrA*Reu
z(M;W#8-vB-M=7N^Ro7y9%Z!^UK!~Zju0k)ZKT63<5+GsIN2vmFQyL_&KT2VrfZV?>
zEeJnJiA)j%G(SnnQ2-K}pQPj{013@cQqCx-OAEmza8)`m0Rr8z#I=FegG*8}=fYDU
zElJ7201`+`QWy*mVtXCec~_)z)-c}+<ALCc6fSSo#LhA<v|<Ke&#o|PXI7@<ZaA25
zvXv?9hGSlU3}9EWNh^$6nN=yd8xAI9R;A=FHouy>njKhS)XlDzRf8ghp4Bu4p2ldr
zA)>8M<!oj3RvJ$Q*Qbmmy+~4TAPY9IAuEm6<r|!ufr*-JaB2n;CTvK_Z_0v1%{HX4
zqfa6F2C{Dx3#~G4F5l!LP>9@=$`zL#AVWf_lt`sO0%21MsZ?u@06Vv^|F_DxyJCxr
zK<>LGB@flyz(eGgR7h-@fCR!8vf)0|tzJa?DwT6)<Z9#I&{s4ZzMw>}9@T9Jdup|@
zwS0$z3np-PICTRF%XXw>=miPf9n`L`a0EQu#oDhiUaQ#UBGBBt%SE8N?Mlg9yB@FG
zE*kXTQN*f8ov_a?Tx&e-DcR?YTyUYZk9vXD#~@Mcz7$?KwB$OV4zh9Uj8^3b-C`-?
zA9Na|9#5DLrb1$c4U%+Hi1>6GuO0=C!>q=7<KgndE&^>z9d;2YdK`8UD0&<w1l)fC
z0%VV}8S9M)S{!u|Xv6ksDp!m%$N=GJszyCo3koJjQ#Up=cZv2#FgcM@PP4|J8Q)do
zFEM!QDYU0_!fikbC?_2E!c(A}psuCG3P=Q$6RFy#5l|@4CWgosPp0HuU&(@Lr&743
zdOtj(K8`-5a;~I2sS4}Q^vhf=S^o{jox$HyxTBLq{pyo*TwuF480nG=PHY1crd)7l
zACNHR0?j^ncLfzZyvT|_H)@n$bSeWTDs$1P3`i1kya6N-E|NE3yaNHwaGCw{bE9_i
z%Ps;n^<@`<in*MUd!A4M!exqO|EBdrgNW8Mo%251^SSY3sAt+aOV@y^(}%tJl`*C<
z{sv&5v<%oF0oW%kr&N#t?2|^NMo`FaK*bHRKiFi9^pp;Am8c$r(lX<O5R?X`k#SN)
zZ9w%Hnidfi1X_M*T1Hfm&>WhU5fvmfho+r~+JH!w7Q6T$;HNAt9Rnl`XK5KxK>~@T
zWkdzZRS{9&(a{n&VxCFo?6;3?G5UBzAExn{Y@S}+NKG-DnqpGvY^Oe80&BL@2q1wq
zn;L<i0=|)Kp3ffLZj3LTpO%MK!6a^49$Ezno%v}TT3t@=eIqr(LYDd3SlMo&Qw1<l
zg@sNPKmuZ6THZJW35bPhgmxPCATcv7Ov~RJBvLH97pC!hgE)9jg+O5`EC0qgS-#XQ
zgbo}oP0K@zkU=3!)AHvAL6S}yKR1XsgFrwNuV5W_82H?_i$F`=6=}Jz1{ol%NN4z2
z1X2OQiZsq5Y$q4Fk?OS3KEA{F##6D;#h_$xqgz!91{>4z5EXQQu`!LK6!^&+!a#xB
z?ccvOR(UG6yBHJ-w!0V<3bv<ZEQJm*wx=<AWMd#9_>NuPWt^<|&V`^<;JdUuzk4H3
z1-?ty6#JVX0r6e>md4z1Z=?p_EgcsGG<Q3W3lfFzb{rQZG<RQf+#4ws*e4vf6$rHI
zKGz0H1@^hspj2R=<G2t8(!Mkt_g?sI!-#e$oimkvvd6e5dMJ(K-@Ry}Xb88}j;56p
zcJK$>5wFIdB3$ADz>hlMAOU_fEl=Kn1o+W3-X&1D1c`8YG;N(od(9ZW_CpLf6@A#{
zSXw=v_VGQMYh395l12^|!yeByCbF<!gK0{`Zs&%fywhy_UZcGHv}+Vi@Tb#qdTz*v
z%IUQHOc6)`pH5>w`zuGlfueJ)@JHkC73W+8@~U%gwP>WAOUopqAs;E{(wGJ4KoLkB
zC_2YJ`q7BiI+w1~0lB50bNN)@JC}ZbkcZByfQOPVu){wZZOSjWWzm4Ske2BPWKh<H
zbgG08Ly)ACzUgNE0hop~U@oza|2FPwamhuXx$}}+Um7r%(sK5N3J@-(F?aF<b`4QA
zt!I(an;reP@ntpsa=Ma+OwS@2;2;K+o<;IY<{*L6vk1w!=t}zdK+mEEy^EZ#q?b0l
zE8i?q-!5{xQgWgDR?)StluUGGuTT+n<y#a^8qz52$L`s0yj|YUwTcE|Ki4W6g#C(S
z*o6v^`xW6G51nLfNQWT?Fynx6XZZjZfyUr~qHEqj>G*)6kl3|{3J?Yq;SElEj({;Z
zg!MXLR8<Ud5ojz9DUxgIhI}jzDXJ|t`auF=ND+RSX*~s#hBOw(*mVvX8$1<bTnsuH
zI>yDIQ8=bZUjBp*Fvb+&^5<HCf%h*{?D{`pU%UAf7lTfQPAQTv?i%tJFjI=;hkif;
zV@gp`#+(yJR*x?o>?q3F%^Ln}e6MVXieKS=@`#bIdGXVnY~M*E-jHsIb-_Q~a4!ts
zscUaquT{PDQpt;*>4#lAbZP&}%ed&@-D;1Y<b0h)PZ=d1leIWy)L_q?G8*9TzNhfj
zmf5F_kxFn!k<U-BxP18D0p4e`N6#9i)jNw6{@WVF#Dui72y-+p>wrY<zbz7<#Ux6Q
z0djdFA^U9+=070|>boL&!4cQ%Aq$dU)`u)jbl(;6-7msL6YRQH=o5S_f##<~=qZGE
z6=4l3fH9W7FOv5(aUCAOAo)uN$kK70?~Cx#;5<IHp_U+U73K7-;Yt0hvbN`pvG)1j
zFyjP|79nS&<!}jA`xo~81*1vHFGVuF0TZCV6v^}kB<%ZzYDR0w5~|7xR{kHOX~_v!
zg&O08t3uK01gX$>3reWEh<E=nDoRhgDg<=eRiRcmO)5A(1{F}}ikNxPxU=+}t3zSt
zoU21&<{atJKq{dybD@a6cF}0w=z^<5O?08iF9HUHpmU)pFQ0$ppoBu^r6MJfx|RLy
zl2MD9mkg^E46!uFV<=xLlA8%2p?s+bn+ebH0x>#%FJgbWWVFBKcUOl-`|m|E(JSGj
z{daPr@h1AD6x${>a@J%#sUhs-Mt|J)UN+!9!)qY%T!#~4YAN-}YCGZaf7alp)ft%t
zf(z8unWVU!0}__3&LA0BM?GB@(Y9oAu4e80hW@*hI$JV)9pqKZ=<8M)Wk*J(ukY%h
z<=3siW3QC@e`>rvgSQNH+(JA;Pko(HTVBUOIo}XxVlIp;BjbLx2bcLL`$~SrOJ5%E
z!G&?ZW~9e}gwn4W^b1b0K?e^{vUW}UWzU_&3vQ`G9&<7yPxnIxDkn2I-A{QONQAVL
znUMGz7LokL<H=0;cK+f~a_EB<Co|1%<?r;%$j#2OlTG}$m7aA?qtef2<SsvCP|n#5
zhF(i<8mRLb_GDB4U9HaJ<*+QBvgY#{IjNNK0eL<X5lc&uTnSS#T{woVaJ$PHrD2MB
z*ve-9B6gvvzfU<h4jN^KmoqXmgg6YkoXLn|1R#NSIfL7&JvbOj?#Y%k^S@f&GkXnz
z7KuHx*AVz5m(4Vi*78X%+oUP~;#(O_NWIugxB8ox_i_<vLh6;hRwHuJURjw$Lj^YU
z%8Cy}phB3C`mmpF_1|6I$3>tc1$|runvnWr<tiU4K<Jajm7KP`7U;cxtmAF|Co1~6
z2=tS${age}4*O;025T9gkosluQ&8CIq*ld*G}69woBu&?#Yh)}(!!B022DsKT`Oop
z8cA04qY0^u4g`#~dsq1Tdn(4d7&IY`bus8fz*yG~nvlkl9Us$)fHFD}FvEWEPX8xL
z#S9mNev@j3i$Ny>W@IDc)CP2bF(ZrPqWy%2;C=rb*8DDi|CV!H2)gP&$AzHR{d2Mr
zkwKO5*Zp&{H#OonCd%l<?fk6LG}VChY=s|Ht=-C>E(gPLF?y*#KPzvXKpI%{vk8&0
zgM>NrvzVtT`z)jP^9$I&TKUV%7q|%YYJNdh=5vq%!h&q7v2-zdAGsjg>^Adn9070U
zZFZ)W|Cw^zMW7e+wp$;1F>hxhVke_ap%?RZ_Qn$anT#?z)w_fZZ0&DbzQjeqr%u!*
zE&}}|)sn1S{y+r?OR~5_Leo$go%vnPYP9h;Enn^;gn_W!MW7#+TAr1OJyd|OJd5AP
zqTf9%qXWUK*x)w)#^tMA1o~a6RW3pV2&=O4<P21RuqtcSH2=X7a9DU9`@N07d-*yS
zAqs?bE<zLt>)cvIfv}EhQN<DHH!RrPyZtYef9@jSdWZUXR&K?XDKQ{?o)yPbVRj4%
zpJ&T%HXr8*_{odS?9o5@|6IP=MTo<O&8`h`AZ&JP5eLF%ss-&!l_~gzjIC_{pZpJ0
zY;_R|fUwm?C;-CNtjw#S0)(wuob?_e9J~;#O7`MC{$Ul{U5G+JY<D3F0kJ(Rmm_6L
zAt1JAYu0wgY64k~efzyMR(H7=31IBX%H*+3NdRM4HY_d^f&|8{EDmq;?a49)_xSfR
z<$nLxmU~?Yyk%4OX64}>$N*w*R$dYU35dN}ToPJ_wH+D*7xB(ym2+7;{DA*<UnTx_
z##joboN=p@0?wJN%;}*AoHJRhNNJ@35-W`}+1lr_Vvmg&SXjZ5vsrxCowj_+lr$2N
zEZ_3E4FsND$jaFsB+xHp<(3afpkK&h%jXBt-bFaXkj1Z8ZDl8Y#;vT`WBy64z;H}0
zf~i+rQ;Pt0#Wl4EU{}agr0t4&Q$*`y<qWqxsZYGD=y89acqzVsb>G8}x3TVf@_y^_
zsvcI?s%|Em*4AH}ZEowo8tP-=H7@_{vYRL!=*M>b+25z4pCyY26LsllN&f|j;`><z
zVv7bOitlG(LwE!oY`KZ%=VA7kC;SCU^I<LqZ2}In<b(wwlCtFeL6E>0W?{SgKa~C4
z9ML9N_(J~4zxe-G2~Mz({NTHG>dj=`WcJ!${m+$5w&eR7Fab5$DiYhgAOSVm!a|c$
zx|_+G=}h~ZzeDrsjxk`unCXr&AW6uQ`2a{DOt+8^^r!vAMiFhcmGcRk@i+gw!Pype
zBc29uBeG>KYx#Ho-%97=S~icXU;=5bC6g17K$>eIIpM!i-iVA@z&8Kg|8404SBFYp
zV99R~Kn6MsEbO7RL*chXG~3GA#<o4<e<os6;S{KDLE+jGOIgWUwDWhZ#$Td*@PW0&
zDIX-TmQeZR#313sORU&ROT2j^27mLk)KXVi;?0xfL2sEQ-#kec7Rt*lS|?Mmy@jf>
z#!?DWwJlcmtiQAbgkuC%XpJRbe?bypYb?C}qE{KWP*S&^z5A^H?)K}U&)W@5sI0f-
zr<6fLWxXX&W`acevEHipIL~5<<jLcDtNvp=d6XPV9@kqBKf*`jEd;UA;-j%K2zc;D
zOO8g6C~l)AM<Yls>ukW@LJ8oP)8DN0d!GK%@fk4TGhaGB0}>ElS~6UK1jLsX#vtDH
z`|#DP?N-irmiQVWO<LP6Uy?6O@l`8i<d#y8|LDxf_I@n`N?eJ;GfLN~-gjYr8m30s
z!D_enx6bUa<c$(AA+y6Ou1U8iAOq@K)~CJyKI>acUgQFkxHO!`)6Erp(q@m9^AkJS
z-ajt5$MW$n7W*P($q#I72Y=7Z50<>x0VY&`Am_*TOd$gkeq?u4`Tvsn(UQw(Fd_4!
zg%uEn7-T^0V;@!dJ7o6BCMG6vExcN5!)4Gs2iPso`~Q?VV98f>5xx>WK#>EV6^06$
z{SbTqdH-G3As2^Mz=sG2zr3!fjU(DgE9ZUt;`4s|uH;FI417zwF;(V_#loHZ6U)vx
zt_UvdKV!*t3`m%9#=<&g1Lc#AsdkqvdtWF2=bnm7PFI5sZ@J{eJCIxqmj-Dm0}>#Y
zEd1omN`r&Iz(Mv;FZx@m<%5c4%xuiJ{09}w6dxoo1{KTSaR&*ELB*K!Y3685)KFIZ
zx<Ad{=<3(Xh89at#S`caEtZ}Nk|c{APi;(1#)`$O0uY?KW&t@YE0z%#Pl3dWrNe>*
z5-Wzo_M&!e6453W=d89*{sSMh3{NaJibcCNp>~~u60YbUuyH;7TIrNxInMD2h*OGX
z<AMa@lwve4Kic1fYCOx{-oxL{Q$EXS7jV(Gvx?=$JV=r%mR}P935;3AIM0L|b7~Xv
zp?U1(SN;F0nCBwUf@of`Jf{p9Aj~UHi*+<eAj~UvHr1ODY1?&P^RM!h+b#yh1G`x6
z#z6=ec5z5VBaoz2jO7#cP7`Y6CDc2`rAwTS0TU`qoQ?qrl_l3YrU`9BteW2Sb-$<i
zDz{YH+g#=J2xI`U%IOi1fLKL6f}B86n?|(HigUhabN}hz6aB21K4L+sLQ`~zwy{{*
z%Etc7KcE_aiKq)c&^8v!s0$Kk8;j+k1CR*)8;c9J7K_kN3?BM76{}l{Md+72=xr{R
zp<l8P`oAcq&`%j^Q)=+9ij_xFZ7eq9|NIYEfe?ub9-)R`IW+{yMP<GY64+lA%R~Jj
z5!SydwjSnhEr}HGcD^bue#rbrR2B}fvl!<a)_d49Z}{u5jWzHEgc1MG|9%PBPR+@n
zoyGE-7EQSa>@3FXK>C1RQ*wY^?5Q{WZJY0M?WF$S<#-`vfUv7reoO)+=@d6@W{#p$
zI?W>5vErPW_OUno32*pVF)pt0nA42L#&J0|=Dp?DnjCj*!XqFacg6-tARec&v0H&r
z&0w*1u2?x=tfn@xc8iP$?54f^rl%S_Q7K3O;9RjhtpgGO=ZfWN9gyhGbHz2zqdRG@
zhZxkI>TkvJw2tJU{eCN!r*$L?K>xq0Gmn$1y7G8;SzYp;lPJX^G*}I<miJysgUHg*
zbT>4M;)05fCMG6se`R!Ll9_yx*&IY{7g|so$Ym1~5F!d;o2C#<z)>S08jz(~1VXTp
zWza@Mkk)p-=id9Q<iGlzI`_PL&vx&-+xwy~yLC8|MmZQR_GP!uReHD1#>bsZe{fU@
z(d@;(cDD}9l)c!O#ioaKSx`q`)w#j>$I6ak8PR1&UpvEArFGfSml-zsCP<aU(q#2&
zgA+b5*|T?@LZrxK&xRim!IM3^1PH`UCVRcEvn`cPq`YlT_Ii)gy}vNnJ?oRb(PQ-c
zb(O^5<7(&=PIc|$p7l<MLiKD$1oGI&J^L;Q<gt%?%)vh?zE>q_<|(!O3FqmWr-~wE
z-sP#H2$^?z%1fHLABrI2DUZ1ynJ24~d6%i`U!HUZ)J`o*ka?G>MF}$RGSy3(Hz0~2
zVX8+0Tqr$Mm5h9v3WuI_UMd~h<b7)wnQCeB?2IH#6l(J5kM$O%DyCWzbG_J$UbIE&
zx9Z-h&Nq{wMTV7mmbsoy78F3hT(4_)Jx&DTU30xFU-V3}5Q0t?^St;1&m;>=quhMY
zCJRd<S-jv$vXJCirO$A9`tX4I#RjL_5GW{ip=WzIAXQoD*&Ysv$c0|i!&T|&8qaK0
z?=#IweE;R5CiR?6QImSk#<Lw91rhYJXGdgQm$%F-S?8G%nY_X;^XxsWT_lW`dur0^
zOZ^Oh|CW39C_9h<S?-ZcZeobS^>5N4ZJFjwNUiYfp>l}utnkdn5_mwX)ZppPt*KR>
z9g#s4s>g`zZY_tptx><3?))&dhJ)EMu%MtU46N}O*|9+dNT@Wc@@J9L?Ab%v5aDU|
zSODV|4S4XSf_m~<r>alEv!h6e@Dw~okt<1GWn4D5#Va{jIP|PD;F8O?NVDbOa#v~g
zR@Hlk^S#v8sJ##=yH(mNhrYW?d$+0QXE+@C_U!H}i12Ka_+)Mn9?<*h(;3cPsrRF{
zKoqL9WuoSxz1!7;Go3q9+asNH)$QFbIvJyRXzvGV*Gy+z>I2Un#_y`z`+)?d3=z9Z
zdv~d-S<dLxF3%1lA@ZzU9>YkwCwOqLJxa}T?o93R?64LhJbOHbwM>z~qnF9~nE1`9
zy+s~5ue?`yh+cRIz5VLvzj6ko_FHciB0T#&@-WLSKqfUmRB!ys8Pey&qJHGq|A(TV
zwKDqVX1t?b$tSA2a+;GzJvO$9`nkc5-ADw6IX4bO)nL6KDE}hkBWbr>Pu@-Ja7^7g
z+qo%qEUF7cc#cV39??9Y6KdUTXHx1!WY2Ee4kyH(^_mAeoKknramJ)iMf&3&I!c}r
z{jnXFXJLoa9&-`(s%93m-z{^TYx+PiAMoXGxKDdt+C449lwrxl8IKD+{JGBmbw1-U
zOwoPgFlpWe;#S6u8|OKRYcE8}hreje1<#HffmG^(N8c#3nZu;1?Zj4jKXcuYJKxFF
zLNFr?{>BB`qo4<BcDoe_h^%&Lt|Z`L;)ETZdT74WzqX?&LOi6yvkR#(A)>>}4AaAV
zAR;<E_J-)|afS(eqOfPaGp)4$6KUIJL8Z_WY1?H1g)5E8-<G~(nCP%kJ-@(tr?xTu
zZPjJnpfPQyWZ^+XW4hc7T!DyaOfztmyg5ufeR^8IzN!^3@=h>4Z8Ii+QE+<NW=tRj
zr>CQgIZRqNGi}}p0Muk=u?o_C%}m=KkbjXhGi_5Q5J@xBq|C>-b0R*RoS81!TIl;5
zr!?MqSvq<r7%sM5!4t%`?=N-|l`GP=W8p6(u1H(k0+F~PjcsM4&2Z85YE`<#xuJ4(
zv51&(b=uCEz(bMMY33|O>LQr1S^aW}Q(xa4HDkEhLKHOvh=k^}9cBWN(41zNxmE^S
z!-0tn>DZ=pVM4RhzjP7=v;f6)hCqsMNZZa3NbwD6J8}ln8E!~--;_3;p%8Ru_<B0N
zF>N|SOQYQH)3!6TBs#-Cq@&JoxVXierN*j5Kv?R{$gDuB@n&RJAmZNq)~v(DA+{K^
zs!x|XiP2k%>d@Pais}&m*b-Tlf(Y6oR%M%Qyqbl@bje5QQf?tshnvfKsoP(1`gMLU
z-6?G%w_2>b-B@=JfX8l+R0Txz_Q<?IL~j@K{sKi;iy3yQAHC}QTjj1|5i#$swEfsR
zJQUfL<|u+JELBT{wy4-L=dQ|@w4Kp|NRgJby<Qtgk(M-LBKiP|fcC3~WzOjS`-@Kz
z8}3irTRGtorZlNsf~i{ce$WQf<;w}CgOS$xi-HFutph1|@LR1{i`I`Ct&ag9=V+vM
zp#IYa6A(#9BeesObX3&-Bh)@3nfN$eGFLtNJLjIxAE!IzjIu|FvQJuN0}yyJY7-EF
zCnIG85qMIRou^GBL`SF9h80e~%G1RnqU_UAEWtyO(-KR!=prb)O?6%A+%}-CSVRQ1
zMfMq?mE9)x`I9V{jSy{jqzf}vI@@El9Z}mMQ`L^h<$wt3NZX+_P?w_jIw=u2LiFEI
z`1Km+;nGnJ8JiEGBBLQ=^#?>oL&mN^0+G>>p;yvTJOWE38Z)uy3O6@9LrN#{(}XX7
zP_8j!!xu=o#*7VLAmQ7X>Hb{Cgs%{E_&$?~KbtY(YiX35ma*Y$Nrdn8OccH&B(u)Q
z{MA?%iXoW;ut2IZBV#i&5Ro%7QDz<?qmDTllbHc1Wlm8U`h<5;8S+{%Cu1`+%t)G(
z!I@g6)2&G+UdWWJQBSUOKI;5Jrc)o|O*P_8i+BKuc@O~gE{fCyMB<{1&CEa~F3R9d
z;u<yL1WVM7>z&(bmPB=eh=e6koq)oWu@~h7k+3Ag@I%%RYb27Fsy*vjLtI*vASzp$
zv4^$cLBi5Z)~sU!k+3vlcOKRVTBd%w!Rb3-S;lsD5Gk@OQYlcFzEx?Bc-Cs8(s2Nd
ztbYNi{_0}&#lKcZD&=1!trnH8W1~{MHktTKrsS(^q2qODt=su8nP?<aD@tuON>%r5
zW(KS^(kXu-vNh5v5Rt8-(|6_IT&=WrV`1iI=e@2&H)d^%pb9zLGq1-RKniWlau`Z)
z+^R*7iFdNGZP~c2-*CR<w}rYxP7ltkWv$1<f`oUn*5iRlcqeN;9*D=klkL7OYdl^E
z+T%B8<L_pT$6FfZwq&ixTM{0>H7g$fVi(;6`p&j&?6YjVu=}tx-?<-PMq;%(1+-;t
z_yVa^Th@9k5aDfEUI1k20Z66VvgyyLl<ZL#0+qr$&SdTSS*_UeT-I!v2JqjxqSC~8
z=dw1k_!sHtvQcE!N}6uZs=g<kZ|d5MHIxM1UaX-ciuPg+B~i3zaez}2Q+3J2H(9og
z|M--1vhz3DXs>jgn7<*XV`?w}i4B~A(Y6C3u_0$;3W&sp9QN18XzRpGQ&n)<+1Gz+
zv5c61YR)kqc7ca7Q*&4LaG#NpW1WQ2bT!};XL{vyj{Ml?h@|PcOZ5&i;i1g*96QLQ
zcdHZhyxMWX=|u%)V(a;w^)(;`pU+vf0fjXesjW^luGG&ycP@_Qw}70rE|8Y0oV6|x
zK`Ljh3q+90p}U3LlN2ABOw7xb6bip=bNZHco|lUbosJacEi}p-0YK!!ND)9pE{v21
zMC3wI-U{h6M$+WO%emO{T)cdN+Ww19FDw77^VlRvM)@#M{^gvF0wCpI&e<pc;&3nL
zx-ZX}C=h~<f~C3mvYd$mOQYN?IU5C*L=?Q5i}L<RvB}Du$@?uQoNj}mpk_!W?*pmI
z%1F&XM6Uc+%_9Y_{Vi%Ptz8=_7$VwO8z~rwh_#V|fl@{kEGLsjv22$snXi6#&bd3g
zK1aTn+jvH?7wiwY*#G9@@)?aw!DcU*&{V%KoOR<j=Hl1uSu^t&&DfNSkNGPK4|zi<
zk+`>Wu`P)E&qx|J5R&S5-uaIk{`fa#<>m98Tzq6vniybnj?a-t(%#F(b|8(ZTw6I(
zo6yv!=bfFC-p|>MYPxcw<3Hu%4;96U*0$&P7;_}<gIsJ6;^Zrgx(KPsl4J_hkWk{z
zoc-pap&)lx&VJp|P>{Pj7w;=Kh8QL8%f${N_#Yy{oPHOQdf-dvCqwq<;&sJJ$;<D7
zoW0OUi<3zBP#&q@dq;`KAF=5IfQ^qt9t)&;M<S00QuK&;yxw#%N}Q-w{pq69RM}cA
zBVOJbr3-i{(<<pgE?ylaT05?$w>#AXk4M=8B1Miz*#bzB<B~1DksW`dfQiX|Y)awF
zcBiB4etw#S&L7lvvTs8kh?vQ~4S679Ci^y_1BtK6etL>;61osfLVwIBp*P5$uThd;
znhM|Ns;En9n~Kko)ZXOV#TS@(PLqFyi6tP<Y4RCXNOBt`nSGXTIt2hFXZbelfRvo&
z+w2CU<SakRZlfed=lN#11)whTigl0|;d#Zj%D`=2v8^(2o97dKi@!to)h81hd_LC}
zT*@b4uh`&oOm~XR&en^u-za?e9k-#h{~NwdOi&T_hVSS-yuyUAH+;GHLo$55Sm$l^
z?B(v_{%;q{h?(E^?MpB`lzH1{;6Bwn2s>{pJa7e_#K3L7*({7C5w*?luICR0QfQl4
zXtRD$CsvAf__4pJilqC_<vaXN-{rgBQUTa@s&h&A_R5_;7h1@wCPZZI^t%TU6ej=b
zO1<H?UJSWg{k)4?Te;hho30BYMRxn$%+xiIBD;My@5mhq^<uadb*PIwzOu!So2!!{
zQl!Q2p>OCD9*VU1EQ89{fO;|5K6OV|_qxh`eq8U_79vIV`CZKFE07}le754r7U6ms
zQXf!%?COrJJmB*!O4Ak@JRk5=65-M`89X2GYwB$Cnb$k0uI)zi5BhQAb@h5T{XxIy
z09!<6)DQaC4%VBO>t&knuv*p49aVX_SVZQ~4;PEb9Qt7?B8S@RW#0RUN_BT94mje+
z&B7u?iX8E;G#|MDQsju={~C9R9M>A1Oq}&g78DkAcNbsM<*d)zwtVt;G+vfC=f}?b
z>aKFPdJ;d)v3~wQ+&TYpV?rR}&iU*dks%k52tDVQpC>{kK?*^yoP6Q4`&R~GmV$46
z;j{LYWW$st$ySOl{JN3uS@ERN;%8s`u^Y=jD($20>+N2ta=qM^dmx$A0RyJ{+P7=6
zKwZFIX$_=eU;CU*5PJZzz}NoJ8}!vG0`=cj<K4%k=N~OeZA#(p-fq0~-YLPij}V8N
z64>kn6OWh@*tbO>GNuH)Et*Hj<n5H8;#&I%y+Sf2=rhp$Ms|gbmK-=ch`msF{VMmr
z%O>$NYKY{(*~O<wRLm|uMRMS5d5Y1n<iOcM#S4KMV<6UyG3EsE`Fy_6=vdPzH#e|j
z49mtCV_qO*j6Yu{)5LuKV^L7@fqE<L9!@R_%6jSTBHbm$ycEQ)*4st0Kq>^*F;@me
zS1$!jjXa0y!2G+k@J+@|mZp{lF}<N!sBkR}*ic-rnLw|o0XcU}>XpD=cFG4lgc|S~
zA`{!)MV+sz=W_0l?5jbnzi3s6@Vpufyw-h+onBzFLUX|93%|5C_J%(5pS6&5d<z2w
znu7uQeNP}#n}dO4#VQ(7-R9uhF)r6nfKmNgb#>^DNUbf_OD6Z%O1(_o@w0+@Jf!Z0
zV!dQ?zaaG@UXVjhSf^S;x2|GcU@s4b2+z8J1AAP7Axt>P#=_{lyQ8#XV-VAEFI2cT
z2HcIl)3lJl-(0x1pL=JlVso)hGQq!D>LlZQN)hYZ)RO-0zKU%@OnbQyVcHf9t9IKB
z6Z?*Ls09PuuPb&GYc7}h?g$1BA~nV0W0Hy8LCImY{u=kz<nDl15SaoUBk|u7#P%uT
zscsU#OwNLi`dWgX=D;@)?Y0C=%!_jZan6<?vk&K#@E3v(|Gj|?e@meTdjlK(mL%c7
zHz54aQFTi4oI^n@TYil2-#gH48w)Z4!+%)qP!upg&1?7d0jblWfF&L-5|5SfiI<~6
zNqbN#7m2I;H<$HP^X_pS)qjxt@5!S<SxWmnpKxLA1089fSBD0<i4@S>0?nUP_#-i-
ztkPU5b!%0z!R~-mYY@|ip@axeYe2$bYcUYS>d9btXzEx|j;4wn-qqouq93b8gWaq9
zd>pw0L`r@v?(igAePF`j&j*E12BXiq^Fhq`HDuV%2h3wgm;jM=J{U4yySYH>cs>|<
zy)3!&HwwEDsKLYCeiav@P=Sh!3lb{-q?z#ZF9S7cxckq2z6@ejR<bzymqGOicc%E%
zmE!3a1NGf%cUI<Nu{z@F7o|FP;Z$RjiH@LTR#;j-zK`1RW?2`tzuK+Mb_ASHkpb{n
z-Xb0kV^4)~w?ppq9BbbqgjT2-;XYD2v>}X-);?tZL;4e8{HK3Kp}kLryhccuJXYMb
zF^o-9t0uTZCjn^+*j(%gL>Y}?Z_}LvDccybnM#}%h|@NP{<P3Itq`=+J`-A}wG`^`
zOlY0flEi7B32|Ee@;w&ENHlRae5P7b>+X4gpT=YPg9<f;_B1Sz3N?kE&T-U0Jhmw$
zmzWC4Yh+V6XeJesbk6@&D9Phzgz;<SV@I+0xMX5ZSh7SNs&my9b3*R)d0zUlapJ}c
z3JoLOE~R%a2<_+)D$iRG+6$t9Ja0kB=v+E3AbDv)m^7cI7RaDlb9AY3TZ~xBFAih3
zly6o?zT@T!UFuyHHK3UH;&Hk`i$go%4y5?vkO^J$0O@=ehg~LU^YO1dKqy_!b&-}r
z0~d#bqFQJsEoS6R?s>U~o=@zo3`^d|tB!LI{ZIb2uxT{wfytGj-R8)La#-&UW1)`W
z43Jub^<q~UkO!;^S?ppjEs#Igs7~YDdn(q1wzq)@&l<7B)6%!~ka%5Jm@>}2th8bs
zl66Qx6>>-zuaJ=FA#wb=T7I3os^ay~UO^5Krq@IEW$5d^dq^B_Qjc8kZm-xB#<VL^
zQlfa1xZ+zz5^?&LdU(A1$BMVYnAxG(Lx<^GA#3ZSu>5t&#OAQ%JvH$LcVu#N$i^Uv
zfa@dzwuZ57CIWys9M}v3fwXpOXuppDq{drA=E}w4fH>UN(A#DsKnOYl-i;!_QmE{^
zQ3P0$M8LZe0ry}bzA3alEZG~zOUrNRqXr%;t1!8C%8hRS%eRMR8J%l;ik)_-O%PK%
zLYvSaB7H|l2H|eiGQJWdEAxMMlRG^1K^PmR6%P@f4?@;SrPJ*xX4t77yveOg?F?<c
zf+*CGd?l;*J;gS=)W(}!R`0{uP%B4lvnw1<Qqny7O{3ywcVudJX!ChbZJOO7`CN8A
z@Xa1s;s39j-Kx}{FjiybNCMpxjvVF6ZUU~aqBB%GZg$6IT8cc9KU;+7A*^?OGI1a*
z`7=KJBdwsG>W&HS&B+5H3!P%e>&1=-!x$s~32x0Kewi)i&{4?2&@=B!K-zUMyt<#Z
zAP@^43@Z;?3kpG7@K9tyOQ9}@A`4oQSn!ZouuZy4jxMx@CFiK%5xUFmZ<TdbkKW?$
zPPT?+720~`V!dOS%|scHih=d}MH!Gs91Ho%6sI<U{CQlhyw$Bu9WU~T8IKFkRhkEM
zLS4ol>ePwQ4rR)<8Bc`6hFcz*ds2-To|B;+WAX(cN}dcEV`j7*%y>#Q+~(#|ry^6A
zYcrk_Q_E(Waxvp+wdFQ<Lf_MosUafgw3yn|2Qz+x{nU4Fb9;F5DhM*YA>ZzS^%L=~
zK3W`|;iu|n6J0O$X_Q2`O$MG%C5dD;56Q1ht(xfi6>VWme^-Wj$e^z+WV@f?Va#_X
zROctUxr#GI9mtsPjOd`R7Q~S6vryIC?s^rUg$zHW=jXl>m_7?RR%I&Bkne1$9=Y93
zRh$iD`Xm@kGUhuQauUo);w;(cp<0imKA#ucCLd_{Jgly9AH-9~CleRKlCMMc)$Q*6
z$qONOyNiR47YDr<#=bI%28g!6=I$9F>be+SWv<@^Vz-Nux+Kv6anp-o@RfB_A!s*k
zkKEK!s7QO{rj{gb+AeN-mc7Ged_?Eze8~%C`O@-_;%Z`Zr(WvMY4@_it$*)cA4@)+
zx6ay2oONnGa#kSK0~==r@}Q}C98tz&e1?W`fjV=Sdv&TYZygaLJdJsbz`z(D&@-y~
zdv1NjGkMz~Kon|T2Kv%%^pd30RG9lccVcO(DQ`O$sBksq@r!!RguBjA&fV^qiWzz9
zU%j-u&dB3mlZ_<&b#~#QyWLAlD`pp;Ck{JXp2sAtJP#YpSJQsrZb;A1$EvksK!j<2
zo^Rycf;n&CcuT%yG5Q)M>guK*{h>R!%dhj8RR;Vwh*=lrV=v`Z?}2WW>iD6Xm;^Rv
z<zG~@FmKHYq=5_b)~rCxx-cKSls6+NA!xHM%G(i?rBI<oc{_r#Br)rvJZAm9n3YfU
ztjL%A54HSVyiZ}uJ?_w0az(!EDxG<Hi!oQCPBTVt`!Qp5py`zP6X`2OClctr#g?m7
z*L&Rw6|3_0RSP0KtMc+0D$yHXyJ0y_J$kP@Ew#GHq^ZJmzviK-Yt+^Exer#X$=i79
ztxdTm&)pRA-L)H&i9)`F5x{-!54sfc9GH<vxlvU5T0XWRui9$dA?nuq-NeISbA*Y1
zso`sRd)GCP=e(9@L!U$n5S6}`&uy?O6@pgj`bedgLJQVMDzzk0>3USECf-pt?EeAI
CeOyie

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 62eeb647..c9028200 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -4445,11 +4445,11 @@ type Requester struct {
 	// reads it as the name of that directory, and the rule that binds it depends
 	// on who signed the arriving request:
 	//
-	//   - Direct request. The agent's own RFC 9421 signature arrives: the agent
-	//     sent the request itself, or a relay forwarded it byte-for-byte. The
-	//     verifier resolves the agent's keys from the COVERED `Signature-Agent`
-	//     header, never from this field. It then MUST require this field to name
-	//     that same directory: the host of the `Signature-Agent` URL, compared by
+	//   - Direct request. The agent's own RFC 9421 signature arrives because
+	//     the agent sent the request itself. The verifier resolves the agent's
+	//     keys from the COVERED `Signature-Agent` member, never from this field.
+	//     It then MUST require this field to name that same directory: the host
+	//     of the origin that member names, compared by
 	//     the identity rule "Request recipient" defines (the shape check first,
 	//     then case-folded, an absent port the same as ":443", a subdomain a
 	//     different party). A mismatch is refused as UNAUTHENTICATED with
@@ -4459,13 +4459,13 @@ type Requester struct {
 	//     applies it at BrokerService.ExecuteTransaction.
 	//   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
 	//     re-packages the purchase, so the request signature and the covered
-	//     `Signature-Agent` are the Broker's. They say only that the call comes
+	//     `Signature-Agent` member are the Broker's. They say only that the call comes
 	//     from the Broker, and they sign no purchase. The Exchange MUST verify
 	//     each item's AgentAcceptance, and the AgentRequestAcceptance, against
 	//     the Ed25519 keys currently valid in the directory this field names
 	//     (see AgentRequestAcceptance), never against the Broker's key. Those
 	//     acceptances are the only agent signatures the Exchange sees.
-	//   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent
+	//   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent
 	//     signature, so nothing on that leg authenticates this field: it is the
 	//     Broker's statement, under the Broker's own signature, of whom it
 	//     queries for.
@@ -4930,12 +4930,11 @@ func (x *AgentAcceptance) GetSignatureAlgorithm() string {
 // signature covered the body the agent sent and does not travel with a
 // projected body; that is expected, not a gap, and it is why this proof
 // exists: like AgentAcceptance, it is a detached body signature that stays
-// valid however the request travels. The hop-signature stack applies only to
-// requests forwarded byte-for-byte. If a delegation rides a projected request,
+// valid however the request travels. If a delegation rides a projected request,
 // the wire signer is the Broker, so the Exchange checks the delegation's holder
 // binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,
-// not against the wire signer (see Delegation). The agent does not need to
-// delegate to the Broker's key for the Broker to relay its purchase.
+// not against the wire signer (see Delegation). A Broker is never delegated to
+// and never becomes the holder.
 //
 // The payload names the requester exactly as AgentAcceptancePayload does, with
 // the same rule: a non-empty requester_id and requester_domain, which a signer
@@ -7585,7 +7584,10 @@ func (x *RequestConstraints) GetMaxHops() int32 {
 // JsonWebKey — Inline RFC 7517 JWK object.
 //
 // FORA v1.0 supports Ed25519 only: kty="OKP", crv="Ed25519", alg="EdDSA".
-// Additional curves are a later concern.
+// Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4
+// defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names
+// (`ed25519`), a known and deliberate deviation. The RFC 9421 signature
+// parameter `alg` in Signature-Input is a different field and is "ed25519".
 //
 // Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the
 // JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)
@@ -8312,8 +8314,12 @@ func (x *WellKnownManifest) GetExtCritical() []string {
 }
 
 // WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known
-// path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per
-// RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the
+// path (/.well-known/http-message-signatures-directory), over https, with
+// status 200 and no redirect, as application/http-message-signatures-directory+json.
+// The response is signed once per listed key under
+// tag="http-message-signatures-directory", covering "@authority";req and
+// content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level
+// revocation pointer. JWKs carry no kid; the
 // RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers
 // read the `keys` array and ignore FORA's extra members (per-key
 // not_before/not_after, and revocation_url) per RFC 7517 §5.
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 3ebd7528..43121b10 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -661,7 +661,7 @@ type BrokerServiceClient interface {
 	//   - The agent's request signature does not verify: UNAUTHENTICATED with
 	//     `request_auth_failure`, exactly as at an Exchange.
 	//   - `requester.domain` is not the agent's verified signing directory — the
-	//     host of the WBA directory the covered `Signature-Agent` header names,
+	//     host of the origin the agent's covered `Signature-Agent` member names,
 	//     the directory the request-signing key resolved from: UNAUTHENTICATED
 	//     with `request_auth_failure` SIGNATURE_INVALID. The signature verifies,
 	//     but not as the requester the body claims, which is a signature that
@@ -822,7 +822,7 @@ type BrokerServiceHandler interface {
 	//   - The agent's request signature does not verify: UNAUTHENTICATED with
 	//     `request_auth_failure`, exactly as at an Exchange.
 	//   - `requester.domain` is not the agent's verified signing directory — the
-	//     host of the WBA directory the covered `Signature-Agent` header names,
+	//     host of the origin the agent's covered `Signature-Agent` member names,
 	//     the directory the request-signing key resolved from: UNAUTHENTICATED
 	//     with `request_auth_failure` SIGNATURE_INVALID. The signature verifies,
 	//     but not as the requester the body claims, which is a signature that
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
index d57d2eb9..eca0167d 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.json
@@ -52,7 +52,7 @@
   },
   "$id": "fora.v1.AgentRequestAcceptance.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
   "properties": {
     "payload": {
       "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
index 9726e1fa..df5fa5cd 100644
--- a/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
+++ b/gen/jsonschema/fora.v1.AgentRequestAcceptance.schema.strict.json
@@ -55,7 +55,7 @@
   "$id": "fora.v1.AgentRequestAcceptance.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+  "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
   "properties": {
     "payload": {
       "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index 6fd5984e..e9a47f83 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -243,7 +243,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index d42e775c..c2ffe5f5 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -248,7 +248,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.JsonWebKey.schema.json b/gen/jsonschema/fora.v1.JsonWebKey.schema.json
index e984abf0..51c949f5 100644
--- a/gen/jsonschema/fora.v1.JsonWebKey.schema.json
+++ b/gen/jsonschema/fora.v1.JsonWebKey.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.JsonWebKey.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
   "properties": {
     "alg": {
       "default": "",
diff --git a/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json b/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
index 2372e4db..88398834 100644
--- a/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
+++ b/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.JsonWebKey.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
   "properties": {
     "alg": {
       "default": "",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index f8176750..b48aab8a 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -92,7 +92,7 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index d1e1a36a..4fe09643 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -94,7 +94,7 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index 6636b7d4..c9e15cf5 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -133,7 +133,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index c04ae95f..587d870a 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -136,7 +136,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 05843054..3ffa2087 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -21,7 +21,7 @@
       "type": "object"
     },
     "fora.v1.AgentRequestAcceptance": {
-      "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
       "properties": {
         "payload": {
           "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
@@ -704,7 +704,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 04bfd5db..7a172713 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -23,7 +23,7 @@
     },
     "fora.v1.AgentRequestAcceptance": {
       "additionalProperties": false,
-      "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
+      "description": "A subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.",
       "properties": {
         "payload": {
           "$ref": "#/$defs/fora.v1.AgentRequestAcceptancePayload",
@@ -718,7 +718,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.json b/gen/jsonschema/fora.v1.WBAFile.schema.json
index d8c200aa..0c7f234f 100644
--- a/gen/jsonschema/fora.v1.WBAFile.schema.json
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.json
@@ -1,7 +1,7 @@
 {
   "$defs": {
     "fora.v1.JsonWebKey": {
-      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
       "properties": {
         "alg": {
           "default": "",
@@ -45,7 +45,7 @@
   },
   "$id": "fora.v1.WBAFile.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
+  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
   "properties": {
     "keys": {
       "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.",
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.strict.json b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
index 218c8694..faa3619e 100644
--- a/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
@@ -2,7 +2,7 @@
   "$defs": {
     "fora.v1.JsonWebKey": {
       "additionalProperties": false,
-      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
       "properties": {
         "alg": {
           "default": "",
@@ -47,7 +47,7 @@
   "$id": "fora.v1.WBAFile.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
+  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
   "properties": {
     "keys": {
       "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index df79bf3e..43c5315c 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1412,7 +1412,7 @@ class Requester(WireModel):
         max_length=260,
     ) = Field(
         ...,
-        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent\'s keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
+        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 3a16a661..6711950b 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -14,7 +14,7 @@ export const AgentAcceptanceSchema = wire(z.object({ "signature": z.string().min
 
 export const AgentAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.").default(""), "requester_id": z.string().describe("Requester label (Requester.id) the acceptance is bound to. Never empty.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason."));
 
-export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. The hop-signature stack applies only to\n requests forwarded byte-for-byte. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). The agent does not need to\n delegate to the Broker's key for the Broker to relay its purchase.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
+export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
 
 export const AgentRequestAcceptanceItemSchema = wire(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection."));
 
@@ -48,7 +48,7 @@ export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE",
 
 export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
 
-export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
+export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
 
 export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
 
@@ -86,7 +86,7 @@ export const GetAccountStatusResponseSchema = wire(z.object({ "active": z.boolea
 
 export const IngestionSourceSchema = wire(z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]));
 
-export const JsonWebKeySchema = wire(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed."));
+export const JsonWebKeySchema = wire(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed."));
 
 export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datetime({ offset: true }).describe("Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.").optional(), "revoked": z.array(z.string()).describe("Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.").optional() }).describe("KeyRevocationList — Body served at WBAFile.revocation_url.\n\nSnapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.\n\n Scope: a list revokes only keys of the directory whose revocation_url names\n it. A thumbprint of another party's key in this list revokes nothing."));
 
@@ -154,7 +154,7 @@ export const RequestAuthFailureReasonSchema = wire(z.enum(["REQUEST_AUTH_FAILURE
 
 export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
 
-export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
+export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
 
 export const RequesterTypeSchema = wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]));
 
@@ -168,7 +168,7 @@ export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string(
 
 export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]));
 
-export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
+export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
 
 export const ResourceRefSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI."));
 
@@ -202,7 +202,7 @@ export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().re
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives: the agent\n     sent the request itself, or a relay forwarded it byte-for-byte. The\n     verifier resolves the agent's keys from the COVERED `Signature-Agent`\n     header, never from this field. It then MUST require this field to name\n     that same directory: the host of the `Signature-Agent` URL, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
 export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
@@ -222,7 +222,7 @@ export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJEC
 
 export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report."));
 
-export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per\n RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
+export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
 
 export const WellKnownManifestSchema = wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`."));
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index e96109cd..180fa898 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -71,15 +71,24 @@ import "fora/v1/vocab.proto";
 // request signed only by the agent never depends on the Broker's directory
 // being reachable.
 //
-// Request authentication via RFC 9421 HTTP Message Signatures (alg=ed25519).
+// Request authentication via RFC 9421 HTTP Message Signatures (alg=ed25519),
+// following the Web Bot Auth profile of draft-ietf-webbotauth-httpsig-protocol-00
+// (the authentication page states it in full). Each signature is labeled, and
+// the `Signature-Agent` header is a structured-field dictionary with one member
+// per signature, `<label>="https://<origin>"`, covered as
+// "signature-agent";key="<label>". A verifier resolves each signature's keyid
+// in the key directory that its own covered member names, and in no other.
 // Every request carries the signature of the party that AUTHORED it:
 //   Agent → Exchange:  the agent's signature. A direct purchase is this shape.
 //   Agent → Broker:    the agent's signature over the Broker's URL. Both Broker
 //                      RPCs, Resolve and ExecuteTransaction, terminate at the
 //                      Broker; neither request is forwarded on.
 //   Broker → Exchange: the Broker's OWN signature over a request the Broker
-//                      authored — a ResourceQuery of the discovery fan-out, or a
-//                      TransactionRequest re-packaged from the agent's purchase.
+//                      authored — a ResourceQuery it originated (discovery
+//                      through a Broker is Broker-led), or a TransactionRequest
+//                      re-packaged from the agent's purchase. The signature
+//                      covers the Broker's own request and only its own
+//                      Signature-Agent member, never another signature.
 //                      The agent's consent to a purchase does not travel as a
 //                      request signature: it travels in the body, as each item's
 //                      AgentAcceptance and the request's AgentRequestAcceptance,
@@ -87,12 +96,13 @@ import "fora/v1/vocab.proto";
 //                      was re-packaged. Each Exchange verifies those against the
 //                      keys published in the directory requester.domain names
 //                      (see Requester.domain and AgentRequestAcceptance).
-// A request forwarded BYTE-FOR-BYTE through intermediaries keeps the original
-// signature and gains one per forwarding hop (multiple Signature headers, each
-// covering the prior one); the ordered set is the forwarding chain. That chain
-// is defined for a ResourceQuery relayed toward an Exchange (see
-// ResourceQuery). A purchase through a Broker is never forwarded that way: it is
-// re-packaged by BrokerService.ExecuteTransaction.
+// A Broker never forwards an agent's request unchanged. The general rule for a
+// party that does (WG-00 §5.2.2): it MAY cover an earlier signature, and if it
+// covers "signature";key=X it MUST also cover "signature-input";key=X and every
+// component X lists. A party that changed any value X was computed over MUST
+// NOT cover X. Every signature on a request must verify, and the hop caps
+// (RequestConstraints.max_hops, WellKnownManifest.max_intermediary_hops) count
+// all of them.
 //
 // Signed delivery URLs carry an Ed25519 signature made by the Exchange over
 // "GET\n<canonical URL>"; the delivery endpoint verifies it with the Exchange's
@@ -489,26 +499,20 @@ message ResourceQuery {
   repeated AcceptableRestriction acceptable_restrictions = 9;
 
   // Multi-hop forwarding (Agent → Broker → … → Exchange) is carried in the HTTP
-  // layer, not in this message: each forwarding party adds its own labeled
-  // RFC 9421 HTTP Message Signature (Signature / Signature-Input), and each
-  // signature covers the request plus the prior hop's signature — so the ordered
-  // set of signatures IS the forwarding chain, tamper-evident and order-bound.
-  // On this verbatim-forwarded path the originating agent signs its
-  // `@target-uri` against the FINAL recipient's resolved endpoint (the
-  // Exchange), not the relay URL it dials; each forwarding party then chains
-  // its own signature over the request as received. A message that TERMINATES
-  // at the Broker (DiscoveryRequest) is not forwarding: there the Broker is
-  // the final recipient, and the agent signs the Broker's URL.
-  // Each signature's keyid is the key's RFC 7638 thumbprint; fora.json carries
-  // no keys. The request carries ONE covered `Signature-Agent` header — the
-  // agent's WBA directory, forwarded unchanged by every relay — so the Exchange
-  // resolves the agent's key there, and takes each forwarding hop's key from
-  // the key set it is configured with (e.g. Brokers registered with it).
-  // The Exchange verifies every signature, and enforces RequestConstraints.max_hops /
-  // WellKnownManifest.max_intermediary_hops by counting them. This chain applies
-  // to discovery forwarded byte-for-byte. It does not apply to a purchase through
-  // a Broker, which BrokerService.ExecuteTransaction re-packages into new requests
-  // the Broker signs alone. (Field 5 unused.)
+  // layer, not in this message: each party signs the request it sends with its
+  // own labeled RFC 9421 HTTP Message Signature (Signature / Signature-Input)
+  // and its own `Signature-Agent` dictionary member. Discovery through a Broker
+  // is Broker-led: the agent's DiscoveryRequest terminates at the Broker (the
+  // agent signs the Broker's URL), and the Broker originates each
+  // ResourceQuery it sends and signs it alone, covering its own request and
+  // only its own member. Each signature's keyid is the key's RFC 7638
+  // thumbprint; fora.json carries no keys. The Exchange resolves each keyid in
+  // the key directory that signature's own covered `Signature-Agent` member
+  // names, verifies every signature, and enforces RequestConstraints.max_hops /
+  // WellKnownManifest.max_intermediary_hops by counting them. A party that
+  // forwards a request unchanged MAY cover an earlier signature under the
+  // general rule in the file header (WG-00 §5.2.2); FORA's Broker never does.
+  // (Field 5 unused.)
 
   // Maximum time the caller will wait for a response.
   // Exchange SHOULD prioritize speed over completeness when tight.
@@ -2047,11 +2051,11 @@ message Requester {
   // reads it as the name of that directory, and the rule that binds it depends
   // on who signed the arriving request:
   //
-  //   - Direct request. The agent's own RFC 9421 signature arrives: the agent
-  //     sent the request itself, or a relay forwarded it byte-for-byte. The
-  //     verifier resolves the agent's keys from the COVERED `Signature-Agent`
-  //     header, never from this field. It then MUST require this field to name
-  //     that same directory: the host of the `Signature-Agent` URL, compared by
+  //   - Direct request. The agent's own RFC 9421 signature arrives because
+  //     the agent sent the request itself. The verifier resolves the agent's
+  //     keys from the COVERED `Signature-Agent` member, never from this field.
+  //     It then MUST require this field to name that same directory: the host
+  //     of the origin that member names, compared by
   //     the identity rule "Request recipient" defines (the shape check first,
   //     then case-folded, an absent port the same as ":443", a subdomain a
   //     different party). A mismatch is refused as UNAUTHENTICATED with
@@ -2061,13 +2065,13 @@ message Requester {
   //     applies it at BrokerService.ExecuteTransaction.
   //   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
   //     re-packages the purchase, so the request signature and the covered
-  //     `Signature-Agent` are the Broker's. They say only that the call comes
+  //     `Signature-Agent` member are the Broker's. They say only that the call comes
   //     from the Broker, and they sign no purchase. The Exchange MUST verify
   //     each item's AgentAcceptance, and the AgentRequestAcceptance, against
   //     the Ed25519 keys currently valid in the directory this field names
   //     (see AgentRequestAcceptance), never against the Broker's key. Those
   //     acceptances are the only agent signatures the Exchange sees.
-  //   - Discovery fan-out. A ResourceQuery a Broker authored carries no agent
+  //   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent
   //     signature, so nothing on that leg authenticates this field: it is the
   //     Broker's statement, under the Broker's own signature, of whom it
   //     queries for.
@@ -2129,7 +2133,7 @@ message Requester {
   // HTTP Message Signatures (alg=ed25519). The Requester's public keys are NOT
   // in fora.json: they live in the WBA directory (WBAFile) that `domain` names.
   // On a direct request a verifier resolves that directory from the COVERED
-  // `Signature-Agent` header and requires `domain` to name it; on a purchase a
+  // `Signature-Agent` member and requires `domain` to name it; on a purchase a
   // Broker relayed, it verifies the agent's acceptances against the directory
   // `domain` names (see `domain`).
 
@@ -2374,12 +2378,11 @@ message AgentAcceptance {
 // signature covered the body the agent sent and does not travel with a
 // projected body; that is expected, not a gap, and it is why this proof
 // exists: like AgentAcceptance, it is a detached body signature that stays
-// valid however the request travels. The hop-signature stack applies only to
-// requests forwarded byte-for-byte. If a delegation rides a projected request,
+// valid however the request travels. If a delegation rides a projected request,
 // the wire signer is the Broker, so the Exchange checks the delegation's holder
 // binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,
-// not against the wire signer (see Delegation). The agent does not need to
-// delegate to the Broker's key for the Broker to relay its purchase.
+// not against the wire signer (see Delegation). A Broker is never delegated to
+// and never becomes the holder.
 //
 // The payload names the requester exactly as AgentAcceptancePayload does, with
 // the same rule: a non-empty requester_id and requester_domain, which a signer
@@ -2935,7 +2938,7 @@ service BrokerService {
   //   - The agent's request signature does not verify: UNAUTHENTICATED with
   //     `request_auth_failure`, exactly as at an Exchange.
   //   - `requester.domain` is not the agent's verified signing directory — the
-  //     host of the WBA directory the covered `Signature-Agent` header names,
+  //     host of the origin the agent's covered `Signature-Agent` member names,
   //     the directory the request-signing key resolved from: UNAUTHENTICATED
   //     with `request_auth_failure` SIGNATURE_INVALID. The signature verifies,
   //     but not as the requester the body claims, which is a signature that
@@ -3649,10 +3652,15 @@ message RequestConstraints {
 //   grants access against a stale revocation set bears that as its own
 //   business risk — it is not a protocol deficiency.
 //
-// Redirects: a key directory, a revocation list and the other public
-// well-known documents carry nothing to leak, so a party fetching one MAY
-// follow up to five redirects, re-pinning the address and re-vetting the
-// scheme at each hop. A longer chain fails the fetch.
+// Redirects: a key directory is never fetched through a redirect. It is served
+// over https at /.well-known/http-message-signatures-directory itself, answers
+// 200 with the media type application/http-message-signatures-directory+json,
+// and a verifier treats a redirect, like any other status, as a discovery
+// failure: its address is the origin the signer committed to in its covered
+// Signature-Agent member. A revocation list and /.well-known/fora.json carry
+// nothing to leak, so a party fetching one MAY follow up to five redirects,
+// re-pinning the address and re-vetting the scheme at each hop. A longer chain
+// fails the fetch.
 //
 // Domainless requesters — an individual agent with no public domain of its
 // own — are accommodated without a protocol change: a registry (operated by
@@ -3678,7 +3686,10 @@ enum Role {
 // JsonWebKey — Inline RFC 7517 JWK object.
 //
 // FORA v1.0 supports Ed25519 only: kty="OKP", crv="Ed25519", alg="EdDSA".
-// Additional curves are a later concern.
+// Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4
+// defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names
+// (`ed25519`), a known and deliberate deviation. The RFC 9421 signature
+// parameter `alg` in Signature-Input is a different field and is "ed25519".
 //
 // Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the
 // JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)
@@ -4095,8 +4106,12 @@ message WellKnownManifest {
 }
 
 // WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known
-// path (/.well-known/http-message-signatures-directory). A JOSE JWK Set per
-// RFC 7517 §5 plus a directory-level revocation pointer. JWKs carry no kid; the
+// path (/.well-known/http-message-signatures-directory), over https, with
+// status 200 and no redirect, as application/http-message-signatures-directory+json.
+// The response is signed once per listed key under
+// tag="http-message-signatures-directory", covering "@authority";req and
+// content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level
+// revocation pointer. JWKs carry no kid; the
 // RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers
 // read the `keys` array and ignore FORA's extra members (per-key
 // not_before/not_after, and revocation_url) per RFC 7517 §5.

From 2789ed8dc3e8f59746d89b3f26afc477dff8859c Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 13:19:13 -0400
Subject: [PATCH 110/164] Answer an agent with no account NOT_FOUND, and pass
 MCP tool errors through

GetAccountStatus did not say what an Exchange answers an agent whose
signature verifies but that holds no account there; the response comment
and the guides treated an empty billing_ref as that answer. The RPC comment
now names the answer, the Connect code NOT_FOUND. billing_ref is set on
every OK answer, and a receiver reads an empty handle from an Exchange
built before the rule as the same answer. The reference and AI-agent
pages and the doc comments of the three SDKs' account-status verbs say the
same.

The Identity Service and AI-agent pages state that an MCP tool error
carries the FORA ErrorDetail the service received, unchanged, in its
structured content.

Both changelogs record the two changes. The generated code, the
descriptor, the SDK types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 680441 -> 680858 bytes
 gen/go/fora/v1/fora.pb.go                     |   5 ++++-
 gen/go/fora/v1/forav1connect/fora.connect.go  |  10 ++++++++--
 ...ra.v1.GetAccountStatusResponse.schema.json |   2 +-
 ...etAccountStatusResponse.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |   2 +-
 proto/CHANGELOG.md                            |  15 +++++++++++++++
 proto/fora/v1/fora.proto                      |  10 ++++++++--
 sdk/go/connect/account.go                     |   6 ++++--
 sdk/python/fora_sdk/client/__init__.py        |   5 ++++-
 sdk/ts/client/index.ts                        |  15 +++++++++------
 .../docs/components/identity/overview.mdx     |   2 ++
 .../docs/getting-started/for-ai-agents.mdx    |   4 +++-
 .../src/content/docs/reference/changelog.mdx  |  15 +++++++++++++++
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 16 files changed, 77 insertions(+), 20 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 87cd31a3e6ff92a160cc96739c38c096ba439191..211e93a5fd007c1c3d3048a433b1a7e3764c35fd 100644
GIT binary patch
delta 46274
zcmZ5}cYstyw)gby+c!<mbe`!j)7{eph{((+S)D-;a7}9ttGiE3?CN{F>aOYSxBDD&
zPLfKJWRR#Ja#fZn2#7=n0Rc%OQ5X;qMA+|ls_JrC|C%}H*7?<`s#B*<ovM5L;%C>7
zS#y2Yo}QjcPj63kp|AhL%Akq%z=wS`?^>e{hAchoOXO{_zdG$RHP7evo}YYOo(T=}
zTB??(=wWrWS9v(u!^<9iLK|0`ZU0jCnLl-T>9y=@FLcRv`rqeXc;=-)b;<tEOE16q
zYSZkCuf3Z6TbIAS-sRQTvai1Qr<b02?e)KPv9fP;`P++se6h>(O|#FwPJ++8mVM#n
zKR^F!_NAAz&ph|s%dZ0tyw_fM@l_WR|3CB6t8aGsTbJjvZ@&223sj-?hir$JUwWy_
zbFXEed-?e;+57H)r1Ks3KYCxsN>{HpUwHY|E^h7F=U?tZ6}=|3_<Q!nSFP-$_qBiY
zkvlux_sCrx+CS2%W7F(2uV!C<iLH1*i!|3g)MTy5DzJRi0Sb}Dl@948^5zGvnX09z
zd0}mfH}6}!$&*@RC9uV7lv;nZR5ee@3#)bPnLlVR+*IdPLL^H}AlG@r9GOT!)p-+1
zYqE#Sc*5Eaud;{z{0D7PE&j8ln8z1ZcX;z16c12#c*Ak$DNuHJQzce_*Wob;rF4(i
zYlSQmwRns^W*BYQ=~ZvEB38b`QVYTS#;e})pG=_b@~XGy{*$YP)!kn8KI=yh8Vx-U
zdGqG6>Zi0bp+jCHW=*69c&O1wyzKO4eQa|O(E5m1F}Ru_q4g23>32xfbHp16T7Tz~
zczA*pJgxns;)GYpmu0A-C%pccLqg<)H=eMXauH~MihcC7R@wQK(^VctL8Yght^x^!
zQ%;A21i~rma2gJf29c?|c}Ec`I_i|S<SuKj!YhHmIs5i!v?@={Iky%sy5pQTKPz#(
zsO6lutc^pGkoVSV>#)f&)Uev$p7*SFRITZ+%0cxgDlq!1`Q=gwoeHu+Q-=gbf3@mH
zYqpPLpjo5sx<6@im3E_D3?H#oX&4^G2aM5bxPip*0b{g!U1MvkXp0usCaB6(d&Pfi
zNlz{Qb%sWR+yvDW_T^DD$W2hAMckl3!k{Lo#Zy(U6}Aj?n}&WW3~Lirb&BefeaCr_
zn}lYenCTSL!oJC>w#;K?cr)NkW~fRo8OpLZ7Mn5l@}D)W3LIg}9)+gf3^h?ATc87R
zhMFm}t_b_Wc+FMW=?{#H9X*PHex2*~g@L}9>-L2Kq`7K1Es+c$%~i|Ft#=d{uoBij
zQuB7%`~RX9dqN+nMqF61LKgfnYJdf|1_8*Aoo)gN$d6TN!5{(ou?h>`M#_<?X-iaP
zCEN9~R#%JvMDKzRu_aFLf`r%-H5%i+3lhD%L@in=dzTozcbBT_3fa4o2f1ZV?@AVW
zcRBCf8m<93Dpe^-R%Kb`U$vV%f)Fl5Q50C)YBfK|y8|S2TCIkP9TM29)nv*VD4GIt
zovK`yd@FlD3vDveY~5eA7i++B;AjG@Q}e~l#Iyq3I<+V#;k;bFVI%828J?nGptjgA
z|4sW}Pt6t=gC@WhHD3%p3ISt_nh^5=Brvw9jjrQ{!>4tf%Kp08OtQAG!Di|lo53Rp
z);Tr<5`uMCZH71e8)-8jpvpI{3K|CZ8^>nw6iDAVHUkn!-;m9GOis@m*7m7+|7IV&
zuGxWosu8vxMdQ3=F$dTiZ)lHK9B{@QOduU_Oa&y64v?ul$VKq*5c~NJ?cth3jxJus
zgYG!wj1WjF<cttVARM9*>Z5W94E0I7|C^er)SPrNXp~Q?`NF?>`6!=MQ#bHo0SSzg
zYGsu*Tws8_U~m4r7E@|2xEM6F7u5VxDMUkiK}`$4<W*>BFOXlFLqqGOp}k_~{;5@Z
z+Fo%nXlSpvdeG2bQB!;cB^h8`QEzHy4M4y8u!8pR<qc+o|4-{5?&0%Asb7730qyBi
z%2{T(d0zvubb{vdnVzBpdiu(8)+4+yD(KC|y`?>t>FrZeq&muYP^Pypow26EszHP7
z$3nH*^mIR;l8}Ws*H=<%-Nnm5wE=8ft#(g(fKMrtWxS9a;A_y(`V%jMHV<NLyJ|0H
z2e}Htr>KKSp`~6l3ci5(@>bYux@t>2VdnD{^H%W{@*SUYooJO<6hZTe;{yqhcYK&Q
zx1k~rP0}&U=%KaGjPWTAxiVm)%otze>#af5Dy&*zbv%2ahc+ZL-lsH@g*exDeG}_P
z3=;~WSySwyp4#i4^c0`M4T89ko#KN*JjDy4UDMdiUfR>?X+DJy7Rpe&rui^fFkO(C
zFf-V7y|srkGhCH?C^Lgp8iK_Ng)sUH?9siox0SXFe9HAwCk>?*_?lKYBy?Kft88x-
zS{liap)K%LwX?R1c44Wo*$e%&of+Gw+$4o47PEaVT3Wqf!jQs(u-tySzh)@e<!<W@
zlv+-$UqKUB4QrqK^0u<R1GVLW&wYqi(7SL;n7C`%<Ab#J6>EKpP8ARnTCDXM1r7-%
z*ZP7X>t-&3hwItuLE5bq>s=9=sq1})SUpufQ`h_8-@9-TsIrk&4A%Zsu~Awkc|?e8
z^p%K(8YF7j=)*$&02cwZg{>H@J=AuKPkLNcp=r6rC&LAhK-l7I&_wD<({hWiqSE?I
zLyLW3?VvC3C;P!6+U?%JK_7zB=0NsQlMk`U!?czahkSB<0uxY&e5UZjAOUsAhj6k5
z7s10LOdYPZsyN~_*~gvJ5uXv^wS$Dn5noZU)r^av$;a8BhHEV<j=Lh%<l{bgP3mVK
zZ}M?ptjM~NivZvxTRU89R&ml5p*EiM8Df$0ao2Ow2Nx(5gSDP!*NxCx)tq*E$;X4L
z)4qJsu^@qP+SgDx9+0T!G}-bzTIPIY%;(vd5!wfB&$|#5Q=Rw8m<nY8ao#6Gc94KL
z??VLnE~Yu$oYqat8)x?&sg3tE?51(M@v530*7|D7KuxtKc`Y4uAJYpzM?Cv(rcLzR
z)lXB)tsufF@eEzoUsHc~4F~lM(9{;_E`c{%Q^o^tme0Y1iy@xfe6%)GX*otyuXm-%
zM~v0fE(p$K4HzQdI8B}6v4)Z3*2om5*r9P+)Kf7<lePdZT02FPkswHDF-3zdcj7X5
zIGsH-Ui(eWbWIwjrqJeOx+ePzBo)%aV$eVWVY-GvTWoO%D7M7@dc0QSt5~8bCbtHS
z&xa)%v?b#J385uaZ55XRwVbt^qTN)nTvJ2@qwxu_TnmX193&Oe${Seixd@EoGxqKj
ztwZ%^uBNmqeWvA$kWk~s@tKxsEGs4B_)NQ@DW57D*~aIrbgI^}=5rUp2ZYZxX<jIU
zwtlWPtda<18=q^<np-o;yfkuy>)DX0+U!p2T?mc1T0UQ+s0<+1Ytj>d1jKp`o?tF*
z9W-pdwLO}0KvR?BOxA6TUSf}(rVUVQ!4%;oiU47cJ7g3x@1ee<-5{PKyxgM|9neJZ
zP7EGieygebH4(f^9_02yIUc-A7Q)MY8U^pW(_9;P+v&PeoZMhfo25Mws086?LE-jv
z-4xRs$^mV<j_JKsbcGpKXS1fCYIT*fT^SQHvvpGh`!EK`%+?X?^X&?HEUeDAD;H~}
zo|^gkRdcg2F!S}R=4Jt7z8>Z)HJWPyW4_*?ku^iqn;%vevA+M(X4WinA@TvS$c4xU
z#3DWHSW-S97U|^;t;Gg!v_GtVVZXFQt5Ivda54NC#xL}%w&VxK7kWlSTAJbq#us|!
zjn*=Xv^1q4tZuiDtkBvkHQQZ`0$^;{uUb<9Ft+Pgt*HPQ+x2EGtTUo1g&0@%$5q<d
znmsN=At3hXawDoKg@D+jmo=9LSqO+ddaE|p6^*MA2&?rrTdj5VwySqB0>G%(^PQm!
z0Ha=yI0hO3M!lZSTKx(*Mlh@mF_dBU<LltgYVohw5@2EiW{8n5avLB4GsGx%1~&+p
zAqEClm}L-VImE~fGenXC#cA&ik)eiK#kZ7_1%L52v1t3KDWR}B(%{?2PXGH_mzQ2;
z|6FVaT7Zwb@jxtLAOSSekh@5bsCy*U&3BOqL*N`|Oxmn@+KzSA55p+N8dvR#bQx>N
z?IT10G1kCVV3Y~Bk6F3M$a~k`yG0wR1{WFFK8~P4(#fkXW<9^wMpZ9%puq(6Vh0)|
zpcfnA3?C$rfL?6m%B?#&0v;}9k8RiPu373LkdIyJB9M<=YJ|n^OXogzse!ymPoV_*
zY$e;XUF%)F(uE+0w$g>5<#?qL7Ne|lkGs-9sQeqQ1XNnhChXAes#)zKc!99mMWEGr
zwILTqojc&w1{TIChyl?P@W9*bhC8)sO7%7u1EGn!&BdVgd7IPAkU_oM48+i{a0ry$
z$+X?t-)eTc2(&!!bP>n}?=-?<x1#gqd8d&rv-;{B0(NoS{%E(>-&=d!P@=NS$>|<9
zV#4$5-02=S;Q49w0SPyE+^7(XF_C@DAaN=mhi|la0dSD{1MiVXtpTFF2v;u|N`vHj
zHQS-t1MQKWd<hncEG4p+`1_*0bf5NDr3PihgwYipExF{jg#7p=*DT17Um~+uj5I7N
zg;KrjKOe+)qNbO56~jOSdzo?{jzYlbWflo<2oe~*Ozd0M3k-PSA@&~+X&XE>LtG3K
zdJHk8<?9N0<sqiDe2~BxV#4xg3*&-U9>HEYtj(<%;X;s89^pceQyyW4`HlsulT#jH
zHg3Wvv97=;Gm~%STY^9Xm?>v2NJuhM&Rmd?WTrE7bp^h7yvg%FcY%P3jdykMLx=IM
z4&;%?yUievJf51-s}K_y-e;+qcf#}}&lj*ze<QZ&n08DHE;Wsm^(n<i2F>JE_RsZN
zwWq}@Q!aDh0(F%s<0FtjU1egiMVLoIc>1NOM3Te2Y_F*$S)*Tk5u2USUh!0dFV;$w
z;>FBDZf_s~@}(IHTjQyR4cfYGW-ZTZ6Dl{GVlPWf$ZR%Cu9GqpA#FCB+#nJ*29b44
zIj0S-taIz38Cqw`d=<)2Arnc6ku*09nxO~nrROx}tvu+A0Jso3XeNYr0tummCd_cH
zXdycJxZUHT_JybFxLXs=!sDh~{S7_~kDFNi-z~;o7|FJ2R^CkepO>`p`Qd4>6-wY@
z3xF=3ZYd2|w*`7b_JFQy4MFk+gC3$Ardz0(#sf5Jn1RB%*$R8W)SKJ$blvO8fF*YO
zC;)*OB(MsaLIC7@_GUx>+>?FJQh0laOKd9jF|zjv*tCUK-Z^`brMFgs3oRrcmSPZm
zJgf5&yX@DO=RUGz(g92ee`LWw4HtzFf`4Ku->|&}`mkF3CsaYQ2IW4n;7zgE0Sg0+
za@lVzFGc8_QP&&&`l+Qhr?rlAw)VyjL0xRA*=t#7^}j6a6s{=+>?M}k@LCqIme&4?
zhtXa3D;CCX`LDn*`&L+L?piQ7vXz#4)3q%4p3i=z7+lFJOTEr5Rofd8rn=fv8@s&T
zUd;8+Ew$0LEX?6Gzfuh0(b`{?LbS8)Kk$2d5xsozEA`=**IQ}>g0FRY5i!D-mRfdg
zm00jM{0cvU9rv%mqG5H@ulgc}S@x?I6=9=&E&Mh<ZeLlo*sD3C1Re&i&Qfo_mW6@a
zW{K#A>xxnsxUVhs)@w^)+_qoa{V0WT+wm(wjN48NHBJ+Th$*IiYbgg=eNdlTi~qzd
zLdp-7ersj2(h}h(v~R7lgI6t4@p4PtOISjC#VagvpQWa+WuZa)Ej4p33)lz9EL!pz
z1L*H9<&34WNLX)Hi~k)ZD9!Y}s{~q&l4WPED&ZAM9JbU-3GbCk9C1y6v!KLL*LFAy
z*vEcV3cY&#FP3`4wP5Jh6YfZINp$NE*H$S;@|2~vx+*9Jvfff_u4SRh)0TRh)q%Gg
z$Y<G25xrC9tR>blj4ox(&RR&KJP0p?1k?p9?+P0k(H{t3uzW%8|9ArGB0LlKe+@+H
z2{cdM`alBWqE(u<vZw}WrLg)lYZujX>7OlyM}EXanV+c)!efx2F0rmry)1pn62T5J
ziA!b5co}rgFKk&<FHiqsDLhz585*Hqs7wVfgC<=b71OISmt7cY(Pb*q5iLT3sat+t
zKXzYC?-1;k?~Cvj@%&Qvd^RbjSERe=D?BLkfeX>@`N(SC3v^_Q!fFq8BBtM$?%|f9
zmh_-95AZUeda~aY=?|rQ=1cc0TzXF`178Omw4@hXTcmeO_i}NlCB3LjTV4h&>COIB
zthY<|&X-wMq=8VTH<f9{%fJr$u+_zSn{=OiIe^IXpiCbsb2~4C`PP@E;(EtS-+YDV
zHlP3{H2YE+>Jp@a2Il7tV{gUv4uOIBz9QZwJkK(SZI0`e=|TAl-(&i~gyf)nEZ+@)
zjwDG~9n4A+dZYB<e7T5#i86z!3{5ZOL=c9trxSYX^pJdo=eLMSTq<)bFM}Q#%05cy
zHR+-G3J(=fhI(Wum8s@s&?9fNU{Y_JdE4m`q(V^UZ7TCS1V?6A8=0TCp8X}MKi+U;
zz7aso;Z;p+dPe6f<MUPPm<Ks1Q|7dY$BriTqb<hdt4(+cN<0GO*nD_EN^%Jf)Eh^f
z3luS%wEWMpwG#bjrDjgPjA+5daLmb<(I`mt&76F>)d2~NIr-S?9ERfq2A<AmH5vVA
z^?VnCc1!bJ2nx66=Z8h`4-r7j&o7Si{gz2RxR5=Y)$gue=pxW&X`zci)hx`HTOEi1
zVPQVDI*)N3K-ug_R{vc)+ePpK!OqX8zVks(S`X~}AU|{<l4SC6=&+1JF%zMfwl-h+
z!tPq8FZDi)f5jdF4*;{)RfK}GwfSMOsm4>ltj!nRolp?guFWs|B42E(iGf@XOm|(r
z`WNf_0LIn|YbW#b-nS<<)DP(mPv-L!u2;nc5Usmk>FrmoX(k5Ol7mY;dsc-$Rc+D3
zk6?wyQanSq_4KQquHitJUVgQmHIs4;7LD$3yL&VJ25;?fzq|keE*dc0FMARsgogXk
zlhjKf5oiqer=Aq3Ao<Q~xWD8Ha=*L)IH-EK|K@x6W{hOyW^B0svB#|e2o_O}a-)9b
zUB8<A*^{-Kw$fEkEf}I#@ff{2+AnPkB$OKMmwRE5P-?VaL~n$JULEbvzUvpgN(^yL
zV2oehr;sdupJJ?E-lw?A1ll;idTTkqPjQutQ5o;YeF{1dv|xnVB)>A9ZEdYTP>cT@
zMad2)xr&k<PV&p)hZLYE`Q`9~grbxDWz(-J>fC3T>?+DxT+u16qLK-;sZg{`Dk`~9
zbQ&qjx1knQInQ3%MqlEon&($EIdEj&^ZdH7b`+vg{&0jsaYfA!YoGe__S^Gr(LeJ<
zKJ_C>evr&QA2y<W=~s5xJ*)Kt-dg-Cc1U;tyf6Kxzyk@qFA0y5M<CJAFa6OSXeb#Z
zF}|XBdV^nW$_<4$TX<Zy(JvxpUI;AUZt{zG+F`+*Hv19l)RKuwNq}wfi@4HZ!EbK$
z!@*rs3WM{NU&QN9DfCtyfn8Gy@$@#oT6&d*DGB(muho^$(vZ5{uRdwLLyj$<MtV1U
zy}dr>{@s3gI0YtgssCuYfCSENKMtoPiP^K;ALh{uJ%yQ)``GP|w6y4cKtB1pee9{*
z_1m7`=T{sQs%oFVP`F2w0q8zI+@k=cyu&_!qND6-G71FU`~1lceEy-lGynGa+qJj)
z(182H+A)7#58Km0@9k-D%+C*fys95g=7e9Vhm&~#KE^M746)ekj{5yAe(<ZUc|GD0
zv_0upA4bO+vM|mtPWjdMJ=S$-j-Oo2kF2tje*LpQ`sKL*m}t(A{*cIxfkbnD^kc!G
z=72<Ve)K1W-y)JX=SP34BX5r6P;Tc(fBW05N?s2T&$CZD={G)i-mi!=FFzlP^Zuwv
zpn*g^=gDb^df+rbX73Tr;bVbrJMS;MTh>FP!*fXI{lB@>nnjyyKaI~7``$bBIi8v;
zjuQYEMs>w6^RpnK&J}+|q^m)q;wyd}d>|+S1gP!>tmU10*S6gYq#pqncF?^*Iy{ho
z=w2W%kb&ev2v*01FnR@HZDv8<Q2WO_^|407nFVr*D8T5=DNsHrP^}5H{ujvMBOd$k
zLH*sk=N72VczeYoG-h6b`ddDHf`j3Ezd-HlK_7V`AJ$eCC~JY&-E#2Yw~1$ueMtBC
zTCOg@Zi!|%7pHjW^8$ERvIoHd;F<!pm&e*flcs<SVguXqxW1)&gVS~}(R~{VWcPtY
z+cy+M#F7INZQoFUu$B%L3#e~5vu}T=w|Z`Kfg;=wn8YoRi#JG!Y%aj!O+yV5L%q2m
zeV5SG8S2dinLGJVQvo^Dn+rPKVGXBqumT$DL-w0b=rLdCL$0ng)Q1XW4jqM1@u7lZ
zaU}*MDn3+zD>0&Cnwp0S8b8WC3!b7Hy5@JN;QB|bE3^(4kiZH1_)~gU&r>JdTIeYG
zM1i~ughHt0M1i~u1d@abaAGHF@uHR!1tsE+9G=QrP85{hW&Ibg1fH>;t$SMU+_~PZ
zgU;IO3uI!lfM=EJ3uIyvB<iRyKw?tVfxrc1qeo;*C~TpY)E8X$ur-3hi2_;(uh@N_
z(Tlt_SKM0YJno7+wv>jt;*Kqy$6cYZ{gwjG0_xm>_BYS#`;?~!7RtE+E}#b%%DDj&
z7y}FC+yDuTfrXeGLQ~2O4=gObM`}vBVbXM9Vft=<9jJh=%MM}j7xc&54sq+CRPPYC
z4odY7DU|CtL{P_&LagIcHOxQUteaGr_o+Si1-;xGm{f@P`z@$nNY*`-?foCUYvt5J
zxl)1&sHufA#|IKnQwx#f<I6}P8PH5N=+F9?ikYqq+4IaoQ+P6zfy~T8oZe%DfNId3
zIqZ?Y=xwX#I1K<34VY6XO$H<o<`jm+Sr14c%qc_|N4E?LiJHeY{zY$DJ<mlT7c|dB
z;1NTiG&+coOd*V}9Y=sk&1bj0q~BgM-$kIsY`%*?vGDxDknrq<+@$6gVpi@T(=Q~2
zKe3m-q(A9t`-zJ|rw5-n1A#)o_@q#VqadNhC)AEHbjlM5Yg-HRrrM9aqK{S^Zl!@B
z#}$C%+EJ+NE>!7qjSgBI?i0_BzOMhxQ@gVeSuk>3;u(7Mn?ht2Tn_5lRj5976>m?W
zvLAT3h%H3m2PNyO3=P`1g@`s>4siDtB75X=fV;0y_19Y0qYnaPG2gM!oB9pUeOIW6
zbTgO$`mQh_)_ahU`L0l|_aI^5-xbRBo=Cnxepe{hd&!{%^1DK;_uZ(o17r?I?Fnxp
zBm3-8$IiedcA+T(4UnkmXrT;OK%%Cjh2j6>Q;A5iS2<c3dFWae7kcEMw8KS3Xz~fB
z{#~!BJmJ<u)t@MoNqLlk$caKE<;Mx-uu7b<U;ewE_SBwnEFr*`#50a1fCR>wLb(S3
z35+v^Sk4RK<3Sq0D9qx%8U=Pl3uVs~mOTwGf0ad56+YYFWA&i`H$W-&o&lwC@`9G_
z^eWDP{QuD3@>YW-0(=yJJ@yR9c?A+$^bCZA!v_g1dIsR|X`>k+lkUSle+wJUJ}v@T
zbRQRiEV@r1B#yQq0)##R9BqxJgXjQUpf)UkOCwL!>T#tO|2m407aSIlUJ&H~Gb|t{
z21vjR3t(bU01grX_^?1~d_V-?#NYw=@PG`!i6a8=5do1i<WeF49}&p4<^5PIi(ybl
z1lm0*`<6?hzL5bLG|N)x%aMT`&y_l0(0OE_-S4jzgpVKft197<M+I^`gXajs^hO2R
z)&7ShGTJO4Lw8vv658+lN(&^k-wEXIytYatv_}U-4&A{=LVI+e!GBbVg!bq_JF$_K
z@HZo)J?2_`u{9WbZ7&Kt8y8T2@0c^1GsSM&1LoXziaUNf8a^c;Z+-^&rI0Cslw(M=
z!b~AU8iviL4-RZ@Aa8-)x2GObf^!4Dko6e?C?7w*p2ueP)>o(J1!N)$OpMRG0OrEe
zybLVkeKxR<{%q#`fJ`#t2pVPHr!u<*5XcW$L0|pb^alZ%Q^O%Maj6h?Bd82I&1Ysm
z{kH6U7l^V|^Qp{_q$%udNdVU<U+Aa*O$jUs;CzOzD)Q60rR?Yc{prlofV|2HCS;eA
zvA;)3@YA?u?1h2)tjw~2Oxl5oLd&R7S5XM$a(2@oz5C6}F;i)oha_pboC^7&1oB~@
z1@blqJXXHt_0jR@X8~k9Uql@|iM5KI7^MGCdR0IsJi&zcssK)*@8V@3@i}{auzpYG
zbEh+qhC-Ro0|+d7kRCh_wT|r_toO>S3&@Nom?*R^fCHz4q7b@l1M4wFKa}0zj1Q7Y
zD71mPY$_dX;(o@NK;ALC?@+y5kDLkMUgBz+`$4P*+NFSU*<Q-@j!G^56}xRbfP$9-
zrg-ZDBx<=7C=Bq)4ibZKDG<CYCp$4<l*ktc)M`ErBnMjj5-6{@mIa_+0#&zKD?(fW
ztZEa3%Cw-G{2*lGGSgzC7PO-Utrio5a?c;+tHs2i-1CEk788TfX+d$1i5R4XHYuo1
z4T^hAl7~ts<1Pw!%aVnAOjCk%kBJtMAa&|{L8Vi&BFh#}(OW+YLWKHw1SQ@J2F2nC
z5@7EI<>Ckue&fBMTpWqyi{pDixj0G=EspO6u{hqrYXb!0sj2#%HFJW}-3IyUGbbqB
zEl5;5Cn()5NRkP{-F_@O4z91x-Z@qO)aYF2V$j-A=VH*>Q5TefYml!UbwL@pf`saI
zK^eFbDFWBJAOhDT!ae}E&ptC(|8J#cpIZxs*!zMqkPq^RX<x8N>^?z4(|tkgK5+nn
zo<-S%L2<MXf>UDl(=+IIFes1qK|=Ci&^g)<Qrvtr$dC3rfIy3nx;jw!eAI0zh0jNW
z@`eHm1L<fGNBj3;vLeCxLon|mYp_7SC-6g1o;4#)NEb}sT7WeC$)G%#0uz>SGKj#t
zBc>oybJ%jQFBa%`r0aw7Xar1@si(0JWk8)_l^^PNG&~cO9uk>1;s!AT@8&qr=WI|Z
zO;%?+u`9#%1Y7W--ZTvsPpY6Inz3hTY+xZE(b)6smk;$j)8~Wo_y<gsIUmI4MPQ-_
zF0f}8>i1?Z1f|16Yf<Jx5Hauc2n0fy4WYap_Qr+!G&3+MgtW^&7?lvUeG2QoRR3+o
zl#rZmV4}5CLZ%3xK|<*%AwWIBMeuMs`(>&A`^xFA2+h#xAycGQLVSi!4<WVkHk=cx
zfikmLuVwo1>RBOa=wL$eSs`iYAOSHeB#jg#YMm8AM?Az4K+R>3EY}~YoEs9I3s{;P
zb3-NkW;>BoD1^J+<iA0q^X9X!m+ReY=DW4>twKnKRVV|9`5}2%6eJ+#hhVgWC_oI6
zincv+g&y$K*e(VIR<?^lft4K!iCsTrfMJK=;`wF85Lx~bd;dzk)Kk60#h@v$B$O|f
zVH5(!l2C&i`DPL%FqVXxx8!aqL^EJHyJeMLQ?VR`EJL=wJS0<oU_)ei2r=|)Tysq7
zRcz`i{f)|1?l93MpjGZL(Iuc&G)$j}4nv%?j@`LhUtF`!Rg~@kt#gNo7P)mHc_lK$
z?*Of%4&%2fAw_rE+kLLjtl8*7&>f(SE(F~H+USln-2vJdN|ka)5u!UlTSDS>o_1?=
zt!hh1`UyOO;Fgf|6CfeDCFJ;t5M2S<9^!t2y|h->+HQ9>pc_EjT@C04(DsmY6A%Q@
z_7L0zzxjcr^mn1WGxmbDxcL$OF60aF7c`LnMFu6Lr1=XP4M73~G@m9ukTCK?G)?G=
zFK9eH!d_ah&(0hP$x~S{QRoQu_%2Zh<O$a1OMOq~L`dWhAxYEaL<qZXY$^x|+MQx8
zHt2)Wr(7g*6sHJ@BBp$@_0w$c21HD!Lo)ON6J<_^utuGu7f+CTy&THxZ@1m3pY;SU
zhw$Rb_f!Egn@EPR+c)b+vR6Wic(Vme2ww>y5i?yBLVLP}+1*?88JTWj=_irgM5%6J
z_{q(p6v$pIxK-bp=@phi4-%2Y4P!>E7lqKEe$4Zgz9HK$EWH|1jVRPF46pVhokoSj
z+Uzg_(UV{4XY}CgFs}Mffv_4TW#_T_UHY{9=Y^%q0u$QJ3(H$ZAW_4-Fm4%9Y6c`G
z!@O{DJ05@#iTD7u%?rnG<8N<-X|U$A{m1o|E%85WWxfkdu5Er;UPZ=JK+mTJf0lrn
zk+60soL6t(w?|*;4;~5|X=^R186h=~vg|Sai-(Vf#T6rB0_$ivE7Eizfps*DvsF?P
zB-A__Zu$`4wG-LLOc1ByK^(pkCZtb<mG;TI*$1<<TiBb&_0;`fh%gC{`E%I`Ac20u
z=>(8KKjCx&k)jh$IGqroQ94DPaBI~m7nCYJ<uo5<0D6j=-<Q()(XjSYIPYiso)dZ>
zPwh`(BZsh9Rio7U3(%A|3>114q|g&2ATKzB1rm@K96doo&kK&8L<&7Gke&h@;uph8
zI|)w11=6tYrCyBkUbq;RTYiv0zZk}rUp@u;#c<JW+!XLsqF)Rbx3x~vD?zca)-{5|
z`tc|AA0k~NMnkJB#XvDMN$VR?2H4|I>HqfB;$N{p#shfrzL9*9u>=YA`bHXwK?RBW
z`$q607445fB3SJkxp6>592pV=;TA;tMa2CdUPeS<{Uf+*^$4#V1qMfyWb%&eL;MYT
zmO7)~T>+Np(-?2{;D}s+L88{d5qJkOoEVMlP&Vw0{$%Y?SA<4(XhbgaC<Bq95%@3a
z<QP$JN5l*!3Y`qnsf`xiw<GesAUx%Tu~u)%M-LWZ>PGTDjd+qP^Rw;ga{%q1d#=kX
zuRZh9b6rM#uN(HOKk6U)g0mx-EOc8=EfRCO)kS?|#XP4HFj2|8h%{%AsAOIQbNX>E
zf`{|jg^T(VmGfN@K3APyC=zp(dVyb`ETV4sh}HhAPpJIJm7#9<$ms@@K{X#yH}EuR
z5s{y;doSr@T72TlQ2Re|+K)0+D1!EXNt2>DtgVdXokshoD{SabdepA`MPJ|vu8bH-
z@h)*OHFzDXzpPJgwa!5W6R7JVGGPl6sOus~*d8YXEQX$1T}1ghq9*au>eGviTW#;Z
z^(IO!m||Q|1PFDGULb)`M|zR%frRbVMM}Sh?NMHk7_?DRw?*W3O>)pp+ahwiCRqU5
z7QuGyw_Fnx*h$uS8(AZp<1y~21T8j+#XOMP8IiB%gM{o(8ia{-l2uIPemkoelRcgH
zJCg`pOrre}nWO-ThU|}|#9jg<2}KZP&?E+lNxVPOP$UD16jNw_q|t-c5(?akX+1n_
zm#M~Wo|?mMEp+s7IFc_eL8B0AIULE|B4H``I~=KL%L9>Oiv5m7#Eu07B#%X8BmxqW
z$09Nk0SU=t5hoHUrjV~b!XuH6AfQXVs{^Ie>LW7j#Zw^FM`S1h5=iwCgd$JClHy_Q
zY$UH+lwGeIj|b02un6+FG*0$&(H^QB0nY;$BQhcc7g!e~G9m;CtcwwuRRu||FA{FU
z2cJm3yj+Y#T3aWm)8aG}x<>6&hVd6q+pbaR;J`+6x<=*LfaJyGtHU5sOV=nI++5nP
zB*NN|Xx@kR7|WQWgoZ?MYnp!mB0(w-i}Kg!TYx|(42w#;1qsMuQEB-g0XZxR%f}+4
zstM9-wB4xC=<lf*?Fx||qoZ<RMj;4|j$#bRV<u>>k7IiR#$z?(oR)xzmW+$acVa*S
zVO+FK>>oe^VO;e38?2e4T98xiSAxcDPt8;pgDiDwR9@dna7&#U4T?iUkR%i>%~%`B
zvn9w5XR_agjm<SPT?jJ6nXVdShBKq`)f|WbVrH~e8*YXPGQ&Ah5f9f!46SNTR9Yb(
zL2yn~S|LaX&Y>Q-BI-sh3(({EBtnM-x55Rk3S@-~qS6ZS6i5rA(h5NWX+acL_<Ia#
zGOR6%=AC2pQRB(LqA1=Ny%9}I(tv)<o`@OEntkjH3YY-;I4W0PkO2BPiq)51l1);7
zFOK3X1UIlrUl<X#IcAhsf+5@&9`om>ctH>(gcnC~@<T~GNMlHsv9cm#R>d+`hA@{!
z<%t!_KxSDKu`{m5K?KxFcA>~<U9-|@JD6zuN~i50fv_?vcQhbLCJJA(Rn&?RT*Llc
zY}8e(iOO3oN$xq;M0MfvKtg6s6nQbaOp&A^`-1%?ZroP$g<C6a8ozLBrLp@WD&J0n
z2oS!ABHFGOwPNfxv7>S0OwA@2g7%D?9MenkLE97!if9rfAT~vtG__6(2y7bbSUhR`
z*rCpapk#1eG~elB+C$bw<05uR@;zi-6mM&DFPfyJ);Ce*p5#1*buO{u_8(J5ndkRl
ziP#4P0QZgK8bAW>n`nx^l8t_#{pB~&7Ol8{1<B!B-%YP|(^K)d&0W%-u>0J@4wM+p
zYWBDln5bY+RK5t8<ZqztiOLt@K%#;@QM^_;fM#rxcAwwb50)B(Jk{U17_|NT&h2^H
zets8~pF)8QFusdkcfHkyLty)Pm?bmDEft5O^5#gAZ#)l2WtIRWL=KaQ2qVM3^BC)v
zfsq|^E2Xypk45EMfJudRoX4UW@%kM|ARMDPzLD1UB)tWA);^ap9#Gnzbus8Iz_V`e
z(p!LMqbczz4aflFY_#EZ)?kV{Qeo|vXx?zUM-Huz{}RPoL0d94g?XxVjVZliYI2!}
ztthp!?9K+ptXlBIyh8~9ca6zO3lhLxW0<rQHh@If&^1=nD<<-*#GtT2>lRac#zcNq
z@*vkeCiAP3h5Txd80A;_hb2-pTL;IKdy_rwzcw_2N-YRS3!43dWAaQ8C4n|LCRZ<z
zFrLA&u(&ouBoAE%$0FkTf#kqN430Gu$!E#pFm3O$CX3!ciD5CkCpg@bedL8MqZ%7y
zYCsEnPVog|SWMos011_b#fn8{2PCkD#juaP2_0S%)<(th#<J~=jT-}_VuqjJc_=}5
z``%$i*BhN{-*MUoCV<|F$qY6~0KF4K2Akp;kZ9XGv1l#dln{xwVd&q9#l*b_$>Ktf
zy=BEQtR<w{=$L{Jt7Pwb`2K8*W;eAKjldJwJ03L=9SfQlmBR}XIHPHJ$tRb<tNO;U
zbQ9y&+A&T)fC-2(F}XZ|1j3k@JOTv?gfTHBHR%WxB#uDG#GE5gqJ{orV)6)7vTy`C
zCPqh~n<yQD%S6*+c_(9@<Z^GeW0#j+w0ATyR(XQcVmNeS7%U&ZwKJW~X=;qlOpnQw
zDwr6;=~Vj}Q3$%tV9!?=XVWuc@)|X6)}YXg7^dhA90=5V?2SsJBK=-WUXjMN7~;n8
zMs*o4gGS9{D=Llh%*>d~Z{Si3%FK*mze~s2&<Lx+EZbXUcs&hg#T1^sBQ8qKis2CL
zZTKP3=)DCo<@RKEFPqR?yUqUZ8;$!sHDHMkUZ4O37R2NSFF>O11u^--3nI~`1u=Z^
z;&u)PTlkQjyUFO7{xBx<Gq`>Nh!0~}F><^Ny!}G<cr&9xW?@VwUT}Q`Wfqdb&J%jU
z&KBEani(H>(u-Xr`X<I=Lh8Vg;D`UkUT9%-O8+Y+kDCe<6J`Dt!*SE!c^Np`C2V~Q
z;~x!|U^0;zqtzD5EQ!G(ZGck)4OhA*rc@`Fs-hQWwKOcHEm)2~J_Oc~fRHD*x+d26
zR{q%!h*K}DiCuq-HBsQf&u+HQv^H`|db8X2et>L_HEPVS^%syQ-NKsPVzf(diOCP6
zfQd3&VtCDvuKpJ&*z;^<L#fPG7l$%JTM36=MZgU&+~8y<Z!zvme-)D#=D|dnuVPqY
zDd|?A;ND&xd-7J}wsf6~Lzj^22nUI4l)*bk+n9Z;@knNyixWbbZG?lEnF`@8q`h{N
zYU6z+vo|Kc)B-L_?TsNGmHmkqlaAUK+8XyOnWJteMo{V~bs|Naz{0yqKd?WxH#TQ~
zfDe#e8%3cXVii?ZZ~CqdocEbn-X-?f?MAQgnHY{vAB8BtM)V^ZBECQ)E)anh-_-#L
zj33Da=uHrQf9Ndh+`*_ypN+|P=)gpovoX9wm*QnWonv!47^UfRa8+CvTnQp>496x7
zco_`(d3Lyi(I|aBCX<1<^n)_zV@L+#+7Rl(tow=G(9vj_{>d?JFj3|wGHzVOL>bJv
z3+%0q#*OI<E)G8iAskT`CelUrWk=L?F(wnYg?u7ijA6%*Pf7p>6X|Cb>}1@O{n>3h
zO{AZx?b~n<62Y=Iu_$kj{Y)pL&In8_GK%Pp0gZpcXEN(}pK*8P<RXoGcVa?za#6G~
zHJ?Z{cydwmJFVrIlb~VbGwpxfXRP#8%q-G)o{G2-npsrDUpyufLNkk6-$yTDgT%wx
zZ1w}jT~)J-G=3sUOyU;B_>dC`k=aEp@3B6_#DufZ78K>pu*)Abnt6f?itwqM6@|d!
zuUc-gyF6rc&?~nTY5YbGaRIiasF066kpSCLgsC_b{uDHno^F5rgfT33*YskIA6^j`
zLeq;AJoQB+gr*m_x}T29)zYvwvp8>0F+VC-OR3exMv2%QmeO8g4x9h7F}Y$+u?z^n
zM4>swa#sivaC3^WD}=jNOG$-!tm`XA`Azd&5nAfz70a9v%0OgZF>*$;=&E2TdPrMb
ztSq(bUNNrs*5Y5WWa0rVV{x(k;2222EG|xn^aDu1EH1`kLIDv-1VoFA8!jytIXq&B
z1jN6JWe!iW&>c&Pk;8ir{tI$ISzC;6WQ<m`9Xmbnkp0isjEvF@EU{3d0IFT<YEL_n
zwWR%Y+MbtU7HAubm9L8Js!0ZJEP(-=2geboedNYsxz6J$#5WepFb*WN-dJ4p6||;r
z^$~-Iahr<Ot;HgYlRU_6E|y`OWFd^(QtW)IuaxH6*PddL8v%vR`?^@}N<l)6uZ!ib
z6eQrjE_QaMrPR~Ai$!h(1ZMVbcNl0_y1Q709e4_)-NkZO3KB@Wi?J)^ckt3-t-d&~
z&i?7|2JYb17sI0I4qh5pSk4tI7mHQvBf5i^mUr-oXMgmT(ZbXEJPi|Nz{E3*(oe;B
zJH_Roo(sizr)3ZIdzuH(aiy1??P~nNQ`<EzI~)(7U)Q*d>OexSYh2z-07-FkJlZQR
zI-D51!@I@Ro^jFPk_Wl&aoORLMR9YSI{as$16<C4xbk*fwJ&uu-t^Rh5W}A4;oX3^
zjGI9MZ9p7xGZ`yLXfYrje*3BxB68LS#?_%$wQ$nlgW_6{2caYfWdSuf4o5~;+awFa
zHzcn4n^4#R9y)J0yWGQQ@YL|QoK0Y27>CE@FoHxk4Ufw^tssFqJdTixf?tpbN`}YF
z?v<7B;E|We-D8#VIzWwNwLOi@QzP9vXcIrut%Ih{$hiErP?~SzN5<t%Wss<2WW3}z
zvJQSnk5J>KcUVbY2kelsUwRrPPcgR+nqMp~&x+H0)6e1|as3%25Lg^>sAvaWqhRrD
zM_C8WF4B?3%Q{%Cc^#levp0GfH+LTG)<J23(QX|yc}B<OHNP~UJfq_XEJYo-^@OL5
zoxbwPI!4E@zlWc#p*t}?<5^*EW5ZM9-AZU)jdweX=GFMPoL3M*L&nFkxQR;WBJ=oo
z`F*k>&gVPF#~b|CO7n(biJZW0?qg)1n&8$!H!&u-bx>wuLR@}*Bh51l6XIB`MIHF|
z5T53ohVU;BL5m6T@_XpzNVEe5CNaB@QCTy|t%K4Hlj1THi882TQat5=Qa)i)9C7Rd
zL_&Z-AUloa`Wg$Ln&v{#arQJ<O*+n=77vSKc!&UES{%WfP}77K)8e=^FD8H~=ft#l
zlZW}qe3~*2@39vBjGCJF+&V0%`CeQmEl>t^ycchHvjnAt!+Y`Sw$?Jbd!D8+d7(Y8
zpRq#eywJs<uU{;T%lrWf0b^lYenki*Fc!uu#dQIY&~st@rp{8&eCSER<HC5er>rBi
z^rh)=e5Ji{pz+_{&MVzoC`++2F88}Agj!a{<(GLtqL!6$xNgxKcv}Z#?g3egU)HiR
zUVgt-C)^aG?{zjCYCPttUFX(9d5m@Oe6fvAE0o7r7f*{U5lGasE-te~AW_S@c<X0{
zKL*KfQmu=(d4|6<K?USX6YJtnb>>OZG)44Z#;^JM&x<d!w-%cPE${?&<B@o22_)+N
zGA<V<kf{4hYT+)SKSlla++oIld7k*n)jt56`O38!`V7)n?)0J0Abl0bvP5A{CairO
z&-*1V!ki3BejP`~l;^-R6z1%V^Bg$4GQ!X*cRF4ik5F`HTn0NJ0lG7eVCQ>^9WvxX
z57^B{8ZRg<4#Z``A6#O`4e{YKkPtc$k3_9+5n4hBCU7*a#FCr5tagSGvkx+3wWks+
zosTFAKpsg(N1i<MQIek`Dg}AQ{(7|0P^mfN^hQQpk9K+kBrwjz!y*9=l7!-jxarzg
zh9dWKaS<qhz*wAf#sVZH&pBfO5|Za=EUwV>&Cnup37v)XHS0Rw(4M&Dsz6TjlB)ta
z%}dUJKoCHeoB_#(wJY(wDG4zkS(LmI$H5~XkSq;Iw}d#900Go)3AwI<MA>c$IU*o|
z+ASf&&n)#^j|A)Xic!)U1SEU7k~Azm5;6+KQ%LqmAdb64MwX>0v|mCQVtXbS|Ibs4
ze?=6E2Y~69kn1K$!1PPVH4P+S`X#WY(ZUWA3wysr$&iGX=TnJ+0{s(ejL%P^g%=o*
zKnO}7_m(WY0fE<267pr#7FW5D9+bf64F01iMr?3GeME$yS*W0mOekaQ&`cxasRa#<
z!4RPcNN7AVAtO+bfE<~S5hzG#JTg%<1{zZYN(>$ljY_Da6CxmzJjk(x42UEP0ns}N
z3W&Cobz~_RRwpEs$!zmv<Lg@d=X4?&*@T32X($JkCM1eQv;h*(6B06%2MLuXBpObJ
zO61~+Awv0y2^q>u7P@Q__2W9aBTyFB-b>_tobV(+_23Bf)t6brsm9XqdkMS{cR#c%
zqmXe{LV2H^n`+!wi~mFife&qFC1k`1657m4$cPanw3(HNzArn77`%gKC)9begCq}f
zbDR#6EOgLZ-a&M?v<$YR%}*$HLQS%j(~R3|K{!f~dCpJBfDt7DHa{T)Mvzcqej;pN
zRYC@g3li$0t4cTl<A(_uFp``I7#AjFz$jT5j*k)=Zsn1C%;AOKMBZ{a8*@<P(}a-`
zvoS}rafz6X%|XDlmN-g-MA;?IYy=6Vm(Xma*I9BjQ<ky+H^aE$?qvz--M}Png1?*N
zqcRX#Mx9NHl;e;-k@uBUq#PwzCLBLqPKvCSZUF=oS?wqS5@lCAihu;_YR4^<lOk)R
zTL1ycHLfJ-v&L}?cnZli<QDk$uAJP$hJ><}=2k;bE&dhbg$Iz^;LIwJklWzQDv%hj
z4T++ya=eJajb>v)-6F?J@*ua#F&fE&(QM{MLw(X9tZhr=?c#k>>{T0}+HDEPS2mzd
z*&#;<1e&(PQ4u7{?r=H<B&ym$or08#+JN-`hK-qR+*I`q&KCLF11513x_I{pBt*VR
z;8RzW99A2KweJ&oSL~l>8yh`=?-MvirfhXXQsM~PKG(Rl@`wWkCZLWa<U8gd0d<51
zdNldlhE)AYyWKn^<*7dD_z7@fm?snR0wzc*m5^V}1qqCk34Aq|=5s?@Nl!EOzVTr7
zX%~Uq^=ZdlqYMyEC*(p15(uXgSO{<92%yfg1|JyhtIxU!<UY^32;@G`Cgho5L+(D$
zCJ@ikQrb`?!6toRlvVzekns$d5cw$~;~9{s=BI?ShBhP(FVCp|!0@!a?AA)F=ViB6
zT0Ji(<Zb{WfViAMIJ2H!IcyZxh9vQtMdbqHZf|Hv5+05(osDQDh9$-4@Ie4_7>@M#
z*n$M)u%ui%K>~7E66Wv?4M-z&lr}o4jJ1Ei$an%@UvTAU5Jo5Ey&{x@+~}mdzXB4L
zJ~~-CHYx6}5Q8jT9g~#zS0o36H6|(VuSgbv#w2ln<tAP~3cQ=dF?4zMk-t5|ntyCG
zsQ~RLPviJ*Ql3IL;^X*k63cF9E(@edtpCTxGtDNsA~bN5lJXF`5g)ioNgP7cOOK6c
z;HD;(aIzumyuv7A%|9`c6<~-U438l^H7RdxfJ6;blW@oQ1Pz4Iu`}5J`^0F|YDQ9C
zd<GLDGm<6Z*cK#2W+ZWJJBQ-FM%V*t?<bXoNi{jv%eK5>RM@dkjlX+p!E_o)Tfp~|
za;1g@5Z+J9l^P^^`u$|lLi9AP)WqOE<%6X9VN$Hrk_Wl@Nx4!>7JSNrB(2mfxH8x*
z+DWA>*(l2j{$<=)141m-jTAbJwv+M&0+7(jP8Nw5YC!_qP9jf0=HG}mgr6owBnbkN
zpC;uj013%YlX4b-gyg45XBIS~jo@;aDqVyCf#F#0>OlL!<w+TH;VF=oC*@=S38dvo
zOorbgZH~7-S0(e-GT&0;-oUCPUi8T!V~qD6u>!ECml_SytCKRz4JM3ibrM-_WGhhy
zu%ENZOO5jM=Si961`}mIPs;2xe}i!iJGj(nlvyL220?N?YiJHUiP?BvSX-aWt7DCq
z8BYY(CyfLh5UJOZ1{>JWWk$#94Nl9zM9VffEdvP^HYDY@MM0uv8<NP>lZ(EN^xMpW
z%Z;0=H@gVrA~z@V#ftzaLxqw_5lVps!saAGsg4{0dVa<JZ@F<t%~vi0neSIgd0FN<
z?jpZR21UvQBoMwL9qvZk8i%#*$-IlBRv32$x6^d^k^;TP)V5vhi514i>Rk>ln84lT
zv<)OQ+m)2A7bI|ZQNO;<5%6#?dv2xiX3bs~f!5}|E&{b}Z&JqEjd|Pl(xl%(9;-18
z!eP7kGvi55#bIaWf(xO;Gzzpo28n79CvlL_p38tb#@=0Jbf`Y&R!biLnA0JRdBA)u
z85BEgkR+3Y$ESOCjmdHRz)Dve_gDYmB2ZH52N!|7#}6(7d5<3m0q=$Y0cGpid#jCm
z+ts@Wl&`H%=8JiTGC-(LmNu5HAZJpayrHSJQ}jQa$+@I*fwlPD*inoB#N=(vUyeWL
zb|5*FbB=l8DNxSQ(9&iFBpk}QWP=NEC=_QCLqv<`lk&Y#$%1M>CGke%J+O%Dait-d
z*CXXg)?^=j^_f3)Y0n0%F>VX|lEnKf3AFEeGL9>3=Ncnbd&Ti>U_zBE&gugas$8Mf
z2WL_c!Naa8IRAod`&VD>f*+Q8@wGp95skt_bUB`0CDDIfQ_?x$DVLQ-0usPoQ!o;^
z0RzY|lI|(?kF`d5+wLv~jX`%8gX-^|lF3lW0Hb>fPHrD<ESiM1-l@EI+3vN*-eB*P
zb9t@_wR0frw#69N0{;VWU`l#&kN_N*l4~tU01ix{wIgUPXhPMEu*ZI3jPg{DaD}KP
zBT{mQib4<?kwPd+uC@s^gr$V51%V-9Dd}oKLXxGVs|5*3mU3Ke6C%f_M0OtpdUL$f
z6Ck1Zc&8^o0%?3ox>}H26t1?9j-I#y3s5TWh<$v6(c2q*KZWlo^SI*%>WT%_6_YC$
zIPC!wSPPs^012!G)Cv6J?+v8$BKF``V?yPkl)R@3CUH~po+?PlEK1>?>Jqa18>kZ&
zv-DTSvd)X0CV+`1EOwdz5)g}1^5r~`fLNS@&nJHX5=++Nl>7}TBE^1uaSFd7g}dfd
z2?SQK>N=yodWBmF-7s8{lD8C529>Nx$)At{Nir$?gcObffq*Vv#a`HE+*Py6MW8+K
zs+3H)p$rgKrPBQJ0f_)%RSK66wvvh5KyBJ&pWJ5Dd1^Mf7!)OLa+^wCVpB@qnt}{4
zHl=WP0>5cO7^rZE{qOC@a!<_;7lZQ7J6sI%5j#?H{y+v8J81sM&OoH_E&FAsQD5_|
z3qdi$w<&pL_XZv#e4EON#3x8Ve4A?Cf*bA))ZzQ3;evqVe#dY@qVoNY;ev$Z{;P(2
z1H}l3h2eGpfnGiA>Oe8VVYe9+BOG=N7lnazI0eJK3wGNytQ}9~&1MUC8+S&Ir*PxD
z2dyAYVYXU*N;zi-_TWY1TKp?~3?2Zy-T?;*@cNXzY6BAB^(h=OkRJsJKU$y4o=bVH
zD83d$3>X!C802(HJ)83J<jqwsWY44!oJEoRxynR%_G2JL@!2h0G1PZ~P59QRuD;+Z
zMJxY>lw7x)@~LtmB|mcm62KQySm=Jw5paX(5-Z+o{8!B-7lEwmlG`krDVI_*`e@2$
z%B2*R2f9H75;ur0vH5$ANcp8y!{-rnnw-nm2;ZgD9|wErate5;`3gI{*XUGp#jT4b
z%$1akQ&0wVT}dS?_%sAbGN~JH;vW!cN)x7A343v$(Y{@`lB=UYt7^BBs|}_Z)2&3V
z%a8#?w-T(X{7PL@v`y<>q6}ci_8FUM@t-r6G-rC3$n^rnfYQ4}e(V|~P<odjOc!HG
zudw$nX)>V18B03O;bYmSMD1VVjHTp4wr|PRv6M`VWxrqvjb(T8CrxP@4q<m5FnU%G
zakZjZIK<V8X5o+$>31Ol<RK+E{h_<7P3ii>FlHPyZmS;VBG4op=JpN+>cdKcBA*Wt
zAPg(P+0Jtu0h4eP>v7QNQZvd$pvgF@MDDhm^2s==q=7gB011RqCHU>0)#Oc@(qx=$
zH~h|6<EfeKV$faC$u0&>!^tJ`l}X3|V{!>znfy#(;ACc&ef{^yc(<M9V$faCStasF
zuPHy8nN=dc6ax|%vr0<R7K<a^$NTd8O7gz9n;tQW{DFNXK9kO-e0ZrHu7f>z)~KxA
zU!w3IM<6B^jQu58L-GC$NGNxpM10(kC_(zkB#A`X10`6WL|IS=OXOR7cvBo@LGt&`
zQI-~>gC#s|MYz!LyQ`Hx$ZZ`ozqUb7QTV$OY#s$LZ2eG)eEAS>b^{nB&-SA%-JdyB
zf^7d~+UQq=wF@PAgYEmz8UOSKE|eg|qTOo+HTGxr%>|=n#m^-&=l~N?KbOd$10=Ni
znc72Jz6xr<WmbLBXjOUH6`?M;?23>NxlAJT;(Y}*vTG@uc+se?=vsQU8baz?dbJvA
zeAiOQ;2IZXK=oke&qlk79<B&Y{vNIfP5vGvLe^bDlfO56<7eZxX1!ez>X+W7rkKPi
z1CidP1%>=2{R;A9{YsU1vJLygC8L~KmyB!$7-A!h#}MvUD!2Y1A>6MNTmNTyeX!U;
z?D0#+^UVjjA~XR9mCE3&f=|Ffr7)Zc7RI46tW7G-+nn|!hqC&0X3X~fV!&i3l_D5i
zg=<=BC5^}?JMJ+*Z&I}>Edw)ffx0Q35bwx<gd&^LSfE$oYZ+=)SlgA(8)z3aH9IH`
zccuBB#j94~vc%rBaxksZS5tM+;)6xRW3N}5-?!M8#)$ykj1Z47O#9Pn`)fF;<^XXf
z<wLhB((RHxq{^J)tGI*%TJD0ug>IM9avVWI=u#Skf}3QJ!NV)8b4#=8xhpt~mLg;>
zSJLu^J<34jN*XupDYOC!Cvzno6dyPuk{=RYNr!IXhlG+tpIf++Zrz5TzgLlsb<eQV
zEzLF+-7{Bpqw2e7WJ(@|P*L{`rdxZi8>n9Fu~ue>4!ttc%~$b2wpT{Fd5}Qpl?jV&
zAV`wQV0EMyXQ3->u75^pnq(ffthHIfF0?XxSA!$$4bNdD{WCIH0|~VLnY1|a2MM(P
z8N4I<8V7?l4rZUWHs7co>>|*HZm^3$COJ5hZYKMROmc9hWh?#>uPRz1-e!MpW45h+
z+eM%y;%&D@WT9_oWLygoAiSLsA38vTutbbt-?uUEs2<@W(DDBW7lD?D5gEB7hX@cx
zWbj(dBfJ$DJ;q+R*?g>qxd`+toy<j`c#UObGPH^>5iEnB??GCUdKF8=RQuA+=5M_<
zQ(X*-)TX)^v_wpGwV)+pDrwP=mWV1kyq|6Nsxb$6YG%6_v_#ByG3fMuwyOs%5wl5;
z1$25}MW^?R?BCvIE>vn3xfuL+gj@{%J3^VTxM2YqU@Xeu%4R=dAvl{~%-Y^=4rssF
zg`ii~7rPL2G`~0#7C}uFKbl{hxv?34YoUs6y)Mltt&&Yx*ADm{%my9IR5cimiO~W4
z(u{oT1EqnrG!qv=G)SnkG=r6s0>UafOJBkM(ZQ^)Ug09pG5U&(46#rK2rDwl7ShD%
z7=1;i_085FI08=5SF;~Gm`_!&b`j_heYM*jIz(Tc35%>ll|qN;t1~xL@XtL|(aqYm
zY*0t@k?OTB0zTQHu5}UUXN1;f<c<U)Kv<i>dmOX|RnfiM^{lj$*{XWIix2|BdKZCy
z3}}5u#@Y}8!ukw;&xn4ju8J<@Ze&9`nJua}x(M`JKpS0zFc3Co<SiG70AXV$o3sAP
z5pZF5EBkjR^VRCDE<ywdTU~?*5VpFlhyY<LwW140z-8XA*}OZ<KUIJ2B1AD3UuR_6
zv`UEr;p>dJDhjouK=?XSb(8flN5JnC>|_uA#(cDTr;8AS4m({PVnEpGwju_Eozx1-
zAyp~(S%cl|z;DcZYj(Q`ML^i?A`}5(cSc6K5COvO4DMSG6$W06Pr<PNxzik0v(JSn
z2E;xWq8JeSGIEDdr4$2VUnbYUnX7SZvg}*#qPcq5#fSsra7Ko6RZ1KfhchAZLLW$A
z9M0eZHBTj0DR`Uy1XJ!YH?}+BLf}M9J&}<YZBPafCo=Ly9gu)Hk->{P|H5_)oq?C(
zx@DCfcJN;FR^K!D*O_8TXwofvbxlYDrdw79*$@Lvw=DLE6#9ci=-(~dphs4u!-#>c
z4ixF0#pk#w2~(w{5QSuU66R(Qc-A{B*LsjZ@12!N7?42kokbF6kLd0a+yKnt2ZuJY
zdY{pTwSLH)+!hQ+)e@*Wz*V&bU;|uLO8_>2RQ-_N=e#kjy_3zGW*0wfE>ME+WO16x
ze@f~`TIt8KosXKmYsNazU_#HaS!tRe0X;TbBoZPZ0X;U0yzB_NUveX@yi@IQkC{bE
z+o>)FWoD;3>Y)&o%F5UCKmucG7Fp+u6xZAo))r*(Ma=r&ng6Q<7Gx3E;8SGkO{CpN
z?9Jbs&sKbtmB%Jv0_vk|iO9Bs1k^`a?CL01yNR^<glT^;pKtq#qYRi(<`YL5kW?ru
zmwJ#u_#}&^egI|fnuWEc*}Tu$dw($d2bN~B_kR+=%}AH!to?tPf2drJ_nx`S1QSTh
zvoh=e38dv&gdO}BqnnX3tJ(VhGPhT*c4esc)mizHKgvL6bru<`&ZxY3SX-CPJHR$S
zWj+;NN0pNgYL3daFSE)P)~>VpN-h2q^@9(rFP-{90_#hvp9~Zv4D`!vbPEiW4uFWk
z4}dmg)y-LP03>;k+nALHK$3-B>831gO39Blr>4|pm7-*WEUS9jtgHaxC_xRX%gR$I
zlmu8^7N<~jqR^b;we76`)8-w|ZHGMXH!vZxJu5$a3lbvRv+{x@NJJLfvyC6-0V<I^
zF5I5I{vjS0N)E+^+q3sSz-L->g4iWyS_=@c;9bs41BvQ(IWr9;FYBZ`n^SDJe@3@w
zOwW`19h(6YHnZQc8IXY3@60cdfY?v-3rFrge3<FGY~Hb~_<$U(N8e?A{8#LK`0x_;
zXIZ5&{}GT;&zV{plz8I^&(JxCsNJ_?w;7^NIm{Y7XLd{<&dL`yz(kqD*|HqHoPaW*
zj<Vj*nRjQ8X61WQU=o+6(*$}k1Ycb_na#Vv>Yp>;4V=vS`1fUfVbbIj8~?o7HGL{8
z-<tpvqNm9C@d-+lfeNSDtzFFDrB7$&rWj0=Ii1Dc22%`WK>f((cQKz&|0uhdn8eNE
zgsT%TgYG%Un*Y)KP5N9`o|J|8zV;k>4txX_BIx#?*gJnTZ_obZ;_&xD2nWA|t*9-+
zTKBTNS@zF=H1T_Z-OJz^cmlZvH3pxkdC{C)*{e)iBA8IWSDD<QfP@yk%CJLOLy=+&
zYTO`u-;3rtPtBk*=}5tatqdxY-VP*{Dw98T4iXrH%J3T?%M6ZzW=^!f{~xoxT0POl
zpm=;@nT-BhaPyv6CVx{KBrqnHVKJvQp#@P>SlQpr6npCxQ>&U%CRYSJLETfz<ca{2
zN|rfx+JZW4W|>IKgW%NFR*<>QER!o2o&srRnOwO*0%>L$%(VygYRj<pVOic+cKu)R
z1;WsWWk#9k)t1z&i%`R5eJp$THB+lx<n%2b0dbMjw;+MIi29aauWw0xyTso5n%NoO
z$8!1wT=dJ5GMNMiNu|o<tNI{;v7`)_itsv`+LA121^dez=09pyxCqp<E6U_$VUz*F
zin5g0AA<zKiZUmG-IB<4cEdN#<(}$wE(Upnb!9Rwh(f?vR~8h$2qX!WVP8a}(~>&*
zOB$WB$}gRP0TUu$Is*d|B41t|n3j}X*gE5tznh-6TiseIjkwhr5tISMR%b*&0%9wT
z2v&PVZ57sbl;xdZ^ZuW?JF=sUJ`q7dKr0N0wyR9p$HxD|99WD0gwF*ZXuHa!&jksz
zU1jp*A0!<AuCk(iWy0|jgFF7+W$NBC;rJyFa(l|8<CiQr{%_03@l)v8iaPvYnesrg
zQ<lB=PxJmRAVdg)M`+<er-dMSQ5lGX1opu)d9xlQoch7C?EU=ckVtWka<HuIKC4bN
z76x#n43`X6d)QNNnGM;xQhZ)u#Q&M^RDkWYoD@1zCO;U_id(>uG910p7v@@#0UT#f
zyk$Pp_PDDjjsJ1S3Q-0K$IIlG8bFdvS*zC8Xv(0q4r`ao^8RHXf6I(}Lzm0&Rv7m<
zt!Zv_&5613es@!A*)=D1!XqGd%}Kul5{O-Mm>atkDAgJoYkhJ`znq%<f^}YG+-tY$
zVOpMA@I<3f0swt-^2!WI0QAYpD>EQ5oPBbo{c_^U3^8ap)xJ4-Wkzz)e|>ZE%8X<I
zsBaEeX7Iun6hVQ3Ih>l7@+&jTdYTO?Ks!oM&koGVD>Enz*?~D6?EIO_f*Q(#z08*?
zhPooul|yqfZ`PW3<<K1RX7u|Ft!XL^XR~{m*FQTvC%?c6CPaqk<m>|p+~GNS+6EF<
zGCY^MgD?F=@}+-xuA~!R`Xz^!{^7aXJMevTYnpzeSgYRVEj6QZ(m25+ZcaKxkf?T4
zPVVtQqS{e8WV`#2>9r;=GltFWZT71k<3dnAWsD0!`IIrau*m5^1Q26#$mvl2t2O0Q
z#<9QkF{^6Exd@a`8RsHUK4n}kEOs^!0m8T({NH3+pITGcGu8gKk2%%TYO34EltP)B
zlZi$Yg3#0)7Gr)*s5Me3+MJv+AI2rF3C&=g`<wr+1<x5*%Ad^1NnZg00L;lni+GR-
z62>(rS3DoaML{AlxUZO-Q$NTFUm<yro0pTmLbBj1-p`S*Am7=VQZWm2`~p9FW3d@)
z2@X0IEOBukBve_LlM5V3KrYNV3tVeT!+eS<Mwi92gG}vrpSnFsxtLGgo}^sNr#ZR4
zK@dQn=43dA&$%tl<$aM8;TUbrm*(VmLL)Sbm*rUP0{yxMAn<G%CIm&LK9HCn%X07~
z_aHvO$JJ;(S~tl2ZF)sczOW4@%B;wV%N-~K>ND12uz7#_vz!daz$9)C;n))#2fD3h
zlLni=Pp`&H&$2Gc@vqJytivS{;9#n(VaXxDS(B45JcEfcYjQYh!WSw~20gHj^%-Ke
z&aTVJ5E4w3S(ify`2oC_51(?|mCHM2e>=pi@&<NMv+1SaC^dUGD;aJ+p5E=W7fi_R
zruNbc)lq8ix9siVX1nyaIe7yLOqBVS<|lG~C<AIAJ2l*VEWOWZ3z)>EwmitopuGp!
zb0f@$(+8YBiSpR*0QE@+UIy*`j@6AYJEgzN$rs(DyuIJiq@?&TO6~ogwH|5Sp8h^3
zV@NPj*Y`QZkXW5i2Ih5yv61GZ=_5HA(}IaIM{<a1k@`Rx%*<m9KkR&O`j}gW-UU8J
zWiWeD22<|@du^0il|CV@m6#}Vg4{69P(UJCd6KOdWwtCk>Glu3Qh$>AXAy<o`0m`f
zTwd35R?N(W;d43ME~Ea(2jcK1G-if)DH|mE8Z<w9qo)8lPYtK<Nylg)F0lLGG4DxV
zaFhWPWiF61|HsRKy2L(y$E;0Xat1WU2jUV9XnS4;196!>I@;_|e%a|jeC7?3m#G7B
zCl+;KApV_0mZ3eX9*MN}_R;2zSun)Usp2t8|2u~x-XADTX%p6Zl;_Q0*NrhxgnE=C
zOyO%|8){zva<Mip8*6IK`j<=ZgGXph|8luDf`n52%ds|6nz9Wwbx=8${HEetLe@C5
zK{Xg6!oXwLz@T#J#6j}n^4bkZU=1oqbIAj@AuAlp{(Bre@K6_lEM#c8JhDU?APg;U
z(1!0rK>}fDIj&*wPtUX=@*Vr@apoXT<vZna$pRNb@080W3nY~)$B?h4wWAGn;du7;
zyXKmj@ov3z9x%RKrdm-35aY{}B5nl<i1Fo!Tgh*>AxocF&a*`9{R!9-Oe~ik6OSM`
zv0QpgkPw_$?s&{L)Vk^DczDc?AfU-~R|Q(Wrn{X-%h&XB=`v9mNYl&VGP~n@4(iSD
zndN!A?XpRxM-444ceVsK)6lMvL%VUBsa33Sh8B;2xWXA)kU(5PLrZsBZl<1I#XQr^
zyDC<>A~b@l%4Na?WgxPu90`ltxClmY4SRFC*}nZ6rx`c%+d6BUW`G33nsOOsf&{{v
zazvSnDAu|eq_&}4*;;P@_9L^>Qws)q0UWUyf`s^na=93Sg!qPX890N)Vz{BaXluDx
z42i)P!;R(YmU6KeN*?4kmCMCYvalF#E_W8go5?J;dBmu;1ci~><_s%HsIko%R*-<(
zc6C^9CWF`|hLxR~X==Cca=U}#nq6*pkbUfOMiqhp+EtEG#Z_1J7Mu%~=bbP2;2VEz
z??=8AduW!~G_<$eC>Im=78>0HVsx8>0Q3Q;t3U$!fHS-x0eygm_YHLPE&so&D-Vz2
zxbjkaG-k@{*o-&@o*7V2cUOaiISsnSePbYY)(H*>&<3qJyddIuH;ITa24lpPd=#4i
z7WRk5VR0DvMhFM^ynq!hqqV_-ghRVV<`AGo9OmBNtEy(4|K|7R)vM}vRdv@zW~djh
zZwmY>tv+6a%v+zTZ@vZ(iqxlKI{-}>Wl(@#62>QiSJN(~>d$!~qR6FGef%>Zid;&?
zm<W9UiU2i;d7lLOrZ>cEAsaTN>N79FLrkei<rGXAr1$GOn4YUdFkSbwj=xawx~FwO
z6ukaK>lvi=TT1Kw03hd<r*=U3r_MxxkaWvaJ0K+8BDKE`wPyzXcT*ES5py;N#x=j2
z+RReQ&Lm|&(8>mYzz5zl0YcydPuYMF_<)q{;+Zl@M~}tsErHJIkK;v1*^j+g0uPEj
zrdS#&i$K|>rf9h}Fe<&&)b5`twOwjz0|BB;sY&}aXdWz+;L_Ogt$|u2d#S0jFsNwi
zQd2)WAnILe>Y+3s6*AFzU8V@kB>jt6`S!rn#5@s~LEk4tTn1S}n0jUrWgtVC=#*p>
zXTlQx)u!=bZ1~PV&%_e^RN;$1P;RxU!xs?cR+~C}0TI5d%~l_pDtw6`!*`A8TWhND
z)ijj*z|`TZNeJI^(+l5B%B<_mAB<%|Q6x2%1w>QUnL0BALgYHr%gmWH>eyte%nSgf
zY>F#`UJEwGl|iosn@pXV!3;^8OgPg8>T|P#{w-$00WrTS@NM%gX0wR$rY!QNou~lc
zYPthJ;!aOZfRMP;)SWIMB<?ifP2?I`<V{s#Xm#M_tSYZfAVNZw*Cs$>GW9|3fRIpS
zV)Q|CgIN^GyT!?B%nk02OCXi)HuZ*S@Ib<DGpgn%0U=?xsTcWW5!xf(+#Tr9Wsj*l
zI}lN1kEc>VVtS&|Eb^@VTBQIIX&(hd^Y_P_PyV&vQz`z1r2VAQs+Le`cF=#*#44GG
zp9Ny9`AyRs$7GXE?<k#$2{risb;naF{({6io=O2B@eZl<FzsE-riZPK{h=msv_-Gl
zsD2<&i5zX~%Hake3e`rjA4#r|%7z;Kr=rH$s4r!Q+~QFY%Q+ipgZrhT+Tp<h38$jk
z;Q=AxR8%`WARPWwwAI<Da(E(0hd&+lorx-k*EE#-TU0x|Cc)wV9wmqWAXz>Fy3SI|
zc*pX^PMiy@3QPb{<FIU*0ZJ{M0RYjcQcF85AcU7%82{6>10WhzYNftosd+IXpiyv+
zxt5+6%O+FK7qyr0m2JNDL|bIE`Ie3-@IdT*%ZsRNO3!8D-);u(^~Y}rD2um`vU6Fy
zeUv52;_ag>QD(vVS16!zg8pSz!bb7)D}l?+ms#GL<Qy`-uw+2>0Dwe+O(@cGfRHFG
z9Z-OfC@ffC?qkg%Bdrq7)xfFrRq--p{8d&!-8BLplv!o9Zo?KOLfttOL*=5&wZP)E
za_qU$^^l};>uI?XjCfF{+`>vQ>e_M$eMDMohX&F|t&cq20ixhXp6&pN^@;9sNZ%Wj
z?(my{r#nDA=>|`CfDp97(;XlLZ6Mu!hy#dxxj}!WmGGC?TaAGZiOnl5Z`WroDQ|~T
zUM2uU?(h@=2$4HH<pDzE4pQD0>M(Ng$o^`}*lYPx)`;W3Y_?w5O@Y!9kd*Slfb!Lr
zjsZZFueNjy0K(m>tyX*CZu9|z2r>qCTfRM(iUCbSxz8*e1Db>w__O6D{amui=ax$P
z-&_i`>;VeY43bLvfN09+o|*w6^7AKZ&Lvn=0T)fouJIHMBD7KCDHsqUYCHu4QW;V(
zZ4Ju9gq@YJO>DjucrALwLb9jRaPqLg>$qinZTaYqho^zn0xzP8&bI?qgKI6{Ao<Bm
z{e{Q)Z_C&32NYED6;V8K-&n@qAnrdrX|Ms2MCUt!e;@MKe<({Yo~JBdZd@7};IxIy
zp*?BmEaQJ64WDs!<B-^hCa&KJd{uJZ(yPy8<4DJKmhX+YIMUkxShyP36ZfrUT!c8f
zEl(CfV$vj9!=^}3;ss0Jji)G(TW{%G_!I?lzq5QD=*SMG#4DC@9fJSW6O8TWL=qG4
z28wz%SiYQiqv*x=s-+JUlHw>5u2Gfpoi~p>zDap}HUMng<asP0n%CrcJRpiTk;fk<
zkIy3~x@Q?}Q$90re5Dw9HPA*h-V5|B8H=4PGp0uhe_1&5?Z~KMk%H;7-YT4#5h;jF
zDwsO8X!<WA*grG9IPz9e@s!B)8IgiXlV;2YE}ErT3n#P4$WcEYKXBA5Bl~v-i{>qW
z&}nZLza5!UFn#jW!iY1gurM;HusB}{7+YLWJbM-|Nsr`5W)@B=EJ6eDqhRtZ2EqSO
zv~%RGDMgc}5P86_CPCaU3L_I|7fmgWOf3AD88Ztb#ZwB3BQs~Cl4%8RM`jgHpWHc8
zFbm{D7MWErtx&f#U3D$c1vCd`P^?=?q#LOmoizcWx_gv0>0sA9a-N4`@%=zX*N0xx
z1QA6ZdPx%yMIKVpd`znu^8o!TY-45Y?)|`{qyqf(s;0nPVe4KEd=Rt3*1Z}a#H_G&
zuLg)Tv%*eYX{%n12&z{THhQ&rw4N=G(riWSpK)T<Q`r^qdg$G+!q)RoU_w0=_VX&G
z0HU4>8$&C~@p;tCZM4<49RQTvXzT0)h>{y^-9ZAP<VM@;AoD0yZMD^q698@58gB!A
z4A>ffRvNr+jXx_5UbosvLhGJI7RpDuu@k<JIZxxp(&vxc*e*PmzEJ0r&!3F_{aH3I
zG5w^i^E0RrcG3>WCCS7DVJB@mfP^}_e6r4IvE(_nF8y@844L_~tv>{S2W3v%czIc<
zDxxG2oA^BX%C2>`TKf!1B&yDCCBLB(M4>veP>rmp879l>ZQ~Bs8?rB+tGAo|2=`D^
z1Hg7s+zPTWX%}rAtU-%UL4>S}b}Pq&#AJ6$lPj6?$&i;taWczJyKMVZ4-O)VT((=P
z&-Z{Ra@oehBs!}hpA6R^&L*?LX$`hd9nB0PiZs}5<OzVpgCY$!W`b#LL_Qhpni$)H
z4NSXc`{WXIBBIDOJ6SC=1VoW*HkKLE+UI<Ft!NYnTd>@;MjQ7hs%N1Wh(<d^iH;tP
zULYFntQ`IL__ldNbZd#nzhV27*X7H#`#0>iU33weRk&ey>me6q=hLUon_^o_mX~%j
zUWDcmZpMqyJi<*XLYwRJ>D&Kp5o*Ooce!o*)Z8kFD016wt*+4kM3LKe`ityi+8x$6
z=wIOAl=(HS*t(~J3mi=D(+#zK;bs1Xj<HC*lEN}e@JpR806L^Cbe>Zd1cbDO4pz?4
zuoDmgy3k2k<fvIPBFM?3_Z=*3ru~YV0@r%q!R%iUYr!;$=9Auca&lP{IZ|J8v*nI4
zH09gGh?vlxwH8)8_RTnuROSE!EVtazv(kXFfIcxB5Di=IU?T*X0}uvS?(`ZWPk13H
z|9)vOE2Z9`FXgnAvDex&U*h<c@hZrlRysO4feBTtbo2`|AY`m`@WQOBpzqf!op3i@
zg`6Z>=|sA+$F$(BFQvdr$M`h%*$eEqNhSE{JqV@1%6Kgl6qWH>C<RthElR_b0xO;H
zr_eBsv>;ZEv^G1wZH^jgX&TCHar8(_lQ7cS>d;8*{4?~W9QTV<ISJp1{i*C+u*ykl
zCwFDEq71XkF*?cRGEqP@2v~+(5+HQ7%fZ*7rBEF({@oLMY_ectXpdvawbDcd*B%FJ
zrSl~d&|cBSV*NsU9etK6ZU`Z&gI6*7w%>}>xlb&$SkLG_$4Dow5)nN6oUYy20<3fc
zMp8KB;9kMI`aocA;}dW;NHV;M0R;{@UF0h-K}bF1bnQ=8kr2&2<aF!Da0&)6RDW1>
z;w&?CINmOr-#AR|Qf-Hy9TD$vwEalDT{OROgxZC0fgGfSqv8T*IpL#@KARXs@Emop
zJrE~x5EC5a>sVix)h33&b_^NzL<QH^4vt>`N<AUs{!FY}XZDH_J`-;f&2gNeHqqM-
zN+Hzi#K-CERJhJDq?Z#BOm$B040c~JVJ@#;tm(oYhU?=kr?Z0Vovz)HnG9dQp#QRy
za8p#j$VLS(J9rVJufY8%{2LtOnm|0|l;D?2S)fCG4NhCN?;H@?ZE!F(LCy&X=WKAy
zYj92)B@#h~|5Y#iH3coW>V>~1QTSh_@V|woqa^BSa*Sw7J;ML5U0Gv)AQdq94_0gP
z0tQg>>UE8PXj7AeSuUJYZY1FjneUy1r96?&DHjDbNo~cS#<74%@6O&1e(xlOq|f7y
z7#wH|9Z8=TXS*|h2v8j|jX%-gyJSe3sA^4ZyC;kutV`&gW5}IXL<G-0N;p_G4G45!
zjOxL9h3?1YNGi#}_X_Z!p%27IJy@sk1J4~mM9Bx_4)d|t2~2SKMX{?rkUO&%aYMN^
zsNh<}@g;|%1Q4PY@t%XFmlH%27x7+$Xw3oshQ7)~_dYBwRK|6nfCv#~9Dy=j^1#a%
zi{JKPZ-y6h<0UPZynHdw$Yg&YhiXl3zC=8m!B&_{;%y-}UqWqp6%N%u=>I)W*a&?O
zj)>a-N=g=|Ggx-?_Z+)!=oO$p-lP7L8>_jGJ)%=Z`|I~8qQ$Z@*>4hi{gM0nO8-&+
zLHeJ#@68`j@UW{mUZkiu?oX~-&T)Lzwh^pX2_PN>Se-2i2u+mp_NpfbMA>qVrDWu=
zfN<DyZhy#?!xBL{>{_n-D@{Qg)^gonX%ac?S`LSmpC9_eDf|`Kg}y<2oXt*7#82g|
z_yY~9;CkOJAR1J`JIefq7Ld1AaO4ryAbOFm;N3T%LDXI1e>5nF>eqAMi*%Ec;TsV2
zZ{`WR#n~Jtp5M%Itk5#*!v>HGZ;#E(Wyy)JZ0CAl2rBB^&h;5pfT(Xf$H1IAEkNX?
z?L4S%Q6`A-wB$(6V&5pSC|}KuktsEz4zCBX<a~xX9Z=MlfdTS?s=5B04T$2^9G|mQ
z1=R6Y^W+iIeE63tAW92$Vx^|w0jqg;uN9I>ipd?u?$8nUxWDHBPdE*)x`-q0i)O|4
z^~G#x@Br6KJaGvR4glc>m+@-?qSe51t}h7?6&&Q4>%%%?K>S%Fnhjv%!Zlp?G$4Yf
zhAi<O^=oY?R*%N!4q(qDhL1wBj0jMP%n`y{C?eWW4A+Xvfoxm2mh02aK?GAR$FdZ8
zl6V`6;S=IFgV^!#32sPNL`e$a6Xc5fl_Uh|DKT|0I~YF24YfM8jSSLL97_xGVEKVT
z{~3;z$)ks`+~66GWl<CX11SQ|aidN}03aL=SdISx@wDf-zIp)=Ek4IFRX`302!}hz
zJJ#t4AcBm5^IimK3L1OfivUfc2slp>Fb)>Nbww9=!d31|Oc@ywUF(y=D$mXx%F>^^
zz>`dwXK^DDbxHd`4ApxX1Vl)$rwoGQU6bT3Mc;{k8pisBzT-x3sdx~<^Bu=DF?G0Y
z$qX08q+u*4bkR#!AQF|*6)j$9OSZWr_6}oxLzlSGOUohKT;hF@lq8RQ$p{Z;xuMHk
z=km7FG?zJYIW79YbwISB?bpNEOQ9>=$kK8seO}?Yd5jiQ-~=sngrash8(=oXc_@80
z5YHR1-k_krktf`O55F!I)K-ig!G;GLIp%rEj)TaKH@Ja8{|J^<f?sNRJ?OCD4c<|`
zCIRBPZtzZ>r3C?D!5cj7rnVpvqy?Ki3u+45(&SlClgNTiWI^1OV<cfm#yy^}&`nIK
zLsxlxe^LuEXCyljyvLKm(t0Umz56hmiZVbn3|PKeBmts|`y3ZoVJ9je{(LC5j$+xN
zhjAV<<3r+kLGl1S63<}$c<2$=!<ZCl#z(w&AI*cueJlopC;XV}@g*)7LdnM*<4aS@
zff?tx;@y{7G(5-Ew#IEjV4CB?*0h)?h3r`BibF56;T=j{ZER4%RO-Umszos5T-V4F
zKYE$9DWUg3Ak`h>Vj!^2b>UwTDG$BjJFd~aBkrMmqwwvb$>XOL&6-wFJZXw8b3baN
zmqM_p!7L!kzvCjsL}huT#(A#MyJPE!T|8y>w25!dESg^YLm}eWXvRX|k+<DI9*q^}
zxmYKu1YoH6uDCs#*`ascC)%Tt;=3-i*Fjc-f#Q6TIfkW%=DQfP(0Bny&wyvXi*07=
znK4dWAbvdtR#@N~a$_8LXq>pf#l|=#2V3jj6T2WM{9arkbY;YQZblZH1P31+^q0A~
z@bUf_HZfS{;!JvS>%rvKOI%}_m@yV^jbG}x9MGYhCGHFA#9%<!d5McuM~Mj#ZoR~H
zmbt2HCW3V9rLOLpH3cnL>gujplgO=?x^U|zth7$TeLid4giqnt-})kA%+6*h;(RK5
zCN}EFY>*LL<7($_N6!6$>p3?dng^_$8xR$J;KFff?1me0Fpd!a_bTfYD)&?mB6!M4
z^%z8h2WYLx_zBAouXS|?0wPgedMTi8rX3}zir622!bT^CDm+gC6<ihMDfyBK?!8_F
zUSs{j>pkVSlit0ayzzHR65P8o_Qq@Msl;$)ygqX8N~#Z^t*Jiv_cl@XQ?@&Gn`>l9
ze*h6o+gx1OHxhOn67=tM6RM%GJTZD_vzB7c&sdM-on%mYIT%6)jk(4ySG4cSUJ{Rf
z#{4C~%B=Vos)>1K1;hi!JhKAAtTETwrOiqNY1S&wteS!bRe5IBBr<Cinf1?PR@@r2
z-%a=nTDjR5iOn6ydKtm}Zqf@fQ?(~!9)LR4c)s!H7|#Q$P8@$i`T^1j<%RZS%Y&lD
zcs3$@(ABSHAcE(hOE+SX-rAGdz7TW9v$D_^aVAM6rUJ=>N39W^Ca_828ZVC8OH<ak
zI5mT=fEyb0A8`{fVwk{wnta5?<|2xbp`_Adu5sKIjajUx7*)XhQ-RfXFZ_!Z9&`2a
w+<>U(n2Ys~6e)mE=`q(ju2o6|snRb!m1+u};7d=XnnWu75-Js=$0qgue`)c;tN;K2

delta 45847
zcmZ5pd4Lqf)!*sq>1$_qj-A<^W0`9KQQTcY5R_d+0q=N6qbA~+#C(ZKG$!%Omn?GM
zH<TdvjUb4ijokNrEpn=ya>^wjh#>I&UR5<s{BPdtSHF5y_3G8DSJgekR^9yLvYXp?
z@^n%<c{{1IeLbF1P7JquJ>{z&X`SC2vh=Vop102a;*8JKJj?9eKlomMIW)~<sal?*
zht;KC<*CF74}0o4ZFmdIDzJRS_s|2a*dY}nODY`FOXQtTSW{F>QS-vuMsMC%cJKwQ
zffCs0HR@QuwNy1v$qTEs?Ec?qzi(9QRYFvjm_V-ehB-2kfU5Pz6V_NL1lkkUwt1B=
z*}mUsV`}h=D@1%>Sl#B$cThY)+2#$$B&Y`{+q}tAE5PgU7=%*iORv`oStgY>x|(6M
zVY^qo%__3;9hO=M<_@oV*MBpCw$rP&$o)503#+@l>Z8^<4;l?U4|wyYvRpguZ0La3
zh+3nm0Um1fAul`qXYB*F_$5tie8{U9TuVHH(ucgJ-yu=WA#WgPy~_*Y;W4k0Nc<1$
zqZlz3d|7+39E^M^O)Wm=^+z2Ng^zh-aqCuI7|l4rK6qKHXm`TtGmoO6&rUdf1`-G-
zoSp{>gcH>BG%g?wB9jmC9wSop*a>gxgVsk1uLK3o+6`XODm~R_-CDfpm$TmdjKuMx
zmb2b$bBClt-WFBX5tC!6VYRD0=vD2QTHRHZqw7&rV02aU%VZ(+F37sKIwUZ<s+G4{
zQ+*r*%^G6Q{k`^)(sqc8;Ul&xEySbvfH6c3*OeGPU<^@jYG8dJ+M<QE;i@u5RTDiF
zHnN8~fvuWn6tmy`QG31y51b*>fHGV)h1q!&4JgCaNHMoFkg&7iYRMSYYlSTXov5ML
z3d7n6RUNJRWKVJ)%8f)LA!a&aTG%&A)fRcIG;b7U;&@fbB|;hY%)3UksYlV#DPRd3
z2MJZitMO9VARUn7)pXXnD(nu!_o2#0zia&1#-kYM<`3PjG0-(1x?N)c=|eS~l1K)S
zK2)=1*82(!TM28QsChf>Rc~q~p5P~{5fhfJkY#_$PW@RM+vroLgTMsVr>eARkihy>
zg-vhspjBjY+FVsx#FqR;+ggKPqF=#BvAIsaf<&>oY9z}06(ss~u3EfE_A4=Xzs^(D
zg|c5I59Q`N{VG}L*9E*^tGNc`xm2YzQJG<px3oK}K?t9sC<;1wshS_;{Qwd=EmcD$
z4hig~Y9eX%5={ZQlJ$5?>r=hbg&^Z!spgAWi75q$m1=QLLU^f+TCcu!fs9U3Fe)4E
zU%svV(^I|C#USI~sOF1th7d3|s&O$FKmuc<TK^_)CVWcQs_cn(jYLxrC|T=R2uPHy
zbu0uVO4eSt5Z>Ay(n3H$mmRJS8Z2aoV<C77q#cfhfCSPGvXD9C`n+Lnx0?488}fI}
z4(wKqu=Pu{&P(>Om;L%5+Oy?*oq+}uNP8Xo012eMWFJrPB6xU!?fZxJRP_Nz7q8+$
zs}4BB0+NKBVF3w*12imMRStpiJ#PQypPH#uA9pcmXpgJ;!nt|*&>mNl4f(i$1jcc-
zqS6{DFhHKSKl@)Ts#KqMF=%YhtNC?gAsXBBYDzdIuR>#co}AJ&8e1=o?Pc5ew^re4
zdD+FFvAyi-L1TMaP4ab=$^hfC+NiPB6aDJLI@;cs*OUG2KU$Aqd!H{t{p#b(=zBg^
z+uC@Xy;!4ZsrP&epStu2t$)v#%~?-#NuYOR9cr{^(j9$DlJtg*2QnRfskAj7b_^P1
z7xqJqHZj%3r^KZY=lV+PSPya;=+%wQYp*?=>gH3jQpSst-F$WHS-;~lXmAf!_dV^6
zOb=HfxDT}lDYVdw7Gd@e^5reGKYCAF;0X`%`AT?`_#!#jr`*K$uhSo`D;7r3eA@Ux
z0%Wic)8=ke<e_QF*r|@%J!$4s>TzYjgbedFxY_DWt-^X0R)?`iJ86B>!+c78Da5(H
zn{TnsVT>SzW{tLg>ZHBnNsaa?+!~0BvZH;lh8MXI+BKH-?V`Pu8tYT|NI{0$HP(lb
zg583|Y#GlAx@u3Q$Ga-|ATyp+>WgIxLKylPc1>5UztVDsPq|s@q(N$i@78jMgibSj
z757+$mPTdB%4YZ~TUk3qyRa<GW{>vJcBN<glt!|U4vg8pCQYp_uwRsd?_Xfw*Hbf;
z%mTOd2Ba2H>zB~1Rm0jcU*0D6W^ZkAV3`jA3wjq$3A1(utL~%SQ@+Bd=u`nQp~VWH
zQQ(kJa)mD#vhL(X@NhMo+DB_qzS=E9({#1Z5G$q1r|D`RJo@Xr2vk|eiu!85D_<uq
zQ>+f^I$x<+qTwD<%Q_#H=*M{xP#f8#zS@&5H~OT@Ru!6)8+|fR0EtRB`s&^y^`tqu
z(N|t!Ez{6qUs&7c%lqDL)=#_F8`$SVTzWf@ebnRwtlL1XY54)4T#>*8)B&F<yf8>W
z9q=KdY{HA+;UV_zK<$q5Lr#-@+%p~W8AZHykSKD<S6pH>=0(utqwE)hv?k?8-6CYn
zM}2Ua)XzTN<fFc5v2`0S0)XRe`XH@w`Ej=hweh&m5X+K}`<>%H_&=c-to0Nt7_8k<
zeah)29}lNa`SL}_f&{`TUp?V<K%$ycWXscOVe^qOpJVL@Yah2f=R#04b<QWFDaZig
zoKHsWAOUgChuCo>ra63^cGZ_R)P8e_Ho{Zys<0ccs_9{^v!-;{RBMda(m{7My>N2G
zvu}G}8|`_pi>8)YL4;1?8M>^irvB;%4(jQqsZG#b0&j?>3<KVWJ_ipjhIn>-m^MXe
z$~5(6w>0^P_cir(1Y)uV43TfBrjGMi1ITM@WD2A0ABJlYPx)v~+5)&}?PyI#eITL5
zXbra9mY2c9ajf}B?f&X<nlwy}?@z{QvcEu*kQNq$1`-J4Gz{82i$g%Mx%T{#TD7ly
zuBMpW8Z^F2&DEeS83#xdnoHGI@-m<nu=?Y*M&%1MMZ_!`p8yNAkO;m(l8{zb*Sd!n
zfpIKmoyKdes}{SO(vq}T%NNm~#*JgKmTn*`CF5AEHN2Hi6^(3T8S_rinpQ7!5h(0f
zrb+XH4BEO(t5+!z$TpT~jc>Q6ka=n323NCpCTLSzt#%<a;%fPPjUpL9tk$F_011fI
z8a%;Av}w?=OVz&Al)d&#6SZk-4StF+5)V-BOLw3sCjOFojJAPziZJp^t$42{!gFHq
zF!C!+-J^-{T=G!vYpBG-bIC#&xm%;~{Oc6g0X}w|u9PG;*gdCe&jl(#I9gCVJx({p
zq=s@p8>eGZZxJ0}hSkX|JWtzNG1)C+qReF76wy3P0A(iYi01kB1pO3Nr`wVFS{+aI
zbp5)KSs0G#`gJ3-fH7SU^Yt0cwSX~QuUp@mB<jr%tFzdf3$!WKvs{RLK+JL>@&PeR
z4?Fgg4~SWMSv_l>!5i%ltE=p%7i!gN^(q&`kHK4|U$-DXFjnbl5nO4C9~i6jircJ3
z6kKUaL0H{tZ(OR~qf~EoF$#dORljaS1;E&<U$>zGU~JVJH?hu&rW9ga*&{2o@2kIb
zAqoNUr7ky~no<aeFZJy0(hLg$@uhx8bL*<c)d+;ullH$?YVEzPPP!NYV4T$RouLZ=
z<D_2Xm}LMMC-qdu>R!Mxf?=(fq4c$@*J|Cg8vGPH2~0=8^fK~AQUfGldKo3o;06KH
z%fR3Yvkby4dl|XDhR9Apoc7u%(%Vog`KD2_;3fJHi#CXw5(=vW48B2Z`_I3<{^r~4
z*Y6sErr@J)JP->PNB|8m<Teo`>K;IK^KBx654c1_Y!fLGA?kW7!my3^jqBz`D!p&W
zZ6bt$^uB>jzz`EYA5(Ick@tbUVv9Cd4bC#KO&mmHrISmY!~U>C8&WmLfd&)Ma~x=p
zfSzN7(|oKz0(y>-E3+Qp2zWS;RqfOss-EW}Py%S4i$D%`o)H!sFP%Hsc?QxUorDr-
z+9I}Wr`DxvkqbfIY>^8=Yw;o@ECyTW?sk!ZIQf3A1XNneI`7gRtX}FOc!99gMWCg5
zsUcTIoqOM<23Ey!2msL&=-n-L{+HSWrD}_dfw)B7;$qO^yv6BdltH~)3<S`B;SiAB
z&Q5%-y;Z&4MWD5LyNf{nce@c5`xKq8&D)Jk*6OBn2$;uF`-9zD5AUl-4J9JGoILJP
zBP!g!&OPo?18$#|9+2>MM~!l^5);|g3=*f}S-41x3xI>nA9zpy(&{PNi&*ud-EF_t
zTWNjK)mDeL7hP@1WnXlMo?P}t8v1!&t}QC=U@G+!)4Xij8a-wI{h&6~Qw^4wYH*-v
zPX|-(xIqH0gIO$mAV|P<FtJBjC*a_Fd)bd1);4&md$|}URO)3)L)R7Z#l1{v=pcd7
z%Y>m%6}ALl+@C#jRQss9zY9UGxW5ZQuDHJ$=DQPg54qz0W`kS!)YTPu;z6d^w1Yqc
z2AOicf<(zdrkt-JQF4&!%vW832OegM`3eFSHO$q)4;_ZNI*=b8<~D=;@Gxpd=R(X^
z_?&rW-Z6Xqx0<R4=b1**noA*&LGyKqz3+@x<*8U=$~6sKfGsg)2m}&fOH8b+h~%gc
zp02SUI;V~ERIG6e(WG2snuXkoAcR6|%uv`GK^<w(ZfpZfp4UcIY%s<4l$a>9!7RN=
zmZ6|$gLz9sk##YMtYt^fYkewe-Fj%=)tWNt1Q`-CkyIE=7H`nJ+h>ozpfPWgeNIP%
zi$eR%xbQh3QD~nD!&@y{guXm#VtxPI%g%hQ$Ly|`v}vA7u*52F@G$47DOY)rD1X$%
zDnGIWJ6&YW##(t3?N@%%M&t*^!a681ivS<JJB}3^dPRDirSJuTnCOXd7V4%U01eH?
z+b<Y;l_x#kk{fq$AvK<)mP12Gft+A}X6h?FnF*G{+d*7nlhhpK;-Qo_)5<$*56{<|
zDZ!Z*k_ZdY`97YV`GkE_pfApSV#)jgm?->-1#dG@2qBvO%u;r+6@~hM8vGJD1SDM`
z_n8IXh!qT27+A<<c355twmD;K7xag1skhSt#yMNMAlO&uSZd}*7Ml9Gg`ociDPYgF
z)Ot6vfHkk?XFQDR{GYKfW($4>hRL<iQgb(g!7VMa)J8Y5;AIy7Ofh(hC6;=VD^=44
zVWYa#QX9CuE?!LKWtLk1Mi!>%@}DV&m}kY$q!7Za{4e}2UW6p8ex^RW>}pG`OYk*L
zFJj?eW2xC2tHdh4_GkD-*gXFXED~1N|Ew>fm|Z_>Q8D(+H^Oh@<F?tV!M4j8CGcp<
zS?ZlPvM_L4ED^GBT_J^m`@&LN+$e={+j?X7Lki=z?PmosZrd%?I6)X9=9BuBrR-zd
zL;Cm{{1Q_KsXJ8qm6gs&ON4*WzOu6Wu3Mtw<(Bw0VF~ROudu}3mYTYeg$C`h)bx!k
zVDBZfXv${{pue${)0WD94C{?+@Y_*>GDhFHN}$z{%$~lkgjXnW&{8WTyjLo5$Tb1Z
zf)a;a+u<x=ANiRSxf)D|hBtztTaURT$xEVJzrC?aF_I@N^^WTW#Xz34)an~qsPdGh
z-fgw!?FRB0OR1A<nrZ#c+kgA>pE581^NqJ#u$v?L?P)yVfhNYAQetN;WJsQX-$8ci
zyp?yE{VSqB9zJjRg53S_?9v7JDi$*IdUZu!2{cd3`alBWf>kGFWl%A4Mq%{_RzIre
zQa@M<kL-vEnIA|d&1FDcWWSB-+0;c#1T&B!qqs;iSuTU_`jJhD>Sd`PErrMAkfAaA
zkz~rb3>tZf9ggai=}RsSHR%$`v_X@QKDuh<bzx14_1595mam96iD!?lS;$>dli2iP
zT}y%F!IuvYfpE=2>hclPf|O8LZO^t8>yM_|=U<nh7PZfZ4Dwu%0rehhS)xCgdM{r(
zX5sALBN+@kWYD4xY<h|QUaEtOLoMn+GA+3bTGWyKBBr-Wb<CHkROEUf(~)HE;4-j~
zPHbvSZ=ULuF9#CI9LRJcnR~emW@2aNiR*3Bo%0o*z<>g@SLjSK)HBHUbkEQ0%U+A4
zXS(P6ih0lQWJ-^G<yO%%d*bLBkbG<D!$TnS$j8E77quWG5>|UMC85_(^~{&c449DV
zNisA6kpMv)#_mh#%~HMc6`sr@CUHro1(!k3^kyF<^y*aae1!)QkfEOGO)^zn20hb<
zT}bFH(|w$tLEZy0eMsh4h>py#HXuK5HG3+lKU;4=z7aq);#Ey-a)#t9!}3+@TMrUW
zrc7WFk8Mio$C|Kw^%kCQ5|04+em;C8WwZnb>J25%MT(G3iUy|GCrb58O7)a{8PbA_
zVVROI!%>jvn<@EnYXcG(Q}VI3IRe)R3_P9A$};+~d#1Y(v^$#aLQo(!JwGgheG~!2
z^!$<--(Q*3gEP_TiM!a{6ZB&CYF4kT0z*XDcnqwWE*4cdGhc3U@Dx}x^RdZ!hHC?A
zHrtrhf7NQXi{J&q?EHM{MISV#wPSXEke@XWNoDeJ*06}eH51{Qwjy6yW&bv(FZ8~G
zpN=B5Q(ECFLIK>0{IJ+nqZnXT<cpPnP!Qp+$j`3I7rSa=AlU<BUYW1{$vPasC|hCe
zcz)hAyGwojkY4Y2KF{2GRa}tJuH`Eo{i-#=#4uZOn2BfitI)@*P1^er*wCnoXXwE9
z{A$}9IMAhoUu|Vgp=5(a<J`~w{q1@~Z%seHy!rqx8qm)#dlDoH_4CUEc#sH6`uUU3
z3sjJN&(+Ug`W(4x0woTr?&rVrVZIHMEZT<k^FQ;f)sq5x3*)5?@hczr)x;%F#tt{r
zRZk5VqF3=4y*k7%tqmlU8se9`V31I1h+jl{goR!m;?I2G7rjahaW8=R<xL97;x{SY
z_sg3U*O@>Y>Q`Ho@tYLaxfqpUe%z#>LqH4WsEzb1<Jg?$`r|eD<tR#aIMP*=>~N%C
z4nIl(dZb?tKS(G#(w`l7T~X%(!zfo#&f<!Wb`_OOppAi|S*fVxLea6LDBqk~ROM8A
z@}2quPvum<qH*&E7m7{w>%!VWl9WGOL}9z4=7%-gpSQ;z)Iwk8DYE@IQ~8F>J|8xs
zt??_{>_1fN2fQ`-DK;8-0K7GRQ{aIF-WtNA>=8&bbd5i<4GkrOB*qsMd$0AYw{k-v
zPA!k&*7-$L&4s`M?s~t7y&V?JX@eheQ4N`xED5lUei4H@EO^jOez>|Dq%b&}{UWw^
zq|jTn1a^ZIV(%?}wa#@GrX=9MxKUR=OGD~bzxurOKDoGj8tGl^g?sg3Pw(=}Gbu2M
zOZ`Vq1tf5G`Ee#CNz9&I{xFYp=qb#U+{Z3|QB#X90_2m|+wE7{CMsFqh#q4vx7Ks7
zf#Kj$rMvxw!ev4l@VotRnF5}U*mnElZDgO5c_38Z?N7AkGZFH{p_#bb-|8N#D-FFr
ztR3;^wYQJ7*1LG>9`W;2AFt|%yE*1pPQu+h4sYX^-iBDLe_Q>rCg1wiX1pHp2znp)
zt52Z|4JnL6j1zu!hR3=I4fB(;`Hn^I({Fy|JHI>_029sm&L0x_F_37^cYZ7))Etm#
z&UgNV@L)vp=6vT*w&Bf@9BR&Y{(J7VDtJ9WJjX`er{7j{&aa3=FFzlZbN+}(qJcy`
z=g57Cdf+}lW*!#J;iH0XJLk_nB<rDZ;@x)6fBys4hqM*<(@0(REA<i|cr#D`{`Jfs
z-*^@2&et=4`~Ay*%e?mbTW{Ep-mmxbR6|C%3Y389UG~c~E=Z_)*<U2G+909SWj{_u
z5KI9c)HOd#KB%{EdCi5OHS3z=Z6E}QYkqmb3?wgvV0U;3BU=#GCKlxNws$?Ke_+&`
zSRfaY0*vgG0_CFu)fz?dLV+Aw;<2Gm>LVZeut06h`$9ZIL#Gy~zu-eFI2hV#1!^}B
z`p=8<VQoo)vI2M=EC&zXop|<pPw5_C)1?L2e~};H#VLMTRsbJNwjwwHTwb7d_E?)}
zY88;NtY!AE^xCSm1+x3VME9*NklhCoZC_hZBrZ>YMBCREAS$L4#{%lx4Q%;y`W>%s
zC{Tox0+YA}a)}3tA{z>@#FH6-gc)ooNIfVtb<AKxLHYr11|%TOU_(LM`>cU<NLD~*
zaKQe}^Lo_R?trT+4fTNnnQDg+Dn3w9B5uooM8yXRa9c)HOw;y2L4#j%|AVKfCQPse
zH$QD%rPZ>43LLX*+v)8+FCKGip>yVA1@dYTgiy<|0(mtEBo!*aah|Bfi&~Bql!~i!
zcq(f-R#4|b>o>d-_|KDU#>;xUb|>9B=pgQ7fy`tU@ch)t0-4DKi8@XeAd@NTKzIYP
z{?oE06x>itP8Qtslr@NgjsjXPFWY~5MKAVNUv_Ju!@A4v*iy3ivOBhv#kx#myN3eQ
z0_xoE_Tty|eaeg73$NP;-45zrC_@Ga0i%1NoEsp4(Y+9JLug95<L-rZ9+sL??wB;~
zUYL4_Ulb~!OQ*fq)!*ySw(RBBL22S%ZXJ{+?o}vPdlW$(y$Z3~kEfG;T(KKjm}lDq
z-_XmvfsuuX*Z%|c3(302uoZvQ+gFS!l<O&&fErUMvxOi5HKq{RLcZ7(k^xO*Z~sXj
zRzA@!L-ste&=g({GAJ{#5J&siP@oz#X9~OPO}%B+6sG}Tq5)G1rOAK<!j!_0I1&O0
zgeipx_UH;iAyHG=>^JqMRa0FAazRsF1RhruN~1#&DpLrfYsC>@Qqx(zKkN5aPj?Y$
z$(!yXP{cgFFeJQwAvdY%g_xB)$@B|J;m_>xf7YM(wEWD)pworVoPmH4Fg`1kK`TgT
z@fo#a7@YzI!rG?7yfJpwU-hACy-hR_<hTNGT-yqjU4<&$ywO36lYipbm)_Ce^3-fE
zL|%;?mw1LA-BE}<h08%bI}6npuj74LsO$kAt}}}w@Pm?dy$lW7SA~d4Tn=!*E<`@c
z<p6hgq3W-(Zblyj$YS=hAO4{?e06`JA`;hN0%(6>K*RzdQD%Rkj0Hf#!1ou*Sb#{r
zc<wKhv4G^z;<>*NvA}!O*#R<#!*=I?>R!()haEcum)M1-2tq)jro)9Yr~!$Z4i|?1
z&8HHPVn=hhu;|GfS-jBG|3^DwRD>oUW8c23S63W!>!Iq870PrzWKiT-A=3H7g>qOW
zPTRlyUp?iiIqg_NKp}fP?N|axV4N<LI|Y!yI9-UPz7Rehqydb=3~sVf_(!x*_H<$P
zC3yMkEUK#Tl^!0eD}})UO4h#@P#PpIYMHig|LqO-+b%|#9sNK31#cDjVu6PgRCzBT
zCl^Sl@?Ib$ygo>%@?HR5pZ25yvg=N4S`GH3om>Pm>rO5LnRTZ?NSuG62oO32aQ-!v
z4y^<5gIeDJu9dWDug8=c{B#r{SJ*coT_NNE(>EYz2S~v54PbUqtPT>fdfz~DSU|+;
z#Ne@dzkrO@i6dh5{sEDS<fTNc-an9Q$vd+~ieY5?2U<NZJD8V5eFFkAzLrwx&;fxQ
zPr*81(0M?h)eAQkgrgt$vnt`12L^IHG3XS8{S6GXs`;;yNR$r>$S7Y{i9Gq>pJ{<S
z`QSkAfg7tto_t6^q~;xb<jIEw>i$=i$deBVv=Vz>34bRN<?Kd$v5R>B#$FW0HZ-8V
z;Mg>pGujS!f=#y^?T#N^svaGX7efR50?Ft=(lI1jW=4}C4ZyzC2QT(vAa92KW@kO5
z1V0S;Le?@wQ9gdgJ(czCs;@{*4an>jm>8d_0ZfROxC|^~8hfjo{z`gUKxQg&P7Rr9
zB=fZZ0{Ia;*G=D(`Y0e1ayW@5E(u}dg36%NbauMCes^ZN3q&cd=_GTGG=-hb4d9~X
zqdoMul)&5oj(uK4S$?=Tk8SFuzm%RAke5BdMA>;{?2}0eewa6(J=$CUFg-sYGk#z~
zXg&$G7eXKxu#!G{hn5R4U1_aHNz!xy3HhM}l4y$qdFuimE8p_^=umZW09n&FPzTR^
zEeR;O+zaeK9km2I(?@?K1%}9*;xT}h1aN5mAeTnjW$cB%`ormEPPZV71({_5#2Fn)
zBc8@u$yW5$JEvC$Wa1P|2(1j@MC%(Ngw9*b-sq<v%B*!p3K=K}t)<QzPe-G;)p0tI
zcf@|Pzh0&noetm*;|lTuK`aj1#ej0j9{;}HMybJ1u|>xND0neoigz<WqLzz+!T_K4
zATb;l1Hnsj+7kojiS%<ot>P0xa-hYJfwJ-&SpfPmP}#y-65<MAksA?I#s<~I$04?H
zu931kf1r;rYQS_<p%r9AP-Y8)d<7X1l-UB1P-R3gGBzl#KoNsf(MAT<F+p(!O7c+i
zC|qOVu3EBi1!{DVu0YYk5~QA;5X1($Jj2F}*PFcpLWKW#1SKW}gJQu139t!4xnP2X
z8<`N43nr0#!JH733#R1If;l0G1@k^$8z2y4P0$~xo)VPaH^^6{DM9IdL896zLFs)#
zQkfvU?;O#4@PxJYq6zw3qg}0wK}$)ki$P0CZBPcYLB5pK24ye{5~|k*WiU&m2xe=8
z2xgB8BLUoQd*^ih4@&iJw-yS!cL!x~ALLQg?qIRlk%EM#yMx$~;!p!U3)y`^aX$bA
zr{w(rkkD^mP~Hy!iIV$*&i#NO#nOj^j9&X_4FWAb?CL-v^<lTA6jC1!%4-e~2GZdm
z?gu=Axr@~3x52y%%$lV?9R4;akFSwnMDii1WX1UnNI-xV=U^aV632sx%G+Q<BD;tE
z2>W=JeqZWjP@cPh37L~LC_)C*X%?9cnbSe(Igz|0ZV>bFA&vvZ&ai*ZhKD#4lui+8
zHOQQyfq{9TF0}L<J1|>+AayP%&y&D}%()<TGXe+AKhGZcRDUFMJ}8|ZnhKfoK?K1Q
zi%=khsSwKBX3zdqpI`<?hLEFq7()`GhL2{yU!?z{d~`_8H89b_(IHdB(;%Vf=n$Zu
z<3;dr96PW`f1zTWTZE?PxR5FGFd;rY$AyrG=@0jWYM{&{_CJgDfmM@2(#pYv;*&zs
z%0U8RQb<}TNYpwhgpPQUBY^sl-L*u2y5hr-=up7Y#P~2&%J0DwNkSpq1Sek(8l5+t
z&0nH-sGjcD%J&W-8Dc>O5Yt2QW+_NOOb@|gdsD<1A{A%b|5~aCJk_&Z3<|PlyBHK?
z%?^b`8USU0F*^h&&o4QK$n59ZtCs0?JXLdD46^^Zp?t9<LkJjiLv?TCyGxM3m>asi
zDfdYsGXDiEvqG;fUjRbNkfARK$xI>GD6$}gp!#oIbIj-^tj7xd?-fhjVWMk9OWa|i
zYeY+Em_8RBhL~q1t5~Vet6u3UO1Fqsy2C^Z-pY`?N*Us}h*naE@!OavMK|E<uhOSf
zuX7>j7STEvf^HG5b4QwP5v>a)>u@g-qFY28L&8gdKrd|!NiP8sB{znomjH>98$*tl
z2+=K~ts(9u+JM0DZ*_H`TSQx39q1O(){yiP5C+oL5WEDxUV?1){!rd&`~5YzUJ}?J
z@&)({9Y`D_slxWG)1OTr2+64iCan7a%@4W>?Bi+OL+t7G`qcEHkUZZ76GDfmtG^OL
zAdj)s27Pz>SV&|UQIh7#u@Ls(*j^A4lsdr@8};6)6D|^Yh!ccFVN*UC`6;$yBf_Rr
zAsK&x37JzNtW4*Tq4gm{dnuIH)vmiq|K1b46vF!{hp7VOKamz;4QlnHnad$XyZ{3x
z3SSN(B{NY7p{K5f*lk<%NjF^$NvDVuD5S22;1o9tDUcn)xVO2)lWEOH@6qb8<QMu!
zY4AkwgZv~H!Ms=}N}zRJ*pV;v4Vf-s>D!Qjgix0-eA_uX$_j_I$zg=1Tes?G_2A?%
zUJn?D!fKc_pUSp>txtGtYFIihFrn(yu)Mnj5;aT><L(k=Y(Qd4ObwT`;(-W}2oX@*
z)Nt%>{>Dd`JkWHucDLT5>2w#AT-)@pyuu6_fKCsi-OJ)oun6zRhVxE_J&D=z47=w)
zzGD0FJ^Dm{@Icr|S*uCcBGUCR(~j$FA3Yov7n+C(*u&wBNa2A5?BOuZX-QX*(DiWm
z)+hOnp2)6doH*rA;2@VUQ5yDhLVy0TV~(m|64z-zNMIgw+7A+#$DH;PDcXO`X@3z7
z&<SdP)28^1`EtUArV39uy@02HK0&?Ejg9~!VeR{H-Vb)8lX_QA&G%s=he%mfBh>Qq
zVdWm)C{Ta|DMC7sfIRPL3lfm$9c@8E+w+dLL<()slePjJ#V>@FRuY`f`#>7jlhlI|
z-WM0bG8F(4=oi9B1<0pBzYs3Io7)1OO7siil9tvfdXFd?)~<x}`WAT-dp%-c*{IWc
zZPAsmQO{~mAyE{q(>fO^-RzFv>DN3p_$hYJcmS`}xhP*GH9<nt&PDab*n)&Aor~}y
z7VVxvB6jUubX&I~arQ_IL|-V<rAS;l;xZy2>so{hUQhGNA<(l3?@`~EdGhtYzVrIq
z%yUkEs2nWOy;0r)J&WX$3=*~WEP~r0`-##}_h$b*r$7IP-fj^Z<laSc;fD;0^e%#9
zqyCN()u%|zW}?vFAf4K1DehAw-z&mXE{xT?HXof?jA>kiL}u0Z`et8nauKEm-NaLi
z#WXIxqz^8i>R^Ehtf@tE8iNGZ)FMpdXL%7koX+-K(x0oC?iS&b)M;$7n55KLekHS*
zTKfrm{jxr);uE(Fwe}OIwU9wIpHORg!nByk&sgK1^kJ2sxn-!CpE=Eh3<(vXnd@m9
zl!UcKMR}*}%RlMsJfTHJMnb$(TtdxUS;XI#uL6OdTj@Z81mwyhnYRTA$dyIN+a4z)
zD}j<)ZISXtk(&5YWwjm67WT1g`YlQgn4<3?0)$#eDUd*@C8fx|K*GLii|Tv<`=az9
zF=%h3ZYh%6G|539Z7Gu5G|2+cmLhD^e!(??z;?2@yUF6%0L8ek0<_p1mhkXxdy#x`
zA0*0drx6%Uhg~H^?y)tmG1k*=k26ug#YEXtB-0ci(U3hwNwIwZNrj3KThN>Zi8;Hc
zsGi6P5-Fz1o}&6sSPLjzE1|{kpso9iyFJwh-CF1b;$Ts}xI7IZ)N-&Wcb9~vkndno
zbxR(8l#tsyQpCfLCLmDqNRbRbK%(T4A{l;wM9CvXPWVwmf!@hUwVL5+dD5+%GHEA^
zWRwdTK%6X+aR*31oGe1z@f_?Y7S_%b<y|de0mFDUc%}%e9S=ieWIq?|zZ*ut^Z11#
z832L{tP4dl00arF3q>-k3X)u0QMfrDbt3r^a-pcGnRSACD@OKzrO4i98h`S%yy9pK
zHrjE;85EFQOukeM617|*@AVOFPvUsTBa-*A-9F!#ri6M$aNnALAR<mG_l<CqZvq0H
z&^ICt79=41Mx@Du1Z3X`OdgAgs>VsLA+|qY^zf7qaSM?iLn3k=h7bx3iJ<ez9mZ*f
z4`s`O#xvDJBhn9piIxnF$X91T0%2$*E4B+DfiN_3b3<#2s21cH`<ak2)l)sj#UK+M
z6OosE;@m{XM1tbb5F{0f)Ja<#$)Cl^04K7RMaJgpi7o`$-$YjpvcHKD`34V)0Aga~
zj^^C{;$(kQA|m_+fs#`q(*8iA<dlfCKaeOng}UIXs2svGB0T)PKhEELpW*62W;i1v
z%@9w4G$SI-5G0UhL|}$5U`!KXZB``jY{ZlJ1^f7a@U@8VqDHI0tO#B#rS~@zG_;?x
zyNiv+<)1pk111nZjmY&DBoIH1V7;YxX%p1*bJ)mYqeaCWw+M~soQNsj9)t{v%!%OS
zhw^nOgCU*I^b+I4^7(EVLYg0uCsvR_nfVb!%(zO2BA^zrJtao7>P1e|!9>#+IZX!%
zghdg#fdNTnB5*QWM6DRX<?P9rv9)}8MBaT#aF?+>q6=RK5@nW0kO-qI7YQ1&RqUy_
zad-79w^rICu5xRop<5M^FR`Hr5LQJHV}B=V#n7#1o8rdV>h&%JZ4uWyrkCJjwmuRR
z5hF-ItdHDst93>|V2@bKt|p9g)wM1J<$-G>`A!$pma#Sx6M;#BZy9SNc$J&G&jcl~
zcGwlAaGx*ia53mrlpPW2q#*>19g!q|NgIu)J>-r^lRLOK1xXl@W)IPe-t<&FZvLP&
z9qcf_WUK2KjjO+OD=<;Pml64rT!O!+@?}K6BnJ`|d>O%umOW{jCTNGb-)@#NdV8w&
zyBM^^-0yZbZ87&p<Y!S(1{nJzH{EPC=MdOp9vqS}?kYbRkvB;ad~10yA`<~1QQ{z(
zg)l7aERV3?WnfrG+&bw6!6Om*f?z_SE#;9&TD+MD5(r0VUT>s@JV7rAp0U5m7>_G0
z&$t-$g5VjqbLj=aGm#|!L;#fm#+gXHo2)(*UnIlYkCD87_8VnreC)>v)(6^rsY%R8
z?Mg)H5LFY4JnYXCwG3;2o1wF&^^9>fcpw4=hyneIGe<!J{R+)d3KT#hP`DB)?hqA8
zRANw|pk0lq??putRq{~oT0|yMB@0Q^_EAcr@^4KfX`1$oDvu;O+0WKDf=UetM+=(v
zJ)`n45RyRa8I{WxNElGhXjt5(A(96xJ)=e9-ht%6H}s4)7HMY5;xH{Aw8n}qfkfXZ
z_M-zmbi0NfZeR?n21A7CNxn4njmrBKAfZ#=Xo*PSfCO0ID7LDN(CwvRZD2I-eYW6c
z<F>%SsNv_g9ZJ#ZzQOFLn~ip_40aj^CV&P<Wu6)&fCfjAr=}1FBpNq38mZyi4kFPw
z7{K6YRNQ!wEMDlD|5z~$ZYilYge|zmNR$t8>*1?mRJvQppvaJ@bho8&oj%6YhDM7T
z<}?{hOc559O8`jVvZy@g1PKHdMRJnPIYHu_lSQ3#PNIdXEGo}AB@5@AEK28`n<&$O
z8$)BGdB>xk#A0uz&FgQzVJ~cGEcXP*MscXbFfcxTHD??fP;LxOkBiFGD3}<oaa8+R
zAq3sVvxh2-?^ENW@@_S*&p>E=6mzm62Ld&L{kqa9Pfdu*d(*i4Lfk0csm^j4G-@K7
zRB4o@Cq`xJ0ykG6Gck(IE1g+GBe?uY_OVLC>q$?FDm)`cTu4od;*hLA{0?aJ-V8gx
zkulIyJtHc=a{(@-W<=$8E<mEf8BzJ23nI~w8Bu)a;$Dt{vHqBS)!1m0`Zy}{Ex1?$
zh>xRK3vyfretagYzTK#so*9+76I={|%uF)K=|UOU(Hy(|?Z(HR)EpOyK7}!dkXmyj
zINQ(JqfL#rsn4VG<fuR~A@g|@Cr9sc8F<sVY-UsAU+KA+Eo7!>ss)+3QMjEAa9yC`
zFPGa7-(ftav|R2=<wI&YNr^(_F_%XhwBVokKpATK^61TXS)&CAT<8XSXLBQ`q&B#{
z><7q(X#EEKc7Fjm$&D=5!f2J+7?mGE0TVJCqj=4b-T)|2uy@(S{!TKRTpY^eY$6<b
zBLNq-aBY)qZDBl`+8mYl<-vr^<|tN7%A6G_xT06fT2&c$r)pgsx_MknI7mA~1}`OT
zVI!)Hr_)<poDgKT5Dr3M62farU)#ZIV}_FcIx4@)0xqP!jv~C2orpJ=4%>U~Mkl5Z
zyPa4Bsl(KX6hHzCFEf419=X@pocT7Y+#<U+0-<lC<&{<!`hX5x^66;aMOM|?=o~m5
z#Ubb~QIy{b`i^aGZ9JR$&KYhnQS>_+Zh9Yt-vT<r+O{z&pF0zk@793{nKMzmTbJZA
zpw41u<_a=TKJ`fEt+)SJ@wb2ejr&aikk`Od@wy2}E{tQ3y1Xb%;2hh~#;Bh<7nLbJ
z+~|SKxhPV4xDx~f%(m}YsIAd7^}S=?U_$15vTxkMgbe1|dG=ac<F?d!7l$8d5RRw|
zbLj&6q%G>Y5S6*uLOz!+M6rp-$0UG*x%30O(AH>_`N8cHnoB=Wmu$l&M+Cy!h~m5{
z_Wk!6TaCboVxyQ|AJF*6dq%Na9y1=Q7*(us2Tn|s9aS7@Km$W08a%4__6MxRn3kZ?
zITP)%j~Pon<r9lFo@^p63Qa67=5HMni9!>Ln>|WzV1vZN$*lhq#)FlUi#2|<NKE1u
zN4WtIi6WDWn?7vK!rX+v&}J0pjknDwjmDnfjADG`W=SEi_-mLO?T4Q-TI&@Xi#2}T
zhPVLRSX{_Ig+V01HWp)I_Jbb<4W-A~^Pe{cL?0SgqVcQ1#6_WTC2^j#A`*qhmE7?d
z9f7NL!rH`=ye~`m5x821T3uq4ik)8_+8#_P;XA+EL0~ASl*qLoBxI+Q$ekZZpiU{l
z&JW&NtwWkjWxxHaQPyaxTZC4+sU<QS1Q`^WT7qoQhjbmV4mwJkQ=-hX=l<2W*;|93
zVui;87|5Iw`MoiafSFSg7r6zHfSFT*wS;0HkcfTel+>G7B9d^#5ZQ&#OJovGvd}AY
zOOS+{45x;2Kv_|O*J+2UnKo@7f07k9G79a#ykmrvJHQta52R4{3bzTg<yb*Ym`MBZ
zI+zjKx)Nn`iJBP9KhigeEgoyUU4sYcJUnq=Xydr9M6UUG3Yc{zGJFGxCafzd-i#*D
zSNe#-!?*P%>ZTGAzDXX+Z77l9n`9w;+gRd!rLPXnzc1M1?;6>PFG}R@6HHY9MTy*f
zf&|PLCC=`%4t4jgNu%CH_G6bj2(<0oRU%^!$N*wjiQIOA1jMcqY&-cayHr>^S&~<4
z@BUu{x9m=qz^v((T?+S8&Xy<_N>uApx@DJ=x9o^#e^6sI@iaR}gG9+K@eE`1eF@%D
zaXF~xd<oud*-agu;^A_M(!ti=Gk)!<x#ILN9zee<B{F&giE>v;<She`6d;#GI>bZ|
z6NC5g)e`l+nCM~2L%C~C4@(vW$T8~SOF{?uoo+FuPfWG<cQF3psR1FzImI(B-C{C8
z1_`uoF$BnDsvx07w^+E(buC1QtaXp6y{~KGB(!_Pv>*>QsT`CARL>Z^8C_nJER0*P
znC8EQ!VmD!dHvWoos7CK_KV561SW>DUrY`oNOV)bn7p+L5~%%Rh^HvX1&QFKUo88G
ztb|97Tq5_dRfpFBY5;q^vyrYD;MPIg^Z{-iG-n3H<fnyFe49QXChsDHL>&WSrT5D^
z_$@p_jn%o&O7J?c%nXX*8izmg?4RFyE%WN1-+5CkV$cu=Nc7OMo)a3=JR1~~XTo@l
zst3hF;@&ez01t{GHkHDtdQdFWMpjL;j8q>K%eJ<f@v1=$VZZKT+}Uo3+dRq#3~}qA
z$uuM;ulA+*WEv7fuqo=mO(#5U;B=u+)-fb@^TYh~3~j)$4P)PTF*dw7%&ml`+c38e
zX}S%I$?1k7XvnY_7Cuo4-C!OTD|=Kn#QA{duvpz+SSj8RET6+!x|@-CakyItUAGwS
z)<G$S;W7DHjucNR43A+U7j@v<M0lEW8p6L!1TBWg${wb-DbWrHjASFa85Pwd-8v}c
zFft}n4v;||BV$PilyV9qV+eCULCgdQ#JOXc(cPH+;#e1gj;+VKYSOXw*jQK`x1$Ik
z#>Nol2{lb<F*b(V@?u_?a;l7t-SQMaflpD^VFF9^FsiF3xOG@ib3#leE+B(CCdBI9
zDM2aeFd<ge(pp59&Qlac&$I{iFqSCoX1W-3!aXx4lL!z3#>|-f$`D9k%#2ltYXKmk
z=ge56c2duL=t*Jb%vj?Wt)sLarsxcOkv+S&@dt0aMQ$yWs#p}0+g%8umPIl7<sOiz
zWl;>ST=WKB;Q^U@T-M^3wJeI2J!Wkc-V1U1O8ejajb}VHE8SWsnXxjKFLu!>g_0R7
zV=0j-0*P8y#$=`lBx+e1Yxat8(;)eEsg<$jFY~u0NI<?Vu`>2zJDwd)QS84acEi_!
z-uN?n@m-^UwHs(?P4Gm#$OJi5y(T8tDv+pp4K?s9p+0R7VoKe_dWG$uV%}kI8faua
z&w(X^hm;b4^=x*nhd!9J*_}xA!KBSGtXmWerNi16vAiE+A{a_T@{1T!r92IureJ7$
zOr*g<0Cl_L=RrbtdrSsHAc49)hG6J0#TIFDvU}~=5aahs#om}q`h!dCm?6H51`>t#
z#)=}=9z>uh1Zy~KPk-Oo=czdC79y;}ZXt5mhpEswQ4`41_WWT+J*E1z(+6pBFWTt?
zkia+{3yaJ*NGcRVG){NB(iGL7jfu212-v|{XD~pb<XLAhK%(SX8jPznebcnIT#WIw
zbvqCMy6EaaUh|@>19{Dh&Nx6ANEe-P$b_}avAof7F%B6>UXJ0Qk&i=$#^I_M2lmn^
zLo2`P3<DlP^r|xqAOU)nhJj+z4E0=lHgFVT()Mw=LW4=%xQt0bqDcEV0=mm&UKxr>
zyTp}V_K{J>|9WchQ<xPVpgCRQavcQ;m@aX-#(@M(mpIlqTIfMyq3;qe?G^X(WGXQr
z&^4|``NSkzO#g0i1f=x2Z^^<t4|owJE?-i;^Ewx$d&Kccg#Qx7Q1y(fPm5SI0~NFZ
zafQYID;9mX20Rg+Kmtk+h|4GxBv1#$WfTe$N)Lz^Gbl|_C^2}9G%&6XiHjIX@=$J2
zTt=aig&1jYoMNOMWEmL>jEBdSQE`>c8E0&*!EdJ{$-;)mr9XopbQ&Hn5fKPTU=NSW
z;2tD&8Xm7V3ObR0Cx!^_N5o}tFIniek<^!K=mtPGtWAjLeH!;9=6Z1A`Szb#{sd!T
zctRYn!951`vJ^&6iYwFDR}+j!Yw%0-5ctq$Qd~xnAfe5qxQrq}LYqnP$TZnQ#Na(N
zIj&BXJtTQ3H^u28$wCi($a{!xk7i*%+Vr?G8>7W0Pc-hW0pTb?COSPXgGfjMY<gS<
zkszVO^musobtPmFIU}ylx~_y1M1CBXK_rzELFCN13?d~9!|_R6LyCqxVh%3@$MY7*
znV5qjcHBsdnV6%QIG6RGWQ;AJ>u3umgyzPjD+CE`=f*Jy>Ft#qO_TZTrO8Ia2j|D7
zBLtJUasDcfk7Q6}KJ_wbP==HEc;05IK^Y_$#T}nqMj9+74TiJ7Oo1y{>ZpMykX-7h
z0TP%?NeyxZWu(S(Hg1YhcE@tJ2&u8$aRrb;k>%tH_};FJT*2D7vgyC))7v$809Sw~
zVz@v8X00=;Kmum1Gpj&ixYovtH_7252Dh1Yado2{F3Cf=^^VO*7Hnn%w;Af0x?ycg
zJg;=8?3%i$c1zrGlXa<Uwy~L0F*w^C-N1y<Hm6rWqK<9UEA+w6x}^9H)_$7NsB#Am
z5_t##CUN7sc+&_ZitLEv6IqlcR_leeZ{m5E?S0dXjh?_aaU2@cDPcXT{SaF)9jAnc
z94IgWbto?1I|m7<Lp07q$=BAS>W|y?XBbIO)p5r^fD3~>9+$T(L6THlen1x_FpkIZ
z0bQEM^=QpJ#s2-V@kG@r7lFp-l;f%)1B6p?x%z<w!l^h`zq>gCs58u(Y1~tN#zmlA
z!5J5U{N|asJOQl7{pOiCf>>HV>+!5uT&$lUp#Ar88O(r0$?xMbm;s5}zK=WWXFXE%
zQk<`!Z1X3E*7B080xh4HToq{fycC!F0Tcw#r8vTvb@aAj{jk<6ftM>Hvy6wl!Cnct
zIlgw*r(x;K-u%oM+o&&2^!Nya39P;eIb%Trt8W5E@g)sQeRP*LB%!=--(wrk;kyiO
zIU0%~33*Wnaws<>Aup?dgrN^f)OkN4E~^lO3|(ajd09nrFk~ztFRMrvfLH>TRT}a7
zA@D&0-@`A<JpI<oEdIH1OF3vqc^b_R67uA^J|E2w5?FZK@v=Y~$^P=W@pAb{w+Id2
z$b>w2uFr>WWC91z^rB;Z8on{?>gPt&@-aA8m0d*RHYOqOXFvwHV-j$|_(%<kU}(m(
zm*yJH8;wuM8_i&%$oNF5IG_cIBI6S{pq)n1U43l&v}p-troCn^ZYk8@r_&(X=}k+>
zMHzA^H!UF-WsvCAX^G;Q=v7*jiNW2+M+x=ggjkd%59OvO<f1HDa33=gv?w>>Dqv4I
zJE3F~^)u|;eB-ui5MoiT&;Q9`c0#@k01`UQP85q5W<dgbb^=)fGWhzm@3Rxa;6cFP
z?SwRVkSJ*<q``wkNju>fe0|#QEl6;KZw&%nzrfXjwtWi{GQz@BAT3Bpiw6m$1qoRE
zFOWyaTb)Z1c`MlQg~lU+B?-L4lS9%N?={l$aNi=MZfa>lCc43dK`l)n(T$}5GJsvi
zx-BxwQp*xD(G4bKmL+6@n!lmAoUK`8)K4#$O+!I)Hp|K0pU0HDDXgtd<khmm#l~}i
z)d?d`$3*H)q`_MD_r*q=s<lqbz(mW|IxPbU71k!?w?#psWor}2;geIoiS*mRE-W@0
zRc&w)$SH0}<coX#kRhQ&LIh19fv_Qgps5W<fS#M#t4oagsyDj`WVD+T@-oa#+$nBO
z1Vv^9BoH=}4iBMi4Z_;i1YWf`yu^4gxRqwXdJ5_qP~&#8yO$apt9ClTU;=oj(>Rb&
zZD&GyTaW<WNgewRN5I3c*@MfBe^h_%BGCQMuU!Oc+}8;iS~uX0`<iC>PI6BTXcP|G
zSC$#id&&<w6Bb+)I!MDn`(Ti$_Fw{s3HR_appLLkD~#4vN8D=3$scigqyZ0(k0gR(
zCk>LyB;e%f23-U465lfKO5?GrZ(RgRK7H#Vkkk0qMIfi~Eg|4t4<JDHB<r)%c%;=y
z7lCdGolNA5i3S-UoJ`bdAX`B`<Yc1Zt=2Bl|L`Ga6Uup(SY_<2!7nj;8z_`JI_q{I
zd6ct`ec>rk&eGV@-UK8(%GpHS^YADXQWHZ2hUXIUolnW4l`Mg`6(5F4+>HARiM;kn
zPog^W%eP<t-Rt+Tzpgg!4*ZzF`zUd=?`ATN%WTnVBUy3Tac*EjmCMdj0}`rSrlkhQ
zRVadoR}#!vW0Y23aasc|T64u|4M;8}%>g7Ju8=uk#sdP@a4o@JUSpKCyyiksXJ2z6
zsG@5Lne;>%KwKktwvRRow}iEh$-EEP(ly53V8^6$4el0dP<J+StueNuds2F9Fagy)
zDc4Srfa;z^g9ee8zlAF5Z@;(B7~-ku?-rsa^iRq?CxlR_e-eQvxzk&y34@Z{ow9Zt
z46SldQhHN7Lcu{v=}keR;Gm@AO>ZG`Sdx3wHXvZ4!;;b_K%xtVC8ak738Z03=}kfM
zqVT3&b#y^PtTD;FLw4;(ql-5<Es0Mh^Z215^}!74gW-4KHxOqyjRFb88BR}t1mX<p
z34U+4A!$A<i7TglJlFp%suAn*h4FX=*y1)8gt(Nvc?uF3vy!-Zx`6DxA@$50rfxMB
zwVUHK3{0po$7vWyK+H+XH|#(HVonmyp8NnvtW|T8@;{@96x;4ON&IINE{jtoD6o*_
zwi(}5Ep#iPtAh)Z^7<iUP|3oi{L3hiR3?ePjKVP>5YX{U*rVHx2U{<35hxH`l9UNG
z$N*tUGR6O6gNguQNfLJtwvgR4q&BTjDmN#VdD-IMYiaw(?ZymGHCSSbLx4-j;RFe|
z^+|b23MAmxCvkNGe`-Q-sC%1zXs5B*Q@zc_AUCni?KyH2+mdo(p$ss#B{8vNzaU!p
ziXHgU_^$dZ7lJOOeU+5=aU1eD;j3g$<TybB;;ZECO}Jq<q`u!H47(`^l-%Q3Hb_*y
z$FXdXD7ojlWjCZa;h?bW)*#Tq2VET~PB`c`gW`mPj%7m_NC%U!><3}kw}!Q&$-K#I
z*ly#2qN7RN>h4I3$gQwz?PO9pYoFhZ_lW<1pQ4}f0N^JbaF75$nUpteKmz<^66Xoz
zN<qSvo=j%WCcRb!UxXnB?2A7BaVn{vN&0xY<~kQ;PqUZz8j;|4NeasD;+mj>^Q`k;
zqpIq>s|79h=aX`=zLigt^GW&b8jwIbpTy$!0!P4&p^NOwUgI}47hMFhsEckpXqH?|
z%8=t$K1(hpu_VxqA&|H+bTL`CulO<o(O40n!o_60*ARA^T!b$Y5c_Q(4_#6L4{BUa
zDvc9OGmpRZ`fp!<i|yKH+*u8l)0s4jE+=Kw0(mHLIhiQua}y*le_JE|xsY3F7F|uU
z$Mzfdw7Tj-&=Pyq?FpJjSCev)Mj1d{O=5}Vm+5XrqqUBuN;kH7zp<$XzZ^wq_H-<j
zvj<{8=~ybig$)uY9ZM0ai&3R_)jO8n(yi1PRXW4rquQxd?ON)Ls^p?<=Td~-5hU>d
zB}5T;cL|o#Aa@`qb1O~AUaaC9qf=EcS1X#2y<DwmKK3e=E*eFE+^ZBvK6F#{R=N+-
zm!0~?xVx&ai$K${Z|QYAp|HJgX;38bQ3MEmOL3s{Do4O{9LU}{XuMuM&_$qWIj~gj
zwr}Ora$sp)k@p7)gn^~_8=n>AS8k<gIm*sIWUTU3k8&~S66h!wgC^vtQu#h4$^c_j
zDc*-%CNOXuGszAdF;;k5PI58m66mB-d5(80KaZJID!&T@5*U+8OH&q$A^OMb@ViU%
zzOlo{jADOycd5^$11TTgS%(uTRZ7I?J=>i(v>K57pA+aIR+BxYSatDA3`i)sw^V%i
zkSIa=$ux<C?A}r=W<nO!zEb&y9^M6qEJ*%lIb>;-+E>c6SA+{q_g}B{32yVC`F#$0
z3gP{w*hmUs*!+P~`Jy4--3Bm7em($Mx>$3d6si6zw8t+GYv)VzdfH7d82{%DoG(S(
zMf=xsYV;3m@sCE+W<Qk5Fa=CN{ZJ~y6p+yB2Wk&(1k0%bm(X@>1Y5uJ*5BENAB_^$
z`jQc?09R~FA;X2PBaqLzL<lW70#v(F%DP-Ks>-jpWeE6+TPyX&6)J<vU#JySdv^Mg
z(W<<Co$J+*PiSA~dNt$|+Sfr5GWv4z2_4z5FB^B4cXW$TH+8IIin$FL6zN!}ppd_n
zUrv6n3tN5Jc%ZzCTZATjmpU>702vhNQU@7;S9mQj-yW>`C*!rs9&QnujXmnfn5~@8
z#vXNGJ)<lPMnzZ~StoCUz4<32<qM9igP?IaZgQy=G#cyes~&UZElt*^WE=-Bz}BbY
z;&m91sDFJ5%k^@68bhrNYdceU-7}uVrz)Fy!YH!y%gu&Ly`3q(o$;!bxJL1HO4*lE
z=?kkmXz{Tk;;|Ph&BIN0r*JkvcP7LmjLx2vde03URJfNoWAdS8C24ule&;rGoUi;M
z&S<$q1{YdhOv$kTi9#1s7z^A#Lm520%-Y^zR=#=}=h3nVS;^&;yj>3&6uF$j?Rtv7
zK*Hr*P6frsjfmvugqKsHyZAYw<j`joE~lC`=ST3BJfcsr9e0?`%dfe*QT5kSGBFP!
zRCFzcNp}y|4O9nK)y!;N-61WVekG59JEW!42ML4@>9E)#f}}EOETZ(PEOdpbb!GFL
znUkx!x)2n^bxq444l;n~nofzMevp9Zn#PNtf8z+Syq;`ybMx<2JzWIa;PrG7$Pjy`
zQ;lT@ks<a>H@$;@wX2d=i9YPfJI$6=eOv@uCHlC{AiM07mhmo%0HIG>e7pdyz$($7
zt-sT}ud2U`K*#?5T?ASs`lsa%9Yui9KaKZbp60E<kPTvw-eo>hJ;+6%zvmp}B2e%)
zC@u4$m3);Ll*ZrsAQ?$riB)2Zz5g!r7vAbIE(V2dV_XbcCC0c~&?+&8wCGN&L?s>C
zPqzQ3rP<R{J=w*eRbsM>L8tbUT|H=(m`r+nLZ|kXbZS4#zP*(>Te)|Zi^2b2$i?9Q
zFO&|8n-wSnj9F=1>g+De0%!7b(#q|Ld)Rla%>--R+Wcb`7{d8fD)egl92blZ=jWuu
zBErE_fXzwY)|kJ$P)Rpr=dt6h&AY1Rxd?RdJ})g_^MDKx=A~mIq6P_sd1)-36f9QK
z8Tvx@avQU%YN3ljk=nwvjItmDgoWuu6KP^}e!ei>>`v>~90AAYOWCeA=8IKJT?9HZ
zU+T7kj?9;)!y*e&snC)6(saXe{yB$Ax_i5Vz1`M)x@v`sfbVgrD_jKnd!ZF+xjjJ<
zAgoB^9S&N4D(PnKYUaJqyrXKhix2|BY8Qe2BxrS72Hq$Fgw<*M&rxHJfNQ(!*gN-`
zO{&(p2=wPb>s*8|5Z0yT?UqXZ=RoVynVj`kj({t@o7kcI%(tsHxd=r-*yJJ<0b!Hd
ziX!N+iCXbGN5FO8FW8{_&EHjh;UeJG3iXS$%%fH+5g>e#7S~77@CXpTNLMzpp5h4j
ztAp*V*#qV;tG2rcQRuMU)gcOm?QScgK-f;Lpqx^rf`3NX#a2IHK2p8QMJNWsE*GH~
z2)oiU*hLW_>`LRfub(jR5`5={J@KG9pnA6pQ38nFE<_0+cBkd;p;9RU#O`#it}|C-
z*m2pJhiI-IbTMMUIGC0ZU8NEO#=&$*yuk+&7zfk1V$D;Fl?q;wKgNzeY;J6I%!R;d
zn0hQNFW5i^5XaK;Egg`6IF`m+I`gsjLTBLRx2tKTy?x;kvxV;^{B$O10-9WPTay6H
z)wGPWQ4BCw)7UUl^bZoz|J8Ke_8E~LBZk-vT}$ID-ITGZRFV{y^ncRKR&>nBH6BdB
zcFf3J4M@Ot%pg~@Tl8}&ZUVA>PnvsMcFSDXtQ4Ac%UoZgN&(R=b6vAiKy=GMvsv`M
z=51kZa3*i8edQ_h6D2q}gX2^FS5mjpYW_Z3^o-f1`h5o)O!VFR8EJ_i0sVfaSmZ@O
z0{Z<7(z1i-8p&<6x{k3sJZly!EyuVRl!+VTs0SgE%E;I6Kmub-23hAHDT-+n)@Eez
zqWJdb%zr9@85zVb_{x~th_w5J{pQ!^E9IYL<Y5Vzfchj;Dw3@r0rg1+`#1{78j&`i
zu@k>GUu*f9qYRi(<}*hbkR+6m%Q;9Oe3rp--ji~Ajl<f!Ox`lq=Qn1L$h-{p{m%oq
zG3l}(qeK#q3>;k@XKi0JTULM;@eiH?azRGM7$5<;AcGi#|5J2h(rPK2`J%a_VyRn(
z)L5F4uj)evWtL`;!D<IBZVziKGkJU2XYI@vi&v5s<a=(17TTJOvN5A3UgmlX{Xa9r
zF8@U<WaWE|BKFQpX0`?bLM@1+iZzZ}AW_8{Qj6>rB<yufCbALsN(V&5fW6|(IiqgK
zhyx<YL%DSsc|ast*r%?~&^DFa>h09R+Kf`1sGDKYm(7ZD5RMYm&f1JTrGg~DYBM;c
zq7#SPDQ4Ts{_?VU-z!^Dp07M$qR7^a{O~PE6xo`Q_as3g(Ab)3@DvYHiR7{2*38XM
z^4L&vC^p=hdF*jM@op!Goiy>1P4OEBzSEh0AW_>+XZnF8QJQ{NY5Ltx;oY7LPnG@#
z1gGRI1PRO9<5(6*AnkExAxI$Yp;?GCcptvTv_F$~BqP2cM~l?{jF11ty$@eo!hVe{
zeATQ-9mpu+T_iAR7e~#$7u(Jd^~phIy=Jya9n8oVd%%Ru!Av$suP;Cb)M56=*UX19
zhcogGDlmylvuzZ;NP@4c9M9yPXWL&hM@EikeEjpWK71J^teyaF?l0_Efu3X^ch$q}
z+8;EFEqWbQ;t>yjNf2-+XujZslpvwjDVF`M`K#2ajNCDU37JzF?0GONAp`0=#(rzQ
zmikV1J28oy!J$}NE`z>0%i_N??@yi0$iuZT-}Ig(XVZ$yp!2_H|M{JHZ{~X!hrdNa
zIQY|SMQsw+u4VEj+53KH;tv9^ku%{5=_b^`4q1LF?=BD+xDHuqqae|W4q3T>0SRR~
zWU+r)MImJqYGaSAa#LcCm-T&1%i1UZV2<@vgC*7p2*9FxWTndl$qUH8N(TwJ9$Eas
z$RdNoq2VL!^?x+)QL9I|7!<>g$jTi<6Fvt<WaVFSg9OHiECK*pN16~dIx7xRL7?R5
ztXxh&qV~~QxtxIHvW`7BA$y*f<@Wp_2u@vZ2ifz)tXx&_6i5@Za#aBdq={MBb4Tjw
zreW>lY~JRqC-J?PoraIH&%b4U;|YD7HL{}5n^K?85`EqT1i)uGeGU@fvz$H$3Gi9e
z=lr^UQ|j}%_MCUjcKCpn(@Ef>sdKY3yAG11vhwAAkieLm#kaulnwyIMkVpK=p8ALR
zuj+*^0(JAkth{9m86YgoCdK|5BoG#6opg9pB3Ih^|1^;fU+H2{hp)`a<Qas3u`(MJ
z-U}oZ%3@<hL)Db}dyO0_5Gc9E87hz{xyBhPkSMt(>kL&>%1CSyL&YBdm#MYf<f=e<
z$xY5kK@vcloRI<vpiMMV2q6^pj<B{Zn|F*2`j`22$+j$gVS-%S9T*;MXI9yrRTKZF
z7l;$=;g?L4efWRo>owpD2M#G<@61XE4ieZqv+|k&NUS0|v&Fl!Vih3<UqyCh)vvQ+
z6_GrY`!Xw65y`?T@>P~r5ejSXpt0DORUS{Y&9FZIHXmyTLd-BcLVNc)?FGq2WsnaN
z*!!~bwmwL#5c{&3$M`WNk>c!TUpD)wwN*47wsDA6{m0y1e#mVpDR3w&zcz6PH-<x5
zoc7_hKxl_Lj<UOJ%%@u(b@d`sIO-TAWPorqD?jr9lFDT7Xl4ziL|n75b}5_pxm{ah
z#=N0RS-f?|eN!`<Cs)KgX$AsKz2YbZ5|CG%c>)rUS7@Gmr9i7@P+9AgQ@YseJDSgX
zYVcDG8y=usr<}ZV0}|yr<>Z|kkQla3xjJ2P;?4~*XxP-wIeF(sa?nqmbMnrOWC5si
z4tH+wA{pw3K=&N(+|=QBZYFd#>ox}MC_z2iJtyznKp17a=WtT=M_v|G@0=1#yvPbl
zj3n##xnZ$P7qd+{xDEpKXz!d%z%}DN+B=5?9Q{8;Gn!oeSpP2O&9C&!$uD+-i6Z@S
zaz27YHT`n(U=JjWqhBt09}gdh<l#fVTxnY#K1dFQ5B+lYw&ok~W;7EAveK^RUDX3~
z(k8(qZcchjkf?TGPHr1PqS}Eu<j}j4#Wf?p!`Q&CX7?)QLQsl^xe%11VY#qK6QKwo
zSPp3-%A+--6wOfft8Qjx^-vdqQZz$d1WM5i&4tBg2}OV~GzX73mR7Q66grKumv=MA
zdm4>#`<SvaV{$TM2_Y03lf&xGFCaBTRz{nWQ>NQPdziR@grCmXP$p(dPI?B&q1=>Q
zq?pH-AYo!tawXGYViaEzgL{S#bLvMq;Ta?k<)-GOXOJv-hG{wS4CF+cQBr4Sj=uuH
zo_W`ZHU$U$36{9~4-%@(%*jO$Bp_$z98cPe5;}H{FM2P5fYsP;4^mpkc6*T0I(AMj
zdJqPZos&TvzWg>Xm$xb>f;igc&&$d0i5Af$o}Y8RCkhfzL5uH+g2Y6bpMx`b7@-V4
z#71k=j6UWsQVUUr;$C7xW?@d;903VxF-!C{A4@IH$!HEt;^q*|J;!mN-BQ-IulYi1
zDc-S`ICNI9G>51VH&B3s<}M%74=~Gf^7U%)AhJA%lPi4c0wU;wmF!Rb%x0ODIT?V0
z37M5S1fU<od-?Fax1G7X6ZZ0cW~Dd0liE$MAV;X(yQtm!*XfVe1&OAC7VQQJkX_Vn
zdXGCo?f#1WW02V@^;J&ZvjP(`U(pOjA`vp6cC&4R%x6-&oi>3<Tx!!3Tn6pl%N`tT
zK9$<*^i70^i+ibWT5}n+dq0~y*le5HpOY`uM|i{c)3l_JGC~dihSeEj-kbU+C&NxK
zQP(#)gq>KHAOlM~#Qr_R{AKD;PKLo?Lgr8oVKDM3kipzM!oC|~K9V}(%Fs*4M@R<q
z7c!W9$Jq1CtV|t~hD%Jy93#JsGZ~P`fF5U)nAtRY-0dHFeg8Q1&u0|D<12M%b9q;C
z><Tky2hQejhm8gzN&|6@Eq>p8Hg(QvFPJEMj@nCKpN>-hpJz>nnh&SWJ34>~ne(K>
zzqt&ki)`djvnF-X8Ap5<j<__A_i!2X|0UL9nAtjY$>}$I01h&jsNZnK7ImTje`3Rj
znNMVX%E|Z6!Gz3DIUFFLq|l^!SZiOFH=Y%IV4euIFGFa;SH$Mjmab*uePR$8rLJYt
z?SMohx|Ydk9VB$=T80&oGM&w-g+18L;mCCMD3h)lOd#|qldc*h36;rfJs^S5qYP~$
zKiiyI+M7K-0)Do)i$GS;yG$N;LIw!E%j!1gJ64cD=v{_;9sGMW&50ar&mUp-_EZcm
zlM55LC^WcCE=(Xvstm)rf>wy;)L+BcKSr6Ws)xDtQp7l{Oy+1I1BhW|2@$V?1jMj1
z#H-{co0Bz<C==TP5GXmKOnOL=C^@1`dPtBcIik$*kj<%i<I1>)d;kPg8RzOitJFBR
z_h^+GS0+6qgn=}!3?8zBff2nEF0w3dSD7dAF#GH0X4KA%HII5j^U9oE!JRa=3+32?
z0QN#>Y(WBhp)<B1fxVE%mhQ{kNu9og9hqo8SiZz9LW8-aOeS9-gCa}Hkmb0W7r|gI
zXTO<b-qUKi)1W)~O`zpYgFpgdd6|qRK>}fU8KTM0D8#xGq_(z9*<|mTWH$BG;HOys
z@Bro3mdW)GB+9KVlaVn<tbc3EiZ_*s^^X{Q{aaV2ZY&e)pX8z3`ZBrxNfy?>4Q0;y
zcPE*~ma-exKX5Q$V2Sk)Bvjerj4nt(Zn-|XcamZ36r+1T2%znBJA=ZQoo;84o$Pc*
z7s5c=Nu!I~v+7+qPAtnihrzv@2DgY+PBoi`zAiJ$#Js(W#&)k5TNa#VYUO*K-ohgQ
z?{$V2B!KtQ(Ec5rd>0MDH>~wE^PlD4xJ77azbTV{x(yi=`KAnS6wrawT{KS*v!m0@
zXUY$k$^0OgC~~+=ejXYmiX1LO00eiBBA|}3|M|$gx8j&v3k~D3GWi8e$dFJOyf)3L
zyQu3=$T<Z9y?(;!b&x1|!s&I8D0$*~uir(zepdE62mqaRdL1NxC_NHLAf0u39VC#>
zQm_98z1||MT`0?&QrDAsO!WG{XP9k67s`zKqSsqcum31}{mqZj>pwb;!y^Fy==3^B
z0RKq6ehV7cf;#IbHs)jV){39pBGl_Y{eM;09$i&+=5G!+7w+y@@kU-j?+tS9IcFc5
zKv1HRH=uwcRD8^`R&Arp)jC?n)w<S<?dl+iASt+z$+$~^(L^N_p$-V^M$z&pPi+Ag
z6pFD!gcy+qj1t9n=J(rsAFloH{J!(;Z}0Pc-~RSK`x#Xz@F2-otWYy`5@@}DwEFUY
zlix4v&!?fJ{>W05TJ8O`)B#SYRZ{Oua{sX*`Ib|?#I;cwROn!dYjpq!8B1K-fd*tE
z7cJLmR>MjfqA9mvQ}V%r`lh@L4p}tiWzZr`uAQPp8pvpJ(IV-pTnURLnqB7^H+Q@(
zSynIy1SAK=)M!8?Z+2~s21N2^*Vbr2)aYh+=rgXV(In^^y~2(Ek85hQr6Ju)*VbrD
zLXBSKMm4&U@wQcU<}ee`>e^ZiBC>CFZHxwlm{vE6(Ut6EtZ5tDo-C+YlUD$L0M_Ic
zz#o7$t_{ve0ugImIMRD;ZmUv>b#82j`q?YVuEFcvK_$k4s^~x)Rl}>v*3ylUGC+i=
zjjnBH0U>Im3)i6^RMFs@)wnImo2oWPg#i(T*&G!HkW8*U-W?DUHoNF&a7M9;^|xKU
zwk3IYb$ea{71Qq8?bYCcgmyP;W;FpJq20CX1gnU)xTd`WK*}wVE&-8pOQcIc%^T^m
zir%!{)$N^n=5>s%Y|j^gF10=X5p=2Tkw%dag0@qm?L(l^>Qv$*7mI67zMjm9!5_I%
z52l(b?W0OpUWI2!?28l&2#I}>VgVtskBWVhJKw7L$@_D^+?V|Gr4#mNt#5!za&|<h
zdmMmBv_FgOOnQM;HI$h+l65+=@#0NtRbz5Z&OM$Sj=QL`*0;d{0Y|ddw*evGNY?r`
zAbk5sc4$Y|_%;dJw~uDyZ)c5fTN={+HEVs_lHl9Nvh?j|iu4zt#q7^IbG>+OOJ{Or
zvH`#h<W%cA-=DR09uS4<&sui{gz)|>dik8907Rksv!myFW=f3&6bg2J)U#7+)imUM
z&-efU-p%(e=!~YD@7el<w~#*Hi+rG(@ww5{KJau8T%ggrP)de{M(;u?85SD73#DXO
zX!PI$e`lqtNhO~2Vr^<lPxAEOC%tG1bPYYAN!6T5ww5(vKZ~{-h!EA}*-8ZnQB59f
zuXn%J&_>JEch4q|l`YSwq3M@<Npl4Wc#vkfH*C0A%zk4H>(MGT<iq5XrK_-g$L2#x
ztGt1F`51YSW|fEKV{FuFh@MpkKScC-HqsV|Nb+o?EkH6|&{ho<y}B*ai|DgDQWS_#
z)apo4fDo}dQWPLWtfrz`afDI4HkDZG#dhcJ`Y1W7VDMTm+8$a<O>Iz5ew=JA-w=H@
zh>*1*(i9+MZJ?%JVslW7?@Q!7=e1nJIYx3k8V%zG(&aqs=YU9;^Q@l(!liQF(AVHn
z9F-tJ`+2(;-{KiRw=|@C#j}2HN$~Smy(os)Qt?~8Z}rMRf&YPIdS!qp%GOAufDpO$
zf<|izcNzbi3IP4?iWCb7#qNp}3kXTOBE<sgq);q(6xCrK&x^h27Zl&98a_g=?BIum
z3H5`X<Y2Y^)8zNE`#c1Co~l!a<zRpIoVUC<FMk*aY?gzOrc&pV?bG&q@u_-X%)G(}
z9`NFmzePd52T6&<9rm2RLfo$+X|M`OD)m|Nm(&094{7<AdBls?=B3dzM?G9N9Z7q~
zb2=dnW3;w#h-##%zkHTFH0N)gU8|-GNA3Tg7k?lxj`}?A;i}z8+`FFh9>nopJ)Hz$
z$&$F@&5)qi6P~?A&rl%uq-XEzGZe_}^5Ubey&(9M=k!4Ezea+wXPqQ9?Th676F%_b
zHTgpEfA_R!4<^#$SSkL_EcLH$9i6||GZRw)Fne$0%YZ0eZ&U{Wk+hd}Krg|lqkHvv
z&WPf<1!~Ke$(!!K?q?4@{7A{a|Mb4uxKZ}Ll6xB-eDMC+KPkbko7oSS{Iua0CA0sn
zq~TtDEKbQI_dQ%@f->YFR|qmS2vEzl@dgmN_A%b@Ak{kR{k$6cb#h|)`6%3gh$QEu
za07@W=NWGLxoofwFtOBkmgSniPJUC^fX66jy7^My23qhz%u?S5T0n?d>f7c35OsH{
zKYE#OngbF{bMTap=HPLzA**AUYRP>*Kn%nhvV1;l7+QQgWdkPU)8Y>{^%M~KwD{<l
zFgn(;U3lI%O$q=~KJVKq4TzM_`?g5|M9Sy=s7a|~{a@?rCS?i$%Ca_J2L48`&3`L9
zdu#LG%Ff<eA65E=i%_TQQ;9eH*vGkjgK#bA;5U41%zcbQxb<|GgSlT{EFLc?JLp@J
zfeK*<{iI$2OeP3B=<~1-HWBr-&S5p~67fRW;d~mJ`LJ()oWX-Mhkf+(8%;*Ab4PAK
z3aw0ehi{e|LlQ-G_(SzjBOwxX&_a84MuRY=)ag4Pscl7K&&8eopzq=$Xcho$C)CrI
ziknMM_&Cdgt2{x3tP}pwAcAD_$CT=o!u2#{ml`reRF`)7antsJh$LP95Hr3Fh$LM;
z76b8UgnAmTTg@3Frj>U4adZALh)B}y57#I0kq1e-eaxhC0YW_uc1raP5!aWV^5c5N
zH;G7c$}ciY`v8&Tl#iu-Tw7evZun{SlcA!v^t6xr3C*{#-+kIoGe+>!*zZ2=SJl|h
z$IxGoIy4lY-{Z%P*VQ{5cJJ{=jI~KP?B3&#ze+E9uIEVLS#|R;QCE64pM)dsXY)xo
z;(nG%xTn3IqvXA6>o75EY_A_T(~%$|Nv}UlpXo;)B<c0b#);M3zcne9m>0y>=W2(G
z7Y3x}1(+_cf~ZOGvc&wrS)e{0DJtjS$!zKe9n$6p7aI!#LfZTQt5(=w14IR#9~3VL
z%&Za#dUoaU04s>OXV6mMT8{^qB}-xbl_hb)<?*1VR-B_FO`@AE4xAf`yKoans(jF;
zYUgF*?R!8nkpm2{+~UAa<O1ph_JnFc6l`&T{RcD$APlfLsF<z~RUy=`ubw96u`@A=
zF>P6Z#hT{|)FtJEhTu$G@xhNki87;SEemXz0y{EW7TCW`KuB8_;4jl;#(~~tL1w(o
zOwXq*3rfmGKbM<LVlZqAoOQXoGU7iA=io8Qg~6~bp9`x;TRs;C!#3t(bj@Jc7G%~z
z*X+nZtm(+C3F0pXrXyo%NcX$Ic4RCG9htQOJ2IW$;gB-!>ev{>-c|Qy#qrd}pm3z#
z7BQ5u=H<W{qqjw50Z|}eUHJ+Dp|zI-jIAt%5`poyJ@>39QaGPBaP&%LQo+?8V5M@s
zW&(Oe9rVTI^ecfq>lD{;kQ(4;hJ)a^VFT0nsyq-AvabeC8MR6xcwP<4$BQSh@C+E?
zVP}A|-aa3oW>pNT%e{$3@dec&>55JUB-j~@)xVB}kh(J{pF*o>h~n-H#!nVFh5{I>
z-=+Q(ipun^e7QIgu#4p~WrxS@R@pHq`|f<XI1#X$<wC`Q90Z3wYQY#$li3s41A{>X
z&z=CA_HYyincyJ%b0^1$w+b@*14jn{Qo*%9z@g`d%oid89L*gn6}LH=qxmv%GT<o7
z#6Je4LZ$CeQ^$#8nU28G{!Sv8I)ZB^iZ2Zl=D#{sZMpb5)0r<h&+_dI%CAI>a^jOy
ziLM}aR{e0i_<pJ@z+Vi<PbV`FbO+8U_1bt*GY3y5c!3V}bq6ENHgG^_w>!YFKAjT~
z&e<Kfr{J9IYLTD=!TV7luoRTw{U{Jv5(B~e3<RH`=tzlt&IC@jxEq1skt;>-6d+S!
z@D5fx6IB>M&1;t#0-{W30!#<tba1B-7qxsG#2RG*PX|{GdkaUXs=Gx}9k@z7lKMC(
zOlzMXMxQ?i9ht2_b0&yH8c^@PEW}F`_#6$%8J%G)Tc3Jvf*70b3mm=miA3=9G4x=~
zG9b_=s&|5@82w3Jj;2x${`kRzf_@q}S6wku)gK#Jr0%Q`MHvu`W8gJpd`ibyhy_Go
zhwCrMJz0TxTD?Fz#=$`a*8+*L5!M$#2wfm2Ow;~Oh{7(A6;nBHkJr%LLUnkeC`~Vv
zw#tAA5ep@%%xujAe}6({D#b&YC!}+=l}mqrLQbp{O?0hcbofQ;_m$#lcTv79bofOq
z%fG<2rlb-}WbAopep-oo>yL#+>Q_~wI=e(-^9#G`Q}A2zU(!)B&Wq~@0-N6w(sF;R
z62C5}Xp-?s+LO#XNdIpcf9P8jeC*Q_|0Qgpr_gDerL$5ktr1nX;mMrp2s(7oEH5+d
zIv`RtODxQy(*nY2o29=}8mA>eJM9W-TQ5sN?km)&T2WNALc&k=pZgT}LZU@F&#9@k
z;>bOCGCm4AwAdo;##cZTp+#PyqZ;z0kG4oe4^ssGowmp;pF<JYT;e^7kV1y7GCq!%
z6glzhQi(M(wpq=o6Ke1piDP`8VjFfH9d~`ss~1HDH?5bpV+bnpTQBXAP=Ls9y+p^H
zO%)&_(R!IOw-ghiKdm{6s>D$v7U?(T7EKa3(PdL!EI(tDv?KG^>Cf0CG2Uy$vbo(P
zi)Ls8;Vs3Ia;Z5J(o*nQo8*;I-kJ${Z<4kDEY9;_d0dUNRmKj(Z%*N0`TKv7YnXyr
z!_-!3*G&%RCvTIE)OFPbM4^E7<X9mfGT0_DIff;?fOxq>{qA~kXJ&`AtqO?X*+Km;
zVjDJ`^>R<nohrUlkl6#t+UG$fS)#hWM4und`ue7tIZbTHyeaKT;~;|RO^MYS`c&`X
ztfdE3db&86IUpVFa!AQadVnss(?~)!JftqVLF~>Pl8#yVIb2u6LlP73b+GsKsl-tk
zdq;hIgQ!g%l~^=HAHSYHeoQ(Y^zn*0fN(Ql)9VAo*B+DhZUaD+_?X04I^7HqZgxyw
z(P2HE1nuc>N1kpeDD2zP_R}nh;rVU4{hhE7ZUQ<kWADoW1;sPX)Wl0~6kcTFs(Yg-
zyZE>)bah-EL0fgI1`yMoQJeq~Idn2k;1Jb9-0#B~`}H@9Yt!#a=Nhei5W(}V#M~+y
z*by|v2^F6qYSJg7padeR3`(5UA3^(^R6m{}CZ$hGr^3pieNM`2CsKdl(Z3hlW{BE!
zm$b1PMDTP;#BMH&7{MU<p1ORdxH|owbgHZz2FdqiZJppM0~}d}hEM%`rnqi&cb<nq
zvYR{)z=Bg#iPJLnA^iBR3rZTO`euq7Q>P`SMQP8ev}ccW&Ki3HLN2gb=MD(f^vEmB
zuM!}>ut$#hp0+0-?Aaqr&suwupzV1kvZtk>RA(Z4S`zJfhW6}bBZ-|5eKIz`Ff1s3
zw?I96s~Dmx?iLrTaW{$GsXkel(Z(#MF+YJ7O~nI5>45b=Mj;^b`9$KnC~Wxz#LM$)
z)+|w-KA-2IRnL>>a?JzunOZkXWYV8W+lwjIR{cy~bFJmUH-D}^08i#~X}g!W$_FVw
zm*`%)S`MuGg;f5{BAfXlGJUZ&>lZXV7vB`qtY1m>z|G>uQC~&22NjaOqU}wIp#QI7
zQ1#L*F<kXx319}$G=jK?2fSa?-%7MVw1MA9RdkCOmH8%$EjVEYOy4lJWHl3FV!u?k
z+#<YmzjXACF(?Z=ef<(k1Pv4Ve2*%1i}2Hrh8Og}F5jae^e{>bLXU5*dgm4~Iz2aZ
zOmmL|Ou#cY#BME9dUW{asmpJLKIesw-c^RY*x{QOVpo}wgB@y*sXJ~Jqce|%7ru;l
zGdvbftP=OabEl;e3&YrAwenVRPikR^<KF43)99;<LgzPX@NH;c@nlY+0Uf4Z6kcu)
z+y#Wi7KMmoj5>hu(nVqLo6xkcBxo;f3~l>rDJVgsYPn4mUD6oBG0$POaUrh3`E3|m
zm)mul__>q%ZD>7lBt3C?XgyKQz8&2)K;wvb2~o>KI2pTHxH1OKy;^p=7?W;}lnWww
znyFm$cfkX+LUr6O>N6`s8~;HhHDv#tt;9&imzG@R55%m3bW3R45>Ua_62ji~nhCDh
zs@C2iCTChB^^Vk@*c!rd<{C+G#kSl({ZQ~4l6-!2#Wv=LVOr(~Uwl!O-6^(YUJRXy
zIu3ydrWZrpVK)<&nvP90VQiBcbeEV>^b#$_?)!9FYD4I}9IDsHi>uW$cZtLtU}G=5
zg+?|+_5#FrZHVjz2zzY^gO{znNYM7$7}?8GP>zkEZ6z#;QDq~I_d1P-%XIz_#{P()
z^80v6&b?byIH^B`g_rAKg6nTEDh@50U;>Cj0h_iL5aPE|7p%LN(T3a9<{yh0nQfu%
zAcF{=Z6U9VqP{MpxwflO4Pr@pd!9*C$<&~E@U1)4pBluynH^CLxlEgIM~IUpcqiHo
zsl@IuhKBwgaYxZ^+{L54{|4%GZ|J-cs;6qi1l4<wNZb!>Hb~(uO1L+)=T-wEpS>a0
n^sx>ALZ^E}?+vR{60}bDMLM+<e8Ij*r<O#W?o&UyS5*E#bKD|%

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index c9028200..a3046967 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -9983,7 +9983,10 @@ type GetAccountStatusResponse struct {
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// The account handle minted at registration (see RegisterResponse.billing_ref).
-	// Empty when the calling agent has no account yet.
+	// Set on every OK answer: a calling agent with no account is answered
+	// NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads
+	// an empty handle, which an Exchange built before that rule may send, as the
+	// same answer.
 	BillingRef string `protobuf:"bytes,2,opt,name=billing_ref,json=billingRef,proto3" json:"billing_ref,omitempty"`
 	// Whether the account is currently active.
 	Active bool `protobuf:"varint,3,opt,name=active,proto3" json:"active,omitempty"`
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 43121b10..5b96898b 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -156,7 +156,10 @@ type ExchangeServiceClient interface {
 	Register(context.Context, *connect.Request[v1.RegisterRequest]) (*connect.Response[v1.RegisterResponse], error)
 	// Read-only check of whether the calling agent's account is active.
 	// Identity comes from the request signature, so the request carries no
-	// identifying field.
+	// identifying field. An agent the Exchange knows, its request signature
+	// verified, but that holds no account at this Exchange is answered with the
+	// Connect code NOT_FOUND. An agent whose signature does not verify is
+	// UNAUTHENTICATED, as on every RPC.
 	GetAccountStatus(context.Context, *connect.Request[v1.GetAccountStatusRequest]) (*connect.Response[v1.GetAccountStatusResponse], error)
 }
 
@@ -328,7 +331,10 @@ type ExchangeServiceHandler interface {
 	Register(context.Context, *connect.Request[v1.RegisterRequest]) (*connect.Response[v1.RegisterResponse], error)
 	// Read-only check of whether the calling agent's account is active.
 	// Identity comes from the request signature, so the request carries no
-	// identifying field.
+	// identifying field. An agent the Exchange knows, its request signature
+	// verified, but that holds no account at this Exchange is answered with the
+	// Connect code NOT_FOUND. An agent whose signature does not verify is
+	// UNAUTHENTICATED, as on every RPC.
 	GetAccountStatus(context.Context, *connect.Request[v1.GetAccountStatusRequest]) (*connect.Response[v1.GetAccountStatusResponse], error)
 }
 
diff --git a/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json
index 55e25ac1..a1c8e109 100644
--- a/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json
+++ b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.json
@@ -43,7 +43,7 @@
     },
     "billing_ref": {
       "default": "",
-      "description": "The account handle minted at registration (see RegisterResponse.billing_ref).\n Empty when the calling agent has no account yet.",
+      "description": "The account handle minted at registration (see RegisterResponse.billing_ref).\n Set on every OK answer: a calling agent with no account is answered\n NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads\n an empty handle, which an Exchange built before that rule may send, as the\n same answer.",
       "type": "string"
     },
     "ext": {
diff --git a/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json
index 2d7cfb35..c9cfae93 100644
--- a/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json
@@ -45,7 +45,7 @@
     },
     "billing_ref": {
       "default": "",
-      "description": "The account handle minted at registration (see RegisterResponse.billing_ref).\n Empty when the calling agent has no account yet.",
+      "description": "The account handle minted at registration (see RegisterResponse.billing_ref).\n Set on every OK answer: a calling agent with no account is answered\n NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads\n an empty handle, which an Exchange built before that rule may send, as the\n same answer.",
       "type": "string"
     },
     "ext": {
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 43c5315c..fe886ab5 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -453,7 +453,7 @@ class GetAccountStatusResponse(WireModel):
     )
     billing_ref: str | None = Field(
         '',
-        description='The account handle minted at registration (see RegisterResponse.billing_ref).\n Empty when the calling agent has no account yet.',
+        description='The account handle minted at registration (see RegisterResponse.billing_ref).\n Set on every OK answer: a calling agent with no account is answered\n NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads\n an empty handle, which an Exchange built before that rule may send, as the\n same answer.',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 6711950b..f1ec0e51 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -82,7 +82,7 @@ export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.st
 
 export const GetAccountStatusRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Accounts are per-Exchange, so \"which Exchange am I asking\n about\" is not derivable from anything else in this message."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusRequest — Agent asks whether its account is active."));
 
-export const GetAccountStatusResponseSchema = wire(z.object({ "active": z.boolean().describe("Whether the account is currently active.").default(false), "balances": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("The amount the account can spend now, one entry per currency. Holds for\n pending transactions are already subtracted. Each amount is an exact decimal\n string and is never negative. The list holds at most one entry per currency,\n and its order has no meaning. unit_cost is never set.\n\nThe value is a snapshot. It does not guarantee that the next execute passes\n the balance check: another transaction can spend the funds first.\n\n An empty list means the Exchange does not report balances. It does NOT mean\n a zero balance. The same holds for a currency missing from a non-empty list:\n that balance is not reported, it is not zero. An Exchange that reports a\n zero balance sends the entry with amount \"0\". Balances are only allowed when\n billing_ref is set.").optional(), "billing_ref": z.string().describe("The account handle minted at registration (see RegisterResponse.billing_ref).\n Empty when the calling agent has no account yet.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("The terms document this account ACCEPTED: the \"method:hexdigest\" value the\n agent echoed in RegisterRequest.terms_digest, which the Exchange recorded\n with the account. This is the read side of that record. Without it the\n protocol required an Exchange to store the acceptance and named the question\n the record exists to answer — \"which terms did this operator accept\" — while\n giving no way to ask it, so the only party who could check what it had agreed\n to was the party holding the database.\n\nAn Exchange that holds a recorded digest for this account MUST return it\n here. Absence has exactly ONE meaning: no acceptance is recorded. Two\n situations produce it — the Exchange publishes no terms_digest, so nothing\n was ever accepted (and per RegisterRequest.terms_digest it MUST NOT record a\n presented value in that case), or the account was created before the operator\n began publishing one. It does NOT mean \"this account has no terms\", and an\n Exchange MUST NOT withhold a digest it holds: absence is already spoken for,\n so withholding would make the field state something untrue.\n\n The value is what was ACCEPTED, not what is published now. The two differ as\n soon as the operator revises its terms, and that difference is the point:\n comparing this against a freshly fetched WellKnownManifest.terms_digest is how\n an agent discovers that the terms moved under an account it already holds. A\n repeat Register will not tell it — a repeat is answered from the stored record\n and runs no gate at all.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusResponse — Exchange reports the account's current state."));
+export const GetAccountStatusResponseSchema = wire(z.object({ "active": z.boolean().describe("Whether the account is currently active.").default(false), "balances": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("The amount the account can spend now, one entry per currency. Holds for\n pending transactions are already subtracted. Each amount is an exact decimal\n string and is never negative. The list holds at most one entry per currency,\n and its order has no meaning. unit_cost is never set.\n\nThe value is a snapshot. It does not guarantee that the next execute passes\n the balance check: another transaction can spend the funds first.\n\n An empty list means the Exchange does not report balances. It does NOT mean\n a zero balance. The same holds for a currency missing from a non-empty list:\n that balance is not reported, it is not zero. An Exchange that reports a\n zero balance sends the entry with amount \"0\". Balances are only allowed when\n billing_ref is set.").optional(), "billing_ref": z.string().describe("The account handle minted at registration (see RegisterResponse.billing_ref).\n Set on every OK answer: a calling agent with no account is answered\n NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads\n an empty handle, which an Exchange built before that rule may send, as the\n same answer.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("The terms document this account ACCEPTED: the \"method:hexdigest\" value the\n agent echoed in RegisterRequest.terms_digest, which the Exchange recorded\n with the account. This is the read side of that record. Without it the\n protocol required an Exchange to store the acceptance and named the question\n the record exists to answer — \"which terms did this operator accept\" — while\n giving no way to ask it, so the only party who could check what it had agreed\n to was the party holding the database.\n\nAn Exchange that holds a recorded digest for this account MUST return it\n here. Absence has exactly ONE meaning: no acceptance is recorded. Two\n situations produce it — the Exchange publishes no terms_digest, so nothing\n was ever accepted (and per RegisterRequest.terms_digest it MUST NOT record a\n presented value in that case), or the account was created before the operator\n began publishing one. It does NOT mean \"this account has no terms\", and an\n Exchange MUST NOT withhold a digest it holds: absence is already spoken for,\n so withholding would make the field state something untrue.\n\n The value is what was ACCEPTED, not what is published now. The two differ as\n soon as the operator revises its terms, and that difference is the point:\n comparing this against a freshly fetched WellKnownManifest.terms_digest is how\n an agent discovers that the terms moved under an account it already holds. A\n repeat Register will not tell it — a repeat is answered from the stored record\n and runs no gate at all.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusResponse — Exchange reports the account's current state."));
 
 export const IngestionSourceSchema = wire(z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 417bab60..0bc51290 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,21 @@
 
 ## Unreleased
 
+**`GetAccountStatus` answers an agent with no account `NOT_FOUND` (comments only).**
+The RPC comment now states the answer for an agent the Exchange knows, its request
+signature verified, but that holds no account at that Exchange: the Connect code
+`NOT_FOUND`. `GetAccountStatusResponse.billing_ref` is therefore set on every OK answer,
+and a receiver reads an empty handle, which an Exchange built before the rule may send,
+as the same answer. The reference and AI-agent pages and the SDK doc comments of
+`GetAccountStatus` / `get_account_status` / `getAccountStatus` say the same; the SDKs
+return the refusal as their call error with the code `not_found`.
+
+**The Identity Service's MCP tools pass the typed reason through (docs only).** The
+Identity Service and AI-agent pages state that a tool error carries the FORA
+`ErrorDetail` the service received from the Broker or an Exchange, unchanged, in its
+structured content, so an agent on MCP branches on the same typed reason an SDK client
+reads.
+
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
 follow up to five redirects (comments and docs only).** Each signature is verified against its own signer's
 key directory and the revocation list that directory names, and against no other party's.
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 180fa898..c454ce14 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -447,7 +447,10 @@ service ExchangeService {
 
   // Read-only check of whether the calling agent's account is active.
   // Identity comes from the request signature, so the request carries no
-  // identifying field.
+  // identifying field. An agent the Exchange knows, its request signature
+  // verified, but that holds no account at this Exchange is answered with the
+  // Connect code NOT_FOUND. An agent whose signature does not verify is
+  // UNAUTHENTICATED, as on every RPC.
   rpc GetAccountStatus(GetAccountStatusRequest) returns (GetAccountStatusResponse);
 }
 
@@ -4977,7 +4980,10 @@ message GetAccountStatusResponse {
   string ver = 1;
 
   // The account handle minted at registration (see RegisterResponse.billing_ref).
-  // Empty when the calling agent has no account yet.
+  // Set on every OK answer: a calling agent with no account is answered
+  // NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads
+  // an empty handle, which an Exchange built before that rule may send, as the
+  // same answer.
   string billing_ref = 2;
 
   // Whether the account is currently active.
diff --git a/sdk/go/connect/account.go b/sdk/go/connect/account.go
index d0d4b6fc..bbece5c6 100644
--- a/sdk/go/connect/account.go
+++ b/sdk/go/connect/account.go
@@ -124,8 +124,10 @@ func (c *Client) Register(
 // which account is being asked about. Accounts are per-Exchange, and that is not
 // derivable from anything else in the message.
 //
-// An answer carrying an empty account handle is a NORMAL answer: it means this
-// agent holds no account at that Exchange yet. The response also reports the terms
+// An agent with no account at that Exchange yet is answered with the Connect code
+// not_found, which this method returns as a *CallError whose Code is
+// connect.CodeNotFound. An Exchange built before that rule answers OK with an empty
+// account handle instead, which means the same. The response also reports the terms
 // revision the account accepted, which is what was agreed rather than what is
 // published now; comparing the two is how an agent discovers that an operator's
 // terms moved under an account it already holds.
diff --git a/sdk/python/fora_sdk/client/__init__.py b/sdk/python/fora_sdk/client/__init__.py
index 63a00040..c778fb02 100644
--- a/sdk/python/fora_sdk/client/__init__.py
+++ b/sdk/python/fora_sdk/client/__init__.py
@@ -301,7 +301,10 @@ async def get_account_status(
     ) -> GetAccountStatusResponse:
         """Read whether this agent's account at the named Exchange is active.
 
-        An empty ``billing_ref`` in the answer is a NORMAL answer: no account there yet.
+        An agent with no account there yet is answered with the Connect code
+        ``not_found``, raised as a ``CallError`` whose ``code`` is ``"not_found"``. An
+        Exchange built before that rule answers with an empty ``billing_ref`` instead,
+        which means the same.
         """
         plan = await asyncio.to_thread(
             _verbs.plan_get_account_status, self._config, request
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index b039a45c..177d92d6 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -139,8 +139,9 @@ export interface Client {
 	 * CallOptions: the message carries no idempotency key, because registering again
 	 * returns the same account handle. */
 	register(request: Request<RegisterRequest>): Promise<RegisterResponse>;
-	/** Read whether this agent's account at the named Exchange is active. An empty
-	 * `billing_ref` is a NORMAL answer — no account there yet. */
+	/** Read whether this agent's account at the named Exchange is active. No account
+	 * there yet is answered `not_found` (a `ForaCallError` with that `code`); an older
+	 * Exchange answers with an empty `billing_ref` instead, which means the same. */
 	getAccountStatus(request: Request<GetAccountStatusRequest>): Promise<GetAccountStatusResponse>;
 	/** Fetch what a delivery URL names, presenting the agent's proof of possession. The URL
 	 * is taken as given; the delivery edge verifies it. */
@@ -916,8 +917,9 @@ async function register(
  *
  * The request carries no field identifying the caller — the Exchange resolves the account
  * from the verified signature — so `exchange` is the only thing that says which account is
- * being asked about. An empty `billing_ref` in the answer is a NORMAL answer: no account
- * there yet.
+ * being asked about. An agent with no account there yet is answered with the Connect code
+ * `not_found`, thrown as a `ForaCallError` with that `code`; an Exchange built before that
+ * rule answers with an empty `billing_ref` instead, which means the same.
  *
  * Safe to call in a loop. The request has no varying field, but every request signature
  * carries a fresh RFC 9421 nonce, so two calls to the same Exchange inside one wall-clock
@@ -1105,8 +1107,9 @@ async function fetchVerb(r: Resolved, signedURL: string): Promise<Content> {
  * revision it recorded against it. */
 export type RegisterResponse = z.infer<typeof RegisterResponseSchema>;
 
-/** The answer to an account-status read. An empty account handle is a NORMAL answer: it
- * means this agent holds no account at that Exchange yet. */
+/** The answer to an account-status read. An agent with no account at that Exchange is
+ * answered `not_found` instead; an empty account handle from an older Exchange means the
+ * same. */
 export type GetAccountStatusResponse = z.infer<typeof GetAccountStatusResponseSchema>;
 
 // ---------------------------------------------------------------------------
diff --git a/website/src/content/docs/components/identity/overview.mdx b/website/src/content/docs/components/identity/overview.mdx
index 3f862c30..1e927c06 100644
--- a/website/src/content/docs/components/identity/overview.mdx
+++ b/website/src/content/docs/components/identity/overview.mdx
@@ -112,6 +112,8 @@ Each tool is one protocol verb. What differs between them is where the call goes
 
 Registration must reach the Exchange directly, because the Exchange derives the binding between an account and an identity from the agent's **own** inbound signature. `BrokerService.ExecuteTransaction` re-packages a purchase into requests signed with the Broker's key and carries agent identity in detached body acceptances — right for multi-Exchange purchases, and it would defeat registration's identity model.
 
+**Tool errors carry the typed reason.** When the Broker or an Exchange refuses the call a tool made, the tool answers with an error result whose structured content carries the FORA `ErrorDetail` the service received, unchanged. The agent reads the same typed reason an SDK client would, for example `request_auth_failure`, `registration_failure` or `transaction_denial`, and branches on it rather than on the message text.
+
 `fora_report` takes no endpoint argument. The destination is read off the report's own exchange field, which the offer signed, and resolved from that Exchange's manifest. There is no parameter a misconfigured origin could arrive through.
 
 A few input details worth knowing:
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 2cc71caa..687023b9 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -342,6 +342,8 @@ The endpoint answers an unauthenticated request with `401` and the OAuth metadat
 | `fora_execute` | license offers and get the content back |
 | `fora_report` | file the usage report an offer's terms require |
 
+When the Broker or an Exchange refuses a call, the tool's error result carries the FORA `ErrorDetail` the service received, unchanged, in its structured content, so you branch on the same typed reason an SDK client reads.
+
 Custody is the trade. The service holds your private key and, by default, fetches the licensed bytes for you — which is what makes the delivery URL's key binding satisfiable at all when you hold no key. An agent that holds its own key and publishes its own directory is the same participant to an Exchange and avoids that trade entirely; the rest of this page is that path.
 
 See [Identity Service](/components/identity/overview/) for the custody model, the key lifecycle, and what the service costs you in trust.
@@ -366,7 +368,7 @@ The core protocol is domain-agnostic. Extension profiles add domain-specific met
 ## Next Steps
 
 1. Register your agent with a participating Exchange — `Register` in Go, `register` in TypeScript and Python. The Exchange creates your account and bills it based on your verified request signature, never on anything you send. Address the call by naming the Exchange's bare domain on the request: the SDK resolves the endpoint from that Exchange's own manifest, reads the terms revision it publishes from a freshly fetched copy, and echoes it so the signature records what you accepted.
-2. Check the account with `GetAccountStatus` / `getAccountStatus` before you transact. An empty account handle means you hold no account there yet; an account that exists but is not active is waiting for the operator to switch it on, and the remedy is to wait or contact them rather than to register again. An account is per-Exchange, so a client can hold several — the same client registers at each.
+2. Check the account with `GetAccountStatus` / `getAccountStatus` before you transact. If you hold no account there yet, the Exchange answers with the Connect code `not_found` (an empty account handle from an older Exchange means the same); an account that exists but is not active is waiting for the operator to switch it on, and the remedy is to wait or contact them rather than to register again. An account is per-Exchange, so a client can hold several — the same client registers at each.
 3. Install the SDK, declare your `supported_profiles`, and configure your budget
 4. Replace your per-provider integrations with `client.Fetch()`
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 96cec2e0..7a54dc17 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,21 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**`GetAccountStatus` answers an agent with no account `NOT_FOUND` (comments only).**
+The RPC comment now states the answer for an agent the Exchange knows, its request
+signature verified, but that holds no account at that Exchange: the Connect code
+`NOT_FOUND`. `GetAccountStatusResponse.billing_ref` is therefore set on every OK answer,
+and a receiver reads an empty handle, which an Exchange built before the rule may send,
+as the same answer. The reference and AI-agent pages and the SDK doc comments of
+`GetAccountStatus` / `get_account_status` / `getAccountStatus` say the same; the SDKs
+return the refusal as their call error with the code `not_found`.
+
+**The Identity Service's MCP tools pass the typed reason through (docs only).** The
+Identity Service and AI-agent pages state that a tool error carries the FORA
+`ErrorDetail` the service received from the Broker or an Exchange, unchanged, in its
+structured content, so an agent on MCP branches on the same typed reason an SDK client
+reads.
+
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
 follow up to five redirects (comments and docs only).** Each signature is verified against its own signer's
 key directory and the revocation list that directory names, and against no other party's.
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index ff2470b9..a2972cd6 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -332,7 +332,7 @@ Read-only check of whether the calling agent's account is active. Deliberately c
 
 ### GetAccountStatusResponse
 
-The account's current state. `billing_ref` is empty when the calling agent has no account yet, and `balances` lists what the account can spend now, one entry per currency. An empty `balances` list means the Exchange does not report balances, not a zero balance.
+The account's current state. An agent the Exchange knows, its request signature verified, but that holds no account at this Exchange is answered with the Connect code `not_found` instead, so an OK answer always carries `billing_ref`; a receiver reads an empty `billing_ref` from an Exchange built before that rule as the same answer. `balances` `balances` lists what the account can spend now, one entry per currency. An empty `balances` list means the Exchange does not report balances, not a zero balance.
 
 ::proto-message{name=GetAccountStatusResponse}
 

From 8f4ffe6433b39015805f97ca7d8fb15be601c133 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 13:47:26 -0400
Subject: [PATCH 111/164] State that discovery has no side effects, and the
 report and relayed-acceptance refusals

Five rules the contract implied but did not state, each now said once
where its RPC or field is specified:

- DiscoverResources creates no transaction, no billing authorization and
  no reporting obligation; committing to an offer happens only on the
  execute path.
- Discovery is safe to retry. A transport failure (an unreachable
  Exchange, a timeout) is the client's concern; the protocol defines no
  transient-failure code for it.
- A usage report whose billing_id is not the transaction's is refused
  invalid_argument with USAGE_REPORT_REJECTION_REASON_MALFORMED.
- A usage report for a transaction recorded under a different agent is
  answered exactly as for an unknown transaction, not_found with
  USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND, so the answer does
  not reveal that the transaction exists.
- On a relayed purchase, an item whose AgentAcceptance does not verify
  under the keys requester.domain publishes is denied in the body with
  DENIAL_REASON_SIGNATURE_INVALID, as for the AgentRequestAcceptance; the
  whole request is not refused.

The transaction-flow and Exchange request-flow pages and both changelogs
follow. The Broker purchase section also names the covered Signature-Agent
member rather than a header. No message shape changes. The generated
code, the descriptor, the SDK types and the JSON Schemas are regenerated.
---
 gen/descriptor.binpb                          | Bin 680858 -> 681923 bytes
 gen/go/fora/v1/fora.pb.go                     |  21 ++++++++++----
 gen/go/fora/v1/forav1connect/fora.connect.go  |  12 ++++++++
 .../fora.v1.UsageReport.schema.json           |   2 +-
 .../fora.v1.UsageReport.schema.strict.json    |   2 +-
 gen/ts/wire/schemas.ts                        |   2 +-
 proto/CHANGELOG.md                            |  22 ++++++++++++++
 proto/fora/v1/fora.proto                      |  27 ++++++++++++++----
 .../components/exchange/request-flows.mdx     |  15 ++++++----
 .../docs/protocol/transaction-flow.mdx        |   8 ++++--
 .../src/content/docs/reference/changelog.mdx  |  22 ++++++++++++++
 11 files changed, 109 insertions(+), 24 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 211e93a5fd007c1c3d3048a433b1a7e3764c35fd..7624544e0627a872fc4371821e3740c0dac458fd 100644
GIT binary patch
delta 47243
zcmZ5pd3+Q__RsY6boca3GDl{TIg-r5AqYtXIXn^sIoA7LU3FJPjLNQp3wZ5scLR!m
zAoo$+;Sew!f`B%Hg2*BFAqWU^C<+P+2#5*@zwfK6rdj{VC-3#EZ@sE|_3G8D>Yj0*
zHe9)-VXr=}K1v^VA9ayu!2QbmZ(DEP@2Q+*E<YAB^{^+NbI{uUlgF#MHd_0B@l^jg
zbii$@T8@$vRtLM4n-g2z>>qb(4_2q!b?MQ$+ly7*Ur9gHsYkkNw{(v#PgbR?o_eaP
zbI%@S>05iIJ9n?@)U%2|>)E|i*B+fZ_w3TGYh#jqqRX?-cIo=GneOyL&u6-I@A9us
z^eEk_>yz}fd)4#Zy7$EMbhjs-?ea8#b|W69J3U?16}a7=d#+KJo;}h%yAiV+s_dTb
z*7ey}O#Dsvd<I&)T-Eu7o>l4RJN0}f-GFs!ZA7kAxC@FtQ`Nodsczk?(mgsoRRtsy
zwf5}(N?E#1nk!2hq@U{4<=GdyS2a%ec%kz%X*3hnz0eiS>ikTnC!VcJw|^P`bbY!i
z-K~4NQ@UrD=c>BB(6e#6OAnK)(fQdf(D$ky(70=L=c?{qZ{Y0byLao^t#h|$(@$1C
z)urnd9YoTlvQCsicS6H-m!4&&nQMAz5L`40TA@uUM8@jbq?^cVTATYke8?a?!L8h$
z*z8HS?Pe)=X*-qD32rSW#a$>p!5wd8lPEpG-QrfW6EBR1lbPpUt#jFAw-%Bz3US@x
zVw*&f$?gU>nu9f72IM?z^u1cpT{h3D$Bjbs-0`bqAva06o3=4GxOgEotS(|Z9?&+G
zEplrqDWsyzB6s?Fn?#vK?sgr`L86Q&tS)9-{;UltTkMqapv+=-x|J;BL7BzwTRWM<
zL~m$eb*1&@gW3qCY^7VvlTsQAt#k)UY!Zc5x*J|^4i{Fhht&<%oeygxUF93xT7i_(
zQD}p^u*@b=XoLIud(B$aRMecXw#%LKjTL-UYoG*nxs77;DN|MX4BEr~^f&F9CVSip
z?@?l6koLI49GOT!?QzEw=2SEkv@5LbcPoe3!M|x!s_`E;1mdFy_Pc#HiVG<F-C;hm
z^b{!j-N_;|V0wr&2&MRt+iiwSFK6`ghS7!tZuJ^7-}KomH4n^#ZuN%$WdiLhw|Zmt
zf4S(-uiffh=4lri4Ly&!a~82|N9|PTnA?b&lc@nNavR6p>_j(hJp1@@O>27Gtr*m8
z^ax5HcYFOdiE56!13~i@UJwsYxs^oXA8fE<#8|MC_E;$xJ}FHtKIQgDZ4!k~xnps&
zF)xf}{LIF8(#ksiZ1<T<QP5{U+kFNS2tV6B4-yDJQ_l<K6obg*ZM?_u)DS)Pv%Bb4
zbFRWGL4osDgD13dSLJ!97B~9kyxW(SIBwK(-krJ5CaIA7#tQR@mt(;Ahgu^$Yu~Gt
zLsdDtE=2{#P}NsQ7DDfWtlQWofiYAqzs8&m!$v=%SvA&@XSBIW`x*zsLu^%A2!w!9
zqlW8B44ND@>QxQQ@uDqSSevdYvs5)PKw*;xc&D>Zml_4^>1VY^s`0=cG7TuxRj)8R
zm!bh>x*93qb_No5HeD^8rMk_qX+Sd#y_Of&W~ged>XALkc_=p%jf9xj7SqC>w^ePq
z%S`b`VdBkIm24uEW)Hq%M4P)59i0M}uyK%3Wv&`8k`2-UIaf_(%!|VAFnkMDHu)9f
zw{|YYKsPURy2e1)EOffY0MbG=%v}JqF@UsC&D1f+C@^d#tSwb@zOp{;suj9|OI0H#
zEL$PVUdE1h)223AW_J*nz*?qCn+6H2Wh!j?bJB`TPFtxeYuSqDwH?*?PxLGJD7Mn>
zSCA;SQjJ7;zk)=+u2c)w%6=sV@7GnT`l;+!$wRr-cE3s%`gINO*GjGdc`j8cN|dKr
zq`P)~B?#eD6h%P?Z%}<f-lHI)(*`xf*BYo!^J9aWNSbeorhweS26Wd3S8j12$oRLY
zJ~1m%1Q1))f~-U&&%Z^jSKmBKMyDtkm0i}KduT7aDt9>;Wc<5SpBQHd0b`dM7jpq5
zFm|c+ui|FHr}Q3`-TR7>Xbu7;_t+K!5+(Q876K9__guCR-r9r0LfV6XE(aYQG+4+%
z+d}XZNC#~T0STmoWFd>m^|`~^VKwJ<4`VNC?*|U6M%er_n&&11`HubdCGDZo@9dEV
z6HwpT1_BaL-;sgb%ZuRQF?R4J?f%MRwlZ$Tg=QVI#|0z_+2aBd2*+q#`l%cO1ANAM
z{$<UpRGx7#Xl&1@KH=Tmd~DCCNxt+$QySYdYFW8CLSTTrXubb0EvmG-=wQ&`UQ~U2
z@kb#V+>2_7@Jb-55P79JG`MaW+&&)5`yZ{;)vAw28X4FC>EpSq2#szZPm-^sR0tq_
zJWZOK1JSb{tfX&vaz?VA|J4Qr-|%=M)Uh7EkPh&$ZEcNv*kje2Rx-e&@X1S$(EI_O
zOxApWO9K5(_G-2EVCqeek|Z;P48=WfdP-8}Td-u%AcwGDs<jy<Lp(}c3URKdsMx%f
z%RsMTY-um;_L5;9B_m}huo>p5ThDx&%b>+0Sl!-Qm-GlnAqr$hkV4DcXc6ZBL{HAA
z*4*CON3QThkEf6~i7%6rJjzw<s}1^Hb;Z&Mnok@LNPtZ8VB*|_id-}?C$r<PX>C%I
zJqi#0hzXg=o(2thhy)tsG<H`XZAfaGN2$*>29vm+hF6=XF-Q<XvudpieY6)`CAA)f
zn*(tnRqKH{JjR94uGwrzU+wXd*&c<D6lADfvuUJYxF9iK=Ca&=+Wo1yj!G1e%_WtF
zV4;E#hJLYC-A@~)v|8*@8cLlg0$c29TxyfhX|boQjhSa^REErKv8TMXxr;^%em|^!
z#O@lPeUbXeqco9)C?NaD)2zAK7X}O=c>gt4hk=@*q}MpDHz2i!TEBwkts2%gdUAHN
zu7k9X0~<XES<t(1OPIEsS><4@P3dNjqEiLLgch4UMy^dl$<3Z%$h@8x!NYBA_F(PC
z(rr!=ny1@5hFB|AK2NuK;M1#k5va0*<qy%GF5Mw5Q>+i_4o{I-q~Rb@%MK3~>3et)
zP`lX7A=-VdcG>euRcKP~^2ksDBr4tIse855lP2XZPidLCQbUV9VeNZQ&hJ*sq1w&v
z!1o?Rrq=@5Lrp%$`j60>mmc%TH3>{W9rJjF9|j4iV;;nm&3F+!JkE}e&{~upx0~$Y
zuIaeP$mg|#M3Lj3f<m(?FM=lj#O@raH7oteDMH5llLtPN`q{&q{F5hIU|z$E0N@OJ
zXQbA&^o&!4+IYreh=s|+9nTpL9H3AP*7^&}9i_FX{Kf7i5BEC1czmK`K?30yPd(vv
zK%$yo$d=!srOiXee1Y{ErOj`3!GWN7>VikcQ;-3~1&@r|K?34}2hrmsOmp}+t)G@N
z)#^H0o9L?7PvdsuRy94W4c3(5nrcpQn>y%zUN@W^@vLjcXp>#H4$;&)W)Q)Xc!n+;
zs;Pguf`fX7X=*ccm%yvhlxe`5<+1VLVu)wO$7!`n^U0dp&?!wmVv43#ArzA}V2C_Z
zHFcWH98PXqBU7lgewm;}T&1;|v;}a{+FDJ<eITJltp;0e&&%N99CqC#?N60+H0kIy
zzC)R#$^HUKLRwf18b~0_(J*LBO%4IYR$3oU(keZrD>cQ-twH0<6f9RvA&@AvlBzA|
zWk9WA_21H(l&;Yf5w&Q10<6(OBK!tPLRy`=W*c4v#<7m|c}r_svCh$ymZWu>PsD#3
zH;#2$s)5vjjANbFs4<@^8rjB1=AN!KuiWS$P~fpqlja2(v~{CauUsOKZEVz<UTfBp
zd1>SZx3L$dYqMK#b09S0YCgV3kqjWVY0?vb1jIHCo?tF*8#FjU?U1H?XFWbco1<3a
zUlB;+0m>b628yEML)2rm5yVpjl83Z{?=%sh6N3km-)QO)O$6wYhjQOSB_5zl76Qq`
z8U^TImT(>5W9R5fVPcataJKevpbUhq1x3_zbg!7yP!4EwbWG~cL<e}o>boqwRNGPZ
zu2aT~GVkhM5zoT}Q0847@jTz4pr693Wko*Jid~hKe%Z)O42Pv(HZl_!mLBHoGn#7x
z!_w>4H)o1^ePQ)O*7YN;w(>&<!Uu>C9S9#FKGegu{rCX!p<bt+xzyl|_J`H2)&tA5
zO0{yUgW<>EZPhPZkRKRZ^^}ONG{p~$t$Nut=5mUzG$l8z?z1+3qP0;f_c<83z}Tl>
zwxL{L?9(sXP%bd`=}nuNr$kfoFs|&5)!LcLLk>h9AP(tr>!~SufH<UQu9aq(2Z%#@
zi|fpbNY+4&Kv+F%{b!BV%ia2{gAoA6S>0z3T>uzo^?chb1Hd?|m!!=%aydpYtc^01
zF;?Yzt-n@{f5lz`(-APE44+7AfCS7aqtG7QAYeur7+hhNL73$zBRj?r`3Z=_EW;==
z+EB~+wo$U+B^a@2i>N7~usYu0Tg3J+_pIvLgZ=dtBhVat)QtyX;Q|Su@rK+ef<)cp
zscybeMDPKZXo!s>MIuC9ZbcZjF~zuSUZm0#Lv9oy45TRrwgIEP@cEdM9~wDtS*t(O
zMybIM4Qv!g(pc%_Qdh9Q@6twBtgxZM1oR3U8YG}s7-63Nq9TA^VPxx=w{QeJT*WGO
zYqwRdau6s5w8}vs2fNA$i>;T=9qcLt36VZR2{dgjTe(~7Td~%GAaAzTfuOZ`tq~T3
zt#fy~)<B&6C$0ok+Q44_Lc6tcgM;7(!UhL{mgWtHTorZheK#0b6{jHpM6=MldoAA{
zZMssi*TFzsqV9DtXmQ?a_cF?$-n|9_=;t{EWDl?(zSO!`9&iw7Z9d>2kpDekh%6;)
zCI5TCNN3FcI){LH{A7*arwwpF`IDhU`1H`Z$NkBO3bzjug?=*N_9-p_32*n4Q7Tqq
zBKvuR#3_3SF4E)z;2`%0-UEL&2a5J0R_*Pz-uOy;Q)%1VE6qw*bg0|gE6oZd)a~uP
zJoe<XdwVhVOOb*EGHM>^Rq7|^xY?X_dWrSoH`-WNC0JsvK>!UJ=#`spkboQLEf7u+
zB;W>mu}Rq=;NW~mS$7=PHn}QCIT&83G|Ewlobf2Hv~-<2<56B%`fOoLaK_`<gWqX$
zE5|ty<cr5S5af%;dBc2rf>w|(9_MXvHJ`h>0#`iIEB5Um(13|vIblJf<V3HWupm)#
zqSv0Vx&jwG%_}A>2$<9~M+ZN2nC9p}j(D2W406QNs2Q*4VZy@ctn%iZvNj&oR6V%L
zYb4Dj6ayJFVb@y+f6^*kW$V3iQ3DrX>%B4t0tvA7UM#H$<){#zerDZvTASu7`^+gs
zv+^^qH;<bUgiz=+Zzya|q>eObJGPT0f7WWsc6!DBl$a>9(_6&z<wT;)PVd!?MB>FD
zau56NXKirV9;Y6fcze7u?*thV@*=G;icH?1iTAzr)>)0Yn|*J0G`J}Ay*DnL4oDRG
zo(ylTXc7AICodNG58UjhFZGz!@0>QrRSuR|<_#X_{N$C(JV=!P$%|!vQX#gwNSw_!
zbLLr3T+k-^0<&Qql$%9_kKUcb@(jH!HOEx=ia<>C#2gcK(-44$W^=7a4ZXsZnrq6P
zJGhXVOH!+#A*4XQW4-Uy*SON}m<n$PafwY*i;<3pQrZ$T=e#w+r?*ssOH5=DmZ9@K
zJU_FP9m>@|&Mq}&0s%}EUTVVKj1WQyr<a?`LAE+iA6||BL=pjM7sxF);T*Aq0Sf~Q
zx%5HPP0==I?C6XB_}Emhr4@{GKI@BUUtM9U=_^@i>L(_m{wt(_z0y?cUC9F0s_H-R
zFsiHnz`~fV`2!dx*QchMy%G$5X|1U?xsnAhv+fUy!Bea^)vFw->b{5@)eWZFz~S|E
zV=8Yn)%sVmFhw{0K`{h9oBtq%7-q}=;P-VSCfWK2_2Fi>nQC2vueN&;EB|Mvnz^z{
zEaTh%fS-@u^B=$>VfFJr^hFf2>klm|z^3_1_|N&cePLE(-(`;ycr@iq_4+GW7`VNr
zh*`L<kix)yX{t9~DTQ&{cV+iO3gfo_4+Sx92TasBT^J(fllqORe9v}<^tY<<pO`vG
z-l5WO%v4%hBK(8)jhXrWvLz~RZi(L#me5{t3rjp~swG#l(4Zrxn!1t&?C;1dn)4Y0
z=pRhwS5sxbh4rS@_}^B7Qbs>GN}$z{%=~&;3Aa$<M^i16@NTKZamNHW3rd`DY=^Ue
zeew@d<Z3V-8eIv7Zaw9UBrl0>J$+@BVkCby)fSfvih(?9s+Cu=P~|VCdXw3fw;Rak
zOr<#6Jl*z%9zDA~m+tg(mmW8=h7tYRG#>Cs6XQ)ev2!L;B=^GaAiZ?a%<1D}|BmQ)
zhcB9*AoqVfzjO)CiiHflUOkan0?jkC9+1GeWEPj0Y1E9YQCRKeV^>A>Osbbp;lUko
zA=JwUAq2u8LG|{rr=xm0)!Qcm8sc&`gfd(RJ@%@P&4}vR)T=&)2j&o>aeI}JO1Tgk
z`kId&iNZO*<{(kKUL&D)Xcv-5{d_q?ShE7XZMdJ$lh2#Qb4dMt$Y4^l*gFNfRsxde
ziamG;g#JDxFz-M$NDPJ5H`r$d`duY&I5O0zH%R6lE(2-+YgMS<S2DmSy|eK614ssA
z4;-{<AbY1!?_Dy`!J#G%B$-xR22FaC-5Jwcm%Qnd2~}i#AoC{4wBRx@lR<2DOuw#V
zkWY>#QaX?sL^3yX8BE8)%oW$$r3U*Hp2mOzv||`dGSoB3`V9BwjA2j4(KEw+o&w%8
zJf$+ir!*Elvp<fW0m(O*9y|oX2p?AWx~K(tk+3?FDG9xP$w;4EYrureNRpvhh%^Xd
zGu9!Yw=5auQ+P^?n8YQS8@UX6W;7e0&?`$uV^ApifDHA_Xp*VmGUyq`&L;F$DQ5Q!
zvLBFPB=Z-9NZznE-j}nD-JjGSsyE(e1OVh#z1Zs1_>^fr)jaA#+Q}=^Sj1ynlKS_}
zCi~Q@dDclh0^}4Q93|zo1PAI(CC;xDCwnO*SYZ87q@PnN7x-jc3oeFbflr3XAkjAq
zd~$;W5*Q17*x($2e*^}eTC7f5|GtgoK+qn^av&%gvwUF@@}meKEMH-a@3OqqgG<oq
zi5u8W)Aa(@Iir_XfFZ(cJO<Vh2a76P;*(n)JO$PgAGSIVa&16;#5QO2zqJ0yL2v`%
zBcG3Y(F2WX0r|)m<R=b9QW+mk9F|ke=0(h=ZT2Z!t*5g3GWQes*H(n~OPd`<D2m(c
z3yZxqiUDS`Pb>$7f-rZpFSFGr_SVEe$_K{0#iu@J9u8oX&9HXHm-C+0x4!<ZUhj;L
z=WpFAZUbrk{mPqu)tv6dFq?9iiDwNh)8A5?z2Qf6L!&C5p#ul_)%I6#pvyqN+S;t8
zl!Hm*Jl1;VTD_6GdaPewfdCf`80(ik2@-|I`sG19NJJ)M{mDlJDoDQb8tX55nEW+?
z5(ia}^<RHG-;7BXZN|p>AAHChNKw6s@zQGi%3FRlan6;t!Yy^xRSkydRXj$o*7&8h
zfrL^uez_M038iZMBHSY^^lFVi{gz+!Dlx?UfXRM&qe8OyjfyFLd86Vo6KGTY>Wy{y
zjf%@$jLI}WZdA}&pb2x-X8M&mZ1HvaJ=OTnR+Q{;rlTm?;Y`0Aev|_AOurm{kWh4{
zKQrgDqV`3Gw;e?}iz`~|C@Psin*~KPQc=l;qO(a+zC$&s%0<@O*Xtj-$`|<+jhi>P
zP;8N37uF7vr2OH0irp2}7uG)Z=Nz#{-l(s1<$vr)hWrqjy$?2`edbs8TYs<AzjjyS
zU$NW31K@q;_X<3a!268wD2D_R4gJg?*^h>jK@wv-1>oELYGZCF#M#CJxgCBHT5}<=
zfcv>$1mHFc=Csp~;Ha8ROqK-LF24vwZ5BM}Za-Yz6;c?SFZ?3Fx24cqdkE|bDFonq
z{c7=L7N#WNzr0dcK1)ODKEL{iIfh)Ek4E}y_UO&}xCg%W%abWEiA()QP6Z@zzV_o}
zN|Km8U;D#6+@Ys1Q*s|)`}3QdbRob;UhlA9X`d)(Ln3;Nb!w|;p9I6kqe>6^^MuQU
zG~f^W;W7n0B_|I1<LzXhlX)OsKkQGm<ueiT#G#pZ*x$O1*^h?aAJ$I#bKbCywAK5%
z>YnuTvmdwWhr2oDSI)xS+yigpm)?e0Y*>5!?q;X`YD->^cm%!A_|^N-g@zQyQO3`H
zb)L(-3Jvp<v-yohI_M3b_{}em2f##ge)ES!mJB4C^P3-w2sH;Jn)91KAv_q7yg9%5
zlkIqOB!`;wo4?J?W*M&sh!<E*2mPAr3w}i$efjyQT<}LkDh(v+xj^ni)C2bcGJU&f
z4j&bC+Xa8-Hdzmi6YsVQ{y*Jf&Z7OepGK-ru2L^C-kp8`cO0MX(iurlTwQ#oQ%~F^
z?B2z?>reVnR|RB*t3U~uUY}f<%moQm`{d?}+%`xk)h8EcBM7Dd52`;)+^Y9()!#v&
zC98j~^oo!HLjPQO&kQ7$$wk0BA%ua=4Qumqb4FWV+^UZ^>dniQ>qssJc0sQ4ey(cP
zP`HpQN0xYO?0x#A+ZN`kO?g*{M`-7wT=h;qvVwz=eJ@w-??U&vQ9i7#&s8=9?^V;r
zgL5aI)%$+k<!Qbl7ke;r1H3qePaAXLg2_|_2Y{P$)z@9-7MfYPWGma5^%s3x#df>x
zV50Z7+r0-8ZQq`oFRoC4MBBILA}FR~$6V^#oov;^dW+6Ga~0vEz$9+2T;V~Y$j)4>
z@MHxbVFf#LOKugK+E%bLH+2iQ0uqo`urs%P2Xh3Sl;x5Y9JBuRh#vKHJm%<1BYiAa
z=G!5JijU<Mic2#fQSq@{T$&LT)2uy~+u+aK{opC82@`B?!w1ZZv{>d+fm7DDj(RWG
zW2c;2=&<=zuDl@xA=GjzSKbf;NriH8rYCA~qn1;-MdAh>p2}KI<rd#+{*6}x_j#7h
z>!f#l{H#+4oyMKbmD$W(o})UOE3=s(QODU_WHUt_h;BgEe?Yc`VjF77+1#t{H%C&;
zkxQ#(pFFGU6MEEL*(Xm<4X{y7pFBA=K%yyq@-7c9rLy|uVQ}|TfSOCaJKXxXN<XMP
zHr&CWTSCM0<m7-5Fox&J$pI1=!}BmXgsPN59-dcxyHu4j$fWA<ypr4aeW6^s*)WP-
zd`5q$)hMS9$`y}t>Y!Zls64saqX_C4m50^-Ejr)FRlAvaIUidiy6AP>fth)T*Z&Lk
z^T@nsvDMG&y~<|g$@LUWK+VdNDMOHenw5u?Azy6r$b#mv9?$9HO6NIc$e`!td4-pQ
z49d*Q!vQ}w6sQKxS-@`Ss<*0GU^f6vG+;rVv>A{<SdbSI2SXr%upke?9$iGpBWe*_
z)Kza@vB*InAGF9p;BiHsv^o@_GI_AN)*JygWwCnQ^qVU!2Z5G6%R!)s*~$wEub;<l
z%F4sE+)cKhM+z^u-s+}5;%c?r!JspS<@P{82pG%rWY7u{S}dn_jH9!lKv>(Imov+%
z_@_Qrt+$&7f;?9Mo@;-e@^zj{_iuF2;{2a@*0~q-?yl+sc}T92=MvA*qX+YltZ+D}
z=c_#RvCDXe@{}XM!`*#R1ddR$E|;M}`z8-DiNgWzw|PiPIUL{~&Qtx>W<&HrfGp-H
z`{gCQQRkz1ipXAr3815S0TBy;M46*`G8O;{13#K4V*w)h;(0Vr#sZQ<i|5fi!~(sk
zvjb!fC#=_B*4?frPS|z^F0u2xA_xJAnoi`&pavvrI*}Lt51&dziXF{~y!`vFWbr}|
z{F`>fs0d9y#g4wBSC*Y}>Y?gS<;k2rWKiT(9&-8<gmPFWezpGmFTKQ7{i|&W0fp@G
zSKAUm0^`>_xl;fMj9>Gx)aSv;gEWAVm&ScI3jc@}%Kn;{c^q#3GK;Fpdt!jg>_=g6
zfHL+20!o9#uUfi&kDguFQ+<s(R`lQcqwWgu#R3m0s4^fRCl^SlG9VBVZXYC684!Tm
zr#)$a?0OKJQ;j|8AP0fWdXR%aW<4kn5~pA&0)#;UoPv#|qw4_tpf)Ce%O&l4=`p1m
z|JsU>D;yJ$t`Ks7855AR10-O^1TZ@&RtJe#eM}%ZEg)ibV(?gfY(U29#1XOjxPZt<
z@=_vJ9~a2B;+<J7#W1qt0<9mB9n4FjzVQJWUrQ-;==eaE=V5Iy=sZ5q`q3*3!qHFo
zLzQsL69QSD9kdI={w4%kSN~5*WXmT8WRx$fM6!I+AGAQSd{Q8L%av6kSzZ$m`FR^3
z$?}>&-T$c)$?}>&Yq95*@Yf?-KKV*~v5S~;WiJY2n;K9bwQU;BskOp=VAHK?o$;f~
z)wKb6Ei=H6Bx?gn+mL9PsU<@ij(w>IUTk3?XR+1wbv>j67X~~bb0xwk4?pQ%#D?_K
zSC=db$m|uE7@tJ}Oo+$13@qb4*1f;}MC!eO%vIvF8Zz&Z%$EWP<ooP&e|>++`vIAd
z!+A7uNeCMkR0f?acH#~FrnKb%QHskVnbV{x>}+KK*DdcFpm$dSD+4(Dc?@Ow3EwKV
z<xTzZ)T)5I@(Cu&t|DW9o0Q-udaK!8gY;Rc)d89D0~124NvM|)0=b424%T07wFc9b
z)_RmAP1lf+A4(vJwl0vfBj7T9rrSd&tLp;Dnsz}QJoB|apk%X;vj4uOCD>1c^*c(y
z5P4HP2GIHdj;?Rz(kQ!;Jvv0cJ+;y97G$v?voU};<2BNVr?IxM)kE~xQ(FQuaSA4c
zwghmjbw~)I^R}}tL-lXd+wGA;1`0yksq@~V^HJRG_%)Do(&{=)ucJqP4d5o@YVra>
zEDl=lpz>PKnm$Hvt5oBEu}8-fXxKaG6)$OkL^ZvGc>zA}L1H|52ZOH##k?m5>=Oy-
zpjyFagycYtSA%s*uVew})nNIJ=86#40IS@LpfWqCCgz9O<|Rgn_4;^yqEQW|tqLt6
zGlDW*5adh9jG#;xfP^YDf|1!!g<e%42C1UW463t&;wF^jq2{-7n}z#o$-+&j+92J8
zqLn2`UHeWDJLu9hoAQ?4@(B=P1As?R;+<ente7AH_D)c)m>}Ut-U-STlSsZ|z7v!y
zrsU9y`A!fkW(QsyAP{6t*Kes@5R~pW$d{xALFs-$qS^&P>3%^{nIPQnV$pkWg?p^!
z)Ac1r$2|@PttERL3|dR}1Z6ZE<ZH>Epp0fgLiIgC8O;(YqS-w`M6=%sD*@bLYxg_)
z-<8V4PAwF79}dd!KFGtU!@&ZvB?Sph4+pU&#lZ%87P8+5#Vr94oD$xEo<YCwgYuRD
zNR<3OXx|bDQZRiY$mso#wjj{r6OIlPQ=f2JN-_0`puFq=VIZ9d;+DW2n7qi1o(|?*
zV&+2q_VDSTJj6zZ5!r{JlHoc1x*!1oTAYS~gh`wUA}nu*8Hw~Bb|h^6LcK%D*`Pdm
z0TVK3X;6d=s9#xR5oCT1O4o_(9dU!0khgIhD0Ys$ya+DhTu^#N<kcW^js^zifx6Jr
z3+(Gf`Yk0Fg7Q!aOvqdaVml*n(EN++miP2K(iel$`=P0jxfnzgJR=_kLYNAnoc-3K
z_w?!Bz|0VmG`C|&Le%hD_RMnq&eGbDoNHjBg|#8C2&h3q(b^E89_B^xa1Q%=x&CO`
z9H$6P&p9ElNW_Hr^qdnyB4!x;6RLqS^VvT>)<;y#4@oNr6N=9dNh=2li1{IDp&(J~
z{17_gK8^rtA-iFP{y^Enkmyjr(!^L8D&p7Si6o&AE`*aa2aV3N*oQ0hS1T>2R=#-%
z$ruYVfUrXHf+<KqSRq*KAPN~nq~b@`|9zqdT$LX=7!+lF<X}*g^-(A!5&<X!jE_R_
z^8Bu2h|GSa_328z*j2I8!65rz8S;rW8A8BV8LE2?-(G?Q#>&vO&ACqsk@>G->D78=
z=^7AHh75g8NTv$GMv*lkMAbdH=9tmz*?`shi)HJbVWP`K>z!eu%S7vGm_864hM;E)
zD_f&4t=!@$N_UC2IKxCM-j<NOQ5oWQiMCLO@k^N~MHk`gf2!A3?r<RJF3}DLg6<OS
za7LQ$672{ji@BEw(OsflA>k!JpqF-qq?Z7RlDk6EOMpblT_M{`gy=5Oz7Y2k?Lc7o
z_c=PyU7~%C4s@4jUr2fh2m@(f2ws9;GC?}~Xej4bYs@-aG6@_Fc>?^s4rGpzR$==$
z=ntiih2&HN6V`o<<_BE}_VB#!arVGQeRk@2NS^V638CZE)q8~y$WyFjlfEx?DkRd3
zC`t3=R0tbz>@NrjO8v|doAp5@KRZa|A$}$#ikp07<iD`hn-Mqt5|RNJn2`A;gq7)M
zdQAl>+SkH4L#?`7^fRu|Yhk>ma+oSW0u*_XFl)F?Ka%PbR>X@i;G%S&FtRc;gcQ1}
zA1nV%fBUL_Vd)f+1BFn(Fr4C6Ap~+@7}qyfxYBLe<o#MPOK#Waroa=?4-%AI1oL8p
zD1p`uVMn&>o6<wV(zhW8385ij__ot@mK6?b?}ibZ?%1K9(u41Y@s_|e6jsBe`69OS
zOMUv?i^9@zfeB3)h2;$<kf>o%7&n+GWdjmZVo|uTH4j9HM2LXe7KLLs@fSbB<bf=<
zexH70bISoG*Jg#~O=idd)S`B;j6=bEyeJ#aIU9B*7RA%7&3`=w);;_68UEn0uu)>J
zC0+AL*Aq-Trmw&2L|9yFA|_x@gwrC42NJL+!Z@fUT|q+E6XC}9@hv@({k(DFl-`Sz
zT*5?Y*v}98BX^&&RRxo{cKbmB^OW6wkia};x1UJS{!@1Q^J##7ruH|#5&vVp{Omwe
zg+JT9fTw`|nR=l=odHC`+VA0<Uiq%XZ;I@NJAc&w;i~>UY-ABNt7?Qg;bK^6!`lZ6
z=paRO2NLKPZN)(X{i3ZnNGN{MR-8zo_(f7&fTQ@Ou+mzB)7c+L!@Q3=Gs3&&Qdp)1
zKmz?z7-<3d6zG@21vhcCz*C8SDO}jfJWg*GMZ;R({G2gp-2s<q9jiH^Z_DqSZ`3n;
zQFIhV>$Ji7$}sD-llmoBHU1SlX*_@f8=UVG8BUPUbZ~xsG0Y&L%HVvwnngQlkO*T3
z=U+1{Uz|e{1A!Qd49OR_khqM9&4%XV#@7S9atMsf$Gg=X()U&U^M$G&%ynA7trRTL
zy;0r)BlG3z3=*}D%!dadQ;O24k7h5Q)*t!%Xr~B`_vm~X13(5vM(4xFQGZ8?V)<fX
z6NUZ;Y1c-pGRv258sRAy#zMZ$ht4d(jLt_=v*L`t)f0R-AG3t6=BWi@Mi-saN0lzJ
zvA_h@qI@}{K>}-0K4$boya*mzZ2vj^;WEo9!sn~q*a9(Msj>WyW&yQ!DXTiK*OV=F
z%1~>U+O35Qs#!{{<;l|mBA2tK7xZ!E%bhaR%;k17Awxp>Xy!(m5rtuGZGO%#*7*zi
z23KfpzL5~`85dGBx8(CT=qo^==eF38AOX20U*>Q@0&+_}a=6FH$O@sPwkKctGG9&L
zCE0DSd2h77zocKSRD&t{9wI>4V=Dy`2zy8=vM-RZuRZz2U&6j9RY(llCaHV#<&I5q
z&_{do<&I6V0JJwBJGMKyCJ;D47Iza_92>3}9m+t9ePSVx<PPM^m-#`W>;W2q$#n2l
zNaPVqa~o4#9go-(1zb#&Bl$9A0TK;4lAjbi36NAMA7KW~S&*2sNAl~5{2-BHnjFcm
zf3NuwMQ(+(F8*lg9^)og<&RD+bR6+xzE9kyh7fA`F+Y2Qgr(^3$Nb7xJQ67+4|p=4
zM<UHYpybJX8Hs>I$&>jq5&?;lC-dz{q>y61vop78hO6?dQ#obT&gRR27czi2n=eBU
zkbpRwj}YWx*iS61oy*VZhl{nwUxMfIvF`DJG)Crg$$HT+0<OC+<;zeITtHpQm!Tj?
zKwZk0309Eg;qt@R@j)k&FD94r^IMufP-n%+{QFuvyhc}7tG*HGyTC;&`bOlCfF!Ai
ze9IUlD(M@6@0v^dlz3Ph70LO)>g6-$D4|giT)*a@jEIxQV<Oz(n}I+VjEP8d1qsM8
z5oz!s0XZfDgU70(s&P`Q#_|V@0j|;-rx58;6Ojutgixp^g03fL7^nF?m8}dK4^~dK
zTLLCpGBqM!r2z?qsgaD>H-H4f)JVfdX050e<SgsKkTKg;Im^Ky1DzF-*L~vLKxajQ
z;`|UK6^az6%+2J@;$(jFSgU+vYvnu#f~;?zqXt>uyoh|G2SoreFVf;VZhdjGz6B8x
z2ZKP#1rcd|AW?EbL|Pw6lw3eva8Xna;l&Xi2mdL~--Tc7=s-reI3kS@Pl2>JB8?Cv
zkQPT^gpXoO6JhPcNY43)D{&{A{||gW;$+ll9r!SU7fr80BNH^V%h*i?M$^(|_V9oS
z#AOk=+JXe)vItgNdbc(~J->oYDll#=Tj3O;5nU1Sinj?NgCZ*;I0K^09m-%xS2MlP
zm{q#kDMLuBBl7GDGAOe;g3uY4>QDsKTDHH?Xj!?|ZaSD~`dYi`Ac3$pB6l(%sZ0be
z<}*<%MsO3mFJ|m0-4v0xU=rM6Y>Mc@(}6^pO%Y_o=<-E^hHNXlKW^Mqxz(waHj7)G
zT50IEM&wIvC<2775yaXjMXeaR&)Jr^ajNoj2ZHvBpWCLF;A8fABq%~hkbw9+a&=?#
zCjo)Y;vRM}VVthq<3LbGcu&M<cQNf9_e8{}hM+j@9rr}=YBzVD3Cd(0w91O$JRd#i
zV9=W>2W@`<Az&PgB>79*z@W|K!AP?f+?RqRj7ZDd=*4e(Djr{Vt27;KH4m}1#YWT0
zLrw)=RB$LFUz$rOwADNmkuS}GL<NT;c=2)|P16KzHIG^?ON>FTilYt&?KO`&-A#MV
zqY?R`6qEtR(a2Q|&FeS>_L@JAP8&Cr{uq&WN)mjJ`C~+81VEz1k7O3Yu&~8E$(~Nb
zuueL4(hGwpBl3m8ghG4ElaZ8oQx7B%PSU*IOv`wJUKl)Q?M)l^D6P&p81%y6Ij3{!
zg~4-?r1;hb$^heBq~2BLV2Uo1VeQpu&RDBU9W*}nY81-@?ZVU~W~A0Pstk;(iRCWV
zZHAU+y{<8I*1VoEtr`zRm;f=L_l?Rq3KHmjqnM)<CV)hk&^KBzFe<XC#Go)i>lalA
zL`61L@=&gSRAy5p3)$2+qLfYLAD>9lG#wdL?nv~p9;$Bym1+>S7BuZgM&+>}B!M<E
zDpxI#Frbmqu((x2Bo9?aM)SoL1j&JK7#VFU^39UPVOrg4P8D4Oi7`=ZOh>rro(((P
zz!+Bvh6vD;d}$aHl~*l5LZ>m&LXpb>39vCy>{*+j+l#{5glNtb_EAIQn!tpp;pZ10
ziqPqvN$f&HqvI2k?8bo!ph;1gum%aBNl_%MDS!cq#!ZSws`;jaNHh)xFew@pmmegH
z7kco&W(<Q{M5@)WkFGWnr8Q1Hd^NO(5;7=KLqkdKwg|4%GnuK4j2o*b+f4=&Q)F^f
zE&(8cJ2@&(JV63sauiugI`IUF6VJ&}`^1xIq3YzQJn@t)oOn)-(uwC5N;%;2(Clc=
zuTfXxV|Th;Ro5=ovPQ-#S8#R|$4d+Y<Kee-=CI+V#@N)HsLYXqiQ$?<wVx6~&}}Ze
zt;{%6GB+x3S>q-Rgyu#uCmV4fQ17t6mK&ud??mMdYFvXMZWQlWXSfU+HIL0KH|nJ3
zMP&{HmslV(FN$3(onAvDxcvFn_vMD$m6{(_cxsNgkeVOGaoI5V9nk2##g?y$F~U{3
zI4Zw;0WPE#N9A`fK%&CMQTg2qBGHh=QGEB}W{!ce{($XmYP2i)AS&}NxMBi`529EL
zvRnp!d<m<()~H)=NmM3La76?%OUNLP;3^B0fgP=m;&sB^9@h6-qi>2nm)E6d)pJ+j
zn{{pI^LlMMcdmNAXQ!^6@!7j>-P!!V8FksU&5W>Na=9L5?6HG-WA;ijBjPgIpk_vW
zwy2qL75?Ab%&5m)&5b%8(|6-reP;Uk7rNv7c(|k1DSdPIZvVhn`np#=+v%06CmYj;
z^r+VKOV4z}^FLIaezF_?DqhbtzAxD2DSX%Og|4{a#y_6-kE&OCu!|n8UI)PA>wrC;
zfha!c_atnl>dEv=U3xx4AKwE9pXuvCpBwBVz6tn5w<lj|j4uP?D}>L!Lf`VEZ|n7Z
zhE18O$Ew7K`A8$Q@-i5Gj*$8XO5$UG-T7X*Cq3`lttZH*Ug%Nvr1&-;bu0!9Ju7lz
zAkpuuX>8i^ZpZSqhTYZNXkW4>Do^Ed6)$AgL~$zj3YWq9^eKC{x$%FgPvL)P;se%%
z%%@Q}@=aI_Kw|~kX5HSxxLawp&5`m!Y8y$3LbL{Li{it4^br-5A!FJWZFqw@S%6?s
z+GFj$&d4eydmOv<17uIMegppIL@q5mds*y8qjkyNsQk<fn2^~U#e1Cec15m&z2KMZ
zMUwf_!J#DCmxM!ad*C)4GNo+CjmBLi`=at)1TZ19FNzq1l9IU!u0QT)tt*V1O7=TA
zbgO$m;UJ?A8NBs%fK9A09!MQ<a6*tdKseY`kPzMj``!vx8uOIY_b_wWA9T~|`zQi-
z*@<{H?6kH2CUj!zw9|?CkUCABNFh0}@V3}5?2em_t(jk<%GDAo0-;}`rR8Q{`a}^H
zxeL*p*9%x>Tcc0lLKG*=e@0n;<?45~wXN|`$?x`fgNd@g(|FU{HvEd!Mb^HZQU1uq
zsC;`7Ovqe};_byGmjQJN&MupqzVH4!(%pMJTh{aCo_r|+06Ahj6)*FE<ia>os>_SQ
z26`2+&FzeOsa^##UyA!u5b9Ncd?{{R0RkSZcL58xH=3n-7f7c8E`)j)z-i!$D}>;{
zUM*l%?Tzx(s}2%5uvZC5R0j|BS^-<w9@V{8AamV$+(o@sfXoQK*#RWDs6GYkm-far
z={^N=9)Js^J_YEP&vB0w8w_n$LC*WupE?*jjKHh{qkvw}(D+A^=CG^pHf}4MQ=svM
zk(ekury$aRhKESBdQQQ$x0oNp_ku<bEwrZIZG7S?U09&;6drL=XkkGCf4iGV6k1r&
z@-BMQ9V8yU$A;Z&+*<x#fyU2niAmgoC^rKlQRKaX=C_**F+<^pwGRt&-nG2<8BJZm
z4-4=yp%r<+;%~d|wQj%PXseg)EztOdCgK8YZ$Tda<Oq=f+gpI?ITY&?Xed43`tT8B
zc=WdUh4Ooy;G)p{LixQ;kSH|2u*KbU$v`c}os7bqBZd5ufm%$hE;Ne7j=Gq(UGEq2
z9rd*!Fq-cd%9siyWZy58J8F<XeZLSpYOI24F=?`xJ@rqcPLst>5sDxd7s?zPWKd*r
zA#!Z9=*DF+I!aqzsI0Y?{L^UYuExJ2a>4_c$m&A*WjBz3SzQ<x85@v*SzU-Vnqo?j
zh$&YW)>~UBQk%pOIh!?wGPNmL=#@_kk=lG4t_|gY@>wC?S{|#W+qJ*vK334g$g`e*
z!3ZfWz!#Auq)_)~P7`P=_Zc-|2BkNOF)Os)h04A{H8F~R4sj;?c&gE(8V}HUcw)oQ
zhJ1IS42$s;FuMz7SPT+P*j-q#4^5y;2E^cD@fU^amxUrMmOPZ(Qz*k?$wFAXx6u9`
zVlhp@gY2GHj7-_VLb<C46V)Fql)HM6fH_!b@9K-GyARK-dBt$GI_wMrZRZac%2*CE
zfH+(zxAPzYakvoMd47+v1WBbroC5FrmoZkYf36T_P4^f}a0BR4q4HWxHQ%Fqj3x3O
zBj;HYs*P)1Eqle}6>RYkgVZ~Q7l9~?C^)F-)fiqM+DAQJLi>;bF=dFQ^)~+Ms>Z*f
zi}3&o4v5LH7$nLKh{<~#AkoDGVv!*+(Z$5zT|6+R4vvW~mOPYuGbX!Ove3nYV${Xw
zgbr{#qhiYVm}-6Xs_~Mm8icI{nf$1j+<BC6lOGks&Vy_fB(xY63y;67h1h#&qhsp0
z%Uamy1T3Znc@$6Opez&{6N5XW`+<^$fg2ms{8v+42Oc_aB0JQ_sQcK&n4C;tVjL&N
z<T!$af)iu%VlYUcPK+T?g;yj5M12!unLA`9JS685+1t%xUI(ZeR`t4(s;+VBp!`RT
zQwL3&nwb2CQwh(1)Wqa{Z;+^?CRX$(SqH!9NT{*m4rYSafwg8z3>Rhm>4&;?e-a-!
zexa*a%Ag^R=;)zoJ}fk*i8duBPu=ktRZoe9#NBd`0G<*<&@Y8i^^{n;ovfOs8L2)c
zmT7CY<W+;3#{SyZxW3~wr+JiUnda0%vuRpP-kvPsvuRokQM{-Fm&x$7f!&23S;w?k
z!`u1!B-(&so5{}fH8wpq)2W2!+f1hqX}-;j$@zvNXvoYMRz6V)T@s%et8<rZ2wf5<
z`<NN4d#72#8-fM2mZka|>BnlFI_N@6ty2f(YHDNh`zIwlS5q6qVlL{yN1*UDYd3^{
z0t$81#_HToFRY>+5SYy-_BYBZXFGLJE@yU3=5`^2I%da`HYg=)X2%fiE<or62!y-y
znDK_O=&^YY1YHc6=cq~9nt8FXxX^$ifS4CUv?tW`LW_AZypbU0g;#dPyx7(E^E(bD
zl+Ibe5(A9N$^}jxCe&OIlNlk%ppFHxde=)(%H}MHRkSjf)4l!@3Z|D?BL^5Ol#a_B
z47x+GEGDxv5CX=snEad*NMJ0Bm5GZNAfe~7Sd)%YPapK8XmeSt>0{=1v>=wyErX5L
zqCv*r-5obNwNMUdV@&1|AcR^r#^fiGK%$n7G5B)P8+c0!WcD6ei(l5VF;?epbBFL=
z2-mk;{~2aH=&IiC)IwRJ?J=K7Pn0N>CE6Y<5h*y3sAYRhrr<!LmhG{YPY5>+l3z&M
z9=om+7BGA)Kyc_n+V<FE9eLWhgth=XV^@5JsY^HZ*egaZ>o~&Dn&F9fR}6BfdS^^7
zRv=OJPHNy@p+4;rVoKe_MumM<>uq6e8DV5x4}&G5hY}?K>)Gd64}F<xpEHr@%T)Vf
zShy$}N`<w9v7Ekf5e=mvc`$|?G(TTRQ8aWYCe9Z?0QHdV=RrdDP)tTcAc1-)hG^(8
z1s5rDvOid{(Z(}M*$**!m;x@bV}|$y9Y_@VA(kI8_fy(2Meh5w_0AaMpsVb(Q;4um
zJB7$$pQb|7L`@(sSRalv>M4~M>^?~Gg!Bcw4?qIrLM$wf6hKm;7y@#-J(r@;{!&bw
z2Y`SbT(SoPBuZYg2LmKZUZTOcNYgh(Ys>3#eje}`2mrkvm*W7EKa>j(NFco)mktdi
zkY10=aY%=?{_&i-avai->>tPZEgy$8jl)1TY^E`RJzisIr32$~wZ#)i4vfoD013>2
zaT$}QspAH*5jBWO2RTJ(3<kwzObQtk85BoAcb=>(O)=?+xH8r{Qe*tfRgHgzRp9|z
zGa@cq0}?PJ;&O=t378RaEOE5XgTy*NB3?8$?&e8qVnASIT#fR1Nwk>#qv8li>BH)h
zg||v@93Gdi0bhTai_$EPFHiiBC`M{bTzx>qqG_n0)x?#z;{OwizETaI2u>gYrEB6c
z3Iz$&nz)QYK|<-8c)?pxnxar*@DOQoT%8sdA(G^w+?2Qskt7Qt($qMGNV~`|(i9li
z#+5m7l`WoT?5M{7c1Mzd)yAbegCKOOjTedl1SGI)<1)Ah37u-=_2xh)a___t!Tqeb
z4DKZh-8P&0avj~P$b_{8@tjZMuEY`-&XId`W4`Ievhad9-ZZ=$>SZX3TohN3D4TBF
zRgM2d4}lMD7R6-{2@={YipwApB(zx+k9;6|h#0(w-ixb?We-Un%Dr#*kYu5UEZ#$O
zJvRgU(U!)Q6&Nk{_6+0ZY7n*(WTH#sGKPdCz?Q~k3<(lSERBa(TvkHHkRQg?k1s1>
z$B-YzWeiE>M2xU3E@Mc^!f-5)Ye>|PL(GP?Rq>qlaw2A-$f~%J5)&~?6Y*1;h*L{H
zwY3EkLZ8}m5G1tyl;$A4AC#qOvW`9ew$bR;b#dtj!6a^+zwG2885CJZy-XU^!Pj=<
zIs2prbs)JhZoA|<q`?;93ZAcpE7)SIfhUmMVygiXm|JXDP>0mm#-`O8by{q5ijW%H
zY*zpo6xl|ufbZ?<kSo{~SHAq;`P8Et58w*$L<|>5!0fVT6-dDBvS$@Y4A-uB!IyHl
zh{0`UcU;{ohfDHM?hD&yBnvjPhuaMGOx>_{Af8k7t?Zh*sP@2RFIktm=4<xuYz)rV
zwr*fT=xe)IK%$PXsaKF>QR|Z8->_bDj3(E7g9BO~L4ZlzxGvu10*NBu#PKCE%D$`h
z!rIArPXC1U)f{7!D{wN7(|9@$s7KYGVjsPO<JVI*7MQ>~6_>B}g9O$o8tAd)Z0k||
zzgqR@8A(^gueO5#7Z&+zT;5*=Nm6n7rDBl4_%)6%71KnnM{DMJ_MiF2y%pyj1R9|8
zwy%Z^5YETt>IV`C=i^xYZsG`_E;937qfO;S2Z4447aat0oEPKrXtf@9oEPH=Vrl)X
z$5Ueov3`Pp_PrA_m;s5By%RE+0g2jrC+zjJ9x2){!Pif=b%CL^?T3RzJ`Q-qpUDLW
zB!K!Q<njp;K>ZR}K9|vZg!RMPq(sivgex)6YsD8DTa@Y>@sl}7J@a3u5xH~uQ#u{H
zJZWd9DP?^Hx7$-ZiG9US@F4Y`?%L@&o;Wwt&vkkhsqp8J%EoWsNNCE9;|Fb=U+v)#
z?O$fQ@ABq8j6AzY$ahLV*@b?62ge4`i~l$evg7!vpO?UU^2%iUWu-YX{ff>%x^{aB
znR%y*8_YDj_n4=IwK(R9vQOSKq8&`iw0C?88$}!$^ytQw5a`YkLHDW`t2#Z4M|cgM
zT7Cs06zI~UXAkz>d&Y~wNeL_yJoKnfRy~DveczbcWC~82`N)8Yp_r18Q3ps2#gqgl
z)gH3y`mi?b?SwMRYGWA>yQ=Z8U5+gI?S#C(204^_J0Y)7frO)YJ5f9<A+AsngB*og
zn~+ziBnK8>n~+ziBnv>b30$FS!s~~?+ys8Pp-%dN?wwft1LNva(6$mZ8RjPBjfnbu
zGR#dNaOud)0%<;b{sW^^>3pXMS^xZmybw{JTmSq7E=16)xb?~U7qW{V7|lx;;<#US
z5t;qMguFHc8Q?BVU<t!#lu!hg{XTnqiE&+%_Y?BUJ(wu+exgX+X9S5N?<a6^U=9Vx
z^|5ExmL-&x*19FQJyVT;?FP|Cd09dRHIPHOWeFM7fJCn@OBAd`uToG$4DNoHC)7_8
zBB+r(l>0a#gBr<#`(2Tspr#pD0bA-d2_=)LpJt~&G_I)xAtq~m{+lCf67p>okkDyO
zqCmXT4HDRE5=gR;zo<{!=5^9vfPlYPXZs6~D7nt|7a&n`-DQ7KpSH_eguiGD0$snw
z(Scv5Pe_M>r$E|bI}DIO+CmQFPMk*Iz2ohPoL%hLGUJZG_5|KC%OdNJH*e{VeTU^n
z-I5&%d0GG_3~EOLrv=FLLI$v(v;NDCIwhYc<Y57rkoi0zQ~dlL+MR6Oa-)7~r)(Mu
zlCR!L_WlSw)>XJKn8-QA@;){m4(v%7aXP+KuOba_PV}+SuHs9(WnjW!zO-8g5-NO|
zkl#TCiI#ntz(EKtYFCkd2iVz<jV2Wb90XcZ4kUcy#S_SoP$D6MPLM!2kU-Gcjw3+N
zuUY36Mu%2kI|yX7Unk@xt*iK&@^vC85=$U~@HOdh8`{<YKlG8v>7QgrRv5Pg57RW*
zNKtVEYTZ$G(<jE}ila6%m_R;iw+<w9JDQNI6-Xc-rJj9(BjDk2cI!&xrOM+D0$oc!
z?jTU>jwj^aqycZ;ahl@0$v-uqVK{63zS4NaReIK*vEZW6SsDk*BY;G;XA?M%X~WBa
z`i=EjZM3cU&8e0a$=~cQX~1_Eza@eq69JOSB(O-*#m)xgCN41d8sqMY3l0J$?=Cn9
z<TWlh2;?;`5CYyt0s>?&vB7JMJK9`w5a{~arG!t+G{^wqQlhwlYy~-yONmB}%`Zg%
z!-@1sD*ciy`Kht18vly<+d!e@Tc4zyJ0JnmCn+rqBw+d^F}k$70|}qfCt0^&Qfx|y
zAwuidlk&Y}$%1ZulX#={b{Iv&ur@H6Gd$@^RHpyj1502V_RqD(O~HXlyfPI>0~?Zc
z3`(+(*Wwz+prrI~;6j%{Nx9m9gf4@USZ#3Zhcb9Lgz4*y;))@5YrsTnhS;qENkU0!
z4<LasBnf-KoCgBTVHkUSol&>dFb9D;dzgbj)eK9@q%n#BVOSFW>>%y7u0~EfnKPGt
zvd%aV9F?^1XI@S18PDEbZ%i#4Z#M@_K#jMX0}@c<sW~Ib&0kFwO|yD$Fh;w|ra6VE
z1=Esp(+(jNnwCVQPX6?2YQc;okH1*QO@>xJBPqi#JVL=4Nf~~DM8O$JJN&wu$T>+K
zezgMu6P;ss0Z4Sg9J>oZ0%=ZC#$O<LQMl87I=Y|{7MUb2WpCST^mPZ9CGkyf9zZmr
zK3GA0FyRLL55yIAqd)?2h20Y%fw+Qtf?p?ZM4GQo;wJQ9*X18JYr^_&H|{9|TU--_
z5SNk{qCo;<brKh%KO%c?L_M>fsXL729oO3p0~2bjw;Ki$5bKlj9Z-;fSf7NqCqDoZ
zi`Dw1{CP7XMc!h45<hQ-cNnM=6xhnLpBpDDwmOy2oz|^Mc`p_+sAOwW{<;}RDwD*o
zo8cT42<Z6j?5>^0t!=kE2oy+fPs)TOWPq?eS;Bt|hKc}TdlHvoJ|nwnL~YuiR2n8$
zy4lCiXesNroyI&@C0JsHLx4-j84eO~`;+qa9!S9LPvTAwetn1FQ1=n*+ug>;uF4}0
z26>4iPS25-IAYH$lmW&Onpd)45H9@4zTRV;to+e|pxcr^CgnBpMm$jXF_{%PVvvCN
zF?nq>ZrF{e?@tQDZVmz^Pui9Z5|y8{EgK|Cp1f??jVMq!D=fP$2z2mSM+XWN&N|JY
zK;f)y*$@WO*(5CcRv30;9PA}?mauXAj9Vh-l6cwRHCjX(!>+YUNu^Jbb#|ZOa#iDh
z(b0GU^h-86NT6Rz$~#~nfqp580~vCqAmK_cCDVP1+-3xcV`9L-=mRyqiqzMNJUrob
znTxW$ix8qkkTAQ<M3DAsu!y3x8@OhuuU`@Cd%(D{vR~0<ttbHKS0tD3#(duNE0P~v
z0tw`PMOf_~<q){rHlT=IJYf8_dVm8#Ha4J0T2Ny?Zw3^}H3B3c1{7h9pv!F_ak*_k
zQQaZpa~?!viGU6Rit0UyNYu+k_^JW1rv|&|_78Xf8C0Y+O*Bv6gKI-o-Psohjq5AG
zvU`{2)u197$Uq*g9aNMk<+BweFMmxF{*9Z)G_QuTyS_4RZavgNpfz`>(-SnWh8D?H
z8%2OHv<Pc1zxLS}ZPrE=DdX7IuZ%6#_|MjZrqd{=GiW-EDv}>@M=79;DnjrsMwz~^
zFskV4ahFG#4#oH=k1kTjULIx1MOo&IvSebE$B0pWmAp=4nxT_e*&(A(#Uw{7nxK;$
zt!RQyDv~}MMSwi12xn+?r@Ap+F`2@SA2M#LnBpMN{G8(S4h8a4ih|-)1Vw-_r3fcv
zojC&L=XBQP8>6anx`ROTbb66YUo__Pbb3);agYKM2-A!315~TY(KM!c`mW{s*7(#_
z`L2UO*OlLOFldIpTO?oMMHyhcTZC75R|*WAZ+&0|ju@+5tv+xt=(_R;Me<;@F+bq?
zph$kp2qZ8*C@Ly3Sq%FDe8S;GQO?g+_<N(kA3jm!@zM#O2cKDhS1D2o#V2Vy{%mN~
zAo*{8&_gUQCyTHQ<JB#YQ1YiD@v%;#1nDQsBoeYe6=8J~vY<{C$(Ks;`2xs-<R3$T
zEG=87ig-SdaG~kx%az{CO&&DAAwy3ge7Xo*O92d%KT{;%jm75%01T2JxImU}E1fCA
z*~#zp6|B;*)~`5cqSgGY@o#sqUoqk^+R>I$qu(fID}FPYwS1#k#$n(B>y2U=hk=Az
zZxo|Jv^OlJ7Q9)kgs?Yk`$G2@*{0u&Le}=25iJE*>{KDcg)SqI(|MB+=<5)r)aW7X
z^>apL=@6#~;SO;srM?(KMR2JOML-Q_C(aqIONTo}$R!MSijYefPDRM*OUWgSVt+kv
z+*CTsDMH;es@N;$He^s_RB>(||Byr}xxF!L?Rn#t(lJgEn($+aWljJxC^DuPIe{m5
zEim5+tnz~KWcdWA2+hU`#WIL1<+E`@F|4P?#9)+#wfV(42du3Zj1o_9eleoRRk$Fh
zmeFYJw=TN8Yp!m#zeEOh-~w!aNnE_P1rqh|FTwh~3ZHXP%fs5ylAQ5rSK>XDz59ca
zZ~02Sjg)#vOZfiAt(N0r%JCBAREbJo1=c}}4{Q;SJzDNP-26ldPFv^_ig<*<Ia#8%
zxq^cVe<IElAG9ndEeE8m7q9V7^^^@r$sq?DY7R)rAqR<415y|a-0MRjJRFo_9a?zH
zo*0yp30QDBTfPYb5@iOZ@FoZaWFX;m2Bm`HlUzjdqt`*H&<*_PRdVR)bx^A1b^KOC
zIoZ}QwzGxz`qE*JZdCoSlsxNz4C)z{!mMk<bpth$RkZZBtsI$>Uca2j#3NI32?Pm*
zk*ToQGlHZtDXgOOb~jXot&L?Lw)DPTG1h^gux@NhhINnu#Mo4cxI6(85Mxt#S-B@i
zfay(Sldto>STWH-pe^4-2Z1bcVydL6>>skkiK*r-_^0N|X_=VJ?z`UGs$#N(K+D8r
zrx|3JlT$JRMiC%PPKgh0pcPmqrm>CJdplH2a}ekv#WV+jmWgR8xo1ZaAWTc)m8}PO
zD==a+*j+bxAFQ0=Akc5i&TtSYoSTu78Rl}nOw35(7pXST&46-RCKg&>-Qc~`UAfS~
zpg?Y+gF(y0LPrZ)CKi$wZ_qMPPS+roSpR6{9q6iD;$YA+vBbfkdk{+;J!qL&LV7Hq
zdl2Px4`Q`-ZENo$<>u862K_YFY6pYvL99-N#a$JY0mkYSZp*$Q%mTL@)~A$f6K&YZ
zw%!D5+t&MR1sKBnlq>W(h4l^?U3XZY3X2E_PXV?*bxl+LnoT)fJ>JBQwe{XmvB^Q8
zs|=e`@{J_O0AW)qCSq)mK-iSR>Pg{ZIo(Rw$~v|4R#a?t5GYdHnvzi#WPq?Wm1rhS
zjBX@sO|`t<{3}Pmg@hgKi+0|}Dt0&sbO~XH(+awTup<=~d5Lm`E+OnlH7ezwAStIy
z&AV8S_TC37b~y<6hK#z)L7-p8+Le+U78C)(t`uH3qUEQYt~~Ey?hf7-6?+_n5D@k_
z2=x0_dr~qIM-d?GN#Q5DnsNl(hu+6t=-_QuvCl!E-?iH3AcTRiFD35_mGj@V+Luaa
z&3|$P+?D={ecQp?qv9(EAs+}|ISBbc_{wQTK6LnsT2aLjaF6<1Hu6v2rz^g75F!|h
zZ&Nb0TCPNZ@NG)m$VI~=K=?LQ-o(70Bj86mzGE$K@&38uI|m^O9lmpPhyvj|rxj5k
zd`GRIEK|9H-}E@f*52a1qw<)8PymEu4nhGCj-_O@iy}Zcmcj|@P+{PO_?`m0_g3%l
z$`cMmAs|jT5QTs^k&?TIa-|RuCsNtE_FRo&4`!urqq%z4!H5ClY)Xc7<w^_~XHy~Z
zvMESloK4~GI!`v1EBLI#dG_7y-p#GgI}kWvRL`g6l_kgk;(SWJPzDkZ=Tms0>_cqE
z&>477b7&gBIeGRD?~R_v@vl8e6VPO6`tm}M0L;*|475=UFhkSWLQ?n-65;>Qblu@;
zkuM{L*bEIz<J0n#!zovi6qgLU&zmV5m6nS<n1CIXmf0JSfE|@a_GX{x=OTR1j~%?v
zd!W@gN3$YmHqOzk2oU2O&58gqjx<|HuNGeu)@G)27FoaF?_Hn-XQpu?&3^^$8d}b0
zvE>hX`&Q1fp}|Do%}Ps41PSO_=>m}{0SV|?X(Vb#(#4!>Xmwp^z50;1Kxwtm!JyRK
zLR&oukyKi~DGCx83)4tM|3+a<ld!fTowLr``LOq8C9oom;02$?Q=5=>tJvTE>V2Yg
zRa%~(fC;Eo=^~MS1qrBCX>8;uB5Ok0tYts^)%#?twYD-~LYcL;G9XDPEthkUKv<i`
zaz2o<d`-jJrgYBdZ1CT_10tK!$OJqB;HIR@mb4N{+%aNuWt_Et%-gCAv<P|e6p&le
zGR6Q2$SrBa82o3>o03*L*t?H;ca`mM%8(j6((;=UkU^OpY2>szLW^s|+U|7DPwf4U
z-p2}dlNRKAu7wub-n4QsttL8gJ;wgq8)E05*Ya5Dej}f~@VGZq4FRDR#8JgwTP={N
zVlSyh_6idAx;Gs;2z#Y7BVxc_!`hc=^*~yj8A%?>?MuruBgw)>b$^<&5#&~{r4}Aa
zD+P(VX%_9|Eh`0KD?#l%l$HlqkObJFG!Cxl5aL=2*$%VkJ9#@iaTw+K$^#~f98Sy6
zHG@Qv!)bZ*6eI$T!|4Y1^C*=_9vU7_H@uIBhLS^};o<b%_wb2#EkPWmiI;4S|6$-q
z?db;+wH>vmA4n3V>35N)-?bFpolNuO>EA$bO8N(ou&k4|Wq}0JNqZK81ky>Gg}Bz>
z!573%r*nQwi_ad?B6T|LiSzv@z7U2D8(Y@dTUK%=t%%p=z(n7ip=RHVeP@XJ<Sa9v
z^tLNGo0e~ifC-ti=}ea12!RZ!U)i%ydT-18nwBs7fk|ANZ8b1(555TWdpf6IhV6RN
zJ2CQm+QUDJ><N<&7Xh4oo_(LIC)xaddYE1MyJoWGRo-?fJmT>$2?FmTO&EMe6(scP
zm0{VZybq;%W#pzATnP2bVB3Rv2_aCgX4sggyq#08W`yG-E@$JYtUVV(clF7z#M9mm
zsXiHb<`(8V-#!^Q9DL9iWiSAJGpzb)Z<};q2Z^@4eKSD9uf8j4v#>TSgKsGueA<g2
zxEz*&N8x$uX4J@$8GhIC1`rs%kr`>IAkmVM8M%o833Wzhu!;GU;>u>!&IuXis>EV9
z8`53NSU>*VJJnSQmRKwx0JEBqk$w{-FHj)DLy&-*kik#mEH^kD6rN{oeAe4Wt(@mz
zP#`}qBexCB_(YhOk-sSq5*YI`hyrLaX-3q7jJS{i0wov74xwkLeL+U9DImG5ZPd-E
z7Z+!^QQr!JQ<vL8M!h&A7d<=$(&CI<^gse>aRx^H8ufJZu=YtN=j)6samLL~z)@L0
zclRE0g+9p`8PVs>sn1u7K5qsB;H&LE2MO@icAtX;_-g8N{uV@Y>hq1(;upLfT@@Sc
zP68KA-I$R{caS8NksqS~35<=IhF8-|glcm#F?>?sCGY=LZgmi-o401<<!#6SVQVHS
zcG)0-ur*_6$(s|o+w#5aMV5TGgFzj>J0nxA5CX>TOi;KmkW?sx-4zX0bL#KCa;QL{
z<X(HIK%(Scd#FI7<lc-uRLv<b@s$`VcF+HLwN_s_Do}RvD|@6M381g+kpc;zuV|zY
zM<{BGuy!PqbDoX-Kkt`?M>6z56!LE^Fg)7PjB+BQCjLV&yeHW0k9)mr*1x?~)!+*+
z4k=(C%}6f}64*yG^7;WtEG0)X1t&6MDIo@5N{(gJ;~BA(NFK`lkdaG?WML`!F+)oU
z#kMVIEKX&VdlK!_Z18`)cXtFKW*8o!y{GK<g5;ty(gz9bQyKXZ1V}6sr!wig`He~<
z#gWdbOy(|ghiE!%;}=%(U+>P+U!0bb0>5PB*HKz<WB4V5LqNQA3GGnFId)UE_kmXD
z9KFaC&e;YD86cd?$j_31q%xTnEzPl%j%yj#-puA~u(nluWA4zKS-j21eN#)CCquH_
zH?;(TrVh!<?gt6TAzA60Kmu||7V~7U0<Bs?Wo>j8zdO9~HSZ&?YWypP4G&OmbXMNQ
z0f};>v+^zuNDSNPZ1I?^xQjy!8a9<><y{=fK|isqyo)1Q0Ag9(#lZ`Ds2>93v$%^>
z%<tk%f8ATRDQH^>>e2C8c^3!5C_6rj1EgnpSx_}uC6;)M<rW%AHuM9-Wa+-%cBSCj
z2-KrBS(%1w$$PXWi!>blvPnytTvOSwzTSpUOwGzq&4P&{Q?qhDf<!e_v+}$TB#dKf
zHrav45Jd7AVrsUiJ&z$Ihhm7S*_+$)U3g2HiPKq8Kkp5d)3eeh!6a^0dP|U~c6wIs
z9YLbn=~-mb`;o=9B)?P3M)dQ(QBmtaP@bmNfuKB1Z8j`&MJNJ@+AMNKluT<$d79bm
zFa5pcm9rfL%G1nt5GYSGI~x`|CKLg}>?}OuR9eYeQv9^gTGikCmaEA^r;jN$voI_3
zmJmXrg;^}%{9;l|q-M0GS><DE>;Nw=CgERuY$zSGG%Gy=<WO#DHd4TYOpq|KrP;!d
zVPX_y5`%k&53}m>tndtyhjJffrDu>Vc!p(J@(koeTT*6cWtP8L!5)0Yh&BfY{Rx(M
zr2-^WS(%lK9!Nm0%-Wu`C1rKiW%;7_I0#tHI;RIIx3kXaLCWo{%gRL$!a!P=m604i
zS-2^i^F>xfa<tXol$9UC&8JDcIct9i7bKp779YX|iHWi~3ukgWVi|lvkk+PogS~f_
zY(*Igeu)X0tyyuQ1SF`>SYn9x?vl^4GNc2OxLJgB4|5!7w}bT?;(fGa2i{<pICNsL
zBa6@w7gK<P=I$Il6firp^5u2#AhI)y^DBIs1tREz-R!xc-j?azSs8_b37OqlM4|KH
zy*&6(;n8f)MQhbiZ@D{sl-f=2cSoq*$Ee+3ZP4$k3ldEOE!qtdAjhcP^p<>t+WjMY
zX{5LH|5tUb(Nz^$`rgCMl~X;oa6@<mxfeL+o)?|)&|uyV9`a~lK*eP{VmG>G&9a?w
z_4KSY(~o6m5ncu`c2H9Sfgm#^-Aypyf?U8L4{0DM3M)KBKybirKpsI15JO<TT~&wU
z{JY=2d+(~+d)KZyb?Q{buMAcDuRsLP73!f_O#~0nHGcFh{pt8MzfB+#mD)5z@Sxq-
z`J}h?C*#+B+w>9h#p`67v4RKfzQMP>t&fl27^=SK?jst0gSsWnDf>{vJNTd)eN4P#
zsG4_zh_X6{V%~{i2|S3jTm01;eP;aDP&E|>5j?ksVk(S974V>McJlTbeM-DD;GvJX
zJBbJV7d+^EUHn<D507`Lz$GGhx+pK>%?u!xLA!Ya*K-DU2lk=E5xU7f%^1$paHirs
z1J_R8;rixY^9*clBR^!2ALbi;*E{;tiTQ?VFQ|~6Z=k(&Zh8jUf1$xgFViO{78+_c
z4l0-y8mPppf(dAm!Rwake@HAclqWNU2NoIdWSL-s2bLJTaJfDvvBXfO!-<8EU1Gp=
z*u0G5;DRcHuUxKAA6#Xq5Bos{Q<Z@?$yd;xNNy~;)Ce{62UqBqdoMLGJrSc~E;VSG
zA-~lIfTxxjD)j)OA<GOkDgvT5%M6T)wB(sft*qsr*J8=D)==phL};irRJsNvCPVG`
z0fdHHY8~a;T#B|jK7A!}ZC#*&BB9PuFFwHo4RwZ@D;`||p`p&emJe~pQZB)URLe^J
z^>B8Bp#~>VA=F@~!3mJK47m2MG)m->!5aC0)#>|+8iR6a*4SvM#ai${MWc}^=d6HG
z(P&`KN~toJBD%?tj|KpcY*K!v{~+09s4NKx$tJ_klDX8p&4$R569G__%|RV#q}m)<
zk4CD^hRTv)hNjI1vSdY1cr*`b(g=NHgfoB2|9z{Tks7>4ztE%iLBoGC$Rpn#QoaR%
z?nAzB0ipYl?^{6VK19Bytu%RL^fvzYdVNw>TOdNtY%|m<40s^YW?;FaM2Ntd$M~!U
zy{z<@-=I9PN$8m0AV6q1W~dn@AT%5^Fr#dyX;vO!^pv4}mHM(l&k2{~ryK+E2jor}
zY77K~+$lrNjsY<So-+D=Wymp*2x1I8ZA8u*atu^7$bD(3F;I~(2A(neF))up<Gk^M
zF%T3u3?w-Q0-`GCeeVK7<@x*G&7;7$B)vNU0NO4E#-ORprN9^zCzpKhf*G1Fk$17P
zHj<AQi$-X^8O|&r=ce=F>-3!7SB;*A?6>*k+w0P|yjP<h&ARSe3x7fJb>FpsP<)+S
z`=2m!KDnTSk8RX{lhqN3kZU^(b#FX)AktyrYYlqylu!NiHowrQKb>{kPz!}1Lgcog
z&Nc^x$ZZ3YAf$YV0Cn+~*Xv`lyMj{4ja`O1vlTqVWFT`>pUNlG-&K7I09L>2TOAOR
zcYUh^Lh|l?tLKx|=b55UO#pzRd8W!pfZ|V;kpQ7-o~im2AT-T0Vf9(CdO<Auni={4
zR{uw7^;etp@x5L%ds@=!1!VQbeD*fImcOz=k7h46Rfysr=v{28TnPxhi%l5aL)!|-
zR#hfnvq2x0RTapP)vHX^p}+*0Dia-Qnvj9jtNHgE^y%5vfe2};HkG3agw?A}`mBat
ztQC;i>r%hjs2|pf>U<M`3KP_s$^?MWQD>?-G$09?7`!e~FDxKG)Tb6~(*HGFRv+k~
zRg3yS2RWqPRIe%_10D4yMkLXb3*eAwqp58)Q)e3V>~J{<5C=teXh4WJnyNzsLcGyb
z9U2fFy3y>r(UcvU2%<x;HzONN*`XB;a_^a{Ln{(Gbd%|K=mJW&oA}uj-Uw_mRVM}!
z#cwiIiUx$5O{Sls3uvCPtzq~UJzTskFaSLRYzquP&j8!}ID!aNY@;~(nnv5gSoA|P
zbcFxgR{eah56zx~W&9LU{OqClS(CNLHwK7MwZ{(~K&aY7p+jL%NDkk}M|_}9FWl!>
z21Hb5pI;e3Vlvg$1c1=6&%{iF-YgbU_dUQ{KG2^pIuK|e!yGWxhwI>hh683&zTE_b
zh6ASBL0CxWpectt07xG6Z3zg;gT5^R1+Q<*LW-s~*)@6Hb}X;71y!JsY6}`cA=Tzv
z6oOFHMi$+Y0gD#JqH~kjWpi%3o?^Y{CjALa5t(#BQhr_y0F?`pD$D?(azRpcN<gSw
zkc4GFrmqT%sLf|nziZVG_Q^S$RKWo%k&^>FG2;M)(Agxu6cbymieSy?g`{>R8Ohwl
zS1!{3lrqog{ln#;$>0VD6kJHE;0A<(3rQ8+fC%mj$-Y;TGPsE#g8O1Jayco3ThSnQ
zDXD^6kr3S9Bq_M-(nSj}Vpdz)n^q+C!CAdlpA8@vbBaW#ueMaD2SlZ+EtU5Gp}g9{
zOrPFW0HRXWmhq+~->ne=m4c&}TI$_e5qYx4l0g7~|7xuJHY4BFSgJ$eUudtf{2(Zz
z{9J2^{9JPxF;E-SlJY`rP)o`SwLvW@FVtFyfp4f+7005ht<Y9J?y`QV*J{h(9bHTz
zP|u66=xeg;@vV#S8;DR<Zz<mcLRGy5--|Dci^)gp_>ZsZC$iTCGUWPomM-tl0S{!>
zS^fI6B{Xj=rjFFaGp^}XSxxw~N0mdGnyd%JMl#}oOp}F;WHhK16MCN?x`y=gzHcoM
zA@aU&EkI(rZ>?f7^p=K1JJQb<-%udJP+NRM0Yb$V-%x;1v4sq^2FF81N@CF#EA)A4
z)^&Xdj)$`RPj5@eQXlcEZ}l}JKk{1*B6NM^TM7`mJ|ass(RfgT_C;GQ+;uwp2BmWR
zlorMxkZZM6oC89x)lzW|h>&Wv`hJR#qLm3Eh&VrBMGjgr&J_)EA6qKU6$x?viRCBp
z5;FW@>j$$kP!NA0$ypg7s&d%3C?HfGzHiYIg2!e2O#py>kNbuNgkg{Sh6RMC<Gx`5
zg(wV5UmKO;g`O4KX@@hX@Y&ZfD?4;8Ey{m(S?|Sn-PC`QJZT}*(}_i;*cf)k(#}~C
zy1C>5V7W1jXgqdH-!k#66`3Fw$K+pV;8#{;><=g?_kW4vtNWX!U4pvb``X|YBJtR5
z{dbf8{{Lj@LGywYDG9WZYc5*2D&5z1)zZF&HmuXC$|0)}jUT<Ox0PSB)UGvAIkJAc
z6?r*ONA|pK;i70?-3?2-1$A^Qq!2+`QY6~@CP}dCcb2*XQc|F|!&0|RN(%Jev?4?D
z?koP@((Xd>FMY*04}eH~;`jPXIbBwyIH(jo@7}T0nNLC;b&75(QatLGQt(&UVx-6c
zfZHo<70ZCAUWKi)1t3H#Y#J%350p}PRobcME`3TkyE2fX9#Cnkd;u;<RociGba-zm
z*=>o<M|A6XBbV4JUw{gkCAP{JfRI^YBVXL39e|~P(Y3bLkXqiY-%Xp1pE9504^()q
zt@1e_)U35tJ_m%FwYJLVfarW{ZKJ`K`J4zcpV!;S=ksYdSSjV1=2T}7_CSxK=AazP
z?9H}%?*b;2(`@&W9SsoWG~1Y3P<kt+#J<&*V*&sqx7w;t0zz`Dt;PgENN%<LF`<+?
z@D5vy3F84!mmNVJ=s9>t&{mqR?FiaR)3qHo`sCUN(J9N&)$GthCv~7F`|oJ4Gd4cE
zol6U`W#sU$Q?EY6=7+Pt_MHYQw0&*sVmB`_LEG0horFS3zKq;+k&o!j)@EM}WXRDM
zZ8cK|4`eRdn5i$41yK)4^@w4d7}ajeZNtz+s@m<oV!@CggxbkP`$a)L@nWdM))qK?
zS32AKP>0>~$GC}{Y5=}lyrvI(BI}loqdsWECWugW%kJy=keKXYSz_038M(5PXJoLV
ztWG;3hc6Hz(rIVNWokf(blTY1LnlX+k?Xp6c?O%9)n!NIvD+X*q|5Fv4k{!bh;-R_
zAxfJG%E)Ei{JRYHcviO^5!<(k2$60(UA~6}gh;oIZF;m(xQwRK_xQi`WhL47Y+R5j
z+d^~adv=_<IW>*u&iCxXV%2=C;LUOPk-lt3_8cc71FuYMfS=<G7_MY!`FxHu>QS+U
zxr|oy<~sbzekf;dAVW*%a|0P#I-g52^v!=6EqBj%_|AT8`tbQqM7~%A6*BXke)0ko
zK*-E@vPZCb`ao+;EXtkG?o>&Cwzfx%J9zP32wh_kY0+hlwu0Xr$O_8wOCEawI<zfw
z9+FN3gtlc4Hlfh03lP0@nUlG~k?)6yAl{QKcd#Rv4k}R;gx7Kh@4M(wBt@cEC(E7U
z5_W@vX$*zhyN)(F^E_^ViH+>phwpiqeenWFGJSvn&U@EUuVev*fI1r;5EXmZ!S@8@
z5kUChU1#(paqJ91@%LjBSp}uTF_hUF9PGWk5$3%|_RQcJadz?Np!kJRa5Xq8SAiXc
zH8|>F5fIuM96T(_!f461!AXo#g^4#K4bI?^>>iqn!jKVL9Bo%>R)YN@tsFo7QYa&~
z1f@_9X$eZ9jMze@NLy1zY;h91U~8I=K&_mPY<D6%9XTCQG{}AEsOg9zVLGzIq3Ouk
zAJO74?ugmvgl_VGPO>wxeNNgyvCX6}<(vJEHcWixkOV}9fJOgH1BBJ~J6Iw4Ba8@)
ze-EZsTPzliA9OUa@tCOKI_O~IahYHO`jj8C+1U7}jye+-*S`?e!6OMRXZIy@e#S>S
zEGPMyqh*s-i3pz0oROp0YuHByj0|zY!C`ovJ@|~#Jxfy`W0QNh2qe+hi2(v9oZ;dL
zkRY_4a7K<JuLy|ho^VEuWjLn;7^eS%f8w!%_!mLFXi5JIs+X)gBJLzl4ny5f2KAyP
z{gYHLbR6hGemKP!3}eNKQ;s^S8bt7%a`06i4htbB1jxD6xnb;ZIC0L=L<%4(xXw8^
zZof^o5INv-sx6Dn)DoA2I?=NJWvUa+`yqv1-_9qDU?&pojwa%rh+t}Wa`Rc2WWt-Q
z4qh^nbr0?cYEEY!cQ_*-L7LJcV`I@yCp6dP&y8Z!Vx0~iMravyEM<Z&N9*P-qgZh{
ze#!g=I_%fw43J-X1H!yr4p!$WIsp-#U5?p}=%g7F5kw}q<7WazK^5-!nLv>!6WpOp
z(1E%`66I95S~Bx*$OONAgtd<Yl063h!EF_;>X(3mS8W>vM4c*JyxGCQ^jaEj2wLcd
z>fA6LOwVWUPaD7spJzJ%>{0gH*g`igE`q)v1^sKTmMy>SDbHci1fcl7G7W#C!mqjT
zB)y#JM|G=o`Tyjw>_nxjiI16x3Z_aI$p@Q|0f82|{CW<{F%|`yBpI6U=nf`Sb+M~G
zI&>f}JMlm|e{M8OPk<m}1AjxwVi&Qo5W9iEj_6;Jsv3=yTC~E|WQ>Cft`#m;IjGA3
zLg@-OXQBvsf~f8ack~2$36H;FyIOuEpJl~sUDazqgo;`hz2+6cgOFdz69w#7iIuMQ
zn9@rjztYVwU~f@$^`n?y#osGnHRh_IE)?^ts4h<<y2iz#YuwOQ*nZ+*e)yxbbpHE7
zR+L=h;(HdFbC1LG#h+ZQ(T%XXbRz0F^?X6J)agR@YIyXY-N+abOY%Qx|BD;>)ek6W
z>^c_@7&K0gqp)pqwT=9b#jJ29e#w(BL5B^R+=u1p4hX3x7rU$|YylCrO|HGsm0?Q+
z5w;s#HGnA!O5ebTl(6*l4K5;8Jc5ryG(?+SZ3~}J!j8RwUouKThZUP$^>Hg8s?h8X
z6^RXHQj|8kNFcHb^qAS~KC%T>pb-=QqY88)V#<w-p!>13$oN=vyBj*d%S##Wg}V{r
zteS?g@f5ndQ&t&E4^Q9isz(7(QQmG>otp)S@^-tJpwnmth-9?ejmgWh31VI?IMNH*
zaj6#at*Oc}49B*#25PApt*%<R9WR>E>SE<qs-+RP)lHu&9E5*KEm8W&b2AkM&1!WY
z@yixWD7)1y`6;`FbCuF?E7K7-bP;iL0k;~w^dG6&<M8?~cEnXXA^TI4kD^nF-f9A(
zQo!OZR~jG+IO^gp7dGVr;?Lv!&yTa`635ZQMKps5p5tWyN*c!cQ@=cwGAFPfg%hXz
z?g}cAspB_M%=f4MdX`U{$TlX<y6RAN5W#fT#nuaP0D6DwrRRBk5<8SQ?`k6CAW5C{
zJcZmIsR`Zi0)KEa+nc!HYH}}Uf6)yuxOj_R3V%Nyi(YoIyZ774tR!~X#SS2f@y98~
zuew@0#rWuQK!h2vocIBvwO3tru?8S&eAUIOIE5J?!tAO$v|U9y5k#b4^CMkRP}ys)
znyM)hCFpAu_RqmXxQ6OGH+0AC5zd?@-!U{DNPAFbR&xr=e&{<l%@mn+0Qste&jvBx
z;pYhuQ9=jh2^=(=CT^g*$=6R|dGVXBmMdHYB6x1Pcu7iQ>;Q7bEgqT5isQHZqy!>S
zDJjt_`T^vh+x!<(*_ilkR~xPLkbiEwdHG~N@Q8<uol{v!ywgwKAcCipk~i&fz)erI
ze{0Y*_E`LTS1VL{C`o?rmXtEuGJs>fF!b?XPh;bau7HP<WEb(g3=d9-Men(xd0sek
z)_o&Az`vWurlj9<@qUy1If48+$J6F|yt<g>lmkOC2y*K>ARIc!8!Dfe0MW!b-msqt
zhXTT(bG)p%o=jat5Du;IRO(U`RI9>M4pk&_XoUxd;z}ef4IejDdZA@$sO(o^zWOPa
z!AC#O9^xaWv%RrOFD)UwiF>9nta;i9IXMJG?SRE|Mj9Z>S>)leGJM4eh(DKj{D~Q?
zFtH?HBEK#nra^)U=yi{;pTXjZ*F80t$rO%#-OJ5WOlWnL$1i~?UgfD-Chn4gY?X&u
zrYSVRvu|+g31-FL@Rav6g=gRJ;C<RmlS!Vf=D&P`O&wD0si7N0=&APLeOV(oV5z4S
z@}?QAKX1p5zBr&925}7(c$a#JxWPgnM!`3E>`68>{-&pr3yzTi&zl~SOH%M4DZa&@
zc#_%iw>(W;SA>etyzea!`~4&jrhRX7PCRc1Mxa^W+hl|xLJuZ=HT=|*%!t=`njG$N
z_6vAwJbZs8>y9}e=YyVNi8%K(@tqjTqB$S;@ST{{gKy5>;m<zBjKn)ZyXYE=cf9;U
z_97y8Vk}zg;R>GGr`QXzS`TO9Q>;#;SY735t9h@P7+>*Ao-_kGJiW>rBo8G9gu7OG
z$YYds01>3CJZH5EQX+^Tt@DFaQBZ?A{_aec-n)+C@&>jJr{NB!^<HRK>aR1|ueI2E
zKM)5}Ain1ZB7fx>7L5bSIK-b&^&W*7O|x)c5r%ud^cglR-sBq>MDR3`aWUfs56}jF
z@)=f^*x;#&ABaTtXbMlG#6Zd~&8dQ)u^Hibv+r(D!PQLeE)z@$!xaC^vutc4<(qe)
z2*VVG%^ax-aoCdjhks(Y1E(b@j{>oU%ENjqm4`^&$+MqhA0&2qTE56bAcAS9hwBrk
z!BdlB(LG+MmG_**rl#*9PtgQ^5_xK`r|tLn_EGFHUN?(H%Ymi8@GmT~*Y_77+O^mB
z7a;t#*K_tOe-T0WYoG5gML|9G`AJ2QD5>lt=WQqF;U=dxFZ4Nb%6pN)Df4+YT8p)L
zX@f*A!QD&PdIl@XQ5+DJ0+y3*K&U@LwxEvtF!}H(-~0<UHF4Ba6J!v<bJU}|%E(?1
zle>=bA+y=*@nZp#pc2z;!GpFQ=by}GFD8!rJ>+5G!s8y!il7VmCdZ;Dy$}Za7ud7u
zCvg#!i2liB)6<@IMrLZ>{sN1>1S~&!!oR5DX-}Q)4Ty41d)S~yeE<+PJ?&X%lud~s
aZ2F~dQ$;}wzVvOXNMzG5`OjZu1^)*J$FYI{

delta 46497
zcmZ5}cYqW{_Ww>#Pp6&T2|KepVRvSB7Lc^NWKecd#GJEtdS~YDyr6#7?}gue&n4%a
ziXf76P!MSa$yqY4k`)951Q8GrMb_WvRaMiR|IK^--ltxrSFc`G_pI68XzYeYU3z$W
zC_TJA)J492k17Kv+5;Z-Rlj46Iuf$<urHpo)Bg0F&(u8Y?Snt~Y90@~XsKF`k`q?@
zc$HfdkF&qsuRYN&&+-w|LtL%MlB7aptiD5fiEMU@b<oElAUw+c`-9q-O8F?S7L!sQ
zD2?*Qn>ZwtMtR%ZZ9UI*@Ng{a_K5ak#aOQvk}?W$z2OpvgvwZN!}iu7jq8A%WfwfE
z1-%us+;Y57n&pk(AeFo%<!#Z?+U(&<YFM4m9)3dGS~1_NrKOMxo%!C(jSdN&`QF=}
zwFU|uUszqp?t4-jT(QvA@j+*yH`77t_@J}Ud-wC!P|*llSY2kDztM&(70bL@zLe6S
zw9FewIV6;pc^lnm4fAs2^su_l{^Tibgr{<yS1XiKI+WIViz*xvO6$BgK5WfWEk(@<
zYdgI;U)TeGr!`apJH1AU^#@B;c}Lc=wa;jOYF_JAc#9GfeN*cVb7Ud`RqKr>tjVY-
zXir$%<5do_-#@EOdIY~LDw6nUfj!<_2gL)FJ>D?yS$YbTJ>F!o6%fJ(p_Cl-daaOU
z(sQG?8AcuUvWK42BJKBi)tjsWE7y6V=0ktKS8e~_Of=vDulj)Xy$7{~VaL2V^Vx*w
zwDZAZUL$HvB#S*XTu-n`&uf#*Pk0rBn+qoFJK;6`4hj4d-ayd$7gxc<)9keuw11bM
z_A0qjhN^Vh>yJ7lR8D(iajPj;f$`t5*o#`lv)?(5;!zYd%6CqqfCR#KPSb(}!gtiP
z)Pf)lB9r&<CLvNZ$#>r3yRCT&F9Zq~?P)J+m7eO0ZYf^0!$ogyM&fu;%0+K!JBK7C
zZ~H3ixXCdvy8GFo&e}<}x}Pe$&!eco=%?nENhP!<$a+m35*Yo|%4XIaj9i$CYK^hm
z{#l!++&0F=@DW>;LjXd+7^8;kNemkOW7HcOTH{1rw6HcoRi>(Hq90o@*O<=Et}qJO
z(Z6X=)qwBxlLn9pswsw*N6`Q>L5&phaRd_MXo6ZaRrOk7%Yb1T8ZAGpO;pt>s!ui~
z=Rt20>IgB@5!1rH$*Q)(W2JeWFtKK+N;VP7ur_a*(bgVCN1K2p#xO{jGDD3Q%lhbm
zoS~*mtvWHx(0lV#HuMkXkE34Gv<~y!b}`T{^W1hZfHO}G^9c@H4B*UDOUta$3P!OK
z);>^k_S?6;rWJWYAE-u53}c0c@rS_w+!)su1Ry_jS_vc|KUC#t1_{UyRgC7($TS*u
z+A>vH%{siU)z;vbXk752w#;c<kWgEuMxwlNL85V&sfDX$;}U~6?s8RKB^y`rptr(l
zT**S?uH=nd%`G7Jq$<UU$_yL&hIZp^AcW&k6a}rkPR$MSW(5hG)~O-Bj=*%9BkR;e
z(i$MD0&<h8+>m%H^B~LA8Y$NFP3`4supBs=44c$kF-xHixJ_zdR-%)u-=x-WU|pg?
zs3@2WJMCR>YX9_9?{qO}GVD}yMaM%37(3Otm>VF0u~Thu10Oehir1>F`CDe9H3(?d
zIzt8|G;5t90}`6G*M<zQ`93jZ*!F*D+Rgi16Et-2K4;885<vT$F#{4n`)JI3NS@Cd
z)()vTzo;zoPi=AFkZOdj$5A^k4Vkal-hXOOmVf1RI+%d^${8yl0reG)m4~?s9v)-A
z|Cjb?^)bg7ui`<ijyYWfl7yTt0ttj;)J45j4uQTtV}JWE%~Yz-xER#UXVhHb?7Y02
z&!|bh)WcHh<}+$Vr8Qh&fV^zC{68(KbhzwdP~TowbNONqCF<MDYDzdMkfcOTYA*Gy
zm-@C&wR^p#m3unWxggZJb*>@QxpiuiubiX=kUF(_3#&g`)`yj|yDw)DJ6EIi3wQVV
zBGj-xzHs*NDP`=Lt@;D?#F7b`&uDsz7U<zC&03FfVHD7d{nAByBHhcUBxxW*hC-cQ
zzEs+pig67ZWMB4XS8aN#uTP0fA<p#`msodm8JO0ewd<zco9gdVN~H|NGW~t^>RW&0
zGN|-GHmRHTa%P}w5XCM7$)M$4R0`gJ`Epj-jk{~hJYnYZ74cf}g>tk{xk1!QERmr3
z)bW7?$Y>v?&dn&uL(_CD`%6!)V|uJl;b9&zAv4z3un~`nK!Y65Huuy9*B|dw8gPrj
zB(ASfW9xhL6NFH$DL$oH;;6!Q^wgsEh+f)Lo)lPoaF75LruZ;8p5gMS;xy*(qdk|J
z=2LjTL58Y0&4+%&Fb0X)GlTW(qdl6Q;aW%G*bK66Fjg@LVIVBDf9|6VRXQy6DUGCg
z6n`!BH7$2Yn77bZ(b3AcG}56#x6oI4i?y3N4y!^~wb|zW+TOJ7Q<_U93dd|;tJYR8
z3}*;oZCGiq8K4<TW~JK@2BcO}L#(1%tcJDqzMNg`)F5qTV7(9V3mO_e3X^yvTQXSd
zSiaGx=u`kPVZ}zDk>`*wa-%O8vTo!mc(|E09HO-^-|VW;tljK0#7e62S-aT>XWyBt
zz?5xl$Pn$1<=f;SCHDxGZN6f$f`ddU+k9BTAL1&YcCvaywMRPa^hx)tDl|oR`eYmd
z5(qne^%_e%X^QUjl~-76G}PD^){gjcey|q})o%3$j`$Flwgj?|s(g(3Mry6gkNM<c
z1ty@5`Ap%IK?3TS4-sW6u7Zar*dIq~ZOTtLRrYa5b;4&9@X|p-<%F-W$ZEk=P~}tX
zlaX4h@>8w~Rr!<;9+cYI$E$qG7cI1!aTNfZVNFJ9Ey~ZhDpbcaK0~ZnKJJFj_}~tO
zVHmCFSiezPo9c5;EBSb|b<US78WtoF&iU#K9|RJ`oTITkpVmAd4dzSi>L~5K4wqaA
z3bro!WUvJpKwR?4s2wCAF8L5zzJnPLkEeCja^AL2F>So3epii;8?UPAVXcp*4A4|-
zlGoBf_cpz7dBn5ljnO80?(VCpWmXWOm3W3G>!+!|xsHQ!`fF+{G?%~|qbcKoH{0jn
z!P^ke9yLyzrL-Qasf}E1au?$?wKD=WSpvGq_qL`^@mRyiiEA_zrr2-3qeVRBQ#3gi
zz(sARXfi4U2`i>(7|XYF9Xy=QKA520Sv_5o15@Mslj)jlFOVdpg+-@<1j2L;own5C
z5HM_+ed9!}+E>0zQ%pV@G(I1eX|R?C2S_L_qhc$$4ycuE$~3Kc`ASU@;f%&7z)CG7
zVsnrrq?OgPI&u{Zjy23PUF%e}#<i3ds5M%yhz~VBIM!(ChO$r^9BZ^DP5D&OXl$%!
zU8ZZTtJk{-6ostU<nV$F>bhR5Unvo2Y^>K>w6tc?@Y2W)Zf57FYjbYd>_TY7)pGfA
zMKXZctVvG*5)hj;c!GJfr_kU8wS$`Sm3?rAHdn2|PZ43_0rU>K9YrzoL25DD2I46q
z%!69tSDFaliNPbxFEsVACc<~ggWi`giHGl!g$VPIM&bK`6t@9BcDk+<CAQkeJngrE
z3J{JJ6md`2O);rq9MGognAE#O1DIiT4jcTjR$DR0)iI$nM>j>Zk0Ah^IXa?!zI#DC
zh1CW2&}CYQr+R^YZID^$js^O)L1qDCfga{dHL7a?V}V|;fi**vn;TXavs25pS=EbO
zh+IG{b|G>Bu~-i~<0lsoi}kYl)>4C4+8<Uwv3IV}s@3XGTns-t?-Tvn2=W8t6Fn_r
zElu$Q;}gB2nYDsqEltS_tGn%c*J>S=>fJ6z9x!(6*TzsDFm~(L#!wzGcIz!#S?5Jn
z^3kts(|YYf^+6XR9}ow1xi8g}d_Wx3OIyleNL%`YdYg7u9a1$gBM?^4+COd3x_ECn
z>tY0eaaPZDx-I~WvwDFuECawetEVzn-#m^H3~Pf8WthEWGn`lreu`ZIrXyem8@VE>
z0TM8SjUuOWgMb-qpmW8r3}RRgHnPJEk)41zZN;H7#84~wrc$!tC594<HjtVU3acXx
zzJa{`pKo@4<qcN#mKk6>c4=BA_+s6H6mUiwau*2_MUSMS`7RQ%2Rx#|caf~_Q*0y0
zxpfF*WQ;Se4K6ZhoFTW7Pz2C816zVoCOkeS<YFV|9sAZ=ZKN7pY+xHXf_h3Phq{y<
z-=mGHTIxW93FxH`G)O=%HNrggMJj+^YGli-yEp<KE@vO@)$XZY?jlh7XSs_&?sd5l
z7P~N=yVvCgawR>45ooy8?3R66ud3B91o^VnE(EQ_tBtVeYMndV)dm9QJGl`sX&qDc
zYj;<#a}m5iSmz?p!o1FqYogA5?>Yl(;uM5`s1}^>XLg_c+BBu=GZzC<iTas~K}+*z
zPAfwP<$h)$l75XtKz1*C`3vp!>b))kt;~B}1oFOn4UwTlspNh48kth7kIo@5Fi+XB
zFSUN&mrfZ<gij8g``c4SR5*Q*P&#G6>C?gk629(~Q7+bDB72)b;#52d2WfEuaFF){
z@3F_N{-VB!RIeDec0?PXR9|t;)nV=x*Ie@0SKPiQk9~#uekszAKt{<u?d`{~bExiV
z%IO6zYSGh_n{JT6=xG)TzXuW+Jxy#;HVX{++rjpx<JwkF^<WpngdKxTIlOg+{O@2>
z4sVda7;IvA&k-XC{&xiX^rSYgdV~u>?stR>LGE{i8RnZ4m`?6@gxRn$pRT$B@5@ZF
zZwG-2FjG!akkDkNoTMP3$xLUG>I%H>c#}`k+dyC(jdyME!-ny$4di>ryVW4yJD#f1
zGas`QerCCubK1W9w5IC8<))FemQdJZ&@5eR|NeWe%F}ACDc3P@0k+nZVGl@vtu?Wl
zB6=ewJl$d{1&Lu^_NA#M?Bf@-?w$&;#5xE8E@9^LVFVKTTg*_{8c%I%(7tR38+}Qe
zP_e@l8&zULXNOtLbLB)rXNTFiiO9zoMAov-KWKw0YTa^Z;?<fm9R(Q@GLd2!NkiVC
ziFd><y{s{Bt0PXEgA1i2W?VQOkWe~eV&H8Ql|!?hGO@gW<YljXp~r0XXKk*h5-g{3
zG|x_%a*;RqJUeA#k$<NMdtRi~rdc_&>@Tls<8#B)Fi<FMi})T5J>633vF49k_3Mj7
z8fd;S&{H(YbPGmMw}3_wGweO4Ugb&8u;gAITu99zskJZ_QXpsAEpzqtp3F>3;T0k-
zu}SJf<mBN6v_)3VMLV9Sw^f3RETk5eqZfQUY4ZVlE}*Z>eqhOz0+>+#z=GcyE`$(O
ze`G29*sVc*SPg!Ov;uN5ko(Ajm&8g2Ec7tsGW#qq1>Kxc+Y1f5#8O+*LdH3}dLign
zms)D(dKRksv4!COIw@c;v()<6vw*d{=2tv)?}}fs(0MC=1%?T?%2Kn}gTX<qw$$d=
zv*2#l{K_zRkF}P1gDX|j3*n=>&Qcq?yk1^R@Aa12;CdFO?S@|&hS+E0ucQ#lZ2B+!
zUS5PIpZv;v_}k5vT94psoK{2tu*FhKuP+kI`PN_I7hn_pE3imd-Tte#h+>-ksz!y_
zJ6{j~8Sl4Gtr~2<oL&MC9an3qH(t*|$9-mr(1qIyDRkWD7S2<yQ$)Y*zP|Y(g?`)f
zD@F9%UJE5o69W+wOZ~!9j<81y^r<!YC8iECdMNY@E1i)e5spIp!YVy-Z6qpQJ`%qq
zEMbJ=6(jMGrKYZDp+bi(HGMq`*k94GXw7E~pue`1^Onl~9?@IW;J0H0WsbgfjX<p-
zS$h7O5nf@$aZ9a`@Lp-e33mu^7K}LQjvdYd_BX$hLaUy_bZBxt7@GC8+ml=q&HC;2
zMT(yM&QjZ4QxqL})>5mlXQ9Y*mU^?*iPsy*7c8YD+d9+ff8TiX)xTw)|L4nZv}e<!
zddmzR@Q4%rO{uX97BVFd!|x!=blJ+Ov)GSO{lV~M%NOL1kf)h`gtOv~kku6GS{fwJ
z*81=e5I<TaDJz45kvj^jKUr*Qp<bH)$x?WbM_dT~L_%pU1nP>#juz^f^c714HV~p=
zafO6RxeyxcXN#2;>Dlzpmcqkx2vN8FOhV;c2=%;bv6qVUiu6?%iK=y#gl<E%kV@*B
zo70yqDAGHHyXN`|c&&IQsaq~mn&jT=i5wDWo<R121Vp!7q%`kCImi!%)$Z)UnEpVj
zyDLMr>P|8baT!oO*wUE(NUBG!^v=TL_aGVcJ#bK|o~%h+@0#lA;!vG>l1v9KgF5wM
zpTzZBQoV9ziWP|;$n+waHe3e7q&I7r(A%YY=gQthW(P98N#<5AgX!3Zy_L{!OZUlD
zcs2tDPztjT$xzcE`7<ClXBa!2K+_D!^%e4_;hB|zxk^*fG$N$}nr}3HAOSHj7wddI
z6odRoSRKS_l6r&Gpj^4wfC-sFBtz2>=@3L{Y)w*cn;M*}@YEJDiAyr=xeS_S2#Xc#
z)u|!q7K%e4LrpV;WU9Cfnr0|_qgd~d9_lm=vLKKdN;1De++>Eek-0gW*^XlU$@(L6
zjR1hWs)<d{m|SIiu4;YbLHfy*=`7;0`%3hat;Xi6jd}J-JObpnTzE>#ZwU^}dz(0y
zDPlG$IGAg{oYH?%s^{j)U>98U%iLTUsDeb>%*~Zs9gx77n~SZ^aX3g|;OPQ3u~a`<
zwZMg--O>UVg5t6TxnU9fLj@2Ea*JYozhzPjE@JDl`aM;PTm;%IEpid4m_@mAs{<7v
zEXu`J=Lv2DD4X3|rvK&^+ePpK!OqR4w)4SGS~u+6AU}E_l5}!$^ss_rHWM+MwlP=v
z#6D7{FZb5qr`TEJ0bn+|hENo@F*huB)_4k-jk#hKAQVKr8*@uP$rU?mVj$szF}x{P
z{hRf50DWtPwKKUn@A^H7-GR&_o!@x#^_O3K^W|4x$$ZsiM5bfrjhA2f<6rGeLw%!O
z|4c4V?Rr&QR?)iom0o_;nr5QsE!p$Lv-6tiQ`J`8{fKy|qs23{X%D}8`*j=`+S9Mz
zV$Gs#ghgFH+&<PyZ{n>P?w5BXz(wtb`(-nOgwk-oJirHuXl1xR`IJBf$+u<0{l&i}
zA5NgeLD9qgH{Q#4YLZ1ewc-9Jp0xTS%!C}}O#R9`el_uvCu0w8r>mYCFhrB%F`9gg
zUk*T!FlvlnZj?d7s4;#K0umOQe2hQyj$br6F~q%sv3|7~zfK`pYCg>ezr1*HjR~~3
z{c8KN{}x4;jrZf`1sxh%7@^uEzcQV*zDa+m2EQCbX^>8G4W&Uk$uGwSv;aNHFUJN*
z7&^&cI{liV&IO3cuA!X84V~f|Dw#l=3PYLNUJnJQk#T&>YEd!s?fUKYWuD6UensQs
z9b6bQ->-||50a$(;R1@`6*V`kE%E0ZwnNqW8c)FzKN99gXddKZTxeVT${zc82mLE=
z4StI42Oa=#i{BJ@Ac41q@F=AO5|!KHkL*F^Xb=+PQwqel`qid<a1duF59qe}MTpIX
zzyj`ezX-$~7CLH&A3;(L4J)Y$u$_JpkUA_l(p`Rdyz8XUA)oq1pzlbbD{BetIw=I=
zpZV32Yb?xBz<++dt$f;s)ZKpdDQh%&x?Jkr18h$xee8n={PLg*OyW}ek(U7poCAIw
zR7nyu=72xU!ybByp-KMafWM%%MHdHh$@v{(t8UY8t~uma926?*kUwAeOUMB9kRSe1
zfKra)kUxH#Y-t)Eh}IAJ6P@^+gFJC)&K>gK($VTo9qtcn-}rO7=XnyBmCS=L{PpEO
zK7XCldF|CV-n46O*Z<<F_l=*Q4S7{Re9mdVauz=4A-EjBbUDOg`FH9Mw))nuw&f;>
zN2tgdzxpWJ)R4kB>iEvDzU#4WKu!JRalU6m@6;Q;@V#FiAApIPe(w*7JQ_&U^m{)R
z7pf^p)bx9QLbx#^c}>6fCvW35l^m++_x_HzS{1w;AYNj{cj?Vuy5v{H(U_li(<OgI
zB-=ouoJ-_GL^<#wAT#%h>hNwti(c}V-XqJQj^izQ$$#fv)@<6b`>E^d{Pufy>2o|)
zb&gX28w0M+FEhFzVNadEKqR<9qU1V14oDD60RvPw#_rL(cIcKT-3pi(BHi+&{{snx
zZh7*m8A#H}L%92P2pyXj)@J4946&cMS086Ios}n7j6C$-+&tyIJk^>&u|l5gKEX@$
z_hdS<9gpZy*5Wa}+dcF0)E2z%LJSp~pQql>yHaq_mG9=MeLQF{FR;Se+B{_=u)A3f
zHe5RK?7GKvkFR=N9(H5o2)H`MQS0;Icxh}14gfdgsXaZ`cA8sxG&r{ADe1&YPv%Z`
zu2_$=$Dh*Qs{&8>T1cQ-x8})a1&K!4npYsMTYyBPY|TTkOox(r)aE-_$EWo+FYd@w
zgv$bxxOp-H011^Hd58dL41mNK*pZjITbS*PfgO42yZ9I&0XYVC<lTOUHJr}T@@Nbk
zv-dr%M}5y8b8V#|a4b(|;~|8CkL4AK`!yg@@UcAHuMq{)bUv2X@Nw>q@D#<+O~GS%
zjUKb=XuZrMh12!}&+A=0&zyEkp`+;2dGcZrgiy-qJbAGQBq`<L#7~ssMJcEAipAwS
zJe8%K&MUdw`aLfM-t;VM`l9~qb7$Q$=&bH+o=kk^@f_CKJel|ei89XSA@M27K=cE$
z!DF%}6#Gz3&gR|ls5OGZjyzg0>+<YVFX~Zmb)8!b9q84$olB{%I=6EvrCdjy`vrxq
zdDOZC?CL-2hm>aq<X;;gbfaiMzMM4>0>*%RIcq=yV?aJ;jWCrm%meaE?v<uehM7zq
zke|AT-!00cdk=%zzyGX1*<r9-2IZ0myJb)=d2qg5@S%b-2IphJpQ>SI;+o#1{G26r
z@Gp9qH!vw5QT$slKcB|>RCentdY6i+`Eq#$6Hrt0Wl9kwpr+;{rO4Nwd>TQs*x6U~
zvE{Q|9U9QH@=f96AOoFQ`8fW^HUq_=I&+!*s@|b$u2TUpQGvPna?F4P!rc6jI5q+a
zgt_^M_vo5JK2h^o^Vjs&Rr6g0a!&JI1RiGO%TWgv(#glDyM-fQOf6uOU(;``Uf?3o
z3b?>Upon@wen|NId_JZY<YQXyp|PJ&27hFi{*V5Yr^81s2Ax5C<a7jtfbmhjj9Wp%
zijSxsW9h6Y5Y~3(=S;OfdR-r**55@PL2fJnH?}8VIgqc?MI9ZqxE(+|`yc<%U-#7P
z%}36S+?aTV7TuSR9EQt5Is5a~XRhHL%vTNr54X#O3cR9ZUDKgX`ywA9ipv4+m-)z5
zxg6jg%2)k0RwJ}QfJV$w_U6CzCa)gNS44IjOaL9t4~QTEBy^7E%OC+H2Kdo@86*(N
zm(HX4GDwgdS~`#BBS`2<jUAxja57(cD{<bFc?kQG&TPRTqkxtEKmF(n;EPZYQe4aw
z(F#bEd@^6gJRni>$^7tt_|zg&?0`<@7d&!3iz_|$f3$B#!Dxch?2rG}t1C{s<&Zh2
z^W|{>WT0|7AIAZ23uCc{oVR!VTTgjv&O0L`z!%T+&d2}>jPv<&^8gYU=ku}f=fmlP
zG=Pzx!Cg3t4v7}Vp3g6R4sQP%i;BvBp`XX<O;K`yGW<OPO2fouEpz)DZ@z55`XBu*
zZxvW#wSoY~XODoKXCPrkk3dMQ03cySj{sHx+P(&8i1%iVx?=m<+eM%e-rGf>5#Box
zYRLT;RDjSsfCIBJbjBTkOVox1a0_KsS3RcG;HP5<dBtG?=@lUdm|+1qQ9uG_SO61+
zqIi&q;)ey2;{zg!CkBt=hX-U7PaF}&j|hm2CD#&B{D?rd18>I~DTYoR5xC_k*|uC0
z<&6x;$XiOGEk_2jJX7m{!RC>HTb{mN5k7y^uZo0+9u>&){Gp?Wp*JdUOU-|2BA?Cz
zGX9rEBAq_^S5_dMK01)S>-r**P9GBx8GHvH>GUyydjC}<(&=LYw}>6EgufB_^s(3D
zi~Ys8>swKbv$q54)6Q^4b*9*Zdtx|unBw*y-O-*Bkk?8B{JzPQK++jVwBk&mfiw)e
zR39ALyg<%E`&2JIqy*;$d?9NM!Ydy?6ra!hef4#z`2m^U0u%i+KY+RL9GAh!c$a<G
zSAQY>Za}6paj*@UcS+`e00Q|Qd##`TMe4nPOxfY+nz$r{Ee#5TO$*px`|CGn7Pvr^
z16x2c-;<>nXUhV(qPe-h{<;!a7QpEc-F@Weg3H-`gY@Up%LDS7D45V)PJ?|W8Nts1
zSFp{4^x5eZ0htp76GAIUsEZH+xsr_-tarO{C1xs38)%ZHD@n)?BamfV6Uf;X@L0K)
z*GK2EYXV5DzKk+>YHTfgaEShw)Y^c|r-BLfwE>)M-_2#9v7YT2qTicd?=%LITaZ~F
zK%mi`?BLn0P3+d8de8KxfJ~@@3875^9CsZNLTIwB?CYWWvCLMde~_Yr&{k@)sdSc#
zs~_hBIp5f)hUsN`<a_`Z9oNy^4`OxDt^|~;0XsWZ@1)e=w{X;W0t>GMO!0yTNECA=
zkRRZ)9VB|;N+5Vu&URv8R3bASP^<VnkQ|utbD*sJdKQ3w4pg?cR)x3)Smq`Mm1#jW
z@m|P2`nJB*r~&O*LCeL&pv)Wu`EoHaC^H8jVa3E?WLi+%ks=0Jp-l>^Q-k7;l;ok%
z$++jj{jy}?j?|PO-I1bIBuK3~GpO92D9^CebiM5hAVlzwM=)Y$Fep|_kN}$*l&d93
zIF6Y?xmps*SIe0}xmrpNt(G%`SS|11r2zr~)^z=@>bXJbZ-adKnH!Y;79@(D8<hSQ
zB<Td<Z$A_b2j5p~SIy9u7|+(a7_@lQx)`*0)COfF8{~^eZBRzCAYpoKP)4#uib%FL
zh)DK?7$AT<WIz6%{%587kXs7H+=qfPv=8zS>QJyy>{CI)(nCS)Q*qdVmWAw*ptwu`
zf>UDp(=*t2Bq%QvfQ06epmUiZNP+apAiqq|2?T0<(zSu&>630vDV{zVly@Q^45X7m
zTqd{=vlV&MZ-Y5MvfhjIdjsDF<pDPmjC5u7@FKk;btWj!#lXZ!I1@x9ejDZ>QhnHj
zu<{S|J5pzZ@(>10$eg9V5Hg_7v!Rfwe?BN(Byx7d4Ppx3!*O8Gg`iTBsLI^Vo*#ux
zYIL#QGzFG8ib9qR@)xLYFhWo+Dtn1NyI8*~btx#%n!tq2r66`Q0uwE8nXOx_-<P=@
zlpYVYh0Nt3g5c=|PzYf*gmU)S&24>}8JHA8hUQ-MN{H${g&kX|-(Nl@B&QpgsO^-H
zDdK66FnUS|P`~9WcsQLsyGnn$V!EqBGjw{$6j_)MpP|!3$ifVTcS12RW;Q#qN*`V|
zJ0u4>m@s^HNDg$6fS4VUgA^o6ogG3$Ji-w`&13dz{jrL9A<?*irMWRLRLrl<6G=iL
z+!iMX4jPTOfZe!8?^eCQEtT&bLNcy`3?LSS<n2?CfLIX1pdCmNVu(z%?aOQQfT!Aa
zF(|UKT?~q>>`+ML0iXj6I|LukFG7ZB<S(;tTc?+Js+PGJGzFH0a>Y6fAz&;E)oaG1
zGmyYo7HZj=yQL7#fR$|gdcC@QB?u`)V|`^vCJw=d%E}Oe=r_6LnAB^TzCr(c#ag$U
z=-Sa*x0~qN(OT-Jk3@qZ(AmW1Y|xihZ*mQ#TSuGRZlYCgQ%GL74Dnk>o2bF~jZJ9L
zE%_-M^;y;1TnM^#w9SQ}TSwd6o~Bzz+d|0_?kGZZ>u6_4I0_JGrJW(^C_qAUXGl5<
zkkH&2avVj7ZXN9oiCae?(EYnz8|c>2Zr297b+kJq9R-Aev^xYx!LObmxqUR0bKZ__
z#?_O+(U32|-~T`!8Cezf^j7`J^s$hfYG7h?AEWs}w}pK?%X@<D+^Ww>p9smLUoatb
zf|`225CVCcjoYRlOrH*k93wPoo}3P0|BdYgA;GBc7~8H7Onv7fk%#z>kSJElr9pm<
z-MRy@(z%cfy1<0Yxeykoi}X4RQnyz_IsNQOJM;^l(A5xLXZe~6K=u=9kr11{OFy2j
z3n}7-8E~Op7eZ2Ix{yLsb!Bru)o0$&H7p$@5}*+38is@1A%sBo4C8L+Do>^pD><Z<
zu+g>pyfk>?EE$PQE`oWnS!kekec4N&>02{>!_v1QHwmG>VfeQ1>8L9l*5-r}k3Rgl
zeqJw}6UHk9Q=qJd$@2MOrDI}*hfVxeZ_h@2p}+JXI3i@ga~M58EblsjL}By8xa&m8
z8<3bC^TS2A@Q8#+1Pmy6emHhBe?cTn&S(L<^Gm&b<pLL!yxfAYyzvYffG(gWSQCe>
z1$etQoO9M*@TI=mA3PQ|Qr1SYwSa6r$-1A`KY8F}SX_1@Ca_M1Ga`ov5?Ck0IK3qU
zLBhb3;iix99X*k~%{Xz&AI9-6VL}_@=Ue@$2Twcpfk|Aa(jb9(+Nm^1V4ij=O{A#w
zX{XW!)Ir}-rCYbbZ_JnPTxcrrJE!V+3h3{s>V4>JAQIMo2<QA1w%<LY_wv;I5H_-i
zk5x57RlkgG;<W+=Opv0FKmzl!V=hQwUUtj{33D$y<`OB)y-el`aH#(nR&J5tbmj-r
zu<oNKjPS<zF)a7~Ac6j47<+&D6zD&O3vcEl08b_QkKv*Y)){))C>qwf6yyvWbx!}b
zpi6;K-|9l4P!u)N`V=Vr7oXRE@zmg#*d~JyPt~U&S7b6l!ni&K4Mcx}MCpAB@PZa?
zlR+Y6?NiXKe}Oo1BnE;msPrummyo!Oh{O67;KJ8qyle;zDo_%MJ8<m#KmXhL4ffUr
z{ho5LM2kjwod*@jWf&w%9aI2UL1QLL-8+O`yr4f-GsIP)jvZ1U7kkJ+Wk>;>88vZ~
zsG$X71`~xQ2I-VW%kR(v`MwdJa$&64J9E)~g_ybpIZFyWiPgE8j(_a@%9|Zue6jOu
zZ$AGDl0xtPpHH_xyQnYn1?LoCqR^c^wUAG0Hs*>xvV6W%3YaKmeu13HAW_Qv0?gzm
zxe6XGU{C+7|F&X*tHS50(+q`To>DXLTbzZ|4j-_ue%2>ceBkO(JAB}@17uLl2h<Kc
zeOgH5N9^6J`q)+<xjNJUA2|&G84@Z$18kv5Q54oz7v!8n158&~XpR=Kht}x}J)zYF
zMnb%?TtpS#RKVX@9{HW2wb|rA;|ZWQ707HZNI-8YKsNUjjlv=rtJM}LpBJbJydL}N
zQlq{72anNMsR2{;4n%-Z>lg<T2(@G!jX;nXfwcuCpJN14(vTRmX;MEckXtv&L0f%R
zAh&Lk1)$FguywniTLOW-G$wDRF^M#ZaYqGcv0*IYLEYX0`9%Pb(A`TtF_8|yiikXH
zcUO(co@Wm`Qwdy5rNad>V*wHsIb4tw`wEbxRDg(sCNfA&<iiE^MP`slF_8`zG<eur
zMnPN=Es@9V9-48pr~0^C3LQ)wFUS>Fupxv}ju&KalCTsA9xtfwz=M(^a)#d&h@b=n
zG`}g3K?z7`ep4WW5|GgRroahGiYWX$i$2C%@0~!vmb0!6lv_JnAVXk01=8698I*to
z(%Aw8CBMaRiiNcc1vy<=f7AF)@InDrLLQ>VXbk;me{UKA&x1b}$lwrMK>b)CgF}#j
z`msP}SV5BaD+ssaeNQA`UVbbnXltFOHjB}0=wd&dYrNv=&?O?B9Jr`Vmx$~ckR%n6
zuPB2=AzdPHa`R~C5)W&GBRTKeSN+CZB{VpKtK0l@6LGS5ScH%IRv^#>!y<Cjf&}ES
zh#dDI0XZy!agTLIRpVsV7`t!K=;tXP<0_FIV<K{0h7gp-M9>4|HRCkh-)6UjjVG$#
zc4`79YVvkOzIg)@2yaJ9#ZCew5Z;b7YGTb2#e$q_e;PLCc&ewm7&K0&M&$jVI3K4|
zBSCSX2$GZ{C24CLIkz~C!dYx-#Mn_i%Y~ppILkGI2H~uTd;th5fS46&(~b|qI1R$N
z5itlsKyz+H4nmO7oEwpY5F|9`QWMmP!Xdm6O^!jxf<=bbaiMDhjlqQxIR@i=3@(hw
zF$fYs3nLhVPoql{VQq0F=VHW@xSypT(u&wCMaIp6#Sy%g+6;9}P|tqIJ}xp^wD{2J
z9WY_qhY`6Dg9PG-5iG>?CT@ZnerW{XJ!rxn_Tpm&9b!hT6&S*c;W2-1inkC!LV0Nf
zr$dy;gEsnh1sWkS#>3uOW+d6Pn9;W!97mntS489i7sR2yB7y)L_wk?&YBhU0ZnUjl
z?X(A&XphxSdw>MO>WJL$fFzv=yw5IS0D5%;+a5P+%Qr;i&6x!EB^x5TaDpJAvmt`4
z8C}>&P&a<Ub|j3Ot3Po|r7h(rZmHCrpG4$)aZmxmClN&CXGN*#&h6~Jq;bA_y9+@(
z%I(f@Oz@7}9tny76C@zEM;bS^&It%?DQnrki;eHAYh4J+71u^`oz|uuW^F`#q6mi5
z4zo6bx5K$#O;E~fpFO7pe)Z{nE(X2nvd{4m5CX=&NRq$z4Gh|H?u)c)!`&=M!icoJ
zhu$5hr{ZzDyXAPohV&r2J#Dn8KIj%;qJV=D`QBZEzXo$KBHz0Mi2@Er@a|@Rnz{+v
zkRG)crHz4}s-rFj?MRQh%}qPfqY?Qb7U%%uXyk@QRyz)X9qDoQpHkzdR>vdq-bsRQ
zMUO{h;s7L6j?=ghBMUpxZz9T#i5oJHuxFpw3YjNsB&xv@;bKCe7ZAUR$QKYn!hmlg
zY4PSCNT7W~6Mq{m_X&Cd@q+!EtnrZ2;ev}nFCboUTbf=#ybwu>4|zZb7#AY-Z?FbY
zG?EN!KSy$g+h5m1OT>PTVEv$to0`O&)w)ELo>4Wi!o%L{VkX!R&5b;^uz@k91`otc
zf*8=dMCB|73G^;e%wh^BKq8#z5-sc*6**X9P&lD=jjBDOA_psZ(CZeJIatX;4z_!g
za<Kf<7D<}3gQCiPi5_<C4MtF@0pVCd?qE<<9vngvXoI41Sp$jDG$<Mtw{VE$A<dv@
zfw;6FIq(^SqAf&%TCzAyhr6xGqDdezEQ-DCa8Ks3KXqm=Ha5mqgCY7Z$=8lyQF%E7
zBy1WMEfVP;kN_JN#WuG&n!Pxzjf&=sV>dN1ngvEh4L`psQH)0Sjb{I9Vm$l8Xs2>u
z0%&wprnx}^Xmk{5ZVGfjqH?37ks7{ZArh6t02m#Oit7@R#g(3T%Zj0Mi^;Sx?53th
zqI`^74qq;vu7nI!#!y$1LoS9(^^Ij+n;PwF#yV976Z2(kR4x)Afjc%T&qP52VQdsh
zPC63>i8Il$QRhsQXkqHus5}#uES!msjnbLucFI!V9@4aE&Y7quvC^Blt@A4{+wIGZ
zwVvR#C{CdmI>yH@`AlblN@GlVdQ_%Z!9;gWr_#?0A=oy9ZKyOZq-I3rZEf7WfzXU7
z=4TTQ1ZpPR+sr6W&5X*M*tj@D+$i4JF6A<))GSu7xlxv$6_sfZTzi4ctSC0Vblwe%
z;Qwdae`s!aJ@sct6`su_E~I8hajG^HP6#wwZ($VQgX`vH3rdVAE56ZaY;SF0Jm9GY
zUwl^sQqWo$mEY9>2?G{J<##oRM8y_H@m-BuIVSr4efFDH#%-zhqcU}aODcePKZ=DS
z%Vpr?7qKO+jC%DKMP(iamrNkDhz96<VI0QQ(x}oPF~Q5ct&Lv!ufCpn^G}^K&(ogm
zhBw%`my9^u(%J~KFIyWKkHvmzZQQ_aXk#?M@B7;rH~2CyzuEb3Y~t<w>DV?#Sz|s^
zP;YYnz!r%mkSKX6S=WhM2k-tdQ`;H0r#_C#gRMNpgv`fL9BloI%fNjvV}ERC{5!o2
zGm@qPU@gcji^8>Sg?j`I2fe}e+-N+gblBiZ<w9x$NeLzL&>N!o@Ev`o1Ul558={SF
zvL*@;xa=MFp!P;qN$qfZ(hraw(FP6qO9^@8h<CDW)y6HQJEQWOE?`1tXB4kZ(u)gu
z3U*Pu(5Y-^wGm;RIv9;oAf1sxX{KF-M=w<1W*KgqvVI+m2U4F#<!yg3A@gYzOEqQq
z@)TSotYw!v7&oVCT^zb3T}wDfk3$A8R(-}Ez1esy{h5msg3M=xgLs^T@T%39_WGNR
zca`*)=y2ICVMu)$MXW0u6K`Lgv`5^E#!R1d8?yjXC#f+hngteK$oiHkw;MZ3zl|!5
zB~%1L-$u(TtzPtLAh`eY(VQz$_WkWfkMQ{@j%Xi;F2BC?J!&Gpq9ZOYffnBe0tt}s
zX#mixE&Sfn1$N~QqcU|ND&G_Y6EYW~cvCRRWk6kIcim}}q%TJ0=?tzS5jTp{nR;9X
zy?-gndfaK$PhX14bR%vXLFiHx=|<dFLSdNAKSbHaJB?Q9ADjsTE`)xd34`mQ5W-}>
z9A(M7jLP(77l|LZ5Rxbkv-8I&d-*OD_hVG1iu3vO{4t8G0=|a<BuvkrqHNw>MzhRM
zZUfN#{D~UiGhENamQb5mm^0VDdY4ga1SS?5h4j*c#=k{0nH_rAxTj)rp~e>pVnTOv
zVWc5-2$87u<ieJBSt~KsL1W0zvVZf4vD#BUt5D;)FycaKR$(E3cbZ5j%_?mB0KG>J
z5)bFFJ0COduAEb-@zYOY61OnQJDy0W%qeVruk}9WCVY^#urOzaz2Y&Wg(tYM5FhGU
zl@BcbF6mC&^Muh!Z?&^f<JW(P3$UGq`FsEn39y}on3zN0t3ku)=|#%JiLOo9;h9LI
z4EVkA&*(kVi{wW!Aprg9Me?JVAfZ3KsLg|PM6Z^FwOK_u2aEU-y;?#IP-GN~ooET|
zSLPP+ooGuC=-9bMGSmPG*||k>Ckhg%bBnMO#p0lrkWuql@ta0j^ZBj{Ev)m4WU2}>
zP?=wZRMl*{x>$lX)0P$~%k9_RG#Ytp@KXd7c!1Hev`BtU4J2Te7R5!v10-OU7Gde4
zPzxkNt))fvmluiLAu&YC<KrTkJCrQ6%CaKl4rju@K@TV!i|~5z7&UX-?GHU-$Np)g
zl@?%$*a`wDcB5-O?Q}Mh_0uUMP=dLkZ7WhfEwbm&HE>}H473+GjymmKw-w0%5l^AM
ztw;ulAYt{kqQXyMHGPMW7(77SUZn0S5&@#*L2pNq3=ky?0piXg=R1TYGyy;N6p4*6
zC^X*ZMRFqy5@vi}Bsan!0rz>4vk@+#mOg+Ur;YG~|1q=<2i#tujqrgY8RI|_KnIHC
zMi?Z34isS{%x?sy!rIxQoLYPMe~d9|gR?~#;&dZ0g$pzni<BRWRO<t}5tx!U0y)oq
zq?^&w)AkZ|6Xo2*L-f)QMR=>m<)EO;MR*tIAhmmn$LBGnr~Pqv<9D8#E-~5QcmM;t
z#ALV#5_(-?@>T>$ipXP;o-xtj#NZ9yHKz86i3XQE=yi+92A3>~$Ya#tKM5P)g!;#n
zp)tH9)zkQgrv`-R_7vZs_m9bl93;^C#}JXzU<C;)`p3dUuUR2ta&16N9dgYIC;2`w
zrUiL)OL{OCP=jJ{ZFI9vve12lW17D)#W&!g@rJW8y^VU$43Ej#1Sa}%cue*qNHo*%
zn7m>O5~#yt2;eBH28rlrc&zk3SqKkRxkUC}tAv*UY9vecG1AYBbjzS5!AQ3ZnmQw6
z@>@wMo+KC<lQ*Y9qKuKT;yYy-{E8r<#!Bw661)toJB*F)V-&y0+%jl>v6wumPVuAy
zi-p8>Y>+@;F+{zh9(0L=#WJ_aGH7;@jVxB$$!g2X05vA2+@EN~{`?=kA-lP+;eQqk
z;e%52f+(I}D~+bnn3%k8h^HuRObh|7C=J)IKsIz*%_mD66KixYKixyaqNm2Q*?o<z
z&y05qp(!@rZ8n-><70A)K?Q}3k73~xh0qP_@v*W8WR;wcl#Y+pyWdLjDq;Pcz&`6|
zWS*JemO(c{Cb(r#4r4-0eq1EQa~Kn1Sj$Bj_`VXJW}S-guPecd39+(!=_OFq0|JxS
zqy3GF>Pc=Hl;fBblX+0cpo~eeqytJxj7c$sxeF010RnOEG`76IvFMp;E(9H`Pjk(r
zWA$mVu(%EY6+ldjA-of2ny_M84A=R^R50c2m=<gND8C_)qBO@$wqt-%T|Lt+!-APJ
zV=_|$8I&<IR{ur`N?DGXv8oQ%3c3`Zq9}Tiea}E+mGbN&7lTgV7sX_v0z$x86q8>{
z0tt*ou?lf*0VM2P6l?yhv@;iWQh2#2*5VoK1TBIoI-_50|9Ob<XYaGC-BKtWvN|TW
z)DS``t7G!(Lm*Mg>KL53Xbrqz1Ty=OEX6NNSsg2T(5e*<3vv1;yX6Su2~W)?w-id4
zY>MTIoq9^4gvq8@N~EShqLfWBnVJHLQZ~ifz92j^NPeShQ>@+d{B;fzkgs!Wiaqlz
zPtm3*_TLh_?h8jRzsfqiW#-+4Cny__#4A`JQTCRYT&6&x>@8Ho{lb3Q7sQl$i7hxf
zI;FL-dyX<nJ--FZnXUm0pHJQ4LtlOR)SXH6)u&HmSga@nN{6-2V>v&^L<p3I<mWMD
zY<V(1O(D?Um`KKh0P0@Hw}XW2-k1!5Kmv7d3?b0h6j7wfv3_N58*ThasrV`;PaeP}
zcFYi;cLNEfuVMue>kEXSP{MFHX}>hiIOM4~=_(P{Nmq%S^hr{hB1!^z-hO?&QD3P(
z@3cW$T-0{j03<NZ$HF524w95&2*~OFS(-xoi!mNEurm`3t@5JN7kC84i%wsFgyKc&
zi#nRVX<AOMpoI`JJPQIiS6mawYhH0pAg_7F=>`Y`>59`0nXpzD%b5}v-H?G~T?|K`
zyc;sq4PE1+8$bZHYg{g|AR*f|F1rCFP`k!uB$}a?>mFw%ZyLpIK|r&+t4V#)JuU-M
zJcVZWI6}HBG|Dm*koJu$gYEH?jsNGV!A~)|@BlD<<8lcF37Ecdxx9e{Oy4+`H(KLC
zVvX+`FCHBC@+>YfAkZ(aM)?FKTDXD!aYUo^&2q`YyBT<4CNAHnZFP+c?SXN8*5SWI
zF?|Nb)yG6Mnt=)0$hb1ro;TM>dul+#VlYHh0umOFjLTpYBp^q|WiSd77LSY<j)lb(
zj1q&#Mx)~Dn7D|IBoBHlE@LCfLTofTPO;H$8Xg&ni`5BnWitEgbmQ|H{BjzR&UPlm
zrB8z#Oqvic5`hOuKu?Ivs2(Itnh>u)877gBCx(dXC&pz|FIi}^Nz{&;=#oNdSeqHo
z`7rKDEb-8*;IFb(GmPconQ^?t_aLk*rRZ^XTzQubooPH!gI}V7z=t)n<1%;z32SD@
zW$*|R*36Da-jxkR4BkL<;_7_aK#~W&xlRK~78+<CZy>tlT8gowEr=_2TurcNW*N8E
zfN+eU;kh6#V@F5=Y(ZScjv!&gf_T`zW`v9#7sl1a*Nkvt$M@qhb|gI!J1&aL*io|3
z9UsIsTn{9tn8o|c@tl=%HfCYSlDLr;voTAvahaHnEkR&tEpv<p3E5@NYy=6Tm(gsb
z7j3dMQ&zCTIYyIvR>Y-C1e3UN{??F>WT3Kw8k-C$!!?0;&Zp9lGDxnDJKnjB3|S}L
z0tgtg&M^ceWY;-{fCTC~$1RkRAseJy00GSnt|r;D!Ep<C3e64V7WhuDjNHQ3xU!4p
zR(($mev1CW1L$paW)(>2ZFOc9Nc7j%c;PPDU&P>pW?Nj{Df>(Epts!_G?Iluvx5&B
zYLj|l?X!5!e%>ZUUbP;I{VeYI%6il&dt~o`K-Km*CW3_Q9;Z=2qNqL8C`h=d^~nBx
ztj)Vd^Je>Sw8_H>Fo_%2#amGzp|UTIZ+=l$TCE?}zK-YA#clSkvDFj!I*wy(%9Gb8
zD^9RC78va-PB>U#0_#LvzB3OJSSP5b$B@IVPvxJn4=gZ}o~kpBqW~8p^GsY`1qDe`
zars4Hkia+-#}|QVLf5DD^BimWzVUF?ITwNa^*P61Lk0-v;&LSf350WTtb{jn1W*^)
z%J+?q)fZd@@}C!61oEF3;`02lKKGv&;)rNzEv?VfWO1?o1_A4Th|9nRBs71B%fJRC
zO8X)1ET;9z(5vV>ET(sZz+!sUwSgAXtF8^Sm|l&`-2sGwbTy8cW;4AT*&wV9PUNgg
zcoH9L_Vy2q?Ff{X7=I59PQdl?HMIft(69twQ`>?7_%NI>@=gZ{@L>tLrh)|cumr}*
zKI*6jXh3aDLK$cOd8zSRd|ATPqs|$VkawOS2fZ-~d8-B_rofm)$+(2LRYMG#0_xa=
zyj3GP=)|!Jd8<aU05mp%TQ$vj`4D&~fm89a%ww-V&u(32G%g427*GBCPC_1vH{kvI
zP6F%kvs@QQlh~ML#`CQvxhmA5lM?bEyaDgfNeLW;(|ei?s6(eFlyIVc<}SA5-&%xK
zuE!DJgUgM)a`1K8X4JJ)6Y@?8lu*#r1l%>g#RCkq?+n&=xzVo8jD)<Q4JK4(B#OnY
zIFL}8k-!P^TnYvoV3Vl5n@|=d)WkS1dv1wYZr593{L51Vrc+niBfguED>*cP@NPn`
z<RH=D?<NWtp}}b-CkFR9?<Lgt6JjNoJm@V*$dz2O;ByuxXeDpOjlpixPAH{`1{qeo
z%4k*%LM-JC`2Sqk3Hhc2NZ4d23dO6yAc1WskW!%8(SUZ0OA=ysfWYinl900lBs7;K
z<m><m%_RwEb~K=!;!2EI%#KbV&?_rl8)(D0G9hC!JO$Fqgq$59fwVG#*>OKI?|5Hz
zZ6aqQi>xv33#?7xm82~4&3I!ID+GIWjZrVPE+O;eU}CJTOCV2<#3p0_yPhprW0a-V
zCuEu&OvtQH$mBME*Kz|pzs6{g-XN<6Me<A=XevB~>3Ks~+nmU$Wo_3QzYT0o7;!qZ
zQg0v&wz3IpjoYfWIyD0mHQVac3?xk0nvmaC1&Nw%O(54#F8l_vZwE`SGn!ZJa1qFZ
z?nvZ{Hx?j6LWzV3wLk)4M*^YNZ5#o1e#!={Gw$f{sf$3v_tS*D%X0(wpr0m!BD(?-
z2%nM-_n>YK!`kjd&W{NeTyNYJ+)Wc=3x$FWsdoF>pVk}Os`fj`U;=r+Q#+8bZGS@g
zW{^PMPc8eu903o%WUp^9{!#s<i$JUQmo5U;?#qOX#vAh5eMz%_54o;})D6e&1{;m1
zJmtroxeG3oj#EF-78)dqJ)XcpL`SXz>Kit1lhLW_8@E_m625Voq#+NfzexneCLAQ`
zB(NmVHNb}CLB3^8KQSKc_^pdT8LV$z1o9u>x(MVyz9j^_#sUP$o=qs_i7NK+S|i44
zKQSshf+40L9;1uTCUV7`0|~6NiIRr0KIB-=CYm(0_KKc>W4V}6E+^P+n~mKy`02n<
z2I`{QmgHS7I%BON_bwNypJ`_U65i!vqTXeA7YfRWAwtVb3Hds!WYH3sz>ApoVt6#d
zO^ZZM_oOFLoq7BXoT7GQW49PLKlyV4Z{5UE)kZW<>JmyQfs3(kywUm1%;S&TE$qW1
z*oSAr`+<agb<Q#c64k7uWeVqBz`?^Vtl3thq^e6&)(}h}bV*7-0g{B0a<qU1LYE{)
z3p@f4Fj%^=zFUoYw{~+8s4Kd;2vkhBq)ebf1qj`e@OFo22hupK^-AWvgW9%d4?kr^
zn0K48A=oSF-1cisl^wu_d~Upb6Mh4EKvLEYB#;Lr<su9c$ODq7-3VG88dJF=k~p#G
z>7~121@@Zl#(z8&V2Rd&0GE*4TaeHnkwhFzez-B!jU|O227xYON$H0{LX#z>9|j3c
zmUR4ZV<N{VxgWj_1jhDwr*%N04&$BH0STn>N$H0{a#i@@-a1;R309|M&I$XcT}Cf&
z@ZBUnGR<R?Ce$hmsZ}OdEOhDvCa@Md?Ew;43#mQ$z2zok^J4bgZev2l;-tJ`3np=s
z@`f!)=qyg+hV3$%2u-LFma_6a#)@Z`I#mD@Raoj&0VE)nCgm%JAOW#7i3NdN1xT!C
zOOx_Xw}=#*`K3wx=@xFvQz1}T#qQl}oUK~r7DBfpS0&{QOUR&*RZ01uTOdg%iT~Wf
zAtMmb#B13<_8E6quXPb9vRs>#={m>&VQn(SZ%dF05Y{GfTVfZDmL^oE?e^7uMy;oM
zyNf|F<#xBK<Tkb^<wY;(0AqU+H$L#UFNA>t_t^Odjg_A2JuU|Mj6E&}`HVfzjDij@
z_Rx%yje#)Y3zqw(aklyk7lJO<eUX%xjhpZQ;)`Tfq)kBr;)`U<R(#+#p$0!J2QCO`
z9(D#UNECk98Mq*!dHCAEZ9)OWaWQaNm&1luecUyH;)mmIEhv6C?u=U~0_b=W<MwV0
z+ooadR5E7{TXWdBD{?A{`|90kZE1>8tDQ|M7n64SE5qZd!EfQW@C4{*9dwXDKbw>n
zgg^rQY!ZhR<X1t$ubxe2E+)NJ1Yf}+1_l*<@8n!ky^!?r%+ED0bk8RdxkZpUy2eE8
z_I)r(!P`yTGL&~Y$=*F;w6DJGT19ce<)mEIoASAGIVr#20}{xWlUM|w<`B5}bS24d
zIBNW^=86kJ<LZiAF`6q^k}^1H%IC_JBo++1`2-R-pROe94HjR6AR6lhY`BuF{}KXJ
zlZ)^r1Y&;}<e`f&;K7c%q|zeM8sE(5{D;o3Gv%0ZV-;9V>(X4ROUn2L@-U(<nJDKo
z6eQPg)|`Jbr76v&uIwMjj9YK%T6_(Gmg26(*II(+QrBX+m_r2!U5l|4^E-h}QD?1J
zvC^OYc+A*dgI|svG@E)A%e4h!K<QO1KOYVfD7}gi-HTqPcl3J|H|}5T^fDb2@m}s-
ztoAE*dRcOz+o$+iFH0tRxo@zTdbt~Unx-^C2eT)S8$GH9yH?Ts9PC;}^K)>q^vF;F
z^59~eD$(uRrgZ0G7%Mtq+*~!xMWE?9%xxWt?}rr!#W?{~fH15WXGSk_1WeCSY}g5-
zbM+_}fu`xGV!4NJ%BSh5;(Fp}0VEJc731HI){&oSO4D?*-Rh*V!Baii#h{C=lU)p&
zp_7Z{E1}Q<#^hqW61qlU;KXOP-R_jJ&eLJGi$ND#XBW$3yr%rfXLhmtG!95$%q}iY
zSuBQa0zL?Es5s|qyZyIDp+9h_*k{t2mk%%P!>O?6el#j-4i_u@k0pqSrQ~oiR#&_k
z1QN!5RV+UHNR%M`G$M(F>{rEDxr8jJBgOLNM7#+PS&;m_ddSieb)=YQ!w44^9=%rR
z!+fZN=2u1NDTI#}W6vpoG1QM0%XcjC<~o2u@{<S1(zTsq#W+N`N(qDVuy(mPXOR8O
zPsaawgO`gDjM3h=oGSZMG5hAK(W>I7Vi{V13#^}tWoQBtX8lAJqOD>%)!=F|yRXh@
zU4GTop+>ms>X3W6N;>pufpV&57dF4ns4nkPa;+Fb>QZv87^;1j5~$!N8B{=ZXR%+5
zTgtn;Dm3}KyDBvKyORnH?{b>_y;#p*jGN1Qxhm8!y-G|miy;G*UL|??{3`_I<ly?U
zbH5mOmG^a3XlnN@k@*71K&5X9@&zyOQZP^lj{Jl9Qp<s^22HzxB{CQ*=hJRr35LrA
z3$0%f)+UwY>_~YML)b6d%%~mqm>4LNN)RWm#jP;4g8E^*eS>DMZ(O-OB?C2Zfx0~v
z7jOH3gdN*cSg_aPBOq#JSlge<8DJMTH#;fy_ow*w#;aE17RHw;<w#1UPt59|#dn#A
z$9l9hzixdfh2sUfaUmX|YYwN>j@NNe%vZ#jlndJ`$+jygdqOL7vajL_&U?Az1sld)
zNy**=39TzBbOmm%K?x7*QtZ{6%!(K4aJVgXXpq#U<hub7f=*ou?*>q?1rpAsE)^7C
zaw3u+I@YB^H}OM9$)V3k)TP?C<0t!-G_ty}Uv4sQEbo@SW*ZgXEiDuLkU=@!(wJo(
zxox0&vd-<zPMvzDrFXC7k!{bk^zI;m&@&wtTSkzilg4T}om_DxjkJDgrD=kB*tROO
znCVq!uPSiFD8q9Ml749!y@3Q;zjR96AOH!perde#`X&d%7#zelRhfUU8ss9-mT!=Y
zKtpm+I@Llp6%ENj>DF!d$I2>cWf;o-U2S%#8tNj@$}rTe5e?CyX&LB31qega;`<G#
z5LSi}>|(WfN7V=yfo>Cwa1m%_7?GB{cc=hiL>lk-JjQE*&SUH!9n2@HnTtUGZOU8(
z3gB2;W>zct%D~e2$0KAlsa3HuOtr0>&HKI8Q(X*--KM%2v@%R}t)P`*Dp}E&R)$Kt
z3or*aIL-c^>Nze3tqgNq47v<3$F+l2hB;)%Lb?o4NtXc@+rPWbT%=Slb}{&0FS!`}
zub0wcabW{Gz*wBd9nrpGgy5)uDZBqpvwz2>E(E=Yztn}Glm4aYun1);`APrMbh8%x
z&5KI9Zo53Kv`I8(gYUwN2`%q3lT~0iLyXSzm#5|HDv$=&@^nl@)gWQc@-!AqiV!R5
zXnqyzcb8dJwaP`H;A~Y|23C*(!m4zll^kMpD!(e-_D1V>907;&_(z?)&1b6Cxd?O+
zzs{`>9mKCoheckZQlW$Rb?GMM{3{lfbd`4_d;4zlv8s(O0=`6|ZgdgopO-eK<rW1h
zK-ieZyC}5sRMJJ?&8+D?W}B+bE<y+hn_UF@1EtMr8GJ(p2%FRR3n=<ize>6Vyp6qc
zkJ+kfn~OmIoV3kF2m@hTT3(ug3J|uXGg<3@I09}6?_&A)nr~F?auEuEu**d#0KzV}
z76m}qMYZV65pa9>bGGbW^N&@Zy9g2V#ph|6WUW*pK=?c@Zl%KP2oOF`S2njE<p}uq
zhrR5%`^?9y_PPjB*s#~NAqs@OZY`of*h{sbd{d=@KZ`iP&fRC;SAD=mC<MX*7oiXc
z2huXYg$fW3q;b)Eh#25S_`(hQfA^cist>skMSwWuLKFewP+D#nDwQHY97<>FIde6J
zZI^xb12k8UyBING98b$Au2P8s<9IqG-cAGwjN@tC*yd@+N(EmAIL$&2ncHqT?Ly#u
zO+B5K_jVuyh|_8Lf)PkSoKE8fqmQxwLSx{~zOEUiyPba6Z0~yxKb<L-fF)fs*Vcpt
zV7g{xYz;NQbj@JbND)6sMEqSd^}1(7zKj@R|I;mlkC#(crcy~#fYR{~X7Wb-hK;>4
za;*mm@Ln02lmQ9wUKu214vN+;#?8VE?!;_kLl+tC*d0%rlRJRnSXvBA`@5DF1FXMm
zX)(b1lcn$b5I8goYojwc)9ePnF&8Sq(HR`g^8ejxMl1a|cH$|sSM@jt8cf(ZE+a=K
zNI;Lv6p921NI;LvAcZ@EE~_-7g?Fkw=V`N0=`hvBptRgn$2<s;R7Sp52oe}mGe}YY
zNO4W`u(mLR4}bphd-I=4U||Mv4Zg6ZHYe*oV7;C*Unu_|BhOgC1k?waVv(2y38)V;
z*vnC<)|{;Qh((__U+VCYV+@!u<|D@#kR+6mD?Lace3ZdT-=8vkEyCLJOwM{{KX3L6
zEYBbr@DzYskS#0OLob-Wt5}(lQ3senTA7hi2S^~T%pmIEf3w|!j9JI_y<qOHSm)|c
z>FYA`qXm$G&bkaTSkI#HmSJsECg&^m<%{Ms;Z0OHxuBLPT-%aScCrUwGGD8~FA<S}
z53DUt`5=L{h03S#2@>OTOD3`t<C9K{h=K8mQ|pYnBO^|WBoBJqGV-)YvalE3o}sNM
zxzUzXmD-F_n5dUw9Xgv8<scj*s6w?Fd1M7ifYoMjWJSjhEh$>t&Bk;#?|5N1^!Z8y
zCRBE3<OhC1LS=VGUbh5^z+!i%;iEi2C6Y&lyEBa*;ZdRFP*k`(^WZ~#qO~N5{WQ@^
zEA~563`~@>-<e_{Nr<Lc9Zj*86w@7^G2{=X=c&WaU;z_@<*+kYKmy{hGqFGd;xJ7t
z9NhcxovEXloNqGXgLt$K9nJXSd{>F@NMSpcQ5uT>PYL|V)KVbDdog&3W;sSRz7@O6
z5H-hf*78s0ZK>lK`DO^1kU5?y&C&}HkO6g)jr@~&PwB~we9sF^;?hK#K(C<S`!Q!S
zIhQk|UN*-E&SZT21G>I2nerW*`?A?3{ar@BoB<|OzoTJ~Z)!pYCY;N#d;e@cnLd}1
zyI^o3bS{H!4Q3aFKz*NKtNv`hnEqb2GI2Q@M`5>fA+*rN4D0k4^N#ezj672d^R4Vf
zavS*2Ep*WIKV;a<znC2}Ke$Nz)sqa6@Xz6j+A6GdE6tg0n}0R&|BBs8;TL#1xfNBY
zCky?{e7hBXqrZBV%FzfC73o<jHz^=tP0vznQZ`Vq*ovw-(EjcfbCaifV5xMb;KJh#
zER`M)BuSOZ|A+?(jDe;2_mmX|$3S%_+819lJE~O^T?`7zCzi?$Kr24PCzi_pA_obK
ziKST2X<2AR)D+h2Ei;J<P_}DIsazI7qVOrDa#;XLqNUE5ZAA??YsRYoH9Z|>xn<Ls
zomDEAEyw_3R;gUJKmuY`DaLGfYSq?Z?fuf6Pwij+j?XFv-!C;vMXR=^R$WZ3I=N!8
z)1F`gYq8UwAc3`*+LK?`Z%ysF%s%`t^I3fD%drPsRB2hMOooFbsZ#m50g%90R*IWR
zc;`)RO`~TO`@esi|E^x;B2a6tDwS7`Ap?X}rAe_b1_^{!rA{KdHIbX_R{v+N^i*wf
zF{oiTmC7U_gn+TBG$?!!NKz`rc8GeUHMQ#&>XFilElyv636(8QUx0+lmTP^{no<e7
z82aL;+wdCzyWFxVb-2sv5j+LZE~iI80%#ZY2-bQ<Z4=h^l;)gf%WBL61$#>ATNmV?
z+Mq+U{iVtwHn)p8pa#E$#|0l~`%9(A1qrnMrSg&hNVxs|rG<w|h1(|vcl!rQ)h|nh
z+m}4(9W0e@U$Wr#zbGZQPjP1(YW5?g%0r3UGtBO4KG+$A2te=%H9X?f5F{6sQ8-9o
zA1Rgh^+Cd=A1Tc|$PX5Y6sIajN=qNGYDHx+3{I5dKEgT=`&)OjJ{!`_oKp^tQ)#m0
zM5+AhMH@Z@PL$$Yjy{;zhDN|C_NVUVV;xSpCei>n<qSi}0O3@r{M-ac(kX4z)*3?z
zv$kRFYH7~L_D|i-m^XB_6fd4}XVaFZMVBnUSHqU~HnrAWveG6z0%Dh}bT%M?*d>d}
zv0s5vZDFz2JFE1~s)<k7D@%?0?A!a8mZt_hQ7K3Opm$c@uK@{w-dTCS1|)j2cebQ&
zR@|>42KA)cCoAvQNDi8=PgdTqkt_i9$>M$u-YJ725Ezif{hAVfzh+xsvtBu9#|UcK
z0a<y!2Ex!Cki`klU%4)*AuQd`e5HJdt3pjVBrEe}ZFy4;$s%7y|6I|Q=F)Jsq@UU7
zh2dHGK~XTFGCV7%A4uR1&&p#rkQgAtv&lR7nolHO^M_}PZ|7^i<j|TwJbP;=zF%%j
z^KTTpy}x-=^{A{ImtYb%D}5nI6gw&__jVvr?5He~+r4SjwIw$*mVMmc>{~U~g`hmj
zSQmowC}Xo>k;{P!AjW2q%b~niTgs!n&AJXSE34mj5h#!Hwu?Y{l((~Cv7><s5Z=zh
z0ZyhxsV&7jQ|)gDm{UD%rn+rRsgtQ$nPG$wl%{5}6!XhOZIL?B=4O=z7+m5q(G2#=
zVDpz6@SJ|7yvf|GbQ4ejz}#%4kVl6gF}UVtixyyTQFKTQ?k47C)%UW(O-LT}=4Yjw
zkSw@~ceCUs$a%J<6wIP5e-D7QdCQEp1_uobmbm{95~eK5%0&$%AQxqwMXfERUzT8s
z(Q9gz!%Xd|C2mVn4rYnll9Yp4l9fvv6alm(E5oq@gznj#PqHE$qb>RJto-b00nOqS
zS*29`yBSD41<mhQ_&{QYtjNNf+>7W0AB&?UY0oh8{?sbyP|!+D$gIkWD<B|2tzn&p
zn-8YeWMw=CCULWf$9~IkVBI?Q-f;8j)H=LpEpaHRzb=co4p&KlgUPaiH5vh&4O#h)
zHJFgukj2>&zOMlpw817eYJ}M~vneZMNH8I@DT^5LJ@_vlK1#PgoAaIh?Fh5d8`w`3
zr`L}oRPh6>$!PP*)B&fyU_$o*)tBDkj!=ESU=v51x1_$v%9~PPLgovap~&_@2Gk)|
zH`;t6b;zj;n8c;JJj`WK->=x~W6VcWUpZ|O;gR20)Fz#{4C;H79T{WZo;sS9FX=~k
zeUH+#r06h0_5GUNG1j~_^>tQ8kYJ*$ud|3Cu{1#j1MCEwKGu9Zbs{T+S}-AVB8#9F
zNe{?iZhph!<IMX~-?%dL!tpmGgZT>?Ouo~s`#7^Qby|*BVnXILIbs}|fJB<|4BIiz
zY@Ipdwhz6!e}>v;F~#2afZoMyP8U}HZS#Zh#VjtNQS;+dcX;C(Q-i<#T^}Tx8npOG
zBuHRfqI%N@vZK@wm$U5I@#a10%Z@SNLg+FX^B*n*>PnVv9B;mrzT)&~l=s9H>d}r|
z2t9E%%R0Yf-dc9mX+nIn4!T#V330g=#i1*H$s)zjk=;8MDebS{F`H$;5PwjM$B_Od
zi__k3DN1P<*1DJF%wTOMn5To?%MhjT^|2k*upjF<+kBgCn`mm~{mP^R!V}b|UzuDU
zLBgnhWmq05L)nfhJCJ!MAwxN^OnPrH(e(q%r1u6%LS^zY4oDyjEJG#9^|qtIH-!Cb
z5?t>P7l8)GkTQ8R2^k;^DXZ6x?>s>QVMrM+V({<fv?Fq~eQc6B&{HwGOs-YnLTPlF
zT&qBmR2h1D9W5H|sNKf1iBrrC)#KfA=>TASnar(11`y-R5+Y&+35fA!h*-&Cwxa<)
zu}r+4vwW(lRZc9Et`d)+II&E+N{~>TSmwCOc2v9RW#X<52v{=RHG$Tx>2BlEx;4E_
z`pW-b)wM@gQKb2M+nYPNrMre34RFES$nD$R)tEp)9(gCcVFpBJP?>{{iZe%dRNP(n
zamKSJ8bBTr2#$whSJ0pb12W+$dn2qMZh$C60R<NrL|6$BBX9^039tQq_29by_3!Ji
zzN-FSRozux1!hQkKY?6XlL>PcAz3B@e@*p&KN1XOZAqBdfFiQzHnQit`P+;sL4>Sr
z#*~1NwT(<k>sg9O$IT*ZRb*^_bGiuGt~sGUj(`V6niKdqQ6Y=Kc00vut0Gk+cA5t$
zk}Gv~ng;-cgq;aJrUZn9oe7L7|C5GSMS$VfgtadbiY*uG{*svzIh!LdRf7&S;D+i3
z0U@O|p}RpqNNG*z(J~;q!PZ31zJ%%qi6FbdFA|}>3Dpg18p?f{(A}UWp&Q(jFx_Ag
z`NjUAHtU{7n03D~EAF8c`;A!vA#MLHvlfv<99Cu(H&#c&!w#pFLIaw^X{C^V95z-(
zK?pibR>ex#P%&l#6M;*KAoeE|M>l5l5;f-{IU;LC<n~?#jJE9$6{GmkL}o%oZ!uZ>
zxQyO`xJFIKjp6{odfeC?5H%eqoBuPkUre@X6VI)U{A+$&x(M04Eujw-2M>z0CGc|r
zO&AqZyq*@_)<qu9Kb_Fu^FTzA(+Rz+H6V(dPGD?=o&ZIFI>ejnBEt$g(zTF9I}&;m
zPw)^^0tuaBtC*~CRvRIAJ&bVH7y-9X@T@TcAPSznWrSif!bN3-;Q)|x(O3ac-qeW+
z5Rxt$D*!^$MY6(UutG^Rd?gY1i&(HBG9~LuBGXa2E+JiCle)ei*N}J3JQ5(}T{F4{
zguH8{YafqPLMpnM5W7B%^v%DSE<?(`X#xyPD07nnY=SHUW!H$r#>m8i8e7LgiBxut
zt?dJdA~iPs{6W)TB?RkI%Qi;#T4i;%&dH#nsdct~bU;*FXX_C)AQiIFg|$;umXP{I
zYE4t*x!?$qmO)=AL|O(JLfCp@5oI7l*yxvJWS77Y;ib0quKn}K{!=wbDyG4J@=I+U
z(|{<y)YdT#h?rh#=e%pHm?naZ>9_6BGF!#8rlH(BwvK5{LQL1&CZ<a$-!8X*Hnasr
zk<`!@5KUQb>wFCek;`q9uS;kMvdUKZ8UV^!l~xM9C9Fy-h29cY**af?8Io4n@Tn8j
z{gy_<YwW;wvFPK-_ubamnR&{oO3A4<qJjgNZw&;1#EnKxfRMP+)*Ub)ByP0fRpcS1
z<W)^#^47@2(k9a;5Fw$-v<Z-yY`slAAS5)|7>dvoVJQXlW^rO`<ngl2X$hpV&9?px
z8$6J(*-olyN<c{1Z0p5;rG&QFYSk(LN^Y@rPY8&TTa0D_C9lzJDLGoR)+~TT+GPRp
z6wT?UAa`pvn#Em6Y9`G#-3`r_MZ*_tES0(A(@2VSyI`A<O&O{7vQn*>)*1;HTsE4;
zEl9j<Gz$ocmr1j`=)br!dgi^U_gW*ZcNOkU>IVXq$jP3*9E$*=(B33|b&|`Z%An2g
z!KC$VYT5BfGtSaVYH!C4lslNz-VTUz2b0>{0paZjlR4iemA4Z?di$Yd=txp|yQZPs
z;iUF<O@g=oHA&w7PPS|~`qUc7n&E_QkIm1{8#(ovX?fHBAi7nudsA5_A}>asz+LqP
zs7&UC8b{{^K(w;P(e4X~+G-rU8qj0}AX-`DBxX2jvWy65B@8~@(UWCmWYJlo@JgiD
zAY9|tEa#T$$bz#R9c8!+;j<j$3uTnKYaJD30FYCgZYE{!+H^B1b=0PtNvWgOfiL_(
zQC1!eFLVMQi098m+Pf`u%mU_eas`135M}oRK%&6!EYgmEkSH7-Wq^<<9QcC#W44@(
zw?qs%A30dCBwdDFVTlt_$E$z`WtKSId$4&yn4z2kt6r3MM&{?&<L@0^4@s(bejyi!
z5f94LJ6Ie>-CjAN_muK*4duOOln01{?-}I*66-DHm6O_6D&>s<kVxAY5RbajC=U>l
zRvP62Leff7-n-ZcDO3>+H#&jOoM3FU*wz)vPA$EN&t2Ub9rLGY1*!2vrN$Bf$o|l%
z1Q4=6G-?Ed><>weYp7qTz{7_(Io4Ju6nmRSdn?4?pCUEYASp9|0p&M2I!XXhev_l4
z1Q7nW$;sIY|D(?xM37Ok*$HiNRFr5M%Kew4qePPsB_BJcPpBa4eCnt^VF<jn06_Hy
zxP?Z1YE%sfVV~Yobp^qehF7jcf@LknK|zEbT8xeXA)>|T7?8@4j_F6EO3dgvfpy~J
zuE^x%ZU?;p?ZZ=v6<~WD>uV=OM_c>?Sgimfnkcy%X&STF35}MY*3>OLz&<B5{AUzY
z@)c2xxNjWmFvPuVq(S>c5+&Cne;WHg|F0~)o*r~U6=`Xt`a=#*(>BtMI@bR}8ou=E
z#v#=aP29K^`KtOmM=wv4jU(+Ib3%ViizBTacW|z-5%;}goq{+zHBc5o($XYa<fcea
z;t5Be5vVAT+ve!g2o(i#PdcG{X@?M{#2*~%ECm0Z5saVRi6s91M&#K+9Zsk`-6(oF
z{?XAp8A)*z3}>iH`CeQ}zTT;PeGmX_+-ZCj5Y6i}z7B|@o#gAg$k!{$iMpKB(VLN9
z1q-^;rO3m(Ows@sN_A1vpnY2_NpII3F*(SJ3a^`_0V>K|H%S8!Wv)}wxJgU>Dgncb
zTx)Uazk}>XMl~)~a>orcc#*4<J0Qd?a&>YCgqTIHPVRsRu0?KQv8$3h5ma&)E|U99
zTI*FwX{N!&VL+EMXq(ZzC!e48PcOWr_FkMiRbHnmGudgY3|yua)C)AYdI|?3(252(
zO9dMsTG8NQG(s7$k~)D8T=i1@%Iz%N?*mtdC2pbM2d?fu08#J**K{A1G-6rn%I-s~
zzJrA;)}~uP@6>D4dZ5wX+O!^Mw71qpa4!EFL}wMk&<*_LraJFn?}fAWxcE7DI(_1;
zB4;>|!r??Sg9Qg%ow7iMv;%HLF5x96NIT%tJ|NT!RFUZpiOF}f<pqb*WylE*x%#yl
zJScO>#i)O-s)(W|bzcrTk^#qDwN@CCNYpVmM}C4Nh(gE6d@Zt~OiVPjxz=S@w0CDa
z?rd{2{}yLhQwzX%N^I@H9?C!EVuK4>wFx4GopN(L1BuD)n=cpsR*{+8MLEuE8PM*A
zRR0DdinP0Ts}JCSDAMj?Ne}IrP(_C8a6<!PLq)I`{;As5ll997LG8<o+bG=O_K+L)
z5jP5VxR^?%1qM}QyEEdR7#o#;#tq5U+eAc>Gj6t8st1T7XIw1RqgBIIG$ubM>SC;-
z;GB!I71dMG==+?TOUZy9l1AU>+|qKb2z(_x?~3a&_TYf?Zb&&`m0b6J-tE~>m!VJe
z=iLGK%k|7v^wsc!8yXbruO92oUd$Z;f+<X&=P#rS)93jMRG5BzucA-tm)uYxzRgLU
zL<=(R7Wf4>(GOHLg$W)=xa4+Mr)~g3!X>w$KYO2k#u^q4&-Sn({WHDU^4p@bJ<Oid
zIk&^$is8AQHBaC(T1hpo)J_1PL)u*LPGx04NSo_nVG51k01@JIz1TcY%|#JGPSL#X
zVcjtOE~qK+zt=s?u|=`cN|R{T=5?>Uf_0L&4I^KC!?VW4z7OV!_4j0U7w7WWH&212
zq8<#e=^LJ&`~{Q+^q$&)XxJMb{w^Rx0m3wIc!S5v-B<|9+e5~%8p@@^C@n7btbwu4
zAZ<q5Lsa!)ZBK(@DkJY(?CC@Yc2u_5({HALkha*vo2jadz7{X`;sbPLa#CiomsiMc
z(!#P~lujExYrPkWondl!>D2NB`&~vgh^9VDtc~gVD3}`4^-*GNr23TBDX}(s@%7L;
zjapEF8nvwULhC#=YSA>5TjS|bizZ>zveu(f%Xhca7it_)(&PnBius%!jW&51z2rib
z97;_ec~)OJGm->EgMekIW&lEeA9?s5QwMbd<L;K!XFiJtbGLYwT%Al*aBcChI=M<R
z0c{mm`m*7<TRpv9D$W=os)yGd`lgQKL$Fp#{PsRJDE^6O6_9?32%b;8!U1eH7MB4d
znS7pFeIM4;mwoP8G6N75T%UXW<SQjXi2B?s96?5r5N-V28!((<=L%rxdzZLaz)Es=
zr5i(&3A?B<s=;u$-C{yNG<bKqF*KR5n;L_-fgEIwR<WiZE04E&dJ|(1!PDyDw>)g0
zK}_(EuTyvQXM2P3uRTj92BL!NYY)4$f2AG^nc+z4S|OWc#gC-hL=y@}s7>_ZfKo^S
z$Ha^GvxD(to+aI#h+sPA4J~F@6%(e;+Qc)1*!8@&bjxWk;5M&tAd;6A8XgU|dw~m{
zm^qkD$Zq%WQbV6$hf^Zx@T@bQSokCxQVk3(fS~ddAk^65^;AEF147Fk9%ci`GXde5
z9iDv#o=Jl)BFKF3qsa%Ff|mSf@_{B%KKPOH!9_d*N}`@lPb?Y2E|qthH~|%Q>ojo!
zD7o|sLO`^p)5D|^_As|HaQMtmUZ76w8OoMr{p4ljO4r6YGT4^Z6R#Gr{P-1PGf>f{
zD`Yd80P0TFcX^_<h!w=UJWKw=L{u<!QI^3%WI&*+o`@C0U9YAkDKaGCtshKi(=|`L
zP|W=JHDi2GQT7@ce-@SxfeSu8FO@1r$}F45E#<_Zf@>bfcM%E%K**ZM2aS<FO%Sb|
z#|Mw534Pp#ZfeE#a+aT{<vJ`tgos*>uy{f8z?$>9RodqX@#@4#ws@j~JsJmLh^~RW
zdp<8NVQ-Qnbtm^;Aik+!i{cB?ts?hcK&^Thjx-_~{xiqR@w`elDfwrPe_3eUJOVEt
z|IV$YJj8C$CZHqq%Lma?;VSlT!NLE*L&Kz(sC$t477xAnGYTGd3CG(9b<ZQnFY7t&
zF!cZ%EY1#N;c7s&5hQLx5%s*c>e&HNw4P&a7I`Hgyt1CV?{ejpM37#&jO$)XQ_zHE
zT=!C%L|(a!!z<-$`v|y2xPe<Mc__9+yfmEcdj?45aNL7#8@T?z6%cJ|;C*BgLnFvH
z8#wZYY7@PAHt>Nf(I)CAaUX4pq6I5>s6QRJWQ9gX!>f5<GY`h*pif-Wl93~tN3fT(
zR&#6vw2=C-k>tx8QV)z|*}+L0xE?`*imEqoy{8l)s@}jcyr=F85b0<GkE-*R31U<(
zIkHRHH%ctZZ{pU3Sc_Pd&79PcQLG?X4T^fJ9;x1{x&C4dh~k?#z8I?tsPo;#v&TzY
z;x1J{l)KaxlbV8O-NXl)R!Al(rs9|EGVO(r!+y5&z#%;TDeQ&+>_4XFj=`K`bUW9J
zDRE>EHss*gWV~<^ON!OwSU49@&aGwOCgktnm|Me2T|hihi`X}gO^LT~-LZfOo))sn
z9O}k;P~f(v#{ZJt9*nm_u#5>%iOdntYbYjqP(be$|MDxgF20xR{mMZE(_W7CA98Q-
z9u&{}#pv;DPkcYOq+g;Wh4X&$%Vs4B0eeskp1^j*4{}Sb0_`CK_8`X$ekFWhR5W~q
zW9@IR2Utb)2*>&(iiS}X4M(|kjH02m8dqxY2RfefDA(sO0HUo&IX=Ua(*eTij`BXo
zbRZBx2EunH5HtnN{LTb|CQ%@KM}aT}ropjBCwSmTm}WxWh-t!|$bJ(&!82@`U~ym(
z`WbEwQmZNe(I#M((*Pm8jj{)}WX+JL8J!ddCbFX3liV6ARSqI}PI64hQYYJ!3~)-|
z*uV1JQzlh`NK{Hyv^t<CS>?2t^B^0RdzxE=wH&g_X<k%JS_6-K3pxEDtH^EVI;VpO
zo_3C$POB<#Y7ng%8}$$ylKTVlq?SWT^aoy1$!N6#cDh2RC*FF9jm+yv^HA#SAf7+M
zZlj~&b3Aa7FZwlmHhPX@9+m7in(TI-TNh*&s|JK5V6|)=5SlvA`>1y)Ks?iV-uFIf
zJwRCRJkP(Ntw#iDy-s62O+h<4jrBB%tk+4_!`V4j27Ywt;(@uM|8LmYtS+7rmv)Ph
z-L7)+;uPj40nnDK+>);m8Gw*_mE&A1{KyH2o7cH`c@itV_j;O%%yyla?vYGDH@H<S
zf{(Bs;v7~!BmvcsB__>xgAXmzym-``ux+0^^IVbjD7&i<^=+W2u_VqMg0Pz$V@X?z
zh9zGS4?N7A<SV|mHqICV&nrHxP3v`HWXT%b#9l@d#kW(@g!K=zf?SYPZw?0V*Z8o!
zYA$RsUEFw>#dD|ox<kZ~LExG0!^`rdO!S8{M9CwpPwos~rxENg1D+W^(nwPBAp6Y}
zFF(TE+?l>5PqRT|Xs|ca$GSqrgR$Og;uGR|&A+7*8tT2~LnZf0IT-295*d%OMD8r#
zQbPdj;R2pnK7PkiZN@-vwixv&+C1C0<PT)1iw1hLef&VC<lq;yIbu5GB<7@_i_UbI
z;}@5*sqoe@(QvIFc*76ICW&QJ+1=vXN7>lyT0gV5blWlHwhMe~p)a0)fDIDUCZqQS
zR{PN4E=;w+zenxc3kX{-@R7hM=>WoQ7x>;nU-iC3kZxP&>)uyW(4abB_r97$Zd>QW
zZ9B0>IRnS{yzK|pqm|!>@=_Njv*)Zk-}bfl_9E|nM@*Xn6TjnYw*?VW-|^v*G#0}_
zHy9U)%~M$4+<K#S5W!PVYR3Q=JV47t=rL9mU*_vR07RntG@_@Tq8DYGhSbxKu?K^>
z4aN~b1y=((LX~8Kldce7J<f*5R~W_jl1{pU9O_ji30~Tm8uUAMTQJ_3u8&-^k?O;z
zTdEJfxlTOt1lt^6=Uc@xD}e~6bw1ALn*bY*jfOY+flZ?DNj5&ZkxWP9`LSfWly7|`
z>Yilf)wohd10A|Z8KVK>iBiUBfG}Fh_de1_BZ4$qlQEj6pao6FXqrSuYa*k4Oh&`u
zKh1vNGZ<|(j5hu$HrUE)_A~C0DW^9XZM#onan}YwleQZj07Ce7(gB5YZ?fGE@$J)W
ze0+zm-=RPR&kmnXx*|RGCNu36<9^R-b9bhhB$b$+lstIS7IE?SY-+s4#7u8#x)vY%
zN6;B><D%i+egK{PAJ}iRcl-F`hO+lK(&ZPvwMT_PH89Kqg8B&x5Ka8T*IQr%qM|Q+
zEDfYM0E9}v@SQzcr9_Y_{nDsZQ}7618kK4isq{;z^r`TR|1j;PX#@9Ny6wJ9@%XPZ
G`u-mWe1sYR

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index a3046967..6c10c3c1 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -925,11 +925,15 @@ const (
 	DenialReason_DENIAL_REASON_REPORTING_OVERDUE         DenialReason = 6 // Requester has >20% overdue reports (MAY threshold)
 	DenialReason_DENIAL_REASON_OFFER_EXPIRED             DenialReason = 7 // Offer TTL exceeded
 	// A signature this item depends on does not verify, or does not cover what
-	// arrived: the offer's Exchange signature (Offer.signature), or the agent's
-	// AgentRequestAcceptance over the request's items. A subrequest whose items
-	// are not exactly the agent's signed set projected onto this Exchange (an item
-	// dropped, added or reordered) has every item denied with this reason, in the
-	// body (see AgentRequestAcceptance).
+	// arrived: the offer's Exchange signature (Offer.signature), the item's
+	// AgentAcceptance, or the agent's AgentRequestAcceptance over the request's
+	// items. A subrequest whose items are not exactly the agent's signed set
+	// projected onto this Exchange (an item dropped, added or reordered) has every
+	// item denied with this reason, in the body (see AgentRequestAcceptance). On a
+	// purchase a Broker relayed, an item whose AgentAcceptance does not verify
+	// under the keys the directory requester.domain names publishes is denied with
+	// this reason, in the body, exactly as for the AgentRequestAcceptance: the item
+	// is denied and the whole request is not refused.
 	DenialReason_DENIAL_REASON_SIGNATURE_INVALID  DenialReason = 8
 	DenialReason_DENIAL_REASON_QUOTA_EXCEEDED     DenialReason = 9  // Subscription access count exhausted for this period
 	DenialReason_DENIAL_REASON_DELEGATION_INVALID DenialReason = 10 // Delegation missing, unverifiable, expired, holder binding failed, or scopes/caps do not cover the request
@@ -6806,7 +6810,12 @@ func (x *ReportingObligation) GetExtCritical() []string {
 // What refuses a report. A report that arrives after the transaction's
 // reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
 // and the Connect code failed_precondition. A malformed report is refused with
-// USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.
+// USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;
+// a report whose billing_id is not the billing_id of the transaction it names is
+// malformed. A report for a transaction the Exchange recorded under a different
+// agent is answered exactly as a report for an unknown transaction:
+// USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code
+// not_found, so the answer does not reveal that the transaction exists.
 // The reported quantity is unrestricted: no check on it refuses a report (see
 // UsageReportRejectionReason).
 type UsageReport struct {
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 5b96898b..8f2e57b0 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -106,6 +106,12 @@ const (
 type ExchangeServiceClient interface {
 	// Discover available resource offers matching the query.
 	// Steps 2-3 in the FORA flow.
+	//
+	// Discovery has no side effects. It creates no transaction, no billing
+	// authorization and no reporting obligation; an agent commits to an offer only
+	// on the execute path (ExecuteTransaction). Discovery is therefore safe to
+	// retry. A transport failure, such as an unreachable Exchange or a timeout, is
+	// the client's concern: the protocol defines no transient-failure code for it.
 	DiscoverResources(context.Context, *connect.Request[v1.ResourceQuery]) (*connect.Response[v1.ResourceResponse], error)
 	// Commit to an offer and receive delivery information.
 	// Steps 4-5 in the FORA flow.
@@ -281,6 +287,12 @@ func (c *exchangeServiceClient) GetAccountStatus(ctx context.Context, req *conne
 type ExchangeServiceHandler interface {
 	// Discover available resource offers matching the query.
 	// Steps 2-3 in the FORA flow.
+	//
+	// Discovery has no side effects. It creates no transaction, no billing
+	// authorization and no reporting obligation; an agent commits to an offer only
+	// on the execute path (ExecuteTransaction). Discovery is therefore safe to
+	// retry. A transport failure, such as an unreachable Exchange or a timeout, is
+	// the client's concern: the protocol defines no transient-failure code for it.
 	DiscoverResources(context.Context, *connect.Request[v1.ResourceQuery]) (*connect.Response[v1.ResourceResponse], error)
 	// Commit to an offer and receive delivery information.
 	// Steps 4-5 in the FORA flow.
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
index 567cdc0d..958394a1 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -107,7 +107,7 @@
   },
   "$id": "fora.v1.UsageReport.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
index 12fa44d9..b3dec648 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -111,7 +111,7 @@
   "$id": "fora.v1.UsageReport.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index f1ec0e51..d1ff7bb1 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -214,7 +214,7 @@ export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "di
 
 export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report."));
 
-export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
+export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
 
 export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 0bc51290..3b1e9f0f 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,28 @@
 
 ## Unreleased
 
+**Discovery has no side effects; usage-report and relayed-acceptance refusals are
+stated (comments only).** Five rules the contract implied but did not state:
+
+- `DiscoverResources` creates no transaction, no billing authorization and no reporting
+  obligation; an agent commits to an offer only on the execute path.
+- Discovery is therefore safe to retry. A transport failure, such as an unreachable
+  Exchange or a timeout, is the client's concern, and the protocol defines no
+  transient-failure code for it.
+- A usage report whose `billing_id` is not the transaction's is malformed:
+  `invalid_argument` with `USAGE_REPORT_REJECTION_REASON_MALFORMED`.
+- A usage report for a transaction recorded under a different agent is answered exactly as
+  for an unknown transaction, `not_found` with
+  `USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND`, so the answer does not reveal that
+  the transaction exists.
+- On a purchase a Broker relayed, an item whose `AgentAcceptance` does not verify under the
+  keys the directory `requester.domain` names publishes is denied in the body with
+  `DENIAL_REASON_SIGNATURE_INVALID`, as for the `AgentRequestAcceptance`; the whole request
+  is not refused.
+
+The `DiscoverResources` RPC, the `UsageReport` message and `DENIAL_REASON_SIGNATURE_INVALID`
+state them, and the transaction-flow and Exchange request-flow pages follow.
+
 **`GetAccountStatus` answers an agent with no account `NOT_FOUND` (comments only).**
 The RPC comment now states the answer for an agent the Exchange knows, its request
 signature verified, but that holds no account at that Exchange: the Connect code
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index c454ce14..4b50cbd5 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -390,6 +390,12 @@ import "fora/v1/vocab.proto";
 service ExchangeService {
   // Discover available resource offers matching the query.
   // Steps 2-3 in the FORA flow.
+  //
+  // Discovery has no side effects. It creates no transaction, no billing
+  // authorization and no reporting obligation; an agent commits to an offer only
+  // on the execute path (ExecuteTransaction). Discovery is therefore safe to
+  // retry. A transport failure, such as an unreachable Exchange or a timeout, is
+  // the client's concern: the protocol defines no transient-failure code for it.
   rpc DiscoverResources(ResourceQuery) returns (ResourceResponse);
 
   // Commit to an offer and receive delivery information.
@@ -2740,11 +2746,15 @@ enum DenialReason {
   DENIAL_REASON_REPORTING_OVERDUE = 6;    // Requester has >20% overdue reports (MAY threshold)
   DENIAL_REASON_OFFER_EXPIRED = 7;        // Offer TTL exceeded
   // A signature this item depends on does not verify, or does not cover what
-  // arrived: the offer's Exchange signature (Offer.signature), or the agent's
-  // AgentRequestAcceptance over the request's items. A subrequest whose items
-  // are not exactly the agent's signed set projected onto this Exchange (an item
-  // dropped, added or reordered) has every item denied with this reason, in the
-  // body (see AgentRequestAcceptance).
+  // arrived: the offer's Exchange signature (Offer.signature), the item's
+  // AgentAcceptance, or the agent's AgentRequestAcceptance over the request's
+  // items. A subrequest whose items are not exactly the agent's signed set
+  // projected onto this Exchange (an item dropped, added or reordered) has every
+  // item denied with this reason, in the body (see AgentRequestAcceptance). On a
+  // purchase a Broker relayed, an item whose AgentAcceptance does not verify
+  // under the keys the directory requester.domain names publishes is denied with
+  // this reason, in the body, exactly as for the AgentRequestAcceptance: the item
+  // is denied and the whole request is not refused.
   DENIAL_REASON_SIGNATURE_INVALID = 8;
   DENIAL_REASON_QUOTA_EXCEEDED = 9;       // Subscription access count exhausted for this period
   DENIAL_REASON_DELEGATION_INVALID = 10;  // Delegation missing, unverifiable, expired, holder binding failed, or scopes/caps do not cover the request
@@ -3338,7 +3348,12 @@ message ReportingObligation {
 // What refuses a report. A report that arrives after the transaction's
 // reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED
 // and the Connect code failed_precondition. A malformed report is refused with
-// USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument.
+// USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;
+// a report whose billing_id is not the billing_id of the transaction it names is
+// malformed. A report for a transaction the Exchange recorded under a different
+// agent is answered exactly as a report for an unknown transaction:
+// USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code
+// not_found, so the answer does not reveal that the transaction exists.
 // The reported quantity is unrestricted: no check on it refuses a report (see
 // UsageReportRejectionReason).
 message UsageReport {
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 743ec5f1..e0730441 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -774,15 +774,18 @@ func (h *ExchangeHandler) ReportUsage(
             forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MALFORMED)
     }
 
-    // 2. Verify transaction exists and billing_id matches
-    txn, err := h.txLog.Lookup(ctx, req.Msg.TransactionId)
+    // 2. Verify the transaction exists FOR THIS AGENT and billing_id matches. A
+    //    transaction recorded under a different agent is answered exactly as an
+    //    unknown one, so the answer does not reveal that it exists. A billing_id
+    //    that is not the transaction's makes the report malformed.
+    txn, err := h.txLog.LookupForAgent(ctx, agentFrom(ctx), req.Msg.TransactionId)
     if err != nil {
-        return nil, connect.NewError(connect.CodeNotFound,
-            fmt.Errorf("transaction %s not found", req.Msg.TransactionId))
+        return nil, usageReportRejected(connect.CodeNotFound,
+            forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND)
     }
     if txn.BillingID != req.Msg.BillingId {
-        return nil, connect.NewError(connect.CodeInvalidArgument,
-            fmt.Errorf("billing_id mismatch"))
+        return nil, usageReportRejected(connect.CodeInvalidArgument,
+            forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MALFORMED)
     }
 
     // 3. Submit to reporting tracker. A rejection is NOT a success body: it
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 0999b47a..b1431907 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -34,6 +34,8 @@ Multi-hop is the common case, not the exception. A request typically travels `Ag
 
 The agent or Broker queries the Exchange to discover available content and pricing.
 
+Discovery has no side effects: it creates no transaction, no billing authorization and no reporting obligation. An agent commits to an offer only on the execute path, with `ExecuteTransaction`. Discovery is therefore safe to retry. A transport failure, such as an unreachable Exchange or a timeout, is the client's concern, and the protocol defines no transient-failure code for it.
+
 ```
 POST /fora.v1.ExchangeService/DiscoverResources
 Content-Type: application/json
@@ -507,9 +509,9 @@ Content-Type: application/json
 
 The Broker re-packages the purchase:
 
-1. It verifies the agent's request signature, and checks that `requester.domain` is the agent's verified signing directory (the host of the WBA directory the covered `Signature-Agent` header names).
+1. It verifies the agent's request signature, and checks that `requester.domain` is the agent's verified signing directory (the host of the origin the agent's covered `Signature-Agent` member names).
 2. It groups the items by each signed offer's `exchange`. It checks that it can route to each Exchange and approves it for purchases before it sends anything.
-3. It sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. Each sub-request carries that Exchange's items in request order with their acceptances, the agent's `AgentRequestAcceptance` unchanged, the agent's `requester` and the agent's `idempotency_key` unchanged. Each Exchange verifies the agent's consent from the body, against the keys in the directory `requester.domain` names: the Broker's signature says only that the call comes from the Broker, and the acceptances are the only agent signatures the Exchange sees.
+3. It sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. Each sub-request carries that Exchange's items in request order with their acceptances, the agent's `AgentRequestAcceptance` unchanged, the agent's `requester` and the agent's `idempotency_key` unchanged. Each Exchange verifies the agent's consent from the body, against the keys in the directory `requester.domain` names: the Broker's signature says only that the call comes from the Broker, and the acceptances are the only agent signatures the Exchange sees. An item whose `AgentAcceptance` does not verify under those keys is denied in the body with `DENIAL_REASON_SIGNATURE_INVALID`, as for the `AgentRequestAcceptance`; the whole request is not refused.
 4. It combines the answers into one `BrokerTransactionResponse`.
 
 Re-packaging and combining are safe because each item is atomic and its integrity is per resource. Each offer carries the signature of the Exchange that issued it, covering price, terms, expiry and `exchange`. Each acceptance binds the agent to that one offer, the requester and the idempotency key. Each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases, and it cannot change what an item buys, from whom, at what price or for whom without breaking that offer's signature or the agent's acceptance. The `AgentRequestAcceptance` also stops it dropping, adding or reordering items within one Exchange's sub-request. No cross-item integrity is needed. On the response side, the one signed value in a result item is `retrieval_endpoint`, which the issuing Exchange signed. The other fields are the Broker's unsigned report of what each Exchange answered; the charge itself is still bounded by the signed offer the Exchange verified.
@@ -640,7 +642,7 @@ A successful response carries the Exchange-assigned `report_id` (the handle the
 1. The report is well formed. A malformed report is refused with `USAGE_REPORT_REJECTION_REASON_MALFORMED` and the Connect code `invalid_argument`
 2. Required fields present (as defined by `ReportingObligation.required_fields`)
 3. Report received within the reporting window (typically 24 hours). A report that arrives after the window closed is refused with `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` and the Connect code `failed_precondition`: the typed reason names the time cause
-4. Transaction exists and `billing_id` matches
+4. The transaction exists for this agent, and `billing_id` matches. A report whose `billing_id` is not the transaction's is malformed: `USAGE_REPORT_REJECTION_REASON_MALFORMED`, `invalid_argument`. A report for a transaction recorded under a different agent is answered exactly as for an unknown transaction, `USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND` with `not_found`, so the answer does not reveal that the transaction exists
 
 **The reported quantity is unrestricted.** A consumed quantity that differs from the offer's estimate is **not** a validation failure, above or below, and no check on the quantity refuses a report. The report is a record of the quantity consumed. Monitoring how far reports fall from estimates is the Exchange operator's own business, not part of the protocol.
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 7a54dc17..474290e9 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,28 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+**Discovery has no side effects; usage-report and relayed-acceptance refusals are
+stated (comments only).** Five rules the contract implied but did not state:
+
+- `DiscoverResources` creates no transaction, no billing authorization and no reporting
+  obligation; an agent commits to an offer only on the execute path.
+- Discovery is therefore safe to retry. A transport failure, such as an unreachable
+  Exchange or a timeout, is the client's concern, and the protocol defines no
+  transient-failure code for it.
+- A usage report whose `billing_id` is not the transaction's is malformed:
+  `invalid_argument` with `USAGE_REPORT_REJECTION_REASON_MALFORMED`.
+- A usage report for a transaction recorded under a different agent is answered exactly as
+  for an unknown transaction, `not_found` with
+  `USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND`, so the answer does not reveal that
+  the transaction exists.
+- On a purchase a Broker relayed, an item whose `AgentAcceptance` does not verify under the
+  keys the directory `requester.domain` names publishes is denied in the body with
+  `DENIAL_REASON_SIGNATURE_INVALID`, as for the `AgentRequestAcceptance`; the whole request
+  is not refused.
+
+The `DiscoverResources` RPC, the `UsageReport` message and `DENIAL_REASON_SIGNATURE_INVALID`
+state them, and the transaction-flow and Exchange request-flow pages follow.
+
 **`GetAccountStatus` answers an agent with no account `NOT_FOUND` (comments only).**
 The RPC comment now states the answer for an agent the Exchange knows, its request
 signature verified, but that holds no account at that Exchange: the Connect code

From 85191267f797701c4084677b3c5353ac18c79a58 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 14:09:18 -0400
Subject: [PATCH 112/164] Sign and verify Go requests under the Web Bot Auth
 profile
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Go SDK signed the v1.0.8 way: a bare Signature-Agent value, no tag, a
16-byte nonce, labels sig1..sigN required, and every appended signature
covering the one before it. It now follows the profile of
draft-ietf-webbotauth-httpsig-protocol-00 the authentication page states.

Signing (helpers.SignRequest, helpers.AppendSignature): Signature-Agent is
a dictionary, each signature adding its own member <label>="<origin>" and
covering it as "signature-agent";key="<label>". SignOptions gains
SignatureAgent (required, an https origin, checked by the new
CheckHTTPSOrigin), Label and CoverPrevious. Parameters are created,
expires, keyid, alg, nonce and tag="web-bot-auth", and the window is at
most five minutes (MaxSignatureLifetime). An appended signature covers
only its own request and member unless CoverPrevious is set, which covers
the earlier signature completely as WG-00 §5.2.2 requires. Appending to a
legacy String Signature-Agent is refused.

Verifying: each signature is checked independently. Its key is resolved
in the directory its own covered member names; a signature covering
several members follows the one keyed to its label. The tag must be
web-bot-auth; a FORA RPC must cover @method, @target-uri, content-digest
and authorization. The verifier also accepts the legacy String form on a
single-signature request, a member key that differs from the label, no
nonce and type=directory, and refuses the bare value. Coverage of an
earlier signature is optional and must be complete and point backwards;
labels carry no meaning. The hop budget counts every signature.
connectserver answers a refusal for a missing component or a refused form
with Accept-Signature (helpers.AcceptSignature, AcceptSignatureFor).

The delivery proof (SignAgentBinding) is a Web Bot Auth signature plus
@method and @target-uri, carrying the agent's Signature-Agent member and a
nonce. Key directories are fetched with no redirect, must be served as
application/http-message-signatures-directory+json, and only keys that
signed the response are handed out (helpers.SignDirectoryResponse,
VerifyDirectoryResponse); ReadWBADirectory requires every listed key to
have signed. The signing transport uses 64-byte nonces, requires a
directory, and gains WithSignerSource and WithCoverPrevious;
MonotonicWindow keeps every window at its ttl. The client refuses a
request the signer will not sign as malformed, before sending it.

The shared vectors are regenerated in the profile's format: sign-request,
verify-request-neg (with the expected Accept-Signature), the new
verify-request-accept, multisig-chain (each hop with its own directory),
pop, wire-constants, document-check and the new directory-response
vectors. The sign-request and directory-response vectors reproduce the
authentication page's examples byte for byte, and a test checks the
draft's Appendix E.2 Ed25519 vectors against the signature base builder.
The parity map names the new symbols.
---
 docs/sdk-parity-matrix.md                     |  27 +-
 sdk/go/connect/account_test.go                |  30 +-
 sdk/go/connect/admin_test.go                  |   4 +-
 sdk/go/connect/beforesign_test.go             |   8 +-
 sdk/go/connect/broker_execute_test.go         |   4 +-
 sdk/go/connect/callerror.go                   |  25 +-
 sdk/go/connect/catalog_test.go                |   8 +-
 sdk/go/connect/client_verify_test.go          |  18 +-
 sdk/go/connect/delivery_edge_test.go          |   4 +-
 .../gen_client_request_vectors_test.go        |   5 +-
 .../gen_synthesized_detail_vectors_test.go    |   2 +-
 sdk/go/connect/guards_test.go                 |  12 +-
 sdk/go/connect/identity_test.go               |  24 +-
 sdk/go/connect/options.go                     |  25 +-
 sdk/go/connect/options_wire_test.go           |  16 +-
 sdk/go/connect/raw_strict_test.go             |  12 +-
 sdk/go/connect/taxonomy_test.go               |  16 +-
 sdk/go/connect/validation_test.go             |   4 +-
 sdk/go/connect/verbs.go                       |  21 +-
 sdk/go/connect/verbs_test.go                  |  74 +-
 sdk/go/connectserver/accept_signature_test.go |  81 ++
 sdk/go/connectserver/broker_handler_test.go   |   2 +-
 sdk/go/connectserver/catalog_handler_test.go  |   6 +-
 sdk/go/connectserver/nonce_test.go            |  10 +-
 sdk/go/connectserver/on_reject_test.go        |   2 +-
 sdk/go/connectserver/read_cap_test.go         |   2 +-
 sdk/go/connectserver/reject.go                |  13 +-
 .../request_auth_failure_test.go              |  10 +-
 sdk/go/connectserver/server_verify_test.go    |   6 +-
 sdk/go/connectserver/verify_semantics_test.go |   2 +-
 sdk/go/core/sigwindow.go                      |   9 +-
 sdk/go/core/transport.go                      | 148 ++-
 sdk/go/core/transport_options_test.go         | 208 ++++-
 sdk/go/helpers/append_test.go                 |  40 +-
 sdk/go/helpers/context.go                     |  29 +-
 sdk/go/helpers/directory.go                   | 184 ++++
 sdk/go/helpers/directory_test.go              | 134 +++
 sdk/go/helpers/export_test.go                 |  39 +-
 sdk/go/helpers/gen_directory_vectors_test.go  | 200 ++++
 sdk/go/helpers/gen_multisig_vectors_test.go   | 598 ++++++------
 sdk/go/helpers/gen_util_vectors_test.go       |   5 +
 sdk/go/helpers/gen_vectors_test.go            | 870 +++++++++++-------
 sdk/go/helpers/keyresolver.go                 |  33 +-
 sdk/go/helpers/keyresolver_test.go            |   2 +-
 sdk/go/helpers/multisig_chain_extra_test.go   | 327 -------
 sdk/go/helpers/multisig_chain_test.go         | 130 ---
 sdk/go/helpers/multisig_test.go               | 324 +++++++
 sdk/go/helpers/nonce_test.go                  |   4 +-
 sdk/go/helpers/pop.go                         |  99 +-
 sdk/go/helpers/pop_base_internal_test.go      |  18 +-
 sdk/go/helpers/pop_test.go                    | 126 ++-
 sdk/go/helpers/sigbase.go                     | 174 ++--
 sdk/go/helpers/sign.go                        | 230 +++--
 sdk/go/helpers/sign_internal_test.go          |   7 +-
 .../signature_agent_base_internal_test.go     | 157 ----
 sdk/go/helpers/signature_agent_forms_test.go  | 207 -----
 .../helpers/signature_agent_required_test.go  |  87 --
 sdk/go/helpers/signature_agent_result_test.go |  98 --
 .../testdata/directory-response-vectors.json  | 216 +++++
 .../testdata/multisig-chain-vectors.json      | 608 +++++++++---
 sdk/go/helpers/testdata/pop-vectors.json      | 127 ++-
 .../testdata/sign-request-vectors.json        | 166 +++-
 .../verify-request-accept-vectors.json        | 140 +++
 .../testdata/verify-request-neg-vectors.json  | 236 ++++-
 .../testdata/wire-constants-vectors.json      |  20 +
 sdk/go/helpers/verify.go                      | 296 +++---
 sdk/go/helpers/verify_test.go                 |  19 +-
 sdk/go/helpers/verify_wireorder_test.go       |  16 +-
 sdk/go/helpers/wba.go                         | 388 ++++++++
 sdk/go/helpers/wba_internal_test.go           |  67 ++
 sdk/go/helpers/wba_profile_test.go            | 377 ++++++++
 sdk/go/resolvers/cachedofferkeyresolver.go    |   7 +-
 sdk/go/resolvers/contentfetch_test.go         |   8 +-
 sdk/go/resolvers/documents.go                 | 158 +++-
 sdk/go/resolvers/documents_test.go            |  44 +-
 .../signed_directory_helpers_test.go          |  72 ++
 .../testdata/document-check-vectors.json      |  14 +-
 sdk/go/resolvers/wba_join_corpus_test.go      |   2 +-
 sdk/go/resolvers/wbakeyresolver.go            |  19 +-
 .../resolvers/wbakeyresolver_debounce_test.go |   5 +-
 .../resolvers/wbakeyresolver_profile_test.go  | 148 +++
 sdk/go/resolvers/wbakeyresolver_test.go       |   6 +-
 sdk/parity/symbol-map.json                    |  65 +-
 83 files changed, 5551 insertions(+), 2633 deletions(-)
 create mode 100644 sdk/go/connectserver/accept_signature_test.go
 create mode 100644 sdk/go/helpers/directory.go
 create mode 100644 sdk/go/helpers/directory_test.go
 create mode 100644 sdk/go/helpers/gen_directory_vectors_test.go
 delete mode 100644 sdk/go/helpers/multisig_chain_extra_test.go
 delete mode 100644 sdk/go/helpers/multisig_chain_test.go
 create mode 100644 sdk/go/helpers/multisig_test.go
 delete mode 100644 sdk/go/helpers/signature_agent_base_internal_test.go
 delete mode 100644 sdk/go/helpers/signature_agent_forms_test.go
 delete mode 100644 sdk/go/helpers/signature_agent_required_test.go
 delete mode 100644 sdk/go/helpers/signature_agent_result_test.go
 create mode 100644 sdk/go/helpers/testdata/directory-response-vectors.json
 create mode 100644 sdk/go/helpers/testdata/verify-request-accept-vectors.json
 create mode 100644 sdk/go/helpers/wba.go
 create mode 100644 sdk/go/helpers/wba_internal_test.go
 create mode 100644 sdk/go/helpers/wba_profile_test.go
 create mode 100644 sdk/go/resolvers/signed_directory_helpers_test.go
 create mode 100644 sdk/go/resolvers/wbakeyresolver_profile_test.go

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 3e8922ec..21392b02 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 178 symbols at cross-language parity · 17 documented divergences · 198 Go-idiomatic exclusions · 42 conformance corpora, each tri-replayed.
+**At a glance:** 188 symbols at cross-language parity · 17 documented divergences · 209 Go-idiomatic exclusions · 44 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -24,6 +24,8 @@ Legend: a name = the public face in that language · `—` = intentionally none
 
 | Go | python | ts |
 |---|---|---|
+| `AcceptSignature` | `accept_signature` | `acceptSignature` |
+| `AcceptSignatureHeader` | `AcceptSignatureHeader` | `AcceptSignatureHeader` |
 | `AcceptanceSignatureAlgorithm` | `ACCEPTANCE_SIGNATURE_ALGORITHM` | `ACCEPTANCE_SIGNATURE_ALGORITHM` |
 | `AgentKeyHeader` | `AGENT_KEY_HEADER` | `AGENT_KEY_HEADER` |
 | `AppendSignature` | `append_signature` | `appendSignature` |
@@ -37,6 +39,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `CanonicalizeMoney` | `canonicalize_money` | `canonicalizeMoney` |
 | `CatalogRejectionDetail` | `catalog_rejection_detail` | `catalogRejectionDetail` |
 | `CheckAudience` | `check_audience` | `checkAudience` |
+| `CheckHTTPSOrigin` | `check_https_origin` | `checkHttpsOrigin` |
 | `CheckMeteredEstimate` | `check_metered_estimate` | `checkMeteredEstimate` |
 | `CheckOfferTermsUnpriced` | `check_offer_terms_unpriced` | `checkOfferTermsUnpriced` |
 | `CheckRegistrationData` | `check_registration_data` | `checkRegistrationData` |
@@ -51,6 +54,8 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ContentTypeProto` | `ContentTypeProto` | `ContentTypeProto` |
 | `DefaultKeyValidity` | `DEFAULT_KEY_VALIDITY` | `DEFAULT_KEY_VALIDITY_MS` |
 | `DirectoryDocument` | `directory_document` | `directoryDocument` |
+| `DirectoryResponseSignature` | `DirectoryResponseSignature` | `DirectoryResponseSignature` |
+| `DirectoryResponseTag` | `DirectoryResponseTag` | `DirectoryResponseTag` |
 | `DiscoveryHint` | `DiscoveryHint` | `DiscoveryHint` |
 | `DisputeFailureDetail` | `dispute_failure_detail` | `disputeFailureDetail` |
 | `DomainVerificationFailureDetail` | `domain_verification_failure_detail` | `domainVerificationFailureDetail` |
@@ -83,6 +88,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `MaxRegistrationSchemaDepth` | `MAX_REGISTRATION_SCHEMA_DEPTH` | `maxRegistrationSchemaDepth` |
 | `MaxRegistrationSchemaEvaluations` | `MAX_REGISTRATION_SCHEMA_EVALUATIONS` | `maxRegistrationSchemaEvaluations` |
 | `MaxRegistrationSchemaRefHops` | `MAX_REGISTRATION_SCHEMA_REF_HOPS` | `maxRegistrationSchemaRefHops` |
+| `MaxSignatureLifetime` | `MAX_SIGNATURE_LIFETIME` | `MAX_SIGNATURE_LIFETIME` |
 | `NewIdempotencyKey` | `generate_idempotency_key` | `generateIdempotencyKey` |
 | `NormalizeLicenseTerm` | `normalize_license_term` | `normalizeLicenseTerm` |
 | `NormalizeResourceEntry` | `normalize_resource_entry` | `normalizeResourceEntry` |
@@ -110,6 +116,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `SchemaVerdict` | `SchemaVerdict` | `SchemaVerdict` |
 | `ScopesSubset` | `scopes_subset` | `scopesSubset` |
 | `SignAgentBinding` | `sign_agent_binding` | `signInbound` |
+| `SignDirectoryResponse` | `sign_directory_response` | `signDirectoryResponse` |
 | `SignOffer` | `sign_offer_jcs` | `signOffer` |
 | `SignOfferAcceptance` | `sign_offer_acceptance_jcs` | `signOfferAcceptance` |
 | `SignRequest` | `sign_request` | `signRequest` |
@@ -124,11 +131,13 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ValidateLicenseTerm` | `validate_license_term` | `validateLicenseTerm` |
 | `ValidateResourceEntry` | `validate_resource_entry` | `validateResourceEntry` |
 | `ValidationRuleIDs` | `cross_field_rule_ids` | `crossFieldRuleIds` |
+| `VerifyDirectoryResponse` | `verify_directory_response` | `verifyDirectoryResponse` |
 | `VerifyMultisigRequest` | `verify_multisig_request_server` | `verifyMultisigRequestServer` |
 | `VerifyOfferAcceptance` | `verify_offer_acceptance_jcs` | `verifyOfferAcceptance` |
 | `VerifyRequest` | `verify_request` | `verifyRequestServer` |
 | `VerifyRequestAcceptance` | `verify_request_acceptance_jcs` | `verifyRequestAcceptance` |
 | `VerifyURLEd25519` | `verify_ed25519_signed_url` | `verifyEd25519SignedUrl` |
+| `WBATag` | `WBATag` | `WBATag` |
 | `WellKnownManifestVersion` | `WellKnownManifestVersion` | `WellKnownManifestVersion` |
 | `WellKnownPath` | `WellKnownPath` | `WellKnownPath` |
 
@@ -191,6 +200,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ReplayStore` | `ReplayStore` | `ReplayStore` |
 | `RequestIDHeader` | `RequestIDHeader` | `RequestIDHeader` |
 | `Result` | `Result` | `Result` |
+| `SignerSource` | `SignerSource` | `SignerSource` |
 | `SigningTransportFor` | `signing_transport_for` | `signingTransportFor` |
 | `VerifiedOffer` | `VerifiedOffer` | `VerifiedOffer` |
 | `Verifier` | `Verifier` | `Verifier` |
@@ -337,9 +347,12 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `core.SigningOption` | Go functional-option type for the signing transport; py/ts pass options objects. |
 | `core.Strict` | Member of the mapped core.Mode enum. Python spells it Mode.STRICT / Mode.OFF and TypeScript as the literal "strict" / "off". |
 | `core.WithAppendSigner` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `core.WithCoverPrevious` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `core.WithSignPredicate` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `core.WithSignatureAgent` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `core.WithSignerSource` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `core.WithWindow` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
+| `helpers.AcceptSignatureFor` | Go maps a verification error to its Accept-Signature value; py/ts carry the value on the verification verdict (accept_signature / acceptSignature), so no error-to-value function exists to mirror. |
 | `helpers.AgentBinding` | Go value struct holding the three proof header values; Python returns a tuple of them and TS returns a prepared request, so neither names a public type. |
 | `helpers.AgentIDParam` | Signed-URL query-parameter name; language-idiomatic inline constant, no cross-language public face. |
 | `helpers.AlgEd25519` | RFC 9421 alg tag constant; inlined per language. |
@@ -349,7 +362,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.AudienceMalformed` | Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer. |
 | `helpers.AudienceMismatch` | Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer. |
 | `helpers.AudienceNoVerdict` | Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer. |
-| `helpers.BrokerKeyIDPrefix` | Relay keyID wire-prefix constant; inlined per language. |
+| `helpers.BrokerKeyIDPrefix` | Deprecated Go constant kept for the v1 module surface; keyids are RFC 7638 thumbprints and nothing reads a relay prefix, so py/ts have no counterpart. |
 | `helpers.CheckRegistrationDataStruct` | Go-only raw-Struct face of the mapped helpers.CheckRegistrationData, and deliberately absent from the ports: it exists because a payload with NO JSON REPRESENTATION loses the evidence for that when Go converts a Struct to a map. The class has two members and the conversion erases both — a non-finite number becomes the string "NaN", "Infinity" or "-Infinity", which a payload may also carry legitimately, and a Value with no member of its kind oneof set becomes nil, which is also what a real JSON null gives — so the check has to run before the conversion. Python and TypeScript are handed a decoded object rather than protobuf nodes: it keeps the real float, so their check_registration_data / checkRegistrationData already see the non-finite member, and the unset-kind member has no spelling in either language. A second entry point there would be an alias with nothing to do. The verdict vocabulary is what the three share, and the registration-schema corpus pins it; neither member has a vector in any language, because JSON cannot write either value down. |
 | `helpers.CheckStrictMessage` | Go check of an already-decoded proto.Message, which is how the Go client holds a binary answer and every ErrorDetail; py/ts hold only proto-JSON, so check_strict/checkStrict over the decoded JSON is the whole of their check and there is no message object to pass. |
 | `helpers.ComponentParam` | Go value type for an RFC 9421 covered-component parameter; py/ts model components inline. |
@@ -359,6 +372,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrAudienceIdentity` | Go errors.Is sentinel for an unusable configured Exchange identity; py/ts raise/throw instead of exporting sentinels. |
 | `helpers.ErrBrokenSignatureChain` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrDigestMismatch` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrDirectoryResponseUnsigned` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrEmptyIdempotencyKey` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrEmptyMoney` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrExpired` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
@@ -382,7 +396,13 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.ErrOfferTermPriced` | Go errors.Is sentinel for an offer whose term carries pricing; py raises ValueError and ts throws from the same faces, and the shared offer-verify vectors pin that every language rejects the same offers. |
 | `helpers.ErrProofOfPossessionMismatch` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrRequestAcceptanceSignatureInvalid` | Go errors.Is sentinel; py/ts return false for a request-acceptance mismatch rather than exporting a sentinel. |
+| `helpers.ErrSignatureAgentForm` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrSignatureAgentNotOrigin` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrSignatureAgentRequired` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrSignatureLabel` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrSignatureLifetime` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrSignatureLifetimeTooLong` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
+| `helpers.ErrSignatureTag` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrSignatureVerify` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrTooManyHops` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
 | `helpers.ErrURLExpired` | Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels. |
@@ -399,6 +419,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.HintNoExchange` | Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
 | `helpers.HintUnlisted` | Member of the mapped helpers.HintAgreement vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
 | `helpers.HintValid` | Member of the mapped helpers.HintState vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared discovery-hint corpus pins the token every language must answer. |
+| `helpers.MissingComponentError` | Go typed error behind errors.Is(ErrMissingRequiredComponent); py/ts report the refusal as a reason token and carry the Accept-Signature value on the verdict. |
 | `helpers.NewContext` | Go context.Context accessor; py/ts thread verified-request state explicitly. |
 | `helpers.NewEd25519Signer` | Go Ed25519 Signer constructor; py/ts inject a sign function rather than constructing a named signer. |
 | `helpers.NewEd25519SignerFromSeed` | Go Ed25519 Signer-from-seed constructor; py/ts inject a sign function rather than constructing a named signer. |
@@ -471,6 +492,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 |---|---|---|---|
 | `helpers/testdata/acceptance-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/audience-vectors.json` | ✅ | ✅ | ✅ |
+| `helpers/testdata/directory-response-vectors.json` | ✅ | ❌ | ❌ |
 | `helpers/testdata/discovery-hint-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/error-detail-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/hashurl-vectors.json` | ✅ | ✅ | ✅ |
@@ -488,6 +510,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `helpers/testdata/sign-request-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/signedurl-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/thumbprint-vectors.json` | ✅ | ✅ | ✅ |
+| `helpers/testdata/verify-request-accept-vectors.json` | ✅ | ❌ | ❌ |
 | `helpers/testdata/verify-request-neg-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/wire-canonical-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/wire-constants-vectors.json` | ✅ | ✅ | ✅ |
diff --git a/sdk/go/connect/account_test.go b/sdk/go/connect/account_test.go
index 6cd1f931..03e4bd2f 100644
--- a/sdk/go/connect/account_test.go
+++ b/sdk/go/connect/account_test.go
@@ -109,7 +109,7 @@ func TestRegister_EchoesTheFreshlyFetchedTermsDigest(t *testing.T) {
 	})
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	req := &forav1.RegisterRequest{
 		Exchange:         domain,
@@ -148,7 +148,7 @@ func TestRegister_ACallerSuppliedDigestSuppressesTheRead(t *testing.T) {
 	})
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	mine := "sha256:cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 	if _, err := client.Register(context.Background(), &forav1.RegisterRequest{
@@ -174,7 +174,7 @@ func TestRegister_NoPublishedDigestLeavesTheFieldAbsent(t *testing.T) {
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	if _, err := client.Register(context.Background(), &forav1.RegisterRequest{
 		Exchange: domain,
@@ -200,7 +200,7 @@ func TestRegister_PreChecksThePublishedSchema(t *testing.T) {
 	})
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.Register(context.Background(), &forav1.RegisterRequest{
 		Exchange:         domain,
@@ -243,7 +243,7 @@ func refusedByTheSchema(
 	})
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 	_, err := client.Register(context.Background(), &forav1.RegisterRequest{
 		Exchange:         domain,
 		RegistrationData: registrationData(t, payload),
@@ -350,7 +350,7 @@ func TestRegister_ClassifiesARefusedRequirementsRead(t *testing.T) {
 
 			client := foraconnect.NewClient("http://home.invalid",
 				append(allowLoopback(t),
-					foraconnect.WithSigner(sig.signer),
+					foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 					foraconnect.WithRegistrationRequirements(refusingRequirements{tc.err}),
 				)...)
 
@@ -384,7 +384,7 @@ func TestRegister_AnUnusableSchemaDoesNotBlockTheSend(t *testing.T) {
 	})
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	if _, err := client.Register(context.Background(), &forav1.RegisterRequest{
 		Exchange:         domain,
@@ -423,7 +423,7 @@ func TestRegister_RefusesAnOutOfBoundsPayloadBeforeSigning(t *testing.T) {
 			origin := &recordingAccount{billingRef: "acct-1"}
 			domain, wkHits := selfAdvertisingExchange(t, sig, origin)
 			client := foraconnect.NewClient("http://home.invalid",
-				append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+				append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 			_, err := client.Register(context.Background(), &forav1.RegisterRequest{
 				Exchange:         domain,
@@ -453,7 +453,7 @@ func TestRegister_ARepeatReturnsTheSameHandle(t *testing.T) {
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	first, err := client.Register(context.Background(), &forav1.RegisterRequest{Exchange: domain})
 	if err != nil {
@@ -485,7 +485,7 @@ func TestRegister_TypedRefusalIsReadableThroughErrorDetailFrom(t *testing.T) {
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.Register(context.Background(), &forav1.RegisterRequest{Exchange: domain})
 	got, ok := foraconnect.ErrorDetailFrom(err)
@@ -510,7 +510,7 @@ func TestGetAccountStatus_NoAccountIsANormalAnswer(t *testing.T) {
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	resp, err := client.GetAccountStatus(context.Background(),
 		&forav1.GetAccountStatusRequest{Exchange: domain})
@@ -538,7 +538,7 @@ func TestGetAccountStatus_NoAccountIsANormalAnswer(t *testing.T) {
 // dialability question is not a substitute for.
 func TestAccountVerbs_RefuseAnUnaddressedRequest(t *testing.T) {
 	sig := newSigningFixture(t)
-	client := foraconnect.NewClient("http://home.invalid", foraconnect.WithSigner(sig.signer))
+	client := foraconnect.NewClient("http://home.invalid", foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 
 	for _, exchange := range []string{"", "https://exchange.test", "exchange.test/path", "ex_change.test"} {
 		name := exchange
@@ -589,7 +589,7 @@ func TestAccountVerbs_CallerVerWins(t *testing.T) {
 	origin := &recordingAccount{}
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	if _, err := client.Register(context.Background(),
 		&forav1.RegisterRequest{Ver: "9.9", Exchange: domain}); err != nil {
@@ -617,7 +617,7 @@ func TestAccountVerbs_RefuseARedirect(t *testing.T) {
 		}), nil)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.GetAccountStatus(context.Background(),
 		&forav1.GetAccountStatusRequest{Exchange: domain})
@@ -658,7 +658,7 @@ func TestGetAccountStatus_IdenticalRequestsInOneSecondAreAccepted(t *testing.T)
 		sig := newSigningFixture(t)
 		domain := serve(t, sig, &recordingAccount{})
 		client := foraconnect.NewClient("http://home.invalid", append(allowLoopback(t),
-			foraconnect.WithSigner(sig.signer),
+			foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 			foraconnect.WithSignWindow(window),
 		)...)
 		req := &forav1.GetAccountStatusRequest{Exchange: domain}
diff --git a/sdk/go/connect/admin_test.go b/sdk/go/connect/admin_test.go
index 4e0f7aef..9b10f346 100644
--- a/sdk/go/connect/admin_test.go
+++ b/sdk/go/connect/admin_test.go
@@ -92,7 +92,7 @@ func serveOperatorPlane(t *testing.T, sig signingFixture, plane *operatorPlane)
 func TestAdminClient_CoversEveryAdminRPC(t *testing.T) {
 	sig := newSigningFixture(t)
 	plane := &operatorPlane{}
-	client := foraconnect.NewAdminClient(serveOperatorPlane(t, sig, plane), foraconnect.WithSigner(sig.signer))
+	client := foraconnect.NewAdminClient(serveOperatorPlane(t, sig, plane), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 
 	methods := foraadminv1.File_fora_admin_v1_admin_proto.Services().ByName("AdminService").Methods()
 	if methods.Len() == 0 {
@@ -138,7 +138,7 @@ func callByName(t *testing.T, client *foraconnect.AdminClient, name string, inpu
 func TestAdminClient_DomainVerification(t *testing.T) {
 	sig := newSigningFixture(t)
 	plane := &operatorPlane{}
-	client := foraconnect.NewAdminClient(serveOperatorPlane(t, sig, plane), foraconnect.WithSigner(sig.signer))
+	client := foraconnect.NewAdminClient(serveOperatorPlane(t, sig, plane), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 	ctx := context.Background()
 
 	challenge, err := client.RequestDomainVerification(ctx, &forav1.DomainVerificationRequest{
diff --git a/sdk/go/connect/beforesign_test.go b/sdk/go/connect/beforesign_test.go
index 94af4e87..21b247f0 100644
--- a/sdk/go/connect/beforesign_test.go
+++ b/sdk/go/connect/beforesign_test.go
@@ -83,7 +83,7 @@ func TestBeforeSign_APatchedRequestEarnsATypedRefusal(t *testing.T) {
 	origin := &strictCatalog{}
 	srv := serveCatalog(t, sig, origin)
 	client := foraconnect.NewCatalogClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithBeforeSign(dropEntries))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithBeforeSign(dropEntries))
 
 	_, err := client.PushResources(context.Background(), validPush())
 	var cerr *foraconnect.CallError
@@ -99,7 +99,7 @@ func TestBeforeSign_APatchedRequestEarnsATypedRefusal(t *testing.T) {
 		t.Fatalf("typed reason = %v, want MALFORMED_ENTRY", detail)
 	}
 	// Without the hook the same request is accepted, so the refusal is the patch's.
-	plain := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	plain := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 	if _, err := plain.PushResources(context.Background(), validPush()); err != nil {
 		t.Fatalf("the unpatched push was refused: %v", err)
 	}
@@ -132,7 +132,7 @@ func TestBeforeSign_RefusesWithoutSending(t *testing.T) {
 			origin := &strictCatalog{}
 			srv := serveCatalog(t, sig, origin)
 			client := foraconnect.NewCatalogClient(srv.URL,
-				foraconnect.WithSigner(sig.signer), foraconnect.WithBeforeSign(hook))
+				foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithBeforeSign(hook))
 			_, err := client.PushResources(context.Background(), validPush())
 			var cerr *foraconnect.CallError
 			if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
@@ -153,7 +153,7 @@ func TestBeforeSign_RefusesWithoutSending(t *testing.T) {
 func TestBeforeSign_AnUnchangedRequestIsAccepted(t *testing.T) {
 	sig := newSigningFixture(t)
 	srv := serveCatalog(t, sig, &strictCatalog{})
-	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer),
+	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithBeforeSign(func(r *http.Request) (*http.Request, error) {
 			r.Header.Set("Content-Length", "1")
 			return r, nil
diff --git a/sdk/go/connect/broker_execute_test.go b/sdk/go/connect/broker_execute_test.go
index d2d25c10..61a4d477 100644
--- a/sdk/go/connect/broker_execute_test.go
+++ b/sdk/go/connect/broker_execute_test.go
@@ -100,7 +100,7 @@ func signedOfferAt(t *testing.T, id, exchange, currency string) core.VerifiedOff
 
 func brokerClient(srvURL string, sig signingFixture, extra ...foraconnect.ClientOption) *foraconnect.BrokerClient {
 	opts := append([]foraconnect.ClientOption{
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithSignatureAgent(agentDirectory),
 		foraconnect.WithRequester(testRequester()),
 	}, extra...)
@@ -306,7 +306,7 @@ func TestExecuteBatch_OneExchangeOnly(t *testing.T) {
 	origin := &recordingExecute{}
 	srv := serveExchange(t, sig, origin)
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()))
 
 	same := []core.VerifiedOffer{
 		signedOfferAt(t, "offer-1", "exchange.test", "USD"),
diff --git a/sdk/go/connect/callerror.go b/sdk/go/connect/callerror.go
index 8f9d6bc9..6085f861 100644
--- a/sdk/go/connect/callerror.go
+++ b/sdk/go/connect/callerror.go
@@ -6,6 +6,7 @@ import (
 	connectrpc "connectrpc.com/connect"
 
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 	"github.com/FORA-Protocol/protocol/sdk/go/internal/failure"
 )
 
@@ -217,8 +218,8 @@ func sendError(op string, err error) error {
 }
 
 // localRefusal returns the CallError for a failure this client computed during the
-// round trip — a pre-signing hook it refused, or an answer strict decoding refused —
-// and nil for anything else. connect-go wraps an error a transport returns as
+// round trip — a pre-signing hook it refused, a request the signer refused to
+// sign, or an answer strict decoding refused — and nil for anything else. connect-go wraps an error a transport returns as
 // CodeUnavailable and passes an interceptor's through as given, so without this the
 // first would read as a peer that never answered and the second as an unclassified
 // failure.
@@ -227,6 +228,9 @@ func localRefusal(op string, err error) *CallError {
 	if errors.As(err, &hook) {
 		return &CallError{Kind: CallMalformed, Op: op, Err: hook}
 	}
+	if signingRefused(err) {
+		return &CallError{Kind: CallMalformed, Op: op, Err: err}
+	}
 	var strict *strictDecodeError
 	if errors.As(err, &strict) {
 		out := &CallError{Kind: CallMalformed, Op: op, Err: strict}
@@ -240,3 +244,20 @@ func localRefusal(op string, err error) *CallError {
 	}
 	return nil
 }
+
+// signingRefused reports whether err is the signer refusing the request before
+// anything was sent: no Signature-Agent origin configured (WithSignatureAgent), a
+// value that is not an https origin, a window longer than the profile allows, an
+// unusable label or nonce, or a request whose Signature-Agent cannot take another
+// member. Each is a malformed call, never a peer that did not answer.
+func signingRefused(err error) bool {
+	for _, sentinel := range []error{
+		helpers.ErrSignatureAgentRequired, helpers.ErrSignatureAgentNotOrigin, helpers.ErrSignatureLifetime,
+		helpers.ErrSignatureLabel, helpers.ErrSignatureAgentForm, helpers.ErrInvalidNonce,
+	} {
+		if errors.Is(err, sentinel) {
+			return true
+		}
+	}
+	return false
+}
diff --git a/sdk/go/connect/catalog_test.go b/sdk/go/connect/catalog_test.go
index 5a671150..60c39d8d 100644
--- a/sdk/go/connect/catalog_test.go
+++ b/sdk/go/connect/catalog_test.go
@@ -113,7 +113,7 @@ func TestCatalog_PushIsSignedStampedAndAnswered(t *testing.T) {
 	sig := newSigningFixture(t)
 	origin := &recordingCatalog{}
 	srv := serveCatalog(t, sig, origin)
-	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	req := &forav1.PushResourcesRequest{
 		Exchange: "exchange.test", TenantId: "tenant-1",
@@ -143,7 +143,7 @@ func TestCatalog_RemoveAndRefreshKeepTheCallersVersion(t *testing.T) {
 	sig := newSigningFixture(t)
 	origin := &recordingCatalog{}
 	srv := serveCatalog(t, sig, origin)
-	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	if _, err := client.RemoveResources(context.Background(), &forav1.RemoveResourcesRequest{
 		Exchange: "exchange.test", TenantId: "tenant-1", Ver: "9.9",
@@ -175,7 +175,7 @@ func TestCatalog_RefusesAnUnaddressedRequestBeforeSending(t *testing.T) {
 	sig := newSigningFixture(t)
 	origin := &recordingCatalog{}
 	srv := serveCatalog(t, sig, origin)
-	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	// The last three are the reason this preflight uses the wire-domain rule rather
 	// than the routing one: every one of them is a perfectly usable HOST, so the
@@ -252,7 +252,7 @@ func TestCatalog_TypedRejectionIsReadable(t *testing.T) {
 		"fora.v1.CatalogService", "caller is not a contributor for publisher.test",
 		forav1.CatalogRejectionReason_CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR)}
 	srv := serveCatalog(t, sig, origin)
-	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+	client := foraconnect.NewCatalogClient(srv.URL, append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.PushResources(context.Background(), &forav1.PushResourcesRequest{
 		Exchange: "exchange.test", TenantId: "tenant-1", Entries: []*forav1.ResourceEntry{catalogEntry()},
diff --git a/sdk/go/connect/client_verify_test.go b/sdk/go/connect/client_verify_test.go
index 7f7a4b8f..587b2d38 100644
--- a/sdk/go/connect/client_verify_test.go
+++ b/sdk/go/connect/client_verify_test.go
@@ -266,7 +266,7 @@ func TestClientSign_RoundTripsThroughServerVerify(t *testing.T) {
 	replay := newMemReplayStore()
 	srv := newVerifyingServer(t, sig, replay, nil)
 
-	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()))
+	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()))
 
 	// Execute needs a VerifiedOffer; but this test only asserts transport
 	// acceptance, so a discover round-trip (empty offer set) is the minimal
@@ -314,7 +314,7 @@ func TestDiscover_SortsVerifiedAndRejected(t *testing.T) {
 	srv := newVerifyingServer(t, sig, replay, []*forav1.Offer{off.good, off.doctored})
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithOfferKey(off.exchangePub), // exchange offer-verifying key
 	)
 
@@ -364,7 +364,7 @@ func TestDiscover_MeteredOfferEstimateOptionalButPositive(t *testing.T) {
 		signedMeteredOffer(t, exPriv, "offer-zero-estimate", proto.Int32(0)),
 	})
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithOfferKey(exPub),
 	)
 
@@ -425,7 +425,7 @@ func TestDiscover_RejectsOfferWhoseTermCarriesPricing(t *testing.T) {
 
 	srv := newVerifyingServer(t, sig, newMemReplayStore(), []*forav1.Offer{unpriced, priced})
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithOfferKey(exPub),
 	)
 
@@ -455,7 +455,7 @@ func TestExecute_AcceptsVerifiedOffer(t *testing.T) {
 	srv := newVerifyingServer(t, sig, replay, []*forav1.Offer{off.good})
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithOfferKey(off.exchangePub),
 	)
 
@@ -489,7 +489,7 @@ func TestExecute_StampsProtocolVersion(t *testing.T) {
 	srv, origin := newVerifyingServerStub(t, sig, newMemReplayStore(), []*forav1.Offer{off.good})
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithOfferKey(off.exchangePub),
 	)
 
@@ -534,7 +534,7 @@ func TestRejectedOffer_RequiresUnsafeToExecute(t *testing.T) {
 	srv := newVerifyingServer(t, sig, replay, []*forav1.Offer{off.doctored})
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithOfferKey(off.exchangePub),
 	)
 
@@ -570,7 +570,7 @@ func TestWithVerification_StrictRejectsUnverifiable(t *testing.T) {
 
 	// No WithOfferKey → the client cannot resolve the exchange offer key, so even
 	// the genuinely-signed offer is UNVERIFIABLE and must be rejected under Strict.
-	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()))
+	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()))
 
 	res, err := client.Discover(context.Background(), &forav1.ResourceQuery{})
 	if err != nil {
@@ -596,7 +596,7 @@ func TestWithVerification_OffSurfacesUnverified(t *testing.T) {
 	srv := newVerifyingServer(t, sig, replay, []*forav1.Offer{off.good})
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithVerification(core.Off), // loud, named opt-out
 	)
 
diff --git a/sdk/go/connect/delivery_edge_test.go b/sdk/go/connect/delivery_edge_test.go
index 76071cfd..6c4f20cb 100644
--- a/sdk/go/connect/delivery_edge_test.go
+++ b/sdk/go/connect/delivery_edge_test.go
@@ -87,7 +87,7 @@ func TestExecute_ReturnsEveryDeliveryURLAsIssued(t *testing.T) {
 	want := []string{unverifiableURL(t), cloudFrontURL}
 	srv := serveExchange(t, sig, &issuingExchange{urls: want})
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()))
 	offers := []core.VerifiedOffer{
 		signedOfferAt(t, "offer-1", "exchange.test", "USD"),
 		signedOfferAt(t, "offer-2", "exchange.test", "USD"),
@@ -139,7 +139,7 @@ func TestFetch_DialsTheURLAsGivenWithTheAgentProof(t *testing.T) {
 	}))
 	t.Cleanup(edge.Close)
 	client := foraconnect.NewClient("http://exchange.test", append(allowLoopback(t),
-		foraconnect.WithSigner(sig.signer), foraconnect.WithAgentKey(sig.pub))...)
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithAgentKey(sig.pub))...)
 	target := edge.URL + "/content/asset-2?Expires=4102444800&Signature=c2lnbmF0dXJl&Key-Pair-Id=K2JCJMDEHXQW5F"
 
 	content, err := client.Fetch(context.Background(), target)
diff --git a/sdk/go/connect/gen_client_request_vectors_test.go b/sdk/go/connect/gen_client_request_vectors_test.go
index e397923c..670c2ef3 100644
--- a/sdk/go/connect/gen_client_request_vectors_test.go
+++ b/sdk/go/connect/gen_client_request_vectors_test.go
@@ -302,7 +302,7 @@ func executeVector(t *testing.T, baseOpts []foraconnect.ClientOption) clientRequ
 	defer srv.Close()
 
 	client := foraconnect.NewClient(srv.URL, append(append([]foraconnect.ClientOption{}, baseOpts...),
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithOfferKey(offers.exchangePub),
 	)...)
 	verified := verifyOne(t, offers)
@@ -389,8 +389,7 @@ func brokerExecuteVector(t *testing.T, baseOpts []foraconnect.ClientOption) clie
 	defer srv.Close()
 
 	client := foraconnect.NewBrokerClient(srv.URL, append(append([]foraconnect.ClientOption{}, baseOpts...),
-		foraconnect.WithSigner(sig.signer),
-		foraconnect.WithSignatureAgent("https://agent.test"),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 	)...)
 	if _, err := client.Execute(context.Background(), []core.VerifiedOffer{verifyOne(t, offers)},
 		foraconnect.WithIdempotencyKey(pinnedKey)); err != nil {
diff --git a/sdk/go/connect/gen_synthesized_detail_vectors_test.go b/sdk/go/connect/gen_synthesized_detail_vectors_test.go
index be1ff07b..f2145b69 100644
--- a/sdk/go/connect/gen_synthesized_detail_vectors_test.go
+++ b/sdk/go/connect/gen_synthesized_detail_vectors_test.go
@@ -229,7 +229,7 @@ func refusedByTheEdge(t *testing.T, token string) *foraconnect.CallError {
 
 	client := foraconnect.NewClient("http://home.invalid",
 		append(allowLoopback(t),
-			foraconnect.WithSigner(sig.signer),
+			foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 			foraconnect.WithAgentKey(sig.pub),
 		)...)
 	_, err := client.Fetch(context.Background(), edge.URL+"/doc?agent_id=tp")
diff --git a/sdk/go/connect/guards_test.go b/sdk/go/connect/guards_test.go
index 350005b1..bf7b659c 100644
--- a/sdk/go/connect/guards_test.go
+++ b/sdk/go/connect/guards_test.go
@@ -40,7 +40,7 @@ func (f fixedEndpoint) ResolveEndpoint(_ context.Context, _ string) (string, err
 func TestReportUsage_GuardRefusesAPrivateEndpoint(t *testing.T) {
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("https://home.invalid",
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		// Anchored to the domain, so the check passes: localhost:1 advertises
 		// localhost:1. The PORT is named on both sides deliberately — anchoring
 		// compares it, so an endpoint on a port the exchange value does not carry
@@ -91,7 +91,7 @@ func TestReportUsage_GuardSurvivesACallerSuppliedTransport(t *testing.T) {
 		t.Run(name, func(t *testing.T) {
 			sig := newSigningFixture(t)
 			client := foraconnect.NewClient("https://home.invalid",
-				foraconnect.WithSigner(sig.signer),
+				foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 				foraconnect.WithGuardedBaseTransport(base),
 				foraconnect.WithEndpointResolver(fixedEndpoint{endpoint: "https://localhost:1"}),
 			)
@@ -123,7 +123,7 @@ func TestFetch_GuardSurvivesACallerSuppliedTLSDialer(t *testing.T) {
 	tlsCfg := content.Client().Transport.(*http.Transport).TLSClientConfig
 
 	client := foraconnect.NewClient("https://home.invalid",
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithAgentKey(sig.pub),
 		foraconnect.WithGuardedBaseTransport(&http.Transport{
 			TLSClientConfig: tlsCfg,
@@ -155,7 +155,7 @@ func TestReportUsage_RefusesAnInjectedEndpointCarryingUserinfo(t *testing.T) {
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("http://home.invalid",
 		append(allowLoopback(t),
-			foraconnect.WithSigner(sig.signer),
+			foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 			// Anchored to the domain, so only the userinfo arm can refuse it.
 			foraconnect.WithEndpointResolver(fixedEndpoint{
 				endpoint: "http://agent:s3cret@exchange.test",
@@ -203,7 +203,7 @@ func TestReportUsage_RefusesRedirectAndNeverContactsTheTarget(t *testing.T) {
 	}))
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.ReportUsage(context.Background(), &forav1.UsageReport{
 		Exchange:      domain,
@@ -233,7 +233,7 @@ func TestReportUsage_PeerRefusalIsATypedCallError(t *testing.T) {
 	}))
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.ReportUsage(context.Background(), &forav1.UsageReport{
 		Exchange:      domain,
diff --git a/sdk/go/connect/identity_test.go b/sdk/go/connect/identity_test.go
index 77b29206..b7832264 100644
--- a/sdk/go/connect/identity_test.go
+++ b/sdk/go/connect/identity_test.go
@@ -12,6 +12,7 @@ import (
 	"crypto/ed25519"
 	"net/http"
 	"net/http/httptest"
+	"strings"
 	"testing"
 	"time"
 
@@ -49,11 +50,26 @@ func TestIdentityHelpers_MintAFreshAgent(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	directory := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
-		w.Header().Set("Content-Type", "application/json")
+	signer, err := helpers.NewEd25519Signer(keyID, priv)
+	if err != nil {
+		t.Fatal(err)
+	}
+	// The directory answers as the profile requires: its own media type, and a
+	// response signed by the key it lists for the authority it was fetched from.
+	directory := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		sig, err := helpers.SignDirectoryResponse(r.Context(), r.Host, body, []helpers.Signer{signer},
+			now.Unix(), now.Add(time.Hour).Unix())
+		if err != nil {
+			t.Errorf("sign directory response: %v", err)
+		}
+		sig.Apply(w.Header())
+		w.Header().Set("Content-Type", resolvers.WBADirectoryMediaType)
 		_, _ = w.Write(body)
 	}))
 	t.Cleanup(directory.Close)
+	// The Signature-Agent member is an https origin; the resolver fetches it from
+	// the plaintext test server through its Scheme option.
+	origin := "https://" + strings.TrimPrefix(directory.URL, "http://")
 
 	keys := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{Scheme: "http", HTTP: http.DefaultClient})
 	path, h := foraserver.NewCatalogServiceHandler(&recordingCatalog{}, foraserver.WithKeyResolver(keys))
@@ -62,7 +78,7 @@ func TestIdentityHelpers_MintAFreshAgent(t *testing.T) {
 	exchange := httptest.NewServer(mux)
 	t.Cleanup(exchange.Close)
 
-	transport, err := core.SigningTransportFor(priv, directory.URL, nil)
+	transport, err := core.SigningTransportFor(priv, origin, nil)
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -76,7 +92,7 @@ func TestIdentityHelpers_MintAFreshAgent(t *testing.T) {
 		t.Errorf("answer = %v", resp.Msg)
 	}
 
-	if _, err := core.SigningTransportFor(priv[:10], directory.URL, nil); err == nil {
+	if _, err := core.SigningTransportFor(priv[:10], origin, nil); err == nil {
 		t.Error("a truncated key was accepted")
 	}
 }
diff --git a/sdk/go/connect/options.go b/sdk/go/connect/options.go
index a247f162..54930261 100644
--- a/sdk/go/connect/options.go
+++ b/sdk/go/connect/options.go
@@ -192,24 +192,21 @@ func WithSignWindow(w core.Window) ClientOption {
 	return func(c *clientConfig) { c.signWindow = w }
 }
 
-// WithSignatureAgent names the WBA directory origin this client signs as — the
-// place a peer fetches to find the key that signed the request. It is stamped into
-// the Signature-Agent header of every outbound RFC 9421 request.
+// WithSignatureAgent names the key-directory origin this client signs as, such as
+// "https://agent.example" — the place a peer fetches to find the key that signed
+// the request. Every outbound RFC 9421 request signature, and every delivery-fetch
+// proof, carries it as its own Signature-Agent dictionary member,
+// sig1="<origin>", covered by the signature.
 //
-// Leaving it unset does not omit the header: signature-agent is one of the five
-// REQUIRED covered components, so the signature covers it either way and an unset
-// client signs an EMPTY value. A peer that resolves the caller's key from that
-// origin then has nothing to resolve, and refuses the call at verification — after
-// the request was routed, signed and sent, which is why the symptom is a 401 from
-// a healthy Exchange rather than anything the routing checks would catch.
+// It is required to sign. A client with no directory refuses every signed call
+// locally, as a malformed call (helpers.ErrSignatureAgentRequired), before
+// anything is sent, and a value that is not an https origin is refused the same
+// way (helpers.ErrSignatureAgentNotOrigin).
 //
 // One value per client, because one client speaks for one agent — the same reason
 // WithRequester is held rather than passed per call. An application signing as
-// several agents builds a client per agent.
-//
-// Stamped SET-IF-ABSENT. A request that already carries a Signature-Agent keeps
-// it, so a relay forwarding an originating agent's call does not overwrite the
-// value that agent's own signature covers.
+// several agents builds a client per agent, or composes core.NewSigningTransport
+// with core.WithSignerSource.
 func WithSignatureAgent(dir string) ClientOption {
 	return func(c *clientConfig) { c.signatureAgent = dir }
 }
diff --git a/sdk/go/connect/options_wire_test.go b/sdk/go/connect/options_wire_test.go
index 919ab892..7460eca3 100644
--- a/sdk/go/connect/options_wire_test.go
+++ b/sdk/go/connect/options_wire_test.go
@@ -36,7 +36,7 @@ func TestWithSignWindow_ReachesTheEmittedSignature(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithSignWindow(func() (int64, int64) { return created, expires }),
 	)
 	// The call fails at the response; the signature was already on the wire.
@@ -63,7 +63,7 @@ func TestSignWindow_DefaultsWhenUnset(t *testing.T) {
 	defer srv.Close()
 
 	sig := newSigningFixture(t)
-	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 	_, _ = client.Discover(context.Background(), &forav1.ResourceQuery{Uris: []string{"https://a.test/x"}})
 
 	if !strings.Contains(got, "created=") || !strings.Contains(got, "expires=") {
@@ -83,7 +83,7 @@ func TestWithMaxContentBytes_BoundsTheFetchedBody(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	opts := append(allowLoopback(t),
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithAgentKey(sig.pub),
 		foraconnect.WithMaxContentBytes(16),
 	)
@@ -101,7 +101,7 @@ func TestWithMaxContentBytes_BoundsTheFetchedBody(t *testing.T) {
 	// The same body under the default cap succeeds, so the refusal above is the
 	// supplied bound rather than something else about the response.
 	relaxed := append(allowLoopback(t),
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithAgentKey(sig.pub),
 	)
 	if _, err := foraconnect.NewClient("http://home.invalid", relaxed...).
@@ -126,7 +126,7 @@ func TestWithContentTimeout_BoundsTheFetch(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	opts := append(allowLoopback(t),
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithAgentKey(sig.pub),
 		foraconnect.WithContentTimeout(50*time.Millisecond),
 	)
@@ -155,7 +155,7 @@ func TestReportUsage_KeepsAKeyTheCallerPutOnTheMessage(t *testing.T) {
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	const own = "app-owned-key-1"
 	report := &forav1.UsageReport{
@@ -186,7 +186,7 @@ func TestWithProofWindow_ReachesTheFetchSignature(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	opts := append(allowLoopback(t),
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithAgentKey(sig.pub),
 		foraconnect.WithProofWindow(func() (int64, int64) { return created, expires }),
 	)
@@ -213,7 +213,7 @@ func TestProofWindow_DefaultsWhenUnset(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	opts := append(allowLoopback(t),
-		foraconnect.WithSigner(sig.signer), foraconnect.WithAgentKey(sig.pub))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithAgentKey(sig.pub))
 	if _, err := foraconnect.NewClient("http://home.invalid", opts...).
 		Fetch(context.Background(), content.URL+"/doc"); err != nil {
 		t.Fatalf("Fetch: %v", err)
diff --git a/sdk/go/connect/raw_strict_test.go b/sdk/go/connect/raw_strict_test.go
index 27f30aca..a7fda5b0 100644
--- a/sdk/go/connect/raw_strict_test.go
+++ b/sdk/go/connect/raw_strict_test.go
@@ -77,7 +77,7 @@ func TestRawBody_SendsTheBodyUnchanged(t *testing.T) {
 	}
 	raw := withUnknown(msg)
 
-	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 	resp, err := client.PushResources(context.Background(), nil, foraconnect.WithRawBody(raw))
 	if err != nil {
 		t.Fatalf("raw push: %v", err)
@@ -106,7 +106,7 @@ func TestRawBody_RoutesOnTheBodysExchange(t *testing.T) {
 	origin := &groupExchange{}
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	body, _ := proto.Marshal(&forav1.UsageReport{Exchange: domain, TransactionId: "txn-raw"})
 	if _, err := client.ReportUsage(context.Background(), nil, foraconnect.WithRawBody(body)); err != nil {
@@ -143,12 +143,12 @@ func TestStrictDecoding_RefusesAnUnknownField(t *testing.T) {
 	sig := newSigningFixture(t)
 	srv := serveCatalog(t, sig, unknownCatalog{})
 
-	lenient := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	lenient := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 	if _, err := lenient.PushResources(context.Background(), validPush()); err != nil {
 		t.Fatalf("default decode refused the answer: %v", err)
 	}
 	strict := foraconnect.NewCatalogClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithStrictDecoding())
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithStrictDecoding())
 	_, err := strict.PushResources(context.Background(), validPush())
 	var cerr *foraconnect.CallError
 	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
@@ -181,12 +181,12 @@ func TestStrictDecoding_RefusesACrossFieldViolation(t *testing.T) {
 	domain, _ := selfAdvertisingExchange(t, sig, statusAccount{})
 	req := &forav1.GetAccountStatusRequest{Exchange: domain}
 
-	lenient := foraconnect.NewClient("http://home.invalid", append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+	lenient := foraconnect.NewClient("http://home.invalid", append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 	if _, err := lenient.GetAccountStatus(context.Background(), req); err != nil {
 		t.Fatalf("default decode refused the answer: %v", err)
 	}
 	strict := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithStrictDecoding())...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithStrictDecoding())...)
 	_, err := strict.GetAccountStatus(context.Background(), req)
 	var cerr *foraconnect.CallError
 	if !errors.As(err, &cerr) || cerr.Kind != foraconnect.CallMalformed {
diff --git a/sdk/go/connect/taxonomy_test.go b/sdk/go/connect/taxonomy_test.go
index 46199eb7..b68a5d24 100644
--- a/sdk/go/connect/taxonomy_test.go
+++ b/sdk/go/connect/taxonomy_test.go
@@ -69,7 +69,7 @@ func TestReportUsage_TransientResolveFailureIsUnreachable(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.ReportUsage(context.Background(), &forav1.UsageReport{
 		Exchange:      domain,
@@ -96,7 +96,7 @@ func TestReportUsage_NoAdvertisedEndpointIsNotSent(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.ReportUsage(context.Background(), &forav1.UsageReport{
 		Exchange:      strings.TrimPrefix(srv.URL, "http://"),
@@ -125,7 +125,7 @@ func TestReportUsage_UnacceptedManifestVersionIsNotSent(t *testing.T) {
 
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.ReportUsage(context.Background(), &forav1.UsageReport{
 		Exchange:      strings.TrimPrefix(srv.URL, "http://"),
@@ -155,7 +155,7 @@ func TestSendError_ResourceExhaustedIsTooLarge(t *testing.T) {
 	}))
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.ReportUsage(context.Background(), &forav1.UsageReport{
 		Exchange:      domain,
@@ -200,7 +200,7 @@ func TestSendError_CallerCancellationIsNotARefusal(t *testing.T) {
 	}()
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 	_, err := client.ReportUsage(ctx, &forav1.UsageReport{
 		Exchange:      domain,
 		TransactionId: "txn-1",
@@ -235,7 +235,7 @@ func TestCallError_CarriesThePeersSentence(t *testing.T) {
 		domain, _ := selfAdvertisingExchange(t, sig, &recordingAccount{refuse: refusal})
 
 		client := foraconnect.NewClient("http://home.invalid",
-			append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+			append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 		_, err := client.GetAccountStatus(context.Background(),
 			&forav1.GetAccountStatusRequest{Exchange: domain})
 
@@ -257,7 +257,7 @@ func TestCallError_CarriesThePeersSentence(t *testing.T) {
 			}))
 
 		client := foraconnect.NewClient("http://home.invalid",
-			append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+			append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 		_, err := client.GetAccountStatus(context.Background(),
 			&forav1.GetAccountStatusRequest{Exchange: domain})
 
@@ -284,7 +284,7 @@ func TestCallError_CarriesThePeersSentence(t *testing.T) {
 
 		client := foraconnect.NewClient("http://home.invalid",
 			append(allowLoopback(t),
-				foraconnect.WithSigner(sig.signer),
+				foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 				foraconnect.WithAgentKey(sig.pub),
 			)...)
 		_, err := client.Fetch(context.Background(), edge.URL+"/doc?agent_id=tp")
diff --git a/sdk/go/connect/validation_test.go b/sdk/go/connect/validation_test.go
index cd8319e3..e0828094 100644
--- a/sdk/go/connect/validation_test.go
+++ b/sdk/go/connect/validation_test.go
@@ -36,7 +36,7 @@ func TestWithValidation_StrictRejectsInvalidRequest(t *testing.T) {
 	// Client A (validation Off) surfaces the offer so we can obtain a VerifiedOffer
 	// wrapping the proto-minimal fixture (no pricing.model).
 	surfacer := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithVerification(core.Off),
 	)
 	res, err := surfacer.Discover(context.Background(), &forav1.ResourceQuery{})
@@ -51,7 +51,7 @@ func TestWithValidation_StrictRejectsInvalidRequest(t *testing.T) {
 	// the model-less offer, which the bidirectional validate interceptor must reject
 	// with CodeInvalidArgument BEFORE the round-trip.
 	strict := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 		foraconnect.WithValidation(foraconnect.ValidationStrict),
 	)
 	_, err = strict.Execute(context.Background(), res.Verified()[0])
diff --git a/sdk/go/connect/verbs.go b/sdk/go/connect/verbs.go
index d8e2bd9f..2d8ec539 100644
--- a/sdk/go/connect/verbs.go
+++ b/sdk/go/connect/verbs.go
@@ -2,6 +2,8 @@ package connect
 
 import (
 	"context"
+	"crypto/rand"
+	"encoding/base64"
 	"errors"
 	"fmt"
 	"time"
@@ -193,24 +195,35 @@ func (c *Client) proofSigner() (resolvers.ProofSigner, error) {
 	if len(c.cfg.agentKey) == 0 {
 		return nil, errors.New("no agent public key configured; a bound fetch presents it alongside the proof (see WithAgentKey)")
 	}
+	if c.cfg.signatureAgent == "" {
+		return nil, errors.New("no Signature-Agent configured; a bound fetch names the agent's key directory (see WithSignatureAgent)")
+	}
 	window := c.cfg.proofWindow
 	if window == nil {
 		window = core.ClockWindow(time.Now, defaultProofWindow)
 	}
-	return proofSigner{signer: signer, pub: c.cfg.agentKey, window: window}, nil
+	return proofSigner{signer: signer, pub: c.cfg.agentKey, window: window, directory: c.cfg.signatureAgent}, nil
 }
 
 // proofSigner mints one agent binding per fetch.
 type proofSigner struct {
-	signer helpers.Signer
-	pub    []byte
-	window core.Window
+	signer    helpers.Signer
+	pub       []byte
+	window    core.Window
+	directory string
 }
 
+// proofNonceBytes is the entropy of a fetch proof's nonce: 64 bytes, the length
+// the signing transport gives every request signature.
+const proofNonceBytes = 64
+
 func (p proofSigner) SignFetch(ctx context.Context, target string) (helpers.AgentBinding, error) {
 	created, expires := p.window()
+	nonce := make([]byte, proofNonceBytes)
+	_, _ = rand.Read(nonce) // never fails since Go 1.24; on entropy failure the process crashes
 	return helpers.SignAgentBinding(ctx, p.signer, p.pub, helpers.PoPOptions{
 		URL: target, Created: created, Expires: expires,
+		SignatureAgent: p.directory, Nonce: base64.RawURLEncoding.EncodeToString(nonce),
 	})
 }
 
diff --git a/sdk/go/connect/verbs_test.go b/sdk/go/connect/verbs_test.go
index 42313efe..07dcf873 100644
--- a/sdk/go/connect/verbs_test.go
+++ b/sdk/go/connect/verbs_test.go
@@ -120,7 +120,7 @@ func TestDiscover_KeepsPerURIGroupsAndReasons(t *testing.T) {
 		},
 	}})
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithOfferKey(offers.exchangePub))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithOfferKey(offers.exchangePub))
 
 	res, err := client.Discover(context.Background(), &forav1.ResourceQuery{})
 	if err != nil {
@@ -159,7 +159,7 @@ func TestDiscover_GroupsWinOverTheFlatMirrorWithoutDoubleCounting(t *testing.T)
 		flat:   []*forav1.Offer{offers.good}, // the same offer, mirrored
 	})
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithOfferKey(offers.exchangePub))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithOfferKey(offers.exchangePub))
 
 	res, err := client.Discover(context.Background(), &forav1.ResourceQuery{})
 	if err != nil {
@@ -181,7 +181,7 @@ func TestDiscover_FlatFallback(t *testing.T) {
 	offers := newOfferFixture(t)
 	srv := serveExchange(t, sig, &groupExchange{flat: []*forav1.Offer{offers.good}})
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithOfferKey(offers.exchangePub))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithOfferKey(offers.exchangePub))
 
 	single, err := client.Discover(context.Background(),
 		&forav1.ResourceQuery{Uris: []string{"https://site.test/a"}})
@@ -219,7 +219,7 @@ func TestExecute_SendsRequesterAndAVerifyingAcceptance(t *testing.T) {
 	// protocol carries a single agent identity, so the test uses a single key and
 	// verifies the acceptance against its public half.
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithOfferKey(offers.exchangePub),
 		foraconnect.WithRequester(testRequester()),
 	)
@@ -232,7 +232,7 @@ func TestExecute_SendsRequesterAndAVerifyingAcceptance(t *testing.T) {
 	execOrigin := &recordingExecute{}
 	execSrv := serveExchange(t, sig, execOrigin)
 	execClient := foraconnect.NewClient(execSrv.URL,
-		foraconnect.WithSigner(sig.signer),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithRequester(testRequester()),
 	)
 	if _, err = execClient.Execute(context.Background(), verified,
@@ -288,7 +288,7 @@ func TestExecute_SkipsRequestAcceptanceWhenTheOfferNamesNoExchange(t *testing.T)
 	offer.SignatureAlgorithm = helpers.OfferSignatureAlgorithm
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()))
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()))
 	if _, err := client.Execute(context.Background(),
 		core.RejectedOffer{Offer: offer}.Unsafe()); err != nil {
 		t.Fatalf("Execute: %v", err)
@@ -321,21 +321,21 @@ func TestExecute_FailsClosedWithoutSendingAnything(t *testing.T) {
 		offer core.VerifiedOffer
 	}{
 		"no requester": {
-			[]foraconnect.ClientOption{foraconnect.WithSigner(sig.signer)}, signedOffer,
+			[]foraconnect.ClientOption{foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test")}, signedOffer,
 		},
 		"unsigned offer": {
 			[]foraconnect.ClientOption{
-				foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(testRequester()),
+				foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(testRequester()),
 			}, unsigned,
 		},
 		"requester with no id": {
 			[]foraconnect.ClientOption{
-				foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(noID),
+				foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(noID),
 			}, signedOffer,
 		},
 		"requester with no domain": {
 			[]foraconnect.ClientOption{
-				foraconnect.WithSigner(sig.signer), foraconnect.WithRequester(noDomain),
+				foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithRequester(noDomain),
 			}, signedOffer,
 		},
 	}
@@ -386,7 +386,7 @@ func TestBrokerResolve_SplitsThroughTheSameVerifier(t *testing.T) {
 	defer srv.Close()
 
 	broker := foraconnect.NewBrokerClient(srv.URL,
-		foraconnect.WithSigner(sig.signer), foraconnect.WithOfferKey(offers.exchangePub),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithOfferKey(offers.exchangePub),
 		foraconnect.WithRequester(testRequester()))
 	res, err := broker.Resolve(context.Background(),
 		&forav1.DiscoveryRequest{Ver: helpers.ProtocolVersion})
@@ -417,7 +417,7 @@ func TestBrokerResolve_WholeCallRefusalIsAnAnswer(t *testing.T) {
 	srv := httptest.NewServer(mux)
 	defer srv.Close()
 
-	broker := foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSigner(sig.signer),
+	broker := foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 		foraconnect.WithRequester(testRequester()))
 	res, err := broker.Resolve(context.Background(),
 		&forav1.DiscoveryRequest{Ver: helpers.ProtocolVersion})
@@ -452,7 +452,7 @@ func TestBrokerResolve_RefusesARequesterlessRequestLocally(t *testing.T) {
 	defer srv.Close()
 
 	// Every option the face uses EXCEPT WithRequester.
-	broker := foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSigner(sig.signer))
+	broker := foraconnect.NewBrokerClient(srv.URL, foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))
 	_, err := broker.Resolve(context.Background(),
 		&forav1.DiscoveryRequest{Ver: helpers.ProtocolVersion})
 
@@ -550,7 +550,7 @@ func TestReportUsage_RoutesThroughTheIssuingExchangesOwnManifest(t *testing.T) {
 	domain, wkHits := selfAdvertisingExchange(t, sig, origin)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	report := &forav1.UsageReport{
 		Exchange:      domain,
@@ -600,7 +600,7 @@ func TestReportUsage_RefusesUnroutableAddressesWithoutSending(t *testing.T) {
 	for name, domain := range tests {
 		t.Run(name, func(t *testing.T) {
 			client := foraconnect.NewClient("http://home.invalid",
-				append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+				append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 			report := &forav1.UsageReport{TransactionId: "txn-1"}
 			if domain != "" {
 				report.Exchange = domain
@@ -627,7 +627,7 @@ func TestDispute_RoutesLikeAReportAndStampsTheEnvelope(t *testing.T) {
 	domain, _ := selfAdvertisingExchange(t, sig, origin)
 
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	req := &forav1.DisputeRequest{
 		TransactionId: "txn-1",
@@ -659,7 +659,7 @@ func TestDispute_RoutesLikeAReportAndStampsTheEnvelope(t *testing.T) {
 func TestDispute_SharesTheRoutingRefusals(t *testing.T) {
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.Dispute(context.Background(),
 		&forav1.DisputeRequest{TransactionId: "txn-1", Exchange: "https://exchange.test"})
@@ -675,7 +675,7 @@ func TestDispute_SharesTheRoutingRefusals(t *testing.T) {
 func TestDispute_RefusesAnUnaddressedRequest(t *testing.T) {
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.Dispute(context.Background(),
 		&forav1.DisputeRequest{TransactionId: "txn-1", ReportId: "report-1"})
@@ -709,7 +709,7 @@ func TestFetch_PresentsTheProofAndSurfacesATypedRefusal(t *testing.T) {
 
 	client := foraconnect.NewClient("http://home.invalid",
 		append(allowLoopback(t),
-			foraconnect.WithSigner(sig.signer),
+			foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 			foraconnect.WithAgentKey(sig.pub),
 		)...)
 
@@ -752,7 +752,7 @@ func TestFetch_PresentsTheProofAndSurfacesATypedRefusal(t *testing.T) {
 func TestFetch_RefusesWithoutTheAgentPublicKey(t *testing.T) {
 	sig := newSigningFixture(t)
 	client := foraconnect.NewClient("http://home.invalid",
-		append(allowLoopback(t), foraconnect.WithSigner(sig.signer))...)
+		append(allowLoopback(t), foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"))...)
 
 	_, err := client.Fetch(context.Background(), "http://cdn.invalid/doc")
 	var cerr *foraconnect.CallError
@@ -765,14 +765,10 @@ func TestFetch_RefusesWithoutTheAgentPublicKey(t *testing.T) {
 // Signature-Agent: the directory a peer resolves the caller's key from
 // ---------------------------------------------------------------------------
 
-// The configured directory must reach the WIRE, covered by the signature.
-//
-// signature-agent is one of the five REQUIRED covered components, so the header is
-// signed whether or not a value was supplied — an unset client signs an EMPTY one.
-// A peer that resolves the caller's key by fetching the WBA directory at that
-// origin then has nothing to resolve and refuses the call at verification, after
-// it was routed, signed and sent. That failure mode is why asserting the option
-// sets a field would prove nothing: what matters is the bytes that leave.
+// The configured directory must reach the WIRE, covered by the signature, as the
+// signature's own Signature-Agent dictionary member. A peer resolves the caller's
+// key in the directory that member names, so asserting the option sets a field
+// would prove nothing: what matters is the bytes that leave.
 func TestWithSignatureAgent_ReachesTheWireCovered(t *testing.T) {
 	const dir = "https://agent.example"
 	sig := newSigningFixture(t)
@@ -789,8 +785,7 @@ func TestWithSignatureAgent_ReachesTheWireCovered(t *testing.T) {
 	defer srv.Close()
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(sig.signer),
-		foraconnect.WithSignatureAgent(dir),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent(dir),
 		foraconnect.WithRequester(testRequester()))
 
 	// The call must SUCCEED: the header participates in the signature, so a value
@@ -800,13 +795,13 @@ func TestWithSignatureAgent_ReachesTheWireCovered(t *testing.T) {
 	}); err != nil {
 		t.Fatalf("Discover: %v", err)
 	}
-	if gotAgent != dir {
-		t.Errorf("Signature-Agent = %q, want %q", gotAgent, dir)
+	if want := `sig1="` + dir + `"`; gotAgent != want {
+		t.Errorf("Signature-Agent = %q, want %q", gotAgent, want)
 	}
 	// Present is not enough — an uncovered header is one any intermediary may
 	// rewrite, which is the whole reason the component is in the required set.
-	if !strings.Contains(gotSigInput, `"signature-agent"`) {
-		t.Errorf("Signature-Input = %q; want it to cover signature-agent", gotSigInput)
+	if !strings.Contains(gotSigInput, `"signature-agent";key="sig1"`) {
+		t.Errorf("Signature-Input = %q; want it to cover its Signature-Agent member", gotSigInput)
 	}
 }
 
@@ -829,15 +824,14 @@ func TestWithSignatureAgent_BrokerClientStampsItToo(t *testing.T) {
 	defer srv.Close()
 
 	broker := foraconnect.NewBrokerClient(srv.URL,
-		foraconnect.WithSigner(sig.signer),
-		foraconnect.WithSignatureAgent(dir),
+		foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent(dir),
 		foraconnect.WithRequester(testRequester()))
 	if _, err := broker.Resolve(context.Background(),
 		&forav1.DiscoveryRequest{Ver: helpers.ProtocolVersion}); err != nil {
 		t.Fatalf("Resolve: %v", err)
 	}
-	if gotAgent != dir {
-		t.Errorf("Signature-Agent = %q, want %q", gotAgent, dir)
+	if want := `sig1="` + dir + `"`; gotAgent != want {
+		t.Errorf("Signature-Agent = %q, want %q", gotAgent, want)
 	}
 }
 
@@ -862,7 +856,7 @@ func TestFetch_CarriesTheClientsCorrelationID(t *testing.T) {
 
 	client := foraconnect.NewClient("http://home.invalid",
 		append(allowLoopback(t),
-			foraconnect.WithSigner(sig.signer),
+			foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"),
 			foraconnect.WithAgentKey(sig.pub),
 			foraconnect.WithRequestIDFunc(func() string { return "req-from-the-caller" }),
 		)...)
@@ -890,7 +884,7 @@ func TestFetch_CorrelatesEvenWithNoMintConfigured(t *testing.T) {
 
 	client := foraconnect.NewClient("http://home.invalid",
 		append(allowLoopback(t),
-			foraconnect.WithSigner(sig.signer), foraconnect.WithAgentKey(sig.pub),
+			foraconnect.WithSigner(sig.signer), foraconnect.WithSignatureAgent("https://agent.test"), foraconnect.WithAgentKey(sig.pub),
 		)...)
 
 	if _, err := client.Fetch(context.Background(), content.URL+"/doc?agent_id=tp"); err != nil {
diff --git a/sdk/go/connectserver/accept_signature_test.go b/sdk/go/connectserver/accept_signature_test.go
new file mode 100644
index 00000000..bc4df91c
--- /dev/null
+++ b/sdk/go/connectserver/accept_signature_test.go
@@ -0,0 +1,81 @@
+package connectserver_test
+
+// A refusal for a missing component, or for a form the Web Bot Auth profile does
+// not accept, answers 401 with an Accept-Signature field naming what the verifier
+// requires (WG-00 §5.3), so a WBA library can add the components and sign again.
+// A signature that is well formed but fails carries none.
+
+import (
+	"bytes"
+	"context"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+func TestReject_AcceptSignatureNamesWhatTheVerifierRequires(t *testing.T) {
+	t.Parallel()
+	f := newServerFixture(t)
+	stranger := newServerFixture(t)
+	srv := f.serve(t, newCountingReplayStore())
+	const procedure = "/fora.v1.ExchangeService/DiscoverResources"
+	body := []byte(`{}`)
+	now := time.Now().Unix()
+
+	post := func(t *testing.T, sign func(*http.Request) error) *http.Response {
+		t.Helper()
+		req, err := http.NewRequestWithContext(context.Background(), http.MethodPost, srv.URL+procedure, bytes.NewReader(body))
+		if err != nil {
+			t.Fatal(err)
+		}
+		req.Header.Set("Content-Type", "application/json")
+		if sign != nil {
+			if err := sign(req); err != nil {
+				t.Fatal(err)
+			}
+		}
+		resp, err := http.DefaultClient.Do(req)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Cleanup(func() { _ = resp.Body.Close() })
+		return resp
+	}
+	signAs := func(signer helpers.Signer) func(*http.Request) error {
+		return func(req *http.Request) error {
+			return helpers.SignRequest(context.Background(), req, body, signer,
+				helpers.SignOptions{Created: now, Expires: now + 60, SignatureAgent: "https://agent.example"})
+		}
+	}
+	for _, tc := range []struct {
+		name       string
+		sign       func(*http.Request) error
+		wantAccept bool
+	}{
+		{"unsigned", nil, true},
+		{"the v1.0.8 bare Signature-Agent", func(req *http.Request) error {
+			if err := signAs(f.signer)(req); err != nil {
+				return err
+			}
+			req.Header.Set(helpers.SignatureAgentHeader, "https://agent.example")
+			return nil
+		}, true},
+		{"a key the verifier does not know", signAs(stranger.signer), false},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			resp := post(t, tc.sign)
+			if resp.StatusCode != http.StatusUnauthorized {
+				t.Fatalf("status = %d, want 401", resp.StatusCode)
+			}
+			got := resp.Header.Get(helpers.AcceptSignatureHeader)
+			if tc.wantAccept && got != helpers.AcceptSignature(false) {
+				t.Errorf("Accept-Signature = %q, want %q", got, helpers.AcceptSignature(false))
+			}
+			if !tc.wantAccept && got != "" {
+				t.Errorf("Accept-Signature = %q on a refusal that a re-signature cannot fix", got)
+			}
+		})
+	}
+}
diff --git a/sdk/go/connectserver/broker_handler_test.go b/sdk/go/connectserver/broker_handler_test.go
index 7e1a1c17..54bc8df2 100644
--- a/sdk/go/connectserver/broker_handler_test.go
+++ b/sdk/go/connectserver/broker_handler_test.go
@@ -123,7 +123,7 @@ func TestServerVerify_ContextPopulated(t *testing.T) {
 	srv := httptest.NewServer(mux)
 	t.Cleanup(srv.Close)
 
-	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(signer))
+	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(signer), foraconnect.WithSignatureAgent("https://agent.example"))
 	if _, err := client.Discover(context.Background(), &forav1.ResourceQuery{}); err != nil {
 		t.Fatalf("Discover: %v", err)
 	}
diff --git a/sdk/go/connectserver/catalog_handler_test.go b/sdk/go/connectserver/catalog_handler_test.go
index a318bc7e..3ce8296d 100644
--- a/sdk/go/connectserver/catalog_handler_test.go
+++ b/sdk/go/connectserver/catalog_handler_test.go
@@ -114,7 +114,7 @@ func TestServerVerify_CatalogHandlerProvesTheSignerToTheOrigin(t *testing.T) {
 	origin := &catalogEcho{}
 	srv := mountCatalog(t, origin, foraserver.WithKeyResolver(resolver), foraserver.WithReplayStore(newCountingReplayStore()))
 
-	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(signer))
+	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(signer), foraconnect.WithSignatureAgent("https://agent.example"))
 	resp, err := client.PushResources(context.Background(), validPush())
 	if err != nil {
 		t.Fatalf("PushResources: %v", err)
@@ -150,7 +150,7 @@ func TestServerVerify_CatalogHandlerValidatesTheEnvelope(t *testing.T) {
 		foraserver.WithValidation(foraconnect.ValidationStrict),
 	)
 
-	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(signer))
+	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(signer), foraconnect.WithSignatureAgent("https://agent.example"))
 	bad := validPush()
 	bad.Entries[0].Path = "no-leading-slash"
 	_, err = client.PushResources(context.Background(), bad)
@@ -190,7 +190,7 @@ func TestServerVerify_CatalogHandlerDoesNotValidateByDefault(t *testing.T) {
 		foraserver.WithReplayStore(newCountingReplayStore()),
 	)
 
-	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(signer))
+	client := foraconnect.NewCatalogClient(srv.URL, foraconnect.WithSigner(signer), foraconnect.WithSignatureAgent("https://agent.example"))
 	bad := validPush()
 	bad.Entries[0].Path = "no-leading-slash"
 	if _, err := client.PushResources(context.Background(), bad); err != nil {
diff --git a/sdk/go/connectserver/nonce_test.go b/sdk/go/connectserver/nonce_test.go
index 6365f45e..02afc250 100644
--- a/sdk/go/connectserver/nonce_test.go
+++ b/sdk/go/connectserver/nonce_test.go
@@ -126,7 +126,7 @@ func TestSigningTransport_NonceMakesIdenticalRequestsUnique(t *testing.T) {
 	window := core.ClockWindow(func() time.Time { return now }, 5*time.Minute)
 	rec := &recordingTransport{next: http.DefaultTransport}
 	client := forav1connect.NewExchangeServiceClient(
-		&http.Client{Transport: core.NewSigningTransport(agent, rec, core.WithWindow(window))}, srv.URL)
+		&http.Client{Transport: core.NewSigningTransport(agent, rec, core.WithWindow(window), core.WithSignatureAgent("https://agent.example"))}, srv.URL)
 
 	for i := range 2 {
 		if _, err := client.DiscoverResources(context.Background(), connect.NewRequest(&forav1.ResourceQuery{})); err != nil {
@@ -140,8 +140,8 @@ func TestSigningTransport_NonceMakesIdenticalRequestsUnique(t *testing.T) {
 	if nonce1 == nil || nonce2 == nil {
 		t.Fatalf("signature carries no nonce: %q", first.header.Get("Signature-Input"))
 	}
-	if raw, err := base64.RawURLEncoding.DecodeString(nonce1[1]); err != nil || len(raw) != 16 {
-		t.Fatalf("nonce %q is not 16 bytes of base64url: %v", nonce1[1], err)
+	if raw, err := base64.RawURLEncoding.DecodeString(nonce1[1]); err != nil || len(raw) != 64 {
+		t.Fatalf("nonce %q is not 64 bytes of base64url: %v", nonce1[1], err)
 	}
 	if nonce1[1] == nonce2[1] {
 		t.Fatal("two signatures share a nonce")
@@ -189,7 +189,7 @@ func TestSigningTransport_NonceMakesIdenticalRequestsUnique(t *testing.T) {
 
 	t.Run("accepted sig1 cannot be replayed under a fresh sig2", func(t *testing.T) {
 		relay := core.NewSigningTransport(broker, http.DefaultTransport,
-			core.WithWindow(window), core.WithAppendSigner())
+			core.WithWindow(window), core.WithAppendSigner(), core.WithSignatureAgent("https://broker.example"))
 		if code := send(t, relay, first, nil); code != http.StatusUnauthorized {
 			t.Fatalf("status %d, want 401", code)
 		}
@@ -206,7 +206,7 @@ func TestSigningTransport_NonceMakesIdenticalRequestsUnique(t *testing.T) {
 		}
 		req.Header.Set("Content-Type", "application/json")
 		created, expires := window()
-		if err := helpers.SignRequest(context.Background(), req, body, agent, helpers.SignOptions{Created: created, Expires: expires}); err != nil {
+		if err := helpers.SignRequest(context.Background(), req, body, agent, helpers.SignOptions{Created: created, Expires: expires, SignatureAgent: "https://agent.example"}); err != nil {
 			t.Fatal(err)
 		}
 		if strings.Contains(req.Header.Get("Signature-Input"), "nonce") {
diff --git a/sdk/go/connectserver/on_reject_test.go b/sdk/go/connectserver/on_reject_test.go
index 8d892103..797c09f9 100644
--- a/sdk/go/connectserver/on_reject_test.go
+++ b/sdk/go/connectserver/on_reject_test.go
@@ -67,7 +67,7 @@ func TestOnReject_ReplayIsObservedAsErrReplayed(t *testing.T) {
 	obs := &capturedReject{}
 	srv := serveWithOnReject(t, f, alwaysReplayStore{}, obs)
 
-	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(f.signer))
+	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(f.signer), foraconnect.WithSignatureAgent("https://agent.example"))
 	if _, err := client.Discover(context.Background(), &forav1.ResourceQuery{}); err == nil {
 		t.Fatal("a replayed request must be rejected")
 	}
diff --git a/sdk/go/connectserver/read_cap_test.go b/sdk/go/connectserver/read_cap_test.go
index 6914ff7c..ee3b8514 100644
--- a/sdk/go/connectserver/read_cap_test.go
+++ b/sdk/go/connectserver/read_cap_test.go
@@ -130,7 +130,7 @@ func gzipCatalogClient(
 		foraserver.WithReplayStore(newCountingReplayStore()),
 	}, opts...)...)
 	return foraconnect.NewCatalogClient(srv.URL,
-		foraconnect.WithSigner(signer),
+		foraconnect.WithSigner(signer), foraconnect.WithSignatureAgent("https://agent.example"),
 		foraconnect.WithClientOptions(connectrpc.WithSendGzip()))
 }
 
diff --git a/sdk/go/connectserver/reject.go b/sdk/go/connectserver/reject.go
index 93140a0a..944ede1c 100644
--- a/sdk/go/connectserver/reject.go
+++ b/sdk/go/connectserver/reject.go
@@ -102,7 +102,10 @@ func httpStatus(code connectrpc.Code, err error) int {
 //
 // It answers the verify seam's two verdicts. ResourceExhausted is a resource or
 // policy limit — 413 for a body past the read cap, 429 otherwise; Unauthenticated is
-// 401. Any other Connect code is answered 401 as well, and the body still reports the
+// 401, and carries an Accept-Signature header naming the components and form the
+// profile requires when the request was unsigned, a signature omits a required
+// component, or its tag or Signature-Agent form is refused
+// (helpers.AcceptSignatureFor). Any other Connect code is answered 401 as well, and the body still reports the
 // code the caller passed: this is a REJECTION writer, not a code→status table, and it
 // refuses rather than translating a verdict it does not model. connect-go keeps the
 // canonical table unexported, so a copy of it here would be the second authority this
@@ -118,6 +121,14 @@ func WriteReject(w http.ResponseWriter, code connectrpc.Code, err error) {
 		}
 	}
 	w.Header().Set("Content-Type", "application/json")
+	if code == connectrpc.CodeUnauthenticated {
+		// WG-00 §5.3: a refusal for a missing component or a form the profile does
+		// not accept names what the verifier requires, so a Web Bot Auth library
+		// can add the components and sign again.
+		if accept, ok := helpers.AcceptSignatureFor(err); ok {
+			w.Header().Set(helpers.AcceptSignatureHeader, accept)
+		}
+	}
 	w.WriteHeader(httpStatus(code, err))
 	body, _ := json.Marshal(out)
 	_, _ = w.Write(body)
diff --git a/sdk/go/connectserver/request_auth_failure_test.go b/sdk/go/connectserver/request_auth_failure_test.go
index 11672d6d..d826d983 100644
--- a/sdk/go/connectserver/request_auth_failure_test.go
+++ b/sdk/go/connectserver/request_auth_failure_test.go
@@ -122,7 +122,7 @@ func TestRequestAuthFailure_EachReasonFromARealRefusal(t *testing.T) {
 			name:   "signed by a key the resolver does not know",
 			replay: newCountingReplayStore(),
 			call: func(u string) error {
-				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(stranger.signer)).
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(stranger.signer), foraconnect.WithSignatureAgent("https://agent.example")).
 					Discover(context.Background(), &forav1.ResourceQuery{})
 				return err
 			},
@@ -132,7 +132,7 @@ func TestRequestAuthFailure_EachReasonFromARealRefusal(t *testing.T) {
 			name:   "expired signature",
 			replay: newCountingReplayStore(),
 			call: func(u string) error {
-				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer), window(now.Add(-time.Hour))).
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer), foraconnect.WithSignatureAgent("https://agent.example"), window(now.Add(-time.Hour))).
 					Discover(context.Background(), &forav1.ResourceQuery{})
 				return err
 			},
@@ -142,7 +142,7 @@ func TestRequestAuthFailure_EachReasonFromARealRefusal(t *testing.T) {
 			name:   "signature created in the future",
 			replay: newCountingReplayStore(),
 			call: func(u string) error {
-				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer), window(now.Add(time.Hour))).
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer), foraconnect.WithSignatureAgent("https://agent.example"), window(now.Add(time.Hour))).
 					Discover(context.Background(), &forav1.ResourceQuery{})
 				return err
 			},
@@ -152,7 +152,7 @@ func TestRequestAuthFailure_EachReasonFromARealRefusal(t *testing.T) {
 			name:   "replayed signature",
 			replay: alwaysReplayStore{},
 			call: func(u string) error {
-				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer)).
+				_, err := foraconnect.NewClient(u, foraconnect.WithSigner(f.signer), foraconnect.WithSignatureAgent("https://agent.example")).
 					Discover(context.Background(), &forav1.ResourceQuery{})
 				return err
 			},
@@ -183,7 +183,7 @@ func TestRequestAuthFailure_ASignedRequestCarriesNoRefusal(t *testing.T) {
 	f := newServerFixture(t)
 	srv := f.serve(t, newCountingReplayStore())
 
-	_, err := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(f.signer)).
+	_, err := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(f.signer), foraconnect.WithSignatureAgent("https://agent.example")).
 		Discover(context.Background(), &forav1.ResourceQuery{})
 	if err != nil {
 		t.Fatalf("a correctly signed request was refused: %v", err)
diff --git a/sdk/go/connectserver/server_verify_test.go b/sdk/go/connectserver/server_verify_test.go
index fe72e962..421ea800 100644
--- a/sdk/go/connectserver/server_verify_test.go
+++ b/sdk/go/connectserver/server_verify_test.go
@@ -199,7 +199,7 @@ func TestServerVerify_RejectsReplayViaInjectedStore(t *testing.T) {
 	f := newServerFixture(t)
 	srv := f.serve(t, alwaysReplayStore{}) // every nonce is a replay
 
-	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(f.signer))
+	client := foraconnect.NewClient(srv.URL, foraconnect.WithSigner(f.signer), foraconnect.WithSignatureAgent("https://agent.example"))
 	_, err := client.Discover(context.Background(), &forav1.ResourceQuery{})
 	if err == nil {
 		t.Fatal("a replayed request must be rejected by the verify face")
@@ -228,7 +228,7 @@ func TestServerVerify_ReExecuteWithSameKeyAndWindowPassesGate(t *testing.T) {
 	now := time.Now()
 
 	client := foraconnect.NewClient(srv.URL,
-		foraconnect.WithSigner(f.signer),
+		foraconnect.WithSigner(f.signer), foraconnect.WithSignatureAgent("https://agent.example"),
 		foraconnect.WithSignWindow(core.ClockWindow(func() time.Time { return now }, 5*time.Minute)),
 		foraconnect.WithOfferKey(off.exchangePub),
 		// A purchase carries a detached acceptance covering the requester, so a
@@ -269,7 +269,7 @@ func TestServerVerify_RequestIDStampedOnRejectPath(t *testing.T) {
 	f := newServerFixture(t)
 	srv := f.serve(t, alwaysReplayStore{})
 
-	spy := &headerSpyTransport{next: core.NewSigningTransport(f.signer, http.DefaultTransport)}
+	spy := &headerSpyTransport{next: core.NewSigningTransport(f.signer, http.DefaultTransport, core.WithSignatureAgent("https://agent.example"))}
 	client := forav1connect.NewExchangeServiceClient(&http.Client{Transport: spy}, srv.URL)
 
 	_, err := client.DiscoverResources(context.Background(), connectrpc.NewRequest(&forav1.ResourceQuery{}))
diff --git a/sdk/go/connectserver/verify_semantics_test.go b/sdk/go/connectserver/verify_semantics_test.go
index 9eb2b4ae..0369e7ab 100644
--- a/sdk/go/connectserver/verify_semantics_test.go
+++ b/sdk/go/connectserver/verify_semantics_test.go
@@ -92,7 +92,7 @@ func signedDiscover(t *testing.T, srvURL string, f serverFixture, body []byte, c
 		t.Fatal(err)
 	}
 	req.Header.Set("Content-Type", "application/json")
-	if err := helpers.SignRequest(context.Background(), req, body, f.signer, helpers.SignOptions{Created: created, Expires: expires}); err != nil {
+	if err := helpers.SignRequest(context.Background(), req, body, f.signer, helpers.SignOptions{Created: created, Expires: expires, SignatureAgent: "https://agent.example"}); err != nil {
 		t.Fatalf("SignRequest: %v", err)
 	}
 	req.Body = io.NopCloser(bytes.NewReader(body))
diff --git a/sdk/go/core/sigwindow.go b/sdk/go/core/sigwindow.go
index 7cb02cd4..f287e3d8 100644
--- a/sdk/go/core/sigwindow.go
+++ b/sdk/go/core/sigwindow.go
@@ -33,9 +33,10 @@ func ClockWindow(now func() time.Time, ttl time.Duration) Window {
 // same wall-clock second, bumps expires by one second per call so no two
 // back-to-back signatures share a (keyid, expires) pair. The signing transport
 // no longer needs this for uniqueness: every signature carries a fresh nonce,
-// so ClockWindow is enough. Note that during a burst expires − created grows
-// past ttl, which a verifier with WithMaxSignatureAge(ttl) refuses. created tracks
-// now() — the pair stays clock-consistent for any caller that reads created.
+// so ClockWindow is enough. created moves with expires, so the window is always
+// exactly ttl and never exceeds the Web Bot Auth limit when ttl is at most
+// helpers.MaxSignatureLifetime; during a burst created leads the clock by the
+// burst's length in seconds, which a verifier's future-skew allowance absorbs.
 // Safe for concurrent RoundTrips: the running maximum is held in an atomic
 // updated by compare-and-swap. To adapt an application clock interface with a
 // Now() method, pass the method value: MonotonicWindow(clk.Now, ttl).
@@ -56,7 +57,7 @@ func MonotonicWindow(now func() time.Time, ttl time.Duration) Window {
 				next = prev + 1
 			}
 			if lastExpires.CompareAndSwap(prev, next) {
-				return n.Unix(), next
+				return next - int64(ttl.Seconds()), next
 			}
 		}
 	}
diff --git a/sdk/go/core/transport.go b/sdk/go/core/transport.go
index 2a7e5f61..e5d20c44 100644
--- a/sdk/go/core/transport.go
+++ b/sdk/go/core/transport.go
@@ -5,6 +5,8 @@ import (
 	"context"
 	"crypto/rand"
 	"encoding/base64"
+	"errors"
+	"fmt"
 	"io"
 	"net/http"
 	"time"
@@ -13,11 +15,12 @@ import (
 )
 
 // signWindow is the freshness TTL stamped on an outbound signature's
-// created/expires pair by the DEFAULT window. The verifier enforces the window
-// against its own clock; a generous default keeps a slow round-trip inside it
-// while still bounding replay. Callers with their own freshness policy inject
-// a window via WithWindow (see ClockWindow / MonotonicWindow).
-const signWindow = 5 * time.Minute
+// created/expires pair by the DEFAULT window: helpers.MaxSignatureLifetime, the
+// longest a Web Bot Auth request signature may live. The verifier enforces the
+// window against its own clock. Callers with their own freshness policy inject a
+// shorter window via WithWindow (see ClockWindow / MonotonicWindow); a longer one
+// is refused at signing with helpers.ErrSignatureLifetime.
+const signWindow = helpers.MaxSignatureLifetime
 
 // signingTransport is the client SIGN face realized as an http.RoundTripper —
 // NOT a connect.Interceptor. RFC 9421 Content-Digest is computed over the EXACT
@@ -34,20 +37,27 @@ type signingTransport struct {
 	// One field, one clock: the default reads time.Now once and adds
 	// signWindow; WithWindow replaces the whole pair source.
 	window Window
-	// directory is the signer's own directory origin, stamped into the covered
-	// Signature-Agent header set-if-absent (WithSignatureAgent). Empty = no
-	// stamping; helpers still bind the header (empty value) into the covered
-	// set at sign time.
+	// directory is the signer's own key-directory origin, written as the
+	// signature's Signature-Agent member (WithSignatureAgent). Every signature
+	// names one: with neither a directory nor a source, signing fails.
 	directory string
+	// source resolves the signer and its directory per request
+	// (WithSignerSource), overriding signer and directory.
+	source SignerSource
 	// appendOnly selects the always-append signing branch (WithAppendSigner).
 	appendOnly bool
+	// coverPrevious makes an appended signature cover the last earlier one
+	// (WithCoverPrevious).
+	coverPrevious bool
 	// predicate gates which requests are signed (WithSignPredicate). The
 	// default signs every bodied request — the pre-option compat contract.
 	predicate func(*http.Request) bool
 }
 
-// nonceBytes is the entropy per signature nonce (128 bits, 22 base64url chars).
-const nonceBytes = 16
+// nonceBytes is the entropy per signature nonce: 64 bytes, 86 base64url
+// characters. 64 bytes is the length the Web Bot Auth test vectors use, and widely
+// deployed WBA verifiers refuse a nonce of any other length.
+const nonceBytes = 64
 
 // newNonce returns a fresh random nonce, base64url without padding. Since Go
 // 1.24 crypto/rand.Read never returns an error: on entropy failure it crashes
@@ -62,6 +72,29 @@ func newNonce() string {
 // SigningOption customizes the signing transport built by NewSigningTransport.
 type SigningOption func(*signingTransport)
 
+// SignerSource returns the signer and its Signature-Agent directory origin for one
+// request, for a service that signs as many identities: an identity service
+// signing as the calling agent, a console signing as the calling publisher.
+type SignerSource func(ctx context.Context, req *http.Request) (helpers.Signer, string, error)
+
+// WithSignerSource resolves the signer and its directory per request through src,
+// in place of the transport's fixed signer and WithSignatureAgent directory. Every
+// signature it makes follows the same profile, with a fresh nonce. A source error,
+// a nil signer or an empty directory means nothing is sent: RoundTrip returns the
+// error and never reaches the base transport.
+func WithSignerSource(src SignerSource) SigningOption {
+	return func(t *signingTransport) { t.source = src }
+}
+
+// WithCoverPrevious makes an appended signature cover the last signature already
+// on the request, as WG-00 §5.2.2 permits a party that forwards a request unchanged
+// in every component that signature covers (see helpers.SignOptions.CoverPrevious).
+// It applies to the append branch only. A party that changed the request, such as
+// a Broker re-packaging a purchase, must not use it.
+func WithCoverPrevious() SigningOption {
+	return func(t *signingTransport) { t.coverPrevious = true }
+}
+
 // WithWindow replaces the default freshness window (time.Now + 5 minutes) with
 // a caller-supplied source of the RFC 9421 (created, expires) pair, for example
 // ClockWindow with the deployment's own TTL. Signature uniqueness does not
@@ -71,25 +104,26 @@ func WithWindow(w Window) SigningOption {
 }
 
 // WithAppendSigner routes EVERY signed request through helpers.AppendSignature
-// instead of the default split (fresh sig1 via helpers.SignRequest, chained
-// sigN+1 via helpers.AppendSignature when an incoming Signature is present).
-// This is the relay caller's mode: AppendSignature degrades to a plain sig1
-// when no incoming signature is present and appends a forwarding-chain-linked
-// sigN+1 when one is, so a single always-append branch serves both the
-// broker-originated and the relayed call. Each appended signature carries a
-// fresh nonce, so identical back-to-back relay requests do not collide in the
+// instead of the default split (a fresh sig1 via helpers.SignRequest, an appended
+// signature via helpers.AppendSignature when an incoming Signature is present).
+// AppendSignature produces a plain sig1 when no incoming signature is present and
+// adds a signature with its own label and Signature-Agent member when one is,
+// leaving the earlier signatures untouched. The appended signature covers only its
+// own request and member unless WithCoverPrevious is set. Each appended signature
+// carries a fresh nonce, so identical back-to-back requests do not collide in the
 // server's replay store.
 func WithAppendSigner() SigningOption {
 	return func(t *signingTransport) { t.appendOnly = true }
 }
 
-// WithSignatureAgent stamps the covered Signature-Agent header with dir — the
-// signer's own directory origin — when, and only when, the request does not
-// already carry one. The option supplies the covered VALUE; the sign helpers
-// still bind-if-absent to the empty string for the no-directory bootstrap
-// path. The set-if-absent guard is load-bearing on the relay path: the
-// originating agent already set Signature-Agent to ITS directory and its sig1
-// covers that value, so overwriting it would break sig1 at the verifier.
+// WithSignatureAgent names dir, the signer's own key-directory origin
+// ("https://agent.example"), as the Signature-Agent member every signature this
+// transport makes covers. It is required unless WithSignerSource supplies the
+// directory per request: a request signed with no directory is refused with
+// helpers.ErrSignatureAgentRequired, and a value that is not an https origin with
+// helpers.ErrSignatureAgentNotOrigin. On the append branch the member is added to
+// the request's Signature-Agent dictionary beside the earlier signers' members,
+// which stay untouched.
 func WithSignatureAgent(dir string) SigningOption {
 	return func(t *signingTransport) { t.directory = dir }
 }
@@ -112,15 +146,16 @@ func WithSignPredicate(fn func(*http.Request) bool) SigningOption {
 
 // NewSigningTransport returns the client sign-face RoundTripper: it buffers each
 // outbound request body, stamps Content-Digest, binds Authorization, and writes
-// the RFC 9421 Signature-Input / Signature headers via the injected Signer, then
-// forwards to base. A request already carrying a Signature header is CHAINED onto
-// (helpers.AppendSignature, the forwarding chain) rather than replaced.
-// base defaults to http.DefaultTransport when nil. It is exported so an
-// application can compose the SDK sign face onto its own *http.Client (e.g. to
-// wrap it in a tracing or metrics RoundTripper). Options tune transport
-// behavior — freshness window, relay append mode, Signature-Agent stamping,
-// and the sign predicate; with zero options the transport behaves exactly as
-// it did before options existed (sign every bodied request, time.Now + 5m).
+// the Web Bot Auth Signature-Agent member and the RFC 9421 Signature-Input /
+// Signature headers via the injected Signer, then forwards to base. A request
+// already carrying a Signature header gets an additional signature
+// (helpers.AppendSignature) rather than having its signature replaced. base
+// defaults to http.DefaultTransport when nil. It is exported so an application
+// can compose the SDK sign face onto its own *http.Client (e.g. to wrap it in a
+// tracing or metrics RoundTripper). Options tune transport behavior — the
+// directory (WithSignatureAgent, required unless a source supplies it), a
+// per-request signer source, the freshness window, append mode and coverage of
+// an earlier signature, and the sign predicate.
 func NewSigningTransport(signer helpers.Signer, base http.RoundTripper, opts ...SigningOption) http.RoundTripper {
 	if base == nil {
 		base = http.DefaultTransport
@@ -141,7 +176,7 @@ func NewSigningTransport(signer helpers.Signer, base http.RoundTripper, opts ...
 // unsigned — there is nothing to bind a Content-Digest to — as does any request
 // the sign predicate excludes.
 func (t *signingTransport) RoundTrip(req *http.Request) (*http.Response, error) {
-	if t.signer == nil || req.Body == nil || (t.predicate != nil && !t.predicate(req)) {
+	if (t.signer == nil && t.source == nil) || req.Body == nil || (t.predicate != nil && !t.predicate(req)) {
 		return t.base.RoundTrip(req)
 	}
 	body, err := io.ReadAll(req.Body)
@@ -155,25 +190,46 @@ func (t *signingTransport) RoundTrip(req *http.Request) (*http.Response, error)
 	if req.Host == "" && req.URL != nil {
 		req.Host = req.URL.Host
 	}
-	if t.directory != "" && req.Header.Get(helpers.SignatureAgentHeader) == "" {
-		req.Header.Set(helpers.SignatureAgentHeader, t.directory)
-	}
 	if err := t.sign(req.Context(), req, body); err != nil {
 		return nil, err
 	}
 	return t.base.RoundTrip(req)
 }
 
-// sign selects the single-sig or chain branch and stamps the freshness window
-// and a fresh nonce. The nonce makes every signature unique, so two identical
-// requests in the same second are not refused as replays of each other.
-// The appendOnly branch (WithAppendSigner) always chains: AppendSignature
-// degrades to a fresh sig1 when no incoming signature is present.
+// identityFor returns the signer and directory for req: the source's when one is
+// configured, the transport's own otherwise.
+func (t *signingTransport) identityFor(ctx context.Context, req *http.Request) (helpers.Signer, string, error) {
+	if t.source == nil {
+		return t.signer, t.directory, nil
+	}
+	signer, dir, err := t.source(ctx, req)
+	if err != nil {
+		return nil, "", fmt.Errorf("core: signer source: %w", err)
+	}
+	if signer == nil {
+		return nil, "", errors.New("core: signer source returned no signer")
+	}
+	return signer, dir, nil
+}
+
+// sign selects the single-signature or append branch and stamps the directory,
+// the freshness window and a fresh nonce. The nonce makes every signature unique,
+// so two identical requests in the same second are not refused as replays of each
+// other. The appendOnly branch (WithAppendSigner) always appends: AppendSignature
+// produces a fresh sig1 when no incoming signature is present.
 func (t *signingTransport) sign(ctx context.Context, req *http.Request, body []byte) error {
+	signer, dir, err := t.identityFor(ctx, req)
+	if err != nil {
+		return err
+	}
 	created, expires := t.window()
-	opts := helpers.SignOptions{Created: created, Expires: expires, Nonce: newNonce()}
+	opts := helpers.SignOptions{
+		Created: created, Expires: expires, Nonce: newNonce(),
+		SignatureAgent: dir, CoverPrevious: t.coverPrevious,
+	}
 	if t.appendOnly || req.Header.Get("Signature") != "" {
-		return helpers.AppendSignature(ctx, req, body, t.signer, opts)
+		return helpers.AppendSignature(ctx, req, body, signer, opts)
 	}
-	return helpers.SignRequest(ctx, req, body, t.signer, opts)
+	opts.CoverPrevious = false
+	return helpers.SignRequest(ctx, req, body, signer, opts)
 }
diff --git a/sdk/go/core/transport_options_test.go b/sdk/go/core/transport_options_test.go
index dfea48ce..9af347ad 100644
--- a/sdk/go/core/transport_options_test.go
+++ b/sdk/go/core/transport_options_test.go
@@ -16,6 +16,8 @@ import (
 	"bytes"
 	"context"
 	"crypto/ed25519"
+	"encoding/base64"
+	"errors"
 	"io"
 	"net/http"
 	"net/http/httptest"
@@ -78,6 +80,9 @@ func testSigner(t *testing.T) helpers.Signer {
 	return signer
 }
 
+// testDir is the key-directory origin the transports under test sign as.
+const testDir = "https://agent.example.com"
+
 // fixedWindow returns a core.Window that always supplies the same pair of
 // unix-seconds values. Used to assert that WithWindow injects the supplied
 // values into the emitted Signature-Input.
@@ -98,7 +103,7 @@ func TestWithWindow_InjectsCreatedExpiresIntoSignatureInput(t *testing.T) {
 	const wantCreated int64 = 1_700_000_000
 	const wantExpires int64 = 1_700_000_300
 
-	tr := core.NewSigningTransport(testSigner(t), cap,
+	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir),
 		core.WithWindow(fixedWindow(wantCreated, wantExpires)),
 	)
 
@@ -132,7 +137,7 @@ func TestWithWindow_InjectsCreatedExpiresIntoSignatureInput(t *testing.T) {
 func TestWithAppendSigner_AppendsSigOnPreSignedRequest(t *testing.T) {
 	t.Parallel()
 	cap := &captureTransport{}
-	tr := core.NewSigningTransport(testSigner(t), cap, core.WithAppendSigner())
+	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir), core.WithAppendSigner())
 
 	req := bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")
 	// Pre-stamp a synthetic sig1 to simulate a relayed request.
@@ -163,7 +168,7 @@ func TestWithAppendSigner_AppendsSigOnPreSignedRequest(t *testing.T) {
 func TestWithAppendSigner_AppendsSigOnFreshRequest(t *testing.T) {
 	t.Parallel()
 	cap := &captureTransport{}
-	tr := core.NewSigningTransport(testSigner(t), cap, core.WithAppendSigner())
+	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir), core.WithAppendSigner())
 
 	req := bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")
 	if _, err := tr.RoundTrip(req); err != nil {
@@ -176,14 +181,12 @@ func TestWithAppendSigner_AppendsSigOnFreshRequest(t *testing.T) {
 }
 
 // ---------------------------------------------------------------------------
-// (c) WithSignatureAgent — set-if-absent; preserves existing header.
+// (c) WithSignatureAgent — every signature's own Signature-Agent member.
 // ---------------------------------------------------------------------------
 
-// TestWithSignatureAgent_SetsHeaderWhenAbsent pins that a transport built with
-// WithSignatureAgent("https://broker.example.com") stamps the Signature-Agent
-// header when the request does not already carry one, so the directory origin
-// is in the covered component set.
-func TestWithSignatureAgent_SetsHeaderWhenAbsent(t *testing.T) {
+// TestWithSignatureAgent_StampsTheSignersMember pins that the directory becomes
+// the signature's own dictionary member, covered by it.
+func TestWithSignatureAgent_StampsTheSignersMember(t *testing.T) {
 	t.Parallel()
 	cap := &captureTransport{}
 	const dir = "https://broker.example.com"
@@ -193,33 +196,157 @@ func TestWithSignatureAgent_SetsHeaderWhenAbsent(t *testing.T) {
 	if _, err := tr.RoundTrip(req); err != nil {
 		t.Fatalf("RoundTrip: %v", err)
 	}
-	got := cap.req.Header.Get("Signature-Agent")
-	if got != dir {
-		t.Errorf("Signature-Agent = %q; want %q (set-if-absent must stamp the directory)", got, dir)
+	if got := cap.req.Header.Get("Signature-Agent"); got != `sig1="`+dir+`"` {
+		t.Errorf("Signature-Agent = %q; want the one-member dictionary", got)
+	}
+	if got := cap.req.Header.Get("Signature-Input"); !strings.Contains(got, `"signature-agent";key="sig1"`) ||
+		!strings.Contains(got, `tag="web-bot-auth"`) {
+		t.Errorf("Signature-Input = %q; want the member covered and the Web Bot Auth tag", got)
 	}
 }
 
-// TestWithSignatureAgent_PreservesExistingHeader pins that a transport built
-// with WithSignatureAgent does NOT overwrite a Signature-Agent header that the
-// originating agent already set — the relay must not clobber the agent's header,
-// which is covered by sig1 and would break sig1 verification at the Exchange.
-func TestWithSignatureAgent_PreservesExistingHeader(t *testing.T) {
+// TestWithSignatureAgent_AppendsBesideTheEarlierMember pins that a second signer
+// adds its own member beside the agent's, which stays byte-for-byte untouched so
+// the agent's signature still verifies.
+func TestWithSignatureAgent_AppendsBesideTheEarlierMember(t *testing.T) {
 	t.Parallel()
 	cap := &captureTransport{}
-	tr := core.NewSigningTransport(testSigner(t), cap,
-		core.WithSignatureAgent("https://broker.example.com"),
-	)
-
+	agent := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent("https://agent.example.com"))
 	req := bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")
-	const agentDir = "https://agent.example.com"
-	req.Header.Set("Signature-Agent", agentDir)
+	if _, err := agent.RoundTrip(req); err != nil {
+		t.Fatalf("agent RoundTrip: %v", err)
+	}
+	signed := cap.req.Clone(context.Background())
+	signed.Body = io.NopCloser(bytes.NewReader([]byte(`{"test":true}`)))
+	relay := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent("https://broker.example.com"))
+	if _, err := relay.RoundTrip(signed); err != nil {
+		t.Fatalf("relay RoundTrip: %v", err)
+	}
+	want := `sig1="https://agent.example.com", sig2="https://broker.example.com"`
+	if got := cap.req.Header.Get("Signature-Agent"); got != want {
+		t.Errorf("Signature-Agent = %q; want %q", got, want)
+	}
+}
 
-	if _, err := tr.RoundTrip(req); err != nil {
-		t.Fatalf("RoundTrip: %v", err)
+// TestSigningTransport_RefusesWithoutADirectory pins that a request is never
+// sent with a signature naming no directory: the transport returns the error and
+// the base transport is not reached.
+func TestSigningTransport_RefusesWithoutADirectory(t *testing.T) {
+	t.Parallel()
+	cap := &captureTransport{}
+	for name, tr := range map[string]http.RoundTripper{
+		"no directory":        core.NewSigningTransport(testSigner(t), cap),
+		"not an https origin": core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent("http://agent.example.com")),
+	} {
+		_, err := tr.RoundTrip(bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources"))
+		if !errors.Is(err, helpers.ErrSignatureAgentRequired) && !errors.Is(err, helpers.ErrSignatureAgentNotOrigin) {
+			t.Errorf("%s: RoundTrip error = %v; want a Signature-Agent refusal", name, err)
+		}
+	}
+	if cap.req != nil {
+		t.Error("a refused request reached the base transport")
+	}
+}
+
+// TestSigningTransport_NonceIs64Bytes pins the nonce length widely deployed Web
+// Bot Auth verifiers require: 64 random bytes, 86 base64url characters.
+func TestSigningTransport_NonceIs64Bytes(t *testing.T) {
+	t.Parallel()
+	cap := &captureTransport{}
+	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir))
+	if _, err := tr.RoundTrip(bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")); err != nil {
+		t.Fatal(err)
+	}
+	in := cap.req.Header.Get("Signature-Input")
+	i := strings.Index(in, `;nonce="`)
+	if i < 0 {
+		t.Fatalf("no nonce in %s", in)
+	}
+	nonce := in[i+len(`;nonce="`):]
+	nonce = nonce[:strings.IndexByte(nonce, '"')]
+	raw, err := base64.RawURLEncoding.DecodeString(nonce)
+	if err != nil || len(raw) != 64 {
+		t.Fatalf("nonce %q decodes to %d bytes (%v), want 64", nonce, len(raw), err)
+	}
+}
+
+// TestWithSignerSource_SignsAsTheSourcesIdentity pins the per-request signer: the
+// signature names the source's key and directory, and two identical requests from
+// one source in the same second carry distinct signatures.
+func TestWithSignerSource_SignsAsTheSourcesIdentity(t *testing.T) {
+	t.Parallel()
+	cap := &captureTransport{}
+	signer := testSigner(t)
+	src := func(_ context.Context, req *http.Request) (helpers.Signer, string, error) {
+		return signer, "https://" + req.Header.Get("X-Tenant") + ".agents.example", nil
+	}
+	frozen := time.Unix(1_700_000_000, 0)
+	tr := core.NewSigningTransport(nil, cap, core.WithSignerSource(src),
+		core.WithWindow(core.ClockWindow(func() time.Time { return frozen }, time.Minute)))
+	var sigs []string
+	for range 2 {
+		req := bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")
+		req.Header.Set("X-Tenant", "alice")
+		if _, err := tr.RoundTrip(req); err != nil {
+			t.Fatalf("RoundTrip: %v", err)
+		}
+		if got := cap.req.Header.Get("Signature-Agent"); got != `sig1="https://alice.agents.example"` {
+			t.Errorf("Signature-Agent = %q; want the source's directory", got)
+		}
+		if !strings.Contains(cap.req.Header.Get("Signature-Input"), `keyid="`+signer.KeyID()+`"`) {
+			t.Errorf("Signature-Input does not name the source's key: %s", cap.req.Header.Get("Signature-Input"))
+		}
+		sigs = append(sigs, cap.req.Header.Get("Signature"))
+	}
+	if sigs[0] == sigs[1] {
+		t.Error("two identical requests in one second carry the same signature; the second is a replay")
+	}
+}
+
+// TestWithSignerSource_AnErrorSendsNothing pins that a source that fails, or
+// names no signer, stops the request before the base transport.
+func TestWithSignerSource_AnErrorSendsNothing(t *testing.T) {
+	t.Parallel()
+	for name, src := range map[string]core.SignerSource{
+		"error": func(context.Context, *http.Request) (helpers.Signer, string, error) {
+			return nil, "", errors.New("no identity for this caller")
+		},
+		"no signer": func(context.Context, *http.Request) (helpers.Signer, string, error) { return nil, testDir, nil },
+	} {
+		cap := &captureTransport{}
+		tr := core.NewSigningTransport(nil, cap, core.WithSignerSource(src))
+		if _, err := tr.RoundTrip(bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")); err == nil {
+			t.Errorf("%s: RoundTrip succeeded", name)
+		}
+		if cap.req != nil {
+			t.Errorf("%s: the request reached the base transport", name)
+		}
+	}
+}
+
+// TestWithCoverPrevious_CoversTheEarlierSignature pins the forwarder's option: an
+// appended signature covers the earlier one's Signature and Signature-Input
+// members and its components.
+func TestWithCoverPrevious_CoversTheEarlierSignature(t *testing.T) {
+	t.Parallel()
+	cap := &captureTransport{}
+	agent := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir))
+	if _, err := agent.RoundTrip(bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")); err != nil {
+		t.Fatal(err)
+	}
+	signed := cap.req.Clone(context.Background())
+	signed.Body = io.NopCloser(bytes.NewReader([]byte(`{"test":true}`)))
+	fwd := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent("https://relay.example.com"),
+		core.WithAppendSigner(), core.WithCoverPrevious())
+	if _, err := fwd.RoundTrip(signed); err != nil {
+		t.Fatal(err)
 	}
-	got := cap.req.Header.Get("Signature-Agent")
-	if got != agentDir {
-		t.Errorf("Signature-Agent = %q; want %q (originating agent's header must be preserved)", got, agentDir)
+	in := cap.req.Header.Get("Signature-Input")
+	sig2 := in[strings.Index(in, "sig2="):]
+	for _, want := range []string{`"signature";key="sig1"`, `"signature-input";key="sig1"`, `"signature-agent";key="sig1"`} {
+		if !strings.Contains(sig2, want) {
+			t.Errorf("sig2 does not cover %s: %s", want, sig2)
+		}
 	}
 }
 
@@ -234,7 +361,7 @@ func TestWithSignPredicate_SkipsSigningWhenFalse(t *testing.T) {
 	t.Parallel()
 	cap := &captureTransport{}
 	neverSign := func(_ *http.Request) bool { return false }
-	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignPredicate(neverSign))
+	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir), core.WithSignPredicate(neverSign))
 
 	req := bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")
 	if _, err := tr.RoundTrip(req); err != nil {
@@ -252,7 +379,7 @@ func TestWithSignPredicate_SignsWhenTrue(t *testing.T) {
 	t.Parallel()
 	cap := &captureTransport{}
 	alwaysSign := func(_ *http.Request) bool { return true }
-	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignPredicate(alwaysSign))
+	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir), core.WithSignPredicate(alwaysSign))
 
 	// /other.* path — default behavior would skip it, but predicate overrides.
 	req := bodiedRequest(t, "/other.service/Method")
@@ -274,7 +401,7 @@ func TestWithSignPredicate_SignsWhenTrue(t *testing.T) {
 func TestDefaultBehavior_SignsBodiedRequest(t *testing.T) {
 	t.Parallel()
 	cap := &captureTransport{}
-	tr := core.NewSigningTransport(testSigner(t), cap) // zero options
+	tr := core.NewSigningTransport(testSigner(t), cap, core.WithSignatureAgent(testDir)) // zero options
 
 	req := bodiedRequest(t, "/fora.exchange.v1.ExchangeService/DiscoverResources")
 	if _, err := tr.RoundTrip(req); err != nil {
@@ -332,17 +459,22 @@ func TestMonotonicWindow_UniqueUnderRepeatedCallsWithinSameSecond(t *testing.T)
 	}
 }
 
-// TestMonotonicWindow_CreatedTracksWallClock pins that the created value still
-// tracks now() even when the monotonic bump adjusts expires upward — the
-// created/expires pair stays clock-consistent for callers that read created.
-func TestMonotonicWindow_CreatedTracksWallClock(t *testing.T) {
+// TestMonotonicWindow_LifetimeStaysTTL pins that created moves with expires, so
+// a burst never stretches a window past ttl — past the five-minute Web Bot Auth
+// limit when ttl is that limit — and the first call's created is now.
+func TestMonotonicWindow_LifetimeStaysTTL(t *testing.T) {
 	t.Parallel()
 	const ttl = 5 * time.Minute
 	frozen := time.Unix(1_700_000_000, 0)
 	w := core.MonotonicWindow(func() time.Time { return frozen }, ttl)
 
-	created, _ := w()
-	if created != frozen.Unix() {
-		t.Errorf("created = %d; want %d (clock-consistent, tracks now)", created, frozen.Unix())
+	for i := range 3 {
+		created, expires := w()
+		if i == 0 && created != frozen.Unix() {
+			t.Errorf("first created = %d; want %d", created, frozen.Unix())
+		}
+		if expires-created != int64(ttl.Seconds()) {
+			t.Errorf("call %d window = %ds; want %ds", i, expires-created, int64(ttl.Seconds()))
+		}
 	}
 }
diff --git a/sdk/go/helpers/append_test.go b/sdk/go/helpers/append_test.go
index 053cd886..c605fa35 100644
--- a/sdk/go/helpers/append_test.go
+++ b/sdk/go/helpers/append_test.go
@@ -12,10 +12,10 @@ import (
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 )
 
-// Ported from the v2 internal/httpsig/append_test.go behavioral spec, re-expressed
-// in the L1 idiom: the Signer interface (not a raw ed25519 key) and
-// VerifyOptions.Now (not a clock package). These pin AppendSignature's chain
-// semantics: empty→sig1, sig1→sig2, twice→sig3, and header preservation.
+// These pin AppendSignature's labelling and preservation semantics: empty→sig1,
+// sig1→sig2, twice→sig3, and the earlier signatures' headers left untouched. Each
+// appended signature covers only its own request and its own Signature-Agent
+// member unless CoverPrevious is set (see multisig_test.go).
 
 func appendReq(t *testing.T, target string, body []byte, auth string) *http.Request {
 	t.Helper()
@@ -49,7 +49,7 @@ func TestAppendSignature_EmptyHeaders(t *testing.T) {
 	req := appendReq(t, "https://broker.example/fora.v1.BrokerService/Resolve", body, "Bearer token123")
 
 	now := time.Unix(1700000000, 0)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
+	opts := helpers.SignOptions{SignatureAgent: tAgent, Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
 	if err := helpers.AppendSignature(ctx, req, body, signer, opts); err != nil {
 		t.Fatalf("AppendSignature: %v", err)
 	}
@@ -90,7 +90,7 @@ func TestAppendSignature_ByteIdenticalToSignRequest(t *testing.T) {
 	}
 	body := []byte(`{"hello":"world"}`)
 	now := time.Unix(1700000000, 0)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
+	opts := helpers.SignOptions{SignatureAgent: tAgent, Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
 
 	reqSign := appendReq(t, "https://broker.example/fora.v1.BrokerService/Resolve", body, "Bearer t")
 	if err := helpers.SignRequest(ctx, reqSign, body, signerA, opts); err != nil {
@@ -114,16 +114,16 @@ func TestAppendSignature_ByteIdenticalToSignRequest(t *testing.T) {
 func TestAppendSignature_ExistingSig1(t *testing.T) {
 	ctx := context.Background()
 	agentSigner, agentPub := mustSigner(t, "agent.test")
-	brokerSigner, brokerPub := mustSigner(t, helpers.BrokerKeyIDPrefix+"test")
+	brokerSigner, brokerPub := mustSigner(t, "broker.test")
 	body := []byte(`{"url":"https://publisher.example/content"}`)
 	req := appendReq(t, "https://broker.example/fora.v1.BrokerService/Resolve", body, "Bearer agent-token")
 
 	now := time.Unix(1700000000, 0)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
+	opts := helpers.SignOptions{SignatureAgent: tAgent, Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
 	if err := helpers.SignRequest(ctx, req, body, agentSigner, opts); err != nil {
 		t.Fatalf("agent SignRequest: %v", err)
 	}
-	opts2 := helpers.SignOptions{Created: now.Unix() + 1, Expires: now.Add(101 * time.Second).Unix()}
+	opts2 := helpers.SignOptions{SignatureAgent: tBroker, Created: now.Unix() + 1, Expires: now.Add(101 * time.Second).Unix()}
 	if err := helpers.AppendSignature(ctx, req, body, brokerSigner, opts2); err != nil {
 		t.Fatalf("broker AppendSignature: %v", err)
 	}
@@ -134,8 +134,8 @@ func TestAppendSignature_ExistingSig1(t *testing.T) {
 	}
 
 	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"agent.test":                       agentPub,
-		helpers.BrokerKeyIDPrefix + "test": brokerPub,
+		"agent.test":  agentPub,
+		"broker.test": brokerPub,
 	})
 	verified, err := helpers.VerifyMultisigRequestResolved(ctx, req, body, resolver, helpers.VerifyOptions{Now: now.Add(time.Second)})
 	if err != nil {
@@ -151,14 +151,14 @@ func TestAppendSignature_ExistingSig1(t *testing.T) {
 func TestAppendSignature_TwiceAppends(t *testing.T) {
 	ctx := context.Background()
 	s1, p1 := mustSigner(t, "signer1.test")
-	s2, p2 := mustSigner(t, helpers.BrokerKeyIDPrefix+"signer2")
-	s3, p3 := mustSigner(t, helpers.BrokerKeyIDPrefix+"signer3")
+	s2, p2 := mustSigner(t, "signer2.test")
+	s3, p3 := mustSigner(t, "signer3.test")
 	body := []byte(`{"relay":"chain"}`)
 	req := appendReq(t, "https://exchange.example/fora.v1.ExchangeService/CreateOffer", body, "")
 
 	now := time.Unix(1700000000, 0)
 	mk := func(d int64) helpers.SignOptions {
-		return helpers.SignOptions{Created: now.Unix() + d, Expires: now.Add(100*time.Second).Unix() + d}
+		return helpers.SignOptions{SignatureAgent: tAgent, Created: now.Unix() + d, Expires: now.Add(100*time.Second).Unix() + d}
 	}
 	if err := helpers.SignRequest(ctx, req, body, s1, mk(0)); err != nil {
 		t.Fatalf("SignRequest: %v", err)
@@ -171,9 +171,9 @@ func TestAppendSignature_TwiceAppends(t *testing.T) {
 	}
 
 	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"signer1.test":                        p1,
-		helpers.BrokerKeyIDPrefix + "signer2": p2,
-		helpers.BrokerKeyIDPrefix + "signer3": p3,
+		"signer1.test": p1,
+		"signer2.test": p2,
+		"signer3.test": p3,
 	})
 	verified, err := helpers.VerifyMultisigRequestResolved(ctx, req, body, resolver, helpers.VerifyOptions{Now: now.Add(3 * time.Second)})
 	if err != nil {
@@ -195,19 +195,19 @@ func TestAppendSignature_TwiceAppends(t *testing.T) {
 func TestAppendSignature_PreservesExistingHeaders(t *testing.T) {
 	ctx := context.Background()
 	s1, p1 := mustSigner(t, "first.test")
-	s2, _ := mustSigner(t, helpers.BrokerKeyIDPrefix+"second")
+	s2, _ := mustSigner(t, "second.test")
 	body := []byte(`{"test":"preserve"}`)
 	req := appendReq(t, "https://broker.example/fora.v1.BrokerService/Resolve", body, "Bearer original-token")
 
 	now := time.Unix(1700000000, 0)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
+	opts := helpers.SignOptions{SignatureAgent: tAgent, Created: now.Unix(), Expires: now.Add(100 * time.Second).Unix()}
 	if err := helpers.SignRequest(ctx, req, body, s1, opts); err != nil {
 		t.Fatalf("SignRequest: %v", err)
 	}
 	originalDigest := req.Header.Get("Content-Digest")
 	originalAuth := req.Header.Get("Authorization")
 
-	opts2 := helpers.SignOptions{Created: now.Unix() + 1, Expires: now.Add(101 * time.Second).Unix()}
+	opts2 := helpers.SignOptions{SignatureAgent: tAgent, Created: now.Unix() + 1, Expires: now.Add(101 * time.Second).Unix()}
 	if err := helpers.AppendSignature(ctx, req, body, s2, opts2); err != nil {
 		t.Fatalf("AppendSignature: %v", err)
 	}
diff --git a/sdk/go/helpers/context.go b/sdk/go/helpers/context.go
index 2560b927..28f13116 100644
--- a/sdk/go/helpers/context.go
+++ b/sdk/go/helpers/context.go
@@ -12,20 +12,22 @@ import "context"
 // slot).
 type verifiedKey struct{}
 
-// signatureAgentKey carries the request's Signature-Agent header value for the
-// duration of key resolution.
+// signatureAgentKey carries the key-directory origin of the signature being
+// verified for the duration of its key resolution.
 type signatureAgentKey struct{}
 
-// WithSignatureAgent returns a copy of ctx carrying the request's
-// Signature-Agent value (the signer's WBA key-directory URL). The resolved
-// verify entrypoints thread it before per-signature resolution so a KeyResolver
-// can fetch keys from the directory the signature commits to.
+// WithSignatureAgent returns a copy of ctx carrying dir, the https origin of the
+// key directory a signature's covered Signature-Agent member names. The resolved
+// verify entrypoints thread it before resolving each signature's key, a fresh
+// value per signature, so a KeyResolver fetches keys from the directory that
+// signature commits to.
 func WithSignatureAgent(ctx context.Context, dir string) context.Context {
 	return context.WithValue(ctx, signatureAgentKey{}, dir)
 }
 
-// SignatureAgentFromContext returns the Signature-Agent value threaded by the
-// resolved verify entrypoints, or "" when none was set.
+// SignatureAgentFromContext returns the key-directory origin threaded by the
+// resolved verify entrypoints for the signature being resolved, or "" when none
+// was set.
 func SignatureAgentFromContext(ctx context.Context) string {
 	v, _ := ctx.Value(signatureAgentKey{}).(string)
 	return v
@@ -40,16 +42,17 @@ func NewContext(ctx context.Context, v *VerifiedRequest) context.Context {
 	return context.WithValue(ctx, verifiedKey{}, v)
 }
 
-// NewMultisigContext returns a copy of ctx carrying all verified signatures
-// (sig1..sigN, in chain order). Production code MUST NOT call this outside the
+// NewMultisigContext returns a copy of ctx carrying all verified signatures, in
+// header order. Production code MUST NOT call this outside the
 // verifying transport.
 func NewMultisigContext(ctx context.Context, sigs []VerifiedRequest) context.Context {
 	return context.WithValue(ctx, multisigKey{}, sigs)
 }
 
-// FromContext returns the VerifiedRequest stashed in ctx, or nil. For a multisig
-// request it returns the first (agent) signature; it reads the multisig slot
-// first then falls back to the single slot, so the N=1 read path is unchanged.
+// FromContext returns the VerifiedRequest stashed in ctx, or nil. For a request
+// carrying several signatures it returns the first in header order; it reads the
+// multisig slot first then falls back to the single slot, so the N=1 read path is
+// unchanged.
 func FromContext(ctx context.Context) *VerifiedRequest {
 	if sigs, ok := ctx.Value(multisigKey{}).([]VerifiedRequest); ok && len(sigs) > 0 {
 		return &sigs[0]
diff --git a/sdk/go/helpers/directory.go b/sdk/go/helpers/directory.go
new file mode 100644
index 00000000..9a11567d
--- /dev/null
+++ b/sdk/go/helpers/directory.go
@@ -0,0 +1,184 @@
+package helpers
+
+import (
+	"context"
+	"crypto/ed25519"
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"net/http"
+	"strings"
+	"time"
+)
+
+// A key directory's response is signed once per key it lists (WG-00 §5.5 and
+// Appendix B.1), and FORA requires it. Each response signature covers
+// "@authority";req, the authority the directory was fetched from, and
+// content-digest, carries created, expires, keyid (the key's RFC 7638 thumbprint)
+// and alg, and has tag="http-message-signatures-directory". "@authority";req
+// takes its value from the request that fetched the directory, so the signature
+// cannot be served again under a different host.
+
+// ErrDirectoryResponseUnsigned signals a key directory whose response carries no
+// valid signature by a key the caller needs: none at all, or none by that key.
+var ErrDirectoryResponseUnsigned = errors.New("helpers: key directory response is not signed by the key")
+
+// directoryResponseCovered is the covered set of a directory response signature,
+// in the order a FORA signer emits it.
+var directoryResponseCovered = []CoveredComponent{
+	{Name: "@authority", Params: []ComponentParam{{Key: "req", Flag: true}}},
+	{Name: "content-digest"},
+}
+
+// DirectoryResponseSignature is the three header values a key directory's
+// response carries for its response signatures, ready to set on the response.
+type DirectoryResponseSignature struct {
+	ContentDigest  string
+	SignatureInput string
+	Signature      string
+}
+
+// Apply writes the three headers onto h.
+func (d DirectoryResponseSignature) Apply(h http.Header) {
+	h.Set("Content-Digest", d.ContentDigest)
+	h.Set("Signature-Input", d.SignatureInput)
+	h.Set("Signature", d.Signature)
+}
+
+// SignDirectoryResponse signs a key directory response once per signer, labels
+// sig1..sigN in order. authority is the host[:port] the directory is served
+// under, exactly as a client's request names it: lowercase, and without a port
+// when it is the scheme's default. body is the exact response body. Each signer's
+// KeyID must be the RFC 7638 thumbprint of a key the body lists; a verifier
+// matches the two. The window is the caller's: a directory response is cached and
+// may be signed for longer than a request.
+func SignDirectoryResponse(
+	ctx context.Context, authority string, body []byte, signers []Signer, created, expires int64,
+) (DirectoryResponseSignature, error) {
+	if authority == "" {
+		return DirectoryResponseSignature{}, errors.New("helpers: directory response needs the authority it is served under")
+	}
+	if len(signers) == 0 {
+		return DirectoryResponseSignature{}, errors.New("helpers: directory response needs at least one signer")
+	}
+	if created <= 0 || expires <= created {
+		return DirectoryResponseSignature{}, fmt.Errorf("%w: created=%d expires=%d", ErrSignatureLifetime, created, expires)
+	}
+	digest := ContentDigest(body)
+	inputs := make([]string, 0, len(signers))
+	sigs := make([]string, 0, len(signers))
+	for i, signer := range signers {
+		if signer == nil {
+			return DirectoryResponseSignature{}, fmt.Errorf("helpers: directory response signer %d is nil", i)
+		}
+		params := sigParams{
+			Label: fmt.Sprintf("sig%d", i+1), Covered: directoryResponseCovered,
+			KeyID: signer.KeyID(), Alg: signer.Algorithm(), Created: created, Expires: expires,
+			Tag: DirectoryResponseTag,
+		}
+		inner := signatureInputInner(params)
+		raw, err := signer.Sign(ctx, []byte(directoryResponseBase(authority, digest, inner)))
+		if err != nil {
+			return DirectoryResponseSignature{}, fmt.Errorf("helpers: sign directory response: %w", err)
+		}
+		inputs = append(inputs, params.Label+"="+inner)
+		sigs = append(sigs, params.Label+"=:"+base64.StdEncoding.EncodeToString(raw)+":")
+	}
+	return DirectoryResponseSignature{
+		ContentDigest:  digest,
+		SignatureInput: strings.Join(inputs, ", "),
+		Signature:      strings.Join(sigs, ", "),
+	}, nil
+}
+
+// directoryResponseBase is the signature base of a directory response signature:
+// the authority, the Content-Digest value, and the verbatim parameters.
+func directoryResponseBase(authority, digest, rawInner string) string {
+	return strings.Join([]string{
+		`"@authority";req: ` + strings.ToLower(authority),
+		`"content-digest": ` + digest,
+		`"@signature-params": ` + rawInner,
+	}, "\n")
+}
+
+// VerifyDirectoryResponse checks the response signatures of a fetched key
+// directory and returns the RFC 7638 thumbprints of the listed keys that signed
+// it. authority is the host[:port] the directory was fetched from, h the response
+// headers and body the exact response body; keys are the Ed25519 keys the body
+// lists.
+//
+// The Content-Digest must match the body, or no key is verified and the error
+// wraps ErrDigestMismatch. A response with no signature at all wraps
+// ErrDirectoryResponseUnsigned. Otherwise each response signature is judged on its
+// own, and one that fails is ignored rather than fatal: it must carry
+// tag="http-message-signatures-directory" and alg="ed25519", cover exactly
+// "@authority";req and content-digest, carry created no later than now plus the
+// 300-second skew and expires no earlier than now, and verify under the listed key
+// whose thumbprint its keyid names.
+func VerifyDirectoryResponse(
+	authority string, h http.Header, body []byte, keys []ed25519.PublicKey, now time.Time,
+) (map[string]bool, error) {
+	digest := joinedHeader(h, "Content-Digest")
+	if digest == "" {
+		return nil, fmt.Errorf("%w: %w", ErrDirectoryResponseUnsigned, ErrMissingContentDigest)
+	}
+	if digest != ContentDigest(body) {
+		return nil, fmt.Errorf("helpers: key directory response: %w", ErrDigestMismatch)
+	}
+	all, sigMap, err := parseAllSignatures(h)
+	if err != nil {
+		return nil, fmt.Errorf("%w: %w", ErrDirectoryResponseUnsigned, err)
+	}
+	byThumb := make(map[string]ed25519.PublicKey, len(keys))
+	for _, k := range keys {
+		if tp, terr := Thumbprint(k); terr == nil {
+			byThumb[tp] = k
+		}
+	}
+	verified := map[string]bool{}
+	for _, p := range all {
+		pub, ok := byThumb[p.KeyID]
+		if !ok || !directoryResponseParamsValid(p, now) {
+			continue
+		}
+		base := directoryResponseBaseFor(authority, digest, p)
+		if ed25519.Verify(pub, []byte(base), sigMap[p.Label]) {
+			verified[p.KeyID] = true
+		}
+	}
+	return verified, nil
+}
+
+// directoryResponseParamsValid applies the per-signature rules other than the
+// Ed25519 check: tag, alg, covered set and window.
+func directoryResponseParamsValid(p sigParams, now time.Time) bool {
+	if p.Tag != DirectoryResponseTag || !strings.EqualFold(p.Alg, AlgEd25519) {
+		return false
+	}
+	if len(p.Covered) != len(directoryResponseCovered) {
+		return false
+	}
+	for _, want := range directoryResponseCovered {
+		if !coversComponent(p.Covered, want) {
+			return false
+		}
+	}
+	if p.Created == 0 || p.Expires == 0 {
+		return false
+	}
+	return p.Created <= now.Unix()+int64(defaultMaxFutureSkew.Seconds()) && p.Expires >= now.Unix()
+}
+
+// directoryResponseBaseFor rebuilds a directory response signature's base in the
+// order its own covered set lists, ending with its verbatim parameters.
+func directoryResponseBaseFor(authority, digest string, p sigParams) string {
+	lines := make([]string, 0, len(p.Covered)+1)
+	for _, c := range p.Covered {
+		if strings.EqualFold(c.Name, "@authority") {
+			lines = append(lines, `"@authority";req: `+strings.ToLower(authority))
+			continue
+		}
+		lines = append(lines, `"content-digest": `+digest)
+	}
+	return strings.Join(append(lines, `"@signature-params": `+p.RawInner), "\n")
+}
diff --git a/sdk/go/helpers/directory_test.go b/sdk/go/helpers/directory_test.go
new file mode 100644
index 00000000..fdef61d0
--- /dev/null
+++ b/sdk/go/helpers/directory_test.go
@@ -0,0 +1,134 @@
+package helpers_test
+
+import (
+	"context"
+	"crypto/ed25519"
+	"encoding/base64"
+	"errors"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// The authentication page's Key Directory example: the directory of the agent in
+// the single-hop example, signed with the RFC 8037 test key.
+const docDirectoryBody = "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}"
+
+func rfc8037Signer(t *testing.T) (helpers.Signer, ed25519.PublicKey) {
+	t.Helper()
+	seed, err := base64.RawURLEncoding.DecodeString("nWGxne_9WmC6hEr0kuwsxERJxWl7MmkZcDusAxyuf2A")
+	if err != nil {
+		t.Fatal(err)
+	}
+	priv := ed25519.NewKeyFromSeed(seed)
+	pub := priv.Public().(ed25519.PublicKey)
+	tp, err := helpers.Thumbprint(pub)
+	if err != nil {
+		t.Fatal(err)
+	}
+	signer, err := helpers.NewEd25519Signer(tp, priv)
+	if err != nil {
+		t.Fatal(err)
+	}
+	return signer, pub
+}
+
+// TestSignDirectoryResponse_reproducesTheDocumentedExample signs the page's
+// directory response and requires its exact headers, then verifies it.
+func TestSignDirectoryResponse_reproducesTheDocumentedExample(t *testing.T) {
+	signer, pub := rfc8037Signer(t)
+	got, err := helpers.SignDirectoryResponse(context.Background(), "research.acme.com",
+		[]byte(docDirectoryBody), []helpers.Signer{signer}, 1790812200, 1790815800)
+	if err != nil {
+		t.Fatal(err)
+	}
+	want := helpers.DirectoryResponseSignature{
+		ContentDigest:  "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+		SignatureInput: `sig1=("@authority";req "content-digest");created=1790812200;expires=1790815800;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";tag="http-message-signatures-directory"`,
+		Signature:      "sig1=:5UyPR4rbxeGrlooo3uc0y43hNHzRX9O0EsegyHPf8XYyqy6q7/6Kkub2rFN2Jzsv+4yTdGygDdRE0iaRucg6DQ==:",
+	}
+	if got != want {
+		t.Fatalf("directory response\n got %+v\nwant %+v", got, want)
+	}
+	h := http.Header{}
+	got.Apply(h)
+	verified, err := helpers.VerifyDirectoryResponse("research.acme.com", h, []byte(docDirectoryBody),
+		[]ed25519.PublicKey{pub}, time.Unix(1790812300, 0))
+	if err != nil || !verified[signer.KeyID()] {
+		t.Fatalf("verify: %v %v", verified, err)
+	}
+}
+
+// TestVerifyDirectoryResponse_judgesEachSignature: a response signature is
+// accepted only for the authority it was made for, inside its window, with the
+// directory tag, and only for a key the body lists. A body that does not match its
+// Content-Digest, or a response carrying no signature, fails as a whole.
+func TestVerifyDirectoryResponse_judgesEachSignature(t *testing.T) {
+	signer, pub := rfc8037Signer(t)
+	body := []byte(docDirectoryBody)
+	sign := func(authority string, created, expires int64) http.Header {
+		t.Helper()
+		d, err := helpers.SignDirectoryResponse(context.Background(), authority, body, []helpers.Signer{signer}, created, expires)
+		if err != nil {
+			t.Fatal(err)
+		}
+		h := http.Header{}
+		d.Apply(h)
+		return h
+	}
+	now := time.Unix(1790812300, 0)
+	keys := []ed25519.PublicKey{pub}
+	for _, tc := range []struct {
+		name      string
+		authority string
+		header    http.Header
+		keys      []ed25519.PublicKey
+		body      []byte
+		want      bool
+		wantErr   error
+	}{
+		{"valid", "research.acme.com", sign("research.acme.com", 1790812200, 1790815800), keys, body, true, nil},
+		{"authority compared case-insensitively", "Research.Acme.com", sign("research.acme.com", 1790812200, 1790815800), keys, body, true, nil},
+		{"signed for another host", "research.acme.com", sign("evil.example", 1790812200, 1790815800), keys, body, false, nil},
+		{"expired", "research.acme.com", sign("research.acme.com", 1790800000, 1790810000), keys, body, false, nil},
+		{"created in the future", "research.acme.com", sign("research.acme.com", 1790822200, 1790825800), keys, body, false, nil},
+		{"key not listed", "research.acme.com", sign("research.acme.com", 1790812200, 1790815800), nil, body, false, nil},
+		{"body changed", "research.acme.com", sign("research.acme.com", 1790812200, 1790815800), keys, append([]byte("x"), body...), false, helpers.ErrDigestMismatch},
+		{"unsigned", "research.acme.com", http.Header{"Content-Digest": {helpers.ContentDigest(body)}}, keys, body, false, helpers.ErrDirectoryResponseUnsigned},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			verified, err := helpers.VerifyDirectoryResponse(tc.authority, tc.header, tc.body, tc.keys, now)
+			if !errors.Is(err, tc.wantErr) || (tc.wantErr == nil && err != nil) {
+				t.Fatalf("error = %v, want %v", err, tc.wantErr)
+			}
+			if verified[signer.KeyID()] != tc.want {
+				t.Fatalf("verified = %v, want key verified %v", verified, tc.want)
+			}
+		})
+	}
+}
+
+// TestVerifyDirectoryResponse_eachKeySignsForItself: with two listed keys, a
+// response signed by only one verifies only that one.
+func TestVerifyDirectoryResponse_eachKeySignsForItself(t *testing.T) {
+	a, aPub := rfc8037Signer(t)
+	_, bPriv, _ := ed25519.GenerateKey(nil)
+	bPub := bPriv.Public().(ed25519.PublicKey)
+	body := []byte(`{"keys":[]}`)
+	d, err := helpers.SignDirectoryResponse(context.Background(), "agent.example", body, []helpers.Signer{a}, 1790812200, 1790815800)
+	if err != nil {
+		t.Fatal(err)
+	}
+	h := http.Header{}
+	d.Apply(h)
+	verified, err := helpers.VerifyDirectoryResponse("agent.example", h, body, []ed25519.PublicKey{aPub, bPub}, time.Unix(1790812300, 0))
+	if err != nil {
+		t.Fatal(err)
+	}
+	bTP, _ := helpers.Thumbprint(bPub)
+	if !verified[a.KeyID()] || verified[bTP] {
+		t.Fatalf("verified = %v, want only the signing key", verified)
+	}
+}
diff --git a/sdk/go/helpers/export_test.go b/sdk/go/helpers/export_test.go
index 877e16a0..2723194d 100644
--- a/sdk/go/helpers/export_test.go
+++ b/sdk/go/helpers/export_test.go
@@ -1,6 +1,11 @@
 package helpers
 
-import "github.com/santhosh-tekuri/jsonschema/v6"
+import (
+	"context"
+	"net/http"
+
+	"github.com/santhosh-tekuri/jsonschema/v6"
+)
 
 // RefusingSchemaLoaderForTest exposes the SSRF backstop to the package's external
 // test binary. It is declared in a _test.go file, so it is not part of the shipped
@@ -13,3 +18,35 @@ func RefusingSchemaLoaderForTest() jsonschema.URLLoader { return refusingSchemaL
 // AgentRequestAcceptancePayload.items. Declared in a _test.go file, so it never
 // reaches the API-parity gate.
 const MaxRequestAcceptanceItemsForTest = maxRequestAcceptanceItems
+
+// RawSignature describes a signature by its exact covered set and parameters, for
+// the tests that need a signature the shipped signers refuse to make: no tag, a
+// legacy Signature-Agent form, a member key that differs from the label, an
+// incomplete coverage of an earlier signature. Declared in a _test.go file, so it
+// never reaches the API-parity gate.
+type RawSignature struct {
+	Label            string
+	Covered          []CoveredComponent
+	Created, Expires int64
+	Nonce, Tag       string
+}
+
+// SignRawForTest signs req with exactly raw, over whatever headers req already
+// carries, replacing Signature-Input and Signature or, with appendMode, appending
+// to them. It sets nothing else: the caller writes Content-Digest, Authorization
+// and Signature-Agent as the case requires.
+func SignRawForTest(req *http.Request, signer Signer, raw RawSignature, appendMode bool) error {
+	p := sigParams{
+		Label: raw.Label, Covered: raw.Covered, KeyID: signer.KeyID(), Alg: signer.Algorithm(),
+		Created: raw.Created, Expires: raw.Expires, Nonce: raw.Nonce, Tag: raw.Tag,
+	}
+	mode := sigWriteSet
+	if appendMode {
+		mode = sigWriteAppend
+	}
+	return signWithParams(context.Background(), req, p, signer, mode)
+}
+
+// FORACovered is the covered set the shipped signer gives a FORA RPC signature
+// labelled label on req.
+func FORACovered(req *http.Request, label string) []CoveredComponent { return coveredFor(req, label) }
diff --git a/sdk/go/helpers/gen_directory_vectors_test.go b/sdk/go/helpers/gen_directory_vectors_test.go
new file mode 100644
index 00000000..d75aea24
--- /dev/null
+++ b/sdk/go/helpers/gen_directory_vectors_test.go
@@ -0,0 +1,200 @@
+package helpers
+
+// Directory-response golden-vector emitter (ADR-020 §8). A key directory's
+// response is signed once per listed key; the Python and TypeScript faces replay
+// this corpus against their own response verifiers, and must reach the verdict
+// the REAL Go VerifyDirectoryResponse reaches: the set of listed keys that signed
+// the response, or the error class for a response that cannot be checked at all.
+
+import (
+	"context"
+	"crypto/ed25519"
+	"encoding/base64"
+	"errors"
+	"net/http"
+	"os"
+	"path/filepath"
+	"slices"
+	"testing"
+	"time"
+)
+
+type directoryResponseVector struct {
+	Name string `json:"name"`
+	// Authority is the host[:port] the directory was fetched from, the value of
+	// "@authority";req.
+	Authority      string `json:"authority"`
+	Body           string `json:"body"`
+	ContentDigest  string `json:"content_digest,omitempty"`
+	SignatureInput string `json:"signature_input,omitempty"`
+	Signature      string `json:"signature,omitempty"`
+	// Keys are the Ed25519 keys the body lists, base64url without padding.
+	Keys []string `json:"keys"`
+	// SignerSeedsHex are the seeds of the keys that signed, in label order, so a
+	// sign-face port can reproduce the headers.
+	SignerSeedsHex []string `json:"signer_seeds_hex,omitempty"`
+	Created        int64    `json:"created,omitempty"`
+	Expires        int64    `json:"expires,omitempty"`
+	Now            int64    `json:"now"`
+	// ExpectedVerified are the RFC 7638 thumbprints of the listed keys whose
+	// response signature verifies, sorted. ExpectedError is "digest_mismatch" or
+	// "unsigned" for a response that cannot be checked at all, "" otherwise.
+	ExpectedVerified []string `json:"expected_verified"`
+	ExpectedError    string   `json:"expected_error"`
+}
+
+func buildDirectoryResponseVectors(t *testing.T) []directoryResponseVector {
+	t.Helper()
+	const docBody = "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}"
+	const (
+		created = int64(1790812200)
+		expires = int64(1790815800)
+		now     = int64(1790812300)
+	)
+	agent := rfc8037Seed
+	second := fixedSeed(0xA1)
+	pubOf := func(seed []byte) string {
+		return b64urlNoPad(ed25519.NewKeyFromSeed(seed).Public().(ed25519.PublicKey))
+	}
+	twoKeyBody := `{"keys":[{"kty":"OKP","crv":"Ed25519","alg":"EdDSA","x":"` + pubOf(agent) +
+		`"},{"kty":"OKP","crv":"Ed25519","alg":"EdDSA","x":"` + pubOf(second) + `"}]}`
+
+	signed := func(name, authority, body string, seeds [][]byte, keys []string, c, e int64) directoryResponseVector {
+		signers := make([]Signer, 0, len(seeds))
+		hexSeeds := make([]string, 0, len(seeds))
+		for _, seed := range seeds {
+			s, err := NewEd25519SignerFromSeed(seedThumbprint(t, seed), seed)
+			if err != nil {
+				t.Fatal(err)
+			}
+			signers = append(signers, s)
+			hexSeeds = append(hexSeeds, hexOf(seed))
+		}
+		d, err := SignDirectoryResponse(context.Background(), authority, []byte(body), signers, c, e)
+		if err != nil {
+			t.Fatalf("%s: %v", name, err)
+		}
+		return directoryResponseVector{
+			Name: name, Authority: authority, Body: body,
+			ContentDigest: d.ContentDigest, SignatureInput: d.SignatureInput, Signature: d.Signature,
+			Keys: keys, SignerSeedsHex: hexSeeds, Created: c, Expires: e, Now: now,
+		}
+	}
+	one := []string{pubOf(agent)}
+	both := []string{pubOf(agent), pubOf(second)}
+	out := []directoryResponseVector{
+		// The authentication page's Key Directory example, byte for byte.
+		signed("doc_directory_example", "research.acme.com", docBody, [][]byte{agent}, one, created, expires),
+		signed("two_keys_both_signed", "agent.example:8443", twoKeyBody, [][]byte{agent, second}, both, created, expires),
+		signed("two_keys_one_signed", "agent.example:8443", twoKeyBody, [][]byte{agent}, both, created, expires),
+		signed("expired", "research.acme.com", docBody, [][]byte{agent}, one, created-20000, created-10000),
+		signed("created_in_the_future", "research.acme.com", docBody, [][]byte{agent}, one, created+10000, expires+10000),
+		signed("key_not_listed", "research.acme.com", docBody, [][]byte{second}, one, created, expires),
+	}
+	wrongHost := signed("signed_for_another_authority", "evil.example", docBody, [][]byte{agent}, one, created, expires)
+	wrongHost.Authority = "research.acme.com"
+	changed := signed("body_changed", "research.acme.com", docBody, [][]byte{agent}, one, created, expires)
+	changed.Body = docBody + " "
+	unsigned := directoryResponseVector{
+		Name: "unsigned", Authority: "research.acme.com", Body: docBody,
+		ContentDigest: ContentDigest([]byte(docBody)), Keys: one, Now: now,
+	}
+	// Tag and covered set are checked per signature: signed by hand with another
+	// tag, and with a covered set lacking "@authority";req.
+	wrongTag := signedDirectoryByHand(t, "wrong_tag", "research.acme.com", docBody, agent, directoryResponseCovered, "web-bot-auth", one, created, expires, now)
+	noAuthority := signedDirectoryByHand(t, "no_authority_covered", "research.acme.com", docBody, agent,
+		[]CoveredComponent{{Name: "content-digest"}}, DirectoryResponseTag, one, created, expires, now)
+	out = append(out, wrongHost, changed, unsigned, wrongTag, noAuthority)
+
+	for i := range out {
+		out[i].ExpectedVerified, out[i].ExpectedError = directoryOracle(t, out[i])
+	}
+	return out
+}
+
+func hexOf(b []byte) string {
+	const digits = "0123456789abcdef"
+	out := make([]byte, 0, 2*len(b))
+	for _, c := range b {
+		out = append(out, digits[c>>4], digits[c&0xf])
+	}
+	return string(out)
+}
+
+// signedDirectoryByHand signs a directory response with an arbitrary covered set
+// and tag, as a nonconformant server would.
+func signedDirectoryByHand(
+	t *testing.T, name, authority, body string, seed []byte, covered []CoveredComponent, tag string,
+	keys []string, created, expires, now int64,
+) directoryResponseVector {
+	t.Helper()
+	priv := ed25519.NewKeyFromSeed(seed)
+	p := sigParams{
+		Label: "sig1", Covered: covered, KeyID: seedThumbprint(t, seed), Alg: AlgEd25519,
+		Created: created, Expires: expires, Tag: tag,
+	}
+	p.RawInner = signatureInputInner(p)
+	digest := ContentDigest([]byte(body))
+	raw := ed25519.Sign(priv, []byte(directoryResponseBaseFor(authority, digest, p)))
+	return directoryResponseVector{
+		Name: name, Authority: authority, Body: body, ContentDigest: digest,
+		SignatureInput: "sig1=" + p.RawInner, Signature: "sig1=:" + base64.StdEncoding.EncodeToString(raw) + ":",
+		Keys: keys, SignerSeedsHex: []string{hexOf(seed)}, Created: created, Expires: expires, Now: now,
+	}
+}
+
+// directoryOracle runs the REAL VerifyDirectoryResponse over the vector.
+func directoryOracle(t *testing.T, v directoryResponseVector) ([]string, string) {
+	t.Helper()
+	h := http.Header{}
+	if v.ContentDigest != "" {
+		h.Set("Content-Digest", v.ContentDigest)
+	}
+	if v.SignatureInput != "" {
+		h.Set("Signature-Input", v.SignatureInput)
+		h.Set("Signature", v.Signature)
+	}
+	keys := make([]ed25519.PublicKey, 0, len(v.Keys))
+	for _, k := range v.Keys {
+		raw, err := base64.RawURLEncoding.DecodeString(k)
+		if err != nil {
+			t.Fatalf("%s: key: %v", v.Name, err)
+		}
+		keys = append(keys, ed25519.PublicKey(raw))
+	}
+	verified, err := VerifyDirectoryResponse(v.Authority, h, []byte(v.Body), keys, time.Unix(v.Now, 0))
+	switch {
+	case errors.Is(err, ErrDigestMismatch):
+		return []string{}, "digest_mismatch"
+	case errors.Is(err, ErrDirectoryResponseUnsigned):
+		return []string{}, "unsigned"
+	case err != nil:
+		t.Fatalf("%s: unexpected error class: %v", v.Name, err)
+	}
+	out := make([]string, 0, len(verified))
+	for tp := range verified {
+		out = append(out, tp)
+	}
+	slices.Sort(out)
+	return out, ""
+}
+
+// TestGenerateDirectoryResponseVectors emits the directory-response corpus: a
+// verification no-op by default (asserts the committed file matches a fresh
+// emit), rewritten under FORA_UPDATE_VECTORS=1.
+func TestGenerateDirectoryResponseVectors(t *testing.T) {
+	vectors := buildDirectoryResponseVectors(t)
+	for _, v := range vectors {
+		got, gotErr := directoryOracle(t, v)
+		if gotErr != v.ExpectedError || !slices.Equal(got, v.ExpectedVerified) {
+			t.Fatalf("%s: oracle (%v, %q), recorded (%v, %q)", v.Name, got, gotErr, v.ExpectedVerified, v.ExpectedError)
+		}
+	}
+	path := filepath.Join("testdata", "directory-response-vectors.json")
+	doc := map[string]any{"vectors": vectors}
+	if os.Getenv("FORA_UPDATE_VECTORS") == "1" {
+		writeJSON(t, path, doc)
+		return
+	}
+	assertMatches(t, path, doc)
+}
diff --git a/sdk/go/helpers/gen_multisig_vectors_test.go b/sdk/go/helpers/gen_multisig_vectors_test.go
index 71e89f43..50719996 100644
--- a/sdk/go/helpers/gen_multisig_vectors_test.go
+++ b/sdk/go/helpers/gen_multisig_vectors_test.go
@@ -1,22 +1,20 @@
 package helpers
 
-// Multisig forwarding-chain golden-vector emitter (ADR-020 §8).
+// Multi-signature golden-vector emitter (ADR-020 §8).
 //
-// The sdk/ts and sdk/python multisig append/verify faces assert
-// byte-parity against this Go oracle: a chain signed by SignRequest(sig1) +
-// AppendSignature(sig2[,sig3]) must reconstruct byte-for-byte in TS and Python,
-// and the hop-budget / broken-chain / tampered-predecessor rejections must match
-// the Go taxonomy token-for-token. Rather than hand-author the wire bytes, this
-// emitter signs with the REAL Go signer+appender and DERIVES every expected
-// outcome/reason from the REAL VerifyMultisigRequestResolved — the same
-// self-contained-oracle shape gen_vectors_test.go uses for the single-sig corpus.
+// The sdk/ts and sdk/python multi-signature faces assert byte-parity against this
+// Go oracle: a request signed by SignRequest (sig1) and AppendSignature (sig2,
+// sig3, with or without CoverPrevious) must reconstruct byte-for-byte in TS and
+// Python, and every rejection must match the Go taxonomy token-for-token. Rather
+// than hand-author the wire bytes, this emitter signs with the REAL Go signer and
+// appender (and, for the forms they refuse, signs by hand over the same base
+// builder), and DERIVES every expected outcome from the REAL
+// VerifyMultisigRequestResolved.
 //
-// The single-sig oracleNegReason (gen_vectors_test.go) runs
-// VerifyRequest and CANNOT emit hop_budget (no MaxSignatures / multi-hop
-// resolver). This file therefore carries a NEW multisig oracle-reason wrapper
-// (multisigOracleReason) that calls VerifyMultisigRequestResolved with a per-hop
-// KeyResolver + opts.MaxSignatures; only classifyNegReason is reused unchanged
-// (it already maps ErrTooManyHops→hop_budget, ErrBrokenSignatureChain→broken_chain).
+// Every hop names its own key directory, and the oracle's resolver finds a key
+// only under the directory it was registered with — the (directory, keyid) pair.
+// A port that resolves a signature through any member but the one that signature
+// covers fails the vectors.
 //
 // Determinism: every hop key is derived from a FIXED fixedSeed byte and the
 // created/expires window is pinned, so a re-emit is byte-identical (drift-gated).
@@ -26,6 +24,7 @@ import (
 	"crypto/ed25519"
 	"encoding/base64"
 	"encoding/hex"
+	"fmt"
 	"maps"
 	"net/http"
 	"os"
@@ -36,49 +35,45 @@ import (
 	"time"
 )
 
-// Shared request material for every chain vector — one target, one body, one
-// window — so the vectors differ only in their signature chain and mutation.
+// Shared request material for every multi-signature vector — one target, one
+// body, one window — so the vectors differ only in their signatures and mutation.
 const (
-	msMethod   = http.MethodPost
-	msURL      = "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction"
-	msAuth     = "Bearer chain-token"
-	msSigAgent = "https://agent.example"
-	msCreated  = int64(1_700_000_000)
-	msExpires  = int64(1_700_000_600)
-	msNow      = int64(1_700_000_100) // inside the window
+	msMethod  = http.MethodPost
+	msURL     = "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction"
+	msAuth    = "Bearer chain-token"
+	msCreated = int64(1_700_000_000)
+	msExpires = int64(1_700_000_300)
+	msNow     = int64(1_700_000_100) // inside the window
 )
 
-// keyIDs for the chain hops. The agent signs sig1; broker relay keys carry the
-// broker.* convention and chain sig2/sig3 on top.
-const (
-	msAgentKeyID   = "agent-demo.v1"
-	msBrokerAKeyID = BrokerKeyIDPrefix + "relay.a"
-	msBrokerBKeyID = BrokerKeyIDPrefix + "relay.b"
-)
-
-// multisigHop records one hop's identity so a TS/Python port can re-derive the
-// exact chain: it re-signs sig1 under the agent seed, appends sig2 under the
-// broker seed, and byte-matches the emitted signature_input/signature. pubkey is
-// what the port injects into its resolver to verify.
+// multisigHop records one signer so a TS/Python port can re-derive the exact
+// request: it re-signs each hop under its seed and directory and byte-matches the
+// emitted headers. pubkey and directory are what the port registers in its
+// resolver, under the (directory, keyid) pair.
 type multisigHop struct {
 	KeyID        string `json:"keyid"`
 	PubkeyB64URL string `json:"pubkey_b64url"`
 	SeedHex      string `json:"seed_hex"`
-	// Nonce is the RFC 9421 nonce this hop signed with; absent for a hop that
-	// signed without one.
+	// Directory is the https origin the hop signs as: its Signature-Agent member.
+	Directory string `json:"directory"`
+	// Nonce is the RFC 9421 nonce this hop signed with; absent for none.
 	Nonce string `json:"nonce,omitempty"`
+	// CoverPrevious marks a hop appended with SignOptions.CoverPrevious.
+	CoverPrevious bool `json:"cover_previous,omitempty"`
 }
 
-// multisigChainVector is one forwarding-chain case: the full wire request (all
-// labels in Signature-Input/Signature), the per-hop identities, and the outcome
-// the REAL Go oracle reaches — verified keyids in chain order for a positive, or
-// the reject reason token for a negative (hop_budget / broken_chain / signature).
+// multisigChainVector is one multi-signature case: the full wire request (every
+// label in Signature-Input, Signature and Signature-Agent), the signers, and the
+// outcome the REAL Go oracle reaches — the verified keyids and directories in
+// header order for a positive, or the reject reason token for a negative
+// (hop_budget / broken_chain / signature).
 type multisigChainVector struct {
-	Name           string        `json:"name"`
-	Method         string        `json:"method"`
-	URL            string        `json:"url"`
-	BodyHex        string        `json:"body_hex"`
-	Authorization  string        `json:"authorization"`
+	Name          string `json:"name"`
+	Method        string `json:"method"`
+	URL           string `json:"url"`
+	BodyHex       string `json:"body_hex"`
+	Authorization string `json:"authorization"`
+	// SignatureAgent is the Signature-Agent header value the request carries.
 	SignatureAgent string        `json:"signature_agent"`
 	Created        int64         `json:"created"`
 	Expires        int64         `json:"expires"`
@@ -88,292 +83,287 @@ type multisigChainVector struct {
 	Hops           []multisigHop `json:"hops"`
 	// MaxSignatures is the hop budget the verifier is pinned to (0 = unbounded).
 	MaxSignatures int `json:"max_signatures"`
-	// ExpectedVerified is the positive/negative verdict; ExpectedKeyIDs are the
-	// verified keyids in chain order (present only when verified); ExpectedReason
-	// is the RejectReason token for a negative ("" for a positive).
-	ExpectedVerified bool     `json:"expected_verified"`
-	ExpectedKeyIDs   []string `json:"expected_keyids"`
-	ExpectedReason   string   `json:"expected_reason"`
-	// OmitHeaders names the header fields the request does NOT carry, deleted after
-	// the base ones are set. ABSENT is not EMPTY — see the single-sig corpus's field
-	// of the same name. On a chain it also pins the REJECT PRECEDENCE: the missing
-	// header is found while a hop's base is rebuilt, which happens after the hop
-	// budget and the structural chain are enforced, so a chain that is over budget
-	// or broken keeps ITS reason rather than reporting a signature failure.
+	// ExpectedVerified is the verdict; ExpectedKeyIDs and ExpectedDirectories are
+	// the verified signatures' keyids and directories in header order (present
+	// only when verified); ExpectedReason is the RejectReason token for a
+	// negative ("" for a positive).
+	ExpectedVerified    bool     `json:"expected_verified"`
+	ExpectedKeyIDs      []string `json:"expected_keyids"`
+	ExpectedDirectories []string `json:"expected_directories"`
+	ExpectedReason      string   `json:"expected_reason"`
+	// OmitHeaders names the header fields the request does NOT carry, deleted
+	// after the base ones are set. ABSENT is not EMPTY: the base is rebuilt from
+	// the request that arrived, so a covered name with no field line cannot be
+	// reconstructed. It also pins the REJECT PRECEDENCE: the missing header is
+	// found while a signature's base is rebuilt, after the hop budget and the
+	// coverage check, so a request that is over budget or covers incompletely
+	// keeps ITS reason.
 	OmitHeaders []string `json:"omit_headers,omitempty"`
-	// ExtraHeaders are field lines ADDED after the base ones — see the single-sig
-	// corpus's field of the same name for why a second line under a covered name is
-	// joined rather than allowed to override.
+	// ExtraHeaders are field lines ADDED after the base ones, joined with the
+	// base line under the same name rather than overriding it.
 	ExtraHeaders map[string]string `json:"extra_headers,omitempty"`
 }
 
-// hopSpec names a chain hop's keyID and its deterministic seed byte.
+// hopSpec names a signer: its seed byte, its directory, its nonce and whether it
+// covers the signature before it.
 type hopSpec struct {
-	keyID    string
-	seedByte byte
-	nonce    string
+	seedByte  byte
+	directory string
+	nonce     string
+	cover     bool
 }
 
-// signMultisigChain builds a request and signs the given hops: hop[0] via the
-// REAL SignRequest (sig1) and each subsequent hop via the REAL AppendSignature
-// (sig2, sig3, …), returning the signed request and the per-hop identities.
-func signMultisigChain(t *testing.T, body []byte, hops []hopSpec) (*http.Request, []multisigHop) {
-	t.Helper()
-	return signMultisigChainWith(t, body, hops, msAuth, msSigAgent)
-}
+func (h hopSpec) keyID(t *testing.T) string { return seedThumbprint(t, fixedSeed(h.seedByte)) }
 
-// signMultisigChainWith is signMultisigChain over an explicit covered-header pair,
-// so a chain can be signed with the EMPTY values the static-bootstrap path binds.
-func signMultisigChainWith(
-	t *testing.T, body []byte, hops []hopSpec, authorization, signatureAgent string,
-) (*http.Request, []multisigHop) {
-	t.Helper()
-	return signMultisigChainOverLines(t, body, hops, []string{authorization}, signatureAgent)
+func (h hopSpec) record(t *testing.T) multisigHop {
+	seed := fixedSeed(h.seedByte)
+	return multisigHop{
+		KeyID: h.keyID(t), PubkeyB64URL: b64urlNoPad(ed25519.NewKeyFromSeed(seed).Public().(ed25519.PublicKey)),
+		SeedHex: hex.EncodeToString(seed), Directory: h.directory, Nonce: h.nonce, CoverPrevious: h.cover,
+	}
 }
 
-// signMultisigChainOverLines signs a chain whose Authorization arrives as SEVERAL
-// field lines. The covered value is then what the join produces, so the emitted
-// chain verifies ONLY against a reader that joins: resolving the name to its first
-// or its last line reconstructs a different base and every hop fails. That is the
-// distinction no negative vector can draw — a first-match and a last-match reader
-// both reject a request whose covered value was tampered with, and only a positive
-// case signed over two lines separates either of them from the join.
-func signMultisigChainOverLines(
-	t *testing.T, body []byte, hops []hopSpec, authorizationLines []string, signatureAgent string,
-) (*http.Request, []multisigHop) {
+// msRequest is a fresh request carrying the given Authorization field lines.
+func msRequest(t *testing.T, authorizationLines []string) *http.Request {
 	t.Helper()
-	ctx := context.Background()
 	req, err := http.NewRequest(msMethod, msURL, nil)
 	if err != nil {
 		t.Fatalf("new request: %v", err)
 	}
 	// Add, not Set: each entry is its own field line under the one covered name.
-	// bindAuthorization only fills in an EMPTY Authorization, so lines supplied here
-	// survive into the covered value untouched.
 	for _, line := range authorizationLines {
 		req.Header.Add("Authorization", line)
 	}
-	req.Header.Set(SignatureAgentHeader, signatureAgent)
+	return req
+}
+
+// signHopsOn signs req with each hop: hop[0] via the REAL SignRequest and each
+// later hop via the REAL AppendSignature, with its CoverPrevious option.
+func signHopsOn(t *testing.T, req *http.Request, body []byte, hops []hopSpec) []multisigHop {
+	t.Helper()
 	out := make([]multisigHop, 0, len(hops))
 	for i, h := range hops {
-		opts := SignOptions{Created: msCreated, Expires: msExpires, Nonce: h.nonce}
-		seed := fixedSeed(h.seedByte)
-		signer, serr := NewEd25519SignerFromSeed(h.keyID, seed)
-		if serr != nil {
-			t.Fatalf("hop %d signer: %v", i, serr)
+		signer, err := NewEd25519SignerFromSeed(h.keyID(t), fixedSeed(h.seedByte))
+		if err != nil {
+			t.Fatalf("hop %d signer: %v", i, err)
+		}
+		opts := SignOptions{
+			Created: msCreated, Expires: msExpires, Nonce: h.nonce, SignatureAgent: h.directory, CoverPrevious: h.cover,
 		}
+		sign := AppendSignature
 		if i == 0 {
-			if err := SignRequest(ctx, req, body, signer, opts); err != nil {
-				t.Fatalf("hop %d SignRequest: %v", i, err)
-			}
-		} else {
-			if err := AppendSignature(ctx, req, body, signer, opts); err != nil {
-				t.Fatalf("hop %d AppendSignature: %v", i, err)
-			}
+			sign = SignRequest
+		}
+		if err := sign(context.Background(), req, body, signer, opts); err != nil {
+			t.Fatalf("hop %d: %v", i, err)
 		}
-		pub := ed25519.NewKeyFromSeed(seed).Public().(ed25519.PublicKey)
-		out = append(out, multisigHop{
-			KeyID:        h.keyID,
-			PubkeyB64URL: b64urlNoPad(pub),
-			SeedHex:      hex.EncodeToString(seed),
-			Nonce:        h.nonce,
-		})
+		out = append(out, h.record(t))
 	}
-	return req, out
+	return out
 }
 
-// mkChainVector templates a vector from a signed request's wire bytes + hops.
-func mkChainVector(name string, req *http.Request, hops []multisigHop, body []byte, maxSig int) multisigChainVector {
-	return mkChainVectorWith(name, req, hops, body, maxSig, msAuth, msSigAgent)
+// signHopByHand appends a signature labelled label made by h over exactly
+// covered, adding memberHeader (when non-empty) to Signature-Agent first. It
+// builds the signatures the appender refuses to make.
+func signHopByHand(t *testing.T, req *http.Request, h hopSpec, label string, covered []CoveredComponent, memberHeader string) multisigHop {
+	t.Helper()
+	signer, err := NewEd25519SignerFromSeed(h.keyID(t), fixedSeed(h.seedByte))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if memberHeader != "" {
+		existing := joinedHeader(req.Header, SignatureAgentHeader)
+		if existing != "" {
+			memberHeader = existing + ", " + memberHeader
+		}
+		req.Header.Set(SignatureAgentHeader, memberHeader)
+	}
+	p := sigParams{
+		Label: label, Covered: covered, KeyID: h.keyID(t), Alg: AlgEd25519,
+		Created: msCreated, Expires: msExpires, Nonce: h.nonce, Tag: WBATag,
+	}
+	if err := signWithParams(context.Background(), req, p, signer, sigWriteAppend); err != nil {
+		t.Fatalf("sign %s by hand: %v", label, err)
+	}
+	return h.record(t)
 }
 
-// mkChainVectorWith is mkChainVector recording an explicit covered-header pair —
-// the values the chain was actually signed over, which for the empty-bound cases
-// are not the package defaults.
-func mkChainVectorWith(
-	name string, req *http.Request, hops []multisigHop, body []byte, maxSig int,
-	authorization, signatureAgent string,
-) multisigChainVector {
+// mkMultisigVector templates a vector from a signed request's wire bytes.
+func mkMultisigVector(name string, req *http.Request, hops []multisigHop, body []byte, maxSig int) multisigChainVector {
 	return multisigChainVector{
-		Name:           name,
-		Method:         msMethod,
-		URL:            msURL,
-		BodyHex:        hex.EncodeToString(body),
-		Authorization:  authorization,
-		SignatureAgent: signatureAgent,
-		Created:        msCreated,
-		Expires:        msExpires,
+		Name: name, Method: msMethod, URL: msURL, BodyHex: hex.EncodeToString(body),
+		Authorization:  req.Header.Values("Authorization")[0],
+		SignatureAgent: req.Header.Get(SignatureAgentHeader),
+		Created:        msCreated, Expires: msExpires,
 		ContentDigest:  req.Header.Get("Content-Digest"),
 		SignatureInput: req.Header.Get("Signature-Input"),
 		Signature:      req.Header.Get("Signature"),
-		Hops:           hops,
-		MaxSignatures:  maxSig,
+		Hops:           hops, MaxSignatures: maxSig,
 	}
 }
 
-// buildMultisigChainVectors emits the forwarding-chain corpus: a positive 2-hop
-// chain, the hop-budget overflow (3 hops under MaxSignatures=2), the three
-// broken-chain structural rejects (reordered / stripped-middle / missing-link),
-// the tampered-predecessor crypto reject, and three chains missing a covered
-// header — which pin both that such a chain is refused and where that is noticed
-// relative to the budget and chain gates. Every outcome/reason is DERIVED
-// from the REAL VerifyMultisigRequestResolved via multisigOracleReason — never
-// hand-authored.
+// buildMultisigChainVectors emits the multi-signature corpus. Every outcome is
+// DERIVED from the REAL VerifyMultisigRequestResolved via multisigOracleOutcome —
+// never hand-authored.
 func buildMultisigChainVectors(t *testing.T) []multisigChainVector {
 	t.Helper()
 	body := []byte(`{"idempotency_key":"idem-1"}`)
+	agent := hopSpec{seedByte: 0x90, directory: "https://agent.example"}
+	broker := hopSpec{seedByte: 0x91, directory: "https://broker.example"}
+	relay := hopSpec{seedByte: 0x92, directory: "https://relay.example:8443"}
+	covering := func(h hopSpec) hopSpec { h.cover = true; return h }
+	signed := func(name string, maxSig int, hops ...hopSpec) multisigChainVector {
+		req := msRequest(t, []string{msAuth})
+		recs := signHopsOn(t, req, body, hops)
+		return mkMultisigVector(name, req, recs, body, maxSig)
+	}
 
-	agent := hopSpec{keyID: msAgentKeyID, seedByte: 0x90}
-	brokerA := hopSpec{keyID: msBrokerAKeyID, seedByte: 0x91}
-	brokerB := hopSpec{keyID: msBrokerBKeyID, seedByte: 0x92}
-
-	// positive_two_hop: agent(sig1) + broker(sig2), unbounded budget → verifies.
-	req2, hops2 := signMultisigChain(t, body, []hopSpec{agent, brokerA})
-	positive := mkChainVector("positive_two_hop", req2, hops2, body, 0)
-
-	// positive_two_hop_nonce: the same chain with a fixed RFC 9421 nonce on each
-	// hop, as the signing transports emit. Pins the nonce's place in the
-	// parameter tail and that a verifier accepts it.
-	agentN, brokerAN := agent, brokerA
-	agentN.nonce = "AAECAwQFBgcICQoLDA0ODw"
-	brokerAN.nonce = "EBESExQVFhcYGRobHB0eHw"
-	reqN, hopsN := signMultisigChain(t, body, []hopSpec{agentN, brokerAN})
-	positiveNonce := mkChainVector("positive_two_hop_nonce", reqN, hopsN, body, 0)
-
-	// hop_budget_three_over_two: a valid 3-hop chain verified under MaxSignatures=2
-	// → ErrTooManyHops before any crypto (hop_budget precedence).
-	req3, hops3 := signMultisigChain(t, body, []hopSpec{agent, brokerA, brokerB})
-	hopBudget := mkChainVector("hop_budget_three_over_two", req3, hops3, body, 2)
-
-	// broken_chain_reordered: swap sig1/sig2 header order → labels non-contiguous.
-	reqR, hopsR := signMultisigChain(t, body, []hopSpec{agent, brokerA})
-	reordered := mkChainVector("broken_chain_reordered", reqR, hopsR, body, 0)
+	var out []multisigChainVector
+	// Two signatures that do not cover each other, each resolved in its own
+	// directory: the shape FORA's own legs never produce but WG-00 permits.
+	out = append(out, signed("positive_independent_two", 0, agent, broker))
+	// A forwarder covering the signature before it, completely.
+	out = append(out, signed("positive_covering_two", 0, agent, covering(broker)))
+	out = append(out, signed("positive_covering_three", 0, agent, covering(broker), covering(relay)))
+	// The same with the 64-byte nonces the transports emit.
+	agentN, brokerN := agent, covering(broker)
+	agentN.nonce, brokerN.nonce = nonce64A, nonce64B
+	out = append(out, signed("positive_covering_two_nonce", 0, agentN, brokerN))
+
+	// Three valid signatures under a budget of two: refused before any crypto,
+	// whether or not they cover each other.
+	out = append(out, signed("hop_budget_three_independent_over_two", 2, agent, broker, relay))
+	out = append(out, signed("hop_budget_three_covering_over_two", 2, agent, covering(broker), covering(relay)))
+
+	// A covering pair with its order swapped: sig2 now covers a signature that
+	// appears after it.
+	reordered := signed("broken_coverage_reordered", 0, agent, covering(broker))
 	reordered.SignatureInput = msSwapTwoMembers(reordered.SignatureInput)
 	reordered.Signature = msSwapTwoMembers(reordered.Signature)
+	out = append(out, reordered)
+
+	// The covered signature stripped: sig2 covers a label that is not on the request.
+	stripped := signed("broken_coverage_stripped", 0, agent, covering(broker))
+	stripped.SignatureInput = msDropMember(stripped.SignatureInput, "sig1")
+	stripped.Signature = msDropMember(stripped.Signature, "sig1")
+	out = append(out, stripped)
+
+	// Coverage of sig1's Signature member without its Signature-Input member.
+	{
+		req := msRequest(t, []string{msAuth})
+		recs := signHopsOn(t, req, body, []hopSpec{agent})
+		covered := append(coveredFor(req, "sig2"), signatureAgentComponent("sig1"), chainComponent("signature", "sig1"))
+		recs = append(recs, signHopByHand(t, req, broker, "sig2", covered, signatureAgentMember("sig2", broker.directory)))
+		out = append(out, mkMultisigVector("broken_coverage_without_signature_input", req, recs, body, 0))
+	}
+	// Coverage of sig1 that omits a component sig1 lists (sig1's own member).
+	{
+		req := msRequest(t, []string{msAuth})
+		recs := signHopsOn(t, req, body, []hopSpec{agent})
+		covered := append(coveredFor(req, "sig2"), chainComponent("signature", "sig1"), chainComponent("signature-input", "sig1"))
+		recs = append(recs, signHopByHand(t, req, broker, "sig2", covered, signatureAgentMember("sig2", broker.directory)))
+		out = append(out, mkMultisigVector("broken_coverage_missing_component", req, recs, body, 0))
+	}
+
+	// A broker signature that covers the AGENT's member: it is resolved in the
+	// agent's directory, where the broker's key is not published.
+	{
+		req := msRequest(t, []string{msAuth})
+		recs := signHopsOn(t, req, body, []hopSpec{agent})
+		covered := append(plainComponents(requiredCoveredComponents...), signatureAgentComponent("sig1"))
+		recs = append(recs, signHopByHand(t, req, broker, "sig2", covered, signatureAgentMember("sig2", broker.directory)))
+		out = append(out, mkMultisigVector("wrong_directory_member", req, recs, body, 0))
+	}
+	// The legacy String form cannot name two directories: refused on a request
+	// carrying two signatures.
+	{
+		req := msRequest(t, []string{msAuth})
+		req.Header.Set("Content-Digest", ContentDigest(body))
+		req.Header.Set(SignatureAgentHeader, `"`+agent.directory+`"`)
+		legacy := append(plainComponents(requiredCoveredComponents...), CoveredComponent{Name: signatureAgentLower})
+		recs := []multisigHop{signHopByHand(t, req, agent, "sig1", legacy, "")}
+		recs = append(recs, signHopByHand(t, req, broker, "sig2", legacy, ""))
+		out = append(out, mkMultisigVector("legacy_form_on_two_signatures", req, recs, body, 0))
+	}
 
-	// broken_chain_stripped_middle: drop sig2 from a 3-hop chain → gap in the
-	// sig1..sigN contiguity (sig3 now covers a missing sig2).
-	reqS, hopsS := signMultisigChain(t, body, []hopSpec{agent, brokerA, brokerB})
-	stripped := mkChainVector("broken_chain_stripped_middle", reqS, hopsS, body, 0)
-	stripped.SignatureInput = msDropMember(stripped.SignatureInput, "sig2")
-	stripped.Signature = msDropMember(stripped.Signature, "sig2")
-
-	// broken_chain_missing_link: a sig2 that does NOT cover sig1 (parallel co-sign
-	// shape) — an independent sig1 relabeled sig2, so the structural link is absent.
-	missingLink := buildMissingLinkVector(t, body, agent, brokerA)
-
-	// tampered_predecessor: corrupt sig1's signature bytes on a valid 2-hop chain.
-	// Structural chain still holds; sig1's own crypto check fails → "signature".
-	reqT, hopsT := signMultisigChain(t, body, []hopSpec{agent, brokerA})
-	tampered := mkChainVector("tampered_predecessor", reqT, hopsT, body, 0)
-	tampered.Signature = msCorruptFirstMember(tampered.Signature)
-
-	// The same three chains again, each missing a header its signatures cover. Two
-	// claims at once. First, a chain whose covered header never arrived is refused —
-	// the base is rebuilt from the request that ARRIVED, and a covered name with no
-	// field line under it cannot be reconstructed. Second, and this is what only a
-	// chain can pin: WHERE that is noticed. It is noticed while a hop's base is
-	// rebuilt, which is after the hop budget and the structural chain are enforced,
-	// so an over-budget or reordered chain keeps ITS reason and only the otherwise
-	// well-formed one reports a signature failure. A port that tests for the header
-	// before those two gates answers "signature" to all three and diverges here on
-	// two of them.
-	// Signed with EMPTY covered values, and that is load-bearing rather than
-	// incidental. Omit a header whose signer bound a NON-empty value and the request
-	// is refused either way — a port defaulting the missing header to "" still
-	// reconstructs the wrong value, so the case cannot tell "refused because absent"
-	// from "refused because the value differs" and gates nothing. Bound EMPTY,
-	// defaulting to "" reproduces exactly what was signed, so only a port that
-	// distinguishes absent from empty refuses. It is also the static-bootstrap shape
-	// the empty covered header exists to carry.
-	reqE2, hopsE2 := signMultisigChainWith(t, body, []hopSpec{agent, brokerA}, "", "")
-	absentTwoHop := mkChainVectorWith("absent_authorization_two_hop", reqE2, hopsE2, body, 0, "", "")
-	absentTwoHop.OmitHeaders = []string{"Authorization"}
-
-	reqE3, hopsE3 := signMultisigChainWith(t, body, []hopSpec{agent, brokerA, brokerB}, "", "")
-	absentOverBudget := mkChainVectorWith("absent_authorization_over_budget", reqE3, hopsE3, body, 2, "", "")
-	absentOverBudget.OmitHeaders = []string{"Authorization"}
-
-	reqER, hopsER := signMultisigChainWith(t, body, []hopSpec{agent, brokerA}, "", "")
-	absentReordered := mkChainVectorWith("absent_signature_agent_reordered", reqER, hopsER, body, 0, "", "")
+	// sig1's bytes corrupted: independent, and under a covering sig2.
+	tamperedIndep := signed("tampered_first_independent", 0, agent, broker)
+	tamperedIndep.Signature = msCorruptFirstMember(tamperedIndep.Signature)
+	out = append(out, tamperedIndep)
+	tamperedCov := signed("tampered_first_covered", 0, agent, covering(broker))
+	tamperedCov.Signature = msCorruptFirstMember(tamperedCov.Signature)
+	out = append(out, tamperedCov)
+	// sig2's member repointed at another directory after signing.
+	repointed := signed("repointed_second_member", 0, agent, broker)
+	repointed.SignatureAgent = strings.Replace(repointed.SignatureAgent, broker.directory, "https://evil.example", 1)
+	out = append(out, repointed)
+
+	// Signed over an EMPTY Authorization, then missing a covered header: refused,
+	// and noticed after the budget and the coverage check, so an over-budget or
+	// reordered request keeps ITS reason. Bound EMPTY so that only a port telling
+	// absent from empty refuses.
+	emptySigned := func(name string, maxSig int, hops ...hopSpec) multisigChainVector {
+		req := msRequest(t, []string{""})
+		recs := signHopsOn(t, req, body, hops)
+		return mkMultisigVector(name, req, recs, body, maxSig)
+	}
+	absentTwo := emptySigned("absent_authorization_two", 0, agent, covering(broker))
+	absentTwo.OmitHeaders = []string{"Authorization"}
+	absentOver := emptySigned("absent_authorization_over_budget", 2, agent, covering(broker), covering(relay))
+	absentOver.OmitHeaders = []string{"Authorization"}
+	absentReordered := emptySigned("absent_signature_agent_reordered", 0, agent, covering(broker))
 	absentReordered.SignatureInput = msSwapTwoMembers(absentReordered.SignatureInput)
 	absentReordered.Signature = msSwapTwoMembers(absentReordered.Signature)
 	absentReordered.OmitHeaders = []string{SignatureAgentHeader}
-
-	// Three chains that exercise how a covered header is READ. Until these existed the
-	// whole fold could be stripped out of either port's multisig face and every test
-	// stayed green: nothing in this corpus ever put two spellings of one name in the
-	// bag, so a plain property lookup answered identically.
-
-	// A second Authorization field line beside the signed one, spelled in another case.
-	// Both lines belong to the one covered name and join before a hop's base is rebuilt,
-	// so the covered value changes and the chain is refused. A reader resolving the name
-	// to its first line reads back the signed empty value and accepts the token beside it.
-	reqD, hopsD := signMultisigChainWith(t, body, []hopSpec{agent, brokerA}, "", "")
-	dupTwoHop := mkChainVectorWith("duplicate_authorization_two_hop", reqD, hopsD, body, 0, "", "")
-	dupTwoHop.ExtraHeaders = map[string]string{"Authorization": "Bearer unsigned-token"}
-
-	// The same chain reached through a header bag spelled the CONVENTIONAL way. Omitting
-	// the lowercase keys and re-adding the identical values canonically is a pure case
-	// change, so the oracle still verifies it — a port matching names case-sensitively
-	// finds nothing under either covered name and refuses traffic Go accepts. Positive,
-	// because that failure is a refusal and only a positive case can catch it.
-	reqC, hopsC := signMultisigChainWith(t, body, []hopSpec{agent, brokerA}, msAuth, msSigAgent)
-	canonCase := mkChainVectorWith("canonical_case_two_hop", reqC, hopsC, body, 0, msAuth, msSigAgent)
-	canonCase.OmitHeaders = []string{"Authorization", SignatureAgentHeader}
-	canonCase.ExtraHeaders = map[string]string{
-		"Authorization":      msAuth,
-		SignatureAgentHeader: msSigAgent,
+	out = append(out, absentTwo, absentOver, absentReordered)
+
+	// A second Authorization line beside the signed one, in another spelling: both
+	// join, the covered value changes, the request is refused.
+	dup := emptySigned("duplicate_authorization_two", 0, agent, covering(broker))
+	dup.ExtraHeaders = map[string]string{"Authorization": "Bearer unsigned-token"}
+	// The same request reached through conventionally spelled header names: a pure
+	// case change, which the oracle still verifies.
+	canon := signed("canonical_case_two", 0, agent, covering(broker))
+	canon.OmitHeaders = []string{"Authorization", SignatureAgentHeader}
+	canon.ExtraHeaders = map[string]string{"Authorization": msAuth, SignatureAgentHeader: canon.SignatureAgent}
+	// Signed over TWO Authorization field lines: the covered value is the join, so
+	// only a reader that joins reconstructs the base.
+	{
+		req := msRequest(t, []string{"Bearer first-line", "Bearer second-line"})
+		recs := signHopsOn(t, req, body, []hopSpec{agent, covering(broker)})
+		v := mkMultisigVector("duplicate_bound_two", req, recs, body, 0)
+		v.ExtraHeaders = map[string]string{"Authorization": "Bearer second-line"}
+		out = append(out, dup, canon, v)
 	}
 
-	// A chain legitimately SIGNED over two Authorization field lines: the covered value
-	// is the join, so only a reader that joins reconstructs the base. This is the one
-	// shape that separates the join from a LAST-match reader — a last-match reader
-	// rejects every negative duplicate case just as the join does, and passes them all.
-	reqJ, hopsJ := signMultisigChainOverLines(
-		t, body, []hopSpec{agent, brokerA}, []string{"Bearer first-line", "Bearer second-line"}, msSigAgent)
-	dupBound := mkChainVectorWith(
-		"duplicate_bound_two_hop", reqJ, hopsJ, body, 0, "Bearer first-line", msSigAgent)
-	dupBound.ExtraHeaders = map[string]string{"Authorization": "Bearer second-line"}
-
-	out := []multisigChainVector{
-		positive, positiveNonce, hopBudget, reordered, stripped, missingLink, tampered,
-		absentTwoHop, absentOverBudget, absentReordered,
-		dupTwoHop, canonCase, dupBound,
-	}
 	for i := range out {
-		keyids, reason := multisigOracleReason(t, out[i])
-		out[i].ExpectedKeyIDs = keyids
-		out[i].ExpectedReason = reason
+		keyids, dirs, reason := multisigOracleOutcome(t, out[i])
+		out[i].ExpectedKeyIDs, out[i].ExpectedDirectories, out[i].ExpectedReason = keyids, dirs, reason
 		out[i].ExpectedVerified = reason == ""
 	}
 	return out
 }
 
-// buildMissingLinkVector forges the missing-link shape: a valid agent sig1 plus a
-// SECOND independent sig1 (broker key) relabeled as sig2 — so sig2 carries the
-// PLAIN covered set with no "signature";key="sig1" link. enforceSignatureChain
-// rejects it (sig2 must cover its predecessor). Mirrors TestChain_MissingLink.
-func buildMissingLinkVector(t *testing.T, body []byte, agent, broker hopSpec) multisigChainVector {
-	t.Helper()
-	req1, hop1 := signMultisigChain(t, body, []hopSpec{agent})
-	req2, hop2 := signMultisigChain(t, body, []hopSpec{broker})
-	sig2AsInput := msRelabelMember(req2.Header.Get("Signature-Input"), "sig1", "sig2")
-	sig2AsSig := msRelabelMember(req2.Header.Get("Signature"), "sig1", "sig2")
-
-	v := mkChainVector("broken_chain_missing_link", req1, append(hop1, hop2...), body, 0)
-	v.SignatureInput = req1.Header.Get("Signature-Input") + ", " + sig2AsInput
-	v.Signature = req1.Header.Get("Signature") + ", " + sig2AsSig
-	return v
+func chainComponent(name, label string) CoveredComponent {
+	return CoveredComponent{Name: name, Params: []ComponentParam{{Key: "key", Val: label}}}
 }
 
-// multisigOracleReason drives the REAL VerifyMultisigRequestResolved over the
-// reconstructed request with a per-hop resolver + MaxSignatures, returning the
-// verified keyids (in chain order) on success or the classified reject reason.
-// The multisig sibling of oracleNegReason: reuses classifyNegReason
-// unchanged; the multi-hop resolver + MaxSignatures is what lets it emit
-// hop_budget, which the single-sig path cannot.
-func multisigOracleReason(t *testing.T, v multisigChainVector) (keyids []string, reason string) {
+// pairResolver resolves a keyid only under the directory it was registered with.
+type pairResolver map[string]ed25519.PublicKey
+
+func (p pairResolver) Resolve(ctx context.Context, keyID string) (ed25519.PublicKey, error) {
+	dir := SignatureAgentFromContext(ctx)
+	if pub, ok := p[dir+" "+keyID]; ok {
+		return pub, nil
+	}
+	return nil, fmt.Errorf("%w: keyid=%q directory=%q", ErrUnknownKey, keyID, dir)
+}
+
+// multisigOracleOutcome drives the REAL VerifyMultisigRequestResolved over the
+// reconstructed request with a (directory, keyid) resolver and the vector's hop
+// budget, returning the verified keyids and directories on success or the
+// classified reject reason.
+func multisigOracleOutcome(t *testing.T, v multisigChainVector) (keyids, dirs []string, reason string) {
 	t.Helper()
 	body, err := hex.DecodeString(v.BodyHex)
 	if err != nil {
@@ -396,51 +386,40 @@ func multisigOracleReason(t *testing.T, v multisigChainVector) (keyids []string,
 	for _, name := range slices.Sorted(maps.Keys(v.ExtraHeaders)) {
 		req.Header.Add(name, v.ExtraHeaders[name])
 	}
-
-	keys := make(map[string]ed25519.PublicKey, len(v.Hops))
+	resolver := pairResolver{}
 	for _, h := range v.Hops {
 		raw, derr := base64.RawURLEncoding.DecodeString(h.PubkeyB64URL)
 		if derr != nil {
 			t.Fatalf("%s: decode hop pub: %v", v.Name, derr)
 		}
-		keys[h.KeyID] = ed25519.PublicKey(raw)
+		resolver[h.Directory+" "+h.KeyID] = ed25519.PublicKey(raw)
 	}
-	resolver := NewStaticKeyResolver(keys)
 	opts := VerifyOptions{Now: time.Unix(msNow, 0), MaxSignatures: v.MaxSignatures}
 	verified, verr := VerifyMultisigRequestResolved(context.Background(), req, body, resolver, opts)
 	if verr != nil {
-		return nil, classifyNegReason(verr)
+		return nil, nil, classifyNegReason(verr)
 	}
-	ids := make([]string, 0, len(verified))
 	for i := range verified {
-		ids = append(ids, verified[i].KeyID)
+		keyids = append(keyids, verified[i].KeyID)
+		dirs = append(dirs, verified[i].SignatureAgent)
 	}
-	return ids, ""
+	return keyids, dirs, ""
 }
 
 // verifyMultisigChainVector is the self-consistency guard: it re-runs the oracle
-// over the emitted vector and asserts the recorded outcome matches — so
-// expected_verified/expected_keyids/expected_reason are authoritative, never
-// hand-authored (mirrors verifyNegVectorReason for the single-sig corpus).
+// over the emitted vector and asserts the recorded outcome matches.
 func verifyMultisigChainVector(t *testing.T, v multisigChainVector) {
 	t.Helper()
-	keyids, reason := multisigOracleReason(t, v)
-	if reason != v.ExpectedReason {
-		t.Fatalf("chain vector %s: oracle reason=%q, recorded=%q", v.Name, reason, v.ExpectedReason)
-	}
-	if (reason == "") != v.ExpectedVerified {
-		t.Fatalf("chain vector %s: oracle verified=%v, recorded=%v", v.Name, reason == "", v.ExpectedVerified)
-	}
-	if strings.Join(keyids, ",") != strings.Join(v.ExpectedKeyIDs, ",") {
-		t.Fatalf("chain vector %s: oracle keyids=%v, recorded=%v", v.Name, keyids, v.ExpectedKeyIDs)
+	keyids, dirs, reason := multisigOracleOutcome(t, v)
+	if reason != v.ExpectedReason || (reason == "") != v.ExpectedVerified ||
+		strings.Join(keyids, ",") != strings.Join(v.ExpectedKeyIDs, ",") ||
+		strings.Join(dirs, ",") != strings.Join(v.ExpectedDirectories, ",") {
+		t.Fatalf("chain vector %s: oracle (%q, %v, %v), recorded (%q, %v, %v)", v.Name,
+			reason, keyids, dirs, v.ExpectedReason, v.ExpectedKeyIDs, v.ExpectedDirectories)
 	}
 }
 
 // --- structured-field member surgery (comma-separated, ", " join) ---
-//
-// Local to package helpers (the multisig_chain_extra_test.go helpers live in
-// package helpers_test and are not visible here). Mirror those exactly so the
-// emitted broken-chain vectors match the hand-written extra tests' mutations.
 
 func msDropMember(raw, label string) string {
 	var members []string
@@ -461,20 +440,6 @@ func msSwapTwoMembers(raw string) string {
 	return parts[1] + ", " + parts[0]
 }
 
-func msMemberOf(raw, label string) string {
-	for _, p := range strings.Split(raw, ", ") {
-		if strings.HasPrefix(strings.TrimSpace(p), label+"=") {
-			return strings.TrimSpace(p)
-		}
-	}
-	return ""
-}
-
-func msRelabelMember(raw, oldLabel, newLabel string) string {
-	m := msMemberOf(raw, oldLabel)
-	return newLabel + strings.TrimPrefix(m, oldLabel)
-}
-
 // msCorruptFirstMember flips the first base64 char after the opening colon of the
 // first Signature dictionary member — corrupting sig1's bytes while keeping the
 // wire form well-formed, so the reject is a signature failure, not a parse error.
@@ -493,8 +458,7 @@ func msCorruptFirstMember(sig string) string {
 	return string(b)
 }
 
-// TestGenerateMultisigChainVectors emits the multisig forwarding-chain golden
-// corpus. Like TestGenerateVectors it is a verification no-op by default (asserts
+// TestGenerateMultisigChainVectors emits the multi-signature golden corpus. Like TestGenerateVectors it is a verification no-op by default (asserts
 // the committed file matches a fresh emit) and (re)writes it under
 // FORA_UPDATE_VECTORS=1 — the emitter is both generator and drift gate.
 func TestGenerateMultisigChainVectors(t *testing.T) {
diff --git a/sdk/go/helpers/gen_util_vectors_test.go b/sdk/go/helpers/gen_util_vectors_test.go
index 0606e3e2..a4ff6d03 100644
--- a/sdk/go/helpers/gen_util_vectors_test.go
+++ b/sdk/go/helpers/gen_util_vectors_test.go
@@ -263,6 +263,11 @@ func buildWireConstantsVectors() []wireConstantVector {
 		{"WellKnownPath", WellKnownPath},
 		{"ContentRulesHeader", ContentRulesHeader},
 		{"ExchangeHeader", ExchangeHeader},
+		{"WBATag", WBATag},
+		{"DirectoryResponseTag", DirectoryResponseTag},
+		{"AcceptSignatureHeader", AcceptSignatureHeader},
+		{"AcceptSignature", AcceptSignature(false)},
+		{"AcceptSignatureWithEntitlement", AcceptSignature(true)},
 	}
 }
 
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index 4b5cc9c2..59a86cf3 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -75,7 +75,14 @@ type popVector struct {
 	// vector's signature, so a sign-face port can re-sign and byte-compare
 	// against the stored Signature (the same self-contained-oracle shape
 	// acceptance-vectors.json uses via seed_hex).
-	SignerSeedHex  string `json:"signer_seed_hex"`
+	SignerSeedHex string `json:"signer_seed_hex"`
+	// AgentDirectory is the https origin the proof names as the agent's key
+	// directory, and Nonce the nonce it signed with ("" for none): the inputs a
+	// sign-face port needs beyond the seed to reproduce the stored bytes.
+	AgentDirectory string `json:"agent_directory"`
+	Nonce          string `json:"nonce,omitempty"`
+	// SignatureAgent is the Signature-Agent header the fetch carries.
+	SignatureAgent string `json:"signature_agent"`
 	SignatureInput string `json:"signature_input"`
 	Signature      string `json:"signature"`
 	NowUnix        int64  `json:"now_unix"`
@@ -170,96 +177,177 @@ func replaceFirst(s, old, new string) string {
 	return s
 }
 
-// signEdgePoP produces the positive PoP vector through the SHIPPED signer, so the
+// popSpec names one agent-binding proof: the inputs to the shipped signer, or, for
+// a proof the signer refuses to make, the covered set and parameters to sign by
+// hand.
+type popSpec struct {
+	name, url      string
+	seed           []byte
+	keyID          string
+	directory      string
+	nonce          string
+	signatureAgent string             // header value; "" means the signer's own sig1="<directory>"
+	covered        []CoveredComponent // nil means the shipped signer
+	tag            string
+	presented      ed25519.PublicKey // nil means the signing key's public half
+	now            int64
+	valid          bool
+}
+
+// signEdgePoP produces a positive PoP proof through the SHIPPED signer, so the
 // goldens the other two languages replay are the bytes production emits rather
-// than a second implementation living in a test. keyid is the agent thumbprint
-// (the 3-way identity anchor).
-func signEdgePoP(t *testing.T, priv ed25519.PrivateKey, keyid, method, rawURL string, created, expires int64) (sigInput, sig string) {
+// than a second implementation living in a test.
+func signEdgePoP(t *testing.T, priv ed25519.PrivateKey, sp popSpec, created, expires int64) AgentBinding {
 	t.Helper()
-	signer, err := NewEd25519Signer(keyid, priv)
+	signer, err := NewEd25519Signer(sp.keyID, priv)
 	if err != nil {
-		t.Fatalf("build agent-binding signer: %v", err)
+		t.Fatalf("%s: build agent-binding signer: %v", sp.name, err)
 	}
-	pub, ok := priv.Public().(ed25519.PublicKey)
-	if !ok {
-		t.Fatal("signing key has no ed25519 public half")
-	}
-	binding, err := SignAgentBinding(context.Background(), signer, pub, PoPOptions{
-		URL: rawURL, KeyID: keyid, Created: created, Expires: expires, Method: method,
+	binding, err := SignAgentBinding(context.Background(), signer, priv.Public().(ed25519.PublicKey), PoPOptions{
+		URL: sp.url, KeyID: sp.keyID, Created: created, Expires: expires, Method: http.MethodGet,
+		SignatureAgent: sp.directory, Nonce: sp.nonce,
 	})
 	if err != nil {
-		t.Fatalf("sign agent binding: %v", err)
+		t.Fatalf("%s: sign agent binding: %v", sp.name, err)
 	}
-	return binding.SignatureInput, binding.Signature
+	return binding
 }
 
-// signEdgePoPMispairedKey hand-builds a proof that declares one keyid while
-// signing with a DIFFERENT key — the input the shipped signer refuses outright,
-// because refusing it is the whole point of the thumbprint check. The negative
-// vector therefore cannot come from the signer, and building it here is what
-// keeps it honest: it reproduces what a hostile fetcher would actually put on the
-// wire, which is the thing the edge verifier has to reject.
-func signEdgePoPMispairedKey(priv ed25519.PrivateKey, declaredKeyID, method, rawURL string, created, expires int64) (sigInput, sig string) {
-	params := popSignatureParams(declaredKeyID, created, expires)
-	raw := ed25519.Sign(priv, []byte(popSignatureBase(method, rawURL, params)))
-	return popLabel + "=" + params, popLabel + "=:" + base64.StdEncoding.EncodeToString(raw) + ":"
+// signEdgePoPByHand builds a proof the shipped signer refuses to make — a keyid
+// that is not the signing key's thumbprint, no tag, a covered set the profile does
+// not allow — over the verbatim URL. It reproduces what a hostile or outdated
+// fetcher would actually put on the wire, which is what the edge verifier has to
+// reject (or, for the legacy String form, accept).
+func signEdgePoPByHand(priv ed25519.PrivateKey, sp popSpec, created, expires int64) (sigInput, sig string) {
+	p := sigParams{
+		Covered: sp.covered, KeyID: sp.keyID, Alg: AlgEd25519,
+		Created: created, Expires: expires, Nonce: sp.nonce, Tag: sp.tag,
+	}
+	inner := signatureInputInner(p)
+	lines := make([]string, 0, len(sp.covered)+1)
+	for _, c := range sp.covered {
+		switch {
+		case c.Name == "@method":
+			lines = append(lines, `"@method": GET`)
+		case c.Name == "@target-uri":
+			lines = append(lines, `"@target-uri": `+sp.url)
+		case len(c.Params) == 0:
+			lines = append(lines, `"signature-agent": `+sp.signatureAgent)
+		default:
+			lines = append(lines, renderComponent(c)+`: "`+sp.directory+`"`)
+		}
+	}
+	base := strings.Join(append(lines, `"@signature-params": `+inner), "\n")
+	raw := ed25519.Sign(priv, []byte(base))
+	return popLabel + "=" + inner, popLabel + "=:" + base64.StdEncoding.EncodeToString(raw) + ":"
 }
 
 func buildPopVectors(t *testing.T) []popVector {
 	t.Helper()
 	const (
-		method   = "GET"
-		created  = int64(1_700_000_000)
-		expires  = int64(1_700_000_600)
-		freshNow = int64(1_700_000_100)
-		staleNow = int64(1_700_000_700) // after expires
+		created   = int64(1_700_000_000)
+		expires   = int64(1_700_000_300)
+		freshNow  = int64(1_700_000_100)
+		staleNow  = int64(1_700_000_400) // after expires
+		directory = "https://agent.example"
+		nonce     = "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw"
 	)
 	agentSeed := fixedSeed(0x33)
-	agentPriv := ed25519.NewKeyFromSeed(agentSeed)
-	agentPub := agentPriv.Public().(ed25519.PublicKey)
+	agentPub := ed25519.NewKeyFromSeed(agentSeed).Public().(ed25519.PublicKey)
 	agentTP, err := Thumbprint(agentPub)
 	if err != nil {
 		t.Fatal(err)
 	}
-	presented := b64urlNoPad(agentPub)
-
 	// The agent_id lives in the URL query (agent_id=<thumbprint>); the edge
 	// @target-uri is the full URL including that param, so the signer signs the
 	// same string the verifier reconstructs.
 	url := "https://cdn.example/doc?agent_id=" + agentTP
+	member := signatureAgentComponent(popLabel)
+	wbaCovered := []CoveredComponent{{Name: "@method"}, {Name: "@target-uri"}, member}
+	base := popSpec{url: url, seed: agentSeed, keyID: agentTP, directory: directory, nonce: nonce, now: freshNow}
+	with := func(name string, edit func(*popSpec)) popSpec {
+		sp := base
+		sp.name = name
+		edit(&sp)
+		return sp
+	}
+	specs := []popSpec{
+		with("valid", func(sp *popSpec) { sp.valid = true }),
+		// Verifiers do not require a nonce: WG-00 sets no nonce requirement.
+		with("valid_no_nonce", func(sp *popSpec) { sp.nonce = ""; sp.valid = true }),
+		with("expired", func(sp *popSpec) { sp.now = staleNow }),
+		// An actor presents a DIFFERENT key + a self-signature naming the agent's
+		// thumbprint. Its thumbprint != agent_id, so the 3-way identity check rejects it.
+		with("wrong_key_thumbprint_mismatch", func(sp *popSpec) {
+			sp.seed = fixedSeed(0x44)
+			sp.covered = wbaCovered
+			sp.tag = WBATag
+		}),
+		// The v1.0.8 proof: @method and @target-uri only, no Signature-Agent member,
+		// no tag. Not a Web Bot Auth signature, so refused.
+		with("v108_method_and_target_uri_only", func(sp *popSpec) {
+			sp.covered = plainComponents("@method", "@target-uri")
+			sp.signatureAgent = "-"
+		}),
+		with("missing_tag", func(sp *popSpec) { sp.covered = wbaCovered }),
+		with("wrong_tag", func(sp *popSpec) { sp.covered = wbaCovered; sp.tag = "other" }),
+		// The bare unquoted value the v1.0.8 SDKs sent, covered as plain
+		// signature-agent: neither a dictionary nor a String.
+		with("bare_signature_agent", func(sp *popSpec) {
+			sp.covered = append(plainComponents("@method", "@target-uri"), CoveredComponent{Name: signatureAgentLower})
+			sp.tag = WBATag
+			sp.signatureAgent = directory
+		}),
+		// The legacy String form, covered as plain signature-agent: accepted on a
+		// direct single-hop call, which a delivery fetch is.
+		with("legacy_string_signature_agent", func(sp *popSpec) {
+			sp.covered = append(plainComponents("@method", "@target-uri"), CoveredComponent{Name: signatureAgentLower})
+			sp.tag = WBATag
+			sp.signatureAgent = `"` + directory + `"`
+			sp.valid = true
+		}),
+		// A member that names a plaintext origin is not a key directory.
+		with("member_not_https_origin", func(sp *popSpec) {
+			sp.covered = wbaCovered
+			sp.tag = WBATag
+			sp.directory = "http://agent.example"
+		}),
+	}
+	out := make([]popVector, 0, len(specs))
+	for _, sp := range specs {
+		out = append(out, emitPopVector(t, sp, created, expires))
+	}
+	return out
+}
 
-	validInput, validSig := signEdgePoP(t, agentPriv, agentTP, method, url, created, expires)
-
-	// Expired: same signature, but the verifier's clock is past `expires`.
-	// (freshnessFailure rejects before the crypto check.)
-
-	// Wrong-key: an actor presents a DIFFERENT key + a self-signature. Its
-	// thumbprint != agent_id, so the 3-way identity check rejects it.
-	wrongPriv := ed25519.NewKeyFromSeed(fixedSeed(0x44))
-	wrongPub := wrongPriv.Public().(ed25519.PublicKey)
-	wrongInput, wrongSig := signEdgePoPMispairedKey(wrongPriv, agentTP, method, url, created, expires)
-	wrongPresented := b64urlNoPad(wrongPub)
-
-	return []popVector{
-		{
-			Name: "valid", Method: method, URL: url, AgentID: agentTP,
-			PresentedKeyB64URL: presented, SignerSeedHex: hex.EncodeToString(agentSeed),
-			SignatureInput: validInput, Signature: validSig,
-			NowUnix: freshNow, ExpectedValid: true,
-		},
-		{
-			Name: "expired", Method: method, URL: url, AgentID: agentTP,
-			PresentedKeyB64URL: presented, SignerSeedHex: hex.EncodeToString(agentSeed),
-			SignatureInput: validInput, Signature: validSig,
-			NowUnix: staleNow, ExpectedValid: false,
-		},
-		{
-			// Presented key's thumbprint != agent_id -> thumbprint_mismatch.
-			Name: "wrong_key_thumbprint_mismatch", Method: method, URL: url, AgentID: agentTP,
-			PresentedKeyB64URL: wrongPresented, SignerSeedHex: hex.EncodeToString(fixedSeed(0x44)),
-			SignatureInput: wrongInput, Signature: wrongSig,
-			NowUnix: freshNow, ExpectedValid: false,
-		},
+// emitPopVector signs sp (through the shipped signer, or by hand when it names a
+// covered set) and records the vector.
+func emitPopVector(t *testing.T, sp popSpec, created, expires int64) popVector {
+	t.Helper()
+	priv := ed25519.NewKeyFromSeed(sp.seed)
+	presented := sp.presented
+	if presented == nil {
+		presented = priv.Public().(ed25519.PublicKey)
+	}
+	var sigInput, sig, agentHeader string
+	if sp.covered == nil {
+		b := signEdgePoP(t, priv, sp, created, expires)
+		sigInput, sig, agentHeader = b.SignatureInput, b.Signature, b.SignatureAgent
+	} else {
+		sigInput, sig = signEdgePoPByHand(priv, sp, created, expires)
+		agentHeader = sp.signatureAgent
+		if agentHeader == "" {
+			agentHeader = signatureAgentMember(popLabel, sp.directory)
+		}
+		if agentHeader == "-" {
+			agentHeader = ""
+		}
+	}
+	return popVector{
+		Name: sp.name, Method: http.MethodGet, URL: sp.url, AgentID: sp.keyID,
+		PresentedKeyB64URL: b64urlNoPad(presented), SignerSeedHex: hex.EncodeToString(sp.seed),
+		AgentDirectory: sp.directory, Nonce: sp.nonce, SignatureAgent: agentHeader,
+		SignatureInput: sigInput, Signature: sig, NowUnix: sp.now, ExpectedValid: sp.valid,
 	}
 }
 
@@ -269,15 +357,20 @@ func buildPopVectors(t *testing.T) []popVector {
 // (method, absolute URL, body, authorization, created/expires, seed) and to
 // round-trip verify (pubkey, content-digest).
 type signRequestVector struct {
-	Name           string `json:"name"`
-	Method         string `json:"method"`
-	URL            string `json:"url"`
-	BodyHex        string `json:"body_hex"`
-	Authorization  string `json:"authorization"`
+	Name          string `json:"name"`
+	Method        string `json:"method"`
+	URL           string `json:"url"`
+	BodyHex       string `json:"body_hex"`
+	Authorization string `json:"authorization"`
+	// SignatureAgent is the signer's key-directory origin, the SignOptions input.
+	// The Signature-Agent header it produces is in emitted_headers.
 	SignatureAgent string `json:"signature_agent"`
-	KeyID          string `json:"keyid"`
-	Created        int64  `json:"created"`
-	Expires        int64  `json:"expires"`
+	// AppendOnly marks a vector signed through AppendSignature (the relay path)
+	// rather than SignRequest.
+	AppendOnly bool   `json:"append_only,omitempty"`
+	KeyID      string `json:"keyid"`
+	Created    int64  `json:"created"`
+	Expires    int64  `json:"expires"`
 	// Nonce is the RFC 9421 nonce passed to the signer; absent when none was.
 	Nonce          string `json:"nonce,omitempty"`
 	SignerSeedHex  string `json:"signer_seed_hex"`
@@ -304,6 +397,50 @@ type signRequestVector struct {
 	EmittedHeaders map[string][]string `json:"emitted_headers"`
 }
 
+// Fixed 64-byte nonces (bytes 0..63, 64..127, 128..191, 192..255, base64url),
+// the length the signing transports emit.
+const (
+	nonce64A = "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw"
+	nonce64B = "QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXp7fH1-fw"
+	nonce64C = "gIGCg4SFhoeIiYqLjI2Oj5CRkpOUlZaXmJmam5ydnp-goaKjpKWmp6ipqqusra6vsLGys7S1tre4ubq7vL2-vw"
+	nonce64D = "wMHCw8TFxsfIycrLzM3Oz9DR0tPU1dbX2Nna29zd3t_g4eLj5OXm5-jp6uvs7e7v8PHy8_T19vf4-fr7_P3-_w"
+)
+
+// The two published Ed25519 test keys the authentication page's examples are
+// signed with: RFC 8037 Appendix A (the agent) and RFC 9421 Appendix B.1.4 (the
+// Broker). Their vectors reproduce the page's example requests byte for byte.
+var (
+	rfc8037Seed = mustB64URL("nWGxne_9WmC6hEr0kuwsxERJxWl7MmkZcDusAxyuf2A")
+	rfc9421Seed = mustHex("9f8362f87a484a954e6e740c5b4c0e84229139a20aa8ab56ff66586f6a7d29c5")
+)
+
+func mustB64URL(s string) []byte {
+	b, err := base64.RawURLEncoding.DecodeString(s)
+	if err != nil {
+		panic(err)
+	}
+	return b
+}
+
+func mustHex(s string) []byte {
+	b, err := hex.DecodeString(s)
+	if err != nil {
+		panic(err)
+	}
+	return b
+}
+
+// seedThumbprint is the RFC 7638 thumbprint of the key seed derives: the keyid a
+// Web Bot Auth signature names.
+func seedThumbprint(t *testing.T, seed []byte) string {
+	t.Helper()
+	tp, err := Thumbprint(ed25519.NewKeyFromSeed(seed).Public().(ed25519.PublicKey))
+	if err != nil {
+		t.Fatal(err)
+	}
+	return tp
+}
+
 // acceptanceVector mirrors the AcceptanceVector shape the py parity test reads.
 // Seeded 0102..1f20 — the SAME seed the app fixture (testdata/acceptance-vectors.json)
 // uses — so the emitted canonical bytes + signature cross-check byte-for-byte
@@ -724,11 +861,9 @@ func buildSignRequestVectors(t *testing.T) []signRequestVector {
 	const (
 		keyid   = "mcp.v1"
 		created = int64(1_700_000_000)
-		expires = int64(1_700_000_600)
+		expires = int64(1_700_000_300)
 	)
 	seed := fixedSeed(0x55)
-	priv := ed25519.NewKeyFromSeed(seed)
-	pub := priv.Public().(ed25519.PublicKey)
 
 	type spec struct {
 		name           string
@@ -739,12 +874,18 @@ func buildSignRequestVectors(t *testing.T) []signRequestVector {
 		signatureAgent string
 		// appendOnly signs through AppendSignature rather than SignRequest — the
 		// RELAY path. It binds the same covered set and reaches the same
-		// bindAuthorization / bindSignatureAgent, so the emitted set is pinned for
-		// the forwarding leg too, not only the originating one.
+		// bindAuthorization, so the emitted set is pinned for the relay leg too.
 		appendOnly bool
 		// nonce is passed as SignOptions.Nonce; empty signs without one.
 		nonce string
-	}
+		// seed, keyid and the window default to the fixture values above; the
+		// documentation examples override them.
+		seed             []byte
+		keyid            string
+		created, expires int64
+	}
+	docBody := []byte(`{"ver":"1.0","exchange":"exchange.example","requester":{"id":"research-bot-42","domain":"research.acme.com","type":"REQUESTER_TYPE_AGENT"},"uris":["https://publisher.example/premium/ai-funding-roundup"]}`)
+	docBrokerBody := []byte(`{"ver":"1.0","exchange":"exchange.example","requester":{"id":"research-bot-42","domain":"research.acme.com","type":"REQUESTER_TYPE_AGENT"},"uris":["https://publisher.example/premium/ai-funding-roundup"],"deadline":"0.4s"}`)
 	specs := []spec{
 		{
 			name:           "post_with_authorization",
@@ -755,19 +896,18 @@ func buildSignRequestVectors(t *testing.T) []signRequestVector {
 			signatureAgent: "https://agent.example",
 		},
 		{
-			// Signature-Agent left absent: bindSignatureAgent binds "" — the
-			// static-bootstrap empty-bind case, pinned cross-language.
-			name:          "post_empty_authorization_bound",
-			method:        "POST",
-			url:           "https://broker.example/fora.v1.BrokerService/Fetch?trace=1",
-			body:          []byte(`{"uri":"https://cdn.example/other"}`),
-			authorization: "",
+			// An empty Authorization is still bound and still sent.
+			name:           "post_empty_authorization_bound",
+			method:         "POST",
+			url:            "https://broker.example/fora.v1.BrokerService/Fetch?trace=1",
+			body:           []byte(`{"uri":"https://cdn.example/other"}`),
+			authorization:  "",
+			signatureAgent: "https://agent.example:8443",
 		},
 		{
-			// The RELAY leg. Appending to an unsigned request produces a sig1
-			// byte-identical to SignRequest — single-sig is the N=1 case — so what
-			// this vector adds over the two above is the emitted set of the
-			// forwarding path, which nothing recorded.
+			// The RELAY leg. Appending to an unsigned request produces the sig1 a
+			// SignRequest would, so what this vector adds over the two above is the
+			// emitted set of the relay path.
 			name:           "append_relay_leg",
 			method:         "POST",
 			url:            "https://broker.example/fora.v1.BrokerService/Fetch",
@@ -777,25 +917,24 @@ func buildSignRequestVectors(t *testing.T) []signRequestVector {
 			appendOnly:     true,
 		},
 		{
-			// A fixed nonce, as the signing transports emit a random one. Pins
-			// where the nonce sits in the parameter tail.
+			// A fixed 64-byte nonce, as the signing transports emit a random one.
+			// Pins where the nonce sits in the parameter tail.
 			name:           "post_with_nonce",
 			method:         "POST",
 			url:            "https://broker.example/fora.v1.BrokerService/Fetch",
 			body:           []byte(`{"uri":"https://cdn.example/doc"}`),
 			authorization:  "Bearer token-123",
 			signatureAgent: "https://agent.example",
-			nonce:          "AAECAwQFBgcICQoLDA0ODw",
+			nonce:          nonce64A,
 		},
 		{
-			// The empty-bind case with a nonce, so transport tests that pin the
-			// nonce still cover an empty Authorization and Signature-Agent.
-			name:          "post_empty_authorization_bound_with_nonce",
-			method:        "POST",
-			url:           "https://broker.example/fora.v1.BrokerService/Fetch?trace=1",
-			body:          []byte(`{"uri":"https://cdn.example/other"}`),
-			authorization: "",
-			nonce:         "ICEiIyQlJicoKSorLC0uLw",
+			name:           "post_empty_authorization_bound_with_nonce",
+			method:         "POST",
+			url:            "https://broker.example/fora.v1.BrokerService/Fetch?trace=1",
+			body:           []byte(`{"uri":"https://cdn.example/other"}`),
+			authorization:  "",
+			signatureAgent: "https://agent.example:8443",
+			nonce:          nonce64B,
 		},
 		{
 			name:           "append_relay_leg_with_nonce",
@@ -805,12 +944,35 @@ func buildSignRequestVectors(t *testing.T) []signRequestVector {
 			authorization:  "",
 			signatureAgent: "https://relay.example",
 			appendOnly:     true,
-			nonce:          "EBESExQVFhcYGRobHB0eHw",
+			nonce:          nonce64C,
+		},
+		{
+			// The authentication page's Single-Hop Example, signed with the RFC 8037
+			// test key. Reproducing it proves the page and the SDKs describe one wire
+			// format.
+			name: "doc_single_hop_example", method: "POST",
+			url:  "https://exchange.example/fora.v1.ExchangeService/DiscoverResources",
+			body: docBody, authorization: "", signatureAgent: "https://research.acme.com",
+			nonce: "TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg",
+			seed:  rfc8037Seed, keyid: seedThumbprint(t, rfc8037Seed), created: 1790812800, expires: 1790813100,
+		},
+		{
+			// The page's Multi-Hop Example (Broker): a query the Broker originated and
+			// signed alone, with the RFC 9421 Appendix B.1.4 test key.
+			name: "doc_broker_example", method: "POST",
+			url:  "https://exchange.example/fora.v1.ExchangeService/DiscoverResources",
+			body: docBrokerBody, authorization: "", signatureAgent: "https://broker.example",
+			nonce: "7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg",
+			seed:  rfc9421Seed, keyid: seedThumbprint(t, rfc9421Seed), created: 1790812801, expires: 1790813101,
 		},
 	}
 
 	out := make([]signRequestVector, 0, len(specs))
 	for _, s := range specs {
+		sSeed, sKeyID, sCreated, sExpires := seed, keyid, created, expires
+		if s.seed != nil {
+			sSeed, sKeyID, sCreated, sExpires = s.seed, s.keyid, s.created, s.expires
+		}
 		req, err := http.NewRequest(s.method, s.url, nil)
 		if err != nil {
 			t.Fatalf("%s: new request: %v", s.name, err)
@@ -818,59 +980,40 @@ func buildSignRequestVectors(t *testing.T) []signRequestVector {
 		if s.authorization != "" {
 			req.Header.Set("Authorization", s.authorization)
 		}
-		if s.signatureAgent != "" {
-			req.Header.Set(SignatureAgentHeader, s.signatureAgent)
-		}
-		signer, err := NewEd25519SignerFromSeed(keyid, seed)
+		signer, err := NewEd25519SignerFromSeed(sKeyID, sSeed)
 		if err != nil {
 			t.Fatalf("%s: signer: %v", s.name, err)
 		}
-		params := sigParams{
-			Label:   "sig1",
-			Covered: coveredFor(req),
-			KeyID:   keyid,
-			Alg:     AlgEd25519,
-			Created: created,
-			Expires: expires,
-			Nonce:   s.nonce,
-		}
-		// SignRequest sets Content-Digest + binds Authorization + writes headers;
-		// buildSignatureBase over the same params reproduces the exact base bytes.
 		sign := SignRequest
 		if s.appendOnly {
 			sign = AppendSignature
 		}
-		if err := sign(context.Background(), req, s.body, signer, SignOptions{Created: created, Expires: expires, Nonce: s.nonce}); err != nil {
+		opts := SignOptions{Created: sCreated, Expires: sExpires, Nonce: s.nonce, SignatureAgent: s.signatureAgent}
+		if err := sign(context.Background(), req, s.body, signer, opts); err != nil {
 			t.Fatalf("%s: sign: %v", s.name, err)
 		}
+		params := sigParams{
+			Label: "sig1", Covered: coveredFor(req, "sig1"), KeyID: sKeyID, Alg: AlgEd25519,
+			Created: sCreated, Expires: sExpires, Nonce: s.nonce, Tag: WBATag,
+		}
 		base, err := buildSignatureBase(req, params)
 		if err != nil {
 			t.Fatalf("%s: build base: %v", s.name, err)
 		}
 		// The request was built bare, so what it carries after signing IS the
-		// signer's contribution — nothing pre-set leaks in except the two covered
-		// values the spec supplies, which a signed request must carry anyway.
+		// signer's contribution.
 		emitted := make(map[string][]string, len(req.Header))
 		for name := range req.Header {
 			emitted[strings.ToLower(name)] = req.Header.Values(name)
 		}
+		pub := ed25519.NewKeyFromSeed(sSeed).Public().(ed25519.PublicKey)
 		out = append(out, signRequestVector{
-			Name:           s.name,
-			Method:         s.method,
-			URL:            s.url,
-			BodyHex:        hex.EncodeToString(s.body),
-			Authorization:  s.authorization,
-			SignatureAgent: s.signatureAgent,
-			KeyID:          keyid,
-			Created:        created,
-			Expires:        expires,
-			Nonce:          s.nonce,
-			SignerSeedHex:  hex.EncodeToString(seed),
-			PubkeyB64URL:   b64urlNoPad(pub),
-			ContentDigest:  req.Header.Get("Content-Digest"),
-			SignatureBase:  base,
-			SignatureInput: req.Header.Get("Signature-Input"),
-			Signature:      req.Header.Get("Signature"),
+			Name: s.name, Method: s.method, URL: s.url, BodyHex: hex.EncodeToString(s.body),
+			Authorization: s.authorization, SignatureAgent: s.signatureAgent, AppendOnly: s.appendOnly,
+			KeyID: sKeyID, Created: sCreated, Expires: sExpires, Nonce: s.nonce,
+			SignerSeedHex: hex.EncodeToString(sSeed), PubkeyB64URL: b64urlNoPad(pub),
+			ContentDigest: req.Header.Get("Content-Digest"), SignatureBase: base,
+			SignatureInput: req.Header.Get("Signature-Input"), Signature: req.Header.Get("Signature"),
 			EmittedHeaders: emitted,
 		})
 	}
@@ -886,11 +1029,12 @@ func buildSignRequestVectors(t *testing.T) []signRequestVector {
 // fields, injects resolver_pubkey for keyid, pins the clock to `now`, and asserts
 // the same rejection.
 type verifyRequestNegVector struct {
-	Name           string `json:"name"`
-	Method         string `json:"method"`
-	URL            string `json:"url"`
-	BodyHex        string `json:"body_hex"`
-	Authorization  string `json:"authorization"`
+	Name          string `json:"name"`
+	Method        string `json:"method"`
+	URL           string `json:"url"`
+	BodyHex       string `json:"body_hex"`
+	Authorization string `json:"authorization"`
+	// SignatureAgent is the Signature-Agent header value the request carries.
 	SignatureAgent string `json:"signature_agent"`
 	ContentDigest  string `json:"content_digest"`
 	SignatureInput string `json:"signature_input"`
@@ -906,8 +1050,17 @@ type verifyRequestNegVector struct {
 	// Now is the verifier clock the case is pinned to (inside the window except for
 	// neg_expired, which is post-expiry).
 	Now int64 `json:"now"`
-	// ExpectedReason is RejectReason.String() for the Go rejection.
+	// ExpectedReason is RejectReason.String() for the Go rejection, "" for a
+	// request the verifier accepts (the accept corpus).
 	ExpectedReason string `json:"expected_reason"`
+	// ExpectedAcceptSignature is the Accept-Signature value the verifier answers
+	// the rejection with (helpers.AcceptSignatureFor), "" when it answers with
+	// none: a refusal for a missing component or a refused form names what the
+	// profile requires, a well-formed signature that fails does not.
+	ExpectedAcceptSignature string `json:"expected_accept_signature,omitempty"`
+	// ExpectedSignatureAgent is the key-directory origin an accepted request's
+	// signature names (VerifiedRequest.SignatureAgent); accept corpus only.
+	ExpectedSignatureAgent string `json:"expected_signature_agent,omitempty"`
 	// Replay marks the neg_replay case: the same request is presented twice; the
 	// SECOND presentation is the one that must be rejected as "replay".
 	Replay bool `json:"replay,omitempty"`
@@ -941,65 +1094,101 @@ type negRequest struct {
 	method, url    string
 	body           []byte
 	authorization  string
-	signatureAgent string
+	signatureAgent string // the Signature-Agent header value
 	req            *http.Request
 	sigInput       string
 	sig            string
 	contentDigest  string
 }
 
+// Fixed request material for the single-signature verify corpora.
+const (
+	negMethod   = "POST"
+	negURL      = "https://broker.example/fora.v1.BrokerService/Fetch"
+	negKeyID    = "mcp.v1"
+	negCreated  = int64(1_700_000_000)
+	negExpires  = int64(1_700_000_300)
+	negFreshNow = int64(1_700_000_100) // inside window
+	negStaleNow = int64(1_700_000_400) // past expires
+	negAgent    = "https://agent.example"
+)
+
+var negBody = []byte(`{"uri":"https://cdn.example/neg"}`)
+
 // signNegBase signs a fixed request with the neg-vector signer (seed 0x77) and
 // returns the wire artifacts, so each negative is a real signature the Go verifier
 // accepts before the case-specific mutation flips it to a rejection.
-func signNegBase(t *testing.T, keyid string, seed []byte, created, expires int64) negRequest {
+func signNegBase(t *testing.T, seed []byte) negRequest {
 	t.Helper()
-	return signNegBaseWith(t, keyid, seed, created, expires, "Bearer neg-token", "https://agent.example")
+	return signNegBaseWith(t, seed, "Bearer neg-token")
 }
 
-// signNegBaseWith is signNegBase over an explicit covered-header pair, so a base
-// can be signed with the EMPTY values the static-bootstrap path binds.
-func signNegBaseWith(
-	t *testing.T, keyid string, seed []byte, created, expires int64,
-	authorization, sigAgent string,
-) negRequest {
+// signNegBaseWith is signNegBase over an explicit Authorization value, so a base
+// can be signed with the EMPTY value an agent holding no token binds.
+func signNegBaseWith(t *testing.T, seed []byte, authorization string) negRequest {
 	t.Helper()
-	const (
-		method = "POST"
-		url    = "https://broker.example/fora.v1.BrokerService/Fetch"
-	)
-	body := []byte(`{"uri":"https://cdn.example/neg"}`)
-	req, err := http.NewRequest(method, url, nil)
+	req, err := http.NewRequest(negMethod, negURL, nil)
 	if err != nil {
 		t.Fatalf("neg base: new request: %v", err)
 	}
 	req.Header.Set("Authorization", authorization)
-	req.Header.Set(SignatureAgentHeader, sigAgent)
-	signer, err := NewEd25519SignerFromSeed(keyid, seed)
+	signer, err := NewEd25519SignerFromSeed(negKeyID, seed)
 	if err != nil {
 		t.Fatalf("neg base: signer: %v", err)
 	}
-	if err := SignRequest(context.Background(), req, body, signer, SignOptions{Created: created, Expires: expires}); err != nil {
+	opts := SignOptions{Created: negCreated, Expires: negExpires, SignatureAgent: negAgent}
+	if err := SignRequest(context.Background(), req, negBody, signer, opts); err != nil {
 		t.Fatalf("neg base: sign: %v", err)
 	}
+	return negFrom(req, authorization)
+}
+
+func negFrom(req *http.Request, authorization string) negRequest {
 	return negRequest{
-		method: method, url: url, body: body,
-		authorization: authorization, signatureAgent: sigAgent, req: req,
+		method: negMethod, url: negURL, body: negBody,
+		authorization: authorization, signatureAgent: req.Header.Get(SignatureAgentHeader), req: req,
 		sigInput:      req.Header.Get("Signature-Input"),
 		sig:           req.Header.Get("Signature"),
 		contentDigest: req.Header.Get("Content-Digest"),
 	}
 }
 
-// verifyNegReason drives the REAL Go verify path (VerifyRequest, then the
-// connectserver replay orchestration when replay!=nil) over a reconstructed
-// request and returns the classified reject reason token — the authoritative
-// oracle the emitted expected_reason is taken from. The reconstruction mirrors
-// what the TS/py port does: headers off the vector fields, key from the resolver,
-// clock pinned to now.
-func verifyNegReason(
+// signNegByHand signs the fixed request with exactly the parameters edit leaves:
+// the production signer's sig1 parameters edited, under the Signature-Agent header
+// agentHeader. It builds the signatures the shipped signer refuses to make — no
+// tag, the legacy or bare Signature-Agent form, a missing component — as an
+// outdated or hostile signer would.
+func signNegByHand(t *testing.T, seed []byte, agentHeader string, edit func(*sigParams)) negRequest {
+	t.Helper()
+	req, err := http.NewRequest(negMethod, negURL, nil)
+	if err != nil {
+		t.Fatalf("neg by hand: new request: %v", err)
+	}
+	req.Header.Set("Authorization", "")
+	req.Header.Set("Content-Digest", ContentDigest(negBody))
+	req.Header.Set(SignatureAgentHeader, agentHeader)
+	signer, err := NewEd25519SignerFromSeed(negKeyID, seed)
+	if err != nil {
+		t.Fatalf("neg by hand: signer: %v", err)
+	}
+	p := requestSigParams(req, "sig1", signer, SignOptions{Created: negCreated, Expires: negExpires})
+	edit(&p)
+	if err := signWithParams(context.Background(), req, p, signer, sigWriteSet); err != nil {
+		t.Fatalf("neg by hand: sign: %v", err)
+	}
+	return negFrom(req, "")
+}
+
+// verifyNegOutcome drives the REAL Go verify path (VerifyMultisigRequestResolved,
+// then the connectserver replay orchestration when replaySeen!=nil) over a
+// reconstructed request and returns the classified reject reason token and the
+// Accept-Signature value the refusal carries — the authoritative oracle the
+// emitted expectations are taken from. For an accepted request it returns "" and
+// the directory the signature names.
+func verifyNegOutcome(
 	t *testing.T, v verifyRequestNegVector, resolverPub ed25519.PublicKey,
 	replaySeen map[string]bool,
-) string {
+) (reason, accept, directory string) {
 	t.Helper()
 	body, err := hex.DecodeString(v.BodyHex)
 	if err != nil {
@@ -1009,11 +1198,14 @@ func verifyNegReason(
 	if err != nil {
 		t.Fatalf("%s: new request: %v", v.Name, err)
 	}
-	req.Header.Set("Content-Digest", v.ContentDigest)
-	req.Header.Set("Authorization", v.Authorization)
-	req.Header.Set(SignatureAgentHeader, v.SignatureAgent)
-	req.Header.Set("Signature-Input", v.SignatureInput)
-	req.Header.Set("Signature", v.Signature)
+	setIfPresent := func(name, value string) {
+		req.Header.Set(name, value)
+	}
+	setIfPresent("Content-Digest", v.ContentDigest)
+	setIfPresent("Authorization", v.Authorization)
+	setIfPresent(SignatureAgentHeader, v.SignatureAgent)
+	setIfPresent("Signature-Input", v.SignatureInput)
+	setIfPresent("Signature", v.Signature)
 	if v.Entitlement != "" {
 		req.Header.Set(entitlementHeader, v.Entitlement)
 	}
@@ -1033,7 +1225,8 @@ func verifyNegReason(
 	opts := VerifyOptions{Now: time.Unix(v.Now, 0)}
 	sigs, verr := VerifyMultisigRequestResolved(context.Background(), req, body, resolver, opts)
 	if verr != nil {
-		return classifyNegReason(verr)
+		accept, _ := AcceptSignatureFor(verr)
+		return classifyNegReason(verr), accept, ""
 	}
 	// Replay orchestration mirrors connectserver.serverConfig.verify: the nonce is
 	// keyid+"\x00"+std-base64(sig); a seen nonce classifies as "replay".
@@ -1041,18 +1234,18 @@ func verifyNegReason(
 		nonce := sigs[i].KeyID + "\x00" + sigs[i].Signature
 		if replaySeen != nil {
 			if replaySeen[nonce] {
-				return "replay"
+				return "replay", "", ""
 			}
 			replaySeen[nonce] = true
 		}
 	}
-	return ""
+	return "", "", sigs[0].SignatureAgent
 }
 
 // classifyNegReason mirrors connectserver.ClassifyReject over the helpers
-// sentinels for the SINGLE-SIG surface (broken_chain / hop_budget are multisig,
-// out of scope): every signature-authenticity/freshness/key failure is the
-// default "signature" token.
+// sentinels: the hop budget and an incomplete coverage of an earlier signature
+// have their own tokens, and every other signature-authenticity, form, freshness
+// or key failure is the default "signature" token.
 func classifyNegReason(err error) string {
 	switch {
 	case errors.Is(err, ErrTooManyHops):
@@ -1065,136 +1258,165 @@ func classifyNegReason(err error) string {
 }
 
 // buildVerifyRequestNegVectors emits the SINGLE-SIG negative-verify corpus the
-// TS/py server-verify suites consume: neg_bad_sig, neg_replay, neg_expired,
-// neg_wrong_key, neg_tampered_authorization, neg_entitlement_uncovered, and the
-// three that pin how a covered header is READ — neg_absent_authorization,
-// neg_absent_signature_agent (a covered name with no field line under it) and
-// neg_duplicate_authorization (a second line beside the signed one). Each is
-// produced by signing with the REAL Go signer then applying the case mutation,
-// and each recorded
-// expected_reason is taken from the REAL Go verify path (verifyNegReason) so the
-// tokens are authoritative, never hand-authored.
+// TS/py server-verify suites consume. Each case is a real signature, made by the
+// Go signer or by hand for a form the signer refuses, then mutated, and each
+// recorded expected_reason and expected_accept_signature is taken from the REAL Go
+// verify path, never hand-authored.
 func buildVerifyRequestNegVectors(t *testing.T) []verifyRequestNegVector {
 	t.Helper()
-	const (
-		keyid    = "mcp.v1"
-		created  = int64(1_700_000_000)
-		expires  = int64(1_700_000_600)
-		freshNow = int64(1_700_000_100) // inside window
-		staleNow = int64(1_700_000_900) // past expires
-	)
 	seed := fixedSeed(0x77)
 	pub := ed25519.NewKeyFromSeed(seed).Public().(ed25519.PublicKey)
 	pubB64 := b64urlNoPad(pub)
-	base := signNegBase(t, keyid, seed, created, expires)
+	base := signNegBase(t, seed)
 	bodyHex := hex.EncodeToString(base.body)
 
-	// mk builds a vector template carrying the base (valid) artifacts; each case
+	// mkFrom builds a vector template carrying r's (valid) artifacts; each case
 	// then overrides the field it mutates.
-	mk := func(name string, now int64) verifyRequestNegVector {
+	mkFrom := func(r negRequest, name string, now int64) verifyRequestNegVector {
 		return verifyRequestNegVector{
-			Name: name, Method: base.method, URL: base.url, BodyHex: bodyHex,
-			Authorization: base.authorization, SignatureAgent: base.signatureAgent,
-			ContentDigest: base.contentDigest, SignatureInput: base.sigInput, Signature: base.sig,
-			KeyID: keyid, ResolverKeyID: keyid, ResolverPubkeyB64URL: pubB64, Now: now,
+			Name: name, Method: r.method, URL: r.url, BodyHex: bodyHex,
+			Authorization: r.authorization, SignatureAgent: r.signatureAgent,
+			ContentDigest: r.contentDigest, SignatureInput: r.sigInput, Signature: r.sig,
+			KeyID: negKeyID, ResolverKeyID: negKeyID, ResolverPubkeyB64URL: pubB64, Now: now,
 		}
 	}
+	mk := func(name string, now int64) verifyRequestNegVector { return mkFrom(base, name, now) }
 
-	// neg_bad_sig: flip the last signature byte so the Ed25519 check fails.
-	badSig := mk("neg_bad_sig", freshNow)
+	badSig := mk("neg_bad_sig", negFreshNow)
 	badSig.Signature = corruptSignatureLastByte(base.sig)
 
-	// neg_replay: the base request is valid; presented twice the second trips the
-	// replay store. Reason "replay".
-	replay := mk("neg_replay", freshNow)
+	// The base request is valid; presented twice the second trips the replay store.
+	replay := mk("neg_replay", negFreshNow)
 	replay.Replay = true
 
-	// neg_expired: the base request, verified past its expires. Reason "signature".
-	expired := mk("neg_expired", staleNow)
+	expired := mk("neg_expired", negStaleNow)
 
-	// neg_wrong_key: the resolver serves a DIFFERENT key (seed 0x78) for keyid, so
-	// the crypto check fails against the wrong public key. Reason "signature".
-	wrongPub := ed25519.NewKeyFromSeed(fixedSeed(0x78)).Public().(ed25519.PublicKey)
-	wrongKey := mk("neg_wrong_key", freshNow)
-	wrongKey.ResolverPubkeyB64URL = b64urlNoPad(wrongPub)
+	// The resolver serves a DIFFERENT key (seed 0x78) for the keyid.
+	wrongKey := mk("neg_wrong_key", negFreshNow)
+	wrongKey.ResolverPubkeyB64URL = b64urlNoPad(ed25519.NewKeyFromSeed(fixedSeed(0x78)).Public().(ed25519.PublicKey))
 
-	// neg_tampered_authorization: the covered authorization header value is changed
-	// after signing, so the reconstructed base no longer matches. Reason "signature".
-	tampered := mk("neg_tampered_authorization", freshNow)
+	tampered := mk("neg_tampered_authorization", negFreshNow)
 	tampered.Authorization = base.authorization + "-tampered"
 
-	// neg_entitlement_uncovered: a validly-signed request that ALSO carries the
-	// X-Entitlement-Token header WITHOUT the signature covering it. The entitlement
-	// claim is unsigned, so a conformant server-verify must reject it
-	// (enforceEntitlementCoverage) even though the Ed25519 check itself passes.
-	entitlement := mk("neg_entitlement_uncovered", freshNow)
+	// The covered Signature-Agent member repointed at another directory after
+	// signing: the signature no longer verifies.
+	repointed := mk("neg_repointed_signature_agent", negFreshNow)
+	repointed.SignatureAgent = `sig1="https://evil.example"`
+
+	// A validly-signed request that ALSO carries X-Entitlement-Token WITHOUT the
+	// signature covering it: the claim is unsigned, so it is refused, and the
+	// refusal asks for the header to be covered.
+	entitlement := mk("neg_entitlement_uncovered", negFreshNow)
 	entitlement.Entitlement = "jwt:demo-unsigned-entitlement-token"
 
-	// neg_absent_authorization / neg_absent_signature_agent: a validly-signed
-	// request that does NOT CARRY one of the headers its signature covers. Empty is
-	// a value the signer may legitimately have bound; absent is no value at all, and
-	// a base that cannot be rebuilt is not a base that matches. These are the two
-	// cases a port collapses when it defaults a missing header to "" — it then
-	// accepts a request this vector proves the oracle refuses.
-	// Signed with EMPTY covered values, and that is load-bearing rather than
-	// incidental. Omit a header whose signer bound a NON-empty value and the request
-	// is refused either way — a port defaulting the missing header to "" still
-	// reconstructs the wrong value, so the case cannot tell "refused because absent"
-	// from "refused because the value differs" and gates nothing. Bound EMPTY,
-	// defaulting to "" reproduces exactly what was signed, so only a port that
-	// distinguishes absent from empty refuses. It is also the static-bootstrap shape
-	// the empty covered header exists to carry.
-	emptyBase := signNegBaseWith(t, keyid, seed, created, expires, "", "")
-	mkEmpty := func(name string, now int64) verifyRequestNegVector {
-		v := mk(name, now)
-		v.Authorization = emptyBase.authorization
-		v.SignatureAgent = emptyBase.signatureAgent
-		v.ContentDigest = emptyBase.contentDigest
-		v.SignatureInput = emptyBase.sigInput
-		v.Signature = emptyBase.sig
-		return v
-	}
-	absentAuthz := mkEmpty("neg_absent_authorization", freshNow)
+	// Signed over an EMPTY Authorization, which is load-bearing: omitting a header
+	// bound non-empty is refused whichever way a port reads it, while omitting one
+	// bound empty is refused only by a port that tells absent from empty.
+	emptyBase := signNegBaseWith(t, seed, "")
+	mkEmpty := func(name string, now int64) verifyRequestNegVector { return mkFrom(emptyBase, name, now) }
+	absentAuthz := mkEmpty("neg_absent_authorization", negFreshNow)
 	absentAuthz.OmitHeaders = []string{"Authorization"}
-	absentAgent := mkEmpty("neg_absent_signature_agent", freshNow)
+	absentAgent := mkEmpty("neg_absent_signature_agent", negFreshNow)
 	absentAgent.OmitHeaders = []string{SignatureAgentHeader}
 
-	// neg_duplicate_authorization: the signed Authorization stays exactly as bound,
-	// and a SECOND field line carrying an unsigned bearer token is added beside it
-	// under a different spelling of the same name. Both lines belong to the covered
-	// name, so they join with ", " and the rebuilt base no longer matches — which is
-	// what stops a token being slipped under an existing signature. A port that
-	// looks the name up case-sensitively, or folds the case but returns the first
-	// match instead of joining, reads back the signed value and accepts the token
-	// sitting next to it.
-	dupAuthz := mkEmpty("neg_duplicate_authorization", freshNow)
+	// A SECOND Authorization field line beside the signed one, under a different
+	// spelling: both lines join before the base is rebuilt, so the covered value
+	// changes and the request is refused.
+	dupAuthz := mkEmpty("neg_duplicate_authorization", negFreshNow)
 	dupAuthz.ExtraHeaders = map[string]string{"Authorization": "Bearer unsigned-token"}
 
-	// neg_shadowed_entitlement: the entitlement-token header carried TWICE, an empty
-	// line ahead of a real capability token, on a signature whose covered set does not
-	// commit to it. Resolving the name to its first field line answers "", the coverage
-	// rule never runs, and the unsigned token is accepted — no case trick and no
-	// unusual client, two field lines is ordinary HTTP. Joining answers ", jwt:…",
-	// which is non-empty, so the coverage rule fires and the request is refused.
-	//
-	// The EMPTY value has to sit under the capitalised spelling. Both the emitted JSON
-	// and the ports' replay order follow the map's sorted key order, and "X-" sorts
-	// before "x-" — so this is what puts the empty line first. Reversed, the first
-	// line carries the token, every reading refuses it, and the case proves nothing.
-	shadowedEntitlement := mkEmpty("neg_shadowed_entitlement", freshNow)
+	// The entitlement header carried TWICE, an empty line ahead of a real token, on
+	// a signature that does not cover it. Joining makes the value non-empty, so the
+	// coverage rule fires. The EMPTY value sits under the capitalised spelling,
+	// which sorts first, so it is the first line a port replays.
+	shadowedEntitlement := mkEmpty("neg_shadowed_entitlement", negFreshNow)
 	shadowedEntitlement.ExtraHeaders = map[string]string{
 		"X-Entitlement-Token": "",
 		"x-entitlement-token": "jwt:unsigned-capability-token",
 	}
 
+	// The forms the profile refuses, signed by hand because the signer will not.
+	member := `sig1="` + negAgent + `"`
+	noTag := mkFrom(signNegByHand(t, seed, member, func(p *sigParams) { p.Tag = "" }), "neg_missing_tag", negFreshNow)
+	wrongTag := mkFrom(signNegByHand(t, seed, member, func(p *sigParams) { p.Tag = "other-tag" }), "neg_wrong_tag", negFreshNow)
+	plainAgent := func(p *sigParams) {
+		p.Covered = append(plainComponents(requiredCoveredComponents...), CoveredComponent{Name: signatureAgentLower})
+	}
+	// The v1.0.8 form: an unquoted URL covered as plain signature-agent.
+	bare := mkFrom(signNegByHand(t, seed, negAgent, plainAgent), "neg_bare_signature_agent", negFreshNow)
+	// The signature covers member sig1, which the dictionary does not carry.
+	noMember := mkFrom(signNegByHand(t, seed, member, func(*sigParams) {}),
+		"neg_signature_agent_member_absent", negFreshNow)
+	noMember.SignatureAgent = `agent2="` + negAgent + `"`
+	typeOther := mkFrom(signNegByHand(t, seed, member+`;type="jwks"`, func(*sigParams) {}),
+		"neg_signature_agent_type_not_directory", negFreshNow)
+	notOrigin := mkFrom(signNegByHand(t, seed, `sig1="http://agent.example"`, func(*sigParams) {}),
+		"neg_signature_agent_not_https_origin", negFreshNow)
+	withPath := mkFrom(signNegByHand(t, seed, `sig1="https://agent.example/keys"`, func(*sigParams) {}),
+		"neg_signature_agent_not_an_origin", negFreshNow)
+	// A signature that omits authorization, a FORA RPC component.
+	noAuthz := mkFrom(signNegByHand(t, seed, member, func(p *sigParams) {
+		p.Covered = append(plainComponents("@method", "@target-uri", "content-digest"), signatureAgentComponent("sig1"))
+	}), "neg_missing_fora_component", negFreshNow)
+	// No signature at all.
+	unsigned := mk("neg_unsigned", negFreshNow)
+	unsigned.OmitHeaders = []string{"Signature-Input", "Signature"}
+
 	out := []verifyRequestNegVector{
-		badSig, replay, expired, wrongKey, tampered, entitlement, shadowedEntitlement,
+		badSig, replay, expired, wrongKey, tampered, repointed, entitlement, shadowedEntitlement,
 		absentAuthz, absentAgent, dupAuthz,
+		noTag, wrongTag, bare, noMember, typeOther, notOrigin, withPath, noAuthz, unsigned,
 	}
-	// Derive expected_reason from the REAL Go verify path — never hand-author it.
+	// Derive the expectations from the REAL Go verify path — never hand-author them.
 	for i := range out {
 		assertExtraHeaderSpelling(t, out[i].Name, out[i].ExtraHeaders)
-		out[i].ExpectedReason = oracleNegReason(t, out[i])
+		out[i].ExpectedReason, out[i].ExpectedAcceptSignature, _ = oracleNegOutcome(t, out[i])
+		if out[i].ExpectedReason == "" {
+			t.Fatalf("neg vector %s: the oracle accepted it", out[i].Name)
+		}
+	}
+	return out
+}
+
+// buildVerifyRequestAcceptVectors emits the forms a FORA verifier must ACCEPT
+// although the shipped signer never makes them, because WG-00 permits them and
+// other Web Bot Auth signers send them: the legacy String Signature-Agent on a
+// single-signature request, a member key that differs from the label, a
+// type=directory member parameter, no nonce, and a foreign parameter order. Same
+// shape as the negative corpus, with expected_reason "".
+func buildVerifyRequestAcceptVectors(t *testing.T) []verifyRequestNegVector {
+	t.Helper()
+	seed := fixedSeed(0x77)
+	pubB64 := b64urlNoPad(ed25519.NewKeyFromSeed(seed).Public().(ed25519.PublicKey))
+	mk := func(name string, r negRequest) verifyRequestNegVector {
+		return verifyRequestNegVector{
+			Name: name, Method: r.method, URL: r.url, BodyHex: hex.EncodeToString(r.body),
+			Authorization: r.authorization, SignatureAgent: r.signatureAgent,
+			ContentDigest: r.contentDigest, SignatureInput: r.sigInput, Signature: r.sig,
+			KeyID: negKeyID, ResolverKeyID: negKeyID, ResolverPubkeyB64URL: pubB64, Now: negFreshNow,
+		}
+	}
+	member := `sig1="` + negAgent + `"`
+	out := []verifyRequestNegVector{
+		mk("accept_signed_by_the_sdk", signNegBase(t, seed)),
+		mk("accept_legacy_string_signature_agent", signNegByHand(t, seed, `"`+negAgent+`"`, func(p *sigParams) {
+			p.Covered = append(plainComponents(requiredCoveredComponents...), CoveredComponent{Name: signatureAgentLower})
+		})),
+		mk("accept_member_key_differs_from_label", signNegByHand(t, seed, `agent="`+negAgent+`"`, func(p *sigParams) {
+			p.Covered = append(plainComponents(requiredCoveredComponents...), signatureAgentComponent("agent"))
+		})),
+		mk("accept_member_type_directory", signNegByHand(t, seed, member+`;type="directory"`, func(*sigParams) {})),
+		mk("accept_member_type_directory_token", signNegByHand(t, seed, member+`;type=directory`, func(*sigParams) {})),
+		mk("accept_no_nonce", signNegByHand(t, seed, member, func(p *sigParams) { p.Nonce = "" })),
+		mk("accept_other_members_beside", signNegByHand(t, seed, `other="https://other.example", `+member, func(*sigParams) {})),
+		mk("accept_nonce_of_other_length", signNegByHand(t, seed, member, func(p *sigParams) { p.Nonce = "AAECAwQFBgcICQoLDA0ODw" })),
+	}
+	for i := range out {
+		reason, accept, dir := oracleNegOutcome(t, out[i])
+		if reason != "" || accept != "" {
+			t.Fatalf("accept vector %s: the oracle refused it: %q", out[i].Name, reason)
+		}
+		out[i].ExpectedSignatureAgent = dir
 	}
 	return out
 }
@@ -1209,16 +1431,8 @@ var baseVectorHeaderNames = map[string]bool{
 
 // assertExtraHeaderSpelling enforces the rule the ExtraHeaders doc states, which is
 // otherwise only a comment: an extra line duplicating a name the replay already wrote
-// from a scalar column MUST be spelled in a different case.
-//
-// Go collapses both spellings onto one canonical key and keeps two values whatever the
-// case, so the oracle would emit the same expected_reason either way — but a replay's
-// header map is keyed by string. Spell the key exactly as the base entry and the port
-// OVERWRITES rather than adding beside it, the bag holds one line, and a case that
-// exists to prove two lines join proves nothing while every test still passes.
-//
-// A name with no base counterpart (the entitlement pair, which no scalar column writes)
-// carries both its own lines and is unconstrained here.
+// from a scalar column MUST be spelled in a different case, or a replay's map would
+// overwrite the base entry instead of adding a second field line.
 func assertExtraHeaderSpelling(t *testing.T, name string, extra map[string]string) {
 	t.Helper()
 	for key := range extra {
@@ -1234,24 +1448,30 @@ func assertExtraHeaderSpelling(t *testing.T, name string, extra map[string]strin
 	}
 }
 
-// oracleNegReason runs the emitted vector through the REAL Go verify path and
-// returns the reason token it produces, so expected_reason is authoritative.
-func oracleNegReason(t *testing.T, v verifyRequestNegVector) string {
+// oracleNegOutcome runs the emitted vector through the REAL Go verify path and
+// returns the reason token, the Accept-Signature value and, for an accepted
+// request, the directory — so the expectations are authoritative.
+func oracleNegOutcome(t *testing.T, v verifyRequestNegVector) (reason, accept, directory string) {
 	t.Helper()
-	var resolverPub ed25519.PublicKey
-	if v.ResolverPubkeyB64URL != "" {
-		raw, err := base64.RawURLEncoding.DecodeString(v.ResolverPubkeyB64URL)
-		if err != nil {
-			t.Fatalf("%s: decode resolver pub: %v", v.Name, err)
-		}
-		resolverPub = ed25519.PublicKey(raw)
-	}
+	resolverPub := resolverPubOf(t, v)
 	var seen map[string]bool
 	if v.Replay {
 		seen = map[string]bool{}
-		_ = verifyNegReason(t, v, resolverPub, seen) // first presentation records the nonce
+		_, _, _ = verifyNegOutcome(t, v, resolverPub, seen) // first presentation records the nonce
+	}
+	return verifyNegOutcome(t, v, resolverPub, seen)
+}
+
+func resolverPubOf(t *testing.T, v verifyRequestNegVector) ed25519.PublicKey {
+	t.Helper()
+	if v.ResolverPubkeyB64URL == "" {
+		return nil
+	}
+	raw, err := base64.RawURLEncoding.DecodeString(v.ResolverPubkeyB64URL)
+	if err != nil {
+		t.Fatalf("%s: decode resolver pub: %v", v.Name, err)
 	}
-	return verifyNegReason(t, v, resolverPub, seen)
+	return ed25519.PublicKey(raw)
 }
 
 // corruptSignatureLastByte decodes the `sig1=:<b64>:` value, flips the final byte,
@@ -1273,36 +1493,30 @@ func corruptSignatureLastByte(sig string) string {
 	return label + ":" + base64.StdEncoding.EncodeToString(raw) + ":"
 }
 
-// verifyNegVectorReason asserts each emitted negative rejects with the recorded
-// reason through the REAL Go verify path — the self-consistency guard that makes
-// expected_reason authoritative rather than hand-authored.
-func verifyNegVectorReason(t *testing.T, v verifyRequestNegVector) {
+// verifyNegVectorOutcome asserts each emitted vector reaches the recorded outcome
+// through the REAL Go verify path — the self-consistency guard that makes the
+// expectations authoritative rather than hand-authored.
+func verifyNegVectorOutcome(t *testing.T, v verifyRequestNegVector) {
 	t.Helper()
-	var resolverPub ed25519.PublicKey
-	if v.ResolverPubkeyB64URL != "" {
-		raw, err := base64.RawURLEncoding.DecodeString(v.ResolverPubkeyB64URL)
-		if err != nil {
-			t.Fatalf("%s: decode resolver pub: %v", v.Name, err)
-		}
-		resolverPub = ed25519.PublicKey(raw)
-	}
+	resolverPub := resolverPubOf(t, v)
 	var seen map[string]bool
 	if v.Replay {
 		seen = map[string]bool{}
 		// First presentation must be accepted (empty reason), recording the nonce.
-		if got := verifyNegReason(t, v, resolverPub, seen); got != "" {
+		if got, _, _ := verifyNegOutcome(t, v, resolverPub, seen); got != "" {
 			t.Fatalf("%s: first presentation unexpectedly rejected: %q", v.Name, got)
 		}
 	}
-	got := verifyNegReason(t, v, resolverPub, seen)
-	if got != v.ExpectedReason {
-		t.Fatalf("neg vector %s: oracle reason=%q, recorded=%q", v.Name, got, v.ExpectedReason)
+	reason, accept, dir := verifyNegOutcome(t, v, resolverPub, seen)
+	if reason != v.ExpectedReason || accept != v.ExpectedAcceptSignature || dir != v.ExpectedSignatureAgent {
+		t.Fatalf("vector %s: oracle (%q, %q, %q), recorded (%q, %q, %q)", v.Name,
+			reason, accept, dir, v.ExpectedReason, v.ExpectedAcceptSignature, v.ExpectedSignatureAgent)
 	}
 }
 
 // verifySignRequestVector round-trips a sign-request vector through the REAL Go
 // VerifyRequest at a pinned `now` inside the window, so any divergence surfaces
-// in the Go drift gate rather than in the Python port.
+// in the Go drift gate rather than in a port.
 func verifySignRequestVector(t *testing.T, v signRequestVector) {
 	t.Helper()
 	pubBytes, err := base64.RawURLEncoding.DecodeString(v.PubkeyB64URL)
@@ -1317,15 +1531,19 @@ func verifySignRequestVector(t *testing.T, v signRequestVector) {
 	if err != nil {
 		t.Fatalf("%s: new request: %v", v.Name, err)
 	}
-	req.Header.Set("Content-Digest", v.ContentDigest)
-	req.Header.Set("Authorization", v.Authorization)
-	req.Header.Set(SignatureAgentHeader, v.SignatureAgent)
-	req.Header.Set("Signature-Input", v.SignatureInput)
-	req.Header.Set("Signature", v.Signature)
+	for name, values := range v.EmittedHeaders {
+		for _, value := range values {
+			req.Header.Add(name, value)
+		}
+	}
 	now := time.Unix((v.Created+v.Expires)/2, 0)
-	if _, err := VerifyRequest(req, body, ed25519.PublicKey(pubBytes), VerifyOptions{Now: now}); err != nil {
+	vr, err := VerifyRequest(req, body, ed25519.PublicKey(pubBytes), VerifyOptions{Now: now})
+	if err != nil {
 		t.Fatalf("sign-request vector %s: oracle VerifyRequest rejected a self-signed vector: %v", v.Name, err)
 	}
+	if vr.SignatureAgent != v.SignatureAgent {
+		t.Fatalf("sign-request vector %s: verified directory %q, signed as %q", v.Name, vr.SignatureAgent, v.SignatureAgent)
+	}
 }
 
 // buildAcceptanceVectors signs a fixed set of offer acceptances with the REAL Go
@@ -1494,7 +1712,11 @@ func TestGenerateVectors(t *testing.T) {
 	}
 	verifyRequestNegVectors := buildVerifyRequestNegVectors(t)
 	for _, v := range verifyRequestNegVectors {
-		verifyNegVectorReason(t, v)
+		verifyNegVectorOutcome(t, v)
+	}
+	verifyRequestAcceptVectors := buildVerifyRequestAcceptVectors(t)
+	for _, v := range verifyRequestAcceptVectors {
+		verifyNegVectorOutcome(t, v)
 	}
 	acceptanceVectors := buildAcceptanceVectors(t)
 	refusedAcceptanceVectors := buildRefusedAcceptanceVectors(t)
@@ -1505,6 +1727,7 @@ func TestGenerateVectors(t *testing.T) {
 	popPath := filepath.Join("testdata", "pop-vectors.json")
 	signRequestPath := filepath.Join("testdata", "sign-request-vectors.json")
 	verifyNegPath := filepath.Join("testdata", "verify-request-neg-vectors.json")
+	verifyAcceptPath := filepath.Join("testdata", "verify-request-accept-vectors.json")
 	acceptancePath := filepath.Join("testdata", "acceptance-vectors.json")
 	offerVerifyPath := filepath.Join("testdata", "offer-verify-vectors.json")
 	wireCanonicalPath := filepath.Join("testdata", "wire-canonical-vectors.json")
@@ -1515,6 +1738,7 @@ func TestGenerateVectors(t *testing.T) {
 	// ("jcs") so a reader cannot confuse them with the old proto-binary form.
 	signRequestDoc := map[string]any{"vectors": signRequestVectors}
 	verifyNegDoc := map[string]any{"vectors": verifyRequestNegVectors}
+	verifyAcceptDoc := map[string]any{"vectors": verifyRequestAcceptVectors}
 	acceptanceDoc := map[string]any{
 		"canonicalization": "jcs",
 		"vectors":          acceptanceVectors,
@@ -1528,6 +1752,7 @@ func TestGenerateVectors(t *testing.T) {
 		writeJSON(t, popPath, popVectors)
 		writeJSON(t, signRequestPath, signRequestDoc)
 		writeJSON(t, verifyNegPath, verifyNegDoc)
+		writeJSON(t, verifyAcceptPath, verifyAcceptDoc)
 		writeJSON(t, acceptancePath, acceptanceDoc)
 		writeJSON(t, offerVerifyPath, offerVerifyDocValue)
 		writeJSON(t, wireCanonicalPath, wireCanonicalDoc)
@@ -1539,6 +1764,7 @@ func TestGenerateVectors(t *testing.T) {
 	assertMatches(t, popPath, popVectors)
 	assertMatches(t, signRequestPath, signRequestDoc)
 	assertMatches(t, verifyNegPath, verifyNegDoc)
+	assertMatches(t, verifyAcceptPath, verifyAcceptDoc)
 	assertMatches(t, acceptancePath, acceptanceDoc)
 	assertMatches(t, offerVerifyPath, offerVerifyDocValue)
 	assertMatches(t, wireCanonicalPath, wireCanonicalDoc)
diff --git a/sdk/go/helpers/keyresolver.go b/sdk/go/helpers/keyresolver.go
index 38a9e7d4..ea87db3e 100644
--- a/sdk/go/helpers/keyresolver.go
+++ b/sdk/go/helpers/keyresolver.go
@@ -62,33 +62,36 @@ func (s *StaticKeyResolver) Put(keyID string, pub ed25519.PublicKey) {
 }
 
 // VerifyRequestResolved resolves the request's signing key via resolver, then
-// runs the pure VerifyRequest. It is the convenience the server interceptor and a
-// key-resolving client use: the resolver does the IO, VerifyRequest stays pure.
+// runs the same checks as VerifyRequest. It is the convenience the server
+// interceptor and a key-resolving client use: the resolver does the IO, the
+// verification stays pure. The resolver receives the https origin of the key
+// directory the signature's own covered Signature-Agent member names, through
+// SignatureAgentFromContext.
 func VerifyRequestResolved(ctx context.Context, req *http.Request, body []byte, resolver KeyResolver, opts VerifyOptions) (*VerifiedRequest, error) {
 	allParams, sigMap, err := parseAllSignatures(req.Header)
 	if err != nil {
 		return nil, err
 	}
-	ctx = WithSignatureAgent(ctx, signatureAgentOf(req))
-	return verifySingleSignature(req, allParams[0], sigMap, body, ctxResolver(ctx, resolver), opts)
+	return verifySingleSignature(req, allParams[0], sigMap, body, ctxResolver(ctx, resolver), opts, len(allParams))
 }
 
 // ctxResolver adapts a KeyResolver (ctx-carrying Resolve) to the resolveFunc
-// shape verifySingleSignature uses.
+// shape verifySingleSignature uses. Each call threads the directory of the
+// signature being verified into the context, so a resolver serving several
+// signatures resolves each one in its own signer's directory.
 func ctxResolver(ctx context.Context, resolver KeyResolver) resolveFunc {
-	return func(keyID string) (ed25519.PublicKey, error) {
-		return resolver.Resolve(ctx, keyID)
+	return func(directory, keyID string) (ed25519.PublicKey, error) {
+		return resolver.Resolve(WithSignatureAgent(ctx, directory), keyID)
 	}
 }
 
-// VerifyMultisigRequestResolved verifies ALL signatures on req, resolving each
-// label's key via resolver, and returns the VerifiedRequest list in sig1..sigN
-// order. It is the multi-hop sibling of VerifyRequestResolved: it enforces the
-// hop bound (opts.MaxSignatures) and the structural forwarding chain before
-// cryptographically verifying every hop, so a stripped, reordered, or
-// substituted predecessor is rejected. A single-signature request is the N=1
-// case and verifies identically.
+// VerifyMultisigRequestResolved verifies EVERY signature on req, resolving each
+// signature's key via resolver in the directory its own covered Signature-Agent
+// member names, and returns the VerifiedRequest list in header order. It is the
+// multi-signature sibling of VerifyRequestResolved: it enforces the hop budget
+// (opts.MaxSignatures) and the completeness of any coverage of an earlier
+// signature before verifying each signature. A single-signature request is the
+// N=1 case and verifies identically.
 func VerifyMultisigRequestResolved(ctx context.Context, req *http.Request, body []byte, resolver KeyResolver, opts VerifyOptions) ([]VerifiedRequest, error) {
-	ctx = WithSignatureAgent(ctx, signatureAgentOf(req))
 	return VerifyMultisigRequest(req, body, ctxResolver(ctx, resolver), opts)
 }
diff --git a/sdk/go/helpers/keyresolver_test.go b/sdk/go/helpers/keyresolver_test.go
index be2907c7..18e124ca 100644
--- a/sdk/go/helpers/keyresolver_test.go
+++ b/sdk/go/helpers/keyresolver_test.go
@@ -33,7 +33,7 @@ func TestVerifyRequestResolved_endToEnd(t *testing.T) {
 	signer, _ := helpers.NewEd25519Signer("ex.v1", priv)
 	body := []byte(`{"x":1}`)
 	req, _ := http.NewRequest(http.MethodPost, "https://e.example/fora.v1.S/M", strings.NewReader(string(body)))
-	if err := helpers.SignRequest(context.Background(), req, body, signer, helpers.SignOptions{Created: tCreated, Expires: tExpires}); err != nil {
+	if err := helpers.SignRequest(context.Background(), req, body, signer, helpers.SignOptions{SignatureAgent: tAgent, Created: tCreated, Expires: tExpires}); err != nil {
 		t.Fatal(err)
 	}
 
diff --git a/sdk/go/helpers/multisig_chain_extra_test.go b/sdk/go/helpers/multisig_chain_extra_test.go
deleted file mode 100644
index 9ef01b62..00000000
--- a/sdk/go/helpers/multisig_chain_extra_test.go
+++ /dev/null
@@ -1,327 +0,0 @@
-package helpers_test
-
-import (
-	"bytes"
-	"context"
-	"crypto/ed25519"
-	"crypto/sha256"
-	"encoding/base64"
-	"errors"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
-)
-
-// Ported from v2 internal/httpsig/chain_test.go, re-expressed in the L1 idiom
-// (Signer interface + VerifyOptions.Now). These pin the forwarding-chain
-// behaviour: byte-exact signature base, chain-link presence, and the
-// structural + cryptographic rejection vectors (strip / reorder / missing-link /
-// substituted-predecessor / hop-budget).
-
-const goldenChainTarget = "https://exchange.example/fora.v1.ExchangeService/DiscoverResources"
-
-func fixedSigner(t *testing.T, keyID string, b byte) (helpers.Signer, ed25519.PublicKey) {
-	t.Helper()
-	seed := make([]byte, ed25519.SeedSize)
-	for i := range seed {
-		seed[i] = b
-	}
-	priv := ed25519.NewKeyFromSeed(seed)
-	s, err := helpers.NewEd25519Signer(keyID, priv)
-	if err != nil {
-		t.Fatalf("signer: %v", err)
-	}
-	return s, priv.Public().(ed25519.PublicKey)
-}
-
-func goldenSignedRequest(t *testing.T, body []byte, signer helpers.Signer, now time.Time) *http.Request {
-	t.Helper()
-	req, err := http.NewRequest(http.MethodPost, goldenChainTarget, bytes.NewReader(body))
-	if err != nil {
-		t.Fatalf("new request: %v", err)
-	}
-	req.Header.Set("Authorization", "Bearer test-jwt")
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(30 * time.Second).Unix()}
-	if err := helpers.SignRequest(context.Background(), req, body, signer, opts); err != nil {
-		t.Fatalf("SignRequest: %v", err)
-	}
-	return req
-}
-
-// TestChain_GoldenSignatureBase pins the byte-exact signature base for sig1 and
-// the chain-linked sig2 inner list — the byte-preservation contract.
-// The sig1 base here is also the single-sig golden: it proves the N=1 covered
-// rendering is unchanged after the []string→[]CoveredComponent widen.
-func TestChain_GoldenSignatureBase(t *testing.T) {
-	ctx := context.Background()
-	now := time.Unix(1700000000, 0)
-	body := []byte(`{"query":"foo"}`)
-
-	agentSigner, _ := fixedSigner(t, "agent-demo.v1", 0x01)
-	brokerSigner, _ := fixedSigner(t, helpers.BrokerKeyIDPrefix+"relay.a", 0x02)
-
-	req := goldenSignedRequest(t, body, agentSigner, now)
-
-	// Capture the exact sig1 Signature-Input value BEFORE appending — this is the
-	// single-sig golden the widen must not perturb.
-	gotSig1Input := req.Header.Get("Signature-Input")
-	digest := "sha-256=:" + base64.StdEncoding.EncodeToString(sha256SumGolden(body)) + ":"
-	if req.Header.Get("Content-Digest") != digest {
-		t.Fatalf("content-digest = %q, want %q", req.Header.Get("Content-Digest"), digest)
-	}
-	wantSig1Input := `sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent");keyid="agent-demo.v1";alg="ed25519";created=1700000000;expires=1700000030`
-	if gotSig1Input != wantSig1Input {
-		t.Fatalf("sig1 Signature-Input (single-sig golden) mismatch:\n got: %s\nwant: %s", gotSig1Input, wantSig1Input)
-	}
-
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(30 * time.Second).Unix()}
-	if err := helpers.AppendSignature(ctx, req, body, brokerSigner, opts); err != nil {
-		t.Fatalf("append: %v", err)
-	}
-
-	// sig2's Signature-Input inner list must carry exactly the chain link.
-	wantInner := `("@method" "@target-uri" "content-digest" "authorization" "signature-agent" "signature";key="sig1")`
-	si := req.Header.Get("Signature-Input")
-	if !strings.Contains(si, wantInner) {
-		t.Fatalf("sig2 inner list missing chain link:\n%s", si)
-	}
-	// sig1's member must still be present unchanged after the append.
-	if !strings.Contains(si, wantSig1Input) {
-		t.Fatalf("sig1 member changed by append:\n%s", si)
-	}
-}
-
-func sha256SumGolden(b []byte) []byte {
-	s := sha256.Sum256(b)
-	return s[:]
-}
-
-// chainEnv builds a valid agent(sig1)+broker(sig2) request and its resolver.
-func chainEnv(t *testing.T, now time.Time) (*http.Request, []byte, helpers.KeyResolver) {
-	t.Helper()
-	ctx := context.Background()
-	agentSigner, agentPub := fixedSigner(t, "agent-demo.v1", 0x05)
-	brokerSigner, brokerPub := fixedSigner(t, helpers.BrokerKeyIDPrefix+"relay.a", 0x06)
-	body := []byte(`{"q":"chain"}`)
-	req := goldenSignedRequest(t, body, agentSigner, now)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(30 * time.Second).Unix()}
-	if err := helpers.AppendSignature(ctx, req, body, brokerSigner, opts); err != nil {
-		t.Fatalf("append: %v", err)
-	}
-	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"agent-demo.v1":                       agentPub,
-		helpers.BrokerKeyIDPrefix + "relay.a": brokerPub,
-	})
-	return req, body, resolver
-}
-
-// TestChain_ValidChainVerifies is the positive control.
-func TestChain_ValidChainVerifies(t *testing.T) {
-	now := time.Unix(1700000000, 0)
-	req, body, resolver := chainEnv(t, now)
-	verified, err := helpers.VerifyMultisigRequestResolved(context.Background(), req, body, resolver, helpers.VerifyOptions{Now: now})
-	if err != nil {
-		t.Fatalf("verify: %v", err)
-	}
-	if len(verified) != 2 {
-		t.Fatalf("got %d verified, want 2", len(verified))
-	}
-}
-
-// TestChain_StrippedMiddleHop drops sig2 from a 3-sig chain → labels no longer
-// contiguous → ErrBrokenSignatureChain.
-func TestChain_StrippedMiddleHop(t *testing.T) {
-	ctx := context.Background()
-	now := time.Unix(1700000000, 0)
-	s1, p1 := fixedSigner(t, "agent-demo.v1", 0x07)
-	s2, p2 := fixedSigner(t, helpers.BrokerKeyIDPrefix+"relay.a", 0x08)
-	s3, p3 := fixedSigner(t, helpers.BrokerKeyIDPrefix+"relay.b", 0x09)
-	body := []byte(`{"q":"three"}`)
-	req := goldenSignedRequest(t, body, s1, now)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(30 * time.Second).Unix()}
-	if err := helpers.AppendSignature(ctx, req, body, s2, opts); err != nil {
-		t.Fatalf("append sig2: %v", err)
-	}
-	if err := helpers.AppendSignature(ctx, req, body, s3, opts); err != nil {
-		t.Fatalf("append sig3: %v", err)
-	}
-	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"agent-demo.v1":                       p1,
-		helpers.BrokerKeyIDPrefix + "relay.a": p2,
-		helpers.BrokerKeyIDPrefix + "relay.b": p3,
-	})
-
-	req.Header.Set("Signature-Input", dropMember(req.Header.Get("Signature-Input"), "sig2"))
-	req.Header.Set("Signature", dropMember(req.Header.Get("Signature"), "sig2"))
-
-	_, err := helpers.VerifyMultisigRequestResolved(ctx, req, body, resolver, helpers.VerifyOptions{Now: now})
-	if !errors.Is(err, helpers.ErrBrokenSignatureChain) {
-		t.Fatalf("want ErrBrokenSignatureChain, got %v", err)
-	}
-	if !strings.Contains(err.Error(), `want "sig2"`) {
-		t.Fatalf("stripped-hop error should report the contiguity gap, got %v", err)
-	}
-}
-
-// TestChain_Reordered swaps sig1/sig2 header order → ErrBrokenSignatureChain.
-func TestChain_Reordered(t *testing.T) {
-	now := time.Unix(1700000000, 0)
-	req, body, resolver := chainEnv(t, now)
-	req.Header.Set("Signature-Input", swapTwoMembers(req.Header.Get("Signature-Input")))
-	req.Header.Set("Signature", swapTwoMembers(req.Header.Get("Signature")))
-
-	_, err := helpers.VerifyMultisigRequestResolved(context.Background(), req, body, resolver, helpers.VerifyOptions{Now: now})
-	if !errors.Is(err, helpers.ErrBrokenSignatureChain) {
-		t.Fatalf("want ErrBrokenSignatureChain, got %v", err)
-	}
-	if !strings.Contains(err.Error(), `want "sig1"`) {
-		t.Fatalf("reorder error should report the position-1 mismatch, got %v", err)
-	}
-}
-
-// TestChain_MissingLink: a sig2 that does NOT cover sig1 (parallel co-sign shape)
-// → ErrBrokenSignatureChain. AppendSignature always adds the link, so we forge
-// the missing-link shape by signing a second request and splicing its sig1
-// member in as a (mislabeled) sig2 — simplest path that keeps the wire emission
-// in the production signer. Instead, we build it by appending then stripping the
-// chain link param via header surgery is brittle; we drive it by re-signing the
-// SAME request as a fresh sig1 and renaming the member to sig2.
-func TestChain_MissingLink(t *testing.T) {
-	ctx := context.Background()
-	now := time.Unix(1700000000, 0)
-	s1, p1 := fixedSigner(t, "agent-demo.v1", 0x0a)
-	s2, p2 := fixedSigner(t, helpers.BrokerKeyIDPrefix+"relay.a", 0x0b)
-	body := []byte(`{"q":"nolink"}`)
-
-	req := goldenSignedRequest(t, body, s1, now)
-	sig1Input := req.Header.Get("Signature-Input")
-	sig1Sig := req.Header.Get("Signature")
-
-	// Build a second independent sig1 (broker key) over the same request, then
-	// relabel it sig2 and concatenate — a sig2 with the PLAIN base set, no link.
-	req2 := goldenSignedRequest(t, body, s2, now)
-	sig2AsInput := relabelMember(req2.Header.Get("Signature-Input"), "sig1", "sig2")
-	sig2AsSig := relabelMember(req2.Header.Get("Signature"), "sig1", "sig2")
-
-	req.Header.Set("Signature-Input", sig1Input+", "+sig2AsInput)
-	req.Header.Set("Signature", sig1Sig+", "+sig2AsSig)
-
-	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"agent-demo.v1":                       p1,
-		helpers.BrokerKeyIDPrefix + "relay.a": p2,
-	})
-	_, err := helpers.VerifyMultisigRequestResolved(ctx, req, body, resolver, helpers.VerifyOptions{Now: now})
-	if !errors.Is(err, helpers.ErrBrokenSignatureChain) {
-		t.Fatalf("want ErrBrokenSignatureChain, got %v", err)
-	}
-	if !strings.Contains(err.Error(), "must cover") {
-		t.Fatalf("missing-link error should name the coverage failure, got %v", err)
-	}
-}
-
-// TestChain_SubstitutedPredecessorRejected is the BINDING test: a relay cannot
-// swap a peer's signature. A valid agent sig1_A + broker sig2 (chained to sig1_A)
-// has sig1 replaced by a DIFFERENT but individually-valid agent sig1_B (same key,
-// different created). sig1_B verifies on its own, but sig2's base resolves the
-// chain link to sig1_B's bytes — which sig2 never signed — so sig2's verify fails.
-func TestChain_SubstitutedPredecessorRejected(t *testing.T) {
-	ctx := context.Background()
-	now := time.Unix(1700000000, 0)
-	agentSigner, agentPub := fixedSigner(t, "agent-demo.v1", 0x0c)
-	brokerSigner, brokerPub := fixedSigner(t, helpers.BrokerKeyIDPrefix+"relay.a", 0x0d)
-	body := []byte(`{"q":"subst"}`)
-
-	req := goldenSignedRequest(t, body, agentSigner, now)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(30 * time.Second).Unix()}
-	if err := helpers.AppendSignature(ctx, req, body, brokerSigner, opts); err != nil {
-		t.Fatalf("append sig2: %v", err)
-	}
-
-	// sig1_B: same agent key + body, different created → different signature bytes.
-	reqB := goldenSignedRequest(t, body, agentSigner, now.Add(time.Second))
-	sig1BInput := memberOf(reqB.Header.Get("Signature-Input"), "sig1")
-	sig1BSig := memberOf(reqB.Header.Get("Signature"), "sig1")
-
-	req.Header.Set("Signature-Input", replaceMember(req.Header.Get("Signature-Input"), "sig1", sig1BInput))
-	req.Header.Set("Signature", replaceMember(req.Header.Get("Signature"), "sig1", sig1BSig))
-
-	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"agent-demo.v1":                       agentPub,
-		helpers.BrokerKeyIDPrefix + "relay.a": brokerPub,
-	})
-	_, err := helpers.VerifyMultisigRequestResolved(ctx, req, body, resolver, helpers.VerifyOptions{Now: now.Add(time.Second)})
-	if !errors.Is(err, helpers.ErrSignatureVerify) {
-		t.Fatalf("want ErrSignatureVerify (sig2 bound to the substituted sig1), got %v", err)
-	}
-}
-
-// TestChain_TooManyHops rejects a 2-sig chain under MaxSignatures=1.
-func TestChain_TooManyHops(t *testing.T) {
-	now := time.Unix(1700000000, 0)
-	req, body, resolver := chainEnv(t, now)
-	_, err := helpers.VerifyMultisigRequestResolved(context.Background(), req, body, resolver,
-		helpers.VerifyOptions{Now: now, MaxSignatures: 1})
-	if !errors.Is(err, helpers.ErrTooManyHops) {
-		t.Fatalf("want ErrTooManyHops, got %v", err)
-	}
-}
-
-// TestChain_WithinHopBudget accepts a chain exactly at the budget.
-func TestChain_WithinHopBudget(t *testing.T) {
-	now := time.Unix(1700000000, 0)
-	req, body, resolver := chainEnv(t, now)
-	if _, err := helpers.VerifyMultisigRequestResolved(context.Background(), req, body, resolver,
-		helpers.VerifyOptions{Now: now, MaxSignatures: 2}); err != nil {
-		t.Fatalf("verify at budget: %v", err)
-	}
-}
-
-// --- structured-field member helpers (comma-separated, ", " join) ---
-
-func dropMember(raw, label string) string {
-	var members []string
-	for _, m := range strings.Split(raw, ", ") {
-		if strings.HasPrefix(strings.TrimSpace(m), label+"=") {
-			continue
-		}
-		members = append(members, m)
-	}
-	return strings.Join(members, ", ")
-}
-
-func swapTwoMembers(raw string) string {
-	parts := strings.SplitN(raw, ", ", 2)
-	if len(parts) != 2 {
-		return raw
-	}
-	return parts[1] + ", " + parts[0]
-}
-
-func memberOf(raw, label string) string {
-	for _, p := range strings.Split(raw, ", ") {
-		if strings.HasPrefix(strings.TrimSpace(p), label+"=") {
-			return strings.TrimSpace(p)
-		}
-	}
-	return ""
-}
-
-func replaceMember(raw, label, newMember string) string {
-	var parts []string
-	for _, p := range strings.Split(raw, ", ") {
-		if strings.HasPrefix(strings.TrimSpace(p), label+"=") {
-			parts = append(parts, newMember)
-		} else {
-			parts = append(parts, p)
-		}
-	}
-	return strings.Join(parts, ", ")
-}
-
-func relabelMember(raw, oldLabel, newLabel string) string {
-	m := memberOf(raw, oldLabel)
-	return newLabel + strings.TrimPrefix(m, oldLabel)
-}
diff --git a/sdk/go/helpers/multisig_chain_test.go b/sdk/go/helpers/multisig_chain_test.go
deleted file mode 100644
index 59981fff..00000000
--- a/sdk/go/helpers/multisig_chain_test.go
+++ /dev/null
@@ -1,130 +0,0 @@
-package helpers_test
-
-import (
-	"bytes"
-	"context"
-	"crypto/ed25519"
-	"net/http"
-	"testing"
-	"time"
-
-	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
-)
-
-// Forward-chain: the agent ALWAYS signs its request (sig1); a relaying broker
-// chains its signature (sig2) on top via AppendSignature. VerifyMultisigRequest
-// returns ALL verified labels in chain order, enforcing the order-bound
-// forwarding chain. Single-sig is exactly the N=1 case of this path.
-func multisigReq(t *testing.T) (*http.Request, []byte) {
-	t.Helper()
-	body := []byte(`{"idempotency_key":"idem-1"}`)
-	req, err := http.NewRequest(http.MethodPost, "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction", bytes.NewReader(body))
-	if err != nil {
-		t.Fatal(err)
-	}
-	return req, body
-}
-
-func TestAppendSignature_twoHopChainVerifies(t *testing.T) {
-	ctx := context.Background()
-	agentPub, agentPriv, _ := ed25519.GenerateKey(nil)
-	brokerPub, brokerPriv, _ := ed25519.GenerateKey(nil)
-
-	agentSigner, err := helpers.NewEd25519Signer("agent.k1", agentPriv)
-	if err != nil {
-		t.Fatal(err)
-	}
-	// A broker relay key uses the broker.* keyID convention.
-	brokerSigner, err := helpers.NewEd25519Signer(helpers.BrokerKeyIDPrefix+"inst.v1", brokerPriv)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	now := time.Unix(1_700_000_000, 0)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(time.Hour).Unix()}
-
-	req, body := multisigReq(t)
-	// sig1: the agent signs its own request.
-	if err := helpers.SignRequest(ctx, req, body, agentSigner, opts); err != nil {
-		t.Fatalf("agent SignRequest: %v", err)
-	}
-	// sig2: the broker chains its signature on top WITHOUT disturbing sig1.
-	if err := helpers.AppendSignature(ctx, req, body, brokerSigner, opts); err != nil {
-		t.Fatalf("broker AppendSignature: %v", err)
-	}
-
-	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"agent.k1":                            agentPub,
-		helpers.BrokerKeyIDPrefix + "inst.v1": brokerPub,
-	})
-	vopts := helpers.VerifyOptions{Now: now.Add(time.Minute)}
-
-	verified, err := helpers.VerifyMultisigRequestResolved(ctx, req, body, resolver, vopts)
-	if err != nil {
-		t.Fatalf("VerifyMultisigRequestResolved: %v", err)
-	}
-	if len(verified) != 2 {
-		t.Fatalf("verified %d signatures, want 2", len(verified))
-	}
-	if verified[0].Label != "sig1" || verified[1].Label != "sig2" {
-		t.Fatalf("labels = %q,%q want sig1,sig2", verified[0].Label, verified[1].Label)
-	}
-	if verified[0].KeyID != "agent.k1" {
-		t.Fatalf("sig1 keyid = %q want agent.k1", verified[0].KeyID)
-	}
-}
-
-// Tampering with the predecessor's signature bytes must break the chained sig2
-// verification (order-bound, tamper-evident chain).
-func TestAppendSignature_tamperedPredecessorRejected(t *testing.T) {
-	ctx := context.Background()
-	agentPub, agentPriv, _ := ed25519.GenerateKey(nil)
-	brokerPub, brokerPriv, _ := ed25519.GenerateKey(nil)
-	agentSigner, _ := helpers.NewEd25519Signer("agent.k1", agentPriv)
-	brokerSigner, _ := helpers.NewEd25519Signer(helpers.BrokerKeyIDPrefix+"inst.v1", brokerPriv)
-
-	now := time.Unix(1_700_000_000, 0)
-	opts := helpers.SignOptions{Created: now.Unix(), Expires: now.Add(time.Hour).Unix()}
-	req, body := multisigReq(t)
-	_ = helpers.SignRequest(ctx, req, body, agentSigner, opts)
-	_ = helpers.AppendSignature(ctx, req, body, brokerSigner, opts)
-
-	// Re-sign sig1 with a DIFFERENT agent key but leave sig2 (which chained the
-	// original sig1 bytes) intact — the chain link no longer resolves.
-	_, otherPriv, _ := ed25519.GenerateKey(nil)
-	otherSigner, _ := helpers.NewEd25519Signer("agent.k1", otherPriv)
-	// Rebuild sig1 only by signing a fresh request and splicing — simplest: flip
-	// the agent's registered key so sig1's own verify fails too; but we want the
-	// CHAIN to be what fails, so instead resolve with the tampered predecessor.
-	_ = otherSigner
-
-	resolver := helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{
-		"agent.k1":                            agentPub,
-		helpers.BrokerKeyIDPrefix + "inst.v1": brokerPub,
-	})
-	vopts := helpers.VerifyOptions{Now: now.Add(time.Minute)}
-
-	// Corrupt the Signature header's sig1 member bytes.
-	req.Header.Set("Signature", corruptFirstMember(req.Header.Get("Signature")))
-	if _, err := helpers.VerifyMultisigRequestResolved(ctx, req, body, resolver, vopts); err == nil {
-		t.Fatal("expected verification failure on tampered predecessor, got nil")
-	}
-}
-
-// corruptFirstMember flips a character in the first dictionary member's base64
-// payload of a Signature header value.
-func corruptFirstMember(sig string) string {
-	b := []byte(sig)
-	for i := 0; i < len(b); i++ {
-		if b[i] == ':' && i+1 < len(b) {
-			// flip the first base64 char after the opening colon
-			if b[i+1] == 'A' {
-				b[i+1] = 'B'
-			} else {
-				b[i+1] = 'A'
-			}
-			break
-		}
-	}
-	return string(b)
-}
diff --git a/sdk/go/helpers/multisig_test.go b/sdk/go/helpers/multisig_test.go
new file mode 100644
index 00000000..0338fec9
--- /dev/null
+++ b/sdk/go/helpers/multisig_test.go
@@ -0,0 +1,324 @@
+package helpers_test
+
+// A request carrying several signatures, under the Web Bot Auth profile. Every
+// signature is verified on its own, against the key its keyid names in the
+// directory its OWN covered Signature-Agent member names. A signature need not
+// cover another (WG-00 §5.2.2: a forwarder MAY); one that does must cover the
+// earlier signature's Signature member, its Signature-Input member and every
+// component it lists, and may only cover a signature that appears before it. The
+// hop budget counts every signature. Labels carry no meaning: sig1..sigN is the
+// SDK's convention, not a rule.
+
+import (
+	"context"
+	"crypto/ed25519"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"net/http"
+	"strings"
+	"testing"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+func mustDecodeHex(t *testing.T, s string) []byte {
+	t.Helper()
+	b, err := hex.DecodeString(s)
+	if err != nil {
+		t.Fatal(err)
+	}
+	return b
+}
+
+// directoryResolver resolves a keyid only in the directory it was registered
+// under, so a signature resolved through the wrong member fails.
+type directoryResolver map[string]ed25519.PublicKey
+
+func (d directoryResolver) Resolve(ctx context.Context, keyID string) (ed25519.PublicKey, error) {
+	dir := helpers.SignatureAgentFromContext(ctx)
+	if pub, ok := d[dir+" "+keyID]; ok {
+		return pub, nil
+	}
+	return nil, fmt.Errorf("%w: %s in %s", helpers.ErrUnknownKey, keyID, dir)
+}
+
+type hop struct {
+	signer helpers.Signer
+	pub    ed25519.PublicKey
+	origin string
+}
+
+func newHop(t *testing.T, keyID, origin string) hop {
+	t.Helper()
+	signer, pub := mustSigner(t, keyID)
+	return hop{signer: signer, pub: pub, origin: origin}
+}
+
+func resolverFor(hops ...hop) directoryResolver {
+	r := directoryResolver{}
+	for _, h := range hops {
+		r[h.origin+" "+h.signer.KeyID()] = h.pub
+	}
+	return r
+}
+
+// signHops signs req with the first hop through SignRequest and every later hop
+// through AppendSignature, each with cover set as the CoverPrevious option.
+func signHops(t *testing.T, req *http.Request, body []byte, cover bool, hops ...hop) {
+	t.Helper()
+	for i, h := range hops {
+		opts := helpers.SignOptions{Created: tCreated, Expires: tExpires, SignatureAgent: h.origin, CoverPrevious: cover}
+		var err error
+		if i == 0 {
+			err = helpers.SignRequest(context.Background(), req, body, h.signer, opts)
+		} else {
+			err = helpers.AppendSignature(context.Background(), req, body, h.signer, opts)
+		}
+		if err != nil {
+			t.Fatalf("hop %d: %v", i, err)
+		}
+	}
+}
+
+func verifyAll(t *testing.T, req *http.Request, body []byte, r helpers.KeyResolver, max int) ([]helpers.VerifiedRequest, error) {
+	t.Helper()
+	return helpers.VerifyMultisigRequestResolved(context.Background(), req, body, r,
+		helpers.VerifyOptions{Now: tNow, MaxSignatures: max})
+}
+
+// TestMultisig_independentSignaturesEachResolveInTheirOwnDirectory: two
+// signatures that do not cover each other both verify, each resolved through its
+// own member, and the result carries each signer's directory.
+func TestMultisig_independentSignaturesEachResolveInTheirOwnDirectory(t *testing.T) {
+	agent, broker := newHop(t, "agent.v1", tAgent), newHop(t, "broker.v1", tBroker)
+	req, body := profileRequest(t, []byte(`{"q":1}`), ""), []byte(`{"q":1}`)
+	signHops(t, req, body, false, agent, broker)
+
+	if got := req.Header.Get(helpers.SignatureAgentHeader); got != `sig1="`+tAgent+`", sig2="`+tBroker+`"` {
+		t.Errorf("Signature-Agent = %q", got)
+	}
+	if strings.Contains(req.Header.Get("Signature-Input"), `"signature";key=`) {
+		t.Errorf("an append without CoverPrevious covered an earlier signature: %s", req.Header.Get("Signature-Input"))
+	}
+	verified, err := verifyAll(t, req, body, resolverFor(agent, broker), 0)
+	if err != nil {
+		t.Fatalf("verify: %v", err)
+	}
+	if len(verified) != 2 || verified[0].SignatureAgent != tAgent || verified[1].SignatureAgent != tBroker {
+		t.Fatalf("verified = %+v", verified)
+	}
+}
+
+// TestMultisig_aSignatureIsNotResolvedThroughAnotherMember: the broker's key is
+// published only in the broker's directory. A broker signature that covers the
+// AGENT's member is resolved in the agent's directory, does not find the key there,
+// and the request is refused.
+func TestMultisig_aSignatureIsNotResolvedThroughAnotherMember(t *testing.T) {
+	agent, broker := newHop(t, "agent.v1", tAgent), newHop(t, "broker.v1", tBroker)
+	body := []byte(`{"q":1}`)
+	req := profileRequest(t, body, "")
+	signHops(t, req, body, false, agent)
+	req.Header.Set(helpers.SignatureAgentHeader, req.Header.Get(helpers.SignatureAgentHeader)+`, sig2="`+tBroker+`"`)
+	raw := helpers.RawSignature{
+		Label: "sig2", Covered: append(plainCovered(foraRPC...), memberCovered("sig1")),
+		Created: tCreated, Expires: tExpires, Tag: helpers.WBATag,
+	}
+	if err := helpers.SignRawForTest(req, broker.signer, raw, true); err != nil {
+		t.Fatal(err)
+	}
+	_, err := verifyAll(t, req, body, resolverFor(agent, broker), 0)
+	if !errors.Is(err, helpers.ErrUnknownKey) {
+		t.Fatalf("verify error = %v, want ErrUnknownKey from resolving in the agent's directory", err)
+	}
+}
+
+// TestMultisig_coverPreviousCoversTheEarlierSignatureCompletely: under
+// CoverPrevious the new signature covers the earlier one's Signature member, its
+// Signature-Input member and every component it lists, and a three-signature
+// chain verifies.
+func TestMultisig_coverPreviousCoversTheEarlierSignatureCompletely(t *testing.T) {
+	a, b, c := newHop(t, "a.v1", "https://a.example"), newHop(t, "b.v1", "https://b.example"), newHop(t, "c.v1", "https://c.example")
+	body := []byte(`{"q":2}`)
+	req := profileRequest(t, body, "")
+	signHops(t, req, body, true, a, b, c)
+
+	members := strings.Split(req.Header.Get("Signature-Input"), ", sig")
+	if len(members) != 3 {
+		t.Fatalf("Signature-Input = %s", req.Header.Get("Signature-Input"))
+	}
+	sig2 := members[1]
+	for _, want := range []string{`"signature-agent";key="sig1"`, `"signature";key="sig1"`, `"signature-input";key="sig1"`, `"signature-agent";key="sig2"`} {
+		if !strings.Contains(sig2, want) {
+			t.Errorf("sig2 does not cover %s: %s", want, sig2)
+		}
+	}
+	verified, err := verifyAll(t, req, body, resolverFor(a, b, c), 0)
+	if err != nil {
+		t.Fatalf("verify: %v", err)
+	}
+	if len(verified) != 3 {
+		t.Fatalf("verified %d signatures, want 3", len(verified))
+	}
+	// Tampering with sig1 now breaks sig1 itself and every signature covering it.
+	req.Header.Set("Signature", corruptFirstMember(req.Header.Get("Signature")))
+	if _, err := verifyAll(t, req, body, resolverFor(a, b, c), 0); !errors.Is(err, helpers.ErrSignatureVerify) {
+		t.Fatalf("tampered sig1: %v, want ErrSignatureVerify", err)
+	}
+}
+
+// TestMultisig_incompleteCoverageIsRefused: each way a signature can cover an
+// earlier one partially, or name one that is not earlier, is refused before any
+// crypto as ErrBrokenSignatureChain.
+func TestMultisig_incompleteCoverageIsRefused(t *testing.T) {
+	agent, broker := newHop(t, "agent.v1", tAgent), newHop(t, "broker.v1", tBroker)
+	link := func(name, key string) helpers.CoveredComponent {
+		return helpers.CoveredComponent{Name: name, Params: []helpers.ComponentParam{{Key: "key", Val: key}}}
+	}
+	own := append(plainCovered(foraRPC...), memberCovered("sig2"))
+	for _, tc := range []struct {
+		name    string
+		covered []helpers.CoveredComponent
+	}{
+		{"signature without signature-input", append(append([]helpers.CoveredComponent{}, own...), memberCovered("sig1"), link("signature", "sig1"))},
+		{"without a component sig1 lists", append(append([]helpers.CoveredComponent{}, own...), link("signature", "sig1"), link("signature-input", "sig1"))},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			body := []byte(`{"q":3}`)
+			req := profileRequest(t, body, "")
+			signHops(t, req, body, false, agent)
+			req.Header.Set(helpers.SignatureAgentHeader, req.Header.Get(helpers.SignatureAgentHeader)+`, sig2="`+tBroker+`"`)
+			raw := helpers.RawSignature{Label: "sig2", Covered: tc.covered, Created: tCreated, Expires: tExpires, Tag: helpers.WBATag}
+			if err := helpers.SignRawForTest(req, broker.signer, raw, true); err != nil {
+				t.Fatal(err)
+			}
+			if _, err := verifyAll(t, req, body, resolverFor(agent, broker), 0); !errors.Is(err, helpers.ErrBrokenSignatureChain) {
+				t.Fatalf("verify error = %v, want ErrBrokenSignatureChain", err)
+			}
+		})
+	}
+}
+
+// TestMultisig_coverageMustNameAnEarlierSignature: a coverage naming a label that
+// is not on the request, or the covering signature itself, is refused as
+// ErrBrokenSignatureChain before any signature is checked, so the edit to
+// Signature-Input that produces it is reported as the coverage it breaks.
+func TestMultisig_coverageMustNameAnEarlierSignature(t *testing.T) {
+	agent, broker := newHop(t, "agent.v1", tAgent), newHop(t, "broker.v1", tBroker)
+	for _, tc := range []struct{ name, to string }{{"a label not on the request", "sig9"}, {"itself", "sig2"}} {
+		t.Run(tc.name, func(t *testing.T) {
+			body := []byte(`{"q":8}`)
+			req := profileRequest(t, body, "")
+			signHops(t, req, body, true, agent, broker)
+			in := req.Header.Get("Signature-Input")
+			cut := strings.Index(in, ", sig2=")
+			req.Header.Set("Signature-Input", in[:cut]+strings.ReplaceAll(in[cut:], `"signature-input";key="sig1"`, `"signature-input";key="`+tc.to+`"`))
+			if _, err := verifyAll(t, req, body, resolverFor(agent, broker), 0); !errors.Is(err, helpers.ErrBrokenSignatureChain) {
+				t.Fatalf("verify error = %v, want ErrBrokenSignatureChain", err)
+			}
+		})
+	}
+}
+
+// TestMultisig_coverageMustPointBackwards: swapping the order of a covering pair
+// puts the covered signature after the one covering it, which is refused.
+func TestMultisig_coverageMustPointBackwards(t *testing.T) {
+	agent, broker := newHop(t, "agent.v1", tAgent), newHop(t, "broker.v1", tBroker)
+	body := []byte(`{"q":4}`)
+	req := profileRequest(t, body, "")
+	signHops(t, req, body, true, agent, broker)
+	for _, h := range []string{"Signature-Input", "Signature"} {
+		parts := strings.SplitN(req.Header.Get(h), ", ", 2)
+		req.Header.Set(h, parts[1]+", "+parts[0])
+	}
+	if _, err := verifyAll(t, req, body, resolverFor(agent, broker), 0); !errors.Is(err, helpers.ErrBrokenSignatureChain) {
+		t.Fatalf("verify error = %v, want ErrBrokenSignatureChain", err)
+	}
+}
+
+// TestMultisig_hopBudgetCountsEverySignature: three independent signatures exceed
+// a budget of two whether or not any covers another.
+func TestMultisig_hopBudgetCountsEverySignature(t *testing.T) {
+	for _, cover := range []bool{false, true} {
+		t.Run(fmt.Sprintf("cover=%v", cover), func(t *testing.T) {
+			a, b, c := newHop(t, "a.v1", "https://a.example"), newHop(t, "b.v1", "https://b.example"), newHop(t, "c.v1", "https://c.example")
+			body := []byte(`{"q":5}`)
+			req := profileRequest(t, body, "")
+			signHops(t, req, body, cover, a, b, c)
+			if _, err := verifyAll(t, req, body, resolverFor(a, b, c), 2); !errors.Is(err, helpers.ErrTooManyHops) {
+				t.Fatalf("verify error = %v, want ErrTooManyHops", err)
+			}
+			if _, err := verifyAll(t, req, body, resolverFor(a, b, c), 3); err != nil {
+				t.Fatalf("within budget: %v", err)
+			}
+		})
+	}
+}
+
+// TestMultisig_legacyFormOnlyOnASingleSignature: the legacy String form names one
+// directory and cannot take a second member. A verifier refuses it on a request
+// carrying two signatures, and a forwarder refuses to append to it.
+func TestMultisig_legacyFormOnlyOnASingleSignature(t *testing.T) {
+	agent, broker := newHop(t, "agent.v1", tAgent), newHop(t, "broker.v1", tBroker)
+	body := []byte(`{"q":6}`)
+	req := profileRequest(t, body, `"`+tAgent+`"`)
+	rawSign(t, req, agent.signer, func(r *helpers.RawSignature) {
+		r.Covered = plainCovered(append(foraRPC, "signature-agent")...)
+	})
+	err := helpers.AppendSignature(context.Background(), req, body, broker.signer,
+		helpers.SignOptions{Created: tCreated, Expires: tExpires, SignatureAgent: tBroker})
+	if !errors.Is(err, helpers.ErrSignatureAgentForm) {
+		t.Fatalf("appending to the legacy form: %v, want ErrSignatureAgentForm", err)
+	}
+	// A second signature carried beside it anyway is refused at the verifier.
+	raw := helpers.RawSignature{
+		Label: "sig2", Covered: plainCovered(append(foraRPC, "signature-agent")...),
+		Created: tCreated, Expires: tExpires, Tag: helpers.WBATag,
+	}
+	if err := helpers.SignRawForTest(req, broker.signer, raw, true); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := verifyAll(t, req, body, resolverFor(agent, broker), 0); !errors.Is(err, helpers.ErrSignatureAgentForm) {
+		t.Fatalf("verify error = %v, want ErrSignatureAgentForm", err)
+	}
+}
+
+// TestAppendSignature_labelsAvoidEveryUsedName: the appended label is the first
+// sigN no signature and no Signature-Agent member uses, and a caller's label that
+// collides is refused.
+func TestAppendSignature_labelsAvoidEveryUsedName(t *testing.T) {
+	agent, broker := newHop(t, "agent.v1", tAgent), newHop(t, "broker.v1", tBroker)
+	body := []byte(`{"q":7}`)
+	req := profileRequest(t, body, `sig2="https://other.example"`)
+	rawSign(t, req, agent.signer, func(r *helpers.RawSignature) {
+		r.Covered = append(plainCovered(foraRPC...), memberCovered("sig2"))
+	})
+	opts := helpers.SignOptions{Created: tCreated, Expires: tExpires, SignatureAgent: tBroker}
+	if err := helpers.AppendSignature(context.Background(), req, body, broker.signer, opts); err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(req.Header.Get("Signature-Input"), ", sig3=") {
+		t.Errorf("appended label is not sig3: %s", req.Header.Get("Signature-Input"))
+	}
+	opts.Label = "sig1"
+	if err := helpers.AppendSignature(context.Background(), req, body, broker.signer, opts); !errors.Is(err, helpers.ErrSignatureLabel) {
+		t.Errorf("a colliding label: %v, want ErrSignatureLabel", err)
+	}
+}
+
+// corruptFirstMember flips a character in the first dictionary member's base64
+// payload of a Signature header value.
+func corruptFirstMember(sig string) string {
+	b := []byte(sig)
+	for i := 0; i < len(b); i++ {
+		if b[i] == ':' && i+1 < len(b) {
+			if b[i+1] == 'A' {
+				b[i+1] = 'B'
+			} else {
+				b[i+1] = 'A'
+			}
+			break
+		}
+	}
+	return string(b)
+}
diff --git a/sdk/go/helpers/nonce_test.go b/sdk/go/helpers/nonce_test.go
index f7cf798a..acc515d6 100644
--- a/sdk/go/helpers/nonce_test.go
+++ b/sdk/go/helpers/nonce_test.go
@@ -29,7 +29,7 @@ func TestSignHelpers_RejectNonceOutsideBase64url(t *testing.T) {
 		for _, nonce := range []string{`abc";expires=1`, `a\b`, "a b", "abc=", "a+b/c", "é"} {
 			t.Run(name+"/"+nonce, func(t *testing.T) {
 				req, _ := http.NewRequest(http.MethodPost, "https://broker.example/x", nil)
-				err := fn(context.Background(), req, nil, signer, helpers.SignOptions{Created: 1, Expires: 2, Nonce: nonce})
+				err := fn(context.Background(), req, nil, signer, helpers.SignOptions{SignatureAgent: tAgent, Created: 1, Expires: 2, Nonce: nonce})
 				if !errors.Is(err, helpers.ErrInvalidNonce) {
 					t.Fatalf("err = %v, want ErrInvalidNonce", err)
 				}
@@ -40,7 +40,7 @@ func TestSignHelpers_RejectNonceOutsideBase64url(t *testing.T) {
 		}
 		t.Run(name+"/valid", func(t *testing.T) {
 			req, _ := http.NewRequest(http.MethodPost, "https://broker.example/x", nil)
-			if err := fn(context.Background(), req, nil, signer, helpers.SignOptions{Created: 1, Expires: 2, Nonce: "AZaz09-_"}); err != nil {
+			if err := fn(context.Background(), req, nil, signer, helpers.SignOptions{SignatureAgent: tAgent, Created: 1, Expires: 2, Nonce: "AZaz09-_"}); err != nil {
 				t.Fatalf("valid nonce refused: %v", err)
 			}
 		})
diff --git a/sdk/go/helpers/pop.go b/sdk/go/helpers/pop.go
index b06c53e0..9d2193ce 100644
--- a/sdk/go/helpers/pop.go
+++ b/sdk/go/helpers/pop.go
@@ -14,15 +14,20 @@ import (
 //
 // When a signed URL carries an agent_id — the RFC 7638 thumbprint of the key
 // that signed the offer acceptance — a code-capable edge requires the fetcher to
-// prove possession of that key, fully offline. The proof is two headers on the
-// GET: the raw public key in X-FORA-Agent-Key, and an RFC 9421 signature over
-// @method + @target-uri. The edge then enforces a three-way identity:
+// prove possession of that key, fully offline. The proof is a full Web Bot Auth
+// signature over the GET: the WG-00 base (a dictionary Signature-Agent member
+// naming the agent's directory, covered as "signature-agent";key="sig1", the
+// created, expires, keyid, alg, nonce and tag parameters) plus @method and
+// @target-uri, and the raw public key in X-FORA-Agent-Key. The edge verifies
+// offline with the presented key and enforces a three-way identity:
 //
 //	agent_id (URL) == keyid (Signature-Input) == thumbprint(presented key)
 //
 // The last equality is the one that cannot be dropped. Verifying the signature
 // against the presented key alone proves nothing — any actor could present their
-// own key plus a valid self-signature.
+// own key plus a valid self-signature. A generic WBA verifier ignores
+// X-FORA-Agent-Key, resolves the same key from the directory the Signature-Agent
+// member names, and accepts the same signature.
 //
 // This is the SIGN face. The verify face ships in sdk/ts and sdk/python (the
 // edge runs there); Go is the byte oracle both are pinned to, through
@@ -34,10 +39,9 @@ import (
 // URL's agent_id, so a fetcher cannot present one key while naming another.
 const AgentKeyHeader = "X-FORA-Agent-Key"
 
-// popLabel is the only signature label this profile emits. Unlike the FORA
-// request profile there is no forwarding chain here — a delivery fetch is a
-// single hop to the edge — so sigN>1 never arises and the label is fixed rather
-// than computed.
+// popLabel is the only signature label this profile emits, and the key of the
+// agent's Signature-Agent member. A delivery fetch is a single hop to the edge,
+// so a second signature never arises and the label is fixed rather than computed.
 const popLabel = "sig1"
 
 // ErrMissingTargetURI signals a proof requested without the URL it is meant to
@@ -63,7 +67,7 @@ var ErrInvalidPoPInput = errors.New("helpers: proof input is not usable in a sig
 func isControlByte(r rune) bool { return r < 0x20 || r == 0x7f }
 
 // PoPOptions carries what a delivery-URL proof of possession needs beyond the
-// key material. Only URL, Created and Expires are required.
+// key material. URL, SignatureAgent, Created and Expires are required.
 type PoPOptions struct {
 	// URL is the signed delivery URL, used VERBATIM as @target-uri — the exact
 	// bytes the Exchange minted, query parameters and all.
@@ -87,9 +91,18 @@ type PoPOptions struct {
 	// fails closed.
 	Created int64
 	// Expires is the unix-seconds cutoff after which the proof is stale. Keep it
-	// short: the covered set is only method and URL, so within this window the
-	// proof is replayable by anyone who observes the request.
+	// short: the covered set is only method, URL and the agent's directory, so
+	// within this window the proof is replayable by anyone who observes the
+	// request. The window must be positive and at most MaxSignatureLifetime.
 	Expires int64
+	// SignatureAgent is the https origin of the agent's key directory, the one
+	// that publishes the presented key. It is written as the Signature-Agent
+	// member sig1="<origin>" and covered, so a generic WBA verifier can resolve
+	// the key there.
+	SignatureAgent string
+	// Nonce is the RFC 9421 nonce parameter, base64url. The helper reads no RNG:
+	// the signing transports pass 64 fresh random bytes. Empty emits no nonce.
+	Nonce string
 	// Method is the HTTP method being signed. Empty means GET. A signed URL is
 	// read-only in practice, but @method is covered precisely so a proof made for
 	// a GET cannot be lifted onto a write.
@@ -97,13 +110,16 @@ type PoPOptions struct {
 }
 
 // AgentBinding is the proof a fetcher attaches to a bound delivery request: the
-// three header values, ready to apply. It is returned as values rather than
+// four header values, ready to apply. It is returned as values rather than
 // written onto a request so a caller can sign before it has built one, so this
 // tier stays free of any dialing surface, and so the emitted bytes can be
 // asserted directly against the shared cross-language vectors.
 type AgentBinding struct {
 	// AgentKey is the X-FORA-Agent-Key value: base64url, no padding.
 	AgentKey string
+	// SignatureAgent is the Signature-Agent value: the one-member dictionary
+	// sig1="<origin>".
+	SignatureAgent string
 	// SignatureInput is the full Signature-Input value, label included.
 	SignatureInput string
 	// Signature is the full Signature value, label included. The byte string
@@ -113,16 +129,17 @@ type AgentBinding struct {
 	Signature string
 }
 
-// Apply writes the binding's three headers onto h.
+// Apply writes the binding's four headers onto h.
 func (b AgentBinding) Apply(h http.Header) {
 	h.Set(AgentKeyHeader, b.AgentKey)
+	h.Set(SignatureAgentHeader, b.SignatureAgent)
 	h.Set("Signature-Input", b.SignatureInput)
 	h.Set("Signature", b.Signature)
 }
 
 // popSignatureBase builds the RFC 9421 signature base for the agent-binding
-// profile: the two covered components followed by the parameters line, joined
-// with newlines and with no trailing newline.
+// profile: @method, @target-uri and the agent's Signature-Agent member, followed
+// by the parameters line, joined with newlines and with no trailing newline.
 //
 // It takes raw strings rather than a request value for the reason PoPOptions.URL
 // documents — the verbatim URL is the contract — and because the FORA base
@@ -135,35 +152,36 @@ func (b AgentBinding) Apply(h http.Header) {
 // rawParams is taken as given rather than rebuilt: on the verifying side it
 // arrives verbatim in the Signature-Input header, so treating it as an opaque
 // string here is what keeps the two faces symmetric.
-func popSignatureBase(method, rawURL, rawParams string) string {
+func popSignatureBase(method, rawURL, origin, rawParams string) string {
 	return strings.Join([]string{
 		`"@method": ` + strings.ToUpper(method),
 		`"@target-uri": ` + rawURL,
+		`"signature-agent";key="` + popLabel + `": "` + origin + `"`,
 		`"@signature-params": ` + rawParams,
 	}, "\n")
 }
 
 // popSignatureParams renders the @signature-params value for this profile.
 //
-// The parameter ORDER is part of the wire contract, not a formatting choice: the
-// base is signed over this exact string and the verifier reconstructs it from the
-// header as received. keyid, alg, created, expires — matching the TypeScript and
-// Python faces. A generic RFC 9421 emitter tends to produce
-// created;expires;alg;keyid instead, and that mismatch is the whole reason this
-// profile builds its own base instead of routing through SignRequest.
-func popSignatureParams(keyID string, created, expires int64) string {
-	return fmt.Sprintf(
-		`("@method" "@target-uri");keyid=%q;alg=%q;created=%d;expires=%d`,
-		keyID, AlgEd25519, created, expires,
-	)
+// The parameter order is the one every FORA signature uses — created, expires,
+// keyid, alg, nonce, tag — so the three SDKs emit identical bytes. A verifier
+// rebuilds the base from the header as received, so the order is the signer's
+// choice; the profile builds its own base, rather than routing through
+// SignRequest, because @target-uri here is the verbatim URL.
+func popSignatureParams(keyID, nonce string, created, expires int64) string {
+	p := sigParams{
+		Covered: []CoveredComponent{{Name: "@method"}, {Name: "@target-uri"}, signatureAgentComponent(popLabel)},
+		KeyID:   keyID, Alg: AlgEd25519, Created: created, Expires: expires, Nonce: nonce, Tag: WBATag,
+	}
+	return signatureInputInner(p)
 }
 
 // SignAgentBinding produces the proof of possession a fetcher presents when it
-// retrieves a delivery URL bound to an agent key. The covered set is exactly
-// @method and @target-uri: a GET carries no body to digest, and the signed URL is
-// itself the credential, already covered by @target-uri, so there is no
-// Authorization header worth binding. That is why SignRequest cannot serve this
-// profile — it enforces the five-component FORA set.
+// retrieves a delivery URL bound to an agent key. The covered set is @method,
+// @target-uri and the agent's Signature-Agent member: a GET carries no body to
+// digest, and the signed URL is itself the credential, already covered by
+// @target-uri, so there is no Authorization header worth binding. That is why
+// SignRequest cannot serve this profile — it signs the FORA RPC set.
 //
 // The key arrives as a Signer plus the public half rather than as a raw private
 // key: custody stays with the application (a KMS or HSM signer never exposes its
@@ -178,13 +196,14 @@ func SignAgentBinding(ctx context.Context, signer Signer, pub ed25519.PublicKey,
 	if method == "" {
 		method = http.MethodGet
 	}
-	params := popSignatureParams(keyID, opts.Created, opts.Expires)
-	raw, err := signer.Sign(ctx, []byte(popSignatureBase(method, opts.URL, params)))
+	params := popSignatureParams(keyID, opts.Nonce, opts.Created, opts.Expires)
+	raw, err := signer.Sign(ctx, []byte(popSignatureBase(method, opts.URL, opts.SignatureAgent, params)))
 	if err != nil {
 		return AgentBinding{}, fmt.Errorf("helpers: sign agent binding: %w", err)
 	}
 	return AgentBinding{
 		AgentKey:       base64.RawURLEncoding.EncodeToString(pub),
+		SignatureAgent: signatureAgentMember(popLabel, opts.SignatureAgent),
 		SignatureInput: popLabel + "=" + params,
 		Signature:      popLabel + "=:" + base64.StdEncoding.EncodeToString(raw) + ":",
 	}, nil
@@ -227,6 +246,18 @@ func validateAgentBinding(signer Signer, pub ed25519.PublicKey, opts PoPOptions)
 	if opts.Expires <= 0 {
 		return "", ErrMissingExpires
 	}
+	if life := opts.Expires - opts.Created; life <= 0 || life > int64(MaxSignatureLifetime.Seconds()) {
+		return "", fmt.Errorf("%w: created=%d expires=%d", ErrSignatureLifetime, opts.Created, opts.Expires)
+	}
+	if opts.SignatureAgent == "" {
+		return "", ErrSignatureAgentRequired
+	}
+	if err := CheckHTTPSOrigin(opts.SignatureAgent); err != nil {
+		return "", err
+	}
+	if !validNonce(opts.Nonce) {
+		return "", ErrInvalidNonce
+	}
 	if signer.Algorithm() != AlgEd25519 {
 		return "", fmt.Errorf("%w: agent binding requires %q, signer offers %q",
 			ErrUnsupportedAlgorithm, AlgEd25519, signer.Algorithm())
diff --git a/sdk/go/helpers/pop_base_internal_test.go b/sdk/go/helpers/pop_base_internal_test.go
index bd57c1eb..a61a87d3 100644
--- a/sdk/go/helpers/pop_base_internal_test.go
+++ b/sdk/go/helpers/pop_base_internal_test.go
@@ -20,21 +20,25 @@ import (
 // popSignatureBase takes the verbatim string, so anyone tempted to "simplify" it
 // back onto the request type fails here with the reason attached.
 
-// foraBaseFor renders the FORA base builder's view of the same two covered
-// components, so the two builders can be compared directly.
+// foraBaseFor renders the FORA base builder's view of the same covered set
+// (@method, @target-uri and the agent's Signature-Agent member), so the two
+// builders can be compared directly.
 func foraBaseFor(t *testing.T, method, rawURL, keyID string, created, expires int64) string {
 	t.Helper()
 	req, err := http.NewRequest(method, rawURL, nil)
 	if err != nil {
 		t.Fatalf("build request for %q: %v", rawURL, err)
 	}
+	req.Header.Set(SignatureAgentHeader, signatureAgentMember(popLabel, baseTestAgent))
 	base, err := buildSignatureBase(req, sigParams{
 		Label:   popLabel,
-		Covered: plainComponents("@method", "@target-uri"),
+		Covered: []CoveredComponent{{Name: "@method"}, {Name: "@target-uri"}, signatureAgentComponent(popLabel)},
 		KeyID:   keyID,
 		Alg:     AlgEd25519,
 		Created: created,
 		Expires: expires,
+		Nonce:   baseTestNonce,
+		Tag:     WBATag,
 	})
 	if err != nil {
 		t.Fatalf("build fora signature base for %q: %v", rawURL, err)
@@ -45,12 +49,14 @@ func foraBaseFor(t *testing.T, method, rawURL, keyID string, created, expires in
 const (
 	baseTestKeyID   = "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k"
 	baseTestCreated = int64(1_700_000_000)
-	baseTestExpires = int64(1_700_000_600)
+	baseTestExpires = int64(1_700_000_300)
+	baseTestAgent   = "https://agent.example"
+	baseTestNonce   = "AAECAwQFBgcICQoLDA0ODw"
 )
 
 func popBaseFor(rawURL string) string {
-	return popSignatureBase(http.MethodGet, rawURL,
-		popSignatureParams(baseTestKeyID, baseTestCreated, baseTestExpires))
+	return popSignatureBase(http.MethodGet, rawURL, baseTestAgent,
+		popSignatureParams(baseTestKeyID, baseTestNonce, baseTestCreated, baseTestExpires))
 }
 
 // Where the two builders agree, and it is a wider set than one might assume: a
diff --git a/sdk/go/helpers/pop_test.go b/sdk/go/helpers/pop_test.go
index 9cfe305c..1ab5d26a 100644
--- a/sdk/go/helpers/pop_test.go
+++ b/sdk/go/helpers/pop_test.go
@@ -16,8 +16,9 @@ import (
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 )
 
-// The agent-binding sign face. The positive assertion is a replay of the shared
-// cross-language corpus: pop-vectors.json stores the seed that produced each
+// The agent-binding sign face: a Web Bot Auth signature plus @method and
+// @target-uri. The positive assertion is a replay of the shared cross-language
+// corpus: pop-vectors.json stores the seed that produced each
 // stored signature, so re-signing the same inputs must reproduce the stored
 // header bytes exactly (Ed25519 is deterministic). Python replays the same file
 // against its own signer, which is what makes the three faces one contract.
@@ -31,6 +32,9 @@ type popVector struct {
 	AgentID            string `json:"agent_id"`
 	PresentedKeyB64URL string `json:"presented_key_b64url"`
 	SignerSeedHex      string `json:"signer_seed_hex"`
+	AgentDirectory     string `json:"agent_directory"`
+	Nonce              string `json:"nonce"`
+	SignatureAgent     string `json:"signature_agent"`
 	SignatureInput     string `json:"signature_input"`
 	Signature          string `json:"signature"`
 	ExpectedValid      bool   `json:"expected_valid"`
@@ -52,11 +56,11 @@ func loadPopVectors(t *testing.T) []popVector {
 	return vectors
 }
 
-// validPopVector returns the one vector whose stored proof is expected to verify.
+// validPopVector returns the vector the shipped signer produced with a nonce.
 func validPopVector(t *testing.T) popVector {
 	t.Helper()
 	for _, v := range loadPopVectors(t) {
-		if v.ExpectedValid {
+		if v.Name == "valid" {
 			return v
 		}
 	}
@@ -64,6 +68,16 @@ func validPopVector(t *testing.T) popVector {
 	return popVector{}
 }
 
+// popOptions are the signer inputs that reproduce v.
+func popOptions(t *testing.T, v popVector) helpers.PoPOptions {
+	t.Helper()
+	created, expires := parseWindow(t, v.SignatureInput)
+	return helpers.PoPOptions{
+		URL: v.URL, KeyID: v.AgentID, Created: created, Expires: expires, Method: v.Method,
+		SignatureAgent: v.AgentDirectory, Nonce: v.Nonce,
+	}
+}
+
 // signerFor rebuilds the keypair a vector was produced with.
 func signerFor(t *testing.T, seedHex, keyID string) (helpers.Signer, ed25519.PublicKey) {
 	t.Helper()
@@ -114,25 +128,33 @@ func mustAtoi(t *testing.T, s string) int64 {
 	return n
 }
 
+// Every vector the shipped signer can produce — the valid ones, made with the
+// agent's own key and an https origin — is reproduced byte for byte.
 func TestSignAgentBinding_ReproducesSharedVector(t *testing.T) {
-	v := validPopVector(t)
-	signer, pub := signerFor(t, v.SignerSeedHex, v.AgentID)
-	created, expires := parseWindow(t, v.SignatureInput)
-
-	got, err := helpers.SignAgentBinding(context.Background(), signer, pub, helpers.PoPOptions{
-		URL: v.URL, KeyID: v.AgentID, Created: created, Expires: expires, Method: v.Method,
-	})
-	if err != nil {
-		t.Fatalf("sign agent binding: %v", err)
-	}
-	if got.SignatureInput != v.SignatureInput {
-		t.Errorf("Signature-Input\n got %q\nwant %q", got.SignatureInput, v.SignatureInput)
-	}
-	if got.Signature != v.Signature {
-		t.Errorf("Signature\n got %q\nwant %q", got.Signature, v.Signature)
-	}
-	if got.AgentKey != v.PresentedKeyB64URL {
-		t.Errorf("X-FORA-Agent-Key got %q, want %q", got.AgentKey, v.PresentedKeyB64URL)
+	for _, name := range []string{"valid", "valid_no_nonce"} {
+		var v popVector
+		for _, c := range loadPopVectors(t) {
+			if c.Name == name {
+				v = c
+			}
+		}
+		signer, pub := signerFor(t, v.SignerSeedHex, v.AgentID)
+		got, err := helpers.SignAgentBinding(context.Background(), signer, pub, popOptions(t, v))
+		if err != nil {
+			t.Fatalf("%s: sign agent binding: %v", name, err)
+		}
+		if got.SignatureInput != v.SignatureInput {
+			t.Errorf("%s Signature-Input\n got %q\nwant %q", name, got.SignatureInput, v.SignatureInput)
+		}
+		if got.Signature != v.Signature {
+			t.Errorf("%s Signature\n got %q\nwant %q", name, got.Signature, v.Signature)
+		}
+		if got.SignatureAgent != v.SignatureAgent {
+			t.Errorf("%s Signature-Agent got %q, want %q", name, got.SignatureAgent, v.SignatureAgent)
+		}
+		if got.AgentKey != v.PresentedKeyB64URL {
+			t.Errorf("%s X-FORA-Agent-Key got %q, want %q", name, got.AgentKey, v.PresentedKeyB64URL)
+		}
 	}
 }
 
@@ -142,11 +164,8 @@ func TestSignAgentBinding_ReproducesSharedVector(t *testing.T) {
 func TestSignAgentBinding_EncodingAsymmetry(t *testing.T) {
 	v := validPopVector(t)
 	signer, pub := signerFor(t, v.SignerSeedHex, v.AgentID)
-	created, expires := parseWindow(t, v.SignatureInput)
 
-	got, err := helpers.SignAgentBinding(context.Background(), signer, pub, helpers.PoPOptions{
-		URL: v.URL, KeyID: v.AgentID, Created: created, Expires: expires,
-	})
+	got, err := helpers.SignAgentBinding(context.Background(), signer, pub, popOptions(t, v))
 	if err != nil {
 		t.Fatalf("sign agent binding: %v", err)
 	}
@@ -162,30 +181,27 @@ func TestSignAgentBinding_EncodingAsymmetry(t *testing.T) {
 	}
 }
 
-// The covered set is exactly the two components. content-digest and authorization
-// are absent by design: a GET has no body, and the signed URL is itself the
-// credential and is already covered by @target-uri.
+// The covered set is @method, @target-uri and the agent's Signature-Agent member.
+// content-digest and authorization are absent by design: a GET has no body, and
+// the signed URL is itself the credential and is already covered by @target-uri.
 func TestSignAgentBinding_CoversExactlyMethodAndTargetURI(t *testing.T) {
 	v := validPopVector(t)
 	signer, pub := signerFor(t, v.SignerSeedHex, v.AgentID)
-	created, expires := parseWindow(t, v.SignatureInput)
 
-	got, err := helpers.SignAgentBinding(context.Background(), signer, pub, helpers.PoPOptions{
-		URL: v.URL, KeyID: v.AgentID, Created: created, Expires: expires,
-	})
+	got, err := helpers.SignAgentBinding(context.Background(), signer, pub, popOptions(t, v))
 	if err != nil {
 		t.Fatalf("sign agent binding: %v", err)
 	}
-	if !strings.HasPrefix(got.SignatureInput, `sig1=("@method" "@target-uri");`) {
-		t.Errorf("covered set is not the agent-binding pair: %q", got.SignatureInput)
+	if !strings.HasPrefix(got.SignatureInput, `sig1=("@method" "@target-uri" "signature-agent";key="sig1");`) {
+		t.Errorf("covered set is not the agent-binding set: %q", got.SignatureInput)
 	}
-	for _, banned := range []string{"content-digest", "authorization", "signature-agent"} {
+	for _, banned := range []string{"content-digest", "authorization"} {
 		if strings.Contains(got.SignatureInput, banned) {
 			t.Errorf("covered set carries %q, which this profile must not bind: %q", banned, got.SignatureInput)
 		}
 	}
-	// keyid, alg, created, expires — the order the verifiers reconstruct from.
-	wantOrder := []string{";keyid=", ";alg=", ";created=", ";expires="}
+	// created, expires, keyid, alg, nonce, tag — the order every FORA signer emits.
+	wantOrder := []string{";created=", ";expires=", ";keyid=", ";alg=", ";nonce=", `;tag="web-bot-auth"`}
 	at := 0
 	for _, token := range wantOrder {
 		idx := strings.Index(got.SignatureInput[at:], token)
@@ -196,8 +212,8 @@ func TestSignAgentBinding_CoversExactlyMethodAndTargetURI(t *testing.T) {
 	}
 }
 
-func TestAgentBinding_ApplyWritesTheThreeHeaders(t *testing.T) {
-	binding := helpers.AgentBinding{AgentKey: "key", SignatureInput: "sig1=()", Signature: "sig1=::"}
+func TestAgentBinding_ApplyWritesTheFourHeaders(t *testing.T) {
+	binding := helpers.AgentBinding{AgentKey: "key", SignatureAgent: `sig1="https://a.example"`, SignatureInput: "sig1=()", Signature: "sig1=::"}
 	h := http.Header{}
 	binding.Apply(h)
 
@@ -210,8 +226,11 @@ func TestAgentBinding_ApplyWritesTheThreeHeaders(t *testing.T) {
 	if got := h.Get("Signature"); got != "sig1=::" {
 		t.Errorf("Signature = %q", got)
 	}
-	if len(h) != 3 {
-		t.Errorf("Apply wrote %d headers, want exactly 3: %v", len(h), h)
+	if got := h.Get(helpers.SignatureAgentHeader); got != `sig1="https://a.example"` {
+		t.Errorf("Signature-Agent = %q", got)
+	}
+	if len(h) != 4 {
+		t.Errorf("Apply wrote %d headers, want exactly 4: %v", len(h), h)
 	}
 }
 
@@ -221,7 +240,7 @@ func TestSignAgentBinding_RefusesBadPreconditions(t *testing.T) {
 	v := validPopVector(t)
 	signer, pub := signerFor(t, v.SignerSeedHex, v.AgentID)
 	created, expires := parseWindow(t, v.SignatureInput)
-	ok := helpers.PoPOptions{URL: v.URL, KeyID: v.AgentID, Created: created, Expires: expires}
+	ok := popOptions(t, v)
 
 	// A second keypair whose thumbprint is NOT the vector's agent_id.
 	otherSigner, otherPub := signerFor(t, strings.Repeat("44", ed25519.SeedSize), v.AgentID)
@@ -238,6 +257,10 @@ func TestSignAgentBinding_RefusesBadPreconditions(t *testing.T) {
 		{"empty target uri", signer, pub, withURL(ok, ""), helpers.ErrMissingTargetURI},
 		{"missing created", signer, pub, withWindow(ok, 0, expires), helpers.ErrMissingCreated},
 		{"missing expires", signer, pub, withWindow(ok, created, 0), helpers.ErrMissingExpires},
+		{"six-minute window", signer, pub, withWindow(ok, created, created+360), helpers.ErrSignatureLifetime},
+		{"no Signature-Agent", signer, pub, withAgent(ok, ""), helpers.ErrSignatureAgentRequired},
+		{"plaintext origin", signer, pub, withAgent(ok, "http://agent.example"), helpers.ErrSignatureAgentNotOrigin},
+		{"nonce outside base64url", signer, pub, withNonce(ok, "a+b/"), helpers.ErrInvalidNonce},
 		{"keyid is not the presented key's thumbprint", otherSigner, otherPub, ok, helpers.ErrKeyIDMismatch},
 		// Both values are written verbatim into a line-delimited signature base,
 		// so a control byte would add or split a component line and the signed
@@ -267,11 +290,10 @@ func TestSignAgentBinding_RefusesBadPreconditions(t *testing.T) {
 func TestSignAgentBinding_KeyIDDefaultsToTheSigner(t *testing.T) {
 	v := validPopVector(t)
 	signer, pub := signerFor(t, v.SignerSeedHex, v.AgentID)
-	created, expires := parseWindow(t, v.SignatureInput)
+	opts := popOptions(t, v)
+	opts.KeyID = ""
 
-	got, err := helpers.SignAgentBinding(context.Background(), signer, pub, helpers.PoPOptions{
-		URL: v.URL, Created: created, Expires: expires,
-	})
+	got, err := helpers.SignAgentBinding(context.Background(), signer, pub, opts)
 	if err != nil {
 		t.Fatalf("sign agent binding: %v", err)
 	}
@@ -294,3 +316,13 @@ func withMethod(o helpers.PoPOptions, method string) helpers.PoPOptions {
 	o.Method = method
 	return o
 }
+
+func withAgent(o helpers.PoPOptions, origin string) helpers.PoPOptions {
+	o.SignatureAgent = origin
+	return o
+}
+
+func withNonce(o helpers.PoPOptions, nonce string) helpers.PoPOptions {
+	o.Nonce = nonce
+	return o
+}
diff --git a/sdk/go/helpers/sigbase.go b/sdk/go/helpers/sigbase.go
index ec8aab85..777facdc 100644
--- a/sdk/go/helpers/sigbase.go
+++ b/sdk/go/helpers/sigbase.go
@@ -7,6 +7,8 @@ import (
 	"fmt"
 	"net/http"
 	"strings"
+
+	"github.com/dunglas/httpsfv"
 )
 
 // RFC 9421 (HTTP Message Signatures) signature-base construction, shared by the
@@ -15,23 +17,30 @@ import (
 // sign→verify round-trip and what keeps this SDK byte-identical with the
 // service-internal implementation it relocates (ADR-020 §8).
 //
-// Coverage is the FORA-required set: @method and @target-uri (bind the verb and
-// destination so a signature cannot be replayed against another path),
-// content-digest (bind the body), and authorization (bind the bearer so a token
-// cannot be swapped under a signed envelope). x-entitlement-token is
-// bound additionally whenever it is present.
+// Coverage is the Web Bot Auth base plus the FORA RPC set: @method and
+// @target-uri (bind the verb and destination so a signature cannot be replayed
+// against another path), content-digest (bind the body), authorization (bind the
+// bearer so a token cannot be swapped under a signed envelope), and the
+// signature's own Signature-Agent member, "signature-agent";key="<label>" (bind
+// the key directory the keyid is resolved in). x-entitlement-token is bound
+// additionally whenever it is present.
 
-// ComponentParam is a single RFC 9421 §2.4 parameter on a covered-component
-// identifier — e.g. the key="sig1" on `"signature";key="sig1"`.
+// ComponentParam is a single RFC 9421 §2.1 parameter on a covered-component
+// identifier — e.g. the key="sig1" on `"signature-agent";key="sig1"`.
 type ComponentParam struct {
 	Key string
 	Val string
+	// Flag marks a parameter with no value, a Boolean true, such as the req on
+	// "@authority";req. Val is empty when it is set.
+	Flag bool
 }
 
 // CoveredComponent is one entry in a signature's covered-component set: a
 // component name plus any RFC 9421 component parameters. Plain components
-// (@method, content-digest, …) carry nil Params; a forwarding-chain link carries
-// a single {Key:"key", Val:"sigN-1"} param on Name "signature".
+// (@method, content-digest, …) carry nil Params; a dictionary member selected by
+// RFC 9421 §2.1.2 carries a single {Key:"key", Val:"<member>"} param — the
+// signature's own "signature-agent" member, or an earlier signature's
+// "signature" and "signature-input" members when a forwarder covers them.
 type CoveredComponent struct {
 	Name   string
 	Params []ComponentParam
@@ -68,6 +77,10 @@ func renderComponent(c CoveredComponent) string {
 	b.WriteString(c.Name)
 	b.WriteByte('"')
 	for _, p := range c.Params {
+		if p.Flag {
+			fmt.Fprintf(&b, ";%s", p.Key)
+			continue
+		}
 		fmt.Fprintf(&b, ";%s=%q", p.Key, p.Val)
 	}
 	return b.String()
@@ -82,6 +95,7 @@ type sigParams struct {
 	Created int64
 	Expires int64
 	Nonce   string
+	Tag     string
 	// RawInner is the VERBATIM member value from the wire Signature-Input
 	// (everything after "label="). RFC 9421 §2.5 terminates the signature base
 	// with this exact byte sequence — parameter order and spacing are the
@@ -91,9 +105,11 @@ type sigParams struct {
 	RawInner string
 }
 
-// requiredCoveredComponents is the minimum covered-component set (by name). The
-// entitlement-token header is appended conditionally (see coveredFor).
-var requiredCoveredComponents = []string{"@method", "@target-uri", "content-digest", "authorization", signatureAgentLower}
+// requiredCoveredComponents is the set a FORA RPC signature must cover beyond the
+// Web Bot Auth base, by name. The signature's Signature-Agent member is checked
+// on its own (signatureDirectory), and the entitlement-token header is required
+// conditionally (enforceEntitlementCoverage).
+var requiredCoveredComponents = []string{"@method", "@target-uri", "content-digest", "authorization"}
 
 // entitlementHeader is the canonical entitlement-token header (format-neutral —
 // the token inside is a JWT/opaque capability token; its format is out of scope
@@ -126,34 +142,60 @@ func ContentDigest(body []byte) string {
 	return "sha-256=:" + base64.StdEncoding.EncodeToString(sum[:]) + ":"
 }
 
-// coveredFor returns the covered-component set for a request: the FORA minimum
-// plus the entitlement-token header when it is populated on req. All names are
-// lowercase so the rendered byte output is preserved.
-func coveredFor(req *http.Request) []CoveredComponent {
-	names := append([]string(nil), requiredCoveredComponents...)
+// coveredFor returns the covered-component set for a signature labelled label:
+// the FORA RPC set, the signature's own Signature-Agent member, and the
+// entitlement-token header when it is populated on req. All names are lowercase
+// so the rendered byte output is preserved.
+func coveredFor(req *http.Request, label string) []CoveredComponent {
+	covered := append(plainComponents(requiredCoveredComponents...), signatureAgentComponent(label))
 	// Read the same way the verify gate reads it. A signer resolving this with Get
 	// would leave the header UNCOVERED whenever an empty line precedes a real one,
 	// binding a value it never committed to — the sign-side half of the same shadow.
 	if entitlementValue(req.Header) != "" {
-		names = append(names, entitlementHeaderLower)
+		covered = append(covered, CoveredComponent{Name: entitlementHeaderLower})
 	}
-	return plainComponents(names...)
+	return covered
 }
 
-// foraChainCoveredComponents returns the covered set for an appended signature
-// (sigN, N>1): the base set plus a forwarding-chain link
-// "signature";key="<prevLabel>" so sigN cryptographically commits to its
-// predecessor (RFC 9421 §2.4). When hasPrev is false it degrades to the
-// plain base set — identical to a sig1 covered set.
-func foraChainCoveredComponents(req *http.Request, prevLabel string, hasPrev bool) []CoveredComponent {
-	covered := coveredFor(req)
-	if hasPrev {
-		covered = append(covered, CoveredComponent{
-			Name:   "signature",
-			Params: []ComponentParam{{Key: "key", Val: prevLabel}},
-		})
+// coverEarlier extends own, the covered set of a new signature, to cover the
+// earlier signature prev under WG-00 §5.2.2: every component prev lists that own
+// does not already cover, then "signature";key=<prev> and
+// "signature-input";key=<prev>. A party may do this only when it forwards the
+// request unchanged in every component prev covers.
+func coverEarlier(own []CoveredComponent, prev sigParams) []CoveredComponent {
+	out := append([]CoveredComponent(nil), own...)
+	for _, c := range prev.Covered {
+		if !coversComponent(out, c) {
+			out = append(out, c)
+		}
 	}
-	return covered
+	link := []ComponentParam{{Key: "key", Val: prev.Label}}
+	return append(out,
+		CoveredComponent{Name: "signature", Params: link},
+		CoveredComponent{Name: "signature-input", Params: link})
+}
+
+// coversComponent reports whether set contains c: the same name, compared
+// case-insensitively, and the same parameters in the same order.
+func coversComponent(set []CoveredComponent, c CoveredComponent) bool {
+	for _, s := range set {
+		if sameComponent(s, c) {
+			return true
+		}
+	}
+	return false
+}
+
+func sameComponent(a, b CoveredComponent) bool {
+	if !strings.EqualFold(a.Name, b.Name) || len(a.Params) != len(b.Params) {
+		return false
+	}
+	for i := range a.Params {
+		if a.Params[i] != b.Params[i] {
+			return false
+		}
+	}
+	return true
 }
 
 // buildSignatureBase assembles the RFC 9421 §2.5 signature base over the
@@ -196,30 +238,41 @@ func quotedList(items []CoveredComponent) string {
 	return strings.Join(parts, " ")
 }
 
+// renderParamsTail renders the signature parameters in the order the Web Bot Auth
+// profile's examples use: created, expires, keyid, alg, nonce, tag. The order is
+// the signer's choice (a verifier rebuilds the base from the parameters as
+// received), and the three SDKs make the same one so their signatures agree byte
+// for byte.
 func renderParamsTail(p sigParams) string {
 	var b strings.Builder
-	if p.KeyID != "" {
-		fmt.Fprintf(&b, ";keyid=%q", p.KeyID)
-	}
-	if p.Alg != "" {
-		fmt.Fprintf(&b, ";alg=%q", p.Alg)
-	}
 	if p.Created != 0 {
 		fmt.Fprintf(&b, ";created=%d", p.Created)
 	}
 	if p.Expires != 0 {
 		fmt.Fprintf(&b, ";expires=%d", p.Expires)
 	}
+	if p.KeyID != "" {
+		fmt.Fprintf(&b, ";keyid=%q", p.KeyID)
+	}
+	if p.Alg != "" {
+		fmt.Fprintf(&b, ";alg=%q", p.Alg)
+	}
 	if p.Nonce != "" {
 		fmt.Fprintf(&b, ";nonce=\"%s\"", p.Nonce)
 	}
+	if p.Tag != "" {
+		fmt.Fprintf(&b, ";tag=%q", p.Tag)
+	}
 	return b.String()
 }
 
 // componentValue yields the canonicalized value for a covered component:
-// @method, @path, @authority, @target-uri, the RFC 9421 §2.4 "signature";key=…
-// forwarding-chain link, or any literal request header.
+// @method, @path, @authority, @target-uri, a dictionary member a "key" parameter
+// selects (RFC 9421 §2.1.2), or any literal request header.
 func componentValue(req *http.Request, c CoveredComponent) (string, error) {
+	if len(c.Params) > 0 {
+		return memberValue(req, c)
+	}
 	switch strings.ToLower(c.Name) {
 	case "@method":
 		return strings.ToUpper(req.Method), nil
@@ -243,8 +296,6 @@ func componentValue(req *http.Request, c CoveredComponent) (string, error) {
 			return "", fmt.Errorf("helpers: request URL unset for @target-uri")
 		}
 		return reconstructTargetURI(req), nil
-	case "signature":
-		return chainLinkValue(req, c)
 	default:
 		// Values (not Get) so an explicitly-set empty header (bound
 		// intentionally) is distinguished from an absent one.
@@ -256,22 +307,35 @@ func componentValue(req *http.Request, c CoveredComponent) (string, error) {
 	}
 }
 
-// chainLinkValue resolves a "signature";key="sigN" component to the canonical
-// RFC 8941 byte-sequence serialization of the referenced Signature dictionary
-// member: :base64(bytes):. It decodes the referenced member to raw bytes and
-// re-encodes canonically (base64.StdEncoding) rather than splicing the raw wire
-// substring, so signer and verifier agree byte-for-byte regardless of incidental
-// whitespace around the member on the wire.
-func chainLinkValue(req *http.Request, c CoveredComponent) (string, error) {
-	key := componentParam(c, "key")
-	if key == "" {
-		return "", fmt.Errorf("%w: signature component missing key param", ErrMalformedSignatureInput)
+// memberValue resolves a header component carrying a "key" parameter to the
+// canonical structured-field serialization of the dictionary member it names
+// (RFC 9421 §2.1.2): the String of a Signature-Agent member with its parameters,
+// the byte sequence of a Signature member, the inner list of a Signature-Input
+// member. Serializing the parsed member, rather than splicing the wire substring,
+// makes signer and verifier agree byte for byte however the member was spaced on
+// the wire. No other component parameter is supported.
+func memberValue(req *http.Request, c CoveredComponent) (string, error) {
+	if strings.HasPrefix(c.Name, "@") || len(c.Params) != 1 || c.Params[0].Key != "key" || c.Params[0].Flag {
+		return "", fmt.Errorf("%w: unsupported component parameters on %q", ErrMalformedSignatureInput, c.Name)
+	}
+	key := c.Params[0].Val
+	values := req.Header.Values(http.CanonicalHeaderKey(c.Name))
+	if len(values) == 0 {
+		return "", fmt.Errorf("helpers: header %q missing from request", c.Name)
+	}
+	dict, err := httpsfv.UnmarshalDictionary(values)
+	if err != nil {
+		return "", fmt.Errorf("%w: %s is not a dictionary: %w", ErrMalformedSignatureInput, c.Name, err)
+	}
+	member, ok := dict.Get(key)
+	if !ok {
+		return "", fmt.Errorf("%w: %s has no member %q", ErrMalformedSignatureInput, c.Name, key)
 	}
-	prevBytes, err := signatureBytesForLabel(req.Header, key)
+	out, err := httpsfv.Marshal(member)
 	if err != nil {
-		return "", fmt.Errorf("helpers: resolve chain link %q: %w", key, err)
+		return "", fmt.Errorf("%w: serialize %s member %q: %w", ErrMalformedSignatureInput, c.Name, key, err)
 	}
-	return ":" + base64.StdEncoding.EncodeToString(prevBytes) + ":", nil
+	return out, nil
 }
 
 // reconstructTargetURI builds an absolute-form target URI from either an
diff --git a/sdk/go/helpers/sign.go b/sdk/go/helpers/sign.go
index 4a59e4d3..bb36bb23 100644
--- a/sdk/go/helpers/sign.go
+++ b/sdk/go/helpers/sign.go
@@ -7,19 +7,18 @@ import (
 	"errors"
 	"fmt"
 	"net/http"
-	"strconv"
 	"strings"
-
-	"github.com/dunglas/httpsfv"
 )
 
 // AlgEd25519 is the RFC 9421 alg value for Ed25519 signatures.
 const AlgEd25519 = "ed25519"
 
-// BrokerKeyIDPrefix is the keyID prefix that marks a broker relay key on the
-// wire (shape "broker.<instance>.<rotation>"). Relay-key loaders stamp it and
-// the multisig classifier uses it to route a signature into the relay slot.
-// Shared so the producing and consuming sides cannot drift.
+// BrokerKeyIDPrefix was the keyID prefix that marked a broker relay key on the
+// wire (shape "broker.<instance>.<rotation>").
+//
+// Deprecated: a keyid is the RFC 7638 thumbprint of the signing key, and every
+// signature's key is resolved in the directory its own Signature-Agent member
+// names, so nothing reads a relay prefix any more.
 const BrokerKeyIDPrefix = "broker."
 
 // Signer performs the raw crypto half of RFC 9421 request signing. The SDK
@@ -71,77 +70,159 @@ func (s *ed25519Signer) Sign(_ context.Context, base []byte) ([]byte, error) {
 	return ed25519.Sign(s.priv, base), nil
 }
 
-// SignOptions tune SignRequest. Created/Expires are injected (L1 reads no clock)
-// as unix-seconds; the verifier enforces the window against its own clock.
+// SignOptions tune SignRequest and AppendSignature. Created/Expires are injected
+// (L1 reads no clock) as unix-seconds; the verifier enforces the window against
+// its own clock. The window must be positive and at most MaxSignatureLifetime,
+// or signing fails with ErrSignatureLifetime.
+//
+// SignatureAgent is the signer's key-directory origin, the ASCII serialization of
+// an https origin such as "https://agent.example". It is required: the signature
+// covers its own Signature-Agent member, <label>="<origin>", which names the
+// directory a verifier resolves the keyid in. A value that is not an https origin
+// fails with ErrSignatureAgentNotOrigin, an empty one with
+// ErrSignatureAgentRequired.
+//
+// Label is the signature's label, which is also the key of its Signature-Agent
+// member. Empty means "sig1" for SignRequest and, for AppendSignature, the first
+// "sigN" no signature or member on the request uses. A label that is not a
+// structured-field key, or one already in use, fails with ErrSignatureLabel.
 //
 // Nonce, when set, is emitted as the RFC 9421 nonce parameter. Ed25519 is
 // deterministic and created/expires have one-second resolution, so two identical
 // requests signed in the same second produce the same signature and the second
 // one is refused as a replay. A fresh nonce per signature makes each signature
 // unique. The helpers read no RNG: a caller that needs unique signatures supplies
-// the nonce (the signing transport does). Empty emits no nonce, byte-identical to
-// a signature made before the parameter existed. A non-empty nonce must use only
-// base64url characters (A-Z a-z 0-9 - _), or signing fails with ErrInvalidNonce.
+// the nonce (the signing transport supplies 64 random bytes). Empty emits no
+// nonce. A non-empty nonce must use only base64url characters (A-Z a-z 0-9 - _),
+// or signing fails with ErrInvalidNonce.
+//
+// CoverPrevious is read by AppendSignature only. It makes the new signature cover
+// the last signature already on the request, if there is one, as WG-00 §5.2.2 permits a party that
+// forwards a request unchanged: every component that signature lists, its
+// Signature member and its Signature-Input member. Leave it false when the
+// request was changed in any component the earlier signature covers. FORA's
+// Broker never sets it: it originates or re-packages every request it sends.
 type SignOptions struct {
-	Created int64
-	Expires int64
-	Nonce   string
+	Created        int64
+	Expires        int64
+	Nonce          string
+	SignatureAgent string
+	Label          string
+	CoverPrevious  bool
 }
 
-// SignRequest signs req with the FORA covered-component set and mutates it in
-// place: it sets Content-Digest over body, binds the Authorization header
-// (even when empty, so a later token injection is detected), builds the RFC
-// 9421 signature base, asks the Signer to sign it, and writes the
-// Signature-Input and Signature headers. body must be the exact bytes that will
-// be transmitted.
+// SignRequest signs req as a FORA RPC under the Web Bot Auth profile and mutates
+// it in place. It sets Content-Digest over body, binds the Authorization header
+// (even when empty, so a later token injection is detected), sets Signature-Agent
+// to the one-member dictionary <label>="<origin>", builds the RFC 9421 signature
+// base over @method, @target-uri, content-digest, authorization and that member
+// (plus x-entitlement-token when the request carries it), asks the Signer to sign
+// it, and writes the Signature-Input and Signature headers, replacing any already
+// there. body must be the exact bytes that will be transmitted.
 func SignRequest(ctx context.Context, req *http.Request, body []byte, signer Signer, opts SignOptions) error {
 	if signer == nil {
 		return fmt.Errorf("helpers: nil signer")
 	}
+	label := opts.Label
+	if label == "" {
+		label = "sig1"
+	}
+	if err := checkSignOptions(opts, label); err != nil {
+		return err
+	}
 	req.Header.Set("Content-Digest", ContentDigest(body))
 	bindAuthorization(req)
-	bindSignatureAgent(req)
-
-	params := sigParams{
-		Label:   "sig1",
-		Covered: coveredFor(req),
-		KeyID:   signer.KeyID(),
-		Alg:     signer.Algorithm(),
-		Created: opts.Created,
-		Expires: opts.Expires,
-		Nonce:   opts.Nonce,
-	}
+	req.Header.Set(SignatureAgentHeader, signatureAgentMember(label, opts.SignatureAgent))
+	params := requestSigParams(req, label, signer, opts)
 	return signWithParams(ctx, req, params, signer, sigWriteSet)
 }
 
-// AppendSignature chains a new signature onto req WITHOUT disturbing any
-// existing one (forwarding chain). It preserves an existing
-// Content-Digest (only setting it when missing), binds Authorization, finds the
-// next label sig(N+1) and predecessor sigN, builds the chain-linked covered set
-// (the FORA base plus "signature";key="sigN" so sig(N+1) commits to its
-// predecessor), asks the Signer to sign, and APPENDS to the Signature-Input /
-// Signature headers. Appending to a request with no existing signatures produces
-// a sig1 byte-for-byte identical to SignRequest — single-sig is the N=1 case.
+// AppendSignature adds a signature to req WITHOUT disturbing any signature
+// already on it. It preserves an existing Content-Digest (only setting it when
+// missing), binds Authorization, appends the new signature's member to the
+// Signature-Agent dictionary, and appends to Signature-Input and Signature. The
+// new signature covers its own request components and its own member, and, only
+// when opts.CoverPrevious is set, the last earlier signature (see SignOptions).
+// Appending to a request with no signature produces the same headers as
+// SignRequest with the same label.
+//
+// A request whose Signature-Agent is not a dictionary, such as an agent's legacy
+// String form, fails with ErrSignatureAgentForm: a String cannot take a second
+// member, and rewriting it would break the earlier signature.
 func AppendSignature(ctx context.Context, req *http.Request, body []byte, signer Signer, opts SignOptions) error {
 	if signer == nil {
 		return fmt.Errorf("helpers: nil signer")
 	}
+	label := opts.Label
+	if label == "" {
+		label = nextFreeLabel(req.Header)
+	}
+	if err := checkSignOptions(opts, label); err != nil {
+		return err
+	}
+	if usedLabels(req.Header)[label] {
+		return fmt.Errorf("%w: %q is already in use on the request", ErrSignatureLabel, label)
+	}
+	if _, err := signatureAgentDictionary(req.Header); err != nil {
+		return err
+	}
+	var prev *sigParams
+	if opts.CoverPrevious && joinedHeader(req.Header, "Signature-Input") != "" {
+		all, _, err := parseAllSignatures(req.Header)
+		if err != nil {
+			return fmt.Errorf("helpers: cover previous signature: %w", err)
+		}
+		prev = &all[len(all)-1]
+	}
 	if req.Header.Get("Content-Digest") == "" {
 		req.Header.Set("Content-Digest", ContentDigest(body))
 	}
 	bindAuthorization(req)
-	bindSignatureAgent(req)
-	prevLabel, hasPrev := findPrevLabel(req.Header)
-	params := sigParams{
-		Label:   findNextLabel(req.Header),
-		Covered: foraChainCoveredComponents(req, prevLabel, hasPrev),
+	member := signatureAgentMember(label, opts.SignatureAgent)
+	if existing := joinedHeader(req.Header, SignatureAgentHeader); existing != "" {
+		member = existing + ", " + member
+	}
+	req.Header.Set(SignatureAgentHeader, member)
+	params := requestSigParams(req, label, signer, opts)
+	if prev != nil {
+		params.Covered = coverEarlier(params.Covered, *prev)
+	}
+	return signWithParams(ctx, req, params, signer, sigWriteAppend)
+}
+
+// checkSignOptions refuses what no conformant signature can carry: a missing or
+// non-origin Signature-Agent, an unusable label, or a window that is not positive
+// or longer than MaxSignatureLifetime.
+func checkSignOptions(opts SignOptions, label string) error {
+	if opts.SignatureAgent == "" {
+		return ErrSignatureAgentRequired
+	}
+	if err := CheckHTTPSOrigin(opts.SignatureAgent); err != nil {
+		return err
+	}
+	if !validLabel(label) {
+		return fmt.Errorf("%w: %q", ErrSignatureLabel, label)
+	}
+	if life := opts.Expires - opts.Created; opts.Created <= 0 || life <= 0 || life > int64(MaxSignatureLifetime.Seconds()) {
+		return fmt.Errorf("%w: created=%d expires=%d", ErrSignatureLifetime, opts.Created, opts.Expires)
+	}
+	return nil
+}
+
+// requestSigParams assembles the parameters of a FORA RPC signature labelled
+// label: the covered set coveredFor gives, the signer's keyid and alg, the window,
+// the nonce and the Web Bot Auth tag.
+func requestSigParams(req *http.Request, label string, signer Signer, opts SignOptions) sigParams {
+	return sigParams{
+		Label:   label,
+		Covered: coveredFor(req, label),
 		KeyID:   signer.KeyID(),
 		Alg:     signer.Algorithm(),
 		Created: opts.Created,
 		Expires: opts.Expires,
 		Nonce:   opts.Nonce,
+		Tag:     WBATag,
 	}
-	return signWithParams(ctx, req, params, signer, sigWriteAppend)
 }
 
 // bindAuthorization ensures the Authorization header is present so the signature
@@ -153,16 +234,6 @@ func bindAuthorization(req *http.Request) {
 	}
 }
 
-// bindSignatureAgent ensures the Signature-Agent header is present so the
-// signature commits to the signer's WBA key-directory URL — empty included: a
-// signer with no directory (the static bootstrap path) binds "" and a later
-// injection cannot piggy-back the same signature.
-func bindSignatureAgent(req *http.Request) {
-	if req.Header.Get(SignatureAgentHeader) == "" {
-		req.Header.Set(SignatureAgentHeader, "")
-	}
-}
-
 // sigWriteMode selects whether signWithParams replaces or appends the emitted
 // Signature-Input / Signature headers.
 type sigWriteMode int
@@ -205,10 +276,10 @@ func signWithParams(ctx context.Context, req *http.Request, params sigParams, si
 	input := params.Label + "=" + signatureInputInner(params)
 	value := fmt.Sprintf("%s=:%s:", params.Label, base64.StdEncoding.EncodeToString(sig))
 	if mode == sigWriteAppend {
-		if existing := req.Header.Get("Signature-Input"); existing != "" {
+		if existing := joinedHeader(req.Header, "Signature-Input"); existing != "" {
 			input = existing + ", " + input
 		}
-		if existing := req.Header.Get("Signature"); existing != "" {
+		if existing := joinedHeader(req.Header, "Signature"); existing != "" {
 			value = existing + ", " + value
 		}
 	}
@@ -217,42 +288,9 @@ func signWithParams(ctx context.Context, req *http.Request, params sigParams, si
 	return nil
 }
 
-// maxSignatureLabelN scans Signature-Input for the highest sigN label and
-// returns N (0 when none). Shared by findNextLabel and findPrevLabel.
-func maxSignatureLabelN(h http.Header) int {
-	inputValues := h.Values("Signature-Input")
-	if len(inputValues) == 0 {
-		return 0
-	}
-	dict, err := httpsfv.UnmarshalDictionary(inputValues)
-	if err != nil {
-		return 0
-	}
-	maxN := 0
-	for _, label := range dict.Names() {
-		if !strings.HasPrefix(label, "sig") {
-			continue
-		}
-		// Atoi rejects trailing junk (e.g. "sig1x"), unlike Sscanf.
-		if num, err := strconv.Atoi(strings.TrimPrefix(label, "sig")); err == nil && num > maxN {
-			maxN = num
-		}
-	}
-	return maxN
-}
-
-// findNextLabel returns the label for the next appended signature: sig(maxN+1),
-// or "sig1" when no signatures exist.
-func findNextLabel(h http.Header) string {
-	return fmt.Sprintf("sig%d", maxSignatureLabelN(h)+1)
-}
-
-// findPrevLabel returns the highest existing sigN label — the predecessor an
-// appended signature must chain to — and whether one exists.
-func findPrevLabel(h http.Header) (string, bool) {
-	maxN := maxSignatureLabelN(h)
-	if maxN == 0 {
-		return "", false
-	}
-	return fmt.Sprintf("sig%d", maxN), true
+// joinedHeader is every field line under name joined with ", " and trimmed, the
+// value RFC 9421 §2.1 reads for a header. Appending to the first line alone would
+// drop the others from the rewritten header.
+func joinedHeader(h http.Header, name string) string {
+	return strings.TrimSpace(strings.Join(h.Values(name), ", "))
 }
diff --git a/sdk/go/helpers/sign_internal_test.go b/sdk/go/helpers/sign_internal_test.go
index 54b798ea..135e6414 100644
--- a/sdk/go/helpers/sign_internal_test.go
+++ b/sdk/go/helpers/sign_internal_test.go
@@ -27,12 +27,13 @@ func newSignedReq(t *testing.T, body []byte, mutate func(*http.Request)) (*http.
 	if mutate != nil {
 		mutate(req)
 	}
-	if err := SignRequest(context.Background(), req, body, signer, SignOptions{Created: 1700000000, Expires: 1700000300}); err != nil {
+	if err := SignRequest(context.Background(), req, body, signer,
+		SignOptions{Created: 1700000000, Expires: 1700000300, SignatureAgent: "https://agent.example"}); err != nil {
 		t.Fatalf("SignRequest: %v", err)
 	}
 	params := sigParams{
-		Label: "sig1", Covered: coveredFor(req), KeyID: "agent.v1",
-		Alg: AlgEd25519, Created: 1700000000, Expires: 1700000300,
+		Label: "sig1", Covered: coveredFor(req, "sig1"), KeyID: "agent.v1",
+		Alg: AlgEd25519, Created: 1700000000, Expires: 1700000300, Tag: WBATag,
 	}
 	return req, pub, params
 }
diff --git a/sdk/go/helpers/signature_agent_base_internal_test.go b/sdk/go/helpers/signature_agent_base_internal_test.go
deleted file mode 100644
index 20bda847..00000000
--- a/sdk/go/helpers/signature_agent_base_internal_test.go
+++ /dev/null
@@ -1,157 +0,0 @@
-package helpers
-
-// The signature base must carry the Signature-Agent header's bytes VERBATIM,
-// quotes included. This is the whole interop property of reading the quoted form:
-// an external conformant signer computes its base over `"https://a.example"` with
-// the quotes, so if this side canonicalized the header any other way the two bases
-// would differ and that signer's signature would not verify here.
-//
-// A round-trip test cannot pin this. Signing and verifying share
-// buildSignatureBase, so a symmetric change — stripping quotes on both sides —
-// keeps every self-signed round trip green while breaking exactly the external
-// interop the unquoting exists to provide. Verified by mutation: adding a
-// quote-strip to componentValue passes the entire helpers suite. These tests
-// assert the base bytes directly, so that mutation fails here.
-
-import (
-	"net/http"
-	"strings"
-	"testing"
-)
-
-// baseLineFor builds the signature base over a single covered header and returns
-// the rendered line for it.
-func baseLineFor(t *testing.T, header, value string) string {
-	t.Helper()
-	req, err := http.NewRequest(http.MethodPost, "https://exchange.example/x", nil)
-	if err != nil {
-		t.Fatal(err)
-	}
-	req.Header.Set(header, value)
-	base, err := buildSignatureBase(req, sigParams{
-		Covered: plainComponents(strings.ToLower(header)),
-		KeyID:   "k", Alg: AlgEd25519, Created: 1700000000, Expires: 1700000300,
-	})
-	if err != nil {
-		t.Fatalf("buildSignatureBase: %v", err)
-	}
-	for _, line := range strings.Split(base, "\n") {
-		if strings.HasPrefix(line, `"`+strings.ToLower(header)+`"`) {
-			return line
-		}
-	}
-	t.Fatalf("no %q line in base:\n%s", header, base)
-	return ""
-}
-
-// TestSignatureBase_quotedSignatureAgentKeepsItsQuotes is the assertion the
-// mutation defeats. The covered value is the header as sent — the SDK unquotes
-// only the value it SURFACES to callers, never the bytes it signs over.
-func TestSignatureBase_quotedSignatureAgentKeepsItsQuotes(t *testing.T) {
-	const wire = `"https://agent.example"`
-	line := baseLineFor(t, SignatureAgentHeader, wire)
-
-	want := `"signature-agent": ` + wire
-	if line != want {
-		t.Errorf("base line = %s\nwant             %s\n\nthe covered value must be the header's bytes verbatim; an external signer computed its base over the quoted form",
-			line, want)
-	}
-	if !strings.Contains(line, `"https://agent.example"`) {
-		t.Error("the quotes were stripped from the signature base — an externally-signed quoted header will no longer verify")
-	}
-}
-
-// TestSignatureBase_bareSignatureAgentUnchanged is the other half: the bare form
-// FORA itself emits must keep producing exactly the base it always did. Together
-// with the test above this pins that the two wire forms produce DIFFERENT bases —
-// which is correct, because they are different bytes, even though both surface
-// the same directory through signatureAgentOf.
-func TestSignatureBase_bareSignatureAgentUnchanged(t *testing.T) {
-	const wire = "https://agent.example"
-	line := baseLineFor(t, SignatureAgentHeader, wire)
-
-	want := `"signature-agent": ` + wire
-	if line != want {
-		t.Errorf("base line = %s\nwant             %s", line, want)
-	}
-}
-
-// TestSignatureAgentOf_readsEveryFieldLine pins that the reader and the signature
-// base see the SAME header. HTTP allows a field to arrive as several lines; the
-// base joins them all, so reading only the first would derive an identity from
-// one value while the signature committed to both. The joined value is not a
-// valid item, so it falls through verbatim — which is the point: both sides then
-// agree on the same string.
-func TestSignatureAgentOf_readsEveryFieldLine(t *testing.T) {
-	req, err := http.NewRequest(http.MethodPost, "https://exchange.example/x", nil)
-	if err != nil {
-		t.Fatal(err)
-	}
-	req.Header.Add(SignatureAgentHeader, `"https://a.example"`)
-	req.Header.Add(SignatureAgentHeader, `"https://b.example"`)
-
-	surfaced := signatureAgentOf(req)
-	covered, err := componentValue(req, CoveredComponent{Name: signatureAgentLower})
-	if err != nil {
-		t.Fatalf("componentValue: %v", err)
-	}
-	if surfaced != covered {
-		t.Errorf("surfaced %q but signed %q — a repeated header must not give the reader and the base different values",
-			surfaced, covered)
-	}
-	if surfaced == "https://a.example" {
-		t.Error("only the first field line was read; the signature covers both")
-	}
-}
-
-// TestSignatureAgentOf_parametersDropped pins the third outcome the accept-or-
-// verbatim pair does not cover, including that it WIDENS what reaches the
-// resolver: the parameterized spelling used to be an unresolvable host and is now
-// a fetchable one. Documented rather than prevented — no parameter is defined for
-// this field, folding one into the URI would produce a host nothing resolves, and
-// a signer could send the bare form directly anyway.
-func TestSignatureAgentOf_parametersDropped(t *testing.T) {
-	for _, tc := range []struct{ wire, want string }{
-		{`"https://a.example";expires=1`, "https://a.example"},
-		{`https://a.example;q=1`, "https://a.example"},
-		{`https://evil.example;x="https://good.example"`, "https://evil.example"},
-	} {
-		req, err := http.NewRequest(http.MethodPost, "https://exchange.example/x", nil)
-		if err != nil {
-			t.Fatal(err)
-		}
-		req.Header.Set(SignatureAgentHeader, tc.wire)
-		if got := signatureAgentOf(req); got != tc.want {
-			t.Errorf("signatureAgentOf(%s) = %q; want %q", tc.wire, got, tc.want)
-		}
-		// The parameters stay in the signed bytes even though the reader drops them.
-		if covered, err := componentValue(req, CoveredComponent{Name: signatureAgentLower}); err != nil {
-			t.Fatalf("componentValue: %v", err)
-		} else if covered != tc.wire {
-			t.Errorf("covered value = %q; want the wire bytes %q", covered, tc.wire)
-		}
-	}
-}
-
-// TestSignatureAgentOf_doesNotDependOnTheBase states the split the two tests above
-// rest on, as an executable claim rather than a comment: for one set of wire bytes
-// the SURFACED value is unquoted while the SIGNED value is not. Reading the header
-// and canonicalizing it are separate concerns, and collapsing them is the mutation.
-func TestSignatureAgentOf_doesNotDependOnTheBase(t *testing.T) {
-	const wire = `"https://agent.example"`
-	req, err := http.NewRequest(http.MethodPost, "https://exchange.example/x", nil)
-	if err != nil {
-		t.Fatal(err)
-	}
-	req.Header.Set(SignatureAgentHeader, wire)
-
-	if surfaced := signatureAgentOf(req); surfaced != "https://agent.example" {
-		t.Errorf("surfaced value = %q; want the directory without quotes", surfaced)
-	}
-	if signed := baseLineFor(t, SignatureAgentHeader, wire); !strings.HasSuffix(signed, wire) {
-		t.Errorf("signed value = %s; want the wire bytes %s", signed, wire)
-	}
-	if got := req.Header.Get(SignatureAgentHeader); got != wire {
-		t.Errorf("header mutated to %q; want %q untouched on the wire", got, wire)
-	}
-}
diff --git a/sdk/go/helpers/signature_agent_forms_test.go b/sdk/go/helpers/signature_agent_forms_test.go
deleted file mode 100644
index 0db2faf4..00000000
--- a/sdk/go/helpers/signature_agent_forms_test.go
+++ /dev/null
@@ -1,207 +0,0 @@
-package helpers_test
-
-// Signature-Agent wire forms. Web Bot Auth defines the header value as an RFC
-// 8941 String, so the conformant form is QUOTED — quoting is not optional in
-// structured fields, a String has exactly one serialization. FORA itself emits
-// the value bare, which is a Token rather than a String.
-//
-// Both forms must yield the same directory URI, on the VerifiedRequest and in the
-// resolver context. Reading the quoted form verbatim is what made a conformant
-// signer unresolvable: the quotes travelled into the directory URI, no host could
-// be parsed out of it, and key resolution failed the request.
-//
-// The spec's sf-dictionary form and its data: URI scheme are deliberately NOT
-// supported; see TestSignatureAgent_dictionaryFormNotUnwrapped.
-
-import (
-	"context"
-	"net/http"
-	"testing"
-
-	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
-)
-
-const wantDirectory = "https://agent.example"
-
-// TestSignatureAgent_formsYieldSameDirectory pins that the quoted and bare forms
-// both verify and both surface the same bare URI. Verification passing is half
-// the assertion: the signature base is built from the header's raw bytes, so a
-// quoted value must be signed and verified WITH its quotes while the value read
-// off the result has them stripped. If those two ever collapsed into one
-// treatment, one of these subtests would fail.
-func TestSignatureAgent_formsYieldSameDirectory(t *testing.T) {
-	for _, tc := range []struct {
-		name   string
-		header string
-	}{
-		{"quoted sf-string (Web Bot Auth conformant)", `"` + wantDirectory + `"`},
-		{"bare token (FORA's own emission)", wantDirectory},
-	} {
-		t.Run(tc.name, func(t *testing.T) {
-			body := []byte(`{"resource_id":"r1"}`)
-			req, pub := signFixture(t, body, func(r *http.Request) {
-				r.Header.Set(helpers.SignatureAgentHeader, tc.header)
-			})
-
-			vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-			if err != nil {
-				t.Fatalf("VerifyRequest with Signature-Agent %s: %v", tc.header, err)
-			}
-			if vr.SignatureAgent != wantDirectory {
-				t.Errorf("SignatureAgent = %q; want %q (header on the wire was %s)",
-					vr.SignatureAgent, wantDirectory, tc.header)
-			}
-			// The wire bytes are untouched: a relay forwards this header verbatim so
-			// the agent's signature still verifies at the next hop.
-			if got := req.Header.Get(helpers.SignatureAgentHeader); got != tc.header {
-				t.Errorf("header mutated to %q; want %q left on the wire", got, tc.header)
-			}
-		})
-	}
-}
-
-// TestSignatureAgent_quotedFormReachesResolver covers the failure that made this
-// a 401 rather than a cosmetic storage-format wart: the resolver fetches the
-// signer's directory from the value threaded into its context. Given the quotes
-// verbatim it can parse no host, reports the key unknown, and the request is
-// rejected.
-func TestSignatureAgent_quotedFormReachesResolver(t *testing.T) {
-	body := []byte(`{"resource_id":"r2"}`)
-	req, spy, captured := signResolvedFixture(t, body, "thumbprint.v1", `"`+wantDirectory+`"`)
-
-	if _, err := helpers.VerifyRequestResolved(
-		context.Background(), req, body, spy, helpers.VerifyOptions{Now: tNow},
-	); err != nil {
-		t.Fatalf("VerifyRequestResolved: %v", err)
-	}
-	if captured() != wantDirectory {
-		t.Errorf("resolver context directory = %q; want %q — a resolver cannot fetch a directory whose URI still carries quotes",
-			captured(), wantDirectory)
-	}
-}
-
-// TestSignatureAgent_dictionaryFormNotUnwrapped pins a deliberate refusal, not an
-// oversight. The current directory draft makes Signature-Agent an sf-dictionary
-// (`agent2="https://…"`), and FORA does not read it: the member value would have
-// to be selected by the covered component's key param, and the same draft admits
-// a data: member that inlines an entire key directory into the header. Key
-// resolution here rests on FETCHING the directory from a location the signer had
-// to control, so an inline directory removes the boundary it depends on.
-//
-// The dictionary form therefore falls through verbatim and is rejected downstream
-// where a directory has to resolve to a real host. The assertion is that no
-// unwrapping happens — a future decision to support the form should break this
-// test and be made deliberately.
-func TestSignatureAgent_dictionaryFormNotUnwrapped(t *testing.T) {
-	const dictForm = `agent2="` + wantDirectory + `"`
-	body := []byte(`{"resource_id":"r3"}`)
-	req, pub := signFixture(t, body, func(r *http.Request) {
-		r.Header.Set(helpers.SignatureAgentHeader, dictForm)
-	})
-
-	vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-	if err != nil {
-		t.Fatalf("VerifyRequest: %v", err)
-	}
-	if vr.SignatureAgent == wantDirectory {
-		t.Fatalf("SignatureAgent = %q: the sf-dictionary form was unwrapped, but FORA does not support it", vr.SignatureAgent)
-	}
-	if vr.SignatureAgent != dictForm {
-		t.Errorf("SignatureAgent = %q; want the value passed through verbatim as %q", vr.SignatureAgent, dictForm)
-	}
-}
-
-// TestSignatureAgent_emptyStaysEmpty guards the static bootstrap path, where the
-// signer binds an empty Signature-Agent so the covered set is uniform. An empty
-// value must not be turned into anything by the structured-field parsing.
-func TestSignatureAgent_emptyStaysEmpty(t *testing.T) {
-	body := []byte(`{"resource_id":"r4"}`)
-	req, pub := signFixture(t, body, nil)
-
-	vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-	if err != nil {
-		t.Fatalf("VerifyRequest: %v", err)
-	}
-	if vr.SignatureAgent != "" {
-		t.Errorf("SignatureAgent = %q; want empty (empty-bind bootstrap path)", vr.SignatureAgent)
-	}
-}
-
-// TestSignatureAgent_edgeShapes pins the parser's contract across the shapes a
-// single example does not reach: the fallback for values no structured-field
-// parser admits, an item carrying parameters, and a string with escapes.
-//
-// The fallback matters because a host that fails structured-field parsing must
-// still reach the caller unchanged rather than becoming empty — values that
-// worked before this parsing existed keep working. The draft permits ignoring a
-// malformed field but does not require it, and every consumer already has to cope
-// with a directory it cannot resolve.
-func TestSignatureAgent_edgeShapes(t *testing.T) {
-	for _, tc := range []struct {
-		name string
-		wire string
-		want string
-	}{
-		{
-			name: "unterminated string falls back verbatim",
-			wire: `"unterminated`,
-			want: `"unterminated`,
-		},
-		{
-			// The case the fallback exists for: no structured-field parser admits a
-			// non-ASCII name, and this one is an ordinary host that resolves.
-			name: "internationalized host falls back verbatim and stays usable",
-			wire: "bücher.example",
-			want: "bücher.example",
-		},
-		{
-			// Also falls back verbatim, but is NOT usable — the resolver refuses it,
-			// because parentheses are not host characters. Recorded next to the case
-			// above so the fallback is not read as a promise that whatever survives
-			// here will resolve: this function types the wire value and stops there.
-			name: "unusable host also falls back verbatim",
-			wire: "agent_(1).example",
-			want: "agent_(1).example",
-		},
-		{
-			// Parameters are not defined for this field. They parse, and the
-			// directory is the item's value — the params are dropped, not appended
-			// to the URI. Pinned because silently folding ";v=1" into the directory
-			// would produce an unresolvable host.
-			name: "parameters on a quoted string are ignored",
-			wire: `"https://agent.example";v=1`,
-			want: "https://agent.example",
-		},
-		{
-			name: "parameters on a bare token are ignored",
-			wire: `https://agent.example;v=1`,
-			want: "https://agent.example",
-		},
-		{
-			// RFC 8941 strings escape \ and ". The parser unescapes; the surfaced
-			// directory is the decoded text.
-			name: "escaped quote inside a string is decoded",
-			wire: `"https://agent.example/\"x"`,
-			want: `https://agent.example/"x`,
-		},
-	} {
-		t.Run(tc.name, func(t *testing.T) {
-			body := []byte(`{"resource_id":"r5"}`)
-			req, pub := signFixture(t, body, func(r *http.Request) {
-				r.Header.Set(helpers.SignatureAgentHeader, tc.wire)
-			})
-
-			vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-			if err != nil {
-				t.Fatalf("VerifyRequest with Signature-Agent %s: %v", tc.wire, err)
-			}
-			if vr.SignatureAgent != tc.want {
-				t.Errorf("SignatureAgent = %q; want %q", vr.SignatureAgent, tc.want)
-			}
-			// Whatever the shape, the wire bytes are never rewritten.
-			if got := req.Header.Get(helpers.SignatureAgentHeader); got != tc.wire {
-				t.Errorf("header mutated to %q; want %q", got, tc.wire)
-			}
-		})
-	}
-}
diff --git a/sdk/go/helpers/signature_agent_required_test.go b/sdk/go/helpers/signature_agent_required_test.go
deleted file mode 100644
index 23fd9ab7..00000000
--- a/sdk/go/helpers/signature_agent_required_test.go
+++ /dev/null
@@ -1,87 +0,0 @@
-package helpers_test
-
-// TDD red tests for the signature-agent covered-component requirement (the app's
-// internal/httpsig has always required it; the SDK gained it with the WBA
-// identity work). Originally red on the pre-fix tree: the verifier ACCEPTED a
-// covered set omitting signature-agent, and SignRequest never bound the header.
-//
-// The negative test hand-rolls its legacy four-component signature because the
-// production sign path now ALWAYS binds and covers signature-agent — the only
-// way such a signature can exist post-fix is an out-of-date or hostile signer,
-// which is exactly what the verifier must reject.
-
-import (
-	"crypto/ed25519"
-	"encoding/base64"
-	"errors"
-	"fmt"
-	"net/http"
-	"strings"
-	"testing"
-
-	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
-)
-
-// legacyFourComponentSignature builds a real Ed25519 RFC 9421 signature whose
-// covered set is the PRE-WBA four components (@method @target-uri content-digest
-// authorization) — no signature-agent. The base replicates the SDK's canonical
-// rendering so the signature is cryptographically valid; only the covered-set
-// policy should reject it.
-func legacyFourComponentSignature(t *testing.T, body []byte) (*http.Request, ed25519.PublicKey) {
-	t.Helper()
-	pub, priv, err := ed25519.GenerateKey(nil)
-	if err != nil {
-		t.Fatal(err)
-	}
-	req, err := http.NewRequest(http.MethodPost, "https://exchange.example/fora.v1.ExchangeService/Execute", strings.NewReader(string(body)))
-	if err != nil {
-		t.Fatal(err)
-	}
-	req.Header.Set("Content-Digest", helpers.ContentDigest(body))
-	req.Header.Set("Authorization", "")
-
-	inner := fmt.Sprintf(`("@method" "@target-uri" "content-digest" "authorization");keyid=%q;alg=%q;created=%d;expires=%d`,
-		"agent.v1", helpers.AlgEd25519, tCreated, tExpires)
-	base := "\"@method\": POST\n" +
-		"\"@target-uri\": https://exchange.example/fora.v1.ExchangeService/Execute\n" +
-		"\"content-digest\": " + req.Header.Get("Content-Digest") + "\n" +
-		"\"authorization\": \n" +
-		"\"@signature-params\": " + inner
-	sig := ed25519.Sign(priv, []byte(base))
-
-	req.Header.Set("Signature-Input", "sig1="+inner)
-	req.Header.Set("Signature", "sig1=:"+base64.StdEncoding.EncodeToString(sig)+":")
-	return req, pub
-}
-
-// TestVerifyRequest_signatureAgentRequired asserts a cryptographically valid
-// signature whose covered set omits signature-agent is rejected with
-// ErrMissingRequiredComponent — never verified through to acceptance.
-func TestVerifyRequest_signatureAgentRequired(t *testing.T) {
-	body := []byte(`{"resource_id":"r1"}`)
-	req, pub := legacyFourComponentSignature(t, body)
-
-	_, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-	if !errors.Is(err, helpers.ErrMissingRequiredComponent) {
-		t.Errorf("VerifyRequest: got err=%v; want errors.Is(err, ErrMissingRequiredComponent) — "+
-			"a signature omitting signature-agent must be rejected", err)
-	}
-}
-
-// TestVerifyRequest_signatureAgentAcceptedWhenPresent is the complementary
-// positive case: a signature that covers signature-agent (bound by the
-// production sign path) is accepted. Guards against over-rejection.
-func TestVerifyRequest_signatureAgentAcceptedWhenPresent(t *testing.T) {
-	body := []byte(`{"resource_id":"r2"}`)
-	req, pub := signFixture(t, body, func(r *http.Request) {
-		r.Header.Set("Signature-Agent", "https://agent.example")
-	})
-	vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-	if err != nil {
-		t.Fatalf("VerifyRequest with Signature-Agent present: got err=%v; want nil "+
-			"(a request covering signature-agent must be accepted)", err)
-	}
-	if vr == nil {
-		t.Fatal("VerifyRequest returned nil VerifiedRequest without error")
-	}
-}
diff --git a/sdk/go/helpers/signature_agent_result_test.go b/sdk/go/helpers/signature_agent_result_test.go
deleted file mode 100644
index 1af02490..00000000
--- a/sdk/go/helpers/signature_agent_result_test.go
+++ /dev/null
@@ -1,98 +0,0 @@
-package helpers_test
-
-// Tests for the VerifiedRequest.SignatureAgent field and the resolver-context
-// threading (WithSignatureAgent / SignatureAgentFromContext): a verified request
-// carries its signed Signature-Agent value on the result, and a KeyResolver can
-// read it from the resolution context during the resolved verify entrypoints.
-
-import (
-	"context"
-	"crypto/ed25519"
-	"net/http"
-	"testing"
-
-	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
-)
-
-// TestVerifyRequest_signatureAgentOnResult pins that a verified request whose
-// covered set includes signature-agent carries the header value on the returned
-// VerifiedRequest.SignatureAgent field.
-func TestVerifyRequest_signatureAgentOnResult(t *testing.T) {
-	body := []byte(`{"resource_id":"r3"}`)
-	// A non-empty value so the assertion distinguishes the header value from the
-	// empty-bind fallback.
-	req, pub := signFixture(t, body, func(r *http.Request) {
-		r.Header.Set("Signature-Agent", "https://agent.example")
-	})
-
-	vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-	if err != nil {
-		t.Fatalf("VerifyRequest: %v", err)
-	}
-	if vr.SignatureAgent != "https://agent.example" {
-		t.Errorf("SignatureAgent = %q; want %q", vr.SignatureAgent, "https://agent.example")
-	}
-}
-
-// TestVerifyMultisig_resolverSeesSignatureAgent pins the resolver-context
-// threading requirement: a KeyResolver called during multisig resolution must be
-// able to read the request's Signature-Agent value from the resolution context
-// via helpers.SignatureAgentFromContext — the platform relay path where the
-// resolver uses the agent's directory to validate the signing key's provenance.
-func TestVerifyMultisig_resolverSeesSignatureAgent(t *testing.T) {
-	body := []byte(`{"resource_id":"r4"}`)
-	req, spyResolver, captured := signResolvedFixture(t, body, "relay.agent.v1", "https://relay.example")
-
-	if _, err := helpers.VerifyMultisigRequestResolved(
-		context.Background(), req, body, spyResolver, helpers.VerifyOptions{Now: tNow},
-	); err != nil {
-		t.Fatalf("VerifyMultisigRequestResolved: %v", err)
-	}
-	if captured() == "" {
-		t.Error("KeyResolver.Resolve context had empty SignatureAgent; want 'https://relay.example' pre-threaded by the SDK")
-	}
-	if captured() != "https://relay.example" {
-		t.Errorf("SignatureAgent in resolver context = %q; want %q", captured(), "https://relay.example")
-	}
-}
-
-// signatureAgentSpyResolver delegates Resolve to a real KeyResolver and calls
-// onResolve with the context so a test can inspect what the SDK threaded in.
-type signatureAgentSpyResolver struct {
-	delegate  helpers.KeyResolver
-	onResolve func(ctx context.Context, keyID string)
-}
-
-func (s *signatureAgentSpyResolver) Resolve(ctx context.Context, keyID string) (ed25519.PublicKey, error) {
-	if s.onResolve != nil {
-		s.onResolve(ctx, keyID)
-	}
-	return s.delegate.Resolve(ctx, keyID)
-}
-
-var _ helpers.KeyResolver = (*signatureAgentSpyResolver)(nil)
-
-// TestVerifyRequest_signatureAgentEmptyBindAccepted pins that a request WITHOUT
-// Signature-Agent set (where bindSignatureAgent binds an empty string "") still
-// verifies successfully. The WBA empty-bind semantics (app signer.go:46-52) must
-// be mirrored exactly: the signer binds "" so the covered component is always
-// satisfiable, and the verifier accepts the empty-string component value.
-func TestVerifyRequest_signatureAgentEmptyBindAccepted(t *testing.T) {
-	body := []byte(`{"resource_id":"r5"}`)
-	// signFixture does not set Signature-Agent — bindSignatureAgent binds "" so
-	// the covered component is satisfiable and verify passes.
-	req, pub := signFixture(t, body, nil)
-
-	vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
-	if err != nil {
-		t.Fatalf("VerifyRequest with empty-bind Signature-Agent: %v", err)
-	}
-	// Empty bind: SignatureAgent is "" and accessible.
-	if vr.SignatureAgent != "" {
-		t.Errorf("SignatureAgent = %q; want empty string (empty-bind semantics)", vr.SignatureAgent)
-	}
-	// Core VerifiedRequest fields are still populated correctly.
-	if vr.KeyID != "agent.v1" {
-		t.Errorf("KeyID = %q; want %q", vr.KeyID, "agent.v1")
-	}
-}
diff --git a/sdk/go/helpers/testdata/directory-response-vectors.json b/sdk/go/helpers/testdata/directory-response-vectors.json
new file mode 100644
index 00000000..6c7c16b0
--- /dev/null
+++ b/sdk/go/helpers/testdata/directory-response-vectors.json
@@ -0,0 +1,216 @@
+{
+  "vectors": [
+    {
+      "name": "doc_directory_example",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:5UyPR4rbxeGrlooo3uc0y43hNHzRX9O0EsegyHPf8XYyqy6q7/6Kkub2rFN2Jzsv+4yTdGygDdRE0iaRucg6DQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [
+        "kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k"
+      ],
+      "expected_error": ""
+    },
+    {
+      "name": "two_keys_both_signed",
+      "authority": "agent.example:8443",
+      "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"alg\":\"EdDSA\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\"},{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"alg\":\"EdDSA\",\"x\":\"C0eCPnEJXdWb54rCccV27zifh7ZFYasHz5pOvNAtIEE\"}]}",
+      "content_digest": "sha-256=:TONhAUPYkk8bOQahrWQGw+Ni9pHHg9fJhwSjY54iFTk=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\", sig2=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"qGgp8q8NmxSlOgVF2_v8gZ-6MY4VT1dDdkbHWD18aWI\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:KOWy2IVzJ+VYP6VVYDCNvpD/1vmeBVYUkw0JtTOMZNgnfiv0loAcIKswGkCf+Q/X9KOsIQsGNUXrgL93QzZkAA==:, sig2=:gJKRQXFYsEo3HpWZfkekqyB3CKlr9o07pWpxAB8DLYzrrTC/ynbgzWnCZcLcw2nNT1t9USi/+8oTnFgppAnzAQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
+        "C0eCPnEJXdWb54rCccV27zifh7ZFYasHz5pOvNAtIEE"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
+        "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [
+        "kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k",
+        "qGgp8q8NmxSlOgVF2_v8gZ-6MY4VT1dDdkbHWD18aWI"
+      ],
+      "expected_error": ""
+    },
+    {
+      "name": "two_keys_one_signed",
+      "authority": "agent.example:8443",
+      "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"alg\":\"EdDSA\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\"},{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"alg\":\"EdDSA\",\"x\":\"C0eCPnEJXdWb54rCccV27zifh7ZFYasHz5pOvNAtIEE\"}]}",
+      "content_digest": "sha-256=:TONhAUPYkk8bOQahrWQGw+Ni9pHHg9fJhwSjY54iFTk=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:KOWy2IVzJ+VYP6VVYDCNvpD/1vmeBVYUkw0JtTOMZNgnfiv0loAcIKswGkCf+Q/X9KOsIQsGNUXrgL93QzZkAA==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
+        "C0eCPnEJXdWb54rCccV27zifh7ZFYasHz5pOvNAtIEE"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [
+        "kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k"
+      ],
+      "expected_error": ""
+    },
+    {
+      "name": "expired",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790792200;expires=1790802200;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:PE1dtwYrIFs0sTL9n/TDrqaaXcKt47lJHRp3/ef50YHZbEmcKWU8/RWs2Yg/6W3tgmUfbkyVqLVlK4IQm/FyCQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790792200,
+      "expires": 1790802200,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    },
+    {
+      "name": "created_in_the_future",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790822200;expires=1790825800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:f3qtiM7En887Pn3X79Frb7FeTdcW502JyK+4phD5l/M01AKaPOolLcOGb0M/sDYjr9DFDoAfYGNuIoCl3PcJBQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790822200,
+      "expires": 1790825800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    },
+    {
+      "name": "key_not_listed",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"qGgp8q8NmxSlOgVF2_v8gZ-6MY4VT1dDdkbHWD18aWI\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:xe5QRGMYIguIPtwDvOXGNTJX2L//P/pW+TGctei9k4JWTHmrH2iYUTuCSwOykqvTWvzE+N0dW2hilx4C4PR3AQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    },
+    {
+      "name": "signed_for_another_authority",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:Xc2Wt67JK8MUQ85Rn6RoHLGoBqVDMrmEhxCSHprQJ39QW+p+bUnJkuTzXhYEdBruVQE15QO3HLHLJCUiY33NBQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    },
+    {
+      "name": "body_changed",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n} ",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:5UyPR4rbxeGrlooo3uc0y43hNHzRX9O0EsegyHPf8XYyqy6q7/6Kkub2rFN2Jzsv+4yTdGygDdRE0iaRucg6DQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": "digest_mismatch"
+    },
+    {
+      "name": "unsigned",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": "unsigned"
+    },
+    {
+      "name": "wrong_tag",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:i9T8cK7CrOWST6+2udvUffcF6KrL3yf3tjIPrZhB4WdnxOQkeXjSCBjElgSSQ4kMPV0Nr2C+BFJ4aHn6EmQPBg==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    },
+    {
+      "name": "no_authority_covered",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:rIfbkj7g3pfeuLvt4YjCDPiGcemGoBkMvTgULX7MvJuWyeDrJxarrDvVTClKN2liqv/+oP4DWntdto8llX/UDQ==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    }
+  ]
+}
diff --git a/sdk/go/helpers/testdata/multisig-chain-vectors.json b/sdk/go/helpers/testdata/multisig-chain-vectors.json
index a8a02b02..508f2770 100644
--- a/sdk/go/helpers/testdata/multisig-chain-vectors.json
+++ b/sdk/go/helpers/testdata/multisig-chain-vectors.json
@@ -1,253 +1,571 @@
 {
   "vectors": [
     {
-      "name": "positive_two_hop",
+      "name": "positive_independent_two",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:QPKm8aZxrhKn9hEfTFpLHYL9kaPuwEYUM5etEboZqaZbVdNsx9qJseMFH+6Bg7I8mWhG1WBJ1hHjD6Ect7crCw==:, sig2=:R9ueZCNxZwtgie+PBCeP2gdXG2Z/JtMsd4ppz/Tgmpv/5DJpXXcvFylQG3F4ECHOakrM8FKf2ZR4QGx+TFtJCQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:yl8JFWdbSHkU1OECca4mWqEh0h4y59KmY42kQ2YzOih7MHqEVVPjo+4SmuixYpK1seq8krK3sW2RZQbQxvBKCw==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
         }
       ],
       "max_signatures": 0,
       "expected_verified": true,
       "expected_keyids": [
-        "agent-demo.v1",
-        "broker.relay.a"
+        "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+        "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg"
+      ],
+      "expected_directories": [
+        "https://agent.example",
+        "https://broker.example"
       ],
       "expected_reason": ""
     },
     {
-      "name": "positive_two_hop_nonce",
+      "name": "positive_covering_two",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"AAECAwQFBgcICQoLDA0ODw\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"EBESExQVFhcYGRobHB0eHw\"",
-      "signature": "sig1=:h8D9kD+HCRRTL1yhtVJtN9Nn++J84/x33HpHlaqtFGrfR4pn7RtFD54VU9fGGt5pgx3Voa4i/91SwxtN9nmSDA==:, sig2=:bDlywMGqJPtxceH8Gkt7kI4hXLsUnE0nrB7rcBjp6Za5xgOeokEe7Pzhor/HDugL824Wf4o5e/N8rg0XjoDRBw==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:OuMYklocsq+i9uvSlXiOeSmv1qJYQviEwgAkPLChNVBSAIWplidXZuwQyRAtGSmNfbsx/AZxlYkkwXrdf5YjDQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
           "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
-          "nonce": "AAECAwQFBgcICQoLDA0ODw"
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
           "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
-          "nonce": "EBESExQVFhcYGRobHB0eHw"
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": true,
       "expected_keyids": [
-        "agent-demo.v1",
-        "broker.relay.a"
+        "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+        "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg"
+      ],
+      "expected_directories": [
+        "https://agent.example",
+        "https://broker.example"
       ],
       "expected_reason": ""
     },
     {
-      "name": "hop_budget_three_over_two",
+      "name": "positive_covering_three",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\", sig3=\"https://relay.example:8443\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig3=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig2\");keyid=\"broker.relay.b\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:QPKm8aZxrhKn9hEfTFpLHYL9kaPuwEYUM5etEboZqaZbVdNsx9qJseMFH+6Bg7I8mWhG1WBJ1hHjD6Ect7crCw==:, sig2=:R9ueZCNxZwtgie+PBCeP2gdXG2Z/JtMsd4ppz/Tgmpv/5DJpXXcvFylQG3F4ECHOakrM8FKf2ZR4QGx+TFtJCQ==:, sig3=:s0f/HOVH1LsPWCpZGfFFs1iC5drT11ye7EuJ+pITtuwVFdT8ZuWvbb1IuQkDGb+r/Be5HwAW1Hl10Ui2AgayAQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\", sig3=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig3\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\" \"signature\";key=\"sig2\" \"signature-input\";key=\"sig2\");created=1700000000;expires=1700000300;keyid=\"acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:OuMYklocsq+i9uvSlXiOeSmv1qJYQviEwgAkPLChNVBSAIWplidXZuwQyRAtGSmNfbsx/AZxlYkkwXrdf5YjDQ==:, sig3=:FRSyp2a5i7OmPz2s4f9xFqdb9nMNDm2cmBzPoRYVXuS8Aea08dL/gKyGvO2dLoLhlj+GClamd0QtJmUsZR3WCQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         },
         {
-          "keyid": "broker.relay.b",
+          "keyid": "acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk",
           "pubkey_b64url": "TgbbPwgfiQd4wXPLrwdvbCv-on770J2Pk6IISpLAhaI",
-          "seed_hex": "92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1"
+          "seed_hex": "92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1",
+          "directory": "https://relay.example:8443",
+          "cover_previous": true
+        }
+      ],
+      "max_signatures": 0,
+      "expected_verified": true,
+      "expected_keyids": [
+        "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+        "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+        "acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk"
+      ],
+      "expected_directories": [
+        "https://agent.example",
+        "https://broker.example",
+        "https://relay.example:8443"
+      ],
+      "expected_reason": ""
+    },
+    {
+      "name": "positive_covering_two_nonce",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";nonce=\"QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXp7fH1-fw\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:HRWGyUwAesZa4H288lnaDb7/5DK5nhwzOryl26IxNrDY6rxQlNrviQ6BxLNNx43P9D25Na0IXrWBfVM1KrCoCg==:, sig2=:QfdL+1ZtEa/aJMOSpEx59Qf9Hux6WncU3uBAXHIOXe/+5RC13Zfk+JXrfmzRx2yem6L1SGKbQm2I2VKs6MPdDg==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example",
+          "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw"
+        },
+        {
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "nonce": "QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXp7fH1-fw",
+          "cover_previous": true
+        }
+      ],
+      "max_signatures": 0,
+      "expected_verified": true,
+      "expected_keyids": [
+        "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+        "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg"
+      ],
+      "expected_directories": [
+        "https://agent.example",
+        "https://broker.example"
+      ],
+      "expected_reason": ""
+    },
+    {
+      "name": "hop_budget_three_independent_over_two",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\", sig3=\"https://relay.example:8443\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\", sig3=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig3\");created=1700000000;expires=1700000300;keyid=\"acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:yl8JFWdbSHkU1OECca4mWqEh0h4y59KmY42kQ2YzOih7MHqEVVPjo+4SmuixYpK1seq8krK3sW2RZQbQxvBKCw==:, sig3=:6V/c92eXOljdHMmj/zarDyysT2KDHe3iyzW83aOSBDaoN6fI4VVLIpVD4FJ+3mgAEFScH94d/F19EznWfGOeCA==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
+        },
+        {
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
+        },
+        {
+          "keyid": "acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk",
+          "pubkey_b64url": "TgbbPwgfiQd4wXPLrwdvbCv-on770J2Pk6IISpLAhaI",
+          "seed_hex": "92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1",
+          "directory": "https://relay.example:8443"
         }
       ],
       "max_signatures": 2,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "hop_budget"
     },
     {
-      "name": "broken_chain_reordered",
+      "name": "hop_budget_three_covering_over_two",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\", sig3=\"https://relay.example:8443\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig2=:R9ueZCNxZwtgie+PBCeP2gdXG2Z/JtMsd4ppz/Tgmpv/5DJpXXcvFylQG3F4ECHOakrM8FKf2ZR4QGx+TFtJCQ==:, sig1=:QPKm8aZxrhKn9hEfTFpLHYL9kaPuwEYUM5etEboZqaZbVdNsx9qJseMFH+6Bg7I8mWhG1WBJ1hHjD6Ect7crCw==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\", sig3=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig3\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\" \"signature\";key=\"sig2\" \"signature-input\";key=\"sig2\");created=1700000000;expires=1700000300;keyid=\"acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:OuMYklocsq+i9uvSlXiOeSmv1qJYQviEwgAkPLChNVBSAIWplidXZuwQyRAtGSmNfbsx/AZxlYkkwXrdf5YjDQ==:, sig3=:FRSyp2a5i7OmPz2s4f9xFqdb9nMNDm2cmBzPoRYVXuS8Aea08dL/gKyGvO2dLoLhlj+GClamd0QtJmUsZR3WCQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
+        },
+        {
+          "keyid": "acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk",
+          "pubkey_b64url": "TgbbPwgfiQd4wXPLrwdvbCv-on770J2Pk6IISpLAhaI",
+          "seed_hex": "92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1",
+          "directory": "https://relay.example:8443",
+          "cover_previous": true
+        }
+      ],
+      "max_signatures": 2,
+      "expected_verified": false,
+      "expected_keyids": null,
+      "expected_directories": null,
+      "expected_reason": "hop_budget"
+    },
+    {
+      "name": "broken_coverage_reordered",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\", sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig2=:OuMYklocsq+i9uvSlXiOeSmv1qJYQviEwgAkPLChNVBSAIWplidXZuwQyRAtGSmNfbsx/AZxlYkkwXrdf5YjDQ==:, sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
+        },
+        {
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "broken_chain"
     },
     {
-      "name": "broken_chain_stripped_middle",
+      "name": "broken_coverage_stripped",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig3=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig2\");keyid=\"broker.relay.b\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:QPKm8aZxrhKn9hEfTFpLHYL9kaPuwEYUM5etEboZqaZbVdNsx9qJseMFH+6Bg7I8mWhG1WBJ1hHjD6Ect7crCw==:, sig3=:s0f/HOVH1LsPWCpZGfFFs1iC5drT11ye7EuJ+pITtuwVFdT8ZuWvbb1IuQkDGb+r/Be5HwAW1Hl10Ui2AgayAQ==:",
+      "signature_input": "sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig2=:OuMYklocsq+i9uvSlXiOeSmv1qJYQviEwgAkPLChNVBSAIWplidXZuwQyRAtGSmNfbsx/AZxlYkkwXrdf5YjDQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
+        }
+      ],
+      "max_signatures": 0,
+      "expected_verified": false,
+      "expected_keyids": null,
+      "expected_directories": null,
+      "expected_reason": "broken_chain"
+    },
+    {
+      "name": "broken_coverage_without_signature_input",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:1shw1RYEexxaXYK6ZgsX6+FE8RAZgBiWR9RoKPRceXsMDenLA9gAB9FApFAyJuI8bhBJQvruLJ4w/BIhrXC7Cw==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.b",
-          "pubkey_b64url": "TgbbPwgfiQd4wXPLrwdvbCv-on770J2Pk6IISpLAhaI",
-          "seed_hex": "92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1"
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
         }
       ],
       "max_signatures": 0,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "broken_chain"
     },
     {
-      "name": "broken_chain_missing_link",
+      "name": "broken_coverage_missing_component",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:QPKm8aZxrhKn9hEfTFpLHYL9kaPuwEYUM5etEboZqaZbVdNsx9qJseMFH+6Bg7I8mWhG1WBJ1hHjD6Ect7crCw==:, sig2=:SA4UUvrp7iolulVIOL9KVhpRw5KtQf0wn/HJqdU6P16m2aILGISiorzT2n/5iPqqpwQIf+81FlrhnNokNCINCw==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:L7K+vRKIZiIc+buYoP7e3Nnhq22C9aC6qvuWlSxAJk7mmWcM54dJv3vkSSGWSLscHKZtkY7Foy69Uns/EYClAA==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
         }
       ],
       "max_signatures": 0,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "broken_chain"
     },
     {
-      "name": "tampered_predecessor",
+      "name": "wrong_directory_member",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:8THrXdQQmUe9V5MkDUo/KO31CUtWBBxQpPsCh/vEbgvo9I1/mLnoe2vN+hjwH/LMV1/PVxPQwpHCNShM+4VdAQ==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
+        },
+        {
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
+        }
+      ],
+      "max_signatures": 0,
+      "expected_verified": false,
+      "expected_keyids": null,
+      "expected_directories": null,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "legacy_form_on_two_signatures",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "\"https://agent.example\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:TfShptTdA6+nQOkM553XQJi9365VhK5g484WDjXn/epM0Tu77JqB7WbfrTLnv0ox+raGgTOfWgIzzR3WL/bGCA==:, sig2=:Sa3/2RnP4aFt4KybCiy16+wS0HI/2qi3oEB7EQelGWDbV9qdDBAW6jvf2vlpghXlTGvuGLzRAibYbsVcu7FdBA==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
+        },
+        {
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
+        }
+      ],
+      "max_signatures": 0,
+      "expected_verified": false,
+      "expected_keyids": null,
+      "expected_directories": null,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "tampered_first_independent",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:A4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:yl8JFWdbSHkU1OECca4mWqEh0h4y59KmY42kQ2YzOih7MHqEVVPjo+4SmuixYpK1seq8krK3sW2RZQbQxvBKCw==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
+        },
+        {
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
+        }
+      ],
+      "max_signatures": 0,
+      "expected_verified": false,
+      "expected_keyids": null,
+      "expected_directories": null,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "tampered_first_covered",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:APKm8aZxrhKn9hEfTFpLHYL9kaPuwEYUM5etEboZqaZbVdNsx9qJseMFH+6Bg7I8mWhG1WBJ1hHjD6Ect7crCw==:, sig2=:R9ueZCNxZwtgie+PBCeP2gdXG2Z/JtMsd4ppz/Tgmpv/5DJpXXcvFylQG3F4ECHOakrM8FKf2ZR4QGx+TFtJCQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:A4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:OuMYklocsq+i9uvSlXiOeSmv1qJYQviEwgAkPLChNVBSAIWplidXZuwQyRAtGSmNfbsx/AZxlYkkwXrdf5YjDQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "signature"
     },
     {
-      "name": "absent_authorization_two_hop",
+      "name": "repointed_second_member",
+      "method": "POST",
+      "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
+      "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
+      "authorization": "Bearer chain-token",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://evil.example\"",
+      "created": 1700000000,
+      "expires": 1700000300,
+      "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:yl8JFWdbSHkU1OECca4mWqEh0h4y59KmY42kQ2YzOih7MHqEVVPjo+4SmuixYpK1seq8krK3sW2RZQbQxvBKCw==:",
+      "hops": [
+        {
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+          "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
+        },
+        {
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
+          "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example"
+        }
+      ],
+      "max_signatures": 0,
+      "expected_verified": false,
+      "expected_keyids": null,
+      "expected_directories": null,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "absent_authorization_two",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:54r7e2ai9T419lvdG8qW4UKE5R8BfgE3t3GIcE+Yr1GAAaAKCp3Rs5KkEruauFPWbF75evLaYBKa+t2f8pqEBA==:, sig2=:7UL8SnhFvF5iBlWfs3SqwjEU56Lr6pFotXjpGW37kUnZPbmFwHDpGvXlLw6uY+DiemrbmGoaQ10Nu5mWWtqIDA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:hc4jXgCsVMxfaMVADDifb4CS3uQz5ai5DTJNhWO1/9crt42vES5L/k0dmIegWceK7Nb9pPDu1HRe+5ukKUyLDg==:, sig2=:Wmu4le5QQP5qMlSdJYxiN+fvTiS16M/0+sR6ppTh6yAXvcQmcaRXlEhxswqrnN35Bhvd6LpZm60LTraE8nG5BQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "signature",
       "omit_headers": [
         "Authorization"
@@ -259,32 +577,38 @@
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\", sig3=\"https://relay.example:8443\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig3=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig2\");keyid=\"broker.relay.b\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:54r7e2ai9T419lvdG8qW4UKE5R8BfgE3t3GIcE+Yr1GAAaAKCp3Rs5KkEruauFPWbF75evLaYBKa+t2f8pqEBA==:, sig2=:7UL8SnhFvF5iBlWfs3SqwjEU56Lr6pFotXjpGW37kUnZPbmFwHDpGvXlLw6uY+DiemrbmGoaQ10Nu5mWWtqIDA==:, sig3=:x3MiLH6sXmmvqVmz142WaE1Nt+bQDXZwkZKWRB+NN1L+NXQYHDcK4iIiqLVbwQZoneR2j7W9ueeFL1ZQOE+rDg==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\", sig3=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig3\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\" \"signature\";key=\"sig2\" \"signature-input\";key=\"sig2\");created=1700000000;expires=1700000300;keyid=\"acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:hc4jXgCsVMxfaMVADDifb4CS3uQz5ai5DTJNhWO1/9crt42vES5L/k0dmIegWceK7Nb9pPDu1HRe+5ukKUyLDg==:, sig2=:Wmu4le5QQP5qMlSdJYxiN+fvTiS16M/0+sR6ppTh6yAXvcQmcaRXlEhxswqrnN35Bhvd6LpZm60LTraE8nG5BQ==:, sig3=:G3NiFCkp7KwiQjLXypLRhK4L2Cj3YVqk4wpBe3COQsa0fsogpkR40zgv7FdQFohvNGOz7MfcjQDi2TNdxaLTAg==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         },
         {
-          "keyid": "broker.relay.b",
+          "keyid": "acXICJljSoxVypUDYWIVMr-oifhyT-1BOOJLE0baFzk",
           "pubkey_b64url": "TgbbPwgfiQd4wXPLrwdvbCv-on770J2Pk6IISpLAhaI",
-          "seed_hex": "92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1"
+          "seed_hex": "92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1",
+          "directory": "https://relay.example:8443",
+          "cover_previous": true
         }
       ],
       "max_signatures": 2,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "hop_budget",
       "omit_headers": [
         "Authorization"
@@ -296,93 +620,108 @@
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig2=:7UL8SnhFvF5iBlWfs3SqwjEU56Lr6pFotXjpGW37kUnZPbmFwHDpGvXlLw6uY+DiemrbmGoaQ10Nu5mWWtqIDA==:, sig1=:54r7e2ai9T419lvdG8qW4UKE5R8BfgE3t3GIcE+Yr1GAAaAKCp3Rs5KkEruauFPWbF75evLaYBKa+t2f8pqEBA==:",
+      "signature_input": "sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\", sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig2=:Wmu4le5QQP5qMlSdJYxiN+fvTiS16M/0+sR6ppTh6yAXvcQmcaRXlEhxswqrnN35Bhvd6LpZm60LTraE8nG5BQ==:, sig1=:hc4jXgCsVMxfaMVADDifb4CS3uQz5ai5DTJNhWO1/9crt42vES5L/k0dmIegWceK7Nb9pPDu1HRe+5ukKUyLDg==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "broken_chain",
       "omit_headers": [
         "Signature-Agent"
       ]
     },
     {
-      "name": "duplicate_authorization_two_hop",
+      "name": "duplicate_authorization_two",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:54r7e2ai9T419lvdG8qW4UKE5R8BfgE3t3GIcE+Yr1GAAaAKCp3Rs5KkEruauFPWbF75evLaYBKa+t2f8pqEBA==:, sig2=:7UL8SnhFvF5iBlWfs3SqwjEU56Lr6pFotXjpGW37kUnZPbmFwHDpGvXlLw6uY+DiemrbmGoaQ10Nu5mWWtqIDA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:hc4jXgCsVMxfaMVADDifb4CS3uQz5ai5DTJNhWO1/9crt42vES5L/k0dmIegWceK7Nb9pPDu1HRe+5ukKUyLDg==:, sig2=:Wmu4le5QQP5qMlSdJYxiN+fvTiS16M/0+sR6ppTh6yAXvcQmcaRXlEhxswqrnN35Bhvd6LpZm60LTraE8nG5BQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": false,
       "expected_keyids": null,
+      "expected_directories": null,
       "expected_reason": "signature",
       "extra_headers": {
         "Authorization": "Bearer unsigned-token"
       }
     },
     {
-      "name": "canonical_case_two_hop",
+      "name": "canonical_case_two",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer chain-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:QPKm8aZxrhKn9hEfTFpLHYL9kaPuwEYUM5etEboZqaZbVdNsx9qJseMFH+6Bg7I8mWhG1WBJ1hHjD6Ect7crCw==:, sig2=:R9ueZCNxZwtgie+PBCeP2gdXG2Z/JtMsd4ppz/Tgmpv/5DJpXXcvFylQG3F4ECHOakrM8FKf2ZR4QGx+TFtJCQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:/4hw9qLGS2Z1os2dHcgReo/GRRM/nNLtBgzp07AyvljpztXr7Ndds7xoRuv/KvWU4QJu2UbmYUwsaIERBZEzAA==:, sig2=:OuMYklocsq+i9uvSlXiOeSmv1qJYQviEwgAkPLChNVBSAIWplidXZuwQyRAtGSmNfbsx/AZxlYkkwXrdf5YjDQ==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": true,
       "expected_keyids": [
-        "agent-demo.v1",
-        "broker.relay.a"
+        "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+        "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg"
+      ],
+      "expected_directories": [
+        "https://agent.example",
+        "https://broker.example"
       ],
       "expected_reason": "",
       "omit_headers": [
@@ -391,38 +730,45 @@
       ],
       "extra_headers": {
         "Authorization": "Bearer chain-token",
-        "Signature-Agent": "https://agent.example"
+        "Signature-Agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\""
       }
     },
     {
-      "name": "duplicate_bound_two_hop",
+      "name": "duplicate_bound_two",
       "method": "POST",
       "url": "https://exchange.example.com/fora.v1.ExchangeService/ExecuteTransaction",
       "body_hex": "7b226964656d706f74656e63795f6b6579223a226964656d2d31227d",
       "authorization": "Bearer first-line",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\", sig2=\"https://broker.example\"",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "content_digest": "sha-256=:aqbQCL+PR0Yt3lChg8nyhajBCVVVwuDJL2CxMyU+zRg=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"agent-demo.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600, sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\" \"signature\";key=\"sig1\");keyid=\"broker.relay.a\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:mbpNRg3ce5uQPVY3EwI/iy5G3Ga1hR1Lng/qumprF6+mqfjyELFav4GmHThh5RHiq9n9sJp7MnDfV0GCSeq1CA==:, sig2=:vKYqHzk1MFsE1meVtnFyJ4urlqZokZ0QZSVTicKKC7VdRUojtnb882TT7f2zXZRdXvNFqGArFZG7dlEsxxxABA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk\";alg=\"ed25519\";tag=\"web-bot-auth\", sig2=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig2\" \"signature-agent\";key=\"sig1\" \"signature\";key=\"sig1\" \"signature-input\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:T+B6nQF5y2Rv3bQpsnAOGtmtgzPnPSac/Q+mxz8bLAk92POg/1qWUp4dRetNHUuy0xW0MLiYJvh1JfXuKClfBw==:, sig2=:0LOc1FBGMlcBGtOTcj8bEUTNILHBrjJ8eboilYGQvZumZaLXBNz8FNaqurrVzOV8tbW0fzhc4ow11+5wwrC5Bg==:",
       "hops": [
         {
-          "keyid": "agent-demo.v1",
+          "keyid": "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
           "pubkey_b64url": "0uuZO2MUNSjnDc3H65yiEBDddpvpUlDCxbq_rRXUWOI",
-          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
+          "seed_hex": "909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
+          "directory": "https://agent.example"
         },
         {
-          "keyid": "broker.relay.a",
+          "keyid": "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg",
           "pubkey_b64url": "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M",
-          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0"
+          "seed_hex": "9192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0",
+          "directory": "https://broker.example",
+          "cover_previous": true
         }
       ],
       "max_signatures": 0,
       "expected_verified": true,
       "expected_keyids": [
-        "agent-demo.v1",
-        "broker.relay.a"
+        "Rc0kU9h9S_eOwFQXu8RoYlZfImjUNa_fv6LQSGhYrTk",
+        "hYAZ4WFuQgBXWI7SwqDpp1Lxkb4CNR3W9A9MktV_vUg"
+      ],
+      "expected_directories": [
+        "https://agent.example",
+        "https://broker.example"
       ],
       "expected_reason": "",
       "extra_headers": {
diff --git a/sdk/go/helpers/testdata/pop-vectors.json b/sdk/go/helpers/testdata/pop-vectors.json
index 71735df2..afed395c 100644
--- a/sdk/go/helpers/testdata/pop-vectors.json
+++ b/sdk/go/helpers/testdata/pop-vectors.json
@@ -6,8 +6,25 @@
     "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
     "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
     "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
-    "signature_input": "sig1=(\"@method\" \"@target-uri\");keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-    "signature": "sig1=:F1K10oqhRMtfu/P3lPakPs9IQIPQ9vuJ/nkE8tJ8q6dc/ypLA/33kqkRVedzutM6Xz1kuPcabfemwdh2loBVDw==:",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:HO7WvnmG2aPCdEMMD7sdxp+iXfmod+yux7rYcaHTSZV5A5pGNeQiygbVCph2m6jiN6VDrWJ9d8gDvc6hfzO+Bg==:",
+    "now_unix": 1700000100,
+    "expected_valid": true
+  },
+  {
+    "name": "valid_no_nonce",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:ZNkUneR/GmZXDH7lM65K2t2NHf4Rl5Vz9Uh3khReNH3qIH1mcx4bXqd38dquMYoels51VEhkFM+Ejj4SAlE5Ag==:",
     "now_unix": 1700000100,
     "expected_valid": true
   },
@@ -18,9 +35,12 @@
     "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
     "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
     "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
-    "signature_input": "sig1=(\"@method\" \"@target-uri\");keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-    "signature": "sig1=:F1K10oqhRMtfu/P3lPakPs9IQIPQ9vuJ/nkE8tJ8q6dc/ypLA/33kqkRVedzutM6Xz1kuPcabfemwdh2loBVDw==:",
-    "now_unix": 1700000700,
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:HO7WvnmG2aPCdEMMD7sdxp+iXfmod+yux7rYcaHTSZV5A5pGNeQiygbVCph2m6jiN6VDrWJ9d8gDvc6hfzO+Bg==:",
+    "now_unix": 1700000400,
     "expected_valid": false
   },
   {
@@ -30,8 +50,101 @@
     "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
     "presented_key_b64url": "veZ1AUYlq175jmwkThrBf5IZJ3wnexftHNhaXsI-lE4",
     "signer_seed_hex": "4445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f60616263",
-    "signature_input": "sig1=(\"@method\" \"@target-uri\");keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-    "signature": "sig1=:6qydchDwyjKPLaOvZZt2i/yxMMSSa6gikSHRQx2mxT8q8yi3dDq+YGA5NrEnXsIVzHJJ0OSHNE2mmCr7xuXpBA==:",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:5TfouIL45mlrcW5sLrVddSgmo02RrkTrfwyW2h4XHU9IBVuqgNpOe9gE4lS5INoFsU+bcuJSNSNQjuf8DefuDw==:",
+    "now_unix": 1700000100,
+    "expected_valid": false
+  },
+  {
+    "name": "v108_method_and_target_uri_only",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\"",
+    "signature": "sig1=:W8RsAFY7u9/JldtDJMtyEN+Lxt1t4Seq5HrQwtOR/3cRrOmr1h9ftWZVR5oP7biV6yYeKuLXSpY16WRZqAmcAA==:",
+    "now_unix": 1700000100,
+    "expected_valid": false
+  },
+  {
+    "name": "missing_tag",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\"",
+    "signature": "sig1=:VNd91bkAKO8gYRkWZOajd/m+6FIR2rQanaMaOvO1tcLnY+K7lG1aQL11lkayWezNaGsz/6YE5i+vM+siKhz1Cg==:",
+    "now_unix": 1700000100,
+    "expected_valid": false
+  },
+  {
+    "name": "wrong_tag",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"other\"",
+    "signature": "sig1=:DrLQiQG3RJWOpkBxbtyCg4zezIIW8IZk8uWGIZp5AWRWVWB8wbx39D38v2BXNBC4wxUUPzl+/2WorKCJnoGeAg==:",
+    "now_unix": 1700000100,
+    "expected_valid": false
+  },
+  {
+    "name": "bare_signature_agent",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "https://agent.example",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:EEC/8uncMno5PI1WyhnX31MIk8HQtQsyCJqtRRFK8FNUy2eyZST3kKA4eoo9iEaBiz8CyiYgk6JtZtpAONnsDw==:",
+    "now_unix": 1700000100,
+    "expected_valid": false
+  },
+  {
+    "name": "legacy_string_signature_agent",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:J0myyHqBqkrJ8sLj0abNsCN3zMogJmGouAADWEUJVTuhAxXA/aiaMdjE60RBZ6XYlx5RGvBwaNK5ULvUBVdTAA==:",
+    "now_unix": 1700000100,
+    "expected_valid": true
+  },
+  {
+    "name": "member_not_https_origin",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "http://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"http://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:WDuhOYacpPmC+8VVUOXi4ZE0j0qqqpcfL2qcSpZkNzzcpZqCNQ/5Whm0uq4vmTnVqHtN3mgsQN6SsGqSykluBA==:",
     "now_unix": 1700000100,
     "expected_valid": false
   }
diff --git a/sdk/go/helpers/testdata/sign-request-vectors.json b/sdk/go/helpers/testdata/sign-request-vectors.json
index 3fcf025a..cce703be 100644
--- a/sdk/go/helpers/testdata/sign-request-vectors.json
+++ b/sdk/go/helpers/testdata/sign-request-vectors.json
@@ -9,13 +9,13 @@
       "signature_agent": "https://agent.example",
       "keyid": "mcp.v1",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "signer_seed_hex": "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374",
       "pubkey_b64url": "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk",
       "content_digest": "sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:",
-      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:\n\"authorization\": Bearer token-123\n\"signature-agent\": https://agent.example\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:O0KKLs/pnJpvS/wIcEXzirMLbZN7fZP7373dVpbPvW8+aZLVm2U67WTngO+tWFDmT4RhEk8UeoKMOJYzhdM1DA==:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:\n\"authorization\": Bearer token-123\n\"signature-agent\";key=\"sig1\": \"https://agent.example\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:s7mJDW1vq3356tNDifvJvk9n9WDiJ40RFtSMRqelZAUbpQjM5KMmGB12GuJlJb8RXpRLVvypL/6STaNbOtVYBQ==:",
       "emitted_headers": {
         "authorization": [
           "Bearer token-123"
@@ -24,13 +24,13 @@
           "sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:"
         ],
         "signature": [
-          "sig1=:O0KKLs/pnJpvS/wIcEXzirMLbZN7fZP7373dVpbPvW8+aZLVm2U67WTngO+tWFDmT4RhEk8UeoKMOJYzhdM1DA==:"
+          "sig1=:s7mJDW1vq3356tNDifvJvk9n9WDiJ40RFtSMRqelZAUbpQjM5KMmGB12GuJlJb8RXpRLVvypL/6STaNbOtVYBQ==:"
         ],
         "signature-agent": [
-          "https://agent.example"
+          "sig1=\"https://agent.example\""
         ],
         "signature-input": [
-          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600"
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\""
         ]
       }
     },
@@ -40,16 +40,16 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch?trace=1",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6f74686572227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "https://agent.example:8443",
       "keyid": "mcp.v1",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "signer_seed_hex": "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374",
       "pubkey_b64url": "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk",
       "content_digest": "sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:",
-      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch?trace=1\n\"content-digest\": sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:\n\"authorization\": \n\"signature-agent\": \n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:4jeMQtfzIipIjstXx9X3BFf4a1Me8Dmbm3V7q15Sl+L9koslsfXnhR6v27UtxVjA1YSekR6tAvPNQE1hOE4vAQ==:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch?trace=1\n\"content-digest\": sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:\n\"authorization\": \n\"signature-agent\";key=\"sig1\": \"https://agent.example:8443\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:qpRJwDSAU2f1rbgsQVgu+PTUKc1l5N+iK8CY4nidIhIl/sZifrmBMtvOGD235yMswxAanDV8X3Pcx1lI2aTHCA==:",
       "emitted_headers": {
         "authorization": [
           ""
@@ -58,13 +58,13 @@
           "sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:"
         ],
         "signature": [
-          "sig1=:4jeMQtfzIipIjstXx9X3BFf4a1Me8Dmbm3V7q15Sl+L9koslsfXnhR6v27UtxVjA1YSekR6tAvPNQE1hOE4vAQ==:"
+          "sig1=:qpRJwDSAU2f1rbgsQVgu+PTUKc1l5N+iK8CY4nidIhIl/sZifrmBMtvOGD235yMswxAanDV8X3Pcx1lI2aTHCA==:"
         ],
         "signature-agent": [
-          ""
+          "sig1=\"https://agent.example:8443\""
         ],
         "signature-input": [
-          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600"
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\""
         ]
       }
     },
@@ -75,15 +75,16 @@
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f72656c61796564227d",
       "authorization": "",
       "signature_agent": "https://relay.example",
+      "append_only": true,
       "keyid": "mcp.v1",
       "created": 1700000000,
-      "expires": 1700000600,
+      "expires": 1700000300,
       "signer_seed_hex": "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374",
       "pubkey_b64url": "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk",
       "content_digest": "sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:",
-      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:\n\"authorization\": \n\"signature-agent\": https://relay.example\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:bNpIlxdsXMvPjsEyp2cffaI/x2+TfairZz1U0lWR4lZ2xOlVxiByJ5SXEHnO4mWH7zxjCLdQmM3GYNpcZrfMDw==:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:\n\"authorization\": \n\"signature-agent\";key=\"sig1\": \"https://relay.example\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:1zt8qTjS6HaFZybf8MgiqF4+C4WY7Df2GLci9g01Js9J7ZXvbB+YCVU4WkmvWMoSNpmAKgTBnFSX4A+Qk0ntBA==:",
       "emitted_headers": {
         "authorization": [
           ""
@@ -92,13 +93,13 @@
           "sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:"
         ],
         "signature": [
-          "sig1=:bNpIlxdsXMvPjsEyp2cffaI/x2+TfairZz1U0lWR4lZ2xOlVxiByJ5SXEHnO4mWH7zxjCLdQmM3GYNpcZrfMDw==:"
+          "sig1=:1zt8qTjS6HaFZybf8MgiqF4+C4WY7Df2GLci9g01Js9J7ZXvbB+YCVU4WkmvWMoSNpmAKgTBnFSX4A+Qk0ntBA==:"
         ],
         "signature-agent": [
-          "https://relay.example"
+          "sig1=\"https://relay.example\""
         ],
         "signature-input": [
-          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600"
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\""
         ]
       }
     },
@@ -111,14 +112,14 @@
       "signature_agent": "https://agent.example",
       "keyid": "mcp.v1",
       "created": 1700000000,
-      "expires": 1700000600,
-      "nonce": "AAECAwQFBgcICQoLDA0ODw",
+      "expires": 1700000300,
+      "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
       "signer_seed_hex": "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374",
       "pubkey_b64url": "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk",
       "content_digest": "sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:",
-      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:\n\"authorization\": Bearer token-123\n\"signature-agent\": https://agent.example\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"AAECAwQFBgcICQoLDA0ODw\"",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"AAECAwQFBgcICQoLDA0ODw\"",
-      "signature": "sig1=:xjN9/jbdQRWcVCAXQzA3qyOx7qIiXnsjMhMZM4Y8tHQSllnYZbQrBWcYZAYBQ67aQgtsaGmtgjJgvJ3wt5f8DQ==:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:\n\"authorization\": Bearer token-123\n\"signature-agent\";key=\"sig1\": \"https://agent.example\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:Xh1eCCa9eriUE13ytIh8EgPnaNgJysJheE+wmz6BvJPUWhQhPB7T20qfALfQm1v++GVneRAxbIiwy1/euRUpCQ==:",
       "emitted_headers": {
         "authorization": [
           "Bearer token-123"
@@ -127,13 +128,13 @@
           "sha-256=:LC7ZJEfUXoccpH/7ie7YQ53oZUqVqCOpVjtOe4fHvfg=:"
         ],
         "signature": [
-          "sig1=:xjN9/jbdQRWcVCAXQzA3qyOx7qIiXnsjMhMZM4Y8tHQSllnYZbQrBWcYZAYBQ67aQgtsaGmtgjJgvJ3wt5f8DQ==:"
+          "sig1=:Xh1eCCa9eriUE13ytIh8EgPnaNgJysJheE+wmz6BvJPUWhQhPB7T20qfALfQm1v++GVneRAxbIiwy1/euRUpCQ==:"
         ],
         "signature-agent": [
-          "https://agent.example"
+          "sig1=\"https://agent.example\""
         ],
         "signature-input": [
-          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"AAECAwQFBgcICQoLDA0ODw\""
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\""
         ]
       }
     },
@@ -143,17 +144,17 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch?trace=1",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6f74686572227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "https://agent.example:8443",
       "keyid": "mcp.v1",
       "created": 1700000000,
-      "expires": 1700000600,
-      "nonce": "ICEiIyQlJicoKSorLC0uLw",
+      "expires": 1700000300,
+      "nonce": "QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXp7fH1-fw",
       "signer_seed_hex": "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374",
       "pubkey_b64url": "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk",
       "content_digest": "sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:",
-      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch?trace=1\n\"content-digest\": sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:\n\"authorization\": \n\"signature-agent\": \n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"ICEiIyQlJicoKSorLC0uLw\"",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"ICEiIyQlJicoKSorLC0uLw\"",
-      "signature": "sig1=:63GUhCwCop15BkT9DuZrrkaS5l+SHAb5ccMuIA4lVWHyE5KEcw3bcKMKI9PpbHYsDUgUinTEI/k090XjS82QBA==:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch?trace=1\n\"content-digest\": sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:\n\"authorization\": \n\"signature-agent\";key=\"sig1\": \"https://agent.example:8443\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXp7fH1-fw\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXp7fH1-fw\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:lNo+nJtn9qrYrX+329P+kLSlu0q+DOh6PtggQQQDo3IZ2WGqMQ66QVUNn1WN5iQURx/sK6bhPfkS0ALyBF/YAw==:",
       "emitted_headers": {
         "authorization": [
           ""
@@ -162,13 +163,13 @@
           "sha-256=:aMcs/yVBJDEdGJoNVijbTFPQEOduCYgZWzCBIw5eTyg=:"
         ],
         "signature": [
-          "sig1=:63GUhCwCop15BkT9DuZrrkaS5l+SHAb5ccMuIA4lVWHyE5KEcw3bcKMKI9PpbHYsDUgUinTEI/k090XjS82QBA==:"
+          "sig1=:lNo+nJtn9qrYrX+329P+kLSlu0q+DOh6PtggQQQDo3IZ2WGqMQ66QVUNn1WN5iQURx/sK6bhPfkS0ALyBF/YAw==:"
         ],
         "signature-agent": [
-          ""
+          "sig1=\"https://agent.example:8443\""
         ],
         "signature-input": [
-          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"ICEiIyQlJicoKSorLC0uLw\""
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXp7fH1-fw\";tag=\"web-bot-auth\""
         ]
       }
     },
@@ -179,16 +180,17 @@
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f72656c61796564227d",
       "authorization": "",
       "signature_agent": "https://relay.example",
+      "append_only": true,
       "keyid": "mcp.v1",
       "created": 1700000000,
-      "expires": 1700000600,
-      "nonce": "EBESExQVFhcYGRobHB0eHw",
+      "expires": 1700000300,
+      "nonce": "gIGCg4SFhoeIiYqLjI2Oj5CRkpOUlZaXmJmam5ydnp-goaKjpKWmp6ipqqusra6vsLGys7S1tre4ubq7vL2-vw",
       "signer_seed_hex": "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374",
       "pubkey_b64url": "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk",
       "content_digest": "sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:",
-      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:\n\"authorization\": \n\"signature-agent\": https://relay.example\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"EBESExQVFhcYGRobHB0eHw\"",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"EBESExQVFhcYGRobHB0eHw\"",
-      "signature": "sig1=:/XvF2PIeaR35Yx9gZqymwThyJFVIraArSG4IGAEPUgcG+Salov1Z/UME7Y9dg0JYhqIYqjZk0Nfs9Gf5mJvPCA==:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://broker.example/fora.v1.BrokerService/Fetch\n\"content-digest\": sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:\n\"authorization\": \n\"signature-agent\";key=\"sig1\": \"https://relay.example\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"gIGCg4SFhoeIiYqLjI2Oj5CRkpOUlZaXmJmam5ydnp-goaKjpKWmp6ipqqusra6vsLGys7S1tre4ubq7vL2-vw\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"gIGCg4SFhoeIiYqLjI2Oj5CRkpOUlZaXmJmam5ydnp-goaKjpKWmp6ipqqusra6vsLGys7S1tre4ubq7vL2-vw\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:klyeijlR5llGi+jD2EpRTvV05LI9UpmDOn6sxTHnmGhuJuBaEvGesxzpwLjxAS5/g5QI9CEYwrQAO+vQCCxeCQ==:",
       "emitted_headers": {
         "authorization": [
           ""
@@ -197,13 +199,83 @@
           "sha-256=:mYNGOg6dEBZ+9i8Biu/ADMvIWbQfdPQMkzK4+S/UTeY=:"
         ],
         "signature": [
-          "sig1=:/XvF2PIeaR35Yx9gZqymwThyJFVIraArSG4IGAEPUgcG+Salov1Z/UME7Y9dg0JYhqIYqjZk0Nfs9Gf5mJvPCA==:"
+          "sig1=:klyeijlR5llGi+jD2EpRTvV05LI9UpmDOn6sxTHnmGhuJuBaEvGesxzpwLjxAS5/g5QI9CEYwrQAO+vQCCxeCQ==:"
+        ],
+        "signature-agent": [
+          "sig1=\"https://relay.example\""
+        ],
+        "signature-input": [
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"gIGCg4SFhoeIiYqLjI2Oj5CRkpOUlZaXmJmam5ydnp-goaKjpKWmp6ipqqusra6vsLGys7S1tre4ubq7vL2-vw\";tag=\"web-bot-auth\""
+        ]
+      }
+    },
+    {
+      "name": "doc_single_hop_example",
+      "method": "POST",
+      "url": "https://exchange.example/fora.v1.ExchangeService/DiscoverResources",
+      "body_hex": "7b22766572223a22312e30222c2265786368616e6765223a2265786368616e67652e6578616d706c65222c22726571756573746572223a7b226964223a2272657365617263682d626f742d3432222c22646f6d61696e223a2272657365617263682e61636d652e636f6d222c2274797065223a225245515545535445525f545950455f4147454e54227d2c2275726973223a5b2268747470733a2f2f7075626c69736865722e6578616d706c652f7072656d69756d2f61692d66756e64696e672d726f756e647570225d7d",
+      "authorization": "",
+      "signature_agent": "https://research.acme.com",
+      "keyid": "kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k",
+      "created": 1790812800,
+      "expires": 1790813100,
+      "nonce": "TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg",
+      "signer_seed_hex": "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
+      "pubkey_b64url": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
+      "content_digest": "sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://exchange.example/fora.v1.ExchangeService/DiscoverResources\n\"content-digest\": sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:\n\"authorization\": \n\"signature-agent\";key=\"sig1\": \"https://research.acme.com\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1790812800;expires=1790813100;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";nonce=\"TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1790812800;expires=1790813100;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";nonce=\"TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:",
+      "emitted_headers": {
+        "authorization": [
+          ""
+        ],
+        "content-digest": [
+          "sha-256=:9D9PY/hvL0Rukm8JVOveoHYVBWp5iAhJcGnCSuyJlPo=:"
+        ],
+        "signature": [
+          "sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:"
+        ],
+        "signature-agent": [
+          "sig1=\"https://research.acme.com\""
+        ],
+        "signature-input": [
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1790812800;expires=1790813100;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"ed25519\";nonce=\"TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg\";tag=\"web-bot-auth\""
+        ]
+      }
+    },
+    {
+      "name": "doc_broker_example",
+      "method": "POST",
+      "url": "https://exchange.example/fora.v1.ExchangeService/DiscoverResources",
+      "body_hex": "7b22766572223a22312e30222c2265786368616e6765223a2265786368616e67652e6578616d706c65222c22726571756573746572223a7b226964223a2272657365617263682d626f742d3432222c22646f6d61696e223a2272657365617263682e61636d652e636f6d222c2274797065223a225245515545535445525f545950455f4147454e54227d2c2275726973223a5b2268747470733a2f2f7075626c69736865722e6578616d706c652f7072656d69756d2f61692d66756e64696e672d726f756e647570225d2c22646561646c696e65223a22302e3473227d",
+      "authorization": "",
+      "signature_agent": "https://broker.example",
+      "keyid": "poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U",
+      "created": 1790812801,
+      "expires": 1790813101,
+      "nonce": "7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg",
+      "signer_seed_hex": "9f8362f87a484a954e6e740c5b4c0e84229139a20aa8ab56ff66586f6a7d29c5",
+      "pubkey_b64url": "JrQLj5P_89iXES9-vFgrIy29clF9CC_oPPsw3c5D0bs",
+      "content_digest": "sha-256=:FKKQPDds8rayE2fEUjhwSCgsyuVv4pmrHLM6S0MiZQM=:",
+      "signature_base": "\"@method\": POST\n\"@target-uri\": https://exchange.example/fora.v1.ExchangeService/DiscoverResources\n\"content-digest\": sha-256=:FKKQPDds8rayE2fEUjhwSCgsyuVv4pmrHLM6S0MiZQM=:\n\"authorization\": \n\"signature-agent\";key=\"sig1\": \"https://broker.example\"\n\"@signature-params\": (\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1790812801;expires=1790813101;keyid=\"poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U\";alg=\"ed25519\";nonce=\"7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg\";tag=\"web-bot-auth\"",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1790812801;expires=1790813101;keyid=\"poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U\";alg=\"ed25519\";nonce=\"7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:TVAmOQwm7x09EoMAUGPifHsGEGOxV7hqN9CF12Wb7SsWp2Kx2BxAKu8N+8fjprpL3ipAxkGk2rhonqMxW8XIBg==:",
+      "emitted_headers": {
+        "authorization": [
+          ""
+        ],
+        "content-digest": [
+          "sha-256=:FKKQPDds8rayE2fEUjhwSCgsyuVv4pmrHLM6S0MiZQM=:"
+        ],
+        "signature": [
+          "sig1=:TVAmOQwm7x09EoMAUGPifHsGEGOxV7hqN9CF12Wb7SsWp2Kx2BxAKu8N+8fjprpL3ipAxkGk2rhonqMxW8XIBg==:"
         ],
         "signature-agent": [
-          "https://relay.example"
+          "sig1=\"https://broker.example\""
         ],
         "signature-input": [
-          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600;nonce=\"EBESExQVFhcYGRobHB0eHw\""
+          "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1790812801;expires=1790813101;keyid=\"poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U\";alg=\"ed25519\";nonce=\"7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg\";tag=\"web-bot-auth\""
         ]
       }
     }
diff --git a/sdk/go/helpers/testdata/verify-request-accept-vectors.json b/sdk/go/helpers/testdata/verify-request-accept-vectors.json
new file mode 100644
index 00000000..9db99c35
--- /dev/null
+++ b/sdk/go/helpers/testdata/verify-request-accept-vectors.json
@@ -0,0 +1,140 @@
+{
+  "vectors": [
+    {
+      "name": "accept_signed_by_the_sdk",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "Bearer neg-token",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_legacy_string_signature_agent",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:JezIokSCVbdkFHsRAwrMt776NhvZLFNzuUt0BQxQwsXfts9trdwEf+rw3sICRH19DjUs2gwIm/r+PkaqcrFYBg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_member_key_differs_from_label",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "agent=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"agent\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:B0e7tpJ+7CdMWK5Jm7gu9TDQ2nJbj1SHUbfzuxnxqwbISlMbd+VBu/W9qfnCp9XcL65xLvMM1v9oSlI/jhCRBA==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_member_type_directory",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\";type=\"directory\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:zCLkFaBSVVlXe2qceHNu2owOqyGjL2vf4T/OyES3lgCi2RJmNGevnotVA/vEkwKUqYEW9rp2NLWLwgzEeGfhBQ==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_member_type_directory_token",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\";type=directory",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:sVew3HFyeY21N8PSuJCPrRvh7l8AGBEu4SsZcD5Sa6OCcaUdBUsHycMUrRwTL4HuIoJ8NeK739jEZPYwNDIcAQ==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_no_nonce",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:vXU8RNeV8QwKSBy06ZdLp/48N+stcgT3hNlIaHxsQi6ht2PZJexGWWnvSPKU1KAgSsSBuvdtcsGy3kRCViWOBg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_other_members_beside",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "other=\"https://other.example\", sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:vXU8RNeV8QwKSBy06ZdLp/48N+stcgT3hNlIaHxsQi6ht2PZJexGWWnvSPKU1KAgSsSBuvdtcsGy3kRCViWOBg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_nonce_of_other_length",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODw\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:8W4k1nPeTiuth1BJtsooDj2HVEkzltTTnVAKWawFJGcjMROs2Wv58gUDfRlgO9gMTZwD+KVrlXRUS3s0yfIjBg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
+    }
+  ]
+}
diff --git a/sdk/go/helpers/testdata/verify-request-neg-vectors.json b/sdk/go/helpers/testdata/verify-request-neg-vectors.json
index d407ed6e..72409cd2 100644
--- a/sdk/go/helpers/testdata/verify-request-neg-vectors.json
+++ b/sdk/go/helpers/testdata/verify-request-neg-vectors.json
@@ -6,10 +6,10 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "Bearer neg-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:kFrzph8OiiChkwAlo9+8O1A5l84uJ+AXWz071nReDGjVcZJ8v0ALs6l58zcQllMMepXnawkDBph579tVNTi0BA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDw==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
@@ -22,10 +22,10 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "Bearer neg-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:kFrzph8OiiChkwAlo9+8O1A5l84uJ+AXWz071nReDGjVcZJ8v0ALs6l58zcQllMMepXnawkDBph579tVNTi0BQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
@@ -39,14 +39,14 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "Bearer neg-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:kFrzph8OiiChkwAlo9+8O1A5l84uJ+AXWz071nReDGjVcZJ8v0ALs6l58zcQllMMepXnawkDBph579tVNTi0BQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
-      "now": 1700000900,
+      "now": 1700000400,
       "expected_reason": "signature"
     },
     {
@@ -55,10 +55,10 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "Bearer neg-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:kFrzph8OiiChkwAlo9+8O1A5l84uJ+AXWz071nReDGjVcZJ8v0ALs6l58zcQllMMepXnawkDBph579tVNTi0BQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8UrwZkrw6fnyTxnkhaC4nZtVWh5CbnBpBWq1DX7caFM",
@@ -71,10 +71,26 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "Bearer neg-token-tampered",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "neg_repointed_signature_agent",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "Bearer neg-token",
+      "signature_agent": "sig1=\"https://evil.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:kFrzph8OiiChkwAlo9+8O1A5l84uJ+AXWz071nReDGjVcZJ8v0ALs6l58zcQllMMepXnawkDBph579tVNTi0BQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
@@ -87,15 +103,16 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "Bearer neg-token",
-      "signature_agent": "https://agent.example",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:kFrzph8OiiChkwAlo9+8O1A5l84uJ+AXWz071nReDGjVcZJ8v0ALs6l58zcQllMMepXnawkDBph579tVNTi0BQ==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
       "now": 1700000100,
       "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\" \"x-entitlement-token\");created;expires;tag=\"web-bot-auth\"",
       "entitlement": "jwt:demo-unsigned-entitlement-token"
     },
     {
@@ -104,15 +121,16 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:ZePP+OYkM0QYffvMiEKiQAV5mGn4ArnEew2nV1jKN/YsXsaPkFwfAAKZTscQHvXGnG4qr52YdhkOMQL3+PCpCA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:vXU8RNeV8QwKSBy06ZdLp/48N+stcgT3hNlIaHxsQi6ht2PZJexGWWnvSPKU1KAgSsSBuvdtcsGy3kRCViWOBg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
       "now": 1700000100,
       "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\" \"x-entitlement-token\");created;expires;tag=\"web-bot-auth\"",
       "extra_headers": {
         "X-Entitlement-Token": "",
         "x-entitlement-token": "jwt:unsigned-capability-token"
@@ -124,10 +142,10 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:ZePP+OYkM0QYffvMiEKiQAV5mGn4ArnEew2nV1jKN/YsXsaPkFwfAAKZTscQHvXGnG4qr52YdhkOMQL3+PCpCA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:vXU8RNeV8QwKSBy06ZdLp/48N+stcgT3hNlIaHxsQi6ht2PZJexGWWnvSPKU1KAgSsSBuvdtcsGy3kRCViWOBg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
@@ -143,15 +161,16 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:ZePP+OYkM0QYffvMiEKiQAV5mGn4ArnEew2nV1jKN/YsXsaPkFwfAAKZTscQHvXGnG4qr52YdhkOMQL3+PCpCA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:vXU8RNeV8QwKSBy06ZdLp/48N+stcgT3hNlIaHxsQi6ht2PZJexGWWnvSPKU1KAgSsSBuvdtcsGy3kRCViWOBg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
       "now": 1700000100,
       "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\"",
       "omit_headers": [
         "Signature-Agent"
       ]
@@ -162,10 +181,10 @@
       "url": "https://broker.example/fora.v1.BrokerService/Fetch",
       "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
       "authorization": "",
-      "signature_agent": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
       "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
-      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");keyid=\"mcp.v1\";alg=\"ed25519\";created=1700000000;expires=1700000600",
-      "signature": "sig1=:ZePP+OYkM0QYffvMiEKiQAV5mGn4ArnEew2nV1jKN/YsXsaPkFwfAAKZTscQHvXGnG4qr52YdhkOMQL3+PCpCA==:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:vXU8RNeV8QwKSBy06ZdLp/48N+stcgT3hNlIaHxsQi6ht2PZJexGWWnvSPKU1KAgSsSBuvdtcsGy3kRCViWOBg==:",
       "keyid": "mcp.v1",
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
@@ -174,6 +193,161 @@
       "extra_headers": {
         "Authorization": "Bearer unsigned-token"
       }
+    },
+    {
+      "name": "neg_missing_tag",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\"",
+      "signature": "sig1=:Aa34qEGycABkl1PKkO/5amVNoR+aB29cYXcnapKq0yXtViVi1eXKeDuYU5b+KUYxi3e8e31OlmtL9/9RKil1BA==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+    },
+    {
+      "name": "neg_wrong_tag",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"other-tag\"",
+      "signature": "sig1=:x611jOAVba/4KqqhUnVHUWguwxltfrwGNlk3IXhYGvLXB2JdNyZ9tvIJ/pfNq6s9PdauqFWWpm8sTYJnsbDGCQ==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+    },
+    {
+      "name": "neg_bare_signature_agent",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "https://agent.example",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:nvVUjK7Mc+yFqM3phhK5AYdIYu4VVUuh6tn1eXonCCV4SGc+W8fILt+v71DltSwrQL5jBdYYmgN796XwC2n2DA==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+    },
+    {
+      "name": "neg_signature_agent_member_absent",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "agent2=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:vXU8RNeV8QwKSBy06ZdLp/48N+stcgT3hNlIaHxsQi6ht2PZJexGWWnvSPKU1KAgSsSBuvdtcsGy3kRCViWOBg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+    },
+    {
+      "name": "neg_signature_agent_type_not_directory",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\";type=\"jwks\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:n9iMLNt/S01NzHtUr+XJ8UL9BaGWqPHgDwb+HopVRXRGLiw/RN3g43G732VEsZnRvRUMLFible/ufonqvTOcAg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+    },
+    {
+      "name": "neg_signature_agent_not_https_origin",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"http://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:sJNvk/gaG94hiwnN9u2MZKUIQR5JQNd8PJCoXLHBi9qirEieTC/qIrYWYPCxBoGYhePywcHgI5m59w053BdyBQ==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "neg_signature_agent_not_an_origin",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example/keys\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:C1qthnVUy4hSQwl7yHi+T0MaeAgHd492zrk0rrH4xWaalXFSKLjcv7akxko28wYeEBMa/4fvJlw9XWoEcI4ICw==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "neg_missing_fora_component",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZunOSYLpSje98uKfcjgnYhhj7Q/8IQuSK5171AVVz1ymDDPgmRQqZCofSc0upaQ61pAuHTUToKxMk4e/iwBBCg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+    },
+    {
+      "name": "neg_unsigned",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "Bearer neg-token",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"ed25519\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:ZeI8dvIGjPotGIbXNG8iOsHfUdSkz2PAo8ClP1kuA1ipY79ITDJIlhBbTgZzyu4k4JKKL5gTlNefEWxgxT1vDg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\"",
+      "omit_headers": [
+        "Signature-Input",
+        "Signature"
+      ]
     }
   ]
 }
diff --git a/sdk/go/helpers/testdata/wire-constants-vectors.json b/sdk/go/helpers/testdata/wire-constants-vectors.json
index 56347971..ca8ba120 100644
--- a/sdk/go/helpers/testdata/wire-constants-vectors.json
+++ b/sdk/go/helpers/testdata/wire-constants-vectors.json
@@ -47,6 +47,26 @@
     {
       "name": "ExchangeHeader",
       "value": "X-FORA-Exchange"
+    },
+    {
+      "name": "WBATag",
+      "value": "web-bot-auth"
+    },
+    {
+      "name": "DirectoryResponseTag",
+      "value": "http-message-signatures-directory"
+    },
+    {
+      "name": "AcceptSignatureHeader",
+      "value": "Accept-Signature"
+    },
+    {
+      "name": "AcceptSignature",
+      "value": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+    },
+    {
+      "name": "AcceptSignatureWithEntitlement",
+      "value": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\" \"x-entitlement-token\");created;expires;tag=\"web-bot-auth\""
     }
   ]
 }
diff --git a/sdk/go/helpers/verify.go b/sdk/go/helpers/verify.go
index 4122021f..9697eff1 100644
--- a/sdk/go/helpers/verify.go
+++ b/sdk/go/helpers/verify.go
@@ -35,11 +35,13 @@ var (
 	ErrFutureCreated            = errors.New("helpers: signature created in the future")
 	ErrMissingCreated           = errors.New("helpers: missing created param")
 	ErrMissingExpires           = errors.New("helpers: missing expires param")
-	// ErrBrokenSignatureChain signals a multisig request whose signatures do not
-	// form a valid forwarding chain: labels are non-contiguous, reordered, or a
-	// sigN (N>1) does not cover exactly its predecessor via
-	// "signature";key="sigN-1" (forwarding chain, RFC 9421 §2.4).
-	ErrBrokenSignatureChain = errors.New("helpers: signature chain broken (gap/reorder/missing link)")
+	// ErrBrokenSignatureChain signals a signature that covers an earlier signature
+	// incompletely or not at all as WG-00 §5.2.2 requires: it covers
+	// "signature";key=X without "signature-input";key=X or without every component
+	// X lists, or it names a label that is not a signature appearing before it on
+	// the request. Covering an earlier signature is optional; covering one
+	// partially is refused.
+	ErrBrokenSignatureChain = errors.New("helpers: signature covers an earlier signature incompletely")
 	// ErrTooManyHops signals that the number of signatures on a request exceeds
 	// the verifier's configured MaxSignatures budget (Exchange hop bound).
 	ErrTooManyHops = errors.New("helpers: signature count exceeds hop budget")
@@ -58,11 +60,12 @@ const defaultMaxFutureSkew = 300 * time.Second
 type VerifyOptions struct {
 	Now           time.Time
 	MaxFutureSkew time.Duration
-	// MaxSignatures bounds the number of signatures accepted on a multisig
-	// request — the Exchange hop bound. 0 means unbounded; only the
-	// Exchange-terminal consumer sets it (= max_intermediary_hops + 1). A request
-	// carrying more signatures is rejected with ErrTooManyHops before any
-	// signature is cryptographically verified. Ignored by single-sig VerifyRequest.
+	// MaxSignatures bounds the number of signatures accepted on a request — the
+	// hop budget. Every signature counts, whether or not it covers another. 0
+	// means unbounded; the Exchange-terminal consumer sets it
+	// (= max_intermediary_hops + 1). A request carrying more signatures is
+	// rejected with ErrTooManyHops before any signature is cryptographically
+	// verified. Ignored by single-sig VerifyRequest.
 	MaxSignatures int
 	// MaxSignatureAge clamps a signature's declared lifetime (expires − created).
 	// MaxFutureSkew only bounds the future edge; without an upper bound on the
@@ -78,17 +81,18 @@ type VerifyOptions struct {
 // the signature verified against, carried so downstream consumers bind to the
 // proven key (e.g. its RFC 7638 thumbprint as agent_id) rather than re-resolving
 // the claimed KeyID.
+//
+// SignatureAgent is the https origin of the signer's key directory: the value of
+// the Signature-Agent member this signature covers, the directory its keyid was
+// resolved in. It is covered, so it is signed.
 type VerifiedRequest struct {
-	KeyID     string
-	Algorithm string
-	Label     string
-	Signature string
-	Created   int64
-	Expires   int64
-	PublicKey ed25519.PublicKey
-	// SignatureAgent is the (covered, therefore signed) Signature-Agent header
-	// value — the signer's WBA key-directory URL. Empty when the signer bound
-	// no directory (the static bootstrap path).
+	KeyID          string
+	Algorithm      string
+	Label          string
+	Signature      string
+	Created        int64
+	Expires        int64
+	PublicKey      ed25519.PublicKey
 	SignatureAgent string
 }
 
@@ -104,24 +108,28 @@ func VerifyRequest(req *http.Request, body []byte, pub ed25519.PublicKey, opts V
 	if err != nil {
 		return nil, err
 	}
-	return verifySingleSignature(req, allParams[0], sigMap, body, staticPub(pub), opts)
+	return verifySingleSignature(req, allParams[0], sigMap, body, staticPub(pub), opts, len(allParams))
 }
 
 // resolveFunc adapts a fixed public key or a KeyResolver to the lookup shape
-// verifySingleSignature needs.
-type resolveFunc func(keyID string) (ed25519.PublicKey, error)
+// verifySingleSignature needs: the key a keyid names in the key directory at the
+// given https origin, the one the signature's own Signature-Agent member names.
+type resolveFunc func(directory, keyID string) (ed25519.PublicKey, error)
 
 func staticPub(pub ed25519.PublicKey) resolveFunc {
-	return func(string) (ed25519.PublicKey, error) { return pub, nil }
+	return func(string, string) (ed25519.PublicKey, error) { return pub, nil }
 }
 
-// verifySingleSignature runs the full per-signature validation chain (alg,
-// covered-component policy, entitlement coverage, created/expires window,
-// content-digest, then the Ed25519 check over the signature base). Shared by the
-// single-sig and multisig paths so both judge a signature by identical rules.
+// verifySingleSignature runs the full per-signature validation chain (alg, the
+// Web Bot Auth tag, the FORA RPC components, the signature's own Signature-Agent
+// member, entitlement coverage, created/expires window, content-digest, then the
+// key the member's directory publishes and the Ed25519 check over the signature
+// base). Shared by the single-sig and multisig paths so both judge a signature by
+// identical rules. sigCount is the number of signatures on the request: the legacy
+// String form of Signature-Agent is accepted only when it is one.
 func verifySingleSignature(
 	req *http.Request, params sigParams, sigMap map[string][]byte,
-	body []byte, resolve resolveFunc, opts VerifyOptions,
+	body []byte, resolve resolveFunc, opts VerifyOptions, sigCount int,
 ) (*VerifiedRequest, error) {
 	now := opts.Now
 	if now.IsZero() {
@@ -134,9 +142,16 @@ func verifySingleSignature(
 	if !strings.EqualFold(params.Alg, AlgEd25519) {
 		return nil, fmt.Errorf("%w: alg=%q", ErrUnsupportedAlgorithm, params.Alg)
 	}
+	if params.Tag != WBATag {
+		return nil, fmt.Errorf("%w: tag=%q", ErrSignatureTag, params.Tag)
+	}
 	if err := enforceRequiredComponents(params.Covered); err != nil {
 		return nil, err
 	}
+	directory, err := signatureDirectory(req.Header, params, sigCount)
+	if err != nil {
+		return nil, err
+	}
 	if err := enforceEntitlementCoverage(req.Header, params.Covered); err != nil {
 		return nil, err
 	}
@@ -146,7 +161,7 @@ func verifySingleSignature(
 	if err := verifyContentDigest(req.Header, body, params.Covered); err != nil {
 		return nil, err
 	}
-	pub, err := resolve(params.KeyID)
+	pub, err := resolve(directory, params.KeyID)
 	if err != nil {
 		return nil, err
 	}
@@ -165,86 +180,17 @@ func verifySingleSignature(
 		return nil, ErrSignatureVerify
 	}
 	return &VerifiedRequest{
-		KeyID:     params.KeyID,
-		Algorithm: params.Alg,
-		Label:     params.Label,
-		Signature: base64.StdEncoding.EncodeToString(sigBytes),
-		Created:   params.Created,
-		Expires:   params.Expires,
-		PublicKey: pub,
-		// Signature-Agent is a required covered component (enforced above), so
-		// its value is signed and safe to expose as the proven directory.
-		SignatureAgent: signatureAgentOf(req),
+		KeyID:          params.KeyID,
+		Algorithm:      params.Alg,
+		Label:          params.Label,
+		Signature:      base64.StdEncoding.EncodeToString(sigBytes),
+		Created:        params.Created,
+		Expires:        params.Expires,
+		PublicKey:      pub,
+		SignatureAgent: directory,
 	}, nil
 }
 
-// signatureAgentOf returns the directory URI carried in the request's
-// Signature-Agent header. The covered-component enforcement above guarantees the
-// header is signed whenever this value is consumed off a VerifiedRequest.
-//
-// Two forms are accepted, and both yield the bare URI:
-//
-//	"https://a.example"   an RFC 8941 String, which is what Web Bot Auth defines
-//	                      the value to be. Quoting is not optional in structured
-//	                      fields — a String has exactly one serialization — so this
-//	                      is the form a conformant signer sends.
-//	https://a.example     the bare form FORA itself emits. Despite appearances this
-//	                      is not "an unquoted string": it parses as a Token, since
-//	                      RFC 8941 tokens admit ":" and "/". Accepted so FORA's own
-//	                      legs keep verifying while signers migrate.
-//
-// Anything neither parser accepts is returned trimmed but otherwise verbatim, so
-// a value this reader cannot type still reaches the caller unchanged rather than
-// becoming empty. "bücher.example" is the case that matters: no structured-field
-// parser admits it — tokens are ASCII — and it is an ordinary host that resolves.
-//
-// Verbatim here does NOT mean usable. This function types the wire value and
-// nothing more; whether the result names a fetchable directory is decided later,
-// and some values that survive this step are refused there ("agent_(1).example"
-// surfaces intact and is then rejected as not a host). Keeping the two apart is
-// deliberate — a reader that also judged fetchability would have to know what the
-// caller intends to do with the value.
-//
-// There is a THIRD outcome the two above do not cover: an item carrying
-// structured-field parameters yields its value with the parameters dropped, so
-// `https://a.example;q=1` surfaces as `https://a.example`. That is the right
-// reading — no parameter is defined for this field, and folding one into the URI
-// would produce a host nothing resolves — but it does WIDEN what reaches the
-// resolver, since the parameterized spelling used to be an unresolvable host and
-// is now a fetchable one. It grants a signer nothing it could not already get by
-// sending the bare form, and the value still has to survive host validation.
-//
-// The spec's sf-dictionary form (`agent2="https://a.example"`) is deliberately
-// NOT read, and neither is the data: URI scheme that inlines a whole key
-// directory into the header. Both are refused as a matter of FORA policy rather
-// than for want of a parser: an inline directory has no fetch location, and the
-// fetch location is the security boundary this SDK's key resolution rests on — a
-// signer that supplies its own directory is asserting its own keys. Such a value
-// falls through to the verbatim branch here and is rejected downstream, where the
-// directory has to resolve to a real host.
-func signatureAgentOf(req *http.Request) string {
-	// Values joined the way the signature base joins them, NOT Get. Get returns
-	// only the first field line, so a repeated Signature-Agent header would have
-	// the identity derived from one value while the signature committed to both —
-	// the two readings of one header must not diverge.
-	raw := strings.TrimSpace(strings.Join(req.Header.Values(SignatureAgentHeader), ", "))
-	if raw == "" {
-		return ""
-	}
-	item, err := httpsfv.UnmarshalItem([]string{raw})
-	if err != nil {
-		return raw
-	}
-	switch v := item.Value.(type) {
-	case string:
-		return v // String: the parser has already stripped the quotes
-	case httpsfv.Token:
-		return string(v)
-	default:
-		return raw
-	}
-}
-
 func enforceRequiredComponents(covered []CoveredComponent) error {
 	seen := make(map[string]bool, len(covered))
 	for _, c := range covered {
@@ -252,7 +198,7 @@ func enforceRequiredComponents(covered []CoveredComponent) error {
 	}
 	for _, need := range requiredCoveredComponents {
 		if !seen[need] {
-			return fmt.Errorf("%w: %s", ErrMissingRequiredComponent, need)
+			return &MissingComponentError{Component: need}
 		}
 	}
 	return nil
@@ -274,7 +220,7 @@ func enforceEntitlementCoverage(h http.Header, covered []CoveredComponent) error
 			return nil
 		}
 	}
-	return fmt.Errorf("%w: %s", ErrMissingRequiredComponent, entitlementHeaderLower)
+	return &MissingComponentError{Component: entitlementHeaderLower}
 }
 
 func enforceCreatedExpires(p sigParams, now time.Time, maxSkew, maxAge time.Duration) error {
@@ -451,9 +397,10 @@ func parseInputLabel(d *httpsfv.Dictionary, label string) (sigParams, error) {
 }
 
 // coveredFromItem converts one structured-field item (a covered-component
-// identifier such as "@method" or "signature";key="sig1") into a
-// CoveredComponent. Only string-valued component params are carried (the
-// forwarding-chain key= param is the only one FORA emits).
+// identifier such as "@method" or "signature-agent";key="sig1") into a
+// CoveredComponent. String-valued component params and Boolean flags are carried:
+// key= is the only one a request signature uses, and req the only one a directory
+// response signature uses.
 func coveredFromItem(item httpsfv.Item) (CoveredComponent, error) {
 	name, ok := item.Value.(string)
 	if !ok {
@@ -468,6 +415,10 @@ func coveredFromItem(item httpsfv.Item) (CoveredComponent, error) {
 		if !present {
 			continue
 		}
+		if v == true {
+			comp.Params = append(comp.Params, ComponentParam{Key: k, Flag: true})
+			continue
+		}
 		sv, isStr := v.(string)
 		if !isStr {
 			return CoveredComponent{}, fmt.Errorf("%w: component param %q not a string", ErrMalformedSignatureInput, k)
@@ -477,8 +428,8 @@ func coveredFromItem(item httpsfv.Item) (CoveredComponent, error) {
 	return comp, nil
 }
 
-// applySignatureParams reads the keyid/alg/created/expires signature parameters
-// off the inner list's params into p.
+// applySignatureParams reads the keyid/alg/created/expires/nonce/tag signature
+// parameters off the inner list's params into p.
 func applySignatureParams(p *sigParams, params *httpsfv.Params) error {
 	if params == nil {
 		return nil
@@ -511,6 +462,20 @@ func applySignatureParams(p *sigParams, params *httpsfv.Params) error {
 		}
 		p.Expires = n
 	}
+	if v, ok := params.Get("nonce"); ok {
+		s, isStr := v.(string)
+		if !isStr {
+			return fmt.Errorf("%w: nonce not a string", ErrMalformedSignatureInput)
+		}
+		p.Nonce = s
+	}
+	if v, ok := params.Get("tag"); ok {
+		s, isStr := v.(string)
+		if !isStr {
+			return fmt.Errorf("%w: tag not a string", ErrMalformedSignatureInput)
+		}
+		p.Tag = s
+	}
 	return nil
 }
 
@@ -533,27 +498,14 @@ func parseSigLabel(d *httpsfv.Dictionary, label string) ([]byte, error) {
 	return raw, nil
 }
 
-// signatureBytesForLabel parses the Signature header off h and returns the raw
-// signature bytes for label. It backs the forwarding-chain link resolution:
-// a predecessor hop's signature is referenced by label from the
-// current hop's covered "signature";key="…" component.
-func signatureBytesForLabel(h http.Header, label string) ([]byte, error) {
-	sigValues := h.Values("Signature")
-	if len(sigValues) == 0 {
-		return nil, ErrMissingSignature
-	}
-	sigDict, err := httpsfv.UnmarshalDictionary(sigValues)
-	if err != nil {
-		return nil, fmt.Errorf("%w: Signature: %w", ErrMalformedSignatureInput, err)
-	}
-	return parseSigLabel(sigDict, label)
-}
-
-// VerifyMultisigRequest verifies ALL signatures on req against keys from
-// resolve, returning the VerifiedRequest list in label order (sig1, sig2, …).
-// It rejects a chain exceeding opts.MaxSignatures (when set) before any crypto,
-// enforces the structural forwarding chain, then cryptographically verifies each
-// signature — so a stripped, reordered, or substituted predecessor is rejected.
+// VerifyMultisigRequest verifies EVERY signature on req, resolving each one's key
+// through resolve with the directory its own covered Signature-Agent member
+// names, and returns the VerifiedRequest list in header order. It rejects a
+// request carrying more than opts.MaxSignatures signatures before any crypto,
+// then checks that every coverage of an earlier signature is complete (WG-00
+// §5.2.2), then verifies each signature independently. A request is refused if
+// any one signature fails. A signature need not cover another; one that does must
+// cover it completely.
 func VerifyMultisigRequest(req *http.Request, body []byte, resolve resolveFunc, opts VerifyOptions) ([]VerifiedRequest, error) {
 	allParams, sigMap, err := parseAllSignatures(req.Header)
 	if err != nil {
@@ -562,12 +514,12 @@ func VerifyMultisigRequest(req *http.Request, body []byte, resolve resolveFunc,
 	if opts.MaxSignatures > 0 && len(allParams) > opts.MaxSignatures {
 		return nil, fmt.Errorf("%w: got %d max %d", ErrTooManyHops, len(allParams), opts.MaxSignatures)
 	}
-	if err := enforceSignatureChain(allParams); err != nil {
+	if err := enforceEarlierCoverage(allParams); err != nil {
 		return nil, err
 	}
 	verified := make([]VerifiedRequest, 0, len(allParams))
 	for _, params := range allParams {
-		v, verr := verifySingleSignature(req, params, sigMap, body, resolve, opts)
+		v, verr := verifySingleSignature(req, params, sigMap, body, resolve, opts, len(allParams))
 		if verr != nil {
 			return nil, verr
 		}
@@ -576,44 +528,52 @@ func VerifyMultisigRequest(req *http.Request, body []byte, resolve resolveFunc,
 	return verified, nil
 }
 
-// enforceSignatureChain checks that allParams form a valid forwarding chain:
-// labels are exactly sig1..sigN contiguous in Signature-Input order,
-// sig1 carries no "signature" component, and every sigK (K>1) covers exactly one
-// "signature";key="sig(K-1)" link to its immediate predecessor. This is the
-// STRUCTURAL gate only; the cryptographic binding is enforced by the per-sig
-// verify (each sigK's base resolves its chain link to the live bytes of
-// sig(K-1)). A single signature trivially satisfies the chain.
-func enforceSignatureChain(allParams []sigParams) error {
+// enforceEarlierCoverage applies WG-00 §5.2.2 to every signature that covers
+// another: for each covered "signature";key=X, X must be a signature that appears
+// earlier in Signature-Input, and the signature must also cover
+// "signature-input";key=X and every component X lists. A covered
+// "signature-input";key=X must likewise name an earlier signature. Labels carry no
+// meaning beyond naming: sig1..sigN is a signer's convention, not a rule.
+func enforceEarlierCoverage(allParams []sigParams) error {
+	position := make(map[string]int, len(allParams))
 	for i, p := range allParams {
-		wantLabel := fmt.Sprintf("sig%d", i+1)
-		if p.Label != wantLabel {
-			return fmt.Errorf("%w: label %q at position %d, want %q", ErrBrokenSignatureChain, p.Label, i+1, wantLabel)
-		}
-		link, count := chainLink(p.Covered)
-		if i == 0 {
-			if count != 0 {
-				return fmt.Errorf("%w: sig1 must not carry a signature component", ErrBrokenSignatureChain)
+		position[p.Label] = i
+	}
+	for i, p := range allParams {
+		for _, c := range p.Covered {
+			name := strings.ToLower(c.Name)
+			if name != "signature" && name != "signature-input" {
+				continue
+			}
+			key := componentParam(c, "key")
+			at, ok := position[key]
+			if key == "" || !ok || at >= i {
+				return fmt.Errorf("%w: %s covers %s;key=%q, which is not an earlier signature",
+					ErrBrokenSignatureChain, p.Label, name, key)
+			}
+			if name == "signature" {
+				if err := coversEarlierFully(p, allParams[at]); err != nil {
+					return err
+				}
 			}
-			continue
-		}
-		wantPrev := fmt.Sprintf("sig%d", i)
-		if count != 1 || link != wantPrev {
-			return fmt.Errorf("%w: %s must cover exactly \"signature\";key=%q (got %d links, key=%q)",
-				ErrBrokenSignatureChain, wantLabel, wantPrev, count, link)
 		}
 	}
 	return nil
 }
 
-// chainLink returns the key parameter of the single "signature" covered
-// component and the number of "signature" components present. A well-formed link
-// has count == 1; count == 0 means no link, count > 1 is malformed.
-func chainLink(covered []CoveredComponent) (key string, count int) {
-	for _, c := range covered {
-		if strings.EqualFold(c.Name, "signature") {
-			count++
-			key = componentParam(c, "key")
+// coversEarlierFully reports whether p, which covers prev's Signature member, also
+// covers prev's Signature-Input member and every component prev lists.
+func coversEarlierFully(p, prev sigParams) error {
+	link := CoveredComponent{Name: "signature-input", Params: []ComponentParam{{Key: "key", Val: prev.Label}}}
+	if !coversComponent(p.Covered, link) {
+		return fmt.Errorf("%w: %s covers signature;key=%q without signature-input;key=%q",
+			ErrBrokenSignatureChain, p.Label, prev.Label, prev.Label)
+	}
+	for _, c := range prev.Covered {
+		if !coversComponent(p.Covered, c) {
+			return fmt.Errorf("%w: %s covers %s without %s, which %s lists",
+				ErrBrokenSignatureChain, p.Label, prev.Label, renderComponent(c), prev.Label)
 		}
 	}
-	return key, count
+	return nil
 }
diff --git a/sdk/go/helpers/verify_test.go b/sdk/go/helpers/verify_test.go
index 85e1ebbc..c14a3ae0 100644
--- a/sdk/go/helpers/verify_test.go
+++ b/sdk/go/helpers/verify_test.go
@@ -19,8 +19,14 @@ const (
 
 var tNow = time.Unix(1700000100, 0) // inside [created, expires]
 
-// signResolvedFixture builds a signed request carrying signatureAgent in its
-// Signature-Agent header, plus a spy KeyResolver that records the directory the
+// tAgent and tBroker are the key-directory origins the fixtures sign as.
+const (
+	tAgent  = "https://agent.example"
+	tBroker = "https://broker.example"
+)
+
+// signResolvedFixture builds a request signed as signatureAgent, the origin its
+// Signature-Agent member names, plus a spy KeyResolver that records the directory the
 // SDK threaded into the resolution context. It exists because the
 // resolver-context assertions need a keyID the resolver can be seeded with, which
 // signFixture does not expose — every such test was otherwise re-inlining the
@@ -46,9 +52,8 @@ func signResolvedFixture(t *testing.T, body []byte, keyID, signatureAgent string
 	if err != nil {
 		t.Fatal(err)
 	}
-	req.Header.Set(helpers.SignatureAgentHeader, signatureAgent)
 	if err := helpers.SignRequest(context.Background(), req, body, signer,
-		helpers.SignOptions{Created: tCreated, Expires: tExpires}); err != nil {
+		helpers.SignOptions{Created: tCreated, Expires: tExpires, SignatureAgent: signatureAgent}); err != nil {
 		t.Fatalf("SignRequest: %v", err)
 	}
 
@@ -79,7 +84,8 @@ func signFixture(t *testing.T, body []byte, mutate func(*http.Request)) (*http.R
 	if mutate != nil {
 		mutate(req)
 	}
-	if err := helpers.SignRequest(context.Background(), req, body, signer, helpers.SignOptions{Created: tCreated, Expires: tExpires}); err != nil {
+	if err := helpers.SignRequest(context.Background(), req, body, signer,
+		helpers.SignOptions{Created: tCreated, Expires: tExpires, SignatureAgent: tAgent}); err != nil {
 		t.Fatalf("SignRequest: %v", err)
 	}
 	return req, pub
@@ -101,6 +107,9 @@ func TestVerifyRequest_roundTrip(t *testing.T) {
 	if !pub.Equal(vr.PublicKey) {
 		t.Error("proven key should be echoed back")
 	}
+	if vr.SignatureAgent != tAgent {
+		t.Errorf("SignatureAgent = %q, want the covered member's origin %q", vr.SignatureAgent, tAgent)
+	}
 }
 
 func TestVerifyRequest_roundTripWithEntitlementToken(t *testing.T) {
diff --git a/sdk/go/helpers/verify_wireorder_test.go b/sdk/go/helpers/verify_wireorder_test.go
index ae9b7375..a7fc12a2 100644
--- a/sdk/go/helpers/verify_wireorder_test.go
+++ b/sdk/go/helpers/verify_wireorder_test.go
@@ -4,8 +4,8 @@ package helpers_test
 // VERBATIM inner list from the wire Signature-Input — parameter order is the
 // signer's choice and the verifier must honor it. These tests pin that a
 // signature whose parameter order differs from this SDK's own rendering
-// (keyid;alg;created;expires) still verifies: the platform's other RFC 9421
-// implementation emits created;expires;alg;keyid and its signatures must
+// (created;expires;keyid;alg;nonce;tag) still verifies: other Web Bot Auth
+// signers order the parameters differently and their signatures must
 // interoperate.
 
 import (
@@ -21,7 +21,7 @@ import (
 
 // wireOrderSignedRequest hand-rolls a cryptographically valid signature whose
 // @signature-params tail uses the foreign parameter order
-// created;expires;alg;keyid over the full five-component covered set.
+// tag;keyid;alg;expires;created over the full FORA RPC covered set.
 func wireOrderSignedRequest(t *testing.T, body []byte) (*http.Request, ed25519.PublicKey) {
 	t.Helper()
 	pub, priv, err := ed25519.GenerateKey(nil)
@@ -34,16 +34,16 @@ func wireOrderSignedRequest(t *testing.T, body []byte) (*http.Request, ed25519.P
 	}
 	req.Header.Set("Content-Digest", helpers.ContentDigest(body))
 	req.Header.Set("Authorization", "")
-	req.Header.Set("Signature-Agent", "https://agent.example")
+	req.Header.Set("Signature-Agent", `sig1="https://agent.example"`)
 
-	// Foreign param order: created;expires;alg;keyid (NOT this SDK's order).
-	inner := fmt.Sprintf(`("@method" "@target-uri" "content-digest" "authorization" "signature-agent");created=%d;expires=%d;alg=%q;keyid=%q`,
-		tCreated, tExpires, helpers.AlgEd25519, "agent.v1")
+	// Foreign param order: tag;keyid;alg;expires;created (NOT this SDK's order).
+	inner := fmt.Sprintf(`("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");tag="web-bot-auth";keyid=%q;alg=%q;expires=%d;created=%d`,
+		"agent.v1", helpers.AlgEd25519, tExpires, tCreated)
 	base := "\"@method\": POST\n" +
 		"\"@target-uri\": https://exchange.example/fora.v1.ExchangeService/Execute\n" +
 		"\"content-digest\": " + req.Header.Get("Content-Digest") + "\n" +
 		"\"authorization\": \n" +
-		"\"signature-agent\": https://agent.example\n" +
+		"\"signature-agent\";key=\"sig1\": \"https://agent.example\"\n" +
 		"\"@signature-params\": " + inner
 	sig := ed25519.Sign(priv, []byte(base))
 
diff --git a/sdk/go/helpers/wba.go b/sdk/go/helpers/wba.go
new file mode 100644
index 00000000..0e060eb2
--- /dev/null
+++ b/sdk/go/helpers/wba.go
@@ -0,0 +1,388 @@
+package helpers
+
+import (
+	"errors"
+	"fmt"
+	"net"
+	"net/http"
+	"net/url"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/dunglas/httpsfv"
+)
+
+// The Web Bot Auth profile of RFC 9421 request signatures, as FORA pins it:
+// draft-ietf-webbotauth-httpsig-protocol-00 ("WG-00"). The authentication page's
+// "The Web Bot Auth Profile" is the normative statement; this file holds the pieces
+// of it the signer and the verifier share.
+//
+//   - Signature-Agent is a structured-field Dictionary. The member for a signature
+//     is <label>="https://<origin>", and the signature covers it as
+//     "signature-agent";key="<label>". Each signature's keyid is resolved in the
+//     key directory its own covered member names.
+//   - Every signature carries created, expires, keyid, alg="ed25519" and
+//     tag="web-bot-auth"; a FORA signer adds a fresh nonce.
+//   - A verifier also accepts the legacy sf-string form of Signature-Agent,
+//     covered as plain "signature-agent", on a request carrying one signature, a
+//     member key that differs from the label, no nonce, and a type=directory member
+//     parameter. It refuses the bare unquoted value the v1.0.8 SDKs sent.
+
+// WBATag is the RFC 9421 tag parameter every Web Bot Auth request signature
+// carries.
+const WBATag = "web-bot-auth"
+
+// DirectoryResponseTag is the tag a key directory's response signature carries
+// (WG-00 Appendix B.1).
+const DirectoryResponseTag = "http-message-signatures-directory"
+
+// AcceptSignatureHeader is the RFC 9421 §5.1 field a verifier answers with when it
+// refuses a signature for a missing component or a form it does not accept, naming
+// what it requires (WG-00 §5.3).
+const AcceptSignatureHeader = "Accept-Signature"
+
+// MaxSignatureLifetime is the longest window (expires − created) a FORA signer
+// gives a request signature. A signature is never a long-lived credential.
+const MaxSignatureLifetime = 5 * time.Minute
+
+// directoryTypeParam is the only value of a Signature-Agent member's type
+// parameter that names a key directory. A member with any other type is ignored.
+const directoryTypeParam = "directory"
+
+// Profile errors. Each is a refusal of the signature's form; see
+// AcceptSignatureFor for which of them a verifier answers with Accept-Signature.
+var (
+	// ErrSignatureTag signals a signature with no tag, or a tag other than
+	// "web-bot-auth".
+	ErrSignatureTag = errors.New("helpers: signature tag is not \"web-bot-auth\"")
+	// ErrSignatureAgentForm signals a Signature-Agent the profile does not accept:
+	// the bare unquoted value, a member the signature names but the dictionary does
+	// not carry, a member that is not a String or whose type is not directory, the
+	// legacy String form on a request carrying more than one signature, or a
+	// signature covering several members none of which is keyed to its label.
+	ErrSignatureAgentForm = errors.New("helpers: Signature-Agent is not in a form the Web Bot Auth profile accepts")
+	// ErrSignatureAgentNotOrigin signals a Signature-Agent value that is not the
+	// ASCII serialization of an https origin: https://host[:port], lowercase, with
+	// no path, query, fragment or credentials and no default port.
+	ErrSignatureAgentNotOrigin = errors.New("helpers: Signature-Agent is not an https origin")
+	// ErrSignatureAgentRequired signals a signing call given no Signature-Agent
+	// origin. Every Web Bot Auth signature names its signer's key directory.
+	ErrSignatureAgentRequired = errors.New("helpers: a signature needs the signer's Signature-Agent origin")
+	// ErrSignatureLabel signals a signature label that is not a structured-field
+	// key, or one already used by a signature or a Signature-Agent member on the
+	// request.
+	ErrSignatureLabel = errors.New("helpers: signature label is not a free structured-field key")
+	// ErrSignatureLifetime signals a signing window that is not positive or longer
+	// than MaxSignatureLifetime.
+	ErrSignatureLifetime = errors.New("helpers: signature lifetime must be positive and at most 5 minutes")
+)
+
+// MissingComponentError is the refusal of a signature that does not cover a
+// component the route requires. errors.Is matches it against
+// ErrMissingRequiredComponent.
+type MissingComponentError struct {
+	// Component is the lowercase name of the component the signature omits.
+	Component string
+}
+
+func (e *MissingComponentError) Error() string {
+	return ErrMissingRequiredComponent.Error() + ": " + e.Component
+}
+
+// Is reports ErrMissingRequiredComponent as the sentinel this error stands for.
+func (e *MissingComponentError) Is(target error) bool { return target == ErrMissingRequiredComponent }
+
+// CheckHTTPSOrigin reports whether s is the ASCII serialization of an https
+// origin, the only value a Signature-Agent member carries in this profile:
+// "https://" followed by a lowercase host (an IP literal allowed, an IPv6 one in
+// brackets) and, only when it is not 443, ":port". Anything else wraps
+// ErrSignatureAgentNotOrigin: another scheme, uppercase, a path (even "/"), a
+// query, a fragment, credentials, or a non-ASCII host, which an origin carries
+// punycoded.
+func CheckHTTPSOrigin(s string) error {
+	rest, ok := strings.CutPrefix(s, "https://")
+	if !ok {
+		return fmt.Errorf("%w: %q does not start with https://", ErrSignatureAgentNotOrigin, s)
+	}
+	if rest == "" || strings.ContainsAny(rest, "/?#@\\%") {
+		return fmt.Errorf("%w: %q carries more than a host and port", ErrSignatureAgentNotOrigin, s)
+	}
+	for i := 0; i < len(rest); i++ {
+		if c := rest[i]; c >= 0x80 || c < 0x21 || (c >= 'A' && c <= 'Z') {
+			return fmt.Errorf("%w: %q is not a lowercase ASCII origin", ErrSignatureAgentNotOrigin, s)
+		}
+	}
+	u, err := url.Parse(s)
+	if err != nil || u.Host != rest || u.Hostname() == "" {
+		return fmt.Errorf("%w: %q is not a host[:port]", ErrSignatureAgentNotOrigin, s)
+	}
+	host := u.Hostname()
+	if strings.Contains(host, ":") && net.ParseIP(host) == nil {
+		return fmt.Errorf("%w: %q is not a host[:port]", ErrSignatureAgentNotOrigin, s)
+	}
+	if !strings.Contains(host, ":") && !isOriginHostName(host) {
+		return fmt.Errorf("%w: %q is not a host[:port]", ErrSignatureAgentNotOrigin, s)
+	}
+	if port := u.Port(); port != "" || strings.HasSuffix(rest, ":") {
+		n, perr := strconv.ParseUint(port, 10, 16)
+		if perr != nil || n == 0 || port[0] == '0' {
+			return fmt.Errorf("%w: %q carries an invalid port", ErrSignatureAgentNotOrigin, s)
+		}
+		if n == 443 {
+			return fmt.Errorf("%w: %q spells out the default port", ErrSignatureAgentNotOrigin, s)
+		}
+	}
+	return nil
+}
+
+// isOriginHostName reports whether name is a lowercase registered name or IPv4
+// literal: letters, digits, '-', '.' and '_' only, with no empty label.
+func isOriginHostName(name string) bool {
+	if name == "" || strings.HasPrefix(name, ".") || strings.Contains(name, "..") {
+		return false
+	}
+	for _, c := range name {
+		switch {
+		case c >= 'a' && c <= 'z', c >= '0' && c <= '9', c == '-', c == '.', c == '_':
+		default:
+			return false
+		}
+	}
+	return true
+}
+
+// validLabel reports whether label is a structured-field key (RFC 8941 §3.1.2):
+// lowercase letter or '*' first, then lowercase letters, digits, '_', '-', '.' or
+// '*'.
+func validLabel(label string) bool {
+	if label == "" {
+		return false
+	}
+	for i := 0; i < len(label); i++ {
+		c := label[i]
+		switch {
+		case c >= 'a' && c <= 'z', c == '*':
+		case i > 0 && ((c >= '0' && c <= '9') || c == '_' || c == '-' || c == '.'):
+		default:
+			return false
+		}
+	}
+	return true
+}
+
+// signatureAgentMember renders one Signature-Agent dictionary member for label.
+// origin has passed CheckHTTPSOrigin, so it carries no character a String would
+// have to escape.
+func signatureAgentMember(label, origin string) string {
+	return label + `="` + origin + `"`
+}
+
+// signatureAgentComponent is the covered-component identifier that binds a
+// signature to its own Signature-Agent member.
+func signatureAgentComponent(label string) CoveredComponent {
+	return CoveredComponent{Name: signatureAgentLower, Params: []ComponentParam{{Key: "key", Val: label}}}
+}
+
+// usedLabels collects every label already present on the request: the members of
+// Signature-Input and Signature, and the keys of a Signature-Agent dictionary. A
+// new signature takes a label none of them uses, so its Signature-Agent member
+// cannot collide with another signature's.
+func usedLabels(h http.Header) map[string]bool {
+	used := map[string]bool{}
+	for _, name := range []string{"Signature-Input", "Signature", SignatureAgentHeader} {
+		values := h.Values(name)
+		if len(values) == 0 {
+			continue
+		}
+		dict, err := httpsfv.UnmarshalDictionary(values)
+		if err != nil {
+			continue
+		}
+		for _, k := range dict.Names() {
+			used[k] = true
+		}
+	}
+	return used
+}
+
+// nextFreeLabel returns "sigN" for the smallest N >= 1 no label on the request
+// uses.
+func nextFreeLabel(h http.Header) string {
+	used := usedLabels(h)
+	for n := 1; ; n++ {
+		if l := "sig" + strconv.Itoa(n); !used[l] {
+			return l
+		}
+	}
+}
+
+// signatureAgentDictionary parses the request's Signature-Agent as a Dictionary,
+// joining repeated field lines the way the signature base does. An absent header
+// is an empty dictionary.
+func signatureAgentDictionary(h http.Header) (*httpsfv.Dictionary, error) {
+	values := h.Values(SignatureAgentHeader)
+	if strings.TrimSpace(strings.Join(values, ", ")) == "" {
+		return httpsfv.NewDictionary(), nil
+	}
+	dict, err := httpsfv.UnmarshalDictionary(values)
+	if err != nil {
+		return nil, fmt.Errorf("%w: not a dictionary: %w", ErrSignatureAgentForm, err)
+	}
+	return dict, nil
+}
+
+// directoryFromMember reads a Signature-Agent dictionary member as the origin of a
+// key directory. The member must be a String; a type parameter, when present,
+// must be directory, since WG-00 §5.2.1 has a verifier ignore a member of any other
+// type. The value must be an https origin.
+func directoryFromMember(m httpsfv.Member, key string) (string, error) {
+	item, ok := m.(httpsfv.Item)
+	if !ok {
+		return "", fmt.Errorf("%w: member %q is an inner list", ErrSignatureAgentForm, key)
+	}
+	origin, ok := item.Value.(string)
+	if !ok {
+		return "", fmt.Errorf("%w: member %q is not a String", ErrSignatureAgentForm, key)
+	}
+	if item.Params != nil {
+		if v, has := item.Params.Get("type"); has && !isDirectoryType(v) {
+			return "", fmt.Errorf("%w: member %q has a type other than directory", ErrSignatureAgentForm, key)
+		}
+	}
+	if err := CheckHTTPSOrigin(origin); err != nil {
+		return "", err
+	}
+	return origin, nil
+}
+
+func isDirectoryType(v any) bool {
+	switch t := v.(type) {
+	case string:
+		return t == directoryTypeParam
+	case httpsfv.Token:
+		return string(t) == directoryTypeParam
+	default:
+		return false
+	}
+}
+
+// legacyDirectory reads a Signature-Agent carried in the legacy form, a single
+// String covered as plain "signature-agent". The bare unquoted value the v1.0.8
+// SDKs sent parses as a Token, not a String, and is refused.
+func legacyDirectory(h http.Header) (string, error) {
+	values := h.Values(SignatureAgentHeader)
+	if len(values) == 0 {
+		return "", &MissingComponentError{Component: signatureAgentLower}
+	}
+	item, err := httpsfv.UnmarshalItem([]string{strings.Join(values, ", ")})
+	if err != nil {
+		return "", fmt.Errorf("%w: not a String: %w", ErrSignatureAgentForm, err)
+	}
+	origin, ok := item.Value.(string)
+	if !ok {
+		return "", fmt.Errorf("%w: the legacy form must be a quoted String", ErrSignatureAgentForm)
+	}
+	if err := CheckHTTPSOrigin(origin); err != nil {
+		return "", err
+	}
+	return origin, nil
+}
+
+// signatureDirectory returns the key-directory origin a signature names: the
+// Signature-Agent member it covers. A signature that covers an earlier one also
+// covers that signature's member (WG-00 §5.2.2), so the member followed is the one
+// keyed to the signature's own label (WG-00 §5.2.1); a signature covering exactly
+// one member follows that one, whatever its key, because the profile accepts a
+// member key that differs from the label. A signature covering several members,
+// none keyed to its label, names no directory and is refused. sigCount is the
+// number of signatures on the request, because the legacy String form, covered as
+// plain "signature-agent", is accepted only when there is one.
+func signatureDirectory(h http.Header, p sigParams, sigCount int) (string, error) {
+	var keyed []string
+	plain := 0
+	for _, c := range p.Covered {
+		if !strings.EqualFold(c.Name, signatureAgentLower) {
+			continue
+		}
+		key := componentParam(c, "key")
+		switch {
+		case key != "" && len(c.Params) == 1:
+			keyed = append(keyed, key)
+		case len(c.Params) == 0:
+			plain++
+		default:
+			return "", fmt.Errorf("%w: unsupported parameter on the signature-agent component", ErrSignatureAgentForm)
+		}
+	}
+	switch {
+	case plain == 0 && len(keyed) == 0:
+		return "", &MissingComponentError{Component: signatureAgentLower}
+	case plain > 0 && (plain > 1 || len(keyed) > 0):
+		return "", fmt.Errorf("%w: the signature covers Signature-Agent in more than one form", ErrSignatureAgentForm)
+	case plain == 1:
+		if sigCount > 1 {
+			return "", fmt.Errorf("%w: the legacy String form is accepted only on a request carrying one signature",
+				ErrSignatureAgentForm)
+		}
+		return legacyDirectory(h)
+	}
+	key := keyed[0]
+	if len(keyed) > 1 {
+		key = ""
+		for _, k := range keyed {
+			if k == p.Label {
+				key = k
+			}
+		}
+		if key == "" {
+			return "", fmt.Errorf("%w: %s covers several Signature-Agent members and none keyed to its label",
+				ErrSignatureAgentForm, p.Label)
+		}
+	}
+	if len(h.Values(SignatureAgentHeader)) == 0 {
+		return "", &MissingComponentError{Component: signatureAgentLower}
+	}
+	dict, err := signatureAgentDictionary(h)
+	if err != nil {
+		return "", err
+	}
+	member, ok := dict.Get(key)
+	if !ok {
+		return "", fmt.Errorf("%w: no member %q", ErrSignatureAgentForm, key)
+	}
+	return directoryFromMember(member, key)
+}
+
+// AcceptSignature renders the Accept-Signature value a FORA verifier answers a
+// refused RPC signature with: the components a FORA RPC signature must cover, the
+// dictionary form of Signature-Agent, and the created, expires and tag
+// parameters (RFC 9421 §5.1, WG-00 §5.3). entitlement adds x-entitlement-token,
+// for a request carrying that header.
+func AcceptSignature(entitlement bool) string {
+	covered := append(plainComponents("@method", "@target-uri", "content-digest", "authorization"),
+		signatureAgentComponent("sig1"))
+	if entitlement {
+		covered = append(covered, CoveredComponent{Name: entitlementHeaderLower})
+	}
+	return "sig1=(" + quotedList(covered) + `);created;expires;tag="` + WBATag + `"`
+}
+
+// AcceptSignatureFor returns the Accept-Signature value a verifier answers err
+// with, and whether it answers with one at all. It does for a request carrying no
+// signature, a signature that omits a required component, a signature with the
+// wrong tag, and a Signature-Agent in a form the profile refuses. It does not for
+// a signature that is well formed and fails for any other reason: a bad
+// signature, an unknown key, a stale window or a replay.
+func AcceptSignatureFor(err error) (string, bool) {
+	var missing *MissingComponentError
+	switch {
+	case errors.As(err, &missing):
+		return AcceptSignature(missing.Component == entitlementHeaderLower), true
+	case errors.Is(err, ErrMissingSignatureInput), errors.Is(err, ErrMissingSignature),
+		errors.Is(err, ErrSignatureTag), errors.Is(err, ErrSignatureAgentForm):
+		return AcceptSignature(false), true
+	default:
+		return "", false
+	}
+}
diff --git a/sdk/go/helpers/wba_internal_test.go b/sdk/go/helpers/wba_internal_test.go
new file mode 100644
index 00000000..772b3a49
--- /dev/null
+++ b/sdk/go/helpers/wba_internal_test.go
@@ -0,0 +1,67 @@
+package helpers
+
+import (
+	"crypto/ed25519"
+	"errors"
+	"net/http"
+	"testing"
+	"time"
+)
+
+// WG-00 Appendix E.2: the draft's own Ed25519 test vectors, over the RFC 9421
+// Appendix B.1.4 key. They cover only @authority and the Signature-Agent member,
+// which a FORA RPC refuses for want of its four components — "where the profile
+// allows" admits none of them at an RPC. What they do pin is that this SDK rebuilds
+// the draft's signature base byte for byte, the dictionary-member serialization
+// included, so a signature from a WG-00 library verifies here once it covers
+// FORA's components.
+func TestWG00AppendixE2_signatureBasesVerify(t *testing.T) {
+	seed := mustHex("9f8362f87a484a954e6e740c5b4c0e84229139a20aa8ab56ff66586f6a7d29c5")
+	pub := ed25519.NewKeyFromSeed(seed).Public().(ed25519.PublicKey)
+	for _, tc := range []struct {
+		name, agent, input, sig string
+	}{
+		{
+			name:  "E.2.1 dictionary member",
+			agent: `agent2="https://signature-agent.test"`,
+			input: `sig2=("@authority" "signature-agent";key="agent2");created=1735689600;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";expires=4889289600;nonce="n9p433xm+NJ3ph3upfBIGmsuwHw387YV7Q/F+6BSpGCVjYCqQw6rznNA8PVVLySrAWsv0hQtFioQb6E1YsauiA==";tag="web-bot-auth"`,
+			sig:   "sig2=:RdNFx5Bj6au3YgAMQL/RzmUlZE8QZLIaXGRpw985hWnwPfMxT228NMk6ehRS1PSl4e8PhbNZACSanGdhEwYCCg==:",
+		},
+		{
+			name:  "E.2.2 legacy String",
+			agent: `"https://signature-agent.test"`,
+			input: `sig2=("@authority" "signature-agent");created=1735689600;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";expires=1735693200;nonce="e8N7S2MFd/qrd6T2R3tdfAuuANngKI7LFtKYI/vowzk4lAZYadIX6wW25MwG7DCT9RUKAJ0qVkU0mEeLElW1qg==";tag="web-bot-auth"`,
+			sig:   "sig2=:jdq0SqOwHdyHr9+r5jw3iYZH6aNGKijYp/EstF4RQTQdi5N5YYKrD+mCT1HA1nZDsi6nJKuHxUi/5Syp3rLWBA==:",
+		},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			req, err := http.NewRequest(http.MethodPost, "https://example.com/foo?param=Value&Pet=dog", nil)
+			if err != nil {
+				t.Fatal(err)
+			}
+			req.Header.Set(SignatureAgentHeader, tc.agent)
+			req.Header.Set("Signature-Input", tc.input)
+			req.Header.Set("Signature", tc.sig)
+			all, sigs, err := parseAllSignatures(req.Header)
+			if err != nil {
+				t.Fatal(err)
+			}
+			base, err := buildSignatureBase(req, all[0])
+			if err != nil {
+				t.Fatal(err)
+			}
+			if !ed25519.Verify(pub, []byte(base), sigs["sig2"]) {
+				t.Fatalf("the draft's signature does not verify over the rebuilt base:\n%s", base)
+			}
+			dir, err := signatureDirectory(req.Header, all[0], 1)
+			if err != nil || dir != "https://signature-agent.test" {
+				t.Fatalf("directory = %q, %v", dir, err)
+			}
+			_, err = VerifyRequest(req, nil, pub, VerifyOptions{Now: time.Unix(1735689700, 0)})
+			var missing *MissingComponentError
+			if !errors.As(err, &missing) || missing.Component != "@method" {
+				t.Fatalf("a FORA RPC verifier answered %v, want the missing @method", err)
+			}
+		})
+	}
+}
diff --git a/sdk/go/helpers/wba_profile_test.go b/sdk/go/helpers/wba_profile_test.go
new file mode 100644
index 00000000..bb8cc802
--- /dev/null
+++ b/sdk/go/helpers/wba_profile_test.go
@@ -0,0 +1,377 @@
+package helpers_test
+
+// The Web Bot Auth profile of a single request signature: what the signer emits,
+// what it refuses to sign, and what the verifier accepts and refuses
+// (draft-ietf-webbotauth-httpsig-protocol-00, profiled on the authentication
+// page). The multi-signature rules are in multisig_test.go.
+
+import (
+	"context"
+	"crypto/ed25519"
+	"encoding/base64"
+	"errors"
+	"net/http"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// signatureAgentSpyResolver delegates Resolve to a real KeyResolver and calls
+// onResolve with the context so a test can inspect what the SDK threaded in.
+type signatureAgentSpyResolver struct {
+	delegate  helpers.KeyResolver
+	onResolve func(ctx context.Context, keyID string)
+}
+
+func (s *signatureAgentSpyResolver) Resolve(ctx context.Context, keyID string) (ed25519.PublicKey, error) {
+	if s.onResolve != nil {
+		s.onResolve(ctx, keyID)
+	}
+	return s.delegate.Resolve(ctx, keyID)
+}
+
+var _ helpers.KeyResolver = (*signatureAgentSpyResolver)(nil)
+
+// profileRequest is a fresh FORA RPC request carrying an empty Authorization and
+// the Content-Digest of body, ready for a hand-made signature.
+func profileRequest(t *testing.T, body []byte, signatureAgent string) *http.Request {
+	t.Helper()
+	req, err := http.NewRequest(http.MethodPost, "https://exchange.example/fora.v1.ExchangeService/Execute", nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	req.Header.Set("Authorization", "")
+	req.Header.Set("Content-Digest", helpers.ContentDigest(body))
+	if signatureAgent != "" {
+		req.Header.Set(helpers.SignatureAgentHeader, signatureAgent)
+	}
+	return req
+}
+
+// rawSign signs req by hand with the FORA covered set, edited by edit, and the
+// fixture window, nonce-free.
+func rawSign(t *testing.T, req *http.Request, signer helpers.Signer, edit func(*helpers.RawSignature)) {
+	t.Helper()
+	raw := helpers.RawSignature{
+		Label: "sig1", Covered: helpers.FORACovered(req, "sig1"),
+		Created: tCreated, Expires: tExpires, Tag: helpers.WBATag,
+	}
+	if edit != nil {
+		edit(&raw)
+	}
+	if err := helpers.SignRawForTest(req, signer, raw, false); err != nil {
+		t.Fatalf("sign by hand: %v", err)
+	}
+}
+
+func plainCovered(names ...string) []helpers.CoveredComponent {
+	out := make([]helpers.CoveredComponent, 0, len(names))
+	for _, n := range names {
+		out = append(out, helpers.CoveredComponent{Name: n})
+	}
+	return out
+}
+
+func memberCovered(key string) helpers.CoveredComponent {
+	return helpers.CoveredComponent{Name: "signature-agent", Params: []helpers.ComponentParam{{Key: "key", Val: key}}}
+}
+
+var foraRPC = []string{"@method", "@target-uri", "content-digest", "authorization"}
+
+// TestSignRequest_emitsTheProfile pins the bytes of one signature: the dictionary
+// Signature-Agent member, the covered set with that member last, and the
+// parameters in the profile's order with the tag.
+func TestSignRequest_emitsTheProfile(t *testing.T) {
+	body := []byte(`{"offer_id":"of_1"}`)
+	req, pub := signFixture(t, body, nil)
+
+	if got := req.Header.Get(helpers.SignatureAgentHeader); got != `sig1="https://agent.example"` {
+		t.Errorf("Signature-Agent = %q, want the one-member dictionary", got)
+	}
+	want := `sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1")` +
+		`;created=1700000000;expires=1700000300;keyid="agent.v1";alg="ed25519";tag="web-bot-auth"`
+	if got := req.Header.Get("Signature-Input"); got != want {
+		t.Errorf("Signature-Input\n got %s\nwant %s", got, want)
+	}
+	if _, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow}); err != nil {
+		t.Fatalf("VerifyRequest: %v", err)
+	}
+}
+
+// TestSignRequest_reproducesTheDocumentedExamples signs the authentication page's
+// single-hop and Broker examples with the published test keys they use, and
+// requires the page's exact headers. If the page and the SDK ever describe two
+// wire formats, this fails.
+func TestSignRequest_reproducesTheDocumentedExamples(t *testing.T) {
+	agentSeed, _ := base64.RawURLEncoding.DecodeString("nWGxne_9WmC6hEr0kuwsxERJxWl7MmkZcDusAxyuf2A")
+	brokerSeed := mustDecodeHex(t, "9f8362f87a484a954e6e740c5b4c0e84229139a20aa8ab56ff66586f6a7d29c5")
+	for _, tc := range []struct {
+		name, origin, nonce, body, wantInput, wantSig string
+		seed                                          []byte
+		created                                       int64
+	}{
+		{
+			name: "single hop", seed: agentSeed, origin: "https://research.acme.com", created: 1790812800,
+			nonce:     "TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg",
+			body:      `{"ver":"1.0","exchange":"exchange.example","requester":{"id":"research-bot-42","domain":"research.acme.com","type":"REQUESTER_TYPE_AGENT"},"uris":["https://publisher.example/premium/ai-funding-roundup"]}`,
+			wantInput: `sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812800;expires=1790813100;keyid="kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k";alg="ed25519";nonce="TsrHAzO3DzKC9fj7sOvG6npFB86tAdaQ1XH4pBDIAPmZ93MbjGmCgXXhEyx-lC4CG6yY3ZwTqAVPC6LEeNMXIg";tag="web-bot-auth"`,
+			wantSig:   "sig1=:pDSMjqSLlVFpCP9YsWvGE0AcqsU1JEWhq1fRryL9tC/SF42A4KIxItxZG5evIcQjraFVROW/zOdW2UhSXdjFBQ==:",
+		},
+		{
+			name: "broker", seed: brokerSeed, origin: "https://broker.example", created: 1790812801,
+			nonce:     "7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg",
+			body:      `{"ver":"1.0","exchange":"exchange.example","requester":{"id":"research-bot-42","domain":"research.acme.com","type":"REQUESTER_TYPE_AGENT"},"uris":["https://publisher.example/premium/ai-funding-roundup"],"deadline":"0.4s"}`,
+			wantInput: `sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=1790812801;expires=1790813101;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";alg="ed25519";nonce="7jwqQ5Qo8ytp-rXrRXvOS6tktBBVNJ1Rds5Ypdvh2L3QwG_335-eo89DX7NoxoLuwpT-4uz2aEaIZEzqlKbNIg";tag="web-bot-auth"`,
+			wantSig:   "sig1=:TVAmOQwm7x09EoMAUGPifHsGEGOxV7hqN9CF12Wb7SsWp2Kx2BxAKu8N+8fjprpL3ipAxkGk2rhonqMxW8XIBg==:",
+		},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			priv := ed25519.NewKeyFromSeed(tc.seed)
+			keyID, err := helpers.Thumbprint(priv.Public().(ed25519.PublicKey))
+			if err != nil {
+				t.Fatal(err)
+			}
+			signer, err := helpers.NewEd25519Signer(keyID, priv)
+			if err != nil {
+				t.Fatal(err)
+			}
+			req, err := http.NewRequest(http.MethodPost, "https://exchange.example/fora.v1.ExchangeService/DiscoverResources", nil)
+			if err != nil {
+				t.Fatal(err)
+			}
+			opts := helpers.SignOptions{
+				Created: tc.created, Expires: tc.created + 300, Nonce: tc.nonce, SignatureAgent: tc.origin,
+			}
+			if err := helpers.SignRequest(context.Background(), req, []byte(tc.body), signer, opts); err != nil {
+				t.Fatal(err)
+			}
+			if got := req.Header.Get(helpers.SignatureAgentHeader); got != `sig1="`+tc.origin+`"` {
+				t.Errorf("Signature-Agent = %q", got)
+			}
+			if got := req.Header.Get("Signature-Input"); got != tc.wantInput {
+				t.Errorf("Signature-Input\n got %s\nwant %s", got, tc.wantInput)
+			}
+			if got := req.Header.Get("Signature"); got != tc.wantSig {
+				t.Errorf("Signature\n got %s\nwant %s", got, tc.wantSig)
+			}
+		})
+	}
+}
+
+// TestSignRequest_refusesWhatNoProfileSignatureCarries: every Web Bot Auth
+// signature names an https origin and lives at most five minutes, and its label
+// is a structured-field key.
+func TestSignRequest_refusesWhatNoProfileSignatureCarries(t *testing.T) {
+	signer, _ := mustSigner(t, "agent.v1")
+	ok := helpers.SignOptions{Created: tCreated, Expires: tExpires, SignatureAgent: tAgent}
+	for _, tc := range []struct {
+		name string
+		edit func(*helpers.SignOptions)
+		want error
+	}{
+		{"no Signature-Agent", func(o *helpers.SignOptions) { o.SignatureAgent = "" }, helpers.ErrSignatureAgentRequired},
+		{"plaintext origin", func(o *helpers.SignOptions) { o.SignatureAgent = "http://agent.example" }, helpers.ErrSignatureAgentNotOrigin},
+		{"bare host", func(o *helpers.SignOptions) { o.SignatureAgent = "agent.example" }, helpers.ErrSignatureAgentNotOrigin},
+		{"origin with a path", func(o *helpers.SignOptions) { o.SignatureAgent = "https://agent.example/keys" }, helpers.ErrSignatureAgentNotOrigin},
+		{"six-minute window", func(o *helpers.SignOptions) { o.Expires = o.Created + 360 }, helpers.ErrSignatureLifetime},
+		{"empty window", func(o *helpers.SignOptions) { o.Expires = o.Created }, helpers.ErrSignatureLifetime},
+		{"no created", func(o *helpers.SignOptions) { o.Created = 0 }, helpers.ErrSignatureLifetime},
+		{"label not a key", func(o *helpers.SignOptions) { o.Label = "Sig1" }, helpers.ErrSignatureLabel},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			opts := ok
+			tc.edit(&opts)
+			req := profileRequest(t, []byte("x"), "")
+			err := helpers.SignRequest(context.Background(), req, []byte("x"), signer, opts)
+			if !errors.Is(err, tc.want) {
+				t.Fatalf("SignRequest error = %v, want %v", err, tc.want)
+			}
+			if req.Header.Get("Signature") != "" {
+				t.Error("a refused signing left a Signature header on the request")
+			}
+		})
+	}
+}
+
+// TestCheckHTTPSOrigin pins what counts as the ASCII serialization of an https
+// origin, the only value a Signature-Agent member carries.
+func TestCheckHTTPSOrigin(t *testing.T) {
+	for _, ok := range []string{
+		"https://agent.example", "https://agent.example:8443", "https://127.0.0.1",
+		"https://[::1]:8443", "https://xn--bcher-kva.example", "https://a_b.example",
+	} {
+		if err := helpers.CheckHTTPSOrigin(ok); err != nil {
+			t.Errorf("CheckHTTPSOrigin(%q) = %v, want accepted", ok, err)
+		}
+	}
+	for _, bad := range []string{
+		"", "agent.example", "http://agent.example", "HTTPS://agent.example", "https://Agent.example",
+		"https://agent.example/", "https://agent.example/keys", "https://agent.example?x=1",
+		"https://agent.example#f", "https://user@agent.example", "https://agent.example:443",
+		"https://agent.example:0", "https://agent.example:99999", "https://agent.example:",
+		"https://bücher.example", "https://", "https://a..example", "https://agent.example%2F",
+		`https://agent.example"`, "https://[::1", "https://agent.example:08443",
+	} {
+		if err := helpers.CheckHTTPSOrigin(bad); !errors.Is(err, helpers.ErrSignatureAgentNotOrigin) {
+			t.Errorf("CheckHTTPSOrigin(%q) = %v, want ErrSignatureAgentNotOrigin", bad, err)
+		}
+	}
+}
+
+// TestVerifyRequest_acceptsWhatWG00Permits: the forms other Web Bot Auth signers
+// send, which a FORA verifier accepts although the SDK never emits them.
+func TestVerifyRequest_acceptsWhatWG00Permits(t *testing.T) {
+	signer, pub := mustSigner(t, "agent.v1")
+	body := []byte("x")
+	member := `sig1="https://agent.example"`
+	for _, tc := range []struct {
+		name   string
+		header string
+		edit   func(*helpers.RawSignature)
+	}{
+		{"legacy String form on a single signature", `"https://agent.example"`, func(r *helpers.RawSignature) {
+			r.Covered = plainCovered(append(foraRPC, "signature-agent")...)
+		}},
+		{"member key different from the label", `agent="https://agent.example"`, func(r *helpers.RawSignature) {
+			r.Covered = append(plainCovered(foraRPC...), memberCovered("agent"))
+		}},
+		{"type=directory as a String", member + `;type="directory"`, nil},
+		{"type=directory as a Token", member + `;type=directory`, nil},
+		{"no nonce", member, nil},
+		{"a nonce of another length", member, func(r *helpers.RawSignature) { r.Nonce = "AAECAwQFBgcICQoLDA0ODw" }},
+		{"other members beside the signer's", `x="https://x.example", ` + member, nil},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			req := profileRequest(t, body, tc.header)
+			rawSign(t, req, signer, tc.edit)
+			vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
+			if err != nil {
+				t.Fatalf("VerifyRequest: %v", err)
+			}
+			if vr.SignatureAgent != tAgent {
+				t.Errorf("SignatureAgent = %q, want %q", vr.SignatureAgent, tAgent)
+			}
+		})
+	}
+}
+
+// TestVerifyRequest_refusesWhatTheProfileDoesNot: each refusal names its cause,
+// and the ones a Web Bot Auth library can fix by signing differently are answered
+// with Accept-Signature.
+func TestVerifyRequest_refusesWhatTheProfileDoesNot(t *testing.T) {
+	signer, pub := mustSigner(t, "agent.v1")
+	body := []byte("x")
+	member := `sig1="https://agent.example"`
+	plainAgent := func(r *helpers.RawSignature) { r.Covered = plainCovered(append(foraRPC, "signature-agent")...) }
+	for _, tc := range []struct {
+		name       string
+		header     string
+		edit       func(*helpers.RawSignature)
+		want       error
+		wantAccept bool
+	}{
+		{"no tag", member, func(r *helpers.RawSignature) { r.Tag = "" }, helpers.ErrSignatureTag, true},
+		{"another tag", member, func(r *helpers.RawSignature) { r.Tag = "fora" }, helpers.ErrSignatureTag, true},
+		{"the bare unquoted value v1.0.8 sent", "https://agent.example", plainAgent, helpers.ErrSignatureAgentForm, true},
+		{"the dictionary covered as plain signature-agent", member, plainAgent, helpers.ErrSignatureAgentForm, true},
+		{"the named member is absent", member, func(r *helpers.RawSignature) {
+			r.Label = "swap" // signed over sig1's member, then the header loses it
+		}, helpers.ErrSignatureAgentForm, true},
+		{"a member whose type is not directory", member + `;type="jwks"`, nil, helpers.ErrSignatureAgentForm, true},
+		{"a member that is a token", `sig1=agent`, nil, helpers.ErrSignatureAgentForm, true},
+		{"two members covered, neither keyed to the label", `a="https://agent.example", b="https://agent.example"`,
+			func(r *helpers.RawSignature) {
+				r.Covered = append(plainCovered(foraRPC...), memberCovered("a"), memberCovered("b"))
+			}, helpers.ErrSignatureAgentForm, true},
+		{"a plaintext origin", `sig1="http://agent.example"`, nil, helpers.ErrSignatureAgentNotOrigin, false},
+		{"an origin with a path", `sig1="https://agent.example/keys"`, nil, helpers.ErrSignatureAgentNotOrigin, false},
+		{"no Signature-Agent covered", member, func(r *helpers.RawSignature) { r.Covered = plainCovered(foraRPC...) },
+			helpers.ErrMissingRequiredComponent, true},
+		{"authorization not covered", member, func(r *helpers.RawSignature) {
+			r.Covered = append(plainCovered("@method", "@target-uri", "content-digest"), memberCovered("sig1"))
+		}, helpers.ErrMissingRequiredComponent, true},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			req := profileRequest(t, body, tc.header)
+			swap := false
+			rawSign(t, req, signer, func(r *helpers.RawSignature) {
+				if tc.edit != nil {
+					tc.edit(r)
+				}
+				if r.Label == "swap" {
+					r.Label, swap = "sig1", true
+				}
+			})
+			if swap {
+				req.Header.Set(helpers.SignatureAgentHeader, `agent2="https://agent.example"`)
+			}
+			_, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow})
+			if !errors.Is(err, tc.want) {
+				t.Fatalf("VerifyRequest error = %v, want %v", err, tc.want)
+			}
+			accept, ok := helpers.AcceptSignatureFor(err)
+			if ok != tc.wantAccept {
+				t.Fatalf("AcceptSignatureFor answered %v (%q), want %v", ok, accept, tc.wantAccept)
+			}
+		})
+	}
+}
+
+// TestAcceptSignature_value pins the field a refusal carries, the one the
+// authentication page shows.
+func TestAcceptSignature_value(t *testing.T) {
+	want := `sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created;expires;tag="web-bot-auth"`
+	if got := helpers.AcceptSignature(false); got != want {
+		t.Errorf("AcceptSignature(false)\n got %s\nwant %s", got, want)
+	}
+	if got := helpers.AcceptSignature(true); !strings.Contains(got, `"signature-agent";key="sig1" "x-entitlement-token")`) {
+		t.Errorf("AcceptSignature(true) does not ask for x-entitlement-token: %s", got)
+	}
+	if got, ok := helpers.AcceptSignatureFor(&helpers.MissingComponentError{Component: "x-entitlement-token"}); !ok ||
+		got != helpers.AcceptSignature(true) {
+		t.Errorf("a missing entitlement is answered %q, %v", got, ok)
+	}
+	if _, ok := helpers.AcceptSignatureFor(helpers.ErrSignatureVerify); ok {
+		t.Error("a signature that fails to verify is answered with Accept-Signature")
+	}
+}
+
+// TestVerifyRequestResolved_resolvesInTheMemberDirectory: the resolver is handed
+// the origin of the member the signature covers, never another member's.
+func TestVerifyRequestResolved_resolvesInTheMemberDirectory(t *testing.T) {
+	signer, pub := mustSigner(t, "agent.v1")
+	body := []byte("x")
+	req := profileRequest(t, body, `other="https://other.example", sig1="https://agent.example"`)
+	rawSign(t, req, signer, nil)
+
+	var captured string
+	spy := &signatureAgentSpyResolver{
+		delegate:  helpers.NewStaticKeyResolver(map[string]ed25519.PublicKey{"agent.v1": pub}),
+		onResolve: func(ctx context.Context, _ string) { captured = helpers.SignatureAgentFromContext(ctx) },
+	}
+	if _, err := helpers.VerifyRequestResolved(context.Background(), req, body, spy, helpers.VerifyOptions{Now: tNow}); err != nil {
+		t.Fatalf("VerifyRequestResolved: %v", err)
+	}
+	if captured != tAgent {
+		t.Errorf("resolver saw %q, want the covered member's origin %q", captured, tAgent)
+	}
+}
+
+// TestVerifyRequest_maxSignatureAgeUnchanged keeps the verifier's own lifetime
+// clamp independent of the signer's five-minute limit: a verifier may accept a
+// longer window from another signer unless it sets MaxSignatureAge.
+func TestVerifyRequest_maxSignatureAgeUnchanged(t *testing.T) {
+	signer, pub := mustSigner(t, "agent.v1")
+	body := []byte("x")
+	req := profileRequest(t, body, `sig1="https://agent.example"`)
+	rawSign(t, req, signer, func(r *helpers.RawSignature) { r.Expires = r.Created + 3600 })
+	if _, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow}); err != nil {
+		t.Fatalf("an hour-long window without a clamp: %v", err)
+	}
+	_, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{Now: tNow, MaxSignatureAge: 5 * time.Minute})
+	if !errors.Is(err, helpers.ErrSignatureLifetimeTooLong) {
+		t.Fatalf("with a five-minute clamp: %v, want ErrSignatureLifetimeTooLong", err)
+	}
+}
diff --git a/sdk/go/resolvers/cachedofferkeyresolver.go b/sdk/go/resolvers/cachedofferkeyresolver.go
index bcff10d0..99c859a8 100644
--- a/sdk/go/resolvers/cachedofferkeyresolver.go
+++ b/sdk/go/resolvers/cachedofferkeyresolver.go
@@ -142,8 +142,9 @@ func clampOfferKeyExpiry(now time.Time, ttl time.Duration, notAfter time.Time) t
 
 // NewWBADirectoryFetcher returns the default OfferDirectoryFetcher: it GETs
 // scheme://domain[:port]/.well-known/http-message-signatures-directory through
-// client and protojson-decodes the WBAFile (any transport/status/decode failure
-// wraps ErrDirectoryUnavailable). client nil installs the same SSRF-guarded default
+// client, with no redirect, checks its media type and response signatures, and
+// protojson-decodes the WBAFile, keeping only the keys that signed the response
+// (any transport/status/media-type/decode failure wraps ErrDirectoryUnavailable). client nil installs the same SSRF-guarded default
 // WBAKeyResolver uses — the exchange domain is signature-covered but
 // attacker-influenceable, so the guard costs nothing. scheme empty → https; port
 // empty → the scheme default.
@@ -155,7 +156,7 @@ func NewWBADirectoryFetcher(client *http.Client, scheme, port string) OfferDirec
 		scheme = "https"
 	}
 	return func(ctx context.Context, domain string) (*forav1.WBAFile, error) {
-		return fetchWBAFile(ctx, client, scheme+"://"+joinDirectoryHost(domain, port))
+		return fetchWBAFile(ctx, client, scheme+"://"+joinDirectoryHost(domain, port), time.Now())
 	}
 }
 
diff --git a/sdk/go/resolvers/contentfetch_test.go b/sdk/go/resolvers/contentfetch_test.go
index 1b3b8e4a..cb98e1d0 100644
--- a/sdk/go/resolvers/contentfetch_test.go
+++ b/sdk/go/resolvers/contentfetch_test.go
@@ -36,7 +36,7 @@ func (p popSigner) SignFetch(ctx context.Context, target string) (helpers.AgentB
 		return helpers.AgentBinding{}, p.err
 	}
 	return helpers.SignAgentBinding(ctx, p.signer, p.pub, helpers.PoPOptions{
-		URL: target, Created: p.created, Expires: p.expires,
+		URL: target, Created: p.created, Expires: p.expires, SignatureAgent: "https://agent.example",
 	})
 }
 
@@ -96,10 +96,16 @@ func verifyProofLikeTheEdge(t *testing.T, r *http.Request) {
 		t.Errorf("signature is not standard base64: %v", err)
 		return
 	}
+	// The proof is a Web Bot Auth signature: its Signature-Agent member names the
+	// agent's directory and is covered.
+	if got := r.Header.Get(helpers.SignatureAgentHeader); got != `sig1="https://agent.example"` {
+		t.Errorf("Signature-Agent = %q, want the agent's member", got)
+	}
 	// The edge rebuilds @target-uri from the raw request line it received.
 	target := "http://" + r.Host + r.URL.RequestURI()
 	base := `"@method": ` + r.Method + "\n" +
 		`"@target-uri": ` + target + "\n" +
+		`"signature-agent";key="sig1": "https://agent.example"` + "\n" +
 		`"@signature-params": ` + rawParams
 	if !ed25519.Verify(pubBytes, []byte(base), sig) {
 		t.Errorf("proof does not verify over the base the edge reconstructs:\n%s", base)
diff --git a/sdk/go/resolvers/documents.go b/sdk/go/resolvers/documents.go
index 3d4f83b2..eb642a85 100644
--- a/sdk/go/resolvers/documents.go
+++ b/sdk/go/resolvers/documents.go
@@ -2,6 +2,7 @@ package resolvers
 
 import (
 	"context"
+	"crypto/ed25519"
 	"crypto/sha256"
 	"crypto/sha512"
 	"crypto/subtle"
@@ -12,7 +13,9 @@ import (
 	"hash"
 	"io"
 	"net/http"
+	"net/url"
 	"strings"
+	"time"
 	"unicode/utf8"
 
 	"google.golang.org/protobuf/encoding/protojson"
@@ -32,20 +35,29 @@ import (
 // to be. The public readers (ReadManifest, ReadWBADirectory, ReadRevocationList,
 // ReadLicenseDocument) check what a party publishes: the media type, the strict
 // contract of the message and, for a license document, the digest. The resolvers
-// read the same documents to route and to verify, and skip those checks: a reader
-// that must accept a newer protocol version cannot refuse a field it does not know.
+// read the same documents to route and to verify, and skip the strict check: a
+// reader that must accept a newer protocol version cannot refuse a field it does
+// not know.
+//
+// A key directory is read under the Web Bot Auth profile by both faces: it is
+// fetched with no redirect, must be served as
+// application/http-message-signatures-directory+json, and its response must be
+// signed by the keys it lists (helpers.VerifyDirectoryResponse). A key the
+// response carries no valid signature by is never handed out. A revocation list
+// and the manifest may follow up to five redirects.
 
 // ManifestMediaType is the media type /.well-known/fora.json is served under.
 const ManifestMediaType = "application/json"
 
-// WBADirectoryMediaType is the media type the WBA key directory is served under: a
-// JWK Set (RFC 7517 §8.5.2).
-const WBADirectoryMediaType = "application/jwk-set+json"
+// WBADirectoryMediaType is the media type a Web Bot Auth key directory is served
+// under (WG-00 §5.5). Any other label, the JWK Set type
+// application/jwk-set+json included, is refused.
+const WBADirectoryMediaType = "application/http-message-signatures-directory+json"
 
-// ErrMediaTypeRefused is returned by a document reader when a document is served
-// under a media type other than the one the protocol names for it. A verdict on
-// what the party publishes, never worth retrying. The resolvers that read the same
-// documents for routing and key resolution do not check the label. Peer of Python
+// ErrMediaTypeRefused is returned when a document is served under a media type
+// other than the one the protocol names for it. A verdict on what the party
+// publishes, never worth retrying. The public readers check the manifest's and the
+// key directory's label; the resolvers check the key directory's. Peer of Python
 // MediaTypeRefusedError and TypeScript MediaTypeRefused.
 var ErrMediaTypeRefused = errors.New("resolvers: document served under a media type the protocol does not name for it")
 
@@ -144,11 +156,14 @@ func ReadManifest(ctx context.Context, domain string, opts ReadOptions) (*Docume
 // directory's full URL, or a bare host whose directory is read from
 // scheme://host/.well-known/http-message-signatures-directory.
 //
-// The media type must be application/jwk-set+json, and the body must pass
-// helpers.CheckStrict as a WBAFile. Key validity windows and revocation are not
-// evaluated: that is WBAKeyResolver's job, and a directory listing an expired key
-// is still a well-formed directory. A failure wraps helpers.ErrInvalidHost,
-// ErrDirectoryUnavailable, ErrMediaTypeRefused, or helpers.ErrStrictViolation.
+// The directory is fetched with no redirect: a redirect fails the fetch. The media
+// type must be application/http-message-signatures-directory+json, the body must
+// pass helpers.CheckStrict as a WBAFile, and the response must carry a valid
+// response signature by every key it lists. Key validity windows and revocation
+// are not evaluated: that is WBAKeyResolver's job, and a directory listing an
+// expired key is still a well-formed directory. A failure wraps
+// helpers.ErrInvalidHost, ErrDirectoryUnavailable, ErrMediaTypeRefused,
+// helpers.ErrStrictViolation, or helpers.ErrDirectoryResponseUnsigned.
 func ReadWBADirectory(ctx context.Context, urlOrDomain string, opts ReadOptions) (*Document[*forav1.WBAFile], error) {
 	url := urlOrDomain
 	if !strings.Contains(urlOrDomain, "://") {
@@ -158,11 +173,23 @@ func ReadWBADirectory(ctx context.Context, urlOrDomain string, opts ReadOptions)
 		}
 		url = WBADirectoryURL(opts.scheme(), urlOrDomain)
 	}
-	f, err := fetchDocument(ctx, opts.client(), url)
+	f, err := fetchDocumentNoRedirect(ctx, opts.client(), url)
+	if err != nil {
+		return nil, err
+	}
+	doc, err := acceptDocument(wbaDirectoryKind, f, &forav1.WBAFile{})
 	if err != nil {
 		return nil, err
 	}
-	return acceptDocument(wbaDirectoryKind, f, &forav1.WBAFile{})
+	signed, err := signedDirectoryKeys(f, doc.Message, time.Now())
+	if err != nil {
+		return nil, fmt.Errorf("resolvers: %w", err)
+	}
+	if len(signed.GetKeys()) != len(doc.Message.GetKeys()) {
+		return nil, fmt.Errorf("resolvers: %w: %d of %d listed keys signed the response at %s",
+			helpers.ErrDirectoryResponseUnsigned, len(signed.GetKeys()), len(doc.Message.GetKeys()), f.url)
+	}
+	return doc, nil
 }
 
 // ReadRevocationList fetches and checks the key revocation list at url, a
@@ -208,21 +235,88 @@ func ReadLicenseDocument(ctx context.Context, license *forav1.License, opts Read
 	return verifyLicenseDigest(license.GetUriDigest(), f)
 }
 
-// fetchWBAFile GETs base+WBADirectoryPath through client and decodes the WBAFile
-// leniently: an unknown member is a newer minor version, not a reason to stop
-// verifying. Any failure wraps ErrDirectoryUnavailable. It is the one read of a
-// directory WBAKeyResolver.fetchDirectory and the domain-keyed offer-key fetcher
+// fetchWBAFile GETs base+WBADirectoryPath through client, with no redirect, and
+// decodes the WBAFile leniently: an unknown member is a newer minor version, not a
+// reason to stop verifying. The media type must be WBADirectoryMediaType. The file
+// returned lists only the keys that signed the response (signedDirectoryKeys), so
+// no caller can hand out a key the directory did not sign for. Any failure wraps
+// ErrDirectoryUnavailable. It is the one read of a directory
+// WBAKeyResolver.fetchDirectory and the domain-keyed offer-key fetcher
 // (NewWBADirectoryFetcher) share, so the two never drift.
-func fetchWBAFile(ctx context.Context, client *http.Client, base string) (*forav1.WBAFile, error) {
-	f, err := fetchDocument(ctx, client, base+WBADirectoryPath)
+//
+// now is the clock the response signatures' windows are judged against.
+func fetchWBAFile(ctx context.Context, client *http.Client, base string, now time.Time) (*forav1.WBAFile, error) {
+	f, err := fetchDocumentNoRedirect(ctx, client, base+WBADirectoryPath)
 	if err != nil {
 		return nil, err
 	}
+	if f.mediaType != WBADirectoryMediaType {
+		return nil, fmt.Errorf("%w: %w: %s was served as %q", ErrDirectoryUnavailable, ErrMediaTypeRefused, f.url, f.mediaType)
+	}
 	var file forav1.WBAFile
 	if err := (protojson.UnmarshalOptions{DiscardUnknown: true}).Unmarshal(f.body, &file); err != nil {
 		return nil, fmt.Errorf("%w: decode: %w", ErrDirectoryUnavailable, err)
 	}
-	return &file, nil
+	signed, err := signedDirectoryKeys(f, &file, now)
+	if err != nil {
+		return nil, fmt.Errorf("%w: %w", ErrDirectoryUnavailable, err)
+	}
+	return signed, nil
+}
+
+// signedDirectoryKeys returns a copy of file listing only the keys whose response
+// signature verifies, checked against the authority f was fetched from. A key that
+// is not an Ed25519 key cannot sign and is dropped with the rest. The error is a
+// response listing keys that cannot be checked at all: a Content-Digest that does
+// not match the body, or no response signature. A directory listing no key has
+// nothing to sign and is returned as it is.
+func signedDirectoryKeys(f fetchedDocument, file *forav1.WBAFile, now time.Time) (*forav1.WBAFile, error) {
+	if len(file.GetKeys()) == 0 {
+		return file, nil // nothing listed, so nothing to have signed
+	}
+	authority, err := requestAuthority(f.url)
+	if err != nil {
+		return nil, err
+	}
+	pubs := make([]ed25519.PublicKey, 0, len(file.GetKeys()))
+	for _, k := range file.GetKeys() {
+		if pub, perr := wbaPublicKey(k); perr == nil {
+			pubs = append(pubs, pub)
+		}
+	}
+	verified, err := helpers.VerifyDirectoryResponse(authority, f.header, f.body, pubs, now)
+	if err != nil {
+		return nil, err
+	}
+	out := proto.Clone(file).(*forav1.WBAFile)
+	out.Keys = out.Keys[:0]
+	for _, k := range file.GetKeys() {
+		pub, perr := wbaPublicKey(k)
+		if perr != nil {
+			continue
+		}
+		if tp, terr := helpers.Thumbprint(pub); terr == nil && verified[tp] {
+			out.Keys = append(out.Keys, k)
+		}
+	}
+	return out, nil
+}
+
+// requestAuthority is the RFC 9421 @authority of a fetch of rawURL: the host,
+// lowercased, with the port only when it is not the scheme's default.
+func requestAuthority(rawURL string) (string, error) {
+	u, err := url.Parse(rawURL)
+	if err != nil || u.Host == "" {
+		return "", fmt.Errorf("%w: cannot derive the authority of %q", ErrDirectoryUnavailable, rawURL)
+	}
+	host, port := strings.ToLower(u.Hostname()), u.Port()
+	if strings.Contains(host, ":") {
+		host = "[" + host + "]"
+	}
+	if port == "" || (u.Scheme == "https" && port == "443") || (u.Scheme == "http" && port == "80") {
+		return host, nil
+	}
+	return host + ":" + port, nil
 }
 
 // fetchRevocationList GETs url through client and decodes the KeyRevocationList
@@ -320,6 +414,20 @@ type fetchedDocument struct {
 	url       string
 	body      []byte
 	mediaType string // the Content-Type essence, lowercased; "" when absent
+	header    http.Header
+}
+
+// errRedirectRefused fails a key-directory fetch that met a redirect. A directory
+// answers 200 itself: its address is the origin its signer committed to, and a
+// redirect would hand key lookup to another one.
+var errRedirectRefused = errors.New("resolvers: a key directory is never fetched through a redirect")
+
+// fetchDocumentNoRedirect is fetchDocument over a copy of client that refuses
+// every redirect, whatever policy the injected client carries.
+func fetchDocumentNoRedirect(ctx context.Context, client *http.Client, url string) (fetchedDocument, error) {
+	noRedirect := *client
+	noRedirect.CheckRedirect = func(*http.Request, []*http.Request) error { return errRedirectRefused }
+	return fetchDocument(ctx, &noRedirect, url)
 }
 
 // fetchDocument GETs url through client and returns the body and its media type
@@ -354,7 +462,9 @@ func fetchDocument(ctx context.Context, client *http.Client, url string) (fetche
 	if len(body) > maxWellKnownDocBytes {
 		return fetchedDocument{}, fmt.Errorf("%w: document exceeds the %d byte cap", ErrDirectoryUnavailable, maxWellKnownDocBytes)
 	}
-	return fetchedDocument{url: url, body: body, mediaType: mediaTypeEssence(resp.Header.Get("Content-Type"))}, nil
+	return fetchedDocument{
+		url: url, body: body, mediaType: mediaTypeEssence(resp.Header.Get("Content-Type")), header: resp.Header,
+	}, nil
 }
 
 // mediaTypeEssence is the type/subtype of a Content-Type value, lowercased, with
diff --git a/sdk/go/resolvers/documents_test.go b/sdk/go/resolvers/documents_test.go
index eb15d0a8..a7e9ea28 100644
--- a/sdk/go/resolvers/documents_test.go
+++ b/sdk/go/resolvers/documents_test.go
@@ -2,7 +2,9 @@ package resolvers_test
 
 import (
 	"context"
+	"crypto/ed25519"
 	"crypto/sha256"
+	"encoding/base64"
 	"encoding/hex"
 	"errors"
 	"net/http"
@@ -29,6 +31,9 @@ type served struct {
 	body        string
 	contentType string // "" sends no Content-Type
 	status      int
+	// signed answers as a key directory: signed by every listed key a test
+	// registered, under the profile's media type (writeSignedDirectory).
+	signed bool
 }
 
 // documentOrigin serves each path's document verbatim, under the label given.
@@ -40,6 +45,10 @@ func documentOrigin(t *testing.T, docs map[string]served) *httptest.Server {
 			http.NotFound(w, r)
 			return
 		}
+		if doc.signed {
+			writeSignedDirectory(w, r, []byte(doc.body))
+			return
+		}
 		if doc.contentType != "" {
 			w.Header().Set("Content-Type", doc.contentType)
 		} else {
@@ -134,10 +143,16 @@ func TestReadManifestDialsThroughTheGuards(t *testing.T) {
 
 const readerJWK = `{"kty":"OKP","crv":"Ed25519","use":"sig","alg":"EdDSA","x":"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo","not_before":"2026-05-01T00:00:00Z","not_after":"2027-05-01T00:00:00Z"}`
 
+func init() {
+	// The private half of readerJWK, the RFC 8037 Appendix A test key.
+	seed, _ := base64.RawURLEncoding.DecodeString("nWGxne_9WmC6hEr0kuwsxERJxWl7MmkZcDusAxyuf2A")
+	registerDirectoryKey(ed25519.NewKeyFromSeed(seed))
+}
+
 func TestReadWBADirectoryByDomainAndByURL(t *testing.T) {
 	sandbox(t)
 	srv := documentOrigin(t, map[string]served{
-		resolvers.WBADirectoryPath: {body: `{"keys":[` + readerJWK + `]}`, contentType: resolvers.WBADirectoryMediaType},
+		resolvers.WBADirectoryPath: {body: `{"keys":[` + readerJWK + `]}`, signed: true},
 	})
 	for _, ref := range []string{hostOf(t, srv), srv.URL + resolvers.WBADirectoryPath} {
 		doc, err := resolvers.ReadWBADirectory(context.Background(), ref, plain)
@@ -150,6 +165,28 @@ func TestReadWBADirectoryByDomainAndByURL(t *testing.T) {
 	}
 }
 
+// TestReadWBADirectoryRefusesARedirect: a key directory answers 200 itself. A
+// redirect fails the fetch even when it leads to a well-formed, signed directory,
+// while a revocation list or a manifest may still follow one.
+func TestReadWBADirectoryRefusesARedirect(t *testing.T) {
+	sandbox(t)
+	mux := http.NewServeMux()
+	mux.HandleFunc(resolvers.WBADirectoryPath, func(w http.ResponseWriter, r *http.Request) {
+		http.Redirect(w, r, "/elsewhere", http.StatusFound)
+	})
+	mux.HandleFunc("/elsewhere", func(w http.ResponseWriter, r *http.Request) {
+		writeSignedDirectory(w, r, []byte(`{"keys":[`+readerJWK+`]}`))
+	})
+	srv := httptest.NewServer(mux)
+	t.Cleanup(srv.Close)
+	if _, err := resolvers.ReadWBADirectory(context.Background(), hostOf(t, srv), plain); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+		t.Fatalf("ReadWBADirectory through a redirect: err = %v, want ErrDirectoryUnavailable", err)
+	}
+	if _, err := resolvers.ReadWBADirectory(context.Background(), srv.URL+"/elsewhere", plain); err != nil {
+		t.Fatalf("the same document fetched directly: %v", err)
+	}
+}
+
 func TestReadWBADirectoryRefusals(t *testing.T) {
 	cases := []struct {
 		name string
@@ -157,6 +194,11 @@ func TestReadWBADirectoryRefusals(t *testing.T) {
 		want error
 	}{
 		{"plain json", served{body: `{"keys":[` + readerJWK + `]}`, contentType: "application/json"}, resolvers.ErrMediaTypeRefused},
+		// The JWK Set type the v1.0.8 reference directories served is not the
+		// profile's: there is no transition window for it.
+		{"the JWK Set media type", served{body: `{"keys":[` + readerJWK + `]}`, contentType: "application/jwk-set+json"}, resolvers.ErrMediaTypeRefused},
+		// A directory whose response no listed key signed.
+		{"unsigned response", served{body: `{"keys":[` + readerJWK + `]}`, contentType: resolvers.WBADirectoryMediaType}, helpers.ErrDirectoryResponseUnsigned},
 		{"key carrying a kid", served{body: `{"keys":[{"kid":"k1","kty":"OKP"}]}`, contentType: resolvers.WBADirectoryMediaType}, helpers.ErrStrictViolation},
 		{"lower camel member", served{body: `{"revocationUrl":"https://agent.example/r.json"}`, contentType: resolvers.WBADirectoryMediaType}, helpers.ErrStrictViolation},
 	}
diff --git a/sdk/go/resolvers/signed_directory_helpers_test.go b/sdk/go/resolvers/signed_directory_helpers_test.go
new file mode 100644
index 00000000..a52ef367
--- /dev/null
+++ b/sdk/go/resolvers/signed_directory_helpers_test.go
@@ -0,0 +1,72 @@
+package resolvers_test
+
+import (
+	"crypto/ed25519"
+	"encoding/base64"
+	"net/http"
+	"sync"
+
+	"google.golang.org/protobuf/encoding/protojson"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
+)
+
+// A key directory is served under the Web Bot Auth profile: its own media type
+// and a response signed by every key it lists, for the authority it was fetched
+// from. The test origins here serve directories built from keys the tests mint,
+// so every minted private key is registered by its public half and
+// writeSignedDirectory signs with the ones a body lists.
+
+var testDirectoryKeys sync.Map // base64url public key -> ed25519.PrivateKey
+
+// registerDirectoryKey makes priv available to writeSignedDirectory.
+func registerDirectoryKey(priv ed25519.PrivateKey) {
+	pub := priv.Public().(ed25519.PublicKey)
+	testDirectoryKeys.Store(base64.RawURLEncoding.EncodeToString(pub), priv)
+}
+
+// directoryResponseWindow is wide enough to contain every injected test clock.
+const (
+	directoryResponseCreated = int64(1)
+	directoryResponseExpires = int64(1) << 40
+)
+
+// writeSignedDirectory answers r with body as a key directory: the profile's
+// media type and a response signature by each listed key a test registered. A
+// listed key nobody registered is left unsigned, which a reader treats as absent.
+func writeSignedDirectory(w http.ResponseWriter, r *http.Request, body []byte) {
+	var file forav1.WBAFile
+	_ = protojson.UnmarshalOptions{DiscardUnknown: true}.Unmarshal(body, &file)
+	var signers []helpers.Signer
+	for _, k := range file.GetKeys() {
+		v, ok := testDirectoryKeys.Load(k.GetX())
+		if !ok {
+			continue
+		}
+		priv := v.(ed25519.PrivateKey)
+		tp, err := helpers.Thumbprint(priv.Public().(ed25519.PublicKey))
+		if err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+			return
+		}
+		s, err := helpers.NewEd25519Signer(tp, priv)
+		if err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+			return
+		}
+		signers = append(signers, s)
+	}
+	if len(signers) > 0 {
+		sig, err := helpers.SignDirectoryResponse(r.Context(), r.Host, body, signers,
+			directoryResponseCreated, directoryResponseExpires)
+		if err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+			return
+		}
+		sig.Apply(w.Header())
+	}
+	w.Header().Set("Content-Type", resolvers.WBADirectoryMediaType)
+	_, _ = w.Write(body)
+}
diff --git a/sdk/go/resolvers/testdata/document-check-vectors.json b/sdk/go/resolvers/testdata/document-check-vectors.json
index 18e8631f..5026eab4 100644
--- a/sdk/go/resolvers/testdata/document-check-vectors.json
+++ b/sdk/go/resolvers/testdata/document-check-vectors.json
@@ -167,14 +167,14 @@
       "document": "wba_directory",
       "content_type": "application/jwk-set+json",
       "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"use\":\"sig\",\"alg\":\"EdDSA\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\"not_before\":\"2026-05-01T00:00:00Z\",\"not_after\":\"2027-05-01T00:00:00Z\"}],\"revocation_url\":\"https://agent.example/.well-known/fora-key-revocations.json\"}",
-      "verdict": "ok"
+      "verdict": "media_type"
     },
     {
       "label": "wba-empty",
       "document": "wba_directory",
       "content_type": "application/jwk-set+json",
       "body": "{}",
-      "verdict": "ok"
+      "verdict": "media_type"
     },
     {
       "label": "wba-media-type-json",
@@ -188,35 +188,35 @@
       "document": "wba_directory",
       "content_type": "application/http-message-signatures-directory+json",
       "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"use\":\"sig\",\"alg\":\"EdDSA\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\"not_before\":\"2026-05-01T00:00:00Z\",\"not_after\":\"2027-05-01T00:00:00Z\"}]}",
-      "verdict": "media_type"
+      "verdict": "ok"
     },
     {
       "label": "wba-key-with-kid",
       "document": "wba_directory",
       "content_type": "application/jwk-set+json",
       "body": "{\"keys\":[{\"kid\":\"k1\",\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"x\":\"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\"}]}",
-      "verdict": "strict"
+      "verdict": "media_type"
     },
     {
       "label": "wba-keys-not-array",
       "document": "wba_directory",
       "content_type": "application/jwk-set+json",
       "body": "{\"keys\":{}}",
-      "verdict": "strict"
+      "verdict": "media_type"
     },
     {
       "label": "wba-lower-camel-member",
       "document": "wba_directory",
       "content_type": "application/jwk-set+json",
       "body": "{\"revocationUrl\":\"https://agent.example/revoked.json\"}",
-      "verdict": "strict"
+      "verdict": "media_type"
     },
     {
       "label": "wba-not-json",
       "document": "wba_directory",
       "content_type": "application/jwk-set+json",
       "body": "keys",
-      "verdict": "undecodable"
+      "verdict": "media_type"
     },
     {
       "label": "revocation-ok",
diff --git a/sdk/go/resolvers/wba_join_corpus_test.go b/sdk/go/resolvers/wba_join_corpus_test.go
index 82bc3cee..986874b8 100644
--- a/sdk/go/resolvers/wba_join_corpus_test.go
+++ b/sdk/go/resolvers/wba_join_corpus_test.go
@@ -60,7 +60,7 @@ func (t *recordingTransport) RoundTrip(req *http.Request) (*http.Response, error
 	return &http.Response{
 		StatusCode: http.StatusOK,
 		Body:       io.NopCloser(strings.NewReader(`{"keys":[]}`)),
-		Header:     make(http.Header),
+		Header:     http.Header{"Content-Type": {resolvers.WBADirectoryMediaType}},
 		Request:    req,
 	}, nil
 }
diff --git a/sdk/go/resolvers/wbakeyresolver.go b/sdk/go/resolvers/wbakeyresolver.go
index 72fbb91a..d01f244d 100644
--- a/sdk/go/resolvers/wbakeyresolver.go
+++ b/sdk/go/resolvers/wbakeyresolver.go
@@ -379,8 +379,10 @@ type WBAKeyResolverOptions struct {
 	// After overrides the poll-tick timer source (nil → time.After). Tests
 	// inject a deterministic clock.
 	After func(time.Duration) <-chan time.Time
-	// Scheme is applied when the Signature-Agent value carries no scheme
-	// (empty → "https"). Tests inject "http" to drive an httptest server.
+	// Scheme is the scheme directories are fetched over (empty → "https"). A
+	// Signature-Agent member is always an https origin; tests inject "http" to
+	// fetch that origin's directory from a plaintext httptest server, and a bare
+	// host reference is prefixed with it.
 	Scheme string
 	// RequireRevocation makes Resolve fail closed with ErrRevocationUnevaluated
 	// when a key's directory declares a revocation_url but no snapshot has been
@@ -405,9 +407,11 @@ type WBAKeyResolverOptions struct {
 // WBAKeyResolver resolves signing keys from WBA identity directories
 // (WBADirectoryPath), matching by RFC 7638 thumbprint (the RFC 9421 keyid) —
 // never by kid — and enforcing each key's [not_before, not_after) validity
-// window plus the host's revocation snapshot. The directory host comes from the
-// verified request's Signature-Agent value, threaded into ctx by the resolved
-// verify entrypoints (SignatureAgentFromContext). Directories are cached per
+// window plus the host's revocation snapshot. The directory is the origin the
+// signature's own covered Signature-Agent member names, threaded into ctx per
+// signature by the resolved verify entrypoints (SignatureAgentFromContext). A
+// directory is fetched with no redirect, must be served as WBADirectoryMediaType,
+// and only the keys that signed its response are ever handed out. Directories are cached per
 // host with a TTL; revocation snapshots are primed on directory fetch and kept
 // fresh by the Run poller. See the sentinel var block for the authority
 // contract: revoked/expired/unavailable verdicts surface raw.
@@ -612,6 +616,9 @@ func (r *WBAKeyResolver) directoryBase(ref string) (base, host string, err error
 		ref = r.scheme + "://" + ref
 	}
 	u, err := url.Parse(ref)
+	if err == nil && u.Scheme == "https" && r.scheme != "https" {
+		u.Scheme = r.scheme
+	}
 	if err != nil {
 		// Framed, not passed through raw. A value that is not a URL at all used to
 		// surface whatever url.Parse happened to complain about — for the spec's
@@ -822,7 +829,7 @@ func (r *WBAKeyResolver) syncRefresh(ctx context.Context, base, host string) (*f
 // status, or decode failure wraps ErrDirectoryUnavailable — see the sentinel
 // contract: a directory outage must stay distinguishable from an unknown key.
 func (r *WBAKeyResolver) fetchDirectory(ctx context.Context, base string) (*forav1.WBAFile, error) {
-	return fetchWBAFile(ctx, r.http, base)
+	return fetchWBAFile(ctx, r.http, base, r.now())
 }
 
 func (r *WBAKeyResolver) isRevoked(host, thumbprint string) bool {
diff --git a/sdk/go/resolvers/wbakeyresolver_debounce_test.go b/sdk/go/resolvers/wbakeyresolver_debounce_test.go
index e921d1b2..aef49eeb 100644
--- a/sdk/go/resolvers/wbakeyresolver_debounce_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_debounce_test.go
@@ -54,7 +54,7 @@ func newCountingOrigin() *countingOrigin {
 	return o
 }
 
-func (o *countingOrigin) serve(w http.ResponseWriter, _ *http.Request) {
+func (o *countingOrigin) serve(w http.ResponseWriter, r *http.Request) {
 	o.hits.Add(1)
 	if o.arrived != nil {
 		o.arrived <- struct{}{}
@@ -67,8 +67,7 @@ func (o *countingOrigin) serve(w http.ResponseWriter, _ *http.Request) {
 		w.WriteHeader(http.StatusNotFound)
 		return
 	}
-	w.Header().Set("Content-Type", "application/jwk-set+json")
-	_, _ = w.Write(*p)
+	writeSignedDirectory(w, r, *p)
 }
 
 func (o *countingOrigin) setWBA(b []byte) { o.doc.Store(&b) }
diff --git a/sdk/go/resolvers/wbakeyresolver_profile_test.go b/sdk/go/resolvers/wbakeyresolver_profile_test.go
new file mode 100644
index 00000000..7ef6b306
--- /dev/null
+++ b/sdk/go/resolvers/wbakeyresolver_profile_test.go
@@ -0,0 +1,148 @@
+package resolvers_test
+
+// The key directory under the Web Bot Auth profile, through WBAKeyResolver: only
+// a key the response is signed by is handed out, the media type is the profile's,
+// a redirect fails the fetch, and a request carrying two signatures has each one
+// resolved in the directory its own Signature-Agent member names.
+
+import (
+	"bytes"
+	"context"
+	"crypto/ed25519"
+	"encoding/base64"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
+)
+
+func profileResolver(client *http.Client) *resolvers.WBAKeyResolver {
+	return resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
+		Scheme: "http", HTTP: client, Now: func() time.Time { return wbaAnchor },
+	})
+}
+
+// TestWBAKeyResolver_handsOutOnlyKeysThatSignedTheResponse: a listed key with no
+// valid response signature is never resolved.
+func TestWBAKeyResolver_handsOutOnlyKeysThatSignedTheResponse(t *testing.T) {
+	t.Parallel()
+	signedPriv, signedJWK := newSigningKey("signed", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
+	// A key whose private half no test registered, so the origin cannot sign with it.
+	unsignedPub, _, _ := ed25519.GenerateKey(nil)
+	_, unsignedJWK := newSigningKey("unsigned-placeholder", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
+	unsignedJWK.X = jwkX(unsignedPub)
+
+	origin := newWBAOrigin(nil)
+	defer origin.close()
+	origin.setWBA(marshalWBA(signedJWK, unsignedJWK))
+	r := profileResolver(origin.Client())
+	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
+
+	if _, err := r.Resolve(ctx, mustThumbprint(t, signedPriv.Public().(ed25519.PublicKey))); err != nil {
+		t.Fatalf("the signing key: %v", err)
+	}
+	if _, err := r.Resolve(ctx, mustThumbprint(t, unsignedPub)); !errors.Is(err, helpers.ErrUnknownKey) {
+		t.Fatalf("a key that did not sign the response: err = %v, want ErrUnknownKey", err)
+	}
+}
+
+// TestWBAKeyResolver_refusesTheWrongMediaTypeAndRedirects: a directory served as
+// application/jwk-set+json, or reached through a redirect, is a directory that is
+// unavailable, never one whose keys are read.
+func TestWBAKeyResolver_refusesTheWrongMediaTypeAndRedirects(t *testing.T) {
+	t.Parallel()
+	priv, jwk := newSigningKey("k-media", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
+	tp := mustThumbprint(t, priv.Public().(ed25519.PublicKey))
+	body := marshalWBA(jwk)
+	for name, handler := range map[string]http.HandlerFunc{
+		"the JWK Set media type": func(w http.ResponseWriter, r *http.Request) {
+			rec := httptest.NewRecorder()
+			writeSignedDirectory(rec, r, body)
+			for k, v := range rec.Header() {
+				w.Header()[k] = v
+			}
+			w.Header().Set("Content-Type", "application/jwk-set+json")
+			_, _ = w.Write(rec.Body.Bytes())
+		},
+		"a redirect": func(w http.ResponseWriter, r *http.Request) {
+			if strings.HasSuffix(r.URL.Path, "/moved") {
+				writeSignedDirectory(w, r, body)
+				return
+			}
+			http.Redirect(w, r, "/moved", http.StatusFound)
+		},
+	} {
+		t.Run(name, func(t *testing.T) {
+			srv := httptest.NewServer(handler)
+			defer srv.Close()
+			ctx := helpers.WithSignatureAgent(context.Background(), srv.URL)
+			if _, err := profileResolver(srv.Client()).Resolve(ctx, tp); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+				t.Fatalf("err = %v, want ErrDirectoryUnavailable", err)
+			}
+		})
+	}
+}
+
+// TestWBAKeyResolver_eachSignatureInItsOwnDirectory signs one request as an agent
+// and a broker, each publishing its key only in its own directory, and verifies
+// both signatures through one resolver. Swapping which member the broker's
+// signature covers sends its keyid to the agent's directory, where it is unknown.
+func TestWBAKeyResolver_eachSignatureInItsOwnDirectory(t *testing.T) {
+	t.Parallel()
+	agentPriv, agentJWK := newSigningKey("agent-dir", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
+	brokerPriv, brokerJWK := newSigningKey("broker-dir", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
+	agentOrigin, brokerOrigin := newWBAOrigin(nil), newWBAOrigin(nil)
+	defer agentOrigin.close()
+	defer brokerOrigin.close()
+	agentOrigin.setWBA(marshalWBA(agentJWK))
+	brokerOrigin.setWBA(marshalWBA(brokerJWK))
+	httpsOrigin := func(o *wbaOrigin) string { return "https://" + strings.TrimPrefix(o.url, "http://") }
+
+	signer := func(priv ed25519.PrivateKey) helpers.Signer {
+		s, err := helpers.NewEd25519Signer(mustThumbprint(t, priv.Public().(ed25519.PublicKey)), priv)
+		if err != nil {
+			t.Fatal(err)
+		}
+		return s
+	}
+	body := []byte(`{"q":"two directories"}`)
+	req, err := http.NewRequest(http.MethodPost, "https://exchange.example/fora.v1.ExchangeService/DiscoverResources", bytes.NewReader(body))
+	if err != nil {
+		t.Fatal(err)
+	}
+	created := wbaAnchor.Unix()
+	opts := func(origin string) helpers.SignOptions {
+		return helpers.SignOptions{Created: created, Expires: created + 300, SignatureAgent: origin}
+	}
+	if err := helpers.SignRequest(context.Background(), req, body, signer(agentPriv), opts(httpsOrigin(agentOrigin))); err != nil {
+		t.Fatal(err)
+	}
+	if err := helpers.AppendSignature(context.Background(), req, body, signer(brokerPriv), opts(httpsOrigin(brokerOrigin))); err != nil {
+		t.Fatal(err)
+	}
+	r := profileResolver(http.DefaultClient)
+	vopts := helpers.VerifyOptions{Now: wbaAnchor.Add(time.Minute)}
+	verified, err := helpers.VerifyMultisigRequestResolved(context.Background(), req, body, r, vopts)
+	if err != nil {
+		t.Fatalf("verify: %v", err)
+	}
+	if len(verified) != 2 || verified[0].SignatureAgent != httpsOrigin(agentOrigin) || verified[1].SignatureAgent != httpsOrigin(brokerOrigin) {
+		t.Fatalf("verified = %+v", verified)
+	}
+
+	// Point sig2's member at the agent's directory: its signature no longer
+	// verifies, and nothing resolves the broker's key from the agent's directory.
+	swapped := req.Clone(context.Background())
+	swapped.Header.Set(helpers.SignatureAgentHeader,
+		`sig1="`+httpsOrigin(agentOrigin)+`", sig2="`+httpsOrigin(agentOrigin)+`"`)
+	if _, err := helpers.VerifyMultisigRequestResolved(context.Background(), swapped, body, r, vopts); err == nil {
+		t.Fatal("a broker signature verified after its member was pointed at the agent's directory")
+	}
+}
+
+func jwkX(pub ed25519.PublicKey) string { return base64.RawURLEncoding.EncodeToString(pub) }
diff --git a/sdk/go/resolvers/wbakeyresolver_test.go b/sdk/go/resolvers/wbakeyresolver_test.go
index 89801706..e4dcaad3 100644
--- a/sdk/go/resolvers/wbakeyresolver_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_test.go
@@ -609,6 +609,7 @@ func newSigningKey(seed string, notBefore, notAfter time.Time) (ed25519.PrivateK
 	raw := make([]byte, ed25519.SeedSize)
 	copy(raw, []byte(seed))
 	priv := ed25519.NewKeyFromSeed(raw)
+	registerDirectoryKey(priv)
 	pub, _ := priv.Public().(ed25519.PublicKey)
 	jwk := &forav1.JsonWebKey{
 		Kty:       "OKP",
@@ -691,7 +692,7 @@ func (o *wbaOrigin) setWBAStatus(code int) {
 	o.wbaStatus.Store(int32(code)) //nolint:gosec // small status code
 }
 
-func (o *wbaOrigin) serveWBA(w http.ResponseWriter, _ *http.Request) {
+func (o *wbaOrigin) serveWBA(w http.ResponseWriter, r *http.Request) {
 	if code := o.wbaStatus.Load(); code != 0 {
 		w.WriteHeader(int(code))
 		return
@@ -701,8 +702,7 @@ func (o *wbaOrigin) serveWBA(w http.ResponseWriter, _ *http.Request) {
 		w.WriteHeader(http.StatusNotFound)
 		return
 	}
-	w.Header().Set("Content-Type", "application/jwk-set+json")
-	_, _ = w.Write(*p)
+	writeSignedDirectory(w, r, *p)
 }
 
 func (o *wbaOrigin) serveRevocation(w http.ResponseWriter, _ *http.Request) {
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index b58dbee0..50566ee8 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -86,7 +86,7 @@
     "helpers.AudienceMalformed": "Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer.",
     "helpers.AudienceMismatch": "Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer.",
     "helpers.AudienceNoVerdict": "Member of the mapped helpers.AudienceVerdict vocabulary. Python and TypeScript spell it as a literal rather than a named export, and the shared audience corpus pins the token every language must answer.",
-    "helpers.BrokerKeyIDPrefix": "Relay keyID wire-prefix constant; inlined per language.",
+    "helpers.BrokerKeyIDPrefix": "Deprecated Go constant kept for the v1 module surface; keyids are RFC 7638 thumbprints and nothing reads a relay prefix, so py/ts have no counterpart.",
     "helpers.CheckRegistrationDataStruct": "Go-only raw-Struct face of the mapped helpers.CheckRegistrationData, and deliberately absent from the ports: it exists because a payload with NO JSON REPRESENTATION loses the evidence for that when Go converts a Struct to a map. The class has two members and the conversion erases both — a non-finite number becomes the string \"NaN\", \"Infinity\" or \"-Infinity\", which a payload may also carry legitimately, and a Value with no member of its kind oneof set becomes nil, which is also what a real JSON null gives — so the check has to run before the conversion. Python and TypeScript are handed a decoded object rather than protobuf nodes: it keeps the real float, so their check_registration_data / checkRegistrationData already see the non-finite member, and the unset-kind member has no spelling in either language. A second entry point there would be an alias with nothing to do. The verdict vocabulary is what the three share, and the registration-schema corpus pins it; neither member has a vector in any language, because JSON cannot write either value down.",
     "helpers.CheckStrictMessage": "Go check of an already-decoded proto.Message, which is how the Go client holds a binary answer and every ErrorDetail; py/ts hold only proto-JSON, so check_strict/checkStrict over the decoded JSON is the whole of their check and there is no message object to pass.",
     "helpers.ComponentParam": "Go value type for an RFC 9421 covered-component parameter; py/ts model components inline.",
@@ -198,7 +198,18 @@
     "resolvers.NewGuardedTransport": "Go constructor composing the SSRF guard over a caller's base transport; py/ts expose their guarded fetch as a single factory with no separable base.",
     "resolvers.ProofSigner": "Go interface seam that keeps key custody out of the dialing tier; py/ts inject a signing callable instead of a named interface.",
     "resolvers.ReadOptions": "Go options struct for the document readers; Python takes the same values as keyword arguments (http=, scheme=) and TS as an options object (ReadDocumentOptions).",
-    "resolvers.SSRFCheckRedirect": "Go redirect-policy hook; py/ts fold redirect checks into the guard (async_ssrf_guard / the guarded fetch)."
+    "resolvers.SSRFCheckRedirect": "Go redirect-policy hook; py/ts fold redirect checks into the guard (async_ssrf_guard / the guarded fetch).",
+    "helpers.ErrSignatureTag": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrSignatureAgentForm": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrSignatureAgentNotOrigin": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrSignatureAgentRequired": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrSignatureLabel": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrSignatureLifetime": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.ErrDirectoryResponseUnsigned": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
+    "helpers.MissingComponentError": "Go typed error behind errors.Is(ErrMissingRequiredComponent); py/ts report the refusal as a reason token and carry the Accept-Signature value on the verdict.",
+    "helpers.AcceptSignatureFor": "Go maps a verification error to its Accept-Signature value; py/ts carry the value on the verification verdict (accept_signature / acceptSignature), so no error-to-value function exists to mirror.",
+    "core.WithSignerSource": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "core.WithCoverPrevious": "Go functional-option builder; py/ts pass options via kwargs/options objects."
   },
   "symbols": {
     "connect.AdminClient": {
@@ -1178,6 +1189,56 @@
       "allowlist_reason": null,
       "python": "PROFILE_ID",
       "ts": "ProfileID"
+    },
+    "helpers.WBATag": {
+      "allowlist_reason": null,
+      "python": "WBATag",
+      "ts": "WBATag"
+    },
+    "helpers.DirectoryResponseTag": {
+      "allowlist_reason": null,
+      "python": "DirectoryResponseTag",
+      "ts": "DirectoryResponseTag"
+    },
+    "helpers.AcceptSignatureHeader": {
+      "allowlist_reason": null,
+      "python": "AcceptSignatureHeader",
+      "ts": "AcceptSignatureHeader"
+    },
+    "helpers.MaxSignatureLifetime": {
+      "allowlist_reason": null,
+      "python": "MAX_SIGNATURE_LIFETIME",
+      "ts": "MAX_SIGNATURE_LIFETIME"
+    },
+    "helpers.CheckHTTPSOrigin": {
+      "allowlist_reason": null,
+      "python": "check_https_origin",
+      "ts": "checkHttpsOrigin"
+    },
+    "helpers.AcceptSignature": {
+      "allowlist_reason": null,
+      "python": "accept_signature",
+      "ts": "acceptSignature"
+    },
+    "helpers.SignDirectoryResponse": {
+      "allowlist_reason": null,
+      "python": "sign_directory_response",
+      "ts": "signDirectoryResponse"
+    },
+    "helpers.VerifyDirectoryResponse": {
+      "allowlist_reason": null,
+      "python": "verify_directory_response",
+      "ts": "verifyDirectoryResponse"
+    },
+    "helpers.DirectoryResponseSignature": {
+      "allowlist_reason": null,
+      "python": "DirectoryResponseSignature",
+      "ts": "DirectoryResponseSignature"
+    },
+    "core.SignerSource": {
+      "allowlist_reason": null,
+      "python": "SignerSource",
+      "ts": "SignerSource"
     }
   }
 }

From 6445866742c8217554fc8fcf7cf8d83544571fa4 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 14:17:51 -0400
Subject: [PATCH 113/164] Describe the Web Bot Auth profile as shipped, in the
 changelog and the docs

The Unreleased changelog described the profile as documentation only,
with the SDK and wire changes to follow in a later release, and two
integration-branch entries still spoke of a forwarding chain for
discovery and of WBA directories served as application/jwk-set+json.
The profile entry now states the final state: the wire rules, the
multi-signature rules, the directory rules and the deliberate EdDSA
deviation, then the SDK changes in all three languages and the shared
vectors, and the hard cut. The Broker-purchase and document-reader
entries follow it.

The authentication page's caution box says the next SDK release
implements the profile and that the reference implementation's
directories change when it adopts that release, and the multi-hop
verification step states which member a signature covering several is
attributed to: the one keyed to its own label. The agent SDK page and
the Go README describe the directory reader and resolver, the signing
options, appending, Accept-Signature, the delivery proof and the
redirect rule as they now are.
---
 proto/CHANGELOG.md                            | 207 ++++++++++--------
 sdk/go/README.md                              |  68 ++++--
 .../docs/components/agent-sdk/overview.mdx    |  22 +-
 .../content/docs/protocol/authentication.mdx  |   6 +-
 .../src/content/docs/reference/changelog.mdx  | 207 ++++++++++--------
 5 files changed, 305 insertions(+), 205 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 3b1e9f0f..1f317d82 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -483,9 +483,9 @@ The contract now defines that relay.
   agent to that one offer, and each result comes from the Exchange that owns the
   resource. In a result item the one signed value is `retrieval_endpoint`; the
   combined response is otherwise the Broker's unsigned report.
-- Updated rules: the forwarding chain of hop signatures applies to requests
-  forwarded byte-for-byte, such as discovery; a purchase through a Broker is always
-  re-packaged. On a re-packaged purchase the delegation holder binding (`cnf.jkt`)
+- Updated rules: a purchase through a Broker is always re-packaged, and the Broker
+  signs each sub-request alone (see the Web Bot Auth profile entry below). On a
+  re-packaged purchase the delegation holder binding (`cnf.jkt`)
   and `agent_identity_hash` use the key the item's `AgentAcceptance` verifies
   under, not the request signer, which is the Broker. An Exchange scopes a relayed
   request's idempotency key per Broker, authenticated requester and key.
@@ -574,8 +574,9 @@ request only where it means to, and check every answer through the SDK's own dec
   SSRF and https-only scheme guards, and returns the parsed generated message with the
   URL, the bytes and the media type (`Document`), or fails with a typed error; none
   returns nothing. The manifest must be served as `application/json` and the WBA
-  directory as `application/jwk-set+json` (`MediaTypeRefusedError`, `MediaTypeRefused`,
-  `ErrMediaTypeRefused`). The manifest's `ver` is read first. Every document must pass
+  directory as `application/http-message-signatures-directory+json`
+  (`MediaTypeRefusedError`, `MediaTypeRefused`, `ErrMediaTypeRefused`), fetched with no
+  redirect and signed by every key it lists (see the Web Bot Auth profile entry below). The manifest's `ver` is read first. Every document must pass
   the strict check below. The license reader checks the `License`, fetches its `uri` and
   verifies the bytes against `uri_digest` (`LicenseDocument`, or `DigestMismatchError`,
   `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
@@ -585,7 +586,8 @@ request only where it means to, and check every answer through the SDK's own dec
   fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
   endpoint resolver, the registration-requirements reader, the WBA key resolver and the
   offer-directory fetch read the same documents through the same fetch and decode,
-  without the media-type and strict checks. The Python and TypeScript readers return the
+  without the strict check; the WBA key resolver and the offer-directory fetch still
+  check a directory's media type and response signatures. The Python and TypeScript readers return the
   generated model, which names an enum by its value name, so they refuse a document that
   writes an enum as its number; the Go reader accepts it. New corpora:
   `document-check-vectors.json`, the verdict for a document's bytes and Content-Type, and
@@ -646,94 +648,127 @@ The detail builders gain `helpers.RequestAuthFailureDetail` (Go),
 (TypeScript), and the readers (`helpers.Reason`, `reason`) return the new enum.
 The Python and TypeScript SDKs have no RPC refusal writer, so they read this
 detail but do not emit it.
-**The documentation now specifies a Web Bot Auth profile for request signatures
-(docs only in this entry; the SDK and wire changes follow).** The Authentication
-page said FORA was "automatically compatible" with Web Bot Auth and that "no
-changes to FORA's authentication are required". That was not true. A Web Bot Auth
-verifier refuses a FORA signature, and a FORA verifier refuses a signature from a
-Web Bot Auth library. The pages also disagreed with each other: Transaction Flow
-and the Exchange request flows said each hop covers `@method`, `@authority`,
-`@path` and `Content-Digest`, while Authentication required `@method`,
+**Request signatures and key directories follow the Web Bot Auth profile (SDK and wire
+change; a hard cut).** The Authentication page said FORA was "automatically compatible"
+with Web Bot Auth and that "no changes to FORA's authentication are required". That was
+not true: a Web Bot Auth verifier refused a FORA signature, and a FORA verifier refused a
+signature from a Web Bot Auth library. The pages also disagreed with each other:
+Transaction Flow and the Exchange request flows said each hop covers `@method`,
+`@authority`, `@path` and `Content-Digest`, while Authentication required `@method`,
 `@target-uri`, `content-digest`, `authorization` and `signature-agent`.
 
-The target is draft-ietf-webbotauth-httpsig-protocol-00 (1 September 2026), the
-only document the IETF webbotauth working group has adopted. Authentication now
-specifies the profile in one place, and the other pages refer to it:
+The target is draft-ietf-webbotauth-httpsig-protocol-00 (1 September 2026), the only
+document the IETF webbotauth working group has adopted. Authentication specifies the
+profile in one place, the other pages and the proto comments refer to it, and the three
+SDKs implement it:
 
 - Every FORA request signature is a conformant Web Bot Auth signature.
-  `Signature-Agent` is a structured-field dictionary, `<label>="https://<origin>"`,
-  covered as `"signature-agent";key="<label>"`. The signature covers `@target-uri`
-  or `@authority`, and carries `created`, `expires`, `keyid` (the RFC 7638
-  thumbprint), `alg="ed25519"`, `tag="web-bot-auth"` and a fresh 64-byte `nonce`.
-  Its lifetime is a few minutes.
+  `Signature-Agent` is a structured-field dictionary with one member per signature,
+  `<label>="https://<origin>"`, covered as `"signature-agent";key="<label>"`. The
+  signature covers `@target-uri` or `@authority`, and carries `created`, `expires`,
+  `keyid` (the RFC 7638 thumbprint), `alg="ed25519"`, `tag="web-bot-auth"` and a fresh
+  64-byte `nonce`. Its lifetime is at most five minutes.
 - A FORA RPC signature also covers `@method`, `@target-uri`, `content-digest` and
   `authorization`. This is FORA policy on top of Web Bot Auth, advertised through
-  `Accept-Signature`. A bodiless request at the publisher edge needs only the Web
-  Bot Auth base.
-- Signers use a `Signature-Agent` member key equal to the signature label.
-  Verifiers also accept a member key that differs from the label, a signature
-  without a nonce, and a member with `type=directory`. The legacy sf-string
-  `Signature-Agent` is accepted on a direct single-hop call only: a party that
-  forwards a request unchanged refuses it, because it cannot add its own member without breaking the agent's
-  signature, and answers with `Accept-Signature` asking for the dictionary form.
-  Verifiers refuse a signature with no `tag`, and a `Signature-Agent` member that
-  is not an https origin, and answer a missing component with `Accept-Signature`
-  listing what they require. `Signature-Agent` is never empty; an empty
-  `Authorization` stays valid.
-- Forwarding follows WG-00 §5.2.2 as the general rule: a party that forwards a
-  request unchanged in every component an earlier signature covers MAY cover
-  that signature, and then covers its `Signature-Input` and every component it
-  lists as well. FORA's Broker never forwards an agent's request unchanged, so
-  it never covers an agent's signature. Discovery through the Broker is
-  Broker-led: the Broker chooses the Exchanges and originates its own queries,
-  signed by the Broker alone. How an agent proves a holder-of-key entitlement
-  at discovery time through a Broker is an open protocol question, tracked
-  separately. Execute through the Broker is
-  re-packaged: the Broker builds a fresh request per Exchange and signs it
-  alone. Every Broker signature covers its own request and only its own
-  `Signature-Agent` member, so single-member WBA verifiers such as Cloudflare's
-  `web-bot-auth` accept it. On a relayed purchase, the agent's identity and
-  consent come from `AgentAcceptance`, the detached Ed25519 signature over
-  `{offer_sig, requester_id, requester_domain, idempotency_key}`, verified
-  against the agent's registered key resolved from `Requester.domain`. That key
-  gives the delivery-URL binding, and a delegation's `cnf.jkt` is checked
-  against it, so delegation stays bound to the agent's key through the Broker.
-  A Broker is never delegated to. This replaces the earlier statement that a
-  Broker may project a delegated request only when the agent has delegated to
-  the Broker's key.
-  `AgentAcceptance` is application-level consent and the profile does not
-  change it. The Exchange resolves each signer's key in the directory that
-  signer names, not in a configured key set.
+  `Accept-Signature`. A bodiless request at the publisher edge needs only the Web Bot
+  Auth base.
+- Signers use a `Signature-Agent` member key equal to the signature label. Verifiers
+  also accept a member key that differs from the label, a signature without a nonce, and
+  a member with `type=directory`. The legacy sf-string `Signature-Agent` is accepted on a
+  request carrying one signature only. Verifiers refuse a signature with no `tag`, a
+  `Signature-Agent` member that is not an https origin, and the bare unquoted value the
+  v1.0.8 SDKs sent, and answer a missing component or a refused form with
+  `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
+  empty `Authorization` stays valid.
+- Several signatures: each is verified on its own, against the key its `keyid` names in
+  the directory its own covered member names; a signature that covers several members
+  (because it covers an earlier signature) follows the one keyed to its label. Covering
+  an earlier signature is optional (WG-00 §5.2.2), and a signature that covers
+  `"signature";key=X` must also cover `"signature-input";key=X` and every component X
+  lists, and X must appear before it. Labels carry no meaning; the `sig1` to `sigN`
+  requirement is gone. The hop caps count every signature. FORA's Broker never forwards
+  an agent's request unchanged, so it never covers an agent's signature: discovery
+  through the Broker is Broker-led, the Broker choosing the Exchanges and originating its
+  own queries, and execute is re-packaged per Exchange; in both cases the Broker signs
+  alone, covering its own request and only its own member. How an agent proves a
+  holder-of-key entitlement at discovery time through a Broker is an open protocol
+  question, tracked separately. On a relayed purchase the agent's identity and consent
+  come from `AgentAcceptance`, verified against the agent's registered key resolved from
+  `Requester.domain`. That key gives the delivery-URL binding, and a delegation's
+  `cnf.jkt` is checked against it; a Broker is never delegated to. The Exchange resolves
+  each signer's key in the directory that signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
-  signature plus `@method` and `@target-uri`. The edge keeps verifying offline
-  with the key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint
-  equals both the signature `keyid` and the delivery URL's `agent_id`. A generic
-  WBA verifier accepts the same signature by resolving the agent's directory.
+  signature plus `@method` and `@target-uri`. The edge keeps verifying offline with the
+  key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint equals both the
+  signature `keyid` and the delivery URL's `agent_id`. A generic WBA verifier accepts
+  the same signature by resolving the agent's directory.
 - Key directories are served over https at
-  `/.well-known/http-message-signatures-directory`, answer `200` without a
-  redirect, use the media type
-  `application/http-message-signatures-directory+json`, and carry a response
-  signature per key with `tag="http-message-signatures-directory"`. Each key's
-  JWK `alg` stays `EdDSA`, the JOSE name RFC 7517 §4.4 defines. This is a known,
-  deliberate deviation from WG-00 §5.5.1, which restricts that member to HTTP
-  Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
-  reference library. It is the only deviation from WG-00.
-
-Authentication includes a complete signed request, a query a Broker originated
-and signed alone, and a signed directory response, all with real values that
-can be verified.
-
-**Upcoming profile change (not in this release).** The SDKs released as v1.0.8
-do not implement the profile. They send `Signature-Agent` as a bare URL, set no
-`tag`, use a 16-byte nonce, require all five FORA components on every signature,
-require the labels `sig1` to `sigN`, follow directory redirects, resolve a
-forwarding hop's key from a configured key set, and sign the retrieval proof of
-possession over `@method` and `@target-uri` only. The reference directories are
-served as `application/jwk-set+json`. The SDK signers, verifiers, directory
-resolvers and shared test vectors change in a coordinated release, together with
-the reference implementation. The change is a hard cut with no transition
-window: once it ships, verifiers refuse the bare unquoted `Signature-Agent` that
-v1.0.8 sends, so v1.0.8 clients must upgrade.
+  `/.well-known/http-message-signatures-directory`, answer `200` without a redirect, use
+  the media type `application/http-message-signatures-directory+json`, and carry a
+  response signature per listed key with `tag="http-message-signatures-directory"`,
+  covering `"@authority";req` and `content-digest`. A revocation list and the `fora.json`
+  manifest may still follow up to five redirects. Each key's JWK `alg` stays `EdDSA`, the
+  JOSE name RFC 7517 §4.4 defines. This is a known, deliberate deviation from WG-00
+  §5.5.1, which restricts that member to HTTP Message Signatures names (`ed25519`); FORA
+  follows RFC 7517 and Cloudflare's reference library. It is the only deviation from
+  WG-00.
+
+Authentication includes a complete signed request, a query a Broker originated and
+signed alone, and a signed directory response, all with real values the SDKs reproduce
+byte for byte.
+
+SDKs, in all three languages:
+
+- Signing: `helpers.SignRequest` / `sign_request` / `signRequest` and
+  `helpers.AppendSignature` / `append_signature` / `appendSignature` take the signer's
+  directory origin and emit the dictionary member, the tag and the profile's parameter
+  order (created, expires, keyid, alg, nonce, tag). They refuse a missing or non-origin
+  directory (`helpers.CheckHTTPSOrigin` / `check_https_origin` / `checkHttpsOrigin`), a
+  window over five minutes (`MaxSignatureLifetime` / `MAX_SIGNATURE_LIFETIME`), an
+  unusable label, and appending to a legacy `Signature-Agent`. An appended signature
+  covers only its own request and member unless asked to cover the previous one
+  (`SignOptions.CoverPrevious`, `cover_previous`, `coverPrevious`). Go's `SignOptions`
+  gains `SignatureAgent`, `Label` and `CoverPrevious`.
+- Verifying: the verifiers apply the rules above, resolve each signature's key with the
+  directory its member names, and carry that directory on the result. A refusal for a
+  missing component or a refused form carries the `Accept-Signature` value
+  (`helpers.AcceptSignature` / `accept_signature` / `acceptSignature`): Go's
+  `connectserver` writes it on the 401, the Python and TypeScript server verdicts carry it,
+  and the Hono middleware writes it. `helpers.ErrBrokenSignatureChain` now means an
+  incomplete or dangling coverage of an earlier signature. `helpers.BrokerKeyIDPrefix` is
+  deprecated.
+- Signing transports: 64-byte nonces; a directory is required (`WithSignatureAgent`,
+  `signature_agent`, `signatureAgent`), and a client without one refuses a signed call
+  locally as malformed. A per-request signer source (`core.WithSignerSource` /
+  `SignerSource`) signs each request as the identity a callback picks. Append mode
+  (`core.WithAppendSigner`, `appendOnly`) is joined by Python's `append_only`, which
+  Python lacked. `core.MonotonicWindow` keeps every window at its ttl.
+- Delivery proof: `helpers.SignAgentBinding` / `sign_agent_binding` / `signInbound`
+  take the agent's directory and a nonce and emit the `Signature-Agent` header; the
+  Python and TypeScript edge verifiers apply the new profile with a structured-field
+  parser.
+- Directories: `helpers.SignDirectoryResponse` / `sign_directory_response` /
+  `signDirectoryResponse` sign a directory response and
+  `helpers.VerifyDirectoryResponse` / `verify_directory_response` /
+  `verifyDirectoryResponse` check one. The WBA key resolvers and the offer-directory
+  fetch refuse redirects, check the media type and hand out only keys that signed the
+  response; `ReadWBADirectory` / `read_wba_directory` / `readWBADirectory` require every
+  listed key to have signed, and refuse `application/jwk-set+json`. The constants
+  `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire constants.
+- Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
+  `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
+  `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier
+  must accept), `multisig-chain-vectors.json` (each signer with its own directory, so a
+  verifier that resolves through the wrong member fails), `pop-vectors.json`,
+  `wire-constants-vectors.json`, `document-check-vectors.json` and the new
+  `directory-response-vectors.json`. The Go suite also checks the draft's Appendix E.2
+  Ed25519 vectors against its signature base builder.
+
+The change is a hard cut with no transition window: verifiers refuse the bare unquoted
+`Signature-Agent` that v1.0.8 sends and a directory served as `application/jwk-set+json`
+or unsigned, so v1.0.8 clients and directories must upgrade. The reference
+implementation's directories are still served as `application/jwk-set+json` and unsigned,
+and change when it adopts this release.
 
 ## v1.0.8
 
diff --git a/sdk/go/README.md b/sdk/go/README.md
index 4a17d240..5b09abbd 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -31,20 +31,38 @@ the static resolver.)
 import "github.com/FORA-Protocol/protocol/sdk/go/helpers"
 ```
 
-**RFC 9421 request signing / verification** — the `Signer` interface signs the
-SDK-built signature base, so a KMS/HSM signer never exposes its key:
+**RFC 9421 request signing / verification, under the Web Bot Auth profile** — the
+`Signer` interface signs the SDK-built signature base, so a KMS/HSM signer never exposes
+its key. Every signature names its signer's key directory as its own `Signature-Agent`
+dictionary member, `sig1="https://agent.example"`, covered as
+`"signature-agent";key="sig1"`, and carries `tag="web-bot-auth"`. A FORA RPC signature
+also covers `@method`, `@target-uri`, `content-digest` and `authorization`, and lives at
+most five minutes:
 
 ```go
-signer, _ := helpers.NewEd25519Signer("agent.v1", priv)
-_ = helpers.SignRequest(ctx, req, body, signer,
-    helpers.SignOptions{Created: created, Expires: expires})
+keyID, _ := helpers.Thumbprint(pub) // the keyid is the key's RFC 7638 thumbprint
+signer, _ := helpers.NewEd25519Signer(keyID, priv)
+_ = helpers.SignRequest(ctx, req, body, signer, helpers.SignOptions{
+    Created: created, Expires: created + 300, SignatureAgent: "https://agent.example",
+    Nonce: freshNonce, // the signing transport supplies 64 random bytes
+})
 
 // verify with the key injected (pure) ...
 vr, err := helpers.VerifyRequest(req, body, pub, helpers.VerifyOptions{})
-// ... or resolve the key via a KeyResolver (static in L1; well-known/WBA in L2 resolvers):
+// ... or resolve the key via a KeyResolver (static in L1; well-known/WBA in L2
+// resolvers), which is handed the directory the signature's own member names:
 vr, err = helpers.VerifyRequestResolved(ctx, req, body, resolver, helpers.VerifyOptions{})
 ```
 
+A party that adds a signature to a request already signed uses
+`helpers.AppendSignature`: the new signature gets its own label and member and covers
+only its own request, unless `SignOptions.CoverPrevious` makes it cover the earlier
+signature completely (WG-00 §5.2.2), which only a party forwarding the request unchanged
+may do. `helpers.VerifyMultisigRequestResolved` verifies every signature on its own,
+counts them against `VerifyOptions.MaxSignatures`, and refuses a partial coverage. A
+refusal for a missing component or a refused form is answered with
+`helpers.AcceptSignatureFor(err)`, which `connectserver` writes as `Accept-Signature`.
+
 **License-term pre-check** — the two tiers an Exchange applies to a pushed entry,
 runnable by a publisher before signing: the wire rules over the entry as given, then
 canonicalisation (RFC 8259 trim, ASCII-only fold, alias resolution through the generated
@@ -101,17 +119,18 @@ rejects one.
 if err := helpers.Validate(req); err != nil { /* helpers.ValidationRuleIDs(err) */ }
 ```
 
-**Agent-binding proof of possession** (ADR-013) — the SIGN face of the header pair
-a bound delivery fetch presents. The covered set is exactly `@method` +
-`@target-uri`: a GET has no body to digest, and the signed URL is itself the
-credential. The key arrives as a `Signer` plus the public half, so custody never
-moves into the SDK:
+**Agent-binding proof of possession** (ADR-013) — the SIGN face of the headers a
+bound delivery fetch presents: a Web Bot Auth signature plus `@method` and
+`@target-uri`, and the agent's public key in `X-FORA-Agent-Key`. A GET has no body to
+digest, and the signed URL is itself the credential. The key arrives as a `Signer` plus
+the public half, so custody never moves into the SDK:
 
 ```go
 binding, _ := helpers.SignAgentBinding(ctx, signer, agentPub, helpers.PoPOptions{
     URL: signedURL, Created: created, Expires: expires, // keep the window short
+    SignatureAgent: "https://agent.example", Nonce: freshNonce,
 })
-binding.Apply(req.Header) // X-FORA-Agent-Key + Signature-Input + Signature
+binding.Apply(req.Header) // X-FORA-Agent-Key + Signature-Agent + Signature-Input + Signature
 ```
 
 **Routing predicates** — the two pure checks that precede a signed call to an
@@ -237,7 +256,10 @@ import "github.com/FORA-Protocol/protocol/sdk/go/resolvers"
 ```
 
 - **Key resolvers** — `NewWellKnownKeyResolver` (well-known JWKS, TTL cache),
-  `NewWBAKeyResolver` (WBA directory, revocation/expiry-aware, with a `Run` poller).
+  `NewWBAKeyResolver` (WBA directory, revocation/expiry-aware, with a `Run` poller). A
+  WBA directory is fetched with no redirect, must be served as
+  `application/http-message-signatures-directory+json`, and only the keys that signed
+  its response (`helpers.VerifyDirectoryResponse`) are handed out.
 - **Endpoint resolver** — `NewWellKnownEndpointResolver` discovers an Exchange's
   own service endpoint (`WellKnownManifest.endpoint`) from `/.well-known/fora.json`,
   host-keyed and cached per host. Three sentinels, and the difference decides whether
@@ -281,13 +303,14 @@ import "github.com/FORA-Protocol/protocol/sdk/go/resolvers"
   (so this tier holds no key material). Bounded body, bounded error body, media
   type reported rather than sniffed, and a typed `FetchError` class.
 
-**Redirects: the guarded client follows, a signed leg refuses.** Following five
-hops is right for a public well-known document — the address is re-pinned and the
-scheme re-vetted on each. It is wrong for anything carrying a credential, so the
-content fetch and the RPC legs take only the guarded `.Transport` and install
-their own refusal: following a redirect either replays a proof bound to the old
-URL, or hands a fresh proof of possession of the agent's key to whatever host the
-first hop named.
+**Redirects: the guarded client follows, a signed leg and a key directory refuse.**
+Following five hops is right for a revocation list or a `fora.json` manifest — the
+address is re-pinned and the scheme re-vetted on each. It is wrong for anything
+carrying a credential, so the content fetch and the RPC legs take only the guarded
+`.Transport` and install their own refusal: following a redirect either replays a
+proof bound to the old URL, or hands a fresh proof of possession of the agent's key to
+whatever host the first hop named. A key directory refuses a redirect too: its address
+is the origin the signer committed to in its covered `Signature-Agent` member.
 
 The guard is driven by exactly two orthogonal env flags — `SKIP_SSRF` (drop the
 dial-time address guard) and `ALLOW_INSECURE` (permit plaintext http) — both
@@ -330,8 +353,11 @@ response or re-implements signing:
 - **`NewAdminClient`** covers every `fora.admin.v1.AdminService` RPC and the two
   domain-verification RPCs.
 - **Identity helpers.** `helpers.GenerateKey` mints an Ed25519 key and its thumbprint,
-  `helpers.DirectoryDocument` builds the WBA key directory publishing a key set, and
+  `helpers.DirectoryDocument` builds the WBA key directory publishing a key set,
+  `helpers.SignDirectoryResponse` signs the response serving it, and
   `core.SigningTransportFor` returns a signing transport that signs as the key.
+  `core.WithSignerSource` signs each request as the identity a callback picks, for a
+  service that signs as many agents.
 - **Document readers.** `resolvers.ReadManifest`, `ReadWBADirectory`,
   `ReadRevocationList` and `ReadLicenseDocument` read what a party publishes, through
   the guarded client unless `ReadOptions.Client` replaces it, and return a `Document`
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index 2d83c7a7..a0b90569 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -130,15 +130,19 @@ A few rules hold in every language:
   reader fetches through the SDK's guarded client, so the SSRF guard and the https-only
   scheme guard apply; `SKIP_SSRF` and `ALLOW_INSECURE` relax them for a sandbox. The
   manifest must be served as `application/json` and the WBA directory as
-  `application/jwk-set+json`; the protocol names no media type for a revocation list or
-  a license document, so their label is reported and not checked. The manifest's `ver`
-  is read before any other member. Every document must then pass the strict check, and
-  the reader returns the parsed generated message with the URL, the bytes and the media
-  type. The license reader checks the `License` itself first, then verifies the fetched
-  bytes against `uri_digest`. A failed fetch, a non-200 answer, a body that is not JSON
-  and a body over 1 MiB are all reported as an unavailable document. The resolvers read
-  the same documents through the same fetch and decode, without the media-type and
-  strict checks, because a router must accept a newer minor version.
+  `application/http-message-signatures-directory+json`; the protocol names no media type
+  for a revocation list or a license document, so their label is reported and not
+  checked. The manifest's `ver` is read before any other member. Every document must
+  then pass the strict check, and the reader returns the parsed generated message with
+  the URL, the bytes and the media type. A WBA directory is fetched with no redirect, and
+  its response must carry a valid response signature by every key it lists. The license
+  reader checks the `License` itself first, then verifies the fetched bytes against
+  `uri_digest`. A failed fetch, a non-200 answer, a body that is not JSON and a body over
+  1 MiB are all reported as an unavailable document. The resolvers read the same
+  documents through the same fetch and decode, without the strict check, because a router
+  must accept a newer minor version. They still read a WBA directory under the Web Bot
+  Auth profile: no redirect, the profile's media type, and only the keys that signed the
+  response.
 - **One strict check per language.** Client strict decoding, the error-envelope check and
   the document readers all call the same check. In Python and TypeScript it is the
   published strict JSON Schema of the message plus the cross-field rules. In Go it
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 0ecf829f..22a0bbd9 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -70,7 +70,7 @@ The rules that make both true are in [The Web Bot Auth Profile](#the-web-bot-aut
 WBA establishes identity: this bot is who it claims to be. FORA adds the transaction layer on top of that identity: this bot is authorised to access this content at this price.
 
 :::caution[Profile change in progress]
-This profile is the target for the next SDK release. The SDKs released as v1.0.8 do not produce or check it yet. They send `Signature-Agent` as a bare, unquoted URL rather than a dictionary, set no `tag`, generate a 16-byte nonce, and refuse any signature that does not cover all five FORA components. The reference directories are served as `application/jwk-set+json`. The change is a hard cut with no transition window: once the profile ships, verifiers refuse the bare unquoted `Signature-Agent` that v1.0.8 sends, so a v1.0.8 client must upgrade to keep working. The SDKs and the reference implementation change together; the [changelog](/reference/changelog/) lists each difference.
+The next SDK release implements this profile in Go, Python and TypeScript. The SDKs released as v1.0.8 do not. They send `Signature-Agent` as a bare, unquoted URL rather than a dictionary, set no `tag`, generate a 16-byte nonce, and refuse any signature that does not cover all five FORA components. The reference implementation's directories are served as `application/jwk-set+json` and unsigned until it adopts that release. The change is a hard cut with no transition window: verifiers of the new release refuse the bare unquoted `Signature-Agent` that v1.0.8 sends and a directory served under the old media type, so a v1.0.8 client must upgrade to keep working. The SDKs and the reference implementation change together; the [changelog](/reference/changelog/) lists each difference.
 :::
 
 ### Signature Verification
@@ -315,7 +315,7 @@ A party that forwards a request unchanged in every component an earlier signatur
 The Exchange:
 
 1. Reads each labeled signature and its `keyid` from `Signature` / `Signature-Input`
-2. Resolves each signature's `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** covered `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2)
+2. Resolves each signature's `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** covered `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2). A signature that covers an earlier one also covers that signature's member, so it covers several; it is attributed to the member keyed to its own label (WG-00 §5.2.1), and a signature covering several members none of which is keyed to its label is refused
 3. Verifies each signature independently against its own covered components and its own key, and authenticates the caller as the party that signed the request: the agent on a direct call, the Broker on a request the Broker sent. Where a party forwarded unchanged and covered an earlier signature, it also confirms that coverage
 4. On an execute request, verifies each item's `AgentAcceptance` against the agent's registered key, as above
 5. Enforces depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting the signatures** in the stack
@@ -419,7 +419,7 @@ The edge still verifies offline. The fetcher also presents its raw public key in
 Agents in the field run many WBA libraries and some send earlier forms of the protocol. A FORA verifier accepts the following, which WG-00 permits:
 
 - **The legacy `Signature-Agent` form, on a direct single-hop call only.** A bare structured-field String (`Signature-Agent: "https://research.acme.com"`), covered as plain `"signature-agent"`. The verifier treats it as a dictionary with one member whose key is the label of the signature covering it. A party that forwards a request unchanged refuses this form, because it has to append its own member to the agent's `Signature-Agent` header and a String cannot take a second member; it answers with `Accept-Signature` asking for the dictionary form, as in the `Accept-Signature` example above. FORA signers never send this form.
-- **A member key different from the signature label.** Signers use a member key equal to the label, but the verifier follows whichever member the signature covers, `"signature-agent";key="<member>"`, whatever the label is called.
+- **A member key different from the signature label.** Signers use a member key equal to the label, but when a signature covers one `Signature-Agent` member the verifier follows that member, `"signature-agent";key="<member>"`, whatever the label is called.
 - **No `nonce`.** WG-00 sets no nonce requirement.
 - **A `type` parameter equal to `directory`** on the member. A member with any other `type` value is ignored, as WG-00 §5.2.1 requires.
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 474290e9..19629564 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -493,9 +493,9 @@ The contract now defines that relay.
   agent to that one offer, and each result comes from the Exchange that owns the
   resource. In a result item the one signed value is `retrieval_endpoint`; the
   combined response is otherwise the Broker's unsigned report.
-- Updated rules: the forwarding chain of hop signatures applies to requests
-  forwarded byte-for-byte, such as discovery; a purchase through a Broker is always
-  re-packaged. On a re-packaged purchase the delegation holder binding (`cnf.jkt`)
+- Updated rules: a purchase through a Broker is always re-packaged, and the Broker
+  signs each sub-request alone (see the Web Bot Auth profile entry below). On a
+  re-packaged purchase the delegation holder binding (`cnf.jkt`)
   and `agent_identity_hash` use the key the item's `AgentAcceptance` verifies
   under, not the request signer, which is the Broker. An Exchange scopes a relayed
   request's idempotency key per Broker, authenticated requester and key.
@@ -586,8 +586,9 @@ summarizes them per language.
   SSRF and https-only scheme guards, and returns the parsed generated message with the
   URL, the bytes and the media type (`Document`), or fails with a typed error; none
   returns nothing. The manifest must be served as `application/json` and the WBA
-  directory as `application/jwk-set+json` (`MediaTypeRefusedError`, `MediaTypeRefused`,
-  `ErrMediaTypeRefused`). The manifest's `ver` is read first. Every document must pass
+  directory as `application/http-message-signatures-directory+json`
+  (`MediaTypeRefusedError`, `MediaTypeRefused`, `ErrMediaTypeRefused`), fetched with no
+  redirect and signed by every key it lists (see the Web Bot Auth profile entry below). The manifest's `ver` is read first. Every document must pass
   the strict check below. The license reader checks the `License`, fetches its `uri` and
   verifies the bytes against `uri_digest` (`LicenseDocument`, or `DigestMismatchError`,
   `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
@@ -597,7 +598,8 @@ summarizes them per language.
   fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
   endpoint resolver, the registration-requirements reader, the WBA key resolver and the
   offer-directory fetch read the same documents through the same fetch and decode,
-  without the media-type and strict checks. The Python and TypeScript readers return the
+  without the strict check; the WBA key resolver and the offer-directory fetch still
+  check a directory's media type and response signatures. The Python and TypeScript readers return the
   generated model, which names an enum by its value name, so they refuse a document that
   writes an enum as its number; the Go reader accepts it. New corpora:
   `document-check-vectors.json`, the verdict for a document's bytes and Content-Type, and
@@ -658,94 +660,127 @@ The detail builders gain `helpers.RequestAuthFailureDetail` (Go),
 (TypeScript), and the readers (`helpers.Reason`, `reason`) return the new enum.
 The Python and TypeScript SDKs have no RPC refusal writer, so they read this
 detail but do not emit it.
-**The documentation now specifies a Web Bot Auth profile for request signatures
-(docs only in this entry; the SDK and wire changes follow).** The Authentication
-page said FORA was "automatically compatible" with Web Bot Auth and that "no
-changes to FORA's authentication are required". That was not true. A Web Bot Auth
-verifier refuses a FORA signature, and a FORA verifier refuses a signature from a
-Web Bot Auth library. The pages also disagreed with each other: Transaction Flow
-and the Exchange request flows said each hop covers `@method`, `@authority`,
-`@path` and `Content-Digest`, while Authentication required `@method`,
+**Request signatures and key directories follow the Web Bot Auth profile (SDK and wire
+change; a hard cut).** The Authentication page said FORA was "automatically compatible"
+with Web Bot Auth and that "no changes to FORA's authentication are required". That was
+not true: a Web Bot Auth verifier refused a FORA signature, and a FORA verifier refused a
+signature from a Web Bot Auth library. The pages also disagreed with each other:
+Transaction Flow and the Exchange request flows said each hop covers `@method`,
+`@authority`, `@path` and `Content-Digest`, while Authentication required `@method`,
 `@target-uri`, `content-digest`, `authorization` and `signature-agent`.
 
-The target is draft-ietf-webbotauth-httpsig-protocol-00 (1 September 2026), the
-only document the IETF webbotauth working group has adopted. Authentication now
-specifies the profile in one place, and the other pages refer to it:
+The target is draft-ietf-webbotauth-httpsig-protocol-00 (1 September 2026), the only
+document the IETF webbotauth working group has adopted. Authentication specifies the
+profile in one place, the other pages and the proto comments refer to it, and the three
+SDKs implement it:
 
 - Every FORA request signature is a conformant Web Bot Auth signature.
-  `Signature-Agent` is a structured-field dictionary, `<label>="https://<origin>"`,
-  covered as `"signature-agent";key="<label>"`. The signature covers `@target-uri`
-  or `@authority`, and carries `created`, `expires`, `keyid` (the RFC 7638
-  thumbprint), `alg="ed25519"`, `tag="web-bot-auth"` and a fresh 64-byte `nonce`.
-  Its lifetime is a few minutes.
+  `Signature-Agent` is a structured-field dictionary with one member per signature,
+  `<label>="https://<origin>"`, covered as `"signature-agent";key="<label>"`. The
+  signature covers `@target-uri` or `@authority`, and carries `created`, `expires`,
+  `keyid` (the RFC 7638 thumbprint), `alg="ed25519"`, `tag="web-bot-auth"` and a fresh
+  64-byte `nonce`. Its lifetime is at most five minutes.
 - A FORA RPC signature also covers `@method`, `@target-uri`, `content-digest` and
   `authorization`. This is FORA policy on top of Web Bot Auth, advertised through
-  `Accept-Signature`. A bodiless request at the publisher edge needs only the Web
-  Bot Auth base.
-- Signers use a `Signature-Agent` member key equal to the signature label.
-  Verifiers also accept a member key that differs from the label, a signature
-  without a nonce, and a member with `type=directory`. The legacy sf-string
-  `Signature-Agent` is accepted on a direct single-hop call only: a party that
-  forwards a request unchanged refuses it, because it cannot add its own member without breaking the agent's
-  signature, and answers with `Accept-Signature` asking for the dictionary form.
-  Verifiers refuse a signature with no `tag`, and a `Signature-Agent` member that
-  is not an https origin, and answer a missing component with `Accept-Signature`
-  listing what they require. `Signature-Agent` is never empty; an empty
-  `Authorization` stays valid.
-- Forwarding follows WG-00 §5.2.2 as the general rule: a party that forwards a
-  request unchanged in every component an earlier signature covers MAY cover
-  that signature, and then covers its `Signature-Input` and every component it
-  lists as well. FORA's Broker never forwards an agent's request unchanged, so
-  it never covers an agent's signature. Discovery through the Broker is
-  Broker-led: the Broker chooses the Exchanges and originates its own queries,
-  signed by the Broker alone. How an agent proves a holder-of-key entitlement
-  at discovery time through a Broker is an open protocol question, tracked
-  separately. Execute through the Broker is
-  re-packaged: the Broker builds a fresh request per Exchange and signs it
-  alone. Every Broker signature covers its own request and only its own
-  `Signature-Agent` member, so single-member WBA verifiers such as Cloudflare's
-  `web-bot-auth` accept it. On a relayed purchase, the agent's identity and
-  consent come from `AgentAcceptance`, the detached Ed25519 signature over
-  `{offer_sig, requester_id, requester_domain, idempotency_key}`, verified
-  against the agent's registered key resolved from `Requester.domain`. That key
-  gives the delivery-URL binding, and a delegation's `cnf.jkt` is checked
-  against it, so delegation stays bound to the agent's key through the Broker.
-  A Broker is never delegated to. This replaces the earlier statement that a
-  Broker may project a delegated request only when the agent has delegated to
-  the Broker's key.
-  `AgentAcceptance` is application-level consent and the profile does not
-  change it. The Exchange resolves each signer's key in the directory that
-  signer names, not in a configured key set.
+  `Accept-Signature`. A bodiless request at the publisher edge needs only the Web Bot
+  Auth base.
+- Signers use a `Signature-Agent` member key equal to the signature label. Verifiers
+  also accept a member key that differs from the label, a signature without a nonce, and
+  a member with `type=directory`. The legacy sf-string `Signature-Agent` is accepted on a
+  request carrying one signature only. Verifiers refuse a signature with no `tag`, a
+  `Signature-Agent` member that is not an https origin, and the bare unquoted value the
+  v1.0.8 SDKs sent, and answer a missing component or a refused form with
+  `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
+  empty `Authorization` stays valid.
+- Several signatures: each is verified on its own, against the key its `keyid` names in
+  the directory its own covered member names; a signature that covers several members
+  (because it covers an earlier signature) follows the one keyed to its label. Covering
+  an earlier signature is optional (WG-00 §5.2.2), and a signature that covers
+  `"signature";key=X` must also cover `"signature-input";key=X` and every component X
+  lists, and X must appear before it. Labels carry no meaning; the `sig1` to `sigN`
+  requirement is gone. The hop caps count every signature. FORA's Broker never forwards
+  an agent's request unchanged, so it never covers an agent's signature: discovery
+  through the Broker is Broker-led, the Broker choosing the Exchanges and originating its
+  own queries, and execute is re-packaged per Exchange; in both cases the Broker signs
+  alone, covering its own request and only its own member. How an agent proves a
+  holder-of-key entitlement at discovery time through a Broker is an open protocol
+  question, tracked separately. On a relayed purchase the agent's identity and consent
+  come from `AgentAcceptance`, verified against the agent's registered key resolved from
+  `Requester.domain`. That key gives the delivery-URL binding, and a delegation's
+  `cnf.jkt` is checked against it; a Broker is never delegated to. The Exchange resolves
+  each signer's key in the directory that signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
-  signature plus `@method` and `@target-uri`. The edge keeps verifying offline
-  with the key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint
-  equals both the signature `keyid` and the delivery URL's `agent_id`. A generic
-  WBA verifier accepts the same signature by resolving the agent's directory.
+  signature plus `@method` and `@target-uri`. The edge keeps verifying offline with the
+  key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint equals both the
+  signature `keyid` and the delivery URL's `agent_id`. A generic WBA verifier accepts
+  the same signature by resolving the agent's directory.
 - Key directories are served over https at
-  `/.well-known/http-message-signatures-directory`, answer `200` without a
-  redirect, use the media type
-  `application/http-message-signatures-directory+json`, and carry a response
-  signature per key with `tag="http-message-signatures-directory"`. Each key's
-  JWK `alg` stays `EdDSA`, the JOSE name RFC 7517 §4.4 defines. This is a known,
-  deliberate deviation from WG-00 §5.5.1, which restricts that member to HTTP
-  Message Signatures names (`ed25519`); FORA follows RFC 7517 and Cloudflare's
-  reference library. It is the only deviation from WG-00.
-
-Authentication includes a complete signed request, a query a Broker originated
-and signed alone, and a signed directory response, all with real values that
-can be verified.
-
-**Upcoming profile change (not in this release).** The SDKs released as v1.0.8
-do not implement the profile. They send `Signature-Agent` as a bare URL, set no
-`tag`, use a 16-byte nonce, require all five FORA components on every signature,
-require the labels `sig1` to `sigN`, follow directory redirects, resolve a
-forwarding hop's key from a configured key set, and sign the retrieval proof of
-possession over `@method` and `@target-uri` only. The reference directories are
-served as `application/jwk-set+json`. The SDK signers, verifiers, directory
-resolvers and shared test vectors change in a coordinated release, together with
-the reference implementation. The change is a hard cut with no transition
-window: once it ships, verifiers refuse the bare unquoted `Signature-Agent` that
-v1.0.8 sends, so v1.0.8 clients must upgrade.
+  `/.well-known/http-message-signatures-directory`, answer `200` without a redirect, use
+  the media type `application/http-message-signatures-directory+json`, and carry a
+  response signature per listed key with `tag="http-message-signatures-directory"`,
+  covering `"@authority";req` and `content-digest`. A revocation list and the `fora.json`
+  manifest may still follow up to five redirects. Each key's JWK `alg` stays `EdDSA`, the
+  JOSE name RFC 7517 §4.4 defines. This is a known, deliberate deviation from WG-00
+  §5.5.1, which restricts that member to HTTP Message Signatures names (`ed25519`); FORA
+  follows RFC 7517 and Cloudflare's reference library. It is the only deviation from
+  WG-00.
+
+Authentication includes a complete signed request, a query a Broker originated and
+signed alone, and a signed directory response, all with real values the SDKs reproduce
+byte for byte.
+
+SDKs, in all three languages:
+
+- Signing: `helpers.SignRequest` / `sign_request` / `signRequest` and
+  `helpers.AppendSignature` / `append_signature` / `appendSignature` take the signer's
+  directory origin and emit the dictionary member, the tag and the profile's parameter
+  order (created, expires, keyid, alg, nonce, tag). They refuse a missing or non-origin
+  directory (`helpers.CheckHTTPSOrigin` / `check_https_origin` / `checkHttpsOrigin`), a
+  window over five minutes (`MaxSignatureLifetime` / `MAX_SIGNATURE_LIFETIME`), an
+  unusable label, and appending to a legacy `Signature-Agent`. An appended signature
+  covers only its own request and member unless asked to cover the previous one
+  (`SignOptions.CoverPrevious`, `cover_previous`, `coverPrevious`). Go's `SignOptions`
+  gains `SignatureAgent`, `Label` and `CoverPrevious`.
+- Verifying: the verifiers apply the rules above, resolve each signature's key with the
+  directory its member names, and carry that directory on the result. A refusal for a
+  missing component or a refused form carries the `Accept-Signature` value
+  (`helpers.AcceptSignature` / `accept_signature` / `acceptSignature`): Go's
+  `connectserver` writes it on the 401, the Python and TypeScript server verdicts carry it,
+  and the Hono middleware writes it. `helpers.ErrBrokenSignatureChain` now means an
+  incomplete or dangling coverage of an earlier signature. `helpers.BrokerKeyIDPrefix` is
+  deprecated.
+- Signing transports: 64-byte nonces; a directory is required (`WithSignatureAgent`,
+  `signature_agent`, `signatureAgent`), and a client without one refuses a signed call
+  locally as malformed. A per-request signer source (`core.WithSignerSource` /
+  `SignerSource`) signs each request as the identity a callback picks. Append mode
+  (`core.WithAppendSigner`, `appendOnly`) is joined by Python's `append_only`, which
+  Python lacked. `core.MonotonicWindow` keeps every window at its ttl.
+- Delivery proof: `helpers.SignAgentBinding` / `sign_agent_binding` / `signInbound`
+  take the agent's directory and a nonce and emit the `Signature-Agent` header; the
+  Python and TypeScript edge verifiers apply the new profile with a structured-field
+  parser.
+- Directories: `helpers.SignDirectoryResponse` / `sign_directory_response` /
+  `signDirectoryResponse` sign a directory response and
+  `helpers.VerifyDirectoryResponse` / `verify_directory_response` /
+  `verifyDirectoryResponse` check one. The WBA key resolvers and the offer-directory
+  fetch refuse redirects, check the media type and hand out only keys that signed the
+  response; `ReadWBADirectory` / `read_wba_directory` / `readWBADirectory` require every
+  listed key to have signed, and refuse `application/jwk-set+json`. The constants
+  `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire constants.
+- Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
+  `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
+  `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier
+  must accept), `multisig-chain-vectors.json` (each signer with its own directory, so a
+  verifier that resolves through the wrong member fails), `pop-vectors.json`,
+  `wire-constants-vectors.json`, `document-check-vectors.json` and the new
+  `directory-response-vectors.json`. The Go suite also checks the draft's Appendix E.2
+  Ed25519 vectors against its signature base builder.
+
+The change is a hard cut with no transition window: verifiers refuse the bare unquoted
+`Signature-Agent` that v1.0.8 sends and a directory served as `application/jwk-set+json`
+or unsigned, so v1.0.8 clients and directories must upgrade. The reference
+implementation's directories are still served as `application/jwk-set+json` and unsigned,
+and change when it adopts this release.
 
 ## v1.0.8
 

From 0a810c272de345e0d38165805fc805b8f7581064 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 14:18:29 -0400
Subject: [PATCH 114/164] Record the Web Bot Auth readings the SDKs chose in
 the design history

The draft and the profile leave a few points to the implementation: which
Signature-Agent member a signature covering several is attributed to,
whether covering an earlier signature is required, where the five-minute
limit applies, how a directory response signature affects the resolver
and the reader, and whether the JWK Set media type stays accepted. The
design history records the reading the three SDKs share for each, and
why.
---
 docs/design-history.md | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/docs/design-history.md b/docs/design-history.md
index 2e804731..be61be0f 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2290,3 +2290,44 @@ of it.
 The shared-projection argument these faces rest on depends on this. One fetch decodes the
 whole well-known document and each face reads its own members off that single projection,
 which is only sound while every face is fetching the same path.
+
+## Signing under the Web Bot Auth profile: the readings the SDKs chose
+
+The SDKs sign and verify under the profile of draft-ietf-webbotauth-httpsig-protocol-00
+that the authentication page states. The draft and the profile leave a few points to the
+implementation, and the three SDKs settle them the same way.
+
+**Which member a signature names.** The draft says the member keyed to the signature's
+label must be signed, and the profile also accepts a member key that differs from the
+label. Both hold for a signature that covers one member. A signature that covers an
+earlier one must cover that signature's member too (WG-00 §5.2.2), so it covers several.
+The verifier then follows the member keyed to the signature's own label, and refuses a
+signature that covers several members none of which is keyed to its label: no reading of
+the draft attributes it to one directory over another.
+
+**Covering an earlier signature is optional, and partial coverage is refused.** The
+Broker signs alone and covers nothing. A party that does cover an earlier signature must
+cover its `Signature` member, its `Signature-Input` member and every component it lists,
+and may only cover a signature that appears before it in `Signature-Input`; anything
+else is refused before a key is fetched. Two signatures that do not cover each other
+verify independently. Labels carry no meaning, so the old `sig1` to `sigN` contiguity
+rule went with the forwarding chain it served.
+
+**Five minutes is the signer's limit, not the verifier's default.** The signers refuse a
+window longer than five minutes. A verifier keeps its own lifetime clamp
+(`MaxSignatureAge`), unset by default, because another Web Bot Auth signer may choose a
+longer window and the draft allows up to 24 hours. `MonotonicWindow`, which bumps
+`expires` during a burst, now moves `created` with it so the window stays at its ttl and
+never crosses the signer's limit.
+
+**A directory response signature filters keys in the resolver and gates the reader.**
+The resolvers hand out only keys the response is signed by; a listed key without a valid
+signature reads as absent, the way a removed key does, so a rotation in progress or a key
+whose private half was destroyed does not take the whole directory down. The public
+reader checks what a party publishes, so it refuses a directory unless every listed key
+signed. A directory listing no key has nothing to sign.
+
+**No transition for the old media type.** A directory served as
+`application/jwk-set+json` is refused, like the bare `Signature-Agent` value: the
+profile names a hard cut, and accepting the old label would leave the reference
+directories unsigned with nothing to say so.

From 4927be3342948dc182a2e5ca7c33e17d332905c2 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 15:04:41 -0400
Subject: [PATCH 115/164] Sign and verify TypeScript requests under the Web Bot
 Auth profile

The TypeScript SDK signed the v1.0.8 way: a bare Signature-Agent value, no
tag, a 16-byte nonce, labels sig1..sigN required, every appended signature
covering the one before it, and Signature-Input read with regular
expressions. It now follows the profile of
draft-ietf-webbotauth-httpsig-protocol-00 that the Go SDK implements, and
replays the vectors Go emits.

Structured fields: core/sfv.ts parses and serializes RFC 8941 dictionaries,
items, inner lists and parameters without a new dependency. Signature-Input,
Signature and Signature-Agent are read through it, on the request path and
in the delivery proof.

Signing (signRequest, appendSignature): signatureAgent is the signer's https
origin, checked by the new checkHttpsOrigin. Each signature adds its own
Signature-Agent member <label>="<origin>" and covers it as
"signature-agent";key="<label>", with created, expires, keyid, alg, nonce
and tag="web-bot-auth", and a window of at most MAX_SIGNATURE_LIFETIME. An
appended signature takes the first free sigN, appends its member beside the
earlier ones, refuses a legacy String Signature-Agent, and covers the
earlier signature only with coverPrevious. A refusal throws
WebBotAuthError, whose reason names the rule, and nothing is signed. One
signature-base builder serves every signer and verifier.

Verifying: each signature is checked on its own, its key resolved in the
directory its own covered member names. RequestKeyResolver.resolve now
receives that directory and may answer asynchronously. Both verdicts
report the directory, and a refusal for a missing component, a missing or
wrong tag, or a refused Signature-Agent form carries acceptSignature.
Coverage of an earlier signature must be complete and point backwards; the
hop budget counts every signature.

The delivery proof (signInbound, verifyAgentBinding) is the same profile
over @method, @target-uri and the agent's member, with a nonce. The Hono
middleware answers a refusal the agent can fix with 401 and
Accept-Signature, and anything else with 403 as before.

Key directories are fetched with no redirect, must be served as
application/http-message-signatures-directory+json, and only keys that
signed the response are handed out (signDirectoryResponse,
verifyDirectoryResponse). readWBADirectory refuses a directory unless every
listed key signed, with the new DirectoryResponseUnsigned. The WBA
resolver's scheme option now overrides the fetch scheme of an https origin.

The signing transport uses 64-byte nonces, requires a directory, and gains
signerSource and coverPrevious; monotonicWindow keeps every window at its
ttl. The client refuses a signed call with no directory as malformed before
sending it, and a bound fetch presents the agent's member and a nonce.
---
 sdk/ts/README.md                              |  26 +-
 sdk/ts/client/content.ts                      |  29 +-
 sdk/ts/client/index.ts                        |  15 +-
 sdk/ts/client/options.ts                      |  11 +-
 sdk/ts/client/transport.ts                    |  13 +-
 sdk/ts/core/directory-response.ts             | 168 ++++
 sdk/ts/core/identity.ts                       |  33 +-
 sdk/ts/core/multisig-parse.ts                 | 273 +++----
 sdk/ts/core/sfv.ts                            | 319 ++++++++
 sdk/ts/core/sign-request.ts                   | 510 ++++++++-----
 sdk/ts/core/sign.ts                           | 140 +++-
 sdk/ts/core/signing-transport.ts              | 186 +++--
 sdk/ts/core/verify-multisig-request.ts        | 230 +++---
 sdk/ts/core/verify-request.ts                 | 475 +++++-------
 sdk/ts/core/wba.ts                            | 361 +++++++++
 sdk/ts/core/window.ts                         |  12 +-
 sdk/ts/hono/middleware.ts                     |  28 +-
 sdk/ts/resolvers/documents.ts                 | 113 ++-
 sdk/ts/resolvers/errors.ts                    |  21 +-
 sdk/ts/resolvers/http.ts                      |  66 +-
 sdk/ts/resolvers/index.ts                     |   3 +-
 sdk/ts/resolvers/offer-key-cache.ts           |   5 +-
 sdk/ts/resolvers/wba.ts                       |  23 +-
 sdk/ts/src/base64url.ts                       |   9 +
 sdk/ts/src/opaque-url.ts                      |   2 +-
 sdk/ts/src/pop.ts                             | 201 +++--
 sdk/ts/src/wire.ts                            |  21 +-
 sdk/ts/tests/admin-client.test.ts             |   1 +
 sdk/ts/tests/before-sign.test.ts              |   1 +
 sdk/ts/tests/broker-execute.test.ts           |   2 +
 sdk/ts/tests/client-content-encoding.test.ts  |   4 +-
 .../client-empty-covered-header-wire.test.ts  |  42 +-
 sdk/ts/tests/client-failure-classes.test.ts   |   4 +-
 sdk/ts/tests/client-refusal-reclaim.test.ts   |   5 +-
 sdk/ts/tests/client-request.parity.test.ts    |   1 +
 sdk/ts/tests/client-scheme-guard.test.ts      |   2 +
 sdk/ts/tests/client.test.ts                   |  41 +
 sdk/ts/tests/content-fetch.parity.test.ts     |   2 +
 .../tests/directory-response.parity.test.ts   | 128 ++++
 .../document-readers.integration.test.ts      |  68 +-
 sdk/ts/tests/hostile-response-data.test.ts    |   1 +
 sdk/ts/tests/identity.test.ts                 | 104 ++-
 .../tests/multisig-base-reuse.guard.test.ts   | 171 ++---
 sdk/ts/tests/multisig-chain.parity.test.ts    | 718 ++++++++----------
 sdk/ts/tests/multisig-parse.edge.test.ts      |  85 ++-
 .../pop-control-bytes.regression.test.ts      |   7 +-
 sdk/ts/tests/raw-body.test.ts                 |   1 +
 sdk/ts/tests/rawurl-shape.guard.test.ts       |  37 +-
 sdk/ts/tests/rawurl-shape.regression.test.ts  |  36 +-
 sdk/ts/tests/resolvers-harness.ts             | 114 ++-
 .../resolvers-wba-revocation.parity.test.ts   |   9 +
 .../tests/resolvers-wba.integration.test.ts   | 156 ++++
 sdk/ts/tests/server-verify.smoke.test.ts      |  54 +-
 sdk/ts/tests/sfv.test.ts                      |  92 +++
 sdk/ts/tests/sign-request.parity.test.ts      | 275 +++----
 sdk/ts/tests/signature-nonce.test.ts          |  49 +-
 sdk/ts/tests/signedurl-pop.parity.test.ts     |  65 +-
 sdk/ts/tests/signing-transport.parity.test.ts | 337 +++++---
 .../tests/synthesized-detail.parity.test.ts   |   1 +
 sdk/ts/tests/verify-request.parity.test.ts    | 684 ++++++++---------
 sdk/ts/tests/wba-fixtures.ts                  |  57 ++
 sdk/ts/tests/wba-profile.test.ts              | 296 ++++++++
 .../window-signature-pin.regression.test.ts   |  40 +-
 sdk/ts/tests/window.behavior.test.ts          |  16 +-
 sdk/ts/tests/wire.parity.test.ts              |  15 +
 65 files changed, 4574 insertions(+), 2440 deletions(-)
 create mode 100644 sdk/ts/core/directory-response.ts
 create mode 100644 sdk/ts/core/sfv.ts
 create mode 100644 sdk/ts/core/wba.ts
 create mode 100644 sdk/ts/tests/directory-response.parity.test.ts
 create mode 100644 sdk/ts/tests/sfv.test.ts
 create mode 100644 sdk/ts/tests/wba-fixtures.ts
 create mode 100644 sdk/ts/tests/wba-profile.test.ts

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index ac069bee..7292bfcc 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -55,14 +55,36 @@ its typed `detail`. `execute` returns each delivery URL as the Exchange issued i
 `fetch` dials it as given with the agent's proof of possession: the delivery edge verifies
 the URL, and its refusal comes back with the edge's `retrieval_auth_failure` reason.
 `createAdminClient` covers the operator RPCs, and `@fora-protocol/sdk/identity` mints an
-agent key, its key directory and a signer.
+agent key, its key directory, the directory's response signatures
+(`signDirectoryResponse`) and a signer.
+
+Requests are signed under the Web Bot Auth profile of RFC 9421
+(draft-ietf-webbotauth-httpsig-protocol-00). A signature covers `@method`, `@target-uri`,
+`content-digest`, `authorization` and its own `Signature-Agent` member, such as
+`sig1="https://agent.example"`, which names the key directory its keyid is resolved in. It
+carries `tag="web-bot-auth"`, a 64-byte nonce, and a window of at most five minutes
+(`MAX_SIGNATURE_LIFETIME`). A client needs `signatureAgent`, the https origin of its key
+directory, to sign: without one, a signed call is refused as `malformed` before anything is
+sent. A party that adds its own signature to a request (`appendSignature`, or `appendOnly`
+on `createSigningTransport`) appends its member beside the earlier ones, and covers the
+earlier signature only when `coverPrevious` is set; a `signerSource` signs each request as
+a different identity. `verifyRequestServer` and `verifyMultisigRequestServer` resolve each
+signature's key in the directory its own member names and report that directory. A refusal
+for a missing component, a missing or wrong tag, or a refused `Signature-Agent` form
+carries the `Accept-Signature` value (`acceptSignature`) to answer with. The delivery proof
+`fetch` presents is the same profile over `@method`, `@target-uri` and the agent's member,
+and the `@fora-protocol/sdk/hono` middleware answers a proof it can ask for again with 401
+and `Accept-Signature`.
 
 `@fora-protocol/sdk/resolvers` reads and checks the documents a party publishes:
 `readManifest`, `readWBADirectory`, `readRevocationList` and `readLicenseDocument` fetch
 through the guarded transport, refuse the wrong media type (`MediaTypeRefused`) and a body
 the strict contract refuses (`StrictViolation`), and resolve to the parsed model with its
 URL, bytes and media type; the license reader also verifies the bytes against
-`uri_digest` (`DigestMismatch`). `checkStrict(message, payload)` from
+`uri_digest` (`DigestMismatch`). A key directory is fetched with no redirect, must be
+served as `application/http-message-signatures-directory+json`, and must carry a response
+signature by every key it lists (`DirectoryResponseUnsigned`); the WBA key resolver hands
+out only the keys that signed. `checkStrict(message, payload)` from
 `@fora-protocol/sdk/client` applies the same check to any decoded message.
 
 `@fora-protocol/sdk/discovery-hint` reads the edge discovery headers of a 403:
diff --git a/sdk/ts/client/content.ts b/sdk/ts/client/content.ts
index 82c4be4e..baaec4fc 100644
--- a/sdk/ts/client/content.ts
+++ b/sdk/ts/client/content.ts
@@ -8,12 +8,13 @@
 import { Agent, type Dispatcher, request as undiciRequest } from "undici";
 
 import { signInbound } from "../core/sign.ts";
+import { newNonce } from "../core/signing-transport.ts";
 import type { Window } from "../core/window.ts";
 import { AGENT_KEY_HEADER } from "../src/pop.ts";
 import { retrievalAuthFailureDetail } from "../src/errordetail.ts";
 import { escapePair } from "../src/host-ref.ts";
 import { MAX_BODY_DEPTH, rawNestingDepth } from "../src/jsondepth.ts";
-import { RequestIDHeader } from "../src/wire.ts";
+import { RequestIDHeader, SignatureAgentHeader } from "../src/wire.ts";
 import { IDENTITY_ENCODING, refuseUnrequestedEncoding } from "./transport.ts";
 import { requireScheme, skipSSRF, ssrfGuard } from "../resolvers/http.ts";
 import { ForaCallError } from "./errors.ts";
@@ -83,6 +84,10 @@ export interface ContentFetchOptions {
 	 * neither can be derived from the other: the private half signs, the public half is
 	 * presented alongside. */
 	keyPair: CryptoKeyPair;
+	/** The https origin of the agent's key directory, the one that publishes the key the
+	 * URL is bound to. The proof carries it as its Signature-Agent member, so a generic
+	 * Web Bot Auth verifier can resolve the key there. */
+	signatureAgent: string;
 	/** The freshness window stamped on the proof. Short on purpose, and deliberately NOT
 	 * the signed URL's own expiry, which can be hours: the proof covers only the method
 	 * and the URL, so for as long as the window is open anyone who observes the request
@@ -128,6 +133,7 @@ export async function fetchContent(
 		const proof = await mintProof(op, signedURL, opts);
 		const headers: Record<string, string> = {
 			[AGENT_KEY_HEADER]: proof.agentKey,
+			[SignatureAgentHeader.toLowerCase()]: proof.signatureAgent,
 			"signature-input": proof.signatureInput,
 			signature: proof.signature,
 			...IDENTITY_ENCODING,
@@ -270,16 +276,18 @@ function malformedURL(op: string, what: string): ForaCallError {
 	});
 }
 
-/** The three proof header values one bound fetch presents. */
+/** The four proof header values one bound fetch presents. */
 interface Proof {
 	agentKey: string;
+	signatureAgent: string;
 	signatureInput: string;
 	signature: string;
 }
 
-// mintProof signs a GET of the target through the shipped RFC 9421 proof-of-possession
-// signer. It reuses core/sign.ts rather than restating the covered-component set, so the
-// bytes stay identical to what the edge's verifier reconstructs.
+// mintProof signs a GET of the target through the shipped Web Bot Auth
+// proof-of-possession signer, with a fresh 64-byte nonce. It reuses core/sign.ts rather
+// than restating the covered-component set, so the bytes stay identical to what the
+// edge's verifier reconstructs.
 //
 // The proof is minted AFTER the URL has been accepted as dialable and BEFORE anything is
 // sent, so a URL that cannot be used never costs a signing operation.
@@ -290,11 +298,11 @@ async function mintProof(
 ): Promise<Proof> {
 	let request: Request;
 	try {
-		request = await signInbound(
-			opts.keyPair,
-			signedURL,
-			opts.window !== undefined ? { window: opts.window } : {},
-		);
+		request = await signInbound(opts.keyPair, signedURL, {
+			signatureAgent: opts.signatureAgent,
+			nonce: newNonce(),
+			...(opts.window !== undefined ? { window: opts.window } : {}),
+		});
 	} catch (cause) {
 		// The given URL is deliberately NOT echoed: this error reaches a log, and a
 		// delivery URL carries a live credential in its query.
@@ -316,6 +324,7 @@ async function mintProof(
 	}
 	return {
 		agentKey: request.headers.get(AGENT_KEY_HEADER) ?? "",
+		signatureAgent: request.headers.get(SignatureAgentHeader) ?? "",
 		signatureInput: request.headers.get("signature-input") ?? "",
 		signature: request.headers.get("signature") ?? "",
 	};
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index 177d92d6..f8995cff 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -1076,13 +1076,24 @@ async function fetchVerb(r: Resolved, signedURL: string): Promise<Content> {
 			),
 		});
 	}
+	if (r.opts.signatureAgent === undefined || r.opts.signatureAgent === "") {
+		throw new ForaCallError({
+			kind: "not_signable",
+			op,
+			cause: new Error(
+				"no signatureAgent configured; a bound fetch names the agent's key directory " +
+					"as the proof's Signature-Agent member",
+			),
+		});
+	}
 	return fetchContent(signedURL, {
 		// One private key, held by the signer. The public half rides alongside because
 		// custody keeps the private one and a CryptoKey cannot be asked for its pair.
 		keyPair: { privateKey: r.opts.signer.privKey, publicKey: r.opts.agentPublicKey },
+		signatureAgent: r.opts.signatureAgent,
 		// The proof window is the client's, not the signer's. core/sign.ts defaults to the
-		// 10-minute TTL a server-side proof uses; a delivery proof is minted for one GET
-		// and wants the short window instead, so the default is set here rather than
+		// five-minute limit of a Web Bot Auth signature; a delivery proof is minted for one
+		// GET and wants the short window instead, so the default is set here rather than
 		// inherited.
 		window: r.opts.proofWindow ?? clockWindow(() => Date.now() / 1000, DEFAULT_PROOF_WINDOW_SEC),
 		...(r.opts.contentTimeoutMs !== undefined
diff --git a/sdk/ts/client/options.ts b/sdk/ts/client/options.ts
index d51137f5..38c6a5d4 100644
--- a/sdk/ts/client/options.ts
+++ b/sdk/ts/client/options.ts
@@ -108,7 +108,16 @@ export interface ClientOptions {
 	 * sets `terms_digest` on the request, which suppresses the read and says so on the
 	 * message the signature covers. */
 	registrationRequirements?: RegistrationRequirementsReader;
-	/** The WBA directory origin this client signs as. */
+	/** The key-directory origin this client signs as, such as "https://agent.example" —
+	 * the place a peer fetches to find the key that signed the request. Every outbound
+	 * request signature, and every delivery-fetch proof, carries it as its own
+	 * Signature-Agent dictionary member, sig1="<origin>", covered by the signature.
+	 *
+	 * Required to sign. A client with no directory refuses every signed call locally, as
+	 * a `malformed` call, before anything is sent, and a value that is not an https
+	 * origin is refused the same way. One value per client, because one client speaks
+	 * for one agent; an application signing as several agents builds a client per agent,
+	 * or composes createSigningTransport with a signerSource. */
 	signatureAgent?: string;
 	/** The RFC 9421 freshness window stamped on every outbound call. Not needed for
 	 * uniqueness: every request signature carries a fresh nonce. */
diff --git a/sdk/ts/client/transport.ts b/sdk/ts/client/transport.ts
index a07fa599..f8186dd3 100644
--- a/sdk/ts/client/transport.ts
+++ b/sdk/ts/client/transport.ts
@@ -11,6 +11,7 @@
 // are produced and parsed by the generated Zod schemas, which is the same path the
 // canonical proto-JSON round-trip gate already proves loss-free against Go protojson.
 
+import { WebBotAuthError } from "../core/wba.ts";
 import { signOutbound } from "../core/signing-transport.ts";
 import type { Window } from "../core/window.ts";
 import { errorDetailFrom } from "../src/errordetail.ts";
@@ -113,8 +114,10 @@ export interface UnaryTarget {
 export interface CallSigner {
 	privKey: CryptoKey;
 	keyid: string;
-	/** The WBA directory origin this client signs as. Covered by the signature even when
-	 * empty, so it is passed through verbatim rather than defaulted here. */
+	/** The key-directory origin this client signs as ("https://agent.example"), written
+	 * as every signature's Signature-Agent member. Required to sign: a call signed with
+	 * none, or with a value that is not an https origin, is refused locally as
+	 * `malformed` before anything is sent. */
 	signatureAgent?: string;
 	/** The RFC 9421 freshness window. Defaults to the signing transport's own. */
 	window?: Window;
@@ -315,7 +318,10 @@ function encodeBody(op: string, message: unknown): Uint8Array<ArrayBuffer> {
 	return new TextEncoder().encode(text) as Uint8Array<ArrayBuffer>;
 }
 
-// signCall produces the RFC 9421 headers for this request. A custody failure is
+// signCall produces the RFC 9421 headers for this request. A request the profile will
+// not sign — no Signature-Agent origin, one that is not an https origin, a window longer
+// than the profile allows — is `malformed`, refused before anything is sent, as Go
+// classifies the same signing refusal. Any other failure is a custody failure and is
 // `not_signable`, matching what the content leg answers for the same missing holder: a
 // caller branching on the kind sees one condition under one class, whichever verb met it
 // first.
@@ -338,6 +344,7 @@ async function signCall(
 		});
 		return signed.headers;
 	} catch (cause) {
+		if (cause instanceof WebBotAuthError) throw malformed(op, cause);
 		throw new ForaCallError({ kind: "not_signable", op, cause });
 	}
 }
diff --git a/sdk/ts/core/directory-response.ts b/sdk/ts/core/directory-response.ts
new file mode 100644
index 00000000..212efad7
--- /dev/null
+++ b/sdk/ts/core/directory-response.ts
@@ -0,0 +1,168 @@
+// A key directory's response is signed once per key it lists (WG-00 §5.5 and Appendix
+// B.1), and FORA requires it. Each response signature covers "@authority";req, the
+// authority the directory was fetched from, and content-digest, carries created,
+// expires, keyid (the key's RFC 7638 thumbprint) and alg, and has
+// tag="http-message-signatures-directory". "@authority";req takes its value from the
+// request that fetched the directory, so the signature cannot be served again under a
+// different host. TS port of sdk/go/helpers/directory.go.
+
+import { stdBase64, utf8Bytes } from "../src/base64url.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import { DirectoryResponseTag } from "../src/wire.ts";
+import { parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
+import { buildSignatureBase, contentDigest, signatureInputInner } from "./sign-request.ts";
+import { ed25519Verify, readHeader } from "./verify-request.ts";
+import { type CoveredComponent, coversComponent, plain } from "./wba.ts";
+
+/** The three header values a key directory's response carries for its response
+ * signatures, ready to set on the response. */
+export interface DirectoryResponseSignature {
+	contentDigest: string;
+	signatureInput: string;
+	signature: string;
+}
+
+/** One key a directory response is signed with: the private key and its keyid, the
+ * RFC 7638 thumbprint of a key the directory lists. */
+export interface DirectoryResponseSigner {
+	privKey: CryptoKey;
+	keyid: string;
+}
+
+/** Why a directory response could not be checked at all: its Content-Digest does not
+ * match the body ("digest_mismatch"), or it carries no Content-Digest or no response
+ * signature ("unsigned"). */
+export class DirectoryResponseError extends Error {
+	readonly reason: "digest_mismatch" | "unsigned";
+	constructor(reason: "digest_mismatch" | "unsigned", message: string) {
+		super(message);
+		this.name = "DirectoryResponseError";
+		this.reason = reason;
+	}
+}
+
+// The covered set of a directory response signature, in the order a FORA signer emits
+// it.
+const DIRECTORY_RESPONSE_COVERED: readonly CoveredComponent[] = [
+	{ name: "@authority", params: [{ key: "req", value: true }] },
+	plain("content-digest"),
+];
+
+// A response signature's created may lead the verifier's clock by at most this.
+const MAX_FUTURE_SKEW_SEC = 300;
+
+// directoryResponseValue resolves the two components a directory response signature
+// covers: the authority, lowercased, and the Content-Digest value.
+function directoryResponseValue(authority: string, digest: string): (c: CoveredComponent) => string {
+	return (c) => (c.name.toLowerCase() === "@authority" ? authority.toLowerCase() : digest);
+}
+
+/**
+ * signDirectoryResponse signs a key directory response once per signer, labels
+ * sig1..sigN in order. `authority` is the host[:port] the directory is served under,
+ * exactly as a client's request names it: lowercase, and without a port when it is the
+ * scheme's default. `body` is the exact response body. Each signer's keyid must be the
+ * RFC 7638 thumbprint of a key the body lists; a verifier matches the two. The window is
+ * the caller's: a directory response is cached and may be signed for longer than a
+ * request, so only expires > created > 0 is required.
+ */
+export async function signDirectoryResponse(
+	authority: string,
+	body: Uint8Array<ArrayBuffer>,
+	signers: readonly DirectoryResponseSigner[],
+	created: number,
+	expires: number,
+): Promise<DirectoryResponseSignature> {
+	if (authority === "") throw new Error("directory response needs the authority it is served under");
+	if (signers.length === 0) throw new Error("directory response needs at least one signer");
+	if (created <= 0 || expires <= created) {
+		throw new Error(`directory response window must be positive: created=${created} expires=${expires}`);
+	}
+	const digest = await contentDigest(body);
+	const inputs: string[] = [];
+	const sigs: string[] = [];
+	for (const [i, signer] of signers.entries()) {
+		const label = `sig${i + 1}`;
+		const inner = signatureInputInner({
+			covered: DIRECTORY_RESPONSE_COVERED,
+			keyid: signer.keyid,
+			alg: "ed25519",
+			created,
+			expires,
+			tag: DirectoryResponseTag,
+		});
+		const base = buildSignatureBase(DIRECTORY_RESPONSE_COVERED, directoryResponseValue(authority, digest), inner);
+		const raw = await crypto.subtle.sign("Ed25519", signer.privKey, new TextEncoder().encode(base));
+		inputs.push(`${label}=${inner}`);
+		sigs.push(`${label}=:${stdBase64(new Uint8Array(raw))}:`);
+	}
+	return { contentDigest: digest, signatureInput: inputs.join(", "), signature: sigs.join(", ") };
+}
+
+/** The response headers a directory response check reads: a WHATWG Headers, or a
+ * record matched case-insensitively with repeated spellings joined. */
+export type ResponseHeaders = { get(name: string): string | null } | Record<string, string | undefined>;
+
+function headerOf(headers: ResponseHeaders, name: string): string | undefined {
+	if (typeof headers.get === "function") {
+		const v = (headers as { get(name: string): string | null }).get(name);
+		return v === null ? undefined : v.trim();
+	}
+	return readHeader(headers as Record<string, string | undefined>, name);
+}
+
+/**
+ * verifyDirectoryResponse checks the response signatures of a fetched key directory and
+ * returns the RFC 7638 thumbprints of the listed keys that signed it. `authority` is the
+ * host[:port] the directory was fetched from, `headers` the response headers, `body` the
+ * exact response body, `keys` the raw Ed25519 public keys the body lists, and `now` unix
+ * seconds.
+ *
+ * The Content-Digest must match the body, or no key is verified and it throws
+ * DirectoryResponseError ("digest_mismatch"). A response with no Content-Digest or no
+ * signature at all throws DirectoryResponseError ("unsigned"). Otherwise each response
+ * signature is judged on its own, and one that fails is ignored rather than fatal: it
+ * must carry tag="http-message-signatures-directory" and alg="ed25519", cover exactly
+ * "@authority";req and content-digest, carry created no later than now plus the
+ * 300-second skew and expires no earlier than now, and verify under the listed key whose
+ * thumbprint its keyid names.
+ */
+export async function verifyDirectoryResponse(
+	authority: string,
+	headers: ResponseHeaders,
+	body: Uint8Array<ArrayBuffer>,
+	keys: readonly Uint8Array<ArrayBuffer>[],
+	now: number,
+): Promise<Set<string>> {
+	const digest = headerOf(headers, "content-digest");
+	if (digest === undefined || digest === "") {
+		throw new DirectoryResponseError("unsigned", "key directory response carries no Content-Digest");
+	}
+	if (digest !== (await contentDigest(body))) {
+		throw new DirectoryResponseError("digest_mismatch", "key directory response Content-Digest does not match its body");
+	}
+	const parsed = parseSignatureHeaders(headerOf(headers, "signature-input"), headerOf(headers, "signature"));
+	if (!parsed.ok) throw new DirectoryResponseError("unsigned", "key directory response carries no usable signature");
+	const byThumb = new Map<string, Uint8Array<ArrayBuffer>>();
+	for (const k of keys) {
+		if (k.length === 32) byThumb.set(await thumbprint(k), k);
+	}
+	const verified = new Set<string>();
+	for (const sig of parsed.value) {
+		const pub = byThumb.get(sig.keyid);
+		if (pub === undefined || !paramsValid(sig, now)) continue;
+		const base = buildSignatureBase(sig.covered, directoryResponseValue(authority, digest), sig.rawInner);
+		if (await ed25519Verify(pub, sig.signature, utf8Bytes(base))) verified.add(sig.keyid);
+	}
+	return verified;
+}
+
+// paramsValid applies the per-signature rules other than the Ed25519 check: tag, alg,
+// covered set and window.
+function paramsValid(sig: ParsedSignature, now: number): boolean {
+	if (sig.tag !== DirectoryResponseTag || sig.alg?.toLowerCase() !== "ed25519") return false;
+	if (sig.covered.length !== DIRECTORY_RESPONSE_COVERED.length) return false;
+	if (!DIRECTORY_RESPONSE_COVERED.every((want) => coversComponent(sig.covered, want))) return false;
+	if (!sig.created || !sig.expires) return false;
+	return sig.created <= now + MAX_FUTURE_SKEW_SEC && sig.expires >= now;
+}
diff --git a/sdk/ts/core/identity.ts b/sdk/ts/core/identity.ts
index 1bf2d9fb..6c79b840 100644
--- a/sdk/ts/core/identity.ts
+++ b/sdk/ts/core/identity.ts
@@ -1,9 +1,15 @@
 // Mint an Ed25519 identity a FORA verifier can resolve.
 //
-// Three steps a caller otherwise assembles by hand: a key and its keyid, the Web Bot Auth
-// key directory that publishes it, and a signer that signs as it. The directory has the
-// shape of the generated WBAFile schema, the one the SDK's own WBA resolver parses, so a
-// document built here is one that resolver accepts.
+// Four steps a caller otherwise assembles by hand: a key and its keyid, the Web Bot Auth
+// key directory that publishes it, the response signatures that directory is served
+// with, and a signer that signs as it. The directory has the shape of the generated
+// WBAFile schema, the one the SDK's own WBA resolver parses, and a resolver hands out
+// only the keys whose signature the response carries, so a directory is served as
+//
+//	const body = new TextEncoder().encode(JSON.stringify(await directoryDocument([pub])));
+//	const sig = await signDirectoryResponse("agent.example", body, [{ privKey, keyid }], created, expires);
+//
+// with Content-Type WBA_DIRECTORY_MEDIA_TYPE and sig's three headers.
 
 import type { z } from "zod";
 
@@ -12,6 +18,15 @@ import { encodeBase64Url } from "../src/base64url.ts";
 import { thumbprint } from "../src/thumbprint.ts";
 import { createSigningTransport, type OutboundSend } from "./signing-transport.ts";
 
+export {
+	type DirectoryResponseSignature,
+	type DirectoryResponseSigner,
+	DirectoryResponseError,
+	type ResponseHeaders,
+	signDirectoryResponse,
+	verifyDirectoryResponse,
+} from "./directory-response.ts";
+
 /** A Web Bot Auth key directory document. */
 export type WBAFile = z.infer<typeof WBAFileSchema>;
 
@@ -39,8 +54,9 @@ export async function generateKey(): Promise<{ keyPair: CryptoKeyPair; thumbprin
  * directoryDocument returns the Web Bot Auth key-directory JSON publishing `keys` (Ed25519
  * public keys), in order.
  *
- * Each key carries the `not_before` / `not_after` window the resolver requires before it
- * will hand the key out: it opens five minutes before `now` and lasts `validForMs`
+ * Each key keeps JWK alg "EdDSA", the RFC 7517 name for the algorithm, not the RFC 9421
+ * value "ed25519" a signature names. Each key carries the `not_before` / `not_after`
+ * window the resolver requires before it will hand the key out: it opens five minutes before `now` and lasts `validForMs`
  * (DEFAULT_KEY_VALIDITY_MS when absent or not positive). `now` defaults to the current time
  * and is injectable for a deterministic document. No revocation_url is set.
  */
@@ -70,8 +86,9 @@ export async function directoryDocument(
 
 /**
  * signingTransportFor returns a signing transport that signs as `keyPair`: keyid is its
- * public key's thumbprint and Signature-Agent is `directory`, the WBA directory that
- * publishes it. It wraps `send` exactly as createSigningTransport does.
+ * public key's thumbprint and each signature's Signature-Agent member names `directory`,
+ * the https origin ("https://agent.example") of the key directory that publishes it. It
+ * wraps `send` exactly as createSigningTransport does.
  */
 export async function signingTransportFor<R>(
 	keyPair: CryptoKeyPair,
diff --git a/sdk/ts/core/multisig-parse.ts b/sdk/ts/core/multisig-parse.ts
index e665429a..648f4711 100644
--- a/sdk/ts/core/multisig-parse.ts
+++ b/sdk/ts/core/multisig-parse.ts
@@ -1,42 +1,39 @@
-// sdk/ts multi-member RFC 8941 Signature-Input dictionary parser + verbatim
-// inner-per-label extractor — the TS port of Go helpers.parseAllSignatures /
-// rawInnerByLabel / splitTopLevelMembers (verify.go). The single-sig verify path
-// (core/verify-request.ts) hand-rolls a minimal ONE-label parser; the multisig
-// forwarding chain needs the FULL multi-member dictionary parse plus the
-// exact byte-verbatim inner value each hop's base terminates with.
+// sdk/ts Signature-Input / Signature parsing (RFC 9421 over RFC 8941) — the TS port of
+// Go helpers.parseAllSignatures / rawInnerByLabel / splitTopLevelMembers (verify.go).
+// The dictionaries are parsed by the structured-field parser in core/sfv.ts, so quoting,
+// inner-list, integer and byte-sequence edge cases follow RFC 8941 rather than a
+// pattern match. The verbatim inner value per label is split out separately: RFC 9421
+// §2.5 terminates a signature base with the exact bytes the signer emitted, which a
+// re-serialization cannot be trusted to reproduce.
 //
-// Dependency-light on purpose: no new runtime dep, mirroring the existing minimal
-// single-label parsers. Correctness on ADVERSARIAL headers (quoted-comma,
-// backslash escapes, top-level splitting, malformed reject) is pinned by
-// tests/multisig-parse.edge.test.ts — the canonical Go golden vectors are
-// well-behaved and do NOT gate the parser.
+// Every signer, verifier and appender on the request path reads signatures through
+// parseSignatureHeaders, so a request carrying one signature is the N=1 case of the
+// same parse.
 
-import { decodeBase64Url } from "../src/base64url.ts";
+import { type CoveredComponent, type ComponentParam, type Checked } from "./wba.ts";
+import { parseDictionary, type SfItem, type SfParams } from "./sfv.ts";
 
-/** One covered-component identifier: a lowercased name plus, for a forwarding
- * chain link `"signature";key="sigN"`, the referenced predecessor label. */
-export interface MultisigCovered {
-	name: string;
-	chainKey?: string;
-}
-
-/** One parsed Signature-Input dictionary member (one hop's label). `rawInner` is
- * the VERBATIM value after `label=` — the exact @signature-params bytes the hop's
- * signature base must terminate with (Go sigParams.RawInner). */
-export interface MultisigMember {
+/** One parsed signature: its label, covered components and parameters, and the
+ * VERBATIM inner value after `label=` — the exact @signature-params bytes its base must
+ * terminate with (Go sigParams.RawInner). */
+export interface ParsedSignature {
 	label: string;
-	rawInner: string;
-	covered: MultisigCovered[];
-	keyid: string | null;
-	alg: string | null;
+	covered: CoveredComponent[];
+	keyid: string;
+	alg?: string;
 	created?: number;
 	expires?: number;
+	nonce?: string;
+	tag?: string;
+	rawInner: string;
+	/** The raw signature bytes the Signature header carries under this label. */
+	signature: Uint8Array<ArrayBuffer>;
 }
 
 /**
- * Split one SFV dictionary header value on TOP-LEVEL commas, honoring quoted
- * strings and their backslash escapes (Go splitTopLevelMembers). A comma inside a
- * quoted keyid must NOT tear the member in two.
+ * Split one SFV dictionary header value on TOP-LEVEL commas, honoring quoted strings
+ * and their backslash escapes (Go splitTopLevelMembers). A comma inside a quoted keyid
+ * must NOT tear the member in two.
  */
 export function splitTopLevelMembers(s: string): string[] {
 	const parts: string[] = [];
@@ -63,7 +60,8 @@ export function splitTopLevelMembers(s: string): string[] {
 /**
  * The VERBATIM member value after `label=` for each label across the given
  * Signature-Input header values (Go rawInnerByLabel). Later occurrences overwrite
- * earlier ones, matching SFV dictionary last-wins semantics.
+ * earlier ones, matching SFV dictionary last-wins semantics, so the raw text
+ * corresponds to the member the dictionary parse kept.
  */
 export function rawInnerByLabel(values: string[]): Record<string, string> {
 	const out: Record<string, string> = {};
@@ -78,165 +76,78 @@ export function rawInnerByLabel(values: string[]): Record<string, string> {
 	return out;
 }
 
-// findQuoteEnd returns the index of the closing quote for the quoted string that
-// opens at `open`, honoring backslash escapes, or -1 if unterminated.
-function findQuoteEnd(s: string, open: number): number {
-	let escaped = false;
-	for (let i = open + 1; i < s.length; i += 1) {
-		const c = s[i];
-		if (escaped) {
-			escaped = false;
-		} else if (c === "\\") {
-			escaped = true;
-		} else if (c === '"') {
-			return i;
-		}
-	}
-	return -1;
-}
-
-// findInnerListEnd returns the index of the inner-list closing paren, honoring
-// quoted strings (a param value may contain a paren), or -1 if unterminated.
-function findInnerListEnd(s: string): number {
-	let inQuote = false;
-	let escaped = false;
-	for (let i = 1; i < s.length; i += 1) {
-		const c = s[i];
-		if (escaped) {
-			escaped = false;
-		} else if (c === "\\" && inQuote) {
-			escaped = true;
-		} else if (c === '"') {
-			inQuote = !inQuote;
-		} else if (c === ")" && !inQuote) {
-			return i;
-		}
-	}
-	return -1;
-}
-
-// parseCovered parses an inner-list body ("c1" "c2";key="v" …) into ordered
-// covered components. Returns undefined on a malformed token.
-function parseCovered(inner: string): MultisigCovered[] | undefined {
-	const items: MultisigCovered[] = [];
-	let i = 0;
-	while (i < inner.length) {
-		if (inner[i] === " ") {
-			i += 1;
-			continue;
-		}
-		if (inner[i] !== '"') return undefined;
-		const nameEnd = findQuoteEnd(inner, i);
-		if (nameEnd < 0) return undefined;
-		const comp: MultisigCovered = { name: inner.slice(i + 1, nameEnd).toLowerCase() };
-		i = nameEnd + 1;
-		while (inner[i] === ";") {
-			const next = parseComponentParam(inner, i, comp);
-			if (next < 0) return undefined;
-			i = next;
-		}
-		items.push(comp);
-	}
-	return items;
-}
-
-// parseComponentParam parses one `;key="val"` component parameter starting at
-// `pos` (the ';'), stamping a chainKey onto comp for key="…". Returns the index
-// after the param, or -1 on malformed.
-function parseComponentParam(inner: string, pos: number, comp: MultisigCovered): number {
-	const eq = inner.indexOf("=", pos);
-	if (eq < 0 || inner[eq + 1] !== '"') return -1;
-	const pname = inner.slice(pos + 1, eq);
-	const vEnd = findQuoteEnd(inner, eq + 1);
-	if (vEnd < 0) return -1;
-	if (pname === "key") comp.chainKey = inner.slice(eq + 2, vEnd);
-	return vEnd + 1;
-}
-
-function matchQuoted(s: string, re: RegExp): string | null {
-	const m = s.match(re);
-	return m ? (m[1] ?? "") : null;
-}
-
-function matchInt(s: string, re: RegExp): number | undefined {
-	const m = s.match(re);
-	return m ? Number(m[1]) : undefined;
-}
-
-// parseMember parses one `label=(inner);params` member into a MultisigMember, or
-// undefined on a malformed inner list / member.
-function parseMember(raw: string): MultisigMember | undefined {
-	const eq = raw.indexOf("=");
-	if (eq <= 0) return undefined;
-	const label = raw.slice(0, eq).trim();
-	const rawInner = raw.slice(eq + 1).trim();
-	if (rawInner[0] !== "(") return undefined;
-	const close = findInnerListEnd(rawInner);
-	if (close < 0) return undefined;
-	const covered = parseCovered(rawInner.slice(1, close));
-	if (!covered) return undefined;
-	const tail = rawInner.slice(close + 1);
-	const created = matchInt(tail, /;created=(\d+)/);
-	const expires = matchInt(tail, /;expires=(\d+)/);
-	return {
-		label,
-		rawInner,
-		covered,
-		keyid: matchQuoted(tail, /;keyid="([^"]*)"/),
-		alg: matchQuoted(tail, /;alg="([^"]*)"/),
-		...(created !== undefined ? { created } : {}),
-		...(expires !== undefined ? { expires } : {}),
-	};
-}
+const malformed = (): { ok: false; refusal: { kind: "malformed" } } => ({
+	ok: false,
+	refusal: { kind: "malformed" },
+});
 
 /**
- * Full multi-label parse of the Signature-Input header values, preserving header
- * order. Returns undefined (clean reject) on any malformed member — never a
- * mis-slice into a bogus covered set.
+ * parseSignatureHeaders parses the request's Signature-Input and Signature values (each
+ * with every field line joined, undefined when absent) into one ParsedSignature per
+ * label, in Signature-Input order. A request missing either header is refused as
+ * "unsigned"; one whose headers are not the dictionaries RFC 9421 defines, whose member
+ * lacks a keyid, or whose label has no byte sequence in Signature is "malformed".
  */
-export function parseMultisigSignatureInput(values: string[]): MultisigMember[] | undefined {
-	const members: MultisigMember[] = [];
-	for (const v of values) {
-		for (const raw of splitTopLevelMembers(v)) {
-			const member = parseMember(raw);
-			if (!member) return undefined;
-			members.push(member);
+export function parseSignatureHeaders(
+	signatureInput: string | undefined,
+	signature: string | undefined,
+): Checked<ParsedSignature[]> {
+	if (signatureInput === undefined || signature === undefined) {
+		return { ok: false, refusal: { kind: "unsigned" } };
+	}
+	const inputs = parseDictionary(signatureInput);
+	const sigs = parseDictionary(signature);
+	if (inputs === undefined || sigs === undefined || inputs.size === 0) return malformed();
+	const raw = rawInnerByLabel([signatureInput]);
+	const out: ParsedSignature[] = [];
+	for (const [label, member] of inputs) {
+		if (member.kind !== "inner-list") return malformed();
+		const covered: CoveredComponent[] = [];
+		for (const item of member.items) {
+			const c = coveredFromItem(item);
+			if (c === undefined) return malformed();
+			covered.push(c);
 		}
+		const params = signatureParams(member.params);
+		const sig = sigs.get(label);
+		if (params === undefined || sig?.kind !== "item" || sig.value.type !== "bytes") return malformed();
+		out.push({ label, covered, ...params, rawInner: raw[label] ?? "", signature: sig.value.value });
 	}
-	return members.length > 0 ? members : undefined;
+	return { ok: true, value: out };
 }
 
-/**
- * Parse the RFC 9421 `Signature` header (`label=:<std-base64>:, …`) into a
- * label→raw-bytes map — the per-label lookup the forwarding-chain link resolution
- * and the multisig verify loop share (Go signatureBytesForLabel / parseSigLabel).
- */
-export function signatureBytesByLabel(sigHeader: string): Record<string, Uint8Array<ArrayBuffer>> {
-	const out: Record<string, Uint8Array<ArrayBuffer>> = {};
-	for (const member of splitTopLevelMembers(sigHeader)) {
-		const eq = member.indexOf("=");
-		if (eq <= 0) continue;
-		const label = member.slice(0, eq).trim();
-		const val = member.slice(eq + 1).trim();
-		const first = val.indexOf(":");
-		const last = val.lastIndexOf(":");
-		if (first < 0 || last <= first) continue;
-		const bytes = decodeBase64Url(val.slice(first + 1, last));
-		if (bytes) out[label] = bytes;
+// coveredFromItem converts one inner-list item (a covered-component identifier such as
+// "@method" or "signature-agent";key="sig1") into a CoveredComponent. String-valued
+// component parameters and Boolean flags are carried; anything else is malformed.
+function coveredFromItem(item: SfItem): CoveredComponent | undefined {
+	if (item.value.type !== "string") return undefined;
+	const params: ComponentParam[] = [];
+	for (const [key, v] of item.params) {
+		if (v.type === "boolean" && v.value) params.push({ key, value: true });
+		else if (v.type === "string") params.push({ key, value: v.value });
+		else return undefined;
 	}
-	return out;
+	return { name: item.value.value, params };
 }
 
-/**
- * The highest sigN label number present in a Signature-Input value (0 when none)
- * — Go maxSignatureLabelN. Backs append's next-label / predecessor resolution.
- */
-export function maxSigLabelN(signatureInput: string): number {
-	let max = 0;
-	for (const label of Object.keys(rawInnerByLabel([signatureInput]))) {
-		if (!label.startsWith("sig")) continue;
-		const n = Number(label.slice(3));
-		if (Number.isInteger(n) && n > max) max = n;
+type SignatureParams = Omit<ParsedSignature, "label" | "covered" | "rawInner" | "signature">;
+
+// signatureParams reads keyid, alg, created, expires, nonce and tag off an inner list's
+// parameters. A parameter of the wrong type, or no keyid, is malformed.
+function signatureParams(params: SfParams): SignatureParams | undefined {
+	const out: Partial<SignatureParams> = {};
+	for (const name of ["keyid", "alg", "nonce", "tag"] as const) {
+		const v = params.get(name);
+		if (v === undefined) continue;
+		if (v.type !== "string") return undefined;
+		out[name] = v.value;
+	}
+	for (const name of ["created", "expires"] as const) {
+		const v = params.get(name);
+		if (v === undefined) continue;
+		if (v.type !== "integer") return undefined;
+		out[name] = v.value;
 	}
-	return max;
+	if (out.keyid === undefined || out.keyid === "") return undefined;
+	return out as SignatureParams;
 }
diff --git a/sdk/ts/core/sfv.ts b/sdk/ts/core/sfv.ts
new file mode 100644
index 00000000..884dda46
--- /dev/null
+++ b/sdk/ts/core/sfv.ts
@@ -0,0 +1,319 @@
+// sdk/ts RFC 8941 structured-field values: the parser and serializer the Web Bot Auth
+// profile reads Signature-Input, Signature, Signature-Agent and Accept-Signature with.
+// The Go oracle delegates the same job to dunglas/httpsfv; this is the dependency-free
+// TS counterpart, written to the RFC 8941 §4.2 parsing algorithms and the §4.1
+// serialization rules so a member parsed here re-serializes to the bytes Go produces.
+//
+// Only what the profile reads is modelled, which is the whole grammar except the
+// top-level List: Dictionaries, Items, Inner Lists and Parameters, over Strings, Tokens,
+// Integers, Decimals, Booleans and Byte Sequences. A parse never throws; it answers
+// undefined for input that is not a well-formed value, so a caller refuses a header
+// rather than reading half of it.
+
+/** One RFC 8941 bare item, tagged with its type so a String and a Token that spell the
+ * same characters stay distinct (Signature-Agent refuses the second). */
+export type SfBareItem =
+	| { type: "string"; value: string }
+	| { type: "token"; value: string }
+	| { type: "integer"; value: number }
+	| { type: "decimal"; value: number }
+	| { type: "boolean"; value: boolean }
+	| { type: "bytes"; value: Uint8Array<ArrayBuffer> };
+
+/** Parameters, in order. A repeated key keeps its first position and its last value. */
+export type SfParams = Map<string, SfBareItem>;
+
+/** An Item: a bare item and its parameters. */
+export interface SfItem {
+	kind: "item";
+	value: SfBareItem;
+	params: SfParams;
+}
+
+/** An Inner List: items and the list's own parameters. */
+export interface SfInnerList {
+	kind: "inner-list";
+	items: SfItem[];
+	params: SfParams;
+}
+
+/** A Dictionary member or a List member. */
+export type SfMember = SfItem | SfInnerList;
+
+/** A Dictionary, in member order. A repeated key keeps its first position and its last
+ * value. */
+export type SfDictionary = Map<string, SfMember>;
+
+/** A cursor over one field value. */
+class Input {
+	pos = 0;
+	constructor(readonly s: string) {}
+	peek(): string {
+		return this.s[this.pos] ?? "";
+	}
+	done(): boolean {
+		return this.pos >= this.s.length;
+	}
+	skipSP(): void {
+		while (this.s[this.pos] === " ") this.pos += 1;
+	}
+	skipOWS(): void {
+		while (this.s[this.pos] === " " || this.s[this.pos] === "\t") this.pos += 1;
+	}
+}
+
+const isDigit = (c: string): boolean => c >= "0" && c <= "9";
+const isLcAlpha = (c: string): boolean => c >= "a" && c <= "z";
+const isAlpha = (c: string): boolean => isLcAlpha(c) || (c >= "A" && c <= "Z");
+// RFC 9110 tchar, plus the ":" and "/" RFC 8941 admits after a token's first character.
+const TOKEN_CHAR = /^[!#$%&'*+\-.^_`|~0-9A-Za-z:/]$/;
+const BASE64_CHAR = /^[A-Za-z0-9+/=]$/;
+
+/** Parse a Dictionary field value (field lines already joined with ", "). */
+export function parseDictionary(field: string): SfDictionary | undefined {
+	const input = new Input(field);
+	input.skipSP();
+	const dict: SfDictionary = new Map();
+	while (!input.done()) {
+		const key = parseKey(input);
+		if (key === undefined) return undefined;
+		let member: SfMember | undefined;
+		if (input.peek() === "=") {
+			input.pos += 1;
+			member = parseItemOrInnerList(input);
+		} else {
+			const params = parseParams(input);
+			member = params && { kind: "item", value: { type: "boolean", value: true }, params };
+		}
+		if (member === undefined) return undefined;
+		dict.set(key, member);
+		input.skipOWS();
+		if (input.done()) return dict;
+		if (input.peek() !== ",") return undefined;
+		input.pos += 1;
+		input.skipOWS();
+		if (input.done()) return undefined; // a trailing comma
+	}
+	return dict;
+}
+
+/** Parse an Item field value. */
+export function parseItem(field: string): SfItem | undefined {
+	const input = new Input(field);
+	input.skipSP();
+	const item = parseItemAt(input);
+	if (item === undefined) return undefined;
+	input.skipSP();
+	return input.done() ? item : undefined;
+}
+
+function parseItemOrInnerList(input: Input): SfMember | undefined {
+	return input.peek() === "(" ? parseInnerList(input) : parseItemAt(input);
+}
+
+function parseInnerList(input: Input): SfInnerList | undefined {
+	input.pos += 1; // "("
+	const items: SfItem[] = [];
+	while (!input.done()) {
+		input.skipSP();
+		if (input.peek() === ")") {
+			input.pos += 1;
+			const params = parseParams(input);
+			return params && { kind: "inner-list", items, params };
+		}
+		const item = parseItemAt(input);
+		if (item === undefined) return undefined;
+		items.push(item);
+		const next = input.peek();
+		if (next !== " " && next !== ")") return undefined;
+	}
+	return undefined; // unterminated
+}
+
+function parseItemAt(input: Input): SfItem | undefined {
+	const value = parseBareItem(input);
+	if (value === undefined) return undefined;
+	const params = parseParams(input);
+	return params && { kind: "item", value, params };
+}
+
+function parseParams(input: Input): SfParams | undefined {
+	const params: SfParams = new Map();
+	while (input.peek() === ";") {
+		input.pos += 1;
+		input.skipSP();
+		const key = parseKey(input);
+		if (key === undefined) return undefined;
+		let value: SfBareItem | undefined = { type: "boolean", value: true };
+		if (input.peek() === "=") {
+			input.pos += 1;
+			value = parseBareItem(input);
+			if (value === undefined) return undefined;
+		}
+		params.set(key, value);
+	}
+	return params;
+}
+
+function parseKey(input: Input): string | undefined {
+	const first = input.peek();
+	if (!isLcAlpha(first) && first !== "*") return undefined;
+	const start = input.pos;
+	while (!input.done()) {
+		const c = input.peek();
+		if (!isLcAlpha(c) && !isDigit(c) && c !== "_" && c !== "-" && c !== "." && c !== "*") break;
+		input.pos += 1;
+	}
+	return input.s.slice(start, input.pos);
+}
+
+function parseBareItem(input: Input): SfBareItem | undefined {
+	const c = input.peek();
+	if (c === "-" || isDigit(c)) return parseNumber(input);
+	if (c === '"') return parseString(input);
+	if (c === "*" || isAlpha(c)) return parseToken(input);
+	if (c === ":") return parseBytes(input);
+	if (c === "?") return parseBoolean(input);
+	return undefined;
+}
+
+function parseNumber(input: Input): SfBareItem | undefined {
+	let sign = 1;
+	if (input.peek() === "-") {
+		sign = -1;
+		input.pos += 1;
+	}
+	if (!isDigit(input.peek())) return undefined;
+	let num = "";
+	let decimal = false;
+	while (!input.done()) {
+		const c = input.peek();
+		if (isDigit(c)) {
+			num += c;
+		} else if (c === "." && !decimal) {
+			if (num.length > 12) return undefined;
+			num += c;
+			decimal = true;
+		} else {
+			break;
+		}
+		input.pos += 1;
+		if (!decimal && num.length > 15) return undefined;
+		if (decimal && num.length > 16) return undefined;
+	}
+	if (!decimal) return { type: "integer", value: sign * Number(num) };
+	if (num.endsWith(".") || num.length - num.indexOf(".") - 1 > 3) return undefined;
+	return { type: "decimal", value: sign * Number(num) };
+}
+
+function parseString(input: Input): SfBareItem | undefined {
+	input.pos += 1; // opening DQUOTE
+	let out = "";
+	while (!input.done()) {
+		const c = input.peek();
+		input.pos += 1;
+		if (c === "\\") {
+			const next = input.peek();
+			if (next !== '"' && next !== "\\") return undefined;
+			out += next;
+			input.pos += 1;
+		} else if (c === '"') {
+			return { type: "string", value: out };
+		} else {
+			const code = c.charCodeAt(0);
+			if (code < 0x20 || code > 0x7e) return undefined;
+			out += c;
+		}
+	}
+	return undefined; // unterminated
+}
+
+function parseToken(input: Input): SfBareItem | undefined {
+	const start = input.pos;
+	input.pos += 1;
+	while (!input.done() && TOKEN_CHAR.test(input.peek())) input.pos += 1;
+	return { type: "token", value: input.s.slice(start, input.pos) };
+}
+
+function parseBytes(input: Input): SfBareItem | undefined {
+	input.pos += 1; // opening ":"
+	const start = input.pos;
+	while (!input.done() && input.peek() !== ":") {
+		if (!BASE64_CHAR.test(input.peek())) return undefined;
+		input.pos += 1;
+	}
+	if (input.done()) return undefined; // unterminated
+	const encoded = input.s.slice(start, input.pos);
+	input.pos += 1; // closing ":"
+	let bin: string;
+	try {
+		bin = atob(encoded);
+	} catch {
+		return undefined;
+	}
+	const value = new Uint8Array(bin.length);
+	for (let i = 0; i < bin.length; i += 1) value[i] = bin.charCodeAt(i);
+	return { type: "bytes", value };
+}
+
+function parseBoolean(input: Input): SfBareItem | undefined {
+	input.pos += 1; // "?"
+	const c = input.peek();
+	if (c !== "0" && c !== "1") return undefined;
+	input.pos += 1;
+	return { type: "boolean", value: c === "1" };
+}
+
+// --- serialization (RFC 8941 §4.1) -----------------------------------------------------
+
+/** Serialize a bare item. */
+export function serializeBareItem(item: SfBareItem): string {
+	switch (item.type) {
+		case "string":
+			return `"${item.value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+		case "token":
+			return item.value;
+		case "integer":
+			return String(item.value);
+		case "decimal":
+			return serializeDecimal(item.value);
+		case "boolean":
+			return item.value ? "?1" : "?0";
+		case "bytes":
+			return `:${base64(item.value)}:`;
+	}
+}
+
+// A Decimal keeps at most three fractional digits and always at least one.
+function serializeDecimal(value: number): string {
+	const rounded = (Math.round(value * 1000) / 1000).toString();
+	return rounded.includes(".") ? rounded : `${rounded}.0`;
+}
+
+function base64(bytes: Uint8Array): string {
+	let bin = "";
+	for (let i = 0; i < bytes.length; i += 1) bin += String.fromCharCode(bytes[i] as number);
+	return btoa(bin);
+}
+
+/** Serialize parameters: `;key` for a Boolean true, `;key=value` otherwise. */
+export function serializeParams(params: SfParams): string {
+	let out = "";
+	for (const [key, value] of params) {
+		out += value.type === "boolean" && value.value ? `;${key}` : `;${key}=${serializeBareItem(value)}`;
+	}
+	return out;
+}
+
+/** Serialize an Item or an Inner List, parameters included. */
+export function serializeMember(member: SfMember): string {
+	if (member.kind === "item") return serializeBareItem(member.value) + serializeParams(member.params);
+	const items = member.items.map((it) => serializeBareItem(it.value) + serializeParams(it.params));
+	return `(${items.join(" ")})${serializeParams(member.params)}`;
+}
+
+/** The string value of a parameter, or undefined when it is absent or not a String. */
+export function stringParam(params: SfParams, key: string): string | undefined {
+	const v = params.get(key);
+	return v?.type === "string" ? v.value : undefined;
+}
diff --git a/sdk/ts/core/sign-request.ts b/sdk/ts/core/sign-request.ts
index ddf443e5..52e64012 100644
--- a/sdk/ts/core/sign-request.ts
+++ b/sdk/ts/core/sign-request.ts
@@ -1,39 +1,56 @@
-// sdk/ts outbound RFC 9421 request signer over the full 5-component FORA covered
-// set (@method @target-uri content-digest authorization signature-agent) — the
-// TS sibling of Go helpers.SignRequest and Python httpsig.sign_request. It signs
-// byte-identical to the shared Go oracle so a request signed in TS verifies
-// unchanged at any Go/Python broker/exchange.
+// sdk/ts outbound RFC 9421 request signer under the Web Bot Auth profile — the TS
+// sibling of Go helpers.SignRequest / AppendSignature and Python httpsig.sign_request /
+// append_signature. It signs byte-identical to the shared Go oracle, so a request signed
+// in TS verifies unchanged at any Go/Python broker or exchange.
 //
-// This is the 5-component sibling of core/sign.ts::signInbound (the 2-component
-// GET PoP). It does NOT reuse pop.ts::signatureBase (hardcoded to 2 components);
-// it renders its own base, mirroring Python fora_sdk/httpsig.py::sign_request.
+// A FORA RPC signature covers @method, @target-uri, content-digest, authorization and
+// its own Signature-Agent member, "signature-agent";key="<label>", whose value
+// <label>="<origin>" names the key directory a verifier resolves the keyid in. Its
+// parameters are created, expires, keyid, alg, nonce (when set) and
+// tag="web-bot-auth", in that order. authorization is ALWAYS bound — an empty string
+// still renders, with the trailing space, so a later token injection cannot ride under
+// the signature.
 //
-// created/expires are INJECTED unix seconds (L1-pure, no wall clock).
-// authorization + signature-agent are ALWAYS bound — an empty string still
-// renders (with the load-bearing trailing space), so a later token/directory
-// injection cannot piggy-back the signature. Values pass through verbatim: the
-// caller supplies an absolute @target-uri; the signer never normalizes it.
+// This module also holds the one signature-base builder the request signer, the
+// request verifiers and the key-directory response signatures share
+// (buildSignatureBase), so sign and verify reconstruct the same bytes by construction.
+//
+// created/expires are INJECTED unix seconds (L1-pure, no wall clock). Values pass
+// through verbatim: the caller supplies an absolute @target-uri; the signer never
+// normalizes it.
 
 import { opaqueUrl } from "../src/opaque-url.ts";
+import { WBATag } from "../src/wire.ts";
+import { parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
+import { parseDictionary, serializeBareItem, serializeMember } from "./sfv.ts";
+import { stdBase64 } from "../src/base64url.ts";
 import {
-	maxSigLabelN,
-	signatureBytesByLabel,
-} from "./multisig-parse.ts";
-import { stdBase64 } from "./sign.ts";
+	checkHttpsOrigin,
+	checkNonce,
+	type CoveredComponent,
+	coversComponent,
+	keyed,
+	MAX_SIGNATURE_LIFETIME,
+	plain,
+	REQUIRED_RPC_COMPONENTS,
+	renderComponent,
+	signatureAgentDictionary,
+	signatureAgentMember,
+	validLabel,
+	WebBotAuthError,
+} from "./wba.ts";
 
-// The FORA request covered set: exactly these five, in this order. No conditional
-// biscuit component — it is bound only when an entitlement header is present,
-// which this signer's inputs never carry. Exported so the verify sibling
-// (core/verify-request.ts) enforces the SAME required set without duplicating it.
-export const COVERED_COMPONENTS = [
-	"@method",
-	"@target-uri",
-	"content-digest",
-	"authorization",
-	"signature-agent",
-] as const;
+// The profile's public names that are defined in core/wba.ts, re-exported from this
+// published module so a caller importing the signer reaches them.
+export {
+	acceptSignature,
+	checkHttpsOrigin,
+	MAX_SIGNATURE_LIFETIME,
+	WebBotAuthError,
+	type WebBotAuthErrorReason,
+} from "./wba.ts";
 
-/** Inputs for signRequest. All fields required; signatureAgent is "" to pin its absence. */
+/** Inputs for signRequest and appendSignature. */
 export interface SignRequestOptions {
 	method: string;
 	url: string;
@@ -41,28 +58,46 @@ export interface SignRequestOptions {
 	// matching the sdk/ts WebCrypto convention (see core/verifier.ts, src/pop.ts).
 	body: Uint8Array<ArrayBuffer>;
 	authorization: string;
+	/** The signer's key-directory origin, the ASCII serialization of an https origin such
+	 * as "https://agent.example". Required: the signature covers its own Signature-Agent
+	 * member, <label>="<origin>". Empty throws WebBotAuthError
+	 * ("signature_agent_required"), a value that is not an https origin
+	 * ("signature_agent_not_origin"). */
 	signatureAgent: string;
 	keyid: string;
+	/** Unix seconds. The window expires − created must be positive and at most
+	 * MAX_SIGNATURE_LIFETIME, or signing throws WebBotAuthError ("signature_lifetime"). */
 	created: number;
 	expires: number;
-	// RFC 9421 nonce parameter. Ed25519 is deterministic and created/expires have
-	// one-second resolution, so identical requests signed in the same second get the
-	// same signature and a replay store refuses the second. The signer reads no RNG:
-	// a caller that needs unique signatures passes a fresh nonce (the signing
-	// transport does). Absent or "" emits no nonce, byte-identical to before. A
-	// non-empty nonce must use only base64url characters, or signing throws.
+	/** RFC 9421 nonce parameter. Ed25519 is deterministic and created/expires have
+	 * one-second resolution, so identical requests signed in the same second get the same
+	 * signature and a replay store refuses the second. The signer reads no RNG: a caller
+	 * that needs unique signatures passes a fresh nonce (the signing transport passes 64
+	 * random bytes). Absent or "" emits no nonce. A non-empty nonce must use only
+	 * base64url characters, or signing throws WebBotAuthError ("invalid_nonce"). */
 	nonce?: string;
+	/** The signature's label, which is also the key of its Signature-Agent member.
+	 * Absent means "sig1" for signRequest and, for appendSignature, the first "sigN" no
+	 * signature or member on the request uses. A label that is not a structured-field
+	 * key, or one already in use, throws WebBotAuthError ("signature_label"). */
+	label?: string;
+	/** Read by appendSignature only. Makes the new signature cover the last signature
+	 * already on the request, if there is one, as WG-00 §5.2.2 permits a party that
+	 * forwards a request unchanged: every component that signature lists, its Signature
+	 * member and its Signature-Input member. Leave it unset when the request was changed
+	 * in any component the earlier signature covers. */
+	coverPrevious?: boolean;
 }
 
 /**
  * The RFC 9421 artifacts a signed request carries, plus the covered base bytes.
  *
- * EVERY covered header is here, at the value that entered the base — the two whose value
- * may be empty included. A verifier rebuilds the base from the request it received, so a
- * covered value bound but never sent is not bound at all; the oracle's signer reaches the
- * same place by mutating the request it was handed (helpers.SignRequest), which is why it
- * has no such field to omit. See docs/design-history.md, "A covered header the peer never
- * receives is not bound".
+ * EVERY covered header is here, at the value that entered the base — the empty
+ * authorization included. A verifier rebuilds the base from the request it received, so
+ * a covered value bound but never sent is not bound at all; the oracle's signer reaches
+ * the same place by mutating the request it was handed (helpers.SignRequest), which is
+ * why it has no such field to omit. See docs/design-history.md, "A covered header the
+ * peer never receives is not bound".
  */
 export interface SignedRequest {
 	contentDigest: string;
@@ -72,8 +107,8 @@ export interface SignedRequest {
 	/** Echoed from the input so a caller attaching what this returns sends what was
 	 * signed. Empty is a value, not an absence. */
 	authorization: string;
-	/** The signer's WBA directory, echoed for the same reason. Empty is the
-	 * static-bootstrap case and is still carried. */
+	/** The Signature-Agent header value to send: the signature's own member,
+	 * <label>="<origin>", after any members already on the request. */
 	signatureAgent: string;
 }
 
@@ -87,184 +122,317 @@ export async function contentDigest(
 	return `sha-256=:${stdBase64(digest)}:`;
 }
 
-// A forwarding-chain link: the pre-rendered covered token
-// `"signature";key="sigN"` and its base value `:<std-base64(prev sig bytes)>:`.
-// The token is inserted as the LAST covered component before @signature-params
-// and is rendered VERBATIM (NOT re-wrapped in the naive per-element quoting) —
-// it already carries its own quotes and the key= param.
-export interface ChainLink {
-	token: string;
-	value: string;
+// --- the signature base ----------------------------------------------------------------
+
+/** The parameters of one signature, the input of signatureInputInner. */
+export interface SignatureParams {
+	covered: readonly CoveredComponent[];
+	keyid: string;
+	alg: string;
+	created: number;
+	expires: number;
+	nonce?: string;
+	tag: string;
+}
+
+/**
+ * signatureInputInner renders the inner list and parameter tail, the exact value used
+ * both in the @signature-params line and as the Signature-Input member. The parameter
+ * order is the one the Web Bot Auth profile's examples use — created, expires, keyid,
+ * alg, nonce, tag — and the three SDKs make the same choice so their signatures agree
+ * byte for byte. A verifier rebuilds the base from the parameters as received, so the
+ * order is the signer's choice.
+ */
+export function signatureInputInner(p: SignatureParams): string {
+	const keyid = serializeBareItem({ type: "string", value: p.keyid });
+	let tail = `;created=${p.created};expires=${p.expires};keyid=${keyid};alg="${p.alg}"`;
+	if (p.nonce !== undefined && p.nonce !== "") tail += `;nonce="${p.nonce}"`;
+	return `(${p.covered.map(renderComponent).join(" ")})${tail};tag="${p.tag}"`;
 }
 
-// The @signature-params inner list: the covered components then keyid/alg/
-// created/expires/nonce, RFC 9421 order — byte-identical to Go signatureInputInner.
-// An optional chain-link token appends as the final covered component (sigN, N>1),
-// defaulting absent so the single-sig (N=1) inner list stays byte-identical. An
-// empty nonce emits nothing.
-function signatureParams(
-	keyid: string,
-	created: number,
-	expires: number,
-	nonce: string,
-	chainLinkToken?: string,
+/**
+ * buildSignatureBase assembles the RFC 9421 §2.5 signature base: one
+ * `<component>: <value>` line per covered component, in covered order, terminated by
+ * `"@signature-params": <rawInner>` with NO trailing newline. `valueOf` resolves each
+ * component's canonical value and throws when the message does not carry it. `rawInner`
+ * is the VERBATIM inner list and parameters — the signer's own on sign, the wire's on
+ * verify. The ONE base builder in the SDK's request path: the request signer, both
+ * request verifiers and the key-directory response signatures all compose it.
+ */
+export function buildSignatureBase(
+	covered: readonly CoveredComponent[],
+	valueOf: (c: CoveredComponent) => string,
+	rawInner: string,
 ): string {
-	const tokens = COVERED_COMPONENTS.map((c) => `"${c}"`);
-	if (chainLinkToken !== undefined) tokens.push(chainLinkToken);
-	const covered = tokens.join(" ");
-	const params = `(${covered});keyid="${keyid}";alg="ed25519";created=${created};expires=${expires}`;
-	// Only base64url characters, the same rule as Go and Python: a quote would end
-	// the quoted parameter early, and the SDKs would write different bytes.
-	if (!/^[A-Za-z0-9_-]*$/.test(nonce)) {
-		throw new Error("sign-request: nonce must use only base64url characters");
-	}
-	return nonce === "" ? params : `${params};nonce="${nonce}"`;
+	const lines = covered.map((c) => `${renderComponent(c)}: ${valueOf(c)}`);
+	lines.push(`"@signature-params": ${rawInner}`);
+	return lines.join("\n");
 }
 
-/** The covered request field values a 5-component FORA signature base is built over. */
-export interface RequestBaseFields {
+/** The request a request signature's components are resolved against. `header` answers
+ * a field's value, every field line joined, or undefined when the request carries no
+ * such field. */
+export interface RequestComponents {
 	method: string;
 	url: string;
-	digestHeader: string;
-	authorization: string;
-	signatureAgent: string;
+	header(name: string): string | undefined;
+}
+
+/** The component a signature covers names nothing the request carries. */
+export class ComponentUnavailable extends Error {
+	constructor(message: string) {
+		super(message);
+		this.name = "ComponentUnavailable";
+	}
 }
 
 /**
- * The RFC 9421 signature base over the FORA 5-component covered set: one
- * `"name": value` line per component, joined by "\n", terminated by
- * `"@signature-params": <sigParams>` with NO trailing newline. Empty
- * authorization/signature-agent still render (name + ": " + "") — the trailing
- * space is part of the covered bytes and must never be trimmed. Exported and
- * shared with the verify sibling (core/verify-request.ts) so sign and verify
- * reconstruct byte-identical bases; `sigParams` is the VERBATIM inner-list +
- * params tail (the signer's own on sign, the wire's on verify).
+ * requestComponentValue yields the canonical value of a covered component of `req`:
+ * @method, @target-uri (verbatim), @authority, a header, or the dictionary member a
+ * "key" parameter selects (RFC 9421 §2.1.2) — serialized from the parsed member, so
+ * signer and verifier agree byte for byte however the member was spaced on the wire.
+ * Throws ComponentUnavailable for a header the request does not carry, a member it does
+ * not hold, or a component parameter other than key.
  */
-export function buildRequestSignatureBase(
-	fields: RequestBaseFields,
-	sigParams: string,
-	chainLink?: ChainLink,
-): string {
-	const lines = [
-		`"@method": ${fields.method.toUpperCase()}`,
-		`"@target-uri": ${opaqueUrl(fields.url)}`,
-		`"content-digest": ${fields.digestHeader}`,
-		`"authorization": ${fields.authorization}`,
-		`"signature-agent": ${fields.signatureAgent}`,
-	];
-	// The chain-link line is the LAST covered component BEFORE @signature-params
-	// (Go buildSignatureBase renders params.Covered in order, chain link last).
-	if (chainLink !== undefined) {
-		lines.push(`${chainLink.token}: ${chainLink.value}`);
+export function requestComponentValue(req: RequestComponents): (c: CoveredComponent) => string {
+	return (c) => {
+		const name = c.name.toLowerCase();
+		if (c.params.length > 0) return memberValue(req, c);
+		switch (name) {
+			case "@method":
+				return req.method.toUpperCase();
+			case "@target-uri":
+				return opaqueUrl(req.url);
+			case "@authority":
+				return new URL(opaqueUrl(req.url)).host.toLowerCase();
+		}
+		if (name.startsWith("@")) throw new ComponentUnavailable(`unsupported derived component ${c.name}`);
+		const v = req.header(name);
+		if (v === undefined) throw new ComponentUnavailable(`header "${name}" missing from request`);
+		return v;
+	};
+}
+
+function memberValue(req: RequestComponents, c: CoveredComponent): string {
+	const p = c.params[0];
+	if (c.name.startsWith("@") || c.params.length !== 1 || p?.key !== "key" || p.value === true) {
+		throw new ComponentUnavailable(`unsupported component parameters on "${c.name}"`);
 	}
-	lines.push(`"@signature-params": ${sigParams}`);
-	return lines.join("\n");
+	const raw = req.header(c.name.toLowerCase());
+	if (raw === undefined) throw new ComponentUnavailable(`header "${c.name}" missing from request`);
+	const member = parseDictionary(raw)?.get(p.value);
+	if (member === undefined) throw new ComponentUnavailable(`${c.name} has no member "${p.value}"`);
+	return serializeMember(member);
+}
+
+/** headerLookup answers a header from a plain lowercase-keyed record. */
+function headerLookup(headers: Record<string, string>): (name: string) => string | undefined {
+	return (name) => headers[name.toLowerCase()];
+}
+
+// --- signing ---------------------------------------------------------------------------
+
+// The covered set of a FORA RPC signature labelled label: the FORA RPC components and
+// the signature's own Signature-Agent member.
+function rpcCovered(label: string): CoveredComponent[] {
+	return [...REQUIRED_RPC_COMPONENTS.map(plain), keyed("signature-agent", label)];
+}
+
+// checkSignOptions refuses what no conformant signature can carry: a missing or
+// non-origin Signature-Agent, an unusable label, a window that is not positive or longer
+// than MAX_SIGNATURE_LIFETIME, or a nonce outside the base64url alphabet.
+function checkSignOptions(opts: SignRequestOptions, label: string): void {
+	if (opts.signatureAgent === "") {
+		throw new WebBotAuthError("signature_agent_required", "a signature needs the signer's Signature-Agent origin");
+	}
+	checkHttpsOrigin(opts.signatureAgent);
+	if (!validLabel(label)) {
+		throw new WebBotAuthError("signature_label", `signature label ${JSON.stringify(label)} is not a structured-field key`);
+	}
+	const life = opts.expires - opts.created;
+	if (opts.created <= 0 || life <= 0 || life > MAX_SIGNATURE_LIFETIME) {
+		throw new WebBotAuthError(
+			"signature_lifetime",
+			`signature lifetime must be positive and at most ${MAX_SIGNATURE_LIFETIME}s: created=${opts.created} expires=${opts.expires}`,
+		);
+	}
+	checkNonce(opts.nonce ?? "");
+}
+
+async function ed25519Sign(privKey: CryptoKey, base: string): Promise<string> {
+	const sig = await crypto.subtle.sign("Ed25519", privKey, new TextEncoder().encode(base));
+	return stdBase64(new Uint8Array(sig));
 }
 
 /**
- * signRequest signs opts over the FORA 5-component covered set with privKey and
- * returns the RFC 9421 Content-Digest, Signature-Input, and Signature header
- * values plus the exact signature base the signature covers. The Signature is
- * `sig1=:<STANDARD-base64(sig)>:` (NOT b64url — do not unify with the thumbprint
- * encoding); Signature-Input is `sig1=` + the same inner the base carries.
+ * signRequest signs opts as a FORA RPC under the Web Bot Auth profile with privKey and
+ * returns the Content-Digest, Signature-Agent, Signature-Input and Signature header
+ * values plus the exact signature base. Signature-Agent is the one-member dictionary
+ * <label>="<origin>", replacing any value the request carried. The Signature is
+ * `<label>=:<STANDARD-base64(sig)>:` (NOT b64url — do not unify with the thumbprint
+ * encoding); Signature-Input is `<label>=` + the inner the base carries. Throws
+ * WebBotAuthError, before signing anything, for what no profile signature carries.
  */
 export async function signRequest(
 	privKey: CryptoKey,
 	opts: SignRequestOptions,
 ): Promise<SignedRequest> {
+	const label = opts.label ?? "sig1";
+	checkSignOptions(opts, label);
 	const digestHeader = await contentDigest(opts.body);
-	const sigParams = signatureParams(opts.keyid, opts.created, opts.expires, opts.nonce ?? "");
-	const base = buildRequestSignatureBase(
-		{
+	const signatureAgent = signatureAgentMember(label, opts.signatureAgent);
+	const covered = rpcCovered(label);
+	const inner = signatureInputInner(rpcParams(opts, covered));
+	const base = buildSignatureBase(
+		covered,
+		requestComponentValue({
 			method: opts.method,
 			url: opts.url,
-			digestHeader,
-			authorization: opts.authorization,
-			signatureAgent: opts.signatureAgent,
-		},
-		sigParams,
-	);
-	const sig = await crypto.subtle.sign(
-		"Ed25519",
-		privKey,
-		new TextEncoder().encode(base),
+			header: headerLookup({
+				"content-digest": digestHeader,
+				authorization: opts.authorization,
+				"signature-agent": signatureAgent,
+			}),
+		}),
+		inner,
 	);
 	return {
 		contentDigest: digestHeader,
-		signatureInput: `sig1=${sigParams}`,
-		signature: `sig1=:${stdBase64(new Uint8Array(sig))}:`,
+		signatureInput: `${label}=${inner}`,
+		signature: `${label}=:${await ed25519Sign(privKey, base)}:`,
 		signatureBase: base,
 		authorization: opts.authorization,
-		signatureAgent: opts.signatureAgent,
+		signatureAgent,
+	};
+}
+
+function rpcParams(opts: SignRequestOptions, covered: readonly CoveredComponent[]): SignatureParams {
+	return {
+		covered,
+		keyid: opts.keyid,
+		alg: "ed25519",
+		created: opts.created,
+		expires: opts.expires,
+		...(opts.nonce !== undefined ? { nonce: opts.nonce } : {}),
+		tag: WBATag,
 	};
 }
 
-/** A request's prior signature state — the Signature-Input / Signature header
- * values already on the request (both "" for an unsigned request). */
+/** A request's prior signature state: the Signature-Input, Signature and
+ * Signature-Agent header values already on it, every field line joined (all "" or
+ * absent for an unsigned request), and its Content-Digest, kept when present. */
 export interface PriorSignatures {
 	signatureInput: string;
 	signature: string;
+	signatureAgent?: string;
+	contentDigest?: string;
+}
+
+// usedLabels collects every label already present on the request: the members of
+// Signature-Input and Signature, and the keys of a Signature-Agent dictionary. A new
+// signature takes a label none of them uses, so its Signature-Agent member cannot
+// collide with another signature's. A value that does not parse contributes none.
+function usedLabels(prev: PriorSignatures): Set<string> {
+	const used = new Set<string>();
+	for (const value of [prev.signatureInput, prev.signature, prev.signatureAgent ?? ""]) {
+		if (value.trim() === "") continue;
+		for (const key of parseDictionary(value)?.keys() ?? []) used.add(key);
+	}
+	return used;
+}
+
+// nextFreeLabel returns "sigN" for the smallest N >= 1 no label on the request uses.
+function nextFreeLabel(used: Set<string>): string {
+	for (let n = 1; ; n += 1) {
+		if (!used.has(`sig${n}`)) return `sig${n}`;
+	}
+}
+
+/**
+ * coverEarlier extends own, the covered set of a new signature, to cover the earlier
+ * signature prev under WG-00 §5.2.2: every component prev lists that own does not
+ * already cover, then "signature";key=<prev> and "signature-input";key=<prev>. A party
+ * may do this only when it forwards the request unchanged in every component prev
+ * covers.
+ */
+export function coverEarlier(own: readonly CoveredComponent[], prev: ParsedSignature): CoveredComponent[] {
+	const out = [...own];
+	for (const c of prev.covered) {
+		if (!coversComponent(out, c)) out.push(c);
+	}
+	out.push(keyed("signature", prev.label), keyed("signature-input", prev.label));
+	return out;
 }
 
+const joined = (existing: string, member: string): string =>
+	existing.trim() === "" ? member : `${existing}, ${member}`;
+
 /**
- * appendSignature chains sig(N+1) onto `prev` WITHOUT disturbing existing members
- * (forwarding chain), the TS port of Go helpers.AppendSignature. It finds
- * the next label sig(N+1) and predecessor sigN, binds the FORA base plus a
- * `"signature";key="sigN"` link whose value is `:<std-base64(decoded predecessor
- * sig bytes)>:` (re-encoded canonically, NOT a wire splice), Ed25519-signs, and
- * returns the APPENDED Signature-Input / Signature strings. Appending to an
- * unsigned request (empty prev) produces a sig1 byte-for-byte identical to
- * signRequest — single-sig is the N=1 case.
+ * appendSignature adds a signature to the request whose prior signature state is `prev`
+ * WITHOUT disturbing any signature already on it — the TS port of Go
+ * helpers.AppendSignature. It appends the new signature's member to the Signature-Agent
+ * dictionary and its members to Signature-Input and Signature, and returns the appended
+ * values. The new signature covers its own request components and its own member and,
+ * only when opts.coverPrevious is set, the last earlier signature (see
+ * SignRequestOptions.coverPrevious). A Content-Digest in `prev` is kept rather than
+ * recomputed. Appending to an unsigned request produces a signature byte-for-byte
+ * identical to signRequest with the same label.
+ *
+ * A request whose Signature-Agent is not a dictionary, such as an agent's legacy String
+ * form, throws WebBotAuthError ("signature_agent_form"): a String cannot take a second
+ * member, and rewriting it would break the earlier signature.
  */
 export async function appendSignature(
 	privKey: CryptoKey,
 	prev: PriorSignatures,
 	opts: SignRequestOptions,
 ): Promise<SignedRequest> {
-	const digestHeader = await contentDigest(opts.body);
-	const hasPrev = prev.signatureInput !== "";
-	const prevN = hasPrev ? maxSigLabelN(prev.signatureInput) : 0;
-	const label = `sig${prevN + 1}`;
-
-	let chainLink: ChainLink | undefined;
-	let chainLinkToken: string | undefined;
-	if (prevN > 0) {
-		const prevLabel = `sig${prevN}`;
-		const prevBytes = signatureBytesByLabel(prev.signature)[prevLabel];
-		if (!prevBytes) {
-			throw new Error(`appendSignature: predecessor ${prevLabel} not in Signature`);
-		}
-		chainLinkToken = `"signature";key="${prevLabel}"`;
-		chainLink = { token: chainLinkToken, value: `:${stdBase64(prevBytes)}:` };
+	const used = usedLabels(prev);
+	const label = opts.label ?? nextFreeLabel(used);
+	checkSignOptions(opts, label);
+	if (used.has(label)) {
+		throw new WebBotAuthError("signature_label", `signature label ${JSON.stringify(label)} is already in use on the request`);
 	}
-
-	const sigParams = signatureParams(
-		opts.keyid,
-		opts.created,
-		opts.expires,
-		opts.nonce ?? "",
-		chainLinkToken,
-	);
-	const base = buildRequestSignatureBase(
-		{
+	const existingAgent = prev.signatureAgent ?? "";
+	if (signatureAgentDictionary(existingAgent) === undefined) {
+		throw new WebBotAuthError(
+			"signature_agent_form",
+			"Signature-Agent is not a dictionary, so it cannot take another signature's member",
+		);
+	}
+	let covered = rpcCovered(label);
+	if (opts.coverPrevious === true && prev.signatureInput.trim() !== "") {
+		const parsed = parseSignatureHeaders(prev.signatureInput, prev.signature);
+		if (!parsed.ok) throw new Error("appendSignature: cannot cover the previous signature: it does not parse");
+		covered = coverEarlier(covered, parsed.value[parsed.value.length - 1] as ParsedSignature);
+	}
+	const digestHeader =
+		prev.contentDigest !== undefined && prev.contentDigest !== ""
+			? prev.contentDigest
+			: await contentDigest(opts.body);
+	const signatureAgent = joined(existingAgent, signatureAgentMember(label, opts.signatureAgent));
+	const inner = signatureInputInner(rpcParams(opts, covered));
+	const base = buildSignatureBase(
+		covered,
+		requestComponentValue({
 			method: opts.method,
 			url: opts.url,
-			digestHeader,
-			authorization: opts.authorization,
-			signatureAgent: opts.signatureAgent,
-		},
-		sigParams,
-		chainLink,
+			header: headerLookup({
+				"content-digest": digestHeader,
+				authorization: opts.authorization,
+				"signature-agent": signatureAgent,
+				"signature-input": prev.signatureInput,
+				signature: prev.signature,
+			}),
+		}),
+		inner,
 	);
-	const sig = await crypto.subtle.sign("Ed25519", privKey, new TextEncoder().encode(base));
-	const memberInput = `${label}=${sigParams}`;
-	const memberSig = `${label}=:${stdBase64(new Uint8Array(sig))}:`;
 	return {
 		contentDigest: digestHeader,
-		signatureInput: hasPrev ? `${prev.signatureInput}, ${memberInput}` : memberInput,
-		signature: prev.signature !== "" ? `${prev.signature}, ${memberSig}` : memberSig,
+		signatureInput: joined(prev.signatureInput, `${label}=${inner}`),
+		signature: joined(prev.signature, `${label}=:${await ed25519Sign(privKey, base)}:`),
 		signatureBase: base,
 		authorization: opts.authorization,
-		signatureAgent: opts.signatureAgent,
+		signatureAgent,
 	};
 }
diff --git a/sdk/ts/core/sign.ts b/sdk/ts/core/sign.ts
index 4fef14cc..3a48e6fd 100644
--- a/sdk/ts/core/sign.ts
+++ b/sdk/ts/core/sign.ts
@@ -1,23 +1,44 @@
 // sdk/ts/core sign seam — the client/inbound sign face over the WHATWG Fetch
-// Request, mirror of the Go RoundTripper sign face (transport.go) but adapted to
-// the IMMUTABLE Fetch Request: it returns a NEW signed Request (headers set on a
-// clone), never mutating in place. It signs the RFC 9421 covered components over
-// the EXACT request (for a GET PoP: @method + @target-uri), reusing the L1
-// signatureBase byte contract so the signed bytes are byte-identical to what the
-// L1 pop verifier reconstructs.
+// Request, mirror of Go helpers.SignAgentBinding but adapted to the IMMUTABLE Fetch
+// Request: it returns a NEW signed Request (headers set on a clone), never mutating in
+// place. It signs the delivery proof of possession — a Web Bot Auth signature over
+// @method, @target-uri and the agent's Signature-Agent member — through the same
+// signature-base builder the L1 pop verifier rebuilds with, so the signed bytes are
+// byte-identical to what the verifier reconstructs.
 //
 // ZERO framework import (no hono, no connect-es) — only WebCrypto + the L1
 // helpers. The Hono binding (sdk/ts/hono) composes this seam; this seam composes
 // nothing above the web standard.
 
-import { encodeBase64Url } from "../src/base64url.ts";
+import { encodeBase64Url, stdBase64 } from "../src/base64url.ts";
 import { opaqueUrl } from "../src/opaque-url.ts";
-import { AGENT_KEY_HEADER, signatureBase } from "../src/pop.ts";
+import { AGENT_KEY_HEADER } from "../src/pop.ts";
 import { thumbprint } from "../src/thumbprint.ts";
+import { SignatureAgentHeader, WBATag } from "../src/wire.ts";
+import { buildSignatureBase, requestComponentValue, signatureInputInner } from "./sign-request.ts";
+import {
+	checkHttpsOrigin,
+	checkNonce,
+	keyed,
+	MAX_SIGNATURE_LIFETIME,
+	plain,
+	signatureAgentMember,
+	WebBotAuthError,
+} from "./wba.ts";
 import { clockWindow, type Window } from "./window.ts";
 
-// A default signing window (seconds) for the GET PoP created/expires params.
-const DEFAULT_POP_TTL_SEC = 600;
+// Re-exported so the module that has always carried the standard-base64 encoder still
+// does; the one copy lives with the base64url codec.
+export { stdBase64 } from "../src/base64url.ts";
+
+// The default signing window (seconds) for the proof's created/expires params: the
+// longest a Web Bot Auth signature may live. A delivery client sets a shorter one.
+const DEFAULT_POP_TTL_SEC = MAX_SIGNATURE_LIFETIME;
+
+// The only label a delivery proof carries, and the key of the agent's Signature-Agent
+// member. A delivery fetch is a single hop to the edge, so a second signature never
+// arises and the label is fixed rather than computed.
+const POP_LABEL = "sig1";
 
 /**
  * Ed25519 sign primitive: (privateKey, message) -> signature. Injected so a
@@ -26,33 +47,48 @@ const DEFAULT_POP_TTL_SEC = 600;
  */
 export type Ed25519SignFn = (message: Uint8Array) => Promise<Uint8Array>;
 
-/** Options for signInbound — the created/expires window + an injectable clock. */
+/** Options for signInbound: the agent's directory, the nonce, and the created/expires
+ * window with an injectable clock. */
 export interface SignInboundOptions {
+	/** The https origin of the agent's key directory, the one that publishes the
+	 * presented key. Written as the Signature-Agent member sig1="<origin>" and covered,
+	 * so a generic WBA verifier can resolve the key there. Required: empty throws
+	 * WebBotAuthError ("signature_agent_required"), a value that is not an https origin
+	 * ("signature_agent_not_origin"). */
+	signatureAgent: string;
+	/** The RFC 9421 nonce parameter, base64url. The helper reads no RNG: a delivery
+	 * client passes 64 fresh random bytes. Absent or "" emits no nonce. */
+	nonce?: string;
 	now?: () => number;
 	ttlSec?: number;
 	/**
 	 * An injectable signature Window sourcing (created, expires). Defaults to a
-	 * clockWindow over `now`/`ttlSec` (both floored to integer seconds). Supply a
-	 * monotonicWindow to keep back-to-back signatures' expires cutoffs unique.
+	 * clockWindow over `now`/`ttlSec` (both floored to integer seconds). The window must
+	 * be positive and at most MAX_SIGNATURE_LIFETIME, or signing throws WebBotAuthError
+	 * ("signature_lifetime").
 	 */
 	window?: Window;
 }
 
 /**
- * signInbound produces a genuinely RFC 9421 GET-PoP-signed inbound Request over
- * @method + @target-uri, bound to the agent keypair's RFC 7638 thumbprint (keyid =
- * agent_id). It is the sign side the Hono server-verify binding accepts; it returns
- * a NEW Request carrying the X-FORA-Agent-Key, Signature-Input, and Signature
- * headers (the Fetch Request is immutable — we clone + set headers, never mutate).
+ * signInbound produces a Web Bot Auth proof-of-possession-signed inbound Request over
+ * @method, @target-uri and the agent's Signature-Agent member, bound to the agent
+ * keypair's RFC 7638 thumbprint (keyid = agent_id). It is the sign side the Hono
+ * server-verify binding accepts; it returns a NEW Request carrying the
+ * X-FORA-Agent-Key, Signature-Agent, Signature-Input and Signature headers (the Fetch
+ * Request is immutable — we clone + set headers, never mutate).
  *
- * The covered set is exactly ("@method" "@target-uri"), matching the L1 pop
- * verifier's coversExactly, and the signature base is the L1 signatureBase byte
- * contract, so the produced request verifies through verifyAgentBinding unchanged.
+ * The covered set is exactly ("@method" "@target-uri" "signature-agent";key="sig1"),
+ * the parameters created, expires, keyid, alg, nonce (when set) and tag="web-bot-auth",
+ * matching Go helpers.SignAgentBinding byte for byte, so the produced request verifies
+ * through verifyAgentBinding unchanged. Throws WebBotAuthError, before signing, for a
+ * missing or non-origin directory, a window that is not positive or longer than
+ * MAX_SIGNATURE_LIFETIME, or a nonce outside the base64url alphabet.
  */
 export async function signInbound(
 	kp: CryptoKeyPair,
 	url: string,
-	opts: SignInboundOptions = {},
+	opts: SignInboundOptions,
 ): Promise<Request> {
 	const rawPub = new Uint8Array(
 		await crypto.subtle.exportKey("raw", kp.publicKey),
@@ -61,17 +97,13 @@ export async function signInbound(
 
 	// Source (created, expires) from the injected Window, defaulting to a
 	// clockWindow over now (ms → seconds) and ttlSec. clockWindow floors to
-	// integer seconds, so the @signature-params bytes stay byte-identical to the
-	// historical inline `Math.floor(now()/1000)` mint.
+	// integer seconds.
 	const ttlSec = opts.ttlSec ?? DEFAULT_POP_TTL_SEC;
 	const window =
 		opts.window ??
 		clockWindow(() => (opts.now?.() ?? Date.now()) / 1000, ttlSec);
 	const [created, expires] = window();
-
-	// The @signature-params inner list the verifier rebuilds verbatim: covered
-	// components then keyid/alg/created/expires, RFC 9421 order.
-	const rawParams = `("@method" "@target-uri");keyid="${agentId}";alg="ed25519";created=${created};expires=${expires}`;
+	checkProofOptions(opts, created, expires);
 
 	// Coerce a URL-like input (a Fastly Compute request URL object) to its opaque
 	// string form ONCE at the boundary, so the signed @target-uri and the emitted
@@ -94,28 +126,56 @@ export async function signInbound(
 	if (badAt !== -1) {
 		throw new TypeError(`target URI carries a control byte at byte ${badAt}`);
 	}
-	const base = signatureBase("GET", target, rawParams);
+
+	const member = signatureAgentMember(POP_LABEL, opts.signatureAgent);
+	const covered = [plain("@method"), plain("@target-uri"), keyed("signature-agent", POP_LABEL)];
+	const inner = signatureInputInner({
+		covered,
+		keyid: agentId,
+		alg: "ed25519",
+		created,
+		expires,
+		...(opts.nonce !== undefined ? { nonce: opts.nonce } : {}),
+		tag: WBATag,
+	});
+	const base = buildSignatureBase(
+		covered,
+		requestComponentValue({
+			method: "GET",
+			url: target,
+			header: (name) => (name === "signature-agent" ? member : undefined),
+		}),
+		inner,
+	);
 	const sig = await crypto.subtle.sign(
 		"Ed25519",
 		kp.privateKey,
 		new TextEncoder().encode(base),
 	);
-	const sigStd = stdBase64(new Uint8Array(sig));
 
 	const headers = new Headers();
 	headers.set(AGENT_KEY_HEADER, encodeBase64Url(rawPub));
-	headers.set("signature-input", `sig1=${rawParams}`);
-	headers.set("signature", `sig1=:${sigStd}:`);
+	headers.set(SignatureAgentHeader, member);
+	headers.set("signature-input", `${POP_LABEL}=${inner}`);
+	headers.set("signature", `${POP_LABEL}=:${stdBase64(new Uint8Array(sig))}:`);
 
 	return new Request(target, { method: "GET", headers });
 }
 
-// stdBase64 encodes bytes as standard (padded) base64 — the RFC 9421 Signature
-// header byte-string encoding the L1 parseSignature decodes. Exported so the
-// 5-component request signer (core/sign-request.ts) shares the exact encoder.
-export function stdBase64(bytes: Uint8Array): string {
-	let bin = "";
-	for (let i = 0; i < bytes.length; i += 1)
-		bin += String.fromCharCode(bytes[i] as number);
-	return btoa(bin);
+// checkProofOptions refuses a proof no profile verifier accepts, before anything is
+// signed: no created, a window that is not positive or longer than the limit, a missing
+// or non-origin directory, or a nonce outside the base64url alphabet.
+function checkProofOptions(opts: SignInboundOptions, created: number, expires: number): void {
+	const life = expires - created;
+	if (created <= 0 || life <= 0 || life > MAX_SIGNATURE_LIFETIME) {
+		throw new WebBotAuthError(
+			"signature_lifetime",
+			`proof lifetime must be positive and at most ${MAX_SIGNATURE_LIFETIME}s: created=${created} expires=${expires}`,
+		);
+	}
+	if (opts.signatureAgent === "") {
+		throw new WebBotAuthError("signature_agent_required", "a proof needs the agent's Signature-Agent origin");
+	}
+	checkHttpsOrigin(opts.signatureAgent);
+	checkNonce(opts.nonce ?? "");
 }
diff --git a/sdk/ts/core/signing-transport.ts b/sdk/ts/core/signing-transport.ts
index fd2a213e..c4710a8a 100644
--- a/sdk/ts/core/signing-transport.ts
+++ b/sdk/ts/core/signing-transport.ts
@@ -5,8 +5,8 @@
 // Core Invariant: this module is a pure ORCHESTRATION of the already
 // byte-parity-locked primitives signRequest / appendSignature (core/sign-request.ts)
 // and clockWindow / monotonicWindow (core/window.ts). It stamps EVERY covered header
-// at the value that entered the signature base — Content-Digest / Signature-Input /
-// Signature, and the Authorization / Signature-Agent whose values may be empty —
+// at the value that entered the signature base — Content-Digest / Signature-Agent /
+// Signature-Input / Signature, and the Authorization whose value may be empty —
 // byte-identical to the shared Go/Python oracle, forwards the request body UNMODIFIED,
 // and adds NO new crypto and NO new signature-base rendering.
 //
@@ -19,9 +19,10 @@
 //     send(url, init) — buffers the body, computes headers via signOutbound, and
 //     forwards the SAME body bytes to send.
 //
-// Signature-Agent is SET-IF-ABSENT (mirror Go transport.go:143-145, NOT Python's
-// always-stamp): TS carries the relay/append chain, where an upstream sig1 already
-// covers its own Signature-Agent value and must never be overwritten.
+// Every signature names its signer's key directory: the transport's own
+// signatureAgent, or the one a per-request SignerSource returns. On the append branch
+// the new member is added to the request's Signature-Agent dictionary beside the
+// earlier signers' members, which stay untouched (Go helpers.AppendSignature).
 
 import { encodeBase64Url } from "../src/base64url.ts";
 import { SignatureAgentHeader } from "../src/wire.ts";
@@ -31,39 +32,45 @@ import {
 	type SignRequestOptions,
 	signRequest,
 } from "./sign-request.ts";
+import { MAX_SIGNATURE_LIFETIME } from "./wba.ts";
 import { clockWindow, type Window } from "./window.ts";
 
-// The DEFAULT freshness window: clock-derived created + a 5-minute TTL, matching
-// Go's `signWindow = 5 * time.Minute` (transport.go:18) — NOT Python's 600s. The
+// The DEFAULT freshness window: clock-derived created + MAX_SIGNATURE_LIFETIME, the
+// longest a Web Bot Auth request signature may live (Go signWindow). A caller with its
+// own freshness policy injects a shorter window; a longer one is refused at signing. The
 // clock reads seconds (Date.now()/1000); clockWindow floors to Go's .Unix().
-const DEFAULT_WINDOW_TTL_SEC = 300;
+const DEFAULT_WINDOW_TTL_SEC = MAX_SIGNATURE_LIFETIME;
 
 function defaultWindow(): Window {
 	return clockWindow(() => Date.now() / 1000, DEFAULT_WINDOW_TTL_SEC);
 }
 
-// Entropy per signature nonce (128 bits, 22 base64url chars), matching Go.
-const NONCE_BYTES = 16;
+// Entropy per signature nonce: 64 bytes, 86 base64url characters. 64 bytes is the
+// length the Web Bot Auth test vectors use, and widely deployed WBA verifiers refuse a
+// nonce of any other length. Matches Go and Python.
+const NONCE_BYTES = 64;
 
 // A fresh RFC 9421 nonce from the platform CSPRNG, base64url without padding.
 // getRandomValues throws when it cannot produce random bytes; the error
 // propagates, so nothing is signed or sent without a nonce.
-function newNonce(): string {
+export function newNonce(): string {
 	return encodeBase64Url(crypto.getRandomValues(new Uint8Array(NONCE_BYTES)));
 }
 
 // Case-insensitive header lookup over a plain header record. Incoming requests may
 // spell header names in any case; the covered values (authorization, prior
-// Signature state, Signature-Agent) must be read regardless of casing.
+// Signature state, Signature-Agent) must be read regardless of casing. Repeated
+// spellings are joined, as the wire reads one field per name.
 function getHeader(
 	headers: Record<string, string>,
 	name: string,
 ): string | undefined {
 	const lower = name.toLowerCase();
+	const values: string[] = [];
 	for (const k of Object.keys(headers)) {
-		if (k.toLowerCase() === lower) return headers[k];
+		if (k.toLowerCase() === lower) values.push(headers[k] as string);
 	}
-	return undefined;
+	return values.length === 0 ? undefined : values.join(", ").trim();
 }
 
 /**
@@ -98,18 +105,21 @@ export interface SignOutboundOptions {
 	// sdk/ts WebCrypto convention (core/sign-request.ts, core/verifier.ts).
 	body: Uint8Array<ArrayBuffer>;
 	authorization: string;
-	// The COVERED Signature-Agent value to bind ("" binds an empty header, the
-	// no-directory bootstrap path). The transport resolves set-if-absent BEFORE
-	// calling — this is the already-resolved value.
+	// The signer's key-directory origin ("https://agent.example"), written as the
+	// signature's Signature-Agent member and covered. Required: empty or not an https
+	// origin throws WebBotAuthError and nothing is signed.
 	signatureAgent: string;
-	// Freshness window; defaults to clockWindow(now, 300s) (Go 5m) when absent.
+	// Freshness window; defaults to clockWindow(now, MAX_SIGNATURE_LIFETIME) when absent.
 	window?: Window;
-	// appendOnly routes through appendSignature even for a fresh request (relay
-	// mode); AppendSignature degrades to a byte-identical sig1 when prior is empty.
+	// appendOnly routes through appendSignature even for a fresh request;
+	// appendSignature produces a byte-identical sig1 when prior is empty.
 	appendOnly?: boolean;
-	// Prior signature state carried by the incoming request (the relay/chain path).
+	// coverPrevious makes an appended signature cover the last signature already on the
+	// request (SignRequestOptions.coverPrevious). Read on the append branch only.
+	coverPrevious?: boolean;
+	// Prior signature state carried by the incoming request.
 	prior?: PriorSignatures;
-	// Nonce source, called once per signature; defaults to 16 random bytes,
+	// Nonce source, called once per signature; defaults to 64 random bytes,
 	// base64url. Replace it only for deterministic output in tests. An empty nonce
 	// is refused: without one, identical requests in one second collide.
 	nonce?: () => string;
@@ -122,11 +132,14 @@ export interface SignedOutbound {
 }
 
 /**
- * signOutbound computes the RFC 9421 Content-Digest / Signature-Input / Signature
- * headers for one outbound request and returns them with the body untouched — the
- * transport-neutral core (Python SignedOutbound sibling). It orchestrates the
- * parity-locked primitives: appendSignature when appendOnly is set OR a prior
- * Signature is present (forwarding chain), signRequest otherwise.
+ * signOutbound computes the Web Bot Auth Signature-Agent and the RFC 9421
+ * Content-Digest / Signature-Input / Signature headers for one outbound request and
+ * returns them with the body untouched — the transport-neutral core (Python
+ * SignedOutbound sibling). It orchestrates the parity-locked primitives:
+ * appendSignature when appendOnly is set OR a prior Signature is present, signRequest
+ * otherwise. Throws, before anything is signed, when the signer's directory is missing
+ * or not an https origin, the window is longer than MAX_SIGNATURE_LIFETIME, or the
+ * prior Signature-Agent cannot take another member (WebBotAuthError).
  *
  * It returns EVERY covered header at the value that entered the signature base, empty
  * values included — see the emit below for why. The keys are LOWERCASE, which is the
@@ -155,23 +168,17 @@ export async function signOutbound(
 	const prior = o.prior ?? { signatureInput: "", signature: "" };
 	const chained = (o.appendOnly ?? false) || prior.signature !== "";
 	const signed = chained
-		? await appendSignature(o.privKey, prior, signOpts)
+		? await appendSignature(o.privKey, prior, { ...signOpts, coverPrevious: o.coverPrevious ?? false })
 		: await signRequest(o.privKey, signOpts);
 
 	// EVERY covered header is emitted, at exactly the value that entered the signature
-	// base — empty values included. A verifier rebuilds the base from the request it
-	// received, so a value bound but never sent is not bound at all: it reads the covered
-	// names off signature-input, finds nothing on the wire under one of them, and refuses.
-	// Measured: the covered set binds authorization and signature-agent unconditionally,
-	// and a request carrying neither is answered `header "authorization" missing from
-	// request` by every conformant verifier — so the ports agreed byte-for-byte with the
-	// oracle on what they signed and could not complete a single call.
-	//
-	// EVERY covered header, at exactly the value that entered the signature base — empty
-	// values included. See docs/design-history.md, "A covered header the peer never
-	// receives is not bound", for why binding one without sending it is not binding it,
-	// and why the emitted key is LOWERCASE (a signed key spelled differently from the
-	// caller's survives the merge beside it, putting the name on the wire twice).
+	// base — the empty authorization included. A verifier rebuilds the base from the
+	// request it received, so a value bound but never sent is not bound at all: it reads
+	// the covered names off signature-input, finds nothing on the wire under one of them,
+	// and refuses. See docs/design-history.md, "A covered header the peer never receives
+	// is not bound", for why, and why the emitted key is LOWERCASE (a signed key spelled
+	// differently from the caller's survives the merge beside it, putting the name on the
+	// wire twice).
 	//
 	// Taken straight off `signed`, never re-read from `o`: the primitive echoes what it
 	// bound, so there is one place the emitted value can come from and no way for the two
@@ -196,7 +203,7 @@ export interface OutboundInit {
 /** The seam createSigningTransport wraps: a WHATWG-fetch-shaped send(url, init). */
 export type OutboundSend<R> = (url: string, init: OutboundInit) => Promise<R>;
 
-/** What a sign predicate inspects to decide whether a request is signed. */
+/** What a sign predicate or a signer source inspects about one outbound request. */
 export interface OutboundRequest {
 	url: string;
 	method: string;
@@ -204,19 +211,51 @@ export interface OutboundRequest {
 	body: Uint8Array<ArrayBuffer> | undefined;
 }
 
+/** The identity one signature is made as: the private key, its keyid, and the https
+ * origin of the key directory that publishes it. */
+export interface SignerIdentity {
+	privKey: CryptoKey;
+	keyid: string;
+	signatureAgent: string;
+}
+
+/**
+ * SignerSource returns the signer and its Signature-Agent directory origin for one
+ * request, for a service that signs as many identities: an identity service signing as
+ * the calling agent, a console signing as the calling publisher (Go core.SignerSource).
+ * A source that throws, or returns no signer, means nothing is sent.
+ */
+export type SignerSource = (req: OutboundRequest) => SignerIdentity | undefined | Promise<SignerIdentity | undefined>;
+
 /**
- * Options for createSigningTransport — an idiomatic TS options object, one field per
- * Go WithX (transport.go:47-96). window replaces the default freshness window;
- * appendOnly forces the relay append branch; signatureAgent supplies the covered
- * directory value stamped SET-IF-ABSENT; predicate gates which requests are signed
- * (default: sign every bodied request).
+ * Options for createSigningTransport — an idiomatic TS options object, one field per Go
+ * WithX. privKey/keyid/signatureAgent name the one identity the transport signs as;
+ * signerSource replaces all three with a per-request identity. window replaces the
+ * default freshness window; appendOnly forces the append branch and coverPrevious makes
+ * an appended signature cover the last earlier one; predicate gates which requests are
+ * signed (default: sign every bodied request).
  */
 export interface SigningTransportOptions {
-	privKey: CryptoKey;
-	keyid: string;
+	privKey?: CryptoKey;
+	keyid?: string;
+	/** The signer's key-directory origin ("https://agent.example"), written as every
+	 * signature's Signature-Agent member. Required unless signerSource supplies it: a
+	 * request signed with no directory is refused (WebBotAuthError) and never sent. */
+	signatureAgent?: string;
+	/** Resolves the signer and its directory per request, in place of privKey, keyid and
+	 * signatureAgent (Go WithSignerSource). Every signature it makes follows the same
+	 * profile, with a fresh nonce. */
+	signerSource?: SignerSource;
 	window?: Window;
+	/** Route EVERY signed request through appendSignature (Go WithAppendSigner): a fresh
+	 * request gets sig1, a request already carrying signatures gets one more with its own
+	 * label and Signature-Agent member, leaving the earlier ones untouched. */
 	appendOnly?: boolean;
-	signatureAgent?: string;
+	/** Make an appended signature cover the last signature already on the request, as
+	 * WG-00 §5.2.2 permits a party that forwards a request unchanged in every component
+	 * that signature covers (Go WithCoverPrevious). Append branch only. A party that
+	 * changed the request, such as a Broker re-packaging a purchase, must not set it. */
+	coverPrevious?: boolean;
 	predicate?: (req: OutboundRequest) => boolean;
 	// Nonce source for each signature (see SignOutboundOptions.nonce). Every signed
 	// request gets a fresh nonce by default, so identical requests in the same second
@@ -224,16 +263,32 @@ export interface SigningTransportOptions {
 	nonce?: () => string;
 }
 
+// identityFor returns the signer and directory for req: the source's when one is
+// configured, the transport's own otherwise.
+async function identityFor(opts: SigningTransportOptions, req: OutboundRequest): Promise<SignerIdentity> {
+	if (opts.signerSource === undefined) {
+		if (opts.privKey === undefined || opts.keyid === undefined) {
+			throw new TypeError("signing transport: no signer configured (privKey and keyid, or signerSource)");
+		}
+		return { privKey: opts.privKey, keyid: opts.keyid, signatureAgent: opts.signatureAgent ?? "" };
+	}
+	const identity = await opts.signerSource(req);
+	if (identity === undefined) throw new Error("signing transport: signer source returned no signer");
+	return identity;
+}
+
 /**
  * createSigningTransport wraps a WHATWG-fetch-shaped send and returns a send with the
- * same shape that auto-signs each outbound request: it buffers the body, computes
- * the RFC 9421 headers via signOutbound, merges them, and forwards the SAME body
- * bytes to the wrapped send. A request with no body — or one the predicate
- * excludes — passes through UNSIGNED (there is nothing to bind a Content-Digest
- * to); that is not an error. A request already carrying a Signature is CHAINED
- * onto (appendSignature), never replaced. Naming stays family-consistent with the
- * newXResolver siblings; the whole-surface newX -> create rename is a separate,
- * broader change, not this module's concern.
+ * same shape that auto-signs each outbound request: it buffers the body, computes the
+ * Signature-Agent and RFC 9421 headers via signOutbound, merges them, and forwards the
+ * SAME body bytes to the wrapped send. A request with no body — or one the predicate
+ * excludes — passes through UNSIGNED (there is nothing to bind a Content-Digest to);
+ * that is not an error. A request already carrying a Signature gets an additional
+ * signature (appendSignature) rather than having its signature replaced. A signing
+ * refusal — no signer, no directory, a source error — rejects, and the wrapped send is
+ * never called. Naming stays family-consistent with the newXResolver siblings; the
+ * whole-surface newX -> create rename is a separate, broader change, not this module's
+ * concern.
  */
 export function createSigningTransport<R>(
 	send: OutboundSend<R>,
@@ -253,26 +308,25 @@ export function createSigningTransport<R>(
 			return send(url, init);
 		}
 
-		// Signature-Agent SET-IF-ABSENT: the incoming header (an upstream sig1's
-		// covered directory) wins; otherwise the transport stamps its own.
-		const existingAgent = getHeader(headers, SignatureAgentHeader);
-		const signatureAgent = existingAgent ?? opts.signatureAgent ?? "";
-
+		const identity = await identityFor(opts, { url, method, headers, body });
 		const prior: PriorSignatures = {
 			signatureInput: getHeader(headers, "signature-input") ?? "",
 			signature: getHeader(headers, "signature") ?? "",
+			signatureAgent: getHeader(headers, SignatureAgentHeader) ?? "",
+			contentDigest: getHeader(headers, "content-digest") ?? "",
 		};
 
 		const signed = await signOutbound({
-			privKey: opts.privKey,
-			keyid: opts.keyid,
+			privKey: identity.privKey,
+			keyid: identity.keyid,
 			method,
 			url,
 			body,
 			authorization: getHeader(headers, "authorization") ?? "",
-			signatureAgent,
+			signatureAgent: identity.signatureAgent,
 			window,
 			appendOnly: opts.appendOnly ?? false,
+			coverPrevious: opts.coverPrevious ?? false,
 			prior,
 			...(opts.nonce !== undefined ? { nonce: opts.nonce } : {}),
 		});
diff --git a/sdk/ts/core/verify-multisig-request.ts b/sdk/ts/core/verify-multisig-request.ts
index 4c8bb764..470e1af9 100644
--- a/sdk/ts/core/verify-multisig-request.ts
+++ b/sdk/ts/core/verify-multisig-request.ts
@@ -1,78 +1,52 @@
-// sdk/ts framework-agnostic RFC 9421 MULTISIG forwarding-chain SERVER-verify face
-// — the TS port of Go helpers.VerifyMultisigRequest[Resolved] (verify.go /
-// keyresolver.go). Where core/verify-request.ts is the SINGLE-SIG surface, this is
-// the multi-hop verify a Broker/Exchange built in TS wires when a request carries
-// a forwarding chain: it parses ALL labels, enforces the hop budget
-// FIRST, the structural forwarding chain NEXT, then cryptographically verifies
-// every hop — returning a verdict with the verified keyids in chain order, never
-// throwing.
+// sdk/ts framework-agnostic RFC 9421 SERVER-verify face for a request carrying several
+// signatures — the TS port of Go helpers.VerifyMultisigRequest[Resolved] (verify.go /
+// keyresolver.go). Where core/verify-request.ts judges the first signature, this verifies
+// EVERY signature on the request, each on its own, against the key its keyid names in
+// the directory its OWN covered Signature-Agent member names, and returns a verdict with
+// the verified keyids and directories in header order, never throwing.
+//
+// A signature need not cover another (WG-00 §5.2.2: a forwarder MAY); one that does
+// must cover the earlier signature's Signature member, its Signature-Input member and
+// every component it lists, and may only cover a signature that appears before it.
+// Labels carry no meaning: sig1..sigN is the SDK's convention, not a rule.
 //
 // Reject precedence (parity-critical, mirrors Go VerifyMultisigRequest):
 //   hop_budget → broken_chain → signature.
 //
-// NO replay: the Go helpers oracle VerifyMultisigRequest[Resolved]
-// performs no replay (replay lives at the connectserver layer), so this face
-// reuses the replay-free per-signature core (verifyParsedSignature) and never
-// touches a ReplayStore. The chain link resolves to the LIVE predecessor bytes, so
-// a stripped, reordered, or tampered predecessor is rejected.
+// NO replay: the Go helpers oracle VerifyMultisigRequest[Resolved] performs no replay
+// (replay lives at the connectserver layer), so this face reuses the replay-free
+// per-signature core (verifyParsedSignature) and never touches a ReplayStore.
 
-import { stdBase64 } from "./sign.ts";
-import type { ChainLink } from "./sign-request.ts";
-import {
-	type MultisigMember,
-	parseMultisigSignatureInput,
-	signatureBytesByLabel,
-} from "./multisig-parse.ts";
+import { type ParsedSignature, parseSignatureHeaders } from "./multisig-parse.ts";
 import {
 	readHeader,
 	type RequestKeyResolver,
-	requestVerifyFields,
+	verifiableRequest,
 	verifyParsedSignature,
+	type VerifyRequestHeaders,
 } from "./verify-request.ts";
+import { acceptSignatureFor, componentParam, coversComponent, keyed, type Refusal } from "./wba.ts";
 
 /**
- * The classified multisig reject reason (mirrors the Go taxonomy): "hop_budget"
- * (count exceeds the configured budget), "broken_chain" (labels non-contiguous /
- * reordered / missing or wrong link), and "signature" (any per-hop
- * authenticity/freshness/key/covered-set failure — the default).
+ * The classified multisig reject reason (mirrors the Go taxonomy): "hop_budget" (more
+ * signatures than the configured budget), "broken_chain" (a signature covers an earlier
+ * one incompletely, or names one that does not appear before it), and "signature" (any
+ * per-signature authenticity/freshness/key/covered-set/form failure — the default).
  */
 export type MultisigRejectReason = "signature" | "broken_chain" | "hop_budget";
 
-/** The injected keyid-keyed verifying-key resolver — every hop's key resolves
- * through it (the SDK owns no keys). Structurally identical to RequestKeyResolver. */
+/** The injected verifying-key resolver every signature's key resolves through, keyed by
+ * keyid and by the directory that signature's own member names (the SDK owns no keys).
+ * Structurally identical to RequestKeyResolver. */
 export type MultisigKeyResolver = RequestKeyResolver;
 
 /**
- * The request headers a multisig server-verify reads.
- *
- * Read exactly as the single-sig sibling reads them: case-insensitively, joining
- * repeated spellings of one name. Declared as a type alias for the same reason —
- * a real request carries names beyond the ones spelled out below.
+ * The request headers a multisig server-verify reads. Read exactly as the single-sig
+ * sibling reads them: case-insensitively, joining repeated spellings of one name. When
+ * the entitlement-token header is present, EVERY signature's covered set must commit to
+ * it (Go runs enforceEntitlementCoverage inside verifySingleSignature, per signature).
  */
-export type MultisigVerifyHeaders = {
-	"content-digest": string;
-	"signature-input": string;
-	signature: string;
-	/**
-	 * The two covered headers whose value may legitimately be EMPTY. Optional so an
-	 * ABSENT one is distinguishable from an empty one, which is the whole reason an
-	 * empty one is put on the wire: the base is rebuilt from the request that ARRIVED,
-	 * so a name the signature covers and the request does not carry cannot be
-	 * reconstructed, and defaulting it to "" would invent a value the signer may never
-	 * have bound. The oracle draws the same line by reading these with Values rather
-	 * than Get. See docs/design-history.md, "A covered header the peer never receives
-	 * is not bound".
-	 */
-	authorization?: string;
-	"signature-agent"?: string;
-	/**
-	 * The entitlement-token header (mirrors Go entitlementHeaderLower). When
-	 * present, EVERY hop's covered set MUST commit to it (enforceEntitlementCoverage
-	 * runs per hop in Go's verifySingleSignature, which the multisig loop calls per
-	 * hop); omit/empty when the request carries no entitlement.
-	 */
-	"x-entitlement-token"?: string;
-}
+export type MultisigVerifyHeaders = VerifyRequestHeaders;
 
 /** Inputs for verifyMultisigRequestServer. */
 export interface VerifyMultisigRequestInput {
@@ -83,123 +57,101 @@ export interface VerifyMultisigRequestInput {
 	resolve: MultisigKeyResolver;
 	/** Injected clock returning unix seconds — verify reads time ONLY through this. */
 	now: () => number;
-	/** The Exchange hop bound: reject a chain longer than this BEFORE any crypto.
-	 * 0 / omitted means unbounded (mirrors Go opts.MaxSignatures). */
+	/** The hop budget: reject a request carrying more signatures than this BEFORE any
+	 * crypto. Every signature counts, whether or not it covers another. 0 / omitted means
+	 * unbounded (mirrors Go opts.MaxSignatures). */
 	maxSignatures?: number;
-	/** The per-hop signature-lifetime clamp in SECONDS (mirrors Go
-	 * VerifyOptions.MaxSignatureAge), enforced on EVERY hop exactly like the
+	/** The per-signature lifetime clamp in SECONDS (mirrors Go
+	 * VerifyOptions.MaxSignatureAge), enforced on EVERY signature exactly like the
 	 * single-sig path. 0 / omitted means unbounded; the bound is inclusive. */
 	maxSignatureAge?: number;
 }
 
-/** The returned verdict: valid with the verified keyids in chain order, or invalid
- * with the classified reason. Never thrown — always returned. */
+/** The returned verdict: valid with the verified keyids and directories in header
+ * order, or invalid with the classified reason. Never thrown — always returned. */
 export interface MultisigVerifyVerdict {
 	valid: boolean;
 	reason?: MultisigRejectReason;
 	keyids?: string[];
+	/** The https origin of each verified signer's key directory, in header order. */
+	signatureAgents?: string[];
+	/** The Accept-Signature value a refusal is answered with, set on the same refusals
+	 * as the single-sig verdict's (see VerifyVerdict.acceptSignature). */
+	acceptSignature?: string;
 }
 
-const rejectMultisig = (reason: MultisigRejectReason): MultisigVerifyVerdict => ({
-	valid: false,
-	reason,
-});
+function rejected(reason: MultisigRejectReason, refusal?: Refusal): MultisigVerifyVerdict {
+	const accept = refusal === undefined ? undefined : acceptSignatureFor(refusal);
+	return { valid: false, reason, ...(accept !== undefined ? { acceptSignature: accept } : {}) };
+}
 
 /**
- * enforceSignatureChain — the STRUCTURAL forwarding-chain gate (Go
- * enforceSignatureChain): labels are exactly sig1..sigN contiguous in header
- * order, sig1 carries no "signature" component, and every sigK (K>1) covers
- * exactly one "signature";key="sig(K-1)". Cryptographic binding is the per-hop
- * verify's job; this is structure only.
+ * enforceEarlierCoverage applies WG-00 §5.2.2 to every signature that covers another
+ * (Go enforceEarlierCoverage): for each covered "signature";key=X, X must be a signature
+ * that appears earlier in Signature-Input, and the covering signature must also cover
+ * "signature-input";key=X and every component X lists. A covered
+ * "signature-input";key=X must likewise name an earlier signature.
  */
-function enforceSignatureChain(members: MultisigMember[]): boolean {
-	for (let i = 0; i < members.length; i += 1) {
-		const member = members[i] as MultisigMember;
-		if (member.label !== `sig${i + 1}`) return false;
-		const links = member.covered.filter((c) => c.name === "signature");
-		if (i === 0) {
-			if (links.length !== 0) return false;
-			continue;
+export function enforceEarlierCoverage(sigs: readonly ParsedSignature[]): boolean {
+	const position = new Map(sigs.map((s, i) => [s.label, i] as const));
+	for (let i = 0; i < sigs.length; i += 1) {
+		const sig = sigs[i] as ParsedSignature;
+		for (const c of sig.covered) {
+			const name = c.name.toLowerCase();
+			if (name !== "signature" && name !== "signature-input") continue;
+			const key = componentParam(c, "key");
+			const at = key === undefined ? undefined : position.get(key);
+			if (key === undefined || key === "" || at === undefined || at >= i) return false;
+			if (name === "signature" && !coversEarlierFully(sig, sigs[at] as ParsedSignature)) return false;
 		}
-		if (links.length !== 1 || links[0]?.chainKey !== `sig${i}`) return false;
 	}
 	return true;
 }
 
-// chainLinkFor builds the forwarding-chain base line for hop i (>0): the token
-// `"signature";key="sig(i)"` and its value `:<std-base64(live predecessor bytes)>:`
-// resolved from the LIVE Signature member, or undefined if the predecessor bytes
-// are absent (a per-hop signature failure).
-function chainLinkFor(
-	i: number,
-	sigMap: Record<string, Uint8Array<ArrayBuffer>>,
-): ChainLink | undefined {
-	const prevLabel = `sig${i}`;
-	const prevBytes = sigMap[prevLabel];
-	if (!prevBytes) return undefined;
-	return { token: `"signature";key="${prevLabel}"`, value: `:${stdBase64(prevBytes)}:` };
+// coversEarlierFully reports whether sig, which covers prev's Signature member, also
+// covers prev's Signature-Input member and every component prev lists.
+function coversEarlierFully(sig: ParsedSignature, prev: ParsedSignature): boolean {
+	if (!coversComponent(sig.covered, keyed("signature-input", prev.label))) return false;
+	return prev.covered.every((c) => coversComponent(sig.covered, c));
 }
 
 /**
- * Verify an inbound MULTISIG forwarding-chain FORA request; return a reason-tagged
- * verdict carrying the verified keyids in chain order. Enforces the hop budget,
- * then the structural chain, then every hop's signature — in that precedence.
+ * Verify every signature on an inbound FORA request; return a reason-tagged verdict
+ * carrying the verified keyids and directories in header order. Enforces the hop
+ * budget, then the completeness of any coverage of an earlier signature, then each
+ * signature independently — in that precedence. The request is refused if any one
+ * signature fails.
  */
 export async function verifyMultisigRequestServer(
 	input: VerifyMultisigRequestInput,
 ): Promise<MultisigVerifyVerdict> {
-	// Every read goes through the case-insensitive, duplicate-joining fold — see
-	// readHeader for why both properties are load-bearing.
-	const members = parseMultisigSignatureInput([
-		readHeader(input.headers, "signature-input") ?? "",
-	]);
-	if (!members) return rejectMultisig("signature");
+	const parsed = parseSignatureHeaders(
+		readHeader(input.headers, "signature-input"),
+		readHeader(input.headers, "signature"),
+	);
+	if (!parsed.ok) return rejected("signature", parsed.refusal);
+	const sigs = parsed.value;
 
 	const budget = input.maxSignatures ?? 0;
-	if (budget > 0 && members.length > budget) return rejectMultisig("hop_budget");
+	if (budget > 0 && sigs.length > budget) return rejected("hop_budget");
+	if (!enforceEarlierCoverage(sigs)) return rejected("broken_chain");
 
-	if (!enforceSignatureChain(members)) return rejectMultisig("broken_chain");
-
-	// A covered header the request never carried is refused here and NOT sooner: the
-	// oracle finds it while rebuilding a hop's base, which happens after the budget
-	// and the chain are enforced. Checking earlier would answer "signature" to an
-	// over-budget or reordered chain that the oracle answers "hop_budget" and
-	// "broken_chain" for — the corpus pins all three.
-	//
-	// The fields carry the entitlement-token header too, so enforceEntitlementCoverage
-	// gates EVERY hop (Go runs it inside verifySingleSignature, called per hop).
-	const fields = requestVerifyFields(input.method, input.url, input.body, input.headers);
-	if (fields === undefined) return rejectMultisig("signature");
-
-	const sigMap = signatureBytesByLabel(readHeader(input.headers, "signature") ?? "");
+	const req = verifiableRequest(input.method, input.url, input.body, input.headers);
 	const nowSec = Math.floor(input.now());
-
 	const keyids: string[] = [];
-	for (let i = 0; i < members.length; i += 1) {
-		const member = members[i] as MultisigMember;
-		let chainLink: ChainLink | undefined;
-		if (i > 0) {
-			chainLink = chainLinkFor(i, sigMap);
-			if (!chainLink) return rejectMultisig("signature");
-		}
-		const ok = await verifyParsedSignature(
-			fields,
-			{
-				rawParams: member.rawInner,
-				covered: new Set(member.covered.map((c) => c.name)),
-				keyid: member.keyid,
-				alg: member.alg,
-				...(member.created !== undefined ? { created: member.created } : {}),
-				...(member.expires !== undefined ? { expires: member.expires } : {}),
-			},
-			sigMap[member.label],
+	const signatureAgents: string[] = [];
+	for (const sig of sigs) {
+		const verified = await verifyParsedSignature(
+			req,
+			sig,
+			sigs.length,
 			input.resolve,
 			nowSec,
-			chainLink,
 			input.maxSignatureAge,
 		);
-		if (!ok || member.keyid === null) return rejectMultisig("signature");
-		keyids.push(member.keyid);
+		if (!verified.ok) return rejected("signature", verified.refusal);
+		keyids.push(verified.value.keyid);
+		signatureAgents.push(verified.value.directory);
 	}
-	return { valid: true, keyids };
+	return { valid: true, keyids, signatureAgents };
 }
diff --git a/sdk/ts/core/verify-request.ts b/sdk/ts/core/verify-request.ts
index 4c80b879..57ef205d 100644
--- a/sdk/ts/core/verify-request.ts
+++ b/sdk/ts/core/verify-request.ts
@@ -1,49 +1,62 @@
-// sdk/ts framework-agnostic RFC 9421 single-signature SERVER-verify face — the
-// verify sibling of core/sign-request.ts and the TS port of sdk/go/connectserver's
-// single-sig verify path (verify.go / classify.go over helpers/verify.go +
-// sigbase.go). Where hono/middleware.ts::foraVerify is the edge-GET-PoP path
-// (2-component, self-verifying, no resolver) and core/verifier.ts is OFFER verify
-// (JCS), this is the request-verify a Broker/Exchange built in TS wires behind its
-// framework: it parses the inbound Signature-Input/Signature, enforces the FORA
-// required-5 covered set + content-digest + created/expires window, resolves the
-// keyid through an INJECTED KeyResolver (the SDK owns no keys), runs the two-phase
-// replay check over an INJECTED store (the SDK owns no replay state), reads time
-// through an INJECTED clock (the SDK owns no wall clock), and returns a VERDICT
-// carrying the reject reason mirroring the Go taxonomy — never throws.
+// sdk/ts framework-agnostic RFC 9421 single-signature SERVER-verify face under the Web
+// Bot Auth profile — the verify sibling of core/sign-request.ts and the TS port of
+// sdk/go/connectserver's verify path over helpers/verify.go. Where
+// hono/middleware.ts::foraVerify is the edge delivery-proof path (self-verifying, no
+// resolver) and core/verifier.ts is OFFER verify (JCS), this is the request-verify a
+// Broker/Exchange built in TS wires behind its framework: it parses the inbound
+// Signature-Input/Signature, enforces the profile and the FORA RPC covered set,
+// resolves the keyid in the key directory the signature's own Signature-Agent member
+// names through an INJECTED resolver (the SDK owns no keys), runs the two-phase replay
+// check over an INJECTED store (the SDK owns no replay state), reads time through an
+// INJECTED clock (the SDK owns no wall clock), and returns a VERDICT — never throws.
 //
-// SINGLE-SIG scope only:
-// multisig forwarding-chain verify (hop budget, broken_chain) is owned by the
-// core/verify-multisig-request.ts sibling.
-// The reject reasons this face emits are exactly the two the single-sig surface
-// produces (connectserver classify.go RejectReason.String()): "signature" (bad
-// sig / expiry / future-created / wrong-or-unresolvable key / tampered covered
-// field / missing component — the default) and "replay".
-
-import { decodeBase64Url, utf8Bytes } from "../src/base64url.ts";
-import { stdBase64 } from "./sign.ts";
+// The first signature in header order is the one judged; a request carrying several is
+// the multisig sibling's (core/verify-multisig-request.ts). The reject reasons are the
+// two the single-signature surface produces (connectserver classify.go
+// RejectReason.String()): "signature" (the default — a bad signature, expiry, an
+// unresolvable key, a tampered covered field, a missing component, a refused form) and
+// "replay".
+
+import { WBATag } from "../src/wire.ts";
+import { parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
+import { stdBase64 } from "../src/base64url.ts";
 import {
-	buildRequestSignatureBase,
-	type ChainLink,
-	COVERED_COMPONENTS,
+	buildSignatureBase,
+	ComponentUnavailable,
 	contentDigest,
+	requestComponentValue,
 } from "./sign-request.ts";
+import {
+	acceptSignatureFor,
+	type Checked,
+	ENTITLEMENT_COVERED,
+	type Refusal,
+	REQUIRED_RPC_COMPONENTS,
+	signatureDirectory,
+} from "./wba.ts";
+
+export { acceptSignature, ENTITLEMENT_COVERED } from "./wba.ts";
 
 /**
  * The classified reject reason (connectserver classify.go RejectReason.String()).
- * SINGLE-SIG surface: "signature" (the default — authenticity/freshness/key/
- * covered-set failures) and "replay". The multisig tokens broken_chain /
- * hop_budget are out of scope here.
+ * SINGLE-SIG surface: "signature" (the default — authenticity/freshness/key/covered-set
+ * and profile failures) and "replay".
  */
 export type RejectReason = "signature" | "replay";
 
 /**
- * The injected keyid-keyed verifying-key resolver (ADR-020 §4). Distinct from
- * core/verifier.ts::OfferKeyResolver which is EXCHANGE-keyed for offer verify: a
- * request-verify resolver is keyed by the Signature-Input keyid. Returns the raw
- * 32-byte Ed25519 public key, or undefined when the key is unknown.
+ * The injected verifying-key resolver (ADR-020 §4). Distinct from
+ * core/verifier.ts::OfferKeyResolver, which is EXCHANGE-keyed for offer verify: a
+ * request-verify resolver is keyed by the Signature-Input keyid and the https origin of
+ * the key directory the signature's own covered Signature-Agent member names, so each
+ * signature is resolved in its own signer's directory. Returns the raw 32-byte Ed25519
+ * public key, or undefined when that directory publishes no such key.
  */
 export interface RequestKeyResolver {
-	resolve(keyid: string | null): Uint8Array<ArrayBuffer> | undefined;
+	resolve(
+		keyid: string,
+		directory: string,
+	): Uint8Array<ArrayBuffer> | undefined | Promise<Uint8Array<ArrayBuffer> | undefined>;
 }
 
 /**
@@ -66,33 +79,29 @@ export interface ReplayStore {
  * object spells it. Declared as a type alias rather than an interface because only a
  * type alias gets the implicit index signature that lets a value of this type reach
  * readHeader's `Record<string, string | undefined>` parameter; an interface is open to
- * declaration merging and TypeScript withholds it. Extra properties were already
- * assignable either way — that is not what the alias buys.
+ * declaration merging and TypeScript withholds it.
+ *
+ * Every member is optional so an ABSENT header is distinguishable from an empty one. A
+ * request with no Signature-Input or Signature is unsigned and is answered with
+ * Accept-Signature. A covered header the request does not carry cannot be
+ * reconstructed, and defaulting it to "" would invent a value the signer may never have
+ * bound; the oracle draws the same line by reading headers with Values rather than Get.
+ * See docs/design-history.md, "A covered header the peer never receives is not bound".
  */
 export type VerifyRequestHeaders = {
-	"content-digest": string;
-	"signature-input": string;
-	signature: string;
-	/**
-	 * The two covered headers whose value may legitimately be EMPTY. Optional so an
-	 * ABSENT one is distinguishable from an empty one, which is the whole reason an
-	 * empty one is put on the wire: the base is rebuilt from the request that ARRIVED,
-	 * so a name the signature covers and the request does not carry cannot be
-	 * reconstructed, and defaulting it to "" would invent a value the signer may never
-	 * have bound. The oracle draws the same line by reading these with Values rather
-	 * than Get. See docs/design-history.md, "A covered header the peer never receives
-	 * is not bound".
-	 */
+	"content-digest"?: string;
+	"signature-input"?: string;
+	signature?: string;
 	authorization?: string;
+	/** The Signature-Agent dictionary naming each signer's key directory. */
 	"signature-agent"?: string;
 	/**
-	 * The entitlement-token header (mirrors Go entitlementHeaderLower). When
-	 * present, the covered set MUST commit to it (enforceEntitlementCoverage);
-	 * omit/empty when the request carries no entitlement. Format-neutral —
-	 * JWT/opaque token; coverage is enforced, contents are not.
+	 * The entitlement-token header (mirrors Go entitlementHeaderLower). When present, the
+	 * covered set MUST commit to it; omit/empty when the request carries no entitlement.
+	 * Format-neutral — JWT/opaque token; coverage is enforced, contents are not.
 	 */
 	"x-entitlement-token"?: string;
-}
+};
 
 /** Inputs for verifyRequestServer — the request material plus the injected boundary. */
 export interface VerifyRequestServerInput {
@@ -106,7 +115,7 @@ export interface VerifyRequestServerInput {
 	/** Injected clock returning unix seconds — verify reads time ONLY through this. */
 	now: () => number;
 	/**
-	 * The per-hop signature-lifetime clamp in SECONDS (mirrors Go
+	 * The per-signature lifetime clamp in SECONDS (mirrors Go
 	 * VerifyOptions.MaxSignatureAge). When > 0, a signature whose declared window
 	 * (expires − created) EXCEEDS this is rejected as "signature"; the bound is
 	 * inclusive (a window exactly equal to it is accepted). 0/undefined = unbounded.
@@ -114,27 +123,31 @@ export interface VerifyRequestServerInput {
 	maxSignatureAge?: number;
 }
 
-/** The returned verdict: valid, or invalid with the classified reason. */
+/** The returned verdict: valid with what the signature proved, or invalid with the
+ * classified reason. */
 export interface VerifyVerdict {
 	valid: boolean;
 	reason?: RejectReason;
+	/** The keyid of the verified signature. */
+	keyid?: string;
+	/** The https origin of the verified signer's key directory: the value of the
+	 * Signature-Agent member the signature covers, the directory its keyid was resolved
+	 * in. It is covered, so it is signed. */
+	signatureAgent?: string;
+	/**
+	 * The Accept-Signature value (RFC 9421 §5.1, WG-00 §5.3) a refusal is answered with,
+	 * naming the components and form the verifier requires. Set when the request carried
+	 * no signature, a signature omitted a required component, its tag was missing or
+	 * wrong, or its Signature-Agent was in a form the profile refuses; unset for every
+	 * other refusal. A server sets it on its 401 as the AcceptSignatureHeader field.
+	 */
+	acceptSignature?: string;
 }
 
 // A created timestamp may not lead the verifier clock by more than this
 // (mirrors Go helpers.defaultMaxFutureSkew = 300s).
 const MAX_FUTURE_SKEW_SEC = 300;
 
-// The FORA required covered set, lowercased (mirrors Go requiredCoveredComponents).
-const REQUIRED_COVERED: ReadonlySet<string> = new Set(COVERED_COMPONENTS);
-
-// The entitlement-token header in covered-component (lowercased) form
-// (mirrors Go entitlementHeaderLower). When the request carries this header the
-// signature's covered set MUST commit to it; absent → no constraint.
-export const ENTITLEMENT_COVERED = "x-entitlement-token";
-
-const REASON_SIGNATURE: RejectReason = "signature";
-const REASON_REPLAY: RejectReason = "replay";
-
 /**
  * Read the request's value for `name`, or undefined when it carries no such field.
  *
@@ -171,124 +184,23 @@ export function readHeader(
 	return values.join(", ").trim();
 }
 
-/**
- * The covered names that are HEADER fields. Derived from COVERED_COMPONENTS rather
- * than restated, so a name added to the covered set is absent-checked the day it is
- * added: the two "@" components are reconstructed from the request line, every other
- * covered name has to arrive as a field.
- */
-const COVERED_HEADER_NAMES: readonly string[] = COVERED_COMPONENTS.filter(
-	(c) => !c.startsWith("@"),
-);
+/** The request a signature is verified against: its request line, its exact body, and
+ * a header lookup that joins repeated field lines (see readHeader). */
+export interface VerifiableRequest {
+	method: string;
+	url: string;
+	body: Uint8Array<ArrayBuffer>;
+	header(name: string): string | undefined;
+}
 
-/**
- * Assemble the request-level covered fields, or undefined when the request does not
- * CARRY one of the headers its signature covers.
- *
- * The absent-header rule lives here rather than at each entry point, because it is a
- * property of the covered SET and not of any one face: every name in
- * COVERED_HEADER_NAMES must arrive, and an absent one cannot be defaulted to "" —
- * that would invent a value the signer may never have bound. The oracle draws the
- * same line one layer down, in the component resolver, for any covered name at all.
- *
- * Callers keep their own reject reason and their own place in the gate sequence: the
- * single-sig and multisig faces refuse at different points on purpose, and the corpus
- * pins that difference.
- *
- * Note the base builder still renders a fixed component list, so a name added to the
- * covered set is guarded here but does not yet reach the signature base.
- */
-export function requestVerifyFields(
+/** verifiableRequest adapts the request material a verify face receives. */
+export function verifiableRequest(
 	method: string,
 	url: string,
 	body: Uint8Array<ArrayBuffer>,
 	headers: Record<string, string | undefined>,
-): RequestVerifyFields | undefined {
-	const covered = new Map<string, string>();
-	for (const name of COVERED_HEADER_NAMES) {
-		const value = readHeader(headers, name);
-		if (value === undefined) return undefined;
-		covered.set(name, value);
-	}
-	// The loop above returned already if any of these were absent; the ?? "" is
-	// unreachable and exists only to satisfy Map's optional return type.
-	const entitlement = readHeader(headers, ENTITLEMENT_COVERED);
-	return {
-		method,
-		url,
-		digestHeader: covered.get("content-digest") ?? "",
-		authorization: covered.get("authorization") ?? "",
-		signatureAgent: covered.get("signature-agent") ?? "",
-		body,
-		...(entitlement ? { entitlementHeader: entitlement } : {}),
-	};
-}
-
-const reject = (reason: RejectReason): VerifyVerdict => ({
-	valid: false,
-	reason,
-});
-const accept: VerifyVerdict = { valid: true };
-
-interface ParsedInput {
-	/** Verbatim inner-list + params tail after `label=` — the base @signature-params value. */
-	rawParams: string;
-	covered: Set<string>;
-	keyid: string | null;
-	alg: string | null;
-	created?: number;
-	expires?: number;
-}
-
-/**
- * Parse `label=("c1" "c2" ...);keyid="..";alg="..";created=..;expires=..` — a
- * minimal RFC 8941-shaped parser for the SINGLE-SIG surface (one label, the FORA
- * covered set, string-valued keyid/alg). It keeps the VERBATIM params tail so the
- * verify base terminates with the signer's exact @signature-params bytes (Go
- * RawInner), never a re-rendering.
- */
-function parseSignatureInput(raw: string): ParsedInput | undefined {
-	const eq = raw.indexOf("=");
-	if (eq < 0) return undefined;
-	const rawParams = raw.slice(eq + 1).trim();
-	const open = rawParams.indexOf("(");
-	const close = rawParams.indexOf(")");
-	if (open !== 0 || close < 0) return undefined;
-	const inner = rawParams.slice(open + 1, close);
-	const covered = new Set(
-		[...inner.matchAll(/"([^"]*)"/g)].map((m) => (m[1] ?? "").toLowerCase()),
-	);
-	const tail = rawParams.slice(close + 1);
-	const keyid = matchQuoted(tail, /;keyid="([^"]*)"/);
-	const alg = matchQuoted(tail, /;alg="([^"]*)"/);
-	const created = matchInt(tail, /;created=(\d+)/);
-	const expires = matchInt(tail, /;expires=(\d+)/);
-	return {
-		rawParams,
-		covered,
-		keyid,
-		alg,
-		...(created !== undefined ? { created } : {}),
-		...(expires !== undefined ? { expires } : {}),
-	};
-}
-
-function matchQuoted(s: string, re: RegExp): string | null {
-	const m = s.match(re);
-	return m ? (m[1] ?? "") : null;
-}
-
-function matchInt(s: string, re: RegExp): number | undefined {
-	const m = s.match(re);
-	return m ? Number(m[1]) : undefined;
-}
-
-/** Parse the RFC 9421 `Signature` header value `label=:<STANDARD-base64>:`. */
-function parseSignatureBytes(raw: string): Uint8Array<ArrayBuffer> | undefined {
-	const first = raw.indexOf(":");
-	const last = raw.lastIndexOf(":");
-	if (first < 0 || last <= first) return undefined;
-	return decodeBase64Url(raw.slice(first + 1, last));
+): VerifiableRequest {
+	return { method, url, body, header: (name) => readHeader(headers, name) };
 }
 
 // The replay nonce mirrors connectserver.replayNonce: keyid + NUL +
@@ -317,154 +229,123 @@ export async function ed25519Verify(
 	}
 }
 
-/** The request-level covered fields shared across every hop of a request. */
-export interface RequestVerifyFields {
-	method: string;
-	url: string;
-	digestHeader: string;
-	authorization: string;
-	signatureAgent: string;
-	body: Uint8Array<ArrayBuffer>;
-	/**
-	 * The entitlement-token header value (empty/undefined when absent). When
-	 * non-empty, enforceEntitlementCoverage requires the covered set to commit to
-	 * "x-entitlement-token" — an entitlement token cannot be slipped under an
-	 * otherwise-valid signature.
-	 */
-	entitlementHeader?: string;
+/** What one verified signature proved. */
+export interface VerifiedSignature {
+	keyid: string;
+	/** The https origin of the key directory the signature's member names. */
+	directory: string;
 }
 
-/** The parsed per-signature params the verify core judges (one hop). */
-export interface ParsedSignatureParams {
-	/** Verbatim inner-list + params tail — the base @signature-params value. */
-	rawParams: string;
-	covered: ReadonlySet<string>;
-	keyid: string | null;
-	alg: string | null;
-	created?: number;
-	expires?: number;
-}
+const refuse = (refusal: Refusal): { ok: false; refusal: Refusal } => ({ ok: false, refusal });
+const SIGNATURE: Refusal = { kind: "signature" };
 
 /**
- * The per-signature verify core shared by the single-sig and multisig paths
- * (mirrors Go verifySingleSignature, MINUS replay): alg + required
- * covered set + created/expires window + content-digest + key resolution +
- * Ed25519 over the reconstructed base. Returns true iff the signature is authentic
- * and policy-valid. `chainLink`, when present, inserts the forwarding-chain base
- * line for a chained hop (sigN, N>1). NO replay — the caller owns that so the
- * multisig loop never touches a ReplayStore. `maxSignatureAge` (seconds, mirrors
- * Go VerifyOptions.MaxSignatureAge) clamps the declared lifetime per hop: when
- * > 0 a window (expires − created) EXCEEDING it is rejected; 0/undefined =
- * unbounded, and the bound is inclusive.
+ * verifyParsedSignature runs the full per-signature check shared by the single-sig and
+ * multisig faces (mirrors Go verifySingleSignature, MINUS replay): alg, the Web Bot Auth
+ * tag, the FORA RPC components, the signature's own Signature-Agent member, entitlement
+ * coverage, the created/expires window, content-digest, then the key the member's
+ * directory publishes and the Ed25519 check over the rebuilt base. `sigCount` is the
+ * number of signatures on the request: the legacy String form of Signature-Agent is
+ * accepted only when it is one. `maxSignatureAge` (seconds, mirrors Go
+ * VerifyOptions.MaxSignatureAge) clamps the declared lifetime: when > 0 a window
+ * EXCEEDING it is refused; 0/undefined = unbounded. NO replay — the caller owns that.
  */
 export async function verifyParsedSignature(
-	fields: RequestVerifyFields,
-	parsed: ParsedSignatureParams,
-	sigBytes: Uint8Array<ArrayBuffer> | undefined,
+	req: VerifiableRequest,
+	sig: ParsedSignature,
+	sigCount: number,
 	resolve: RequestKeyResolver,
 	nowSec: number,
-	chainLink?: ChainLink,
 	maxSignatureAge?: number,
-): Promise<boolean> {
-	if (parsed.keyid === null) return false;
-	if (parsed.alg === null || parsed.alg.toLowerCase() !== "ed25519") return false;
-	for (const need of REQUIRED_COVERED) {
-		if (!parsed.covered.has(need)) return false;
+): Promise<Checked<VerifiedSignature>> {
+	if (sig.alg === undefined || sig.alg.toLowerCase() !== "ed25519") return refuse(SIGNATURE);
+	if (sig.tag !== WBATag) return refuse({ kind: "tag" });
+	const names = new Set(sig.covered.map((c) => c.name.toLowerCase()));
+	for (const need of REQUIRED_RPC_COMPONENTS) {
+		if (!names.has(need)) return refuse({ kind: "missing_component", component: need });
 	}
-	// Entitlement coverage (mirrors Go enforceEntitlementCoverage, run right after
-	// enforceRequiredComponents): iff the request carries the entitlement-token
-	// header, the covered set MUST commit to it; absent → no constraint.
-	if (fields.entitlementHeader && !parsed.covered.has(ENTITLEMENT_COVERED)) {
-		return false;
+	const directory = signatureDirectory(req.header("signature-agent"), sig, sigCount);
+	if (!directory.ok) return directory;
+	// Every field line under the name, joined: a reader taking the first line alone is
+	// shadowed by an empty line put ahead of a real token, and the coverage rule never runs.
+	const entitlement = req.header(ENTITLEMENT_COVERED);
+	if (entitlement !== undefined && entitlement !== "" && !names.has(ENTITLEMENT_COVERED)) {
+		return refuse({ kind: "missing_component", component: ENTITLEMENT_COVERED });
 	}
-	if (parsed.created === undefined || parsed.expires === undefined) return false;
-	if (parsed.expires < nowSec) return false;
-	if (parsed.created > nowSec + MAX_FUTURE_SKEW_SEC) return false;
-	// Lifetime clamp (mirrors Go enforceCreatedExpires MaxSignatureAge): reject a
-	// declared window longer than the verifier allows. 0/undefined = unbounded;
-	// the bound is inclusive (strictly-greater is rejected).
-	if (
-		maxSignatureAge !== undefined &&
-		maxSignatureAge > 0 &&
-		parsed.expires - parsed.created > maxSignatureAge
-	) {
-		return false;
+	if (!sig.created || !sig.expires) return refuse(SIGNATURE);
+	if (sig.expires < nowSec || sig.created > nowSec + MAX_FUTURE_SKEW_SEC) return refuse(SIGNATURE);
+	if (maxSignatureAge !== undefined && maxSignatureAge > 0 && sig.expires - sig.created > maxSignatureAge) {
+		return refuse(SIGNATURE);
 	}
+	if (names.has("content-digest")) {
+		const digest = req.header("content-digest");
+		if (digest === undefined || digest.trim() !== (await contentDigest(req.body))) return refuse(SIGNATURE);
+	}
+	let pub: Uint8Array<ArrayBuffer> | undefined;
+	try {
+		pub = await resolve.resolve(sig.keyid, directory.value);
+	} catch {
+		return refuse(SIGNATURE);
+	}
+	if (pub === undefined || pub.length !== 32) return refuse(SIGNATURE);
+	let base: string;
+	try {
+		base = buildSignatureBase(sig.covered, requestComponentValue(req), sig.rawInner);
+	} catch (err) {
+		if (err instanceof ComponentUnavailable) return refuse(SIGNATURE);
+		throw err;
+	}
+	if (!(await ed25519Verify(pub, sig.signature, new TextEncoder().encode(base)))) return refuse(SIGNATURE);
+	return { ok: true, value: { keyid: sig.keyid, directory: directory.value } };
+}
 
-	const expectedDigest = await contentDigest(fields.body);
-	if (fields.digestHeader.trim() !== expectedDigest) return false;
-	if (!sigBytes) return false;
-
-	const pub = resolve.resolve(parsed.keyid);
-	if (!pub || pub.length !== 32) return false;
-
-	const base = buildRequestSignatureBase(
-		{
-			method: fields.method,
-			url: fields.url,
-			digestHeader: fields.digestHeader,
-			authorization: fields.authorization,
-			signatureAgent: fields.signatureAgent,
-		},
-		parsed.rawParams,
-		chainLink,
-	);
-	return ed25519Verify(pub, sigBytes, utf8Bytes(base));
+/** rejected maps a refusal onto the public verdict: reason "signature", plus the
+ * Accept-Signature value when the refusal earns one. */
+function rejected(refusal: Refusal): VerifyVerdict {
+	const accept = acceptSignatureFor(refusal);
+	return { valid: false, reason: "signature", ...(accept !== undefined ? { acceptSignature: accept } : {}) };
 }
 
 /**
- * Verify an inbound single-signature FORA request; return a reason-tagged verdict.
+ * Verify an inbound FORA request's first signature; return a reason-tagged verdict.
  *
- * Mirrors the Go connectserver single-sig verify order: required covered-set →
- * created/expires window → content-digest → key resolution → Ed25519 check over
- * the reconstructed base → two-phase replay. Every authenticity/freshness/key/
- * covered-set failure collapses to "signature" (the Go default branch); a replayed
- * nonce is "replay". Keys resolve ONLY through `resolve`; replay state lives ONLY
- * in `replayStore` when supplied; time is read ONLY through `now`.
+ * Mirrors the Go connectserver verify order: the profile and covered-set checks → the
+ * created/expires window → content-digest → key resolution in the signature's own
+ * directory → Ed25519 over the rebuilt base → two-phase replay. Every
+ * authenticity/freshness/key/covered-set/form failure collapses to "signature" (the Go
+ * default branch); a replayed signature is "replay". Keys resolve ONLY through
+ * `resolve`; replay state lives ONLY in `replayStore` when supplied; time is read ONLY
+ * through `now`.
  */
 export async function verifyRequestServer(
 	input: VerifyRequestServerInput,
 ): Promise<VerifyVerdict> {
-	// Every read goes through the case-insensitive, duplicate-joining fold — see
-	// readHeader for why both properties are load-bearing. These two fail closed on
-	// their own: an absent one folds to "" and the parse then rejects, landing on
-	// the same reason the oracle does.
-	const signatureInput = readHeader(input.headers, "signature-input") ?? "";
-	const signatureHeader = readHeader(input.headers, "signature") ?? "";
-
-	// A covered header the request does not CARRY cannot be reconstructed, and "" is a
-	// value the signer may legitimately have bound — so absent is refused rather than
-	// defaulted. Derived from the covered set; see requestVerifyFields.
-	const fields = requestVerifyFields(input.method, input.url, input.body, input.headers);
-	if (fields === undefined) return reject(REASON_SIGNATURE);
-
-	const parsed = parseSignatureInput(signatureInput);
-	if (!parsed) return reject(REASON_SIGNATURE);
-
+	const parsed = parseSignatureHeaders(
+		readHeader(input.headers, "signature-input"),
+		readHeader(input.headers, "signature"),
+	);
+	if (!parsed.ok) return rejected(parsed.refusal);
+	const sig = parsed.value[0] as ParsedSignature;
+	const req = verifiableRequest(input.method, input.url, input.body, input.headers);
 	const nowSec = Math.floor(input.now());
-	const sigBytes = parseSignatureBytes(signatureHeader);
-
-	// The full per-signature core (covered set / window / digest / key / Ed25519),
-	// shared with the multisig path; replay stays here so the multisig loop never
-	// touches a ReplayStore.
-	const ok = await verifyParsedSignature(
-		fields,
-		parsed,
-		sigBytes,
+	const verified = await verifyParsedSignature(
+		req,
+		sig,
+		parsed.value.length,
 		input.resolve,
 		nowSec,
-		undefined,
 		input.maxSignatureAge,
 	);
-	if (!ok || parsed.keyid === null || !sigBytes) return reject(REASON_SIGNATURE);
+	if (!verified.ok) return rejected(verified.refusal);
 
 	if (input.replayStore) {
 		// Two-phase (read-only Seen, then SeenOrAdd) mirrors connectserver.verify so a
 		// part-way rejection never burns the nonce (single-sig: one signature).
-		const nonce = replayNonce(parsed.keyid, sigBytes);
-		if (await input.replayStore.seenNonce(nonce)) return reject(REASON_REPLAY);
-		if (await input.replayStore.seenOrAdd(nonce)) return reject(REASON_REPLAY);
+		const nonce = replayNonce(sig.keyid, sig.signature);
+		if (await input.replayStore.seenNonce(nonce)) return { valid: false, reason: "replay" };
+		if (await input.replayStore.seenOrAdd(nonce)) return { valid: false, reason: "replay" };
 	}
 
-	return accept;
+	return { valid: true, keyid: verified.value.keyid, signatureAgent: verified.value.directory };
 }
+
diff --git a/sdk/ts/core/wba.ts b/sdk/ts/core/wba.ts
new file mode 100644
index 00000000..b6dd0d66
--- /dev/null
+++ b/sdk/ts/core/wba.ts
@@ -0,0 +1,361 @@
+// The Web Bot Auth profile of RFC 9421 request signatures, as FORA pins it:
+// draft-ietf-webbotauth-httpsig-protocol-00 ("WG-00"). The authentication page's
+// "The Web Bot Auth Profile" is the normative statement; this module holds the pieces
+// of it the signer and the verifiers share. TS port of sdk/go/helpers/wba.go.
+//
+//   - Signature-Agent is a structured-field Dictionary. The member for a signature is
+//     <label>="https://<origin>", and the signature covers it as
+//     "signature-agent";key="<label>". Each signature's keyid is resolved in the key
+//     directory its own covered member names.
+//   - Every signature carries created, expires, keyid, alg="ed25519" and
+//     tag="web-bot-auth"; a FORA signer adds a fresh nonce.
+//   - A verifier also accepts the legacy sf-string form of Signature-Agent, covered as
+//     plain "signature-agent", on a request carrying one signature, a member key that
+//     differs from the label, no nonce, and a type=directory member parameter. It
+//     refuses the bare unquoted value the v1.0.8 SDKs sent.
+
+import { WBATag } from "../src/wire.ts";
+import {
+	parseDictionary,
+	parseItem,
+	type SfDictionary,
+	type SfMember,
+	serializeBareItem,
+} from "./sfv.ts";
+
+/** The longest window (expires − created), in seconds, a FORA signer gives a request
+ * signature. A signature is never a long-lived credential. */
+export const MAX_SIGNATURE_LIFETIME = 300;
+
+/** Why a signing call refused, or why a Signature-Agent was not accepted. */
+export type WebBotAuthErrorReason =
+	| "signature_agent_required"
+	| "signature_agent_not_origin"
+	| "signature_agent_form"
+	| "signature_label"
+	| "signature_lifetime"
+	| "invalid_nonce";
+
+/**
+ * WebBotAuthError is a refusal to sign what no Web Bot Auth signature can carry: no
+ * Signature-Agent origin, a value that is not an https origin, a request whose
+ * Signature-Agent cannot take another member, an unusable label, a window that is not
+ * positive or longer than MAX_SIGNATURE_LIFETIME, or a nonce outside the base64url
+ * alphabet. Nothing is signed when it is thrown. checkHttpsOrigin throws it too.
+ */
+export class WebBotAuthError extends Error {
+	readonly reason: WebBotAuthErrorReason;
+	constructor(reason: WebBotAuthErrorReason, message: string) {
+		super(message);
+		this.name = "WebBotAuthError";
+		this.reason = reason;
+	}
+}
+
+/**
+ * checkHttpsOrigin returns when `s` is the ASCII serialization of an https origin, the
+ * only value a Signature-Agent member carries in this profile: "https://" followed by a
+ * lowercase host (an IP literal allowed, an IPv6 one in brackets) and, only when it is
+ * not 443, ":port". Anything else throws WebBotAuthError ("signature_agent_not_origin"):
+ * another scheme, uppercase, a path (even "/"), a query, a fragment, credentials, or a
+ * non-ASCII host, which an origin carries punycoded. The same rule as Go
+ * helpers.CheckHTTPSOrigin and Python check_https_origin.
+ */
+export function checkHttpsOrigin(s: string): void {
+	const notOrigin = (why: string): WebBotAuthError =>
+		new WebBotAuthError("signature_agent_not_origin", `Signature-Agent ${JSON.stringify(s)} ${why}`);
+	if (!s.startsWith("https://")) throw notOrigin("does not start with https://");
+	const rest = s.slice("https://".length);
+	if (rest === "" || /[/?#@\\%]/.test(rest)) throw notOrigin("carries more than a host and port");
+	for (let i = 0; i < rest.length; i += 1) {
+		const c = rest.charCodeAt(i);
+		if (c >= 0x80 || c < 0x21 || (c >= 0x41 && c <= 0x5a)) throw notOrigin("is not a lowercase ASCII origin");
+	}
+	const split = splitHostPort(rest);
+	if (split === undefined || split.host === "") throw notOrigin("is not a host[:port]");
+	const { host, port } = split;
+	if (host.includes(":") ? !isIPv6(host) : !isOriginHostName(host)) throw notOrigin("is not a host[:port]");
+	if (port !== undefined) {
+		const n = Number(port);
+		if (!/^[0-9]+$/.test(port) || n === 0 || n > 65535 || port[0] === "0") {
+			throw notOrigin("carries an invalid port");
+		}
+		if (n === 443) throw notOrigin("spells out the default port");
+	}
+}
+
+// splitHostPort separates host from port the way a URL authority does: a bracketed IPv6
+// literal, or a host with at most one colon. port is "" for a trailing colon and
+// undefined when there is no colon at all.
+function splitHostPort(rest: string): { host: string; port: string | undefined } | undefined {
+	if (rest.startsWith("[")) {
+		const close = rest.indexOf("]");
+		if (close < 0) return undefined;
+		const after = rest.slice(close + 1);
+		if (after !== "" && !after.startsWith(":")) return undefined;
+		return { host: rest.slice(1, close), port: after === "" ? undefined : after.slice(1) };
+	}
+	const colon = rest.indexOf(":");
+	if (colon < 0) return { host: rest, port: undefined };
+	if (rest.indexOf(":", colon + 1) >= 0) return undefined;
+	return { host: rest.slice(0, colon), port: rest.slice(colon + 1) };
+}
+
+// isOriginHostName reports whether name is a lowercase registered name or IPv4 literal:
+// letters, digits, '-', '.' and '_' only, with no empty label.
+function isOriginHostName(name: string): boolean {
+	if (name === "" || name.startsWith(".") || name.includes("..")) return false;
+	return /^[a-z0-9._-]+$/.test(name);
+}
+
+// isIPv6 reports whether s is an IPv6 address in text form: eight 16-bit hex groups, or
+// fewer around a single "::", the last two optionally written as a dotted IPv4 address.
+function isIPv6(s: string): boolean {
+	const halves = s.split("::");
+	if (halves.length > 2) return false;
+	const groups = (part: string): string[] => (part === "" ? [] : part.split(":"));
+	const head = groups(halves[0] ?? "");
+	const tail = halves.length === 2 ? groups(halves[1] ?? "") : [];
+	const all = [...head, ...tail];
+	let count = 0;
+	for (let i = 0; i < all.length; i += 1) {
+		const g = all[i] as string;
+		if (i === all.length - 1 && g.includes(".")) {
+			if (!isIPv4(g)) return false;
+			count += 2;
+		} else if (/^[0-9a-f]{1,4}$/.test(g)) {
+			count += 1;
+		} else {
+			return false;
+		}
+	}
+	return halves.length === 2 ? count < 8 : count === 8;
+}
+
+function isIPv4(s: string): boolean {
+	const parts = s.split(".");
+	return parts.length === 4 && parts.every((p) => /^[0-9]{1,3}$/.test(p) && Number(p) <= 255);
+}
+
+/** checkNonce refuses a nonce with a character outside the base64url alphabet, the same
+ * rule as Go and Python: a quote would end the quoted parameter early, and the SDKs
+ * would write different bytes. */
+export function checkNonce(nonce: string): void {
+	if (!/^[A-Za-z0-9_-]*$/.test(nonce)) {
+		throw new WebBotAuthError("invalid_nonce", "nonce must use only base64url characters");
+	}
+}
+
+/** validLabel reports whether label is a structured-field key (RFC 8941 §3.1.2):
+ * lowercase letter or '*' first, then lowercase letters, digits, '_', '-', '.' or '*'. */
+export function validLabel(label: string): boolean {
+	return /^[a-z*][a-z0-9_.*-]*$/.test(label);
+}
+
+/** signatureAgentMember renders one Signature-Agent dictionary member for label. origin
+ * has passed checkHttpsOrigin, so it carries no character a String would escape. */
+export function signatureAgentMember(label: string, origin: string): string {
+	return `${label}="${origin}"`;
+}
+
+// --- covered components ----------------------------------------------------------------
+
+/** One RFC 9421 §2.1 parameter on a covered-component identifier: a String value, such
+ * as the key="sig1" on "signature-agent";key="sig1", or `true` for a Boolean flag, such
+ * as the req on "@authority";req. */
+export interface ComponentParam {
+	key: string;
+	value: string | true;
+}
+
+/** One entry of a signature's covered-component set: a name and its parameters. */
+export interface CoveredComponent {
+	name: string;
+	params: readonly ComponentParam[];
+}
+
+/** plain builds a covered component with no parameters. */
+export function plain(name: string): CoveredComponent {
+	return { name, params: [] };
+}
+
+/** keyed builds a covered component selecting the dictionary member `key` of `name`. */
+export function keyed(name: string, key: string): CoveredComponent {
+	return { name, params: [{ key: "key", value: key }] };
+}
+
+/** The value of the named String parameter on c, or undefined. */
+export function componentParam(c: CoveredComponent, key: string): string | undefined {
+	const p = c.params.find((x) => x.key === key);
+	return typeof p?.value === "string" ? p.value : undefined;
+}
+
+/** renderComponent serializes a covered-component identifier as it appears in the
+ * Signature-Input inner list and in a signature-base line: `"name";k="v";flag`. */
+export function renderComponent(c: CoveredComponent): string {
+	let out = serializeBareItem({ type: "string", value: c.name });
+	for (const p of c.params) {
+		out += p.value === true ? `;${p.key}` : `;${p.key}=${serializeBareItem({ type: "string", value: p.value })}`;
+	}
+	return out;
+}
+
+/** sameComponent reports whether a and b are one component: the same name, compared
+ * case-insensitively, and the same parameters in the same order. */
+export function sameComponent(a: CoveredComponent, b: CoveredComponent): boolean {
+	if (a.name.toLowerCase() !== b.name.toLowerCase() || a.params.length !== b.params.length) return false;
+	return a.params.every((p, i) => p.key === b.params[i]?.key && p.value === b.params[i]?.value);
+}
+
+/** coversComponent reports whether set contains c (see sameComponent). */
+export function coversComponent(set: readonly CoveredComponent[], c: CoveredComponent): boolean {
+	return set.some((s) => sameComponent(s, c));
+}
+
+/** The components a FORA RPC signature must cover beyond its own Signature-Agent member,
+ * which is checked on its own, and beyond x-entitlement-token, required only when the
+ * request carries one. */
+export const REQUIRED_RPC_COMPONENTS = ["@method", "@target-uri", "content-digest", "authorization"] as const;
+
+/** The entitlement-token header in covered-component (lowercase) form. When a request
+ * carries it, the signature must cover it. */
+export const ENTITLEMENT_COVERED = "x-entitlement-token";
+
+const SIGNATURE_AGENT = "signature-agent";
+
+/** acceptSignature renders the Accept-Signature value a FORA verifier answers a refused
+ * RPC signature with: the components a FORA RPC signature must cover, the dictionary
+ * form of Signature-Agent, and the created, expires and tag parameters (RFC 9421 §5.1,
+ * WG-00 §5.3). `entitlement` adds x-entitlement-token, for a request carrying that
+ * header. */
+export function acceptSignature(entitlement: boolean): string {
+	const covered = [...REQUIRED_RPC_COMPONENTS.map(plain), keyed(SIGNATURE_AGENT, "sig1")];
+	if (entitlement) covered.push(plain(ENTITLEMENT_COVERED));
+	return `sig1=(${covered.map(renderComponent).join(" ")});created;expires;tag="${WBATag}"`;
+}
+
+// --- why a signature was refused -------------------------------------------------------
+
+/**
+ * Refusal is the internal verdict of one profile check, before it collapses to the
+ * public reject reason. It carries what the Accept-Signature decision needs: a missing
+ * component, a refused tag or Signature-Agent form, and a request with no signature are
+ * answered with Accept-Signature; everything else is not.
+ */
+export type Refusal =
+	| { kind: "unsigned" }
+	| { kind: "malformed" }
+	| { kind: "missing_component"; component: string }
+	| { kind: "tag" }
+	| { kind: "form" }
+	| { kind: "not_origin" }
+	| { kind: "signature" };
+
+/** acceptSignatureFor returns the Accept-Signature value a verifier answers `r` with, or
+ * undefined when the refusal is of a well-formed signature that failed for another
+ * reason: a bad signature, an unknown key, a stale window, a malformed header. */
+export function acceptSignatureFor(r: Refusal): string | undefined {
+	switch (r.kind) {
+		case "missing_component":
+			return acceptSignature(r.component === ENTITLEMENT_COVERED);
+		case "unsigned":
+		case "tag":
+		case "form":
+			return acceptSignature(false);
+		default:
+			return undefined;
+	}
+}
+
+// --- which directory a signature names -------------------------------------------------
+
+/** The parts of one parsed signature the directory rule reads. */
+export interface SignatureNaming {
+	label: string;
+	covered: readonly CoveredComponent[];
+}
+
+/** The outcome of a profile check: a value, or the refusal. */
+export type Checked<T> = { ok: true; value: T } | { ok: false; refusal: Refusal };
+
+const refuse = (refusal: Refusal): { ok: false; refusal: Refusal } => ({ ok: false, refusal });
+
+/**
+ * signatureDirectory returns the key-directory origin a signature names: the
+ * Signature-Agent member it covers. A signature that covers an earlier one also covers
+ * that signature's member (WG-00 §5.2.2), so the member followed is the one keyed to the
+ * signature's own label (WG-00 §5.2.1); a signature covering exactly one member follows
+ * that one, whatever its key, because the profile accepts a member key that differs from
+ * the label. A signature covering several members, none keyed to its label, names no
+ * directory. `agentHeader` is the request's Signature-Agent, every field line joined, or
+ * undefined when absent; `sigCount` is the number of signatures on the request, because
+ * the legacy String form, covered as plain "signature-agent", is accepted only when there
+ * is one.
+ */
+export function signatureDirectory(
+	agentHeader: string | undefined,
+	sig: SignatureNaming,
+	sigCount: number,
+): Checked<string> {
+	const keys: string[] = [];
+	let plainCount = 0;
+	for (const c of sig.covered) {
+		if (c.name.toLowerCase() !== SIGNATURE_AGENT) continue;
+		const key = componentParam(c, "key");
+		if (key !== undefined && key !== "" && c.params.length === 1) keys.push(key);
+		else if (c.params.length === 0) plainCount += 1;
+		else return refuse({ kind: "form" });
+	}
+	if (plainCount === 0 && keys.length === 0) return refuse({ kind: "missing_component", component: SIGNATURE_AGENT });
+	if (plainCount > 1 || (plainCount === 1 && keys.length > 0)) return refuse({ kind: "form" });
+	if (plainCount === 1) return sigCount > 1 ? refuse({ kind: "form" }) : legacyDirectory(agentHeader);
+	let key = keys[0] as string;
+	if (keys.length > 1) {
+		if (!keys.includes(sig.label)) return refuse({ kind: "form" });
+		key = sig.label;
+	}
+	if (agentHeader === undefined) return refuse({ kind: "missing_component", component: SIGNATURE_AGENT });
+	const dict = signatureAgentDictionary(agentHeader);
+	if (dict === undefined) return refuse({ kind: "form" });
+	const member = dict.get(key);
+	if (member === undefined) return refuse({ kind: "form" });
+	return directoryFromMember(member);
+}
+
+/** signatureAgentDictionary parses a Signature-Agent value as a Dictionary. An empty
+ * value is an empty dictionary; a value that is not a Dictionary is undefined. */
+export function signatureAgentDictionary(value: string): SfDictionary | undefined {
+	return value.trim() === "" ? new Map() : parseDictionary(value);
+}
+
+// directoryFromMember reads a Signature-Agent member as the origin of a key directory.
+// The member must be a String; a type parameter, when present, must be directory, since
+// WG-00 §5.2.1 has a verifier ignore a member of any other type. The value must be an
+// https origin.
+function directoryFromMember(m: SfMember): Checked<string> {
+	if (m.kind !== "item" || m.value.type !== "string") return refuse({ kind: "form" });
+	const type = m.params.get("type");
+	if (type !== undefined && !((type.type === "string" || type.type === "token") && type.value === "directory")) {
+		return refuse({ kind: "form" });
+	}
+	return originChecked(m.value.value);
+}
+
+// legacyDirectory reads a Signature-Agent carried in the legacy form, a single String
+// covered as plain "signature-agent". The bare unquoted value the v1.0.8 SDKs sent
+// parses as a Token, not a String, and is refused.
+function legacyDirectory(agentHeader: string | undefined): Checked<string> {
+	if (agentHeader === undefined) return refuse({ kind: "missing_component", component: SIGNATURE_AGENT });
+	const item = parseItem(agentHeader);
+	if (item === undefined || item.value.type !== "string") return refuse({ kind: "form" });
+	return originChecked(item.value.value);
+}
+
+function originChecked(origin: string): Checked<string> {
+	try {
+		checkHttpsOrigin(origin);
+	} catch {
+		return refuse({ kind: "not_origin" });
+	}
+	return { ok: true, value: origin };
+}
diff --git a/sdk/ts/core/window.ts b/sdk/ts/core/window.ts
index 14e45d7c..3c89ea5c 100644
--- a/sdk/ts/core/window.ts
+++ b/sdk/ts/core/window.ts
@@ -29,9 +29,10 @@ export function clockWindow(now: () => number, ttlSec: number): Window {
  * lands in the same wall-clock second, bumps expires by one second per call so
  * no two back-to-back signatures share an (keyid, expires) pair. The signing
  * transport no longer needs this for uniqueness: every signature carries a fresh
- * nonce, so clockWindow is enough. During a burst expires − created grows past
- * ttlSec, which a verifier with maxSignatureAge = ttlSec refuses. created tracks
- * floor(now()), so the pair stays clock-consistent.
+ * nonce, so clockWindow is enough. created moves with expires, so the window is
+ * always exactly ttlSec and never exceeds the Web Bot Auth limit when ttlSec is at
+ * most MAX_SIGNATURE_LIFETIME; during a burst created leads the clock by the
+ * burst's length in seconds, which a verifier's future-skew allowance absorbs.
  *
  * ONE INSTANCE PER CLIENT, never one per call. The running maximum is the whole
  * mechanism: a window created per request starts from zero, cannot see the
@@ -41,10 +42,9 @@ export function clockWindow(now: () => number, ttlSec: number): Window {
 export function monotonicWindow(now: () => number, ttlSec: number): Window {
 	let lastExpires = 0;
 	return () => {
-		const created = Math.floor(now());
-		const floor = created + ttlSec;
+		const floor = Math.floor(now()) + ttlSec;
 		const next = lastExpires >= floor ? lastExpires + 1 : floor;
 		lastExpires = next;
-		return [created, next];
+		return [next - ttlSec, next];
 	};
 }
diff --git a/sdk/ts/hono/middleware.ts b/sdk/ts/hono/middleware.ts
index 2cc4f1b0..d782611a 100644
--- a/sdk/ts/hono/middleware.ts
+++ b/sdk/ts/hono/middleware.ts
@@ -2,8 +2,11 @@
 // adapter for Edge (src/edge/src/app.ts, a SERVER/VERIFIER). It is a thin Hono
 // middleware that verifies an inbound RFC 9421 GET proof-of-possession at the HTTP
 // seam (where the exact request exists) via the L1 verifyAgentBinding, and
-// fail-closes: an unsigned/forged request never reaches the guarded handler and
-// the binding sets a 403 deny response.
+// fail-closes: an unsigned/forged request never reaches the guarded handler. A
+// refusal the agent can fix by signing differently — no signature, a missing or wrong
+// tag, the wrong covered set, a Signature-Agent in a refused form — is answered 401
+// with the Accept-Signature field naming what the proof must carry (WG-00 §5.3);
+// every other refusal is answered 403.
 //
 // This binding depends one-directionally on core + L1; core NEVER imports Hono.
 // Hono is a PEER dependency of this binding, not of the core. The middleware is
@@ -16,6 +19,7 @@ import type { Ed25519Verify } from "../core/verifier.ts";
 import { decodeBase64Url } from "../src/base64url.ts";
 import { AGENT_KEY_HEADER, verifyAgentBinding } from "../src/pop.ts";
 import { thumbprint } from "../src/thumbprint.ts";
+import { AcceptSignatureHeader } from "../src/wire.ts";
 
 const ED25519_PUBLIC_KEY_BYTES = 32;
 
@@ -34,7 +38,7 @@ export type ForaVerifyNext = () => Promise<void> | void;
 
 /** Options for the server-verify binding. The clock + verify primitive are
  * injected exactly as the core Verifier's are; the binding owns no state. The
- * GET-PoP path is self-verifying via the presented key, so no key resolver is
+ * delivery-proof path is self-verifying via the presented key, so no key resolver is
  * accepted — a resolver here would be dead weight the middleware never reads. */
 export interface ForaVerifyOptions {
 	now?: () => number;
@@ -43,9 +47,10 @@ export interface ForaVerifyOptions {
 
 /**
  * foraVerify builds the opt-in Hono server-verify middleware. On an inbound
- * request it verifies the RFC 9421 GET PoP through the L1 verifyAgentBinding; on
- * success it calls next() (the guarded handler runs); on failure it sets a 403 deny
- * response and does NOT call next() (fail-closed).
+ * request it verifies the Web Bot Auth delivery proof through the L1
+ * verifyAgentBinding; on success it calls next() (the guarded handler runs); on failure
+ * it sets a deny response and does NOT call next() (fail-closed). The deny is a 401
+ * carrying Accept-Signature when the verdict carries one, a 403 otherwise.
  *
  * SCOPE LIMIT — presenter self-consistency only: the binding derives agentId
  * from the PRESENTED key (thumbprint), so the 3-way check collapses to "the
@@ -84,7 +89,7 @@ export function foraVerify(
 		});
 
 		if (!result.ok) {
-			ctx.res = deny();
+			ctx.res = result.acceptSignature !== undefined ? challenge(result.acceptSignature) : deny();
 			return;
 		}
 		await next();
@@ -94,3 +99,12 @@ export function foraVerify(
 function deny(): Response {
 	return new Response("forbidden", { status: 403 });
 }
+
+// challenge answers a refusal the agent can fix by signing again: 401 with the
+// components and form the proof must carry.
+function challenge(acceptSignature: string): Response {
+	return new Response("unauthorized", {
+		status: 401,
+		headers: { [AcceptSignatureHeader]: acceptSignature },
+	});
+}
diff --git a/sdk/ts/resolvers/documents.ts b/sdk/ts/resolvers/documents.ts
index 1fb02b4c..5474c694 100644
--- a/sdk/ts/resolvers/documents.ts
+++ b/sdk/ts/resolvers/documents.ts
@@ -16,9 +16,14 @@
 //   resolves to undefined. A conformance harness reads through these.
 // - The resolvers (the endpoint resolver, the registration-requirements reader, the WBA
 //   key resolver and the offer-directory fetch) read the same documents to route and to
-//   verify. They call the lenient functions below, which skip the media type and the
-//   strict check: a reader that must accept a newer protocol version cannot refuse a field
-//   it does not know.
+//   verify. They call the lenient functions below, which skip the strict check: a reader
+//   that must accept a newer protocol version cannot refuse a field it does not know.
+//
+// A key directory is read under the Web Bot Auth profile by both faces: it is fetched
+// with no redirect, must be served as application/http-message-signatures-directory+json,
+// and its response must be signed by the keys it lists (verifyDirectoryResponse). A key
+// the response carries no valid signature by is never handed out. A revocation list and
+// the manifest may follow up to five redirects.
 //
 // Every fetch goes through guardedFetchFromEnv by default, the transport the resolvers use
 // for an address another party chose: the dial-time SSRF guard refuses loopback, private
@@ -35,12 +40,16 @@ import {
 	WBAFileSchema,
 	WellKnownManifestSchema,
 } from "../../../gen/ts/wire/schemas.ts";
+import { verifyDirectoryResponse } from "../core/directory-response.ts";
+import { decodeBase64UrlStrict } from "../src/base64url.ts";
 import { invalidHost } from "../src/host-ref.ts";
 import { isBareHost } from "../src/hosts.ts";
+import { thumbprint } from "../src/thumbprint.ts";
 import { StrictViolation, checkStrict } from "../src/strict.ts";
 import { manifestVersionRefusal, WellKnownPath } from "../src/wire.ts";
 import {
 	DigestMismatch,
+	DirectoryResponseUnsigned,
 	DirectoryUnavailable,
 	ManifestVersionRefused,
 	MediaTypeRefused,
@@ -49,8 +58,9 @@ import { type FetchLike, type Fetched, fetchDocument, guardedFetchFromEnv } from
 
 /** The media type /.well-known/fora.json is served under. */
 export const MANIFEST_MEDIA_TYPE = "application/json";
-/** The media type the WBA key directory is served under: a JWK Set (RFC 7517 §8.5.2). */
-export const WBA_DIRECTORY_MEDIA_TYPE = "application/jwk-set+json";
+/** The media type a Web Bot Auth key directory is served under (WG-00 §5.5). Any other
+ * label, the JWK Set type application/jwk-set+json included, is refused. */
+export const WBA_DIRECTORY_MEDIA_TYPE = "application/http-message-signatures-directory+json";
 
 /** The single public well-known path a WBA identity directory is served at (Web
  * Bot Auth; the identity half of the identity/commercial split — the commercial
@@ -136,11 +146,69 @@ export async function fetchManifest(
 	}
 }
 
-/** GET `url` and decode the body as a WBAFile, leniently. The one read of a directory
- * the WBA key resolver and the offer-directory fetch share, so the two never drift.
- * Every failure throws DirectoryUnavailable. */
-export async function fetchWBAFile(fetchFn: FetchLike, url: string): Promise<WBAFile> {
-	return lenient(await fetchDocument(fetchFn, url), WBAFileSchema, "wba directory decode");
+/** GET `url`, with no redirect, and decode the body as a WBAFile, leniently: an unknown
+ * member is a newer minor version, not a reason to stop verifying. The media type must be
+ * WBA_DIRECTORY_MEDIA_TYPE. The file returned lists only the keys that signed the
+ * response (signedDirectoryKeys), so no caller can hand out a key the directory did not
+ * sign for. `now` is the epoch-ms clock the response signatures' windows are judged
+ * against. The one read of a directory the WBA key resolver and the offer-directory
+ * fetch share, so the two never drift. Every failure throws DirectoryUnavailable. */
+export async function fetchWBAFile(fetchFn: FetchLike, url: string, now: number = Date.now()): Promise<WBAFile> {
+	const fetched = await fetchDocument(fetchFn, url, { noRedirect: true });
+	if (fetched.mediaType !== WBA_DIRECTORY_MEDIA_TYPE) {
+		throw new DirectoryUnavailable(`wba directory ${url}`, {
+			cause: new MediaTypeRefused(`${url} was served with ${JSON.stringify(fetched.mediaType ?? "")}`),
+		});
+	}
+	const file = lenient(fetched, WBAFileSchema, "wba directory decode");
+	try {
+		return await signedDirectoryKeys(fetched, file, now);
+	} catch (err) {
+		throw new DirectoryUnavailable(`wba directory signature ${url}`, { cause: err });
+	}
+}
+
+/**
+ * signedDirectoryKeys returns a copy of `file` listing only the keys whose response
+ * signature verifies, checked against the authority `fetched` was read from. A key that
+ * is not an Ed25519 key cannot sign and is dropped with the rest. It throws for a
+ * response listing keys that cannot be checked at all: a Content-Digest that does not
+ * match the body, or no response signature. A directory listing no key has nothing to
+ * sign and is returned as it is.
+ */
+export async function signedDirectoryKeys(fetched: Fetched, file: WBAFile, now: number): Promise<WBAFile> {
+	const keys = file.keys ?? [];
+	if (keys.length === 0) return file;
+	const pubs = keys.map(wbaPublicKey);
+	const verified = await verifyDirectoryResponse(
+		requestAuthority(fetched.url),
+		{ get: (name) => fetched.header?.(name) ?? null },
+		fetched.body as Uint8Array<ArrayBuffer>,
+		pubs.filter((p): p is Uint8Array<ArrayBuffer> => p !== undefined),
+		Math.floor(now / 1000),
+	);
+	const signed: typeof keys = [];
+	for (const [i, key] of keys.entries()) {
+		const pub = pubs[i];
+		if (pub !== undefined && verified.has(await thumbprint(pub))) signed.push(key);
+	}
+	return { ...file, keys: signed };
+}
+
+// wbaPublicKey decodes a listed key's Ed25519 public key, or undefined when the key is
+// not one. kty/crv are matched case-insensitively, the SDK convention the WBA resolver
+// applies when it selects a key.
+function wbaPublicKey(key: NonNullable<WBAFile["keys"]>[number]): Uint8Array<ArrayBuffer> | undefined {
+	if (key.kty.toUpperCase() !== "OKP" || key.crv.toLowerCase() !== "ed25519") return undefined;
+	const raw = decodeBase64UrlStrict(key.x);
+	return raw !== undefined && raw.length === 32 ? raw : undefined;
+}
+
+/** The RFC 9421 @authority of a fetch of `url`: the host, lowercased, with the port
+ * only when it is not the scheme's default (the WHATWG URL host already omits it), and
+ * an IPv6 literal in brackets. */
+export function requestAuthority(url: string): string {
+	return new URL(url).host.toLowerCase();
 }
 
 /** GET `url` and decode the body as a KeyRevocationList, leniently. Every failure throws
@@ -283,11 +351,14 @@ export async function readManifest(
  * directory's full URL, or a bare host whose directory is read from
  * scheme://host/.well-known/http-message-signatures-directory.
  *
- * The media type must be application/jwk-set+json, and the body must pass the strict
- * WBAFile schema and the cross-field rules. Key validity windows and revocation are not
+ * The directory is fetched with no redirect: a redirect fails the fetch. The media type
+ * must be application/http-message-signatures-directory+json, the body must pass the
+ * strict WBAFile schema and the cross-field rules, and the response must carry a valid
+ * response signature by every key it lists. Key validity windows and revocation are not
  * evaluated: that is the WBA key resolver's job, and a directory listing an expired key
  * is still a well-formed directory. Throws an Error for a value that is neither a URL nor
- * a bare host; DirectoryUnavailable; MediaTypeRefused; and StrictViolation.
+ * a bare host; DirectoryUnavailable; MediaTypeRefused; StrictViolation; and
+ * DirectoryResponseUnsigned.
  */
 export async function readWBADirectory(
 	urlOrDomain: string,
@@ -298,7 +369,21 @@ export async function readWBADirectory(
 		if (!isBareHost(urlOrDomain)) throw invalidHost(urlOrDomain, "neither a URL nor a bare host");
 		url = wbaDirectoryURL(opts.scheme ?? "", urlOrDomain);
 	}
-	return accept(WBA_DIRECTORY, await fetchDocument(transport(opts), url));
+	const fetched = await fetchDocument(transport(opts), url, { noRedirect: true });
+	const doc = accept(WBA_DIRECTORY, fetched);
+	let signed: WBAFile;
+	try {
+		signed = await signedDirectoryKeys(fetched, doc.message, Date.now());
+	} catch (err) {
+		throw new DirectoryResponseUnsigned(`${url}: ${(err as Error).message}`, { cause: err });
+	}
+	const listed = doc.message.keys?.length ?? 0;
+	if ((signed.keys?.length ?? 0) !== listed) {
+		throw new DirectoryResponseUnsigned(
+			`${signed.keys?.length ?? 0} of ${listed} listed keys signed the response at ${url}`,
+		);
+	}
+	return doc;
 }
 
 /**
diff --git a/sdk/ts/resolvers/errors.ts b/sdk/ts/resolvers/errors.ts
index 5d9f012c..f5735e51 100644
--- a/sdk/ts/resolvers/errors.ts
+++ b/sdk/ts/resolvers/errors.ts
@@ -162,10 +162,11 @@ export class ManifestVersionRefused extends ResolverError {
 }
 
 /** A document was served under a media type other than the one the protocol names
- * for it: application/json for /.well-known/fora.json and application/jwk-set+json
- * for the WBA directory. A VERDICT on what the party publishes, never worth
- * retrying. Only the document readers throw it; the resolvers that read the same
- * documents for routing and key resolution do not check the label. Peer of Go
+ * for it: application/json for /.well-known/fora.json and
+ * application/http-message-signatures-directory+json for the WBA directory. A VERDICT
+ * on what the party publishes, never worth retrying. The document readers throw it;
+ * the WBA key resolver and the offer-directory fetch check the directory's label too and
+ * report a wrong one as DirectoryUnavailable, carrying this as its cause. Peer of Go
  * `ErrMediaTypeRefused` / Python `MediaTypeRefusedError`. */
 export class MediaTypeRefused extends ResolverError {
   constructor(message: string, options?: { cause?: unknown }) {
@@ -185,3 +186,15 @@ export class DigestMismatch extends ResolverError {
     this.name = "DigestMismatch";
   }
 }
+
+/** A key directory whose response is not signed by every key it lists: no response
+ * signature at all, a Content-Digest that does not match the body, or a listed key with
+ * no valid signature of its own. Thrown by readWBADirectory, which checks what a party
+ * publishes; the WBA key resolver instead hands out only the keys that did sign. A
+ * VERDICT, never retried. Peer of Go `ErrDirectoryResponseUnsigned`. */
+export class DirectoryResponseUnsigned extends ResolverError {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options);
+    this.name = "DirectoryResponseUnsigned";
+  }
+}
diff --git a/sdk/ts/resolvers/http.ts b/sdk/ts/resolvers/http.ts
index 211ee0e2..0922f8a1 100644
--- a/sdk/ts/resolvers/http.ts
+++ b/sdk/ts/resolvers/http.ts
@@ -33,10 +33,24 @@ export interface FetchResponse {
 	text(): Promise<string>;
 	headers?: { get(name: string): string | null };
 	arrayBuffer?(): Promise<ArrayBuffer>;
+	/** Whether the response is the end of a followed redirect, as a WHATWG Response
+	 * reports it. A key-directory read refuses one. */
+	redirected?: boolean;
 }
 
-/** An injected HTTP GET. Defaults to the SSRF-guarded transport (guardedFetch). */
-export type FetchLike = (url: string) => Promise<FetchResponse>;
+/** What a read asks of the transport beyond the URL: a WHATWG RequestInit subset.
+ * `redirect: "manual"` asks it not to follow a redirect and to answer the 3xx itself;
+ * a key-directory read passes it, because a directory is never fetched through a
+ * redirect. The shipped transports honour it, and the global fetch reads the same
+ * member. */
+export interface FetchInit {
+	redirect?: "follow" | "manual";
+}
+
+/** An injected HTTP GET. Defaults to the SSRF-guarded transport (guardedFetch). A
+ * FetchLike that ignores `init` still cannot hand a key directory over a redirect: the
+ * read refuses a 3xx and a response marked `redirected`. */
+export type FetchLike = (url: string, init?: FetchInit) => Promise<FetchResponse>;
 
 /** Bounds the guarded default transport's GET so a slow origin cannot pin a
  * Resolve call or the poller (Go: defaultWBAHTTPTimeout). */
@@ -115,7 +129,8 @@ export function ssrfGuard(): buildConnector.connector {
  * composed redirect interceptor bounds the chain to the shared MAX_REDIRECTS cap so
  * undici does not inherit its ~20-hop default. Beyond the cap the interceptor stops
  * following and surfaces the 3xx as an ordinary non-2xx (fail-closed at fetchStrict). */
-const guardedAgent = new Agent({ connect: ssrfGuard() }).compose(
+const guardedBase = new Agent({ connect: ssrfGuard() });
+const guardedAgent = guardedBase.compose(
 	interceptors.redirect({ maxRedirections: MAX_REDIRECTS }),
 );
 
@@ -214,8 +229,8 @@ async function requestBounded(
  * deny-by-default, every dial (initial + each redirect hop) is address-checked and
  * pinned, the redirect chain is bounded to MAX_REDIRECTS, and undici owns
  * status/redirect/1xx so a non-2xx is an ordinary response, never a crash. */
-export const guardedFetch: FetchLike = (url) =>
-	requestBounded(url, guardedAgent, allowedScheme);
+export const guardedFetch: FetchLike = (url, init) =>
+	requestBounded(url, init?.redirect === "manual" ? guardedBase : guardedAgent, allowedScheme);
 
 // ---------------------------------------------------------------------------
 // The ONE env-driven, best-effort guarded fetch factory.
@@ -297,7 +312,10 @@ export function guardedFetchFromEnv(): FetchLike {
 	const dispatcher = base.compose(
 		interceptors.redirect({ maxRedirections: MAX_REDIRECTS }),
 	);
-	return (url) => requestBounded(url, dispatcher, schemeGuardAllows);
+	// A read that refuses redirects dials the base agent, which follows none: the 3xx
+	// comes back as the answer and the read fails on it.
+	return (url, init) =>
+		requestBounded(url, init?.redirect === "manual" ? base : dispatcher, schemeGuardAllows);
 }
 
 /** Default transport for a resolver whose URL is a FIXED, operator-chosen address
@@ -315,8 +333,8 @@ export function guardedFetchFromEnv(): FetchLike {
  * here, which is a known gap being closed separately; it is not the rule. Do not
  * reach for this transport for a new resolver without first asking where its URL
  * comes from. */
-export const defaultFetch: FetchLike = async (url) => {
-	const r = await fetch(url);
+export const defaultFetch: FetchLike = async (url, init) => {
+	const r = await fetch(url, init?.redirect === "manual" ? { redirect: "manual" } : {});
 	// Bound the body read even on the unguarded path: a misconfigured / hostile
 	// well-known origin cannot force an unbounded read into the JSON decoder. The
 	// WHATWG Response body is async-iterable in Node, so it reuses readBounded (the
@@ -327,13 +345,17 @@ export const defaultFetch: FetchLike = async (url) => {
 	return boundedResponse(r.status, body, (name) => r.headers.get(name));
 };
 
-/** One document as it was served: its bytes and the media type it was labelled with. */
+/** One document as it was served: its bytes, the media type it was labelled with, and
+ * its response headers. */
 export interface Fetched {
 	url: string;
 	body: Uint8Array;
 	/** The Content-Type essence (type/subtype), lowercased, parameters stripped;
 	 * undefined when the response carried none. */
 	mediaType: string | undefined;
+	/** A response header's value, or null when absent. A key directory's response
+	 * signatures are read through it. */
+	header?: (name: string) => string | null;
 }
 
 /** The type/subtype of a Content-Type value, lowercased, parameters dropped. */
@@ -343,19 +365,29 @@ export function mediaTypeEssence(header: string | null | undefined): string | un
 	return essence === "" ? undefined : essence;
 }
 
-/** GET `url` and return the body and its media type. A transport failure or a
- * non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
+/** GET `url` and return the body, its media type and its headers. A transport failure
+ * or a non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
  * composite relies on to distinguish an outage from an unknown key. A blocked SSRF
  * target and a body past the cap are transport failures and surface the same way
- * (never a valid empty doc). The one GET every document read shares. */
+ * (never a valid empty doc). The one GET every document read shares.
+ *
+ * `noRedirect` is set for a key directory, which is never fetched through a redirect:
+ * its address is the origin its signer committed to, and a redirect would hand key
+ * lookup to another one. The transport is asked not to follow, and a 3xx or a response
+ * marked redirected fails the read. A revocation list and the manifest follow the
+ * transport's bounded redirect chain. */
 export async function fetchDocument(
 	fetchFn: FetchLike,
 	url: string,
+	opts: { noRedirect?: boolean } = {},
 ): Promise<Fetched> {
 	let resp: FetchResponse;
 	let body: Uint8Array;
 	try {
-		resp = await fetchFn(url);
+		resp = opts.noRedirect === true ? await fetchFn(url, { redirect: "manual" }) : await fetchFn(url);
+		if (opts.noRedirect === true && (resp.redirected === true || (resp.status >= 300 && resp.status < 400))) {
+			throw new DirectoryUnavailable(`a key directory is never fetched through a redirect: ${url}`);
+		}
 		if (resp.status !== 200) {
 			throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
 		}
@@ -367,7 +399,13 @@ export async function fetchDocument(
 		if (err instanceof DirectoryUnavailable) throw err;
 		throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
 	}
-	return { url, body, mediaType: mediaTypeEssence(resp.headers?.get("content-type")) };
+	const headers = resp.headers;
+	return {
+		url,
+		body,
+		mediaType: mediaTypeEssence(headers?.get("content-type")),
+		header: (name) => headers?.get(name) ?? null,
+	};
 }
 
 /** GET `url` and return the body text: fetchDocument without the media type, for a
diff --git a/sdk/ts/resolvers/index.ts b/sdk/ts/resolvers/index.ts
index 2dc37464..6296412e 100644
--- a/sdk/ts/resolvers/index.ts
+++ b/sdk/ts/resolvers/index.ts
@@ -23,6 +23,7 @@ export {
 } from "./documents.ts";
 export {
 	DigestMismatch,
+	DirectoryResponseUnsigned,
 	DirectoryUnavailable,
 	EndpointRefused,
 	ExchangeNotPermitted,
@@ -37,7 +38,7 @@ export {
 	RevocationUnevaluated,
 	UnknownKey,
 } from "./errors.ts";
-export type { FetchLike, FetchResponse } from "./http.ts";
+export type { FetchInit, FetchLike, FetchResponse } from "./http.ts";
 export { guardedFetchFromEnv, SsrfBlockedError, ssrfGuard } from "./http.ts";
 export {
 	type CachedOfferKeyResolver,
diff --git a/sdk/ts/resolvers/offer-key-cache.ts b/sdk/ts/resolvers/offer-key-cache.ts
index 22d073ee..facd0612 100644
--- a/sdk/ts/resolvers/offer-key-cache.ts
+++ b/sdk/ts/resolvers/offer-key-cache.ts
@@ -224,8 +224,9 @@ function joinDirectoryHost(domain: string, port: string): string {
 /**
  * createWBAOfferDirectoryFetch returns the default {@link OfferDirectoryFetch}: it
  * GETs {scheme}://{domain}[:{port}]{WBA_DIRECTORY_PATH} (built by the shared
- * wbaDirectoryURL) and parses the body as a WBAFile, returning `undefined` on ANY
- * transport/status/decode failure so
+ * wbaDirectoryURL) with no redirect, checks its media type and response signatures, and
+ * parses the body as a WBAFile listing only the keys that signed the response,
+ * returning `undefined` on ANY transport/status/media-type/signature/decode failure so
  * the default fetcher itself upholds the undefined-not-throw seam contract.
  *
  * The default transport is SSRF-guarded (guardedFetchFromEnv): the exchange domain
diff --git a/sdk/ts/resolvers/wba.ts b/sdk/ts/resolvers/wba.ts
index 1ed41473..6803adae 100644
--- a/sdk/ts/resolvers/wba.ts
+++ b/sdk/ts/resolvers/wba.ts
@@ -1,9 +1,11 @@
 // The WBA identity-directory key resolver + revocation poller. Ports
 // sdk/go/helpers/wbakeyresolver.go 1:1: resolve a thumbprint (the RFC 9421 keyid,
 // NEVER a kid) against a WBA directory, enforcing the key's [not_before,
-// not_after) window and the host's revocation snapshot. The directory host that
-// Go threads through ctx (Signature-Agent) is passed EXPLICITLY as the second
-// resolve argument. The gen Zod schemas decode the WBA docs (thumbprint-keyed,
+// not_after) window and the host's revocation snapshot. The directory — the origin
+// the signature's own covered Signature-Agent member names, which Go threads through
+// ctx — is passed EXPLICITLY as the second resolve argument. A directory is fetched
+// with no redirect, must be served as WBA_DIRECTORY_MEDIA_TYPE, and only the keys that
+// signed its response are ever handed out. The gen Zod schemas decode the WBA docs (thumbprint-keyed,
 // need no kid); thumbprint reuses the byte-parity-pinned primitive.
 //
 // The monotonic revocation guard + far-future as_of clamp + revocation priming
@@ -42,6 +44,10 @@ type WBAJwk = NonNullable<WBAFile["keys"]>[number];
 /** Options for the WBA resolver. Zero values are safe defaults; tests inject the
  * clock (`now`), the poll timer (`after`), and the armed/cycle seams. */
 export interface WBAKeyResolverOptions {
+	/** The scheme directories are fetched over (empty → "https"). A Signature-Agent
+	 * member is always an https origin; tests inject "http" to fetch that origin's
+	 * directory from a plaintext test server, and a bare host reference is prefixed
+	 * with it. */
 	scheme?: string;
 	ttlMs?: number;
 	pollIntervalMs?: number;
@@ -231,7 +237,7 @@ class WBAResolverImpl implements WBAKeyResolver {
 	}
 
 	private fetchDirectory(base: string): Promise<WBAFile> {
-		return fetchWBAFile(this.fetchFn, base + WBA_DIRECTORY_PATH);
+		return fetchWBAFile(this.fetchFn, base + WBA_DIRECTORY_PATH, this.now());
 	}
 
 	private isRevoked(host: string, thumbprintKey: string): boolean {
@@ -315,8 +321,10 @@ function whenAborted(signal: AbortSignal): Promise<void> {
 	});
 }
 
-/** Normalize a Signature-Agent value (bare host, host:port, or full URL) into a
- * scheme://host base and its host key, or `undefined` when it names no host. */
+/** Normalize a directory reference (an https origin, bare host, host:port, or full
+ * URL) into a scheme://host base and its host key, or `undefined` when it names no
+ * host. An https origin is fetched over the resolver's scheme, so a test reaches a
+ * plaintext server through the same origin a signature names. */
 function directoryBase(
 	ref: string,
 	scheme: string,
@@ -329,7 +337,8 @@ function directoryBase(
 		return undefined;
 	}
 	if (url.host === "") return undefined;
-	return { base: `${url.protocol}//${url.host}`, host: url.host };
+	const protocol = url.protocol === "https:" && scheme !== "https" ? `${scheme}:` : url.protocol;
+	return { base: `${protocol}//${url.host}`, host: url.host };
 }
 
 /** Whether `candidate` is anchored to `anchor` — the same host and port, or a
diff --git a/sdk/ts/src/base64url.ts b/sdk/ts/src/base64url.ts
index c89de090..3d4ea9ac 100644
--- a/sdk/ts/src/base64url.ts
+++ b/sdk/ts/src/base64url.ts
@@ -52,3 +52,12 @@ export function encodeBase64Url(bytes: Uint8Array): string {
   for (let i = 0; i < bytes.length; i += 1) bin += String.fromCharCode(bytes[i] as number);
   return btoa(bin).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 }
+
+/** Encode bytes as standard (padded) base64 — the RFC 8941 byte-sequence encoding an
+ * RFC 9421 Signature member and a Content-Digest carry. Deliberately NOT base64url: the
+ * two encodings meet in one request and a verifier forgives neither. */
+export function stdBase64(bytes: Uint8Array): string {
+  let bin = "";
+  for (let i = 0; i < bytes.length; i += 1) bin += String.fromCharCode(bytes[i] as number);
+  return btoa(bin);
+}
diff --git a/sdk/ts/src/opaque-url.ts b/sdk/ts/src/opaque-url.ts
index 78df229b..45c48063 100644
--- a/sdk/ts/src/opaque-url.ts
+++ b/sdk/ts/src/opaque-url.ts
@@ -1,7 +1,7 @@
 // opaqueUrl coerces a URL-like input to the primitive string the OPAQUE-URL-BYTES
 // contract (signurl.ts) operates on, ONCE at each public SDK boundary.
 //
-// The URL-consuming faces (Ed25519 signed-URL verify, RFC 9421 GET-PoP verify)
+// The URL-consuming faces (Ed25519 signed-URL verify, Web Bot Auth delivery-proof verify)
 // type their input as `string`, but some edge runtimes — Fastly Compute — hand
 // the request URL as a URL-LIKE OBJECT. Left uncoerced, that object either throws
 // (canonicalUrl's indexOf/slice string ops) or silently WHATWG-normalizes (a
diff --git a/sdk/ts/src/pop.ts b/sdk/ts/src/pop.ts
index b1092374..7958c138 100644
--- a/sdk/ts/src/pop.ts
+++ b/sdk/ts/src/pop.ts
@@ -1,28 +1,38 @@
 import { thumbprint } from "./thumbprint.ts";
-import { AgentKeyHeader } from "./wire.ts";
+import { AgentKeyHeader, SignatureAgentHeader, WBATag } from "./wire.ts";
 import { decodeBase64Url, utf8Bytes } from "./base64url.ts";
 import { opaqueUrl } from "./opaque-url.ts";
+import { parseSignatureHeaders, type ParsedSignature } from "../core/multisig-parse.ts";
+import { buildSignatureBase, ComponentUnavailable, requestComponentValue } from "../core/sign-request.ts";
+import { keyed, plain, renderComponent, signatureDirectory } from "../core/wba.ts";
 
 // Proof-of-possession verification for delivery-URL identity binding (ADR-013),
 // relocated from the app edge (src/edge/src/pop.ts) as a pure L1 helper.
 //
 // When a signed URL carries an `agent_id` (the agent's RFC 7638 thumbprint), a
 // code-capable edge requires the fetcher to prove possession of the bound key —
-// fully offline:
+// fully offline. The proof is a full Web Bot Auth signature over the GET:
 //
-//   1. present its raw Ed25519 public key in `X-FORA-Agent-Key`, and
-//   2. sign the GET with RFC 9421 over `@method` + `@target-uri`,
+//   1. the raw Ed25519 public key in `X-FORA-Agent-Key`,
+//   2. a Signature-Agent member naming the agent's key directory, and
+//   3. an RFC 9421 signature with tag="web-bot-auth" covering exactly `@method`,
+//      `@target-uri` and that member,
 //
 // and the edge enforces the 3-way identity:
 //
 //   agent_id (URL) == keyid (Signature-Input) == thumbprint(presented key)
 //
+// The last equality is the one that cannot be dropped: verifying against the presented
+// key alone proves nothing, since any actor could present their own key plus a valid
+// self-signature. A generic WBA verifier ignores X-FORA-Agent-Key, resolves the same
+// key from the directory the Signature-Agent member names, and accepts the same
+// signature.
+//
 // The Ed25519 verify primitive is INJECTABLE (input.verifyEd25519) so a runtime
 // without WebCrypto Ed25519 (Fastly Compute) can supply its own — the byte
 // contract is the signature base, not the primitive. The default primitive is
-// WebCrypto crypto.subtle, which observes byte-identical output on the default
-// path. Byte-parity guard: the pop vectors are produced by the sdk/go signer
-// over the same @method/@target-uri base (sigbase.go buildSignatureBase).
+// WebCrypto crypto.subtle. Byte-parity guard: the pop vectors are produced by the
+// sdk/go signer (helpers.SignAgentBinding).
 
 export const AGENT_KEY_HEADER = AgentKeyHeader.toLowerCase();
 
@@ -34,7 +44,9 @@ export type PopFailure =
   | "missing_sig"
   | "malformed_sig_input"
   | "unsupported_alg"
+  | "bad_tag"
   | "bad_covered_components"
+  | "bad_signature_agent"
   | "keyid_mismatch"
   | "thumbprint_mismatch"
   | "pop_missing_created"
@@ -46,8 +58,23 @@ export type PopFailure =
 export interface PopResult {
   ok: boolean;
   reason?: PopFailure;
+  /** The https origin of the agent's key directory the proof's Signature-Agent member
+   * names, set when the proof verifies. */
+  signatureAgent?: string;
+  /** The Accept-Signature value (RFC 9421 §5.1, WG-00 §5.3) a refusal is answered with:
+   * POP_ACCEPT_SIGNATURE, set when the proof carried no signature, a missing or wrong
+   * tag, a covered set other than the profile's, or a Signature-Agent in a form the
+   * profile refuses. Unset for every other refusal. */
+  acceptSignature?: string;
 }
 
+/** The Accept-Signature value a refused delivery proof is answered with: the three
+ * components a proof covers, the dictionary form of Signature-Agent, and the created,
+ * expires and tag parameters. */
+export const POP_ACCEPT_SIGNATURE = `sig1=(${[plain("@method"), plain("@target-uri"), keyed("signature-agent", "sig1")]
+  .map(renderComponent)
+  .join(" ")});created;expires;tag="${WBATag}"`;
+
 /**
  * Ed25519 verify primitive: (publicKey, signature, message) -> valid?. Injected
  * so non-WebCrypto runtimes can supply their own without changing the byte
@@ -68,63 +95,69 @@ export interface PopInput {
   headers: Headers;
   /** The bound thumbprint carried in the URL's `agent_id` param. */
   agentId: string;
+  /** Milliseconds since the epoch; defaults to Date.now. */
   now?: () => number;
   /** Optional Ed25519 verify primitive; defaults to WebCrypto crypto.subtle. */
   verifyEd25519?: Ed25519Verify;
 }
 
-interface SignatureInput {
-  covered: string[];
-  /** Verbatim params string after `label=`, used to rebuild @signature-params. */
-  rawParams: string;
-  keyid: string;
-  alg: string;
-  created?: number;
-  expires?: number;
-}
-
-const okResult: PopResult = { ok: true };
+const okResult = (signatureAgent: string): PopResult => ({ ok: true, signatureAgent });
 const fail = (reason: PopFailure): PopResult => ({ ok: false, reason });
+const failAccept = (reason: PopFailure): PopResult => ({
+  ok: false,
+  reason,
+  acceptSignature: POP_ACCEPT_SIGNATURE,
+});
 
 /**
  * Verify the agent's proof of possession of the key bound to `agentId`.
- * Returns `{ ok: true }` only when the presented key, the RFC 9421 signature,
+ * Returns `{ ok: true }` only when the presented key, the Web Bot Auth signature,
  * and the 3-way identity all check out.
  */
 export async function verifyAgentBinding(input: PopInput): Promise<PopResult> {
   const presented = readPresentedKey(input.headers);
   if (!presented.ok) return presented.result;
 
-  const parsed = parseSignatureInput(input.headers.get("signature-input"));
-  if (!parsed) return fail("malformed_sig_input");
+  const parsed = parseProof(input.headers);
+  if (!parsed.ok) return parsed.result;
+  const { sig, count } = parsed;
   // alg is an early reject only; the verify primitive is hard-pinned to Ed25519,
   // so alg is never a key/algorithm SELECTION input (no downgrade possible).
-  if (parsed.alg.toLowerCase() !== "ed25519") return fail("unsupported_alg");
-  if (!coversExactly(parsed.covered)) return fail("bad_covered_components");
-
-  const sigBytes = parseSignature(input.headers.get("signature"));
-  if (!sigBytes) return fail("missing_sig");
+  if (sig.alg === undefined || sig.alg.toLowerCase() !== "ed25519") return fail("unsupported_alg");
+  if (sig.tag !== WBATag) return failAccept("bad_tag");
+  if (!coversTheProfile(sig)) return failAccept("bad_covered_components");
+  const directory = signatureDirectory(input.headers.get(SignatureAgentHeader) ?? undefined, sig, count);
+  if (!directory.ok) {
+    return directory.refusal.kind === "not_origin" ? fail("bad_signature_agent") : failAccept("bad_signature_agent");
+  }
 
   // 3-way identity. keyid and the presented-key thumbprint must both equal the
   // URL-bound agent_id before any signature work is trusted.
-  if (parsed.keyid !== input.agentId) return fail("keyid_mismatch");
+  if (sig.keyid !== input.agentId) return fail("keyid_mismatch");
   const presentedThumb = await thumbprint(presented.key);
   if (presentedThumb !== input.agentId) return fail("thumbprint_mismatch");
 
-  const stale = freshnessFailure(parsed, input.now);
+  const stale = freshnessFailure(sig, input.now);
   if (stale) return fail(stale);
 
   // Coerce a URL-like input (Fastly hands a URL object, not a string) to its
   // opaque string form once at the boundary. The @target-uri line must carry the
-  // verbatim bytes the agent signed, never a WHATWG-normalized toString(). This
-  // is behavior-neutral for the template literal on a string caller
-  // (String(s) === s); it makes the opaque-string contract explicit and matches
-  // the signed-URL verify boundary.
+  // verbatim bytes the agent signed, never a WHATWG-normalized toString().
   const url = opaqueUrl(input.url);
-  const base = signatureBase(input.method, url, parsed.rawParams);
+  let base: string;
+  try {
+    base = buildSignatureBase(
+      sig.covered,
+      requestComponentValue({ method: input.method, url, header: (n) => input.headers.get(n) ?? undefined }),
+      sig.rawInner,
+    );
+  } catch (err) {
+    if (err instanceof ComponentUnavailable) return failAccept("bad_signature_agent");
+    throw err;
+  }
   const verify = input.verifyEd25519 ?? defaultVerifyEd25519;
-  const valid = await verify(presented.key, sigBytes, utf8Bytes(base));
-  return valid ? okResult : fail("pop_sig_invalid");
+  const valid = await verify(presented.key, sig.signature, utf8Bytes(base));
+  return valid ? okResult(directory.value) : fail("pop_sig_invalid");
 }
 
 type PresentedKey = { ok: true; key: Uint8Array<ArrayBuffer> } | { ok: false; result: PopResult };
@@ -139,82 +172,48 @@ function readPresentedKey(headers: Headers): PresentedKey {
   return { ok: true, key: bytes };
 }
 
-function coversExactly(covered: string[]): boolean {
-  return covered.length === 2 && covered.includes("@method") && covered.includes("@target-uri");
+type ParsedProof = { ok: true; sig: ParsedSignature; count: number } | { ok: false; result: PopResult };
+
+// parseProof reads the proof's Signature-Input and Signature through the structured-field
+// parser. A request carrying neither is unsigned; the first signature in header order is
+// the proof.
+function parseProof(headers: Headers): ParsedProof {
+  const input = headers.get("signature-input") ?? undefined;
+  const signature = headers.get("signature") ?? undefined;
+  if (input === undefined) return { ok: false, result: failAccept("malformed_sig_input") };
+  if (signature === undefined) return { ok: false, result: failAccept("missing_sig") };
+  const parsed = parseSignatureHeaders(input, signature);
+  if (!parsed.ok) return { ok: false, result: fail("malformed_sig_input") };
+  return { ok: true, sig: parsed.value[0] as ParsedSignature, count: parsed.value.length };
+}
+
+// coversTheProfile reports whether the proof covers @method, @target-uri and exactly one
+// Signature-Agent reference, and nothing else.
+function coversTheProfile(sig: ParsedSignature): boolean {
+  const names = sig.covered.map((c) => c.name.toLowerCase());
+  const plainOnce = (n: string): boolean =>
+    sig.covered.filter((c) => c.name.toLowerCase() === n && c.params.length === 0).length === 1;
+  return (
+    plainOnce("@method") &&
+    plainOnce("@target-uri") &&
+    names.filter((n) => n === "signature-agent").length === 1 &&
+    names.length === 3
+  );
 }
 
 // MAX_FUTURE_SKEW_SEC: a proof's created timestamp may not lead the verifier
 // clock by more than this (mirrors the Go service-to-service verifier).
 const MAX_FUTURE_SKEW_SEC = 300;
 
-function freshnessFailure(parsed: SignatureInput, now?: () => number): PopFailure | undefined {
+function freshnessFailure(sig: ParsedSignature, now?: () => number): PopFailure | undefined {
   const nowSec = Math.floor((now?.() ?? Date.now()) / 1000);
-  if (parsed.created === undefined) return "pop_missing_created";
-  if (parsed.created > nowSec + MAX_FUTURE_SKEW_SEC) return "pop_future_created";
-  if (parsed.expires === undefined) return "pop_missing_exp";
-  if (nowSec >= parsed.expires) return "pop_expired";
+  if (sig.created === undefined) return "pop_missing_created";
+  if (sig.created > nowSec + MAX_FUTURE_SKEW_SEC) return "pop_future_created";
+  if (sig.expires === undefined) return "pop_missing_exp";
+  if (nowSec >= sig.expires) return "pop_expired";
   return undefined;
 }
 
-/**
- * Rebuild the RFC 9421 signature base for the covered GET components. Order
- * mirrors the inner list (`@method`, `@target-uri`), then `@signature-params`.
- * MUST stay byte-identical to the sdk/go signer (sigbase.go buildSignatureBase).
- */
-export function signatureBase(method: string, url: string, rawParams: string): string {
-  return [
-    `"@method": ${method.toUpperCase()}`,
-    `"@target-uri": ${url}`,
-    `"@signature-params": ${rawParams}`,
-  ].join("\n");
-}
-
-/** Parse `label=("@method" "@target-uri");keyid="..";alg="..";created=..;expires=..`. */
-export function parseSignatureInput(raw: string | null): SignatureInput | undefined {
-  if (!raw) return undefined;
-  const eq = raw.indexOf("=");
-  if (eq < 0) return undefined;
-  const rawParams = raw.slice(eq + 1).trim();
-  const listMatch = rawParams.match(/^\(([^)]*)\)(.*)$/);
-  if (!listMatch) return undefined;
-  const covered = [...(listMatch[1] ?? "").matchAll(/"([^"]+)"/g)].map((m) => m[1] as string);
-  const tail = listMatch[2] ?? "";
-
-  const keyid = matchParam(tail, /;keyid="([^"]*)"/);
-  const alg = matchParam(tail, /;alg="([^"]*)"/);
-  if (keyid === undefined || alg === undefined) return undefined;
-  const created = matchInt(tail, /;created=(\d+)/);
-  const expires = matchInt(tail, /;expires=(\d+)/);
-
-  return {
-    covered,
-    rawParams,
-    keyid,
-    alg,
-    ...(created !== undefined ? { created } : {}),
-    ...(expires !== undefined ? { expires } : {}),
-  };
-}
-
-function matchParam(s: string, re: RegExp): string | undefined {
-  return s.match(re)?.[1];
-}
-
-function matchInt(s: string, re: RegExp): number | undefined {
-  const m = s.match(re);
-  return m ? Number(m[1]) : undefined;
-}
-
-/** Parse the RFC 9421 `Signature` header value `label=:<base64>:`. */
-export function parseSignature(raw: string | null): Uint8Array<ArrayBuffer> | undefined {
-  if (!raw) return undefined;
-  const m = raw.match(/:([^:]+):/);
-  if (!m || !m[1]) return undefined;
-  // The Signature byte string is standard base64; decodeBase64Url's url->std
-  // alphabet remap is a no-op on it, so the shared decoder handles it.
-  return decodeBase64Url(m[1]);
-}
-
 const defaultVerifyEd25519: Ed25519Verify = async (pubkey, sig, message) => {
   try {
     const key = await crypto.subtle.importKey("raw", pubkey, { name: "Ed25519" }, false, ["verify"]);
diff --git a/sdk/ts/src/wire.ts b/sdk/ts/src/wire.ts
index 736c3471..708b1a13 100644
--- a/sdk/ts/src/wire.ts
+++ b/sdk/ts/src/wire.ts
@@ -2,8 +2,8 @@
 // (helpers/constants.go + core/requestid.go). Encoding is negotiated per hop via
 // Content-Type (ADR-020): application/proto for binary, application/json for
 // canonical proto-JSON. The Go layer splits RequestIDHeader across
-// helpers/constants.go and core/requestid.go; the single TS module exposes all
-// ten values once. Pinned to wire-constants-vectors.json.
+// helpers/constants.go and core/requestid.go; the single TS module exposes them
+// all once. Pinned to wire-constants-vectors.json.
 //
 // Also home to the pure receive-side rule for WellKnownManifest.ver, so the
 // constant and the check that reads it sit together.
@@ -37,8 +37,23 @@ export const ProtocolVersion = "1.0";
 export const WellKnownManifestVersion = "1.0";
 /** RequestIDHeader correlates a request across services and the edge. */
 export const RequestIDHeader = "X-Request-ID";
-/** SignatureAgentHeader carries the signer's Web Bot Auth key-directory URL. */
+/**
+ * SignatureAgentHeader carries the Web Bot Auth Signature-Agent dictionary: one member
+ * per signature, <label>="https://<origin>", naming the key directory that signature's
+ * keyid is resolved in.
+ */
 export const SignatureAgentHeader = "Signature-Agent";
+/** WBATag is the RFC 9421 tag parameter every Web Bot Auth request signature carries. */
+export const WBATag = "web-bot-auth";
+/** DirectoryResponseTag is the tag a key directory's response signature carries
+ * (WG-00 Appendix B.1). */
+export const DirectoryResponseTag = "http-message-signatures-directory";
+/**
+ * AcceptSignatureHeader is the RFC 9421 §5.1 field a verifier answers with when it
+ * refuses a signature for a missing component or a form it does not accept, naming what
+ * it requires (WG-00 §5.3). Its value for a FORA RPC is acceptSignature().
+ */
+export const AcceptSignatureHeader = "Accept-Signature";
 
 /**
  * Header carrying the fetcher's raw Ed25519 public key on a PoP GET. Canonical
diff --git a/sdk/ts/tests/admin-client.test.ts b/sdk/ts/tests/admin-client.test.ts
index 7660fd41..eee6453b 100644
--- a/sdk/ts/tests/admin-client.test.ts
+++ b/sdk/ts/tests/admin-client.test.ts
@@ -63,6 +63,7 @@ async function fixture() {
 	});
 	const client = createAdminClient("https://admin.exchange.test", {
 		signer: { privKey: keys.privateKey, keyid: "operator.v1" },
+		signatureAgent: "https://agent.test",
 		send: peer.send,
 	});
 	return { peer, client };
diff --git a/sdk/ts/tests/before-sign.test.ts b/sdk/ts/tests/before-sign.test.ts
index fb0257fe..c4255e01 100644
--- a/sdk/ts/tests/before-sign.test.ts
+++ b/sdk/ts/tests/before-sign.test.ts
@@ -50,6 +50,7 @@ async function fixture(answer?: Parameters<typeof signedPeer>[2]) {
 	const client = (opts: ClientOptions = {}) =>
 		createCatalogClient("https://exchange.test", {
 			signer: { privKey: keys.privateKey, keyid: KEYID },
+			signatureAgent: "https://agent.test",
 			send: peer.send,
 			...opts,
 		});
diff --git a/sdk/ts/tests/broker-execute.test.ts b/sdk/ts/tests/broker-execute.test.ts
index a83a1917..e7135af9 100644
--- a/sdk/ts/tests/broker-execute.test.ts
+++ b/sdk/ts/tests/broker-execute.test.ts
@@ -300,6 +300,7 @@ describe("Client.execute with several offers", () => {
 		const client = createClient("https://exchange.test", {
 			requester: REQUESTER,
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 			send,
 		});
 
@@ -334,6 +335,7 @@ describe("Client.execute with several offers", () => {
 		const client = createClient("https://exchange.test", {
 			requester: REQUESTER,
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 			send,
 		});
 
diff --git a/sdk/ts/tests/client-content-encoding.test.ts b/sdk/ts/tests/client-content-encoding.test.ts
index 06721583..2fc56679 100644
--- a/sdk/ts/tests/client-content-encoding.test.ts
+++ b/sdk/ts/tests/client-content-encoding.test.ts
@@ -89,7 +89,7 @@ describe("content coding", () => {
 			"verify",
 		])) as CryptoKeyPair;
 		await withLoopback(() =>
-			fetchContent(`http://127.0.0.1:${port}/x`, { keyPair: keys }).catch(() => undefined),
+			fetchContent(`http://127.0.0.1:${port}/x`, { keyPair: keys, signatureAgent: "https://agent.test" }).catch(() => undefined),
 		);
 		expect(negotiated()).toBe("identity");
 		server.close();
@@ -122,7 +122,7 @@ describe("content coding", () => {
 			"verify",
 		])) as CryptoKeyPair;
 		const failure = await withLoopback(() =>
-			fetchContent(`http://127.0.0.1:${port}/x`, { keyPair: keys }).catch(
+			fetchContent(`http://127.0.0.1:${port}/x`, { keyPair: keys, signatureAgent: "https://agent.test" }).catch(
 				(e: unknown) => e,
 			),
 		);
diff --git a/sdk/ts/tests/client-empty-covered-header-wire.test.ts b/sdk/ts/tests/client-empty-covered-header-wire.test.ts
index 9f94e410..d9686bfb 100644
--- a/sdk/ts/tests/client-empty-covered-header-wire.test.ts
+++ b/sdk/ts/tests/client-empty-covered-header-wire.test.ts
@@ -1,7 +1,7 @@
 // An empty covered header has to reach the WIRE, not just the header map.
 //
-// The whole point of binding `authorization` and `signature-agent` unconditionally is
-// that a verifier rebuilds the signature base from the request it RECEIVED. A value
+// The whole point of binding `authorization` unconditionally, even empty, is that a
+// verifier rebuilds the signature base from the request it RECEIVED. A value
 // bound but never transmitted is not bound at all — the verifier reads the covered
 // names off Signature-Input, finds nothing on the wire under one of them, and refuses.
 //
@@ -18,6 +18,7 @@
 import { createServer, type Server } from "node:http";
 import { describe, expect, it } from "vitest";
 
+import { ForaCallError } from "../client/errors.ts";
 import { createUnarySend } from "../client/send.ts";
 import { unaryCall } from "../client/transport.ts";
 import { SignatureAgentHeader } from "../src/wire.ts";
@@ -63,7 +64,7 @@ function linesFor(raw: string[], name: string): string[] {
 }
 
 describe("an empty covered header survives the transport", () => {
-	it("both covered names arrive present-and-empty, exactly once each", async () => {
+	it("the empty authorization arrives present-and-empty, and every covered name exactly once", async () => {
 		const [server, port, raw] = await recordingServer();
 		const keys = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
 			"sign",
@@ -81,11 +82,9 @@ describe("an empty covered header survives the transport", () => {
 					},
 					message: {},
 					send: createUnarySend({ guarded: true }),
-					// The static-bootstrap signer: no bearer token and no key directory, so
-					// BOTH covered values are empty. This is the shape that never left the
-					// socket before, and the shape a request from an agent without a WBA
-					// directory takes.
-					signer: { privKey: keys.privateKey, keyid: "agent.test.v1" },
+					// No bearer token, so the covered authorization value is empty: the shape
+					// that never left the socket before.
+					signer: { privKey: keys.privateKey, keyid: "agent.test.v1", signatureAgent: "https://agent.test" },
 				}),
 			);
 
@@ -93,7 +92,7 @@ describe("an empty covered header survives the transport", () => {
 			// PRESENT, and empty — not absent. An adapter that drops an empty value would
 			// leave zero lines here and every signed call would be refused downstream.
 			expect(linesFor(received, "authorization")).toEqual([""]);
-			expect(linesFor(received, SIGNATURE_AGENT_LOWER)).toEqual([""]);
+			expect(linesFor(received, SIGNATURE_AGENT_LOWER)).toEqual(['sig1="https://agent.test"']);
 			// And exactly ONE line per covered name: two lines under one name join with
 			// ", " before the base is rebuilt, which breaks an otherwise valid signature.
 			for (const name of [
@@ -109,4 +108,29 @@ describe("an empty covered header survives the transport", () => {
 			server.close();
 		}
 	});
+
+	it("a signer with no key directory is refused as malformed and nothing leaves the socket", async () => {
+		const [server, port, raw] = await recordingServer();
+		const keys = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
+		try {
+			const err = await withLoopback(() =>
+				unaryCall({
+					op: "discover",
+					target: {
+						baseURL: `http://127.0.0.1:${port}`,
+						service: "fora.v1.ExchangeService",
+						method: "DiscoverResources",
+					},
+					message: {},
+					send: createUnarySend({ guarded: true }),
+					signer: { privKey: keys.privateKey, keyid: "agent.test.v1" },
+				}),
+			).catch((e: unknown) => e);
+			expect(err).toBeInstanceOf(ForaCallError);
+			expect((err as ForaCallError).kind).toBe("malformed");
+			expect(raw()).toEqual([]);
+		} finally {
+			server.close();
+		}
+	});
 });
diff --git a/sdk/ts/tests/client-failure-classes.test.ts b/sdk/ts/tests/client-failure-classes.test.ts
index 1e6284a1..eb77a52e 100644
--- a/sdk/ts/tests/client-failure-classes.test.ts
+++ b/sdk/ts/tests/client-failure-classes.test.ts
@@ -62,6 +62,7 @@ describe("the DELIVERY leg's own failures", () => {
 		try {
 			failure = await fetchContent(`http://127.0.0.1:${port}/x`, {
 				keyPair: keys,
+				signatureAgent: "https://agent.test",
 				dispatcher: new Agent(),
 				timeoutMs: 400,
 				maxBytes: 64 << 20,
@@ -110,6 +111,7 @@ describe("a redirect on the DELIVERY leg", () => {
 		process.env["ALLOW_INSECURE"] = "true";
 		const failure = (await fetchContent(`http://127.0.0.1:${port}/x`, {
 			keyPair: keys,
+			signatureAgent: "https://agent.test",
 			dispatcher: new Agent(),
 		}).catch((e: unknown) => e)) as ForaCallError;
 		if (saved === undefined) delete process.env["ALLOW_INSECURE"];
@@ -141,7 +143,7 @@ describe("a dial the guard refused", () => {
 		// Loopback is what the address pin refuses; the scheme gate is satisfied by https.
 		const failure = (await fetchContent(
 			"https://localhost/a?token=live-credential-value",
-			{ keyPair: keys },
+			{ keyPair: keys, signatureAgent: "https://agent.test" },
 		).catch((e: unknown) => e)) as ForaCallError;
 
 		expect(failure).toBeInstanceOf(ForaCallError);
diff --git a/sdk/ts/tests/client-refusal-reclaim.test.ts b/sdk/ts/tests/client-refusal-reclaim.test.ts
index 92467162..1af87a6b 100644
--- a/sdk/ts/tests/client-refusal-reclaim.test.ts
+++ b/sdk/ts/tests/client-refusal-reclaim.test.ts
@@ -164,6 +164,7 @@ describe("a refusal above the read", () => {
 				for (let i = 0; i < REFUSALS; i++) {
 					const failure = await fetchContent(`${base}/a${i}`, {
 						keyPair,
+						signatureAgent: "https://agent.test",
 						dispatcher,
 						timeoutMs: 5000,
 					}).catch((e: unknown) => e);
@@ -195,6 +196,7 @@ describe("a refusal above the read", () => {
 				for (let i = 0; i < REFUSALS; i++) {
 					const failure = await fetchContent(`${base}/a${i}`, {
 						keyPair,
+						signatureAgent: "https://agent.test",
 						dispatcher,
 						timeoutMs: 5000,
 					}).catch((e: unknown) => e);
@@ -262,6 +264,7 @@ describe("a refusal above the read", () => {
 				const dispatcher = new Agent({ connections: 1 });
 				const refused = await fetchContent(`${base}/refuse`, {
 					keyPair,
+					signatureAgent: "https://agent.test",
 					dispatcher,
 					timeoutMs: 5000,
 				}).catch((e: unknown) => e);
@@ -269,7 +272,7 @@ describe("a refusal above the read", () => {
 
 				const answer = await within(
 					6000,
-					fetchContent(`${base}/ok`, { keyPair, dispatcher, timeoutMs: 5000 }),
+					fetchContent(`${base}/ok`, { keyPair, signatureAgent: "https://agent.test", dispatcher, timeoutMs: 5000 }),
 				);
 				expect(answer, "the refusal wedged the pool: nothing after it can dial").not.toBe(
 					WEDGED,
diff --git a/sdk/ts/tests/client-request.parity.test.ts b/sdk/ts/tests/client-request.parity.test.ts
index 9f056f89..9e599892 100644
--- a/sdk/ts/tests/client-request.parity.test.ts
+++ b/sdk/ts/tests/client-request.parity.test.ts
@@ -109,6 +109,7 @@ async function call(name: string): Promise<UnaryRequest> {
 			}),
 		},
 		signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+		signatureAgent: "https://agent.test",
 		agentPublicKey: keys.publicKey,
 		endpointResolver,
 		send,
diff --git a/sdk/ts/tests/client-scheme-guard.test.ts b/sdk/ts/tests/client-scheme-guard.test.ts
index 2103a1d6..c84379f6 100644
--- a/sdk/ts/tests/client-scheme-guard.test.ts
+++ b/sdk/ts/tests/client-scheme-guard.test.ts
@@ -149,6 +149,7 @@ describe("the delivery leg refuses plaintext", () => {
 		};
 		const err = await fetchContent("http://edge.test/a?token=live-credential", {
 			keyPair: watched as never,
+			signatureAgent: "https://agent.test",
 		}).catch((e: unknown) => e);
 		expect(err).toBeInstanceOf(ForaCallError);
 		expect((err as ForaCallError).kind).toBe("unreachable");
@@ -158,6 +159,7 @@ describe("the delivery leg refuses plaintext", () => {
 	it("and does not echo the credential in its message", async () => {
 		const err = (await fetchContent("http://edge.test/a?token=live-credential", {
 			keyPair: (await keyPair) as CryptoKeyPair,
+			signatureAgent: "https://agent.test",
 		}).catch((e: unknown) => e)) as ForaCallError;
 		expect(String(err.cause ?? "")).not.toContain("live-credential");
 	});
diff --git a/sdk/ts/tests/client.test.ts b/sdk/ts/tests/client.test.ts
index 83c7a3f8..51624032 100644
--- a/sdk/ts/tests/client.test.ts
+++ b/sdk/ts/tests/client.test.ts
@@ -17,6 +17,8 @@ import {
 } from "../client/index.ts";
 import { createVerifier } from "../core/verifier.ts";
 import { signOffer } from "../src/offer-sign.ts";
+import { verifyAgentBinding } from "../src/pop.ts";
+import { thumbprint } from "../src/thumbprint.ts";
 import { verifyOfferAcceptance, verifyRequestAcceptance } from "../src/acceptance.ts";
 
 const REQUESTER = { id: "agent-1", domain: "agent.test", type: "REQUESTER_TYPE_AGENT" };
@@ -345,6 +347,7 @@ describe("execute", () => {
 		const client = createClient("https://exchange.test", {
 			requester: REQUESTER,
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 			send,
 		});
 
@@ -415,6 +418,7 @@ describe("execute", () => {
 		const client = createClient("https://exchange.test", {
 			requester: REQUESTER,
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 			send,
 			validation: "off",
 		});
@@ -434,6 +438,7 @@ describe("execute", () => {
 		const client = createClient("https://exchange.test", {
 			requester: REQUESTER,
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 			send,
 		});
 
@@ -455,6 +460,7 @@ describe("execute", () => {
 
 		const noRequester = createClient("https://exchange.test", {
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 			send: recordingSend({}).send,
 		});
 		await expect(noRequester.execute(accepted)).rejects.toMatchObject({
@@ -481,6 +487,7 @@ describe("execute", () => {
 			const client = createClient("https://exchange.test", {
 				requester: { ...REQUESTER, [field]: "" },
 				signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+				signatureAgent: "https://agent.test",
 				send,
 			});
 			const err = (await client.execute(accepted).catch((e: unknown) => e)) as ForaCallError;
@@ -500,6 +507,7 @@ describe("execute", () => {
 		const client = createClient("https://exchange.test", {
 			requester: REQUESTER,
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 			send: recordingSend({}).send,
 		});
 
@@ -695,6 +703,21 @@ describe("fetch", () => {
 		});
 	});
 
+	it("refuses a bound fetch without the agent's key directory", async () => {
+		const keys = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
+			"sign",
+			"verify",
+		])) as CryptoKeyPair;
+		const client = createClient("https://exchange.test", {
+			requester: REQUESTER,
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			agentPublicKey: keys.publicKey,
+		});
+		await expect(client.fetch("https://edge.test/x")).rejects.toMatchObject({
+			kind: "not_signable",
+		});
+	});
+
 	it("refuses without the public half a bound fetch has to present", async () => {
 		const keys = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
 			"sign",
@@ -703,6 +726,7 @@ describe("fetch", () => {
 		const client = createClient("https://exchange.test", {
 			requester: REQUESTER,
 			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: "https://agent.test",
 		});
 		await expect(client.fetch("https://edge.test/x")).rejects.toMatchObject({
 			kind: "not_signable",
@@ -721,8 +745,12 @@ describe("fetch", () => {
 		const raw = new Uint8Array(await crypto.subtle.exportKey("raw", keys.publicKey));
 
 		let presented: string | undefined;
+		let proof: Headers | undefined;
+		let target = "";
 		const server = createServer((req, res) => {
 			presented = req.headers["x-fora-agent-key"] as string | undefined;
+			proof = new Headers(req.headers as Record<string, string>);
+			target = `http://${req.headers.host}${req.url}`;
 			res.writeHead(200, { "content-type": "text/plain" });
 			res.end("body");
 		});
@@ -738,6 +766,7 @@ describe("fetch", () => {
 			const client = createClient("https://exchange.test", {
 				requester: REQUESTER,
 				signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+				signatureAgent: "https://agent.test",
 				agentPublicKey: keys.publicKey,
 			});
 			await client.fetch(`http://127.0.0.1:${port}/x`);
@@ -751,6 +780,18 @@ describe("fetch", () => {
 
 		expect(presented, "no proof header reached the edge").toBeDefined();
 		expect(presented).toBe(base64url(raw));
+
+		// The proof is a Web Bot Auth signature: it names the agent's directory, carries a
+		// 64-byte nonce, and verifies for the agent the URL is bound to.
+		expect(proof?.get("signature-agent")).toBe('sig1="https://agent.test"');
+		expect(/;nonce="([^"]*)"/.exec(proof?.get("signature-input") ?? "")?.[1]).toHaveLength(86);
+		const verdict = await verifyAgentBinding({
+			url: target,
+			method: "GET",
+			headers: proof ?? new Headers(),
+			agentId: await thumbprint(raw),
+		});
+		expect(verdict).toEqual({ ok: true, signatureAgent: "https://agent.test" });
 	});
 });
 
diff --git a/sdk/ts/tests/content-fetch.parity.test.ts b/sdk/ts/tests/content-fetch.parity.test.ts
index cf9760f0..aaee17c5 100644
--- a/sdk/ts/tests/content-fetch.parity.test.ts
+++ b/sdk/ts/tests/content-fetch.parity.test.ts
@@ -86,6 +86,7 @@ describe("sdk/ts reads a delivery answer the way the sdk/go oracle does", () =>
 
 			const call = fetchContent(`${ORIGIN}${PATH}`, {
 				keyPair: await agentKeys(),
+				signatureAgent: "https://agent.test",
 				dispatcher: agent,
 			});
 
@@ -134,6 +135,7 @@ describe("sdk/ts declines a URL the way the sdk/go oracle declines it", () => {
 		it(`${v.name}: ${v.failure}`, async () => {
 			const err = (await fetchContent(v.url, {
 				keyPair: await agentKeys(),
+				signatureAgent: "https://agent.test",
 			}).catch((e: unknown) => e)) as ForaCallError;
 
 			expect(err).toBeInstanceOf(ForaCallError);
diff --git a/sdk/ts/tests/directory-response.parity.test.ts b/sdk/ts/tests/directory-response.parity.test.ts
new file mode 100644
index 00000000..c95f1e2e
--- /dev/null
+++ b/sdk/ts/tests/directory-response.parity.test.ts
@@ -0,0 +1,128 @@
+// Key-directory response signatures (WG-00 §5.5, Appendix B.1) against the shared Go
+// oracle, sdk/go/helpers/testdata/directory-response-vectors.json.
+//
+// verifyDirectoryResponse must report exactly the thumbprints of the listed keys whose
+// response signature verifies for the authority, and throw "digest_mismatch" or
+// "unsigned" where the oracle does. signDirectoryResponse, given a vector's seeds,
+// authority and window, must reproduce the oracle's three headers byte for byte — the
+// documented example included.
+
+import { describe, expect, it } from "vitest";
+import {
+	DirectoryResponseError,
+	signDirectoryResponse,
+	verifyDirectoryResponse,
+} from "../core/directory-response.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import directoryVectors from "../../go/helpers/testdata/directory-response-vectors.json";
+import { b64urlToBytes, hexToBytes } from "./wba-fixtures.ts";
+
+type DirectoryVector = {
+	name: string;
+	authority: string;
+	body: string;
+	content_digest: string;
+	signature_input: string;
+	signature: string;
+	keys: string[];
+	signer_seeds_hex: string[] | null;
+	created?: number;
+	expires?: number;
+	now: number;
+	expected_verified: string[];
+	expected_error: "" | "digest_mismatch" | "unsigned";
+};
+
+const vectors = (directoryVectors as { vectors: DirectoryVector[] }).vectors;
+
+const utf8 = (s: string) => new TextEncoder().encode(s) as Uint8Array<ArrayBuffer>;
+
+function headersOf(v: DirectoryVector): Record<string, string> {
+	const h: Record<string, string> = {};
+	if (v.content_digest !== "") h["content-digest"] = v.content_digest;
+	if (v.signature_input !== "") h["signature-input"] = v.signature_input;
+	if (v.signature !== "") h.signature = v.signature;
+	return h;
+}
+
+async function signerOf(seedHex: string): Promise<{ privKey: CryptoKey; keyid: string }> {
+	const prefix = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20]);
+	const seed = hexToBytes(seedHex);
+	const der = new Uint8Array(prefix.length + seed.length);
+	der.set(prefix, 0);
+	der.set(seed, prefix.length);
+	const privKey = await crypto.subtle.importKey("pkcs8", der, { name: "Ed25519" }, true, ["sign"]);
+	const jwk = await crypto.subtle.exportKey("jwk", privKey);
+	return { privKey, keyid: await thumbprint(b64urlToBytes(jwk.x ?? "")) };
+}
+
+describe("verifyDirectoryResponse matches the Go oracle", () => {
+	it("the corpus carries the documented example and every refusal", () => {
+		const names = new Set(vectors.map((v) => v.name));
+		for (const want of [
+			"doc_directory_example",
+			"two_keys_one_signed",
+			"expired",
+			"created_in_the_future",
+			"key_not_listed",
+			"signed_for_another_authority",
+			"body_changed",
+			"unsigned",
+			"wrong_tag",
+			"no_authority_covered",
+		]) {
+			expect(names.has(want), want).toBe(true);
+		}
+	});
+
+	for (const v of vectors) {
+		it(`${v.name}: ${v.expected_error || `verifies ${v.expected_verified.length} key(s)`}`, async () => {
+			const run = verifyDirectoryResponse(v.authority, headersOf(v), utf8(v.body), v.keys.map(b64urlToBytes), v.now);
+			if (v.expected_error !== "") {
+				const err = await run.catch((e: unknown) => e);
+				expect(err).toBeInstanceOf(DirectoryResponseError);
+				expect((err as DirectoryResponseError).reason).toBe(v.expected_error);
+				return;
+			}
+			expect([...(await run)].sort()).toEqual(v.expected_verified);
+		});
+	}
+
+	it("a response signature names the authority it was served under: another host verifies nothing", async () => {
+		const v = vectors.find((x) => x.name === "doc_directory_example") as DirectoryVector;
+		const verified = await verifyDirectoryResponse("evil.example", headersOf(v), utf8(v.body), v.keys.map(b64urlToBytes), v.now);
+		expect(verified.size).toBe(0);
+	});
+});
+
+describe("signDirectoryResponse reproduces the Go oracle", () => {
+	// The vectors Go produced through SignDirectoryResponse unaltered. The authority a
+	// signed_for_another_authority vector was signed for is not recorded, so it is not
+	// replayed.
+	const RESIGNED = [
+		"doc_directory_example",
+		"two_keys_both_signed",
+		"two_keys_one_signed",
+		"expired",
+		"created_in_the_future",
+		"key_not_listed",
+	];
+	for (const v of vectors.filter((x) => RESIGNED.includes(x.name))) {
+		it(`${v.name}: Content-Digest, Signature-Input and Signature are byte-identical`, async () => {
+			const signers = await Promise.all((v.signer_seeds_hex ?? []).map(signerOf));
+			const sig = await signDirectoryResponse(v.authority, utf8(v.body), signers, v.created ?? 0, v.expires ?? 0);
+			expect(sig).toEqual({
+				contentDigest: v.content_digest,
+				signatureInput: v.signature_input,
+				signature: v.signature,
+			});
+		});
+	}
+
+	it("refuses no authority, no signer, or a window that is not positive", async () => {
+		const signer = await signerOf("9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60");
+		await expect(signDirectoryResponse("", utf8("{}"), [signer], 1, 2)).rejects.toThrow(/authority/);
+		await expect(signDirectoryResponse("a.example", utf8("{}"), [], 1, 2)).rejects.toThrow(/signer/);
+		await expect(signDirectoryResponse("a.example", utf8("{}"), [signer], 2, 2)).rejects.toThrow(/window/);
+	});
+});
diff --git a/sdk/ts/tests/document-readers.integration.test.ts b/sdk/ts/tests/document-readers.integration.test.ts
index 393762f5..b8c7dcdb 100644
--- a/sdk/ts/tests/document-readers.integration.test.ts
+++ b/sdk/ts/tests/document-readers.integration.test.ts
@@ -16,6 +16,7 @@ import { afterEach, beforeEach, describe, expect, it } from "vitest";
 import { checkStrict, StrictViolation } from "../client/index.ts";
 import {
 	DigestMismatch,
+	DirectoryResponseUnsigned,
 	DirectoryUnavailable,
 	MANIFEST_MEDIA_TYPE,
 	ManifestVersionRefused,
@@ -27,9 +28,14 @@ import {
 	WBA_DIRECTORY_MEDIA_TYPE,
 	WBA_DIRECTORY_PATH,
 } from "../resolvers/index.ts";
+import { registerSeed, signedDirectoryHeaders } from "./resolvers-harness.ts";
+import { hexToBytes } from "./wba-fixtures.ts";
 
 const MANIFEST_PATH = "/.well-known/fora.json";
 const LICENSE_TEXT = "Licensed for retrieval-augmented answers, attribution required.\n";
+// The key of the authentication page's directory example; its seed is the RFC 8032
+// test-1 seed, registered with the harness so a served directory can be signed by it.
+const JWK_SEED = "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60";
 const JWK = {
 	kty: "OKP",
 	crv: "Ed25519",
@@ -44,6 +50,10 @@ interface Served {
 	body: string;
 	contentType?: string; // undefined sends no Content-Type
 	status?: number;
+	// Sign the response as a key directory, by every listed registered key or only by
+	// those named here. The signature headers are added beside contentType.
+	signedBy?: readonly string[] | "all";
+	location?: string;
 }
 
 let server: Server;
@@ -62,8 +72,17 @@ beforeEach(async () => {
 			res.writeHead(404).end();
 			return;
 		}
-		res.writeHead(doc.status ?? 200, doc.contentType === undefined ? {} : { "content-type": doc.contentType });
-		res.end(doc.body);
+		const headers: Record<string, string> = doc.contentType === undefined ? {} : { "content-type": doc.contentType };
+		if (doc.location !== undefined) headers.location = doc.location;
+		const signed =
+			doc.signedBy === undefined
+				? Promise.resolve({})
+				: signedDirectoryHeaders(req.headers.host ?? "", doc.body, doc.signedBy === "all" ? undefined : doc.signedBy);
+		void signed.then((sig) => {
+			const { "content-type": _ignored, ...signature } = sig as Record<string, string>;
+			res.writeHead(doc.status ?? 200, { ...headers, ...signature });
+			res.end(doc.body);
+		});
 	});
 	await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
 	host = `127.0.0.1:${(server.address() as AddressInfo).port}`;
@@ -126,8 +145,12 @@ describe("readManifest", () => {
 });
 
 describe("readWBADirectory", () => {
+	beforeEach(async () => {
+		await registerSeed(hexToBytes(JWK_SEED));
+	});
+
 	it("reads by domain and by URL", async () => {
-		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [JWK] }), contentType: WBA_DIRECTORY_MEDIA_TYPE });
+		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [JWK] }), contentType: WBA_DIRECTORY_MEDIA_TYPE, signedBy: "all" });
 		for (const ref of [host, `http://${host}${WBA_DIRECTORY_PATH}`]) {
 			const doc = await readWBADirectory(ref, plain);
 			expect(doc.message.keys?.map((k) => k.x)).toEqual([JWK.x]);
@@ -135,15 +158,48 @@ describe("readWBADirectory", () => {
 		}
 	});
 
-	it("refuses a directory served as plain JSON", async () => {
-		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [JWK] }), contentType: "application/json" });
+	it.each(["application/json", "application/jwk-set+json"])("refuses a directory served as %s", async (contentType) => {
+		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [JWK] }), contentType, signedBy: "all" });
 		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(MediaTypeRefused);
 	});
 
 	it("refuses a key carrying a kid", async () => {
-		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [{ ...JWK, kid: "k1" }] }), contentType: WBA_DIRECTORY_MEDIA_TYPE });
+		docs.set(WBA_DIRECTORY_PATH, {
+			body: JSON.stringify({ keys: [{ ...JWK, kid: "k1" }] }),
+			contentType: WBA_DIRECTORY_MEDIA_TYPE,
+			signedBy: "all",
+		});
 		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(StrictViolation);
 	});
+
+	it("refuses a directory whose response no listed key signed", async () => {
+		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [JWK] }), contentType: WBA_DIRECTORY_MEDIA_TYPE });
+		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(DirectoryResponseUnsigned);
+	});
+
+	it("refuses a directory listing a key that did not sign, even when another did", async () => {
+		const other = { ...JWK, x: "ujxzXNvkI15srfgcQSuIOjRy0QRfrqGJ9YT4vspG40M" };
+		docs.set(WBA_DIRECTORY_PATH, {
+			body: JSON.stringify({ keys: [JWK, other] }),
+			contentType: WBA_DIRECTORY_MEDIA_TYPE,
+			signedBy: [JWK.x],
+		});
+		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(DirectoryResponseUnsigned);
+	});
+
+	it("reads a directory listing no key, which has nothing to sign", async () => {
+		docs.set(WBA_DIRECTORY_PATH, { body: JSON.stringify({ keys: [] }), contentType: WBA_DIRECTORY_MEDIA_TYPE });
+		expect((await readWBADirectory(host, plain)).message.keys ?? []).toEqual([]);
+	});
+
+	it("refuses a directory reached through a redirect", async () => {
+		// The redirect lands on a directory that would be accepted on its own, so only a
+		// reader that refuses to follow fails here.
+		docs.set(WBA_DIRECTORY_PATH, { body: "", status: 302, location: "/elsewhere" });
+		docs.set("/elsewhere", { body: JSON.stringify({ keys: [JWK] }), contentType: WBA_DIRECTORY_MEDIA_TYPE, signedBy: "all" });
+		await expect(readWBADirectory(`http://${host}/elsewhere`, plain)).resolves.toBeDefined();
+		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
 });
 
 describe("readRevocationList", () => {
diff --git a/sdk/ts/tests/hostile-response-data.test.ts b/sdk/ts/tests/hostile-response-data.test.ts
index 62ccf9a5..09cbab0e 100644
--- a/sdk/ts/tests/hostile-response-data.test.ts
+++ b/sdk/ts/tests/hostile-response-data.test.ts
@@ -149,6 +149,7 @@ describe("a deeply nested delivery refusal body", () => {
 		])) as CryptoKeyPair;
 		const err = (await fetchContent("https://edge.test/x", {
 			keyPair: keys,
+			signatureAgent: "https://agent.test",
 			dispatcher: agent,
 		}).catch((e: unknown) => e)) as ForaCallError;
 
diff --git a/sdk/ts/tests/identity.test.ts b/sdk/ts/tests/identity.test.ts
index 29ffa42c..6217774f 100644
--- a/sdk/ts/tests/identity.test.ts
+++ b/sdk/ts/tests/identity.test.ts
@@ -1,9 +1,11 @@
-// Identity helpers: mint a fresh agent — a key, the WBA directory publishing it, and a
-// signer that signs as it — and show a verifier accepts it.
+// Identity helpers: mint a fresh agent — a key, the WBA directory publishing it, the
+// response signatures that directory is served with, and a signer that signs as it — and
+// show a verifier accepts it.
 //
-// The verifier side is the SDK's own: the WBA resolver reads the directory from the origin
-// the covered Signature-Agent names (served here through its injected fetch), and
-// verifyRequestServer checks the request against the key it resolved.
+// The verifier side is the SDK's own: verifyRequestServer resolves each signature's key
+// through the WBA resolver, in the directory the signature's covered Signature-Agent
+// member names (served here through the resolver's injected fetch, signed by the keys it
+// lists and under the profile's media type).
 import { describe, expect, it } from "vitest";
 
 import { createClient, type UnarySend } from "../client/index.ts";
@@ -11,39 +13,75 @@ import {
 	DEFAULT_KEY_VALIDITY_MS,
 	directoryDocument,
 	generateKey,
+	signDirectoryResponse,
 	signingTransportFor,
+	verifyDirectoryResponse,
+	type WBAFile,
 } from "../core/identity.ts";
 import type { OutboundInit } from "../core/signing-transport.ts";
 import { type VerifyRequestHeaders, verifyRequestServer } from "../core/verify-request.ts";
 import { parseWire } from "../../../gen/ts/wire/base.ts";
 import { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
+import { decodeBase64Url } from "../src/base64url.ts";
 import { thumbprint } from "../src/thumbprint.ts";
-import { createWBAKeyResolver } from "../resolvers/index.ts";
+import { createWBAKeyResolver, type FetchLike, WBA_DIRECTORY_MEDIA_TYPE } from "../resolvers/index.ts";
 import { WBA_DIRECTORY_PATH } from "../resolvers/wba.ts";
 
 const DIRECTORY = "https://agent.example";
+const DIRECTORY_URL = `${DIRECTORY}${WBA_DIRECTORY_PATH}`;
+const created = () => Math.floor(Date.now() / 1000) - 60;
 
-/** A verifier that resolves the caller's key from the directory its request names. */
+/** One served directory: the document, signed by `signers` for the directory's host. */
+async function served(
+	doc: WBAFile,
+	signers: Array<{ privKey: CryptoKey; keyid: string }>,
+): Promise<{ body: string; headers: Record<string, string> }> {
+	const body = JSON.stringify(doc);
+	const sig = await signDirectoryResponse(
+		new URL(DIRECTORY).host,
+		new TextEncoder().encode(body) as Uint8Array<ArrayBuffer>,
+		signers,
+		created(),
+		created() + 3600,
+	);
+	return {
+		body,
+		headers: {
+			"content-type": WBA_DIRECTORY_MEDIA_TYPE,
+			"content-digest": sig.contentDigest,
+			"signature-input": sig.signatureInput,
+			signature: sig.signature,
+		},
+	};
+}
+
+/** A verifier that resolves the caller's key from the directory its signature names. */
 async function verifies(
-	documents: Record<string, unknown>,
+	documents: Record<string, { body: string; headers: Record<string, string> }>,
 	req: { url: string; body: Uint8Array<ArrayBuffer>; headers: Record<string, string> },
 ): Promise<boolean> {
-	const resolver = createWBAKeyResolver({
-		fetch: async (url) => {
-			const doc = documents[url];
-			return { status: doc === undefined ? 404 : 200, text: async () => JSON.stringify(doc ?? {}) };
-		},
-	});
+	const fetch: FetchLike = async (url) => {
+		const doc = documents[url];
+		return {
+			status: doc === undefined ? 404 : 200,
+			text: async () => doc?.body ?? "",
+			headers: { get: (name: string) => doc?.headers[name] ?? null },
+		};
+	};
+	const resolver = createWBAKeyResolver({ fetch });
 	const headers: Record<string, string> = {};
 	for (const [k, v] of Object.entries(req.headers)) headers[k.toLowerCase()] = v;
-	const keyid = /keyid="([^"]+)"/.exec(headers["signature-input"] ?? "")?.[1] ?? "";
-	const key = await resolver.resolve(keyid, headers["signature-agent"] ?? "");
 	const verdict = await verifyRequestServer({
 		method: "POST",
 		url: req.url,
 		body: req.body,
 		headers: headers as VerifyRequestHeaders,
-		resolve: { resolve: (k) => (k === keyid && key !== undefined ? new Uint8Array(key) : undefined) },
+		resolve: {
+			resolve: async (keyid, directory) => {
+				const key = await resolver.resolve(keyid, directory);
+				return key === undefined ? undefined : new Uint8Array(key);
+			},
+		},
 		now: () => Math.floor(Date.now() / 1000),
 	});
 	return verdict.valid;
@@ -56,7 +94,7 @@ describe("identity helpers", () => {
 		expect(keyid).toBe(await thumbprint(raw));
 
 		const document = await directoryDocument([keyPair.publicKey]);
-		const documents = { [`${DIRECTORY}${WBA_DIRECTORY_PATH}`]: document };
+		const documents = { [DIRECTORY_URL]: await served(document, [{ privKey: keyPair.privateKey, keyid }]) };
 
 		const sent: { url: string; init: OutboundInit }[] = [];
 		const signing = await signingTransportFor(keyPair, DIRECTORY, async (url: string, init: OutboundInit) => {
@@ -68,19 +106,43 @@ describe("identity helpers", () => {
 
 		const out = sent[0];
 		if (out === undefined) throw new Error("nothing was sent");
-		expect(out.init.headers?.["signature-agent"]).toBe(DIRECTORY);
+		expect(out.init.headers?.["signature-agent"]).toBe(`sig1="${DIRECTORY}"`);
 		expect(out.init.headers?.["signature-input"]).toContain(`keyid="${keyid}"`);
 		expect(await verifies(documents, { url, body, headers: out.init.headers ?? {} })).toBe(true);
 
 		// A directory that does not publish the key: the same request no longer verifies.
 		const stranger = await generateKey();
-		const otherDocs = { [`${DIRECTORY}${WBA_DIRECTORY_PATH}`]: await directoryDocument([stranger.keyPair.publicKey]) };
+		const otherDocs = {
+			[DIRECTORY_URL]: await served(await directoryDocument([stranger.keyPair.publicKey]), [
+				{ privKey: stranger.keyPair.privateKey, keyid: stranger.thumbprint },
+			]),
+		};
 		expect(await verifies(otherDocs, { url, body, headers: out.init.headers ?? {} })).toBe(false);
+
+		// A directory that lists the key without the key's own response signature: the
+		// resolver does not hand the key out, so the request does not verify either.
+		const unsignedByIt = {
+			[DIRECTORY_URL]: await served(document, [{ privKey: stranger.keyPair.privateKey, keyid: stranger.thumbprint }]),
+		};
+		expect(await verifies(unsignedByIt, { url, body, headers: out.init.headers ?? {} })).toBe(false);
+	});
+
+	it("sign a directory response that verifyDirectoryResponse accepts for the served authority only", async () => {
+		const { keyPair, thumbprint: keyid } = await generateKey();
+		const doc = await served(await directoryDocument([keyPair.publicKey]), [{ privKey: keyPair.privateKey, keyid }]);
+		const body = new TextEncoder().encode(doc.body) as Uint8Array<ArrayBuffer>;
+		const x = (JSON.parse(doc.body) as WBAFile).keys?.[0]?.x ?? "";
+		const pub = decodeBase64Url(x) as Uint8Array<ArrayBuffer>;
+		const now = Math.floor(Date.now() / 1000);
+		expect(await verifyDirectoryResponse("agent.example", doc.headers, body, [pub], now)).toEqual(new Set([keyid]));
+		expect(await verifyDirectoryResponse("other.example", doc.headers, body, [pub], now)).toEqual(new Set());
 	});
 
 	it("drive the client as the minted agent", async () => {
 		const { keyPair, thumbprint: keyid } = await generateKey();
-		const documents = { [`${DIRECTORY}${WBA_DIRECTORY_PATH}`]: await directoryDocument([keyPair.publicKey]) };
+		const documents = {
+			[DIRECTORY_URL]: await served(await directoryDocument([keyPair.publicKey]), [{ privKey: keyPair.privateKey, keyid }]),
+		};
 		const accepted: boolean[] = [];
 		const send: UnarySend = async (req) => {
 			accepted.push(await verifies(documents, req));
diff --git a/sdk/ts/tests/multisig-base-reuse.guard.test.ts b/sdk/ts/tests/multisig-base-reuse.guard.test.ts
index 989fca86..3fddbfe1 100644
--- a/sdk/ts/tests/multisig-base-reuse.guard.test.ts
+++ b/sdk/ts/tests/multisig-base-reuse.guard.test.ts
@@ -4,119 +4,100 @@ import { describe, expect, it } from "vitest";
 
 // Structural guard for the "forked signature-base builder" disease.
 //
-// DISEASE: the RFC 9421 5-component request signature-base
-// (@method @target-uri content-digest authorization signature-agent) is rendered
-// by hardcoding those lines. Before the multisig work there was exactly ONE such
-// renderer — buildRequestSignatureBase (core/sign-request.ts). The multisig
-// append/verify faces MUST compose that generalized builder (via its optional
-// chain-link arg), NOT fork a second copy of the 5-line template. A fork is how a
-// future covered-component change silently drifts one path out of byte-parity with
-// the Go oracle.
+// DISEASE: an RFC 9421 signature base is rendered by hand in a second place — a
+// template of `"<component>": ${value}` lines ending in the @signature-params line. A
+// fork is how a covered-component change silently drifts one path out of byte-parity
+// with the Go oracle: the signer and the verifier, or the request path and the delivery
+// proof, stop rebuilding the same bytes.
 //
-// This guard pins the invariant class-level: exactly one file under sdk/ts/core +
-// sdk/ts/src renders the 5-component request base, and it is core/sign-request.ts.
-// A new face that forks the template adds a second renderer and trips this guard.
+// The invariant: exactly one file under sdk/ts/core + sdk/ts/src renders the
+// @signature-params line, core/sign-request.ts (buildSignatureBase), and every face
+// that signs or verifies — the request signer and appender, both request verifiers, the
+// delivery proof's signer and verifier, and the key-directory response signatures —
+// composes it.
 //
-// The 2-component GET-PoP base (src/pop.ts signatureBase) is a DISTINCT byte
-// contract (ADR-013) and is intentionally NOT counted — the fingerprint below
-// requires the content-digest + authorization + signature-agent lines that only
-// the 5-component request base carries, so the GET-PoP base never matches.
-//
-// The detector is REGEX-based and whitespace-tolerant on purpose (a formatter
-// wrapping the template lines must not let a fork slip); the "would-be-missed"
-// meta-test feeds a reformatted fork and asserts it is still caught.
+// The detector is REGEX-based and whitespace-tolerant on purpose (a formatter wrapping
+// the template must not let a fork slip); the "would-be-missed" meta-test feeds a
+// reformatted fork and asserts it is still caught.
 
 const SRC_DIRS = ["core", "src"];
 const CANONICAL_RENDERER = "core/sign-request.ts";
+const COMPOSERS = [
+	"core/sign.ts",
+	"core/verify-request.ts",
+	"core/directory-response.ts",
+	"src/pop.ts",
+];
 
-const dirPath = (name: string): string =>
-  fileURLToPath(new URL(`../${name}`, import.meta.url));
+const dirPath = (name: string): string => fileURLToPath(new URL(`../${name}`, import.meta.url));
 
-// The 5-component request-base fingerprint: the three lines that distinguish the
-// request base from the 2-component GET-PoP base. A file that renders all three
-// as signature-base lines IS a request-base renderer.
-const REQUEST_BASE_FINGERPRINT: RegExp[] = [
-  /"content-digest":\s*\$\{/,
-  /"authorization":\s*\$\{/,
-  /"signature-agent":\s*\$\{/,
-];
+// The fingerprint of a signature-base renderer: the @signature-params line written as a
+// template.
+const BASE_FINGERPRINT = /"@signature-params":\s*\$\{/;
 
-// rendersRequestBase is the pure predicate (extracted so the meta-tests can
-// exercise it against synthetic source without touching the real files).
-function rendersRequestBase(source: string): boolean {
-  return REQUEST_BASE_FINGERPRINT.every((re) => re.test(source));
+// rendersBase is the pure predicate (extracted so the meta-tests can exercise it against
+// synthetic source without touching the real files).
+function rendersBase(source: string): boolean {
+	return BASE_FINGERPRINT.test(source);
 }
 
 function tsFilesUnder(dir: string): string[] {
-  const root = dirPath(dir);
-  return readdirSync(root, { withFileTypes: true })
-    .filter((e) => e.isFile() && e.name.endsWith(".ts") && !e.name.endsWith(".test.ts"))
-    .map((e) => `${dir}/${e.name}`);
+	return readdirSync(dirPath(dir), { withFileTypes: true })
+		.filter((e) => e.isFile() && e.name.endsWith(".ts") && !e.name.endsWith(".test.ts"))
+		.map((e) => `${dir}/${e.name}`);
 }
 
-function requestBaseRenderers(): string[] {
-  const found: string[] = [];
-  for (const dir of SRC_DIRS) {
-    for (const rel of tsFilesUnder(dir)) {
-      if (rendersRequestBase(readFileSync(dirPath(rel), "utf8"))) found.push(rel);
-    }
-  }
-  return found.sort();
+function baseRenderers(): string[] {
+	const found: string[] = [];
+	for (const dir of SRC_DIRS) {
+		for (const rel of tsFilesUnder(dir)) {
+			if (rendersBase(readFileSync(dirPath(rel), "utf8"))) found.push(rel);
+		}
+	}
+	return found.sort();
 }
 
-describe("multisig base-builder reuse structural guard", () => {
-  it("the 5-component request signature-base is rendered in exactly one file (no fork)", () => {
-    expect(requestBaseRenderers()).toEqual([CANONICAL_RENDERER]);
-  });
+describe("signature-base builder reuse structural guard", () => {
+	it("the RFC 9421 signature base is rendered in exactly one file (no fork)", () => {
+		expect(baseRenderers()).toEqual([CANONICAL_RENDERER]);
+	});
 
-  it("the multisig verify face composes the shared verify helper, never a forked base", () => {
-    const src = readFileSync(dirPath("core/verify-multisig-request.ts"), "utf8");
-    expect(rendersRequestBase(src)).toBe(false);
-    // and it must reuse the factored single-sig verify core
-    expect(/verifyParsedSignature/.test(src)).toBe(true);
-  });
+	for (const rel of COMPOSERS) {
+		it(`${rel} composes the shared builder, never a forked base`, () => {
+			const src = readFileSync(dirPath(rel), "utf8");
+			expect(rendersBase(src)).toBe(false);
+			expect(/buildSignatureBase\(/.test(src)).toBe(true);
+		});
+	}
 
-  it("the append face composes the shared builder, never a forked base", () => {
-    const src = readFileSync(dirPath("core/sign-request.ts"), "utf8");
-    // appendSignature must call buildRequestSignatureBase, not re-render lines.
-    expect(/export (async )?function appendSignature/.test(src)).toBe(true);
-    const appendBody = src.slice(src.indexOf("function appendSignature"));
-    expect(/buildRequestSignatureBase\(/.test(appendBody)).toBe(true);
-  });
+	it("the append face and the multisig verifier compose the shared helpers", () => {
+		const sign = readFileSync(dirPath("core/sign-request.ts"), "utf8");
+		const appendBody = sign.slice(sign.indexOf("function appendSignature"));
+		expect(/buildSignatureBase\(/.test(appendBody)).toBe(true);
+		const multisig = readFileSync(dirPath("core/verify-multisig-request.ts"), "utf8");
+		expect(rendersBase(multisig)).toBe(false);
+		expect(/verifyParsedSignature/.test(multisig)).toBe(true);
+	});
 
-  // --- meta-tests: exercise the detector against synthetic source ------------
-  it("[meta positive] catches a forked 5-component base template", () => {
-    const fork = [
-      'const base = [',
-      '  `"@method": ${m}`,',
-      '  `"@target-uri": ${u}`,',
-      '  `"content-digest": ${d}`,',
-      '  `"authorization": ${a}`,',
-      '  `"signature-agent": ${s}`,',
-      '].join("\\n");',
-    ].join("\n");
-    expect(rendersRequestBase(fork)).toBe(true);
-  });
+	// --- meta-tests: exercise the detector against synthetic source ------------
+	it("[meta positive] catches a forked base template", () => {
+		const fork = [
+			"const base = [",
+			'  `"@method": ${m}`,',
+			'  `"@target-uri": ${u}`,',
+			'  `"@signature-params": ${p}`,',
+			'].join("\\n");',
+		].join("\n");
+		expect(rendersBase(fork)).toBe(true);
+	});
 
-  it("[meta negative] does NOT flag the 2-component GET-PoP base", () => {
-    const popBase = [
-      'const base = [',
-      '  `"@method": ${method}`,',
-      '  `"@target-uri": ${url}`,',
-      '  `"@signature-params": ${rawParams}`,',
-      '].join("\\n");',
-    ].join("\n");
-    expect(rendersRequestBase(popBase)).toBe(false);
-  });
+	it("[meta negative] does NOT flag a caller of the shared builder", () => {
+		const caller = "const base = buildSignatureBase(covered, requestComponentValue(req), sig.rawInner);";
+		expect(rendersBase(caller)).toBe(false);
+	});
 
-  it("[meta would-be-missed] catches a reformatted fork (extra whitespace) a naive substring would slip", () => {
-    const reformatted = [
-      'const lines = [',
-      '  `"content-digest":    ${digestHeader}`,',
-      '  `"authorization":\t${authorization}`,',
-      '  `"signature-agent":  ${signatureAgent}`,',
-      "];",
-    ].join("\n");
-    expect(rendersRequestBase(reformatted)).toBe(true);
-  });
+	it("[meta would-be-missed] catches a reformatted fork (extra whitespace) a naive substring would slip", () => {
+		const reformatted = ["const lines = [", '  `"@signature-params":\t   ${rawParams}`,', "];"].join("\n");
+		expect(rendersBase(reformatted)).toBe(true);
+	});
 });
diff --git a/sdk/ts/tests/multisig-chain.parity.test.ts b/sdk/ts/tests/multisig-chain.parity.test.ts
index 9c08f653..99caa9d0 100644
--- a/sdk/ts/tests/multisig-chain.parity.test.ts
+++ b/sdk/ts/tests/multisig-chain.parity.test.ts
@@ -1,431 +1,331 @@
-// sdk/ts multisig forwarding-chain append+verify parity against the shared Go
-// oracle (agentic-content-access). Go carries the ONLY multisig surface
-// today (helpers.AppendSignature, VerifyMultisigRequest[Resolved], hop budget);
-// under the 3-SDKs decision a TS broker must append and verify chains too. This
-// suite is the TDD-red contract for the NEW ported faces.
+// sdk/ts multi-signature append+verify parity against the shared Go oracle, under the
+// Web Bot Auth profile.
 //
-// Core Invariant: the RFC 9421 signature base — including the
-// parameterized "signature";key="sigN" forwarding-chain component rendered as
-// :stdbase64(decoded-predecessor-signature-bytes): — must reconstruct BYTE-FOR-
-// BYTE in Go and TS, so a chain signed in Go verifies in TS AND the
-// hop-budget / broken-chain / tampered-predecessor rejections match the Go
-// taxonomy token-for-token. The shared Go emitter is the sole oracle.
+// Every signature on a request is verified on its own, against the key its keyid names
+// in the directory its OWN covered Signature-Agent member names. A signature need not
+// cover another (WG-00 §5.2.2: a forwarder MAY); one that does must cover the earlier
+// signature's Signature member, its Signature-Input member and every component it
+// lists, and may only cover a signature that appears before it. The hop budget counts
+// every signature. Labels carry no meaning.
 //
-// Faces under test (do NOT exist yet — RED):
-//   - core/sign-request.ts::appendSignature — chains sig(N+1) onto a prior
-//     {signatureInput, signature} WITHOUT disturbing existing members; appending
-//     to an unsigned request (empty prev) is byte-identical to signRequest (N=1).
-//   - core/verify-multisig-request.ts::verifyMultisigRequestServer — parses ALL
-//     labels, enforces the hop budget FIRST (hop_budget), the structural chain
-//     next (broken_chain), then verifies each hop (signature); returns a verdict
-//     carrying the verified keyids in chain order, never throws.
+// Faces under test:
+//   - core/sign-request.ts::appendSignature — adds a signature with its own label and
+//     Signature-Agent member WITHOUT disturbing existing ones, covering the last earlier
+//     signature only under coverPrevious;
+//   - core/verify-multisig-request.ts::verifyMultisigRequestServer — the hop budget
+//     FIRST (hop_budget), the completeness of any earlier coverage next (broken_chain),
+//     then each signature (signature); returns the verified keyids and directories in
+//     header order, never throws.
 //
-// Reject precedence the verdict must expose (mirrors Go verify.go:477):
-//   hop_budget → broken_chain → signature.
-//
-// RED until BOTH faces exist. The imports below resolve to nonexistent modules,
-// so tsc errors and vitest fails at collection — a clean TDD-red signal.
+// The test resolver is keyed by (directory, keyid), the directory being the one the
+// verifier resolved for that signature, so a port that resolves through the wrong member
+// fails wrong_directory_member.
 
-import { describe, it, expect } from "vitest";
-// RED: neither module exists yet (TDD red step).
-import { signRequest, appendSignature } from "../core/sign-request.ts";
+import { describe, expect, it } from "vitest";
+import { appendSignature, type SignedRequest, signRequest } from "../core/sign-request.ts";
+import { WebBotAuthError } from "../core/wba.ts";
 import {
-  verifyMultisigRequestServer,
-  type MultisigRejectReason,
-  type MultisigKeyResolver,
-  type MultisigVerifyHeaders,
+	type MultisigRejectReason,
+	type MultisigVerifyHeaders,
+	verifyMultisigRequestServer,
 } from "../core/verify-multisig-request.ts";
+import { readHeader } from "../core/verify-request.ts";
 import multisigVectors from "../../go/helpers/testdata/multisig-chain-vectors.json";
+import { b64urlToBytes, directoryResolver, hexToBytes, importSigningKey } from "./wba-fixtures.ts";
 
 type MultisigHop = {
-  keyid: string;
-  pubkey_b64url: string;
-  seed_hex: string;
-  nonce?: string;
+	keyid: string;
+	pubkey_b64url: string;
+	seed_hex: string;
+	directory: string;
+	nonce?: string;
+	cover_previous?: boolean;
 };
 
-// A Go-emitted forwarding-chain vector: the full wire request (all labels), the
-// per-hop identities, and the outcome the REAL Go oracle reaches — verified
-// keyids in chain order for a positive, or the reject reason token for a
-// negative (hop_budget / broken_chain / signature).
 type MultisigChainVector = {
-  name: string;
-  method: string;
-  url: string;
-  body_hex: string;
-  authorization: string;
-  signature_agent: string;
-  created: number;
-  expires: number;
-  content_digest: string;
-  signature_input: string;
-  signature: string;
-  hops: MultisigHop[];
-  max_signatures: number;
-  expected_verified: boolean;
-  expected_keyids: string[] | null;
-  expected_reason: string;
-  // names the request does NOT carry — deleted after the base ones are set, so a
-  // covered name has no field line under it rather than an empty one.
-  omit_headers?: string[];
-  // field lines ADDED beside the base ones, spelled in a different case so an
-  // object holds both; their values join before a hop's base is rebuilt.
-  extra_headers?: Record<string, string>;
+	name: string;
+	method: string;
+	url: string;
+	body_hex: string;
+	authorization: string;
+	signature_agent: string;
+	created: number;
+	expires: number;
+	content_digest: string;
+	signature_input: string;
+	signature: string;
+	hops: MultisigHop[];
+	max_signatures: number;
+	expected_verified: boolean;
+	expected_keyids: string[] | null;
+	expected_directories: string[] | null;
+	expected_reason: string;
+	omit_headers?: string[];
+	extra_headers?: Record<string, string>;
 };
 
-function hexToBytes(hex: string): Uint8Array<ArrayBuffer> {
-  const out = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < out.length; i++) {
-    out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-  }
-  return out;
-}
-
-function b64urlToBytes(s: string): Uint8Array<ArrayBuffer> {
-  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - (s.length % 4));
-  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
-  const bin = atob(b64);
-  const out = new Uint8Array(bin.length);
-  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
-  return out;
-}
+const hopResolver = (hops: MultisigHop[]) =>
+	directoryResolver(hops.map((h) => ({ directory: h.directory, keyid: h.keyid, pub: b64urlToBytes(h.pubkey_b64url) })));
 
-const PKCS8_ED25519_PREFIX = Uint8Array.from([
-  0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04,
-  0x22, 0x04, 0x20,
-]);
+const fixedClock = (nowUnix: number) => () => nowUnix;
 
-async function importSigningKey(seedHex: string): Promise<CryptoKey> {
-  const seed = hexToBytes(seedHex);
-  const pkcs8 = new Uint8Array(PKCS8_ED25519_PREFIX.length + seed.length);
-  pkcs8.set(PKCS8_ED25519_PREFIX, 0);
-  pkcs8.set(seed, PKCS8_ED25519_PREFIX.length);
-  return crypto.subtle.importKey("pkcs8", pkcs8, { name: "Ed25519" }, false, [
-    "sign",
-  ]);
+// The header bag a vector describes: the base five, minus what the request does not
+// carry, plus any extra field line spelled in another case. Extras land AFTER the base
+// ones so the join order matches the order the oracle added them.
+function headersFor(v: MultisigChainVector): MultisigVerifyHeaders {
+	const headers: MultisigVerifyHeaders = {
+		"content-digest": v.content_digest,
+		"signature-input": v.signature_input,
+		signature: v.signature,
+		authorization: v.authorization,
+		"signature-agent": v.signature_agent,
+	};
+	const bag = headers as Record<string, string | undefined>;
+	for (const name of v.omit_headers ?? []) delete bag[name.toLowerCase()];
+	for (const [name, value] of Object.entries(v.extra_headers ?? {})) bag[name] = value;
+	return headers;
 }
 
-// A resolver that serves the per-hop pubkeys keyed by keyid — the injected
-// boundary the multisig verify face resolves EVERY hop key through.
-function hopResolver(hops: MultisigHop[]): MultisigKeyResolver {
-  const keys: Record<string, Uint8Array<ArrayBuffer>> = {};
-  for (const h of hops) keys[h.keyid] = b64urlToBytes(h.pubkey_b64url);
-  return {
-    resolve(keyid: string | null): Uint8Array<ArrayBuffer> | undefined {
-      return keyid === null ? undefined : keys[keyid];
-    },
-  };
+function verify(v: MultisigChainVector, headers: MultisigVerifyHeaders = headersFor(v)) {
+	return verifyMultisigRequestServer({
+		method: v.method,
+		url: v.url,
+		body: hexToBytes(v.body_hex),
+		headers,
+		resolve: hopResolver(v.hops),
+		now: fixedClock(Math.floor((v.created + v.expires) / 2)),
+		maxSignatures: v.max_signatures,
+	});
 }
 
-const fixedClock = (nowUnix: number) => () => nowUnix;
-
-describe("sdk/ts multisig forwarding-chain append+verify mirrors the Go oracle", () => {
-  const doc = multisigVectors as { vectors: MultisigChainVector[] };
-  const byName = (n: string): MultisigChainVector => {
-    const v = doc.vectors.find((x) => x.name === n);
-    if (!v) throw new Error(`missing vector ${n}`);
-    return v;
-  };
-  const hopAt = (v: MultisigChainVector, i: number): MultisigHop => {
-    const h = v.hops[i];
-    if (!h) throw new Error(`vector ${v.name} missing hop ${i}`);
-    return h;
-  };
-
-  it("vector set covers the positive + every negative chain case", () => {
-    const names = new Set(doc.vectors.map((v) => v.name));
-    expect(names.has("positive_two_hop")).toBe(true);
-    expect(names.has("hop_budget_three_over_two")).toBe(true);
-    expect(names.has("broken_chain_reordered")).toBe(true);
-    expect(names.has("broken_chain_stripped_middle")).toBe(true);
-    expect(names.has("broken_chain_missing_link")).toBe(true);
-    expect(names.has("tampered_predecessor")).toBe(true);
-    // The same chains missing a covered header — which pin WHERE that is noticed
-    // relative to the budget and chain gates, not only that it is.
-    expect(names.has("absent_authorization_two_hop")).toBe(true);
-    expect(names.has("absent_authorization_over_budget")).toBe(true);
-    expect(names.has("absent_signature_agent_reordered")).toBe(true);
-    // How a covered header is READ on a chain: a second field line beside the signed
-    // one, a bag spelled the conventional way, and a chain whose covered value IS the
-    // join of two lines.
-    expect(names.has("duplicate_authorization_two_hop")).toBe(true);
-    expect(names.has("canonical_case_two_hop")).toBe(true);
-    expect(names.has("duplicate_bound_two_hop")).toBe(true);
-  });
-
-  // The header bag a vector describes: the base five, minus what the request does
-  // not carry, plus any extra field line spelled in another case. Extras land AFTER
-  // the base ones so the join order matches the order the oracle added them.
-  const headersFor = (v: MultisigChainVector): MultisigVerifyHeaders => {
-    const headers: MultisigVerifyHeaders = {
-      "content-digest": v.content_digest,
-      "signature-input": v.signature_input,
-      signature: v.signature,
-      authorization: v.authorization,
-      "signature-agent": v.signature_agent,
-    };
-    const bag = headers as Record<string, string | undefined>;
-    for (const name of v.omit_headers ?? []) delete bag[name.toLowerCase()];
-    for (const [name, value] of Object.entries(v.extra_headers ?? {})) {
-      bag[name] = value;
-    }
-    return headers;
-  };
-
-  // POSITIVE: the Go-signed 2-hop chain verifies through the TS face and returns
-  // the verified keyids in chain order (sig1 agent, sig2 broker).
-  it("positive_two_hop verifies and returns keyids in chain order", async () => {
-    const v = byName("positive_two_hop");
-    const now = Math.floor((v.created + v.expires) / 2);
-    const verdict = await verifyMultisigRequestServer({
-      method: v.method,
-      url: v.url,
-      body: hexToBytes(v.body_hex),
-      headers: {
-        "content-digest": v.content_digest,
-        "signature-input": v.signature_input,
-        signature: v.signature,
-        authorization: v.authorization,
-        "signature-agent": v.signature_agent,
-      },
-      resolve: hopResolver(v.hops),
-      now: fixedClock(now),
-    });
-    expect(verdict.valid).toBe(true);
-    expect(verdict.keyids).toEqual(v.expected_keyids);
-  });
-
-  // BYTE-IDENTITY: re-signing the chain live (signRequest sig1 + appendSignature
-  // sig2) under the Go hop seeds reproduces the Go-emitted Signature-Input and
-  // Signature byte-for-byte — the cross-language chain-link contract.
-  // The nonce case also pins each hop's RFC 9421 nonce in the parameter tail.
-  it.each(["positive_two_hop", "positive_two_hop_nonce"])("appendSignature reproduces the Go 2-hop chain byte-identically (%s)", async (name) => {
-    const v = byName(name);
-    const h1 = hopAt(v, 0);
-    const h2 = hopAt(v, 1);
-    const body = hexToBytes(v.body_hex);
-
-    const sig1 = await signRequest(await importSigningKey(h1.seed_hex), {
-      method: v.method,
-      url: v.url,
-      body,
-      authorization: v.authorization,
-      signatureAgent: v.signature_agent,
-      keyid: h1.keyid,
-      created: v.created,
-      expires: v.expires,
-      nonce: h1.nonce ?? "",
-    });
-
-    const chained = await appendSignature(
-      await importSigningKey(h2.seed_hex),
-      { signatureInput: sig1.signatureInput, signature: sig1.signature },
-      {
-        method: v.method,
-        url: v.url,
-        body,
-        authorization: v.authorization,
-        signatureAgent: v.signature_agent,
-        keyid: h2.keyid,
-        created: v.created,
-        expires: v.expires,
-        nonce: h2.nonce ?? "",
-      },
-    );
-
-    expect(chained.signatureInput).toBe(v.signature_input);
-    expect(chained.signature).toBe(v.signature);
-  });
-
-  // N=1 INVARIANT: appending to an unsigned request (empty prev) is byte-identical
-  // to signRequest — the load-bearing single-sig-is-N=1 property.
-  it("appendSignature to an unsigned request equals signRequest (N=1)", async () => {
-    const v = byName("positive_two_hop");
-    const h1 = hopAt(v, 0);
-    const body = hexToBytes(v.body_hex);
-    const opts = {
-      method: v.method,
-      url: v.url,
-      body,
-      authorization: v.authorization,
-      signatureAgent: v.signature_agent,
-      keyid: h1.keyid,
-      created: v.created,
-      expires: v.expires,
-    };
-    const signed = await signRequest(await importSigningKey(h1.seed_hex), opts);
-    const appended = await appendSignature(
-      await importSigningKey(h1.seed_hex),
-      { signatureInput: "", signature: "" },
-      opts,
-    );
-    expect(appended.signatureInput).toBe(signed.signatureInput);
-    expect(appended.signature).toBe(signed.signature);
-  });
-
-  // NEGATIVES: each Go-emitted chain reject case rejects (valid=false) with the
-  // exact taxonomy token, honoring the hop_budget → broken_chain → signature
-  // precedence encoded in the vectors.
-  // The reject and accept cases, DERIVED from the corpus rather than hand-listed. A
-  // hand-written name list is how a vector lands and is never replayed — the corpus grew
-  // the duplicate-header plumbing and sat unexercised because nothing enumerated it.
-  // Every row the emitter adds is now driven the day it is committed.
-  const NEGATIVE = doc.vectors.filter((v) => !v.expected_verified).map((v) => v.name);
-  const POSITIVE = doc.vectors.filter((v) => v.expected_verified).map((v) => v.name);
-
-  for (const name of POSITIVE) {
-    it(`${name} verifies and returns the Go-emitted keyids`, async () => {
-      // Every chain the oracle ACCEPTS verifies here too. The rejects below cannot
-      // stand in for this: a face that refuses everything passes all of them. This is
-      // what catches a reader resolving a covered header to one field line where the
-      // oracle joins, and a reader matching header names case-sensitively.
-      const v = byName(name);
-      const now = Math.floor((v.created + v.expires) / 2);
-      const verdict = await verifyMultisigRequestServer({
-        method: v.method,
-        url: v.url,
-        body: hexToBytes(v.body_hex),
-        headers: headersFor(v),
-        resolve: hopResolver(v.hops),
-        now: fixedClock(now),
-        maxSignatures: v.max_signatures,
-      });
-      expect(verdict.valid, `${name}: ${verdict.reason}`).toBe(true);
-      expect(verdict.keyids).toEqual(v.expected_keyids);
-    });
-  }
-
-  for (const name of NEGATIVE) {
-    it(`${name} rejects with the Go-emitted reason`, async () => {
-      const v = byName(name);
-      const now = Math.floor((v.created + v.expires) / 2);
-      const verdict = await verifyMultisigRequestServer({
-        method: v.method,
-        url: v.url,
-        body: hexToBytes(v.body_hex),
-        headers: headersFor(v),
-        resolve: hopResolver(v.hops),
-        now: fixedClock(now),
-        maxSignatures: v.max_signatures,
-      });
-      expect(verdict.valid).toBe(false);
-      expect(verdict.reason).toBe(v.expected_reason as MultisigRejectReason);
-    });
-  }
-
-  // Entitlement coverage is enforced PER HOP on the multisig path,
-  // mirroring Go's verifySingleSignature (which runs enforceEntitlementCoverage)
-  // being called per hop by VerifyMultisigRequest. A live 2-hop chain — whose
-  // covered set is the FORA required-5 and NEVER commits to x-entitlement-token —
-  // carrying an X-Entitlement-Token header MUST be rejected "signature", exactly
-  // like the single-sig neg_entitlement_uncovered vector. Without threading the
-  // header into the per-hop verify this gate is dead on the multisig path.
-  it("a 2-hop chain carrying an uncovered X-Entitlement-Token header is rejected (signature)", async () => {
-    const v = byName("positive_two_hop");
-    const h1 = hopAt(v, 0);
-    const h2 = hopAt(v, 1);
-    const body = hexToBytes(v.body_hex);
-    const shared = {
-      method: v.method,
-      url: v.url,
-      body,
-      authorization: v.authorization,
-      signatureAgent: v.signature_agent,
-      created: v.created,
-      expires: v.expires,
-    };
-
-    const sig1 = await signRequest(await importSigningKey(h1.seed_hex), {
-      ...shared,
-      keyid: h1.keyid,
-    });
-    const chained = await appendSignature(
-      await importSigningKey(h2.seed_hex),
-      { signatureInput: sig1.signatureInput, signature: sig1.signature },
-      { ...shared, keyid: h2.keyid },
-    );
-
-    const now = Math.floor((v.created + v.expires) / 2);
-    const base = {
-      method: v.method,
-      url: v.url,
-      body,
-      headers: {
-        "content-digest": chained.contentDigest,
-        "signature-input": chained.signatureInput,
-        signature: chained.signature,
-        authorization: v.authorization,
-        "signature-agent": v.signature_agent,
-      },
-      resolve: hopResolver(v.hops),
-      now: fixedClock(now),
-    };
-
-    // Control: without the header the same chain verifies (coverage constraint
-    // only bites when the entitlement header is present).
-    const ok = await verifyMultisigRequestServer(base);
-    expect(ok.valid).toBe(true);
-
-    // With the uncovered entitlement header present, EVERY hop's coverage gate
-    // fires and the chain is rejected "signature".
-    const verdict = await verifyMultisigRequestServer({
-      ...base,
-      headers: {
-        ...base.headers,
-        "x-entitlement-token": "jwt:demo-unsigned-entitlement-token",
-      },
-    });
-    expect(verdict.valid).toBe(false);
-    expect(verdict.reason).toBe("signature");
-  });
-
-  // Per-hop MaxSignatureAge lifetime clamp, enforced on EVERY hop exactly
-  // like the single-sig path (Go enforceCreatedExpires with maxAge, called per
-  // hop). The bound is inclusive: a window equal to it passes, one exceeding it is
-  // rejected "signature"; 0/undefined is unbounded.
-  describe("per-hop MaxSignatureAge clamp on the multisig path", () => {
-    const v = () => byName("positive_two_hop");
-
-    async function verifyWithMaxAge(
-      maxSignatureAge: number | undefined,
-    ): Promise<MultisigRejectReason | "valid"> {
-      const vec = v();
-      const now = Math.floor((vec.created + vec.expires) / 2);
-      const verdict = await verifyMultisigRequestServer({
-        method: vec.method,
-        url: vec.url,
-        body: hexToBytes(vec.body_hex),
-        headers: {
-          "content-digest": vec.content_digest,
-          "signature-input": vec.signature_input,
-          signature: vec.signature,
-          authorization: vec.authorization,
-          "signature-agent": vec.signature_agent,
-        },
-        resolve: hopResolver(vec.hops),
-        now: fixedClock(now),
-        ...(maxSignatureAge !== undefined ? { maxSignatureAge } : {}),
-      });
-      return verdict.valid ? "valid" : (verdict.reason as MultisigRejectReason);
-    }
-
-    it("unbounded (undefined) accepts the chain's declared window", async () => {
-      expect(await verifyWithMaxAge(undefined)).toBe("valid");
-    });
-
-    it("maxAge exactly equal to the window is accepted (inclusive bound)", async () => {
-      const window = v().expires - v().created;
-      expect(await verifyWithMaxAge(window)).toBe("valid");
-    });
-
-    it("maxAge above the window is accepted", async () => {
-      const window = v().expires - v().created;
-      expect(await verifyWithMaxAge(window + 1)).toBe("valid");
-    });
+// signHops replays a vector's hops in order: the first through signRequest, every later
+// one through appendSignature with the hop's coverPrevious, each with its own directory.
+async function signHops(v: MultisigChainVector, authorization: string): Promise<SignedRequest> {
+	const body = hexToBytes(v.body_hex);
+	let signed: SignedRequest | undefined;
+	for (const hop of v.hops) {
+		const opts = {
+			method: v.method,
+			url: v.url,
+			body,
+			authorization,
+			signatureAgent: hop.directory,
+			keyid: hop.keyid,
+			created: v.created,
+			expires: v.expires,
+			nonce: hop.nonce ?? "",
+			coverPrevious: hop.cover_previous ?? false,
+		};
+		const priv = await importSigningKey(hop.seed_hex);
+		signed =
+			signed === undefined
+				? await signRequest(priv, opts)
+				: await appendSignature(
+						priv,
+						{
+							signatureInput: signed.signatureInput,
+							signature: signed.signature,
+							signatureAgent: signed.signatureAgent,
+						},
+						opts,
+					);
+	}
+	if (signed === undefined) throw new Error(`${v.name} has no hops`);
+	return signed;
+}
 
-    it("maxAge below the window rejects the chain (signature)", async () => {
-      const window = v().expires - v().created;
-      expect(await verifyWithMaxAge(window - 1)).toBe("signature");
-    });
-  });
+describe("sdk/ts multi-signature append+verify mirrors the Go oracle", () => {
+	const doc = multisigVectors as { vectors: MultisigChainVector[] };
+	const byName = (n: string): MultisigChainVector => {
+		const v = doc.vectors.find((x) => x.name === n);
+		if (!v) throw new Error(`missing vector ${n}`);
+		return v;
+	};
+
+	it("vector set covers the independent, covering, budget, coverage and directory cases", () => {
+		const names = new Set(doc.vectors.map((v) => v.name));
+		for (const want of [
+			"positive_independent_two",
+			"positive_covering_two",
+			"positive_covering_three",
+			"positive_covering_two_nonce",
+			"hop_budget_three_independent_over_two",
+			"hop_budget_three_covering_over_two",
+			"broken_coverage_reordered",
+			"broken_coverage_stripped",
+			"broken_coverage_without_signature_input",
+			"broken_coverage_missing_component",
+			"wrong_directory_member",
+			"legacy_form_on_two_signatures",
+			"tampered_first_covered",
+			"repointed_second_member",
+			"absent_authorization_over_budget",
+			"absent_signature_agent_reordered",
+			"duplicate_bound_two",
+			"canonical_case_two",
+		]) {
+			expect(names.has(want), want).toBe(true);
+		}
+	});
+
+	// The reject and accept cases, DERIVED from the corpus rather than hand-listed, so
+	// every row the emitter adds is driven the day it is committed.
+	for (const v of doc.vectors.filter((x) => x.expected_verified)) {
+		it(`${v.name} verifies and returns the Go-emitted keyids and directories`, async () => {
+			const verdict = await verify(v);
+			expect(verdict.valid, `${v.name}: ${verdict.reason}`).toBe(true);
+			expect(verdict.keyids).toEqual(v.expected_keyids);
+			expect(verdict.signatureAgents).toEqual(v.expected_directories);
+		});
+	}
+
+	for (const v of doc.vectors.filter((x) => !x.expected_verified)) {
+		it(`${v.name} rejects with the Go-emitted reason`, async () => {
+			const verdict = await verify(v);
+			expect(verdict.valid).toBe(false);
+			expect(verdict.reason).toBe(v.expected_reason as MultisigRejectReason);
+		});
+	}
+
+	// BYTE-IDENTITY: the vectors built only by sign and append, re-signed live under the
+	// Go hop seeds, reproduce Signature-Input, Signature and Signature-Agent byte for
+	// byte. A positive vector's authorization is the value the verifier reads (the join
+	// of its field lines); a negative one was signed before its header was altered. A
+	// reordered vector had its members swapped after signing, so it is not replayed.
+	const RESIGNED = /^(positive_|hop_budget_|absent_|duplicate_|canonical_)/;
+	for (const v of doc.vectors.filter((x) => RESIGNED.test(x.name) && !x.name.endsWith("_reordered"))) {
+		it(`${v.name}: signRequest + appendSignature reproduce the Go headers`, async () => {
+			const authorization = v.expected_verified
+				? (readHeader(headersFor(v), "authorization") ?? "")
+				: v.authorization;
+			const signed = await signHops(v, authorization);
+			expect(signed.signatureInput).toBe(v.signature_input);
+			expect(signed.signature).toBe(v.signature);
+			expect(signed.signatureAgent).toBe(v.signature_agent);
+			expect(signed.contentDigest).toBe(v.content_digest);
+		});
+	}
+
+	it("appendSignature to an unsigned request equals signRequest (N=1)", async () => {
+		const v = byName("positive_independent_two");
+		const h = v.hops[0] as MultisigHop;
+		const opts = {
+			method: v.method,
+			url: v.url,
+			body: hexToBytes(v.body_hex),
+			authorization: v.authorization,
+			signatureAgent: h.directory,
+			keyid: h.keyid,
+			created: v.created,
+			expires: v.expires,
+		};
+		const priv = await importSigningKey(h.seed_hex);
+		const signed = await signRequest(priv, opts);
+		const appended = await appendSignature(priv, { signatureInput: "", signature: "" }, { ...opts, coverPrevious: true });
+		expect(appended).toEqual(signed);
+	});
+
+	it("an append without coverPrevious covers no earlier signature", async () => {
+		const signed = await signHops(byName("positive_independent_two"), "Bearer chain-token");
+		expect(signed.signatureInput).not.toContain('"signature";key=');
+		expect(signed.signatureAgent).toBe('sig1="https://agent.example", sig2="https://broker.example"');
+	});
+
+	it("tampering with the first signature breaks it and every signature covering it", async () => {
+		const v = byName("positive_covering_three");
+		const signature = v.signature.replace(/^sig1=:./, (m) => (m.endsWith("A") ? `${m.slice(0, -1)}B` : `${m.slice(0, -1)}A`));
+		const verdict = await verify(v, { ...headersFor(v), signature });
+		expect(verdict).toEqual({ valid: false, reason: "signature" });
+	});
+
+	describe("appendSignature refuses a label or a Signature-Agent it cannot extend", () => {
+		const v = byName("positive_independent_two");
+		const h = v.hops[1] as MultisigHop;
+		const opts = {
+			method: v.method,
+			url: v.url,
+			body: hexToBytes(v.body_hex),
+			authorization: v.authorization,
+			signatureAgent: h.directory,
+			keyid: h.keyid,
+			created: v.created,
+			expires: v.expires,
+		};
+
+		it("takes the first sigN no signature and no Signature-Agent member uses", async () => {
+			const prior = {
+				signatureInput: v.signature_input.split(", sig2=")[0] as string,
+				signature: v.signature.split(", sig2=")[0] as string,
+				signatureAgent: 'sig1="https://agent.example", sig2="https://other.example"',
+			};
+			const appended = await appendSignature(await importSigningKey(h.seed_hex), prior, opts);
+			expect(appended.signatureInput).toContain(", sig3=(");
+			expect(appended.signatureAgent).toBe(`${prior.signatureAgent}, sig3="https://broker.example"`);
+			await expect(
+				appendSignature(await importSigningKey(h.seed_hex), prior, { ...opts, label: "sig1" }),
+			).rejects.toMatchObject({ reason: "signature_label" });
+		});
+
+		it("refuses to append to the legacy String form, which cannot take a second member", async () => {
+			const prior = {
+				signatureInput: v.signature_input.split(", sig2=")[0] as string,
+				signature: v.signature.split(", sig2=")[0] as string,
+				signatureAgent: '"https://agent.example"',
+			};
+			const err = await appendSignature(await importSigningKey(h.seed_hex), prior, opts).catch((e: unknown) => e);
+			expect(err).toBeInstanceOf(WebBotAuthError);
+			expect((err as WebBotAuthError).reason).toBe("signature_agent_form");
+		});
+	});
+
+	// Entitlement coverage is enforced on EVERY signature: a chain whose covered sets
+	// never commit to x-entitlement-token, carrying that header, is refused and answered
+	// with the Accept-Signature that asks for it.
+	it("a chain carrying an uncovered X-Entitlement-Token header is rejected (signature)", async () => {
+		const v = byName("positive_independent_two");
+		expect((await verify(v)).valid).toBe(true);
+		const verdict = await verify(v, { ...headersFor(v), "x-entitlement-token": "jwt:demo-unsigned-entitlement-token" });
+		expect(verdict.valid).toBe(false);
+		expect(verdict.reason).toBe("signature");
+		expect(verdict.acceptSignature).toContain('"x-entitlement-token")');
+	});
+
+	it("a request carrying no signature is answered with Accept-Signature", async () => {
+		const v = byName("positive_independent_two");
+		const headers = headersFor(v);
+		delete (headers as Record<string, string | undefined>)["signature-input"];
+		const verdict = await verify(v, headers);
+		expect(verdict.reason).toBe("signature");
+		expect(verdict.acceptSignature).toMatch(/^sig1=\(/);
+	});
+
+	// The MaxSignatureAge clamp, enforced on EVERY signature exactly like the single-sig
+	// path. The bound is inclusive; 0/undefined is unbounded.
+	describe("per-signature MaxSignatureAge clamp on the multisig path", () => {
+		const v = byName("positive_independent_two");
+		const window = v.expires - v.created;
+
+		async function verifyWithMaxAge(maxSignatureAge: number | undefined): Promise<MultisigRejectReason | "valid"> {
+			const verdict = await verifyMultisigRequestServer({
+				method: v.method,
+				url: v.url,
+				body: hexToBytes(v.body_hex),
+				headers: headersFor(v),
+				resolve: hopResolver(v.hops),
+				now: fixedClock(Math.floor((v.created + v.expires) / 2)),
+				...(maxSignatureAge !== undefined ? { maxSignatureAge } : {}),
+			});
+			return verdict.valid ? "valid" : (verdict.reason as MultisigRejectReason);
+		}
+
+		it("unbounded (undefined) accepts the chain's declared window", async () => {
+			expect(await verifyWithMaxAge(undefined)).toBe("valid");
+		});
+		it("maxAge exactly equal to the window is accepted (inclusive bound)", async () => {
+			expect(await verifyWithMaxAge(window)).toBe("valid");
+		});
+		it("maxAge below the window rejects the chain (signature)", async () => {
+			expect(await verifyWithMaxAge(window - 1)).toBe("signature");
+		});
+	});
 });
diff --git a/sdk/ts/tests/multisig-parse.edge.test.ts b/sdk/ts/tests/multisig-parse.edge.test.ts
index 1d7c5057..eedb54e9 100644
--- a/sdk/ts/tests/multisig-parse.edge.test.ts
+++ b/sdk/ts/tests/multisig-parse.edge.test.ts
@@ -1,32 +1,26 @@
-// sdk/ts multi-member Signature-Input parser parse-edge units. The canonical Go
-// golden vectors (multisig-chain-vectors.json) are well-
-// behaved (no comma/paren inside a quoted keyid, no backslash escapes, canonical
-// whitespace), so passing every vector does NOT gate the TS parser's correctness
-// on an ADVERSARIAL Signature-Input. Go itself delegates the dictionary parse to
-// dunglas/httpsfv and only hand-rolls the verbatim-inner split (rawInnerByLabel /
-// splitTopLevelMembers). The TS port hand-rolls both, so these parse-edge units
-// are the correct level (parser primitives → unit tests) — they pin the exact
-// quoted-string / backslash-escape / top-level-comma behavior the RFC 8941
-// dictionary grammar requires.
+// sdk/ts Signature-Input / Signature parse-edge units. The canonical Go golden vectors
+// are well-behaved (no comma/paren inside a quoted keyid, no backslash escapes, canonical
+// whitespace), so passing every vector does NOT gate the parser's correctness on an
+// ADVERSARIAL header. Go delegates the dictionary parse to dunglas/httpsfv and only
+// hand-rolls the verbatim-inner split (rawInnerByLabel / splitTopLevelMembers); the TS
+// port parses with core/sfv.ts and keeps the same split, so these units pin the
+// quoted-string / backslash-escape / top-level-comma behavior the RFC 8941 dictionary
+// grammar requires.
 //
-// Faces under test (do NOT exist yet — RED):
-//   core/multisig-parse.ts::splitTopLevelMembers — split one SFV dictionary
-//     header value on TOP-LEVEL commas, honoring quoted strings + backslash
-//     escapes (mirrors Go splitTopLevelMembers).
-//   core/multisig-parse.ts::rawInnerByLabel — the VERBATIM member value after
-//     "label=" for each label (mirrors Go rawInnerByLabel), so each hop's base
-//     terminates with the signer's exact @signature-params bytes.
-//   core/multisig-parse.ts::parseMultisigSignatureInput — full multi-label parse;
-//     returns undefined (clean reject) on a malformed header, never a mis-slice.
-//
-// RED until core/multisig-parse.ts exists.
+// Faces under test:
+//   core/multisig-parse.ts::splitTopLevelMembers — split one SFV dictionary header
+//     value on TOP-LEVEL commas, honoring quoted strings + backslash escapes.
+//   core/multisig-parse.ts::rawInnerByLabel — the VERBATIM member value after "label="
+//     for each label, so each signature's base terminates with the signer's exact
+//     @signature-params bytes.
+//   core/multisig-parse.ts::parseSignatureHeaders — the structured parse of
+//     Signature-Input and Signature; refuses (never mis-slices) a malformed header.
 
 import { describe, it, expect } from "vitest";
-// RED: core/multisig-parse.ts does not exist yet (TDD red step).
 import {
   splitTopLevelMembers,
   rawInnerByLabel,
-  parseMultisigSignatureInput,
+  parseSignatureHeaders,
 } from "../core/multisig-parse.ts";
 
 describe("sdk/ts multi-member Signature-Input parse edges", () => {
@@ -73,9 +67,48 @@ describe("sdk/ts multi-member Signature-Input parse edges", () => {
   });
 
   it("cleanly rejects a malformed header (missing close paren) rather than mis-slicing", () => {
-    // An unterminated inner list must be REJECTED (undefined), not partially
-    // sliced into a bogus covered set.
+    // An unterminated inner list must be REJECTED, not partially sliced into a bogus
+    // covered set.
     const malformed = 'sig1=("@method" "@target-uri";keyid="agent.v1"';
-    expect(parseMultisigSignatureInput([malformed])).toBeUndefined();
+    expect(parseSignatureHeaders(malformed, "sig1=:AAAA:")).toEqual({ ok: false, refusal: { kind: "malformed" } });
+  });
+
+  it("parses a quoted comma and an escaped quote inside a keyid into the right labels", () => {
+    const input = 'sig1=("@method");created=1;keyid="a\\",b", sig2=("@method";key="x");keyid="c,d"';
+    const parsed = parseSignatureHeaders(input, "sig1=:AAAA:, sig2=:AAAA:");
+    expect(parsed.ok).toBe(true);
+    if (!parsed.ok) return;
+    expect(parsed.value.map((p) => [p.label, p.keyid])).toEqual([
+      ["sig1", 'a",b'],
+      ["sig2", "c,d"],
+    ]);
+    expect(parsed.value[1]?.covered).toEqual([{ name: "@method", params: [{ key: "key", value: "x" }] }]);
+    expect(parsed.value[0]?.rawInner).toBe('("@method");created=1;keyid="a\\",b"');
+  });
+
+  it("carries a Boolean component flag such as \"@authority\";req", () => {
+    const parsed = parseSignatureHeaders('sig1=("@authority";req "content-digest");keyid="k"', "sig1=:AAAA:");
+    expect(parsed.ok && parsed.value[0]?.covered[0]).toEqual({ name: "@authority", params: [{ key: "req", value: true }] });
+  });
+
+  it("refuses a member with no keyid, a parameter of the wrong type, or a label missing from Signature", () => {
+    for (const [input, sig] of [
+      ['sig1=("@method");created=1', "sig1=:AAAA:"],
+      ['sig1=("@method");keyid="k";created="1"', "sig1=:AAAA:"],
+      ['sig1=("@method");keyid=k', "sig1=:AAAA:"],
+      ['sig1=("@method");keyid="k"', "sig2=:AAAA:"],
+      ['sig1=("@method");keyid="k"', 'sig1="AAAA"'],
+      ['sig1="not-a-list";keyid="k"', "sig1=:AAAA:"],
+    ]) {
+      expect(parseSignatureHeaders(input, sig), input).toEqual({ ok: false, refusal: { kind: "malformed" } });
+    }
+  });
+
+  it("answers a request missing either header as unsigned, distinct from malformed", () => {
+    expect(parseSignatureHeaders(undefined, "sig1=:AAAA:")).toEqual({ ok: false, refusal: { kind: "unsigned" } });
+    expect(parseSignatureHeaders('sig1=("@method");keyid="k"', undefined)).toEqual({
+      ok: false,
+      refusal: { kind: "unsigned" },
+    });
   });
 });
diff --git a/sdk/ts/tests/pop-control-bytes.regression.test.ts b/sdk/ts/tests/pop-control-bytes.regression.test.ts
index 9b36c3ec..bb3e1a75 100644
--- a/sdk/ts/tests/pop-control-bytes.regression.test.ts
+++ b/sdk/ts/tests/pop-control-bytes.regression.test.ts
@@ -1,4 +1,4 @@
-// The GET-PoP sign face refuses control bytes in the target URI.
+// The delivery-proof sign face refuses control bytes in the target URI.
 //
 // The signature base is line-delimited and the target is written into it verbatim,
 // so a newline would add or split a component line and the signed bytes would stop
@@ -13,6 +13,7 @@
 import { describe, expect, it } from "vitest";
 
 import { signInbound } from "../core/sign.ts";
+import { AGENT_DIRECTORY } from "./wba-fixtures.ts";
 
 const now = () => 1_700_000_000_000;
 
@@ -35,7 +36,7 @@ describe("signInbound refuses control bytes in the target URI", () => {
 		it(`refuses a ${name}`, async () => {
 			const kp = await keypair();
 			await expect(
-				signInbound(kp, url, { now, ttlSec: 300 }),
+				signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, now, ttlSec: 300 }),
 			).rejects.toThrow(/control byte/);
 		});
 	}
@@ -48,7 +49,7 @@ describe("signInbound refuses control bytes in the target URI", () => {
 			"https://cdn.test/a?agent_id=x",
 			"https://cdn.test/a%20b%2Fc",
 		]) {
-			const req = await signInbound(kp, url, { now, ttlSec: 300 });
+			const req = await signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, now, ttlSec: 300 });
 			expect(req.headers.get("signature-input")).toMatch(/^sig1=/);
 		}
 	});
diff --git a/sdk/ts/tests/raw-body.test.ts b/sdk/ts/tests/raw-body.test.ts
index c119f9d8..24f9c38a 100644
--- a/sdk/ts/tests/raw-body.test.ts
+++ b/sdk/ts/tests/raw-body.test.ts
@@ -26,6 +26,7 @@ async function fixture(answer: () => UnaryResponse, opts: ClientOptions = {}) {
 	const peer = signedPeer(KEYID, pub, answer);
 	const options: ClientOptions = {
 		signer: { privKey: keys.privateKey, keyid: KEYID },
+		signatureAgent: "https://agent.test",
 		send: peer.send,
 		guardedSend: peer.send,
 		endpointResolver: ENDPOINTS,
diff --git a/sdk/ts/tests/rawurl-shape.guard.test.ts b/sdk/ts/tests/rawurl-shape.guard.test.ts
index 426d8edb..12da6aae 100644
--- a/sdk/ts/tests/rawurl-shape.guard.test.ts
+++ b/sdk/ts/tests/rawurl-shape.guard.test.ts
@@ -6,14 +6,15 @@ import { describe, expect, it } from "vitest";
 // sweep-verify atom requires a class-level counter-measure so a future edit
 // cannot silently re-introduce the disease the fix eliminated: a URL-consuming
 // SDK boundary that feeds its RAW url parameter into a string-op / @target-uri
-// sink (canonicalMessage/new URL/signatureBase) instead of the opaqueUrl-coerced
+// sink (canonicalMessage/new URL/the signature-base component resolver) instead of the
+// opaqueUrl-coerced
 // value. A URL-like object (Fastly Compute) then either throws (canonicalUrl
 // string ops) or silently WHATWG-normalizes (@target-uri template literal).
 //
 // SCOPE — every URL-consuming SDK face: the verify faces (src/verify.ts,
 // src/pop.ts), the sign faces (src/signurl.ts, core/sign.ts), and the shared
-// 5-component request signature-base sink (core/sign-request.ts, used by BOTH
-// signRequest and verifyRequestServer). signurl.ts:53 canonicalUrl(unsigned) is
+// @target-uri sink of the signature base (core/sign-request.ts requestComponentValue,
+// used by every signer and verifier). signurl.ts:53 canonicalUrl(unsigned) is
 // intentionally NOT guarded: `unsigned` is canonicalUrl's own output, always a
 // primitive string.
 //
@@ -22,7 +23,7 @@ import { describe, expect, it } from "vitest";
 // sweep atom asks for: it pins that the boundary coercion stays in place.
 //
 // The detector is REGEX-based and whitespace-tolerant on purpose: a naive
-// substring like "signatureBase(input.method, input.url" silently stops matching
+// substring like "url: input.url" silently stops matching
 // the moment a formatter wraps the args onto separate lines, so a revert would
 // slip. The "would-be-missed" meta-test below feeds exactly that reformatted
 // variant and asserts the guard still catches it.
@@ -67,9 +68,9 @@ const GUARDS: SiteGuard[] = [
   },
   {
     file: "src/pop.ts",
-    // The raw `input.url` must NOT flow directly into the signature base; the
+    // The raw `input.url` must NOT flow directly into the signature base's request; the
     // boundary must pass the opaqueUrl-coerced local instead.
-    forbidden: [/\bsignatureBase\(\s*[^,]+,\s*input\.url\b/],
+    forbidden: [/\burl\s*:\s*input\.url\b/],
     required: [/\bopaqueUrl\(\s*input\.url\s*\)/],
   },
   {
@@ -83,15 +84,15 @@ const GUARDS: SiteGuard[] = [
     file: "core/sign.ts",
     // The raw `url` must NOT flow into the signature base or the emitted Request;
     // both must consume the opaqueUrl-coerced `target`.
-    forbidden: [/\bsignatureBase\(\s*[^,]+,\s*url\b/, /\bnew Request\(\s*url\b/],
+    forbidden: [/\burl\s*:\s*url\b/, /\bnew Request\(\s*url\b/],
     required: [/\bopaqueUrl\(\s*url\s*\)/],
   },
   {
     file: "core/sign-request.ts",
-    // The shared @target-uri sink (used by BOTH signRequest and verifyRequestServer)
-    // must coerce fields.url, never interpolate it raw.
-    forbidden: [/"@target-uri": \$\{\s*fields\.url\s*\}/],
-    required: [/\bopaqueUrl\(\s*fields\.url\s*\)/],
+    // The shared @target-uri sink (requestComponentValue, used by every signer and
+    // verifier) must coerce req.url, never return it raw.
+    forbidden: [/\breturn\s+req\.url\b/],
+    required: [/\bopaqueUrl\(\s*req\.url\s*\)/],
   },
 ];
 
@@ -106,25 +107,25 @@ describe("raw-URL runtime-shape structural guard", () => {
   const popGuard = GUARDS.find((g) => g.file === "src/pop.ts")!;
 
   it("[meta positive] catches the raw input.url disease", () => {
-    const bad = "const base = signatureBase(input.method, input.url, parsed.rawParams);";
+    const bad = "requestComponentValue({ method: input.method, url: input.url, header })";
     expect(evalSite(bad, popGuard).length).toBeGreaterThan(0);
   });
 
   it("[meta negative] passes the coerced-boundary form", () => {
     const good = [
       "const url = opaqueUrl(input.url);",
-      "const base = signatureBase(input.method, url, parsed.rawParams);",
+      "requestComponentValue({ method: input.method, url, header })",
     ].join("\n");
     expect(evalSite(good, popGuard)).toEqual([]);
   });
 
   it("[meta would-be-missed] catches the reformatted (multiline / no-space) variant a substring guard would slip", () => {
     const reformatted = [
-      "const base = signatureBase(",
-      "  input.method,",
-      "  input.url,",
-      "  parsed.rawParams,",
-      ");",
+      "requestComponentValue({",
+      "  method: input.method,",
+      "  url:input.url,",
+      "  header,",
+      "});",
       "const url = opaqueUrl(input.url);", // required marker present so ONLY the forbidden fires
     ].join("\n");
     const violations = evalSite(reformatted, popGuard);
diff --git a/sdk/ts/tests/rawurl-shape.regression.test.ts b/sdk/ts/tests/rawurl-shape.regression.test.ts
index ee4be5b4..4e9bbca1 100644
--- a/sdk/ts/tests/rawurl-shape.regression.test.ts
+++ b/sdk/ts/tests/rawurl-shape.regression.test.ts
@@ -2,7 +2,8 @@
 //
 // Some edge runtimes (Fastly Compute) hand the request URL as a URL-LIKE OBJECT
 // rather than a primitive string. Both URL-consuming SDK faces — the Ed25519
-// signed-URL verify (src/verify.ts) and the RFC 9421 GET-PoP verify (src/pop.ts)
+// signed-URL verify (src/verify.ts) and the Web Bot Auth delivery-proof verify
+// (src/pop.ts)
 // — assume a primitive string:
 //
 //   - verify.ts feeds the raw input to canonicalUrl(), which performs STRING ops
@@ -28,13 +29,13 @@
 // signature base for the object case diverges from the string case.
 import { describe, it, expect } from "vitest";
 import { verifyEd25519SignedUrl } from "../src/verify.ts";
-import { verifyAgentBinding, signatureBase } from "../src/pop.ts";
+import { verifyAgentBinding } from "../src/pop.ts";
 import { signEd25519SignedUrl } from "../src/signurl.ts";
 import { signRequest } from "../core/sign-request.ts";
 import { verifyRequestServer } from "../core/verify-request.ts";
 import { signInbound } from "../core/sign.ts";
 import { thumbprint } from "../src/thumbprint.ts";
-import { encodeBase64Url, utf8Bytes } from "../src/base64url.ts";
+import { AGENT_DIRECTORY } from "./wba-fixtures.ts";
 
 // A "tricky" URL whose WHATWG-normalized form differs from its verbatim bytes:
 // mixed-case host, explicit default :443, and a %20 in the path. If the SDK ever
@@ -98,20 +99,13 @@ describe("signed-URL verify accepts a Fastly-like URL-like object (verbatim byte
   });
 });
 
-describe("GET-PoP verify accepts a Fastly-like URL-like object (verbatim @target-uri)", () => {
+describe("delivery-proof verify accepts a Fastly-like URL-like object (verbatim @target-uri)", () => {
   it("URL-object input produces a byte-identical signature base and verdict", async () => {
-    const { priv, pubRaw } = await genKeyPair();
+    const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
+    const pubRaw = new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey)) as Uint8Array<ArrayBuffer>;
     const agentId = await thumbprint(pubRaw);
     const url = `${TRICKY_PREFIX}?agent_id=${agentId}&exp=${NOW_SEC + 300}`;
-
-    const rawParams = `("@method" "@target-uri");keyid="${agentId}";alg="ed25519";created=${NOW_SEC};expires=${NOW_SEC + 300}`;
-    const base = signatureBase("GET", url, rawParams);
-    const sig = new Uint8Array(await crypto.subtle.sign("Ed25519", priv, utf8Bytes(base)));
-
-    const headers = new Headers();
-    headers.set("x-fora-agent-key", encodeBase64Url(pubRaw));
-    headers.set("signature-input", `sig1=${rawParams}`);
-    headers.set("signature", `sig1=:${encodeBase64Url(sig)}:`);
+    const headers = (await signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, now: nowMs, ttlSec: 300 })).headers;
 
     // A capturing primitive records the exact signature-base bytes the verifier
     // reconstructs, so we can assert byte-identity between the string and object
@@ -156,7 +150,7 @@ describe("GET-PoP verify accepts a Fastly-like URL-like object (verbatim @target
 // ---------------------------------------------------------------------------
 // Sibling faces: the SAME raw-URL runtime-shape divergence on the SIGN faces
 // (signurl source, signInbound) and the request VERIFY face (verifyRequestServer),
-// which share the buildRequestSignatureBase @target-uri sink. The signurl SIGN
+// which share the requestComponentValue @target-uri sink. The signurl SIGN
 // face carries the fail-on-revert teeth: canonicalUrl's string ops throw on a
 // URL-like object, so its object case is RED until the boundary coerces. The
 // request faces are byte-identity guards (String()===template for the object).
@@ -178,7 +172,7 @@ describe("signed-URL SIGN accepts a Fastly-like URL-like object (verbatim bytes
   });
 });
 
-describe("RFC 9421 5-component request verify accepts a Fastly-like URL-like object", () => {
+describe("RFC 9421 request verify accepts a Fastly-like URL-like object", () => {
   it("URL-object url reaches the SAME verdict as the string url (round-trip through signRequest)", async () => {
     const { priv, pubRaw } = await genKeyPair();
     const keyid = "req-key-1";
@@ -190,7 +184,7 @@ describe("RFC 9421 5-component request verify accepts a Fastly-like URL-like obj
       url,
       body,
       authorization: "",
-      signatureAgent: "",
+      signatureAgent: AGENT_DIRECTORY,
       keyid,
       created: NOW_SEC,
       expires: NOW_SEC + 300,
@@ -200,10 +194,10 @@ describe("RFC 9421 5-component request verify accepts a Fastly-like URL-like obj
       "signature-input": signed.signatureInput,
       signature: signed.signature,
       authorization: "",
-      "signature-agent": "",
+      "signature-agent": signed.signatureAgent,
     };
     const resolve = {
-      resolve: (kid: string | null) => (kid === keyid ? pubRaw : undefined),
+      resolve: (kid: string) => (kid === keyid ? pubRaw : undefined),
     };
     const base = {
       method: "GET",
@@ -225,7 +219,7 @@ describe("RFC 9421 5-component request verify accepts a Fastly-like URL-like obj
   });
 });
 
-describe("inbound GET-PoP SIGN accepts a Fastly-like URL-like object", () => {
+describe("inbound delivery-proof SIGN accepts a Fastly-like URL-like object", () => {
   it("URL-object url produces a request that verifies identically to the string url", async () => {
     const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, [
       "sign",
@@ -237,7 +231,7 @@ describe("inbound GET-PoP SIGN accepts a Fastly-like URL-like object", () => {
     const agentId = await thumbprint(pubRaw);
     const url = `${TRICKY_PREFIX}?agent_id=${agentId}`;
 
-    const opts = { now: nowMs, ttlSec: 300 };
+    const opts = { signatureAgent: AGENT_DIRECTORY, now: nowMs, ttlSec: 300 };
     const fromString = await signInbound(kp, url, opts);
     const fromObject = await signInbound(kp, new FastlyLikeUrl(url) as unknown as string, opts);
 
diff --git a/sdk/ts/tests/resolvers-harness.ts b/sdk/ts/tests/resolvers-harness.ts
index 7554c854..fd844cd6 100644
--- a/sdk/ts/tests/resolvers-harness.ts
+++ b/sdk/ts/tests/resolvers-harness.ts
@@ -5,16 +5,20 @@
 // exercise them against a REAL in-process node:http server on 127.0.0.1:0 — never
 // a mocked fetch. The resolvers use their default global-fetch transport; only
 // the clock (and the poll timer/seams) are injected for determinism. This module
-// stands up that real origin and mints real Ed25519 keys; it imports ONLY the
-// existing byte-parity-pinned SDK primitives (thumbprint, base64url), never the
-// not-yet-existing resolver faces — so a RED run points at the missing faces, not
-// at this fixture.
+// stands up that real origin and mints real Ed25519 keys.
+//
+// A key directory is served under the Web Bot Auth profile: its own media type and a
+// response signed by every key it lists, for the authority it was fetched from. Every
+// key this harness mints is registered by its public half, and the origin signs a
+// served directory with the registered keys it lists. A listed key nobody registered
+// is left unsigned, which a resolver treats as absent.
 
-import { generateKeyPairSync } from "node:crypto";
 import { createServer, type Server } from "node:http";
 import type { AddressInfo } from "node:net";
 
 import { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
+import { signDirectoryResponse } from "../core/directory-response.ts";
+import { WBA_DIRECTORY_MEDIA_TYPE } from "../resolvers/documents.ts";
 import { decodeBase64Url } from "../src/base64url.ts";
 import { thumbprint } from "../src/thumbprint.ts";
 import { WellKnownManifestVersion } from "../src/wire.ts";
@@ -28,22 +32,85 @@ export const REVOCATION_PATH = "/.well-known/fora-key-revocations.json";
 export const MANIFEST_PATH = "/.well-known/fora.json";
 export const JWKS_PATH = "/keys.json";
 
-/** A real Ed25519 key: raw 32-byte public key, its base64url `x`, and its RFC
- * 7638 thumbprint (the WBA keyid). Produced through the SDK's own thumbprint
- * primitive so lookups match the port byte-for-byte. */
+/** A real Ed25519 key: raw 32-byte public key, its base64url `x`, its RFC 7638
+ * thumbprint (the WBA keyid), and the private key a served directory is signed with.
+ * Produced through the SDK's own thumbprint primitive so lookups match the port
+ * byte-for-byte. */
 export interface TestKey {
 	rawPub: Uint8Array;
 	x: string;
 	tp: string;
+	privKey: CryptoKey;
+}
+
+// Every key the harness minted, by its base64url public half, so a served directory is
+// signed by the keys it lists.
+const registered = new Map<string, TestKey>();
+
+async function register(privKey: CryptoKey, x: string): Promise<TestKey> {
+	const raw = decodeBase64Url(x);
+	if (!raw) throw new Error("harness: could not decode JWK x");
+	const key = { rawPub: raw, x, tp: await thumbprint(raw), privKey };
+	registered.set(x, key);
+	return key;
 }
 
-/** Mint a fresh Ed25519 key via node:crypto and derive its SDK thumbprint. */
+/** Mint a fresh Ed25519 key, derive its SDK thumbprint, and register it. */
 export async function makeKey(): Promise<TestKey> {
-	const { publicKey } = generateKeyPairSync("ed25519");
-	const jwk = publicKey.export({ format: "jwk" }) as { x: string };
-	const raw = decodeBase64Url(jwk.x);
-	if (!raw) throw new Error("harness: could not decode generated JWK x");
-	return { rawPub: raw, x: jwk.x, tp: await thumbprint(raw) };
+	const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
+	const jwk = await crypto.subtle.exportKey("jwk", kp.publicKey);
+	return register(kp.privateKey, jwk.x ?? "");
+}
+
+/** Register the key a 32-byte Ed25519 seed derives, for a directory another oracle
+ * minted from a fixed seed. */
+export async function registerSeed(seed: Uint8Array): Promise<TestKey> {
+	const prefix = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20]);
+	const der = new Uint8Array(prefix.length + seed.length);
+	der.set(prefix, 0);
+	der.set(seed, prefix.length);
+	const priv = await crypto.subtle.importKey("pkcs8", der, { name: "Ed25519" }, true, ["sign"]);
+	const jwk = await crypto.subtle.exportKey("jwk", priv);
+	return register(priv, jwk.x ?? "");
+}
+
+// The response-signature window: wide enough to contain every injected test clock.
+const RESPONSE_CREATED = 1;
+const RESPONSE_EXPIRES = 2 ** 40;
+
+/** The headers a key directory response carries: the profile's media type and a
+ * response signature by each listed key the harness registered (all of them, or only
+ * those whose `x` is in `signedBy`), for `authority`. */
+export async function signedDirectoryHeaders(
+	authority: string,
+	body: string,
+	signedBy?: readonly string[],
+): Promise<Record<string, string>> {
+	const headers: Record<string, string> = { "content-type": WBA_DIRECTORY_MEDIA_TYPE };
+	let listed: string[] = [];
+	try {
+		const doc = JSON.parse(body) as { keys?: Array<{ x?: string }> };
+		listed = (doc.keys ?? []).map((k) => k.x ?? "");
+	} catch {
+		return headers;
+	}
+	const signers = listed
+		.filter((x) => signedBy === undefined || signedBy.includes(x))
+		.map((x) => registered.get(x))
+		.filter((k): k is TestKey => k !== undefined)
+		.map((k) => ({ privKey: k.privKey, keyid: k.tp }));
+	if (signers.length === 0) return headers;
+	const sig = await signDirectoryResponse(
+		authority,
+		new TextEncoder().encode(body) as Uint8Array<ArrayBuffer>,
+		signers,
+		RESPONSE_CREATED,
+		RESPONSE_EXPIRES,
+	);
+	headers["content-digest"] = sig.contentDigest;
+	headers["signature-input"] = sig.signatureInput;
+	headers.signature = sig.signature;
+	return headers;
 }
 
 /** One JWK member of a WBA directory, snake_case exactly as the Go oracle emits
@@ -102,6 +169,7 @@ export function manifestJson(endpoint?: string, ver: string | null = WellKnownMa
 
 interface OriginState {
 	wba?: string;
+	wbaSignedBy?: readonly string[] | undefined;
 	wbaStatus: number;
 	wbaHits: number;
 	rev?: string;
@@ -119,7 +187,9 @@ interface OriginState {
 export interface Origin {
 	url: string;
 	host: string;
-	setWBA(body: string): void;
+	/** Serve `body` as the key directory, signed by every listed registered key, or only
+	 * by those whose `x` is in `signedBy`. */
+	setWBA(body: string, signedBy?: readonly string[]): void;
 	setWBAStatus(code: number): void;
 	wbaHits(): number;
 	setRevocation(body: string): void;
@@ -181,8 +251,15 @@ export async function startOrigin(): Promise<Origin> {
 			res.end();
 			return;
 		}
-		res.writeHead(hit.code, { "content-type": "application/json" });
-		res.end(hit.body);
+		if (path !== WBA_DIR_PATH || hit.code !== 200) {
+			res.writeHead(hit.code, { "content-type": "application/json" });
+			res.end(hit.body);
+			return;
+		}
+		void signedDirectoryHeaders(req.headers.host ?? "", hit.body, state.wbaSignedBy).then((headers) => {
+			res.writeHead(200, headers);
+			res.end(hit.body);
+		});
 	});
 	await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
 	const addr = server.address() as AddressInfo;
@@ -191,8 +268,9 @@ export async function startOrigin(): Promise<Origin> {
 	return {
 		url,
 		host,
-		setWBA: (b) => {
+		setWBA: (b, signedBy) => {
 			state.wba = b;
+			state.wbaSignedBy = signedBy;
 		},
 		setWBAStatus: (c) => {
 			state.wbaStatus = c;
diff --git a/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts b/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
index 5da76269..f729de34 100644
--- a/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
+++ b/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
@@ -9,11 +9,16 @@
 // harness), resolves the prime thumbprint to prime the snapshot, then asserts
 // `revoked(tp)` matches the oracle for EVERY case — including the load-bearing
 // directory-absent-but-revoked → true, which is the whole point of the accessor.
+//
+// The directory is served signed by its key, as the profile requires: the Go emitter
+// derives that key from the fixed seed "present.v1" (zero-padded to 32 bytes), so the
+// harness registers the same seed.
 import { afterEach, describe, expect, it } from "vitest";
 import vector from "../../go/resolvers/testdata/revocation-membership-vectors.json";
 import { createWBAKeyResolver } from "../resolvers/index.ts";
 import {
 	type Origin,
+	registerSeed,
 	revocationJson,
 	startOrigin,
 	wbaFileJson,
@@ -48,6 +53,10 @@ describe("sdk/ts revoked() matches the sdk/go revocation-membership oracle", ()
 	});
 
 	it("reproduces the oracle verdict for every labelled case", async () => {
+		const seed = new Uint8Array(32);
+		seed.set(new TextEncoder().encode("present.v1"));
+		const present = await registerSeed(seed);
+		expect(vec.directory_keys.map((k) => k.x)).toEqual([present.x]);
 		origin = await startOrigin();
 		const keys = vec.directory_keys.map((k) =>
 			wbaJwk(k.x, k.not_before, k.not_after),
diff --git a/sdk/ts/tests/resolvers-wba.integration.test.ts b/sdk/ts/tests/resolvers-wba.integration.test.ts
index 2fac1be8..5ad70f87 100644
--- a/sdk/ts/tests/resolvers-wba.integration.test.ts
+++ b/sdk/ts/tests/resolvers-wba.integration.test.ts
@@ -13,8 +13,14 @@
 //
 // RED CONTRACT: ../resolvers/index.ts does not exist yet — the file is RED on the
 // missing faces, not on a fixture error.
+import { createServer } from "node:http";
+import type { AddressInfo } from "node:net";
+
 import { afterEach, describe, expect, it } from "vitest";
 
+import { appendSignature, signRequest } from "../core/sign-request.ts";
+import { verifyMultisigRequestServer } from "../core/verify-multisig-request.ts";
+
 import {
 	ANCHOR_MS,
 	HOUR_MS,
@@ -26,6 +32,7 @@ import {
 	wbaFileJson,
 	wbaJwk,
 	loopbackFetch,
+	signedDirectoryHeaders,
 } from "./resolvers-harness.ts";
 
 // RED: the WBA face and its typed sentinels do not exist yet.
@@ -34,7 +41,9 @@ import {
 	KeyExpired,
 	KeyRevoked,
 	createWBAKeyResolver,
+	createWBAOfferDirectoryFetch,
 	RevocationUnevaluated,
+	WBA_DIRECTORY_MEDIA_TYPE,
 	WBA_DIRECTORY_PATH,
 } from "../resolvers/index.ts";
 import type { FetchLike } from "../resolvers/http.ts";
@@ -373,9 +382,12 @@ describe("the WBA revocation anchor wrapper", () => {
 		const fetch: FetchLike = async (url) => {
 			seen.push(url);
 			if (url.includes(WBA_DIRECTORY_PATH)) {
+				// Listing no key, the directory has nothing to sign; it still carries the
+				// profile's media type.
 				return {
 					status: 200,
 					text: async () => JSON.stringify({ keys: [], revocation_url: revocationURL }),
+					headers: { get: (name: string) => (name === "content-type" ? WBA_DIRECTORY_MEDIA_TYPE : null) },
 				};
 			}
 			return {
@@ -413,3 +425,147 @@ describe("the WBA revocation anchor wrapper", () => {
 		expect(await polled("a.example:8443", "http://a.example:9443/rev.json")).toEqual([]);
 	});
 });
+
+// The Web Bot Auth profile at the resolver (ported from Go
+// wbakeyresolver_profile_test.go): a directory is fetched with no redirect, must be
+// served as WBA_DIRECTORY_MEDIA_TYPE, and only the keys that signed its response are
+// handed out; each signature is resolved in the directory its own member names.
+describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
+	let origins: Array<{ close(): Promise<void> }> = [];
+	afterEach(async () => {
+		for (const o of origins) await o.close();
+		origins = [];
+	});
+
+	it("hands out only the keys that signed the response", async () => {
+		const signed = await makeKey();
+		const unsigned = await makeKey();
+		const origin = await startOrigin();
+		origins.push(origin);
+		origin.setWBA(wbaFileJson([activeJwk(signed.x), activeJwk(unsigned.x)]), [signed.x]);
+
+		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		expect(await r.resolve(signed.tp, origin.host)).toEqual(signed.rawPub);
+		expect(await r.resolve(unsigned.tp, origin.host)).toBeUndefined();
+	});
+
+	it("the offer-directory fetch keeps only the signing keys, and refuses an unsigned directory", async () => {
+		const signed = await makeKey();
+		const unsigned = await makeKey();
+		const origin = await startOrigin();
+		origins.push(origin);
+		const port = origin.host.split(":")[1] ?? "";
+		const fetchDir = createWBAOfferDirectoryFetch({ fetch: loopbackFetch, scheme: "http", port });
+
+		origin.setWBA(wbaFileJson([activeJwk(signed.x), activeJwk(unsigned.x)]), [signed.x]);
+		expect((await fetchDir("127.0.0.1"))?.keys?.map((k) => k.x)).toEqual([signed.x]);
+
+		origin.setWBA(wbaFileJson([activeJwk(signed.x)]), []);
+		expect(await fetchDir("127.0.0.1")).toBeUndefined();
+	});
+
+	it("refuses a directory with no response signature at all", async () => {
+		const k = await makeKey();
+		const origin = await startOrigin();
+		origins.push(origin);
+		origin.setWBA(wbaFileJson([activeJwk(k.x)]), []);
+		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		await expect(r.resolve(k.tp, origin.host)).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("refuses a directory served under another media type, application/jwk-set+json included", async () => {
+		const k = await makeKey();
+		const body = wbaFileJson([activeJwk(k.x)]);
+		const fetch: FetchLike = async (url) => {
+			const headers = await signedDirectoryHeaders(new URL(url).host, body);
+			headers["content-type"] = "application/jwk-set+json";
+			return { status: 200, text: async () => body, headers: { get: (n: string) => headers[n] ?? null } };
+		};
+		const r = createWBAKeyResolver({ scheme: "http", fetch, now: () => ANCHOR_MS });
+		await expect(r.resolve(k.tp, "a.example")).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("never follows a redirect to a directory, whether or not the transport honours the request", async () => {
+		const k = await makeKey();
+		const target = await startOrigin();
+		origins.push(target);
+		target.setWBA(wbaFileJson([activeJwk(k.x)]));
+		const redirecting = createServer((_req, res) => {
+			res.writeHead(302, { location: `${target.url}${WBA_DIRECTORY_PATH}` });
+			res.end();
+		});
+		await new Promise<void>((resolve) => redirecting.listen(0, "127.0.0.1", resolve));
+		origins.push({ close: () => new Promise<void>((resolve) => redirecting.close(() => resolve())) });
+		const host = `127.0.0.1:${(redirecting.address() as AddressInfo).port}`;
+
+		// The global fetch honours redirect: "manual" and answers the 302 itself.
+		const honouring = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		await expect(honouring.resolve(k.tp, host)).rejects.toBeInstanceOf(DirectoryUnavailable);
+
+		// A transport that follows anyway is caught by the response it reports.
+		const following: FetchLike = async (url) => {
+			const resp = await globalThis.fetch(url);
+			return {
+				status: resp.status,
+				redirected: resp.redirected,
+				text: () => resp.text(),
+				headers: resp.headers,
+				arrayBuffer: () => resp.arrayBuffer(),
+			};
+		};
+		const ignoring = createWBAKeyResolver({ scheme: "http", fetch: following, now: () => ANCHOR_MS });
+		await expect(ignoring.resolve(k.tp, host)).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("resolves each signature in its own signer's directory", async () => {
+		const agentKey = await makeKey();
+		const brokerKey = await makeKey();
+		const agentOrigin = await startOrigin();
+		const brokerOrigin = await startOrigin();
+		origins.push(agentOrigin, brokerOrigin);
+		agentOrigin.setWBA(wbaFileJson([longJwk(agentKey.x)]));
+		brokerOrigin.setWBA(wbaFileJson([longJwk(brokerKey.x)]));
+		const agentDir = `https://${agentOrigin.host}`;
+		const brokerDir = `https://${brokerOrigin.host}`;
+
+		const body = new TextEncoder().encode('{"q":1}') as Uint8Array<ArrayBuffer>;
+		const created = Math.floor(ANCHOR_MS / 1000);
+		const base = { method: "POST", url: "https://exchange.example/x", body, authorization: "", created, expires: created + 300 };
+		const sig1 = await signRequest(agentKey.privKey, { ...base, signatureAgent: agentDir, keyid: agentKey.tp });
+		const prior = { signatureInput: sig1.signatureInput, signature: sig1.signature, signatureAgent: sig1.signatureAgent };
+		const sig2 = await appendSignature(brokerKey.privKey, prior, { ...base, signatureAgent: brokerDir, keyid: brokerKey.tp });
+
+		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const asked: string[] = [];
+		const resolve = {
+			resolve: async (keyid: string, directory: string) => {
+				asked.push(`${directory} ${keyid}`);
+				return (await r.resolve(keyid, directory)) as Uint8Array<ArrayBuffer> | undefined;
+			},
+		};
+		const verify = (signatureAgent: string) =>
+			verifyMultisigRequestServer({
+				...base,
+				headers: {
+					"content-digest": sig2.contentDigest,
+					"signature-input": sig2.signatureInput,
+					signature: sig2.signature,
+					authorization: "",
+					"signature-agent": signatureAgent,
+				},
+				resolve,
+				now: () => created + 10,
+			});
+		expect(await verify(sig2.signatureAgent)).toEqual({
+			valid: true,
+			keyids: [agentKey.tp, brokerKey.tp],
+			signatureAgents: [agentDir, brokerDir],
+		});
+		expect(asked).toEqual([`${agentDir} ${agentKey.tp}`, `${brokerDir} ${brokerKey.tp}`]);
+		// Swap the members: each signature now names the other signer's directory, where
+		// its key is not published, and the first lookup there finds nothing.
+		asked.length = 0;
+		expect(await verify(`sig1="${brokerDir}", sig2="${agentDir}"`)).toEqual({ valid: false, reason: "signature" });
+		expect(asked).toEqual([`${brokerDir} ${agentKey.tp}`]);
+	});
+});
diff --git a/sdk/ts/tests/server-verify.smoke.test.ts b/sdk/ts/tests/server-verify.smoke.test.ts
index 522a7540..f55d997d 100644
--- a/sdk/ts/tests/server-verify.smoke.test.ts
+++ b/sdk/ts/tests/server-verify.smoke.test.ts
@@ -1,7 +1,7 @@
 // sdk/ts server-verify (Hono) binding smoke.
 //
 // Edge (src/edge/src/app.ts) is a SERVER/VERIFIER: it verifies inbound Ed25519
-// signed-URLs and RFC 9421 GET-PoP agent-bindings and returns 403/deny. It is the
+// signed-URLs and Web Bot Auth delivery-proof agent-bindings and denies a refusal. It is the
 // ONLY in-repo TS consumer this ticket ships a binding for. This smoke drives an
 // inbound signed request through the opt-in sdk/ts server/verify binding (a thin
 // Hono middleware over sdk/ts/core's verify seam) and asserts the verdict comes
@@ -12,10 +12,13 @@
 // covered by the L1 parity suites. This smoke pins the BINDING WIRING: a genuinely
 // signed inbound request passes; an unsigned/forged one is denied, and the guarded
 // handler never runs on the negative path (fail-closed, mirroring the Go
-// connectserver verify middleware).
+// connectserver verify middleware). A refusal the agent can fix by signing again is
+// answered 401 with Accept-Signature; any other refusal is 403.
 //
 import { describe, it, expect } from "vitest";
 import { foraVerify } from "../hono/middleware.ts";
+import { POP_ACCEPT_SIGNATURE } from "../src/pop.ts";
+import { AGENT_DIRECTORY } from "./wba-fixtures.ts";
 
 // A trivial WebCrypto Ed25519 keypair helper — the binding's verify primitive is
 // WebCrypto by default (the same primitive the L1 pop/verify helpers use). The
@@ -73,7 +76,7 @@ describe("sdk/ts Hono server-verify binding (Edge's real consumer)", () => {
 });
 
 describe("sdk/ts Hono server-verify binding — takes no key resolver", () => {
-  // These two cases pin that the binding takes no key resolver: the GET-PoP path
+  // These two cases pin that the binding takes no key resolver: the delivery-proof path
   // is self-verifying via the presented key, so ForaVerifyOptions deliberately
   // has no resolver field (one existed once, was never read, and misled a
   // consumer assessment — these cases keep it from growing back unread).
@@ -117,10 +120,49 @@ describe("sdk/ts Hono server-verify binding — takes no key resolver", () => {
   });
 });
 
-// signInboundRequest produces a genuinely RFC 9421 GET-PoP-signed inbound Request
-// the binding must accept. Its body reuses the L1 sign path via sdk/ts/core's
+describe("sdk/ts Hono server-verify binding — Accept-Signature on a fixable refusal", () => {
+  async function denied(edit: (h: Headers) => void): Promise<Response | undefined> {
+    const signed = await signInboundRequest(await generateAgentKey());
+    const headers = new Headers(signed.headers);
+    edit(headers);
+    const ctx = {
+      req: { raw: new Request(signed.url, { method: "GET", headers }) },
+      res: undefined as Response | undefined,
+    };
+    let reachedHandler = false;
+    await foraVerify({})(ctx, async () => {
+      reachedHandler = true;
+    });
+    expect(reachedHandler).toBe(false);
+    return ctx.res;
+  }
+
+  it("a presented key with no signature is answered 401 with Accept-Signature", async () => {
+    const res = await denied((h) => {
+      h.delete("signature-input");
+      h.delete("signature");
+    });
+    expect(res?.status).toBe(401);
+    expect(res?.headers.get("Accept-Signature")).toBe(POP_ACCEPT_SIGNATURE);
+  });
+
+  it("a proof whose Signature-Agent is the bare v1.0.8 value is answered 401 with Accept-Signature", async () => {
+    const res = await denied((h) => h.set("signature-agent", AGENT_DIRECTORY));
+    expect(res?.status).toBe(401);
+    expect(res?.headers.get("Accept-Signature")).toBe(POP_ACCEPT_SIGNATURE);
+  });
+
+  it("a forged signature is answered 403 with no Accept-Signature", async () => {
+    const res = await denied((h) => h.set("signature", "sig1=:" + "A".repeat(86) + "==:"));
+    expect(res?.status).toBe(403);
+    expect(res?.headers.get("Accept-Signature")).toBeNull();
+  });
+});
+
+// signInboundRequest produces a Web Bot Auth delivery-proof-signed inbound Request the
+// binding must accept. Its body reuses the L1 sign path via sdk/ts/core's
 // sign-over-Fetch-Request seam.
 async function signInboundRequest(_kp: CryptoKeyPair): Promise<Request> {
   const { signInbound } = await import("../core/sign.ts");
-  return signInbound(_kp, "https://edge.example/fora.v1/resource");
+  return signInbound(_kp, "https://edge.example/fora.v1/resource", { signatureAgent: AGENT_DIRECTORY });
 }
diff --git a/sdk/ts/tests/sfv.test.ts b/sdk/ts/tests/sfv.test.ts
new file mode 100644
index 00000000..e07432d7
--- /dev/null
+++ b/sdk/ts/tests/sfv.test.ts
@@ -0,0 +1,92 @@
+// Unit tests for the RFC 8941 structured-field parser and serializer (core/sfv.ts), a
+// parser and so a permitted unit-test target. The profile suites reach it through
+// Signature-Input, Signature and Signature-Agent; these pin the grammar edges the
+// Go-emitted vectors are too well-behaved to reach.
+
+import { describe, expect, it } from "vitest";
+import { parseDictionary, parseItem, serializeMember } from "../core/sfv.ts";
+
+describe("RFC 8941 dictionary parsing", () => {
+	it("parses members, inner lists, parameters and every bare-item type", () => {
+		const dict = parseDictionary('a=1, b=-2.5, c="s\\"q", d=tok/en:x, e=:AQID:, f=?0, g, h=(1 "x";p);q=*t');
+		expect(dict).toBeDefined();
+		const get = (k: string) => dict?.get(k);
+		expect(get("a")).toMatchObject({ kind: "item", value: { type: "integer", value: 1 } });
+		expect(get("b")).toMatchObject({ kind: "item", value: { type: "decimal", value: -2.5 } });
+		expect(get("c")).toMatchObject({ kind: "item", value: { type: "string", value: 's"q' } });
+		expect(get("d")).toMatchObject({ kind: "item", value: { type: "token", value: "tok/en:x" } });
+		expect(get("e")).toMatchObject({ kind: "item", value: { type: "bytes", value: Uint8Array.from([1, 2, 3]) } });
+		expect(get("f")).toMatchObject({ kind: "item", value: { type: "boolean", value: false } });
+		expect(get("g")).toMatchObject({ kind: "item", value: { type: "boolean", value: true } });
+		expect(get("h")?.kind).toBe("inner-list");
+	});
+
+	it("keeps the first position and the last value of a repeated key", () => {
+		const dict = parseDictionary('a=1, b=2, a=3');
+		expect([...(dict?.keys() ?? [])]).toEqual(["a", "b"]);
+		expect(dict?.get("a")).toMatchObject({ value: { value: 3 } });
+	});
+
+	it("tolerates optional whitespace around commas and leading spaces", () => {
+		expect(parseDictionary('  a=1 ,\tb=2')?.size).toBe(2);
+	});
+
+	it("refuses what is not a dictionary", () => {
+		for (const bad of [
+			"a=1,", // trailing comma
+			"A=1", // uppercase key
+			'a="unterminated',
+			'a="bad \\x escape"',
+			"a=(1 2", // unterminated inner list
+			"a=(1 2)x",
+			"a=:not base64!:",
+			"a=?2",
+			"a=1234567890123456", // integer longer than 15 digits
+			"a=1.2345", // decimal with more than three fractional digits
+			"a=1.",
+			"a=1 b=2", // missing comma
+			'"https://agent.example"',
+			"https://agent.example",
+		]) {
+			expect(parseDictionary(bad), bad).toBeUndefined();
+		}
+	});
+
+	it("parses an empty field as an empty dictionary", () => {
+		expect(parseDictionary("")?.size).toBe(0);
+	});
+});
+
+describe("RFC 8941 item parsing", () => {
+	it("tells a String from the Token that spells the same characters", () => {
+		expect(parseItem('"https://agent.example"')?.value).toEqual({ type: "string", value: "https://agent.example" });
+		expect(parseItem("https://agent.example")?.value).toEqual({ type: "token", value: "https://agent.example" });
+	});
+
+	it("refuses trailing content", () => {
+		expect(parseItem('"a" "b"')).toBeUndefined();
+		expect(parseItem('"a", "b"')).toBeUndefined();
+	});
+});
+
+describe("RFC 8941 serialization", () => {
+	it("re-serializes a parsed member canonically, whatever its spacing", () => {
+		const dict = parseDictionary('sig1=(  "@method"   "signature-agent";key="sig1"  );created=1;keyid="k";req, b="x";type=directory');
+		const sig1 = dict?.get("sig1");
+		const b = dict?.get("b");
+		if (sig1 === undefined || b === undefined) throw new Error("parse failed");
+		expect(serializeMember(sig1)).toBe('("@method" "signature-agent";key="sig1");created=1;keyid="k";req');
+		expect(serializeMember(b)).toBe('"x";type=directory');
+	});
+
+	it("escapes quotes and backslashes in a String and pads a Byte Sequence", () => {
+		const dict = parseDictionary('a="q\\"\\\\", b=:AQ==:, c=-1.5');
+		expect(serializeMember(dict?.get("a") ?? fail())).toBe('"q\\"\\\\"');
+		expect(serializeMember(dict?.get("b") ?? fail())).toBe(":AQ==:");
+		expect(serializeMember(dict?.get("c") ?? fail())).toBe("-1.5");
+	});
+});
+
+function fail(): never {
+	throw new Error("member missing");
+}
diff --git a/sdk/ts/tests/sign-request.parity.test.ts b/sdk/ts/tests/sign-request.parity.test.ts
index deac9dc5..f426f5c7 100644
--- a/sdk/ts/tests/sign-request.parity.test.ts
+++ b/sdk/ts/tests/sign-request.parity.test.ts
@@ -1,195 +1,106 @@
-// sdk/ts outbound RFC 9421 request-SIGN byte-parity against the shared Go oracle.
+// sdk/ts outbound RFC 9421 request-SIGN byte-parity against the shared Go oracle, under
+// the Web Bot Auth profile.
 //
-// Go (helpers.SignRequest + buildSignatureBase) and Python (httpsig.sign_request)
-// already sign the full 5-component FORA covered set
-// (@method @target-uri content-digest authorization signature-agent); sdk/ts has
-// no outbound request signer yet (core/sign.ts::signInbound covers only the
-// 2-component GET PoP). This suite pins the not-yet-existing TS 5-component
-// signer byte-identical to the SAME oracle vectors the Go/Python ports verify
-// against — so a signature produced in TS verifies unchanged at every Go/Python
-// broker/exchange.
-//
-// Byte contract (Go oracle = sdk/go/helpers/sign.go::SignRequest +
-// sdk/go/helpers/sigbase.go::buildSignatureBase; mirrored by Python
-// fora_sdk/httpsig.py::sign_request):
-//   - covered set is EXACTLY the 5 components in order
-//     @method @target-uri content-digest authorization signature-agent
-//     (no conditional biscuit component);
+// Byte contract (Go oracle = sdk/go/helpers/sign.go::SignRequest / AppendSignature +
+// sigbase.go::buildSignatureBase):
+//   - covered set is @method @target-uri content-digest authorization and the
+//     signature's own member "signature-agent";key="sig1", whose base line carries the
+//     member's serialized value `"<origin>"`;
+//   - parameters are created, expires, keyid, alg, nonce (when set), tag="web-bot-auth";
 //   - Content-Digest = `sha-256=:<STANDARD-base64(SHA-256(body))>:`;
-//   - authorization + signature-agent are ALWAYS bound — an empty string still
-//     renders as `"authorization": ` with a trailing space then newline (the
-//     empty-bind case is a distinct vector; a `.trim()` would corrupt it);
-//   - the base joins lines with `\n`, `@signature-params` last, NO trailing
-//     newline; Signature-Input = `sig1=` + that inner; Signature =
-//     `sig1=:<STANDARD-base64(sig)>:` (NOT b64url-nopad — do not unify with the
-//     thumbprint encoding);
+//   - authorization is ALWAYS bound — an empty string still renders as
+//     `"authorization": ` with the trailing space (a `.trim()` would corrupt it);
+//   - Signature-Agent is emitted as the one-member dictionary sig1="<origin>";
 //   - created/expires are INJECTED (no wall clock).
 //
-// RED until sdk/ts/core/sign-request.ts exists; the implement step adds it. The
-// vectors already exist at sdk/go/helpers/testdata/sign-request-vectors.json, so
-// the only missing piece is the signer module — the RED is on the import.
-import { describe, it, expect } from "vitest";
-// RED: sdk/ts/core/sign-request.ts does not exist yet (TDD red step).
-import { signRequest } from "../core/sign-request.ts";
+// A vector's `signature_agent` is the ORIGIN the signer is given; the header it emits is
+// in emitted_headers["signature-agent"]. An `append_only` vector is signed through
+// appendSignature on an unsigned request, which must equal signRequest.
+import { describe, expect, it } from "vitest";
+import { appendSignature, type SignedRequest, signRequest } from "../core/sign-request.ts";
 import signRequestVectors from "../../go/helpers/testdata/sign-request-vectors.json";
+import { b64urlToBytes, hexToBytes, importSigningKey } from "./wba-fixtures.ts";
 
 type SignRequestVector = {
-  name: string;
-  method: string;
-  url: string;
-  body_hex: string;
-  authorization: string;
-  signature_agent: string;
-  keyid: string;
-  created: number;
-  expires: number;
-  nonce?: string; // RFC 9421 nonce the oracle signed with; absent when none
-  signer_seed_hex: string; // 32-byte Ed25519 seed the oracle signed with
-  pubkey_b64url: string; // b64url-nopad raw 32-byte Ed25519 public key
-  content_digest: string;
-  signature_base: string; // the exact bytes the signature covers
-  signature_input: string;
-  signature: string;
+	name: string;
+	method: string;
+	url: string;
+	body_hex: string;
+	authorization: string;
+	signature_agent: string;
+	append_only?: boolean;
+	keyid: string;
+	created: number;
+	expires: number;
+	nonce?: string;
+	signer_seed_hex: string;
+	pubkey_b64url: string;
+	content_digest: string;
+	signature_base: string;
+	signature_input: string;
+	signature: string;
+	emitted_headers: Record<string, string[]>;
 };
 
-// The covered set the signer MUST emit: exactly these five, in this order.
-const EXPECTED_COVERED =
-  '("@method" "@target-uri" "content-digest" "authorization" "signature-agent")';
-
-// The fixed PKCS8 DER prefix for an Ed25519 private key (SEQUENCE + version +
-// AlgorithmIdentifier(1.3.101.112) + OCTET STRING wrapper); the 32-byte seed
-// follows. WebCrypto cannot import a bare Ed25519 seed as "raw", so the seed is
-// wrapped in PKCS8 and imported as "pkcs8". (Copied verbatim from
-// tests/acceptance.parity.test.ts.)
-const PKCS8_ED25519_PREFIX = Uint8Array.from([
-  0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04,
-  0x22, 0x04, 0x20,
-]);
-
-function hexToBytes(hex: string): Uint8Array<ArrayBuffer> {
-  const out = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < out.length; i++) {
-    out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-  }
-  return out;
-}
-
-async function importSigningKey(seedHex: string): Promise<CryptoKey> {
-  const seed = hexToBytes(seedHex);
-  const pkcs8 = new Uint8Array(PKCS8_ED25519_PREFIX.length + seed.length);
-  pkcs8.set(PKCS8_ED25519_PREFIX, 0);
-  pkcs8.set(seed, PKCS8_ED25519_PREFIX.length);
-  return crypto.subtle.importKey("pkcs8", pkcs8, { name: "Ed25519" }, false, [
-    "sign",
-  ]);
-}
-
-function b64urlToBytes(s: string): Uint8Array<ArrayBuffer> {
-  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - (s.length % 4));
-  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
-  const bin = atob(b64);
-  const out = new Uint8Array(bin.length);
-  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
-  return out;
-}
-
-function stdB64ToBytes(s: string): Uint8Array<ArrayBuffer> {
-  const bin = atob(s);
-  const out = new Uint8Array(bin.length);
-  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
-  return out;
-}
-
-// Import the recorded raw public key (b64url-nopad) for verify — the round-trip
-// re-signs nothing; it verifies the recorded Signature over the reconstructed
-// base. (Mirrors tests/signedurl-pop.parity.test.ts's importEd25519PublicKey.)
-async function importVerifyKey(pubB64Url: string): Promise<CryptoKey> {
-  return crypto.subtle.importKey(
-    "raw",
-    b64urlToBytes(pubB64Url),
-    { name: "Ed25519" },
-    false,
-    ["verify"],
-  );
+async function sign(v: SignRequestVector): Promise<SignedRequest> {
+	const priv = await importSigningKey(v.signer_seed_hex);
+	const opts = {
+		method: v.method,
+		url: v.url,
+		body: hexToBytes(v.body_hex),
+		authorization: v.authorization,
+		signatureAgent: v.signature_agent,
+		keyid: v.keyid,
+		created: v.created,
+		expires: v.expires,
+		nonce: v.nonce ?? "",
+	};
+	return v.append_only === true
+		? appendSignature(priv, { signatureInput: "", signature: "" }, opts)
+		: signRequest(priv, opts);
 }
 
 describe("sdk/ts request signer matches the shared Go oracle (byte-identical)", () => {
-  const doc = signRequestVectors as { vectors: SignRequestVector[] };
-
-  it("vector matrix is non-empty", () => {
-    expect(doc.vectors.length).toBeGreaterThan(0);
-  });
-
-  it("vector set includes the empty-authorization bound case", () => {
-    // authorization="" is still covered (the static bootstrap path); this is a
-    // distinct vector, and its base carries the load-bearing trailing space.
-    const authzValues = new Set(doc.vectors.map((v) => v.authorization));
-    expect(authzValues.has("")).toBe(true);
-  });
-
-  it("vectors live under the shared Go testdata dir (not a copied fixture)", () => {
-    // Guards the Core Invariant: the oracle is the SHARED Go emitter output.
-    // The import specifier is the durable evidence of provenance.
-    const specifier = "../../go/helpers/testdata/sign-request-vectors.json";
-    expect(specifier).toContain("go/helpers/testdata");
-  });
-
-  for (const v of doc.vectors) {
-    const options = {
-      method: v.method,
-      url: v.url,
-      body: hexToBytes(v.body_hex),
-      authorization: v.authorization,
-      signatureAgent: v.signature_agent,
-      keyid: v.keyid,
-      created: v.created,
-      expires: v.expires,
-      nonce: v.nonce ?? "",
-    };
-
-    it(`${v.name}: signature base is byte-identical to the Go oracle`, async () => {
-      const priv = await importSigningKey(v.signer_seed_hex);
-      const result = await signRequest(priv, options);
-      expect(result.signatureBase).toBe(v.signature_base);
-    });
-
-    it(`${v.name}: Content-Digest is byte-identical to the Go oracle`, async () => {
-      const priv = await importSigningKey(v.signer_seed_hex);
-      const result = await signRequest(priv, options);
-      expect(result.contentDigest).toBe(v.content_digest);
-    });
-
-    it(`${v.name}: Signature-Input covers exactly the 5 FORA components`, async () => {
-      const priv = await importSigningKey(v.signer_seed_hex);
-      const result = await signRequest(priv, options);
-      expect(result.signatureInput).toContain(EXPECTED_COVERED);
-      expect(result.signatureInput).toBe(v.signature_input);
-    });
-
-    it(`${v.name}: Signature header is byte-identical to the Go oracle`, async () => {
-      const priv = await importSigningKey(v.signer_seed_hex);
-      const result = await signRequest(priv, options);
-      expect(result.signature).toBe(v.signature);
-    });
-
-    it(`${v.name}: round-trips — recorded signature verifies over the reconstructed base`, async () => {
-      // Re-derive the pubkey from the seed, strip the `sig1=:` / `:` wrapper the
-      // Signature header carries, and verify the raw Ed25519 signature over the
-      // signature base the signer reconstructs — a full sign→verify round-trip
-      // through the same 5-component byte contract.
-      const priv = await importSigningKey(v.signer_seed_hex);
-      const result = await signRequest(priv, options);
-
-      const pub = await importVerifyKey(v.pubkey_b64url);
-      const raw = result.signature.replace(/^sig1=:/, "").replace(/:$/, "");
-      const sigBytes = stdB64ToBytes(raw);
-      const ok = await crypto.subtle.verify(
-        "Ed25519",
-        pub,
-        sigBytes,
-        new TextEncoder().encode(result.signatureBase),
-      );
-      expect(ok).toBe(true);
-    });
-  }
+	const doc = signRequestVectors as { vectors: SignRequestVector[] };
+
+	it("vector matrix carries the empty-authorization, append and documented cases", () => {
+		const names = new Set(doc.vectors.map((v) => v.name));
+		expect(doc.vectors.some((v) => v.authorization === "")).toBe(true);
+		expect(doc.vectors.some((v) => v.append_only === true)).toBe(true);
+		expect(names.has("doc_single_hop_example")).toBe(true);
+		expect(names.has("doc_broker_example")).toBe(true);
+	});
+
+	for (const v of doc.vectors) {
+		it(`${v.name}: signature base, Signature-Input and Signature are byte-identical to the Go oracle`, async () => {
+			const result = await sign(v);
+			expect(result.signatureBase).toBe(v.signature_base);
+			expect(result.contentDigest).toBe(v.content_digest);
+			expect(result.signatureInput).toBe(v.signature_input);
+			expect(result.signature).toBe(v.signature);
+		});
+
+		it(`${v.name}: the emitted header set is the oracle's`, async () => {
+			const result = await sign(v);
+			const emitted: Record<string, string[]> = {
+				authorization: [result.authorization],
+				"content-digest": [result.contentDigest],
+				signature: [result.signature],
+				"signature-agent": [result.signatureAgent],
+				"signature-input": [result.signatureInput],
+			};
+			expect(emitted).toEqual(v.emitted_headers);
+		});
+
+		it(`${v.name}: round-trips — the signature verifies over the base under the vector's key`, async () => {
+			const result = await sign(v);
+			const pub = await crypto.subtle.importKey("raw", b64urlToBytes(v.pubkey_b64url), { name: "Ed25519" }, false, [
+				"verify",
+			]);
+			const raw = result.signature.replace(/^sig1=:/, "").replace(/:$/, "");
+			const bin = atob(raw);
+			const sig = Uint8Array.from(bin, (c) => c.charCodeAt(0));
+			expect(await crypto.subtle.verify("Ed25519", pub, sig, new TextEncoder().encode(result.signatureBase))).toBe(true);
+		});
+	}
 });
diff --git a/sdk/ts/tests/signature-nonce.test.ts b/sdk/ts/tests/signature-nonce.test.ts
index da87757f..b9deeff6 100644
--- a/sdk/ts/tests/signature-nonce.test.ts
+++ b/sdk/ts/tests/signature-nonce.test.ts
@@ -15,6 +15,7 @@ import {
 	verifyRequestServer,
 } from "../core/verify-request.ts";
 import { decodeBase64Url } from "../src/base64url.ts";
+import { AGENT_DIRECTORY } from "./wba-fixtures.ts";
 
 const URL = "https://exchange.example/fora.v1.ExchangeService/DiscoverResources";
 const BODY = new Uint8Array(new TextEncoder().encode('{"ver":"1"}')) as Uint8Array<ArrayBuffer>;
@@ -60,13 +61,18 @@ async function fixture() {
 	// A fixed window: created/expires are identical on every signature, the
 	// collision condition.
 	const window = () => [CREATED, EXPIRES] as [number, number];
-	return { privKey: kp.privateKey, pub, store, keyid, verify, sent, send, window };
+	return { privKey: kp.privateKey, pub, store, keyid, verify, sent, send, window, signatureAgent: AGENT_DIRECTORY };
 }
 
 describe("signing transport nonce", () => {
 	it("gives identical requests unique signatures that both pass", async () => {
 		const f = await fixture();
-		const signing = createSigningTransport(f.send, { privKey: f.privKey, keyid: f.keyid, window: f.window });
+		const signing = createSigningTransport(f.send, {
+			privKey: f.privKey,
+			keyid: f.keyid,
+			signatureAgent: f.signatureAgent,
+			window: f.window,
+		});
 		await signing(URL, { method: "POST", body: BODY });
 		await signing(URL, { method: "POST", body: BODY });
 		const [first, second] = f.sent as [Record<string, string>, Record<string, string>];
@@ -74,45 +80,55 @@ describe("signing transport nonce", () => {
 		const n1 = NONCE.exec(first["signature-input"] ?? "")?.[1];
 		const n2 = NONCE.exec(second["signature-input"] ?? "")?.[1];
 		expect(n1).toBeDefined();
-		expect(decodeBase64Url(n1 ?? "")?.length).toBe(16);
+		expect(decodeBase64Url(n1 ?? "")?.length).toBe(64);
 		expect(n1).not.toBe(n2);
 		expect(first.signature).not.toBe(second.signature);
 		// Only the nonce differs: created/expires are unchanged.
 		expect(first["signature-input"]?.replace(NONCE, "")).toBe(second["signature-input"]?.replace(NONCE, ""));
 
-		expect(await f.verify(first)).toEqual({ valid: true });
-		expect(await f.verify(second)).toEqual({ valid: true });
+		expect(await f.verify(first)).toMatchObject({ valid: true });
+		expect(await f.verify(second)).toMatchObject({ valid: true });
 	});
 
 	it("rejects an exact replay", async () => {
 		const f = await fixture();
-		const signing = createSigningTransport(f.send, { privKey: f.privKey, keyid: f.keyid, window: f.window });
+		const signing = createSigningTransport(f.send, {
+			privKey: f.privKey,
+			keyid: f.keyid,
+			signatureAgent: f.signatureAgent,
+			window: f.window,
+		});
 		await signing(URL, { method: "POST", body: BODY });
 		const headers = f.sent[0] as Record<string, string>;
-		expect(await f.verify(headers)).toEqual({ valid: true });
+		expect(await f.verify(headers)).toMatchObject({ valid: true });
 		expect(await f.verify({ ...headers })).toMatchObject({ valid: false, reason: "replay" });
 	});
 
 	it.each([
-		["changed", (s: string) => s.replace(NONCE, ';nonce="AAAAAAAAAAAAAAAAAAAAAA"')],
+		["changed", (s: string) => s.replace(NONCE, `;nonce="${"A".repeat(86)}"`)],
 		["removed", (s: string) => s.replace(NONCE, "")],
 	])("fails verification when the nonce is %s", async (_name, edit) => {
 		const f = await fixture();
-		const signing = createSigningTransport(f.send, { privKey: f.privKey, keyid: f.keyid, window: f.window });
+		const signing = createSigningTransport(f.send, {
+			privKey: f.privKey,
+			keyid: f.keyid,
+			signatureAgent: f.signatureAgent,
+			window: f.window,
+		});
 		await signing(URL, { method: "POST", body: BODY });
 		const headers = { ...(f.sent[0] as Record<string, string>) };
 		headers["signature-input"] = edit(headers["signature-input"] ?? "");
 		expect(await f.verify(headers)).toMatchObject({ valid: false, reason: "signature" });
 	});
 
-	it("accepts a legacy signature without a nonce", async () => {
+	it("accepts a signature without a nonce, which the profile permits", async () => {
 		const f = await fixture();
 		const signed = await signRequest(f.privKey, {
 			method: "POST",
 			url: URL,
 			body: BODY,
 			authorization: "",
-			signatureAgent: "",
+			signatureAgent: f.signatureAgent,
 			keyid: f.keyid,
 			created: CREATED,
 			expires: EXPIRES,
@@ -124,9 +140,9 @@ describe("signing transport nonce", () => {
 				"signature-input": signed.signatureInput,
 				signature: signed.signature,
 				authorization: "",
-				"signature-agent": "",
+				"signature-agent": signed.signatureAgent,
 			}),
-		).toEqual({ valid: true });
+		).toMatchObject({ valid: true });
 	});
 
 	it("rejects and sends nothing when random generation fails", async () => {
@@ -134,6 +150,7 @@ describe("signing transport nonce", () => {
 		const signing = createSigningTransport(f.send, {
 			privKey: f.privKey,
 			keyid: f.keyid,
+			signatureAgent: f.signatureAgent,
 			window: f.window,
 			nonce: () => {
 				throw new Error("entropy source unavailable");
@@ -148,6 +165,7 @@ describe("signing transport nonce", () => {
 		const signing = createSigningTransport(f.send, {
 			privKey: f.privKey,
 			keyid: f.keyid,
+			signatureAgent: f.signatureAgent,
 			window: f.window,
 			nonce: () => "",
 		});
@@ -168,7 +186,7 @@ describe("signing helpers nonce validation", () => {
 				url: URL,
 				body: BODY,
 				authorization: "",
-				signatureAgent: "",
+				signatureAgent: AGENT_DIRECTORY,
 				keyid,
 				created: CREATED,
 				expires: EXPIRES,
@@ -209,13 +227,14 @@ describe("client verbs sign with a fresh nonce", () => {
 			send,
 			guardedSend: send,
 			signer: { privKey: f.privKey, keyid: f.keyid },
+			signatureAgent: f.signatureAgent,
 			signWindow: f.window,
 		});
 
 		await client.getAccountStatus({ exchange: "exchange.test" });
 		await client.getAccountStatus({ exchange: "exchange.test" });
 
-		expect(verdicts).toEqual([{ valid: true }, { valid: true }]);
+		expect(verdicts).toMatchObject([{ valid: true }, { valid: true }]);
 		const [first, second] = seen as [UnaryRequest, UnaryRequest];
 		const in1 = first.headers["signature-input"] ?? "";
 		const in2 = second.headers["signature-input"] ?? "";
diff --git a/sdk/ts/tests/signedurl-pop.parity.test.ts b/sdk/ts/tests/signedurl-pop.parity.test.ts
index ab9a06a7..153c1c58 100644
--- a/sdk/ts/tests/signedurl-pop.parity.test.ts
+++ b/sdk/ts/tests/signedurl-pop.parity.test.ts
@@ -1,4 +1,4 @@
-// Signed-URL + RFC 9421 GET-PoP byte-parity (TypeScript side).
+// Signed-URL + Web Bot Auth delivery-proof byte-parity (TypeScript side).
 //
 // The Core Invariant for these two helpers is byte-identical output to the
 // sdk/go oracle. Per the user-decided parity contract ("Go golden-emitter ->
@@ -6,7 +6,7 @@
 // emitter under sdk/go/helpers that signs with the REAL Go signer and writes:
 //
 //   sdk/go/helpers/testdata/signedurl-vectors.json  (SignURLEd25519 output)
-//   sdk/go/helpers/testdata/pop-vectors.json        (RFC 9421 GET-PoP output)
+//   sdk/go/helpers/testdata/pop-vectors.json        (Web Bot Auth delivery-proof output)
 //
 // This test asserts sdk/ts verify reaches the recorded verdict for each vector.
 // It is RED now for TWO reasons, both expected:
@@ -27,7 +27,9 @@
 // default path, not merely asserted in prose) AND an injected-primitive case.
 import { describe, it, expect } from "vitest";
 import { verifyEd25519SignedUrl } from "../src/verify.ts";
-import { verifyAgentBinding } from "../src/pop.ts";
+import { POP_ACCEPT_SIGNATURE, verifyAgentBinding } from "../src/pop.ts";
+import { signInbound } from "../core/sign.ts";
+import { importSigningKey } from "./wba-fixtures.ts";
 // These vector files are produced by the Go golden-emitter in a later step;
 // referencing them by their planned paths keeps this test RED now (missing
 // module) and green once the emitter + sdk/ts land.
@@ -48,9 +50,9 @@ type SignedUrlVector = {
 };
 
 // ---- PoP vectors -----------------------------------------------------------
-// Each vector carries the full RFC 9421 GET-PoP material the Go signer emitted:
-// the presented raw public key, the request line, the Signature-Input / Signature
-// headers, the URL-bound agent_id (== thumbprint of presented key), and the
+// Each vector carries the full delivery-proof material the Go signer emitted: the
+// presented raw public key, the request line, the Signature-Agent / Signature-Input /
+// Signature headers, the URL-bound agent_id (== thumbprint of presented key), and the
 // clock. TS verifyAgentBinding must reach the recorded verdict.
 type PopVector = {
   name: string;
@@ -58,12 +60,20 @@ type PopVector = {
   url: string; // @target-uri (carries agent_id param)
   agent_id: string; // thumbprint of the presented key
   presented_key_b64url: string; // raw 32-byte Ed25519 public key
+  signer_seed_hex: string;
+  agent_directory: string; // the directory origin the signer was given
+  nonce?: string;
+  signature_agent: string; // Signature-Agent header value; "" means absent
   signature_input: string; // RFC 9421 Signature-Input header value
   signature: string; // RFC 9421 Signature header value
   now_unix: number;
   expected_valid: boolean;
 };
 
+// The refusals a delivery proof is answered with Accept-Signature for: a missing or
+// wrong tag, the v1.0.8 covered set, and the bare Signature-Agent value.
+const ANSWERED_WITH_ACCEPT = new Set(["v108_method_and_target_uri_only", "missing_tag", "wrong_tag", "bare_signature_agent"]);
+
 function b64urlToBytes(s: string): Uint8Array<ArrayBuffer> {
   const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - (s.length % 4));
   const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
@@ -99,7 +109,7 @@ describe("sdk/ts signed-URL verify matches the Go signer vectors", () => {
   }
 });
 
-describe("sdk/ts RFC 9421 GET-PoP verify matches the Go signer vectors", () => {
+describe("sdk/ts Web Bot Auth delivery-proof verify matches the Go signer vectors", () => {
   const vectors = popVectors as PopVector[];
 
   it("vector file is non-empty", () => {
@@ -111,6 +121,7 @@ describe("sdk/ts RFC 9421 GET-PoP verify matches the Go signer vectors", () => {
     h.set("x-fora-agent-key", v.presented_key_b64url);
     h.set("signature-input", v.signature_input);
     h.set("signature", v.signature);
+    if (v.signature_agent !== "") h.set("signature-agent", v.signature_agent);
     return h;
   }
 
@@ -126,9 +137,49 @@ describe("sdk/ts RFC 9421 GET-PoP verify matches the Go signer vectors", () => {
         now: () => v.now_unix * 1000,
       });
       expect(res.ok).toBe(v.expected_valid);
+      if (v.expected_valid) expect(res.signatureAgent).toBe(v.agent_directory);
+      expect(res.acceptSignature).toBe(ANSWERED_WITH_ACCEPT.has(v.name) ? POP_ACCEPT_SIGNATURE : undefined);
     });
   }
 
+  // RE-SIGN: signInbound, given the vector's seed, directory, nonce and window,
+  // reproduces the Go signer's Signature-Agent, Signature-Input and Signature byte for
+  // byte. Only the vectors Go produced through SignAgentBinding unaltered qualify.
+  for (const v of vectors.filter((x) => ["valid", "valid_no_nonce", "expired"].includes(x.name))) {
+    it(`[re-sign] ${v.name}: signInbound reproduces the Go proof`, async () => {
+      const created = Number(/;created=(\d+)/.exec(v.signature_input)?.[1]);
+      const expires = Number(/;expires=(\d+)/.exec(v.signature_input)?.[1]);
+      const keyPair = {
+        privateKey: await importSigningKey(v.signer_seed_hex),
+        publicKey: await crypto.subtle.importKey("raw", b64urlToBytes(v.presented_key_b64url), { name: "Ed25519" }, true, [
+          "verify",
+        ]),
+      };
+      const req = await signInbound(keyPair, v.url, {
+        signatureAgent: v.agent_directory,
+        ...(v.nonce !== undefined ? { nonce: v.nonce } : {}),
+        window: () => [created, expires],
+      });
+      expect(req.headers.get("signature-agent")).toBe(v.signature_agent);
+      expect(req.headers.get("signature-input")).toBe(v.signature_input);
+      expect(req.headers.get("signature")).toBe(v.signature);
+      expect(req.headers.get("x-fora-agent-key")).toBe(v.presented_key_b64url);
+    });
+  }
+
+  it("[re-sign] member_not_https_origin: signInbound refuses a directory that is not an https origin", async () => {
+    const v = vectors.find((x) => x.name === "member_not_https_origin") as PopVector;
+    const keyPair = {
+      privateKey: await importSigningKey(v.signer_seed_hex),
+      publicKey: await crypto.subtle.importKey("raw", b64urlToBytes(v.presented_key_b64url), { name: "Ed25519" }, true, [
+        "verify",
+      ]),
+    };
+    await expect(signInbound(keyPair, v.url, { signatureAgent: v.agent_directory })).rejects.toMatchObject({
+      reason: "signature_agent_not_origin",
+    });
+  });
+
   // INJECTED-primitive path: the same vectors verified through a caller-supplied
   // Ed25519 verify primitive (the Fastly-style non-WebCrypto path). The verdict
   // MUST match the default path — the byte contract is the signature base, not
diff --git a/sdk/ts/tests/signing-transport.parity.test.ts b/sdk/ts/tests/signing-transport.parity.test.ts
index cd63dc46..8cdd5f3d 100644
--- a/sdk/ts/tests/signing-transport.parity.test.ts
+++ b/sdk/ts/tests/signing-transport.parity.test.ts
@@ -3,7 +3,7 @@
 // The TS sibling of Go core.NewSigningTransport + SigningOption and Python
 // SigningTransport / SignedOutbound:
 //   - signOutbound({ privKey, keyid, method, url, body, authorization,
-//     signatureAgent, window, appendOnly, prior? }) -> { headers, body }
+//     signatureAgent, window, appendOnly, coverPrevious, prior? }) -> { headers, body }
 //     (transport-neutral header core, Python SignedOutbound sibling);
 //   - createSigningTransport(send, opts) -> a WHATWG-fetch-shaped send that buffers
 //     the body, stamps the RFC 9421 headers via signOutbound, and forwards the SAME
@@ -18,7 +18,7 @@
 // Proof strategy (corpus-first, no new emitter): replay the SAME shared Go vectors
 // the primitive suites already verify against
 // (sdk/go/helpers/testdata/sign-request-vectors.json for the fresh-sig and
-// append/relay paths, multisig-chain-vectors.json for the chain) THROUGH the
+// append paths, multisig-chain-vectors.json for a second signer) THROUGH the
 // transport via a capturing fake send, and assert the stamped headers equal the
 // vector fields byte-for-byte. Each vector injects a FIXED window
 // ()=>[v.created, v.expires] — the DEFAULT clockWindow(now) drifts created/expires
@@ -26,10 +26,11 @@
 // harness is adapted, NOT copied verbatim.
 
 import { describe, it, expect } from "vitest";
-import { createSigningTransport, signOutbound } from "../core/signing-transport.ts";
-// The append/relay path reuses the already-landed primitives to arrange the
-// upstream sig1 state the relay transport chains onto.
+import { createSigningTransport, type SignerSource, signOutbound } from "../core/signing-transport.ts";
+// The append path reuses the already-landed primitives to arrange the upstream sig1
+// state the second signer's transport appends to.
 import { signRequest } from "../core/sign-request.ts";
+import { WebBotAuthError } from "../core/wba.ts";
 // Use the EXPORTED header constant (do NOT string-literal "signature-agent").
 import { SignatureAgentHeader } from "../src/wire.ts";
 // The signer EMITS the lowercase spelling, so a merge over a caller's own headers
@@ -49,7 +50,9 @@ type SignRequestVector = {
   url: string;
   body_hex: string;
   authorization: string;
+  /** The key-directory ORIGIN the signer was given. */
   signature_agent: string;
+  append_only?: boolean;
   keyid: string;
   created: number;
   expires: number;
@@ -73,7 +76,14 @@ function asEmitted(h: Record<string, string>): Record<string, string[]> {
   return Object.fromEntries(Object.entries(h).map(([k, v]) => [k, [v]]));
 }
 
-type MultisigHop = { keyid: string; pubkey_b64url: string; seed_hex: string; nonce?: string };
+type MultisigHop = {
+  keyid: string;
+  pubkey_b64url: string;
+  seed_hex: string;
+  directory: string;
+  nonce?: string;
+  cover_previous?: boolean;
+};
 type MultisigChainVector = {
   name: string;
   method: string;
@@ -122,14 +132,17 @@ async function importSigningKey(seedHex: string): Promise<CryptoKey> {
   ]);
 }
 
+// The key-directory origin the option-behavior transports sign as.
+const TEST_DIR = "https://agent.example.com";
+
 // A freshly generated signer for the option-behavior legs, which pin plumbing
-// (window/append/predicate/set-if-absent), NOT byte-parity — any real key works.
-async function genSigner(): Promise<{ privKey: CryptoKey; keyid: string }> {
+// (window/append/predicate/directory), NOT byte-parity — any real key works.
+async function genSigner(): Promise<{ privKey: CryptoKey; keyid: string; signatureAgent: string }> {
   const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, false, [
     "sign",
     "verify",
   ])) as CryptoKeyPair;
-  return { privKey: kp.privateKey, keyid: "test-key.v1" };
+  return { privKey: kp.privateKey, keyid: "test-key.v1", signatureAgent: TEST_DIR };
 }
 
 function bytesEqual(
@@ -171,11 +184,9 @@ function capturingSend(): {
 describe("createSigningTransport replays the shared Go sign-request vectors byte-identically", () => {
   const doc = signRequestVectors as { vectors: SignRequestVector[] };
 
-  it("vector matrix is non-empty and includes the empty-signature-agent case", () => {
+  it("vector matrix is non-empty and every vector names a directory origin", () => {
     expect(doc.vectors.length).toBeGreaterThan(0);
-    const agents = new Set(doc.vectors.map((v) => v.signature_agent));
-    expect(agents.has("")).toBe(true);
-    expect(agents.has("https://agent.example")).toBe(true);
+    for (const v of doc.vectors) expect(v.signature_agent).toMatch(/^https:\/\//);
   });
 
   // The transport refuses to sign without a nonce, so it replays only the
@@ -186,17 +197,15 @@ describe("createSigningTransport replays the shared Go sign-request vectors byte
       const priv = await importSigningKey(v.signer_seed_hex);
 
       // FIXED window per vector: reproduce the vector's created/expires;
-      // the default clockWindow(now) would drift the base. Source the covered
-      // signature_agent via the option when the vector's is non-empty.
+      // the default clockWindow(now) would drift the base.
       const signing = createSigningTransport(send, {
         privKey: priv,
         keyid: v.keyid,
         window: () => [v.created, v.expires] as [number, number],
         // The transport mints a random nonce per signature; pin it to the vector's.
         nonce: () => v.nonce ?? "",
-        ...(v.signature_agent !== ""
-          ? { signatureAgent: v.signature_agent }
-          : {}),
+        signatureAgent: v.signature_agent,
+        appendOnly: v.append_only ?? false,
       });
 
       const body = hexToBytes(v.body_hex);
@@ -274,6 +283,7 @@ describe("signOutbound returns the RFC 9421 header set byte-identical to the Go
         signatureAgent: v.signature_agent,
         window: () => [v.created, v.expires] as [number, number],
         nonce: () => v.nonce ?? "",
+        appendOnly: v.append_only ?? false,
       });
 
       expect(out.headers["content-digest"]).toBe(v.content_digest);
@@ -286,9 +296,9 @@ describe("signOutbound returns the RFC 9421 header set byte-identical to the Go
       // SENT, and the two are different claims. A verifier rebuilds the base from
       // the request it received, so a covered value bound but never sent is not
       // bound: it reads the covered names off signature-input, finds nothing under
-      // one of them, and refuses. This port bound authorization and signature-agent
-      // and attached neither, so it matched the oracle byte-for-byte on all three
-      // fields above and could not complete a single signed call.
+      // one of them, and refuses. A port that bound authorization and signature-agent
+      // and attached neither matched the oracle byte-for-byte on all three fields above
+      // and could not complete a single signed call.
       //
       // Membership assertions are what let that ship. A map comparison is what
       // notices the next header to go missing.
@@ -301,11 +311,11 @@ describe("signOutbound returns the RFC 9421 header set byte-identical to the Go
 });
 
 // ---------------------------------------------------------------------------
-// (c) APPEND / relay path — set-if-absent preserves the upstream covered
-// Signature-Agent, and the appended sig2 reproduces the Go 2-hop chain.
+// (c) APPEND path — a second signer adds its own member beside the agent's, which
+// stays byte-for-byte untouched, and reproduces the Go two-signature vectors.
 // ---------------------------------------------------------------------------
 
-describe("createSigningTransport append/relay path mirrors the Go multisig chain", () => {
+describe("createSigningTransport append path mirrors the Go multi-signature vectors", () => {
   const doc = multisigVectors as { vectors: MultisigChainVector[] };
   const byName = (n: string): MultisigChainVector => {
     const v = doc.vectors.find((x) => x.name === n);
@@ -313,80 +323,77 @@ describe("createSigningTransport append/relay path mirrors the Go multisig chain
     return v;
   };
 
-  it("positive_two_hop_nonce: appendOnly transport chains sig2 AND preserves the upstream Signature-Agent (set-if-absent)", async () => {
-    const v = byName("positive_two_hop_nonce");
-    const h1 = v.hops[0] as MultisigHop;
-    const h2 = v.hops[1] as MultisigHop;
-    const body = hexToBytes(v.body_hex);
-
-    // Arrange the incoming relayed request state: hop-0's sig1, whose covered set
-    // already binds Signature-Agent = "https://agent.example". (signRequest is the
-    // already-parity-locked primitive; this is setup, the transport is under test.)
-    const sig1 = await signRequest(await importSigningKey(h1.seed_hex), {
-      method: v.method,
-      url: v.url,
-      body,
-      authorization: v.authorization,
-      signatureAgent: v.signature_agent,
-      keyid: h1.keyid,
-      created: v.created,
-      expires: v.expires,
-      nonce: h1.nonce ?? "",
-    });
-
-    // The relay/broker transport carries its OWN directory origin. Set-if-absent
-    // MUST NOT overwrite the agent's covered Signature-Agent — doing so would
-    // break sig1 at the verifier.
-    const { send, calls } = capturingSend();
-    const signing = createSigningTransport(send, {
-      privKey: await importSigningKey(h2.seed_hex),
-      keyid: h2.keyid,
-      window: () => [v.created, v.expires] as [number, number],
-      nonce: () => h2.nonce ?? "",
-      appendOnly: true,
-      signatureAgent: "https://broker.example.com",
-    });
+  // The transport refuses to sign without a nonce, so only the vector whose hops were
+  // signed with one is replayed through it.
+  for (const name of ["positive_covering_two_nonce"]) {
+    it(`${name}: the second signer's appendOnly transport reproduces the Go headers`, async () => {
+      const v = byName(name);
+      const h1 = v.hops[0] as MultisigHop;
+      const h2 = v.hops[1] as MultisigHop;
+      const body = hexToBytes(v.body_hex);
 
-    await signing(v.url, {
-      method: v.method,
-      headers: {
+      // Arrange the incoming request state: the agent's sig1 and its member.
+      const sig1 = await signRequest(await importSigningKey(h1.seed_hex), {
+        method: v.method,
+        url: v.url,
+        body,
         authorization: v.authorization,
-        [SignatureAgentHeader]: v.signature_agent,
-        "content-digest": sig1.contentDigest,
-        "signature-input": sig1.signatureInput,
-        signature: sig1.signature,
-      },
-      body,
-    });
+        signatureAgent: h1.directory,
+        keyid: h1.keyid,
+        created: v.created,
+        expires: v.expires,
+        nonce: h1.nonce ?? "",
+      });
 
-    expect(calls.length).toBe(1);
-    const fwd = calls[0] as Captured;
-    const h = fwd.init.headers ?? {};
+      const { send, calls } = capturingSend();
+      const signing = createSigningTransport(send, {
+        privKey: await importSigningKey(h2.seed_hex),
+        keyid: h2.keyid,
+        window: () => [v.created, v.expires] as [number, number],
+        nonce: () => h2.nonce ?? "",
+        appendOnly: true,
+        coverPrevious: h2.cover_previous ?? false,
+        signatureAgent: h2.directory,
+      });
 
-    // Set-if-absent preserves the upstream agent directory (NOT the broker's).
-    expect(h[SignatureAgentEmitted]).toBe(v.signature_agent);
-    // The appended sig2 reproduces the Go-emitted 2-hop chain byte-for-byte.
-    expect(h["signature-input"]).toBe(v.signature_input);
-    expect(h.signature).toBe(v.signature);
-    expect(bytesEqual(fwd.init.body, body)).toBe(true);
-  });
+      await signing(v.url, {
+        method: v.method,
+        headers: {
+          authorization: v.authorization,
+          [SignatureAgentHeader]: sig1.signatureAgent,
+          "content-digest": sig1.contentDigest,
+          "signature-input": sig1.signatureInput,
+          signature: sig1.signature,
+        },
+        body,
+      });
+
+      expect(calls.length).toBe(1);
+      const fwd = calls[0] as Captured;
+      const h = fwd.init.headers ?? {};
+      // The agent's member is untouched and the second signer's is appended beside it.
+      expect(h[SignatureAgentEmitted]).toBe(v.signature_agent);
+      expect(h["signature-input"]).toBe(v.signature_input);
+      expect(h.signature).toBe(v.signature);
+      expect(bytesEqual(fwd.init.body, body)).toBe(true);
+    });
+  }
 });
 
 // ---------------------------------------------------------------------------
 // (d) OPTION-behavior — ported from sdk/go/core/transport_options_test.go.
-// These pin the transport's plumbing (window / append / predicate / set-if-absent
-// / defaults / no-body), not byte-parity, so a freshly generated signer is used.
+// These pin the transport's plumbing (window / append / predicate / directory /
+// signer source / defaults / no-body), not byte-parity, so a freshly generated signer
+// is used.
 // ---------------------------------------------------------------------------
 
 describe("createSigningTransport option behavior (ported from Go transport_options_test.go)", () => {
   const BODY = utf8('{"test":true}');
 
   it("WithWindow: injects the supplied created/expires into Signature-Input", async () => {
-    const { privKey, keyid } = await genSigner();
     const { send, calls } = capturingSend();
     const signing = createSigningTransport(send, {
-      privKey,
-      keyid,
+      ...(await genSigner()),
       window: () => [1_700_000_000, 1_700_000_300] as [number, number],
     });
 
@@ -402,9 +409,8 @@ describe("createSigningTransport option behavior (ported from Go transport_optio
   });
 
   it("appendOnly on a FRESH request still produces a valid sig1", async () => {
-    const { privKey, keyid } = await genSigner();
     const { send, calls } = capturingSend();
-    const signing = createSigningTransport(send, { privKey, keyid, appendOnly: true });
+    const signing = createSigningTransport(send, { ...(await genSigner()), appendOnly: true });
 
     await signing("https://exchange.example.com/fora.x/Y", {
       method: "POST",
@@ -417,31 +423,32 @@ describe("createSigningTransport option behavior (ported from Go transport_optio
     expect(sigInput).not.toContain("sig2=");
   });
 
-  it("a request already carrying a Signature is CHAINED (sig2), never replaced", async () => {
+  it("a request already carrying a Signature gets a second signature (sig2), never a replacement", async () => {
     // Prior-detection branch (Go sign(): appendOnly || req has Signature) — even
-    // WITHOUT appendOnly, an incoming Signature triggers the append path.
-    const { privKey, keyid } = await genSigner();
-
-    // Arrange a real upstream sig1 to chain onto.
+    // WITHOUT appendOnly, an incoming Signature selects the append path.
     const upstream = await genSigner();
     const sig1 = await signRequest(upstream.privKey, {
       method: "POST",
       url: "https://exchange.example.com/fora.x/Y",
       body: BODY,
       authorization: "",
-      signatureAgent: "",
+      signatureAgent: upstream.signatureAgent,
       keyid: upstream.keyid,
       created: 1_700_000_000,
       expires: 1_700_000_300,
     });
 
     const { send, calls } = capturingSend();
-    const signing = createSigningTransport(send, { privKey, keyid }); // no appendOnly
+    const signing = createSigningTransport(send, {
+      ...(await genSigner()),
+      signatureAgent: "https://broker.example.com",
+    }); // no appendOnly
 
     await signing("https://exchange.example.com/fora.x/Y", {
       method: "POST",
       headers: {
         "content-digest": sig1.contentDigest,
+        [SignatureAgentHeader]: sig1.signatureAgent,
         "signature-input": sig1.signatureInput,
         signature: sig1.signature,
       },
@@ -453,17 +460,15 @@ describe("createSigningTransport option behavior (ported from Go transport_optio
     expect(h["signature-input"]).toContain("sig2=");
     expect(h.signature).toContain("sig1=");
     expect(h.signature).toContain("sig2=");
+    expect(h[SignatureAgentEmitted]).toBe(`sig1="${TEST_DIR}", sig2="https://broker.example.com"`);
+    // Without coverPrevious the second signature covers only its own request and member.
+    expect(h["signature-input"]?.split("sig2=")[1]).not.toContain('"signature";key=');
   });
 
-  it("WithSignatureAgent: stamps the directory when the header is ABSENT", async () => {
-    const { privKey, keyid } = await genSigner();
+  it("signatureAgent: the directory becomes the signature's own covered member", async () => {
     const dir = "https://broker.example.com";
     const { send, calls } = capturingSend();
-    const signing = createSigningTransport(send, {
-      privKey,
-      keyid,
-      signatureAgent: dir,
-    });
+    const signing = createSigningTransport(send, { ...(await genSigner()), signatureAgent: dir });
 
     await signing("https://exchange.example.com/fora.x/Y", {
       method: "POST",
@@ -472,35 +477,137 @@ describe("createSigningTransport option behavior (ported from Go transport_optio
     });
 
     const h = (calls[0] as Captured).init.headers ?? {};
-    expect(h[SignatureAgentEmitted]).toBe(dir);
+    expect(h[SignatureAgentEmitted]).toBe(`sig1="${dir}"`);
+    expect(h["signature-input"]).toContain('"signature-agent";key="sig1"');
+    expect(h["signature-input"]).toContain('tag="web-bot-auth"');
+  });
+
+  it("signatureAgent: an incoming Signature-Agent with no signature is replaced, not kept", async () => {
+    const { send, calls } = capturingSend();
+    const signing = createSigningTransport(send, await genSigner());
+
+    await signing("https://exchange.example.com/fora.x/Y", {
+      method: "POST",
+      headers: { [SignatureAgentHeader]: 'sig1="https://other.example"' },
+      body: BODY,
+    });
+
+    const h = (calls[0] as Captured).init.headers ?? {};
+    expect(h[SignatureAgentEmitted]).toBe(`sig1="${TEST_DIR}"`);
+    expect(Object.keys(h).filter((k) => k.toLowerCase() === "signature-agent")).toHaveLength(1);
   });
 
-  it("WithSignatureAgent: PRESERVES an existing Signature-Agent header", async () => {
+  it("refuses to sign without a directory, or with one that is not an https origin, and sends nothing", async () => {
     const { privKey, keyid } = await genSigner();
-    const agentDir = "https://agent.example.com";
+    for (const signatureAgent of [undefined, "http://agent.example.com", "https://agent.example.com/keys"]) {
+      const { send, calls } = capturingSend();
+      const signing = createSigningTransport(send, {
+        privKey,
+        keyid,
+        ...(signatureAgent !== undefined ? { signatureAgent } : {}),
+      });
+      const err = await signing("https://exchange.example.com/fora.x/Y", { method: "POST", headers: {}, body: BODY }).catch(
+        (e: unknown) => e,
+      );
+      expect(err, String(signatureAgent)).toBeInstanceOf(WebBotAuthError);
+      expect(calls).toHaveLength(0);
+    }
+  });
+
+  it("refuses a window longer than MAX_SIGNATURE_LIFETIME and sends nothing", async () => {
     const { send, calls } = capturingSend();
     const signing = createSigningTransport(send, {
+      ...(await genSigner()),
+      window: () => [1_700_000_000, 1_700_000_600] as [number, number],
+    });
+    await expect(
+      signing("https://exchange.example.com/fora.x/Y", { method: "POST", headers: {}, body: BODY }),
+    ).rejects.toMatchObject({ reason: "signature_lifetime" });
+    expect(calls).toHaveLength(0);
+  });
+
+  it("each signature carries a fresh 64-byte nonce", async () => {
+    const { send, calls } = capturingSend();
+    const signing = createSigningTransport(send, await genSigner());
+    await signing("https://exchange.example.com/fora.x/Y", { method: "POST", headers: {}, body: BODY });
+    const input = (calls[0] as Captured).init.headers?.["signature-input"] ?? "";
+    const nonce = /;nonce="([^"]*)"/.exec(input)?.[1] ?? "";
+    expect(nonce).toHaveLength(86);
+    const bin = atob(nonce.replace(/-/g, "+").replace(/_/g, "/") + "==");
+    expect(bin.length).toBe(64);
+  });
+
+  it("signerSource: signs as the source's identity, distinct signatures for identical requests in one second", async () => {
+    const { privKey, keyid } = await genSigner();
+    const source: SignerSource = (req) => ({
       privKey,
       keyid,
-      signatureAgent: "https://broker.example.com",
+      signatureAgent: `https://${req.headers["x-tenant"]}.agents.example`,
+    });
+    const { send, calls } = capturingSend();
+    const signing = createSigningTransport(send, {
+      signerSource: source,
+      window: () => [1_700_000_000, 1_700_000_060] as [number, number],
     });
+    for (let i = 0; i < 2; i += 1) {
+      await signing("https://exchange.example.com/fora.x/Y", {
+        method: "POST",
+        headers: { "x-tenant": "alice" },
+        body: BODY,
+      });
+    }
+    const [a, b] = calls.map((c) => c.init.headers ?? {});
+    expect(a?.[SignatureAgentEmitted]).toBe('sig1="https://alice.agents.example"');
+    expect(a?.["signature-input"]).toContain(`keyid="${keyid}"`);
+    expect(a?.signature).not.toBe(b?.signature);
+  });
 
-    await signing("https://exchange.example.com/fora.x/Y", {
+  it("signerSource: an error or no signer sends nothing", async () => {
+    const sources: SignerSource[] = [
+      () => {
+        throw new Error("no identity for this caller");
+      },
+      () => undefined,
+    ];
+    for (const signerSource of sources) {
+      const { send, calls } = capturingSend();
+      const signing = createSigningTransport(send, { signerSource });
+      await expect(
+        signing("https://exchange.example.com/fora.x/Y", { method: "POST", headers: {}, body: BODY }),
+      ).rejects.toThrow();
+      expect(calls).toHaveLength(0);
+    }
+  });
+
+  it("coverPrevious: an appended signature covers the earlier one completely", async () => {
+    const agent = await genSigner();
+    const first = capturingSend();
+    await createSigningTransport(first.send, agent)("https://exchange.example.com/fora.x/Y", {
       method: "POST",
-      headers: { [SignatureAgentHeader]: agentDir },
+      headers: {},
       body: BODY,
     });
+    const signedHeaders = (first.calls[0] as Captured).init.headers ?? {};
 
-    const h = (calls[0] as Captured).init.headers ?? {};
-    expect(h[SignatureAgentEmitted]).toBe(agentDir);
+    const { send, calls } = capturingSend();
+    const forwarder = createSigningTransport(send, {
+      ...(await genSigner()),
+      signatureAgent: "https://relay.example.com",
+      appendOnly: true,
+      coverPrevious: true,
+    });
+    await forwarder("https://exchange.example.com/fora.x/Y", { method: "POST", headers: signedHeaders, body: BODY });
+
+    const sig2 = (calls[0] as Captured).init.headers?.["signature-input"]?.split("sig2=")[1] ?? "";
+    for (const want of ['"signature";key="sig1"', '"signature-input";key="sig1"', '"signature-agent";key="sig1"']) {
+      expect(sig2).toContain(want);
+    }
   });
 
   it("predicate returning FALSE: request passes through UNSIGNED (not an error)", async () => {
-    const { privKey, keyid } = await genSigner();
     const { send, calls } = capturingSend();
     const signing = createSigningTransport(send, {
-      privKey,
-      keyid,
+      ...(await genSigner()),
       predicate: () => false,
     });
 
@@ -516,11 +623,9 @@ describe("createSigningTransport option behavior (ported from Go transport_optio
   });
 
   it("predicate returning TRUE: signs even a non-/fora path", async () => {
-    const { privKey, keyid } = await genSigner();
     const { send, calls } = capturingSend();
     const signing = createSigningTransport(send, {
-      privKey,
-      keyid,
+      ...(await genSigner()),
       predicate: () => true,
     });
 
@@ -534,10 +639,9 @@ describe("createSigningTransport option behavior (ported from Go transport_optio
     expect(h["signature-input"]).toBeDefined();
   });
 
-  it("default (zero options): signs any bodied request", async () => {
-    const { privKey, keyid } = await genSigner();
+  it("default (only the identity): signs any bodied request", async () => {
     const { send, calls } = capturingSend();
-    const signing = createSigningTransport(send, { privKey, keyid });
+    const signing = createSigningTransport(send, await genSigner());
 
     await signing("https://exchange.example.com/fora.x/Y", {
       method: "POST",
@@ -551,9 +655,8 @@ describe("createSigningTransport option behavior (ported from Go transport_optio
   });
 
   it("no-body request: passes through UNSIGNED (nothing to bind Content-Digest to)", async () => {
-    const { privKey, keyid } = await genSigner();
     const { send, calls } = capturingSend();
-    const signing = createSigningTransport(send, { privKey, keyid });
+    const signing = createSigningTransport(send, await genSigner());
 
     await signing("https://exchange.example.com/fora.x/Y", {
       method: "GET",
diff --git a/sdk/ts/tests/synthesized-detail.parity.test.ts b/sdk/ts/tests/synthesized-detail.parity.test.ts
index da858a04..2f852c84 100644
--- a/sdk/ts/tests/synthesized-detail.parity.test.ts
+++ b/sdk/ts/tests/synthesized-detail.parity.test.ts
@@ -140,6 +140,7 @@ describe("the content leg's synthesized detail", () => {
 			])) as CryptoKeyPair;
 			const client = createClient("https://exchange.test", {
 				signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+				signatureAgent: "https://agent.test",
 				agentPublicKey: keys.publicKey,
 			});
 			return (await client
diff --git a/sdk/ts/tests/verify-request.parity.test.ts b/sdk/ts/tests/verify-request.parity.test.ts
index e818115b..fff1643c 100644
--- a/sdk/ts/tests/verify-request.parity.test.ts
+++ b/sdk/ts/tests/verify-request.parity.test.ts
@@ -1,417 +1,339 @@
-// sdk/ts full-RPC single-signature SERVER-VERIFY parity against the shared Go
-// oracle (agentic-content-access, SINGLE-SIG scope; multisig-chain verify is out
-// of scope — the multisig verify sibling owns it).
+// sdk/ts single-signature SERVER-VERIFY parity against the shared Go oracle, under the
+// Web Bot Auth profile.
 //
-// Today sdk/ts has NO framework-agnostic request-verify: hono/middleware.ts's
-// foraVerify is edge-GET-PoP-scoped (2-component, self-verifying, no resolver)
-// and core/verifier.ts is OFFER verify (JCS), a different concern. This suite
-// pins the NEW core/verify-request.ts — the verify sibling of the just-landed
-// core/sign-request.ts — which must mirror sdk/go/connectserver semantics
-// reason-for-reason: covered-set/digest/window enforcement, replay detection via
-// an INJECTED store, keys via an INJECTED KeyResolver, time via an INJECTED
-// clock, and the reject taxonomy exposed as a RETURNED verdict (not thrown).
+// core/verify-request.ts mirrors sdk/go/connectserver semantics reason-for-reason: the
+// profile (tag, Signature-Agent form, the signature's own member), the FORA RPC covered
+// set, digest and window enforcement, replay detection via an INJECTED store, keys via
+// an INJECTED resolver keyed by keyid and directory, time via an INJECTED clock, and the
+// reject taxonomy exposed as a RETURNED verdict (never thrown).
 //
-// Byte/semantic oracle:
-//   - positive round-trip: a request reconstructed from
-//     sdk/go/helpers/testdata/sign-request-vectors.json (the same vectors the
-//     TS/Python request SIGNERS produce) MUST verify (valid=true); the vector's
-//     key is injected via the KeyResolver and the vector's created/expires window
-//     via the clock;
-//   - a request signed live by core/sign-request.ts::signRequest MUST verify;
-//   - negatives: each Go-emitted SINGLE-SIG negative-verify vector
-//     (verify-request-neg-vectors.json) MUST be REJECTED with the reason the Go
-//     connectserver taxonomy assigns (mirroring ClassifyReject / RejectReason /
-//     ErrReplayed).
-//
-// Reject taxonomy the verdict must expose (mirrors sdk/go/connectserver
-// classify.go RejectReason.String() tokens): "signature" (bad sig / expiry /
-// future-created / wrong-or-unresolvable key / tampered covered field / missing
-// component — the default) and "replay". broken_chain / hop_budget are multisig
-// and OUT OF SCOPE here.
-//
-// RED until BOTH (a) sdk/ts/core/verify-request.ts exists AND (b) the Go emitter
-// produces verify-request-neg-vectors.json. The implement step adds
-// both; this test is the TDD-red contract. Do NOT implement either here.
+// Oracle:
+//   - every sign-request vector (the bytes the TS/Python/Go signers produce) verifies,
+//     and the verdict reports the directory the signature's member names;
+//   - every verify-request-accept vector — the forms other Web Bot Auth signers send,
+//     which the SDK never emits — verifies and reports expected_signature_agent;
+//   - every verify-request-neg vector is REJECTED with the reason the Go taxonomy
+//     assigns, and answered with exactly the expected_accept_signature (none when the
+//     vector omits it).
 
-import { describe, it, expect } from "vitest";
-// RED: sdk/ts/core/verify-request.ts does not exist yet (TDD red step). The
-// entry mirrors Go serverConfig.verify: framework-agnostic, injected resolver +
-// replay store + clock, returns a verdict carrying the reject reason.
+import { describe, expect, it } from "vitest";
+import { signRequest } from "../core/sign-request.ts";
 import {
-  verifyRequestServer,
-  type RejectReason,
-  type RequestKeyResolver,
-  type ReplayStore,
-  type VerifyRequestHeaders,
+	type RejectReason,
+	type ReplayStore,
+	type RequestKeyResolver,
+	type VerifyRequestHeaders,
+	verifyRequestServer,
 } from "../core/verify-request.ts";
-import { signRequest } from "../core/sign-request.ts";
 import signRequestVectors from "../../go/helpers/testdata/sign-request-vectors.json";
-// RED (also): this negative-verify vector file is produced by the Go emitter
-// extension the implement step adds; it does not exist yet, so the import fails
-// at collection — a clean TDD-red signal that the shared oracle is missing.
+import acceptVerifyVectors from "../../go/helpers/testdata/verify-request-accept-vectors.json";
 import negVerifyVectors from "../../go/helpers/testdata/verify-request-neg-vectors.json";
+import {
+	AGENT_DIRECTORY,
+	b64urlToBytes,
+	directoryResolver,
+	hexToBytes,
+	importSigningKey,
+} from "./wba-fixtures.ts";
 
 type SignRequestVector = {
-  name: string;
-  method: string;
-  url: string;
-  body_hex: string;
-  authorization: string;
-  signature_agent: string;
-  keyid: string;
-  created: number;
-  expires: number;
-  signer_seed_hex: string;
-  pubkey_b64url: string;
-  content_digest: string;
-  signature_input: string;
-  signature: string;
+	name: string;
+	method: string;
+	url: string;
+	body_hex: string;
+	authorization: string;
+	signature_agent: string;
+	keyid: string;
+	created: number;
+	expires: number;
+	pubkey_b64url: string;
+	content_digest: string;
+	signature_input: string;
+	signature: string;
+	emitted_headers: Record<string, string[]>;
 };
 
-// A Go-emitted single-sig negative-verify vector: a fully-formed request whose
-// verification MUST be rejected, tagged with the exact reason token and the keyid
-// whose public key the resolver must serve (empty/absent for the wrong-key case).
-type NegVerifyVector = {
-  name: string; // neg_bad_sig | neg_replay | neg_expired | neg_wrong_key | neg_tampered_authorization
-  method: string;
-  url: string;
-  body_hex: string;
-  authorization: string;
-  signature_agent: string;
-  content_digest: string;
-  signature_input: string;
-  signature: string;
-  // keyid the request claims; resolver_pubkey_b64url is the key the resolver
-  // returns for it (may be a WRONG key for neg_wrong_key, or absent to force an
-  // unresolvable-key rejection).
-  keyid: string;
-  resolver_keyid?: string;
-  resolver_pubkey_b64url?: string;
-  // pinned verifier clock inside/outside the window per the case under test.
-  now: number;
-  // the reason token the Go taxonomy assigns (RejectReason.String()).
-  expected_reason: RejectReason;
-  // for neg_replay: the same request is presented twice; the SECOND presentation
-  // is the one that must be rejected as "replay".
-  replay?: boolean;
-  // for neg_entitlement_uncovered: the value to put in the (uncovered)
-  // X-Entitlement-Token request header. Non-empty forces
-  // enforceEntitlementCoverage to reject "signature" since the base covered set
-  // does not commit to it.
-  entitlement?: string;
-  // names the request does NOT carry — the key is DELETED after the base ones are
-  // set, so the face sees a covered name with no field line under it rather than an
-  // empty one. Absent is not empty, and the two must not verify alike.
-  omit_headers?: string[];
-  // field lines ADDED beside the base ones, spelled in a DIFFERENT case so an object
-  // holds both. Two keys, one covered name: the values join before the base is
-  // rebuilt, which is what stops an unsigned token riding under a signed empty one.
-  extra_headers?: Record<string, string>;
+// A Go-emitted verify vector: a fully-formed request, the key the resolver serves for
+// resolver_keyid, the pinned clock, and the verdict. `signature_agent` is the
+// Signature-Agent HEADER value.
+type VerifyVector = {
+	name: string;
+	method: string;
+	url: string;
+	body_hex: string;
+	authorization: string;
+	signature_agent: string;
+	content_digest: string;
+	signature_input: string;
+	signature: string;
+	keyid: string;
+	resolver_keyid?: string;
+	resolver_pubkey_b64url?: string;
+	now: number;
+	expected_reason: RejectReason | "";
+	expected_accept_signature?: string;
+	expected_signature_agent?: string;
+	// The same request is presented twice; the SECOND presentation must be "replay".
+	replay?: boolean;
+	// An X-Entitlement-Token value the signature does not cover.
+	entitlement?: string;
+	// Names the request does NOT carry — deleted after the base ones are set, so the face
+	// sees a covered name with no field line rather than an empty one.
+	omit_headers?: string[];
+	// Field lines ADDED beside the base ones, spelled in a different case so an object
+	// holds both; their values join before the base is rebuilt.
+	extra_headers?: Record<string, string>;
 };
 
-function hexToBytes(hex: string): Uint8Array<ArrayBuffer> {
-  const out = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < out.length; i++) {
-    out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-  }
-  return out;
+// A keyid-keyed resolver that records every call — the injected-boundary probe for the
+// vectors that carry no directory of their own.
+function keyidResolver(keys: Record<string, Uint8Array<ArrayBuffer>>): RequestKeyResolver & { calls: string[] } {
+	const calls: string[] = [];
+	return {
+		calls,
+		resolve(keyid) {
+			calls.push(keyid);
+			return keys[keyid];
+		},
+	};
 }
 
-function b64urlToBytes(s: string): Uint8Array<ArrayBuffer> {
-  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - (s.length % 4));
-  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
-  const bin = atob(b64);
-  const out = new Uint8Array(bin.length);
-  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
-  return out;
+function memoryReplayStore(): ReplayStore {
+	const seen = new Set<string>();
+	return {
+		async seenNonce(nonce) {
+			return seen.has(nonce);
+		},
+		async seenOrAdd(nonce) {
+			if (seen.has(nonce)) return true;
+			seen.add(nonce);
+			return false;
+		},
+	};
 }
 
-const PKCS8_ED25519_PREFIX = Uint8Array.from([
-  0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04,
-  0x22, 0x04, 0x20,
-]);
-
-async function importSigningKey(seedHex: string): Promise<CryptoKey> {
-  const seed = hexToBytes(seedHex);
-  const pkcs8 = new Uint8Array(PKCS8_ED25519_PREFIX.length + seed.length);
-  pkcs8.set(PKCS8_ED25519_PREFIX, 0);
-  pkcs8.set(seed, PKCS8_ED25519_PREFIX.length);
-  return crypto.subtle.importKey("pkcs8", pkcs8, { name: "Ed25519" }, false, [
-    "sign",
-  ]);
-}
+const fixedClock = (nowUnix: number) => () => nowUnix;
 
-// A KeyResolver that records every keyid it was asked to resolve — the
-// injected-boundary probe. The SDK MUST resolve keys ONLY through this holder;
-// the test asserts the recorded calls to prove no key was read out-of-band.
-function recordingResolver(
-  keys: Record<string, Uint8Array<ArrayBuffer>>,
-): RequestKeyResolver & { calls: (string | null)[] } {
-  const calls: (string | null)[] = [];
-  return {
-    calls,
-    resolve(keyid: string | null): Uint8Array<ArrayBuffer> | undefined {
-      calls.push(keyid);
-      return keyid === null ? undefined : keys[keyid];
-    },
-  };
+function headersFor(v: VerifyVector): VerifyRequestHeaders {
+	const headers: VerifyRequestHeaders = {
+		"content-digest": v.content_digest,
+		"signature-input": v.signature_input,
+		signature: v.signature,
+		authorization: v.authorization,
+		"signature-agent": v.signature_agent,
+	};
+	if (v.entitlement) headers["x-entitlement-token"] = v.entitlement;
+	const bag = headers as Record<string, string | undefined>;
+	for (const name of v.omit_headers ?? []) delete bag[name.toLowerCase()];
+	// AFTER the base ones, so the join order matches the order the oracle added them.
+	for (const [name, value] of Object.entries(v.extra_headers ?? {})) bag[name] = value;
+	return headers;
 }
 
-// An in-test replay store the SDK orchestrates over (Seen / SeenOrAdd) — the SDK
-// ships no default store, so replay state lives entirely here.
-function memoryReplayStore(): ReplayStore & { seen: Set<string> } {
-  const seen = new Set<string>();
-  return {
-    seen,
-    async seenNonce(nonce: string): Promise<boolean> {
-      return seen.has(nonce);
-    },
-    async seenOrAdd(nonce: string): Promise<boolean> {
-      if (seen.has(nonce)) return true;
-      seen.add(nonce);
-      return false;
-    },
-  };
+function requestFor(v: VerifyVector, resolve: RequestKeyResolver, replayStore: ReplayStore) {
+	return {
+		method: v.method,
+		url: v.url,
+		body: hexToBytes(v.body_hex),
+		headers: headersFor(v),
+		resolve,
+		replayStore,
+		now: fixedClock(v.now),
+	};
 }
 
-// A fixed clock — the SDK reads time ONLY through this, never Date.now().
-function fixedClock(nowUnix: number): () => number {
-  return () => nowUnix;
+function resolverFor(v: VerifyVector): RequestKeyResolver & { calls: string[] } {
+	const keys: Record<string, Uint8Array<ArrayBuffer>> = {};
+	if (v.resolver_pubkey_b64url) keys[v.resolver_keyid ?? v.keyid] = b64urlToBytes(v.resolver_pubkey_b64url);
+	return keyidResolver(keys);
 }
 
-describe("sdk/ts full-RPC single-sig server-verify mirrors the Go connectserver oracle", () => {
-  const signDoc = signRequestVectors as { vectors: SignRequestVector[] };
-  const negDoc = negVerifyVectors as { vectors: NegVerifyVector[] };
-
-  it("negative-verify vector set covers every single-sig reject case", () => {
-    // The Go emitter must produce exactly these named single-sig negatives; the
-    // multisig cases (broken_chain / hop_budget) are out of scope.
-    const names = new Set(negDoc.vectors.map((v) => v.name));
-    expect(names.has("neg_bad_sig")).toBe(true);
-    expect(names.has("neg_replay")).toBe(true);
-    expect(names.has("neg_expired")).toBe(true);
-    expect(names.has("neg_wrong_key")).toBe(true);
-    expect(names.has("neg_tampered_authorization")).toBe(true);
-    expect(names.has("neg_entitlement_uncovered")).toBe(true);
-    // How a covered header is READ, which is a separate claim from whether its
-    // value was tampered with: a name the request does not carry at all, and a
-    // second field line beside the signed one under a different spelling.
-    expect(names.has("neg_absent_authorization")).toBe(true);
-    expect(names.has("neg_absent_signature_agent")).toBe(true);
-    expect(names.has("neg_duplicate_authorization")).toBe(true);
-    // The entitlement name carried twice with an empty line first — the coverage rule
-    // is skipped entirely by a reader that resolves the name to one line.
-    expect(names.has("neg_shadowed_entitlement")).toBe(true);
-  });
-
-  // POSITIVE: every sign-request oracle vector verifies through the server face
-  // when its key is injected via the resolver and its window via the clock.
-  for (const v of signDoc.vectors) {
-    it(`${v.name}: oracle-signed request verifies (valid=true) through the injected boundary`, async () => {
-      const resolver = recordingResolver({
-        [v.keyid]: b64urlToBytes(v.pubkey_b64url),
-      });
-      const store = memoryReplayStore();
-      const now = Math.floor((v.created + v.expires) / 2);
-
-      const verdict = await verifyRequestServer({
-        method: v.method,
-        url: v.url,
-        body: hexToBytes(v.body_hex),
-        headers: {
-          "content-digest": v.content_digest,
-          "signature-input": v.signature_input,
-          signature: v.signature,
-          authorization: v.authorization,
-          "signature-agent": v.signature_agent,
-        },
-        resolve: resolver,
-        replayStore: store,
-        now: fixedClock(now),
-      });
-
-      expect(verdict.valid).toBe(true);
-      // The key was resolved ONLY through the injected resolver (no out-of-band read).
-      expect(resolver.calls).toContain(v.keyid);
-    });
-  }
-
-  it("a request signed live by core/sign-request.ts round-trips through the server face", async () => {
-    const seedHex =
-      "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374";
-    const priv = await importSigningKey(seedHex);
-    const created = 1_700_000_000;
-    const expires = 1_700_000_600;
-    const body = new TextEncoder().encode(
-      '{"uri":"https://cdn.example/live"}',
-    ) as Uint8Array<ArrayBuffer>;
-
-    const signed = await signRequest(priv, {
-      method: "POST",
-      url: "https://broker.example/fora.v1.BrokerService/Fetch",
-      body,
-      authorization: "Bearer live-token",
-      signatureAgent: "https://agent.example",
-      keyid: "mcp.v1",
-      created,
-      expires,
-    });
-
-    // The recorded vectors sign with this seed; its pubkey is the shared oracle
-    // pubkey. Inject it via the resolver so verify resolves mcp.v1 to it.
-    const resolver = recordingResolver({
-      "mcp.v1": b64urlToBytes("rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk"),
-    });
+const LIVE_SEED = "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374";
+const LIVE_PUB = "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk";
+const LIVE_URL = "https://broker.example/fora.v1.BrokerService/Fetch";
 
-    const verdict = await verifyRequestServer({
-      method: "POST",
-      url: "https://broker.example/fora.v1.BrokerService/Fetch",
-      body,
-      headers: {
-        "content-digest": signed.contentDigest,
-        "signature-input": signed.signatureInput,
-        signature: signed.signature,
-        authorization: "Bearer live-token",
-        "signature-agent": "https://agent.example",
-      },
-      resolve: resolver,
-      replayStore: memoryReplayStore(),
-      now: fixedClock(created + 100),
-    });
+describe("sdk/ts single-sig server-verify mirrors the Go connectserver oracle", () => {
+	const signDoc = signRequestVectors as { vectors: SignRequestVector[] };
+	const acceptDoc = acceptVerifyVectors as { vectors: VerifyVector[] };
+	const negDoc = negVerifyVectors as { vectors: VerifyVector[] };
 
-    expect(verdict.valid).toBe(true);
-    expect(resolver.calls).toEqual(["mcp.v1"]);
-  });
+	it("the negative corpus covers every profile and covered-set refusal", () => {
+		const names = new Set(negDoc.vectors.map((v) => v.name));
+		for (const want of [
+			"neg_bad_sig",
+			"neg_replay",
+			"neg_expired",
+			"neg_wrong_key",
+			"neg_tampered_authorization",
+			"neg_entitlement_uncovered",
+			"neg_absent_authorization",
+			"neg_absent_signature_agent",
+			"neg_duplicate_authorization",
+			"neg_shadowed_entitlement",
+			"neg_missing_tag",
+			"neg_wrong_tag",
+			"neg_bare_signature_agent",
+			"neg_signature_agent_member_absent",
+			"neg_signature_agent_type_not_directory",
+			"neg_signature_agent_not_https_origin",
+			"neg_signature_agent_not_an_origin",
+			"neg_missing_fora_component",
+			"neg_unsigned",
+			"neg_repointed_signature_agent",
+		]) {
+			expect(names.has(want), want).toBe(true);
+		}
+	});
 
-  // NEGATIVE: each Go-emitted single-sig negative rejects with the taxonomy reason.
-  for (const v of negDoc.vectors) {
-    it(`${v.name}: rejected with reason "${v.expected_reason}" (fail-closed)`, async () => {
-      const keys: Record<string, Uint8Array<ArrayBuffer>> = {};
-      const rk = v.resolver_keyid ?? v.keyid;
-      if (v.resolver_pubkey_b64url) {
-        keys[rk] = b64urlToBytes(v.resolver_pubkey_b64url);
-      }
-      const resolver = recordingResolver(keys);
-      const store = memoryReplayStore();
-      const now = fixedClock(v.now);
+	// POSITIVE: every sign-request vector verifies when its key is published in the
+	// directory its member names, and the verdict reports that directory.
+	for (const v of signDoc.vectors) {
+		it(`${v.name}: oracle-signed request verifies and reports its directory`, async () => {
+			const resolver = directoryResolver([
+				{ directory: v.signature_agent, keyid: v.keyid, pub: b64urlToBytes(v.pubkey_b64url) },
+			]);
+			const verdict = await verifyRequestServer({
+				method: v.method,
+				url: v.url,
+				body: hexToBytes(v.body_hex),
+				headers: {
+					"content-digest": v.content_digest,
+					"signature-input": v.signature_input,
+					signature: v.signature,
+					authorization: v.authorization,
+					"signature-agent": v.emitted_headers["signature-agent"]?.[0] ?? "",
+				},
+				resolve: resolver,
+				replayStore: memoryReplayStore(),
+				now: fixedClock(Math.floor((v.created + v.expires) / 2)),
+			});
+			expect(verdict).toEqual({ valid: true, keyid: v.keyid, signatureAgent: v.signature_agent });
+			expect(resolver.calls).toEqual([[v.signature_agent, v.keyid]]);
+		});
+	}
 
-      const headers: VerifyRequestHeaders = {
-        "content-digest": v.content_digest,
-        "signature-input": v.signature_input,
-        signature: v.signature,
-        authorization: v.authorization,
-        "signature-agent": v.signature_agent,
-      };
-      // neg_entitlement_uncovered: carry the entitlement-token header the base
-      // covered set does NOT commit to, so enforceEntitlementCoverage rejects it.
-      if (v.entitlement) {
-        headers["x-entitlement-token"] = v.entitlement;
-      }
-      for (const name of v.omit_headers ?? []) {
-        delete (headers as Record<string, string | undefined>)[name.toLowerCase()];
-      }
-      // AFTER the base ones, so the join order matches the order the oracle added
-      // them. Verbatim spelling — the case difference is the whole point.
-      for (const [name, value] of Object.entries(v.extra_headers ?? {})) {
-        (headers as Record<string, string | undefined>)[name] = value;
-      }
+	// POSITIVE: the forms WG-00 permits that the SDK never emits.
+	for (const v of acceptDoc.vectors) {
+		it(`${v.name}: verifies and reports ${v.expected_signature_agent}`, async () => {
+			const resolver = directoryResolver([
+				{
+					directory: v.expected_signature_agent ?? "",
+					keyid: v.resolver_keyid ?? v.keyid,
+					pub: b64urlToBytes(v.resolver_pubkey_b64url ?? ""),
+				},
+			]);
+			const verdict = await verifyRequestServer(requestFor(v, resolver, memoryReplayStore()));
+			expect(verdict.valid, verdict.reason).toBe(true);
+			expect(verdict.signatureAgent).toBe(v.expected_signature_agent);
+			expect(verdict.acceptSignature).toBeUndefined();
+		});
+	}
 
-      const req = {
-        method: v.method,
-        url: v.url,
-        body: hexToBytes(v.body_hex),
-        headers,
-        resolve: resolver,
-        replayStore: store,
-        now,
-      };
+	// NEGATIVE: each Go-emitted refusal rejects with the taxonomy reason and exactly the
+	// Accept-Signature the oracle answers with.
+	for (const v of negDoc.vectors) {
+		it(`${v.name}: rejected with reason "${v.expected_reason}" and its Accept-Signature`, async () => {
+			const req = requestFor(v, resolverFor(v), memoryReplayStore());
+			if (v.replay) {
+				// The first presentation is accepted and records the nonce; the SECOND is
+				// the one that must be rejected as "replay".
+				expect((await verifyRequestServer(req)).valid).toBe(true);
+			}
+			const verdict = await verifyRequestServer(req);
+			expect(verdict.valid).toBe(false);
+			expect(verdict.reason).toBe(v.expected_reason);
+			expect(verdict.acceptSignature).toBe(v.expected_accept_signature);
+		});
+	}
 
-      if (v.replay) {
-        // First presentation is accepted and records the nonce; the SECOND is
-        // the one that must be rejected as "replay".
-        const first = await verifyRequestServer(req);
-        expect(first.valid).toBe(true);
-      }
+	async function liveSigned(created: number, expires: number) {
+		const body = new TextEncoder().encode('{"uri":"https://cdn.example/live"}') as Uint8Array<ArrayBuffer>;
+		const signed = await signRequest(await importSigningKey(LIVE_SEED), {
+			method: "POST",
+			url: LIVE_URL,
+			body,
+			authorization: "Bearer live-token",
+			signatureAgent: AGENT_DIRECTORY,
+			keyid: "mcp.v1",
+			created,
+			expires,
+		});
+		const headers: VerifyRequestHeaders = {
+			"content-digest": signed.contentDigest,
+			"signature-input": signed.signatureInput,
+			signature: signed.signature,
+			authorization: signed.authorization,
+			"signature-agent": signed.signatureAgent,
+		};
+		return { body, headers };
+	}
 
-      const verdict = await verifyRequestServer(req);
-      expect(verdict.valid).toBe(false);
-      expect(verdict.reason).toBe(v.expected_reason);
-    });
-  }
+	it("a request signed live by core/sign-request.ts round-trips through the server face", async () => {
+		const created = 1_700_000_000;
+		const { body, headers } = await liveSigned(created, created + 300);
+		const resolver = directoryResolver([{ directory: AGENT_DIRECTORY, keyid: "mcp.v1", pub: b64urlToBytes(LIVE_PUB) }]);
+		const verdict = await verifyRequestServer({
+			method: "POST",
+			url: LIVE_URL,
+			body,
+			headers,
+			resolve: resolver,
+			replayStore: memoryReplayStore(),
+			now: fixedClock(created + 100),
+		});
+		expect(verdict).toEqual({ valid: true, keyid: "mcp.v1", signatureAgent: AGENT_DIRECTORY });
+	});
 
-  // The single-sig MaxSignatureAge lifetime clamp (mirrors Go
-  // enforceCreatedExpires with opts.MaxSignatureAge). A live-signed request with a
-  // known window is verified at several clamp settings: unbounded default, at the
-  // bound (inclusive → pass), above the bound (pass), below the bound (reject
-  // "signature"). Live-signing keeps the window a first-class test knob.
-  describe("single-sig MaxSignatureAge clamp", () => {
-    const seedHex =
-      "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374";
-    const created = 1_700_000_000;
-    const expires = 1_700_000_600; // window = 600s
-    const window = expires - created;
+	it("a key published only in another directory is not found: the resolver is asked for the member's directory", async () => {
+		const created = 1_700_000_000;
+		const { body, headers } = await liveSigned(created, created + 300);
+		const resolver = directoryResolver([
+			{ directory: "https://other.example", keyid: "mcp.v1", pub: b64urlToBytes(LIVE_PUB) },
+		]);
+		const verdict = await verifyRequestServer({
+			method: "POST",
+			url: LIVE_URL,
+			body,
+			headers,
+			resolve: resolver,
+			now: fixedClock(created + 100),
+		});
+		expect(verdict).toEqual({ valid: false, reason: "signature" });
+		expect(resolver.calls).toEqual([[AGENT_DIRECTORY, "mcp.v1"]]);
+	});
 
-    async function verifyWithMaxAge(
-      maxSignatureAge: number | undefined,
-    ): Promise<RejectReason | "valid"> {
-      const priv = await importSigningKey(seedHex);
-      const body = new TextEncoder().encode(
-        '{"uri":"https://cdn.example/live"}',
-      ) as Uint8Array<ArrayBuffer>;
-      const signed = await signRequest(priv, {
-        method: "POST",
-        url: "https://broker.example/fora.v1.BrokerService/Fetch",
-        body,
-        authorization: "Bearer live-token",
-        signatureAgent: "https://agent.example",
-        keyid: "mcp.v1",
-        created,
-        expires,
-      });
-      const resolver = recordingResolver({
-        "mcp.v1": b64urlToBytes("rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk"),
-      });
-      const verdict = await verifyRequestServer({
-        method: "POST",
-        url: "https://broker.example/fora.v1.BrokerService/Fetch",
-        body,
-        headers: {
-          "content-digest": signed.contentDigest,
-          "signature-input": signed.signatureInput,
-          signature: signed.signature,
-          authorization: "Bearer live-token",
-          "signature-agent": "https://agent.example",
-        },
-        resolve: resolver,
-        replayStore: memoryReplayStore(),
-        now: fixedClock(created + 100),
-        ...(maxSignatureAge !== undefined ? { maxSignatureAge } : {}),
-      });
-      return verdict.valid ? "valid" : (verdict.reason as RejectReason);
-    }
+	// The MaxSignatureAge lifetime clamp (mirrors Go enforceCreatedExpires with
+	// opts.MaxSignatureAge): a live-signed 300-second window at several clamp settings.
+	describe("single-sig MaxSignatureAge clamp", () => {
+		const created = 1_700_000_000;
+		const window = 300;
 
-    it("unbounded (undefined) accepts the declared window", async () => {
-      expect(await verifyWithMaxAge(undefined)).toBe("valid");
-    });
-    it("maxAge equal to the window is accepted (inclusive bound)", async () => {
-      expect(await verifyWithMaxAge(window)).toBe("valid");
-    });
-    it("maxAge above the window is accepted", async () => {
-      expect(await verifyWithMaxAge(window + 1)).toBe("valid");
-    });
-    it("maxAge below the window rejects (signature)", async () => {
-      expect(await verifyWithMaxAge(window - 1)).toBe("signature");
-    });
-  });
+		async function verifyWithMaxAge(maxSignatureAge: number | undefined): Promise<RejectReason | "valid"> {
+			const { body, headers } = await liveSigned(created, created + window);
+			const verdict = await verifyRequestServer({
+				method: "POST",
+				url: LIVE_URL,
+				body,
+				headers,
+				resolve: directoryResolver([{ directory: AGENT_DIRECTORY, keyid: "mcp.v1", pub: b64urlToBytes(LIVE_PUB) }]),
+				replayStore: memoryReplayStore(),
+				now: fixedClock(created + 100),
+				...(maxSignatureAge !== undefined ? { maxSignatureAge } : {}),
+			});
+			return verdict.valid ? "valid" : (verdict.reason as RejectReason);
+		}
 
-  it("verify reads time ONLY through the injected clock (an expired vector at an in-window injected now would pass, proving the clock is honored)", () => {
-    // Guard: the negative-window vectors are rejected because the INJECTED clock
-    // — not Date.now() — places them outside created..expires. The neg_expired
-    // vector's `now` is post-expiry; if verify read the wall clock it could not
-    // deterministically reject. This assertion documents the injected-clock
-    // boundary the per-vector negative already exercises.
-    const expired = negDoc.vectors.find((v) => v.name === "neg_expired");
-    expect(expired).toBeDefined();
-    expect(expired?.expected_reason).toBe("signature");
-  });
+		it("unbounded (undefined) accepts the declared window", async () => {
+			expect(await verifyWithMaxAge(undefined)).toBe("valid");
+		});
+		it("maxAge equal to the window is accepted (inclusive bound)", async () => {
+			expect(await verifyWithMaxAge(window)).toBe("valid");
+		});
+		it("maxAge above the window is accepted", async () => {
+			expect(await verifyWithMaxAge(window + 1)).toBe("valid");
+		});
+		it("maxAge below the window rejects (signature)", async () => {
+			expect(await verifyWithMaxAge(window - 1)).toBe("signature");
+		});
+	});
 });
diff --git a/sdk/ts/tests/wba-fixtures.ts b/sdk/ts/tests/wba-fixtures.ts
new file mode 100644
index 00000000..cffbc191
--- /dev/null
+++ b/sdk/ts/tests/wba-fixtures.ts
@@ -0,0 +1,57 @@
+// Shared fixtures for the Web Bot Auth profile suites: decoding the Go-emitted vectors'
+// hex and base64url fields, importing a vector's Ed25519 seed as a signing key, and a
+// resolver keyed by (directory, keyid) so a signature resolved through the wrong
+// Signature-Agent member finds no key.
+
+import type { RequestKeyResolver } from "../core/verify-request.ts";
+
+export function hexToBytes(hex: string): Uint8Array<ArrayBuffer> {
+	const out = new Uint8Array(hex.length / 2);
+	for (let i = 0; i < out.length; i++) {
+		out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+	}
+	return out;
+}
+
+export function b64urlToBytes(s: string): Uint8Array<ArrayBuffer> {
+	const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - (s.length % 4));
+	const bin = atob(s.replace(/-/g, "+").replace(/_/g, "/") + pad);
+	const out = new Uint8Array(bin.length);
+	for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+	return out;
+}
+
+// The fixed PKCS8 DER prefix for an Ed25519 private key; the 32-byte seed follows.
+// WebCrypto cannot import a bare Ed25519 seed as "raw", so it is wrapped and imported
+// as "pkcs8".
+const PKCS8_ED25519_PREFIX = Uint8Array.from([
+	0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20,
+]);
+
+/** Import a 32-byte Ed25519 seed (hex) as a signing key. */
+export async function importSigningKey(seedHex: string): Promise<CryptoKey> {
+	const seed = hexToBytes(seedHex);
+	const pkcs8 = new Uint8Array(PKCS8_ED25519_PREFIX.length + seed.length);
+	pkcs8.set(PKCS8_ED25519_PREFIX, 0);
+	pkcs8.set(seed, PKCS8_ED25519_PREFIX.length);
+	return crypto.subtle.importKey("pkcs8", pkcs8, { name: "Ed25519" }, false, ["sign"]);
+}
+
+/** A resolver that finds a key only under the directory it was registered in, and
+ * records every (directory, keyid) it was asked for. */
+export function directoryResolver(
+	entries: Array<{ directory: string; keyid: string; pub: Uint8Array<ArrayBuffer> }>,
+): RequestKeyResolver & { calls: Array<[string, string]> } {
+	const keys = new Map(entries.map((e) => [`${e.directory} ${e.keyid}`, e.pub]));
+	const calls: Array<[string, string]> = [];
+	return {
+		calls,
+		resolve(keyid, directory) {
+			calls.push([directory, keyid]);
+			return keys.get(`${directory} ${keyid}`);
+		},
+	};
+}
+
+/** The agent directory most live-signed fixtures sign as. */
+export const AGENT_DIRECTORY = "https://agent.example";
diff --git a/sdk/ts/tests/wba-profile.test.ts b/sdk/ts/tests/wba-profile.test.ts
new file mode 100644
index 00000000..07362111
--- /dev/null
+++ b/sdk/ts/tests/wba-profile.test.ts
@@ -0,0 +1,296 @@
+// The Web Bot Auth profile pieces the signers and verifiers share, ported from
+// sdk/go/helpers/wba_profile_test.go: what counts as an https origin, what no profile
+// signature may carry, the Accept-Signature value, and which refusals a verifier
+// answers with it.
+
+import { describe, expect, it } from "vitest";
+import {
+	acceptSignature,
+	buildSignatureBase,
+	checkHttpsOrigin,
+	MAX_SIGNATURE_LIFETIME,
+	requestComponentValue,
+	signatureInputInner,
+	signRequest,
+	WebBotAuthError,
+} from "../core/sign-request.ts";
+import { verifyMultisigRequestServer } from "../core/verify-multisig-request.ts";
+import { verifyRequestServer, type VerifyVerdict } from "../core/verify-request.ts";
+import { type CoveredComponent, keyed, plain } from "../core/wba.ts";
+import { encodeBase64Url, stdBase64 } from "../src/base64url.ts";
+import { POP_ACCEPT_SIGNATURE, verifyAgentBinding } from "../src/pop.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import { AGENT_DIRECTORY, b64urlToBytes, importSigningKey } from "./wba-fixtures.ts";
+
+const SEED = "55565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071727374";
+// The public half of SEED, as the sign-request vectors record it.
+const PUB = "rGv1a5oEriM-jaKs3KzrFzzn4Hb180dA4XuZ0bAs_gk";
+const URL_ = "https://exchange.example/fora.v1.ExchangeService/DiscoverResources";
+const CREATED = 1_700_000_000;
+const BODY = new TextEncoder().encode("x") as Uint8Array<ArrayBuffer>;
+const FORA_RPC = ["@method", "@target-uri", "content-digest", "authorization"].map(plain);
+
+describe("checkHttpsOrigin", () => {
+	for (const ok of [
+		"https://agent.example",
+		"https://agent.example:8443",
+		"https://127.0.0.1",
+		"https://[::1]:8443",
+		"https://xn--bcher-kva.example",
+		"https://a_b.example",
+	]) {
+		it(`accepts ${ok}`, () => {
+			expect(() => checkHttpsOrigin(ok)).not.toThrow();
+		});
+	}
+	for (const bad of [
+		"",
+		"agent.example",
+		"http://agent.example",
+		"HTTPS://agent.example",
+		"https://Agent.example",
+		"https://agent.example/",
+		"https://agent.example/keys",
+		"https://agent.example?x=1",
+		"https://agent.example#f",
+		"https://user@agent.example",
+		"https://agent.example:443",
+		"https://agent.example:0",
+		"https://agent.example:99999",
+		"https://agent.example:",
+		"https://bücher.example",
+		"https://",
+		"https://a..example",
+		"https://agent.example%2F",
+		'https://agent.example"',
+		"https://[::1",
+		"https://agent.example:08443",
+	]) {
+		it(`refuses ${JSON.stringify(bad)}`, () => {
+			let err: unknown;
+			try {
+				checkHttpsOrigin(bad);
+			} catch (e) {
+				err = e;
+			}
+			expect(err).toBeInstanceOf(WebBotAuthError);
+			expect((err as WebBotAuthError).reason).toBe("signature_agent_not_origin");
+		});
+	}
+});
+
+describe("signRequest refuses what no profile signature carries", () => {
+	const ok = {
+		method: "POST",
+		url: URL_,
+		body: BODY,
+		authorization: "",
+		signatureAgent: AGENT_DIRECTORY,
+		keyid: "agent.v1",
+		created: CREATED,
+		expires: CREATED + MAX_SIGNATURE_LIFETIME,
+	};
+	const cases: Array<[string, Partial<typeof ok> & { label?: string; nonce?: string }, string]> = [
+		["no Signature-Agent", { signatureAgent: "" }, "signature_agent_required"],
+		["plaintext origin", { signatureAgent: "http://agent.example" }, "signature_agent_not_origin"],
+		["bare host", { signatureAgent: "agent.example" }, "signature_agent_not_origin"],
+		["origin with a path", { signatureAgent: "https://agent.example/keys" }, "signature_agent_not_origin"],
+		["six-minute window", { expires: CREATED + 360 }, "signature_lifetime"],
+		["empty window", { expires: CREATED }, "signature_lifetime"],
+		["no created", { created: 0 }, "signature_lifetime"],
+		["label not a key", { label: "Sig1" }, "signature_label"],
+		["nonce outside base64url", { nonce: 'a"b' }, "invalid_nonce"],
+	];
+	for (const [name, edit, reason] of cases) {
+		it(name, async () => {
+			await expect(signRequest(await importSigningKey(SEED), { ...ok, ...edit })).rejects.toMatchObject({ reason });
+		});
+	}
+
+	it("signs a window of exactly MAX_SIGNATURE_LIFETIME under an explicit label", async () => {
+		const signed = await signRequest(await importSigningKey(SEED), { ...ok, label: "agent" });
+		expect(signed.signatureAgent).toBe(`agent="${AGENT_DIRECTORY}"`);
+		expect(signed.signatureInput.startsWith('agent=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="agent")')).toBe(true);
+	});
+});
+
+describe("acceptSignature", () => {
+	it("is the value the authentication page shows", () => {
+		expect(acceptSignature(false)).toBe(
+			'sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created;expires;tag="web-bot-auth"',
+		);
+		expect(acceptSignature(true)).toContain('"signature-agent";key="sig1" "x-entitlement-token")');
+	});
+});
+
+// rawSigned signs a request whose covered set, label, tag and Signature-Agent the test
+// chooses — the forms other Web Bot Auth signers send, or a refused one. The base is
+// built by the same builder the SDK verifies with, so a refusal is the profile's, not a
+// signature mismatch.
+async function rawSigned(opts: {
+	agentHeader: string;
+	covered?: CoveredComponent[];
+	label?: string;
+	tag?: string;
+}): Promise<VerifyVerdict> {
+	const label = opts.label ?? "sig1";
+	const covered = opts.covered ?? [...FORA_RPC, keyed("signature-agent", "sig1")];
+	const digest = `sha-256=:${stdBase64(new Uint8Array(await crypto.subtle.digest("SHA-256", BODY)))}:`;
+	const headers: Record<string, string> = {
+		"content-digest": digest,
+		authorization: "",
+		"signature-agent": opts.agentHeader,
+	};
+	const inner = signatureInputInner({
+		covered,
+		keyid: "agent.v1",
+		alg: "ed25519",
+		created: CREATED,
+		expires: CREATED + 300,
+		tag: opts.tag ?? "web-bot-auth",
+	});
+	let base: string;
+	try {
+		base = buildSignatureBase(
+			covered,
+			requestComponentValue({ method: "POST", url: URL_, header: (n) => headers[n] }),
+			inner,
+		);
+	} catch {
+		base = "unresolvable";
+	}
+	const raw = await crypto.subtle.sign("Ed25519", await importSigningKey(SEED), new TextEncoder().encode(base));
+	headers["signature-input"] = `${label}=${inner}`;
+	headers.signature = `${label}=:${stdBase64(new Uint8Array(raw))}:`;
+	const pub = b64urlToBytes(PUB);
+	return verifyRequestServer({
+		method: "POST",
+		url: URL_,
+		body: BODY,
+		headers,
+		resolve: { resolve: (keyid, dir) => (keyid === "agent.v1" && dir === AGENT_DIRECTORY ? pub : undefined) },
+		now: () => CREATED + 100,
+	});
+}
+
+describe("the verifier accepts what WG-00 permits and refuses what the profile does not", () => {
+	const member = `sig1="${AGENT_DIRECTORY}"`;
+	const accepted: Array<[string, Parameters<typeof rawSigned>[0]]> = [
+		["the SDK's own form", { agentHeader: member }],
+		["legacy String form on a single signature", { agentHeader: `"${AGENT_DIRECTORY}"`, covered: [...FORA_RPC, plain("signature-agent")] }],
+		["member key different from the label", { agentHeader: `agent="${AGENT_DIRECTORY}"`, covered: [...FORA_RPC, keyed("signature-agent", "agent")] }],
+		["type=directory as a Token", { agentHeader: `${member};type=directory` }],
+		["other members beside the signer's", { agentHeader: `x="https://x.example", ${member}` }],
+	];
+	for (const [name, opts] of accepted) {
+		it(`accepts ${name}`, async () => {
+			expect(await rawSigned(opts)).toEqual({ valid: true, keyid: "agent.v1", signatureAgent: AGENT_DIRECTORY });
+		});
+	}
+
+	const accept = acceptSignature(false);
+	const refused: Array<[string, Parameters<typeof rawSigned>[0], string | undefined]> = [
+		["another tag", { agentHeader: member, tag: "fora" }, accept],
+		["the dictionary covered as plain signature-agent", { agentHeader: member, covered: [...FORA_RPC, plain("signature-agent")] }, accept],
+		["a member that is a token", { agentHeader: "sig1=agent" }, accept],
+		[
+			"two members covered, neither keyed to the label",
+			{
+				agentHeader: `a="${AGENT_DIRECTORY}", b="${AGENT_DIRECTORY}"`,
+				covered: [...FORA_RPC, keyed("signature-agent", "a"), keyed("signature-agent", "b")],
+			},
+			accept,
+		],
+		["a member with a parameter other than key", { agentHeader: member, covered: [...FORA_RPC, { name: "signature-agent", params: [{ key: "bs", value: true }] }] }, accept],
+		["no Signature-Agent covered", { agentHeader: member, covered: FORA_RPC }, accept],
+		["authorization not covered", { agentHeader: member, covered: [...FORA_RPC.slice(0, 3), keyed("signature-agent", "sig1")] }, accept],
+		["a plaintext origin", { agentHeader: 'sig1="http://agent.example"' }, undefined],
+		["an origin with a path", { agentHeader: 'sig1="https://agent.example/keys"' }, undefined],
+	];
+	for (const [name, opts, want] of refused) {
+		it(`refuses ${name}${want ? " and answers with Accept-Signature" : ", with no Accept-Signature"}`, async () => {
+			const verdict = await rawSigned(opts);
+			expect(verdict.valid).toBe(false);
+			expect(verdict.reason).toBe("signature");
+			expect(verdict.acceptSignature).toBe(want);
+		});
+	}
+});
+
+// A signature the test signs over exactly the components it chooses, through the SDK's
+// own base builder, so the only refusal left is the profile rule under test.
+async function rawProof(
+	kp: CryptoKeyPair,
+	url: string,
+	covered: CoveredComponent[],
+	headers: Record<string, string>,
+	label = "sig1",
+): Promise<{ input: string; signature: string }> {
+	const raw = new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey));
+	const inner = signatureInputInner({
+		covered,
+		keyid: await thumbprint(raw),
+		alg: "ed25519",
+		created: CREATED,
+		expires: CREATED + 300,
+		tag: "web-bot-auth",
+	});
+	const base = buildSignatureBase(covered, requestComponentValue({ method: "GET", url, header: (n) => headers[n] }), inner);
+	const sig = await crypto.subtle.sign("Ed25519", kp.privateKey, new TextEncoder().encode(base));
+	return { input: `${label}=${inner}`, signature: `${label}=:${stdBase64(new Uint8Array(sig))}:` };
+}
+
+describe("verifyAgentBinding requires exactly the profile's covered set", () => {
+	const member = `sig1="${AGENT_DIRECTORY}"`;
+	const cases: Array<[string, CoveredComponent[]]> = [
+		["@method, @target-uri, the member and one more header", [plain("@method"), plain("@target-uri"), keyed("signature-agent", "sig1"), plain("x-extra")]],
+		["no @target-uri", [plain("@method"), keyed("signature-agent", "sig1"), plain("x-extra")]],
+		["@method twice", [plain("@method"), plain("@method"), keyed("signature-agent", "sig1")]],
+	];
+	for (const [name, covered] of cases) {
+		it(`refuses ${name} and answers with Accept-Signature`, async () => {
+			const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
+			const raw = new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey));
+			const agentId = await thumbprint(raw);
+			const url = `https://cdn.example/doc?agent_id=${agentId}`;
+			const signed = { "signature-agent": member, "x-extra": "1" };
+			const proof = await rawProof(kp, url, covered, signed);
+			const headers = new Headers({
+				"x-fora-agent-key": encodeBase64Url(raw),
+				...signed,
+				"signature-input": proof.input,
+				signature: proof.signature,
+			});
+			const result = await verifyAgentBinding({ url, method: "GET", headers, agentId, now: () => (CREATED + 10) * 1000 });
+			expect(result).toEqual({ ok: false, reason: "bad_covered_components", acceptSignature: POP_ACCEPT_SIGNATURE });
+		});
+	}
+});
+
+describe("the legacy String form is accepted on one signature only", () => {
+	it("refuses two signatures covering the legacy form as plain signature-agent, and asks for the dictionary", async () => {
+		const covered = [...FORA_RPC, plain("signature-agent")];
+		const legacy = `"${AGENT_DIRECTORY}"`;
+		const digest = `sha-256=:${stdBase64(new Uint8Array(await crypto.subtle.digest("SHA-256", BODY)))}:`;
+		const fields: Record<string, string> = { "content-digest": digest, authorization: "", "signature-agent": legacy };
+		const priv = await importSigningKey(SEED);
+		const sign = async (label: string) => {
+			const inner = signatureInputInner({ covered, keyid: "agent.v1", alg: "ed25519", created: CREATED, expires: CREATED + 300, tag: "web-bot-auth" });
+			const base = buildSignatureBase(covered, requestComponentValue({ method: "POST", url: URL_, header: (n) => fields[n] }), inner);
+			const sig = await crypto.subtle.sign("Ed25519", priv, new TextEncoder().encode(base));
+			return { input: `${label}=${inner}`, signature: `${label}=:${stdBase64(new Uint8Array(sig))}:` };
+		};
+		const [a, b] = [await sign("sig1"), await sign("sig2")];
+		// Both keys are published where the legacy value points, so only the form rule can
+		// refuse the request.
+		const verdict = await verifyMultisigRequestServer({
+			method: "POST",
+			url: URL_,
+			body: BODY,
+			headers: { ...fields, "signature-input": `${a.input}, ${b.input}`, signature: `${a.signature}, ${b.signature}` },
+			resolve: { resolve: (keyid, dir) => (keyid === "agent.v1" && dir === AGENT_DIRECTORY ? b64urlToBytes(PUB) : undefined) },
+			now: () => CREATED + 100,
+		});
+		expect(verdict).toEqual({ valid: false, reason: "signature", acceptSignature: acceptSignature(false) });
+	});
+});
diff --git a/sdk/ts/tests/window-signature-pin.regression.test.ts b/sdk/ts/tests/window-signature-pin.regression.test.ts
index 601cee60..d978e3a3 100644
--- a/sdk/ts/tests/window-signature-pin.regression.test.ts
+++ b/sdk/ts/tests/window-signature-pin.regression.test.ts
@@ -1,20 +1,16 @@
-// Window-refactor signature regression pin (TypeScript side).
+// signInbound signature-window regression pin (TypeScript side).
 //
-// The Window refactor sources signInbound's (created, expires) from an injected
-// Window (default clockWindow(()=>Date.now()/1000, ttlSec)) instead of the
-// inline `nowSec = Math.floor(now()/1000)` mint. clockWindow MUST FLOOR so
-// the produced @signature-params bytes stay byte-identical. This pin captures
-// the CURRENT (pre-refactor) behaviour and MUST STAY GREEN after the refactor:
+// signInbound sources (created, expires) from an injected Window (default
+// clockWindow(()=>Date.now()/1000, ttlSec)). clockWindow MUST FLOOR so the produced
+// @signature-params bytes are deterministic:
 //   - given a fractional now, created = floor(now/1000), expires = created+ttl,
-//     emitted verbatim in the Signature-Input inner list;
-//   - signInbound is byte-deterministic for a fixed key + fixed now (Ed25519).
-//
-// GREEN NOW by design (characterization guard, not a missing-face red). It
-// imports only shipped modules; if the refactor drops the flooring or changes
-// the window, the exact-string assertion below fails.
+//     emitted verbatim in the Signature-Input parameters, in the profile's order;
+//   - signInbound is byte-deterministic for a fixed key + fixed now (Ed25519);
+//   - a ttl longer than MAX_SIGNATURE_LIFETIME is refused, not signed.
 import { describe, it, expect } from "vitest";
 import { signInbound } from "../core/sign.ts";
 import { thumbprint } from "../src/thumbprint.ts";
+import { AGENT_DIRECTORY } from "./wba-fixtures.ts";
 
 async function fixedAgentKey(): Promise<CryptoKeyPair> {
 	return crypto.subtle.generateKey({ name: "Ed25519" }, true, [
@@ -26,9 +22,9 @@ async function fixedAgentKey(): Promise<CryptoKeyPair> {
 const TARGET = "https://edge.example/fora.v1/resource";
 // A fractional-millisecond now: floor(1_700_000_000_500 / 1000) = 1_700_000_000.
 const NOW_MS = 1_700_000_000_500;
-const TTL_SEC = 600;
+const TTL_SEC = 300;
 const EXPECT_CREATED = 1_700_000_000;
-const EXPECT_EXPIRES = 1_700_000_600;
+const EXPECT_EXPIRES = 1_700_000_300;
 
 describe("signInbound signature window survives the Window refactor byte-identically", () => {
 	it("floors created and stamps created/expires verbatim in Signature-Input", async () => {
@@ -39,19 +35,29 @@ describe("signInbound signature window survives the Window refactor byte-identic
 		const agentId = await thumbprint(rawPub);
 
 		const req = await signInbound(kp, TARGET, {
+			signatureAgent: AGENT_DIRECTORY,
 			now: () => NOW_MS,
 			ttlSec: TTL_SEC,
 		});
 		const sigInput = req.headers.get("signature-input");
 		expect(sigInput).toBe(
-			`sig1=("@method" "@target-uri");keyid="${agentId}";alg="ed25519";created=${EXPECT_CREATED};expires=${EXPECT_EXPIRES}`,
+			`sig1=("@method" "@target-uri" "signature-agent";key="sig1");created=${EXPECT_CREATED};expires=${EXPECT_EXPIRES};keyid="${agentId}";alg="ed25519";tag="web-bot-auth"`,
 		);
+		expect(req.headers.get("signature-agent")).toBe(`sig1="${AGENT_DIRECTORY}"`);
+	});
+
+	it("refuses a window longer than MAX_SIGNATURE_LIFETIME", async () => {
+		const kp = await fixedAgentKey();
+		await expect(
+			signInbound(kp, TARGET, { signatureAgent: AGENT_DIRECTORY, now: () => NOW_MS, ttlSec: 600 }),
+		).rejects.toMatchObject({ reason: "signature_lifetime" });
 	});
 
 	it("is byte-deterministic for a fixed key + fixed now (identical signature)", async () => {
 		const kp = await fixedAgentKey();
-		const a = await signInbound(kp, TARGET, { now: () => NOW_MS, ttlSec: TTL_SEC });
-		const b = await signInbound(kp, TARGET, { now: () => NOW_MS, ttlSec: TTL_SEC });
+		const opts = { signatureAgent: AGENT_DIRECTORY, now: () => NOW_MS, ttlSec: TTL_SEC };
+		const a = await signInbound(kp, TARGET, opts);
+		const b = await signInbound(kp, TARGET, opts);
 		expect(a.headers.get("signature-input")).toBe(b.headers.get("signature-input"));
 		expect(a.headers.get("signature")).toBe(b.headers.get("signature"));
 	});
diff --git a/sdk/ts/tests/window.behavior.test.ts b/sdk/ts/tests/window.behavior.test.ts
index 4d69a003..4b734ab1 100644
--- a/sdk/ts/tests/window.behavior.test.ts
+++ b/sdk/ts/tests/window.behavior.test.ts
@@ -8,11 +8,8 @@
 //      Math.floor(now()); an un-floored default would change signature bytes).
 //   - monotonicWindow(now, ttlSec): expires strictly increases across a burst
 //     within one wall-clock second, so no two back-to-back signatures share an
-//     expires cutoff (relay replay-store uniqueness).
-//
-// RED now purely because sdk/ts/core/window.ts does not exist yet.
+//     expires cutoff, and created moves with it so every window is exactly ttlSec.
 import { describe, it, expect } from "vitest";
-// RED: sdk/ts/core/window.ts does not exist yet (TDD red — missing face).
 import { clockWindow, monotonicWindow } from "../core/window.ts";
 
 describe("sdk/ts clockWindow floors created and adds ttl to expires", () => {
@@ -43,7 +40,7 @@ describe("sdk/ts monotonicWindow strictly increases expires within one second",
 		const first = w();
 		const second = w();
 		const third = w();
-		// created tracks now(); expires is strictly increasing.
+		// The first window starts at now(); expires is strictly increasing.
 		expect(first[0]).toBe(1_700_000_000);
 		expect(second[1]).toBeGreaterThan(first[1]);
 		expect(third[1]).toBeGreaterThan(second[1]);
@@ -58,4 +55,13 @@ describe("sdk/ts monotonicWindow strictly increases expires within one second",
 		}
 		expect(seen.size).toBe(100);
 	});
+
+	it("keeps every window exactly ttlSec during a burst: created moves with expires", () => {
+		const w = monotonicWindow(() => 1_700_000_000, 300);
+		for (let i = 0; i < 5; i += 1) {
+			const [created, expires] = w();
+			expect(expires - created).toBe(300);
+			expect(created).toBe(1_700_000_000 + i);
+		}
+	});
 });
diff --git a/sdk/ts/tests/wire.parity.test.ts b/sdk/ts/tests/wire.parity.test.ts
index e160f6b3..a06ef56c 100644
--- a/sdk/ts/tests/wire.parity.test.ts
+++ b/sdk/ts/tests/wire.parity.test.ts
@@ -12,6 +12,7 @@
 import { describe, it, expect } from "vitest";
 // RED: sdk/ts/src/wire.ts does not exist yet (TDD red — missing face).
 import * as wire from "../src/wire.ts";
+import { acceptSignature } from "../core/sign-request.ts";
 import vectorsFile from "../../go/helpers/testdata/wire-constants-vectors.json";
 
 type WireVector = { name: string; value: string };
@@ -35,6 +36,16 @@ const exportFor: Record<string, keyof typeof wire> = {
 	WellKnownPath: "WellKnownPath",
 	ContentRulesHeader: "ContentRulesHeader",
 	ExchangeHeader: "ExchangeHeader",
+	WBATag: "WBATag",
+	DirectoryResponseTag: "DirectoryResponseTag",
+	AcceptSignatureHeader: "AcceptSignatureHeader",
+};
+
+// The two Accept-Signature values are not constants in any SDK: they are what
+// acceptSignature(entitlement) renders, so the vector pins the function's output.
+const computed: Record<string, string> = {
+	AcceptSignature: acceptSignature(false),
+	AcceptSignatureWithEntitlement: acceptSignature(true),
 };
 
 describe("sdk/ts wire constants match the sdk/go oracle vectors", () => {
@@ -44,6 +55,10 @@ describe("sdk/ts wire constants match the sdk/go oracle vectors", () => {
 
 	for (const v of vectors) {
 		it(`wire.${v.name} === ${JSON.stringify(v.value)}`, () => {
+			if (v.name in computed) {
+				expect(computed[v.name]).toBe(v.value);
+				return;
+			}
 			const sym = exportFor[v.name];
 			expect(sym).toBeDefined();
 			expect((wire as Record<string, unknown>)[sym as string]).toBe(v.value);

From 1761bbb75b15867792ab5e6fa5ae3d9e9524cc5d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 15:07:32 -0400
Subject: [PATCH 116/164] Test interop with Cloudflare's web-bot-auth library

The shared vectors prove the Go, Python and TypeScript SDKs agree with each
other. They cannot show that a Web Bot Auth implementation outside the
three accepts what FORA signs, or that FORA accepts what such an
implementation signs.

web-bot-auth 0.2.0, pinned exactly as a development dependency, is that
outside implementation. The new suite checks three things. web-bot-auth's
verify accepts a request signature and a delivery proof the TS SDK signs.
It accepts the Go-emitted documented examples and the delivery-proof
vectors. And the TS verifier accepts a signature web-bot-auth's sign makes
when asked to cover @method, content-digest and authorization beside
@target-uri. Every signature names its key by thumbprint, which
web-bot-auth requires, and carries a canonical 64-byte nonce, which
web-bot-auth also requires.
---
 sdk/ts/package-lock.json                  |  41 ++++++
 sdk/ts/package.json                       |   1 +
 sdk/ts/tests/web-bot-auth.interop.test.ts | 157 ++++++++++++++++++++++
 3 files changed, 199 insertions(+)
 create mode 100644 sdk/ts/tests/web-bot-auth.interop.test.ts

diff --git a/sdk/ts/package-lock.json b/sdk/ts/package-lock.json
index 123799aa..b63a15cc 100644
--- a/sdk/ts/package-lock.json
+++ b/sdk/ts/package-lock.json
@@ -16,6 +16,7 @@
         "@types/node": "^26.1.0",
         "typescript": "^6.0.3",
         "vitest": "^2.1.0",
+        "web-bot-auth": "0.2.0",
         "zod": "^3.23.0"
       },
       "peerDependencies": {
@@ -1112,12 +1113,29 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
+    "node_modules/http-message-sig": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/http-message-sig/-/http-message-sig-0.3.0.tgz",
+      "integrity": "sha512-ossX5ZDDCRD+YtMzryp3gCg+5wqLFes1RVChEFmEE9Bzbd49Ts2IIIvFnTst/mYWx0ivrxrTTPsIIKKJ07s7+w==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "structured-headers": "2.0.3"
+      }
+    },
     "node_modules/json-schema-traverse": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
       "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
       "license": "MIT"
     },
+    "node_modules/jsonwebkey-thumbprint": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/jsonwebkey-thumbprint/-/jsonwebkey-thumbprint-0.1.0.tgz",
+      "integrity": "sha512-4m/gJEUQH8N2NfvZFjCL8/E+vlt0FlrmHoR4T93CEXQRkC64qwRi6oQri4/eqLVXqEqXYCss0+Q7pLx6vJBqzw==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
     "node_modules/loupe": {
       "version": "3.2.1",
       "resolved": "https://registry.npmjs.org/loupe/-/loupe-3.2.1.tgz",
@@ -1299,6 +1317,17 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/structured-headers": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/structured-headers/-/structured-headers-2.0.3.tgz",
+      "integrity": "sha512-4g5yxhlDMClRwCcfKfLeS7Z8yAVdOWGDADwm80Poh1iReU2KVKLGBlqwpHWJ2qovq0+ZIf1atAEO1eua2o9Rgg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18",
+        "npm": ">=6"
+      }
+    },
     "node_modules/tinybench": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
@@ -1522,6 +1551,18 @@
         }
       }
     },
+    "node_modules/web-bot-auth": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.2.0.tgz",
+      "integrity": "sha512-3DJ72ZhWK4a3yCHCClF6q32g03X37DJlpyASYeBroGTRj/qFkHNcPwkESc3FLigjW6NOWF6MR+Hat9AfOqqtAQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "http-message-sig": "^0.3.0",
+        "jsonwebkey-thumbprint": "^0.1.0",
+        "structured-headers": "2.0.3"
+      }
+    },
     "node_modules/why-is-node-running": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
diff --git a/sdk/ts/package.json b/sdk/ts/package.json
index 8f1ba271..3d9bffc6 100644
--- a/sdk/ts/package.json
+++ b/sdk/ts/package.json
@@ -60,6 +60,7 @@
     "@types/node": "^26.1.0",
     "typescript": "^6.0.3",
     "vitest": "^2.1.0",
+    "web-bot-auth": "0.2.0",
     "zod": "^3.23.0"
   }
 }
diff --git a/sdk/ts/tests/web-bot-auth.interop.test.ts b/sdk/ts/tests/web-bot-auth.interop.test.ts
new file mode 100644
index 00000000..b79250a8
--- /dev/null
+++ b/sdk/ts/tests/web-bot-auth.interop.test.ts
@@ -0,0 +1,157 @@
+// Interop with Cloudflare's web-bot-auth library, an independent implementation of the
+// Web Bot Auth profile (draft-ietf-webbotauth-httpsig-protocol-00). The SDK's own
+// vectors prove the three SDKs agree with each other; this proves they agree with a
+// library none of them shares code with, in both directions:
+//
+//   (a) web-bot-auth's verify accepts a request signature and a delivery proof the TS
+//       SDK signs;
+//   (b) web-bot-auth's verify accepts the Go-emitted documented examples and the
+//       delivery-proof vectors;
+//   (c) the TS verifier accepts a signature web-bot-auth's sign makes once it is asked
+//       to cover the components a FORA RPC requires.
+//
+// web-bot-auth requires the resolved verifier's keyid to equal the signature's keyid,
+// and computes it as the RFC 7638 thumbprint, so every signature here names its key by
+// thumbprint. It also requires a nonce to be 64 bytes in canonical encoding, so the SDK
+// signatures carry the nonce the signing transport and the delivery client mint.
+
+import { describe, expect, it } from "vitest";
+import { sign, verify } from "web-bot-auth";
+import { signerFromJWK, verifierFromJWK } from "web-bot-auth/crypto";
+
+import { signInbound } from "../core/sign.ts";
+import { contentDigest, signRequest } from "../core/sign-request.ts";
+import { newNonce } from "../core/signing-transport.ts";
+import { verifyRequestServer } from "../core/verify-request.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import popVectors from "../../go/helpers/testdata/pop-vectors.json";
+import signRequestVectors from "../../go/helpers/testdata/sign-request-vectors.json";
+import { AGENT_DIRECTORY, b64urlToBytes, directoryResolver, hexToBytes } from "./wba-fixtures.ts";
+
+const URL_ = "https://exchange.example/fora.v1.ExchangeService/DiscoverResources";
+const CREATED = 1_790_812_801;
+const BODY = new TextEncoder().encode('{"q":1}') as Uint8Array<ArrayBuffer>;
+
+/** A fresh Ed25519 key, its public JWK, and its thumbprint keyid. */
+async function agentKey(): Promise<{ keyPair: CryptoKeyPair; jwk: JsonWebKey; keyid: string }> {
+	const keyPair = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
+	const jwk = await crypto.subtle.exportKey("jwk", keyPair.privateKey);
+	const raw = new Uint8Array(await crypto.subtle.exportKey("raw", keyPair.publicKey));
+	return { keyPair, jwk, keyid: await thumbprint(raw) };
+}
+
+/** web-bot-auth's verify over `request`, resolving only `keyid` to the key `x` names. */
+async function wbaVerify(request: Request, x: string, keyid: string, nowSec: number) {
+	const verifier = await verifierFromJWK({ kty: "OKP", crv: "Ed25519", x });
+	expect(verifier.keyid).toBe(keyid);
+	return verify(request, {
+		resolver: (candidate) => {
+			if (candidate.keyid !== keyid) throw new Error(`unknown key ${candidate.keyid}`);
+			return verifier;
+		},
+		now: new Date(nowSec * 1000),
+		maxAge: 300,
+	});
+}
+
+describe("web-bot-auth verifies what the TS SDK signs", () => {
+	it("accepts a FORA RPC request signature", async () => {
+		const { keyPair, jwk, keyid } = await agentKey();
+		const signed = await signRequest(keyPair.privateKey, {
+			method: "POST",
+			url: URL_,
+			body: BODY,
+			authorization: "",
+			signatureAgent: AGENT_DIRECTORY,
+			keyid,
+			created: CREATED,
+			expires: CREATED + 300,
+			nonce: newNonce(),
+		});
+		const request = new Request(URL_, {
+			method: "POST",
+			body: BODY,
+			headers: {
+				"content-digest": signed.contentDigest,
+				authorization: signed.authorization,
+				"signature-agent": signed.signatureAgent,
+				"signature-input": signed.signatureInput,
+				signature: signed.signature,
+			},
+		});
+		const verified = await wbaVerify(request, jwk.x ?? "", keyid, CREATED + 10);
+		expect(verified.keyid).toBe(keyid);
+		expect(verified.tag).toBe("web-bot-auth");
+	});
+
+	it("accepts a delivery proof", async () => {
+		const { keyPair, jwk, keyid } = await agentKey();
+		const url = `https://cdn.example/doc?agent_id=${keyid}`;
+		const proof = await signInbound(keyPair, url, {
+			signatureAgent: AGENT_DIRECTORY,
+			nonce: newNonce(),
+			window: () => [CREATED, CREATED + 300],
+		});
+		const verified = await wbaVerify(proof, jwk.x ?? "", keyid, CREATED + 10);
+		expect(verified.keyid).toBe(keyid);
+	});
+});
+
+describe("web-bot-auth verifies the Go-emitted vectors", () => {
+	type SignVector = (typeof signRequestVectors.vectors)[number];
+	for (const name of ["doc_single_hop_example", "doc_broker_example"]) {
+		it(`accepts the sign-request vector ${name}`, async () => {
+			const v = signRequestVectors.vectors.find((x) => x.name === name) as SignVector;
+			const headers = new Headers();
+			for (const [k, values] of Object.entries(v.emitted_headers)) for (const x of values) headers.append(k, x);
+			const request = new Request(v.url, { method: v.method, headers, body: hexToBytes(v.body_hex) });
+			await wbaVerify(request, v.pubkey_b64url, v.keyid, Math.floor((v.created + v.expires) / 2));
+		});
+	}
+
+	type PopVector = (typeof popVectors)[number];
+	for (const name of ["valid", "valid_no_nonce"]) {
+		it(`accepts the delivery-proof vector ${name}`, async () => {
+			const v = popVectors.find((x) => x.name === name) as PopVector;
+			const request = new Request(v.url, {
+				method: "GET",
+				headers: { "signature-agent": v.signature_agent, "signature-input": v.signature_input, signature: v.signature },
+			});
+			await wbaVerify(request, v.presented_key_b64url, v.agent_id, v.now_unix);
+		});
+	}
+});
+
+describe("the TS verifier accepts what web-bot-auth signs", () => {
+	it("accepts a web-bot-auth signature covering the FORA RPC components", async () => {
+		const { jwk, keyid } = await agentKey();
+		const digest = await contentDigest(BODY);
+		const request = new Request(URL_, {
+			method: "POST",
+			body: BODY,
+			headers: { "signature-agent": `sig1="${AGENT_DIRECTORY}"`, "content-digest": digest, authorization: "" },
+		});
+		const fields = await sign(request, {
+			signer: await signerFromJWK(jwk),
+			created: new Date(CREATED * 1000),
+			expires: new Date((CREATED + 240) * 1000),
+			target: "@target-uri",
+			additionalComponents: ["@method", "content-digest", "authorization"],
+		});
+		const verdict = await verifyRequestServer({
+			method: "POST",
+			url: URL_,
+			body: BODY,
+			headers: {
+				"content-digest": digest,
+				authorization: "",
+				"signature-agent": `sig1="${AGENT_DIRECTORY}"`,
+				"signature-input": fields.signatureInput,
+				signature: fields.signature,
+			},
+			resolve: directoryResolver([{ directory: AGENT_DIRECTORY, keyid, pub: b64urlToBytes(jwk.x ?? "") }]),
+			now: () => CREATED + 10,
+		});
+		expect(verdict).toEqual({ valid: true, keyid, signatureAgent: AGENT_DIRECTORY });
+	});
+});

From 4710fb959f16257a5473b50c412cef4264c8aaf7 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 15:10:27 -0400
Subject: [PATCH 117/164] Sign and verify Python requests under the Web Bot
 Auth profile

The Python SDK signed the v1.0.8 way: a bare Signature-Agent value, no tag,
a 16-byte nonce, labels sig1..sigN required and every appended signature
covering the one before it. It now follows the profile of
draft-ietf-webbotauth-httpsig-protocol-00 the Go SDK implements, and replays
the regenerated Go vectors.

Signing (httpsig.sign_request, append_signature): Signature-Agent is a
structured-field Dictionary, each signature adding its own member
<label>="<origin>" and covering it as "signature-agent";key="<label>".
signature_agent is required and must be an https origin (the new
wba.check_https_origin); the parameters are created, expires, keyid, alg,
nonce and tag="web-bot-auth"; the window is at most MAX_SIGNATURE_LIFETIME.
append_signature takes the request's current Signature-Agent, picks the
first free label, refuses a Signature-Agent that is not a dictionary, and
covers the last earlier signature only with cover_previous. Every refusal
raises a typed SignatureProfileError (a ValueError) before anything is
signed.

Verifying: one shared core (_sigverify) checks each signature on its own:
alg, tag, the FORA RPC components, the directory its own covered member
names (wba.signature_directory, with the legacy String form accepted on a
single signature and the bare value refused), entitlement coverage, window,
digest, then the key and Ed25519. KeyResolver.resolve now receives that
directory, so each key is looked up in its own signer's directory. Coverage
of an earlier signature is optional and must be complete and point
backwards; labels carry no meaning. Verdicts report the directory, and a
refusal for a missing component, a wrong tag or a refused form carries the
Accept-Signature value (wba.accept_signature). Signature-Input, Signature
and Signature-Agent are parsed by a new RFC 8941 parser and serializer
(sfv), which replaces the regex parsers.

The delivery proof (pop.sign_agent_binding) is a Web Bot Auth signature
over @method, @target-uri and the agent's member, with a nonce; it returns
an AgentBinding with the four headers, and the verifier requires the tag.
Key directories are served as
application/http-message-signatures-directory+json, fetched with no
redirect, and only keys that signed the response are handed out (directory_signature.sign_directory_response and
verify_directory_response); read_wba_directory refuses a directory unless
every listed key signed. The signing transport uses 64-byte nonces, a
300-second default window and a required directory, and gains
signer_source (SignerSource), append_only and cover_previous; the
monotonic window keeps every window at its ttl. The client reports a
request the signer refuses as malformed, before sending it.

The tests replay the new and regenerated corpora (sign-request with
append_only, verify-request-neg with the expected Accept-Signature,
verify-request-accept, multisig-chain with each hop's directory and a
directory-keyed resolver, pop, wire-constants, document-check and
directory-response), and the test origins serve signed directories.
---
 docs/sdk-parity-matrix.md                     |   4 +-
 sdk/python/README.md                          | 102 ++-
 sdk/python/fora_sdk/__init__.py               |  49 +-
 sdk/python/fora_sdk/_sigbase.py               | 352 ++++++++++
 sdk/python/fora_sdk/_sigverify.py             | 269 ++++++++
 sdk/python/fora_sdk/client/_call.py           |   7 +
 sdk/python/fora_sdk/client/content.py         |  16 +-
 sdk/python/fora_sdk/directory_signature.py    | 201 ++++++
 sdk/python/fora_sdk/httpsig.py                | 516 +++++++-------
 sdk/python/fora_sdk/identity.py               |  15 +-
 sdk/python/fora_sdk/keyresolver.py            |  31 +-
 sdk/python/fora_sdk/multisig_parse.py         | 216 +-----
 sdk/python/fora_sdk/pop.py                    | 373 ++++++----
 sdk/python/fora_sdk/resolvers/__init__.py     |   2 +
 sdk/python/fora_sdk/resolvers/_http.py        |  40 +-
 sdk/python/fora_sdk/resolvers/documents.py    | 147 +++-
 sdk/python/fora_sdk/resolvers/errors.py       |  23 +-
 .../fora_sdk/resolvers/offer_key_cache.py     |   5 +-
 sdk/python/fora_sdk/resolvers/wba.py          |  49 +-
 sdk/python/fora_sdk/resolvers/wellknown.py    |   6 +-
 sdk/python/fora_sdk/server_verify.py          | 650 ++++--------------
 sdk/python/fora_sdk/sfv.py                    | 379 ++++++++++
 sdk/python/fora_sdk/signing_transport.py      | 275 +++++---
 sdk/python/fora_sdk/wba.py                    | 372 ++++++++++
 sdk/python/fora_sdk/window.py                 |  13 +-
 sdk/python/fora_sdk/wire.py                   |  11 +-
 sdk/python/pyproject.toml                     |  10 +-
 sdk/python/tests/exchange_harness.py          |  59 +-
 sdk/python/tests/resolvers_harness.py         |  75 +-
 sdk/python/tests/signed_peer.py               |   8 +-
 sdk/python/tests/test_broker_execute.py       |  25 +-
 sdk/python/tests/test_client.py               |   6 +-
 sdk/python/tests/test_client_binding_smoke.py |   6 +-
 sdk/python/tests/test_client_bounds.py        |  12 +-
 .../tests/test_client_request_parity.py       |   6 +-
 sdk/python/tests/test_client_scheme_guard.py  |   6 +-
 sdk/python/tests/test_client_url_refusals.py  |   6 +-
 sdk/python/tests/test_content_fetch_parity.py |  12 +-
 .../tests/test_directory_response_parity.py   | 161 +++++
 sdk/python/tests/test_document_readers.py     |  53 +-
 .../tests/test_guards_multisig_base_reuse.py  |  74 +-
 .../tests/test_hostile_response_data.py       |  12 +-
 sdk/python/tests/test_identity_helpers.py     |  91 ++-
 .../tests/test_multisig_chain_parity.py       | 475 +++++++------
 sdk/python/tests/test_multisig_parse_edge.py  |  67 +-
 sdk/python/tests/test_pop_sign_helper.py      | 208 +++---
 sdk/python/tests/test_readme_agent_example.py |  17 +-
 .../tests/test_resolvers_wba_debounce.py      |   7 +-
 .../tests/test_resolvers_wba_integration.py   |  40 +-
 ...est_resolvers_wba_offer_directory_fetch.py |  27 +-
 .../tests/test_resolvers_wba_profile.py       | 177 +++++
 .../test_resolvers_wba_revocation_parity.py   |  27 +-
 sdk/python/tests/test_sfv.py                  | 122 ++++
 sdk/python/tests/test_signature_nonce.py      |  22 +-
 sdk/python/tests/test_signedurl_pop_parity.py |  11 +-
 .../tests/test_signing_transport_profile.py   | 199 ++++++
 .../test_signing_transport_signature_agent.py |  85 +--
 sdk/python/tests/test_signrequest_parity.py   |  31 +-
 .../tests/test_verifyrequest_server_parity.py | 115 +++-
 sdk/python/tests/test_wba_profile.py          | 249 +++++++
 sdk/python/tests/test_window_behavior.py      |   7 +-
 sdk/python/tests/test_window_signature_pin.py |   5 +-
 sdk/python/tests/test_wire_parity.py          |  19 +-
 63 files changed, 4723 insertions(+), 1932 deletions(-)
 create mode 100644 sdk/python/fora_sdk/_sigbase.py
 create mode 100644 sdk/python/fora_sdk/_sigverify.py
 create mode 100644 sdk/python/fora_sdk/directory_signature.py
 create mode 100644 sdk/python/fora_sdk/sfv.py
 create mode 100644 sdk/python/fora_sdk/wba.py
 create mode 100644 sdk/python/tests/test_directory_response_parity.py
 create mode 100644 sdk/python/tests/test_resolvers_wba_profile.py
 create mode 100644 sdk/python/tests/test_sfv.py
 create mode 100644 sdk/python/tests/test_signing_transport_profile.py
 create mode 100644 sdk/python/tests/test_wba_profile.py

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 21392b02..fa30637f 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -492,7 +492,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 |---|---|---|---|
 | `helpers/testdata/acceptance-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/audience-vectors.json` | ✅ | ✅ | ✅ |
-| `helpers/testdata/directory-response-vectors.json` | ✅ | ❌ | ❌ |
+| `helpers/testdata/directory-response-vectors.json` | ✅ | ✅ | ❌ |
 | `helpers/testdata/discovery-hint-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/error-detail-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/hashurl-vectors.json` | ✅ | ✅ | ✅ |
@@ -510,7 +510,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `helpers/testdata/sign-request-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/signedurl-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/thumbprint-vectors.json` | ✅ | ✅ | ✅ |
-| `helpers/testdata/verify-request-accept-vectors.json` | ✅ | ❌ | ❌ |
+| `helpers/testdata/verify-request-accept-vectors.json` | ✅ | ✅ | ❌ |
 | `helpers/testdata/verify-request-neg-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/wire-canonical-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/wire-constants-vectors.json` | ✅ | ✅ | ✅ |
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 136fa4a2..5d2b464a 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -59,12 +59,13 @@ from vocab.functiontokens import AI_INPUT
 # This agent's identity, as it states it to an Exchange.
 AGENT = {"id": "agent-1", "domain": "agent.example", "type": "REQUESTER_TYPE_AGENT"}
 
-# Where THIS agent publishes its own signing key, as a JWK Set at
-# {AGENT_DIRECTORY}/.well-known/http-message-signatures-directory. The Exchange reads
-# this value off the covered Signature-Agent header, fetches that directory and looks
-# for the key whose RFC 7638 thumbprint equals the keyid below. Publish before you
-# call: an agent that names no directory has no key an Exchange can resolve, and the
-# call is refused with a 401 after it was routed, signed and sent.
+# Where THIS agent publishes its own signing key: the Web Bot Auth key directory at
+# {AGENT_DIRECTORY}/.well-known/http-message-signatures-directory, served as
+# application/http-message-signatures-directory+json and signed by the key it lists.
+# Every request signature names it in its own covered Signature-Agent member,
+# sig1="https://agent.example"; the Exchange fetches that directory and looks for the
+# key whose RFC 7638 thumbprint equals the keyid below. It is the https origin alone,
+# with no path. Publish before you call.
 AGENT_DIRECTORY = f"https://{AGENT['domain']}"
 
 # https in production. A local sandbox serving plaintext sets FORA_WELLKNOWN_SCHEME=http,
@@ -77,9 +78,9 @@ def buy_and_fetch(*, exchange: str, uri: str, seed: bytes) -> bytes:
     # 1. Identity. The RFC 9421 keyid IS the RFC 7638 thumbprint of the agent's public
     #    key, which is also the value a delivery URL gets bound to. One key, one name.
     #
-    #    signature_agent names the directory that key is published in. It is a COVERED
-    #    component, so the signature binds it whether or not it is set, and leaving it
-    #    unset signs an EMPTY value that no Exchange can resolve a key from.
+    #    signature_agent names the directory that key is published in. It is required:
+    #    a signer given none refuses to sign, and the call fails locally as MALFORMED
+    #    before anything is sent.
     public = Ed25519PrivateKey.from_private_bytes(seed).public_key().public_bytes_raw()
     signer = SigningTransport(
         signer_seed=seed, keyid=thumbprint(public), signature_agent=AGENT_DIRECTORY
@@ -183,10 +184,12 @@ Exchange, MCP adapter and edge worker build on.
 from fora_sdk import thumbprint, sign_request, verify_request
 ```
 
-**RFC 9421 request signing and verification.** `sign_request` covers the exact body
-bytes; `verify_request` checks a received one against a key you hold, and
-`fora_sdk.server_verify.verify_request_server` is the framework-agnostic server face,
-including the multi-signature relay chain:
+**RFC 9421 request signing and verification, under the Web Bot Auth profile.**
+`sign_request` covers `@method`, `@target-uri`, the exact body bytes (Content-Digest),
+the Authorization header and the signature's own Signature-Agent member; `verify_request`
+checks a received one against a key you hold, and
+`fora_sdk.server_verify.verify_request_server` is the framework-agnostic server face.
+`verify_multisig_request_server` verifies a request carrying several signers' signatures:
 
 ```python
 now = int(time.time())
@@ -194,8 +197,9 @@ signed = sign_request(
     method="POST", url=url, body=body,
     authorization="",                    # covered, and sent even when empty
     signer_seed=seed, keyid=keyid,
-    created=now, expires=now + 300,      # the freshness window, minted by the caller
-    signature_agent=agent_directory,     # covered; empty means no resolvable key
+    created=now, expires=now + 300,      # the window, minted by the caller; 300 s at most
+    signature_agent=agent_directory,     # your key directory's https origin; required
+    nonce=nonce,                         # fresh per signature; SigningTransport mints one
 )
 verdict = verify_request_server(
     method="POST", url=url, body=body, headers=headers,
@@ -203,6 +207,32 @@ verdict = verify_request_server(
 )
 ```
 
+One signature labelled `sig1` by an agent whose directory is `https://agent.example`
+carries:
+
+```
+Signature-Agent: sig1="https://agent.example"
+Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=C;expires=E;keyid="K";alg="ed25519";nonce="N";tag="web-bot-auth"
+Signature: sig1=:<standard base64>:
+```
+
+Signature-Agent is a structured-field Dictionary, so a party that forwards a request adds
+its own signature with `append_signature`: the next free label (`sig2`), its own member in
+the same dictionary, and the earlier signatures left untouched. The appended signature
+covers only its own request and member, unless `cover_previous=True`: then it also covers
+the last earlier signature completely, which only a party forwarding the request unchanged
+may do. A verifier resolves each signature's keyid in the directory that signature's own
+member names, passing that origin to `KeyResolver.resolve(keyid, directory)`, and reports
+it on the verdict. Labels carry no meaning; coverage of an earlier signature is optional and
+must be complete. The verifier also accepts what other Web Bot Auth signers send — the
+legacy String form `"https://agent.example"` on a single signature, a member key that
+differs from the label, a `type=directory` member parameter, no nonce — and refuses the
+bare unquoted value. A refusal for a missing component, a wrong tag or a refused
+Signature-Agent form carries `accept_signature`, the `Accept-Signature` value
+(`accept_signature()`) to answer the 401 with. A signer given no directory, a value that
+is not an https origin (`check_https_origin`), or a window over `MAX_SIGNATURE_LIFETIME`
+raises a `SignatureProfileError` before anything is signed.
+
 **Offer authenticity.** The signature covers the offer's pricing, terms and expiry, so an
 offer must be verified before anything selects on it. That is what `fora_sdk.core.Verifier`
 does in bulk, and `sign_offer_jcs` / `verify_offer_acceptance_jcs` are the primitives
@@ -218,8 +248,12 @@ proof = verify_agent_binding(method="GET", url=url, headers=headers,
                              agent_id=verdict.agent_id, now=now)
 ```
 
-The covered set for the proof is exactly `@method` + `@target-uri`: a GET has no body to
-digest, and the signed URL is itself the credential.
+The proof is a Web Bot Auth signature covering `@method`, `@target-uri` and the agent's
+own Signature-Agent member (`sig1="<the agent's directory>"`), with the raw public key in
+`X-FORA-Agent-Key`: a GET has no body to digest, and the signed URL is itself the
+credential. `sign_agent_binding` returns the four header values as an `AgentBinding`; the
+client passes a fresh 64-byte nonce, and the verifier requires the `web-bot-auth` tag and
+the three-way identity agent_id == keyid == thumbprint(presented key).
 
 **License-term pre-check.** The two tiers an Exchange applies to a pushed catalog entry,
 runnable by a publisher before signing — the wire rules over the entry as given, then
@@ -270,7 +304,9 @@ verifies.
      the package by sdk/python/tests/test_readme_agent_example.py. Extend the region
      to cover more of this document; do not add names outside it to dodge the check. -->
 **Also:** `errordetail` (the typed error taxonomy and its constructors),
-`generate_idempotency_key`, `apply_scopes`, `hash_url` and `monotonic_window`.
+`generate_idempotency_key`, `apply_scopes`, `hash_url`, `monotonic_window`,
+`check_https_origin`, `accept_signature`, `sign_directory_response` and
+`verify_directory_response`.
 <!-- /fora:l1-faces -->
 
 ---
@@ -285,7 +321,10 @@ and still defaults to a plain one, which is a known gap rather than a decision.
 
 - **Key resolvers** — `WellKnownKeyResolver` (well-known JWKS, TTL-cached) and
   `WBAKeyResolver` (Web Bot Auth directory, revocation- and expiry-aware, with a
-  background poller).
+  background poller). A key directory is fetched with no redirect, must be served as
+  `application/http-message-signatures-directory+json`, and only the keys that signed its
+  response (`verify_directory_response`) are handed out. A Signature-Agent member is always
+  an https origin; `scheme="http"` fetches its directory over http, for a local sandbox.
 - **Endpoint resolver** — `WellKnownEndpointResolver` discovers an Exchange's own service
   endpoint from `/.well-known/fora.json`, host-keyed and cached. Its exits are worth
   knowing apart, because the difference decides whether a caller should retry:
@@ -314,7 +353,9 @@ the process.
 
 **Redirects: the guarded client follows, a signed leg refuses.** Following a bounded chain
 is right for a public well-known document, where the address is re-pinned and the scheme
-re-vetted at every hop. It is wrong for anything carrying a credential, so the content
+re-vetted at every hop — the manifest and a revocation list follow up to five. A key
+directory is the exception: its address is the origin its signer committed to, so every
+directory fetch refuses a redirect. It is wrong for anything carrying a credential, so the content
 fetch and the RPC legs install their own refusal: following a redirect either replays a
 proof bound to the old URL, or hands a fresh proof of possession of the agent's key to
 whatever host the first hop named.
@@ -332,7 +373,14 @@ closed if **any** resolved address of a host is reserved.
 client refuses to guess:
 
 - **`signer`** — a `SigningTransport` over the agent's own key. The SDK holds one agent
-  key: the one the request is signed with.
+  key: the one the request is signed with. Its `signature_agent` (the key directory's
+  https origin) is required, and every signature carries a fresh 64-byte nonce. Used on
+  its own, the transport also takes a `signer_source` (a `SignerSource`, which names the
+  seed, keyid and directory per request, for a service signing as many identities),
+  `append_only=True` (every request goes through `append_signature`, so a request already
+  signed gets one more signature beside the earlier ones) and `cover_previous=True` (an
+  appended signature covers the last earlier one, for a party forwarding a request
+  unchanged).
 - **`verifier`** — fail-closed by default. An unconfigured client gets a verifier over a
   resolver that resolves nothing, so it rejects **every** offer, with a reason. That is
   the correct default and on a first run it looks exactly like a broken stack.
@@ -349,7 +397,7 @@ The rest are bounds and seams with working defaults:
 | `content_timeout_sec` | `30.0` | the delivery fetch as a whole; its remainder is carried across the legs of one `fetch` |
 | `max_content_bytes` | `8388608` (8 MiB) | one fetched body, buffered whole |
 | `proof_window` | 30 s | validity of the proof of possession a bound fetch presents |
-| `sign_window` | the signer's own window (600 s) | validity of an outbound request signature. It is not needed for uniqueness: every request signature carries a fresh RFC 9421 nonce, so two identical requests inside one second still sign to different bytes |
+| `sign_window` | the signer's own window (300 s, the longest the profile allows) | validity of an outbound request signature. It is not needed for uniqueness: every request signature carries a fresh RFC 9421 nonce, so two identical requests inside one second still sign to different bytes |
 | `request_id` | `None`, meaning **no header is sent** | mints the `X-Request-ID` correlation value |
 | `validation` | `"strict"` | whether an outbound message is checked against its generated model before it is sent. Orthogonal to offer verification, which is about what comes back |
 | `registration_requirements` | a reader built on the guarded client, once per client | where `register` reads an Exchange's terms revision and registration schema. It holds no document cache on purpose: the contract requires the terms digest to come from a freshly fetched manifest |
@@ -448,7 +496,11 @@ a service through the SDK and check every answer through it:
   `CallError(MALFORMED)` with `code` still set to the peer's Connect code.
 - **Identity helpers** in `fora_sdk.identity` mint a throwaway agent: `generate_key()`,
   `directory_document(keys)` for the directory to serve, and
-  `signing_transport_for(key, directory)`.
+  `signing_transport_for(key, directory)`. Serve the directory as
+  `application/http-message-signatures-directory+json` with the three headers
+  `sign_directory_response(authority, body, seeds, created, expires)` returns, signed by
+  every key it lists for the authority it is served under; a verifier hands out no key
+  that did not sign.
 - **Document readers** in `fora_sdk.resolvers` read what a party publishes and check it:
   `read_manifest(domain)`, `read_wba_directory(url_or_domain)`,
   `read_revocation_list(url)` and `read_license_document(license)`. Each fetches through
@@ -456,7 +508,9 @@ a service through the SDK and check every answer through it:
   the strict contract refuses (`StrictViolationError`), and returns a `Document` with the
   parsed model, the URL, the bytes and the media type. The license reader verifies the
   bytes against `uri_digest` (`DigestMismatchError`) and returns a `LicenseDocument`. A
-  failed fetch is `DirectoryUnavailableError`; no reader returns `None`.
+  failed fetch is `DirectoryUnavailableError`; no reader returns `None`. The directory
+  reader fetches with no redirect and refuses a directory unless every listed key signed
+  its response (`DirectoryResponseUnsignedError`).
 - **`check_strict(message_name, payload)`** applies the same strict check to any decoded
   message, raising `StrictViolationError`. A delivery-fetch proof is signed with the
   public `sign_agent_binding` (or `SigningTransport.sign_agent_binding`).
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index aff069c8..95f64f1f 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -59,6 +59,11 @@
     verify_request_acceptance_jcs,
 )
 from .crossfield import cross_field_rule_ids
+from .directory_signature import (
+    DirectoryResponseSignature,
+    sign_directory_response,
+    verify_directory_response,
+)
 from .discovery_hint import (
     DiscoveryHint,
     HintAgreement,
@@ -136,7 +141,7 @@
     is_metered_offer,
     parse_money,
 )
-from .pop import AGENT_KEY_HEADER, sign_agent_binding, verify_agent_binding
+from .pop import AGENT_KEY_HEADER, AgentBinding, sign_agent_binding, verify_agent_binding
 from .regschema import (
     MAX_REGISTRATION_DATA_BYTES,
     MAX_REGISTRATION_DATA_DEPTH,
@@ -158,6 +163,7 @@
 )
 from .resolvers import (
     WBA_DIRECTORY_PATH,
+    DirectoryResponseUnsignedError,
     DirectoryUnavailableError,
     EndpointRefusedError,
     KeyExpiredError,
@@ -173,20 +179,37 @@
 )
 from .scopes import apply_scopes, normalize_scopes, scopes_subset
 from .signedurl import sign_ed25519_signed_url, verify_ed25519_signed_url
-from .signing_transport import SignedOutbound, SigningTransport
+from .signing_transport import OutboundRequest, SignedOutbound, SignerSource, SigningTransport
 from .strict import StrictViolationError, check_strict
 from .thumbprint import thumbprint
+from .wba import (
+    MAX_SIGNATURE_LIFETIME,
+    InvalidNonceError,
+    MissingComponentError,
+    SignatureAgentFormError,
+    SignatureAgentNotOriginError,
+    SignatureAgentRequiredError,
+    SignatureLabelError,
+    SignatureLifetimeError,
+    SignatureProfileError,
+    SignatureTagError,
+    accept_signature,
+    check_https_origin,
+)
 from .window import Window, clock_window, monotonic_window
 from .wire import (
+    AcceptSignatureHeader,
     ConnectProtocolVersion,
     ConnectProtocolVersionHeader,
     ContentRulesHeader,
     ContentTypeJSON,
     ContentTypeProto,
+    DirectoryResponseTag,
     ExchangeHeader,
     ProtocolVersion,
     RequestIDHeader,
     SignatureAgentHeader,
+    WBATag,
     WellKnownManifestVersion,
     WellKnownPath,
     manifest_version_refusal,
@@ -196,6 +219,28 @@
 __all__ = [
     "ACCEPTANCE_SIGNATURE_ALGORITHM",
     "AGENT_KEY_HEADER",
+    "AcceptSignatureHeader",
+    "AgentBinding",
+    "DirectoryResponseSignature",
+    "DirectoryResponseTag",
+    "DirectoryResponseUnsignedError",
+    "InvalidNonceError",
+    "MAX_SIGNATURE_LIFETIME",
+    "MissingComponentError",
+    "OutboundRequest",
+    "SignatureAgentFormError",
+    "SignatureAgentNotOriginError",
+    "SignatureAgentRequiredError",
+    "SignatureLabelError",
+    "SignatureLifetimeError",
+    "SignatureProfileError",
+    "SignatureTagError",
+    "SignerSource",
+    "WBATag",
+    "accept_signature",
+    "check_https_origin",
+    "sign_directory_response",
+    "verify_directory_response",
     "AudienceVerdict",
     "BARE_DOMAIN_PATTERN",
     "AdminClient",
diff --git a/sdk/python/fora_sdk/_sigbase.py b/sdk/python/fora_sdk/_sigbase.py
new file mode 100644
index 00000000..98b869a0
--- /dev/null
+++ b/sdk/python/fora_sdk/_sigbase.py
@@ -0,0 +1,352 @@
+"""RFC 9421 signature-base construction and Signature-Input parsing, shared by the
+request signer (:mod:`fora_sdk.httpsig`), the request verifier
+(:mod:`fora_sdk._sigverify`), the delivery proof (:mod:`fora_sdk.pop`) and the key
+directory's response signatures (:mod:`fora_sdk.directory_signature`).
+
+The Python port of the Go oracle's sigbase.go and the parsing half of verify.go. The
+base is the exact byte string both sides feed to Ed25519, so it is built in one place:
+one line per covered component, in the signature's covered order, then the
+``@signature-params`` line. On signing, that line carries the parameters as rendered
+here; on verifying, it carries the signer's inner list VERBATIM from the wire, because
+RFC 9421 §2.5 makes the parameter order the signer's choice.
+
+A covered component is an :class:`~fora_sdk.sfv.Item` whose value is the component name
+and whose parameters are the RFC 9421 component parameters: ``key`` selects a
+Dictionary member (``"signature-agent";key="sig1"``), and ``req`` is a Boolean flag
+(``"@authority";req``). Header values are read the RFC 9421 §2.1 way: every field line
+under the name, matched case-insensitively and joined with ", ".
+"""
+
+from __future__ import annotations
+
+import base64
+import hashlib
+from dataclasses import dataclass
+from typing import TYPE_CHECKING
+
+from . import sfv
+from .multisig_parse import raw_inner_by_label
+
+if TYPE_CHECKING:
+    from collections.abc import Mapping
+
+
+class SignatureCheckError(Exception):
+    """A request signature refused for a reason other than the profile's form.
+
+    ``reason`` is a stable, fine-grained token (``"expired"``, ``"digest_mismatch"`` and
+    so on) that the pure verifier reports and the server faces collapse to their own
+    reject vocabulary. Never raised to an SDK caller: each verify face returns a verdict.
+    """
+
+    def __init__(self, reason: str, detail: str = "") -> None:
+        super().__init__(f"{reason}: {detail}" if detail else reason)
+        self.reason = reason
+
+
+def component(name: str, **params: str | bool) -> sfv.Item:
+    """A covered-component identifier named ``name`` carrying ``params``."""
+    return sfv.Item(name, dict(params))
+
+
+def plain(*names: str) -> list[sfv.Item]:
+    """Covered components with no parameters."""
+    return [sfv.Item(n) for n in names]
+
+
+def component_name(c: sfv.Item) -> str:
+    """The component name, as the signer wrote it."""
+    return c.value if isinstance(c.value, str) else ""
+
+
+def component_param(c: sfv.Item, key: str) -> str:
+    """The String value of parameter ``key`` on ``c``, or "" when absent or a flag."""
+    v = c.params.get(key)
+    return v if isinstance(v, str) else ""
+
+
+def render_component(c: sfv.Item) -> str:
+    """The identifier as it appears in Signature-Input and on its base line:
+    ``"name"`` then ``;k="v"`` per String parameter and ``;k`` per flag. The name is
+    written verbatim, so the header and the base agree byte for byte."""
+    out = ['"', component_name(c), '"']
+    for key, value in c.params.items():
+        out.append(";" + key)
+        if value is not True:
+            out.append("=" + sfv.serialize_bare_item(value))
+    return "".join(out)
+
+
+def same_component(a: sfv.Item, b: sfv.Item) -> bool:
+    """The same name, compared case-insensitively, and the same parameters in order."""
+    return component_name(a).lower() == component_name(b).lower() and list(
+        a.params.items()
+    ) == list(b.params.items())
+
+
+def covers_component(covered: tuple[sfv.Item, ...] | list[sfv.Item], c: sfv.Item) -> bool:
+    """Whether ``covered`` holds ``c`` by :func:`same_component`."""
+    return any(same_component(s, c) for s in covered)
+
+
+@dataclass(frozen=True)
+class SigParams:
+    """One signature's Signature-Input member: its label, covered set and parameters.
+
+    ``raw_inner`` is the member value exactly as it arrived (everything after
+    ``label=``), which the verifier terminates the base with. It is empty on the
+    signing side, where the rendered inner is both what is signed and what is sent.
+    """
+
+    label: str
+    covered: tuple[sfv.Item, ...]
+    keyid: str = ""
+    alg: str = ""
+    created: int = 0
+    expires: int = 0
+    nonce: str = ""
+    tag: str = ""
+    raw_inner: str = ""
+
+
+def render_params_tail(p: SigParams) -> str:
+    """The signature parameters in the order the profile's examples use: created,
+    expires, keyid, alg, nonce, tag. The order is the signer's choice; the three SDKs
+    make the same one so their signatures agree byte for byte. An unset parameter is
+    left out."""
+    out: list[str] = []
+    if p.created:
+        out.append(f";created={p.created}")
+    if p.expires:
+        out.append(f";expires={p.expires}")
+    if p.keyid:
+        out.append(";keyid=" + sfv.serialize_bare_item(p.keyid))
+    if p.alg:
+        out.append(";alg=" + sfv.serialize_bare_item(p.alg))
+    if p.nonce:
+        out.append(f';nonce="{p.nonce}"')
+    if p.tag:
+        out.append(";tag=" + sfv.serialize_bare_item(p.tag))
+    return "".join(out)
+
+
+def signature_input_inner(p: SigParams) -> str:
+    """The inner list and parameters: the Signature-Input member value and the
+    ``@signature-params`` value of a signature being made."""
+    return "(" + " ".join(render_component(c) for c in p.covered) + ")" + render_params_tail(p)
+
+
+def content_digest(body: bytes) -> str:
+    """RFC 9530 Content-Digest header value: ``sha-256=:<std-base64(SHA-256)>:``."""
+    return "sha-256=:" + base64.b64encode(hashlib.sha256(body).digest()).decode() + ":"
+
+
+# --- reading a request's headers -------------------------------------------------------
+
+
+def header_lines(headers: Mapping[str, str], name: str) -> list[str]:
+    """Every field line under ``name``, matched case-insensitively, in mapping order.
+
+    Empty when the request carries no such field. A mapping cannot hold one name twice
+    under one spelling, so two spellings of one name are two field lines of one field.
+    """
+    lower = name.lower()
+    return [value for key, value in headers.items() if key.lower() == lower]
+
+
+def joined_header(headers: Mapping[str, str], name: str) -> str | None:
+    """The RFC 9421 §2.1 value of ``name``: every field line joined with ", " and
+    trimmed, or None when the request carries none. Absent and empty differ: an empty
+    covered header reconstructs to the empty value the signer bound."""
+    lines = header_lines(headers, name)
+    if not lines:
+        return None
+    return ", ".join(lines).strip()
+
+
+# --- building the base -----------------------------------------------------------------
+
+
+def component_value(method: str, url: str, headers: Mapping[str, str], c: sfv.Item) -> str:
+    """The canonical value of one covered component on this request.
+
+    ``@method`` is the method uppercased and ``@target-uri`` the absolute URL exactly as
+    given; no other derived component is supported. A component carrying a ``key``
+    parameter is a Dictionary member (:func:`member_value`); any other name is a header.
+    A covered header the request does not carry cannot be reconstructed and is refused.
+    """
+    if c.params:
+        return member_value(headers, c)
+    name = component_name(c).lower()
+    if name == "@method":
+        return method.upper()
+    if name == "@target-uri":
+        return url
+    value = joined_header(headers, name)
+    if value is None:
+        raise SignatureCheckError("missing_header", f"header {name!r} missing from request")
+    return value
+
+
+def member_value(headers: Mapping[str, str], c: sfv.Item) -> str:
+    """The canonical serialization of the Dictionary member a ``key`` parameter names
+    (RFC 9421 §2.1.2): a Signature-Agent member's String with its parameters, a
+    Signature member's byte sequence, a Signature-Input member's inner list.
+
+    Serializing the parsed member rather than splicing the wire text makes signer and
+    verifier agree however the member was spaced. No other parameter is supported.
+    """
+    name = component_name(c)
+    key = c.params.get("key")
+    if name.startswith("@") or len(c.params) != 1 or not isinstance(key, str):
+        raise SignatureCheckError("malformed_sig_input", f"unsupported parameters on {name!r}")
+    lines = header_lines(headers, name)
+    if not lines:
+        raise SignatureCheckError("missing_header", f"header {name!r} missing from request")
+    try:
+        dictionary = sfv.parse_dictionary(lines)
+    except sfv.StructuredFieldError as exc:
+        raise SignatureCheckError("malformed_sig_input", f"{name} is not a dictionary") from exc
+    member = dictionary.get(key)
+    if member is None:
+        raise SignatureCheckError("malformed_sig_input", f"{name} has no member {key!r}")
+    try:
+        return sfv.serialize_member(member)
+    except sfv.StructuredFieldError as exc:  # pragma: no cover - a parsed member serializes
+        raise SignatureCheckError("malformed_sig_input", f"serialize {name} member") from exc
+
+
+def build_signature_base(method: str, url: str, headers: Mapping[str, str], p: SigParams) -> str:
+    """The RFC 9421 §2.5 signature base over ``p``'s covered set, ending with the
+    ``@signature-params`` line: the verbatim wire inner when ``p`` was parsed, the
+    rendered one when it is being signed."""
+    lines = [
+        f"{render_component(c)}: {component_value(method, url, headers, c)}" for c in p.covered
+    ]
+    inner = p.raw_inner or signature_input_inner(p)
+    lines.append(f'"@signature-params": {inner}')
+    return "\n".join(lines)
+
+
+def cover_earlier(own: list[sfv.Item], prev: SigParams) -> list[sfv.Item]:
+    """Extend a new signature's covered set to cover ``prev`` as WG-00 §5.2.2 asks:
+    every component ``prev`` lists that ``own`` lacks, then ``prev``'s Signature and
+    Signature-Input members."""
+    out = list(own)
+    for c in prev.covered:
+        if not covers_component(out, c):
+            out.append(c)
+    out.append(component("signature", key=prev.label))
+    out.append(component("signature-input", key=prev.label))
+    return out
+
+
+# --- parsing Signature-Input and Signature ---------------------------------------------
+
+
+class MissingSignatureInputError(SignatureCheckError):
+    """The request carries no Signature-Input header."""
+
+    def __init__(self) -> None:
+        super().__init__("missing_sig_input")
+
+
+class MissingSignatureError(SignatureCheckError):
+    """The request carries no Signature header."""
+
+    def __init__(self) -> None:
+        super().__init__("missing_sig")
+
+
+def parse_all_signatures(
+    headers: Mapping[str, str],
+) -> tuple[list[SigParams], dict[str, bytes]]:
+    """Every signature on the request, in Signature-Input order, and each label's
+    signature bytes. One signature is the N=1 case of the same parse.
+
+    Raises :class:`MissingSignatureInputError` / :class:`MissingSignatureError` for an
+    absent header, and ``SignatureCheckError("malformed_sig_input")`` for a header that
+    is not a structured-field Dictionary, a member that is not an inner list, a
+    parameter of the wrong type, a signature with no keyid, or a label Signature lacks.
+    """
+    input_lines = header_lines(headers, "signature-input")
+    if not input_lines:
+        raise MissingSignatureInputError
+    sig_lines = header_lines(headers, "signature")
+    if not sig_lines:
+        raise MissingSignatureError
+    try:
+        inputs = sfv.parse_dictionary(input_lines)
+        sigs = sfv.parse_dictionary(sig_lines)
+    except sfv.StructuredFieldError as exc:
+        raise SignatureCheckError("malformed_sig_input", str(exc)) from exc
+    if not inputs:
+        raise SignatureCheckError("malformed_sig_input", "no labels found")
+    raw = raw_inner_by_label(input_lines)
+    params: list[SigParams] = []
+    sig_map: dict[str, bytes] = {}
+    for label, member in inputs.items():
+        params.append(_parse_input_member(label, member, raw.get(label, "")))
+        sig_map[label] = _signature_bytes(sigs, label)
+    return params, sig_map
+
+
+def _parse_input_member(label: str, member: sfv.Member, raw_inner: str) -> SigParams:
+    if not isinstance(member, sfv.InnerList):
+        raise SignatureCheckError("malformed_sig_input", f"label {label!r} is not an inner list")
+    covered = tuple(_covered_from_item(i) for i in member.items)
+    keyid = _str_param(member.params, "keyid")
+    if not keyid:
+        raise SignatureCheckError("malformed_sig_input", "keyid required")
+    return SigParams(
+        label=label,
+        covered=covered,
+        keyid=keyid,
+        alg=_str_param(member.params, "alg"),
+        created=_int_param(member.params, "created"),
+        expires=_int_param(member.params, "expires"),
+        nonce=_str_param(member.params, "nonce"),
+        tag=_str_param(member.params, "tag"),
+        raw_inner=raw_inner,
+    )
+
+
+def _covered_from_item(item: sfv.Item) -> sfv.Item:
+    """A covered-component identifier: a String name whose parameters are Strings or
+    Boolean flags. ``key`` is the one a request signature uses and ``req`` the one a
+    directory response signature uses."""
+    if not isinstance(item.value, str):
+        raise SignatureCheckError("malformed_sig_input", "component identifier not a string")
+    for key, value in item.params.items():
+        if value is not True and not isinstance(value, str):
+            raise SignatureCheckError(
+                "malformed_sig_input", f"component param {key!r} not a string"
+            )
+    return item
+
+
+def _str_param(params: sfv.Params, name: str) -> str:
+    if name not in params:
+        return ""
+    v = params[name]
+    if not isinstance(v, str):
+        raise SignatureCheckError("malformed_sig_input", f"{name} not a string")
+    return v
+
+
+def _int_param(params: sfv.Params, name: str) -> int:
+    if name not in params:
+        return 0
+    v = params[name]
+    if isinstance(v, bool) or not isinstance(v, int):
+        raise SignatureCheckError("malformed_sig_input", f"{name} not an integer")
+    return v
+
+
+def _signature_bytes(sigs: dict[str, sfv.Member], label: str) -> bytes:
+    member = sigs.get(label)
+    if member is None:
+        raise SignatureCheckError("malformed_sig_input", f"Signature label {label!r} not present")
+    if not isinstance(member, sfv.Item) or not isinstance(member.value, bytes):
+        raise SignatureCheckError("malformed_sig_input", "Signature value not a byte sequence")
+    return member.value
diff --git a/sdk/python/fora_sdk/_sigverify.py b/sdk/python/fora_sdk/_sigverify.py
new file mode 100644
index 00000000..7de052ff
--- /dev/null
+++ b/sdk/python/fora_sdk/_sigverify.py
@@ -0,0 +1,269 @@
+"""The request-verification core every verify face shares: the pure primitive
+(:func:`fora_sdk.httpsig.verify_request`) and the two server faces
+(:mod:`fora_sdk.server_verify`).
+
+The Python port of Go ``verifySingleSignature``, ``VerifyMultisigRequest`` and
+``enforceEarlierCoverage``. Each signature is judged on its own, in header order, by
+the same chain: alg, the Web Bot Auth tag, the FORA RPC components, the key directory
+its own covered Signature-Agent member names, entitlement coverage, the created/expires
+window, the content digest, then the key that directory publishes and Ed25519 over the
+rebuilt base. A request carrying several signatures first has its hop budget checked,
+counting every signature, then every coverage of an earlier signature checked for
+completeness (WG-00 §5.2.2). Labels carry no meaning beyond naming.
+
+A failure raises: a :class:`~fora_sdk.wba.SignatureProfileError` for the profile's
+form, or a :class:`~fora_sdk._sigbase.SignatureCheckError` carrying a fine-grained
+reason. The faces turn either into a verdict and never let it reach their caller.
+"""
+
+from __future__ import annotations
+
+from collections.abc import Callable
+from dataclasses import dataclass
+from typing import TYPE_CHECKING
+
+from cryptography.exceptions import InvalidSignature
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
+
+from ._sigbase import (
+    SignatureCheckError,
+    SigParams,
+    build_signature_base,
+    component,
+    component_name,
+    component_param,
+    content_digest,
+    covers_component,
+    joined_header,
+    parse_all_signatures,
+    render_component,
+)
+from .wba import (
+    MissingComponentError,
+    SignatureAgentFormError,
+    SignatureAgentNotOriginError,
+    SignatureTagError,
+    signature_directory,
+)
+from .wire import WBATag
+
+if TYPE_CHECKING:
+    from collections.abc import Mapping
+
+#: Resolve the raw Ed25519 public key a keyid names in the key directory at an https
+#: origin: ``(directory, keyid) -> key``, or None when unknown.
+Resolve = Callable[[str, str], bytes | None]
+
+#: How far a created timestamp may lead the verifier's clock (Go defaultMaxFutureSkew).
+MAX_FUTURE_SKEW_SEC = 300
+
+#: The components a FORA RPC signature must cover beyond the Web Bot Auth base. The
+#: signature's own Signature-Agent member is checked by signature_directory, and the
+#: entitlement-token header is required only when the request carries it.
+REQUIRED_COVERED: tuple[str, ...] = ("@method", "@target-uri", "content-digest", "authorization")
+
+_ENTITLEMENT = "x-entitlement-token"
+_ED25519_PUBLIC_KEY_BYTES = 32
+
+
+@dataclass(frozen=True)
+class Request:
+    """The request being verified: the request line, the exact body, the headers."""
+
+    method: str
+    url: str
+    body: bytes
+    headers: Mapping[str, str]
+
+
+@dataclass(frozen=True)
+class Checks:
+    """How a signature is checked: where its key comes from, the verifier's clock (unix
+    seconds), and the longest declared lifetime accepted (0 means unbounded)."""
+
+    resolve: Resolve
+    now: int
+    max_signature_age: int = 0
+
+
+@dataclass(frozen=True)
+class VerifiedSignature:
+    """One signature that verified. ``signature_agent`` is the https origin of the key
+    directory its keyid was resolved in, the value of the member it covers."""
+
+    label: str
+    keyid: str
+    alg: str
+    created: int
+    expires: int
+    signature: bytes
+    public_key: bytes
+    signature_agent: str
+
+
+def verify_first(
+    req: Request, resolve: Resolve, *, now: int, max_signature_age: int = 0
+) -> VerifiedSignature:
+    """Verify the FIRST signature in header order: the whole request for one signer.
+    The others still count toward the legacy-form rule."""
+    all_params, sig_map = parse_all_signatures(req.headers)
+    checks = Checks(resolve, now, max_signature_age)
+    return verify_signature(req, all_params[0], sig_map, len(all_params), checks)
+
+
+def verify_all(
+    req: Request,
+    resolve: Resolve,
+    *,
+    now: int,
+    max_signatures: int = 0,
+    max_signature_age: int = 0,
+) -> list[VerifiedSignature]:
+    """Verify EVERY signature, in header order. The hop budget is checked before any
+    crypto, then the completeness of every coverage of an earlier signature, then each
+    signature on its own; any one failing refuses the request."""
+    all_params, sig_map = parse_all_signatures(req.headers)
+    if max_signatures > 0 and len(all_params) > max_signatures:
+        raise SignatureCheckError("hop_budget", f"got {len(all_params)} max {max_signatures}")
+    enforce_earlier_coverage(all_params)
+    checks = Checks(resolve, now, max_signature_age)
+    return [verify_signature(req, p, sig_map, len(all_params), checks) for p in all_params]
+
+
+def verify_signature(
+    req: Request, p: SigParams, sig_map: dict[str, bytes], sig_count: int, checks: Checks
+) -> VerifiedSignature:
+    """The full per-signature chain. ``sig_count`` is the number of signatures on the
+    request: the legacy String form of Signature-Agent is accepted only when it is one."""
+    if p.alg.lower() != "ed25519":
+        raise SignatureCheckError("unsupported_alg", f"alg={p.alg!r}")
+    if p.tag != WBATag:
+        raise SignatureTagError(f"signature tag is not {WBATag!r}: {p.tag!r}")
+    _enforce_required_components(p)
+    directory = signature_directory(req.headers, p, sig_count)
+    _enforce_entitlement_coverage(req.headers, p)
+    _enforce_window(p, checks.now, checks.max_signature_age)
+    _verify_content_digest(req, p)
+    pub = _resolve(checks.resolve, directory, p.keyid)
+    base = build_signature_base(req.method, req.url, req.headers, p)
+    sig = sig_map[p.label]
+    try:
+        Ed25519PublicKey.from_public_bytes(pub).verify(sig, base.encode())
+    except (InvalidSignature, ValueError) as exc:
+        raise SignatureCheckError("signature_verify") from exc
+    return VerifiedSignature(
+        label=p.label,
+        keyid=p.keyid,
+        alg=p.alg,
+        created=p.created,
+        expires=p.expires,
+        signature=sig,
+        public_key=pub,
+        signature_agent=directory,
+    )
+
+
+def _resolve(resolve: Resolve, directory: str, keyid: str) -> bytes:
+    try:
+        pub = resolve(directory, keyid)
+    except Exception as exc:  # any resolver failure leaves the key unproven, fail closed
+        raise SignatureCheckError("unknown_key", f"keyid={keyid!r}") from exc
+    if pub is None:
+        raise SignatureCheckError("unknown_key", f"keyid={keyid!r}")
+    if len(pub) != _ED25519_PUBLIC_KEY_BYTES:
+        raise SignatureCheckError("unknown_key", f"public key length {len(pub)}")
+    return pub
+
+
+def _enforce_required_components(p: SigParams) -> None:
+    seen = {component_name(c).lower() for c in p.covered}
+    for need in REQUIRED_COVERED:
+        if need not in seen:
+            raise MissingComponentError(need)
+
+
+def _enforce_entitlement_coverage(headers: Mapping[str, str], p: SigParams) -> None:
+    """When the request carries the entitlement-token header, the signature must commit
+    to it, or an unsigned token could be slipped under a valid signature. Every field
+    line counts: an empty line placed first must not shadow a real token behind it."""
+    if (joined_header(headers, _ENTITLEMENT) or "") == "":
+        return
+    if not any(component_name(c).lower() == _ENTITLEMENT for c in p.covered):
+        raise MissingComponentError(_ENTITLEMENT)
+
+
+def _enforce_window(p: SigParams, now: int, max_age: int) -> None:
+    if p.created == 0:
+        raise SignatureCheckError("missing_created")
+    if p.expires == 0:
+        raise SignatureCheckError("missing_expires")
+    if p.expires < now:
+        raise SignatureCheckError("expired", f"expires={p.expires} now={now}")
+    if p.created > now + MAX_FUTURE_SKEW_SEC:
+        raise SignatureCheckError("future_created", f"created={p.created} now={now}")
+    # A signer-chosen far-future expires is a wide replay window; 0 means unbounded,
+    # and a window equal to the bound passes.
+    if max_age > 0 and p.expires - p.created > max_age:
+        raise SignatureCheckError("lifetime_too_long", f"window={p.expires - p.created}s")
+
+
+def _verify_content_digest(req: Request, p: SigParams) -> None:
+    if not any(component_name(c).lower() == "content-digest" for c in p.covered):
+        return
+    raw = joined_header(req.headers, "content-digest")
+    if not raw:
+        raise SignatureCheckError("missing_content_digest")
+    if raw != content_digest(req.body):
+        raise SignatureCheckError("digest_mismatch")
+
+
+def enforce_earlier_coverage(all_params: list[SigParams]) -> None:
+    """WG-00 §5.2.2 for every signature that covers another: each covered
+    ``"signature";key=X`` or ``"signature-input";key=X`` must name a signature appearing
+    EARLIER in Signature-Input, and one covering ``"signature";key=X`` must also cover
+    ``"signature-input";key=X`` and every component X lists. Covering an earlier
+    signature is optional; covering one partially is refused."""
+    position = {p.label: i for i, p in enumerate(all_params)}
+    for i, p in enumerate(all_params):
+        for c in p.covered:
+            name = component_name(c).lower()
+            if name not in ("signature", "signature-input"):
+                continue
+            key = component_param(c, "key")
+            at = position.get(key)
+            if not key or at is None or at >= i:
+                raise SignatureCheckError(
+                    "broken_chain", f"{p.label} covers {name};key={key!r}, not an earlier signature"
+                )
+            if name == "signature":
+                _covers_earlier_fully(p, all_params[at])
+
+
+def _covers_earlier_fully(p: SigParams, prev: SigParams) -> None:
+    if not covers_component(p.covered, component("signature-input", key=prev.label)):
+        raise SignatureCheckError(
+            "broken_chain", f"{p.label} covers signature;key={prev.label!r} without its input"
+        )
+    for c in prev.covered:
+        if not covers_component(p.covered, c):
+            raise SignatureCheckError(
+                "broken_chain", f"{p.label} covers {prev.label} without {render_component(c)}"
+            )
+
+
+def failure_reason(exc: Exception) -> str:
+    """The fine-grained reason token for a verification failure."""
+    if isinstance(exc, SignatureCheckError):
+        return exc.reason
+    for kind, reason in _PROFILE_REASONS:
+        if isinstance(exc, kind):
+            return reason
+    return "signature_verify"
+
+
+_PROFILE_REASONS: tuple[tuple[type[Exception], str], ...] = (
+    (MissingComponentError, "missing_component"),
+    (SignatureTagError, "signature_tag"),
+    (SignatureAgentFormError, "signature_agent_form"),
+    (SignatureAgentNotOriginError, "signature_agent_not_origin"),
+)
diff --git a/sdk/python/fora_sdk/client/_call.py b/sdk/python/fora_sdk/client/_call.py
index 93226f60..66935a20 100644
--- a/sdk/python/fora_sdk/client/_call.py
+++ b/sdk/python/fora_sdk/client/_call.py
@@ -28,6 +28,7 @@
 
 from fora_sdk._jsondepth import _MAX_BODY_DEPTH, _raw_nesting_depth
 from fora_sdk.errordetail import error_detail_from
+from fora_sdk.wba import SignatureProfileError
 from fora_sdk.wire import (
     ConnectProtocolVersion,
     ConnectProtocolVersionHeader,
@@ -178,6 +179,12 @@ def prepare(
             signed = settings.signer.sign_outbound(
                 method="POST", url=url, body=body, authorization="", window=settings.sign_window
             )
+        except SignatureProfileError as exc:
+            # The signer refused the request before anything was sent: no Signature-Agent
+            # origin configured, a value that is not an https origin, a window longer than
+            # the profile allows, an unusable nonce, or a Signature-Agent that cannot take
+            # another member. Each is a malformed call, never a peer that did not answer.
+            raise malformed(op, exc) from exc
         except Exception as exc:  # custody can fail any way it likes
             # NOT_SIGNABLE, matching what the content leg answers for the same missing
             # holder: a caller branching on the kind sees one condition under one class,
diff --git a/sdk/python/fora_sdk/client/content.py b/sdk/python/fora_sdk/client/content.py
index 86c9a51f..c769bb93 100644
--- a/sdk/python/fora_sdk/client/content.py
+++ b/sdk/python/fora_sdk/client/content.py
@@ -19,7 +19,7 @@
 from fora_sdk._hostref import _BAD_ESCAPE
 from fora_sdk._jsondepth import _MAX_BODY_DEPTH, _raw_nesting_depth
 from fora_sdk.errordetail import retrieval_auth_failure_detail
-from fora_sdk.pop import AGENT_KEY_HEADER
+from fora_sdk.wba import SignatureProfileError
 from fora_sdk.wire import RequestIDHeader
 
 from .errors import CallError, CallErrorKind
@@ -127,18 +127,16 @@ def proof_headers(
     """
     vet_signed_url(signed_url)
     try:
-        agent_key, signature_input, signature = signer.sign_agent_binding(
-            url=signed_url, window=window
-        )
+        binding = signer.sign_agent_binding(url=signed_url, window=window)
+    except SignatureProfileError as exc:
+        # No directory configured, or one that is not an https origin: the proof names the
+        # agent's key directory, so the call is malformed before anything is sent.
+        raise CallError(CallErrorKind.MALFORMED, _OP, cause=redact_url(exc)) from exc
     except Exception as exc:  # custody can fail any way it likes
         # The given URL is deliberately NOT echoed: this error reaches a log, and a
         # delivery URL carries a live credential in its query.
         raise CallError(CallErrorKind.NOT_SIGNABLE, _OP, cause=redact_url(exc)) from exc
-    headers = {
-        AGENT_KEY_HEADER: agent_key,
-        "signature-input": signature_input,
-        "signature": signature,
-    }
+    headers = binding.headers()
     # Stamped BESIDE the proof rather than covered by it: the correlation id identifies
     # the request in two sets of logs, it authorises nothing. It matters on THIS leg in
     # particular — the RPC legs correlate through the transport, which a plain GET never
diff --git a/sdk/python/fora_sdk/directory_signature.py b/sdk/python/fora_sdk/directory_signature.py
new file mode 100644
index 00000000..5fd222de
--- /dev/null
+++ b/sdk/python/fora_sdk/directory_signature.py
@@ -0,0 +1,201 @@
+"""Key-directory response signatures (WG-00 §5.5 and Appendix B.1) — pure, IO-free L1.
+
+A key directory's response is signed once per key it lists, and FORA requires it. Each
+response signature covers ``"@authority";req`` (the authority the directory was fetched
+from) and ``content-digest``, carries created, expires, keyid (the key's RFC 7638
+thumbprint) and alg, and has ``tag="http-message-signatures-directory"``.
+``"@authority";req`` takes its value from the request that fetched the directory, so
+the signature cannot be served again under a different host. The Python port of the Go
+oracle's helpers/directory.go, pinned to directory-response-vectors.json.
+"""
+
+from __future__ import annotations
+
+import base64
+from dataclasses import dataclass
+from typing import TYPE_CHECKING
+
+from cryptography.exceptions import InvalidSignature
+from cryptography.hazmat.primitives.asymmetric.ed25519 import (
+    Ed25519PrivateKey,
+    Ed25519PublicKey,
+)
+
+from ._sigbase import (
+    SignatureCheckError,
+    SigParams,
+    component,
+    component_name,
+    content_digest,
+    covers_component,
+    joined_header,
+    parse_all_signatures,
+    signature_input_inner,
+)
+from .thumbprint import thumbprint
+from .wba import SignatureLifetimeError
+from .wire import DirectoryResponseTag
+
+if TYPE_CHECKING:
+    from collections.abc import Mapping, Sequence
+
+#: The covered set of a directory response signature, in the order a FORA signer emits.
+_COVERED = (component("@authority", req=True), component("content-digest"))
+#: How far a response signature's created may lead the verifier's clock.
+_MAX_FUTURE_SKEW_SEC = 300
+
+
+class DirectoryResponseUnsignedError(ValueError):
+    """A key directory response carrying no response signature at all: no
+    Content-Digest, or no Signature-Input / Signature (Go
+    ``ErrDirectoryResponseUnsigned``)."""
+
+
+class DirectoryResponseDigestError(ValueError):
+    """A key directory response whose Content-Digest does not match its body, so no
+    signature over it can be checked (Go ``ErrDigestMismatch``)."""
+
+
+@dataclass(frozen=True)
+class DirectoryResponseSignature:
+    """The three header values a key directory's response carries for its response
+    signatures, ready to set on the response."""
+
+    content_digest: str
+    signature_input: str
+    signature: str
+
+    def headers(self) -> dict[str, str]:
+        """The three headers, lowercase-keyed."""
+        return {
+            "content-digest": self.content_digest,
+            "signature-input": self.signature_input,
+            "signature": self.signature,
+        }
+
+
+def _base(authority: str, digest: str, names: Sequence[str], inner: str) -> str:
+    """The base: one line per covered component (lowercase ``names``) in the signature's
+    own order, then the parameters."""
+    lines = []
+    for name in names:
+        if name == "@authority":
+            lines.append(f'"@authority";req: {authority.lower()}')
+        else:
+            lines.append(f'"content-digest": {digest}')
+    lines.append(f'"@signature-params": {inner}')
+    return "\n".join(lines)
+
+
+def sign_directory_response(
+    authority: str,
+    body: bytes,
+    signer_seeds: Sequence[bytes],
+    created: int,
+    expires: int,
+) -> DirectoryResponseSignature:
+    """Sign a key directory response once per signer, labels ``sig1..sigN`` in order.
+
+    ``authority`` is the host[:port] the directory is served under, exactly as a
+    client's request names it: lowercase, and without a port when it is the scheme's
+    default. ``body`` is the exact response body. Each signer is a 32-byte Ed25519 seed;
+    its keyid is the RFC 7638 thumbprint of its public key, which must be a key the body
+    lists. The window is the caller's and is not capped at the request-signature limit:
+    a directory response is cached and may be signed for longer than a request.
+
+    Raises ``ValueError`` for an empty authority or no signer, and
+    :class:`~fora_sdk.wba.SignatureLifetimeError` for a window that is not positive.
+    """
+    if authority == "":
+        raise ValueError("directory response needs the authority it is served under")
+    if not signer_seeds:
+        raise ValueError("directory response needs at least one signer")
+    if created <= 0 or expires <= created:
+        raise SignatureLifetimeError(
+            f"directory response window must be positive: created={created} expires={expires}"
+        )
+    digest = content_digest(body)
+    inputs: list[str] = []
+    sigs: list[str] = []
+    for i, seed in enumerate(signer_seeds, start=1):
+        priv = Ed25519PrivateKey.from_private_bytes(seed)
+        params = SigParams(
+            label=f"sig{i}",
+            covered=_COVERED,
+            keyid=thumbprint(priv.public_key().public_bytes_raw()),
+            alg="ed25519",
+            created=created,
+            expires=expires,
+            tag=DirectoryResponseTag,
+        )
+        inner = signature_input_inner(params)
+        raw = priv.sign(_base(authority, digest, ["@authority", "content-digest"], inner).encode())
+        inputs.append(f"{params.label}={inner}")
+        sigs.append(f"{params.label}=:{base64.b64encode(raw).decode()}:")
+    return DirectoryResponseSignature(
+        content_digest=digest, signature_input=", ".join(inputs), signature=", ".join(sigs)
+    )
+
+
+def verify_directory_response(
+    authority: str,
+    headers: Mapping[str, str],
+    body: bytes,
+    keys: Sequence[bytes],
+    now: int,
+) -> set[str]:
+    """The RFC 7638 thumbprints of the listed ``keys`` whose response signature verifies.
+
+    ``authority`` is the host[:port] the directory was fetched from, ``headers`` the
+    response headers (matched case-insensitively), ``body`` the exact response body and
+    ``keys`` the raw 32-byte Ed25519 keys the body lists; ``now`` is unix seconds.
+
+    Raises :class:`DirectoryResponseUnsignedError` when the response carries no
+    Content-Digest or no signature, and :class:`DirectoryResponseDigestError` when the
+    Content-Digest does not match the body. Otherwise each signature is judged on its
+    own, and one that fails is skipped rather than fatal: it must carry
+    ``tag="http-message-signatures-directory"`` and alg ed25519, cover exactly
+    ``"@authority";req`` and ``content-digest``, carry created no later than now plus
+    300 seconds and expires no earlier than now, and verify under the listed key whose
+    thumbprint its keyid names.
+    """
+    digest = joined_header(headers, "content-digest") or ""
+    if digest == "":
+        raise DirectoryResponseUnsignedError("key directory response carries no Content-Digest")
+    if digest != content_digest(body):
+        raise DirectoryResponseDigestError("key directory response: content-digest mismatch")
+    try:
+        all_params, sig_map = parse_all_signatures(headers)
+    except SignatureCheckError as exc:
+        raise DirectoryResponseUnsignedError(f"key directory response: {exc}") from exc
+    by_thumb: dict[str, bytes] = {}
+    for key in keys:
+        try:
+            by_thumb[thumbprint(key)] = key
+        except ValueError:
+            continue
+    verified: set[str] = set()
+    for p in all_params:
+        pub = by_thumb.get(p.keyid)
+        if pub is None or not _params_valid(p, now):
+            continue
+        names = [component_name(c).lower() for c in p.covered]
+        base = _base(authority, digest, names, p.raw_inner)
+        try:
+            Ed25519PublicKey.from_public_bytes(pub).verify(sig_map[p.label], base.encode())
+        except (InvalidSignature, ValueError):
+            continue
+        verified.add(p.keyid)
+    return verified
+
+
+def _params_valid(p: SigParams, now: int) -> bool:
+    """The per-signature rules other than the Ed25519 check: tag, alg, covered set and
+    window."""
+    if p.tag != DirectoryResponseTag or p.alg.lower() != "ed25519":
+        return False
+    if len(p.covered) != len(_COVERED) or not all(covers_component(p.covered, c) for c in _COVERED):
+        return False
+    if not p.created or not p.expires:
+        return False
+    return p.created <= now + _MAX_FUTURE_SKEW_SEC and p.expires >= now
diff --git a/sdk/python/fora_sdk/httpsig.py b/sdk/python/fora_sdk/httpsig.py
index b0076f7a..83d46b3f 100644
--- a/sdk/python/fora_sdk/httpsig.py
+++ b/sdk/python/fora_sdk/httpsig.py
@@ -1,148 +1,144 @@
-"""RFC 9421 Ed25519 request signing + verification — pure, IO-free L1 helper.
-
-Relocated from the app MCP shim (src/mcp/src/fora_mcp_shim/httpsig.py
-``Signer.sign``); the byte oracle is the Go ``SignRequest`` (sdk/go/helpers/sign.go)
-+ ``buildSignatureBase`` (sigbase.go) and ``VerifyRequest`` (verify.go). The port
-MUST produce, byte-for-byte, the same signature base, Signature-Input, and
-Signature the Go oracle emits, pinned to the shared
-sdk/go/helpers/testdata/sign-request-vectors.json.
-
-Covered set is EXACTLY ``@method @target-uri content-digest authorization
-signature-agent`` (no conditional biscuit component). Signature-Agent joined the
-required set with the WBA identity split: every signature commits to
-the signer's key-directory URL, empty included — this supersedes the earlier
-four-component pin. L1 purity (ADR-020 §1/§4): ``created``/``expires`` are
-INJECTED — sign reads no wall clock. The ``Signature`` value is STANDARD base64
-(``sig1=:<b64>:``), NOT b64url-nopad — the two encodings are not unified.
-
-``@target-uri`` is rendered verbatim from the supplied absolute URL, matching Go's
-``reconstructTargetURI`` (scheme://host + path + "?"+query) when the URL is already
-in absolute-canonical form (as the fixed vectors are).
+"""RFC 9421 Ed25519 request signing + verification under the Web Bot Auth profile —
+pure, IO-free L1 helper.
+
+The byte oracle is the Go ``SignRequest`` / ``AppendSignature`` (sdk/go/helpers/sign.go)
+over ``buildSignatureBase`` (sigbase.go), and ``VerifyRequest`` (verify.go). The port
+produces, byte for byte, the signature base, Signature-Input, Signature and
+Signature-Agent the Go oracle emits, pinned to the shared
+sdk/go/helpers/testdata/sign-request-vectors.json and multisig-chain-vectors.json.
+
+One signature labelled L, by an agent whose key directory is the https origin O::
+
+    Signature-Agent: L="O"
+    Signature-Input: L=("@method" "@target-uri" "content-digest" "authorization"
+                        "signature-agent";key="L");created=C;expires=E;keyid="K";
+                        alg="ed25519";nonce="N";tag="web-bot-auth"
+    Signature: L=:<standard base64>:
+
+The covered set is the FORA RPC set (@method and @target-uri bind the verb and the
+destination, content-digest the body, authorization the bearer) plus the signature's
+own Signature-Agent member, which names the directory a verifier resolves the keyid
+in. ``created``/``expires`` are INJECTED — sign reads no wall clock — and the window is
+at most :data:`~fora_sdk.wba.MAX_SIGNATURE_LIFETIME`. ``@target-uri`` is the supplied
+absolute URL verbatim.
 """
 
 from __future__ import annotations
 
 import base64
-import hashlib
-import re
 from dataclasses import dataclass
 
-from cryptography.exceptions import InvalidSignature
-from cryptography.hazmat.primitives.asymmetric.ed25519 import (
-    Ed25519PrivateKey,
-    Ed25519PublicKey,
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+
+from ._sigbase import (
+    SignatureCheckError,
+    SigParams,
+    build_signature_base,
+    content_digest,
+    cover_earlier,
+    parse_all_signatures,
+    plain,
+    signature_input_inner,
 )
-
-from .multisig_parse import max_sig_label_n, signature_bytes_by_label
-
-# FORA coverage set (ADR-001 §2.1) for the originating sig1 — MUST match the
-# Broker/Exchange verifiers' required base components and the Go oracle's
-# requiredCoveredComponents.
-_COVERED_COMPONENTS: tuple[str, ...] = (
-    "@method",
-    "@target-uri",
-    "content-digest",
-    "authorization",
-    "signature-agent",
+from ._sigverify import Request, failure_reason, verify_first
+from .wba import (
+    MAX_SIGNATURE_LIFETIME,
+    InvalidNonceError,
+    SignatureAgentRequiredError,
+    SignatureLabelError,
+    SignatureLifetimeError,
+    SignatureProfileError,
+    accept_signature_for,
+    check_https_origin,
+    next_free_label,
+    signature_agent_component,
+    signature_agent_dictionary,
+    signature_agent_member,
+    used_labels,
+    valid_label,
+    valid_nonce,
 )
+from .wire import WBATag
 
-#: A signature's created timestamp may not lead the verifier clock by more than
-#: this (mirrors the Go verifier's defaultMaxFutureSkew).
-_MAX_FUTURE_SKEW_SEC = 300
-
-# A non-empty nonce may use only base64url characters. Go and TypeScript apply
-# the same rule, so a nonce one SDK accepts is written as the same bytes by all
-# three, and a quote cannot end the quoted parameter early.
-_NONCE_RE = re.compile(r"[A-Za-z0-9_-]*")
+#: The FORA RPC components every request signature covers, before its own
+#: Signature-Agent member.
+_RPC_COMPONENTS: tuple[str, ...] = ("@method", "@target-uri", "content-digest", "authorization")
 
 
 @dataclass(frozen=True)
 class SignedRequest:
     """The RFC 9421 headers + the signature base produced for a request.
 
-    EVERY covered header is here, at the value that entered the base — the two whose
-    value may be empty included, so a caller attaching what this returns sends what was
-    signed. The oracle reaches the same place by mutating the request it was handed
-    (``helpers.SignRequest``), which is why it has no such field to omit. See
-    docs/design-history.md, "A covered header the peer never receives is not bound".
+    EVERY covered header is here, at the value that entered the base, so a caller
+    attaching what this returns sends what was signed. The oracle reaches the same place
+    by mutating the request it was handed (``helpers.SignRequest``), which is why it has
+    no such field to omit. See docs/design-history.md, "A covered header the peer never
+    receives is not bound".
     """
 
     content_digest: str
     signature_input: str
     signature: str
     signature_base: str
-    #: Echoed from the input so a caller attaching what this returns sends what was
-    #: signed. Empty is a value, not an absence — and REQUIRED, no default: a field
-    #: that can be left out re-creates the "empty is a safe default" assumption the
-    #: transport now relies on this echo to remove.
+    #: Echoed from the input. Empty is a value, not an absence, and REQUIRED, no
+    #: default: a field that can be left out re-creates the "empty is a safe default"
+    #: assumption the transport relies on this echo to remove.
     authorization: str
-    #: The signer's WBA directory, echoed for the same reason and required for the
-    #: same reason. Empty is the static-bootstrap case and is still carried.
+    #: The Signature-Agent header value to send: the request's dictionary with this
+    #: signature's member ``<label>="<origin>"`` in it.
     signature_agent: str
 
 
 @dataclass(frozen=True)
 class VerifiedRequest:
-    """Verdict of an RFC 9421 request verification."""
+    """Verdict of an RFC 9421 request verification.
+
+    ``signature_agent`` is, on success, the https origin of the key directory the
+    signature's own covered Signature-Agent member names. ``accept_signature`` is, on a
+    refusal for a missing component, a wrong tag, a Signature-Agent form the profile
+    refuses or a request carrying no signature, the Accept-Signature value to answer
+    with (:func:`fora_sdk.wba.accept_signature`); None otherwise.
+    """
 
     valid: bool
     reason: str | None = None
-
-
-def content_digest(body: bytes) -> str:
-    """RFC 9530 Content-Digest header value: ``sha-256=:<std-base64(SHA-256)>:``."""
-    return "sha-256=:" + base64.b64encode(hashlib.sha256(body).digest()).decode() + ":"
-
-
-def _signature_params(
-    covered: tuple[str, ...],
-    keyid: str,
-    created: int,
-    expires: int,
-    chain_link_token: str | None = None,
-    *,
-    nonce: str = "",
-) -> str:
-    # The optional forwarding-chain token (``"signature";key="sigN"``) is appended
-    # as the LAST covered component and rendered VERBATIM — it already carries its
-    # own quotes + key= param, so it must NOT be re-wrapped. Default None
-    # keeps the single-sig (N=1) inner list byte-identical.
-    tokens = [f'"{c}"' for c in covered]
-    if chain_link_token is not None:
-        tokens.append(chain_link_token)
-    covered_list = " ".join(tokens)
-    params = f'({covered_list});keyid="{keyid}";alg="ed25519";created={created};expires={expires}'
-    if not _NONCE_RE.fullmatch(nonce):
-        raise ValueError("nonce must use only base64url characters")
-    # Empty nonce emits nothing: byte-identical to a signature made before the
-    # parameter existed (mirrors Go renderParamsTail).
-    return params + f';nonce="{nonce}"' if nonce else params
-
-
-def _signature_base(
+    signature_agent: str | None = None
+    accept_signature: str | None = None
+
+
+def _check_sign_options(signature_agent: str, label: str, created: int, expires: int) -> None:
+    """Refuse what no conformant signature can carry: a missing or non-origin
+    Signature-Agent, an unusable label, or a window that is not positive or longer than
+    MAX_SIGNATURE_LIFETIME."""
+    if signature_agent == "":
+        raise SignatureAgentRequiredError("a signature needs the signer's Signature-Agent origin")
+    check_https_origin(signature_agent)
+    if not valid_label(label):
+        raise SignatureLabelError(f"signature label is not a structured-field key: {label!r}")
+    life = expires - created
+    if created <= 0 or life <= 0 or life > MAX_SIGNATURE_LIFETIME:
+        raise SignatureLifetimeError(
+            f"signature lifetime must be positive and at most {MAX_SIGNATURE_LIFETIME}s: "
+            f"created={created} expires={expires}"
+        )
+
+
+def _sign(
     *,
     method: str,
     url: str,
-    digest_header: str,
-    authorization: str,
-    signature_agent: str,
-    sig_params: str,
-    chain_link: tuple[str, str] | None = None,
-) -> str:
-    lines = [
-        f'"@method": {method.upper()}',
-        f'"@target-uri": {url}',
-        f'"content-digest": {digest_header}',
-        f'"authorization": {authorization}',
-        f'"signature-agent": {signature_agent}',
-    ]
-    # The chain-link line is the LAST covered component BEFORE @signature-params
-    # (Go buildSignatureBase renders params.Covered in order, chain link last).
-    if chain_link is not None:
-        token, value = chain_link
-        lines.append(f"{token}: {value}")
-    lines.append(f'"@signature-params": {sig_params}')
-    return "\n".join(lines)
+    headers: dict[str, str],
+    params: SigParams,
+    signer_seed: bytes,
+) -> tuple[str, str, str]:
+    """Build the base for ``params``, sign it; return (base, input member, sig member)."""
+    if not valid_nonce(params.nonce):
+        raise InvalidNonceError("nonce must use only base64url characters")
+    base = build_signature_base(method, url, headers, params)
+    sig = Ed25519PrivateKey.from_private_bytes(signer_seed).sign(base.encode())
+    member_input = f"{params.label}={signature_input_inner(params)}"
+    member_sig = f"{params.label}=:{base64.b64encode(sig).decode()}:"
+    return base, member_input, member_sig
 
 
 def sign_request(
@@ -157,44 +153,65 @@ def sign_request(
     expires: int,
     signature_agent: str = "",
     nonce: str = "",
+    label: str = "",
 ) -> SignedRequest:
-    """Sign a request over the FORA covered set; return the RFC 9421 headers.
-
-    ``created``/``expires`` are injected unix seconds (L1-pure, no wall clock).
-    Authorization is always bound — pass an empty string when the caller holds no
-    token, which BINDS that emptiness. The header is still emitted and still sent;
-    an absent header is a different thing entirely and a verifier refuses it.
-    ``signature_agent`` is the signer's WBA key-directory URL, bound the same
-    way (empty string for the static bootstrap path), mirroring Go's
-    ``bindSignatureAgent``.
-
-    ``nonce``, when non-empty, is emitted as the RFC 9421 ``nonce`` parameter.
-    Ed25519 is deterministic and the timestamps have one-second resolution, so
-    identical requests signed in the same second produce the same signature and a
-    replay store refuses the second. The helper reads no RNG: a caller that needs
-    unique signatures supplies a fresh nonce (``SigningTransport`` does). A
-    non-empty nonce must use only base64url characters, or ``ValueError`` is raised.
+    """Sign a request as a FORA RPC under the Web Bot Auth profile; return the headers.
+
+    ``signature_agent`` is the signer's key-directory origin, such as
+    ``"https://agent.example"``. It is required: the emitted Signature-Agent is the
+    one-member dictionary ``<label>="<origin>"``, and the signature covers that member.
+    ``label`` defaults to ``sig1``. ``created``/``expires`` are injected unix seconds.
+
+    Authorization is always bound — pass an empty string when the caller holds no token,
+    which BINDS that emptiness. The header is still emitted and still sent; an absent
+    header is a different thing entirely and a verifier refuses it.
+
+    ``nonce``, when non-empty, is emitted as the RFC 9421 ``nonce`` parameter. Ed25519
+    is deterministic and the timestamps have one-second resolution, so identical
+    requests signed in the same second produce the same signature and a replay store
+    refuses the second. The helper reads no RNG: a caller that needs unique signatures
+    supplies a fresh nonce (``SigningTransport`` does).
+
+    Raises :class:`~fora_sdk.wba.SignatureAgentRequiredError`,
+    :class:`~fora_sdk.wba.SignatureAgentNotOriginError`,
+    :class:`~fora_sdk.wba.SignatureLabelError`,
+    :class:`~fora_sdk.wba.SignatureLifetimeError` or
+    :class:`~fora_sdk.wba.InvalidNonceError`, before anything is signed.
     """
+    label = label or "sig1"
+    _check_sign_options(signature_agent, label, created, expires)
     digest_header = content_digest(body)
-    sig_params = _signature_params(_COVERED_COMPONENTS, keyid, created, expires, nonce=nonce)
-    base = _signature_base(
-        method=method,
-        url=url,
-        digest_header=digest_header,
-        authorization=authorization,
-        signature_agent=signature_agent,
-        sig_params=sig_params,
+    agent = signature_agent_member(label, signature_agent)
+    params = _request_params(label, keyid, created, expires, nonce)
+    headers = {
+        "content-digest": digest_header,
+        "authorization": authorization,
+        "signature-agent": agent,
+    }
+    base, member_input, member_sig = _sign(
+        method=method, url=url, headers=headers, params=params, signer_seed=signer_seed
     )
-    priv = Ed25519PrivateKey.from_private_bytes(signer_seed)
-    sig = priv.sign(base.encode())
-    sig_b64 = base64.b64encode(sig).decode()
     return SignedRequest(
         content_digest=digest_header,
-        signature_input=f"sig1={sig_params}",
-        signature=f"sig1=:{sig_b64}:",
+        signature_input=member_input,
+        signature=member_sig,
         signature_base=base,
         authorization=authorization,
-        signature_agent=signature_agent,
+        signature_agent=agent,
+    )
+
+
+def _request_params(label: str, keyid: str, created: int, expires: int, nonce: str) -> SigParams:
+    """The parameters of a FORA RPC signature labelled ``label``."""
+    return SigParams(
+        label=label,
+        covered=(*plain(*_RPC_COMPONENTS), signature_agent_component(label)),
+        keyid=keyid,
+        alg="ed25519",
+        created=created,
+        expires=expires,
+        nonce=nonce,
+        tag=WBATag,
     )
 
 
@@ -204,89 +221,102 @@ def append_signature(
     url: str,
     body: bytes,
     authorization: str,
-    signature_agent: str,
-    prev_signature_input: str,
-    prev_signature: str,
     signer_seed: bytes,
     keyid: str,
     created: int,
     expires: int,
+    signature_agent: str = "",
+    prev_signature_input: str = "",
+    prev_signature: str = "",
+    prev_signature_agent: str = "",
     nonce: str = "",
+    label: str = "",
+    cover_previous: bool = False,
 ) -> SignedRequest:
-    """Chain sig(N+1) onto ``prev_signature_input``/``prev_signature`` WITHOUT
-    disturbing existing members of the forwarding chain, the Python port of Go
-    ``helpers.AppendSignature``.
-
-    Finds the next label sig(N+1) and predecessor sigN, binds the FORA base plus a
-    ``"signature";key="sigN"`` link whose value is ``:<std-base64(decoded
-    predecessor sig bytes)>:`` (re-encoded canonically, NOT a wire splice),
-    Ed25519-signs, and returns the APPENDED Signature-Input / Signature. Appending
-    to an unsigned request (empty prev) produces a sig1 byte-for-byte identical to
-    ``sign_request`` — single-sig is the N=1 case. ``nonce`` is as in
-    ``sign_request``.
+    """Add a signature to a request WITHOUT disturbing any signature already on it, the
+    Python port of Go ``helpers.AppendSignature``.
+
+    ``prev_signature_input``, ``prev_signature`` and ``prev_signature_agent`` are the
+    request's current Signature-Input, Signature and Signature-Agent values (empty for
+    an unsigned request). The new signature's member ``<label>="<signature_agent>"`` is
+    appended to the Signature-Agent dictionary, and its Signature-Input and Signature
+    members to theirs; the returned values are the whole new headers. ``label`` defaults
+    to the first ``sigN`` no signature or member on the request uses; an explicit one
+    must be a free structured-field key.
+
+    The new signature covers its own request components and its own member only, unless
+    ``cover_previous`` is set: then it also covers the LAST signature already on the
+    request completely, as WG-00 §5.2.2 permits a party that forwards a request
+    unchanged — every component that signature lists, its Signature member and its
+    Signature-Input member. With no earlier signature it is a no-op, and appending to an
+    unsigned request produces the same headers as :func:`sign_request`.
+
+    A Signature-Agent that is not a dictionary, such as an agent's legacy String form,
+    raises :class:`~fora_sdk.wba.SignatureAgentFormError`: a String cannot take a second
+    member, and rewriting it would break the earlier signature. The other refusals are
+    those of :func:`sign_request`, plus :class:`~fora_sdk.wba.SignatureLabelError` for a
+    label already in use.
     """
+    prev = {
+        "signature-input": prev_signature_input,
+        "signature": prev_signature,
+        "signature-agent": prev_signature_agent,
+    }
+    prev = {name: value for name, value in prev.items() if value.strip() != ""}
+    label = label or next_free_label(prev)
+    _check_sign_options(signature_agent, label, created, expires)
+    if label in used_labels(prev):
+        raise SignatureLabelError(f"signature label {label!r} is already in use on the request")
+    signature_agent_dictionary(prev)
+    earlier = _last_signature(prev) if cover_previous else None
     digest_header = content_digest(body)
-    has_prev = prev_signature_input != ""
-    prev_n = max_sig_label_n(prev_signature_input) if has_prev else 0
-    label = f"sig{prev_n + 1}"
-
-    chain_link_token: str | None = None
-    chain_link: tuple[str, str] | None = None
-    if prev_n > 0:
-        prev_label = f"sig{prev_n}"
-        prev_bytes = signature_bytes_by_label(prev_signature).get(prev_label)
-        if prev_bytes is None:
-            raise ValueError(f"append_signature: predecessor {prev_label} not in Signature")
-        chain_link_token = f'"signature";key="{prev_label}"'
-        chain_link = (chain_link_token, ":" + base64.b64encode(prev_bytes).decode() + ":")
-
-    sig_params = _signature_params(
-        _COVERED_COMPONENTS, keyid, created, expires, chain_link_token, nonce=nonce
+    agent = signature_agent_member(label, signature_agent)
+    if "signature-agent" in prev:
+        agent = prev["signature-agent"].strip() + ", " + agent
+    params = _request_params(label, keyid, created, expires, nonce)
+    if earlier is not None:
+        params = SigParams(
+            label=params.label,
+            covered=tuple(cover_earlier(list(params.covered), earlier)),
+            keyid=params.keyid,
+            alg=params.alg,
+            created=params.created,
+            expires=params.expires,
+            nonce=params.nonce,
+            tag=params.tag,
+        )
+    headers = {
+        **prev,
+        "content-digest": digest_header,
+        "authorization": authorization,
+        "signature-agent": agent,
+    }
+    base, member_input, member_sig = _sign(
+        method=method, url=url, headers=headers, params=params, signer_seed=signer_seed
     )
-    base = _signature_base(
-        method=method,
-        url=url,
-        digest_header=digest_header,
-        authorization=authorization,
-        signature_agent=signature_agent,
-        sig_params=sig_params,
-        chain_link=chain_link,
-    )
-    sig = Ed25519PrivateKey.from_private_bytes(signer_seed).sign(base.encode())
-    sig_b64 = base64.b64encode(sig).decode()
-    member_input = f"{label}={sig_params}"
-    member_sig = f"{label}=:{sig_b64}:"
     return SignedRequest(
         content_digest=digest_header,
-        signature_input=f"{prev_signature_input}, {member_input}" if has_prev else member_input,
-        signature=f"{prev_signature}, {member_sig}" if prev_signature != "" else member_sig,
+        signature_input=_append_member(prev.get("signature-input"), member_input),
+        signature=_append_member(prev.get("signature"), member_sig),
         signature_base=base,
         authorization=authorization,
-        signature_agent=signature_agent,
+        signature_agent=agent,
     )
 
 
-def _extract_sig_params(signature_input: str) -> str | None:
-    """Return the verbatim params string after ``sig1=`` (``(...);keyid=...``)."""
-    eq = signature_input.find("=")
-    if eq < 0:
-        return None
-    return signature_input[eq + 1 :].strip()
-
-
-def _extract_signature_bytes(signature: str) -> bytes | None:
-    m = re.search(r":([^:]+):", signature)
-    if not m:
+def _last_signature(prev: dict[str, str]) -> SigParams | None:
+    """The last signature on the request in header order, or None when it has none."""
+    if "signature-input" not in prev:
         return None
     try:
-        return base64.b64decode(m.group(1))
-    except (ValueError, TypeError):
-        return None
+        all_params, _ = parse_all_signatures(prev)
+    except SignatureCheckError as exc:
+        raise ValueError(f"cover previous signature: {exc}") from exc
+    return all_params[-1]
 
 
-def _param_int(sig_params: str, name: str) -> int | None:
-    m = re.search(rf";{name}=(\d+)", sig_params)
-    return int(m.group(1)) if m else None
+def _append_member(existing: str | None, member: str) -> str:
+    return f"{existing.strip()}, {member}" if existing else member
 
 
 def verify_request(
@@ -302,55 +332,39 @@ def verify_request(
     now: int,
     signature_agent: str = "",
 ) -> VerifiedRequest:
-    """Verify an RFC 9421 request against ``pubkey`` at ``now`` (unix seconds).
-
-    ``content_digest`` is the request's Content-Digest header value. Enforces the
-    digest, the created/expires window, and the Ed25519 signature over the
-    reconstructed base (which commits to ``signature_agent``, empty included).
-    Pure: key resolution and ``now`` are injected.
+    """Verify the request's first RFC 9421 signature against ``pubkey`` at ``now``.
+
+    ``signature_agent`` is the request's Signature-Agent header value ("" when the
+    request carries none); ``content_digest`` its Content-Digest. Every rule of the
+    profile applies, as in Go ``helpers.VerifyRequest``: alg ed25519, tag web-bot-auth,
+    the FORA RPC components and the signature's own Signature-Agent member covered, the
+    member an https origin, the digest, the created/expires window, and the Ed25519
+    signature over the rebuilt base. Pure: the key and ``now`` are injected. The verdict
+    reports the directory the member names, and, for the refusals the profile answers
+    that way, the Accept-Signature value.
     """
-    sig_params = _extract_sig_params(signature_input)
-    if sig_params is None:
-        return VerifiedRequest(valid=False, reason="malformed_sig_input")
-
-    sig_bytes = _extract_signature_bytes(signature)
-    if sig_bytes is None:
-        return VerifiedRequest(valid=False, reason="missing_sig")
-
-    created = _param_int(sig_params, "created")
-    expires = _param_int(sig_params, "expires")
-    if created is None:
-        return VerifiedRequest(valid=False, reason="missing_created")
-    if expires is None:
-        return VerifiedRequest(valid=False, reason="missing_expires")
-    if expires < now:
-        return VerifiedRequest(valid=False, reason="expired")
-    if created > now + _MAX_FUTURE_SKEW_SEC:
-        return VerifiedRequest(valid=False, reason="future_created")
-
-    expected_digest = "sha-256=:" + base64.b64encode(hashlib.sha256(body).digest()).decode() + ":"
-    if content_digest.strip() != expected_digest:
-        return VerifiedRequest(valid=False, reason="digest_mismatch")
-
-    base = _signature_base(
-        method=method,
-        url=url,
-        digest_header=content_digest,
-        authorization=authorization,
-        signature_agent=signature_agent,
-        sig_params=sig_params,
-    )
+    headers = {
+        "signature-input": signature_input,
+        "signature": signature,
+        "content-digest": content_digest,
+        "authorization": authorization,
+    }
+    if signature_agent != "":
+        headers["signature-agent"] = signature_agent
+    request = Request(method=method, url=url, body=body, headers=headers)
     try:
-        Ed25519PublicKey.from_public_bytes(pubkey).verify(sig_bytes, base.encode())
-    except (InvalidSignature, ValueError):
-        return VerifiedRequest(valid=False, reason="signature_verify")
-    return VerifiedRequest(valid=True)
-
-
-# The framework-agnostic single-sig SERVER-verify face lives in server_verify.py
-# (it composes this module's verify_request primitive with the injected resolver /
-# replay store / clock). Re-export it here so a Broker/Exchange imports the whole
-# request-verify surface — primitive + server entry — from fora_sdk.httpsig.
+        verified = verify_first(request, lambda _directory, _keyid: pubkey, now=now)
+    except (SignatureCheckError, SignatureProfileError) as exc:
+        return VerifiedRequest(
+            valid=False, reason=failure_reason(exc), accept_signature=accept_signature_for(exc)
+        )
+    return VerifiedRequest(valid=True, signature_agent=verified.signature_agent)
+
+
+# The framework-agnostic SERVER-verify faces live in server_verify.py (they compose the
+# shared verification core with the injected resolver / replay store / clock).
+# Re-export them here so a Broker/Exchange imports the whole request-verify surface —
+# primitive + server entry — from fora_sdk.httpsig.
 from .server_verify import (  # noqa: E402
     MultisigVerdict,
     RejectReason,
diff --git a/sdk/python/fora_sdk/identity.py b/sdk/python/fora_sdk/identity.py
index d4e2245d..5b0d3781 100644
--- a/sdk/python/fora_sdk/identity.py
+++ b/sdk/python/fora_sdk/identity.py
@@ -4,6 +4,12 @@
 Auth key directory that publishes it, and a signer that signs as it. The directory is
 built from the generated ``WBAFile`` / ``JsonWebKey`` models, the types the SDK's own
 WBA resolver parses, so its shape is defined once, by that schema.
+
+Serving the directory takes one more step, because a verifier hands out only the keys
+that signed the response: serve the exact body as
+``application/http-message-signatures-directory+json`` with the three headers
+:func:`fora_sdk.directory_signature.sign_directory_response` returns for the authority it
+is served under, signed by every key the body lists.
 """
 
 from __future__ import annotations
@@ -49,7 +55,10 @@ def directory_document(
     Each key carries the ``not_before`` / ``not_after`` window the resolver requires
     before it will hand the key out: it opens a few minutes in the past and lasts
     ``valid_for``. ``now`` is the instant the window is computed from; it defaults to
-    the current time and is injectable for a deterministic document.
+    the current time and is injectable for a deterministic document. Each JWK names
+    ``alg`` "EdDSA", the RFC 7517 / RFC 8037 name for an Ed25519 key; the RFC 9421
+    ``alg`` "ed25519" belongs to the signature, not the key. Sign the serialized body
+    with :func:`~fora_sdk.directory_signature.sign_directory_response` before serving it.
     """
     now = now if now is not None else datetime.now(UTC)
     not_before = (now - _NOT_BEFORE_MARGIN).isoformat()
@@ -76,7 +85,9 @@ def directory_document(
 
 
 def signing_transport_for(key: Ed25519PrivateKey, directory: str) -> SigningTransport:
-    """A signer that signs as ``key``: keyid is its thumbprint, Signature-Agent is ``directory``."""
+    """A signer that signs as ``key``: keyid is its thumbprint, and every signature names
+    ``directory`` — the https origin of its key directory, such as
+    ``"https://agent.example"`` — in its own Signature-Agent member."""
     return SigningTransport(
         signer_seed=key.private_bytes_raw(),
         keyid=thumbprint(key.public_key().public_bytes_raw()),
diff --git a/sdk/python/fora_sdk/keyresolver.py b/sdk/python/fora_sdk/keyresolver.py
index d0e45e27..b8217ead 100644
--- a/sdk/python/fora_sdk/keyresolver.py
+++ b/sdk/python/fora_sdk/keyresolver.py
@@ -2,9 +2,9 @@
 
 Mirrors the sdk/go split (sdk/go/helpers/keyresolver.go): the pure L1 verify takes
 a resolved key directly; the resolver is how an application supplies keys — from a
-well-known endpoint, a private registry, a preloaded set, a proxy, or mTLS. This
-module carries only the PURE ``StaticKeyResolver``; the fetching well-known
-resolver (IO) is the injected default that lives OUTSIDE the pure L1 verify.
+key directory, a private registry, a preloaded set, a proxy, or mTLS. This module
+carries only the PURE ``StaticKeyResolver``; the fetching WBA resolver (IO) is the
+injected default that lives OUTSIDE the pure L1 verify.
 """
 
 from __future__ import annotations
@@ -14,21 +14,34 @@
 
 @runtime_checkable
 class KeyResolver(Protocol):
-    """Resolve the raw 32-byte Ed25519 public key for a keyid, or None if unknown."""
-
-    def resolve(self, keyid: str | None) -> bytes | None:
-        """Return the public key registered for ``keyid``, or None."""
+    """Resolve the raw 32-byte Ed25519 public key for a keyid, or None if unknown.
+
+    ``directory`` is the https origin of the key directory the signature being verified
+    names in its own covered Signature-Agent member — a fresh value per signature, so a
+    request carrying several signers' signatures resolves each key in its own signer's
+    directory. Go threads the same value through the context
+    (``helpers.SignatureAgentFromContext``). A resolver that serves one fixed key set
+    may ignore it; one that fetches keys must look ``keyid`` up in that directory and
+    nowhere else.
+    """
+
+    def resolve(self, keyid: str | None, directory: str) -> bytes | None:
+        """Return the public key ``directory`` publishes for ``keyid``, or None."""
         ...
 
 
 class StaticKeyResolver:
-    """Serve public keys from an in-memory map — for preloaded key sets and tests."""
+    """Serve public keys from an in-memory map — for preloaded key sets and tests.
+
+    The keys are keyed by keyid alone, whatever directory a signature names: a
+    preloaded set is trusted as a whole, so it answers for every directory.
+    """
 
     def __init__(self, keys: dict[str, bytes] | None = None) -> None:
         """Seed the resolver with a copy of ``keys``."""
         self._keys: dict[str, bytes] = dict(keys or {})
 
-    def resolve(self, keyid: str | None) -> bytes | None:
+    def resolve(self, keyid: str | None, directory: str = "") -> bytes | None:  # noqa: ARG002 - one key set answers for every directory
         """Return the public key for ``keyid``, or None when unknown/absent."""
         if keyid is None:
             return None
diff --git a/sdk/python/fora_sdk/multisig_parse.py b/sdk/python/fora_sdk/multisig_parse.py
index 022c5ab8..7025161e 100644
--- a/sdk/python/fora_sdk/multisig_parse.py
+++ b/sdk/python/fora_sdk/multisig_parse.py
@@ -1,62 +1,17 @@
-"""Multi-member RFC 8941 Signature-Input dictionary parser + verbatim inner-per-label
-extractor — the Python port of Go helpers.parseAllSignatures / rawInnerByLabel /
-splitTopLevelMembers (verify.go).
+"""The verbatim inner value of each Signature-Input member — the Python port of Go
+helpers.rawInnerByLabel / splitTopLevelMembers (verify.go).
 
-The single-sig verify path (server_verify.py) hand-rolls a minimal ONE-label
-parser; the multisig forwarding chain needs the FULL multi-member
-dictionary parse plus the exact byte-verbatim inner value each hop's base
-terminates with.
+RFC 9421 §2.5 terminates a signature base with the signer's exact inner list and
+parameters, so a verifier rebuilds the base from the bytes as they arrived rather than
+from a re-rendering. The structured-field parse itself is :mod:`fora_sdk.sfv`; this
+module only finds, per label, the wire text after ``label=``.
 
-Dependency-light on purpose (no new runtime dep, mirroring the existing minimal
-single-label parsers). Correctness on ADVERSARIAL headers (quoted-comma, backslash
-escapes, top-level splitting, malformed reject) is pinned by
-tests/test_multisig_parse_edge.py — the canonical Go golden vectors are
-well-behaved and do NOT gate the parser.
+Correctness on ADVERSARIAL headers (a comma inside a quoted keyid, backslash escapes,
+top-level splitting) is pinned by tests/test_multisig_parse_edge.py.
 """
 
 from __future__ import annotations
 
-import base64
-import re
-from dataclasses import dataclass
-
-_CREATED_RE = re.compile(r";created=(\d+)")
-_EXPIRES_RE = re.compile(r";expires=(\d+)")
-_KEYID_RE = re.compile(r';keyid="([^"]*)"')
-_ALG_RE = re.compile(r';alg="([^"]*)"')
-
-
-@dataclass(frozen=True)
-class Covered:
-    """One covered-component identifier: a lowercased name plus, for a forwarding
-    chain link ``"signature";key="sigN"``, the referenced predecessor label."""
-
-    name: str
-    chain_key: str | None = None
-
-
-@dataclass(frozen=True)
-class MultisigMember:
-    """One parsed Signature-Input dictionary member (one hop's label).
-
-    ``raw_inner`` is the VERBATIM value after ``label=`` — the exact
-    @signature-params bytes the hop's signature base must terminate with
-    (Go sigParams.RawInner).
-    """
-
-    label: str
-    raw_inner: str
-    covered: tuple[Covered, ...]
-    keyid: str | None
-    alg: str | None
-    created: int | None
-    expires: int | None
-
-    @property
-    def covered_names(self) -> frozenset[str]:
-        """The lowercased covered-component names (for required-set enforcement)."""
-        return frozenset(c.name for c in self.covered)
-
 
 def split_top_level_members(s: str) -> list[str]:
     """Split one SFV dictionary header value on TOP-LEVEL commas.
@@ -94,158 +49,3 @@ def raw_inner_by_label(values: list[str]) -> dict[str, str]:
                 continue
             out[member[:eq].strip()] = member[eq + 1 :].strip()
     return out
-
-
-def _find_quote_end(s: str, open_idx: int) -> int:
-    """Index of the closing quote for the string opening at ``open_idx``, honoring
-    backslash escapes, or -1 if unterminated."""
-    escaped = False
-    for i in range(open_idx + 1, len(s)):
-        c = s[i]
-        if escaped:
-            escaped = False
-        elif c == "\\":
-            escaped = True
-        elif c == '"':
-            return i
-    return -1
-
-
-def _find_inner_list_end(s: str) -> int:
-    """Index of the inner-list closing paren, honoring quoted strings, or -1."""
-    in_quote = False
-    escaped = False
-    for i in range(1, len(s)):
-        c = s[i]
-        if escaped:
-            escaped = False
-        elif c == "\\" and in_quote:
-            escaped = True
-        elif c == '"':
-            in_quote = not in_quote
-        elif c == ")" and not in_quote:
-            return i
-    return -1
-
-
-def _parse_component_param(inner: str, pos: int) -> tuple[str, str, int] | None:
-    """Parse one ``;name="val"`` component param at ``pos`` (the ';'); return
-    (name, value, next_index) or None on malformed."""
-    eq = inner.find("=", pos)
-    if eq < 0 or eq + 1 >= len(inner) or inner[eq + 1] != '"':
-        return None
-    name = inner[pos + 1 : eq]
-    v_end = _find_quote_end(inner, eq + 1)
-    if v_end < 0:
-        return None
-    return name, inner[eq + 2 : v_end], v_end + 1
-
-
-def _parse_covered(inner: str) -> tuple[Covered, ...] | None:
-    """Parse an inner-list body (``"c1" "c2";key="v" …``) into ordered covered
-    components, or None on a malformed token."""
-    items: list[Covered] = []
-    i = 0
-    n = len(inner)
-    while i < n:
-        if inner[i] == " ":
-            i += 1
-            continue
-        if inner[i] != '"':
-            return None
-        name_end = _find_quote_end(inner, i)
-        if name_end < 0:
-            return None
-        name = inner[i + 1 : name_end].lower()
-        i = name_end + 1
-        chain_key: str | None = None
-        while i < n and inner[i] == ";":
-            parsed = _parse_component_param(inner, i)
-            if parsed is None:
-                return None
-            pname, pval, i = parsed
-            if pname == "key":
-                chain_key = pval
-        items.append(Covered(name=name, chain_key=chain_key))
-    return tuple(items)
-
-
-def _parse_member(raw: str) -> MultisigMember | None:
-    """Parse one ``label=(inner);params`` member, or None on malformed."""
-    eq = raw.find("=")
-    if eq <= 0:
-        return None
-    label = raw[:eq].strip()
-    raw_inner = raw[eq + 1 :].strip()
-    if not raw_inner.startswith("("):
-        return None
-    close = _find_inner_list_end(raw_inner)
-    if close < 0:
-        return None
-    covered = _parse_covered(raw_inner[1:close])
-    if covered is None:
-        return None
-    tail = raw_inner[close + 1 :]
-    created = _CREATED_RE.search(tail)
-    expires = _EXPIRES_RE.search(tail)
-    keyid = _KEYID_RE.search(tail)
-    alg = _ALG_RE.search(tail)
-    return MultisigMember(
-        label=label,
-        raw_inner=raw_inner,
-        covered=covered,
-        keyid=keyid.group(1) if keyid else None,
-        alg=alg.group(1) if alg else None,
-        created=int(created.group(1)) if created else None,
-        expires=int(expires.group(1)) if expires else None,
-    )
-
-
-def parse_multisig_signature_input(values: list[str]) -> list[MultisigMember] | None:
-    """Full multi-label parse of the Signature-Input header values, preserving
-    header order. Returns None (clean reject) on any malformed member — never a
-    mis-slice into a bogus covered set."""
-    members: list[MultisigMember] = []
-    for v in values:
-        for raw in split_top_level_members(v):
-            member = _parse_member(raw)
-            if member is None:
-                return None
-            members.append(member)
-    return members or None
-
-
-def signature_bytes_by_label(sig_header: str) -> dict[str, bytes]:
-    """Parse the RFC 9421 ``Signature`` header (``label=:<std-base64>:, …``) into a
-    label→raw-bytes map — the per-label lookup the forwarding-chain link resolution
-    and the multisig verify loop share (Go signatureBytesForLabel / parseSigLabel)."""
-    out: dict[str, bytes] = {}
-    for member in split_top_level_members(sig_header):
-        eq = member.find("=")
-        if eq <= 0:
-            continue
-        label = member[:eq].strip()
-        val = member[eq + 1 :].strip()
-        first = val.find(":")
-        last = val.rfind(":")
-        if first < 0 or last <= first:
-            continue
-        try:
-            out[label] = base64.b64decode(val[first + 1 : last])
-        except (ValueError, TypeError):
-            continue
-    return out
-
-
-def max_sig_label_n(signature_input: str) -> int:
-    """The highest sigN label number present in a Signature-Input value (0 when
-    none) — Go maxSignatureLabelN. Backs append's next-label / predecessor lookup."""
-    max_n = 0
-    for label in raw_inner_by_label([signature_input]):
-        if not label.startswith("sig"):
-            continue
-        suffix = label[3:]
-        if suffix.isdigit():
-            n = int(suffix)
-            max_n = max(max_n, n)
-    return max_n
diff --git a/sdk/python/fora_sdk/pop.py b/sdk/python/fora_sdk/pop.py
index eb6be4fe..09a36046 100644
--- a/sdk/python/fora_sdk/pop.py
+++ b/sdk/python/fora_sdk/pop.py
@@ -1,29 +1,39 @@
-"""RFC 9421 GET proof-of-possession verification (ADR-013) — pure L1 helper.
-
-Mirrors the sdk/ts sibling (sdk/ts/src/pop.ts ``verifyAgentBinding``). When a
-signed URL carries an ``agent_id`` (the agent's RFC 7638 thumbprint), a
-code-capable edge requires the fetcher to prove possession of the bound key,
-fully offline:
-
-  1. present its raw Ed25519 public key in ``X-FORA-Agent-Key``, and
-  2. sign the GET with RFC 9421 over ``@method`` + ``@target-uri``,
-
-and the edge enforces the 3-way identity:
+"""Delivery-URL proof of possession (ADR-013) under the Web Bot Auth profile — pure L1
+helper, both faces.
+
+When a signed URL carries an ``agent_id`` (the agent's RFC 7638 thumbprint), a
+code-capable edge requires the fetcher to prove possession of the bound key, fully
+offline. The proof is a full Web Bot Auth signature over the GET: the WG-00 base (a
+dictionary Signature-Agent member naming the agent's key directory, covered as
+``"signature-agent";key="sig1"``, and the created, expires, keyid, alg, nonce and tag
+parameters) plus ``@method`` and ``@target-uri``, with the raw public key in
+``X-FORA-Agent-Key``::
+
+    X-FORA-Agent-Key: <base64url raw public key>
+    Signature-Agent: sig1="https://agent.example"
+    Signature-Input: sig1=("@method" "@target-uri" "signature-agent";key="sig1");
+                     created=C;expires=E;keyid="K";alg="ed25519";nonce="N";
+                     tag="web-bot-auth"
+    Signature: sig1=:<standard base64>:
+
+The edge verifies against the presented key and enforces the three-way identity
 
   agent_id (URL) == keyid (Signature-Input) == thumbprint(presented key)
 
-The Ed25519 verify primitive is INJECTABLE (``verify_ed25519``) so a runtime
-without a preferred Ed25519 backend can supply its own — the byte contract is the
-signature base, not the primitive. The default primitive uses ``cryptography``.
-``now`` is INJECTED (unix seconds) so the verify reads no wall clock. Byte-parity
-guard: the pop vectors are produced by the sdk/go signer over the same
-@method/@target-uri base (sigbase.go buildSignatureBase).
+The last equality is the one that cannot be dropped: verifying against the presented
+key alone proves nothing. A generic WBA verifier ignores ``X-FORA-Agent-Key``, resolves
+the same key from the directory the member names, and accepts the same signature.
+
+``@target-uri`` is the URL VERBATIM, never a parsed and re-encoded one. The Ed25519
+verify primitive is INJECTABLE (``verify_ed25519``) so a runtime without a preferred
+backend can supply its own; the byte contract is the signature base. ``now`` and
+``created``/``expires`` are injected: neither face reads a clock. Byte-parity guard:
+the sdk/go signer ``SignAgentBinding`` through pop-vectors.json.
 """
 
 from __future__ import annotations
 
 import base64
-import re
 from collections.abc import Callable, Mapping
 from dataclasses import dataclass
 
@@ -33,9 +43,32 @@
     Ed25519PublicKey,
 )
 
+from ._sigbase import (
+    MissingSignatureError,
+    SignatureCheckError,
+    SigParams,
+    build_signature_base,
+    component_name,
+    parse_all_signatures,
+    plain,
+    signature_input_inner,
+)
 from .b64 import b64url_decode, b64url_nopad
 from .thumbprint import thumbprint
-from .wire import AgentKeyHeader
+from .wba import (
+    MAX_SIGNATURE_LIFETIME,
+    InvalidNonceError,
+    MissingComponentError,
+    SignatureAgentRequiredError,
+    SignatureLifetimeError,
+    SignatureProfileError,
+    check_https_origin,
+    signature_agent_component,
+    signature_agent_member,
+    signature_directory,
+    valid_nonce,
+)
+from .wire import AgentKeyHeader, WBATag
 
 #: Lookup form of :data:`fora_sdk.wire.AgentKeyHeader`. HTTP field names are
 #: case-insensitive and the mappings this module reads are lowercase-keyed, so
@@ -45,10 +78,15 @@
 AGENT_KEY_HEADER = AgentKeyHeader.lower()
 
 _ED25519_PUBLIC_KEY_BYTES = 32
-#: The GET PoP covers exactly two components: @method and @target-uri.
-_POP_COVERED_COUNT = 2
+#: The only label this profile emits, and the key of the agent's member. A delivery
+#: fetch is a single hop to the edge, so the label is fixed rather than computed.
+_POP_LABEL = "sig1"
+#: The proof covers exactly @method, @target-uri and one Signature-Agent member.
+_POP_COVERED = ("@method", "@target-uri", "signature-agent")
 #: A proof's created timestamp may not lead the verifier clock by more than this.
 _MAX_FUTURE_SKEW_SEC = 300
+_C0_END = 0x20
+_DEL = 0x7F
 
 #: Injected Ed25519 verify primitive: ``(pubkey, signature, message) -> valid?``.
 Ed25519Verify = Callable[[bytes, bytes, bytes], bool]
@@ -56,20 +94,41 @@
 
 @dataclass(frozen=True)
 class PopResult:
-    """Verdict of a proof-of-possession verification."""
+    """Verdict of a proof-of-possession verification. On success ``signature_agent``
+    is the origin of the agent's key directory, as its covered member names it."""
 
     ok: bool
     reason: str | None = None
+    signature_agent: str | None = None
 
 
 @dataclass(frozen=True)
-class _SignatureInput:
-    covered: list[str]
-    raw_params: str
-    keyid: str
-    alg: str
-    created: int | None
-    expires: int | None
+class AgentBinding:
+    """The proof a fetcher attaches to a bound delivery request: four header values.
+
+    Returned as values rather than written onto a request so a caller can sign before
+    it builds one and so the bytes can be asserted against the shared vectors. The byte
+    string in ``signature`` is STANDARD base64 while ``agent_key`` is base64url — RFC
+    8941's byte sequence meeting a header this profile defines itself.
+    """
+
+    #: The ``X-FORA-Agent-Key`` value: base64url, no padding.
+    agent_key: str
+    #: The ``Signature-Agent`` value: the one-member dictionary ``sig1="<origin>"``.
+    signature_agent: str
+    #: The full ``Signature-Input`` value, label included.
+    signature_input: str
+    #: The full ``Signature`` value, label included.
+    signature: str
+
+    def headers(self) -> dict[str, str]:
+        """The four headers, lowercase-keyed, ready to set on the GET."""
+        return {
+            AGENT_KEY_HEADER: self.agent_key,
+            "signature-agent": self.signature_agent,
+            "signature-input": self.signature_input,
+            "signature": self.signature,
+        }
 
 
 def _default_verify_ed25519(pubkey: bytes, signature: bytes, message: bytes) -> bool:
@@ -93,73 +152,47 @@ def _read_presented_key(headers: Mapping[str, str]) -> bytes | None:
     return key
 
 
-def _parse_signature_input(raw: str | None) -> _SignatureInput | None:
-    """Parse ``label=("@method" "@target-uri");keyid="..";alg="..";created=..;expires=..``."""
-    if not raw:
-        return None
-    eq = raw.find("=")
-    if eq < 0:
-        return None
-    raw_params = raw[eq + 1 :].strip()
-    m = re.match(r"^\(([^)]*)\)(.*)$", raw_params)
-    if not m:
-        return None
-    covered = re.findall(r'"([^"]+)"', m.group(1))
-    tail = m.group(2)
-    keyid = _match_param(tail, r';keyid="([^"]*)"')
-    alg = _match_param(tail, r';alg="([^"]*)"')
-    if keyid is None or alg is None:
-        return None
-    return _SignatureInput(
-        covered=covered,
-        raw_params=raw_params,
-        keyid=keyid,
-        alg=alg,
-        created=_match_int(tail, r";created=(\d+)"),
-        expires=_match_int(tail, r";expires=(\d+)"),
-    )
-
-
-def _match_param(s: str, pattern: str) -> str | None:
-    m = re.search(pattern, s)
-    return m.group(1) if m else None
-
-
-def _match_int(s: str, pattern: str) -> int | None:
-    m = re.search(pattern, s)
-    return int(m.group(1)) if m else None
-
-
-def _parse_signature(raw: str | None) -> bytes | None:
-    """Parse the RFC 9421 ``Signature`` header value ``label=:<base64>:``."""
-    if not raw:
-        return None
-    m = re.search(r":([^:]+):", raw)
-    if not m:
-        return None
-    try:
-        # The Signature byte string is STANDARD base64 (not b64url-nopad).
-        return base64.b64decode(m.group(1))
-    except (ValueError, TypeError):
-        return None
+def _control_byte_at(value: str) -> int | None:
+    """The BYTE offset of the first C0 control or DEL in ``value``'s UTF-8, or None.
 
+    Scanned over the bytes, not the code points, so the reported offset is the number
+    Go's strings.IndexFunc reports for the same input."""
+    return next((i for i, b in enumerate(value.encode("utf-8")) if b < _C0_END or b == _DEL), None)
 
-def _covers_exactly(covered: list[str]) -> bool:
-    return len(covered) == _POP_COVERED_COUNT and "@method" in covered and "@target-uri" in covered
 
-
-def signature_base(method: str, url: str, raw_params: str) -> str:
-    """Rebuild the RFC 9421 signature base for the covered GET components.
-
-    MUST stay byte-identical to the sdk/go signer (sigbase.go buildSignatureBase).
-    """
-    return "\n".join(
-        [
-            f'"@method": {method.upper()}',
-            f'"@target-uri": {url}',
-            f'"@signature-params": {raw_params}',
-        ]
-    )
+def _validate_binding(
+    *, url: str, method: str, created: int, expires: int, signature_agent: str, nonce: str
+) -> None:
+    """Every precondition of a bound fetch, checked before anything is signed — the
+    Python port of Go ``validateAgentBinding``."""
+    if url == "":
+        raise ValueError("missing target URI (required by the agent-binding profile)")
+    # The base is line-delimited and both values are written into it verbatim, so a
+    # control byte would add or split a line and the bytes signed here would stop
+    # describing the request a verifier reconstructs. Refused rather than escaped.
+    bad = _control_byte_at(url)
+    if bad is not None:
+        raise ValueError(f"target URI carries a control byte at byte {bad}")
+    bad = _control_byte_at(method)
+    if bad is not None:
+        raise ValueError(f"method carries a control byte at byte {bad}")
+    # A proof carrying no created would claim 1970: the edge bounds how far created may
+    # lead its clock, not how far it may lag, so freshness would be silently absent.
+    if created <= 0:
+        raise ValueError("missing created param")
+    if expires <= 0:
+        raise ValueError("missing expires param")
+    life = expires - created
+    if life <= 0 or life > MAX_SIGNATURE_LIFETIME:
+        raise SignatureLifetimeError(
+            f"signature lifetime must be positive and at most {MAX_SIGNATURE_LIFETIME}s: "
+            f"created={created} expires={expires}"
+        )
+    if signature_agent == "":
+        raise SignatureAgentRequiredError("a proof needs the agent's Signature-Agent origin")
+    check_https_origin(signature_agent)
+    if not valid_nonce(nonce):
+        raise InvalidNonceError("nonce must use only base64url characters")
 
 
 def sign_agent_binding(
@@ -168,63 +201,87 @@ def sign_agent_binding(
     signer_seed: bytes,
     created: int,
     expires: int,
-) -> tuple[str, str, str]:
-    """Produce the agent's GET proof-of-possession — the SIGN face of this module.
-
-    Returns ``(presented_key_b64url, signature_input_value, signature_value)``:
-    the ``X-FORA-Agent-Key`` value, the ``Signature-Input`` header value, and the
-    ``Signature`` header value the fetcher attaches to its GET. The covered set is
-    exactly ``@method @target-uri`` (ADR-013), keyid is the RFC 7638 thumbprint of
-    the signer's public key (the 3-way identity anchor), and the signed bytes are
-    the same :func:`signature_base` the verify face reconstructs — byte-identical
-    to the sdk/go signer (pinned by pop-vectors.json). ``created``/``expires`` are
-    injected unix seconds: the helper reads no clock (L1-pure).
+    signature_agent: str = "",
+    nonce: str = "",
+    method: str = "GET",
+) -> AgentBinding:
+    """Produce the proof of possession a fetcher presents for a bound delivery URL.
+
+    ``signature_agent`` is the https origin of the agent's key directory, the one that
+    publishes the key; it is required, written as the member ``sig1="<origin>"`` and
+    covered. ``nonce`` is the RFC 9421 nonce, base64url; the helper reads no RNG, and
+    the signing transport passes 64 fresh random bytes. ``created``/``expires`` are
+    injected unix seconds and the window is at most
+    :data:`~fora_sdk.wba.MAX_SIGNATURE_LIFETIME`. The keyid is the RFC 7638 thumbprint
+    of the signer's public key, the anchor of the three-way identity.
+
+    Raises ``ValueError`` for a missing URL, a control byte in the URL or the method, or
+    a missing created or expires; :class:`~fora_sdk.wba.SignatureLifetimeError`,
+    :class:`~fora_sdk.wba.SignatureAgentRequiredError`,
+    :class:`~fora_sdk.wba.SignatureAgentNotOriginError` and
+    :class:`~fora_sdk.wba.InvalidNonceError` for the rest.
     """
-    # The signature base is line-delimited and ``url`` is written into it verbatim,
-    # so a control byte would add or split a component line and the bytes signed
-    # here would stop describing the request a verifier reconstructs. Refused
-    # rather than escaped: no legitimate target URI contains one, and a signature
-    # base is the wrong place to be lenient. Mirrors the Go signer, which refuses
-    # the same bytes in both the method and the URL; the method arm does not apply
-    # here because this face always signs GET.
-    #
-    # Scanned over the UTF-8 BYTES, not the code points, so the reported offset is
-    # the same number Go's strings.IndexFunc reports for the same input. Which
-    # inputs are refused is unaffected — a control byte is always a single UTF-8
-    # byte — but an unlabelled index under identical wording meant three units.
-    raw = url.encode("utf-8")
-    bad = next((i for i, b in enumerate(raw) if b < 0x20 or b == 0x7F), None)
-    if bad is not None:
-        raise ValueError(f"target URI carries a control byte at byte {bad}")
-
+    method = method or "GET"
+    _validate_binding(
+        url=url,
+        method=method,
+        created=created,
+        expires=expires,
+        signature_agent=signature_agent,
+        nonce=nonce,
+    )
     priv = Ed25519PrivateKey.from_private_bytes(signer_seed)
     pub = priv.public_key().public_bytes_raw()
-    keyid = thumbprint(pub)
-    sig_params = (
-        f'("@method" "@target-uri");keyid="{keyid}";alg="ed25519"'
-        f";created={created};expires={expires}"
+    params = SigParams(
+        label=_POP_LABEL,
+        covered=(*plain("@method", "@target-uri"), signature_agent_component(_POP_LABEL)),
+        keyid=thumbprint(pub),
+        alg="ed25519",
+        created=created,
+        expires=expires,
+        nonce=nonce,
+        tag=WBATag,
     )
-    raw = priv.sign(signature_base("GET", url, sig_params).encode())
-    # The Signature byte string is STANDARD base64 (mirror _parse_signature).
-    return (
-        b64url_nopad(pub),
-        f"sig1={sig_params}",
-        f"sig1=:{base64.b64encode(raw).decode()}:",
+    agent = signature_agent_member(_POP_LABEL, signature_agent)
+    base = build_signature_base(method, url, {"signature-agent": agent}, params)
+    raw = priv.sign(base.encode())
+    return AgentBinding(
+        agent_key=b64url_nopad(pub),
+        signature_agent=agent,
+        signature_input=f"{_POP_LABEL}={signature_input_inner(params)}",
+        signature=f"{_POP_LABEL}=:{base64.b64encode(raw).decode()}:",
     )
 
 
-def _freshness_failure(parsed: _SignatureInput, now: int) -> str | None:
-    if parsed.created is None:
+def _freshness_failure(p: SigParams, now: int) -> str | None:
+    if not p.created:
         return "pop_missing_created"
-    if parsed.created > now + _MAX_FUTURE_SKEW_SEC:
+    if p.created > now + _MAX_FUTURE_SKEW_SEC:
         return "pop_future_created"
-    if parsed.expires is None:
+    if not p.expires:
         return "pop_missing_exp"
-    if now >= parsed.expires:
+    if now >= p.expires:
         return "pop_expired"
     return None
 
 
+def _covers_exactly(p: SigParams) -> bool:
+    names = sorted(component_name(c).lower() for c in p.covered)
+    return names == sorted(_POP_COVERED)
+
+
+def _parse(headers: Mapping[str, str]) -> tuple[SigParams, bytes, int] | PopResult:
+    """The proof's first signature, its bytes and the signature count, or a refusal."""
+    try:
+        all_params, sig_map = parse_all_signatures(headers)
+    except MissingSignatureError:
+        return PopResult(ok=False, reason="missing_sig")
+    except SignatureCheckError:
+        return PopResult(ok=False, reason="malformed_sig_input")
+    p = all_params[0]
+    return p, sig_map[p.label], len(all_params)
+
+
 def verify_agent_binding(
     *,
     method: str,
@@ -236,38 +293,50 @@ def verify_agent_binding(
 ) -> PopResult:
     """Verify the agent's proof of possession of the key bound to ``agent_id``.
 
-    Returns ``ok=True`` only when the presented key, the RFC 9421 signature, and
-    the 3-way identity all check out. ``now`` is unix seconds (injected).
+    Returns ``ok=True`` only when every rule holds: the tag is ``web-bot-auth``; the
+    signature covers @method, @target-uri and one Signature-Agent member and nothing
+    else; the member names an https origin, in the dictionary form or the legacy
+    String form; agent_id, keyid and the presented key's thumbprint agree; the window
+    holds at ``now`` (unix seconds); and the Ed25519 signature over the base rebuilt
+    with the verbatim URL verifies against the presented key. ``headers`` is
+    lowercase-keyed.
     """
     presented = _read_presented_key(headers)
     if presented is None:
         return PopResult(ok=False, reason="missing_agent_key")
-
-    parsed = _parse_signature_input(headers.get("signature-input"))
-    if parsed is None:
-        return PopResult(ok=False, reason="malformed_sig_input")
-    if parsed.alg.lower() != "ed25519":
+    parsed = _parse(headers)
+    if isinstance(parsed, PopResult):
+        return parsed
+    p, sig_bytes, sig_count = parsed
+    if p.alg.lower() != "ed25519":
         return PopResult(ok=False, reason="unsupported_alg")
-    if not _covers_exactly(parsed.covered):
+    if p.tag != WBATag:
+        return PopResult(ok=False, reason="bad_tag")
+    if not _covers_exactly(p):
         return PopResult(ok=False, reason="bad_covered_components")
-
-    sig_bytes = _parse_signature(headers.get("signature"))
-    if sig_bytes is None:
-        return PopResult(ok=False, reason="missing_sig")
+    try:
+        directory = signature_directory(headers, p, sig_count)
+    except MissingComponentError:
+        return PopResult(ok=False, reason="bad_covered_components")
+    except SignatureProfileError:
+        return PopResult(ok=False, reason="bad_signature_agent")
 
     # 3-way identity: keyid and the presented-key thumbprint must both equal the
     # URL-bound agent_id before any signature work is trusted.
-    if parsed.keyid != agent_id:
+    if p.keyid != agent_id:
         return PopResult(ok=False, reason="keyid_mismatch")
     if thumbprint(presented) != agent_id:
         return PopResult(ok=False, reason="thumbprint_mismatch")
 
-    stale = _freshness_failure(parsed, now)
+    stale = _freshness_failure(p, now)
     if stale is not None:
         return PopResult(ok=False, reason=stale)
 
-    base = signature_base(method, url, parsed.raw_params).encode()
+    try:
+        base = build_signature_base(method, url, headers, p).encode()
+    except SignatureCheckError:
+        return PopResult(ok=False, reason="malformed_sig_input")
     verify = verify_ed25519 if verify_ed25519 is not None else _default_verify_ed25519
     if not verify(presented, sig_bytes, base):
         return PopResult(ok=False, reason="pop_sig_invalid")
-    return PopResult(ok=True)
+    return PopResult(ok=True, signature_agent=directory)
diff --git a/sdk/python/fora_sdk/resolvers/__init__.py b/sdk/python/fora_sdk/resolvers/__init__.py
index 09a22ecb..06a0ec36 100644
--- a/sdk/python/fora_sdk/resolvers/__init__.py
+++ b/sdk/python/fora_sdk/resolvers/__init__.py
@@ -33,6 +33,7 @@
 )
 from fora_sdk.resolvers.errors import (
     DigestMismatchError,
+    DirectoryResponseUnsignedError,
     DirectoryUnavailableError,
     EndpointRefusedError,
     ExchangeNotPermittedError,
@@ -72,6 +73,7 @@
     "CachedOfferKeyResolver",
     "DigestMismatchError",
     "DirectoryFetch",
+    "DirectoryResponseUnsignedError",
     "DirectoryUnavailableError",
     "Document",
     "EndpointRefusedError",
diff --git a/sdk/python/fora_sdk/resolvers/_http.py b/sdk/python/fora_sdk/resolvers/_http.py
index cf1e1ec0..bf40726c 100644
--- a/sdk/python/fora_sdk/resolvers/_http.py
+++ b/sdk/python/fora_sdk/resolvers/_http.py
@@ -37,7 +37,7 @@
 import os
 import socket
 import threading
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 from typing import Any
 
 import httpcore
@@ -359,6 +359,7 @@ class _Answer:
     status: int
     body: bytes
     content_type: str | None
+    headers: dict[str, str] = field(default_factory=dict)
 
 
 class _TooLargeError(OSError):
@@ -367,7 +368,7 @@ class _TooLargeError(OSError):
     did not read whole is a document it did not read."""
 
 
-def _stream_bounded(client: httpx.Client, url: str) -> _Answer:
+def _stream_bounded(client: httpx.Client, url: str, *, follow_redirects: bool = True) -> _Answer:
     """GET ``url``; the body bounded to ``_MAX_DOC_BYTES``.
 
     Streams so a hostile origin cannot force an unbounded read, and REFUSES a body past
@@ -375,9 +376,10 @@ def _stream_bounded(client: httpx.Client, url: str) -> _Answer:
     worse than a refusal, and a truncated license document would be reported as a
     digest mismatch it is not. A non-2xx returns an empty body for the caller to
     classify. httpx owns redirect following and status handling — a non-2xx is an
-    ordinary response, never a crash.
+    ordinary response, never a crash. With ``follow_redirects`` off, a 3xx is returned
+    as itself, which every caller refuses as a non-200.
     """
-    with client.stream("GET", url) as resp:
+    with client.stream("GET", url, follow_redirects=follow_redirects) as resp:
         content_type = resp.headers.get("content-type")
         if resp.status_code != _HTTP_OK:
             return _Answer(resp.status_code, b"", content_type)
@@ -388,17 +390,23 @@ def _stream_bounded(client: httpx.Client, url: str) -> _Answer:
             if total > _MAX_DOC_BYTES:
                 raise _TooLargeError(f"document exceeds the {_MAX_DOC_BYTES} byte cap")
             chunks.append(chunk)
-        return _Answer(_HTTP_OK, b"".join(chunks), content_type)
+        # httpx joins a repeated field's lines with ", ", the RFC 9421 reading of a header.
+        headers = dict(resp.headers.items())
+        return _Answer(_HTTP_OK, b"".join(chunks), content_type, headers)
 
 
-def _get_bounded(client: httpx.Client, url: str) -> _Answer:
+def _get_bounded(client: httpx.Client, url: str, *, follow_redirects: bool = True) -> _Answer:
     """GET ``url`` under the overall wall-clock budget.
 
     Wraps :func:`_stream_bounded` in :func:`_call_with_deadline` so the whole GET —
     including the getaddrinfo the guarded backend runs, which httpx's per-phase
     timeout does not cover — is bounded by ``_TOTAL_FETCH_DEADLINE_S``.
     """
-    return _call_with_deadline(lambda: _stream_bounded(client, url), _TOTAL_FETCH_DEADLINE_S, url)
+    return _call_with_deadline(
+        lambda: _stream_bounded(client, url, follow_redirects=follow_redirects),
+        _TOTAL_FETCH_DEADLINE_S,
+        url,
+    )
 
 
 @dataclass(frozen=True)
@@ -410,6 +418,9 @@ class Fetched:
     #: The ``Content-Type`` essence (type/subtype), lowercased, parameters stripped.
     #: ``None`` when the response carried none.
     media_type: str | None
+    #: The response headers, lowercase-keyed, a repeated field's lines joined with
+    #: ", ". A key directory's response signatures are read from them.
+    headers: dict[str, str] = field(default_factory=dict)
 
 
 def media_type_essence(header: str | None) -> str | None:
@@ -420,7 +431,7 @@ def media_type_essence(header: str | None) -> str | None:
     return essence or None
 
 
-def fetch_document(client: httpx.Client, url: str) -> Fetched:
+def fetch_document(client: httpx.Client, url: str, *, follow_redirects: bool = True) -> Fetched:
     """GET ``url``; return the body and its media type on 200, else raise
     DirectoryUnavailableError.
 
@@ -438,14 +449,23 @@ def fetch_document(client: httpx.Client, url: str) -> Fetched:
     an over-long label raises ``UnicodeEncodeError``. Both are ``ValueError``
     subclasses. Leaving them to escape made a single bad exchange raise out of a caller
     that had promised to contain it.
+
+    ``follow_redirects=False`` refuses every redirect, whatever policy the client
+    carries: a key directory answers 200 itself, because its address is the origin its
+    signer committed to and a redirect would hand key lookup to another one.
     """
     try:
-        answer = _get_bounded(client, url)
+        answer = _get_bounded(client, url, follow_redirects=follow_redirects)
     except (httpx.HTTPError, httpx.InvalidURL, OSError, ValueError) as exc:
         raise DirectoryUnavailableError(f"fetch {url}") from exc
     if answer.status != _HTTP_OK:
         raise DirectoryUnavailableError(f"status {answer.status} for {url}")
-    return Fetched(url=url, body=answer.body, media_type=media_type_essence(answer.content_type))
+    return Fetched(
+        url=url,
+        body=answer.body,
+        media_type=media_type_essence(answer.content_type),
+        headers=answer.headers,
+    )
 
 
 def fetch_strict(client: httpx.Client, url: str) -> bytes:
diff --git a/sdk/python/fora_sdk/resolvers/documents.py b/sdk/python/fora_sdk/resolvers/documents.py
index d2094d8a..6ca64a03 100644
--- a/sdk/python/fora_sdk/resolvers/documents.py
+++ b/sdk/python/fora_sdk/resolvers/documents.py
@@ -17,10 +17,16 @@
   harness reads through these.
 - **The resolvers** (the endpoint resolver, the registration-requirements reader, the
   WBA key resolver and the offer-directory fetch) read the same documents to route and
-  to verify. They call the lenient functions below, which skip the media type and the
-  strict check: a reader that must accept a newer protocol version cannot refuse a
-  field it does not know, and a deployment serving its directory as
-  ``application/json`` still has to be reachable.
+  to verify. They call the lenient functions below, which skip the strict check: a
+  reader that must accept a newer protocol version cannot refuse a field it does not
+  know.
+
+A key directory is read under the Web Bot Auth profile by both faces: it is fetched
+with no redirect, must be served as
+``application/http-message-signatures-directory+json``, and its response must be
+signed by the keys it lists (:func:`fora_sdk.directory_signature.verify_directory_response`).
+A key the response carries no valid signature by is never handed out. A revocation list
+and the manifest may follow up to five redirects.
 
 Every fetch goes through the SDK's guarded client by default, the same one the
 resolvers use for an address another party chose: the dial-time SSRF guard refuses
@@ -35,23 +41,29 @@
 import hashlib
 import hmac
 import json
+import time
+import urllib.parse
 from contextlib import nullcontext
 from dataclasses import dataclass
 from typing import TYPE_CHECKING, Any, Generic, TypeVar
 
 from pydantic import BaseModel, ValidationError
-from wire.models import KeyRevocationList, License, WBAFile, WellKnownManifest
+from wire.models import JsonWebKey, KeyRevocationList, License, WBAFile, WellKnownManifest
 
 from fora_sdk._hostref import _invalid_host
+from fora_sdk.b64 import b64url_decode_strict
+from fora_sdk.directory_signature import verify_directory_response
 from fora_sdk.hosts import is_bare_host
 from fora_sdk.resolvers._http import Fetched, fetch_document, guarded_client
 from fora_sdk.resolvers.errors import (
     DigestMismatchError,
+    DirectoryResponseUnsignedError,
     DirectoryUnavailableError,
     ManifestVersionRefusedError,
     MediaTypeRefusedError,
 )
 from fora_sdk.strict import StrictViolationError, check_strict
+from fora_sdk.thumbprint import thumbprint
 from fora_sdk.wire import WellKnownPath, manifest_version_refusal
 
 if TYPE_CHECKING:
@@ -74,8 +86,9 @@
 
 #: The media type ``/.well-known/fora.json`` is served under.
 MANIFEST_MEDIA_TYPE = "application/json"
-#: The media type the WBA key directory is served under: a JWK Set (RFC 7517 §8.5.2).
-WBA_DIRECTORY_MEDIA_TYPE = "application/jwk-set+json"
+#: The media type a Web Bot Auth key directory is served under (WG-00 §5.5). Any other
+#: label, the JWK Set type ``application/jwk-set+json`` included, is refused.
+WBA_DIRECTORY_MEDIA_TYPE = "application/http-message-signatures-directory+json"
 
 WBA_DIRECTORY_PATH = "/.well-known/http-message-signatures-directory"
 
@@ -84,6 +97,8 @@
 _REVOCATION_LIST = "fora.v1.KeyRevocationList"
 _LICENSE = "fora.v1.License"
 
+_ED25519_PUBLIC_KEY_BYTES = 32
+
 #: The digest methods ``License.uri_digest`` admits, and the hash each one names.
 _DIGEST_METHODS = frozenset({"sha256", "sha384", "sha512"})
 
@@ -178,8 +193,13 @@ def fetch_manifest(http: httpx.Client, url: str) -> tuple[Fetched, str, Any]:
     return fetched, text, doc
 
 
-def fetch_wba_directory(http: httpx.Client, url: str) -> WBAFile:
-    """GET ``url`` and decode the body as a :class:`WBAFile`, leniently.
+def fetch_wba_directory(http: httpx.Client, url: str, *, now: int | None = None) -> WBAFile:
+    """GET ``url`` with no redirect and decode the body as a :class:`WBAFile`, leniently.
+
+    The media type must be :data:`WBA_DIRECTORY_MEDIA_TYPE`, and the file returned lists
+    only the keys that signed the response (:func:`signed_directory_keys`), so no caller
+    can hand out a key the directory did not sign for. ``now`` (unix seconds, default
+    the wall clock) is the instant the response signatures' windows are judged at.
 
     The resolvers' read of a directory: :meth:`WBAKeyResolver._fetch_directory` on the
     signature-verification path and
@@ -191,9 +211,81 @@ def fetch_wba_directory(http: httpx.Client, url: str) -> WBAFile:
     caller make its own raise-or-contain choice against ONE exception type.
     ``fetch_document`` folds in every transport failure, every non-200, and every way the
     URL itself can be refused — a malformed A-label and an over-long label included.
-    This adds the one arm it does not cover: a body that is not a valid directory.
+    This adds the arms it does not cover: a redirect, a wrong media type, a body that is
+    not a valid directory, and a response that cannot be checked for signatures.
+    """
+    fetched = fetch_document(http, url, follow_redirects=False)
+    if fetched.media_type != WBA_DIRECTORY_MEDIA_TYPE:
+        raise DirectoryUnavailableError(
+            f"{url} was served as {fetched.media_type!r}, not {WBA_DIRECTORY_MEDIA_TYPE!r}"
+        )
+    file = _parse(fetched, _WBA_FILE, WBAFile)
+    try:
+        return signed_directory_keys(fetched, file, int(time.time()) if now is None else now)
+    except ValueError as exc:
+        raise DirectoryUnavailableError(f"{url}: {exc}") from exc
+
+
+def jwk_ed25519_public_key(key: JsonWebKey) -> bytes | None:
+    """The raw Ed25519 public key a directory entry carries, or None when it is not one.
+
+    ``kty``/``crv`` are matched CASE-INSENSITIVELY — a deliberate lenient SDK convention
+    (RFC 7517/8037 specify the exact-case "OKP" / "Ed25519"); the three SDKs accept any
+    case identically so a case-varying directory resolves the SAME key. ``x`` is
+    UNPADDED base64url (RFC 8037); padding and the standard alphabet are refused, as Go's
+    ``base64.RawURLEncoding`` refuses them.
     """
-    return _parse(fetch_document(http, url), _WBA_FILE, WBAFile)
+    if (key.kty or "").upper() != "OKP" or (key.crv or "").lower() != "ed25519":
+        return None
+    try:
+        raw = b64url_decode_strict(key.x or "")
+    except ValueError:
+        return None
+    if len(raw) != _ED25519_PUBLIC_KEY_BYTES:
+        return None
+    return raw
+
+
+def request_authority(url: str) -> str:
+    """The RFC 9421 ``@authority`` of a fetch of ``url``: the host, lowercased, with the
+    port only when it is not the scheme's default, an IPv6 literal in brackets."""
+    parts = urllib.parse.urlsplit(url)
+    host = (parts.hostname or "").lower()
+    if host == "":
+        raise ValueError(f"cannot derive the authority of {url!r}")
+    try:
+        port = parts.port
+    except ValueError as exc:
+        raise ValueError(f"cannot derive the authority of {url!r}") from exc
+    if ":" in host:
+        host = f"[{host}]"
+    default = {"https": 443, "http": 80}.get(parts.scheme)
+    if port is None or port == default:
+        return host
+    return f"{host}:{port}"
+
+
+def signed_directory_keys(fetched: Fetched, file: WBAFile, now: int) -> WBAFile:
+    """A copy of ``file`` listing only the keys whose response signature verifies,
+    checked against the authority ``fetched`` was fetched from.
+
+    A key that is not an Ed25519 key cannot sign and is dropped with the rest. A
+    directory listing no key has nothing to sign and is returned as it is. Raises
+    ``ValueError`` for a response listing keys that cannot be checked at all: a
+    Content-Digest that does not match the body, or no response signature.
+    """
+    keys = file.keys or []
+    if not keys:
+        return file
+    authority = request_authority(fetched.url)
+    pubs = [pub for pub in (jwk_ed25519_public_key(k) for k in keys) if pub is not None]
+    verified = verify_directory_response(authority, fetched.headers, fetched.body, pubs, now)
+    kept = [
+        k
+        for k in keys
+        if (pub := jwk_ed25519_public_key(k)) is not None and thumbprint(pub) in verified
+    ]
+    return file.model_copy(update={"keys": kept})
 
 
 def fetch_revocation_list(http: httpx.Client, url: str) -> KeyRevocationList:
@@ -321,16 +413,19 @@ def read_wba_directory(
 
     ``url_or_domain`` is either the directory's full URL or a bare host, in which case
     the directory is read from
-    ``scheme://host/.well-known/http-message-signatures-directory``. The media type
-    must be ``application/jwk-set+json``, and the body must pass the strict ``WBAFile``
-    schema and the cross-field rules. Key validity windows and revocation are not
-    evaluated: that is the WBA key resolver's job, and a directory listing an expired
-    key is still a well-formed directory.
+    ``scheme://host/.well-known/http-message-signatures-directory``. The directory is
+    fetched with no redirect: a redirect fails the fetch. The media type must be
+    ``application/http-message-signatures-directory+json``, the body must pass the
+    strict ``WBAFile`` schema and the cross-field rules, and the response must carry a
+    valid response signature by EVERY key it lists. Key validity windows and revocation
+    are not evaluated: that is the WBA key resolver's job, and a directory listing an
+    expired key is still a well-formed directory.
 
     Raises ``ValueError`` for a value that is neither a URL nor a bare host;
-    :class:`DirectoryUnavailableError`; :class:`MediaTypeRefusedError`; and
-    :class:`~fora_sdk.strict.StrictViolationError`. ``http`` is as for
-    :func:`read_manifest`.
+    :class:`DirectoryUnavailableError`; :class:`MediaTypeRefusedError`;
+    :class:`~fora_sdk.strict.StrictViolationError`; and
+    :class:`DirectoryResponseUnsignedError` when a listed key did not sign the
+    response. ``http`` is as for :func:`read_manifest`.
     """
     if "://" in url_or_domain:
         url = url_or_domain
@@ -339,8 +434,18 @@ def read_wba_directory(
     else:
         raise _invalid_host(url_or_domain, "neither a URL nor a bare host")
     with _client(http) as client:
-        fetched = fetch_document(client, url)
-    return accept(WBA_DIRECTORY, fetched)
+        fetched = fetch_document(client, url, follow_redirects=False)
+    doc = accept(WBA_DIRECTORY, fetched)
+    listed = doc.message.keys or []
+    try:
+        signed = signed_directory_keys(fetched, doc.message, int(time.time()))
+    except ValueError as exc:
+        raise DirectoryResponseUnsignedError(f"{url}: {exc}") from exc
+    if len(signed.keys or []) != len(listed):
+        raise DirectoryResponseUnsignedError(
+            f"{len(signed.keys or [])} of {len(listed)} listed keys signed the response at {url}"
+        )
+    return doc
 
 
 def read_revocation_list(
diff --git a/sdk/python/fora_sdk/resolvers/errors.py b/sdk/python/fora_sdk/resolvers/errors.py
index bda5b80b..42b6ccb6 100644
--- a/sdk/python/fora_sdk/resolvers/errors.py
+++ b/sdk/python/fora_sdk/resolvers/errors.py
@@ -11,6 +11,10 @@
 
 from __future__ import annotations
 
+from fora_sdk.directory_signature import (
+    DirectoryResponseUnsignedError as _L1DirectoryResponseUnsignedError,
+)
+
 
 class ResolverError(Exception):
     """Base of every resolver verdict."""
@@ -134,12 +138,25 @@ class ManifestVersionRefusedError(ResolverError):
 class MediaTypeRefusedError(ResolverError):
     """A document was served under a media type other than the one the protocol names
     for it: ``application/json`` for ``/.well-known/fora.json`` and
-    ``application/jwk-set+json`` for the WBA directory.
+    ``application/http-message-signatures-directory+json`` for the WBA directory.
 
     A VERDICT on what the party publishes, not a failed read, so it is never worth
     retrying. Only the document readers in :mod:`fora_sdk.resolvers.documents` raise
-    it; the resolvers that read the same documents for routing and key resolution do
-    not check the label. Peer of Go ``ErrMediaTypeRefused`` / TS ``MediaTypeRefused``.
+    it. The resolvers that read a key directory for key resolution check its label too
+    and report a wrong one as :class:`DirectoryUnavailableError`, like any directory
+    they cannot use. Peer of Go ``ErrMediaTypeRefused`` / TS ``MediaTypeRefused``.
+    """
+
+
+class DirectoryResponseUnsignedError(ResolverError, _L1DirectoryResponseUnsignedError):
+    """A key directory whose response is not signed by every key it lists: no response
+    signature at all, or none by one of the listed keys.
+
+    Raised by :func:`~fora_sdk.resolvers.documents.read_wba_directory`. A VERDICT on what
+    the party publishes, never worth retrying. It is also the L1
+    :class:`fora_sdk.directory_signature.DirectoryResponseUnsignedError`, so one
+    ``except`` catches the verdict from either face. Peer of Go
+    ``ErrDirectoryResponseUnsigned``.
     """
 
 
diff --git a/sdk/python/fora_sdk/resolvers/offer_key_cache.py b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
index bee1acde..f7b65957 100644
--- a/sdk/python/fora_sdk/resolvers/offer_key_cache.py
+++ b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
@@ -181,8 +181,9 @@ def create_wba_offer_directory_fetch(
     scheme: str = "",
     port: str = "",
 ) -> DirectoryFetch:
-    """The default :data:`DirectoryFetch`: GET one exchange's Web Bot Auth directory
-    and decode the ``WBAFile``.
+    """The default :data:`DirectoryFetch`: GET one exchange's Web Bot Auth directory,
+    with no redirect, check its media type and response signatures, and decode the
+    ``WBAFile``, keeping only the keys that signed the response.
 
     Port of the Go oracle's ``NewWBADirectoryFetcher(client, scheme, port)`` and the
     TypeScript ``createWBAOfferDirectoryFetch({fetch, scheme, port})``. An exchange's
diff --git a/sdk/python/fora_sdk/resolvers/wba.py b/sdk/python/fora_sdk/resolvers/wba.py
index 5cee8ffd..6c9d6f5f 100644
--- a/sdk/python/fora_sdk/resolvers/wba.py
+++ b/sdk/python/fora_sdk/resolvers/wba.py
@@ -27,7 +27,6 @@
 import httpx
 from wire.models import JsonWebKey, KeyRevocationList, WBAFile
 
-from fora_sdk.b64 import b64url_decode_strict
 from fora_sdk.hosts import host_anchored
 from fora_sdk.resolvers._http import guarded_client
 from fora_sdk.resolvers.documents import (
@@ -35,6 +34,9 @@
     fetch_revocation_list,
     fetch_wba_directory,
 )
+from fora_sdk.resolvers.documents import (
+    jwk_ed25519_public_key as _public_key_of_safe,
+)
 from fora_sdk.resolvers.errors import (
     DirectoryUnavailableError,
     KeyExpiredError,
@@ -56,7 +58,6 @@
 # is clamped, so a compromised origin cannot stamp a far-future baseline that
 # permanently freezes later (legitimately earlier) snapshots under the guard.
 _AS_OF_SKEW = timedelta(seconds=300)
-_ED25519_PUBLIC_KEY_BYTES = 32
 
 # Diagnostics for the active-key selector's bounded-scan exhaustion (see
 # _select_active_ed25519_key). The unbounded default never logs; only an explicit
@@ -105,7 +106,13 @@ class _Inflight:
 
 class WBAKeyResolver:
     """Resolve signing keys from WBA identity directories, matching by RFC 7638
-    thumbprint and enforcing validity windows + the host's revocation snapshot."""
+    thumbprint and enforcing validity windows + the host's revocation snapshot.
+
+    The directory is the origin the signature's own covered Signature-Agent member
+    names. It is fetched with no redirect, must be served as
+    ``application/http-message-signatures-directory+json``, and only the keys that
+    signed its response are ever handed out: a listed key with no valid response
+    signature resolves as unknown."""
 
     def __init__(
         self,
@@ -271,7 +278,11 @@ def _lead_refresh(self, base: str, host: str, pending: _Inflight) -> WBAFile:
             pending.event.set()
 
     def _fetch_directory(self, base: str) -> WBAFile:
-        return fetch_wba_directory(self._http, base + WBA_DIRECTORY_PATH)
+        # No redirect, the profile's media type, and only the keys that signed the
+        # response, judged at this resolver's clock.
+        return fetch_wba_directory(
+            self._http, base + WBA_DIRECTORY_PATH, now=int(self._now().timestamp())
+        )
 
     def _is_revoked(self, host: str, thumbprint_key: str) -> bool:
         with self._rev_lock:
@@ -543,13 +554,19 @@ def _wait_timer(timer: queue.Queue[datetime], stop: threading.Event) -> bool:
 
 
 def _directory_base(ref: str, scheme: str) -> tuple[str, str] | None:
-    """Normalize a Signature-Agent value (bare host, host:port, or full URL) into
-    a ``scheme://host`` base and its host key, or None when it names no host."""
+    """Normalize a directory reference (an https origin, a bare host or host:port) into
+    a ``scheme://host`` base and its host key, or None when it names no host.
+
+    ``scheme`` is the scheme directories are fetched over. A Signature-Agent member is
+    always an https origin; a resolver built with ``scheme="http"`` fetches that origin's
+    directory over http, which is how a test reaches a plaintext server. A bare host is
+    prefixed with it."""
     candidate = ref if "://" in ref else f"{scheme}://{ref}"
     parts = urllib.parse.urlsplit(candidate)
     if not parts.netloc:
         return None
-    return f"{parts.scheme}://{parts.netloc}", parts.netloc
+    fetch_scheme = scheme if parts.scheme == "https" else parts.scheme
+    return f"{fetch_scheme}://{parts.netloc}", parts.netloc
 
 
 def _wba_host_anchored(anchor: str, candidate: str) -> bool:
@@ -591,24 +608,6 @@ def _key_by_thumbprint(file: WBAFile, keyid: str) -> JsonWebKey | None:
     return None
 
 
-def _public_key_of_safe(key: JsonWebKey) -> bytes | None:
-    # kty/crv are matched CASE-INSENSITIVELY — a deliberate lenient SDK convention
-    # (RFC 7517/8037 specify the exact-case "OKP" / "Ed25519"); the three SDKs accept
-    # any case identically so a case-varying directory resolves the SAME key.
-    if (key.kty or "").upper() != "OKP" or (key.crv or "").lower() != "ed25519":
-        return None
-    try:
-        # JWK OKP `x` is UNPADDED base64url (RFC 8037); reject padding / the
-        # standard alphabet so this matches Go's base64.RawURLEncoding and the
-        # tri-language selector picks the SAME key on a malformed-`x` directory.
-        raw = b64url_decode_strict(key.x or "")
-    except ValueError:
-        return None
-    if len(raw) != _ED25519_PUBLIC_KEY_BYTES:
-        return None
-    return raw
-
-
 def _public_key_of(key: JsonWebKey) -> bytes:
     raw = _public_key_of_safe(key)
     if raw is None:
diff --git a/sdk/python/fora_sdk/resolvers/wellknown.py b/sdk/python/fora_sdk/resolvers/wellknown.py
index 9986cc22..018e39bf 100644
--- a/sdk/python/fora_sdk/resolvers/wellknown.py
+++ b/sdk/python/fora_sdk/resolvers/wellknown.py
@@ -108,9 +108,13 @@ def __init__(
         self._cache: dict[str, bytes] = {}
         self._cache_exp: datetime | None = None
 
-    def resolve(self, keyid: str) -> bytes | None:
+    def resolve(self, keyid: str, directory: str = "") -> bytes | None:  # noqa: ARG002 - one fixed JWKS answers for every directory
         """Return the public key for ``keyid``, or None (unknown key miss).
 
+        ``directory`` is the key directory a verified signature names (see
+        :class:`~fora_sdk.keyresolver.KeyResolver`). This resolver reads one fixed URL,
+        so it answers from that whatever the directory.
+
         Raises DirectoryUnavailableError on a fetch/decode failure — a fail-closed
         halt DISTINCT from the None miss a composite treats as "fall through".
         """
diff --git a/sdk/python/fora_sdk/server_verify.py b/sdk/python/fora_sdk/server_verify.py
index e5d870fa..0887d1db 100644
--- a/sdk/python/fora_sdk/server_verify.py
+++ b/sdk/python/fora_sdk/server_verify.py
@@ -1,24 +1,20 @@
-"""Framework-agnostic RFC 9421 single-signature SERVER-verify face (ADR-020 §4).
-
-The Python sibling of sdk/go/connectserver's single-sig verify path. Where
-``httpsig.verify_request`` is the pure primitive (already-resolved key, explicit
-covered fields), ``verify_request_server`` is the SERVER entry a Broker/Exchange
-built in Python wires behind its framework (ASGI): it (a) parses the inbound
-Signature-Input/Signature off the request headers, (b) enforces the FORA
-required-5 covered set, (c) resolves the keyid through an INJECTED KeyResolver
-(the SDK owns no keys), (d) reuses ``verify_request`` for the window / digest /
-Ed25519 check, (e) runs the two-phase replay check over an INJECTED store (the
-SDK owns no replay state), (f) reads time through an INJECTED clock (the SDK owns
-no wall clock), and (g) returns a VERDICT carrying the reject reason mirroring the
-Go connectserver taxonomy (classify.go ``RejectReason.String()`` /
-``ErrReplayed``) — never a thrown exception at the SDK boundary.
-
-SINGLE-SIG scope only: multisig forwarding-chain verify (hop budget,
-broken_chain) is handled by the separate multisig server-verify path below.
-The reject reason tokens this face emits are exactly the two the single-sig
-surface produces: ``"signature"`` (bad sig / expiry / future-created /
-wrong-or-unresolvable key / tampered covered field / missing component — the
-connectserver default branch) and ``"replay"``.
+"""Framework-agnostic RFC 9421 SERVER-verify faces (ADR-020 §4).
+
+The Python sibling of sdk/go/connectserver's verify path. Where
+``httpsig.verify_request`` is the pure primitive (an already-resolved key, explicit
+header values), these are the SERVER entries a Broker/Exchange built in Python wires
+behind its framework (ASGI). Each (a) reads Signature-Input / Signature off the request
+headers, (b) applies the Web Bot Auth profile and the FORA RPC covered set, (c) resolves
+every keyid through an INJECTED :class:`~fora_sdk.keyresolver.KeyResolver` in the key
+directory that signature's own covered Signature-Agent member names (the SDK owns no
+keys), (d) reads time through an INJECTED clock, and (e) returns a VERDICT carrying the
+reject reason of the Go connectserver taxonomy (classify.go ``RejectReason.String()``)
+— never a thrown exception at the SDK boundary. The single-signature face also runs the
+two-phase replay check over an INJECTED store (the SDK owns no replay state).
+
+A verdict refusing a request for a missing component, a wrong tag, a Signature-Agent
+form the profile refuses, or no signature at all carries ``accept_signature``: the
+Accept-Signature value to answer the 401 with (WG-00 §5.3).
 """
 
 from __future__ import annotations
@@ -27,23 +23,15 @@
 from dataclasses import dataclass
 from typing import TYPE_CHECKING, Literal, Protocol, runtime_checkable
 
-from cryptography.exceptions import InvalidSignature
-from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
-
-from .httpsig import (
-    _MAX_FUTURE_SKEW_SEC,
-    VerifiedRequest,
-    _signature_base,
-    content_digest,
-    verify_request,
-)
-from .multisig_parse import (
-    MultisigMember,
-    parse_multisig_signature_input,
-    signature_bytes_by_label,
-)
+from ._sigbase import SignatureCheckError
+from ._sigverify import Request, verify_all, verify_first
+from .httpsig import VerifiedRequest
+from .wba import SignatureProfileError, accept_signature_for
 
 if TYPE_CHECKING:
+    from collections.abc import Mapping
+
+    from ._sigverify import Resolve
     from .keyresolver import KeyResolver
 
 # RejectReason — the classified verify-gate reject vocabulary, mirroring the Go
@@ -55,37 +43,10 @@
 # MultisigRejectReason); Python mirrors Go's single four-token domain.
 RejectReason = Literal["signature", "replay", "broken_chain", "hop_budget"]
 
-# The connectserver multisig reject-reason tokens (mirrors Go verify.go): a chain
-# longer than the budget is "hop_budget"; a structurally-broken chain is
-# "broken_chain"; any per-hop authenticity failure collapses to "signature".
-_REASON_HOP_BUDGET: RejectReason = "hop_budget"
-_REASON_BROKEN_CHAIN: RejectReason = "broken_chain"
-
-# The FORA required covered set, mirroring Go helpers.requiredCoveredComponents.
-# The presented Signature-Input MUST declare all five, or the request is rejected
-# as a signature failure (Go enforceRequiredComponents).
-_REQUIRED_COVERED: frozenset[str] = frozenset(
-    {
-        "@method",
-        "@target-uri",
-        "content-digest",
-        "authorization",
-        "signature-agent",
-    }
-)
-
-# The canonical entitlement-token header (mirrors Go verify.go entitlementHeader
-# / entitlementHeaderLower). Format-neutral — the value may be a JWT or an opaque
-# token; only its coverage is checked. When the request carries it, the signature
-# MUST commit to its lowercase covered-component form, or an unsigned entitlement
-# token could be slipped under an otherwise-valid signature.
-_ENTITLEMENT_HEADER = "x-entitlement-token"
-
-# The connectserver reject-reason tokens (classify.go RejectReason.String()) for
-# the single-sig surface. Any signature-authenticity/freshness/key failure is the
-# default "signature"; a replayed nonce is "replay".
 _REASON_SIGNATURE: RejectReason = "signature"
 _REASON_REPLAY: RejectReason = "replay"
+_REASON_HOP_BUDGET: RejectReason = "hop_budget"
+_REASON_BROKEN_CHAIN: RejectReason = "broken_chain"
 
 # Default replay TTL, mirroring connectserver WithReplayTTL(5m). The injected
 # store may ignore it; it is passed through unchanged.
@@ -110,172 +71,19 @@ def seen_or_add(self, nonce: str, ttl_seconds: int) -> bool:
         ...
 
 
-@dataclass(frozen=True)
-class _ParsedInput:
-    """The parsed single-sig Signature-Input: label, covered names, keyid, window.
-
-    ``created``/``expires`` back the MaxSignatureAge lifetime clamp; the
-    freshness/window check itself is re-parsed by ``verify_request`` from the
-    verbatim params tail, so these are consumed only for the clamp."""
-
-    label: str
-    covered: frozenset[str]
-    keyid: str | None
-    created: int | None = None
-    expires: int | None = None
-
-
-def _parse_signature_input(signature_input: str) -> _ParsedInput | None:
-    """Parse ``label=("c1" "c2" ...);keyid="..";alg="..";created=..;expires=..``.
-
-    A minimal RFC 8941-shaped parser for the SINGLE-SIG surface (one label, the
-    FORA covered set, string-valued keyid). It extracts the label, the covered
-    component names (quoted tokens inside the inner list), and the keyid — the
-    fields the required-set enforcement and key resolution need. The window /
-    digest / crypto reuse ``verify_request``, which re-parses the verbatim params
-    tail, so this parser never needs the integer params.
-    """
-    eq = signature_input.find("=")
-    if eq < 0:
-        return None
-    label = signature_input[:eq].strip()
-    tail = signature_input[eq + 1 :].strip()
-    open_paren = tail.find("(")
-    close_paren = tail.find(")")
-    if open_paren != 0 or close_paren < 0:
-        return None
-    inner = tail[open_paren + 1 : close_paren]
-    covered = frozenset(tok for tok in _quoted_tokens(inner))
-    params = tail[close_paren + 1 :]
-    keyid = _quoted_param(params, "keyid")
-    created = _int_param(params, "created")
-    expires = _int_param(params, "expires")
-    return _ParsedInput(label=label, covered=covered, keyid=keyid, created=created, expires=expires)
-
-
-def _quoted_tokens(inner: str) -> list[str]:
-    """Return the quoted string tokens in an SFV inner list, lowercased.
-
-    Only ``"name"`` tokens are collected (the FORA covered set carries no
-    param-bearing components on the single-sig surface); a malformed token yields
-    an empty list member that the required-set check then rejects.
-    """
-    out: list[str] = []
-    i = 0
-    n = len(inner)
-    while i < n:
-        if inner[i] == '"':
-            j = inner.find('"', i + 1)
-            if j < 0:
-                break
-            out.append(inner[i + 1 : j].lower())
-            i = j + 1
-        else:
-            i += 1
-    return out
-
-
-def _quoted_param(params: str, name: str) -> str | None:
-    """Return the value of ``;name="value"`` from an SFV params tail, or None."""
-    needle = f';{name}="'
-    start = params.find(needle)
-    if start < 0:
-        return None
-    value_start = start + len(needle)
-    end = params.find('"', value_start)
-    if end < 0:
-        return None
-    return params[value_start:end]
-
-
-def _int_param(params: str, name: str) -> int | None:
-    """Return the integer value of ``;name=<int>`` from an SFV params tail, or None.
-
-    Backs the MaxSignatureAge clamp: ``created``/``expires`` are bare SFV integers
-    (unquoted), so this reads the digit run after ``;name=`` up to the next ``;``.
-    """
-    needle = f";{name}="
-    start = params.find(needle)
-    if start < 0:
-        return None
-    value_start = start + len(needle)
-    end = value_start
-    n = len(params)
-    while end < n and params[end].isdigit():
-        end += 1
-    if end == value_start:
-        return None
-    return int(params[value_start:end])
-
-
-def _header(headers: dict[str, str], name: str) -> str | None:
-    """Return the request's value for ``name``, or None when it carries no such field.
-
-    The port of Go's covered-component read (``http.Header.Values`` + the RFC 9421
-    join), and it makes two distinctions the obvious ``headers.get(name, "")`` erases.
-
-    ABSENT is not EMPTY. None means the request carried no field line under this
-    name at all; "" means it carried one whose value is empty. The base is rebuilt
-    from the request that ARRIVED, so a covered name with nothing under it cannot be
-    reconstructed, while an empty one reconstructs to the empty value the signer
-    bound — which is the whole reason an empty covered header is put on the wire.
-
-    Repeated spellings JOIN, they do not shadow. Header names are case-insensitive
-    on the wire and a Python dict's keys are not, so a caller's ``Authorization``
-    and a signer's ``authorization`` are two field lines under ONE covered name.
-    The oracle joins them with ", " before rebuilding the base, so the covered value
-    changes and the signature no longer reproduces. Returning the first match
-    instead would hand back the signed value and accept whatever was slipped in
-    beside it — the token injection the covered set exists to prevent.
-
-    See docs/design-history.md, "A covered header the peer never receives is not
-    bound".
-    """
-    lower = name.lower()
-    values = [value for key, value in headers.items() if key.lower() == lower]
-    if not values:
-        return None
-    return ", ".join(values).strip()
-
-
-def _has_entitlement_header(headers: dict[str, str]) -> bool:
-    """Return True if the entitlement-token header is present (non-empty).
-
-    Read through the same fold every other header read uses, and for the same reason.
-    Returning only the FIRST matching line is shadowable: a request may carry the name
-    twice, and an empty line placed ahead of a real capability token makes the answer
-    "", so the coverage rule never runs and an unsigned token rides in under a
-    signature that never committed to it. Joining removes the shadow — any second
-    line makes the value non-empty.
-    """
-    return (_header(headers, _ENTITLEMENT_HEADER) or "") != ""
-
+def _resolve_through(resolver: KeyResolver) -> Resolve:
+    """Adapt the injected resolver to the core's lookup: each signature's key is asked
+    for in the directory THAT signature names."""
+    return lambda directory, keyid: resolver.resolve(keyid, directory)
 
-def _reject(reason: str) -> VerifiedRequest:
-    return VerifiedRequest(valid=False, reason=reason)
 
+def _replay_nonce(keyid: str, signature: bytes) -> str:
+    """The replay-store key: keyid + NUL + std-base64(signature bytes).
 
-def _replay_nonce(keyid: str, signature: str) -> str:
-    """Derive the replay-store key: keyid + NUL + std-base64(signature bytes).
-
-    Mirrors connectserver.replayNonce (keyid + "\\x00" + std-base64(sig)). The
-    signature bytes are decoded from the ``sig1=:<b64>:`` wire form and re-encoded
-    canonically so the nonce is independent of incidental wire whitespace.
+    Mirrors connectserver.replayNonce. The bytes are the parsed ones, re-encoded
+    canonically, so the key does not depend on incidental wire whitespace.
     """
-    raw = _signature_bytes(signature)
-    encoded = base64.b64encode(raw).decode() if raw is not None else signature
-    return keyid + "\x00" + encoded
-
-
-def _signature_bytes(signature: str) -> bytes | None:
-    first = signature.find(":")
-    last = signature.rfind(":")
-    if first < 0 or last <= first:
-        return None
-    try:
-        return base64.b64decode(signature[first + 1 : last])
-    except (ValueError, TypeError):
-        return None
+    return keyid + "\x00" + base64.b64encode(signature).decode()
 
 
 def verify_request_server(
@@ -283,272 +91,67 @@ def verify_request_server(
     method: str,
     url: str,
     body: bytes,
-    headers: dict[str, str],
+    headers: Mapping[str, str],
     resolver: KeyResolver,
     replay_store: ReplayStore | None = None,
     now: int,
     replay_ttl_seconds: int = _DEFAULT_REPLAY_TTL_SEC,
     max_signature_age: int = 0,
 ) -> VerifiedRequest:
-    """Verify an inbound single-signature FORA request; return a reason-tagged verdict.
+    """Verify an inbound FORA request's first signature; return a reason-tagged verdict.
 
     ``headers`` carries at least ``signature-input``, ``signature``,
-    ``content-digest``, ``authorization``, and ``signature-agent``. Lowercased keys
-    are the convention, but every name is matched case-insensitively and repeated
-    spellings of one name are JOINED with ", " before the base is rebuilt — the wire
-    has one field per name however a mapping spells it, and the oracle reads it that
-    way. A covered header the request does not carry at all is refused.
-    Keys resolve ONLY through ``resolver`` (SDK owns no keys); replay state lives
-    ONLY in ``replay_store`` when supplied (omit it to disable replay detection);
-    time is ``now`` (unix seconds — SDK owns no wall clock). ``max_signature_age``
-    (seconds) clamps the declared lifetime (``expires - created``); 0 / omitted
-    means unbounded, inclusive at the bound (mirrors Go VerifyOptions.MaxSignatureAge).
-    The verdict's reason mirrors the Go connectserver taxonomy: ``"signature"`` (the
-    default — authenticity/freshness/key/covered-set/lifetime failures) or ``"replay"``.
+    ``content-digest``, ``authorization`` and ``signature-agent``. Lowercased keys are
+    the convention, but every name is matched case-insensitively and repeated spellings
+    of one name are JOINED with ", " before the base is rebuilt — the wire has one field
+    per name however a mapping spells it, and the oracle reads it that way. A covered
+    header the request does not carry at all is refused.
+
+    The first signature in header order is verified, as Go ``VerifyRequestResolved``
+    does; the others still count toward the rule that the legacy String Signature-Agent
+    is accepted only on a request carrying one signature. Its keyid resolves ONLY
+    through ``resolver``, in the directory its covered Signature-Agent member names;
+    replay state lives ONLY in ``replay_store`` when supplied (omit it to disable replay
+    detection); time is ``now`` (unix seconds). ``max_signature_age`` (seconds) clamps
+    the declared lifetime (``expires - created``); 0 / omitted means unbounded,
+    inclusive at the bound.
+
+    The verdict's reason is ``"signature"`` (every authenticity, freshness, key,
+    covered-set, form and lifetime failure) or ``"replay"``. A valid verdict carries
+    the signer's directory in ``signature_agent``.
     """
-    # Every read goes through the case-insensitive, duplicate-joining fold — see
-    # _header for why both properties are load-bearing. These three fail closed on
-    # their own: an absent one folds to "" and the parse or the digest comparison
-    # then rejects, landing on the same reason the oracle does.
-    signature_input = _header(headers, "signature-input") or ""
-    signature = _header(headers, "signature") or ""
-
-    # A covered header the request does not CARRY cannot be reconstructed, and "" is a
-    # value the signer may legitimately have bound — so absent is refused rather than
-    # defaulted. Derived from the covered set; see _request_fields.
-    fields = _request_fields(method=method, url=url, body=body, headers=headers)
-    if fields is None:
-        return _reject(_REASON_SIGNATURE)
-    authorization = fields.authorization
-    signature_agent = fields.signature_agent
-
-    parsed = _parse_signature_input(signature_input)
-    if parsed is None or parsed.keyid is None:
-        return _reject(_REASON_SIGNATURE)
-
-    # Required covered-set enforcement (Go enforceRequiredComponents): every one of
-    # the five FORA components must be declared, or a signer omitting a bound field
-    # would slip through. Any gap is the default "signature" reason.
-    if not parsed.covered >= _REQUIRED_COVERED:
-        return _reject(_REASON_SIGNATURE)
-
-    # Entitlement coverage (Go enforceEntitlementCoverage): if the request carries
-    # the entitlement-token header, the signature MUST commit to it (its lowercase
-    # covered-component form) — else an unsigned entitlement token could be slipped
-    # under a valid signature. Absent header → no constraint. Format-neutral (JWT /
-    # opaque). Read the header case-insensitively.
-    if _has_entitlement_header(headers) and _ENTITLEMENT_HEADER not in parsed.covered:
-        return _reject(_REASON_SIGNATURE)
-
-    # Lifetime clamp (mirrors Go enforceCreatedExpires MaxSignatureAge): reject
-    # a declared window longer than allowed — a far-future expires is a wide replay
-    # window. 0 = unbounded; inclusive at the bound (== max_signature_age passes).
-    if (
-        max_signature_age > 0
-        and parsed.created is not None
-        and parsed.expires is not None
-        and parsed.expires - parsed.created > max_signature_age
-    ):
-        return _reject(_REASON_SIGNATURE)
-
-    pub = resolver.resolve(parsed.keyid)
-    if pub is None:
-        # An unresolvable / unknown key is an authentication failure — the Go
-        # default branch (ErrUnknownKey carries no distinct sentinel).
-        return _reject(_REASON_SIGNATURE)
-
-    verdict = verify_request(
-        method=method,
-        url=url,
-        body=body,
-        signature_input=signature_input,
-        signature=signature,
-        content_digest=fields.digest_header,
-        authorization=authorization,
-        pubkey=pub,
-        now=now,
-        signature_agent=signature_agent,
-    )
-    if not verdict.valid:
-        # Collapse the fine-grained primitive reasons (expired / future_created /
-        # digest_mismatch / signature_verify / …) into the connectserver default
-        # token; the fine-grained string is preserved for logs only by the caller.
-        return _reject(_REASON_SIGNATURE)
-
+    request = Request(method=method, url=url, body=body, headers=headers)
+    try:
+        verified = verify_first(
+            request, _resolve_through(resolver), now=now, max_signature_age=max_signature_age
+        )
+    except (SignatureCheckError, SignatureProfileError) as exc:
+        return VerifiedRequest(
+            valid=False, reason=_REASON_SIGNATURE, accept_signature=accept_signature_for(exc)
+        )
     if replay_store is not None:
-        nonce = _replay_nonce(parsed.keyid, signature)
-        # Two-phase (read-only Seen, then SeenOrAdd) mirrors connectserver.verify so
-        # a part-way rejection never burns the nonce — for single-sig the phases are
-        # over the one signature.
-        if replay_store.seen_nonce(nonce):
-            return _reject(_REASON_REPLAY)
-        if replay_store.seen_or_add(nonce, replay_ttl_seconds):
-            return _reject(_REASON_REPLAY)
-
-    return VerifiedRequest(valid=True)
-
-
-# --- MULTISIG forwarding-chain server-verify ----------------------------------
-#
-# The Python sibling of Go helpers.VerifyMultisigRequest[Resolved]. Reject
-# precedence is parity-critical: hop_budget -> broken_chain -> signature. NO replay
-# — the Go helpers oracle performs none; the per-hop verify core below
-# mirrors verify_request's checks MINUS the two-phase ReplayStore path, and the
-# chain link resolves to the LIVE predecessor bytes so a stripped / reordered /
-# tampered predecessor is rejected.
+        nonce = _replay_nonce(verified.keyid, verified.signature)
+        # Two-phase (read-only seen, then seen_or_add) mirrors connectserver.verify so a
+        # part-way rejection never burns the nonce.
+        if replay_store.seen_nonce(nonce) or replay_store.seen_or_add(nonce, replay_ttl_seconds):
+            return VerifiedRequest(valid=False, reason=_REASON_REPLAY)
+    return VerifiedRequest(valid=True, signature_agent=verified.signature_agent)
 
 
 @dataclass(frozen=True)
 class MultisigVerdict:
-    """The multisig verify verdict: valid with the verified keyids in chain order,
-    or invalid with the classified reason. Never raised — always returned."""
+    """The multi-signature verify verdict, never raised — always returned.
+
+    Valid: the verified keyids and the key directory each one was resolved in, both in
+    header order. Invalid: the classified reason, and ``accept_signature`` when the
+    refusal is one the profile answers with Accept-Signature.
+    """
 
     valid: bool
     reason: RejectReason | None = None
     keyids: tuple[str, ...] = ()
-
-
-@dataclass(frozen=True)
-class _RequestFields:
-    """The request-level covered fields shared across every hop of a request."""
-
-    method: str
-    url: str
-    digest_header: str
-    authorization: str
-    signature_agent: str
-    body: bytes
-
-
-#: The covered names that are HEADER fields. Derived from _REQUIRED_COVERED rather
-#: than restated, so a name added to the covered set is absent-checked the day it is
-#: added: the two "@" components are reconstructed from the request line, every other
-#: covered name has to arrive as a field. Sorted for a deterministic check order.
-_COVERED_HEADER_NAMES: tuple[str, ...] = tuple(
-    sorted(name for name in _REQUIRED_COVERED if not name.startswith("@"))
-)
-
-
-def _request_fields(
-    *, method: str, url: str, body: bytes, headers: dict[str, str]
-) -> _RequestFields | None:
-    """Assemble the request-level covered fields, or None when the request does not
-    CARRY one of the headers its signature covers.
-
-    The absent-header rule lives here rather than at each entry point, because it is a
-    property of the covered SET and not of any one face: every name in
-    ``_COVERED_HEADER_NAMES`` must arrive, and an absent one cannot be defaulted to ""
-    — that would invent a value the signer may never have bound. The oracle draws the
-    same line one layer down, in its component resolver, for any covered name at all.
-
-    Callers keep their own reject reason and their own place in the gate sequence: the
-    single-sig and multisig faces refuse at different points on purpose, and the corpus
-    pins that difference.
-
-    Note the base builder still renders a fixed component list, so a name added to the
-    covered set is guarded here but does not yet reach the signature base.
-    """
-    covered: dict[str, str] = {}
-    for name in _COVERED_HEADER_NAMES:
-        value = _header(headers, name)
-        if value is None:
-            return None
-        covered[name] = value
-    return _RequestFields(
-        method=method,
-        url=url,
-        digest_header=covered["content-digest"],
-        authorization=covered["authorization"],
-        signature_agent=covered["signature-agent"],
-        body=body,
-    )
-
-
-def _enforce_chain(members: list[MultisigMember]) -> bool:
-    """The STRUCTURAL forwarding-chain gate (Go enforceSignatureChain): labels are
-    exactly sig1..sigN contiguous in header order, sig1 carries no "signature"
-    component, and every sigK (K>1) covers exactly one "signature";key="sig(K-1)"."""
-    for i, m in enumerate(members):
-        if m.label != f"sig{i + 1}":
-            return False
-        links = [c for c in m.covered if c.name == "signature"]
-        if i == 0:
-            if links:
-                return False
-            continue
-        if len(links) != 1 or links[0].chain_key != f"sig{i}":
-            return False
-    return True
-
-
-def _verify_member(
-    fields: _RequestFields,
-    member: MultisigMember,
-    sig_bytes: bytes | None,
-    resolver: KeyResolver,
-    now: int,
-    chain_link: tuple[str, str] | None,
-    headers: dict[str, str],
-    max_age: int = 0,
-) -> bool:
-    """The per-hop verify core shared by the multisig loop (mirrors Go
-    verifySingleSignature MINUS replay): alg + required covered set + entitlement
-    coverage + window (with the optional MaxSignatureAge lifetime clamp) +
-    content-digest + key resolution + Ed25519 over the reconstructed base (which
-    inserts the forwarding-chain line for a chained hop)."""
-    if member.keyid is None:
-        return False
-    if member.alg is None or member.alg.lower() != "ed25519":
-        return False
-    if not member.covered_names >= _REQUIRED_COVERED:
-        return False
-    # Entitlement coverage per hop (mirrors Go verifySingleSignature's
-    # enforceEntitlementCoverage): if the relayed request carries the entitlement
-    # header, THIS member's covered set must include it, else an unsigned
-    # entitlement token could be slipped under an otherwise-valid hop signature.
-    if _has_entitlement_header(headers) and _ENTITLEMENT_HEADER not in member.covered_names:
-        return False
-    if member.created is None or member.expires is None:
-        return False
-    if member.expires < now or member.created > now + _MAX_FUTURE_SKEW_SEC:
-        return False
-    # Lifetime clamp (mirrors Go enforceCreatedExpires MaxSignatureAge): a
-    # signer-chosen far-future expires is a wide replay window. Reject a window
-    # longer than allowed. 0 = unbounded; inclusive at the bound (== max_age passes).
-    if max_age > 0 and member.expires - member.created > max_age:
-        return False
-    if fields.digest_header.strip() != content_digest(fields.body):
-        return False
-    if sig_bytes is None:
-        return False
-    pub = resolver.resolve(member.keyid)
-    if pub is None:
-        return False
-    base = _signature_base(
-        method=fields.method,
-        url=fields.url,
-        digest_header=fields.digest_header,
-        authorization=fields.authorization,
-        signature_agent=fields.signature_agent,
-        sig_params=member.raw_inner,
-        chain_link=chain_link,
-    )
-    try:
-        Ed25519PublicKey.from_public_bytes(pub).verify(sig_bytes, base.encode())
-    except (InvalidSignature, ValueError):
-        return False
-    return True
-
-
-def _chain_link_for(i: int, sig_map: dict[str, bytes]) -> tuple[str, str] | None:
-    """The forwarding-chain base line for hop i (>0): the token
-    ``"signature";key="sig(i)"`` and its value ``:<std-base64(live predecessor
-    bytes)>:``, or None when the predecessor bytes are absent (a signature failure)."""
-    prev_label = f"sig{i}"
-    prev_bytes = sig_map.get(prev_label)
-    if prev_bytes is None:
-        return None
-    return f'"signature";key="{prev_label}"', ":" + base64.b64encode(prev_bytes).decode() + ":"
+    directories: tuple[str, ...] = ()
+    accept_signature: str | None = None
 
 
 def verify_multisig_request_server(
@@ -556,68 +159,47 @@ def verify_multisig_request_server(
     method: str,
     url: str,
     body: bytes,
-    headers: dict[str, str],
+    headers: Mapping[str, str],
     resolver: KeyResolver,
     now: int,
     max_signatures: int = 0,
     max_signature_age: int = 0,
 ) -> MultisigVerdict:
-    """Verify an inbound MULTISIG forwarding-chain FORA request; return a
-    reason-tagged verdict carrying the verified keyids in chain order.
-
-    Enforces the hop budget FIRST (``hop_budget``), then the structural chain
-    (``broken_chain``), then every hop's signature (``signature``) — in that
-    precedence (mirrors Go VerifyMultisigRequest). ``max_signatures`` 0 / omitted
-    means unbounded. ``max_signature_age`` (seconds) clamps each hop's declared
-    lifetime (``expires - created``); 0 / omitted means unbounded, inclusive at the
-    bound (mirrors Go VerifyOptions.MaxSignatureAge). Keys resolve ONLY through
-    ``resolver``; time is ``now``.
-
-    ``headers`` carries at least ``signature-input``, ``signature``,
-    ``content-digest``, ``authorization`` and ``signature-agent``. Lowercased keys
-    are the convention, but every name is matched case-insensitively and repeated
-    spellings of one name are JOINED with ", " before the base is rebuilt — the wire
-    has one field per name however a mapping spells it, and the oracle reads it that
-    way. A covered header the request does not carry at all is refused.
+    """Verify EVERY signature on an inbound FORA request; return a reason-tagged verdict.
+
+    The hop budget comes FIRST (``hop_budget``; every signature counts, 0 / omitted
+    means unbounded), then the completeness of every coverage of an earlier signature
+    (``broken_chain``: a signature covering ``"signature";key=X`` must cover
+    ``"signature-input";key=X`` and every component X lists, and X must appear earlier),
+    then each signature on its own (``signature``) — the precedence of Go
+    ``VerifyMultisigRequest``. Each keyid resolves ONLY through ``resolver``, in the
+    directory that signature's own covered Signature-Agent member names; a signature
+    covering several members follows the one keyed to its label. Labels carry no
+    meaning. ``max_signature_age`` clamps each signature's lifetime as in
+    :func:`verify_request_server`. No replay check: the Go helpers oracle performs none.
+
+    ``headers`` is read as for :func:`verify_request_server`.
     """
-    signature_input = _header(headers, "signature-input") or ""
-    signature = _header(headers, "signature") or ""
-    members = parse_multisig_signature_input([signature_input])
-    if not members:
-        return MultisigVerdict(False, _REASON_SIGNATURE)
-    if max_signatures > 0 and len(members) > max_signatures:
-        return MultisigVerdict(False, _REASON_HOP_BUDGET)
-    if not _enforce_chain(members):
-        return MultisigVerdict(False, _REASON_BROKEN_CHAIN)
-
-    # A covered header the request never carried is refused here and NOT sooner: the
-    # oracle finds it while rebuilding a hop's base, which happens after the budget
-    # and the chain are enforced. Checking earlier would answer "signature" to an
-    # over-budget or reordered chain that the oracle answers "hop_budget" and
-    # "broken_chain" for — the corpus pins all three.
-    fields = _request_fields(method=method, url=url, body=body, headers=headers)
-    if fields is None:
-        return MultisigVerdict(False, _REASON_SIGNATURE)
-
-    sig_map = signature_bytes_by_label(signature)
-    keyids: list[str] = []
-    for i, member in enumerate(members):
-        chain_link = _chain_link_for(i, sig_map) if i > 0 else None
-        if i > 0 and chain_link is None:
-            return MultisigVerdict(False, _REASON_SIGNATURE)
-        keyid = member.keyid
-        if keyid is None:
-            return MultisigVerdict(False, _REASON_SIGNATURE)
-        if not _verify_member(
-            fields,
-            member,
-            sig_map.get(member.label),
-            resolver,
-            now,
-            chain_link,
-            headers,
-            max_signature_age,
-        ):
-            return MultisigVerdict(False, _REASON_SIGNATURE)
-        keyids.append(keyid)
-    return MultisigVerdict(True, None, tuple(keyids))
+    request = Request(method=method, url=url, body=body, headers=headers)
+    try:
+        verified = verify_all(
+            request,
+            _resolve_through(resolver),
+            now=now,
+            max_signatures=max_signatures,
+            max_signature_age=max_signature_age,
+        )
+    except SignatureCheckError as exc:
+        if exc.reason == _REASON_HOP_BUDGET:
+            return MultisigVerdict(False, _REASON_HOP_BUDGET)
+        if exc.reason == _REASON_BROKEN_CHAIN:
+            return MultisigVerdict(False, _REASON_BROKEN_CHAIN)
+        return MultisigVerdict(False, _REASON_SIGNATURE, accept_signature=accept_signature_for(exc))
+    except SignatureProfileError as exc:
+        return MultisigVerdict(False, _REASON_SIGNATURE, accept_signature=accept_signature_for(exc))
+    return MultisigVerdict(
+        True,
+        None,
+        tuple(v.keyid for v in verified),
+        tuple(v.signature_agent for v in verified),
+    )
diff --git a/sdk/python/fora_sdk/sfv.py b/sdk/python/fora_sdk/sfv.py
new file mode 100644
index 00000000..983cb298
--- /dev/null
+++ b/sdk/python/fora_sdk/sfv.py
@@ -0,0 +1,379 @@
+"""RFC 8941 structured field values: the parser and serializer the signature code reads
+Signature-Input, Signature and Signature-Agent with.
+
+The Go oracle delegates this to dunglas/httpsfv; Python ships no structured-field
+library in its dependency set, so the subset the Web Bot Auth profile meets is written
+out here once, against the RFC's own parsing algorithms (§4.2) and serialization
+algorithms (§4.1): Dictionaries, Items, Inner Lists and Parameters, over Integers,
+Decimals, Strings, Tokens, Byte Sequences and Booleans. Lists are not parsed: no field
+this SDK reads is a List.
+
+A field the RFC says to fail on raises :class:`StructuredFieldError` — never a partial
+result. Repeated keys follow the RFC's last-wins rule, keeping the first position,
+which a Python ``dict`` does by itself. A Token is its own type rather than a ``str``,
+because the profile treats the two differently: the legacy Signature-Agent value is a
+String, and the bare v1.0.8 value, which parses as a Token, is refused.
+"""
+
+from __future__ import annotations
+
+import base64
+import binascii
+from dataclasses import dataclass, field
+from decimal import ROUND_HALF_EVEN, Decimal
+from typing import TypeAlias
+
+
+class StructuredFieldError(ValueError):
+    """A field value that is not a valid RFC 8941 structured field, or a value that
+    cannot be serialized as one."""
+
+
+@dataclass(frozen=True)
+class Token:
+    """An RFC 8941 Token (§3.3.4): an unquoted identifier such as ``directory``."""
+
+    value: str
+
+
+#: A bare item (RFC 8941 §3.3). ``bool`` is listed first on purpose: it is a subclass
+#: of ``int`` in Python, so every type test checks it before ``int``.
+BareItem: TypeAlias = bool | int | Decimal | str | Token | bytes
+#: Parameters (§3.1.2), in the order they appeared.
+Params: TypeAlias = dict[str, BareItem]
+
+
+@dataclass(frozen=True)
+class Item:
+    """An Item (§3.3): a bare item and its parameters."""
+
+    value: BareItem
+    params: Params = field(default_factory=dict)
+
+
+@dataclass(frozen=True)
+class InnerList:
+    """An Inner List (§3.1.1): items in order, and the list's own parameters."""
+
+    items: tuple[Item, ...]
+    params: Params = field(default_factory=dict)
+
+
+#: A Dictionary member value (§3.2).
+Member: TypeAlias = Item | InnerList
+
+_MAX_INTEGER = 999_999_999_999_999
+_MAX_INTEGER_DIGITS = 15
+_MAX_DECIMAL_INT_DIGITS = 12
+_MAX_DECIMAL_FRACTION_DIGITS = 3
+_MAX_DECIMAL_DIGITS = 16
+_PRINTABLE_LOW = 0x20
+_PRINTABLE_HIGH = 0x7E
+_LCALPHA = frozenset("abcdefghijklmnopqrstuvwxyz")
+_DIGIT = frozenset("0123456789")
+_ALPHA = _LCALPHA | frozenset("ABCDEFGHIJKLMNOPQRSTUVWXYZ")
+_KEY_REST = _LCALPHA | _DIGIT | frozenset("_-.*")
+_TCHAR = _ALPHA | _DIGIT | frozenset("!#$%&'*+-.^_`|~")
+_TOKEN_REST = _TCHAR | frozenset(":/")
+_BASE64 = _ALPHA | _DIGIT | frozenset("+/=")
+
+
+class _Reader:
+    """The input string and the position parsing has reached in it."""
+
+    def __init__(self, text: str) -> None:
+        self.text = text
+        self.pos = 0
+
+    def peek(self) -> str:
+        return self.text[self.pos] if self.pos < len(self.text) else ""
+
+    def take(self) -> str:
+        c = self.peek()
+        self.pos += 1
+        return c
+
+    def done(self) -> bool:
+        return self.pos >= len(self.text)
+
+    def skip(self, chars: str) -> None:
+        while not self.done() and self.text[self.pos] in chars:
+            self.pos += 1
+
+    def fail(self, what: str) -> StructuredFieldError:
+        return StructuredFieldError(f"{what} at offset {self.pos} of {self.text!r}")
+
+
+def join_field_lines(lines: list[str]) -> str:
+    """Every field line of one field joined the way RFC 8941 §4.2 combines them."""
+    return ", ".join(lines)
+
+
+def parse_dictionary(value: str | list[str]) -> dict[str, Member]:
+    """Parse a Dictionary field (§4.2.2). A list is the field's lines, joined first."""
+    r = _Reader(join_field_lines(value) if isinstance(value, list) else value)
+    r.skip(" ")
+    out: dict[str, Member] = {}
+    while not r.done():
+        key = _parse_key(r)
+        if r.peek() == "=":
+            r.take()
+            out[key] = _parse_item_or_inner_list(r)
+        else:
+            out[key] = Item(True, _parse_parameters(r))
+        r.skip(" \t")
+        if r.done():
+            break
+        if r.take() != ",":
+            raise r.fail("expected ',' between dictionary members")
+        r.skip(" \t")
+        if r.done():
+            raise r.fail("trailing ',' after the last dictionary member")
+    return out
+
+
+def parse_item(value: str | list[str]) -> Item:
+    """Parse an Item field (§4.2.3). A list is the field's lines, joined first."""
+    r = _Reader(join_field_lines(value) if isinstance(value, list) else value)
+    r.skip(" ")
+    item = _parse_item(r)
+    r.skip(" ")
+    if not r.done():
+        raise r.fail("unexpected characters after the item")
+    return item
+
+
+def _parse_item_or_inner_list(r: _Reader) -> Member:
+    if r.peek() == "(":
+        return _parse_inner_list(r)
+    return _parse_item(r)
+
+
+def _parse_inner_list(r: _Reader) -> InnerList:
+    r.take()  # the opening "("
+    items: list[Item] = []
+    while not r.done():
+        r.skip(" ")
+        if r.peek() == ")":
+            r.take()
+            return InnerList(tuple(items), _parse_parameters(r))
+        items.append(_parse_item(r))
+        if r.peek() not in (" ", ")"):
+            raise r.fail("expected ' ' or ')' in an inner list")
+    raise r.fail("unterminated inner list")
+
+
+def _parse_item(r: _Reader) -> Item:
+    value = _parse_bare_item(r)
+    return Item(value, _parse_parameters(r))
+
+
+def _parse_bare_item(r: _Reader) -> BareItem:
+    c = r.peek()
+    if c == "-" or c in _DIGIT:
+        return _parse_number(r)
+    if c == '"':
+        return _parse_string(r)
+    if c == "*" or c in _ALPHA:
+        return _parse_token(r)
+    if c == ":":
+        return _parse_byte_sequence(r)
+    if c == "?":
+        return _parse_boolean(r)
+    raise r.fail("no bare item")
+
+
+def _parse_parameters(r: _Reader) -> Params:
+    params: Params = {}
+    while r.peek() == ";":
+        r.take()
+        r.skip(" ")
+        key = _parse_key(r)
+        value: BareItem = True
+        if r.peek() == "=":
+            r.take()
+            value = _parse_bare_item(r)
+        params[key] = value
+    return params
+
+
+def _parse_key(r: _Reader) -> str:
+    start = r.pos
+    c = r.peek()
+    if c != "*" and c not in _LCALPHA:
+        raise r.fail("a key must start with a lowercase letter or '*'")
+    r.take()
+    while r.peek() != "" and r.peek() in _KEY_REST:
+        r.take()
+    return r.text[start : r.pos]
+
+
+def _parse_number(r: _Reader) -> int | Decimal:
+    start = r.pos
+    sign = 1
+    if r.peek() == "-":
+        r.take()
+        sign = -1
+    if r.peek() == "" or r.peek() not in _DIGIT:
+        raise r.fail("a number needs a digit")
+    digits_start = r.pos
+    is_decimal = False
+    while r.peek() != "":
+        c = r.peek()
+        if c in _DIGIT:
+            r.take()
+        elif c == "." and not is_decimal:
+            if r.pos - digits_start > _MAX_DECIMAL_INT_DIGITS:
+                raise r.fail("a decimal's integer part is too long")
+            is_decimal = True
+            r.take()
+        else:
+            break
+        if not is_decimal and r.pos - digits_start > _MAX_INTEGER_DIGITS:
+            raise r.fail("an integer is too long")
+        if is_decimal and r.pos - digits_start > _MAX_DECIMAL_DIGITS:
+            raise r.fail("a decimal is too long")
+    text = r.text[digits_start : r.pos]
+    if not is_decimal:
+        return sign * int(text)
+    fraction = text.split(".", 1)[1]
+    if not fraction or len(fraction) > _MAX_DECIMAL_FRACTION_DIGITS:
+        spelled = r.text[start : r.pos]
+        raise StructuredFieldError(f"a decimal needs one to three fraction digits: {spelled!r}")
+    return sign * Decimal(text)
+
+
+def _parse_string(r: _Reader) -> str:
+    r.take()  # the opening quote
+    out: list[str] = []
+    while not r.done():
+        c = r.take()
+        if c == "\\":
+            nxt = r.take()
+            if nxt not in ('"', "\\"):
+                raise r.fail("a string escapes only '\"' and '\\'")
+            out.append(nxt)
+        elif c == '"':
+            return "".join(out)
+        elif not _PRINTABLE_LOW <= ord(c) <= _PRINTABLE_HIGH:
+            raise r.fail("a string carries a character outside printable ASCII")
+        else:
+            out.append(c)
+    raise r.fail("unterminated string")
+
+
+def _parse_token(r: _Reader) -> Token:
+    start = r.pos
+    r.take()
+    while r.peek() != "" and r.peek() in _TOKEN_REST:
+        r.take()
+    return Token(r.text[start : r.pos])
+
+
+def _parse_byte_sequence(r: _Reader) -> bytes:
+    r.take()  # the opening colon
+    start = r.pos
+    while r.peek() != "" and r.peek() != ":":
+        if r.peek() not in _BASE64:
+            raise r.fail("a byte sequence carries a character outside base64")
+        r.take()
+    if r.done():
+        raise r.fail("unterminated byte sequence")
+    encoded = r.text[start : r.pos]
+    r.take()  # the closing colon
+    try:
+        return base64.b64decode(encoded, validate=True)
+    except (binascii.Error, ValueError) as exc:
+        raise StructuredFieldError(f"a byte sequence is not base64: {encoded!r}") from exc
+
+
+def _parse_boolean(r: _Reader) -> bool:
+    r.take()  # the "?"
+    c = r.take()
+    if c == "1":
+        return True
+    if c == "0":
+        return False
+    raise r.fail("a boolean is ?0 or ?1")
+
+
+# --- serialization (§4.1) ----------------------------------------------------------
+
+
+def serialize_member(member: Member) -> str:
+    """Serialize a Dictionary member value: an Item or an Inner List."""
+    if isinstance(member, InnerList):
+        return serialize_inner_list(member)
+    return serialize_item(member)
+
+
+def serialize_item(item: Item) -> str:
+    """Serialize an Item (§4.1.3)."""
+    return serialize_bare_item(item.value) + serialize_params(item.params)
+
+
+def serialize_inner_list(inner: InnerList) -> str:
+    """Serialize an Inner List (§4.1.1.1)."""
+    items = " ".join(serialize_item(i) for i in inner.items)
+    return f"({items}){serialize_params(inner.params)}"
+
+
+def serialize_params(params: Params) -> str:
+    """Serialize Parameters (§4.1.1.2). A Boolean true is written as the bare key."""
+    out: list[str] = []
+    for key, value in params.items():
+        out.append(";" + serialize_key(key))
+        if value is not True:
+            out.append("=" + serialize_bare_item(value))
+    return "".join(out)
+
+
+def serialize_key(key: str) -> str:
+    """Serialize a key (§4.1.1.3), refusing one that is not a valid key."""
+    if not key or (key[0] != "*" and key[0] not in _LCALPHA) or not set(key) <= _KEY_REST:
+        raise StructuredFieldError(f"not a structured-field key: {key!r}")
+    return key
+
+
+def serialize_bare_item(value: BareItem) -> str:
+    """Serialize a bare item (§4.1.3.1)."""
+    if isinstance(value, bool):
+        return "?1" if value else "?0"
+    if isinstance(value, int):
+        if not -_MAX_INTEGER <= value <= _MAX_INTEGER:
+            raise StructuredFieldError(f"integer out of range: {value}")
+        return str(value)
+    if isinstance(value, Decimal):
+        return _serialize_decimal(value)
+    if isinstance(value, Token):
+        return _serialize_token(value)
+    if isinstance(value, bytes):
+        return ":" + base64.b64encode(value).decode("ascii") + ":"
+    return _serialize_string(value)
+
+
+def _serialize_decimal(value: Decimal) -> str:
+    rounded = value.quantize(Decimal("0.001"), rounding=ROUND_HALF_EVEN)
+    if abs(rounded) >= Decimal(10) ** _MAX_DECIMAL_INT_DIGITS:
+        raise StructuredFieldError(f"decimal out of range: {value}")
+    text = f"{rounded:f}".rstrip("0")
+    return text + "0" if text.endswith(".") else text
+
+
+def _serialize_string(value: str) -> str:
+    out = ['"']
+    for c in value:
+        if not _PRINTABLE_LOW <= ord(c) <= _PRINTABLE_HIGH:
+            raise StructuredFieldError(f"a string cannot carry {c!r}")
+        if c in ('"', "\\"):
+            out.append("\\")
+        out.append(c)
+    out.append('"')
+    return "".join(out)
+
+
+def _serialize_token(token: Token) -> str:
+    v = token.value
+    if not v or (v[0] != "*" and v[0] not in _ALPHA) or any(c not in _TOKEN_REST for c in v):
+        raise StructuredFieldError(f"not a token: {v!r}")
+    return v
diff --git a/sdk/python/fora_sdk/signing_transport.py b/sdk/python/fora_sdk/signing_transport.py
index 72d3a6c7..cd92edee 100644
--- a/sdk/python/fora_sdk/signing_transport.py
+++ b/sdk/python/fora_sdk/signing_transport.py
@@ -1,44 +1,45 @@
 """sdk/python outbound-sign face — TRANSPORT-NEUTRAL, the client analogue of the
-Go RoundTripper sign face.
-
-``SigningTransport.sign_outbound`` assembles the RFC 9421 headers for one outbound
-request (RFC 9530 Content-Digest over the EXACT body bytes) via the shipped L1
-``httpsig.sign_request`` byte oracle; it adds NO new crypto and performs NO IO. It
-is NOT an HTTP client binding: it imports no httpx and wraps no transport — the
-consumer (e.g. the app MCP shim, src/mcp) owns the actual httpx transport and
-applies the returned headers itself. A returned offer is verified through the core
-Verifier (in the app, not here).
+Go RoundTripper sign face (sdk/go/core/transport.go).
+
+``SigningTransport.sign_outbound`` assembles the Web Bot Auth headers for one outbound
+request (RFC 9530 Content-Digest over the EXACT body bytes, the signer's Signature-Agent
+member, Signature-Input and Signature) via the shipped L1 ``httpsig`` byte oracle; it
+adds NO new crypto and performs NO IO. It is NOT an HTTP client binding: it imports no
+httpx and wraps no transport — the consumer owns the actual transport and applies the
+returned headers itself.
 """
 
 from __future__ import annotations
 
 import secrets
 import time
-from dataclasses import dataclass
-from typing import TYPE_CHECKING
+from collections.abc import Callable, Mapping
+from dataclasses import dataclass, field
+from typing import TypeAlias
 
 from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 
+from fora_sdk._sigbase import joined_header
 from fora_sdk.b64 import b64url_nopad
 from fora_sdk.core import sign_offer_acceptance_jcs, sign_request_acceptance_jcs
-from fora_sdk.httpsig import sign_request
-from fora_sdk.pop import sign_agent_binding
+from fora_sdk.httpsig import SignedRequest, append_signature, sign_request
+from fora_sdk.pop import AgentBinding, sign_agent_binding
 from fora_sdk.thumbprint import thumbprint
+from fora_sdk.wba import MAX_SIGNATURE_LIFETIME
 from fora_sdk.window import Window, clock_window
 
-if TYPE_CHECKING:
-    from collections.abc import Callable
+# Default freshness window (seconds) for the created/expires params when the caller does
+# not inject one: the longest a Web Bot Auth request signature may live. A longer
+# injected window is refused at signing.
+_DEFAULT_TTL_SEC = MAX_SIGNATURE_LIFETIME
 
-# Default proof window (seconds) for the created/expires params when the caller does
-# not inject an explicit window.
-_DEFAULT_TTL_SEC = 600
-
-# Entropy per signature nonce (128 bits, 22 base64url chars).
-_NONCE_BYTES = 16
+# Entropy per signature nonce: 64 bytes, 86 base64url characters. 64 bytes is the length
+# the Web Bot Auth test vectors use, and widely deployed verifiers refuse any other.
+_NONCE_BYTES = 64
 
 
 def _new_nonce() -> str:
-    """A fresh RFC 9421 nonce: 16 random bytes, base64url without padding.
+    """A fresh RFC 9421 nonce: 64 random bytes, base64url without padding.
 
     ``secrets`` reads the OS CSPRNG and raises when it cannot; the error
     propagates, so nothing is signed and nothing is sent without a nonce.
@@ -46,9 +47,28 @@ def _new_nonce() -> str:
     return b64url_nopad(secrets.token_bytes(_NONCE_BYTES))
 
 
+@dataclass(frozen=True)
+class OutboundRequest:
+    """The request a :data:`SignerSource` is asked to name a signer for, before it is
+    signed: the request line, the exact body and the headers it already carries."""
+
+    method: str
+    url: str
+    body: bytes
+    headers: Mapping[str, str] = field(default_factory=dict)
+
+
+#: Resolves the signer for one request, for a service that signs as many identities —
+#: an identity service signing as the calling agent, a console signing as the calling
+#: publisher. Returns ``(signer_seed, keyid, signature_agent)``: the 32-byte Ed25519
+#: seed, the RFC 9421 keyid, and the signer's key-directory origin. The Python peer of
+#: Go ``core.SignerSource``. An exception it raises means nothing is signed or sent.
+SignerSource: TypeAlias = Callable[[OutboundRequest], tuple[bytes, str, str]]
+
+
 @dataclass(frozen=True)
 class SignedOutbound:
-    """The signed outbound request: the RFC 9421 headers to attach to the httpx send."""
+    """The signed outbound request: the RFC 9421 headers to attach to the send."""
 
     method: str
     url: str
@@ -59,66 +79,86 @@ class SignedOutbound:
 class SigningTransport:
     """Signs outbound requests via the core sign seam (RFC 9421 over exact body bytes).
 
-    The signer seed + keyid are injected; the clock is injectable for determinism.
-    ``sign_outbound`` returns the request plus EVERY covered header at the value that
-    entered the signature base — Content-Digest / Signature-Input / Signature, and
-    Authorization / Signature-Agent whose values may be empty. The seam MCP wires into
-    its httpx transport.
+    The signer is either fixed — ``signer_seed``, ``keyid`` and ``signature_agent`` — or
+    resolved per request by ``signer_source``, which overrides the fixed one. The clock
+    is injectable for determinism. ``sign_outbound`` returns the request plus EVERY
+    covered header at the value that entered the signature base: Content-Digest,
+    Signature-Agent, Signature-Input, Signature and an Authorization whose value may be
+    empty.
     """
 
     def __init__(
         self,
         *,
-        signer_seed: bytes,
-        keyid: str,
+        signer_seed: bytes | None = None,
+        keyid: str = "",
         now: Callable[[], float] | None = None,
         ttl_sec: int = _DEFAULT_TTL_SEC,
         signature_agent: str = "",
         window: Window | None = None,
+        signer_source: SignerSource | None = None,
+        append_only: bool = False,
+        cover_previous: bool = False,
     ) -> None:
-        """``signature_agent`` is the signer's own WBA directory URL.
-
-        Signature-Agent is a COVERED wire component: the sign seam always binds
-        its value (empty included) into the signature base, and the header is
-        always attached carrying that same value — empty included. Binding it
-        without sending it is not binding it, because the verifier rebuilds the
-        base from the request it received and refuses one whose covered name has
-        nothing on the wire under it. When non-empty it is also how the verifier
-        resolves the signer's keys against that directory.
-
-        Always-stamp is the client shape — Python has no relay path, so the Go
-        relay's set-if-absent guard (core.WithSignatureAgent) has no analogue
-        here.
+        """Build a signing transport.
+
+        ``signature_agent`` is the signer's key-directory origin, such as
+        ``"https://agent.example"``, written as the Signature-Agent member every
+        signature covers. It is required unless ``signer_source`` supplies it per
+        request: signing with none raises
+        :class:`~fora_sdk.wba.SignatureAgentRequiredError`, and a value that is not an
+        https origin :class:`~fora_sdk.wba.SignatureAgentNotOriginError`, before
+        anything is sent.
+
+        ``append_only`` routes every request through ``append_signature`` (Go
+        ``WithAppendSigner``, TS ``appendOnly``): a fresh request gets ``sig1``, and a
+        request already carrying signatures gets one more, with its own label and
+        member, the earlier ones untouched. Without it, a request whose headers carry a
+        Signature is appended to and any other is signed fresh. ``cover_previous``
+        makes an appended signature cover the last earlier one completely (Go
+        ``WithCoverPrevious``), as WG-00 §5.2.2 permits a party forwarding a request
+        unchanged; a party that changed the request must not set it.
         """
+        if signer_seed is None and signer_source is None:
+            raise ValueError("signing transport needs a signer_seed or a signer_source")
         self._signer_seed = signer_seed
         self._keyid = keyid
         self._now = now or time.time
         self._ttl_sec = ttl_sec
         self._signature_agent = signature_agent
+        self._source = signer_source
+        self._append_only = append_only
+        self._cover_previous = cover_previous
         # Source (created, expires) from an injected Window, defaulting to a
-        # clock_window over now/ttl_sec. clock_window int()-truncates to whole
-        # seconds, so the @signature-params bytes stay byte-identical to the
-        # historical inline ``int(self._now())`` mint.
+        # clock_window over now/ttl_sec. clock_window int()-truncates to whole seconds.
         self._window = window or clock_window(self._now, self._ttl_sec)
-        # Nonce source for each request signature. Tests replace it to get
-        # deterministic bytes. sign_outbound refuses an empty nonce.
+        # Nonce source for each signature. Tests replace it to get deterministic bytes.
+        # sign_outbound refuses an empty nonce.
         self._nonce: Callable[[], str] = _new_nonce
 
     @property
     def signature_agent(self) -> str:
-        """The WBA directory this transport signs as — the Signature-Agent value, possibly
-        empty. Read-only: a relayed purchase checks that ``requester.domain`` names this
-        directory's host, because a Broker refuses a request whose requester is not the
-        directory its signature resolved from."""
+        """The key-directory origin this transport signs as — the Signature-Agent member
+        origin, possibly empty when a ``signer_source`` names it per request. Read-only:
+        a relayed purchase checks that ``requester.domain`` names this directory's host,
+        because a Broker refuses a request whose requester is not the directory its
+        signature resolved from."""
         return self._signature_agent
 
+    def _fixed_seed(self) -> bytes:
+        if self._signer_seed is None:
+            raise ValueError(
+                "signing transport has no fixed key: its signer_source names one per request"
+            )
+        return self._signer_seed
+
     @property
     def thumbprint(self) -> str:
         """The RFC 7638 thumbprint of the key this transport signs with: the agent identity
         a delivery URL is bound to (``agent_id``) and an Exchange states as
         ``agent_identity_hash``. Derived from the key itself, never from ``keyid``, which
         is whatever label the caller chose."""
-        public = Ed25519PrivateKey.from_private_bytes(self._signer_seed).public_key()
+        public = Ed25519PrivateKey.from_private_bytes(self._fixed_seed()).public_key()
         return thumbprint(public.public_bytes_raw())
 
     def sign_offer_acceptance(
@@ -144,7 +184,7 @@ def sign_offer_acceptance(
         the acceptance is signed by passing the injected Signer itself.
         """
         return sign_offer_acceptance_jcs(
-            seed=self._signer_seed,
+            seed=self._fixed_seed(),
             offer_sig=offer_sig,
             requester_id=requester_id,
             requester_domain=requester_domain,
@@ -161,27 +201,48 @@ def sign_request_acceptance(
     ) -> tuple[str, str]:
         """Sign the complete ordered execute set with the request-signing key."""
         return sign_request_acceptance_jcs(
-            seed=self._signer_seed,
+            seed=self._fixed_seed(),
             items=items,
             requester_id=requester_id,
             requester_domain=requester_domain,
             idempotency_key=idempotency_key,
         )
 
-    def sign_agent_binding(self, *, url: str, window: Window) -> tuple[str, str, str]:
-        """Mint the proof of possession for one bound delivery GET; return the agent-key
-        header value, the Signature-Input and the Signature.
+    def sign_agent_binding(self, *, url: str, window: Window) -> AgentBinding:
+        """Mint the proof of possession for one bound delivery GET: the agent key,
+        Signature-Agent, Signature-Input and Signature headers.
 
         The SAME key as the request signer, for the same reason as
         :meth:`sign_offer_acceptance`: the delivery URL is bound to the thumbprint of the
         agent's request-signing key, so a proof minted under any other key presents an
-        identity the URL was not issued to.
+        identity the URL was not issued to. It names this transport's directory and
+        carries a fresh 64-byte nonce, as every request signature does.
         """
         created, expires = window()
+        nonce = self._fresh_nonce()
         return sign_agent_binding(
-            url=url, signer_seed=self._signer_seed, created=created, expires=expires
+            url=url,
+            signer_seed=self._fixed_seed(),
+            created=created,
+            expires=expires,
+            signature_agent=self._signature_agent,
+            nonce=nonce,
         )
 
+    def _fresh_nonce(self) -> str:
+        nonce = self._nonce()
+        if not nonce:
+            # A missing nonce brings back the same-second collision: never sign without one.
+            raise ValueError("signing transport: nonce source returned an empty nonce")
+        return nonce
+
+    def _identity_for(self, request: OutboundRequest) -> tuple[bytes, str, str]:
+        """The signer and directory for ``request``: the source's when one is configured,
+        the transport's own otherwise."""
+        if self._source is None:
+            return self._fixed_seed(), self._keyid, self._signature_agent
+        return self._source(request)
+
     def sign_outbound(
         self,
         *,
@@ -190,49 +251,71 @@ def sign_outbound(
         body: bytes,
         authorization: str,
         window: Window | None = None,
+        headers: Mapping[str, str] | None = None,
     ) -> SignedOutbound:
         """Sign an outbound request; return it with the RFC 9421 headers attached.
 
         Authorization is always bound — pass an empty string when the caller holds no
-        token, which BINDS that emptiness (mirrors the L1 sign_request contract). The
-        header is still emitted and still sent; an absent header is a different thing
-        entirely and a verifier refuses it.
-
-        ``window`` overrides the one this transport was built with, so a client can
-        surface the freshness knob at the tier Go and TypeScript surface it at without
-        the application having to rebuild its signer. It must be ONE INSTANCE held by the
-        caller rather than a fresh one per call: a monotonic window carries the running
-        maximum that makes each signature unique, and one built per request has none.
-
-        Every call signs with a fresh RFC 9421 nonce, so two identical requests in the
-        same second still produce different signatures and a replay store accepts
-        both. Resending the returned headers unchanged is still a replay.
+        token, which BINDS that emptiness. The header is still emitted and still sent; an
+        absent header is a different thing entirely and a verifier refuses it.
+
+        ``headers`` are the headers the request already carries. When they include a
+        Signature, or when the transport is ``append_only``, the new signature is
+        appended beside the earlier ones (their Signature-Input, Signature and
+        Signature-Agent members kept as they are) and the returned values are the whole
+        merged headers; otherwise the request is signed fresh as ``sig1``.
+
+        ``window`` overrides the one this transport was built with. It must be ONE
+        INSTANCE held by the caller rather than a fresh one per call: a monotonic window
+        carries the running maximum, and one built per request has none.
+
+        Every call signs with a fresh 64-byte nonce, so two identical requests in the
+        same second still produce different signatures and a replay store accepts both.
+        Resending the returned headers unchanged is still a replay. A profile refusal (no
+        or a non-origin directory, a window longer than five minutes) raises a
+        :class:`~fora_sdk.wba.SignatureProfileError` and nothing is signed.
         """
-        created, expires = (window or self._window)()
-        nonce = self._nonce()
-        if not nonce:
-            # A missing nonce brings back the same-second collision: never sign without one.
-            raise ValueError("signing transport: nonce source returned an empty nonce")
-        signed = sign_request(
-            method=method,
-            url=url,
-            body=body,
-            authorization=authorization,
-            signer_seed=self._signer_seed,
-            keyid=self._keyid,
-            created=created,
-            expires=expires,
-            signature_agent=self._signature_agent,
-            nonce=nonce,
+        carried = dict(headers or {})
+        seed, keyid, directory = self._identity_for(
+            OutboundRequest(method=method, url=url, body=body, headers=carried)
         )
+        created, expires = (window or self._window)()
+        nonce = self._fresh_nonce()
+        signed: SignedRequest
+        if self._append_only or joined_header(carried, "signature"):
+            signed = append_signature(
+                method=method,
+                url=url,
+                body=body,
+                authorization=authorization,
+                signer_seed=seed,
+                keyid=keyid,
+                created=created,
+                expires=expires,
+                signature_agent=directory,
+                prev_signature_input=joined_header(carried, "signature-input") or "",
+                prev_signature=joined_header(carried, "signature") or "",
+                prev_signature_agent=joined_header(carried, "signature-agent") or "",
+                nonce=nonce,
+                cover_previous=self._cover_previous,
+            )
+        else:
+            signed = sign_request(
+                method=method,
+                url=url,
+                body=body,
+                authorization=authorization,
+                signer_seed=seed,
+                keyid=keyid,
+                created=created,
+                expires=expires,
+                signature_agent=directory,
+                nonce=nonce,
+            )
         # EVERY covered header, at exactly the value that entered the signature base —
-        # empty values included. See docs/design-history.md,
-        # "A covered header the peer never receives is not bound", for why binding one
-        # without sending it is not binding it.
-        #
-        # Taken straight off ``signed``, never re-read from the arguments: the primitive
-        # echoes what it bound, so there is one place the emitted value can come from and
-        # no way for the two to drift.
+        # empty values included. See docs/design-history.md, "A covered header the peer
+        # never receives is not bound". Taken straight off ``signed``, never re-read from
+        # the arguments, so the emitted value and the bound one cannot drift.
         return SignedOutbound(
             method=method,
             url=url,
diff --git a/sdk/python/fora_sdk/wba.py b/sdk/python/fora_sdk/wba.py
new file mode 100644
index 00000000..9799a2af
--- /dev/null
+++ b/sdk/python/fora_sdk/wba.py
@@ -0,0 +1,372 @@
+"""The Web Bot Auth profile of RFC 9421 request signatures, as FORA pins it:
+draft-ietf-webbotauth-httpsig-protocol-00 ("WG-00"). The Python port of the Go
+oracle's helpers/wba.go: the pieces of the profile the signer and the verifier share.
+
+- Signature-Agent is a structured-field Dictionary. The member for a signature is
+  ``<label>="https://<origin>"``, and the signature covers it as
+  ``"signature-agent";key="<label>"``. Each signature's keyid is resolved in the key
+  directory its own covered member names.
+- Every signature carries created, expires, keyid, alg="ed25519" and
+  tag="web-bot-auth"; a FORA signer adds a fresh nonce, and the window is at most
+  :data:`MAX_SIGNATURE_LIFETIME`.
+- A verifier also accepts the legacy sf-string form of Signature-Agent, covered as
+  plain ``"signature-agent"``, on a request carrying one signature, a member key that
+  differs from the label, no nonce, and a ``type=directory`` member parameter. It
+  refuses the bare unquoted value the v1.0.8 SDKs sent.
+"""
+
+from __future__ import annotations
+
+import ipaddress
+from typing import TYPE_CHECKING
+
+from . import sfv
+from ._sigbase import (
+    MissingSignatureError,
+    MissingSignatureInputError,
+    component,
+    component_name,
+    component_param,
+    header_lines,
+    plain,
+    render_component,
+)
+from .wire import WBATag
+
+if TYPE_CHECKING:
+    from collections.abc import Mapping
+
+    from ._sigbase import SigParams
+
+#: The longest window (``expires - created``, in seconds) a FORA signer gives a request
+#: signature. A signature is never a long-lived credential.
+MAX_SIGNATURE_LIFETIME = 300
+
+#: The only value of a Signature-Agent member's ``type`` parameter that names a key
+#: directory (WG-00 §5.2.1).
+_DIRECTORY_TYPE = "directory"
+_SIGNATURE_AGENT = "signature-agent"
+_ENTITLEMENT = "x-entitlement-token"
+_MAX_PORT = 65535
+_DEFAULT_PORT = 443
+_ASCII_LOW = 0x21
+_ASCII_HIGH = 0x80
+
+
+class SignatureProfileError(ValueError):
+    """Base of the refusals of a signature's form under the Web Bot Auth profile.
+
+    The signing helpers raise the sign-side ones before anything is signed, and the
+    client reports each of them as a malformed call, never as a peer that did not
+    answer.
+    """
+
+
+class SignatureAgentRequiredError(SignatureProfileError):
+    """A signing call given no Signature-Agent origin. Every Web Bot Auth signature
+    names its signer's key directory (Go ``ErrSignatureAgentRequired``)."""
+
+
+class SignatureAgentNotOriginError(SignatureProfileError):
+    """A Signature-Agent value that is not the ASCII serialization of an https origin:
+    ``https://host[:port]``, lowercase, with no path, query, fragment or credentials and
+    no default port (Go ``ErrSignatureAgentNotOrigin``)."""
+
+
+class SignatureAgentFormError(SignatureProfileError):
+    """A Signature-Agent the profile does not accept: the bare unquoted value, a member
+    the signature names but the dictionary does not carry, a member that is not a String
+    or whose type is not directory, the legacy String form on a request carrying more
+    than one signature, a signature covering several members none of which is keyed to
+    its label, or, when appending, a Signature-Agent that is not a dictionary (Go
+    ``ErrSignatureAgentForm``)."""
+
+
+class SignatureLabelError(SignatureProfileError):
+    """A signature label that is not a structured-field key, or one already used by a
+    signature or a Signature-Agent member on the request (Go ``ErrSignatureLabel``)."""
+
+
+class SignatureLifetimeError(SignatureProfileError):
+    """A signing window that is not positive or is longer than
+    :data:`MAX_SIGNATURE_LIFETIME` (Go ``ErrSignatureLifetime``)."""
+
+
+class InvalidNonceError(SignatureProfileError):
+    """A nonce with a character outside the base64url alphabet (Go ``ErrInvalidNonce``).
+    The three SDKs apply the same rule, so a nonce one accepts is written as the same
+    bytes by all three, and a quote cannot end the quoted parameter early."""
+
+
+class SignatureTagError(SignatureProfileError):
+    """A signature with no tag, or a tag other than ``web-bot-auth`` (Go
+    ``ErrSignatureTag``)."""
+
+
+class MissingComponentError(SignatureProfileError):
+    """A signature that does not cover a component the route requires."""
+
+    def __init__(self, component_name: str) -> None:
+        super().__init__(f"required covered component missing: {component_name}")
+        #: The lowercase name of the component the signature omits.
+        self.component = component_name
+
+
+def check_https_origin(s: str) -> None:
+    """Refuse ``s`` unless it is the ASCII serialization of an https origin, the only
+    value a Signature-Agent member carries in this profile.
+
+    Accepted: ``https://`` then a lowercase host (an IP literal allowed, an IPv6 one in
+    brackets) and, only when it is not 443, ``:port``. Anything else raises
+    :class:`SignatureAgentNotOriginError`: another scheme, uppercase, a path (even
+    ``/``), a query, a fragment, credentials, or a non-ASCII host, which an origin
+    carries punycoded. The Python port of Go ``CheckHTTPSOrigin``.
+    """
+    if not s.startswith("https://"):
+        raise SignatureAgentNotOriginError(f"{s!r} does not start with https://")
+    rest = s[len("https://") :]
+    if rest == "" or any(c in rest for c in "/?#@\\%"):
+        raise SignatureAgentNotOriginError(f"{s!r} carries more than a host and port")
+    if any(ord(c) >= _ASCII_HIGH or ord(c) < _ASCII_LOW or "A" <= c <= "Z" for c in rest):
+        raise SignatureAgentNotOriginError(f"{s!r} is not a lowercase ASCII origin")
+    host, port, has_port = _split_host_port(rest)
+    if host is None:
+        raise SignatureAgentNotOriginError(f"{s!r} is not a host[:port]")
+    if ":" in host:
+        if not _is_ip(host):
+            raise SignatureAgentNotOriginError(f"{s!r} is not a host[:port]")
+    elif not _is_origin_host_name(host):
+        raise SignatureAgentNotOriginError(f"{s!r} is not a host[:port]")
+    if has_port:
+        if not port.isdigit() or port[0] == "0" or not 0 < int(port) <= _MAX_PORT:
+            raise SignatureAgentNotOriginError(f"{s!r} carries an invalid port")
+        if int(port) == _DEFAULT_PORT:
+            raise SignatureAgentNotOriginError(f"{s!r} spells out the default port")
+
+
+def _split_host_port(rest: str) -> tuple[str | None, str, bool]:
+    """Split ``host[:port]`` the way Go's URL parser does: a bracketed IPv6 literal, or a
+    host with at most one colon. Returns ``(None, "", False)`` for a value that is not
+    one."""
+    if rest.startswith("["):
+        close = rest.find("]")
+        if close < 0:
+            return None, "", False
+        host, after = rest[1:close], rest[close + 1 :]
+        if after == "":
+            return (host or None), "", False
+        if not after.startswith(":"):
+            return None, "", False
+        return (host or None), after[1:], True
+    host, colon, port = rest.partition(":")
+    if ":" in port:
+        return None, "", False
+    return (host or None), port, colon == ":"
+
+
+def _is_ip(host: str) -> bool:
+    try:
+        ipaddress.ip_address(host)
+    except ValueError:
+        return False
+    return True
+
+
+def _is_origin_host_name(name: str) -> bool:
+    """A lowercase registered name or IPv4 literal: letters, digits, '-', '.' and '_'
+    only, with no empty label."""
+    if name == "" or name.startswith(".") or ".." in name:
+        return False
+    return all(c.isascii() and (c.islower() or c.isdigit() or c in "-._") for c in name)
+
+
+def valid_label(label: str) -> bool:
+    """Whether ``label`` is a structured-field key (RFC 8941 §3.1.2)."""
+    try:
+        sfv.serialize_key(label)
+    except sfv.StructuredFieldError:
+        return False
+    return True
+
+
+def valid_nonce(nonce: str) -> bool:
+    """Whether ``nonce`` is empty or uses only base64url characters (A-Z a-z 0-9 - _)."""
+    return all(c.isascii() and (c.isalnum() or c in "-_") for c in nonce)
+
+
+def signature_agent_member(label: str, origin: str) -> str:
+    """One Signature-Agent dictionary member for ``label``. ``origin`` has passed
+    :func:`check_https_origin`, so it carries no character a String would escape."""
+    return f'{label}="{origin}"'
+
+
+def signature_agent_component(label: str) -> sfv.Item:
+    """The covered-component identifier binding a signature to its own member."""
+    return component(_SIGNATURE_AGENT, key=label)
+
+
+def used_labels(headers: Mapping[str, str]) -> set[str]:
+    """Every label already on the request: the members of Signature-Input and Signature
+    and the keys of a Signature-Agent dictionary. A new signature takes a label none of
+    them uses, so its member cannot collide with another signature's."""
+    used: set[str] = set()
+    for name in ("signature-input", "signature", _SIGNATURE_AGENT):
+        lines = header_lines(headers, name)
+        if not lines:
+            continue
+        try:
+            used.update(sfv.parse_dictionary(lines))
+        except sfv.StructuredFieldError:
+            continue
+    return used
+
+
+def next_free_label(headers: Mapping[str, str]) -> str:
+    """``sigN`` for the smallest N >= 1 no label on the request uses."""
+    used = used_labels(headers)
+    n = 1
+    while f"sig{n}" in used:
+        n += 1
+    return f"sig{n}"
+
+
+def signature_agent_dictionary(headers: Mapping[str, str]) -> dict[str, sfv.Member]:
+    """The request's Signature-Agent as a Dictionary, its field lines joined. An absent
+    or empty header is an empty dictionary; one that does not parse as a Dictionary,
+    such as the legacy String form, raises :class:`SignatureAgentFormError`."""
+    lines = header_lines(headers, _SIGNATURE_AGENT)
+    if ", ".join(lines).strip() == "":
+        return {}
+    try:
+        return sfv.parse_dictionary(lines)
+    except sfv.StructuredFieldError as exc:
+        raise SignatureAgentFormError(f"Signature-Agent is not a dictionary: {exc}") from exc
+
+
+def _directory_from_member(member: sfv.Member, key: str) -> str:
+    """A Signature-Agent member read as a key directory's origin. The member must be a
+    String; a ``type`` parameter, when present, must be ``directory``, since WG-00
+    §5.2.1 has a verifier ignore a member of any other type."""
+    if isinstance(member, sfv.InnerList):
+        raise SignatureAgentFormError(f"member {key!r} is an inner list")
+    if not isinstance(member.value, str):
+        raise SignatureAgentFormError(f"member {key!r} is not a String")
+    if "type" in member.params and not _is_directory_type(member.params["type"]):
+        raise SignatureAgentFormError(f"member {key!r} has a type other than directory")
+    check_https_origin(member.value)
+    return member.value
+
+
+def _is_directory_type(v: sfv.BareItem) -> bool:
+    if isinstance(v, sfv.Token):
+        return v.value == _DIRECTORY_TYPE
+    return isinstance(v, str) and v == _DIRECTORY_TYPE
+
+
+def _legacy_directory(headers: Mapping[str, str]) -> str:
+    """A Signature-Agent in the legacy form: one String, covered as plain
+    ``"signature-agent"``. The bare unquoted value parses as a Token and is refused."""
+    lines = header_lines(headers, _SIGNATURE_AGENT)
+    if not lines:
+        raise MissingComponentError(_SIGNATURE_AGENT)
+    try:
+        item = sfv.parse_item(", ".join(lines))
+    except sfv.StructuredFieldError as exc:
+        raise SignatureAgentFormError(f"Signature-Agent is not a String: {exc}") from exc
+    if not isinstance(item.value, str):
+        raise SignatureAgentFormError("the legacy form must be a quoted String")
+    check_https_origin(item.value)
+    return item.value
+
+
+def _covered_members(p: SigParams) -> tuple[list[str], int]:
+    """The keys of the Signature-Agent members ``p`` covers, and how many times it
+    covers the field plainly. Any other parameter is a form the profile refuses."""
+    keyed: list[str] = []
+    plain_count = 0
+    for c in p.covered:
+        if component_name(c).lower() != _SIGNATURE_AGENT:
+            continue
+        key = component_param(c, "key")
+        if key and len(c.params) == 1:
+            keyed.append(key)
+        elif not c.params:
+            plain_count += 1
+        else:
+            raise SignatureAgentFormError("unsupported parameter on the signature-agent component")
+    return keyed, plain_count
+
+
+def signature_directory(headers: Mapping[str, str], p: SigParams, sig_count: int) -> str:
+    """The key-directory origin a signature names: the Signature-Agent member it covers.
+
+    A signature covering exactly one member follows it, whatever its key, because the
+    profile accepts a member key that differs from the label. A signature that covers an
+    earlier one also covers that one's member (WG-00 §5.2.2), so among several the one
+    keyed to its own label is followed; none keyed to it is a form error. The legacy
+    String form, covered as plain ``"signature-agent"``, is accepted only on a request
+    carrying one signature (``sig_count``). The Python port of Go ``signatureDirectory``.
+    """
+    keyed, plain_count = _covered_members(p)
+    if plain_count == 0 and not keyed:
+        raise MissingComponentError(_SIGNATURE_AGENT)
+    if plain_count > 1 or (plain_count == 1 and keyed):
+        raise SignatureAgentFormError("the signature covers Signature-Agent in more than one form")
+    if plain_count == 1:
+        if sig_count > 1:
+            raise SignatureAgentFormError(
+                "the legacy String form is accepted only on a request carrying one signature"
+            )
+        return _legacy_directory(headers)
+    key = keyed[0]
+    if len(keyed) > 1:
+        if p.label not in keyed:
+            raise SignatureAgentFormError(
+                f"{p.label} covers several Signature-Agent members and none keyed to its label"
+            )
+        key = p.label
+    if not header_lines(headers, _SIGNATURE_AGENT):
+        raise MissingComponentError(_SIGNATURE_AGENT)
+    member = signature_agent_dictionary(headers).get(key)
+    if member is None:
+        raise SignatureAgentFormError(f"no member {key!r}")
+    return _directory_from_member(member, key)
+
+
+def accept_signature(entitlement: bool = False) -> str:
+    """The Accept-Signature value a FORA verifier answers a refused RPC signature with:
+    the components a FORA RPC signature must cover, the dictionary form of
+    Signature-Agent, and the created, expires and tag parameters (RFC 9421 §5.1,
+    WG-00 §5.3). ``entitlement`` adds ``x-entitlement-token``, for a request carrying
+    that header."""
+    covered = [
+        *plain("@method", "@target-uri", "content-digest", "authorization"),
+        signature_agent_component("sig1"),
+    ]
+    if entitlement:
+        covered.append(component(_ENTITLEMENT))
+    listed = " ".join(render_component(c) for c in covered)
+    return f'sig1=({listed});created;expires;tag="{WBATag}"'
+
+
+def accept_signature_for(exc: BaseException) -> str | None:
+    """The Accept-Signature value a verifier answers ``exc`` with, or None when it
+    answers with none.
+
+    It does for a request carrying no signature, a signature that omits a required
+    component, a signature with the wrong tag, and a Signature-Agent in a form the
+    profile refuses. It does not for a signature that is well formed and fails for any
+    other reason: a malformed Signature-Input, a member that is not an origin, a bad
+    signature, an unknown key, a stale window, a replay, a hop budget or a broken chain.
+    """
+    if isinstance(exc, MissingComponentError):
+        return accept_signature(exc.component == _ENTITLEMENT)
+    refused_form = (
+        MissingSignatureInputError,
+        MissingSignatureError,
+        SignatureTagError,
+        SignatureAgentFormError,
+    )
+    if isinstance(exc, refused_form):
+        return accept_signature(False)
+    return None
diff --git a/sdk/python/fora_sdk/window.py b/sdk/python/fora_sdk/window.py
index fc8dabbd..cc75913b 100644
--- a/sdk/python/fora_sdk/window.py
+++ b/sdk/python/fora_sdk/window.py
@@ -40,11 +40,12 @@ def monotonic_window(now: Callable[[], float], ttl_sec: int) -> Window:
     same wall-clock second, bumps expires by one second per call so no two
     back-to-back signatures share a (keyid, expires) pair. ``SigningTransport``
     no longer needs this for uniqueness: every signature carries a fresh nonce,
-    so ``clock_window`` is enough. During a burst ``expires - created`` grows
-    past ``ttl_sec``, which a verifier with a max signature age of ``ttl_sec``
-    refuses. ``created``
-    tracks ``int(now())``, so the pair stays clock-consistent. Thread-safe: the
-    running maximum is guarded by a lock.
+    so ``clock_window`` is enough. ``created`` moves with expires, so the window
+    is always exactly ``ttl_sec`` and never exceeds the Web Bot Auth limit when
+    ``ttl_sec`` is at most :data:`~fora_sdk.wba.MAX_SIGNATURE_LIFETIME`; during a
+    burst ``created`` leads the clock by the burst's length in seconds, which a
+    verifier's future-skew allowance absorbs. Thread-safe: the running maximum is
+    guarded by a lock.
 
     ONE INSTANCE PER CLIENT, never one per call. The running maximum is the whole
     mechanism: a window built per request starts from zero, cannot see the
@@ -61,6 +62,6 @@ def _window() -> tuple[int, int]:
         with lock:
             nxt = last_expires + 1 if last_expires >= floor else floor
             last_expires = nxt
-        return created, nxt
+        return nxt - ttl_sec, nxt
 
     return _window
diff --git a/sdk/python/fora_sdk/wire.py b/sdk/python/fora_sdk/wire.py
index 7df74f35..03776184 100644
--- a/sdk/python/fora_sdk/wire.py
+++ b/sdk/python/fora_sdk/wire.py
@@ -41,8 +41,17 @@
 WellKnownManifestVersion = "1.0"
 #: Header correlating a request across services and the edge.
 RequestIDHeader = "X-Request-ID"
-#: Header carrying the signer's Web Bot Auth key-directory URL.
+#: Header naming the key directory of each request signature: a structured-field
+#: Dictionary whose member ``<label>="https://<origin>"`` each signature covers.
 SignatureAgentHeader = "Signature-Agent"
+#: The RFC 9421 ``tag`` every Web Bot Auth request signature carries.
+WBATag = "web-bot-auth"
+#: The ``tag`` a key directory's response signature carries (WG-00 Appendix B.1).
+DirectoryResponseTag = "http-message-signatures-directory"
+#: The RFC 9421 §5.1 field a verifier answers with when it refuses a signature for a
+#: missing component or a form it does not accept, naming what it requires
+#: (WG-00 §5.3). Its value is :func:`fora_sdk.wba.accept_signature`.
+AcceptSignatureHeader = "Accept-Signature"
 #: Header carrying the fetcher's raw Ed25519 public key on a PoP GET. Canonical
 #: (Go) casing; HTTP field names are case-insensitive, so lookups lowercase it —
 #: see ``AGENT_KEY_HEADER`` in ``pop``, which derives from this rather than
diff --git a/sdk/python/pyproject.toml b/sdk/python/pyproject.toml
index 19e1ebed..b01aa80b 100644
--- a/sdk/python/pyproject.toml
+++ b/sdk/python/pyproject.toml
@@ -97,10 +97,12 @@ select = [
 "fora_sdk/resolvers/wba.py" = ["PLR0913", "S311"]
 # SigningTransport exposes the sign-window seam as an INJECTION point: signer_seed
 # and keyid are identity, now/ttl_sec are the default clock+TTL, signature_agent is
-# the covered directory, and window is the injectable Window (mirroring the Go
-# WithWindow transport option). Each is an independent seam the deterministic
-# regression pin fixes; collapsing them into an options object would break those
-# call sites. PLR0913 (arg count) is waived for exactly this constructor.
+# the covered directory, window is the injectable Window, and signer_source /
+# append_only / cover_previous are the per-request signer and the append branch
+# (mirroring the Go WithWindow, WithSignerSource, WithAppendSigner and
+# WithCoverPrevious transport options). Each is an independent seam a test pins;
+# collapsing them into an options object would break those call sites. PLR0913 (arg
+# count) is waived for exactly this constructor.
 "fora_sdk/signing_transport.py" = ["PLR0913"]
 
 [tool.mypy]
diff --git a/sdk/python/tests/exchange_harness.py b/sdk/python/tests/exchange_harness.py
index 39f4d1e1..8b44efde 100644
--- a/sdk/python/tests/exchange_harness.py
+++ b/sdk/python/tests/exchange_harness.py
@@ -42,16 +42,18 @@
 from resolvers_harness import (
     MANIFEST_PATH,
     WBA_DIR_PATH,
+    WBA_MEDIA_TYPE,
     make_key,
     manifest_json,
+    register_directory_key,
     rfc3339,
+    signed_directory_headers,
     wba_file_json,
     wba_jwk,
 )
 
 from fora_sdk.b64 import b64url_nopad
 from fora_sdk.core import sign_offer_jcs
-from fora_sdk.keyresolver import StaticKeyResolver
 from fora_sdk.pop import verify_agent_binding
 from fora_sdk.server_verify import verify_request_server
 from fora_sdk.signedurl import sign_ed25519_signed_url, verify_ed25519_signed_url
@@ -129,9 +131,11 @@ def __init__(
         tamper_offer: bool,
     ) -> None:
         self.offer_key = Ed25519PrivateKey.generate()
+        register_directory_key(self.offer_key)
         self.offer_seed = self.offer_key.private_bytes_raw()
         self.offer_pub = self.offer_key.public_key().public_bytes_raw()
         self.delivery_key = Ed25519PrivateKey.generate()
+        register_directory_key(self.delivery_key)
         self.delivery_seed = self.delivery_key.private_bytes_raw()
         self.delivery_pub = self.delivery_key.public_key().public_bytes_raw()
         self.agent_thumbprint = agent_thumbprint
@@ -144,26 +148,25 @@ def __init__(
         self.url = ""
         self.seen: list[tuple[str, dict[str, Any]]] = []
 
-    def keys_published_at(self, signature_agent: str) -> StaticKeyResolver:
-        """The keys this Exchange can resolve for a caller naming ``signature_agent``.
-
-        A real Exchange reads the covered Signature-Agent header, fetches the WBA
-        directory at that origin and selects the JsonWebKey whose RFC 7638 thumbprint
-        matches the keyid. This is that lookup with the fetch collapsed, because the
-        agent's directory is not dialable from an in-process test: the ONE directory
-        this Exchange knows about is the one it was told to trust.
-
-        An empty or unknown Signature-Agent therefore resolves NOTHING, which is the
-        point. Signature-Agent defaults to empty in every SDK, the signature covers it
-        either way, and an agent that never names its directory has no key an Exchange
-        can find. The protocol says so — see the Key Lookup section of
-        website/src/content/docs/protocol/authentication.mdx — and the reference
-        Exchange answers 401. Before this, the harness verified no RPC signature at
-        all, so the README could ship that exact mistake and the suite stayed silent.
+    def resolve(self, keyid: str | None, directory: str) -> bytes | None:
+        """The key this Exchange resolves for ``keyid`` in ``directory``, the origin the
+        signature's own covered Signature-Agent member names.
+
+        A real Exchange fetches the key directory at that origin and selects the key
+        whose RFC 7638 thumbprint matches the keyid. This is that lookup with the fetch
+        collapsed, because the agent's directory is not dialable from an in-process
+        test: the ONE directory this Exchange knows about is the one it was told to
+        trust.
+
+        Any other directory therefore resolves NOTHING, which is the point: an agent
+        that names no directory, or names one that does not publish its key, has no key
+        an Exchange can find, and the reference Exchange answers 401. Before the harness
+        verified RPC signatures at all, the README could ship that exact mistake and the
+        suite stayed silent.
         """
-        if not signature_agent or signature_agent.strip('"') != self.agent_directory:
-            return StaticKeyResolver({})
-        return StaticKeyResolver({self.agent_thumbprint: self.agent_public})
+        if directory != self.agent_directory or keyid != self.agent_thumbprint:
+            return None
+        return self.agent_public
 
     def directory(self) -> str:
         now = datetime.now(UTC)
@@ -237,6 +240,18 @@ def _send(self, code: int, body: bytes, content_type: str) -> None:
             self.end_headers()
             self.wfile.write(body)
 
+        def _send_directory(self, body: bytes) -> None:
+            """A key directory as the profile serves it: its own media type and a
+            response signed, for the authority it was fetched from, by its keys."""
+            authority = (self.headers.get("host") or "").lower()
+            self.send_response(200)
+            self.send_header("content-type", WBA_MEDIA_TYPE)
+            for name, value in signed_directory_headers(authority, body).items():
+                self.send_header(name, value)
+            self.send_header("content-length", str(len(body)))
+            self.end_headers()
+            self.wfile.write(body)
+
         def _json(self, code: int, payload: dict[str, Any]) -> None:
             self._send(code, json.dumps(payload).encode(), "application/json")
 
@@ -246,7 +261,7 @@ def do_GET(self) -> None:
                 if not state.serve_directory:
                     self._send(404, b"", "application/json")
                     return
-                self._send(200, state.directory().encode(), "application/json")
+                self._send_directory(state.directory().encode())
                 return
             if path == MANIFEST_PATH:
                 self._send(200, manifest_json(endpoint=state.url).encode(), "application/json")
@@ -306,7 +321,7 @@ def _verify_signature(self, raw: bytes) -> str | None:
                 url=f"http://{self.headers.get('host', state.domain)}{self.path}",
                 body=raw,
                 headers=headers,
-                resolver=state.keys_published_at(headers.get("signature-agent", "")),
+                resolver=state,
                 now=int(time.time()),
             )
             return None if verdict.valid else (verdict.reason or "invalid signature")
diff --git a/sdk/python/tests/resolvers_harness.py b/sdk/python/tests/resolvers_harness.py
index 628ca760..582ceff2 100644
--- a/sdk/python/tests/resolvers_harness.py
+++ b/sdk/python/tests/resolvers_harness.py
@@ -7,10 +7,17 @@
 does not refuse the loopback origin; only the clock (and the poll timer/seams for
 the WBA poller) are injected for determinism.
 
-This module imports ONLY the existing byte-parity-pinned SDK primitives
-(``thumbprint``, ``b64url_nopad``) and never the not-yet-existing
-``fora_sdk.resolvers`` faces, so a RED run points at the missing faces rather
-than at this fixture.
+A key directory is served under the Web Bot Auth profile: its own media type and a
+response signed, for the authority it was fetched from, by every listed key a test
+minted. Every key ``make_key`` mints is registered by its public half, and a test that
+mints keys elsewhere registers them with ``register_directory_key``; a listed key
+nobody registered is left unsigned, which a reader treats as absent. A member is an
+https origin, so a resolver reaches this plaintext origin through its scheme override
+(``WBAKeyResolver(scheme="http")``) with ``https://`` + ``Origin.host`` as the member.
+
+This module imports ONLY the byte-parity-pinned SDK primitives (``thumbprint``,
+``b64url_nopad``, the directory response signer) and never the ``fora_sdk.resolvers``
+faces, so a RED run points at the faces rather than at this fixture.
 """
 
 from __future__ import annotations
@@ -31,6 +38,7 @@
 from fora_sdk.wire import WellKnownManifestVersion
 
 from fora_sdk.b64 import b64url_nopad
+from fora_sdk.directory_signature import sign_directory_response
 from fora_sdk.thumbprint import thumbprint
 
 # Well-known paths the origin serves. The WBA directory path is the fixed Web Bot
@@ -49,6 +57,43 @@
 
 _FETCH_TIMEOUT_S = 10.0
 
+#: The media type a key directory is served under (WG-00 §5.5).
+WBA_MEDIA_TYPE = "application/http-message-signatures-directory+json"
+
+# A window wide enough to contain every injected test clock.
+_DIRECTORY_SIGNATURE_CREATED = 1
+_DIRECTORY_SIGNATURE_EXPIRES = 1 << 40
+
+# base64url public key -> the private key that signs a directory listing it.
+_DIRECTORY_KEYS: dict[str, Ed25519PrivateKey] = {}
+_DIRECTORY_KEYS_LOCK = threading.Lock()
+
+
+def register_directory_key(priv: Ed25519PrivateKey) -> None:
+    """Make ``priv`` sign every served directory that lists its public key."""
+    x = b64url_nopad(priv.public_key().public_bytes(Encoding.Raw, PublicFormat.Raw))
+    with _DIRECTORY_KEYS_LOCK:
+        _DIRECTORY_KEYS[x] = priv
+
+
+def signed_directory_headers(authority: str, body: bytes) -> dict[str, str]:
+    """The response-signature headers for a directory ``body`` served under
+    ``authority``: one signature per listed key a test registered, none when the
+    body lists no registered key or is not a directory at all."""
+    try:
+        listed = [k.get("x") for k in json.loads(body).get("keys") or []]
+    except (ValueError, AttributeError, TypeError):
+        return {}
+    with _DIRECTORY_KEYS_LOCK:
+        privs = [_DIRECTORY_KEYS[x] for x in listed if isinstance(x, str) and x in _DIRECTORY_KEYS]
+    if not privs:
+        return {}
+    seeds = [p.private_bytes_raw() for p in privs]
+    signed = sign_directory_response(
+        authority, body, seeds, _DIRECTORY_SIGNATURE_CREATED, _DIRECTORY_SIGNATURE_EXPIRES
+    )
+    return signed.headers()
+
 
 def loopback_client() -> httpx.Client:
     """An UNGUARDED httpx.Client the resolver suites inject to reach the in-process
@@ -77,6 +122,7 @@ class TestKey:
 def make_key() -> TestKey:
     """Mint a fresh Ed25519 key and derive its SDK thumbprint."""
     priv = Ed25519PrivateKey.generate()
+    register_directory_key(priv)
     raw = priv.public_key().public_bytes(Encoding.Raw, PublicFormat.Raw)
     x = b64url_nopad(raw)
     return TestKey(raw_pub=raw, x=x, tp=thumbprint(raw))
@@ -152,6 +198,8 @@ class _State:
     license: bytes | None = None
     # A path's Content-Type, where it is not application/json; None omits the header.
     content_types: dict[str, str | None] = field(default_factory=dict)
+    # A path answered with a 302 to the given location instead of its document.
+    redirects: dict[str, str] = field(default_factory=dict)
 
 
 def _resolve_route(state: _State, path: str) -> tuple[int, bytes] | None:  # noqa: PLR0911 — flat route table
@@ -198,6 +246,11 @@ def __init__(self) -> None:
         class _Handler(BaseHTTPRequestHandler):
             def do_GET(self) -> None:
                 path = self.path.split("?")[0]
+                if path in state.redirects:
+                    self.send_response(302)
+                    self.send_header("location", state.redirects[path])
+                    self.end_headers()
+                    return
                 hit = _resolve_route(state, path)
                 if hit is None:
                     self.send_response(404)
@@ -205,9 +258,14 @@ def do_GET(self) -> None:
                     return
                 code, body = hit
                 self.send_response(code)
-                content_type = state.content_types.get(path, "application/json")
+                default_type = WBA_MEDIA_TYPE if path == WBA_DIR_PATH else "application/json"
+                content_type = state.content_types.get(path, default_type)
                 if content_type is not None:
                     self.send_header("content-type", content_type)
+                if path == WBA_DIR_PATH and code == 200:
+                    authority = (self.headers.get("Host") or "").lower()
+                    for name, value in signed_directory_headers(authority, body).items():
+                        self.send_header(name, value)
                 self.end_headers()
                 self.wfile.write(body)
 
@@ -217,6 +275,9 @@ def log_message(self, *_args: Any) -> None:  # silence the test server
         self._server = ThreadingHTTPServer(("127.0.0.1", 0), _Handler)
         self.host = f"127.0.0.1:{self._server.server_address[1]}"
         self.url = f"http://{self.host}"
+        #: The https origin a Signature-Agent member names for this origin's directory,
+        #: fetched over http by a resolver built with ``scheme="http"``.
+        self.origin = f"https://{self.host}"
         self._thread = threading.Thread(target=self._server.serve_forever, daemon=True)
         self._thread.start()
 
@@ -256,6 +317,10 @@ def set_license(self, body: bytes) -> None:
     def license_url(self) -> str:
         return self.url + LICENSE_PATH
 
+    def set_redirect(self, path: str, location: str) -> None:
+        """Answer ``path`` with a 302 to ``location``."""
+        self._state.redirects[path] = location
+
     def set_content_type(self, path: str, value: str | None) -> None:
         """Serve ``path`` with ``value`` as its Content-Type; ``None`` sends none."""
         self._state.content_types[path] = value
diff --git a/sdk/python/tests/signed_peer.py b/sdk/python/tests/signed_peer.py
index 11b134f4..87701c48 100644
--- a/sdk/python/tests/signed_peer.py
+++ b/sdk/python/tests/signed_peer.py
@@ -8,9 +8,11 @@
 server-side verifier, ``verify_request_server``, on every request and refuses one that
 fails with the 401 envelope an Exchange sends.
 
-The key lookup is injected as a function of the covered Signature-Agent header, which is
-how a real Exchange finds a caller's key: a static map for a test that only needs one
-fixed identity, a WBA directory resolver for one that mints its own.
+The key lookup is injected as a function of the received Signature-Agent header that
+returns the resolver the verifier uses. The verifier asks that resolver for each
+signature's key in the directory the signature's own covered member names, which is how
+a real Exchange finds a caller's key: a static map for a test that only needs one fixed
+identity, a WBA directory resolver for one that mints its own.
 """
 
 from __future__ import annotations
diff --git a/sdk/python/tests/test_broker_execute.py b/sdk/python/tests/test_broker_execute.py
index 61fe0489..68d158e8 100644
--- a/sdk/python/tests/test_broker_execute.py
+++ b/sdk/python/tests/test_broker_execute.py
@@ -249,15 +249,36 @@ def test_every_precondition_is_refused_before_sending(
 
 
 @pytest.mark.parametrize("face", FACES, ids=_IDS)
-def test_an_explicit_443_and_case_are_the_same_directory(face: Face) -> None:
+def test_an_explicit_443_and_case_in_the_requester_name_the_same_directory(face: Face) -> None:
+    # The requester check is the recipient-identity rule: case-folded, and an explicit
+    # :443 the same as no port.
     peer = SignedPeer(keys=_agent_keys, answer=_answer({"ver": "1.0"}))
-    config = _broker_config(signer=_signer("https://AGENT.test:443/.well-known/x"))
+    config = _broker_config(requester={**REQUESTER, "domain": "AGENT.test:443"})
 
     face.run(_broker(face, config, peer).execute([_offer("a1", "exchange-a.test")]))
 
     assert peer.only().verdict.valid
 
 
+@pytest.mark.parametrize("face", FACES, ids=_IDS)
+@pytest.mark.parametrize(
+    "directory",
+    ["https://AGENT.test", "https://agent.test:443", "https://agent.test/.well-known/x"],
+    ids=["uppercase", "default_port", "path"],
+)
+def test_a_directory_that_is_not_an_origin_is_refused_locally(face: Face, directory: str) -> None:
+    # A Signature-Agent member is the ASCII serialization of an https origin, so the
+    # signer refuses any other spelling and the call is malformed before it is sent.
+    peer = SignedPeer(keys=_agent_keys, answer=_answer({"ver": "1.0"}))
+    config = _broker_config(signer=_signer(directory))
+
+    with pytest.raises(CallError) as caught:
+        face.run(_broker(face, config, peer).execute([_offer("a1", "exchange-a.test")]))
+
+    assert caught.value.kind is CallErrorKind.MALFORMED
+    assert peer.seen == [], "the Broker was contacted; this refusal must be local"
+
+
 @pytest.mark.parametrize("face", FACES, ids=_IDS)
 def test_the_brokers_own_refusal_is_a_call_error_with_its_typed_reason(face: Face) -> None:
     refused = envelope_response(
diff --git a/sdk/python/tests/test_client.py b/sdk/python/tests/test_client.py
index fc022421..9340685e 100644
--- a/sdk/python/tests/test_client.py
+++ b/sdk/python/tests/test_client.py
@@ -97,7 +97,11 @@ def _config(**overrides: Any) -> ClientConfig:
     base = {
         "base_url": "https://exchange.test",
         "requester": REQUESTER,
-        "signer": SigningTransport(signer_seed=AGENT_SEED, keyid="agent.v1"),
+        "signer": SigningTransport(
+            signer_seed=AGENT_SEED,
+            keyid="agent.v1",
+            signature_agent="https://agent.test",
+        ),
     }
     base.update(overrides)
     return ClientConfig(**base)  # type: ignore[arg-type]
diff --git a/sdk/python/tests/test_client_binding_smoke.py b/sdk/python/tests/test_client_binding_smoke.py
index 8b2922f2..33aab79e 100644
--- a/sdk/python/tests/test_client_binding_smoke.py
+++ b/sdk/python/tests/test_client_binding_smoke.py
@@ -51,7 +51,11 @@ def test_client_signs_outbound_request_via_core_sign_seam() -> None:
     # smoke asserts the transport emits a signed request carrying the RFC 9421
     # Signature-Input / Signature headers — the seam MCP adopts.
     signer_seed = bytes(range(1, 33))
-    transport = SigningTransport(signer_seed=signer_seed, keyid="agent.test.v1")
+    transport = SigningTransport(
+        signer_seed=signer_seed,
+        keyid="agent.test.v1",
+        signature_agent="https://agent.test",
+    )
 
     signed = transport.sign_outbound(
         method="POST",
diff --git a/sdk/python/tests/test_client_bounds.py b/sdk/python/tests/test_client_bounds.py
index 6d7b460b..23a45901 100644
--- a/sdk/python/tests/test_client_bounds.py
+++ b/sdk/python/tests/test_client_bounds.py
@@ -115,7 +115,11 @@ def _config(base_url: str) -> ClientConfig:
     return ClientConfig(
         base_url=base_url,
         requester=_REQUESTER,
-        signer=SigningTransport(signer_seed=_SEED, keyid="agent.v1"),
+        signer=SigningTransport(
+            signer_seed=_SEED,
+            keyid="agent.v1",
+            signature_agent="https://agent.test",
+        ),
     )
 
 
@@ -223,14 +227,16 @@ def test_the_delivery_deadline_covers_proof_minting() -> None:
     """
 
     class _SlowSigner(SigningTransport):
-        def sign_agent_binding(self, *, url: str, window: Any) -> tuple[str, str, str]:
+        def sign_agent_binding(self, *, url: str, window: Any) -> Any:
             time.sleep(0.3)
             return super().sign_agent_binding(url=url, window=window)
 
     config = ClientConfig(
         base_url="https://exchange.test",
         requester=_REQUESTER,
-        signer=_SlowSigner(signer_seed=_SEED, keyid="agent.v1"),
+        signer=_SlowSigner(
+            signer_seed=_SEED, keyid="agent.v1", signature_agent="https://agent.test"
+        ),
         content_timeout_sec=0.05,
     )
     with blocking.Client(config) as client, pytest.raises(CallError) as caught:
diff --git a/sdk/python/tests/test_client_request_parity.py b/sdk/python/tests/test_client_request_parity.py
index b76d5a8f..4bcd869b 100644
--- a/sdk/python/tests/test_client_request_parity.py
+++ b/sdk/python/tests/test_client_request_parity.py
@@ -63,7 +63,11 @@ def _config() -> ClientConfig:
     return ClientConfig(
         base_url="https://exchange.test",
         requester=_REQUESTER,
-        signer=SigningTransport(signer_seed=_AGENT_SEED, keyid="agent.v1"),
+        signer=SigningTransport(
+            signer_seed=_AGENT_SEED,
+            keyid="agent.v1",
+            signature_agent="https://agent.test",
+        ),
         endpoint_resolver=_Resolver(),
         # Register reads an Exchange's published requirements before it signs. What this
         # corpus records is the path and the envelope, so the read is stubbed to an
diff --git a/sdk/python/tests/test_client_scheme_guard.py b/sdk/python/tests/test_client_scheme_guard.py
index 4a615dc8..b45b4b02 100644
--- a/sdk/python/tests/test_client_scheme_guard.py
+++ b/sdk/python/tests/test_client_scheme_guard.py
@@ -52,7 +52,11 @@ def _config(**overrides: Any) -> ClientConfig:
     base: dict[str, Any] = {
         "base_url": "https://exchange.test",
         "requester": _REQUESTER,
-        "signer": SigningTransport(signer_seed=_SEED, keyid="agent.v1"),
+        "signer": SigningTransport(
+            signer_seed=_SEED,
+            keyid="agent.v1",
+            signature_agent="https://agent.test",
+        ),
     }
     base.update(overrides)
     return ClientConfig(**base)
diff --git a/sdk/python/tests/test_client_url_refusals.py b/sdk/python/tests/test_client_url_refusals.py
index 2e848e6b..9aea9965 100644
--- a/sdk/python/tests/test_client_url_refusals.py
+++ b/sdk/python/tests/test_client_url_refusals.py
@@ -68,7 +68,11 @@ def respond(_request: httpx.Request) -> httpx.Response:
     config = ClientConfig(
         base_url="https://exchange.test",
         requester={"id": "a", "domain": "agent.test", "type": "REQUESTER_TYPE_AGENT"},
-        signer=SigningTransport(signer_seed=bytes(range(32)), keyid="agent.v1"),
+        signer=SigningTransport(
+            signer_seed=bytes(range(32)),
+            keyid="agent.v1",
+            signature_agent="https://agent.test",
+        ),
     )
     client = blocking.Client(config, http=httpx.Client(transport=httpx.MockTransport(respond)))
     with client, pytest.raises(CallError) as caught:
diff --git a/sdk/python/tests/test_content_fetch_parity.py b/sdk/python/tests/test_content_fetch_parity.py
index ba98fd54..cad879f6 100644
--- a/sdk/python/tests/test_content_fetch_parity.py
+++ b/sdk/python/tests/test_content_fetch_parity.py
@@ -57,7 +57,11 @@ def respond(request: httpx.Request) -> httpx.Response:  # noqa: ARG001
     return Client(
         ClientConfig(
             base_url="https://exchange.test",
-            signer=SigningTransport(signer_seed=_AGENT_SEED, keyid="agent.v1"),
+            signer=SigningTransport(
+                signer_seed=_AGENT_SEED,
+                keyid="agent.v1",
+                signature_agent="https://agent.test",
+            ),
         ),
         http=httpx.AsyncClient(transport=httpx.MockTransport(respond)),
     )
@@ -105,7 +109,11 @@ def test_a_url_the_leg_will_not_dial_is_classified_the_way_the_oracle_classifies
     client = Client(
         ClientConfig(
             base_url="https://exchange.test",
-            signer=SigningTransport(signer_seed=_AGENT_SEED, keyid="agent.v1"),
+            signer=SigningTransport(
+                signer_seed=_AGENT_SEED,
+                keyid="agent.v1",
+                signature_agent="https://agent.test",
+            ),
         )
     )
     with pytest.raises(CallError) as excinfo:
diff --git a/sdk/python/tests/test_directory_response_parity.py b/sdk/python/tests/test_directory_response_parity.py
new file mode 100644
index 00000000..5129e210
--- /dev/null
+++ b/sdk/python/tests/test_directory_response_parity.py
@@ -0,0 +1,161 @@
+"""Key-directory response signatures (WG-00 §5.5, Appendix B.1) — Python replay of the
+Go oracle's directory-response-vectors.json.
+
+A key directory's response is signed once per key it lists, covering
+``"@authority";req`` and ``content-digest`` with
+``tag="http-message-signatures-directory"``. ``verify_directory_response`` must return,
+for every vector, exactly the thumbprints the oracle verified — or raise the error the
+oracle raised — and ``sign_directory_response`` must re-sign the vectors whose signer
+seeds are recorded byte for byte, the authentication page's example among them.
+"""
+
+from __future__ import annotations
+
+import base64
+import json
+from typing import Any
+
+import pytest
+from conftest import GO_TESTDATA, load_json
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+
+import fora_sdk
+from fora_sdk.directory_signature import (
+    DirectoryResponseDigestError,
+    DirectoryResponseUnsignedError,
+    sign_directory_response,
+    verify_directory_response,
+)
+from fora_sdk.wba import SignatureLifetimeError
+
+_VECTORS = load_json(GO_TESTDATA / "directory-response-vectors.json")["vectors"]
+
+#: The vectors signed, as recorded, by the seeds they carry for the authority they
+#: name. Every other vector was edited after signing, or — for
+#: signed_for_another_authority — signed for an authority it does not record.
+_RESIGNABLE = [
+    "doc_directory_example",
+    "two_keys_both_signed",
+    "two_keys_one_signed",
+    "expired",
+    "created_in_the_future",
+    "key_not_listed",
+]
+
+_ERRORS: dict[str, type[Exception]] = {
+    "digest_mismatch": DirectoryResponseDigestError,
+    "unsigned": DirectoryResponseUnsignedError,
+}
+
+
+def _b64url(s: str) -> bytes:
+    return base64.urlsafe_b64decode(s + "=" * (-len(s) % 4))
+
+
+def _headers(v: dict[str, Any]) -> dict[str, str]:
+    headers = {"content-digest": v["content_digest"]}
+    if v.get("signature_input"):
+        headers["signature-input"] = v["signature_input"]
+        headers["signature"] = v["signature"]
+    return headers
+
+
+def test_the_corpus_covers_every_case() -> None:
+    names = {v["name"] for v in _VECTORS}
+    assert (
+        set(_RESIGNABLE)
+        | {
+            "signed_for_another_authority",
+            "body_changed",
+            "unsigned",
+            "wrong_tag",
+            "no_authority_covered",
+        }
+        <= names
+    )
+
+
+@pytest.mark.parametrize("v", _VECTORS, ids=[v["name"] for v in _VECTORS])
+def test_verify_directory_response_matches_the_oracle(v: dict[str, Any]) -> None:
+    keys = [_b64url(k) for k in v["keys"]]
+
+    def verify() -> set[str]:
+        return verify_directory_response(
+            v["authority"], _headers(v), v["body"].encode(), keys, v["now"]
+        )
+
+    if v["expected_error"]:
+        with pytest.raises(_ERRORS[v["expected_error"]]):
+            verify()
+        return
+    assert sorted(verify()) == v["expected_verified"]
+
+
+@pytest.mark.parametrize("name", _RESIGNABLE)
+def test_sign_directory_response_reproduces_the_oracle(name: str) -> None:
+    v = next(x for x in _VECTORS if x["name"] == name)
+    signed = sign_directory_response(
+        v["authority"],
+        v["body"].encode(),
+        [bytes.fromhex(seed) for seed in v["signer_seeds_hex"]],
+        v["created"],
+        v["expires"],
+    )
+    assert signed.content_digest == v["content_digest"]
+    assert signed.signature_input == v["signature_input"]
+    assert signed.signature == v["signature"]
+
+
+def test_a_response_signed_for_one_authority_does_not_verify_under_another() -> None:
+    v = next(x for x in _VECTORS if x["name"] == "doc_directory_example")
+    keys = [_b64url(k) for k in v["keys"]]
+    assert verify_directory_response(
+        v["authority"], _headers(v), v["body"].encode(), keys, v["now"]
+    )
+    assert not verify_directory_response(
+        "other.example", _headers(v), v["body"].encode(), keys, v["now"]
+    )
+
+
+def test_a_publisher_signs_the_directory_it_builds() -> None:
+    # The identity helpers' usage: build the directory with directory_document, sign the
+    # exact body with every listed key, serve the three headers with it.
+    first, first_id = fora_sdk.generate_key()
+    second, second_id = fora_sdk.generate_key()
+    body = json.dumps(
+        fora_sdk.directory_document([first.public_key(), second.public_key()])
+    ).encode()
+    seeds = [first.private_bytes_raw(), second.private_bytes_raw()]
+
+    signed = fora_sdk.sign_directory_response("agent.example", body, seeds, 100, 200)
+
+    keys = [k.public_key().public_bytes_raw() for k in (first, second)]
+    verified = fora_sdk.verify_directory_response(
+        "agent.example", signed.headers(), body, keys, 150
+    )
+    assert verified == {first_id, second_id}
+
+
+@pytest.mark.parametrize(
+    ("authority", "seeds", "created", "expires", "error"),
+    [
+        ("", [bytes(32)], 1, 2, ValueError),
+        ("agent.example", [], 1, 2, ValueError),
+        ("agent.example", [bytes(32)], 0, 2, SignatureLifetimeError),
+        ("agent.example", [bytes(32)], 2, 2, SignatureLifetimeError),
+    ],
+    ids=["no_authority", "no_signer", "no_created", "empty_window"],
+)
+def test_sign_directory_response_refuses_what_it_cannot_sign(
+    authority: str, seeds: list[bytes], created: int, expires: int, error: type[Exception]
+) -> None:
+    with pytest.raises(error):
+        sign_directory_response(authority, b"{}", seeds, created, expires)
+
+
+def test_a_signature_by_a_key_the_body_does_not_list_verifies_nothing() -> None:
+    lister = Ed25519PrivateKey.generate()
+    stranger = Ed25519PrivateKey.generate()
+    signed = sign_directory_response("agent.example", b"{}", [stranger.private_bytes_raw()], 1, 9)
+    listed = [lister.public_key().public_bytes_raw()]
+    assert verify_directory_response("agent.example", signed.headers(), b"{}", listed, 5) == set()
diff --git a/sdk/python/tests/test_document_readers.py b/sdk/python/tests/test_document_readers.py
index 3315f8e1..b1c9cfe5 100644
--- a/sdk/python/tests/test_document_readers.py
+++ b/sdk/python/tests/test_document_readers.py
@@ -17,6 +17,7 @@
 from typing import TYPE_CHECKING
 
 import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 from resolvers_harness import (
     ANCHOR,
     LICENSE_PATH,
@@ -34,10 +35,12 @@
 from wire.models import License
 
 from fora_sdk import StrictViolationError, check_strict
+from fora_sdk.b64 import b64url_nopad
 from fora_sdk.resolvers import (
     MANIFEST_MEDIA_TYPE,
     WBA_DIRECTORY_MEDIA_TYPE,
     DigestMismatchError,
+    DirectoryResponseUnsignedError,
     DirectoryUnavailableError,
     ManifestVersionRefusedError,
     MediaTypeRefusedError,
@@ -65,6 +68,16 @@ def origin(monkeypatch: pytest.MonkeyPatch) -> Iterator[Origin]:
         served.close()
 
 
+@pytest.fixture
+def other() -> Iterator[Origin]:
+    """A second origin, the target of a redirect."""
+    served = Origin()
+    try:
+        yield served
+    finally:
+        served.close()
+
+
 def _license(origin: Origin, body: bytes = LICENSE_TEXT, method: str = "sha256") -> License:
     digest = hashlib.new(method, body).hexdigest()
     return License(uri=origin.license_url(), uri_digest=f"{method}:{digest}")
@@ -186,9 +199,34 @@ def test_read_wba_directory_by_domain_and_by_url(origin: Origin) -> None:
         assert doc.url == origin.url + WBA_DIR_PATH
 
 
-def test_read_wba_directory_refuses_plain_json(origin: Origin) -> None:
-    origin.set_wba(wba_file_json([active_jwk(make_key().x)]))  # served as application/json
-    with pytest.raises(MediaTypeRefusedError, match="application/jwk-set"):
+@pytest.mark.parametrize("served", ["application/json", "application/jwk-set+json", None])
+def test_read_wba_directory_refuses_any_other_media_type(
+    origin: Origin, served: str | None
+) -> None:
+    origin.set_wba(wba_file_json([active_jwk(make_key().x)]))
+    origin.set_content_type(WBA_DIR_PATH, served)
+    with pytest.raises(MediaTypeRefusedError, match="http-message-signatures-directory"):
+        read_wba_directory(origin.host, scheme="http")
+
+
+def test_read_wba_directory_refuses_a_key_that_did_not_sign_the_response(
+    origin: Origin,
+) -> None:
+    # One listed key signed, the other was minted outside the harness and did not: the
+    # public reader requires every listed key to have signed.
+    signed = make_key()
+    unsigned = Ed25519PrivateKey.generate().public_key().public_bytes_raw()
+    origin.set_wba(wba_file_json([active_jwk(signed.x), active_jwk(b64url_nopad(unsigned))]))
+    with pytest.raises(DirectoryResponseUnsignedError, match="1 of 2"):
+        read_wba_directory(origin.host, scheme="http")
+
+
+def test_read_wba_directory_refuses_a_redirect(origin: Origin, other: Origin) -> None:
+    # The directory's address is the origin its signer committed to: a redirect would
+    # hand key lookup to another one, so the reader never follows it.
+    other.set_wba(wba_file_json([active_jwk(make_key().x)]))
+    origin.set_redirect(WBA_DIR_PATH, other.url + WBA_DIR_PATH)
+    with pytest.raises(DirectoryUnavailableError):
         read_wba_directory(origin.host, scheme="http")
 
 
@@ -218,6 +256,15 @@ def test_read_revocation_list_returns_the_snapshot(origin: Origin) -> None:
     assert doc.url == origin.url + REVOCATION_PATH
 
 
+def test_read_revocation_list_follows_a_redirect(origin: Origin, other: Origin) -> None:
+    # Unlike a key directory, a revocation list may move: the reader follows the
+    # redirect to the document.
+    tp = make_key().tp
+    other.set_revocation(revocation_json(ANCHOR, [tp]))
+    origin.set_redirect(REVOCATION_PATH, other.revocation_url())
+    assert read_revocation_list(origin.revocation_url()).message.revoked == [tp]
+
+
 def test_read_revocation_list_refuses_an_unknown_member(origin: Origin) -> None:
     origin.set_revocation(json.dumps({"as_of": rfc3339(ANCHOR), "revoked": [], "next": "x"}))
     with pytest.raises(StrictViolationError, match="next"):
diff --git a/sdk/python/tests/test_guards_multisig_base_reuse.py b/sdk/python/tests/test_guards_multisig_base_reuse.py
index 8cb667c2..2adca0e3 100644
--- a/sdk/python/tests/test_guards_multisig_base_reuse.py
+++ b/sdk/python/tests/test_guards_multisig_base_reuse.py
@@ -1,22 +1,21 @@
 """Structural guard for the "forked signature-base builder" disease.
 
-DISEASE: the RFC 9421 5-component request signature-base
-(@method @target-uri content-digest authorization signature-agent) is rendered by
-hardcoding those lines. Before the multisig work there was exactly ONE such
-renderer -- ``_signature_base`` in ``fora_sdk/httpsig.py``. The multisig
-append/verify faces MUST compose that generalized builder (via its optional
-``chain_link`` arg), NOT fork a second copy of the 5-line template. A fork is how
-a future covered-component change silently drifts one path out of byte-parity with
-the Go oracle.
-
-This guard pins the invariant class-level: exactly one module under ``fora_sdk``
-renders the 5-component request base, and it is ``httpsig.py``. A new face that
-forks the template adds a second renderer and trips this guard.
-
-The 2-component GET-PoP base (``pop.py::signature_base``) is a DISTINCT byte
-contract and is intentionally NOT counted -- the fingerprint below requires the
-content-digest + authorization + signature-agent lines that only the 5-component
-request base carries, so the GET-PoP base never matches.
+DISEASE: the RFC 9421 request signature base is rendered by hardcoding its component
+lines (``"content-digest": {..}``, ``"authorization": {..}``,
+``"signature-agent": {..}``) instead of being built from the signature's covered set.
+A hardcoded template is how a covered-component change silently drifts one path out of
+byte-parity with the Go oracle — and under the Web Bot Auth profile the covered set is
+no longer fixed at all: the Signature-Agent line is a keyed member, and a signature that
+covers an earlier one adds that one's components.
+
+This guard pins the invariant class-level: NO module under ``fora_sdk`` renders the
+request base from a template. Every face that signs or verifies a request signature —
+the signer and the appender in ``httpsig.py``, the shared verification core in
+``_sigverify.py`` that the server faces use, and the delivery proof in ``pop.py`` —
+calls the one generic builder, ``_sigbase.build_signature_base``, which renders one
+line per covered component in the signature's own order. The key directory's response
+signature (``directory_signature.py``) is a DISTINCT byte contract over
+``"@authority";req`` and ``content-digest`` and never matches the fingerprint.
 
 The detector is REGEX-based and whitespace-tolerant on purpose; the
 "would-be-missed" meta-test feeds a reformatted fork and asserts it is still
@@ -29,10 +28,9 @@
 import re
 
 _FORA_SDK = pathlib.Path(__file__).resolve().parents[1] / "fora_sdk"
-_CANONICAL_RENDERER = "httpsig.py"
+_BUILDER = "build_signature_base"
 
-# The three signature-base lines that distinguish the 5-component request base
-# from the 2-component GET-PoP base.
+# The three signature-base lines a hardcoded request-base template carries.
 _FINGERPRINT: tuple[re.Pattern[str], ...] = (
     re.compile(r'"content-digest":\s*\{'),
     re.compile(r'"authorization":\s*\{'),
@@ -41,7 +39,7 @@
 
 
 def _renders_request_base(source: str) -> bool:
-    """Pure predicate: does this source render the 5-component request base?"""
+    """Pure predicate: does this source render the request base from a template?"""
     return all(pat.search(source) for pat in _FINGERPRINT)
 
 
@@ -54,20 +52,38 @@ def _request_base_renderers() -> list[str]:
 
 
 class TestNoForkedRequestSignatureBase:
-    def test_exactly_one_request_base_renderer(self) -> None:
-        assert _request_base_renderers() == [_CANONICAL_RENDERER]
+    def test_no_module_renders_the_request_base_from_a_template(self) -> None:
+        assert _request_base_renderers() == []
+
+    def test_the_generic_builder_is_defined_once(self) -> None:
+        defining = [
+            path.name
+            for path in sorted(_FORA_SDK.glob("*.py"))
+            if f"def {_BUILDER}(" in path.read_text(encoding="utf8")
+        ]
+        assert defining == ["_sigbase.py"]
 
     def test_multisig_verify_reuses_shared_base(self) -> None:
-        src = (_FORA_SDK / "server_verify.py").read_text(encoding="utf8")
-        assert not _renders_request_base(src)
-        # It must import + call the shared builder rather than re-render lines.
-        assert "_signature_base" in src
+        # The server faces verify through the shared core, which builds the base with
+        # the generic builder rather than re-rendering lines.
+        server = (_FORA_SDK / "server_verify.py").read_text(encoding="utf8")
+        assert not _renders_request_base(server)
+        assert "_sigverify" in server
+        core = (_FORA_SDK / "_sigverify.py").read_text(encoding="utf8")
+        assert _BUILDER in core
 
     def test_append_face_reuses_shared_base(self) -> None:
         src = (_FORA_SDK / "httpsig.py").read_text(encoding="utf8")
         assert "def append_signature" in src
-        append_body = src[src.index("def append_signature") :]
-        assert "_signature_base" in append_body
+        # Both the fresh and the appended signature go through _sign, the one place
+        # the generic builder is called on the signing side.
+        assert "_sign(" in src[src.index("def append_signature") :]
+        assert "_sign(" in src[src.index("def sign_request") : src.index("def append_signature")]
+        assert _BUILDER in src[src.index("def _sign(") :]
+
+    def test_delivery_proof_reuses_shared_base(self) -> None:
+        src = (_FORA_SDK / "pop.py").read_text(encoding="utf8")
+        assert src.count(_BUILDER) >= 2  # the sign face and the verify face
 
     # --- meta-tests: exercise the detector against synthetic source ----------
     def test_meta_positive_catches_forked_template(self) -> None:
diff --git a/sdk/python/tests/test_hostile_response_data.py b/sdk/python/tests/test_hostile_response_data.py
index 5d24e99e..9ac8fe76 100644
--- a/sdk/python/tests/test_hostile_response_data.py
+++ b/sdk/python/tests/test_hostile_response_data.py
@@ -113,7 +113,11 @@ def test_a_call_on_a_closed_client_is_a_typed_refusal() -> None:
     config = ClientConfig(
         base_url="https://exchange.test",
         requester={"id": "a", "domain": "agent.test", "type": "REQUESTER_TYPE_AGENT"},
-        signer=SigningTransport(signer_seed=bytes(range(32)), keyid="agent.v1"),
+        signer=SigningTransport(
+            signer_seed=bytes(range(32)),
+            keyid="agent.v1",
+            signature_agent="https://agent.test",
+        ),
     )
     client = blocking.Client(config)
     client.close()
@@ -212,7 +216,11 @@ def respond(request: httpx.Request) -> httpx.Response:  # noqa: ARG001
     config = ClientConfig(
         base_url="https://exchange.test",
         requester={"id": "a", "domain": "agent.test", "type": "REQUESTER_TYPE_AGENT"},
-        signer=SigningTransport(signer_seed=bytes(range(32)), keyid="agent.v1"),
+        signer=SigningTransport(
+            signer_seed=bytes(range(32)),
+            keyid="agent.v1",
+            signature_agent="https://agent.test",
+        ),
     )
     client = blocking.Client(config, http=httpx.Client(transport=httpx.MockTransport(respond)))
     with pytest.raises(CallError) as caught:
diff --git a/sdk/python/tests/test_identity_helpers.py b/sdk/python/tests/test_identity_helpers.py
index 4ab6facd..79078ec6 100644
--- a/sdk/python/tests/test_identity_helpers.py
+++ b/sdk/python/tests/test_identity_helpers.py
@@ -11,10 +11,12 @@
   that identity: the keyid is the key's thumbprint and Signature-Agent is the directory.
 
 The proof is the verify path, end to end. The directory document is served by a real
-in-process origin and parsed by ``WBAKeyResolver``. A request signed through the client
-with the transport the third helper built reaches a peer that resolves the caller's key
-from the covered Signature-Agent header, the way an Exchange does, and verifies the
-signature with ``verify_request_server``.
+in-process origin, signed by the keys it lists as the Web Bot Auth profile requires
+(the harness signs it with ``sign_directory_response``), and parsed by
+``WBAKeyResolver``. A request signed through the client with the transport the third
+helper built reaches a peer that resolves the caller's key in the directory the
+signature's covered Signature-Agent member names, the way an Exchange does, and
+verifies the signature with ``verify_request_server``.
 """
 
 from __future__ import annotations
@@ -25,14 +27,19 @@
 
 import pytest
 from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
-from resolvers_harness import Origin, loopback_client
+from resolvers_harness import Origin, loopback_client, register_directory_key
 from signed_peer import SignedPeer
 from test_client import _IDS, FACES, Face
 
 import fora_sdk
 from fora_sdk.b64 import b64url_nopad
 from fora_sdk.client import CallError, CallErrorKind, ClientConfig
-from fora_sdk.resolvers import ResolverError, UnknownKeyError, WBAKeyResolver
+from fora_sdk.resolvers import (
+    DirectoryUnavailableError,
+    ResolverError,
+    UnknownKeyError,
+    WBAKeyResolver,
+)
 from fora_sdk.signing_transport import SigningTransport
 from fora_sdk.thumbprint import thumbprint
 
@@ -59,24 +66,30 @@ def _resolver() -> WBAKeyResolver:
 
 
 class _DirectoryKeys:
-    """The KeyResolver an Exchange builds per request: the keyid resolved against the
-    directory the covered Signature-Agent header names. A key the directory does not
-    hold resolves to nothing, which the verifier reports as a signature failure."""
+    """The KeyResolver an Exchange wires: each keyid resolved in the directory the
+    signature's covered Signature-Agent member names. A key the directory does not hold
+    resolves to nothing, which the verifier reports as a signature failure."""
 
-    def __init__(self, wba: WBAKeyResolver, signature_agent: str) -> None:
+    def __init__(self, wba: WBAKeyResolver) -> None:
         self._wba = wba
-        self._directory = signature_agent.strip('"')
 
-    def resolve(self, keyid: str | None) -> bytes | None:
+    def resolve(self, keyid: str | None, directory: str) -> bytes | None:
         try:
-            return self._wba.resolve(keyid or "", self._directory)
+            return self._wba.resolve(keyid or "", directory)
         except ResolverError:
             return None
 
 
 def _exchange_peer() -> SignedPeer:
-    wba = _resolver()
-    return SignedPeer(keys=lambda agent: _DirectoryKeys(wba, agent))
+    keys = _DirectoryKeys(_resolver())
+    return SignedPeer(keys=lambda _agent: keys)
+
+
+def _minted() -> tuple[Ed25519PrivateKey, str]:
+    """A fresh identity whose key signs the served directory that lists it."""
+    key, keyid = fora_sdk.generate_key()
+    register_directory_key(key)
+    return key, keyid
 
 
 def _discover_as(face: Face, signer: SigningTransport, peer: SignedPeer) -> None:
@@ -128,23 +141,42 @@ def test_directory_document_carries_each_key_with_its_validity_window() -> None:
 
 
 def test_the_sdk_resolver_reads_every_key_of_a_served_document(origin: Origin) -> None:
-    first, first_id = fora_sdk.generate_key()
-    second, second_id = fora_sdk.generate_key()
+    first, first_id = _minted()
+    second, second_id = _minted()
     origin.set_wba(json.dumps(fora_sdk.directory_document([first.public_key(),
                                                            second.public_key()])))
     resolver = _resolver()
 
-    assert resolver.resolve(first_id, origin.url) == _raw(first)
-    assert resolver.resolve(second_id, origin.url) == _raw(second)
+    assert resolver.resolve(first_id, origin.origin) == _raw(first)
+    assert resolver.resolve(second_id, origin.origin) == _raw(second)
 
 
 def test_a_key_outside_the_served_document_does_not_resolve(origin: Origin) -> None:
-    listed, _ = fora_sdk.generate_key()
-    _, unlisted_id = fora_sdk.generate_key()
+    listed, _ = _minted()
+    _, unlisted_id = _minted()
     origin.set_wba(json.dumps(fora_sdk.directory_document([listed.public_key()])))
 
     with pytest.raises(UnknownKeyError):
-        _resolver().resolve(unlisted_id, origin.url)
+        _resolver().resolve(unlisted_id, origin.origin)
+
+
+def test_a_listed_key_that_did_not_sign_the_directory_does_not_resolve(origin: Origin) -> None:
+    # Both listed, only one signed the response: the resolver hands out only that one,
+    # and a directory nobody signed is a directory it cannot use at all.
+    signer, signer_id = _minted()
+    unsigned, unsigned_id = fora_sdk.generate_key()
+    origin.set_wba(
+        json.dumps(fora_sdk.directory_document([signer.public_key(), unsigned.public_key()]))
+    )
+    resolver = _resolver()
+
+    assert resolver.resolve(signer_id, origin.origin) == _raw(signer)
+    with pytest.raises(UnknownKeyError):
+        resolver.resolve(unsigned_id, origin.origin)
+
+    origin.set_wba(json.dumps(fora_sdk.directory_document([unsigned.public_key()])))
+    with pytest.raises(DirectoryUnavailableError):
+        _resolver().resolve(unsigned_id, origin.origin)
 
 
 # ---------------------------------------------------------------------------
@@ -162,7 +194,7 @@ def test_signing_transport_for_signs_as_the_identity() -> None:
     signed = transport.sign_outbound(
         method="POST", url="https://exchange.test/x", body=b"{}", authorization=""
     )
-    assert signed.headers["signature-agent"] == directory
+    assert signed.headers["signature-agent"] == f'sig1="{directory}"'
     assert f'keyid="{keyid}"' in signed.headers["signature-input"]
 
 
@@ -170,15 +202,16 @@ def test_signing_transport_for_signs_as_the_identity() -> None:
 def test_a_fresh_identity_is_accepted_by_a_verifier_reading_its_directory(
     face: Face, origin: Origin
 ) -> None:
-    key, keyid = fora_sdk.generate_key()
+    key, keyid = _minted()
     origin.set_wba(json.dumps(fora_sdk.directory_document([key.public_key()])))
     peer = _exchange_peer()
 
-    _discover_as(face, fora_sdk.signing_transport_for(key, origin.url), peer)
+    _discover_as(face, fora_sdk.signing_transport_for(key, origin.origin), peer)
 
     got = peer.only()
     assert got.verdict.valid, got.verdict.reason
-    assert got.header("signature-agent") == origin.url
+    assert got.verdict.signature_agent == origin.origin
+    assert got.header("signature-agent") == f'sig1="{origin.origin}"'
     assert f'keyid="{keyid}"' in (got.header("signature-input") or "")
 
 
@@ -187,13 +220,13 @@ def test_an_identity_its_directory_does_not_list_is_refused(face: Face, origin:
     """Signing with one fresh key while the served directory lists another: the peer
     resolves no key, the verifier refuses the signature, and the client reports the
     peer's refusal."""
-    listed, _ = fora_sdk.generate_key()
-    impostor, _ = fora_sdk.generate_key()
+    listed, _ = _minted()
+    impostor, _ = _minted()
     origin.set_wba(json.dumps(fora_sdk.directory_document([listed.public_key()])))
     peer = _exchange_peer()
 
     with pytest.raises(CallError) as caught:
-        _discover_as(face, fora_sdk.signing_transport_for(impostor, origin.url), peer)
+        _discover_as(face, fora_sdk.signing_transport_for(impostor, origin.origin), peer)
 
     got = peer.only()
     assert not got.verdict.valid
diff --git a/sdk/python/tests/test_multisig_chain_parity.py b/sdk/python/tests/test_multisig_chain_parity.py
index 15c08fad..a1a899b1 100644
--- a/sdk/python/tests/test_multisig_chain_parity.py
+++ b/sdk/python/tests/test_multisig_chain_parity.py
@@ -1,31 +1,31 @@
-"""sdk/python multisig forwarding-chain append+verify parity.
-
-Go carries the ONLY multisig surface today (helpers.AppendSignature,
-VerifyMultisigRequest[Resolved], hop budget); under the 3-SDKs decision a Python
-broker must append and verify chains too. This suite pins the NEW ported faces
-against the shared Go oracle.
-
-Core Invariant: the RFC 9421 signature base — including the parameterized
-``"signature";key="sigN"`` forwarding-chain component rendered as
-``:stdbase64(decoded-predecessor-signature-bytes):`` — must reconstruct
-BYTE-FOR-BYTE in Go and Python, so a chain signed in Go verifies in Python AND the
-hop-budget / broken-chain / tampered-predecessor rejections match the Go taxonomy
-token-for-token. The shared Go emitter is the sole oracle.
-
-Faces under test (do NOT exist yet — RED):
-  - ``fora_sdk.httpsig.append_signature`` — chains sig(N+1) onto a prior
-    (signature_input, signature) WITHOUT disturbing existing members; appending to
-    an unsigned request (empty prev) is byte-identical to ``sign_request`` (N=1).
-  - ``fora_sdk.server_verify.verify_multisig_request_server`` — parses ALL labels,
-    enforces the hop budget FIRST (hop_budget), the structural chain next
-    (broken_chain), then verifies each hop (signature); returns a verdict carrying
-    the verified keyids in chain order, never raises.
-
-Reject precedence the verdict must expose (mirrors Go verify.go): hop_budget →
-broken_chain → signature.
-
-RED until BOTH faces exist: the imports below reference not-yet-existing symbols,
-so pytest fails at collection with ImportError — a clean TDD-red signal.
+"""sdk/python multi-signature append + verify parity under the Web Bot Auth profile.
+
+Core Invariant: a request carrying several signatures — an agent's and a Broker's, or
+a forwarder's on top — reconstructs BYTE-FOR-BYTE in Go and Python, so a set signed in
+Go verifies in Python and the hop-budget / broken-chain / signature rejections match
+the Go taxonomy token for token. The shared Go emitter is the sole oracle
+(multisig-chain-vectors.json).
+
+Each signature names its own key directory: it adds a member ``<label>="<origin>"`` to
+the Signature-Agent dictionary and covers it as ``"signature-agent";key="<label>"``.
+The verifier resolves each keyid in the directory THAT signature's member names. The
+resolver in this suite is therefore keyed by (directory, keyid): a port that resolved a
+signature through another signature's member would find no key and fail
+``wrong_directory_member``'s neighbours, and every positive case asserts the directories
+the verdict reports.
+
+A signature covers an earlier one only when its signer forwards the request unchanged
+(``cover_previous``); then it must cover it completely — every component it lists, its
+Signature member and its Signature-Input member — and the earlier one must come first.
+Labels carry no meaning.
+
+Faces under test:
+  - ``fora_sdk.httpsig.append_signature`` — adds a signature beside the earlier ones,
+    WITHOUT disturbing them; appending to an unsigned request is byte-identical to
+    ``sign_request``.
+  - ``fora_sdk.server_verify.verify_multisig_request_server`` — enforces the hop budget
+    FIRST (hop_budget), coverage completeness next (broken_chain), then verifies each
+    signature (signature); returns the keyids and directories in header order.
 """
 
 from __future__ import annotations
@@ -36,13 +36,22 @@
 
 from conftest import GO_TESTDATA, load_json
 
-# RED: neither symbol exists yet (TDD red step).
-from fora_sdk.httpsig import append_signature  # type: ignore[attr-defined]
-from fora_sdk.keyresolver import StaticKeyResolver
-from fora_sdk.server_verify import verify_multisig_request_server  # type: ignore[attr-defined]
+from fora_sdk.httpsig import append_signature, sign_request
+from fora_sdk.server_verify import verify_multisig_request_server
+from fora_sdk.wba import SignatureAgentFormError, SignatureLabelError
 
 _VECTORS = load_json(GO_TESTDATA / "multisig-chain-vectors.json")["vectors"]
 
+#: The vectors the oracle built only by signing and appending, hop by hop, so a port
+#: re-signing the hops in order must reproduce them byte for byte. The others were
+#: edited after signing (reordered, stripped, tampered, repointed) and cannot be.
+_RESIGNABLE = [
+    str(v["name"])
+    for v in _VECTORS
+    if str(v["name"]).startswith(("positive_", "hop_budget_", "absent_authorization", "duplicate_"))
+    or v["name"] == "canonical_case_two"
+]
+
 
 def _by_name(name: str) -> dict[str, object]:
     for v in _VECTORS:
@@ -56,31 +65,53 @@ def _b64url_nopad_decode(s: str) -> bytes:
     return base64.urlsafe_b64decode(s + pad)
 
 
-def _resolver(hops: list[dict[str, object]]) -> StaticKeyResolver:
-    keys = {str(h["keyid"]): _b64url_nopad_decode(str(h["pubkey_b64url"])) for h in hops}
-    return StaticKeyResolver(keys)
+class _DirectoryKeyedResolver:
+    """A KeyResolver that answers only for the directory each key is published in."""
+
+    def __init__(self, hops: list[dict[str, object]]) -> None:
+        self._keys = {
+            (str(h["directory"]), str(h["keyid"])): _b64url_nopad_decode(str(h["pubkey_b64url"]))
+            for h in hops
+        }
+        self.calls: list[tuple[str, str | None]] = []
 
+    def resolve(self, keyid: str | None, directory: str) -> bytes | None:
+        self.calls.append((directory, keyid))
+        return self._keys.get((directory, str(keyid)))
 
-def test_vector_set_covers_the_positive_and_every_negative_chain_case() -> None:
+
+def test_vector_set_covers_the_positive_and_every_negative_case() -> None:
     names = {v["name"] for v in _VECTORS}
     assert {
-        "positive_two_hop",
-        "hop_budget_three_over_two",
-        "broken_chain_reordered",
-        "broken_chain_stripped_middle",
-        "broken_chain_missing_link",
-        "tampered_predecessor",
-        # The same chains missing a covered header — which pin WHERE that is
-        # noticed relative to the budget and chain gates, not only that it is.
-        "absent_authorization_two_hop",
+        "positive_independent_two",
+        "positive_covering_two",
+        "positive_covering_three",
+        "positive_covering_two_nonce",
+        "hop_budget_three_independent_over_two",
+        "hop_budget_three_covering_over_two",
+        "broken_coverage_reordered",
+        "broken_coverage_stripped",
+        "broken_coverage_without_signature_input",
+        "broken_coverage_missing_component",
+        # A signature that names another signature's member, the legacy String form on
+        # two signatures, a tampered first signature, and a member repointed after
+        # signing: each resolves the wrong directory or no key, and is refused.
+        "wrong_directory_member",
+        "legacy_form_on_two_signatures",
+        "tampered_first_independent",
+        "tampered_first_covered",
+        "repointed_second_member",
+        # The same sets missing a covered header — which pin WHERE that is noticed
+        # relative to the budget and coverage gates, not only that it is.
+        "absent_authorization_two",
         "absent_authorization_over_budget",
         "absent_signature_agent_reordered",
-        # How a covered header is READ on a chain: a second field line beside the
-        # signed one, a bag spelled the conventional way, and a chain whose covered
-        # value IS the join of two lines.
-        "duplicate_authorization_two_hop",
-        "canonical_case_two_hop",
-        "duplicate_bound_two_hop",
+        # How a covered header is READ: a second field line beside the signed one, a
+        # bag spelled the conventional way, and a set whose covered value IS the join
+        # of two lines.
+        "duplicate_authorization_two",
+        "canonical_case_two",
+        "duplicate_bound_two",
     } <= names
 
 
@@ -106,220 +137,232 @@ def _headers_for(v: dict[str, object]) -> dict[str, str]:
     return headers
 
 
-def test_positive_two_hop_verifies_and_returns_keyids_in_order() -> None:
-    # POSITIVE: the Go-signed 2-hop chain verifies through the Python face and
-    # returns the verified keyids in chain order (sig1 agent, sig2 broker).
-    v = _by_name("positive_two_hop")
+def _verify(v: dict[str, object], **overrides: object) -> object:
     now = (int(v["created"]) + int(v["expires"])) // 2  # type: ignore[call-overload]
-    verdict = verify_multisig_request_server(
-        method=str(v["method"]),
-        url=str(v["url"]),
-        body=bytes.fromhex(str(v["body_hex"])),
-        headers={
-            "content-digest": str(v["content_digest"]),
-            "signature-input": str(v["signature_input"]),
-            "signature": str(v["signature"]),
-            "authorization": str(v["authorization"]),
-            "signature-agent": str(v["signature_agent"]),
-        },
-        resolver=_resolver(v["hops"]),  # type: ignore[arg-type]
-        now=now,
-    )
-    assert verdict.valid is True  # type: ignore[attr-defined]
-    assert list(verdict.keyids) == list(v["expected_keyids"])  # type: ignore[attr-defined]
+    kwargs: dict[str, object] = {
+        "method": str(v["method"]),
+        "url": str(v["url"]),
+        "body": bytes.fromhex(str(v["body_hex"])),
+        "headers": _headers_for(v),
+        "resolver": _DirectoryKeyedResolver(v["hops"]),  # type: ignore[arg-type]
+        "now": now,
+        "max_signatures": int(v["max_signatures"]),  # type: ignore[call-overload]
+    }
+    kwargs.update(overrides)
+    return verify_multisig_request_server(**kwargs)  # type: ignore[arg-type]
+
 
+_NEGATIVE = [str(v["name"]) for v in _VECTORS if not v["expected_verified"]]
+_POSITIVE = [str(v["name"]) for v in _VECTORS if v["expected_verified"]]
 
-@pytest.mark.parametrize("name", ["positive_two_hop", "positive_two_hop_nonce"])
-def test_append_signature_reproduces_the_go_two_hop_chain_byte_identically(name: str) -> None:
-    # BYTE-IDENTITY: re-signing the chain live (sign_request sig1 + append_signature
-    # sig2) under the Go hop seeds reproduces the Go-emitted Signature-Input and
-    # Signature byte-for-byte — the cross-language chain-link contract. The nonce
-    # case also pins each hop's RFC 9421 nonce in the parameter tail.
-    from fora_sdk.httpsig import sign_request
 
+@pytest.mark.parametrize("name", _NEGATIVE, ids=_NEGATIVE)
+def test_negative_case_rejects_with_go_reason(name: str) -> None:
+    # NEGATIVE: each Go-emitted reject case rejects with the exact taxonomy token,
+    # honoring the hop_budget → broken_chain → signature precedence in the vectors.
     v = _by_name(name)
-    hops = v["hops"]  # type: ignore[index]
-    h1, h2 = hops[0], hops[1]  # type: ignore[index]
-    body = bytes.fromhex(str(v["body_hex"]))
-
-    sig1 = sign_request(
-        method=str(v["method"]),
-        url=str(v["url"]),
-        body=body,
-        authorization=str(v["authorization"]),
-        signer_seed=bytes.fromhex(str(h1["seed_hex"])),
-        keyid=str(h1["keyid"]),
-        created=int(v["created"]),  # type: ignore[call-overload]
-        expires=int(v["expires"]),  # type: ignore[call-overload]
-        signature_agent=str(v["signature_agent"]),
-        nonce=str(h1.get("nonce", "")),  # type: ignore[union-attr]
-    )
+    verdict = _verify(v)
+    assert verdict.valid is False  # type: ignore[attr-defined]
+    assert verdict.reason == str(v["expected_reason"])  # type: ignore[attr-defined]
 
-    chained = append_signature(
-        method=str(v["method"]),
-        url=str(v["url"]),
-        body=body,
-        authorization=str(v["authorization"]),
-        signature_agent=str(v["signature_agent"]),
-        prev_signature_input=sig1.signature_input,
-        prev_signature=sig1.signature,
-        signer_seed=bytes.fromhex(str(h2["seed_hex"])),
-        keyid=str(h2["keyid"]),
-        created=int(v["created"]),  # type: ignore[call-overload]
-        expires=int(v["expires"]),  # type: ignore[call-overload]
-        nonce=str(h2.get("nonce", "")),  # type: ignore[union-attr]
-    )
 
-    assert chained.signature_input == str(v["signature_input"])
-    assert chained.signature == str(v["signature"])
+@pytest.mark.parametrize("name", _POSITIVE, ids=_POSITIVE)
+def test_positive_case_verifies_with_go_keyids_and_directories(name: str) -> None:
+    # POSITIVE: every Go-emitted set the oracle ACCEPTS verifies here too, returning the
+    # same keyids and the same directories in header order. The rejects above cannot
+    # stand in for this: a face that refuses everything passes all of them.
+    v = _by_name(name)
+    verdict = _verify(v)
+    assert verdict.valid is True, f"{name}: {verdict.reason}"  # type: ignore[attr-defined]
+    assert list(verdict.keyids) == list(v["expected_keyids"])  # type: ignore[attr-defined]
+    assert list(verdict.directories) == list(v["expected_directories"])  # type: ignore[attr-defined]
 
 
-def test_append_to_unsigned_request_equals_sign_request_n1() -> None:
-    # N=1 INVARIANT: appending to an unsigned request (empty prev) is byte-identical
-    # to sign_request — the load-bearing single-sig-is-N=1 property.
-    from fora_sdk.httpsig import sign_request
+def test_each_key_is_resolved_in_its_own_signers_directory() -> None:
+    v = _by_name("positive_covering_two")
+    resolver = _DirectoryKeyedResolver(v["hops"])  # type: ignore[arg-type]
+    verdict = _verify(v, resolver=resolver)
+    assert verdict.valid is True  # type: ignore[attr-defined]
+    assert resolver.calls == [
+        (str(h["directory"]), str(h["keyid"]))
+        for h in v["hops"]  # type: ignore[union-attr]
+    ]
+
+
+def _resign(v: dict[str, object]) -> tuple[str, str, str]:
+    """Replay the vector's hops in order through append_signature, with each hop's own
+    directory, nonce and cover_previous, under the vector's window and Authorization.
+
+    On a set the oracle ACCEPTS, an extra Authorization line beside the base one was
+    there when it signed, so the covered value is the join of both, the way the verifier
+    reads them. On a set it refuses, the extra line was slipped in after signing."""
+    lines = [str(v["authorization"])]
+    extra = (v.get("extra_headers") or {}).get("Authorization")  # type: ignore[union-attr]
+    omitted = "Authorization" in (v.get("omit_headers") or [])  # type: ignore[operator]
+    if v["expected_verified"] and extra is not None and not omitted:
+        lines.append(str(extra))
+    authorization = ", ".join(lines)
+    signature_input = signature = signature_agent = ""
+    for hop in v["hops"]:  # type: ignore[union-attr]
+        signed = append_signature(
+            method=str(v["method"]),
+            url=str(v["url"]),
+            body=bytes.fromhex(str(v["body_hex"])),
+            authorization=authorization,
+            signer_seed=bytes.fromhex(str(hop["seed_hex"])),
+            keyid=str(hop["keyid"]),
+            created=int(v["created"]),  # type: ignore[call-overload]
+            expires=int(v["expires"]),  # type: ignore[call-overload]
+            signature_agent=str(hop["directory"]),
+            prev_signature_input=signature_input,
+            prev_signature=signature,
+            prev_signature_agent=signature_agent,
+            nonce=str(hop.get("nonce", "")),
+            cover_previous=bool(hop.get("cover_previous")),
+        )
+        signature_input, signature = signed.signature_input, signed.signature
+        signature_agent = signed.signature_agent
+    return signature_input, signature, signature_agent
+
+
+@pytest.mark.parametrize("name", _RESIGNABLE, ids=_RESIGNABLE)
+def test_append_signature_reproduces_the_go_set_byte_identically(name: str) -> None:
+    # BYTE-IDENTITY: re-signing the hops live reproduces the Go-emitted Signature-Input,
+    # Signature and Signature-Agent byte for byte — the cross-language contract for the
+    # member each hop adds and for a complete coverage of the hop before it.
+    v = _by_name(name)
+    signature_input, signature, signature_agent = _resign(v)
+    assert signature_input == str(v["signature_input"])
+    assert signature == str(v["signature"])
+    assert signature_agent == str(v["signature_agent"])
 
-    v = _by_name("positive_two_hop")
+
+def test_append_to_unsigned_request_equals_sign_request_n1() -> None:
+    # N=1 INVARIANT: appending to an unsigned request is byte-identical to sign_request,
+    # and cover_previous is a no-op when there is no earlier signature.
+    v = _by_name("positive_covering_two")
     h1 = v["hops"][0]  # type: ignore[index]
-    body = bytes.fromhex(str(v["body_hex"]))
     common = {
         "method": str(v["method"]),
         "url": str(v["url"]),
-        "body": body,
+        "body": bytes.fromhex(str(v["body_hex"])),
         "authorization": str(v["authorization"]),
-        "signature_agent": str(v["signature_agent"]),
+        "signature_agent": str(h1["directory"]),
         "signer_seed": bytes.fromhex(str(h1["seed_hex"])),
         "keyid": str(h1["keyid"]),
         "created": int(v["created"]),  # type: ignore[call-overload]
         "expires": int(v["expires"]),  # type: ignore[call-overload]
     }
     signed = sign_request(**common)  # type: ignore[arg-type]
-    appended = append_signature(prev_signature_input="", prev_signature="", **common)  # type: ignore[arg-type]
-    assert appended.signature_input == signed.signature_input
-    assert appended.signature == signed.signature
-
-
-#: The reject cases, DERIVED from the corpus rather than hand-listed. A hand-written
-#: name list is how a vector lands and is never replayed — the corpus grew the
-#: duplicate-header plumbing and sat unexercised because nothing enumerated it. Every
-#: row the emitter adds is now driven the day it is committed.
-_NEGATIVE = [str(v["name"]) for v in _VECTORS if not v["expected_verified"]]
-_POSITIVE = [str(v["name"]) for v in _VECTORS if v["expected_verified"]]
+    for cover in (False, True):
+        appended = append_signature(cover_previous=cover, **common)  # type: ignore[arg-type]
+        assert appended.signature_input == signed.signature_input
+        assert appended.signature == signed.signature
+        assert appended.signature_agent == signed.signature_agent
 
 
-@pytest.mark.parametrize("name", _NEGATIVE, ids=_NEGATIVE)
-def test_negative_chain_case_rejects_with_go_reason(name: str) -> None:
-    # NEGATIVE: each Go-emitted chain reject case rejects (valid=False) with the
-    # exact taxonomy token, honoring the hop_budget → broken_chain → signature
-    # precedence encoded in the vectors.
-    v = _by_name(name)
-    now = (int(v["created"]) + int(v["expires"])) // 2  # type: ignore[call-overload]
-    verdict = verify_multisig_request_server(
-        method=str(v["method"]),
-        url=str(v["url"]),
-        body=bytes.fromhex(str(v["body_hex"])),
-        headers=_headers_for(v),
-        resolver=_resolver(v["hops"]),  # type: ignore[arg-type]
-        now=now,
-        max_signatures=int(v["max_signatures"]),  # type: ignore[call-overload]
-    )
-    assert verdict.valid is False  # type: ignore[attr-defined]
-    assert verdict.reason == str(v["expected_reason"])  # type: ignore[attr-defined]
+def _first_hop(v: dict[str, object]) -> dict[str, object]:
+    h1 = v["hops"][0]  # type: ignore[index]
+    return {
+        "method": str(v["method"]),
+        "url": str(v["url"]),
+        "body": bytes.fromhex(str(v["body_hex"])),
+        "authorization": str(v["authorization"]),
+        "signer_seed": bytes.fromhex(str(h1["seed_hex"])),
+        "keyid": str(h1["keyid"]),
+        "created": int(v["created"]),  # type: ignore[call-overload]
+        "expires": int(v["expires"]),  # type: ignore[call-overload]
+    }
 
 
-@pytest.mark.parametrize("name", _POSITIVE, ids=_POSITIVE)
-def test_positive_chain_case_verifies_with_go_keyids(name: str) -> None:
-    # POSITIVE: every Go-emitted chain the oracle ACCEPTS verifies here too, returning
-    # the same keyids in chain order. The rejects above cannot stand in for this: a
-    # face that refuses everything passes all of them. This is what catches a reader
-    # that resolves a covered header to one field line where the oracle joins, and a
-    # reader that matches header names case-sensitively where the wire does not.
-    v = _by_name(name)
-    now = (int(v["created"]) + int(v["expires"])) // 2  # type: ignore[call-overload]
-    verdict = verify_multisig_request_server(
-        method=str(v["method"]),
-        url=str(v["url"]),
-        body=bytes.fromhex(str(v["body_hex"])),
-        headers=_headers_for(v),
-        resolver=_resolver(v["hops"]),  # type: ignore[arg-type]
-        now=now,
-        max_signatures=int(v["max_signatures"]),  # type: ignore[call-overload]
+def test_append_takes_the_first_label_no_signature_or_member_uses() -> None:
+    # The label is the first sigN not used by Signature-Input, Signature, or a
+    # Signature-Agent member: a member "sig2" already present pushes the new one to sig3.
+    common = _first_hop(_by_name("positive_covering_two"))
+    first = sign_request(signature_agent="https://agent.example", **common)  # type: ignore[arg-type]
+    appended = append_signature(
+        signature_agent="https://broker.example",
+        prev_signature_input=first.signature_input,
+        prev_signature=first.signature,
+        prev_signature_agent=first.signature_agent + ', sig2="https://other.example"',
+        **common,  # type: ignore[arg-type]
     )
-    assert verdict.valid is True, f"{name}: {verdict.reason}"  # type: ignore[attr-defined]
-    assert list(verdict.keyids) == list(v["expected_keyids"])  # type: ignore[attr-defined]
-
-
-def _positive_two_hop_call(
+    assert appended.signature_input.split(", ")[-1].startswith("sig3=(")
+    assert appended.signature_agent.endswith('sig3="https://broker.example"')
+
+
+def test_append_refuses_a_label_already_in_use() -> None:
+    common = _first_hop(_by_name("positive_covering_two"))
+    first = sign_request(signature_agent="https://agent.example", **common)  # type: ignore[arg-type]
+    with pytest.raises(SignatureLabelError):
+        append_signature(
+            signature_agent="https://broker.example",
+            prev_signature_input=first.signature_input,
+            prev_signature=first.signature,
+            prev_signature_agent=first.signature_agent,
+            label="sig1",
+            **common,  # type: ignore[arg-type]
+        )
+
+
+@pytest.mark.parametrize("legacy", ['"https://agent.example"', "https://agent.example"])
+def test_append_refuses_a_signature_agent_that_is_not_a_dictionary(legacy: str) -> None:
+    # The legacy String form and the bare v1.0.8 value cannot take a second member, and
+    # rewriting them would break the earlier signature.
+    common = _first_hop(_by_name("positive_covering_two"))
+    with pytest.raises(SignatureAgentFormError):
+        append_signature(
+            signature_agent="https://broker.example",
+            prev_signature_input='sig1=("@method");keyid="k";alg="ed25519"',
+            prev_signature="sig1=:AA==:",
+            prev_signature_agent=legacy,
+            **common,  # type: ignore[arg-type]
+        )
+
+
+def _positive_two_call(
     *, extra_headers: dict[str, str] | None = None, max_signature_age: int = 0
 ) -> object:
-    # Build the verify_multisig_request_server call for the positive_two_hop chain,
-    # letting a test inject an extra header (e.g. an uncovered entitlement token) or
-    # a max_signature_age lifetime clamp. Returns the verdict.
-    v = _by_name("positive_two_hop")
-    now = (int(v["created"]) + int(v["expires"])) // 2  # type: ignore[call-overload]
-    headers = {
-        "content-digest": str(v["content_digest"]),
-        "signature-input": str(v["signature_input"]),
-        "signature": str(v["signature"]),
-        "authorization": str(v["authorization"]),
-        "signature-agent": str(v["signature_agent"]),
-    }
-    if extra_headers:
-        headers.update(extra_headers)
-    return verify_multisig_request_server(
-        method=str(v["method"]),
-        url=str(v["url"]),
-        body=bytes.fromhex(str(v["body_hex"])),
-        headers=headers,
-        resolver=_resolver(v["hops"]),  # type: ignore[arg-type]
-        now=now,
-        max_signature_age=max_signature_age,
-    )
+    v = _by_name("positive_covering_two")
+    headers = _headers_for(v)
+    headers.update(extra_headers or {})
+    return _verify(v, headers=headers, max_signature_age=max_signature_age)
 
 
-def test_multisig_uncovered_entitlement_header_is_rejected_per_hop() -> None:
-    # A relayed 2-hop request carrying an uncovered X-Entitlement-Token
-    # header must be REJECTED with reason "signature" — the per-hop entitlement
-    # coverage check (mirrors the single-sig neg_entitlement_uncovered case). The
-    # positive chain's covered sets do NOT include x-entitlement-token, so slipping
-    # an unsigned entitlement token under the valid hop signatures must fail closed.
-    verdict = _positive_two_hop_call(
+def test_multisig_uncovered_entitlement_header_is_rejected_per_signature() -> None:
+    # A request carrying an uncovered X-Entitlement-Token is REJECTED with reason
+    # "signature": neither signature covers it, so an unsigned entitlement token
+    # cannot be slipped under them. The refusal names what the verifier requires.
+    verdict = _positive_two_call(
         extra_headers={"X-Entitlement-Token": "jwt:demo-unsigned-entitlement-token"}
     )
     assert verdict.valid is False  # type: ignore[attr-defined]
     assert verdict.reason == "signature"  # type: ignore[attr-defined]
+    assert "x-entitlement-token" in (verdict.accept_signature or "")  # type: ignore[attr-defined]
 
 
 def test_multisig_covered_entitlement_absent_header_still_verifies() -> None:
-    # CONTROL: without the entitlement header, the positive chain verifies — the
-    # per-hop coverage check is a no-op when the header is absent.
-    verdict = _positive_two_hop_call()
+    # CONTROL: without the entitlement header, the set verifies.
+    verdict = _positive_two_call()
     assert verdict.valid is True  # type: ignore[attr-defined]
 
 
 def test_multisig_signature_within_max_age_bound_verifies() -> None:
-    # Lifetime clamp — WITHIN the bound: the positive chain's declared window is 600s;
-    # a 700s clamp admits it.
-    verdict = _positive_two_hop_call(max_signature_age=700)
-    assert verdict.valid is True  # type: ignore[attr-defined]
+    # Lifetime clamp — WITHIN the bound: the declared window is 300s; 400s admits it.
+    assert _positive_two_call(max_signature_age=400).valid is True  # type: ignore[attr-defined]
 
 
 def test_multisig_signature_equal_to_max_age_bound_verifies() -> None:
-    # Lifetime clamp — EQUAL to the bound (inclusive): a 600s clamp admits the 600s
-    # window (mirrors Go's `> maxAge` rejection — equality passes).
-    verdict = _positive_two_hop_call(max_signature_age=600)
-    assert verdict.valid is True  # type: ignore[attr-defined]
+    # Lifetime clamp — EQUAL to the bound (inclusive), as Go's `> maxAge` reject.
+    assert _positive_two_call(max_signature_age=300).valid is True  # type: ignore[attr-defined]
 
 
 def test_multisig_signature_exceeding_max_age_bound_is_rejected() -> None:
-    # Lifetime clamp — EXCEEDING the bound: a 500s clamp rejects the 600s window with
-    # reason "signature" (per-hop, mirrors Go ErrSignatureLifetimeTooLong).
-    verdict = _positive_two_hop_call(max_signature_age=500)
+    # Lifetime clamp — EXCEEDING the bound: a 200s clamp rejects the 300s window.
+    verdict = _positive_two_call(max_signature_age=200)
     assert verdict.valid is False  # type: ignore[attr-defined]
     assert verdict.reason == "signature"  # type: ignore[attr-defined]
 
 
 def test_multisig_unbounded_max_age_default_verifies() -> None:
-    # Lifetime clamp — UNBOUNDED default (0 / omitted): the 600s window is admitted.
-    verdict = _positive_two_hop_call(max_signature_age=0)
-    assert verdict.valid is True  # type: ignore[attr-defined]
+    assert _positive_two_call(max_signature_age=0).valid is True  # type: ignore[attr-defined]
diff --git a/sdk/python/tests/test_multisig_parse_edge.py b/sdk/python/tests/test_multisig_parse_edge.py
index 993c2fbf..9c9d611f 100644
--- a/sdk/python/tests/test_multisig_parse_edge.py
+++ b/sdk/python/tests/test_multisig_parse_edge.py
@@ -1,36 +1,29 @@
-"""sdk/python multi-member Signature-Input parser parse-edge units.
-
-The canonical Go golden vectors (multisig-chain-vectors.json) are well-behaved
-(no comma/paren inside a quoted keyid, no backslash escapes, canonical
-whitespace), so passing every vector does NOT gate the Python parser's
-correctness on an ADVERSARIAL Signature-Input. Go itself delegates the dictionary
-parse to dunglas/httpsfv and only hand-rolls the verbatim-inner split
-(raw_inner_by_label / split_top_level_members). The Python port hand-rolls both,
-so these parse-edge units are the correct level (parser primitives → unit tests)
-— they pin the exact quoted-string / backslash-escape / top-level-comma behavior
-the RFC 8941 dictionary grammar requires.
-
-Faces under test (do NOT exist yet — RED):
-  fora_sdk.multisig_parse.split_top_level_members — split one SFV dictionary
-    header value on TOP-LEVEL commas, honoring quoted strings + backslash escapes
-    (mirrors Go splitTopLevelMembers).
-  fora_sdk.multisig_parse.raw_inner_by_label — the VERBATIM member value after
-    ``label=`` for each label (mirrors Go rawInnerByLabel), so each hop's base
-    terminates with the signer's exact @signature-params bytes.
-  fora_sdk.multisig_parse.parse_multisig_signature_input — full multi-label parse;
-    returns None (clean reject) on a malformed header, never a mis-slice.
+"""Signature-Input parse-edge units: the verbatim-inner split and the clean refusal.
+
+The canonical Go golden vectors are well-behaved (no comma or paren inside a quoted
+keyid, no backslash escapes, canonical whitespace), so passing every vector does NOT
+gate correctness on an ADVERSARIAL Signature-Input. Go delegates the dictionary parse
+to dunglas/httpsfv and hand-rolls only the verbatim-inner split
+(rawInnerByLabel / splitTopLevelMembers); Python parses with fora_sdk.sfv and keeps the
+same split. These parser units pin the quoted-string / backslash-escape / top-level
+comma behavior the RFC 8941 dictionary grammar requires.
 
-RED until fora_sdk/multisig_parse.py exists: the import raises ImportError.
+Faces under test:
+  fora_sdk.multisig_parse.split_top_level_members — split one SFV dictionary header
+    value on TOP-LEVEL commas, honoring quoted strings and backslash escapes.
+  fora_sdk.multisig_parse.raw_inner_by_label — the VERBATIM member value after
+    ``label=`` for each label, so each signature's base terminates with the signer's
+    exact @signature-params bytes.
+  fora_sdk._sigbase.parse_all_signatures — the full multi-label parse; refuses a
+    malformed header outright, never a mis-slice.
 """
 
 from __future__ import annotations
 
-# RED: fora_sdk.multisig_parse does not exist yet (TDD red step).
-from fora_sdk.multisig_parse import (  # type: ignore[import-not-found]
-    parse_multisig_signature_input,
-    raw_inner_by_label,
-    split_top_level_members,
-)
+import pytest
+
+from fora_sdk._sigbase import SignatureCheckError, parse_all_signatures
+from fora_sdk.multisig_parse import raw_inner_by_label, split_top_level_members
 
 
 def test_splits_on_top_level_commas_into_one_member_per_label() -> None:
@@ -74,7 +67,19 @@ def test_preserves_the_verbatim_inner_value_per_label() -> None:
 
 
 def test_cleanly_rejects_a_malformed_header_rather_than_mis_slicing() -> None:
-    # An unterminated inner list must be REJECTED (None), not partially sliced into
-    # a bogus covered set.
+    # An unterminated inner list must be REFUSED, not partially sliced into a bogus
+    # covered set.
     malformed = 'sig1=("@method" "@target-uri";keyid="agent.v1"'
-    assert parse_multisig_signature_input([malformed]) is None
+    with pytest.raises(SignatureCheckError) as caught:
+        parse_all_signatures({"signature-input": malformed, "signature": "sig1=:AA==:"})
+    assert caught.value.reason == "malformed_sig_input"
+
+
+def test_a_comma_inside_a_quoted_keyid_parses_to_two_signatures() -> None:
+    headers = {
+        "signature-input": 'a=("@method");keyid="x,y", b=("@method");keyid="z"',
+        "signature": "a=:AA==:, b=:AQ==:",
+    }
+    params, sig_map = parse_all_signatures(headers)
+    assert [(p.label, p.keyid) for p in params] == [("a", "x,y"), ("b", "z")]
+    assert sig_map == {"a": b"\x00", "b": b"\x01"}
diff --git a/sdk/python/tests/test_pop_sign_helper.py b/sdk/python/tests/test_pop_sign_helper.py
index 2a2c104c..09d4e833 100644
--- a/sdk/python/tests/test_pop_sign_helper.py
+++ b/sdk/python/tests/test_pop_sign_helper.py
@@ -1,9 +1,8 @@
-"""Sub-task A — fora_sdk.pop.sign_agent_binding + top-level __all__.
+"""fora_sdk.pop.sign_agent_binding — the delivery proof's sign face — and its refusals.
 
-The sign oracle is the pop-vectors.json 'valid' vector: it carries
-signer_seed_hex (the raw seed of the key that produced the stored signature),
-so the sign face re-signs the same inputs and byte-compares against the stored
-Signature-Input / Signature (deterministic Ed25519).
+The sign oracle is the pop-vectors.json 'valid' vector: it carries signer_seed_hex,
+agent_directory and nonce, so the sign face re-signs the same inputs and byte-compares
+the four header values against the stored ones (Ed25519 is deterministic).
 """
 
 from __future__ import annotations
@@ -14,16 +13,23 @@
 
 from conftest import GO_TESTDATA, load_json
 
-from fora_sdk.pop import sign_agent_binding, verify_agent_binding
+from fora_sdk.pop import AGENT_KEY_HEADER, sign_agent_binding, verify_agent_binding
+from fora_sdk.wba import (
+    InvalidNonceError,
+    SignatureAgentNotOriginError,
+    SignatureAgentRequiredError,
+    SignatureLifetimeError,
+)
 
 _POP_VECTORS = load_json(GO_TESTDATA / "pop-vectors.json")
+_DIRECTORY = "https://agent.example"
 
 
 def _valid_vector() -> dict[str, object]:
-    """Return the 'valid' pop vector (expected_valid=True)."""
+    """Return the 'valid' pop vector (expected_valid=True, with a nonce)."""
     for v in _POP_VECTORS:
-        if v.get("expected_valid"):
-            return v  # type: ignore[return-value]
+        if v["name"] == "valid":
+            return v  # type: ignore[no-any-return]
     raise KeyError("no valid pop vector found")
 
 
@@ -41,119 +47,107 @@ def _parse_created_expires(signature_input: str) -> tuple[int, int]:
     return int(created_m.group(1)), int(expires_m.group(1))
 
 
+def _sign_valid(**overrides: object) -> object:
+    v = _valid_vector()
+    created, expires = _parse_created_expires(str(v["signature_input"]))
+    kwargs: dict[str, object] = {
+        "url": str(v["url"]),
+        "signer_seed": _seed_of(v),
+        "created": created,
+        "expires": expires,
+        "signature_agent": str(v["agent_directory"]),
+        "nonce": str(v["nonce"]),
+    }
+    kwargs.update(overrides)
+    return sign_agent_binding(**kwargs)  # type: ignore[arg-type]
+
+
 # ---- (a) sign vs oracle ---------------------------------------------------
 
 
 def test_sign_agent_binding_matches_go_oracle() -> None:
-    """sign_agent_binding with the oracle seed reproduces the stored signature byte-for-byte."""
+    """The oracle seed, directory and nonce reproduce the four stored values."""
     v = _valid_vector()
-    sig_input_raw = str(v["signature_input"])
-    created, expires = _parse_created_expires(sig_input_raw)
-    url = str(v["url"])
-
-    presented_key, sig_input_value, sig_value = sign_agent_binding(
-        url=url,
-        signer_seed=_seed_of(v),
-        created=created,
-        expires=expires,
-    )
-
-    # The oracle emitted presented_key_b64url and the Signature-Input / Signature header
-    # values.  Assert exact byte-for-byte parity (deterministic Ed25519).
-    assert presented_key == str(v["presented_key_b64url"]), (
-        f"presented key mismatch: got {presented_key!r}, want {v['presented_key_b64url']!r}"
-    )
-    assert sig_input_value == sig_input_raw, (
-        f"Signature-Input mismatch:\n  got  {sig_input_value!r}\n  want {sig_input_raw!r}"
-    )
-    assert sig_value == str(v["signature"]), (
-        f"Signature mismatch: got {sig_value!r}, want {v['signature']!r}"
-    )
+    binding = _sign_valid()
+    assert binding.agent_key == str(v["presented_key_b64url"])  # type: ignore[attr-defined]
+    assert binding.signature_agent == str(v["signature_agent"])  # type: ignore[attr-defined]
+    assert binding.signature_input == str(v["signature_input"])  # type: ignore[attr-defined]
+    assert binding.signature == str(v["signature"])  # type: ignore[attr-defined]
+
+
+def test_the_binding_headers_are_the_four_the_edge_reads() -> None:
+    binding = _sign_valid()
+    assert binding.headers() == {  # type: ignore[attr-defined]
+        AGENT_KEY_HEADER: binding.agent_key,  # type: ignore[attr-defined]
+        "signature-agent": binding.signature_agent,  # type: ignore[attr-defined]
+        "signature-input": binding.signature_input,  # type: ignore[attr-defined]
+        "signature": binding.signature,  # type: ignore[attr-defined]
+    }
 
 
 # ---- (b) round-trip through verify_agent_binding -------------------------
 
 
 def test_sign_then_verify_round_trips() -> None:
-    """Signing then immediately verifying (within the window) returns ok=True."""
+    """Signing then verifying within the window succeeds and names the directory."""
     v = _valid_vector()
-    sig_input_raw = str(v["signature_input"])
-    created, expires = _parse_created_expires(sig_input_raw)
-    url = str(v["url"])
-    agent_id = str(v["agent_id"])
-
-    presented_key, sig_input_value, sig_value = sign_agent_binding(
-        url=url,
-        signer_seed=_seed_of(v),
-        created=created,
-        expires=expires,
-    )
-
-    headers = {
-        "x-fora-agent-key": presented_key,
-        "signature-input": sig_input_value,
-        "signature": sig_value,
-    }
+    created, _ = _parse_created_expires(str(v["signature_input"]))
+    binding = _sign_valid()
     result = verify_agent_binding(
         method="GET",
-        url=url,
-        headers=headers,
-        agent_id=agent_id,
-        now=created + 1,  # within the window
+        url=str(v["url"]),
+        headers=binding.headers(),  # type: ignore[attr-defined]
+        agent_id=str(v["agent_id"]),
+        now=created + 1,
     )
-    assert result.ok is True, f"verify rejected a freshly-signed PoP: {result.reason}"
-
+    assert result.ok is True, f"verify rejected a freshly-signed proof: {result.reason}"
+    assert result.signature_agent == str(v["agent_directory"])
 
-# ---- (c) negative: expired window rejects --------------------------------
 
-
-@pytest.mark.parametrize(
-    "now_offset",
-    [1],  # 1 second past expires
-    ids=["1s_past_expires"],
-)
-def test_sign_agent_binding_rejects_when_expired(now_offset: int) -> None:
-    """verify_agent_binding rejects a valid signature when now >= expires."""
+def test_sign_agent_binding_rejects_when_expired() -> None:
+    """verify_agent_binding rejects a valid signature once now reaches expires."""
     v = _valid_vector()
-    sig_input_raw = str(v["signature_input"])
-    created, expires = _parse_created_expires(sig_input_raw)
-    url = str(v["url"])
-    agent_id = str(v["agent_id"])
-
-    presented_key, sig_input_value, sig_value = sign_agent_binding(
-        url=url,
-        signer_seed=_seed_of(v),
-        created=created,
-        expires=expires,
+    _, expires = _parse_created_expires(str(v["signature_input"]))
+    binding = _sign_valid()
+    result = verify_agent_binding(
+        method="GET",
+        url=str(v["url"]),
+        headers=binding.headers(),  # type: ignore[attr-defined]
+        agent_id=str(v["agent_id"]),
+        now=expires + 1,
     )
+    assert result.ok is False
+    assert result.reason == "pop_expired"
 
-    headers = {
-        "x-fora-agent-key": presented_key,
-        "signature-input": sig_input_value,
-        "signature": sig_value,
-    }
+
+def test_a_proof_whose_member_was_repointed_does_not_verify() -> None:
+    """The member is covered: moving it to another directory breaks the signature."""
+    v = _valid_vector()
+    created, _ = _parse_created_expires(str(v["signature_input"]))
+    headers = _sign_valid().headers()  # type: ignore[attr-defined]
+    headers["signature-agent"] = 'sig1="https://evil.example"'
     result = verify_agent_binding(
         method="GET",
-        url=url,
+        url=str(v["url"]),
         headers=headers,
-        agent_id=agent_id,
-        now=expires + now_offset,  # past the window
+        agent_id=str(v["agent_id"]),
+        now=created + 1,
     )
-    assert result.ok is False, "verify should reject an expired PoP"
-    assert result.reason is not None
+    assert result.ok is False
+    assert result.reason == "pop_sig_invalid"
 
 
 # ---- top-level re-export -------------------------------------------------
 
 
 def test_sign_agent_binding_in_fora_sdk_all() -> None:
-    """fora_sdk.__all__ includes sign_agent_binding after the implement step."""
+    """fora_sdk.__all__ includes sign_agent_binding."""
     import fora_sdk
 
     assert "sign_agent_binding" in fora_sdk.__all__
 
 
-# ---- control bytes in the target URI -------------------------------------
+# ---- refusals before anything is signed ----------------------------------
 
 
 @pytest.mark.parametrize(
@@ -172,22 +166,42 @@ def test_sign_agent_binding_refuses_control_bytes_in_the_url(url: str) -> None:
     The signature base is line-delimited and the URL is written into it verbatim,
     so a newline would add or split a component line and the signed bytes would
     stop describing the request a verifier reconstructs. Mirrors the Go signer's
-    refusal (helpers.SignAgentBinding / ErrInvalidPoPInput); Python raises rather
-    than exporting a sentinel, which is the mapped-correct shape.
-
-    Parametrized rather than looped so a regression names the offending case: in a
-    loop, a DID-NOT-RAISE failure reports the line and not which URL reached it.
+    refusal (helpers.SignAgentBinding / ErrInvalidPoPInput).
     """
     seed = bytes(range(32))
     with pytest.raises(ValueError, match="control byte"):
-        sign_agent_binding(url=url, signer_seed=seed, created=1, expires=2)
+        sign_agent_binding(
+            url=url, signer_seed=seed, created=1, expires=2, signature_agent=_DIRECTORY
+        )
+
+
+@pytest.mark.parametrize(
+    ("overrides", "error"),
+    [
+        ({"signature_agent": ""}, SignatureAgentRequiredError),
+        ({"signature_agent": "https://agent.example/"}, SignatureAgentNotOriginError),
+        ({"signature_agent": "http://agent.example"}, SignatureAgentNotOriginError),
+        ({"created": 100, "expires": 401}, SignatureLifetimeError),
+        ({"created": 100, "expires": 100}, SignatureLifetimeError),
+        ({"nonce": "not base64url!"}, InvalidNonceError),
+    ],
+    ids=["no_directory", "directory_with_path", "plain_http", "too_long", "empty", "bad_nonce"],
+)
+def test_sign_agent_binding_refuses_what_no_profile_proof_carries(
+    overrides: dict[str, object], error: type[Exception]
+) -> None:
+    with pytest.raises(error):
+        _sign_valid(**overrides)
 
 
 def test_sign_agent_binding_still_signs_an_ordinary_url() -> None:
-    """The refusal is narrow: a normal URL, and a percent-encoded one, still sign."""
+    """The refusals are narrow: a normal URL, and a percent-encoded one, still sign."""
     seed = bytes(range(32))
     for url in ("https://cdn.test/a?agent_id=x", "https://cdn.test/a%20b%2Fc"):
-        key, sig_input, sig = sign_agent_binding(
-            url=url, signer_seed=seed, created=1, expires=2
+        binding = sign_agent_binding(
+            url=url, signer_seed=seed, created=1, expires=2, signature_agent=_DIRECTORY
         )
-        assert key and sig_input.startswith("sig1=") and sig.startswith("sig1=:")
+        assert binding.agent_key
+        assert binding.signature_input.startswith("sig1=")
+        assert binding.signature.startswith("sig1=:")
+        assert binding.signature_agent == f'sig1="{_DIRECTORY}"'
diff --git a/sdk/python/tests/test_readme_agent_example.py b/sdk/python/tests/test_readme_agent_example.py
index e209b4f9..5598a6ce 100644
--- a/sdk/python/tests/test_readme_agent_example.py
+++ b/sdk/python/tests/test_readme_agent_example.py
@@ -33,6 +33,8 @@
 import pytest
 from exchange_harness import fake_exchange
 
+from fora_sdk.client import CallError, CallErrorKind
+
 if TYPE_CHECKING:
     from collections.abc import Iterator
 
@@ -272,12 +274,13 @@ def test_the_readme_names_the_directory_the_exchange_resolves_against(
 def test_an_agent_that_names_no_directory_is_refused(
     exchange: FakeExchange, monkeypatch: pytest.MonkeyPatch
 ) -> None:
-    """Drop signature_agent and the first RPC fails, with nothing bought.
+    """Drop signature_agent and the first RPC is refused locally, with nothing sent.
 
     This is the negative path for the whole identity step, and it is the failure a
-    reader following the README used to walk into. Signature-Agent defaults to empty,
-    the signature covers it either way, and an Exchange reading an empty value has no
-    directory to fetch the caller's key from. The reference Exchange answers 401.
+    reader following the README used to walk into. Every Web Bot Auth signature names
+    its signer's key directory, so a signer given none refuses to sign, and the client
+    reports the call as malformed before it reaches the Exchange — instead of the 401
+    an Exchange with nowhere to look up the key would answer.
 
     Asserted through the README's own entry point with one constructor argument
     removed, rather than by driving the transport directly, so it fails if the README
@@ -293,7 +296,9 @@ def unnamed(*, signer_seed: bytes, keyid: str, signature_agent: str = "") -> Any
 
     namespace["SigningTransport"] = unnamed
 
-    with pytest.raises(Exception, match="unauthenticated|401"):
+    with pytest.raises(CallError) as caught:
         namespace["buy_and_fetch"](exchange=exchange.domain, uri=_URI, seed=_SEED)
 
-    assert exchange.seen == [], "nothing may be bought by a caller the Exchange cannot identify"
+    assert caught.value.kind is CallErrorKind.MALFORMED
+    assert "Signature-Agent" in str(caught.value)
+    assert exchange.seen == [], "nothing may be sent by a caller that names no directory"
diff --git a/sdk/python/tests/test_resolvers_wba_debounce.py b/sdk/python/tests/test_resolvers_wba_debounce.py
index e6ec3c10..07cf29f0 100644
--- a/sdk/python/tests/test_resolvers_wba_debounce.py
+++ b/sdk/python/tests/test_resolvers_wba_debounce.py
@@ -24,10 +24,12 @@
 from resolvers_harness import (
     ANCHOR,
     HOUR,
+    WBA_MEDIA_TYPE,
     MutableClock,
     long_jwk,
     loopback_client,
     make_key,
+    signed_directory_headers,
     wba_file_json,
 )
 
@@ -68,7 +70,10 @@ def do_GET(self) -> None:  # BaseHTTPRequestHandler method contract
                     self.end_headers()
                     return
                 self.send_response(200)
-                self.send_header("content-type", "application/json")
+                self.send_header("content-type", WBA_MEDIA_TYPE)
+                authority = (self.headers.get("Host") or "").lower()
+                for name, value in signed_directory_headers(authority, doc).items():
+                    self.send_header(name, value)
                 self.end_headers()
                 self.wfile.write(doc)
 
diff --git a/sdk/python/tests/test_resolvers_wba_integration.py b/sdk/python/tests/test_resolvers_wba_integration.py
index 4041cc27..6abedb29 100644
--- a/sdk/python/tests/test_resolvers_wba_integration.py
+++ b/sdk/python/tests/test_resolvers_wba_integration.py
@@ -54,7 +54,7 @@ def test_wba_active() -> None:
     origin.set_wba(wba_file_json([active_jwk(k.x)]))
     try:
         r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
-        assert r.resolve(k.tp, origin.url) == k.raw_pub
+        assert r.resolve(k.tp, origin.origin) == k.raw_pub
     finally:
         origin.close()
 
@@ -66,7 +66,7 @@ def test_wba_key_expired() -> None:
     try:
         r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
         with pytest.raises(KeyExpiredError):
-            r.resolve(k.tp, origin.url)
+            r.resolve(k.tp, origin.origin)
     finally:
         origin.close()
 
@@ -78,7 +78,7 @@ def test_wba_unknown_key() -> None:
     try:
         r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
         with pytest.raises(UnknownKeyError):
-            r.resolve("absent-thumbprint", origin.url)
+            r.resolve("absent-thumbprint", origin.origin)
     finally:
         origin.close()
 
@@ -91,7 +91,7 @@ def test_wba_key_revoked() -> None:
     try:
         r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
         with pytest.raises(KeyRevokedError):
-            r.resolve(k.tp, origin.url)
+            r.resolve(k.tp, origin.origin)
     finally:
         origin.close()
 
@@ -105,11 +105,11 @@ def test_wba_rotation_self_heal() -> None:
         r = WBAKeyResolver(
             http=loopback_client(), scheme="http", ttl=HOUR, now=MutableClock(ANCHOR)
         )
-        assert r.resolve(k1.tp, origin.url) == k1.raw_pub
+        assert r.resolve(k1.tp, origin.origin) == k1.raw_pub
         origin.set_wba(wba_file_json([active_jwk(k1.x), active_jwk(k2.x)]))  # rotate k2 in
         # Cache still holds k1-only, so the k2 lookup must trigger a self-heal
         # re-fetch even before the TTL expires.
-        assert r.resolve(k2.tp, origin.url) == k2.raw_pub
+        assert r.resolve(k2.tp, origin.origin) == k2.raw_pub
     finally:
         origin.close()
 
@@ -125,12 +125,12 @@ def test_wba_revocation_rollback_ignored() -> None:
         clock = MutableClock(ANCHOR)
         r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
         with pytest.raises(KeyRevokedError):
-            r.resolve(k.tp, origin.url)
+            r.resolve(k.tp, origin.origin)
         # Publish a rolled-back (older as_of) snapshot that drops the revocation.
         origin.set_revocation(revocation_json(ANCHOR - HOUR, []))
         clock.t = ANCHOR + 2 * HOUR  # expire TTL → re-fetch + revocation refresh
         with pytest.raises(KeyRevokedError):
-            r.resolve(k.tp, origin.url)
+            r.resolve(k.tp, origin.origin)
     finally:
         origin.close()
 
@@ -145,10 +145,10 @@ def test_wba_revocation_forward_progress_applied() -> None:
         clock = MutableClock(ANCHOR)
         r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
         with pytest.raises(KeyRevokedError):
-            r.resolve(k.tp, origin.url)
+            r.resolve(k.tp, origin.origin)
         origin.set_revocation(revocation_json(ANCHOR + HOUR, []))
         clock.t = ANCHOR + 2 * HOUR  # expire TTL
-        assert r.resolve(k.tp, origin.url) == k.raw_pub
+        assert r.resolve(k.tp, origin.origin) == k.raw_pub
     finally:
         origin.close()
 
@@ -163,11 +163,11 @@ def test_wba_first_poll_far_future_as_of_clamp() -> None:
     try:
         clock = MutableClock(ANCHOR)
         r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
-        assert r.resolve(k.tp, origin.url) == k.raw_pub  # prime
+        assert r.resolve(k.tp, origin.origin) == k.raw_pub  # prime
         clock.t = ANCHOR + 2 * HOUR
         origin.set_revocation(revocation_json(ANCHOR + 2 * HOUR, [k.tp]))
         with pytest.raises(KeyRevokedError):
-            r.resolve(k.tp, origin.url)
+            r.resolve(k.tp, origin.origin)
     finally:
         origin.close()
 
@@ -181,12 +181,12 @@ def test_wba_removal_is_not_revocation() -> None:
     try:
         clock = MutableClock(ANCHOR)
         r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
-        assert r.resolve(k1.tp, origin.url) == k1.raw_pub
+        assert r.resolve(k1.tp, origin.origin) == k1.raw_pub
         origin.set_wba(wba_file_json([long_jwk(k2.x)]))  # drop k1
         clock.t = ANCHOR + 2 * HOUR  # expire TTL → re-fetch k1-less directory
         # Removal is a fall-through UnknownKeyError, never a KeyRevokedError.
         with pytest.raises(UnknownKeyError):
-            r.resolve(k1.tp, origin.url)
+            r.resolve(k1.tp, origin.origin)
     finally:
         origin.close()
 
@@ -201,7 +201,7 @@ def test_wba_revocation_url_host_not_anchored() -> None:
     try:
         r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
         # Not anchored → not polled → key resolves.
-        assert r.resolve(k.tp, origin.url) == k.raw_pub
+        assert r.resolve(k.tp, origin.origin) == k.raw_pub
     finally:
         origin.close()
         evil.close()
@@ -232,9 +232,9 @@ def test_wba_ttl_cache_hit() -> None:
         r = WBAKeyResolver(
             http=loopback_client(), scheme="http", ttl=HOUR, now=MutableClock(ANCHOR)
         )
-        assert r.resolve(k.tp, origin.url) == k.raw_pub
+        assert r.resolve(k.tp, origin.origin) == k.raw_pub
         origin.set_wba_status(500)  # origin now fails; cached hit must still succeed
-        assert r.resolve(k.tp, origin.url) == k.raw_pub
+        assert r.resolve(k.tp, origin.origin) == k.raw_pub
     finally:
         origin.close()
 
@@ -248,7 +248,7 @@ def test_wba_fetch_error_directory_unavailable_distinct_from_unknown() -> None:
     try:
         r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
         with pytest.raises(DirectoryUnavailableError) as exc:
-            r.resolve("any-thumbprint", origin.url)
+            r.resolve("any-thumbprint", origin.origin)
         assert not isinstance(exc.value, UnknownKeyError)
     finally:
         origin.close()
@@ -282,14 +282,14 @@ def test_wba_run_poller_applies_revocation() -> None:
     thread.start()
     try:
         # Prime the directory + empty revocation snapshot.
-        assert r.resolve(k.tp, origin.url) == k.raw_pub
+        assert r.resolve(k.tp, origin.origin) == k.raw_pub
 
         # Publish a newer snapshot revoking the key, then cross one poll boundary.
         origin.set_revocation(revocation_json(ANCHOR, [k.tp]))
         signals.cross_one(clk, 2 * poll_interval)
 
         with pytest.raises(KeyRevokedError):
-            r.resolve(k.tp, origin.url)
+            r.resolve(k.tp, origin.origin)
     finally:
         stop.set()
         origin.close()
diff --git a/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py b/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py
index 6b249f60..25de67a5 100644
--- a/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py
+++ b/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py
@@ -23,9 +23,11 @@
 from typing import TYPE_CHECKING, Any
 
 import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 from resolvers_harness import (
     ANCHOR,
     HOUR,
+    WBA_DIR_PATH,
     Origin,
     loopback_client,
     make_key,
@@ -33,6 +35,7 @@
     wba_jwk,
 )
 
+from fora_sdk.b64 import b64url_nopad
 from fora_sdk.resolvers import create_wba_offer_directory_fetch
 
 if TYPE_CHECKING:
@@ -53,6 +56,11 @@ def _serve_directory(o: Origin) -> str:
     return key.x
 
 
+def _unregistered_x() -> str:
+    """A key no test registered with the harness signer, so nothing signs for it."""
+    return b64url_nopad(Ed25519PrivateKey.generate().public_key().public_bytes_raw())
+
+
 def _run(o: Origin, **kwargs: Any) -> Any:
     """Fetch ``o``'s directory through the factory, injecting the loopback client.
 
@@ -82,6 +90,20 @@ def test_resolves_a_served_directory(origin: Origin) -> None:
         ("forbidden", lambda o: o.set_wba_status(403)),
         ("not_json", lambda o: o.set_wba("this is not json")),
         ("json_but_not_a_directory", lambda o: o.set_wba('{"keys": "not a list"}')),
+        # The Web Bot Auth profile's own refusals: a directory served under another
+        # media type, one reached through a redirect, and one nobody signed.
+        (
+            "jwk_set_media_type",
+            lambda o: (
+                _serve_directory(o),
+                o.set_content_type(WBA_DIR_PATH, "application/jwk-set+json"),
+            ),
+        ),
+        ("redirected", lambda o: o.set_redirect(WBA_DIR_PATH, o.url + "/elsewhere")),
+        (
+            "unsigned",
+            lambda o: o.set_wba(wba_file_json([wba_jwk(_unregistered_x(), ANCHOR, ANCHOR + HOUR)])),
+        ),
     ],
 )
 def test_every_failure_is_contained_as_none(
@@ -90,8 +112,9 @@ def test_every_failure_is_contained_as_none(
     """Transport, status and decode failures all return None and none raises.
 
     ``absent`` is the origin's 404. The two statuses cover the fail-closed halt
-    fetch_strict makes of any non-200. The last two are the decode arm: a body that
-    is not JSON, and a body that is JSON and not a directory.
+    fetch_strict makes of any non-200. The next two are the decode arm: a body that
+    is not JSON, and a body that is JSON and not a directory. The last three are the
+    profile: the wrong media type, a redirect, and a response no listed key signed.
     """
     arrange(origin)
     assert _run(origin) is None, f"{name} should be contained as None"
diff --git a/sdk/python/tests/test_resolvers_wba_profile.py b/sdk/python/tests/test_resolvers_wba_profile.py
new file mode 100644
index 00000000..7373982c
--- /dev/null
+++ b/sdk/python/tests/test_resolvers_wba_profile.py
@@ -0,0 +1,177 @@
+"""WBAKeyResolver under the Web Bot Auth profile — the Python port of the Go oracle's
+sdk/go/resolvers/wbakeyresolver_profile_test.go.
+
+A key directory is fetched with no redirect, must be served as
+``application/http-message-signatures-directory+json``, and only the keys that signed
+its response are handed out. A member is an https origin; the resolver reaches the
+plaintext in-process origin through its scheme override. The last case drives a real
+two-signature request through ``verify_multisig_request_server`` with this resolver,
+each key published only in its own signer's directory.
+"""
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING
+
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from resolvers_harness import (
+    ANCHOR,
+    HOUR,
+    WBA_DIR_PATH,
+    MutableClock,
+    Origin,
+    active_jwk,
+    loopback_client,
+    register_directory_key,
+    wba_file_json,
+)
+
+from fora_sdk.b64 import b64url_nopad
+from fora_sdk.httpsig import append_signature, sign_request
+from fora_sdk.resolvers import (
+    DirectoryUnavailableError,
+    KeyExpiredError,
+    UnknownKeyError,
+    WBAKeyResolver,
+)
+from fora_sdk.server_verify import verify_multisig_request_server
+from fora_sdk.thumbprint import thumbprint
+
+if TYPE_CHECKING:
+    from collections.abc import Iterator
+
+_URL = "https://exchange.example/fora.v1.ExchangeService/ExecuteTransaction"
+_BODY = b'{"idempotency_key":"idem-1"}'
+_CREATED = int(ANCHOR.timestamp())
+
+
+@pytest.fixture
+def origin() -> Iterator[Origin]:
+    o = Origin()
+    yield o
+    o.close()
+
+
+@pytest.fixture
+def other() -> Iterator[Origin]:
+    o = Origin()
+    yield o
+    o.close()
+
+
+def _resolver() -> WBAKeyResolver:
+    return WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+
+
+def _key(*, signs: bool) -> tuple[Ed25519PrivateKey, str, str]:
+    """A key, its base64url x and thumbprint; registered with the harness signer when
+    it ``signs`` the directories that list it."""
+    priv = Ed25519PrivateKey.generate()
+    if signs:
+        register_directory_key(priv)
+    raw = priv.public_key().public_bytes_raw()
+    return priv, b64url_nopad(raw), thumbprint(raw)
+
+
+def test_only_keys_that_signed_the_response_are_handed_out(origin: Origin) -> None:
+    _, signed_x, signed_tp = _key(signs=True)
+    _, unsigned_x, unsigned_tp = _key(signs=False)
+    origin.set_wba(wba_file_json([active_jwk(signed_x), active_jwk(unsigned_x)]))
+    r = _resolver()
+
+    assert r.resolve(signed_tp, origin.origin) is not None
+    with pytest.raises(UnknownKeyError):
+        r.resolve(unsigned_tp, origin.origin)
+
+
+def test_a_member_origin_is_fetched_over_the_override_scheme(origin: Origin) -> None:
+    # The member names an https origin; the resolver built with scheme="http" fetches
+    # that origin's directory over http, and a resolver left at https cannot reach it.
+    _, x, tp = _key(signs=True)
+    origin.set_wba(wba_file_json([active_jwk(x)]))
+    assert _resolver().resolve(tp, origin.origin) is not None
+    with pytest.raises(DirectoryUnavailableError):
+        WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR)).resolve(tp, origin.origin)
+
+
+@pytest.mark.parametrize("served", ["application/jwk-set+json", "application/json", None])
+def test_a_directory_served_under_another_media_type_is_unavailable(
+    origin: Origin, served: str | None
+) -> None:
+    _, x, tp = _key(signs=True)
+    origin.set_wba(wba_file_json([active_jwk(x)]))
+    origin.set_content_type(WBA_DIR_PATH, served)
+    with pytest.raises(DirectoryUnavailableError):
+        _resolver().resolve(tp, origin.origin)
+
+
+def test_a_directory_reached_through_a_redirect_is_unavailable(
+    origin: Origin, other: Origin
+) -> None:
+    # The injected loopback client follows redirects; the directory fetch refuses them
+    # whatever the client's policy, so the key published at the target is never read.
+    _, x, tp = _key(signs=True)
+    other.set_wba(wba_file_json([active_jwk(x)]))
+    origin.set_redirect(WBA_DIR_PATH, other.url + WBA_DIR_PATH)
+    with pytest.raises(DirectoryUnavailableError):
+        _resolver().resolve(tp, origin.origin)
+
+
+def test_each_signature_resolves_in_its_own_directory(origin: Origin, other: Origin) -> None:
+    agent, agent_x, agent_tp = _key(signs=True)
+    broker, broker_x, broker_tp = _key(signs=True)
+    origin.set_wba(wba_file_json([active_jwk(agent_x)]))
+    other.set_wba(wba_file_json([active_jwk(broker_x)]))
+    common = {
+        "method": "POST",
+        "url": _URL,
+        "body": _BODY,
+        "authorization": "",
+        "created": _CREATED,
+        "expires": _CREATED + 300,
+    }
+    first = sign_request(
+        signer_seed=agent.private_bytes_raw(), keyid=agent_tp, signature_agent=origin.origin,
+        **common,  # type: ignore[arg-type]
+    )  # fmt: skip
+    second = append_signature(
+        signer_seed=broker.private_bytes_raw(), keyid=broker_tp, signature_agent=other.origin,
+        prev_signature_input=first.signature_input, prev_signature=first.signature,
+        prev_signature_agent=first.signature_agent,
+        **common,  # type: ignore[arg-type]
+    )  # fmt: skip
+    headers = {
+        "content-digest": second.content_digest,
+        "signature-input": second.signature_input,
+        "signature": second.signature,
+        "authorization": "",
+        "signature-agent": second.signature_agent,
+    }
+
+    def verify(signature_agent: str) -> object:
+        return verify_multisig_request_server(
+            method="POST", url=_URL, body=_BODY,
+            headers={**headers, "signature-agent": signature_agent},
+            resolver=_resolver(), now=_CREATED + 10,
+        )  # fmt: skip
+
+    verdict = verify(second.signature_agent)
+    assert verdict.valid is True, verdict.reason  # type: ignore[attr-defined]
+    assert verdict.directories == (origin.origin, other.origin)  # type: ignore[attr-defined]
+
+    # Point the broker's member at the agent's directory: its keyid is looked up there,
+    # where it is not published, and the request is refused.
+    swapped = f'sig1="{origin.origin}", sig2="{origin.origin}"'
+    refused = verify(swapped)
+    assert refused.valid is False  # type: ignore[attr-defined]
+    assert refused.reason == "signature"  # type: ignore[attr-defined]
+
+
+def test_a_clock_outside_the_key_validity_still_fails_closed(origin: Origin) -> None:
+    # The profile adds checks; it does not replace the validity window.
+    _, x, tp = _key(signs=True)
+    origin.set_wba(wba_file_json([active_jwk(x)]))
+    r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR + 2 * HOUR))
+    with pytest.raises(KeyExpiredError):
+        r.resolve(tp, origin.origin)
diff --git a/sdk/python/tests/test_resolvers_wba_revocation_parity.py b/sdk/python/tests/test_resolvers_wba_revocation_parity.py
index ebe94da0..8be56d68 100644
--- a/sdk/python/tests/test_resolvers_wba_revocation_parity.py
+++ b/sdk/python/tests/test_resolvers_wba_revocation_parity.py
@@ -11,6 +11,11 @@
 the prime thumbprint to prime the snapshot, then asserts ``revoked(tp)`` matches
 the oracle for EVERY case — including the load-bearing
 directory-absent-but-revoked -> True, which is the whole point of the accessor.
+
+A directory is only read for the keys that signed its response, so the served
+directory must be signed by its key. The emitter derives that key from the FIXED seed
+``present.v1`` (zero-padded to 32 bytes); the test derives the same key, checks it is
+the one the corpus lists, and registers it with the harness signer.
 """
 
 from __future__ import annotations
@@ -20,7 +25,17 @@
 
 import pytest
 from conftest import GO_RESOLVERS_TESTDATA, load_json
-from resolvers_harness import MutableClock, Origin, loopback_client, revocation_json, wba_file_json
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from resolvers_harness import (
+    MutableClock,
+    Origin,
+    loopback_client,
+    register_directory_key,
+    revocation_json,
+    wba_file_json,
+)
+
+from fora_sdk.b64 import b64url_nopad
 
 from fora_sdk.resolvers import WBAKeyResolver
 
@@ -46,6 +61,13 @@ def _directory_keys() -> list[dict[str, Any]]:
     ]
 
 
+def _register_the_emitters_key() -> None:
+    priv = Ed25519PrivateKey.from_private_bytes(b"present.v1".ljust(32, b"\0"))
+    x = b64url_nopad(priv.public_key().public_bytes_raw())
+    assert [k["x"] for k in _VECTOR["directory_keys"]] == [x]
+    register_directory_key(priv)
+
+
 def test_revocation_membership_corpus_nonempty() -> None:
     assert len(_VECTOR["cases"]) > 0
 
@@ -56,6 +78,7 @@ def test_revocation_membership_corpus_nonempty() -> None:
     ids=[c["label"] for c in _VECTOR["cases"]],
 )
 def test_revoked_matches_go_oracle(case: dict[str, Any]) -> None:
+    _register_the_emitters_key()
     origin = Origin()
     try:
         origin.set_wba(wba_file_json(_directory_keys(), origin.revocation_url()))
@@ -63,7 +86,7 @@ def test_revoked_matches_go_oracle(case: dict[str, Any]) -> None:
 
         r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(_as_of()))
         # Prime the revocation snapshot by resolving the directory-listed key.
-        r.resolve(_VECTOR["prime_thumbprint"], origin.url)
+        r.resolve(_VECTOR["prime_thumbprint"], origin.origin)
 
         assert r.revoked(case["thumbprint"]) is case["expected_revoked"]
         # Empty key_id is never revoked (parity with the Go accessor guard).
diff --git a/sdk/python/tests/test_sfv.py b/sdk/python/tests/test_sfv.py
new file mode 100644
index 00000000..8bef0fc4
--- /dev/null
+++ b/sdk/python/tests/test_sfv.py
@@ -0,0 +1,122 @@
+"""RFC 8941 structured field values — the parser and serializer the signature code
+reads Signature-Input, Signature and Signature-Agent with.
+
+A parser, so unit-tested directly. The cases are the RFC's own: what each type parses
+to, the inputs §4.2 says to fail on, and the serialization round trip the signature
+base depends on (a member is serialized from its parsed form, never spliced from the
+wire, so signer and verifier agree however the wire spaced it).
+"""
+
+from __future__ import annotations
+
+from decimal import Decimal
+
+import pytest
+
+from fora_sdk import sfv
+
+
+def test_a_dictionary_of_every_member_shape() -> None:
+    parsed = sfv.parse_dictionary(
+        'a=1, b="x\\"y", c=tok/en:1, d=:AQID:, e=?0, f, g=(1 "two");p=3, h=-1.5;q'
+    )
+    assert parsed == {
+        "a": sfv.Item(1),
+        "b": sfv.Item('x"y'),
+        "c": sfv.Item(sfv.Token("tok/en:1")),
+        "d": sfv.Item(b"\x01\x02\x03"),
+        "e": sfv.Item(False),
+        "f": sfv.Item(True),
+        "g": sfv.InnerList((sfv.Item(1), sfv.Item("two")), {"p": 3}),
+        "h": sfv.Item(Decimal("-1.5"), {"q": True}),
+    }
+
+
+def test_field_lines_are_joined_and_a_repeated_key_keeps_its_place_with_the_last_value() -> None:
+    parsed = sfv.parse_dictionary(["a=1, b=2", "a=3"])
+    assert list(parsed) == ["a", "b"]
+    assert parsed["a"] == sfv.Item(3)
+
+
+def test_a_token_and_a_string_are_different_types() -> None:
+    # The bare v1.0.8 Signature-Agent value parses as a Token and the legacy form as a
+    # String; the profile refuses the first and accepts the second.
+    assert sfv.parse_item("https://agent.example").value == sfv.Token("https://agent.example")
+    assert sfv.parse_item('"https://agent.example"').value == "https://agent.example"
+
+
+def test_a_signature_input_member_parses_to_its_components_and_parameters() -> None:
+    member = sfv.parse_dictionary(
+        'sig1=("@method" "signature-agent";key="sig1" "@authority";req);created=1;keyid="k"'
+    )["sig1"]
+    assert member == sfv.InnerList(
+        (
+            sfv.Item("@method"),
+            sfv.Item("signature-agent", {"key": "sig1"}),
+            sfv.Item("@authority", {"req": True}),
+        ),
+        {"created": 1, "keyid": "k"},
+    )
+
+
+@pytest.mark.parametrize(
+    "value",
+    [
+        "a=1,",  # trailing comma
+        "a=1,,b=2",  # empty member
+        "A=1",  # a key starts with a lowercase letter or '*'
+        "a=(1 2",  # unterminated inner list
+        "a=(1,2)",  # an inner list separates items with spaces
+        'a="unterminated',
+        'a="bad \\n escape"',
+        "a=:not base64!:",
+        "a=:AQID",  # unterminated byte sequence
+        "a=?2",
+        "a=1234567890123456",  # sixteen-digit integer
+        "a=1.2345",  # four fraction digits
+        "a=1 b=2",  # members are separated by commas
+        "a=@",
+    ],
+)
+def test_the_inputs_the_rfc_fails_on_are_refused(value: str) -> None:
+    with pytest.raises(sfv.StructuredFieldError):
+        sfv.parse_dictionary(value)
+
+
+def test_an_item_with_trailing_characters_is_refused() -> None:
+    with pytest.raises(sfv.StructuredFieldError):
+        sfv.parse_item('"https://agent.example", sig2="x"')
+
+
+@pytest.mark.parametrize(
+    "member",
+    [
+        '"https://agent.example";type=directory',
+        ":AQIDBA==:",
+        '("@method" "signature-agent";key="sig1");created=1700000000;keyid="k";tag="t"',
+        "?1;flag",
+        "-12.5",
+    ],
+)
+def test_a_parsed_member_serializes_to_its_canonical_form(member: str) -> None:
+    parsed = sfv.parse_dictionary(f"m={member}")["m"]
+    assert sfv.serialize_member(parsed) == member
+
+
+def test_serialization_normalizes_what_the_wire_spaced_differently() -> None:
+    parsed = sfv.parse_dictionary('m=(  "a"   "b";key="x"  );p=1')["m"]
+    assert sfv.serialize_member(parsed) == '("a" "b";key="x");p=1'
+
+
+@pytest.mark.parametrize(
+    "value",
+    ["bad\nstring", "é", 10**15, sfv.Token("1abc")],
+)
+def test_a_value_that_is_not_a_structured_field_is_not_serialized(value: object) -> None:
+    with pytest.raises(sfv.StructuredFieldError):
+        sfv.serialize_bare_item(value)  # type: ignore[arg-type]
+
+
+def test_an_invalid_key_is_not_serialized() -> None:
+    with pytest.raises(sfv.StructuredFieldError):
+        sfv.serialize_params({"Key": True})
diff --git a/sdk/python/tests/test_signature_nonce.py b/sdk/python/tests/test_signature_nonce.py
index da3c380f..970317e5 100644
--- a/sdk/python/tests/test_signature_nonce.py
+++ b/sdk/python/tests/test_signature_nonce.py
@@ -21,6 +21,7 @@
 
 _SEED = bytes(range(1, 33))
 _KEYID = "agent.test.v1"
+_DIRECTORY = "https://agent.example"
 _URL = "https://exchange.example/fora.v1.ExchangeService/DiscoverResources"
 _BODY = b'{"ver":"1"}'
 _CREATED, _EXPIRES = 1_700_000_000, 1_700_000_300
@@ -53,7 +54,12 @@ def _pub() -> bytes:
 def _transport() -> SigningTransport:
     # A fixed window: created/expires are identical on every signature, the
     # collision condition.
-    return SigningTransport(signer_seed=_SEED, keyid=_KEYID, window=lambda: (_CREATED, _EXPIRES))
+    return SigningTransport(
+        signer_seed=_SEED,
+        keyid=_KEYID,
+        signature_agent=_DIRECTORY,
+        window=lambda: (_CREATED, _EXPIRES),
+    )
 
 
 def _sign(transport: SigningTransport | None = None) -> dict[str, str]:
@@ -89,7 +95,10 @@ def test_identical_requests_get_unique_signatures_and_both_pass() -> None:
     n1 = _NONCE.search(first["signature-input"])
     n2 = _NONCE.search(second["signature-input"])
     assert n1 and n2
-    assert len(base64.urlsafe_b64decode(n1.group(1) + "==")) == 16
+    # 64 random bytes, 86 base64url characters: the length the Web Bot Auth test
+    # vectors use, and the one widely deployed verifiers require.
+    assert len(n1.group(1)) == 86
+    assert len(base64.urlsafe_b64decode(n1.group(1) + "==")) == 64
     assert n1.group(1) != n2.group(1)
     assert first["signature"] != second["signature"]
     # Only the nonce differs: created/expires are unchanged.
@@ -111,7 +120,7 @@ def test_exact_replay_is_rejected() -> None:
 @pytest.mark.parametrize(
     "edit",
     [
-        lambda s: _NONCE.sub(';nonce="AAAAAAAAAAAAAAAAAAAAAA"', s),
+        lambda s: _NONCE.sub(';nonce="' + "A" * 86 + '"', s),
         lambda s: _NONCE.sub("", s),
     ],
     ids=["changed", "removed"],
@@ -124,7 +133,8 @@ def test_changed_or_removed_nonce_fails_verification(edit: object) -> None:
     assert verdict.reason == "signature"  # type: ignore[attr-defined]
 
 
-def test_legacy_signature_without_nonce_is_accepted() -> None:
+def test_a_signature_without_nonce_is_accepted() -> None:
+    # WG-00 lets a signer omit the nonce; a FORA verifier accepts one without it.
     signed = sign_request(
         method="POST",
         url=_URL,
@@ -134,6 +144,7 @@ def test_legacy_signature_without_nonce_is_accepted() -> None:
         keyid=_KEYID,
         created=_CREATED,
         expires=_EXPIRES,
+        signature_agent=_DIRECTORY,
     )
     assert "nonce" not in signed.signature_input
     headers = {
@@ -141,7 +152,7 @@ def test_legacy_signature_without_nonce_is_accepted() -> None:
         "signature-input": signed.signature_input,
         "signature": signed.signature,
         "authorization": "",
-        "signature-agent": "",
+        "signature-agent": signed.signature_agent,
     }
     assert _Server().verify(headers).valid is True  # type: ignore[attr-defined]
 
@@ -178,5 +189,6 @@ def test_helper_rejects_nonce_outside_base64url(nonce: str) -> None:
             keyid=_KEYID,
             created=_CREATED,
             expires=_EXPIRES,
+            signature_agent=_DIRECTORY,
             nonce=nonce,
         )
diff --git a/sdk/python/tests/test_signedurl_pop_parity.py b/sdk/python/tests/test_signedurl_pop_parity.py
index 036427b1..2e255292 100644
--- a/sdk/python/tests/test_signedurl_pop_parity.py
+++ b/sdk/python/tests/test_signedurl_pop_parity.py
@@ -83,12 +83,16 @@ def test_pop_vector_file_is_nonempty() -> None:
 
 
 def _pop_headers(vector: dict[str, object]) -> dict[str, str]:
-    """RFC 9421 PoP headers as the verifier receives them off the wire."""
-    return {
+    """RFC 9421 PoP headers as the verifier receives them off the wire. An empty
+    ``signature_agent`` is a request that carries no Signature-Agent at all."""
+    headers = {
         "x-fora-agent-key": str(vector["presented_key_b64url"]),
         "signature-input": str(vector["signature_input"]),
         "signature": str(vector["signature"]),
     }
+    if vector["signature_agent"]:
+        headers["signature-agent"] = str(vector["signature_agent"])
+    return headers
 
 
 @pytest.mark.parametrize(
@@ -108,6 +112,9 @@ def test_pop_verify_default_primitive_matches_go_oracle(vector: dict[str, object
         now=int(vector["now_unix"]),  # type: ignore[arg-type]
     )
     assert result.ok is bool(vector["expected_valid"])
+    # A proof that verifies names the agent's key directory, as its member carries it.
+    if result.ok:
+        assert result.signature_agent == str(vector["agent_directory"])
 
 
 @pytest.mark.parametrize(
diff --git a/sdk/python/tests/test_signing_transport_profile.py b/sdk/python/tests/test_signing_transport_profile.py
new file mode 100644
index 00000000..96b88c4f
--- /dev/null
+++ b/sdk/python/tests/test_signing_transport_profile.py
@@ -0,0 +1,199 @@
+"""SigningTransport under the Web Bot Auth profile: the per-request signer source, the
+append mode and coverage of an earlier signature, and the five-minute window.
+
+Each behavior is proved through the verifier a peer runs: a signature the transport
+emits is checked by ``verify_multisig_request_server`` with a resolver that answers
+only for the directory each key is published in, so a signature resolved through the
+wrong member finds no key.
+"""
+
+from __future__ import annotations
+
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+
+from fora_sdk.httpsig import sign_request
+from fora_sdk.server_verify import verify_multisig_request_server
+from fora_sdk.signing_transport import OutboundRequest, SigningTransport
+from fora_sdk.thumbprint import thumbprint
+from fora_sdk.wba import SignatureAgentNotOriginError, SignatureLifetimeError
+from fora_sdk.window import monotonic_window
+
+_URL = "https://exchange.example/fora.v1.ExchangeService/ExecuteTransaction"
+_BODY = b'{"idempotency_key":"idem-1"}'
+_CREATED = 1_700_000_000
+_EXPIRES = _CREATED + 300
+_AGENT_SEED = bytes(range(1, 33))
+_BROKER_SEED = bytes(range(2, 34))
+_AGENT_DIR = "https://agent.example"
+_BROKER_DIR = "https://broker.example"
+
+
+def _identity(seed: bytes) -> tuple[str, bytes]:
+    pub = Ed25519PrivateKey.from_private_bytes(seed).public_key().public_bytes_raw()
+    return thumbprint(pub), pub
+
+
+class _Directories:
+    """A KeyResolver that answers only for the directory each key is published in."""
+
+    def __init__(self, *published: tuple[str, bytes]) -> None:
+        self._keys: dict[tuple[str, str], bytes] = {}
+        for directory, seed in published:
+            keyid, pub = _identity(seed)
+            self._keys[(directory, keyid)] = pub
+
+    def resolve(self, keyid: str | None, directory: str) -> bytes | None:
+        return self._keys.get((directory, str(keyid)))
+
+
+def _verify(headers: dict[str, str], *published: tuple[str, bytes]) -> object:
+    return verify_multisig_request_server(
+        method="POST",
+        url=_URL,
+        body=_BODY,
+        headers=headers,
+        resolver=_Directories(*published),
+        now=_CREATED + 10,
+    )
+
+
+def _transport(seed: bytes, directory: str, **kwargs: object) -> SigningTransport:
+    keyid, _ = _identity(seed)
+    return SigningTransport(
+        signer_seed=seed,
+        keyid=keyid,
+        signature_agent=directory,
+        window=lambda: (_CREATED, _EXPIRES),
+        **kwargs,  # type: ignore[arg-type]
+    )
+
+
+def _send(transport: SigningTransport, headers: dict[str, str] | None = None) -> dict[str, str]:
+    signed = transport.sign_outbound(
+        method="POST", url=_URL, body=_BODY, authorization="", headers=headers
+    )
+    return signed.headers
+
+
+# --- the per-request signer source ----------------------------------------------------
+
+
+def test_a_signer_source_names_the_signer_per_request() -> None:
+    asked: list[OutboundRequest] = []
+
+    def source(request: OutboundRequest) -> tuple[bytes, str, str]:
+        asked.append(request)
+        keyid, _ = _identity(_AGENT_SEED)
+        return _AGENT_SEED, keyid, _AGENT_DIR
+
+    transport = SigningTransport(signer_source=source, window=lambda: (_CREATED, _EXPIRES))
+    first, second = _send(transport), _send(transport)
+
+    # Two identical requests in the same second: a fresh nonce each, distinct signatures,
+    # both verifying in the source's directory.
+    assert first["signature"] != second["signature"]
+    for headers in (first, second):
+        verdict = _verify(headers, (_AGENT_DIR, _AGENT_SEED))
+        assert verdict.valid is True, verdict.reason  # type: ignore[attr-defined]
+        assert verdict.directories == (_AGENT_DIR,)  # type: ignore[attr-defined]
+    assert [(r.method, r.url, r.body) for r in asked] == [("POST", _URL, _BODY)] * 2
+
+
+def test_a_failing_signer_source_signs_nothing() -> None:
+    def source(_request: OutboundRequest) -> tuple[bytes, str, str]:
+        raise LookupError("no identity for this caller")
+
+    transport = SigningTransport(signer_source=source)
+    with pytest.raises(LookupError):
+        _send(transport)
+
+
+def test_a_signer_source_naming_no_origin_signs_nothing() -> None:
+    transport = SigningTransport(signer_source=lambda _r: (_AGENT_SEED, "k", "agent.example"))
+    with pytest.raises(SignatureAgentNotOriginError):
+        _send(transport)
+
+
+def test_a_transport_needs_a_key_or_a_source() -> None:
+    with pytest.raises(ValueError, match="signer_seed or a signer_source"):
+        SigningTransport(keyid="k", signature_agent=_AGENT_DIR)
+
+
+# --- append mode and coverage of an earlier signature ----------------------------------
+
+
+def test_append_only_signs_a_fresh_request_as_sig1() -> None:
+    nonce = "AAECAwQF"
+    transport = _transport(_AGENT_SEED, _AGENT_DIR, append_only=True)
+    transport._nonce = lambda: nonce
+    headers = _send(transport)
+    keyid, _ = _identity(_AGENT_SEED)
+    fresh = sign_request(
+        method="POST", url=_URL, body=_BODY, authorization="", signer_seed=_AGENT_SEED,
+        keyid=keyid, created=_CREATED, expires=_EXPIRES, signature_agent=_AGENT_DIR,
+        nonce=nonce,
+    )  # fmt: skip
+    assert headers["signature-input"] == fresh.signature_input
+    assert headers["signature-agent"] == fresh.signature_agent
+
+
+@pytest.mark.parametrize("append_only", [False, True])
+def test_a_signed_request_gets_a_second_signature_beside_the_first(append_only: bool) -> None:
+    agent = _send(_transport(_AGENT_SEED, _AGENT_DIR))
+    relayed = _send(_transport(_BROKER_SEED, _BROKER_DIR, append_only=append_only), agent)
+
+    assert relayed["signature-input"].startswith(agent["signature-input"] + ", sig2=(")
+    assert relayed["signature"].startswith(agent["signature"] + ", sig2=:")
+    assert relayed["signature-agent"] == f'sig1="{_AGENT_DIR}", sig2="{_BROKER_DIR}"'
+    # Independent: the second signature covers only its own request and member.
+    assert '"signature";key="sig1"' not in relayed["signature-input"]
+    verdict = _verify(relayed, (_AGENT_DIR, _AGENT_SEED), (_BROKER_DIR, _BROKER_SEED))
+    assert verdict.valid is True, verdict.reason  # type: ignore[attr-defined]
+    assert verdict.directories == (_AGENT_DIR, _BROKER_DIR)  # type: ignore[attr-defined]
+
+
+def test_cover_previous_covers_the_earlier_signature_completely() -> None:
+    agent = _send(_transport(_AGENT_SEED, _AGENT_DIR))
+    forwarded = _send(_transport(_BROKER_SEED, _BROKER_DIR, cover_previous=True), agent)
+
+    sig2 = forwarded["signature-input"].split(", sig2=")[1]
+    for component in (
+        '"signature-agent";key="sig1"',
+        '"signature";key="sig1"',
+        '"signature-input";key="sig1"',
+    ):
+        assert component in sig2
+    verdict = _verify(forwarded, (_AGENT_DIR, _AGENT_SEED), (_BROKER_DIR, _BROKER_SEED))
+    assert verdict.valid is True, verdict.reason  # type: ignore[attr-defined]
+
+    # Covered, so the earlier signature can no longer be swapped out from under it.
+    tampered = dict(forwarded)
+    tampered["signature"] = forwarded["signature"].replace(
+        agent["signature"], _send(_transport(_AGENT_SEED, _AGENT_DIR))["signature"]
+    )
+    verdict = _verify(tampered, (_AGENT_DIR, _AGENT_SEED), (_BROKER_DIR, _BROKER_SEED))
+    assert verdict.valid is False  # type: ignore[attr-defined]
+
+
+# --- the window -------------------------------------------------------------------------
+
+
+def test_a_window_longer_than_five_minutes_signs_nothing() -> None:
+    keyid, _ = _identity(_AGENT_SEED)
+    transport = SigningTransport(
+        signer_seed=_AGENT_SEED,
+        keyid=keyid,
+        signature_agent=_AGENT_DIR,
+        now=lambda: float(_CREATED),
+        ttl_sec=600,
+    )
+    with pytest.raises(SignatureLifetimeError):
+        _send(transport)
+
+
+def test_the_monotonic_window_keeps_every_window_at_its_ttl() -> None:
+    window = monotonic_window(lambda: float(_CREATED), 300)
+    pairs = [window() for _ in range(3)]
+    assert [expires for _, expires in pairs] == [_EXPIRES, _EXPIRES + 1, _EXPIRES + 2]
+    assert all(expires - created == 300 for created, expires in pairs)
diff --git a/sdk/python/tests/test_signing_transport_signature_agent.py b/sdk/python/tests/test_signing_transport_signature_agent.py
index 3854a85f..2fbe8cb3 100644
--- a/sdk/python/tests/test_signing_transport_signature_agent.py
+++ b/sdk/python/tests/test_signing_transport_signature_agent.py
@@ -1,28 +1,27 @@
-"""SigningTransport.signature_agent — bound into the base, and carried on the wire.
+"""SigningTransport.signature_agent — the signer's key-directory origin, required.
 
-Signature-Agent is a COVERED component: the sign seam binds its value into the
-signature base unconditionally, empty included. A verifier rebuilds that base from the
-request it RECEIVED, so binding is only half of it — the header has to arrive, or the
-verifier reads the covered name off signature-input, finds nothing under it, and
-refuses the request.
+Every Web Bot Auth signature names its signer's key directory: the transport writes
+the member ``sig1="<origin>"`` into Signature-Agent and the signature covers it as
+``"signature-agent";key="sig1"``. A verifier rebuilds the base from the request it
+RECEIVED, so the header has to arrive carrying exactly the member that was signed.
 
-(a) signature_agent="https://agent.example" → the header carries that directory, and
-    'signature-agent' appears in the Signature-Input covered-component list.
+(a) signature_agent="https://agent.example" → the header carries the one-member
+    dictionary, and the keyed member appears in the Signature-Input covered list.
 
-(b) default signature_agent='' → the header is still carried, EMPTY. This is the
-    static-bootstrap case, and it used to assert the opposite: that a caller who
-    configured no directory received no header. That read as a tidy conditional and
-    was the defect written down as intent — a request signed that way was refused by
-    every conformant verifier. The empty value is the point: it is what lets the peer
-    rebuild a base that bound an empty directory.
+(b) no directory, or one that is not an https origin → nothing is signed. The old
+    static-bootstrap case signed an EMPTY directory; the profile has no such form,
+    and a verifier would have nowhere to resolve the key.
 
 The whole emitted set is pinned against the Go oracle by the shared corpus, in
-test_signrequest_parity.py; this file covers the two signature_agent shapes directly.
+test_signrequest_parity.py; this file covers the signature_agent shapes directly.
 """
 
 from __future__ import annotations
 
+import pytest
+
 from fora_sdk.signing_transport import SigningTransport
+from fora_sdk.wba import SignatureAgentNotOriginError, SignatureAgentRequiredError
 
 
 def _make_transport(*, signature_agent: str = "") -> SigningTransport:
@@ -63,37 +62,45 @@ def test_signature_agent_covered_in_signature_input_when_configured() -> None:
         authorization="",
     )
     sig_input = signed.headers.get("signature-input") or signed.headers.get("Signature-Input") or ""
-    assert '"signature-agent"' in sig_input, (
+    assert '"signature-agent";key="sig1"' in sig_input, (
         f"Expected 'signature-agent' in Signature-Input covered set; got: {sig_input!r}"
     )
 
 
-# ---- (b) default (empty) signature_agent → header present, EMPTY ----------
-
-
-def test_signature_agent_header_is_carried_empty_when_not_configured() -> None:
-    """Default (signature_agent='') still carries Signature-Agent, with an empty value.
-
-    The static-bootstrap case. The covered set binds the empty directory, so the header
-    has to arrive for the verifier to rebuild the base — an absent one is refused, not
-    tolerated. Measured: a request signed without it is answered
-    ``header "signature-agent" missing from request``.
-
-    Authorization is asserted beside it because the two are one mechanism: both are
-    covered unconditionally, and fixing only the first leaves the second failing the
-    identical way.
-    """
-    transport = _make_transport(signature_agent="")
+# ---- (b) no directory, or not an origin → refused before signing -----------
+
+
+@pytest.mark.parametrize(
+    ("signature_agent", "error"),
+    [
+        ("", SignatureAgentRequiredError),
+        ("agent.example", SignatureAgentNotOriginError),
+        ("https://agent.example/keys", SignatureAgentNotOriginError),
+        ("https://agent.example:443", SignatureAgentNotOriginError),
+    ],
+    ids=["empty", "bare_host", "with_path", "default_port"],
+)
+def test_a_transport_without_an_origin_signs_nothing(
+    signature_agent: str, error: type[Exception]
+) -> None:
+    transport = _make_transport(signature_agent=signature_agent)
+    with pytest.raises(error):
+        transport.sign_outbound(
+            method="POST",
+            url="https://broker.example/fora.v1/Discover",
+            body=b'{"query":"x"}',
+            authorization="",
+        )
+
+
+def test_the_emitted_member_is_the_one_the_signature_covers() -> None:
+    """The header is the one-member dictionary, and Authorization is carried empty."""
+    transport = _make_transport(signature_agent="https://agent.example")
     signed = transport.sign_outbound(
         method="POST",
         url="https://broker.example/fora.v1/Discover",
         body=b'{"query":"x"}',
         authorization="",
     )
-    emitted = {k.lower(): v for k, v in signed.headers.items()}
-    assert emitted.get("signature-agent") == "", (
-        f"empty signature_agent must still be CARRIED, not dropped; headers: {emitted}"
-    )
-    assert emitted.get("authorization") == "", (
-        f"empty authorization must still be CARRIED, not dropped; headers: {emitted}"
-    )
+    assert signed.headers["signature-agent"] == 'sig1="https://agent.example"'
+    assert signed.headers["authorization"] == ""
diff --git a/sdk/python/tests/test_signrequest_parity.py b/sdk/python/tests/test_signrequest_parity.py
index 3e12c4be..f6141682 100644
--- a/sdk/python/tests/test_signrequest_parity.py
+++ b/sdk/python/tests/test_signrequest_parity.py
@@ -7,7 +7,12 @@
 
 ``fora_sdk.httpsig.sign_request(...)`` MUST produce, byte-for-byte, the same signature
 base, Signature-Input and Signature the Go oracle emits — and MUST hand back the same
-header set a signed request carries, which is what emitted_headers pins.
+header set a signed request carries, which is what emitted_headers pins. A vector with
+``append_only`` was signed through the oracle's append path onto a fresh request, so it
+is replayed through ``append_signature``, which must produce the same headers.
+
+``signature_agent`` is the signer's key-directory ORIGIN; the emitted Signature-Agent is
+the one-member dictionary ``sig1="<origin>"`` the signature covers.
 """
 
 from __future__ import annotations
@@ -20,7 +25,7 @@
 
 from conftest import GO_TESTDATA, load_json
 
-from fora_sdk.httpsig import sign_request, verify_request
+from fora_sdk.httpsig import append_signature, sign_request, verify_request
 
 #: The shared Go-emitted oracle every port replays.
 _SIGN_REQUEST_VECTORS_PATH = GO_TESTDATA / "sign-request-vectors.json"
@@ -29,9 +34,11 @@
 # signed with one. The helper tests below replay every vector.
 _NONCE_VECTORS = [v for v in _VECTORS if v.get("nonce")]
 
-# The covered set the emitter MUST use: exactly these five (signature-agent
-# joined with the WBA split), no conditional biscuit component.
-_EXPECTED_COVERED = '("@method" "@target-uri" "content-digest" "authorization" "signature-agent")'
+# The covered set the emitter MUST use: the FORA RPC set and the signature's own
+# Signature-Agent member, no conditional component.
+_EXPECTED_COVERED = (
+    '("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1")'
+)
 
 
 def _b64url_nopad_decode(s: str) -> bytes:
@@ -83,6 +90,7 @@ def test_sign_outbound_emits_the_header_set_the_oracle_emits(
         keyid=str(vector["keyid"]),
         signature_agent=str(vector["signature_agent"]),
         window=lambda: (created, expires),
+        append_only=bool(vector.get("append_only")),
     )
     # The transport mints a random nonce per signature; pin it to the vector's
     # so the bytes are comparable.
@@ -108,7 +116,8 @@ def test_sign_request_produces_byte_identical_signature(vector: dict[str, object
     seed = bytes.fromhex(str(vector["signer_seed_hex"]))
     body = bytes.fromhex(str(vector["body_hex"]))
 
-    result = sign_request(
+    sign = append_signature if vector.get("append_only") else sign_request
+    result = sign(
         method=str(vector["method"]),
         url=str(vector["url"]),
         body=body,
@@ -123,11 +132,13 @@ def test_sign_request_produces_byte_identical_signature(vector: dict[str, object
 
     # Full signature base is byte-identical to the Go oracle.
     assert result.signature_base == str(vector["signature_base"])
-    # Covered set is exactly the five FORA components (no conditional 6th).
+    # Covered set is exactly the FORA RPC set and the signer's own member.
     assert _EXPECTED_COVERED in result.signature_input
-    # Signature-Input and Signature headers are byte-identical.
+    # Signature-Input, Signature and Signature-Agent are byte-identical.
     assert result.signature_input == str(vector["signature_input"])
     assert result.signature == str(vector["signature"])
+    emitted = vector["emitted_headers"]
+    assert [result.signature_agent] == emitted["signature-agent"]  # type: ignore[index]
 
 
 @pytest.mark.parametrize("vector", _VECTORS, ids=[v["name"] for v in _VECTORS])
@@ -161,9 +172,11 @@ def test_sign_request_roundtrips_through_verify(vector: dict[str, object]) -> No
         authorization=str(vector["authorization"]),
         pubkey=pub,
         now=now,
-        signature_agent=str(vector.get("signature_agent", "")),
+        signature_agent=str(vector["emitted_headers"]["signature-agent"][0]),  # type: ignore[index]
     )
     assert result.valid is True
+    # The verdict names the directory the covered member names: the signer's origin.
+    assert result.signature_agent == str(vector["signature_agent"])
 
 
 def test_sign_request_vectors_live_under_shared_go_testdata() -> None:
diff --git a/sdk/python/tests/test_verifyrequest_server_parity.py b/sdk/python/tests/test_verifyrequest_server_parity.py
index 2357b6f8..9ebb9271 100644
--- a/sdk/python/tests/test_verifyrequest_server_parity.py
+++ b/sdk/python/tests/test_verifyrequest_server_parity.py
@@ -1,7 +1,7 @@
 """sdk/python full-RPC single-signature SERVER-VERIFY parity.
 
-SINGLE-SIG scope only: multisig forwarding-chain verify (hop budget, broken_chain)
-is OUT OF SCOPE and handled separately. This suite pins the generalized
+SINGLE-SIG scope only: verifying every signature of a multi-signature request (hop
+budget, broken_chain) is OUT OF SCOPE and handled separately. This suite pins the generalized
 ``httpsig.verify_request`` server
 face: today ``verify_request`` is a pure primitive that takes an already-resolved
 public key and explicit covered fields; it adds a framework-agnostic SERVER
@@ -19,11 +19,13 @@
 tampered covered field / missing component — the default) and "replay". The
 multisig tokens broken_chain / hop_budget are out of scope here.
 
-RED until BOTH (a) httpsig grows ``verify_request_server`` AND (b) the Go emitter
-produces sdk/go/helpers/testdata/verify-request-neg-vectors.json. The implement
-step adds both; this test is the TDD-red contract. Referencing the
-not-yet-existing symbol + the not-yet-emitted vector file keeps the suite RED on
-both the missing server face AND the missing shared negative oracle.
+Under the Web Bot Auth profile the vectors also pin WHERE a key is resolved: in the
+directory the signature's own covered Signature-Agent member names, which the verdict
+reports. A refusal for a missing component, a wrong tag, a Signature-Agent form the
+profile refuses or an unsigned request carries the Accept-Signature value the oracle
+records (``expected_accept_signature``); every other refusal carries none. The accept
+corpus (verify-request-accept-vectors.json) pins the forms other Web Bot Auth signers
+send that a FORA verifier accepts although the SDK never emits them.
 """
 
 from __future__ import annotations
@@ -50,6 +52,7 @@
 # a clean TDD-red signal that the shared negative oracle is missing.
 _NEG_VECTORS_PATH = GO_TESTDATA / "verify-request-neg-vectors.json"
 _NEG_VECTORS = load_json(_NEG_VECTORS_PATH)["vectors"]
+_ACCEPT_VECTORS = load_json(GO_TESTDATA / "verify-request-accept-vectors.json")["vectors"]
 
 
 def _b64url_nopad_decode(s: str) -> bytes:
@@ -58,18 +61,20 @@ def _b64url_nopad_decode(s: str) -> bytes:
 
 
 class _RecordingResolver:
-    """A KeyResolver that records every keyid it was asked to resolve.
+    """A KeyResolver that records every (directory, keyid) it was asked to resolve.
 
     The injected-boundary probe: the server face MUST resolve keys ONLY through
-    this holder, so the recorded calls prove no key was read out-of-band.
+    this holder, so the recorded calls prove no key was read out-of-band, and the
+    recorded directory proves the key was looked up where the signature's member
+    points.
     """
 
     def __init__(self, keys: dict[str, bytes]) -> None:
         self._keys = dict(keys)
-        self.calls: list[str | None] = []
+        self.calls: list[tuple[str, str | None]] = []
 
-    def resolve(self, keyid: str | None) -> bytes | None:
-        self.calls.append(keyid)
+    def resolve(self, keyid: str | None, directory: str) -> bytes | None:
+        self.calls.append((directory, keyid))
         if keyid is None:
             return None
         return self._keys.get(keyid)
@@ -115,6 +120,20 @@ def test_neg_vector_set_covers_every_single_sig_reject_case() -> None:
         # The entitlement name carried twice with an empty line first — the coverage
         # rule is skipped entirely by a reader that resolves the name to one line.
         "neg_shadowed_entitlement",
+        # The Web Bot Auth profile's own refusals: the tag, the Signature-Agent forms
+        # it does not accept, a member that is not an https origin, a required RPC
+        # component left uncovered, an unsigned request, and a member repointed at
+        # another directory after signing.
+        "neg_missing_tag",
+        "neg_wrong_tag",
+        "neg_bare_signature_agent",
+        "neg_signature_agent_member_absent",
+        "neg_signature_agent_type_not_directory",
+        "neg_signature_agent_not_https_origin",
+        "neg_signature_agent_not_an_origin",
+        "neg_missing_fora_component",
+        "neg_unsigned",
+        "neg_repointed_signature_agent",
     } <= names
 
 
@@ -138,7 +157,7 @@ def test_oracle_signed_request_verifies_through_server_face(vector: dict[str, ob
             "signature-input": str(vector["signature_input"]),
             "signature": str(vector["signature"]),
             "authorization": str(vector["authorization"]),
-            "signature-agent": str(vector.get("signature_agent", "")),
+            "signature-agent": str(vector["emitted_headers"]["signature-agent"][0]),  # type: ignore[index]
         },
         resolver=resolver,
         replay_store=store,
@@ -146,8 +165,10 @@ def test_oracle_signed_request_verifies_through_server_face(vector: dict[str, ob
     )
 
     assert verdict.valid is True
-    # Key resolved ONLY through the injected resolver (no out-of-band read).
-    assert keyid in resolver.calls
+    assert verdict.signature_agent == str(vector["signature_agent"])
+    # Key resolved ONLY through the injected resolver (no out-of-band read), in the
+    # directory the signer's member names.
+    assert resolver.calls == [(str(vector["signature_agent"]), keyid)]
 
 
 def test_live_signed_request_roundtrips_through_server_face() -> None:
@@ -158,7 +179,7 @@ def test_live_signed_request_roundtrips_through_server_face() -> None:
         .public_key()
         .public_bytes(Encoding.Raw, PublicFormat.Raw)
     )
-    created, expires = 1_700_000_000, 1_700_000_600
+    created, expires = 1_700_000_000, 1_700_000_300
     body = b'{"uri":"https://cdn.example/live"}'
 
     signed = sign_request(
@@ -183,7 +204,7 @@ def test_live_signed_request_roundtrips_through_server_face() -> None:
             "signature-input": signed.signature_input,
             "signature": signed.signature,
             "authorization": "Bearer live-token",
-            "signature-agent": "https://agent.example",
+            "signature-agent": signed.signature_agent,
         },
         resolver=resolver,
         replay_store=_MemoryReplayStore(),
@@ -191,7 +212,8 @@ def test_live_signed_request_roundtrips_through_server_face() -> None:
     )
 
     assert verdict.valid is True
-    assert resolver.calls == ["mcp.v1"]
+    assert verdict.signature_agent == "https://agent.example"
+    assert resolver.calls == [("https://agent.example", "mcp.v1")]
 
 
 @pytest.mark.parametrize("vector", _NEG_VECTORS, ids=[v["name"] for v in _NEG_VECTORS])
@@ -211,7 +233,7 @@ def test_negative_vector_rejected_with_correct_reason(vector: dict[str, object])
         "signature-input": str(vector["signature_input"]),
         "signature": str(vector["signature"]),
         "authorization": str(vector["authorization"]),
-        "signature-agent": str(vector.get("signature_agent", "")),
+        "signature-agent": str(vector["signature_agent"]),
     }
     # A vector carrying an "entitlement" value exercises entitlement-coverage
     # enforcement: set the X-Entitlement-Token request header to it. The base
@@ -249,6 +271,41 @@ def _verify() -> object:
     verdict = _verify()
     assert verdict.valid is False  # type: ignore[attr-defined]
     assert verdict.reason == str(vector["expected_reason"])  # type: ignore[attr-defined]
+    # The Accept-Signature answer: the oracle's value for the refusals the profile answers
+    # that way, none for every other.
+    assert verdict.accept_signature == (vector.get("expected_accept_signature") or None)  # type: ignore[attr-defined]
+
+
+@pytest.mark.parametrize("vector", _ACCEPT_VECTORS, ids=[v["name"] for v in _ACCEPT_VECTORS])
+def test_accept_vector_verifies_and_names_the_directory(vector: dict[str, object]) -> None:
+    # POSITIVE, the other signers' forms: the legacy String Signature-Agent on one
+    # signature, a member key that differs from the label, type=directory as a String
+    # and as a Token, no nonce, a nonce of another length, other members beside the
+    # signer's. Each verifies, and the key is resolved in the directory the oracle names.
+    assert vector["expected_reason"] == ""
+    keyid = str(vector.get("resolver_keyid") or vector["keyid"])
+    resolver = _RecordingResolver(
+        {keyid: _b64url_nopad_decode(str(vector["resolver_pubkey_b64url"]))}
+    )
+    verdict = verify_request_server(
+        method=str(vector["method"]),
+        url=str(vector["url"]),
+        body=bytes.fromhex(str(vector["body_hex"])),
+        headers={
+            "content-digest": str(vector["content_digest"]),
+            "signature-input": str(vector["signature_input"]),
+            "signature": str(vector["signature"]),
+            "authorization": str(vector["authorization"]),
+            "signature-agent": str(vector["signature_agent"]),
+        },
+        resolver=resolver,
+        replay_store=_MemoryReplayStore(),
+        now=int(vector["now"]),  # type: ignore[call-overload]
+    )
+    assert verdict.valid is True, verdict.reason
+    assert verdict.accept_signature is None
+    assert verdict.signature_agent == str(vector["expected_signature_agent"])
+    assert resolver.calls == [(str(vector["expected_signature_agent"]), keyid)]
 
 
 def test_replay_uses_the_injected_store_only() -> None:
@@ -275,7 +332,7 @@ def test_replay_uses_the_injected_store_only() -> None:
             "signature-input": str(replay["signature_input"]),
             "signature": str(replay["signature"]),
             "authorization": str(replay["authorization"]),
-            "signature-agent": str(replay.get("signature_agent", "")),
+            "signature-agent": str(replay["signature_agent"]),
         },
         resolver=StaticKeyResolver(keys),
         replay_store=store,
@@ -285,7 +342,7 @@ def test_replay_uses_the_injected_store_only() -> None:
     assert len(store.seen) == 1
 
 
-def _live_signed_call(*, max_signature_age: int, window: int = 600) -> object:
+def _live_signed_call(*, max_signature_age: int, window: int = 300) -> object:
     # Sign a request live over a `window`-second declared lifetime and verify it
     # through the single-sig server face under the given max_signature_age clamp.
     # Returns the verdict. Backs the lifetime-clamp parity tests.
@@ -318,7 +375,7 @@ def _live_signed_call(*, max_signature_age: int, window: int = 600) -> object:
             "signature-input": signed.signature_input,
             "signature": signed.signature,
             "authorization": "Bearer clamp-token",
-            "signature-agent": "https://agent.example",
+            "signature-agent": signed.signature_agent,
         },
         resolver=_RecordingResolver({"mcp.v1": pub}),
         replay_store=_MemoryReplayStore(),
@@ -328,27 +385,27 @@ def _live_signed_call(*, max_signature_age: int, window: int = 600) -> object:
 
 
 def test_single_sig_within_max_age_bound_verifies() -> None:
-    # Lifetime clamp — WITHIN the bound: a 600s window under a 700s clamp verifies.
-    verdict = _live_signed_call(max_signature_age=700)
+    # Lifetime clamp — WITHIN the bound: a 300s window under a 400s clamp verifies.
+    verdict = _live_signed_call(max_signature_age=400)
     assert verdict.valid is True  # type: ignore[attr-defined]
 
 
 def test_single_sig_equal_to_max_age_bound_verifies() -> None:
-    # Lifetime clamp — EQUAL to the bound (inclusive): 600s window under a 600s clamp
+    # Lifetime clamp — EQUAL to the bound (inclusive): 300s window under a 300s clamp
     # verifies (mirrors Go's `> maxAge` reject — equality passes).
-    verdict = _live_signed_call(max_signature_age=600)
+    verdict = _live_signed_call(max_signature_age=300)
     assert verdict.valid is True  # type: ignore[attr-defined]
 
 
 def test_single_sig_exceeding_max_age_bound_is_rejected() -> None:
-    # Lifetime clamp — EXCEEDING the bound: 600s window under a 500s clamp rejects with
+    # Lifetime clamp — EXCEEDING the bound: 300s window under a 200s clamp rejects with
     # reason "signature" (mirrors Go ErrSignatureLifetimeTooLong).
-    verdict = _live_signed_call(max_signature_age=500)
+    verdict = _live_signed_call(max_signature_age=200)
     assert verdict.valid is False  # type: ignore[attr-defined]
     assert verdict.reason == "signature"  # type: ignore[attr-defined]
 
 
 def test_single_sig_unbounded_max_age_default_verifies() -> None:
-    # Lifetime clamp — UNBOUNDED default (0 / omitted): the 600s window is admitted.
+    # Lifetime clamp — UNBOUNDED default (0 / omitted): the 300s window is admitted.
     verdict = _live_signed_call(max_signature_age=0)
     assert verdict.valid is True  # type: ignore[attr-defined]
diff --git a/sdk/python/tests/test_wba_profile.py b/sdk/python/tests/test_wba_profile.py
new file mode 100644
index 00000000..f433ae92
--- /dev/null
+++ b/sdk/python/tests/test_wba_profile.py
@@ -0,0 +1,249 @@
+"""The Web Bot Auth profile's shared rules: what a signer refuses, what a verifier
+accepts, and the Accept-Signature answer — the Python port of the Go oracle's
+sdk/go/helpers/wba_profile_test.go.
+
+The byte-level contract is pinned by the shared corpora elsewhere (sign-request,
+verify-request-neg, verify-request-accept, multisig-chain). This suite pins the rules
+those corpora cannot show on their own: the https-origin check case by case, every
+sign-side refusal raising its typed error before anything is signed, and the verdict
+the pure verifier returns for each profile refusal.
+"""
+
+from __future__ import annotations
+
+import pytest
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+
+from fora_sdk import (
+    MAX_SIGNATURE_LIFETIME,
+    InvalidNonceError,
+    SignatureAgentNotOriginError,
+    SignatureAgentRequiredError,
+    SignatureLabelError,
+    SignatureLifetimeError,
+    SignatureProfileError,
+    accept_signature,
+    check_https_origin,
+)
+from fora_sdk.httpsig import SignedRequest, sign_request, verify_request
+
+_SEED = bytes(range(1, 33))
+_PUB = Ed25519PrivateKey.from_private_bytes(_SEED).public_key().public_bytes_raw()
+_URL = "https://exchange.example/fora.v1.ExchangeService/DiscoverResources"
+_BODY = b'{"ver":"1.0"}'
+_CREATED = 1_700_000_000
+_DIRECTORY = "https://agent.example"
+
+
+# --- check_https_origin -------------------------------------------------------------
+
+_ORIGINS_ACCEPTED = [
+    "https://agent.example",
+    "https://agent.example:8443",
+    "https://127.0.0.1",
+    "https://[::1]:8443",
+    "https://xn--bcher-kva.example",
+    "https://a_b.example",
+]
+
+_ORIGINS_REFUSED = [
+    "",
+    "agent.example",
+    "http://agent.example",
+    "HTTPS://agent.example",
+    "https://Agent.example",
+    "https://agent.example/",
+    "https://agent.example/keys",
+    "https://agent.example?x=1",
+    "https://agent.example#f",
+    "https://user@agent.example",
+    "https://agent.example:443",
+    "https://agent.example:0",
+    "https://agent.example:99999",
+    "https://agent.example:",
+    "https://bücher.example",
+    "https://",
+    "https://a..example",
+    "https://agent.example%2F",
+    'https://agent.example"',
+    "https://[::1",
+    "https://agent.example:08443",
+]
+
+
+@pytest.mark.parametrize("origin", _ORIGINS_ACCEPTED)
+def test_check_https_origin_accepts_an_origin(origin: str) -> None:
+    check_https_origin(origin)
+
+
+@pytest.mark.parametrize("origin", _ORIGINS_REFUSED)
+def test_check_https_origin_refuses_anything_else(origin: str) -> None:
+    with pytest.raises(SignatureAgentNotOriginError):
+        check_https_origin(origin)
+
+
+# --- sign-side refusals -------------------------------------------------------------
+
+
+def _sign(**overrides: object) -> SignedRequest:
+    kwargs: dict[str, object] = {
+        "method": "POST",
+        "url": _URL,
+        "body": _BODY,
+        "authorization": "",
+        "signer_seed": _SEED,
+        "keyid": "agent.v1",
+        "created": _CREATED,
+        "expires": _CREATED + MAX_SIGNATURE_LIFETIME,
+        "signature_agent": _DIRECTORY,
+    }
+    kwargs.update(overrides)
+    return sign_request(**kwargs)  # type: ignore[arg-type]
+
+
+@pytest.mark.parametrize(
+    ("overrides", "error"),
+    [
+        ({"signature_agent": ""}, SignatureAgentRequiredError),
+        ({"signature_agent": "agent.example"}, SignatureAgentNotOriginError),
+        ({"signature_agent": "https://agent.example/"}, SignatureAgentNotOriginError),
+        ({"created": 0}, SignatureLifetimeError),
+        ({"expires": _CREATED}, SignatureLifetimeError),
+        ({"expires": _CREATED - 1}, SignatureLifetimeError),
+        ({"expires": _CREATED + MAX_SIGNATURE_LIFETIME + 1}, SignatureLifetimeError),
+        ({"nonce": 'a";tag="x'}, InvalidNonceError),
+        ({"label": "Sig1"}, SignatureLabelError),
+        ({"label": "1sig"}, SignatureLabelError),
+    ],
+    ids=[
+        "no_directory",
+        "bare_host",
+        "trailing_slash",
+        "no_created",
+        "zero_window",
+        "negative_window",
+        "window_over_five_minutes",
+        "nonce_outside_base64url",
+        "uppercase_label",
+        "label_starting_with_a_digit",
+    ],
+)
+def test_sign_request_refuses_what_no_profile_signature_carries(
+    overrides: dict[str, object], error: type[Exception]
+) -> None:
+    with pytest.raises(error):
+        _sign(**overrides)
+
+
+def test_every_sign_side_refusal_is_a_profile_error_and_a_value_error() -> None:
+    # One except catches them all, and a caller that caught ValueError before still does.
+    with pytest.raises(SignatureProfileError):
+        _sign(signature_agent="")
+    with pytest.raises(ValueError, match="Signature-Agent"):
+        _sign(signature_agent="")
+
+
+def test_sign_request_emits_the_profile() -> None:
+    signed = _sign(nonce="abc", label="agent")
+    assert signed.signature_agent == 'agent="https://agent.example"'
+    assert signed.signature_input == (
+        'agent=("@method" "@target-uri" "content-digest" "authorization" '
+        f'"signature-agent";key="agent");created={_CREATED};'
+        f'expires={_CREATED + MAX_SIGNATURE_LIFETIME};keyid="agent.v1";alg="ed25519";'
+        'nonce="abc";tag="web-bot-auth"'
+    )
+    assert signed.signature.startswith("agent=:")
+
+
+def test_a_window_of_exactly_five_minutes_is_accepted() -> None:
+    assert _sign(expires=_CREATED + MAX_SIGNATURE_LIFETIME).signature
+
+
+# --- Accept-Signature ---------------------------------------------------------------
+
+
+def test_accept_signature_value() -> None:
+    assert accept_signature(False) == (
+        'sig1=("@method" "@target-uri" "content-digest" "authorization" '
+        '"signature-agent";key="sig1");created;expires;tag="web-bot-auth"'
+    )
+    assert accept_signature(True) == (
+        'sig1=("@method" "@target-uri" "content-digest" "authorization" '
+        '"signature-agent";key="sig1" "x-entitlement-token");created;expires;'
+        'tag="web-bot-auth"'
+    )
+
+
+# --- the pure verifier --------------------------------------------------------------
+
+
+def _verify(signed: SignedRequest, **overrides: str) -> object:
+    fields = {
+        "signature_input": signed.signature_input,
+        "signature": signed.signature,
+        "content_digest": signed.content_digest,
+        "authorization": signed.authorization,
+        "signature_agent": signed.signature_agent,
+    }
+    fields.update(overrides)
+    return verify_request(
+        method="POST", url=_URL, body=_BODY, pubkey=_PUB, now=_CREATED + 10, **fields
+    )
+
+
+def test_verify_request_reports_the_directory_the_member_names() -> None:
+    verdict = _verify(_sign())
+    assert verdict.valid is True  # type: ignore[attr-defined]
+    assert verdict.signature_agent == _DIRECTORY  # type: ignore[attr-defined]
+    assert verdict.accept_signature is None  # type: ignore[attr-defined]
+
+
+@pytest.mark.parametrize(
+    ("edit", "reason", "answers_with_accept_signature"),
+    [
+        # No tag: the profile's form, answered with what it requires.
+        (lambda s: s.replace(';tag="web-bot-auth"', ""), "signature_tag", True),
+        # A required RPC component left out.
+        (lambda s: s.replace('"authorization" ', ""), "missing_component", True),
+        # The signature-agent component not covered at all.
+        (lambda s: s.replace(' "signature-agent";key="sig1"', ""), "missing_component", True),
+    ],
+    ids=["no_tag", "authorization_uncovered", "member_uncovered"],
+)
+def test_verify_request_refusals_of_the_form_carry_accept_signature(
+    edit: object, reason: str, answers_with_accept_signature: bool
+) -> None:
+    signed = _sign()
+    verdict = _verify(signed, signature_input=edit(signed.signature_input))  # type: ignore[operator]
+    assert verdict.valid is False  # type: ignore[attr-defined]
+    assert verdict.reason == reason  # type: ignore[attr-defined]
+    assert (verdict.accept_signature == accept_signature(False)) is answers_with_accept_signature  # type: ignore[attr-defined]
+
+
+@pytest.mark.parametrize(
+    ("signature_agent", "reason", "accept"),
+    [
+        ('"https://agent.example"', "signature_agent_form", True),
+        ("https://agent.example", "signature_agent_form", True),
+        ('other="https://agent.example"', "signature_agent_form", True),
+        ('sig1="http://agent.example"', "signature_agent_not_origin", False),
+        ("", "missing_component", True),
+    ],
+    ids=["legacy_string_for_a_keyed_member", "bare", "member_absent", "not_https", "absent"],
+)
+def test_verify_request_refuses_a_signature_agent_the_profile_does_not_accept(
+    signature_agent: str, reason: str, accept: bool
+) -> None:
+    verdict = _verify(_sign(), signature_agent=signature_agent)
+    assert verdict.valid is False  # type: ignore[attr-defined]
+    assert verdict.reason == reason  # type: ignore[attr-defined]
+    assert (verdict.accept_signature is not None) is accept  # type: ignore[attr-defined]
+
+
+def test_verify_request_a_repointed_member_breaks_the_signature() -> None:
+    # The member is covered: pointing it at another origin is a bad signature, not a
+    # form error, so nothing is answered with Accept-Signature.
+    verdict = _verify(_sign(), signature_agent='sig1="https://evil.example"')
+    assert verdict.valid is False  # type: ignore[attr-defined]
+    assert verdict.reason == "signature_verify"  # type: ignore[attr-defined]
+    assert verdict.accept_signature is None  # type: ignore[attr-defined]
diff --git a/sdk/python/tests/test_window_behavior.py b/sdk/python/tests/test_window_behavior.py
index 9ef78f33..73a37e5a 100644
--- a/sdk/python/tests/test_window_behavior.py
+++ b/sdk/python/tests/test_window_behavior.py
@@ -10,7 +10,8 @@
      bytes).
   - monotonic_window(now, ttl_sec): expires strictly increases across a burst
     within one wall-clock second, so no two back-to-back signatures share an
-    expires cutoff (relay replay-store uniqueness).
+    expires cutoff, and created moves with it so every window is exactly ttl_sec
+    (the Web Bot Auth limit is never exceeded during a burst).
 
 RED now purely because ``fora_sdk.window`` does not exist yet.
 """
@@ -44,9 +45,11 @@ def test_monotonic_window_strictly_increases_expires_within_one_second() -> None
     first = w()
     second = w()
     third = w()
-    assert first[0] == 1_700_000_000  # created tracks now()
+    assert first[0] == 1_700_000_000  # the first window starts at now()
     assert second[1] > first[1]
     assert third[1] > second[1]
+    # created moves with expires: every window is exactly the ttl.
+    assert {expires - created for created, expires in (first, second, third)} == {600}
 
 
 def test_monotonic_window_never_repeats_expires_across_burst() -> None:
diff --git a/sdk/python/tests/test_window_signature_pin.py b/sdk/python/tests/test_window_signature_pin.py
index 6a83aeca..cfbedc83 100644
--- a/sdk/python/tests/test_window_signature_pin.py
+++ b/sdk/python/tests/test_window_signature_pin.py
@@ -25,9 +25,9 @@
 _BODY = b'{"query":"x"}'
 # A fractional-second now: int(1_700_000_000.987) == 1_700_000_000.
 _NOW = 1_700_000_000.987
-_TTL = 600
+_TTL = 300
 _EXPECT_CREATED = 1_700_000_000
-_EXPECT_EXPIRES = 1_700_000_600
+_EXPECT_EXPIRES = 1_700_000_300
 
 
 def _sign() -> dict[str, str]:
@@ -36,6 +36,7 @@ def _sign() -> dict[str, str]:
         keyid=_KEYID,
         now=lambda: _NOW,
         ttl_sec=_TTL,
+        signature_agent="https://agent.example",
     )
     # The nonce is random per signature; pin it so the bytes are comparable.
     transport._nonce = lambda: "AAECAwQFBgcICQoLDA0ODw"
diff --git a/sdk/python/tests/test_wire_parity.py b/sdk/python/tests/test_wire_parity.py
index bfd3fe31..afd5d9f2 100644
--- a/sdk/python/tests/test_wire_parity.py
+++ b/sdk/python/tests/test_wire_parity.py
@@ -2,8 +2,10 @@
 
 Mirrors the sdk/ts sibling sdk/ts/tests/wire.parity.test.ts.
 
-``fora_sdk.wire`` MUST expose the eight wire constants with the EXACT values the
-sdk/go oracle carries. The shared vectors at
+``fora_sdk.wire`` MUST expose the wire constants with the EXACT values the
+sdk/go oracle carries, and ``fora_sdk.wba.accept_signature`` MUST render the two
+Accept-Signature values the oracle records (without and with the entitlement
+token). The shared vectors at
 sdk/go/helpers/testdata/wire-constants-vectors.json carry {name, value},
 referenced from the real Go exported constants (never hand-typed). The Go layer
 splits RequestIDHeader across helpers/constants.go and core/requestid.go; the
@@ -20,6 +22,7 @@
 
 # RED: sdk/python/fora_sdk/wire.py does not exist yet (TDD red — missing face).
 from fora_sdk import wire  # type: ignore[import-not-found]
+from fora_sdk.wba import accept_signature
 
 _VECTORS = load_json(GO_TESTDATA / "wire-constants-vectors.json")["vectors"]
 
@@ -37,6 +40,15 @@
     "WellKnownPath": "WellKnownPath",
     "ContentRulesHeader": "ContentRulesHeader",
     "ExchangeHeader": "ExchangeHeader",
+    "WBATag": "WBATag",
+    "DirectoryResponseTag": "DirectoryResponseTag",
+    "AcceptSignatureHeader": "AcceptSignatureHeader",
+}
+
+# Go values the Python surface renders through a function rather than a constant.
+_RENDERED = {
+    "AcceptSignature": lambda: accept_signature(False),
+    "AcceptSignatureWithEntitlement": lambda: accept_signature(True),
 }
 
 
@@ -46,5 +58,8 @@ def test_wire_vector_set_nonempty() -> None:
 
 @pytest.mark.parametrize("vector", _VECTORS, ids=[v["name"] for v in _VECTORS])
 def test_wire_constant_matches_go_oracle(vector: dict) -> None:
+    if vector["name"] in _RENDERED:
+        assert _RENDERED[vector["name"]]() == vector["value"]
+        return
     attr = _ATTR_FOR[vector["name"]]
     assert getattr(wire, attr) == vector["value"]

From 20b3554053318fe8639ffaca5bf5229c0c1e1169 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 15:18:19 -0400
Subject: [PATCH 118/164] Regenerate the parity matrix for the TypeScript
 replays

The Python and TypeScript lanes landed separately, so the matrix each
regenerated showed the other's new corpus replays as missing. With both
in, the TypeScript SDK replays the directory-response and
verify-request-accept vectors too.
---
 docs/sdk-parity-matrix.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index fa30637f..ddb4cdff 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -492,7 +492,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 |---|---|---|---|
 | `helpers/testdata/acceptance-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/audience-vectors.json` | ✅ | ✅ | ✅ |
-| `helpers/testdata/directory-response-vectors.json` | ✅ | ✅ | ❌ |
+| `helpers/testdata/directory-response-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/discovery-hint-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/error-detail-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/hashurl-vectors.json` | ✅ | ✅ | ✅ |
@@ -510,7 +510,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `helpers/testdata/sign-request-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/signedurl-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/thumbprint-vectors.json` | ✅ | ✅ | ✅ |
-| `helpers/testdata/verify-request-accept-vectors.json` | ✅ | ✅ | ❌ |
+| `helpers/testdata/verify-request-accept-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/verify-request-neg-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/wire-canonical-vectors.json` | ✅ | ✅ | ✅ |
 | `helpers/testdata/wire-constants-vectors.json` | ✅ | ✅ | ✅ |

From 83616dd04c136c2b5e6670fab37a56ad2818b1d0 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 15:34:06 -0400
Subject: [PATCH 119/164] Name the resolver, delivery-proof and removed
 TypeScript changes in the changelog

The Web Bot Auth entry now says that Python's KeyResolver.resolve and
TypeScript's RequestKeyResolver.resolve take the directory as a second
argument, that Python's sign_agent_binding returns an AgentBinding, which
TypeScript helpers of the old chain are removed, and that the Hono
middleware answers a refused delivery proof with the proof's own
Accept-Signature rather than the RPC value.
---
 proto/CHANGELOG.md                            | 22 +++++++++++++------
 .../src/content/docs/reference/changelog.mdx  | 22 +++++++++++++------
 2 files changed, 30 insertions(+), 14 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 1f317d82..c1fbc027 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -733,10 +733,15 @@ SDKs, in all three languages:
   directory its member names, and carry that directory on the result. A refusal for a
   missing component or a refused form carries the `Accept-Signature` value
   (`helpers.AcceptSignature` / `accept_signature` / `acceptSignature`): Go's
-  `connectserver` writes it on the 401, the Python and TypeScript server verdicts carry it,
-  and the Hono middleware writes it. `helpers.ErrBrokenSignatureChain` now means an
-  incomplete or dangling coverage of an earlier signature. `helpers.BrokerKeyIDPrefix` is
-  deprecated.
+  `connectserver` writes it on the 401, and the Python and TypeScript server verdicts carry
+  it. The key resolver receives the directory of the signature it resolves: Go threads it
+  through `helpers.SignatureAgentFromContext`, while Python's `KeyResolver.resolve` and
+  TypeScript's `RequestKeyResolver.resolve` take it as a second argument (a breaking change
+  for a custom resolver). `helpers.ErrBrokenSignatureChain` now means an incomplete or
+  dangling coverage of an earlier signature. `helpers.BrokerKeyIDPrefix` is deprecated.
+  The TypeScript helpers that served the old chain (`COVERED_COMPONENTS`,
+  `buildRequestSignatureBase`, `maxSigLabelN`, `signatureBytesByLabel`,
+  `parseMultisigSignatureInput` and the regex-based proof parsers) are removed.
 - Signing transports: 64-byte nonces; a directory is required (`WithSignatureAgent`,
   `signature_agent`, `signatureAgent`), and a client without one refuses a signed call
   locally as malformed. A per-request signer source (`core.WithSignerSource` /
@@ -744,9 +749,12 @@ SDKs, in all three languages:
   (`core.WithAppendSigner`, `appendOnly`) is joined by Python's `append_only`, which
   Python lacked. `core.MonotonicWindow` keeps every window at its ttl.
 - Delivery proof: `helpers.SignAgentBinding` / `sign_agent_binding` / `signInbound`
-  take the agent's directory and a nonce and emit the `Signature-Agent` header; the
-  Python and TypeScript edge verifiers apply the new profile with a structured-field
-  parser.
+  take the agent's directory and a nonce and emit the `Signature-Agent` header. Python's
+  `sign_agent_binding` now returns an `AgentBinding` with the four header values instead of
+  a tuple. The Python and TypeScript edge verifiers apply the new profile with a
+  structured-field parser, and the Hono middleware answers a proof refused for a missing
+  component or a refused form with 401 and the proof's own `Accept-Signature`
+  (`POP_ACCEPT_SIGNATURE`).
 - Directories: `helpers.SignDirectoryResponse` / `sign_directory_response` /
   `signDirectoryResponse` sign a directory response and
   `helpers.VerifyDirectoryResponse` / `verify_directory_response` /
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 19629564..70cd551f 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -745,10 +745,15 @@ SDKs, in all three languages:
   directory its member names, and carry that directory on the result. A refusal for a
   missing component or a refused form carries the `Accept-Signature` value
   (`helpers.AcceptSignature` / `accept_signature` / `acceptSignature`): Go's
-  `connectserver` writes it on the 401, the Python and TypeScript server verdicts carry it,
-  and the Hono middleware writes it. `helpers.ErrBrokenSignatureChain` now means an
-  incomplete or dangling coverage of an earlier signature. `helpers.BrokerKeyIDPrefix` is
-  deprecated.
+  `connectserver` writes it on the 401, and the Python and TypeScript server verdicts carry
+  it. The key resolver receives the directory of the signature it resolves: Go threads it
+  through `helpers.SignatureAgentFromContext`, while Python's `KeyResolver.resolve` and
+  TypeScript's `RequestKeyResolver.resolve` take it as a second argument (a breaking change
+  for a custom resolver). `helpers.ErrBrokenSignatureChain` now means an incomplete or
+  dangling coverage of an earlier signature. `helpers.BrokerKeyIDPrefix` is deprecated.
+  The TypeScript helpers that served the old chain (`COVERED_COMPONENTS`,
+  `buildRequestSignatureBase`, `maxSigLabelN`, `signatureBytesByLabel`,
+  `parseMultisigSignatureInput` and the regex-based proof parsers) are removed.
 - Signing transports: 64-byte nonces; a directory is required (`WithSignatureAgent`,
   `signature_agent`, `signatureAgent`), and a client without one refuses a signed call
   locally as malformed. A per-request signer source (`core.WithSignerSource` /
@@ -756,9 +761,12 @@ SDKs, in all three languages:
   (`core.WithAppendSigner`, `appendOnly`) is joined by Python's `append_only`, which
   Python lacked. `core.MonotonicWindow` keeps every window at its ttl.
 - Delivery proof: `helpers.SignAgentBinding` / `sign_agent_binding` / `signInbound`
-  take the agent's directory and a nonce and emit the `Signature-Agent` header; the
-  Python and TypeScript edge verifiers apply the new profile with a structured-field
-  parser.
+  take the agent's directory and a nonce and emit the `Signature-Agent` header. Python's
+  `sign_agent_binding` now returns an `AgentBinding` with the four header values instead of
+  a tuple. The Python and TypeScript edge verifiers apply the new profile with a
+  structured-field parser, and the Hono middleware answers a proof refused for a missing
+  component or a refused form with 401 and the proof's own `Accept-Signature`
+  (`POP_ACCEPT_SIGNATURE`).
 - Directories: `helpers.SignDirectoryResponse` / `sign_directory_response` /
   `signDirectoryResponse` sign a directory response and
   `helpers.VerifyDirectoryResponse` / `verify_directory_response` /

From 514a5f35b9ea0b043258a76e55496bd7d9831a3d Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Sun, 4 Oct 2026 15:34:54 -0400
Subject: [PATCH 120/164] Describe the four-header delivery proof in the agent
 SDK page and parity map

Python's sign_agent_binding returns an AgentBinding with four header
values, the Signature-Agent member among them, where the agent SDK page
and the AgentBinding parity reason still described three values and a
tuple.
---
 docs/sdk-parity-matrix.md                                  | 2 +-
 sdk/parity/symbol-map.json                                 | 2 +-
 website/src/content/docs/components/agent-sdk/overview.mdx | 3 ++-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index ddb4cdff..8cc8c31f 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -353,7 +353,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `core.WithSignerSource` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `core.WithWindow` | Go functional-option builder; py/ts pass options via kwargs/options objects. |
 | `helpers.AcceptSignatureFor` | Go maps a verification error to its Accept-Signature value; py/ts carry the value on the verification verdict (accept_signature / acceptSignature), so no error-to-value function exists to mirror. |
-| `helpers.AgentBinding` | Go value struct holding the three proof header values; Python returns a tuple of them and TS returns a prepared request, so neither names a public type. |
+| `helpers.AgentBinding` | Go value struct holding the four proof header values; Python returns a dataclass of the same name from fora_sdk.pop, and TS returns a prepared request, so TS names no public type and the pair is not a one-to-one face. |
 | `helpers.AgentIDParam` | Signed-URL query-parameter name; language-idiomatic inline constant, no cross-language public face. |
 | `helpers.AlgEd25519` | RFC 9421 alg tag constant; inlined per language. |
 | `helpers.AllSignaturesFromContext` | Go context.Context accessor; py/ts thread multisig state explicitly. |
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 50566ee8..4897f11c 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -77,7 +77,7 @@
     "core.WithSignPredicate": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "core.WithSignatureAgent": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
     "core.WithWindow": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
-    "helpers.AgentBinding": "Go value struct holding the three proof header values; Python returns a tuple of them and TS returns a prepared request, so neither names a public type.",
+    "helpers.AgentBinding": "Go value struct holding the four proof header values; Python returns a dataclass of the same name from fora_sdk.pop, and TS returns a prepared request, so TS names no public type and the pair is not a one-to-one face.",
     "helpers.AgentIDParam": "Signed-URL query-parameter name; language-idiomatic inline constant, no cross-language public face.",
     "helpers.AlgEd25519": "RFC 9421 alg tag constant; inlined per language.",
     "helpers.AllSignaturesFromContext": "Go context.Context accessor; py/ts thread multisig state explicitly.",
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index a0b90569..0a298f5d 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -153,7 +153,8 @@ A few rules hold in every language:
   that writes an enum as its number, which the Go reader accepts.
 - **The delivery-fetch proof is the public signer.** The Python client's
   `proof_headers` is internal; a harness signs a fetch with `sign_agent_binding` (or
-  `SigningTransport.sign_agent_binding`), which returns the three header values.
+  `SigningTransport.sign_agent_binding`), which returns an `AgentBinding` with the four
+  header values: the agent key, `Signature-Agent`, `Signature-Input` and `Signature`.
 - **Error details are read from the binary `value`.** A Connect error carries its typed
   reason as `details[].value`, the binary `ErrorDetail`. All three SDKs read it; the JSON
   SDKs fall back to the lowerCamelCase `debug` projection only when `value` is absent.

From b170f25eec85ee7b0abf8108f71530f660ff160b Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:00:04 -0400
Subject: [PATCH 121/164] Name the refusing party, specify the MCP tool error,
 and state the hop-cap refusal

UpstreamRefusal is the one shape for "a peer refused a call made on the
caller's behalf", but its field 1 was named exchange, which fit only the
Broker purchase it was added for. Field 1 is now party: the bare host of
the party that refused, with the same number and host rule. On a Broker
purchase item the party is the Exchange, equal to the refused items'
signed offer.exchange; the message comment says that once and describes
the MCP case once. The message was added on this branch and is in no
release, so buf breaking passes against v1.0.8 and v1.0.0.

An Identity Service MCP tool error is specified: an error result whose
structuredContent is {"refusal": UpstreamRefusal}, the party being the
Broker or Exchange that refused, or the Identity Service itself when it
refused the tool call, and detail the party's ErrorDetail unchanged. Each
tool's outputSchema declares its success shape or {refusal}. The Identity
Service and AI-agent pages state it, replacing the earlier pass-through
wording.

WellKnownManifest.max_intermediary_hops counts every signature on a
request, whether or not it covers another, and states the refusal once:
resource_exhausted (HTTP 429) with no typed reason, before any signature
is verified. Go's WithMaxSignatures and VerifyOptions.MaxSignatures take
that value itself rather than max_intermediary_hops + 1.

The generated code, the descriptor, the SDK types, the JSON Schemas and
the validation corpus are regenerated; the reference, transaction-flow and
Broker pages and both changelogs use the new name.
---
 conformance/corpus/cases.json                 |  80 +++++++++---------
 gen/descriptor.binpb                          | Bin 681923 -> 682651 bytes
 gen/go/fora/v1/fora.pb.go                     |  70 ++++++++-------
 ...a.v1.BrokerTransactionResponse.schema.json |  14 +--
 ...okerTransactionResponse.schema.strict.json |  14 +--
 .../fora.v1.ErrorDetail.schema.json           |   2 +-
 .../fora.v1.ErrorDetail.schema.strict.json    |   2 +-
 .../fora.v1.TransactionDenial.schema.json     |   2 +-
 ...ra.v1.TransactionDenial.schema.strict.json |   2 +-
 .../fora.v1.TransactionResponse.schema.json   |  14 +--
 ....v1.TransactionResponse.schema.strict.json |  14 +--
 .../fora.v1.TransactionResultItem.schema.json |  14 +--
 ...1.TransactionResultItem.schema.strict.json |  14 +--
 .../fora.v1.UpstreamRefusal.schema.json       |  14 +--
 ...fora.v1.UpstreamRefusal.schema.strict.json |  14 +--
 .../fora.v1.WellKnownManifest.schema.json     |   2 +-
 ...ra.v1.WellKnownManifest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |  12 +--
 gen/ts/wire/schemas.ts                        |  14 +--
 proto/CHANGELOG.md                            |  34 ++++++--
 proto/fora/v1/fora.proto                      |  59 +++++++------
 sdk/go/connect/broker_execute_test.go         |   4 +-
 sdk/go/connectserver/options.go               |  10 ++-
 sdk/go/helpers/verify.go                      |   8 +-
 .../docs/components/broker/overview.mdx       |   2 +-
 .../docs/components/identity/overview.mdx     |  24 +++++-
 .../docs/getting-started/for-ai-agents.mdx    |   2 +-
 .../content/docs/protocol/authentication.mdx  |   2 +-
 .../docs/protocol/transaction-flow.mdx        |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  34 ++++++--
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 31 files changed, 286 insertions(+), 197 deletions(-)

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index 70f772ab..aa3b0250 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -22016,7 +22016,7 @@
     ],
     "json": {
       "code": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-      "exchange": "x"
+      "party": "x"
     }
   },
   {
@@ -22027,11 +22027,11 @@
       "string.min_len"
     ],
     "json": {
-      "exchange": "x"
+      "party": "x"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#0",
+    "id": "UpstreamRefusal/party/killer#0",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22039,11 +22039,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "https://exchange.example"
+      "party": "https://exchange.example"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#1",
+    "id": "UpstreamRefusal/party/killer#1",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22051,11 +22051,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange.example/register"
+      "party": "exchange.example/register"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#10",
+    "id": "UpstreamRefusal/party/killer#10",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22063,11 +22063,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange.example:0"
+      "party": "exchange.example:0"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#11",
+    "id": "UpstreamRefusal/party/killer#11",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22075,11 +22075,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange.example:99999"
+      "party": "exchange.example:99999"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#2",
+    "id": "UpstreamRefusal/party/killer#2",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22087,11 +22087,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange.example?x=1"
+      "party": "exchange.example?x=1"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#3",
+    "id": "UpstreamRefusal/party/killer#3",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22099,11 +22099,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "user@exchange.example"
+      "party": "user@exchange.example"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#4",
+    "id": "UpstreamRefusal/party/killer#4",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22111,11 +22111,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange.example:123456"
+      "party": "exchange.example:123456"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#5",
+    "id": "UpstreamRefusal/party/killer#5",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22123,11 +22123,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange.example:"
+      "party": "exchange.example:"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#6",
+    "id": "UpstreamRefusal/party/killer#6",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22135,11 +22135,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange.example."
+      "party": "exchange.example."
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#7",
+    "id": "UpstreamRefusal/party/killer#7",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22147,11 +22147,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "exchange..example"
+      "party": "exchange..example"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#8",
+    "id": "UpstreamRefusal/party/killer#8",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22159,11 +22159,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "-exchange.example"
+      "party": "-exchange.example"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/killer#9",
+    "id": "UpstreamRefusal/party/killer#9",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22171,11 +22171,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "[::1]:443"
+      "party": "[::1]:443"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/missing_empty",
+    "id": "UpstreamRefusal/party/missing_empty",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22186,7 +22186,7 @@
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/pattern#0",
+    "id": "UpstreamRefusal/party/pattern#0",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22194,11 +22194,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "two words"
+      "party": "two words"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/pattern#2",
+    "id": "UpstreamRefusal/party/pattern#2",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22206,11 +22206,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "!!bad!!"
+      "party": "!!bad!!"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/pattern#3",
+    "id": "UpstreamRefusal/party/pattern#3",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22218,11 +22218,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "\u0000ctl\u0000"
+      "party": "\u0000ctl\u0000"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/pattern#4",
+    "id": "UpstreamRefusal/party/pattern#4",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22230,11 +22230,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": " "
+      "party": " "
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/pattern#5",
+    "id": "UpstreamRefusal/party/pattern#5",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22242,11 +22242,11 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "-5"
+      "party": "-5"
     }
   },
   {
-    "id": "UpstreamRefusal/exchange/too_long",
+    "id": "UpstreamRefusal/party/too_long",
     "message": "UpstreamRefusal",
     "valid": false,
     "rules": [
@@ -22254,7 +22254,7 @@
     ],
     "json": {
       "code": "x",
-      "exchange": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      "party": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
     }
   },
   {
@@ -22263,7 +22263,7 @@
     "valid": true,
     "json": {
       "code": "x",
-      "exchange": "x"
+      "party": "x"
     }
   },
   {
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 7624544e0627a872fc4371821e3740c0dac458fd..54c51af96f43b00e67c618a44e4f3c3d1a5b04fa 100644
GIT binary patch
delta 28739
zcmaidd7KnQvj22VPg7NZ3=Q4W*K}7O)6?C|!F|pQw}KaVuDY%|z_{Qd_!wN*_3aM#
zeF~C*fP%olh;j(D+#)E7a>${8$RVfVs)(o@!tWcIS(NX+KYoAk`AkGbels#6GBPSN
ztJ$_E`Rc*skP)^K%81Mn_SISA9#AH|ou2SOR<ud(`-)!gq30?G52`4C_Wp{epRX+M
z@BGZBXFXRwXz+{dzoukucZk2!b4F$r_SffLtgqK{W_dF%jNX4S3;!JH{TFN1YF4#O
z)fKzn>6qZkSm3hx=Bmd3f;GM#GTkUQo~x)BlwWBK5`7s1p9ZgYdH?>#v*mp%jDZ7;
z!F?+@gNya5=v&_Z>9)kw4XzXZEFUbISM(|1(wzqm7*JKwd$7@aARzh;Hp&N7zECl!
zqL1-HzrlSAK=uK*(ir^WbKqg5l>-M9=*IH{diO0K@YjkyMMn3*Mn619&jSZk7?pj?
zpQ|vQ9yrK|2z|}&A_Yc2DEPua<GKFjy(=o)>V{zy8Xb*JgX#|aTg4#bx#tG~v$BG%
zd{*@{Z=M>+CK1D^tQdeU1_Pe0EOvy8sJq_fg9i13LIjDPI}IX;{7TVaP(|f)0|!)A
z7`+Ded6A9FQ_Ec90SwlwqThhO8iSu7G@zmnJDjJ+`aFpC!a8CYLbU5Y!~hG7ivN1P
zyuUGcAn%Bqp86eJ@oZ(jQQ7aWz=0#4t{7BQajVG-ef#z9E3LxeSd)C!TO|fOz__P#
zPv8ygZ&VB#G;mOn(Q$y$y$=T2Z}5x80~Le*-miCsc>Y4)ffxn%@C)VA?-hN7g2GRg
z+)eP3z=E+WpYK1|5DgKT&-cbqEBe68gDa}YjM79eMPv{~+WzlY`xlRx|6vkoUjtq>
z?E-6*4;Gq8n-tJva>oA|3*x7u|I<e3g}xO7$dRTINtoM#Mp&e?>v?LjircgjVr@xO
zM%JK;{^c){<G7>9&x0zS8#o9t@ifMYm?kI=drRn6AQ$O+Z9UWOw>j+-TxyO!%ck4y
zekH@{nCw!fyX?L(HltJdpb7)V9&B^~B7yzi`NG-%zu8uxv-hI9i=7yv`Ph$9y)MgM
zpgOA1U6#|1{#3oLo<+Swo5?QiHj~UGvc6NVC!VULT!ZPZOx>xgB(9FuZgV=Oxa`wh
zS$ch4GkIt?)#Y$P>=w)6%zD}7*kaSC+4(@xlWi{BldlG3V!D*C{#pL{a6;|j{=deh
zQL=XuYA3gDlt0_6-(Q~}_<W@?@cF^L2R>WT)+lFnlWNo3$O-@Td<Bd~se;YFN6%%?
zB-OB{b5s4T;zc$+srIazYYp25W#+oHx^mbys6W@0UEd^CBAs{X*?iD8K4@?n+$o35
zISL6iE%_sh!<2Q`=LpwAV!lg>_$Jzn2m4kygfChDl=`?F_TH3QSPBtccC0w4MQyi9
zLd*HCoLrLx{Ct-Y)|((p2b_*Yu8bPiwvpPn-XfP;NB;|~96&f_RkIfxsZaK*Hiru)
zfT~?uJq`pCK-Dg11CzvXt6dGN_(<@Sh6_ciU9JcJ$l{G2{<rSo{Qz+ZYg?fD3YS>@
zkXe_wG-1bpLS|j!YUtA2@Ft2gYbhIApth@8Y7RM|D2T_UuG(f31qe%BPQO%50m4#O
zFr?pxc!aPD2$wP5CiPOJs!Ltrr+Da*2(-^6v0meB`kqW($*SvgtafD#b=!RJWg1;7
z2J}m}D^$1JvRAvZ>gx=y%Bl;q+1Ido#p<lk8kfR*Cng-YhI;==2tl{CY)7&Bb8xLo
zF-S!S*&wvm6^-eQI1s2bJKR_;45nR5Ov)(4b>%1YFqgrg-es{SYBcn&O9@DsOvt?J
z3K{xPg$vo8_I2r}o2Z$#ymc-GGnn^ghtxV(JYS!h$)#YutuCdLZ&)T<nX9^3ppBYJ
z?`o>vYbymmDO+Ws)mB$Qp-Do4t*)Yuu&M(i$jZdPwz`Tt=$$wweE&Xsq`BH9_`XXC
z%Qg-`yzh$T=@Bkd%W2=n);CvUp=~aO2PlAQL1r5T=(#K|gt*$B{=K>SjS}2#A*qns
zO-P-&kmj`SVfNN)*WezP5|q7ZklEu3NAwrDjPA7WWq)n0z7*Pv`6Oj@$n16H<?FkU
zU(kDPr~OFU)<*52lpV38YD4M>NeTPa#?X(r67A&BYtzt=xRP!4*9Ax&r~OoVQad%G
z1W#F3uLF=%u6RN(<2}`N+E26HrD})pX_t~Gk?TU{v@4O4GPgPHXW#(#S*hBPbuLqr
zL6D{wZ-eX^!n>Q})pOd<vT<eVy}`3C#niMOWX`%$1$rr$$#&Y$v0uv6_Q7)&PBvuD
z5zhTwroPjDo;}cBeK2(1!l@6L^Mv!3aEjAu|0(@pdv&=I`pKolrS?up{p3nEGL6~5
zX}_MH-U-Guu3N@z0IBO_%-v!_G<4dBxLIabb&oN`t)wJYLr4vA7Z&TIY?ysmE=IaD
zCb6Hosw15v-B}IwhoJ0jG~-6Ol_+~+SFL;VK*ABAMF4;V#wa%eppXmW;b=Fze!E%}
z8tqm>yrbLr)En)NM0GzGLX$CW*8L7O5FF!HcoIcFH2221y*@q0h2a0OZ1^2&JUG^^
z_#_a`y|M1xpx%tjVCs!yJMK_h1jo5$aNnlT%p2!Ma2IhIOuX^T*G+949B<*!JR46q
zqAyIO39N57^fke)cx7KSktVnUxq30j!9<$KmUUB`7!$40(?ps`qd!<*R~$B{;~jU#
zmh|u4)B|e0cigI5@21-wHj%VW+^61Iw8rh=*_@bYyT;uxLERCF0k3g4>!!blgaI0s
z+?amke)WA@;YPQ^C8a2dZFIW}OcISYx?A0=-@)79;bwNngKGEU&2C3SDMNPM>~?Xd
z1D7)OW_OFb^mi1ftT-JXxHHzLw>+pewPk<cR$cnm+kmBz&ZpD1ht<xtnxA$%_ySB^
zfSq>V#=TD@z)rg{E2ki-f`-!Ta+LdgLmRP^OB@Z;6aJ$9!*%Dn9EXQ10|B&Om*Z_@
zl4!p!r)3Yl4pz!sr(<JI#*aBRUVi100dmxU{yIX~o=f^{$zfAJS6^)g0$$ycBa0)D
zklm7_)ge?81?rZZdfAl4LE_<778tBXn{2h3&<eOUM{~+1v;uC;ak=#x2X6zr?9Nd>
zOFuVQO=ec%PqFgnDzx(N&Z*7E18f4{o#W+e43U7@or5)o$}*5B%Xa7FeU_8S*Fj>8
z)|_avC&ym=M;5HIH^<&YUxMU@c0l<uN6GQcvKw8x_Pjss`G*=(nt~;&K?nfjOH2Dq
z-T>M!#*&2gcBkWHj&e39{q{07XsZGP_5#OjZb$QzIdb{OQ#3!BgXLdnZHLw;bKGa4
zH5HS1PD{1Z@pX><OpYifB@gXR<;Y@EvQSK(&Y@y5#5F;`-`H|klYeWz7P(3mjQ35B
zVj3?CYJ8L9<qIpi$pYLrIiawALwFp*KfvQpYgbs0f2oeLA1p68fcry^EJku^=7Dtb
zs05G$KtJS!qxx(OVHI>bhI=y3rKkN%on_A(?m>vxMR^~r<#dekC=)z(eT|~m0zF#G
zM2%0p^nJtB=C)R2J@68hmf{(lG|pr1@COe18Sk+-)4w9K2N9x<X&z-}dgE~Qaa$Gs
z6!yjg=r_$H%Q}!~H_d~xj_eH*_MYZxIMXBSO$=`D=^i`t2zyH&+P&hD_LeNzdxnSX
zeO2gy95m0PEcBqb8L7Tts{&zaK_NfSBWvj(FZ$+rP)iFfY|vt!$GPy97NVMVyymgL
zaZ3xco_^iq$ma127*WUB=X;RZ=tV=a;JpPNN1YVaA>hGyi`lHvYV3){9yyu7gc}!o
zq#Hp(!Nne@hzF1u?qUxLEt=IJQKc;QgzuJ}$odhi$X$9a?*sBnn175KdSZ#yM<)7M
zV)a2YXNkv|BSC5AEb;h685>kG(Z>=`;11bGrX1T6PwwrykN1Hkr-scOqXv4{Sbfm+
zs`1p$mY_7fYCQE#P?}yf9#p4d9GG4pjV`henp~t~jVIh$Z^ionwala3<4dw<{#7f%
z+K*N1JPC$KK|v*pKfl!*&7x(V`n+U;nP?U*^Pun)y=9@dWuAm-wJh1&GEed@{S%sJ
zLCR<=Sj|{<*ApwOPH2X$u*^m?Y=uY8Ff>6YD?C{DL?;e(vceO+R}RS`&9=f5yGIZ5
zKCpVOVh6{m#uKZoK5C(lRaPIh(8nr|Q@lk5m0IXyl?Us%=%W_;SmlYB1F0qZSmlY{
zr5Er%Ah4P}FkUSxU2XNDVsxuLwRr)7v8w1}wa0IQs_0|22PN(*VG7i^@3PI~)zweD
zYe8sG^Ic0#4G`~ooTj}sK)mZgX(!awpvAkMq<A3<Dw<UDT~F!(y&YE*HSz|wcY<14
zy20v0hngEawfTDp)YQ?(22Wla396%y4W5!ReG5uMJVph*BYo#Yb*u8^4hy3;Fm`xq
zi!2BsVC?XO_)<%4fU(0<)L25+hMqe-O`eo4s|`J=wA|ro`h<R-*1({G68m8KnJMZs
znNJ?HdZ~k64tnIPFNDy`K~Ii3XX~JsgC68?VU0TI<)A0hQ}$9v_Hxh@?V%qK2@5s)
z(R8!v>ch6GqgF3<(aTX!Z8H|?qL-tdU=s;j7rh+yG;e8==;f%VRWFg5mAdE!Rrpa)
z>vAk$I!3}dc2p2YJx@HzSEitXy8pNb@BH<#Lp8W!KxMyytnA-f-L`mwzVS$`QXtXy
zagSW3K%(#CG{P^1{`5}ZQDVMN6;}U(qh)&J3^i<f6fASP)<gK5wZf+!;LchzsUG0Y
zdazbe1r%~RzVT#C_KFH91j%naYObh&LR0~L=iwDla}YrN&dlu~A^V+2RzM(u`ke<A
z&{--dLX=o9r+3d(`zl43JxVQZH*ksVQAOGUiAI+_4I1jlP=TTm!r^+l&#USQTk&<P
z5n)}o8c~wIPL19WJ%JqQO;^rUV@l~ruQWnPp$s?DD>FSvfQ<Ay#jFI$TcI4Mq9KIx
z#XiQ%YX<iHYpSDoj8{4XkI-<8S2_bE8jkUrB}0hTlSy7)GCT<aIFl?DC~Z!%RG_pu
z$tyD&gn=~4EB#<N9aFs-Yo#9yNKW;tLE#63{4gDzpb~8k0;toya*YKE+38;C2arIW
z?v<6OL8hDGWx0dZKr0YvIm2p6&Y0nq1u34Q<qR)Mx@#0>2AtuT<5d=<=PpqHX{*AY
zBE0YbFmuddfdtGPuUy|i0%ndE>l-cdAhF2L@dg%nGwHpWGaxY6Yj^P(N&+Ge%=4le
zZJ^iYB4F9+P53phy)9>A++5I3li_u*z4U*IV*bqc+8-3vr~wrmOT5Zk>9>}tAzKw_
zXbgrZOF%;7C0<#Kf&}CeuPjDELgOV~_gm1Iicw<l;%KSYzRW9%BgsR%8m}ylBn!pS
zn_eo8zM%AOP+e?a<yF?O{)^SmtMHd;L_1Vo<&{Yda!_fNH%C++AOXF~E30~tP-&Gn
zZw*wUdWRUIs(;5Tt9r?T$ySpcKgR2|J?wOB@Me7CwfWZDjQcAp2ePfz>SpH#ui8NG
z0qw$6K5p_V@3W~()O)M&moO0c&}NfYR*xW|%_gs`9zjBzP2Ps@O9K&u8)&oFzEv7X
z^3ZOJX&}jhf!^Z=x}9r);&HoI+3B_W*b__DPE{aGB`7?%du8z$=Ha>BD~m^vP-45+
zx$~A1vUvQ!YybF`5@zxEp;s1<)DF5ruN_`lJW3Ya@sZb&O!2H3aXNN+Gxp2b7=a?Y
zylP0y#t6;Ey<#>t1A)-mYbp&AvU|<h2ogQ*rP-LoXd^UJ_A&RHYNI>%d1X!nlek`0
z?7)IVlYL}tO3zWJ<DfU=tW+cl$%9@qJx58ALozLZfFg%XML<IKkf{hrpdK>QLX;Fa
zBGUp0v^-+9Bz=yUX#r2s@(85`{-zhDv~a?!oT0guXRE@W!e4lRb|=hP1rqH}n6nBb
z{B^?XJ|q1_3?4Kmz4p`6Uy_G*Uz<TASqPd_JZQ)!F{k6aH{*M5lblR@4Bei;l`CUp
zlnc^3ATYEGrivgTd%-jcNOX09jDr0ZdyMq|4{NzxZBqOnuj1e<7MR5K))J>6AkpMM
zUYvr^_OU(B>A2#}n3|rkT-|M}cg3sv`F?gDDRGTeu2kC<Uo)Y=1k^QeE#YX8fVxJG
zo<;dKkGdb~OMkUe_1Q{?`edR28<9EGS6dW+Ah}p9#nl4|kfFZ9B0iz>XaODJW6j@D
zdzOx{AShvv@X4hRLVy_IlS?5;K#cHVDQwTx05#gjw!WiwC>?D<PzD`sK~M%A?Q@Ev
zE01T;(LNNlw3_D8YC6s*-oQaX|8YLKoPtElaXz`6f<$-YeCBeRN19IY@#VA&2mnp7
zbfD#QilqZBr&D}#IfXEgrueX&Zl+i8xYJSX%Q&3gxklY&uV3v$%Hz8_adJ%!dca!R
z3Irf)d@_VV0<y*@*HVyxtnnc}j*y4qu$yD0PkAT(%m(#QTNVBkp^pb>x6-GH`VA!7
zt@QZ=d<g`J&|m4xeaDx{%SB>P=-XHM?Ba+>a^SpGzGxv&@sb6gRleeOdK2D11lIbL
zfG=u1IH;U;+N7omL7PgDTi5zD@tzsyZe8ocI{YMW3#4^y)+V*Q`8ul!xpAFO6Q@0K
z?#6XKcMk1!Vz{vWMxWyJ<r&@B-j^H=S@DNzUDji>TDK5<QPM#Q7#n@6I4=W<jyC#`
zrdx6h*mnyXyIF1Ba*IzKo&cCUx5XFW+v7x{$rfKCsV}1{FpjrF#}1$Jsn70vHIqHH
zUMoz;wx}=Ks=zeIN-u{yd~yXx3n1+9$rT(V48FtX{uBnM6`UA6*L>u&f8rA>xa6VT
z$3D4&OBQm?P9Lq{&ABpojojl?!oIk{0$bI_r69x-9#?81viJCE^Nmt;LNAkhd~Wex
z0utDJeAr8%IT5F=gne>OfI!QA=9~bDmix>(0TM0u-I^0|1+~y2F(*2MfL9J#I?$Wq
zA#+aPDUc4Ca{?rg4$+*r2fOX{oQ|Wuj1#QkHudg$M}1ih_<2n|nh;;Hf!owr@GGC(
z8V3`x_LUD?<6&$?*Q3xn##U}qqrqc7xit<ZWR6kdpe^lslzWb|pSG#-&~Z65ViK38
z!ef|}`A)|vU&eQ=)pqsKdZ&D<mrj-J`J}-a_S$x}OUW5?WME=sXUvg-gbHVTPO+r{
z5+gg~!~Q;{?tIekJPUoGHYqu8AyDQ#@2kys*GYzid_GZPfds;NA4;q)907V>U=u!2
zZ!f)IAy7KH;Hxb%c0Ny>7kt^K4wN`AkPdfZYze312VcfiR_{Z#d-e}BA3miDFhPU6
z#QJ`y?k>4x0)q+QOXlD}LbXd~Mg|GsOJvyRIRYO3$_DLFUnu?6LZC(aR||m#_p479
z;R!ytUup6mqRf>bFWgMWKT;pF72PzaF1ToPliWbB&LGk4O&^XQI`TH4hWXjsAFG{8
zhxujDCwM76%r8v>5)i}u*<v98$s1uIxQ9a^R!90-;ZF75jw3Ay+PfNQK~Mr2X+cl|
z8R-Yaog4zPWBf{?uY}#VUG=a7JJsS2V2C-G;QPB{{I$iT0|~4#{@jEd5oMM!{ze7*
zVc`p8mWh643hVrddZ-G2nJBdNG|?{?$OPZqo#>ab1`;R}{qQrr(SSsDndpyA@rz=d
z7^0+{<hK{_<SkhUzsY|4pY^*C9!aNTx<BJpzs*-_JXBf!*NTp8_NQw5KTY?mPTh-<
zCMi&6_?7y;+D6C9%8J3pL-%(V`r#4u!!wcnKw^|L{BoHB3H@gHu}tBt3pjW<lQrI@
z=9bJfM+hbmW||`eNkV=ZE+Bz0(~oe8a0EolY&Le68tXLMLZG=Y+d`mjX8YyNX_Cjz
zY(KKy33~HLVPn^yu@<9k$L@PfZ^$xtt2?si`B5M7RX9b1UC5?<uFh$Tzk$5a934m?
zFEmF761pv<(M_k-Aw~Tz^W&sqWG1^WQ*DsmwnzP!tq3e(9SCp<`C1DS?U(sczfvAf
z(M(wG7qtlpxM;aw)+Qj)a=BmDCLqyrx!<f!Qbext^V*~<2*map(>fqAhBc;jKmuuv
zU)Cldc~j)!(Y0WmMp&Kv8AAf;Yx~rZnb|x1sz;cm5t(HtnPoxIPIEwD0&J&g5Rd@d
zNd}oqLEVUy-p!u+LVc}hw_mBvBOgrS`s;|b2_)L=_ItegCea2~*v|?Nsau}hZ;qi6
zf3M$fjsYYf_WPaU#tBG3?Du0upkx6O3)+6aUtD`3QoP0Q_XoP`--}Mr;4r)Eu=-=k
zVXKo&nEbH6w#dSbxS<aF!>uJM8S1dVT?w5oq7&HoD0|_E+P(Csg+K-6QNP@%gACL>
z>JRe!4AcY&NBy|Zu#du}5k>8}^zTR11Gdt076z4)=d7Vp+BoNTioH;@0meB$?qqBh
z80hfF^le|M@7YR!v@j@X{AgiNN%EsPr5f?1@gq$sX$;g6zp&cJ)gMcLu^^~|_{Cpa
zWY0#tg80QB5gVo;p~f%%X3crzHX?&xk&z1mEw7l73lg1QF(VfwT3)#oxs9lTxG5r+
z4LPYgN^e>!Pyun%8U+;)H_gCBLjc|MBXGMTZVPa%70B4eww+YFH5eXHefn@(T?!Dj
zjxhmcVmkP>s@SUVr^s7)0PryZnO8vqd`v*z-~kEnF#()XP+kRzygDXeOble|4Y7wx
z489HIbc_wyCj_$ij?XPF+KvmLa%+ekqgzbWZsY3(sCaA36+?eh*xRSnl9DNwQdAa9
z3CI<!fX|dEfo!n|f&}oC02aYNa|B#Wn#SU%)xT6tvk)k#rdh+Hi83u9mx}^EQKkj3
zT+qcNkhqvMEfAY5E+!F;)dDI^3*_}dd8%;{zJNgN=}9)a`vM-+m=RE#`dS!0acQt(
z5L3>mZA!p0ZA%krMnG0KkcSd80zQ6^hnn;DjhpBlI2tC>EcU_~wNr;#76Prqvn)f<
zM4A<lOL+mGNV5W1hxgKKF2I-_^8(5n?8+H+PZj<$^`NOV&oTy0rFj9TsO`}Tddv%;
zwiiCe*$_}tZ`|@Roep8E&*^wAU|(>{$C8V-uUkHrO!#<yHuv!`p&0B?&Hi*w9Z^zk
zX+@K>+R}<9XLUg4;{rZ8s{=Sp!UY-(4Rf=G<(yaBm(*AYG&gH3>ri!H6UY|F184%>
zY63Va>dg@_H{WJ2pI0kN-?k8Fj=mj`Z|((rj=mj;i4z5oKzKXQyoLS&C7A-6qwCYn
zzfpJCO4nN$8Zg#d7&JZC2Vx>apbaqA2b#6ew+Rd!^t_*LeL?-eR`$Myp~DvM2juBp
z0YB+^KTzKccsl8MKM)A&%!8MNY^US5K*o)9yZ@-}I`w`FWNCENm6c5^(-rpA6}719
zN<iUv7>J2=<VpZ*YaK2F<*o)4eqRp{X$b<!uSgIH*{cC8TS6ApwSdBJjNl<nA&|V#
zCXzqpdtlTzG`xPR)BAX+gXV9X^c2F^19;;UzzFr<0}5aG@Q{KUBtLK<60*MsaCY#!
z0|~9r>6nt6u{iz2RrS9!>rKf;DMoL;g*4cg**CwdEec=Gm30M}fO<JsR$U;W)yugU
z54|TA(g0pzcim817QSLNArrh}HKE+{3N@i)xk4J`O!oE-wX|@i)r5d%T1{x|GpPx#
zm!S!$SDELg+M)1Os|ij0SFI*A^<SkX6x@ZhhR$OnZ>sGJ=UGk2Ec0?TF^3_8Ci8OZ
z-lo&0Y$2t$`Rw9NwOiqQs|ii)`MGkh05WJYKNouiy?7IZ>7rMj*7`JCWVN74w<uQ@
zVugItEy_i(yr#qUMNY@M+>G-<n{Nucxm$Ckoi;5iD|=loYQ*ih24*iJFPux~JG2i|
z#pi;uNCOwB=Yn3bR)d5d=Ym+Px7&eQ>~vfT!lQvET4yEiQjovfWZH{y^WxW_axG}r
z&)IPEqFCO%ARZghOgr2Bw;+xb=;DQV1lL>%+B^P%gKn-8XMSzyR!q80OV4Yry^&Qo
zEhIw(T<A6}Btrxw8chqq6S%2{Hh4IL4QQ(s_nHxs`-@-_H&jd1Z6MKPM(8&2#t9OM
zWkx8wolt~t9O0aCMyP&Ue$Ge&IC-RV#u=ejt@&YoF~!wvcC)S4rf{~U8udOqB)9Y-
zgMMa*FvB`>)j-W<745Xno#%#RW-sP7?c9)Dy+HzDZpbO}21sfX!a}*2(r_`w*@BQ#
z;A1wnyF?4HS|!@35^zL};W<KNK}eQuAc3|Z6cm>RKmu(+DAh<G%)t<Wi`mB|+TTkS
zTL^TQXR(Dq0l7F7Y|2Z=Vjhr-LoHhBB^&{=OW8}MT3N|b3xQUJrPhcjK$nJOg<H%6
zbZH0`F6{^u)2gtHT`tvbFIi?G&;^2J76Ppb%R+K16-_XTWue@V{vbzy^Omz0%Cv_|
zms<!b5SCjARJkn=$(__<zA7va#p3!WbRu3%tHQ>#-d?*Wvvi|{K}Fj}3xigLjg}U)
zDr_Vz#?q=#tYB5xh6|h8cw6Z<3xigLZ59Td|8KMOpjBZT>9LB=|BLDTe|P%vF4}6P
zbhm|38yLGS3_Abc9de308fXKI-632F9V;RPr~CWaJ$Gp1JMOn2>HuQD1wn`V`$JAq
z#uO`bxW7NtxT)TnYk`yd&qGQ}Uy4ochL0DTb<_MMV3;9BNBEzIYKtAvVug<IKM#4t
zVhIvhpNFtmQf*jFr}2l`xNcfW$zcnD3bVr@SyVv=2!}(y<}$?S+~{zqRU7?rj(~Ic
zub9$Zd!pnk3xUqwzp}<dXYXHyoMJ<wSfR7`uR@Iq=~gauz+67T=5*H{EIDBzWCP)Z
zg^&$|6CwF-f+j#X5z0^UWv5udz1~x-;7+Y&$teq=J`he>2=#$*DkRHpGy%e?P|(nu
zavgB#_bi)tr`EjWtcBnN!dVN!352sDc~7QTaRT9N$cX6w#Sw5J_*-_{U0P+yw-!PJ
zAbe{fGyuZ4)+ibP;aeI-1xLVT;qTd|yR^TSd~YE%gfG4i$?er*r6CZ$4~cuIFkM3+
zd><-qqCdb9Tu%E%_SD_lLnRk21Q&F;XzAbr!bNKoE+AZ_QP4(HvEp{xe`Xi&*6uF-
z*+Osw;b#lM4TPUVvbaSPAp9J{z3wR@z;m4T-`GFz(O&NSn+1^rh~F%T96<aQk}nIz
zN)8}?3q@l3SUcCkgX0_nS@dcq>v6B<VT&%PjbelQ_QU5yw?1ns@7=rNIehPikLmDH
zRlfnf20lNa51V_h*7$)Ui2c1{(2M*FrE>bN3LniqKVWcW0lq=1z(+%a=nJR;1M$_;
zU_60nB`^lkgChFI%j|=`o59C|6?n>S+^gk;dsX0jIsWk-+Vp$6A3YiHhi(ek$v-<h
zRrt1RAij~Sc(URjeaoM(9E=ao65Sqru&2?yX`3Wk^g-YM<2$_~<L-*Ve;8aPzOn1o
zzh7lv`aY*0KGqu8zhY4N0DNs$IS^kG;yb%O7(?aY@)yNtW%#(R-(aZTi+_QaRSJBa
zP3)oFQ3f-bdBFo03^il{T&#HDf}uuze!m@#_rL{14cu?%8@9!Y7uU-T=Ip8M>M+W}
zz=<T-@~RVrfHBGlHItda3ye`l%hvivytx9?=XAVkD09=H`?PjhPvK8f6(3Z2)ws2$
z`T+B)A>T{T3^1=6c-^MAC6IVqdew-{HN;LMF~qy$9K-%B-xVlU{CG!V9iP_xZSXgA
zeBF?h5=el*ZpiH{kN|((z;@PGB3c8e&J0{5+Rdh}R$H^%|D-J_1H;rb08JNJng#&2
z$kH?butlWlJ6R~Z8smC`fotgTN3>N+_9_F1*(0cv##AS*Vdo#yMwPBHp}~ZnYYaKF
zK>~V>;TAhfAOXF`!0z{Sni7qvaM_%G^Us=FDcfve(1zw_Q#}Zgl;ITHN+5x;*}&%h
z6{-rGI31rF83)og|DydvsrRXYs_-d5HzDozuu)HGy$bgj@^lJJK<zOCVp9erp!OJe
z52ix532C#RxyrRZW&2HKz=SgUO=UomkRdB2kU-dPpi&x7d!tRAjzb2HVbbN=xO#^S
z?4mpd;HIR@5!SPp_IS||Ll%@^0_lh$t2U58I%1$|J4n`TO3EB(M|x>r6dkwPQ18bL
zO>F%^25pWT*!p`Coj1b?jFEAj9q+9@;XFm1Qwnc}&K+kB<pS%`M|-Xce~G<R@PT#K
z>>nhs&QkvrpCA#RXN`sz5TA6;MhwKK({awQe`|<yHpxS~^M*WUlPtW)e`C;A4J|{>
zXei$sirW`6SXqTuR0zUUf(G=xArJc?39#=C9QIL}){Ls%i)>bfc6+ajXwT;(m}qj*
z$PtI;AkpNaA#bRHL}7N(NIbx+Y9jgVy^BWjeqL2e4pr3`jUGMuL~BM6muaGfi!Pf}
z3{3QM*_>h^Nr<M{4f0Pjs)?^vPkCCiJ$B6u7BCSk*UVr635aXv!~zM3Yc#QN)gi0C
z({aPd7!l^T^Rj3izhPu~`5SqC3YeRQl3-09((_oozM3Nhl8-nG4`G&@G~!NpGp|qP
z7#e2H`)Zv-L&Ne*8gL;rG#rl5HzN=NH9X8_^wqi>!^83;HgGu`Q|UGOWXFj;x^TwJ
z>}FqWUiO%9Rz3aSXzL_p#)jEj{j{p!*s%Pd1zfZp8%E?m%!Q!Ecy{MA+9Sd7VY!Fk
z<VuVW<Fyd;3qWWwk-hhf)+abIEHW7}i5tc#VplE$6HR8F{-)g#oE(;?kxsr1Fgc90
zfgLY2f$68R>c457jHwn5z5Y)noY9mPnmZkH!WrAsT7S)<WX}mBE%4Kc<}{kuSp65Z
zInD7m-1S;m1|vue;<d1R#RCalUJK(DZwJ-d&B@T!=^qAYAKOZ+!!nnGi-cDlmI)6e
zNrl~_P6i2#>Tq6M-=cC1D7ij;`8lnly=1+GL1z`~!}9&9Igjx5;UNDk2mMlbt`DOe
zqEn9ML~UY?|E>8k0NN<rByB*C(D|mYTopi)XxI$d=47{R)mxv}Y-QW5zA0q4h2^RR
z89;0c%T)^`Ahv}Ovct)$Eu4;B;f(*JZ~k3Vl<Zw$H7u;!f~>lith%6RuW3&(fwkAP
zCrDuJC42G@99ob)zet~aQG3!>@`b4nxERtGVR?uElBB|6v7mzl#us5+<-!+&_7)U7
zU$XyxNqedEOACRl`DIvM(uNEWz6|@trUFPHd>J+m09p`vD&73QwfAf#rz{LI?5VKa
zNQMwFPKC2Y3Ia)u!g!k`kF+4Wo+Xcji_V(90258ln!W&uCTDN?q6O{4e8=F6t6lLo
z0KT*Ord`+XOpo9xfW9+50un&qkw>u9EB2O7$4}vmQ4zMeO8c_GPhosuK9TZMOL)X_
zIjme|%Z6wZs_>V{xZnfsa#&_ukbt`!me(slBJE!eyRU{t+9w82`@e+kSHdFgOCH+&
z8kT8avXJ(F3sc&sy1gaY{r9la)7RBt>7iPW3J{_I!6OXucXNm!xu|@L0SWBi!}1dc
zkVxsjhm9Wm{FO*?9QAuRe6M~$3>I-PEP|UHAK2Kl!?ip%WtjG65jf_cNta;}O&le+
z<S{TTf)h=8RclEhFfzjW4c8th8yUH!BZa`ohzvvs0b*n%EUH3~yiv<m`YhUQY~^&Y
zNXF;stHU)<W_=dHw|YF?w4#YIJHoFdvCX43M~m5}Qg{T!*%6s;Kmu`g1k>Y71zNR&
z%8vOF<&B8lx04Onpx&MCI!4oNRp5zHK>`5tBl2nzNC3=_$g4>p;mY}u+&3cPY7#NX
zmG%V@c{NFLV7mnoc{NG00JI>2t4a6_4~jrwaRgVBa{1My-D9;_A!t(xGVS7syqW}I
zv|Sv**;s$x7E}!jjnf7c)>uu*lr<5#-PnqovL=G<#(drcli@A4ew>!<^;Sge8bb$~
zO>afy1Oy4(w<7Yu5+owzt%(12zUULl7yY*)fv$YfmmFI3-->kV%r_ib(F|O{x{lY{
zmaZ_J4kmFUG8=+Kw<{v@<rpNoT@k^_z-S7)R+MN~vyJ1mu_dc52-=8RZ9&jR)ar;+
zY=)r;AXZ1P8Akhtt!N`^EgL#PD=uAYA<#zDS_^?TqSi*7A_bxe5Y|SJ0vFJ-)QSq8
z&FTM4&=%TSZnkVpdrzAqa)TB^XtX(km6+edYK6Tg$A=N+69kvIhgHo6OxA8zfoJ-a
zHl99=$UK1t0QfM{(9O$3kO;01BRQWSxTriN2G0{aBKDmTktZY%?LLagJRw=g6CXz?
zPf+@7MSEDgBmCP5*7Dz)s|7ePELh^s9Z0CMJ0h1gkbvABF_*Pgw10H~Q;fdsD}GsX
zJa)jcByD0Huq;WNSO+3<aYI7@9f-(!tO08GNXF@isK;ne<4`2a$?LHOG>Z=-zwml2
z1`<y}^K_C05;Np5rIWi*o;08d@g+O-vUX4KOSGY?m6(wEG9qrzfCTjw>pV^C5&SA5
z%P}yC8$mhtD93?z$JvT$+Mk2R@m;#ap%ang5!7|Kg##Q+mXj<w9XKZ=@|$!pA#*Z<
zgSi%51~xdwW=z*wg-=Cf5!pbYZ<bF*P(-dk{>o~ItRKl38%=*dT`S70cbP^`-)lFd
zk^jOP&D8!B{KXtFm}vY94VXTRZ%70FjlDio>k#}cB5#?237Ow$iekSMGN7)q8#A?s
zgICSLfJs~$%za!21HR4%&C(tSUN?=>P#gh~Q95%O4EP2+HB0Lnx)G5dX*c8pzCrVn
z>cfUKvxh|49kaELp&?OOM1qUXhD1?BVs(NLLTp%+RnOKQ3=NCQsuo-b4U3|x#l{hY
zFg-^^neSEYuFwceh`!SvK|+|r5W)l;6=fq{)rvx+qOz_97eb?=$i_H!f)F-)$3)p@
zuWHSWG0|H_q8~gM6NQo1QUUIAIwnUmX0yCG+8XENC~onQ4_xGfDN!ZDznPDLguOwF
zpI-n8j44qJzB?Dj!<X3;bG5sIFPqA^xHDcRW&Xuw(Bc)gV=fB%SE4eCUECS3MB&tq
zTn5fytj|2HbCj7jba7`evLU`PfMRgQtSGh_I<mWF<5=MAJgu<-hWJn)kI~PpC{D}&
zL#0Y<r(<q3V=HU<n)Y4x+$bs)zC^aB;VonxYqU9R_v@OYaA8#DAUwff7DnX?2@*Oj
zjADhPUEbCdcGb)_AG^HOQMqb^3FlWwWda9DLQ#2@2_z7zX^fP8TT}Seuovee`_@<p
z6d5&9d9(`|Ak;)-;uZ@?Ak;*0i)B1z-_}H~N}rjpO|%uQipu2*Tr^r0mCF@Kk|H;M
zK<h?pvRj(H{)V=rG;Q@uhbZZ&+@FRFAktBvC|f}SA{|B9N;$JNh4}iY_^4^~Ld{XU
zUiz9Iq2c<d%$6Y0aDCLwmaS=Y??rjG>;eLsyl1IEOV@jr@o4FKFDla|gn{&46zOsp
z{a#ob<jZKrFX_gMHJd&AP}F=EXhZ(|lKi=#@JrK`U;^t))0H5B^(DEIE(5h88y{oY
zZ))8Ok6BH~cgLb~g9I{Yax97siuSw-e0P$KdQ<Dz<)k@)HvF2?Npk=ofp9V^>q?M7
zI2lD<xt1!dHXt46qRMwsyKfO&xlBzn_Xcfn75Fd%9*C6?Bv8&p<w^(=DCeTGVg`wo
z@LbgWT~w@u#NaF8`KbLuRIG%Ohj!mY<w_`7SP8$4nk!)&ii;m?(ye>nf?Izu-HK<>
z;s?{MAc6M7Ew{FzfVeE&%5J=^IZ7{EMxmPKvSk#CkISZ4(GWnF$*Z_WY;TK?9-<jj
zSjXks-Pu>7YE;b8w&c_6e2zB9-@v<Wng=BCuA80(3B2p%*}ucaZOH>eV(i%!+6zTP
zV$!7Ga<=^aDUfJ0B!(|9=xnVmP0Qgi=3J>gR5Uy$_wK+&o8hs5D1$(v&F~n?Ai4$9
zmZ(uN_R31FW6>z9A9CHOm?q9OA;hJSxM>o#C3BCBiAfY(1#6Fu$&v$)&~R)_P9l(K
zI5uWZqPAr1$uT~OI)ebt<e1DrAo)X?fj|Oja!gJlkU*LogSr0#bGLIkro}QoWRu^~
z9<M(wrpAT2+mX3v0H1!I0t5hOm}3G7z!@=_6hQ)TMhx~&VNC7FNVC|^)mlN}EUO8b
zdsa-&B*>u2tQcm}y}Sv`J%>ftXg!POSWO6MPE2~J9k=!z^3WbSGi*oZu1U{dqkX27
z)|f*F7n;_@<j_F^qb4S+XOPq=hK1@|nttub{43MT-_`otx~#M?Xg^}5g+Y#38Iz~5
zXakIuF)ToQ3b%tJ9O;;{G4{tP{Ld<|#N>ql+NWc3@`6PBbWBcOkeIybn0sSPOkQH}
z$@^~1z9A+iujHZKx|p22l7-2;K4wndc9dAR#Qspmf+JX>j0Fi*wwN&m5|CSN#Z)`0
zH9inA)dd8M^MPd)dL#J2G77yBd|<{Dgn{${#nc&EXG@%pk7F6f*^Euv>G~hXR6_(+
z2?f<28B`#ExW_aTNFeSpg9;=N_fSw#gp^P$>|>8^(R!BbGj#$J2>VQ(K$1|*DFzD?
z2>W8FIOsgJgr@XCc4mwAMCm~bflPKVCO=b$3=j^+^2C`gNFW@H$t#j2L>&^7wFL;Y
zJY>#RkZ5_xv@A$2YtGgZ3bbR=vLHAmXDdjI;+QoG3b$jXW$_e9$H=npx?tH-r(;rH
z#*%cM_qDWMe^Q=V!jzI}r{;;b{DHePN72+g8Gv{M#Ho35x`G7a)I3=B6Z&khl*W7^
z{l+eBSHmV3@?`n}m)LpU6yNd&iAERl@Ff_(PgV+RIxgiYzoqAYt!=ke;ZG6mcz|}7
z@?^AwM7v9QGTK2R+Arm~f6EimP7EIHKj+zh%@ffsd1!YzPe!|BA=-b*qiBDv0aqN0
z=bX4QFK(~xo7BMQ+Pm*S{2C&w-$4(jv(ISHX;0y)*zPIid0|dm<^_<@a!y>PM3Crh
zP8@Fmbn*ZaTF!|_=f%az7%`wF96mQLPsU2gqw`slE1JIr{>G#E@mr=N56+Lv%#Ei2
zpC314p_DRrbzGD`Ab?YCsY#i;+ESBJN42FUrH<-2V&MYKvNEUR&3MLk_Uw<^xAotQ
zo7cR{C=^zr1NxpD1Q1u^s~_%1kU(4+m$3j6h%4iW1^z*C898q)YxR?MxM;1_hC*R&
zT;sRt?2tj5wecK}K7mTfGMZTHS=l9RQsH`h<Rtqcr1kMy;=3)#pw0R?Zqd=QS4Pw(
zVLbc|<83mH2NDf8nZ^T2qPL7!MrPk8jMohWr=*WTVyN3p<ADUyHq&?@fwYZ`w*bEr
zWp9sL^6`vQahvZBw)LvkAU*dowzlf;h?^hcwkI?07G`V*0@%AvlYj*FZqtk)fxVl|
zxSZCN_87e5KwLQ-xBKQ%S+|6>{7oBH1(t9F1knCKT+R}ZXn!CsX9-Be-+{RMFyfE4
zHi*Gz$-%h&P+ZIs$wRx(<8qcr7G}v8adS;*Pu@8i7i&T*L~9WUks$F1N*py!4H95S
zZ<)G1kzZF2xuV%hzcvFDOxWRT)5ahH@wI7Vkkp23Oy6U5!0}x?;}f>&s`hB!**I1K
z`kA5*xGeW=T=_n3*VoZyxeoHO9PwDYYudZrF2wD3@NG2l2m|;oZtwgD4m$Y{aZI?2
zapf}LUNX^OePXe8*R_9k|LK3Ur7eL=aeI3UjZFV@+}`yT+LgHSJJ7JLE0sg4BObeP
zUE5!EH7;-RaplOm*W&iSS#V^v>v8*Ix8QEXm0|gIY#d88BrVCJ`+yvUjCeC{7uWCv
z2e?D>?JX@_vh2`&d!)@R;F0;tSO7m`0^_#;IExLsq4jMsD&JmawWinL(fRVHo_G&5
z8^+|LPyPnnfr5QvzQ`FM;N*$<GFU-Ezlr%WXMjZ0iTSjCP_TEPD4L!=c2m2@Ryf^i
zL=iqcUnUI*q0#hwBn`T1)q(8B*dw?|--PAMoB<}9uzZ;_K%xoDN6xrOmm)iWbgal%
zR;9Pu^cz`K_*3L|Jb=0@@?~xZ378f6GPi>S%!+)O+d*P(t;mnA$``qv7$Uc?%tvk?
zN%!J9P?p)6ujKlE$)ev+#V^3pEf@ZquI0V?jTa-`LDj!eN+D%xL5slFe0g322xzf2
zKU>T-kkDdlK8g`afE{QJ*q$%y{vow>NAdQ2IV<r94Y%jZ)dM6NZqGMYj}BC@?1ZCe
ztMTnRx}$8Tr2)M=@3ibd#okWK4pi*z%*WhZR2P%8BW7WK#>?rS>gWp{+27{l3+Cap
zozRgY;m7pi2Kq=_(T}D(!3Efl`5M3JOhN$rF`s@Vh1P(M<hh^Oqb_|>(a%;J3W1;V
zWz7#6wD~z7HUBu#5zU=+fg8(6lWY0nN;QxO>RP^A{OAuzG`dFK`-pd>;!J5sLYd0G
z$<cRY4@s!E={>mu5F3_Y?|Jn5iiRcd>mT$PQAZvM!xHX<Nph)1h5UweNAmIr{2G;4
zFKId=VHe9AxKLn3!X;kvK%&iv1n%$9<>ij#xKRmvQ(tRl^W)32tzNyj2n=y45RcJ#
zRKg?9O+ljZs07YU=`uk_^4*vO3;Oh~MPm|n@l$=^qRp5@194sp5^csLaIcXrSa+nF
zd|ZM}_334W;}Ul9fdIH@GcFONY(V3r@_SsOq)ZwE+kq3<b)SBJ(+LT?h`^5g1Az$%
zZ?SAb+wl_;O`G$p-yLala8knF!q-@gYr0?0ZwiLln6~04S&eBceiAjNANuG>+vigf
z_9obb<3@27Ww{u>RE`#dD-J9n1B5Aw9P#T-Ab~I?QPfypOy8_^ayk|yGIpi=2J}Ul
z&IJjamD4@jP6$TF!i2JzVZW?h75)-GlmI@^7AEQmKZ69?!US%iQ2hoHb9`aKw>Tlr
zoruAYV-_WF#hQNNL~;;;ixN0bqaRh0EIOfClqhSjU!r*HMA5h`q1@>^Z8O-aTs4RN
zXy{+`0!vJL2*9b!67r}QByZpspJ9N6V#^Zv41@dx5}sL>XxW|rSPhZ<ajS0nFiNGJ
zC@ro^D9wDAZ1khL9@a6UpX~#V*%^i3s)WpR5JzXL67tOyB+ynR@MbDHqg~-uiBMD7
z89#tol`xv<*D+jlhJ3msp?sRK`!48g1%9qOy(p^x%O-!YKb5B+$*h8a**9g`9ai6z
zWp`M8Q<mL9eG3mzmfevEeF_gy1%u8+1@lqD{z*bqFp`IMA17o5BUz|mb|$ETIZ=o9
zq}@)(zC^~*B%7Snk2&`xvi$r=#7&uMe?n=*k3{l7LL<<8;%0$_G5061J2M5g1&ybN
z(jTXEr!9CWq40a%#D&zM1nzZr<U*hhvn!4C&cVY8`LnWazAb$?fp;I;M|YEzkFduI
z^cJBb38jdPO-!^rl4#OYAA@UUppjcnr{6BXw+N-D6AI4<#D&!9L@|HABoa`k6HU61
zhd2oxPbZpo*4uCl82k*oT%@-Pp0SjnGlVmwj8GWScb45-4292H%Fq$QSyBd*2)IZg
z=h*UMy)1MtA%B?}Ovs!|;7dmQ)CdV7SiVo!X{>){3w@tZc$Oe8q`pryZKm%R!$O+)
zHGRE_{*V&-)zXR15Pl_{=q&=RkPoi0=bGz>jcW;o$38J3bS=@kt$s}i;mmAElJ#q$
zUk?pQ-m)Y8YVwd|lV-?dioLVbF(Qdy@Ey@o@6ljH5^p%P@!FZP!l<M&CdsCj>#eFl
z!wO)CWCapt9F_En59vX|%A=Av1EA0ZiO?LCjEzZ(<UkCb97ZQ)a*!M-GCC=fgJe;1
z7@b6NxQrnH3jIt>vN^5vU&<yX<wOA&ew&z-lN2PEl6MC|LYs+6940NG*v@e}UQXi2
z)c3a5=hu5VnHA)rokO8LjSXp|7X_y!rOUvCO4E{X86EoMQ18>(r)~7&;Pj-z6Am#U
zGd+of)11qIdWCu0>Met>SU8ksULhR3|Dy>Mn!%oJt2YYGNJ__p37Hv5IDRy44M7O;
zyf~e1i`-edIH`yL1{YF`lh`1kNdOX1i<2$7@pvW@DlSg8yn{~h@fdcgX1|x|h0*Gy
zoDyIHqB@BwF@Vd!lS`6HN#rRuw5Qg9J=I=+Bm_n)*#kxPl4RR<`g97S9188F?2GpL
zjL=d`D+=wUq}9WSp)O9xTS>enPw1dOl=oH=-~Z5SLl?Y-ypvSYNxOc7ek`?%d<!97
z+R+hdu;uEcy%VpX#WP^8N!p+L0|$d$o5X7ft<zm7Cf6sGjjVqUy(RmhlkTVjDSj~%
z4`GP)$$(hmL89sUB(7vpM1n*_u21G~lo3e`9+4Z&h?E?tu)&N-$)bqdKoQB`-@70t
z99xshwxr$nAsgIT-`5wENZ@z|+ip$D&w)Wgr>)5dPhe1j;&N*eIYa0~ub^9#&9*@&
zS}^e(Iys@i`$>CaeJ1TcbagsDN@g5P+I(ZNI4=Jv%gwfT(O=5`D2bnzn@S5>SBm3Z
z=^kD62DXQGCFKhRxafLUQvUW9NOZj`i9(;&Es#h>yOPdQ-Z7D=&$&c{68#GSi}nYS
z%Duji*qaUXc>1f`^&(ppIO6rXt9ZRm%B^FNXnr7xtz*#vt-=SA4esH-#8c{kI1R;b
zaY_!xdLY@%)Pf6fnD%$+ztWHUdz_Br$&8;d{PXy6|9+L}aoupr=scd3S13I+_!F3Q
z;tJ*4cj}HHNPe1@g@?dDk;G{l?&pHUh`wg~?$jR-eQhQ~Fd_3b`D83DVIG>d=hFAw
zrPsEF&Y9C0Tw>F7UQTnuL-Y9pd*N<<W#~du{-`^c5W0}Wr4RlC>K>ZUKd?LQ(f5Xa
zNGd!o(UPX~4-}W%1rjFgCD!s@{ln0uq$2KqdiaFBl*F-p2gJbbPRFlF-1znP(AztI
zP2$oK&4$})He5;K>o?4Xk}CWqszC5D&MQgzA4`CQu2+)SkEfsmiJ-fZj9ilwff#%u
zTs0?x<Uq}<=0uPzng~~EB0LV)c%6=$$&Aq{o9|wu%RrXjQ-9ETGnp0R$<<4K8In?3
zh`IqJbOJ4M8c3iINg;dSw`;S!<d~r;_C-&<b!ccxY0dKxxDXne!Wk^BuwL@OuoNr0
zPcID(OUYyfE@vZI(VYM<`DJ*Djk{0p7#f~ZT1q5x%<xp3wq!U6(K|_seS04k>k%oL
z)xm|(h!nCqU8nF;A|07xcigYH42?`FB@&4;>Bv<34ti%UL~CM-&ADIi5*lR*Q34%B
zLVttz?r=KBr7|Y7oA>L_G#Hn{`6+qt4)WfFlrkyBp6#Kxr~(ZvFvOj8kg&;wR7AX0
zfyBTjq#6})CxV0%C!`7|rNsJ54DQ5<DY?E%4iuS~lIyEvkrOAT;KUzkZNyg&(^DA>
zS>p%wAL>m{Wreu=eB{1Y*ucm2L=1mJl~+;<f2+s>3D8$kMaA@j2NDk%`{zS?X_#3u
z<T^$&xm*U+%#_lW+5V(^*pImFkOxxKEI#hRnW@%oq$~zH3+|27GxAyXBYMLKEpXt7
zV$#Pa*{l?b$ry)*FK4qJ59{%~*`~jJ+?BJ*-*i*QN3NWMhxh@gp6pm}sIcl`Ec#%H
z1swuVa1Oa%s0&ZbWj7wyL&3Rbp!xWfk+~@Zn!z!#D9&T;{-j5O^HQ>~!msiGXI=`q
zB#+A=1-`~!`jeg?d@ZH$8--AYs=e1zxKSu%Q0%?V-XodUEt62K_d1y*%yCfa&1YGU
z=+WT(lp^W?{E84{=BMx_o6s4R-U4>}BhYz4O5xw$p)V@*7Nqd)oxs7@dvCDez=^(L
zjf?*Gi#JkjOZ46d)^1Kmbt+>SCiO#XesBB_L&qM`yEmv#sR16f-6(38rj$2D)Utt(
zVhIK<E?nX%T(vZnEAH%rgfEw-ki{tTfJD$PO(ouxK}!rCv^8eXN)8mNF@sjJC}?Xa
zXfNS@au)s%vv*S&pF+#ib|d}sqk4a(-n(Y(`YCqTQS254*O?IsCQ#Q=L{dHGr>I@e
zHaxC33a&TJ4kl#Qli5)LLk83aX8#LP$%d4y55XjEib{G~F8q{mwx;|1MZeD$+-e2_
zxRBaPfzXi)AxPh6`=8J|hu$|0@8?1KJ_XcJfrKdCk#6y%o@op1u==CW+(G?eBbWL^
zY<|N2^pw6K^a*AZ&q`oI=#x}w8P4$(dv~W}Pb%X8Yf`S?<J?28qk_IWx$d)+vY$;U
z*UPH#mv9>Ru*GMl(?DWGpP5br38#IQO6-?TBL;WcKGSKE0}b|>PLnKh+CFmHCUP47
zOQU0{j8kyh+i==Fz4Vq!_OVn}E>AcCa@z3}8`?(CkAZ+n$4wi61o&~X0Zr!s`R)We
z)<?f5bRs2dX)qykB86HSU+9n!$dl~O3VmYmq$R|;Bvj62Fw(Et<qExb=xcM%1i0(I
zPT^-a{tR2*>2#b;WniU$T7Rs;*%Usuq2zrh+46i!`Bo-x&~OVF;`=9%Q1N_9{$Myr
zbaXz2OMx^GK*FTwQ}J)5Nr}Nt`i*H)$-xl5F-<C2WYTY7(q4||1`QlMu-U#}G7D7p
J!~<E4{vU6<YtsM#

delta 28103
zcmZX7d7KnQ()M&sPg7NhFa<r+UER}NeN104Gjd-uz;Gz2c%tjID#)y|y5Iup9`Ei5
za>y+RB*-xw3y6S&pfq>@Du=KjC?LqKA}T7N2*@FPPh@6MzVG*k{wAU#pNx!%jEu_6
zYG&+7f4C$4{4m!rWmxVo_nUd6?^ag5njL$0UaV=uj}*QBJx>oBJg}<wU+${<(=&s5
zKgBYy=N-th;dxD-(${^Tuh%j1{5eNQZvQC{|9P_8f2vcbd2)QNuDAn+XQ(%4y4Pi1
zRjmJmVtx7iWUDu;|Fr637mL*(yE;_MbLq@VsL50l>#^Pg2llJ#YxV1I4Su4^>O643
zlT`zggRFs7gPtDHe^8axXF%V->+G3?+M&Q2@F%NJRloj^TZ5k&*uSc;j#h&Qu;-sv
zi#(;)t^J;?Vwbz90lkUUf56};Ag8n1l<H--^;3Oq2)*0i9($s9|HrGW-u(wXS2eJz
zZ>g@=)pOkem*F1jRSWf<F5T@8C^?2_gjX5kb(`y4Y|IOqIrUYKM;%CJsp{K=^-rr7
zTRW>xFt^m|#_A>22*y*IREyXhN!4Gi*VFR|B+qaIMYT!vF~Y0m+hi`0jl6n&A*@oD
z1!KIqx}mGoS{<ofZ+J#}-J`vEdcLmNJhXe!>oFj9jpZ@&MtME!T>8sysP73V=xQ>%
zA)^LWd&KO{jQXHMy^&FGzy6x7AM5?pQ#vbXtakQUz5mju-{a2=cxI4p4R~hoV*~zD
z)s7s)`Zrdav1Ro<s>gb+-{2>7_IhKrgT{UKWEC8Awy}Cg^<-zbF4DoP)sw?@LG8)j
z2KMM(Dv`!5dILUK7auG*4R4l1<s5~Cnw9^a#bG-1(B}z9L1LO$iJC9FtX@x4Y1bUg
zwl+~8a)#TuL@lX+pf0shJk+jkflWf!Y2Lyjn?xtmyjDbSiqH-ko|)d9xok>_dPCt%
zuX>&SN7y)s5XqbERi1a5w;=?UA6Fynw-U8gHF(0|kO1mzuU4O<f&}VpuhGyZVS(A+
zM%8?9cuE$4R<pg{UcYDYM)&?(_wi1FSmRX+qPo@N?%S;v&6>6rBMK@m1REY@?9R#j
zHFmV&F>q=q+S+m)#mJk(4wkCztLNB82`UO8=6LH07l8!A9Ip|O`YJ$};|+!N>k+Sb
zssh4mjd4k36{-ImZ{$%Pnk0fD<&s#R(Jp-l@<d)e!?VPj^DFYi`dq7PRsVk3sb%U0
zSA!+qynLO(rFr#WSoc!)=celP@KUeBdnYCwy_9<YSqMS5Wh~lE{Ux-_t5~EWgj^6>
z=8eVm#vBOL>#Rj{wIuYqSBXm*g}B~iN{?_E462q@H&<ifTCWn6GP#hc^@c5dh{A>3
zhI@JT{pM<}t9ZFriAgCpq?UUVNqu52mxA?HdzH@S&|G%;MNh|Us-=3Hs{*XFY><Zr
ztG!K1Y!ZF1_Lf${pdKinmy0p2_Lg<hJ99Y1!Wy=+mD)A5#;ZhR8xJ7Xc;m%-l*`mH
z+;1~)Yc(Ez+pF;C1yCKxyiL*jO&%9QoNdhB*INBf32k(cR7h<kq%K@YGu)flBkj~~
zp-o;TBzw~!v&kEY>VM}ly5Zi;K4_=@GrSp7PRi(z+3YP&>f4ce(0g6O{Ymzr_Ui3Q
zhff@-x{&&Wq=cjDV(6cEQ|;x@>(bCa@uu79a|FnBhI@bZy9za`g!VfIzYZY#y@{0G
zf%jC;a35glPHLyn0k2Xlk?TR`fH#$qGS?gKgKQ+p9CUE5hs;63xs~J8H{6HV*PYbc
zLWjJHtzmu09P(zG=oMV1f#E*P?yOWhh7LP84Ip!vaPHzV`G)%ld%aTa6+YtN<U{5N
z;Vcu*Fbwy1*+^%#RtbOSRT5Hb15)34(~WH-HZ<I4vZuPjh}Id$hz%iihK%^Jm;;Rr
z_jxaS_$GCSbsjTcVl{%)d2dOXKEj0whZW?qH)lBO*<Bsp=(0Djk$w-9y`Co7Zx~7R
zCU)CPb<C+f)HY$z!tr<tjNi!dC0rQZx#DGi=%JS0f5oeWc}Lgt*>=Snjp+d{geF%p
zU!(P`yY9Z#8aU{w(!qZl%(D}^qg;ZgJl_(@h5e=;=S>j}&$Gil)I{j{0>zZ@Gzp(C
zC<^J#xeVsu5Ei{zZ5bL;AVd9ng{I(;0)%=gm%$7i%AUDdy&*Kz!J%0<lyF2}m{u>a
z4{t_aFBB+#*%wW#7Yc$!dKt&Tv>L|h+@dzMh80}12~DeE1+dAUd|mOl49{x?Ijgew
z-J<SR>%Uf@7U<n|x5p*2SNmS-&815VJUrJE6K$6kG)hr-L}I{83z~P=*CTU)hH+MA
zSN2jraFwhq@OY&ZWwVt91x;)cjaC-4zD>W0x52}=*t~ny9%XM8cp6C=vg=y~ULFd-
zrIh_vLCah8l?qf=49~j-Id5dmKd8-I4c;wKz54st14|*D4`d&@Pwi5t^gw}!uh_%|
z*nxuUc}x%qumc5{qc0)5f`-z|v)dn0CwXsPUg+_04ZuaC<%RynHi<^d3tQc;Ux$^n
z$ndNz%=xC!#Y?Ut8g-!>)aM|Y-9@CtszO$~Lz~eY1YEhQP_CpPA-k$jyN*yv6sW5T
z>o=er4iXPnv*(^wV@+2(O=$gFU8otd39Wyt3%v#UYaZSP#@JY>e3bp~vuZlG8h?s)
zv`C@KU}IrjJ|18b_{Ks%Utx#@%*H~jFjTaGMA5dfu=u0GT)qktW29!F$)-Yg+3#7f
z%H~3MQ~g!sH?#xFr-e$PIo)k_?RLjq?D6*M_1Pi+Q1g{m;EN?3QULnY8A2{^g&{1&
zsss?X;n`QH94d61QxrDjYi$u5@Gtf6)!^9xZUF2nlocl$0AOFCtT;hJ`F({2hoC%F
zoW$T2=jVm)gN35vlsvTCUnnb1$wI|>ppYugFxLg{I$DS_EZ<^}|62`|g0L-^2PKXc
z`uW<5PVxYDv@jgeuL!rp+{YI!|F`PuaNKc%2YAN|WhGKXvkj!dBM}fDKpZcO#PnA*
zL{-S}TrA8voIP2sPInhyEJRq>Lq#8|V|cC>Dlhol`df-#2lPlS7iB&1vP*}lEnKai
z_rXb2e~M@D(GZ`z)9*OwXQ<EJTt7qx4<SN5qkYPRY~cv?Ay+m26n4e~=r`IY3q6o%
zH`<3nkAegw>^$1nXo64JnHb#8V|?!MK4E9cL%Xp)X=llToyYme&KHFa$U9Sf$_$@7
z`}0WkIaf6ZTMLT#DLz?nhj_&|#fO4hXn}$oEsYu1v=Ak?XR6Qr$~7(QqMP|V4S4th
zMig=GX+C5#dJB;(_-(q+Q<$Mj1UwjTmQU$vHnO@5=s&oM4S7~=*cWW1ZSck90tvs)
z@=3pfgvPUch6oLi82>CE$}XDaAW^u?@<ncyy~=75tmrLz5$_c8HSF2ZYPh<_=_40?
z)Hr?6B&zWlg%Xq|QH{?OMQupQMISZ3;7ziRTshbpU(t=a$@{<n=K7Rw=5^K|1`O<L
zJvQK({$f>whHmjt*Y6h^yV3PrU)=_>FPeUHeff4@H2voKP{K-KbUoK+b(LMy<RjJR
z`XXKQ*1T&_^Vwg<sBIsa?+h=GxK1B5yXO1yc})t9Xm-u_p(Yi5<e`uGzLagkJlV&5
zU-}mPzcl|sl<pR>ys_%`hZi}W(EMBE*pTMmBA=XpXo5}_`LGg-PCV#jkuP?e9EeBS
zaFH+GQxEYzu%0evH;hxQhZj42)IlGMoj&TIkHtPiyn=<4I_P7u4=cOqqYnC5?2Fn1
zsU!PX?2Fx^H{pFiU<rGDoLXA3#OXuD=$82E@{$5$Rnf;1U%&=c(Z>=WO5hd36sUn~
znSZ?c=EJoPga$Qh9W^yT)cOqD-WnikeJBBini{mI^`*rNTu9NRnzg>n-FkbjCTi#v
ztnmc3qRR@W4;^Z*@YUt7C{R;JA1i#tZ6&CVK34e3JLv0BLgFzh?6p4SQFD17`(&M`
zDErX_b++;dSoSQd3%Iqux*}ad9&l@YVZJ0&bHJ_jmEIuH>q6zVzNU{z@70CMRE@6n
zHG5e9me$IUf@*wQcH<=V&$*9mb9%WBy=?QzS7->Kmu<d6doEvxUbgv==7nLdLoeHW
z(K}=>*U4VC`C_;0yG3S0Iln7AeyVz}t9qByOFi_m%U9P9i+bo~moL;*!q!7CyL>HL
z*(7?|<!jwXq;RDkdO_j7%h#qiRyZ9a;T$(Aja|NnAK^<^NWm+@XFk4kb^F`ks{Vue
z4PfJ+_0(fePg6ZD@I<U*kVDs>`Q$nV5?y~r13Vzqr?&{75;wOg?63W_R@tM|uqkvu
zShiQ{BajX`fm9!GhnzW8A8?0!SktIb3LBoIzMK($Q7DBWdDN#Ci9#t%h0<3(UMRHy
z0o1STH2@@Jzw*gK2_#Uz@}W>VPIX6^^6d}V^bGY0rSu1%Qiq!jTw?oFk+wjh(GR|c
zjr7B)PSFU_a3;HMmU`4xcE)K$SZAC@l)KMRqxqsIke7Ygk89MpQgPWfLRg^;ciA=q
zNPt}S8Df5d<gHMuQ&AD7wd1M}D~ZQ!2?Bv|)%FHRw7hD210-5rC2#PmB24Sda6fYm
z@LYHV1b~M7r6WM{hjI}D38dkEncP4EX}DiH!ZJKB`g4{^M_7=2(XWPtBP?>n7{71?
z2%wJf%f%QZWXJfWBR~Rmj9*r)7TIo`pZ)DwHP{*iT8?vCk~hZrW#NjaXgSW0s_zoT
znFVinUiK@~v%mgF{fDa>e~S3R1HioOm%{=Hn3w%>-2(}jm;G4xs2Tu?YT#vmaJoO2
zUcos70+ao2FQ1_#Ao9QzKdRP-dR;C8mYZIlr~2LPIJ2!3bkl5Les{(H7KO{E`Q5!l
z!D>MTPmN#skN<xatb?lY0IK7OC}coF^%}n{TR{T5#xKiOkWjtGU+^EOPGu`GcsVu4
z@1E}$<&@;1-CVycrz8vI)I2|xQ+p}pTU0~47yFf^Z1bz?XVv)2wkCz!V!zC8kb_E#
z{e_}50SV~Ee)$>z5-KhB7cYfMR3Q;Vyav4Hm#+bm1=}qlgKojAxjSNbR`_#1@Vm^n
zUDjPyg9fnRYwB8Kg<ox`-wy2}RB*oOSJto}UQ=(Y#$Uof;6s}?{j%N!32ol=%X$+e
zw0YCtXpJ-wF}Q)=^1D|{14$m*t+EXySujwR8|X%^0m{vH{L1@q8C$bN?OYAQR)XU6
z9ltC$BRo#u@yl`(B$Rl^Z@hm^30ZEw>vyleri5K?zUP<aCbfgE&}*$<mYb3VcdYY!
z(ixr~qlRaLKWD3)mQg6O!LNqJw2acU+$^Rg>#$7qlx((j#v_Pswr3?sbhMdfWg3Hx
z(u~={{<=(UeDfB+Opag@*RP6AT##t8g=|fEI%asb`Ew3QJz|jD=C|{7jP%$c(*p>E
z_zqhUkdWPBD*_UzJM8ojBSk(D>7g71T7KfRBz-=y(*vHO<tLOL_)B4o(!*ZAa`6Ao
zF+2bao(S)O1k7H0j)4TsUVDy#g!lIP3l2)}5rc=&KEL~b^q%CQ-RE`)NfttAKMx@?
zQQYtx@#hqMEo~G>w@0p}&^X!XOX;hJ-+-^av^B&dh<<6C2qb#?l1zjx8h4!3KgK4$
zp*Af$=2tv?Ap?`R{yNv&B$^!a=No+M*<EaSPWy9S%>ML-`mwA2X+MsMXfM2&boiNl
zyi#pn_OlHICZK-y*AZ?938<gR?b9g>7gP7Y`m=4`R83dKuXfe|8)5pZzpkhbL2|Kp
zhU)_oAiw%cO8M+Argim_pG|m6y`$oi13`YeWT$Zm0pgNhu8<%BamkMrvLjam)D=Gq
zu2MTyTyY>MonCPuD4kyM8=@2|=IQi`A5||cvc<H>4l%_d3j+ENF=fdE5-o?Avg84Y
z?uMB5B3n$Fjx_lq+Z6<WMw&8zg5(e7Y6KEUBTc!;f&|h?6N~IxdV^0Gp4n#3&TR2&
z^*wj~Y!ms9?+GQyHFHhA!m{!2sh*~DO&P#=1jM<fTwp;0ajuE**iQ~hz-*pZP35)h
z#`o0wUDfzg1U??1-K(Z1sydKp_o^8P@^uj;0{>OB=ruE!*O0`Zz;`b;-QpBVa^Sng
zW~_v#d&vUOVzaEh-jw$bfn}x=G-Fn;fxX$Rb!w&=Xj=*L>M~OkFQp0Y)nz6Y=SO&3
zAT5Uz%sbiDv05<;tyf!@fMGW#e=avQagLPW{#<Sr6w*E^1`ao@WJA}hElXCKGKqnS
zCM!)<oW+4e4=YXN>Q=l7T(ycFTd%fhy2=y>F2Es=tuljrU!6!aS!Jfu`cf(i6L@X(
ztTmMnvpwHem$<6&r>z~mE3P%=;te^pTWiY28zk(z)-3oC_NB#}7(B78Gu<DUV)2$d
zv|De=#aptFSl%~j@ovFYz+2@eQ;C=fi#_+DdP4;Wv3e(zI*8*<W?jCMicaX=a+6sg
z-c3LPdy|QM2ATm0+Gf}yW&peLq3S8yVov}(Lc=Zg1OSPKTdqxjgo1KthnN6eK)~`l
z92Mxjafc}<0G<MAhdlv60%-?LfS%Z+uWxvEnK^sefQ{;{^>>+h4f*L#eTx3wZ0klf
z9@=fnt#dFDS-VYaoky@$U7rGJ54&!Y8Vl_)<<>cvklAC(E${l2Xg*^-H>rv6XL4w0
z$hj2w4`2o+4bOfv=PNd8lX`#s{if=tGbneGG&smEZc@9JAGAjXCPsG99vMieaL_cw
zwgyOy?4XHL0m{=!((efS$7Z!@`4I<!(&Q1dF5i7884@y0QCxup!Vwe2RacGx?Z0H-
zY*ufq_|ie3-1DVbSET18&yru74Qw4KOMXc@+>EiM49{^h=SBACkJKLKahe3%sP;?I
z;7*uI*nH1rbsz8?JGovhU|)TtzFrQl2qeg$pA+_2K|<3Lrp(45(a#C8^D`U}4^Oh~
zTh!+&PC5v*e4lg>XsjnqS(c~xSWnW--$!XHMNT=F9kNw@z*TzAp1$Cs(K+%8y-b5d
zx93cpR#fsfpe~q9+opD|xZw0li@*ijLMdKTUoabpMF1pkghikyhd}6FHrb2Y)Y~dA
zI}o&;b=iTSBy!n-pd@nH1jNl80<u?4rNk^}OE=-7N7;6@tP>cvA@kt!t7cs>1yek`
zTs4bQazvC}u9}UT=${MMAiE3;C?nbI?dra2{AHuizSOXQoKz{kFFY(DLk}cSh6Uhu
zddC5YTr(^X9~lr;IWa_SIXvKQ!ZWvILA4P9_k;Q^h?cbB8578v6mXdp);)uIKVDVI
z&VH<R{KJ@lYUqB9G)-|cE}-O_b*;)lgQ^Bw_uSP(=!Zwp56?s{1PP0c3&=GJB=j2>
zz#4@EGvMIi1U6=eT2wy49wC@Om|%|(Bnbs%xPS!0gaE=N$`KGP6WOsHYP`cl2Z5%>
zL<fPonHZ3JtZ5!Q69dS7N9h$LgFWFu&N6o6PW4FslmJR1zVK#fj57j!;cW*3h%@X_
zfdt|VdsHBy(+nEbWLg<A)ZhF7&NhbUvM=Uq4YQ$7)qlB4!4g)10GE(2xFFGfegG9L
zW#bIZfQ12GkF)>**DMUkdITg|E)2+e1SDE64A}KZhRCJti!arS-S9U;dZ}#`kQl;J
z+bAFbv@{^g5s=g}fNVUn4vf+mOH?4|d?0)89(8zb{@Q@*6J}{lW_e$jr3DCJzHbi;
zBrxB%%>ojb?~_?(QAjr?)i<(tK38i>HwKitJnq3HZs0nxPJu+5jRBuue^0c5Ew-{3
z_p9q3*=i4^F)!q|+Cu>eh^+xb+++a>h^+xE50olEVsYCV2#8BHM2ffit$|<<{iNsw
z4R*4H2h`K$JDpB)VfdYax*{bv=Jwhdh_sQYWUrlp_T_XGiB4eZUF_3?YLALt4g!^u
zy8?3K4l+=4S0Kc%LQoSR><Zv2#HSQAjVWdiXYV_t?sioib}*=jJnRgWN|M6?Lu`|x
z4KNM|aFb)Lz(9xJWcwXa*SjjdaWE)leB)qHdGd`tp&Ij)@eNHVX$;g9Ke9i4p`Nbz
z(Se|9;>SQ;kvkjnYU0O0RBWJvgc?5vnz!Kb+n5Y~TE;I3v^;IcFGzHL+Kyk4XnFct
z{5Ga?;@l#{udCvm(>c`<=N$d1jyPvWE}8)197S#q1a1?YgavZmW}#zh_l6e(s;R#~
zt4b4ut><b$8J7L~F;#Khi$6ua!UKR`wZTCG{Axhn_yGy<s{tHXP(B5Te0nut4GZS#
zjj)?a489>`c%Bd9O#PFu)rQ4Gf+*P<VY}$sQxt7OgH*J&<Eo&CkxV<TmY0tVUQ>hW
zfssMEnm6IIVq~y^SnfbVjgdhtcMoy|TwNN?h8$P_SUuW7pa2>jlnX->J}E{A<-!0G
z2&02o80hK}NL*bS9gI&9SC@#!x&ReM2aEfnEY-LOUn(H>r|~YjA_E>k#s!sTW=rc1
zTm-Bd$o}|^+O`}l+nO|K#sy_r19^;fT+rm#eW*Eae?wEf6Gy|Od5L}cjoP`>OAZ39
zxGy<|ph@#mP%hd{_@sF$h!vM#Qfz`Td!_`HS6Hua)g9IN%hrRY%@oHNG;O8?4N=LX
z74(=AL?ti0iX$SRWL~-ERXQZXHlN{{8gx$&=J6dpv=UsjWsZv_6E2?CfctnTrIaR=
zwP&*x->JjOXFFQaM4attMH6v$P^Mrs0rKo1&XjQ91_+pkbJ@TXYRB@q4g$@?xsG+H
zs-GKdAdUvm1PF73I5B#RBVZmbU_YKvt11>a2s9rT1m*jA6Fwgo1mof~0VEI>1Y5M!
zH&Q}rLi6#B?1b;t&8~_!91IN@Z#Wn<A>RnbMK(YiV7w7*-ctWiVBoxGP4?v<)s3zW
zYa9$6wpbIC2Zc@efzO&?z8&y%;Ik$e4C%~=w}S?T=TtD~Y<B7?wctAAR4`AY6R*4m
zv>2TZDut|fPrbMrBoqP7FFepwEFPzWSXQs&!g%;oP~lhm@Q~IWko-Ock&yi<h_y<{
zg8DhA@H-`VNDB-|UTPD`pYjbbQUa=;L8pJ9m4QeIgXS-qL_+vX5HFen7%~4#P~oc`
z9#V9J<i`#~LiU#+P7r?cAeWUGo{>d4v$AV0tN)W*e`FD=FM7W%p;3>T(p78OdQ_3D
zD8K{Ks3KWsfrL_{iZC2{Pb?w*#}=VpOITf=8Tjm!JGH_on>B9<c%mYK1Q)s1o)XSj
zYEMUYB{bj(Omk@!B@>(`ggU|LlI$>nn&4_0nt+<b2D!9OC6k;cWSdD&6UqmZs0l@U
z2`!>i*io0(v1E$VgiJK0ND~tqGH5cTsNVHDZO)cZ&YQ+=RkZFU)0`$W+ou)D-2up;
z$+RNu4)ozo5W6$k`-;}LY^KwMrsB*ZS&)_RsW`I;kyE3?5v7J_c~Q=hY_D7`l-FQ+
z5o*K@xI*SGB~KjA4pp^HnX<znS)+jqu)`t0SfoLs|HC0H(i_|WD>FPNLOC<C&o$S&
zD8(m2{FNrxU52|FCqv55A-DdG3wJfj<XsKou_G<D<1J2waJE2KHN+#h<aEeg`8y7}
z`H47l>q56O(rtA1LMv^4UdiaN^fS27ZFE@r86+Bw4#NYu<%TwRIF4;8*UI{g3(GA<
zFo_$kBMLT<XfiH*y?E~gi7YcN+@QTsgl`t%z;RqSza2ktBmo>j(t+c+aO*bwSig+o
zX(D@|LTg(x(NT?hpBR=~`jA0C6T_Hgm0UGYliB(TtxLt^uuSu1yr!KTmTMkJAWRM$
zB8h;cHesxq3n?d;QG88jojPc*mQQyes7RY0mPHz505Lrr61N9H0%CeN(^wzO5fE;(
zSiGb5Z22q)f!^z8IS3Sev%;ZfyihFT(KjpHvXx%W5g<E<eb!OyP(H^&pmkx6GYksG
zIbm7PmhoVm6GlBtn*n9CF3e|lbkc4tpYI^hO@jFj0<8=4!}28^O)!f2;i9nKizC2e
z3)!cgw0kQSItVHd7CH!2r!5T29n&(tE-Vbk6Z(JYJiLt7g_YT=O08#Z#YzW*3bmCE
z2CWM#9W7{GSV>xpqIIE6!MgA^Zg^^ATorFS7_=_D?O@PFfVUkzXkB=l^jJX`0m|qi
zz{YI$M(s_dVxxmm7Z@8I3_AVa7&gRZ4YUEq#xU-XjuK&kv;D2?)gIcI@~sZUb%5CF
zK+w_t*03Q8nKFfr_P2&_Xr{N}THxG%I~#Db)~<59gFwgj+rxFm24|T<$M)O9KCwuG
z1j6<(7D=iJ%jg7tXIN=xHet(pXeM*tq7{{cA+jDG18ZkkmQ^5uwKHtCkRe8gMLWZ-
z+v*Q-EF8n{W`Ddzd$@eJgFr{`yPfgS(fjVOAvPb%6gqm}9d2Ag*La}~Ch%T%{uZrQ
z`CbR10TA{&2n~R+H!R;o&;$s3!^t#XaLN>11m4d^-m0}K-|ryg17W{|kPn3YVOeUU
z2@v*&Lzdo*>wsIrhuDQ%wHD=v90UUhha3b02#3P*!c3WB0O3&Bit2ym2)IG~1?$&S
z8&v*<gU}ENUpNR2f$)VhiiSY=f<{rr5pcWsYv#L6d%XN>2cZ#s@pV{ktd=Q_fbex#
zTv3JT8Uf+!a9LCRZjRtJ+~2ZyZqx25|JFh9LWgf19lSvJ))|Et2;b5uXj7?7DKOmM
zvs-W1Zmsy<K_~#i_YOh<5WWw~@)k{i@O>B;z+VypUTC;au|2nIlkPg@KokPvlmk%+
zh*M$tx=^MR0^(FS8n@@F5ARrErHOe_x%PQU$$<V({k@b;|4|LZ`whCrwgwM)s%l{G
z!BvB-0sZlf5k61qg9~GQb(Vjpc0)BjcB1QJ_}HoUAnUFhyI5`U1&7tWSFby)o>hZr
zw@J6|?)P~A-uSwyYEY?FiI1TE`b^cJ!TckszteY5e;F{a%DTJz?f2Z;6<<Q(`JbyE
z10X(rsv7L*fp2%7ex}b;{RTZj-{<rjXyL1;e*G&;`c^$X7%Z-2|HrDVK?5xD4bUL#
z>4DGm$G28hf1(cXzvp@n?28Udb*r+^psN0ZtqOco#h$oJyQu?=Vb4t;40$dr3)wQo
z2Sc6<=ksgraGwu`JQv2bcE00UrucDq6=px)rETwY$-%(!A=vV|5`=(pDI9Jt=eHji
zm%^>u=<nj46PTvqdC5{HWiQ^Xwa@E~KW$Y^sPd9^Z8<an^O7asFVGAyFIjj|rnerD
zc<Xt|ichk{-XJl=JK#ji{TKcwU#0|5Y*~CKiY>oi^E97g$sz}j06xW%8&MzuKE=XD
z)FBabLBsuug}Xo>v$=oM+OWt2+Pn^6*qR2R=_`(=L4dvDXc`3AE2QblJXB0K7@kE|
z&YM}+gW3wE!6FL>(Zi^d8>qy2jeYn>ZA8UuHZ+*9<!hFlpCAGKnpGfngFpiMH4FRI
zlj)Mq4ODZi%#L_iD^NPDbTDWOa;2>vgh<LV#8wbUV63#TJAZ)+x~7KbeJf{6cK@T=
z-<10ATPWxr1$0x=ZUgK6nAWFcgC)<Dzy#C=D=0QnKmuxmh4)#iO`DQ7AF<PqX?;6<
zWGe$El=;Y31|$htvd94mgpVu~Ib&!yvzg)9ZsqJ@llp3->u<NP|M38Tn~^R%SmP?~
zq0$|etOdaY(hf@&Tp)q8!$QHehpgL-l-bSRs?zqB?snQx@4GEcY}Y{sZFXDOu6qQX
zH#a={tel_N+kes?F4#w%QzCAT&OHY#<*4O0d%rxV!q0AcT)Vp(9P#df=fFH*>j4s&
z2S^W!Q;>+$16HG>h*LT*BL?Es@Eo+<M=Wt(CV6Og$dcz}l7;v3!xnA5(4x|uhV+%C
z6qs>~`Jd2AOF-C4(7?X3<e?oT0rr)JLpv(Enp44goDF_LyYaE(XwT;*m}qj`DilZE
zAkpNwB`=<WM45HmO5M#1V<P!YyyI5-E?yW*4i(17t=sS56RtTyoDdVPB?v_F346wY
zM0Y3b83&Tf+FQTPsk%LF@uTQRL2yb=H;@RS({>1f1k!1Hx`71JX_{`ht&o>*c+OZk
z7c749E|1peGgh9Tzi;PL82w@?DgM4)3=&U4a|7gogq40F19Zmwc0O6>oW<%tsdWjT
zv*b4<;6mt}6^YWfA`k-gtHu8Mq}Idw)skPafy>#LVKwvtk70OzvvNkV{ZDGM8~tYG
z)z|-xwgzc)1;Ej#*`xLA1lXddv`0f=@baG?1LO+LjC;8>)Ons2|3$km^n65a5g1&X
z=OcL0!~8=Nv>3`}{6*^<8X6Iqj+n%a;Fz!*mw~Z{v7-LkO`%~CdE995xBOudq!sLJ
zp$V)%f(`Ajb+$%0IP`Wuf^bGs+Gt^TCPs4BWRLaNJWBq=2+{^WcxXYxnj8^#>OjDA
zlOr-pL1Gk>Bl7hPB$SyP!Ry;*DydtL$!BJ_{#D!Js+bv(-Uk<PG&3SIB1n>o-~&q9
z9|sAHnUUgzzE0&B(6TnWbC6c)uBde|XhW+uB43kQ@X)V~g!qR!z@WITjiBnG1B@0#
zt%!&V6(G=Zg|q@aL+>jha@_#QW$h?#L6%z`5f>^zaO&DPD2i7{<no56Kw2G<%Ns}_
zt&SjyUm)|gG&~<fa=y&&|GTCr`5#2oh%j$UGVexdUJ!uXXqy)#AUE3P1qsNFWM2OD
zLrXI6w(PtAqdnp(-)5TzTnunqL>?4?B&kS56aXNBu`PmITlj#`-I8KyC;P*{wSQLZ
zbP&k6J0tRrHe`UXGZGN{2Oxp4Gh%P@w<L03wtlsSP5ylj2AO$ZL~bBM2pIb!4MeH}
zNsS_Sha?BJBr6|~4g!Ie2W$s{M9TxVgFvF?fr#y(mbByYg>X<e5CHnZ(Sdedzpx#I
zr$G9`b`VG)eL)UFiJ-V!8J=$<IhP`A`cUma!*3$^@O&JtJFVa#&xwd~ij90h8(WRP
zM1}?*a3>-%LxTj|iHN*b0TRo^iAcezh*&0w!Iz2eBkq$Cu}nxF+Wiob%Y<ZMnfNh6
z%LG;Jt;qgAN0d9vZWfy~OuPM25TbCwBMk9pdx#*psC<V33GAOE^7{smSOR{IShw?&
zRwBjG)6bE}ZTfC8Sj5Bm2&){f?I}I)43#uEAJN27aVs7H=OZ|=q}Q`n6aW_^tm_Ev
z?hY3n%_sma+F=MGKwOMOL=6d&H)_>dpH5qgtqsrEXwHALdq!x!-2Aaoe7eVzPivYT
z6QVr%v<88}PKZhefCS`(s7yW}0XZRx*>OODTCJh8XKGZLmfbm8d%#tVKZWD)0PUtm
z<$WWNXg4(~?;C-H<EBQ7rbWelBVv%_+$<{Z8%Yi<#iH`Qkz@ggMRDH<U*n;F2+WA$
zzEKgsZ?t%<7B2y9D?uim5ta9iAdI#%qB!+>inj$-!!C~1`j^x=O~`~bQMr%UnwzjD
zihaZ+Z-UUD$EJ+a(tYMd#nv!%pvf~YDyJPt;LeN6qezg5hk4P!jl3ivl9vSYqQP#w
zB#;~`3FbvRcj220t!ct7VAgo8UB!Z^3_~!98<nXLB)VM?l`p~|(d~jL&H+YJkhP}t
zvY4^)+Nkoy4g_sFEp{Mi(`j+k5F1};0*J*?Y<$tiU~AfRTEZThpp{iDaS&+JX^DeC
zn@&rjhDdy90)!<|B))mHHnpa5XeB<>(Ej6Uy3(;R?K7>6%8geDq0!1H)?<Fhsx|hR
zJnux6_1ReyHQcenpSC+`Z|R+=Oa_ocyLY0E3V6*35;65ov~WFQifTq;@MQ3A)V(e$
zl7Zx*-Fs1)3?vK5U~QC=0p-fpv`zJ4RD9RB`DHCo3PRkR!y_p1VN|YVAOZGa)J~PH
zX>)4Jq6U*S*8^J|qtV{f7RP9`H?<`y7cn#e#FnTm#TufRkLG+H6{Q$$Rcw#u8N3v0
zNE7wrs1o6&7@IIf^MpY1gpr4bm<u0AkuYvSInt0qe<xcxMe7;bi6*q}6B9B!qvHMx
zNKl`$&{XaA(5F#Zhk;4lDC)5LIS!QD&BjdC9t`cqXXz4$4mfs4QPANY4RA0mK4WeM
zoX?{2lXNg4^H~%JZY{YCOt6prm1(Ub`=YXXY^cyj%KM_I9+x9S<uyV!kLFy7X16e{
zG`G<S8aREn-G~PMJx1Ytw%sfaCWZ*E7(Ym0eNW@3&*U4?_<v;ooS}6J{TP+E$iRfm
zk2E*2DGC`-r`YE+w0lFR?6HAKTpHV*Tn6L+iS?YR-5vVLwoxNq`u#*U>cV9({xfXt
zOs!k^OjLfP-H4C>3{6NX4;#^xJ{x7xSz2ZIY*f~e;G(m$QPhxFgdl`Tdp^pB&eD2?
z&qrlZ3oeAtM^V&bcL+k5mlvY!>@4k;@C8SRzSF)yLYTY|!pyrAWsl6(O2e0A@Ddk7
zmnaS6PzfY<bbpJorL(mb)^CoH=;sf9BO|TCnw{r0Ji}r+6Q<T^Z#5bg!zDfPh?hJv
zJf=i{?-4Lzba2HlGJpio@E9!6gEzs$k*w_;?UvBUm@Krt+#@4n(CA-W1}#Rjd2_Vt
z(CC=-te1OabPS%Y<TCKcSk`f_)+IDHCJpK39vK^hA@K<T)PqOHvpI9MJFW3C`Q<*C
zKp!8&dH9bQn7fVPnH0-e#q#HAKjcq}p%&rGVH+CS^cY_bn}dMgrpIIo0*OIPkICf_
zBy^b`!*WPFx@{=tX0n6xwes?rF`2f(1j5XiOxqwyC?+o^fds-#8XM)@HWYg`tk-{#
zb88#~3X7VUJidht5Ncv^aVrHR5Ncw$l`@8MZW|&OW!L{l8|Nxr6qAb-xM;K}CKoA?
zBo%{?H_~d+hU~SJ{d1wVxnil)FBOSPV{!)?GJsebGewCC5)eycC{Zb8wxRg0jfwgn
z1X|WgC(|>utc}T>2@)-9V|LDLL&JM3ChC6>P~|O02U@Y-a;!%y)>|=|Iw1_Cw_-@0
zLsfXREplfp=lg8k#hS~VzddHx|82>oJEcoO0CK18Qjmb$X}c68Aa{~W>5@-dvh^<Z
z{W7gb$u6e}`EXZEZlXX2O?JhwdC`$Kfe$}py<gWVyM1Plqb<L_^qD;lkU;n>CTmEL
zK=>?%8gdntRc%3f4#t!(Vs3MR^No9bHmg?qM>QUZ1rcIEIT(`*B1oVdjLGU4Bo@Sj
zv4SsRVnHMZUl0$)+(%<#L6khSI~<b>qGVw~JQA}P#I_V4$1vULL-(o6wLlpNu^{3R
zlsINP7bL)rU2|?*ii;D%xm`d2=Y(Svs%TC)Mxih{VLKPXKsrIr#bsf4I~<k9@Pi(~
z722)&Cu3?%%+_|~+Mk4LTYv!IPquwP0`Mo>wIBib6S?+T7`Yv};B1U_U#UG;de&(}
zzC9b$#K#m6LYuQOd`v;dXzgfz{u*OHuGH=+{WT^x_`pS*Ut>X01%X7HUt_3(=*mkw
zqAtbQ({E~(rI(z3$aj}wnmD(F5SK#wrrFev?0rSfCJ>k)S8RiWM9V9-!9k+sm1_oX
zM+P4j=d<Z15C9q$m$?Wee<*ViNFWW1%h?1HNW<bV_#a{L_J-%hc+NX<mw7w0R%ngb
z&{bO3{1@YDLRh{%S$<4h<Vg@f9ut?52@=R-;xbQy1oD_TET6&X+LO7)vjthLNy&Jp
z2^oHTTuv&;pvm|+Ce>}c2@F4xUCC;9lumS-5YWW9^i_Lq_la@(@P!Tv+mqpIvj4MM
z`$Vazv26e@G_8qC8-N5xO<b1IAgNItYt{*xiS5Y|3$vr&(VlX3Tj*fWuEatIgFLb@
zE{|T(1{e$DSc~{<ZV!)mmd2Gg;{X3_9$by5z`|oOr$GX1X<W`}kic3Rmvb5<=Je8d
z!5eWgr-{Mm^s=~nd0fnC$wRx><8n?*7Upzq+@90zDeb=Lii@58t7|n+*_&}WsqqY2
zycw4n8zj))jN2KzJ(VDDix}$)0ycWvu?@W;yzSVA-VollV+_JTdYfYGYg&WL4bR$m
z&TjVC_1dxgwQ<!Fu~km7wL!)f2q12-Ed&yX8|>Hu3B(N)TNEhe6cU?Rix0Fr$~W6O
zfeD1owoV{PC~k-h1`-IH<ETOCEVZ2G_*S<51MT68tquZNYinG7s}30;Y>gL-lU<NN
z*cz9YA<K!{E)3fe1X^ylEejGYx7(Hl$z^TJmQ%d#l9mO*DLH#VVidcaQBc(FvMr0J
zK-xu?UG0TsD-6#I#kffH%?2&2H+Z4gE^jKxv?JK-JG6PFBZ_6zfeEY;#d5xa1lEXR
z*z~{jiC_hd_GtFsJGJeNS{^NyK>{wZi~SkCsR$B{juzuPFMf}#0(SI#Tde$8>^9$I
zb0=!AW>d#CpQ{=?5$liuz_-OR)<FW`+hQ5(AQ9`|78m?jEMlD)Jl4M}cK=W;VqNmk
z?nJSSb;&}ke_u?oUel0|04wUmgz|F2on7~hHdE^jLTv9;@PsfiArk^fC^a!5lOjlf
zPfXx-fKDbrLaB*~*vkoVf<_D|1s6|B$P=^*^5N8kD1|`a+0?`}n~~F|CgjAzQ=m^x
z*zT{O<UKPXN+A#cn(63CiDIUsCnbuRj-He#W+veN?`dLnFg$Y-Icr$=Guny#ISKnJ
zcL(zR!URv+?C>v|r*t7c@8SN#BLFT;$QS?#z=a9K0RLvV1NmwRGtO$Cmo9PIPzWqZ
zX#CQg8!~9KBvI(o$5L6@fu<6ETH>5GzO)t}Gs%7ksWwqZe3b<mw5d(tvK*~^9f(>X
zjK@x$LsD8{+YXP=aD{C<kX+QZT?aDzYH2$VoRU5U3EQo<Z3hxat8LqX1k!4<-8}qY
zl)Izhc{h=>FWdW9E#k_5H(`Hb+mVd-p)_9UMa|RdL)#E|1jG+*<ADU?hh)53T1Glz
z$et|;<>Q3goGlBw{7c%<YVd^hApw9b2{{))0$@u*&IOPNyDf==j}dmXxj_s*7q%wc
z+Y@3gNFLh#HzDVOWMM9BOW1k8BRS=hgsA04JnQkc1P3t+mdJ-7p~@$=ok0TflWQ^B
zk;uKm&Rsyj&U@_`1qnOvwe1WNNPBHNgXB$NXZrZ66OQ;2IqTW9-?aOS4<wNL>Gz8|
z;ZEF<gz{Cwt*@awah>FyIO4H_E86PrM-%Rw_-2}TgwcGFaCi9~2c3LL92@R<LOB7r
zf7)p91+iGcRqY==zWHBmX@B6`guA1IMt=A%;qG<~?PNmv8EDwbmC7N_5s!U-Rohj4
zDj_fIaplO=rxWfc9XK-HPYL$}*Wk`1l=FbYkIagpB2P&cUHjuGWW-+*ZgJaAaDaO@
z;cn&Nl4Z{&+|jnzfG;MLD**np4UA9zIg9ml=})x0lyG-&TGNa1<%IkVDBc6jh~KDB
z{!ZM9B7bO-r;QdM;N+o68Mz>#-_WGY8z9kiXp+_r3jIzLOrx@E6uqab*(j$Gh5M+a
zOdJqGqftpD4!T^`iR?BusTgL4h0bZ|3X!S7M#tcbL;?~RW0NwGfCR?aBofJ0x(wL~
zq-Q}=S(Kga*01FC#-BC}1?hsMO!$xk%z~s$_#gqZASn|*NX)zi$=IT#NchAM34dV{
z34b_Ujq60IXI1t$U9Xc{zRKx`Qva%?Jf49N`dO81AZ8gz^s_37s)O=gCmPxs*6DgZ
zQnn^3XCjzrvL-243y^5CCTVB9PBd-TCB<q10!plNI;R)sb<QBEpj+n*k_x(YNzB9r
z^)MAHG3SywBeUD<>;LgIIFiJd$S=@lLM8eA>+FyMeYmUiYukC?0_^Lg#;-7w5Wv1p
z(vP4})~_VDe8*b&^aZ8gIc><{-z8;v4;i%iE{XDfwCIRtO16$43rEw_NpV*iNCb5{
zSs;GW2P7JuCf9t#J5q6KbT+AsU>i(*bEC6K^?Lmdt^mZ&C*7rHXZCcF-iWQlC-2R`
z5EmFKxx>#V3sRUXdFX^3em>c_gx`CvBwt=gx|^6KqH(jJ9&ZMQSmN*)DqTo=#k(Fz
zG`^6;T_3ueTuENMlyo;U+la<9gL+vrFvNvGJVxV7NuM}E1&PL&k~l)83kQ|t&fk*m
zl-Wu&&c|L}DH!6n{O}l!e@iwLXSg8I__rjkG}1-tN-D{(CfQR(dWU9LlWy^K0Jvy#
zH5sC`KtrYK`)abhgR~Pi35TTIEp0oUE`puF5D{9*zY`de@|VfRv`;@I)vN`->|IHl
zhc8g$8-%t4LVB_p7<OaYtbf62Oq=yDP-FUuk4oBLAD(hIH7iBqgCV_585rW|5|7b%
zc&bqRb`wZ69-b<_L0?E8s&zIzES2*?wo6!FkZZ6MPSNR}ZD$0lXL?GR!7fJi_SN`H
zyu*VJwCSn(!u=qDHa&&=D^$^e!~~z7GH0a3Srjq&5zQ+p+^eSFHIW=d=qo9lt<g^^
zNfw>jyprnBQ9ncR*qNerZc4e?Jm#|4n=$?5L!d;`!83SwZc3i_g5<IR@eKw@=rlKl
zZ!pMDAmN$0sa8GsuhbC9AGhwV52c*ineyYJ?3K9gcJ*E4bV1R#C?)e6gwVyJlzb}%
z35-Q4yp@VBXoq-FD%?zV!B1fprL3m<Rl0E2nX>1*Ddqi?+dQfBp90T5pV0s1Qmf=o
ziD#9RzCX7bGWG~5t-kAYPiggCr+b=Z?^5@|>XcUBO@-fw)v2ICf1;pyFXdjJ5(SOq
zq21b)ENCPP1<kq?6*Nb$qb=$J!?QV+b1uamZ=xSIHmCCNOX%1IE}-o7QA%knuC9QD
zMxgoBrKhmsM=5O6yac0y#?$TDxh1;c3T;m*{4O_fA+<e)yWEvr2-L^ylTy7)=;M_9
z?b!mpLH%(GZ$7lGUO<N4!J3unEyFufN-5c!m}t2p)wG%ZqMHjL&3v96QHE~~Dn3ss
zJR?AgR^rc7W&FL8NI-p_YTA{Y#7XG*d8%0#9Y5g#8V29bwl~$=hxR+l(2>G^Qbs6@
zusgsK&7klBM;SU%I6%r^;s6J^13wqsOz#jrn36x+3?^g_rtqyIe!-fA5HDY4k2TXj
zafQE1DLg3<7gArPnl;yViD4lt{E*$<Lcd1||KR9EM+!fXPV_E;R+#>$S@+iZ=ho?z
z!h@ce5IUV|(@wu6gm9F0HpMF2=$FH19o6Y4mCvS{Hb)9m++7UMg;dT9?4h>$?F}!a
z@R~zguw5t<TuLdwrP$iGdPOz<6j=!mV8BZ$zxZMvB<y=Bg%be^N{|T3OR4y82uiBH
zh{03AWjhr}4pg{orvk~MRB)M6!C5Gemgr|_S}8V<BNhCkoqoCtC^1p+41OD$mh%)O
zmz6gSK|-gYX`C(Lr{0ykLc=pMol}!`;iukNQyu$o1HQ`hu!<^OV>{dHe>X;^^Fln_
z3n|=ROe>}0c<}jh-4g;SeuWzkq4bMsxRcI@3Q50F>_6ptS!h&R;aP~7kQtRm7HYv|
zK#gWUmFulyqa7T|J);Q+I|FC}WyhqI7SRAZT85?e;R@XdgCW8Lk0CuKjqn(Wi$)Mf
z)X&IHs6bY&n2}aQn1c(c8EI^v&{P2l&>88L-Feg#31w%bTirxw{&)=Q&18Ej^^(xc
zw469#0%B$w6Q@6yLDbJ;R%iX`@T|1bTH;dF&q}vzuTQ1`E2OZW&1yUAQ)9CoT`25l
zlP>onzPcKodFh-ruzq)8{Qv2qR}{}n<7*&#yXcCSl~>cs(ljbe`mxon@@0j1*~49s
zE?X^5yF2q>63+nsTH5{e?>HFik~H2{Xcg~Dfm@qa-e42E>E+e<OZ<o?_%K0jIw;nD
zkZ4t##{DgdTabv`+H~@bw1`_`@VH%`mP?rAp!elzxr9j;#qIJm;+DVVcST%yR;88I
zX}7tF-Fl<`X&+D`Zt)COU6qy}1cQW5tI|=P;GhJ>?W#0#iqMJPSXZT+uZB*vh~hbP
zGN3^=?Y=>uMw=Af49|P%oUQEnn{?LTy)=GdZXzvj-6)Vh$R@k%4PAG9ke2Tm;G(||
z((;$LK%&17(kS<7Jp+mS^g-IF;Jp!vDxFI-EZ6r6ShU}g9o<96FXL=+U}+dz(sC2I
z8z07&G&Ye1EUm;_(hYlZkKrl75~q>)O-{+du(qU|+kJB(^t~nB@fQ7jE@rXM@a#_K
ze1|yt7Qg@BZ&0?+EjWa%zdJ2&S^8+md)UK0_0rIuwEWS2FoC-#jUzT(=*{!doZZV_
z>#08!-iv9@gBnc8>?O00qE*aC)AL}q_%^++D}2zNwcrw)W^FBnzK^EuQFi<7`WxY+
zY5C*tU_$6<8uvf=53T!XvL0jMJM^95V`+tl9$L~|Jw~CoK_Fo^e#@@EQ{NQ+Hm!(T
zp*}tvzfI#@zZ2Yiqv81>jVr=u?$kRPKcsQ*h+_RliuIFe<ut{5t7?#lF3_R`1c}j}
zOv`_p0wgp(nZ~|6MHfg!*U5DBw2XLS@Q6QUN4(@f*;97JOBO}^DT?@q;26K*`6Zom
zIn6HIr9WW&lFp0sT<Rx(oJ}h&Md<(%+JF`b3nXyQQj)+g*5>)iG3U~(_HMmR_*`0P
z!#x8ogwCaLFiVT9pFD6r%{;yIitu?mCxOe^$Vr{J5JvfHn)T_WSB8I0E3G6FIp)`N
z+je9)AkiC2ntjj<>-7aYd4mg~3zWR+zJ;H%<i#`#-=nt*Ura0I5{c5}#dOC`dKWGP
zlV3`+!T0E0W0xEu%9EE!=t+3*Cc|?zoii-sGXKaf-=&-E>^=Ie#?>?qSILbxksF6(
zlowe3LvSNVV1gEx-9f@OLo!kEt_2bU9Fl3=gu4+W+&Cmt@<K)=E@E&u4$a8KB{@)N
zXhtS3$s#un&A^SPX_>_55u-9W)AOL_7cMsULEX#7|4EnYWYa(Bn~YJJyfF8zNxmJO
zQEm|HWa)iaCqeRejXXR=U!yanW%M=(66%j-cipE~gvL5D<k_(#Q^aLJjbqF1)5D>0
z8ClJk+_B>_ZQ4p1jC(vgK{DervbHq&gd3khZHY=AeZj92Sn_^75t@*Zz6TTN6Eg5U
zUF$K)trOXk_v<|)6Ekw%1`{$9GjP4o2OgM|QOeo!`*dHF-WoxPHPGaDNhW0wZx)Bc
z68JJ}_<$Y_y_}IL1;4)oxR*0XDaBj{8E`VY`vE-}nw(Mi-9qR=b>HL+?iLCelzmg!
zG?JO(n1HIjDP)2O$3f9Il^uFOkA<dY6tULhhjJh@HG}WigzBjI7z;fJGqH@qzq~_V
zRPwP5zPuAS_;zm^d+<R$7M|vei~f;}X_<EA`eTUM?uKV(2LE==tOxZz#!UQkKs;2t
zQ>f0)D03)O%d7F1xN8YMY&1JlBrf%XgtKO6ki96^fJBha&ZOqZASDJ5(i%HRB?lVR
z*g+~;6r?p2q-StHIS>C@)Ur&@`-stFZi_`W<~7P5eMrAgF_zh}8KBsF{aS1ecm%Nt
zQp6@6qKnrl?x^<S|JqS4d-)N)aj4cdI+&2DC8MJfh773X?BFBFC(ARk76g;H87l2*
z%?QwHuqs>rsD7s_w8{<xa3Qsd!l051Av&{cNpHPNIBT0dz@sxu;WR`bAw1vB*6X9^
zy29@|{ZV|rOZ{O>m-<71u4iSB>F>nXXOwn4HGv7C^_hweILA}mJq*u=OwJaVs*|u3
zi}ux9G~7VGq!Pae`EpZ6`6xprerq<TukNV^Ej)^+@aQJnqaZQDO}0lt!lRoqsgI;b
ziNQU(+4iX9K%>pJM<t6qx|uxs9(ff1NYbuM&OWI5y4%VYSLv-3V^=1xh$osLIdeDc
z$rDW+B$NUzDsqs3-%VDbnH{7|vxlvET<@9Olaci^n2_0%LH&#`eMku8XP7+Ef8hf+
zR`(%KfOUI9|8odDQE@|pi=ahs-T(vN%eFtEKNj9=PpBaG?A{E1ljA{{`ews(Ad`b?
zpdVJi0~vh5LwWsXGVq~{azx~HkZ>Ak@l6#-sCy_Qe^VSJ`Z<)r#X_1gAYtG`nZyxk
sU}A6sAGQrFIned6ZD7eF10RNg`*@xnIAHLA=AWL+ZKATL|ExFue{67r5dZ)H

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 6c10c3c1..3a66ea6e 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -5758,27 +5758,37 @@ func (x *TransactionResultItem) GetRefusal() *UpstreamRefusal {
 	return nil
 }
 
-// UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent
-// it on BrokerService.ExecuteTransaction, carried in the Broker's response body
-// on each affected item (TransactionResultItem.refusal) instead of being turned
-// into an error of the Broker's own. Like TransactionDenial.exchange, nothing
-// signs it: it is the Broker's report of what the Exchange answered.
+// UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the
+// party that refused, the Connect code it answered with, and its typed reason,
+// unchanged. It is the one shape for "a peer refused", in two places:
+//   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker
+//     sent it on BrokerService.ExecuteTransaction is carried in the Broker's
+//     response body on each affected item (TransactionResultItem.refusal) instead
+//     of being turned into an error of the Broker's own. The party is the
+//     Exchange, equal to the refused items' signed offer.exchange, which is the
+//     value a caller acts on.
+//   - An MCP tool error. An Identity Service tool whose call was refused
+//     answers with an error result whose structuredContent is
+//     {"refusal": UpstreamRefusal}: the party is the Broker or Exchange that
+//     refused, or the Identity Service itself when it refused the tool call.
+//
+// Like TransactionDenial.exchange, nothing signs it: it is the relaying party's
+// report of what the refusing party answered.
 type UpstreamRefusal struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
-	// Bare host of the Exchange that refused, in the form "Request recipient"
-	// defines in the file header. Equal to the refused items' signed
-	// offer.exchange, which is the value a caller acts on.
-	Exchange string `protobuf:"bytes,1,opt,name=exchange,proto3" json:"exchange,omitempty"`
-	// The Connect code the Exchange answered with, in its wire form, e.g.
-	// "permission_denied" or "unauthenticated". When the Exchange gave no answer
-	// — unreachable, or the call timed out — it is the code the Broker's call
-	// failed with ("unavailable", "deadline_exceeded"). A timeout is an ambiguous
-	// outcome: the purchase may have completed. Retrying the agent's request with
-	// the same idempotency_key is safe, because the Broker forwards the key
-	// unchanged and the Exchange answers a replay from its stored result.
+	// Bare host of the party that refused the call made on the caller's behalf,
+	// in the form "Request recipient" defines in the file header.
+	Party string `protobuf:"bytes,1,opt,name=party,proto3" json:"party,omitempty"`
+	// The Connect code the party answered with, in its wire form, e.g.
+	// "permission_denied" or "unauthenticated". When the party gave no answer
+	// — unreachable, or the call timed out — it is the code the relaying party's
+	// call failed with ("unavailable", "deadline_exceeded"). A timeout is an
+	// ambiguous outcome: a purchase may have completed. Retrying the agent's
+	// request with the same idempotency_key is safe, because the Broker forwards
+	// the key unchanged and the Exchange answers a replay from its stored result.
 	Code string `protobuf:"bytes,2,opt,name=code,proto3" json:"code,omitempty"`
-	// The Exchange's typed reason, unchanged — the ErrorDetail it attached to its
-	// refusal. Absent when the Exchange attached none or gave no answer.
+	// The party's typed reason, unchanged — the ErrorDetail it attached to its
+	// refusal. Absent when the party attached none or gave no answer.
 	Detail        *ErrorDetail `protobuf:"bytes,3,opt,name=detail,proto3,oneof" json:"detail,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -5814,9 +5824,9 @@ func (*UpstreamRefusal) Descriptor() ([]byte, []int) {
 	return file_fora_v1_fora_proto_rawDescGZIP(), []int{27}
 }
 
-func (x *UpstreamRefusal) GetExchange() string {
+func (x *UpstreamRefusal) GetParty() string {
 	if x != nil {
-		return x.Exchange
+		return x.Party
 	}
 	return ""
 }
@@ -8049,11 +8059,13 @@ type WellKnownManifest struct {
 	// Exchange-only. Base currency for pricing (ISO 4217). All unit_cost
 	// values from this Exchange are denominated in this currency.
 	BaseCurrency *string `protobuf:"bytes,27,opt,name=base_currency,json=baseCurrency,proto3,oneof" json:"base_currency,omitempty"`
-	// Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound
-	// request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message
-	// Signatures. A request carrying more SHOULD be rejected. Lets Exchanges
-	// publish their chain-depth tolerance so Brokers prune before forwarding.
-	// Absent = no published limit (Exchange applies its own default policy).
+	// Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this
+	// Exchange accepts on an inbound request (Agent → Broker → … → Exchange).
+	// Every signature counts, whether or not it covers another. An Exchange
+	// refuses a request carrying more before it verifies any signature, with the
+	// Connect code resource_exhausted (HTTP 429) and no typed reason. Lets
+	// Exchanges publish their tolerance so a sender stays within it. Absent = no
+	// published limit (Exchange applies its own default policy).
 	MaxIntermediaryHops *int32 `protobuf:"varint,28,opt,name=max_intermediary_hops,json=maxIntermediaryHops,proto3,oneof" json:"max_intermediary_hops,omitempty"`
 	// Exchange-only. How to open an account here — see AccountRegistration, which
 	// owns the contract. Absent: registration_data is accepted uninspected,
@@ -10391,7 +10403,7 @@ type TransactionDenial struct {
 	// on a relayed or fanned-out execute the request went to a Broker, so the
 	// Exchange that refused may not be one the agent named (through
 	// BrokerService.ExecuteTransaction this detail reaches the agent inside
-	// UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is
+	// UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is
 	// what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to
 	// call Register without fetching a manifest to work it out. NOTHING SIGNS THIS
 	// VALUE: it rides in a response, and on a relayed path the response passed
@@ -11193,9 +11205,9 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x13_retrieval_endpointB\x17\n" +
 	"\x15_reporting_obligationB\n" +
 	"\n" +
-	"\b_refusal\"\xc8\x02\n" +
-	"\x0fUpstreamRefusal\x12\xd7\x01\n" +
-	"\bexchange\x18\x01 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\bexchange\x12\x1d\n" +
+	"\b_refusal\"\xc2\x02\n" +
+	"\x0fUpstreamRefusal\x12\xd1\x01\n" +
+	"\x05party\x18\x01 \x01(\tB\xba\x01\xbaH\xb6\x01r\xb3\x01\x18\x84\x022\xad\x01^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$R\x05party\x12\x1d\n" +
 	"\x04code\x18\x02 \x01(\tB\t\xbaH\x06r\x04\x10\x01\x18@R\x04code\x121\n" +
 	"\x06detail\x18\x03 \x01(\v2\x14.fora.v1.ErrorDetailH\x00R\x06detail\x88\x01\x01B\t\n" +
 	"\a_detail\"\xae\x01\n" +
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 3774f455..6cf96fb9 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -440,7 +440,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -657,20 +657,20 @@
       "type": "object"
     },
     "fora.v1.UpstreamRefusal": {
-      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
         },
         "detail": {
           "$ref": "#/$defs/fora.v1.ErrorDetail",
-          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+          "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
         },
-        "exchange": {
-          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+        "party": {
+          "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -678,7 +678,7 @@
       },
       "required": [
         "code",
-        "exchange"
+        "party"
       ],
       "title": "Upstream Refusal",
       "type": "object"
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index 03e414c8..e0a0b7bf 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -453,7 +453,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -672,20 +672,20 @@
     },
     "fora.v1.UpstreamRefusal": {
       "additionalProperties": false,
-      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
         },
         "detail": {
           "$ref": "#/$defs/fora.v1.ErrorDetail",
-          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+          "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
         },
-        "exchange": {
-          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+        "party": {
+          "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -693,7 +693,7 @@
       },
       "required": [
         "code",
-        "exchange"
+        "party"
       ],
       "title": "Upstream Refusal",
       "type": "object"
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
index f61ec84d..27fe2caf 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -241,7 +241,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
index 43934b12..8f06e65f 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -249,7 +249,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
index 9c53f02c..6283318e 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
@@ -4,7 +4,7 @@
   "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
   "properties": {
     "exchange": {
-      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
index 39bfc38b..2ccd806d 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
@@ -5,7 +5,7 @@
   "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
   "properties": {
     "exchange": {
-      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+      "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index b498ebcd..2f1cdd05 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -404,7 +404,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -621,20 +621,20 @@
       "type": "object"
     },
     "fora.v1.UpstreamRefusal": {
-      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
         },
         "detail": {
           "$ref": "#/$defs/fora.v1.ErrorDetail",
-          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+          "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
         },
-        "exchange": {
-          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+        "party": {
+          "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -642,7 +642,7 @@
       },
       "required": [
         "code",
-        "exchange"
+        "party"
       ],
       "title": "Upstream Refusal",
       "type": "object"
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 1b5e46b3..562f227b 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -416,7 +416,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -635,20 +635,20 @@
     },
     "fora.v1.UpstreamRefusal": {
       "additionalProperties": false,
-      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
         },
         "detail": {
           "$ref": "#/$defs/fora.v1.ErrorDetail",
-          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+          "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
         },
-        "exchange": {
-          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+        "party": {
+          "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -656,7 +656,7 @@
       },
       "required": [
         "code",
-        "exchange"
+        "party"
       ],
       "title": "Upstream Refusal",
       "type": "object"
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 9629d19e..4820035f 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -362,7 +362,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -439,20 +439,20 @@
       "type": "object"
     },
     "fora.v1.UpstreamRefusal": {
-      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
         },
         "detail": {
           "$ref": "#/$defs/fora.v1.ErrorDetail",
-          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+          "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
         },
-        "exchange": {
-          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+        "party": {
+          "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -460,7 +460,7 @@
       },
       "required": [
         "code",
-        "exchange"
+        "party"
       ],
       "title": "Upstream Refusal",
       "type": "object"
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index 1eca2182..e3ae38a5 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -373,7 +373,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -451,20 +451,20 @@
     },
     "fora.v1.UpstreamRefusal": {
       "additionalProperties": false,
-      "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+      "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
         },
         "detail": {
           "$ref": "#/$defs/fora.v1.ErrorDetail",
-          "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+          "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
         },
-        "exchange": {
-          "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+        "party": {
+          "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -472,7 +472,7 @@
       },
       "required": [
         "code",
-        "exchange"
+        "party"
       ],
       "title": "Upstream Refusal",
       "type": "object"
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index 90d5b754..7d9c025c 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -300,7 +300,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -411,20 +411,20 @@
   },
   "$id": "fora.v1.UpstreamRefusal.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+  "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
   "properties": {
     "code": {
-      "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
       "maxLength": 64,
       "minLength": 1,
       "type": "string"
     },
     "detail": {
       "$ref": "#/$defs/fora.v1.ErrorDetail",
-      "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+      "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
     },
-    "exchange": {
-      "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+    "party": {
+      "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "type": "string"
@@ -432,7 +432,7 @@
   },
   "required": [
     "code",
-    "exchange"
+    "party"
   ],
   "title": "Upstream Refusal",
   "type": "object"
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index 4324f836..702b5d6c 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -309,7 +309,7 @@
       "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
-          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
+          "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "type": "string"
@@ -422,20 +422,20 @@
   "$id": "fora.v1.UpstreamRefusal.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered.",
+  "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
   "properties": {
     "code": {
-      "description": "The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.",
+      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
       "maxLength": 64,
       "minLength": 1,
       "type": "string"
     },
     "detail": {
       "$ref": "#/$defs/fora.v1.ErrorDetail",
-      "description": "The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer."
+      "description": "The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer."
     },
-    "exchange": {
-      "description": "Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.",
+    "party": {
+      "description": "Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "type": "string"
@@ -443,7 +443,7 @@
   },
   "required": [
     "code",
-    "exchange"
+    "party"
   ],
   "title": "Upstream Refusal",
   "type": "object"
diff --git a/gen/jsonschema/fora.v1.WellKnownManifest.schema.json b/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
index e0c79022..4fb3bca9 100644
--- a/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
+++ b/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
@@ -181,7 +181,7 @@
       "type": "string"
     },
     "max_intermediary_hops": {
-      "description": "Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).",
+      "description": "Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json b/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
index 9b934f29..f3c6e7dc 100644
--- a/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
@@ -185,7 +185,7 @@
       "type": "string"
     },
     "max_intermediary_hops": {
-      "description": "Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).",
+      "description": "Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index fe886ab5..a872d4c3 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1084,7 +1084,7 @@ class TransactionDenial(WireModel):
         | None
     ) = Field(
         None,
-        description='Bare host of the Exchange that PRODUCED this denial, in the form "Request\n recipient" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator\'s business data and a signed acceptance of that\n Exchange\'s terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.',
+        description='Bare host of the Exchange that PRODUCED this denial, in the form "Request\n recipient" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator\'s business data and a signed acceptance of that\n Exchange\'s terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.',
     )
     offer_id: str | None = Field(
         None,
@@ -1707,7 +1707,7 @@ class WellKnownManifest(WireModel):
     )
     max_intermediary_hops: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description='Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).',
+        description='Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).',
     )
     name: str | None = Field(
         None, description='Exchange-only. Human-readable Exchange name.'
@@ -2117,18 +2117,18 @@ class TransactionRequest(WireModel):
 class UpstreamRefusal(WireModel):
     code: constr(min_length=1, max_length=64) = Field(
         ...,
-        description='The Connect code the Exchange answered with, in its wire form, e.g.\n "permission_denied" or "unauthenticated". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker\'s call\n failed with ("unavailable", "deadline_exceeded"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent\'s request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result.',
+        description='The Connect code the party answered with, in its wire form, e.g.\n "permission_denied" or "unauthenticated". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party\'s\n call failed with ("unavailable", "deadline_exceeded"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent\'s\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.',
     )
     detail: ErrorDetail | None = Field(
         None,
-        description="The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.",
+        description="The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.",
     )
-    exchange: constr(
+    party: constr(
         pattern=r'^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$',
         max_length=260,
     ) = Field(
         ...,
-        description='Bare host of the Exchange that refused, in the form "Request recipient"\n defines in the file header. Equal to the refused items\' signed\n offer.exchange, which is the value a caller acts on.',
+        description='Bare host of the party that refused the call made on the caller\'s behalf,\n in the form "Request recipient" defines in the file header.',
     )
 
 
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index d1ff7bb1..20bd24ed 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAU
 
 export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
 
 export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
 
@@ -76,7 +76,7 @@ export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.st
 
 export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
 
 export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item."));
 
@@ -198,17 +198,17 @@ export const TenantFeeRateSchema = wire(z.object({ "fee_rate_bps": z.coerce.numb
 
 export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]));
 
-export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all."));
+export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all."));
 
 export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
 
 export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
 
-export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the Exchange answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the Exchange gave no answer\n — unreachable, or the call timed out — it is the code the Broker's call\n failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an ambiguous\n outcome: the purchase may have completed. Retrying the agent's request with\n the same idempotency_key is safe, because the Broker forwards the key\n unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The Exchange's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the Exchange attached none or gave no answer.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that refused, in the form \"Request recipient\"\n defines in the file header. Equal to the refused items' signed\n offer.exchange, which is the value a caller acts on.") }).describe("UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent\n it on BrokerService.ExecuteTransaction, carried in the Broker's response body\n on each affected item (TransactionResultItem.refusal) instead of being turned\n into an error of the Broker's own. Like TransactionDenial.exchange, nothing\n signs it: it is the Broker's report of what the Exchange answered."));
+export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered."));
 
 export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
 
@@ -224,5 +224,5 @@ export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.strin
 
 export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
 
-export const WellKnownManifestSchema = wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound\n request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message\n Signatures. A request carrying more SHOULD be rejected. Lets Exchanges\n publish their chain-depth tolerance so Brokers prune before forwarding.\n Absent = no published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`."));
+export const WellKnownManifestSchema = wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`."));
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index c1fbc027..9c8901d6 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -33,11 +33,30 @@ as the same answer. The reference and AI-agent pages and the SDK doc comments of
 `GetAccountStatus` / `get_account_status` / `getAccountStatus` say the same; the SDKs
 return the refusal as their call error with the code `not_found`.
 
-**The Identity Service's MCP tools pass the typed reason through (docs only).** The
-Identity Service and AI-agent pages state that a tool error carries the FORA
-`ErrorDetail` the service received from the Broker or an Exchange, unchanged, in its
-structured content, so an agent on MCP branches on the same typed reason an SDK client
-reads.
+**The hop cap counts every signature and is refused with `resource_exhausted` (comments
+only).** `WellKnownManifest.max_intermediary_hops` is the maximum number of RFC 9421
+signatures an Exchange accepts on a request, every signature counted whether or not it
+covers another. An Exchange refuses a request carrying more before it verifies any
+signature, with the Connect code `resource_exhausted` (HTTP 429) and no typed reason; the
+field comment states it once. Go's `connectserver.WithMaxSignatures` and
+`helpers.VerifyOptions.MaxSignatures` no longer say to set the cap to
+`max_intermediary_hops + 1`: they take `max_intermediary_hops` itself, as the Python and
+TypeScript verifiers already did.
+
+**An MCP tool error carries `{"refusal": UpstreamRefusal}`; `UpstreamRefusal.exchange`
+is renamed `party` (field rename; no released message changes).** `UpstreamRefusal` is the
+one shape for "a peer refused a call made on the caller's behalf". Its field 1 was named
+`exchange`, which fit only a Broker purchase. It is now `party`, the bare host of the party
+that refused, with the same number and host rule. On a Broker purchase item the party is
+the Exchange, equal to the refused items' signed `offer.exchange`. `UpstreamRefusal` was
+added in this release, so no released message changes and `buf breaking` passes against
+v1.0.8 and v1.0.0; the proto-JSON name is now `party`.
+
+The Identity Service and AI-agent pages specify an MCP tool error: an error result whose
+`structuredContent` is `{"refusal": UpstreamRefusal}`, the party being the Broker or
+Exchange that refused the call, or the Identity Service itself when it refused the tool
+call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each tool's
+`outputSchema` declares two branches, its success shape or `{refusal}`.
 
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
 follow up to five redirects (comments and docs only).** Each signature is verified against its own signer's
@@ -464,8 +483,9 @@ The contract now defines that relay.
 - New messages: `BrokerTransactionResponse` (`items` in request order,
   `exchanges`, per-currency `totals`), `ExchangeOutcome` (one per Exchange
   contacted: `exchange`, `offer_ids`, `agent_identity_hash`, `subscription_quota`)
-  and `UpstreamRefusal` (`exchange`, the Connect `code`, the Exchange's
-  `ErrorDetail`).
+  and `UpstreamRefusal` (`party`, the refusing party's bare host; the Connect
+  `code`; the party's `ErrorDetail`). It is the one shape for "a peer refused": the
+  Identity Service's MCP tool errors carry it too.
 - `TransactionResultItem.refusal = 14`. An Exchange's refusal of a whole
   sub-request is never turned into a Broker error: it rides on each affected item,
   and the other Exchanges' results come back unchanged.
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 4b50cbd5..3eac01ec 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2683,33 +2683,42 @@ message TransactionResultItem {
   optional UpstreamRefusal refusal = 14;
 }
 
-// UpstreamRefusal — an Exchange's refusal of a whole sub-request a Broker sent
-// it on BrokerService.ExecuteTransaction, carried in the Broker's response body
-// on each affected item (TransactionResultItem.refusal) instead of being turned
-// into an error of the Broker's own. Like TransactionDenial.exchange, nothing
-// signs it: it is the Broker's report of what the Exchange answered.
+// UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the
+// party that refused, the Connect code it answered with, and its typed reason,
+// unchanged. It is the one shape for "a peer refused", in two places:
+//   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker
+//     sent it on BrokerService.ExecuteTransaction is carried in the Broker's
+//     response body on each affected item (TransactionResultItem.refusal) instead
+//     of being turned into an error of the Broker's own. The party is the
+//     Exchange, equal to the refused items' signed offer.exchange, which is the
+//     value a caller acts on.
+//   - An MCP tool error. An Identity Service tool whose call was refused
+//     answers with an error result whose structuredContent is
+//     {"refusal": UpstreamRefusal}: the party is the Broker or Exchange that
+//     refused, or the Identity Service itself when it refused the tool call.
+// Like TransactionDenial.exchange, nothing signs it: it is the relaying party's
+// report of what the refusing party answered.
 message UpstreamRefusal {
-  // Bare host of the Exchange that refused, in the form "Request recipient"
-  // defines in the file header. Equal to the refused items' signed
-  // offer.exchange, which is the value a caller acts on.
-  string exchange = 1 [
+  // Bare host of the party that refused the call made on the caller's behalf,
+  // in the form "Request recipient" defines in the file header.
+  string party = 1 [
     (buf.validate.field).string = {
       max_len: 260,
       pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"
     }
   ];
 
-  // The Connect code the Exchange answered with, in its wire form, e.g.
-  // "permission_denied" or "unauthenticated". When the Exchange gave no answer
-  // — unreachable, or the call timed out — it is the code the Broker's call
-  // failed with ("unavailable", "deadline_exceeded"). A timeout is an ambiguous
-  // outcome: the purchase may have completed. Retrying the agent's request with
-  // the same idempotency_key is safe, because the Broker forwards the key
-  // unchanged and the Exchange answers a replay from its stored result.
+  // The Connect code the party answered with, in its wire form, e.g.
+  // "permission_denied" or "unauthenticated". When the party gave no answer
+  // — unreachable, or the call timed out — it is the code the relaying party's
+  // call failed with ("unavailable", "deadline_exceeded"). A timeout is an
+  // ambiguous outcome: a purchase may have completed. Retrying the agent's
+  // request with the same idempotency_key is safe, because the Broker forwards
+  // the key unchanged and the Exchange answers a replay from its stored result.
   string code = 2 [(buf.validate.field).string = {min_len: 1, max_len: 64}];
 
-  // The Exchange's typed reason, unchanged — the ErrorDetail it attached to its
-  // refusal. Absent when the Exchange attached none or gave no answer.
+  // The party's typed reason, unchanged — the ErrorDetail it attached to its
+  // refusal. Absent when the party attached none or gave no answer.
   optional ErrorDetail detail = 3;
 }
 
@@ -4079,11 +4088,13 @@ message WellKnownManifest {
   // values from this Exchange are denominated in this currency.
   optional string base_currency = 27;
 
-  // Exchange-only. Maximum forwarding hops this Exchange tolerates on an inbound
-  // request (Agent → Broker → … → Exchange), counted as RFC 9421 HTTP Message
-  // Signatures. A request carrying more SHOULD be rejected. Lets Exchanges
-  // publish their chain-depth tolerance so Brokers prune before forwarding.
-  // Absent = no published limit (Exchange applies its own default policy).
+  // Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this
+  // Exchange accepts on an inbound request (Agent → Broker → … → Exchange).
+  // Every signature counts, whether or not it covers another. An Exchange
+  // refuses a request carrying more before it verifies any signature, with the
+  // Connect code resource_exhausted (HTTP 429) and no typed reason. Lets
+  // Exchanges publish their tolerance so a sender stays within it. Absent = no
+  // published limit (Exchange applies its own default policy).
   optional int32 max_intermediary_hops = 28;
 
   // Exchange-only. How to open an account here — see AccountRegistration, which
@@ -5164,7 +5175,7 @@ message TransactionDenial {
   // on a relayed or fanned-out execute the request went to a Broker, so the
   // Exchange that refused may not be one the agent named (through
   // BrokerService.ExecuteTransaction this detail reaches the agent inside
-  // UpstreamRefusal.detail, beside UpstreamRefusal.exchange). Carrying it here is
+  // UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is
   // what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to
   // call Register without fetching a manifest to work it out. NOTHING SIGNS THIS
   // VALUE: it rides in a response, and on a relayed path the response passed
diff --git a/sdk/go/connect/broker_execute_test.go b/sdk/go/connect/broker_execute_test.go
index 61a4d477..400f3707 100644
--- a/sdk/go/connect/broker_execute_test.go
+++ b/sdk/go/connect/broker_execute_test.go
@@ -120,8 +120,8 @@ func TestBrokerExecute_RelaysAMixedBatchAndDecodesTheCombinedAnswer(t *testing.T
 		signedOfferAt(t, "offer-a2", "exchange-a.test", "EUR"),
 	}
 	refusal := &forav1.UpstreamRefusal{
-		Exchange: "exchange-b.test",
-		Code:     "permission_denied",
+		Party: "exchange-b.test",
+		Code:  "permission_denied",
 		Detail: helpers.TransactionDenialDetail("fora.v1.ExchangeService", "no account",
 			forav1.DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED),
 	}
diff --git a/sdk/go/connectserver/options.go b/sdk/go/connectserver/options.go
index af7fa94b..8fcfa355 100644
--- a/sdk/go/connectserver/options.go
+++ b/sdk/go/connectserver/options.go
@@ -134,9 +134,13 @@ func WithoutReplayStore() ServerOption {
 	return func(c *serverConfig) { c.allowNoReplay = true }
 }
 
-// WithMaxSignatures injects the hop budget — the maximum number of signatures a
-// multisig (relay) request may carry (= max_intermediary_hops + 1). It is an
-// INJECTED value, never an SDK constant: the hop LIMIT is app policy, only the
+// WithMaxSignatures injects the hop budget — the maximum number of RFC 9421
+// signatures a request may carry, every signature counted, whether or not it
+// covers another. An Exchange sets it to the max_intermediary_hops it publishes
+// in its manifest. A request carrying more is refused before any signature is
+// checked, with CodeResourceExhausted (HTTP 429) and no typed reason, as the
+// WellKnownManifest.max_intermediary_hops comment specifies. It is an INJECTED
+// value, never an SDK constant: the hop LIMIT is app policy, only the
 // reject-reason→connect.Code mapping is SDK mechanics. 0 means unbounded.
 func WithMaxSignatures(n int) ServerOption {
 	return func(c *serverConfig) { c.maxSignatures = n }
diff --git a/sdk/go/helpers/verify.go b/sdk/go/helpers/verify.go
index 9697eff1..143dae4f 100644
--- a/sdk/go/helpers/verify.go
+++ b/sdk/go/helpers/verify.go
@@ -62,10 +62,10 @@ type VerifyOptions struct {
 	MaxFutureSkew time.Duration
 	// MaxSignatures bounds the number of signatures accepted on a request — the
 	// hop budget. Every signature counts, whether or not it covers another. 0
-	// means unbounded; the Exchange-terminal consumer sets it
-	// (= max_intermediary_hops + 1). A request carrying more signatures is
-	// rejected with ErrTooManyHops before any signature is cryptographically
-	// verified. Ignored by single-sig VerifyRequest.
+	// means unbounded; an Exchange sets it to the max_intermediary_hops it
+	// publishes. A request carrying more signatures is rejected with
+	// ErrTooManyHops before any signature is cryptographically verified. Ignored by
+	// single-sig VerifyRequest.
 	MaxSignatures int
 	// MaxSignatureAge clamps a signature's declared lifetime (expires − created).
 	// MaxFutureSkew only bounds the future edge; without an upper bound on the
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 54212d8f..6b2cbab6 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -119,7 +119,7 @@ The Broker re-packages the agent's purchase. What holds the set together is `Tra
 
 **Why re-packaging is safe.** Each item is atomic and its integrity is per resource. Each offer carries its own Exchange's signature, each acceptance binds the agent to that one offer, and each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases. It cannot alter any of them without breaking that item's Exchange signature or the agent's acceptance, and no cross-item integrity is needed. In a result item, the one signed value is the `retrieval_endpoint`, signed by the issuing Exchange; the other fields are the Broker's unsigned report of what each Exchange answered.
 
-**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal` — the Exchange, the Connect code it answered with, and its `ErrorDetail` unchanged — and the other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. Every per-item denial is the Exchange's result item, in the body, also for a one-item sub-request. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, the other items of the sub-request may succeed, and the agent buys that offer directly.
+**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal`, an `UpstreamRefusal` whose `party` is the Exchange, with the Connect code it answered with and its `ErrorDetail` unchanged, and the other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. Every per-item denial is the Exchange's result item, in the body, also for a one-item sub-request. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, the other items of the sub-request may succeed, and the agent buys that offer directly.
 
 **The Broker's own refusals** are non-OK errors with an `ErrorDetail`: `unauthenticated` with `request_auth_failure` for a bad agent signature, and `SIGNATURE_INVALID` for a `requester.domain` that is not the signing directory; `invalid_argument` for a malformed request; `failed_precondition` for an Exchange it cannot route to or does not approve.
 
diff --git a/website/src/content/docs/components/identity/overview.mdx b/website/src/content/docs/components/identity/overview.mdx
index 1e927c06..c53d444f 100644
--- a/website/src/content/docs/components/identity/overview.mdx
+++ b/website/src/content/docs/components/identity/overview.mdx
@@ -112,7 +112,29 @@ Each tool is one protocol verb. What differs between them is where the call goes
 
 Registration must reach the Exchange directly, because the Exchange derives the binding between an account and an identity from the agent's **own** inbound signature. `BrokerService.ExecuteTransaction` re-packages a purchase into requests signed with the Broker's key and carries agent identity in detached body acceptances — right for multi-Exchange purchases, and it would defeat registration's identity model.
 
-**Tool errors carry the typed reason.** When the Broker or an Exchange refuses the call a tool made, the tool answers with an error result whose structured content carries the FORA `ErrorDetail` the service received, unchanged. The agent reads the same typed reason an SDK client would, for example `request_auth_failure`, `registration_failure` or `transaction_denial`, and branches on it rather than on the message text.
+**Tool errors carry the refusal.** When a call a tool made is refused, the tool answers with an error result (`isError: true`) whose `structuredContent` is
+
+```json
+{
+  "refusal": {
+    "party": "exchange.example",
+    "code": "permission_denied",
+    "detail": {
+      "domain": "fora.v1.ExchangeService",
+      "message": "no account at this Exchange",
+      "transaction_denial": { "reason": "DENIAL_REASON_ACCOUNT_NOT_REGISTERED", "exchange": "exchange.example" }
+    }
+  }
+}
+```
+
+The value of `refusal` is the protocol's [`UpstreamRefusal`](/reference/proto-fora/#upstreamrefusal), the same shape a Broker uses for an Exchange's refusal of a relayed purchase:
+
+- `party` is the bare host of the party that refused: the Broker or the Exchange the tool called, or the Identity Service itself when it refused the tool call.
+- `code` is the Connect code that party answered with, in its wire form, or the code the call failed with when no answer came (`unavailable`, `deadline_exceeded`).
+- `detail` is the FORA `ErrorDetail` the party attached, unchanged, for example `request_auth_failure`, `registration_failure` or `transaction_denial`. It is absent when the party attached none.
+
+The agent branches on `detail` and `code`, never on the message text. Each tool's `outputSchema` declares two branches: the tool's own success shape, or an object with the single member `refusal`.
 
 `fora_report` takes no endpoint argument. The destination is read off the report's own exchange field, which the offer signed, and resolved from that Exchange's manifest. There is no parameter a misconfigured origin could arrive through.
 
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 687023b9..3c71c599 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -342,7 +342,7 @@ The endpoint answers an unauthenticated request with `401` and the OAuth metadat
 | `fora_execute` | license offers and get the content back |
 | `fora_report` | file the usage report an offer's terms require |
 
-When the Broker or an Exchange refuses a call, the tool's error result carries the FORA `ErrorDetail` the service received, unchanged, in its structured content, so you branch on the same typed reason an SDK client reads.
+When a call is refused, the tool's error result carries `{"refusal": UpstreamRefusal}` as its structured content: the party that refused (the Broker, an Exchange or the Identity Service), the Connect code it answered with, and its FORA `ErrorDetail` unchanged. You branch on the same typed reason an SDK client reads.
 
 Custody is the trade. The service holds your private key and, by default, fetches the licensed bytes for you — which is what makes the delivery URL's key binding satisfiable at all when you hold no key. An agent that holds its own key and publishes its own directory is the same participant to an Exchange and avoids that trade entirely; the rest of this page is that path.
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 22a0bbd9..6aa4a0c6 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -318,7 +318,7 @@ The Exchange:
 2. Resolves each signature's `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** covered `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2). A signature that covers an earlier one also covers that signature's member, so it covers several; it is attributed to the member keyed to its own label (WG-00 §5.2.1), and a signature covering several members none of which is keyed to its label is refused
 3. Verifies each signature independently against its own covered components and its own key, and authenticates the caller as the party that signed the request: the agent on a direct call, the Broker on a request the Broker sent. Where a party forwarded unchanged and covered an earlier signature, it also confirms that coverage
 4. On an execute request, verifies each item's `AgentAcceptance` against the agent's registered key, as above
-5. Enforces depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting the signatures** in the stack
+5. Enforces depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting every signature** on the request, before verifying any; a request over the Exchange's cap is refused as the `max_intermediary_hops` field specifies (`resource_exhausted`)
 
 Verifying a signature proves which party sent the request. Whether that party may send to this Exchange at all is the Exchange's own policy: an Exchange MAY accept requests from a Broker only when the Broker is registered with it.
 
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index b1431907..8abdc1a7 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -530,7 +530,7 @@ Re-packaging and combining are safe because each item is atomic and its integrit
     {
       "offer_id": "7a9482de-d0d2-4bfb-ba99-c2506dc2bc91",
       "refusal": {
-        "exchange": "exchange-b.example",
+        "party": "exchange-b.example",
         "code": "permission_denied",
         "detail": {
           "domain": "fora.v1.ExchangeService",
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 70cd551f..d6bba73c 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -39,11 +39,30 @@ as the same answer. The reference and AI-agent pages and the SDK doc comments of
 `GetAccountStatus` / `get_account_status` / `getAccountStatus` say the same; the SDKs
 return the refusal as their call error with the code `not_found`.
 
-**The Identity Service's MCP tools pass the typed reason through (docs only).** The
-Identity Service and AI-agent pages state that a tool error carries the FORA
-`ErrorDetail` the service received from the Broker or an Exchange, unchanged, in its
-structured content, so an agent on MCP branches on the same typed reason an SDK client
-reads.
+**The hop cap counts every signature and is refused with `resource_exhausted` (comments
+only).** `WellKnownManifest.max_intermediary_hops` is the maximum number of RFC 9421
+signatures an Exchange accepts on a request, every signature counted whether or not it
+covers another. An Exchange refuses a request carrying more before it verifies any
+signature, with the Connect code `resource_exhausted` (HTTP 429) and no typed reason; the
+field comment states it once. Go's `connectserver.WithMaxSignatures` and
+`helpers.VerifyOptions.MaxSignatures` no longer say to set the cap to
+`max_intermediary_hops + 1`: they take `max_intermediary_hops` itself, as the Python and
+TypeScript verifiers already did.
+
+**An MCP tool error carries `{"refusal": UpstreamRefusal}`; `UpstreamRefusal.exchange`
+is renamed `party` (field rename; no released message changes).** `UpstreamRefusal` is the
+one shape for "a peer refused a call made on the caller's behalf". Its field 1 was named
+`exchange`, which fit only a Broker purchase. It is now `party`, the bare host of the party
+that refused, with the same number and host rule. On a Broker purchase item the party is
+the Exchange, equal to the refused items' signed `offer.exchange`. `UpstreamRefusal` was
+added in this release, so no released message changes and `buf breaking` passes against
+v1.0.8 and v1.0.0; the proto-JSON name is now `party`.
+
+The Identity Service and AI-agent pages specify an MCP tool error: an error result whose
+`structuredContent` is `{"refusal": UpstreamRefusal}`, the party being the Broker or
+Exchange that refused the call, or the Identity Service itself when it refused the tool
+call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each tool's
+`outputSchema` declares two branches, its success shape or `{refusal}`.
 
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
 follow up to five redirects (comments and docs only).** Each signature is verified against its own signer's
@@ -474,8 +493,9 @@ The contract now defines that relay.
 - New messages: `BrokerTransactionResponse` (`items` in request order,
   `exchanges`, per-currency `totals`), `ExchangeOutcome` (one per Exchange
   contacted: `exchange`, `offer_ids`, `agent_identity_hash`, `subscription_quota`)
-  and `UpstreamRefusal` (`exchange`, the Connect `code`, the Exchange's
-  `ErrorDetail`).
+  and `UpstreamRefusal` (`party`, the refusing party's bare host; the Connect
+  `code`; the party's `ErrorDetail`). It is the one shape for "a peer refused": the
+  Identity Service's MCP tool errors carry it too.
 - `TransactionResultItem.refusal = 14`. An Exchange's refusal of a whole
   sub-request is never turned into a Broker error: it rides on each affected item,
   and the other Exchanges' results come back unchanged.
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index a2972cd6..b3d63e44 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -224,7 +224,7 @@ Result for a single offer in a batch transaction. `refusal` is set only in a `Br
 
 ### UpstreamRefusal
 
-An Exchange's refusal of a whole sub-request a Broker sent it, carried on each affected item instead of being turned into an error of the Broker's own: the Exchange, the Connect `code` it answered with, and its `ErrorDetail` unchanged.
+A peer's refusal of a call made on the caller's behalf: the refusing `party`, the Connect `code` it answered with, and its `ErrorDetail` unchanged. It is the one shape for "a peer refused". On a Broker purchase it rides on each affected item instead of becoming an error of the Broker's own, and the party is the Exchange. An Identity Service MCP tool error carries it as `{"refusal": UpstreamRefusal}`.
 
 ::proto-message{name=UpstreamRefusal}
 

From 47c6939eeb8ef571730cf276525a104125156bf5 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:00:41 -0400
Subject: [PATCH 122/164] Verify delivery proofs in Go, accept a superset, and
 sign at the clock's time

Delivery proof: Go had only the sign face. helpers.VerifyAgentBinding is
the verify face a delivery edge runs, for parity with Python and
TypeScript and as the oracle for the pop vectors' verdicts. It accepts a
proof whose signature covers AT LEAST the Web Bot Auth base, @method,
@target-uri and the agent's Signature-Agent member, so a Web Bot Auth
library's proof that also covers @authority, or a header, verifies; it
enforces the three-way identity against the presented key and rebuilds
@target-uri from the URL verbatim. A refusal is a PoPError carrying the
token the three SDKs share (PoPFailure) and, when the fetcher can fix it,
PoPAcceptSignature. The pop vectors gain expected_reason and
expected_accept_signature, two superset proofs, a superset that omits
@method, and an unsigned fetch, all derived from the Go verifier.

Accept-Signature: a Signature-Agent member that is not an https origin is
a refusal the client can fix, so AcceptSignatureFor now answers it; the
two not-origin cases of verify-request-neg-vectors.json carry the value.

MonotonicWindow moved created forward by one second per request with no
cap, so above one request per second signatures were stamped in the
future and passed only on the verifier's skew allowance. It now signs at
the clock's current time, exactly as ClockWindow, and is deprecated; the
64-byte nonce is what makes each signature unique.

WBAKeyResolverOptions.Scheme was a test seam on the production surface:
it let a configuration fetch an https origin's directory in plaintext. It
is removed. A directory is always fetched over https, and the tests serve
theirs with TLS servers and inject those servers' clients.

The parity map names the new symbols and the matrix is regenerated.
---
 docs/sdk-parity-matrix.md                     |  23 +-
 sdk/go/README.md                              |  10 +
 sdk/go/connect/identity_test.go               |  11 +-
 sdk/go/core/sigwindow.go                      |  50 ++--
 sdk/go/core/transport.go                      |   2 +-
 sdk/go/core/transport_options_test.go         |  48 +---
 sdk/go/helpers/gen_vectors_test.go            |  67 ++++-
 sdk/go/helpers/pop.go                         |   4 +-
 sdk/go/helpers/pop_test.go                    |   4 +
 sdk/go/helpers/pop_verify.go                  | 234 ++++++++++++++++++
 sdk/go/helpers/pop_verify_test.go             |  85 +++++++
 sdk/go/helpers/testdata/pop-vectors.json      | 101 +++++++-
 .../testdata/verify-request-neg-vectors.json  |   6 +-
 sdk/go/helpers/wba.go                         |  13 +-
 sdk/go/helpers/wba_profile_test.go            |   4 +-
 .../gen_revocation_membership_vectors_test.go |   5 +-
 sdk/go/resolvers/wbakeyresolver.go            |  21 +-
 .../resolvers/wbakeyresolver_debounce_test.go |  10 +-
 ...keyresolver_directorybase_internal_test.go |   6 +-
 .../resolvers/wbakeyresolver_profile_test.go  |  27 +-
 sdk/go/resolvers/wbakeyresolver_test.go       |  89 +++----
 sdk/parity/symbol-map.json                    |  31 ++-
 22 files changed, 661 insertions(+), 190 deletions(-)
 create mode 100644 sdk/go/helpers/pop_verify.go
 create mode 100644 sdk/go/helpers/pop_verify_test.go

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 8cc8c31f..3b2da9f9 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 188 symbols at cross-language parity · 17 documented divergences · 209 Go-idiomatic exclusions · 44 conformance corpora, each tri-replayed.
+**At a glance:** 190 symbols at cross-language parity · 17 documented divergences · 228 Go-idiomatic exclusions · 44 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -96,6 +96,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `OfferSignatureAlgorithm` | `OFFER_SIGNATURE_ALGORITHM` | `OFFER_SIGNATURE_ALGORITHM` |
 | `ParseDiscoveryHint` | `parse_discovery_hint` | `parseDiscoveryHint` |
 | `ParseMoney` | `parse_money` | `parseMoney` |
+| `PoPAcceptSignature` | `POP_ACCEPT_SIGNATURE` | `POP_ACCEPT_SIGNATURE` |
 | `ProtocolVersion` | `ProtocolVersion` | `ProtocolVersion` |
 | `Reason` | `reason` | `reason` |
 | `ReconcileDiscoveryHint` | `reconcile_discovery_hint` | `reconcileDiscoveryHint` |
@@ -131,6 +132,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ValidateLicenseTerm` | `validate_license_term` | `validateLicenseTerm` |
 | `ValidateResourceEntry` | `validate_resource_entry` | `validateResourceEntry` |
 | `ValidationRuleIDs` | `cross_field_rule_ids` | `crossFieldRuleIds` |
+| `VerifyAgentBinding` | `verify_agent_binding` | `verifyAgentBinding` |
 | `VerifyDirectoryResponse` | `verify_directory_response` | `verifyDirectoryResponse` |
 | `VerifyMultisigRequest` | `verify_multisig_request_server` | `verifyMultisigRequestServer` |
 | `VerifyOfferAcceptance` | `verify_offer_acceptance_jcs` | `verifyOfferAcceptance` |
@@ -424,7 +426,25 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.NewEd25519Signer` | Go Ed25519 Signer constructor; py/ts inject a sign function rather than constructing a named signer. |
 | `helpers.NewEd25519SignerFromSeed` | Go Ed25519 Signer-from-seed constructor; py/ts inject a sign function rather than constructing a named signer. |
 | `helpers.NewMultisigContext` | Go context.Context accessor; py/ts thread multisig state explicitly. |
+| `helpers.PoPBadAgentKey` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPBadCoveredComponents` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPBadSignatureAgent` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPBadTag` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPError` | Go typed error carrying the refusal token and the Accept-Signature value; py/ts return them on the verdict (PopResult.reason / accept_signature, acceptSignature). |
+| `helpers.PoPExpired` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPFailure` | Go string type for the shared delivery-proof refusal tokens; py returns the token as a str on PopResult.reason and TS types it as the PopFailure literal union, so the tokens, pinned by pop-vectors.json, carry the parity claim. |
+| `helpers.PoPFutureCreated` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPKeyIDMismatch` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPMalformedSignature` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPMissingAgentKey` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPMissingCreated` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPMissingExpires` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPMissingSignature` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
 | `helpers.PoPOptions` | Go options struct for the delivery-proof signer; Python takes the same values as keyword arguments and TS as an options object. |
+| `helpers.PoPSignatureInvalid` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPThumbprintMismatch` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPUnsupportedAlg` | Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens. |
+| `helpers.PoPVerifyOptions` | Go options struct for VerifyAgentBinding; py/ts pass now (and the injectable verify primitive) as arguments. |
 | `helpers.RedactURL` | Go query-stripping helper for a signed URL headed to a log; py/ts redact inline at the log site. |
 | `helpers.RegistrationDataAccepted` | Member of the mapped helpers.RegistrationDataVerdict vocabulary. Python and TypeScript spell it as a literal; the shared registration-schema corpus pins the token. |
 | `helpers.RegistrationDataNoVerdict` | Member of the mapped helpers.RegistrationDataVerdict vocabulary. Python and TypeScript spell it as a literal; the shared registration-schema corpus pins the token. |
@@ -458,6 +478,7 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `helpers.Signer` | Go Signer interface; py/ts inject a sign function (TS Ed25519SignFn; Python a signing callable) rather than a named Signer type — divergent handle shape, not a missing operation. |
 | `helpers.ThumbprintBytes` | Go raw-[32]byte thumbprint variant; py/ts expose only the string thumbprint. |
 | `helpers.Validate` | Go protovalidate wrapper; TS/Python ship no validation interceptor (matrix SERVER-role validation row: TS/Py absent). |
+| `helpers.VerifiedAgentBinding` | Go result struct for VerifyAgentBinding; py/ts return the PopResult verdict, which carries the same signature_agent / signatureAgent. |
 | `helpers.VerifiedRequest` | Go verified-request result value type; py/ts return language-native verdict objects. |
 | `helpers.VerifiedURL` | Go verified-URL result value type (PoP via CheckProofOfPossession); py/ts expose verify_agent_binding/verifyAgentBinding. |
 | `helpers.VerifyMultisigRequestResolved` | Go resolver-injected multisig-verify overload; py/ts expose a single multisig-verify entry point. |
diff --git a/sdk/go/README.md b/sdk/go/README.md
index 5b09abbd..8be22730 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -133,6 +133,16 @@ binding, _ := helpers.SignAgentBinding(ctx, signer, agentPub, helpers.PoPOptions
 binding.Apply(req.Header) // X-FORA-Agent-Key + Signature-Agent + Signature-Input + Signature
 ```
 
+The VERIFY face, the check a delivery edge runs, accepts a proof whose signature covers
+at least `@method`, `@target-uri` and the agent's `Signature-Agent` member, so a Web Bot
+Auth library's proof that also covers `@authority` verifies, and enforces the three-way
+identity against the key in `X-FORA-Agent-Key`, offline:
+
+```go
+_, err := helpers.VerifyAgentBinding(r.Method, rawRequestURL, r.Header, agentID, helpers.PoPVerifyOptions{})
+var refused *helpers.PoPError // Reason is the shared token; AcceptSignature answers the 401
+```
+
 **Routing predicates** — the two pure checks that precede a signed call to an
 address a network party named (a manifest may point at itself or a subdomain of
 itself, and nothing else):
diff --git a/sdk/go/connect/identity_test.go b/sdk/go/connect/identity_test.go
index b7832264..9bd70150 100644
--- a/sdk/go/connect/identity_test.go
+++ b/sdk/go/connect/identity_test.go
@@ -12,7 +12,6 @@ import (
 	"crypto/ed25519"
 	"net/http"
 	"net/http/httptest"
-	"strings"
 	"testing"
 	"time"
 
@@ -56,7 +55,7 @@ func TestIdentityHelpers_MintAFreshAgent(t *testing.T) {
 	}
 	// The directory answers as the profile requires: its own media type, and a
 	// response signed by the key it lists for the authority it was fetched from.
-	directory := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+	directory := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		sig, err := helpers.SignDirectoryResponse(r.Context(), r.Host, body, []helpers.Signer{signer},
 			now.Unix(), now.Add(time.Hour).Unix())
 		if err != nil {
@@ -67,11 +66,11 @@ func TestIdentityHelpers_MintAFreshAgent(t *testing.T) {
 		_, _ = w.Write(body)
 	}))
 	t.Cleanup(directory.Close)
-	// The Signature-Agent member is an https origin; the resolver fetches it from
-	// the plaintext test server through its Scheme option.
-	origin := "https://" + strings.TrimPrefix(directory.URL, "http://")
+	// The Signature-Agent member is the directory's https origin; the resolver
+	// reaches the TLS test server through that server's own client.
+	origin := directory.URL
 
-	keys := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{Scheme: "http", HTTP: http.DefaultClient})
+	keys := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{HTTP: directory.Client()})
 	path, h := foraserver.NewCatalogServiceHandler(&recordingCatalog{}, foraserver.WithKeyResolver(keys))
 	mux := http.NewServeMux()
 	mux.Handle(path, h)
diff --git a/sdk/go/core/sigwindow.go b/sdk/go/core/sigwindow.go
index f287e3d8..f4d3d3ed 100644
--- a/sdk/go/core/sigwindow.go
+++ b/sdk/go/core/sigwindow.go
@@ -1,9 +1,6 @@
 package core
 
-import (
-	"sync/atomic"
-	"time"
-)
+import "time"
 
 // Window returns the RFC 9421 (created, expires) cutoffs (unix seconds) to
 // stamp on the next outbound signature. It is invoked once per signed request.
@@ -28,37 +25,20 @@ func ClockWindow(now func() time.Time, ttl time.Duration) Window {
 	}
 }
 
-// MonotonicWindow returns a Window whose expires cutoff is strictly increasing
-// across calls: it tracks now+ttl but, when a burst of requests lands in the
-// same wall-clock second, bumps expires by one second per call so no two
-// back-to-back signatures share a (keyid, expires) pair. The signing transport
-// no longer needs this for uniqueness: every signature carries a fresh nonce,
-// so ClockWindow is enough. created moves with expires, so the window is always
-// exactly ttl and never exceeds the Web Bot Auth limit when ttl is at most
-// helpers.MaxSignatureLifetime; during a burst created leads the clock by the
-// burst's length in seconds, which a verifier's future-skew allowance absorbs.
-// Safe for concurrent RoundTrips: the running maximum is held in an atomic
-// updated by compare-and-swap. To adapt an application clock interface with a
-// Now() method, pass the method value: MonotonicWindow(clk.Now, ttl).
+// MonotonicWindow returns a Window that stamps each outbound signature at the
+// clock's current time: created=now() and expires=now()+ttl, exactly as
+// ClockWindow does.
 //
-// ONE INSTANCE PER CLIENT, never one per call. The running maximum is the whole
-// mechanism: a window minted per request starts from zero, cannot see the
-// previous signature, and provides exactly none of the uniqueness it was chosen
-// for — while still looking correct at the call site.
+// It once bumped expires (and later created with it) by one second per call
+// inside a wall-clock second, so that no two signatures shared a window. That
+// stamped signatures in the future at more than one request per second, by as many
+// seconds as there were requests, which a verifier's future-skew allowance then
+// absorbed. Uniqueness never needed it: every signature carries a fresh 64-byte
+// nonce, so two identical requests in the same second already sign to different
+// bytes.
+//
+// Deprecated: use ClockWindow. MonotonicWindow is kept so existing callers
+// compile, and behaves identically.
 func MonotonicWindow(now func() time.Time, ttl time.Duration) Window {
-	var lastExpires atomic.Int64
-	return func() (int64, int64) {
-		n := now()
-		floor := n.Unix() + int64(ttl.Seconds())
-		for {
-			prev := lastExpires.Load()
-			next := floor
-			if prev >= next {
-				next = prev + 1
-			}
-			if lastExpires.CompareAndSwap(prev, next) {
-				return next - int64(ttl.Seconds()), next
-			}
-		}
-	}
+	return ClockWindow(now, ttl)
 }
diff --git a/sdk/go/core/transport.go b/sdk/go/core/transport.go
index e5d20c44..db03a269 100644
--- a/sdk/go/core/transport.go
+++ b/sdk/go/core/transport.go
@@ -18,7 +18,7 @@ import (
 // created/expires pair by the DEFAULT window: helpers.MaxSignatureLifetime, the
 // longest a Web Bot Auth request signature may live. The verifier enforces the
 // window against its own clock. Callers with their own freshness policy inject a
-// shorter window via WithWindow (see ClockWindow / MonotonicWindow); a longer one
+// shorter window via WithWindow (see ClockWindow); a longer one
 // is refused at signing with helpers.ErrSignatureLifetime.
 const signWindow = helpers.MaxSignatureLifetime
 
diff --git a/sdk/go/core/transport_options_test.go b/sdk/go/core/transport_options_test.go
index 9af347ad..f1b07a2a 100644
--- a/sdk/go/core/transport_options_test.go
+++ b/sdk/go/core/transport_options_test.go
@@ -1,8 +1,6 @@
 package core_test
 
-// TDD-red suite for the new SigningTransport options and the sigwindow
-// constructors (yxaeb Step 1). Every test MUST fail today because the API
-// does not exist yet — the compile error is the red state.
+// The SigningTransport options and the sigwindow constructors.
 //
 // Behavioral expectations are ported from:
 //   - internal/signingtransport/transport.go  (WithAppendSigner, Signature-Agent
@@ -435,46 +433,20 @@ func TestClockWindow_TTLArithmetic(t *testing.T) {
 	}
 }
 
-// TestMonotonicWindow_UniqueUnderRepeatedCallsWithinSameSecond pins that
-// MonotonicWindow's expires is strictly increasing across back-to-back calls
-// even when the wall clock does not advance — no two calls in the same second
-// share the same expires value, so identical relay requests do not collide in
-// the server's replay store.
-func TestMonotonicWindow_UniqueUnderRepeatedCallsWithinSameSecond(t *testing.T) {
+// TestMonotonicWindow_NeverStampsAheadOfTheClock pins the fix for the forward
+// shift: a burst of a thousand calls inside one frozen second stamps every one at
+// the clock's time, so no signature is created in the future, and each window is
+// exactly ttl. Uniqueness comes from the nonce, not from the window.
+func TestMonotonicWindow_NeverStampsAheadOfTheClock(t *testing.T) {
 	t.Parallel()
 	const ttl = 5 * time.Minute
-	// Freeze the clock so every call lands in the "same second" scenario.
 	frozen := time.Unix(1_700_000_000, 0)
 	w := core.MonotonicWindow(func() time.Time { return frozen }, ttl)
-
-	_, expires1 := w()
-	_, expires2 := w()
-	_, expires3 := w()
-
-	if expires2 <= expires1 {
-		t.Errorf("call 2 expires=%d must be > call 1 expires=%d (monotonic uniqueness)", expires2, expires1)
-	}
-	if expires3 <= expires2 {
-		t.Errorf("call 3 expires=%d must be > call 2 expires=%d (monotonic uniqueness)", expires3, expires2)
-	}
-}
-
-// TestMonotonicWindow_LifetimeStaysTTL pins that created moves with expires, so
-// a burst never stretches a window past ttl — past the five-minute Web Bot Auth
-// limit when ttl is that limit — and the first call's created is now.
-func TestMonotonicWindow_LifetimeStaysTTL(t *testing.T) {
-	t.Parallel()
-	const ttl = 5 * time.Minute
-	frozen := time.Unix(1_700_000_000, 0)
-	w := core.MonotonicWindow(func() time.Time { return frozen }, ttl)
-
-	for i := range 3 {
+	for i := range 1000 {
 		created, expires := w()
-		if i == 0 && created != frozen.Unix() {
-			t.Errorf("first created = %d; want %d", created, frozen.Unix())
-		}
-		if expires-created != int64(ttl.Seconds()) {
-			t.Errorf("call %d window = %ds; want %ds", i, expires-created, int64(ttl.Seconds()))
+		if created != frozen.Unix() || expires != frozen.Unix()+int64(ttl.Seconds()) {
+			t.Fatalf("call %d = (%d, %d); want (%d, %d) — a signature stamped ahead of the clock",
+				i, created, expires, frozen.Unix(), frozen.Unix()+int64(ttl.Seconds()))
 		}
 	}
 }
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index 59a86cf3..e3ae23ed 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -87,6 +87,11 @@ type popVector struct {
 	Signature      string `json:"signature"`
 	NowUnix        int64  `json:"now_unix"`
 	ExpectedValid  bool   `json:"expected_valid"`
+	// ExpectedReason is the PoPFailure token the REAL Go VerifyAgentBinding refuses
+	// the proof with ("" when it verifies), and ExpectedAcceptSignature the
+	// Accept-Signature value the refusal carries ("" for none).
+	ExpectedReason          string `json:"expected_reason"`
+	ExpectedAcceptSignature string `json:"expected_accept_signature,omitempty"`
 }
 
 // fixedSeed returns a deterministic 32-byte Ed25519 seed: byte i = (b+i) mod 256.
@@ -190,6 +195,7 @@ type popSpec struct {
 	covered        []CoveredComponent // nil means the shipped signer
 	tag            string
 	presented      ed25519.PublicKey // nil means the signing key's public half
+	unsigned       bool              // no Signature-Input, Signature or Signature-Agent at all
 	now            int64
 	valid          bool
 }
@@ -231,6 +237,10 @@ func signEdgePoPByHand(priv ed25519.PrivateKey, sp popSpec, created, expires int
 			lines = append(lines, `"@method": GET`)
 		case c.Name == "@target-uri":
 			lines = append(lines, `"@target-uri": `+sp.url)
+		case c.Name == "@authority":
+			lines = append(lines, `"@authority": cdn.example`)
+		case c.Name == "x-fora-agent-key":
+			lines = append(lines, `"x-fora-agent-key": `+b64urlNoPad(priv.Public().(ed25519.PublicKey)))
 		case len(c.Params) == 0:
 			lines = append(lines, `"signature-agent": `+sp.signatureAgent)
 		default:
@@ -312,6 +322,27 @@ func buildPopVectors(t *testing.T) []popVector {
 			sp.tag = WBATag
 			sp.directory = "http://agent.example"
 		}),
+		// A proof covers AT LEAST the profile's components: a Web Bot Auth library
+		// that also covers @authority, or a header, makes a proof that verifies.
+		with("superset_authority", func(sp *popSpec) {
+			sp.covered = append(append([]CoveredComponent{}, wbaCovered...), CoveredComponent{Name: "@authority"})
+			sp.tag = WBATag
+			sp.valid = true
+		}),
+		with("superset_authority_first_and_agent_key", func(sp *popSpec) {
+			sp.covered = []CoveredComponent{
+				{Name: "@authority"}, {Name: "@target-uri"}, {Name: "@method"}, member, {Name: "x-fora-agent-key"},
+			}
+			sp.tag = WBATag
+			sp.valid = true
+		}),
+		// The superset rule still requires every profile component.
+		with("superset_without_method", func(sp *popSpec) {
+			sp.covered = []CoveredComponent{{Name: "@authority"}, {Name: "@target-uri"}, member}
+			sp.tag = WBATag
+		}),
+		// A fetch that carries no signature at all.
+		with("unsigned", func(sp *popSpec) { sp.unsigned = true }),
 	}
 	out := make([]popVector, 0, len(specs))
 	for _, sp := range specs {
@@ -330,7 +361,9 @@ func emitPopVector(t *testing.T, sp popSpec, created, expires int64) popVector {
 		presented = priv.Public().(ed25519.PublicKey)
 	}
 	var sigInput, sig, agentHeader string
-	if sp.covered == nil {
+	if sp.unsigned {
+		// Nothing but the presented key.
+	} else if sp.covered == nil {
 		b := signEdgePoP(t, priv, sp, created, expires)
 		sigInput, sig, agentHeader = b.SignatureInput, b.Signature, b.SignatureAgent
 	} else {
@@ -343,12 +376,42 @@ func emitPopVector(t *testing.T, sp popSpec, created, expires int64) popVector {
 			agentHeader = ""
 		}
 	}
-	return popVector{
+	v := popVector{
 		Name: sp.name, Method: http.MethodGet, URL: sp.url, AgentID: sp.keyID,
 		PresentedKeyB64URL: b64urlNoPad(presented), SignerSeedHex: hex.EncodeToString(sp.seed),
 		AgentDirectory: sp.directory, Nonce: sp.nonce, SignatureAgent: agentHeader,
 		SignatureInput: sigInput, Signature: sig, NowUnix: sp.now, ExpectedValid: sp.valid,
 	}
+	v.ExpectedReason, v.ExpectedAcceptSignature = popOracle(t, v)
+	if (v.ExpectedReason == "") != sp.valid {
+		t.Fatalf("pop vector %s: the oracle answered %q, the case expects valid=%v", sp.name, v.ExpectedReason, sp.valid)
+	}
+	return v
+}
+
+// popOracle runs the REAL Go VerifyAgentBinding over a pop vector, returning the
+// refusal's PoPFailure token ("" when the proof verifies) and its
+// Accept-Signature value.
+func popOracle(t *testing.T, v popVector) (string, string) {
+	t.Helper()
+	h := http.Header{}
+	h.Set(AgentKeyHeader, v.PresentedKeyB64URL)
+	for name, value := range map[string]string{
+		SignatureAgentHeader: v.SignatureAgent, "Signature-Input": v.SignatureInput, "Signature": v.Signature,
+	} {
+		if value != "" {
+			h.Set(name, value)
+		}
+	}
+	_, err := VerifyAgentBinding(v.Method, v.URL, h, v.AgentID, PoPVerifyOptions{Now: time.Unix(v.NowUnix, 0)})
+	if err == nil {
+		return "", ""
+	}
+	var perr *PoPError
+	if !errors.As(err, &perr) {
+		t.Fatalf("pop vector %s: not a PoPError: %v", v.Name, err)
+	}
+	return string(perr.Reason), perr.AcceptSignature
 }
 
 // signRequestVector mirrors the SignRequestVector shape the py parity test reads.
diff --git a/sdk/go/helpers/pop.go b/sdk/go/helpers/pop.go
index 9d2193ce..2e02d280 100644
--- a/sdk/go/helpers/pop.go
+++ b/sdk/go/helpers/pop.go
@@ -29,8 +29,8 @@ import (
 // X-FORA-Agent-Key, resolves the same key from the directory the Signature-Agent
 // member names, and accepts the same signature.
 //
-// This is the SIGN face. The verify face ships in sdk/ts and sdk/python (the
-// edge runs there); Go is the byte oracle both are pinned to, through
+// This is the SIGN face; VerifyAgentBinding (pop_verify.go) is the verify face.
+// Go is the byte oracle the Python and TypeScript faces are pinned to, through
 // testdata/pop-vectors.json.
 
 // AgentKeyHeader carries the raw Ed25519 public key the fetcher presents, as
diff --git a/sdk/go/helpers/pop_test.go b/sdk/go/helpers/pop_test.go
index 1ab5d26a..1239302b 100644
--- a/sdk/go/helpers/pop_test.go
+++ b/sdk/go/helpers/pop_test.go
@@ -37,7 +37,11 @@ type popVector struct {
 	SignatureAgent     string `json:"signature_agent"`
 	SignatureInput     string `json:"signature_input"`
 	Signature          string `json:"signature"`
+	NowUnix            int64  `json:"now_unix"`
 	ExpectedValid      bool   `json:"expected_valid"`
+	// ExpectedReason and ExpectedAcceptSignature are the verify face's refusal.
+	ExpectedReason          string `json:"expected_reason"`
+	ExpectedAcceptSignature string `json:"expected_accept_signature"`
 }
 
 func loadPopVectors(t *testing.T) []popVector {
diff --git a/sdk/go/helpers/pop_verify.go b/sdk/go/helpers/pop_verify.go
new file mode 100644
index 00000000..5bc64c00
--- /dev/null
+++ b/sdk/go/helpers/pop_verify.go
@@ -0,0 +1,234 @@
+package helpers
+
+import (
+	"crypto/ed25519"
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"net/http"
+	"net/url"
+	"strings"
+	"time"
+)
+
+// The VERIFY face of the agent-binding proof of possession, the one a delivery
+// edge runs. Go runs it for parity with the Python and TypeScript edges, and as the
+// oracle for the shared pop-vectors.json verdicts.
+//
+// A proof is accepted when its signature covers AT LEAST the Web Bot Auth base and
+// the two components the profile adds: @method, @target-uri and one
+// Signature-Agent member. A proof made by a Web Bot Auth library that covers more,
+// @authority for example, verifies too. On top of the signature the edge enforces
+// the three-way identity agent_id == keyid == thumbprint(presented key), and it
+// verifies offline against the key in X-FORA-Agent-Key.
+
+// PoPFailure names why a delivery proof was refused. The tokens are shared with the
+// Python and TypeScript verifiers and pinned by pop-vectors.json.
+type PoPFailure string
+
+// The PoPFailure tokens, in the order the checks run.
+const (
+	PoPMissingAgentKey      PoPFailure = "missing_agent_key"
+	PoPBadAgentKey          PoPFailure = "bad_agent_key"
+	PoPMissingSignature     PoPFailure = "missing_sig"
+	PoPMalformedSignature   PoPFailure = "malformed_sig_input"
+	PoPUnsupportedAlg       PoPFailure = "unsupported_alg"
+	PoPBadTag               PoPFailure = "bad_tag"
+	PoPBadCoveredComponents PoPFailure = "bad_covered_components"
+	PoPBadSignatureAgent    PoPFailure = "bad_signature_agent"
+	PoPKeyIDMismatch        PoPFailure = "keyid_mismatch"
+	PoPThumbprintMismatch   PoPFailure = "thumbprint_mismatch"
+	PoPMissingCreated       PoPFailure = "pop_missing_created"
+	PoPFutureCreated        PoPFailure = "pop_future_created"
+	PoPMissingExpires       PoPFailure = "pop_missing_exp"
+	PoPExpired              PoPFailure = "pop_expired"
+	PoPSignatureInvalid     PoPFailure = "pop_sig_invalid"
+)
+
+// PoPAcceptSignature is the Accept-Signature value a refused delivery proof is
+// answered with: the components a proof must cover at least, the dictionary form
+// of Signature-Agent, and the created, expires and tag parameters.
+const PoPAcceptSignature = `sig1=("@method" "@target-uri" "signature-agent";key="sig1");created;expires;tag="` + WBATag + `"`
+
+// PoPError is the refusal of a delivery proof. AcceptSignature is
+// PoPAcceptSignature when the fetcher can fix the refusal by signing again as the
+// profile requires — no signature, a wrong tag, a missing required component, or a
+// Signature-Agent the profile refuses — and empty otherwise.
+type PoPError struct {
+	Reason          PoPFailure
+	AcceptSignature string
+	Err             error
+}
+
+func (e *PoPError) Error() string {
+	if e.Err != nil {
+		return "helpers: delivery proof refused: " + string(e.Reason) + ": " + e.Err.Error()
+	}
+	return "helpers: delivery proof refused: " + string(e.Reason)
+}
+
+func (e *PoPError) Unwrap() error { return e.Err }
+
+// PoPVerifyOptions tune VerifyAgentBinding. Now is the verifier's clock (zero
+// means time.Now); MaxFutureSkew bounds how far created may lead it (zero means
+// 300 seconds).
+type PoPVerifyOptions struct {
+	Now           time.Time
+	MaxFutureSkew time.Duration
+}
+
+// VerifiedAgentBinding is an accepted delivery proof: the agent's keyid, the https
+// origin of the key directory its Signature-Agent member names, and its window.
+type VerifiedAgentBinding struct {
+	KeyID          string
+	SignatureAgent string
+	Created        int64
+	Expires        int64
+}
+
+// VerifyAgentBinding verifies the proof of possession on a delivery fetch of
+// rawURL, the URL exactly as the request line carried it, bound to agentID, the
+// signed URL's agent_id. h is the request's headers. Every refusal is a *PoPError
+// naming its PoPFailure.
+func VerifyAgentBinding(method, rawURL string, h http.Header, agentID string, opts PoPVerifyOptions) (*VerifiedAgentBinding, error) {
+	presented, perr := presentedAgentKey(h)
+	if perr != nil {
+		return nil, perr
+	}
+	all, sigs, err := parseAllSignatures(h)
+	switch {
+	case errors.Is(err, ErrMissingSignatureInput), errors.Is(err, ErrMissingSignature):
+		return nil, popRefusal(PoPMissingSignature, true, err)
+	case err != nil:
+		return nil, popRefusal(PoPMalformedSignature, false, err)
+	}
+	p := all[0]
+	if !strings.EqualFold(p.Alg, AlgEd25519) {
+		return nil, popRefusal(PoPUnsupportedAlg, false, nil)
+	}
+	if p.Tag != WBATag {
+		return nil, popRefusal(PoPBadTag, true, nil)
+	}
+	if !coversPoPProfile(p.Covered) {
+		return nil, popRefusal(PoPBadCoveredComponents, true, nil)
+	}
+	directory, err := signatureDirectory(h, p, len(all))
+	if err != nil {
+		var missing *MissingComponentError
+		if errors.As(err, &missing) {
+			return nil, popRefusal(PoPBadCoveredComponents, true, err)
+		}
+		return nil, popRefusal(PoPBadSignatureAgent, true, err)
+	}
+	if p.KeyID != agentID {
+		return nil, popRefusal(PoPKeyIDMismatch, false, nil)
+	}
+	if thumb, terr := Thumbprint(presented); terr != nil || thumb != agentID {
+		return nil, popRefusal(PoPThumbprintMismatch, false, terr)
+	}
+	if reason := popFreshness(p, opts); reason != "" {
+		return nil, popRefusal(reason, false, nil)
+	}
+	base, err := popVerifyBase(method, rawURL, h, p)
+	if err != nil {
+		return nil, popRefusal(PoPBadCoveredComponents, true, err)
+	}
+	if !ed25519.Verify(presented, []byte(base), sigs[p.Label]) {
+		return nil, popRefusal(PoPSignatureInvalid, false, nil)
+	}
+	return &VerifiedAgentBinding{KeyID: p.KeyID, SignatureAgent: directory, Created: p.Created, Expires: p.Expires}, nil
+}
+
+func popRefusal(reason PoPFailure, accept bool, err error) *PoPError {
+	e := &PoPError{Reason: reason, Err: err}
+	if accept {
+		e.AcceptSignature = PoPAcceptSignature
+	}
+	return e
+}
+
+// presentedAgentKey reads X-FORA-Agent-Key: base64url without padding, 32 bytes.
+func presentedAgentKey(h http.Header) (ed25519.PublicKey, error) {
+	raw := h.Get(AgentKeyHeader)
+	if raw == "" {
+		return nil, popRefusal(PoPMissingAgentKey, false, nil)
+	}
+	key, err := base64.RawURLEncoding.DecodeString(raw)
+	if err != nil || len(key) != ed25519.PublicKeySize {
+		return nil, popRefusal(PoPBadAgentKey, false, err)
+	}
+	return ed25519.PublicKey(key), nil
+}
+
+// coversPoPProfile reports whether a proof covers at least @method, @target-uri and
+// a Signature-Agent reference. Anything else it covers is allowed; which member the
+// reference names, and whether it is the only one, is signatureDirectory's call.
+func coversPoPProfile(covered []CoveredComponent) bool {
+	var method, target, agent bool
+	for _, c := range covered {
+		switch name := strings.ToLower(c.Name); {
+		case name == "@method" && len(c.Params) == 0:
+			method = true
+		case name == "@target-uri" && len(c.Params) == 0:
+			target = true
+		case name == signatureAgentLower:
+			agent = true
+		}
+	}
+	return method && target && agent
+}
+
+func popFreshness(p sigParams, opts PoPVerifyOptions) PoPFailure {
+	now := opts.Now
+	if now.IsZero() {
+		now = time.Now()
+	}
+	skew := opts.MaxFutureSkew
+	if skew == 0 {
+		skew = defaultMaxFutureSkew
+	}
+	switch {
+	case p.Created == 0:
+		return PoPMissingCreated
+	case p.Created > now.Unix()+int64(skew.Seconds()):
+		return PoPFutureCreated
+	case p.Expires == 0:
+		return PoPMissingExpires
+	case now.Unix() >= p.Expires:
+		return PoPExpired
+	}
+	return ""
+}
+
+// popVerifyBase rebuilds the proof's signature base in its covered order. @method
+// is the method upper-cased and @target-uri the raw URL verbatim, the bytes the
+// request line carried; every other component, @authority or a header for
+// example, is read the way a request signature reads it.
+func popVerifyBase(method, rawURL string, h http.Header, p sigParams) (string, error) {
+	var req *http.Request
+	lines := make([]string, 0, len(p.Covered)+1)
+	for _, c := range p.Covered {
+		var value string
+		switch strings.ToLower(c.Name) {
+		case "@method":
+			value = strings.ToUpper(method)
+		case "@target-uri":
+			value = rawURL
+		default:
+			if req == nil {
+				u, err := url.Parse(rawURL)
+				if err != nil {
+					return "", fmt.Errorf("helpers: proof covers %q, which a URL that does not parse cannot supply: %w", c.Name, err)
+				}
+				req = &http.Request{Method: method, URL: u, Host: u.Host, Header: h}
+			}
+			v, err := componentValue(req, c)
+			if err != nil {
+				return "", err
+			}
+			value = v
+		}
+		lines = append(lines, renderComponent(c)+": "+value)
+	}
+	return strings.Join(append(lines, `"@signature-params": `+p.RawInner), "\n"), nil
+}
diff --git a/sdk/go/helpers/pop_verify_test.go b/sdk/go/helpers/pop_verify_test.go
new file mode 100644
index 00000000..303efc74
--- /dev/null
+++ b/sdk/go/helpers/pop_verify_test.go
@@ -0,0 +1,85 @@
+package helpers_test
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+)
+
+// popHeaders writes a vector's request headers: the presented key and, when the
+// vector carries them, the three signature headers.
+func popHeaders(v popVector) http.Header {
+	h := http.Header{}
+	h.Set(helpers.AgentKeyHeader, v.PresentedKeyB64URL)
+	for name, value := range map[string]string{
+		helpers.SignatureAgentHeader: v.SignatureAgent, "Signature-Input": v.SignatureInput, "Signature": v.Signature,
+	} {
+		if value != "" {
+			h.Set(name, value)
+		}
+	}
+	return h
+}
+
+// TestVerifyAgentBinding_ReplaysSharedVectors replays every pop vector through the
+// verify face and requires the recorded verdict, reason and Accept-Signature.
+func TestVerifyAgentBinding_ReplaysSharedVectors(t *testing.T) {
+	for _, v := range loadPopVectors(t) {
+		t.Run(v.Name, func(t *testing.T) {
+			got, err := helpers.VerifyAgentBinding(v.Method, v.URL, popHeaders(v), v.AgentID,
+				helpers.PoPVerifyOptions{Now: time.Unix(v.NowUnix, 0)})
+			if v.ExpectedValid {
+				if err != nil {
+					t.Fatalf("refused a proof the vector accepts: %v", err)
+				}
+				if got.SignatureAgent != "https://agent.example" || got.KeyID != v.AgentID {
+					t.Errorf("verified = %+v", got)
+				}
+				return
+			}
+			var perr *helpers.PoPError
+			if !errors.As(err, &perr) {
+				t.Fatalf("err = %v, want a PoPError", err)
+			}
+			if string(perr.Reason) != v.ExpectedReason || perr.AcceptSignature != v.ExpectedAcceptSignature {
+				t.Errorf("refusal = (%q, %q), want (%q, %q)", perr.Reason, perr.AcceptSignature,
+					v.ExpectedReason, v.ExpectedAcceptSignature)
+			}
+		})
+	}
+}
+
+// TestVerifyAgentBinding_RoundTripsTheSignerAndBindsTheURL signs a proof for a
+// percent-encoded URL with any method, verifies it, and refuses it against another
+// URL, another method and another agent.
+func TestVerifyAgentBinding_RoundTripsTheSignerAndBindsTheURL(t *testing.T) {
+	v := validPopVector(t)
+	signer, pub := signerFor(t, v.SignerSeedHex, v.AgentID)
+	url := "https://cdn.example/a%2Fb/doc?agent_id=" + v.AgentID
+	created := time.Now().Unix()
+	b, err := helpers.SignAgentBinding(context.Background(), signer, pub, helpers.PoPOptions{
+		URL: url, Created: created, Expires: created + 60, Method: http.MethodHead,
+		SignatureAgent: "https://agent.example", Nonce: v.Nonce,
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	h := http.Header{}
+	b.Apply(h)
+	if _, err := helpers.VerifyAgentBinding(http.MethodHead, url, h, v.AgentID, helpers.PoPVerifyOptions{}); err != nil {
+		t.Fatalf("the signer's own proof: %v", err)
+	}
+	for name, tc := range map[string]struct{ method, url, agent string }{
+		"another URL":    {http.MethodHead, url + "&x=1", v.AgentID},
+		"another method": {http.MethodGet, url, v.AgentID},
+		"another agent":  {http.MethodHead, url, "someone-else"},
+	} {
+		if _, err := helpers.VerifyAgentBinding(tc.method, tc.url, h, tc.agent, helpers.PoPVerifyOptions{}); err == nil {
+			t.Errorf("%s: a proof verified that should not", name)
+		}
+	}
+}
diff --git a/sdk/go/helpers/testdata/pop-vectors.json b/sdk/go/helpers/testdata/pop-vectors.json
index afed395c..da45331a 100644
--- a/sdk/go/helpers/testdata/pop-vectors.json
+++ b/sdk/go/helpers/testdata/pop-vectors.json
@@ -12,7 +12,8 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
     "signature": "sig1=:HO7WvnmG2aPCdEMMD7sdxp+iXfmod+yux7rYcaHTSZV5A5pGNeQiygbVCph2m6jiN6VDrWJ9d8gDvc6hfzO+Bg==:",
     "now_unix": 1700000100,
-    "expected_valid": true
+    "expected_valid": true,
+    "expected_reason": ""
   },
   {
     "name": "valid_no_nonce",
@@ -26,7 +27,8 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";tag=\"web-bot-auth\"",
     "signature": "sig1=:ZNkUneR/GmZXDH7lM65K2t2NHf4Rl5Vz9Uh3khReNH3qIH1mcx4bXqd38dquMYoels51VEhkFM+Ejj4SAlE5Ag==:",
     "now_unix": 1700000100,
-    "expected_valid": true
+    "expected_valid": true,
+    "expected_reason": ""
   },
   {
     "name": "expired",
@@ -41,7 +43,8 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
     "signature": "sig1=:HO7WvnmG2aPCdEMMD7sdxp+iXfmod+yux7rYcaHTSZV5A5pGNeQiygbVCph2m6jiN6VDrWJ9d8gDvc6hfzO+Bg==:",
     "now_unix": 1700000400,
-    "expected_valid": false
+    "expected_valid": false,
+    "expected_reason": "pop_expired"
   },
   {
     "name": "wrong_key_thumbprint_mismatch",
@@ -56,7 +59,8 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
     "signature": "sig1=:5TfouIL45mlrcW5sLrVddSgmo02RrkTrfwyW2h4XHU9IBVuqgNpOe9gE4lS5INoFsU+bcuJSNSNQjuf8DefuDw==:",
     "now_unix": 1700000100,
-    "expected_valid": false
+    "expected_valid": false,
+    "expected_reason": "thumbprint_mismatch"
   },
   {
     "name": "v108_method_and_target_uri_only",
@@ -71,7 +75,9 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\"",
     "signature": "sig1=:W8RsAFY7u9/JldtDJMtyEN+Lxt1t4Seq5HrQwtOR/3cRrOmr1h9ftWZVR5oP7biV6yYeKuLXSpY16WRZqAmcAA==:",
     "now_unix": 1700000100,
-    "expected_valid": false
+    "expected_valid": false,
+    "expected_reason": "bad_tag",
+    "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
   },
   {
     "name": "missing_tag",
@@ -86,7 +92,9 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\"",
     "signature": "sig1=:VNd91bkAKO8gYRkWZOajd/m+6FIR2rQanaMaOvO1tcLnY+K7lG1aQL11lkayWezNaGsz/6YE5i+vM+siKhz1Cg==:",
     "now_unix": 1700000100,
-    "expected_valid": false
+    "expected_valid": false,
+    "expected_reason": "bad_tag",
+    "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
   },
   {
     "name": "wrong_tag",
@@ -101,7 +109,9 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"other\"",
     "signature": "sig1=:DrLQiQG3RJWOpkBxbtyCg4zezIIW8IZk8uWGIZp5AWRWVWB8wbx39D38v2BXNBC4wxUUPzl+/2WorKCJnoGeAg==:",
     "now_unix": 1700000100,
-    "expected_valid": false
+    "expected_valid": false,
+    "expected_reason": "bad_tag",
+    "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
   },
   {
     "name": "bare_signature_agent",
@@ -116,7 +126,9 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
     "signature": "sig1=:EEC/8uncMno5PI1WyhnX31MIk8HQtQsyCJqtRRFK8FNUy2eyZST3kKA4eoo9iEaBiz8CyiYgk6JtZtpAONnsDw==:",
     "now_unix": 1700000100,
-    "expected_valid": false
+    "expected_valid": false,
+    "expected_reason": "bad_signature_agent",
+    "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
   },
   {
     "name": "legacy_string_signature_agent",
@@ -131,7 +143,8 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
     "signature": "sig1=:J0myyHqBqkrJ8sLj0abNsCN3zMogJmGouAADWEUJVTuhAxXA/aiaMdjE60RBZ6XYlx5RGvBwaNK5ULvUBVdTAA==:",
     "now_unix": 1700000100,
-    "expected_valid": true
+    "expected_valid": true,
+    "expected_reason": ""
   },
   {
     "name": "member_not_https_origin",
@@ -146,6 +159,74 @@
     "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
     "signature": "sig1=:WDuhOYacpPmC+8VVUOXi4ZE0j0qqqpcfL2qcSpZkNzzcpZqCNQ/5Whm0uq4vmTnVqHtN3mgsQN6SsGqSykluBA==:",
     "now_unix": 1700000100,
-    "expected_valid": false
+    "expected_valid": false,
+    "expected_reason": "bad_signature_agent",
+    "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+  },
+  {
+    "name": "superset_authority",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\" \"@authority\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:yREocTLdKYgj/RcLJ1pkYiONWuCGrjMkRlLpwUsYf1vrJIhephcz9kpGOa2wKkJyDD2TYcLP2riM+MAOL3UuAw==:",
+    "now_unix": 1700000100,
+    "expected_valid": true,
+    "expected_reason": ""
+  },
+  {
+    "name": "superset_authority_first_and_agent_key",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@authority\" \"@target-uri\" \"@method\" \"signature-agent\";key=\"sig1\" \"x-fora-agent-key\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:q3eHCVVY+Suec/IKWyw+zKv/3Mo5mZCKe16rdvWOb2GU85NhhuYasSS5FmpWOtsZb7baHTimWJh3hDw16E1FDA==:",
+    "now_unix": 1700000100,
+    "expected_valid": true,
+    "expected_reason": ""
+  },
+  {
+    "name": "superset_without_method",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@authority\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"ed25519\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:2AX/71yx9Ou9oNIKBAN3euSnrqgVQTeiM4BG4FNE5WQ42NH8I5vFcm6EYM3bk2cVWKemGksz0S9pLnSNRzknBw==:",
+    "now_unix": 1700000100,
+    "expected_valid": false,
+    "expected_reason": "bad_covered_components",
+    "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+  },
+  {
+    "name": "unsigned",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "",
+    "signature_input": "",
+    "signature": "",
+    "now_unix": 1700000100,
+    "expected_valid": false,
+    "expected_reason": "missing_sig",
+    "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
   }
 ]
diff --git a/sdk/go/helpers/testdata/verify-request-neg-vectors.json b/sdk/go/helpers/testdata/verify-request-neg-vectors.json
index 72409cd2..3e53d9bd 100644
--- a/sdk/go/helpers/testdata/verify-request-neg-vectors.json
+++ b/sdk/go/helpers/testdata/verify-request-neg-vectors.json
@@ -293,7 +293,8 @@
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
       "now": 1700000100,
-      "expected_reason": "signature"
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
     },
     {
       "name": "neg_signature_agent_not_an_origin",
@@ -309,7 +310,8 @@
       "resolver_keyid": "mcp.v1",
       "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
       "now": 1700000100,
-      "expected_reason": "signature"
+      "expected_reason": "signature",
+      "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
     },
     {
       "name": "neg_missing_fora_component",
diff --git a/sdk/go/helpers/wba.go b/sdk/go/helpers/wba.go
index 0e060eb2..10616a75 100644
--- a/sdk/go/helpers/wba.go
+++ b/sdk/go/helpers/wba.go
@@ -369,18 +369,21 @@ func AcceptSignature(entitlement bool) string {
 }
 
 // AcceptSignatureFor returns the Accept-Signature value a verifier answers err
-// with, and whether it answers with one at all. It does for a request carrying no
+// with, and whether it answers with one at all. It does for every refusal the
+// client can fix by signing again as the profile requires: a request carrying no
 // signature, a signature that omits a required component, a signature with the
-// wrong tag, and a Signature-Agent in a form the profile refuses. It does not for
-// a signature that is well formed and fails for any other reason: a bad
-// signature, an unknown key, a stale window or a replay.
+// wrong tag, a Signature-Agent in a form the profile refuses, and a
+// Signature-Agent member that is not an https origin. It does not for a signature
+// that is well formed and fails for any other reason: a bad signature, an unknown
+// key, a stale window or a replay.
 func AcceptSignatureFor(err error) (string, bool) {
 	var missing *MissingComponentError
 	switch {
 	case errors.As(err, &missing):
 		return AcceptSignature(missing.Component == entitlementHeaderLower), true
 	case errors.Is(err, ErrMissingSignatureInput), errors.Is(err, ErrMissingSignature),
-		errors.Is(err, ErrSignatureTag), errors.Is(err, ErrSignatureAgentForm):
+		errors.Is(err, ErrSignatureTag), errors.Is(err, ErrSignatureAgentForm),
+		errors.Is(err, ErrSignatureAgentNotOrigin):
 		return AcceptSignature(false), true
 	default:
 		return "", false
diff --git a/sdk/go/helpers/wba_profile_test.go b/sdk/go/helpers/wba_profile_test.go
index bb8cc802..8cd4aa38 100644
--- a/sdk/go/helpers/wba_profile_test.go
+++ b/sdk/go/helpers/wba_profile_test.go
@@ -285,8 +285,8 @@ func TestVerifyRequest_refusesWhatTheProfileDoesNot(t *testing.T) {
 			func(r *helpers.RawSignature) {
 				r.Covered = append(plainCovered(foraRPC...), memberCovered("a"), memberCovered("b"))
 			}, helpers.ErrSignatureAgentForm, true},
-		{"a plaintext origin", `sig1="http://agent.example"`, nil, helpers.ErrSignatureAgentNotOrigin, false},
-		{"an origin with a path", `sig1="https://agent.example/keys"`, nil, helpers.ErrSignatureAgentNotOrigin, false},
+		{"a plaintext origin", `sig1="http://agent.example"`, nil, helpers.ErrSignatureAgentNotOrigin, true},
+		{"an origin with a path", `sig1="https://agent.example/keys"`, nil, helpers.ErrSignatureAgentNotOrigin, true},
 		{"no Signature-Agent covered", member, func(r *helpers.RawSignature) { r.Covered = plainCovered(foraRPC...) },
 			helpers.ErrMissingRequiredComponent, true},
 		{"authorization not covered", member, func(r *helpers.RawSignature) {
diff --git a/sdk/go/resolvers/gen_revocation_membership_vectors_test.go b/sdk/go/resolvers/gen_revocation_membership_vectors_test.go
index 9b4daa51..e492061a 100644
--- a/sdk/go/resolvers/gen_revocation_membership_vectors_test.go
+++ b/sdk/go/resolvers/gen_revocation_membership_vectors_test.go
@@ -81,9 +81,8 @@ func buildRevocationMembershipVector(t *testing.T) revMembershipVector {
 
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		Now:    func() time.Time { return revMembershipAnchor },
+		HTTP: origin.Client(),
+		Now:  func() time.Time { return revMembershipAnchor },
 	})
 	if _, err := r.Resolve(ctx, tpPresent); err != nil {
 		t.Fatalf("prime resolve: %v", err)
diff --git a/sdk/go/resolvers/wbakeyresolver.go b/sdk/go/resolvers/wbakeyresolver.go
index d01f244d..aec65c3e 100644
--- a/sdk/go/resolvers/wbakeyresolver.go
+++ b/sdk/go/resolvers/wbakeyresolver.go
@@ -360,7 +360,10 @@ type WBAKeyResolverOptions struct {
 	// newGuardedWBAClient): the directory host is derived from request input (the
 	// Signature-Agent header) and fetched before the ed25519 check, so the default
 	// refuses private/link-local/loopback targets. Inject a client only to REACH a
-	// private directory (tests, on-prem) or to apply a custom dialer/timeout.
+	// private directory (tests, on-prem) or to apply a custom dialer/timeout. A
+	// directory is always fetched over https from the origin the signature's
+	// Signature-Agent member names; there is no option that fetches it any other
+	// way, so a test serves it with a TLS server and injects that server's client.
 	HTTP *http.Client
 	// TTL bounds how long a fetched directory is reused (≤0 → 1 hour).
 	TTL time.Duration
@@ -379,11 +382,6 @@ type WBAKeyResolverOptions struct {
 	// After overrides the poll-tick timer source (nil → time.After). Tests
 	// inject a deterministic clock.
 	After func(time.Duration) <-chan time.Time
-	// Scheme is the scheme directories are fetched over (empty → "https"). A
-	// Signature-Agent member is always an https origin; tests inject "http" to
-	// fetch that origin's directory from a plaintext httptest server, and a bare
-	// host reference is prefixed with it.
-	Scheme string
 	// RequireRevocation makes Resolve fail closed with ErrRevocationUnevaluated
 	// when a key's directory declares a revocation_url but no snapshot has been
 	// fetched (unreachable or not host-anchored) — i.e. revocation could not be
@@ -422,7 +420,6 @@ type WBAKeyResolver struct {
 	syncDebounce      time.Duration
 	now               func() time.Time
 	after             func(time.Duration) <-chan time.Time
-	scheme            string
 	requireRevocation bool
 	logger            *slog.Logger
 	onPollArmed       func()
@@ -482,10 +479,6 @@ func NewWBAKeyResolver(opts WBAKeyResolverOptions) *WBAKeyResolver {
 	if after == nil {
 		after = time.After
 	}
-	scheme := opts.Scheme
-	if scheme == "" {
-		scheme = "https"
-	}
 	logger := opts.Logger
 	if logger == nil {
 		logger = slog.Default()
@@ -497,7 +490,6 @@ func NewWBAKeyResolver(opts WBAKeyResolverOptions) *WBAKeyResolver {
 		syncDebounce:      debounce,
 		now:               now,
 		after:             after,
-		scheme:            scheme,
 		requireRevocation: opts.RequireRevocation,
 		logger:            logger,
 		onPollArmed:       opts.OnPollArmed,
@@ -613,12 +605,9 @@ func (r *WBAKeyResolver) directoryBase(ref string) (base, host string, err error
 		if err := requireHostForm(ref); err != nil {
 			return "", "", err
 		}
-		ref = r.scheme + "://" + ref
+		ref = "https://" + ref
 	}
 	u, err := url.Parse(ref)
-	if err == nil && u.Scheme == "https" && r.scheme != "https" {
-		u.Scheme = r.scheme
-	}
 	if err != nil {
 		// Framed, not passed through raw. A value that is not a URL at all used to
 		// surface whatever url.Parse happened to complain about — for the spec's
diff --git a/sdk/go/resolvers/wbakeyresolver_debounce_test.go b/sdk/go/resolvers/wbakeyresolver_debounce_test.go
index aef49eeb..1513a774 100644
--- a/sdk/go/resolvers/wbakeyresolver_debounce_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_debounce_test.go
@@ -50,7 +50,7 @@ func newCountingOrigin() *countingOrigin {
 	o := &countingOrigin{}
 	mux := http.NewServeMux()
 	mux.HandleFunc(wbaDirPath, o.serve)
-	o.Server = httptest.NewServer(mux)
+	o.Server = httptest.NewTLSServer(mux)
 	return o
 }
 
@@ -95,7 +95,6 @@ func TestWBAKeyResolver_UnknownThumbprintBurstDebounced(t *testing.T) {
 	now := wbaAnchor
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.URL)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme:       "http",
 		HTTP:         origin.Client(),
 		TTL:          time.Hour,
 		SyncDebounce: 5 * time.Second,
@@ -152,10 +151,9 @@ func TestWBAKeyResolver_ConcurrentRefreshSingleflight(t *testing.T) {
 
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.URL)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		TTL:    time.Hour,
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: origin.Client(),
+		TTL:  time.Hour,
+		Now:  func() time.Time { return wbaAnchor },
 	})
 
 	const burst = 12
diff --git a/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go b/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go
index f2a4bf2c..09f1ddea 100644
--- a/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go
@@ -21,7 +21,7 @@ import (
 )
 
 func TestDirectoryBase_acceptsFetchableForms(t *testing.T) {
-	r := &WBAKeyResolver{scheme: "https"}
+	r := &WBAKeyResolver{}
 	for _, tc := range []struct {
 		name     string
 		ref      string
@@ -73,7 +73,7 @@ func TestDirectoryBase_acceptsFetchableForms(t *testing.T) {
 // is echoed into the message by %q, so checking for "data" alone would pass on the
 // echoed input even if the refusal never fired.
 func TestDirectoryBase_refusesUnfetchable(t *testing.T) {
-	r := &WBAKeyResolver{scheme: "https"}
+	r := &WBAKeyResolver{}
 	for _, tc := range []struct {
 		name        string
 		ref         string
@@ -232,7 +232,7 @@ func TestRequireHostForm_errorOmitsRef(t *testing.T) {
 // "https://a.example:65536" was accepted and failed later as an outage, which a
 // composite resolver reads as "directory down" rather than "bad reference".
 func TestDirectoryBase_oneVerdictPerReference(t *testing.T) {
-	r := &WBAKeyResolver{scheme: "https"}
+	r := &WBAKeyResolver{}
 	for _, tc := range []struct {
 		name   string
 		bare   string
diff --git a/sdk/go/resolvers/wbakeyresolver_profile_test.go b/sdk/go/resolvers/wbakeyresolver_profile_test.go
index 7ef6b306..02b02b39 100644
--- a/sdk/go/resolvers/wbakeyresolver_profile_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_profile_test.go
@@ -23,7 +23,7 @@ import (
 
 func profileResolver(client *http.Client) *resolvers.WBAKeyResolver {
 	return resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http", HTTP: client, Now: func() time.Time { return wbaAnchor },
+		HTTP: client, Now: func() time.Time { return wbaAnchor },
 	})
 }
 
@@ -78,7 +78,7 @@ func TestWBAKeyResolver_refusesTheWrongMediaTypeAndRedirects(t *testing.T) {
 		},
 	} {
 		t.Run(name, func(t *testing.T) {
-			srv := httptest.NewServer(handler)
+			srv := httptest.NewTLSServer(handler)
 			defer srv.Close()
 			ctx := helpers.WithSignatureAgent(context.Background(), srv.URL)
 			if _, err := profileResolver(srv.Client()).Resolve(ctx, tp); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
@@ -101,7 +101,7 @@ func TestWBAKeyResolver_eachSignatureInItsOwnDirectory(t *testing.T) {
 	defer brokerOrigin.close()
 	agentOrigin.setWBA(marshalWBA(agentJWK))
 	brokerOrigin.setWBA(marshalWBA(brokerJWK))
-	httpsOrigin := func(o *wbaOrigin) string { return "https://" + strings.TrimPrefix(o.url, "http://") }
+	httpsOrigin := func(o *wbaOrigin) string { return o.url } // a TLS origin, as a member names it
 
 	signer := func(priv ed25519.PrivateKey) helpers.Signer {
 		s, err := helpers.NewEd25519Signer(mustThumbprint(t, priv.Public().(ed25519.PublicKey)), priv)
@@ -125,7 +125,7 @@ func TestWBAKeyResolver_eachSignatureInItsOwnDirectory(t *testing.T) {
 	if err := helpers.AppendSignature(context.Background(), req, body, signer(brokerPriv), opts(httpsOrigin(brokerOrigin))); err != nil {
 		t.Fatal(err)
 	}
-	r := profileResolver(http.DefaultClient)
+	r := profileResolver(agentOrigin.Client())
 	vopts := helpers.VerifyOptions{Now: wbaAnchor.Add(time.Minute)}
 	verified, err := helpers.VerifyMultisigRequestResolved(context.Background(), req, body, r, vopts)
 	if err != nil {
@@ -146,3 +146,22 @@ func TestWBAKeyResolver_eachSignatureInItsOwnDirectory(t *testing.T) {
 }
 
 func jwkX(pub ed25519.PublicKey) string { return base64.RawURLEncoding.EncodeToString(pub) }
+
+// TestWBAKeyResolver_fetchesOverHTTPSOnly: the directory of an https member is
+// fetched over https, and no option makes the resolver fetch it in plaintext. A
+// directory served only over plaintext http is unavailable.
+func TestWBAKeyResolver_fetchesOverHTTPSOnly(t *testing.T) {
+	t.Parallel()
+	priv, jwk := newSigningKey("plain-only", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
+	body := marshalWBA(jwk)
+	plain := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		writeSignedDirectory(w, r, body)
+	}))
+	defer plain.Close()
+	member := "https://" + strings.TrimPrefix(plain.URL, "http://")
+	ctx := helpers.WithSignatureAgent(context.Background(), member)
+	_, err := profileResolver(plain.Client()).Resolve(ctx, mustThumbprint(t, priv.Public().(ed25519.PublicKey)))
+	if !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+		t.Fatalf("err = %v, want ErrDirectoryUnavailable", err)
+	}
+}
diff --git a/sdk/go/resolvers/wbakeyresolver_test.go b/sdk/go/resolvers/wbakeyresolver_test.go
index e4dcaad3..ade92dfe 100644
--- a/sdk/go/resolvers/wbakeyresolver_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_test.go
@@ -53,9 +53,8 @@ func TestWBAKeyResolver_Active(t *testing.T) {
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: origin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 	got, err := r.Resolve(ctx, tp)
 	if err != nil {
@@ -81,9 +80,8 @@ func TestWBAKeyResolver_ErrKeyExpired(t *testing.T) {
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: origin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 	_, err := r.Resolve(ctx, tp)
 	if !errors.Is(err, resolvers.ErrKeyExpired) {
@@ -105,9 +103,8 @@ func TestWBAKeyResolver_ErrUnknownKey(t *testing.T) {
 
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: origin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 	_, err := r.Resolve(ctx, "absent-thumbprint")
 	if !errors.Is(err, helpers.ErrUnknownKey) {
@@ -130,9 +127,8 @@ func TestWBAKeyResolver_ErrKeyRevoked(t *testing.T) {
 
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: origin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 	_, err := r.Resolve(ctx, tp)
 	if !errors.Is(err, resolvers.ErrKeyRevoked) {
@@ -157,10 +153,9 @@ func TestWBAKeyResolver_RotationSelfHeal(t *testing.T) {
 	now := wbaAnchor
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		TTL:    time.Hour,
-		Now:    func() time.Time { return now },
+		HTTP: origin.Client(),
+		TTL:  time.Hour,
+		Now:  func() time.Time { return now },
 	})
 
 	// Prime the cache with k1-only (same seed ⇒ same key as k1 above).
@@ -199,10 +194,9 @@ func TestWBAKeyResolver_RevocationRollbackIgnored(t *testing.T) {
 	now := wbaAnchor
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		TTL:    time.Hour,
-		Now:    func() time.Time { return now },
+		HTTP: origin.Client(),
+		TTL:  time.Hour,
+		Now:  func() time.Time { return now },
 	})
 	if _, err := r.Resolve(ctx, tp); !errors.Is(err, resolvers.ErrKeyRevoked) {
 		t.Fatalf("precondition: want ErrKeyRevoked, got %v", err)
@@ -233,10 +227,9 @@ func TestWBAKeyResolver_RevocationForwardProgressApplied(t *testing.T) {
 	now := wbaAnchor
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		TTL:    time.Hour,
-		Now:    func() time.Time { return now },
+		HTTP: origin.Client(),
+		TTL:  time.Hour,
+		Now:  func() time.Time { return now },
 	})
 	if _, err := r.Resolve(ctx, tp); !errors.Is(err, resolvers.ErrKeyRevoked) {
 		t.Fatalf("precondition: want ErrKeyRevoked, got %v", err)
@@ -272,10 +265,9 @@ func TestWBAKeyResolver_FirstPollFarFutureAsOfClamp(t *testing.T) {
 	now := wbaAnchor
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		TTL:    time.Hour,
-		Now:    func() time.Time { return now },
+		HTTP: origin.Client(),
+		TTL:  time.Hour,
+		Now:  func() time.Time { return now },
 	})
 	// Prime: far-future as_of must be clamped, not stored at the far-future value.
 	if _, err := r.Resolve(ctx, tp); err != nil {
@@ -306,10 +298,9 @@ func TestWBAKeyResolver_RemovalIsNotRevocation(t *testing.T) {
 	now := wbaAnchor
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		TTL:    time.Hour,
-		Now:    func() time.Time { return now },
+		HTTP: origin.Client(),
+		TTL:  time.Hour,
+		Now:  func() time.Time { return now },
 	})
 	if _, err := r.Resolve(ctx, tp1); err != nil {
 		t.Fatalf("prime: %v", err)
@@ -349,9 +340,8 @@ func TestWBAKeyResolver_RevocationURLHostNotAnchored(t *testing.T) {
 
 	ctx := helpers.WithSignatureAgent(context.Background(), dirOrigin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   dirOrigin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: dirOrigin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 	got, err := r.Resolve(ctx, tp)
 	if err != nil {
@@ -383,9 +373,8 @@ func TestWBAKeyResolver_RequireRevocationUnevaluated(t *testing.T) {
 
 	// Default (best-effort): resolves despite the unevaluated revocation channel.
 	best := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   dirOrigin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: dirOrigin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 	if _, err := best.Resolve(ctx, tp); err != nil {
 		t.Fatalf("best-effort default must resolve; got %v", err)
@@ -393,7 +382,6 @@ func TestWBAKeyResolver_RequireRevocationUnevaluated(t *testing.T) {
 
 	// RequireRevocation: fail closed — revocation_url declared, no snapshot.
 	strict := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme:            "http",
 		HTTP:              dirOrigin.Client(),
 		RequireRevocation: true,
 		Now:               func() time.Time { return wbaAnchor },
@@ -427,7 +415,6 @@ func TestWBAKeyResolver_Run_PollerAppliesRevocation(t *testing.T) {
 	poll := newPollSignals()
 
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme:       "http",
 		HTTP:         origin.Client(),
 		TTL:          100 * time.Hour, // never expires during the test → isolate poller
 		PollInterval: pollInterval,
@@ -466,8 +453,7 @@ func TestWBAKeyResolver_Run_PollerAppliesRevocation(t *testing.T) {
 func TestWBAKeyResolver_NoSignatureAgent(t *testing.T) {
 	t.Parallel()
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		Now:    func() time.Time { return wbaAnchor },
+		Now: func() time.Time { return wbaAnchor },
 	})
 	// Context carries no Signature-Agent — SignatureAgentFromContext returns "".
 	_, err := r.Resolve(context.Background(), "any-thumbprint")
@@ -491,10 +477,9 @@ func TestWBAKeyResolver_TTLCacheHit(t *testing.T) {
 	now := wbaAnchor
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		TTL:    time.Hour,
-		Now:    func() time.Time { return now },
+		HTTP: origin.Client(),
+		TTL:  time.Hour,
+		Now:  func() time.Time { return now },
 	})
 
 	if _, err := r.Resolve(ctx, tp); err != nil {
@@ -524,9 +509,8 @@ func TestWBAKeyResolver_FetchError(t *testing.T) {
 
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: origin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 	_, err := r.Resolve(ctx, "any-thumbprint")
 	if err == nil {
@@ -569,9 +553,8 @@ func TestWBAKeyResolver_Revoked(t *testing.T) {
 
 	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		Scheme: "http",
-		HTTP:   origin.Client(),
-		Now:    func() time.Time { return wbaAnchor },
+		HTTP: origin.Client(),
+		Now:  func() time.Time { return wbaAnchor },
 	})
 
 	// Before any fetch the snapshot is unavailable → membership is false.
@@ -679,7 +662,7 @@ func newWBAOrigin(_ []byte) *wbaOrigin {
 	mux := http.NewServeMux()
 	mux.HandleFunc(wbaDirPath, o.serveWBA)
 	mux.HandleFunc(wbaRevocationPath, o.serveRevocation)
-	o.Server = httptest.NewServer(mux)
+	o.Server = httptest.NewTLSServer(mux)
 	o.url = o.Server.URL
 	return o
 }
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 4897f11c..57d39335 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -209,7 +209,26 @@
     "helpers.MissingComponentError": "Go typed error behind errors.Is(ErrMissingRequiredComponent); py/ts report the refusal as a reason token and carry the Accept-Signature value on the verdict.",
     "helpers.AcceptSignatureFor": "Go maps a verification error to its Accept-Signature value; py/ts carry the value on the verification verdict (accept_signature / acceptSignature), so no error-to-value function exists to mirror.",
     "core.WithSignerSource": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
-    "core.WithCoverPrevious": "Go functional-option builder; py/ts pass options via kwargs/options objects."
+    "core.WithCoverPrevious": "Go functional-option builder; py/ts pass options via kwargs/options objects.",
+    "helpers.PoPError": "Go typed error carrying the refusal token and the Accept-Signature value; py/ts return them on the verdict (PopResult.reason / accept_signature, acceptSignature).",
+    "helpers.PoPFailure": "Go string type for the shared delivery-proof refusal tokens; py returns the token as a str on PopResult.reason and TS types it as the PopFailure literal union, so the tokens, pinned by pop-vectors.json, carry the parity claim.",
+    "helpers.PoPVerifyOptions": "Go options struct for VerifyAgentBinding; py/ts pass now (and the injectable verify primitive) as arguments.",
+    "helpers.VerifiedAgentBinding": "Go result struct for VerifyAgentBinding; py/ts return the PopResult verdict, which carries the same signature_agent / signatureAgent.",
+    "helpers.PoPMissingAgentKey": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPBadAgentKey": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPMissingSignature": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPMalformedSignature": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPUnsupportedAlg": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPBadTag": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPBadCoveredComponents": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPBadSignatureAgent": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPKeyIDMismatch": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPThumbprintMismatch": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPMissingCreated": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPFutureCreated": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPMissingExpires": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPExpired": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens.",
+    "helpers.PoPSignatureInvalid": "Member of the PoPFailure token set. Python returns the token as a str and TypeScript as a member of the PopFailure literal union, so neither is a top-level export; pop-vectors.json pins the tokens."
   },
   "symbols": {
     "connect.AdminClient": {
@@ -1239,6 +1258,16 @@
       "allowlist_reason": null,
       "python": "SignerSource",
       "ts": "SignerSource"
+    },
+    "helpers.VerifyAgentBinding": {
+      "allowlist_reason": null,
+      "python": "verify_agent_binding",
+      "ts": "verifyAgentBinding"
+    },
+    "helpers.PoPAcceptSignature": {
+      "allowlist_reason": null,
+      "python": "POP_ACCEPT_SIGNATURE",
+      "ts": "POP_ACCEPT_SIGNATURE"
     }
   }
 }

From ae8081748d959b788ec0c58e46b3e33a39f935cf Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:11:54 -0400
Subject: [PATCH 123/164] Accept a superset delivery proof in Python, and sign
 at the clock's time

The delivery-proof verifier required exactly @method, @target-uri and one
Signature-Agent member. It now requires them at least, as the Go oracle
does, so a Web Bot Auth library's proof that also covers @authority or a
header verifies; the base builder gains @authority, read off the URL text
so the URL is never re-encoded. A refusal carries the Go token and, when
the fetcher can fix it, the new POP_ACCEPT_SIGNATURE on
PopResult.accept_signature. A missing Signature-Input is missing_sig, a
malformed presented key is bad_agent_key, and a covered component the
request cannot supply is bad_covered_components, matching Go. The pop
parity tests replay each vector's expected_reason and
expected_accept_signature.

A Signature-Agent member that is not an https origin is now answered
with Accept-Signature, for a request and a proof alike.

monotonic_window moved created forward by one second per request, so
above one request per second signatures were stamped in the future. It
now signs at the clock's current time, exactly as clock_window, and is
deprecated; the 64-byte nonce makes each signature unique.

The broker-execute fixtures use UpstreamRefusal.party, and the hop-budget
docstring says the cap is the Exchange's max_intermediary_hops.
---
 sdk/python/README.md                          |  8 +-
 sdk/python/fora_sdk/__init__.py               |  9 ++-
 sdk/python/fora_sdk/_sigbase.py               | 31 +++++++-
 sdk/python/fora_sdk/pop.py                    | 75 +++++++++++++------
 sdk/python/fora_sdk/server_verify.py          |  4 +-
 sdk/python/fora_sdk/wba.py                    | 10 ++-
 sdk/python/fora_sdk/window.py                 | 40 +++-------
 sdk/python/tests/test_broker_execute.py       |  4 +-
 .../tests/test_guards_window_adoption.py      |  6 +-
 sdk/python/tests/test_signedurl_pop_parity.py | 71 +++++++++++++++---
 .../tests/test_signing_transport_profile.py   |  6 +-
 sdk/python/tests/test_wba_profile.py          |  2 +-
 sdk/python/tests/test_window_behavior.py      | 33 +++-----
 13 files changed, 189 insertions(+), 110 deletions(-)

diff --git a/sdk/python/README.md b/sdk/python/README.md
index 5d2b464a..b9bfb003 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -227,8 +227,8 @@ it on the verdict. Labels carry no meaning; coverage of an earlier signature is
 must be complete. The verifier also accepts what other Web Bot Auth signers send — the
 legacy String form `"https://agent.example"` on a single signature, a member key that
 differs from the label, a `type=directory` member parameter, no nonce — and refuses the
-bare unquoted value. A refusal for a missing component, a wrong tag or a refused
-Signature-Agent form carries `accept_signature`, the `Accept-Signature` value
+bare unquoted value. A refusal for a missing component, a wrong tag, a refused
+Signature-Agent form or a member that is not an https origin carries `accept_signature`, the `Accept-Signature` value
 (`accept_signature()`) to answer the 401 with. A signer given no directory, a value that
 is not an https origin (`check_https_origin`), or a window over `MAX_SIGNATURE_LIFETIME`
 raises a `SignatureProfileError` before anything is signed.
@@ -251,7 +251,9 @@ proof = verify_agent_binding(method="GET", url=url, headers=headers,
 The proof is a Web Bot Auth signature covering `@method`, `@target-uri` and the agent's
 own Signature-Agent member (`sig1="<the agent's directory>"`), with the raw public key in
 `X-FORA-Agent-Key`: a GET has no body to digest, and the signed URL is itself the
-credential. `sign_agent_binding` returns the four header values as an `AgentBinding`; the
+credential. The verifier requires those components AT LEAST, so a Web Bot Auth library's
+proof that also covers `@authority` or a header verifies; a refusal the fetcher can fix
+carries `accept_signature` (`POP_ACCEPT_SIGNATURE`). `sign_agent_binding` returns the four header values as an `AgentBinding`; the
 client passes a fresh 64-byte nonce, and the verifier requires the `web-bot-auth` tag and
 the three-way identity agent_id == keyid == thumbprint(presented key).
 
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 95f64f1f..2961f1b2 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -141,7 +141,13 @@
     is_metered_offer,
     parse_money,
 )
-from .pop import AGENT_KEY_HEADER, AgentBinding, sign_agent_binding, verify_agent_binding
+from .pop import (
+    AGENT_KEY_HEADER,
+    POP_ACCEPT_SIGNATURE,
+    AgentBinding,
+    sign_agent_binding,
+    verify_agent_binding,
+)
 from .regschema import (
     MAX_REGISTRATION_DATA_BYTES,
     MAX_REGISTRATION_DATA_DEPTH,
@@ -390,6 +396,7 @@
     "validate_license_term",
     "validate_resource_entry",
     "verify_agent_binding",
+    "POP_ACCEPT_SIGNATURE",
     "verify_ed25519_signed_url",
     "verify_multisig_request_server",
     "verify_offer_acceptance",
diff --git a/sdk/python/fora_sdk/_sigbase.py b/sdk/python/fora_sdk/_sigbase.py
index 98b869a0..fba4ab53 100644
--- a/sdk/python/fora_sdk/_sigbase.py
+++ b/sdk/python/fora_sdk/_sigbase.py
@@ -170,10 +170,11 @@ def joined_header(headers: Mapping[str, str], name: str) -> str | None:
 def component_value(method: str, url: str, headers: Mapping[str, str], c: sfv.Item) -> str:
     """The canonical value of one covered component on this request.
 
-    ``@method`` is the method uppercased and ``@target-uri`` the absolute URL exactly as
-    given; no other derived component is supported. A component carrying a ``key``
-    parameter is a Dictionary member (:func:`member_value`); any other name is a header.
-    A covered header the request does not carry cannot be reconstructed and is refused.
+    ``@method`` is the method uppercased, ``@target-uri`` the absolute URL exactly as
+    given, and ``@authority`` the URL's host and port, lowercased; no other derived
+    component is supported. A component carrying a ``key`` parameter is a Dictionary
+    member (:func:`member_value`); any other name is a header. A covered header the
+    request does not carry cannot be reconstructed and is refused.
     """
     if c.params:
         return member_value(headers, c)
@@ -182,12 +183,34 @@ def component_value(method: str, url: str, headers: Mapping[str, str], c: sfv.It
         return method.upper()
     if name == "@target-uri":
         return url
+    if name == "@authority":
+        return authority_of(url)
+    if name.startswith("@"):
+        raise SignatureCheckError("malformed_sig_input", f"unsupported derived component {name!r}")
     value = joined_header(headers, name)
     if value is None:
         raise SignatureCheckError("missing_header", f"header {name!r} missing from request")
     return value
 
 
+def authority_of(url: str) -> str:
+    """The RFC 9421 ``@authority`` of an absolute URL: the host and port, without any
+    userinfo, lowercased — the value Go reads off the request's Host. Read off the text
+    rather than a URL parser, so the URL is never re-encoded."""
+    _, sep, rest = url.partition("://")
+    if not sep:
+        raise SignatureCheckError("malformed_sig_input", "@authority needs an absolute URL")
+    end = len(rest)
+    for delim in "/?#":
+        i = rest.find(delim)
+        if i != -1:
+            end = min(end, i)
+    authority = rest[:end].rpartition("@")[2]
+    if not authority:
+        raise SignatureCheckError("malformed_sig_input", "the URL carries no authority")
+    return authority.lower()
+
+
 def member_value(headers: Mapping[str, str], c: sfv.Item) -> str:
     """The canonical serialization of the Dictionary member a ``key`` parameter names
     (RFC 9421 §2.1.2): a Signature-Agent member's String with its parameters, a
diff --git a/sdk/python/fora_sdk/pop.py b/sdk/python/fora_sdk/pop.py
index 09a36046..6f5b30f1 100644
--- a/sdk/python/fora_sdk/pop.py
+++ b/sdk/python/fora_sdk/pop.py
@@ -45,6 +45,7 @@
 
 from ._sigbase import (
     MissingSignatureError,
+    MissingSignatureInputError,
     SignatureCheckError,
     SigParams,
     build_signature_base,
@@ -81,8 +82,17 @@
 #: The only label this profile emits, and the key of the agent's member. A delivery
 #: fetch is a single hop to the edge, so the label is fixed rather than computed.
 _POP_LABEL = "sig1"
-#: The proof covers exactly @method, @target-uri and one Signature-Agent member.
-_POP_COVERED = ("@method", "@target-uri", "signature-agent")
+#: A proof covers AT LEAST these: the Web Bot Auth base's Signature-Agent member plus
+#: the @method and @target-uri the profile adds. Anything else it covers is allowed.
+_POP_REQUIRED = ("@method", "@target-uri")
+#: The Accept-Signature value a refused delivery proof is answered with: the components
+#: a proof must cover at least, the dictionary form of Signature-Agent, and the created,
+#: expires and tag parameters. The same bytes as Go ``helpers.PoPAcceptSignature``.
+POP_ACCEPT_SIGNATURE = (
+    'sig1=("@method" "@target-uri" "signature-agent";key="sig1");created;expires;tag="'
+    + WBATag
+    + '"'
+)
 #: A proof's created timestamp may not lead the verifier clock by more than this.
 _MAX_FUTURE_SKEW_SEC = 300
 _C0_END = 0x20
@@ -95,11 +105,15 @@
 @dataclass(frozen=True)
 class PopResult:
     """Verdict of a proof-of-possession verification. On success ``signature_agent``
-    is the origin of the agent's key directory, as its covered member names it."""
+    is the origin of the agent's key directory, as its covered member names it. On a
+    refusal the fetcher can fix by signing again as the profile requires — no
+    signature, a wrong tag, a missing required component, or a Signature-Agent the
+    profile refuses — ``accept_signature`` is :data:`POP_ACCEPT_SIGNATURE`."""
 
     ok: bool
     reason: str | None = None
     signature_agent: str | None = None
+    accept_signature: str | None = None
 
 
 @dataclass(frozen=True)
@@ -139,16 +153,18 @@ def _default_verify_ed25519(pubkey: bytes, signature: bytes, message: bytes) ->
     return True
 
 
-def _read_presented_key(headers: Mapping[str, str]) -> bytes | None:
+def _read_presented_key(headers: Mapping[str, str]) -> bytes | PopResult:
+    """The presented key, or the refusal: ``missing_agent_key`` when the header is
+    absent, ``bad_agent_key`` when it is not 32 bytes of base64url."""
     raw = headers.get(AGENT_KEY_HEADER)
     if not raw:
-        return None
+        return _refuse("missing_agent_key")
     try:
         key = b64url_decode(raw)
     except (ValueError, TypeError):
-        return None
+        return _refuse("bad_agent_key")
     if len(key) != _ED25519_PUBLIC_KEY_BYTES:
-        return None
+        return _refuse("bad_agent_key")
     return key
 
 
@@ -265,19 +281,27 @@ def _freshness_failure(p: SigParams, now: int) -> str | None:
     return None
 
 
-def _covers_exactly(p: SigParams) -> bool:
-    names = sorted(component_name(c).lower() for c in p.covered)
-    return names == sorted(_POP_COVERED)
+def _covers_the_profile(p: SigParams) -> bool:
+    """Whether the proof covers at least @method, @target-uri (plain) and a
+    Signature-Agent reference; which member that is, is signature_directory's call."""
+    plain_names = {component_name(c).lower() for c in p.covered if not c.params}
+    names = {component_name(c).lower() for c in p.covered}
+    return all(n in plain_names for n in _POP_REQUIRED) and "signature-agent" in names
+
+
+def _refuse(reason: str, *, accept: bool = False) -> PopResult:
+    accept_signature = POP_ACCEPT_SIGNATURE if accept else None
+    return PopResult(ok=False, reason=reason, accept_signature=accept_signature)
 
 
 def _parse(headers: Mapping[str, str]) -> tuple[SigParams, bytes, int] | PopResult:
     """The proof's first signature, its bytes and the signature count, or a refusal."""
     try:
         all_params, sig_map = parse_all_signatures(headers)
-    except MissingSignatureError:
-        return PopResult(ok=False, reason="missing_sig")
+    except (MissingSignatureInputError, MissingSignatureError):
+        return _refuse("missing_sig", accept=True)
     except SignatureCheckError:
-        return PopResult(ok=False, reason="malformed_sig_input")
+        return _refuse("malformed_sig_input")
     p = all_params[0]
     return p, sig_map[p.label], len(all_params)
 
@@ -294,32 +318,33 @@ def verify_agent_binding(
     """Verify the agent's proof of possession of the key bound to ``agent_id``.
 
     Returns ``ok=True`` only when every rule holds: the tag is ``web-bot-auth``; the
-    signature covers @method, @target-uri and one Signature-Agent member and nothing
-    else; the member names an https origin, in the dictionary form or the legacy
+    signature covers AT LEAST @method, @target-uri and its Signature-Agent member, so a
+    Web Bot Auth library's proof that also covers @authority verifies; the member
+    names an https origin, in the dictionary form or the legacy
     String form; agent_id, keyid and the presented key's thumbprint agree; the window
     holds at ``now`` (unix seconds); and the Ed25519 signature over the base rebuilt
     with the verbatim URL verifies against the presented key. ``headers`` is
     lowercase-keyed.
     """
     presented = _read_presented_key(headers)
-    if presented is None:
-        return PopResult(ok=False, reason="missing_agent_key")
+    if isinstance(presented, PopResult):
+        return presented
     parsed = _parse(headers)
     if isinstance(parsed, PopResult):
         return parsed
     p, sig_bytes, sig_count = parsed
     if p.alg.lower() != "ed25519":
-        return PopResult(ok=False, reason="unsupported_alg")
+        return _refuse("unsupported_alg")
     if p.tag != WBATag:
-        return PopResult(ok=False, reason="bad_tag")
-    if not _covers_exactly(p):
-        return PopResult(ok=False, reason="bad_covered_components")
+        return _refuse("bad_tag", accept=True)
+    if not _covers_the_profile(p):
+        return _refuse("bad_covered_components", accept=True)
     try:
         directory = signature_directory(headers, p, sig_count)
     except MissingComponentError:
-        return PopResult(ok=False, reason="bad_covered_components")
+        return _refuse("bad_covered_components", accept=True)
     except SignatureProfileError:
-        return PopResult(ok=False, reason="bad_signature_agent")
+        return _refuse("bad_signature_agent", accept=True)
 
     # 3-way identity: keyid and the presented-key thumbprint must both equal the
     # URL-bound agent_id before any signature work is trusted.
@@ -335,7 +360,9 @@ def verify_agent_binding(
     try:
         base = build_signature_base(method, url, headers, p).encode()
     except SignatureCheckError:
-        return PopResult(ok=False, reason="malformed_sig_input")
+        # A covered component this request cannot supply: a header it does not carry,
+        # or a derived component the verifier does not support.
+        return _refuse("bad_covered_components", accept=True)
     verify = verify_ed25519 if verify_ed25519 is not None else _default_verify_ed25519
     if not verify(presented, sig_bytes, base):
         return PopResult(ok=False, reason="pop_sig_invalid")
diff --git a/sdk/python/fora_sdk/server_verify.py b/sdk/python/fora_sdk/server_verify.py
index 0887d1db..43857732 100644
--- a/sdk/python/fora_sdk/server_verify.py
+++ b/sdk/python/fora_sdk/server_verify.py
@@ -168,7 +168,9 @@ def verify_multisig_request_server(
     """Verify EVERY signature on an inbound FORA request; return a reason-tagged verdict.
 
     The hop budget comes FIRST (``hop_budget``; every signature counts, 0 / omitted
-    means unbounded), then the completeness of every coverage of an earlier signature
+    means unbounded; an Exchange passes the ``max_intermediary_hops`` it publishes,
+    whose refusal the protocol answers with ``resource_exhausted``, HTTP 429), then
+    the completeness of every coverage of an earlier signature
     (``broken_chain``: a signature covering ``"signature";key=X`` must cover
     ``"signature-input";key=X`` and every component X lists, and X must appear earlier),
     then each signature on its own (``signature``) — the precedence of Go
diff --git a/sdk/python/fora_sdk/wba.py b/sdk/python/fora_sdk/wba.py
index 9799a2af..4d324e0d 100644
--- a/sdk/python/fora_sdk/wba.py
+++ b/sdk/python/fora_sdk/wba.py
@@ -353,10 +353,11 @@ def accept_signature_for(exc: BaseException) -> str | None:
     """The Accept-Signature value a verifier answers ``exc`` with, or None when it
     answers with none.
 
-    It does for a request carrying no signature, a signature that omits a required
-    component, a signature with the wrong tag, and a Signature-Agent in a form the
-    profile refuses. It does not for a signature that is well formed and fails for any
-    other reason: a malformed Signature-Input, a member that is not an origin, a bad
+    It does for every refusal the client can fix by signing again as the profile
+    requires: a request carrying no signature, a signature that omits a required
+    component, a signature with the wrong tag, a Signature-Agent in a form the profile
+    refuses, and a member that is not an https origin. It does not for a signature that
+    is well formed and fails for any other reason: a malformed Signature-Input, a bad
     signature, an unknown key, a stale window, a replay, a hop budget or a broken chain.
     """
     if isinstance(exc, MissingComponentError):
@@ -366,6 +367,7 @@ def accept_signature_for(exc: BaseException) -> str | None:
         MissingSignatureError,
         SignatureTagError,
         SignatureAgentFormError,
+        SignatureAgentNotOriginError,
     )
     if isinstance(exc, refused_form):
         return accept_signature(False)
diff --git a/sdk/python/fora_sdk/window.py b/sdk/python/fora_sdk/window.py
index cc75913b..0470ba22 100644
--- a/sdk/python/fora_sdk/window.py
+++ b/sdk/python/fora_sdk/window.py
@@ -12,7 +12,6 @@
 
 from __future__ import annotations
 
-import threading
 from collections.abc import Callable
 from typing import TypeAlias
 
@@ -35,33 +34,16 @@ def _window() -> tuple[int, int]:
 
 
 def monotonic_window(now: Callable[[], float], ttl_sec: int) -> Window:
-    """Return a Window whose expires cutoff strictly increases across calls: it
-    tracks ``int(now()) + ttl_sec`` but, when a burst of requests lands in the
-    same wall-clock second, bumps expires by one second per call so no two
-    back-to-back signatures share a (keyid, expires) pair. ``SigningTransport``
-    no longer needs this for uniqueness: every signature carries a fresh nonce,
-    so ``clock_window`` is enough. ``created`` moves with expires, so the window
-    is always exactly ``ttl_sec`` and never exceeds the Web Bot Auth limit when
-    ``ttl_sec`` is at most :data:`~fora_sdk.wba.MAX_SIGNATURE_LIFETIME`; during a
-    burst ``created`` leads the clock by the burst's length in seconds, which a
-    verifier's future-skew allowance absorbs. Thread-safe: the running maximum is
-    guarded by a lock.
+    """Return a Window that stamps each signature at the clock's current time,
+    exactly as :func:`clock_window` does.
 
-    ONE INSTANCE PER CLIENT, never one per call. The running maximum is the whole
-    mechanism: a window built per request starts from zero, cannot see the
-    previous signature, and provides exactly none of the uniqueness it was chosen
-    for — while still looking correct at the call site.
-    """
-    lock = threading.Lock()
-    last_expires = 0
-
-    def _window() -> tuple[int, int]:
-        nonlocal last_expires
-        created = int(now())
-        floor = created + ttl_sec
-        with lock:
-            nxt = last_expires + 1 if last_expires >= floor else floor
-            last_expires = nxt
-        return nxt - ttl_sec, nxt
+    It once bumped expires (and later created with it) by one second per call inside
+    a wall-clock second, so no two signatures shared a window. That stamped
+    signatures in the future at more than one request per second, by as many seconds
+    as there were requests, which a verifier's future-skew allowance then absorbed.
+    Uniqueness never needed it: every signature carries a fresh 64-byte nonce.
 
-    return _window
+    Deprecated: use :func:`clock_window`. Kept so existing callers keep working, and
+    behaves identically.
+    """
+    return clock_window(now, ttl_sec)
diff --git a/sdk/python/tests/test_broker_execute.py b/sdk/python/tests/test_broker_execute.py
index 68d158e8..04aad75b 100644
--- a/sdk/python/tests/test_broker_execute.py
+++ b/sdk/python/tests/test_broker_execute.py
@@ -93,7 +93,7 @@ def _answer(payload: dict[str, Any]) -> Any:
         {
             "offer_id": "b1",
             "refusal": {
-                "exchange": "exchange-b.test",
+                "party": "exchange-b.test",
                 "code": "permission_denied",
                 "detail": {
                     "domain": "fora.v1.ExchangeService",
@@ -167,7 +167,7 @@ def test_a_mixed_batch_is_one_signed_request_and_the_combined_answer_decodes(fac
     refusal = items[1].refusal
     assert refusal is not None
     assert refusal.code == "permission_denied"
-    assert refusal.exchange == "exchange-b.test"
+    assert refusal.party == "exchange-b.test"
     assert refusal.detail.transaction_denial.reason.value == "DENIAL_REASON_ACCOUNT_NOT_REGISTERED"
     assert items[2].transaction_id == "tx-a2"
     # Per-currency totals stay apart: never summed across currencies.
diff --git a/sdk/python/tests/test_guards_window_adoption.py b/sdk/python/tests/test_guards_window_adoption.py
index 0fe0d4b8..dcee811b 100644
--- a/sdk/python/tests/test_guards_window_adoption.py
+++ b/sdk/python/tests/test_guards_window_adoption.py
@@ -3,9 +3,9 @@
 DISEASE: a sign site that mints a signature's (created, expires) pair by inline
 now+ttl arithmetic (e.g. ``expires = created + self._ttl_sec``) instead of sourcing
 it from the injectable Window (``clock_window`` / ``monotonic_window``). Inline
-mint cannot be swapped for a monotonic window (unique back-to-back expires) and
-re-derives the truncate/ttl contract per-site, drifting from the Go ``.Unix()``
-semantics. ``SigningTransport`` was migrated to the Window; this guard pins it stays.
+mint cannot be swapped for another window and re-derives the truncate/ttl contract
+per-site, drifting from the Go ``.Unix()`` semantics. ``SigningTransport`` was
+migrated to the Window; this guard pins it stays.
 
 SCOPE — the sign-side mint site (``signing_transport.py``). The verify side PARSES
 created/expires from the wire (not a mint) and is intentionally NOT guarded.
diff --git a/sdk/python/tests/test_signedurl_pop_parity.py b/sdk/python/tests/test_signedurl_pop_parity.py
index 2e255292..5db9f726 100644
--- a/sdk/python/tests/test_signedurl_pop_parity.py
+++ b/sdk/python/tests/test_signedurl_pop_parity.py
@@ -84,17 +84,28 @@ def test_pop_vector_file_is_nonempty() -> None:
 
 def _pop_headers(vector: dict[str, object]) -> dict[str, str]:
     """RFC 9421 PoP headers as the verifier receives them off the wire. An empty
-    ``signature_agent`` is a request that carries no Signature-Agent at all."""
-    headers = {
-        "x-fora-agent-key": str(vector["presented_key_b64url"]),
-        "signature-input": str(vector["signature_input"]),
-        "signature": str(vector["signature"]),
-    }
-    if vector["signature_agent"]:
-        headers["signature-agent"] = str(vector["signature_agent"])
+    ``signature_agent``, ``signature_input`` or ``signature`` is a header the request
+    does not carry at all."""
+    headers = {"x-fora-agent-key": str(vector["presented_key_b64url"])}
+    for field, name in (
+        ("signature_agent", "signature-agent"),
+        ("signature_input", "signature-input"),
+        ("signature", "signature"),
+    ):
+        if vector[field]:
+            headers[name] = str(vector[field])
     return headers
 
 
+def _assert_oracle_verdict(result: object, vector: dict[str, object]) -> None:
+    """The verdict, the refusal token and the Accept-Signature value the Go
+    VerifyAgentBinding reached for this vector."""
+    assert result.ok is bool(vector["expected_valid"])  # type: ignore[attr-defined]
+    assert (result.reason or "") == vector["expected_reason"]  # type: ignore[attr-defined]
+    expected_accept = vector.get("expected_accept_signature") or None
+    assert result.accept_signature == expected_accept  # type: ignore[attr-defined]
+
+
 @pytest.mark.parametrize(
     "vector",
     _POP_VECTORS,
@@ -111,7 +122,7 @@ def test_pop_verify_default_primitive_matches_go_oracle(vector: dict[str, object
         agent_id=str(vector["agent_id"]),
         now=int(vector["now_unix"]),  # type: ignore[arg-type]
     )
-    assert result.ok is bool(vector["expected_valid"])
+    _assert_oracle_verdict(result, vector)
     # A proof that verifies names the agent's key directory, as its member carries it.
     if result.ok:
         assert result.signature_agent == str(vector["agent_directory"])
@@ -142,4 +153,44 @@ def injected_verify(pub: bytes, sig: bytes, msg: bytes) -> bool:
         now=int(vector["now_unix"]),  # type: ignore[arg-type]
         verify_ed25519=injected_verify,
     )
-    assert result.ok is bool(vector["expected_valid"])
+    _assert_oracle_verdict(result, vector)
+
+
+def test_pop_a_covered_component_the_request_cannot_supply_is_refused_with_accept() -> None:
+    # A superset proof covering a header the request does not carry cannot have its base
+    # rebuilt. The Go oracle answers bad_covered_components with Accept-Signature, and so
+    # does this face: the fetcher fixes it by covering what it sends.
+    from fora_sdk.pop import POP_ACCEPT_SIGNATURE
+
+    vector = next(v for v in _POP_VECTORS if v["name"] == "superset_authority_first_and_agent_key")
+    headers = _pop_headers(vector)
+    headers["signature-input"] = str(vector["signature_input"]).replace(
+        '"x-fora-agent-key"', '"x-missing-header"'
+    )
+    result = verify_agent_binding(
+        method=str(vector["method"]),
+        url=str(vector["url"]),
+        headers=headers,
+        agent_id=str(vector["agent_id"]),
+        now=int(vector["now_unix"]),  # type: ignore[arg-type]
+    )
+    assert (result.ok, result.reason, result.accept_signature) == (
+        False,
+        "bad_covered_components",
+        POP_ACCEPT_SIGNATURE,
+    )
+
+
+@pytest.mark.parametrize(
+    ("url", "authority"),
+    [
+        ("https://CDN.Example/doc?x=1", "cdn.example"),
+        ("https://cdn.example:8443/a%2Fb", "cdn.example:8443"),
+        ("https://user@cdn.example/doc", "cdn.example"),
+        ("https://cdn.example?x=1", "cdn.example"),
+    ],
+)
+def test_authority_is_read_off_the_url_text(url: str, authority: str) -> None:
+    from fora_sdk._sigbase import authority_of
+
+    assert authority_of(url) == authority
diff --git a/sdk/python/tests/test_signing_transport_profile.py b/sdk/python/tests/test_signing_transport_profile.py
index 96b88c4f..d69beaba 100644
--- a/sdk/python/tests/test_signing_transport_profile.py
+++ b/sdk/python/tests/test_signing_transport_profile.py
@@ -192,8 +192,6 @@ def test_a_window_longer_than_five_minutes_signs_nothing() -> None:
         _send(transport)
 
 
-def test_the_monotonic_window_keeps_every_window_at_its_ttl() -> None:
+def test_the_monotonic_window_signs_at_the_clock_time() -> None:
     window = monotonic_window(lambda: float(_CREATED), 300)
-    pairs = [window() for _ in range(3)]
-    assert [expires for _, expires in pairs] == [_EXPIRES, _EXPIRES + 1, _EXPIRES + 2]
-    assert all(expires - created == 300 for created, expires in pairs)
+    assert [window() for _ in range(3)] == [(_CREATED, _EXPIRES)] * 3
diff --git a/sdk/python/tests/test_wba_profile.py b/sdk/python/tests/test_wba_profile.py
index f433ae92..240c053a 100644
--- a/sdk/python/tests/test_wba_profile.py
+++ b/sdk/python/tests/test_wba_profile.py
@@ -226,7 +226,7 @@ def test_verify_request_refusals_of_the_form_carry_accept_signature(
         ('"https://agent.example"', "signature_agent_form", True),
         ("https://agent.example", "signature_agent_form", True),
         ('other="https://agent.example"', "signature_agent_form", True),
-        ('sig1="http://agent.example"', "signature_agent_not_origin", False),
+        ('sig1="http://agent.example"', "signature_agent_not_origin", True),
         ("", "missing_component", True),
     ],
     ids=["legacy_string_for_a_keyed_member", "bare", "member_absent", "not_https", "absent"],
diff --git a/sdk/python/tests/test_window_behavior.py b/sdk/python/tests/test_window_behavior.py
index 73a37e5a..b2ace822 100644
--- a/sdk/python/tests/test_window_behavior.py
+++ b/sdk/python/tests/test_window_behavior.py
@@ -8,18 +8,14 @@
     (MUST int()-truncate — Go .Unix() floors; the current SigningTransport
      mint uses int(self._now()); an un-truncated default would change signature
      bytes).
-  - monotonic_window(now, ttl_sec): expires strictly increases across a burst
-    within one wall-clock second, so no two back-to-back signatures share an
-    expires cutoff, and created moves with it so every window is exactly ttl_sec
-    (the Web Bot Auth limit is never exceeded during a burst).
-
-RED now purely because ``fora_sdk.window`` does not exist yet.
+  - monotonic_window(now, ttl_sec): deprecated, and the same as clock_window: it
+    signs at the clock's current time, never ahead of it. The 64-byte nonce, not the
+    window, makes each signature unique.
 """
 
 from __future__ import annotations
 
-# RED: sdk/python/fora_sdk/window.py does not exist yet (TDD red — missing face).
-from fora_sdk.window import clock_window, monotonic_window  # type: ignore[import-not-found]
+from fora_sdk.window import clock_window, monotonic_window
 
 
 def test_clock_window_truncates_created_and_adds_ttl() -> None:
@@ -40,19 +36,8 @@ def test_clock_window_reads_clock_each_call() -> None:
     assert w() == (2_000, 2_060)
 
 
-def test_monotonic_window_strictly_increases_expires_within_one_second() -> None:
-    w = monotonic_window(lambda: 1_700_000_000, 600)  # frozen wall-clock second
-    first = w()
-    second = w()
-    third = w()
-    assert first[0] == 1_700_000_000  # the first window starts at now()
-    assert second[1] > first[1]
-    assert third[1] > second[1]
-    # created moves with expires: every window is exactly the ttl.
-    assert {expires - created for created, expires in (first, second, third)} == {600}
-
-
-def test_monotonic_window_never_repeats_expires_across_burst() -> None:
-    w = monotonic_window(lambda: 1_700_000_000, 600)
-    seen = {w()[1] for _ in range(100)}
-    assert len(seen) == 100
+def test_monotonic_window_never_stamps_ahead_of_the_clock() -> None:
+    # A thousand calls inside one frozen second: every one is stamped at the clock's
+    # time. The old forward shift stamped the last one 999 seconds in the future.
+    w = monotonic_window(lambda: 1_700_000_000.5, 300)
+    assert {w() for _ in range(1000)} == {(1_700_000_000, 1_700_000_300)}

From 90df50992333bcc873ef3cbf1f5d5b7834847372 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:13:30 -0400
Subject: [PATCH 124/164] State the delivery-proof minimum, the clock window
 and the plaintext-free resolver

The authentication page and the signed-URL verification page say a
delivery proof covers at least the Web Bot Auth base, @method and
@target-uri, that further components a library adds enter the base, and
which refusals carry Accept-Signature. The changelog's Web Bot Auth entry
states the final behavior: Accept-Signature for a member that is not an
https origin, the superset proof and Go's verify face with its shared
refusal tokens, MonotonicWindow signing at the clock's time and deprecated,
and the removal of Go's WBAKeyResolverOptions.Scheme. The design history
records why for each.
---
 docs/design-history.md                        | 28 +++++++++++--
 proto/CHANGELOG.md                            | 39 ++++++++++++-------
 .../edge-function/signed-url-verification.mdx |  4 +-
 .../content/docs/protocol/authentication.mdx  |  6 +++
 .../src/content/docs/reference/changelog.mdx  | 39 ++++++++++++-------
 5 files changed, 83 insertions(+), 33 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index be61be0f..bc8b0837 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2316,9 +2316,31 @@ rule went with the forwarding chain it served.
 **Five minutes is the signer's limit, not the verifier's default.** The signers refuse a
 window longer than five minutes. A verifier keeps its own lifetime clamp
 (`MaxSignatureAge`), unset by default, because another Web Bot Auth signer may choose a
-longer window and the draft allows up to 24 hours. `MonotonicWindow`, which bumps
-`expires` during a burst, now moves `created` with it so the window stays at its ttl and
-never crosses the signer's limit.
+longer window and the draft allows up to 24 hours.
+
+**A signature is stamped at the clock's time, never ahead of it.** `MonotonicWindow`
+bumped the window by one second per request inside a wall-clock second, first `expires`
+alone and then `created` with it to stay under the five-minute limit. With `created`
+moving, a client sending more than one request per second stamped signatures in the
+future, by as many seconds as it sent requests, and they verified only because a
+verifier's future-skew allowance absorbed them: a thousand requests in one second ended
+999 seconds ahead. The bump never bought uniqueness the nonce does not already give,
+since every signature carries 64 fresh random bytes. `MonotonicWindow` now signs at the
+clock's current time, exactly as `ClockWindow`, and is deprecated in all three SDKs.
+
+**A delivery proof covers at least the profile's components.** The verifiers once
+required exactly `@method`, `@target-uri` and one `Signature-Agent` member, so a proof a
+Web Bot Auth library made, covering `@authority` as well, was refused. A proof must cover
+those components and may cover more; whatever else it covers enters the base like the
+rest. A refusal the fetcher can fix by signing again carries `Accept-Signature`, and so
+does a request or proof whose `Signature-Agent` member is not an https origin: that is a
+form the client chose, not a forgery.
+
+**No option fetches a key directory in plaintext.** Go's `WBAKeyResolverOptions.Scheme`
+let tests fetch an https origin's directory from a plaintext server, and any production
+configuration could set it too. It is gone: a directory is fetched over https from the
+origin its signer named, and tests serve directories over TLS and inject the test
+server's client.
 
 **A directory response signature filters keys in the resolver and gates the reader.**
 The resolvers hand out only keys the response is signed by; a listed key without a valid
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 9c8901d6..c45f5e37 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -697,8 +697,8 @@ SDKs implement it:
   a member with `type=directory`. The legacy sf-string `Signature-Agent` is accepted on a
   request carrying one signature only. Verifiers refuse a signature with no `tag`, a
   `Signature-Agent` member that is not an https origin, and the bare unquoted value the
-  v1.0.8 SDKs sent, and answer a missing component or a refused form with
-  `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
+  v1.0.8 SDKs sent, and answer a missing component, a refused form or a member that is
+  not an https origin with `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
   empty `Authorization` stays valid.
 - Several signatures: each is verified on its own, against the key its `keyid` names in
   the directory its own covered member names; a signature that covers several members
@@ -718,7 +718,8 @@ SDKs implement it:
   `cnf.jkt` is checked against it; a Broker is never delegated to. The Exchange resolves
   each signer's key in the directory that signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
-  signature plus `@method` and `@target-uri`. The edge keeps verifying offline with the
+  signature plus `@method` and `@target-uri`. That covered set is a minimum: a proof that
+  also covers `@authority`, or a header, verifies. The edge keeps verifying offline with the
   key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint equals both the
   signature `keyid` and the delivery URL's `agent_id`. A generic WBA verifier accepts
   the same signature by resolving the agent's directory.
@@ -751,7 +752,8 @@ SDKs, in all three languages:
   gains `SignatureAgent`, `Label` and `CoverPrevious`.
 - Verifying: the verifiers apply the rules above, resolve each signature's key with the
   directory its member names, and carry that directory on the result. A refusal for a
-  missing component or a refused form carries the `Accept-Signature` value
+  missing component, a refused form or a member that is not an https origin carries the
+  `Accept-Signature` value
   (`helpers.AcceptSignature` / `accept_signature` / `acceptSignature`): Go's
   `connectserver` writes it on the 401, and the Python and TypeScript server verdicts carry
   it. The key resolver receives the directory of the signature it resolves: Go threads it
@@ -767,27 +769,36 @@ SDKs, in all three languages:
   locally as malformed. A per-request signer source (`core.WithSignerSource` /
   `SignerSource`) signs each request as the identity a callback picks. Append mode
   (`core.WithAppendSigner`, `appendOnly`) is joined by Python's `append_only`, which
-  Python lacked. `core.MonotonicWindow` keeps every window at its ttl.
+  Python lacked. `core.MonotonicWindow` / `monotonic_window` / `monotonicWindow` used to
+  move `created` forward by one second per request, stamping signatures in the future
+  above one request per second; it now signs at the clock's current time, exactly as the
+  clock window, and is deprecated.
 - Delivery proof: `helpers.SignAgentBinding` / `sign_agent_binding` / `signInbound`
-  take the agent's directory and a nonce and emit the `Signature-Agent` header. Python's
-  `sign_agent_binding` now returns an `AgentBinding` with the four header values instead of
-  a tuple. The Python and TypeScript edge verifiers apply the new profile with a
-  structured-field parser, and the Hono middleware answers a proof refused for a missing
-  component or a refused form with 401 and the proof's own `Accept-Signature`
-  (`POP_ACCEPT_SIGNATURE`).
+  take the agent's directory, a nonce and the HTTP method, and emit the
+  `Signature-Agent` header. Python's `sign_agent_binding` now returns an `AgentBinding`
+  with the four header values instead of a tuple. Go gains the verify face,
+  `helpers.VerifyAgentBinding`, which refuses with a `PoPError` (`PoPFailure` token and
+  `PoPAcceptSignature`). The three verifiers accept a proof covering at least the
+  profile's components, parse it with a structured-field parser, and refuse with the same
+  tokens; a refusal the fetcher can fix carries `PoPAcceptSignature` /
+  `POP_ACCEPT_SIGNATURE`, and the Hono middleware answers it with 401 and that header.
 - Directories: `helpers.SignDirectoryResponse` / `sign_directory_response` /
   `signDirectoryResponse` sign a directory response and
   `helpers.VerifyDirectoryResponse` / `verify_directory_response` /
   `verifyDirectoryResponse` check one. The WBA key resolvers and the offer-directory
   fetch refuse redirects, check the media type and hand out only keys that signed the
   response; `ReadWBADirectory` / `read_wba_directory` / `readWBADirectory` require every
-  listed key to have signed, and refuse `application/jwk-set+json`. The constants
-  `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire constants.
+  listed key to have signed, and refuse `application/jwk-set+json`. Go's
+  `WBAKeyResolverOptions.Scheme`, which let a configuration fetch an https origin's
+  directory in plaintext, is removed: a directory is always fetched over https. The
+  constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
+  constants.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
   `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
   `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier
   must accept), `multisig-chain-vectors.json` (each signer with its own directory, so a
-  verifier that resolves through the wrong member fails), `pop-vectors.json`,
+  verifier that resolves through the wrong member fails), `pop-vectors.json` (now with
+  each vector's expected refusal token and `Accept-Signature`, and superset proofs),
   `wire-constants-vectors.json`, `document-check-vectors.json` and the new
   `directory-response-vectors.json`. The Go suite also checks the draft's Appendix E.2
   Ed25519 vectors against its signature base builder.
diff --git a/website/src/content/docs/components/edge-function/signed-url-verification.mdx b/website/src/content/docs/components/edge-function/signed-url-verification.mdx
index 872bfe2b..71ec3008 100644
--- a/website/src/content/docs/components/edge-function/signed-url-verification.mdx
+++ b/website/src/content/docs/components/edge-function/signed-url-verification.mdx
@@ -137,7 +137,7 @@ An agent registered through a custodial registry does **not** fetch. Its private
 ### What the fetcher presents
 
 1. Its **public key**, in the `X-FORA-Agent-Key` header — raw Ed25519 key, base64url with no padding. The choice of carrier is security-irrelevant, because the thumbprint is locked by the URL signature.
-2. A **Web Bot Auth signature** over the retrieval request: a full signature under FORA's [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile), with `tag="web-bot-auth"`, a dictionary `Signature-Agent` naming the fetcher's directory, the covered `"signature-agent";key="<label>"` member and a 64-byte nonce, plus `@method` and `@target-uri`. The request has no body, so there is no `content-digest`.
+2. A **Web Bot Auth signature** over the retrieval request: a full signature under FORA's [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile), with `tag="web-bot-auth"`, a dictionary `Signature-Agent` naming the fetcher's directory, the covered `"signature-agent";key="<label>"` member and a 64-byte nonce, plus `@method` and `@target-uri`. The request has no body, so there is no `content-digest`. These are the components the signature must cover at least: a proof that also covers `@authority`, or a header, is accepted, and the extra components enter the signature base.
 
 ```
 X-FORA-Agent-Key: <raw Ed25519 public key, base64url>
@@ -157,7 +157,7 @@ The same signature verifies without `X-FORA-Agent-Key`. A generic WBA verifier i
 1. Verify the URL's Ed25519 signature against the Exchange's published public key. This proves `agent_id` is Exchange-issued and untampered.
 2. Check `exp`, local clock only.
 3. `thumbprint(presented public key)` equals both `agent_id` and the signature's `keyid`.
-4. Verify the signature with the presented key against the Web Bot Auth profile (`tag`, the covered `Signature-Agent` member, `@method` and `@target-uri`), and reject a `created` more than 300 seconds ahead of the edge's own clock.
+4. Verify the signature with the presented key against the Web Bot Auth profile (`tag`, the covered `Signature-Agent` member, and at least `@method` and `@target-uri`), and reject a `created` more than 300 seconds ahead of the edge's own clock. A refusal the fetcher can fix by signing again (no signature, a wrong tag, a missing required component, a refused `Signature-Agent`) is answered with `Accept-Signature`.
 
 All four pass, and the request is served. No directory fetch is required for the agent: the Exchange already authenticated that key at transaction time and froze its thumbprint into a signature the edge can verify locally.
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 6aa4a0c6..7b04ec69 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -412,6 +412,12 @@ A request at the publisher edge that has no body only identifies an agent and mo
 
 When a delivery URL is bound to the purchasing agent ([Retrieval-URL Identity Binding](#retrieval-url-identity-binding)), the fetch carries a full WBA signature: the WG-00 base above (`tag`, dictionary `Signature-Agent`, the covered `"signature-agent";key="<label>"` member, a 64-byte nonce), plus `@method` and `@target-uri`. The request has no body, so it carries no `content-digest`.
 
+That covered set is a minimum. An edge accepts a proof whose signature covers **at least** the WG-00 base, `@method` and `@target-uri`, and any further component a WBA library adds, `@authority` or a header for example, enters the signature base like the rest. A proof that omits one of the required components, or whose `tag` or `Signature-Agent` the profile refuses, is answered with `Accept-Signature` naming the minimum:
+
+```http
+Accept-Signature: sig1=("@method" "@target-uri" "signature-agent";key="sig1");created;expires;tag="web-bot-auth"
+```
+
 The edge still verifies offline. The fetcher also presents its raw public key in the `X-FORA-Agent-Key` header, and the edge uses that key only when its RFC 7638 thumbprint equals both the signature's `keyid` and the delivery URL's `agent_id`. The binding stays double: the Exchange signed the URL with the thumbprint inside it, and only the holder of the matching private key can produce the request signature. A generic WBA verifier ignores `X-FORA-Agent-Key`, resolves the same key from the agent's directory named in `Signature-Agent`, and accepts the same signature. The edge's full check is on [Signed URL Verification](/components/edge-function/signed-url-verification).
 
 #### What a FORA verifier accepts
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index d6bba73c..c3313c09 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -709,8 +709,8 @@ SDKs implement it:
   a member with `type=directory`. The legacy sf-string `Signature-Agent` is accepted on a
   request carrying one signature only. Verifiers refuse a signature with no `tag`, a
   `Signature-Agent` member that is not an https origin, and the bare unquoted value the
-  v1.0.8 SDKs sent, and answer a missing component or a refused form with
-  `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
+  v1.0.8 SDKs sent, and answer a missing component, a refused form or a member that is
+  not an https origin with `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
   empty `Authorization` stays valid.
 - Several signatures: each is verified on its own, against the key its `keyid` names in
   the directory its own covered member names; a signature that covers several members
@@ -730,7 +730,8 @@ SDKs implement it:
   `cnf.jkt` is checked against it; a Broker is never delegated to. The Exchange resolves
   each signer's key in the directory that signer names, not in a configured key set.
 - The retrieval proof of possession at the publisher edge is a full Web Bot Auth
-  signature plus `@method` and `@target-uri`. The edge keeps verifying offline with the
+  signature plus `@method` and `@target-uri`. That covered set is a minimum: a proof that
+  also covers `@authority`, or a header, verifies. The edge keeps verifying offline with the
   key in `X-FORA-Agent-Key`, which it accepts only when its thumbprint equals both the
   signature `keyid` and the delivery URL's `agent_id`. A generic WBA verifier accepts
   the same signature by resolving the agent's directory.
@@ -763,7 +764,8 @@ SDKs, in all three languages:
   gains `SignatureAgent`, `Label` and `CoverPrevious`.
 - Verifying: the verifiers apply the rules above, resolve each signature's key with the
   directory its member names, and carry that directory on the result. A refusal for a
-  missing component or a refused form carries the `Accept-Signature` value
+  missing component, a refused form or a member that is not an https origin carries the
+  `Accept-Signature` value
   (`helpers.AcceptSignature` / `accept_signature` / `acceptSignature`): Go's
   `connectserver` writes it on the 401, and the Python and TypeScript server verdicts carry
   it. The key resolver receives the directory of the signature it resolves: Go threads it
@@ -779,27 +781,36 @@ SDKs, in all three languages:
   locally as malformed. A per-request signer source (`core.WithSignerSource` /
   `SignerSource`) signs each request as the identity a callback picks. Append mode
   (`core.WithAppendSigner`, `appendOnly`) is joined by Python's `append_only`, which
-  Python lacked. `core.MonotonicWindow` keeps every window at its ttl.
+  Python lacked. `core.MonotonicWindow` / `monotonic_window` / `monotonicWindow` used to
+  move `created` forward by one second per request, stamping signatures in the future
+  above one request per second; it now signs at the clock's current time, exactly as the
+  clock window, and is deprecated.
 - Delivery proof: `helpers.SignAgentBinding` / `sign_agent_binding` / `signInbound`
-  take the agent's directory and a nonce and emit the `Signature-Agent` header. Python's
-  `sign_agent_binding` now returns an `AgentBinding` with the four header values instead of
-  a tuple. The Python and TypeScript edge verifiers apply the new profile with a
-  structured-field parser, and the Hono middleware answers a proof refused for a missing
-  component or a refused form with 401 and the proof's own `Accept-Signature`
-  (`POP_ACCEPT_SIGNATURE`).
+  take the agent's directory, a nonce and the HTTP method, and emit the
+  `Signature-Agent` header. Python's `sign_agent_binding` now returns an `AgentBinding`
+  with the four header values instead of a tuple. Go gains the verify face,
+  `helpers.VerifyAgentBinding`, which refuses with a `PoPError` (`PoPFailure` token and
+  `PoPAcceptSignature`). The three verifiers accept a proof covering at least the
+  profile's components, parse it with a structured-field parser, and refuse with the same
+  tokens; a refusal the fetcher can fix carries `PoPAcceptSignature` /
+  `POP_ACCEPT_SIGNATURE`, and the Hono middleware answers it with 401 and that header.
 - Directories: `helpers.SignDirectoryResponse` / `sign_directory_response` /
   `signDirectoryResponse` sign a directory response and
   `helpers.VerifyDirectoryResponse` / `verify_directory_response` /
   `verifyDirectoryResponse` check one. The WBA key resolvers and the offer-directory
   fetch refuse redirects, check the media type and hand out only keys that signed the
   response; `ReadWBADirectory` / `read_wba_directory` / `readWBADirectory` require every
-  listed key to have signed, and refuse `application/jwk-set+json`. The constants
-  `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire constants.
+  listed key to have signed, and refuse `application/jwk-set+json`. Go's
+  `WBAKeyResolverOptions.Scheme`, which let a configuration fetch an https origin's
+  directory in plaintext, is removed: a directory is always fetched over https. The
+  constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
+  constants.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
   `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
   `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier
   must accept), `multisig-chain-vectors.json` (each signer with its own directory, so a
-  verifier that resolves through the wrong member fails), `pop-vectors.json`,
+  verifier that resolves through the wrong member fails), `pop-vectors.json` (now with
+  each vector's expected refusal token and `Accept-Signature`, and superset proofs),
   `wire-constants-vectors.json`, `document-check-vectors.json` and the new
   `directory-response-vectors.json`. The Go suite also checks the draft's Appendix E.2
   Ed25519 vectors against its signature base builder.

From e2585849e123504dfcdb876974e6a0fd9fb02e24 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:22:12 -0400
Subject: [PATCH 125/164] Accept a delivery-proof superset in TypeScript and
 follow the Go verifier

verifyAgentBinding now ports Go helpers.VerifyAgentBinding check for check.
A proof must cover at least @method, @target-uri and a Signature-Agent
reference; anything else it covers, @authority or a header such as
x-fora-agent-key, enters the base, read the way a request signature reads
it, while @target-uri stays the URL verbatim. A request missing either
signature header is missing_sig with Accept-Signature, as in Go, rather
than malformed_sig_input. A covered component the request cannot supply
is bad_covered_components with Accept-Signature. The parity test replays
every pop vector's expected_reason and expected_accept_signature on both
the default and the injected Ed25519 primitive.

A Signature-Agent member that is not an https origin is a refusal the
client can fix, so acceptSignatureFor answers it, for request
verification and the delivery proof alike, and the Hono middleware
answers such a proof 401 with Accept-Signature. The two not-origin
request vectors now pass.

monotonicWindow signs at the clock's current time, exactly as
clockWindow, and is deprecated: bumping the window per call stamped
signatures in the future above one request per second, and the nonce
already makes each signature unique. A test pins a 1000-call burst in
one frozen second to (now, now+ttl).

maxSignatures is documented as the Exchange's max_intermediary_hops
itself, every signature counted, refused as hop_budget, which the
protocol answers with resource_exhausted (HTTP 429).

UpstreamRefusal field 1 is party: the Broker execute fixtures and
assertions use it, and an answer still carrying the old exchange member
is refused as malformed.
---
 sdk/ts/README.md                              |  12 +-
 sdk/ts/core/signing-transport.ts              |   2 +-
 sdk/ts/core/verify-multisig-request.ts        |  12 +-
 sdk/ts/core/verify-request.ts                 |   5 +-
 sdk/ts/core/wba.ts                            |  16 ++-
 sdk/ts/core/window.ts                         |  34 +++--
 sdk/ts/hono/middleware.ts                     |   5 +-
 sdk/ts/src/pop.ts                             |  86 ++++++++-----
 sdk/ts/tests/broker-execute.test.ts           |  34 ++++-
 sdk/ts/tests/server-verify.smoke.test.ts      |   6 +
 sdk/ts/tests/signedurl-pop.parity.test.ts     |  46 ++++---
 sdk/ts/tests/signing-transport.parity.test.ts |   4 +-
 sdk/ts/tests/wba-profile.test.ts              | 116 ++++++++++++++----
 sdk/ts/tests/window-adoption.guard.test.ts    |   8 +-
 sdk/ts/tests/window.behavior.test.ts          |  51 ++++----
 15 files changed, 284 insertions(+), 153 deletions(-)

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 7292bfcc..cbb3415b 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -70,11 +70,13 @@ on `createSigningTransport`) appends its member beside the earlier ones, and cov
 earlier signature only when `coverPrevious` is set; a `signerSource` signs each request as
 a different identity. `verifyRequestServer` and `verifyMultisigRequestServer` resolve each
 signature's key in the directory its own member names and report that directory. A refusal
-for a missing component, a missing or wrong tag, or a refused `Signature-Agent` form
-carries the `Accept-Signature` value (`acceptSignature`) to answer with. The delivery proof
-`fetch` presents is the same profile over `@method`, `@target-uri` and the agent's member,
-and the `@fora-protocol/sdk/hono` middleware answers a proof it can ask for again with 401
-and `Accept-Signature`.
+for a missing component, a missing or wrong tag, a refused `Signature-Agent` form, or a
+`Signature-Agent` member that is not an https origin carries the `Accept-Signature` value
+(`acceptSignature`) to answer with. The delivery proof `fetch` presents is the same profile
+over `@method`, `@target-uri` and the agent's member. `verifyAgentBinding` accepts a proof
+that covers at least those three, so a Web Bot Auth library's proof that also covers
+`@authority` or a header verifies, and the `@fora-protocol/sdk/hono` middleware answers a
+proof it can ask for again with 401 and `Accept-Signature`.
 
 `@fora-protocol/sdk/resolvers` reads and checks the documents a party publishes:
 `readManifest`, `readWBADirectory`, `readRevocationList` and `readLicenseDocument` fetch
diff --git a/sdk/ts/core/signing-transport.ts b/sdk/ts/core/signing-transport.ts
index c4710a8a..81084671 100644
--- a/sdk/ts/core/signing-transport.ts
+++ b/sdk/ts/core/signing-transport.ts
@@ -4,7 +4,7 @@
 //
 // Core Invariant: this module is a pure ORCHESTRATION of the already
 // byte-parity-locked primitives signRequest / appendSignature (core/sign-request.ts)
-// and clockWindow / monotonicWindow (core/window.ts). It stamps EVERY covered header
+// and the clockWindow (core/window.ts). It stamps EVERY covered header
 // at the value that entered the signature base — Content-Digest / Signature-Agent /
 // Signature-Input / Signature, and the Authorization whose value may be empty —
 // byte-identical to the shared Go/Python oracle, forwards the request body UNMODIFIED,
diff --git a/sdk/ts/core/verify-multisig-request.ts b/sdk/ts/core/verify-multisig-request.ts
index 470e1af9..6748e6cb 100644
--- a/sdk/ts/core/verify-multisig-request.ts
+++ b/sdk/ts/core/verify-multisig-request.ts
@@ -29,7 +29,8 @@ import { acceptSignatureFor, componentParam, coversComponent, keyed, type Refusa
 
 /**
  * The classified multisig reject reason (mirrors the Go taxonomy): "hop_budget" (more
- * signatures than the configured budget), "broken_chain" (a signature covers an earlier
+ * signatures than maxSignatures; the protocol answers it with resource_exhausted, HTTP
+ * 429, and no typed reason), "broken_chain" (a signature covers an earlier
  * one incompletely, or names one that does not appear before it), and "signature" (any
  * per-signature authenticity/freshness/key/covered-set/form failure — the default).
  */
@@ -57,9 +58,12 @@ export interface VerifyMultisigRequestInput {
 	resolve: MultisigKeyResolver;
 	/** Injected clock returning unix seconds — verify reads time ONLY through this. */
 	now: () => number;
-	/** The hop budget: reject a request carrying more signatures than this BEFORE any
-	 * crypto. Every signature counts, whether or not it covers another. 0 / omitted means
-	 * unbounded (mirrors Go opts.MaxSignatures). */
+	/** The hop budget: the most RFC 9421 signatures a request may carry. Every signature
+	 * counts, whether or not it covers another, so an Exchange sets this to the
+	 * max_intermediary_hops it publishes in its manifest, with nothing added. A request
+	 * carrying more is refused as "hop_budget" BEFORE any signature is checked; the
+	 * protocol's code for that refusal is resource_exhausted (HTTP 429), with no typed
+	 * reason. 0 / omitted means unbounded (mirrors Go VerifyOptions.MaxSignatures). */
 	maxSignatures?: number;
 	/** The per-signature lifetime clamp in SECONDS (mirrors Go
 	 * VerifyOptions.MaxSignatureAge), enforced on EVERY signature exactly like the
diff --git a/sdk/ts/core/verify-request.ts b/sdk/ts/core/verify-request.ts
index 57ef205d..9a1ca83e 100644
--- a/sdk/ts/core/verify-request.ts
+++ b/sdk/ts/core/verify-request.ts
@@ -138,8 +138,9 @@ export interface VerifyVerdict {
 	 * The Accept-Signature value (RFC 9421 §5.1, WG-00 §5.3) a refusal is answered with,
 	 * naming the components and form the verifier requires. Set when the request carried
 	 * no signature, a signature omitted a required component, its tag was missing or
-	 * wrong, or its Signature-Agent was in a form the profile refuses; unset for every
-	 * other refusal. A server sets it on its 401 as the AcceptSignatureHeader field.
+	 * wrong, its Signature-Agent was in a form the profile refuses, or the member it
+	 * covers is not an https origin; unset for every other refusal. A server sets it on
+	 * its 401 as the AcceptSignatureHeader field.
 	 */
 	acceptSignature?: string;
 }
diff --git a/sdk/ts/core/wba.ts b/sdk/ts/core/wba.ts
index b6dd0d66..b2cb5d5a 100644
--- a/sdk/ts/core/wba.ts
+++ b/sdk/ts/core/wba.ts
@@ -239,8 +239,9 @@ export function acceptSignature(entitlement: boolean): string {
 /**
  * Refusal is the internal verdict of one profile check, before it collapses to the
  * public reject reason. It carries what the Accept-Signature decision needs: a missing
- * component, a refused tag or Signature-Agent form, and a request with no signature are
- * answered with Accept-Signature; everything else is not.
+ * component, a refused tag or Signature-Agent form, a Signature-Agent member that is not
+ * an https origin, and a request with no signature are answered with Accept-Signature;
+ * everything else is not.
  */
 export type Refusal =
 	| { kind: "unsigned" }
@@ -251,9 +252,13 @@ export type Refusal =
 	| { kind: "not_origin" }
 	| { kind: "signature" };
 
-/** acceptSignatureFor returns the Accept-Signature value a verifier answers `r` with, or
- * undefined when the refusal is of a well-formed signature that failed for another
- * reason: a bad signature, an unknown key, a stale window, a malformed header. */
+/** acceptSignatureFor returns the Accept-Signature value a verifier answers `r` with:
+ * for every refusal the client can fix by signing again as the profile requires, which
+ * is no signature, a missing component, the wrong tag, a Signature-Agent in a form the
+ * profile refuses, and a Signature-Agent member that is not an https origin (Go
+ * helpers.AcceptSignatureFor). It is undefined when the refusal is of a well-formed
+ * signature that failed for another reason: a bad signature, an unknown key, a stale
+ * window, a malformed header. */
 export function acceptSignatureFor(r: Refusal): string | undefined {
 	switch (r.kind) {
 		case "missing_component":
@@ -261,6 +266,7 @@ export function acceptSignatureFor(r: Refusal): string | undefined {
 		case "unsigned":
 		case "tag":
 		case "form":
+		case "not_origin":
 			return acceptSignature(false);
 		default:
 			return undefined;
diff --git a/sdk/ts/core/window.ts b/sdk/ts/core/window.ts
index 3c89ea5c..f53d01aa 100644
--- a/sdk/ts/core/window.ts
+++ b/sdk/ts/core/window.ts
@@ -24,27 +24,21 @@ export function clockWindow(now: () => number, ttlSec: number): Window {
 }
 
 /**
- * monotonicWindow returns a Window whose expires cutoff strictly increases
- * across calls: it tracks floor(now()) + ttlSec but, when a burst of requests
- * lands in the same wall-clock second, bumps expires by one second per call so
- * no two back-to-back signatures share an (keyid, expires) pair. The signing
- * transport no longer needs this for uniqueness: every signature carries a fresh
- * nonce, so clockWindow is enough. created moves with expires, so the window is
- * always exactly ttlSec and never exceeds the Web Bot Auth limit when ttlSec is at
- * most MAX_SIGNATURE_LIFETIME; during a burst created leads the clock by the
- * burst's length in seconds, which a verifier's future-skew allowance absorbs.
+ * monotonicWindow returns a Window that stamps each signature at the clock's current
+ * time: created = floor(now()) and expires = created + ttlSec, exactly as clockWindow
+ * does.
  *
- * ONE INSTANCE PER CLIENT, never one per call. The running maximum is the whole
- * mechanism: a window created per request starts from zero, cannot see the
- * previous signature, and provides exactly none of the uniqueness it was chosen
- * for — while still looking correct at the call site.
+ * It once bumped expires (and later created with it) by one second per call inside a
+ * wall-clock second, so that no two signatures shared a window. Above one request per
+ * second that stamped signatures in the future, by as many seconds as there were
+ * requests, and they passed only on the verifier's future-skew allowance. Uniqueness
+ * never needed it: every signature carries a fresh 64-byte nonce, so two identical
+ * requests in the same second already sign to different bytes. Go
+ * core.MonotonicWindow and the Python SDK behave the same way.
+ *
+ * @deprecated Use clockWindow. monotonicWindow is kept so existing callers compile,
+ * and behaves identically.
  */
 export function monotonicWindow(now: () => number, ttlSec: number): Window {
-	let lastExpires = 0;
-	return () => {
-		const floor = Math.floor(now()) + ttlSec;
-		const next = lastExpires >= floor ? lastExpires + 1 : floor;
-		lastExpires = next;
-		return [next - ttlSec, next];
-	};
+	return clockWindow(now, ttlSec);
 }
diff --git a/sdk/ts/hono/middleware.ts b/sdk/ts/hono/middleware.ts
index d782611a..d45bfaf0 100644
--- a/sdk/ts/hono/middleware.ts
+++ b/sdk/ts/hono/middleware.ts
@@ -1,10 +1,11 @@
 // sdk/ts/hono — the OPT-IN server/verify binding over sdk/ts/core, the natural
 // adapter for Edge (src/edge/src/app.ts, a SERVER/VERIFIER). It is a thin Hono
-// middleware that verifies an inbound RFC 9421 GET proof-of-possession at the HTTP
+// middleware that verifies an inbound RFC 9421 proof-of-possession at the HTTP
 // seam (where the exact request exists) via the L1 verifyAgentBinding, and
 // fail-closes: an unsigned/forged request never reaches the guarded handler. A
 // refusal the agent can fix by signing differently — no signature, a missing or wrong
-// tag, the wrong covered set, a Signature-Agent in a refused form — is answered 401
+// tag, a covered set missing a required component, a Signature-Agent in a refused form
+// or a member that is not an https origin — is answered 401
 // with the Accept-Signature field naming what the proof must carry (WG-00 §5.3);
 // every other refusal is answered 403.
 //
diff --git a/sdk/ts/src/pop.ts b/sdk/ts/src/pop.ts
index 7958c138..32dca193 100644
--- a/sdk/ts/src/pop.ts
+++ b/sdk/ts/src/pop.ts
@@ -11,12 +11,13 @@ import { keyed, plain, renderComponent, signatureDirectory } from "../core/wba.t
 //
 // When a signed URL carries an `agent_id` (the agent's RFC 7638 thumbprint), a
 // code-capable edge requires the fetcher to prove possession of the bound key —
-// fully offline. The proof is a full Web Bot Auth signature over the GET:
+// fully offline. The proof is a full Web Bot Auth signature over the fetch:
 //
 //   1. the raw Ed25519 public key in `X-FORA-Agent-Key`,
 //   2. a Signature-Agent member naming the agent's key directory, and
-//   3. an RFC 9421 signature with tag="web-bot-auth" covering exactly `@method`,
-//      `@target-uri` and that member,
+//   3. an RFC 9421 signature with tag="web-bot-auth" covering AT LEAST `@method`,
+//      `@target-uri` and that member. A proof made by a Web Bot Auth library that
+//      covers more, `@authority` or a header for example, verifies too,
 //
 // and the edge enforces the 3-way identity:
 //
@@ -32,7 +33,9 @@ import { keyed, plain, renderComponent, signatureDirectory } from "../core/wba.t
 // without WebCrypto Ed25519 (Fastly Compute) can supply its own — the byte
 // contract is the signature base, not the primitive. The default primitive is
 // WebCrypto crypto.subtle. Byte-parity guard: the pop vectors are produced by the
-// sdk/go signer (helpers.SignAgentBinding).
+// sdk/go signer (helpers.SignAgentBinding), and their verdicts, refusal tokens and
+// Accept-Signature values by the sdk/go verifier (helpers.VerifyAgentBinding), which
+// verifyAgentBinding ports check for check.
 
 export const AGENT_KEY_HEADER = AgentKeyHeader.toLowerCase();
 
@@ -62,15 +65,17 @@ export interface PopResult {
    * names, set when the proof verifies. */
   signatureAgent?: string;
   /** The Accept-Signature value (RFC 9421 §5.1, WG-00 §5.3) a refusal is answered with:
-   * POP_ACCEPT_SIGNATURE, set when the proof carried no signature, a missing or wrong
-   * tag, a covered set other than the profile's, or a Signature-Agent in a form the
-   * profile refuses. Unset for every other refusal. */
+   * POP_ACCEPT_SIGNATURE, set when the fetcher can fix the refusal by signing again as
+   * the profile requires: no signature, a missing or wrong tag, a covered set missing a
+   * required component, a Signature-Agent in a form the profile refuses, or a
+   * Signature-Agent member that is not an https origin. Unset for every other refusal. */
   acceptSignature?: string;
 }
 
 /** The Accept-Signature value a refused delivery proof is answered with: the three
- * components a proof covers, the dictionary form of Signature-Agent, and the created,
- * expires and tag parameters. */
+ * components a proof must cover at least, the dictionary form of Signature-Agent, and
+ * the created, expires and tag parameters. The same value as Go
+ * helpers.PoPAcceptSignature. */
 export const POP_ACCEPT_SIGNATURE = `sig1=(${[plain("@method"), plain("@target-uri"), keyed("signature-agent", "sig1")]
   .map(renderComponent)
   .join(" ")});created;expires;tag="${WBATag}"`;
@@ -89,8 +94,10 @@ export type Ed25519Verify = (
 ) => Promise<boolean>;
 
 export interface PopInput {
-  /** Full request URL — the value the agent signed as `@target-uri`. */
+  /** Full request URL exactly as the request line carried it — the value the agent
+   * signed as `@target-uri`, used verbatim. */
   url: string;
+  /** The request method; upper-cased into the base as `@method`. */
   method: string;
   headers: Headers;
   /** The bound thumbprint carried in the URL's `agent_id` param. */
@@ -112,7 +119,9 @@ const failAccept = (reason: PopFailure): PopResult => ({
 /**
  * Verify the agent's proof of possession of the key bound to `agentId`.
  * Returns `{ ok: true }` only when the presented key, the Web Bot Auth signature,
- * and the 3-way identity all check out.
+ * and the 3-way identity all check out. The checks run in Go
+ * helpers.VerifyAgentBinding's order, so the first failing check names the refusal
+ * the same way in every SDK.
  */
 export async function verifyAgentBinding(input: PopInput): Promise<PopResult> {
   const presented = readPresentedKey(input.headers);
@@ -128,7 +137,12 @@ export async function verifyAgentBinding(input: PopInput): Promise<PopResult> {
   if (!coversTheProfile(sig)) return failAccept("bad_covered_components");
   const directory = signatureDirectory(input.headers.get(SignatureAgentHeader) ?? undefined, sig, count);
   if (!directory.ok) {
-    return directory.refusal.kind === "not_origin" ? fail("bad_signature_agent") : failAccept("bad_signature_agent");
+    // A covered member the request does not carry is a missing component; every other
+    // refusal of the member, including a value that is not an https origin, is one the
+    // fetcher fixes by naming its directory as the profile requires.
+    return directory.refusal.kind === "missing_component"
+      ? failAccept("bad_covered_components")
+      : failAccept("bad_signature_agent");
   }
 
   // 3-way identity. keyid and the presented-key thumbprint must both equal the
@@ -140,24 +154,35 @@ export async function verifyAgentBinding(input: PopInput): Promise<PopResult> {
   const stale = freshnessFailure(sig, input.now);
   if (stale) return fail(stale);
 
+  const base = proofBase(input, sig);
+  if (base === undefined) return failAccept("bad_covered_components");
+  const verify = input.verifyEd25519 ?? defaultVerifyEd25519;
+  const valid = await verify(presented.key, sig.signature, utf8Bytes(base));
+  return valid ? okResult(directory.value) : fail("pop_sig_invalid");
+}
+
+// proofBase rebuilds the proof's signature base in its covered order, or undefined
+// when the request cannot supply a component the proof covers. @method is the method
+// upper-cased and @target-uri the URL verbatim, the bytes the request line carried;
+// every other component, @authority or a header for example, is read the way a
+// request signature reads it.
+function proofBase(input: PopInput, sig: ParsedSignature): string | undefined {
   // Coerce a URL-like input (Fastly hands a URL object, not a string) to its
   // opaque string form once at the boundary. The @target-uri line must carry the
   // verbatim bytes the agent signed, never a WHATWG-normalized toString().
   const url = opaqueUrl(input.url);
-  let base: string;
   try {
-    base = buildSignatureBase(
+    return buildSignatureBase(
       sig.covered,
       requestComponentValue({ method: input.method, url, header: (n) => input.headers.get(n) ?? undefined }),
       sig.rawInner,
     );
   } catch (err) {
-    if (err instanceof ComponentUnavailable) return failAccept("bad_signature_agent");
+    // ComponentUnavailable: a header or member the request does not carry. TypeError:
+    // @authority covered on a URL that does not parse.
+    if (err instanceof ComponentUnavailable || err instanceof TypeError) return undefined;
     throw err;
   }
-  const verify = input.verifyEd25519 ?? defaultVerifyEd25519;
-  const valid = await verify(presented.key, sig.signature, utf8Bytes(base));
-  return valid ? okResult(directory.value) : fail("pop_sig_invalid");
 }
 
 type PresentedKey = { ok: true; key: Uint8Array<ArrayBuffer> } | { ok: false; result: PopResult };
@@ -175,30 +200,25 @@ function readPresentedKey(headers: Headers): PresentedKey {
 type ParsedProof = { ok: true; sig: ParsedSignature; count: number } | { ok: false; result: PopResult };
 
 // parseProof reads the proof's Signature-Input and Signature through the structured-field
-// parser. A request carrying neither is unsigned; the first signature in header order is
-// the proof.
+// parser. A request missing either header is unsigned, a refusal the fetcher fixes by
+// signing; the first signature in header order is the proof.
 function parseProof(headers: Headers): ParsedProof {
   const input = headers.get("signature-input") ?? undefined;
   const signature = headers.get("signature") ?? undefined;
-  if (input === undefined) return { ok: false, result: failAccept("malformed_sig_input") };
-  if (signature === undefined) return { ok: false, result: failAccept("missing_sig") };
+  if (input === undefined || signature === undefined) return { ok: false, result: failAccept("missing_sig") };
   const parsed = parseSignatureHeaders(input, signature);
   if (!parsed.ok) return { ok: false, result: fail("malformed_sig_input") };
   return { ok: true, sig: parsed.value[0] as ParsedSignature, count: parsed.value.length };
 }
 
-// coversTheProfile reports whether the proof covers @method, @target-uri and exactly one
-// Signature-Agent reference, and nothing else.
+// coversTheProfile reports whether the proof covers at least @method, @target-uri and a
+// Signature-Agent reference. Anything else it covers is allowed and enters the base;
+// which member the reference names, and whether it is the only one, is
+// signatureDirectory's call.
 function coversTheProfile(sig: ParsedSignature): boolean {
-  const names = sig.covered.map((c) => c.name.toLowerCase());
-  const plainOnce = (n: string): boolean =>
-    sig.covered.filter((c) => c.name.toLowerCase() === n && c.params.length === 0).length === 1;
-  return (
-    plainOnce("@method") &&
-    plainOnce("@target-uri") &&
-    names.filter((n) => n === "signature-agent").length === 1 &&
-    names.length === 3
-  );
+  const covers = (n: string, plainOnly: boolean): boolean =>
+    sig.covered.some((c) => c.name.toLowerCase() === n && (!plainOnly || c.params.length === 0));
+  return covers("@method", true) && covers("@target-uri", true) && covers("signature-agent", false);
 }
 
 // MAX_FUTURE_SKEW_SEC: a proof's created timestamp may not lead the verifier
diff --git a/sdk/ts/tests/broker-execute.test.ts b/sdk/ts/tests/broker-execute.test.ts
index e7135af9..9c70af5f 100644
--- a/sdk/ts/tests/broker-execute.test.ts
+++ b/sdk/ts/tests/broker-execute.test.ts
@@ -9,7 +9,7 @@ import { describe, expect, it } from "vitest";
 import {
 	createBrokerClient,
 	createClient,
-	type ForaCallError,
+	ForaCallError,
 	type UnaryRequest,
 	type UnarySend,
 } from "../client/index.ts";
@@ -76,7 +76,7 @@ const COMBINED = {
 		{
 			offer_id: "offer-b1",
 			refusal: {
-				exchange: "exchange-b.test",
+				party: "exchange-b.test",
 				code: "permission_denied",
 				detail: {
 					domain: "fora.v1.ExchangeService",
@@ -158,7 +158,9 @@ describe("BrokerClient.execute", () => {
 			),
 		).resolves.toBe(true);
 
-		// The refused group rides in the body, the other Exchange's results unchanged.
+		// The refused group rides in the body, the other Exchange's results unchanged. The
+		// refusing party is the Exchange the refused item's offer names.
+		expect(resp.items?.[1]?.refusal?.party).toBe("exchange-b.test");
 		expect(resp.items?.[1]?.refusal?.code).toBe("permission_denied");
 		expect(resp.items?.[1]?.refusal?.detail?.transaction_denial?.reason).toBe(
 			"DENIAL_REASON_ACCOUNT_NOT_REGISTERED",
@@ -254,6 +256,32 @@ describe("BrokerClient.execute", () => {
 		expect(seen.length).toBe(1);
 	});
 
+	it("refuses an answer that names the refusing party under the pre-rename exchange field", async () => {
+		const a1 = await offerAt("offer-a1", "exchange-a.test");
+		const b1 = await offerAt("offer-b1", "exchange-b.test");
+		const a2 = await offerAt("offer-a2", "exchange-a.test");
+		const keys = await keyPair();
+		const items = COMBINED.items.map((it) =>
+			"refusal" in it && it.refusal !== undefined
+				? { ...it, refusal: { exchange: it.refusal.party, code: it.refusal.code, detail: it.refusal.detail } }
+				: it,
+		);
+		const { send } = recordingSend({ ...COMBINED, items });
+		const broker = createBrokerClient("https://broker.test", {
+			requester: REQUESTER,
+			signer: { privKey: keys.privateKey, keyid: "agent.v1" },
+			signatureAgent: AGENT_DIRECTORY,
+			send,
+		});
+
+		const err = (await broker
+			.execute([a1.verified, b1.verified, a2.verified], { idempotencyKey: "relay-key" })
+			.catch((e: unknown) => e)) as ForaCallError;
+
+		expect(err).toBeInstanceOf(ForaCallError);
+		expect(err.kind).toBe("malformed");
+	});
+
 	it("surfaces the Broker's own refusal as a typed failure", async () => {
 		const one = await offerAt("offer-one", "exchange-a.test");
 		const keys = await keyPair();
diff --git a/sdk/ts/tests/server-verify.smoke.test.ts b/sdk/ts/tests/server-verify.smoke.test.ts
index f55d997d..daadeed3 100644
--- a/sdk/ts/tests/server-verify.smoke.test.ts
+++ b/sdk/ts/tests/server-verify.smoke.test.ts
@@ -152,6 +152,12 @@ describe("sdk/ts Hono server-verify binding — Accept-Signature on a fixable re
     expect(res?.headers.get("Accept-Signature")).toBe(POP_ACCEPT_SIGNATURE);
   });
 
+  it("a proof whose Signature-Agent member is not an https origin is answered 401 with Accept-Signature", async () => {
+    const res = await denied((h) => h.set("signature-agent", 'sig1="http://agent.example"'));
+    expect(res?.status).toBe(401);
+    expect(res?.headers.get("Accept-Signature")).toBe(POP_ACCEPT_SIGNATURE);
+  });
+
   it("a forged signature is answered 403 with no Accept-Signature", async () => {
     const res = await denied((h) => h.set("signature", "sig1=:" + "A".repeat(86) + "==:"));
     expect(res?.status).toBe(403);
diff --git a/sdk/ts/tests/signedurl-pop.parity.test.ts b/sdk/ts/tests/signedurl-pop.parity.test.ts
index 153c1c58..05f8bf64 100644
--- a/sdk/ts/tests/signedurl-pop.parity.test.ts
+++ b/sdk/ts/tests/signedurl-pop.parity.test.ts
@@ -8,12 +8,9 @@
 //   sdk/go/helpers/testdata/signedurl-vectors.json  (SignURLEd25519 output)
 //   sdk/go/helpers/testdata/pop-vectors.json        (Web Bot Auth delivery-proof output)
 //
-// This test asserts sdk/ts verify reaches the recorded verdict for each vector.
-// It is RED now for TWO reasons, both expected:
-//   1. sdk/ts/src/{verify,pop}.ts do not exist yet (imports cannot resolve).
-//   2. The two vector JSON files do not exist yet (the Go emitter is a later
-//      step). A missing vector file is itself a clean red — the guard is not
-//      yet in place.
+// This test asserts sdk/ts verify reaches the recorded verdict for each vector. The
+// pop vectors' verdicts, refusal tokens and Accept-Signature values come from the Go
+// verifier (helpers.VerifyAgentBinding), and all three are replayed.
 //
 // LOAD-BEARING (why vectors come from the Go signer, never hand-authored):
 // SignURLEd25519 emits the URL with a SORTED query (url.Values.Encode()); the
@@ -30,9 +27,7 @@ import { verifyEd25519SignedUrl } from "../src/verify.ts";
 import { POP_ACCEPT_SIGNATURE, verifyAgentBinding } from "../src/pop.ts";
 import { signInbound } from "../core/sign.ts";
 import { importSigningKey } from "./wba-fixtures.ts";
-// These vector files are produced by the Go golden-emitter in a later step;
-// referencing them by their planned paths keeps this test RED now (missing
-// module) and green once the emitter + sdk/ts land.
+// The vector files are produced by the Go golden emitter (helpers/gen_vectors_test.go).
 import signedUrlVectors from "../../go/helpers/testdata/signedurl-vectors.json";
 import popVectors from "../../go/helpers/testdata/pop-vectors.json";
 
@@ -68,12 +63,10 @@ type PopVector = {
   signature: string; // RFC 9421 Signature header value
   now_unix: number;
   expected_valid: boolean;
+  expected_reason: string; // the Go verifier's refusal token; "" when valid
+  expected_accept_signature?: string; // set when the refusal is answered with one
 };
 
-// The refusals a delivery proof is answered with Accept-Signature for: a missing or
-// wrong tag, the v1.0.8 covered set, and the bare Signature-Agent value.
-const ANSWERED_WITH_ACCEPT = new Set(["v108_method_and_target_uri_only", "missing_tag", "wrong_tag", "bare_signature_agent"]);
-
 function b64urlToBytes(s: string): Uint8Array<ArrayBuffer> {
   const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - (s.length % 4));
   const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
@@ -116,15 +109,32 @@ describe("sdk/ts Web Bot Auth delivery-proof verify matches the Go signer vector
     expect(vectors.length).toBeGreaterThan(0);
   });
 
+  it("every vector records its refusal token, and some refusals an Accept-Signature", () => {
+    for (const v of vectors) {
+      expect(typeof v.expected_reason, v.name).toBe("string");
+      expect(v.expected_valid, v.name).toBe(v.expected_reason === "");
+    }
+    expect(vectors.filter((v) => v.expected_accept_signature !== undefined).length).toBeGreaterThan(0);
+  });
+
+  // headersFor writes a vector's request headers: the presented key and, when the
+  // vector carries them, the three signature headers ("" means absent).
   function headersFor(v: PopVector): Headers {
     const h = new Headers();
     h.set("x-fora-agent-key", v.presented_key_b64url);
-    h.set("signature-input", v.signature_input);
-    h.set("signature", v.signature);
+    if (v.signature_input !== "") h.set("signature-input", v.signature_input);
+    if (v.signature !== "") h.set("signature", v.signature);
     if (v.signature_agent !== "") h.set("signature-agent", v.signature_agent);
     return h;
   }
 
+  // The vector's whole verdict: validity, the refusal token and the Accept-Signature.
+  function expectVerdict(v: PopVector, res: Awaited<ReturnType<typeof verifyAgentBinding>>): void {
+    expect(res.ok).toBe(v.expected_valid);
+    expect(res.reason ?? "").toBe(v.expected_reason);
+    expect(res.acceptSignature).toBe(v.expected_accept_signature);
+  }
+
   // DEFAULT-primitive path: verifyAgentBinding uses its built-in WebCrypto
   // Ed25519 verify. This observes byte-identical output on the default path.
   for (const v of vectors) {
@@ -136,9 +146,9 @@ describe("sdk/ts Web Bot Auth delivery-proof verify matches the Go signer vector
         agentId: v.agent_id,
         now: () => v.now_unix * 1000,
       });
-      expect(res.ok).toBe(v.expected_valid);
+      expectVerdict(v, res);
       if (v.expected_valid) expect(res.signatureAgent).toBe(v.agent_directory);
-      expect(res.acceptSignature).toBe(ANSWERED_WITH_ACCEPT.has(v.name) ? POP_ACCEPT_SIGNATURE : undefined);
+      if (v.expected_accept_signature !== undefined) expect(res.acceptSignature).toBe(POP_ACCEPT_SIGNATURE);
     });
   }
 
@@ -202,7 +212,7 @@ describe("sdk/ts Web Bot Auth delivery-proof verify matches the Go signer vector
         now: () => v.now_unix * 1000,
         verifyEd25519: injectedVerify,
       });
-      expect(res.ok).toBe(v.expected_valid);
+      expectVerdict(v, res);
     });
   }
 });
diff --git a/sdk/ts/tests/signing-transport.parity.test.ts b/sdk/ts/tests/signing-transport.parity.test.ts
index 8cdd5f3d..396b3533 100644
--- a/sdk/ts/tests/signing-transport.parity.test.ts
+++ b/sdk/ts/tests/signing-transport.parity.test.ts
@@ -10,8 +10,8 @@
 //     body bytes to the wrapped send.
 //
 // Core Invariant (agentic-content-access): the transport is a pure ORCHESTRATION of
-// the already-parity-locked signRequest / appendSignature + clockWindow /
-// monotonicWindow primitives — it stamps RFC 9421 headers byte-identical to the
+// the already-parity-locked signRequest / appendSignature + clockWindow
+// primitives — it stamps RFC 9421 headers byte-identical to the
 // shared Go/Python oracle, forwards the request body UNMODIFIED, and adds NO new
 // crypto and NO new signature-base rendering.
 //
diff --git a/sdk/ts/tests/wba-profile.test.ts b/sdk/ts/tests/wba-profile.test.ts
index 07362111..bbd7b321 100644
--- a/sdk/ts/tests/wba-profile.test.ts
+++ b/sdk/ts/tests/wba-profile.test.ts
@@ -204,8 +204,8 @@ describe("the verifier accepts what WG-00 permits and refuses what the profile d
 		["a member with a parameter other than key", { agentHeader: member, covered: [...FORA_RPC, { name: "signature-agent", params: [{ key: "bs", value: true }] }] }, accept],
 		["no Signature-Agent covered", { agentHeader: member, covered: FORA_RPC }, accept],
 		["authorization not covered", { agentHeader: member, covered: [...FORA_RPC.slice(0, 3), keyed("signature-agent", "sig1")] }, accept],
-		["a plaintext origin", { agentHeader: 'sig1="http://agent.example"' }, undefined],
-		["an origin with a path", { agentHeader: 'sig1="https://agent.example/keys"' }, undefined],
+		["a plaintext origin", { agentHeader: 'sig1="http://agent.example"' }, accept],
+		["an origin with a path", { agentHeader: 'sig1="https://agent.example/keys"' }, accept],
 	];
 	for (const [name, opts, want] of refused) {
 		it(`refuses ${name}${want ? " and answers with Accept-Signature" : ", with no Accept-Signature"}`, async () => {
@@ -235,36 +235,104 @@ async function rawProof(
 		expires: CREATED + 300,
 		tag: "web-bot-auth",
 	});
-	const base = buildSignatureBase(covered, requestComponentValue({ method: "GET", url, header: (n) => headers[n] }), inner);
+	// A covered set the base builder cannot resolve, such as a parameter on @method, is
+	// signed over a placeholder: the verifier must refuse it before the signature check.
+	let base: string;
+	try {
+		base = buildSignatureBase(covered, requestComponentValue({ method: "GET", url, header: (n) => headers[n] }), inner);
+	} catch {
+		base = "unresolvable";
+	}
 	const sig = await crypto.subtle.sign("Ed25519", kp.privateKey, new TextEncoder().encode(base));
 	return { input: `${label}=${inner}`, signature: `${label}=:${stdBase64(new Uint8Array(sig))}:` };
 }
 
-describe("verifyAgentBinding requires exactly the profile's covered set", () => {
-	const member = `sig1="${AGENT_DIRECTORY}"`;
-	const cases: Array<[string, CoveredComponent[]]> = [
-		["@method, @target-uri, the member and one more header", [plain("@method"), plain("@target-uri"), keyed("signature-agent", "sig1"), plain("x-extra")]],
-		["no @target-uri", [plain("@method"), keyed("signature-agent", "sig1"), plain("x-extra")]],
-		["@method twice", [plain("@method"), plain("@method"), keyed("signature-agent", "sig1")]],
+// proofFor signs a delivery proof over `covered` with a fresh key, then hands the
+// request headers to `alter` (which may change or drop any of them) and verifies.
+async function proofFor(
+	covered: CoveredComponent[],
+	alter: (h: Headers) => void = () => {},
+): Promise<Awaited<ReturnType<typeof verifyAgentBinding>>> {
+	const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
+	const raw = new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey));
+	const agentId = await thumbprint(raw);
+	const url = `https://cdn.example/doc?agent_id=${agentId}`;
+	const signed: Record<string, string> = {
+		"signature-agent": `sig1="${AGENT_DIRECTORY}"`,
+		"x-extra": "1",
+		"x-fora-agent-key": encodeBase64Url(raw),
+	};
+	const proof = await rawProof(kp, url, covered, signed);
+	const headers = new Headers({ ...signed, "signature-input": proof.input, signature: proof.signature });
+	alter(headers);
+	return verifyAgentBinding({ url, method: "GET", headers, agentId, now: () => (CREATED + 10) * 1000 });
+}
+
+describe("verifyAgentBinding accepts a covered set that includes the profile's", () => {
+	const member = keyed("signature-agent", "sig1");
+	const supersets: Array<[string, CoveredComponent[]]> = [
+		["the profile's set and one more header", [plain("@method"), plain("@target-uri"), member, plain("x-extra")]],
+		["@authority first, then the profile's set", [plain("@authority"), plain("@method"), plain("@target-uri"), member]],
+		["the profile's set in another order with the presented-key header", [member, plain("x-fora-agent-key"), plain("@target-uri"), plain("@method")]],
 	];
-	for (const [name, covered] of cases) {
-		it(`refuses ${name} and answers with Accept-Signature`, async () => {
-			const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
-			const raw = new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey));
-			const agentId = await thumbprint(raw);
-			const url = `https://cdn.example/doc?agent_id=${agentId}`;
-			const signed = { "signature-agent": member, "x-extra": "1" };
-			const proof = await rawProof(kp, url, covered, signed);
-			const headers = new Headers({
-				"x-fora-agent-key": encodeBase64Url(raw),
-				...signed,
-				"signature-input": proof.input,
-				signature: proof.signature,
+	for (const [name, covered] of supersets) {
+		it(`accepts ${name}`, async () => {
+			expect(await proofFor(covered)).toEqual({ ok: true, signatureAgent: AGENT_DIRECTORY });
+		});
+	}
+
+	const missing: Array<[string, CoveredComponent[]]> = [
+		["no @target-uri", [plain("@method"), member, plain("x-extra")]],
+		["no @method", [plain("@authority"), plain("@target-uri"), member]],
+		["no Signature-Agent member", [plain("@method"), plain("@target-uri"), plain("x-extra")]],
+		["@method only with a parameter", [{ name: "@method", params: [{ key: "req", value: true }] }, plain("@target-uri"), member]],
+	];
+	for (const [name, covered] of missing) {
+		it(`refuses ${name} as bad_covered_components and answers with Accept-Signature`, async () => {
+			expect(await proofFor(covered)).toEqual({
+				ok: false,
+				reason: "bad_covered_components",
+				acceptSignature: POP_ACCEPT_SIGNATURE,
 			});
-			const result = await verifyAgentBinding({ url, method: "GET", headers, agentId, now: () => (CREATED + 10) * 1000 });
-			expect(result).toEqual({ ok: false, reason: "bad_covered_components", acceptSignature: POP_ACCEPT_SIGNATURE });
 		});
 	}
+
+	it("refuses a covered header the request no longer carries as bad_covered_components, with Accept-Signature", async () => {
+		const covered = [plain("@method"), plain("@target-uri"), member, plain("x-extra")];
+		expect(await proofFor(covered, (h) => h.delete("x-extra"))).toEqual({
+			ok: false,
+			reason: "bad_covered_components",
+			acceptSignature: POP_ACCEPT_SIGNATURE,
+		});
+	});
+
+	it("refuses a covered Signature-Agent the request no longer carries as bad_covered_components", async () => {
+		const result = await proofFor([plain("@method"), plain("@target-uri"), member], (h) => h.delete("signature-agent"));
+		expect(result).toEqual({ ok: false, reason: "bad_covered_components", acceptSignature: POP_ACCEPT_SIGNATURE });
+	});
+
+	it("refuses a superset whose extra header changed after signing as pop_sig_invalid, with no Accept-Signature", async () => {
+		const covered = [plain("@method"), plain("@target-uri"), member, plain("x-extra")];
+		expect(await proofFor(covered, (h) => h.set("x-extra", "2"))).toEqual({ ok: false, reason: "pop_sig_invalid" });
+	});
+
+	it("answers an unsigned fetch, or one missing either signature header, with missing_sig and Accept-Signature", async () => {
+		const covered = [plain("@method"), plain("@target-uri"), member];
+		const want = { ok: false, reason: "missing_sig", acceptSignature: POP_ACCEPT_SIGNATURE };
+		expect(await proofFor(covered, (h) => h.delete("signature-input"))).toEqual(want);
+		expect(await proofFor(covered, (h) => h.delete("signature"))).toEqual(want);
+	});
+
+	it("refuses a Signature-Input that does not parse as malformed_sig_input, with no Accept-Signature", async () => {
+		const result = await proofFor([plain("@method"), plain("@target-uri"), member], (h) => h.set("signature-input", "sig1=("));
+		expect(result).toEqual({ ok: false, reason: "malformed_sig_input" });
+	});
+
+	it("refuses a member that is not an https origin as bad_signature_agent and answers with Accept-Signature", async () => {
+		const covered = [plain("@method"), plain("@target-uri"), member];
+		const result = await proofFor(covered, (h) => h.set("signature-agent", 'sig1="http://agent.example"'));
+		expect(result).toEqual({ ok: false, reason: "bad_signature_agent", acceptSignature: POP_ACCEPT_SIGNATURE });
+	});
 });
 
 describe("the legacy String form is accepted on one signature only", () => {
diff --git a/sdk/ts/tests/window-adoption.guard.test.ts b/sdk/ts/tests/window-adoption.guard.test.ts
index 60a849dc..8158f60b 100644
--- a/sdk/ts/tests/window-adoption.guard.test.ts
+++ b/sdk/ts/tests/window-adoption.guard.test.ts
@@ -6,10 +6,10 @@ import { describe, expect, it } from "vitest";
 //
 // DISEASE: a sign site that mints a signature's (created, expires) pair by inline
 // now+ttl arithmetic (e.g. `const expires = nowSec + opts.ttlSec`) instead of
-// sourcing it from the injectable Window (clockWindow / monotonicWindow). Inline
-// mint cannot be swapped for a monotonic window (unique back-to-back expires) and
-// re-derives the floor/ttl contract per-site, drifting from the Go .Unix()
-// semantics. signInbound was migrated to the Window; this guard pins it stays.
+// sourcing it from the injectable Window (clockWindow, or the deprecated
+// monotonicWindow, now identical to it). Inline mint cannot be swapped for a test
+// clock or another window, and re-derives the floor/ttl contract per-site, drifting
+// from the Go .Unix() semantics. signInbound was migrated to the Window; this guard pins it stays.
 //
 // SCOPE — the sign-side mint site (core/sign.ts::signInbound). The verify side
 // PARSES created/expires from the wire (not a mint) and is intentionally NOT
diff --git a/sdk/ts/tests/window.behavior.test.ts b/sdk/ts/tests/window.behavior.test.ts
index 4b734ab1..1ed8efcc 100644
--- a/sdk/ts/tests/window.behavior.test.ts
+++ b/sdk/ts/tests/window.behavior.test.ts
@@ -1,14 +1,14 @@
 // Window behaviour (TypeScript side): clockWindow floors created and adds ttl;
-// monotonicWindow keeps back-to-back expires strictly increasing.
+// the deprecated monotonicWindow signs at the clock's time exactly as clockWindow.
 //
 // The signature Window (Go core/sigwindow.go) carries a clock → NOT vector-
 // gated. Two faces:
 //   - clockWindow(now, ttlSec): created = floor(now()), expires = created+ttl
 //     (MUST floor — Go .Unix() floors; current signInbound uses
 //      Math.floor(now()); an un-floored default would change signature bytes).
-//   - monotonicWindow(now, ttlSec): expires strictly increases across a burst
-//     within one wall-clock second, so no two back-to-back signatures share an
-//     expires cutoff, and created moves with it so every window is exactly ttlSec.
+//   - monotonicWindow(now, ttlSec): deprecated, identical to clockWindow (Go
+//     core.MonotonicWindow). It no longer moves created into the future during a
+//     burst; the per-signature nonce is what makes each signature unique.
 import { describe, it, expect } from "vitest";
 import { clockWindow, monotonicWindow } from "../core/window.ts";
 
@@ -33,35 +33,26 @@ describe("sdk/ts clockWindow floors created and adds ttl to expires", () => {
 	});
 });
 
-describe("sdk/ts monotonicWindow strictly increases expires within one second", () => {
-	it("bumps expires by 1 per call across a same-second burst", () => {
-		const now = () => 1_700_000_000; // frozen wall-clock second
-		const w = monotonicWindow(now, 600);
-		const first = w();
-		const second = w();
-		const third = w();
-		// The first window starts at now(); expires is strictly increasing.
-		expect(first[0]).toBe(1_700_000_000);
-		expect(second[1]).toBeGreaterThan(first[1]);
-		expect(third[1]).toBeGreaterThan(second[1]);
+describe("sdk/ts monotonicWindow signs at the clock's current time", () => {
+	it("returns (now, now+ttl) for every call of a 1000-call burst in one frozen second", () => {
+		const w = monotonicWindow(() => 1_700_000_000.4, 300);
+		for (let i = 0; i < 1000; i += 1) {
+			expect(w()).toEqual([1_700_000_000, 1_700_000_300]);
+		}
 	});
 
-	it("never repeats an expires cutoff across a large same-second burst", () => {
-		const w = monotonicWindow(() => 1_700_000_000, 600);
-		const seen = new Set<number>();
-		for (let i = 0; i < 100; i += 1) {
-			const [, expires] = w();
-			seen.add(expires);
-		}
-		expect(seen.size).toBe(100);
+	it("never stamps created ahead of the clock, and follows the clock as it moves", () => {
+		let t = 1_700_000_000;
+		const w = monotonicWindow(() => t, 60);
+		for (let i = 0; i < 5; i += 1) w();
+		t = 1_700_000_001;
+		expect(w()).toEqual([1_700_000_001, 1_700_000_061]);
+		t = 1_700_000_000;
+		expect(w()).toEqual([1_700_000_000, 1_700_000_060]);
 	});
 
-	it("keeps every window exactly ttlSec during a burst: created moves with expires", () => {
-		const w = monotonicWindow(() => 1_700_000_000, 300);
-		for (let i = 0; i < 5; i += 1) {
-			const [created, expires] = w();
-			expect(expires - created).toBe(300);
-			expect(created).toBe(1_700_000_000 + i);
-		}
+	it("matches clockWindow for the same clock and ttl", () => {
+		const now = () => 1_700_000_123.9;
+		expect(monotonicWindow(now, 120)()).toEqual(clockWindow(now, 120)());
 	});
 });

From 5766ec10d448c2815f3338a8a1e8642654e7e5ea Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:22:43 -0400
Subject: [PATCH 126/164] Typecheck the TypeScript SDK under the Workers types
 and split an edge resolvers entry

tsconfig.workers.json typechecks src/, core/, hono/ and the new
resolvers/edge.ts against @cloudflare/workers-types alone, with no Node
types and no DOM lib, and npm test runs it before vitest, so the existing
CI step gates it. The package exact-pins the types as a devDependency.
The errors it found are fixed at the source: a raw public-key export is
read through exportRawPublicKey, which checks the bytes once instead of
each caller assuming the DOM overload; a signature base is encoded with
utf8Bytes; and the fatal UTF-8 decoders spell out ignoreBOM: false, the
default, which the Workers types declare required.

The resolvers imported undici, node:dns and node:crypto, so none of them
could run on an edge runtime. The transport contract and the document
GET move to resolvers/fetch.ts; the document readers, the WBA, well-known
and offer-directory resolvers and the requirements reader take fetch as
a required option and import nothing Node-only; a license digest is
checked with crypto.subtle.digest and a constant-time compare.
resolvers/edge.ts exports them as they are, as "./resolvers/edge".
"./resolvers" keeps every default it had: resolvers/node-defaults.ts
wraps each factory and reader with the transport it always defaulted to,
and the Node entry re-exports the edge one with those wrappers and the
undici transports. A guard test walks the import graph of the edge entry
and of every file under src/, core/ and hono/ and fails on an undici or
Node built-in import, and on a Node global such as Buffer or process,
which the Workers types declare as any and the typecheck cannot catch.
The README names the entry an edge runtime uses.

verifyDirectoryResponse takes the injectable Ed25519 primitive
verifyAgentBinding takes, defaulting to WebCrypto; tests show an injected
primitive decides the verdict both ways. signInbound takes the HTTP
method, GET by default, upper-cased into the base as Go
PoPOptions.Method does and refused when it carries a control byte; a
HEAD proof verifies as HEAD and is refused as GET.
---
 sdk/ts/README.md                              |  10 ++
 sdk/ts/core/directory-response.ts             |  14 +-
 sdk/ts/core/identity.ts                       |  12 +-
 sdk/ts/core/sign.ts                           |  25 ++-
 sdk/ts/core/verify-request.ts                 |   4 +-
 sdk/ts/package-lock.json                      |   8 +
 sdk/ts/package.json                           |   6 +-
 sdk/ts/resolvers/documents.ts                 |  82 ++++++----
 sdk/ts/resolvers/edge.ts                      |  84 ++++++++++
 sdk/ts/resolvers/fetch.ts                     | 141 +++++++++++++++++
 sdk/ts/resolvers/http.ts                      | 149 +++---------------
 sdk/ts/resolvers/index.ts                     |  90 +++--------
 sdk/ts/resolvers/node-defaults.ts             | 117 ++++++++++++++
 sdk/ts/resolvers/offer-key-cache.ts           |  27 ++--
 sdk/ts/resolvers/registration-requirements.ts |  25 ++-
 sdk/ts/resolvers/wba.ts                       |  16 +-
 sdk/ts/resolvers/wellknown.ts                 |  15 +-
 sdk/ts/src/errordetail-wire.ts                |   4 +-
 sdk/ts/src/regschema.ts                       |   3 +-
 sdk/ts/src/thumbprint.ts                      |  14 ++
 .../tests/directory-response.parity.test.ts   |  40 +++++
 sdk/ts/tests/document-check.parity.test.ts    |  14 +-
 sdk/ts/tests/edge-imports.guard.test.ts       | 146 +++++++++++++++++
 sdk/ts/tests/resolvers-edge-entry.test.ts     |  91 +++++++++++
 .../resolvers-wba-path-dedup.guard.test.ts    |  47 +++---
 sdk/ts/tests/sign-inbound-method.test.ts      |  59 +++++++
 sdk/ts/tsconfig.workers.json                  |  35 ++++
 27 files changed, 958 insertions(+), 320 deletions(-)
 create mode 100644 sdk/ts/resolvers/edge.ts
 create mode 100644 sdk/ts/resolvers/fetch.ts
 create mode 100644 sdk/ts/resolvers/node-defaults.ts
 create mode 100644 sdk/ts/tests/edge-imports.guard.test.ts
 create mode 100644 sdk/ts/tests/resolvers-edge-entry.test.ts
 create mode 100644 sdk/ts/tests/sign-inbound-method.test.ts
 create mode 100644 sdk/ts/tsconfig.workers.json

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index cbb3415b..d8fd8d71 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -89,6 +89,16 @@ signature by every key it lists (`DirectoryResponseUnsigned`); the WBA key resol
 out only the keys that signed. `checkStrict(message, payload)` from
 `@fora-protocol/sdk/client` applies the same check to any decoded message.
 
+`@fora-protocol/sdk/resolvers` is the Node entry: its readers and resolvers default their
+transport to the SSRF-guarded undici client. An edge runtime (Cloudflare Workers, Fastly
+Compute, Deno) imports `@fora-protocol/sdk/resolvers/edge` instead. It exports the same
+readers and resolvers, imports nothing Node-only, and has no default transport: each
+call takes `fetch`, the runtime's own fetch or a wrapper around it, and the address guard
+for a host another party named is the caller's. The protocol mechanics (`core`, `identity`,
+`hono`, and the `src` helpers such as `pop` and `verify`) are edge-safe too, and
+`verifyAgentBinding` and `verifyDirectoryResponse` take `verifyEd25519` for a runtime
+without WebCrypto Ed25519.
+
 `@fora-protocol/sdk/discovery-hint` reads the edge discovery headers of a 403:
 `parseDiscoveryHint(status, headers)` returns each of `X-Content-Rules` and
 `X-FORA-Exchange` with a state of `absent`, `valid` or `malformed`, and
diff --git a/sdk/ts/core/directory-response.ts b/sdk/ts/core/directory-response.ts
index 212efad7..238bacaa 100644
--- a/sdk/ts/core/directory-response.ts
+++ b/sdk/ts/core/directory-response.ts
@@ -7,6 +7,7 @@
 // different host. TS port of sdk/go/helpers/directory.go.
 
 import { stdBase64, utf8Bytes } from "../src/base64url.ts";
+import type { Ed25519Verify } from "../src/pop.ts";
 import { thumbprint } from "../src/thumbprint.ts";
 import { DirectoryResponseTag } from "../src/wire.ts";
 import { parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
@@ -111,6 +112,13 @@ function headerOf(headers: ResponseHeaders, name: string): string | undefined {
 	return readHeader(headers as Record<string, string | undefined>, name);
 }
 
+/** Options for verifyDirectoryResponse. */
+export interface VerifyDirectoryResponseOptions {
+	/** The Ed25519 verify primitive, the same type verifyAgentBinding takes, so a runtime
+	 * without WebCrypto Ed25519 can supply its own. Defaults to WebCrypto crypto.subtle. */
+	verifyEd25519?: Ed25519Verify;
+}
+
 /**
  * verifyDirectoryResponse checks the response signatures of a fetched key directory and
  * returns the RFC 7638 thumbprints of the listed keys that signed it. `authority` is the
@@ -125,7 +133,7 @@ function headerOf(headers: ResponseHeaders, name: string): string | undefined {
  * must carry tag="http-message-signatures-directory" and alg="ed25519", cover exactly
  * "@authority";req and content-digest, carry created no later than now plus the
  * 300-second skew and expires no earlier than now, and verify under the listed key whose
- * thumbprint its keyid names.
+ * thumbprint its keyid names, through `opts.verifyEd25519` when one is given.
  */
 export async function verifyDirectoryResponse(
 	authority: string,
@@ -133,7 +141,9 @@ export async function verifyDirectoryResponse(
 	body: Uint8Array<ArrayBuffer>,
 	keys: readonly Uint8Array<ArrayBuffer>[],
 	now: number,
+	opts: VerifyDirectoryResponseOptions = {},
 ): Promise<Set<string>> {
+	const verify = opts.verifyEd25519 ?? ed25519Verify;
 	const digest = headerOf(headers, "content-digest");
 	if (digest === undefined || digest === "") {
 		throw new DirectoryResponseError("unsigned", "key directory response carries no Content-Digest");
@@ -152,7 +162,7 @@ export async function verifyDirectoryResponse(
 		const pub = byThumb.get(sig.keyid);
 		if (pub === undefined || !paramsValid(sig, now)) continue;
 		const base = buildSignatureBase(sig.covered, directoryResponseValue(authority, digest), sig.rawInner);
-		if (await ed25519Verify(pub, sig.signature, utf8Bytes(base))) verified.add(sig.keyid);
+		if (await verify(pub, sig.signature, utf8Bytes(base))) verified.add(sig.keyid);
 	}
 	return verified;
 }
diff --git a/sdk/ts/core/identity.ts b/sdk/ts/core/identity.ts
index 6c79b840..dec28e0a 100644
--- a/sdk/ts/core/identity.ts
+++ b/sdk/ts/core/identity.ts
@@ -15,7 +15,7 @@ import type { z } from "zod";
 
 import type { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
 import { encodeBase64Url } from "../src/base64url.ts";
-import { thumbprint } from "../src/thumbprint.ts";
+import { exportRawPublicKey, thumbprint } from "../src/thumbprint.ts";
 import { createSigningTransport, type OutboundSend } from "./signing-transport.ts";
 
 export {
@@ -47,7 +47,7 @@ export async function generateKey(): Promise<{ keyPair: CryptoKeyPair; thumbprin
 		"sign",
 		"verify",
 	])) as CryptoKeyPair;
-	return { keyPair, thumbprint: await thumbprint(await rawPublic(keyPair.publicKey)) };
+	return { keyPair, thumbprint: await thumbprint(await exportRawPublicKey(keyPair.publicKey)) };
 }
 
 /**
@@ -76,7 +76,7 @@ export async function directoryDocument(
 				crv: "Ed25519",
 				alg: "EdDSA",
 				use: "sig",
-				x: encodeBase64Url(await rawPublic(key)),
+				x: encodeBase64Url(await exportRawPublicKey(key)),
 				not_before: notBefore,
 				not_after: notAfter,
 			})),
@@ -97,11 +97,7 @@ export async function signingTransportFor<R>(
 ): Promise<OutboundSend<R>> {
 	return createSigningTransport(send, {
 		privKey: keyPair.privateKey,
-		keyid: await thumbprint(await rawPublic(keyPair.publicKey)),
+		keyid: await thumbprint(await exportRawPublicKey(keyPair.publicKey)),
 		signatureAgent: directory,
 	});
 }
-
-async function rawPublic(key: CryptoKey): Promise<Uint8Array> {
-	return new Uint8Array(await crypto.subtle.exportKey("raw", key));
-}
diff --git a/sdk/ts/core/sign.ts b/sdk/ts/core/sign.ts
index 3a48e6fd..d384d388 100644
--- a/sdk/ts/core/sign.ts
+++ b/sdk/ts/core/sign.ts
@@ -13,7 +13,7 @@
 import { encodeBase64Url, stdBase64 } from "../src/base64url.ts";
 import { opaqueUrl } from "../src/opaque-url.ts";
 import { AGENT_KEY_HEADER } from "../src/pop.ts";
-import { thumbprint } from "../src/thumbprint.ts";
+import { exportRawPublicKey, thumbprint } from "../src/thumbprint.ts";
 import { SignatureAgentHeader, WBATag } from "../src/wire.ts";
 import { buildSignatureBase, requestComponentValue, signatureInputInner } from "./sign-request.ts";
 import {
@@ -47,9 +47,14 @@ const POP_LABEL = "sig1";
  */
 export type Ed25519SignFn = (message: Uint8Array) => Promise<Uint8Array>;
 
-/** Options for signInbound: the agent's directory, the nonce, and the created/expires
- * window with an injectable clock. */
+/** Options for signInbound: the method, the agent's directory, the nonce, and the
+ * created/expires window with an injectable clock. */
 export interface SignInboundOptions {
+	/** The HTTP method being signed, upper-cased into the base as @method and set on the
+	 * returned Request. Absent or "" means GET (Go PoPOptions.Method). A signed URL is
+	 * read-only in practice, but @method is covered so a proof made for one method cannot
+	 * be lifted onto another. A control byte throws TypeError before anything is signed. */
+	method?: string;
 	/** The https origin of the agent's key directory, the one that publishes the
 	 * presented key. Written as the Signature-Agent member sig1="<origin>" and covered,
 	 * so a generic WBA verifier can resolve the key there. Required: empty throws
@@ -79,6 +84,7 @@ export interface SignInboundOptions {
  * Request is immutable — we clone + set headers, never mutate).
  *
  * The covered set is exactly ("@method" "@target-uri" "signature-agent";key="sig1"),
+ * @method being opts.method upper-cased (GET when unset),
  * the parameters created, expires, keyid, alg, nonce (when set) and tag="web-bot-auth",
  * matching Go helpers.SignAgentBinding byte for byte, so the produced request verifies
  * through verifyAgentBinding unchanged. Throws WebBotAuthError, before signing, for a
@@ -90,9 +96,7 @@ export async function signInbound(
 	url: string,
 	opts: SignInboundOptions,
 ): Promise<Request> {
-	const rawPub = new Uint8Array(
-		await crypto.subtle.exportKey("raw", kp.publicKey),
-	);
+	const rawPub = await exportRawPublicKey(kp.publicKey);
 	const agentId = await thumbprint(rawPub);
 
 	// Source (created, expires) from the injected Window, defaulting to a
@@ -126,6 +130,11 @@ export async function signInbound(
 	if (badAt !== -1) {
 		throw new TypeError(`target URI carries a control byte at byte ${badAt}`);
 	}
+	const method = (opts.method || "GET").toUpperCase();
+	const methodBadAt = new TextEncoder().encode(method).findIndex((b) => b < 0x20 || b === 0x7f);
+	if (methodBadAt !== -1) {
+		throw new TypeError(`method carries a control byte at byte ${methodBadAt}`);
+	}
 
 	const member = signatureAgentMember(POP_LABEL, opts.signatureAgent);
 	const covered = [plain("@method"), plain("@target-uri"), keyed("signature-agent", POP_LABEL)];
@@ -141,7 +150,7 @@ export async function signInbound(
 	const base = buildSignatureBase(
 		covered,
 		requestComponentValue({
-			method: "GET",
+			method,
 			url: target,
 			header: (name) => (name === "signature-agent" ? member : undefined),
 		}),
@@ -159,7 +168,7 @@ export async function signInbound(
 	headers.set("signature-input", `${POP_LABEL}=${inner}`);
 	headers.set("signature", `${POP_LABEL}=:${stdBase64(new Uint8Array(sig))}:`);
 
-	return new Request(target, { method: "GET", headers });
+	return new Request(target, { method, headers });
 }
 
 // checkProofOptions refuses a proof no profile verifier accepts, before anything is
diff --git a/sdk/ts/core/verify-request.ts b/sdk/ts/core/verify-request.ts
index 9a1ca83e..d9961298 100644
--- a/sdk/ts/core/verify-request.ts
+++ b/sdk/ts/core/verify-request.ts
@@ -19,7 +19,7 @@
 
 import { WBATag } from "../src/wire.ts";
 import { parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
-import { stdBase64 } from "../src/base64url.ts";
+import { stdBase64, utf8Bytes } from "../src/base64url.ts";
 import {
 	buildSignatureBase,
 	ComponentUnavailable,
@@ -296,7 +296,7 @@ export async function verifyParsedSignature(
 		if (err instanceof ComponentUnavailable) return refuse(SIGNATURE);
 		throw err;
 	}
-	if (!(await ed25519Verify(pub, sig.signature, new TextEncoder().encode(base)))) return refuse(SIGNATURE);
+	if (!(await ed25519Verify(pub, sig.signature, utf8Bytes(base)))) return refuse(SIGNATURE);
 	return { ok: true, value: { keyid: sig.keyid, directory: directory.value } };
 }
 
diff --git a/sdk/ts/package-lock.json b/sdk/ts/package-lock.json
index b63a15cc..72f0cbfa 100644
--- a/sdk/ts/package-lock.json
+++ b/sdk/ts/package-lock.json
@@ -13,6 +13,7 @@
         "undici": "^6.27.0"
       },
       "devDependencies": {
+        "@cloudflare/workers-types": "5.20261005.1",
         "@types/node": "^26.1.0",
         "typescript": "^6.0.3",
         "vitest": "^2.1.0",
@@ -29,6 +30,13 @@
         }
       }
     },
+    "node_modules/@cloudflare/workers-types": {
+      "version": "5.20261005.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workers-types/-/workers-types-5.20261005.1.tgz",
+      "integrity": "sha512-QQwZY342US72QGHso/H1CSzn9FWe6IoLZ8TsYyoMnvRHHOnucGuKZRDCyOn43HAkkRQqfRHFw8NP1xe1A7Oj8A==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0"
+    },
     "node_modules/@esbuild/aix-ppc64": {
       "version": "0.21.5",
       "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.21.5.tgz",
diff --git a/sdk/ts/package.json b/sdk/ts/package.json
index 3d9bffc6..aee8d585 100644
--- a/sdk/ts/package.json
+++ b/sdk/ts/package.json
@@ -35,11 +35,12 @@
     "./hono": "./hono/middleware.ts",
     "./acceptance": "./src/acceptance.ts",
     "./resolvers": "./resolvers/index.ts",
+    "./resolvers/edge": "./resolvers/edge.ts",
     "./client": "./client/index.ts"
   },
   "scripts": {
-    "typecheck": "tsc -p tsconfig.json --strict --noEmit",
-    "test": "tsc -p tsconfig.json --strict --noEmit && vitest run",
+    "typecheck": "tsc -p tsconfig.json --strict --noEmit && tsc -p tsconfig.workers.json --noEmit",
+    "test": "tsc -p tsconfig.json --strict --noEmit && tsc -p tsconfig.workers.json --noEmit && vitest run",
     "build": "node scripts/build.mjs"
   },
   "dependencies": {
@@ -57,6 +58,7 @@
     }
   },
   "devDependencies": {
+    "@cloudflare/workers-types": "5.20261005.1",
     "@types/node": "^26.1.0",
     "typescript": "^6.0.3",
     "vitest": "^2.1.0",
diff --git a/sdk/ts/resolvers/documents.ts b/sdk/ts/resolvers/documents.ts
index 5474c694..08ab35c7 100644
--- a/sdk/ts/resolvers/documents.ts
+++ b/sdk/ts/resolvers/documents.ts
@@ -25,13 +25,14 @@
 // the response carries no valid signature by is never handed out. A revocation list and
 // the manifest may follow up to five redirects.
 //
-// Every fetch goes through guardedFetchFromEnv by default, the transport the resolvers use
-// for an address another party chose: the dial-time SSRF guard refuses loopback, private
-// and metadata addresses, and the scheme guard refuses anything but https. SKIP_SSRF and
-// ALLOW_INSECURE relax them for a sandbox. A body is capped at 1 MiB and refused, never
-// truncated, past it.
-
-import { createHash, timingSafeEqual } from "node:crypto";
+// Every fetch goes through the transport the caller passes as `fetch`. This module is
+// edge-safe and has no default: the edge entry (resolvers/edge.ts) exports these readers
+// as they are. The Node entry (resolvers/index.ts) defaults the transport to
+// guardedFetchFromEnv, the one the resolvers use for an address another party chose: the
+// dial-time SSRF guard refuses loopback, private and metadata addresses, and the scheme
+// guard refuses anything but https. SKIP_SSRF and ALLOW_INSECURE relax them for a
+// sandbox. That transport caps a body at 1 MiB and refuses it, never truncates it, past
+// the cap.
 
 import { parseWire } from "../../../gen/ts/wire/base.ts";
 import {
@@ -54,7 +55,7 @@ import {
 	ManifestVersionRefused,
 	MediaTypeRefused,
 } from "./errors.ts";
-import { type FetchLike, type Fetched, fetchDocument, guardedFetchFromEnv } from "./http.ts";
+import { decodeUtf8, type FetchLike, type Fetched, fetchDocument } from "./fetch.ts";
 
 /** The media type /.well-known/fora.json is served under. */
 export const MANIFEST_MEDIA_TYPE = "application/json";
@@ -115,8 +116,9 @@ export interface LicenseDocument {
 
 /** How a document reader dials. */
 export interface ReadDocumentOptions {
-	/** The transport. Defaults to guardedFetchFromEnv(), built for the call. */
-	fetch?: FetchLike;
+	/** The transport. Required here; the Node entry's readers default it to
+	 * guardedFetchFromEnv(), built for the call. */
+	fetch: FetchLike;
 	/** Used when a reader builds the URL from a domain. Defaults to https. */
 	scheme?: string;
 }
@@ -138,7 +140,7 @@ export async function fetchManifest(
 	url: string,
 ): Promise<{ text: string; doc: unknown }> {
 	const fetched = await fetchDocument(fetchFn, url);
-	const text = Buffer.from(fetched.body).toString("utf8");
+	const text = decodeUtf8(fetched.body);
 	try {
 		return { text, doc: JSON.parse(text) };
 	} catch (err) {
@@ -223,7 +225,7 @@ export async function fetchRevocationList(
 
 function lenient<T>(fetched: Fetched, schema: { parse(v: unknown): T }, what: string): T {
 	try {
-		return schema.parse(JSON.parse(Buffer.from(fetched.body).toString("utf8")));
+		return schema.parse(JSON.parse(decodeUtf8(fetched.body)));
 	} catch (err) {
 		throw new DirectoryUnavailable(`${what} ${fetched.url}`, { cause: err });
 	}
@@ -262,7 +264,8 @@ export const REVOCATION_LIST: DocumentKind<KeyRevocationList> = {
 	versionGate: false,
 };
 
-const UTF8 = new TextDecoder("utf-8", { fatal: true });
+// ignoreBOM: false is the default, spelled out for the Workers runtime types.
+const UTF8 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: false });
 
 /**
  * accept checks a fetched document as `kind` and parses it, or throws. The checks run in
@@ -300,22 +303,22 @@ export function accept<T>(kind: DocumentKind<T>, fetched: Fetched): Document<T>
 	return { message: parsed.data, mediaType: fetched.mediaType, url: fetched.url, body: fetched.body };
 }
 
-const DIGEST_METHODS: Readonly<Record<string, string>> = { sha256: "sha256", sha384: "sha384", sha512: "sha512" };
+// The WebCrypto digest each uri_digest method names.
+const DIGEST_METHODS: Readonly<Record<string, string>> = { sha256: "SHA-256", sha384: "SHA-384", sha512: "SHA-512" };
 
 /** verifyDigest hashes the fetched bytes with `uriDigest`'s method and compares, or
- * throws. Pure, and replayed by the license-digest corpus. `uriDigest` has passed the
- * strict License check by the time a reader calls this, so its method is one of the
- * three the contract admits; a value that is not throws a plain Error. */
-export function verifyDigest(uriDigest: string, fetched: Fetched): LicenseDocument {
+ * throws. Pure apart from the WebCrypto digest, and replayed by the license-digest
+ * corpus. `uriDigest` has passed the strict License check by the time a reader calls
+ * this, so its method is one of the three the contract admits; a value that is not
+ * throws a plain Error. */
+export async function verifyDigest(uriDigest: string, fetched: Fetched): Promise<LicenseDocument> {
 	const colon = uriDigest.indexOf(":");
 	const method = colon < 0 ? uriDigest : uriDigest.slice(0, colon);
 	const expected = colon < 0 ? "" : uriDigest.slice(colon + 1);
 	const algorithm = DIGEST_METHODS[method];
 	if (algorithm === undefined) throw new Error(`uri_digest names no supported method: ${JSON.stringify(method)}`);
-	const actual = createHash(algorithm).update(fetched.body).digest("hex");
-	const a = Buffer.from(actual);
-	const b = Buffer.from(expected);
-	if (a.length !== b.length || !timingSafeEqual(a, b)) {
+	const actual = hex(new Uint8Array(await crypto.subtle.digest(algorithm, fetched.body as Uint8Array<ArrayBuffer>)));
+	if (!constantTimeEqual(actual, expected)) {
 		throw new DigestMismatch(
 			`document at ${fetched.url} hashes to ${method}:${actual}, the license pins ${uriDigest}`,
 		);
@@ -323,6 +326,21 @@ export function verifyDigest(uriDigest: string, fetched: Fetched): LicenseDocume
 	return { body: fetched.body, digest: `${method}:${actual}`, mediaType: fetched.mediaType, url: fetched.url };
 }
 
+// hex renders bytes as lowercase hexadecimal, the form uri_digest carries.
+function hex(bytes: Uint8Array): string {
+	return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+// constantTimeEqual compares two strings in time that depends only on their lengths, not
+// on where they first differ. Strings of different length are unequal at once: the
+// length of a digest is public, fixed by its method.
+function constantTimeEqual(a: string, b: string): boolean {
+	if (a.length !== b.length) return false;
+	let diff = 0;
+	for (let i = 0; i < a.length; i += 1) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+	return diff === 0;
+}
+
 // --- the public readers ----------------------------------------------------------------
 
 /**
@@ -339,10 +357,10 @@ export function verifyDigest(uriDigest: string, fetched: Fetched): LicenseDocume
  */
 export async function readManifest(
 	domain: string,
-	opts: ReadDocumentOptions = {},
+	opts: ReadDocumentOptions,
 ): Promise<Document<WellKnownManifest>> {
 	if (!isBareHost(domain)) throw invalidHost(domain, "not a bare host");
-	const fetched = await fetchDocument(transport(opts), manifestURL(opts.scheme ?? "", domain));
+	const fetched = await fetchDocument(opts.fetch, manifestURL(opts.scheme ?? "", domain));
 	return accept(MANIFEST, fetched);
 }
 
@@ -362,14 +380,14 @@ export async function readManifest(
  */
 export async function readWBADirectory(
 	urlOrDomain: string,
-	opts: ReadDocumentOptions = {},
+	opts: ReadDocumentOptions,
 ): Promise<Document<WBAFile>> {
 	let url = urlOrDomain;
 	if (!urlOrDomain.includes("://")) {
 		if (!isBareHost(urlOrDomain)) throw invalidHost(urlOrDomain, "neither a URL nor a bare host");
 		url = wbaDirectoryURL(opts.scheme ?? "", urlOrDomain);
 	}
-	const fetched = await fetchDocument(transport(opts), url, { noRedirect: true });
+	const fetched = await fetchDocument(opts.fetch, url, { noRedirect: true });
 	const doc = accept(WBA_DIRECTORY, fetched);
 	let signed: WBAFile;
 	try {
@@ -396,9 +414,9 @@ export async function readWBADirectory(
  */
 export async function readRevocationList(
 	url: string,
-	opts: ReadDocumentOptions = {},
+	opts: ReadDocumentOptions,
 ): Promise<Document<KeyRevocationList>> {
-	return accept(REVOCATION_LIST, await fetchDocument(transport(opts), url));
+	return accept(REVOCATION_LIST, await fetchDocument(opts.fetch, url));
 }
 
 /**
@@ -419,17 +437,13 @@ export async function readRevocationList(
  */
 export async function readLicenseDocument(
 	license: License,
-	opts: ReadDocumentOptions = {},
+	opts: ReadDocumentOptions,
 ): Promise<LicenseDocument> {
 	if (license.uri === undefined || license.uri === "") {
 		throw new Error("license carries no uri: there is no document to read");
 	}
 	// Through JSON, as it travels: a member set to undefined is an absent member.
 	checkStrict("fora.v1.License", JSON.parse(JSON.stringify(license)));
-	const fetched = await fetchDocument(transport(opts), license.uri);
+	const fetched = await fetchDocument(opts.fetch, license.uri);
 	return verifyDigest(license.uri_digest ?? "", fetched);
 }
-
-function transport(opts: ReadDocumentOptions): FetchLike {
-	return opts.fetch ?? guardedFetchFromEnv();
-}
diff --git a/sdk/ts/resolvers/edge.ts b/sdk/ts/resolvers/edge.ts
new file mode 100644
index 00000000..76ec2906
--- /dev/null
+++ b/sdk/ts/resolvers/edge.ts
@@ -0,0 +1,84 @@
+// The edge-safe entry of the FORA SDK resolver faces (package export
+// "./resolvers/edge"): every resolver and document reader, with nothing Node-only in its
+// import graph — no undici, no node: module, no Buffer or process. It is the entry a
+// Cloudflare Workers, Fastly Compute or Deno runtime imports.
+//
+// Every fetching face takes the transport as a REQUIRED `fetch` option (the FetchLike
+// shape: the runtime's own fetch, or a wrapper around it). There is no default: the
+// SSRF-guarded default transport the Node entry ("./resolvers") supplies dials through
+// undici with DNS pinning, which an edge runtime does not have. An edge runtime that
+// fetches an address another party chose (a Signature-Agent directory, an Exchange
+// domain) owns the equivalent guard; allowedScheme and blockedAddress are exported for it.
+// tests/edge-imports.guard.test.ts walks this module's import graph and fails on any
+// Node-only import, and tsconfig.workers.json typechecks it against the Workers types.
+
+export {
+	type Document,
+	type KeyRevocationList,
+	type License,
+	type LicenseDocument,
+	MANIFEST_MEDIA_TYPE,
+	type ReadDocumentOptions,
+	readLicenseDocument,
+	readManifest,
+	readRevocationList,
+	readWBADirectory,
+	WBA_DIRECTORY_MEDIA_TYPE,
+	type WBAFile,
+	type WellKnownManifest,
+} from "./documents.ts";
+export {
+	DigestMismatch,
+	DirectoryResponseUnsigned,
+	DirectoryUnavailable,
+	EndpointRefused,
+	ExchangeNotPermitted,
+	KeyExpired,
+	KeyRevoked,
+	ManifestNotExchange,
+	ManifestUnusable,
+	ManifestVersionRefused,
+	MediaTypeRefused,
+	NoEndpoint,
+	ResolverError,
+	RevocationUnevaluated,
+	UnknownKey,
+} from "./errors.ts";
+export type { FetchInit, FetchLike, FetchResponse } from "./fetch.ts";
+export {
+	type CachedOfferKeyResolver,
+	type CachedOfferKeyResolverOptions,
+	clampOfferKeyExpiry,
+	createCachedOfferKeyResolver,
+	createWBAOfferDirectoryFetch,
+	type OfferDirectoryFetch,
+	type WBAOfferDirectoryFetchOptions,
+} from "./offer-key-cache.ts";
+export {
+	createWellKnownRequirementsReader,
+	type RegistrationRequirements,
+	type WellKnownRequirementsOptions,
+	type WellKnownRequirementsReader,
+} from "./registration-requirements.ts";
+export { StrictViolation } from "../src/strict.ts";
+export { allowedScheme, blockedAddress } from "./ssrf.ts";
+export { createStaticKeyResolver, type StaticKeyResolver } from "./static.ts";
+export {
+	activeEd25519Key,
+	activeEd25519KeyScreened,
+	activeEd25519KeyWithExpiry,
+	activeEd25519KeyWithExpiryScreened,
+	createWBAKeyResolver,
+	WBA_DIRECTORY_PATH,
+	type WBAKeyResolver,
+	type WBAKeyResolverOptions,
+	wbaDirectoryURL,
+} from "./wba.ts";
+export {
+	type EndpointOptions,
+	createWellKnownEndpointResolver,
+	createWellKnownKeyResolver,
+	type WellKnownEndpointResolver,
+	type WellKnownKeyResolver,
+	type WellKnownOptions,
+} from "./wellknown.ts";
diff --git a/sdk/ts/resolvers/fetch.ts b/sdk/ts/resolvers/fetch.ts
new file mode 100644
index 00000000..a96b3d59
--- /dev/null
+++ b/sdk/ts/resolvers/fetch.ts
@@ -0,0 +1,141 @@
+// The transport contract the fetching resolvers share, and the reads built on it: the
+// injected FetchLike, the response shape it answers with, and the one GET every document
+// read goes through. Edge-safe: nothing here imports a Node module or touches a Node
+// global, so the edge entry (resolvers/edge.ts) and a Workers, Fastly or Deno runtime can
+// use it with any fetch-compatible callable. The Node-only transports that default it, the
+// undici client with the dial-time SSRF guard, live in resolvers/http.ts.
+
+import { DirectoryUnavailable } from "./errors.ts";
+
+// Lenient UTF-8, as Node's Buffer#toString decodes: an invalid sequence becomes U+FFFD
+// and a leading byte-order mark is kept, so a body that starts with one still fails
+// JSON.parse rather than being silently accepted.
+const LENIENT_UTF8 = new TextDecoder("utf-8", { fatal: false, ignoreBOM: true });
+
+/** decodeUtf8 decodes `bytes` as lenient UTF-8, byte-order mark kept. */
+export function decodeUtf8(bytes: Uint8Array): string {
+	return LENIENT_UTF8.decode(bytes);
+}
+
+/** The minimal response shape the resolvers read — a structural subset of the
+ * WHATWG `Response`, so the global `fetch` (and undici's) satisfies it.
+ *
+ * `headers` and `arrayBuffer` are optional so a hand-written FetchLike that predates
+ * them keeps working. The document readers use both: a document whose response
+ * carries no `headers` has no media type, which the manifest and WBA readers refuse,
+ * and a body read without `arrayBuffer` is the UTF-8 encoding of `text()`, which is
+ * not the served bytes for a license document that is not UTF-8 text. */
+export interface FetchResponse {
+	status: number;
+	text(): Promise<string>;
+	headers?: { get(name: string): string | null };
+	arrayBuffer?(): Promise<ArrayBuffer>;
+	/** Whether the response is the end of a followed redirect, as a WHATWG Response
+	 * reports it. A key-directory read refuses one. */
+	redirected?: boolean;
+}
+
+/** What a read asks of the transport beyond the URL: a WHATWG RequestInit subset.
+ * `redirect: "manual"` asks it not to follow a redirect and to answer the 3xx itself;
+ * a key-directory read passes it, because a directory is never fetched through a
+ * redirect. The shipped transports honour it, and the global fetch reads the same
+ * member. */
+export interface FetchInit {
+	redirect?: "follow" | "manual";
+}
+
+/** An injected HTTP GET. The edge entry (@fora-protocol/sdk/resolvers/edge) has no
+ * default and every reader there takes one; the Node entry
+ * (@fora-protocol/sdk/resolvers) defaults to its SSRF-guarded undici transport. A
+ * FetchLike that ignores `init` still cannot hand a key directory over a redirect: the
+ * read refuses a 3xx and a response marked `redirected`. */
+export type FetchLike = (url: string, init?: FetchInit) => Promise<FetchResponse>;
+
+/** One document as it was served: its bytes, the media type it was labelled with, and
+ * its response headers. */
+export interface Fetched {
+	url: string;
+	body: Uint8Array;
+	/** The Content-Type essence (type/subtype), lowercased, parameters stripped;
+	 * undefined when the response carried none. */
+	mediaType: string | undefined;
+	/** A response header's value, or null when absent. A key directory's response
+	 * signatures are read through it. */
+	header?: (name: string) => string | null;
+}
+
+/** The type/subtype of a Content-Type value, lowercased, parameters dropped. */
+export function mediaTypeEssence(header: string | null | undefined): string | undefined {
+	if (header === null || header === undefined) return undefined;
+	const essence = (header.split(";", 1)[0] ?? "").trim().toLowerCase();
+	return essence === "" ? undefined : essence;
+}
+
+/** GET `url` and return the body, its media type and its headers. A transport failure
+ * or a non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
+ * composite relies on to distinguish an outage from an unknown key. A blocked SSRF
+ * target and a body past the cap are transport failures and surface the same way
+ * (never a valid empty doc). The one GET every document read shares.
+ *
+ * `noRedirect` is set for a key directory, which is never fetched through a redirect:
+ * its address is the origin its signer committed to, and a redirect would hand key
+ * lookup to another one. The transport is asked not to follow, and a 3xx or a response
+ * marked redirected fails the read. A revocation list and the manifest follow the
+ * transport's bounded redirect chain. */
+export async function fetchDocument(
+	fetchFn: FetchLike,
+	url: string,
+	opts: { noRedirect?: boolean } = {},
+): Promise<Fetched> {
+	let resp: FetchResponse;
+	let body: Uint8Array;
+	try {
+		resp = opts.noRedirect === true ? await fetchFn(url, { redirect: "manual" }) : await fetchFn(url);
+		if (opts.noRedirect === true && (resp.redirected === true || (resp.status >= 300 && resp.status < 400))) {
+			throw new DirectoryUnavailable(`a key directory is never fetched through a redirect: ${url}`);
+		}
+		if (resp.status !== 200) {
+			throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
+		}
+		body =
+			resp.arrayBuffer !== undefined
+				? new Uint8Array(await resp.arrayBuffer())
+				: new TextEncoder().encode(await resp.text());
+	} catch (err) {
+		if (err instanceof DirectoryUnavailable) throw err;
+		throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
+	}
+	const headers = resp.headers;
+	return {
+		url,
+		body,
+		mediaType: mediaTypeEssence(headers?.get("content-type")),
+		header: (name) => headers?.get(name) ?? null,
+	};
+}
+
+/** GET `url` and return the body text: fetchDocument without the media type, for a
+ * reader that has no use for it. */
+export async function fetchStrict(
+	fetchFn: FetchLike,
+	url: string,
+): Promise<string> {
+	return decodeUtf8((await fetchDocument(fetchFn, url)).body);
+}
+
+/** Best-effort GET: returns the body text on 200, or `undefined` on any
+ * transport/status failure. The revocation refresh uses this so a fetch blip
+ * leaves the prior snapshot in place (Go: best-effort refresh) rather than
+ * propagating — a stale-but-present snapshot is safer than dropping revocations. */
+export async function fetchSoft(
+	fetchFn: FetchLike,
+	url: string,
+): Promise<string | undefined> {
+	try {
+		const resp = await fetchFn(url);
+		if (resp.status !== 200) return undefined;
+		return await resp.text();
+	} catch {
+		return undefined;
+	}
+}
diff --git a/sdk/ts/resolvers/http.ts b/sdk/ts/resolvers/http.ts
index 0922f8a1..f9686f31 100644
--- a/sdk/ts/resolvers/http.ts
+++ b/sdk/ts/resolvers/http.ts
@@ -1,11 +1,13 @@
-// The one HTTP transport seam the fetching resolvers share. Transport-neutral
+// The Node-only HTTP transports the fetching resolvers default to. Transport-neutral
 // per the SDK dependency policy (the resolvers accept an injected fetch-compatible
-// callable) but the DEFAULT transport now runs on a maintained HTTP client
-// (undici) instead of a hand-rolled node:http request. undici owns the response
-// state machine — status, redirects, 1xx, decompression — so this module owns
-// only the SSRF guard (an injectable connection-level connector) and the
-// fail-closed status→body taxonomy. Integration tests / on-prem deployments that
-// must reach a private origin inject their own FetchLike (the escape hatch).
+// callable, whose contract is in fetch.ts) but the DEFAULT transport runs on a
+// maintained HTTP client (undici) instead of a hand-rolled node:http request. undici
+// owns the response state machine — status, redirects, 1xx, decompression — so this
+// module owns only the SSRF guard (an injectable connection-level connector) and the
+// bounded body read. It imports undici and node:dns, so only the Node entry
+// (resolvers/index.ts) and the client reach it; the edge entry (resolvers/edge.ts) never
+// does. Integration tests / on-prem deployments that must reach a private origin inject
+// their own FetchLike (the escape hatch).
 
 import { lookup as dnsLookup } from "node:dns/promises";
 
@@ -17,40 +19,21 @@ import {
 	request as undiciRequest,
 } from "undici";
 
-import { DirectoryUnavailable } from "./errors.ts";
+import type { FetchLike, FetchResponse } from "./fetch.ts";
 import { allowedScheme, blockedAddress, MAX_REDIRECTS } from "./ssrf.ts";
 
-/** The minimal response shape the resolvers read — a structural subset of the
- * WHATWG `Response`, so the global `fetch` (and undici's) satisfies it.
- *
- * `headers` and `arrayBuffer` are optional so a hand-written FetchLike that predates
- * them keeps working. The document readers use both: a document whose response
- * carries no `headers` has no media type, which the manifest and WBA readers refuse,
- * and a body read without `arrayBuffer` is the UTF-8 encoding of `text()`, which is
- * not the served bytes for a license document that is not UTF-8 text. */
-export interface FetchResponse {
-	status: number;
-	text(): Promise<string>;
-	headers?: { get(name: string): string | null };
-	arrayBuffer?(): Promise<ArrayBuffer>;
-	/** Whether the response is the end of a followed redirect, as a WHATWG Response
-	 * reports it. A key-directory read refuses one. */
-	redirected?: boolean;
-}
-
-/** What a read asks of the transport beyond the URL: a WHATWG RequestInit subset.
- * `redirect: "manual"` asks it not to follow a redirect and to answer the 3xx itself;
- * a key-directory read passes it, because a directory is never fetched through a
- * redirect. The shipped transports honour it, and the global fetch reads the same
- * member. */
-export interface FetchInit {
-	redirect?: "follow" | "manual";
-}
-
-/** An injected HTTP GET. Defaults to the SSRF-guarded transport (guardedFetch). A
- * FetchLike that ignores `init` still cannot hand a key directory over a redirect: the
- * read refuses a 3xx and a response marked `redirected`. */
-export type FetchLike = (url: string, init?: FetchInit) => Promise<FetchResponse>;
+// The transport contract and the document GET are edge-safe and live in fetch.ts; they
+// are re-exported here so every import of them through this module keeps working.
+export {
+	type FetchInit,
+	type FetchLike,
+	type FetchResponse,
+	type Fetched,
+	fetchDocument,
+	fetchSoft,
+	fetchStrict,
+	mediaTypeEssence,
+} from "./fetch.ts";
 
 /** Bounds the guarded default transport's GET so a slow origin cannot pin a
  * Resolve call or the poller (Go: defaultWBAHTTPTimeout). */
@@ -345,91 +328,3 @@ export const defaultFetch: FetchLike = async (url, init) => {
 	return boundedResponse(r.status, body, (name) => r.headers.get(name));
 };
 
-/** One document as it was served: its bytes, the media type it was labelled with, and
- * its response headers. */
-export interface Fetched {
-	url: string;
-	body: Uint8Array;
-	/** The Content-Type essence (type/subtype), lowercased, parameters stripped;
-	 * undefined when the response carried none. */
-	mediaType: string | undefined;
-	/** A response header's value, or null when absent. A key directory's response
-	 * signatures are read through it. */
-	header?: (name: string) => string | null;
-}
-
-/** The type/subtype of a Content-Type value, lowercased, parameters dropped. */
-export function mediaTypeEssence(header: string | null | undefined): string | undefined {
-	if (header === null || header === undefined) return undefined;
-	const essence = (header.split(";", 1)[0] ?? "").trim().toLowerCase();
-	return essence === "" ? undefined : essence;
-}
-
-/** GET `url` and return the body, its media type and its headers. A transport failure
- * or a non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
- * composite relies on to distinguish an outage from an unknown key. A blocked SSRF
- * target and a body past the cap are transport failures and surface the same way
- * (never a valid empty doc). The one GET every document read shares.
- *
- * `noRedirect` is set for a key directory, which is never fetched through a redirect:
- * its address is the origin its signer committed to, and a redirect would hand key
- * lookup to another one. The transport is asked not to follow, and a 3xx or a response
- * marked redirected fails the read. A revocation list and the manifest follow the
- * transport's bounded redirect chain. */
-export async function fetchDocument(
-	fetchFn: FetchLike,
-	url: string,
-	opts: { noRedirect?: boolean } = {},
-): Promise<Fetched> {
-	let resp: FetchResponse;
-	let body: Uint8Array;
-	try {
-		resp = opts.noRedirect === true ? await fetchFn(url, { redirect: "manual" }) : await fetchFn(url);
-		if (opts.noRedirect === true && (resp.redirected === true || (resp.status >= 300 && resp.status < 400))) {
-			throw new DirectoryUnavailable(`a key directory is never fetched through a redirect: ${url}`);
-		}
-		if (resp.status !== 200) {
-			throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
-		}
-		body =
-			resp.arrayBuffer !== undefined
-				? new Uint8Array(await resp.arrayBuffer())
-				: new TextEncoder().encode(await resp.text());
-	} catch (err) {
-		if (err instanceof DirectoryUnavailable) throw err;
-		throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
-	}
-	const headers = resp.headers;
-	return {
-		url,
-		body,
-		mediaType: mediaTypeEssence(headers?.get("content-type")),
-		header: (name) => headers?.get(name) ?? null,
-	};
-}
-
-/** GET `url` and return the body text: fetchDocument without the media type, for a
- * reader that has no use for it. */
-export async function fetchStrict(
-	fetchFn: FetchLike,
-	url: string,
-): Promise<string> {
-	return Buffer.from((await fetchDocument(fetchFn, url)).body).toString("utf8");
-}
-
-/** Best-effort GET: returns the body text on 200, or `undefined` on any
- * transport/status failure. The revocation refresh uses this so a fetch blip
- * leaves the prior snapshot in place (Go: best-effort refresh) rather than
- * propagating — a stale-but-present snapshot is safer than dropping revocations. */
-export async function fetchSoft(
-	fetchFn: FetchLike,
-	url: string,
-): Promise<string | undefined> {
-	try {
-		const resp = await fetchFn(url);
-		if (resp.status !== 200) return undefined;
-		return await resp.text();
-	} catch {
-		return undefined;
-	}
-}
diff --git a/sdk/ts/resolvers/index.ts b/sdk/ts/resolvers/index.ts
index 6296412e..ef8fa061 100644
--- a/sdk/ts/resolvers/index.ts
+++ b/sdk/ts/resolvers/index.ts
@@ -1,78 +1,32 @@
-// Public surface of the FORA SDK resolver faces (ADR-020 §4). These are the FIRST
-// IO in the TS SDK, so they live OUTSIDE the IO-free core/src tree (exported via
-// package.json `exports`) to keep the transport-neutrality invariant on core
-// green. Four faces port the Go oracle: a static named map, a well-known JWKS
-// key resolver, a host-keyed well-known endpoint resolver, and the WBA
-// identity-directory resolver + revocation poller. The typed error classes
+// Public surface of the FORA SDK resolver faces (ADR-020 §4), the Node entry (package
+// export "./resolvers"). These are the FIRST IO in the TS SDK, so they live OUTSIDE the
+// IO-free core/src tree (exported via package.json `exports`) to keep the
+// transport-neutrality invariant on core green. Four faces port the Go oracle: a static
+// named map, a well-known JWKS key resolver, a host-keyed well-known endpoint resolver,
+// and the WBA identity-directory resolver + revocation poller. The typed error classes
 // preserve the oracle's errors.Is-DISTINCT fail-closed taxonomy.
+//
+// This entry is the edge-safe one (edge.ts) with each fetching face's transport
+// defaulted (node-defaults.ts), plus the Node-only transports themselves: the
+// SSRF-guarded undici client and its env-driven factory. An edge runtime imports
+// "./resolvers/edge" instead, and passes its own fetch.
 
+export * from "./edge.ts";
 export {
-	type Document,
-	type KeyRevocationList,
-	type License,
-	type LicenseDocument,
-	MANIFEST_MEDIA_TYPE,
+	createWBAKeyResolver,
+	createWBAOfferDirectoryFetch,
+	createWellKnownEndpointResolver,
+	createWellKnownKeyResolver,
+	createWellKnownRequirementsReader,
+	type EndpointOptions,
 	type ReadDocumentOptions,
 	readLicenseDocument,
 	readManifest,
 	readRevocationList,
 	readWBADirectory,
-	WBA_DIRECTORY_MEDIA_TYPE,
-	type WBAFile,
-	type WellKnownManifest,
-} from "./documents.ts";
-export {
-	DigestMismatch,
-	DirectoryResponseUnsigned,
-	DirectoryUnavailable,
-	EndpointRefused,
-	ExchangeNotPermitted,
-	KeyExpired,
-	KeyRevoked,
-	ManifestNotExchange,
-	ManifestUnusable,
-	ManifestVersionRefused,
-	MediaTypeRefused,
-	NoEndpoint,
-	ResolverError,
-	RevocationUnevaluated,
-	UnknownKey,
-} from "./errors.ts";
-export type { FetchInit, FetchLike, FetchResponse } from "./http.ts";
-export { guardedFetchFromEnv, SsrfBlockedError, ssrfGuard } from "./http.ts";
-export {
-	type CachedOfferKeyResolver,
-	type CachedOfferKeyResolverOptions,
-	clampOfferKeyExpiry,
-	createCachedOfferKeyResolver,
-	createWBAOfferDirectoryFetch,
-	type OfferDirectoryFetch,
-} from "./offer-key-cache.ts";
-export {
-	createWellKnownRequirementsReader,
-	type RegistrationRequirements,
-	type WellKnownRequirementsOptions,
-	type WellKnownRequirementsReader,
-} from "./registration-requirements.ts";
-export { StrictViolation } from "../src/strict.ts";
-export { allowedScheme, blockedAddress } from "./ssrf.ts";
-export { createStaticKeyResolver, type StaticKeyResolver } from "./static.ts";
-export {
-	activeEd25519Key,
-	activeEd25519KeyScreened,
-	activeEd25519KeyWithExpiry,
-	activeEd25519KeyWithExpiryScreened,
-	createWBAKeyResolver,
-	WBA_DIRECTORY_PATH,
-	type WBAKeyResolver,
 	type WBAKeyResolverOptions,
-	wbaDirectoryURL,
-} from "./wba.ts";
-export {
-	type EndpointOptions,
-	createWellKnownEndpointResolver,
-	createWellKnownKeyResolver,
-	type WellKnownEndpointResolver,
-	type WellKnownKeyResolver,
+	type WBAOfferDirectoryFetchOptions,
 	type WellKnownOptions,
-} from "./wellknown.ts";
+	type WellKnownRequirementsOptions,
+} from "./node-defaults.ts";
+export { guardedFetchFromEnv, SsrfBlockedError, ssrfGuard } from "./http.ts";
diff --git a/sdk/ts/resolvers/node-defaults.ts b/sdk/ts/resolvers/node-defaults.ts
new file mode 100644
index 00000000..90ba00f3
--- /dev/null
+++ b/sdk/ts/resolvers/node-defaults.ts
@@ -0,0 +1,117 @@
+// The Node entry's resolver factories and document readers: the edge-safe ones, each with
+// the transport defaulted the way it always has been. The edge-safe modules take `fetch`
+// as a required option and import nothing Node-only; this module is the one place a
+// default transport is chosen, so the Node-only undici client stays out of the edge
+// entry's import graph.
+//
+// Which default a resolver takes follows its URL's PROVENANCE (see defaultFetch in
+// http.ts): a fixed, operator-chosen address takes the plain transport, a host another
+// party named takes a guarded one.
+
+import * as documents from "./documents.ts";
+import type { FetchLike } from "./fetch.ts";
+import { defaultFetch, guardedFetch, guardedFetchFromEnv } from "./http.ts";
+import * as offerKeyCache from "./offer-key-cache.ts";
+import * as requirements from "./registration-requirements.ts";
+import * as wba from "./wba.ts";
+import * as wellknown from "./wellknown.ts";
+
+/** How a document reader dials. `fetch` defaults to guardedFetchFromEnv(), built for
+ * the call. */
+export type ReadDocumentOptions = Omit<documents.ReadDocumentOptions, "fetch"> & { fetch?: FetchLike };
+
+/** Options for the WBA resolver. `fetch` defaults to the SSRF-guarded transport: the
+ * directory host comes from the request-supplied Signature-Agent and is fetched
+ * pre-auth (matches the Go oracle). */
+export type WBAKeyResolverOptions = Omit<wba.WBAKeyResolverOptions, "fetch"> & { fetch?: FetchLike };
+
+/** Options for the well-known fetching resolvers. `fetch` defaults to the plain
+ * transport (defaultFetch). */
+export type WellKnownOptions = Omit<wellknown.WellKnownOptions, "fetch"> & { fetch?: FetchLike };
+
+/** Options for the endpoint resolver. `fetch` defaults to the plain transport. */
+export type EndpointOptions = Omit<wellknown.EndpointOptions, "fetch"> & { fetch?: FetchLike };
+
+/** Options for the registration-requirements reader. `fetch` defaults to the
+ * SSRF-guarded guardedFetchFromEnv(), built once per reader. */
+export type WellKnownRequirementsOptions = Omit<requirements.WellKnownRequirementsOptions, "fetch"> & {
+	fetch?: FetchLike;
+};
+
+/** Options for createWBAOfferDirectoryFetch. `fetch` defaults to the SSRF-guarded
+ * guardedFetchFromEnv(), built once per fetcher. */
+export type WBAOfferDirectoryFetchOptions = Omit<offerKeyCache.WBAOfferDirectoryFetchOptions, "fetch"> & {
+	fetch?: FetchLike;
+};
+
+/** documents.readManifest, the transport defaulted to guardedFetchFromEnv(). */
+export function readManifest(
+	domain: string,
+	opts: ReadDocumentOptions = {},
+): Promise<documents.Document<documents.WellKnownManifest>> {
+	return documents.readManifest(domain, { ...opts, fetch: opts.fetch ?? guardedFetchFromEnv() });
+}
+
+/** documents.readWBADirectory, the transport defaulted to guardedFetchFromEnv(). */
+export function readWBADirectory(
+	urlOrDomain: string,
+	opts: ReadDocumentOptions = {},
+): Promise<documents.Document<documents.WBAFile>> {
+	return documents.readWBADirectory(urlOrDomain, { ...opts, fetch: opts.fetch ?? guardedFetchFromEnv() });
+}
+
+/** documents.readRevocationList, the transport defaulted to guardedFetchFromEnv(). */
+export function readRevocationList(
+	url: string,
+	opts: ReadDocumentOptions = {},
+): Promise<documents.Document<documents.KeyRevocationList>> {
+	return documents.readRevocationList(url, { ...opts, fetch: opts.fetch ?? guardedFetchFromEnv() });
+}
+
+/** documents.readLicenseDocument, the transport defaulted to guardedFetchFromEnv(). */
+export function readLicenseDocument(
+	license: documents.License,
+	opts: ReadDocumentOptions = {},
+): Promise<documents.LicenseDocument> {
+	return documents.readLicenseDocument(license, { ...opts, fetch: opts.fetch ?? guardedFetchFromEnv() });
+}
+
+/** wba.createWBAKeyResolver, the transport defaulted to the SSRF-guarded one. */
+export function createWBAKeyResolver(opts: WBAKeyResolverOptions = {}): wba.WBAKeyResolver {
+	return wba.createWBAKeyResolver({ ...opts, fetch: opts.fetch ?? guardedFetch });
+}
+
+/** wellknown.createWellKnownKeyResolver, the transport defaulted to the plain one: the
+ * JWKS URL is fixed and operator-chosen. */
+export function createWellKnownKeyResolver(
+	url: string,
+	opts: WellKnownOptions = {},
+): wellknown.WellKnownKeyResolver {
+	return wellknown.createWellKnownKeyResolver(url, { ...opts, fetch: opts.fetch ?? defaultFetch });
+}
+
+/** wellknown.createWellKnownEndpointResolver, the transport defaulted to the plain one.
+ * Its host is an Offer.exchange domain, so the provenance rule says guarded; Go already
+ * guards it, and this default has not caught up. */
+export function createWellKnownEndpointResolver(opts: EndpointOptions = {}): wellknown.WellKnownEndpointResolver {
+	return wellknown.createWellKnownEndpointResolver({ ...opts, fetch: opts.fetch ?? defaultFetch });
+}
+
+/** requirements.createWellKnownRequirementsReader, the transport defaulted to
+ * guardedFetchFromEnv(). */
+export function createWellKnownRequirementsReader(
+	opts: WellKnownRequirementsOptions = {},
+): requirements.WellKnownRequirementsReader {
+	// Built ONCE per reader, never per read: guardedFetchFromEnv constructs a
+	// dispatcher, so a per-read default would trade an unguarded dial for a socket
+	// leak.
+	return requirements.createWellKnownRequirementsReader({ ...opts, fetch: opts.fetch ?? guardedFetchFromEnv() });
+}
+
+/** offerKeyCache.createWBAOfferDirectoryFetch, the transport defaulted to
+ * guardedFetchFromEnv(). */
+export function createWBAOfferDirectoryFetch(
+	opts: WBAOfferDirectoryFetchOptions = {},
+): offerKeyCache.OfferDirectoryFetch {
+	return offerKeyCache.createWBAOfferDirectoryFetch({ ...opts, fetch: opts.fetch ?? guardedFetchFromEnv() });
+}
diff --git a/sdk/ts/resolvers/offer-key-cache.ts b/sdk/ts/resolvers/offer-key-cache.ts
index facd0612..2b5cde19 100644
--- a/sdk/ts/resolvers/offer-key-cache.ts
+++ b/sdk/ts/resolvers/offer-key-cache.ts
@@ -29,7 +29,7 @@
 import type { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
 import type { OfferKeyResolver } from "../core/verifier.ts";
 import { fetchWBAFile, wbaDirectoryURL } from "./documents.ts";
-import { type FetchLike, guardedFetchFromEnv } from "./http.ts";
+import type { FetchLike } from "./fetch.ts";
 import { activeEd25519KeyWithExpiryScreened } from "./wba.ts";
 
 /** A parsed WBA identity directory — the shape the injected fetch seam returns. */
@@ -221,6 +221,14 @@ function joinDirectoryHost(domain: string, port: string): string {
 	return `${domain}:${port}`;
 }
 
+/** Wires a {@link createWBAOfferDirectoryFetch}: the transport, and the scheme and
+ * port the directory URL is built with (empty scheme → https, empty port → none). */
+export interface WBAOfferDirectoryFetchOptions {
+	fetch: FetchLike;
+	scheme?: string;
+	port?: string;
+}
+
 /**
  * createWBAOfferDirectoryFetch returns the default {@link OfferDirectoryFetch}: it
  * GETs {scheme}://{domain}[:{port}]{WBA_DIRECTORY_PATH} (built by the shared
@@ -229,16 +237,15 @@ function joinDirectoryHost(domain: string, port: string): string {
  * returning `undefined` on ANY transport/status/media-type/signature/decode failure so
  * the default fetcher itself upholds the undefined-not-throw seam contract.
  *
- * The default transport is SSRF-guarded (guardedFetchFromEnv): the exchange domain
- * is signature-covered but attacker-influenceable and the fetch runs before the
- * offer signature is checked, so an unguarded default would be a pre-auth SSRF
- * lever (mirrors Go NewWBADirectoryFetcher). Tests inject a loopback fetch; apps
- * may inject a fetch wrapping their shared well-known client.
+ * `opts.fetch` is required here. The Node entry's factory defaults it to the
+ * SSRF-guarded transport (guardedFetchFromEnv): the exchange domain is
+ * signature-covered but attacker-influenceable and the fetch runs before the offer
+ * signature is checked, so an unguarded default would be a pre-auth SSRF lever
+ * (mirrors Go NewWBADirectoryFetcher). Tests inject a loopback fetch; apps may inject a
+ * fetch wrapping their shared well-known client.
  */
-export function createWBAOfferDirectoryFetch(
-	opts: { fetch?: FetchLike; scheme?: string; port?: string } = {},
-): OfferDirectoryFetch {
-	const fetchFn = opts.fetch ?? guardedFetchFromEnv();
+export function createWBAOfferDirectoryFetch(opts: WBAOfferDirectoryFetchOptions): OfferDirectoryFetch {
+	const fetchFn = opts.fetch;
 	const scheme = opts.scheme && opts.scheme !== "" ? opts.scheme : "https";
 	const port = opts.port ?? "";
 	return async (domain: string) => {
diff --git a/sdk/ts/resolvers/registration-requirements.ts b/sdk/ts/resolvers/registration-requirements.ts
index c55842c4..388a806d 100644
--- a/sdk/ts/resolvers/registration-requirements.ts
+++ b/sdk/ts/resolvers/registration-requirements.ts
@@ -34,7 +34,7 @@ import {
   ManifestNotExchange,
   ManifestUnusable,
 } from "./errors.ts";
-import { type FetchLike, guardedFetchFromEnv } from "./http.ts";
+import type { FetchLike } from "./fetch.ts";
 
 /** What one Exchange asks of a registration. Both members are optional in the
  * contract, and their absence is a normal answer rather than a failure. */
@@ -66,14 +66,14 @@ export interface WellKnownRequirementsReader {
 /** Options for the reader. `ttlMs` and `now` are deliberately absent: it caches
  * nothing, so it has no freshness to compute. */
 export interface WellKnownRequirementsOptions {
-  /** The transport. Omitted, it is the SSRF-GUARDED one: the domain is
-   * caller-named — an agent registers at whichever Exchange it means to transact
-   * with, and that domain routinely arrives at runtime rather than from
-   * configuration — so this is request-derived provenance, which takes the guarded
-   * default. A deployment that must reach a private or loopback Exchange injects
-   * its own transport here, or opts out through the SKIP_SSRF / ALLOW_INSECURE
-   * environment flags. */
-  fetch?: FetchLike;
+  /** The transport. Required here. The Node entry's reader defaults it to the
+   * SSRF-GUARDED one: the domain is caller-named — an agent registers at whichever
+   * Exchange it means to transact with, and that domain routinely arrives at runtime
+   * rather than from configuration — so this is request-derived provenance, which
+   * takes the guarded default. A deployment that must reach a private or loopback
+   * Exchange injects its own transport here, or opts out through the SKIP_SSRF /
+   * ALLOW_INSECURE environment flags. */
+  fetch: FetchLike;
   /** Trust allowlist consulted BEFORE the fetch. A domain it rejects never
    * reaches the network. */
   allow?: (domain: string) => boolean;
@@ -84,12 +84,9 @@ export interface WellKnownRequirementsOptions {
 
 /** Read registration requirements from an Exchange's own well-known manifest. */
 export function createWellKnownRequirementsReader(
-  opts: WellKnownRequirementsOptions = {},
+  opts: WellKnownRequirementsOptions,
 ): WellKnownRequirementsReader {
-  // Built ONCE per reader, never per read: guardedFetchFromEnv constructs a
-  // dispatcher, so a per-read default would trade an unguarded dial for a socket
-  // leak.
-  const fetchFn: FetchLike = opts.fetch ?? guardedFetchFromEnv();
+  const fetchFn: FetchLike = opts.fetch;
   const scheme = opts.scheme && opts.scheme !== "" ? opts.scheme : "https";
   const allow = opts.allow;
 
diff --git a/sdk/ts/resolvers/wba.ts b/sdk/ts/resolvers/wba.ts
index 6803adae..5351cf7a 100644
--- a/sdk/ts/resolvers/wba.ts
+++ b/sdk/ts/resolvers/wba.ts
@@ -26,7 +26,7 @@ import {
 	RevocationUnevaluated,
 } from "./errors.ts";
 import { fetchRevocationList, fetchWBAFile, WBA_DIRECTORY_PATH } from "./documents.ts";
-import { type FetchLike, guardedFetch } from "./http.ts";
+import type { FetchLike } from "./fetch.ts";
 
 // Re-exported so the module that has always carried them still does; the one copy of
 // each lives with the document reads in ./documents.ts.
@@ -68,7 +68,11 @@ export interface WBAKeyResolverOptions {
 	after?: (ms: number) => Promise<void>;
 	onPollArmed?: () => void;
 	onPollCycle?: () => void;
-	fetch?: FetchLike;
+	/** The transport directories and revocation lists are fetched through. Required
+	 * here; the Node entry's createWBAKeyResolver defaults it to the SSRF-guarded
+	 * transport, because the directory host comes from the request-supplied
+	 * Signature-Agent and is fetched pre-auth. An edge runtime injects its own. */
+	fetch: FetchLike;
 }
 
 /** The WBA key face. `resolve` returns the raw Ed25519 public key, `undefined`
@@ -89,9 +93,9 @@ export interface WBAKeyResolver {
 	revoked(keyId: string): boolean;
 }
 
-/** Construct a WBA resolver with defaults applied. */
+/** Construct a WBA resolver with defaults applied (every option but `fetch`). */
 export function createWBAKeyResolver(
-	opts: WBAKeyResolverOptions = {},
+	opts: WBAKeyResolverOptions,
 ): WBAKeyResolver {
 	return new WBAResolverImpl(opts);
 }
@@ -142,9 +146,7 @@ class WBAResolverImpl implements WBAKeyResolver {
 			opts.after ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
 		this.onPollArmed = opts.onPollArmed;
 		this.onPollCycle = opts.onPollCycle;
-		// The WBA directory host comes from the request-supplied Signature-Agent and
-		// is fetched pre-auth, so the default is SSRF-guarded (matches the Go oracle).
-		this.fetchFn = opts.fetch ?? guardedFetch;
+		this.fetchFn = opts.fetch;
 	}
 
 	async resolve(
diff --git a/sdk/ts/resolvers/wellknown.ts b/sdk/ts/resolvers/wellknown.ts
index 880a8e76..fa53cc5c 100644
--- a/sdk/ts/resolvers/wellknown.ts
+++ b/sdk/ts/resolvers/wellknown.ts
@@ -13,17 +13,18 @@ import { isBareHost } from "../src/hosts.ts";
 import { manifestVersionRefusal } from "../src/wire.ts";
 import { fetchManifest, manifestURL } from "./documents.ts";
 import { DirectoryUnavailable, EndpointRefused, ManifestVersionRefused, NoEndpoint } from "./errors.ts";
-import { type FetchLike, defaultFetch, fetchStrict } from "./http.ts";
+import { type FetchLike, fetchStrict } from "./fetch.ts";
 import { ed25519KeysFromJwks } from "./jwks.ts";
 
 const DEFAULT_TTL_MS = 300_000; // 5 minutes
 
 /** Options for the well-known fetching resolvers. `now` is epoch-ms; tests inject
- * it for deterministic TTL expiry. `fetch` defaults to the global fetch. */
+ * it for deterministic TTL expiry. `fetch` is required here; the Node entry's
+ * factories default it to the plain, unguarded transport (see defaultFetch). */
 export interface WellKnownOptions {
   ttlMs?: number;
   now?: () => number;
-  fetch?: FetchLike;
+  fetch: FetchLike;
   /** Trust allowlist: a keyid (key resolver) or host (endpoint resolver) the
    * allowlist rejects never reaches the network. */
   allow?: (id: string) => boolean;
@@ -48,14 +49,14 @@ export interface WellKnownEndpointResolver {
 /** Lazily fetch the JWKS at `url`, cache resolved keys with a TTL. */
 export function createWellKnownKeyResolver(
   url: string,
-  opts: WellKnownOptions = {},
+  opts: WellKnownOptions,
 ): WellKnownKeyResolver {
   return new KeyResolverImpl(url, opts);
 }
 
 /** Host-keyed resolver of an Exchange domain → its self-advertised endpoint. */
 export function createWellKnownEndpointResolver(
-  opts: EndpointOptions = {},
+  opts: EndpointOptions,
 ): WellKnownEndpointResolver {
   return new EndpointResolverImpl(opts);
 }
@@ -73,7 +74,7 @@ class KeyResolverImpl implements WellKnownKeyResolver {
     private readonly url: string,
     opts: WellKnownOptions,
   ) {
-    this.fetchFn = opts.fetch ?? defaultFetch;
+    this.fetchFn = opts.fetch;
     this.ttlMs = opts.ttlMs && opts.ttlMs > 0 ? opts.ttlMs : DEFAULT_TTL_MS;
     this.now = opts.now ?? Date.now;
     this.allow = opts.allow;
@@ -131,7 +132,7 @@ class EndpointResolverImpl implements WellKnownEndpointResolver {
   private readonly flight = new Map<string, Promise<string>>();
 
   constructor(opts: EndpointOptions) {
-    this.fetchFn = opts.fetch ?? defaultFetch;
+    this.fetchFn = opts.fetch;
     this.ttlMs = opts.ttlMs && opts.ttlMs > 0 ? opts.ttlMs : DEFAULT_TTL_MS;
     this.now = opts.now ?? Date.now;
     this.scheme = opts.scheme && opts.scheme !== "" ? opts.scheme : "https";
diff --git a/sdk/ts/src/errordetail-wire.ts b/sdk/ts/src/errordetail-wire.ts
index 36accaa2..74f5fa22 100644
--- a/sdk/ts/src/errordetail-wire.ts
+++ b/sdk/ts/src/errordetail-wire.ts
@@ -288,7 +288,9 @@ class Reader {
 	}
 }
 
-const utf8 = new TextDecoder("utf-8", { fatal: true });
+// ignoreBOM: false is the default; it is spelled out because the Workers runtime types
+// declare the member required.
+const utf8 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: false });
 
 function decodeString(bytes: Uint8Array): string {
 	try {
diff --git a/sdk/ts/src/regschema.ts b/sdk/ts/src/regschema.ts
index 553f1160..06b28bdc 100644
--- a/sdk/ts/src/regschema.ts
+++ b/sdk/ts/src/regschema.ts
@@ -1170,7 +1170,8 @@ export function compileRegistrationSchema(raw: Uint8Array | string): {
 
 	let doc: unknown;
 	try {
-		doc = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+		// ignoreBOM: false is the default, spelled out for the Workers runtime types.
+		doc = JSON.parse(new TextDecoder("utf-8", { fatal: true, ignoreBOM: false }).decode(bytes));
 	} catch {
 		return { schema: null, verdict: "malformed" };
 	}
diff --git a/sdk/ts/src/thumbprint.ts b/sdk/ts/src/thumbprint.ts
index a8ebfd2f..4b5ddc5e 100644
--- a/sdk/ts/src/thumbprint.ts
+++ b/sdk/ts/src/thumbprint.ts
@@ -15,6 +15,20 @@ const ED25519_PUBLIC_KEY_BYTES = 32;
  * builds the same canonical JWK via go-jose). Both are pinned to the shared
  * testdata/thumbprint-vectors.json.
  */
+/**
+ * exportRawPublicKey returns the raw bytes of a public CryptoKey (for Ed25519, the 32
+ * key bytes). WebCrypto answers a raw export with an ArrayBuffer; the Workers runtime
+ * types widen the result to ArrayBuffer | JsonWebKey, so the bytes are checked here once
+ * rather than cast at every caller.
+ */
+export async function exportRawPublicKey(key: CryptoKey): Promise<Uint8Array<ArrayBuffer>> {
+  const raw: unknown = await crypto.subtle.exportKey("raw", key);
+  if (typeof (raw as { byteLength?: unknown } | null)?.byteLength !== "number") {
+    throw new TypeError("raw export of a public key did not return bytes");
+  }
+  return new Uint8Array(raw as ArrayBuffer);
+}
+
 export async function thumbprint(pubkey: Uint8Array): Promise<string> {
   if (pubkey.length !== ED25519_PUBLIC_KEY_BYTES) {
     throw new Error(`thumbprint: public key must be ${ED25519_PUBLIC_KEY_BYTES} bytes`);
diff --git a/sdk/ts/tests/directory-response.parity.test.ts b/sdk/ts/tests/directory-response.parity.test.ts
index c95f1e2e..e346953a 100644
--- a/sdk/ts/tests/directory-response.parity.test.ts
+++ b/sdk/ts/tests/directory-response.parity.test.ts
@@ -95,6 +95,46 @@ describe("verifyDirectoryResponse matches the Go oracle", () => {
 	});
 });
 
+describe("verifyDirectoryResponse verifies through an injected Ed25519 primitive", () => {
+	const doc = (): DirectoryVector => vectors.find((x) => x.name === "doc_directory_example") as DirectoryVector;
+
+	// corrupted flips one byte of every signature the Signature header carries, so the
+	// WebCrypto default refuses each.
+	function corrupted(v: DirectoryVector): Record<string, string> {
+		const h = headersOf(v);
+		const sig = h["signature"] as string;
+		const flip = (b64: string): string => (b64.startsWith("A") ? `B${b64.slice(1)}` : `A${b64.slice(1)}`);
+		return { ...h, signature: sig.replace(/:([^:]+):/g, (_m, b64: string) => `:${flip(b64)}:`) };
+	}
+
+	it("the default primitive refuses a corrupted signature", async () => {
+		const v = doc();
+		const verified = await verifyDirectoryResponse(v.authority, corrupted(v), utf8(v.body), v.keys.map(b64urlToBytes), v.now);
+		expect(verified.size).toBe(0);
+	});
+
+	it("an injected primitive that always answers true accepts the corrupted signature", async () => {
+		const v = doc();
+		const calls: number[] = [];
+		const verified = await verifyDirectoryResponse(v.authority, corrupted(v), utf8(v.body), v.keys.map(b64urlToBytes), v.now, {
+			verifyEd25519: async (pub, sig, msg) => {
+				calls.push(pub.length + sig.length + msg.length);
+				return true;
+			},
+		});
+		expect([...verified].sort()).toEqual(v.expected_verified);
+		expect(calls.length).toBeGreaterThan(0);
+	});
+
+	it("an injected primitive that always answers false refuses the documented example", async () => {
+		const v = doc();
+		const verified = await verifyDirectoryResponse(v.authority, headersOf(v), utf8(v.body), v.keys.map(b64urlToBytes), v.now, {
+			verifyEd25519: async () => false,
+		});
+		expect(verified.size).toBe(0);
+	});
+});
+
 describe("signDirectoryResponse reproduces the Go oracle", () => {
 	// The vectors Go produced through SignDirectoryResponse unaltered. The authority a
 	// signed_for_another_authority vector was signed for is not recorded, so it is not
diff --git a/sdk/ts/tests/document-check.parity.test.ts b/sdk/ts/tests/document-check.parity.test.ts
index 87d74fb4..494f19b4 100644
--- a/sdk/ts/tests/document-check.parity.test.ts
+++ b/sdk/ts/tests/document-check.parity.test.ts
@@ -84,19 +84,27 @@ describe("document-check corpus", () => {
 });
 
 describe("license-digest corpus", () => {
+	it("refuses a digest of the right length that differs only in its last character", async () => {
+		const ok = digestVectors.find((x) => x.verdict === "ok") as (typeof digestVectors)[number];
+		const last = ok.uri_digest.slice(-1);
+		const altered = ok.uri_digest.slice(0, -1) + (last === "0" ? "1" : "0");
+		const fetched = { url: "https://publisher.example/terms", body: new TextEncoder().encode(ok.body), mediaType: undefined };
+		await expect(verifyDigest(altered, fetched)).rejects.toThrow(DigestMismatch);
+	});
+
 	for (const v of digestVectors) {
-		it(v.label, () => {
+		it(v.label, async () => {
 			const fetched = {
 				url: "https://publisher.example/terms",
 				body: new TextEncoder().encode(v.body),
 				mediaType: undefined,
 			};
 			if (v.verdict === "mismatch") {
-				expect(() => verifyDigest(v.uri_digest, fetched)).toThrow(DigestMismatch);
+				await expect(verifyDigest(v.uri_digest, fetched)).rejects.toThrow(DigestMismatch);
 				return;
 			}
 			expect(v.verdict).toBe("ok");
-			expect(verifyDigest(v.uri_digest, fetched).digest).toBe(v.digest);
+			expect((await verifyDigest(v.uri_digest, fetched)).digest).toBe(v.digest);
 		});
 	}
 });
diff --git a/sdk/ts/tests/edge-imports.guard.test.ts b/sdk/ts/tests/edge-imports.guard.test.ts
new file mode 100644
index 00000000..dfc7a383
--- /dev/null
+++ b/sdk/ts/tests/edge-imports.guard.test.ts
@@ -0,0 +1,146 @@
+import { readdirSync, readFileSync } from "node:fs";
+import { builtinModules } from "node:module";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+
+// Structural guard for the edge-safe surface.
+//
+// An edge runtime (Cloudflare Workers, Fastly Compute, Deno) has no undici and no Node
+// built-in modules. The edge-safe surface is the edge resolvers entry
+// (resolvers/edge.ts) and the pure trees src/, core/ and hono/. This guard walks the
+// import graph from every one of those files, following each relative import and
+// re-export to the module it names, and fails on any import of undici or of a Node
+// built-in, whether spelled with the node: prefix or bare ("crypto", "dns/promises"),
+// and on any use of a Node global no import names (Buffer, process, require,
+// __dirname). The Workers types declare Buffer and process as `any`, so the workers
+// typecheck (tsconfig.workers.json) cannot catch those two; this guard does.
+//
+// The meta-tests feed the detector synthetic source, and the last one walks the Node
+// entry (resolvers/index.ts), which must reach undici, to show the walk follows
+// re-exports at all.
+
+const root = fileURLToPath(new URL("../", import.meta.url));
+
+const NODE_BUILTINS = new Set(builtinModules);
+
+// Every module specifier a source file names: static imports and re-exports
+// (`from "x"`), side-effect imports (`import "x"`), dynamic imports and require calls.
+const SPECIFIER = /(?:\bfrom\s*|\bimport\s*\(\s*|\bimport\s+|\brequire\s*\(\s*)["']([^"']+)["']/g;
+
+function specifiers(source: string): string[] {
+	return [...source.matchAll(SPECIFIER)].map((m) => m[1] as string);
+}
+
+// The Node globals an edge runtime lacks, used in code (comments are stripped first).
+const NODE_GLOBAL = /\b(Buffer|process|require|__dirname|__filename)\s*[.(]/;
+
+function stripComments(source: string): string {
+	return source.replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|[^:"'`])\/\/.*$/gm, "$1");
+}
+
+// usesNodeGlobal reports whether code (not a comment) touches a Node-only global.
+function usesNodeGlobal(source: string): boolean {
+	return NODE_GLOBAL.test(stripComments(source));
+}
+
+// isNodeOnly reports whether a bare specifier names a module an edge runtime lacks.
+function isNodeOnly(spec: string): boolean {
+	if (spec === "undici" || spec.startsWith("undici/") || spec.startsWith("node:")) return true;
+	return NODE_BUILTINS.has(spec) || NODE_BUILTINS.has(spec.split("/")[0] as string);
+}
+
+// walk returns every Node-only import reachable from `entry`, as "file -> specifier",
+// and every reachable file that uses a Node global.
+function walk(entry: string): string[] {
+	const offenders: string[] = [];
+	const seen = new Set<string>();
+	const queue = [resolve(root, entry)];
+	while (queue.length > 0) {
+		const file = queue.pop() as string;
+		if (seen.has(file)) continue;
+		seen.add(file);
+		const source = readFileSync(file, "utf8");
+		if (usesNodeGlobal(source)) offenders.push(`${relative(root, file)} -> a Node global`);
+		for (const spec of specifiers(source)) {
+			if (spec.startsWith(".")) {
+				// JSON modules carry data, not imports.
+				if (!spec.endsWith(".json")) queue.push(resolve(dirname(file), spec));
+			} else if (isNodeOnly(spec)) {
+				offenders.push(`${relative(root, file)} -> ${spec}`);
+			}
+		}
+	}
+	return offenders;
+}
+
+function tsFilesUnder(dir: string): string[] {
+	const out: string[] = [];
+	for (const e of readdirSync(join(root, dir), { withFileTypes: true })) {
+		if (e.isDirectory()) out.push(...tsFilesUnder(`${dir}/${e.name}`));
+		else if (e.isFile() && e.name.endsWith(".ts") && !e.name.endsWith(".test.ts")) out.push(`${dir}/${e.name}`);
+	}
+	return out;
+}
+
+describe("edge-safe import graph", () => {
+	it("the edge resolvers entry reaches no undici, Node built-in or Node global", () => {
+		expect(walk("resolvers/edge.ts")).toEqual([]);
+	});
+
+	for (const dir of ["src", "core", "hono"]) {
+		it(`no file under ${dir}/ reaches undici, a Node built-in or a Node global`, () => {
+			const files = tsFilesUnder(dir);
+			expect(files.length).toBeGreaterThan(0);
+			expect(files.flatMap(walk)).toEqual([]);
+		});
+	}
+
+	it("the edge entry is published as ./resolvers/edge", () => {
+		const pkg = JSON.parse(readFileSync(join(root, "package.json"), "utf8")) as { exports: Record<string, string> };
+		expect(pkg.exports["./resolvers/edge"]).toBe("./resolvers/edge.ts");
+	});
+
+	// --- meta-tests -------------------------------------------------------------
+	it("[meta positive] flags undici and Node built-ins in every import spelling", () => {
+		for (const src of [
+			'import { request } from "undici";',
+			'import { createHash } from "node:crypto";',
+			'import { lookup } from "dns/promises";',
+			'import "node:fs";',
+			'const m = await import("crypto");',
+			'const m = require("node:net");',
+			'export { lookup } from "node:dns/promises";',
+		]) {
+			expect(specifiers(src).some(isNodeOnly), src).toBe(true);
+		}
+	});
+
+	it("[meta positive] flags a Node global used in code", () => {
+		for (const src of ['const b = Buffer.from("x");', "const v = process.env.X;", 'const m = require("x");']) {
+			expect(usesNodeGlobal(src), src).toBe(true);
+		}
+	});
+
+	it("[meta negative] passes a Node global named only in a comment or as a word", () => {
+		for (const src of [
+			"// decodes as Buffer.toString does",
+			"/* process.env is not read */ const x = 1;",
+			"const processed = 1; const BufferSource = 2;",
+		]) {
+			expect(usesNodeGlobal(src), src).toBe(false);
+		}
+	});
+
+	it("[meta negative] passes relative imports and edge-safe packages", () => {
+		for (const src of ['import { z } from "zod";', 'import canonicalize from "canonicalize";', 'import { x } from "./x.ts";']) {
+			expect(specifiers(src).some(isNodeOnly), src).toBe(false);
+		}
+	});
+
+	it("[meta would-be-missed] the walk follows re-exports: the Node entry reaches undici", () => {
+		const reached = walk("resolvers/index.ts");
+		expect(reached.some((o) => o.endsWith("-> undici"))).toBe(true);
+		expect(reached.some((o) => o.endsWith("-> node:dns/promises"))).toBe(true);
+	});
+});
diff --git a/sdk/ts/tests/resolvers-edge-entry.test.ts b/sdk/ts/tests/resolvers-edge-entry.test.ts
new file mode 100644
index 00000000..3e001964
--- /dev/null
+++ b/sdk/ts/tests/resolvers-edge-entry.test.ts
@@ -0,0 +1,91 @@
+// The edge resolvers entry (package export "./resolvers/edge") reads through the fetch a
+// runtime passes, answered with plain WHATWG Responses as a Workers or Deno fetch answers,
+// and carries none of the Node entry's transports. The Node entry ("./resolvers") is the
+// same surface with the transport defaulted, and passes an injected fetch through
+// unchanged.
+
+import { describe, expect, it } from "vitest";
+import * as edge from "../resolvers/edge.ts";
+import * as node from "../resolvers/index.ts";
+
+const MANIFEST = JSON.stringify({ ver: "1.0", role: "ROLE_EXCHANGE", endpoint: "https://exchange.example/rpc" });
+const LICENSE_TEXT = "Licensed for retrieval-augmented answers, attribution required.\n";
+
+async function sha256(text: string): Promise<string> {
+	const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(text)));
+	return `sha256:${Array.from(digest, (b) => b.toString(16).padStart(2, "0")).join("")}`;
+}
+
+// serving answers each URL in `docs` with its body and content type, records every URL
+// asked for, and answers 404 for anything else.
+function serving(docs: Record<string, { body: string; contentType?: string }>): {
+	fetch: edge.FetchLike;
+	seen: string[];
+} {
+	const seen: string[] = [];
+	const fetch: edge.FetchLike = async (url) => {
+		seen.push(url);
+		const doc = docs[url];
+		if (doc === undefined) return new Response("", { status: 404 });
+		return new Response(doc.body, { headers: doc.contentType ? { "content-type": doc.contentType } : {} });
+	};
+	return { fetch, seen };
+}
+
+describe("the edge resolvers entry", () => {
+	it("reads a manifest through the injected fetch", async () => {
+		const { fetch, seen } = serving({
+			"https://exchange.example/.well-known/fora.json": { body: MANIFEST, contentType: "application/json" },
+		});
+		const doc = await edge.readManifest("exchange.example", { fetch });
+		expect(doc.message.endpoint).toBe("https://exchange.example/rpc");
+		expect(seen).toEqual(["https://exchange.example/.well-known/fora.json"]);
+	});
+
+	it("refuses a manifest the injected fetch serves under the wrong media type", async () => {
+		const { fetch } = serving({
+			"https://exchange.example/.well-known/fora.json": { body: MANIFEST, contentType: "text/plain" },
+		});
+		await expect(edge.readManifest("exchange.example", { fetch })).rejects.toBeInstanceOf(edge.MediaTypeRefused);
+	});
+
+	it("verifies a license document's digest with WebCrypto, and refuses bytes that do not match it", async () => {
+		const uri = "https://publisher.example/terms";
+		const { fetch } = serving({ [uri]: { body: LICENSE_TEXT } });
+		const ok = await edge.readLicenseDocument({ uri, uri_digest: await sha256(LICENSE_TEXT) }, { fetch });
+		expect(ok.digest).toBe(await sha256(LICENSE_TEXT));
+		await expect(
+			edge.readLicenseDocument({ uri, uri_digest: await sha256(`${LICENSE_TEXT}tampered`) }, { fetch }),
+		).rejects.toBeInstanceOf(edge.DigestMismatch);
+	});
+
+	it("resolves an Exchange endpoint through the injected fetch, and reports an outage when it fails", async () => {
+		const { fetch } = serving({
+			"https://exchange.example/.well-known/fora.json": { body: MANIFEST, contentType: "application/json" },
+		});
+		expect(await edge.createWellKnownEndpointResolver({ fetch }).resolveEndpoint("exchange.example")).toBe(
+			"https://exchange.example/rpc",
+		);
+		await expect(
+			edge.createWellKnownEndpointResolver({ fetch }).resolveEndpoint("unknown.example"),
+		).rejects.toBeInstanceOf(edge.DirectoryUnavailable);
+	});
+
+	it("exports none of the Node entry's transports", () => {
+		for (const name of ["guardedFetchFromEnv", "ssrfGuard", "SsrfBlockedError"]) {
+			expect(name in edge, name).toBe(false);
+			expect(name in node, name).toBe(true);
+		}
+	});
+});
+
+describe("the Node resolvers entry", () => {
+	it("passes an injected fetch through to the edge-safe reader", async () => {
+		const { fetch, seen } = serving({
+			"https://exchange.example/.well-known/fora.json": { body: MANIFEST, contentType: "application/json" },
+		});
+		const doc = await node.readManifest("exchange.example", { fetch });
+		expect(doc.message.role).toBe("ROLE_EXCHANGE");
+		expect(seen).toEqual(["https://exchange.example/.well-known/fora.json"]);
+	});
+});
diff --git a/sdk/ts/tests/resolvers-wba-path-dedup.guard.test.ts b/sdk/ts/tests/resolvers-wba-path-dedup.guard.test.ts
index c209be32..8248af20 100644
--- a/sdk/ts/tests/resolvers-wba-path-dedup.guard.test.ts
+++ b/sdk/ts/tests/resolvers-wba-path-dedup.guard.test.ts
@@ -1,6 +1,6 @@
-import { readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
 import { describe, expect, it } from "vitest";
+import * as edgeEntry from "../resolvers/edge.ts";
+import * as nodeEntry from "../resolvers/index.ts";
 
 // Structural dedup guard for the WBA directory-path constant.
 //
@@ -8,27 +8,20 @@ import { describe, expect, it } from "vitest";
 // path string: the module-private WBA_DIRECTORY_PATH in resolvers/wba.ts and the
 // duplicate WBA_OFFER_DIRECTORY_PATH exported from resolvers/offer-key-cache.ts and
 // re-exported through the public barrel resolvers/index.ts. The consolidation
-// collapses these onto ONE public WBA_DIRECTORY_PATH exported from the barrel and
-// DELETES the stale WBA_OFFER_DIRECTORY_PATH symbol + its barrel export.
+// collapses these onto ONE public WBA_DIRECTORY_PATH exported from both public entries
+// (the Node barrel and the edge entry it re-exports) and DELETES the stale
+// WBA_OFFER_DIRECTORY_PATH symbol + its barrel export.
 //
 // This is a non-behavioral (naming/dedup) disease with no runtime-observable
 // change, so per the test-author structural-disease exception the red artifact is
-// the source-level guard that sweep-verify later requires: it pins that the
-// duplicate symbol is GONE and the single public constant is exported in its place.
-//
-// TDD-red: WBA_OFFER_DIRECTORY_PATH is still present in the barrel export today and
-// WBA_DIRECTORY_PATH is not exported from it — so both assertions fail now.
-//
-// The detector is regex-based and whitespace-tolerant so a formatter reflow of the
-// export block cannot let a revert slip; the meta-tests below exercise that.
-
-const barrelPath = fileURLToPath(
-	new URL("../resolvers/index.ts", import.meta.url),
-);
+// the export-level guard that sweep-verify later requires: it pins that the duplicate
+// symbol is GONE and the single public constant is exported in its place. The
+// meta-tests below exercise the name detector.
 
-function readBarrel(): string {
-	return readFileSync(barrelPath, "utf8");
-}
+// The two public entries: the Node barrel re-exports the edge one, so each must carry
+// the single constant and neither the duplicate. Read as module namespaces, so the
+// assertion is about what a caller can import rather than how the barrel spells it.
+const ENTRIES = { "resolvers/index.ts": nodeEntry, "resolvers/edge.ts": edgeEntry } as const;
 
 // The duplicate symbol that MUST disappear from the public surface.
 const FORBIDDEN_DUP = /\bWBA_OFFER_DIRECTORY_PATH\b/;
@@ -36,13 +29,15 @@ const FORBIDDEN_DUP = /\bWBA_OFFER_DIRECTORY_PATH\b/;
 const REQUIRED_CONST = /\bWBA_DIRECTORY_PATH\b/;
 
 describe("WBA directory-path constant is deduplicated onto one public export", () => {
-	it("no longer exports the duplicate WBA_OFFER_DIRECTORY_PATH from the barrel", () => {
-		expect(FORBIDDEN_DUP.test(readBarrel())).toBe(false);
-	});
-
-	it("exports the single public WBA_DIRECTORY_PATH from the barrel", () => {
-		expect(REQUIRED_CONST.test(readBarrel())).toBe(true);
-	});
+	for (const [name, entry] of Object.entries(ENTRIES)) {
+		it(`${name} no longer exports the duplicate WBA_OFFER_DIRECTORY_PATH`, () => {
+			expect(Object.keys(entry).some((k) => FORBIDDEN_DUP.test(k))).toBe(false);
+		});
+
+		it(`${name} exports the single public WBA_DIRECTORY_PATH`, () => {
+			expect(entry.WBA_DIRECTORY_PATH).toBe("/.well-known/http-message-signatures-directory");
+		});
+	}
 
 	// --- meta-tests: exercise the detector against synthetic barrel source ----
 	it("[meta positive] catches a lingering WBA_OFFER_DIRECTORY_PATH export", () => {
diff --git a/sdk/ts/tests/sign-inbound-method.test.ts b/sdk/ts/tests/sign-inbound-method.test.ts
new file mode 100644
index 00000000..34e00c24
--- /dev/null
+++ b/sdk/ts/tests/sign-inbound-method.test.ts
@@ -0,0 +1,59 @@
+// signInbound signs the HTTP method it is given (Go PoPOptions.Method): upper-cased into
+// the base as @method, GET when unset, and set on the returned Request. A proof made for
+// one method verifies through verifyAgentBinding for that method only.
+
+import { describe, expect, it } from "vitest";
+import { signInbound } from "../core/sign.ts";
+import { verifyAgentBinding } from "../src/pop.ts";
+import { thumbprint } from "../src/thumbprint.ts";
+import { AGENT_DIRECTORY } from "./wba-fixtures.ts";
+
+async function agent(): Promise<{ kp: CryptoKeyPair; agentId: string; url: string }> {
+	const kp = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
+	const agentId = await thumbprint(new Uint8Array(await crypto.subtle.exportKey("raw", kp.publicKey)));
+	return { kp, agentId, url: `https://cdn.example/a%2Fb/doc?agent_id=${agentId}` };
+}
+
+describe("signInbound signs the method it is given", () => {
+	it("a HEAD proof round-trips through verifyAgentBinding as HEAD", async () => {
+		const { kp, agentId, url } = await agent();
+		const req = await signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, method: "HEAD" });
+		expect(req.method).toBe("HEAD");
+		const res = await verifyAgentBinding({ url, method: req.method, headers: req.headers, agentId });
+		expect(res).toEqual({ ok: true, signatureAgent: AGENT_DIRECTORY });
+	});
+
+	it("refuses a HEAD proof verified as GET, and a GET proof verified as HEAD", async () => {
+		const { kp, agentId, url } = await agent();
+		const head = await signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, method: "HEAD" });
+		const asGet = await verifyAgentBinding({ url, method: "GET", headers: head.headers, agentId });
+		expect(asGet).toEqual({ ok: false, reason: "pop_sig_invalid" });
+		const get = await signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY });
+		const asHead = await verifyAgentBinding({ url, method: "HEAD", headers: get.headers, agentId });
+		expect(asHead).toEqual({ ok: false, reason: "pop_sig_invalid" });
+	});
+
+	it("upper-cases the method into the base, so a lowercase method verifies as its uppercase form", async () => {
+		const { kp, agentId, url } = await agent();
+		const req = await signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, method: "head" });
+		expect(req.method).toBe("HEAD");
+		const res = await verifyAgentBinding({ url, method: "HEAD", headers: req.headers, agentId });
+		expect(res.ok).toBe(true);
+	});
+
+	it("signs GET when the method is unset or empty", async () => {
+		const { kp, agentId, url } = await agent();
+		for (const opts of [{}, { method: "" }]) {
+			const req = await signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, ...opts });
+			expect(req.method).toBe("GET");
+			expect((await verifyAgentBinding({ url, method: "GET", headers: req.headers, agentId })).ok).toBe(true);
+		}
+	});
+
+	it("refuses a method carrying a control byte before signing", async () => {
+		const { kp, url } = await agent();
+		await expect(signInbound(kp, url, { signatureAgent: AGENT_DIRECTORY, method: "GE\nT" })).rejects.toThrow(
+			"method carries a control byte at byte 2",
+		);
+	});
+});
diff --git a/sdk/ts/tsconfig.workers.json b/sdk/ts/tsconfig.workers.json
new file mode 100644
index 00000000..f6e4e571
--- /dev/null
+++ b/sdk/ts/tsconfig.workers.json
@@ -0,0 +1,35 @@
+{
+  // Typechecks every edge-safe module against the Cloudflare Workers runtime types
+  // alone: no Node types and no DOM lib, so a DOM-only API, or a Web API the Workers
+  // types declare differently, is a compile error here. Run by `npm test` before
+  // vitest. The Workers types declare Buffer and process as `any` (for nodejs_compat),
+  // so this check does not catch them; tests/edge-imports.guard.test.ts does, and also
+  // walks the same entry points' import graphs and fails on a node: or undici import.
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    // Same zod pin as tsconfig.json: the generated wire schemas live outside this
+    // package tree and cannot reach its node_modules by walking up.
+    "paths": {
+      "zod": ["./node_modules/zod"]
+    },
+    "lib": ["ES2023"],
+    "types": ["@cloudflare/workers-types"],
+    "strict": true,
+    "noImplicitAny": true,
+    "noUncheckedIndexedAccess": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "exactOptionalPropertyTypes": true,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitReturns": true,
+    "forceConsistentCasingInFileNames": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "allowImportingTsExtensions": true,
+    "noEmit": true
+  },
+  "include": ["src/**/*", "core/**/*", "hono/**/*", "resolvers/edge.ts"]
+}

From 6cb390233374d9572f05d0e5056eb436bfd208cc Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:25:30 -0400
Subject: [PATCH 127/164] Remove the plaintext scheme option from the Python
 key resolver

WBAKeyResolver no longer takes scheme=. A bare host Signature-Agent
reference is prefixed with https://, an origin keeps the scheme it names,
and a Signature-Agent member, always an https origin, is fetched over
https, as in Go. The resolver suites serve their directories over TLS
with a certificate for 127.0.0.1 that the injected loopback client
trusts. A new test shows a member and a bare host are both fetched over
https, and that a plaintext directory is never reached.
---
 docs/design-history.md                        |  12 +-
 proto/CHANGELOG.md                            |   8 +-
 sdk/python/README.md                          |   5 +-
 sdk/python/fora_sdk/resolvers/wba.py          |  19 ++-
 sdk/python/tests/resolvers_harness.py         | 114 ++++++++++++++++--
 sdk/python/tests/test_identity_helpers.py     |  17 ++-
 .../tests/test_resolvers_wba_debounce.py      |   9 +-
 .../tests/test_resolvers_wba_integration.py   |  61 +++++-----
 .../tests/test_resolvers_wba_profile.py       |  38 ++++--
 .../test_resolvers_wba_require_revocation.py  |   7 +-
 .../test_resolvers_wba_revocation_parity.py   |   4 +-
 .../src/content/docs/reference/changelog.mdx  |   8 +-
 12 files changed, 206 insertions(+), 96 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index bc8b0837..e7e3cd49 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2336,11 +2336,13 @@ rest. A refusal the fetcher can fix by signing again carries `Accept-Signature`,
 does a request or proof whose `Signature-Agent` member is not an https origin: that is a
 form the client chose, not a forgery.
 
-**No option fetches a key directory in plaintext.** Go's `WBAKeyResolverOptions.Scheme`
-let tests fetch an https origin's directory from a plaintext server, and any production
-configuration could set it too. It is gone: a directory is fetched over https from the
-origin its signer named, and tests serve directories over TLS and inject the test
-server's client.
+**No option fetches a key directory in plaintext.** The key resolver's scheme option
+(Go `WBAKeyResolverOptions.Scheme`, Python `WBAKeyResolver(scheme=...)`, TypeScript
+`WBAKeyResolverOptions.scheme`) let tests fetch an https origin's directory from a
+plaintext server, and any production configuration could set it too. It is gone from
+all three: a directory is fetched over https from the origin its signer named. Tests
+serve directories over TLS and inject a client that trusts the test server; the
+TypeScript tests inject a fetch that answers the https URL.
 
 **A directory response signature filters keys in the resolver and gates the reader.**
 The resolvers hand out only keys the response is signed by; a listed key without a valid
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index c45f5e37..7a88eced 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -788,9 +788,11 @@ SDKs, in all three languages:
   `verifyDirectoryResponse` check one. The WBA key resolvers and the offer-directory
   fetch refuse redirects, check the media type and hand out only keys that signed the
   response; `ReadWBADirectory` / `read_wba_directory` / `readWBADirectory` require every
-  listed key to have signed, and refuse `application/jwk-set+json`. Go's
-  `WBAKeyResolverOptions.Scheme`, which let a configuration fetch an https origin's
-  directory in plaintext, is removed: a directory is always fetched over https. The
+  listed key to have signed, and refuse `application/jwk-set+json`. The key resolver's
+  scheme option, which let a configuration fetch an https origin's directory in
+  plaintext, is removed from all three SDKs (Go `WBAKeyResolverOptions.Scheme`, Python
+  `WBAKeyResolver(scheme=...)`, TypeScript `WBAKeyResolverOptions.scheme`): a directory
+  is always fetched over https. The
   constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
   constants.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
diff --git a/sdk/python/README.md b/sdk/python/README.md
index b9bfb003..f05a8b8f 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -326,7 +326,8 @@ and still defaults to a plain one, which is a known gap rather than a decision.
   background poller). A key directory is fetched with no redirect, must be served as
   `application/http-message-signatures-directory+json`, and only the keys that signed its
   response (`verify_directory_response`) are handed out. A Signature-Agent member is always
-  an https origin; `scheme="http"` fetches its directory over http, for a local sandbox.
+  an https origin and its directory is always fetched over https; a local sandbox serves
+  the directory over TLS and injects an `http=` client that trusts it.
 - **Endpoint resolver** — `WellKnownEndpointResolver` discovers an Exchange's own service
   endpoint from `/.well-known/fora.json`, host-keyed and cached. Its exits are worth
   knowing apart, because the difference decides whether a caller should retry:
@@ -531,7 +532,7 @@ object that reads it was built has no effect:
 
 | Variable | Effect |
 |---|---|
-| `FORA_WELLKNOWN_SCHEME=http` | the resolvers read manifests and directories over plaintext. Consumer-side: the SDK never reads it for you, which is why the example above passes `scheme=` explicitly |
+| `FORA_WELLKNOWN_SCHEME=http` | the resolvers that take `scheme=` read manifests and offer-key directories over plaintext. Consumer-side: the SDK never reads it for you, which is why the example above passes `scheme=` explicitly. `WBAKeyResolver` takes no scheme: a Signature-Agent directory is always fetched over https |
 | `ALLOW_INSECURE=true` | the scheme gate permits a plaintext `http` origin. Needed for the RPC and delivery legs, which check the scheme ABOVE the transport, so injecting a client is not enough |
 | `SKIP_SSRF=true` | the dial-time address guard is dropped, so loopback and private addresses are reachable. Read when `guarded_client` BUILDS a client, so set it before constructing a resolver |
 
diff --git a/sdk/python/fora_sdk/resolvers/wba.py b/sdk/python/fora_sdk/resolvers/wba.py
index 6c9d6f5f..b6d3035e 100644
--- a/sdk/python/fora_sdk/resolvers/wba.py
+++ b/sdk/python/fora_sdk/resolvers/wba.py
@@ -117,7 +117,6 @@ class WBAKeyResolver:
     def __init__(
         self,
         *,
-        scheme: str = "https",
         ttl: timedelta = _DEFAULT_TTL,
         poll_interval: timedelta = _DEFAULT_POLL_INTERVAL,
         sync_debounce: timedelta = _DEFAULT_SYNC_DEBOUNCE,
@@ -136,7 +135,6 @@ def __init__(
         # injection.
         http: httpx.Client | None = None,
     ) -> None:
-        self._scheme = scheme or "https"
         self._ttl = ttl if ttl > timedelta(0) else _DEFAULT_TTL
         self._poll_interval = (
             poll_interval if poll_interval > timedelta(0) else _DEFAULT_POLL_INTERVAL
@@ -179,7 +177,7 @@ def resolve(self, keyid: str, directory: str) -> bytes:
         """
         if directory == "" or keyid == "":
             raise UnknownKeyError(f"no signature-agent directory for keyid={keyid!r}")
-        parsed = _directory_base(directory, self._scheme)
+        parsed = _directory_base(directory)
         if parsed is None:
             # A malformed Signature-Agent cannot name a directory: fall-through,
             # NOT a fail-closed DirectoryUnavailableError halt.
@@ -553,20 +551,19 @@ def _wait_timer(timer: queue.Queue[datetime], stop: threading.Event) -> bool:
     return False
 
 
-def _directory_base(ref: str, scheme: str) -> tuple[str, str] | None:
+def _directory_base(ref: str) -> tuple[str, str] | None:
     """Normalize a directory reference (an https origin, a bare host or host:port) into
     a ``scheme://host`` base and its host key, or None when it names no host.
 
-    ``scheme`` is the scheme directories are fetched over. A Signature-Agent member is
-    always an https origin; a resolver built with ``scheme="http"`` fetches that origin's
-    directory over http, which is how a test reaches a plaintext server. A bare host is
-    prefixed with it."""
-    candidate = ref if "://" in ref else f"{scheme}://{ref}"
+    A bare host is prefixed with ``https://``, and an origin keeps the scheme it names,
+    so a Signature-Agent member, always an https origin, is fetched over https. There is
+    no option to fetch it in plaintext: a test or a sandbox serves its directory over TLS
+    and injects an ``http=`` client that trusts it."""
+    candidate = ref if "://" in ref else f"https://{ref}"
     parts = urllib.parse.urlsplit(candidate)
     if not parts.netloc:
         return None
-    fetch_scheme = scheme if parts.scheme == "https" else parts.scheme
-    return f"{fetch_scheme}://{parts.netloc}", parts.netloc
+    return f"{parts.scheme}://{parts.netloc}", parts.netloc
 
 
 def _wba_host_anchored(anchor: str, candidate: str) -> bool:
diff --git a/sdk/python/tests/resolvers_harness.py b/sdk/python/tests/resolvers_harness.py
index 582ceff2..b35e2ada 100644
--- a/sdk/python/tests/resolvers_harness.py
+++ b/sdk/python/tests/resolvers_harness.py
@@ -12,8 +12,9 @@
 minted. Every key ``make_key`` mints is registered by its public half, and a test that
 mints keys elsewhere registers them with ``register_directory_key``; a listed key
 nobody registered is left unsigned, which a reader treats as absent. A member is an
-https origin, so a resolver reaches this plaintext origin through its scheme override
-(``WBAKeyResolver(scheme="http")``) with ``https://`` + ``Origin.host`` as the member.
+https origin and ``WBAKeyResolver`` always fetches it over https, so a WBA suite builds
+``Origin(tls=True)``: the origin serves TLS with a certificate for 127.0.0.1 that
+``loopback_client()`` trusts, and ``Origin.origin`` is the member.
 
 This module imports ONLY the byte-parity-pinned SDK primitives (``thumbprint``,
 ``b64url_nopad``, the directory response signer) and never the ``fora_sdk.resolvers``
@@ -22,18 +23,32 @@
 
 from __future__ import annotations
 
+import functools
+import ipaddress
 import json
 import queue
+import ssl
+import tempfile
 import threading
 from collections.abc import Callable
 from dataclasses import dataclass, field
 from datetime import datetime, timedelta, UTC
 from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from pathlib import Path
 from typing import Any
 
 import httpx
+from cryptography import x509
+from cryptography.hazmat.primitives import hashes
+from cryptography.hazmat.primitives.asymmetric import ec
 from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
-from cryptography.hazmat.primitives.serialization import Encoding, PublicFormat
+from cryptography.hazmat.primitives.serialization import (
+    Encoding,
+    NoEncryption,
+    PrivateFormat,
+    PublicFormat,
+)
+from cryptography.x509.oid import NameOID
 
 from fora_sdk.wire import WellKnownManifestVersion
 
@@ -95,6 +110,78 @@ def signed_directory_headers(authority: str, body: bytes) -> dict[str, str]:
     return signed.headers()
 
 
+@functools.cache
+def _tls_files() -> tuple[str, str]:
+    """The certificate and key files of the self-signed TLS identity every
+    ``Origin(tls=True)`` serves: one P-256 certificate for 127.0.0.1 and localhost,
+    minted once per test run and trusted by ``loopback_client()``."""
+    key = ec.generate_private_key(ec.SECP256R1())
+    name = x509.Name([x509.NameAttribute(NameOID.COMMON_NAME, "fora-sdk test origin")])
+    ski = x509.SubjectKeyIdentifier.from_public_key(key.public_key())
+    cert = (
+        x509.CertificateBuilder()
+        .subject_name(name)
+        .issuer_name(name)
+        .public_key(key.public_key())
+        .serial_number(x509.random_serial_number())
+        .not_valid_before(datetime.now(UTC) - timedelta(days=1))
+        .not_valid_after(datetime.now(UTC) + timedelta(days=30))
+        .add_extension(x509.BasicConstraints(ca=True, path_length=None), critical=True)
+        .add_extension(
+            x509.KeyUsage(
+                digital_signature=True,
+                content_commitment=False,
+                key_encipherment=False,
+                data_encipherment=False,
+                key_agreement=False,
+                key_cert_sign=True,
+                crl_sign=False,
+                encipher_only=False,
+                decipher_only=False,
+            ),
+            critical=True,
+        )
+        .add_extension(ski, critical=False)
+        .add_extension(
+            x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier(ski),
+            critical=False,
+        )
+        .add_extension(
+            x509.SubjectAlternativeName(
+                [
+                    x509.IPAddress(ipaddress.ip_address("127.0.0.1")),
+                    x509.DNSName("localhost"),
+                ]
+            ),
+            critical=False,
+        )
+        .sign(key, hashes.SHA256())
+    )
+    tmp = Path(tempfile.mkdtemp(prefix="fora-sdk-tls-"))
+    cert_path, key_path = tmp / "cert.pem", tmp / "key.pem"
+    cert_path.write_bytes(cert.public_bytes(Encoding.PEM))
+    key_path.write_bytes(key.private_bytes(Encoding.PEM, PrivateFormat.PKCS8, NoEncryption()))
+    return str(cert_path), str(key_path)
+
+
+def serve_tls(server: ThreadingHTTPServer) -> None:
+    """Make ``server`` answer over TLS with the test identity ``loopback_client()``
+    trusts. Call it before the server starts serving."""
+    cert_path, key_path = _tls_files()
+    ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
+    ctx.load_cert_chain(cert_path, key_path)
+    server.socket = ctx.wrap_socket(server.socket, server_side=True)
+
+
+def listen(handler: type[BaseHTTPRequestHandler], *, tls: bool) -> ThreadingHTTPServer:
+    """A server for ``handler`` on 127.0.0.1 and a free port, answering over TLS when
+    ``tls`` is set."""
+    server = ThreadingHTTPServer(("127.0.0.1", 0), handler)
+    if tls:
+        serve_tls(server)
+    return server
+
+
 def loopback_client() -> httpx.Client:
     """An UNGUARDED httpx.Client the resolver suites inject to reach the in-process
     origin.
@@ -104,9 +191,12 @@ def loopback_client() -> httpx.Client:
     httptest suites inject their own client past the guarded default — the
     integration suites inject this plain client via ``http=`` to REACH the private
     test directory. It is the escape hatch: a maintained httpx.Client with no SSRF
-    guard, so 127.0.0.1 is reachable.
+    guard, so 127.0.0.1 is reachable. It trusts the certificate a TLS origin serves
+    (``Origin(tls=True)``, ``serve_tls``), the way the Go suites use the client of an
+    ``httptest.NewTLSServer``.
     """
-    return httpx.Client(follow_redirects=True, timeout=_FETCH_TIMEOUT_S)
+    verify = ssl.create_default_context(cafile=_tls_files()[0])
+    return httpx.Client(follow_redirects=True, timeout=_FETCH_TIMEOUT_S, verify=verify)
 
 
 @dataclass
@@ -237,9 +327,11 @@ def _resolve_route(state: _State, path: str) -> tuple[int, bytes] | None:  # noq
 class Origin:
     """A real in-process origin serving the WBA directory, revocation snapshot,
     JWKS key doc, and fora.json manifest. Each doc is independently settable so a
-    test can rotate keys, publish a new revocation snapshot, or force a 500."""
+    test can rotate keys, publish a new revocation snapshot, or force a 500.
 
-    def __init__(self) -> None:
+    ``tls=True`` serves https, which is how a ``WBAKeyResolver`` reaches it."""
+
+    def __init__(self, *, tls: bool = False) -> None:
         self._state = _State()
         state = self._state
 
@@ -272,11 +364,11 @@ def do_GET(self) -> None:
             def log_message(self, *_args: Any) -> None:  # silence the test server
                 return
 
-        self._server = ThreadingHTTPServer(("127.0.0.1", 0), _Handler)
+        self._server = listen(_Handler, tls=tls)
         self.host = f"127.0.0.1:{self._server.server_address[1]}"
-        self.url = f"http://{self.host}"
-        #: The https origin a Signature-Agent member names for this origin's directory,
-        #: fetched over http by a resolver built with ``scheme="http"``.
+        self.url = f"{'https' if tls else 'http'}://{self.host}"
+        #: The https origin a Signature-Agent member names for this origin's directory.
+        #: Only an ``Origin(tls=True)`` answers it.
         self.origin = f"https://{self.host}"
         self._thread = threading.Thread(target=self._server.serve_forever, daemon=True)
         self._thread.start()
diff --git a/sdk/python/tests/test_identity_helpers.py b/sdk/python/tests/test_identity_helpers.py
index 79078ec6..b7d05d11 100644
--- a/sdk/python/tests/test_identity_helpers.py
+++ b/sdk/python/tests/test_identity_helpers.py
@@ -51,7 +51,7 @@
 
 @pytest.fixture
 def origin() -> Iterator[Origin]:
-    served = Origin()
+    served = Origin(tls=True)
     yield served
     served.close()
 
@@ -62,7 +62,7 @@ def _raw(key: Ed25519PrivateKey) -> bytes:
 
 def _resolver() -> WBAKeyResolver:
     # The real clock: the window directory_document chooses must contain "now".
-    return WBAKeyResolver(http=loopback_client(), scheme="http")
+    return WBAKeyResolver(http=loopback_client())
 
 
 class _DirectoryKeys:
@@ -131,8 +131,12 @@ def test_directory_document_carries_each_key_with_its_validity_window() -> None:
     ]
     for jwk in document["keys"]:
         assert set(jwk) == _JWK_MEMBERS
-        assert (jwk["kty"], jwk["crv"], jwk["alg"], jwk["use"]) == ("OKP", "Ed25519", "EdDSA",
-                                                                    "sig")
+        assert (jwk["kty"], jwk["crv"], jwk["alg"], jwk["use"]) == (
+            "OKP",
+            "Ed25519",
+            "EdDSA",
+            "sig",
+        )
         not_before = datetime.fromisoformat(jwk["not_before"])
         not_after = datetime.fromisoformat(jwk["not_after"])
         assert not_before.tzinfo is not None
@@ -143,8 +147,9 @@ def test_directory_document_carries_each_key_with_its_validity_window() -> None:
 def test_the_sdk_resolver_reads_every_key_of_a_served_document(origin: Origin) -> None:
     first, first_id = _minted()
     second, second_id = _minted()
-    origin.set_wba(json.dumps(fora_sdk.directory_document([first.public_key(),
-                                                           second.public_key()])))
+    origin.set_wba(
+        json.dumps(fora_sdk.directory_document([first.public_key(), second.public_key()]))
+    )
     resolver = _resolver()
 
     assert resolver.resolve(first_id, origin.origin) == _raw(first)
diff --git a/sdk/python/tests/test_resolvers_wba_debounce.py b/sdk/python/tests/test_resolvers_wba_debounce.py
index 07cf29f0..3cfe1ca2 100644
--- a/sdk/python/tests/test_resolvers_wba_debounce.py
+++ b/sdk/python/tests/test_resolvers_wba_debounce.py
@@ -29,6 +29,7 @@
     long_jwk,
     loopback_client,
     make_key,
+    serve_tls,
     signed_directory_headers,
     wba_file_json,
 )
@@ -81,7 +82,8 @@ def log_message(self, *_args: Any) -> None:  # silence the test server
                 return
 
         self._server = ThreadingHTTPServer(("127.0.0.1", 0), _Handler)
-        self.url = f"http://127.0.0.1:{self._server.server_address[1]}"
+        serve_tls(self._server)
+        self.url = f"https://127.0.0.1:{self._server.server_address[1]}"
         self._thread = threading.Thread(target=self._server.serve_forever, daemon=True)
         self._thread.start()
 
@@ -114,7 +116,6 @@ def test_unknown_thumbprint_burst_debounced() -> None:
         clock = MutableClock(ANCHOR)
         r = WBAKeyResolver(
             http=loopback_client(),
-            scheme="http",
             ttl=HOUR,
             sync_debounce=timedelta(seconds=5),
             now=clock,
@@ -150,9 +151,7 @@ def test_concurrent_refresh_singleflight() -> None:
     origin.gate = threading.Event()
     origin.arrived = queue.Queue()
     try:
-        r = WBAKeyResolver(
-            http=loopback_client(), scheme="http", ttl=HOUR, now=MutableClock(ANCHOR)
-        )
+        r = WBAKeyResolver(http=loopback_client(), ttl=HOUR, now=MutableClock(ANCHOR))
 
         burst = 12
         barrier = threading.Barrier(burst)
diff --git a/sdk/python/tests/test_resolvers_wba_integration.py b/sdk/python/tests/test_resolvers_wba_integration.py
index 6abedb29..b44fa807 100644
--- a/sdk/python/tests/test_resolvers_wba_integration.py
+++ b/sdk/python/tests/test_resolvers_wba_integration.py
@@ -50,10 +50,10 @@
 
 def test_wba_active() -> None:
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([active_jwk(k.x)]))
     try:
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+        r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         assert r.resolve(k.tp, origin.origin) == k.raw_pub
     finally:
         origin.close()
@@ -61,10 +61,10 @@ def test_wba_active() -> None:
 
 def test_wba_key_expired() -> None:
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([expired_jwk(k.x)]))
     try:
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+        r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         with pytest.raises(KeyExpiredError):
             r.resolve(k.tp, origin.origin)
     finally:
@@ -73,10 +73,10 @@ def test_wba_key_expired() -> None:
 
 def test_wba_unknown_key() -> None:
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([active_jwk(k.x)]))
     try:
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+        r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         with pytest.raises(UnknownKeyError):
             r.resolve("absent-thumbprint", origin.origin)
     finally:
@@ -85,11 +85,11 @@ def test_wba_unknown_key() -> None:
 
 def test_wba_key_revoked() -> None:
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([active_jwk(k.x)], origin.revocation_url()))
     origin.set_revocation(revocation_json(ANCHOR, [k.tp]))
     try:
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+        r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         with pytest.raises(KeyRevokedError):
             r.resolve(k.tp, origin.origin)
     finally:
@@ -99,12 +99,10 @@ def test_wba_key_revoked() -> None:
 def test_wba_rotation_self_heal() -> None:
     k1 = make_key()
     k2 = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([active_jwk(k1.x)]))  # prime: only k1
     try:
-        r = WBAKeyResolver(
-            http=loopback_client(), scheme="http", ttl=HOUR, now=MutableClock(ANCHOR)
-        )
+        r = WBAKeyResolver(http=loopback_client(), ttl=HOUR, now=MutableClock(ANCHOR))
         assert r.resolve(k1.tp, origin.origin) == k1.raw_pub
         origin.set_wba(wba_file_json([active_jwk(k1.x), active_jwk(k2.x)]))  # rotate k2 in
         # Cache still holds k1-only, so the k2 lookup must trigger a self-heal
@@ -118,12 +116,12 @@ def test_wba_revocation_rollback_ignored() -> None:
     # Monotonic guard: an older-as_of snapshot must NOT un-revoke. Runs via
     # Resolve + TTL-expiry (no poller).
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([long_jwk(k.x)], origin.revocation_url()))
     origin.set_revocation(revocation_json(ANCHOR, [k.tp]))
     try:
         clock = MutableClock(ANCHOR)
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
+        r = WBAKeyResolver(http=loopback_client(), ttl=HOUR, now=clock)
         with pytest.raises(KeyRevokedError):
             r.resolve(k.tp, origin.origin)
         # Publish a rolled-back (older as_of) snapshot that drops the revocation.
@@ -138,12 +136,12 @@ def test_wba_revocation_rollback_ignored() -> None:
 def test_wba_revocation_forward_progress_applied() -> None:
     # Forward progress: a strictly-newer empty snapshot DOES un-revoke.
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([long_jwk(k.x)], origin.revocation_url()))
     origin.set_revocation(revocation_json(ANCHOR, [k.tp]))
     try:
         clock = MutableClock(ANCHOR)
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
+        r = WBAKeyResolver(http=loopback_client(), ttl=HOUR, now=clock)
         with pytest.raises(KeyRevokedError):
             r.resolve(k.tp, origin.origin)
         origin.set_revocation(revocation_json(ANCHOR + HOUR, []))
@@ -157,12 +155,12 @@ def test_wba_first_poll_far_future_as_of_clamp() -> None:
     # A far-future first as_of is clamped to now+skew so a later honest snapshot
     # still applies (first-poll integrity).
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([long_jwk(k.x)], origin.revocation_url()))
     origin.set_revocation(revocation_json(ANCHOR + 10000 * HOUR, []))
     try:
         clock = MutableClock(ANCHOR)
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
+        r = WBAKeyResolver(http=loopback_client(), ttl=HOUR, now=clock)
         assert r.resolve(k.tp, origin.origin) == k.raw_pub  # prime
         clock.t = ANCHOR + 2 * HOUR
         origin.set_revocation(revocation_json(ANCHOR + 2 * HOUR, [k.tp]))
@@ -176,11 +174,11 @@ def test_wba_removal_is_not_revocation() -> None:
     # A key dropped from the directory is unknown, NOT revoked.
     k1 = make_key()
     k2 = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([long_jwk(k1.x)]))
     try:
         clock = MutableClock(ANCHOR)
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", ttl=HOUR, now=clock)
+        r = WBAKeyResolver(http=loopback_client(), ttl=HOUR, now=clock)
         assert r.resolve(k1.tp, origin.origin) == k1.raw_pub
         origin.set_wba(wba_file_json([long_jwk(k2.x)]))  # drop k1
         clock.t = ANCHOR + 2 * HOUR  # expire TTL → re-fetch k1-less directory
@@ -194,12 +192,12 @@ def test_wba_removal_is_not_revocation() -> None:
 def test_wba_revocation_url_host_not_anchored() -> None:
     # A cross-host revocation_url is skipped; the key stays valid.
     k = make_key()
-    evil = Origin()  # would revoke the key if polled
+    evil = Origin(tls=True)  # would revoke the key if polled
     evil.set_revocation(revocation_json(ANCHOR, [k.tp]))
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([active_jwk(k.x)], evil.revocation_url()))  # cross-host
     try:
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+        r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         # Not anchored → not polled → key resolves.
         assert r.resolve(k.tp, origin.origin) == k.raw_pub
     finally:
@@ -209,7 +207,7 @@ def test_wba_revocation_url_host_not_anchored() -> None:
 
 def test_wba_no_signature_agent() -> None:
     # An empty directory (no Signature-Agent) → UnknownKeyError.
-    r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+    r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
     with pytest.raises(UnknownKeyError):
         r.resolve("any-thumbprint", "")
 
@@ -218,7 +216,7 @@ def test_wba_malformed_signature_agent() -> None:
     # A malformed (non-empty, unparseable) directory ref → UnknownKeyError
     # (fall-through), DISTINCT from a fetch failure. Malformed cannot name a
     # directory, so it is not a fail-closed halt.
-    r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+    r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
     with pytest.raises(UnknownKeyError):
         r.resolve("any-thumbprint", "http://")
 
@@ -226,12 +224,10 @@ def test_wba_malformed_signature_agent() -> None:
 def test_wba_ttl_cache_hit() -> None:
     # A cache hit resolves within TTL even after the origin starts 500ing.
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([wba_jwk(k.x, ANCHOR - HOUR, ANCHOR + 10 * HOUR)]))
     try:
-        r = WBAKeyResolver(
-            http=loopback_client(), scheme="http", ttl=HOUR, now=MutableClock(ANCHOR)
-        )
+        r = WBAKeyResolver(http=loopback_client(), ttl=HOUR, now=MutableClock(ANCHOR))
         assert r.resolve(k.tp, origin.origin) == k.raw_pub
         origin.set_wba_status(500)  # origin now fails; cached hit must still succeed
         assert r.resolve(k.tp, origin.origin) == k.raw_pub
@@ -243,10 +239,10 @@ def test_wba_fetch_error_directory_unavailable_distinct_from_unknown() -> None:
     # A fetch/500 failure raises DirectoryUnavailableError, which MUST be a
     # distinct class from UnknownKeyError so a composite fails closed rather than
     # falling through.
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba_status(500)
     try:
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+        r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         with pytest.raises(DirectoryUnavailableError) as exc:
             r.resolve("any-thumbprint", origin.origin)
         assert not isinstance(exc.value, UnknownKeyError)
@@ -259,7 +255,7 @@ def test_wba_run_poller_applies_revocation() -> None:
     # directory re-fetch, driven by the deterministic clock + armed/cycle seams
     # (no sleeps).
     k = make_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     origin.set_wba(wba_file_json([long_jwk(k.x)], origin.revocation_url()))
     origin.set_revocation(revocation_json(ANCHOR - HOUR, []))  # nothing revoked yet
 
@@ -270,7 +266,6 @@ def test_wba_run_poller_applies_revocation() -> None:
 
     r = WBAKeyResolver(
         http=loopback_client(),
-        scheme="http",
         ttl=100 * HOUR,  # never expires during the test → isolate the poller
         poll_interval=poll_interval,
         now=clk.now,
diff --git a/sdk/python/tests/test_resolvers_wba_profile.py b/sdk/python/tests/test_resolvers_wba_profile.py
index 7373982c..11799940 100644
--- a/sdk/python/tests/test_resolvers_wba_profile.py
+++ b/sdk/python/tests/test_resolvers_wba_profile.py
@@ -3,8 +3,8 @@
 
 A key directory is fetched with no redirect, must be served as
 ``application/http-message-signatures-directory+json``, and only the keys that signed
-its response are handed out. A member is an https origin; the resolver reaches the
-plaintext in-process origin through its scheme override. The last case drives a real
+its response are handed out. A member is an https origin and is always fetched over
+https, so the in-process origin serves TLS. The last case drives a real
 two-signature request through ``verify_multisig_request_server`` with this resolver,
 each key published only in its own signer's directory.
 """
@@ -48,20 +48,20 @@
 
 @pytest.fixture
 def origin() -> Iterator[Origin]:
-    o = Origin()
+    o = Origin(tls=True)
     yield o
     o.close()
 
 
 @pytest.fixture
 def other() -> Iterator[Origin]:
-    o = Origin()
+    o = Origin(tls=True)
     yield o
     o.close()
 
 
 def _resolver() -> WBAKeyResolver:
-    return WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+    return WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
 
 
 def _key(*, signs: bool) -> tuple[Ed25519PrivateKey, str, str]:
@@ -85,14 +85,30 @@ def test_only_keys_that_signed_the_response_are_handed_out(origin: Origin) -> No
         r.resolve(unsigned_tp, origin.origin)
 
 
-def test_a_member_origin_is_fetched_over_the_override_scheme(origin: Origin) -> None:
-    # The member names an https origin; the resolver built with scheme="http" fetches
-    # that origin's directory over http, and a resolver left at https cannot reach it.
+def test_a_member_origin_and_a_bare_host_are_fetched_over_https(origin: Origin) -> None:
+    # The origin answers only TLS, so each resolve proves the directory was requested
+    # over https: the member as written, and a bare host:port prefixed with https.
     _, x, tp = _key(signs=True)
     origin.set_wba(wba_file_json([active_jwk(x)]))
     assert _resolver().resolve(tp, origin.origin) is not None
-    with pytest.raises(DirectoryUnavailableError):
-        WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR)).resolve(tp, origin.origin)
+    assert _resolver().resolve(tp, origin.host) is not None
+
+
+def test_a_plaintext_directory_is_never_reached() -> None:
+    # A directory served only in plaintext is unavailable under its https member, and
+    # the resolver offers no option to fetch it over http instead.
+    plain = Origin()
+    try:
+        _, x, tp = _key(signs=True)
+        plain.set_wba(wba_file_json([active_jwk(x)]))
+        with pytest.raises(DirectoryUnavailableError):
+            _resolver().resolve(tp, plain.origin)
+        with pytest.raises(DirectoryUnavailableError):
+            _resolver().resolve(tp, plain.host)
+        with pytest.raises(TypeError):
+            WBAKeyResolver(http=loopback_client(), scheme="http")  # type: ignore[call-arg]
+    finally:
+        plain.close()
 
 
 @pytest.mark.parametrize("served", ["application/jwk-set+json", "application/json", None])
@@ -172,6 +188,6 @@ def test_a_clock_outside_the_key_validity_still_fails_closed(origin: Origin) ->
     # The profile adds checks; it does not replace the validity window.
     _, x, tp = _key(signs=True)
     origin.set_wba(wba_file_json([active_jwk(x)]))
-    r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR + 2 * HOUR))
+    r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR + 2 * HOUR))
     with pytest.raises(KeyExpiredError):
         r.resolve(tp, origin.origin)
diff --git a/sdk/python/tests/test_resolvers_wba_require_revocation.py b/sdk/python/tests/test_resolvers_wba_require_revocation.py
index 1dd40816..977fd0f1 100644
--- a/sdk/python/tests/test_resolvers_wba_require_revocation.py
+++ b/sdk/python/tests/test_resolvers_wba_require_revocation.py
@@ -36,8 +36,8 @@ def test_require_revocation_unevaluated_fails_closed() -> None:
     # A revocation host the resolver must NOT follow: it declares the key as
     # revoked, but sits on a different host than the directory, so the anchor
     # guard refuses the poll and no snapshot ever lands.
-    evil = Origin()
-    directory = Origin()
+    evil = Origin(tls=True)
+    directory = Origin(tls=True)
     try:
         evil.set_revocation(revocation_json(ANCHOR, [key.tp]))
         directory.set_wba(
@@ -48,13 +48,12 @@ def test_require_revocation_unevaluated_fails_closed() -> None:
         )
 
         # Default (best-effort): resolves despite the unevaluated revocation channel.
-        best = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(ANCHOR))
+        best = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         assert best.resolve(key.tp, directory.url) == key.raw_pub
 
         # require_revocation: fail closed — revocation_url declared, no snapshot.
         strict = WBAKeyResolver(
             http=loopback_client(),
-            scheme="http",
             now=MutableClock(ANCHOR),
             require_revocation=True,
         )
diff --git a/sdk/python/tests/test_resolvers_wba_revocation_parity.py b/sdk/python/tests/test_resolvers_wba_revocation_parity.py
index 8be56d68..503756a0 100644
--- a/sdk/python/tests/test_resolvers_wba_revocation_parity.py
+++ b/sdk/python/tests/test_resolvers_wba_revocation_parity.py
@@ -79,12 +79,12 @@ def test_revocation_membership_corpus_nonempty() -> None:
 )
 def test_revoked_matches_go_oracle(case: dict[str, Any]) -> None:
     _register_the_emitters_key()
-    origin = Origin()
+    origin = Origin(tls=True)
     try:
         origin.set_wba(wba_file_json(_directory_keys(), origin.revocation_url()))
         origin.set_revocation(revocation_json(_as_of(), list(_VECTOR["revoked"])))
 
-        r = WBAKeyResolver(http=loopback_client(), scheme="http", now=MutableClock(_as_of()))
+        r = WBAKeyResolver(http=loopback_client(), now=MutableClock(_as_of()))
         # Prime the revocation snapshot by resolving the directory-listed key.
         r.resolve(_VECTOR["prime_thumbprint"], origin.origin)
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index c3313c09..65059d27 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -800,9 +800,11 @@ SDKs, in all three languages:
   `verifyDirectoryResponse` check one. The WBA key resolvers and the offer-directory
   fetch refuse redirects, check the media type and hand out only keys that signed the
   response; `ReadWBADirectory` / `read_wba_directory` / `readWBADirectory` require every
-  listed key to have signed, and refuse `application/jwk-set+json`. Go's
-  `WBAKeyResolverOptions.Scheme`, which let a configuration fetch an https origin's
-  directory in plaintext, is removed: a directory is always fetched over https. The
+  listed key to have signed, and refuse `application/jwk-set+json`. The key resolver's
+  scheme option, which let a configuration fetch an https origin's directory in
+  plaintext, is removed from all three SDKs (Go `WBAKeyResolverOptions.Scheme`, Python
+  `WBAKeyResolver(scheme=...)`, TypeScript `WBAKeyResolverOptions.scheme`): a directory
+  is always fetched over https. The
   constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
   constants.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:

From ace9a15ab879ea1fa3216aec0df6c680ec173388 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:26:34 -0400
Subject: [PATCH 128/164] Fetch WBA directories over https only and pin the
 proof base-build refusal

WBAKeyResolverOptions.scheme was a test seam on the production surface:
it let a configuration fetch an https origin's directory in plaintext,
and a bare host reference was prefixed with it. It is removed, as Go
removed WBAKeyResolverOptions.Scheme. A bare host is prefixed with
https:// and an https origin is always fetched over https. The resolver
tests inject httpsToLoopback, a real fetch that routes an https request
for a 127.0.0.1 origin to that origin's plaintext listener, so the
resolver still builds the https URL it builds in production. New tests
show a bare host, with or without a port, is requested over https, and
that a caller still passing the removed option gets https all the same.

A delivery proof whose signature base cannot be rebuilt is refused as
bad_covered_components with Accept-Signature, as Go's popVerifyBase
refuses it. A test pins it with a proof covering x-missing-header, a
header the request never carried.
---
 sdk/ts/resolvers/wba.ts                       | 25 ++----
 sdk/ts/tests/resolvers-harness.ts             | 12 +++
 sdk/ts/tests/resolvers-wba-debounce.test.ts   |  6 +-
 .../resolvers-wba-revocation.parity.test.ts   |  4 +-
 .../tests/resolvers-wba.integration.test.ts   | 76 +++++++++++++------
 sdk/ts/tests/wba-profile.test.ts              |  9 +++
 6 files changed, 86 insertions(+), 46 deletions(-)

diff --git a/sdk/ts/resolvers/wba.ts b/sdk/ts/resolvers/wba.ts
index 5351cf7a..75d0c895 100644
--- a/sdk/ts/resolvers/wba.ts
+++ b/sdk/ts/resolvers/wba.ts
@@ -44,11 +44,6 @@ type WBAJwk = NonNullable<WBAFile["keys"]>[number];
 /** Options for the WBA resolver. Zero values are safe defaults; tests inject the
  * clock (`now`), the poll timer (`after`), and the armed/cycle seams. */
 export interface WBAKeyResolverOptions {
-	/** The scheme directories are fetched over (empty → "https"). A Signature-Agent
-	 * member is always an https origin; tests inject "http" to fetch that origin's
-	 * directory from a plaintext test server, and a bare host reference is prefixed
-	 * with it. */
-	scheme?: string;
 	ttlMs?: number;
 	pollIntervalMs?: number;
 	/** Throttle for the unknown-thumbprint force-refresh, per directory host (≤0 →
@@ -111,7 +106,6 @@ interface RevSet {
 }
 
 class WBAResolverImpl implements WBAKeyResolver {
-	private readonly scheme: string;
 	private readonly ttlMs: number;
 	private readonly pollMs: number;
 	private readonly syncDebounceMs: number;
@@ -130,7 +124,6 @@ class WBAResolverImpl implements WBAKeyResolver {
 	private readonly inflight = new Map<string, Promise<WBAFile>>();
 
 	constructor(opts: WBAKeyResolverOptions) {
-		this.scheme = opts.scheme && opts.scheme !== "" ? opts.scheme : "https";
 		this.ttlMs = opts.ttlMs && opts.ttlMs > 0 ? opts.ttlMs : DEFAULT_TTL_MS;
 		this.pollMs =
 			opts.pollIntervalMs && opts.pollIntervalMs > 0
@@ -154,7 +147,7 @@ class WBAResolverImpl implements WBAKeyResolver {
 		directory: string,
 	): Promise<Uint8Array | undefined> {
 		if (directory === "" || keyID === "") return undefined;
-		const parsed = directoryBase(directory, this.scheme);
+		const parsed = directoryBase(directory);
 		// A malformed Signature-Agent cannot name a directory: fall-through
 		// (undefined), NOT a fail-closed DirectoryUnavailable halt.
 		if (!parsed) return undefined;
@@ -325,13 +318,12 @@ function whenAborted(signal: AbortSignal): Promise<void> {
 
 /** Normalize a directory reference (an https origin, bare host, host:port, or full
  * URL) into a scheme://host base and its host key, or `undefined` when it names no
- * host. An https origin is fetched over the resolver's scheme, so a test reaches a
- * plaintext server through the same origin a signature names. */
-function directoryBase(
-	ref: string,
-	scheme: string,
-): { base: string; host: string } | undefined {
-	const withScheme = ref.includes("://") ? ref : `${scheme}://${ref}`;
+ * host. A bare host is prefixed with https://, and an https origin is fetched over
+ * https: there is no option that fetches it any other way (Go removed
+ * WBAKeyResolverOptions.Scheme for the same reason), so a test reaches a local server
+ * by injecting a fetch that routes the https URL to it. */
+function directoryBase(ref: string): { base: string; host: string } | undefined {
+	const withScheme = ref.includes("://") ? ref : `https://${ref}`;
 	let url: URL;
 	try {
 		url = new URL(withScheme);
@@ -339,8 +331,7 @@ function directoryBase(
 		return undefined;
 	}
 	if (url.host === "") return undefined;
-	const protocol = url.protocol === "https:" && scheme !== "https" ? `${scheme}:` : url.protocol;
-	return { base: `${protocol}//${url.host}`, host: url.host };
+	return { base: `${url.protocol}//${url.host}`, host: url.host };
 }
 
 /** Whether `candidate` is anchored to `anchor` — the same host and port, or a
diff --git a/sdk/ts/tests/resolvers-harness.ts b/sdk/ts/tests/resolvers-harness.ts
index fd844cd6..4220a798 100644
--- a/sdk/ts/tests/resolvers-harness.ts
+++ b/sdk/ts/tests/resolvers-harness.ts
@@ -19,6 +19,7 @@ import type { AddressInfo } from "node:net";
 import { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
 import { signDirectoryResponse } from "../core/directory-response.ts";
 import { WBA_DIRECTORY_MEDIA_TYPE } from "../resolvers/documents.ts";
+import type { FetchLike } from "../resolvers/fetch.ts";
 import { decodeBase64Url } from "../src/base64url.ts";
 import { thumbprint } from "../src/thumbprint.ts";
 import { WellKnownManifestVersion } from "../src/wire.ts";
@@ -321,6 +322,17 @@ export const loopbackFetch = (
 ): Promise<{ status: number; text(): Promise<string> }> =>
 	fetch(url) as unknown as Promise<{ status: number; text(): Promise<string> }>;
 
+/** A real fetch for the WBA key resolver, which always requests a directory over
+ * https: a bare host is prefixed with https:// and there is no option to fetch an https
+ * origin any other way. The in-process origins listen in plaintext, so this routes an
+ * https request for a 127.0.0.1 origin to that origin's plaintext listener, leaving the
+ * host (and so the response signatures' @authority) unchanged. Every other URL is
+ * fetched as given. A redirect: "manual" request is passed on, so the global fetch
+ * answers a 3xx itself. Only the test dials plaintext; the resolver never builds an
+ * http URL for an https reference. */
+export const httpsToLoopback: FetchLike = (url, init) =>
+	fetch(url.replace(/^https:\/\/127\.0\.0\.1:/, "http://127.0.0.1:"), init?.redirect === "manual" ? { redirect: "manual" } : {});
+
 // Parsed-WBAFile builders. These mirror the inline helpers the active-key
 // behavior suite uses, hoisted here so the offer-key-cache suite consumes a
 // PARSED WBAFile (the shape the cache's injected OfferDirectoryFetch seam
diff --git a/sdk/ts/tests/resolvers-wba-debounce.test.ts b/sdk/ts/tests/resolvers-wba-debounce.test.ts
index 35fc10a0..87ca3362 100644
--- a/sdk/ts/tests/resolvers-wba-debounce.test.ts
+++ b/sdk/ts/tests/resolvers-wba-debounce.test.ts
@@ -20,7 +20,7 @@ import {
 	startOrigin,
 	wbaFileJson,
 	wbaJwk,
-	loopbackFetch,
+	httpsToLoopback,
 } from "./resolvers-harness.ts";
 
 function longJwk(x: string): Record<string, unknown> {
@@ -43,7 +43,7 @@ describe("createWBAKeyResolver unknown-thumbprint debounce", () => {
 
 		let now = ANCHOR_MS;
 		const r = createWBAKeyResolver({
-			scheme: "http", fetch: loopbackFetch,
+			fetch: httpsToLoopback,
 			ttlMs: HOUR_MS,
 			syncDebounceMs: 5_000,
 			now: () => now,
@@ -77,7 +77,7 @@ describe("createWBAKeyResolver unknown-thumbprint debounce", () => {
 		o.setWBA(wbaFileJson([longJwk(known.x)]));
 
 		const r = createWBAKeyResolver({
-			scheme: "http", fetch: loopbackFetch,
+			fetch: httpsToLoopback,
 			ttlMs: HOUR_MS,
 			now: () => ANCHOR_MS,
 		});
diff --git a/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts b/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
index f729de34..971bf42d 100644
--- a/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
+++ b/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
@@ -23,7 +23,7 @@ import {
 	startOrigin,
 	wbaFileJson,
 	wbaJwk,
-	loopbackFetch,
+	httpsToLoopback,
 } from "./resolvers-harness.ts";
 
 interface RevMembershipCase {
@@ -65,7 +65,7 @@ describe("sdk/ts revoked() matches the sdk/go revocation-membership oracle", ()
 		origin.setRevocation(revocationJson(vec.as_of, vec.revoked));
 
 		const r = createWBAKeyResolver({
-			scheme: "http", fetch: loopbackFetch,
+			fetch: httpsToLoopback,
 			now: () => Date.parse(vec.as_of),
 		});
 		// Prime the revocation snapshot by resolving the directory-listed key.
diff --git a/sdk/ts/tests/resolvers-wba.integration.test.ts b/sdk/ts/tests/resolvers-wba.integration.test.ts
index 5ad70f87..55312d78 100644
--- a/sdk/ts/tests/resolvers-wba.integration.test.ts
+++ b/sdk/ts/tests/resolvers-wba.integration.test.ts
@@ -31,6 +31,7 @@ import {
 	startOrigin,
 	wbaFileJson,
 	wbaJwk,
+	httpsToLoopback,
 	loopbackFetch,
 	signedDirectoryHeaders,
 } from "./resolvers-harness.ts";
@@ -121,7 +122,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin = await startOrigin();
 		origin.setWBA(wbaFileJson([activeJwk(k.x)]));
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		expect(await r.resolve(k.tp, origin.url)).toEqual(k.rawPub);
 	});
 
@@ -131,7 +132,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin = await startOrigin();
 		origin.setWBA(wbaFileJson([expiredJwk(k.x)]));
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		await expect(r.resolve(k.tp, origin.url)).rejects.toBeInstanceOf(KeyExpired);
 	});
 
@@ -141,7 +142,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin = await startOrigin();
 		origin.setWBA(wbaFileJson([activeJwk(k.x)]));
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		expect(await r.resolve("absent-thumbprint", origin.url)).toBeUndefined();
 	});
 
@@ -152,7 +153,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin.setWBA(wbaFileJson([activeJwk(k.x)], origin.revocationURL()));
 		origin.setRevocation(revocationJson(iso(ANCHOR_MS), [k.tp]));
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		await expect(r.resolve(k.tp, origin.url)).rejects.toBeInstanceOf(KeyRevoked);
 	});
 
@@ -164,7 +165,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin.setWBA(wbaFileJson([activeJwk(k1.x)])); // prime: only k1
 
 		const now = ANCHOR_MS;
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, ttlMs: HOUR_MS, now: () => now });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, ttlMs: HOUR_MS, now: () => now });
 		expect(await r.resolve(k1.tp, origin.url)).toEqual(k1.rawPub);
 
 		origin.setWBA(wbaFileJson([activeJwk(k1.x), activeJwk(k2.x)])); // rotate k2 in
@@ -182,7 +183,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin.setRevocation(revocationJson(iso(ANCHOR_MS), [k.tp]));
 
 		let now = ANCHOR_MS;
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, ttlMs: HOUR_MS, now: () => now });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, ttlMs: HOUR_MS, now: () => now });
 		await expect(r.resolve(k.tp, origin.url)).rejects.toBeInstanceOf(KeyRevoked);
 
 		// Publish a rolled-back (older as_of) snapshot that drops the revocation.
@@ -199,7 +200,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin.setRevocation(revocationJson(iso(ANCHOR_MS), [k.tp]));
 
 		let now = ANCHOR_MS;
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, ttlMs: HOUR_MS, now: () => now });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, ttlMs: HOUR_MS, now: () => now });
 		await expect(r.resolve(k.tp, origin.url)).rejects.toBeInstanceOf(KeyRevoked);
 
 		origin.setRevocation(revocationJson(iso(ANCHOR_MS + HOUR_MS), []));
@@ -216,7 +217,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin.setRevocation(revocationJson(iso(ANCHOR_MS + 10000 * HOUR_MS), []));
 
 		let now = ANCHOR_MS;
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, ttlMs: HOUR_MS, now: () => now });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, ttlMs: HOUR_MS, now: () => now });
 		expect(await r.resolve(k.tp, origin.url)).toEqual(k.rawPub); // prime
 
 		now = ANCHOR_MS + 2 * HOUR_MS;
@@ -232,7 +233,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin.setWBA(wbaFileJson([longJwk(k1.x)]));
 
 		let now = ANCHOR_MS;
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, ttlMs: HOUR_MS, now: () => now });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, ttlMs: HOUR_MS, now: () => now });
 		expect(await r.resolve(k1.tp, origin.url)).toEqual(k1.rawPub);
 
 		origin.setWBA(wbaFileJson([longJwk(k2.x)])); // drop k1
@@ -250,7 +251,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin = await startOrigin();
 		origin.setWBA(wbaFileJson([activeJwk(k.x)], extra.revocationURL())); // cross-host
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		// Not anchored → not polled → key resolves.
 		expect(await r.resolve(k.tp, origin.url)).toEqual(k.rawPub);
 	});
@@ -270,12 +271,12 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin.setWBA(wbaFileJson([activeJwk(k.x)], extra.revocationURL()));
 
 		// Default (best-effort): resolves despite the unevaluated revocation channel.
-		const best = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const best = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		expect(await best.resolve(k.tp, origin.url)).toEqual(k.rawPub);
 
 		// requireRevocation: fail closed — revocation_url declared, no snapshot.
 		const strict = createWBAKeyResolver({
-			scheme: "http", fetch: loopbackFetch,
+			fetch: httpsToLoopback,
 			requireRevocation: true,
 			now: () => ANCHOR_MS,
 		});
@@ -287,7 +288,7 @@ describe("createWBAKeyResolver.resolve", () => {
 
 	// Test 12 — no directory (empty Signature-Agent) → unknown (undefined).
 	it("returns undefined when no directory is supplied", async () => {
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		expect(await r.resolve("any-thumbprint", "")).toBeUndefined();
 	});
 
@@ -295,7 +296,7 @@ describe("createWBAKeyResolver.resolve", () => {
 	// (undefined), DISTINCT from a fetch failure. Malformed cannot name a
 	// directory, so it is fall-through, not a fail-closed halt.
 	it("returns undefined for a malformed directory reference", async () => {
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		expect(await r.resolve("any-thumbprint", "http://")).toBeUndefined();
 	});
 
@@ -305,7 +306,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin = await startOrigin();
 		origin.setWBA(wbaFileJson([wbaJwk(k.x, iso(ANCHOR_MS - HOUR_MS), iso(ANCHOR_MS + 10 * HOUR_MS))]));
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, ttlMs: HOUR_MS, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, ttlMs: HOUR_MS, now: () => ANCHOR_MS });
 		expect(await r.resolve(k.tp, origin.url)).toEqual(k.rawPub);
 
 		origin.setWBAStatus(500); // origin now fails; cached hit must still succeed
@@ -318,7 +319,7 @@ describe("createWBAKeyResolver.resolve", () => {
 		origin = await startOrigin();
 		origin.setWBAStatus(500);
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		// Directory outage is a thrown halt, never an undefined fall-through.
 		await expect(r.resolve("any-thumbprint", origin.url)).rejects.toBeInstanceOf(
 			DirectoryUnavailable,
@@ -342,7 +343,7 @@ describe("createWBAKeyResolver.run poller", () => {
 		const cycled = makeSignal();
 
 		const r = createWBAKeyResolver({
-			scheme: "http", fetch: loopbackFetch,
+			fetch: httpsToLoopback,
 			ttlMs: 100 * HOUR_MS, // never expires during the test → isolate the poller
 			pollIntervalMs,
 			now: clk.now,
@@ -395,7 +396,7 @@ describe("the WBA revocation anchor wrapper", () => {
 				text: async () => JSON.stringify({ as_of: "2026-01-01T00:00:00Z", revoked: [] }),
 			};
 		};
-		const r = createWBAKeyResolver({ scheme: "http", fetch });
+		const r = createWBAKeyResolver({ fetch });
 		await r.resolve("unknown-thumbprint", directory).catch(() => undefined);
 		// De-duplicated: the unknown-thumbprint force-refresh re-reads the directory,
 		// so a polled URL legitimately appears more than once. What is under test is
@@ -444,7 +445,7 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 		origins.push(origin);
 		origin.setWBA(wbaFileJson([activeJwk(signed.x), activeJwk(unsigned.x)]), [signed.x]);
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		expect(await r.resolve(signed.tp, origin.host)).toEqual(signed.rawPub);
 		expect(await r.resolve(unsigned.tp, origin.host)).toBeUndefined();
 	});
@@ -469,7 +470,7 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 		const origin = await startOrigin();
 		origins.push(origin);
 		origin.setWBA(wbaFileJson([activeJwk(k.x)]), []);
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		await expect(r.resolve(k.tp, origin.host)).rejects.toBeInstanceOf(DirectoryUnavailable);
 	});
 
@@ -481,7 +482,7 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 			headers["content-type"] = "application/jwk-set+json";
 			return { status: 200, text: async () => body, headers: { get: (n: string) => headers[n] ?? null } };
 		};
-		const r = createWBAKeyResolver({ scheme: "http", fetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch, now: () => ANCHOR_MS });
 		await expect(r.resolve(k.tp, "a.example")).rejects.toBeInstanceOf(DirectoryUnavailable);
 	});
 
@@ -499,7 +500,7 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 		const host = `127.0.0.1:${(redirecting.address() as AddressInfo).port}`;
 
 		// The global fetch honours redirect: "manual" and answers the 302 itself.
-		const honouring = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const honouring = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		await expect(honouring.resolve(k.tp, host)).rejects.toBeInstanceOf(DirectoryUnavailable);
 
 		// A transport that follows anyway is caught by the response it reports.
@@ -513,7 +514,7 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 				arrayBuffer: () => resp.arrayBuffer(),
 			};
 		};
-		const ignoring = createWBAKeyResolver({ scheme: "http", fetch: following, now: () => ANCHOR_MS });
+		const ignoring = createWBAKeyResolver({ fetch: following, now: () => ANCHOR_MS });
 		await expect(ignoring.resolve(k.tp, host)).rejects.toBeInstanceOf(DirectoryUnavailable);
 	});
 
@@ -535,7 +536,7 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 		const prior = { signatureInput: sig1.signatureInput, signature: sig1.signature, signatureAgent: sig1.signatureAgent };
 		const sig2 = await appendSignature(brokerKey.privKey, prior, { ...base, signatureAgent: brokerDir, keyid: brokerKey.tp });
 
-		const r = createWBAKeyResolver({ scheme: "http", fetch: loopbackFetch, now: () => ANCHOR_MS });
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		const asked: string[] = [];
 		const resolve = {
 			resolve: async (keyid: string, directory: string) => {
@@ -569,3 +570,30 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 		expect(asked).toEqual([`${brokerDir} ${agentKey.tp}`]);
 	});
 });
+
+// A directory is always requested over https (Go removed WBAKeyResolverOptions.Scheme
+// for the same reason): a bare host is prefixed with https://, an https origin is never
+// downgraded, and no option fetches it in plaintext.
+describe("createWBAKeyResolver requests a directory over https", () => {
+	async function requested(directory: string, opts: Record<string, unknown> = {}): Promise<string[]> {
+		const seen: string[] = [];
+		const fetch: FetchLike = async (url) => {
+			seen.push(url);
+			return { status: 404, text: async () => "" };
+		};
+		const r = createWBAKeyResolver({ ...opts, fetch });
+		await r.resolve("some-thumbprint", directory).catch(() => undefined);
+		return [...new Set(seen)];
+	}
+
+	it("prefixes a bare host, with or without a port, with https://", async () => {
+		expect(await requested("agent.example")).toEqual([`https://agent.example${WBA_DIRECTORY_PATH}`]);
+		expect(await requested("agent.example:8443")).toEqual([`https://agent.example:8443${WBA_DIRECTORY_PATH}`]);
+	});
+
+	it("never fetches an https origin in plaintext, even when a caller still passes the removed scheme option", async () => {
+		const withScheme = { scheme: "http" };
+		expect(await requested("https://agent.example", withScheme)).toEqual([`https://agent.example${WBA_DIRECTORY_PATH}`]);
+		expect(await requested("agent.example", withScheme)).toEqual([`https://agent.example${WBA_DIRECTORY_PATH}`]);
+	});
+});
diff --git a/sdk/ts/tests/wba-profile.test.ts b/sdk/ts/tests/wba-profile.test.ts
index bbd7b321..e21394cf 100644
--- a/sdk/ts/tests/wba-profile.test.ts
+++ b/sdk/ts/tests/wba-profile.test.ts
@@ -306,6 +306,15 @@ describe("verifyAgentBinding accepts a covered set that includes the profile's",
 		});
 	});
 
+	it("refuses a proof covering x-missing-header, which the request never carried, as bad_covered_components with Accept-Signature", async () => {
+		const covered = [plain("@method"), plain("@target-uri"), member, plain("x-missing-header")];
+		expect(await proofFor(covered)).toEqual({
+			ok: false,
+			reason: "bad_covered_components",
+			acceptSignature: POP_ACCEPT_SIGNATURE,
+		});
+	});
+
 	it("refuses a covered Signature-Agent the request no longer carries as bad_covered_components", async () => {
 		const result = await proofFor([plain("@method"), plain("@target-uri"), member], (h) => h.delete("signature-agent"));
 		expect(result).toEqual({ ok: false, reason: "bad_covered_components", acceptSignature: POP_ACCEPT_SIGNATURE });

From f02a0b25d16be74393611b0d2f724d740af8e9be Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 09:28:35 -0400
Subject: [PATCH 129/164] Export the edge resolvers entry from the repository
 root and record the edge changes

A consumer that pins the TypeScript SDK through the repository root
reaches the new resolvers/edge entry under the same path as through
sdk/ts. The changelog records the Workers typecheck, the edge entry and
its import guard, and the injectable Ed25519 primitive on
verifyDirectoryResponse.
---
 package.json                                     | 1 +
 proto/CHANGELOG.md                               | 7 +++++++
 website/src/content/docs/reference/changelog.mdx | 7 +++++++
 3 files changed, 15 insertions(+)

diff --git a/package.json b/package.json
index 019e5fd1..7df4daaa 100644
--- a/package.json
+++ b/package.json
@@ -40,6 +40,7 @@
     "./hono": "./sdk/ts/hono/middleware.ts",
     "./acceptance": "./sdk/ts/src/acceptance.ts",
     "./resolvers": "./sdk/ts/resolvers/index.ts",
+    "./resolvers/edge": "./sdk/ts/resolvers/edge.ts",
     "./client": "./sdk/ts/client/index.ts",
     "./jsonschema/*": "./gen/jsonschema/*"
   },
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 7a88eced..5dda94e3 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -795,6 +795,13 @@ SDKs, in all three languages:
   is always fetched over https. The
   constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
   constants.
+- TypeScript on edge runtimes: the SDK typechecks under `@cloudflare/workers-types`, and
+  `npm test` runs that check. `@fora-protocol/sdk/resolvers/edge` is a new entry for an
+  edge runtime: the resolvers with an injected `fetch` and no Node import. The existing
+  `@fora-protocol/sdk/resolvers` entry keeps its guarded Node default. A guard test fails
+  on any `undici` or `node:` import, and any Node global, reachable from the edge entry,
+  `src/`, `core/` or `hono/`. `verifyDirectoryResponse` takes the injectable
+  `verifyEd25519` primitive `verifyAgentBinding` already took.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
   `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
   `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 65059d27..025a5526 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -807,6 +807,13 @@ SDKs, in all three languages:
   is always fetched over https. The
   constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
   constants.
+- TypeScript on edge runtimes: the SDK typechecks under `@cloudflare/workers-types`, and
+  `npm test` runs that check. `@fora-protocol/sdk/resolvers/edge` is a new entry for an
+  edge runtime: the resolvers with an injected `fetch` and no Node import. The existing
+  `@fora-protocol/sdk/resolvers` entry keeps its guarded Node default. A guard test fails
+  on any `undici` or `node:` import, and any Node global, reachable from the edge entry,
+  `src/`, `core/` or `hono/`. `verifyDirectoryResponse` takes the injectable
+  `verifyEd25519` primitive `verifyAgentBinding` already took.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
   `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
   `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier

From 7fd0887e8bd1c226cc08082e9a8686f70955dfd4 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 11:28:22 -0400
Subject: [PATCH 130/164] Compile the TypeScript strict validators at build
 time and pass the Ed25519 primitive to the directory readers

The strict check compiled each message's strict JSON Schema with ajv on
first use, and ajv compiles by building code from strings. Cloudflare
Workers refuses that with "EvalError: Code generation from strings
disallowed for this context", so readManifest, readWBADirectory,
readRevocationList and readLicenseDocument failed on a real Worker; the
Workers test pool allows eval and did not show it. scripts/gen-sdk-types.sh
now compiles the strict schema of every message the SDK checks by name with
ajv's standalone output into gen/ts/strict/, one self-contained module per
message plus an index, from the toolchain manifest that now pins ajv. The
directory is drift-gated in ci-local and in sdk-types-ci, and staged by the
package build. src/strict-core.ts holds the check without a compiler; the
readers import their own message's module, and checkStrict by name uses
the index. Only a schema a caller passes to checkStrict is still compiled
at run time. A test bundles the edge readers as a Worker is bundled and
runs them in a vm context with code generation from strings disabled; it
fails with the same EvalError on the previous code.

readWBADirectory, fetchWBAFile and so createWBAKeyResolver and
createWBAOfferDirectoryFetch take verifyEd25519 and hand it to
verifyDirectoryResponse, so a runtime without WebCrypto Ed25519 no longer
reads every listed key as unsigned. Tests show an injected primitive
decides each verdict both ways.
---
 .github/workflows/sdk-types-ci.yml            |   8 +-
 gen/ts/README.md                              |   6 +
 ...ora.admin.v1.SetReportingPolicyResponse.ts |  27 +++
 .../fora.admin.v1.SetTenantFeeRateResponse.ts |  27 +++
 .../fora.v1.BrokerTransactionResponse.ts      |  27 +++
 gen/ts/strict/fora.v1.DiscoveryResponse.ts    |  27 +++
 gen/ts/strict/fora.v1.DisputeResponse.ts      |  11 +
 .../fora.v1.DomainVerificationChallenge.ts    |  11 +
 .../fora.v1.DomainVerificationResult.ts       |  11 +
 gen/ts/strict/fora.v1.ErrorDetail.ts          |  27 +++
 .../fora.v1.GetAccountStatusResponse.ts       |  27 +++
 gen/ts/strict/fora.v1.KeyRevocationList.ts    |  11 +
 gen/ts/strict/fora.v1.License.ts              |  11 +
 .../strict/fora.v1.PushResourcesResponse.ts   |  11 +
 .../strict/fora.v1.RefreshCatalogResponse.ts  |  11 +
 gen/ts/strict/fora.v1.RegisterResponse.ts     |  11 +
 .../strict/fora.v1.RemoveResourcesResponse.ts |  11 +
 gen/ts/strict/fora.v1.ResourceResponse.ts     |  27 +++
 gen/ts/strict/fora.v1.TransactionResponse.ts  |  27 +++
 gen/ts/strict/fora.v1.UsageReportResponse.ts  |  11 +
 gen/ts/strict/fora.v1.WBAFile.ts              |  11 +
 gen/ts/strict/fora.v1.WellKnownManifest.ts    |  27 +++
 gen/ts/strict/index.ts                        |  49 ++++
 gen/ts/strict/types.ts                        |  26 +++
 scripts/ci-local.sh                           |   8 +-
 scripts/gen-sdk-types.sh                      |  22 +-
 scripts/sdk-types/gen_strict_validators.mjs   | 209 ++++++++++++++++++
 scripts/sdk-types/package-lock.json           |  54 +++++
 scripts/sdk-types/package.json                |   1 +
 sdk/ts/core/directory-response.ts             |   2 +-
 sdk/ts/package-lock.json                      |   1 +
 sdk/ts/package.json                           |   1 +
 sdk/ts/resolvers/documents.ts                 |  66 ++++--
 sdk/ts/resolvers/edge.ts                      |   2 +-
 sdk/ts/resolvers/offer-key-cache.ts           |  11 +-
 sdk/ts/resolvers/wba.ts                       |  12 +-
 sdk/ts/scripts/build.mjs                      |   2 +-
 sdk/ts/src/strict-core.ts                     | 148 +++++++++++++
 sdk/ts/src/strict.ts                          | 196 ++--------------
 .../tests/directory-readers-ed25519.test.ts   | 113 ++++++++++
 sdk/ts/tests/edge-no-eval.test.ts             | 148 +++++++++++++
 41 files changed, 1231 insertions(+), 218 deletions(-)
 create mode 100644 gen/ts/strict/fora.admin.v1.SetReportingPolicyResponse.ts
 create mode 100644 gen/ts/strict/fora.admin.v1.SetTenantFeeRateResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.BrokerTransactionResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.DiscoveryResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.DisputeResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.DomainVerificationChallenge.ts
 create mode 100644 gen/ts/strict/fora.v1.DomainVerificationResult.ts
 create mode 100644 gen/ts/strict/fora.v1.ErrorDetail.ts
 create mode 100644 gen/ts/strict/fora.v1.GetAccountStatusResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.KeyRevocationList.ts
 create mode 100644 gen/ts/strict/fora.v1.License.ts
 create mode 100644 gen/ts/strict/fora.v1.PushResourcesResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.RefreshCatalogResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.RegisterResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.RemoveResourcesResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.ResourceResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.TransactionResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.UsageReportResponse.ts
 create mode 100644 gen/ts/strict/fora.v1.WBAFile.ts
 create mode 100644 gen/ts/strict/fora.v1.WellKnownManifest.ts
 create mode 100644 gen/ts/strict/index.ts
 create mode 100644 gen/ts/strict/types.ts
 create mode 100644 scripts/sdk-types/gen_strict_validators.mjs
 create mode 100644 sdk/ts/src/strict-core.ts
 create mode 100644 sdk/ts/tests/directory-readers-ed25519.test.ts
 create mode 100644 sdk/ts/tests/edge-no-eval.test.ts

diff --git a/.github/workflows/sdk-types-ci.yml b/.github/workflows/sdk-types-ci.yml
index 79860ce3..991ae9ef 100644
--- a/.github/workflows/sdk-types-ci.yml
+++ b/.github/workflows/sdk-types-ci.yml
@@ -71,10 +71,10 @@ jobs:
       # generated by buf and gated separately.
       - name: assert no drift
         run: |
-          if ! git diff --exit-code -- gen/python/wire gen/ts/wire gen/jsonschema \
-             || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire gen/jsonschema)" ]; then
-            echo "::error::Generated types export is out of sync with the proto. Run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/ + gen/jsonschema/."
-            git status --short -- gen/python/wire gen/ts/wire gen/jsonschema
+          if ! git diff --exit-code -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema \
+             || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema)" ]; then
+            echo "::error::Generated types export is out of sync with the proto. Run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/ + gen/ts/strict/ + gen/jsonschema/."
+            git status --short -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema
             exit 1
           fi
 
diff --git a/gen/ts/README.md b/gen/ts/README.md
index 3ae30bdf..7c492fcf 100644
--- a/gen/ts/README.md
+++ b/gen/ts/README.md
@@ -21,6 +21,12 @@ Contents:
 - `wire/names.ts` — the rule that recovers a proto field name from protojson's
   lowerCamelCase spelling of it. Shared, so the refusal above and any reader of Connect's
   `debug` projection answer alike.
+- `strict/*.ts` — the precompiled strict validators of the messages the SDK checks by
+  name: each message's strict JSON Schema (`gen/jsonschema/`) compiled by ajv's standalone
+  code generation when this directory is generated, one module per message plus
+  `index.ts`. The SDK's strict check uses them, so it generates no code at run time; an
+  edge runtime such as Cloudflare Workers refuses code built from strings. Internal to
+  the SDK, not a package export.
 - `vocab/*.ts` — registered vocabulary constants per axis (`pricingunits`, …) with
   `isRegistered()`, plus the accepted aliases authored beside the tokens (`Aliases`,
   `canonical()` — an exact lookup; the SDK folds case before it looks up).
diff --git a/gen/ts/strict/fora.admin.v1.SetReportingPolicyResponse.ts b/gen/ts/strict/fora.admin.v1.SetReportingPolicyResponse.ts
new file mode 100644
index 00000000..a396b327
--- /dev/null
+++ b/gen/ts/strict/fora.admin.v1.SetReportingPolicyResponse.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.admin.v1.ReportingPolicy":{"additionalProperties":false,"properties":{"quantity_tolerance":{"maximum":1,"minimum":0,"type":"number"},"required_fields":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":32,"type":"array","uniqueItems":true},"tenant_id":{"maxLength":255,"minLength":1,"type":"string"},"window_seconds":{"exclusiveMinimum":0,"maximum":31536000,"type":"integer"}},"required":["tenant_id"],"type":"object"}},"$id":"fora.admin.v1.SetReportingPolicyResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"policy":{"$ref":"#/$defs/fora.admin.v1.ReportingPolicy"},"ver":{"default":"","type":"string"}},"required":["policy"],"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"quantity_tolerance":{"maximum":1,"minimum":0,"type":"number"},"required_fields":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":32,"type":"array","uniqueItems":true},"tenant_id":{"maxLength":255,"minLength":1,"type":"string"},"window_seconds":{"exclusiveMinimum":0,"maximum":31536000,"type":"integer"}},"required":["tenant_id"],"type":"object"};const func1 = ucs2length;const pattern4 = new RegExp("^[A-Za-z0-9._:*-]+$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.admin.v1.SetReportingPolicyResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.policy === undefined) && (missing0 = "policy")){validate20.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "policy") || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.policy !== undefined){let data0 = data.policy;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing1;if((data0.tenant_id === undefined) && (missing1 = "tenant_id")){validate20.errors = [{instancePath:instancePath+"/policy",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((((key1 === "quantity_tolerance") || (key1 === "required_fields")) || (key1 === "tenant_id")) || (key1 === "window_seconds"))){validate20.errors = [{instancePath:instancePath+"/policy",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.quantity_tolerance !== undefined){let data1 = data0.quantity_tolerance;const _errs6 = errors;if(errors === _errs6){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 1 || isNaN(data1)){validate20.errors = [{instancePath:instancePath+"/policy/quantity_tolerance",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/quantity_tolerance/maximum",keyword:"maximum",params:{comparison: "<=", limit: 1},message:"must be <= 1"}];return false;}else {if(data1 < 0 || isNaN(data1)){validate20.errors = [{instancePath:instancePath+"/policy/quantity_tolerance",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/quantity_tolerance/minimum",keyword:"minimum",params:{comparison: ">=", limit: 0},message:"must be >= 0"}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/policy/quantity_tolerance",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/quantity_tolerance/type",keyword:"type",params:{type: "number"},message:"must be number"}];return false;}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.required_fields !== undefined){let data2 = data0.required_fields;const _errs8 = errors;if(errors === _errs8){if(Array.isArray(data2)){if(data2.length > 32){validate20.errors = [{instancePath:instancePath+"/policy/required_fields",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/required_fields/maxItems",keyword:"maxItems",params:{limit: 32},message:"must NOT have more than 32 items"}];return false;}else {var valid3 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){let data3 = data2[i0];const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func1(data3) > 64){validate20.errors = [{instancePath:instancePath+"/policy/required_fields/" + i0,schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/required_fields/items/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func1(data3) < 1){validate20.errors = [{instancePath:instancePath+"/policy/required_fields/" + i0,schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/required_fields/items/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}else {if(!pattern4.test(data3)){validate20.errors = [{instancePath:instancePath+"/policy/required_fields/" + i0,schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/required_fields/items/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9._:*-]+$"},message:"must match pattern \""+"^[A-Za-z0-9._:*-]+$"+"\""}];return false;}}}}else {validate20.errors = [{instancePath:instancePath+"/policy/required_fields/" + i0,schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;if(!valid3){break;}}if(valid3){let i1 = data2.length;let j0;if(i1 > 1){const indices0 = {};for(;i1--;){let item0 = data2[i1];if(typeof item0 !== "string"){continue;}if(typeof indices0[item0] == "number"){j0 = indices0[item0];validate20.errors = [{instancePath:instancePath+"/policy/required_fields",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/required_fields/uniqueItems",keyword:"uniqueItems",params:{i: i1, j: j0},message:"must NOT have duplicate items (items ## "+j0+" and "+i1+" are identical)"}];return false;break;}indices0[item0] = i1;}}}}}else {validate20.errors = [{instancePath:instancePath+"/policy/required_fields",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data0.tenant_id !== undefined){let data4 = data0.tenant_id;const _errs12 = errors;if(errors === _errs12){if(typeof data4 === "string"){if(func1(data4) > 255){validate20.errors = [{instancePath:instancePath+"/policy/tenant_id",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/tenant_id/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func1(data4) < 1){validate20.errors = [{instancePath:instancePath+"/policy/tenant_id",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/tenant_id/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/policy/tenant_id",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/tenant_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}if(valid2){if(data0.window_seconds !== undefined){let data5 = data0.window_seconds;const _errs14 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){validate20.errors = [{instancePath:instancePath+"/policy/window_seconds",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/window_seconds/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs14){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 31536000 || isNaN(data5)){validate20.errors = [{instancePath:instancePath+"/policy/window_seconds",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/window_seconds/maximum",keyword:"maximum",params:{comparison: "<=", limit: 31536000},message:"must be <= 31536000"}];return false;}else {if(data5 <= 0 || isNaN(data5)){validate20.errors = [{instancePath:instancePath+"/policy/window_seconds",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/properties/window_seconds/exclusiveMinimum",keyword:"exclusiveMinimum",params:{comparison: ">", limit: 0},message:"must be > 0"}];return false;}}}}var valid2 = _errs14 === errors;}else {var valid2 = true;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/policy",schemaPath:"#/$defs/fora.admin.v1.ReportingPolicy/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs16 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs16 === errors;}else {var valid0 = true;}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.admin.v1.SetReportingPolicyResponse. */
+export const strict: StrictMessage = { message: "fora.admin.v1.SetReportingPolicyResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.admin.v1.SetTenantFeeRateResponse.ts b/gen/ts/strict/fora.admin.v1.SetTenantFeeRateResponse.ts
new file mode 100644
index 00000000..cb5da219
--- /dev/null
+++ b/gen/ts/strict/fora.admin.v1.SetTenantFeeRateResponse.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.admin.v1.TenantFeeRate":{"additionalProperties":false,"properties":{"fee_rate_bps":{"default":0,"exclusiveMaximum":10000,"minimum":0,"type":"integer"},"notes":{"maxLength":1024,"type":"string"},"tenant_id":{"maxLength":255,"minLength":1,"type":"string"}},"required":["tenant_id"],"type":"object"}},"$id":"fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"rate":{"$ref":"#/$defs/fora.admin.v1.TenantFeeRate"},"ver":{"default":"","type":"string"}},"required":["rate"],"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"fee_rate_bps":{"default":0,"exclusiveMaximum":10000,"minimum":0,"type":"integer"},"notes":{"maxLength":1024,"type":"string"},"tenant_id":{"maxLength":255,"minLength":1,"type":"string"}},"required":["tenant_id"],"type":"object"};const func1 = ucs2length;function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.rate === undefined) && (missing0 = "rate")){validate20.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "rate") || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.rate !== undefined){let data0 = data.rate;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing1;if((data0.tenant_id === undefined) && (missing1 = "tenant_id")){validate20.errors = [{instancePath:instancePath+"/rate",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!(((key1 === "fee_rate_bps") || (key1 === "notes")) || (key1 === "tenant_id"))){validate20.errors = [{instancePath:instancePath+"/rate",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.fee_rate_bps !== undefined){let data1 = data0.fee_rate_bps;const _errs6 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){validate20.errors = [{instancePath:instancePath+"/rate/fee_rate_bps",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/fee_rate_bps/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs6){if((typeof data1 == "number") && (isFinite(data1))){if(data1 < 0 || isNaN(data1)){validate20.errors = [{instancePath:instancePath+"/rate/fee_rate_bps",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/fee_rate_bps/minimum",keyword:"minimum",params:{comparison: ">=", limit: 0},message:"must be >= 0"}];return false;}else {if(data1 >= 10000 || isNaN(data1)){validate20.errors = [{instancePath:instancePath+"/rate/fee_rate_bps",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/fee_rate_bps/exclusiveMaximum",keyword:"exclusiveMaximum",params:{comparison: "<", limit: 10000},message:"must be < 10000"}];return false;}}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.notes !== undefined){let data2 = data0.notes;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func1(data2) > 1024){validate20.errors = [{instancePath:instancePath+"/rate/notes",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/notes/maxLength",keyword:"maxLength",params:{limit: 1024},message:"must NOT have more than 1024 characters"}];return false;}}else {validate20.errors = [{instancePath:instancePath+"/rate/notes",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/notes/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data0.tenant_id !== undefined){let data3 = data0.tenant_id;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func1(data3) > 255){validate20.errors = [{instancePath:instancePath+"/rate/tenant_id",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/tenant_id/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func1(data3) < 1){validate20.errors = [{instancePath:instancePath+"/rate/tenant_id",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/tenant_id/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/rate/tenant_id",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/properties/tenant_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs10 === errors;}else {var valid2 = true;}}}}}}else {validate20.errors = [{instancePath:instancePath+"/rate",schemaPath:"#/$defs/fora.admin.v1.TenantFeeRate/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs12 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.admin.v1.SetTenantFeeRateResponse. */
+export const strict: StrictMessage = { message: "fora.admin.v1.SetTenantFeeRateResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.BrokerTransactionResponse.ts b/gen/ts/strict/fora.v1.BrokerTransactionResponse.ts
new file mode 100644
index 00000000..8b3f39b1
--- /dev/null
+++ b/gen/ts/strict/fora.v1.BrokerTransactionResponse.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.Cost":{"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.ErrorDetail":{"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"},"fora.v1.ExchangeOutcome":{"additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_ids":{"items":{"type":"string"},"maxItems":256,"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"}},"required":["exchange"],"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.TransactionResultItem":{"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"},"fora.v1.UpstreamRefusal":{"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.BrokerTransactionResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"exchanges":{"items":{"$ref":"#/$defs/fora.v1.ExchangeOutcome"},"type":"array"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"items":{"items":{"$ref":"#/$defs/fora.v1.TransactionResultItem"},"type":"array"},"totals":{"items":{"$ref":"#/$defs/fora.v1.Cost"},"type":"array"},"ver":{"default":"","type":"string"}},"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_ids":{"items":{"type":"string"},"maxItems":256,"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"}},"required":["exchange"],"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const func1 = ucs2length;const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.exchange === undefined) && (missing0 = "exchange")){validate21.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((((key0 === "agent_identity_hash") || (key0 === "exchange")) || (key0 === "offer_ids")) || (key0 === "subscription_quota"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.agent_identity_hash !== undefined){const _errs2 = errors;if(typeof data.agent_identity_hash !== "string"){validate21.errors = [{instancePath:instancePath+"/agent_identity_hash",schemaPath:"#/properties/agent_identity_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.exchange !== undefined){let data1 = data.exchange;const _errs4 = errors;if(errors === _errs4){if(typeof data1 === "string"){if(func1(data1) > 260){validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data1)){validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_ids !== undefined){let data2 = data.offer_ids;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){if(data2.length > 256){validate21.errors = [{instancePath:instancePath+"/offer_ids",schemaPath:"#/properties/offer_ids/maxItems",keyword:"maxItems",params:{limit: 256},message:"must NOT have more than 256 items"}];return false;}else {var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate21.errors = [{instancePath:instancePath+"/offer_ids/" + i0,schemaPath:"#/properties/offer_ids/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}}else {validate21.errors = [{instancePath:instancePath+"/offer_ids",schemaPath:"#/properties/offer_ids/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data4 = data.subscription_quota;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data4)){var valid2 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){let data5 = data4[i1];const _errs12 = errors;const _errs13 = errors;if(errors === _errs13){if(data5 && typeof data5 == "object" && !Array.isArray(data5)){const _errs15 = errors;for(const key1 in data5){if(!((((((key1 === "quota_limit") || (key1 === "quota_remaining")) || (key1 === "quota_used")) || (key1 === "resets_at")) || (key1 === "subscription_id")) || (key1 === "unit"))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs15 === errors){if(data5.quota_limit !== undefined){let data6 = data5.quota_limit;const _errs16 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs16){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data6 < -2147483648 || isNaN(data6)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs16 === errors;}else {var valid4 = true;}if(valid4){if(data5.quota_remaining !== undefined){let data7 = data5.quota_remaining;const _errs18 = errors;if(!(((typeof data7 == "number") && (!(data7 % 1) && !isNaN(data7))) && (isFinite(data7)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs18){if((typeof data7 == "number") && (isFinite(data7))){if(data7 > 2147483647 || isNaN(data7)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data7 < -2147483648 || isNaN(data7)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs18 === errors;}else {var valid4 = true;}if(valid4){if(data5.quota_used !== undefined){let data8 = data5.quota_used;const _errs20 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs20){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data8 < -2147483648 || isNaN(data8)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs20 === errors;}else {var valid4 = true;}if(valid4){if(data5.resets_at !== undefined){const _errs22 = errors;if(errors === _errs22){if(errors === _errs22){if(!(typeof data5.resets_at === "string")){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid4 = _errs22 === errors;}else {var valid4 = true;}if(valid4){if(data5.subscription_id !== undefined){const _errs24 = errors;if(typeof data5.subscription_id !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs24 === errors;}else {var valid4 = true;}if(valid4){if(data5.unit !== undefined){const _errs26 = errors;if(typeof data5.unit !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs26 === errors;}else {var valid4 = true;}}}}}}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const schema34 = {"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"};const schema47 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const func2 = Object.prototype.hasOwnProperty;const pattern5 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern7 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const schema36 = {"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema43 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema44 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema46 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema42 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate26(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate26.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate26.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate26.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate26.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func1(data2) > 255){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func1(data2) < 1){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func1(data3) > 255){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema41.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 7 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate26.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate26.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate26.errors = vErrors;return errors === 0;}validate26.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate25(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate25.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func2.call(schema37.properties, key0))){validate25.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate25.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate25.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 5 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 5},message:"must be <= 5"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate25.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 6 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate25.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate25.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate25.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate25.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate26(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate26.errors : vErrors.concat(validate26.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema44.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func1(data18) > 260){validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data18)){validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate25.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema46.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate25.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate25.errors = vErrors;return errors === 0;}validate25.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.code === undefined) && (missing0 = "code")) || ((data.party === undefined) && (missing0 = "party"))){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(((key0 === "code") || (key0 === "detail")) || (key0 === "party"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.code !== undefined){let data0 = data.code;const _errs2 = errors;if(errors === _errs2){if(typeof data0 === "string"){if(func1(data0) > 64){validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func1(data0) < 1){validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.detail !== undefined){const _errs4 = errors;if(!(validate25(data.detail, {instancePath:instancePath+"/detail",parentData:data,parentDataProperty:"detail",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate25.errors : vErrors.concat(validate25.errors);errors = vErrors.length;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.party !== undefined){let data2 = data.party;const _errs5 = errors;if(errors === _errs5){if(typeof data2 === "string"){if(func1(data2) > 260){validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data2)){validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs5 === errors;}else {var valid0 = true;}}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func2.call(schema34.properties, key0))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.billing_id !== undefined){const _errs2 = errors;if(typeof data.billing_id !== "string"){validate23.errors = [{instancePath:instancePath+"/billing_id",schemaPath:"#/properties/billing_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.cost !== undefined){let data1 = data.cost;const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.amount !== undefined){let data2 = data1.amount;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func1(data2) > 32){validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data2)){validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data1.currency !== undefined){const _errs10 = errors;if(typeof data1.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data1.unit_cost !== undefined){let data4 = data1.unit_cost;const _errs12 = errors;if(errors === _errs12){if(typeof data4 === "string"){if(func1(data4) > 32){validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data4)){validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data5 = data.delivery_method;const _errs14 = errors;const _errs15 = errors;let valid3 = false;const _errs16 = errors;if(errors === _errs16){if(typeof data5 === "string"){if(!pattern7.test(data5)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs16 === errors;valid3 = valid3 || _valid0;const _errs18 = errors;if(typeof data5 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data5 === "DELIVERY_METHOD_DIRECT") || (data5 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data5 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema34.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs18 === errors;valid3 = valid3 || _valid0;const _errs20 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs20){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs20 === errors;valid3 = valid3 || _valid0;if(!valid3){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs15;if(vErrors !== null){if(_errs15){vErrors.length = _errs15;}else {vErrors = null;}}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.denial_reason !== undefined){let data6 = data.denial_reason;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(typeof data6 !== "string"){const err8 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((((((((((((((((((data6 === "DENIAL_REASON_UNSPECIFIED") || (data6 === "DENIAL_REASON_ACCOUNT_INACTIVE")) || (data6 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data6 === "DENIAL_REASON_RATE_LIMITED")) || (data6 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data6 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data6 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data6 === "DENIAL_REASON_OFFER_EXPIRED")) || (data6 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data6 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data6 === "DENIAL_REASON_DELEGATION_INVALID")) || (data6 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data6 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data6 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data6 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data6 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err9 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.denial_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs24 === errors;valid4 = valid4 || _valid1;const _errs26 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){const err10 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs26){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){const err11 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data6 < -2147483648 || isNaN(data6)){const err12 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;if(!valid4){const err13 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs28 = errors;if(errors === _errs28){if(errors === _errs28){if(!(typeof data.expires_at === "string")){validate23.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs30 = errors;if(typeof data.offer_id !== "string"){validate23.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.refusal !== undefined){const _errs32 = errors;if(!(validate24(data.refusal, {instancePath:instancePath+"/refusal",parentData:data,parentDataProperty:"refusal",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting_obligation !== undefined){let data10 = data.reporting_obligation;const _errs33 = errors;const _errs34 = errors;if(errors === _errs34){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){const _errs36 = errors;for(const key2 in data10){if(!((((((key2 === "endpoint") || (key2 === "ext")) || (key2 === "ext_critical")) || (key2 === "required")) || (key2 === "required_fields")) || (key2 === "window"))){validate23.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs36 === errors){if(data10.endpoint !== undefined){const _errs37 = errors;if(typeof data10.endpoint !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs37 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext !== undefined){let data12 = data10.ext;const _errs39 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid6 = _errs39 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext_critical !== undefined){let data13 = data10.ext_critical;const _errs41 = errors;if(errors === _errs41){if(Array.isArray(data13)){var valid7 = true;const len0 = data13.length;for(let i0=0; i0<len0; i0++){const _errs43 = errors;if(typeof data13[i0] !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical/" + i0,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs43 === errors;if(!valid7){break;}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs41 === errors;}else {var valid6 = true;}if(valid6){if(data10.required !== undefined){const _errs45 = errors;if(typeof data10.required !== "boolean"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid6 = _errs45 === errors;}else {var valid6 = true;}if(valid6){if(data10.required_fields !== undefined){let data16 = data10.required_fields;const _errs47 = errors;if(errors === _errs47){if(Array.isArray(data16)){var valid8 = true;const len1 = data16.length;for(let i1=0; i1<len1; i1++){const _errs49 = errors;if(typeof data16[i1] !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields/" + i1,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs49 === errors;if(!valid8){break;}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs47 === errors;}else {var valid6 = true;}if(valid6){if(data10.window !== undefined){const _errs51 = errors;if(errors === _errs51){if(errors === _errs51){if(!(typeof data10.window === "string")){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid6 = _errs51 === errors;}else {var valid6 = true;}}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs33 === errors;}else {var valid0 = true;}if(valid0){if(data.resource_title !== undefined){const _errs53 = errors;if(typeof data.resource_title !== "string"){validate23.errors = [{instancePath:instancePath+"/resource_title",schemaPath:"#/properties/resource_title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs53 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_mismatches !== undefined){let data20 = data.restriction_mismatches;const _errs55 = errors;if(errors === _errs55){if(Array.isArray(data20)){var valid9 = true;const len2 = data20.length;for(let i2=0; i2<len2; i2++){let data21 = data20[i2];const _errs57 = errors;const _errs58 = errors;let valid10 = false;const _errs59 = errors;if(typeof data21 !== "string"){const err14 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((((data21 === "RESTRICTION_KIND_UNSPECIFIED") || (data21 === "RESTRICTION_KIND_FUNCTION")) || (data21 === "RESTRICTION_KIND_GEOGRAPHY")) || (data21 === "RESTRICTION_KIND_USER_TYPE")) || (data21 === "RESTRICTION_KIND_OTHER"))){const err15 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs59 === errors;valid10 = valid10 || _valid2;const _errs61 = errors;if(!(((typeof data21 == "number") && (!(data21 % 1) && !isNaN(data21))) && (isFinite(data21)))){const err16 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs61){if((typeof data21 == "number") && (isFinite(data21))){if(data21 > 2147483647 || isNaN(data21)){const err17 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data21 < -2147483648 || isNaN(data21)){const err18 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs61 === errors;valid10 = valid10 || _valid2;if(!valid10){const err19 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs58;if(vErrors !== null){if(_errs58){vErrors.length = _errs58;}else {vErrors = null;}}}var valid9 = _errs57 === errors;if(!valid9){break;}}}else {validate23.errors = [{instancePath:instancePath+"/restriction_mismatches",schemaPath:"#/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs55 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_endpoint !== undefined){const _errs63 = errors;if(typeof data.retrieval_endpoint !== "string"){validate23.errors = [{instancePath:instancePath+"/retrieval_endpoint",schemaPath:"#/properties/retrieval_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs63 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs65 = errors;if(typeof data.subscription_id !== "string"){validate23.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs65 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_unit_value !== undefined){let data24 = data.subscription_unit_value;const _errs67 = errors;const _errs68 = errors;if(errors === _errs68){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){const _errs70 = errors;for(const key3 in data24){if(!(((key3 === "amount") || (key3 === "currency")) || (key3 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs70 === errors){if(data24.amount !== undefined){let data25 = data24.amount;const _errs71 = errors;if(errors === _errs71){if(typeof data25 === "string"){if(func1(data25) > 32){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data25)){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs71 === errors;}else {var valid12 = true;}if(valid12){if(data24.currency !== undefined){const _errs73 = errors;if(typeof data24.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs73 === errors;}else {var valid12 = true;}if(valid12){if(data24.unit_cost !== undefined){let data27 = data24.unit_cost;const _errs75 = errors;if(errors === _errs75){if(typeof data27 === "string"){if(func1(data27) > 32){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data27)){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs75 === errors;}else {var valid12 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs67 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_id !== undefined){const _errs77 = errors;if(typeof data.transaction_id !== "string"){validate23.errors = [{instancePath:instancePath+"/transaction_id",schemaPath:"#/properties/transaction_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs77 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.BrokerTransactionResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((((((key0 === "exchanges") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "items")) || (key0 === "totals")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.exchanges !== undefined){let data0 = data.exchanges;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){const _errs4 = errors;if(!(validate21(data0[i0], {instancePath:instancePath+"/exchanges/" + i0,parentData:data0,parentDataProperty:i0,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid1 = _errs4 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/exchanges",schemaPath:"#/properties/exchanges/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data2 = data.ext;const _errs5 = errors;if(!(data2 && typeof data2 == "object" && !Array.isArray(data2))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs5 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data3 = data.ext_critical;const _errs7 = errors;if(errors === _errs7){if(Array.isArray(data3)){var valid2 = true;const len1 = data3.length;for(let i1=0; i1<len1; i1++){const _errs9 = errors;if(typeof data3[i1] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i1,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs9 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs7 === errors;}else {var valid0 = true;}if(valid0){if(data.items !== undefined){let data5 = data.items;const _errs11 = errors;if(errors === _errs11){if(Array.isArray(data5)){var valid3 = true;const len2 = data5.length;for(let i2=0; i2<len2; i2++){const _errs13 = errors;if(!(validate23(data5[i2], {instancePath:instancePath+"/items/" + i2,parentData:data5,parentDataProperty:i2,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid3 = _errs13 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/items",schemaPath:"#/properties/items/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs11 === errors;}else {var valid0 = true;}if(valid0){if(data.totals !== undefined){let data7 = data.totals;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data7)){var valid4 = true;const len3 = data7.length;for(let i3=0; i3<len3; i3++){let data8 = data7[i3];const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data8 && typeof data8 == "object" && !Array.isArray(data8)){const _errs19 = errors;for(const key1 in data8){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate20.errors = [{instancePath:instancePath+"/totals/" + i3,schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data8.amount !== undefined){let data9 = data8.amount;const _errs20 = errors;if(errors === _errs20){if(typeof data9 === "string"){if(func1(data9) > 32){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data9)){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid6 = _errs20 === errors;}else {var valid6 = true;}if(valid6){if(data8.currency !== undefined){const _errs22 = errors;if(typeof data8.currency !== "string"){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs22 === errors;}else {var valid6 = true;}if(valid6){if(data8.unit_cost !== undefined){let data11 = data8.unit_cost;const _errs24 = errors;if(errors === _errs24){if(typeof data11 === "string"){if(func1(data11) > 32){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data11)){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid6 = _errs24 === errors;}else {var valid6 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3,schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid4 = _errs16 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/totals",schemaPath:"#/properties/totals/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs26 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.v1.BrokerTransactionResponse. */
+export const strict: StrictMessage = { message: "fora.v1.BrokerTransactionResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.DiscoveryResponse.ts b/gen/ts/strict/fora.v1.DiscoveryResponse.ts
new file mode 100644
index 00000000..5728db7f
--- /dev/null
+++ b/gen/ts/strict/fora.v1.DiscoveryResponse.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.License":{"additionalProperties":false,"properties":{"id":{"type":"string"},"immutable":{"type":"boolean"},"name":{"type":"string"},"uri":{"type":"string"},"uri_digest":{"pattern":"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$","type":"string"}},"type":"object"},"fora.v1.LicenseTerm":{"additionalProperties":false,"properties":{"license":{"$ref":"#/$defs/fora.v1.License"},"obligations":{"items":{"$ref":"#/$defs/fora.v1.Obligation"},"maxItems":64,"type":"array"},"part_label":{"type":"string"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"quotas":{"items":{"$ref":"#/$defs/fora.v1.Quota"},"maxItems":64,"type":"array"},"restrictions":{"items":{"$ref":"#/$defs/fora.v1.Restriction"},"maxItems":8,"type":"array"},"scopes":{"items":{"type":"string"},"maxItems":64,"type":"array"},"semantics":{"anyOf":[{"enum":["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["semantics"],"type":"object"},"fora.v1.Obligation":{"additionalProperties":false,"properties":{"detail":{"type":"string"},"kind":{"anyOf":[{"enum":["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"scope_license":{"$ref":"#/$defs/fora.v1.License"},"trigger":{"anyOf":[{"enum":["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["kind","trigger"],"type":"object"},"fora.v1.Offer":{"additionalProperties":false,"properties":{"attestations":{"items":{"$ref":"#/$defs/fora.v1.ResourceAttestation"},"type":"array"},"data_as_of":{"format":"date-time","type":"string"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"expires_at":{"format":"date-time","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"iab_categories":{"items":{"type":"string"},"type":"array"},"identity":{"$ref":"#/$defs/fora.v1.ResourceIdentity"},"offer_id":{"default":"","type":"string"},"previews":{"items":{"$ref":"#/$defs/fora.v1.Preview"},"type":"array"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"reporting":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"signature":{"default":"","type":"string"},"signature_algorithm":{"default":"","type":"string"},"subscription_id":{"type":"string"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"},"terms":{"items":{"$ref":"#/$defs/fora.v1.LicenseTerm"},"maxItems":1,"minItems":1,"type":"array"},"title":{"type":"string"}},"required":["exchange"],"type":"object"},"fora.v1.OfferGroup":{"additionalProperties":false,"properties":{"absence_reason":{"anyOf":[{"enum":["OFFER_ABSENCE_REASON_UNSPECIFIED","OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"discovery_method":{"anyOf":[{"enum":["DISCOVERY_METHOD_UNSPECIFIED","DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"offers":{"items":{"$ref":"#/$defs/fora.v1.Offer"},"type":"array"},"restriction_filters":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"uri":{"default":"","type":"string"}},"type":"object"},"fora.v1.Preview":{"additionalProperties":false,"properties":{"duration":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"height":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"media_type":{"default":"","type":"string"},"size":{"type":"string"},"url":{"default":"","type":"string"},"width":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}},"type":"object"},"fora.v1.Pricing":{"additionalProperties":false,"properties":{"currency":{"default":"","type":"string"},"estimated_quantity":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"license_duration_months":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"metering":{"anyOf":[{"enum":["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"model":{"anyOf":[{"enum":["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"rate":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"unit":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"required":["model"],"type":"object"},"fora.v1.Quota":{"additionalProperties":false,"properties":{"limit":{"anyOf":[{"minimum":1,"type":"integer"},{"pattern":"^0*[1-9][0-9]*$","type":"string"}]},"metric":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$","type":"string"},"window":{"anyOf":[{"enum":["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["limit","metric","window"],"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.ResourceAttestation":{"additionalProperties":false,"properties":{"attested_at":{"format":"date-time","type":"string"},"claims":{"type":"object"},"keyid":{"default":"","type":"string"},"signature":{"default":"","type":"string"},"uri":{"default":"","type":"string"},"verifier":{"default":"","type":"string"}},"type":"object"},"fora.v1.ResourceIdentity":{"additionalProperties":false,"properties":{"c2pa_manifest":{"type":"string"},"c2pa_status":{"anyOf":[{"enum":["C2PA_STATUS_UNSPECIFIED","C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"canonical_url":{"type":"string"},"content_hash":{"type":"string"},"doi":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"hash_method":{"type":"string"},"iptc_guid":{"type":"string"},"isni":{"type":"string"},"resource_mutability":{"anyOf":[{"enum":["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"soft_binding":{"type":"string"},"soft_binding_method":{"type":"string"}},"required":["resource_mutability"],"type":"object"},"fora.v1.Restriction":{"additionalProperties":false,"properties":{"advisory":{"default":false,"type":"boolean"},"kind":{"anyOf":[{"enum":["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":4,"minimum":1,"type":"integer"}]},"permitted":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"},"prohibited":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"}},"required":["kind"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"}},"$id":"fora.v1.DiscoveryResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"absence_reason":{"anyOf":[{"enum":["OFFER_ABSENCE_REASON_UNSPECIFIED","OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"offer_groups":{"items":{"$ref":"#/$defs/fora.v1.OfferGroup"},"type":"array"},"ver":{"default":"","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"absence_reason":{"anyOf":[{"enum":["OFFER_ABSENCE_REASON_UNSPECIFIED","OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"discovery_method":{"anyOf":[{"enum":["DISCOVERY_METHOD_UNSPECIFIED","DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"offers":{"items":{"$ref":"#/$defs/fora.v1.Offer"},"type":"array"},"restriction_filters":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"uri":{"default":"","type":"string"}},"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"attestations":{"items":{"$ref":"#/$defs/fora.v1.ResourceAttestation"},"type":"array"},"data_as_of":{"format":"date-time","type":"string"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"expires_at":{"format":"date-time","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"iab_categories":{"items":{"type":"string"},"type":"array"},"identity":{"$ref":"#/$defs/fora.v1.ResourceIdentity"},"offer_id":{"default":"","type":"string"},"previews":{"items":{"$ref":"#/$defs/fora.v1.Preview"},"type":"array"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"reporting":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"signature":{"default":"","type":"string"},"signature_algorithm":{"default":"","type":"string"},"subscription_id":{"type":"string"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"},"terms":{"items":{"$ref":"#/$defs/fora.v1.LicenseTerm"},"maxItems":1,"minItems":1,"type":"array"},"title":{"type":"string"}},"required":["exchange"],"type":"object"};const schema34 = {"additionalProperties":false,"properties":{"attested_at":{"format":"date-time","type":"string"},"claims":{"type":"object"},"keyid":{"default":"","type":"string"},"signature":{"default":"","type":"string"},"uri":{"default":"","type":"string"},"verifier":{"default":"","type":"string"}},"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"c2pa_manifest":{"type":"string"},"c2pa_status":{"anyOf":[{"enum":["C2PA_STATUS_UNSPECIFIED","C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"canonical_url":{"type":"string"},"content_hash":{"type":"string"},"doi":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"hash_method":{"type":"string"},"iptc_guid":{"type":"string"},"isni":{"type":"string"},"resource_mutability":{"anyOf":[{"enum":["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"soft_binding":{"type":"string"},"soft_binding_method":{"type":"string"}},"required":["resource_mutability"],"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"duration":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"height":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"media_type":{"default":"","type":"string"},"size":{"type":"string"},"url":{"default":"","type":"string"},"width":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}},"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"currency":{"default":"","type":"string"},"estimated_quantity":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"license_duration_months":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"metering":{"anyOf":[{"enum":["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"model":{"anyOf":[{"enum":["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"rate":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"unit":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"required":["model"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const pattern4 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const pattern5 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");const pattern6 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern7 = new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$", "u");const schema40 = {"additionalProperties":false,"properties":{"license":{"$ref":"#/$defs/fora.v1.License"},"obligations":{"items":{"$ref":"#/$defs/fora.v1.Obligation"},"maxItems":64,"type":"array"},"part_label":{"type":"string"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"quotas":{"items":{"$ref":"#/$defs/fora.v1.Quota"},"maxItems":64,"type":"array"},"restrictions":{"items":{"$ref":"#/$defs/fora.v1.Restriction"},"maxItems":8,"type":"array"},"scopes":{"items":{"type":"string"},"maxItems":64,"type":"array"},"semantics":{"anyOf":[{"enum":["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["semantics"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"id":{"type":"string"},"immutable":{"type":"boolean"},"name":{"type":"string"},"uri":{"type":"string"},"uri_digest":{"pattern":"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$","type":"string"}},"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"limit":{"anyOf":[{"minimum":1,"type":"integer"},{"pattern":"^0*[1-9][0-9]*$","type":"string"}]},"metric":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$","type":"string"},"window":{"anyOf":[{"enum":["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["limit","metric","window"],"type":"object"};const schema46 = {"additionalProperties":false,"properties":{"advisory":{"default":false,"type":"boolean"},"kind":{"anyOf":[{"enum":["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":4,"minimum":1,"type":"integer"}]},"permitted":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"},"prohibited":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"}},"required":["kind"],"type":"object"};const pattern9 = new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$", "u");const pattern14 = new RegExp("^0*[1-9][0-9]*$", "u");const pattern15 = new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$", "u");const pattern16 = new RegExp("^[A-Za-z0-9._:*-]+$", "u");const schema42 = {"additionalProperties":false,"properties":{"detail":{"type":"string"},"kind":{"anyOf":[{"enum":["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"scope_license":{"$ref":"#/$defs/fora.v1.License"},"trigger":{"anyOf":[{"enum":["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["kind","trigger"],"type":"object"};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.kind === undefined) && (missing0 = "kind")) || ((data.trigger === undefined) && (missing0 = "trigger"))){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((((key0 === "detail") || (key0 === "kind")) || (key0 === "scope_license")) || (key0 === "trigger"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.detail !== undefined){const _errs2 = errors;if(typeof data.detail !== "string"){validate24.errors = [{instancePath:instancePath+"/detail",schemaPath:"#/properties/detail/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.kind !== undefined){let data1 = data.kind;const _errs4 = errors;const _errs5 = errors;let valid1 = false;const _errs6 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!((((((data1 === "OBLIGATION_KIND_ATTRIBUTION") || (data1 === "OBLIGATION_KIND_CONTRIBUTION")) || (data1 === "OBLIGATION_KIND_SHARE_ALIKE")) || (data1 === "OBLIGATION_KIND_NETWORK_COPYLEFT")) || (data1 === "OBLIGATION_KIND_NOTICE")) || (data1 === "OBLIGATION_KIND_OTHER"))){const err1 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema42.properties.kind.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs6 === errors;valid1 = valid1 || _valid0;const _errs8 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs8){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 2147483647 || isNaN(data1)){const err3 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < -2147483648 || isNaN(data1)){const err4 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs8 === errors;valid1 = valid1 || _valid0;if(!valid1){const err5 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate24.errors = vErrors;return false;}else {errors = _errs5;if(vErrors !== null){if(_errs5){vErrors.length = _errs5;}else {vErrors = null;}}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.scope_license !== undefined){let data2 = data.scope_license;const _errs10 = errors;const _errs11 = errors;if(errors === _errs11){if(data2 && typeof data2 == "object" && !Array.isArray(data2)){const _errs13 = errors;for(const key1 in data2){if(!(((((key1 === "id") || (key1 === "immutable")) || (key1 === "name")) || (key1 === "uri")) || (key1 === "uri_digest"))){validate24.errors = [{instancePath:instancePath+"/scope_license",schemaPath:"#/$defs/fora.v1.License/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs13 === errors){if(data2.id !== undefined){const _errs14 = errors;if(typeof data2.id !== "string"){validate24.errors = [{instancePath:instancePath+"/scope_license/id",schemaPath:"#/$defs/fora.v1.License/properties/id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs14 === errors;}else {var valid3 = true;}if(valid3){if(data2.immutable !== undefined){const _errs16 = errors;if(typeof data2.immutable !== "boolean"){validate24.errors = [{instancePath:instancePath+"/scope_license/immutable",schemaPath:"#/$defs/fora.v1.License/properties/immutable/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid3 = _errs16 === errors;}else {var valid3 = true;}if(valid3){if(data2.name !== undefined){const _errs18 = errors;if(typeof data2.name !== "string"){validate24.errors = [{instancePath:instancePath+"/scope_license/name",schemaPath:"#/$defs/fora.v1.License/properties/name/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs18 === errors;}else {var valid3 = true;}if(valid3){if(data2.uri !== undefined){const _errs20 = errors;if(typeof data2.uri !== "string"){validate24.errors = [{instancePath:instancePath+"/scope_license/uri",schemaPath:"#/$defs/fora.v1.License/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs20 === errors;}else {var valid3 = true;}if(valid3){if(data2.uri_digest !== undefined){let data7 = data2.uri_digest;const _errs22 = errors;if(errors === _errs22){if(typeof data7 === "string"){if(!pattern9.test(data7)){validate24.errors = [{instancePath:instancePath+"/scope_license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/pattern",keyword:"pattern",params:{pattern: "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"},message:"must match pattern \""+"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"+"\""}];return false;}}else {validate24.errors = [{instancePath:instancePath+"/scope_license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs22 === errors;}else {var valid3 = true;}}}}}}}else {validate24.errors = [{instancePath:instancePath+"/scope_license",schemaPath:"#/$defs/fora.v1.License/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.trigger !== undefined){let data8 = data.trigger;const _errs24 = errors;const _errs25 = errors;let valid4 = false;const _errs26 = errors;if(typeof data8 !== "string"){const err6 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!((((data8 === "OBLIGATION_TRIGGER_ON_USE") || (data8 === "OBLIGATION_TRIGGER_ON_DISTRIBUTION")) || (data8 === "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE")) || (data8 === "OBLIGATION_TRIGGER_ON_DERIVATIVE"))){const err7 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema42.properties.trigger.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;const _errs28 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err8 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs28){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){const err9 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data8 < -2147483648 || isNaN(data8)){const err10 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs28 === errors;valid4 = valid4 || _valid1;if(!valid4){const err11 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate24.errors = vErrors;return false;}else {errors = _errs25;if(vErrors !== null){if(_errs25){vErrors.length = _errs25;}else {vErrors = null;}}}var valid0 = _errs24 === errors;}else {var valid0 = true;}}}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.semantics === undefined) && (missing0 = "semantics")){validate23.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((((((((key0 === "license") || (key0 === "obligations")) || (key0 === "part_label")) || (key0 === "pricing")) || (key0 === "quotas")) || (key0 === "restrictions")) || (key0 === "scopes")) || (key0 === "semantics"))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.license !== undefined){let data0 = data.license;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){const _errs5 = errors;for(const key1 in data0){if(!(((((key1 === "id") || (key1 === "immutable")) || (key1 === "name")) || (key1 === "uri")) || (key1 === "uri_digest"))){validate23.errors = [{instancePath:instancePath+"/license",schemaPath:"#/$defs/fora.v1.License/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.id !== undefined){const _errs6 = errors;if(typeof data0.id !== "string"){validate23.errors = [{instancePath:instancePath+"/license/id",schemaPath:"#/$defs/fora.v1.License/properties/id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.immutable !== undefined){const _errs8 = errors;if(typeof data0.immutable !== "boolean"){validate23.errors = [{instancePath:instancePath+"/license/immutable",schemaPath:"#/$defs/fora.v1.License/properties/immutable/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data0.name !== undefined){const _errs10 = errors;if(typeof data0.name !== "string"){validate23.errors = [{instancePath:instancePath+"/license/name",schemaPath:"#/$defs/fora.v1.License/properties/name/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data0.uri !== undefined){const _errs12 = errors;if(typeof data0.uri !== "string"){validate23.errors = [{instancePath:instancePath+"/license/uri",schemaPath:"#/$defs/fora.v1.License/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs12 === errors;}else {var valid2 = true;}if(valid2){if(data0.uri_digest !== undefined){let data5 = data0.uri_digest;const _errs14 = errors;if(errors === _errs14){if(typeof data5 === "string"){if(!pattern9.test(data5)){validate23.errors = [{instancePath:instancePath+"/license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/pattern",keyword:"pattern",params:{pattern: "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"},message:"must match pattern \""+"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"+"\""}];return false;}}else {validate23.errors = [{instancePath:instancePath+"/license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs14 === errors;}else {var valid2 = true;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/license",schemaPath:"#/$defs/fora.v1.License/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.obligations !== undefined){let data6 = data.obligations;const _errs16 = errors;if(errors === _errs16){if(Array.isArray(data6)){if(data6.length > 64){validate23.errors = [{instancePath:instancePath+"/obligations",schemaPath:"#/properties/obligations/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid3 = true;const len0 = data6.length;for(let i0=0; i0<len0; i0++){const _errs18 = errors;if(!(validate24(data6[i0], {instancePath:instancePath+"/obligations/" + i0,parentData:data6,parentDataProperty:i0,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid3 = _errs18 === errors;if(!valid3){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/obligations",schemaPath:"#/properties/obligations/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.part_label !== undefined){const _errs19 = errors;if(typeof data.part_label !== "string"){validate23.errors = [{instancePath:instancePath+"/part_label",schemaPath:"#/properties/part_label/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs19 === errors;}else {var valid0 = true;}if(valid0){if(data.pricing !== undefined){let data9 = data.pricing;const _errs21 = errors;const _errs22 = errors;if(errors === _errs22){if(data9 && typeof data9 == "object" && !Array.isArray(data9)){let missing1;if((data9.model === undefined) && (missing1 = "model")){validate23.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs24 = errors;for(const key2 in data9){if(!((((((((key2 === "currency") || (key2 === "estimated_quantity")) || (key2 === "license_duration_months")) || (key2 === "metering")) || (key2 === "model")) || (key2 === "rate")) || (key2 === "unit")) || (key2 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs24 === errors){if(data9.currency !== undefined){const _errs25 = errors;if(typeof data9.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/pricing/currency",schemaPath:"#/$defs/fora.v1.Pricing/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs25 === errors;}else {var valid5 = true;}if(valid5){if(data9.estimated_quantity !== undefined){let data11 = data9.estimated_quantity;const _errs27 = errors;if(!(((typeof data11 == "number") && (!(data11 % 1) && !isNaN(data11))) && (isFinite(data11)))){validate23.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs27){if((typeof data11 == "number") && (isFinite(data11))){if(data11 > 2147483647 || isNaN(data11)){validate23.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data11 < -2147483648 || isNaN(data11)){validate23.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs27 === errors;}else {var valid5 = true;}if(valid5){if(data9.license_duration_months !== undefined){let data12 = data9.license_duration_months;const _errs29 = errors;if(!(((typeof data12 == "number") && (!(data12 % 1) && !isNaN(data12))) && (isFinite(data12)))){validate23.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs29){if((typeof data12 == "number") && (isFinite(data12))){if(data12 > 2147483647 || isNaN(data12)){validate23.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data12 < -2147483648 || isNaN(data12)){validate23.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs29 === errors;}else {var valid5 = true;}if(valid5){if(data9.metering !== undefined){let data13 = data9.metering;const _errs31 = errors;const _errs32 = errors;let valid6 = false;const _errs33 = errors;if(typeof data13 !== "string"){const err0 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((data13 === "PRICING_METERING_ONLINE") || (data13 === "PRICING_METERING_NONE")) || (data13 === "PRICING_METERING_OFFLINE_SELF_REPORTED"))){const err1 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.metering.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs33 === errors;valid6 = valid6 || _valid0;const _errs35 = errors;if(!(((typeof data13 == "number") && (!(data13 % 1) && !isNaN(data13))) && (isFinite(data13)))){const err2 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs35){if((typeof data13 == "number") && (isFinite(data13))){if(data13 > 2147483647 || isNaN(data13)){const err3 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data13 < -2147483648 || isNaN(data13)){const err4 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs35 === errors;valid6 = valid6 || _valid0;if(!valid6){const err5 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs32;if(vErrors !== null){if(_errs32){vErrors.length = _errs32;}else {vErrors = null;}}}var valid5 = _errs31 === errors;}else {var valid5 = true;}if(valid5){if(data9.model !== undefined){let data14 = data9.model;const _errs37 = errors;const _errs38 = errors;let valid7 = false;const _errs39 = errors;if(typeof data14 !== "string"){const err6 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((data14 === "PRICING_MODEL_FREE") || (data14 === "PRICING_MODEL_PER_UNIT")) || (data14 === "PRICING_MODEL_FLAT"))){const err7 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.model.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs39 === errors;valid7 = valid7 || _valid1;const _errs41 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err8 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs41){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 2147483647 || isNaN(data14)){const err9 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data14 < -2147483648 || isNaN(data14)){const err10 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs41 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs38;if(vErrors !== null){if(_errs38){vErrors.length = _errs38;}else {vErrors = null;}}}var valid5 = _errs37 === errors;}else {var valid5 = true;}if(valid5){if(data9.rate !== undefined){let data15 = data9.rate;const _errs43 = errors;if(errors === _errs43){if(typeof data15 === "string"){if(func2(data15) > 32){validate23.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern6.test(data15)){validate23.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid5 = _errs43 === errors;}else {var valid5 = true;}if(valid5){if(data9.unit !== undefined){let data16 = data9.unit;const _errs45 = errors;if(errors === _errs45){if(typeof data16 === "string"){if(func2(data16) > 64){validate23.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(!pattern7.test(data16)){validate23.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/pattern",keyword:"pattern",params:{pattern: "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"},message:"must match pattern \""+"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid5 = _errs45 === errors;}else {var valid5 = true;}if(valid5){if(data9.unit_cost !== undefined){let data17 = data9.unit_cost;const _errs47 = errors;if(errors === _errs47){if(typeof data17 === "string"){if(func2(data17) > 32){validate23.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern6.test(data17)){validate23.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid5 = _errs47 === errors;}else {var valid5 = true;}}}}}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs21 === errors;}else {var valid0 = true;}if(valid0){if(data.quotas !== undefined){let data18 = data.quotas;const _errs49 = errors;if(errors === _errs49){if(Array.isArray(data18)){if(data18.length > 64){validate23.errors = [{instancePath:instancePath+"/quotas",schemaPath:"#/properties/quotas/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid8 = true;const len1 = data18.length;for(let i1=0; i1<len1; i1++){let data19 = data18[i1];const _errs51 = errors;const _errs52 = errors;if(errors === _errs52){if(data19 && typeof data19 == "object" && !Array.isArray(data19)){let missing2;if((((data19.limit === undefined) && (missing2 = "limit")) || ((data19.metric === undefined) && (missing2 = "metric"))) || ((data19.window === undefined) && (missing2 = "window"))){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1,schemaPath:"#/$defs/fora.v1.Quota/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs54 = errors;for(const key3 in data19){if(!(((key3 === "limit") || (key3 === "metric")) || (key3 === "window"))){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1,schemaPath:"#/$defs/fora.v1.Quota/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs54 === errors){if(data19.limit !== undefined){let data20 = data19.limit;const _errs55 = errors;const _errs56 = errors;let valid11 = false;const _errs57 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err12 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/0/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(errors === _errs57){if((typeof data20 == "number") && (isFinite(data20))){if(data20 < 1 || isNaN(data20)){const err13 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/0/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}}}var _valid2 = _errs57 === errors;valid11 = valid11 || _valid2;const _errs59 = errors;if(errors === _errs59){if(typeof data20 === "string"){if(!pattern14.test(data20)){const err14 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/1/pattern",keyword:"pattern",params:{pattern: "^0*[1-9][0-9]*$"},message:"must match pattern \""+"^0*[1-9][0-9]*$"+"\""};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}}else {const err15 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}}var _valid2 = _errs59 === errors;valid11 = valid11 || _valid2;if(!valid11){const err16 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs56;if(vErrors !== null){if(_errs56){vErrors.length = _errs56;}else {vErrors = null;}}}var valid10 = _errs55 === errors;}else {var valid10 = true;}if(valid10){if(data19.metric !== undefined){let data21 = data19.metric;const _errs61 = errors;if(errors === _errs61){if(typeof data21 === "string"){if(func2(data21) > 64){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1+"/metric",schemaPath:"#/$defs/fora.v1.Quota/properties/metric/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(!pattern15.test(data21)){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1+"/metric",schemaPath:"#/$defs/fora.v1.Quota/properties/metric/pattern",keyword:"pattern",params:{pattern: "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$"},message:"must match pattern \""+"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/quotas/" + i1+"/metric",schemaPath:"#/$defs/fora.v1.Quota/properties/metric/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid10 = _errs61 === errors;}else {var valid10 = true;}if(valid10){if(data19.window !== undefined){let data22 = data19.window;const _errs63 = errors;const _errs64 = errors;let valid12 = false;const _errs65 = errors;if(typeof data22 !== "string"){const err17 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}if(!((((data22 === "QUOTA_WINDOW_HOURLY") || (data22 === "QUOTA_WINDOW_DAILY")) || (data22 === "QUOTA_WINDOW_MONTHLY")) || (data22 === "QUOTA_WINDOW_TOTAL"))){const err18 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.window.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var _valid3 = _errs65 === errors;valid12 = valid12 || _valid3;const _errs67 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err19 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;}if(errors === _errs67){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err20 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err21 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}}}}var _valid3 = _errs67 === errors;valid12 = valid12 || _valid3;if(!valid12){const err22 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs64;if(vErrors !== null){if(_errs64){vErrors.length = _errs64;}else {vErrors = null;}}}var valid10 = _errs63 === errors;}else {var valid10 = true;}}}}}}else {validate23.errors = [{instancePath:instancePath+"/quotas/" + i1,schemaPath:"#/$defs/fora.v1.Quota/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid8 = _errs51 === errors;if(!valid8){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/quotas",schemaPath:"#/properties/quotas/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs49 === errors;}else {var valid0 = true;}if(valid0){if(data.restrictions !== undefined){let data23 = data.restrictions;const _errs69 = errors;if(errors === _errs69){if(Array.isArray(data23)){if(data23.length > 8){validate23.errors = [{instancePath:instancePath+"/restrictions",schemaPath:"#/properties/restrictions/maxItems",keyword:"maxItems",params:{limit: 8},message:"must NOT have more than 8 items"}];return false;}else {var valid13 = true;const len2 = data23.length;for(let i2=0; i2<len2; i2++){let data24 = data23[i2];const _errs71 = errors;const _errs72 = errors;if(errors === _errs72){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){let missing3;if((data24.kind === undefined) && (missing3 = "kind")){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2,schemaPath:"#/$defs/fora.v1.Restriction/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs74 = errors;for(const key4 in data24){if(!((((key4 === "advisory") || (key4 === "kind")) || (key4 === "permitted")) || (key4 === "prohibited"))){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2,schemaPath:"#/$defs/fora.v1.Restriction/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key4},message:"must NOT have additional properties"}];return false;break;}}if(_errs74 === errors){if(data24.advisory !== undefined){const _errs75 = errors;if(typeof data24.advisory !== "boolean"){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/advisory",schemaPath:"#/$defs/fora.v1.Restriction/properties/advisory/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid15 = _errs75 === errors;}else {var valid15 = true;}if(valid15){if(data24.kind !== undefined){let data26 = data24.kind;const _errs77 = errors;const _errs78 = errors;let valid16 = false;const _errs79 = errors;if(typeof data26 !== "string"){const err23 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}if(!((((data26 === "RESTRICTION_KIND_FUNCTION") || (data26 === "RESTRICTION_KIND_GEOGRAPHY")) || (data26 === "RESTRICTION_KIND_USER_TYPE")) || (data26 === "RESTRICTION_KIND_OTHER"))){const err24 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema46.properties.kind.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}var _valid4 = _errs79 === errors;valid16 = valid16 || _valid4;const _errs81 = errors;if(!(((typeof data26 == "number") && (!(data26 % 1) && !isNaN(data26))) && (isFinite(data26)))){const err25 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;}if(errors === _errs81){if((typeof data26 == "number") && (isFinite(data26))){if(data26 > 4 || isNaN(data26)){const err26 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 4},message:"must be <= 4"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}else {if(data26 < 1 || isNaN(data26)){const err27 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}}}}var _valid4 = _errs81 === errors;valid16 = valid16 || _valid4;if(!valid16){const err28 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs78;if(vErrors !== null){if(_errs78){vErrors.length = _errs78;}else {vErrors = null;}}}var valid15 = _errs77 === errors;}else {var valid15 = true;}if(valid15){if(data24.permitted !== undefined){let data27 = data24.permitted;const _errs83 = errors;if(errors === _errs83){if(Array.isArray(data27)){if(data27.length > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted",schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid17 = true;const len3 = data27.length;for(let i3=0; i3<len3; i3++){let data28 = data27[i3];const _errs85 = errors;if(errors === _errs85){if(typeof data28 === "string"){if(func2(data28) > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func2(data28) < 1){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}else {if(!pattern16.test(data28)){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9._:*-]+$"},message:"must match pattern \""+"^[A-Za-z0-9._:*-]+$"+"\""}];return false;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid17 = _errs85 === errors;if(!valid17){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted",schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid15 = _errs83 === errors;}else {var valid15 = true;}if(valid15){if(data24.prohibited !== undefined){let data29 = data24.prohibited;const _errs87 = errors;if(errors === _errs87){if(Array.isArray(data29)){if(data29.length > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited",schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid18 = true;const len4 = data29.length;for(let i4=0; i4<len4; i4++){let data30 = data29[i4];const _errs89 = errors;if(errors === _errs89){if(typeof data30 === "string"){if(func2(data30) > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func2(data30) < 1){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}else {if(!pattern16.test(data30)){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9._:*-]+$"},message:"must match pattern \""+"^[A-Za-z0-9._:*-]+$"+"\""}];return false;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid18 = _errs89 === errors;if(!valid18){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited",schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid15 = _errs87 === errors;}else {var valid15 = true;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2,schemaPath:"#/$defs/fora.v1.Restriction/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid13 = _errs71 === errors;if(!valid13){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions",schemaPath:"#/properties/restrictions/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs69 === errors;}else {var valid0 = true;}if(valid0){if(data.scopes !== undefined){let data31 = data.scopes;const _errs91 = errors;if(errors === _errs91){if(Array.isArray(data31)){if(data31.length > 64){validate23.errors = [{instancePath:instancePath+"/scopes",schemaPath:"#/properties/scopes/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid19 = true;const len5 = data31.length;for(let i5=0; i5<len5; i5++){const _errs93 = errors;if(typeof data31[i5] !== "string"){validate23.errors = [{instancePath:instancePath+"/scopes/" + i5,schemaPath:"#/properties/scopes/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid19 = _errs93 === errors;if(!valid19){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/scopes",schemaPath:"#/properties/scopes/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs91 === errors;}else {var valid0 = true;}if(valid0){if(data.semantics !== undefined){let data33 = data.semantics;const _errs95 = errors;const _errs96 = errors;let valid20 = false;const _errs97 = errors;if(typeof data33 !== "string"){const err29 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}if(!((data33 === "TERM_SEMANTICS_ENUMERATED") || (data33 === "TERM_SEMANTICS_REFERENCE_ONLY"))){const err30 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.semantics.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}var _valid5 = _errs97 === errors;valid20 = valid20 || _valid5;const _errs99 = errors;if(!(((typeof data33 == "number") && (!(data33 % 1) && !isNaN(data33))) && (isFinite(data33)))){const err31 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;}if(errors === _errs99){if((typeof data33 == "number") && (isFinite(data33))){if(data33 > 2147483647 || isNaN(data33)){const err32 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}else {if(data33 < -2147483648 || isNaN(data33)){const err33 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}}}}var _valid5 = _errs99 === errors;valid20 = valid20 || _valid5;if(!valid20){const err34 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs96;if(vErrors !== null){if(_errs96){vErrors.length = _errs96;}else {vErrors = null;}}}var valid0 = _errs95 === errors;}else {var valid0 = true;}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate22(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate22.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.exchange === undefined) && (missing0 = "exchange")){validate22.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema33.properties, key0))){validate22.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.attestations !== undefined){let data0 = data.attestations;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!((((((key1 === "attested_at") || (key1 === "claims")) || (key1 === "keyid")) || (key1 === "signature")) || (key1 === "uri")) || (key1 === "verifier"))){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0,schemaPath:"#/$defs/fora.v1.ResourceAttestation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.attested_at !== undefined){const _errs8 = errors;if(errors === _errs8){if(errors === _errs8){if(!(typeof data1.attested_at === "string")){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/attested_at",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/attested_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.claims !== undefined){let data3 = data1.claims;const _errs10 = errors;if(!(data3 && typeof data3 == "object" && !Array.isArray(data3))){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/claims",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/claims/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid3 = _errs10 === errors;}else {var valid3 = true;}if(valid3){if(data1.keyid !== undefined){const _errs12 = errors;if(typeof data1.keyid !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/keyid",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/keyid/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs12 === errors;}else {var valid3 = true;}if(valid3){if(data1.signature !== undefined){const _errs14 = errors;if(typeof data1.signature !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/signature",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/signature/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs14 === errors;}else {var valid3 = true;}if(valid3){if(data1.uri !== undefined){const _errs16 = errors;if(typeof data1.uri !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/uri",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs16 === errors;}else {var valid3 = true;}if(valid3){if(data1.verifier !== undefined){const _errs18 = errors;if(typeof data1.verifier !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/verifier",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/verifier/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs18 === errors;}else {var valid3 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/attestations/" + i0,schemaPath:"#/$defs/fora.v1.ResourceAttestation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}else {validate22.errors = [{instancePath:instancePath+"/attestations",schemaPath:"#/properties/attestations/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.data_as_of !== undefined){const _errs20 = errors;if(errors === _errs20){if(errors === _errs20){if(!(typeof data.data_as_of === "string")){validate22.errors = [{instancePath:instancePath+"/data_as_of",schemaPath:"#/properties/data_as_of/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs20 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data9 = data.delivery_method;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(errors === _errs24){if(typeof data9 === "string"){if(!pattern4.test(data9)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs24 === errors;valid4 = valid4 || _valid0;const _errs26 = errors;if(typeof data9 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data9 === "DELIVERY_METHOD_DIRECT") || (data9 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data9 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema33.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs26 === errors;valid4 = valid4 || _valid0;const _errs28 = errors;if(!(((typeof data9 == "number") && (!(data9 % 1) && !isNaN(data9))) && (isFinite(data9)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs28){if((typeof data9 == "number") && (isFinite(data9))){if(data9 > 2147483647 || isNaN(data9)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data9 < -2147483648 || isNaN(data9)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs28 === errors;valid4 = valid4 || _valid0;if(!valid4){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.exchange !== undefined){let data10 = data.exchange;const _errs30 = errors;if(errors === _errs30){if(typeof data10 === "string"){if(func2(data10) > 260){validate22.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern5.test(data10)){validate22.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs32 = errors;if(errors === _errs32){if(errors === _errs32){if(!(typeof data.expires_at === "string")){validate22.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data12 = data.ext;const _errs34 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate22.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs34 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data13 = data.ext_critical;const _errs36 = errors;if(errors === _errs36){if(Array.isArray(data13)){var valid5 = true;const len1 = data13.length;for(let i1=0; i1<len1; i1++){const _errs38 = errors;if(typeof data13[i1] !== "string"){validate22.errors = [{instancePath:instancePath+"/ext_critical/" + i1,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs38 === errors;if(!valid5){break;}}}else {validate22.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs36 === errors;}else {var valid0 = true;}if(valid0){if(data.iab_categories !== undefined){let data15 = data.iab_categories;const _errs40 = errors;if(errors === _errs40){if(Array.isArray(data15)){var valid6 = true;const len2 = data15.length;for(let i2=0; i2<len2; i2++){const _errs42 = errors;if(typeof data15[i2] !== "string"){validate22.errors = [{instancePath:instancePath+"/iab_categories/" + i2,schemaPath:"#/properties/iab_categories/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs42 === errors;if(!valid6){break;}}}else {validate22.errors = [{instancePath:instancePath+"/iab_categories",schemaPath:"#/properties/iab_categories/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.identity !== undefined){let data17 = data.identity;const _errs44 = errors;const _errs45 = errors;if(errors === _errs45){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing1;if((data17.resource_mutability === undefined) && (missing1 = "resource_mutability")){validate22.errors = [{instancePath:instancePath+"/identity",schemaPath:"#/$defs/fora.v1.ResourceIdentity/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs47 = errors;for(const key2 in data17){if(!(func1.call(schema35.properties, key2))){validate22.errors = [{instancePath:instancePath+"/identity",schemaPath:"#/$defs/fora.v1.ResourceIdentity/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs47 === errors){if(data17.c2pa_manifest !== undefined){const _errs48 = errors;if(typeof data17.c2pa_manifest !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/c2pa_manifest",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_manifest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs48 === errors;}else {var valid8 = true;}if(valid8){if(data17.c2pa_status !== undefined){let data19 = data17.c2pa_status;const _errs50 = errors;const _errs51 = errors;let valid9 = false;const _errs52 = errors;if(typeof data19 !== "string"){const err8 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((data19 === "C2PA_STATUS_UNSPECIFIED") || (data19 === "C2PA_STATUS_TRUSTED")) || (data19 === "C2PA_STATUS_VALID")) || (data19 === "C2PA_STATUS_INVALID")) || (data19 === "C2PA_STATUS_ABSENT"))){const err9 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema35.properties.c2pa_status.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs52 === errors;valid9 = valid9 || _valid1;const _errs54 = errors;if(!(((typeof data19 == "number") && (!(data19 % 1) && !isNaN(data19))) && (isFinite(data19)))){const err10 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs54){if((typeof data19 == "number") && (isFinite(data19))){if(data19 > 2147483647 || isNaN(data19)){const err11 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data19 < -2147483648 || isNaN(data19)){const err12 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs54 === errors;valid9 = valid9 || _valid1;if(!valid9){const err13 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs51;if(vErrors !== null){if(_errs51){vErrors.length = _errs51;}else {vErrors = null;}}}var valid8 = _errs50 === errors;}else {var valid8 = true;}if(valid8){if(data17.canonical_url !== undefined){const _errs56 = errors;if(typeof data17.canonical_url !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/canonical_url",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/canonical_url/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs56 === errors;}else {var valid8 = true;}if(valid8){if(data17.content_hash !== undefined){const _errs58 = errors;if(typeof data17.content_hash !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/content_hash",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/content_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs58 === errors;}else {var valid8 = true;}if(valid8){if(data17.doi !== undefined){const _errs60 = errors;if(typeof data17.doi !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/doi",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/doi/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs60 === errors;}else {var valid8 = true;}if(valid8){if(data17.ext !== undefined){let data23 = data17.ext;const _errs62 = errors;if(!(data23 && typeof data23 == "object" && !Array.isArray(data23))){validate22.errors = [{instancePath:instancePath+"/identity/ext",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid8 = _errs62 === errors;}else {var valid8 = true;}if(valid8){if(data17.ext_critical !== undefined){let data24 = data17.ext_critical;const _errs64 = errors;if(errors === _errs64){if(Array.isArray(data24)){var valid10 = true;const len3 = data24.length;for(let i3=0; i3<len3; i3++){const _errs66 = errors;if(typeof data24[i3] !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/ext_critical/" + i3,schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid10 = _errs66 === errors;if(!valid10){break;}}}else {validate22.errors = [{instancePath:instancePath+"/identity/ext_critical",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid8 = _errs64 === errors;}else {var valid8 = true;}if(valid8){if(data17.hash_method !== undefined){const _errs68 = errors;if(typeof data17.hash_method !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/hash_method",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/hash_method/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs68 === errors;}else {var valid8 = true;}if(valid8){if(data17.iptc_guid !== undefined){const _errs70 = errors;if(typeof data17.iptc_guid !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/iptc_guid",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/iptc_guid/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs70 === errors;}else {var valid8 = true;}if(valid8){if(data17.isni !== undefined){const _errs72 = errors;if(typeof data17.isni !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/isni",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/isni/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs72 === errors;}else {var valid8 = true;}if(valid8){if(data17.resource_mutability !== undefined){let data29 = data17.resource_mutability;const _errs74 = errors;const _errs75 = errors;let valid11 = false;const _errs76 = errors;if(typeof data29 !== "string"){const err14 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((data29 === "RESOURCE_MUTABILITY_STATIC") || (data29 === "RESOURCE_MUTABILITY_DYNAMIC")) || (data29 === "RESOURCE_MUTABILITY_LIVE"))){const err15 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema35.properties.resource_mutability.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs76 === errors;valid11 = valid11 || _valid2;const _errs78 = errors;if(!(((typeof data29 == "number") && (!(data29 % 1) && !isNaN(data29))) && (isFinite(data29)))){const err16 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs78){if((typeof data29 == "number") && (isFinite(data29))){if(data29 > 2147483647 || isNaN(data29)){const err17 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data29 < -2147483648 || isNaN(data29)){const err18 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs78 === errors;valid11 = valid11 || _valid2;if(!valid11){const err19 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs75;if(vErrors !== null){if(_errs75){vErrors.length = _errs75;}else {vErrors = null;}}}var valid8 = _errs74 === errors;}else {var valid8 = true;}if(valid8){if(data17.soft_binding !== undefined){const _errs80 = errors;if(typeof data17.soft_binding !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/soft_binding",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/soft_binding/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs80 === errors;}else {var valid8 = true;}if(valid8){if(data17.soft_binding_method !== undefined){const _errs82 = errors;if(typeof data17.soft_binding_method !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/soft_binding_method",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/soft_binding_method/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs82 === errors;}else {var valid8 = true;}}}}}}}}}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/identity",schemaPath:"#/$defs/fora.v1.ResourceIdentity/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs44 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs84 = errors;if(typeof data.offer_id !== "string"){validate22.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs84 === errors;}else {var valid0 = true;}if(valid0){if(data.previews !== undefined){let data33 = data.previews;const _errs86 = errors;if(errors === _errs86){if(Array.isArray(data33)){var valid12 = true;const len4 = data33.length;for(let i4=0; i4<len4; i4++){let data34 = data33[i4];const _errs88 = errors;const _errs89 = errors;if(errors === _errs89){if(data34 && typeof data34 == "object" && !Array.isArray(data34)){const _errs91 = errors;for(const key3 in data34){if(!((((((key3 === "duration") || (key3 === "height")) || (key3 === "media_type")) || (key3 === "size")) || (key3 === "url")) || (key3 === "width"))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4,schemaPath:"#/$defs/fora.v1.Preview/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs91 === errors){if(data34.duration !== undefined){let data35 = data34.duration;const _errs92 = errors;if(!(((typeof data35 == "number") && (!(data35 % 1) && !isNaN(data35))) && (isFinite(data35)))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/duration",schemaPath:"#/$defs/fora.v1.Preview/properties/duration/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs92){if((typeof data35 == "number") && (isFinite(data35))){if(data35 > 2147483647 || isNaN(data35)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/duration",schemaPath:"#/$defs/fora.v1.Preview/properties/duration/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data35 < -2147483648 || isNaN(data35)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/duration",schemaPath:"#/$defs/fora.v1.Preview/properties/duration/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid14 = _errs92 === errors;}else {var valid14 = true;}if(valid14){if(data34.height !== undefined){let data36 = data34.height;const _errs94 = errors;if(!(((typeof data36 == "number") && (!(data36 % 1) && !isNaN(data36))) && (isFinite(data36)))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/height",schemaPath:"#/$defs/fora.v1.Preview/properties/height/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs94){if((typeof data36 == "number") && (isFinite(data36))){if(data36 > 2147483647 || isNaN(data36)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/height",schemaPath:"#/$defs/fora.v1.Preview/properties/height/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data36 < -2147483648 || isNaN(data36)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/height",schemaPath:"#/$defs/fora.v1.Preview/properties/height/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid14 = _errs94 === errors;}else {var valid14 = true;}if(valid14){if(data34.media_type !== undefined){const _errs96 = errors;if(typeof data34.media_type !== "string"){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/media_type",schemaPath:"#/$defs/fora.v1.Preview/properties/media_type/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid14 = _errs96 === errors;}else {var valid14 = true;}if(valid14){if(data34.size !== undefined){const _errs98 = errors;if(typeof data34.size !== "string"){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/size",schemaPath:"#/$defs/fora.v1.Preview/properties/size/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid14 = _errs98 === errors;}else {var valid14 = true;}if(valid14){if(data34.url !== undefined){const _errs100 = errors;if(typeof data34.url !== "string"){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/url",schemaPath:"#/$defs/fora.v1.Preview/properties/url/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid14 = _errs100 === errors;}else {var valid14 = true;}if(valid14){if(data34.width !== undefined){let data40 = data34.width;const _errs102 = errors;if(!(((typeof data40 == "number") && (!(data40 % 1) && !isNaN(data40))) && (isFinite(data40)))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/width",schemaPath:"#/$defs/fora.v1.Preview/properties/width/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs102){if((typeof data40 == "number") && (isFinite(data40))){if(data40 > 2147483647 || isNaN(data40)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/width",schemaPath:"#/$defs/fora.v1.Preview/properties/width/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data40 < -2147483648 || isNaN(data40)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/width",schemaPath:"#/$defs/fora.v1.Preview/properties/width/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid14 = _errs102 === errors;}else {var valid14 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/previews/" + i4,schemaPath:"#/$defs/fora.v1.Preview/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid12 = _errs88 === errors;if(!valid12){break;}}}else {validate22.errors = [{instancePath:instancePath+"/previews",schemaPath:"#/properties/previews/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs86 === errors;}else {var valid0 = true;}if(valid0){if(data.pricing !== undefined){let data41 = data.pricing;const _errs104 = errors;const _errs105 = errors;if(errors === _errs105){if(data41 && typeof data41 == "object" && !Array.isArray(data41)){let missing2;if((data41.model === undefined) && (missing2 = "model")){validate22.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs107 = errors;for(const key4 in data41){if(!((((((((key4 === "currency") || (key4 === "estimated_quantity")) || (key4 === "license_duration_months")) || (key4 === "metering")) || (key4 === "model")) || (key4 === "rate")) || (key4 === "unit")) || (key4 === "unit_cost"))){validate22.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key4},message:"must NOT have additional properties"}];return false;break;}}if(_errs107 === errors){if(data41.currency !== undefined){const _errs108 = errors;if(typeof data41.currency !== "string"){validate22.errors = [{instancePath:instancePath+"/pricing/currency",schemaPath:"#/$defs/fora.v1.Pricing/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid16 = _errs108 === errors;}else {var valid16 = true;}if(valid16){if(data41.estimated_quantity !== undefined){let data43 = data41.estimated_quantity;const _errs110 = errors;if(!(((typeof data43 == "number") && (!(data43 % 1) && !isNaN(data43))) && (isFinite(data43)))){validate22.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs110){if((typeof data43 == "number") && (isFinite(data43))){if(data43 > 2147483647 || isNaN(data43)){validate22.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data43 < -2147483648 || isNaN(data43)){validate22.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid16 = _errs110 === errors;}else {var valid16 = true;}if(valid16){if(data41.license_duration_months !== undefined){let data44 = data41.license_duration_months;const _errs112 = errors;if(!(((typeof data44 == "number") && (!(data44 % 1) && !isNaN(data44))) && (isFinite(data44)))){validate22.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs112){if((typeof data44 == "number") && (isFinite(data44))){if(data44 > 2147483647 || isNaN(data44)){validate22.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data44 < -2147483648 || isNaN(data44)){validate22.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid16 = _errs112 === errors;}else {var valid16 = true;}if(valid16){if(data41.metering !== undefined){let data45 = data41.metering;const _errs114 = errors;const _errs115 = errors;let valid17 = false;const _errs116 = errors;if(typeof data45 !== "string"){const err20 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data45 === "PRICING_METERING_ONLINE") || (data45 === "PRICING_METERING_NONE")) || (data45 === "PRICING_METERING_OFFLINE_SELF_REPORTED"))){const err21 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.metering.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs116 === errors;valid17 = valid17 || _valid3;const _errs118 = errors;if(!(((typeof data45 == "number") && (!(data45 % 1) && !isNaN(data45))) && (isFinite(data45)))){const err22 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs118){if((typeof data45 == "number") && (isFinite(data45))){if(data45 > 2147483647 || isNaN(data45)){const err23 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data45 < -2147483648 || isNaN(data45)){const err24 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs118 === errors;valid17 = valid17 || _valid3;if(!valid17){const err25 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs115;if(vErrors !== null){if(_errs115){vErrors.length = _errs115;}else {vErrors = null;}}}var valid16 = _errs114 === errors;}else {var valid16 = true;}if(valid16){if(data41.model !== undefined){let data46 = data41.model;const _errs120 = errors;const _errs121 = errors;let valid18 = false;const _errs122 = errors;if(typeof data46 !== "string"){const err26 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!(((data46 === "PRICING_MODEL_FREE") || (data46 === "PRICING_MODEL_PER_UNIT")) || (data46 === "PRICING_MODEL_FLAT"))){const err27 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.model.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs122 === errors;valid18 = valid18 || _valid4;const _errs124 = errors;if(!(((typeof data46 == "number") && (!(data46 % 1) && !isNaN(data46))) && (isFinite(data46)))){const err28 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs124){if((typeof data46 == "number") && (isFinite(data46))){if(data46 > 2147483647 || isNaN(data46)){const err29 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data46 < -2147483648 || isNaN(data46)){const err30 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs124 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs121;if(vErrors !== null){if(_errs121){vErrors.length = _errs121;}else {vErrors = null;}}}var valid16 = _errs120 === errors;}else {var valid16 = true;}if(valid16){if(data41.rate !== undefined){let data47 = data41.rate;const _errs126 = errors;if(errors === _errs126){if(typeof data47 === "string"){if(func2(data47) > 32){validate22.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern6.test(data47)){validate22.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid16 = _errs126 === errors;}else {var valid16 = true;}if(valid16){if(data41.unit !== undefined){let data48 = data41.unit;const _errs128 = errors;if(errors === _errs128){if(typeof data48 === "string"){if(func2(data48) > 64){validate22.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(!pattern7.test(data48)){validate22.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/pattern",keyword:"pattern",params:{pattern: "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"},message:"must match pattern \""+"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid16 = _errs128 === errors;}else {var valid16 = true;}if(valid16){if(data41.unit_cost !== undefined){let data49 = data41.unit_cost;const _errs130 = errors;if(errors === _errs130){if(typeof data49 === "string"){if(func2(data49) > 32){validate22.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern6.test(data49)){validate22.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid16 = _errs130 === errors;}else {var valid16 = true;}}}}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs104 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting !== undefined){let data50 = data.reporting;const _errs132 = errors;const _errs133 = errors;if(errors === _errs133){if(data50 && typeof data50 == "object" && !Array.isArray(data50)){const _errs135 = errors;for(const key5 in data50){if(!((((((key5 === "endpoint") || (key5 === "ext")) || (key5 === "ext_critical")) || (key5 === "required")) || (key5 === "required_fields")) || (key5 === "window"))){validate22.errors = [{instancePath:instancePath+"/reporting",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key5},message:"must NOT have additional properties"}];return false;break;}}if(_errs135 === errors){if(data50.endpoint !== undefined){const _errs136 = errors;if(typeof data50.endpoint !== "string"){validate22.errors = [{instancePath:instancePath+"/reporting/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs136 === errors;}else {var valid20 = true;}if(valid20){if(data50.ext !== undefined){let data52 = data50.ext;const _errs138 = errors;if(!(data52 && typeof data52 == "object" && !Array.isArray(data52))){validate22.errors = [{instancePath:instancePath+"/reporting/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid20 = _errs138 === errors;}else {var valid20 = true;}if(valid20){if(data50.ext_critical !== undefined){let data53 = data50.ext_critical;const _errs140 = errors;if(errors === _errs140){if(Array.isArray(data53)){var valid21 = true;const len5 = data53.length;for(let i5=0; i5<len5; i5++){const _errs142 = errors;if(typeof data53[i5] !== "string"){validate22.errors = [{instancePath:instancePath+"/reporting/ext_critical/" + i5,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid21 = _errs142 === errors;if(!valid21){break;}}}else {validate22.errors = [{instancePath:instancePath+"/reporting/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs140 === errors;}else {var valid20 = true;}if(valid20){if(data50.required !== undefined){const _errs144 = errors;if(typeof data50.required !== "boolean"){validate22.errors = [{instancePath:instancePath+"/reporting/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid20 = _errs144 === errors;}else {var valid20 = true;}if(valid20){if(data50.required_fields !== undefined){let data56 = data50.required_fields;const _errs146 = errors;if(errors === _errs146){if(Array.isArray(data56)){var valid22 = true;const len6 = data56.length;for(let i6=0; i6<len6; i6++){const _errs148 = errors;if(typeof data56[i6] !== "string"){validate22.errors = [{instancePath:instancePath+"/reporting/required_fields/" + i6,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid22 = _errs148 === errors;if(!valid22){break;}}}else {validate22.errors = [{instancePath:instancePath+"/reporting/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs146 === errors;}else {var valid20 = true;}if(valid20){if(data50.window !== undefined){const _errs150 = errors;if(errors === _errs150){if(errors === _errs150){if(!(typeof data50.window === "string")){validate22.errors = [{instancePath:instancePath+"/reporting/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid20 = _errs150 === errors;}else {var valid20 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/reporting",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs132 === errors;}else {var valid0 = true;}if(valid0){if(data.signature !== undefined){const _errs152 = errors;if(typeof data.signature !== "string"){validate22.errors = [{instancePath:instancePath+"/signature",schemaPath:"#/properties/signature/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs152 === errors;}else {var valid0 = true;}if(valid0){if(data.signature_algorithm !== undefined){const _errs154 = errors;if(typeof data.signature_algorithm !== "string"){validate22.errors = [{instancePath:instancePath+"/signature_algorithm",schemaPath:"#/properties/signature_algorithm/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs154 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs156 = errors;if(typeof data.subscription_id !== "string"){validate22.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs156 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data62 = data.subscription_quota;const _errs158 = errors;if(errors === _errs158){if(Array.isArray(data62)){var valid23 = true;const len7 = data62.length;for(let i7=0; i7<len7; i7++){let data63 = data62[i7];const _errs160 = errors;const _errs161 = errors;if(errors === _errs161){if(data63 && typeof data63 == "object" && !Array.isArray(data63)){const _errs163 = errors;for(const key6 in data63){if(!((((((key6 === "quota_limit") || (key6 === "quota_remaining")) || (key6 === "quota_used")) || (key6 === "resets_at")) || (key6 === "subscription_id")) || (key6 === "unit"))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs163 === errors){if(data63.quota_limit !== undefined){let data64 = data63.quota_limit;const _errs164 = errors;if(!(((typeof data64 == "number") && (!(data64 % 1) && !isNaN(data64))) && (isFinite(data64)))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs164){if((typeof data64 == "number") && (isFinite(data64))){if(data64 > 2147483647 || isNaN(data64)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data64 < -2147483648 || isNaN(data64)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid25 = _errs164 === errors;}else {var valid25 = true;}if(valid25){if(data63.quota_remaining !== undefined){let data65 = data63.quota_remaining;const _errs166 = errors;if(!(((typeof data65 == "number") && (!(data65 % 1) && !isNaN(data65))) && (isFinite(data65)))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs166){if((typeof data65 == "number") && (isFinite(data65))){if(data65 > 2147483647 || isNaN(data65)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data65 < -2147483648 || isNaN(data65)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid25 = _errs166 === errors;}else {var valid25 = true;}if(valid25){if(data63.quota_used !== undefined){let data66 = data63.quota_used;const _errs168 = errors;if(!(((typeof data66 == "number") && (!(data66 % 1) && !isNaN(data66))) && (isFinite(data66)))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs168){if((typeof data66 == "number") && (isFinite(data66))){if(data66 > 2147483647 || isNaN(data66)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data66 < -2147483648 || isNaN(data66)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid25 = _errs168 === errors;}else {var valid25 = true;}if(valid25){if(data63.resets_at !== undefined){const _errs170 = errors;if(errors === _errs170){if(errors === _errs170){if(!(typeof data63.resets_at === "string")){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid25 = _errs170 === errors;}else {var valid25 = true;}if(valid25){if(data63.subscription_id !== undefined){const _errs172 = errors;if(typeof data63.subscription_id !== "string"){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid25 = _errs172 === errors;}else {var valid25 = true;}if(valid25){if(data63.unit !== undefined){const _errs174 = errors;if(typeof data63.unit !== "string"){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid25 = _errs174 === errors;}else {var valid25 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid23 = _errs160 === errors;if(!valid23){break;}}}else {validate22.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs158 === errors;}else {var valid0 = true;}if(valid0){if(data.terms !== undefined){let data70 = data.terms;const _errs176 = errors;if(errors === _errs176){if(Array.isArray(data70)){if(data70.length > 1){validate22.errors = [{instancePath:instancePath+"/terms",schemaPath:"#/properties/terms/maxItems",keyword:"maxItems",params:{limit: 1},message:"must NOT have more than 1 items"}];return false;}else {if(data70.length < 1){validate22.errors = [{instancePath:instancePath+"/terms",schemaPath:"#/properties/terms/minItems",keyword:"minItems",params:{limit: 1},message:"must NOT have fewer than 1 items"}];return false;}else {var valid26 = true;const len8 = data70.length;for(let i8=0; i8<len8; i8++){const _errs178 = errors;if(!(validate23(data70[i8], {instancePath:instancePath+"/terms/" + i8,parentData:data70,parentDataProperty:i8,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid26 = _errs178 === errors;if(!valid26){break;}}}}}else {validate22.errors = [{instancePath:instancePath+"/terms",schemaPath:"#/properties/terms/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs176 === errors;}else {var valid0 = true;}if(valid0){if(data.title !== undefined){const _errs179 = errors;if(typeof data.title !== "string"){validate22.errors = [{instancePath:instancePath+"/title",schemaPath:"#/properties/title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs179 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}}}}}}}else {validate22.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate22.errors = vErrors;return errors === 0;}validate22.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((key0 === "absence_reason") || (key0 === "discovery_method")) || (key0 === "offers")) || (key0 === "restriction_filters")) || (key0 === "uri"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.absence_reason !== undefined){let data0 = data.absence_reason;const _errs2 = errors;const _errs3 = errors;let valid1 = false;const _errs4 = errors;if(typeof data0 !== "string"){const err0 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((data0 === "OFFER_ABSENCE_REASON_UNSPECIFIED") || (data0 === "OFFER_ABSENCE_REASON_NOT_IN_CATALOG")) || (data0 === "OFFER_ABSENCE_REASON_CONTENT_BLOCKED")) || (data0 === "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED")) || (data0 === "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE")) || (data0 === "OFFER_ABSENCE_REASON_NOT_AUTHORIZED")) || (data0 === "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT")) || (data0 === "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data0 === "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"))){const err1 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.absence_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs4 === errors;valid1 = valid1 || _valid0;const _errs6 = errors;if(!(((typeof data0 == "number") && (!(data0 % 1) && !isNaN(data0))) && (isFinite(data0)))){const err2 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs6){if((typeof data0 == "number") && (isFinite(data0))){if(data0 > 2147483647 || isNaN(data0)){const err3 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data0 < -2147483648 || isNaN(data0)){const err4 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs6 === errors;valid1 = valid1 || _valid0;if(!valid1){const err5 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs3;if(vErrors !== null){if(_errs3){vErrors.length = _errs3;}else {vErrors = null;}}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.discovery_method !== undefined){let data1 = data.discovery_method;const _errs8 = errors;const _errs9 = errors;let valid2 = false;const _errs10 = errors;if(typeof data1 !== "string"){const err6 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data1 === "DISCOVERY_METHOD_UNSPECIFIED") || (data1 === "DISCOVERY_METHOD_EXCHANGE")) || (data1 === "DISCOVERY_METHOD_SEARCH")) || (data1 === "DISCOVERY_METHOD_RECOMMENDATION")) || (data1 === "DISCOVERY_METHOD_SYNDICATION"))){const err7 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.discovery_method.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs10 === errors;valid2 = valid2 || _valid1;const _errs12 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err8 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs12){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 2147483647 || isNaN(data1)){const err9 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data1 < -2147483648 || isNaN(data1)){const err10 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs12 === errors;valid2 = valid2 || _valid1;if(!valid2){const err11 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs9;if(vErrors !== null){if(_errs9){vErrors.length = _errs9;}else {vErrors = null;}}}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.offers !== undefined){let data2 = data.offers;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data2)){var valid3 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs16 = errors;if(!(validate22(data2[i0], {instancePath:instancePath+"/offers/" + i0,parentData:data2,parentDataProperty:i0,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate22.errors : vErrors.concat(validate22.errors);errors = vErrors.length;}var valid3 = _errs16 === errors;if(!valid3){break;}}}else {validate21.errors = [{instancePath:instancePath+"/offers",schemaPath:"#/properties/offers/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_filters !== undefined){let data4 = data.restriction_filters;const _errs17 = errors;if(errors === _errs17){if(Array.isArray(data4)){var valid4 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){let data5 = data4[i1];const _errs19 = errors;const _errs20 = errors;let valid5 = false;const _errs21 = errors;if(typeof data5 !== "string"){const err12 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!(((((data5 === "RESTRICTION_KIND_UNSPECIFIED") || (data5 === "RESTRICTION_KIND_FUNCTION")) || (data5 === "RESTRICTION_KIND_GEOGRAPHY")) || (data5 === "RESTRICTION_KIND_USER_TYPE")) || (data5 === "RESTRICTION_KIND_OTHER"))){const err13 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.restriction_filters.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs21 === errors;valid5 = valid5 || _valid2;const _errs23 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err14 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs23){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err15 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err16 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs23 === errors;valid5 = valid5 || _valid2;if(!valid5){const err17 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs20;if(vErrors !== null){if(_errs20){vErrors.length = _errs20;}else {vErrors = null;}}}var valid4 = _errs19 === errors;if(!valid4){break;}}}else {validate21.errors = [{instancePath:instancePath+"/restriction_filters",schemaPath:"#/properties/restriction_filters/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs17 === errors;}else {var valid0 = true;}if(valid0){if(data.uri !== undefined){const _errs25 = errors;if(typeof data.uri !== "string"){validate21.errors = [{instancePath:instancePath+"/uri",schemaPath:"#/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs25 === errors;}else {var valid0 = true;}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.DiscoveryResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((key0 === "absence_reason") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "offer_groups")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.absence_reason !== undefined){let data0 = data.absence_reason;const _errs2 = errors;const _errs3 = errors;let valid1 = false;const _errs4 = errors;if(typeof data0 !== "string"){const err0 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((data0 === "OFFER_ABSENCE_REASON_UNSPECIFIED") || (data0 === "OFFER_ABSENCE_REASON_NOT_IN_CATALOG")) || (data0 === "OFFER_ABSENCE_REASON_CONTENT_BLOCKED")) || (data0 === "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED")) || (data0 === "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE")) || (data0 === "OFFER_ABSENCE_REASON_NOT_AUTHORIZED")) || (data0 === "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT")) || (data0 === "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data0 === "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"))){const err1 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema31.properties.absence_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs4 === errors;valid1 = valid1 || _valid0;const _errs6 = errors;if(!(((typeof data0 == "number") && (!(data0 % 1) && !isNaN(data0))) && (isFinite(data0)))){const err2 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs6){if((typeof data0 == "number") && (isFinite(data0))){if(data0 > 2147483647 || isNaN(data0)){const err3 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data0 < -2147483648 || isNaN(data0)){const err4 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs6 === errors;valid1 = valid1 || _valid0;if(!valid1){const err5 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs3;if(vErrors !== null){if(_errs3){vErrors.length = _errs3;}else {vErrors = null;}}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data1 = data.ext;const _errs8 = errors;if(!(data1 && typeof data1 == "object" && !Array.isArray(data1))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data2 = data.ext_critical;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data2)){var valid2 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs12 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_groups !== undefined){let data4 = data.offer_groups;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data4)){var valid3 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){const _errs16 = errors;if(!(validate21(data4[i1], {instancePath:instancePath+"/offer_groups/" + i1,parentData:data4,parentDataProperty:i1,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid3 = _errs16 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/offer_groups",schemaPath:"#/properties/offer_groups/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs17 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs17 === errors;}else {var valid0 = true;}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.v1.DiscoveryResponse. */
+export const strict: StrictMessage = { message: "fora.v1.DiscoveryResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.DisputeResponse.ts b/gen/ts/strict/fora.v1.DisputeResponse.ts
new file mode 100644
index 00000000..67ec081e
--- /dev/null
+++ b/gen/ts/strict/fora.v1.DisputeResponse.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.DisputeResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"dispute_id":{"type":"string"},"estimated_resolution":{"format":"duration","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"resolution":{"anyOf":[{"enum":["RESOLUTION_TYPE_UNSPECIFIED","RESOLUTION_TYPE_CREDIT","RESOLUTION_TYPE_REDELIVERY","RESOLUTION_TYPE_REJECTED","RESOLUTION_TYPE_INVESTIGATION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"status":{"anyOf":[{"pattern":"^DISPUTE_STATUS_UNSPECIFIED$","type":"string"},{"enum":["DISPUTE_STATUS_FILED","DISPUTE_STATUS_AUTO_RESOLVED","DISPUTE_STATUS_EVIDENCE_NEEDED","DISPUTE_STATUS_UNDER_REVIEW","DISPUTE_STATUS_ESCALATED","DISPUTE_STATUS_RESOLVED","DISPUTE_STATUS_APPEALED","DISPUTE_STATUS_SETTLED","DISPUTE_STATUS_FINAL"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"ver":{"default":"","type":"string"}},"type":"object"};const pattern4 = new RegExp("^DISPUTE_STATUS_UNSPECIFIED$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.DisputeResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((((key0 === "dispute_id") || (key0 === "estimated_resolution")) || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "resolution")) || (key0 === "status")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.dispute_id !== undefined){const _errs2 = errors;if(typeof data.dispute_id !== "string"){validate20.errors = [{instancePath:instancePath+"/dispute_id",schemaPath:"#/properties/dispute_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.estimated_resolution !== undefined){const _errs4 = errors;if(errors === _errs4){if(errors === _errs4){if(!(typeof data.estimated_resolution === "string")){validate20.errors = [{instancePath:instancePath+"/estimated_resolution",schemaPath:"#/properties/estimated_resolution/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data2 = data.ext;const _errs6 = errors;if(!(data2 && typeof data2 == "object" && !Array.isArray(data2))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data3 = data.ext_critical;const _errs8 = errors;if(errors === _errs8){if(Array.isArray(data3)){var valid1 = true;const len0 = data3.length;for(let i0=0; i0<len0; i0++){const _errs10 = errors;if(typeof data3[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs10 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.resolution !== undefined){let data5 = data.resolution;const _errs12 = errors;const _errs13 = errors;let valid2 = false;const _errs14 = errors;if(typeof data5 !== "string"){const err0 = {instancePath:instancePath+"/resolution",schemaPath:"#/properties/resolution/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((data5 === "RESOLUTION_TYPE_UNSPECIFIED") || (data5 === "RESOLUTION_TYPE_CREDIT")) || (data5 === "RESOLUTION_TYPE_REDELIVERY")) || (data5 === "RESOLUTION_TYPE_REJECTED")) || (data5 === "RESOLUTION_TYPE_INVESTIGATION"))){const err1 = {instancePath:instancePath+"/resolution",schemaPath:"#/properties/resolution/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema31.properties.resolution.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid2 = valid2 || _valid0;const _errs16 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err2 = {instancePath:instancePath+"/resolution",schemaPath:"#/properties/resolution/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err3 = {instancePath:instancePath+"/resolution",schemaPath:"#/properties/resolution/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err4 = {instancePath:instancePath+"/resolution",schemaPath:"#/properties/resolution/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid2 = valid2 || _valid0;if(!valid2){const err5 = {instancePath:instancePath+"/resolution",schemaPath:"#/properties/resolution/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}if(valid0){if(data.status !== undefined){let data6 = data.status;const _errs18 = errors;const _errs19 = errors;let valid3 = false;const _errs20 = errors;if(errors === _errs20){if(typeof data6 === "string"){if(!pattern4.test(data6)){const err6 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DISPUTE_STATUS_UNSPECIFIED$"},message:"must match pattern \""+"^DISPUTE_STATUS_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}else {const err7 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}}var _valid1 = _errs20 === errors;valid3 = valid3 || _valid1;const _errs22 = errors;if(typeof data6 !== "string"){const err8 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((((((data6 === "DISPUTE_STATUS_FILED") || (data6 === "DISPUTE_STATUS_AUTO_RESOLVED")) || (data6 === "DISPUTE_STATUS_EVIDENCE_NEEDED")) || (data6 === "DISPUTE_STATUS_UNDER_REVIEW")) || (data6 === "DISPUTE_STATUS_ESCALATED")) || (data6 === "DISPUTE_STATUS_RESOLVED")) || (data6 === "DISPUTE_STATUS_APPEALED")) || (data6 === "DISPUTE_STATUS_SETTLED")) || (data6 === "DISPUTE_STATUS_FINAL"))){const err9 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema31.properties.status.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs22 === errors;valid3 = valid3 || _valid1;const _errs24 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){const err10 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs24){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){const err11 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data6 < -2147483648 || isNaN(data6)){const err12 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs24 === errors;valid3 = valid3 || _valid1;if(!valid3){const err13 = {instancePath:instancePath+"/status",schemaPath:"#/properties/status/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs19;if(vErrors !== null){if(_errs19){vErrors.length = _errs19;}else {vErrors = null;}}}var valid0 = _errs18 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs26 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.DisputeResponse. */
+export const strict: StrictMessage = { message: "fora.v1.DisputeResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.DomainVerificationChallenge.ts b/gen/ts/strict/fora.v1.DomainVerificationChallenge.ts
new file mode 100644
index 00000000..cbd4d259
--- /dev/null
+++ b/gen/ts/strict/fora.v1.DomainVerificationChallenge.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.DomainVerificationChallenge.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"expires_at":{"format":"date-time","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"token":{"default":"","type":"string"},"ver":{"default":"","type":"string"},"verification_url":{"default":"","type":"string"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.DomainVerificationChallenge.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((((((key0 === "expires_at") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "token")) || (key0 === "ver")) || (key0 === "verification_url"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.expires_at !== undefined){const _errs2 = errors;if(errors === _errs2){if(errors === _errs2){if(!(typeof data.expires_at === "string")){validate20.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data1 = data.ext;const _errs4 = errors;if(!(data1 && typeof data1 == "object" && !Array.isArray(data1))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data2 = data.ext_critical;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.token !== undefined){const _errs10 = errors;if(typeof data.token !== "string"){validate20.errors = [{instancePath:instancePath+"/token",schemaPath:"#/properties/token/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs12 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs12 === errors;}else {var valid0 = true;}if(valid0){if(data.verification_url !== undefined){const _errs14 = errors;if(typeof data.verification_url !== "string"){validate20.errors = [{instancePath:instancePath+"/verification_url",schemaPath:"#/properties/verification_url/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs14 === errors;}else {var valid0 = true;}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.DomainVerificationChallenge. */
+export const strict: StrictMessage = { message: "fora.v1.DomainVerificationChallenge", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.DomainVerificationResult.ts b/gen/ts/strict/fora.v1.DomainVerificationResult.ts
new file mode 100644
index 00000000..5a51bd79
--- /dev/null
+++ b/gen/ts/strict/fora.v1.DomainVerificationResult.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.DomainVerificationResult.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"key_id":{"type":"string"},"valid_until":{"format":"date-time","type":"string"},"ver":{"default":"","type":"string"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.DomainVerificationResult.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((key0 === "ext") || (key0 === "ext_critical")) || (key0 === "key_id")) || (key0 === "valid_until")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.ext !== undefined){let data0 = data.ext;const _errs2 = errors;if(!(data0 && typeof data0 == "object" && !Array.isArray(data0))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data1 = data.ext_critical;const _errs4 = errors;if(errors === _errs4){if(Array.isArray(data1)){var valid1 = true;const len0 = data1.length;for(let i0=0; i0<len0; i0++){const _errs6 = errors;if(typeof data1[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs6 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.key_id !== undefined){const _errs8 = errors;if(typeof data.key_id !== "string"){validate20.errors = [{instancePath:instancePath+"/key_id",schemaPath:"#/properties/key_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.valid_until !== undefined){const _errs10 = errors;if(errors === _errs10){if(errors === _errs10){if(!(typeof data.valid_until === "string")){validate20.errors = [{instancePath:instancePath+"/valid_until",schemaPath:"#/properties/valid_until/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs12 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.DomainVerificationResult. */
+export const strict: StrictMessage = { message: "fora.v1.DomainVerificationResult", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.ErrorDetail.ts b/gen/ts/strict/fora.v1.ErrorDetail.ts
new file mode 100644
index 00000000..6039eb49
--- /dev/null
+++ b/gen/ts/strict/fora.v1.ErrorDetail.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.ErrorDetail.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema34 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const schema35 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate21.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate21.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 255){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func2(data2) < 1){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func2(data3) > 255){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema35.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 7 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.ErrorDetail.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema31.properties, key0))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema33.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 5 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 5},message:"must be <= 5"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate20.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 6 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate20.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate20.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate20.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate20.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate21(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func2(data18) > 260){validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data18)){validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate20.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.v1.ErrorDetail. */
+export const strict: StrictMessage = { message: "fora.v1.ErrorDetail", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.GetAccountStatusResponse.ts b/gen/ts/strict/fora.v1.GetAccountStatusResponse.ts
new file mode 100644
index 00000000..24ee5641
--- /dev/null
+++ b/gen/ts/strict/fora.v1.GetAccountStatusResponse.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.Cost":{"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"}},"$id":"fora.v1.GetAccountStatusResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"active":{"default":false,"type":"boolean"},"balances":{"items":{"$ref":"#/$defs/fora.v1.Cost"},"type":"array"},"billing_ref":{"default":"","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"terms_digest":{"pattern":"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$","type":"string"},"ver":{"default":"","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"};const func1 = ucs2length;const pattern4 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern6 = new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.GetAccountStatusResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((((key0 === "active") || (key0 === "balances")) || (key0 === "billing_ref")) || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "terms_digest")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.active !== undefined){const _errs2 = errors;if(typeof data.active !== "boolean"){validate20.errors = [{instancePath:instancePath+"/active",schemaPath:"#/properties/active/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.balances !== undefined){let data1 = data.balances;const _errs4 = errors;if(errors === _errs4){if(Array.isArray(data1)){var valid1 = true;const len0 = data1.length;for(let i0=0; i0<len0; i0++){let data2 = data1[i0];const _errs6 = errors;const _errs7 = errors;if(errors === _errs7){if(data2 && typeof data2 == "object" && !Array.isArray(data2)){const _errs9 = errors;for(const key1 in data2){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate20.errors = [{instancePath:instancePath+"/balances/" + i0,schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs9 === errors){if(data2.amount !== undefined){let data3 = data2.amount;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func1(data3) > 32){validate20.errors = [{instancePath:instancePath+"/balances/" + i0+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data3)){validate20.errors = [{instancePath:instancePath+"/balances/" + i0+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/balances/" + i0+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}if(valid3){if(data2.currency !== undefined){const _errs12 = errors;if(typeof data2.currency !== "string"){validate20.errors = [{instancePath:instancePath+"/balances/" + i0+"/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs12 === errors;}else {var valid3 = true;}if(valid3){if(data2.unit_cost !== undefined){let data5 = data2.unit_cost;const _errs14 = errors;if(errors === _errs14){if(typeof data5 === "string"){if(func1(data5) > 32){validate20.errors = [{instancePath:instancePath+"/balances/" + i0+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data5)){validate20.errors = [{instancePath:instancePath+"/balances/" + i0+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/balances/" + i0+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs14 === errors;}else {var valid3 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/balances/" + i0,schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs6 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/balances",schemaPath:"#/properties/balances/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.billing_ref !== undefined){const _errs16 = errors;if(typeof data.billing_ref !== "string"){validate20.errors = [{instancePath:instancePath+"/billing_ref",schemaPath:"#/properties/billing_ref/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data7 = data.ext;const _errs18 = errors;if(!(data7 && typeof data7 == "object" && !Array.isArray(data7))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs18 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data8 = data.ext_critical;const _errs20 = errors;if(errors === _errs20){if(Array.isArray(data8)){var valid4 = true;const len1 = data8.length;for(let i1=0; i1<len1; i1++){const _errs22 = errors;if(typeof data8[i1] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i1,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs22 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs20 === errors;}else {var valid0 = true;}if(valid0){if(data.terms_digest !== undefined){let data10 = data.terms_digest;const _errs24 = errors;if(errors === _errs24){if(typeof data10 === "string"){if(!pattern6.test(data10)){validate20.errors = [{instancePath:instancePath+"/terms_digest",schemaPath:"#/properties/terms_digest/pattern",keyword:"pattern",params:{pattern: "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"},message:"must match pattern \""+"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"+"\""}];return false;}}else {validate20.errors = [{instancePath:instancePath+"/terms_digest",schemaPath:"#/properties/terms_digest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs24 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs26 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.v1.GetAccountStatusResponse. */
+export const strict: StrictMessage = { message: "fora.v1.GetAccountStatusResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.KeyRevocationList.ts b/gen/ts/strict/fora.v1.KeyRevocationList.ts
new file mode 100644
index 00000000..cf4facdb
--- /dev/null
+++ b/gen/ts/strict/fora.v1.KeyRevocationList.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.KeyRevocationList.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"as_of":{"format":"date-time","type":"string"},"revoked":{"items":{"type":"string"},"type":"array"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.KeyRevocationList.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((key0 === "as_of") || (key0 === "revoked"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.as_of !== undefined){const _errs2 = errors;if(errors === _errs2){if(errors === _errs2){if(!(typeof data.as_of === "string")){validate20.errors = [{instancePath:instancePath+"/as_of",schemaPath:"#/properties/as_of/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.revoked !== undefined){let data1 = data.revoked;const _errs4 = errors;if(errors === _errs4){if(Array.isArray(data1)){var valid1 = true;const len0 = data1.length;for(let i0=0; i0<len0; i0++){const _errs6 = errors;if(typeof data1[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/revoked/" + i0,schemaPath:"#/properties/revoked/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs6 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/revoked",schemaPath:"#/properties/revoked/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.KeyRevocationList. */
+export const strict: StrictMessage = { message: "fora.v1.KeyRevocationList", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.License.ts b/gen/ts/strict/fora.v1.License.ts
new file mode 100644
index 00000000..2eebcd2a
--- /dev/null
+++ b/gen/ts/strict/fora.v1.License.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.License.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.License.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"id":{"type":"string"},"immutable":{"type":"boolean"},"name":{"type":"string"},"uri":{"type":"string"},"uri_digest":{"pattern":"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$","type":"string"}},"type":"object"};const pattern4 = new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.License.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((key0 === "id") || (key0 === "immutable")) || (key0 === "name")) || (key0 === "uri")) || (key0 === "uri_digest"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.id !== undefined){const _errs2 = errors;if(typeof data.id !== "string"){validate20.errors = [{instancePath:instancePath+"/id",schemaPath:"#/properties/id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.immutable !== undefined){const _errs4 = errors;if(typeof data.immutable !== "boolean"){validate20.errors = [{instancePath:instancePath+"/immutable",schemaPath:"#/properties/immutable/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.name !== undefined){const _errs6 = errors;if(typeof data.name !== "string"){validate20.errors = [{instancePath:instancePath+"/name",schemaPath:"#/properties/name/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.uri !== undefined){const _errs8 = errors;if(typeof data.uri !== "string"){validate20.errors = [{instancePath:instancePath+"/uri",schemaPath:"#/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.uri_digest !== undefined){let data4 = data.uri_digest;const _errs10 = errors;if(errors === _errs10){if(typeof data4 === "string"){if(!pattern4.test(data4)){validate20.errors = [{instancePath:instancePath+"/uri_digest",schemaPath:"#/properties/uri_digest/pattern",keyword:"pattern",params:{pattern: "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"},message:"must match pattern \""+"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"+"\""}];return false;}}else {validate20.errors = [{instancePath:instancePath+"/uri_digest",schemaPath:"#/properties/uri_digest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.License. */
+export const strict: StrictMessage = { message: "fora.v1.License", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.PushResourcesResponse.ts b/gen/ts/strict/fora.v1.PushResourcesResponse.ts
new file mode 100644
index 00000000..67397985
--- /dev/null
+++ b/gen/ts/strict/fora.v1.PushResourcesResponse.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.PushResourcesResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"accepted":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"rejected":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"ver":{"default":"","type":"string"},"warnings":{"items":{"type":"string"},"type":"array"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.PushResourcesResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((((((key0 === "accepted") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "rejected")) || (key0 === "ver")) || (key0 === "warnings"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.accepted !== undefined){let data0 = data.accepted;const _errs2 = errors;if(!(((typeof data0 == "number") && (!(data0 % 1) && !isNaN(data0))) && (isFinite(data0)))){validate20.errors = [{instancePath:instancePath+"/accepted",schemaPath:"#/properties/accepted/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs2){if((typeof data0 == "number") && (isFinite(data0))){if(data0 > 2147483647 || isNaN(data0)){validate20.errors = [{instancePath:instancePath+"/accepted",schemaPath:"#/properties/accepted/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data0 < -2147483648 || isNaN(data0)){validate20.errors = [{instancePath:instancePath+"/accepted",schemaPath:"#/properties/accepted/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data1 = data.ext;const _errs4 = errors;if(!(data1 && typeof data1 == "object" && !Array.isArray(data1))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data2 = data.ext_critical;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.rejected !== undefined){let data4 = data.rejected;const _errs10 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){validate20.errors = [{instancePath:instancePath+"/rejected",schemaPath:"#/properties/rejected/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs10){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 2147483647 || isNaN(data4)){validate20.errors = [{instancePath:instancePath+"/rejected",schemaPath:"#/properties/rejected/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data4 < -2147483648 || isNaN(data4)){validate20.errors = [{instancePath:instancePath+"/rejected",schemaPath:"#/properties/rejected/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs12 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs12 === errors;}else {var valid0 = true;}if(valid0){if(data.warnings !== undefined){let data6 = data.warnings;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data6)){var valid2 = true;const len1 = data6.length;for(let i1=0; i1<len1; i1++){const _errs16 = errors;if(typeof data6[i1] !== "string"){validate20.errors = [{instancePath:instancePath+"/warnings/" + i1,schemaPath:"#/properties/warnings/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs16 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/warnings",schemaPath:"#/properties/warnings/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.PushResourcesResponse. */
+export const strict: StrictMessage = { message: "fora.v1.PushResourcesResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.RefreshCatalogResponse.ts b/gen/ts/strict/fora.v1.RefreshCatalogResponse.ts
new file mode 100644
index 00000000..87ab6e5b
--- /dev/null
+++ b/gen/ts/strict/fora.v1.RefreshCatalogResponse.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.RefreshCatalogResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"started":{"default":false,"type":"boolean"},"ver":{"default":"","type":"string"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.RefreshCatalogResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((key0 === "started") || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.started !== undefined){const _errs2 = errors;if(typeof data.started !== "boolean"){validate20.errors = [{instancePath:instancePath+"/started",schemaPath:"#/properties/started/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs4 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.RefreshCatalogResponse. */
+export const strict: StrictMessage = { message: "fora.v1.RefreshCatalogResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.RegisterResponse.ts b/gen/ts/strict/fora.v1.RegisterResponse.ts
new file mode 100644
index 00000000..4312323c
--- /dev/null
+++ b/gen/ts/strict/fora.v1.RegisterResponse.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.RegisterResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"active":{"default":false,"type":"boolean"},"billing_ref":{"default":"","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"ver":{"default":"","type":"string"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.RegisterResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((key0 === "active") || (key0 === "billing_ref")) || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.active !== undefined){const _errs2 = errors;if(typeof data.active !== "boolean"){validate20.errors = [{instancePath:instancePath+"/active",schemaPath:"#/properties/active/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.billing_ref !== undefined){const _errs4 = errors;if(typeof data.billing_ref !== "string"){validate20.errors = [{instancePath:instancePath+"/billing_ref",schemaPath:"#/properties/billing_ref/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data2 = data.ext;const _errs6 = errors;if(!(data2 && typeof data2 == "object" && !Array.isArray(data2))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data3 = data.ext_critical;const _errs8 = errors;if(errors === _errs8){if(Array.isArray(data3)){var valid1 = true;const len0 = data3.length;for(let i0=0; i0<len0; i0++){const _errs10 = errors;if(typeof data3[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs10 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs12 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.RegisterResponse. */
+export const strict: StrictMessage = { message: "fora.v1.RegisterResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.RemoveResourcesResponse.ts b/gen/ts/strict/fora.v1.RemoveResourcesResponse.ts
new file mode 100644
index 00000000..c33e973e
--- /dev/null
+++ b/gen/ts/strict/fora.v1.RemoveResourcesResponse.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.RemoveResourcesResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"removed":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"ver":{"default":"","type":"string"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.RemoveResourcesResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((key0 === "removed") || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.removed !== undefined){let data0 = data.removed;const _errs2 = errors;if(!(((typeof data0 == "number") && (!(data0 % 1) && !isNaN(data0))) && (isFinite(data0)))){validate20.errors = [{instancePath:instancePath+"/removed",schemaPath:"#/properties/removed/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs2){if((typeof data0 == "number") && (isFinite(data0))){if(data0 > 2147483647 || isNaN(data0)){validate20.errors = [{instancePath:instancePath+"/removed",schemaPath:"#/properties/removed/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data0 < -2147483648 || isNaN(data0)){validate20.errors = [{instancePath:instancePath+"/removed",schemaPath:"#/properties/removed/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs4 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.RemoveResourcesResponse. */
+export const strict: StrictMessage = { message: "fora.v1.RemoveResourcesResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.ResourceResponse.ts b/gen/ts/strict/fora.v1.ResourceResponse.ts
new file mode 100644
index 00000000..9d77c4f1
--- /dev/null
+++ b/gen/ts/strict/fora.v1.ResourceResponse.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.License":{"additionalProperties":false,"properties":{"id":{"type":"string"},"immutable":{"type":"boolean"},"name":{"type":"string"},"uri":{"type":"string"},"uri_digest":{"pattern":"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$","type":"string"}},"type":"object"},"fora.v1.LicenseTerm":{"additionalProperties":false,"properties":{"license":{"$ref":"#/$defs/fora.v1.License"},"obligations":{"items":{"$ref":"#/$defs/fora.v1.Obligation"},"maxItems":64,"type":"array"},"part_label":{"type":"string"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"quotas":{"items":{"$ref":"#/$defs/fora.v1.Quota"},"maxItems":64,"type":"array"},"restrictions":{"items":{"$ref":"#/$defs/fora.v1.Restriction"},"maxItems":8,"type":"array"},"scopes":{"items":{"type":"string"},"maxItems":64,"type":"array"},"semantics":{"anyOf":[{"enum":["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["semantics"],"type":"object"},"fora.v1.Obligation":{"additionalProperties":false,"properties":{"detail":{"type":"string"},"kind":{"anyOf":[{"enum":["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"scope_license":{"$ref":"#/$defs/fora.v1.License"},"trigger":{"anyOf":[{"enum":["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["kind","trigger"],"type":"object"},"fora.v1.Offer":{"additionalProperties":false,"properties":{"attestations":{"items":{"$ref":"#/$defs/fora.v1.ResourceAttestation"},"type":"array"},"data_as_of":{"format":"date-time","type":"string"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"expires_at":{"format":"date-time","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"iab_categories":{"items":{"type":"string"},"type":"array"},"identity":{"$ref":"#/$defs/fora.v1.ResourceIdentity"},"offer_id":{"default":"","type":"string"},"previews":{"items":{"$ref":"#/$defs/fora.v1.Preview"},"type":"array"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"reporting":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"signature":{"default":"","type":"string"},"signature_algorithm":{"default":"","type":"string"},"subscription_id":{"type":"string"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"},"terms":{"items":{"$ref":"#/$defs/fora.v1.LicenseTerm"},"maxItems":1,"minItems":1,"type":"array"},"title":{"type":"string"}},"required":["exchange"],"type":"object"},"fora.v1.OfferGroup":{"additionalProperties":false,"properties":{"absence_reason":{"anyOf":[{"enum":["OFFER_ABSENCE_REASON_UNSPECIFIED","OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"discovery_method":{"anyOf":[{"enum":["DISCOVERY_METHOD_UNSPECIFIED","DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"offers":{"items":{"$ref":"#/$defs/fora.v1.Offer"},"type":"array"},"restriction_filters":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"uri":{"default":"","type":"string"}},"type":"object"},"fora.v1.Preview":{"additionalProperties":false,"properties":{"duration":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"height":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"media_type":{"default":"","type":"string"},"size":{"type":"string"},"url":{"default":"","type":"string"},"width":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}},"type":"object"},"fora.v1.Pricing":{"additionalProperties":false,"properties":{"currency":{"default":"","type":"string"},"estimated_quantity":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"license_duration_months":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"metering":{"anyOf":[{"enum":["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"model":{"anyOf":[{"enum":["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"rate":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"unit":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"required":["model"],"type":"object"},"fora.v1.Quota":{"additionalProperties":false,"properties":{"limit":{"anyOf":[{"minimum":1,"type":"integer"},{"pattern":"^0*[1-9][0-9]*$","type":"string"}]},"metric":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$","type":"string"},"window":{"anyOf":[{"enum":["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["limit","metric","window"],"type":"object"},"fora.v1.RateLimitInfo":{"additionalProperties":false,"properties":{"limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"reset_at":{"format":"date-time","type":"string"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.ResourceAttestation":{"additionalProperties":false,"properties":{"attested_at":{"format":"date-time","type":"string"},"claims":{"type":"object"},"keyid":{"default":"","type":"string"},"signature":{"default":"","type":"string"},"uri":{"default":"","type":"string"},"verifier":{"default":"","type":"string"}},"type":"object"},"fora.v1.ResourceIdentity":{"additionalProperties":false,"properties":{"c2pa_manifest":{"type":"string"},"c2pa_status":{"anyOf":[{"enum":["C2PA_STATUS_UNSPECIFIED","C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"canonical_url":{"type":"string"},"content_hash":{"type":"string"},"doi":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"hash_method":{"type":"string"},"iptc_guid":{"type":"string"},"isni":{"type":"string"},"resource_mutability":{"anyOf":[{"enum":["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"soft_binding":{"type":"string"},"soft_binding_method":{"type":"string"}},"required":["resource_mutability"],"type":"object"},"fora.v1.Restriction":{"additionalProperties":false,"properties":{"advisory":{"default":false,"type":"boolean"},"kind":{"anyOf":[{"enum":["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":4,"minimum":1,"type":"integer"}]},"permitted":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"},"prohibited":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"}},"required":["kind"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"}},"$id":"fora.v1.ResourceResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"offer_groups":{"items":{"$ref":"#/$defs/fora.v1.OfferGroup"},"type":"array"},"offers":{"items":{"$ref":"#/$defs/fora.v1.Offer"},"type":"array"},"rate_limit":{"$ref":"#/$defs/fora.v1.RateLimitInfo"},"ver":{"default":"","type":"string"}},"required":["exchange"],"type":"object"};const schema47 = {"additionalProperties":false,"properties":{"limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"reset_at":{"format":"date-time","type":"string"},"window":{"format":"duration","type":"string"}},"type":"object"};const func1 = ucs2length;const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");const schema32 = {"additionalProperties":false,"properties":{"absence_reason":{"anyOf":[{"enum":["OFFER_ABSENCE_REASON_UNSPECIFIED","OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"discovery_method":{"anyOf":[{"enum":["DISCOVERY_METHOD_UNSPECIFIED","DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"offers":{"items":{"$ref":"#/$defs/fora.v1.Offer"},"type":"array"},"restriction_filters":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"uri":{"default":"","type":"string"}},"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"attestations":{"items":{"$ref":"#/$defs/fora.v1.ResourceAttestation"},"type":"array"},"data_as_of":{"format":"date-time","type":"string"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"expires_at":{"format":"date-time","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"iab_categories":{"items":{"type":"string"},"type":"array"},"identity":{"$ref":"#/$defs/fora.v1.ResourceIdentity"},"offer_id":{"default":"","type":"string"},"previews":{"items":{"$ref":"#/$defs/fora.v1.Preview"},"type":"array"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"reporting":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"signature":{"default":"","type":"string"},"signature_algorithm":{"default":"","type":"string"},"subscription_id":{"type":"string"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"},"terms":{"items":{"$ref":"#/$defs/fora.v1.LicenseTerm"},"maxItems":1,"minItems":1,"type":"array"},"title":{"type":"string"}},"required":["exchange"],"type":"object"};const schema34 = {"additionalProperties":false,"properties":{"attested_at":{"format":"date-time","type":"string"},"claims":{"type":"object"},"keyid":{"default":"","type":"string"},"signature":{"default":"","type":"string"},"uri":{"default":"","type":"string"},"verifier":{"default":"","type":"string"}},"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"c2pa_manifest":{"type":"string"},"c2pa_status":{"anyOf":[{"enum":["C2PA_STATUS_UNSPECIFIED","C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"canonical_url":{"type":"string"},"content_hash":{"type":"string"},"doi":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"hash_method":{"type":"string"},"iptc_guid":{"type":"string"},"isni":{"type":"string"},"resource_mutability":{"anyOf":[{"enum":["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"soft_binding":{"type":"string"},"soft_binding_method":{"type":"string"}},"required":["resource_mutability"],"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"duration":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"height":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"media_type":{"default":"","type":"string"},"size":{"type":"string"},"url":{"default":"","type":"string"},"width":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}},"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"currency":{"default":"","type":"string"},"estimated_quantity":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"license_duration_months":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"metering":{"anyOf":[{"enum":["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"model":{"anyOf":[{"enum":["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"rate":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"unit":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"required":["model"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const func2 = Object.prototype.hasOwnProperty;const pattern5 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const pattern7 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern8 = new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$", "u");const schema40 = {"additionalProperties":false,"properties":{"license":{"$ref":"#/$defs/fora.v1.License"},"obligations":{"items":{"$ref":"#/$defs/fora.v1.Obligation"},"maxItems":64,"type":"array"},"part_label":{"type":"string"},"pricing":{"$ref":"#/$defs/fora.v1.Pricing"},"quotas":{"items":{"$ref":"#/$defs/fora.v1.Quota"},"maxItems":64,"type":"array"},"restrictions":{"items":{"$ref":"#/$defs/fora.v1.Restriction"},"maxItems":8,"type":"array"},"scopes":{"items":{"type":"string"},"maxItems":64,"type":"array"},"semantics":{"anyOf":[{"enum":["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["semantics"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"id":{"type":"string"},"immutable":{"type":"boolean"},"name":{"type":"string"},"uri":{"type":"string"},"uri_digest":{"pattern":"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$","type":"string"}},"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"limit":{"anyOf":[{"minimum":1,"type":"integer"},{"pattern":"^0*[1-9][0-9]*$","type":"string"}]},"metric":{"maxLength":64,"pattern":"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$","type":"string"},"window":{"anyOf":[{"enum":["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["limit","metric","window"],"type":"object"};const schema46 = {"additionalProperties":false,"properties":{"advisory":{"default":false,"type":"boolean"},"kind":{"anyOf":[{"enum":["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":4,"minimum":1,"type":"integer"}]},"permitted":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"},"prohibited":{"items":{"maxLength":64,"minLength":1,"pattern":"^[A-Za-z0-9._:*-]+$","type":"string"},"maxItems":64,"type":"array"}},"required":["kind"],"type":"object"};const pattern10 = new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$", "u");const pattern15 = new RegExp("^0*[1-9][0-9]*$", "u");const pattern16 = new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$", "u");const pattern17 = new RegExp("^[A-Za-z0-9._:*-]+$", "u");const schema42 = {"additionalProperties":false,"properties":{"detail":{"type":"string"},"kind":{"anyOf":[{"enum":["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"scope_license":{"$ref":"#/$defs/fora.v1.License"},"trigger":{"anyOf":[{"enum":["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["kind","trigger"],"type":"object"};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.kind === undefined) && (missing0 = "kind")) || ((data.trigger === undefined) && (missing0 = "trigger"))){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((((key0 === "detail") || (key0 === "kind")) || (key0 === "scope_license")) || (key0 === "trigger"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.detail !== undefined){const _errs2 = errors;if(typeof data.detail !== "string"){validate24.errors = [{instancePath:instancePath+"/detail",schemaPath:"#/properties/detail/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.kind !== undefined){let data1 = data.kind;const _errs4 = errors;const _errs5 = errors;let valid1 = false;const _errs6 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!((((((data1 === "OBLIGATION_KIND_ATTRIBUTION") || (data1 === "OBLIGATION_KIND_CONTRIBUTION")) || (data1 === "OBLIGATION_KIND_SHARE_ALIKE")) || (data1 === "OBLIGATION_KIND_NETWORK_COPYLEFT")) || (data1 === "OBLIGATION_KIND_NOTICE")) || (data1 === "OBLIGATION_KIND_OTHER"))){const err1 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema42.properties.kind.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs6 === errors;valid1 = valid1 || _valid0;const _errs8 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs8){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 2147483647 || isNaN(data1)){const err3 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < -2147483648 || isNaN(data1)){const err4 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs8 === errors;valid1 = valid1 || _valid0;if(!valid1){const err5 = {instancePath:instancePath+"/kind",schemaPath:"#/properties/kind/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate24.errors = vErrors;return false;}else {errors = _errs5;if(vErrors !== null){if(_errs5){vErrors.length = _errs5;}else {vErrors = null;}}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.scope_license !== undefined){let data2 = data.scope_license;const _errs10 = errors;const _errs11 = errors;if(errors === _errs11){if(data2 && typeof data2 == "object" && !Array.isArray(data2)){const _errs13 = errors;for(const key1 in data2){if(!(((((key1 === "id") || (key1 === "immutable")) || (key1 === "name")) || (key1 === "uri")) || (key1 === "uri_digest"))){validate24.errors = [{instancePath:instancePath+"/scope_license",schemaPath:"#/$defs/fora.v1.License/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs13 === errors){if(data2.id !== undefined){const _errs14 = errors;if(typeof data2.id !== "string"){validate24.errors = [{instancePath:instancePath+"/scope_license/id",schemaPath:"#/$defs/fora.v1.License/properties/id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs14 === errors;}else {var valid3 = true;}if(valid3){if(data2.immutable !== undefined){const _errs16 = errors;if(typeof data2.immutable !== "boolean"){validate24.errors = [{instancePath:instancePath+"/scope_license/immutable",schemaPath:"#/$defs/fora.v1.License/properties/immutable/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid3 = _errs16 === errors;}else {var valid3 = true;}if(valid3){if(data2.name !== undefined){const _errs18 = errors;if(typeof data2.name !== "string"){validate24.errors = [{instancePath:instancePath+"/scope_license/name",schemaPath:"#/$defs/fora.v1.License/properties/name/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs18 === errors;}else {var valid3 = true;}if(valid3){if(data2.uri !== undefined){const _errs20 = errors;if(typeof data2.uri !== "string"){validate24.errors = [{instancePath:instancePath+"/scope_license/uri",schemaPath:"#/$defs/fora.v1.License/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs20 === errors;}else {var valid3 = true;}if(valid3){if(data2.uri_digest !== undefined){let data7 = data2.uri_digest;const _errs22 = errors;if(errors === _errs22){if(typeof data7 === "string"){if(!pattern10.test(data7)){validate24.errors = [{instancePath:instancePath+"/scope_license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/pattern",keyword:"pattern",params:{pattern: "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"},message:"must match pattern \""+"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"+"\""}];return false;}}else {validate24.errors = [{instancePath:instancePath+"/scope_license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs22 === errors;}else {var valid3 = true;}}}}}}}else {validate24.errors = [{instancePath:instancePath+"/scope_license",schemaPath:"#/$defs/fora.v1.License/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.trigger !== undefined){let data8 = data.trigger;const _errs24 = errors;const _errs25 = errors;let valid4 = false;const _errs26 = errors;if(typeof data8 !== "string"){const err6 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!((((data8 === "OBLIGATION_TRIGGER_ON_USE") || (data8 === "OBLIGATION_TRIGGER_ON_DISTRIBUTION")) || (data8 === "OBLIGATION_TRIGGER_ON_NETWORK_SERVICE")) || (data8 === "OBLIGATION_TRIGGER_ON_DERIVATIVE"))){const err7 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema42.properties.trigger.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;const _errs28 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err8 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs28){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){const err9 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data8 < -2147483648 || isNaN(data8)){const err10 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs28 === errors;valid4 = valid4 || _valid1;if(!valid4){const err11 = {instancePath:instancePath+"/trigger",schemaPath:"#/properties/trigger/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate24.errors = vErrors;return false;}else {errors = _errs25;if(vErrors !== null){if(_errs25){vErrors.length = _errs25;}else {vErrors = null;}}}var valid0 = _errs24 === errors;}else {var valid0 = true;}}}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.semantics === undefined) && (missing0 = "semantics")){validate23.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((((((((key0 === "license") || (key0 === "obligations")) || (key0 === "part_label")) || (key0 === "pricing")) || (key0 === "quotas")) || (key0 === "restrictions")) || (key0 === "scopes")) || (key0 === "semantics"))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.license !== undefined){let data0 = data.license;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){const _errs5 = errors;for(const key1 in data0){if(!(((((key1 === "id") || (key1 === "immutable")) || (key1 === "name")) || (key1 === "uri")) || (key1 === "uri_digest"))){validate23.errors = [{instancePath:instancePath+"/license",schemaPath:"#/$defs/fora.v1.License/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.id !== undefined){const _errs6 = errors;if(typeof data0.id !== "string"){validate23.errors = [{instancePath:instancePath+"/license/id",schemaPath:"#/$defs/fora.v1.License/properties/id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.immutable !== undefined){const _errs8 = errors;if(typeof data0.immutable !== "boolean"){validate23.errors = [{instancePath:instancePath+"/license/immutable",schemaPath:"#/$defs/fora.v1.License/properties/immutable/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data0.name !== undefined){const _errs10 = errors;if(typeof data0.name !== "string"){validate23.errors = [{instancePath:instancePath+"/license/name",schemaPath:"#/$defs/fora.v1.License/properties/name/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data0.uri !== undefined){const _errs12 = errors;if(typeof data0.uri !== "string"){validate23.errors = [{instancePath:instancePath+"/license/uri",schemaPath:"#/$defs/fora.v1.License/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs12 === errors;}else {var valid2 = true;}if(valid2){if(data0.uri_digest !== undefined){let data5 = data0.uri_digest;const _errs14 = errors;if(errors === _errs14){if(typeof data5 === "string"){if(!pattern10.test(data5)){validate23.errors = [{instancePath:instancePath+"/license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/pattern",keyword:"pattern",params:{pattern: "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"},message:"must match pattern \""+"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"+"\""}];return false;}}else {validate23.errors = [{instancePath:instancePath+"/license/uri_digest",schemaPath:"#/$defs/fora.v1.License/properties/uri_digest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs14 === errors;}else {var valid2 = true;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/license",schemaPath:"#/$defs/fora.v1.License/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.obligations !== undefined){let data6 = data.obligations;const _errs16 = errors;if(errors === _errs16){if(Array.isArray(data6)){if(data6.length > 64){validate23.errors = [{instancePath:instancePath+"/obligations",schemaPath:"#/properties/obligations/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid3 = true;const len0 = data6.length;for(let i0=0; i0<len0; i0++){const _errs18 = errors;if(!(validate24(data6[i0], {instancePath:instancePath+"/obligations/" + i0,parentData:data6,parentDataProperty:i0,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid3 = _errs18 === errors;if(!valid3){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/obligations",schemaPath:"#/properties/obligations/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.part_label !== undefined){const _errs19 = errors;if(typeof data.part_label !== "string"){validate23.errors = [{instancePath:instancePath+"/part_label",schemaPath:"#/properties/part_label/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs19 === errors;}else {var valid0 = true;}if(valid0){if(data.pricing !== undefined){let data9 = data.pricing;const _errs21 = errors;const _errs22 = errors;if(errors === _errs22){if(data9 && typeof data9 == "object" && !Array.isArray(data9)){let missing1;if((data9.model === undefined) && (missing1 = "model")){validate23.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs24 = errors;for(const key2 in data9){if(!((((((((key2 === "currency") || (key2 === "estimated_quantity")) || (key2 === "license_duration_months")) || (key2 === "metering")) || (key2 === "model")) || (key2 === "rate")) || (key2 === "unit")) || (key2 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs24 === errors){if(data9.currency !== undefined){const _errs25 = errors;if(typeof data9.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/pricing/currency",schemaPath:"#/$defs/fora.v1.Pricing/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs25 === errors;}else {var valid5 = true;}if(valid5){if(data9.estimated_quantity !== undefined){let data11 = data9.estimated_quantity;const _errs27 = errors;if(!(((typeof data11 == "number") && (!(data11 % 1) && !isNaN(data11))) && (isFinite(data11)))){validate23.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs27){if((typeof data11 == "number") && (isFinite(data11))){if(data11 > 2147483647 || isNaN(data11)){validate23.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data11 < -2147483648 || isNaN(data11)){validate23.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs27 === errors;}else {var valid5 = true;}if(valid5){if(data9.license_duration_months !== undefined){let data12 = data9.license_duration_months;const _errs29 = errors;if(!(((typeof data12 == "number") && (!(data12 % 1) && !isNaN(data12))) && (isFinite(data12)))){validate23.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs29){if((typeof data12 == "number") && (isFinite(data12))){if(data12 > 2147483647 || isNaN(data12)){validate23.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data12 < -2147483648 || isNaN(data12)){validate23.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs29 === errors;}else {var valid5 = true;}if(valid5){if(data9.metering !== undefined){let data13 = data9.metering;const _errs31 = errors;const _errs32 = errors;let valid6 = false;const _errs33 = errors;if(typeof data13 !== "string"){const err0 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((data13 === "PRICING_METERING_ONLINE") || (data13 === "PRICING_METERING_NONE")) || (data13 === "PRICING_METERING_OFFLINE_SELF_REPORTED"))){const err1 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.metering.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs33 === errors;valid6 = valid6 || _valid0;const _errs35 = errors;if(!(((typeof data13 == "number") && (!(data13 % 1) && !isNaN(data13))) && (isFinite(data13)))){const err2 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs35){if((typeof data13 == "number") && (isFinite(data13))){if(data13 > 2147483647 || isNaN(data13)){const err3 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data13 < -2147483648 || isNaN(data13)){const err4 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs35 === errors;valid6 = valid6 || _valid0;if(!valid6){const err5 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs32;if(vErrors !== null){if(_errs32){vErrors.length = _errs32;}else {vErrors = null;}}}var valid5 = _errs31 === errors;}else {var valid5 = true;}if(valid5){if(data9.model !== undefined){let data14 = data9.model;const _errs37 = errors;const _errs38 = errors;let valid7 = false;const _errs39 = errors;if(typeof data14 !== "string"){const err6 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((data14 === "PRICING_MODEL_FREE") || (data14 === "PRICING_MODEL_PER_UNIT")) || (data14 === "PRICING_MODEL_FLAT"))){const err7 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.model.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs39 === errors;valid7 = valid7 || _valid1;const _errs41 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err8 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs41){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 2147483647 || isNaN(data14)){const err9 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data14 < -2147483648 || isNaN(data14)){const err10 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs41 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs38;if(vErrors !== null){if(_errs38){vErrors.length = _errs38;}else {vErrors = null;}}}var valid5 = _errs37 === errors;}else {var valid5 = true;}if(valid5){if(data9.rate !== undefined){let data15 = data9.rate;const _errs43 = errors;if(errors === _errs43){if(typeof data15 === "string"){if(func1(data15) > 32){validate23.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern7.test(data15)){validate23.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid5 = _errs43 === errors;}else {var valid5 = true;}if(valid5){if(data9.unit !== undefined){let data16 = data9.unit;const _errs45 = errors;if(errors === _errs45){if(typeof data16 === "string"){if(func1(data16) > 64){validate23.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(!pattern8.test(data16)){validate23.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/pattern",keyword:"pattern",params:{pattern: "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"},message:"must match pattern \""+"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid5 = _errs45 === errors;}else {var valid5 = true;}if(valid5){if(data9.unit_cost !== undefined){let data17 = data9.unit_cost;const _errs47 = errors;if(errors === _errs47){if(typeof data17 === "string"){if(func1(data17) > 32){validate23.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern7.test(data17)){validate23.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid5 = _errs47 === errors;}else {var valid5 = true;}}}}}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs21 === errors;}else {var valid0 = true;}if(valid0){if(data.quotas !== undefined){let data18 = data.quotas;const _errs49 = errors;if(errors === _errs49){if(Array.isArray(data18)){if(data18.length > 64){validate23.errors = [{instancePath:instancePath+"/quotas",schemaPath:"#/properties/quotas/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid8 = true;const len1 = data18.length;for(let i1=0; i1<len1; i1++){let data19 = data18[i1];const _errs51 = errors;const _errs52 = errors;if(errors === _errs52){if(data19 && typeof data19 == "object" && !Array.isArray(data19)){let missing2;if((((data19.limit === undefined) && (missing2 = "limit")) || ((data19.metric === undefined) && (missing2 = "metric"))) || ((data19.window === undefined) && (missing2 = "window"))){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1,schemaPath:"#/$defs/fora.v1.Quota/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs54 = errors;for(const key3 in data19){if(!(((key3 === "limit") || (key3 === "metric")) || (key3 === "window"))){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1,schemaPath:"#/$defs/fora.v1.Quota/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs54 === errors){if(data19.limit !== undefined){let data20 = data19.limit;const _errs55 = errors;const _errs56 = errors;let valid11 = false;const _errs57 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err12 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/0/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(errors === _errs57){if((typeof data20 == "number") && (isFinite(data20))){if(data20 < 1 || isNaN(data20)){const err13 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/0/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}}}var _valid2 = _errs57 === errors;valid11 = valid11 || _valid2;const _errs59 = errors;if(errors === _errs59){if(typeof data20 === "string"){if(!pattern15.test(data20)){const err14 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/1/pattern",keyword:"pattern",params:{pattern: "^0*[1-9][0-9]*$"},message:"must match pattern \""+"^0*[1-9][0-9]*$"+"\""};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}}else {const err15 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}}var _valid2 = _errs59 === errors;valid11 = valid11 || _valid2;if(!valid11){const err16 = {instancePath:instancePath+"/quotas/" + i1+"/limit",schemaPath:"#/$defs/fora.v1.Quota/properties/limit/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs56;if(vErrors !== null){if(_errs56){vErrors.length = _errs56;}else {vErrors = null;}}}var valid10 = _errs55 === errors;}else {var valid10 = true;}if(valid10){if(data19.metric !== undefined){let data21 = data19.metric;const _errs61 = errors;if(errors === _errs61){if(typeof data21 === "string"){if(func1(data21) > 64){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1+"/metric",schemaPath:"#/$defs/fora.v1.Quota/properties/metric/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(!pattern16.test(data21)){validate23.errors = [{instancePath:instancePath+"/quotas/" + i1+"/metric",schemaPath:"#/$defs/fora.v1.Quota/properties/metric/pattern",keyword:"pattern",params:{pattern: "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$"},message:"must match pattern \""+"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/quotas/" + i1+"/metric",schemaPath:"#/$defs/fora.v1.Quota/properties/metric/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid10 = _errs61 === errors;}else {var valid10 = true;}if(valid10){if(data19.window !== undefined){let data22 = data19.window;const _errs63 = errors;const _errs64 = errors;let valid12 = false;const _errs65 = errors;if(typeof data22 !== "string"){const err17 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}if(!((((data22 === "QUOTA_WINDOW_HOURLY") || (data22 === "QUOTA_WINDOW_DAILY")) || (data22 === "QUOTA_WINDOW_MONTHLY")) || (data22 === "QUOTA_WINDOW_TOTAL"))){const err18 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.window.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var _valid3 = _errs65 === errors;valid12 = valid12 || _valid3;const _errs67 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err19 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;}if(errors === _errs67){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err20 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err21 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}}}}var _valid3 = _errs67 === errors;valid12 = valid12 || _valid3;if(!valid12){const err22 = {instancePath:instancePath+"/quotas/" + i1+"/window",schemaPath:"#/$defs/fora.v1.Quota/properties/window/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs64;if(vErrors !== null){if(_errs64){vErrors.length = _errs64;}else {vErrors = null;}}}var valid10 = _errs63 === errors;}else {var valid10 = true;}}}}}}else {validate23.errors = [{instancePath:instancePath+"/quotas/" + i1,schemaPath:"#/$defs/fora.v1.Quota/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid8 = _errs51 === errors;if(!valid8){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/quotas",schemaPath:"#/properties/quotas/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs49 === errors;}else {var valid0 = true;}if(valid0){if(data.restrictions !== undefined){let data23 = data.restrictions;const _errs69 = errors;if(errors === _errs69){if(Array.isArray(data23)){if(data23.length > 8){validate23.errors = [{instancePath:instancePath+"/restrictions",schemaPath:"#/properties/restrictions/maxItems",keyword:"maxItems",params:{limit: 8},message:"must NOT have more than 8 items"}];return false;}else {var valid13 = true;const len2 = data23.length;for(let i2=0; i2<len2; i2++){let data24 = data23[i2];const _errs71 = errors;const _errs72 = errors;if(errors === _errs72){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){let missing3;if((data24.kind === undefined) && (missing3 = "kind")){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2,schemaPath:"#/$defs/fora.v1.Restriction/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs74 = errors;for(const key4 in data24){if(!((((key4 === "advisory") || (key4 === "kind")) || (key4 === "permitted")) || (key4 === "prohibited"))){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2,schemaPath:"#/$defs/fora.v1.Restriction/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key4},message:"must NOT have additional properties"}];return false;break;}}if(_errs74 === errors){if(data24.advisory !== undefined){const _errs75 = errors;if(typeof data24.advisory !== "boolean"){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/advisory",schemaPath:"#/$defs/fora.v1.Restriction/properties/advisory/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid15 = _errs75 === errors;}else {var valid15 = true;}if(valid15){if(data24.kind !== undefined){let data26 = data24.kind;const _errs77 = errors;const _errs78 = errors;let valid16 = false;const _errs79 = errors;if(typeof data26 !== "string"){const err23 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}if(!((((data26 === "RESTRICTION_KIND_FUNCTION") || (data26 === "RESTRICTION_KIND_GEOGRAPHY")) || (data26 === "RESTRICTION_KIND_USER_TYPE")) || (data26 === "RESTRICTION_KIND_OTHER"))){const err24 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema46.properties.kind.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}var _valid4 = _errs79 === errors;valid16 = valid16 || _valid4;const _errs81 = errors;if(!(((typeof data26 == "number") && (!(data26 % 1) && !isNaN(data26))) && (isFinite(data26)))){const err25 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;}if(errors === _errs81){if((typeof data26 == "number") && (isFinite(data26))){if(data26 > 4 || isNaN(data26)){const err26 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 4},message:"must be <= 4"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}else {if(data26 < 1 || isNaN(data26)){const err27 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}}}}var _valid4 = _errs81 === errors;valid16 = valid16 || _valid4;if(!valid16){const err28 = {instancePath:instancePath+"/restrictions/" + i2+"/kind",schemaPath:"#/$defs/fora.v1.Restriction/properties/kind/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs78;if(vErrors !== null){if(_errs78){vErrors.length = _errs78;}else {vErrors = null;}}}var valid15 = _errs77 === errors;}else {var valid15 = true;}if(valid15){if(data24.permitted !== undefined){let data27 = data24.permitted;const _errs83 = errors;if(errors === _errs83){if(Array.isArray(data27)){if(data27.length > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted",schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid17 = true;const len3 = data27.length;for(let i3=0; i3<len3; i3++){let data28 = data27[i3];const _errs85 = errors;if(errors === _errs85){if(typeof data28 === "string"){if(func1(data28) > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func1(data28) < 1){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}else {if(!pattern17.test(data28)){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9._:*-]+$"},message:"must match pattern \""+"^[A-Za-z0-9._:*-]+$"+"\""}];return false;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted/" + i3,schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid17 = _errs85 === errors;if(!valid17){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/permitted",schemaPath:"#/$defs/fora.v1.Restriction/properties/permitted/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid15 = _errs83 === errors;}else {var valid15 = true;}if(valid15){if(data24.prohibited !== undefined){let data29 = data24.prohibited;const _errs87 = errors;if(errors === _errs87){if(Array.isArray(data29)){if(data29.length > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited",schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid18 = true;const len4 = data29.length;for(let i4=0; i4<len4; i4++){let data30 = data29[i4];const _errs89 = errors;if(errors === _errs89){if(typeof data30 === "string"){if(func1(data30) > 64){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func1(data30) < 1){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}else {if(!pattern17.test(data30)){validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9._:*-]+$"},message:"must match pattern \""+"^[A-Za-z0-9._:*-]+$"+"\""}];return false;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited/" + i4,schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid18 = _errs89 === errors;if(!valid18){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2+"/prohibited",schemaPath:"#/$defs/fora.v1.Restriction/properties/prohibited/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid15 = _errs87 === errors;}else {var valid15 = true;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions/" + i2,schemaPath:"#/$defs/fora.v1.Restriction/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid13 = _errs71 === errors;if(!valid13){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/restrictions",schemaPath:"#/properties/restrictions/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs69 === errors;}else {var valid0 = true;}if(valid0){if(data.scopes !== undefined){let data31 = data.scopes;const _errs91 = errors;if(errors === _errs91){if(Array.isArray(data31)){if(data31.length > 64){validate23.errors = [{instancePath:instancePath+"/scopes",schemaPath:"#/properties/scopes/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid19 = true;const len5 = data31.length;for(let i5=0; i5<len5; i5++){const _errs93 = errors;if(typeof data31[i5] !== "string"){validate23.errors = [{instancePath:instancePath+"/scopes/" + i5,schemaPath:"#/properties/scopes/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid19 = _errs93 === errors;if(!valid19){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/scopes",schemaPath:"#/properties/scopes/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs91 === errors;}else {var valid0 = true;}if(valid0){if(data.semantics !== undefined){let data33 = data.semantics;const _errs95 = errors;const _errs96 = errors;let valid20 = false;const _errs97 = errors;if(typeof data33 !== "string"){const err29 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}if(!((data33 === "TERM_SEMANTICS_ENUMERATED") || (data33 === "TERM_SEMANTICS_REFERENCE_ONLY"))){const err30 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.semantics.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}var _valid5 = _errs97 === errors;valid20 = valid20 || _valid5;const _errs99 = errors;if(!(((typeof data33 == "number") && (!(data33 % 1) && !isNaN(data33))) && (isFinite(data33)))){const err31 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;}if(errors === _errs99){if((typeof data33 == "number") && (isFinite(data33))){if(data33 > 2147483647 || isNaN(data33)){const err32 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}else {if(data33 < -2147483648 || isNaN(data33)){const err33 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}}}}var _valid5 = _errs99 === errors;valid20 = valid20 || _valid5;if(!valid20){const err34 = {instancePath:instancePath+"/semantics",schemaPath:"#/properties/semantics/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs96;if(vErrors !== null){if(_errs96){vErrors.length = _errs96;}else {vErrors = null;}}}var valid0 = _errs95 === errors;}else {var valid0 = true;}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate22(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate22.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.exchange === undefined) && (missing0 = "exchange")){validate22.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(func2.call(schema33.properties, key0))){validate22.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.attestations !== undefined){let data0 = data.attestations;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!((((((key1 === "attested_at") || (key1 === "claims")) || (key1 === "keyid")) || (key1 === "signature")) || (key1 === "uri")) || (key1 === "verifier"))){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0,schemaPath:"#/$defs/fora.v1.ResourceAttestation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.attested_at !== undefined){const _errs8 = errors;if(errors === _errs8){if(errors === _errs8){if(!(typeof data1.attested_at === "string")){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/attested_at",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/attested_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.claims !== undefined){let data3 = data1.claims;const _errs10 = errors;if(!(data3 && typeof data3 == "object" && !Array.isArray(data3))){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/claims",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/claims/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid3 = _errs10 === errors;}else {var valid3 = true;}if(valid3){if(data1.keyid !== undefined){const _errs12 = errors;if(typeof data1.keyid !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/keyid",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/keyid/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs12 === errors;}else {var valid3 = true;}if(valid3){if(data1.signature !== undefined){const _errs14 = errors;if(typeof data1.signature !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/signature",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/signature/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs14 === errors;}else {var valid3 = true;}if(valid3){if(data1.uri !== undefined){const _errs16 = errors;if(typeof data1.uri !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/uri",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs16 === errors;}else {var valid3 = true;}if(valid3){if(data1.verifier !== undefined){const _errs18 = errors;if(typeof data1.verifier !== "string"){validate22.errors = [{instancePath:instancePath+"/attestations/" + i0+"/verifier",schemaPath:"#/$defs/fora.v1.ResourceAttestation/properties/verifier/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs18 === errors;}else {var valid3 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/attestations/" + i0,schemaPath:"#/$defs/fora.v1.ResourceAttestation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}else {validate22.errors = [{instancePath:instancePath+"/attestations",schemaPath:"#/properties/attestations/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.data_as_of !== undefined){const _errs20 = errors;if(errors === _errs20){if(errors === _errs20){if(!(typeof data.data_as_of === "string")){validate22.errors = [{instancePath:instancePath+"/data_as_of",schemaPath:"#/properties/data_as_of/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs20 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data9 = data.delivery_method;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(errors === _errs24){if(typeof data9 === "string"){if(!pattern5.test(data9)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs24 === errors;valid4 = valid4 || _valid0;const _errs26 = errors;if(typeof data9 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data9 === "DELIVERY_METHOD_DIRECT") || (data9 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data9 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema33.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs26 === errors;valid4 = valid4 || _valid0;const _errs28 = errors;if(!(((typeof data9 == "number") && (!(data9 % 1) && !isNaN(data9))) && (isFinite(data9)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs28){if((typeof data9 == "number") && (isFinite(data9))){if(data9 > 2147483647 || isNaN(data9)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data9 < -2147483648 || isNaN(data9)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs28 === errors;valid4 = valid4 || _valid0;if(!valid4){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.exchange !== undefined){let data10 = data.exchange;const _errs30 = errors;if(errors === _errs30){if(typeof data10 === "string"){if(func1(data10) > 260){validate22.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data10)){validate22.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs32 = errors;if(errors === _errs32){if(errors === _errs32){if(!(typeof data.expires_at === "string")){validate22.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data12 = data.ext;const _errs34 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate22.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs34 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data13 = data.ext_critical;const _errs36 = errors;if(errors === _errs36){if(Array.isArray(data13)){var valid5 = true;const len1 = data13.length;for(let i1=0; i1<len1; i1++){const _errs38 = errors;if(typeof data13[i1] !== "string"){validate22.errors = [{instancePath:instancePath+"/ext_critical/" + i1,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs38 === errors;if(!valid5){break;}}}else {validate22.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs36 === errors;}else {var valid0 = true;}if(valid0){if(data.iab_categories !== undefined){let data15 = data.iab_categories;const _errs40 = errors;if(errors === _errs40){if(Array.isArray(data15)){var valid6 = true;const len2 = data15.length;for(let i2=0; i2<len2; i2++){const _errs42 = errors;if(typeof data15[i2] !== "string"){validate22.errors = [{instancePath:instancePath+"/iab_categories/" + i2,schemaPath:"#/properties/iab_categories/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs42 === errors;if(!valid6){break;}}}else {validate22.errors = [{instancePath:instancePath+"/iab_categories",schemaPath:"#/properties/iab_categories/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.identity !== undefined){let data17 = data.identity;const _errs44 = errors;const _errs45 = errors;if(errors === _errs45){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing1;if((data17.resource_mutability === undefined) && (missing1 = "resource_mutability")){validate22.errors = [{instancePath:instancePath+"/identity",schemaPath:"#/$defs/fora.v1.ResourceIdentity/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs47 = errors;for(const key2 in data17){if(!(func2.call(schema35.properties, key2))){validate22.errors = [{instancePath:instancePath+"/identity",schemaPath:"#/$defs/fora.v1.ResourceIdentity/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs47 === errors){if(data17.c2pa_manifest !== undefined){const _errs48 = errors;if(typeof data17.c2pa_manifest !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/c2pa_manifest",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_manifest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs48 === errors;}else {var valid8 = true;}if(valid8){if(data17.c2pa_status !== undefined){let data19 = data17.c2pa_status;const _errs50 = errors;const _errs51 = errors;let valid9 = false;const _errs52 = errors;if(typeof data19 !== "string"){const err8 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((data19 === "C2PA_STATUS_UNSPECIFIED") || (data19 === "C2PA_STATUS_TRUSTED")) || (data19 === "C2PA_STATUS_VALID")) || (data19 === "C2PA_STATUS_INVALID")) || (data19 === "C2PA_STATUS_ABSENT"))){const err9 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema35.properties.c2pa_status.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs52 === errors;valid9 = valid9 || _valid1;const _errs54 = errors;if(!(((typeof data19 == "number") && (!(data19 % 1) && !isNaN(data19))) && (isFinite(data19)))){const err10 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs54){if((typeof data19 == "number") && (isFinite(data19))){if(data19 > 2147483647 || isNaN(data19)){const err11 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data19 < -2147483648 || isNaN(data19)){const err12 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs54 === errors;valid9 = valid9 || _valid1;if(!valid9){const err13 = {instancePath:instancePath+"/identity/c2pa_status",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/c2pa_status/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs51;if(vErrors !== null){if(_errs51){vErrors.length = _errs51;}else {vErrors = null;}}}var valid8 = _errs50 === errors;}else {var valid8 = true;}if(valid8){if(data17.canonical_url !== undefined){const _errs56 = errors;if(typeof data17.canonical_url !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/canonical_url",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/canonical_url/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs56 === errors;}else {var valid8 = true;}if(valid8){if(data17.content_hash !== undefined){const _errs58 = errors;if(typeof data17.content_hash !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/content_hash",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/content_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs58 === errors;}else {var valid8 = true;}if(valid8){if(data17.doi !== undefined){const _errs60 = errors;if(typeof data17.doi !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/doi",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/doi/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs60 === errors;}else {var valid8 = true;}if(valid8){if(data17.ext !== undefined){let data23 = data17.ext;const _errs62 = errors;if(!(data23 && typeof data23 == "object" && !Array.isArray(data23))){validate22.errors = [{instancePath:instancePath+"/identity/ext",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid8 = _errs62 === errors;}else {var valid8 = true;}if(valid8){if(data17.ext_critical !== undefined){let data24 = data17.ext_critical;const _errs64 = errors;if(errors === _errs64){if(Array.isArray(data24)){var valid10 = true;const len3 = data24.length;for(let i3=0; i3<len3; i3++){const _errs66 = errors;if(typeof data24[i3] !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/ext_critical/" + i3,schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid10 = _errs66 === errors;if(!valid10){break;}}}else {validate22.errors = [{instancePath:instancePath+"/identity/ext_critical",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid8 = _errs64 === errors;}else {var valid8 = true;}if(valid8){if(data17.hash_method !== undefined){const _errs68 = errors;if(typeof data17.hash_method !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/hash_method",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/hash_method/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs68 === errors;}else {var valid8 = true;}if(valid8){if(data17.iptc_guid !== undefined){const _errs70 = errors;if(typeof data17.iptc_guid !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/iptc_guid",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/iptc_guid/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs70 === errors;}else {var valid8 = true;}if(valid8){if(data17.isni !== undefined){const _errs72 = errors;if(typeof data17.isni !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/isni",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/isni/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs72 === errors;}else {var valid8 = true;}if(valid8){if(data17.resource_mutability !== undefined){let data29 = data17.resource_mutability;const _errs74 = errors;const _errs75 = errors;let valid11 = false;const _errs76 = errors;if(typeof data29 !== "string"){const err14 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((data29 === "RESOURCE_MUTABILITY_STATIC") || (data29 === "RESOURCE_MUTABILITY_DYNAMIC")) || (data29 === "RESOURCE_MUTABILITY_LIVE"))){const err15 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema35.properties.resource_mutability.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs76 === errors;valid11 = valid11 || _valid2;const _errs78 = errors;if(!(((typeof data29 == "number") && (!(data29 % 1) && !isNaN(data29))) && (isFinite(data29)))){const err16 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs78){if((typeof data29 == "number") && (isFinite(data29))){if(data29 > 2147483647 || isNaN(data29)){const err17 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data29 < -2147483648 || isNaN(data29)){const err18 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs78 === errors;valid11 = valid11 || _valid2;if(!valid11){const err19 = {instancePath:instancePath+"/identity/resource_mutability",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/resource_mutability/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs75;if(vErrors !== null){if(_errs75){vErrors.length = _errs75;}else {vErrors = null;}}}var valid8 = _errs74 === errors;}else {var valid8 = true;}if(valid8){if(data17.soft_binding !== undefined){const _errs80 = errors;if(typeof data17.soft_binding !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/soft_binding",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/soft_binding/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs80 === errors;}else {var valid8 = true;}if(valid8){if(data17.soft_binding_method !== undefined){const _errs82 = errors;if(typeof data17.soft_binding_method !== "string"){validate22.errors = [{instancePath:instancePath+"/identity/soft_binding_method",schemaPath:"#/$defs/fora.v1.ResourceIdentity/properties/soft_binding_method/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs82 === errors;}else {var valid8 = true;}}}}}}}}}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/identity",schemaPath:"#/$defs/fora.v1.ResourceIdentity/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs44 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs84 = errors;if(typeof data.offer_id !== "string"){validate22.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs84 === errors;}else {var valid0 = true;}if(valid0){if(data.previews !== undefined){let data33 = data.previews;const _errs86 = errors;if(errors === _errs86){if(Array.isArray(data33)){var valid12 = true;const len4 = data33.length;for(let i4=0; i4<len4; i4++){let data34 = data33[i4];const _errs88 = errors;const _errs89 = errors;if(errors === _errs89){if(data34 && typeof data34 == "object" && !Array.isArray(data34)){const _errs91 = errors;for(const key3 in data34){if(!((((((key3 === "duration") || (key3 === "height")) || (key3 === "media_type")) || (key3 === "size")) || (key3 === "url")) || (key3 === "width"))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4,schemaPath:"#/$defs/fora.v1.Preview/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs91 === errors){if(data34.duration !== undefined){let data35 = data34.duration;const _errs92 = errors;if(!(((typeof data35 == "number") && (!(data35 % 1) && !isNaN(data35))) && (isFinite(data35)))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/duration",schemaPath:"#/$defs/fora.v1.Preview/properties/duration/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs92){if((typeof data35 == "number") && (isFinite(data35))){if(data35 > 2147483647 || isNaN(data35)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/duration",schemaPath:"#/$defs/fora.v1.Preview/properties/duration/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data35 < -2147483648 || isNaN(data35)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/duration",schemaPath:"#/$defs/fora.v1.Preview/properties/duration/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid14 = _errs92 === errors;}else {var valid14 = true;}if(valid14){if(data34.height !== undefined){let data36 = data34.height;const _errs94 = errors;if(!(((typeof data36 == "number") && (!(data36 % 1) && !isNaN(data36))) && (isFinite(data36)))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/height",schemaPath:"#/$defs/fora.v1.Preview/properties/height/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs94){if((typeof data36 == "number") && (isFinite(data36))){if(data36 > 2147483647 || isNaN(data36)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/height",schemaPath:"#/$defs/fora.v1.Preview/properties/height/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data36 < -2147483648 || isNaN(data36)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/height",schemaPath:"#/$defs/fora.v1.Preview/properties/height/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid14 = _errs94 === errors;}else {var valid14 = true;}if(valid14){if(data34.media_type !== undefined){const _errs96 = errors;if(typeof data34.media_type !== "string"){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/media_type",schemaPath:"#/$defs/fora.v1.Preview/properties/media_type/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid14 = _errs96 === errors;}else {var valid14 = true;}if(valid14){if(data34.size !== undefined){const _errs98 = errors;if(typeof data34.size !== "string"){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/size",schemaPath:"#/$defs/fora.v1.Preview/properties/size/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid14 = _errs98 === errors;}else {var valid14 = true;}if(valid14){if(data34.url !== undefined){const _errs100 = errors;if(typeof data34.url !== "string"){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/url",schemaPath:"#/$defs/fora.v1.Preview/properties/url/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid14 = _errs100 === errors;}else {var valid14 = true;}if(valid14){if(data34.width !== undefined){let data40 = data34.width;const _errs102 = errors;if(!(((typeof data40 == "number") && (!(data40 % 1) && !isNaN(data40))) && (isFinite(data40)))){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/width",schemaPath:"#/$defs/fora.v1.Preview/properties/width/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs102){if((typeof data40 == "number") && (isFinite(data40))){if(data40 > 2147483647 || isNaN(data40)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/width",schemaPath:"#/$defs/fora.v1.Preview/properties/width/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data40 < -2147483648 || isNaN(data40)){validate22.errors = [{instancePath:instancePath+"/previews/" + i4+"/width",schemaPath:"#/$defs/fora.v1.Preview/properties/width/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid14 = _errs102 === errors;}else {var valid14 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/previews/" + i4,schemaPath:"#/$defs/fora.v1.Preview/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid12 = _errs88 === errors;if(!valid12){break;}}}else {validate22.errors = [{instancePath:instancePath+"/previews",schemaPath:"#/properties/previews/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs86 === errors;}else {var valid0 = true;}if(valid0){if(data.pricing !== undefined){let data41 = data.pricing;const _errs104 = errors;const _errs105 = errors;if(errors === _errs105){if(data41 && typeof data41 == "object" && !Array.isArray(data41)){let missing2;if((data41.model === undefined) && (missing2 = "model")){validate22.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs107 = errors;for(const key4 in data41){if(!((((((((key4 === "currency") || (key4 === "estimated_quantity")) || (key4 === "license_duration_months")) || (key4 === "metering")) || (key4 === "model")) || (key4 === "rate")) || (key4 === "unit")) || (key4 === "unit_cost"))){validate22.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key4},message:"must NOT have additional properties"}];return false;break;}}if(_errs107 === errors){if(data41.currency !== undefined){const _errs108 = errors;if(typeof data41.currency !== "string"){validate22.errors = [{instancePath:instancePath+"/pricing/currency",schemaPath:"#/$defs/fora.v1.Pricing/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid16 = _errs108 === errors;}else {var valid16 = true;}if(valid16){if(data41.estimated_quantity !== undefined){let data43 = data41.estimated_quantity;const _errs110 = errors;if(!(((typeof data43 == "number") && (!(data43 % 1) && !isNaN(data43))) && (isFinite(data43)))){validate22.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs110){if((typeof data43 == "number") && (isFinite(data43))){if(data43 > 2147483647 || isNaN(data43)){validate22.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data43 < -2147483648 || isNaN(data43)){validate22.errors = [{instancePath:instancePath+"/pricing/estimated_quantity",schemaPath:"#/$defs/fora.v1.Pricing/properties/estimated_quantity/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid16 = _errs110 === errors;}else {var valid16 = true;}if(valid16){if(data41.license_duration_months !== undefined){let data44 = data41.license_duration_months;const _errs112 = errors;if(!(((typeof data44 == "number") && (!(data44 % 1) && !isNaN(data44))) && (isFinite(data44)))){validate22.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs112){if((typeof data44 == "number") && (isFinite(data44))){if(data44 > 2147483647 || isNaN(data44)){validate22.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data44 < -2147483648 || isNaN(data44)){validate22.errors = [{instancePath:instancePath+"/pricing/license_duration_months",schemaPath:"#/$defs/fora.v1.Pricing/properties/license_duration_months/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid16 = _errs112 === errors;}else {var valid16 = true;}if(valid16){if(data41.metering !== undefined){let data45 = data41.metering;const _errs114 = errors;const _errs115 = errors;let valid17 = false;const _errs116 = errors;if(typeof data45 !== "string"){const err20 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data45 === "PRICING_METERING_ONLINE") || (data45 === "PRICING_METERING_NONE")) || (data45 === "PRICING_METERING_OFFLINE_SELF_REPORTED"))){const err21 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.metering.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs116 === errors;valid17 = valid17 || _valid3;const _errs118 = errors;if(!(((typeof data45 == "number") && (!(data45 % 1) && !isNaN(data45))) && (isFinite(data45)))){const err22 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs118){if((typeof data45 == "number") && (isFinite(data45))){if(data45 > 2147483647 || isNaN(data45)){const err23 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data45 < -2147483648 || isNaN(data45)){const err24 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs118 === errors;valid17 = valid17 || _valid3;if(!valid17){const err25 = {instancePath:instancePath+"/pricing/metering",schemaPath:"#/$defs/fora.v1.Pricing/properties/metering/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs115;if(vErrors !== null){if(_errs115){vErrors.length = _errs115;}else {vErrors = null;}}}var valid16 = _errs114 === errors;}else {var valid16 = true;}if(valid16){if(data41.model !== undefined){let data46 = data41.model;const _errs120 = errors;const _errs121 = errors;let valid18 = false;const _errs122 = errors;if(typeof data46 !== "string"){const err26 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!(((data46 === "PRICING_MODEL_FREE") || (data46 === "PRICING_MODEL_PER_UNIT")) || (data46 === "PRICING_MODEL_FLAT"))){const err27 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.model.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs122 === errors;valid18 = valid18 || _valid4;const _errs124 = errors;if(!(((typeof data46 == "number") && (!(data46 % 1) && !isNaN(data46))) && (isFinite(data46)))){const err28 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs124){if((typeof data46 == "number") && (isFinite(data46))){if(data46 > 2147483647 || isNaN(data46)){const err29 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data46 < -2147483648 || isNaN(data46)){const err30 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs124 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/pricing/model",schemaPath:"#/$defs/fora.v1.Pricing/properties/model/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate22.errors = vErrors;return false;}else {errors = _errs121;if(vErrors !== null){if(_errs121){vErrors.length = _errs121;}else {vErrors = null;}}}var valid16 = _errs120 === errors;}else {var valid16 = true;}if(valid16){if(data41.rate !== undefined){let data47 = data41.rate;const _errs126 = errors;if(errors === _errs126){if(typeof data47 === "string"){if(func1(data47) > 32){validate22.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern7.test(data47)){validate22.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/pricing/rate",schemaPath:"#/$defs/fora.v1.Pricing/properties/rate/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid16 = _errs126 === errors;}else {var valid16 = true;}if(valid16){if(data41.unit !== undefined){let data48 = data41.unit;const _errs128 = errors;if(errors === _errs128){if(typeof data48 === "string"){if(func1(data48) > 64){validate22.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(!pattern8.test(data48)){validate22.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/pattern",keyword:"pattern",params:{pattern: "^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"},message:"must match pattern \""+"^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/pricing/unit",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid16 = _errs128 === errors;}else {var valid16 = true;}if(valid16){if(data41.unit_cost !== undefined){let data49 = data41.unit_cost;const _errs130 = errors;if(errors === _errs130){if(typeof data49 === "string"){if(func1(data49) > 32){validate22.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern7.test(data49)){validate22.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/pricing/unit_cost",schemaPath:"#/$defs/fora.v1.Pricing/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid16 = _errs130 === errors;}else {var valid16 = true;}}}}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/pricing",schemaPath:"#/$defs/fora.v1.Pricing/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs104 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting !== undefined){let data50 = data.reporting;const _errs132 = errors;const _errs133 = errors;if(errors === _errs133){if(data50 && typeof data50 == "object" && !Array.isArray(data50)){const _errs135 = errors;for(const key5 in data50){if(!((((((key5 === "endpoint") || (key5 === "ext")) || (key5 === "ext_critical")) || (key5 === "required")) || (key5 === "required_fields")) || (key5 === "window"))){validate22.errors = [{instancePath:instancePath+"/reporting",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key5},message:"must NOT have additional properties"}];return false;break;}}if(_errs135 === errors){if(data50.endpoint !== undefined){const _errs136 = errors;if(typeof data50.endpoint !== "string"){validate22.errors = [{instancePath:instancePath+"/reporting/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs136 === errors;}else {var valid20 = true;}if(valid20){if(data50.ext !== undefined){let data52 = data50.ext;const _errs138 = errors;if(!(data52 && typeof data52 == "object" && !Array.isArray(data52))){validate22.errors = [{instancePath:instancePath+"/reporting/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid20 = _errs138 === errors;}else {var valid20 = true;}if(valid20){if(data50.ext_critical !== undefined){let data53 = data50.ext_critical;const _errs140 = errors;if(errors === _errs140){if(Array.isArray(data53)){var valid21 = true;const len5 = data53.length;for(let i5=0; i5<len5; i5++){const _errs142 = errors;if(typeof data53[i5] !== "string"){validate22.errors = [{instancePath:instancePath+"/reporting/ext_critical/" + i5,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid21 = _errs142 === errors;if(!valid21){break;}}}else {validate22.errors = [{instancePath:instancePath+"/reporting/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs140 === errors;}else {var valid20 = true;}if(valid20){if(data50.required !== undefined){const _errs144 = errors;if(typeof data50.required !== "boolean"){validate22.errors = [{instancePath:instancePath+"/reporting/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid20 = _errs144 === errors;}else {var valid20 = true;}if(valid20){if(data50.required_fields !== undefined){let data56 = data50.required_fields;const _errs146 = errors;if(errors === _errs146){if(Array.isArray(data56)){var valid22 = true;const len6 = data56.length;for(let i6=0; i6<len6; i6++){const _errs148 = errors;if(typeof data56[i6] !== "string"){validate22.errors = [{instancePath:instancePath+"/reporting/required_fields/" + i6,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid22 = _errs148 === errors;if(!valid22){break;}}}else {validate22.errors = [{instancePath:instancePath+"/reporting/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs146 === errors;}else {var valid20 = true;}if(valid20){if(data50.window !== undefined){const _errs150 = errors;if(errors === _errs150){if(errors === _errs150){if(!(typeof data50.window === "string")){validate22.errors = [{instancePath:instancePath+"/reporting/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid20 = _errs150 === errors;}else {var valid20 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/reporting",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs132 === errors;}else {var valid0 = true;}if(valid0){if(data.signature !== undefined){const _errs152 = errors;if(typeof data.signature !== "string"){validate22.errors = [{instancePath:instancePath+"/signature",schemaPath:"#/properties/signature/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs152 === errors;}else {var valid0 = true;}if(valid0){if(data.signature_algorithm !== undefined){const _errs154 = errors;if(typeof data.signature_algorithm !== "string"){validate22.errors = [{instancePath:instancePath+"/signature_algorithm",schemaPath:"#/properties/signature_algorithm/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs154 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs156 = errors;if(typeof data.subscription_id !== "string"){validate22.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs156 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data62 = data.subscription_quota;const _errs158 = errors;if(errors === _errs158){if(Array.isArray(data62)){var valid23 = true;const len7 = data62.length;for(let i7=0; i7<len7; i7++){let data63 = data62[i7];const _errs160 = errors;const _errs161 = errors;if(errors === _errs161){if(data63 && typeof data63 == "object" && !Array.isArray(data63)){const _errs163 = errors;for(const key6 in data63){if(!((((((key6 === "quota_limit") || (key6 === "quota_remaining")) || (key6 === "quota_used")) || (key6 === "resets_at")) || (key6 === "subscription_id")) || (key6 === "unit"))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs163 === errors){if(data63.quota_limit !== undefined){let data64 = data63.quota_limit;const _errs164 = errors;if(!(((typeof data64 == "number") && (!(data64 % 1) && !isNaN(data64))) && (isFinite(data64)))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs164){if((typeof data64 == "number") && (isFinite(data64))){if(data64 > 2147483647 || isNaN(data64)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data64 < -2147483648 || isNaN(data64)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid25 = _errs164 === errors;}else {var valid25 = true;}if(valid25){if(data63.quota_remaining !== undefined){let data65 = data63.quota_remaining;const _errs166 = errors;if(!(((typeof data65 == "number") && (!(data65 % 1) && !isNaN(data65))) && (isFinite(data65)))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs166){if((typeof data65 == "number") && (isFinite(data65))){if(data65 > 2147483647 || isNaN(data65)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data65 < -2147483648 || isNaN(data65)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid25 = _errs166 === errors;}else {var valid25 = true;}if(valid25){if(data63.quota_used !== undefined){let data66 = data63.quota_used;const _errs168 = errors;if(!(((typeof data66 == "number") && (!(data66 % 1) && !isNaN(data66))) && (isFinite(data66)))){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs168){if((typeof data66 == "number") && (isFinite(data66))){if(data66 > 2147483647 || isNaN(data66)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data66 < -2147483648 || isNaN(data66)){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid25 = _errs168 === errors;}else {var valid25 = true;}if(valid25){if(data63.resets_at !== undefined){const _errs170 = errors;if(errors === _errs170){if(errors === _errs170){if(!(typeof data63.resets_at === "string")){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid25 = _errs170 === errors;}else {var valid25 = true;}if(valid25){if(data63.subscription_id !== undefined){const _errs172 = errors;if(typeof data63.subscription_id !== "string"){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid25 = _errs172 === errors;}else {var valid25 = true;}if(valid25){if(data63.unit !== undefined){const _errs174 = errors;if(typeof data63.unit !== "string"){validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid25 = _errs174 === errors;}else {var valid25 = true;}}}}}}}}else {validate22.errors = [{instancePath:instancePath+"/subscription_quota/" + i7,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid23 = _errs160 === errors;if(!valid23){break;}}}else {validate22.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs158 === errors;}else {var valid0 = true;}if(valid0){if(data.terms !== undefined){let data70 = data.terms;const _errs176 = errors;if(errors === _errs176){if(Array.isArray(data70)){if(data70.length > 1){validate22.errors = [{instancePath:instancePath+"/terms",schemaPath:"#/properties/terms/maxItems",keyword:"maxItems",params:{limit: 1},message:"must NOT have more than 1 items"}];return false;}else {if(data70.length < 1){validate22.errors = [{instancePath:instancePath+"/terms",schemaPath:"#/properties/terms/minItems",keyword:"minItems",params:{limit: 1},message:"must NOT have fewer than 1 items"}];return false;}else {var valid26 = true;const len8 = data70.length;for(let i8=0; i8<len8; i8++){const _errs178 = errors;if(!(validate23(data70[i8], {instancePath:instancePath+"/terms/" + i8,parentData:data70,parentDataProperty:i8,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid26 = _errs178 === errors;if(!valid26){break;}}}}}else {validate22.errors = [{instancePath:instancePath+"/terms",schemaPath:"#/properties/terms/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs176 === errors;}else {var valid0 = true;}if(valid0){if(data.title !== undefined){const _errs179 = errors;if(typeof data.title !== "string"){validate22.errors = [{instancePath:instancePath+"/title",schemaPath:"#/properties/title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs179 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}}}}}}}else {validate22.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate22.errors = vErrors;return errors === 0;}validate22.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((key0 === "absence_reason") || (key0 === "discovery_method")) || (key0 === "offers")) || (key0 === "restriction_filters")) || (key0 === "uri"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.absence_reason !== undefined){let data0 = data.absence_reason;const _errs2 = errors;const _errs3 = errors;let valid1 = false;const _errs4 = errors;if(typeof data0 !== "string"){const err0 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((data0 === "OFFER_ABSENCE_REASON_UNSPECIFIED") || (data0 === "OFFER_ABSENCE_REASON_NOT_IN_CATALOG")) || (data0 === "OFFER_ABSENCE_REASON_CONTENT_BLOCKED")) || (data0 === "OFFER_ABSENCE_REASON_RESTRICTION_FILTERED")) || (data0 === "OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE")) || (data0 === "OFFER_ABSENCE_REASON_NOT_AUTHORIZED")) || (data0 === "OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT")) || (data0 === "OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data0 === "OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"))){const err1 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.absence_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs4 === errors;valid1 = valid1 || _valid0;const _errs6 = errors;if(!(((typeof data0 == "number") && (!(data0 % 1) && !isNaN(data0))) && (isFinite(data0)))){const err2 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs6){if((typeof data0 == "number") && (isFinite(data0))){if(data0 > 2147483647 || isNaN(data0)){const err3 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data0 < -2147483648 || isNaN(data0)){const err4 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs6 === errors;valid1 = valid1 || _valid0;if(!valid1){const err5 = {instancePath:instancePath+"/absence_reason",schemaPath:"#/properties/absence_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs3;if(vErrors !== null){if(_errs3){vErrors.length = _errs3;}else {vErrors = null;}}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.discovery_method !== undefined){let data1 = data.discovery_method;const _errs8 = errors;const _errs9 = errors;let valid2 = false;const _errs10 = errors;if(typeof data1 !== "string"){const err6 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data1 === "DISCOVERY_METHOD_UNSPECIFIED") || (data1 === "DISCOVERY_METHOD_EXCHANGE")) || (data1 === "DISCOVERY_METHOD_SEARCH")) || (data1 === "DISCOVERY_METHOD_RECOMMENDATION")) || (data1 === "DISCOVERY_METHOD_SYNDICATION"))){const err7 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.discovery_method.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs10 === errors;valid2 = valid2 || _valid1;const _errs12 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err8 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs12){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 2147483647 || isNaN(data1)){const err9 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data1 < -2147483648 || isNaN(data1)){const err10 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs12 === errors;valid2 = valid2 || _valid1;if(!valid2){const err11 = {instancePath:instancePath+"/discovery_method",schemaPath:"#/properties/discovery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs9;if(vErrors !== null){if(_errs9){vErrors.length = _errs9;}else {vErrors = null;}}}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.offers !== undefined){let data2 = data.offers;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data2)){var valid3 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs16 = errors;if(!(validate22(data2[i0], {instancePath:instancePath+"/offers/" + i0,parentData:data2,parentDataProperty:i0,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate22.errors : vErrors.concat(validate22.errors);errors = vErrors.length;}var valid3 = _errs16 === errors;if(!valid3){break;}}}else {validate21.errors = [{instancePath:instancePath+"/offers",schemaPath:"#/properties/offers/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_filters !== undefined){let data4 = data.restriction_filters;const _errs17 = errors;if(errors === _errs17){if(Array.isArray(data4)){var valid4 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){let data5 = data4[i1];const _errs19 = errors;const _errs20 = errors;let valid5 = false;const _errs21 = errors;if(typeof data5 !== "string"){const err12 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!(((((data5 === "RESTRICTION_KIND_UNSPECIFIED") || (data5 === "RESTRICTION_KIND_FUNCTION")) || (data5 === "RESTRICTION_KIND_GEOGRAPHY")) || (data5 === "RESTRICTION_KIND_USER_TYPE")) || (data5 === "RESTRICTION_KIND_OTHER"))){const err13 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.restriction_filters.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs21 === errors;valid5 = valid5 || _valid2;const _errs23 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err14 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs23){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err15 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err16 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs23 === errors;valid5 = valid5 || _valid2;if(!valid5){const err17 = {instancePath:instancePath+"/restriction_filters/" + i1,schemaPath:"#/properties/restriction_filters/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs20;if(vErrors !== null){if(_errs20){vErrors.length = _errs20;}else {vErrors = null;}}}var valid4 = _errs19 === errors;if(!valid4){break;}}}else {validate21.errors = [{instancePath:instancePath+"/restriction_filters",schemaPath:"#/properties/restriction_filters/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs17 === errors;}else {var valid0 = true;}if(valid0){if(data.uri !== undefined){const _errs25 = errors;if(typeof data.uri !== "string"){validate21.errors = [{instancePath:instancePath+"/uri",schemaPath:"#/properties/uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs25 === errors;}else {var valid0 = true;}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.ResourceResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.exchange === undefined) && (missing0 = "exchange")){validate20.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(((((((key0 === "exchange") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "offer_groups")) || (key0 === "offers")) || (key0 === "rate_limit")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.exchange !== undefined){let data0 = data.exchange;const _errs2 = errors;if(errors === _errs2){if(typeof data0 === "string"){if(func1(data0) > 260){validate20.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data0)){validate20.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data1 = data.ext;const _errs4 = errors;if(!(data1 && typeof data1 == "object" && !Array.isArray(data1))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data2 = data.ext_critical;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_groups !== undefined){let data4 = data.offer_groups;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data4)){var valid2 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){const _errs12 = errors;if(!(validate21(data4[i1], {instancePath:instancePath+"/offer_groups/" + i1,parentData:data4,parentDataProperty:i1,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/offer_groups",schemaPath:"#/properties/offer_groups/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.offers !== undefined){let data6 = data.offers;const _errs13 = errors;if(errors === _errs13){if(Array.isArray(data6)){var valid3 = true;const len2 = data6.length;for(let i2=0; i2<len2; i2++){const _errs15 = errors;if(!(validate22(data6[i2], {instancePath:instancePath+"/offers/" + i2,parentData:data6,parentDataProperty:i2,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate22.errors : vErrors.concat(validate22.errors);errors = vErrors.length;}var valid3 = _errs15 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/offers",schemaPath:"#/properties/offers/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs13 === errors;}else {var valid0 = true;}if(valid0){if(data.rate_limit !== undefined){let data8 = data.rate_limit;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data8 && typeof data8 == "object" && !Array.isArray(data8)){const _errs19 = errors;for(const key1 in data8){if(!((((key1 === "limit") || (key1 === "remaining")) || (key1 === "reset_at")) || (key1 === "window"))){validate20.errors = [{instancePath:instancePath+"/rate_limit",schemaPath:"#/$defs/fora.v1.RateLimitInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data8.limit !== undefined){let data9 = data8.limit;const _errs20 = errors;if(!(((typeof data9 == "number") && (!(data9 % 1) && !isNaN(data9))) && (isFinite(data9)))){validate20.errors = [{instancePath:instancePath+"/rate_limit/limit",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs20){if((typeof data9 == "number") && (isFinite(data9))){if(data9 > 2147483647 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/rate_limit/limit",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data9 < -2147483648 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/rate_limit/limit",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs20 === errors;}else {var valid5 = true;}if(valid5){if(data8.remaining !== undefined){let data10 = data8.remaining;const _errs22 = errors;if(!(((typeof data10 == "number") && (!(data10 % 1) && !isNaN(data10))) && (isFinite(data10)))){validate20.errors = [{instancePath:instancePath+"/rate_limit/remaining",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs22){if((typeof data10 == "number") && (isFinite(data10))){if(data10 > 2147483647 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/rate_limit/remaining",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data10 < -2147483648 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/rate_limit/remaining",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs22 === errors;}else {var valid5 = true;}if(valid5){if(data8.reset_at !== undefined){const _errs24 = errors;if(errors === _errs24){if(errors === _errs24){if(!(typeof data8.reset_at === "string")){validate20.errors = [{instancePath:instancePath+"/rate_limit/reset_at",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/reset_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid5 = _errs24 === errors;}else {var valid5 = true;}if(valid5){if(data8.window !== undefined){const _errs26 = errors;if(errors === _errs26){if(errors === _errs26){if(!(typeof data8.window === "string")){validate20.errors = [{instancePath:instancePath+"/rate_limit/window",schemaPath:"#/$defs/fora.v1.RateLimitInfo/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid5 = _errs26 === errors;}else {var valid5 = true;}}}}}}else {validate20.errors = [{instancePath:instancePath+"/rate_limit",schemaPath:"#/$defs/fora.v1.RateLimitInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs28 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs28 === errors;}else {var valid0 = true;}}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.v1.ResourceResponse. */
+export const strict: StrictMessage = { message: "fora.v1.ResourceResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.TransactionResponse.ts b/gen/ts/strict/fora.v1.TransactionResponse.ts
new file mode 100644
index 00000000..5d372619
--- /dev/null
+++ b/gen/ts/strict/fora.v1.TransactionResponse.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.Cost":{"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.ErrorDetail":{"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.TransactionResultItem":{"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"},"fora.v1.UpstreamRefusal":{"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.TransactionResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"items":{"items":{"$ref":"#/$defs/fora.v1.TransactionResultItem"},"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"},"total_cost":{"$ref":"#/$defs/fora.v1.Cost"},"ver":{"default":"","type":"string"}},"type":"object"};const schema47 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const pattern4 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern6 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const schema34 = {"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema42 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema43 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema44 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate24.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 255){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func2(data2) < 1){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func2(data3) > 255){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 7 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate24.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const pattern7 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema35.properties, key0))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema36.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate23.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate23.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 5 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 5},message:"must be <= 5"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate23.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 6 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate23.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate23.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate23.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate24(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema41.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema42.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func2(data18) > 260){validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern7.test(data18)){validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate23.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema44.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate22(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate22.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.code === undefined) && (missing0 = "code")) || ((data.party === undefined) && (missing0 = "party"))){validate22.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(((key0 === "code") || (key0 === "detail")) || (key0 === "party"))){validate22.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.code !== undefined){let data0 = data.code;const _errs2 = errors;if(errors === _errs2){if(typeof data0 === "string"){if(func2(data0) > 64){validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func2(data0) < 1){validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.detail !== undefined){const _errs4 = errors;if(!(validate23(data.detail, {instancePath:instancePath+"/detail",parentData:data,parentDataProperty:"detail",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.party !== undefined){let data2 = data.party;const _errs5 = errors;if(errors === _errs5){if(typeof data2 === "string"){if(func2(data2) > 260){validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern7.test(data2)){validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs5 === errors;}else {var valid0 = true;}}}}}}else {validate22.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate22.errors = vErrors;return errors === 0;}validate22.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema32.properties, key0))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.billing_id !== undefined){const _errs2 = errors;if(typeof data.billing_id !== "string"){validate21.errors = [{instancePath:instancePath+"/billing_id",schemaPath:"#/properties/billing_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.cost !== undefined){let data1 = data.cost;const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate21.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.amount !== undefined){let data2 = data1.amount;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 32){validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data2)){validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data1.currency !== undefined){const _errs10 = errors;if(typeof data1.currency !== "string"){validate21.errors = [{instancePath:instancePath+"/cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data1.unit_cost !== undefined){let data4 = data1.unit_cost;const _errs12 = errors;if(errors === _errs12){if(typeof data4 === "string"){if(func2(data4) > 32){validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data4)){validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data5 = data.delivery_method;const _errs14 = errors;const _errs15 = errors;let valid3 = false;const _errs16 = errors;if(errors === _errs16){if(typeof data5 === "string"){if(!pattern6.test(data5)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs16 === errors;valid3 = valid3 || _valid0;const _errs18 = errors;if(typeof data5 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data5 === "DELIVERY_METHOD_DIRECT") || (data5 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data5 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema32.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs18 === errors;valid3 = valid3 || _valid0;const _errs20 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs20){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs20 === errors;valid3 = valid3 || _valid0;if(!valid3){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs15;if(vErrors !== null){if(_errs15){vErrors.length = _errs15;}else {vErrors = null;}}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.denial_reason !== undefined){let data6 = data.denial_reason;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(typeof data6 !== "string"){const err8 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((((((((((((((((((data6 === "DENIAL_REASON_UNSPECIFIED") || (data6 === "DENIAL_REASON_ACCOUNT_INACTIVE")) || (data6 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data6 === "DENIAL_REASON_RATE_LIMITED")) || (data6 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data6 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data6 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data6 === "DENIAL_REASON_OFFER_EXPIRED")) || (data6 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data6 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data6 === "DENIAL_REASON_DELEGATION_INVALID")) || (data6 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data6 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data6 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data6 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data6 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err9 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.denial_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs24 === errors;valid4 = valid4 || _valid1;const _errs26 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){const err10 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs26){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){const err11 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data6 < -2147483648 || isNaN(data6)){const err12 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;if(!valid4){const err13 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs28 = errors;if(errors === _errs28){if(errors === _errs28){if(!(typeof data.expires_at === "string")){validate21.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs30 = errors;if(typeof data.offer_id !== "string"){validate21.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.refusal !== undefined){const _errs32 = errors;if(!(validate22(data.refusal, {instancePath:instancePath+"/refusal",parentData:data,parentDataProperty:"refusal",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate22.errors : vErrors.concat(validate22.errors);errors = vErrors.length;}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting_obligation !== undefined){let data10 = data.reporting_obligation;const _errs33 = errors;const _errs34 = errors;if(errors === _errs34){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){const _errs36 = errors;for(const key2 in data10){if(!((((((key2 === "endpoint") || (key2 === "ext")) || (key2 === "ext_critical")) || (key2 === "required")) || (key2 === "required_fields")) || (key2 === "window"))){validate21.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs36 === errors){if(data10.endpoint !== undefined){const _errs37 = errors;if(typeof data10.endpoint !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs37 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext !== undefined){let data12 = data10.ext;const _errs39 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid6 = _errs39 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext_critical !== undefined){let data13 = data10.ext_critical;const _errs41 = errors;if(errors === _errs41){if(Array.isArray(data13)){var valid7 = true;const len0 = data13.length;for(let i0=0; i0<len0; i0++){const _errs43 = errors;if(typeof data13[i0] !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical/" + i0,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs43 === errors;if(!valid7){break;}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs41 === errors;}else {var valid6 = true;}if(valid6){if(data10.required !== undefined){const _errs45 = errors;if(typeof data10.required !== "boolean"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid6 = _errs45 === errors;}else {var valid6 = true;}if(valid6){if(data10.required_fields !== undefined){let data16 = data10.required_fields;const _errs47 = errors;if(errors === _errs47){if(Array.isArray(data16)){var valid8 = true;const len1 = data16.length;for(let i1=0; i1<len1; i1++){const _errs49 = errors;if(typeof data16[i1] !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields/" + i1,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs49 === errors;if(!valid8){break;}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs47 === errors;}else {var valid6 = true;}if(valid6){if(data10.window !== undefined){const _errs51 = errors;if(errors === _errs51){if(errors === _errs51){if(!(typeof data10.window === "string")){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid6 = _errs51 === errors;}else {var valid6 = true;}}}}}}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs33 === errors;}else {var valid0 = true;}if(valid0){if(data.resource_title !== undefined){const _errs53 = errors;if(typeof data.resource_title !== "string"){validate21.errors = [{instancePath:instancePath+"/resource_title",schemaPath:"#/properties/resource_title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs53 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_mismatches !== undefined){let data20 = data.restriction_mismatches;const _errs55 = errors;if(errors === _errs55){if(Array.isArray(data20)){var valid9 = true;const len2 = data20.length;for(let i2=0; i2<len2; i2++){let data21 = data20[i2];const _errs57 = errors;const _errs58 = errors;let valid10 = false;const _errs59 = errors;if(typeof data21 !== "string"){const err14 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((((data21 === "RESTRICTION_KIND_UNSPECIFIED") || (data21 === "RESTRICTION_KIND_FUNCTION")) || (data21 === "RESTRICTION_KIND_GEOGRAPHY")) || (data21 === "RESTRICTION_KIND_USER_TYPE")) || (data21 === "RESTRICTION_KIND_OTHER"))){const err15 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs59 === errors;valid10 = valid10 || _valid2;const _errs61 = errors;if(!(((typeof data21 == "number") && (!(data21 % 1) && !isNaN(data21))) && (isFinite(data21)))){const err16 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs61){if((typeof data21 == "number") && (isFinite(data21))){if(data21 > 2147483647 || isNaN(data21)){const err17 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data21 < -2147483648 || isNaN(data21)){const err18 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs61 === errors;valid10 = valid10 || _valid2;if(!valid10){const err19 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs58;if(vErrors !== null){if(_errs58){vErrors.length = _errs58;}else {vErrors = null;}}}var valid9 = _errs57 === errors;if(!valid9){break;}}}else {validate21.errors = [{instancePath:instancePath+"/restriction_mismatches",schemaPath:"#/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs55 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_endpoint !== undefined){const _errs63 = errors;if(typeof data.retrieval_endpoint !== "string"){validate21.errors = [{instancePath:instancePath+"/retrieval_endpoint",schemaPath:"#/properties/retrieval_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs63 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs65 = errors;if(typeof data.subscription_id !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs65 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_unit_value !== undefined){let data24 = data.subscription_unit_value;const _errs67 = errors;const _errs68 = errors;if(errors === _errs68){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){const _errs70 = errors;for(const key3 in data24){if(!(((key3 === "amount") || (key3 === "currency")) || (key3 === "unit_cost"))){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs70 === errors){if(data24.amount !== undefined){let data25 = data24.amount;const _errs71 = errors;if(errors === _errs71){if(typeof data25 === "string"){if(func2(data25) > 32){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data25)){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs71 === errors;}else {var valid12 = true;}if(valid12){if(data24.currency !== undefined){const _errs73 = errors;if(typeof data24.currency !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs73 === errors;}else {var valid12 = true;}if(valid12){if(data24.unit_cost !== undefined){let data27 = data24.unit_cost;const _errs75 = errors;if(errors === _errs75){if(typeof data27 === "string"){if(func2(data27) > 32){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data27)){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs75 === errors;}else {var valid12 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs67 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_id !== undefined){const _errs77 = errors;if(typeof data.transaction_id !== "string"){validate21.errors = [{instancePath:instancePath+"/transaction_id",schemaPath:"#/properties/transaction_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs77 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.TransactionResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((((key0 === "agent_identity_hash") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "items")) || (key0 === "subscription_quota")) || (key0 === "total_cost")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.agent_identity_hash !== undefined){const _errs2 = errors;if(typeof data.agent_identity_hash !== "string"){validate20.errors = [{instancePath:instancePath+"/agent_identity_hash",schemaPath:"#/properties/agent_identity_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data1 = data.ext;const _errs4 = errors;if(!(data1 && typeof data1 == "object" && !Array.isArray(data1))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data2 = data.ext_critical;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.items !== undefined){let data4 = data.items;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data4)){var valid2 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){const _errs12 = errors;if(!(validate21(data4[i1], {instancePath:instancePath+"/items/" + i1,parentData:data4,parentDataProperty:i1,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/items",schemaPath:"#/properties/items/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data6 = data.subscription_quota;const _errs13 = errors;if(errors === _errs13){if(Array.isArray(data6)){var valid3 = true;const len2 = data6.length;for(let i2=0; i2<len2; i2++){let data7 = data6[i2];const _errs15 = errors;const _errs16 = errors;if(errors === _errs16){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){const _errs18 = errors;for(const key1 in data7){if(!((((((key1 === "quota_limit") || (key1 === "quota_remaining")) || (key1 === "quota_used")) || (key1 === "resets_at")) || (key1 === "subscription_id")) || (key1 === "unit"))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs18 === errors){if(data7.quota_limit !== undefined){let data8 = data7.quota_limit;const _errs19 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs19){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data8 < -2147483648 || isNaN(data8)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs19 === errors;}else {var valid5 = true;}if(valid5){if(data7.quota_remaining !== undefined){let data9 = data7.quota_remaining;const _errs21 = errors;if(!(((typeof data9 == "number") && (!(data9 % 1) && !isNaN(data9))) && (isFinite(data9)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs21){if((typeof data9 == "number") && (isFinite(data9))){if(data9 > 2147483647 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data9 < -2147483648 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs21 === errors;}else {var valid5 = true;}if(valid5){if(data7.quota_used !== undefined){let data10 = data7.quota_used;const _errs23 = errors;if(!(((typeof data10 == "number") && (!(data10 % 1) && !isNaN(data10))) && (isFinite(data10)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs23){if((typeof data10 == "number") && (isFinite(data10))){if(data10 > 2147483647 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data10 < -2147483648 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs23 === errors;}else {var valid5 = true;}if(valid5){if(data7.resets_at !== undefined){const _errs25 = errors;if(errors === _errs25){if(errors === _errs25){if(!(typeof data7.resets_at === "string")){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid5 = _errs25 === errors;}else {var valid5 = true;}if(valid5){if(data7.subscription_id !== undefined){const _errs27 = errors;if(typeof data7.subscription_id !== "string"){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs27 === errors;}else {var valid5 = true;}if(valid5){if(data7.unit !== undefined){const _errs29 = errors;if(typeof data7.unit !== "string"){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs29 === errors;}else {var valid5 = true;}}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid3 = _errs15 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs13 === errors;}else {var valid0 = true;}if(valid0){if(data.total_cost !== undefined){let data14 = data.total_cost;const _errs31 = errors;const _errs32 = errors;if(errors === _errs32){if(data14 && typeof data14 == "object" && !Array.isArray(data14)){const _errs34 = errors;for(const key2 in data14){if(!(((key2 === "amount") || (key2 === "currency")) || (key2 === "unit_cost"))){validate20.errors = [{instancePath:instancePath+"/total_cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs34 === errors){if(data14.amount !== undefined){let data15 = data14.amount;const _errs35 = errors;if(errors === _errs35){if(typeof data15 === "string"){if(func2(data15) > 32){validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data15)){validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid7 = _errs35 === errors;}else {var valid7 = true;}if(valid7){if(data14.currency !== undefined){const _errs37 = errors;if(typeof data14.currency !== "string"){validate20.errors = [{instancePath:instancePath+"/total_cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs37 === errors;}else {var valid7 = true;}if(valid7){if(data14.unit_cost !== undefined){let data17 = data14.unit_cost;const _errs39 = errors;if(errors === _errs39){if(typeof data17 === "string"){if(func2(data17) > 32){validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data17)){validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid7 = _errs39 === errors;}else {var valid7 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs31 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs41 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs41 === errors;}else {var valid0 = true;}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.v1.TransactionResponse. */
+export const strict: StrictMessage = { message: "fora.v1.TransactionResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.UsageReportResponse.ts b/gen/ts/strict/fora.v1.UsageReportResponse.ts
new file mode 100644
index 00000000..318937cc
--- /dev/null
+++ b/gen/ts/strict/fora.v1.UsageReportResponse.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$id":"fora.v1.UsageReportResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"report_id":{"default":"","type":"string"},"ver":{"default":"","type":"string"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.UsageReportResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((((key0 === "ext") || (key0 === "ext_critical")) || (key0 === "report_id")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.ext !== undefined){let data0 = data.ext;const _errs2 = errors;if(!(data0 && typeof data0 == "object" && !Array.isArray(data0))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data1 = data.ext_critical;const _errs4 = errors;if(errors === _errs4){if(Array.isArray(data1)){var valid1 = true;const len0 = data1.length;for(let i0=0; i0<len0; i0++){const _errs6 = errors;if(typeof data1[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs6 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.report_id !== undefined){const _errs8 = errors;if(typeof data.report_id !== "string"){validate20.errors = [{instancePath:instancePath+"/report_id",schemaPath:"#/properties/report_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs8 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs10 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs10 === errors;}else {var valid0 = true;}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.UsageReportResponse. */
+export const strict: StrictMessage = { message: "fora.v1.UsageReportResponse", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.WBAFile.ts b/gen/ts/strict/fora.v1.WBAFile.ts
new file mode 100644
index 00000000..68631c77
--- /dev/null
+++ b/gen/ts/strict/fora.v1.WBAFile.ts
@@ -0,0 +1,11 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.WBAFile.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.JsonWebKey":{"additionalProperties":false,"properties":{"alg":{"default":"","type":"string"},"crv":{"default":"","type":"string"},"kty":{"default":"","type":"string"},"not_after":{"default":"","type":"string"},"not_before":{"default":"","type":"string"},"use":{"default":"","type":"string"},"x":{"default":"","type":"string"}},"type":"object"}},"$id":"fora.v1.WBAFile.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"keys":{"items":{"$ref":"#/$defs/fora.v1.JsonWebKey"},"type":"array"},"revocation_url":{"type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"alg":{"default":"","type":"string"},"crv":{"default":"","type":"string"},"kty":{"default":"","type":"string"},"not_after":{"default":"","type":"string"},"not_before":{"default":"","type":"string"},"use":{"default":"","type":"string"},"x":{"default":"","type":"string"}},"type":"object"};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.WBAFile.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((key0 === "keys") || (key0 === "revocation_url"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.keys !== undefined){let data0 = data.keys;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!(((((((key1 === "alg") || (key1 === "crv")) || (key1 === "kty")) || (key1 === "not_after")) || (key1 === "not_before")) || (key1 === "use")) || (key1 === "x"))){validate20.errors = [{instancePath:instancePath+"/keys/" + i0,schemaPath:"#/$defs/fora.v1.JsonWebKey/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.alg !== undefined){const _errs8 = errors;if(typeof data1.alg !== "string"){validate20.errors = [{instancePath:instancePath+"/keys/" + i0+"/alg",schemaPath:"#/$defs/fora.v1.JsonWebKey/properties/alg/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.crv !== undefined){const _errs10 = errors;if(typeof data1.crv !== "string"){validate20.errors = [{instancePath:instancePath+"/keys/" + i0+"/crv",schemaPath:"#/$defs/fora.v1.JsonWebKey/properties/crv/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs10 === errors;}else {var valid3 = true;}if(valid3){if(data1.kty !== undefined){const _errs12 = errors;if(typeof data1.kty !== "string"){validate20.errors = [{instancePath:instancePath+"/keys/" + i0+"/kty",schemaPath:"#/$defs/fora.v1.JsonWebKey/properties/kty/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs12 === errors;}else {var valid3 = true;}if(valid3){if(data1.not_after !== undefined){const _errs14 = errors;if(typeof data1.not_after !== "string"){validate20.errors = [{instancePath:instancePath+"/keys/" + i0+"/not_after",schemaPath:"#/$defs/fora.v1.JsonWebKey/properties/not_after/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs14 === errors;}else {var valid3 = true;}if(valid3){if(data1.not_before !== undefined){const _errs16 = errors;if(typeof data1.not_before !== "string"){validate20.errors = [{instancePath:instancePath+"/keys/" + i0+"/not_before",schemaPath:"#/$defs/fora.v1.JsonWebKey/properties/not_before/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs16 === errors;}else {var valid3 = true;}if(valid3){if(data1.use !== undefined){const _errs18 = errors;if(typeof data1.use !== "string"){validate20.errors = [{instancePath:instancePath+"/keys/" + i0+"/use",schemaPath:"#/$defs/fora.v1.JsonWebKey/properties/use/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs18 === errors;}else {var valid3 = true;}if(valid3){if(data1.x !== undefined){const _errs20 = errors;if(typeof data1.x !== "string"){validate20.errors = [{instancePath:instancePath+"/keys/" + i0+"/x",schemaPath:"#/$defs/fora.v1.JsonWebKey/properties/x/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid3 = _errs20 === errors;}else {var valid3 = true;}}}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/keys/" + i0,schemaPath:"#/$defs/fora.v1.JsonWebKey/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/keys",schemaPath:"#/properties/keys/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.revocation_url !== undefined){const _errs22 = errors;if(typeof data.revocation_url !== "string"){validate20.errors = [{instancePath:instancePath+"/revocation_url",schemaPath:"#/properties/revocation_url/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs22 === errors;}else {var valid0 = true;}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+
+/** The precompiled strict check of fora.v1.WBAFile. */
+export const strict: StrictMessage = { message: "fora.v1.WBAFile", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/fora.v1.WellKnownManifest.ts b/gen/ts/strict/fora.v1.WellKnownManifest.ts
new file mode 100644
index 00000000..b4c14a10
--- /dev/null
+++ b/gen/ts/strict/fora.v1.WellKnownManifest.ts
@@ -0,0 +1,27 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json, with ajv 8.20.0 standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+const schema31 = {"$defs":{"fora.v1.AccountRegistration":{"additionalProperties":false,"properties":{"data_schema":{"type":"object"}},"type":"object"},"fora.v1.AuthorizedExchange":{"additionalProperties":false,"properties":{"domain":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"endpoint":{"default":"","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"relationship":{"anyOf":[{"enum":["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["domain","relationship"],"type":"object"},"fora.v1.CatalogContributor":{"additionalProperties":false,"properties":{"domain":{"default":"","type":"string"},"relationship":{"default":"","type":"string"}},"type":"object"}},"$id":"fora.v1.WellKnownManifest.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"accepted_verifiers":{"items":{"type":"string"},"type":"array"},"account_registration":{"$ref":"#/$defs/fora.v1.AccountRegistration"},"base_currency":{"type":"string"},"catalog_contributors":{"items":{"$ref":"#/$defs/fora.v1.CatalogContributor"},"type":"array"},"catalog_endpoint":{"type":"string"},"contact":{"type":"string"},"delivery_methods_supported":{"items":{"anyOf":[{"enum":["DELIVERY_METHOD_UNSPECIFIED","DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"domain":{"default":"","type":"string"},"endpoint":{"type":"string"},"exchanges":{"items":{"$ref":"#/$defs/fora.v1.AuthorizedExchange"},"type":"array"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"gnap_grant_endpoint":{"type":"string"},"hash_methods_supported":{"items":{"type":"string"},"type":"array"},"health_endpoint":{"type":"string"},"max_intermediary_hops":{"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"name":{"type":"string"},"oidc_issuer":{"type":"string"},"operator":{"type":"string"},"operator_domain":{"type":"string"},"pricing_models_supported":{"items":{"anyOf":[{"enum":["PRICING_MODEL_UNSPECIFIED","PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"privacy_uri":{"type":"string"},"protocol_versions_supported":{"items":{"type":"string"},"type":"array"},"role":{"anyOf":[{"enum":["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"supported_auth_methods":{"items":{"anyOf":[{"enum":["AUTH_METHOD_UNSPECIFIED","AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"supported_profiles":{"items":{"type":"string"},"type":"array"},"terms_digest":{"pattern":"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$","type":"string"},"terms_uri":{"type":"string"},"ver":{"default":"","type":"string"}},"required":["role"],"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"data_schema":{"type":"object"}},"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"domain":{"default":"","type":"string"},"relationship":{"default":"","type":"string"}},"type":"object"};const schema34 = {"additionalProperties":false,"properties":{"domain":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"endpoint":{"default":"","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"relationship":{"anyOf":[{"enum":["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]}},"required":["domain","relationship"],"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");const pattern5 = new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.WellKnownManifest.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.role === undefined) && (missing0 = "role")){validate20.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema31.properties, key0))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.accepted_verifiers !== undefined){let data0 = data.accepted_verifiers;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){const _errs4 = errors;if(typeof data0[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/accepted_verifiers/" + i0,schemaPath:"#/properties/accepted_verifiers/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs4 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/accepted_verifiers",schemaPath:"#/properties/accepted_verifiers/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.account_registration !== undefined){let data2 = data.account_registration;const _errs6 = errors;const _errs7 = errors;if(errors === _errs7){if(data2 && typeof data2 == "object" && !Array.isArray(data2)){const _errs9 = errors;for(const key1 in data2){if(!(key1 === "data_schema")){validate20.errors = [{instancePath:instancePath+"/account_registration",schemaPath:"#/$defs/fora.v1.AccountRegistration/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs9 === errors){if(data2.data_schema !== undefined){let data3 = data2.data_schema;if(!(data3 && typeof data3 == "object" && !Array.isArray(data3))){validate20.errors = [{instancePath:instancePath+"/account_registration/data_schema",schemaPath:"#/$defs/fora.v1.AccountRegistration/properties/data_schema/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}}}else {validate20.errors = [{instancePath:instancePath+"/account_registration",schemaPath:"#/$defs/fora.v1.AccountRegistration/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.base_currency !== undefined){const _errs12 = errors;if(typeof data.base_currency !== "string"){validate20.errors = [{instancePath:instancePath+"/base_currency",schemaPath:"#/properties/base_currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs12 === errors;}else {var valid0 = true;}if(valid0){if(data.catalog_contributors !== undefined){let data5 = data.catalog_contributors;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data5)){var valid4 = true;const len1 = data5.length;for(let i1=0; i1<len1; i1++){let data6 = data5[i1];const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data6 && typeof data6 == "object" && !Array.isArray(data6)){const _errs19 = errors;for(const key2 in data6){if(!((key2 === "domain") || (key2 === "relationship"))){validate20.errors = [{instancePath:instancePath+"/catalog_contributors/" + i1,schemaPath:"#/$defs/fora.v1.CatalogContributor/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data6.domain !== undefined){const _errs20 = errors;if(typeof data6.domain !== "string"){validate20.errors = [{instancePath:instancePath+"/catalog_contributors/" + i1+"/domain",schemaPath:"#/$defs/fora.v1.CatalogContributor/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs20 === errors;}else {var valid6 = true;}if(valid6){if(data6.relationship !== undefined){const _errs22 = errors;if(typeof data6.relationship !== "string"){validate20.errors = [{instancePath:instancePath+"/catalog_contributors/" + i1+"/relationship",schemaPath:"#/$defs/fora.v1.CatalogContributor/properties/relationship/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs22 === errors;}else {var valid6 = true;}}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_contributors/" + i1,schemaPath:"#/$defs/fora.v1.CatalogContributor/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid4 = _errs16 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_contributors",schemaPath:"#/properties/catalog_contributors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.catalog_endpoint !== undefined){const _errs24 = errors;if(typeof data.catalog_endpoint !== "string"){validate20.errors = [{instancePath:instancePath+"/catalog_endpoint",schemaPath:"#/properties/catalog_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs24 === errors;}else {var valid0 = true;}if(valid0){if(data.contact !== undefined){const _errs26 = errors;if(typeof data.contact !== "string"){validate20.errors = [{instancePath:instancePath+"/contact",schemaPath:"#/properties/contact/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_methods_supported !== undefined){let data11 = data.delivery_methods_supported;const _errs28 = errors;if(errors === _errs28){if(Array.isArray(data11)){var valid7 = true;const len2 = data11.length;for(let i2=0; i2<len2; i2++){let data12 = data11[i2];const _errs30 = errors;const _errs31 = errors;let valid8 = false;const _errs32 = errors;if(typeof data12 !== "string"){const err0 = {instancePath:instancePath+"/delivery_methods_supported/" + i2,schemaPath:"#/properties/delivery_methods_supported/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!((((data12 === "DELIVERY_METHOD_UNSPECIFIED") || (data12 === "DELIVERY_METHOD_DIRECT")) || (data12 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data12 === "DELIVERY_METHOD_STREAMING"))){const err1 = {instancePath:instancePath+"/delivery_methods_supported/" + i2,schemaPath:"#/properties/delivery_methods_supported/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema31.properties.delivery_methods_supported.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs32 === errors;valid8 = valid8 || _valid0;const _errs34 = errors;if(!(((typeof data12 == "number") && (!(data12 % 1) && !isNaN(data12))) && (isFinite(data12)))){const err2 = {instancePath:instancePath+"/delivery_methods_supported/" + i2,schemaPath:"#/properties/delivery_methods_supported/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs34){if((typeof data12 == "number") && (isFinite(data12))){if(data12 > 2147483647 || isNaN(data12)){const err3 = {instancePath:instancePath+"/delivery_methods_supported/" + i2,schemaPath:"#/properties/delivery_methods_supported/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data12 < -2147483648 || isNaN(data12)){const err4 = {instancePath:instancePath+"/delivery_methods_supported/" + i2,schemaPath:"#/properties/delivery_methods_supported/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs34 === errors;valid8 = valid8 || _valid0;if(!valid8){const err5 = {instancePath:instancePath+"/delivery_methods_supported/" + i2,schemaPath:"#/properties/delivery_methods_supported/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs31;if(vErrors !== null){if(_errs31){vErrors.length = _errs31;}else {vErrors = null;}}}var valid7 = _errs30 === errors;if(!valid7){break;}}}else {validate20.errors = [{instancePath:instancePath+"/delivery_methods_supported",schemaPath:"#/properties/delivery_methods_supported/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs36 = errors;if(typeof data.domain !== "string"){validate20.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs36 === errors;}else {var valid0 = true;}if(valid0){if(data.endpoint !== undefined){const _errs38 = errors;if(typeof data.endpoint !== "string"){validate20.errors = [{instancePath:instancePath+"/endpoint",schemaPath:"#/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.exchanges !== undefined){let data15 = data.exchanges;const _errs40 = errors;if(errors === _errs40){if(Array.isArray(data15)){var valid9 = true;const len3 = data15.length;for(let i3=0; i3<len3; i3++){let data16 = data15[i3];const _errs42 = errors;const _errs43 = errors;if(errors === _errs43){if(data16 && typeof data16 == "object" && !Array.isArray(data16)){let missing1;if(((data16.domain === undefined) && (missing1 = "domain")) || ((data16.relationship === undefined) && (missing1 = "relationship"))){validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3,schemaPath:"#/$defs/fora.v1.AuthorizedExchange/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs45 = errors;for(const key3 in data16){if(!(((((key3 === "domain") || (key3 === "endpoint")) || (key3 === "ext")) || (key3 === "ext_critical")) || (key3 === "relationship"))){validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3,schemaPath:"#/$defs/fora.v1.AuthorizedExchange/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs45 === errors){if(data16.domain !== undefined){let data17 = data16.domain;const _errs46 = errors;if(errors === _errs46){if(typeof data17 === "string"){if(func2(data17) > 260){validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3+"/domain",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/domain/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data17)){validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3+"/domain",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/domain/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3+"/domain",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid11 = _errs46 === errors;}else {var valid11 = true;}if(valid11){if(data16.endpoint !== undefined){const _errs48 = errors;if(typeof data16.endpoint !== "string"){validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3+"/endpoint",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid11 = _errs48 === errors;}else {var valid11 = true;}if(valid11){if(data16.ext !== undefined){let data19 = data16.ext;const _errs50 = errors;if(!(data19 && typeof data19 == "object" && !Array.isArray(data19))){validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3+"/ext",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid11 = _errs50 === errors;}else {var valid11 = true;}if(valid11){if(data16.ext_critical !== undefined){let data20 = data16.ext_critical;const _errs52 = errors;if(errors === _errs52){if(Array.isArray(data20)){var valid12 = true;const len4 = data20.length;for(let i4=0; i4<len4; i4++){const _errs54 = errors;if(typeof data20[i4] !== "string"){validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3+"/ext_critical/" + i4,schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs54 === errors;if(!valid12){break;}}}else {validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3+"/ext_critical",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid11 = _errs52 === errors;}else {var valid11 = true;}if(valid11){if(data16.relationship !== undefined){let data22 = data16.relationship;const _errs56 = errors;const _errs57 = errors;let valid13 = false;const _errs58 = errors;if(typeof data22 !== "string"){const err6 = {instancePath:instancePath+"/exchanges/" + i3+"/relationship",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/relationship/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!((data22 === "PROVIDER_RELATIONSHIP_DIRECT") || (data22 === "PROVIDER_RELATIONSHIP_RESELLER"))){const err7 = {instancePath:instancePath+"/exchanges/" + i3+"/relationship",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/relationship/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.relationship.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs58 === errors;valid13 = valid13 || _valid1;const _errs60 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err8 = {instancePath:instancePath+"/exchanges/" + i3+"/relationship",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/relationship/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs60){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err9 = {instancePath:instancePath+"/exchanges/" + i3+"/relationship",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/relationship/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err10 = {instancePath:instancePath+"/exchanges/" + i3+"/relationship",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/relationship/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs60 === errors;valid13 = valid13 || _valid1;if(!valid13){const err11 = {instancePath:instancePath+"/exchanges/" + i3+"/relationship",schemaPath:"#/$defs/fora.v1.AuthorizedExchange/properties/relationship/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs57;if(vErrors !== null){if(_errs57){vErrors.length = _errs57;}else {vErrors = null;}}}var valid11 = _errs56 === errors;}else {var valid11 = true;}}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/exchanges/" + i3,schemaPath:"#/$defs/fora.v1.AuthorizedExchange/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid9 = _errs42 === errors;if(!valid9){break;}}}else {validate20.errors = [{instancePath:instancePath+"/exchanges",schemaPath:"#/properties/exchanges/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data23 = data.ext;const _errs62 = errors;if(!(data23 && typeof data23 == "object" && !Array.isArray(data23))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs62 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data24 = data.ext_critical;const _errs64 = errors;if(errors === _errs64){if(Array.isArray(data24)){var valid14 = true;const len5 = data24.length;for(let i5=0; i5<len5; i5++){const _errs66 = errors;if(typeof data24[i5] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i5,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid14 = _errs66 === errors;if(!valid14){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs64 === errors;}else {var valid0 = true;}if(valid0){if(data.gnap_grant_endpoint !== undefined){const _errs68 = errors;if(typeof data.gnap_grant_endpoint !== "string"){validate20.errors = [{instancePath:instancePath+"/gnap_grant_endpoint",schemaPath:"#/properties/gnap_grant_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.hash_methods_supported !== undefined){let data27 = data.hash_methods_supported;const _errs70 = errors;if(errors === _errs70){if(Array.isArray(data27)){var valid15 = true;const len6 = data27.length;for(let i6=0; i6<len6; i6++){const _errs72 = errors;if(typeof data27[i6] !== "string"){validate20.errors = [{instancePath:instancePath+"/hash_methods_supported/" + i6,schemaPath:"#/properties/hash_methods_supported/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid15 = _errs72 === errors;if(!valid15){break;}}}else {validate20.errors = [{instancePath:instancePath+"/hash_methods_supported",schemaPath:"#/properties/hash_methods_supported/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs70 === errors;}else {var valid0 = true;}if(valid0){if(data.health_endpoint !== undefined){const _errs74 = errors;if(typeof data.health_endpoint !== "string"){validate20.errors = [{instancePath:instancePath+"/health_endpoint",schemaPath:"#/properties/health_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs74 === errors;}else {var valid0 = true;}if(valid0){if(data.max_intermediary_hops !== undefined){let data30 = data.max_intermediary_hops;const _errs76 = errors;if(!(((typeof data30 == "number") && (!(data30 % 1) && !isNaN(data30))) && (isFinite(data30)))){validate20.errors = [{instancePath:instancePath+"/max_intermediary_hops",schemaPath:"#/properties/max_intermediary_hops/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs76){if((typeof data30 == "number") && (isFinite(data30))){if(data30 > 2147483647 || isNaN(data30)){validate20.errors = [{instancePath:instancePath+"/max_intermediary_hops",schemaPath:"#/properties/max_intermediary_hops/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data30 < -2147483648 || isNaN(data30)){validate20.errors = [{instancePath:instancePath+"/max_intermediary_hops",schemaPath:"#/properties/max_intermediary_hops/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid0 = _errs76 === errors;}else {var valid0 = true;}if(valid0){if(data.name !== undefined){const _errs78 = errors;if(typeof data.name !== "string"){validate20.errors = [{instancePath:instancePath+"/name",schemaPath:"#/properties/name/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs78 === errors;}else {var valid0 = true;}if(valid0){if(data.oidc_issuer !== undefined){const _errs80 = errors;if(typeof data.oidc_issuer !== "string"){validate20.errors = [{instancePath:instancePath+"/oidc_issuer",schemaPath:"#/properties/oidc_issuer/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs80 === errors;}else {var valid0 = true;}if(valid0){if(data.operator !== undefined){const _errs82 = errors;if(typeof data.operator !== "string"){validate20.errors = [{instancePath:instancePath+"/operator",schemaPath:"#/properties/operator/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs82 === errors;}else {var valid0 = true;}if(valid0){if(data.operator_domain !== undefined){const _errs84 = errors;if(typeof data.operator_domain !== "string"){validate20.errors = [{instancePath:instancePath+"/operator_domain",schemaPath:"#/properties/operator_domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs84 === errors;}else {var valid0 = true;}if(valid0){if(data.pricing_models_supported !== undefined){let data35 = data.pricing_models_supported;const _errs86 = errors;if(errors === _errs86){if(Array.isArray(data35)){var valid16 = true;const len7 = data35.length;for(let i7=0; i7<len7; i7++){let data36 = data35[i7];const _errs88 = errors;const _errs89 = errors;let valid17 = false;const _errs90 = errors;if(typeof data36 !== "string"){const err12 = {instancePath:instancePath+"/pricing_models_supported/" + i7,schemaPath:"#/properties/pricing_models_supported/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!((((data36 === "PRICING_MODEL_UNSPECIFIED") || (data36 === "PRICING_MODEL_FREE")) || (data36 === "PRICING_MODEL_PER_UNIT")) || (data36 === "PRICING_MODEL_FLAT"))){const err13 = {instancePath:instancePath+"/pricing_models_supported/" + i7,schemaPath:"#/properties/pricing_models_supported/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema31.properties.pricing_models_supported.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs90 === errors;valid17 = valid17 || _valid2;const _errs92 = errors;if(!(((typeof data36 == "number") && (!(data36 % 1) && !isNaN(data36))) && (isFinite(data36)))){const err14 = {instancePath:instancePath+"/pricing_models_supported/" + i7,schemaPath:"#/properties/pricing_models_supported/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs92){if((typeof data36 == "number") && (isFinite(data36))){if(data36 > 2147483647 || isNaN(data36)){const err15 = {instancePath:instancePath+"/pricing_models_supported/" + i7,schemaPath:"#/properties/pricing_models_supported/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data36 < -2147483648 || isNaN(data36)){const err16 = {instancePath:instancePath+"/pricing_models_supported/" + i7,schemaPath:"#/properties/pricing_models_supported/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs92 === errors;valid17 = valid17 || _valid2;if(!valid17){const err17 = {instancePath:instancePath+"/pricing_models_supported/" + i7,schemaPath:"#/properties/pricing_models_supported/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs89;if(vErrors !== null){if(_errs89){vErrors.length = _errs89;}else {vErrors = null;}}}var valid16 = _errs88 === errors;if(!valid16){break;}}}else {validate20.errors = [{instancePath:instancePath+"/pricing_models_supported",schemaPath:"#/properties/pricing_models_supported/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs86 === errors;}else {var valid0 = true;}if(valid0){if(data.privacy_uri !== undefined){const _errs94 = errors;if(typeof data.privacy_uri !== "string"){validate20.errors = [{instancePath:instancePath+"/privacy_uri",schemaPath:"#/properties/privacy_uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs94 === errors;}else {var valid0 = true;}if(valid0){if(data.protocol_versions_supported !== undefined){let data38 = data.protocol_versions_supported;const _errs96 = errors;if(errors === _errs96){if(Array.isArray(data38)){var valid18 = true;const len8 = data38.length;for(let i8=0; i8<len8; i8++){const _errs98 = errors;if(typeof data38[i8] !== "string"){validate20.errors = [{instancePath:instancePath+"/protocol_versions_supported/" + i8,schemaPath:"#/properties/protocol_versions_supported/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid18 = _errs98 === errors;if(!valid18){break;}}}else {validate20.errors = [{instancePath:instancePath+"/protocol_versions_supported",schemaPath:"#/properties/protocol_versions_supported/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs96 === errors;}else {var valid0 = true;}if(valid0){if(data.role !== undefined){let data40 = data.role;const _errs100 = errors;const _errs101 = errors;let valid19 = false;const _errs102 = errors;if(typeof data40 !== "string"){const err18 = {instancePath:instancePath+"/role",schemaPath:"#/properties/role/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}if(!((((data40 === "ROLE_AGENT") || (data40 === "ROLE_EXCHANGE")) || (data40 === "ROLE_BROKER")) || (data40 === "ROLE_PUBLISHER"))){const err19 = {instancePath:instancePath+"/role",schemaPath:"#/properties/role/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema31.properties.role.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;}var _valid3 = _errs102 === errors;valid19 = valid19 || _valid3;const _errs104 = errors;if(!(((typeof data40 == "number") && (!(data40 % 1) && !isNaN(data40))) && (isFinite(data40)))){const err20 = {instancePath:instancePath+"/role",schemaPath:"#/properties/role/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(errors === _errs104){if((typeof data40 == "number") && (isFinite(data40))){if(data40 > 2147483647 || isNaN(data40)){const err21 = {instancePath:instancePath+"/role",schemaPath:"#/properties/role/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}else {if(data40 < -2147483648 || isNaN(data40)){const err22 = {instancePath:instancePath+"/role",schemaPath:"#/properties/role/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}}}}var _valid3 = _errs104 === errors;valid19 = valid19 || _valid3;if(!valid19){const err23 = {instancePath:instancePath+"/role",schemaPath:"#/properties/role/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs101;if(vErrors !== null){if(_errs101){vErrors.length = _errs101;}else {vErrors = null;}}}var valid0 = _errs100 === errors;}else {var valid0 = true;}if(valid0){if(data.supported_auth_methods !== undefined){let data41 = data.supported_auth_methods;const _errs106 = errors;if(errors === _errs106){if(Array.isArray(data41)){var valid20 = true;const len9 = data41.length;for(let i9=0; i9<len9; i9++){let data42 = data41[i9];const _errs108 = errors;const _errs109 = errors;let valid21 = false;const _errs110 = errors;if(typeof data42 !== "string"){const err24 = {instancePath:instancePath+"/supported_auth_methods/" + i9,schemaPath:"#/properties/supported_auth_methods/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}if(!(((((data42 === "AUTH_METHOD_UNSPECIFIED") || (data42 === "AUTH_METHOD_GNAP")) || (data42 === "AUTH_METHOD_OAUTH_DPOP")) || (data42 === "AUTH_METHOD_OAUTH_BEARER")) || (data42 === "AUTH_METHOD_OAUTH_MTLS"))){const err25 = {instancePath:instancePath+"/supported_auth_methods/" + i9,schemaPath:"#/properties/supported_auth_methods/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema31.properties.supported_auth_methods.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;}var _valid4 = _errs110 === errors;valid21 = valid21 || _valid4;const _errs112 = errors;if(!(((typeof data42 == "number") && (!(data42 % 1) && !isNaN(data42))) && (isFinite(data42)))){const err26 = {instancePath:instancePath+"/supported_auth_methods/" + i9,schemaPath:"#/properties/supported_auth_methods/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(errors === _errs112){if((typeof data42 == "number") && (isFinite(data42))){if(data42 > 2147483647 || isNaN(data42)){const err27 = {instancePath:instancePath+"/supported_auth_methods/" + i9,schemaPath:"#/properties/supported_auth_methods/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}else {if(data42 < -2147483648 || isNaN(data42)){const err28 = {instancePath:instancePath+"/supported_auth_methods/" + i9,schemaPath:"#/properties/supported_auth_methods/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}}}}var _valid4 = _errs112 === errors;valid21 = valid21 || _valid4;if(!valid21){const err29 = {instancePath:instancePath+"/supported_auth_methods/" + i9,schemaPath:"#/properties/supported_auth_methods/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs109;if(vErrors !== null){if(_errs109){vErrors.length = _errs109;}else {vErrors = null;}}}var valid20 = _errs108 === errors;if(!valid20){break;}}}else {validate20.errors = [{instancePath:instancePath+"/supported_auth_methods",schemaPath:"#/properties/supported_auth_methods/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs106 === errors;}else {var valid0 = true;}if(valid0){if(data.supported_profiles !== undefined){let data43 = data.supported_profiles;const _errs114 = errors;if(errors === _errs114){if(Array.isArray(data43)){var valid22 = true;const len10 = data43.length;for(let i10=0; i10<len10; i10++){const _errs116 = errors;if(typeof data43[i10] !== "string"){validate20.errors = [{instancePath:instancePath+"/supported_profiles/" + i10,schemaPath:"#/properties/supported_profiles/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid22 = _errs116 === errors;if(!valid22){break;}}}else {validate20.errors = [{instancePath:instancePath+"/supported_profiles",schemaPath:"#/properties/supported_profiles/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs114 === errors;}else {var valid0 = true;}if(valid0){if(data.terms_digest !== undefined){let data45 = data.terms_digest;const _errs118 = errors;if(errors === _errs118){if(typeof data45 === "string"){if(!pattern5.test(data45)){validate20.errors = [{instancePath:instancePath+"/terms_digest",schemaPath:"#/properties/terms_digest/pattern",keyword:"pattern",params:{pattern: "^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"},message:"must match pattern \""+"^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$"+"\""}];return false;}}else {validate20.errors = [{instancePath:instancePath+"/terms_digest",schemaPath:"#/properties/terms_digest/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs118 === errors;}else {var valid0 = true;}if(valid0){if(data.terms_uri !== undefined){const _errs120 = errors;if(typeof data.terms_uri !== "string"){validate20.errors = [{instancePath:instancePath+"/terms_uri",schemaPath:"#/properties/terms_uri/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs120 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs122 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs122 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+
+// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+
+/** The precompiled strict check of fora.v1.WellKnownManifest. */
+export const strict: StrictMessage = { message: "fora.v1.WellKnownManifest", validate: validate20, schema: schema31 };
diff --git a/gen/ts/strict/index.ts b/gen/ts/strict/index.ts
new file mode 100644
index 00000000..70b0568c
--- /dev/null
+++ b/gen/ts/strict/index.ts
@@ -0,0 +1,49 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+
+import type { StrictMessage } from "./types.ts";
+import { strict as m0 } from "./fora.admin.v1.SetReportingPolicyResponse.ts";
+import { strict as m1 } from "./fora.admin.v1.SetTenantFeeRateResponse.ts";
+import { strict as m2 } from "./fora.v1.BrokerTransactionResponse.ts";
+import { strict as m3 } from "./fora.v1.DiscoveryResponse.ts";
+import { strict as m4 } from "./fora.v1.DisputeResponse.ts";
+import { strict as m5 } from "./fora.v1.DomainVerificationChallenge.ts";
+import { strict as m6 } from "./fora.v1.DomainVerificationResult.ts";
+import { strict as m7 } from "./fora.v1.ErrorDetail.ts";
+import { strict as m8 } from "./fora.v1.GetAccountStatusResponse.ts";
+import { strict as m9 } from "./fora.v1.KeyRevocationList.ts";
+import { strict as m10 } from "./fora.v1.License.ts";
+import { strict as m11 } from "./fora.v1.PushResourcesResponse.ts";
+import { strict as m12 } from "./fora.v1.RefreshCatalogResponse.ts";
+import { strict as m13 } from "./fora.v1.RegisterResponse.ts";
+import { strict as m14 } from "./fora.v1.RemoveResourcesResponse.ts";
+import { strict as m15 } from "./fora.v1.ResourceResponse.ts";
+import { strict as m16 } from "./fora.v1.TransactionResponse.ts";
+import { strict as m17 } from "./fora.v1.UsageReportResponse.ts";
+import { strict as m18 } from "./fora.v1.WBAFile.ts";
+import { strict as m19 } from "./fora.v1.WellKnownManifest.ts";
+
+/** The precompiled strict check of every message the SDK checks by name. Importing this
+ * module carries all of them; a program that checks one message imports its module. */
+export const STRICT_MESSAGES: Readonly<Record<string, StrictMessage>> = {
+	"fora.admin.v1.SetReportingPolicyResponse": m0,
+	"fora.admin.v1.SetTenantFeeRateResponse": m1,
+	"fora.v1.BrokerTransactionResponse": m2,
+	"fora.v1.DiscoveryResponse": m3,
+	"fora.v1.DisputeResponse": m4,
+	"fora.v1.DomainVerificationChallenge": m5,
+	"fora.v1.DomainVerificationResult": m6,
+	"fora.v1.ErrorDetail": m7,
+	"fora.v1.GetAccountStatusResponse": m8,
+	"fora.v1.KeyRevocationList": m9,
+	"fora.v1.License": m10,
+	"fora.v1.PushResourcesResponse": m11,
+	"fora.v1.RefreshCatalogResponse": m12,
+	"fora.v1.RegisterResponse": m13,
+	"fora.v1.RemoveResourcesResponse": m14,
+	"fora.v1.ResourceResponse": m15,
+	"fora.v1.TransactionResponse": m16,
+	"fora.v1.UsageReportResponse": m17,
+	"fora.v1.WBAFile": m18,
+	"fora.v1.WellKnownManifest": m19,
+};
diff --git a/gen/ts/strict/types.ts b/gen/ts/strict/types.ts
new file mode 100644
index 00000000..edc08994
--- /dev/null
+++ b/gen/ts/strict/types.ts
@@ -0,0 +1,26 @@
+// Code generated by scripts/sdk-types/gen_strict_validators.mjs. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+
+/** One reason a precompiled strict validator refused a value, as ajv reports it. */
+export interface StrictValidationError {
+	instancePath: string;
+	schemaPath: string;
+	keyword: string;
+	params: Record<string, unknown>;
+	message?: string;
+}
+
+/** A precompiled strict validator: true when `data` passes, otherwise false with
+ * `errors` saying why. */
+export interface StrictValidator {
+	(data: unknown): boolean;
+	errors?: StrictValidationError[] | null;
+}
+
+/** One message's precompiled strict check: its fully-qualified name, the validator, and
+ * the strict schema it was compiled from, without annotations. */
+export interface StrictMessage {
+	readonly message: string;
+	readonly validate: StrictValidator;
+	readonly schema: Readonly<Record<string, unknown>>;
+}
diff --git a/scripts/ci-local.sh b/scripts/ci-local.sh
index 12a063b4..a397e069 100755
--- a/scripts/ci-local.sh
+++ b/scripts/ci-local.sh
@@ -126,10 +126,10 @@ else
   # for a removed message shows up as a deletion. base.py / base.ts / schemas.py and
   # gen/jsonschema/{jsonschema.go,README.md} are hand-written and never regenerated, so
   # they cannot drift.
-  if ! git diff --quiet HEAD -- gen/python/wire gen/ts/wire gen/jsonschema \
-     || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire gen/jsonschema)" ]; then
-    echo "::error:: SDK types export out of sync — run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/ + gen/jsonschema/."
-    git status --short -- gen/python/wire gen/ts/wire gen/jsonschema
+  if ! git diff --quiet HEAD -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema \
+     || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema)" ]; then
+    echo "::error:: SDK types export out of sync — run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/ + gen/ts/strict/ + gen/jsonschema/."
+    git status --short -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema
     fail=1
   else
     note "no drift"
diff --git a/scripts/gen-sdk-types.sh b/scripts/gen-sdk-types.sh
index 1ba1d7bb..1656e999 100755
--- a/scripts/gen-sdk-types.sh
+++ b/scripts/gen-sdk-types.sh
@@ -15,6 +15,9 @@
 #                                       rule datamodel-codegen drops; Zod gets it inline)
 #            --gen_jsonschema.py--------> gen/jsonschema/ (the published per-message JSON
 #                                       Schemas, default + strict; decisions in its header)
+#            --gen_strict_validators.mjs-> gen/ts/strict/ (the strict schemas the TS SDK
+#                                       checks by name, compiled by ajv at build time so no
+#                                       code is generated at run time; why in its header)
 #
 # gen/python/wire/base.py is hand-written (the seam) and NOT generated.
 # Prereqs: go, python3, node/npm. Provisions a throwaway venv + node_modules under
@@ -28,10 +31,10 @@ COMBINED="$WORK/combined.json"
 PY="$WORK/venv/bin/python"
 rm -rf "$WORK"; mkdir -p "$WORK" gen/python/wire gen/ts/wire gen/jsonschema
 
-echo "==> 1/5 JSON Schema from proto (bufbuild/protoschema)"
+echo "==> 1/6 JSON Schema from proto (bufbuild/protoschema)"
 (cd proto && buf generate --template ../scripts/sdk-types/buf.jsonschema.yaml -o "../$WORK")
 
-echo "==> 2/5 tools + merge (clean names; enums named from the descriptor)"
+echo "==> 2/6 tools + merge (clean names; enums named from the descriptor)"
 python3 -m venv "$WORK/venv"
 # Pinned AND hash-locked: generated output is byte-compared in CI, so every tool that
 # shapes it must be fixed. datamodel-code-generator emits the models; black formats them;
@@ -53,7 +56,7 @@ go run ./conformance/uniquegen "$WORK/unique_items.json"
 "$PY" scripts/sdk-types/merge_schema.py "$JS" gen/descriptor.binpb "$COMBINED" \
   "$WORK/required_fields.json" "$WORK/unique_items.json"
 
-echo "==> 3/5 Pydantic v2 (datamodel-code-generator, --base-class + --collapse-root-models)"
+echo "==> 3/6 Pydantic v2 (datamodel-code-generator, --base-class + --collapse-root-models)"
 "$WORK/venv/bin/datamodel-codegen" \
   --input "$COMBINED" --input-file-type jsonschema \
   --output gen/python/wire/models.py --output-model-type pydantic_v2.BaseModel \
@@ -73,19 +76,19 @@ PYEOF
 # The repeated.unique field map the wire/base.py seam enforces (see gen_unique_py.py).
 "$PY" scripts/sdk-types/gen_unique_py.py "$WORK/unique_items.json" gen/python/wire/unique.py
 
-echo "==> 4/5 Zod (json-schema-to-zod)"
+echo "==> 4/6 Zod (json-schema-to-zod)"
 # Pinned via a committed manifest + lockfile so `npm ci` installs the exact same
 # json-schema-to-zod/zod (and transitive) tree every run — the byte-compared
 # schemas.ts cannot drift on a transparent dependency bump.
 cp scripts/sdk-types/package.json scripts/sdk-types/package-lock.json "$WORK/"
-# --ignore-scripts: json-schema-to-zod + zod are pure JS (no native postinstall), so
+# --ignore-scripts: json-schema-to-zod, zod and ajv are pure JS (no native postinstall), so
 # no install-time code runs — this step produces the drift-gated schemas.ts, so it must
 # not execute third-party lifecycle scripts (which would run with the CI token in env).
 (cd "$WORK" && npm ci --no-audit --no-fund --ignore-scripts)
 cp scripts/sdk-types/gen_zod.mjs "$WORK/gen_zod.mjs"
 node "$WORK/gen_zod.mjs" "$COMBINED" gen/ts/wire/schemas.ts
 
-echo "==> 5/5 published JSON Schemas (gen/jsonschema/)"
+echo "==> 5/6 published JSON Schemas (gen/jsonschema/)"
 # The same protoschema output the models above are generated from, kept as release
 # artifacts instead of discarded: one self-contained file per contract message, in a
 # default and a strict variant. The wire decisions (field naming, Struct, int64) are
@@ -93,4 +96,9 @@ echo "==> 5/5 published JSON Schemas (gen/jsonschema/)"
 "$PY" scripts/sdk-types/gen_jsonschema.py "$JS" gen/descriptor.binpb \
   "$WORK/required_fields.json" "$WORK/unique_items.json" gen/jsonschema
 
-echo "==> done: gen/python/wire/models.py, gen/python/wire/unique.py, gen/ts/wire/schemas.ts, gen/jsonschema/"
+echo "==> 6/6 precompiled strict validators (gen/ts/strict/)"
+# From the strict schemas step 5 wrote, with the ajv the pinned manifest above installed.
+cp scripts/sdk-types/gen_strict_validators.mjs "$WORK/gen_strict_validators.mjs"
+(cd "$WORK" && node gen_strict_validators.mjs ../gen/jsonschema ../gen/ts/strict)
+
+echo "==> done: gen/python/wire/models.py, gen/python/wire/unique.py, gen/ts/wire/schemas.ts, gen/jsonschema/, gen/ts/strict/"
diff --git a/scripts/sdk-types/gen_strict_validators.mjs b/scripts/sdk-types/gen_strict_validators.mjs
new file mode 100644
index 00000000..343c6f6f
--- /dev/null
+++ b/scripts/sdk-types/gen_strict_validators.mjs
@@ -0,0 +1,209 @@
+// Generate the precompiled strict validators the TypeScript SDK checks a message with,
+// into gen/ts/strict/: one module per message, plus types.ts and index.ts.
+//
+// The strict check validates a payload against the published STRICT JSON Schema of its
+// message (gen/jsonschema/<message>.schema.strict.json). Compiling that schema with ajv at
+// run time builds the validator from strings, which an edge runtime refuses: Cloudflare
+// Workers throws "EvalError: Code generation from strings disallowed for this context".
+// So the validators are compiled HERE, with ajv's standalone code generation, and
+// committed as plain modules. No code is generated at run time on any runtime.
+//
+// Each module is self-contained: ajv's one runtime helper the schemas need, ucs2length
+// (a string's length in code points, the unit JSON Schema's minLength/maxLength count
+// in), is written into the module instead of required from ajv. Any other runtime
+// helper fails the generation, so a schema change that needs one is noticed here rather
+// than at run time.
+//
+// The schema compiled is the strict schema without its annotations (description, title,
+// $comment, examples), which validation never reads. The same reduced schema is exported
+// beside the validator: the SDK's null-normalization walks it, and it keeps a reader that
+// imports one message from carrying every description of the message graph.
+//
+// One module per message, so a bundler keeps only the messages a program checks.
+//
+//   node gen_strict_validators.mjs <gen/jsonschema dir> <out dir>   (run from the dir
+//   whose node_modules has the pinned ajv, as gen_zod.mjs is)
+import fs from "node:fs";
+import path from "node:path";
+import { createRequire } from "node:module";
+
+const require = createRequire(path.join(process.cwd(), "package.json"));
+const Ajv2020 = require("ajv/dist/2020").default;
+const standaloneCode = require("ajv/dist/standalone").default;
+const ajvVersion = require("ajv/package.json").version;
+
+// The messages the SDK checks by name: what a client verb decodes, the ErrorDetail an
+// error answer carries, and the four documents the readers fetch. This list is the one
+// copy; sdk/ts/src/strict.ts reads it through the generated index.
+const MESSAGES = [
+  "fora.admin.v1.SetReportingPolicyResponse",
+  "fora.admin.v1.SetTenantFeeRateResponse",
+  "fora.v1.BrokerTransactionResponse",
+  "fora.v1.DiscoveryResponse",
+  "fora.v1.DisputeResponse",
+  "fora.v1.DomainVerificationChallenge",
+  "fora.v1.DomainVerificationResult",
+  "fora.v1.ErrorDetail",
+  "fora.v1.GetAccountStatusResponse",
+  "fora.v1.KeyRevocationList",
+  "fora.v1.License",
+  "fora.v1.PushResourcesResponse",
+  "fora.v1.RefreshCatalogResponse",
+  "fora.v1.RegisterResponse",
+  "fora.v1.RemoveResourcesResponse",
+  "fora.v1.ResourceResponse",
+  "fora.v1.TransactionResponse",
+  "fora.v1.UsageReportResponse",
+  "fora.v1.WBAFile",
+  "fora.v1.WellKnownManifest",
+];
+
+const [, , schemaDir, outDir] = process.argv;
+if (!schemaDir || !outDir) {
+  console.error("usage: node gen_strict_validators.mjs <gen/jsonschema dir> <out dir>");
+  process.exit(2);
+}
+
+const ANNOTATIONS = new Set(["description", "title", "$comment", "examples"]);
+// Keywords whose value maps a name to a schema: the names are data, the values schemas.
+const SCHEMA_MAPS = new Set(["properties", "$defs", "patternProperties", "dependentSchemas"]);
+// Keywords whose value is one schema, or a list of schemas.
+const SCHEMA_ONE = new Set([
+  "items", "additionalProperties", "not", "if", "then", "else", "contains",
+  "propertyNames", "unevaluatedProperties", "unevaluatedItems",
+]);
+const SCHEMA_LIST = new Set(["anyOf", "allOf", "oneOf", "prefixItems"]);
+
+// withoutAnnotations returns `node` with the annotation keywords removed from every
+// schema in it. A property NAMED "description" is data and is kept.
+function withoutAnnotations(node) {
+  if (node === null || typeof node !== "object" || Array.isArray(node)) return node;
+  const out = {};
+  for (const [k, v] of Object.entries(node)) {
+    if (ANNOTATIONS.has(k)) continue;
+    if (SCHEMA_MAPS.has(k) && v !== null && typeof v === "object") {
+      out[k] = Object.fromEntries(Object.entries(v).map(([name, s]) => [name, withoutAnnotations(s)]));
+    } else if (SCHEMA_ONE.has(k)) {
+      out[k] = withoutAnnotations(v);
+    } else if (SCHEMA_LIST.has(k) && Array.isArray(v)) {
+      out[k] = v.map(withoutAnnotations);
+    } else {
+      out[k] = v;
+    }
+  }
+  return out;
+}
+
+const UCS2LENGTH = `// ucs2length is ajv's runtime helper, written in: a string's length in code points.
+function ucs2length(str) {
+  const len = str.length;
+  let length = 0;
+  let pos = 0;
+  let value;
+  while (pos < len) {
+    length++;
+    value = str.charCodeAt(pos++);
+    if (value >= 0xd800 && value <= 0xdbff && pos < len) {
+      value = str.charCodeAt(pos);
+      if ((value & 0xfc00) === 0xdc00) pos++;
+    }
+  }
+  return length;
+}
+`;
+
+function moduleFor(message) {
+  const source = path.join(schemaDir, `${message}.schema.strict.json`);
+  const schema = withoutAnnotations(JSON.parse(fs.readFileSync(source, "utf8")));
+  // The options the run-time compile used: strict, `format` an annotation, and no
+  // registration under $id.
+  const ajv = new Ajv2020({
+    strict: true,
+    validateFormats: false,
+    addUsedSchema: false,
+    code: { source: true, esm: true },
+  });
+  let code = standaloneCode(ajv, ajv.compile(schema));
+
+  // ajv opens with these exports; the module exports one typed value instead.
+  const head = /^"use strict";export const validate = (validate\d+);export default \1;const (schema\d+) = /;
+  const m = code.match(head);
+  if (m === null) throw new Error(`${message}: ajv's standalone output no longer starts as expected`);
+  const [, validateName, schemaName] = m;
+  code = code.replace(head, `const ${schemaName} = `);
+
+  let helpers = "";
+  code = code.replace(/require\("ajv\/dist\/runtime\/ucs2length"\)\.default/g, () => {
+    helpers = UCS2LENGTH;
+    return "ucs2length";
+  });
+  const leftover = code.match(/require\([^)]*\)/);
+  if (leftover !== null) throw new Error(`${message}: needs ajv runtime helper ${leftover[0]}, which is not written in`);
+
+  return `// Code generated by scripts/sdk-types/gen_strict_validators.mjs from
+// gen/jsonschema/${message}.schema.strict.json, with ajv ${ajvVersion} standalone. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+// @ts-nocheck
+import type { StrictMessage } from "./types.ts";
+
+${code}
+
+${helpers}
+/** The precompiled strict check of ${message}. */
+export const strict: StrictMessage = { message: "${message}", validate: ${validateName}, schema: ${schemaName} };
+`;
+}
+
+const TYPES = `// Code generated by scripts/sdk-types/gen_strict_validators.mjs. DO NOT EDIT.
+// Regenerate: scripts/gen-sdk-types.sh
+
+/** One reason a precompiled strict validator refused a value, as ajv reports it. */
+export interface StrictValidationError {
+	instancePath: string;
+	schemaPath: string;
+	keyword: string;
+	params: Record<string, unknown>;
+	message?: string;
+}
+
+/** A precompiled strict validator: true when \`data\` passes, otherwise false with
+ * \`errors\` saying why. */
+export interface StrictValidator {
+	(data: unknown): boolean;
+	errors?: StrictValidationError[] | null;
+}
+
+/** One message's precompiled strict check: its fully-qualified name, the validator, and
+ * the strict schema it was compiled from, without annotations. */
+export interface StrictMessage {
+	readonly message: string;
+	readonly validate: StrictValidator;
+	readonly schema: Readonly<Record<string, unknown>>;
+}
+`;
+
+function indexModule() {
+  const lines = [
+    "// Code generated by scripts/sdk-types/gen_strict_validators.mjs. DO NOT EDIT.",
+    "// Regenerate: scripts/gen-sdk-types.sh",
+    "",
+    'import type { StrictMessage } from "./types.ts";',
+  ];
+  MESSAGES.forEach((m, i) => lines.push(`import { strict as m${i} } from "./${m}.ts";`));
+  lines.push(
+    "",
+    "/** The precompiled strict check of every message the SDK checks by name. Importing this",
+    " * module carries all of them; a program that checks one message imports its module. */",
+    "export const STRICT_MESSAGES: Readonly<Record<string, StrictMessage>> = {",
+  );
+  MESSAGES.forEach((m, i) => lines.push(`\t"${m}": m${i},`));
+  lines.push("};", "");
+  return lines.join("\n");
+}
+
+fs.rmSync(outDir, { recursive: true, force: true });
+fs.mkdirSync(outDir, { recursive: true });
+fs.writeFileSync(path.join(outDir, "types.ts"), TYPES);
+for (const m of MESSAGES) fs.writeFileSync(path.join(outDir, `${m}.ts`), moduleFor(m));
+fs.writeFileSync(path.join(outDir, "index.ts"), indexModule());
+console.log(`wrote ${MESSAGES.length} strict validators to ${outDir}`);
diff --git a/scripts/sdk-types/package-lock.json b/scripts/sdk-types/package-lock.json
index f0c45768..0610df46 100644
--- a/scripts/sdk-types/package-lock.json
+++ b/scripts/sdk-types/package-lock.json
@@ -6,10 +6,49 @@
     "": {
       "name": "fora-sdk-types-work",
       "dependencies": {
+        "ajv": "8.20.0",
         "json-schema-to-zod": "2.8.1",
         "zod": "4.4.3"
       }
     },
+    "node_modules/ajv": {
+      "version": "8.20.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+      "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+      "license": "MIT"
+    },
+    "node_modules/fast-uri": {
+      "version": "3.1.8",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
     "node_modules/json-schema-to-zod": {
       "version": "2.8.1",
       "resolved": "https://registry.npmjs.org/json-schema-to-zod/-/json-schema-to-zod-2.8.1.tgz",
@@ -19,6 +58,21 @@
         "json-schema-to-zod": "dist/cjs/cli.js"
       }
     },
+    "node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "license": "MIT"
+    },
+    "node_modules/require-from-string": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
+      "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/zod": {
       "version": "4.4.3",
       "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
diff --git a/scripts/sdk-types/package.json b/scripts/sdk-types/package.json
index 69ae9889..857418c3 100644
--- a/scripts/sdk-types/package.json
+++ b/scripts/sdk-types/package.json
@@ -4,6 +4,7 @@
   "type": "module",
   "description": "Pinned toolchain for the Zod types export (scripts/gen-sdk-types.sh copies this + the lockfile into .sdk-types-work and runs `npm ci`). Byte-compared output — bump deliberately, then regenerate and review.",
   "dependencies": {
+    "ajv": "8.20.0",
     "json-schema-to-zod": "2.8.1",
     "zod": "4.4.3"
   }
diff --git a/sdk/ts/core/directory-response.ts b/sdk/ts/core/directory-response.ts
index 238bacaa..4bef15bd 100644
--- a/sdk/ts/core/directory-response.ts
+++ b/sdk/ts/core/directory-response.ts
@@ -116,7 +116,7 @@ function headerOf(headers: ResponseHeaders, name: string): string | undefined {
 export interface VerifyDirectoryResponseOptions {
 	/** The Ed25519 verify primitive, the same type verifyAgentBinding takes, so a runtime
 	 * without WebCrypto Ed25519 can supply its own. Defaults to WebCrypto crypto.subtle. */
-	verifyEd25519?: Ed25519Verify;
+	verifyEd25519?: Ed25519Verify | undefined;
 }
 
 /**
diff --git a/sdk/ts/package-lock.json b/sdk/ts/package-lock.json
index 72f0cbfa..7b4809af 100644
--- a/sdk/ts/package-lock.json
+++ b/sdk/ts/package-lock.json
@@ -15,6 +15,7 @@
       "devDependencies": {
         "@cloudflare/workers-types": "5.20261005.1",
         "@types/node": "^26.1.0",
+        "esbuild": "0.21.5",
         "typescript": "^6.0.3",
         "vitest": "^2.1.0",
         "web-bot-auth": "0.2.0",
diff --git a/sdk/ts/package.json b/sdk/ts/package.json
index aee8d585..a3ca8e7f 100644
--- a/sdk/ts/package.json
+++ b/sdk/ts/package.json
@@ -60,6 +60,7 @@
   "devDependencies": {
     "@cloudflare/workers-types": "5.20261005.1",
     "@types/node": "^26.1.0",
+    "esbuild": "0.21.5",
     "typescript": "^6.0.3",
     "vitest": "^2.1.0",
     "web-bot-auth": "0.2.0",
diff --git a/sdk/ts/resolvers/documents.ts b/sdk/ts/resolvers/documents.ts
index 08ab35c7..edd1978e 100644
--- a/sdk/ts/resolvers/documents.ts
+++ b/sdk/ts/resolvers/documents.ts
@@ -43,10 +43,15 @@ import {
 } from "../../../gen/ts/wire/schemas.ts";
 import { verifyDirectoryResponse } from "../core/directory-response.ts";
 import { decodeBase64UrlStrict } from "../src/base64url.ts";
+import type { Ed25519Verify } from "../src/pop.ts";
 import { invalidHost } from "../src/host-ref.ts";
 import { isBareHost } from "../src/hosts.ts";
 import { thumbprint } from "../src/thumbprint.ts";
-import { StrictViolation, checkStrict } from "../src/strict.ts";
+import { type StrictMessage, StrictViolation, checkStrictOf } from "../src/strict-core.ts";
+import { strict as KEY_REVOCATION_LIST_STRICT } from "../../../gen/ts/strict/fora.v1.KeyRevocationList.ts";
+import { strict as LICENSE_STRICT } from "../../../gen/ts/strict/fora.v1.License.ts";
+import { strict as WBA_FILE_STRICT } from "../../../gen/ts/strict/fora.v1.WBAFile.ts";
+import { strict as WELL_KNOWN_MANIFEST_STRICT } from "../../../gen/ts/strict/fora.v1.WellKnownManifest.ts";
 import { manifestVersionRefusal, WellKnownPath } from "../src/wire.ts";
 import {
 	DigestMismatch,
@@ -121,6 +126,19 @@ export interface ReadDocumentOptions {
 	fetch: FetchLike;
 	/** Used when a reader builds the URL from a domain. Defaults to https. */
 	scheme?: string;
+	/** The Ed25519 verify primitive readWBADirectory checks the directory's response
+	 * signatures with, for a runtime without WebCrypto Ed25519. Defaults to WebCrypto. */
+	verifyEd25519?: Ed25519Verify;
+}
+
+/** How the resolvers' lenient directory read checks a response. */
+export interface DirectoryReadOptions {
+	/** The epoch-ms clock the response signatures' windows are judged against. Defaults
+	 * to Date.now(). */
+	now?: number | undefined;
+	/** The Ed25519 verify primitive the response signatures are checked with. Defaults to
+	 * WebCrypto. */
+	verifyEd25519?: Ed25519Verify | undefined;
 }
 
 // --- the shared reads: one fetch-and-decode per document --------------------------------
@@ -152,10 +170,14 @@ export async function fetchManifest(
  * member is a newer minor version, not a reason to stop verifying. The media type must be
  * WBA_DIRECTORY_MEDIA_TYPE. The file returned lists only the keys that signed the
  * response (signedDirectoryKeys), so no caller can hand out a key the directory did not
- * sign for. `now` is the epoch-ms clock the response signatures' windows are judged
- * against. The one read of a directory the WBA key resolver and the offer-directory
+ * sign for. `opts` carries the clock the response signatures' windows are judged against
+ * and the Ed25519 primitive they are checked with. The one read of a directory the WBA key resolver and the offer-directory
  * fetch share, so the two never drift. Every failure throws DirectoryUnavailable. */
-export async function fetchWBAFile(fetchFn: FetchLike, url: string, now: number = Date.now()): Promise<WBAFile> {
+export async function fetchWBAFile(
+	fetchFn: FetchLike,
+	url: string,
+	opts: DirectoryReadOptions = {},
+): Promise<WBAFile> {
 	const fetched = await fetchDocument(fetchFn, url, { noRedirect: true });
 	if (fetched.mediaType !== WBA_DIRECTORY_MEDIA_TYPE) {
 		throw new DirectoryUnavailable(`wba directory ${url}`, {
@@ -164,7 +186,7 @@ export async function fetchWBAFile(fetchFn: FetchLike, url: string, now: number
 	}
 	const file = lenient(fetched, WBAFileSchema, "wba directory decode");
 	try {
-		return await signedDirectoryKeys(fetched, file, now);
+		return await signedDirectoryKeys(fetched, file, opts.now ?? Date.now(), opts.verifyEd25519);
 	} catch (err) {
 		throw new DirectoryUnavailable(`wba directory signature ${url}`, { cause: err });
 	}
@@ -172,13 +194,19 @@ export async function fetchWBAFile(fetchFn: FetchLike, url: string, now: number
 
 /**
  * signedDirectoryKeys returns a copy of `file` listing only the keys whose response
- * signature verifies, checked against the authority `fetched` was read from. A key that
+ * signature verifies, checked against the authority `fetched` was read from, through
+ * `verifyEd25519` when one is given and WebCrypto otherwise. A key that
  * is not an Ed25519 key cannot sign and is dropped with the rest. It throws for a
  * response listing keys that cannot be checked at all: a Content-Digest that does not
  * match the body, or no response signature. A directory listing no key has nothing to
  * sign and is returned as it is.
  */
-export async function signedDirectoryKeys(fetched: Fetched, file: WBAFile, now: number): Promise<WBAFile> {
+export async function signedDirectoryKeys(
+	fetched: Fetched,
+	file: WBAFile,
+	now: number,
+	verifyEd25519?: Ed25519Verify,
+): Promise<WBAFile> {
 	const keys = file.keys ?? [];
 	if (keys.length === 0) return file;
 	const pubs = keys.map(wbaPublicKey);
@@ -188,6 +216,7 @@ export async function signedDirectoryKeys(fetched: Fetched, file: WBAFile, now:
 		fetched.body as Uint8Array<ArrayBuffer>,
 		pubs.filter((p): p is Uint8Array<ArrayBuffer> => p !== undefined),
 		Math.floor(now / 1000),
+		{ verifyEd25519 },
 	);
 	const signed: typeof keys = [];
 	for (const [i, key] of keys.entries()) {
@@ -233,10 +262,10 @@ function lenient<T>(fetched: Fetched, schema: { parse(v: unknown): T }, what: st
 
 // --- the checks a public reader applies ------------------------------------------------
 
-/** What the contract says about one document: its message, and the media type it is
- * served under when the protocol names one. */
+/** What the contract says about one document: its message's strict check, compiled at
+ * build time, and the media type it is served under when the protocol names one. */
 export interface DocumentKind<T> {
-	message: string;
+	strict: StrictMessage;
 	schema: { safeParse: (v: unknown) => { success: boolean; data?: unknown } };
 	mediaType: string | undefined;
 	/** Whether `ver` is read before any other member (the manifest's rule). */
@@ -246,19 +275,19 @@ export interface DocumentKind<T> {
 }
 
 export const MANIFEST: DocumentKind<WellKnownManifest> = {
-	message: "fora.v1.WellKnownManifest",
+	strict: WELL_KNOWN_MANIFEST_STRICT,
 	schema: WellKnownManifestSchema,
 	mediaType: MANIFEST_MEDIA_TYPE,
 	versionGate: true,
 };
 export const WBA_DIRECTORY: DocumentKind<WBAFile> = {
-	message: "fora.v1.WBAFile",
+	strict: WBA_FILE_STRICT,
 	schema: WBAFileSchema,
 	mediaType: WBA_DIRECTORY_MEDIA_TYPE,
 	versionGate: false,
 };
 export const REVOCATION_LIST: DocumentKind<KeyRevocationList> = {
-	message: "fora.v1.KeyRevocationList",
+	strict: KEY_REVOCATION_LIST_STRICT,
 	schema: KeyRevocationListSchema,
 	mediaType: undefined,
 	versionGate: false,
@@ -291,14 +320,14 @@ export function accept<T>(kind: DocumentKind<T>, fetched: Fetched): Document<T>
 		const refusal = manifestVersionRefusal(ver);
 		if (refusal !== undefined) throw new ManifestVersionRefused(refusal);
 	}
-	checkStrict(kind.message, payload);
+	checkStrictOf(payload, kind.strict);
 	const parsed = parseWire<T>(kind.schema, payload);
 	if (!parsed.success) {
 		// A value the schema leaves to the parse, such as a timestamp that is not RFC 3339,
 		// is the document breaking its message all the same. The model also names an enum
 		// by its value name, so an enum written as its number, which the schema admits and
 		// the Go reader accepts, is refused here.
-		throw new StrictViolation(kind.message, "the generated model refused the document");
+		throw new StrictViolation(kind.strict.message, "the generated model refused the document");
 	}
 	return { message: parsed.data, mediaType: fetched.mediaType, url: fetched.url, body: fetched.body };
 }
@@ -372,7 +401,8 @@ export async function readManifest(
  * The directory is fetched with no redirect: a redirect fails the fetch. The media type
  * must be application/http-message-signatures-directory+json, the body must pass the
  * strict WBAFile schema and the cross-field rules, and the response must carry a valid
- * response signature by every key it lists. Key validity windows and revocation are not
+ * response signature by every key it lists, checked through `opts.verifyEd25519` when one
+ * is given. Key validity windows and revocation are not
  * evaluated: that is the WBA key resolver's job, and a directory listing an expired key
  * is still a well-formed directory. Throws an Error for a value that is neither a URL nor
  * a bare host; DirectoryUnavailable; MediaTypeRefused; StrictViolation; and
@@ -391,7 +421,7 @@ export async function readWBADirectory(
 	const doc = accept(WBA_DIRECTORY, fetched);
 	let signed: WBAFile;
 	try {
-		signed = await signedDirectoryKeys(fetched, doc.message, Date.now());
+		signed = await signedDirectoryKeys(fetched, doc.message, Date.now(), opts.verifyEd25519);
 	} catch (err) {
 		throw new DirectoryResponseUnsigned(`${url}: ${(err as Error).message}`, { cause: err });
 	}
@@ -443,7 +473,7 @@ export async function readLicenseDocument(
 		throw new Error("license carries no uri: there is no document to read");
 	}
 	// Through JSON, as it travels: a member set to undefined is an absent member.
-	checkStrict("fora.v1.License", JSON.parse(JSON.stringify(license)));
+	checkStrictOf(JSON.parse(JSON.stringify(license)), LICENSE_STRICT);
 	const fetched = await fetchDocument(opts.fetch, license.uri);
 	return verifyDigest(license.uri_digest ?? "", fetched);
 }
diff --git a/sdk/ts/resolvers/edge.ts b/sdk/ts/resolvers/edge.ts
index 76ec2906..e54380b5 100644
--- a/sdk/ts/resolvers/edge.ts
+++ b/sdk/ts/resolvers/edge.ts
@@ -60,7 +60,7 @@ export {
 	type WellKnownRequirementsOptions,
 	type WellKnownRequirementsReader,
 } from "./registration-requirements.ts";
-export { StrictViolation } from "../src/strict.ts";
+export { StrictViolation } from "../src/strict-core.ts";
 export { allowedScheme, blockedAddress } from "./ssrf.ts";
 export { createStaticKeyResolver, type StaticKeyResolver } from "./static.ts";
 export {
diff --git a/sdk/ts/resolvers/offer-key-cache.ts b/sdk/ts/resolvers/offer-key-cache.ts
index 2b5cde19..9a136abe 100644
--- a/sdk/ts/resolvers/offer-key-cache.ts
+++ b/sdk/ts/resolvers/offer-key-cache.ts
@@ -28,6 +28,7 @@
 
 import type { WBAFileSchema } from "../../../gen/ts/wire/schemas.ts";
 import type { OfferKeyResolver } from "../core/verifier.ts";
+import type { Ed25519Verify } from "../src/pop.ts";
 import { fetchWBAFile, wbaDirectoryURL } from "./documents.ts";
 import type { FetchLike } from "./fetch.ts";
 import { activeEd25519KeyWithExpiryScreened } from "./wba.ts";
@@ -227,6 +228,9 @@ export interface WBAOfferDirectoryFetchOptions {
 	fetch: FetchLike;
 	scheme?: string;
 	port?: string;
+	/** The Ed25519 verify primitive the directory's response signatures are checked with,
+	 * for a runtime without WebCrypto Ed25519. Defaults to WebCrypto. */
+	verifyEd25519?: Ed25519Verify;
 }
 
 /**
@@ -250,10 +254,9 @@ export function createWBAOfferDirectoryFetch(opts: WBAOfferDirectoryFetchOptions
 	const port = opts.port ?? "";
 	return async (domain: string) => {
 		try {
-			return await fetchWBAFile(
-				fetchFn,
-				wbaDirectoryURL(scheme, joinDirectoryHost(domain, port)),
-			);
+			return await fetchWBAFile(fetchFn, wbaDirectoryURL(scheme, joinDirectoryHost(domain, port)), {
+				verifyEd25519: opts.verifyEd25519,
+			});
 		} catch {
 			return undefined;
 		}
diff --git a/sdk/ts/resolvers/wba.ts b/sdk/ts/resolvers/wba.ts
index 75d0c895..749f0122 100644
--- a/sdk/ts/resolvers/wba.ts
+++ b/sdk/ts/resolvers/wba.ts
@@ -17,6 +17,7 @@ import type {
 	WBAFileSchema,
 } from "../../../gen/ts/wire/schemas.ts";
 import { decodeBase64UrlStrict } from "../src/base64url.ts";
+import type { Ed25519Verify } from "../src/pop.ts";
 import { hostAnchored } from "../src/hosts.ts";
 import { thumbprint } from "../src/thumbprint.ts";
 import {
@@ -63,6 +64,10 @@ export interface WBAKeyResolverOptions {
 	after?: (ms: number) => Promise<void>;
 	onPollArmed?: () => void;
 	onPollCycle?: () => void;
+	/** The Ed25519 verify primitive a directory's response signatures are checked with,
+	 * for a runtime without WebCrypto Ed25519 (Fastly Compute). Defaults to WebCrypto.
+	 * Without a working primitive every listed key reads as unsigned and none resolves. */
+	verifyEd25519?: Ed25519Verify;
 	/** The transport directories and revocation lists are fetched through. Required
 	 * here; the Node entry's createWBAKeyResolver defaults it to the SSRF-guarded
 	 * transport, because the directory host comes from the request-supplied
@@ -115,6 +120,7 @@ class WBAResolverImpl implements WBAKeyResolver {
 	private readonly onPollArmed: (() => void) | undefined;
 	private readonly onPollCycle: (() => void) | undefined;
 	private readonly fetchFn: FetchLike;
+	private readonly verifyEd25519: Ed25519Verify | undefined;
 	private readonly dirCache = new Map<string, DirEntry>();
 	private readonly revSnapshots = new Map<string, RevSet>();
 	// lastSync throttles the unknown-thumbprint force-refresh to one per debounce
@@ -140,6 +146,7 @@ class WBAResolverImpl implements WBAKeyResolver {
 		this.onPollArmed = opts.onPollArmed;
 		this.onPollCycle = opts.onPollCycle;
 		this.fetchFn = opts.fetch;
+		this.verifyEd25519 = opts.verifyEd25519;
 	}
 
 	async resolve(
@@ -232,7 +239,10 @@ class WBAResolverImpl implements WBAKeyResolver {
 	}
 
 	private fetchDirectory(base: string): Promise<WBAFile> {
-		return fetchWBAFile(this.fetchFn, base + WBA_DIRECTORY_PATH, this.now());
+		return fetchWBAFile(this.fetchFn, base + WBA_DIRECTORY_PATH, {
+			now: this.now(),
+			verifyEd25519: this.verifyEd25519,
+		});
 	}
 
 	private isRevoked(host: string, thumbprintKey: string): boolean {
diff --git a/sdk/ts/scripts/build.mjs b/sdk/ts/scripts/build.mjs
index d23763c0..16ec95d0 100644
--- a/sdk/ts/scripts/build.mjs
+++ b/sdk/ts/scripts/build.mjs
@@ -29,7 +29,7 @@ rmSync(stage, { recursive: true, force: true });
 rmSync(dist, { recursive: true, force: true });
 // gen/jsonschema is staged too: the client's strict decoding imports the strict schemas
 // as JSON modules, so they must resolve inside the compilation root.
-for (const dir of ["gen/ts/wire", "gen/ts/vocab", "gen/jsonschema"]) cpSync(join(repo, dir), join(stage, dir), { recursive: true });
+for (const dir of ["gen/ts/wire", "gen/ts/vocab", "gen/ts/strict", "gen/jsonschema"]) cpSync(join(repo, dir), join(stage, dir), { recursive: true });
 for (const dir of ["src", "core", "client", "hono", "resolvers"]) cpSync(join(pkgDir, dir), join(stage, "sdk/ts", dir), { recursive: true });
 
 execFileSync("npx", ["tsc", "-p", "tsconfig.build.json"], { cwd: pkgDir, stdio: "inherit" });
diff --git a/sdk/ts/src/strict-core.ts b/sdk/ts/src/strict-core.ts
new file mode 100644
index 00000000..00040c2b
--- /dev/null
+++ b/sdk/ts/src/strict-core.ts
@@ -0,0 +1,148 @@
+// The strict check's engine: null-normalization, the cross-field rules, and the refusal
+// type. It imports no validator compiler, so a program that checks one message with its
+// precompiled validator (gen/ts/strict/<message>.ts) carries that message and nothing
+// else. ./strict.ts is the check by message name, built on this module; the description
+// of what the strict check is lives there.
+
+import type { StrictMessage, StrictValidator } from "../../../gen/ts/strict/types.ts";
+import { crossFieldRuleIds, hasCrossFieldRules } from "./crossfield.ts";
+
+export type { StrictMessage, StrictValidator } from "../../../gen/ts/strict/types.ts";
+
+type Node = Record<string, unknown>;
+
+function isNode(v: unknown): v is Node {
+	return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+const DEFS_PREFIX = "#/$defs/";
+
+/** One message instance the cross-field rules are checked on. */
+interface Found {
+	message: string;
+	path: string;
+	value: Node;
+}
+
+/**
+ * normalize returns a copy of `instance` with null members of message objects removed,
+ * guided by the schema, and collects every message instance whose type carries
+ * cross-field rules. A key the schema does not declare is kept, so the schema refuses it.
+ */
+function normalize(
+	instance: unknown,
+	node: unknown,
+	defs: Node,
+	path: string,
+	found: Found[],
+): unknown {
+	if (!isNode(node)) return instance;
+	const ref = node["$ref"];
+	if (typeof ref === "string" && ref.startsWith(DEFS_PREFIX)) {
+		const name = ref.slice(DEFS_PREFIX.length);
+		return normalizeMessage(instance, defs[name], defs, path, found, name);
+	}
+	if (Array.isArray(instance) && node["items"] !== undefined) {
+		return instance.map((item, i) => normalize(item, node["items"], defs, `${path}/${i}`, found));
+	}
+	const properties = node["properties"];
+	if (isNode(properties)) return normalizeMessage(instance, node, defs, path, found, undefined);
+	const values = node["additionalProperties"];
+	if (isNode(instance) && isNode(values)) {
+		const out: Node = {};
+		for (const [k, v] of Object.entries(instance)) {
+			setMember(out, k, normalize(v, values, defs, `${path}/${k}`, found));
+		}
+		return out;
+	}
+	// A Struct, a Value, a scalar or an enum: left exactly as it arrived.
+	return instance;
+}
+
+function normalizeMessage(
+	instance: unknown,
+	node: unknown,
+	defs: Node,
+	path: string,
+	found: Found[],
+	name: string | undefined,
+): unknown {
+	if (!isNode(instance) || !isNode(node)) return instance;
+	const properties = isNode(node["properties"]) ? node["properties"] : {};
+	const out: Node = {};
+	for (const [k, v] of Object.entries(instance)) {
+		if (v === null && Object.prototype.hasOwnProperty.call(properties, k)) continue;
+		setMember(out, k, normalize(v, properties[k], defs, `${path}/${k}`, found));
+	}
+	if (name !== undefined) {
+		const bare = name.slice(name.lastIndexOf(".") + 1);
+		if (hasCrossFieldRules(bare)) found.push({ message: bare, path, value: out });
+	}
+	return out;
+}
+
+function setMember(target: Node, name: string, value: unknown): void {
+	Object.defineProperty(target, name, { value, enumerable: true, writable: true, configurable: true });
+}
+
+/** A message the strict contract does not accept. Peer of Go helpers.ErrStrictViolation
+ * and Python StrictViolationError. */
+export class StrictViolation extends Error {
+	/** The fully-qualified name of the message the payload was checked as. */
+	readonly messageName: string;
+	/** Why it was refused: the location and the schema's complaint, or the cross-field
+	 * rules it breaks. */
+	readonly violation: string;
+
+	constructor(messageName: string, violation: string, options?: { cause?: unknown }) {
+		super(`${messageName} is refused by the strict contract: ${violation}`, options);
+		this.name = "StrictViolation";
+		this.messageName = messageName;
+		this.violation = violation;
+	}
+}
+
+/**
+ * violationOf says why `raw` is not a `message` the strict contract accepts, checked with
+ * `validate`, a validator compiled from `schema`: the location and the schema's
+ * complaint, or the cross-field rules it breaks. Undefined when it is accepted. Null
+ * members of message objects are removed first, guided by `schema`.
+ */
+export function violationOf(
+	raw: unknown,
+	message: string,
+	schema: Readonly<Record<string, unknown>>,
+	validate: StrictValidator,
+): string | undefined {
+	const defs = isNode(schema["$defs"]) ? schema["$defs"] : {};
+	const found: Found[] = [];
+	const normalized = normalizeMessage(raw, schema, defs, "", found, message);
+	if (!validate(normalized)) {
+		const first = validate.errors?.[0];
+		const where = first?.instancePath === "" || first === undefined ? "(root)" : first.instancePath;
+		const extra =
+			first?.keyword === "additionalProperties"
+				? ` (${JSON.stringify((first.params as { additionalProperty?: string }).additionalProperty)})`
+				: "";
+		return `${where} ${first?.message ?? "does not match"}${extra}`;
+	}
+	for (const f of found) {
+		const violated = crossFieldRuleIds(f.message, f.value);
+		if (violated.length > 0) {
+			return `${f.path === "" ? "(root)" : f.path} violates cross-field rule(s) ${violated.join(", ")}`;
+		}
+	}
+	return undefined;
+}
+
+/** strictViolationOf is violationOf with a message's precompiled check. */
+export function strictViolationOf(raw: unknown, strict: StrictMessage): string | undefined {
+	return violationOf(raw, strict.message, strict.schema, strict.validate);
+}
+
+/** checkStrictOf throws StrictViolation unless `payload` passes `strict`, a message's
+ * precompiled check. */
+export function checkStrictOf(payload: unknown, strict: StrictMessage): void {
+	const problem = strictViolationOf(payload, strict);
+	if (problem !== undefined) throw new StrictViolation(strict.message, problem);
+}
diff --git a/sdk/ts/src/strict.ts b/sdk/ts/src/strict.ts
index b0237549..8950ce3f 100644
--- a/sdk/ts/src/strict.ts
+++ b/sdk/ts/src/strict.ts
@@ -14,62 +14,22 @@
 //   - the cross-field rules, through crossFieldRuleIds, on the message itself and on every
 //     nested message that carries any.
 //
+// The schema of every message the SDK checks by name is compiled at build time
+// (gen/ts/strict, generated by scripts/gen-sdk-types.sh), so checking one generates no
+// code at run time: an edge runtime such as Cloudflare Workers refuses code built from
+// strings. Only a schema a caller passes to checkStrict is compiled at run time, with ajv,
+// which therefore works on a runtime that allows it and not on one that does not.
+//
 // A null member of a message object is removed first: proto-JSON reads null as "absent",
 // and a peer rendering unpopulated fields emits one for every unset message field.
 // Nothing inside a google.protobuf.Struct is touched, because there a null is data.
 
 import Ajv2020Module, { type ValidateFunction } from "ajv/dist/2020.js";
 
-import { crossFieldRuleIds, hasCrossFieldRules } from "./crossfield.ts";
-
-import setReportingPolicyResponse from "../../../gen/jsonschema/fora.admin.v1.SetReportingPolicyResponse.schema.strict.json" with { type: "json" };
-import setTenantFeeRateResponse from "../../../gen/jsonschema/fora.admin.v1.SetTenantFeeRateResponse.schema.strict.json" with { type: "json" };
-import brokerTransactionResponse from "../../../gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json" with { type: "json" };
-import discoveryResponse from "../../../gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json" with { type: "json" };
-import disputeResponse from "../../../gen/jsonschema/fora.v1.DisputeResponse.schema.strict.json" with { type: "json" };
-import domainVerificationChallenge from "../../../gen/jsonschema/fora.v1.DomainVerificationChallenge.schema.strict.json" with { type: "json" };
-import domainVerificationResult from "../../../gen/jsonschema/fora.v1.DomainVerificationResult.schema.strict.json" with { type: "json" };
-import errorDetail from "../../../gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json" with { type: "json" };
-import getAccountStatusResponse from "../../../gen/jsonschema/fora.v1.GetAccountStatusResponse.schema.strict.json" with { type: "json" };
-import keyRevocationList from "../../../gen/jsonschema/fora.v1.KeyRevocationList.schema.strict.json" with { type: "json" };
-import license from "../../../gen/jsonschema/fora.v1.License.schema.strict.json" with { type: "json" };
-import pushResourcesResponse from "../../../gen/jsonschema/fora.v1.PushResourcesResponse.schema.strict.json" with { type: "json" };
-import refreshCatalogResponse from "../../../gen/jsonschema/fora.v1.RefreshCatalogResponse.schema.strict.json" with { type: "json" };
-import registerResponse from "../../../gen/jsonschema/fora.v1.RegisterResponse.schema.strict.json" with { type: "json" };
-import removeResourcesResponse from "../../../gen/jsonschema/fora.v1.RemoveResourcesResponse.schema.strict.json" with { type: "json" };
-import resourceResponse from "../../../gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json" with { type: "json" };
-import transactionResponse from "../../../gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json" with { type: "json" };
-import usageReportResponse from "../../../gen/jsonschema/fora.v1.UsageReportResponse.schema.strict.json" with { type: "json" };
-import wbaFile from "../../../gen/jsonschema/fora.v1.WBAFile.schema.strict.json" with { type: "json" };
-import wellKnownManifest from "../../../gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json" with { type: "json" };
+import { STRICT_MESSAGES } from "../../../gen/ts/strict/index.ts";
+import { StrictViolation, violationOf } from "./strict-core.ts";
 
-/** The strict schema of every message the SDK reads, by fully-qualified name: what a
- * client verb decodes, the ErrorDetail an error answer carries, and the four documents
- * the readers fetch (the manifest, the WBA directory, the revocation list, and the
- * License whose document is read). checkStrict takes any other message's schema as an
- * argument. */
-const STRICT_SCHEMAS: Readonly<Record<string, object>> = {
-	"fora.admin.v1.SetReportingPolicyResponse": setReportingPolicyResponse,
-	"fora.admin.v1.SetTenantFeeRateResponse": setTenantFeeRateResponse,
-	"fora.v1.BrokerTransactionResponse": brokerTransactionResponse,
-	"fora.v1.DiscoveryResponse": discoveryResponse,
-	"fora.v1.DisputeResponse": disputeResponse,
-	"fora.v1.DomainVerificationChallenge": domainVerificationChallenge,
-	"fora.v1.DomainVerificationResult": domainVerificationResult,
-	"fora.v1.ErrorDetail": errorDetail,
-	"fora.v1.GetAccountStatusResponse": getAccountStatusResponse,
-	"fora.v1.KeyRevocationList": keyRevocationList,
-	"fora.v1.License": license,
-	"fora.v1.PushResourcesResponse": pushResourcesResponse,
-	"fora.v1.RefreshCatalogResponse": refreshCatalogResponse,
-	"fora.v1.RegisterResponse": registerResponse,
-	"fora.v1.RemoveResourcesResponse": removeResourcesResponse,
-	"fora.v1.ResourceResponse": resourceResponse,
-	"fora.v1.TransactionResponse": transactionResponse,
-	"fora.v1.UsageReportResponse": usageReportResponse,
-	"fora.v1.WBAFile": wbaFile,
-	"fora.v1.WellKnownManifest": wellKnownManifest,
-};
+export { StrictViolation } from "./strict-core.ts";
 
 // Ajv is CommonJS. Node hands an ESM importer its module.exports, which is the class; a
 // bundler may hand over the namespace, whose `default` is. Read whichever arrived, typed
@@ -85,120 +45,18 @@ type AjvConstructor = new (options: {
 const Ajv2020 = ((Ajv2020Module as unknown as { default?: unknown }).default ??
 	Ajv2020Module) as unknown as AjvConstructor;
 
-// One engine for the process, schemas compiled on first use. `format` stays an annotation,
-// as the schemas' README says: a validator asserting `duration` needs ajv-formats.
+// One engine for the process, built on the first caller-given schema. The options are
+// the ones gen/ts/strict is compiled with: strict, `format` an annotation (asserting
+// `duration` would need ajv-formats), and addUsedSchema false, so a schema is never
+// registered under its $id and a caller's copy of a schema the SDK also bundles compiles
+// beside it instead of colliding with it.
 let engine: AjvEngine | undefined;
-const compiled = new Map<string, ValidateFunction>();
 
-// addUsedSchema false: a schema is never registered under its $id, so a caller's copy of
-// a schema the SDK also bundles compiles beside it instead of colliding with it.
 function ajv(): AjvEngine {
 	engine ??= new Ajv2020({ strict: true, validateFormats: false, addUsedSchema: false });
 	return engine;
 }
 
-function validatorFor(message: string, schema: object): ValidateFunction {
-	let validate = compiled.get(message);
-	if (validate === undefined) {
-		validate = ajv().compile(schema);
-		compiled.set(message, validate);
-	}
-	return validate;
-}
-
-type Node = Record<string, unknown>;
-
-function isNode(v: unknown): v is Node {
-	return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-
-const DEFS_PREFIX = "#/$defs/";
-
-/** One message instance the cross-field rules are checked on. */
-interface Found {
-	message: string;
-	path: string;
-	value: Node;
-}
-
-/**
- * normalize returns a copy of `instance` with null members of message objects removed,
- * guided by the schema, and collects every message instance whose type carries
- * cross-field rules. A key the schema does not declare is kept, so the schema refuses it.
- */
-function normalize(
-	instance: unknown,
-	node: unknown,
-	defs: Node,
-	path: string,
-	found: Found[],
-): unknown {
-	if (!isNode(node)) return instance;
-	const ref = node["$ref"];
-	if (typeof ref === "string" && ref.startsWith(DEFS_PREFIX)) {
-		const name = ref.slice(DEFS_PREFIX.length);
-		return normalizeMessage(instance, defs[name], defs, path, found, name);
-	}
-	if (Array.isArray(instance) && node["items"] !== undefined) {
-		return instance.map((item, i) => normalize(item, node["items"], defs, `${path}/${i}`, found));
-	}
-	const properties = node["properties"];
-	if (isNode(properties)) return normalizeMessage(instance, node, defs, path, found, undefined);
-	const values = node["additionalProperties"];
-	if (isNode(instance) && isNode(values)) {
-		const out: Node = {};
-		for (const [k, v] of Object.entries(instance)) {
-			setMember(out, k, normalize(v, values, defs, `${path}/${k}`, found));
-		}
-		return out;
-	}
-	// A Struct, a Value, a scalar or an enum: left exactly as it arrived.
-	return instance;
-}
-
-function normalizeMessage(
-	instance: unknown,
-	node: unknown,
-	defs: Node,
-	path: string,
-	found: Found[],
-	name: string | undefined,
-): unknown {
-	if (!isNode(instance) || !isNode(node)) return instance;
-	const properties = isNode(node["properties"]) ? node["properties"] : {};
-	const out: Node = {};
-	for (const [k, v] of Object.entries(instance)) {
-		if (v === null && Object.prototype.hasOwnProperty.call(properties, k)) continue;
-		setMember(out, k, normalize(v, properties[k], defs, `${path}/${k}`, found));
-	}
-	if (name !== undefined) {
-		const bare = name.slice(name.lastIndexOf(".") + 1);
-		if (hasCrossFieldRules(bare)) found.push({ message: bare, path, value: out });
-	}
-	return out;
-}
-
-function setMember(target: Node, name: string, value: unknown): void {
-	Object.defineProperty(target, name, { value, enumerable: true, writable: true, configurable: true });
-}
-
-/** A message the strict contract does not accept. Peer of Go helpers.ErrStrictViolation
- * and Python StrictViolationError. */
-export class StrictViolation extends Error {
-	/** The fully-qualified name of the message the payload was checked as. */
-	readonly messageName: string;
-	/** Why it was refused: the location and the schema's complaint, or the cross-field
-	 * rules it breaks. */
-	readonly violation: string;
-
-	constructor(messageName: string, violation: string, options?: { cause?: unknown }) {
-		super(`${messageName} is refused by the strict contract: ${violation}`, options);
-		this.name = "StrictViolation";
-		this.messageName = messageName;
-		this.violation = violation;
-	}
-}
-
 /**
  * checkStrict refuses `payload` unless it is a `message` the strict contract accepts.
  *
@@ -223,28 +81,12 @@ export function checkStrict(message: string, payload: unknown, schema?: object):
  * it is accepted.
  */
 export function strictViolation(raw: unknown, message: string, given?: object): string | undefined {
-	const schema = (given ?? STRICT_SCHEMAS[message]) as Node | undefined;
-	if (schema === undefined) throw new Error(`no strict schema for ${message}`);
-	const defs = isNode(schema["$defs"]) ? schema["$defs"] : {};
-	const found: Found[] = [];
-	const normalized = normalizeMessage(raw, schema, defs, "", found, message);
-	const validate = given === undefined ? validatorFor(message, schema) : compileOnce(given);
-	if (!validate(normalized)) {
-		const first = validate.errors?.[0];
-		const where = first?.instancePath === "" || first === undefined ? "(root)" : first.instancePath;
-		const extra =
-			first?.keyword === "additionalProperties"
-				? ` (${JSON.stringify((first.params as { additionalProperty?: string }).additionalProperty)})`
-				: "";
-		return `${where} ${first?.message ?? "does not match"}${extra}`;
-	}
-	for (const f of found) {
-		const violated = crossFieldRuleIds(f.message, f.value);
-		if (violated.length > 0) {
-			return `${f.path === "" ? "(root)" : f.path} violates cross-field rule(s) ${violated.join(", ")}`;
-		}
+	if (given !== undefined) {
+		return violationOf(raw, message, given as Readonly<Record<string, unknown>>, compileOnce(given));
 	}
-	return undefined;
+	const strict = STRICT_MESSAGES[message];
+	if (strict === undefined) throw new Error(`no strict schema for ${message}`);
+	return violationOf(raw, message, strict.schema, strict.validate);
 }
 
 // A schema a caller passed is compiled once per object, never cached under a name a
diff --git a/sdk/ts/tests/directory-readers-ed25519.test.ts b/sdk/ts/tests/directory-readers-ed25519.test.ts
new file mode 100644
index 00000000..6e47d3f9
--- /dev/null
+++ b/sdk/ts/tests/directory-readers-ed25519.test.ts
@@ -0,0 +1,113 @@
+// The directory readers check response signatures through an injected Ed25519 primitive.
+//
+// A runtime without WebCrypto Ed25519, such as Fastly Compute, supplies its own verify
+// primitive. readWBADirectory, the WBA key resolver and the offer-directory fetch each
+// take it as `verifyEd25519` and hand it to verifyDirectoryResponse; before they did,
+// every listed key read as unsigned on such a runtime. Each case shows the injected
+// primitive decides the verdict both ways: one that refuses everything drops a genuinely
+// signed key, and one that accepts everything keeps a key whose signature is corrupted,
+// which the WebCrypto default refuses.
+
+import { describe, expect, it } from "vitest";
+import {
+	createWBAKeyResolver,
+	createWBAOfferDirectoryFetch,
+	DirectoryResponseUnsigned,
+	type FetchLike,
+	readWBADirectory,
+} from "../resolvers/edge.ts";
+import type { Ed25519Verify } from "../src/pop.ts";
+import { iso, HOUR_MS, makeKey, signedDirectoryHeaders, type TestKey, wbaFileJson, wbaJwk } from "./resolvers-harness.ts";
+
+const AUTHORITY = "pub.example";
+const ORIGIN = `https://${AUTHORITY}`;
+const DIRECTORY_URL = `${ORIGIN}/.well-known/http-message-signatures-directory`;
+
+interface Served {
+	key: TestKey;
+	fetch: FetchLike;
+}
+
+// serve answers the directory URL with a directory listing one fresh key, signed by it;
+// `corrupt` flips the first byte of the signature so the WebCrypto default refuses it.
+async function serve(corrupt: boolean): Promise<Served> {
+	const key = await makeKey();
+	const now = Date.now();
+	const body = wbaFileJson([wbaJwk(key.x, iso(now - HOUR_MS), iso(now + HOUR_MS))]);
+	const headers = await signedDirectoryHeaders(AUTHORITY, body);
+	if (corrupt) {
+		const sig = headers.signature as string;
+		headers.signature = sig.replace(/:([^:]+):/, (_m, b64: string) => `:${b64.startsWith("A") ? "B" : "A"}${b64.slice(1)}:`);
+	}
+	const fetch: FetchLike = async (url) =>
+		url === DIRECTORY_URL ? new Response(body, { headers }) : new Response("", { status: 404 });
+	return { key, fetch };
+}
+
+function recording(answer: boolean): { verify: Ed25519Verify; calls: () => number } {
+	let calls = 0;
+	return {
+		verify: async () => {
+			calls += 1;
+			return answer;
+		},
+		calls: () => calls,
+	};
+}
+
+describe("readWBADirectory", () => {
+	it("an injected primitive that refuses every signature leaves the directory unsigned", async () => {
+		const { fetch } = await serve(false);
+		await expect(readWBADirectory(AUTHORITY, { fetch })).resolves.toBeDefined();
+		const refuse = recording(false);
+		await expect(readWBADirectory(AUTHORITY, { fetch, verifyEd25519: refuse.verify })).rejects.toBeInstanceOf(
+			DirectoryResponseUnsigned,
+		);
+		expect(refuse.calls()).toBeGreaterThan(0);
+	});
+
+	it("an injected primitive that accepts every signature reads a directory the default refuses", async () => {
+		const { fetch } = await serve(true);
+		await expect(readWBADirectory(AUTHORITY, { fetch })).rejects.toBeInstanceOf(DirectoryResponseUnsigned);
+		const accept = recording(true);
+		const doc = await readWBADirectory(AUTHORITY, { fetch, verifyEd25519: accept.verify });
+		expect(doc.message.keys).toHaveLength(1);
+		expect(accept.calls()).toBeGreaterThan(0);
+	});
+});
+
+describe("createWBAKeyResolver", () => {
+	it("hands out no key when the injected primitive refuses every signature", async () => {
+		const { key, fetch } = await serve(false);
+		expect(await createWBAKeyResolver({ fetch }).resolve(key.tp, ORIGIN)).toEqual(key.rawPub);
+		const refuse = recording(false);
+		expect(await createWBAKeyResolver({ fetch, verifyEd25519: refuse.verify }).resolve(key.tp, ORIGIN)).toBeUndefined();
+		expect(refuse.calls()).toBeGreaterThan(0);
+	});
+
+	it("hands out the key when the injected primitive accepts a signature the default refuses", async () => {
+		const { key, fetch } = await serve(true);
+		expect(await createWBAKeyResolver({ fetch }).resolve(key.tp, ORIGIN)).toBeUndefined();
+		const accept = recording(true);
+		expect(await createWBAKeyResolver({ fetch, verifyEd25519: accept.verify }).resolve(key.tp, ORIGIN)).toEqual(
+			key.rawPub,
+		);
+	});
+});
+
+describe("createWBAOfferDirectoryFetch", () => {
+	it("lists no key when the injected primitive refuses every signature", async () => {
+		const { fetch } = await serve(false);
+		expect((await createWBAOfferDirectoryFetch({ fetch })(AUTHORITY))?.keys).toHaveLength(1);
+		const refuse = recording(false);
+		expect((await createWBAOfferDirectoryFetch({ fetch, verifyEd25519: refuse.verify })(AUTHORITY))?.keys).toHaveLength(0);
+		expect(refuse.calls()).toBeGreaterThan(0);
+	});
+
+	it("lists the key when the injected primitive accepts a signature the default refuses", async () => {
+		const { fetch } = await serve(true);
+		expect((await createWBAOfferDirectoryFetch({ fetch })(AUTHORITY))?.keys).toHaveLength(0);
+		const accept = recording(true);
+		expect((await createWBAOfferDirectoryFetch({ fetch, verifyEd25519: accept.verify })(AUTHORITY))?.keys).toHaveLength(1);
+	});
+});
diff --git a/sdk/ts/tests/edge-no-eval.test.ts b/sdk/ts/tests/edge-no-eval.test.ts
new file mode 100644
index 00000000..8640516f
--- /dev/null
+++ b/sdk/ts/tests/edge-no-eval.test.ts
@@ -0,0 +1,148 @@
+// The edge entry runs where code generation from strings is refused.
+//
+// Cloudflare Workers refuses eval and new Function: "EvalError: Code generation from
+// strings disallowed for this context". A strict check that compiled its JSON Schema
+// validator at run time failed there on every document, while the Workers vitest pool,
+// which allows eval, passed. This test builds the edge entry the way a Worker is built
+// (esbuild, platform neutral, the workerd/worker/browser conditions) and runs the readers
+// in a Node vm context created with code generation from strings disabled, which refuses
+// eval and new Function with the same EvalError. Every reader that runs the strict check
+// is driven to an accepted document, and a refused one, and the check by message name is
+// run too.
+
+import { createRequire } from "node:module";
+import vm from "node:vm";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+
+const require = createRequire(import.meta.url);
+const esbuild = require("esbuild") as typeof import("esbuild");
+
+const here = (p: string): string => fileURLToPath(new URL(p, import.meta.url));
+
+// The probe a Worker would run: each reader against a fetch answering one document.
+const PROBE = `
+import { readLicenseDocument, readManifest, readRevocationList, readWBADirectory, StrictViolation } from ${JSON.stringify(here("../resolvers/edge.ts"))};
+import { checkStrict } from ${JSON.stringify(here("../src/strict.ts"))};
+
+const serve = (body, contentType) => async () =>
+	new Response(body, { status: 200, headers: contentType ? { "content-type": contentType } : {} });
+
+async function outcome(run) {
+	try {
+		await run();
+		return "ok";
+	} catch (e) {
+		return e instanceof StrictViolation ? "strict" : (e?.name ?? "error") + ": " + (e?.message ?? String(e));
+	}
+}
+
+async function sha256(text) {
+	const d = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(text)));
+	return "sha256:" + Array.from(d, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+globalThis.probe = async () => {
+	const manifest = JSON.stringify({
+		ver: "1.0",
+		role: "ROLE_PUBLISHER",
+		domain: "pub.example",
+		exchanges: [{ domain: "x.example", endpoint: "https://x.example", relationship: "PROVIDER_RELATIONSHIP_DIRECT" }],
+	});
+	const text = "Licensed for retrieval-augmented answers.\\n";
+	return {
+		manifest: await outcome(() => readManifest("pub.example", { fetch: serve(manifest, "application/json") })),
+		manifestUnknownField: await outcome(() =>
+			readManifest("pub.example", { fetch: serve(JSON.stringify({ ...JSON.parse(manifest), surplus: 1 }), "application/json") }),
+		),
+		directory: await outcome(() =>
+			readWBADirectory("pub.example", { fetch: serve('{"keys":[]}', "application/http-message-signatures-directory+json") }),
+		),
+		directoryUnknownField: await outcome(() =>
+			readWBADirectory("pub.example", {
+				fetch: serve('{"keys":[],"surplus":1}', "application/http-message-signatures-directory+json"),
+			}),
+		),
+		revocations: await outcome(() =>
+			readRevocationList("https://pub.example/revoked.json", {
+				fetch: serve('{"as_of":"2026-05-01T12:00:00Z","revoked":[]}'),
+			}),
+		),
+		license: await outcome(async () =>
+			readLicenseDocument({ uri: "https://pub.example/terms.txt", uri_digest: await sha256(text) }, { fetch: serve(text) }),
+		),
+		byName: await outcome(async () => checkStrict("fora.v1.ErrorDetail", { surplus: 1 })),
+	};
+};
+`;
+
+async function buildProbe(): Promise<string> {
+	const out = await esbuild.build({
+		stdin: { contents: PROBE, resolveDir: here("."), loader: "ts" },
+		bundle: true,
+		write: false,
+		format: "iife",
+		platform: "neutral",
+		conditions: ["workerd", "worker", "browser"],
+		mainFields: ["module", "main"],
+		// One zod for the bundle, the one this package installed (vitest.config.ts says why).
+		alias: { zod: here("../node_modules/zod") },
+		logLevel: "silent",
+	});
+	const file = out.outputFiles[0];
+	if (file === undefined) throw new Error("esbuild produced no output");
+	return file.text;
+}
+
+// noEvalContext is a context with the globals a Worker has and code generation from
+// strings disabled.
+function noEvalContext(): vm.Context {
+	return vm.createContext(
+		{
+			Response,
+			Headers,
+			Request,
+			URL,
+			URLSearchParams,
+			TextEncoder,
+			TextDecoder,
+			crypto,
+			console,
+			setTimeout,
+			clearTimeout,
+			AbortController,
+			AbortSignal,
+			atob,
+			btoa,
+			structuredClone,
+			queueMicrotask,
+		},
+		{ codeGeneration: { strings: false, wasm: false } },
+	);
+}
+
+describe("the edge entry in a context that refuses code generation from strings", () => {
+	it("refuses eval and new Function, as Workers does", () => {
+		const context = noEvalContext();
+		const refused = vm.runInContext(
+			"(() => { try { new Function('return 1')(); return 'allowed'; } catch (e) { return e.name + ': ' + e.message; } })()",
+			context,
+		);
+		expect(refused).toMatch(/^EvalError: Code generation from strings disallowed/);
+	});
+
+	it("runs every strict reader and the check by name without generating code", async () => {
+		const context = noEvalContext();
+		vm.runInContext(await buildProbe(), context);
+		const results = await (context as { probe: () => Promise<Record<string, string>> }).probe();
+		expect(results).toEqual({
+			manifest: "ok",
+			manifestUnknownField: "strict",
+			directory: "ok",
+			directoryUnknownField: "strict",
+			revocations: "ok",
+			license: "ok",
+			byName: "strict",
+		});
+	}, 60_000);
+});

From 1b3eb30a83460e085d89e3bed67c6aa59d63c55a Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 11:28:23 -0400
Subject: [PATCH 131/164] Make the TypeScript edge entry tree-shakeable

Importing one constant from the edge entry carried about 0.9 MB, because
a bundler keeps a module whose import may have an effect and keeps each
generated Zod schema's construction. The root, sdk/ts and gen/ts packages
and the release manifest are marked side-effect free, and gen_zod.mjs
builds each schema in a call marked pure, so gen/ts/wire/schemas.ts is
regenerated. A constant now carries a few bytes, readManifest about 190 KB
instead of 800 KB, and the WBA key resolver about 21 KB, Zod excluded. A
guard bundles the edge entry as a Worker is bundled and checks what a
constant, a strict reader and the WBA key resolver each carry; it fails
without either change.
---
 gen/ts/package.json                         |   1 +
 gen/ts/wire/schemas.ts                      | 220 ++++++++++----------
 package.json                                |   1 +
 scripts/sdk-types/gen_zod.mjs               |   5 +-
 sdk/ts/package.json                         |   1 +
 sdk/ts/scripts/build.mjs                    |   3 +
 sdk/ts/tests/edge-bundle-size.guard.test.ts |  79 +++++++
 7 files changed, 199 insertions(+), 111 deletions(-)
 create mode 100644 sdk/ts/tests/edge-bundle-size.guard.test.ts

diff --git a/gen/ts/package.json b/gen/ts/package.json
index 952d70ec..cbf6152c 100644
--- a/gen/ts/package.json
+++ b/gen/ts/package.json
@@ -5,6 +5,7 @@
   "description": "Generated TypeScript types export: Zod schemas (./wire/schemas) + vocabulary constants (./vocab/*), generated from the proto via JSON Schema. Not published on its own: it ships inside @fora-protocol/sdk (built by sdk/ts/scripts/build.mjs), which exports these subpaths unchanged.",
   "license": "Apache-2.0",
   "type": "module",
+  "sideEffects": false,
   "exports": {
     "./wire/schemas": "./wire/schemas.ts",
     "./wire/base": "./wire/base.ts",
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 20bd24ed..68aed361 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -6,223 +6,223 @@
 import { z } from "zod";
 import { wire } from "./base.ts";
 
-export const AcceptableRestrictionSchema = wire(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance."));
+export const AcceptableRestrictionSchema = /* @__PURE__ */ (() => wire(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")))();
 
-export const AccountRegistrationSchema = wire(z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("AccountRegistration — how to open an account at this Exchange. Published as an\n optional block on WellKnownManifest; an Exchange that omits the whole block\n keeps today's behaviour, accepting RegisterRequest.registration_data\n uninspected. The block exists rather than a flat field because registration\n has more than one publishable facet: `data_schema` describes the API mode\n below, and field 2 is deliberately left free for a future web mode — a URL to\n a registration page on the Exchange's own site, where a human completes the\n steps an API call cannot carry (explicit terms confirmation, identity checks,\n manual review). Flat siblings on a manifest this size would give a reader no\n signal that they are one subject. Precedence between the modes is fixed now,\n before both can be published: an Exchange that publishes `data_schema` MUST\n accept registration through the API, and a registration URL is an additional\n option an agent MAY offer its user instead — never a replacement for the API\n path. An Exchange that wants web-only registration publishes the URL and no\n schema. Note that terms versioning is NOT in this block: WellKnownManifest.\n terms_digest sits at the top level so an Exchange with pass-through\n registration can still pin which terms document it is serving."));
+export const AccountRegistrationSchema = /* @__PURE__ */ (() => wire(z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("AccountRegistration — how to open an account at this Exchange. Published as an\n optional block on WellKnownManifest; an Exchange that omits the whole block\n keeps today's behaviour, accepting RegisterRequest.registration_data\n uninspected. The block exists rather than a flat field because registration\n has more than one publishable facet: `data_schema` describes the API mode\n below, and field 2 is deliberately left free for a future web mode — a URL to\n a registration page on the Exchange's own site, where a human completes the\n steps an API call cannot carry (explicit terms confirmation, identity checks,\n manual review). Flat siblings on a manifest this size would give a reader no\n signal that they are one subject. Precedence between the modes is fixed now,\n before both can be published: an Exchange that publishes `data_schema` MUST\n accept registration through the API, and a registration URL is an additional\n option an agent MAY offer its user instead — never a replacement for the API\n path. An Exchange that wants web-only registration publishes the URL and no\n schema. Note that terms versioning is NOT in this block: WellKnownManifest.\n terms_digest sits at the top level so an Exchange with pass-through\n registration can still pin which terms document it is serving.")))();
 
-export const AgentAcceptanceSchema = wire(z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).\n\nThe acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\"."));
+export const AgentAcceptanceSchema = /* @__PURE__ */ (() => wire(z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).\n\nThe acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".")))();
 
-export const AgentAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.").default(""), "requester_id": z.string().describe("Requester label (Requester.id) the acceptance is bound to. Never empty.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason."));
+export const AgentAcceptancePayloadSchema = /* @__PURE__ */ (() => wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.").default(""), "requester_id": z.string().describe("Requester label (Requester.id) the acceptance is bound to. Never empty.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason.")))();
 
-export const AgentRequestAcceptanceSchema = wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one."));
+export const AgentRequestAcceptanceSchema = /* @__PURE__ */ (() => wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.")))();
 
-export const AgentRequestAcceptanceItemSchema = wire(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection."));
+export const AgentRequestAcceptanceItemSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")))();
 
-export const AgentRequestAcceptancePayloadSchema = wire(z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature."));
+export const AgentRequestAcceptancePayloadSchema = /* @__PURE__ */ (() => wire(z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("AgentRequestAcceptancePayload fixes the field set signed by an\n AgentRequestAcceptance. Its canonical bytes are\n JCS(protojson(AgentRequestAcceptancePayload)) using the canonical-signing\n rules defined on Offer.signature.")))();
 
-export const AttributionDetailSchema = wire(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting."));
+export const AttributionDetailSchema = /* @__PURE__ */ (() => wire(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")))();
 
-export const AuthMethodSchema = wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"]));
+export const AuthMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])))();
 
-export const AuthorizedExchangeSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources."));
+export const AuthorizedExchangeSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")))();
 
-export const BrokerTransactionResponseSchema = wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction)."));
+export const BrokerTransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).")))();
 
-export const C2PAStatusSchema = wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]));
+export const C2PAStatusSchema = /* @__PURE__ */ (() => wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"])))();
 
-export const CatalogContributorSchema = wire(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider."));
+export const CatalogContributorSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")))();
 
-export const CatalogRejectionSchema = wire(z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("CatalogRejection — a CatalogService call could not be applied."));
+export const CatalogRejectionSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("CatalogRejection — a CatalogService call could not be applied.")))();
 
-export const CatalogRejectionReasonSchema = wire(z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]));
+export const CatalogRejectionReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"])))();
 
-export const CitationFormatSchema = wire(z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]));
+export const CitationFormatSchema = /* @__PURE__ */ (() => wire(z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"])))();
 
-export const CostSchema = wire(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost."));
+export const CostSchema = /* @__PURE__ */ (() => wire(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")))();
 
-export const DelegationSchema = wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Delegation — Scoped, time-limited, spend-capped credential.\n\nThe token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above."));
+export const DelegationSchema = /* @__PURE__ */ (() => wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Delegation — Scoped, time-limited, spend-capped credential.\n\nThe token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.")))();
 
-export const DeliveryMethodSchema = wire(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]));
+export const DeliveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])))();
 
-export const DenialReasonSchema = wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]));
+export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"])))();
 
-export const DiscoveryMethodSchema = wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]));
+export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1)."));
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
-export const DiscoveryResponseSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here."));
+export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
-export const DisputeFailureSchema = wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed."));
+export const DisputeFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed.")))();
 
-export const DisputeFailureReasonSchema = wire(z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]));
+export const DisputeFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"])))();
 
-export const DisputeReasonSchema = wire(z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]));
+export const DisputeReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"])))();
 
-export const DisputeRequestSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).").default(""), "description": z.string().describe("Human-readable description of the issue.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse."), "reason": z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]).describe("Reason for the dispute."), "received_content_hash": z.string().describe("Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.").optional(), "received_hash_method": z.string().describe("Hash algorithm the agent used").optional(), "report_id": z.string().describe("Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.").default(""), "transaction_id": z.string().describe("Transaction being disputed.").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeRequest — Agent signals a problem with delivered resource."));
+export const DisputeRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).").default(""), "description": z.string().describe("Human-readable description of the issue.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse."), "reason": z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]).describe("Reason for the dispute."), "received_content_hash": z.string().describe("Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.").optional(), "received_hash_method": z.string().describe("Hash algorithm the agent used").optional(), "report_id": z.string().describe("Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.").default(""), "transaction_id": z.string().describe("Transaction being disputed.").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeRequest — Agent signals a problem with delivered resource.")))();
 
-export const DisputeResponseSchema = wire(z.object({ "dispute_id": z.string().describe("Exchange-assigned dispute case identifier.").optional(), "estimated_resolution": z.string().describe("Expected resolution timeline.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "resolution": z.enum(["RESOLUTION_TYPE_CREDIT","RESOLUTION_TYPE_REDELIVERY","RESOLUTION_TYPE_REJECTED","RESOLUTION_TYPE_INVESTIGATION"]).describe("Resolution outcome, populated when the dispute reaches a terminal\n state (RESOLVED, SETTLED, or FINAL). Absent while dispute is in\n progress (FILED, UNDER_REVIEW, ESCALATED, etc.).").optional(), "status": z.union([z.string().regex(new RegExp("^DISPUTE_STATUS_UNSPECIFIED$")), z.enum(["DISPUTE_STATUS_FILED","DISPUTE_STATUS_AUTO_RESOLVED","DISPUTE_STATUS_EVIDENCE_NEEDED","DISPUTE_STATUS_UNDER_REVIEW","DISPUTE_STATUS_ESCALATED","DISPUTE_STATUS_RESOLVED","DISPUTE_STATUS_APPEALED","DISPUTE_STATUS_SETTLED","DISPUTE_STATUS_FINAL"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Current lifecycle status of the dispute. Tracks progression through\n the three-tier resolution process:\n   Tier 1 (automated, <1s): FILED → AUTO_RESOLVED or EVIDENCE_NEEDED\n   Tier 2 (rule-based, <24h): UNDER_REVIEW → RESOLVED\n   Tier 3 (pattern investigation, async): ESCALATED → SETTLED → FINAL\n Losing party may appeal: RESOLVED → APPEALED → back to UNDER_REVIEW.").default(0), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeResponse — Exchange acknowledges the dispute."));
+export const DisputeResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "dispute_id": z.string().describe("Exchange-assigned dispute case identifier.").optional(), "estimated_resolution": z.string().describe("Expected resolution timeline.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "resolution": z.enum(["RESOLUTION_TYPE_CREDIT","RESOLUTION_TYPE_REDELIVERY","RESOLUTION_TYPE_REJECTED","RESOLUTION_TYPE_INVESTIGATION"]).describe("Resolution outcome, populated when the dispute reaches a terminal\n state (RESOLVED, SETTLED, or FINAL). Absent while dispute is in\n progress (FILED, UNDER_REVIEW, ESCALATED, etc.).").optional(), "status": z.union([z.string().regex(new RegExp("^DISPUTE_STATUS_UNSPECIFIED$")), z.enum(["DISPUTE_STATUS_FILED","DISPUTE_STATUS_AUTO_RESOLVED","DISPUTE_STATUS_EVIDENCE_NEEDED","DISPUTE_STATUS_UNDER_REVIEW","DISPUTE_STATUS_ESCALATED","DISPUTE_STATUS_RESOLVED","DISPUTE_STATUS_APPEALED","DISPUTE_STATUS_SETTLED","DISPUTE_STATUS_FINAL"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Current lifecycle status of the dispute. Tracks progression through\n the three-tier resolution process:\n   Tier 1 (automated, <1s): FILED → AUTO_RESOLVED or EVIDENCE_NEEDED\n   Tier 2 (rule-based, <24h): UNDER_REVIEW → RESOLVED\n   Tier 3 (pattern investigation, async): ESCALATED → SETTLED → FINAL\n Losing party may appeal: RESOLVED → APPEALED → back to UNDER_REVIEW.").default(0), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeResponse — Exchange acknowledges the dispute.")))();
 
-export const DisputeStatusSchema = wire(z.enum(["DISPUTE_STATUS_FILED","DISPUTE_STATUS_AUTO_RESOLVED","DISPUTE_STATUS_EVIDENCE_NEEDED","DISPUTE_STATUS_UNDER_REVIEW","DISPUTE_STATUS_ESCALATED","DISPUTE_STATUS_RESOLVED","DISPUTE_STATUS_APPEALED","DISPUTE_STATUS_SETTLED","DISPUTE_STATUS_FINAL"]));
+export const DisputeStatusSchema = /* @__PURE__ */ (() => wire(z.enum(["DISPUTE_STATUS_FILED","DISPUTE_STATUS_AUTO_RESOLVED","DISPUTE_STATUS_EVIDENCE_NEEDED","DISPUTE_STATUS_UNDER_REVIEW","DISPUTE_STATUS_ESCALATED","DISPUTE_STATUS_RESOLVED","DISPUTE_STATUS_APPEALED","DISPUTE_STATUS_SETTLED","DISPUTE_STATUS_FINAL"])))();
 
-export const DomainVerificationChallengeSchema = wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this challenge expires. Provider must confirm before this time.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "token": z.string().describe("Opaque challenge token. Provider must serve this at:\n https://{domain}/.well-known/fora-verify/{token}").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "verification_url": z.string().describe("The exact URL the Exchange will fetch to verify.").default("") }).describe("DomainVerificationChallenge — Exchange returns a challenge."));
+export const DomainVerificationChallengeSchema = /* @__PURE__ */ (() => wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this challenge expires. Provider must confirm before this time.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "token": z.string().describe("Opaque challenge token. Provider must serve this at:\n https://{domain}/.well-known/fora-verify/{token}").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "verification_url": z.string().describe("The exact URL the Exchange will fetch to verify.").default("") }).describe("DomainVerificationChallenge — Exchange returns a challenge.")))();
 
-export const DomainVerificationConfirmationSchema = wire(z.object({ "cdn_type": z.string().describe("Which delivery-URL verification scheme this key is for: \"edge-ed25519\" (a\n code-capable edge that verifies the Ed25519 URL signature itself) or\n \"cloudfront\" (AWS CloudFront trusted key groups, RSA, verified natively by\n the CDN). One value per Exchange-side tenant signing scheme:\n \"edge-ed25519\" is ED25519, \"cloudfront\" is AWS_CLOUDFRONT_RSA.").optional(), "domain": z.string().describe("The domain being verified.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "signing_key": z.string().describe("Optional: the delivery endpoint's verification key, registered atomically\n with the domain on successful verification. PUBLIC key material only.\n The Exchange signs delivery URLs with a private key it holds and never\n publishes; a delivery endpoint verifies with the public half and holds\n nothing secret. Where the Exchange has to sign with a key the provider\n generated -- a CloudFront trusted key group is the provider's own AWS\n resource -- the private half is provisioned to the Exchange out of band\n and never travels in this field.\n\nFormat follows cdn_type: a PEM-encoded RSA public key for \"cloudfront\", or\n the base64url-encoded raw Ed25519 public key (the JWK \"x\" value) for\n \"edge-ed25519\".").optional(), "token": z.string().describe("The challenge token (echoed from DomainVerificationChallenge).").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationConfirmation — Provider confirms the challenge is placed."));
+export const DomainVerificationConfirmationSchema = /* @__PURE__ */ (() => wire(z.object({ "cdn_type": z.string().describe("Which delivery-URL verification scheme this key is for: \"edge-ed25519\" (a\n code-capable edge that verifies the Ed25519 URL signature itself) or\n \"cloudfront\" (AWS CloudFront trusted key groups, RSA, verified natively by\n the CDN). One value per Exchange-side tenant signing scheme:\n \"edge-ed25519\" is ED25519, \"cloudfront\" is AWS_CLOUDFRONT_RSA.").optional(), "domain": z.string().describe("The domain being verified.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "signing_key": z.string().describe("Optional: the delivery endpoint's verification key, registered atomically\n with the domain on successful verification. PUBLIC key material only.\n The Exchange signs delivery URLs with a private key it holds and never\n publishes; a delivery endpoint verifies with the public half and holds\n nothing secret. Where the Exchange has to sign with a key the provider\n generated -- a CloudFront trusted key group is the provider's own AWS\n resource -- the private half is provisioned to the Exchange out of band\n and never travels in this field.\n\nFormat follows cdn_type: a PEM-encoded RSA public key for \"cloudfront\", or\n the base64url-encoded raw Ed25519 public key (the JWK \"x\" value) for\n \"edge-ed25519\".").optional(), "token": z.string().describe("The challenge token (echoed from DomainVerificationChallenge).").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationConfirmation — Provider confirms the challenge is placed.")))();
 
-export const DomainVerificationFailureSchema = wire(z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed."));
+export const DomainVerificationFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.")))();
 
-export const DomainVerificationFailureReasonSchema = wire(z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]));
+export const DomainVerificationFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"])))();
 
-export const DomainVerificationRequestSchema = wire(z.object({ "caller_id": z.string().describe("Caller identity (registered with the Exchange).").optional(), "domain": z.string().describe("The provider domain to verify (e.g., \"techcrunch.com\").").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationRequest — Provider requests a verification challenge."));
+export const DomainVerificationRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "caller_id": z.string().describe("Caller identity (registered with the Exchange).").optional(), "domain": z.string().describe("The provider domain to verify (e.g., \"techcrunch.com\").").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationRequest — Provider requests a verification challenge.")))();
 
-export const DomainVerificationResultSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification."));
+export const DomainVerificationResultSchema = /* @__PURE__ */ (() => wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification.")))();
 
-export const ErrorDetailSchema = wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error."));
+export const ErrorDetailSchema = /* @__PURE__ */ (() => wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error.")))();
 
-export const ExchangeOutcomeSchema = wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item."));
+export const ExchangeOutcomeSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")))();
 
-export const GetAccountStatusRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Accounts are per-Exchange, so \"which Exchange am I asking\n about\" is not derivable from anything else in this message."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusRequest — Agent asks whether its account is active."));
+export const GetAccountStatusRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Accounts are per-Exchange, so \"which Exchange am I asking\n about\" is not derivable from anything else in this message."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusRequest — Agent asks whether its account is active.")))();
 
-export const GetAccountStatusResponseSchema = wire(z.object({ "active": z.boolean().describe("Whether the account is currently active.").default(false), "balances": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("The amount the account can spend now, one entry per currency. Holds for\n pending transactions are already subtracted. Each amount is an exact decimal\n string and is never negative. The list holds at most one entry per currency,\n and its order has no meaning. unit_cost is never set.\n\nThe value is a snapshot. It does not guarantee that the next execute passes\n the balance check: another transaction can spend the funds first.\n\n An empty list means the Exchange does not report balances. It does NOT mean\n a zero balance. The same holds for a currency missing from a non-empty list:\n that balance is not reported, it is not zero. An Exchange that reports a\n zero balance sends the entry with amount \"0\". Balances are only allowed when\n billing_ref is set.").optional(), "billing_ref": z.string().describe("The account handle minted at registration (see RegisterResponse.billing_ref).\n Set on every OK answer: a calling agent with no account is answered\n NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads\n an empty handle, which an Exchange built before that rule may send, as the\n same answer.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("The terms document this account ACCEPTED: the \"method:hexdigest\" value the\n agent echoed in RegisterRequest.terms_digest, which the Exchange recorded\n with the account. This is the read side of that record. Without it the\n protocol required an Exchange to store the acceptance and named the question\n the record exists to answer — \"which terms did this operator accept\" — while\n giving no way to ask it, so the only party who could check what it had agreed\n to was the party holding the database.\n\nAn Exchange that holds a recorded digest for this account MUST return it\n here. Absence has exactly ONE meaning: no acceptance is recorded. Two\n situations produce it — the Exchange publishes no terms_digest, so nothing\n was ever accepted (and per RegisterRequest.terms_digest it MUST NOT record a\n presented value in that case), or the account was created before the operator\n began publishing one. It does NOT mean \"this account has no terms\", and an\n Exchange MUST NOT withhold a digest it holds: absence is already spoken for,\n so withholding would make the field state something untrue.\n\n The value is what was ACCEPTED, not what is published now. The two differ as\n soon as the operator revises its terms, and that difference is the point:\n comparing this against a freshly fetched WellKnownManifest.terms_digest is how\n an agent discovers that the terms moved under an account it already holds. A\n repeat Register will not tell it — a repeat is answered from the stored record\n and runs no gate at all.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusResponse — Exchange reports the account's current state."));
+export const GetAccountStatusResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "active": z.boolean().describe("Whether the account is currently active.").default(false), "balances": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("The amount the account can spend now, one entry per currency. Holds for\n pending transactions are already subtracted. Each amount is an exact decimal\n string and is never negative. The list holds at most one entry per currency,\n and its order has no meaning. unit_cost is never set.\n\nThe value is a snapshot. It does not guarantee that the next execute passes\n the balance check: another transaction can spend the funds first.\n\n An empty list means the Exchange does not report balances. It does NOT mean\n a zero balance. The same holds for a currency missing from a non-empty list:\n that balance is not reported, it is not zero. An Exchange that reports a\n zero balance sends the entry with amount \"0\". Balances are only allowed when\n billing_ref is set.").optional(), "billing_ref": z.string().describe("The account handle minted at registration (see RegisterResponse.billing_ref).\n Set on every OK answer: a calling agent with no account is answered\n NOT_FOUND, not with an empty handle (see GetAccountStatus). A receiver reads\n an empty handle, which an Exchange built before that rule may send, as the\n same answer.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("The terms document this account ACCEPTED: the \"method:hexdigest\" value the\n agent echoed in RegisterRequest.terms_digest, which the Exchange recorded\n with the account. This is the read side of that record. Without it the\n protocol required an Exchange to store the acceptance and named the question\n the record exists to answer — \"which terms did this operator accept\" — while\n giving no way to ask it, so the only party who could check what it had agreed\n to was the party holding the database.\n\nAn Exchange that holds a recorded digest for this account MUST return it\n here. Absence has exactly ONE meaning: no acceptance is recorded. Two\n situations produce it — the Exchange publishes no terms_digest, so nothing\n was ever accepted (and per RegisterRequest.terms_digest it MUST NOT record a\n presented value in that case), or the account was created before the operator\n began publishing one. It does NOT mean \"this account has no terms\", and an\n Exchange MUST NOT withhold a digest it holds: absence is already spoken for,\n so withholding would make the field state something untrue.\n\n The value is what was ACCEPTED, not what is published now. The two differ as\n soon as the operator revises its terms, and that difference is the point:\n comparing this against a freshly fetched WellKnownManifest.terms_digest is how\n an agent discovers that the terms moved under an account it already holds. A\n repeat Register will not tell it — a repeat is answered from the stored record\n and runs no gate at all.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("GetAccountStatusResponse — Exchange reports the account's current state.")))();
 
-export const IngestionSourceSchema = wire(z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]));
+export const IngestionSourceSchema = /* @__PURE__ */ (() => wire(z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"])))();
 
-export const JsonWebKeySchema = wire(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed."));
+export const JsonWebKeySchema = /* @__PURE__ */ (() => wire(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")))();
 
-export const KeyRevocationListSchema = wire(z.object({ "as_of": z.string().datetime({ offset: true }).describe("Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.").optional(), "revoked": z.array(z.string()).describe("Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.").optional() }).describe("KeyRevocationList — Body served at WBAFile.revocation_url.\n\nSnapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.\n\n Scope: a list revokes only keys of the directory whose revocation_url names\n it. A thumbprint of another party's key in this list revokes nothing."));
+export const KeyRevocationListSchema = /* @__PURE__ */ (() => wire(z.object({ "as_of": z.string().datetime({ offset: true }).describe("Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.").optional(), "revoked": z.array(z.string()).describe("Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.").optional() }).describe("KeyRevocationList — Body served at WBAFile.revocation_url.\n\nSnapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.\n\n Scope: a list revokes only keys of the directory whose revocation_url names\n it. A thumbprint of another party's key in this list revokes nothing.")))();
 
-export const LicenseSchema = wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm."));
+export const LicenseSchema = /* @__PURE__ */ (() => wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm.")))();
 
-export const LicenseTermSchema = wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible)."));
+export const LicenseTermSchema = /* @__PURE__ */ (() => wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")))();
 
-export const ObligationSchema = wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies."));
+export const ObligationSchema = /* @__PURE__ */ (() => wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")))();
 
-export const ObligationKindSchema = wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]));
+export const ObligationKindSchema = /* @__PURE__ */ (() => wire(z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"])))();
 
-export const ObligationTriggerSchema = wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]));
+export const ObligationTriggerSchema = /* @__PURE__ */ (() => wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"])))();
 
-export const OfferSchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile."));
+export const OfferSchema = /* @__PURE__ */ (() => wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")))();
 
-export const OfferAbsenceReasonSchema = wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]));
+export const OfferAbsenceReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"])))();
 
-export const OfferGroupSchema = wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource."));
+export const OfferGroupSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")))();
 
-export const PreviewSchema = wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query."));
+export const PreviewSchema = /* @__PURE__ */ (() => wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")))();
 
-export const PricingSchema = wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges."));
+export const PricingSchema = /* @__PURE__ */ (() => wire(z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing — Terms for a resource offer.\n\nProviders set prices in their preferred model. The Exchange\n normalizes to unit cost (effective cost per unit) for cross-exchange\n comparison — analogous to eCPM in programmatic advertising.\n Unit cost is denominated in the Exchange's base currency.\n\n Fields: model, rate, currency, unit_cost, estimated_quantity,\n license_duration_months, unit, metering.\n\n METERED PRICE. A PER_UNIT price is metered: it is charged per unit, and the\n publisher states the rate R, the price of one `unit`, and the unit. The\n offer may also state an estimate E (estimated_quantity, optional, positive\n when stated; see Offer). The Exchange's offer signature covers both, so the\n agent's acceptance of the offer is its consent to them.\n\n A metered purchase charges E × R, or one unit, 1 × R, when the offer states\n no estimate. That is the amount TransactionResultItem.cost carries for the\n item, and the charge is final. A disagreement about the quantity consumed\n is a dispute, which this version does not define further. The charge reads\n the offer's own `pricing` (Offer.pricing) — the offer's one price, which\n execute charges.")))();
 
-export const PricingMeteringSchema = wire(z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]));
+export const PricingMeteringSchema = /* @__PURE__ */ (() => wire(z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"])))();
 
-export const PricingModelSchema = wire(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]));
+export const PricingModelSchema = /* @__PURE__ */ (() => wire(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])))();
 
-export const ProviderRelationshipSchema = wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]));
+export const ProviderRelationshipSchema = /* @__PURE__ */ (() => wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"])))();
 
-export const PushResourcesRequestSchema = wire(z.object({ "caller_id": z.string().describe("DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const PushResourcesRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "caller_id": z.string().describe("DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") })))();
 
-export const PushResourcesResponseSchema = wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() }));
+export const PushResourcesResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() })))();
 
-export const QuotaSchema = wire(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it."));
+export const QuotaSchema = /* @__PURE__ */ (() => wire(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")))();
 
-export const QuotaWindowSchema = wire(z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]));
+export const QuotaWindowSchema = /* @__PURE__ */ (() => wire(z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"])))();
 
-export const RateLimitInfoSchema = wire(z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("RateLimitInfo — Caller's rate limit status on this Exchange.\n Modeled after IETF RateLimit header fields (RFC 9110 §15.5.30)\n and Shutterstock's rate limit response pattern."));
+export const RateLimitInfoSchema = /* @__PURE__ */ (() => wire(z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("RateLimitInfo — Caller's rate limit status on this Exchange.\n Modeled after IETF RateLimit header fields (RFC 9110 §15.5.30)\n and Shutterstock's rate limit response pattern.")))();
 
-export const RefreshCatalogRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const RefreshCatalogRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") })))();
 
-export const RefreshCatalogResponseSchema = wire(z.object({ "started": z.boolean().describe("Whether the refresh was started").default(false), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const RefreshCatalogResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "started": z.boolean().describe("Whether the refresh was started").default(false), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") })))();
 
-export const RegisterRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. It matters most here: the caller reaches this endpoint by\n resolving a fetched, cached manifest, so the RFC 9421 signature covers only\n the URL that was dialled — this field is what lets the genuine Exchange\n refuse a registration that was meant for a different one."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "registration_data": z.record(z.string(), z.any()).describe("Business-registration data about the operator behind this agent — the\n details an Exchange needs to open a commercial account (legal entity,\n address, jurisdiction, tax identifiers and the like). The specific members\n are operator-defined and not fixed in the wire contract; whether the\n Exchange inspects them follows its manifest — see\n AccountRegistration.data_schema. This is NOT an identity claim: the caller's\n identity is taken from the verified request signature, never from this\n payload, so nothing here is trusted as authentication.\n\nBounded, because a published data_schema is applied to THIS. The schema's own\n caps bound the schema; the cost of checking a payload against it is roughly\n that cost multiplied by the elements in the payload, and the multiplier was\n unbounded — a subschema under `items` is counted once by the schema's\n evaluation cap and evaluated once per element at runtime.\n\n   At most 64 members at the top level. Top level rather than every level:\n   nested bulk is already bounded by the byte cap below, and a recursive count\n   would refuse a small document that merely nests, which a business entity\n   legitimately does — an address is an object.\n\n   At most 32 nested JSON containers, counting this member itself as the first —\n   the same number and the same counting rule as the schema's own depth cap,\n   because it is the same question asked of the other document. It is bounded\n   for a reason the other two caps do not cover: a deeply nested payload is\n   small and has few top-level members, and canonicalising it walks it\n   RECURSIVELY, so without a stated bound the verdict was a property of the\n   reader's runtime rather than of the payload — one implementation refused\n   past roughly five hundred containers on one release of its language and\n   accepted nine hundred on the next, while two others accepted every depth\n   tried. Checked before the payload is canonicalised, so the bound precedes\n   the walk it exists to bound.\n\n   At most 16384 bytes, measured as this member's RFC 8785 (JCS) CANONICAL JSON\n   encoding. The unit is named on purpose and is the load-bearing half of the\n   rule: every other cap in this contract is over bytes a party actually served,\n   and this member is never served as bytes — it is a Struct, decoded before any\n   consumer sees it. \"16KB\" therefore means nothing until an encoding is chosen,\n   and two implementations choosing privately is the same both-ends disagreement\n   the schema rules exist to prevent. JCS also pins number formatting, which is\n   not a detail: a payload carrying 1e300 is seven bytes under one renderer and\n   three hundred under another.\n\n A payload with NO JSON REPRESENTATION at all is refused in the same class as\n the three bounds: it has no canonical encoding, so the byte cap above has\n nothing to measure. This member is a Struct, and a Struct can carry two such\n values — both of which the protobuf binary decoder accepts and proto-JSON\n refuses to render:\n\n   a NON-FINITE NUMBER. JSON can represent neither NaN nor an infinity, while\n   Struct's number_value is an IEEE-754 double that carries one perfectly well.\n\n   a VALUE WITH NO KIND SET. google.protobuf.Value holds its payload in a\n   oneof, and a oneof with no member set is well-formed on the wire. There is\n   no JSON value it denotes, so there is nothing to write.\n\n That check MUST read the decoded protobuf value, never a native map converted\n from it. This is stated because two conformant implementations already\n answered the same signed request differently, and because NEITHER value\n survives the conversion. Some runtimes render a non-finite double as the\n STRING \"NaN\", \"Infinity\" or \"-Infinity\", and once that has happened the\n payload cannot be told apart from one that legitimately carries that text —\n an operator legally named NaN is a valid string value that has to be\n accepted. A value with no kind set converts to the same empty result as a\n JSON null, which is a value the payload may legitimately carry. In both cases\n the conversion destroys the information, so the check has to precede it.\n\n ORDER. The four checks on this member run in this sequence, and the sequence\n is not free choice:\n\n   1. top-level member count\n   2. nesting depth\n   3. canonicalizability, which is where both no-JSON-form checks live\n   4. canonical byte size\n\n The first two are counts, and they bound the document the third then has to\n walk. The third precedes the fourth because the byte cap is DEFINED as the\n length of the canonical encoding: until that encoding exists there is no\n number to compare against, and answering \"too large\" for a payload that has\n no encoding at all would state something untrue about it.\n\n All four are checked BEFORE the schema runs, for the reason the schema's own\n size cap is checked before the document is parsed — a check that exists to\n stop work has to precede the work. A payload breaking any of them is a\n malformed request, NOT REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA:\n that reason names non-conformance to a published schema and applies only\n where one is published, while these four hold either way. The terms_digest\n gate sits between these four and the schema — see\n RegisterRequest.terms_digest for why that order is also fixed.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Echo of WellKnownManifest.terms_digest, stating WHICH terms document the\n operator accepted. The request signature covers this statement, so it is the\n durable record a later dispute asks for; the Exchange stores the accepted\n value with the account. Four cases, all defined: the Exchange publishes a\n digest and this matches — registration proceeds; it publishes one and this\n differs — refused with REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE; it\n publishes one and this is absent — refused with the SAME reason, because the\n caller's remedy is identical (read the manifest, echo, retry) and a second\n reason would split one fix in two; it publishes none and this is present —\n the Exchange MUST ignore the value and MUST NOT record it as an acceptance,\n since it publishes no digest and therefore cannot verify what document the\n value refers to, and storing it would put an unverifiable claim exactly\n where this field exists to hold a verified one. A registering client MUST\n read the digest from a FRESHLY fetched manifest rather than a cached copy —\n a cached endpoint is fine, a cached digest is not, because a client cannot\n detect staleness locally and a warm cache would otherwise make it retry a\n refused value until the cache expired. Registration happens once per\n Exchange, so the extra fetch is cheap.\n\nGATE ORDER. This gate runs AFTER the four registration_data checks (see\n RegisterRequest.registration_data) and BEFORE the published data_schema.\n Terms before schema is not arbitrary: the schema may itself have changed in\n the revision the caller has not read yet. Validating a stale-terms caller\n against the CURRENT schema hands back field errors describing a document it\n has never seen, so it fixes those members, re-fetches, and finds the\n requirements have moved. Terms first means a caller is always told to go read\n the current manifest before it is told anything about that manifest's\n contents. It also keeps one refusal to one remedy: TERMS_DIGEST_STALE says\n re-fetch and echo, INVALID_REGISTRATION_DATA says fix the payload, and a\n request that would earn both is given the one that has to be done first.\n The whole order applies only when an account is being CREATED: a repeat\n registration is answered from the stored record and runs no gate at all, so\n the four cases above are the four cases of a FIRST registration. See\n \"Repeat registration\" in the Agent Account Registration section header.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("RegisterRequest — Agent asks the Exchange to create its account."));
+export const RegisterRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. It matters most here: the caller reaches this endpoint by\n resolving a fetched, cached manifest, so the RFC 9421 signature covers only\n the URL that was dialled — this field is what lets the genuine Exchange\n refuse a registration that was meant for a different one."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "registration_data": z.record(z.string(), z.any()).describe("Business-registration data about the operator behind this agent — the\n details an Exchange needs to open a commercial account (legal entity,\n address, jurisdiction, tax identifiers and the like). The specific members\n are operator-defined and not fixed in the wire contract; whether the\n Exchange inspects them follows its manifest — see\n AccountRegistration.data_schema. This is NOT an identity claim: the caller's\n identity is taken from the verified request signature, never from this\n payload, so nothing here is trusted as authentication.\n\nBounded, because a published data_schema is applied to THIS. The schema's own\n caps bound the schema; the cost of checking a payload against it is roughly\n that cost multiplied by the elements in the payload, and the multiplier was\n unbounded — a subschema under `items` is counted once by the schema's\n evaluation cap and evaluated once per element at runtime.\n\n   At most 64 members at the top level. Top level rather than every level:\n   nested bulk is already bounded by the byte cap below, and a recursive count\n   would refuse a small document that merely nests, which a business entity\n   legitimately does — an address is an object.\n\n   At most 32 nested JSON containers, counting this member itself as the first —\n   the same number and the same counting rule as the schema's own depth cap,\n   because it is the same question asked of the other document. It is bounded\n   for a reason the other two caps do not cover: a deeply nested payload is\n   small and has few top-level members, and canonicalising it walks it\n   RECURSIVELY, so without a stated bound the verdict was a property of the\n   reader's runtime rather than of the payload — one implementation refused\n   past roughly five hundred containers on one release of its language and\n   accepted nine hundred on the next, while two others accepted every depth\n   tried. Checked before the payload is canonicalised, so the bound precedes\n   the walk it exists to bound.\n\n   At most 16384 bytes, measured as this member's RFC 8785 (JCS) CANONICAL JSON\n   encoding. The unit is named on purpose and is the load-bearing half of the\n   rule: every other cap in this contract is over bytes a party actually served,\n   and this member is never served as bytes — it is a Struct, decoded before any\n   consumer sees it. \"16KB\" therefore means nothing until an encoding is chosen,\n   and two implementations choosing privately is the same both-ends disagreement\n   the schema rules exist to prevent. JCS also pins number formatting, which is\n   not a detail: a payload carrying 1e300 is seven bytes under one renderer and\n   three hundred under another.\n\n A payload with NO JSON REPRESENTATION at all is refused in the same class as\n the three bounds: it has no canonical encoding, so the byte cap above has\n nothing to measure. This member is a Struct, and a Struct can carry two such\n values — both of which the protobuf binary decoder accepts and proto-JSON\n refuses to render:\n\n   a NON-FINITE NUMBER. JSON can represent neither NaN nor an infinity, while\n   Struct's number_value is an IEEE-754 double that carries one perfectly well.\n\n   a VALUE WITH NO KIND SET. google.protobuf.Value holds its payload in a\n   oneof, and a oneof with no member set is well-formed on the wire. There is\n   no JSON value it denotes, so there is nothing to write.\n\n That check MUST read the decoded protobuf value, never a native map converted\n from it. This is stated because two conformant implementations already\n answered the same signed request differently, and because NEITHER value\n survives the conversion. Some runtimes render a non-finite double as the\n STRING \"NaN\", \"Infinity\" or \"-Infinity\", and once that has happened the\n payload cannot be told apart from one that legitimately carries that text —\n an operator legally named NaN is a valid string value that has to be\n accepted. A value with no kind set converts to the same empty result as a\n JSON null, which is a value the payload may legitimately carry. In both cases\n the conversion destroys the information, so the check has to precede it.\n\n ORDER. The four checks on this member run in this sequence, and the sequence\n is not free choice:\n\n   1. top-level member count\n   2. nesting depth\n   3. canonicalizability, which is where both no-JSON-form checks live\n   4. canonical byte size\n\n The first two are counts, and they bound the document the third then has to\n walk. The third precedes the fourth because the byte cap is DEFINED as the\n length of the canonical encoding: until that encoding exists there is no\n number to compare against, and answering \"too large\" for a payload that has\n no encoding at all would state something untrue about it.\n\n All four are checked BEFORE the schema runs, for the reason the schema's own\n size cap is checked before the document is parsed — a check that exists to\n stop work has to precede the work. A payload breaking any of them is a\n malformed request, NOT REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA:\n that reason names non-conformance to a published schema and applies only\n where one is published, while these four hold either way. The terms_digest\n gate sits between these four and the schema — see\n RegisterRequest.terms_digest for why that order is also fixed.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Echo of WellKnownManifest.terms_digest, stating WHICH terms document the\n operator accepted. The request signature covers this statement, so it is the\n durable record a later dispute asks for; the Exchange stores the accepted\n value with the account. Four cases, all defined: the Exchange publishes a\n digest and this matches — registration proceeds; it publishes one and this\n differs — refused with REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE; it\n publishes one and this is absent — refused with the SAME reason, because the\n caller's remedy is identical (read the manifest, echo, retry) and a second\n reason would split one fix in two; it publishes none and this is present —\n the Exchange MUST ignore the value and MUST NOT record it as an acceptance,\n since it publishes no digest and therefore cannot verify what document the\n value refers to, and storing it would put an unverifiable claim exactly\n where this field exists to hold a verified one. A registering client MUST\n read the digest from a FRESHLY fetched manifest rather than a cached copy —\n a cached endpoint is fine, a cached digest is not, because a client cannot\n detect staleness locally and a warm cache would otherwise make it retry a\n refused value until the cache expired. Registration happens once per\n Exchange, so the extra fetch is cheap.\n\nGATE ORDER. This gate runs AFTER the four registration_data checks (see\n RegisterRequest.registration_data) and BEFORE the published data_schema.\n Terms before schema is not arbitrary: the schema may itself have changed in\n the revision the caller has not read yet. Validating a stale-terms caller\n against the CURRENT schema hands back field errors describing a document it\n has never seen, so it fixes those members, re-fetches, and finds the\n requirements have moved. Terms first means a caller is always told to go read\n the current manifest before it is told anything about that manifest's\n contents. It also keeps one refusal to one remedy: TERMS_DIGEST_STALE says\n re-fetch and echo, INVALID_REGISTRATION_DATA says fix the payload, and a\n request that would earn both is given the one that has to be done first.\n The whole order applies only when an account is being CREATED: a repeat\n registration is answered from the stored record and runs no gate at all, so\n the four cases above are the four cases of a FIRST registration. See\n \"Repeat registration\" in the Agent Account Registration section header.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("RegisterRequest — Agent asks the Exchange to create its account.")))();
 
-export const RegisterResponseSchema = wire(z.object({ "active": z.boolean().describe("Whether the account is currently active. Accounts may start inactive\n and be activated out-of-band by the Exchange operator.").default(false), "billing_ref": z.string().describe("Opaque, long-lived, per-Exchange account handle minted by the Exchange.\n Means nothing on its own and is never accepted as caller input. A repeat\n Register for the same agent returns the same value.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("RegisterResponse — Exchange returns the minted account handle."));
+export const RegisterResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "active": z.boolean().describe("Whether the account is currently active. Accounts may start inactive\n and be activated out-of-band by the Exchange operator.").default(false), "billing_ref": z.string().describe("Opaque, long-lived, per-Exchange account handle minted by the Exchange.\n Means nothing on its own and is never accepted as caller input. A repeat\n Register for the same agent returns the same value.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("RegisterResponse — Exchange returns the minted account handle.")))();
 
-export const RegistrationFailureSchema = wire(z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RegistrationFailure — a registration request could not be completed."));
+export const RegistrationFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RegistrationFailure — a registration request could not be completed.")))();
 
-export const RegistrationFailureReasonSchema = wire(z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]));
+export const RegistrationFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"])))();
 
-export const RegistrationFieldErrorSchema = wire(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema)."));
+export const RegistrationFieldErrorSchema = /* @__PURE__ */ (() => wire(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")))();
 
-export const RemoveResourcesRequestSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "paths": z.array(z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048)).max(256).describe("DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot\n tell whose resource it is or whether the signer may remove it. Name each\n resource in `resources` instead; a request that carries only paths has no\n resources and is refused as malformed. The field and its item rules are\n retained because removing them would break the v1 wire contract.").optional(), "resources": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")).min(1).max(256).describe("The resources to remove, each named by the domain and path a push names it\n by — at least one and at most 256, the same batch bound\n PushResourcesRequest.entries carries and for the same reason.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const RemoveResourcesRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "paths": z.array(z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048)).max(256).describe("DEPRECATED, ignored. A bare path names no domain, so the Exchange cannot\n tell whose resource it is or whether the signer may remove it. Name each\n resource in `resources` instead; a request that carries only paths has no\n resources and is refused as malformed. The field and its item rules are\n retained because removing them would break the v1 wire contract.").optional(), "resources": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")).min(1).max(256).describe("The resources to remove, each named by the domain and path a push names it\n by — at least one and at most 256, the same batch bound\n PushResourcesRequest.entries carries and for the same reason.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") })))();
 
-export const RemoveResourcesResponseSchema = wire(z.object({ "removed": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries removed").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }));
+export const RemoveResourcesResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "removed": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries removed").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") })))();
 
-export const ReportingObligationSchema = wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nA usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference."));
+export const ReportingObligationSchema = /* @__PURE__ */ (() => wire(z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("ReportingObligation — Requirements attached to a delivery.\n\nA usage report is a record of the quantity consumed. An honest report of a\n quantity that differs from the estimate, above or below, is a valid report\n and is never refused for that difference.")))();
 
-export const ReportingPolicySchema = wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep."));
+export const ReportingPolicySchema = /* @__PURE__ */ (() => wire(z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("ReportingPolicy is the reporting-policy payload shared by\n SetReportingPolicy's request and response. The field rules live here once, so\n the write and the echoed read-back stay in lockstep.")))();
 
-export const RequestAuthFailureSchema = wire(z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RequestAuthFailure — an RPC request's HTTP message signature was refused."));
+export const RequestAuthFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RequestAuthFailure — an RPC request's HTTP message signature was refused.")))();
 
-export const RequestAuthFailureReasonSchema = wire(z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]));
+export const RequestAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"])))();
 
-export const RequestConstraintsSchema = wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints."));
+export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
 
-export const RequesterSchema = wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends."));
+export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.")))();
 
-export const RequesterTypeSchema = wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]));
+export const RequesterTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"])))();
 
-export const ResolutionTypeSchema = wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOLUTION_TYPE_REDELIVERY","RESOLUTION_TYPE_REJECTED","RESOLUTION_TYPE_INVESTIGATION"]));
+export const ResolutionTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["RESOLUTION_TYPE_CREDIT","RESOLUTION_TYPE_REDELIVERY","RESOLUTION_TYPE_REJECTED","RESOLUTION_TYPE_INVESTIGATION"])))();
 
-export const ResourceAttestationSchema = wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"]."));
+export const ResourceAttestationSchema = /* @__PURE__ */ (() => wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")))();
 
-export const ResourceEntrySchema = wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default."));
+export const ResourceEntrySchema = /* @__PURE__ */ (() => wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")))();
 
-export const ResourceIdentitySchema = wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange)."));
+export const ResourceIdentitySchema = /* @__PURE__ */ (() => wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).")))();
 
-export const ResourceMutabilitySchema = wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]));
+export const ResourceMutabilitySchema = /* @__PURE__ */ (() => wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"])))();
 
-export const ResourceQuerySchema = wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding."));
+export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
 
-export const ResourceRefSchema = wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI."));
+export const ResourceRefSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")))();
 
-export const ResourceResponseSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup."));
+export const ResourceResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup.")))();
 
-export const RestrictionSchema = wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories"));
+export const RestrictionSchema = /* @__PURE__ */ (() => wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")))();
 
-export const RestrictionKindSchema = wire(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]));
+export const RestrictionKindSchema = /* @__PURE__ */ (() => wire(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])))();
 
-export const RetrievalAuthFailureSchema = wire(z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed."));
+export const RetrievalAuthFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("RetrievalAuthFailure — a signed-URL retrieval / proof-of-possession check failed.")))();
 
-export const RetrievalAuthFailureReasonSchema = wire(z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]));
+export const RetrievalAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"])))();
 
-export const RoleSchema = wire(z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]));
+export const RoleSchema = /* @__PURE__ */ (() => wire(z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"])))();
 
-export const SetReportingPolicyRequestSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetReportingPolicyRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy to apply. Required — an absent payload would otherwise\n skip validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") })))();
 
-export const SetReportingPolicyResponseSchema = wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetReportingPolicyResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "policy": z.object({ "quantity_tolerance": z.coerce.number().gte(0).lte(1).describe("DEPRECATED, ignored. This used to set the accepted relative deviation\n between the estimated and the reported quantity, and a report outside it was\n refused. A usage report is never refused for its quantity: the reported\n quantity is unrestricted, and monitoring how far reports fall from\n estimates is the Exchange operator's own business, not part of the\n protocol. An Exchange MUST NOT refuse a report on this setting. The field and\n its bounds are retained because removing them would break the wire\n contract.").optional(), "required_fields": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(32).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), "All items must be unique!").describe("Report field names the usage-report validator requires. The wire constrains\n only the token shape; which names are meaningful is defined by the receiving\n Exchange and may change without a contract change. Names are a set: repeats\n are rejected. Empty means no required fields.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose reporting policy is being replaced."), "window_seconds": z.coerce.number().int().gt(0).lte(31536000).describe("Reporting window in seconds. Applies to obligations minted after this call;\n obligations already issued keep the window they were minted with. Capped at\n one year. Omitted: the receiving Exchange's default applies.").optional() }).describe("The reporting policy as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") })))();
 
-export const SetTenantFeeRateRequestSchema = wire(z.object({ "rate": z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("The fee rate to apply. Required — an absent payload would otherwise skip\n validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetTenantFeeRateRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "rate": z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("The fee rate to apply. Required — an absent payload would otherwise skip\n validation of its fields."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") })))();
 
-export const SetTenantFeeRateResponseSchema = wire(z.object({ "rate": z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("The fee rate as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") }));
+export const SetTenantFeeRateResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "rate": z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("The fee rate as persisted."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in fora.proto.").default("") })))();
 
-export const SubscriptionQuotaInfoSchema = wire(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time)."));
+export const SubscriptionQuotaInfoSchema = /* @__PURE__ */ (() => wire(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")))();
 
-export const TenantFeeRateSchema = wire(z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep."));
+export const TenantFeeRateSchema = /* @__PURE__ */ (() => wire(z.object({ "fee_rate_bps": z.coerce.number().int().gte(0).lt(10000).describe("Fee rate in basis points of gross: fee = floor(gross * bps / 10000).\n Below 10000 keeps the fee strictly under 100%; integer basis points avoid\n float drift when aggregating many charges. 0 is a legitimate explicit\n value (\"no fee\"), not an unset sentinel.").optional(), "notes": z.string().max(1024).describe("Operator commentary on the rate (why it was set, by whom, ticket link).\n Omitted clears any existing note.").optional(), "tenant_id": z.string().min(1).max(255).describe("The tenant whose fee rate is being set.") }).describe("TenantFeeRate is the fee-rate payload shared by SetTenantFeeRate's request\n and response. The field rules live here once, so the write and the echoed\n read-back stay in lockstep.")))();
 
-export const TermSemanticsSchema = wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]));
+export const TermSemanticsSchema = /* @__PURE__ */ (() => wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"])))();
 
-export const TransactionDenialSchema = wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all."));
+export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.")))();
 
-export const TransactionItemSchema = wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction."));
+export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
 
-export const TransactionRequestSchema = wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction."));
+export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
-export const TransactionResponseSchema = wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial)."));
+export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
-export const TransactionResultItemSchema = wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction."));
+export const TransactionResultItemSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")))();
 
-export const UpstreamRefusalSchema = wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered."));
+export const UpstreamRefusalSchema = /* @__PURE__ */ (() => wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.")))();
 
-export const UsageSchema = wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system."));
+export const UsageSchema = /* @__PURE__ */ (() => wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system.")))();
 
-export const UsageAssetSchema = wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report."));
+export const UsageAssetSchema = /* @__PURE__ */ (() => wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")))();
 
-export const UsageReportSchema = wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason)."));
+export const UsageReportSchema = /* @__PURE__ */ (() => wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).")))();
 
-export const UsageReportRejectionSchema = wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted."));
+export const UsageReportRejectionSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted.")))();
 
-export const UsageReportRejectionReasonSchema = wire(z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]));
+export const UsageReportRejectionReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"])))();
 
-export const UsageReportResponseSchema = wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report."));
+export const UsageReportResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report.")))();
 
-export const WBAFileSchema = wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5."));
+export const WBAFileSchema = /* @__PURE__ */ (() => wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.")))();
 
-export const WellKnownManifestSchema = wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`."));
+export const WellKnownManifestSchema = /* @__PURE__ */ (() => wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`.")))();
 
diff --git a/package.json b/package.json
index 7df4daaa..526602d2 100644
--- a/package.json
+++ b/package.json
@@ -3,6 +3,7 @@
   "version": "1.0.8",
   "private": true,
   "type": "module",
+  "sideEffects": false,
   "description": "FORA protocol SDK for TypeScript — the IO-free protocol mechanics (signing, verification, canonicalization) plus the IO tiers built on them: the key/endpoint resolvers and the Connect-unary JSON client. Exposed at the repo root so plain npm — which has no git-subdirectory support — can pin the TS SDK by commit as a whole-repo git dependency (parity with the Go/pip git+subdir+rev pins). Re-exports sdk/ts, which compiles the in-repo gen/ts by relative path. Self-contained packaging and npm publish are not yet implemented.",
   "files": [
     "sdk/ts",
diff --git a/scripts/sdk-types/gen_zod.mjs b/scripts/sdk-types/gen_zod.mjs
index c684b853..ffc42f00 100644
--- a/scripts/sdk-types/gen_zod.mjs
+++ b/scripts/sdk-types/gen_zod.mjs
@@ -40,10 +40,13 @@ let out =
   'import { z } from "zod";\n' +
   'import { wire } from "./base.ts";\n\n';
 
+// Each schema is built inside a function call marked pure, so a bundler drops every schema
+// a program does not use: building one runs Zod constructors, which a bundler otherwise
+// has to keep. Without the mark, importing one schema carries all of them.
 for (const name of Object.keys(defs).sort()) {
   const root = inline(defs[name], [name]);
   root["$schema"] = "https://json-schema.org/draft/2020-12/schema";
-  out += `export const ${name}Schema = wire(${String(jsonSchemaToZod(root, { module: "none" }))});\n\n`;
+  out += `export const ${name}Schema = /* @__PURE__ */ (() => wire(${String(jsonSchemaToZod(root, { module: "none" }))}))();\n\n`;
 }
 
 // proto-JSON encodes an integer as a number OR a string (int64 is always a string).
diff --git a/sdk/ts/package.json b/sdk/ts/package.json
index a3ca8e7f..bf5270fa 100644
--- a/sdk/ts/package.json
+++ b/sdk/ts/package.json
@@ -4,6 +4,7 @@
   "private": true,
   "description": "FORA protocol SDK for TypeScript — the IO-free protocol mechanics (signing, verification, canonicalization) plus the IO tiers built on them: the key/endpoint resolvers and the Connect-unary JSON client. Exposed at the repo root so plain npm — which has no git-subdirectory support — can pin the TS SDK by commit as a whole-repo git dependency (parity with the Go/pip git+subdir+rev pins). Re-exports sdk/ts, which compiles the in-repo gen/ts by relative path. Self-contained packaging and npm publish are not yet implemented.",
   "type": "module",
+  "sideEffects": false,
   "exports": {
     "./base64url": "./src/base64url.ts",
     "./thumbprint": "./src/thumbprint.ts",
diff --git a/sdk/ts/scripts/build.mjs b/sdk/ts/scripts/build.mjs
index 16ec95d0..77108ec6 100644
--- a/sdk/ts/scripts/build.mjs
+++ b/sdk/ts/scripts/build.mjs
@@ -100,6 +100,9 @@ const manifest = {
   repository: { type: "git", url: "git+https://github.com/FORA-Protocol/protocol.git", directory: "sdk/ts" },
   homepage: "https://fora-protocol.org",
   type: "module",
+  // No module has an effect on import, so a bundler drops every module a program does not
+  // use. Read from sdk/ts/package.json, which states the same for the git-install path.
+  sideEffects: sdkPkg.sideEffects,
   files: ["gen", "sdk"],
   exports: { ...exports, [schemaSubpath]: schemaTarget },
   dependencies: sdkPkg.dependencies,
diff --git a/sdk/ts/tests/edge-bundle-size.guard.test.ts b/sdk/ts/tests/edge-bundle-size.guard.test.ts
new file mode 100644
index 00000000..ce0a899f
--- /dev/null
+++ b/sdk/ts/tests/edge-bundle-size.guard.test.ts
@@ -0,0 +1,79 @@
+// A Worker that imports part of the edge entry carries only that part.
+//
+// Bundled the way a Worker is (esbuild, platform neutral, the workerd/worker/browser
+// conditions, minified), importing one constant from the edge entry used to carry about
+// 0.9 MB: ajv and every strict schema, and every generated Zod schema. The packages are
+// now marked side-effect free, the strict validators are compiled per message at build
+// time, and each Zod schema is built in a call a bundler may drop. This guard bundles
+// three programs and checks what each one carries.
+
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+
+const require = createRequire(import.meta.url);
+const esbuild = require("esbuild") as typeof import("esbuild");
+
+const here = (p: string): string => fileURLToPath(new URL(p, import.meta.url));
+const EDGE = JSON.stringify(here("../resolvers/edge.ts"));
+
+interface Bundle {
+	bytes: number;
+	inputs: string[];
+}
+
+async function bundle(program: string): Promise<Bundle> {
+	const out = await esbuild.build({
+		stdin: { contents: program, resolveDir: here("."), loader: "ts" },
+		bundle: true,
+		write: false,
+		format: "esm",
+		platform: "neutral",
+		conditions: ["workerd", "worker", "browser"],
+		mainFields: ["module", "main"],
+		minify: true,
+		metafile: true,
+		// Zod is the program's own dependency, a peer of the SDK; what is measured is the
+		// SDK's share.
+		external: ["zod"],
+		logLevel: "silent",
+	});
+	const file = out.outputFiles[0];
+	const output = Object.values(out.metafile.outputs)[0];
+	if (file === undefined || output === undefined) throw new Error("esbuild produced no output");
+	return {
+		bytes: file.contents.byteLength,
+		inputs: Object.entries(output.inputs)
+			.filter(([, v]) => v.bytesInOutput > 0)
+			.map(([k]) => k),
+	};
+}
+
+const carries = (b: Bundle, fragment: string): boolean => b.inputs.some((i) => i.includes(fragment));
+
+describe("the edge entry is tree-shakeable", () => {
+	it("a program that imports one constant carries almost nothing", async () => {
+		const b = await bundle(`import { WBA_DIRECTORY_PATH } from ${EDGE}; console.log(WBA_DIRECTORY_PATH);`);
+		expect(b.bytes).toBeLessThan(1024);
+		expect(carries(b, "node_modules/ajv")).toBe(false);
+		expect(carries(b, "gen/ts/strict")).toBe(false);
+		expect(carries(b, "gen/ts/wire/schemas.ts")).toBe(false);
+	});
+
+	it("a strict reader carries its own message's validator and no compiler", async () => {
+		const b = await bundle(`import { readManifest } from ${EDGE}; console.log(readManifest);`);
+		expect(carries(b, "node_modules/ajv")).toBe(false);
+		expect(carries(b, "gen/ts/strict/fora.v1.WellKnownManifest.ts")).toBe(true);
+		expect(carries(b, "gen/ts/strict/fora.v1.TransactionResponse.ts")).toBe(false);
+		expect(carries(b, "gen/ts/strict/index.ts")).toBe(false);
+	});
+
+	it("the WBA key resolver carries no strict validator and only the Zod schemas it parses", async () => {
+		const b = await bundle(`import { createWBAKeyResolver } from ${EDGE}; console.log(createWBAKeyResolver);`);
+		expect(carries(b, "node_modules/ajv")).toBe(false);
+		expect(carries(b, "gen/ts/strict")).toBe(false);
+		// Every generated Zod schema in the bundle was about 0.75 MB; the two the resolver
+		// parses with are a small part of that.
+		expect(b.bytes).toBeLessThan(100 * 1024);
+	});
+});

From 91c4c129752e16d28f8929ce330f2a5faab00f36 Mon Sep 17 00:00:00 2001
From: "Constantine.mirin" <konstantin.mirin@gmail.com>
Date: Mon, 5 Oct 2026 11:28:23 -0400
Subject: [PATCH 132/164] Record the build-time strict check, the directory
 Ed25519 option and the tree-shakeable edge entry

The TypeScript README says the strict check generates no code at run time
except for a caller-given schema, which readers take verifyEd25519, and
what a Worker carries. The changelog and the design history record the
three changes and why.
---
 docs/design-history.md                        | 20 +++++++++++++++++++
 proto/CHANGELOG.md                            | 19 ++++++++++++++++--
 sdk/ts/README.md                              | 16 +++++++++++----
 .../src/content/docs/reference/changelog.mdx  | 19 ++++++++++++++++--
 4 files changed, 66 insertions(+), 8 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index e7e3cd49..6dfb8047 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2344,6 +2344,26 @@ all three: a directory is fetched over https from the origin its signer named. T
 serve directories over TLS and inject a client that trusts the test server; the
 TypeScript tests inject a fetch that answers the https URL.
 
+**The strict check generates no code at run time.** The TypeScript strict check compiled
+each message's strict JSON Schema with ajv on first use, and ajv compiles by building code
+from strings. Cloudflare Workers refuses that ("EvalError: Code generation from strings
+disallowed for this context"), so every strict reader of the edge entry failed on a real
+Worker, while the Workers test pool, which allows eval, passed. The schemas the SDK checks
+by name are now compiled when the generated code is generated, with ajv's standalone
+output, into `gen/ts/strict/`, one module per message, drift-gated like the rest of
+`gen/`. A test runs the edge readers in a Node vm context with code generation from
+strings disabled, which refuses eval with the same EvalError. Only a schema a caller
+passes to `checkStrict` is still compiled at run time, because it is not known at build
+time.
+
+**A Worker carries only what it imports.** Importing one constant from the edge entry
+carried about 0.9 MB: ajv and every strict schema, and every generated Zod schema, because
+a bundler must keep a module whose import may have an effect, and must keep each Zod
+schema's construction. The TypeScript packages are marked free of side effects, the
+strict validators are one module per message, and each generated Zod schema is built in a
+call marked pure. A guard bundles the edge entry the way a Worker is bundled and checks
+what a constant, a strict reader and the WBA key resolver each carry.
+
 **A directory response signature filters keys in the resolver and gates the reader.**
 The resolvers hand out only keys the response is signed by; a listed key without a valid
 signature reads as absent, the way a removed key does, so a rotation in progress or a key
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 5dda94e3..f57cbcd4 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -800,8 +800,23 @@ SDKs, in all three languages:
   edge runtime: the resolvers with an injected `fetch` and no Node import. The existing
   `@fora-protocol/sdk/resolvers` entry keeps its guarded Node default. A guard test fails
   on any `undici` or `node:` import, and any Node global, reachable from the edge entry,
-  `src/`, `core/` or `hono/`. `verifyDirectoryResponse` takes the injectable
-  `verifyEd25519` primitive `verifyAgentBinding` already took.
+  `src/`, `core/` or `hono/`. `verifyDirectoryResponse`, `readWBADirectory`,
+  `createWBAKeyResolver` and `createWBAOfferDirectoryFetch` take the injectable
+  `verifyEd25519` primitive `verifyAgentBinding` already took, so a runtime without
+  WebCrypto Ed25519, such as Fastly Compute, no longer reads every directory key as
+  unsigned.
+- TypeScript strict check: the strict schemas of the messages the SDK checks by name are
+  compiled at build time with ajv's standalone output, into the generated, drift-gated
+  `gen/ts/strict/`, so the strict readers and the client's strict decoding generate no code
+  at run time. On Cloudflare Workers, which refuses code built from strings, every strict
+  reader used to fail with an `EvalError`. A schema passed to `checkStrict` as its third
+  argument is still compiled at run time. A test runs the edge readers where code
+  generation from strings is refused.
+- TypeScript bundle size: the packages are marked `"sideEffects": false` and each generated
+  Zod schema is built in a call marked pure (`gen/ts/wire/schemas.ts` is regenerated), so a
+  bundler keeps only what a program imports. Importing one constant from the edge entry
+  carried about 0.9 MB and now carries a few bytes; a strict reader carries its own
+  message's validator and Zod schema. A guard test bundles the edge entry and checks it.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
   `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
   `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier
diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index d8fd8d71..54171de7 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -87,7 +87,11 @@ URL, bytes and media type; the license reader also verifies the bytes against
 served as `application/http-message-signatures-directory+json`, and must carry a response
 signature by every key it lists (`DirectoryResponseUnsigned`); the WBA key resolver hands
 out only the keys that signed. `checkStrict(message, payload)` from
-`@fora-protocol/sdk/client` applies the same check to any decoded message.
+`@fora-protocol/sdk/client` applies the same check to any decoded message. The strict
+schema of every message the SDK reads is compiled when the SDK is built, so the check
+generates no code at run time and works where `eval` is refused, as on Cloudflare
+Workers. A schema passed to `checkStrict` as its third argument is compiled at run time,
+with ajv, so that form needs a runtime that allows code generation.
 
 `@fora-protocol/sdk/resolvers` is the Node entry: its readers and resolvers default their
 transport to the SSRF-guarded undici client. An edge runtime (Cloudflare Workers, Fastly
@@ -95,9 +99,13 @@ Compute, Deno) imports `@fora-protocol/sdk/resolvers/edge` instead. It exports t
 readers and resolvers, imports nothing Node-only, and has no default transport: each
 call takes `fetch`, the runtime's own fetch or a wrapper around it, and the address guard
 for a host another party named is the caller's. The protocol mechanics (`core`, `identity`,
-`hono`, and the `src` helpers such as `pop` and `verify`) are edge-safe too, and
-`verifyAgentBinding` and `verifyDirectoryResponse` take `verifyEd25519` for a runtime
-without WebCrypto Ed25519.
+`hono`, and the `src` helpers such as `pop` and `verify`) are edge-safe too.
+`verifyAgentBinding`, `verifyDirectoryResponse`, `readWBADirectory`, `createWBAKeyResolver`
+and `createWBAOfferDirectoryFetch` take `verifyEd25519` for a runtime without WebCrypto
+Ed25519, such as Fastly Compute; without it, every listed key of a directory reads as
+unsigned there. The package is marked free of side effects, so a bundler keeps only what
+a Worker imports: importing one constant from the edge entry carries a few bytes, and a
+reader carries its own message's validator and Zod schema.
 
 `@fora-protocol/sdk/discovery-hint` reads the edge discovery headers of a 403:
 `parseDiscoveryHint(status, headers)` returns each of `X-Content-Rules` and
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 025a5526..f96b4b6a 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -812,8 +812,23 @@ SDKs, in all three languages:
   edge runtime: the resolvers with an injected `fetch` and no Node import. The existing
   `@fora-protocol/sdk/resolvers` entry keeps its guarded Node default. A guard test fails
   on any `undici` or `node:` import, and any Node global, reachable from the edge entry,
-  `src/`, `core/` or `hono/`. `verifyDirectoryResponse` takes the injectable
-  `verifyEd25519` primitive `verifyAgentBinding` already took.
+  `src/`, `core/` or `hono/`. `verifyDirectoryResponse`, `readWBADirectory`,
+  `createWBAKeyResolver` and `createWBAOfferDirectoryFetch` take the injectable
+  `verifyEd25519` primitive `verifyAgentBinding` already took, so a runtime without
+  WebCrypto Ed25519, such as Fastly Compute, no longer reads every directory key as
+  unsigned.
+- TypeScript strict check: the strict schemas of the messages the SDK checks by name are
+  compiled at build time with ajv's standalone output, into the generated, drift-gated
+  `gen/ts/strict/`, so the strict readers and the client's strict decoding generate no code
+  at run time. On Cloudflare Workers, which refuses code built from strings, every strict
+  reader used to fail with an `EvalError`. A schema passed to `checkStrict` as its third
+  argument is still compiled at run time. A test runs the edge readers where code
+  generation from strings is refused.
+- TypeScript bundle size: the packages are marked `"sideEffects": false` and each generated
+  Zod schema is built in a call marked pure (`gen/ts/wire/schemas.ts` is regenerated), so a
+  bundler keeps only what a program imports. Importing one constant from the edge entry
+  carried about 0.9 MB and now carries a few bytes; a strict reader carries its own
+  message's validator and Zod schema. A guard test bundles the edge entry and checks it.
 - Shared vectors, regenerated by the Go oracle and replayed by all three SDKs:
   `sign-request-vectors.json`, `verify-request-neg-vectors.json` (now with the expected
   `Accept-Signature`), the new `verify-request-accept-vectors.json` (the forms a verifier

From 74b0918aa7a0c3631f200224100a3b9d30970c37 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:28:03 +0200
Subject: [PATCH 133/164] Drop the alg newer Node stamps on an exported Ed25519
 JWK before web-bot-auth reads it

Node 22.23 exports an Ed25519 private key as a JWK carrying alg "Ed25519".
web-bot-auth 0.2.0 refuses an Ed25519 JWK whose alg is present and not "EdDSA",
so the interop test that signs with web-bot-auth failed before reaching the
SDK. The test needs only the key material, so it drops alg from the exported
JWK; it passes whether or not the runtime stamps one.
---
 sdk/ts/tests/web-bot-auth.interop.test.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/sdk/ts/tests/web-bot-auth.interop.test.ts b/sdk/ts/tests/web-bot-auth.interop.test.ts
index b79250a8..cce04ee1 100644
--- a/sdk/ts/tests/web-bot-auth.interop.test.ts
+++ b/sdk/ts/tests/web-bot-auth.interop.test.ts
@@ -35,7 +35,9 @@ const BODY = new TextEncoder().encode('{"q":1}') as Uint8Array<ArrayBuffer>;
 /** A fresh Ed25519 key, its public JWK, and its thumbprint keyid. */
 async function agentKey(): Promise<{ keyPair: CryptoKeyPair; jwk: JsonWebKey; keyid: string }> {
 	const keyPair = (await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"])) as CryptoKeyPair;
-	const jwk = await crypto.subtle.exportKey("jwk", keyPair.privateKey);
+	// Newer Node stamps alg "Ed25519" on an exported Ed25519 JWK, and web-bot-auth 0.2.0
+	// requires a present alg to be "EdDSA"; the tests need only the key material.
+	const { alg: _alg, ...jwk } = await crypto.subtle.exportKey("jwk", keyPair.privateKey);
 	const raw = new Uint8Array(await crypto.subtle.exportKey("raw", keyPair.publicKey));
 	return { keyPair, jwk, keyid: await thumbprint(raw) };
 }

From ba42c3ea26c547a67669bfc8921b9f7907bc09ef Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:29:42 +0200
Subject: [PATCH 134/164] Build the docs site in the local gate, and let the
 changelog name the renamed UpstreamRefusal field

The changelog names UpstreamRefusal.exchange to describe its rename to party.
remark-proto refuses a member reference whose type exists but whose member does
not, so the site build failed, which docs-ci and the Amplify deploy of main both
run. The name is a historical reference, so it joins proto-symbols-ignore.json,
which fails the build again if the field ever resolves.

ci-local.sh ran only the website's npm test, which never scans the pages, so it
passed while the site build failed. It now builds the site in the same step,
under the same node_modules guard, so the local gate covers what docs-ci and the
deploy run. The build writes only gitignored output.
---
 scripts/ci-local.sh               | 13 ++++++++++---
 website/proto-symbols-ignore.json |  3 ++-
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/scripts/ci-local.sh b/scripts/ci-local.sh
index a397e069..dcc31dd7 100755
--- a/scripts/ci-local.sh
+++ b/scripts/ci-local.sh
@@ -5,7 +5,8 @@
 # .github/workflows/proto-ci.yml invokes THIS script (it does not re-list the
 # steps), so CI and local cannot drift.
 #
-# Coverage: the proto gate (lint/generate/drift/build/test/docs) AND the SDK types
+# Coverage: the proto gate (lint/generate/drift/build/test/docs, including the docs
+# site build that docs-ci.yml and the Amplify deploy run) AND the SDK types
 # export gate (regenerate gen-sdk-types + drift of the Pydantic/Zod models and the
 # published JSON Schemas + their parity with the Go oracle + canonical round-trip). The two run as SEPARATE CI workflows (proto-ci.yml + sdk-types-ci.yml,
 # path-filtered); locally they are one command. proto-ci.yml sets
@@ -94,11 +95,17 @@ else
   note "skipped — needs python3"
 fi
 
-step "docs guards (remark-proto fail-path)"
+step "docs guards (remark-proto fail-path) + site build"
 # Proves the build-gating doc guard still bites (throws on an unknown proto
-# reference). Skipped only if the docs deps aren't installed locally.
+# reference), then builds the site the way docs-ci.yml and the Amplify deploy of
+# main do: the build runs remark-proto over every page and the link validator, so a
+# page naming a renamed symbol or a dead anchor fails here, not after merge. The
+# build writes only website/dist and website/.astro, both gitignored. Skipped only
+# if the docs deps aren't installed locally (proto-ci.yml, which runs this script,
+# installs none; docs-ci.yml builds the site there).
 if [ -d website/node_modules ]; then
   (cd website && npm test --silent) || fail=1
+  (cd website && npm run build --silent) || fail=1
 else
   note "skipped — run 'npm install' in website/ to enable"
 fi
diff --git a/website/proto-symbols-ignore.json b/website/proto-symbols-ignore.json
index dc5cea30..41ba1e4e 100644
--- a/website/proto-symbols-ignore.json
+++ b/website/proto-symbols-ignore.json
@@ -17,6 +17,7 @@
     "Image.alt",
     "Text.authority",
     "Retrieval.ratelmt",
-    "Package.license"
+    "Package.license",
+    "UpstreamRefusal.exchange"
   ]
 }

From 585c59e64a25bc35c628c9a160cf53e08d49ea01 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:38:25 +0200
Subject: [PATCH 135/164] Answer revocation for one directory's own list, in
 all three SDKs

WBAKeyResolver.Revoked reported a thumbprint revoked when it appeared on ANY
fetched directory's revocation list. Any directory the resolver fetched counts,
including one an unauthenticated Signature-Agent names and one that lists no key,
so one party's list could revoke another party's key. The protocol now says no
party's list revokes another's, and the offer-key cache was documented to inject
this predicate, where it would let such a list refuse an Exchange's offer key.

Revoked now takes the directory it answers for: Go Revoked(keyID, directory),
Python revoked(key_id, directory), TypeScript revoked(keyId, directory). The
reference is normalized as Resolve normalizes a Signature-Agent member, and a
fetched directory spelled differently still matches under the request-recipient
identity rule (case folded, an explicit :443 the same as none), so a spelling
variant never reads a revoked key as unrevoked. The cross-directory form is
removed.

The offer-key caches' predicate gains the exchange the key came from:
Go func(thumbprint, exchange string) bool, Python Callable[[str, str], bool],
TypeScript (thumbprint, exchange) => boolean. The resolvers' Revoked has this
shape. The pure screened selectors keep their thumbprint-only predicate.

Directories that list no key are still polled: a party that removed every key
may still revoke copies of them held elsewhere, and its list now answers only
for its own keys.

revocation-membership-vectors.json now serves two directories, one keyless whose
list names the other's key, and pins that the named key stays unrevoked for its
own directory and still resolves there. Each SDK also pins the identity matching.
---
 sdk/go/resolvers/cachedofferkeyresolver.go    |  28 ++--
 .../resolvers/cachedofferkeyresolver_test.go  |  20 ++-
 .../gen_revocation_membership_vectors_test.go | 127 +++++++++++++-----
 .../revocation-membership-vectors.json        |  67 +++++++--
 sdk/go/resolvers/wbakeyresolver.go            |  69 +++++++---
 ...keyresolver_directorybase_internal_test.go |  38 ++++++
 sdk/go/resolvers/wbakeyresolver_test.go       |  87 ++++++++++--
 sdk/python/README.md                          |  15 ++-
 .../fora_sdk/resolvers/offer_key_cache.py     |  25 ++--
 sdk/python/fora_sdk/resolvers/wba.py          |  62 ++++++---
 .../tests/test_resolvers_offer_key_cache.py   |  16 ++-
 .../test_resolvers_wba_revocation_parity.py   |  83 ++++++++----
 .../test_resolvers_wba_revoked_identity.py    |  50 +++++++
 sdk/ts/resolvers/offer-key-cache.ts           |  21 ++-
 sdk/ts/resolvers/wba.ts                       |  47 ++++---
 ...olvers-offer-key-cache.integration.test.ts |  10 +-
 .../resolvers-wba-revocation.parity.test.ts   |  84 +++++++-----
 .../resolvers-wba-revoked-identity.test.ts    |  54 ++++++++
 18 files changed, 698 insertions(+), 205 deletions(-)
 create mode 100644 sdk/python/tests/test_resolvers_wba_revoked_identity.py
 create mode 100644 sdk/ts/tests/resolvers-wba-revoked-identity.test.ts

diff --git a/sdk/go/resolvers/cachedofferkeyresolver.go b/sdk/go/resolvers/cachedofferkeyresolver.go
index 99c859a8..675250c8 100644
--- a/sdk/go/resolvers/cachedofferkeyresolver.go
+++ b/sdk/go/resolvers/cachedofferkeyresolver.go
@@ -42,12 +42,18 @@ type CachedOfferKeyResolverConfig struct {
 	TTL time.Duration
 	// Now is the cache-freshness + selection clock; nil uses time.Now. Tests inject.
 	Now func() time.Time
-	// Revoked screens a candidate offer-signing key by its RFC 7638 thumbprint: a
-	// revoked key is skipped during selection so the resolver never serves a
-	// window-active-but-revoked key on the verification path. nil screens nothing —
-	// inject WBAKeyResolver.Revoked (or an equivalent revoked-set predicate) on any
-	// verification path; leaving it nil is a visible waiver of emergency revocation.
-	Revoked func(thumbprint string) bool
+	// Revoked screens a candidate offer-signing key by its RFC 7638 thumbprint and
+	// the exchange domain whose directory it came from: a revoked key is skipped
+	// during selection so the resolver never serves a window-active-but-revoked key
+	// on the verification path. It must answer from that exchange's own revocation
+	// list only — no party's list revokes another party's key. nil screens nothing;
+	// leaving it nil is a visible waiver of emergency revocation.
+	//
+	// WBAKeyResolver.Revoked has this shape and injects directly. It knows the
+	// list of a directory only once that resolver has fetched the directory, so a
+	// predicate built on it screens only exchanges whose directories it has
+	// resolved.
+	Revoked func(thumbprint, exchange string) bool
 }
 
 // CachedOfferKeyResolver resolves an exchange DOMAIN to that exchange's active
@@ -62,7 +68,7 @@ type CachedOfferKeyResolver struct {
 	fetch   OfferDirectoryFetcher
 	ttl     time.Duration
 	now     func() time.Time
-	revoked func(string) bool
+	revoked func(thumbprint, exchange string) bool
 
 	// cache evicts least-recently-used at a fixed cap and carries its own lock, so
 	// this type holds no mutex. Concurrent misses for one domain still both fetch,
@@ -115,7 +121,13 @@ func (r *CachedOfferKeyResolver) Resolve(ctx context.Context, domain string) (ed
 	if err != nil {
 		return nil, err
 	}
-	key, notAfter, err := ActiveEd25519KeyWithExpiryScreened(dir, now, r.revoked)
+	var screen func(thumbprint string) bool
+	if r.revoked != nil {
+		// The selector screens by thumbprint alone; the domain names whose list
+		// answers, so the predicate never consults another party's list.
+		screen = func(thumbprint string) bool { return r.revoked(thumbprint, domain) }
+	}
+	key, notAfter, err := ActiveEd25519KeyWithExpiryScreened(dir, now, screen)
 	if err != nil {
 		return nil, err
 	}
diff --git a/sdk/go/resolvers/cachedofferkeyresolver_test.go b/sdk/go/resolvers/cachedofferkeyresolver_test.go
index 9790ab43..d595ca79 100644
--- a/sdk/go/resolvers/cachedofferkeyresolver_test.go
+++ b/sdk/go/resolvers/cachedofferkeyresolver_test.go
@@ -123,10 +123,14 @@ func TestCachedOfferKeyResolver_SkipsRevokedKey(t *testing.T) {
 	pub2, k2 := activeWindowJWK("rev-b")
 	revokedTP := mustThumbprint(t, pub1)
 	var calls atomic.Int64
+	var asked []string
 	r := resolvers.NewCachedOfferKeyResolver(resolvers.CachedOfferKeyResolverConfig{
-		Fetch:   countingFetch(wbaDirectory(k1, k2), &calls),
-		Now:     func() time.Time { return wbaAnchor },
-		Revoked: func(tp string) bool { return tp == revokedTP },
+		Fetch: countingFetch(wbaDirectory(k1, k2), &calls),
+		Now:   func() time.Time { return wbaAnchor },
+		Revoked: func(tp, exchange string) bool {
+			asked = append(asked, exchange)
+			return tp == revokedTP
+		},
 	})
 	got, err := r.Resolve(context.Background(), "ex")
 	if err != nil {
@@ -138,6 +142,16 @@ func TestCachedOfferKeyResolver_SkipsRevokedKey(t *testing.T) {
 	if !got.Equal(pub2) {
 		t.Fatal("the next active, non-revoked key must be selected")
 	}
+	// The predicate is asked about the exchange the key came from, so it can answer
+	// from that exchange's own list and no other.
+	if len(asked) == 0 {
+		t.Fatal("the revocation predicate was never consulted")
+	}
+	for _, ex := range asked {
+		if ex != "ex" {
+			t.Fatalf("predicate asked about exchange %q, want the resolved domain %q", ex, "ex")
+		}
+	}
 }
 
 func TestCachedOfferKeyResolver_PropagatesFetchError(t *testing.T) {
diff --git a/sdk/go/resolvers/gen_revocation_membership_vectors_test.go b/sdk/go/resolvers/gen_revocation_membership_vectors_test.go
index e492061a..111138c4 100644
--- a/sdk/go/resolvers/gen_revocation_membership_vectors_test.go
+++ b/sdk/go/resolvers/gen_revocation_membership_vectors_test.go
@@ -4,10 +4,12 @@ package resolvers_test
 // corpus. sdk/ts `revoked()` and sdk/python `revoked()` assert their verdict
 // matches this sdk/go oracle for EVERY labelled case.
 //
-// The vector carries a served WBA directory (keys + validity windows), a served
-// revocation snapshot (as_of + revoked thumbprints), a prime thumbprint (a
-// directory-listed key resolved to populate the snapshot), and the labelled
-// cases with their expected `revoked()` verdict. The verdicts are produced by
+// The vector carries two served WBA directories, each with its keys, its own
+// revocation snapshot (as_of + revoked thumbprints) and a prime thumbprint
+// resolved to load that snapshot, and the labelled (thumbprint, directory) cases
+// with their expected `revoked()` verdict. One directory lists no key and its list
+// names the other's key, so the corpus pins that a list answers only for its own
+// directory. The verdicts are produced by
 // RUNNING the real Go resolver against a real httptest origin — Go is the oracle,
 // never a hand-authored table.
 //
@@ -20,11 +22,16 @@ import (
 	"context"
 	"crypto/ed25519"
 	"encoding/json"
+	"errors"
 	"os"
 	"path/filepath"
+	"strings"
 	"testing"
 	"time"
 
+	"google.golang.org/protobuf/encoding/protojson"
+
+	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
 	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
 )
@@ -36,24 +43,38 @@ type revMembershipJWK struct {
 	NotAfter  string `json:"not_after"`
 }
 
-// revMembershipCase is one labelled thumbprint and the oracle's revoked() verdict.
+// revMembershipDirectory is one served key directory with its own revocation list.
+// Directory names a directory symbolically ("A", "B"): the parity ports serve each
+// on a random loopback origin, so the concrete host cannot be stored. The ports
+// serve the directories and resolve each PrimeThumbprint against it IN LIST ORDER,
+// which loads that directory's list; PrimeResolves is whether that resolve
+// succeeds (a keyless directory resolves nothing, yet its list still loads).
+type revMembershipDirectory struct {
+	Directory       string             `json:"directory"`
+	DirectoryKeys   []revMembershipJWK `json:"directory_keys"`
+	Revoked         []string           `json:"revoked"`
+	PrimeThumbprint string             `json:"prime_thumbprint"`
+	PrimeResolves   bool               `json:"prime_resolves"`
+}
+
+// revMembershipCase is one labelled (thumbprint, directory) question and the
+// oracle's revoked() verdict. Directory is a symbolic name from Directories, or ""
+// for no directory; Form is how the port spells it: "origin" (https://host:port) or
+// "bare" (host:port).
 type revMembershipCase struct {
 	Label           string `json:"label"`
 	Thumbprint      string `json:"thumbprint"`
+	Directory       string `json:"directory"`
+	Form            string `json:"form"`
 	ExpectedRevoked bool   `json:"expected_revoked"`
 }
 
-// revMembershipVector is the whole served-doc + cases corpus. The TS/python
-// parity ports serve DirectoryKeys + a revocation snapshot built from AsOf +
-// Revoked, resolve PrimeThumbprint to prime the snapshot, then assert revoked(tp)
-// matches every case.
+// revMembershipVector is the whole served-doc + cases corpus.
 type revMembershipVector struct {
-	Note            string              `json:"note"`
-	AsOf            string              `json:"as_of"`
-	DirectoryKeys   []revMembershipJWK  `json:"directory_keys"`
-	Revoked         []string            `json:"revoked"`
-	PrimeThumbprint string              `json:"prime_thumbprint"`
-	Cases           []revMembershipCase `json:"cases"`
+	Note        string                   `json:"note"`
+	AsOf        string                   `json:"as_of"`
+	Directories []revMembershipDirectory `json:"directories"`
+	Cases       []revMembershipCase      `json:"cases"`
 }
 
 // revMembershipAnchor is the fixed instant the emitter clocks the resolver at —
@@ -62,6 +83,10 @@ var revMembershipAnchor = time.Date(2026, 5, 1, 12, 0, 0, 0, time.UTC)
 
 // buildRevocationMembershipVector constructs the served docs, runs the real Go
 // resolver as the oracle, and returns the vector with oracle-produced verdicts.
+//
+// Directory B lists no key and its revocation list names directory A's key: no
+// party's list revokes another party's key, so A's key must stay unrevoked when
+// asked about A, and must still resolve against A after B's list has loaded.
 func buildRevocationMembershipVector(t *testing.T) revMembershipVector {
 	t.Helper()
 	windowStart := revMembershipAnchor.Add(-time.Hour)
@@ -74,44 +99,76 @@ func buildRevocationMembershipVector(t *testing.T) revMembershipVector {
 	unknownPriv, _ := newSigningKey("unknown.v1", windowStart, windowEnd)
 	tpUnknown := mustThumbprint(t, unknownPriv.Public().(ed25519.PublicKey))
 
-	origin := newWBAOrigin(nil)
-	defer origin.close()
-	origin.setWBA(marshalWBAWithRevocation(presentJWK, origin.revocationURL()))
-	origin.setRevocation(marshalRevocation(revMembershipAnchor, tpAbsentRevoked))
+	originA := newWBAOrigin(nil)
+	defer originA.close()
+	originA.setWBA(marshalWBAWithRevocation(presentJWK, originA.revocationURL()))
+	originA.setRevocation(marshalRevocation(revMembershipAnchor, tpAbsentRevoked))
+
+	originB := newWBAOrigin(nil)
+	defer originB.close()
+	originB.setWBA(marshalKeylessWBAWithRevocation(originB.revocationURL()))
+	originB.setRevocation(marshalRevocation(revMembershipAnchor, tpPresent))
 
-	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
 	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		HTTP: origin.Client(),
+		HTTP: originA.Client(),
 		Now:  func() time.Time { return revMembershipAnchor },
 	})
-	if _, err := r.Resolve(ctx, tpPresent); err != nil {
-		t.Fatalf("prime resolve: %v", err)
+	// B first, so A's key is resolved against A after B's list naming it has loaded.
+	if _, err := r.Resolve(helpers.WithSignatureAgent(context.Background(), originB.url), tpUnknown); !errors.Is(err, resolvers.ErrUnknownKey) {
+		t.Fatalf("prime B: want ErrUnknownKey from a keyless directory, got %v", err)
+	}
+	if _, err := r.Resolve(helpers.WithSignatureAgent(context.Background(), originA.url), tpPresent); err != nil {
+		t.Fatalf("prime A: A's key must resolve although B's list names it: %v", err)
 	}
 
+	dirs := map[string]string{"A": originA.url, "B": originB.url, "": ""}
+	ask := func(label, tp, dir, form string) revMembershipCase {
+		ref := dirs[dir]
+		if form == "bare" {
+			ref = strings.TrimPrefix(ref, "https://")
+		}
+		return revMembershipCase{Label: label, Thumbprint: tp, Directory: dir, Form: form, ExpectedRevoked: r.Revoked(tp, ref)}
+	}
 	cases := []revMembershipCase{
-		{Label: "directory-absent-but-revoked", Thumbprint: tpAbsentRevoked, ExpectedRevoked: r.Revoked(tpAbsentRevoked)},
-		{Label: "directory-present-not-revoked", Thumbprint: tpPresent, ExpectedRevoked: r.Revoked(tpPresent)},
-		{Label: "unknown", Thumbprint: tpUnknown, ExpectedRevoked: r.Revoked(tpUnknown)},
+		ask("directory-absent-but-revoked", tpAbsentRevoked, "A", "origin"),
+		ask("directory-present-not-revoked", tpPresent, "A", "origin"),
+		ask("unknown", tpUnknown, "A", "origin"),
+		ask("bare-host-form", tpAbsentRevoked, "A", "bare"),
+		ask("keyless-directory-own-list", tpPresent, "B", "origin"),
+		ask("another-directory-revocation-not-applied", tpAbsentRevoked, "B", "origin"),
+		ask("no-directory", tpAbsentRevoked, "", "origin"),
 	}
 	// Sanity: the oracle must produce the semantics the labels claim.
 	assertRevMembershipSemantics(t, cases)
 
 	return revMembershipVector{
-		Note:            "revoked() reports revocation-set membership independent of WBA directory membership; verdicts produced by the sdk/go oracle",
-		AsOf:            revMembershipAnchor.UTC().Format(time.RFC3339),
-		DirectoryKeys:   []revMembershipJWK{{X: presentJWK.GetX(), NotBefore: presentJWK.GetNotBefore(), NotAfter: presentJWK.GetNotAfter()}},
-		Revoked:         []string{tpAbsentRevoked},
-		PrimeThumbprint: tpPresent,
-		Cases:           cases,
+		Note: "revoked(thumbprint, directory) reports membership in that directory's own revocation list, independent of WBA directory membership; no directory's list answers for another's keys; verdicts produced by the sdk/go oracle",
+		AsOf: revMembershipAnchor.UTC().Format(time.RFC3339),
+		Directories: []revMembershipDirectory{
+			{Directory: "B", DirectoryKeys: []revMembershipJWK{}, Revoked: []string{tpPresent}, PrimeThumbprint: tpUnknown, PrimeResolves: false},
+			{Directory: "A", DirectoryKeys: []revMembershipJWK{{X: presentJWK.GetX(), NotBefore: presentJWK.GetNotBefore(), NotAfter: presentJWK.GetNotAfter()}}, Revoked: []string{tpAbsentRevoked}, PrimeThumbprint: tpPresent, PrimeResolves: true},
+		},
+		Cases: cases,
 	}
 }
 
+// marshalKeylessWBAWithRevocation serializes a WBAFile that lists no key and
+// names revURL as its revocation list.
+func marshalKeylessWBAWithRevocation(revURL string) []byte {
+	raw, _ := (protojson.MarshalOptions{UseProtoNames: true}).Marshal(&forav1.WBAFile{RevocationUrl: &revURL})
+	return raw
+}
+
 func assertRevMembershipSemantics(t *testing.T, cases []revMembershipCase) {
 	t.Helper()
 	want := map[string]bool{
-		"directory-absent-but-revoked":  true,
-		"directory-present-not-revoked": false,
-		"unknown":                       false,
+		"directory-absent-but-revoked":             true,
+		"directory-present-not-revoked":            false,
+		"unknown":                                  false,
+		"bare-host-form":                           true,
+		"keyless-directory-own-list":               true,
+		"another-directory-revocation-not-applied": false,
+		"no-directory":                             false,
 	}
 	for _, c := range cases {
 		exp, ok := want[c.Label]
diff --git a/sdk/go/resolvers/testdata/revocation-membership-vectors.json b/sdk/go/resolvers/testdata/revocation-membership-vectors.json
index 349be5f2..9d102c58 100644
--- a/sdk/go/resolvers/testdata/revocation-membership-vectors.json
+++ b/sdk/go/resolvers/testdata/revocation-membership-vectors.json
@@ -1,31 +1,80 @@
 {
-  "note": "revoked() reports revocation-set membership independent of WBA directory membership; verdicts produced by the sdk/go oracle",
+  "note": "revoked(thumbprint, directory) reports membership in that directory's own revocation list, independent of WBA directory membership; no directory's list answers for another's keys; verdicts produced by the sdk/go oracle",
   "as_of": "2026-05-01T12:00:00Z",
-  "directory_keys": [
+  "directories": [
     {
-      "x": "4PyBGH-xShW8Le_y6WX9mCnppnUk8YRFXSQrlIWmVWg",
-      "not_before": "2026-05-01T11:00:00Z",
-      "not_after": "2026-06-12T04:00:00Z"
+      "directory": "B",
+      "directory_keys": [],
+      "revoked": [
+        "5aXEjrN76nnuGCZEn8xNmlBDxTU9yxbawIpa5YLqJAo"
+      ],
+      "prime_thumbprint": "67nOSOKqPKPRKoBuhfDCkep_jF2ukQAMdCKk--WSmps",
+      "prime_resolves": false
+    },
+    {
+      "directory": "A",
+      "directory_keys": [
+        {
+          "x": "4PyBGH-xShW8Le_y6WX9mCnppnUk8YRFXSQrlIWmVWg",
+          "not_before": "2026-05-01T11:00:00Z",
+          "not_after": "2026-06-12T04:00:00Z"
+        }
+      ],
+      "revoked": [
+        "IHrfYIiZHEOqA9JrPLln5Rb7fp6f426ev0oXMm7wY3M"
+      ],
+      "prime_thumbprint": "5aXEjrN76nnuGCZEn8xNmlBDxTU9yxbawIpa5YLqJAo",
+      "prime_resolves": true
     }
   ],
-  "revoked": [
-    "IHrfYIiZHEOqA9JrPLln5Rb7fp6f426ev0oXMm7wY3M"
-  ],
-  "prime_thumbprint": "5aXEjrN76nnuGCZEn8xNmlBDxTU9yxbawIpa5YLqJAo",
   "cases": [
     {
       "label": "directory-absent-but-revoked",
       "thumbprint": "IHrfYIiZHEOqA9JrPLln5Rb7fp6f426ev0oXMm7wY3M",
+      "directory": "A",
+      "form": "origin",
       "expected_revoked": true
     },
     {
       "label": "directory-present-not-revoked",
       "thumbprint": "5aXEjrN76nnuGCZEn8xNmlBDxTU9yxbawIpa5YLqJAo",
+      "directory": "A",
+      "form": "origin",
       "expected_revoked": false
     },
     {
       "label": "unknown",
       "thumbprint": "67nOSOKqPKPRKoBuhfDCkep_jF2ukQAMdCKk--WSmps",
+      "directory": "A",
+      "form": "origin",
+      "expected_revoked": false
+    },
+    {
+      "label": "bare-host-form",
+      "thumbprint": "IHrfYIiZHEOqA9JrPLln5Rb7fp6f426ev0oXMm7wY3M",
+      "directory": "A",
+      "form": "bare",
+      "expected_revoked": true
+    },
+    {
+      "label": "keyless-directory-own-list",
+      "thumbprint": "5aXEjrN76nnuGCZEn8xNmlBDxTU9yxbawIpa5YLqJAo",
+      "directory": "B",
+      "form": "origin",
+      "expected_revoked": true
+    },
+    {
+      "label": "another-directory-revocation-not-applied",
+      "thumbprint": "IHrfYIiZHEOqA9JrPLln5Rb7fp6f426ev0oXMm7wY3M",
+      "directory": "B",
+      "form": "origin",
+      "expected_revoked": false
+    },
+    {
+      "label": "no-directory",
+      "thumbprint": "IHrfYIiZHEOqA9JrPLln5Rb7fp6f426ev0oXMm7wY3M",
+      "directory": "",
+      "form": "origin",
       "expected_revoked": false
     }
   ]
diff --git a/sdk/go/resolvers/wbakeyresolver.go b/sdk/go/resolvers/wbakeyresolver.go
index aec65c3e..90fcece7 100644
--- a/sdk/go/resolvers/wbakeyresolver.go
+++ b/sdk/go/resolvers/wbakeyresolver.go
@@ -844,24 +844,44 @@ func (r *WBAKeyResolver) revocationSnapshotPresent(host string) bool {
 	return ok
 }
 
-// Revoked reports whether keyID (an RFC 7638 thumbprint) is present in ANY
-// host's fetched revocation snapshot, INDEPENDENT of whether that thumbprint
-// appears in the corresponding WBA directory. Resolve gates a key only when the
-// directory lists it (removal is not revocation); a key resolved from a source
-// OTHER than the directory — e.g. a static bootstrap file — is invisible to that
-// path, so a composite resolver can still admit a broker-revoked, directory-
-// absent thumbprint. Revoked closes that gap: a caller that resolved a key
-// elsewhere consults it to fail closed against the revocation channel. It
-// returns false when no snapshot has been fetched (the snapshot is unavailable —
-// the caller decides whether an unavailable revocation channel is itself
-// fail-closed; this accessor reports membership only, never an outage).
-func (r *WBAKeyResolver) Revoked(keyID string) bool {
-	if keyID == "" {
+// Revoked reports whether keyID (an RFC 7638 thumbprint) is on the revocation
+// list of the key directory `directory` names, and on no other list. A list
+// covers only its own directory's keys: no party's list revokes another party's
+// key, even when it names that key's thumbprint, so a list fetched from any other
+// directory never answers here.
+//
+// directory is a directory reference in the form Resolve reads off a
+// Signature-Agent member — an https origin or a bare host — and it is normalized
+// the same way. Its host names the same directory as a fetched one under the
+// request-recipient identity rule: case is folded, and a port of 443 written out
+// is the same as none. A reference that is empty or names no fetchable directory
+// answers false, as does an empty keyID.
+//
+// The answer is membership, INDEPENDENT of whether the directory still lists the
+// key. Resolve gates a key only when the directory lists it (removal is not
+// revocation); a key resolved from another source — e.g. a static bootstrap
+// file holding a copy of that party's key — is invisible to that path, so a
+// composite resolver consults this to fail closed against the key owner's own
+// revocation list. A directory's list is known once the directory has been
+// fetched (Resolve loads it; Run keeps it fresh), including a directory that
+// lists no key, since a party that removed every key may still revoke the copies
+// held elsewhere. Before that it answers false: this accessor reports membership
+// only, never an outage, and the caller decides whether an unevaluated revocation
+// channel is itself fail-closed.
+func (r *WBAKeyResolver) Revoked(keyID, directory string) bool {
+	if keyID == "" || directory == "" {
+		return false
+	}
+	_, host, err := r.directoryBase(directory)
+	if err != nil {
 		return false
 	}
 	r.revMu.RLock()
 	defer r.revMu.RUnlock()
-	for _, set := range r.revoked {
+	for fetched, set := range r.revoked {
+		if fetched != host && !sameDirectoryHost(fetched, host) {
+			continue
+		}
 		if _, ok := set.thumbprints[keyID]; ok {
 			return true
 		}
@@ -869,6 +889,16 @@ func (r *WBAKeyResolver) Revoked(keyID string) bool {
 	return false
 }
 
+// sameDirectoryHost reports whether two directory hosts name one party under the
+// request-recipient identity rule that Requester.domain is compared by: case
+// folded, a port of 443 written out the same as none, a subdomain a different
+// party. Hosts that rule cannot read (an IP literal, an internationalized name)
+// match only when spelled identically, which the caller checks first.
+func sameDirectoryHost(a, b string) bool {
+	v, err := helpers.CheckAudience(a, b)
+	return err == nil && v == helpers.AudienceAccepted
+}
+
 // refreshRevocationFor replaces host's revocation snapshot from f's
 // revocation_url. Best-effort: a fetch failure leaves the prior snapshot in
 // place and is logged, never propagated (a stale-but-present snapshot is safer
@@ -1047,9 +1077,9 @@ type ActiveKeyScanOptions struct {
 // it does NOT consult any revocation channel. A key that was emergency-revoked but
 // is still window-active in a (possibly CDN-cached) directory WILL be selected. A
 // caller on a VERIFICATION path MUST NOT trust the result until it has screened the
-// selected key's RFC 7638 thumbprint against the resolver's revoked-thumbprint set
-// (WBAKeyResolver.Revoked / a revocation snapshot); otherwise adopting this selector
-// defeats emergency revocation. Prefer ActiveEd25519KeyScreened, which folds that
+// selected key's RFC 7638 thumbprint against the revocation list of the directory it
+// came from (WBAKeyResolver.Revoked with that directory, or a snapshot of that
+// list); otherwise adopting this selector defeats emergency revocation. Prefer ActiveEd25519KeyScreened, which folds that
 // screen into selection. This bare form is for non-verification callers only.
 func ActiveEd25519Key(directory *forav1.WBAFile, now time.Time, opts ...ActiveKeyScanOptions) (ed25519.PublicKey, error) {
 	pub, _, err := selectActiveEd25519Key(directory, now, nil, opts...)
@@ -1083,8 +1113,9 @@ func ActiveEd25519KeyWithExpiry(directory *forav1.WBAFile, now time.Time, opts .
 // selection itself, so an emergency-revoked key still listed in a CDN-cached
 // directory is passed over for the next active, non-revoked key. `revoked` is
 // REQUIRED: a nil predicate screens nothing (equivalent to the bare selector and
-// unsafe on a verification path). Pass one over the resolver's revoked-thumbprint
-// set (e.g. WBAKeyResolver.Revoked) or, for a caller with no revocation channel, an
+// unsafe on a verification path). Pass one over the revocation list of the
+// directory being selected from — e.g. func(tp string) bool { return
+// wba.Revoked(tp, directory) } — or, for a caller with no revocation channel, an
 // explicit func(string) bool { return false } to make the waiver visible. The
 // thumbprint is computed with helpers.Thumbprint (RFC 7638) — the SAME primitive
 // WBAKeyResolver.Resolve keys on. Returns (nil, ErrUnknownKey) when no well-formed
diff --git a/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go b/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go
index 09f1ddea..76eab7e6 100644
--- a/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_directorybase_internal_test.go
@@ -311,3 +311,41 @@ func TestRevocationAnchored_schemeMayNotDowngrade(t *testing.T) {
 		})
 	}
 }
+
+// TestRevokedMatchesTheDirectoryIdentity pins how Revoked finds the list it
+// answers from. The snapshot is stored under the host a fetch spelled, and a
+// caller may name the same directory another way — an offer's bare exchange
+// domain, an origin with :443 written out, different letter case. Those name the
+// same party under the request-recipient identity rule, so they must reach the
+// same list: matching the spelling only would read a revoked key as unrevoked.
+// A subdomain is a different party and never borrows the list.
+func TestRevokedMatchesTheDirectoryIdentity(t *testing.T) {
+	r := NewWBAKeyResolver(WBAKeyResolverOptions{})
+	r.revoked["exchange.example"] = wbaRevSet{thumbprints: map[string]struct{}{"tp": {}}}
+	r.revoked["127.0.0.1:8443"] = wbaRevSet{thumbprints: map[string]struct{}{"ip": {}}}
+
+	for _, tc := range []struct {
+		name, keyID, directory string
+		want                   bool
+	}{
+		{"origin as fetched", "tp", "https://exchange.example", true},
+		{"bare host", "tp", "exchange.example", true},
+		{"letter case folded", "tp", "https://Exchange.EXAMPLE", true},
+		{"port 443 written out", "tp", "https://exchange.example:443", true},
+		{"bare host with 443", "tp", "exchange.example:443", true},
+		{"subdomain is another party", "tp", "https://sub.exchange.example", false},
+		{"parent is another party", "tp", "https://example", false},
+		{"other port is another directory", "tp", "https://exchange.example:8443", false},
+		{"other key on the same list", "other", "https://exchange.example", false},
+		{"ip literal spelled identically", "ip", "https://127.0.0.1:8443", true},
+		{"ip literal on another port", "ip", "https://127.0.0.1:9443", false},
+		{"empty directory", "tp", "", false},
+		{"not a directory", "tp", "data:application/json,{}", false},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := r.Revoked(tc.keyID, tc.directory); got != tc.want {
+				t.Errorf("Revoked(%q, %q) = %v; want %v", tc.keyID, tc.directory, got, tc.want)
+			}
+		})
+	}
+}
diff --git a/sdk/go/resolvers/wbakeyresolver_test.go b/sdk/go/resolvers/wbakeyresolver_test.go
index ade92dfe..2b162e62 100644
--- a/sdk/go/resolvers/wbakeyresolver_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_test.go
@@ -15,6 +15,7 @@ import (
 	"errors"
 	"net/http"
 	"net/http/httptest"
+	"strings"
 	"sync"
 	"sync/atomic"
 	"testing"
@@ -530,11 +531,11 @@ func TestWBAKeyResolver_FetchError(t *testing.T) {
 
 // TestWBAKeyResolver_Revoked verifies the revocation-set-membership accessor:
 // after the snapshot is primed, Revoked reports true for a thumbprint present in
-// the revocation list even when the directory never listed it (directory-absent-
-// but-revoked), false for a directory-listed key that is not revoked, and false
-// for a thumbprint unknown to both. The accessor is INDEPENDENT of directory
-// membership — it is the fail-closed hook a composite resolver uses to reject a
-// static-bootstrap-only key the broker has revoked.
+// the directory's own revocation list even when the directory never listed it
+// (directory-absent-but-revoked), false for a directory-listed key that is not
+// revoked, and false for a thumbprint unknown to both. The accessor is
+// INDEPENDENT of directory membership — it is the fail-closed hook a composite
+// resolver uses to reject a static-bootstrap copy of a key its owner has revoked.
 func TestWBAKeyResolver_Revoked(t *testing.T) {
 	t.Parallel()
 	presentPriv, presentJWK := newSigningKey("present.v1", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(1000*time.Hour))
@@ -558,7 +559,7 @@ func TestWBAKeyResolver_Revoked(t *testing.T) {
 	})
 
 	// Before any fetch the snapshot is unavailable → membership is false.
-	if r.Revoked(tpAbsentRevoked) {
+	if r.Revoked(tpAbsentRevoked, origin.url) {
 		t.Fatal("Revoked before priming must be false (no snapshot)")
 	}
 	// Prime the snapshot by resolving the directory-present key.
@@ -566,18 +567,84 @@ func TestWBAKeyResolver_Revoked(t *testing.T) {
 		t.Fatalf("prime resolve: %v", err)
 	}
 
-	if !r.Revoked(tpAbsentRevoked) {
+	if !r.Revoked(tpAbsentRevoked, origin.url) {
 		t.Fatal("directory-absent-but-revoked thumbprint must report Revoked=true")
 	}
-	if r.Revoked(tpPresent) {
+	if !r.Revoked(tpAbsentRevoked, strings.TrimPrefix(origin.url, "https://")) {
+		t.Fatal("the bare-host spelling of the directory must name the same list")
+	}
+	if r.Revoked(tpPresent, origin.url) {
 		t.Fatal("directory-present, not-revoked thumbprint must report Revoked=false")
 	}
-	if r.Revoked(tpUnknown) {
+	if r.Revoked(tpUnknown, origin.url) {
 		t.Fatal("thumbprint unknown to directory and revocation must report Revoked=false")
 	}
-	if r.Revoked("") {
+	if r.Revoked("", origin.url) {
 		t.Fatal("empty keyID must report Revoked=false")
 	}
+	if r.Revoked(tpAbsentRevoked, "") {
+		t.Fatal("an empty directory must report Revoked=false")
+	}
+	if r.Revoked(tpAbsentRevoked, "data:application/json,{}") {
+		t.Fatal("a reference that names no fetchable directory must report Revoked=false")
+	}
+}
+
+// TestWBAKeyResolver_RevokedIsScopedToItsDirectory pins that a revocation list
+// answers only for its own directory's keys. Directory B lists no key and its list
+// names directory A's key — exactly what a party could publish to revoke another
+// party's key. Once B's list has loaded, A's key must still resolve against A and
+// must not be reported revoked for A; it is a member of B's list only.
+func TestWBAKeyResolver_RevokedIsScopedToItsDirectory(t *testing.T) {
+	t.Parallel()
+	window := func(seed string) (ed25519.PrivateKey, *forav1.JsonWebKey) {
+		return newSigningKey(seed, wbaAnchor.Add(-time.Hour), wbaAnchor.Add(1000*time.Hour))
+	}
+	aPriv, aJWK := window("present.v1")
+	tpA := mustThumbprint(t, aPriv.Public().(ed25519.PublicKey))
+	absentPriv, _ := window("absent-revoked.v1")
+	tpAbsent := mustThumbprint(t, absentPriv.Public().(ed25519.PublicKey))
+	unknownPriv, _ := window("unknown.v1")
+	tpUnknown := mustThumbprint(t, unknownPriv.Public().(ed25519.PublicKey))
+
+	originA := newWBAOrigin(nil)
+	defer originA.close()
+	originA.setWBA(marshalWBAWithRevocation(aJWK, originA.revocationURL()))
+	originA.setRevocation(marshalRevocation(wbaAnchor, tpAbsent))
+
+	originB := newWBAOrigin(nil)
+	defer originB.close()
+	revB := originB.revocationURL()
+	rawB, _ := (protojson.MarshalOptions{UseProtoNames: true}).Marshal(&forav1.WBAFile{RevocationUrl: &revB})
+	originB.setWBA(rawB)
+	originB.setRevocation(marshalRevocation(wbaAnchor, tpA))
+
+	// Every httptest TLS server presents the same certificate, so one client
+	// trusts both origins.
+	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
+		HTTP: originA.Client(),
+		Now:  func() time.Time { return wbaAnchor },
+	})
+	// Loading B's list: the keyless directory resolves no key, but its list loads.
+	if _, err := r.Resolve(helpers.WithSignatureAgent(context.Background(), originB.url), tpUnknown); !errors.Is(err, resolvers.ErrUnknownKey) {
+		t.Fatalf("resolve against keyless B: want ErrUnknownKey, got %v", err)
+	}
+	if _, err := r.Resolve(helpers.WithSignatureAgent(context.Background(), originA.url), tpA); err != nil {
+		t.Fatalf("A's key must resolve against A although B's list names it: %v", err)
+	}
+
+	if r.Revoked(tpA, originA.url) {
+		t.Fatal("B's list must never revoke A's key")
+	}
+	if !r.Revoked(tpA, originB.url) {
+		t.Fatal("membership in B's own list must still answer for B")
+	}
+	if r.Revoked(tpAbsent, originB.url) {
+		t.Fatal("A's list must never answer for B")
+	}
+	if !r.Revoked(tpAbsent, originA.url) {
+		t.Fatal("A's own list must still answer for A")
+	}
 }
 
 // ════════════════════════════════════════════════════════════════════════════
diff --git a/sdk/python/README.md b/sdk/python/README.md
index f05a8b8f..72d3752d 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -102,12 +102,15 @@ def buy_and_fetch(*, exchange: str, uri: str, seed: bytes) -> bytes:
     #    that is the fail-closed posture, not a bug.
     #
     #    `revoked` is NOT passed, and that is a choice worth making deliberately. It
-    #    screens a candidate key by thumbprint against a revocation snapshot, so leaving
-    #    it out waives emergency revocation. It is defensible here because this function
-    #    fetches the directory and spends the keys inside one call. A client that holds
-    #    its key map for hours must pass a revoked-set predicate, and must re-run the
-    #    prefetch rather than freeze one map for its lifetime — a frozen map keeps
-    #    serving a key after its TTL and its not_after have both passed.
+    #    screens a candidate key by thumbprint and exchange against that exchange's own
+    #    revocation list, so leaving it out waives emergency revocation. It is
+    #    defensible here because this function fetches the directory and spends the
+    #    keys inside one call. A client that holds its key map for hours must pass a
+    #    predicate `revoked(thumbprint, exchange)` that answers from that exchange's own
+    #    list (`WBAKeyResolver.revoked` has this shape, and knows a directory's list once
+    #    it has fetched that directory), and must re-run the prefetch rather than freeze
+    #    one map for its lifetime — a frozen map keeps serving a key after its TTL and
+    #    its not_after have both passed.
     directory = CachedOfferKeyResolver(fetch=create_wba_offer_directory_fetch(scheme=SCHEME))
     keys = asyncio.run(directory.prefetch([exchange]))
     verifier = Verifier(
diff --git a/sdk/python/fora_sdk/resolvers/offer_key_cache.py b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
index f7b65957..473c170f 100644
--- a/sdk/python/fora_sdk/resolvers/offer_key_cache.py
+++ b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
@@ -49,7 +49,7 @@ def _default_now() -> datetime:
     return datetime.now(UTC)
 
 
-def _never_revoked(_thumbprint: str) -> bool:
+def _never_revoked(_thumbprint: str, _exchange: str) -> bool:
     return False
 
 
@@ -74,22 +74,27 @@ def __init__(
         fetch: DirectoryFetch,
         now: Callable[[], datetime] | None = None,
         ttl_seconds: int = _DEFAULT_TTL_SECONDS,
-        revoked: Callable[[str], bool] | None = None,
+        revoked: Callable[[str, str], bool] | None = None,
     ) -> None:
         """Wire the resolver.
 
         ``fetch`` resolves a domain to its WBA directory (required). ``now`` is the
         cache-freshness + selection clock (default :func:`datetime.now(UTC)`).
         ``ttl_seconds`` bounds the per-domain cache. ``revoked`` screens a candidate
-        key by its RFC 7638 thumbprint — a revoked key is skipped during selection so
-        a window-active-but-revoked key is never served; default screens nothing, so
-        a verification-path caller SHOULD inject :meth:`WBAKeyResolver.revoked` (or an
-        equivalent revoked-set predicate).
+        key by its RFC 7638 thumbprint and the exchange whose directory it came from —
+        a revoked key is skipped during selection so a window-active-but-revoked key
+        is never served. It must answer from that exchange's own revocation list only:
+        no party's list revokes another party's key. The default screens nothing, so a
+        verification-path caller SHOULD inject one. :meth:`WBAKeyResolver.revoked` has
+        this shape and can be passed directly; it knows a directory's list only once
+        that resolver has fetched the directory.
         """
         self._fetch = fetch
         self._now = now if now is not None else _default_now
         self._ttl = ttl_seconds
-        self._revoked: Callable[[str], bool] = revoked if revoked is not None else _never_revoked
+        self._revoked: Callable[[str, str], bool] = (
+            revoked if revoked is not None else _never_revoked
+        )
         self._cache: dict[str, tuple[bytes, float]] = {}
 
     async def prefetch(self, exchanges: Iterable[str]) -> dict[str, bytes]:
@@ -128,7 +133,11 @@ async def prefetch(self, exchanges: Iterable[str]) -> dict[str, bytes]:
         for ex, wba in zip(misses, results, strict=True):
             if wba is None or isinstance(wba, BaseException):
                 continue
-            selected = active_ed25519_key_with_expiry_screened(wba, now_dt, self._revoked)
+            # The selector screens by thumbprint alone; the exchange names whose list
+            # answers, so the predicate never consults another party's list.
+            selected = active_ed25519_key_with_expiry_screened(
+                wba, now_dt, lambda tp, ex=ex: self._revoked(tp, ex)
+            )
             if selected is None:
                 continue
             key, not_after = selected
diff --git a/sdk/python/fora_sdk/resolvers/wba.py b/sdk/python/fora_sdk/resolvers/wba.py
index b6d3035e..bb2cb5fc 100644
--- a/sdk/python/fora_sdk/resolvers/wba.py
+++ b/sdk/python/fora_sdk/resolvers/wba.py
@@ -27,7 +27,7 @@
 import httpx
 from wire.models import JsonWebKey, KeyRevocationList, WBAFile
 
-from fora_sdk.hosts import host_anchored
+from fora_sdk.hosts import check_audience, host_anchored
 from fora_sdk.resolvers._http import guarded_client
 from fora_sdk.resolvers.documents import (
     WBA_DIRECTORY_PATH,
@@ -297,20 +297,39 @@ def _revocation_snapshot_present(self, host: str) -> bool:
         with self._rev_lock:
             return host in self._revoked
 
-    def revoked(self, key_id: str) -> bool:
-        """Whether ``key_id`` (a thumbprint) is in ANY host's fetched revocation
-        snapshot, INDEPENDENT of WBA directory membership.
+    def revoked(self, key_id: str, directory: str) -> bool:
+        """Whether ``key_id`` (a thumbprint) is on the revocation list of the key
+        directory ``directory`` names, and on no other list.
 
+        A list covers only its own directory's keys: no party's list revokes another
+        party's key, even when it names that key's thumbprint. ``directory`` is a
+        directory reference as ``resolve`` reads it off a Signature-Agent member (an
+        https origin or a bare host), normalized the same way; its host names the
+        same directory as a fetched one under the request-recipient identity rule
+        (case folded, a port of 443 written out the same as none). An empty or
+        unusable reference, or an empty ``key_id``, answers False.
+
+        The answer is membership, INDEPENDENT of WBA directory membership:
         ``resolve`` gates a key only when the directory lists it (removal is not
         revocation), so a key resolved from another source — e.g. a static
-        bootstrap file — is invisible to that path; ``revoked`` is the fail-closed
-        hook a composite consults to reject a broker-revoked, directory-absent
-        thumbprint. Returns False when no snapshot has been fetched.
+        bootstrap file holding a copy of that party's key — is invisible to that
+        path, and ``revoked`` is the fail-closed hook a composite consults against
+        the key owner's own list. A directory's list is known once the directory
+        has been fetched, including a directory that lists no key; before that it
+        answers False (membership only, never an outage).
         """
-        if key_id == "":
+        if key_id == "" or directory == "":
+            return False
+        base = _directory_base(directory)
+        if base is None:
             return False
+        host = base[1]
         with self._rev_lock:
-            return any(key_id in rev.thumbprints for rev in self._revoked.values())
+            return any(
+                key_id in rev.thumbprints
+                for fetched, rev in self._revoked.items()
+                if fetched == host or _same_directory_host(fetched, host)
+            )
 
     def _refresh_revocation_for(self, host: str, file: WBAFile) -> None:
         rev_url = file.revocation_url
@@ -391,9 +410,9 @@ def active_ed25519_key(
     it does NOT consult any revocation channel. A key that was emergency-revoked but
     is still window-active in a (possibly CDN-cached) directory WILL be selected. A
     caller on a VERIFICATION path MUST NOT trust the result until it has screened the
-    selected key's RFC 7638 thumbprint against the resolver's revoked-thumbprint set
-    (:meth:`WBAKeyResolver.revoked` / a revocation snapshot); otherwise adopting this
-    selector defeats emergency revocation. Prefer :func:`active_ed25519_key_screened`,
+    selected key's RFC 7638 thumbprint against the revocation list of the directory it
+    came from (:meth:`WBAKeyResolver.revoked` with that directory, or a snapshot of that
+    list); otherwise adopting this selector defeats emergency revocation. Prefer :func:`active_ed25519_key_screened`,
     which folds that screen into selection. This bare form is for non-verification
     callers only.
     """
@@ -439,9 +458,9 @@ def active_ed25519_key_screened(
     :func:`active_ed25519_key` leaves to the caller into selection itself, so an
     emergency-revoked key still listed in a CDN-cached directory is passed over for
     the next active, non-revoked key. ``revoked`` is REQUIRED: pass a predicate over
-    the resolver's revoked-thumbprint set (e.g. :meth:`WBAKeyResolver.revoked`) or,
-    for a caller with no revocation channel, an explicit ``lambda _tp: False`` to make
-    the waiver visible. The thumbprint is computed with :func:`fora_sdk.thumbprint`
+    the revocation list of the directory being selected from (e.g.
+    ``lambda tp: wba.revoked(tp, directory)``) or, for a caller with no revocation
+    channel, an explicit ``lambda _tp: False`` to make the waiver visible. The thumbprint is computed with :func:`fora_sdk.thumbprint`
     (RFC 7638) — the SAME primitive :meth:`WBAKeyResolver.resolve` keys on. Returns
     ``None`` when no examined, non-revoked key qualifies.
     """
@@ -566,6 +585,19 @@ def _directory_base(ref: str) -> tuple[str, str] | None:
     return f"{parts.scheme}://{parts.netloc}", parts.netloc
 
 
+def _same_directory_host(a: str, b: str) -> bool:
+    """Whether two directory hosts name one party under the request-recipient
+    identity rule ``requester.domain`` is compared by: case folded, a port of 443
+    written out the same as none, a subdomain a different party. Hosts that rule
+    cannot read (an IP literal, an internationalized name) match only when spelled
+    identically, which the caller checks first. Port of the Go
+    ``sameDirectoryHost``."""
+    try:
+        return check_audience(a, b) == "accepted"
+    except ValueError:
+        return False
+
+
 def _wba_host_anchored(anchor: str, candidate: str) -> bool:
     """Whether ``candidate`` is anchored to ``anchor`` — the same host and port, or
     a subdomain of that host on that port. An SSRF guard: a cross-host
diff --git a/sdk/python/tests/test_resolvers_offer_key_cache.py b/sdk/python/tests/test_resolvers_offer_key_cache.py
index c66c10c2..9c40f1c3 100644
--- a/sdk/python/tests/test_resolvers_offer_key_cache.py
+++ b/sdk/python/tests/test_resolvers_offer_key_cache.py
@@ -91,12 +91,18 @@ def test_skips_revoked_key() -> None:
     live_key = make_key()
     directory = _directory([active_jwk(revoked_key.x), active_jwk(live_key.x)])
     fetch = _CountingFetch({"ex": directory})
-    cache = CachedOfferKeyResolver(
-        fetch=fetch,
-        now=MutableClock(ANCHOR),
-        revoked=lambda tp: tp == revoked_key.tp,
-    )
+    asked: list[str] = []
+
+    def revoked(tp: str, exchange: str) -> bool:
+        asked.append(exchange)
+        return tp == revoked_key.tp
+
+    cache = CachedOfferKeyResolver(fetch=fetch, now=MutableClock(ANCHOR), revoked=revoked)
     assert asyncio.run(cache.prefetch(["ex"])) == {"ex": live_key.raw_pub}
+    # The predicate is asked about the exchange the key came from, so it can answer
+    # from that exchange's own list and no other.
+    assert asked
+    assert set(asked) == {"ex"}
 
 
 def test_absent_when_no_active_key() -> None:
diff --git a/sdk/python/tests/test_resolvers_wba_revocation_parity.py b/sdk/python/tests/test_resolvers_wba_revocation_parity.py
index 503756a0..39e610b3 100644
--- a/sdk/python/tests/test_resolvers_wba_revocation_parity.py
+++ b/sdk/python/tests/test_resolvers_wba_revocation_parity.py
@@ -1,21 +1,25 @@
 """Cross-language revocation-set-membership parity (Python side).
 
-sdk/python ``WBAKeyResolver.revoked()`` MUST reproduce the sdk/go oracle's
-verdict for every case in
-``sdk/go/helpers/testdata/revocation-membership-vectors.json``. The vector
-carries a served WBA directory (keys + windows), a served revocation snapshot
-(as_of + revoked thumbprints), a prime thumbprint (a directory-listed key
-resolved to populate the snapshot), and labelled cases with the expected verdict.
-
-This test serves those docs against a REAL origin (the shared harness), resolves
-the prime thumbprint to prime the snapshot, then asserts ``revoked(tp)`` matches
-the oracle for EVERY case — including the load-bearing
-directory-absent-but-revoked -> True, which is the whole point of the accessor.
-
-A directory is only read for the keys that signed its response, so the served
-directory must be signed by its key. The emitter derives that key from the FIXED seed
-``present.v1`` (zero-padded to 32 bytes); the test derives the same key, checks it is
-the one the corpus lists, and registers it with the harness signer.
+sdk/python ``WBAKeyResolver.revoked(key_id, directory)`` MUST reproduce the
+sdk/go oracle's verdict for every case in
+``sdk/go/resolvers/testdata/revocation-membership-vectors.json``. The vector
+carries two served WBA directories, each with its keys, its own revocation
+snapshot (as_of + revoked thumbprints) and a prime thumbprint resolved to load
+that snapshot, and labelled (thumbprint, directory) cases with the expected
+verdict.
+
+This test serves each directory on its own REAL origin (the shared harness),
+resolves every prime thumbprint in the order the vector lists them, then asserts
+``revoked(tp, directory)`` matches the oracle for EVERY case. Directory B lists no
+key and its list names directory A's key, so the corpus pins the load-bearing
+rule: a list answers only for its own directory, and A's key still resolves
+against A after B's list has loaded.
+
+A directory is only read for the keys that signed its response, so a served
+directory must be signed by every key it lists. The emitter derives A's key from
+the FIXED seed ``present.v1`` (zero-padded to 32 bytes); the test derives the same
+key, checks it is the one the corpus lists, and registers it with the harness
+signer. B lists no key, so it has nothing to sign.
 """
 
 from __future__ import annotations
@@ -37,7 +41,7 @@
 
 from fora_sdk.b64 import b64url_nopad
 
-from fora_sdk.resolvers import WBAKeyResolver
+from fora_sdk.resolvers import UnknownKeyError, WBAKeyResolver
 
 _VECTOR = load_json(GO_RESOLVERS_TESTDATA / "revocation-membership-vectors.json")
 
@@ -46,7 +50,7 @@ def _as_of() -> datetime:
     return datetime.fromisoformat(_VECTOR["as_of"])
 
 
-def _directory_keys() -> list[dict[str, Any]]:
+def _directory_keys(directory: dict[str, Any]) -> list[dict[str, Any]]:
     return [
         {
             "kty": "OKP",
@@ -57,19 +61,29 @@ def _directory_keys() -> list[dict[str, Any]]:
             "not_before": k["not_before"],
             "not_after": k["not_after"],
         }
-        for k in _VECTOR["directory_keys"]
+        for k in directory["directory_keys"]
     ]
 
 
 def _register_the_emitters_key() -> None:
     priv = Ed25519PrivateKey.from_private_bytes(b"present.v1".ljust(32, b"\0"))
     x = b64url_nopad(priv.public_key().public_bytes_raw())
-    assert [k["x"] for k in _VECTOR["directory_keys"]] == [x]
+    listed = [k["x"] for d in _VECTOR["directories"] for k in d["directory_keys"]]
+    assert listed == [x]
     register_directory_key(priv)
 
 
+def _reference(origins: dict[str, Origin], case: dict[str, Any]) -> str:
+    """The directory reference a case names, spelled in the case's form."""
+    if case["directory"] == "":
+        return ""
+    origin = origins[case["directory"]]
+    return origin.host if case["form"] == "bare" else origin.origin
+
+
 def test_revocation_membership_corpus_nonempty() -> None:
     assert len(_VECTOR["cases"]) > 0
+    assert {d["directory"] for d in _VECTOR["directories"]} == {"A", "B"}
 
 
 @pytest.mark.parametrize(
@@ -79,17 +93,28 @@ def test_revocation_membership_corpus_nonempty() -> None:
 )
 def test_revoked_matches_go_oracle(case: dict[str, Any]) -> None:
     _register_the_emitters_key()
-    origin = Origin(tls=True)
+    origins: dict[str, Origin] = {}
     try:
-        origin.set_wba(wba_file_json(_directory_keys(), origin.revocation_url()))
-        origin.set_revocation(revocation_json(_as_of(), list(_VECTOR["revoked"])))
+        for d in _VECTOR["directories"]:
+            origin = Origin(tls=True)
+            origins[d["directory"]] = origin
+            origin.set_wba(wba_file_json(_directory_keys(d), origin.revocation_url()))
+            origin.set_revocation(revocation_json(_as_of(), list(d["revoked"])))
 
         r = WBAKeyResolver(http=loopback_client(), now=MutableClock(_as_of()))
-        # Prime the revocation snapshot by resolving the directory-listed key.
-        r.resolve(_VECTOR["prime_thumbprint"], origin.origin)
-
-        assert r.revoked(case["thumbprint"]) is case["expected_revoked"]
+        # Load every directory's list, in the vector's order, by resolving its prime
+        # thumbprint. A keyless directory resolves nothing, yet its list still loads.
+        for d in _VECTOR["directories"]:
+            origin = origins[d["directory"]]
+            if d["prime_resolves"]:
+                r.resolve(d["prime_thumbprint"], origin.origin)
+            else:
+                with pytest.raises(UnknownKeyError):
+                    r.resolve(d["prime_thumbprint"], origin.origin)
+
+        assert r.revoked(case["thumbprint"], _reference(origins, case)) is case["expected_revoked"]
         # Empty key_id is never revoked (parity with the Go accessor guard).
-        assert r.revoked("") is False
+        assert r.revoked("", origins["A"].origin) is False
     finally:
-        origin.close()
+        for origin in origins.values():
+            origin.close()
diff --git a/sdk/python/tests/test_resolvers_wba_revoked_identity.py b/sdk/python/tests/test_resolvers_wba_revoked_identity.py
new file mode 100644
index 00000000..57aaf2c0
--- /dev/null
+++ b/sdk/python/tests/test_resolvers_wba_revoked_identity.py
@@ -0,0 +1,50 @@
+"""``WBAKeyResolver.revoked`` finds the list it answers from by directory identity.
+
+A snapshot is stored under the host a fetch spelled, and a caller may name the
+same directory another way — an offer's bare exchange domain, an origin with
+``:443`` written out, different letter case. Those name the same party under the
+request-recipient identity rule, so they must reach the same list: matching the
+spelling only would read a revoked key as unrevoked. A subdomain is a different
+party and never borrows the list. Port of the Go
+``TestRevokedMatchesTheDirectoryIdentity``.
+"""
+
+from __future__ import annotations
+
+from datetime import UTC, datetime
+
+import pytest
+
+from fora_sdk.resolvers import WBAKeyResolver
+from fora_sdk.resolvers.wba import _RevSet
+
+_AS_OF = datetime(2026, 5, 1, 12, 0, tzinfo=UTC)
+
+
+def _resolver() -> WBAKeyResolver:
+    r = WBAKeyResolver()
+    r._revoked["exchange.example"] = _RevSet(thumbprints={"tp"}, as_of=_AS_OF)
+    r._revoked["127.0.0.1:8443"] = _RevSet(thumbprints={"ip"}, as_of=_AS_OF)
+    return r
+
+
+@pytest.mark.parametrize(
+    ("key_id", "directory", "want"),
+    [
+        ("tp", "https://exchange.example", True),
+        ("tp", "exchange.example", True),
+        ("tp", "https://Exchange.EXAMPLE", True),
+        ("tp", "https://exchange.example:443", True),
+        ("tp", "exchange.example:443", True),
+        ("tp", "https://sub.exchange.example", False),
+        ("tp", "https://example", False),
+        ("tp", "https://exchange.example:8443", False),
+        ("other", "https://exchange.example", False),
+        ("ip", "https://127.0.0.1:8443", True),
+        ("ip", "https://127.0.0.1:9443", False),
+        ("tp", "", False),
+        ("", "https://exchange.example", False),
+    ],
+)
+def test_revoked_matches_the_directory_identity(key_id: str, directory: str, want: bool) -> None:
+    assert _resolver().revoked(key_id, directory) is want
diff --git a/sdk/ts/resolvers/offer-key-cache.ts b/sdk/ts/resolvers/offer-key-cache.ts
index 9a136abe..c1a31ffb 100644
--- a/sdk/ts/resolvers/offer-key-cache.ts
+++ b/sdk/ts/resolvers/offer-key-cache.ts
@@ -63,11 +63,16 @@ export interface CachedOfferKeyResolverOptions {
 	ttlMs?: number;
 	/** The cache-freshness + selection clock; undefined → Date.now. Tests inject. */
 	now?: () => number;
-	/** Screens a candidate key by its RFC 7638 thumbprint — a revoked key is skipped
-	 * during selection so a window-active-but-revoked key is never served. undefined
-	 * screens nothing; inject a revoked-set predicate on any verification path. A
-	 * throwing predicate fails closed (resolve → undefined), never propagates. */
-	revoked?: (thumbprint: string) => boolean;
+	/** Screens a candidate key by its RFC 7638 thumbprint and the exchange whose
+	 * directory it came from — a revoked key is skipped during selection so a
+	 * window-active-but-revoked key is never served. It must answer from that
+	 * exchange's own revocation list only: no party's list revokes another party's key.
+	 * undefined screens nothing; inject a predicate on any verification path.
+	 * `WBAKeyResolver.revoked` has this shape and can be passed directly (bind it,
+	 * `(tp, ex) => wba.revoked(tp, ex)`); it knows a directory's list only once that
+	 * resolver has fetched the directory. A throwing predicate fails closed
+	 * (resolve → undefined), never propagates. */
+	revoked?: (thumbprint: string, exchange: string) => boolean;
 }
 
 /** The public face: the OfferKeyResolver core.Verifier resolves offer keys through. */
@@ -97,7 +102,7 @@ class CachedOfferKeyResolverImpl implements OfferKeyResolver {
 	private readonly fetchFn: OfferDirectoryFetch;
 	private readonly ttlMs: number;
 	private readonly now: () => number;
-	private readonly revoked: (thumbprint: string) => boolean;
+	private readonly revoked: (thumbprint: string, exchange: string) => boolean;
 	private readonly cache = new Map<string, OfferKeyEntry>();
 	private readonly flight = new Map<
 		string,
@@ -155,10 +160,12 @@ class CachedOfferKeyResolverImpl implements OfferKeyResolver {
 			const dir = await this.fetchFn(exchange);
 			if (dir === undefined) return undefined; // unresolvable directory → fail closed
 			const nowMs = this.now();
+			// The selector screens by thumbprint alone; the exchange names whose list
+			// answers, so the predicate never consults another party's list.
 			const selected = await activeEd25519KeyWithExpiryScreened(
 				dir,
 				nowMs,
-				this.revoked,
+				(thumbprint) => this.revoked(thumbprint, exchange),
 			);
 			if (selected === null) return undefined; // no active, non-revoked key
 			// The decoded key bytes are ArrayBuffer-backed at runtime; the selector widens
diff --git a/sdk/ts/resolvers/wba.ts b/sdk/ts/resolvers/wba.ts
index 749f0122..42d8c0a4 100644
--- a/sdk/ts/resolvers/wba.ts
+++ b/sdk/ts/resolvers/wba.ts
@@ -84,13 +84,22 @@ export interface WBAKeyResolver {
 		directory: string,
 	): Promise<Uint8Array | undefined>;
 	run(signal: AbortSignal): Promise<void>;
-	/** Whether `keyId` (a thumbprint) is in ANY host's fetched revocation snapshot,
-	 * INDEPENDENT of WBA directory membership. `resolve` gates a key only when the
-	 * directory lists it (removal is not revocation), so a key resolved from another
-	 * source — e.g. a static bootstrap file — is invisible to that path; `revoked`
-	 * is the fail-closed hook a composite consults to reject a broker-revoked,
-	 * directory-absent thumbprint. False when no snapshot has been fetched. */
-	revoked(keyId: string): boolean;
+	/** Whether `keyId` (a thumbprint) is on the revocation list of the key directory
+	 * `directory` names, and on no other list. A list covers only its own directory's
+	 * keys: no party's list revokes another party's key, even when it names that key's
+	 * thumbprint. `directory` is a directory reference as `resolve` takes it (an https
+	 * origin or a bare host), normalized the same way, so letter case and a port of 443
+	 * written out name the same directory. An empty or unusable reference, or an empty
+	 * `keyId`, answers false.
+	 *
+	 * The answer is membership, INDEPENDENT of WBA directory membership: `resolve`
+	 * gates a key only when the directory lists it (removal is not revocation), so a
+	 * key resolved from another source — e.g. a static bootstrap file holding a copy of
+	 * that party's key — is invisible to that path, and `revoked` is the fail-closed
+	 * hook a composite consults against the key owner's own list. A directory's list is
+	 * known once the directory has been fetched, including a directory that lists no
+	 * key; before that it answers false (membership only, never an outage). */
+	revoked(keyId: string, directory: string): boolean;
 }
 
 /** Construct a WBA resolver with defaults applied (every option but `fetch`). */
@@ -258,12 +267,12 @@ class WBAResolverImpl implements WBAKeyResolver {
 		return this.revSnapshots.has(host);
 	}
 
-	revoked(keyId: string): boolean {
-		if (keyId === "") return false;
-		for (const set of this.revSnapshots.values()) {
-			if (set.thumbprints.has(keyId)) return true;
-		}
-		return false;
+	revoked(keyId: string, directory: string): boolean {
+		if (keyId === "" || directory === "") return false;
+		// directoryBase keys every snapshot by the WHATWG host, which folds letter case
+		// and a default port, so one directory spelled two ways reaches one list.
+		const host = directoryBase(directory)?.host;
+		return host !== undefined && this.isRevoked(host, keyId);
 	}
 
 	// Best-effort: a missing/cross-host/failed/undecodable revocation_url leaves the
@@ -438,9 +447,9 @@ function publicKeyOf(key: WBAJwk): Uint8Array {
  * it does NOT consult any revocation channel. A key that was emergency-revoked but
  * is still window-active in a (possibly CDN-cached) directory WILL be selected. A
  * caller on a VERIFICATION path MUST NOT trust the result until it has screened the
- * selected key's RFC 7638 thumbprint against the resolver's revoked-thumbprint set
- * (`WBAKeyResolver.revoked` / a revocation snapshot); otherwise adopting this
- * selector defeats emergency revocation. Prefer {@link activeEd25519KeyScreened},
+ * selected key's RFC 7638 thumbprint against the revocation list of the directory it
+ * came from (`WBAKeyResolver.revoked` with that directory, or a snapshot of that
+ * list); otherwise adopting this selector defeats emergency revocation. Prefer {@link activeEd25519KeyScreened},
  * which folds that screen into selection. This bare form is for non-verification
  * callers only. */
 export function activeEd25519Key(
@@ -481,9 +490,9 @@ export function activeEd25519KeyWithExpiry(
  * screen the bare {@link activeEd25519Key} leaves to the caller into selection
  * itself, so an emergency-revoked key still listed in a CDN-cached directory is
  * passed over for the next active, non-revoked key. `revoked` is REQUIRED: pass a
- * predicate over the resolver's revoked-thumbprint set (e.g. `WBAKeyResolver.revoked`)
- * or, for a caller with no revocation channel, an explicit `() => false` to make the
- * waiver visible. It is ASYNC because screening computes each candidate's RFC 7638
+ * predicate over the revocation list of the directory being selected from (e.g.
+ * `(tp) => wba.revoked(tp, directory)`) or, for a caller with no revocation channel,
+ * an explicit `() => false` to make the waiver visible. It is ASYNC because screening computes each candidate's RFC 7638
  * thumbprint (the SAME `crypto.subtle` primitive `WBAKeyResolver.resolve` keys on).
  * Returns `null` when no examined, non-revoked key qualifies. */
 export async function activeEd25519KeyScreened(
diff --git a/sdk/ts/tests/resolvers-offer-key-cache.integration.test.ts b/sdk/ts/tests/resolvers-offer-key-cache.integration.test.ts
index f0e2e6d7..eda8a226 100644
--- a/sdk/ts/tests/resolvers-offer-key-cache.integration.test.ts
+++ b/sdk/ts/tests/resolvers-offer-key-cache.integration.test.ts
@@ -139,13 +139,21 @@ describe("CachedOfferKeyResolver", () => {
 		const { fetch } = countingFetch({
 			[EXCHANGE]: directory([activeJwk(revoked.x), activeJwk(live.x)]),
 		});
+		const asked: string[] = [];
 		const resolver = createCachedOfferKeyResolver({
 			fetch,
 			now: () => ANCHOR_MS,
-			revoked: (tp) => tp === revoked.tp,
+			revoked: (tp, exchange) => {
+				asked.push(exchange);
+				return tp === revoked.tp;
+			},
 		});
 
 		expect(await resolver.resolve(EXCHANGE)).toEqual(live.rawPub);
+		// The predicate is asked about the exchange the key came from, so it can answer
+		// from that exchange's own list and no other.
+		expect(asked.length).toBeGreaterThan(0);
+		expect(new Set(asked)).toEqual(new Set([EXCHANGE]));
 	});
 
 	it("returns undefined when the fetch is unresolvable (returns undefined)", async () => {
diff --git a/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts b/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
index 971bf42d..d2cbbee6 100644
--- a/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
+++ b/sdk/ts/tests/resolvers-wba-revocation.parity.test.ts
@@ -1,18 +1,20 @@
 // Cross-language revocation-set-membership parity (TypeScript side).
 //
-// sdk/ts `revoked()` MUST reproduce the sdk/go oracle's verdict for every case
-// in sdk/go/resolvers/testdata/revocation-membership-vectors.json. The vector
-// carries a served WBA directory (keys + windows), a served revocation snapshot
-// (as_of + revoked thumbprints), a prime thumbprint (a directory-listed key
-// resolved to populate the snapshot), and labelled cases with the expected
-// verdict. This test serves those docs against a REAL origin (the shared
-// harness), resolves the prime thumbprint to prime the snapshot, then asserts
-// `revoked(tp)` matches the oracle for EVERY case — including the load-bearing
-// directory-absent-but-revoked → true, which is the whole point of the accessor.
+// sdk/ts `revoked(keyId, directory)` MUST reproduce the sdk/go oracle's verdict for
+// every case in sdk/go/resolvers/testdata/revocation-membership-vectors.json. The
+// vector carries two served WBA directories, each with its keys, its own revocation
+// snapshot (as_of + revoked thumbprints) and a prime thumbprint resolved to load that
+// snapshot, and labelled (thumbprint, directory) cases with the expected verdict.
+// This test serves each directory on its own REAL origin (the shared harness),
+// resolves every prime thumbprint in the order the vector lists them, then asserts
+// `revoked(tp, directory)` matches the oracle for EVERY case. Directory B lists no
+// key and its list names directory A's key, so the corpus pins the load-bearing rule:
+// a list answers only for its own directory, and A's key still resolves against A
+// after B's list has loaded.
 //
-// The directory is served signed by its key, as the profile requires: the Go emitter
-// derives that key from the fixed seed "present.v1" (zero-padded to 32 bytes), so the
-// harness registers the same seed.
+// A directory is served signed by every key it lists, as the profile requires: the Go
+// emitter derives A's key from the fixed seed "present.v1" (zero-padded to 32 bytes),
+// so the harness registers the same seed. B lists no key, so it has nothing to sign.
 import { afterEach, describe, expect, it } from "vitest";
 import vector from "../../go/resolvers/testdata/revocation-membership-vectors.json";
 import { createWBAKeyResolver } from "../resolvers/index.ts";
@@ -26,55 +28,75 @@ import {
 	httpsToLoopback,
 } from "./resolvers-harness.ts";
 
+interface RevMembershipDirectory {
+	directory: string;
+	directory_keys: { x: string; not_before: string; not_after: string }[];
+	revoked: string[];
+	prime_thumbprint: string;
+	prime_resolves: boolean;
+}
 interface RevMembershipCase {
 	label: string;
 	thumbprint: string;
+	directory: string;
+	form: "origin" | "bare";
 	expected_revoked: boolean;
 }
 interface RevMembershipVector {
 	as_of: string;
-	directory_keys: { x: string; not_before: string; not_after: string }[];
-	revoked: string[];
-	prime_thumbprint: string;
+	directories: RevMembershipDirectory[];
 	cases: RevMembershipCase[];
 }
 
 const vec = vector as RevMembershipVector;
 
 describe("sdk/ts revoked() matches the sdk/go revocation-membership oracle", () => {
-	let origin: Origin | undefined;
+	const origins = new Map<string, Origin>();
 	afterEach(async () => {
-		await origin?.close();
-		origin = undefined;
+		for (const o of origins.values()) await o.close();
+		origins.clear();
 	});
 
-	it("has a non-empty case corpus", () => {
+	it("has a non-empty case corpus over two directories", () => {
 		expect(vec.cases.length).toBeGreaterThan(0);
+		expect(new Set(vec.directories.map((d) => d.directory))).toEqual(new Set(["A", "B"]));
 	});
 
 	it("reproduces the oracle verdict for every labelled case", async () => {
 		const seed = new Uint8Array(32);
 		seed.set(new TextEncoder().encode("present.v1"));
 		const present = await registerSeed(seed);
-		expect(vec.directory_keys.map((k) => k.x)).toEqual([present.x]);
-		origin = await startOrigin();
-		const keys = vec.directory_keys.map((k) =>
-			wbaJwk(k.x, k.not_before, k.not_after),
-		);
-		origin.setWBA(wbaFileJson(keys, origin.revocationURL()));
-		origin.setRevocation(revocationJson(vec.as_of, vec.revoked));
+		expect(vec.directories.flatMap((d) => d.directory_keys.map((k) => k.x))).toEqual([present.x]);
+
+		for (const d of vec.directories) {
+			const origin = await startOrigin();
+			origins.set(d.directory, origin);
+			const keys = d.directory_keys.map((k) => wbaJwk(k.x, k.not_before, k.not_after));
+			origin.setWBA(wbaFileJson(keys, origin.revocationURL()));
+			origin.setRevocation(revocationJson(vec.as_of, d.revoked));
+		}
 
 		const r = createWBAKeyResolver({
 			fetch: httpsToLoopback,
 			now: () => Date.parse(vec.as_of),
 		});
-		// Prime the revocation snapshot by resolving the directory-listed key.
-		await r.resolve(vec.prime_thumbprint, origin.url);
+		// Load every directory's list, in the vector's order, by resolving its prime
+		// thumbprint. A keyless directory resolves nothing, yet its list still loads.
+		for (const d of vec.directories) {
+			const origin = origins.get(d.directory) as Origin;
+			const key = await r.resolve(d.prime_thumbprint, origin.url);
+			expect(key !== undefined, `prime ${d.directory}`).toBe(d.prime_resolves);
+		}
 
+		const reference = (c: RevMembershipCase): string => {
+			if (c.directory === "") return "";
+			const origin = origins.get(c.directory) as Origin;
+			return c.form === "bare" ? origin.host : `https://${origin.host}`;
+		};
 		for (const c of vec.cases) {
-			expect(r.revoked(c.thumbprint), c.label).toBe(c.expected_revoked);
+			expect(r.revoked(c.thumbprint, reference(c)), c.label).toBe(c.expected_revoked);
 		}
-		// Empty keyID is never revoked (parity with the Go accessor guard).
-		expect(r.revoked("")).toBe(false);
+		// Empty keyId is never revoked (parity with the Go accessor guard).
+		expect(r.revoked("", `https://${(origins.get("A") as Origin).host}`)).toBe(false);
 	});
 });
diff --git a/sdk/ts/tests/resolvers-wba-revoked-identity.test.ts b/sdk/ts/tests/resolvers-wba-revoked-identity.test.ts
new file mode 100644
index 00000000..9ab9a105
--- /dev/null
+++ b/sdk/ts/tests/resolvers-wba-revoked-identity.test.ts
@@ -0,0 +1,54 @@
+// `WBAKeyResolver.revoked` finds the list it answers from by directory identity. A
+// snapshot is stored under the host a fetch spelled, and a caller may name the same
+// directory another way — an offer's bare exchange domain, an origin with :443 written
+// out, different letter case. Those name the same party under the request-recipient
+// identity rule, so they must reach the same list: matching the spelling only would
+// read a revoked key as unrevoked. A subdomain is a different party and never borrows
+// the list. Port of the Go TestRevokedMatchesTheDirectoryIdentity.
+//
+// The directory is served for exchange.example by routing that origin to a loopback
+// listener; it lists no key, so it carries no response signature to bind to a host.
+import { afterEach, describe, expect, it } from "vitest";
+import { createWBAKeyResolver, type FetchLike } from "../resolvers/index.ts";
+import { type Origin, revocationJson, startOrigin, wbaFileJson } from "./resolvers-harness.ts";
+
+const AS_OF = "2026-05-01T12:00:00Z";
+
+describe("WBAKeyResolver.revoked matches the directory identity", () => {
+	let origin: Origin | undefined;
+	afterEach(async () => {
+		await origin?.close();
+		origin = undefined;
+	});
+
+	it("reaches one directory's list by any spelling of its identity, and only that list", async () => {
+		origin = await startOrigin();
+		const loopback = origin.url;
+		const revocationPath = new URL(origin.revocationURL()).pathname;
+		origin.setWBA(wbaFileJson([], `https://exchange.example${revocationPath}`));
+		origin.setRevocation(revocationJson(AS_OF, ["tp"]));
+		const route: FetchLike = (url, init) =>
+			fetch(url.replace(/^https:\/\/exchange\.example/, loopback), init?.redirect === "manual" ? { redirect: "manual" } : {});
+
+		const r = createWBAKeyResolver({ fetch: route, now: () => Date.parse(AS_OF) });
+		// A keyless directory resolves nothing, yet its list loads.
+		expect(await r.resolve("unknown", "https://exchange.example")).toBeUndefined();
+
+		const cases: [string, string, boolean][] = [
+			["tp", "https://exchange.example", true],
+			["tp", "exchange.example", true],
+			["tp", "https://Exchange.EXAMPLE", true],
+			["tp", "https://exchange.example:443", true],
+			["tp", "exchange.example:443", true],
+			["tp", "https://sub.exchange.example", false],
+			["tp", "https://example", false],
+			["tp", "https://exchange.example:8443", false],
+			["other", "https://exchange.example", false],
+			["tp", "", false],
+			["", "https://exchange.example", false],
+		];
+		for (const [keyId, directory, want] of cases) {
+			expect(r.revoked(keyId, directory), `${keyId} @ ${directory}`).toBe(want);
+		}
+	});
+});

From 0d27b881b88561ee1d462a727cf1358af94b45d7 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:39:32 +0200
Subject: [PATCH 136/164] Record directory-scoped revocation in the changelog
 and design history

The revocation entry described the scoping as comments and docs only, while the
SDKs still answered from every directory's list. Its label now names the SDK API
change, and a paragraph gives the new accessor and offer-cache predicate
signatures in all three languages, why the cross-directory form was removed, why
keyless directories are still polled, and what the shared vector pins. The
website changelog mirrors it.

The design history records why the union form went instead of being deprecated,
why lookups match the directory identity rather than its spelling, and the limit
that remains: the offer-key cache's predicate screens only directories a resolver
has fetched.
---
 docs/design-history.md                        | 35 +++++++++++++++++++
 proto/CHANGELOG.md                            | 19 +++++++++-
 .../src/content/docs/reference/changelog.mdx  | 19 +++++++++-
 3 files changed, 71 insertions(+), 2 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 6dfb8047..8426eaaf 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2375,3 +2375,38 @@ signed. A directory listing no key has nothing to sign.
 `application/jwk-set+json` is refused, like the bare `Signature-Agent` value: the
 profile names a hard cut, and accepting the old label would leave the reference
 directories unsigned with nothing to say so.
+
+## Revocation answers for one directory's own list
+
+The key resolvers kept one revocation snapshot per directory host, and `Resolve` already
+checked a key against its own directory's snapshot only. The public accessor beside it
+did not: `Revoked(keyID)` answered true when the thumbprint appeared on any snapshot the
+resolver held. It was written for a composite that resolves keys from a second source,
+such as a static bootstrap copy, so a key its owner had revoked could not slip in through
+the copy. But the resolver fetches whatever directory a request's `Signature-Agent` names,
+before the signature is checked, and a directory listing no key needs no response
+signature. Any party could therefore get a list polled that named someone else's key, and
+the union then reported that key revoked to every consumer of the accessor, including the
+offer-key cache it was documented for. That contradicts the protocol rule that no party's
+list revokes another party's key.
+
+The accessor now takes the directory it answers for, and the cross-directory form is
+gone rather than deprecated: a caller that kept the old call would keep the old meaning,
+and the point of the change is that no caller can. The offer-key cache's predicate gains
+the exchange the key came from, which is exactly the accessor's shape.
+
+The directory reference is normalized as `Resolve` normalizes a `Signature-Agent` member,
+and a fetched directory spelled differently still matches under the request-recipient
+identity rule: letter case folded, a port of 443 written out the same as none, a subdomain
+a different party. Matching the spelling only would fail open — an offer's bare exchange
+domain against a snapshot stored under an origin with `:443` would read a revoked key as
+unrevoked.
+
+Directories that list no key are still polled. With the accessor scoped, such a list can
+only answer for its own directory, and a party that has removed every key from its
+directory may still need its list to revoke the copies held elsewhere.
+
+The cache's predicate knows a directory's list only once a resolver has fetched that
+directory, so a predicate built on a resolver that has never fetched an Exchange's
+directory screens nothing for that Exchange. The cache polling each Exchange's own list
+itself would close that gap; this change leaves it as it was and only scopes the answer.
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index f57cbcd4..5342cb8d 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -59,7 +59,7 @@ call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each to
 `outputSchema` declares two branches, its success shape or `{refusal}`.
 
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
-follow up to five redirects (comments and docs only).** Each signature is verified against its own signer's
+follow up to five redirects (comments, docs and an SDK API change).** Each signature is verified against its own signer's
 key directory and the revocation list that directory names, and against no other party's.
 A Broker's list covers only the Broker's keys, and an agent's list covers only that
 agent's keys, so no party's list can revoke another party's key. A request that carries
@@ -72,6 +72,23 @@ requires. The file header, `WBAFile.revocation_url`, `KeyRevocationList` and the
 Well-Known Discovery block state both rules, and the authentication page gains "Whose
 list revokes whose key" and "Fetching directories, revocation lists and manifests".
 
+SDKs, in all three languages: the key resolver's revocation accessor answers for one
+directory's own list, and the cross-directory form is removed (a breaking change for a
+caller). Go `WBAKeyResolver.Revoked(keyID, directory)`, Python
+`WBAKeyResolver.revoked(key_id, directory)` and TypeScript `revoked(keyId, directory)`
+report whether the thumbprint is on the revocation list of the directory `directory`
+names, and on no other. The reference is normalized as the resolver normalizes a
+`Signature-Agent` member, and a fetched directory spelled differently still matches under
+the request-recipient identity rule. The accessor used to report a thumbprint present on
+any fetched directory's list, so a directory a request named, even one listing no key,
+could revoke another party's key. The offer-key caches' revocation predicate gains the
+exchange the key came from: Go `CachedOfferKeyResolverConfig.Revoked` becomes
+`func(thumbprint, exchange string) bool`, Python's `revoked` a `Callable[[str, str], bool]`
+and TypeScript's `revoked` a `(thumbprint, exchange) => boolean`, which is the resolver
+accessor's shape. A directory that lists no key is still polled, since its list may revoke
+copies of its own keys held elsewhere. `revocation-membership-vectors.json` serves two
+directories and pins that one directory's list never answers for the other's key.
+
 **`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
 each entry's domain names whose resource it is, and the caller is the party that signs
 the request; the Exchange checks that the verified signer may push for each entry's
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index f96b4b6a..b10e7e29 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -65,7 +65,7 @@ call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each to
 `outputSchema` declares two branches, its success shape or `{refusal}`.
 
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
-follow up to five redirects (comments and docs only).** Each signature is verified against its own signer's
+follow up to five redirects (comments, docs and an SDK API change).** Each signature is verified against its own signer's
 key directory and the revocation list that directory names, and against no other party's.
 A Broker's list covers only the Broker's keys, and an agent's list covers only that
 agent's keys, so no party's list can revoke another party's key. A request that carries
@@ -78,6 +78,23 @@ requires. The file header, `WBAFile.revocation_url`, `KeyRevocationList` and the
 Well-Known Discovery block state both rules, and the authentication page gains "Whose
 list revokes whose key" and "Fetching directories, revocation lists and manifests".
 
+SDKs, in all three languages: the key resolver's revocation accessor answers for one
+directory's own list, and the cross-directory form is removed (a breaking change for a
+caller). Go `WBAKeyResolver.Revoked(keyID, directory)`, Python
+`WBAKeyResolver.revoked(key_id, directory)` and TypeScript `revoked(keyId, directory)`
+report whether the thumbprint is on the revocation list of the directory `directory`
+names, and on no other. The reference is normalized as the resolver normalizes a
+`Signature-Agent` member, and a fetched directory spelled differently still matches under
+the request-recipient identity rule. The accessor used to report a thumbprint present on
+any fetched directory's list, so a directory a request named, even one listing no key,
+could revoke another party's key. The offer-key caches' revocation predicate gains the
+exchange the key came from: Go `CachedOfferKeyResolverConfig.Revoked` becomes
+`func(thumbprint, exchange string) bool`, Python's `revoked` a `Callable[[str, str], bool]`
+and TypeScript's `revoked` a `(thumbprint, exchange) => boolean`, which is the resolver
+accessor's shape. A directory that lists no key is still polled, since its list may revoke
+copies of its own keys held elsewhere. `revocation-membership-vectors.json` serves two
+directories and pins that one directory's list never answers for the other's key.
+
 **`PushResourcesRequest.caller_id` is deprecated (comments only).** It was never needed:
 each entry's domain names whose resource it is, and the caller is the party that signs
 the request; the Exchange checks that the verified signer may push for each entry's

From 0054f59c29036d67ee17c09361e23f1001cdac65 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:46:27 +0200
Subject: [PATCH 137/164] Bound every TypeScript document read in the reader,
 whatever transport is injected

The 1 MiB body cap, the request timeout and the redirect cap lived only in the
Node transports. The edge entry hands the runtime's own fetch straight to the
readers, so there a document read, including the key-directory read whose host
an unauthenticated Signature-Agent names, was unbounded in size and time, and
followed whatever redirects the runtime followed, https to http included. The
CHANGELOG already described the cap as a property of the readers, which is where
Go and Python enforce it.

fetchDocument now owns the bounds on both entries:
- the body is read through the stream with a byte budget and refused past
  MAX_DOC_BYTES, never truncated; without a stream it is read whole and refused;
- one deadline, DOCUMENT_READ_TIMEOUT_MS (30 s, Go's maxDocumentFetch), covers
  every hop and the body, and its signal is passed to the transport;
- the read asks the transport not to follow and follows redirects itself: at
  most MAX_REDIRECTS, a relative Location resolved against the current URL, a
  hop refused when it leaves http(s), steps down from https to http, or carries
  credentials; a response the transport marks redirected is refused;
- the first URL must be http(s); a key directory still refuses any 3xx.

fetchSoft goes through the same read. The Node transports share MAX_DOC_BYTES
from fetch.ts and combine the caller's signal with their per-request timeout.
On Node the default transports re-vet each hop's address as before, and document
reads there no longer follow https to http either.

New tests drive the edge path with WHATWG Responses (cap boundary, an endless
stream, the redirect cap, refused hops, the deadline) and the Node default
transport against a real server; the no-eval probe now also checks an over-cap
body and a downgrade where no global ReadableStream exists.
---
 sdk/ts/README.md                              |   9 +-
 sdk/ts/resolvers/documents.ts                 |   6 +-
 sdk/ts/resolvers/edge.ts                      |  11 +-
 sdk/ts/resolvers/fetch.ts                     | 266 +++++++++++++++---
 sdk/ts/resolvers/http.ts                      |  43 ++-
 sdk/ts/tests/edge-no-eval.test.ts             |  13 +-
 .../tests/resolvers-document-bounds.test.ts   | 227 +++++++++++++++
 sdk/ts/tests/resolvers-http-wiring.test.ts    |   6 +
 8 files changed, 525 insertions(+), 56 deletions(-)
 create mode 100644 sdk/ts/tests/resolvers-document-bounds.test.ts

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 54171de7..03c9afea 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -97,8 +97,13 @@ with ajv, so that form needs a runtime that allows code generation.
 transport to the SSRF-guarded undici client. An edge runtime (Cloudflare Workers, Fastly
 Compute, Deno) imports `@fora-protocol/sdk/resolvers/edge` instead. It exports the same
 readers and resolvers, imports nothing Node-only, and has no default transport: each
-call takes `fetch`, the runtime's own fetch or a wrapper around it, and the address guard
-for a host another party named is the caller's. The protocol mechanics (`core`, `identity`,
+call takes `fetch`, the runtime's own fetch or a wrapper around it. The read bounds itself
+whatever fetch it is given, on both entries: a body over 1 MiB is refused, never
+truncated; the whole read ends at 30 seconds; and the read follows redirects itself, at
+most five, never out of http(s), never from https down to http and never for a key
+directory. The address guard for a host another party named is the caller's:
+`blockedAddress` is exported for it, and `allowedScheme`, the scheme allowlist (http and
+https) that guard applies, which is not an https-only rule. The protocol mechanics (`core`, `identity`,
 `hono`, and the `src` helpers such as `pop` and `verify`) are edge-safe too.
 `verifyAgentBinding`, `verifyDirectoryResponse`, `readWBADirectory`, `createWBAKeyResolver`
 and `createWBAOfferDirectoryFetch` take `verifyEd25519` for a runtime without WebCrypto
diff --git a/sdk/ts/resolvers/documents.ts b/sdk/ts/resolvers/documents.ts
index edd1978e..69f40a57 100644
--- a/sdk/ts/resolvers/documents.ts
+++ b/sdk/ts/resolvers/documents.ts
@@ -31,8 +31,10 @@
 // guardedFetchFromEnv, the one the resolvers use for an address another party chose: the
 // dial-time SSRF guard refuses loopback, private and metadata addresses, and the scheme
 // guard refuses anything but https. SKIP_SSRF and ALLOW_INSECURE relax them for a
-// sandbox. That transport caps a body at 1 MiB and refuses it, never truncates it, past
-// the cap.
+// sandbox. Whatever the transport, the read itself (fetchDocument in fetch.ts) caps a
+// body at 1 MiB and refuses it, never truncates it, past the cap; ends the whole read at
+// 30 seconds; and follows at most five redirects, refusing a hop out of http(s), from
+// https down to plaintext http, or carrying credentials.
 
 import { parseWire } from "../../../gen/ts/wire/base.ts";
 import {
diff --git a/sdk/ts/resolvers/edge.ts b/sdk/ts/resolvers/edge.ts
index e54380b5..afcdc820 100644
--- a/sdk/ts/resolvers/edge.ts
+++ b/sdk/ts/resolvers/edge.ts
@@ -6,9 +6,16 @@
 // Every fetching face takes the transport as a REQUIRED `fetch` option (the FetchLike
 // shape: the runtime's own fetch, or a wrapper around it). There is no default: the
 // SSRF-guarded default transport the Node entry ("./resolvers") supplies dials through
-// undici with DNS pinning, which an edge runtime does not have. An edge runtime that
+// undici with DNS pinning, which an edge runtime does not have.
+//
+// The read bounds itself whatever fetch it is given (fetch.ts): a body is capped at 1 MiB,
+// the whole read ends at 30 seconds, and the read follows redirects itself — at most five,
+// never out of http(s), never from https down to http, never with credentials, and never
+// for a key directory. What stays with the caller is the address: an edge runtime that
 // fetches an address another party chose (a Signature-Agent directory, an Exchange
-// domain) owns the equivalent guard; allowedScheme and blockedAddress are exported for it.
+// domain) owns the equivalent of the SSRF guard. blockedAddress is exported for it, and
+// allowedScheme, the scheme allowlist (http and https) that guard applies; it is not an
+// https-only rule.
 // tests/edge-imports.guard.test.ts walks this module's import graph and fails on any
 // Node-only import, and tsconfig.workers.json typechecks it against the Workers types.
 
diff --git a/sdk/ts/resolvers/fetch.ts b/sdk/ts/resolvers/fetch.ts
index a96b3d59..70d12d79 100644
--- a/sdk/ts/resolvers/fetch.ts
+++ b/sdk/ts/resolvers/fetch.ts
@@ -4,8 +4,25 @@
 // global, so the edge entry (resolvers/edge.ts) and a Workers, Fastly or Deno runtime can
 // use it with any fetch-compatible callable. The Node-only transports that default it, the
 // undici client with the dial-time SSRF guard, live in resolvers/http.ts.
+//
+// The read owns its own bounds, whatever transport is injected, as Go's and Python's
+// readers do: a body cap, one deadline for the whole read, the redirect cap and the scheme
+// of every hop. What the transport owns is the address: which hosts it will dial at all
+// (the SSRF guard and DNS pinning the Node default carries) and TLS. An edge runtime that
+// injects its own fetch keeps that part, and gets the rest from here.
 
 import { DirectoryUnavailable } from "./errors.ts";
+import { allowedScheme, MAX_REDIRECTS, redirectChainRefused } from "./ssrf.ts";
+
+/** The most bytes one document read accepts. A body past it is refused, never truncated:
+ * a truncated document that happens to decode is worse than a refusal. Go's
+ * maxWellKnownDocBytes and Python's _MAX_DOC_BYTES; the Node transports in http.ts bound
+ * their own buffered reads by this same number. */
+export const MAX_DOC_BYTES = 1 << 20; // 1 MiB
+
+/** How long one document read may take in all: every redirect hop and the body included
+ * (Go's maxDocumentFetch, Python's total fetch deadline). */
+export const DOCUMENT_READ_TIMEOUT_MS = 30_000;
 
 // Lenient UTF-8, as Node's Buffer#toString decodes: an invalid sequence becomes U+FFFD
 // and a leading byte-order mark is kept, so a body that starts with one still fails
@@ -17,6 +34,13 @@ export function decodeUtf8(bytes: Uint8Array): string {
 	return LENIENT_UTF8.decode(bytes);
 }
 
+/** The part of a WHATWG body stream a bounded read uses: a reader handing out byte
+ * chunks, which the read cancels once it stops reading. */
+export interface FetchBodyReader {
+	read(): Promise<{ done: boolean; value?: Uint8Array | undefined }>;
+	cancel(reason?: unknown): Promise<void>;
+}
+
 /** The minimal response shape the resolvers read — a structural subset of the
  * WHATWG `Response`, so the global `fetch` (and undici's) satisfies it.
  *
@@ -31,29 +55,36 @@ export interface FetchResponse {
 	headers?: { get(name: string): string | null };
 	arrayBuffer?(): Promise<ArrayBuffer>;
 	/** Whether the response is the end of a followed redirect, as a WHATWG Response
-	 * reports it. A key-directory read refuses one. */
+	 * reports it. A read asks its transport not to follow redirects, so it refuses one. */
 	redirected?: boolean;
+	/** The streamed body, as a WHATWG Response carries it. A read through it stops at
+	 * MAX_DOC_BYTES without taking the rest of the body; a read without it takes
+	 * `arrayBuffer()` or `text()` whole and refuses the result past the cap. */
+	body?: { getReader(): FetchBodyReader } | null;
 }
 
 /** What a read asks of the transport beyond the URL: a WHATWG RequestInit subset.
- * `redirect: "manual"` asks it not to follow a redirect and to answer the 3xx itself;
- * a key-directory read passes it, because a directory is never fetched through a
- * redirect. The shipped transports honour it, and the global fetch reads the same
- * member. */
+ * Every document read passes `redirect: "manual"` — the read follows a redirect itself,
+ * vetting each hop, and a key directory is never fetched through one — and a `signal`
+ * the read aborts at its deadline. The shipped transports honour both, and the global
+ * fetch reads the same members. */
 export interface FetchInit {
 	redirect?: "follow" | "manual";
+	signal?: AbortSignal;
 }
 
 /** An injected HTTP GET. The edge entry (@fora-protocol/sdk/resolvers/edge) has no
  * default and every reader there takes one; the Node entry
  * (@fora-protocol/sdk/resolvers) defaults to its SSRF-guarded undici transport. A
- * FetchLike that ignores `init` still cannot hand a key directory over a redirect: the
- * read refuses a 3xx and a response marked `redirected`. */
+ * FetchLike that ignores `init` still cannot widen what a read accepts: the read refuses
+ * a response marked `redirected`, bounds the body itself, and gives up at its deadline
+ * whether or not the transport stops. */
 export type FetchLike = (url: string, init?: FetchInit) => Promise<FetchResponse>;
 
 /** One document as it was served: its bytes, the media type it was labelled with, and
  * its response headers. */
 export interface Fetched {
+	/** The URL the read was asked for, whatever redirects it followed. */
 	url: string;
 	body: Uint8Array;
 	/** The Content-Type essence (type/subtype), lowercased, parameters stripped;
@@ -71,47 +102,205 @@ export function mediaTypeEssence(header: string | null | undefined): string | un
 	return essence === "" ? undefined : essence;
 }
 
+/** The statuses a read follows as a redirect: those whose Location names where the
+ * document now is. Any other 3xx is an unavailable document. */
+const REDIRECT_STATUSES: ReadonlySet<number> = new Set([301, 302, 303, 307, 308]);
+
 /** GET `url` and return the body, its media type and its headers. A transport failure
  * or a non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
  * composite relies on to distinguish an outage from an unknown key. A blocked SSRF
  * target and a body past the cap are transport failures and surface the same way
- * (never a valid empty doc). The one GET every document read shares.
+ * (never a valid empty doc). The one GET every document read shares, and the place its
+ * bounds are enforced, whatever transport `fetchFn` is:
  *
- * `noRedirect` is set for a key directory, which is never fetched through a redirect:
- * its address is the origin its signer committed to, and a redirect would hand key
- * lookup to another one. The transport is asked not to follow, and a 3xx or a response
- * marked redirected fails the read. A revocation list and the manifest follow the
- * transport's bounded redirect chain. */
+ *  - the body is read up to MAX_DOC_BYTES and refused past it, never truncated;
+ *  - the whole read, every hop and the body included, ends at DOCUMENT_READ_TIMEOUT_MS;
+ *  - only http and https URLs are fetched, the first one included;
+ *  - a redirect is followed by the read itself, never by the transport: at most
+ *    MAX_REDIRECTS hops, a relative Location resolved against the current URL, and a
+ *    hop refused when it leaves http(s), steps down from https to plaintext http, or
+ *    carries credentials;
+ *  - `noRedirect` is set for a key directory, which is never fetched through a redirect:
+ *    its address is the origin its signer committed to, and a redirect would hand key
+ *    lookup to another one, so any 3xx fails the read.
+ *
+ * A response the transport marks `redirected` is refused either way: the read asked it
+ * not to follow, so the hops it took were never vetted here. */
 export async function fetchDocument(
 	fetchFn: FetchLike,
 	url: string,
 	opts: { noRedirect?: boolean } = {},
 ): Promise<Fetched> {
-	let resp: FetchResponse;
-	let body: Uint8Array;
+	const controller = new AbortController();
+	let timer: ReturnType<typeof setTimeout> | undefined;
+	const expired = new Promise<never>((_resolve, reject) => {
+		timer = setTimeout(() => {
+			controller.abort();
+			reject(new DirectoryUnavailable(`no complete answer for ${url} within ${DOCUMENT_READ_TIMEOUT_MS} ms`));
+		}, DOCUMENT_READ_TIMEOUT_MS);
+	});
+	// The race below observes the deadline; this stops it surfacing as an unhandled
+	// rejection when the read finishes first.
+	expired.catch(() => undefined);
+	const beforeDeadline = <T>(work: Promise<T>): Promise<T> => Promise.race([work, expired]);
+
 	try {
-		resp = opts.noRedirect === true ? await fetchFn(url, { redirect: "manual" }) : await fetchFn(url);
-		if (opts.noRedirect === true && (resp.redirected === true || (resp.status >= 300 && resp.status < 400))) {
-			throw new DirectoryUnavailable(`a key directory is never fetched through a redirect: ${url}`);
+		let target = url;
+		let current = documentURL(url);
+		let hops = 0;
+		for (;;) {
+			let resp: FetchResponse;
+			try {
+				resp = await beforeDeadline(fetchFn(target, { redirect: "manual", signal: controller.signal }));
+			} catch (err) {
+				if (err instanceof DirectoryUnavailable) throw err;
+				throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
+			}
+			const isRedirect = resp.status >= 300 && resp.status < 400;
+			if (resp.redirected === true || (isRedirect && opts.noRedirect === true)) {
+				discardBody(resp);
+				throw new DirectoryUnavailable(
+					opts.noRedirect === true
+						? `a key directory is never fetched through a redirect: ${url}`
+						: `the transport followed a redirect it was asked not to: ${url}`,
+				);
+			}
+			if (isRedirect && REDIRECT_STATUSES.has(resp.status)) {
+				discardBody(resp);
+				hops += 1;
+				if (redirectChainRefused(hops)) {
+					throw new DirectoryUnavailable(`more than ${MAX_REDIRECTS} redirects for ${url}`);
+				}
+				current = redirectTarget(current, resp.headers?.get("location") ?? null, url);
+				target = current.href;
+				continue;
+			}
+			if (resp.status !== 200) {
+				discardBody(resp);
+				throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
+			}
+			let body: Uint8Array;
+			try {
+				body = await beforeDeadline(readCapped(resp, url, controller.signal));
+			} catch (err) {
+				if (err instanceof DirectoryUnavailable) throw err;
+				throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
+			}
+			const headers = resp.headers;
+			return {
+				url,
+				body,
+				mediaType: mediaTypeEssence(headers?.get("content-type")),
+				header: (name) => headers?.get(name) ?? null,
+			};
 		}
-		if (resp.status !== 200) {
-			throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
+	} finally {
+		if (timer !== undefined) clearTimeout(timer);
+	}
+}
+
+/** The URL a read starts at: absolute, and http or https. Any other scheme names no
+ * document this SDK fetches, whatever the injected transport would do with it. */
+function documentURL(url: string): URL {
+	let parsed: URL;
+	try {
+		parsed = new URL(url);
+	} catch {
+		throw new DirectoryUnavailable(`not an absolute URL: ${url}`);
+	}
+	if (!allowedScheme(parsed.protocol.replace(/:$/, ""))) {
+		throw new DirectoryUnavailable(`a ${parsed.protocol} URL is not fetched: ${url}`);
+	}
+	return parsed;
+}
+
+/** Where a redirect from `current` leads, or a refusal. The Location is resolved
+ * against the current URL, as a browser resolves it, and the hop is refused when it
+ * leaves http(s), steps down from https to plaintext http — an on-path party could then
+ * answer for the origin — or carries credentials, which would send a different request
+ * from the one the URL names. */
+function redirectTarget(current: URL, location: string | null, url: string): URL {
+	if (location === null || location === "") {
+		throw new DirectoryUnavailable(`a redirect with no Location for ${url}`);
+	}
+	let next: URL;
+	try {
+		next = new URL(location, current);
+	} catch {
+		throw new DirectoryUnavailable(`a redirect to an unparseable Location for ${url}`);
+	}
+	if (!allowedScheme(next.protocol.replace(/:$/, ""))) {
+		throw new DirectoryUnavailable(`a redirect to a ${next.protocol} URL for ${url}`);
+	}
+	if (current.protocol === "https:" && next.protocol === "http:") {
+		throw new DirectoryUnavailable(`a redirect from https to plaintext http for ${url}`);
+	}
+	if (next.username !== "" || next.password !== "") {
+		throw new DirectoryUnavailable(`a redirect carrying credentials for ${url}`);
+	}
+	return next;
+}
+
+/** Read a 200's body, refusing it past MAX_DOC_BYTES. Through the streamed body the
+ * read stops as soon as the total passes the cap and cancels the rest, so a body that
+ * never ends costs at most the cap; without one it takes `arrayBuffer()` (or `text()`)
+ * whole and refuses the result. A chunk is accepted by ArrayBuffer.isView rather than
+ * instanceof, so a stream from another realm (a Worker isolate, a vm context) reads the
+ * same. */
+async function readCapped(resp: FetchResponse, url: string, signal: AbortSignal): Promise<Uint8Array> {
+	const stream = resp.body;
+	if (stream === undefined || stream === null) {
+		const bytes = resp.arrayBuffer !== undefined
+			? new Uint8Array(await resp.arrayBuffer())
+			: new TextEncoder().encode(await resp.text());
+		if (bytes.byteLength > MAX_DOC_BYTES) {
+			throw new DirectoryUnavailable(`a document over the ${MAX_DOC_BYTES} byte cap: ${url}`);
 		}
-		body =
-			resp.arrayBuffer !== undefined
-				? new Uint8Array(await resp.arrayBuffer())
-				: new TextEncoder().encode(await resp.text());
-	} catch (err) {
-		if (err instanceof DirectoryUnavailable) throw err;
-		throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
+		return bytes;
 	}
-	const headers = resp.headers;
-	return {
-		url,
-		body,
-		mediaType: mediaTypeEssence(headers?.get("content-type")),
-		header: (name) => headers?.get(name) ?? null,
+	const reader = stream.getReader();
+	const stop = (): void => {
+		reader.cancel().catch(() => undefined);
 	};
+	// At the deadline the read stops waiting on the stream; this lets the stream stop too.
+	signal.addEventListener("abort", stop, { once: true });
+	try {
+		const chunks: Uint8Array[] = [];
+		let total = 0;
+		for (;;) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (value === undefined || !ArrayBuffer.isView(value)) {
+				stop();
+				throw new DirectoryUnavailable(`a body chunk that is not bytes for ${url}`);
+			}
+			total += value.byteLength;
+			if (total > MAX_DOC_BYTES) {
+				stop();
+				throw new DirectoryUnavailable(`a document over the ${MAX_DOC_BYTES} byte cap: ${url}`);
+			}
+			chunks.push(new Uint8Array(value.buffer, value.byteOffset, value.byteLength));
+		}
+		const out = new Uint8Array(total);
+		let offset = 0;
+		for (const chunk of chunks) {
+			out.set(chunk, offset);
+			offset += chunk.byteLength;
+		}
+		return out;
+	} finally {
+		signal.removeEventListener("abort", stop);
+	}
+}
+
+/** Release the body of a response the read will not use, so the transport is not left
+ * holding a stream open. */
+function discardBody(resp: FetchResponse): void {
+	try {
+		resp.body?.getReader().cancel().catch(() => undefined);
+	} catch {
+		// A body that cannot be read cannot be held open either.
+	}
 }
 
 /** GET `url` and return the body text: fetchDocument without the media type, for a
@@ -123,18 +312,15 @@ export async function fetchStrict(
 	return decodeUtf8((await fetchDocument(fetchFn, url)).body);
 }
 
-/** Best-effort GET: returns the body text on 200, or `undefined` on any
- * transport/status failure. The revocation refresh uses this so a fetch blip
- * leaves the prior snapshot in place (Go: best-effort refresh) rather than
- * propagating — a stale-but-present snapshot is safer than dropping revocations. */
+/** Best-effort GET: the body text on 200, or `undefined` on any failure. It is
+ * fetchDocument's read, with the same cap, deadline and redirect rules, so a
+ * best-effort caller is never the unbounded path. */
 export async function fetchSoft(
 	fetchFn: FetchLike,
 	url: string,
 ): Promise<string | undefined> {
 	try {
-		const resp = await fetchFn(url);
-		if (resp.status !== 200) return undefined;
-		return await resp.text();
+		return decodeUtf8((await fetchDocument(fetchFn, url)).body);
 	} catch {
 		return undefined;
 	}
diff --git a/sdk/ts/resolvers/http.ts b/sdk/ts/resolvers/http.ts
index f9686f31..9f649d25 100644
--- a/sdk/ts/resolvers/http.ts
+++ b/sdk/ts/resolvers/http.ts
@@ -8,6 +8,11 @@
 // (resolvers/index.ts) and the client reach it; the edge entry (resolvers/edge.ts) never
 // does. Integration tests / on-prem deployments that must reach a private origin inject
 // their own FetchLike (the escape hatch).
+//
+// A document read asks these transports not to follow redirects and follows them itself
+// (resolvers/fetch.ts), so the reader vets every hop's scheme and counts the chain
+// whatever transport it was given. The redirect-cap interceptor below still bounds a
+// caller that uses a transport directly.
 
 import { lookup as dnsLookup } from "node:dns/promises";
 
@@ -19,7 +24,7 @@ import {
 	request as undiciRequest,
 } from "undici";
 
-import type { FetchLike, FetchResponse } from "./fetch.ts";
+import { type FetchLike, type FetchResponse, MAX_DOC_BYTES } from "./fetch.ts";
 import { allowedScheme, blockedAddress, MAX_REDIRECTS } from "./ssrf.ts";
 
 // The transport contract and the document GET are edge-safe and live in fetch.ts; they
@@ -35,11 +40,17 @@ export {
 	mediaTypeEssence,
 } from "./fetch.ts";
 
-/** Bounds the guarded default transport's GET so a slow origin cannot pin a
- * Resolve call or the poller (Go: defaultWBAHTTPTimeout). */
+/** Bounds one GET of the guarded default transport so a slow origin cannot pin a
+ * Resolve call or the poller (Go: defaultWBAHTTPTimeout). A document read also carries
+ * its own whole-read deadline (fetch.ts), which arrives as the caller's signal. */
 const DEFAULT_HTTP_TIMEOUT_MS = 10_000;
-/** Well-known documents are small; bound the body read (Go: maxDocBytes). */
-const MAX_DOC_BYTES = 1 << 20; // 1 MiB
+
+/** The signal one GET runs under: the per-request timeout, and the caller's signal when
+ * it passed one, whichever fires first. */
+function requestSignal(caller: AbortSignal | undefined): AbortSignal {
+	const timeout = AbortSignal.timeout(DEFAULT_HTTP_TIMEOUT_MS);
+	return caller === undefined ? timeout : AbortSignal.any([caller, timeout]);
+}
 
 /** An SSRF error surfaced when the guarded transport refuses to dial a target.
  * fetchStrict/fetchSoft see it as an ordinary transport failure (fail-closed
@@ -169,6 +180,7 @@ async function requestBounded(
 	url: string,
 	dispatcher: Dispatcher,
 	allowScheme: (scheme: string) => boolean,
+	signal: AbortSignal | undefined,
 ): Promise<FetchResponse> {
 	let parsed: URL;
 	try {
@@ -189,7 +201,7 @@ async function requestBounded(
 	try {
 		resp = await undiciRequest(url, {
 			dispatcher,
-			signal: AbortSignal.timeout(DEFAULT_HTTP_TIMEOUT_MS),
+			signal: requestSignal(signal),
 		});
 	} catch (err) {
 		if (err instanceof SsrfBlockedError) throw err;
@@ -213,7 +225,12 @@ async function requestBounded(
  * pinned, the redirect chain is bounded to MAX_REDIRECTS, and undici owns
  * status/redirect/1xx so a non-2xx is an ordinary response, never a crash. */
 export const guardedFetch: FetchLike = (url, init) =>
-	requestBounded(url, init?.redirect === "manual" ? guardedBase : guardedAgent, allowedScheme);
+	requestBounded(
+		url,
+		init?.redirect === "manual" ? guardedBase : guardedAgent,
+		allowedScheme,
+		init?.signal,
+	);
 
 // ---------------------------------------------------------------------------
 // The ONE env-driven, best-effort guarded fetch factory.
@@ -298,7 +315,12 @@ export function guardedFetchFromEnv(): FetchLike {
 	// A read that refuses redirects dials the base agent, which follows none: the 3xx
 	// comes back as the answer and the read fails on it.
 	return (url, init) =>
-		requestBounded(url, init?.redirect === "manual" ? base : dispatcher, schemeGuardAllows);
+		requestBounded(
+			url,
+			init?.redirect === "manual" ? base : dispatcher,
+			schemeGuardAllows,
+			init?.signal,
+		);
 }
 
 /** Default transport for a resolver whose URL is a FIXED, operator-chosen address
@@ -317,7 +339,10 @@ export function guardedFetchFromEnv(): FetchLike {
  * reach for this transport for a new resolver without first asking where its URL
  * comes from. */
 export const defaultFetch: FetchLike = async (url, init) => {
-	const r = await fetch(url, init?.redirect === "manual" ? { redirect: "manual" } : {});
+	const r = await fetch(url, {
+		...(init?.redirect === "manual" ? { redirect: "manual" as const } : {}),
+		...(init?.signal !== undefined ? { signal: init.signal } : {}),
+	});
 	// Bound the body read even on the unguarded path: a misconfigured / hostile
 	// well-known origin cannot force an unbounded read into the JSON decoder. The
 	// WHATWG Response body is async-iterable in Node, so it reuses readBounded (the
diff --git a/sdk/ts/tests/edge-no-eval.test.ts b/sdk/ts/tests/edge-no-eval.test.ts
index 8640516f..f792098b 100644
--- a/sdk/ts/tests/edge-no-eval.test.ts
+++ b/sdk/ts/tests/edge-no-eval.test.ts
@@ -8,7 +8,8 @@
 // in a Node vm context created with code generation from strings disabled, which refuses
 // eval and new Function with the same EvalError. Every reader that runs the strict check
 // is driven to an accepted document, and a refused one, and the check by message name is
-// run too.
+// run too. The context has no global ReadableStream, as the reader's bounds must not
+// need one: an over-cap body and an https-to-http redirect are refused there too.
 
 import { createRequire } from "node:module";
 import vm from "node:vm";
@@ -68,6 +69,14 @@ globalThis.probe = async () => {
 				fetch: serve('{"as_of":"2026-05-01T12:00:00Z","revoked":[]}'),
 			}),
 		),
+		revocationsOverCap: await outcome(() =>
+			readRevocationList("https://pub.example/revoked.json", { fetch: serve(new Uint8Array(1048577)) }),
+		),
+		revocationsDowngrade: await outcome(() =>
+			readRevocationList("https://pub.example/revoked.json", {
+				fetch: async () => new Response(null, { status: 302, headers: { location: "http://pub.example/revoked.json" } }),
+			}),
+		),
 		license: await outcome(async () =>
 			readLicenseDocument({ uri: "https://pub.example/terms.txt", uri_digest: await sha256(text) }, { fetch: serve(text) }),
 		),
@@ -141,6 +150,8 @@ describe("the edge entry in a context that refuses code generation from strings"
 			directory: "ok",
 			directoryUnknownField: "strict",
 			revocations: "ok",
+			revocationsOverCap: expect.stringMatching(/^DirectoryUnavailable: /),
+			revocationsDowngrade: expect.stringMatching(/^DirectoryUnavailable: /),
 			license: "ok",
 			byName: "strict",
 		});
diff --git a/sdk/ts/tests/resolvers-document-bounds.test.ts b/sdk/ts/tests/resolvers-document-bounds.test.ts
new file mode 100644
index 00000000..b3970487
--- /dev/null
+++ b/sdk/ts/tests/resolvers-document-bounds.test.ts
@@ -0,0 +1,227 @@
+// The document read enforces its own bounds, whatever transport is injected: a body cap,
+// one deadline for the whole read, the redirect cap and the scheme of every hop. The edge
+// entry hands the runtime's own fetch straight to the readers, so these are exercised
+// first through a fetch answering WHATWG Responses (as a Worker's does), then through the
+// Node default transport against a real server. Go and Python enforce the same cap and
+// deadline in their readers; the redirect rules match their guarded clients.
+import { createServer, type Server } from "node:http";
+import type { AddressInfo } from "node:net";
+
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { readRevocationList } from "../resolvers/edge.ts";
+import { DirectoryUnavailable } from "../resolvers/errors.ts";
+import {
+	DOCUMENT_READ_TIMEOUT_MS,
+	type FetchInit,
+	type FetchLike,
+	fetchDocument,
+	fetchSoft,
+	MAX_DOC_BYTES,
+} from "../resolvers/fetch.ts";
+import { guardedFetchFromEnv } from "../resolvers/http.ts";
+import { MAX_REDIRECTS } from "../resolvers/ssrf.ts";
+
+/** A fetch answering from `route`, recording every URL and init it was handed. */
+function recordingFetch(route: (url: string) => Response | Promise<Response>): {
+	fetch: FetchLike;
+	calls: { url: string; init: FetchInit | undefined }[];
+} {
+	const calls: { url: string; init: FetchInit | undefined }[] = [];
+	const fetch: FetchLike = async (url, init) => {
+		calls.push({ url, init });
+		return route(url);
+	};
+	return { fetch, calls };
+}
+
+const ok = (body: BodyInit, contentType = "application/json"): Response =>
+	new Response(body, { status: 200, headers: { "content-type": contentType } });
+
+const redirect = (location: string, status = 302): Response =>
+	new Response(null, { status, headers: { location } });
+
+/** A redirect chain on https://doc.example: /n answers a relative redirect to /(n-1),
+ * and /0 is the document. */
+function chain(): ReturnType<typeof recordingFetch> {
+	return recordingFetch((url) => {
+		const n = Number.parseInt(new URL(url).pathname.slice(1), 10);
+		return n > 0 ? redirect(`/${n - 1}`) : ok("{}");
+	});
+}
+
+describe("the document read bounds the body", () => {
+	it("accepts a body of exactly MAX_DOC_BYTES and refuses one byte more", async () => {
+		const exact = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES)));
+		expect((await fetchDocument(exact.fetch, "https://doc.example/d")).body.byteLength).toBe(MAX_DOC_BYTES);
+
+		const over = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES + 1)));
+		await expect(fetchDocument(over.fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("stops reading a body that never ends once it passes the cap", async () => {
+		const chunk = new Uint8Array(64 * 1024);
+		let pulls = 0;
+		const endless = new ReadableStream<Uint8Array>({
+			pull(controller) {
+				pulls += 1;
+				controller.enqueue(chunk);
+			},
+		});
+		const { fetch } = recordingFetch(() => ok(endless));
+		await expect(fetchDocument(fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+		// The cap is 16 chunks; the read takes the one that crosses it and stops.
+		expect(pulls).toBeLessThanOrEqual(MAX_DOC_BYTES / chunk.byteLength + 2);
+	});
+
+	it("refuses an over-cap body through an edge reader, and fetchSoft reads it as absent", async () => {
+		const { fetch } = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES + 1)));
+		await expect(readRevocationList("https://doc.example/rev", { fetch })).rejects.toBeInstanceOf(DirectoryUnavailable);
+		expect(await fetchSoft(fetch, "https://doc.example/rev")).toBeUndefined();
+	});
+});
+
+describe("the document read follows redirects itself", () => {
+	it("asks the transport not to follow, and hands it the read's signal", async () => {
+		const { fetch, calls } = chain();
+		await fetchDocument(fetch, "https://doc.example/2");
+		expect(calls).toHaveLength(3);
+		for (const call of calls) {
+			expect(call.init?.redirect).toBe("manual");
+			expect(call.init?.signal).toBeInstanceOf(AbortSignal);
+		}
+	});
+
+	it(`follows ${MAX_REDIRECTS} redirects, resolving a relative Location, and refuses one more`, async () => {
+		const at = chain();
+		const doc = await fetchDocument(at.fetch, `https://doc.example/${MAX_REDIRECTS}`);
+		expect(doc.url).toBe(`https://doc.example/${MAX_REDIRECTS}`);
+		expect(at.calls.map((c) => c.url).at(-1)).toBe("https://doc.example/0");
+
+		const over = chain();
+		await expect(fetchDocument(over.fetch, `https://doc.example/${MAX_REDIRECTS + 1}`)).rejects.toBeInstanceOf(
+			DirectoryUnavailable,
+		);
+		expect(over.calls).toHaveLength(MAX_REDIRECTS + 1);
+	});
+
+	it.each([
+		["a step down from https to plaintext http", "http://doc.example/next"],
+		["a scheme that is not http(s)", "ftp://doc.example/next"],
+		["credentials in the Location", "https://user:secret@doc.example/next"],
+		["no Location at all", ""],
+	])("refuses a redirect with %s", async (_name, location) => {
+		const { fetch, calls } = recordingFetch((url) =>
+			url === "https://doc.example/start" ? redirect(location) : ok("{}"),
+		);
+		await expect(fetchDocument(fetch, "https://doc.example/start")).rejects.toBeInstanceOf(DirectoryUnavailable);
+		expect(calls).toHaveLength(1);
+	});
+
+	it("follows http to http, where the read started in plaintext", async () => {
+		const { fetch } = recordingFetch((url) =>
+			url === "http://doc.example/start" ? redirect("http://doc.example/next") : ok("{}"),
+		);
+		expect((await fetchDocument(fetch, "http://doc.example/start")).body.byteLength).toBe(2);
+	});
+
+	it("refuses a 3xx that names no new location, and any 3xx for a key directory", async () => {
+		const notModified = recordingFetch(() => new Response(null, { status: 300 }));
+		await expect(fetchDocument(notModified.fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+
+		const directory = recordingFetch(() => redirect("https://doc.example/elsewhere"));
+		await expect(
+			fetchDocument(directory.fetch, "https://doc.example/dir", { noRedirect: true }),
+		).rejects.toBeInstanceOf(DirectoryUnavailable);
+		expect(directory.calls).toHaveLength(1);
+	});
+
+	it("refuses a response the transport followed although it was asked not to", async () => {
+		const followed = ok("{}");
+		Object.defineProperty(followed, "redirected", { value: true });
+		const { fetch } = recordingFetch(() => followed);
+		await expect(fetchDocument(fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("never fetches a URL that is not http(s)", async () => {
+		const { fetch, calls } = recordingFetch(() => ok("{}"));
+		await expect(fetchDocument(fetch, "data:application/json,{}")).rejects.toBeInstanceOf(DirectoryUnavailable);
+		expect(calls).toHaveLength(0);
+	});
+});
+
+describe("the document read ends at its deadline", () => {
+	afterEach(() => {
+		vi.useRealTimers();
+	});
+
+	it("gives up when the transport never answers, and aborts the signal it passed", async () => {
+		vi.useFakeTimers();
+		let seen: AbortSignal | undefined;
+		const fetch: FetchLike = (_url, init) => {
+			seen = init?.signal;
+			return new Promise(() => undefined);
+		};
+		const read = fetchDocument(fetch, "https://doc.example/slow");
+		const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
+		await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+		await refused;
+		expect(seen?.aborted).toBe(true);
+	});
+
+	it("gives up on a body that stalls", async () => {
+		vi.useFakeTimers();
+		const stalled = new ReadableStream<Uint8Array>({ pull: () => new Promise(() => undefined) });
+		const { fetch } = recordingFetch(() => ok(stalled));
+		const read = fetchDocument(fetch, "https://doc.example/slow");
+		const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
+		await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+		await refused;
+	});
+});
+
+describe("the Node default transport under the reader's bounds", () => {
+	let server: Server | undefined;
+	afterEach(async () => {
+		vi.unstubAllEnvs();
+		if (server !== undefined) {
+			const s = server;
+			await new Promise<void>((resolve) => s.close(() => resolve()));
+			server = undefined;
+		}
+	});
+
+	async function listen(handler: Parameters<typeof createServer>[1]): Promise<string> {
+		server = createServer(handler);
+		const s = server;
+		await new Promise<void>((resolve) => s.listen(0, "127.0.0.1", resolve));
+		return `http://127.0.0.1:${(s.address() as AddressInfo).port}`;
+	}
+
+	it("refuses an over-cap body and follows a plaintext chain up to the cap", async () => {
+		// A loopback origin over plaintext is what the two deployment flags admit.
+		vi.stubEnv("SKIP_SSRF", "true");
+		vi.stubEnv("ALLOW_INSECURE", "true");
+		const base = await listen((req, res) => {
+			const path = req.url ?? "/";
+			if (path === "/big") {
+				res.writeHead(200, { "content-type": "application/json" });
+				res.end(Buffer.alloc(MAX_DOC_BYTES + 1));
+				return;
+			}
+			const n = Number.parseInt(path.slice(1), 10) || 0;
+			if (n > 0) {
+				res.writeHead(302, { location: `/${n - 1}` });
+				res.end();
+				return;
+			}
+			res.writeHead(200, { "content-type": "application/json" });
+			res.end("{}");
+		});
+		const transport = guardedFetchFromEnv();
+
+		await expect(fetchDocument(transport, `${base}/big`)).rejects.toBeInstanceOf(DirectoryUnavailable);
+		expect((await fetchDocument(transport, `${base}/${MAX_REDIRECTS}`)).body.byteLength).toBe(2);
+		await expect(fetchDocument(transport, `${base}/${MAX_REDIRECTS + 1}`)).rejects.toBeInstanceOf(DirectoryUnavailable);
+	});
+});
diff --git a/sdk/ts/tests/resolvers-http-wiring.test.ts b/sdk/ts/tests/resolvers-http-wiring.test.ts
index d873baac..f68775d7 100644
--- a/sdk/ts/tests/resolvers-http-wiring.test.ts
+++ b/sdk/ts/tests/resolvers-http-wiring.test.ts
@@ -8,6 +8,12 @@
 // parity: sdk/go TestGuardedWBAClientSurfacesNon2xx / …RefusesRedirect* and sdk/
 // python test_guarded_client_non_2xx… / …refuses_redirect_to_{ftp,internal}.
 //
+// A document read asks the transport not to follow and follows redirects itself
+// (fetch.ts), calling the transport once per hop, so through fetchStrict each hop is
+// dialed — and refused — by the same guarded connector, and the reader's own cap and
+// scheme checks apply on top. The direct guardedFetch calls exercise the transport's
+// interceptor, which still bounds a caller that uses it without the reader.
+//
 // The guard blocks loopback, so — to exercise the wiring against a live in-process
 // origin — blockedAddress is mocked (a reconfigurable spy). allowedScheme stays
 // REAL, so the deny-by-default scheme allowlist is still genuinely enforced.

From 0a63422b9ede7fb4715868ac075a311663d69f7c Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:47:55 +0200
Subject: [PATCH 138/164] Record the TypeScript reader's own bounds in the
 changelog and design history

The TypeScript edge bullet now says the document read caps the body, ends the
whole read at 30 seconds and follows redirects itself on both entries, and that
on Node a document read no longer follows a redirect from https to http. The
document-reader bullet says the cap is the read's own in all three SDKs. The
website changelog mirrors both.

The design history records why the bounds moved from the TypeScript transport
into the reader, what stays with the transport, and the deliberate difference
from Go and Python: the TypeScript reader refuses a step down from https to http
even where a sandbox sets ALLOW_INSECURE.
---
 docs/design-history.md                        | 33 +++++++++++++++++++
 proto/CHANGELOG.md                            | 11 +++++--
 .../src/content/docs/reference/changelog.mdx  | 11 +++++--
 3 files changed, 51 insertions(+), 4 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 8426eaaf..c40dd8fc 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2410,3 +2410,36 @@ The cache's predicate knows a directory's list only once a resolver has fetched
 directory, so a predicate built on a resolver that has never fetched an Exchange's
 directory screens nothing for that Exchange. The cache polling each Exchange's own list
 itself would close that gap; this change leaves it as it was and only scopes the answer.
+
+## The TypeScript document reader carries its own bounds
+
+Go and Python bound a document read in the reader: Go reads the body through a limit and
+puts the whole fetch under one deadline, and Python streams the body against the same cap
+inside a total deadline. Whatever client a caller injects, the read stays bounded.
+TypeScript had put the same bounds in its transport instead — the undici client the Node
+entry defaults to capped the body, timed out the request and capped the redirect chain —
+and the reader trusted whatever came back. That was invisible while every read ran on the
+Node default. The edge entry made it visible: it hands the runtime's own `fetch` straight
+to the readers, so a read through a Worker's fetch had no cap, no deadline, and whatever
+redirect policy the runtime had, including a key-directory read whose host an
+unauthenticated `Signature-Agent` names.
+
+The read now owns its bounds on both entries. It reads the body through the stream with a
+byte budget and refuses it past 1 MiB without taking the rest, puts the whole read —
+every hop and the body — under one 30-second deadline whose signal it hands the
+transport, and follows redirects itself: it asks the transport not to follow, takes the
+Location, resolves it against the current URL, and refuses a hop out of http(s), from
+https down to plaintext http, or carrying credentials, up to the shared cap of five. A
+response the transport marks as redirected is refused, because the read asked it not to
+follow and could vet none of the hops it took. What stays with the transport is the
+address: which hosts it will dial at all, and TLS. The Node default keeps its SSRF guard
+and DNS pinning, and an edge caller keeps the equivalent for its runtime.
+
+Following redirects in the reader rather than in the transport is a deliberate difference
+from Go and Python, where the guarded client owns the redirect policy. TypeScript has no
+transport it controls on the edge, so the reader is the one place every read passes
+through. It also tightens one case on purpose: the reader refuses a step down from https
+to http whatever the configuration, where Go and Python permit one when a sandbox sets
+`ALLOW_INSECURE`. A sandbox that serves documents over plaintext starts the read over
+plaintext, and http to http is still followed. On Node, document reads therefore no longer
+follow a redirect from https to http either, which the undici redirect handler had done.
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 5342cb8d..56375263 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -618,7 +618,8 @@ request only where it means to, and check every answer through the SDK's own dec
   verifies the bytes against `uri_digest` (`LicenseDocument`, or `DigestMismatchError`,
   `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
   is not JSON and a body over 1 MiB are an unavailable document; a body over the cap is
-  now refused rather than truncated, in the resolvers as well. Go's
+  now refused rather than truncated, in the resolvers as well, and the cap is the read's
+  own in all three SDKs, whatever transport is injected. Go's
   `ErrDirectoryUnavailable` reads `resolvers: document unavailable`, and a manifest
   fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
   endpoint resolver, the registration-requirements reader, the WBA key resolver and the
@@ -821,7 +822,13 @@ SDKs, in all three languages:
   `createWBAKeyResolver` and `createWBAOfferDirectoryFetch` take the injectable
   `verifyEd25519` primitive `verifyAgentBinding` already took, so a runtime without
   WebCrypto Ed25519, such as Fastly Compute, no longer reads every directory key as
-  unsigned.
+  unsigned. The document read bounds itself on both TypeScript entries, as Go's and
+  Python's readers do: it caps a body at 1 MiB, ends the whole read at 30 seconds and
+  passes its signal to the transport, and follows redirects itself, at most five,
+  refusing a hop out of http(s), from https down to plaintext http or carrying
+  credentials, and any redirect for a key directory. Those bounds lived only in the Node
+  transports, so a read through an edge runtime's own fetch was unbounded; on Node, a
+  document read no longer follows a redirect from https to http either.
 - TypeScript strict check: the strict schemas of the messages the SDK checks by name are
   compiled at build time with ajv's standalone output, into the generated, drift-gated
   `gen/ts/strict/`, so the strict readers and the client's strict decoding generate no code
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index b10e7e29..d54a53e9 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -630,7 +630,8 @@ summarizes them per language.
   verifies the bytes against `uri_digest` (`LicenseDocument`, or `DigestMismatchError`,
   `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
   is not JSON and a body over 1 MiB are an unavailable document; a body over the cap is
-  now refused rather than truncated, in the resolvers as well. Go's
+  now refused rather than truncated, in the resolvers as well, and the cap is the read's
+  own in all three SDKs, whatever transport is injected. Go's
   `ErrDirectoryUnavailable` reads `resolvers: document unavailable`, and a manifest
   fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
   endpoint resolver, the registration-requirements reader, the WBA key resolver and the
@@ -833,7 +834,13 @@ SDKs, in all three languages:
   `createWBAKeyResolver` and `createWBAOfferDirectoryFetch` take the injectable
   `verifyEd25519` primitive `verifyAgentBinding` already took, so a runtime without
   WebCrypto Ed25519, such as Fastly Compute, no longer reads every directory key as
-  unsigned.
+  unsigned. The document read bounds itself on both TypeScript entries, as Go's and
+  Python's readers do: it caps a body at 1 MiB, ends the whole read at 30 seconds and
+  passes its signal to the transport, and follows redirects itself, at most five,
+  refusing a hop out of http(s), from https down to plaintext http or carrying
+  credentials, and any redirect for a key directory. Those bounds lived only in the Node
+  transports, so a read through an edge runtime's own fetch was unbounded; on Node, a
+  document read no longer follows a redirect from https to http either.
 - TypeScript strict check: the strict schemas of the messages the SDK checks by name are
   compiled at build time with ajv's standalone output, into the generated, drift-gated
   `gen/ts/strict/`, so the strict readers and the client's strict decoding generate no code

From a8d8f4a16fffa1aca48640d58afcefdb6e5258e0 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:51:10 +0200
Subject: [PATCH 139/164] Describe the ingestion token estimate as a sizing
 input, never an offer's estimate
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A metered purchase charges the offer's estimate × rate, or one unit's rate
without an estimate, and the charge is final. The ingestion and billing pages
still described the older model: the pipeline set every offer's
estimated_quantity from word_count × 1.32, a ±20% tolerance applied between
estimate and report, and "the actual token count from the UsageReport is used
for billing". Under the current rule that would let the Exchange, not the
publisher, choose the quantity a purchase is charged for, and would apply a
token count to prices in other units.

The pages now say what the protocol says. The pipeline's token count sizes a
resource for unit_cost, the comparison metric; an offer carries only the
estimate the publisher states, in the price's own unit; a usage report records
consumption and never changes the charge.
- normalization: the token estimate is a sizing input; the ±20% paragraph
  becomes what an estimate error can and cannot move.
- catalog-compilation: the mapping table and the snippet carry the publisher's
  estimate unchanged and compute unit_cost from decimal strings, as Pricing
  holds them.
- billing-adapter, configuration and storage-model: the same rule, and the
  table names the charge per model.
- for-exchange-operators: rate, unit, estimate and unit_cost are defined as the
  protocol defines them, the per-access row no longer reads as tokens, and an
  omitted consumed_unit is the only tokens default.
- jsonl-ingestion: estimated_quantity is the publisher's estimate in the
  term's unit, and the worked example no longer charges 474 × $0.05.
- threat model: no pricing model makes the charge depend on the report, and
  the prior-art row no longer names a minimum billable token count.

The metered-purchase changelog entry records the change, mirrored on the site.
---
 proto/CHANGELOG.md                            |  7 ++-
 .../content-ingestion/catalog-compilation.mdx | 46 ++++++++++++++-----
 .../content-ingestion/normalization.mdx       | 29 ++++++------
 .../components/content-ingestion/sources.mdx  |  2 +-
 .../components/exchange/billing-adapter.mdx   | 16 ++++---
 .../components/exchange/configuration.mdx     | 10 ++--
 .../components/exchange/storage-model.mdx     |  2 +-
 .../for-exchange-operators.mdx                | 13 ++++--
 .../content/docs/protocol/jsonl-ingestion.mdx |  8 ++--
 .../src/content/docs/reference/changelog.mdx  |  7 ++-
 .../content/docs/security/threat-model.mdx    |  4 +-
 11 files changed, 93 insertions(+), 51 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 56375263..f3e33411 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -330,7 +330,12 @@ Docs: the transaction-flow page gains "Charging a metered purchase", and its lis
 report checks drops the ±20% quantity tolerance that refused honest reports, as do the
 Exchange storage model and the scenario walkthrough. The licensing-terms page gains
 "Metered pricing: rate, unit and estimate", and the money-flow page, the reference page
-and the walkthroughs describe the charge.
+and the walkthroughs describe the charge. The content-ingestion pages, the billing
+adapter, the Exchange configuration and storage pages, the operator guide, the JSONL
+ingestion page and the threat model now describe the pipeline's token count as the size
+`unit_cost` compares by, never an offer's estimate: an offer carries only the estimate the
+publisher states, in the price's own unit, and a usage report never changes the charge.
+The JSONL worked example no longer pairs a per-access price with a token-count estimate.
 
 **An acceptance names its requester: `Requester.id` and `Requester.domain` are required
 (validation rules added; no wire change).** An agent's offer acceptance signs canonical
diff --git a/website/src/content/docs/components/content-ingestion/catalog-compilation.mdx b/website/src/content/docs/components/content-ingestion/catalog-compilation.mdx
index 1adf7325..3e50fc83 100644
--- a/website/src/content/docs/components/content-ingestion/catalog-compilation.mdx
+++ b/website/src/content/docs/components/content-ingestion/catalog-compilation.mdx
@@ -51,31 +51,53 @@ Each `CatalogEntry` maps to a protocol `OfferTemplate`. The content identity is
 | `Authors` | `comp.Text` | `author` | String array |
 | `SourceType` | `comp.Text` | `sourcetype` | 0=human, 1=ai, 2=hybrid |
 | `PricingModel` | `fora.Pricing` | `model` | Enum mapping |
-| `Rate` | `fora.Pricing` | `rate` | Decimal |
+| `Rate` | `fora.Pricing` | `rate` | Exact decimal string |
 | `Currency` | `fora.Pricing` | `currency` | ISO 4217 |
-| `EstimatedTokens` | `fora.Pricing` | `estimated_quantity` | `WordCount * 1.32` |
-| `Rate / EstimatedTokens` | `fora.Pricing` | `unit_cost` | Computed at compilation |
+| `Unit` | `fora.Pricing` | `unit` | The metering unit of a `PER_UNIT` price |
+| `EstimatedQuantity` | `fora.Pricing` | `estimated_quantity` | The publisher's own estimate, in `Unit` (from the term's pricing or `ResourceEntry.estimated_quantity`), carried unchanged; absent when the publisher states none |
+| price of one purchase / `EstimatedTokens` | `fora.Pricing` | `unit_cost` | Comparison metric, computed at compilation. `EstimatedTokens` (`WordCount * 1.32`) is the resource's size, never `estimated_quantity` |
 | `Domain + Path` | `fora.ResourceIdentity` | `canonical_url` | Full URL |
 | `Permissions` | `fora.Restriction` (kind `RESTRICTION_KIND_FUNCTION`, on `LicenseTerm.restrictions`) | `permitted` | From RSL permits (hyphenated tokens, e.g. `ai-input`) |
 | `Prohibitions` | `fora.Restriction` (kind `RESTRICTION_KIND_FUNCTION`, on `LicenseTerm.restrictions`) | `prohibited` | From RSL prohibits (hyphenated tokens, e.g. `ai-train`) |
 
 ## Pricing Attachment
 
-Pricing is attached at compilation time by the Pricer stage (Stage 4), which runs before compilation. The unit_cost (effective cost per unit) is computed during the mapping:
+Pricing is attached at compilation time by the Pricer stage (Stage 4), which runs before compilation. The offer's estimate is the publisher's own, never the pipeline's token count: a metered purchase charges the estimate × rate, or one unit's rate without an estimate, and that charge is final (see [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase)). The unit_cost (effective cost per unit, for comparison only) is computed during the mapping:
 
 ```go
 pricing := &forav1.Pricing{
     Model:    mapPricingModel(entry.PricingModel),
-    Rate:     entry.Rate,
+    Rate:     entry.Rate, // exact decimal string
     Currency: entry.Currency,
 }
-if entry.EstimatedTokens > 0 {
-    quantity := int32(entry.EstimatedTokens)
-    pricing.EstimatedQuantity = &quantity
-    if entry.Rate > 0 {
-        unitCost := entry.Rate / float64(entry.EstimatedTokens)
-        pricing.UnitCost = &unitCost
+if entry.Unit != "" {
+    pricing.Unit = &entry.Unit
+}
+// The estimate is the publisher's, in the price's unit, or none.
+if entry.EstimatedQuantity > 0 {
+    estimate := entry.EstimatedQuantity
+    pricing.EstimatedQuantity = &estimate
+}
+if unitCost, ok := comparisonUnitCost(entry); ok {
+    pricing.UnitCost = &unitCost
+}
+
+// comparisonUnitCost is the price of one purchase over the resource's size in tokens,
+// the comparison unit for text. A price already per token is its own unit_cost.
+func comparisonUnitCost(entry CatalogEntry) (string, bool) {
+    if entry.Unit == "tokens" {
+        return entry.Rate, true
+    }
+    rate, err := helpers.ParseMoney(entry.Rate)
+    if err != nil || entry.EstimatedTokens <= 0 {
+        return "", false
+    }
+    price := rate // a flat price, or one unit of a metered price without an estimate
+    if entry.PricingModel == PricingModelPerUnit && entry.EstimatedQuantity > 0 {
+        price = rate.Mul(decimal.NewFromInt32(entry.EstimatedQuantity))
     }
+    unitCost, err := helpers.FormatMoney(price.DivRound(decimal.NewFromInt(int64(entry.EstimatedTokens)), 12))
+    return unitCost, err == nil
 }
 ```
 
@@ -104,7 +126,7 @@ When a catalog entry has attestations from multiple verifiers (e.g., a provider
 Content integrity signals flow into the `OfferTemplate` from multiple sources:
 
 - **Attestation claims (v1.0)**: Signed claims from providers (Level 1) or third-party vendors (Level 2) provide cryptographically verifiable token counts, content hashes, and metadata. Attestations replace the former `ResourceAttestation` concept with independently verifiable data.
-- **Token estimate accuracy**: Provider-provided tokens (Source 1) are the most accurate. Crawl-derived estimates carry +/-15% uncertainty.
+- **Token estimate accuracy**: Provider-provided tokens (Source 1) are the most accurate. Crawl-derived estimates carry +/-15% uncertainty. The token estimate sizes a resource for `unit_cost` only, so its error moves the comparison metric, never a charge.
 - **Freshness**: `BuiltAt` timestamp on the `CatalogSnapshot` and per-entry `Freshness` timestamps enable staleness detection. Attestation `attested_at` timestamps provide per-entry freshness for verified claims.
 - **Source hashes**: SHA-256 of each input source (rsl.txt, sitemap.xml). If unchanged since last build, the pipeline can skip rebuild.
 
diff --git a/website/src/content/docs/components/content-ingestion/normalization.mdx b/website/src/content/docs/components/content-ingestion/normalization.mdx
index 575a7bbf..3237df36 100644
--- a/website/src/content/docs/components/content-ingestion/normalization.mdx
+++ b/website/src/content/docs/components/content-ingestion/normalization.mdx
@@ -34,13 +34,15 @@ type CatalogEntry struct {
 
     // Content metrics
     WordCount       int
-    EstimatedTokens int
+    EstimatedTokens int // the resource's size in tokens: the unit_cost denominator, never an estimate on the offer
 
     // Pricing (authoritative source: Exchange config DB;
     //          fallback: RSL/sitemap hints)
-    PricingModel    PricingModel
-    Rate            float64
-    Currency        string
+    PricingModel      PricingModel
+    Rate              string // exact decimal, e.g. "0.05"
+    Currency          string
+    Unit              string // the metering unit of a PER_UNIT price
+    EstimatedQuantity int32  // the publisher's own estimate, in Unit; 0 when it states none
 
     // Access control (from RSL permits/prohibits)
     Permissions     []comp.Function
@@ -158,12 +160,11 @@ func (s *HTMLCrawlSource) EnrichEntry(
 
 ## Token Estimation
 
-Token estimation drives the unit_cost (cost per unit of consumption) metric used throughout the offer lifecycle:
+The pipeline estimates each resource's size in tokens. That size is a sizing input for comparison, and nothing more:
 
-- **Exchange uses unit_cost** to construct and rank offers for a given agent request.
-- **Agents/Brokers use unit_cost** to compare offers across providers and Exchanges.
-- **The charged amount** uses the provider's pricing model (e.g., `PER_UNIT` with `unit: "tokens"`, or `FLAT`=$0.05), not unit_cost directly.
-- **unit_cost appears on offers and invoices** as a reference metric, analogous to eCPM on programmatic ad invoices.
+- **It is the denominator of unit_cost.** `unit_cost` is the price of one purchase divided by the size of the resource in the comparison unit, tokens for text (see [unit_cost: Normalized Pricing](/getting-started/how-money-flows/#unit_cost-normalized-pricing)). The Exchange uses it to rank offers for an agent request, and agents and Brokers use it to compare offers across providers and Exchanges. It appears on offers and invoices as a reference metric, analogous to eCPM on programmatic ad invoices.
+- **It is never an offer's `estimated_quantity`.** `Pricing.estimated_quantity` is only what the publisher states — on a term's pricing, or once for the resource on `ResourceEntry.estimated_quantity` — counted in the price's own `unit`, and the Exchange carries it onto the offer unchanged. The pipeline does not invent one, and a price per access has an estimate in accesses, never a token count.
+- **The charged amount follows the offer's pricing, not unit_cost.** A `FLAT` price is charged as stated. A `PER_UNIT` purchase charges the offer's estimate × rate, or one unit's rate when the offer states no estimate, and that charge is final (see [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase)).
 
 ### Estimation Methods (Priority Order)
 
@@ -179,7 +180,7 @@ Token estimation drives the unit_cost (cost per unit of consumption) metric used
 ### The 1.32 Multiplier
 
 ```
-estimated_quantity = word_count * 1.32
+estimated_tokens = word_count * 1.32
 ```
 
 The 1.32 multiplier is derived from empirical analysis of English-language web content across BPE-based tokenizers (GPT-4, Claude). It accounts for subword tokenization splitting longer words into multiple tokens, punctuation and whitespace tokens, and HTML entity remnants after text extraction.
@@ -195,13 +196,13 @@ For non-English content, the multiplier varies:
 
 Tenant config can override the multiplier per domain.
 
-### Acceptable Discrepancy
+### Accuracy of the Estimate
 
-The NFR allows +/-20% between estimated and actual consumption. This is acceptable because:
+The estimate only sizes a resource for comparison, so an error in it moves `unit_cost`, never a charge:
 
 1. unit_cost is a reference metric for offer construction and comparison, not a billing metric.
-2. Billing uses the provider's pricing model (`FLAT`=$0.05, or `PER_UNIT` with a per-unit rate), not the unit_cost value directly.
-3. For `PER_UNIT` pricing with `unit: "tokens"`, the actual token count from the UsageReport is used for billing, not the estimate.
+2. The charge follows the offer's pricing: a `FLAT` price as stated, and a `PER_UNIT` purchase the estimate × rate the offer states, or one unit's rate without an estimate. That charge is final.
+3. A usage report records the quantity consumed and is never refused for its quantity. A disagreement about the quantity consumed is a dispute.
 
 ## Deduplication
 
diff --git a/website/src/content/docs/components/content-ingestion/sources.mdx b/website/src/content/docs/components/content-ingestion/sources.mdx
index 7bcf8762..4a76c77f 100644
--- a/website/src/content/docs/components/content-ingestion/sources.mdx
+++ b/website/src/content/docs/components/content-ingestion/sources.mdx
@@ -27,7 +27,7 @@ type RawEntry struct {
     Tokens        int
     ContentID     string
     PricingModel  PricingModel
-    Rate          float64
+    Rate          string // exact decimal, e.g. "0.05"
     Currency      string
     Permissions   []comp.Function
     Prohibitions  []comp.Function
diff --git a/website/src/content/docs/components/exchange/billing-adapter.mdx b/website/src/content/docs/components/exchange/billing-adapter.mdx
index 40800baf..78a81316 100644
--- a/website/src/content/docs/components/exchange/billing-adapter.mdx
+++ b/website/src/content/docs/components/exchange/billing-adapter.mdx
@@ -246,29 +246,31 @@ The Exchange operator sets tenant-level defaults (e.g., "$0.05 per article for a
 
 `PricingModel` is the charging structure only. The metering basis ("per what") is the open `Pricing.unit` vocabulary (tokens, pages, accesses, records, ...), not a pricing model. Attribution and contribution are `Obligation`s, not pricing models. Subscriptions are expressed via delegation/scopes (offers come back FREE), not a pricing model.
 
-| Pricing Model | Billing Basis | Quantity Estimate Used For |
+| Pricing Model | Billing Basis | Charge |
 |---|---|---|
-| `per_unit` | Price per metering unit; the unit (tokens, pages, accesses, records, minutes, ...) comes from `Pricing.unit` | unit_cost comparison + initial estimate |
-| `flat` | Fixed price per transaction, independent of quantity | unit_cost comparison |
+| `per_unit` | Price per metering unit; the unit (tokens, pages, accesses, records, minutes, ...) comes from `Pricing.unit` | The offer's estimate × rate, or one unit's rate when the offer states no estimate. Final |
+| `flat` | Fixed price per transaction, independent of quantity | The rate. Final |
 | `free` | No charge | Not applicable |
 
+The estimate a metered offer carries (`Pricing.estimated_quantity`) is the publisher's own, stated in the price's `unit` on the term's pricing or once on `ResourceEntry.estimated_quantity`, and the Exchange carries it onto the offer unchanged. It is never computed by the Exchange, and a usage report never changes the charge: it records the quantity consumed, and a disagreement about that quantity is a dispute. See [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase).
+
 ---
 
 ## Unit Cost Normalization
 
-DiscoverResources includes `estimated_quantity` in each offer for unit_cost (cost per unit) comparison by AI agents. The unit of measurement (tokens, pages, minutes, records, etc.) is specified by `Pricing.unit`. This estimate is computed from content metadata, not from actual consumption.
+DiscoverResources includes `unit_cost` in each offer so AI agents and Brokers can compare offers across pricing models: the price of one purchase divided by the resource's size in the comparison unit of its content type (tokens for text, seconds for audio and video, pages for documents, records for data). See [unit_cost: Normalized Pricing](/getting-started/how-money-flows/#unit_cost-normalized-pricing). The size is computed from content metadata. It is a comparison input only: it is not `estimated_quantity`, which is the publisher's estimate in the price's own unit, and it never enters a charge.
 
-### Estimation Formula
+### Size Formula
 
 ```
-estimated_quantity = word_count x 1.32  (for token-based pricing)
+estimated_tokens = word_count x 1.32  (text, sized in tokens)
 ```
 
 The 1.32 multiplier is derived from empirical analysis of English-language content across common tokenizers (BPE-based: GPT-4, Claude). For non-English content, the multiplier may differ; tenant config can override.
 
 ### Data Source
 
-`word_count` comes from RSL content metadata or sitemap `<content:wordcount>` extensions. If unavailable, the Exchange estimates from content length: `word_count ~ content_length_bytes / 5.5`. For non-token metering units (`unit: "pages"`, `"minutes"`, `"records"`), the `estimated_quantity` is derived from content metadata specific to that unit type.
+`word_count` comes from RSL content metadata or sitemap `<content:wordcount>` extensions. If unavailable, the Exchange estimates it from content length: `word_count ~ content_length_bytes / 5.5`. For other comparison units (seconds, pages, records), the size is derived from content metadata specific to that unit type.
 
 ### Subscription Content and Unit Cost
 
diff --git a/website/src/content/docs/components/exchange/configuration.mdx b/website/src/content/docs/components/exchange/configuration.mdx
index c7677b34..b42c8273 100644
--- a/website/src/content/docs/components/exchange/configuration.mdx
+++ b/website/src/content/docs/components/exchange/configuration.mdx
@@ -188,19 +188,21 @@ Resource ingestion is a background pipeline, separate from request handling. It
 
 ### Ingestion Tiers
 
-**Tier 1 (best): Provider provides token estimates**
+The tiers size each resource in tokens for `unit_cost`, the comparison metric. That size is never an offer's `estimated_quantity`: an offer carries only the estimate the publisher states, in the price's own unit, and a metered purchase charges that estimate × rate, or one unit's rate without one (see [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase)).
+
+**Tier 1 (best): Provider provides token counts**
 - Via RSL word count extension, sitemap XML extension, or CoMP Package.scope.text.wordcount
 - Exchange uses directly, no crawling needed
 
-**Tier 2 (good): Exchange crawls and estimates**
+**Tier 2 (good): Exchange crawls and sizes**
 - Crawl URLs from sitemap.xml
 - Extract main text using readability algorithm (Mozilla Readability.js equivalent in Go)
-- Count words -> estimate tokens (wordcount x 1.32)
+- Count words -> size in tokens (wordcount x 1.32)
 - Store in catalog, refresh periodically (daily or on provider webhook)
 
 **Tier 3 (fallback): Tenant-level defaults**
 - Provider sets average word count per content type via tenant management API
-- "My articles average 2000 words" -> estimated_quantity = 2640
+- "My articles average 2000 words" -> a size of 2640 tokens
 - Crude but functional for unit_cost comparison
 
 ### Ingestion Flow
diff --git a/website/src/content/docs/components/exchange/storage-model.mdx b/website/src/content/docs/components/exchange/storage-model.mdx
index 00113e16..272b4941 100644
--- a/website/src/content/docs/components/exchange/storage-model.mdx
+++ b/website/src/content/docs/components/exchange/storage-model.mdx
@@ -261,7 +261,7 @@ These metrics are INDEPENDENT:
 - An agent could have **80% compliance rate** but be accurate when it does report (low compliance, high accuracy)
 - Enforcement gates on **compliance rate** (blocking transactions for non-reporting). Token accuracy is tracked for analytics and potential contract-level enforcement, but does not trigger protocol-level blocking.
 
-Cumulative benchmarking (same content, different agents, compare reported token counts) is an Exchange implementation concern, not a protocol requirement. The protocol accepts that token accuracy is a known limitation — agents self-report, and the Exchange's token estimate is itself approximate (word_count x 1.32).
+Cumulative benchmarking (same content, different agents, compare reported token counts) is an Exchange implementation concern, not a protocol requirement. The protocol accepts that token accuracy is a known limitation: agents self-report, and the Exchange's own token count for a resource (word_count x 1.32) is approximate. Neither changes a charge — a metered purchase is charged at the publisher's estimate × rate, or one unit's rate without one, and that charge is final.
 
 ### Provider Audit Access
 
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index f03803f4..05670462 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -36,14 +36,19 @@ That's the whole protocol. Three RPCs. Your billing adapter plugs in where `Auth
 
 A media exchange meters in tokens. A legal exchange meters in pages. A medical exchange meters in studies. A geospatial exchange meters in sq_km. Same protocol, different units.
 
-FORA pricing uses three fields: `unit_cost` (price per unit), `unit` (what's being metered), and `estimated_quantity` (how much the agent will consume). No assumption about what's being metered:
+FORA pricing states what is metered and at what price, with no assumption about the unit:
+
+- `unit`: what is metered.
+- `rate`: the price of one `unit`.
+- `estimated_quantity`: optional, the publisher's own estimate, in `unit`. A metered purchase charges the estimate × `rate`, or one unit's `rate` when the offer states no estimate, and that charge is final (see [Charging a metered purchase](/protocol/transaction-flow/#charging-a-metered-purchase)).
+- `unit_cost`: the comparison metric, the price of one purchase divided by the resource's size in the comparison unit of its content type. It never enters the charge.
 
 ```
-Exchange Type       Metering Unit       Example unit_cost
+Exchange Type       Metering Unit       Example rate
 ──────────────────────────────────────────────────────────────
 Media                  tokens              $0.00003/token
 Legal                  pages               $0.50/page
-Academic               tokens              $0.05/article (flat)
+Academic               accesses            $0.05/access
 Medical imaging        studies             $2.00/study
 Credit/financial       records             $5.00/record
 Geospatial             sq_km               $0.10/sq_km
@@ -51,7 +56,7 @@ Streaming (audio)      minutes             $0.02/minute
 Pharma                 interaction_pairs   $0.001/pair
 ```
 
-Usage reporting follows the same pattern: `consumed_quantity` + `consumed_unit`. Your Exchange MUST support these fields on all offers and MUST NOT assume tokens as the default unit.
+Usage reporting follows the same pattern: `consumed_quantity` + `consumed_unit`, which matches the offer's `unit`. A report records the quantity consumed and is never refused for it. Your Exchange MUST support these fields on all offers and MUST NOT assume an offer is metered in tokens; only a usage report that omits `consumed_unit` is read as tokens.
 
 ## Extension Profiles
 
diff --git a/website/src/content/docs/protocol/jsonl-ingestion.mdx b/website/src/content/docs/protocol/jsonl-ingestion.mdx
index 14c5eaea..20ddafc6 100644
--- a/website/src/content/docs/protocol/jsonl-ingestion.mdx
+++ b/website/src/content/docs/protocol/jsonl-ingestion.mdx
@@ -29,8 +29,8 @@ Every length bound below is in **characters — Unicode code points, not bytes**
 | `path` | string | yes | `ResourceEntry.path` | URL path of the resource: starts with `/`, no `?` or `#`, no whitespace or control character, 1–2048 characters |
 | `title` | string | no | `ResourceEntry.title` | human label (≤ 512 characters) |
 | `content_id` | string | no | `ResourceEntry.content_id` | publisher's stable id; keys the resource id so a re-push upserts in place (≤ 255 characters) |
-| `word_count` | int | no | `ResourceEntry.word_count` | content metric; informs token estimation (≥ 0) |
-| `estimated_quantity` | int | no | `ResourceEntry.estimated_quantity` | pre-computed metering quantity (e.g. `word_count × 1.32`; ≥ 0) |
+| `word_count` | int | no | `ResourceEntry.word_count` | content metric; sizes the resource for `unit_cost` comparison, never a charge (≥ 0) |
+| `estimated_quantity` | int | no | `ResourceEntry.estimated_quantity` | your estimate of the quantity a purchase consumes, in the metered price's own `unit`, carried onto the offer's pricing. A metered purchase charges estimate × rate, or one unit's rate when you state none, so state it only in that unit: a price per access has an estimate in accesses, never a token count (≥ 0) |
 | `content_hash` | string | no | `ResourceEntry.content_hash` | integrity pin of the content bytes (≤ 255 characters; bare hex or `method:hexdigest`, not format-checked) |
 | `hash_method` | string | no | `ResourceEntry.hash_method` | algorithm for `content_hash` (e.g. `sha256`; ≤ 64 characters) |
 | `source` | string | no | `ResourceEntry.source` (`IngestionSource`) | provenance of the metadata (`INGESTION_SOURCE_CMS_API`, …) |
@@ -97,7 +97,7 @@ A publisher MAY place domain-profile data (e.g. [CoMP](/protocol/ext-comp/)) und
 
 ```json
 {"domain":"example.com","path":"/articles/42","title":"…","content_id":"22392",
- "word_count":359,"estimated_quantity":474,"content_hash":"sha256:…","hash_method":"sha256",
+ "word_count":359,"content_hash":"sha256:…","hash_method":"sha256",
  "source":"INGESTION_SOURCE_CMS_API","provenance_source":"example.com",
  "provenance_timestamp":"2026-06-18T09:23:45Z",
  "resource_mutability":"RESOURCE_MUTABILITY_STATIC",
@@ -108,4 +108,4 @@ A publisher MAY place domain-profile data (e.g. [CoMP](/protocol/ext-comp/)) und
  ]}
 ```
 
-One resource, one priced term: an AI-input license at $0.05/access with an attribution obligation, plus content-integrity and mutability metadata that surface on the discovered Offer.
+One resource, one priced term: an AI-input license at $0.05/access with an attribution obligation, plus content-integrity and mutability metadata that surface on the discovered Offer. The entry states no estimate, so a purchase charges one access, $0.05; `word_count` only sizes the resource for `unit_cost` comparison.
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index d54a53e9..0753c963 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -336,7 +336,12 @@ Docs: the transaction-flow page gains "Charging a metered purchase", and its lis
 report checks drops the ±20% quantity tolerance that refused honest reports, as do the
 Exchange storage model and the scenario walkthrough. The licensing-terms page gains
 "Metered pricing: rate, unit and estimate", and the money-flow page, the reference page
-and the walkthroughs describe the charge.
+and the walkthroughs describe the charge. The content-ingestion pages, the billing
+adapter, the Exchange configuration and storage pages, the operator guide, the JSONL
+ingestion page and the threat model now describe the pipeline's token count as the size
+`unit_cost` compares by, never an offer's estimate: an offer carries only the estimate the
+publisher states, in the price's own unit, and a usage report never changes the charge.
+The JSONL worked example no longer pairs a per-access price with a token-count estimate.
 
 **An acceptance names its requester: `Requester.id` and `Requester.domain` are required
 (validation rules added; no wire change).** An agent's offer acceptance signs canonical
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 9df410c1..07385486 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -65,7 +65,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T10: Usage underreporting (token count)
 **Attack**: Agent reports using 500 tokens of a 10,000-token document but ingested the entire thing.
-**Countermeasure (protocol)**: **Never a refused report; monitoring is the operator's.** The reported quantity is unrestricted: an Exchange never refuses a usage report because its quantity differs from the estimate, in either direction. Monitoring discrepancies is the Exchange operator's own business, not part of the protocol: an operator may reconcile a quantity far below the document's known size against CDN logs (bytes served for the signed URL) and the size the attestations state, and pursue it through the account relationship or a dispute. A publisher that must be paid for the whole document prices it per access or flat, not per token, so the charge does not depend on the reported count.
+**Countermeasure (protocol)**: **Never a refused report; monitoring is the operator's.** The reported quantity is unrestricted: an Exchange never refuses a usage report because its quantity differs from the estimate, in either direction. Monitoring discrepancies is the Exchange operator's own business, not part of the protocol: an operator may reconcile a quantity far below the document's known size against CDN logs (bytes served for the signed URL) and the size the attestations state, and pursue it through the account relationship or a dispute. The charge never depends on the reported count, in any pricing model: a metered purchase is charged at the estimate × rate the offer states (or one unit's rate without an estimate) when it is bought, and that charge is final. A publisher that wants the whole document paid for states an estimate that covers it, or prices it per access or flat.
 
 ### T11: Function misreporting (RAG vs training)
 **Attack**: Agent declares `function: ai-input` (cheaper) but uses content for `function: ai-train` (prohibited or more expensive).
@@ -320,5 +320,5 @@ The last row is the deliberate one — nobody but the operator can point that UR
 | sellers.json | 2019 | Exchange identity in ResourceResponse | In proto |
 | SupplyChain Object | 2019 | exchange_signature on Offer | In proto |
 | ads.cert | 2020 | exchange_signature + content_integrity_hash | In proto |
-| MRC Viewability Standard | 2014 | Minimum billable token count | Design principle |
+| MRC Viewability Standard | 2014 | A metered charge fixed at purchase (estimate × rate), never re-measured | Design principle |
 | Open Measurement SDK | 2018 | Three-sided reconciliation | In protocol flow |

From e1c4b9a39b4c0ddbe512653291426780c62bd263 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 13:52:24 +0200
Subject: [PATCH 140/164] State that the hop cap counts every signature and
 that max_hops is carried but enforced by no party, in the protocol
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The file header and ResourceQuery said an Exchange enforces both
RequestConstraints.max_hops and WellKnownManifest.max_intermediary_hops by
counting signatures, and max_hops said a Broker must not forward a request past
it. max_hops rides only on DiscoveryRequest, which ends at the Broker, and a
Broker originates its own queries, so no Exchange ever receives it and no party
enforces it. Its comment now says so and keeps the field for multi-hop Broker
discovery, an open question; it is not deprecated.

The header and ResourceQuery now say the Exchange counts signatures against
max_intermediary_hops before verifying any. That field drops the
"Agent → Broker → … → Exchange" chain framing: a request signed only by the
party that sent it carries one signature, so the cap bounds a request a party
forwarded unchanged and signed again.

The hop-cap changelog entry is relabelled from "comments only": the meaning of
a released field changed, which Go deployments configured with the old "+1"
must follow. Comments only on the wire; gen/ and the descriptor are
regenerated, and the corpus is unchanged.
---
 gen/descriptor.binpb                          | Bin 682651 -> 682956 bytes
 gen/go/fora/v1/fora.pb.go                     |  28 +++++----
 .../fora.v1.DiscoveryRequest.schema.json      |   2 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   2 +-
 .../fora.v1.RequestConstraints.schema.json    |   2 +-
 ...a.v1.RequestConstraints.schema.strict.json |   2 +-
 .../fora.v1.WellKnownManifest.schema.json     |   2 +-
 ...ra.v1.WellKnownManifest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   4 +-
 gen/ts/wire/schemas.ts                        |   6 +-
 proto/CHANGELOG.md                            |   9 ++-
 proto/fora/v1/fora.proto                      |  53 ++++++++++--------
 .../src/content/docs/reference/changelog.mdx  |   9 ++-
 13 files changed, 68 insertions(+), 53 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 54c51af96f43b00e67c618a44e4f3c3d1a5b04fa..64a515094cace8811834ed5f133a4e05dbb7c349 100644
GIT binary patch
delta 47568
zcmaI9cbrs3);>Oc`}R%KGu_i+rqgsH2*S*eG0Y$c2Fz)7)m>RcR8|ESFum`)JBX4q
z0wp3zL5YH-1`$Cr0un?82LzN1DnUU(<oleex?I-J@ALbw&$;J3bt;`Yb*k>|abMQo
z^mYASue)AXUU$E)F7OPzUs*mkH~4-}%L&%!XNoL6;ECp)%xym9x#$U;o9VI?Eia(;
zb?0q%yPCY&h-Lbjcjp@X>Y3rIC{MTPn!f4fPEU92`c&t1r*1EF?b##U^Xbl3x<{9%
zx_0dOLif%+(jA}b*rjWap6M<<$F$Qztgwq#Qr!8;ZrwYBW2Im0+`Y?_T}Z6!D=c%s
z2(h1@)~rXncX<N5Ze7#uy7cJO4MMNn*ZE&BbOubfuFt;G5YkUr>8{<<&v)$J^Obbx
zuE6UAg)S(jD=g^JgMfQ<0YJSToja!=@7D9_G>Uoli5~THHyWDnCVyYIQDW_NTdJ0)
z<OS4WxsG>g`(5S3+**lMV0nnEfbEXdu}L?PjaplKJY2~YP{-$<zgyd@l#O?55h>+@
z(s*~YflWebyt_qvt0ULJ!^!Ob?$bJzPj+iXQbr-JJ5XwqP?_wmcfB=K<2oSc<_hlD
z{O<C(PC0HU&2>kwl1grpayMyXZFF%ZHJ~nJw?C+DE??-@Qc_5T&O&$kTAPH<LU+3k
z))1lN38+ih%@1kA%9l7g9_TD_r&~!K4|JBe+jq1^h(^!?>gt^Pui6_*`D(XTD5W$g
zt#<p8HVLKG?)ukSBSmxT0d-Su^&{FSSF=rStyoIwP}<}!DYr=|ZE|0GuQgq@6cr<I
zr#tVU+ZC%(nEwf_IQP!qv;xJq(`}SmPg<(VJF$j+@|gB?;~KZZ+m@K<r5bmDmq8>z
zYuwS8^$w~G+7;0Dx|IX$p$^*QYW%XOaN?sa_PX<J6c<qTx&yqA=_ye5y5kAUCxi_`
zDLvqJTSb;h&y9X&0JYiYRvTGCE8k|Rg<$S?tJnQE6KLPL)$6nW%|*+8?^f@!&R_zn
zu=9jFZy_7|5AAf(3AYipCQ$`kG;)7(vpHMLao2!=)jzovgI5A1tp3SudTkQr{N(oe
ztyj1v9-eV4vDh>0(_Kb;w)k<atPG5NDNR*A<MxJa63S=Xk*L*>E2AD~S)h|v-r=m>
zXf8!T@n`Ku0||t)cGH6d!dYs1YGIHDk@4GjlMyMJ?5sP{-kPoOLZI+_Zek~`!d3OV
zQ;Hi6^Se7gEpgl^<#%`H8k-~~_w|+53X@}C9*ki5owa3+e$~^q3+ea*d{oz-T{?B_
zNge{uqEpB2-Me&tLO74k>02Lo;2xHGQcE<k$el?q)AQ+$J<~lpcYOlRD&1YWBXV@y
z@4VCnE~ZP*9_*PXwV2CdeV)`B6_B4IX1d!;T`jiqNv*Yt;;fwZly<8t={U?Q{H0|(
zOy+8*1-ZK{vEAi=dCP_tyYp$SgjHPB!|Z>a=7m1{jFB$og<kfnoymDR_^eqMZAH}x
zRStERqM|)VsQI;I17fIwtliKi(VipJibmE<%y)Dfx_DBq@jtcMO6y4uhKJayoGuUo
z#w0aRTVjyUn514+&l)HCRSRhEsmjb;@;TUCji2^_)u8vDYKmFsQZ(qjr-q98Gy{og
z_MTcYQ*~Pb%YZE!#!O*AdtX&&s2(|vI1hT$P%Vg=wwM<1Ojot#E-S^W0T1+ns$^qD
zX_o7%#mhm6$?Z~f81aD`O-SQ)fPJ8*GS(kr!eQ7hc(0r0YPG<rzJcm5aH?+rVSyUp
z-Vfy)Kv<w=YFTe8n8`{&`&iBUF4yXLt;ALIv1&xbR90vzFIV|gt^@(d<#x+}1mtp6
zPGyjQT&`j&e@RBsOw(4Y$_7=9t#-XJsVd4I?5-`U21~Ro1faj#Zds7fU#*71yk$Y6
zWml`k8)VB8gSYG&Rb4MzR`Q^?)^1tJLd&k>EnCG+At$aXiC9IN4eFs?TLnTmRYg%S
z(l)92e%`VmVbdnHh_AM&1NnzdYAkLI7Igx-mAQIqL#wtr5H$I>s`<hzK?M+7)#9u~
zq(yM6TBojcmIj)lVDj(GZR)AL?5f=9V9<cyspgCRh7d4zs!=iiK>}l^TK6hGP`FF0
zVIN|MG{bKw*4P6DBou4xfdUeWHJ1kpuk8LY-L&)V@DqmYcMQ<bxBKnkf~UaQZx0uc
zz}Zj3WidH^cR)L==JjO-FKap9Vbus&e?isUG+2(ZFJ9IjDm!ZTGMGR*YL60-KsrjJ
z<X*0VhbP!WuW0vIov>|jD=yUOgxx0~NyzRKkU%&=ebP_m5a`@ra))2hOr`1<2ZQ?c
z7d2mab~o?WU(`5{fM6;0>o00~h4qHO0C_1__J3Mfsk-D~P{&?U^LY#eCF<BqYEpP1
zkfcOjXcl#>n>w~nuKGV(xvNzlj~rj%0;7-TvK`d1eLQg<Pmm5U`gj^Qu?C@CJ%}d;
zdh$lI<JH>0&_ItTMD6O~LBt@BQY(84yKA@}8`IusQd<NO;PMGgGH8ZDo=nzyfUBUG
zA?&wa+JmVf9wkmg5i%484)G*Y))b6p&>)AiuCHqEC5L;Is1)K{PomUn&t+iXNY<pc
zc6)N9N6APTit|Q#YS*!z;xefDC^oLQ)+Ig4F^J;2QDo33Zd47<V1g%aeXjOv+A^1K
zg2z+B>&9b+iR|R-+C#~S9)-^t517!M=)s)10r)POlapEJK3bd9WRJolUt&ULvZr2s
z9w>qaIfbq1qYX<<@hEk<p<oi%Q~zq~4EhK{sLhOAkG|RquH+1l!bbyfAvME;(eM}-
zLUm>_t-tn<<SdWEdkQjComtdV7`GrXTRvc~_t)-Eec+fxVd)2C(lD$`5JJ~4$(`-5
zjZj)G@hJ7BO%#VN@iZ*6N!YZ+Q{KiZv^3J8QMSZW(c1c&Iti{npnk&E4AOR`KJh4x
zr4ogupLm)zxB6oILI?}My4<qCnxUlEIkh(+wT^24Da~3npl$Z#?P3RqYAbx3JqXv(
zy6{MtwOiPNVOpEAEgnUu0*DDKws?#Jn}m^DJpLl<TCReJ+gWzFc754)M}?;8c8?(z
zN|jI3?H;)E&Rhkie8~n5*Pbf-QVvLRhEVy^lMrh%NR;xW2W#>@Tm{rlmK>qo*J`Id
zpHzkB<W7%_3_t>5r>FMS(oUL_J3VFP)+!A(_5`$Jp1ePDAB@m$bo-8Z5S2FtvWKdC
zf?XP=H7`5ik;@U7fI8tZg$o7=s1qK<)6KXF9{$8Sj@DX~{bX0!!#&ea9wW$02MLv*
zJjEqe6Rv_PpJuB^Yt70|J1SJ=(;m1?YG)6x@@Y@F*lNU80PqW|Ge&Dt_KTxJb^OJH
zjiFGXI{xB;{}YB`wEoIoAEULX`qgeF5BEC1dh$iXf&{{^o;t$ofCR#?G?qW0Rn0?#
z`64?vMw{E}q60zU(?yRApCAJWY`w*v1tcIYdJs5I!0d*P!*t1eH+PU}<6U+7Ykb_e
zRZS0Q!!+d$O|>SwEgf_}(+wv_yxjX^wMnk_!!@;*<wxWso}tM`XzE|D;Gmq5n%WF?
z7kHC2WeV_Scx*g)7UJcGkJF|r%_nPWeMg&o#5<bW8F82_0bS&IS5x10StH47Ycv#Q
z<hoAKLawqInj8z@qP8<M8T5gK6*Dx9<(s$;9?oWSCTh1-&DNx&*ZA&iwkF#PBnfE&
z(P<!oFk3^XEwwlV3|pORI!UYYl&#hjlXtDg=fi3Z)>2P{gwkp%wu0+`TF1su)f$(r
z(-aY~XnX>!(~88-10)G)wQ5^!xC#cxXY9gMt!?FJj-|9DeWvA$P*CH8<1;N)PZmmp
z<1?*6Lq1hB8XKG0|GcL)uiES&P|&eilfw%#sOx5}PK89Ev9Vce($tzx!%HJKxSgGN
zPn&tub_YTuu9nZ2CXxZfc1?N$kbu~(!4u4;9g_wps2$Lhqna9f+hngEG!tz6Yo@Vi
zn)aGnjRzv4gcwi`INe5J@&Rf;+7ja_BFY0=@lj30>crp?<v~q7qKQ~t@}PGJ2J%>4
zvJg=o)+koro#Yn5<IdKVlGx^)GFyAtR}R9qf<o=tx+$hOj04(i9aDU}Xbv-=&SL{U
z)^?Q7b97AT%+pN~;A22QXP%A#pYKl4Y5{d|ZqPEV)YW#eetF1Q=$ys+<soMQW3e9K
zi!`ch0b{XVyRP-VC^tW#F4L8|u{T|8?{8W$b1m0~RDmNRVNJ;g+A;?%A85<;fIYDC
zfwoMqRmWOt@cMfL>bBg*<yw_mwavlsqF1-+mxq=Y7~Axeh`Kbz3yf`gc_V8%MO~Uw
z5KzC(-LzV3qf~wCU=#r3TmACjDgef}`sKk@0E}<-Ce5tVqE?0IVzz3n_H)$%2ci%V
z2Xwg|*OWp)9MCgO<@hWF!~wm<HP#=<Wx)(zKs}fHd7akF-TIt^;RD7wJ>Tv{A2818
zL3_OVfN@SwrmX=59K#>b#u&=j+=7kpgw^<Ix2hj7V~l*^H!*DiGsY;f``HheF$Vfs
zj8H#D=olkA)(}Y>h*JgvD$GzT_-0bF;6C0Y7Hu3gr6{1jZSalbO)vNC+_eWA{G#S-
z4nE4p1F@ok1kl@t+(d#z*>6+Xd=rVN1isQ>u5Q|I?I=Vc>T)dt7#r^xmq!|z^o}7n
zlMn{dI|g<KV@xatn5)Z-ys5d$9olHszs$g9auoHIPQG>}+rLvAQ@PTH1{2ULZD^2y
zUTFk)c92v6z0%0mvTo%Fc({hm-=*DFwZ=i9yx1BCfjsXTBOtb8I`_P53?zwO7e=6J
z8`yQ<XniX;I1uFKHaHNpNN+F#qO*1Ghc_6An{VMpz@$y=_iwcJRht|HHxM>C2()Hz
zGURfpbGN+7z;gL6B12RQt-CwdyGEO;RPJ^#5U{Ab9SmBvciXKD9hAG<KtTOGhk)!p
z*6CZVd(}P%ffnt34gxvmeTGQlqEvFs`;2tP>aTMM43E>fz+P>jyVGey3GwNnb60%Y
z2#fUqB$Q4YSPy7T0tv@=+9(rCG?D#GKXJ+*g15A|060jEg7?5*tU;o_2x5EZE`6sB
zQL1{Ia#ZPx4r_axa#VqYwY|;DT~FS-w~4M_iUciyQSjj0hJ)BYR1J183{+yUDL3B`
z0>)soSolDYz!+>|qq0$8!1s>Htval2c2$jWFihAn#<7EZ@fcH%Zk_w$F(yVgP94Y&
z_~LPF^HFVf)i?)&T=6&uf?V-9Gr;#MqyjU>nf0#b^Ho>ii6>wgdr^xu2Z0JqFy$l#
z3C#(noTMP3Il;6isjk57PBHl;WtWa?TH7g(30{~m#W8_=?-ZvN<a?)3E&3E<j>6BZ
zG4sxtuGrZEHhGgC%Khzxc3dl7V;XVmBZ`a+nynj6r8qWIVU0SQvD`~%w1lf1EV0f(
z03~cRWsn3CC2TaY+9K8?eLVdl_vz2tyRPyt93`5aUzlbgA5IX0(idh?z#31DYtVk}
zYc}$%HnIF`Q|w!b37xOa1V2_F5;|X-S2qwz8H30g*5RBsw7kYChbCZ+DU(x>At4iK
zhtV|j4Vr+*a`9g^<}N>GH$J#fI%Y<N^8pE^V>ANSiyEPUPv`bs&^~ijoOVj0Np{+l
z%e}!T*=ZBY{e%+idy!e2W#!Gy?YgLq&kxMPFrj2M;(oO5Y)h%lI^Jp3X&`cGp!vE$
zPtgvuEtE`s0UAYo0O>6HVs^gXG?#DbZdVE{v9*T)6h0t@)i4zbAm`-D^7XZ@^c+j!
z6(TONNop~UFW?QdrB>eWxnP0bQt>afkZ<?|z2M=AoR8TfK7B>@V@qZjz=ZP07W~f}
zLI{EP3QO6~D*gJ%YWxzWAU^}S6&AcD)-+(Dhas2VZ@DQh=ZqbF(XgLdYExR$IA=Rf
z^5Ez#HGL%uwO(ame{h8quvc4Zohw<uT2uWe9=dn!pIGR;b$<fG%v*1%*(<@|s5V$?
z<11P4JD>f@Fu0M8mU@*VRoxdcrMk&d>p8r>Zp`z|mRk2p7Uu8ge=-bF(3U?*A*k8<
zU-*692vWBF$$a?T?Uq`b;H&LcL@4lurDm=y66^YoKj8<l&;AowD4>4zr?v=Vn*FIp
z#n@h73I8SUw{NU!?9l990uLQmW2x6($wJ5NwnPxaZG{v%ZjYs2f29=q?b|DxA5!SI
zy?;_fzwNV7;#4sZF~`({mU4{U8Pum#<CmC4$nv4kgH|dnM<N`BcF@WkyF3yVHy??I
z2uoP6xW!03Y^ljBS*XwvOHEzL0`^fF7R~vL0rU@+@|&fy=R<mvYW%j1pybjIjuEIe
zBs0HVHo`58_|a0!CA?c2@sl$II15IcbjA*60sGXSq|mCTF&!FQ35I4p<MbrgM6>>U
zWs#yM&su7W%Zj2S&sl2Kl`ItbtEJvxwdM5&@&!vN%{EWBeW6FsZqKDVzTBn9^=wjD
zZ<@jb9(tm`DSLLoLNeuE_#GsoE?Ief*y*r-PvDZ}@pG5R6H&eLl@xc0wM7aFG|%9A
zKmwvyereK5qhO?$0_v-5e6gNQzM8M_SdW;Hd6i@k7lQ=Vo9!vqGs)ihBD^6caY-h_
zWzbx&u|$bpEBRW!!lQJ^P@la<GG$x_m3*E3y+p4_z3$*pm0l;AcBm3EP5txphO?O^
zdfPz%d{2;9i6@!{<SSQ+Dv1;mXr55^fCR*Ve55(=Kru)k1=NA8eMG-2Ina@zDh(u=
zd$<g!L2O|}zb`o`UwUTY?FW$z`W-l^(qL96s=t~X?BGz929r!HE`ur!VXLEh>*SDp
znRZ292r@%RrUjS55E;s{G5wn4(0tjGNc=!%D9PN&WiS<ov6o|dyVS6Jg(o{;0Bs+J
zkqk8razk(A=Z$4GF*MB^`JQ6lG(7P#Dqm?Rnnq+?K=bXU2P7ay<ztPnjbe~K38<sl
zD{;MUa&*32XuyQbXp*5Rh-?X>HnuFTw@i-7S9s=&n8YQS>$wb?hOt0GuSzm>3&kLi
zp{8LZQ^{q}G;gx!5_+rDn|9M6NdlQSN#?JJp3H#uc7EP=_E|!IsLtE@h7Uk))x^eU
zQob@JU$u_8kexDRwu^Y|=2HD=v&s4D)jT;R9s%;5e0WJpe+drEdzU!BQq*ixj4(gf
zDXE`Vs^;g*s2N=J%lv#9HG@Rk%+HtG9gx77pO5X%VK_%%;OS!aRz^Qsx!8fA9n)e5
zf?~48`2n#3fC?ZM=a)qIp39^bT*{Vb_1h|!Ita93TIwKBF-!C1b_XgzSelRR&V$?r
zP@k}yYUzJ%{fUF%2Er%#`P6nE*hy=~C;5JU3PB|4<l_`#ImK%x;x%nczOpU1r<VSS
z`*Hjf`)fP^%ofKGir}{72gLpwPXV(fU#tLxg1C1}er8*~*k2O^86b?|t@-M6)*&DI
z)(U99<mWBQUA#&^sMq-=pC@<SDlQ;t1H8%*uWC&-(YcoFT;k>QM*0-B*+4G>8tO~&
z49zyktKM`42eu6Ms;#Z*ly<PFci+nGZKgMHSHI<zcSFEM1>W+?mIMi<x4iO#0!RcS
zZ+YX72vm@K_w|-H@i4h)0woTLe#?99?R-NfS+pU0%lqI%)*uS*E%cW*$*WBDs<HE~
zbZ)>ky6UP1L$oR$qg5w)<ro7Aqb7Ofei$T-n&cG`9$}$XCwbFTy`oi#A?{5~_R6a!
zlEtr@yyKNuO)fKm_O4gGz81e~a+!->nc~G&6FMifFbK72US&3`xK6+4KK!x`rExgT
zF_gyPG_UM_XaRbfS9U*07&^_HnSI$%`+~=Gw(UASblnWcH2y@TOwml3CM}apST>6+
z<NH#J%2=37U9T^5RV?%>8XwQ#!jgqvT?}uKB;^eRDLz-!{DAhUH}6O;ze-=_3V!NE
zzWjR{=lK{E+817BZ*G4p{X2Ixeu~W&9sutPuPN|A0`CjLqr?$N)a(myXfJ9;Baj$h
zP>{XDt2X2#gE-rGu=b@_gwI?EEZ~0S6+yPm!ua{xivXya#+1|q*iNqqHf<Ih<t{Hg
z+7(jhjc>dnh_|KCS~UcAg%pD9-CniyG7EDM@O!Sbl~2ne^;@s{i1j9UvV7{=@7eaY
z`dfE@@0I6NU=o+wkGu#-;C%1JIh7<aUB34Qct}G}F)qnpeD4i5x9Da-J~_9;Y-v0F
zh9?et6&r<$I_xbJ{tz+%J?w=)6rhxdIP8tKlPyhy0+IM(Z>%k!aF8bsO}N9})@`hQ
z)ZyNMcFLPKF!$I^dS6%VQ(k`l<5s=!DrdaPIe3+O;8eWQsSt}9x9E2_``N3u<mHG*
zu=W?PdOsS@kit05IO|pCxU8#C9WVKm^K8&9di}@Gd*u-Un5fQqZ;?odfkbuAd$B@L
zbwHvz=e;rEsEFj%Iq!|P<JFNIs?K?Dn;WfiUJej1vf^9yMx8Et6><FK<$ZC{8xmPF
zkSOOOc?nStyadSf?V>uoFVJiky_wr&In+D6*)Do-xz(CMTW&A)PoLcMTlHD4%02~h
z)`N>d)u%w_W<kQ7J_SLMss@RI`xM{|1mO@MKn-9cZqr|FHNZij)n`C~ba0RX!hiyK
zmkuQ96d+uEy9k|E5YXlp<gwg6x9j7KI&%x;l2Cxon_r;h3RG(%t@j18_lU>*59kwa
zTTq}j;nfw7P?v=T>Ycpz1P8shs6g%SLKC^6AJ8@yC|iKn+p_WCr-_&Q^#R@GX}+ld
zJ1CmqT%F>d%?0qLG#ms6fS(treO%TSnllA79(J(uNAzu#JM6lHiPqa;w;o8;eMdo1
z+>`)`y6-4JTuaA`1=O@(v+Ez#TeSWfHye3hf=S#0xmbgQ%GU*0tf{9#qNl$uNVXT2
z+CBX>`|wdc=>NLlrkkxd=n$-cI`>3w$D?}K)8T|;9(C@C0+}&~5Xw4HP$I6vfJ9j*
z3UC!hltq*AL_xj3a9@I_7()SqEvWy1^#?6=1*C8$cWXzzm+P@JPAPPbe5OF&`+*Qj
zIa46-{eUE;0vy+gQrsxzOhH223&c}d%9(=F_SWBdA@GIgSlv!~hYshQGU%Y~T!G9@
z7VzxSxdNG+1c@@v6(Bb$%0O%avhD-2CKQ=aP0kfub-y)=B8CE5>-yvlbkd96RecKO
zWB?bX^eL2+0VHbDr|@!jQqH$eA-eNhiYW`Iao@<bd`jP^JobizLAQV2D3sFyLcn;V
zP)-Msz<8q&(?M8DDd0B>OK+E!QVN(XeWNgW8@~utKzA0#uowQRKh$cBQwC*w$2etB
zws%aST&kghGR72Qsh&b7_qahftuXJ?ob`-e%k7(1h!FcfFu#xn^h{RSRqs_kvrw*$
zU;=7pq0IGx1k}tz<ofu+QAh)5E<4s$f2(Y+qeDY@ZlNiB7i6F_w-877*aM&#RA)Z>
zu$$hha=u*wFj0Z|g>uM%1j78nB5|?<5(x7P5vkD?gF>PfvIfuV%_|o=2;_AZItV;Q
zD3pT^Dx_10LD!liU`Q=yZ$Gc!Shd(epyg|^gFxZ#;=&@~%M1CCT3m>UxRZu{AsM_P
z7yp<3h^y5K2ZIg?R@fZ@Az-X1lo2OLSh0fY@fIEC_yXFl!n~Qe`Q7!gYMouw5#+0U
z@Kt*YmG28xx>=)x7AO0}%l+#my}PS=Um=oV<g3IpwCMgqBo`bG%K5HPee5#cfkNd7
z@Nm~(sKE6})@2>)w1b6+FB}eV4;3Opb2z{~T&Q}ht@>yKAB~vftm`X!gHFc_6_IuZ
z6F|ocePV?N37zAGa)k$p0e-wtuJA<iCGmKnT;U~$mc-+QSm9r##`e*0IGOwX6(nXK
zKWUFMaEV=LiqHZiN;+960~C-b>11Kx-+U?&DYhdg3xoGv$>K^6{2y&%Q4p$phIRa3
zy{i0-Qw|k>rcfs1Ap?~&g-FJ~EsVp$@LO)v|LRFs^>6k_@F_GNf3rsdNMQU{D8qb^
z!1%2Y3wR;iI!FT;g=ySWqfm}$VeD^(nSWpjzs#bd3LhWnviea->!VcrAfHk%_N$h@
zsYlN)xi0_K|KqL%OT_RHfE9y$a$bRi6@z?5!r_C26@z?m__UYw(U2a>YQ2iR<WL8J
zM)XhzfkyODUy(S$f(j6Z`f!3ZmX4i$aDm!bA8w2+eN~Sr)%a-}LSAsJPkKSf0cNaE
zP7IKM8SBHuppY9RLhiA?_!OTAxrxC;?zen0<R*>?xySiL>X2)Rkb9gj+lseiwG>0A
zj`OvCM7Ay0M0s!fWSA_a(3WrevOHyKgTdyveXSq8QV~9W{GW=1M;`CX@<g7kh@m&$
z*Sh+@G?Cbz;FH0+EE0L`iGQ*JdF_e5?5$T8iM;kCpGc+K_{eKd^40#YB9Ygg<ZCVV
zsuKQMB(^7Ci7z$-?_Al6Vw}C}Qy;a5GpaKqH=qxObE_Fn|LLgs44=Gf>Eq{#GkkG-
zAkhjlg9g$_>?b{NU<-VCOL7PM>P1R;fzMN9twPM?;iuFKeM&mJfOYWc33k;0eM%Ax
zalC=Y=&6N1%!+?-X^fFY?C1df@zf%p%rWB388VAVX19O@nPdMPsDGQx`D7*yr^>`7
zA?!p@EUa71o*bm#kY4NnQEF;2$($jZG2&MHaEWrwAicZdTkXSv&12BzM|Er1%|rEn
zq}KT4MNTlGyM~7SG%|vp$E{^+hUzm?Yke|R2PTBpl29)p1aci4I!y0<?K;d^TJWJs
zmaZcqFN{F)>oZ^8mp+%3Z@E2mR{EI_`OYpVgJ-NZvi8IEXObIzGR+Al)HnKY?A)Hq
zKw~r8K3u;&wb^bA<eVV0*@qD0HL`;zowl;d5qh80R-epsf(fCmKAb>(FNDx!JJ`Mv
z`oZ)LyMK^5g3u0XvMF@XiF+Bp`SMQX4vy4o>A~N8xSqI%ynr9;g4Wxwyq=4{rMFY6
z@l))y@c;()_M76J6ObsSx4+QGr#(n?LT|tSb-$SQ#K7=Gy4bH)@(Ce1u;Mj;t+Fdw
z0D8?|alQ3v5jOzq+xvcHmS2s{EuuS3$=vU6>*I}TFl|$4@p#`aH~oITc)ahIn|_cm
z<$Zr>7EGac4~RjgXw&@aOux9#BzY)#IxeDcFD+TP&oskN_nBx-@l(sr@hdmQ%F-<I
zp5F3t5F*&eBN#Eq?-y$&NPx}p%e4|D+{hfiTq}v>YvmljTq`Aq*2+14td%$O(g1<*
z>OK9|s`-BDef@kfn(vq17bJ?E@0Z>eB<c9!eHV+?gD0%XwRm6u$mmexV9-)h<6zKI
zQsb9#te-C>HGUb#f`sWcei_FSDdN}~KjPRUVvqptaPIE8`ahMb!%is_aUb@}xZckL
zsKfqZvHb)IOAq_8{lp;zS{Aa${QR(=`RD6e#WBC|0Q3mv9rMexevnW+=C{xK{S-x?
z^oz6pRtt2k)k((!ilt9F^`uz(q+i}xfFgiS`f=8O2j(jhnm_yVdKIzW3-sFpKl|kg
zH1dK-Cis<%NWg;x2550?1rj6T7eC_hc9@Sy%3&wMu3D(yoIK~3$0T4v<{b5jkOB1@
z8$>d{`K7x=&W*T!Ovl?e4lKLCep;yCk-Q+=0pK)cFHpZ=bbv(HUStn1(r-;(^vmNP
zFd=i%k9~~5LH#eW<%{$?(wF?w<DssQx#UOq`(6+VMVJXid3$pWa{5%$H?0Ucm)p@J
zMO5(_Z0`#F&axRra;kxe8qO#(MI;RphR!Gg)Wci_4`;K7Kh+;CpY5p7?3`U>io8k@
zpPjRdkXIQ2?}TDt%!ll|PxUt{KP-}i984JgVUZl<AOZ1VksP2PQR;_9Xo&kb0;mP-
z!<G62<qL{Lg94W3#e$*)zu`_K2^HavH#u<7XuQR&=_<W<)ncbqzH2Cw5f)?svA9Uy
z83hT5#YGsfLnu}(A`?H!onEE;TveYq7!+fD;$TpW^+{2Y*z-dN7@riu$MXw|MKtPH
z=UT1NOI?+#9Spkkxw<G{tjG`o#_FQljrhJ2BrsMNHEqsaQV|XRb&RdmtIF1akTNvV
z*A>ZpAJ|Y?SA=l7C$}6EdLwhK(_bv#=yVfZ3EJp%6I}_~NZqtVG#Emjt!(N#eQDKJ
z$56TvwAJY*TIIGD$-9t6{6^4LYA}AY5?XY(ef)ZTdexT>1l<Vw(t)5GL0>vOO*ewR
zEQ*(MCs9N<f_7pNz>T10Aka!Xi=>wT3C*2F(o2AZ=FTG9OBB(Kpl{#bwn2Bb`qn9&
z?gD-56i#=6zAcje0V;s_wg~=#Ujsoh`gl>^Z#myaTmuOmFY@^Ks~O1qB9Bs}B(Hew
zqz;&X0+-Jd4@ivi6Esigt}kdj{fTYdtj|pSgs_Uo4`4#*Cu;H<Aq4Ua8~wSyCv~Ps
zWDlW9^W{ttcHr1x5E5)W%SLR`ha}HBNaQKb5)#Es`83#nWtCeIGyPg5gD)^4^J@_n
zs9)&C6J%ar59E!=joYgK?DD@Jz>6n`r~u?Okr-hUx9dkzeFBPjvjt2j_X!{=^PUhw
zefqQazR;(o`Uj+ML}n90{R8lgTZItF!R)ym`u5b|fQ)*Og(PkOGh(9<LVbp_$G+4z
zr-uimS3{x^Lc;^_YG>%|DG<=+1rU?o{*``O_s<L9%Ky7iRs&?~LU!l3`qaA@2BgaZ
z6UHqJ$cslHQNqFiE*?>q1|%lK!azxD9)S>v*Z`$13`B0=Z*c^uuNJd5d-dy^Ep|Z3
zsVxr3i^z}x=whnsswfN$;*H-x-noD)wjj!inro5V`n~#8um42ANLuU3)F7F9lKuOH
z{@MK}1LEQlF@btAkQP}xkU%{dz-cO(3KFKC3^crtZ{msUXGV!rb}x=w2@~390!o|M
zZLDCnb{*UCgC4&d3=t;bF@G)_0wmDS*bM;^=x6MPAW}5M8M`5Z)Kh1vA(~%@-<UaP
z9cU{0tlb=V3h1-c9Q`S)9|~xH1oB=Dx?;a6)Ep(b)j#UbxT^mM7+J*1sv4r!xCG02
zML_`^q_7(#z%SVy2om6zY`a0i?n}1aL<+kvk=+6u>b-(WYY9$gb|4MwUTW14Z<Ss_
znGpa9^j<+^1msho_X-x@z=sE(O7vdAl2+D_^tw<up!EypjYZ}5x_ISS@hN><uwT%q
zWA&owD2&Q!!-C4l-1$@bC08|mij6cLz=I77=8M!ONEkXSSXXp6NLVr~h}W%XBMlN^
z?66>?kwI~MNDKsGP#GQ+_l3BOh|NX>aX0G$UN{6s2l1--&GHRu_VUmAZDnAI)(!Le
zj}FS^86-*_9fa$kAr+=RXY8k+^+&3iqe8vSf-(qz3{+SU&W)NoOw^k}F~5mIbAz-?
zqh<NcpnQ7>Pq{Ew@@@HO%VJFIVBV)_%a!@*Hc#O-?>3z}b$-5Q$F7|^vy<a=J-6i-
zeSyb6FNk?W*Xz_`G3DR5ppPzFXqN&eN?90`BON44Ss28We~7E#;bQie-}Q&f7dt9^
zLfg$yEG9HH1HW)tOzrS7+x@#fvHW94huYy|yB#2dVm_vJ;0e`YB3H2K7xlNAt#EXx
z0an-z02vYrq5(G1OeqOy8-jViq5<AhSjVfiP;Ss4`aD<BhM*A>uNs$7g|`OztHv!s
zpmn#};2;6MH7GN@AOXHLhz##>8i*w@SE~ssdva-)@lT~1KSi(L0rYBYqd-EhhK!<-
z2NEN%CRn-$BahOD#Gnn7x;rTMa*~5K+8va8ImrUh?jZJZck=Qfu#d*#4Kx;+sTwzz
zgBCl;5+3C33(Bt+fQ0To>VZjg#8pD%k=(yk;~iIrBlZ*m7gOj+Q06i~q9R9vak0k$
zNlHOPAT*glVlp2I))6^FBE<wc60Cc#wTyzg5?U&M%>73*Zg5ro=#)Yy6h8*@#dT>2
zp_Ctk+3O@M1%^Kct6K3OrGz}=si3&F3<8>`f-*<}3C&YM8Ki)O=Bc0^q?AxNcrM7d
zGHpS?mUE5`lyy57lp!&m0_j{(#ws9zbS{Wk<zWn?NI<&~%<Iqkn8sg=E(EbY@{lz`
zW2aXr_oHbPy6)~3lF=gA!0Hu}(IQA-^$N-4D@byIp};k~^NHlkPOng~rFDWDEke_v
zU+(sNqpPcJzmW89;G#DDLb7W>l2k~(S_~3}^b5he&8DqP6fbmy@;(Z=ViP>9C~bst
z{sQ9-rD#kD7p?i{GNNSs*bpE1>~6oIm5&X{@ry^m9vhP59we~GhA{52{HSV_?3<K(
z&2J2Jl}&P#$e>9fxr9RqN|Qq93-X&$n(*(k>jK7uRqxtW0uxnwHzZ$}0SSb6Lm9Eh
z011S5L-iY2(?zi$XXZ8sjG3;gnGObx*qI@Dp(n~m?97l~94mq(rBG?g`kdTbl*Z#+
zwlHLDt(@yX&~TjVm_fsFZb-hj0~J8b4Yjz25637C$NB8ju#qXBAClt`OsLEc$#Do0
zD)XuCe~40nzvO*?vEiy(;*?4Qa7joGz$hPpOG0u0f&|2p5C-6*=+0O`TNcXuo!wbt
zJmOmx!V9I1P@5Qa;c~X9#AwoFx!n(7!j|PBxd4L%(DD!#V0wo(Moqjjgl`fwVEf-S
zgX}T4k<YG)7?E;th5LdG7c#|5gdl;iGK2#n%IE<CUAdP1Ct}PfTkGf$@Y;|(*n$jn
z)`k#P<B}XyKy6@ui5e}dHrNdSCK_Oa-2fngupuOOJ0M9X1YfgVl!~7FoNb62JIX!}
z$?GmL?m0dW>B8lKgwE$7B+clSMU1*?8~ZF~+)%a6DU~*q+niFV=eC99+iOq(!nP0s
z@spxd^xRkM=D2aX>MI9=_LE=PLoUX9?yHbrM42D~@m1*RhSn(ofemF1dm&+*sj6`x
zC}&&~%D0=C_Lnsw@p&Z}PW#K65Z>tKUNlC@uKl^GrSPJU?sqWg9hCjHLx2!4_J`v9
zU2R~{hI4<YSqtt|K@vu&<!$u7H$4@PuW2tw61JlU*bOP8N!0<T022iq2+3FCVhU|X
z4}|0^aUfB^fe_xe97NMIM%&Tjxerpt5Le}K2ZQ#b$DQV;{pj(K{2U5&fN?x@RekFk
z4uSpXkL;z4ab4MuA$gA^#y6rrhGg0RBvgK+aUn()_MxZPw;7DAQ%<4uKH#a4d>=5T
z&_483C?#IR0||svG@(DIWjsdj17678mo@HDT3v83=zYKoPV3V9fEPk>@p%pC0OLZa
z&Q;bd1M@Q;(1wKZBJ#f4MguiCB#aeeEOmYyGgKQMRz|aAedEn){1Q_Pe83G4%lA=0
z0&aL1@1szJ01^?x@NjT+Sfp5qK@oyBBCL)IixjKmL2qPOrdTBlDb_c_lw#!{nTXTG
zoDf#-h`pX`ezoCOszKOR&_tgQmZyY}1lokKT&O@|$V><a#MK!hd6Y6C926H4BnRGL
zLb!=YLQ58hY1Q6(TeJZr-U;J9!6B~n15bBms~Z}ls=yFYdz>!<?}X*W3y`qsop6cB
z@PGu^J7Mf+8>5{Q`07nKZzdaEW;7~!FKl@EHHZXS*)uJy^m4`SO5eoh9x^iQVwusR
z8az=`NC0(OSf;c=0(Dv#DQya5K%%D8!l7!uD<Kj!MfXn&hsC`J$>K^6{>O@-YZGMW
z^ss^tuB6-Fe|NfBlg2GYjqn6x9*?fJ3#VqD9+n;%kAX8iEIo1p?$k4b?JhU2ubyEy
z3YdVH5tfSsNFdAz%Og^dK$sCmc9V`sLE?yXM%X?gC0f`&BP@?dB@0KSGs1L4x`k2{
zxL>p|oY%Y96<gs>x9i-sOKwbsvD)Qd7{;L#L)UruMV>|MpN);NsYPL#TLlvxx`;|Y
zEreiOj%Aw|KPPixd6OEqaUhfnW12SLK%f@0W=)N<<l?ZrC5>w{#0}$h>kOAcrIxVj
zrbeyQlCVsA;L;0ZmV~kOrQ>c`gk|8P+^0<qx2w)aVTGskhzqHY!Z>6b0bc|ft+z6)
z+!*WaX218>ZphVZZrtUn0!w@i0|HQ38J1te0Ex0!hUM2Vh(w)MhVeCw8#x@t!YVeu
zh0!j#DlBt0xSj%tRbea@SuO)NznX<x8nsia!!jF#>m`s`O{4cPuED@AjI%AdzqT}v
zD#<Ml5`8dZ3n8`TLOeCt;X31{<kqk}gep)>$ZQSc5b6~!182L9t-Q|o-_$ltEgHr^
zw;;1E45zdijtw;2X-)2L*Bf^$t!f;pd`Q)hlu#mnS`)@6_UJ<((4nf=gzH~tO%fn*
zum^HStBkCYJm56A7a#}1b?fna{RQMg53>5Ljn>J7Vfm>PFd=g=jMoq8?tg)T9nK-v
zk7N!xIFuVYL^$*=0&aTY41*nPZQPYS9F`a5!Gz4=FcwtGz7;6AzITM(+s3#ddBnk?
z%g09u2PtgG;C-Z{?1MJO1F549P7!2|5)MLS62cowXL6YvjX6r{Ojv%q1zbp-2_x#1
zjfj_)F6Mq}hek|YbQ&=Tsf*Nz6juTZ?=ii~{(g(GHT`O_a<y#Q5QJVWE~~Km(r0$y
zzxx*F4P$rSYV`5-EygM8U!cnG7WHHMZ#5oD_A8d%4JK6k6{EZ9RS<rcs6TtKy;1RS
z|6=)C9hi{mUyRr4;#>yQfMO+{ElA&Y{~hV>J)SM^`EpP0k^n#s1W(1ACLp;mj!<fI
zRSbcF?A!K6-Q>VxnIy!$Ajk|XMv@RWi-3TMH;83#Gnyv{70dArCS(Q`V|?R&CS)+}
z2D2A#Ga4laJ2*7e1{01b3v+1*TXh@C8d5CtxrKZ#4JpP}AD^564(8HOrr&NfP7igO
zgyzyvYLYK;I}+P9Z9#F~irimsH+C4l1;s`&y*HroFZ(QF*FRv~R=%iM;|`vf&|Op<
zsz)6|Br3e9xaqCd3b+f<Xq;ua`41Q?U1iIPHJ+;?E|iuP7xPz;iG<R!;+A*O>)0Ui
za5;PDL8E=e@?wpjQWBH6#bG`Gh=j`W;^wzo^D#H!FSNDAc}sJ#hm0mJ|Jq`F3g^>8
zVDYyy59a>%SEH?7ey~{Mmv)E?u!F^g{DT=p0_<QhCgyOsRM0T`quk~W#>nt(AC<^&
zZh{M?k4oe>H$g(_qmmYP(;2#2ifu$m-l-CPhOU-UtxJrA*bkP{W@1GN-w!qgfv#Lp
zB9~8)kX=zCH-sR8x}pRdLO5=<lq^}vUV71})p(_&!Z#5mGG_!CsH`kO&S(Z*DlA1q
zX<JH^?YWIF8ui`P_$d}oJiq|iQX)S|1`^;~N}?hI0TM7<O0cX@pac?u(w34s+e<_e
zj~F5cv9&}d@gxhavaJM3ylHT1&;!cu5`0EuteS3j(>?dGr>-{&bFco7QKYm0U##1Z
zLfN~WD$tH(H&x+1+NPIcMrhxaD2Geb*l2}L(%)y@{%yQc4W11^JIU`#<iZaH0DM=1
zg<lv?uZ4V9QhXT3(?L3(^9W1(zC=A#BBDIWgWiD>8Rbb9qP&A8_DB3mY33a(5g+k;
z>OV%j9E7+yjz=)!Sc%-5f&|#H5_@l2O3i)p{ki`!T&+$zoj`ljlO;0zfD9l`mdL#+
zNI;w{!QPbL)l1^2BZ9XIeylcdSMT)*hBe*QOX8}_fQT|AqFM{-u3pl9bp^cKtk;cZ
zu9gEM@?NochCUh;!HX)C6cZejGdP0RTlP?cCn=a76~WgoO8Odqb5-M~XlFcteWM~W
zx&sNlQ4x7z0VLXaR3tPuBHEc4JenRIQQwS+c9uNojfu#1mMpY0i%>hC7dF7}OpGW~
zBWmt+KjS4=H3-`Z8u1e&GMY~E5kE14XqtK(B&?Vi2~53gg@~uMNfC9*Wh?A__~eM@
z=fNoH!B`mfP6XbJuE0qa`t99_R&q6kAK;<!-j67E#zN_~-MaSdjC`39d;)B^ZSck9
z0*QWoKO*}TBrJYEA}_;&L^1D25NlCX3=+}G`;p8YvQ!>ba*6EiRw*wO)O7aZKqFN>
z-6?~%_0yd)XcA42$S)El`L=#~L|$<Qi87`~61T`Q_~kxAjg;PO#dsO0z|07)h<MWv
zb?g3w_^`5F9h_0oL(6(tSWE}bGb8fAImxpFGb2UfIyFcD&x{~$mBJ``W+dHC7EP0n
zOrIIaw6$9DqCw4O&kZuJ?J(P^9_0^aJ7v)9njMkX29tbt&5j@t6=mS=6rR?zo6sZ6
zm>sEqJ3pX9E2AGjWS+ss=EpvC3ZeP;q0@#m|2~Y!`3DtL<iiM7LQx1^jQ%iE>n>Rl
z`?H@PMrz+_C3!`#p3Y~Dh8XF`<~wE3Wsdny8I*#UACVvJNb(fK{0LTdQ3gI@gr`}%
zBK#9Zuws6s*6s9SCF%izh3tbNMtRjjrwmF_ER4vUC1g;>!bsc(r5wb<2;$y(2%-Ri
zz;_9Y4mB1$w#0#;Gw~&knUsWB5($X2e5e3oNd$49Fw=w;OCq?0FD8m9=gyMI)%Ww`
z{Ul{6K4uMu8C7jRcFM3|=Eo74=zt8$_&8GMS_w)?ijO0et*qsAmpw^g_4<hNkJwxf
z+qPUQ&8;71Oi((2We-a_Nnan4=?BOIZhb_4jtC^+)<??4^#hPFd3~gD2WfIXOr{WY
zeWb}_))87OlXTYpRc_5l<Dc#hUpb{vlH;q0+&4oArF<2UpZEcZQof47&5MS?t3M#K
z_sCMbvXrkPweGfd2+xKXeot=b7~?@#^&Y1bN`vf)<csZiQlT`+o=8$8nLwhHJrS8?
z0*O-gL|Q&BTsTO6D{D{WnvPiE@NT={(5<XJk;gjlgldxZ1^Xgbd`75CH#YP|t$;oM
zrlB>%6S0m#4n^;a$aM@Pirz;RtP$qZ)*+(Qj%`xdzq*($a{JyiGOmZgvU|mcfppjz
zNc3f;!_J(dFDo66U`?YyDHYI;Me>G6MWB>|<go~nt~_y`qCn|~2oIE+fdJ|c_8I^Z
zvOh#*pac@AKSU5H9iq4+MgI0|uKqaVX{G#ZM4lIbOYDdtzO4olN@pX%ko7Gk)>7o!
zFXonyH}<*8FFHzub<t5G-+hsk-W4T*?3>#>(Ws+T^^M9lNb!_w->CHeAc4_08W72H
zkfanvq)u1JQnYjoh>C+35EusoqOvnULUTY=b_Pgj4v5-8MT(Z0VNrhY(g6g3hB-En
z10CkrKn`?RRQfgu18G=P_Cq?Ljg02yWIv=KIWmf)O5P7?>W9%$(GMViIyx%XVvvv>
z9hLn65~!o2GGI+p)3GRf`9&kq5(G4vqe-2?qB3s9Q)sd%g1!qh%+eIMj*lwu=6;=G
z{Ew>|KgICE1Hg>8s|6A;<D+uf0|}V%Q7n5D41h#1Fg}`iH|pm3SYkk6LR1a&2}-nZ
z0~4bNTIsXtl7+V`aI6xQ@3LNdnG5a7QG7AszeLex??lxHM7)}Y3EK3i@<H^!;?*A2
zcmUJ!M8q*5Vfyr_j9NhgdwNtxtsr6g^l0%1FrA`SV(@5cMpT_0715OBL2qVMMpKf7
zXlhoJqN%UR<EJTvR_8~RMQq(P<Ev`?vRjje+x)0>ZjggX^P?pqG64zb`BAwG011=k
zN9!ztN#ys5A$9=^qH-4?S!lb3)Sw&ara=Z@pN{5jin?MSxp08mqZ>=iFg^)<9L0-v
zcf-02#haf*l~wG-4CAh9{1OcWKCJm9D#J~Xu;!Df3^zf-nopvkRkDGI!5e6KR9z_>
zNb;b!!fqhRLIZuu8;EYKW-y4fHBn_Fx{NKEY1~*1!Zw1&>6)mFHX#YHHBlLDf`k!k
zqJfQ<jgZmi+Nk>3Wh3lpb6r$Mo1`bA&Gk_kZAuopV?$KKeLr%K*?{(WG;fETmRT6`
zdDKXWX_=*IxlK$<)@rt)m2I<a#v_Psvu7np*u0HqCA~6}r5W=D``2uv!EIkerEdh2
zxKaN8kB4NS@&&au*-<N?eHG0+EbXWT$*-ceo32H6?2_&Q1cvx7+YpeD-DMjB5~#au
z_fU%rsS)m>5(G4B98I#P#&!>Q3e6gF4}4Epi`>KhsB-Afa|{mvgD0Z*KmumJJ;y)-
zX1_hhK%)2dM~e^1-XjJdLf=KzgR=J|4|?C*LrAhPgbwf_L`_sXpdF3omHs5#s5Xi{
zdfA26rZzeu`|7a|(N`yI3-Jh|C+sEyiIPrG6Cp#R)+Y0RWFtN_8dv;?vq~OhfJxk_
zF5Y$m36&qCIMkqYvsx#hosZ^?%$@qs_}t|?AH_j5ok-Rp8-8b>&o{0w|J{ZH6HvcL
z<$LTP0rfj|`&jbAb*T8>xt0rzxT~@^PLX)|;9`{aj>&tTAW14FKhg^l7`<coNH0z9
zI<%_xVM7-h_g40C5U7{>#N_%286fnD$@LK=5c<ThKHk6)K=o(wMMj&d{tg29(*6zt
z`O^L|dAwMM`_ld~M7*@Z)}a-4P)w|_AYlEVm|S5&LUT||uCO3c+Mt-d!qy=}N5uFF
z+YSVPMmRRm3OmBFfmYZNF}cD*7)T>xSYbb*H|^>Mv}v)tZ*p}O8_U$9X)!oIzP#3@
zewi5)_XCD5GqlDtacamL8jpZDGbUG8kU*Rn!`S$SdZ#X0O`8`}7Ub3}GahzT<EO1h
zJu)vQZ!19#dh=rPUJOW#`gyU^1u=0ih8Q&J)%h`bFGh0EbMs^JUW{Y`XnqX$VjA=E
zA&`sVjJsC)f$kmI_~pjcO+ed5P^ac%@^rf{@6=ojD{}{~3#5<G39)<GrNL$$mRw=9
zECa(<rvCgWCXc!6^8WlNhGTAe`?4<e=Q7rNh0(lh84ht}V^K#gi^<y{kU<H{VsO;>
z+6`3DRV&zm6~;A<SH$FHYcQd*B9;&r*+4>NMGVKmvnU{}i!GzJKBjEW-T5i*LR90Y
zZ5{0s*T>|_4LRtokI9uAB-(d<tavlpmsW0KaIdl<rf!Ofm0R+l_gPG?+>!;avN1+0
zcQbARc9dIVN+wn}&0bn%G^zq2W?@~0j<&bP<ZB8bVbj)Fv3QFYB(S%}kYk`3P?vU%
zUx*pN{#a#b6<^pB0FR*fg*^d4Lh*~s6QC|_7I%pW&=v$*ewSkc?HPC3697+vw9B3V
zAc3@tCcvG@%HvJbJ+Zv~tlJvn4&R;_UMb2V1&wztaaWmrw#KNP{5B@j=3ruEeH%mC
z9C=U30Cq3)t~F{U_r_$}98AdUB_~1YZvNKfK6d9?qi$-StQs*PvyTS;Bbb3#;f2#!
z-Vbc#TH|5gftV4cLnrkrvfvOqzt(71dC0CAn5fwyyJjF^!l9V_b|pyE>`)9R0_3Ex
zBKwZA|5;}=t~}}>kdr(b%NK7PK!${3F%emT1j5l6BCB>B0d}5Xhu0Z5SDkPWXw067
z$s0FUaVL2q<`-!dkU%&=Hr$4~)eC4RV|gRlKi3=WV<%}6Y@)!g9#!t=n39SubER+X
z_7eMXg;C7DUvGR+39cAOkU=>=+jRvAOMkYVF-Vm2Gqv*z91stGWt%q`FSYvBL7=t!
zR|kRW`fE(a<n?%6f2EnfliXH4>XcsbT<_1|w90zL<@^O3TD{`v7TQUJM7h1<II3vF
zl|a45j7>({%GctTEvH4`wYY4ddOV<hE$$b4agd}F$09(t`0A0<=*#+TGVX5E*Fm66
zR$m8!d`MphfqY0`Lcm)oK!EIkxKb9YWV6;95mvF;sAvs_-Hvo;Za_R=%s@y3Ye2lT
zo~#c!mjUqx4Xs_GXW(3h#+4Cl!e(P<HGbJBl#&`6mrG+ko)R7!mm?1(P=?0Q>$JZC
z30E^TUVB7bMC8N}apkbMd`(rdVA}9FUa-6!gQb2z8y(MkJMM~ArT@~S<5Qj6uwOnm
zZg^;P9PiLXQPcV~Y*<_=is3qIj~<<SrvGwZdto0Q!9F|_t`H<@$>MT}0tx$A97`0=
z%7BB1W7(iBMrq|(yM|x_VXR$4kR%kBqXi@o#>O#P;2(g1!7`2=*kaUfHO@hxo*3sK
zP%-1;GQA2FAdHK{_3fkW$JIy&$MbUR=B>uwqKR?)Uf$JI$Ek6??p_B1h*Rxafdt}I
zyH+59IF)KOiWY{esl3^79BcG(^V?my<aXoVu5z$Mt3ZHD$jvQC=+BNLdL?IkHPvZu
zoQEULK%i^p#$`AH5}I@4G8_R3&AD+q9J!jvMQs0f#`$*mjS;=bZWNHH!Xmp-Kmuq{
zTt*`xNiz;-+)qcNG{6cK&wDlZmoJUJ?xOW^e8ibYBMqokHi}kh1_F>9?OK5Z<VL$y
zKmu|jwF<v$+<+|K!j|qbCYEoB%iFPF5;rby$AW~;mN;(5E~8n{fSO_l>;H|hyu%K=
zCSao29d=DX0%Av8zA6Y35If>n9LP_A#L~7SF8|bvNU@>c5yzi;;ifwk0)=nbdo{+%
z%5R)P=sx2&ad{^aGAQJmxcpBqkfamGe|q5%5(sGNJ#71KqkYvL2Y~{~J#m?`gA5S%
z#FPBy1E~OEPaHQNw$qqtKy^Bj`|BQKhpXy{gFzwW5vQu;GmgaNwJqoX<47DAH}EGb
zgn<H2<+|)OR=BE8IT++IPB|D9oSd@f6Lf%aisqAS3`7*?*pvH>lU3&&2#O`n#pOle
z20WHH7te~+DM&z^i#Kh?hi?OF@bhB$HU|OC^Y-usiNep@!xtnp&tD$C4JerCl@J$&
zL7-K8C8Xm6iE8vpNXG{fNWBtr{DK5huLQ<#dko)(I0{STt!2pr#;w8E6S!pl8Z9ji
zF?zKD31w*Rl>>P9`9b^?UJDNZKEMVC3Ge|4dCvzVzy~C7VnJRNB)sZ?M0#k#ZH16d
zB?bl+eYIp@0*C6`4jREagA$0_LP!{0eu~I#aDpPY>$oW>VFWV|8I_eI95W~=7?F?*
zRzp5HMkM5ic0j_65eY1Lk8%WDSQ^D%J!Jg7dX$4e<7kvq5t<vL5^{NH$mhnW1eOQ7
zumlnpmPRFN4-?;XAR4O!Oc<4@^8{j3lZ)^L17c4Ob<xEb@L&c@C{1F`)Aw}m{AB0u
z?C*z-Yb(LBTa)GvOUT#;@-TuWVr6_rg5>&*8uJgGG^Dxn7TbQ<xUuzH4g#&aZ#fM?
zbLXvuT)CkFgtrn{cj*l*7=-U{PE6o4iw_(zwp8PnZ3oSsiB4nC?3tL5pXG)YP$ni2
z&Wm29_v<GnuAXwaSLu|9_v)mC`fkF*b9&GcT<A`Ax>z#N#qaoeANLl9p&h2Nc}I=c
zE2lYD(R`fdSVi-3nmv#k^7%L|fkP#_JKK=1V9aFQj~O>q&U6rHI?i-jheG?A3BNcS
zfC_AznZS`zCys#WIEVdk%;;P-$3dWJIVT~v=neU_oRg?6juSuvVNL@7FSLgIN<*5K
zOLN1H8|z$uS?XZWwbZ2!22IGN3HdrFbbzrmf!8@-r9^l`I`CPOK%{xvoxT%aiGA*c
z=h9tYc<%Ae-P7HkWV3!S;y2QN5<X%7wQ9O&w{*|$9bfGHY<app{*$%4{PWdkU-|#~
z2iAt^m!9s@>1kH+looBp|A{r-(MsRgz1uT{-@VIIUGUGZ{J&Ux(BB@W@wct`Z^a(z
z?j7-0irw*liXFSA@pr8+b?p8G8_~dsR5wib=;r*FYxmBbI(K=I{`|Fj`v2#DU9ZEx
z9A5tGS^O0&{mmi%oROC+jdGq}B`oRG@p=09#q>j+pMCcBuCVRSj$OMv$^7j!mHuZj
zTwP9=HO2qL(!WAJgZGBW)bw*NJlnHN+0)&gzg*ADZAWFLyFK5zYx?=_-FkNG)a_ZS
zFh0J5KbAzBc6tW?D%qnm{-zdf^6V?+={Aq!A0&IGtN6dyl0iLs;>i=`G>vW{KVe~x
zqVw!&MR$qUB;@ffo}%N|B;;3!K%(Q<BoaxBMX;~K7Z@%i@?I^?v7d~vH*g{0G3lVv
zgYP6Dm6T9Q_zUROAb|p!|KSEb#mfJC0wEDzz5<Dd7Zc(unM4WFOAdud$X-k!&=9hq
z{z%C8LGb|s$b#gbGk`2b6n`Xm;*xM->m?NWkVGO+1)AUdp{EeOlt7L^0MmL@Dqm~G
z2Lm7rlAjhqmabs+D#gLiMf!qOSwMTEG;ext$?wMhxqWYxB66nGL>bk3^yqeG^OmDa
zWi$vLkVcov7#Spt8eNL&&=$Xp?0>Tqv36a2W4Zf_qwh6KMz1r&W#EZu5)xeGvOX;n
zZ<0QJ+o4QE$fnDzDjVmh5b8LmNNR_1q=GAgPysc8^>CT3%O*G~)HV|w74qT}NQL}V
z8F}%^Y@f@#p=`3FLQOQe)D+_eGEkXZT2RP815rjR)f9GzV%}Od#Ze(2J*8A8b|3?l
zDWyp4JkCqu{`6DDe4=8Sqrx3%sSKvegaa+b$eC!NBgzBX$EA74a}T)9q{shpDdPLp
zxbLTyQ%@Yr^)}44S63WM%J>>wlz%K46|Yu-MES>(h_F`U3oL3yKs%en=dfOCYPMDC
zoK5o0s9UYT6`S)(<&UIFpWW3#i_c*ZkL_)49%^<Wi8CR(Pa_^-sQjK(+g!mxF&Bw5
zIUlxFkZogfzqK&m^^}cC$$kbGwv9>2eg+ApF)8!_?j}M9567|%m1f1`V^cB}3?^|?
z^2H30P#K%Tiy0IfgT&e}Hsu$e&mxka6OT<5UB}OfC5O(5$EI3d!*63$(0Cfp9;q^~
zEgSEcMx~EW$)gy^pq%k3%(6DzG*FY+iYl{h)ufd4A{Bf;GASkFIgmh@lnRLLJxJ0?
zA=aTcv0*C4*HqTJl{u|)sslk0_SBS&uptA8si~y6^Z^nOQ&V`&xF<)zaGTC*-(bF2
zIo&~^J^6G8fkxl-RI-U|9~ynrQ_WlO&%#wucs+}Kb%WWea+ZTYtNARa8Z;PZrQ~J=
zDnOW(65q%`EwGx;VfVB)Z?2r<AkYPnISvA?=5taq*$ovS%t_(RsRwv1&|~x1_SWWu
zRr4GK`m@)04gv+)^HMU|UBOrLc`5u8)JD3-P(iEt@?7UO=AG`U<qigg*UKFYTFsX`
zR?up`oU9l?5kUp5=4){q*Bs=kTI*oY!m!rCpoL+rV+Sn^Ysrpzbbq6Q?r&_%<!&|?
zC{^1W4Ei6cZ4L%q+Srx~h&wjW0milz?)wf9!-B44uxahhL6u)Q5cK(juN(+|BO?_M
z;b(=ok&$ZDgum-jL06`Cv2M4S*R|Q@Akb}#T`Bom5M*G)u2e+qcR<33T`7b%6v<c6
z#fjZ1<+@lyHoLtUW9sc@X(brK>)|o5cBf=83=&woQ?X`ph|%?l-Kmz>T7TnMxIM9t
z{rz_HvC4f80^OL{=hTO8OzcYqMB=DIp&JwXQVq)ZS3@f3TK4zs-0kKAmESuE`0R`N
zy@No1L-l=1ZX=-rgzr;$`-c{s3c9q73*vW}Eh-N=2t`0R<RH+WNgYbb4H8s<a43cU
z!=k@Fte_j+N7-+8n9VAWItcV9Qb!$x01%F*<UJ>-0O4pVowfeO5pdi42iE0Ivq$9*
z4nhzJKR5_MApGFeA_#;Zs1}_$0&aqzVv)Pdrz%f52qE;vsg%r#S12JMoJxtC#V|Vr
zgj1=C#@78D0e^t;Gh2F>`IpL{9fUA!_}Q@`41}MZT7-e{Gu46;f)xt>FXJ4$<8Jeg
zs&fuPF%Zr<2*p4+my(+jr~u(y3YYbViveDO_nX+4cbg;IUT`2v0CB;AC;`NUl-%T1
zC?$ZnkjmowBx0ULkfcm24P$S5*o=G3Zmx3H_Fl7AjH11s_#<#!<wKm>12JPa3Wm$m
zZP@HTJc(+=hdp1R(3t<hIG6mc*C>e5zkwrOY)H{?$FvNxDJ1Q9`5(xEN`GkHtve!3
zQtHJ2%N!AJ*Umh$MnT{qbbY+r3;+G!<-EL(_;>RbRJx4Gf$~DvP6*PU!Y}&!a{7mJ
z`uSAHE?r?TOuFf1@th63*Srybb^bw9{0;emd(9@AmA<1h{sKL5pLs)pbvf2W<=NBs
znYUD-Y3!LAL9_Nv%eb~eiJ)2gri;XDuprT_ebaa$fv3(Z6nvv%5Ib?7`FZO>4g}7C
z)j?@_<qR@_7?hT8ynzJ7pfuii`xt2hj1Rm|Iw`HZlRJOEdA+A2e%hAAV9BKP<+U*e
zm`Q1w>wp?yCZ&<<pp7d?Y+NU$Yrm5gNnT=zZT#dkK5I`Y#R?^kr7+D?ifrz~rq*<7
zT1Gs01n{Y8nNb7@@TqBJ6!(Y$n7}JeY24@foK1e&yoO~SG2dwghHYsAmd<c2O#p0$
zV`&0lGsx2U^fq*(fR;<=t<Jd~HRmb*TpG6t_`k9>qIl;cw(9R@->Q#nXfV;1AEo7F
z1qtYn(#0aL2NKX9rE%^siuRX{C;(ZN>-(5lth8F?U{Ef3m2Dn`NGdJgZ3PL8RcV~E
z{6^7T<AAm;owqCZ%|FbS72mcrqC0%#Pi;)r?O+`{nU9z4NXxT9FafnAoe+l!AOW=_
zjg$lhs*TB-o$O>M^NChFZDYWMF*|KzK$1{eMm!*aurrN_XAq^Oo8UYwop+Fpe8L>)
z+ml8L>k$AqAzSvc2A$2nmG4c<zz|Fz?M=(*3nY;CrV)MdzhZAf#vEV^JDXou9B_1~
z^aE-6eGJGz=Rg{X*A6JWX+S%Y&U-b(mOg3zz4!=~PHwp=O4p93m6K^T){+0G`z=qI
z_g8}>b|QEV(BrltAOU)u455Jv5(D*kI&=~Pl@30Mfq@#(PNdbJ(&FG#@}T!aS{{5#
z7IG^;rYU_!OH5O$)0s5>o~(A7MV~gy%RtyhP|ePy<>@OV0d^*h(^oo5Yf9nkS=RGu
z^X5)xq0d)gFrjibEx$4i5-MlY^7b%D1YKv-_3r2KI*~j~KAWz89}klyhr;Bu>AUaY
zGp;E?oEI~$IS35p^Y)YjiQ>-NQw}7TwUhWwDc0?k;aSjsfZ&vzZy+&-dS#?%012dC
z8R;270;yL9^9^@SJop0IYni+O8S$w`TCrctc%ppwjW3+x?`twjJ@NTBka!AOyvGL;
zt@L^Z4R9lN-$m3qeOci%X1iqHjC?f;Ovv=jWU}<W4`e{~XU{)l-j?p4k#8S@N!$!3
z*hG5s3LiKclF4K2n`g`kp&=O$|EjYmK(-78ZuWWh51$@q?>}q)BMAoI3eaPK49#F-
z;1jSQVa#w==Q;DQ$>AB9E&vlU!!y|QVfsM^)JQh&IrE9+$c%7w#3XJ8r@c3E88p=>
zR@&9PB{?c1PmKe7$3H3quY!*-Lj`R=hV|}h-k2Wa;LuKg4B_A(=oPhDK%1P&+mJiZ
z)x@7_PR_t<@S~DuRIMo)aW4`C`fW-^j!}@P#gvTP%7KJ2Q!?1ft)uX|8P#!C?z4ZH
z8(dYhGP3W%#VDGUkq!|gNoDZjD{baL0%KMNf4j5X;25xSd2VYDvyED{+`*tt%<_!f
zGBx7^e|bj!sXa(wEYBbUqE(|AQ7bdzUJM9mu9U4n&rtfxj9fNAa#?!}H=~wYFUD{?
z5S+SP4;sVk?J<m}Kw58)VUR#tPh<EsYTo7nZF?r~bncs1@Bz@G?HMB@nzuPM@0YT9
zK>+egyLmwZ@=LpUK?3qiYF_>VOLJ=8-MNqd&+Oo;+-)}vxTxUnj6CrHNm3d46%3HT
z*qy=6JG}U*Hm9+)k3IAs^M9-MISACa`!e#HJ!F8eFB2EJ1du@3m$6T4niF{>=c_hx
zT64s~pk_Xjkw*X!0>+VyUpOj|q?Eyak~*k4weoS<K_H-c-0mQd&^&H;5J+eq&)6N*
zoU$*cWCwu&&?(0T%A23EI|xsKbjt1^kU%;`9fSx$QCkGGbD6wB?9JZh?%=r$eUya)
zhZg7`?R-YL#QMEv4z9*8;hw<<+WCxh&me(zJ|i#3fW#VcK2v-tBi0CF@HOH>M*Slr
z)(FXi-tQT?Mo1Rch>ICoBPf7xLCxPgtK1X2Da}T{Zr<Giga}*k2sP}Tm2MOy7nR!?
zkihPpm2aqkg#YiIP2bILwGt_g5PN4ccUe0`WicH3vDSUeugdymFV~a|=$DmWVrjwq
zzh4&T&h&Z57S#O%S=+wm1FZ%+c2VyS%*rtc86XVI%1@wxB%N%FmeyFxF}4h7Z)fvr
za$oi}BkrQNvv~EAd!CjwH6~`c=V=K7Rh?)X1rm@Gv(oc`1mwglrbdkdt6IWj?Y*or
zEw^=``G~6;KSj6U0rcL>$~$8qq4!=^-WdalZhJ3VIxQ>ij1hynO?^Kr?~F+f+UfnQ
zyfY?Q0D3=*J7aj866Hf+W)^qGO8K3!>G=27GSIdW)S@%9^3E89p*u5+v&(0>E~q)|
z{9v<d*&IiOns825CKOxpCY+N+LXrM4r6o<Ed2I9$v;O1rvhtI+U_xbHR?az)z@3+s
z2g)ER1(S{6%%cG!c{DIDo4AQb1Cm40z`X2@ZF!cVCC#>lEIrh`u4<v(*<cda9)uuK
z?82<v5ragr3$r-J=|@AXCHa;mj14shR4#EKDEqX;fuQWul59X^z@P$%C0S&^C_~ti
zvQJCd--ekLRZATN%04Z15Geb!G#e0`9;g6eX%=4Z9a@-LQY5qrFWQ(>T#Z*bZA=NL
zRau#Vg%FfhWw99ZdvYz2aMCtrm94q)BTU?r!%w?ADao`kD_sHPptms_D(2xLNQ|kC
z*^;doQxq-|gS&!FS#?WRxB|(8-sY@y1(F3<@OhS80XfQ+l&|_CE8fdo_l6lS2O-{P
z!6O*)MOH3kAOZG8*7lPvDND8Meg7!a^~f%#(I`o^%V{)9QtishC=4oq*p-!07(SY~
zC!2RPE21#US?tNmkMIU*qJEo|AK_)gMw?m^r1%Ce9%3$hOa9_^#3J}|A+0#`N1Jyh
z_d$ggePTjpUsl{<0txCnmK<Z=o%}8<gD^0On?(@zFvo#$2iTx7=A+32_?Cdgp_7gS
zSp;*q3k4iZi$hFhz&Vta-w^;4GKaD_FU1#MAcH12!tlAXmgyr|890IonIl;Qj&tFm
zJpZq(bC0g7y7PE)yt(xpSF2neLckl~+}wN4QIZk?6G$K-AZUG89jjCa`<S-Q8lBZy
zT{E>EKpP%LV0g$DfoM=rBoehX*A8gV1raS2L`DoF78kE7s5pQH<T0P$-urN!HUHi3
z@BH>}@BMr2eb3%!Z%#-&HMnR_ev@)5FX(kj`Yqqu_mX~pO((u_wrB<-J%nny4@A`0
z(tSC$pqF(2jCyd1Tc18N*lq-b2+tV_O<s<|13IU=m$<i=or}8$QK-_jn>7#JpXRF@
zmb$l;P4lgedg*!JG#?!`Y9{*su&+9oGUI*Nw_n-!(h7LkCn9BX*h>`9qy{Z>$EKTn
zJAs5qZB0HCNQNMI2-+EH+A{aH^bFrlXd%Kg!)HRvTOxP}%USB!GWWXltOAdGWj{-J
z2wixHyJmHFi(8p)_U(igB0SALIhds-czCZnTdi(!hYy_XpVyF_S25d1Lmdp(C7kNG
z&@Xy&(Ua~gy%zdxvJ`Xl7IQr2JA=Pz4v1(Rs$NwV9t1rmotI<Wdy6@gs(H%&URuQs
zf(Vb22K`p^fSypxpK_<9pYW|&IaN`pK4xvuJeXst8q?}FrkBP_?5(Y_RFudTaq7Yv
zE$XRO_vV2uzCCpTB63=MwlaK1#}d`4<Z_=KA3c`4hkGpdnT6<~uv)sd%GX2Tl>kh(
z%D3qUNGDeLb|?hWmQ_AOp}f|umL9gL51)2xYukJ~Z-9t|Hs8)0fWqY4on=5Iv`OD2
z-&RXc+tsblkZ;=y62v9ieY^4w4-(q_OtqfG1Ch|~v#&@W=2R^(pI`rsJG;0d@7n<i
zDuwdC9iV{1B{tqDBSp37Yn^&<rTbRhx<b7&J6z}6*U<1FVx3=V=B7YItn-<hO1i8T
z*Y5Pq#2-M(PHSX&M#)a!=1U+YJN-CcR!jFb`es8sfTnCLv_VFzjRoz=XtmL|X%l87
zZS+Z-56M|hHRMgd=<EDNtK8y5kKKMe@vjk+?y)8XAaYM^QXnGt#3ltIa*vo)wrSOf
zuJ@`#FSyqX*;^<gHr(smmnZO0WUtRVi!r(gHawsvuW=j3ABg)=qc@-(i2DIV!U5mT
z9)U<W;4^#dkSSFSFnQQ_zVs8ND+=cmT&$M0yT6{o12Y)HhLpp;9Sng;IqchcF_6LV
zu;1rP-wcLA(1YP;e&UF42184u+~>X>3@wSl@C!d43~R(cjuGyqJqD^pFS`9J0cJ4d
z5sf$&8yASMW9N-qBYttp7`G9CoKpp*$ZY0RK`G)Ur()y6jHFXyTsC_rMsjklU-Xz7
z@UnYdkF)-TzKPb6V%ljL6RiLQPRm&R01-GXW1|&_z-bvw`zw?@QcTdKCj8$0*C9=X
zB4XO6j6K~89*Q(&_z*^x(nd;n&Qyng@7_LSX2!nOgGiB?8GF7ukRmfP%zsGv6ah7>
z`~TpMt!OUPB8F?u*kfbi5vB~8TS951D0@!Egc5-0n3J*E22yfP#)cA*l5;X~D2)_t
zFU;srngBr1!i-HsK>g4rA|R3$W^5<{k+d*_wttAWN2QXFXNvxmDK5QH4Sd<{r5@^V
z$MtwTb79t~eUzwuiB&rQ$xGti0g=2URyz>MOGNDvy&EOkYEdil?iE8?3PnWiEg2h8
z@KB^BLqy%6i=g&abvEzbRMA=}B7$0DOO4WMZxu^zl_iW(qWAXvZ(eoZb?Vw<9YCd}
z?HQ{BATruBcK!^MLKz0EPbCaTi6J`jkF0h7v3Pt(L594G=qSh#i*#h{;wxp4(UD;w
z(xE&GizL@&oHsK6Ka~Gv3Qv*6V-wIoWUb5CfCeIKUB(79kbqv7>GMX$1hf!zK);qr
ztk0N$wlvDUp0NRKNd$CfCJyLPl5;l{8z)oeUU!p~8)6^h8Lik5`xp>u8_xUKD4Be`
zV|;8J03E$k(2e{xc&DHn`D^e_>|-z^=^gR0{W1X8rjmco6zx<0yx!f{<IkB32O8h1
z72n!neG7oZ9kGUhNZb+o77&R$#J9vzYQ-gXs$p-sH`VTp+XN8_JL5J1g(+iiPyixf
zXNC!gtftmVgzr-8-*oS;+f|St+S-+|hYY}jgk70(v$hLF!mf<n%UUaFw~bx^C3nY~
z1yXW%tXZJujia|#{B5t*EI=b0y+C@gx6ljmy1lVxd5WaHqS;q_quDyP5|tOdkUzM=
z&3l(DD39khb)wouYRy)6dBvh~>va&3wW!>tNg%Qom7~)?$;X{_(%U2Xf8XYA={5XF
zxlKe+g<Re*(z6gCg^rZ-iJsp7SBD;xC(4~O<%!ZisMdMzbNS$a+qZZMG~?@VAmBu~
z^>rWuPLx|;2jc4|%KMxtH@+?e?dvDY6Q|3KuUi`BPL*3<w<LW1>vHk+CwuB1Fr2n#
zou{*jeCI)TsXG~9-s;rpgwUF`2?0o>TC+AO0ukPt<&S`@MgVD4Yu0}{YnIJ~K%+46
z@~mAps}mcp%$np4;MvOTd7X*TR%UJT<|)!wW@Gc$N%C&Xnt2caL2ZS0N}^~hv{MpA
zTcMqjDB7}^|BwXM=v4B>Y|-0l;!*e09xrC&o%o~0`W;z4R;rJVxygzSzRlA1;}HTo
zvepNH2<*t>1Nv+4(PFE$Ds|lLu2@?rBQCHu>zaFh;GxXg?4^CZM`cbqT0*H)_4~@5
zQ_;znXto}a)S3O3-YzFRl<CZ}T~0>6(SqJI%2Qu_MN)b*)*X*1_-3p-pk|GAH(J!b
z$?6WEk+m@p-EE3>2Sn1QSa(1qZ4%ur=cKR1m{f9emLriSpKu2i_t>0`KaL(F%6rc$
zui})O9PwVP2p%Evy;ylbB)%ugYnNeU3|&rkXPu9-iP9E3o9pql`_L3<M*DCepgU`0
z0f>O^tc?XAZr7dd^AT<*Z#9IVV_{b|u{&#G!O|%A-&q?AmP9Okn2q!P7%|GnSu>HF
z{;Oo~;ZX2VNM<?*q$wZAdIlo$<MTc`M&LoC=SBc}J{bEb5IrA^^$bMP!C22gT@*db
zmvi+j>t&0!smIT_KPW$xCHKq0Q}yhM`y%Tc%_iiom2ZK~t~jBoK4;xmCmzWrCg`_l
z<`KR5GMi}p28BxgM<}tlud>c5#61{G!xlnPea^YRzV>hbr>y)HJ&{d}DM%ALoXm11
zdo1m2)_EwGkT<xtailp-Q@hT&+ozn%+C6)^b)xI3xx{@1d7`~(IWDM<<vpBpW*|>)
zu+&9JRF)(={|pH&{w`<lt27kkHs$Qin1+Jf>AA$9n)8Am$vJZn{EJvHr!@#kU03Y=
ze0Xy%F}lzw`B(gC&K};S#YsfWmMZlh;(GD?`8l07h5<10{G9b%AkCYfvv~tZ(fK(U
zJH++t#hDi8|LAzv7gsGV6cTq|oU@4oCJHUikvQZi;d)Wq(wvhjja2$8H>@+68Zs3_
zH;Dv@jHNl7NPx&#nj?{%lkJf8z~n1AC!cRgcxOu{^D`DBPWnpDCVco1^GePpd>~?8
z$=QStB=TO#`T3kl_(CuVzavM&Z<5V%^^$tJ@@Ke!`GVT6LOqiDyK;6>1}5t1%3Wfj
z3`jj)Ic6P__v)o<Z>#$6c!Mh6&e=$WNRhX5cC-Le<n3IX@#-aPx8}@f0iY3E3zf^i
z=B<TJ%7kufp_4M9+nOU1SA3gLY#`=xTvom1Vs6sC<cl1ikv}YNZX3kz$Me(rcumC>
z$7AC`McDD2t2Z$V6T*(?<n$WJ`VC^1lWJIBZ$;(FLK!jm$()_u!$X;qIi~lIn2ID&
zf;`Kh&Ba5f24=f7qD0ozppSmxD3DT918lQN*K{GPMNNUTNNp(f-s;s9T=*TXM3)x8
zHX}$>l#W#oT;}yszvr}qDhTEt6CNXVM$ji9R!W3hvtK?$Z+&hMW6lZ^SCkGhg{ua5
znJNfojN>tdX9c~@yKW$bX9aBVxmwqZ)|-PwRcW;;ymWw9Sp~ry72co?+8p%Nr&3b0
z7_>QH<y3YVG>AQC2Z^9`gelBLSwn_E(7W5^F*VN)dYYwMAcbcK>}r&~)D1ExpR4Y>
z%o|fRH{b$L(>0lW&kfR&6{M#!`<@%rj<#yz{ouSHF+5h&k;_mM1mmF%`umP~LBC2{
zSYFW23#x|c?cNRY;&6c!{;p~4{b?^(1tBghZ|N5l3d>vi1yWefZ)lJ=>yHJAp`{I`
z@P}!yx)Op}u;ej?9}6xum%jih{8&)&U2mm)W;iyLd^RZBo^LGkR$P#JHo$4*0_L$e
zYjRcKtX8K6d!wfC%N%6^9cinAi;eYxNLv-KX+>sqKmvSKP`WxWi%>$)YctOW?5vg(
zX)FZ~eLi4OP0qryBw4O`J{Ud5J1XutR-E;vz`3?`U-3Zo2jBaA638SSo?+aV0=vo!
z)V%h*cOY$gDd5`~u@ex>ycCSMMxQSvP(QwEqW6&G)UlEu^ZBzGFHw9?zEFkakbGeC
z8cbA?5A45EATsg+|4L02@^UyIlvUX(^zutS7&z2BP5-EZ?72B`-px<WdJmRN;b+_t
z$)1}FwMZ;&F4Q8iv{`B~%9ZT7IVgJ<<;uJTv1Z<~B}i-w%)G_YDEH^U&RZ;rdCS&7
z<}G_JlGo5&h_f>&ny!9&h4+`#&Y+~f-jvcua?}TbbGhD>QVyg+U>%<&Ky>v%z`L0L
zKy_fA?#{Ok@lwU<-GQU`Yzq~x-2r>H8#EK>BlT{D*O>k&um=Kjqm57l{@=)pb1tiq
zJylhe-te-&1Wtu$RfzEXB^X-e%}i(}a>*z8>6Ls_Q1?mT=&*-N#@kPVO8xIqAfi4A
zhK>_cXh<7B391@Bj#vSs?@!g1q28$Ur-jDIiovJS7}H>!>yXM;(cnXc#>k4nA!!WZ
zfgBRVVKt-58(nrdut#Y_gy(R;2c;bIB20M2(fqzD@7?0Eqk*GCU#M^$4Y)1fJ<}~>
z|8#!GFz+^J;ORn}WYyrbv`PLkP>LX*8meoq@;)e=8ampyg$mcyuzIBTwc%o^tVz{Z
zduPg;!t;8RW3HRRp;wZqoJ3<PIV&t$peEILH>PHV{F#xrtc?=y&7m_}y;kFmp29Da
zdZ44f=CGeR(*THin?v6Di%SA=$>uOKJ2dew1Rd{>hBn?Ug%&&-+IY7liT6iC;{7;H
zM-=tU51sPT1H}8UM|wvZK_*OihS}zaHW-1L*X|(%(x&+#D@V)4v$^R=g+=XQap{6$
zHPqu}+x>e>lB(_}o~yQv^8PKQ!jiQ1_DjXvA4gBx+tt)sFPR3KgVA|NqaP2krmX*5
zD(zdWo~iXJ(~Cn#f2Joycov7G8uo1iK~JbJYrPTv69qY%DsuSy4-bu95<0^M_g8x=
z8BXu6^HOCHjCb%D8B0REV+MPOV8`iK=jYauI_p-4j`4D+aIFq`M<S5|MCj^p_(bjW
z0%`2(aKr>z(dRMRYg7N#;0;N)g*I*=BBCuMZvIL0;Pfx3fn&V~%3cVatE^mc`WM2H
zqr8RUUYCm3uTkw|y+!_-LR-Y^*GOA#$GygJa7|eBHrk(Pl>eJXude*%kdJ<3l0J@q
zB(H|fx{zt49ECg1{v#1u{-Z|kx5Xp=7$(N**|d3v@c#@G4}60{U)P5GC6SSOocL{L
z=)9rkjrVG&@XH)=3LO=6h6Bv_4y06P$kr_JTOfYh8Rp)wek%m+x9elSwG?V!AN#E(
ziQldlztw-`$Ke;ruF%;OCQ7^1bys`a?*$pZ<r!M-3hhVRK-$z54%YdNMu^{bg`^bI
zCiz?16<)cCHpxiIbJ`>aV7?V5zAHC>If?P9<d(2#mzp}kQ<rQBIRJ2;jA7%&k+<h_
z6TP0rH*F8?p9!ecw>`86qXDUJd&rz#1}z}zX?vJ5_k#;$Dy}(t)_OaQSju<jAGyZk
z?4s_1Sm{Q0Xy56N*WKt2c~fk}%5d8q_PkzOjHe=2D80;ysg^>wy2C5ux-}DZcZXxX
z=lxBtWZ<HyePPi_{OGS-$?)@E=I{L;%ZwNA3+?vFzS8CW>h9~kiuC@_-lG5!x%)#F
z(b%e6(pO^kpnCp#Z&KO8I2}TS=b)&4mJDKjB|H!3%Wv>5DlR)5M=ew#OVqZD>-Uwg
zJ)&;B(R-=vNNCUFhX~V=klh{n?EAhFtjAQ@P2RS$W1*v6kCGCr$HetE7)eCq3H6<u
zy{>^LLdR_P?5m^kM98XrJ!ZZ-l{_65O^ejAo4wJg(;?f6#M!SFXFnS{Q&o>i-iRqc
z+zV_bdO*5+HnjJJ0BQ2skhkyRUO?RIY&dvoWKy*dw9B81UEWe??YY?HElFJdoVffX
zEW?Fbzl(|<jnv6oygO6Bi%K#&nf4QdG)2yEv!4}6YrrOB0g>AjktH}#xI|x^HC?Uw
zzE_i;9y!%I-9UtAdc@MJjIsU10y9*}t={PLjL4=Wh(e7>NwNc=pO|H)ntZD_Ha#<P
zMp!vwmYGq_NYNTR@*hOKajQ2bJu9-A8zMZjA~LsZrQn__*$S4v&ATf7NaWO7Ig%nD
ziN@4>vL%5N*%<oNFK_e4`^^O&Ns-OMb03DAkV?*tiWWx2r9V`sZ}Cdi@!P!XQgb6#
zPQ`!|#DMc6XMr&w5RqWBgB^&<=0$_eUnwA+n-^Vvg*G4%1I~+vEU*R?f;Qm%$d0v^
zLWAZ<cC57|G2r|N19F#>Q^Ge7i=(1dB{cKnV%2(=*IUi`sb`1Cp?~Lfr4~meW!kEx
zV$~<Gq8TD9?qG-n>i-fYJfyBCBCcBFJ69mhU#f1o!>da#E%1m@mkQ5ing_H@y>N$D
zmR^RlXhoN5qb`f8Yb+1_Zc(2KPfKKHmE3|w$(D#&B{OyE!l+NG+z-5L`pMYv5aD@J
z3@`h2O2w$H>b@U%*AHrq4G$5XRx!M34;EOCHPwrEczp-UpF)rs{<yyi*5%@B1GP9t
zzo%8tJH5f_rz1PL;%qZ`o{q>S<(h}&_l)}fon9{eOyuZmmS~5}_@0T_G-!C3@U2jf
z3(tyz3S_>wLR2tF%VD~=QtiIe^V2IM#|-lv<^<2mh%ePl)0yl&tI~I&re`BZe_Kag
zGTD1J;@dhShp+RVQ+M6v`DM=)`XyJEJQt0u^?roUPD~}+qN117vb(%{Q*9BqAc(6@
z6jxmnIWLN<)=uG<IW!46I$9H5W{#Z(Vyrb0iA%B!5GP#|1ut4B6@qrs_Si`+g%-5O
zPHIWwr0wFQN7;2;!bMWAMMdx8qx%vA)u4?fz4Ch|d3QLe*J9u7FTVNudEdPM9()sM
ze3OS%@w)h(OuM*_iSb`8xW~IZ-5Dz#B0Qa<bmqYDfYz%I@9`SS)<<?42vMk!OzLI0
z=r0+kD_{Hf-p$47uGkHr!qp{i(4d*{&bQR+$zEgGTd~^vYwvtZ+-aJTgnMqzfBRnV
zg5t8xh5E!lH%ooIvX%O9&~2*nN8Z}Zw#XT&0|p{Y+afN8ya5YdlS=N0in>u%z0s5!
z{9|ue&mCe*ncQC^wtPQwK8V!oHQrU~sULgEDPUt!o}!!gV~Yam;rp>gfmrnYDEPoy
zR0!IlJ7bGl3N6|hThx-oqC3T+uZcyuvTAQs^jDg>CNVHy{u6J6liC}VT&5Gv05Rr1
z^l63<AdLc>$v6=4`$Q`e*#pFy`&Gw3c-QClM|SEA5uW{#T*D@s8z6=|K=2IyEuYY-
zizX%etMNbcevyV|Cfjgm7D`Ok1?c!ewdH5tkID|l0X0Bd_F%+WDRTYbwW;KxsECQc
z&l&p;MSPVb!E&uA__N6Q!sK-zMgyA<rGPZ|v&bIy4y2yXB6bW)$N*9BXHoVGt6(8$
o1%DnZ*ivZg=dpq<Nfi7!3cfd~kD0h~`&SoSaiMzP7vAOn3z`Pm;{X5v

delta 47291
zcma&Pcbrs3);>Oc`}R%KGo5F;duBQj1Yu?X35FShVO0zmSa(-<Wl>q>T^C%zb=}=}
zN06Lz5hSW4K@h=<l0*=Ytf1%sf}#V0k_1FV_&%qqE|=FoexKi8Gw0lMo;p=^>eQ)l
zZ*Sexc*-Y@U+m}Ur}XpoQ<wUNJgAI#!yfjaugx@T>Zy>Whkc2>WA?UFzF&OdpXYll
zMav6o{k?fxy`B~?SF(@B>z(W-=Y8`7v8I`>J)X$)eyUsMsh-bd9`E{0FDuiCHQS&S
z`@rbcl)YJ`MOdd3Ml9Mm^LWqadi1t3U7vnB)AKK+^f!C8p#^RW_V*ga)&Z}jYI#at
zSRG;SzeoGhQ!&D;6<Y<CkGKlh-gpCt^b*;uy|v%Rl{{hfW&68M+5x5fWv>>OQXVM1
z>`gRrNGQGRZGETJmFwW)40iqj?eU5kUM(bL6ykcrWey3I8Qw-WStB&A19Fi)_(3h`
ztytui<Au^9Z{ixM<RvL@iw@Qn4_8vd>Qc7xA#Gd5Qm>YlLMn8YdNVgTBy^T~Z|!0Y
z7dpPMx}3fLJ8fjea#zO(o#oz4TdCuN&T{XaU9Hig5wx(n&aU~rHdd)v=hX_Olm?}B
z-ayJBp|sB1_y%i?Xl^~MZn4`xqK)&k+TzuUq?8V&E#Be^hlJ7=?+y1`^HfVw;R}1b
zd0%@y$-PR3weReU*{MHi1xjF#*C@08VyP<c#aeb_7wxI$wO)lcE-}$fwcao<gh-&)
zdJ{=&7U~Sz6V|@)Du>vvF51i*{AW?=#7AR%;mvnYJV5!v8|Ix%Pl57<x1`hx2w{Uz
z$_{zGR>(5xxiQcTqdEt?YBMWh<vT335X^&K^~V3p1lpHg^(OYipS4ivE3bO5^#lB0
zg>A>Yc}rQWt9Ckc%xlD~8DzAF-1WGZb@<$vavca*dfclR+;EVv^tjjbJ0!4=djmo1
z1+IyQr&--&+P}+BdzE}CLzO%2^~W3%DyO~igw>R*z~ZxP#N%2;m$OducoYSNo^_fB
zBoNLzjSLb9XQ`2?EkPPYmUQHeL!@Y&v)<A>t%V9N1PVXfB~NITp6Z|7QoQi4pS}4R
ziQ`2nKYO#+J0vN2Z>q8mn;Zi!KZ*_Prmbo>-N@YY+|#|gms5QBOV4MY@A~W$-FrNl
zY1HA#ZasQuz8WwlbMv!3|Jv<Y{_j^W&gOq_`{(0Nb?xzFx5n&Gf6<EnU}c`}`a-v7
zn`V0S?49Y}1EHgPugu@N_3G92$!<4hx^;d0smwE7pY8oZrdRhTd-USr=-F<6f390E
zNcYb4>el0lUYX~+_kIc#;#1G(djRjTZclf6f<1b_nPDgXqNNHDmk`MyK+oCQzZwx%
z{-jo}TAA*>>_?x}?(ndC#_MJwFYT}0Ug!?t9u_O@u2qtB!mu(uy27TW?3wObqEH0J
zZaq-t$Gi1nl^e9UMiDVn$rcxBQ63UQna5rbL6KU7;vpN{U3>4AQL6NPkD{X4N2&Ss
zWIMwTLDp~TkZAT%YGpI)bwmL4E<9nnsx(f%>|?=u%`$u5|7b&$Tfq`T2?AU~4keI)
zo34iIOE?NB)75JlSyO~3XkqO&Rhh4<$sw%kB4ak2@xD>SuIr&aTm!!2<r+X<Q%x~E
zJ&Fd9*VJecACDk09$!<7=c`^TY#FdogUc0$wb`mVPxVPR<UHujL3JT!I$~PbH&@lx
zc&s$99%9u(Rmmko8MbV$8EfTHbTkiGA{KyzDGSv^sjQC<$c1V;Yh4m!6~6zL%0f%b
zpIE17G_CDhZo?R8n77m`4PyZ4Ej7%8CX6uv^p={fXH8TP3zV?7Le2Zq9{Y?|><O(<
zjkpK~3I&7JDh~#2Kmc;J(@Y=%xmuOM03;w+s|W_4kZm+-wRNhpi4A{N+g*eIMC*bN
zwRKMGf`r;SH5%is3lgonPA%FbTbCHTb=RxvM%lWO2fYuR)|D)@?grkv)!YIK`KnTy
ztjw^3y|f!{1|i%=Q4}=u7BxS}+Z7~i+M<T|+zitx#B5QMCDt%e6_7hr<(lMwnWvYT
zW&i1|Jyi{c14fZ#hng=!9FzgJLoLclY??fGs0|ug=g0>Y1(9TroqbOGr>A<4i$TL;
zkD4#~9YVm^qb9^C0SSyfYQt-|+wk~UtFpy&%_KYd4^6AAbsPqdpjhiT3`i)}UU3*+
z?Ss-`QvZa*9CR(v(7Oj6hk+!34mu745<myZVV2Y6;SFnbYF>Z#*grKpP^TJU>$j+z
zm)zwDYxIKlyYeGWhl2^EBaWYd1kw@mll!>}9v)*0UeF$_KIYisRXk{oV@~&gBq67J
zKmy?yb<aSRL!h6}*j4}1Or`pai$Ps{M$H%VgqL^m8MTC`POy}^_>5XnX^j;aATQZ{
z|D(l}>Ps#L_3R}zpC?aHqMp5^rbMs;NlFx~7EsT6sb~AyyZ@_Ic-r>!N$&s`82x-#
z?4X|Q=PTif2<ZT$pRaifYbe^)heTwsFK--c|DrY|JlN-pQoH(i@-f7x)ME>`>G#$b
zX$NRNnCU4RV2Cf9vpREO6flh4+edpSJ<O++kQYLRGRI-QRN8tKE)5#wNVcwzHaj)a
zrzE5h=lV*^tUI|3OdHJx_SNo6jrJ*7DMP8@XkYyX){|TYbso!3_SL#)#<~VkDma!5
zTJ1%p5D2FF@;2Hpyrix2gs1v^#k^KL)0pN{t`W5o$pvUWZhRmCGR=o^(+&lBXoSvS
z@AlU^q-XdPo;4E_GBbRQ8uKI*G{{$2a)36n!7DzcA-5Pz;`$n2YyE(3f)J`T&!;p?
zeyy<d04-)88lXMwNrA<Eg9M;3&j;Ull*^-vud_!6X@5?=?o)WbL58aMI`td87$nBd
zLiYI}?ZNay*E-5>7m{@&F_}RKj<DRmYp^z2X}jE~G?wO3I=kH0wA>+K-f~|>2dmK1
zNQZoGxv#RlwTC(mGeTHh#gfCc&(o`XN^_}1+3hM{%U0F^cr%1BFKn>G!!<+6Y;YUG
zfYb(Rh_y6^)v&hJm-iXFaisQMV5<)aAQ~D03S)RXGe>D1%D4LzoeCf(tk~`|3LFwf
zZubR4)(u<*4?kkhkJ4@`|HxILLHm)<5VNSt2kl2b#QAPq1*Ys~2S#a6mhYBMD&`Dz
zx35&p-UyW_Ww#Hr_kCOi)E?GrwDv&TJ<jM-6&j&?d@`K?i9+}I>R&7Eq!GHuS6*SQ
z(@<kySo_wO_lxZvquuNceCtDQe;ts0ROMr=^LVXQ`7xiIr@#c%F`p?SGDtuj^C2s5
z$yM<1ID31%*1G(-Q)M5IQ^$QqgqIEyD#v|A#a0Whf-0Y4i3wWE@>8w~`SmFu0w}e!
zk5~DWFIHqV<0=3+!~QivYf*m2RiQeb@nL-_RH%+;e29j^FnH^a?DGj)>*^n!R`T%}
z^rJ6dG%QFU{OD^SVh~6m{7An122FQ9a^{QdZl*16d(nlUMC+nY<`a+s#6_Q6`G5q(
zMIVy#X&CW{c-lZMZ<c-IL~W|4!9b1sjaSw5ur@+d#%QWF(`)IV2bx}lJmT3GCuuW0
zcaGH5dR7o=m3W3G8>Okgzlwu$Mr&$I)Lr0B*OXU)H{a*rA=(hn{$`3cPiZwnQyaV5
z6fS0JYBwZlvIKOIZ<eOM;<3h14A;mN=Gp6}X;Dx4JWcunxTx(sO=g53VZ}TRzI+?k
z!NUbiouS=cy+D&;U*l`M1)6LxkR+sqMW=xT!U7GQw!-2NFl?PYXognpD_^H6ChuB}
z&sp$XF@!)uX&n_?$#p<&V5eWxnwM|T6p_hjd;o0FLSj_|l7zH+^{ozE1<vsyyKlC3
zOVx+2r8Gf(sO5{)P~*<=p_XnWZ6N3PP;1hZ4;77kV=LP+TWeLl)kW|DVXG$H3o@wd
zR;@v$L?GYTs<pVznn&)XQ5gJ)b(o{Q-u@#OLL;u0&!;Pr0mMg|j07M7@sWl|u#i?`
z8iJs9NK=m3P3LM0)EfLNl1n^*-XXW6C|^EAEk;XeJVkPONGm#`iPW7KJh}W@Qx9t*
zb(cKoeFKwt>MmJGF6%T(-S?%q4T!M|bfq}C&Hmj&?GJ$p5RMg;Y%kDFF{oi2&=%+z
z)E|omFvIGb?2DD!?us{E9TPfl>ZZu_;R4WkQ%9!HS1xF$uxi@}S7~LQYFoeJWEQ%^
z)~`631q@pc^QjuuwSZyk^&47qM7jB4btSuTjW(}(r3;Y{h?OoxJ|I@=VaI>+0kKlA
z*T7m~@Jjo`>P|cJo>r|^?{qQz=)9f!6%X<QW2c@Lsg|brfw5DsXlAXUR7+C|!s>o|
z@_Ma<QoY~BC;-NO{fZA20As&?#fJ)jv0rb|(mE}wQiy(K@r~M<>O(F>As`Ovaz(Ex
zg@8DuXRniPSO|zidh6@0OW65>8G*2R&c1V#_M*4_ITs@UjB|Rv({%x0oYNzYTLyq}
zPETd5!37*67}mxc%0%1TstwX=@UK`BU^oJ1ypb<9hCl*lyix3QZV)iz4Ro$>%OKox
zypfw|h#ek?!!5&5nP8}ud_gH$h!Tugw0P8%P*|N}@Wtb8|LonZM=!Qwt{GtIU04u+
zFXk;s0cVOKSCAl4^b{(ZuON|oAR-!k1$iqaB1B!OL>R6y)41YYWYJ7RE+HWdq?ra*
z1QSeze2mDIM&7IT=-t|QHMr8i5^@}Ml}-_LEo=R`Hlb>*0}Upi*E-N30ln4;^Q}Zu
z0rXlUSI@eGBjDkBX4GmOtJk{-w1>9dMWFb)-Uy2|n9k$tdIQ@`{e%&y+9o!#RvS>Y
z$%UX`w#kK{sd$qS7JaSrXuHWk#(X<B0w!%?_wUv2tlr`xc!99RMWC5^iy<dPod@47
z1}4Q<kpH1tXx+W`p1s;@O4VK$18Ir6*TtZ@d9TyT&_TI-4W!b~a0tjAV9USIo~=IM
zBGA-)z(t_&d%zGoz9^N#?*Su|wFc=N0-kxwe)51e#M}Oqp+x!U(0RZ;WyD0(2MMK9
z2BJRY7$6bsP8sE5A|`U683czlKcq#1r;N_OwT6l+B0KG4cRr*ISE~D%(vfsUhk<=e
z=|~`9U?1~JZ&Q%&W1_cLU;`J0p{${Hst${V>Y*-%0lSBqa*+)oU<@^jM5qG^jG-o0
zC0hgrLhN`ueni{msUGiQn6P8KYX^ng@uqZWorm1<CLH>8;WG%ilUeSlwy=7#3qcWg
zvI{{Gcd{Ag>k*hv5qGlL=vqEPbp-);s>#>stw5jxQ%yN8K|*t?DaR#9Xihbqaj7c^
zw6B<AT!Mh-yyDv6hYhc|Hc+^I#jOT~+gGR>{R=TJ5n9%pd8h4(-)X8ITyGjB*1MGH
z7&I<7+Y5fssyr<>n{w&`7hs!BndyK8*k%(GC=xbO!qbmUC6XND9pBuH+bz#({XG@n
zh?x)1xqw;7{RSk|KQ=>QYbrIVK`XIO+2M2A^ombSu{0$nbUrmp`C$W*(D~H7wu#t$
zF^H^XOMlcxRMfiV&`7H_<=zuyNXW#V!g%s=gGSo7_A}=-=56_{)8ybn>02`)q6|nV
zeM^3~Nz@IkddkFv{*ITuxmS;{onPoa`@xIa0#7CQP7P^voigRzZt&4{%Ea70tr$yP
zY^1$z<t?%+E@@Nq!>_|xXrCKtJsNv~rPOElUo;vt5L;)U`Fuc6(Jl)tSVCO`8bvI$
zud(zhPkNyxm+;_1Y9UFjhrN&j`G(y$U*F)#ykRN4R>UPXNiE082FAYju9f$*{ZxV8
zMhU)aVMk##y28h|YF4mC0sXz)3QO)JfC=Rl7NX5qA%tXljinr9ql5aG8vG}A6R-mV
zxiuDIBPK9lp_?I>IcRw)*XE4f1JJtfS?YB(e{s&o1CZ;hYb`Z%H49aJ-$KrRl@zeo
zS!#o;S-@If^D7?u_=8`u(1RO(1%^Sl(Nc3)gCRz3vef2Rvk-DV{FPydAe$}q8ds`j
z0J27Pi={Slc>}x{;#)1X;nge*-EF@z3@Oj{Ur8Z@+3|ny2Y8W@?EIDah_WA9YJGyQ
zaas}c{>PS@y}C%u;=6u@AHmxBS76bw`pK`_B8IW{s~Qzy$$T~ZC%oT2w`#EJa(W3o
zbX={a-f%Sw9k<sK84I@+Qs}sSmU`3GQs}q+S2sVT&~IP-N)i2bz(R?y2}i`hQopv8
zZ`rJf{%Q^W6GI34cqsI1E1i*^h-jgGZDqf`;)#lvd*U~QC9GGx!V~K(HFY%$6*_FG
z>8n}5K0<EMijNpTe`hJ@EtP!`)mzlyf5!;gF#66l0=0%@_WTtiyuyg@Eww_zd!-S_
zT^Hai7;(b&9nJ#w$zMsKRZn3!G`SiK&3fAHNv?@z{o(2&MNgi!)YexNMMs{q)at8Q
zDDp>3ZD-xW>kZ@!mQt2$mAU1)UcGz%Ez|X%-Fw}{&c^iX(s;lVP4qYIh+VL-L2^Ih
z4mOuAS$X}~?M3>1;Y*e;$m1a2T)K={#p58`UZiU&kbH~QhlfD8Y?Y;~49dlhQCNME
zoi5UIe|j-r;fWnFA@gEBWRL@c1l1>BN#{bD2fFp@hNCWinDs>07kDC00ziQTPjiUm
z3Q*5-bu?sO_V;4FUaD`t!jpB#P;d67BFec8s{ayOQmj{|UvhD%vM-U$t*9*al?LYL
zjhqnIZwU{~_eFSJ`L5ESd~9!0%&#x@lR)#mWFJT%49ds$=G`a-dqrV&Fq;<F?@bMM
zWvH@)N#;H-18NAf68ZzFA^9?7i)mm8$-p6igBlHG|4Qh6QbS!Fs?kuAY0G6$qhTzO
z)Z3?q<;(3>Yyv@M7|FEeGVq<@?D?dAeQJ2V>|*TlKxR0}+{|S#Mn|x1N&VLJh<t_b
zY`_3oMT{UBY8h+<jmgiO$eNX)X~yLHig?rTU6!%=N>kA^VtWNNUv&CF0%B}FGJyIh
z274u8bsXDXqBl&9%a=0{n2;GqGBh@^HG)izg-i7|sqy&=-{vAFaY^PTE`z3-z@9AC
zt5XxuEtH`^hMHyq$y9L}G!0|#m+EcP%xN0zh(Lys%<qv<nPF{8e%?ncU8eu8!IXR>
z03fewV*N8cUwI{8wT^nQ6=lk;E#k2$W%{=*XXLBb@|`I02#_=L5k6_JOK@P`EaIG}
zOxmQ3VTrvwrC(60m*mS#8eH_tl6;v-gGAdb$(O4hkib}yk5$iML``7esm)Gg^>3?e
z7lIZ}whKWSo1GsP>j0<#!p<*_^QD(bE%+{r*3&yyz3U>-y6IgPfr@!IU#@zf0)%(-
zvFdq<+W=}6n_N%-efw1|f)@y@^7E<fe6W)ylU4aaehfh*>Ez=WVhv?;CbBtgd%m*M
zZc$%f?XAJTVwH^tfZ6UELiyeH{IFPM<0)Xa=ZmR<P>>35&(H467prVyVDkq)ydz)z
zn^hM;-&$eqOn%-nzbCmTKmn!qv)v!>-Mwdz%vUdt%XGk5e2*uewtF_xH|Y(|<nwJ_
zuZp`x+91C&%&%Inndo^-_B`?IKQ_}}Ra*}BBMqXC7SGV8L;UJ(S8-tIP`}#Vnnybm
z7Ipn3yJaiAiMM8wU*0tV7qy$@m(2_kN|XHZ8U#qBFq8Zx4+~U~e1$g2U-}0M>;y_2
z6g|m*!(G_cvK$sJzkv79@2sJ;EU?g-+H}A2s$WfB@MP>SuGdvh4H%-y@fb}$-7g&w
zB#fHwmuqH_FlxGA<b{NVCZF!lyy_QCP7HB7V}@T|U6Cw)b!DbsUR}Au1llaWdQ&}q
zq2&q}UG|C}*I4NM(1M3*bNtEz*6&9Bz8d`J7)nk$$2F9kbdF#82DAV@$1i;YBn+M7
z&n~!PsB?{Eu4^b~aYN_1hDs*T=EG3-;7xic_&OQK*RmEBv()Z=lfKGRxzw*{+~2{4
zF-!fraDR{_<qt<Fu~*dmu=bum@38&nYJHt2@}3`?=Z9z<<ijttkNwIQcI$TfSKb=@
zE7l}<0KAX=roaOUypIWwwwFMnav%GnU!Zd2gv8iI+4(NN+LSv7aX#W%-fq9hySWfp
z!2QH8vU7(87y8tX%&CUlN@@aZk6&b|4hw<wGe08URZ{4X&;26%ccjpjwFGvR6teTZ
zezoih3u6@U`>wW?58IHs->*JwO{7SdPrdsUyXIDXa;LBS^3V!Q;!^ujlmQ8xulzW)
zk|ajVSN<^1h3F|<lj6x&{zxl}?hoWs@T+6N+w^udb$-P`p`z;ig(6-;2B39*#7hB6
zn-_Kd#I3TW$vu$5*ZGsT@G%E@;?S6@^SAF{4WthDhqaUbyuk&Y<as62>9MD~KiT!F
zpz}=6UcK$@x9NZN)IaIx=R{uBkC=1Xube~7xep=7FGCKo*q?6KJGK15ueRYPh)1Z%
z8Nd1<+SHK3IQBT}R~LD#Yfw`^MVz15!Q1u5kNxDAM+sn}ra$>ZVoMDqYWkBOlMB@p
zBx?GTKPkc(k-Vlq`Acr)HI*Ey=}-O+H(M3F93Wm~f4xI*_V`7=B96)Yyqhliqhj9;
zB+9u+F+`Mu7y>eLm#7Z!CbZ~9f3~A6hdPe8=tckScUbdjE$^qU>t|oOLto&j>Q^9R
z0=V$Eeg$%K7bMK-R}c|<-5^nLzXF_<Ad><Fs6ni*qu!_OAQyoqu0aJd{6Pi?g9_x$
zJ&>eRfE4)U5c;(stSu_Yn_$0omp;X4x~M=-7zOCOB?Zdc1*$cjQiTH9dxDo7>dACq
zC&wC5_F`xKrH*eEs4aNag&69!v_QRw_oU#UCzlndgFI+1FR;Se<^p9qu=`pLHX=Il
z?0bHzdwkVf3a~<>IKb5@joMm(xJ#}fH~`#Mp!WAzJ7{PXkZ<fNP}0fwJek{B`!YSj
zUVT_!Tm_y8wU9uw?sA$HBpPK`K}1}<0EtG~Re)5P&L<0~%|B(M9?@Gr{wXe4@=gYm
zxCJr+011^(3y=Vi3xI?Rd|HsYQ<&|zz^4W2JGcvwfOLUR3vT<3HI|Ol3djYH*^U3G
z$9!FmxweuE94n9;^AJM8#|nzYJsXfH_*en%*@%K^G#@Ky^jjW`@D#;_3AUhdXX_G8
zmj$G7+Me1~f6?>kX}1(Ql|Ee{uNOfGrJOF1*NZ@sQUMPCL@8dBa=M^Y++f60S<2~x
zvOBFm@j?(x&#`|$u6OBj&MkwE?amd*4bcL=xpl5UZis?J8RrVHAu7s1@&mGAXIT?U
zeW)hq3a)w38b?`20nL~F>>HlYi@eqS3a|7n9qsiiltTtWs7b%VD}76Q%l!(`w_i}w
zT0o6E#vb;heo%RIjEg}xi^denK?5ORj470Z1|%@X6k^Z_OKGclOkvqw(o))LCQHW@
zraJOVMg?>OVm#aYKl<<5j(5wTE#~oV8MMVbzEDp0P(c~v3o+flO7{S8S#M5Z-g|bJ
zzv}h8fjNc9;r|Qs3(3{zv(Y{D7c1r$%E=W>K+P|dTa6$AHNOyBjeO=QBnMi=+V#{Y
zmoIX4$e$M#nj*qM20DuhaS;HE3>1UvEMeL+dfTccP6fb31(p;_mjMZcC50hzfCLf<
zOA3+g(S?OVqL#83pV3=YEp-tnHZ64#c#=^loenCbQwXPP&k^8KHaqo<esi_$BGCM2
zy9ks|+l3(!@e8?2*@YODpONbqlEG{2Xa24~>}k8k#h}B8HBLuB2pDS$W!4H3R;;0V
zOr}GlKv?^%FmJwX^wKA(4L+lepePnV6#Jr3`KnN*D?2)9aZiAF_J-&6XFW9s3b74G
zQA|8Tiykb*wuZ|=IbRm4k6yt$RHz&V9$p0yDhP^_bw!6d?dw7$C@u%M-xOl|%H;sJ
zu2A*YSdGyJ0rHrmY~2fblgE!1Dq`0gOaL7%42To~By^4z$`k=49Q<gZOc99W6X(%F
znIcFIO`Jyyks|b=#tx7>oUrfzm+tjEcEa&9aEV=LirfSwN;**}GaQg8=|o}pfB8@%
zQml7Q6h<Dnn#Gkm|A$t|C<s+P&EEdEUR`n8Er*IfT_{flAOn@tg*X*>Sr~^Y<Gh{y
zkDl_>oOe7SppZYFcRT?kFwPgsr2<G`oG-*QUx*kF(f~$b2DjiS7bIF3d%iIHXGHlc
zEGnw-u^}F7AmzjX+UXw>P#PuAYnj`6_3m!3{$KsS-YT%f<OBg&F(e?z6-ZbyBoGn-
zA0(_85<tMG#cF_DdN})MA1qdfy9ngb!(9aO=;48oI4Oe)5QYbEQZ|WBw*v@)+Qb0v
zp9K5rais?TI)+dboEVT%5ORQ-7?1-4Bw!{6Ffb@*2Z@}0VxZ)efXLa2!E^RW0hzNC
zN963217g#XYl)nFav;~1w_}YIL#Iv-w0~H(E!RYOQvx#2mQrZTDS;f{taZR(^OQjQ
zN3K>xjDPu8MIs`<9LVu4L`M;>_i~_p&HvHFmip9y%=TrG*ioPMD=V<0J}r>D<LV-@
zqdq+#Ht`*N?5Ix<)c-$4Vn=;?puJe{O86VFr9R_oe6gCCd37raKbsX$A936n)tP61
z(I4*IcAndRbTfNiK;GjF@I%abffC1&Xoi_bjx+{qQXc}?TY<dg_KgGekP>_=;0syn
zkWKmcY4}q1$YA}0)Y5?5%mNervowIQ@MkUq&sfIV4$&V=FAK<>OPpv!W*N!s6F?x}
zW^0D%U!>j+$PGH2SreCpuz*2fu*qgChU)DywhKf%UN*`6K$gPK)&+1mGdWCuRtc;N
z;DG2+=<?&i^=!%r{m<$30eL|bOz5sBXP-+(@Z-P_SaPI3Km9>K?f`-bp$|ytMIi)o
z13NTQ?|Z`rj8vNDp-Gl*AR#}Dz@FNNfxO)TkCktEeRM4QVF25x-BAYL2;0o2jne;`
z+8mI(r(i;Ta{!0hcXAnMY-QJs*6&Jhbs7U(S&-QpKw|L{*}?a+cCgW-_5SG{0l9q&
zCWLkbaN>1H2%*V#u~uXBZ!)`_{=tS6gmzJry-G)_xb$&8kayC)ajafXkDL$SisJ_~
z_Jf!Wv_3)QCHtAl`mIV0{uK*!Jb;0Hf~I&U1|&-96D$ny!449g&?gvtDJTXzG2oQg
zgbu1zd>BX$tmqr8SAI1MKz)OiH(6^#+yKmKvxCa(K{dHJWM4N`Ut!dMcC4V;Vs=n&
z69oBeF*_)?2|&V%*}>@Ru!7!eAO=~X%?YaWgW__O<e|{HxZuLWvSi_M)Vv^Fj-p8<
zNR9eNP`NExo?(BRt+#m$gh=)A2u8dS42sDSB*5MX%E=KV;>H_6IXM!^C&xE}a&nX$
znjGH<VsiWqFAWgLr{?H)R4)n2a2w>a&yt`Fw;)mMlAsK?AW0{PaJyVI9712MJ#>!#
zuF<8|#h|&P*2SQ?qc$iL*C3xeYJ)Oy1qst@gEDa?QY5amK_sq6gnt08&VF^V{y$1}
zom&c}*mXgf$On1GR2M7~t5T4#v@VEMDGof)vXK2YD6SNM;FK8s^bGcW8<bZHKtl7|
zpmU`lNO|*#ptw>10yRG2+Cb^^3Ad({KA#B6n-LHO(up9h6x@x$icQiVf_ayNY|m1?
zW8jCNJmba=BVAT)woI=`oe9dLF)-l@XM)JQZ^anI79Q3d>_5x&-=xk3<$(*BkU2-4
zA!I<EX9pqE;CxVqNbJxNH;5tFk>kLi3qhqUS(UksEuMfi=@W13O;ccr(<tnzLH+`D
z4qOD~qP7>=8*l4(q%H>Kc@vnBxfsOiMPQ-{F0rVs-<`P>lo1crh0LWOlHS=7D1<N^
zLU~`<FWUNRW?)VT`!RQ+TS8R#d93AH{hso9AvxZ_L~ZAVOp!l>gwgXtfcgVh!NUdY
zjkWqC6$@My8lnqArr2`{@gce(gguwhh)yU5#w=!S-q*)gEe=Uf2NQ-b4oOc335dlZ
z>7^i1>f#U@;sK5T>Mf?N(>qtZ6%vgLSQ;E}g-ZE_c_K+DgnQx?z(J$&Y&K|}-nZIz
zOXX{Ykj$$f0|+}L@124KgdKv{4yOz;L?*7XZ(pwmJk_gQ49culxfqmLtqO(2vL8CY
zSQSEy=T{&@<ofIEu^;GVo~m^&291Grp?on9LkJk_LiL;R)g(w@tP5S&ipQl84S@~p
zyA67E`34YDhMavvNNy8?4V4WcB+<RO<rvkQ*+U!ke^hLCyNPZeZFakfZXa!?ZhA*F
z7!sWw?7~KUMfDEXP`Z4y!|f)T<#vSRMavMse6)iajNjFS7Tu3Oy-A-}z1xML%SXFi
z2)cZ<+wEz(e6%}MQpO`ih%O)P35iGn0<E+sBqIe#XzmHgNC6U>dqPg62+`%E{UPyM
zS!Ro_wcYQUKzEP!yC%@xqx~TnD4+<S{UHPje)$AD*+)Zp=j|u9;POe}Xvi1fFMeRt
z7<(ve{x<!0>0==|(!hjsAEV(x*Mxn1OZPa-Y}a2;9}mgnUoatboLYLX5CVCc9o??)
zPoEBn4Mk|uFgYE<avQ4&LV{6eS=|nOc<QW+L;>O~AyKN7Pd@%58@&^$(vKmTbAbt&
zA48a&&eD4<*r$CdoHxooxl=#mDS0W3_gLzv0Bm()7bL7S%<b`Hp6k)88~eLqMOb*3
zzBvuHcyR_o0P7dVj?8SKgq9n~e%__ey=GuohD&UILTF$Z;c}-C0y#8{JDzJjnOoS?
z2emSGc(=YV4W2kh#;zq7!6?}xG*H=*?5$7qZJCi_8R@Vw389f;M7kg7m@6FC-V7r<
zo$;xDS}%Gtj8_R>fwCH=iYyH)9g^cb?8Nu_P3+JY`V*bN5g7!Y!|0`9dHD$>3R@b+
z<tN&@0g17)G+f-CCn!WBe?Y-Y!|`_fMUgOtCYwz-px;z!yPy>F?6AD~3>kph)CB7i
zur-3$l*4)F-ae?m?++de8!2lOnHnKePq2@_(>LFHA}lUH5fe}+!WprD2NF;x!Z^4k
z`#{3J6XB*0@Z~&_1I+|+%J0X?E@46&-t@ixaHrFbd0-OPsWV7mo_6XC5}2o*Iuj}C
zeA=mVg!<<!)wxwG{EyLd)`g}5&pI{7Q$U}knh&C5foNF!C7k!7{mXHEpr_`Su#rQq
ztg2C}`6YA`uM{Xif)qUj5|Ec1Ye53?l4C7MSbNE_mPldkC9+n4L;Z4CX)nR)v=5|V
z-AyeR<!x~}EcXFG0{wCr`vCGO&@YFJ+VTF!Q;B{#T-??=POlur!rFict^;&BrGFn8
z5HT89FH&L@LzT1<5oNU9>9l^?Q-goSq8Semw?;(r#Wp5Lm^UKQP;@9rls_VZ7qw{7
z3=$dah)A>15pmo|4CG)?85t3`lDLdW%SJ_T1FSPI90KDaN;3Hy9Qo2K)@<7uy<<68
zqD^DG*5e{_QU-}q$3+l1$Z2BKzZ2N4XZ43`Cb%lpvlAk6>W2(eCPWb1sF7ntv4|MK
zM4^#EI;GKM%p&r=BRu88n7=>DM++8V=tlD1i+Gan=Vv<53+Ejkf4ti>y}R~!yc=8e
zAD?d5Kc_GC1>cNdq|hZkwTKUDcI0P$eECwR6fjZB(uf?%AW_QF2uAYnxC$QHZ2m?4
z4;8kn!pEu83`Js`QZw+ooki3RD_HYi^yw8VTpenM6;3-q2F0wPcHo<*MMSP)mwwSF
zw_M}uPy?)S8UQjR6hQ-QrBP8F);2}*enbPzR@k3k*P`~pOZpN|Xj8;UikFs)slq!V
z{H0~q)?;X`cR1L11neCVxtR+R*gGQF%sobaSPW~m+K93*q9*ZvZF;qFlfBGiT&vW8
zDY^$DK&W-B0||s$vW{F3BwVmIQnn8+NPC9Fphc9rHzJpEl7q(D8<9&n$pX;c2$pj9
za7!R?fSj@&IVF2kHGWe8S}Y)od5(7=B0s7C61oSdD`wE?S22-??T=MsmZ!^MXDoq>
zv2-{hH!wh=B8MX-Vx0k!lp;t#Xe@)oSUwzSAT|n#6eH<yq~ZP6D$41KY0CWG-lZAs
zJk{U3rO>g&_mO;YF&jcC<@-qPMhQ!K;rEg1wme5Erf_&NB61WE&^#HDISNQ<o{Y#G
z1tc_2Mw}d_n6klh5uT&m0s^+2b8VolwsR4g5#uS4&P8OB0uo5)B1lsH0Dp>ywF{BF
zfvnavejmCJ!BogI);KxQ<%oTYWfXckU5?0P5o};xj>u#YB(N?=<c=#yihz;u^}O?m
z<TK3WNTiMR9W`2<#=`)6M!wO*({?~qhB<Iin*mYTH6TeUD&JKGi9!ZM5#|=sN+yAq
zMWT7{*moBg3zX3KC~kD~FLxx!<cU%4_box74JJmV+kyn-#He(9kbs;Rh2vwYQPl*Q
zHQoL!Xbka`Pj{8bj_FZ3GeZbU)1&ADikk@<@Uz&+u<=m!ET<-5q9(JV@*NzIK$sQH
zij@UOAk2z3Zeq<7#e$q~=OV`Ip6dB7207~dsJtDN;Ep;!8WiV=AW11&mbSK2cuSBQ
zE@D>9*jc^Eg&;3n<eEWVxF{-L1%e777DZcM&%H1~UbrMGybuI5mqeu(f`sOhsPsaR
z&|E@Ia7h#n;pI`0DR(J0v<}N%6UYgdN2L=cxDzgqN+$#fpyg3G;UnnMWLR4n&HFj(
zN#4Wy{MRgItBQ?wft69bpxO*|Oj6ITX8CcWMT^x=?|=!@R!8Mz3=)W|qnM28o!lff
z{Msl!e$a%?@ER#LJZ{8Wf+4~f9`om>cpniYl-EXaIz$_L&_>^WfJR78@~~zj%o27c
zZVWC5$5AKv52Esb3*u1!Ac~9|xACA2Y7?8EFxpgaa@qq-w8ti=JwO6sQ&g^hK$1=r
z;pbyv0D5&BOC^on<=dk2-b|7QlWkF5L_v_y*%rk%8eP{&QaA2o=@O$|^-i}`T4L^W
zOQr7I8I^CyK?MjqqsYlmic-;?pRg$<#_8%$TnJiWe&V=el6T}M(V)mNK?35F=(SC)
zQvw1@%v!d&)cE0+S{H)$j%%a&PHWSOvo<Qe{RG2l#aSE0d*VE>CTS1sU{tv)`G&&o
zAB-2&V=1G)=Mk_(Rs;dS9dyD4NWdM8mhhLs0Y|IRgVC0)dB_FH;o5Yh7s~0Wczpex
z(zUQwJ;cVPjTY61+yYD#a40HY#!D)+Ry`DzFXMqk0f(Y^p>rsW;v}tAkJ{dhG2Byi
z)Wx91>QT4lX|Z}VD!<GE9bg=dUenmRo<m@<`aRp4HEt~bJ}NJuB>5`!`>5Pg011`v
z$wh>dVUc>0U6+HCopcMOHxW-p<(r5}g_fr$qiOL9AV?sbq;bEUru!tliFm=DlQZs9
z+Fo!m=uN~6ZtK#Uh!>(I;&UF*0mg-BgKMk>21ag4SQ{3@o6fBo7){j3uo&i#N#qA5
z7_!>Pm@<y_YHUob!GB`pfDgElG5LlJNWhJZ;SCweA3!317#WL<i-}EGVo?5|jf$yb
zV`39l@}M_5CO2Uv3!AWGVzdd%ziClIV{~dvxjWg<9&)V_RBAvtR?zUD8j}ZykObP)
zn4HEy!eyq$!s5;ikvxZ)8jFZK3X+2uF*Vjg>`+S<hiQAK^|ELKNX(33^*Y>>>HJhT
zmMAyIRf8eixP;FYGh^~D21wX6Ggd6Ne?S6kW(*74=4j_qd~+w3H=i9XH<|@riy3}?
zGolo&?3=?HR~TI$o8wdtOaRS^$$f5+0GboSJ~w4HAW^wFv1konr4WhAp~vUMV&Zm$
zWO1d3{%gh2o26vhTz0g=NS4oa%b`Y`8<PPTGEkWtlL5FCA=EdIHLo;os+s3h8B7d{
zc`-RDfCR$4m^>2&350nuY;w|>C`g=%&Wkx`qC^W*=f&iisAS<xbY6_kM0e0O1+E<}
zjpg+z@+9B$W^V1)qq}{q(pc{aE{)+7ilJkC{7%m@wx+o;DZMNvw^+eMcP*pRPYWT~
z_BMOIg>feJc1+&Q##I{#y&c0KY{G#+*=+E2MtRDP$$QthCqvvA-qy}?8B}UH+kKr;
zFTFe_H#%_31v1NHSnJaHHY`HCf5$FrX?Q&i-iaxEH;=fGdMAccwb6()pwW73W6I6R
zzFvxq?d<<;W!&qj21|TQ0|HQ38<QW?0Ex2K#^lE|h(w*%#_%zXn>if1{e5P%F>X!0
zACvnuxQ_ye_hXn7a$E-Sd>#9rHb(vQx|rN_!F>|QtRvq%jC(Jz3of<YUf9O?R!MDl
zk?4CH+X?9wF2r{Qm)>aHmf8`M=T8NS37H)+oIl|cY5+ng-N}k?GX9<3iGf2NOH9b@
zj3MM~L)Ze1U|DOwd6UseX<O?`<wL5Lq=XVh%i0(|^he(jfeux@HrDt?YlZ+p_&j8{
zZENI|)FHRQ{Qx->YuJdtDNsNG@@w|r_D1{c*D?9g6)++5bqp^#(%S?D3RXAYpaWQ+
z_PDe5Lwlof3Z&D4wEy!B;n7<TxbKCt40dA&<K9$VOkTkU6Ebx%%%HRrSD@f_-(fbp
zgV8Q^*u|ln%ZCXEyV#JyD^N$6_hzGW`iP4Yg3J-ZL7GfLcq!_%{g0cCMN0Z~Onwap
zTu7acAqAC<iT9)~+PB_@#!O#y8#4l_i`1BuWC9DXPQA#M+-~g5yjY}ME1Nh9p%;tF
zE3E<a?H)ww{zZ8s*sME@{^9;bI7t01RQaW%0Y%QYd&G4j(Bj)YAb~NU2>nkloABF2
z1KI0$8kMPmMe>zCFd;Lr2(R>&a2Zg8*!eq+vecj=d4_@uLc}e?8A^RFgU%n!uIp$t
zObsrQyMVX?1ew7_*agHTB9w(8H-tUk(P)(#QY1YaOvnr=f@kBxCS)++hO*5ajb^E#
zE)ET{p@bvK!YCTX;&-8}VMTH`w~&vbVMSQ!<69NL!6+Ke{&<(sJTu&_JB^~@RQFGC
zT@s5l?X9A`HTJ^0jNL}yts<j{-a*j#XM&coQJsyB70dAHO=^2$LU&nFw2?!i!pn-T
zyTf`9fdY@=>?>{Kx5oRP@|8sz-=HEclvWlM@wb|Zgwo2QHuusS-XQUCHT&@)<Ic*}
z_@12v=G>wf?{boX%Icz4cUf;?R3cJn9~9-iYxn$}(ZUn_pa|d4Sz8D!{=Vne_M5*q
zZqZwQU8M2*ImAT~Ul$efz9$l3Ul(CWjzTa64Wr*FR_;&sX~LS}^CEWDpN)UUI=)jZ
zKmQ2<=)Y4eKmQ35`tKCC?nGzkY8loL#d#--`5C%eMh#GGl!~Qc87&~z6pN2Kf<UjX
zDVDhaNXV`!mP<pBKwVRer6HoXT1G~#Wn2GY)N8)hRpG0LV!3++8K|r+#_rL4x=L7v
zHq*8jD<9dJ=Z(gAVWU{i_;>(c*<LKaat0FM+lv!o3j!oywijb=p<D<ga-r?T4L&Ls
z+j+zgn-DvS<#wKAp;dMkV>@pyA{+F8vbPxT@lH}Rx88Q&1NNqW8EK^jSR(m>0E*q~
zT2D)ly=47tTB4U>TxeewD|N;8ql*mOXaWQ61&*Umi^(sG<+P8dQ2(+R)4s5pUNiZ!
zxTp?R(=j@p^Xy6cs#yJ|SY&XL2fahZGJ}&WWN=>>JD&$EqtW-Rr&z2^L80-!EtV@&
zkTB!hV!1K}3Ak^Iot0@Bwe*Q%u`<0}V`yzpxV=Ct(-Xxq34tVlP87?PDM$dFD8|Z^
zU(rk9&?Anw5pH?Wz!klh;&5@gqL;!AmqBr5SX{N1(G|Uv^VSP^wx_?*($i*eTwXL5
z&(KLj;&{h}w#5Vo<qVDE&6xev>?ul^$Hwt3ji(0~fArMgU(w!p0Q<(qWjY5EdSm1A
z+5$+l_t<!JVqCO0F?hy2F0Qh;Xm81b-uSp|Z^=S?Pl!`{Ul2AR22G1Auf|pT_Cdz;
zo*EF273A{M;xc1SahIPKN5)LO4iZ*Oi-%vmVui?=wdry7l`B>_8{#wKT99X-qz7YR
z*vvR08{K@9EcD*2xaPl>k`VCFc(d7^LyY>5&W_8$1SYz1c3gHNNEkRfF0Z_T1nTTK
z5-iGkK_W$&9nan^3*o6Gm&n~^mGLq_&1GAL80kmnx@FL!eXd&ujhwl0`4yuSU$oDS
z%Ztn)QO4YO>Fu%%eua-v<7L0GlDrH|IrG^aLygkM=euRl@R}c&C&?+k$e$k%iQCa2
zfiORgtW?y4ZduHaXKs~c(BL8)=f|_RSZ#P2pccfHdy<XWJO8UUVkd?g{w`pMMMsK%
zFm!=i8jYd_ad{sQPf^-}I1)}#8m>oyY~-|>PnNbI-uNzl-iC%nPc3E-4>Ptsy4Wp*
zM%ZGv*=U3<j>{1S6%?{Kj(JZMLN}fl$LrlItK@t-baA}?JywcW3A5)C)_=H>d31?e
z23^@$;+8>s3QOYhs~;)8r?4cBd0do%FCXD)&Z!9h?h&k560dg`y^@J~Kwv5JjxZ{!
zm%3%pM#Iv$+?Rw5%2*mNaX@J&VQC!s?GhwOfIxz~ob?!CEPZsj3qi-;%Uv^RD`9y&
zERO4;0*K{t<aNSK6ILvb<959m3Z@(#%j4HR$WQQ7lpwEQFOD>-t5>*XSTJ)%Ty9rD
z24$>>H@HE9(pJNYcvV|#4P8=CQTn{mzA(~Qt904uV$ccs#<<)$fDkY?#^pDRKmuc9
zyh2<n00}!c#+!GMcILxQ$}2a<TRdtVp*b)`XXu~U$+5=&c)NV!mO}dzpTy;o7eXlI
zleqjY5J;5rNgOd;v<6=H0hzl`mg1MCd=jtM$=WRf783M*_Mr*JL!O#_ZYi{bu`ix4
zR?;bjb};tEQ(}JzBud#Am-|B?QOdq}o5w_C2Fb5n?TcUE6%!cVkry1ga<wo1XcxX^
znxdrtK>Vt24|VU!R?RgFZp0ImjYr~zD3B=oKwQpJAW`-Ks^MN?KP?F2O8w+kg^liO
zwzgYMGP0gOfaMI=0Nkg}bszd3Q=L1K=zC0cam-be0j0y*xADA@36TM%A^B|_JE(kf
zJWUzUcX6>f4g#p(Ik6oiWWS5c3<xApzl$RSs-uJ=O@Z~S{og6ZQ%c3zxI75}m)LPb
ze0U8cl+MN@QR@rZ6iZXczGz3M83#QT7hNU7y67rVkiJMtuZWUB_P290j0Q?||AcIV
zG~YSxpOAqbBry6X!eT!hBq=43jnf6OG-dUJ5<F#K(`Ff3<)DP@3p|42poHuTkWd_y
za59E8O(!D~JY(nr0yraF6KETCglhst%@GM1&>#$?5eeB1nXooGk@vRjh72S}CvX_a
zyCFl}FfJjw0R&LTCFB$f60+kGvKv4GbzDLwq8Vzr2?@6CA4X{#5YU|9YEoZJNXUE?
zPoX&>fsF2F^0Ex&qc10vS@u1z8UOOs;9ucgcmSA}ooayu%*zQmy@3SG%Lz<xG{=L)
z9RG5nbXLO4w^E4#fvE{K#s?_TA`DDRAQ`0(vr87<mB7JCLcZPF@(LH)GZOgn!v7J)
z@R^xVJBwsA0~55l31y-Er$t8EQv(_ngCVjKkg#}eLgu0%0Xa7zb5W46cy6L-AuOg`
zlo&iWnwL-)Bt&i`dC;4mkhzg$AvbzGLAlW$itZUoi`69wWf?1-XM9?N|C~movz8?Z
z8PgyKla?fkMdASx&`T0BsRs#@mLwW1gGm(Qi6N5uw-Pd`mn<~dQfkK!>Eb{ZAE-{`
zZAo~N?|SIP?4IoJ^NrQv6$!jk*9q2TDSKR%P~K-9UN`Qo!GEHGz=t)f5;A!N32Rm*
zWbz0S)~rfI-<J(U4BkMi6Y5&oK#~W&HBJLb78>Y1-avE<H4ER-)+dzB2{p+I7Z^9!
zfN+c;_gtTlxg#V2wmu<qN02aLeImU1iV-q*{2-xzc*O`OcifPWxg+U`+;L+<=8lqu
z?%0&jaD9)0VlJ$0OXTg6qcI0Vwk3?T7>zj^jXT9?ybc6hYo}v0NXYJVMk7cVy^}^G
zz4(%&k@7Lyu+V7I@#BOHiC_{p!QbNXkqlHmrp6{i>V>sW5_xsfkb02(B;iEodSu9F
zGAw|AA)h&hfQ0O4jv*j{`k50J>X9L}GAw|AX05A9_S8CI0Z*Y>OJRX8^y*PqIG9kr
zp|RD#Q-gm+f8hc24mzU>B=inCqY5PY>tLej8`)pP;7;>pLj79ym*he3E5~Uh3r=&0
zI}No-{jhc<k$0T8NwHV0k7AEpiIw%KQI5&p0fDL=b4&yY*<((lfJ9Nps8O)pqShz-
zzh`xC8qHgNkE2GOPJl_=gf8Av0tuDx6F7OGU1PODSo<lFH#+G__Ep%Ik6BT>%MxRm
zC-74O=gV}W*nrIWnblir+*I+i0}3WUe@@6(*+ByIXX^4v6nPtvA${y&ON|mwRUaJs
za7)02i}p#%JDVU$Dk(qO3lbQ8lK5yZjqC<Ak@jPUmKpa~^>Yy@aQ92fDG@S2=$DjJ
zB1j<gOJYiF#}PmcWY4^9bf_NaB2XY5=ps-c9hj5{gAI5f9hgLFOOt8?zEzeK>u?aT
zen?Wzsvw~`Bq?WAkSJ|P(wS8okfEcJd{(^`1ZLGyt_?J+j&g0FS#?xW&Z-aw(x@b6
z)z$Q_T*I(7Cz<!T{jcT5Dm64GiO9#N)P~eA^OJl^Z36<3^Kr_@TN)%F=O^Wq3KEd>
zlW>z->Yj#ZHto%%@|K-kZT!JggMS@8>XJ8;@)8o{p!a4{-f{tn5%6ZR?5(7@<w6V^
z0qT;ZyyYS}=(;6IdCNtz0JJ2DTQ1Fc`4D(Ji9_mona<C4WvAB|*R}xd7(u=Ic2b^E
zH{`wgb`sNZ7p@DWchC#T`{{(b0qgai(WV6$jxu%VJ4ty$-H><aJ4u{S(+iXhsY6#L
zm2k2FOMQr6fH<(pC}5Z0GYZPV)n(gJ$F5Aus~%86fh&`U+W0^Y5YWzR*bQrq>szcz
z%8S%sLS;>|R9sgB36(WT9PBQjoUkF*irU7cvNg$ej4_+ryVn{ocxu3KOr~Yx#-yCg
zAr0+~NjaH=M5Av^7HvhN(_~Hz9(Fb*)h$UenM)q@K1|BVT(S^$HYaH^Z^;e8f^tVv
z$tD|S*w%GMvuY4xY&PUSK(Qk!-$noln|36N#M`+bfxRP%T?HB!4QbK%u^bm5FfKlJ
z#sx@de(a13kkI`2%D8Aqi^b2xxVQxb`r|X#23j+I=8OwG1=45ExBv;H&uCoSgI#yL
zLb@-RcaW|Bz_>fGFNwE?a@cUjOO&{X%+ec-`l<a%xk(Nt{B3^{o8;KqgbZN6U|lyD
z^-^CX<t90pkokgQ2W@Wi*C7wESsRRo=>xKA#DvTN8V(O*U|xeaNt1csvBMjTKLidX
zjRYMosn?JN->^;_ja#d}acTx8YW9s&GmtRho22{_CP>umn<O^+DT-f1_8nn6HX6;V
zj<^UEJC7vu#Y+W{A)#baWLqGCa3qOr>sF2cJC8AZ^7J>=$6N$*-D634z2+JoJC7xU
zVuJ-F5RQ=z9Z|PNVeLdRZ!}x8$+$Ckg2uvDN(LKI<$hrC4~^|rKRCc(0{91~av)*a
z4^B`93E&^7VV~m&c=#jBZ8n~7`=g6M^Y@P~0#)wEq|C<~@yh*30pK%=UX7?1E+_3h
zn-ROpFFWHFY-nAkexOw}NR)dyiIa#9TnSWP_NT4JEmeI>q|-OzS#{qM*(4x=(6=Ng
z*5M#Yrv#G$UCnDmv7<lRx7Fy>p}&hjn^^r_1d1K~T?C39{RshYng9W^gG!Y0WEJyl
zG~%q^HlwmV7-9(GF}iqANxm3!Ab~Zgq^yyw4+WJ$B~6-IpNp<QP#IpLjAB1*Gd`=q
ze+~-mK@BgFQ)DB)%R9V8x*ABJ3@<@9)7l0kg3Iud`lCujT22g+T#hJ_FPusiOdDB(
zS0(R)cQg)b<4W?Tlz5WWncw#6`ee5btm6)&-S5Vg;JugxYTB6mWI~A&O5(C=FMOXZ
z^V<jR6!zf}?87q={6M0X6H4Sv1rqj6D8WpHGcVxa;Y4<Dhf!8F(WxPrK$z&%5F`ne
zNN)iNgo!2a76b$!z*#1<8+ID?+fH^7s3#`72vp4E61jy66(CG5L9jbWYmjTP!&{Q~
zHk-23I1rpx;#|ACmg@K_YyY|Na!dRVz*n70fdt^IPNhHs@KvhRIGPWxrQ#OY4}WY-
z@Kh{tm8c#IO5|b|LQq;zf~=K7?zL2pMI|B?0fFvVR3cLmkkDLIB2y8N&|FmFq$1Z6
zxvWH_A|T+#%bb<~3B#8;Eddfp%SvP_0+OpD<POx)5=}4>mEdOj{7;Ml-r&X(eCwH~
zB2B0%Hd9l~s@Uw*2TWjXb{YXBur^a8@O#5e$mZ=VSZhqL*j^$pxPnRC5_!QDBy_fy
z;DYNa^7$sz2)o$+T4PO@T}~CiL=|>9RR9TyT_y63KahafRf5=0Q2`{Tu3aVaXTyjT
zOZQzR_}MVrRi{Fr@HzW=uW_>KbGHz>oA`N&yx#~J6!LkA{M9g!q*H=l4a12d5YWW?
z*fsl&JFEA(2$VkVE0LRXkO9KJk`%wdKq^4kSAq)+ACrqTp*kJ57w$K9d#Vq+7?e03
zcB@Je;&6$)TLm3p94^8A3;g^FVW7a1_UZ%1d!Fi(E(XPilP(4&A19sB107(Tq|qZA
z0~y0Pw&F|UWc4{0g08ilE0K47oA6xWTuDxBl7a-pxsvNza>s2#4gQmKToBOw$#Gne
zDEueKaX~`!rz?)zgmQ(;!f{!%uMMsGvTFjR3YXnlP^xg*@mnYY=yD1C_D;BMQygWL
z=B;DBzBcZNyi|(&;xExW(iC2+4JuWJ+uOg!%gZ(RSA-}$0QjI%8A3q<d{C*ptpgI^
zgGzBSK_L_*Lg=8<%<xjL6~(?OG2m15v5~>0>abED-{!f(h3=42<Y-ZB6J22<OB)&}
zr8MnEZWziN#U8CQs;Wl0Mo|JVs#MNZP5DR}RVqK70}{ZaN-^6#!Vz!@X)OD+&iGT!
zSQmkuYOGr=8Yp8+<;>8O50tT`m>K925=dM^8e3X_r1&rc(U=%u!r0OVPaqLBxd@*t
zAoiCL9=hxT9?Y0fs<cS9%G~#Cx4(3ImMuAK+)xFU)3!8_CX~uN2J$dsLTR#`4^NO>
zzgctswUVYZkS4Kfju<z$pX4IYlsn072pUL}O68;t6(CG1#gt2LQo$g6q;py+KE^oj
zh_Ryv|2cNhP@3j81`VZYrSgN`&;rV|Qe^O=kLh*!X{Fb`a;1;yM2PqC^ip-!l|GhS
z=+1EaSTfPaGlRU3`wGL*4s)1()aX|=$F+(E=N#868k}=VWjJoi2j`qp93auf*QRv2
zVm{k=)M!^V-$kIYIp1v^%H!vk2E~y8RAAfuQXCIG&Ji#+-(WW%GrCp3;Udr&eWO&a
z(wp)z`bKGeaf$#E2yc|)Cx<?uAk&n_=)3mU$Bd1hhu(ED=pyO6E(Q(HcT45lna}~o
zyQO$LbDhAz;m-S|_|()=Z{{9+WcF{*{q3qBSe$U&D7pUs^G6n~%#~kRY$|?*u-g-v
zuD$4Y2wCU*&8EM{mmKlGm61QCSdqB}Kku5s4>RHy7@xpfG*4xE^~`j29^+>c`Oh;x
z+l_v!k$w~Q*`Cim`Bdg_J)iBCd5r(WBYu0aH-6TU{k_ge)bxH9pU2Jgd=|gl_(BCf
z7b$-Q@}A#5*g11=r_N4QGF`72ka_;8p1r#9-+1iW`#GTU-;>Qe-}AYrpU8Ck=i}XY
zsoi@4?J@l3WA99L23Z#VcK;hb3)hXzv*;&kGmTI!|CQQb(<{SH&Gp3|$>579_-Wd%
z&ph*V_inu!S2#XzVLYLsuaI!I_e<pgY*T)G_I|1S><>tE()*>QDT~Fi-lC5ml;&M3
zwXZ#C#QcHtr9P7m5PkSW0b(}0_o7iz^HZt9e?Nnmn5lm%Me>3dpFpDfFO-TeS`sBl
zKaF`JA$y?|iGh#>^>e9w6%+6MLlz|eiU4FO1Nga=Z!HooOuTrd(EE8X0nM-7&{GIs
zEXB%Q0HgB1l*%_s@t!__LGoi9$kP3%UrKQz^9y|`sywWXD$AQ~-~Eg6A8%k(8S+}%
zKPacljv2qlY*jv{OlGj)0clK`%wR#ns4-=z4lTLM$^P-|29Mdge7vhdEim3yq2N89
zROl-T<y6Os>}8KxT|UuOA)tw_3RQg~so*jmR6tE(nqsyupW>=eY@On&P;8w-Dil4+
zDYi~yy%e)u`7~FBT4h?9DLe!+P?=U%P{=>HP)_s5Om;vq?<k+?s!-&dStd7JAOn?|
zW!P|ejF*Bq@EYsvHJ_+_%~heW_F9?Dbjx{Id#w!4GTlPkSA?~9%JPobhrMRX7ksA-
z3HN&3s8cJb@ekWE)7)@v<>8b}e!&IU;Z#DrzyuQIA5I|&T9411sFh*uhZH)}YH8l0
zH25LKSBGA;64zLMOesI7RQhDD4qAL^ig@hV)@EJH^C=wA(47_W2wn11O6_nJ2gO_<
z&dhw+R!O#vwTHDaU-6ZXO-t7R7q*Q}OV<DirLk%B051JO2M;H(KUSNSk4;F+-C8h-
zo0ji7fP~6~G~RWf^c5r`_Jnj$e3^<!erP)(9lDVp+DZ-`+D=Hfxt`yQs3d=y%)YNS
zZz!ManntBhPRj!l$e^6bX$-6m+%!;A*@JD(TW*<}mhqyJuN9`IWm*Ih2vgHxvEBwr
zI%#Ae^qw<Jg@4UTD@~Kk!&bI4OWBr|rpYd~HUGB?Y~f%Kf`80P%cK}2AZMjh;u;1>
zK+a0zJ>K3N5$-pe+3n1KRLyn~Xwf{|MIdjSoldoo?M2==JKd@^{{mYjWyJGX_x5Jn
zs(CH~&AId3YLRo!OUv~GRDduqEk06#T4Byzzz(%He^a%<MW8Dg3tR-6a~GuLt~6AD
zupo^Wmpb!Wpa&PRZXL{rsu#Hk^sB9lTm;IC7p3K{bS0m27p3uoPFv`XK_$((EA8_g
z%zM1mD_smqiC4N9H0Q2#t)Mw~C0Q|;=G;oUP_fSLdz(4bQ@zf`pqDq+xfpb#Vx4OT
zO$qDBjwN)XqLOY@Y_~h!ZZ1`-x4Rhh%Tn8247yRVJslReUZ4Yv?P=Vw9W2}g_a%0*
zn>w09JM3~H=xYPJTnM@@u`3-GNn$0xF0m`!tOb9Eq>?Txf0|ZWC$DAgJK~p7vv-*#
z9l&s0j4nldnwIb2KpI$|rsHC<0uttYnno%@nRg}KZ}>c|+?Z@Cu-IK@Srr%#7A3%+
zr)BaAX<&VxPPUZJMwc8uPq(?j`Xk4}9f$qw<Xz^YRr_58y4SGZtr^{G*q;uIJ)TO1
z?ltUBH!0^I?Wm+H(FfU(yUos32VDewctt(vBG6Av9ZbtLAXI>GFpc+XX!fb33)6>K
z@*cBw)gc!l1cXB_0{v3dp|o7yKm`bg()g{b790V$sq5IVd(4(qbuI$^LR6iL5C%eB
zTHZmb<i8MAm(Jv@zjFlKv_8r%-edNvI_e@sfN<1BhydZJTZ;&6I7+qX#u0D}`#5|3
zUh~PS<1RuJeQ`W3H>@j_C=iaP#T{Q%JPL&4>B{ETgB$_BcX5i{+sXWG)hQPt1{+Sf
zHpGB%%B@8V2&bqPw0Bpj;O8;UumhdUyQ|N*2t`0R<02FR;Y?aCBA^0<Gih9yA0=G9
zm_Bgx)P3fdTh6->#eg{PLKFkyd|EEbDwSeDoKNTKTZ8GMNTm|T5m^R7^@5jG-*5K3
z_W$p%k5^c1;r(Vk_R;-jBEQF#jL~8%9x!jV#7~M-ip=x}&GuU6Zv3Qz#qN2~Y**l>
zph!B|qzBF0t6_mNAmXsTPe!JYFb~%E$%MpfpCDm<pA7EY^WEc01z%klz{)zC+uILt
zA#hNt4#>z0Sdan4fQ)=~3nU;0Wbo?NO02EX0C;6`N=BJ#H~Fo3ldmiObu3B3k|~)h
zlT#8fQ!;Yp1U0}+$zVf()^i}So|}@XKQ$w^J&7S!w=ZY#O?cXHt5iy`ip%f~w;Mpf
z$Qc=#bASZ;jEvlH0}1pQ8Em-i7ad)S^d^JbP1{)q+qj-R@Q699Ef|ier7-n1*VIyg
zz2=%)3b5D6)VJuZ-)6Wrk-_cw7JoFCD8VHe9J2GDHfu&1$1-;2QFB1`G6xz=*tskt
z2L(t#FUu5(%`cFEUY5aD{5bNaW|RV~w(Txvk<xaxi$U9~s~z(oL{b^~!X`*ytj^%1
z;U~(kn&Zc0GkLr1{Kw3HDuJyT<X8BXo!XqN+rh>>VLn#ABO{N=zy#EeOsUvk2MMSh
z87$Q)Rcuby>|)t&<`ZpqImUnqV|F>lfFz-e%sD^;VOIt@$57g-Z4uT!%iv6CT{m+`
z;Ij-idL9OF3$mq_{qZm6A1i7zGBpDeNVOT6|9}KiZ3g)d{}uBVWXu6p_ZM?d<pEcR
zN<Wa1AB2DmbPi;&JJ|(=Ux(wMOy0!|`|e5ePeq5QbP9jhp>(Y-qa4eq$*!#HU(5vi
z=Tqi`HDHMya0mdk&ang}Q0vGNa#fIU)w)dd7+jT(|A+xs4Qq!p>d}li{*yfD9m&Y!
zKgq(T!?zjQSE5*c9aZXhMkz|x&#;c&&5CjmjuBL~;~9Ad2}yt*&)^J_&XcaA4Du9v
zt-JY~$4^0@Pj_HK<y1y~Lm4DgPG#g3T9C+dPGuTB$Wvw_d8T?Q)A#|NsY(uIs;4rY
z?&D+bI)XSW##}29@a414m;;I8&N^cbB$stIxv!&i^XClT<o+`VPRRiW5>E89<3u2V
z^s_VIKmzG!8gRIp;lr1{E@kriWyL26X==Qb@g?|DH$;wfIioZZKVJe8PeF@!o<O3N
zE>i>Cj5TkFTBi?d_q2Iys!vwF_5&tl`ed^?dc_4Ypk87#pEf&YUdqZ>?Z6~%79(sr
zy<UWm_6*AAjbZtJGp9udWqtgc#Xfvx2k-O%H}?$dI#@4f&-~4dGo^>wIt4CI$w>xC
zgR>YO_{u3rSTvM9)WiIJYG_uj)WL+z&@2{T7=(}kHJokjVLp)>o)zJan8eNE-19ar
zgZ3K9?(J#bo*J2z=ci%usi7=l3%)Z96?DL8_Et~x=FDgphZfnR2?symuBa`;+RNFz
z^>*wT6TeUSau%_JA1Ab=x=qiD%Yq=#dDFAfQ9+^>)3b6(1ro+g&tgfnk<!|hRL42?
z&(E44daCDSr2~KqSDKTRVG$%rWs5{g3KAG|viRwmH3r9kmG9b~=gbaj^}8+xEgs&@
z%B4z6?)~p(<!{1+1jf5r<Qp`3v?OX(R-D#=faWUM3iJ%6ugc2F10<Jq9JwX6+`6nd
ztpUNQEA=2pUYC`V9G(JcT~<zVAc3?l3rBv5nzvP0+m_Ay-p>CwzIGYfmNl}Xd0SEQ
z?v%|70+2hM<^>7Jolf(D1msR?UjDL1D{9_7_V@p5cJWm0ahe8PRB%sL9*%${sjU3?
z14v-($>LrbUUgJkkuU9KgKErwSMPNZsB!mZ<%M&|0AX*oM6BsS0%32~IoN1L<RQEL
zizW^>4!IcA%!jgagB(J@IFt>FXa$m#vRKDa2eqPBu9F=E0-AMB2Z4lUozp=ep;?!8
zI;a)xf_x`C2n2w>b8Vnq<?oyh!c!o9=X4NAAbm$2ggik}TZgsN*}MVl!<Wo`k<(fF
z1PP@Nt<gW)*{pJbE$?RztHFOFMuQKuvsoFVK?3b;R^Af<iHYKDw&+4uOccc66UDi#
z`cqa+6p{zMAG30zkSt6T=d(0XP`ccjn*W!qa$oYc3|rUV?9>H>NM7&=HT=b?AxJJN
z7Y`tT{YzH9wE+^7z%SWMCw}LXNO9WsOE!D2wOdpc?tq`-8eo1}-Zyuprer|hocsVu
zYu^8Tb2yNtZyC0x?(fff4>UWs?Vr117xjMsob*A+0HJ?Qe)$6=>Ev3su_n>>UYoGS
za(SQH+8{IT4Y3?vIpmS24GoRSIdP{71gbjOF$yFgC+B430SU;-ISh@x3an}aleL*S
zd;r=r%zW5WgMUT0;Q{n!=H#6!kkFf%lXt2>qT6QX%3jHdJ5|J>Zc}IF<ee(XK|9UL
z$vah&1)y0u+^ND_geV^ZvvaspRmSgB)ebl7mxFeUpcb8-lXt2h4Bgo|9P>TRbwSN%
zO-7hK%ICW()P(bMa$~OzZ^HRGZ0udbRp9pv*@h8j<Hr`}<VRlH@R74HC&wH};4aL`
zvsaMthK0G3-|&=xNS+cb%$458Qv%7Mlwe`*=3Dscz737G#q9o(=8e^hoz4c6xH%aI
zLBi6-Il2A>iDDP$aL6%`T&xYnmZfadNON%2QWt`DeU`cqwCl4p7Zy8DPyxi!9Cn^)
zr>+g{`n=7Ck1{K(-*ypb*XL~)fp&e~&V|L=2P!~#JBO$@izcQvln$-7e;Q@J>S?~(
zZDZQ#S)G$Rp%8-7>KrCxesQb~HhQ!TIc1BzeT@0Krw0Ez-AS7}8*(xfKn{8va?v85
zGlGOqZO9dGflpD+NDLkdHs;jLIS~pZ4|<z&G89M_LcxbQ3I!A>+t5DI_8foXgDsnD
z##(}d_5@43=>Za^Y|qK*3?v}8=bUKShW3bd&*?DU^!$Fe+jO)=wA*bu+9KMWlk*r<
z0I@qK6Eb`V@UvXr*Ex}p(LTXvIr-_?2o2ZIbFBF?{TlY(1XD|WjsZZ~sSl4Z9zLg-
zaToFte4vkJov$aD_oVjb<SYMRLS}DHT=0PmsQs)HGdrdB=VUepCUJAf#{R%@VA=t;
zl9`XB4&V)XSr#2M9LOQ7!$l$BU}${FT1^DbmpS?NJeZLAGKUjIe8mJZXn;d()<m;S
z=1@*%kYGaQP!1X7Vnit)J_L9+mp9n{X`)%_4WFf2)0^c{s`WWkf-T&p-&-Ff>IPa=
z93()_QN`&s{U}xZJX`Rx**<kXCojZ-37PXWFtH^G8BiCPHTC~hb?wnn6zP7ZnT&Mp
zb%EhM;7p)<db%4EAPDCDc0p7guCU6ouK3t<(feS}dhglw9&bVj;c*Brff7%63Pd7a
zNL(2Vcq9TwLEsXC3#*rx2nY(gfCyyq{=TYe+Wl{SUw_|M)!(aXx~r@7iSe7>O@T;M
zx~cJk2RGg^kXNkGAB}f-*6AT%v5<Aj1QYK3_CWsa3QT%$4^-cl_Yk*!oAQyShCS%k
zEBT`<_0m|Sp{9=@qP0o`(?<+I;6aF0@urpfgjkiKrn4Y|r^>)|7EffrgQTqHiB<Z;
zv1*@(zAdjN9waV!kaabD!76=ltj18&SrEZfW1s@#oep^LG<7!re3d>teYSDOLbN}_
zYy%eBN|SJGV7R~tyvB#F*58RNFtFN?JkgUpvCz;4N>2d7*uZj&PC)2bXyCqSv+|zg
ziN*Z+HTpxb#a>@P1kYmX%gcfXXemFuMz4r1HIzqt3QsIG;L#Gn15a>1ZLMAw<DUJn
zT_7Ym*$<1S(H0!BoF7`Nj~}$$Q2Pmh2%hBz-td1z(~s;(c!d#YF@n+T^zx~HnD!qp
z^3~JAz4^1R>wCMcFfbhvV`4Vl<T^u)iNgTky>*7FLx8xcb%q)f0nxX02F65snwm{_
zT+i=bujl928)~2i5gO_ZRl5O+$xv&r0HL9t?v)B}HpO5ApSd1|x53vy(a~V27u4W^
zh6cmT7Jo|tp`pRRS{$)UQ8vM*)OYLk+F)jrp++iDA=G53kqVHw$lZHr$jB!9rTC_L
zy){4Ow@cH+l%byff(I&6MpRBx0ihygV3JC8Gn=BknYT3R{qDnW2sSI9(<KNt8>(Ug
zLa^EJDrPp_-A>-MNxwM?ztNGMeh+BS+UeVl2Cbcjs+(YjqMZinW)*Ewl!L-)1ipuV
zAL8TR*1Pl7m#|Ibqz3(qPTh_g-oJqya_?u#y#Q$7Gta$%Xy7x?y?|)oGjcC2bIKvR
zALsoy>knoe_eIE`#|`yd1w0TrZs2J~kr07DPw~Z@^^)>a-d*L01ze}Ry8?uUQ-+#S
z0z$(n15?VaG|$Qb44*T!uZ>W2J)g3<bBZ6>qQ6uDk{lbs0Qqx<8XEy2f6h?TWI&9K
z=Zs!o8**$Uf*2dm8=;Ga92*r4a$gy0Y*ZwSjTa1WY|No3xs3FWc1!22@N_1C92Id1
zow)4z7!b-X-|=w{MaQ*z_&8W_&9?*1YOeWqpfI`Sc^4v3agDr-<<Fs9e70c(7V<~l
z)*tS6!{}_tWX&aSb|`NGKw*bx7(giO@Vp5Kg&pM0|Abw0$?BE-kAK$xm{DmeTY^Yb
zQ|(#>2$4z?-;U6$tX#^@8T_7i^obcWO!bftM2O5V)u!Tr5Sd|O9)#i#5uh5r`W?MA
zqsDKAJXT|>T~onBOeShLWl}C#c@FQgRUa^Tj;ZVmB1GnxDu)0eGRO3CD3|QJz!ZO?
zM*={@0#g+rKygtOAV6qZV5%engr)^1%={aeIWH1^#SDCC2BTvshkEe0Q+j!~SIo|q
zw09oadzmSVBLFln^KJ_enwOcXI08cRG86W8aa(z0rse$8ZTh_#%Y6~D_i|HZ4|pK5
z+(h<_5hAd69UuIzJ}$G)7a>J;o{RE?z3a$D2k9MM9vQqL_13%kA+4anvjM2+X@jY3
z00<oorkX$ll8}jk>jI@*9(kZKwS9;FFTwIgUk5#mX!LcEM;cA_))O+&(P&~o5^0+U
zkAzdEw!{2s+P+u;I<(+|OkO}}Ntr5n0ih*js^kSk@}|sQJ4~6pL=efl%?xcfW%4Q-
z<lZ$^@+uONx7qZPH;>Bf`$1DYqv1n#>fyofd(nk!=*9b9bOA!!`*)%%k7gcwWOVT-
zTl8@09^WYRr(ln76#7%J#|th9LeU-yt}kf>&X0sYHUlRRU4^nj54oHc=I^)Yt=&F0
zJEzMK%cl@Ks6q??`VV^M0)+m9UWfrg|3L~dikEzfj5hw<E`3~no7Y1Sp`p#|As{iC
z>ev84XlOGrAE9@c`IO;D_;<VXCku}F8pw1<O!e74c%b2knUHT(0iofDsg{4{6FMrb
zJRAU$M?EtGLh`6*W<bH~C2>B5-EnE=asYu;5(DBcj{A2(!FSxVGp<6@akBHap0IO4
zBs@P6cq7&4Lp{a1%};n!n*uWJqJ(_V2mqCf5-Jh_p>k0|WiKF9E=s_(`{+Z+0=nso
zsm+J<{XK?WOsKL1Dv=X?T`?B{gwVwVK4}w+<qBZV@Rfx2L+Y)w`tD!_e#)@N1;|}V
zsIUiw+?9k1dq9N!l|-)}5;E+GAj1A?B6K|=!(P!KcP*j9UXc*?-zO;SS9KR1$M{)i
zX)CQz>f7^rojwIXKHDh}RiVyORRIv4s<TvO1cdTB3x5dc#RMQaRc9G1E%^?O2<Q|X
zyuwoN&<e<dYb^N~6ad%OSa(cCE?Z-%3XZGLzQ*#LUqBVS-ja_&0idYf?<duadcU7k
zGwS_*Qq8Eh;QWh}WQCFNn^s^q|I=0dLbo?9Z_Rok`M%K-zUN)O*Tb2O_*O}{4VR#>
z(NeAlgu+G(t`}cK7m}~G^0M#sW0_lh8S?yAOPA-{fCn;Lt=@guJep7zQX)0;(bx6)
zna%h#OSMCqnytIUdNtyKOtXdcYBcT@5_(S>kEj2D`t+V>J6wX`d!Fq81*>PfLNfa<
zX*)jVh8`~4<(UqbV7gtN=>VZ<muEUaDB4A)TZ?V3LPc2bZw0=vg3*!b{J(dk^-lfI
z4LvQ`t=00rBrYN=9#B^N?JYe#{D5Z>T!QWco)rP1`v6&SGYu+5xc6|or5&?E(Umlh
zdxMvD=v5UUNiTo_^6i$&2|&oVTPi025q|AfuVV;5dd5KnkrPL(&{0d~grY(2Q%mK9
zA|WUKVtGSB5jp2`%YVi(92CSVNOCp@h^~C@*&7flKfe>JMFdYvdzS&g`lmgE1H#~^
zJ%a;6(`nD(fI<`or!UHi@utrT?BgHb)}Kh6wJ-wEmP^H0t9HTCE?FTuX5=nlxmJy6
zeB_V%wow<Y&`9x2O<uy?d~JowenLSb-w?%9_noC(gS!9nw80fbS~`-wH2QD<AWDBv
zuUMfXUm3aKs)b|BJ!Lm6?e9>A$GNI+C~|_ve->nI6*n!lkWO@tOnu7=z2NI3<8@d#
z(b>~?+tR9%^2A0Vf_kM$v>Z>8V8kCSbv~n{KyPJIodhW<&^tXD8jy2G@yw()2a2Ef
z`iYGVh{Rvk*wo=Q$xxx+Df*{8E2(y^66z>3W+&04_)}a=abKI1BL@I{T$@yZ3yAL3
zCRO<WglKJ&Mh*)6Vv40DsSBOhBf+dCz7R$GlBB91V1m$+B<ct4lUqz?<4G-oHBMu%
z>rR0z*dU`}&}BUVgbtom^#l+)coOyGM_Qv;3>e;$)S6P58QxBtf}frmiqS1eRrkRM
zHCvLZ?gK*2mZYltfJnS8Nuwz#>pl@=-ET~y?$4wZYQ<E6T2h(+#O~^p-{QAJBS1@1
zy`cdU+G$C4l}QGOc3P5{dQkZ*rd!+1f8T`-$lRS&i3lP@b|=-K0SJ-ZNw4q~Q`YXS
z-`Rx)3-|i1(x2wN{@u~sZm)lLG`HKEL<X+E8!1?VTuTNPr*3z}k+D55B=NQN40?WB
zLJt2nsr8Ir<vT|+EA@Z9*`#15D6(4NI@Erf)Wv#YVu#vqleEJN)&COm%vJteU$%bm
zRbPgDel@9P`{04h)g)&7b7hm1E6G$&6ssGC-a^}m<TR)vUAL0G#KT8|kh(?g`AD?X
z8E=m&ZEX?1){nLJsI)u(9A|}755QJshcct3d`*n?;Ai@?oGcJLt>pA7yO*sRA*WZ_
zgEGXD<P!2{wH>-QnjwXsxrdoqAjr`Ummyqj_mt1R0U=y%W8Dw!kWoUOtg%B`(QGNa
zADcsFfgpFq#$^cC*nPzAjKmG$8XIp?Y3V@;xpcN2vZEuUaA}NXWPl(Rn$u+n&$heE
zSGj-?o^4}wA+2#Pp^5rjUWfevvgX=2^HSQ6=Hzqj7!?LGC(X&{+WCdbOn72A&khau
z%rqblGl3w3v_yOjG0*NhSP9bu`+0WOePS7Q2|Y@jPr^fFXIIBrG7AJxn4a3t_l4=H
z{d^Lp4G&7_N&7-OG&EWwh3`&h*@HolFEDW#!VB%*@(dI}2rslVhp-LwX<lh0yw(ov
zPraDV)_01mwec>U&Kxd9*oN2H+6F$zWO)_%C3k@U9op8}U8MH`p>3Uwr7SeJ14NFm
zv!feq`BI7q;$6*p8!Mh^{}x3-gs!*ol8rWuQY3nPv)(Q&Vpk{}ODR}4+1lvnnP58q
z(qxw=1IfCBYjEx+TfOxK6ufFbb3pWIlZ`J;$WMUq%qDxpgJKgNg5vW1qgWM{)lw>v
zO{u{a3k9ET@|&RGYqC{o0~4BPvelndK<H?)@h4R_L63`@?0A-HLcES?veSpM4qALx
zN(Hpl);_UA(Tj}lsMe#Y#w44ZRso`SOH@i*{q`uUTK)DYt6Hf&X=W;=t#<qqn3?7<
zXh6<kKC(mmY&nNfG{}8yt2vA!VGgs`ra8<>jI&xAPKar<1JgOrU?(DNc3MBNW~CR^
zt;4o9NUT{&0HQ;{B2&`<VYS0Hp3W?U5rJ{_XsRufMS`)TwkB3l6BS%XZLFd$5lleG
zxHg29#g5r(Q(PSJLR1@nb?BiwPH&+#SI-P#!xMkCwM?=v5yA6UduSG$jrC{1s48b{
z92a>*ZR^}I1kYa!KoYfp7$9)Q9xVP^5`@+>_Rw<jkAUdz89S?tVWSdYnEp$CJB#JT
zzV!P=FBZO}e#yQg;?DA44MX40`u(C83umcc$QkHC)i}qu4P%AzbGF)H8bt7%v+;o@
zwoM@>gvzB<&->V+VEmG;iF!a(a9y&oMgC!VhbRcwQ)wgE1TFo#-zR#xaGm-@e<&b@
z%)e#xm$KQ>_$^x#0Z&wL-LkWD*)7S1H))mp_c`qE@k-~8Non`zN@wUWR4*-577157
z*owF|myL~7JNU0dPhHEX2-G;*Y<?-16;8k}S&u-6{c4=Pati=Jn778k`vHnhKtyMa
zW6pMD5g>vn0<#=d1QZ25n8l~(vF=@GImr8K=q;q7x|XlYW7i979hDs*!bP=?%0@t9
za@5j7K(t@$;APTU3TT}8v)IAb@5l1ln#f`&EhYlGHwE-7xPQ3_3lKVh<woFu=*=q*
z+(hqxdQ&f!@FN9maBPXAiBH&w2%aSl3Jcaq0|G7OI5>HPvDDWisH6w~_Q8XmEpxQ{
z2I6bfp%^?D6tYMh1nG8MhK^+p+&&8{h`^4(-jLc^h(cMg!9k`__=5_r4Gx}+C<vt+
zoZ+KHG~+7OiVe<)k@P+v+%Q!=50|lwSiPeX0z{~&caRYOCU_9dZ}9PDY+C#cN4sC?
zrD%S`$<1R+C~kUFIB(=9%h<B`M!zo<&Ks#O6A?G%k?>m%{v$6fXA=@{Ir!p+CgbJ!
z<MFnmrJNAEO?$nTt3Mt@OLcjGy&Sy%&rYaR%$nsj=zPZsP5TK2x46~8KMxv?%P9_<
z9c_ohzj>YwuK-5>L6BR10>S{zPJcO;146jj!Llq0M?i#Qvy<GR!jT9f9JhPns3_>f
zc1Mj#ibP}5c8X2$2fiFp5pKa}{=4{}MzT+z#!p$jaRD7_any&+fap+*Gf<Q-^nl{C
z#X*^n9io4rEzYoA=nxHwxQ-4*(EJBZXb7EjrG*}dgg<fuM|k5X#=CyxU^~1;G*~@A
zLA*cp_=Bu_aNK@J%^^WWd;1-=Ul<_T+wWlhPNNebO3r>KBG0}ih-tUr=$_C1BGp2^
zJ+*x_!=^s%zFNACc1JzLe?Z(uyMrghQZ0?E?N0Ycgx7GD)DoqK+%!~Ca9i!pFt2UF
zgtptAqKDXZI(-1=DV=ZvSDj$=JWd~&`Un2l#BhZF`|nui)LRd;!@({m9JP$H58eDp
zzF-W?jGc7U;Q=6`g_90mpJB~zS|3W>)BLkBY;ydxSL{Fp&uMbN92%|qP>!BUO&rU9
z7L1?sQWsPrQ|fM}`0qoxdy!X;V~z2Pj@o=4L@-@+u)srX^xlUu_A(zgp8aq9vZILz
zgd`>GWs1PvQWH}03NLz;eVBg5(d4qvJ|ZQrICyDa42S<B629&PIvk$(B`fTH-NDKt
z3jJSD=-+U(TPpN{5osXE$sHi>_lBd+zyL&_Z#Z}WPmu<QNW0+-yrn{)2qN@vdZDi<
z=<ZD~^c9Ih|0ae0WH<>&Nd4#pX1Se$(J}IgbMa%WJo2NHW{Tq4mt0fnYQtr51w^-i
zWdQ?31C=g{26o&{!?{rShs{qs#&TlQT`gNw9}vMa-Noxy8cX|<FRJ*639K+y<*Et=
zB2isbC|VHEmmD;MFP^|kV>4WBgwjI}n&IZ;lKsF#e?a)(Ca|JdwW|s_h~TMqQOIdc
z1rBMVbzx&CvioB*T`gbfp^7=vEh=WTLIL}iVTj}FCb9>N8lQ(MW)1PY02hvogy*_}
z1#U3<n>#kTi(9{94@YpE$^hZdk>t;Lt~Q^4{X82{0SLXoa%DRpOf%0NDE~|W;tuDz
zgYFgX1cW>1xf%0aIj|BzxU<$(1FNE-SGBIHWQs)Ytaaf|99*QO;bVv;ZeShHd7NF2
zEOFD~!i!Pz;!=1`c#;412^Nk4ia!o%xCpgNU7RY0k4*v5Q_g2R!3tvB=OHI@;<-og
z0KLkOKf&U$R}mb-uu<W}SKaI!#e-X1&ihRQ&vI8y9C5l6B$vCGIGREaocJ1ld=j%_
zuX&EfX-?pIjT}u2b)w|NI$k%4Ju;xqb2NzHsUt_r{=nEP;5~lo3D##I{R0G&qaV&?
z0_zHjt#qLdgWpPC{%bZcw$fFTChQmlo|P`@NJ8+S0IuTIzh=qUDpwO{2B9A`lUwCt
z#h~QDL~b?zn0QwECZKuTYBIq9p$F5rHT>t3nGsv#YI2mv7DwP&<Km+**>z0f*7C8F
zVWzdNCO&9GTQrGV>*9kpsRy6Lz0T)BPyBWNzUYLG*WKKF_6%ZlR3u#Q1~%~nliAae
zdKdfsBTGV~C@MF)+M6;e0bwX$xuFmsEVa?SM-(n%hRZg(C|p!z01=fNUHeTHl|&Fx
z+2BQ`qM#oQUQ{X)MP&m;<rOSEPQ%$q+uXn>X~>{6A>Q@9&izuopJb0}k!@at_M-@W
z_fCYaehLu^C?gaX(ZstHeKhyN2}76$@ZC?bL9u4f^dN$#nM{uvE_i^p^Sh_8lK6I4
z%>_Xus!LOL8ZP=#ooPw^>l8LV7;Eu@0aS3cP%xATCdB9m{PU+-S^NXf`29qTen3Gr
zU1~y*wx$Z7VV#2UR=+)p(pG8@&uOVWSbraX>RGnk+~;b!B5gnf(>@m`A&!9`AB=<#
zx`B3BsyLkw*pt?S|MEF@U-yILQJT6xNFF`pYKL8ZIhWmE0Su)eNS6Y_IEOr!0^$}A
zc`gNnOAopBVdYXH2$!~bE>#qCsm*h#B9Tkm$ffU*OK}X-aX0WqYTWNwz7{#|rrjed
zO@H#^37Arj7l7yvu$+toLh%VQ2&Hy^a^y*V?w{Es_DNSwok0Z8NtX^4Bct^vpPfSX
z418H^-%#?!T|M};scc#dL^<0Ai{OFC6d{3oKFx1WWzWP<dnwglc=fc4jYR02z0r~I
zSvP=5!1HWU<gANNb0}R#lX1_x+679N{HgdQzmozTJw5NL{muc=!g&|V1SwGfVb$}l
fbwOE`2*Rpgc~(^v^ztjus)|Hb{faMof#v-_CAgJJ

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 3a66ea6e..17cade2a 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -7482,12 +7482,14 @@ type RequestConstraints struct {
 	//	1 hour   — "stock snapshot from the last hour"
 	//	30 days  — "drug interaction database updated this month"
 	MaxDataAge *durationpb.Duration `protobuf:"bytes,10,opt,name=max_data_age,json=maxDataAge,proto3,oneof" json:"max_data_age,omitempty"`
-	// Maximum forwarding hops the agent will allow (Agent → Broker → … →
-	// Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the
-	// request. Caps chain depth so a request is not relayed through more brokers
-	// than the agent is willing to trust or pay. A Broker MUST NOT forward a
-	// request whose signature count would exceed this. Absent = agent imposes no
-	// cap (the Exchange's max_intermediary_hops still applies).
+	// Maximum number of hops the agent will allow its discovery to travel. It
+	// rides only on DiscoveryRequest, which terminates at the Broker, and a
+	// Broker originates its own queries rather than forwarding the agent's
+	// request, so no party receives or enforces it in this version: an Exchange
+	// never sees it, and an Exchange's own cap is
+	// WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop
+	// Broker discovery, an open protocol question tracked separately. Absent =
+	// no cap stated.
 	MaxHops       *int32 `protobuf:"varint,11,opt,name=max_hops,json=maxHops,proto3,oneof" json:"max_hops,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -8060,12 +8062,14 @@ type WellKnownManifest struct {
 	// values from this Exchange are denominated in this currency.
 	BaseCurrency *string `protobuf:"bytes,27,opt,name=base_currency,json=baseCurrency,proto3,oneof" json:"base_currency,omitempty"`
 	// Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this
-	// Exchange accepts on an inbound request (Agent → Broker → … → Exchange).
-	// Every signature counts, whether or not it covers another. An Exchange
-	// refuses a request carrying more before it verifies any signature, with the
-	// Connect code resource_exhausted (HTTP 429) and no typed reason. Lets
-	// Exchanges publish their tolerance so a sender stays within it. Absent = no
-	// published limit (Exchange applies its own default policy).
+	// Exchange accepts on an inbound request. Every signature counts, whether or
+	// not it covers another. A request signed only by the party that sent it — an
+	// agent, or a Broker for a request it authored — carries one, so the cap
+	// bounds a request that a party forwarded unchanged and signed again. An
+	// Exchange refuses a request carrying more before it verifies any signature,
+	// with the Connect code resource_exhausted (HTTP 429) and no typed reason.
+	// Lets Exchanges publish their tolerance so a sender stays within it.
+	// Absent = no published limit (Exchange applies its own default policy).
 	MaxIntermediaryHops *int32 `protobuf:"varint,28,opt,name=max_intermediary_hops,json=maxIntermediaryHops,proto3,oneof" json:"max_intermediary_hops,omitempty"`
 	// Exchange-only. How to open an account here — see AccountRegistration, which
 	// owns the contract. Absent: registration_data is accepted uninspected,
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index e9a47f83..4d67b446 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -199,7 +199,7 @@
           "type": "string"
         },
         "max_hops": {
-          "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+          "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "type": "integer"
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index c2ffe5f5..adf4c9c9 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -203,7 +203,7 @@
           "type": "string"
         },
         "max_hops": {
-          "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+          "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "type": "integer"
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
index 937831bd..0054696c 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
@@ -76,7 +76,7 @@
       "type": "string"
     },
     "max_hops": {
-      "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+      "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
index fd07be05..2d61d429 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
@@ -78,7 +78,7 @@
       "type": "string"
     },
     "max_hops": {
-      "description": "Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+      "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/jsonschema/fora.v1.WellKnownManifest.schema.json b/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
index 4fb3bca9..90db2e7a 100644
--- a/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
+++ b/gen/jsonschema/fora.v1.WellKnownManifest.schema.json
@@ -181,7 +181,7 @@
       "type": "string"
     },
     "max_intermediary_hops": {
-      "description": "Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).",
+      "description": "Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request. Every signature counts, whether or\n not it covers another. A request signed only by the party that sent it — an\n agent, or a Broker for a request it authored — carries one, so the cap\n bounds a request that a party forwarded unchanged and signed again. An\n Exchange refuses a request carrying more before it verifies any signature,\n with the Connect code resource_exhausted (HTTP 429) and no typed reason.\n Lets Exchanges publish their tolerance so a sender stays within it.\n Absent = no published limit (Exchange applies its own default policy).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json b/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
index f3c6e7dc..6ba9a179 100644
--- a/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.WellKnownManifest.schema.strict.json
@@ -185,7 +185,7 @@
       "type": "string"
     },
     "max_intermediary_hops": {
-      "description": "Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).",
+      "description": "Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request. Every signature counts, whether or\n not it covers another. A request signed only by the party that sent it — an\n agent, or a Broker for a request it authored — carries one, so the cap\n bounds a request that a party forwarded unchanged and signed again. An\n Exchange refuses a request carrying more before it verifies any signature,\n with the Connect code resource_exhausted (HTTP 429) and no typed reason.\n Lets Exchanges publish their tolerance so a sender stays within it.\n Absent = no published limit (Exchange applies its own default policy).",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index a872d4c3..93858048 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -869,7 +869,7 @@ class RequestConstraints(WireModel):
     )
     max_hops: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description="Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).",
+        description="Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
     )
     max_price: Cost | None = Field(
         None, description='Maximum price the agent is willing to pay.'
@@ -1707,7 +1707,7 @@ class WellKnownManifest(WireModel):
     )
     max_intermediary_hops: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description='Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).',
+        description='Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request. Every signature counts, whether or\n not it covers another. A request signed only by the party that sent it — an\n agent, or a Broker for a request it authored — carries one, so the cap\n bounds a request that a party forwarded unchanged and signed again. An\n Exchange refuses a request carrying more before it verifies any signature,\n with the Connect code resource_exhausted (HTTP 429) and no typed reason.\n Lets Exchanges publish their tolerance so a sender stays within it.\n Absent = no published limit (Exchange applies its own default policy).',
     )
     name: str | None = Field(
         None, description='Exchange-only. Human-readable Exchange name.'
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 68aed361..ed94637d 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,7 +48,7 @@ export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_RE
 
 export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
 export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
@@ -152,7 +152,7 @@ export const RequestAuthFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "
 
 export const RequestAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"])))();
 
-export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum forwarding hops the agent will allow (Agent → Broker → … →\n Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the\n request. Caps chain depth so a request is not relayed through more brokers\n than the agent is willing to trust or pay. A Broker MUST NOT forward a\n request whose signature count would exceed this. Absent = agent imposes no\n cap (the Exchange's max_intermediary_hops still applies).").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
+export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
 
 export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.")))();
 
@@ -224,5 +224,5 @@ export const UsageReportResponseSchema = /* @__PURE__ */ (() => wire(z.object({
 
 export const WBAFileSchema = /* @__PURE__ */ (() => wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.")))();
 
-export const WellKnownManifestSchema = /* @__PURE__ */ (() => wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request (Agent → Broker → … → Exchange).\n Every signature counts, whether or not it covers another. An Exchange\n refuses a request carrying more before it verifies any signature, with the\n Connect code resource_exhausted (HTTP 429) and no typed reason. Lets\n Exchanges publish their tolerance so a sender stays within it. Absent = no\n published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`.")))();
+export const WellKnownManifestSchema = /* @__PURE__ */ (() => wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request. Every signature counts, whether or\n not it covers another. A request signed only by the party that sent it — an\n agent, or a Broker for a request it authored — carries one, so the cap\n bounds a request that a party forwarded unchanged and signed again. An\n Exchange refuses a request carrying more before it verifies any signature,\n with the Connect code resource_exhausted (HTTP 429) and no typed reason.\n Lets Exchanges publish their tolerance so a sender stays within it.\n Absent = no published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`.")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index f3e33411..fcd93233 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -33,15 +33,18 @@ as the same answer. The reference and AI-agent pages and the SDK doc comments of
 `GetAccountStatus` / `get_account_status` / `getAccountStatus` say the same; the SDKs
 return the refusal as their call error with the code `not_found`.
 
-**The hop cap counts every signature and is refused with `resource_exhausted` (comments
-only).** `WellKnownManifest.max_intermediary_hops` is the maximum number of RFC 9421
+**The hop cap counts every signature and is refused with `resource_exhausted` (a changed
+meaning for a released field; no wire change).** `WellKnownManifest.max_intermediary_hops` is the maximum number of RFC 9421
 signatures an Exchange accepts on a request, every signature counted whether or not it
 covers another. An Exchange refuses a request carrying more before it verifies any
 signature, with the Connect code `resource_exhausted` (HTTP 429) and no typed reason; the
 field comment states it once. Go's `connectserver.WithMaxSignatures` and
 `helpers.VerifyOptions.MaxSignatures` no longer say to set the cap to
 `max_intermediary_hops + 1`: they take `max_intermediary_hops` itself, as the Python and
-TypeScript verifiers already did.
+TypeScript verifiers already did. `RequestConstraints.max_hops` rides only on
+`DiscoveryRequest`, which ends at the Broker, and a Broker originates its own queries, so
+no party receives or enforces it in this version; it is kept for multi-hop Broker
+discovery, and the proto comments that said an Exchange enforces it no longer do.
 
 **An MCP tool error carries `{"refusal": UpstreamRefusal}`; `UpstreamRefusal.exchange`
 is renamed `party` (field rename; no released message changes).** `UpstreamRefusal` is the
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 3eac01ec..eb0ade76 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -100,9 +100,10 @@ import "fora/v1/vocab.proto";
 // party that does (WG-00 §5.2.2): it MAY cover an earlier signature, and if it
 // covers "signature";key=X it MUST also cover "signature-input";key=X and every
 // component X lists. A party that changed any value X was computed over MUST
-// NOT cover X. Every signature on a request must verify, and the hop caps
-// (RequestConstraints.max_hops, WellKnownManifest.max_intermediary_hops) count
-// all of them.
+// NOT cover X. Every signature on a request must verify. An Exchange counts the
+// signatures against its WellKnownManifest.max_intermediary_hops before it
+// verifies any; RequestConstraints.max_hops rides on DiscoveryRequest only, and
+// no party enforces it in this version (see both fields).
 //
 // Signed delivery URLs carry an Ed25519 signature made by the Exchange over
 // "GET\n<canonical URL>"; the delivery endpoint verifies it with the Exchange's
@@ -507,18 +508,18 @@ message ResourceQuery {
   // enforcement); the agent self-selects and bears compliance.
   repeated AcceptableRestriction acceptable_restrictions = 9;
 
-  // Multi-hop forwarding (Agent → Broker → … → Exchange) is carried in the HTTP
-  // layer, not in this message: each party signs the request it sends with its
-  // own labeled RFC 9421 HTTP Message Signature (Signature / Signature-Input)
-  // and its own `Signature-Agent` dictionary member. Discovery through a Broker
-  // is Broker-led: the agent's DiscoveryRequest terminates at the Broker (the
+  // Request authentication is carried in the HTTP layer, not in this message:
+  // the party that sends a request signs it with its own labeled RFC 9421 HTTP
+  // Message Signature (Signature / Signature-Input) and its own
+  // `Signature-Agent` dictionary member. Discovery through a Broker is
+  // Broker-led: the agent's DiscoveryRequest terminates at the Broker (the
   // agent signs the Broker's URL), and the Broker originates each
   // ResourceQuery it sends and signs it alone, covering its own request and
   // only its own member. Each signature's keyid is the key's RFC 7638
-  // thumbprint; fora.json carries no keys. The Exchange resolves each keyid in
-  // the key directory that signature's own covered `Signature-Agent` member
-  // names, verifies every signature, and enforces RequestConstraints.max_hops /
-  // WellKnownManifest.max_intermediary_hops by counting them. A party that
+  // thumbprint; fora.json carries no keys. The Exchange counts the signatures
+  // against WellKnownManifest.max_intermediary_hops before it verifies any,
+  // resolves each keyid in the key directory that signature's own covered
+  // `Signature-Agent` member names, and verifies every signature. A party that
   // forwards a request unchanged MAY cover an earlier signature under the
   // general rule in the file header (WG-00 §5.2.2); FORA's Broker never does.
   // (Field 5 unused.)
@@ -3642,12 +3643,14 @@ message RequestConstraints {
   //   30 days  — "drug interaction database updated this month"
   optional google.protobuf.Duration max_data_age = 10;
 
-  // Maximum forwarding hops the agent will allow (Agent → Broker → … →
-  // Exchange), counted as the number of RFC 9421 HTTP Message Signatures on the
-  // request. Caps chain depth so a request is not relayed through more brokers
-  // than the agent is willing to trust or pay. A Broker MUST NOT forward a
-  // request whose signature count would exceed this. Absent = agent imposes no
-  // cap (the Exchange's max_intermediary_hops still applies).
+  // Maximum number of hops the agent will allow its discovery to travel. It
+  // rides only on DiscoveryRequest, which terminates at the Broker, and a
+  // Broker originates its own queries rather than forwarding the agent's
+  // request, so no party receives or enforces it in this version: an Exchange
+  // never sees it, and an Exchange's own cap is
+  // WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop
+  // Broker discovery, an open protocol question tracked separately. Absent =
+  // no cap stated.
   optional int32 max_hops = 11;
 }
 
@@ -4089,12 +4092,14 @@ message WellKnownManifest {
   optional string base_currency = 27;
 
   // Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this
-  // Exchange accepts on an inbound request (Agent → Broker → … → Exchange).
-  // Every signature counts, whether or not it covers another. An Exchange
-  // refuses a request carrying more before it verifies any signature, with the
-  // Connect code resource_exhausted (HTTP 429) and no typed reason. Lets
-  // Exchanges publish their tolerance so a sender stays within it. Absent = no
-  // published limit (Exchange applies its own default policy).
+  // Exchange accepts on an inbound request. Every signature counts, whether or
+  // not it covers another. A request signed only by the party that sent it — an
+  // agent, or a Broker for a request it authored — carries one, so the cap
+  // bounds a request that a party forwarded unchanged and signed again. An
+  // Exchange refuses a request carrying more before it verifies any signature,
+  // with the Connect code resource_exhausted (HTTP 429) and no typed reason.
+  // Lets Exchanges publish their tolerance so a sender stays within it.
+  // Absent = no published limit (Exchange applies its own default policy).
   optional int32 max_intermediary_hops = 28;
 
   // Exchange-only. How to open an account here — see AccountRegistration, which
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 0753c963..46fac461 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -39,15 +39,18 @@ as the same answer. The reference and AI-agent pages and the SDK doc comments of
 `GetAccountStatus` / `get_account_status` / `getAccountStatus` say the same; the SDKs
 return the refusal as their call error with the code `not_found`.
 
-**The hop cap counts every signature and is refused with `resource_exhausted` (comments
-only).** `WellKnownManifest.max_intermediary_hops` is the maximum number of RFC 9421
+**The hop cap counts every signature and is refused with `resource_exhausted` (a changed
+meaning for a released field; no wire change).** `WellKnownManifest.max_intermediary_hops` is the maximum number of RFC 9421
 signatures an Exchange accepts on a request, every signature counted whether or not it
 covers another. An Exchange refuses a request carrying more before it verifies any
 signature, with the Connect code `resource_exhausted` (HTTP 429) and no typed reason; the
 field comment states it once. Go's `connectserver.WithMaxSignatures` and
 `helpers.VerifyOptions.MaxSignatures` no longer say to set the cap to
 `max_intermediary_hops + 1`: they take `max_intermediary_hops` itself, as the Python and
-TypeScript verifiers already did.
+TypeScript verifiers already did. `RequestConstraints.max_hops` rides only on
+`DiscoveryRequest`, which ends at the Broker, and a Broker originates its own queries, so
+no party receives or enforces it in this version; it is kept for multi-hop Broker
+discovery, and the proto comments that said an Exchange enforces it no longer do.
 
 **An MCP tool error carries `{"refusal": UpstreamRefusal}`; `UpstreamRefusal.exchange`
 is renamed `party` (field rename; no released message changes).** `UpstreamRefusal` is the

From 86949bc82962376d0657679bb5df757a98ae7da8 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 14:16:47 +0200
Subject: [PATCH 141/164] Drop the forwarding-chain framing from the docs and
 state the hop cap where it is enforced

FORA's Broker signs alone, so a FORA request carries one signature, yet several
pages still described a request travelling Agent -> Broker -> ... -> Exchange
under a stack of hop signatures, said an Exchange enforces
RequestConstraints.max_hops, and placed the hop cap after verification with the
wrong refusal (or said only that longer chains "SHOULD be rejected").

- transaction-flow, authentication, the Exchange request flows, the reference
  page, role-composition, what-is-FORA and the Exchange overview now say the
  Exchange counts signatures against max_intermediary_hops before verifying
  any and refuses with resource_exhausted (429) and no typed reason, that
  max_hops reaches no Exchange, and that each request is answered to the party
  that sent it. Authentication makes the count step one; its "Multi-hop
  forwarding" heading keeps its text, so the links to it still resolve.
- The authentication sub-agent example signs alone; the parent's authority
  travels in the delegation's JWT chain.
- role-composition looks a key up in the directory of the party expected, not
  by (domain, role), and no longer cites a published reconciliation tolerance.
- The academic walkthrough buys directly; the due-diligence walkthrough buys
  through BrokerService.ExecuteTransaction with the agent's acceptances, and
  the agent, holder of the bound key, fetches the content. Who files usage
  reports is unchanged. The live-demo purchase goes through the Broker, as the
  PoC walkthrough says.
- The exchange-manifest page documents max_intermediary_hops, the PoC
  walkthrough explains its published value, the configuration error table gains
  the hop-cap and request-signature rows, and the operator checklist's hop step
  names the order and the code.
- The threat model's T-DEL-4 covers signer impersonation, not only a chain.

The design history marks the hop-by-hop section and the verbatim-forward
sentence as superseded and records why max_hops is kept without deprecation.
The hop-cap changelog entry lists the pages, mirrored on the site.
---
 docs/design-history.md                        | 42 +++++++++++++++++++
 proto/CHANGELOG.md                            |  8 +++-
 .../components/exchange/configuration.mdx     |  2 +
 .../docs/components/exchange/overview.mdx     |  2 +-
 .../components/exchange/request-flows.mdx     | 26 ++++++------
 .../for-exchange-operators.mdx                |  2 +-
 .../docs/getting-started/live-demo-music.mdx  |  2 +-
 .../docs/getting-started/poc-walkthrough.mdx  |  2 +-
 .../docs/getting-started/what-is-fora.mdx     |  2 +-
 .../content/docs/protocol/authentication.mdx  | 18 ++++----
 .../docs/protocol/exchange-manifest.mdx       |  2 +
 .../docs/protocol/role-composition.mdx        |  6 +--
 .../docs/protocol/scenario-walkthrough.mdx    |  2 +-
 .../docs/protocol/transaction-flow.mdx        | 11 ++---
 .../docs/protocol/walkthrough-academic.mdx    |  2 +-
 .../protocol/walkthrough-due-diligence.mdx    |  8 ++--
 .../src/content/docs/reference/changelog.mdx  |  8 +++-
 .../src/content/docs/reference/proto-fora.mdx |  2 +-
 .../content/docs/security/threat-model.mdx    |  4 +-
 19 files changed, 104 insertions(+), 47 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index c40dd8fc..51162a65 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -9,6 +9,17 @@ git history.
 
 ## Request and hop authentication: RFC 9421, hop-by-hop
 
+> **Superseded in part — FORA's Broker no longer forwards.** Each party now signs the
+> request it authors: a Broker originates its discovery queries and re-packages a
+> purchase, signing each alone, so a FORA request carries one signature. A key is
+> resolved in the WBA directory its signer's covered `Signature-Agent` member names,
+> not from `/.well-known/fora.json`. `WellKnownManifest.max_intermediary_hops` counts
+> every signature and is checked before any is verified; `RequestConstraints.max_hops`
+> reaches no Exchange and no party enforces it. Each request is answered to the party
+> that sent it. The move from in-message signatures to RFC 9421 described below still
+> stands. See "Signing under the Web Bot Auth profile" and "The hop cap counts
+> signatures; max_hops waits for multi-hop Broker discovery".
+
 Early drafts carried authentication inside the protobuf messages: per-message
 signature fields on requests, on each intermediary hop, and on catalog pushes. We
 moved all request authentication to RFC 9421 HTTP Message Signatures
@@ -402,6 +413,10 @@ renderer a language reaches for.
 
 ## Recipient addressing: a body field, not the signed request URL
 
+> **Superseded in part.** FORA's Broker no longer forwards a request verbatim, so the
+> verbatim-forwarded path mentioned below no longer exists in FORA: every request is
+> signed by the party that authored it. The rest of the reasoning stands.
+
 Every addressed request carries `exchange`, the bare host of its intended
 recipient, and a recipient rejects a request naming someone else. The obvious
 objection is that the RFC 9421 request signature already covers `@target-uri`, so
@@ -2443,3 +2458,30 @@ to http whatever the configuration, where Go and Python permit one when a sandbo
 `ALLOW_INSECURE`. A sandbox that serves documents over plaintext starts the read over
 plaintext, and http to http is still followed. On Node, document reads therefore no longer
 follow a redirect from https to http either, which the undici redirect handler had done.
+
+## The hop cap counts signatures; max_hops waits for multi-hop Broker discovery
+
+Under the forwarding chain both caps bounded the chain's depth: each party that passed a
+request on added a signature, so counting signatures counted hops.
+`WellKnownManifest.max_intermediary_hops` was the Exchange's tolerance and
+`RequestConstraints.max_hops` the agent's, and the Go SDK told an Exchange to configure
+one signature more than it published. Once a Broker signs alone — it originates its
+discovery queries and re-packages a purchase — every FORA request carries one signature,
+and neither cap measured anything a FORA party does.
+
+`max_intermediary_hops` is kept, with a meaning that holds without a chain: the most
+signatures an Exchange accepts on a request, every signature counted whether or not it
+covers another. It still bounds a third party that forwards a request unchanged and signs
+it again, and it caps the work an unauthenticated request can cause, since every signature
+names a directory to fetch. So the Exchange counts before it verifies any signature, and
+refuses a request carrying more with `resource_exhausted` and no typed reason. The value
+is the count itself: the Go guidance to add one went, which the Python and TypeScript
+verifiers had never applied, and a released field changing meaning is recorded as a
+behaviour change rather than a comment edit.
+
+`max_hops` rides only on `DiscoveryRequest`, which ends at the Broker, and a Broker never
+forwards the agent's request, so no party receives or enforces it. It is not deprecated.
+How discovery should travel through more than one Broker is an open protocol question,
+and an agent's bound on that is what this field would carry; deprecating it now would
+close the option for a field that costs nothing while unused. What changed is that no
+page or comment claims an Exchange enforces it.
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index fcd93233..3bf82ba0 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -44,7 +44,13 @@ field comment states it once. Go's `connectserver.WithMaxSignatures` and
 TypeScript verifiers already did. `RequestConstraints.max_hops` rides only on
 `DiscoveryRequest`, which ends at the Broker, and a Broker originates its own queries, so
 no party receives or enforces it in this version; it is kept for multi-hop Broker
-discovery, and the proto comments that said an Exchange enforces it no longer do.
+discovery, and the proto comments and pages that said an Exchange enforces it no longer
+do. The transaction-flow, authentication, Exchange request-flow, reference,
+role-composition, what-is-FORA, Exchange overview and operator pages state the count-first
+rule and drop the forwarding-chain framing, the exchange-manifest page documents the
+field, and the academic, due-diligence and live-demo walkthroughs buy as the protocol now
+defines it: directly, or through `BrokerService.ExecuteTransaction` with the agent's
+acceptances.
 
 **An MCP tool error carries `{"refusal": UpstreamRefusal}`; `UpstreamRefusal.exchange`
 is renamed `party` (field rename; no released message changes).** `UpstreamRefusal` is the
diff --git a/website/src/content/docs/components/exchange/configuration.mdx b/website/src/content/docs/components/exchange/configuration.mdx
index b42c8273..3508bef9 100644
--- a/website/src/content/docs/components/exchange/configuration.mdx
+++ b/website/src/content/docs/components/exchange/configuration.mdx
@@ -260,6 +260,8 @@ Not on the hot path. Never blocks DiscoverResources or ExecuteTransaction.
 | Scenario | Sentinel Error | Connect Code | gRPC Code | HTTP Status |
 |---|---|---|---|---|
 | Invalid request fields | (validation) | `CodeInvalidArgument` | `INVALID_ARGUMENT` | 400 |
+| More request signatures than `max_intermediary_hops`, counted before any is verified (no typed reason) | `helpers.ErrTooManyHops` | `CodeResourceExhausted` | `RESOURCE_EXHAUSTED` | 429 |
+| Request signature missing, invalid or stale (`request_auth_failure`) | (verify middleware) | `CodeUnauthenticated` | `UNAUTHENTICATED` | 401 |
 | Offer signature verification failed | `ErrOfferSignature` | `CodeInvalidArgument` | `INVALID_ARGUMENT` | 400 |
 | Offer expired | `ErrOfferExpired` | `CodeNotFound` | `NOT_FOUND` | 404 |
 | Billing denied (general) | `ErrBillingDenied` | `CodePermissionDenied` | `PERMISSION_DENIED` | 403 |
diff --git a/website/src/content/docs/components/exchange/overview.mdx b/website/src/content/docs/components/exchange/overview.mdx
index 6f788945..e66027a9 100644
--- a/website/src/content/docs/components/exchange/overview.mdx
+++ b/website/src/content/docs/components/exchange/overview.mdx
@@ -122,7 +122,7 @@ Pink nodes are external dependencies. Everything else runs in-process.
 
 The Exchange sits between AI agents/Brokers and provider CDN infrastructure:
 
-1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), filters the catalog by the requester's scopes, and returns signed offers. If a `Delegation` is present, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before granting scoped access. A query that comes through a Broker is one the Broker originated and signed alone; the Exchange authenticates the Broker by that signature and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), filters the catalog by the requester's scopes, and returns signed offers. If a `Delegation` is present, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before granting scoped access. A query that comes through a Broker is one the Broker originated and signed alone; the Exchange counts the signatures against its `max_intermediary_hops` before verifying any, then authenticates the Broker by its signature (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
 2. The agent executes a transaction by calling `ExecuteTransaction` with a chosen offer — the Exchange verifies the offer signature, authorizes billing, logs the transaction, and returns a signed URL
 3. The agent fetches the resource using the signed URL — the delivery endpoint verifies the URL signature with the Exchange's published public key, holding nothing secret
 4. The agent reports usage by calling `ReportUsage` — the Exchange validates the report and updates the obligation state
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index e0730441..2e0b42bb 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -18,8 +18,8 @@ sequenceDiagram
 
     Note over Handler: Validate request (proto validation)
     Note over Handler: Reject unless request.exchange names this Exchange's own domain (INVALID_ARGUMENT)
-    Note over Handler: Verify requester RFC 9421 HTTP Message Signature in the HTTP headers (Ed25519 via domain key lookup)
-    Note over Handler: Verify the stack of forwarding HTTP Message Signatures (RFC 9421, one per hop; if present)
+    Note over Handler: Count the RFC 9421 signatures against max_intermediary_hops before verifying any (over the cap: RESOURCE_EXHAUSTED)
+    Note over Handler: Verify the signature of the party that sent the request (Ed25519, key from the directory its Signature-Agent member names)
     Note over Handler: Extract tenant from ResourceQuery.uris[0] domain
     Note over Handler: (Volumetric rate limiting handled by infra layer — HAProxy/Envoy)
 
@@ -79,7 +79,7 @@ func (h *ExchangeHandler) DiscoverResources(
     //    keys or re-verifies bytes, and it fails closed when the proof is
     //    absent (a route the middleware does not guard).
     requester := req.Msg.Requester
-    verified := helpers.FromContext(ctx) // first (requester) signature; hops via helpers.AllSignaturesFromContext
+    verified := helpers.FromContext(ctx) // the first verified signature in header order; all of them via helpers.AllSignaturesFromContext
     if verified == nil {
         return nil, connect.NewError(connect.CodeUnauthenticated,
             errors.New("request reached the handler without a verified signature"))
@@ -295,23 +295,25 @@ The Exchange MUST:
 
 Every signature on the request must pass. If any one fails, the Exchange rejects the request with `CodeUnauthenticated`. The refusal carries an `ErrorDetail` whose `request_auth_failure` block holds a [`RequestAuthFailureReason`](/reference/proto-fora/#requestauthfailurereason): `SIGNATURE_MISSING` (sign the request), `SIGNATURE_INVALID` (the signature does not verify) or `SIGNATURE_STALE` (sign it again, now). The reason names what the caller does next, never which check failed.
 
-Depth is bounded by `RequestConstraints.max_hops` (agent-set) and `WellKnownManifest.max_intermediary_hops` (Exchange-published); the Exchange counts the signatures in the stack against these caps.
+Before it verifies any signature, the Exchange counts the signatures on the request against its `WellKnownManifest.max_intermediary_hops`, every signature counted whether or not it covers another, and refuses a request carrying more with `CodeResourceExhausted` (HTTP 429) and no typed reason. A request signed only by the party that sent it carries one. `RequestConstraints.max_hops` never reaches an Exchange: it rides only on the agent's `DiscoveryRequest` to the Broker, and no party enforces it in this version.
 
 ```go
 // Request-signature verification runs in the SDK's verify middleware at the
 // HTTP seam, before any handler. The middleware:
 //   1. Parses the Signature / Signature-Input headers into labeled signatures.
-//   2. Verifies the request signature against the key in the directory its
+//   2. Counts them against max_intermediary_hops before verifying any
+//      (connectserver.WithMaxSignatures). A request carrying more is refused
+//      with CodeResourceExhausted (HTTP 429) and no ErrorDetail.
+//   3. Verifies the request signature against the key in the directory its
 //      own Signature-Agent member names, at
 //      {origin}/.well-known/http-message-signatures-directory.
-//   3. Where a party forwarded unchanged and covered an earlier signature,
+//   4. Where a party forwarded unchanged and covered an earlier signature,
 //      verifies that signature and the coverage too.
-//   4. Counts the signatures against max_hops / max_intermediary_hops.
-// Any failure rejects the request with CodeUnauthenticated before the handler
-// runs, carrying ErrorDetail.request_auth_failure (SIGNATURE_MISSING,
-// SIGNATURE_INVALID or SIGNATURE_STALE). The handler reads the proven
-// signatures from the context, in header order:
-hops := helpers.AllSignaturesFromContext(ctx)
+// A signature that fails rejects the request with CodeUnauthenticated before
+// the handler runs, carrying ErrorDetail.request_auth_failure
+// (SIGNATURE_MISSING, SIGNATURE_INVALID or SIGNATURE_STALE). The handler reads
+// the proven signatures from the context, in header order:
+sigs := helpers.AllSignaturesFromContext(ctx)
 ```
 
 ### Delegation Verification
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index 05670462..d1365270 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -172,7 +172,7 @@ A request from a Broker is the Broker's own: the Broker originates discovery que
 1. Verify the request signature: fetch the signer's public key from the directory its own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and authenticate the caller as that party
 2. On an execute request, verify each item's `AgentAcceptance` in the body against the agent's registered key, resolved from `Requester.domain`; on a request a Broker re-packaged, that is the agent's identity and consent, its key gives the delivery-URL binding, and a delegation's `cnf.jkt` is checked against it
 3. Where a party forwarded a request unchanged and covered an earlier signature, verify that signature and the coverage too
-4. Enforce `max_intermediary_hops` by signature count — reject requests whose signature count exceeds your published limit
+4. Enforce `max_intermediary_hops` by signature count, before verifying any signature — refuse a request carrying more signatures than your published limit with `resource_exhausted` (HTTP 429) and no typed reason
 
 ### Scope-Based Catalog Filtering
 
diff --git a/website/src/content/docs/getting-started/live-demo-music.mdx b/website/src/content/docs/getting-started/live-demo-music.mdx
index c530bf88..7d3c619a 100644
--- a/website/src/content/docs/getting-started/live-demo-music.mdx
+++ b/website/src/content/docs/getting-started/live-demo-music.mdx
@@ -274,7 +274,7 @@ The €29 comes from the agent's test balance. The agent reads its balance with
 In the Live Demo, the agent filed a usage report after it read the article. This purchase requires no usage report: the Exchange's answer contains no reporting obligation. The license's credit and Content ID obligations still apply, but they are between the licensee and the publisher, not part of the protocol.
 
 <Aside title="What happened under the purchase">
-1. **`Fora execute`** (`ExchangeService.ExecuteTransaction`) — the agent sends back the signed offer it chose. The Exchange verifies `Offer.signature`, so the terms and price cannot have changed since discovery. It charges the balance and returns `transaction_id`, `billing_id` and a signed `retrieval_endpoint`.
+1. **`Fora execute`** (`BrokerService.ExecuteTransaction`, via the Broker) — the agent sends back the signed offer it chose, with its acceptance, and the Broker re-packages the purchase into a request to the offer's Exchange, signed with its own key, with the agent's acceptance in the body. The Exchange verifies `Offer.signature`, so the terms and price cannot have changed since discovery. It charges the balance and returns `transaction_id`, `billing_id` and a signed `retrieval_endpoint`.
 2. *Fetch* — the signed URL carries the agent's key thumbprint (`agent_id`) and an expiry time (`exp`). The delivery edge checks the signature and the expiry, and serves the MP3. An edge can also check that the request comes from the agent the URL was issued to. The demo edge has this check turned off, so on the demo anyone with the link can download the file until it expires. After the download, the agent compares the file's SHA-256 hash with `content_hash` in the offer.
 
 An offer is valid for five minutes. The offers from the search had expired before the purchase, so the agent asked for the track's offers again and bought a new Online Creator offer. It has a new ID and a new signature, but the same terms and price.
diff --git a/website/src/content/docs/getting-started/poc-walkthrough.mdx b/website/src/content/docs/getting-started/poc-walkthrough.mdx
index 46782972..7f3a9278 100644
--- a/website/src/content/docs/getting-started/poc-walkthrough.mdx
+++ b/website/src/content/docs/getting-started/poc-walkthrough.mdx
@@ -166,7 +166,7 @@ curl -s https://exchange.demo.fora-protocol.org/.well-known/fora.json
 }
 ```
 
-`legal_entity` required, `email` optional — exactly what the agent reported back. The digest it echoed is `WellKnownManifest.terms_digest` from the manifest above: registration records **which revision of the terms you accepted**, by digest, so neither side can later disagree about what was agreed. The manifest also advertises `WellKnownManifest.supported_profiles` and `WellKnownManifest.base_currency`, which is how an agent knows what the Exchange speaks before it sends anything.
+`legal_entity` required, `email` optional — exactly what the agent reported back. The digest it echoed is `WellKnownManifest.terms_digest` from the manifest above: registration records **which revision of the terms you accepted**, by digest, so neither side can later disagree about what was agreed. The manifest also advertises `WellKnownManifest.supported_profiles` and `WellKnownManifest.base_currency`, which is how an agent knows what the Exchange speaks before it sends anything. `WellKnownManifest.max_intermediary_hops` is the most request signatures the Exchange accepts on one request. A request signed only by the party that sent it — the agent, or the Broker for a request it authored — carries one, so 4 leaves room for parties that forward a request unchanged and sign it again; the Exchange counts the signatures before it verifies any and refuses a request carrying more with `resource_exhausted`.
 
 ## 5. Watch the door close
 
diff --git a/website/src/content/docs/getting-started/what-is-fora.mdx b/website/src/content/docs/getting-started/what-is-fora.mdx
index cf1927a7..819d39f7 100644
--- a/website/src/content/docs/getting-started/what-is-fora.mdx
+++ b/website/src/content/docs/getting-started/what-is-fora.mdx
@@ -99,7 +99,7 @@ Every request carries a `Requester` message — a universal actor identity with
 
 **Delegation with JWTs** enables offline-verifiable, narrowable authorization. A principal (organization, IAM, upstream agent) issues a delegation JWT. Each holder in the chain can narrow permissions by issuing a child delegation JWT — restrict scopes, lower spend caps, shorten expiry — but can never widen them. Zero round trips to the original issuer, regardless of how many delegation levels deep.
 
-**Multi-hop forwarding** is carried in the HTTP headers when a request passes through intermediaries (e.g., agent to broker to Exchange). Each party signs the request it sends with one labeled RFC 9421 HTTP Message Signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone, and on a purchase the agent's identity and consent travel in the body as `AgentAcceptance`. The Exchange verifies the request signature and counts signatures against `max_hops` / `max_intermediary_hops`.
+**Request signatures** are carried in the HTTP headers, whoever sends the request. Each party signs the request it sends with one labeled RFC 9421 HTTP Message Signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone, and on a purchase the agent's identity and consent travel in the body as `AgentAcceptance`. The Exchange counts the signatures against its `max_intermediary_hops` before verifying any, then verifies the request signature.
 
 **`ext_critical`** flags extension keys the receiver of a message MUST understand: on a request, the party that receives it; on an offer, the agent. See [Extension Profiles](/protocol/extension-profiles/) for details.
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 7b04ec69..d683bab9 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -1,6 +1,6 @@
 ---
 title: "Authentication"
-description: "Three-layer identity model: Requester identity with Ed25519 signatures, holder-bound JWT delegation tokens for scoped authorization, and a stack of RFC 9421 HTTP Message Signatures for multi-hop request provenance."
+description: "Three-layer identity model: requester identity backed by Ed25519 keys, holder-bound JWT delegation tokens for scoped authorization, and RFC 9421 HTTP Message Signatures under the Web Bot Auth profile, each made by the party that sends the request."
 ---
 
 ## Overview
@@ -289,7 +289,7 @@ No `OfferAbsenceReason` or `DenialReason` value reports a scope shortfall. The t
 
 ## Multi-hop forwarding
 
-When a request reaches an Exchange through a forwarding party (e.g., Agent to Broker to Exchange), nothing about the route is carried in the message body. Each party signs the request it sends with its own labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers. This section is the one place the rules for forwarding parties are specified; other pages refer to it.
+Nothing about a request's route is carried in the message body. Each party signs the request it sends with its own labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers. FORA's own parties sign alone: an agent signs the requests it sends, and a Broker signs the requests it authors. This section is the one place the rules are specified, including the general rule for a third party that forwards a request unchanged; other pages refer to it.
 
 ### How It Works
 
@@ -314,15 +314,15 @@ A party that forwards a request unchanged in every component an earlier signatur
 
 The Exchange:
 
-1. Reads each labeled signature and its `keyid` from `Signature` / `Signature-Input`
-2. Resolves each signature's `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** covered `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2). A signature that covers an earlier one also covers that signature's member, so it covers several; it is attributed to the member keyed to its own label (WG-00 §5.2.1), and a signature covering several members none of which is keyed to its label is refused
-3. Verifies each signature independently against its own covered components and its own key, and authenticates the caller as the party that signed the request: the agent on a direct call, the Broker on a request the Broker sent. Where a party forwarded unchanged and covered an earlier signature, it also confirms that coverage
-4. On an execute request, verifies each item's `AgentAcceptance` against the agent's registered key, as above
-5. Enforces depth caps — `RequestConstraints.max_hops` and `WellKnownManifest.max_intermediary_hops` — by **counting every signature** on the request, before verifying any; a request over the Exchange's cap is refused as the `max_intermediary_hops` field specifies (`resource_exhausted`)
+1. Counts the signatures on the request before it verifies any, every signature counted whether or not it covers another, and refuses a request carrying more than its `WellKnownManifest.max_intermediary_hops` with the Connect code `resource_exhausted` (HTTP 429) and no typed reason. `RequestConstraints.max_hops` never reaches an Exchange: it rides only on the agent's `DiscoveryRequest` to the Broker, and no party enforces it in this version
+2. Reads each labeled signature and its `keyid` from `Signature` / `Signature-Input`
+3. Resolves each signature's `keyid` (an RFC 7638 thumbprint) in the key directory that **its own** covered `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. A verifier MUST NOT attribute a signature to a member that signature does not cover (WG-00 §5.2.2). A signature that covers an earlier one also covers that signature's member, so it covers several; it is attributed to the member keyed to its own label (WG-00 §5.2.1), and a signature covering several members none of which is keyed to its label is refused
+4. Verifies each signature independently against its own covered components and its own key, and authenticates the caller as the party that signed the request: the agent on a direct call, the Broker on a request the Broker sent. Where a party forwarded unchanged and covered an earlier signature, it also confirms that coverage
+5. On an execute request, verifies each item's `AgentAcceptance` against the agent's registered key, as above
 
 Verifying a signature proves which party sent the request. Whether that party may send to this Exchange at all is the Exchange's own policy: an Exchange MAY accept requests from a Broker only when the Broker is registered with it.
 
-A purchase through a Broker does not use this chain. `BrokerService.ExecuteTransaction` terminates at the Broker, and the Broker re-packages the purchase into one new request per Exchange, signed by the Broker alone. See [Projected execute requests](#projected-execute-requests).
+Neither Broker RPC forwards a request. `BrokerService.Resolve` and `BrokerService.ExecuteTransaction` terminate at the Broker, which originates its own discovery queries and re-packages a purchase into one new request per Exchange, each signed by the Broker alone. See [Projected execute requests](#projected-execute-requests).
 
 See [Multi-Hop Example (Broker)](#multi-hop-example-broker) below for the concrete header layout.
 
@@ -696,7 +696,7 @@ Key differences from the parent agent's request:
 - `delegation.scopes` is narrowed to `["credit:read"]` (legal scopes removed)
 - `delegation.max_spend_cents` is reduced from `100000` ($1,000) to `20000` ($200)
 - `delegation.expires_at` is shortened (1 hour earlier)
-- The parent agent's forwarding is recorded **in the HTTP headers**, not the message: the parent adds a labeled RFC 9421 signature, and the sub-agent adds its own signature over the request plus the parent's (see [Multi-hop forwarding](#multi-hop-forwarding))
+- The sub-agent sends and signs the request alone, with its own labeled RFC 9421 signature and its own `Signature-Agent` member (see [Multi-hop forwarding](#multi-hop-forwarding)). The parent's authority does not travel as a request signature: it travels in the delegation's JWT chain
 - The delegation is a JWT chain: the authority JWT (signed by IAM) plus a child JWT (signed by the parent agent) whose `cnf.jkt` binds the grant to the sub-agent's key and whose `scope` is narrowed
 
 The Exchange verifies the full JWT chain: IAM signed the authority JWT; the parent agent signed the child JWT (its signing key matches the authority's `cnf` — chain linkage); the sub-agent's request key matches the child's `cnf.jkt`. No call to IAM was required for the delegation.
diff --git a/website/src/content/docs/protocol/exchange-manifest.mdx b/website/src/content/docs/protocol/exchange-manifest.mdx
index f97a95c9..1ae23e9a 100644
--- a/website/src/content/docs/protocol/exchange-manifest.mdx
+++ b/website/src/content/docs/protocol/exchange-manifest.mdx
@@ -123,6 +123,7 @@ The Exchange's offer-signing keys are **not** carried in `fora.json`. They live
 | `gnap_grant_endpoint` | string | No | GNAP grant endpoint when GNAP is supported |
 | `supported_profiles` | string[] | No | Domain extension profiles this Exchange conforms to (e.g., `["fora-academic-v1", "fora-news-v1"]`) |
 | `base_currency` | string | No | ISO 4217 currency code for all `unit_cost` values in offers (e.g., `"USD"`) |
+| `max_intermediary_hops` | int | No | The most RFC 9421 request signatures this Exchange accepts on one request. Every signature counts, whether or not it covers another; a request signed only by the party that sent it carries one. The Exchange counts them before it verifies any and refuses a request carrying more with `resource_exhausted` (HTTP 429) and no typed reason. Absent means no published limit |
 | `account_registration` | object | No | How to open an account here. Its `data_schema` is a JSON Schema (draft 2020-12) for the `registration_data` an agent sends to `Register`. Present means this Exchange enforces it **on account creation** **and accepts registration through the API**; absent means `registration_data` passes through uninspected. A repeat registration runs no schema check either way — it is answered from the stored record. It must satisfy every rule in [Registration schema rules](#registration-schema-rules) below — self-contained and acyclic, 16KB, 32 containers deep, 10,000 evaluations of work, and a restricted `pattern` alphabet |
 | `contact` | string | No | Contact email for integration inquiries |
 | `terms_uri` | string | No | Terms of service URL |
@@ -394,6 +395,7 @@ message WellKnownManifest {
   optional string oidc_issuer = 25;
   optional string gnap_grant_endpoint = 26;
   optional string base_currency = 27;
+  optional int32 max_intermediary_hops = 28;               // most request signatures accepted
   optional AccountRegistration account_registration = 30;  // how to open an account here
   optional string terms_digest = 31;                       // digest of the document at terms_uri
   google.protobuf.Struct ext = 15;
diff --git a/website/src/content/docs/protocol/role-composition.mdx b/website/src/content/docs/protocol/role-composition.mdx
index 4c46d870..5a612a65 100644
--- a/website/src/content/docs/protocol/role-composition.mdx
+++ b/website/src/content/docs/protocol/role-composition.mdx
@@ -34,9 +34,9 @@ The `WellKnownManifest.role` field identifies which role a given subdomain holds
 
 Three properties keep the trust model intact under multi-role operation:
 
-1. **Per-role key separation.** Each role publishes its own keys in its own WBA directory — the JOSE JWK Set (`WBAFile.keys`) served at `/.well-known/http-message-signatures-directory` for that role's domain, with each key identified by its RFC 7638 JWK Thumbprint (the RFC 9421 `keyid`). Keys are no longer carried in `WellKnownManifest`. An operator's Exchange key cannot sign messages that an Agent role would accept, and vice versa, because consumers look up keys by `(domain, role)`, not by operator.
-2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures applied **hop-by-hop** — each party signs the request it sends with its own labeled signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone, so its signature proves which Broker sent it; on a purchase the agent's identity and consent are the `AgentAcceptance` signed into the body. The Exchange verifies the request signature and counts signatures against `max_hops` / `max_intermediary_hops` (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The forwarding path is established at discovery and the Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate or alter the agent's consent without breaking the `AgentAcceptance` signature in the body, and cannot deny sending a request it signed — both of which any auditor with access to the Exchange's request logs can check.
-3. **Independent reconciliation records.** Settlement reconciliation uses three independent records (Exchange ledger, CDN access log, `UsageReport`) that must agree within the published tolerance — see [Transaction Flow → Reconciliation via Signed URLs](/protocol/transaction-flow/#reconciliation-via-signed-urls). Collusion between two co-operated roles still has to produce consistent records across all three, which is detectable by any auditor with access to the CDN logs and the dispute record.
+1. **Per-role key separation.** Each role publishes its own keys in its own WBA directory — the JOSE JWK Set (`WBAFile.keys`) served at `/.well-known/http-message-signatures-directory` for that role's domain, with each key identified by its RFC 7638 JWK Thumbprint (the RFC 9421 `keyid`). Keys are no longer carried in `WellKnownManifest`. An operator's Exchange key cannot sign messages that an Agent role would accept, and vice versa, because a consumer looks a key up in the directory of the party it expects, never by operator: a request signature in the directory its covered `Signature-Agent` member names, an offer signature in the directory of the offer's `exchange`.
+2. **Cryptographic transaction boundaries.** Every `Offer` carries a `signature` produced by the Exchange (a hex-encoded detached Ed25519 signature over the canonical Offer). Cross-role HTTP exchanges (Agent → Broker, Broker → Exchange, Agent → Exchange) are authenticated at the transport layer via RFC 9421 HTTP Message Signatures made by the party that sends each request — each party signs the request it sends with its own labeled signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone, so its signature proves which Broker sent it; on a purchase the agent's identity and consent are the `AgentAcceptance` signed into the body. The Exchange counts the signatures against its `max_intermediary_hops` before verifying any, then verifies the request signature (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The Exchange correlates the commit back to the original `ResourceQuery` via the `X-Request-ID` HTTP header propagated across the round-trip (there is no `request_id` message field). A Broker run by the same operator as an Exchange therefore cannot fabricate or alter the agent's consent without breaking the `AgentAcceptance` signature in the body, and cannot deny sending a request it signed — both of which any auditor with access to the Exchange's request logs can check.
+3. **Independent reconciliation records.** Settlement reconciliation compares three independent records (Exchange ledger, CDN access log, `UsageReport`) — see [Transaction Flow → Reconciliation via Signed URLs](/protocol/transaction-flow/#reconciliation-via-signed-urls). Collusion between two co-operated roles still has to produce consistent records across all three, which is detectable by any auditor with access to the CDN logs and the dispute record.
 
 In other words: the protocol does not assume that distinct roles are run by distinct operators. It assumes that distinct roles produce distinct, independently verifiable signatures and records. Multi-role operators inherit that property by following the standard manifest discipline.
 
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index ccb70e69..12530129 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -626,7 +626,7 @@ Step 4: Budget filter (applied before the offers are returned)
 
 ---
 
-## Phase 3: Transaction (Requester + Header Signature Chain, Subscription Skip, Quota Check)
+## Phase 3: Transaction (Requester + Request Signature, Subscription Skip, Quota Check)
 
 SDK or Broker commits to the subscription offer.
 
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 8abdc1a7..6ddf1e2c 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -19,16 +19,13 @@ Without Broker (direct, single exchange):
 
 After discovery the agent buys its selected offers one of two ways: directly, calling `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker, with one `BrokerService.ExecuteTransaction` call for offers from any number of Exchanges. See [Buying through a Broker](#buying-through-a-broker).
 
-## Multi-Hop Routing
+## Who Signs a Request
 
-Multi-hop is the common case, not the exception. A request typically travels `Agent -> Broker -> ... -> Exchange`, and the broker layer may itself be more than one hop. Nothing about the route is carried in the message body: each party signs the request it sends with one labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers, a conformant [Web Bot Auth](/protocol/authentication/#the-web-bot-auth-profile) signature with its own `Signature-Agent` member naming its own key directory. FORA's Broker never forwards an agent's request unchanged, so it never covers an agent's signature. Discovery through the Broker is Broker-led: the agent does not know the Exchange at discovery time, so the Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone. Execute through the Broker is re-packaged: the Broker builds a fresh `TransactionRequest` per Exchange and signs it alone. In both cases the Broker's signature covers its own request and only its own `Signature-Agent` member, and the Exchange authenticates the caller as the Broker. On a relayed purchase, the agent's identity and consent come from the `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}` verified against the agent's registered key; that key also gives the delivery-URL binding. The rules, including the general WG-00 rule for a party that forwards a request unchanged, are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
+Nothing about a request's route is carried in the message body: the party that sends a request signs it with one labeled [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) signature in the HTTP headers, a conformant [Web Bot Auth](/protocol/authentication/#the-web-bot-auth-profile) signature with its own `Signature-Agent` member naming its own key directory. FORA's Broker never forwards an agent's request unchanged, so it never covers an agent's signature. Discovery through the Broker is Broker-led: the agent does not know the Exchange at discovery time, so the Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone. Execute through the Broker is re-packaged: the Broker builds a fresh `TransactionRequest` per Exchange and signs it alone. In both cases the Broker's signature covers its own request and only its own `Signature-Agent` member, and the Exchange authenticates the caller as the Broker. On a relayed purchase, the agent's identity and consent come from the `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}` verified against the agent's registered key; that key also gives the delivery-URL binding. The rules, including the general WG-00 rule for a party that forwards a request unchanged, are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
-**Chain-depth caps.** Two fields bound how deep a chain may go:
+**Signature cap.** `WellKnownManifest.max_intermediary_hops` is the most signatures an Exchange accepts on a request. Every signature counts, whether or not it covers another, and a request signed only by the party that sent it carries one. The Exchange counts them before it verifies any, and refuses a request carrying more with the Connect code `resource_exhausted` (HTTP 429) and no typed reason. `RequestConstraints.max_hops` rides only on the agent's `DiscoveryRequest`, which ends at the Broker, so no party receives or enforces it in this version; it is kept for multi-hop Broker discovery.
 
-- `RequestConstraints.max_hops` -- the agent caps its own chain depth. A Broker MUST NOT forward a request whose signature count would exceed it.
-- `WellKnownManifest.max_intermediary_hops` -- the Exchange publishes the longest inbound chain (signature count) it tolerates; longer chains SHOULD be rejected, and a Broker can prune before forwarding.
-
-**Response path: direct.** Responses do **not** retrace the hop chain. The terminal Exchange returns its `ResourceResponse` directly to the originating agent; the Exchange-facing Broker that holds the agent binding relays it back without re-fanning through every hop. A purchase through a Broker is answered by the Broker, which combines the Exchanges' answers into one `BrokerTransactionResponse`. This works because the signed `retrieval_endpoint` is bound to the agent's identity (`agent_identity_hash`), so delivery needs no return-path relay. Intermediaries observe requests, not responses.
+**Response path.** Each request is answered to the party that sent it. An Exchange answers a Broker's query to the Broker, which combines the answers into its `DiscoveryResponse` to the agent, and a purchase through a Broker is answered by the Broker, which combines the Exchanges' answers into one `BrokerTransactionResponse`. Delivery needs no relay: the signed `retrieval_endpoint` is bound to the agent's identity (`agent_identity_hash`), so the agent fetches it directly.
 
 ## RPC 1: DiscoverResources
 
diff --git a/website/src/content/docs/protocol/walkthrough-academic.mdx b/website/src/content/docs/protocol/walkthrough-academic.mdx
index 784b4869..08967eb7 100644
--- a/website/src/content/docs/protocol/walkthrough-academic.mdx
+++ b/website/src/content/docs/protocol/walkthrough-academic.mdx
@@ -613,7 +613,7 @@ The Broker also flags the retracted paper to the agent:
 
 ## Step 5 — Batch ExecuteTransaction
 
-The Broker commits to all 49 selected offers in a single batch `TransactionRequest`. Each item carries the full signed `offer`, reflected back exactly as received at discovery (stateless verification — the Exchange does not need to store offers).
+The research agent commits to all 49 selected offers in a single batch `TransactionRequest`, sent directly to the Exchange and signed by the agent: every selected offer is from ScholarsGate. Through the Broker it would send the same request, with each item's `agent_acceptance` and the request's `agent_request_acceptance`, to `BrokerService.ExecuteTransaction`, and the Broker would re-package it for the Exchange and sign that request alone (see [Buying through a Broker](/protocol/transaction-flow/#buying-through-a-broker)). Each item carries the full signed `offer`, reflected back exactly as received at discovery (stateless verification — the Exchange does not need to store offers).
 
 `POST https://exchange.scholarsgate.com/fora/v1/fora.v1.ExchangeService/ExecuteTransaction`
 
diff --git a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
index 16419ed3..a039ef02 100644
--- a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
+++ b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
@@ -517,7 +517,7 @@ The Broker collects all 6 `ResourceResponse` results and builds an aggregate cos
 
 ## Step 6 — Batch ExecuteTransaction (4 Exchanges)
 
-The Broker sends batch `TransactionRequest` to each Exchange. One request per Exchange, with `TransactionItem` entries for each offer from that Exchange.
+The agent buys every selected offer in one call to the Broker, `BrokerService.ExecuteTransaction`, signing the request itself and carrying each item's `agent_acceptance` and the request's `agent_request_acceptance`. The Broker re-packages it into one `ExchangeService.ExecuteTransaction` per Exchange, with `TransactionItem` entries for each offer from that Exchange, and signs each of those alone. The agent's acceptances travel in each sub-request unchanged, so each Exchange verifies the agent's consent (see [Buying through a Broker](/protocol/transaction-flow/#buying-through-a-broker)). The sub-requests below omit the acceptances for brevity.
 
 ### Transaction to Credit Exchange (single item)
 
@@ -714,7 +714,7 @@ The Broker sends batch `TransactionRequest` to each Exchange. One request per Ex
 
 ## Step 7 — Mixed Delivery
 
-The Broker fetches all resources in parallel. Each resource type has a different delivery format:
+The agent fetches all resources in parallel: each signed URL is bound to the agent's key, so the agent presents the proof of possession. Each resource type has a different delivery format:
 
 | Resource | Delivery | Format | Hash Verification |
 |----------|----------|--------|-------------------|
@@ -726,7 +726,7 @@ The Broker fetches all resources in parallel. Each resource type has a different
 | Patents | Signed URL to CDN | HTML | SHA-256 verified (STATIC) |
 
 **Hash verification by mutability:**
-- **STATIC resources** (filings, records, articles, patents): The Broker computes SHA-256 of the delivered bytes and compares against `identity.content_hash` from the Offer. Mismatch is auto-disputable.
+- **STATIC resources** (filings, records, articles, patents): The agent computes SHA-256 of the delivered bytes and compares against `identity.content_hash` from the Offer. Mismatch is auto-disputable.
 - **DYNAMIC resources** (credit report): No hash verification. The content reflects the latest data. `data_as_of` confirmed freshness at offer time.
 
 ---
@@ -888,7 +888,7 @@ FORA replaces the **data acquisition** layer of due diligence, not the analysis.
 | 2 | — | Broker decomposes into 6 domain-specific queries |
 | 3 | `DiscoverResources` (x6) | 6 parallel SupplyQueries to 4+ Exchanges |
 | 4 | — | Broker aggregates offers, checks budget |
-| 5 | `ExecuteTransaction` (x4) | Batch transactions to each Exchange |
+| 5 | `BrokerService.ExecuteTransaction`, re-packaged as `ExchangeService.ExecuteTransaction` (x4) | One purchase through the Broker, one sub-request per Exchange |
 | 6 | — | Mixed-format fetch (JSON, PDF, HTML) with hash verification |
 | 7 | `ReportUsage` (x6+) | Per-transaction usage reports, all linked via budget_scope |
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 46fac461..26643201 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -50,7 +50,13 @@ field comment states it once. Go's `connectserver.WithMaxSignatures` and
 TypeScript verifiers already did. `RequestConstraints.max_hops` rides only on
 `DiscoveryRequest`, which ends at the Broker, and a Broker originates its own queries, so
 no party receives or enforces it in this version; it is kept for multi-hop Broker
-discovery, and the proto comments that said an Exchange enforces it no longer do.
+discovery, and the proto comments and pages that said an Exchange enforces it no longer
+do. The transaction-flow, authentication, Exchange request-flow, reference,
+role-composition, what-is-FORA, Exchange overview and operator pages state the count-first
+rule and drop the forwarding-chain framing, the exchange-manifest page documents the
+field, and the academic, due-diligence and live-demo walkthroughs buy as the protocol now
+defines it: directly, or through `BrokerService.ExecuteTransaction` with the agent's
+acceptances.
 
 **An MCP tool error carries `{"refusal": UpstreamRefusal}`; `UpstreamRefusal.exchange`
 is renamed `party` (field rename; no released message changes).** `UpstreamRefusal` is the
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index b3d63e44..583de910 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -102,7 +102,7 @@ Scoped, time-limited, spend-capped credential. The credential itself is opaque b
 
 ### Multi-hop forwarding (no message — HTTP layer)
 
-There is no in-message hop chain. Multi-hop forwarding (Agent → Broker → … → Exchange) is carried in **RFC 9421 HTTP Message Signatures** in the headers: each party signs the request it sends with one labeled signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone; on a purchase the agent's identity and consent are `AgentAcceptance` in the body. Only where a party forwards a request unchanged and covers the signature before it do the signatures form a tamper-evident chain, and FORA's Broker never does (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The Exchange resolves each `keyid` (an RFC 7638 thumbprint) in the directory the signer's own `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`, and enforces `RequestConstraints.max_hops` / `WellKnownManifest.max_intermediary_hops` by counting them. Responses do not retrace the chain — the terminal Exchange returns directly to the originating agent (bound by `agent_identity_hash`).
+There is no in-message hop chain. Request authentication is carried in **RFC 9421 HTTP Message Signatures** in the headers: each party signs the request it sends with one labeled signature. A Broker originates its own discovery queries and re-packages execute requests, signing each alone; on a purchase the agent's identity and consent are `AgentAcceptance` in the body. Only where a party forwards a request unchanged and covers the signature before it do the signatures form a tamper-evident chain, and FORA's Broker never does (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). The Exchange counts the signatures against `WellKnownManifest.max_intermediary_hops` before it verifies any, then resolves each `keyid` (an RFC 7638 thumbprint) in the directory the signer's own `Signature-Agent` member names, at `{origin}/.well-known/http-message-signatures-directory`. `RequestConstraints.max_hops` never reaches an Exchange: it rides only on `DiscoveryRequest`, and no party enforces it in this version. Each request is answered to the party that sent it, and delivery needs no relay, because the signed `retrieval_endpoint` is bound to the agent (`agent_identity_hash`).
 
 `BrokerService.ExecuteTransaction` terminates at the Broker, which authors and signs one new request per Exchange. The agent's consent travels in the body as `AgentAcceptance` and `AgentRequestAcceptance`, not as a request signature.
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 07385486..bac85e61 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -256,11 +256,11 @@ Line 3: Legal/contractual enforcement
 **Attack**: Principal revokes a delegation but cached or stored tokens continue to work until their `expires_at` timestamp.
 **Countermeasure (protocol)**: Short `expires_at` (2-4 hours for standard access) limits the window of continued access. For high-value transactions, Exchange checks `revocation_uri` in real time before fulfillment. **Trade-off**: revocation checking adds latency (~50ms) so is only used for transactions above a configurable value threshold.
 
-### T-DEL-4: Forwarding chain forgery
+### T-DEL-4: Signer impersonation and forged forwarding
 
 FORA's Broker never forwards an agent's request unchanged: it originates discovery queries and re-packages purchases, and signs each alone. A purchase through a Broker is covered by T-BRK-1 and T-BRK-2.
 
-**Attack**: Attacker inserts a fake hop into the forwarding chain, claiming to be a trusted Broker to gain access or inject misleading provenance — or reorders or drops an existing hop.
+**Attack**: Attacker claims to be a trusted Broker, or another agent, to gain access or inject misleading provenance — or, where a third party forwards a request unchanged and signs it again, inserts, reorders or drops a signature.
 **Countermeasure (protocol)**: **Every sender signs its own request (RFC 9421, Ed25519).** A Broker originates discovery queries and re-packages execute requests, and signs each alone with its own key, so it cannot claim to be another Broker: the Exchange verifies that signature against the key in the directory the Broker's own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, the key identified by its RFC 7638 thumbprint, the RFC 9421 `keyid`). The agent's identity and consent on a purchase cannot be forged or moved onto another request, because they are the `AgentAcceptance` signed into the body over the offer signature, requester and idempotency key. Where a party forwards a request unchanged and covers the signature before it, a forged, reordered, dropped or inserted hop breaks a later signature and the request is rejected. See [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). The refusal's typed reason (`RequestAuthFailureReason`) is deliberately coarse — missing, invalid or stale — so it never tells a forger which check its request failed or how far it got.
 
 ### T-DEL-5: Scope pollution

From d069217a825d3683a1896e33f975eba0ade3938d Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 14:21:19 +0200
Subject: [PATCH 142/164] State that a Broker purchase item refused with no
 answer has an unknown outcome

TransactionResultItem.refusal said an item carrying an Exchange's refusal "was
not purchased", while UpstreamRefusal.code said a timeout may have completed
the purchase, and BrokerTransactionResponse.totals counted such an item as
uncharged without saying so.

The comments now agree. With the code "unavailable" or "deadline_exceeded" the
item's outcome is unknown, whether the Exchange gave no answer or answered that
code, and retrying the agent's request with the same idempotency_key through
the same Broker settles it, since each Exchange answers a repeat from its
stored result. With any other code the Exchange decided no item and the item
was not purchased. totals does not count an item with an unknown outcome, so it
is then a lower bound of the charge. The wording stays within the current
idempotency scope.

The Broker purchase verbs' doc comments in Go, Python and TypeScript, the
Python README, and the transaction-flow, Broker, Identity Service and fetch-flow
pages say the same. Comments only on the wire; gen/ and the descriptor are
regenerated, and the corpus is unchanged. The changelog entry is mirrored on the
site.
---
 gen/descriptor.binpb                          | Bin 682956 -> 683872 bytes
 gen/go/fora/v1/fora.pb.go                     |  33 ++++++++++-----
 gen/go/fora/v1/forav1connect/fora.connect.go  |  10 ++++-
 ...a.v1.BrokerTransactionResponse.schema.json |   6 +--
 ...okerTransactionResponse.schema.strict.json |   6 +--
 .../fora.v1.TransactionResponse.schema.json   |   4 +-
 ....v1.TransactionResponse.schema.strict.json |   4 +-
 .../fora.v1.TransactionResultItem.schema.json |   4 +-
 ...1.TransactionResultItem.schema.strict.json |   4 +-
 .../fora.v1.UpstreamRefusal.schema.json       |   2 +-
 ...fora.v1.UpstreamRefusal.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   6 +--
 gen/ts/wire/schemas.ts                        |   8 ++--
 proto/CHANGELOG.md                            |  12 ++++++
 proto/fora/v1/fora.proto                      |  38 ++++++++++++------
 sdk/go/connect/broker.go                      |   5 ++-
 sdk/python/README.md                          |   5 ++-
 sdk/python/fora_sdk/client/_verbs.py          |   6 ++-
 sdk/ts/client/index.ts                        |   7 +++-
 .../docs/components/agent-sdk/fetch-flow.mdx  |   4 +-
 .../docs/components/broker/overview.mdx       |   2 +-
 .../docs/components/identity/overview.mdx     |   2 +-
 .../docs/protocol/transaction-flow.mdx        |   5 ++-
 .../src/content/docs/reference/changelog.mdx  |  12 ++++++
 24 files changed, 129 insertions(+), 58 deletions(-)

diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 64a515094cace8811834ed5f133a4e05dbb7c349..fd2ae7108306f6d4ff88dfd0c6368afaf2378051 100644
GIT binary patch
delta 28670
zcmbt-d3;nw_HX*8)7*OjfhOJQzTN4*y`<CKkc53r0%1|X1@{>pM<zg2W)K`e9cSK5
z29$l5rHG&`0wRkb1X_@=D2RZd4v2~<GJ-H7Ae)FV@V=+2F4y-yzdzpR^Zw9JzUQ8E
z>eQ)Ir_Qaa+kE(0>YJ}q|9sK$qVi()i_Y4d@%JnHGnt9^=d^!S|MxFV^m^_bf7bOe
zd(Y+IKUZe&xq1f*a$fK_jJw!~e`tA`x;*uW-ejq&JDrBo(Cr-QQIbZD%2r0zZT=yT
zKVCJo@4x}(;L4|}hMB{ktTG1<uX?Jp&Nfch0<6!UHJyDBQyT=$p;g0&4y<~%a!}u@
z!2_NiGH~#4vvTkNlF-?YF|~x5aW&VWvo>+Hu=+PoR^h?WoBGV>Du<a*KQpxdla<4&
z2I%I1s;8l4m^oxHXBk@c_%p*Q2Ne!8`wtmVRc!ud;P5B;1A=DsnZcFMRt_9g*>6x)
z)EqKYH=_fpDhCW2IJl~B)nEEoRSl>b5asMco*CYM$Wv8j^}u1~GlTy$c*t{uJMjlS
z|ALkWKT%~qRr$R6WaYC}Xy~b@2UQIxW2n=XZDzl!$A=89;<U=a!=6JQ$n-%&h7E6S
zJ|}xMaJcyd=@>i&F5o<5l=!oXT;i!5&U@0FyNEpZ{J_Caux*uUZngQG)wyACxo!>|
zQ1#T)Lxxuk?*Dw>KUF;s>7hfOc|vrbILvNChx`d<467PGd=Q2RjVFgyLGZz+hYcTE
zRr%C?!g<BytCaLz<>2SdA$$b52dRhB1#PQrL%AiDI);|JA5FvV0ag8B5&~ifkA&vt
zup#DfHYBDRP0fnImKwA_xa!%eq3o%+daIK<&oXhfYdL~T*Bk0N6lyMtwfcqy9RveW
z3uY56DAZS|y5bDDT{Apc%QI~Y)Mn16GdyaZUgJQ(29zwfi+Pl}Y*<R2U5&p~E)P1?
zF^_hO1)+|4nz;2wXd6#e5^FlwldZdTl@rEjx42!iJ<d6v9KDIISv1JicwBC<-6Xl(
zIWK!$TO9g_PHqBPTH;aeH0m<r)2i2zvfM@P)6FXUAHy@`aky{DFbb>zG)lwBC2uxU
z3!CY7tQDJm2Ah@Eh*~k%oX@TQ{|Mo2QaEDt9v?d7DYL4w|C2WdtZ<la4jYcx9)RYC
zJu?XLjFCk&S%F1CLKCQ(W)Sra!0h)7*<}uYZeahaVllD-#gW53Vhx3ZJ4kCNhr$7u
zF7Y&OVnLOl`wqP^9|(s^0|83Y-f|c?MIlnFQX&N~G@Qoul=sr-ibw#<GS;X_eYI?v
z6=VTLL69x;)c4B96qvHilb3Hns95GPBYI23SkUcy)04H9eP5)uX!NE>ZJ_@i!y80|
z<*a6@VzqC-)mC_c2t}(sS|hFq5Q<iN+)XWrKCSlTR`VX<DfJ14toC>w_%(?OJ@gOV
z$J>F%x7hc^s!{Zo-46NgEsrLg6;#M~Z+UV(dPgpzxO3L9mL+QE>NQrEgNg$0ukqBk
zM5xPaJnn!rO@W3ro={l71rq_xDpYvP2@YwOB28W6iTr`bJh8y~Y+~y--l2b#tt&YV
z-L5)M)_AYO*qUwjs2V&lbE-t$?r2=+$!Vf93`b5wxXrnlZE302gg1K>-Z~L6NSmqk
z^MVPsZDG%~QZI(KcodUN1d{_yTRgG2-i#{(+RDbYR*OPgJxW~iC`9!XCiMvCL8rE{
z1Fh9qc$-HFN}g=+Z1aRoeT2f9oNnj48E+dk+fneYM~O);C%E4ABntIu*_;dB+wD=h
z86&gVz2jV6GJkKY-t8y@DJ2DRAh6rhyvTxRd$*^!0uFV-_?&F?X}71OtKN;P!?5pR
zYJ0UuXpcvUNEsJY?D514^eE@4=XQR`{@7lPhd=ZvJT{@I9(X>a*gTQLnGjN+WmdLV
z|D%LHvo)#U`iwMn=S-U0`8liYr1lJb?omRrH4QwUdm>T&dCsG|onNrL&g$R7Uw9Or
zZqb?!o-Zif?nO=muJ3k!n|Z6V+D9q>*5;}Yu5XD;3{-t|{aa76v+R0(>iV~yR40AD
zP}0Ed{2^0bu11y654OV_K*<lDL{cy3EurE#&Hm9<?HW1lQ3|ByhTu8vNv0(a62ch_
z02|R&&1Dz5s;Lm5HGsE(_YCQ~lk02bcAjOOD%86}XFZB#X(RBQ^`x8YWt^w6+xa6~
zQlWMU{b=iH44xlJ&wZSyiQ9ROWp`5_2%od{Gy%^!(z8+wirekHnt8UHx=JyxdX$8;
z-VLs+o>Vi-nN8i!QQl0?p6cC7c$D|1&zpj6lo#IICniI#+c}P{xlR4p9OqTiQdcgR
z#(9fM^wADXJS<U@y;+Pcyj>mTp6t!Z)gOehx6ovp;#Fd7<=%RC#{n@Az#;$up<{{{
z0Z_!5@o*|z-b*bBP4y~a-p(z2(oOY7V|sw|Kw=vExtE$Bn&wq__CzZ*>85%8h92iU
z82y)6>)vW2^paQM%Q$#w(!J!(59zHr59Zu-_FQkZZD_hzhW0HAO}Xh_gmy9K!Hk>1
zcK23Wgl5=!XqL?&J)$j4qnXTi2iltHRs7Osnnp9d!F;`h>%lad#U8ywZE4Q3`%cqn
z7WMtpCc5HsxLupPSs!Fp-k}~)8*TEcUj266>2io{HT40tckyPgi>GlSLUyw^H%ZMA
zM29zfTi>p4MWz6TA9rNb2i12SMLWDMkL054wZrReZb1m`@V38Ozm3b_;ZAn>A+=Y@
zPOmFh@{nJ5dOdu|p_fwhPH)>g^tG6l=%Z_&H|zb(kl(1S9F6yRRgb>y7U)vQ=F^$C
zeyet`*XFd>#g|v2LfL8WEqv?=LfL6A=H#K~T!@U$Q|>kPG-oZ|aOGx7|DX=?RGSY_
zX-5UZAT0V%4tWmMiCOtX6^eLk`L7&|S`?)}s$42#tRiPn)#Jla*@)7BDg#+po5}z8
z+B{X=i3$zz1|eQDcx5}Z>d((q@xuDoC9#PrxH(nj|6?62iV$?1R?Z!HE+6+XAPq~N
zznKMTSn}HS(Hmgp&yTuYALM0S%X8@U^=xN8BtOVggZg~TOJ_d$c~2gz_(Gl28UWF{
zCr_4{fZ*Mer!^q8#0s^0@)|X!WeE@u_p%S4Rbwsp+9G7w-aO4MMQBOio9FTB%UoOr
z<9#Sk`6^>Rr>3&2@u#S&@_8w9D6c;65OkCBLwSC_XcB~)LwQ&<slWw9fqN*g;H$iB
zzOWNvjOK>OmwC>TUz6aL!+Fk@`ckB9$U)1AJSESlahg4P-g95(gTJa_r4>k`m;(cJ
zoUpCW<^r&O3D#K1JKe6+dCK{`%wwz6kfRy|_zM(E+zIj1d9t3tQ;46=Lp>v`cEak@
zdEWD|n#yuKr`p5qI+N!-mnX_{NrT+kJXw}Y63X%)^QbHjb4$?fB}X1xy;L*W<|{c!
zAeZtK%Xv94<5HfVR|;q*2kI{6g(LcPG2&ppn#Y=~(XOx?)vBxfsyzxW=)IaJtE+s<
zD1dH0+n~q=MOX78G5uu?aTRjAruechWV-)Tt#KAi@nPyVM0|zn;cdpJ%=S6;b&6gO
zc#M{f_ZXsO9HZ1Wj`lNs7$qu*#WM`jET6OMuPA7T`JAowugL8ogs5wtPg#^1G+KSs
zQH?)^zwrR}&GX4R6%case5g~&-+=J<JYVi2pYS&kxWDK7oUi$Wza<TF3w+Ywk_3M*
z^pU@R5jG&VF7qj?ea_5nW7X#z)c}?i6!Ob_@(m!wtJq~eya5O+9I#@U&%OGl72+Mh
zwcO`ib<+y#EntPu)tJXG)QG~=xzdM>O|NW{gwcD`=W39q>IyVCZw>1;UX4Gt#wRBe
zh#1B-J~@nlFmR2}E#d(X-Cg5D<w&y{5VhADU*t~Nh%AUfir%5;^ESX=%l3>{!;jV4
zZDga3TDuLJIki4_o>WRRr`BhPx;&(0qm5c$@HW{-w(MK2FaK8E;B8<jUC(Zxpa%P|
zx7(oUwcc01u~bUaYrU_DrIe=EdLPPd(GN^7K(mKzgC-Z*xZW4(uD9oH0KM%~?lMwr
z!{6&A+1UwdgT5e$6ckc&`16~s(JXq~*Mt{ha1+g<w|%IjMQb@|?QLJu@>-5;?QLJ`
z4t)>Jvk<+UZDNm1RQEo%$!>&Z*e2U;G{ZLe<P3ud8rkH-dM+Aqp^;6#*xj;AF6p*S
zzW7~wh_`{NU^5#vNi`qaY`0MlZEUvNsE0N-``qHSFr?H&8=HNoPedE_(8gw8)apn*
z*~VsH><%4^D*6G2tt@-8T3oi(ZbL=yw)*7$26)iMR$stUs-lgpJ{0b2gey?FZ)bxi
ztF@19w^e8`bGvP(1{K?VZp+^qRBZR5U=?O+uwuI}CEhSYiYCq6?n~dVcjjiI^54n+
zIYlii+iAC<!_1w&`uxQTUD46TPG3PssZ>WBJAI|)`W6(tc#QXg{h42;sN0mj`)wWd
zp<}<VzQ}@Lf{y*ZFkfp)20Hfpid#sP^<n3JU(3F7$m+vRDwy~CT0N$pq%|<4;Kku+
z#+a`DF}v?kyOjoL<)}}-%YzB69QEZ{bG89mIqE|W7v5-qR*w3j_sCWn$X1T}Vtw=j
zB4Odp<7DRBS?WWM>XUXWv@LbgSKo?-hG^xaFVs@1ZHQJ*`r5R!AX+);Yu`^~W~Cuo
z!MnvtUx!L8U^;rjDNa-nCw-6g<ttN2!Q0F!pAt2iVDAO{dcy_|VRcKjhMn*PZR3$x
zr2x_PDW6=W0MYg->fx8de!S_N_bGAXLxoKnskO_rtx+S6he5KYYa@iuc{_X>LEU+K
zCN+Y(^FFLqR04(Fu1mhGIet+Ag~55rr{;?aC`=X5&puuOwFQ9IpRL>u2;QH4vH}8x
z)}MW-fWD)GB20;Ogg;X~M}0ym8R1vzamRto>8i+EfRGyDZ<?!rjnW!Yh=;NMjOSJL
zh@*I{Ek)YK`fo~6njTA1uZgw*r)8q^)dHn#nqPV$tWb)Z=9j4+5IUy$-D2Ajkc9kr
z&!DOyjQYhn!_SKb_Ub~_RWidbM+1)_IKwYT0}z5U{8r5nrUm6?Kd%}30zl8pwh5Fs
zU$#x4y!o<UrZg}^)60H25T@Jpia+aJIS?i|U-7FUF%TvV#C$&=h&BMwI^QoBSwQg4
z_sf9*gx2|fS&EwExrKhV_gOXA9srUHZAlu8g??F);wdB-`cczer8qM&7_Oy$<;~1p
zi`Bn6s`00YFFb&nrB=59p=POHE^vTQv(%3Tj#ha<tny3!!8iTcv|YdnV0gpt^zbQ4
z3?dOM^P?PXs@LZ%AUWv;f4Se;i4)Op&gi7su)^;w`#)JRfmZsR4~TNqgbA)%zp^3o
z`&DY#Q4I`>K@fEbAS|x+%W4!5Dr^0+8U=*KwSMmgSWML@5qNd9&hLENFRCL+gWP(*
ztd1lJ)ltSz)zN2^-%Tovotyp2HWqwCJy?yuEGIf)@@BuxYT$!OoBesB^Z<nF&3;+d
z1Hz=u{(@~Vi3%Pfh_Zf*UzYWf1ea|kKkmY=fivQE?eu4T=64ty9p-&i!-lXwFH<+W
zcly<)dLLL9q55%`U)jehmaBJH<1gVL&|%FkzbqdCVa+bTEFS@3%`SiLKItGLa0l)7
zJNHTlNgCw#SPqgTIOs#}pj){Gs2)G|D+m2fgWa-1?N$w78A0Lsv0qk?5gwi&`(^bA
z2qQlByAR$pLROET_?@5LG{UML|K*p}Bgw&5*tOp;t4B$~a2)WvQfZzR@nZOeKkJB`
zjZql#g<lPe*%+nScv#HF)&K~t!<Ny2;5}^3MnJT5m}X-Ny^YdL`I^1IQf=1zYb(2f
zNL0Tn_LKo3@-;b|@^j4XI_l3lFAa%-^Qhm-&oMIOm`n=*FyxqJ2q1WmS%v^Y>oF@W
z#K@5EWLf}#<af3t+4G&17Vs33-%(oNuX-^`3qSakb2PUK9M$+!j29k2?gwjD0YdHv
zYgPebyngU|&&ly30uP$ge&>&Jyd({BXRM%+Bm~V_9yH{WxZ8EnpY;p(NnW-yj%F|3
z%$0F+%4In^0O;Cf%S1r%UbdV9h^8)+Q?QZbjFbIW*mrNKE!$l2D=xlbfk;$;J#nA}
z2$3s(94OI-xU<0R8f9d?VmOSE3Om|Q&&~8*qpou_9%ZNjzE@vB=8Q2|yjJa0JjRe(
zL50>aMm;g+fY3U|z?j!i>MbBkCS@kpssTsoBtxbQP!Xe(jQXMu1SBpap5}%ELdPVd
zsF+Xf0$NI^vTxU^_m)nzHBjcBYREMaJkT)JkZU3!G)y(HCU)UQ08M94uU9L|rrR1Q
zlTNoaP$r#jxJC6<z%%J|1Jy09ss*&F&N9TSH~_4lWyoa}5R$VDxvT=BwONL>tQL@=
za}B<%_5gsQxwZ|otj@J<pk;NgA(vG!L(^OX%j#x&7f-ldYmKbqnZLfR);XK3HIVxF
z_D+HZX1&4J)b;>Sx!#bW3<#C$4Y{TQLgjh`adL=;Cjqy)>I`K|#@MVr?5M_{VhZ2^
z<mwDf6mo!&t1|*Yz7zst3e*|-Ta0X8HxhxSfOE6q<R@IDnJ5^#%|@(<r+P_(qRmE0
zXT2qF9}MprO3;Xz4-Bnj=eMZoR=}1KG^+0!nt0(%@KJr&z<S)5%R<u*jDm45YcW|X
zV8gbm?OTCh3Dbb?Ff?(ZmEZ%q!|>+Owl2)WIDB9zZli#OcBx)=<O8)KyRlVmSOlsl
z@xTKO9~i1Q_5(zN9~em6?YIW`c@OKjP3_QXk0FkSpq55(j}hdj00bej$4I916;u@_
z@Ve;QZz!J|?4y^omYD<F)aM=5AXp~To8o>$uIAu|^nOFG=74bee#84YoKCAb5qRD?
zU^qWB#A+^Sko(k-tGOg0?;JE}HE+WW!8_%bh7vInCj0O`wM7|#Sk4nlJw*4HMt!~;
zj7I3q@=L=jUQz&|`%42G3p6hh^xpWjoEHF){MwoqfROy!niqhO{QBm+NGPa_j){5E
z9RTBT%(j7E8;@D@0#Bjom^Ci|q3IaSi@R{3(8%pNX=MGtw(n5yY;@AdY08hJ8quWq
z4-3Dq#zX%x<o-X1h`0Y3*#D1Uzr7KK*Y~XQeKi*P-jMtMAcE(6${n<C--xo$DYo!^
zH4#1~yGBH!(sXzP6SL6mI%{P8%uc+oKHTW6q5A3I%vneloMU}<sy#~2Sv><0Jv(Rh
z3=k%qGu&c-0}wqsXW$Hj(s&`+caeRxQ*Bv#(bhn@^P*9oA0ZGAF&Ty^w*aBxqJeU&
z2iE{QFSF7Q)LY9g+Zre(T{h~AlwHVk=Vha@Wdr5T%Va}u^eyRjUB$A%wtS%WYJ8RE
z!iQ81CaH5bm~WT5uk41U7(^((VRa4=rrofTG9VP+Ajdw#HQ?b30T$b>K3n!eKt^AZ
zui!5PWL^j4T(Tkugo+me$N-;H`byF;OvoJEtv=!?nh=ol7E}mL2w)uOMH&!769PD7
zso*j|liBY-RJ)f>wwtBJU~)jZB+1L_$$`dVF#sf)02YJ0xCX@PG<NtywNJ$~TLbN5
zO|vyn?wDq4pxiNyH1y^gz&j(L6d9$=u~YT27x$_qT|p32Fv<6NX9VhtIR^+`GXnWZ
z*&j+OGXl+;>tBeWKvJm*-~!2oz3S)H_{-8l+fX&OD=E3u1Z1csd2*=<V3_IU1`x@m
zCJ>(+5Op~bkX+Ex%K>L|p1&mt(KjdH{GEOWq9f&Y%@1U~9&i|C=7Ym<+ET%Kf24N#
z&HRAs*8S*disEEpKxtysH!FtWAjW*~zFxvUJc50ACXyc@>{}R+D-|HxUKqeih2uQv
z!NW!Dn~&7|(nVGeL4<}yRu2J*DIkLd5E>Ryutd2A#L5!Z@nbb!zQoo*Q(=j%ftpzo
zkh`cU9yv<_NOs@QOGp}<yn(ED*_@BnBaN2@P#5v_H%)z9&ANV}&TWIgp>Va;DL^P(
zZFLF|CatDU&7k!lP0hWXdE{T}EJyL%wh;B>?SOon1rvnc4xntMl$)lQe<vVH5daLw
zI{{gW07CMefGkA-A^A?gDn-%+w*^Eg0)Q~yW_bb-hHtYx0SHao0<shV<f2HqW9q>Z
z&9D#!vL<GheX5SmZoEIB`h+W*kt+_8D;5?XwE6=gbRD#u00><N$qBDe{5B(-53$CF
z)Op2+0!n=z<RB6?&_Jw0fRH&9@cH#RAp<8IVP73mxAZ+?b)gx5n?GW80T3#V1l;20
z3?Nh-2_W}VRsh7(btDiFcXSAfclRTKU@!fQXaoYs+0`%AA4`whjby{)#{>06zHP?+
zbUYC0AhnX8jt4rI(qSnYfs0SF!mrd`WhZS7R6d>z$o)C+z|50@5Wk#3BG7O$fXf;G
zq7Z3D0eT^`@+<X#qwIpMg9^tBc2_AwTnM<u7ARz(<3a#;OEwD~Xz*HQ^AUBcqx_n!
zgYv^QTL<NbYu4;(#`D89nmy7Ps2D~D*`}lF*|L#AnPZyqVqs*kzDSgS&@nO?6&t01
zuw!JfbsHYJ&B)`Uf+BJOVAQCfj9frSjta`i1%%|NpcT2zs92Z~6z5qjj;XG)3APDT
zD@+K=6$6}5G$AMh7Z8dj1QEEs5Vy^7oE6Oagbh2U-rjUdP&M=yXdP*euyxG{Dm9sX
z$5h2pjXy<>!UHIuVJQcM@)<#S6$uc^X9RINK{*r<Idn$QtO;i8x!5};0^j{{yJiNR
zvx7N&qvs|Sva^CH(sHp;bd!iOjWr5Voz{sPhW6&N$G%fbOXu1~Q3WtJC>N{de5%Y1
zHWterAQaCHV!8Vr*MJ*V^Vq@f)ZbUnvo%mu&9l2jGi6>-E)C83OqmzN(m*$?0CB@=
zUNAmI+^`~yl>sKq3l<DOC8}{2zF2_m@yQOl$pae9SQu1V8EwsbaMX^Alxt3?9ZNy7
zd`mNFVNez_;D-?lg9g8qMB-e&MN7Ra*M^z2m=&H>yLDY`YoIlEvF!+&NsEJW)o#vb
z(&8Z2+>dEGH%Fgc%Yw=(_Qpx|qiXzR*+Fw@ne7akOUr_8QNlwCb}S2`gcoCsGa+b6
zuev$LbSi`$KDTRm(D~-gF_u)wuCT{g5;4Xr8}l(9DGY-j*0Orvt1p(WwXLGrxz@Id
zX6ITftef-Mxi*MHBwPnV*DyKPvz_0oT}s#68mN$8Z+nO4=K5e`aV!84*tR~1BclFX
z1Lo#N*6oy9RkqRAKy!3sP`;)&=W}#pFfL9K0HI-HuuWTi2W6S&G)Ldh96P1%bd<es
z>(HR%eOm`j&-a6Iks%-h9q$KQx7A0`26%G?2Rt8VPM%h?mGX~m9XfpRaZsMxfeAW3
z4mPm@o=$i^4hBOy^WlA<vD-B|A8S+UN7dV)@#y><jgGi-8q?A=CZF}WrWRF?$yfO0
z1)^dl8IzC2wE<^>=CSz-zj=s<v<Lz6yAcGzJ2oE+m*52&m#^?EFnCCF2#^=m1o>0G
z_eG7v#PK&9y_d&2Fn_b8r(hnRk2g!97_mMfU*St19#T{T@`DC~;GK|<BZL3CkkN|V
zu2=K3YBP8KSN&hvjb6=1-9_)WMbz8*Ge6VX7R}F>6&7gFG(TTfSb#8UK6Qs)35&@7
z*H}k~)~@I^TZBCDnk_=P<uwwa<G3Q~;}SO4p_LUau|-JH5?h42zJx?@Sq>sVZ!njl
zbuD_s7NM#ChAl!<{|yqM;4Y#?bOjrxXkCg{*dpYW75SQ&!{C9)iu{JR=(HDGMCol6
zJECZ}7p<~IXkxF*mm31$fyk<SYzXw@B771)kgW|US!;{%S(h&>u_7_+C|Ks{@O`n{
zwKG5Kr_70LEtJ!EXFdwT?YPY5EGFk)%6K&G{dCEtkX+(GMf;aRez8acqWw!DEYjPZ
zP*&o0jR<G0&**Km?n+`rn7_SbJ4<lWVpLce7k26=9JpywB5zu78XMM5JKkn=7)J<n
z(?UGMn2ZTKD}F^mJ7bBmpgxQ%A>$TgCbrjJ%PCqAmazdUj9U<vu>lC71z`*UF5E!|
z4;QgV%e0byi^6i}4@9Dd>xqgD5F(4hw}`h&KxC9f;l`bXA$&Us2aAisO*-*|MPk5F
zBONR*3b*gTPwz`8pq8@JWm?CgrM79*`qHr6!Uqr9SsKR7s^F#pEob+aYu&pq56hHZ
z!i(AEVObLZLc{W~TO<rXk_lslTtfM`gaT}JSZQuB2iw#|3$i_JG>u&^*Zy7#vWPG+
zAwX7#Wz_}<m8-)caa8~iDp!Zo&Gg}1BjT@?Wx8n3me$%D=mt-%t%1U^HXLfjE5{NZ
zj<w;o?etQv0lXPDu&Y*Hnz1#|nvk)(MbViF%L2EAM`tFC0+(L>OK45l$iD5W-CDZQ
z)<D+=Hrg6!P1qQg+oljfFE)nr!}<eU14gipRaIyYmDSlARA{KPHBjAF7na+mC45b&
z3&#`s9y$jvp*3N5=I09SuI#eiwhk)UcH25=P1tQ)L2JTpvSJ*qD<!lhe3BX2Q=8x@
z`^45kYr-eC4q6jFvF)HW;S;iB4W0Uz(5e67Oz+#YTBYo;t)o749JY1PssG`yTincm
z40Ie0<96#f5hiq|&pP+kCR7}?RWyK#qqYiuq#t&RBBn&)NBZFwt@IAu3Y^y;3oGr6
zH0#=1Gg#yfEl>f16=HO7e=J;IY<HF@bZ~zx>=R2RAj~-y#!^X@VF{hVp9m|RjOIcY
zyF<$_1;Nrq1=@+QEUv%}T_?gu8yRf$Vt*pszN7vq*M)QVQ|!k(w8u(M*&68V{gmA^
zI(t7Ac8g7j5{1s*PlcNm(OqL$gQ<OnjlWZSp!AHbp)oX^u{AV?hBIOLk^&KEI1?^R
z@#UvP;kT8IyR>$t=WGp4py8aYp$Rmc3(N8wBG7Oy95VG*+y-1_zQ`utrL`%&Xlrmo
z!$n(z8yYT#<vp1a#SIM?!)8?fGuMD?&OftjcWJ{)f3`I=g@&JP4NalpXS)|oq2Xuh
zMHSb88_?I-^1HPsO0U@(axoUy!g5EoM9GDQYhiJ}7Ou;MhHK%Hmiql%gNHWO?(U;K
zSa!qK;DHS{Y#Th#aKr9}2O4frFKBbAMDgOK%Vgj5(e5Z8Y2FM7FI0>)Z>B^qRE#ub
zl?xfD7-{0V`cx6?d2Z)ulMTE_n^rd3){zGtqir2|&@tMSuMH(i9(0U0qjCLpG3R{P
z^2)ToS9=4O8EhRs=$K~8TCPO#LB}++3BPy_+kMb6&BVoXzRg&o`0<j&@*mLlb)99a
zz>%7BmMJgmfCnmOnc>zlw*62s%WT&{--LHCs5IQJ<)*SS)9gX5b514xw5EswOP1Tc
zF`#C-DPJ5R1~tn~yf{+b4~V*dxfx$+iv2Mnh_|2>rt>NOep{jhum+g?{k9_jj9hKX
z#UBvbSDW(v77*H3n|QzdO87hIcCIs(xPb%gjM{<S_d9K2IS7`iL72MEHZ=%k>ughl
zP_~XtU7LeSqJ`V_u9@{wrq!d`8l~~OCXQoYq()lM%D;nMd`uf%w!=~lBJA8@%HRZq
z>K&$6?2-UN^$rtzwlk<cZ$V4(zD%aC=2gn~**a(+Zl7fyn25`Ci!BmB=-6jsOZo~G
zIxXF<!)Dg8O#Ob^UzA3NO%ytRfa;cH-4XWE0Igrq5mTP0fCyDb%%Ip`0EDU|CSK{N
zW@|~-e9IzL+JN$JEn`50G2dFo01}fa*M2}~_}0YQKY_ONTH)}(%=(eNSEY?_bkf9z
zz#~xHifs9wJ^HxzXz}-^ERjHjrteKzhX6v;_a^F)PszKj$e6S2yT`T9iqG0I)cRRd
z6Wdtefy`MG+gN?kcx$)of|)guoq9rh%zJ?vr!3SOjk|s_m8+)HsAQFoYku~ZC$;;l
zK@vNqV1Uw}EJFaH^d~ZeA{7vk`jeS^6_HBEL_|QOx?Pt|=P#x>CXzJB{cOr(B1yu#
z=@pZ<A1I}^raoOa6|WIDS?_^baWQ~p1oiB?DbK3F31!z!oK;cr(V7am5fQdzpw_eh
zh=@3TAu41>MDoP3FCb(_MC5f#K-3!}BFX!C#Ym7}MH>-G-N!3NNui2yM5NC>e9pBd
z6{8|zPYD3AJSrmR93Yw-6_Ilekn>u5O0B8vn-Jl9N`C<0NKQCF1kr?u%$9)AG$A5$
z10Xa_h+x9u5I?7h+ci0oH6y|=p5@RIH93;w=P#X2D3GQ^lq9?NnpzMC#8Y7IfE+-$
zX$m=@8(uz}kawoBE`zilp=lBM=?jS9nHGse=`#=T08M8L25G&`=@I$88HhxUV1~`3
zPi)-y3N(_nkkx-mdo_1<B&U)74~V+SmKx}dKFun})hl98Kc)GYGFWRD0+pA>!~;z=
z5loMVxCkto!yX!}{WdfwB43%^+@d)VyaizrLIe`8unz}o146Gz*AtPb5gd^9<UH`#
zJa+dG?Y7Xoh&*U>^S9o45#$!^@IV9uuz;-{qIEMD*m~$~cLC`cL%E}k+qEK+bs*z;
zT5~B)Rz#3H_!fK{>f5S_xK;*$!CMuPkqU@jtcu828$cMdDuP#=om5`7A+KjLSBGl5
z9A%k^3;<9ON|}gEi-5!x@ru$A5IQoEf`q<>K00qhz1^L0Jfl@O%XZs3XmfsdM7}bB
z2|9L1Lj1cLl7Wuh5v=>Pt>1>wUKz*$klbqpG9V=PT7eA6d96ThL!R3&0=XvuM>qRH
zfxO=eWITnY{Z=3YLeqW<<QK@jZQZV~B3b{8W*YoWb0|%|il`Cc-?rr6Z=`<#pz|Bc
zzktyBjpbiJ==_HK%Ww9#rCy)Noc_Dk*HL=H@(rly;faXcMh7IWNJNwYfY5Owf-6k;
z;Lq8X+<S_Rt=9h5{gkbNyn8AlZzqEX8csz5;_Vs`8cs#<c72H!uC@e!iYNi&J7?zB
ze`;^yDqY23{xy*Pe|-+rzj7#k1z;HeBItko0O)`GHXmQz>*BNfepOY2O?-<#^a*^2
z+z%fZ<C~<xLx$rM>1PJxV|?+o`H<n&_)du);lm^PV0zFH`VhY#cn07@YqAMnGtoy$
z)+f}KO8JR0I)rgXk3@w42ygrpk$b{`@WxM(#^US)kar)ih7@aUDPWW<GT4A1dc_Jh
zK!{$kf(;O&S0YxhwWY0<8zR_x06^0X+X&i8y<r6#o<h?NE7$;`=>`QGY97Ve&g~i%
z&8lI$UeFHbj*8-Y_(`;mwnM17#zvJ%QMTblZ9+Bv6e|uMK;77=TyX%QZfsQEjsV26
zH#X{>6cx)J5%{t<F6x{Z70aHaL2i6hE_;%MWp6^1mOZM$+fgV@jVkvTJx%uBD6LOl
z0O4mmLKmk-<-!2SS>+oEAaqZS%Fh)5v7$|lntk~BDM4|@G&LHzTR$Lri_o6Q{ybVc
zSTxh_DH$*`s)_U8c0876MsW;D?^^9BlxMTyW3&g#XWMqs_|J~Y`2-$lm>rFXni!B|
zqV3x2HMD8i9$VPatp8+OV>MrPlVwqSL&(!;dz$7eqv9qJ0J^%;G71nXS4L$T1%%3#
zQB3nM6<F0CCcA2*%KD6BqV|ZR8h?sm!vo0GM&(T+K*-fb<xL_$3|nn9e?5kc_OOUR
z!{%HUl{bkb1%6r=l{bkb35wQ5agzuiSwjvC8=|;Ll+SMx9h#)Yi-0X7$fFyg@+J|O
zA-f@p!>vJF7O0Ljo2(5ks<TDNg>_N6UD%$xur7-2!a^>Bz~9Q=pRA?&ZH<aeU)VrX
zXKPf>IzZ^%8kHxGfQW{z(ZH>;qjd2VugzPd!JfRnAqKf4wl&(VJKr*BPt)x^cJCCe
zQ`vjgV1r0hD+mG6?0Zr9QVWP?--}{re+-3Kd&-kL*#}d!aiu$L6||MK(^f%SNjsx%
zv7H4GsMs0Bb{1{_wWqD5U2M`+t)y(1t%0_ZcG((eD`{8MEiyPnpkY@O8GIqFvhAt1
z`y_K^s<z0{@)O&~w0rbPRPL{W2|}MlQCaZoQth#O<oY72e4W|%lD6DYjX$m7q#dI#
ztW*F#$bAvb_3{cB5Ha;dH1BJf3W&f{!J(-0E13!;4RT*vsX&sD3J&vBK&i4lZ9W~1
z@=qPux}}<@4Jhy@NaAK3AWS(Ll|?2XR3435>9Rd-Je_#GVy5Q!?Frj;wC{Anb{*|I
zorucn5+YD>A}XuPrf%1%Xx8PZs4i*q;Z!uo&8y3%G+lp)vX<-W6|$|fG*{>cOaOWd
z&cP$hhaV_s+=1e%DTV(Tc5Ie*SLjSse#8$Vc+Nz{wHELI{mA+-txxF3s4Oi(Bx)3;
z<-=SLOgqmuG3|Gu^Y|uSwnfJm=c6c5aXkilFf}f+wzHw<VpM()4<dLjMsbYRmh->?
zKe2_gwf5#uQCSW*Rp^W9pQ0#-S0hX1<RYKPvgT&4%+^Y>-D6|uHGL|cOT8W!QzHCR
z@d7~f4Ony>5K6|y&~f@WKbJZ_0biBR)w+Zy#N<6NP{A}IhM9?tPA~yYin02yXb*-a
z#bmcY<z#g0Ue1KBPhtOfMY}&VB_`dI%WK#vF}SBY=Rwz}v9qseJwwxC@?-H_-t}oQ
z%txwob7@9TXZO9Tbqh_8$yyjhv^713S{Mruco1SU*_u~j&&-&t%|Qgu%ou8OZ1aEz
zlajH5dD@*JX7kX;;*5AOalwOGSHq^v(@H`$F%hvu1W!#285k!;fY_p)!w%2W+M080
z2hlGs%pnJ@r#A|Z+qE#3wUV`*udQ=0jNy(Qjf96r;<cC(6(8*b!r8#$_a6YE<2CAc
zFV2jIi`gF+Xm^AbTef)kKrAL({?2(Iv6Ss!pjC&KS|jS=<FJ%Qw1V?s9G0=C7i!%@
z%PjwS_&6*h|KV!@7>03J!9H22-P>$MO#VOsh|s<whGXs1RDX1EyH>}t4#XTr2eZe(
zVNX9ZoXvmQmB$9WrtNOBI)-|LuZbO~lbIM_6I%md^fED-hXB#3OiZqcfUqqS!<tB2
zv>hn+HnN6`wbIg!F<C%>2n`!!vVZ_2rkK2O1PBcqsjrlHJ5U7Hu~CbWc<XEp6diRj
zc`6GYXsC<D#SIidXsC<f2Fe6Vyd4Pc$edfOO>z|Ph{=@-R0!>e$(0I_xM;X{(2~)C
z{I{E}cwO6By4!A->crhKxupyqsMsAdM8ORR6}w|7xG8UTpeWzVw!NhV+Td>p?v-Os
zk07`=CNm}=1oy_QjM;&Dx1Tj$qy2I_{)Qp@Z3}48+Hd=g7Onj;nK!`<Mf+pOn<ME5
zmpUSG#<Ir69mXB(-nCj&Hvddcz04!av~RPUoQhd*HXUhr&&c5gKm%v2;RQqkXRP4`
zL<47Nc<FLaNAmkQ7F?zEDmrJ2(0HDU$xR~gK;&Eudox|Q2*&dwduf$c(c_}ktB(BI
z(nYIRfY5L;CQC{{Xt)?dNx7cttd4-LUt-FQnA2FyDp#o)wr{oe*J_Z&+6V^7{}PjB
zG9cuCiODh<5NqQvG4G9-D3gi6*T$<c=k=H<lO+vu*J83vmL#l=|BX?ZOk>=UqGV*;
zUK`tjg24kxtc`#$Wn^5AG$2%tj9Vk!kz!<QoHk%?l#Pwc2?8o7%LxJq9b@BikO84%
zY#f7(yT8s(Zr8+k)@$spwc4FcCdSp6n6sT|P^ZMjoCScwDRJo^Kq#CNmva^n3a7*|
zsL!HLoyhsq*<Wh4zZ6ZkMQBi`$K_9Pfd?Yf<M?udj>$UFB*h-}I_;sNS#h~>2_i&h
z#e<?80))t{ILaZq&C-cb4V%AC>sC}_w?YF~6W7EkC3uJ_j#N(0?nKU>%NniMA|-Pz
z2ZIQaxt4<gAu{)-gFBIf7jg$*xeWjs7Fuow<PW8r0ikK3<z_%=T1amGJ>1;c?OGDg
z`T|p_4^5?9wl<^nXtE@(CWOB`lfU1P{sw^NH>_>}Lh~DzzX7574f1yy-RewkTEPy!
ztu-%NVT+KzSH$Hc0uMx1#4(BP<|6R-Dps;VyQg@SEkcS`SwqyB`+F4)(MNO^(U}}x
zmsz<%`$Q?LvwQ$5EUk-69{@r}U0l}DfFu;h`t?1{yv{TN+cWQM(grztY`1mL2FrF^
z2aU+~xI9sX40LRdV_o92w=+h>wL7kS6#w<?9bOGOwBUi5!+_ATJ1*xiAhhg`%Q*~)
zIlMdW{U|QxFcJ71-V=B3i;FodX^{IcF6Xc$VGi$&TXVQGW!rx_;(P;@wb-h;O8#X<
z7oNe2e_7E52yOqm8C{*J0Qp=*7kg}*=IZvj?G$=9_}q31y&HUP1s4RN=yM9L<FpW$
z;y@stbso`GE)sQ%vpFudWt+CM$>F$aiV!QM5c{_bF#zcQx8*KC=>NABVt~;9ZwfJr
zmr{z1<E-jE?Vi%(mW3cf!*R<(Kw^r!MdAX4hU0ORC3HSoN;CW<JNKUUSlLNi1G(;G
zTz+;A9%wijFA%4-fY5L<F0Ve85;`Tk+!g?mrz|%ELh_X5W<btsWyw+syK}<LJpee8
zxe^e)IA`~Qg72K=XFP?bbL8i@J@9jx+qIw|>z$16eJ!ImSx{hAIA!G8MFnE>6aXq0
z705^ggvvz)GFt*d<)Q+(b`O09SVo<`o>}#Ywl}xc^#YmqK_zm5Kh00%03md}0N-=*
zi(+MPr)zXVnUKi5`JMKjqZ)sUxW^L+j!ww92ZZ40gp7MY#Qo@mcS1tMJrQ`^k4ZSk
zCq&#!8sx?%WZX*<;(lC$;(lIJZaLP`RSD&-gfsKwNo}rH2_W`(%6M8>m5^xx5Js&^
z$Q1|>%2y@uT0qAwfG}!RBK8)Hq7Pb$0HZL%s}u5Iu#ASVHX#lv0Pw6fann~cX0-{q
zM&c>7*CwpdFQXK`F(IyO13=M6+fGUv8*Mu&X>7FZq@=Mifzdxjv#i|h+MLMxj6Hu*
z`@YHMgmq)PoCbe;f)74x^poZ)-foQs9zo&ugdBT7DBPaF*z*s9%W153vF<-<Uli}M
zWoYPkB{Y63&IumK>`LVM^odkhmeWky%X(kdCKvC;he<p>K!nWRL_P7H6(D5xCU6^$
z7QS*q9}DL(^JgTek1gNf5d=TBd<V!`E#H-s+YbugvAeHmuI>jd*WnRdchGVjAQT<6
zTn7k62g!8{@%vTIE^gPMMAlCUhjE+9{;?@1FZ1RVEyvO1P{R6<whMXjsPtmrtD39r
zQOhHE1l>n1F9JgMQS#y{T2;EB@2(RG<%fjRc$Mn8rL5aEZDch_Vorbo@+Yi00SNgM
z)|>!D_?<|2e~@#62z*YQOgK-;IU#9~`;RpzBnflkdp;+~(_LtA&L)0U&w+wi1xchu
zK$vpY@;4w<p1m2XT?k$h{_YL{?_aVU4hV-|vK$TwO_wZ(19DL~oW7^(>ULd8WPQzc
zUDqB?TuERFpx+$oikoo%O(-J@o%#m43D;HLgyS@J`wcDA>w3a@8{b?L&(NJ431|0T
zQP9di3qi5;y;!J>g}%R8>M$0ZH1l@-`Cg-lllCOJHrg>5UFhucD+;uYDRlO{scmAR
zG8Njeu`8`Zo+BF59s2(2Nrm#79#==co?PhsldX=tH>J?|$W3+A3YD2qho3(d79e3s
z(oLhti!T*A#T`4Ym$qW27dqS7ddamj3Z0RTHx<t=ROUkQA1%fBu%Afm?}|RKZB3!G
z+!m%+=9dfQ?>6xUXll%%Ci&ZOR|@?3g<|ahz#z{rl#vSv^X3=I`~e8j`GvH0P~>-|
zV0u0CeYSp=qt)xS5QY2eg))JF2|}+IB7x8is;=a=Wrg@`GtK&3)>366V}p!_K^F-H
z5IU9>%7g+49m@)lP;Sr-$gY5{_X?FA8PtZ?b1LztrG|p^y+WDz!3Q<(70Sd92sQ5&
z%ES+dnfG2{Y)7F;{6r9me|sSk|0ufu)|FDwflP4&y<T?d0lOVq0uB_)!x}K5odbo9
z#Vi9vI|m9;e9)}yN?rSm{kf4IDgLZb&O{I)@>!u=H2@*<S)rBry3(}$>h-OSbVvDD
zcB}OE{FU81s_wqBdq>sXSB02@iyLANR$#IfW-ZQKZ>%qJdH!37kBwiT{e%h{@E4Mb
z$GFJ0_SO@buk!Rq93`NLbcN?o`$AIV*OiGKYF|jwFPzW<P(dRzCdnT6>x+uV*g`bu
zW0JDq2NQ(GBvJ5>7j4pH$#gKVh_sxHwh_rWP(`{XC%xh~djKIcIf>!<fVZUL9BFz|
zS;Q^{^qslWlj<${J=_AY%}hFrjc#l~NY7=*f_leRAXr*y&}SySN!bVu`pjgrB7Wn!
zg2t02oz0CRA>2P-kGBFrEO&SeVV3lWw?04!vm|aa(XHeP8p)cZvz5_72=B$uKDGiu
z-1oy{2-hTi;(Qno!Zk^p57Ui`3L4TmNoUe%Cxp9&^r9jV#E<adF@)zNn~DQ!KnTxC
z;_f0{p{}4({S`JBpToC$CFvAj0DuUQSCS!04CGF#%3n#AmP<Eb>u_Gu+17GXBn&r!
zAcC}le+w`#=`WGOv~xc%*{Th{<y}F0iVH}%g)nx0STAe^f+bAb_X})c+P+^v!t_%f
z6}094TGH9ls1U*pO}#@22;wXgk0Jb8GEe+A6Ci|NOBT1#m(Z7K-Q2Eq$*gZO!%cm0
zwtHO?Hw5TDZ8wCiE0a_<ux4?+b2a`Fzk&cdv}KZw#OMP;TPBGMI#k>NVvc8$#)hOg
zogxB1w0S#;`_xqKNeTk=?Icdy=qHmTiSDVqoh<L7U!ZX8M!~uzsq{9EIZSpuuAg}n
zNaP(n!{Ba7%A;&R&KnTlSpdSOElGT5LE{97k=c@L*NguM4MG06{q6clN~_%{MefLy
zBy^`^zz(|!3cejlncBdFCUzv{Ybqdg>`3A@RWw2S#ygVXR<a3xF0&(Pw$!iDmAY<}
zKo2FABT1)mN@ts1)Qrqqh5Dm8)gW43qEvdwZjWZwA-g@ARfniO;buyuhmzqVa5G(5
zLIa|R`7-JJIw=Z!NrT+sq%7<u2}R6TNh<8WsZV>=UbpLbGHV87Mfwr<@nlYbpOtti
zZ+(|kn(>=B1%NOJn9tN4KzQxDB=%>f!im6mdMfj;V%_Zsok}YFjy6%jbt;KF+7+A$
z=m(~>(7T6zNXnnP_43{7ACh?4q1|;aIrcQ`-$HL&a5||JlYfZ_$<xV}t@N?DoB)ih
zayhB=G_J^BY`)e48?j{|@mxR*5V)Ky;V+j2q4jdIWe*x34q@))WUKCaN3IU8|CwEH
zrFRbfY}-XA3_p`y!gfU5751Cfu>Fc{7o9L%A-gbVpch%=7xs2*z1;jIDStc~MDYBQ
z#P^B#*$`qvsEkPAN2&3Zl{q4%@Pt5Qu#HHyYOU`VT|`D0pUSw}=?^I3@u{2MqH~7v
zDOg4C6cEGQpUj@`pnnmboKkqi6A?_4Qyn_#R|ON!)TXmPchvtIo}RktQ~G7+>8X~j
zk-ijXcejhBvKFvOo%B9#mcrXk7X)s1$^tbhWez*jNiTm8e~E+yIviM&@{3R40pZ`8
z6ix~#JOL4&HL3WVl*j@^;9211l*|H>0t;SdBRcC%8^4^w#J>b<Aq~~@*`m(+<?{I{
zIXytc7|l<~=?F+nDS2ZO5be)T;Z$iMMRcCqwK$bk$G#}l7q}OvazZ?!^C+U1p#S1-
z86b23iy!$0gf&Z27$-Uj$|EaYXP=hoC85_-3ePM=1kdX!WR^CZ2WTmamh0_eOKm-r
zPnMD%yzoN=mc5Zu+C=dgaZ9Y8Q_6LB7z8owcnt10XxPW#ViedB*&8xj%jv~<Lkd%c
z;vZCSZAf8rL_#RtkZOB74`)23WU(RD?lwBv2RB@`k-56-MWKx;IU_)Xij67Eh{2o(
z;rtG}x4Zsy_??u}Uh1WAekawbvp$33CXeEI6Z@vSJ}bP*wuRz(6WQ_*;--h&wKave
z<e5G62Me~Q@I?>3D)hjs$NMQ|cgm?>r=L6RAzwX+mTA;e|GT68&XltoFPp_P==>n%
zeEL@uba7V-FBG&M_n<i3n^HbXvD1Il+g1a^eh|d3UIM}ads9KNm;*w1Zwj}~C>#M1
zj(byuAIWee0uRT1RyaxujM$fwi;^VKqO^}<lfT0EKvcL6;4}Aw?D^aDgZ=QQNZ)t>
zgASzRcfEix=s+sU^A{|j_&kt8o)8AnJLrK_>w_?e)<isqLG+7=pQfBG^x3ri(9`Yu
zGL?0by>+|J8h@F>@4-!@)v6~2@i&>@_R^a=?)fGqi%3w>-Zv@vgIR!R@0%0~cv_wS
zk#oLDxyyKK1W|W$j;5vhXF@IHPh{Tdt>Z^+PS|Rx8z)k7AHOH>#)%X*iG^BPSWl#y
z-o-}^Pf0CNa>egvN(#DlBGuYzn=_&96R9qD=$GkV7Vx=U=Tli@(hlP!{$+uI!`K54
zx!eqQy41|dJN5mJM(0!VcBqd!e}PT8TQ3e>NXdT~07SHKA%%l9Tt&|D(Zs#PzPww1
zG<?ZQb|8Z15)HsOTCRLFM}NsY)JL!H2>)VDT~LWkQ+E}`zmMkbb@tDD^ta6GDfz?l
zAcE<73RgY&Z@Bwt#*R$0d+*ghGDoHr9)b|189OqK5Zo?QVNQ<5S1kAGJHn&Win!0}
z<CAi98VC4YG32+pUE|YPQ&{|dy^EXvT@fDpw^Hm+Oe>Sw4}a9#RRbc@fJJo&i2hDY
z%YWYj5H?RtV-KDp4G@twF&&+p7MYj`JoG1}WhRysSUV{#Ltm08^e3ee`j29e{BGAv
z>8zL2*$(4wvFY6P0lkO&rF2f5Cs#iW&GfX=RwP$Im<22n7$6#$o<`EZkIv@!X^dvD
zBM;~uLo?D!2cCUE1ka2#4q|CB_0w3)WbGc*%R@8MGDCq#)HE^_T@CQl0L@}AJ*amJ
z%}Oinq#hceS?P|Q$bI0!_%L?<LA^_erDY-q5j-r7L{7IW{FE_gvpx^$?L)KEN~zRC
z8FO~JOIN)+=YiX6*rJE@p0OI6hcadj@%#w`c$?exN;+#HBKh|>eN>Mnexu*%ekF|q
zR7z#H(QwX7D+|PM0zxmaxUdfh*UU>t#oH7hdN?oLtT`V}Kn&-+bkPDioJ8QmIo}#i
zNr6@Kt>Kg;8qWDNoIlbMiElh!PiJLV$KUE_-LI!}!h94B8pWj;H9m^0@58z)1jyeU
za_|spm!^wL=+zDomM&v2Jgk?6mf1Wsh|7p4pYs4MXJ0?8heOK|9Ne)6AH?P94jm;A
zy10S`9s$paw5%KrKFe05Q8~uB9t`42_S;AFL};Zo&;}pGl{C<FWyhdFT*c--qTdx+
zWeqfluwWGpw6F)xUX9UXM<3RGQF;Xg600A6pbf06DYi_m4vXJgtjF*4Xy~o9ESm63
zSKxUojXYAod5{3tuor))7lziP6@GURc2Fg^CXKs;f(M1%TDFUL*4i$hGHxxoAj0*a
zimPR}JgUb+wP{7H^7xS;@YJU9&6zMAMcg{p=TW$6U0UJa%b_hQ;?||{y`0d4FYeZ}
ziO>^XZ}*G-^^NuEPNjN(#OUpA*T!_#7PjwEy`Oty8b5hYQF%K><)*Z<Swtlu90e>c
zR06_No6`B>I|M)s*(OR`lw<%Am7CJZ%`z&9z@xIxib_d=9d%YzN)kn79Yy5@+^5dL
zzxlK$opmG!Gw7I;HLg<wnY_pJ`xN&cD?$Slp&#Ci(D{ErgaV2P#X~glAw?h6UideI
zPzJE=f6$wS_FAq75j=az^{8;c1GJAdtkf&Q`_i%&1d*s|s@Z9|2vD9mka?<7zt<5u
zU<CuH;5tCTP{ElHqo1<F{q*kPPc7#Mc#M8ZK{Y~XLXaNHl=s)O9pOWEdlaRIs6Fh|
zQhV_J*X$1i^mpQ4r<G28+JFeAuhV7aIHgmZz1*&Ur?XDLQ(a9K*^!gW?yu6@H2pV?
zD3$KLXhe^tmG9E*Y$v^aH87NdAchnW&N*fcDImId%o<Wa4C%3S@;f=CMBqbu+!|6z
zfl0@$A(bQ=(&IFwbu^^-Czj5o@y+)=kL#t1`&>FFpJ$pNjpKQ^Qmhw%Fb7x^<A6|n
zo*Y6`J4ge0ft`3#zbknmElXz*!E+&v(s=?oEl6W_5wj=yce)48D!#3k%bp&nKOF*5
zRNG+TJP@hm66o_Kc734UKYYoWQb9hdm(uthjo-n|z1^-W=`0ihf7BmwUrFPWBbqL~
z$+=h4%71CPln%sS;`1-iVd>Sh{K;=Xv~V?z3xhOK0O8fE>BN7fSBb#Add>2xq`=B+
RmRBW-yn2mI`;*@Je*>G$QWpRK

delta 27904
zcmZ{Nd3aPs)_(ftrn&cqEls-9eY?|pI^7K+>}vvqMMVX1ADvMK1s!G-7+@B^?>7?`
zSwaK^fs#dbkO+u^(8FesO%N0iM5BT@?3=>Kh=S<vJymtN^L@|r{lW9(oO|l6Q|FvI
zb#7JN=EU*T{!de*UUa;uyqNu>`cBTI2bJ2lGA})t(|*43(RX=9Jy(t|>&k==ujb&N
zGxOoqdPj<Ke#&>4eOTAD;mK?%&`ub6AE}0_no0wgdNW^1nzbrh9o61*JjBd|W;zV^
zd`$DPzD)PCW+Qcjt%_;&14elGppnA|5Bl?f=lTyCGH}??!9zxd2Mie)9{IaL>_|*2
zbsORC!-xK1(D3kxL3lKH2%ZcW$-Hr`*i|tk-0QDT|8BsLX9tCc4Epn+;Rd@iq1~YZ
zz+lr7TDLAx#4s8dIi!}8^vX3Y(m|v@YLVGQ78M(-G(%DSF6U%-){;!4Vy&s#WU^Z;
zFlIY2IKPtRa=z?VX0kp_wO1?gm&V(J54e}zdP9o@+{^Afm(d7)<Eci?n#^=(8!kiR
zj0t)}mvfq1o#D<g@(kVLq1|-1(*?2HET=2y6}Pk2VZ1{2^(*LUzFWE1d@(byndWgc
z969*;K|}up(~RKbUQ(hJ=Y^jh`uwox28|pvuzC0a82AM??W*QwdULHIyYpcqzjDNY
zX9hJ3KQ-v-0e>1Xh>UGn`I(`^|1x0sz!3&#{$bDy;Xe%#CLU<{#WwnYAtU}WXgK<X
z7l%DJ;Dzur!-qZ}9z1eHc*Mw|!v_rnd&Hlf8`)g=0IKJ3-8G|<d;*$}MQ<Rj=D_IZ
zyBp_Oq(-Fc9-}e0nL{I+fz#w}X)(@Gh}Ej>KUo~6OK)SI@EIf)yOpRp*%5vS106PC
z_(;~WRGV53uBDlR=veH|^~kQt$cx<tg%%0K#qMy#Xo=tmxSY$~Su5GCQmsX!<!-IM
z@dW%5KxpKwU}Y_|{!gv2;sQ(nt#Ip&I1oqxt#G@VSR_Wc!ku5qmB&*WArx8Rc0cr=
zEZ*pmzZ+iO4-jkEtrnWuw#M#<ELr2$h3NtcS+d5R?>0K}CW<TP4Y%@=BbpBPVpB)d
z^RTB{YK4{HiSY*%1)h1sooltH@xS4A`K6u;;NEZtLq<cm4Z<4Xg{vJ>Nk!`YhCA|G
z9=Rlfp=6WTQ<EIVfowy`Y2b3McV~_9ILvL?;huwr49@)AQrqchyxyIYXE3-brvYrJ
zZeSm`)@Fw`xE0<zG2y@s)ce1L5OmA1No}-i!Hio8lZp^>Kq%vm#f_#M2-H8=ytZ0N
z@E>j^E@c$rx{H%Wgv(%18`;^mS}e5Dtpub@He@!sLt$gI!i7|qx+#-tr)4`ro7_rF
zN~w_A<W3YD)3Uh~thYULPkZeZNBMTQl9Ez6klOBUR$`IpaJ##C1+3_V#yQy-$aZ&W
zH={epfa7;Ce@CrnaEDuo$Tm(u>~P16j3}3>=TdjFzjf5&p`C7pM<;;lL1rgK=h+-C
zgrGW*+161zuLKX+NE)OL5K<2=q`TCE?ENyWSMZ=)3CiAd$Q*P>qQ(nc#&D^JSh`&M
z@1jGPKT^hk%po^2<%dW|=snk^e&JTi%y(6Ge;cD)#^|EyN*A!K2DxbP1vL<k%7qoa
za3?!UE98<DzHp~H84CqoeV2MFbALB2ssvBj2Com0Q|?64=)yb28grUW>#lVRo^~rm
z61f3nPP>z7DT7>bhJ8yiXKb8?kU2v*_i~&@F7+(y(?jbUJnL304I4q`tUKMzDCaVb
zUFtcuv4_?*c+SRY44HF;^8lC0bE)T<r>FK%=)8@S2buGPvs(DY<x;=PRQ1%>DB<ti
zN<wPwg4B2JR8z~IO<d|Ncji}jYJHW^E!&DsAa;wa_>q_d`7U)d+tph;7#{6W(h@5l
zLZdw;rN(#%CL9)+@t&-yZ2jHZIM;YjPQLLllx;|pY=TFLv5yw$ed8eE0MH@^Kmuce
z2Qg5>h4FAAd-oo#G&s?tgm^y<`DB~uiN*{+mqCjvmV2*O7_9OrJcXhcnru}bpJ~Lo
z47@&x-Eps$2u|`Sd=Z8WO}0s%!l2Qb%V4fmvq|@AZG+Vw8Ql#PnrhV^M0ay8gPHac
zJ9e+uBKVSxLlf;K!V!I8CQW8d`=GDM9>phhrkOO^6DTxFISyvh6gISv)-pWB9y`sX
zDKz#^@(ji4a5>-cWNpiA>!Tgf8olGuJjPvy>U4-Kwd4`)?&cdjPM*t&iMAU&`AO=I
zNDO#`r}bUNHe?9Uu;bQ@|50tbqhzbc>6TKIwYGXZ%`6g)wtCw4HSXkX@UWH{k7>P2
zYdy|<DMNOx^|-mqflH~m*3<SLW1Rw(6_<0jCu?(N%wt+BN8{Zd&27Bb5LgQ7d^)r9
zaji$aHm5yKzTy%WV5dC|x$lVt*l7>u;>*aQprQ1p0_A>lbW=7hZscd~drEuG{Rm$(
z=qZ2f^m4^O0&7!&uc<`>Yg0kH`;7WnGYehLtp!<E3mitSk*yYzF$%PRu@JGW7Lsn;
z3fLN_F}F1ccz9cZEUZ96c3Xj7pHN8@sM`t}HKr5}5)ZetnisTK%k6d((rbHx?vhPt
zE!<w<_84zCc^la1K!Ngc=GF^ZD!USYiZ!rMp&H;oK`tK;unGJ?fsZdRL;~hO0Tvi4
z=|G~SJ5W&caX~g;1c@<0ccIC_0=4u%S+L5X0=1>F0_hFyfbwO5Qee(j!##WTdw@Ms
z<!qQ)_ctw1X$QV2Cm{u(FYO^@^Hvzbax6*!QC-e|7AR*6RCA`nTCQ*g*utG!9xK_d
zSFyK7X}_<;QwvH3)ISSkWq_uD`ey+u12GI0!}w=`=PZUnl_{Rn!tHXNEKtuBh{{y*
z(C$=$tV|^fmFejMs!T&%D>&{#0qU&0Fnea1=4Nk>)|{o_SO(33CKn2Pe5FNCIY7Kn
z5Q-Q-iztBguN1I|!}zghq2fd?xMI7;3G6EcvOK|4AYCbN@vsGw6G&GIA~9o*j#vx2
zoG*H_&Sk=5wb^RXi(bru1_-)fJ(sh}t4#K)#(Kr52YP~@jdGrNnd1|*Hjeg_yl@>A
zo8lQfSM621{RapAyyR6|8^_2ELBy?dhF6)L>0PD$#!-nsh0XB*`pxjlst+XE&G4e?
zBb$SS&1ZP?XM2UsiNS3?)2qJf6*iYVw43FXHkT~eoO#LSH-rvIQVYDwGOwD6S8IQ9
zRD!Uypn0&sE34}uuL&1;QC$ly9MEEc*R|}n7NWj(F7&EPZ);&y*o(Z*#yqG2BPu&}
zu@|Y2-drRL?pxw@)=yKV0v?R_I!jE};!nQrl`{-XxbbzbbR$S8_`2660s<t4`??pU
z7fp4LsAFFDM(&lJ$chrI=siXu?*sBRY{g_PR9R#9k&QlT>^^8F)p%V65|n0Ajn@=~
zZBWTZA2r^<owAQ?Ikp;a;T?v_`#>D7^eVl~`r${14j+j3sy_`GDH29dQN=^UcuZ)l
zqU)93+{Usmnt3a|c~)OE^HzFM#!6vyz0w=*DZ8e5N2;&%MtT_SdDoy;vjtPMj{R5L
z!^<JA-3QI7)!sZ_m%?T=r&fDWmx?}e(8p?T(lTL=>|?bzb&s)+W?hhS-rKDGRPDpc
zx9v`7y1i}Nkfz()UOC;+1f9I?#VRQ}aiWvAy|KP>AWmt+x4rQ`Mv(V`wRW9X>0>qy
z-!)*w@4^F~dv@sX!6Se7yk*CFu;aQX?C$HK`*n8r_0at~uS>j)1(kZ}ew`Nuf#|*-
zx?kswT4SsyyI<#x-D5Q4-9unKJMpsCynMaghlYW#_sZ>nprWCV^<KXPs-chdUKGn~
zg_Te(Z)EpO)82V<qYa@$&5gF2Iv_TBU6w0!Ky37)LKJH1&|;%ECEn|TiZ0dM=uJOp
zbmnTJ+TOyRn68zVZ?XF@pyn2DE`Ni8w+!^L#aq--f*R;!i?^(cQHu%_k5P;7$$UCp
zdr#@V$HvG7#vX63$d(WS#vX5ouhY~97<;_UTS&-U=()$+vcL3ZF7%`db&t2zlg2q(
zK!XY@^rM;UGqvAm_dja)QXjn>^~yJB2%(pw-U4fG*GDf$y-4=L8uii3QE#-L?4`c!
z<)}AypK(MaHkA0sGTUZrk2ori*}c#%&M|MU6$=f}%Q0`TrG#yOUXFR&w6jR`a?IQQ
zDUrdI2IvLF{4sBb0a)w|jD&Mklpn{uPxj}lSWv-h!wD~6#d`g9<e(uV1`lOJmT3(-
z;R*W2Be9%;MBgX8aybKuzE98yzYzM<tA$sIoBI{^+l$V28P_~5;&==!E9x5|e9qe8
z(+F^9?Mc=MaA&<()2Mt3xttfgSuguU`4ocW1+P{p%BK*OPnW&Cd}<2<sF$rZ03>8D
zdu90q5~!EGD4)(yH4>r({Jl5xoB7(aN}KP!N<D5kusL57i3}uKeeZ3OZyZN0i&lt-
zTVBO&9>`_`=4(wd#v<)~M{}^O_Jn)Od%Ha)_FL3`iRcyN_{=YhwIZc#yieLAq)_%7
z?~{uINMMZjxx{`QNNVImiBGjg2o(@sIexoLi<DORq({I+lPaI|2uL)k@>vB&h!&rz
zK3-t-2LXhscIT8<r`nxUTAk{X84tohn(C9z2)mrqeOVdlj4&jp`?R2NMwpy2)5o3B
z1_V%N`s9KP60$RW(itFuI@2d>*)Z9R`PdsTXo2=1(306L$sx=qOIkcdOXfp8c#~o+
z42L*h^C?R*=@r_4IV$m|h%r0>%xl)LKmz79pIi(<0_HUz7DK8CK%yde%@<hW%cgg8
z&VaytpX%n*lmtXFSl~lF+r-G_B4DZXR=v=tcH+ziQc$HCv52*JL(BIr_Nfnv;x&v;
zoi#q?P2c}fybi2{2-Jp*C}coF?HZpfVL<}7#wSZykWjnE=Xn!qQwd89UQWH?Q&;;$
zIVE{$x6&ueDak@PwaQ23)Tfl_!&F(T>wL-v_Tx(JXeIu#EU9Ahuk*?D205s-&Q~C6
z6_9{l=aVl7AfeJaU(p7rL=_S-#LK}uKKXJWS+LuBGUi^qud5N4bBix)zt3TAa$whX
z#8B3Ewf3%Si%)A}+z0I<RB*oQQ+BZ6n_AyW{3Q$oKD2q)C+kg+(B@sAtT#bIn|FQr
zJEVb#!3|XFQ@2Y4Ngmp5vkW9zFwlG4KzDErP;Tz>Df{3&cJWQEdnE`<35wBOK3Q%?
zc#Q7y$#N4Ul-T8S?YpgnEH`)i)DLbeVU?Tj`((LE?Vv04+T)Yurewh#dwtGSn&-!;
z%lVNn>xi6^Q7H0}PYa1D8Ko(CNK8pK>@CgN>X4-~9zpbwH6uZyqeC<!Qy6TNX3Jrp
zl5hHXnq!;a(wf{2hRAYw%%5vwZx<vQA113)#*Vq1M}1jmrA9GG9`#unJ4PDS$s_>+
z!Cq&n1QN1!mP#OjT4yDR7^(DyND^fr(DDnrCF%2pl_c;KEx({7!Cx9<lqA0PDQEug
zc?S^yLPmHLBmlp*<{d}?er?S=knrf&KF=BHQDX40`lnAlEj=oEXm`>IE6GAwo#J6d
z#)`X~=Y3g)-%4x6(e3%$DK$>kx+MMg@;jQd<dUT!9zpbyWh{{B=@J<Wdpv5K)c=O<
zct>m5<{O{l<ZBz4#P!t^Cp93^<QpGOYG{vIEpj<;__C&(4s(pc?jM9LkFxdJdPn0M
zKF!bf(u+u&pM1=b(K<E%$wCDes6YAYiC6#$)SoC8W>bPLB2C6*24^(Cqil>Ra|*Z!
z;xT5fs2D+#lo?NRML_~%j9Jp0&;24=bjPu6|IqF)8)qYs!^W9%&4dgP#+h=>1PO$3
zCf3ZZTnSJUS)YwsMfpS<fl}>68-Y^oMAIeev?88rCz_~(Y1J*FRkzw?1D4_J0R*(K
zHs#_A5-qDux%h%aZ`G!?_!g0((@gPp4+22bY#nIvoo4Gmi|;g3F1`>3(lir`@4NJN
zpKv)>m|34^9^I^MRr6Mu$c=m#DM5}|Y4VkqZQG_fTdp)^Amb4bSDJF+1qsBJCc@-%
z@=gL)bFMX&cQV(vX^%N7@u!#ocz||mO<h!cAkl8E=@0Pr5+o+TTC?ySGn*Hf#GnbF
zt}|6}93?sM+&VK>!j}Tc0?<0Mw6oEY_YZ-LsRYbe_@Utg*n#a@x&*YP1UWTh>f#MH
z!JV2hv1s?_ZGp6jC3a{7N;cU|$cvjyT^utdxED8>o&wrt#c*N#t?Zp0THBJXrc7pF
zqRCcM6Gw3%fxFd2_HM_Uz(L!XXQ$So<u+5C%K(S`w9O3g?RO&4WSf~x8LOyDOyJGZ
zxyMvK%vA2wRyr#2r!^pYo!n!}<s5Qox5t#rIY?M_kLmdkR;A^f7(A`)HP!v5Sk5I6
z?LIK&axPg&EBj1Z&f9Pm@Zx#UR3c^~%xZRPEy_WN^*o`}L-ZarbNNOrI-z&WgQiEk
zu7CvgK@(dM6!!_*i8w6cp0#)%n_7phu*V}bJZyzMNHjcrJM0q*ilaIa_Uy?$nzOvl
z)_`6g>#V4UB!KFys0Rt4I*R%}*vW6?avn3YzGjQ|X!kZcX67{E$3cxK<d3tT_Gt0o
zaZ_%*gNblDZers-f{pG*6g^+DE_=0D@GDbpyn_juuP8InhIu2(EhkvzUM&$iAxB0`
z;!?Cfj%ioya-K4?F0-9`wZ|HrGBqC^TB*gP!5P-<1FdJ-8Ea%<Vq|Bmk%5E?XH1va
z_yCEKoiTBEKuNlo^gGX1eW0~0J8vUUW;}1^^1XYKAtBQg)fPw~oHtQz_2dZ9^Ahvz
z)9xt0WFt_*xn$;wgj~!s<0Z4Pr2}QgOQgfy7+cciykcfeXY=-Hz0E5$2li7jn54m7
zGnJ6J)e*jH=wDcPr{-bq{o0%5;EFhc4EnidjTIy`y=G-#km%<c+4)Z#5D$MaXML#s
zx%>wkfmZP!Yy=wX52mcqlYFc{&~*Qda#fO?GAgs~L+x=#$tb^^z2KtJC_lVHuh$^a
z?I=IaIx2V@P-9uA16q%=vHshNQ{o@%mj+7m8hfn2u}J(Nsf{0rzYj-1${5c!9?<Tq
z7;huccGq|tfilQ=8-X&&ctW_FBS5ywuauZ&?D$^XL>O>TEA0k`WyTyhyvm;|=3kPh
zmMVW?QjUjGOO?NAGowy82B~F=Uzx@Z9@IXo#9tN)?ORRp%jGc1w~43tW#EAX$`n7G
zPOm#4k!Ys)<J0`2NGFCUHK+R3W;|I-7F2uLum0M&2eFcJIcNH_=J_3FdHCTG1D+jJ
z!HPfDx;{G7uel5#Mw+6iVSXjg%netJ7%^yM_~8e73;pm2`r(;Kgdkxt=9kM7Na)A>
zSe9_A1{^$`&9;856_(AmMhGSlW?Lf!NkV=ZEFgg}+mB$0as<T6T;@5f#k<V45olt}
zwGpVBxqi6^o8pl(*N?<^g5F5d*dq34W!PU2YhUFp@S_IeYi*jwxXdr!azOxbnKdeq
zKwM^x3M6z|Mx&ZR%R-v^Tb*hDi8jm8e6`((2C~{OUvMFWMyvg(T`B*jDd^uq5l(dn
z2>9bIzpOhzqUBqDS$BX$%eVYi-H|48gJ0AgAP~nJEK`7l;u|befCSP8zpOhz@}|hZ
z6Y9YfO|dHZvqonoe5Q@h&fDYHyuubu$rk&hEkFQrpEWFyfZS)<0wf^!ku6@MIBrU+
zA7Gci)D|>9;8${au!Bile|@nsfkc}Fey`8iD%!vnN7$xgT5bO$)<~N2!u^Of5|Ds6
z;&+MLEFb}K#E%t$vI9sgXGi>gaf^mX@m7DtALwm-BRWBY&)H|kwJT+x+nr>?@Spp0
zMHX(#&GorI(m|q<xjy%IE~B$cbOK8sW9kX5clj|Jfl9_>ez|)G8K`;8ALQ31s0k2`
z`Egz1V~Uif6sYGilTK(y9OdV13@R4S*+Zow<ec9nHb~J180Y-B;_<G)K!;Z|bN{Jr
zb9A|CV^E&BYGY7Aa@CqeO?jTUO0!5B169OzKbw6@`?mbLjX?#(b$_l%m`!;Baoryk
z+o&L+$8~?}HavivlErU`0A^pEMgeidieEfJ=QphQ1&M|?ZpUv^Dj-G$c>MMN0jrJ*
z$aDu1!x$Bi=?)~2Mg?U2f&|j20OGed!nYX?#R6HoS--Q|T}@sLXr?ii){|z4UT0N6
znUYy~R#P06_*3L6JOFr=1r8G6RRMV;2qeI(0yxZ|TnZAov?>su63904v9n4HzAxl*
zP70`#137$S=r$K^s{<(9^09?<n~BoxrA7g&-8yl_(BCxH`Mg$EHqBOw>Vjzjxo9=x
zQ)OD9u~_y%0(e>g%iga!0&YFcVC&9nPgKsZ5h$u=*u$ckG9w_Dh-Q4I%m`qKpo>l*
zanWf;AU;)GbRrrn1XP$2C>n_BROcdm(SX=9Qyg@+20W<20!k~hZMfg?LC*{t?ikMg
z*jI1DmR!(^%J9T8F-<5IkW~(vK^GP<`E?;e;V>;)8r?W3TtA1Y7q#x)=GX|d1kbVU
zK@)0DKrZ6V_=K7hz!H3rW_2?R-MJv3EM?;_Y6mLum!$_ysRg!8Xi6;zxI|r#R?uTX
z0Cl}^HO`cPl3se-)pV+aEkKuZVL)AS+trebwu@|6OD0^sxG{J27@-*Ku!5bsq`g?S
z!q$o==?YsbnxreN=x)X*>52djp>RnDL&F?h$(CN$x|Xf95on68w5>xm{>ngOadv<v
z&~0S^=SWX;1WeI2EcA^wsC<o$K&M1&0`d*L8K0|b0&#KN01^mm0&UtFyC~T-qq({{
z^WHbu3@_hoW9Y!xY-7+Y-5iLEM1eNI*c@ox))-BD<INPD0`1D|x}s$(U3S?R25hk_
zAWs${1dLsQJS*<$7-&}@5Hy$<FAI%b&YJ<ORL<`-Pkq<TK#or5U^$Ixq53JH6tHlG
zQB(;MAfWj*33`f!<);9a-1=M?4{rq&ejgAIX-xvjZ($G#*;@guV?q|x&jE#BP{Bi*
zQXqNdO(cKHx5Y>asQL>!eUw%WA|VW#zjhJ{;a>uH?G(V2?g|yY65=66H%NXeK_p~H
z72;IkmJ<oC#N~XYFso*LO8<Y^jb154HAXMHB{b-n?44}AZTp#pvhV^ENHYs%;RO;(
z%`C)l=&iAY^nbMw1zaNB<4?o?%-+k^3s`$qcb9-GN;k-Gq1y<Qd0r(1I?5}dA<tzm
zsCs$HT)PS3&b2!wOU$JvxY33tpysoas@|<+zTJeZGv97P8DTy(p_nhBC3X?(m!o$r
zS!6dMBP}Y_#ngrjnk*`8(9odm+Y(BCOWBqj{jQRwb`zTKOAF<00c6l*X(4tCp5jgT
z+-&L82ew{eH{p}9P?l>YVloyYb`}_LMRS*POJUZ<pu>EbEjX&XGsm1de7&U*_2W)l
zK~tNPS1x4!m8<VgmtF|UQVv`wav|swYdJ_Lav_Mde5VT3QkV1lVAjga*>-vlCGmZb
zzwBhIrMT8{BdGiwRE@I^T<a*6*E%?l_3NmgZgVrJmh&AN@eI!SDX3Qb2M7J!BF>^*
zC|63#&B_e!q%X-SnH7>A2N%lC3Q3QHM59?D_yX7D&;}1@vyR>L(x+yJ<W?h?#0}LG
zg&jyVnH_2<UP(bB<ID~<?kp7Hn@2dEoE^&R#7`$l0Oyr-IypPkz5~A#P)d>Y8vCG|
z-m&C0TQ%zawUFHYhYb38Erc0Y!BqpbkhQ4Ldz3E>$&_EpOW%bdSvr6O!orYCBovU;
zCWM7_Ipyb4inL|ytqOfb*)kh~in(PWS<FEO5X(YAarFQsAeM#FO^uNp0fAS;W^~v8
zTvlTv&`V#9jX-f&6AHHC1!XCZ!<tarc19UTfb1%EM-RPA*(w`>)`(U1Feofng=F1Z
z%ENM12z4**6O_^#v4(Byq2E!q#zvsK25W2tS|iqk<PIvDU=(XYg(2f1jsTCXW!-z~
zkCd;q5i}sIwGpVETN{!)sHJ?3SR0BbjD2)?UP^03ZRV4ndY|m_S{s8Zxmp{8)`(hL
z3tA&;NsB64XG&>}*q!NrmtO5C-)&>i8nN5PpfzH*tp}|UyGf6=bXA~~t_mE=6yL4C
zqm&=AF>--%$i|?n0*68_anl2BfN>~<JE&D6Ea)Nt^Y+oJ%Z}O*^#O6zhT!)ALM~C%
zlq&olK&VA4qXX9hhx~Qyt3G<CiaHyC&iLy>xnje!RG~Bex{y~am>{7<T?h*%m5HTv
zT>oWA>0~xzg?)6BjqIxzmVqJiA07ki%aAOwKmzN_kl99t7#%Eq8EW6r_zlOxk^Kqw
zVPE~pvJ*A}9n+t%$3w^TCqgc<Gf}G0G5v{9(-OJ|3~exhPqJt4(;q53X(KcS!buyU
zF%V9M<Qof`0O4e)IK>yAQUy1O&#>$F>FvtS*a&$*IAbH^0pUzY*5YUagfpRF*l5Ld
zz%}FZY;ZrlP1$)H!3Bi#Hi8QX=R@*JO{wAn!ue1*YW$HS;0p3(R@YA-QFhrzXaa=G
zHbN61T((Ei1PGUD6oWVdZYN)56YtlbExT$X<ii(NLvqWtRLKXz)sVRR3e)8S;cBR~
zrSTv~aAV_)HGM#Txcr)p;D!#@Y#rP{xMq*S4TNhn3fgfhRXlhD3$d*a==XHFZbNtg
zaovXS0OEQ`*1Bi|i0dI-A%9s!cmci&3b8vL)Tfo-v@r^Ranr^q0LIObe1|Ai3V?Al
z6pb6Ni<#!dK3FFIA-zT^A0NIQm|kFv56g<KRPh31d^nF^3Wx4qV2lsrQaIm<ELD7X
zV`4WR(Ld@|ZA0KlO|1^gdp(c=M0GgSTE?~y5Y^#!9gHn_Ap@l8axM%ji!<7<^v*d0
z@TWCJOlYz&e0wP{0kbeH-y+crFbl(Yi=^rwB&z>~;rQaP*fb-CcqLjCR-flDyQPXB
znLo^TYuLL_=+4&5!g7VjBY-ap%gq{)0ACiyX3a5S?f^bB3FFSpN38!vX9rgLq`tTd
z7?!31X!?e&X#ikv*qR0a_6BLXE(hg83zst!&f1x2)L&n#G|q%^O#32r(t?)vP3+JB
zeSG;Q3mQz=a#L8wCP+YU3VXzk2}nS13S%301{LWoXuaK$nemkFQM&A~F=%gYhov5b
zNGj|S+a(}@u_KI4>mR9_Y3Xtv3TM@2&JEQ6sx&$jMm6(WK({3Aj<BK6>Q9v%3Coif
zFadQW91wdAAOUqGjQ2XK&{~o<pRu2x)dzO@%u)tSDD#=63`i0R%LN`J5IzfIfv=`*
zzE(J12xpyU3xB6i%0Cvy=D_0sZbiC$6~_7Zy{{}R_pwI@>s^|I79}vA0`jY{tU5pf
z@~beaj!($Utw^g=Y{y{z)8?n_Hl)U>urBttAcHoi!r0sD4=q}|oae$>quHL{>rZ;l
zkrtGVT0;xx#jtWEteOM39uNOPf3Ol9p$DD=^P;5(NMK$hJt$y7B496u^RFOa={SiP
z2w0c%Qds>qERK^T5A808<#Cc^;YIbEFl|XtW^GMF`Yx<^%y^g;Kc_cu4#HA`2KHT8
zo@qf6VBdvtrbU%UYpUA553{k)>Ajx*9sqoXf{QlahYQ5<FG#fcJ}mEUf<&?LeK`3b
zFAs_2m)E`zryk(tq2y3`_<i`kethb+CWsqi>a_)dn7(1nJ&@?`hBfy<a#?Gmv^CXu
zqau8x=?M^=k`oUkf@xGlrU;Ng8WoW#0wj<|MKJMjmY<X7a*mB;RpA;pZu;lYN;Ni;
z<Ku6jc@$7DvV%kP=D`;u3Lke4n6S=^5sbS#UOe;2DC1dRsNOR;J|aI#0TVLgBatY5
zfB_j$6WQN~>UW1HM&uV@U=lZi3ATVfesSRw&PWzx=Z5O@^Cw4g8X12_Qx~Z)1-Q{+
zY(Q1L64qy!?qy#M)7u5X<>fEQ0BK4Dv*Quo1RA}}TK`f1Rq*AAd|h^Njb4u6l?QVW
zP0(UGtNEioFgQITvK=vr8^H-$FD?T!&0tN3>vslcMC3`Fi@)*Ch#<9Kmj_K?_gU=a
z;d=M*EE|X3bY~IH1WFxkT+T(2ti73k4cDDY-l7On2j7)%Lt|SS5xepr;IpL>8K59B
zilq_x`T`QlEREpx<$WqC+mO{)Wj_0pzSmK{DkA+3E+S}EL}o>hBo*<9au6giRz->u
zMy<v%pk;05_+Ru2wY=8GpzZqFh<r_G!-Kvy669aJpkIpE+6Y#C+URdX)b@zj=m&w8
z+ocug8G7Fyk!uG?E^Eba8?xLU5x>1baO(CrD1P@?@r$QG+GE8pNFeQ@_#I2;ZR>J=
z9Lf4u#9>~`W-Y$Z%uKz%>n9y~A4jx^Fmzio^e58LAOQY}WoVE9|HLvhNPvGrhUVW4
zv?W7-nfYLp-rrI7rDY^=G1M<3a%&wVNkt-}8UP85FC)0?gwOKSwiHz-*q|}`fA=_H
zBaoR-MC5&D$N=F)#4lc@K?31K#M%~bOXRtT;y2f1XJTXZHyv!^IK6%uSYoM#0N~C=
z<VGt<z@3XU7MTkqZ;ux%@>*Lm{Y7?goE|B?Xt@haG`VQG3nZFcj9Bh!OFI!)g}Zu!
z0K!$fbJ~x*YPkzffppb!7f2voC3m4{P}FuV=k-WdHG5)${$>942)@*wOzTfO_{e!9
zqWltJeJ1MFmH1PnYCHhkjfhOuAOUwHBCj8S#CmZf;`t>a)(c|r_2Onk{W&7m3&}&f
zpCWR-kSwehw<5G&Pz~FTd@v@e^fP;f*`rnZeS<&<`{EIXI3_AHDo8FWD|(Q?9ut+H
z3V_5?FeVzlj~_}BDGqGLL?eBTBVx3Oi3w5MblBx!4XX7b)?$*rvIHD!(4@<Rs4mV|
z+wpjq5XCVcy|%QYaG1ojYW<-ulWY|!1SUmgOhN_-lcEt(UV@}H(RS^P*|huC-sPMZ
z&H5rUr&{-B=go`aQ#qcK+S6275EZv_o}8*X+b*zl!XqFqh{}`%5{L_;m?>W<P^vvN
zb}o-9E266T0lT?PyEk)ss%|(c!4rdm1OS#t<@Fqp09YQC*K<I^lgp!pE283h4l&4+
z>g!Q?Jx6k2y4R!fdX8iP==CVB=in<iC<1|%QC!a{<kxeCOw;2fpe-fHvMZzVdJcrq
zc4ZWYN6+!Lpw_V3Y5I_oHFgs+<(jD6aBI&^xh9GYw_@G|b73uee7c@`YHd{PqCy9n
zO>3ia0)hnY+NeCy14$bbQU4vhRv?ns3TvZ*Uc6S29I6%8M!Wam@80cc2CiqPr|X@{
z*IP~plekt~f<(9Lqw+lwB)VN6#g_R5in{icb2hTyyrNf?ZL}e1PiCVHL3=VAqb{*8
zgeHL47{$I2?VGiyJ(<lcGD9yd-)tk$p3G(&f%arJM_nQtq6rW-N0AK|)6&(R>ZBc+
z$usn&j#fKt8`Cz-j;P$Bgb*6-h+?_smy_CK8^*aWsvL~6Q9HGk^x@opv4%|lr4mfb
zv9t-ZFDml{S^!~RG~dJPN|1=IebIu0h%TxtiNW*4{-}B&D)NNnq1}g3nI|L*dE%oe
z<q684?P)*faMb>At}QsQELh^=8AzydI4YMukbpcKwQ^~D+RLen^3shRn5{d1RcD)$
zHgxK2Q__Y`T~t<XXb7OXsI1(Y;4L7Ubv`O8H+sK67R_<-%B=}a<Kt1*a(%txI0!sD
zju}C9Yz|0FkmHn0?m-FDgyzEu_SZRjpWq2(Bq>7$+=-~TPXZZG|70iU==TNx8I=Vb
zn8b~ufP0MNK(|w@-(3CI!BhAaT;k9H!Ko+;LEK9L4(7@kws$UY&P3&R;9x@LOcV!J
zZMh6AaE`T`r?(HEi^`(2i9%ltpNpdCd<*F-Cm%UKnl&Xed7fUH-S`F#n?9A!r(xfW
zvi%G6M?yEP0fURiH)+81F?v1?_*RrvEY!P(ZbjuaEN~%oi>4^H4j}~Umnd7XP=7f1
zi!~f@IUB>dp9^8gqnT@w{$Ox)OqwO1SBRryFiQ_EgCUP)V;AYYf@5RyBk6oT<gqbK
zOsXRDX=;ySXBO$*gX3bd(gYKIjf<hu#Nq@QMA!s&$71L+AtozdFd;J`hRPRPD3HPI
ztYRA%>-Pq$Y#I7Ux{72lgCT?ISIuHe^wMB;Ojf>NLZ&)~RE$Fy$Y9fRG8?u;ZyTN*
zyKNx)v4P1k7-$35@f^3yIU|;}fbCkMuXoLe;ffo1z)c>Q8B?O-V|9=)HfZtF2Oxnl
zlg8bf3*#YUKQGnq2{KC;H+KXhUH-;p&|(gIc9~uooD-8F?B;%$6N5)9xD5O-kEzS`
z9<h0r{oLFS^T>X<ix0)%hxsw=RaCHxi}U~+zg%w-219%zkH_d|eheqcmoYlEgUh)%
zhU536%k@i*7spVg@a3@s4X=iM{kA@j4OyW(OKM^={on}(QxlV`BS`2}6T|9A+nyaL
z=2o#qEA+CmRWVsqfC;~^ipin^Bnidj)gF*QSVd!`%-ew?Zw>R+AoH%V5hyCw#N>G=
zWPq?H78h4MKmuV+3|Bm=Df4z9GLsosqfd4;&&1?X1uhz8VsfbhNmAtIU9@I&AiHg0
z-B#-Fmv6EArL%-BF}Y0(89;1_nWB0H35YE*RIijSJ5Y4j#>D>8ldE)RX|41%Jwn6U
zm`s!)(XcjVCCUyox?M4zD0_i`CcA7EXxZ9j8;_Q)T``#{Aq=ElF=Way^!q>^kt$<Z
zH)F3KTCJ;%kHxGvgO23S6XeguB_}Lbf(fh>mMcL5>jb%yZpw5d8=quvt<`&%oV1&e
z?@q?#<_cuc<YWw+8eMr4`0fl#tkWxcov{Yck>3G2V+{Z#5YEJ8NeL1NXJRNRH&Aue
z5v21{Ot~6U&1L`V6Y^V?cnV|Su~-U00_##tE`=b0btxuGW{_A4FU34pV`3>J244y<
z$J8q^u@p)k+I<s~OQB?8Df~8OErlH^I<7gSbBC>mbFW#>#WQGe&2lbCpk2G|+>R6$
zH-vN9{0+LZ{Dy5Bs%mc7rlBagVfhvf0d#|Wi>tP3Cztc*Sk_GT^#=Xkyq{xQOw80y
z<k``2UdXlv0l?95X&;aP937W)6(j&h$Kl{V!_=L~5#w0>f9QWL8D}>k2ak)(AB=(w
znv9F%GXy$l>O_-sB76HE`XeP1<8l`eOf;Do4~RMlB$`Z&qYk3`A)Sb-W^Fd=-J4h2
zy^!Oo<GMK4gA579k-BLjbs}R=iOY@Jjj;8UxU4wv2o0yi<wOFBhEw9!MCwGgo)H(f
zl0X1wMqFkgko=*{LLh-OBQ7TrNFdFK!`M&2*qvR@SL0dxSm|c{H+iqdwS+KsXEOF&
zX>1SxoNJ8<Bmn1H#s&$%xn%4##?+Z?G@t!`i{7kczTJe3JwGmI6J*e2ejKx@FK+^4
zFJe2k=>3{6vYQalBFjIWxv>|Ke-6;5erK}wnoPx3{g6_=#u_@f&~!~)4jm*g*2HD?
z43Zkfu~=Q8DcG6JzaewqHvKtAuMIW^?Nw~BF~|`c;_^TeZGf>Mjzx%1<IZq|b4y%#
zFaAHLaRvo#wxbeH#0-WUV7A2N3<e39Epa)6L1G4PiF@9Qiy2G|K7+T$)opPxgC!5`
z-i^x{ELoVrwQ*|(ccvV>GyWgNEI5KCidm3QWv3NdAOX4ac4&2`n&SfzT6ckfjXtn#
zLoWs&*tVe;gAc6Gf-sOipwK!^OKzFV`B6OURNP^9VedU^G+`~i&2h2^cj@oveH7Qi
zBGSqz(vHYT0|ERameD{0|A-Z7Ac22`B8|ePi~{6S_Tz57U)iUYhF}8WQ%ggTBoudv
zp@Rg%r*V`bblzA-v;1>5?tT5q^3QDqGT`TN`NcP6fbe;|NSuCx1j6TWd9SdHsAFOV
zw*`Tg$E+y~5-pEeb_U61ttnha(RWhVxhDut$tesHqc~}gf@1KbWoJAE(n+%OKisf$
zxy$)VQP%3rs=a!~$a|&8s%^^2w6luDtAC?UbZ7HfMKT=m2#B+aWWodq#92kK>^}PN
zuAIhvCDY>*{lolrSBhj#0+-lDzBJ!H2Z=^kitv3DzkO8>YdU`@Qf?Kg<~!N{^G8ws
zD|7jR?sZh+v6v4K2G$Qnaz20r)(=H;K7ho0_@T&it4PcTV(|I!W0Cq(k(dvXhjurL
z<b04U%!ivrG#?f;;e)|SyC|V7NvOHzlqTU`PycRcc<3|iZTxZ&8}gyvF!R<WeVG1R
zh={$Ra-KyNC1e%>2~`&*WC8_=E*B;6%0TBEAff7_L~Kby9LNy^sv;5=C**-#Ik|fI
z%tMC14gSQF<%!!SCC@HT$TW|qz+RrPVx*kX{3;g4Z;kZC-#}SqD@j>?m8~S@msPfs
zlwVdQ5F!_8Dt2)>-%4cdWetANFXX+Iu&z#bp$OTK5F6GYfVcr)&~W#H1mcE-3=xn(
z+>k(s@DFvnkpDKbPk+?wns2t-P=stw==>&{3K_K7oG9=bFHz~)h2~o=JAOl-Qc{cW
zg=9a3RGX+LK74`<+SDd+1C5r*E<|nTro*2w-FC}#Akl8SWjc@~dE0bd$mV;v>F&bc
zL|CQ+iGl91Oa~G`do0s|1kfHb-D3QpliJng+@HugmvESOvH=RR*vngTax&d-={b(P
z{R!(E*REvA!@`nfAke{K%PJtz!C}jiAko2Lvg8_ChPq<>&bowhJfWKN|5qjWU+m~F
z`j|>Q6;6RHpz0EG+JFR9T|!P9kch>)gy%S7k@iH0!KcmV3H4Y)OdH8VyDt)Q+DI0r
z&6f#l8R<&C`Z~dvk(r+w{^s~wBvCwp4qsb_2MMgNZyUZVk!N2=%sR@?S|$e*7CCE~
z93&vlS|$fcZOG*GrBgSY7bda}vL_VdvBbp$Rtoy{pl-Nk_H9D>E}<G5>6%$LdCiRT
z*q4ft>3t=k-pM!M#4`-wYC`St9~|`ZFXC8u-zStC!253t4vyd~_GPy5LhtMUqcQC!
z{E$$)+Hhq19}{Y?+i*W8lrhCBZ3s*C6qK^yvH7ZTxbl~TyadO!BlC_bR{vnbk=;fY
ztB>D?8(XYQ033e&RSXtsOtR<~k~j*P@x@|Q++Y(N;EpR++u68e+wsL}q~mSiNyW+(
z0RP?s#wYj0VtGzuaGUC4wTs=DUZP(rmOsJ7JD}MynY!ff&)q2Qr?WSm#^UDFi)EC8
z3B9Hl%hUl9ZKfB~>OukEjpAo^=I`~4K8}*vb|VVy*~Kz<KnRUy7bADjMWt?JuX*eT
z&FIu}Ua?FaV4}&qVwpNXqRG5sq>f+c9$`0-&h^DgCiApz{G3yXKShGa14QHcVwvDU
z0%m=&Oz<E9v%Xj+c#xP>>x*NVVv*p9ArkzCVkG!+bgQfzWt-i_N}>6E4*!YM0ngLV
z6!Bkh9q=^&$)a%PL?h$8QVuCg3t9?x7t13aKtPM##f`-*0|_m57o$|6JlKs^g1yD!
zRUzEOaF*^Zmh%yh&~R_DTth&j;of3v4e3VZ%z<LDIoUVgaCSLhYe28u2W&e~VR*o{
z0~Lk`iZLsfHNdp2!2B!DVwvgr#!_eAx5fDGcP#BfR8R=~yEt>FANM;-|84mbY@q$S
zSm(EeNeXEHE~eigp|zlbT=!!!yAd#!HviFXL_zRlv3ya05E}hhj2DGTqAQv;nf--W
zPg;&jihId`BCJtKkNABZkZ3e23IFZkJ!v?I8kbaNv8s^qexq?ot)bD6YXGqctUr!m
zN+u-n6C3nxP6dyJ2}w`VB1tIOw1nR)t{^v8vEyN*yj4|F6{{SW=)NlH7O#aM(WEMg
zt3!0-w}Kp3om5+y9oV9%k<SK1jM5S?#N|3XM&s(FR~*NJMC0ltj$`TGLIwG5GTRz4
z?kJg@RK@S<fr%!QlTE}aFi13+oW!L-x|Cc&<@;3DB5HIknVM9^ReLbeWNI=<Ie-R9
zh5FQFSr=&t>>y5K^P<KBt)?Ya5q}l@s{OR2uT(an{rhRjR&Drg=?dCVd?l&2HCu>L
zwTT(Ut-!Dv)7Jefc4OMQe}x*;uV_@zcKghv+7df=+$65%Ic^p{Q!j^Yjv2vHJQBy8
z5CqK3WP$jlB#?lanQY#|SWX{=b$2;mPiB3b(c;FkY}e~a9K+K^)$WK#XH8OB$!d#@
z&XxE}{L%pUK&weM5}pPLw3;ODzEB+p64SgUX|7C)(<)-{L!38~xR^{oA|g2m!8ejP
zg`*!Zk}Nvcc_Z1StMMHLTz3k`x0A}<<|#**Jy7M$XOol0=TCtpW<CVq*SC}MtQaJ3
z;1^#tfP`XiC-GGSISVA*^LDabZ~mJwMDoY&?=r?vHtkNCF_TnUo8LLu{Z&pkJDxJm
z4+O{Rj3O|Tl*ta_=q!_z@3SC*mPz7$R&++Y$(dxRmF$ck+hmgAmc~yQE;>U>-Jetr
zB~|mH!TL?q%}lSR#&2>e!L<6L<htMPkCN+tyFW^<`>8)+bxN-Llc7VfI#n#_KvXOr
zCe?#UQL#uK+I^Ii6^mq{VmXkciseKu?O=Oc&QFtB<5|;|##gRSlR18VbmF1>^jT7A
z%ILF;B9KrBG@q_HAYs4HlGw$08Ri6yr^hnSv@%?d;IX8_??Mw7Qpb|G3thp5KpkhZ
zS{prr$CL8MUp;&e`*;%XL$v4aA;W&fuD3SYhQ3NF&B?yRM9Z&|En68Aaghx)63Y3^
zJ#BDnzx;es;aPyVkUF0%<?ozC0_uFSWlwSnC!yo{WUC%VM~(q|UtrVQ8J&X{Y-Q-M
z;Q}cm6h^>ZWEa~(;fuC1bl7l_l)=0KE;7d@c5i#5OZZY!{)94^khzq^H-Y$h4iZ9q
ze3#6;(H@^Pg}+NGJUtK_V&5fOwKfimaUnnal+4WOXgs8ZezLWqBZr?zD|(4QGh~8M
ztU;MkS3D}E@PH>Kghr)0bTV!VA)Ky_ODS#4OZfS4Hl?@I%Zkd4V<GS?tI{tVk4v>|
zjeMr4J@6%5D(e*%>0;d1q$-7%9on<)L202nrA$t-=7Wv)m7rl0Fht4%38Pl0eBuLj
zkg$1m3daW&ryvoh)v5U8l*kUm;Mw7&l*|s214Uj+$?PCmlpS75Av^pV!vPffnVw=D
zyBgnjnVyof23&Y?dP>exkX%aMT?7ejrl)WOwU`3Ez~yAAtTpWUZpNa<ER_@FfnGp?
z{%VS~c+Mz}g8;&-Dd|U$(CpO|{78pJ1*F7mHn_ql4bDy}Jn;|{GP6@iJZ-oPs5xvy
zh0!iJ$Ht*_Gly`nQGh1UYc9jZv8JK9DH#l4LS}9X!7u^$k|2a2UzvHRJ923G%9J9a
z8eB-NOkpR5W(G(=txUDOiw8N8P;q6d-JNs?0FPmwRcy{3MoDm0O3o870kJBDc`}5{
zz@e+z={t;Jq17p+y~L#;U!CgI*_c7mR6tSwCL4LDF)Q|_tqVo@o21Jl2%w($RgqNI
z-ju_<i!ExP=d+5tjPjzjDSSOcZw@{2Ci0JzvL&S&Khy7+_LOfT#LFzX%lMn4{l=8q
zofpyK8NfHC)M5X@!B{t^@Fqe_c2A1T+LZEMij5v(w5<e<fq)@?w-O{QQJV^g^&TV|
z*QRjmiy{*wBC|GC{GN<VV(`e^W<{ptK#6TuWJ(rA<~E8<{z~5yLE+quFVOd}2KN|8
zpTeIarQ-n<+MSZ0+Jb~ayHim<`=9{@=k65Jh){@LLU*TH?}0+JY~nc-qMtB)Kc%)X
zUZwqrUM}Z{sjSaguX_#F_`?)_ylon-WxXhZKh9jb*J$GC_i;+TPJoO4K2FIWwgQR%
zK2D*`rzHy{QqspMS2^#ENL1%sqDh(YsencMy3Boj4g9!FoefLFs7uKcfL?qUbt&vH
z3s_oq>rzenaIfJh!4fB5{LrQ3U|4mj)>hwK2z}S3y53`4r{CQ7x}2v{SwA9{&fz!r
z2am`U_rrmt>r_f!$@J2YPh)!V)hP}VN`dAlZ#f{*!RZuE-f$rpBp#k+Lmx1H6FO^U
zKQJM4mh4|eE0~vN=%vhs2aH@t=#n*Y!6i0L+%+^0yfkyKu>6ONx5HOb@|V}agwT}~
zE{E_RIrq}cy_RC9A2JSvucZ_ofoMuI_ZmguP636v`9q2wdDz$$`XQx=Yo%U3Ie$pu
zgufd+euvBXQz~mT`^O_jSJzJ|Tu-9Vzk@>m=ae#vjT&OKV_hFLoRuI&`G<!X?$0Ut
zpFn_w%0H*DeNS-)5^?r(Dmp4HQZg}k;QwL;zT`mJU#!5FEDHQzDDZy+7x`Sy7t>iU
zr5$G9aL=J^=cC3$t{2leah_Ct<ezbAr7ialyYE+qGYC@TFgyhKxHR$xelRx2NA4NV
zM*Pa?7#yEgI`9MpCS=B^acE1ctdHC<fqn2Rqf2l?S|%wliJL}}qU!@b^36n+c+BV?
zoS0VHNgVRc#B|3_WI4$2SCR3L8C`=_X_>*ngiKW$8Juoj_$X;kVkaLn+6O14l`@G#
zNpn)VYd50@m!VaVb$Hz96|1&oC}~!c%pc&pJ6+DH>8u$r&=a(gZ?a8~8~3`Vrg7*>
zPP~(xI4!NbBAnRw*Ki_8aaSG>VU%g<sCc0QiLp&fH*Ln92og@5mM(ckI*}OMiPO_^
zU6mZ@Gd(TWRmmbJPEW&$S7=Sd*A=tVSv64dYgFBbe{Gz1%}(cpxD!os;v9HQOfrzr
z2{eDN$N>rTIqBx5^pXb>59hIhCyesQJX?mmIFDosxeTb+(n=>b|4G9er52z>{bF)w
zzLxILQHo-~^Vymwj8JfXTGo>$pJ?;bs3+qb4$fS_E<Ir+f(tB%o7|ZT$l-LY$0TRs
z#~hzD`UDqQ4hIv8EFy;swcyOfZ0?ijYq1qvCcjg%n1U<Jaj*a`VV^x|M1xDxvVy{|
zPyuI28abqh%OLkHW#0Zqad2r`;WrMU0M&R))3|XcWKiNQV^5IGGJEV);4P!EM>r1Z
zyX9<ge<Swm<!ME%^!VK!$ShCeqc5Q|%DdOmNwiV8c-YWk{RjPZ*kJt6HN|}GL9cXU
z3eWlXYeb^)>uG$yCOW_ua4T5&w?-_q!X7aFUll9Toyv@-5xsZ0oU77VZ?mU<Ydqyz
zmBx?WQ_$W;LHlM}d5Z^aB}kYKw78!M61~2eE)<^zfP@p@Oe2?3>H&$UeKVbWOGYg*
zc+{@3qE>RC#~LeYC5xhV4MpvDxa*vQ|L16HI_prTdVn!pac#8%)=vTZ?(KjD33Wh=
zfCUNQcPSXD2*dy4gMxtlYM{|HSZjF#Ovu!dCs6%D2GlmTXrNIM+Lo3@A(+HXQ*lo#
zhoAD!?u=uQala$D+lmcvA+?)gqk;<|R^MmCo-ula-nUHd=dt=e#n@<pgkasD`S=+F
z|7**ByFZH7{nQ_}aH&7o{2;sbtg$(C5R-}LComy&FkRjSr+kXq+vPlx&Z=V{{m$s)
zIzrx~V!k(d?`T^2jFk*Fx>VvX;WzMMi=&p`Kw?BkEx&<;-;Sn}pGm(FgZu4M%Wskc
z4L-H}CRyaSPswjv$#3{Ch)$-n&LP{psfOA8mvX%9@~;g&llyzatu#8B&MD-HCqRBY
z#Y&$ung>r=W&jiTr^pO6u><73)9k;WGx{V?r)3QdCS*>hQA1agsRHDwGnhirztN^5
zt2kLNpJDfLSP)F{4h9h}gC+xb3k>}%oBq7<bm*)#eFEH<XVdsii(kXIce|Vy(^;qj
zh8T~#E~fFp4^54`$+(x(%C|H%${xmF;wvohq3Pwc{Ecpq=;3l2R|;uTfP`@`rxV{w
f;}U}#_Z!Q&k^?QjVR=K1Ch9k^C%gZ_oDTmVH1-{D

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 17cade2a..8291c3f3 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -5618,12 +5618,19 @@ type TransactionResultItem struct {
 	ReportingObligation *ReportingObligation `protobuf:"bytes,10,opt,name=reporting_obligation,json=reportingObligation,proto3,oneof" json:"reporting_obligation,omitempty"`
 	// Set only on a BrokerTransactionResponse, and only when the Exchange that
 	// owns this item refused the Broker's whole sub-request instead of answering
-	// it: a non-OK answer, or no answer at all. The item was not purchased.
-	// offer_id names the item; transaction_id, billing_id, cost, denial_reason,
-	// retrieval_endpoint and the other result fields stay unset. Every item the
-	// Broker sent in that sub-request carries the same refusal. An Exchange never
-	// sets this field, and a Broker never replaces it with a denial_reason: an
-	// upstream refusal is not a per-item access decision.
+	// it: a non-OK answer, or no answer at all. offer_id names the item;
+	// transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the
+	// other result fields stay unset. Every item the Broker sent in that
+	// sub-request carries the same refusal. Whether the item was purchased
+	// depends on the refusal's code. With the code "unavailable" or
+	// "deadline_exceeded" the outcome is unknown: the Exchange may have completed
+	// the purchase before the answer was lost, whether it gave no answer or
+	// answered that code, and retrying the agent's request with the same
+	// idempotency_key through the same Broker settles it (see
+	// UpstreamRefusal.code). With any other code the Exchange answered with a
+	// refusal that decided no item, so the item was not purchased. An Exchange
+	// never sets this field, and a Broker never replaces it with a denial_reason:
+	// an upstream refusal is not a per-item access decision.
 	Refusal       *UpstreamRefusal `protobuf:"bytes,14,opt,name=refusal,proto3,oneof" json:"refusal,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -5782,10 +5789,11 @@ type UpstreamRefusal struct {
 	// The Connect code the party answered with, in its wire form, e.g.
 	// "permission_denied" or "unauthenticated". When the party gave no answer
 	// — unreachable, or the call timed out — it is the code the relaying party's
-	// call failed with ("unavailable", "deadline_exceeded"). A timeout is an
-	// ambiguous outcome: a purchase may have completed. Retrying the agent's
-	// request with the same idempotency_key is safe, because the Broker forwards
-	// the key unchanged and the Exchange answers a replay from its stored result.
+	// call failed with ("unavailable", "deadline_exceeded"). A refusal with
+	// either of those codes is an ambiguous outcome: a purchase may have
+	// completed. On a Broker purchase, retrying the agent's request with the same
+	// idempotency_key through the same Broker is answered from each Exchange's
+	// stored result, so it settles the outcome without buying twice.
 	Code string `protobuf:"bytes,2,opt,name=code,proto3" json:"code,omitempty"`
 	// The party's typed reason, unchanged — the ErrorDetail it attached to its
 	// refusal. Absent when the party attached none or gave no answer.
@@ -8760,7 +8768,10 @@ type BrokerTransactionResponse struct {
 	// denial_reason nor refusal; its cost.amount is added, as an exact decimal,
 	// into the entry for its cost.currency. Amounts are never summed across
 	// currencies and never converted: currency conversion is out of scope for
-	// this version. unit_cost is unset. Empty when no item was charged.
+	// this version. unit_cost is unset. Empty when no item was charged. An item
+	// whose refusal carries the code "unavailable" or "deadline_exceeded" may
+	// have been charged but is not counted, so totals is then a lower bound of
+	// what the purchase charged.
 	Totals []*Cost `protobuf:"bytes,4,rep,name=totals,proto3" json:"totals,omitempty"`
 	// Extension point
 	Ext *structpb.Struct `protobuf:"bytes,15,opt,name=ext,proto3" json:"ext,omitempty"`
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 8f2e57b0..31c2de04 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -717,7 +717,10 @@ type BrokerServiceClient interface {
 	//
 	// A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
 	// so each Exchange answers a repeated sub-request from its stored result (see
-	// "Idempotency" in the file header).
+	// "Idempotency" in the file header). That is also how an agent settles an
+	// item whose refusal left the outcome unknown (code "unavailable" or
+	// "deadline_exceeded"): it retries the same request, with the same key,
+	// through the same Broker.
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
@@ -878,7 +881,10 @@ type BrokerServiceHandler interface {
 	//
 	// A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
 	// so each Exchange answers a repeated sub-request from its stored result (see
-	// "Idempotency" in the file header).
+	// "Idempotency" in the file header). That is also how an agent settles an
+	// item whose refusal left the outcome unknown (code "unavailable" or
+	// "deadline_exceeded"): it retries the same request, with the same key,
+	// through the same Broker.
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 6cf96fb9..92465da7 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -601,7 +601,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -660,7 +660,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
@@ -746,7 +746,7 @@
       "type": "array"
     },
     "totals": {
-      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.",
+      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code \"unavailable\" or \"deadline_exceeded\" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.",
       "items": {
         "$ref": "#/$defs/fora.v1.Cost"
       },
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index e0a0b7bf..8c0a0281 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -615,7 +615,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -675,7 +675,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
@@ -763,7 +763,7 @@
       "type": "array"
     },
     "totals": {
-      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.",
+      "description": "Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code \"unavailable\" or \"deadline_exceeded\" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.",
       "items": {
         "$ref": "#/$defs/fora.v1.Cost"
       },
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index 2f1cdd05..d8e81776 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -565,7 +565,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -624,7 +624,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 562f227b..7a0c4916 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -578,7 +578,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -638,7 +638,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 4820035f..8510aa77 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -442,7 +442,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
@@ -584,7 +584,7 @@
     },
     "refusal": {
       "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
     },
     "reporting_obligation": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index e3ae38a5..4fca86bc 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -454,7 +454,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
@@ -598,7 +598,7 @@
     },
     "refusal": {
       "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision."
+      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
     },
     "reporting_obligation": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index 7d9c025c..bece9f7b 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -414,7 +414,7 @@
   "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
   "properties": {
     "code": {
-      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
       "maxLength": 64,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index 702b5d6c..bf7bc748 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -425,7 +425,7 @@
   "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
   "properties": {
     "code": {
-      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.",
+      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
       "maxLength": 64,
       "minLength": 1,
       "type": "string"
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 93858048..27384b4d 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -2117,7 +2117,7 @@ class TransactionRequest(WireModel):
 class UpstreamRefusal(WireModel):
     code: constr(min_length=1, max_length=64) = Field(
         ...,
-        description='The Connect code the party answered with, in its wire form, e.g.\n "permission_denied" or "unauthenticated". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party\'s\n call failed with ("unavailable", "deadline_exceeded"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent\'s\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result.',
+        description='The Connect code the party answered with, in its wire form, e.g.\n "permission_denied" or "unauthenticated". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party\'s\n call failed with ("unavailable", "deadline_exceeded"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent\'s request with the same\n idempotency_key through the same Broker is answered from each Exchange\'s\n stored result, so it settles the outcome without buying twice.',
     )
     detail: ErrorDetail | None = Field(
         None,
@@ -2207,7 +2207,7 @@ class TransactionResultItem(WireModel):
     offer_id: str | None = Field('', description='The offer_id this result is for.')
     refusal: UpstreamRefusal | None = Field(
         None,
-        description="Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.",
+        description='Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker\'s whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal\'s code. With the code "unavailable" or\n "deadline_exceeded" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent\'s request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.',
     )
     reporting_obligation: ReportingObligation | None = Field(
         None, description='Reporting requirements for this item.'
@@ -2251,7 +2251,7 @@ class BrokerTransactionResponse(WireModel):
     )
     totals: list[Cost] | None = Field(
         None,
-        description='Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.',
+        description='Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code "unavailable" or "deadline_exceeded" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.',
     )
     ver: str | None = Field(
         '',
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index ed94637d..2c4a7e9e 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["AUTH_METHOD
 
 export const AuthorizedExchangeSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")))();
 
-export const BrokerTransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).")))();
+export const BrokerTransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code \"unavailable\" or \"deadline_exceeded\" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).")))();
 
 export const C2PAStatusSchema = /* @__PURE__ */ (() => wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"])))();
 
@@ -204,11 +204,11 @@ export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "age
 
 export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
-export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
+export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
-export const TransactionResultItemSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. The item was not purchased.\n offer_id names the item; transaction_id, billing_id, cost, denial_reason,\n retrieval_endpoint and the other result fields stay unset. Every item the\n Broker sent in that sub-request carries the same refusal. An Exchange never\n sets this field, and a Broker never replaces it with a denial_reason: an\n upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")))();
+export const TransactionResultItemSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")))();
 
-export const UpstreamRefusalSchema = /* @__PURE__ */ (() => wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A timeout is an\n ambiguous outcome: a purchase may have completed. Retrying the agent's\n request with the same idempotency_key is safe, because the Broker forwards\n the key unchanged and the Exchange answers a replay from its stored result."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.")))();
+export const UpstreamRefusalSchema = /* @__PURE__ */ (() => wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.")))();
 
 export const UsageSchema = /* @__PURE__ */ (() => wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system.")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 3bf82ba0..306e35a3 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -67,6 +67,18 @@ Exchange that refused the call, or the Identity Service itself when it refused t
 call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each tool's
 `outputSchema` declares two branches, its success shape or `{refusal}`.
 
+**A Broker purchase item refused with no answer has an unknown outcome (comments only).**
+`TransactionResultItem.refusal` said an item carrying an Exchange's refusal was not
+purchased, while `UpstreamRefusal.code` said a timeout may have completed a purchase. They
+now agree. With the code `unavailable` or `deadline_exceeded` the item's outcome is
+unknown, whether the Exchange gave no answer or answered that code, and retrying the
+agent's request with the same `idempotency_key` through the same Broker settles it; with
+any other code the Exchange decided no item, and the item was not purchased.
+`BrokerTransactionResponse.totals` does not count an item with an unknown outcome, so it
+is then a lower bound of what the purchase charged. The Broker purchase verbs' doc
+comments in all three SDKs, the Python README, and the transaction-flow, Broker, Identity
+Service and fetch-flow pages say the same.
+
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
 follow up to five redirects (comments, docs and an SDK API change).** Each signature is verified against its own signer's
 key directory and the revocation list that directory names, and against no other party's.
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index eb0ade76..703d902d 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2675,12 +2675,19 @@ message TransactionResultItem {
 
   // Set only on a BrokerTransactionResponse, and only when the Exchange that
   // owns this item refused the Broker's whole sub-request instead of answering
-  // it: a non-OK answer, or no answer at all. The item was not purchased.
-  // offer_id names the item; transaction_id, billing_id, cost, denial_reason,
-  // retrieval_endpoint and the other result fields stay unset. Every item the
-  // Broker sent in that sub-request carries the same refusal. An Exchange never
-  // sets this field, and a Broker never replaces it with a denial_reason: an
-  // upstream refusal is not a per-item access decision.
+  // it: a non-OK answer, or no answer at all. offer_id names the item;
+  // transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the
+  // other result fields stay unset. Every item the Broker sent in that
+  // sub-request carries the same refusal. Whether the item was purchased
+  // depends on the refusal's code. With the code "unavailable" or
+  // "deadline_exceeded" the outcome is unknown: the Exchange may have completed
+  // the purchase before the answer was lost, whether it gave no answer or
+  // answered that code, and retrying the agent's request with the same
+  // idempotency_key through the same Broker settles it (see
+  // UpstreamRefusal.code). With any other code the Exchange answered with a
+  // refusal that decided no item, so the item was not purchased. An Exchange
+  // never sets this field, and a Broker never replaces it with a denial_reason:
+  // an upstream refusal is not a per-item access decision.
   optional UpstreamRefusal refusal = 14;
 }
 
@@ -2712,10 +2719,11 @@ message UpstreamRefusal {
   // The Connect code the party answered with, in its wire form, e.g.
   // "permission_denied" or "unauthenticated". When the party gave no answer
   // — unreachable, or the call timed out — it is the code the relaying party's
-  // call failed with ("unavailable", "deadline_exceeded"). A timeout is an
-  // ambiguous outcome: a purchase may have completed. Retrying the agent's
-  // request with the same idempotency_key is safe, because the Broker forwards
-  // the key unchanged and the Exchange answers a replay from its stored result.
+  // call failed with ("unavailable", "deadline_exceeded"). A refusal with
+  // either of those codes is an ambiguous outcome: a purchase may have
+  // completed. On a Broker purchase, retrying the agent's request with the same
+  // idempotency_key through the same Broker is answered from each Exchange's
+  // stored result, so it settles the outcome without buying twice.
   string code = 2 [(buf.validate.field).string = {min_len: 1, max_len: 64}];
 
   // The party's typed reason, unchanged — the ErrorDetail it attached to its
@@ -2999,7 +3007,10 @@ service BrokerService {
   //
   // A retry is safe: the Broker forwards the agent's idempotency_key unchanged,
   // so each Exchange answers a repeated sub-request from its stored result (see
-  // "Idempotency" in the file header).
+  // "Idempotency" in the file header). That is also how an agent settles an
+  // item whose refusal left the outcome unknown (code "unavailable" or
+  // "deadline_exceeded"): it retries the same request, with the same key,
+  // through the same Broker.
   rpc ExecuteTransaction(TransactionRequest) returns (BrokerTransactionResponse);
 }
 
@@ -4325,7 +4336,10 @@ message BrokerTransactionResponse {
   // denial_reason nor refusal; its cost.amount is added, as an exact decimal,
   // into the entry for its cost.currency. Amounts are never summed across
   // currencies and never converted: currency conversion is out of scope for
-  // this version. unit_cost is unset. Empty when no item was charged.
+  // this version. unit_cost is unset. Empty when no item was charged. An item
+  // whose refusal carries the code "unavailable" or "deadline_exceeded" may
+  // have been charged but is not counted, so totals is then a lower bound of
+  // what the purchase charged.
   repeated Cost totals = 4;
 
   // Extension point
diff --git a/sdk/go/connect/broker.go b/sdk/go/connect/broker.go
index 621929a9..515c8473 100644
--- a/sdk/go/connect/broker.go
+++ b/sdk/go/connect/broker.go
@@ -173,7 +173,10 @@ func (b *BrokerClient) discoveryResult(ctx context.Context, msg *forav1.Discover
 // An Exchange that refused the Broker's whole sub-request is NOT an error here:
 // the call succeeds, and each affected item carries the refusal in
 // TransactionResultItem.Refusal while the other Exchanges' items come back
-// unchanged. Only the Broker's own refusals — a bad signature, a malformed
+// unchanged. A refusal whose code is "unavailable" or "deadline_exceeded" leaves
+// the item's outcome unknown — the Exchange may have bought it before the answer
+// was lost — and Totals does not count it; retry the same request with the same
+// idempotency key through the same Broker to settle it. Only the Broker's own refusals — a bad signature, a malformed
 // request, an Exchange it cannot route to or does not approve — return an error,
 // and then nothing was bought.
 //
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 72d3752d..94cb1aed 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -473,7 +473,10 @@ currency, never summed across currencies). The Broker sends one sub-request per
 signed with its own key, and your acceptances travel in each body, so every Exchange still
 verifies your consent. An Exchange that refused its whole sub-request is not an error: the
 affected items carry `refusal` with that Exchange's code and typed reason, and the other
-items come back unchanged. The signer must set `signature_agent`, and its directory host
+items come back unchanged. A refusal whose code is `unavailable` or `deadline_exceeded`
+leaves the item's outcome unknown, since the Exchange may have bought it before the answer
+was lost, and `totals` does not count it; retry the same request with the same idempotency
+key through the same Broker to settle it. The signer must set `signature_agent`, and its directory host
 must be `requester.domain`: a Broker refuses any other pairing, so the client refuses it
 first, as `MALFORMED`. `Client.execute` with offers from more than one Exchange is refused
 the same way; buy those through the Broker.
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index bf562424..78e0543c 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -476,7 +476,11 @@ def finish_broker_execute(plan: Plan, status: int, body: str) -> BrokerTransacti
 
     An Exchange that refused the Broker's whole sub-request is NOT a failure here: the call
     succeeds, and each affected item carries the refusal in ``refusal`` while the other
-    Exchanges' items come back unchanged. Only the Broker's own refusals raise.
+    Exchanges' items come back unchanged. A refusal whose code is ``unavailable`` or
+    ``deadline_exceeded`` leaves the item's outcome unknown — the Exchange may have bought
+    it before the answer was lost — and ``totals`` does not count it; retry the same
+    request with the same idempotency key through the same Broker to settle it. Only the
+    Broker's own refusals raise.
     """
     return decode(  # type: ignore[no-any-return]
         plan.op, status, body, BrokerTransactionResponse, strict=plan.strict
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index f8995cff..cd228697 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -472,8 +472,11 @@ async function execute(
  *
  * An Exchange that refused the Broker's whole sub-request is NOT an error here: the call
  * succeeds, and each affected item carries the refusal in `refusal` while the other
- * Exchanges' items come back unchanged. Only the Broker's own refusals throw, and then
- * nothing was bought.
+ * Exchanges' items come back unchanged. A refusal whose code is "unavailable" or
+ * "deadline_exceeded" leaves the item's outcome unknown — the Exchange may have bought it
+ * before the answer was lost — and `totals` does not count it; retry the same request with
+ * the same idempotency key through the same Broker to settle it. Only the Broker's own
+ * refusals throw, and then nothing was bought.
  */
 async function brokerExecute(
 	r: Resolved,
diff --git a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
index 9fbf12ce..32948709 100644
--- a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
+++ b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
@@ -286,6 +286,8 @@ for _, item := range resp.GetItems() {
     _ = content
 }
 // resp.GetTotals() holds the charged amount per currency, never summed across currencies.
+// An item refused with "unavailable" or "deadline_exceeded" may have been charged and is
+// not counted there; retry the same request with the same idempotency key to settle it.
 ```
 
 ## Error Handling
@@ -348,7 +350,7 @@ sentinel reachable through `errors.Is`.
 | Failure | Recovery | User Impact |
 |---|---|---|
 | `CallNotSent` | **None -- terminal.** The SDK refused before anything left the process, so retrying unchanged fails the same way | Caller fixes the address, the key or the requester |
-| `CallUnreachable` | Retry with backoff | Transparent if the retry succeeds |
+| `CallUnreachable` | Retry with backoff. On a purchase, retry with the same idempotency key: the call may have completed, and the Exchange answers a repeat from its stored result | Transparent if the retry succeeds |
 | `CallRefused` | Depends on the typed reason -- read it with `connect.ErrorDetailFrom` | A denial reason such as `DENIAL_REASON_REPORTING_OVERDUE` tells the caller what to fix. A `request_auth_failure` of `SIGNATURE_STALE` means sign the request again and retry; `SIGNATURE_MISSING` and `SIGNATURE_INVALID` are terminal until the signer is fixed |
 | `CallMalformed` | **None -- terminal.** The request could not be built or signed faithfully, or the answer could not be read as the protocol defines it | Caller fixes the message |
 | `CallTooLarge` | Raise `WithMaxContentBytes`, or ask for less | Caller decides whether the body is legitimate |
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 6b2cbab6..661e5f12 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -119,7 +119,7 @@ The Broker re-packages the agent's purchase. What holds the set together is `Tra
 
 **Why re-packaging is safe.** Each item is atomic and its integrity is per resource. Each offer carries its own Exchange's signature, each acceptance binds the agent to that one offer, and each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases. It cannot alter any of them without breaking that item's Exchange signature or the agent's acceptance, and no cross-item integrity is needed. In a result item, the one signed value is the `retrieval_endpoint`, signed by the issuing Exchange; the other fields are the Broker's unsigned report of what each Exchange answered.
 
-**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal`, an `UpstreamRefusal` whose `party` is the Exchange, with the Connect code it answered with and its `ErrorDetail` unchanged, and the other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. Every per-item denial is the Exchange's result item, in the body, also for a one-item sub-request. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, the other items of the sub-request may succeed, and the agent buys that offer directly.
+**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal`, an `UpstreamRefusal` whose `party` is the Exchange, with the Connect code it answered with and its `ErrorDetail` unchanged, and the other Exchanges' results come back unchanged. With the code `unavailable` or `deadline_exceeded` the item's outcome is unknown, since the Exchange may have bought it before the answer was lost, and the charged totals do not count it; retrying the same request with the same key through the same Broker settles it. With any other code the item was not purchased. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. Every per-item denial is the Exchange's result item, in the body, also for a one-item sub-request. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, the other items of the sub-request may succeed, and the agent buys that offer directly.
 
 **The Broker's own refusals** are non-OK errors with an `ErrorDetail`: `unauthenticated` with `request_auth_failure` for a bad agent signature, and `SIGNATURE_INVALID` for a `requester.domain` that is not the signing directory; `invalid_argument` for a malformed request; `failed_precondition` for an Exchange it cannot route to or does not approve.
 
diff --git a/website/src/content/docs/components/identity/overview.mdx b/website/src/content/docs/components/identity/overview.mdx
index c53d444f..8d51a784 100644
--- a/website/src/content/docs/components/identity/overview.mdx
+++ b/website/src/content/docs/components/identity/overview.mdx
@@ -131,7 +131,7 @@ Registration must reach the Exchange directly, because the Exchange derives the
 The value of `refusal` is the protocol's [`UpstreamRefusal`](/reference/proto-fora/#upstreamrefusal), the same shape a Broker uses for an Exchange's refusal of a relayed purchase:
 
 - `party` is the bare host of the party that refused: the Broker or the Exchange the tool called, or the Identity Service itself when it refused the tool call.
-- `code` is the Connect code that party answered with, in its wire form, or the code the call failed with when no answer came (`unavailable`, `deadline_exceeded`).
+- `code` is the Connect code that party answered with, in its wire form, or the code the call failed with when no answer came (`unavailable`, `deadline_exceeded`). Either of those two codes makes the outcome ambiguous: a call that changes state, such as a purchase, may have completed.
 - `detail` is the FORA `ErrorDetail` the party attached, unchanged, for example `request_auth_failure`, `registration_failure` or `transaction_denial`. It is absent when the party attached none.
 
 The agent branches on `detail` and `code`, never on the message text. Each tool's `outputSchema` declares two branches: the tool's own success shape, or an object with the single member `refusal`.
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 6ddf1e2c..6c41277a 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -560,13 +560,14 @@ Re-packaging and combining are safe because each item is atomic and its integrit
 - `items` has one entry per request item, in request order. A success, or a per-item denial, is the Exchange's `TransactionResultItem` unchanged.
 - **Upstream refusals ride in the body.** When an Exchange refuses the Broker's whole sub-request, or does not answer it, the Broker does not turn that into an error of its own. Each affected item carries `refusal`: the Exchange, the Connect `code` it answered with, and its `ErrorDetail` unchanged. The other Exchanges' results come back unchanged. `DENIAL_REASON_CONTENT_UNAVAILABLE` is not a catch-all for upstream failures.
 - `exchanges` has one `ExchangeOutcome` per Exchange contacted. Its `agent_identity_hash` is what that Exchange's retrieval URLs are bound to.
-- `totals` sums only the charged items (those with neither `denial_reason` nor `refusal`), one `Cost` per currency. Amounts are never summed across currencies.
+- An item whose `refusal` carries the code `unavailable` or `deadline_exceeded` has an unknown outcome: the Exchange may have bought it before the answer was lost, whether it gave no answer or answered that code. With any other code the Exchange decided no item, and the item was not purchased.
+- `totals` sums only the charged items (those with neither `denial_reason` nor `refusal`), one `Cost` per currency. Amounts are never summed across currencies. An item with an unknown outcome is not counted, so `totals` is then a lower bound of the charge.
 - `DENIAL_REASON_RELAY_NOT_ACCEPTED` on an item means the provider that sells that item's resource at that Exchange does not accept purchases relayed by a Broker. It is decided per item, by each offer's provider, and answered in the body: other items of the same sub-request may succeed. It is never a refusal of the whole sub-request. Buy that offer directly.
 - A sub-request whose items are not exactly the agent's signed `AgentRequestAcceptance` projected onto that Exchange has every item denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body, and nothing is purchased.
 
 The Broker's own refusals are non-OK Connect errors carrying an `ErrorDetail`, and nothing was bought: an invalid agent signature is `unauthenticated` with `request_auth_failure`; a `requester.domain` that is not the agent's signing directory is `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; a malformed request is `invalid_argument`; an Exchange the Broker cannot route to or does not approve is `failed_precondition`, with `metadata["exchange"]` naming it.
 
-A retry is safe. The Broker forwards the agent's `idempotency_key` unchanged to every Exchange, so each Exchange answers a repeated sub-request from its stored result. A timed-out sub-request is an ambiguous outcome, and retrying with the same key is how the agent resolves it.
+A retry is safe. The Broker forwards the agent's `idempotency_key` unchanged to every Exchange, so each Exchange answers a repeated sub-request from its stored result. A refusal with the code `unavailable` or `deadline_exceeded` is an ambiguous outcome, and retrying the same request with the same key through the same Broker is how the agent resolves it.
 
 ### Subscription TransactionResponse
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 26643201..7fab228b 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -73,6 +73,18 @@ Exchange that refused the call, or the Identity Service itself when it refused t
 call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each tool's
 `outputSchema` declares two branches, its success shape or `{refusal}`.
 
+**A Broker purchase item refused with no answer has an unknown outcome (comments only).**
+`TransactionResultItem.refusal` said an item carrying an Exchange's refusal was not
+purchased, while `UpstreamRefusal.code` said a timeout may have completed a purchase. They
+now agree. With the code `unavailable` or `deadline_exceeded` the item's outcome is
+unknown, whether the Exchange gave no answer or answered that code, and retrying the
+agent's request with the same `idempotency_key` through the same Broker settles it; with
+any other code the Exchange decided no item, and the item was not purchased.
+`BrokerTransactionResponse.totals` does not count an item with an unknown outcome, so it
+is then a lower bound of what the purchase charged. The Broker purchase verbs' doc
+comments in all three SDKs, the Python README, and the transaction-flow, Broker, Identity
+Service and fetch-flow pages say the same.
+
 **Revocation is scoped to the signer, and revocation-list and manifest fetches may
 follow up to five redirects (comments, docs and an SDK API change).** Each signature is verified against its own signer's
 key directory and the revocation list that directory names, and against no other party's.

From 1157aecdb9b5b101d0e990aaaa75262a2b4e8c2e Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 14:26:18 +0200
Subject: [PATCH 143/164] Answer an unknown critical extension on every RPC
 that carries ext_critical, in the protocol

The critical-extensions rule told every receiver to answer with "the
UNKNOWN_CRITICAL_EXTENSION reason of its RPC", but only four RPCs had one.
DisputeTransaction, Register, RequestDomainVerification and
ConfirmDomainVerification carry ext_critical with no such reason;
GetAccountStatus has no reason family at all; BrokerService.ExecuteTransaction
was told both to deny every item in the body and never to stamp a denial; and
nothing said whether a Broker copies the agent's ext onto the requests it
authors.

- New values, appended and additive: DISPUTE_FAILURE_REASON_ 6,
  DOMAIN_VERIFICATION_FAILURE_REASON_ 7 and REGISTRATION_FAILURE_REASON_ 8
  UNKNOWN_CRITICAL_EXTENSION (4 stays retired), each refused with
  invalid_argument, as the usage-report value is. A repeat registration
  applies the check before returning the stored record.
- GetAccountStatus answers invalid_argument with no typed reason.
- BrokerService.ExecuteTransaction answers OK with every item denied as
  DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION and contacts no Exchange, after its
  signature, requester and malformed-request checks and before routing. The
  rule against the Broker stamping a denial gains this one stated exception.
- A Broker never copies the agent's request-level ext or ext_critical onto a
  ResourceQuery or TransactionRequest it authors; messages it carries unchanged
  keep their own.

The file header lists every RPC's answer. The Python and TypeScript ErrorDetail
tables gain the three names, error-detail-wire-vectors.json and the validation
corpus are regenerated (the undefined-value cases move up by one), and the
transaction-flow, extension-profiles and medical-imaging pages state the rule.
Both changelogs record it.
---
 conformance/corpus/cases.json                 |   6 +-
 gen/descriptor.binpb                          | Bin 683872 -> 687045 bytes
 gen/go/fora/v1/fora.pb.go                     |  76 ++++++++++++------
 gen/go/fora/v1/forav1connect/fora.connect.go  |  28 +++++--
 ...a.v1.BrokerTransactionResponse.schema.json |  17 ++--
 ...okerTransactionResponse.schema.strict.json |  17 ++--
 .../fora.v1.DisputeFailure.schema.json        |   5 +-
 .../fora.v1.DisputeFailure.schema.strict.json |   5 +-
 ...a.v1.DomainVerificationFailure.schema.json |   5 +-
 ...mainVerificationFailure.schema.strict.json |   5 +-
 .../fora.v1.ErrorDetail.schema.json           |  15 ++--
 .../fora.v1.ErrorDetail.schema.strict.json    |  15 ++--
 .../fora.v1.RegistrationFailure.schema.json   |   5 +-
 ....v1.RegistrationFailure.schema.strict.json |   5 +-
 .../fora.v1.TransactionResponse.schema.json   |  15 ++--
 ....v1.TransactionResponse.schema.strict.json |  15 ++--
 .../fora.v1.TransactionResultItem.schema.json |  15 ++--
 ...1.TransactionResultItem.schema.strict.json |  15 ++--
 .../fora.v1.UpstreamRefusal.schema.json       |  15 ++--
 ...fora.v1.UpstreamRefusal.schema.strict.json |  15 ++--
 gen/python/wire/models.py                     |  11 ++-
 .../fora.v1.BrokerTransactionResponse.ts      |   2 +-
 gen/ts/strict/fora.v1.ErrorDetail.ts          |   2 +-
 gen/ts/strict/fora.v1.TransactionResponse.ts  |   2 +-
 gen/ts/wire/schemas.ts                        |  22 ++---
 proto/CHANGELOG.md                            |  29 +++++--
 proto/fora/v1/fora.proto                      |  69 +++++++++++++---
 .../testdata/error-detail-wire-vectors.json   |   9 ++-
 sdk/python/fora_sdk/_errordetail_wire.py      |   3 +
 sdk/ts/src/errordetail-wire.ts                |   3 +
 .../docs/protocol/extension-profiles.mdx      |   8 +-
 .../docs/protocol/transaction-flow.mdx        |   2 +
 .../protocol/walkthrough-medical-imaging.mdx  |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  29 +++++--
 34 files changed, 332 insertions(+), 155 deletions(-)

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index aa3b0250..cf685599 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -2127,7 +2127,7 @@
       "enum.defined_only"
     ],
     "json": {
-      "reason": 6
+      "reason": 7
     }
   },
   {
@@ -2663,7 +2663,7 @@
       "enum.defined_only"
     ],
     "json": {
-      "reason": 7
+      "reason": 8
     }
   },
   {
@@ -14447,7 +14447,7 @@
           "error": "matched 2 branches of oneOf, exactly 1 required"
         }
       ],
-      "reason": 8
+      "reason": 9
     }
   },
   {
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index fd2ae7108306f6d4ff88dfd0c6368afaf2378051..2fc3d7232488ae33a8bc7290bc4f346a492ffde2 100644
GIT binary patch
delta 49114
zcmb4sd3aPs)_3~$?R#(EPSWW$y(N7+>`M}MMG1@GxQpB9sPCu|qB7$E12~TFJMV-Y
z!Xh9`p^PB=F31Rtf*5uX1O!9`*%e$^1UE#{?{})|<}yCd_k7RCKjfTy&aX~YovJ#u
z_VJ@lHviCM;8534WvF|o`le^p{mSY+*)jKfc8+s>oqhO}XQfLG-e9(4M?dwXnD>+?
z={B0~%ocp+iQ+?Bvn4z7nWvC{(6pw%xXm=1`G^^3%ir^8+1pQhUV&5>vx41y+S7pf
zPI=;*-t=RSnP8p%Y$meq&powX--MTfrXKXfa~3zt?z-st*%SPDrOQ;boS^oKJLi<!
z)oN-B_Q7Pmd$!qSPen)Nd`M7lwbM4a+?G|!{&Brlp<4LIF23(6*UC)%S;|U#8ui_k
zy?e6dijiUGXX%=^vUmUItNK~p?_frIt)YkHELPTDYjSs))y2B0U!OnY>wsq}2UtD(
zRQ0!d_Zh%Ntmk_7tm@Z)0KlwD>(5m$K&Hy7e7dUlfJXhTepP>cuB!h4>)BrY2lTi4
zSM~1MpS|&{5$a_18qi<p%XE8G_UqS+<62Kt{k_LCmA#*?>i>jAu)X_OPYmcYpz_)N
zPYCm^F6`0vT9GCI*w-gLtsjzK?yKtCr{93z_lE(^t!};g_kC_a)dT&IMrDryz54WS
zZrxY)G;Bdu8dt))zE#LiKhEk`Ndf}0SMMIrKG(CVXOre^-6LjFB`eqm=RI++RoSnK
z%diLkgbGcrGYay!k;t{+-#gDp*0cUr`RsF5R-dP+G<x+z5|#b?^tPU={7bKAU${XC
zR=#7TS&Ortgw|XzKKaZOBX>#Yf??HpR>Gt-xRh1rFR}Y&o^Pod(4|L@KF{?YaQ}eH
z0nhbsZax1@pZ--y^r`3iqtvWtD*skRrT8CKG`D(D{XnFur}ccV0nZ2{yz7h-=6}#z
z$nO2x6Ya$Fc3;&~{i^yu)3p+H(C6v<WSvrty}&D{>hA+kGp6Gvy{rC)67JEbFZ-Z}
zQCMC2Ea+#cUI#p3_36j|c)UlyUITjdsC*Wj-UIp|gD^%oORoV|<#Pj`>C>;jb#mY&
z?oans_3!gszaCZhK39b_A<(B^ucv$Ut{ec5c?yU<d-d<p2Wh@Q@VqLnsdRSt72T+Y
zQopLwzLh=x4Brr1l~!MXK2zDh>INuLk->laTWALG;GR8^XOxX;4d}yd5KVv@!(Z?L
zAlGm$+kKzwEnK&!)%e<Wa9`CuJa1L~P_<Q+J)W_;KlKy{4pG^oM^#@mpdMBIo4|sq
zzWu3nSbd)FEsKoYj|$HzGn6(P+rdm`8{D8R2o=2IHVVySZd28Al$@YCJA33V?S!jr
zwp%MS^GpwM6|mj01~%y?vPEa}h=(h=g6bRDv)#30O6ePJEheR0P<q21Z)THFdc)oB
zHnWoJ;Nwbm`97^j*-Ez-kTME!-N7Q8gvv^H;~UKvHLe44Q?}-Qt-xKj$w|izrA_X5
zBdO#jDR-+b<_;HEQiJMtw)H{n{j%+DEiHvq=xlde?QIe|+uhwBH^&McPf&fIZFoo<
zSN6W6<AKimZmXlz@j&N&_idHt1W^cDP(7Hf{)0AAX>-u6<x43IN(bHkVw;50L3fk(
zW>)3K=|T0RTe&~6K+XQ{QEjlRDg48BWYG+-tvJ~c@{ZDE)-z_tjb_M}Hqr|HXrKdL
z=!?cEnknn@jM=h_DU;PvLnqx@)FxrnNq1qHO~R;??)LYZ3sqB5F*uxe=ltY$B@QbV
z>->Nxk}dwDmZ$j7yNx3ADN|Lsmt15wJgz;{@}gVel}Ah@a?u^+i4Y0Yi|%;BoP{z4
z?Fwq&xs@wy-{acMYW&4*BR&fIJGak9aRKE!caS>~eFe&Q?qtgJn;s$!LMgi9cAEjy
z%NZlQL1gE9x7xxCnLeAP=7afzTfN~wnLxYjR&QkAJfQ^wKf2Ys&2KOus<3UanzMsN
zDz!_2!Kx84Un8Sk)EtJXY?)?GYXbt74pS9_ijBU((qXDM*Cv5IO!XI-FK|tKtWnvS
zC$;}Bt5Fr76r$YKsJRiFgiehbi<`~44on`SvT;4M(kI5KvVdHQf@H_2vVcGWVvH(_
z86+Uas3>M(lwuH>yqy;hz8a!<#;B>=%%uuX1qv^z*;G%h%vJG{lZ+b<{F3UkB#;})
zyrgEXw@I#bV+XU=%R$hp=4VG#X&cn8^BoKo81q$MJ*k9p1zEqjO#)-STHeB3j243e
zM7~z3N|VIDJZ$`NBb{CRCvBv1Gg!hkAiyQ+a_#}#Dm7SN!chZUr8a78P80dkg4$YD
zS+A;zQ3`9hKufXLHW>j{y21N*R@7VTTaB-F-D!YYt9pggxfBghYt?X+dl^W0*;=)5
zz3MiDrU6Se6k~o+dq-7kRgWxM&V$}MWEx^#TTBaj-c_}CU1pkR5-og_s+1%G7JF*0
z5ozmEbQBU;!oxwrluc?pC3B?%a+8|Qn7;@QM18)evW(08k#+B@X?MKm6pw-8dCzeS
z13>SoLEhEC7z04>shN7_R0STc1hu_t&Slk=s8JBb@bQqHn1_M7#bvL--tDV>71*m9
zG2!?MIsS*j@vj4cgg&$j4<r)$&~|)~Na#ay{13@u@=xuMsvKiu`)T{D@s}ub@S%3d
zE_0AjJEVpqyv#wO%nzy2W3tSN!OQ%xsvebPE_u-V#4dBmLYW`oWnRH8pzcjoQi*bl
z9q+HTzX^nJDMe9G_$O6g0WWQku<4{4;Nu)jr^a+rO(e}RA}b(It4gE9KiSdeyczb7
z0opSaVAx>PWKOF-(VC$Qu+wU^L}JrGbXslD(EMKER-wt9&t{&}{_d(c?_f}qIj{PJ
zHz?E<fsBh51QHnM)rO6@Gx46_qRJ}g8VUCG-!!fKqU}cb1jUQC8-ax4#X2|Q+5SPg
zQSsk3t>X`l1sZDi2iuJx37{WrHv$QuAIObXQ%C6zYFE{qf3YY3u4VmKRU>Hr9(i+<
zyZp);zo0!-_N!gtU;^n^+fP6O=~wcTd$|fe4)(C6FKG959PE)r>Q-DRj=>&TKOni3
ztRIko80<m)jKJ`TWKq$hJ=u!?)(oZNXa|HUd9=qT`b0<pWV9#A0})aJ$Y@Vlxj9jQ
zfSl~f4*7=`Rw^btAXK@NJw6_bK#MAOvZq+|Wgxj0`m!Zdxo!oOJ1x8apXgINPIEA*
za;G_lP~}eZB>A{YI>4CbY1zsgjiU8n+<ncHvzT=rsErD~=JAB7Xgz$ao#|2Pv0XE~
zch?uAENI@!=_`t0rYBQkKEQ>Mz-)H+Ann2QY>$#8M}!OoVzWKPX>$&|8Z^jxY~vtp
zUhzDS5|=`p>q!-vw{aPmwt$Totld$(z@ucO3`JTCJoOuxPjeaMc@g`1u-403<QPPe
z)gm%zog0}#U+|_U=V<nYA=*2x;F}&#A<q>bSXX+KMj}^YECtP*jt3+_R(jBMIw2t!
z)nAsqJxuG8&UzFcgc1`nSx@68JZ1w8@@<wFu8nK(wnu5mEe4ago+eGrZ%|DTLbhr>
zN{hs&3QG^yBH2^JwMSgVU~%Ul0Vvdxb3Df7k;M({(UIB{#Tz^duQ$k07B^76!I43t
z`D|hzkJRo@Z*r`oU~v;!Hx6SRgy0Cfvv<^J6O@j-JxUX49z}<{J<UsP66Wpplyx!l
zO^tNO=XQI_JDVR-#bKxjs{2`DjP`MQzei~)m2_b2_q1ti4u?BK2m{8EY;Y`^gmuIz
z2m?|_s36u;GggDzDNoJ?cEdQW)_=-_cn1ZIz8lT>Gv*zybt(PKqv(_XF=54L9wW~t
zVdQ6?f`HkctKj43?D_H9jisMED%5O0_ZVV$Re7`h+=H&ZimSksuh_Bi+S8?9NhcM<
zhWeE!B?fnN#Yp8V4+i&pxC*HAtp5b<zE0=u)}<=cLeG0-v;h){p7+#mD($2edfro7
zW^UAwV^2^UsO3!3vg%7(7k9xx4Y6!%Kzk_9gEjX1$y%GT!I~Vbzy;V~%`3WPkN_L3
zAq;K9b?|YR#<G*Owq?UKSx_F{Sq;;S5H|oMbcSisLbDauL9Rz?EHOoET{hCuA>ST}
zcth$?wnu7_sM&(+fEul_|Cyq-EF10UP)0{<n6pv+cz9PdT0^HOY=g_bsIfy+w6+~z
z)MUTvQK%<+QS*u71qp~3wFaUm0*QoP)Zo#t)41m$m!7DxyO_4D<3tC8!m){(496e@
zjER~IL_q>$qJ}_pIvPHb)23@VZ)I<os=exJFkR#B<5o32sLj=sg_>&4belTp5neZX
zKH_D6ep!3Xb=y2mt!EY>>=NHlZ1Xks57%&z&H_zsgWL<eRhsfP@D_P&Jajt5%YHUZ
zTd1_nYHAZln|h7anp%Y*PNslr^1P*~vt8y()Rk-G5VhHj)3vaxwAOYAaFN?uO-76$
zVMVP5m%f?n;NwQ7zNXz$vC%Fsjn8a0+T{h3gtVZjHjqHrNY%E+<Pb3IP<G^NT7{?d
zkfwNf<!XHFI;6o`s%wx?Iz-8qa~)7e*rmBz%hDs7B4Qeiw}T^EKm_t2Nl2?#-|WIw
z;2y`>J@d4#9gaJel6M@}d?IwzxOW`a(v4-J<Q>PgX3cqn(a1SYvEB2uwiTxw1P>5S
z+5QC?<n@%+pj;x5Z=BLvwKf-$e`(Yke$Kkg*A{pF+=0-DtNHk-MKXZ+T$3FFNI-n9
zp+i_o6A(0ppms%5e$6&tpe<3W@uvtg@d0{QoQk4&`U;g8O(5|VVdfPr`l}{Fdt&e~
z^CwOHMH8XD<U#Len8ZVS$wHWURin`UlVWZIy4sDpQkZx@`_NMDVSgD2+X@QCH|k!|
zu3;R|HtJ~Cdqn|wgX%VRbgj0(Y@4Iwh0ZqJD`o<40qAVgF%#hP8<bN}-IYE5j#lKV
z*rm&c4KAu<mo6J6NMP*JgM7qBc1>XH((5-g=ZkcGL3JOy;azQE#XbkZ2Z((Rgbxt=
z^q}oOK0xf#>oqXf7(COtLG?`5s>Ql+#Tf@97nOHLuk)Z>V4Ts@BIMGPTwt8h%UYQ4
zQplw#c|rBt>?@nJE=t9>4n`g@zSU(P1tDO3tJnEZ9x%SuTeUGSiLB(KURi9b_HD;2
z4n#g6uIO?St10<_xT0rTOE=61#1*~W_2w^FPl6f#pgPvb-o8z%c6T0Y)D@{8AY%=m
zU3Y$fj5R{GU-|(u)+n~jnmi6t5Y(0!%Cf9?r#4cn#-Cz#fc6NOC5BI|hkyjk5~I+r
z-2%WYF;Kh0FALz8ON^3bhFI8uIL+LlveZz^`HWMt&`rEfESg<vN+77NF!=29=D!c9
z>fN6`JJ;~D^ghfDz!#$zq=2)+kW);MNO}b&&8L`%LC_@{e2UqP0urL?G7*GttTyW0
zi!54g$T=p2fwbDd<Y0;yeLkAxJ|kyMcEWybvRbguz-)37)s;?N>Ot1-V{J-@gElmn
zfIetLg9P+JBgj|iNCnUbjgoritsDU#4>RMCc6-HP2Z5H34m$|c!5%h(VmhYt4)(Bt
z#g(DL2xRRT8+S+>-r<-7LA}{A2ZDy<V@6Qawa&ZSV+JDUTeuN0=_I@Nuy$L;Ne96V
zgp&>e4bCSGIV$SB_dRJ~RGdv~9y-kvE@eMDtj$$ATyiiFo~V}`3>uv;*`*8}q<hIg
zNZpr1K=ymK`l!~g<M$2%jm_UX2-N?6Z-|9dq)Pqo_lA`*N9r5`o;lK+edd@}<E|d*
zRl>Y|=)B7v>5YhfA0)I!deQIG*aH&X-AHe#7>bD;;VmFe*+b|fO)dZq)(^pZ;P>We
zkzvHFQ@u+4#17T!+UlMzSk~_iM;&1G=vUPf|M$xFJ*E9ssep`VH@c!DD^tDF<v=1U
zQ@wS5LH+quFZ^N+7OasdjGC1#K8@)`#ViNIKn`bl<;)yHz?kKYie3>UFlKo%kJ%wG
z&>Jtw#y;2HcU3HLFubs1iDL)#&P%+~^>yAmFY&_l7Ypw~@B9WU`BGb2@rDCIo%0(G
z1a;1Dc!PWf1JkK<e#6_iDR0ZVg1-4pFQ44E1%V8_>6I-QBsAaj$`%X~ns0jT7OX4i
zli&987JM@Z_}JTy4Y{!4ZN~=cncsG@K|S-^l#OBeXu;@&4tsNI%<Ri&HMd@H*lQ%s
zw<#(zs0p9QF8N05;A(TiD~CC7fp)?xqau(%JK@D(i{Orw@bwF?5=y+}X8CS!EZgQg
zZJ4VJEHO+%fJ=Duxr>2>{ukar(0r8&)u7qiId<lIZARHSub9pf6FTR-DZbuMBy`Ss
zn>G_`HU^Ow*_%ITFP2|)(xFy)(JR+#Awxo5EJaMF_Fzz}9B5|$dRd#|ZZpu7r4BZ<
z2AXlvC4q$2KohRFP2>&*JJQ7P|CXD*aaa$rJx6s<_Wqx>C9ZPt?JQDL9BIl(z~D`B
zq=`sidLib=SeDyh=4{E9{i40<3vPhF&{D96ufJ_HmHN!;Vm4?XmfS$|!Gpe{U^bE^
zR5_rL#HMT`Q}5tPZ!+b)A6!UnBB@QV7g8WMX9xTAEw0RFQ{lNHF0n~!HCF%8QD`5S
zIWPILz4G*SO2G#v)*;rRGCX{ZXD?gk*K14mnsWUCOla>l(Kk&LLWsQ&n92`qLV^BL
zHU1K75Lmf^+yN6kDTX^>p`syY{b0H&H0O-{!%@5+nQChq?Ko%ea7+!<gQjX-%R*j1
zHZeuGMhe)6OtrzaEMOh3{tXYc{K;=vsKO(^0Yk$(YN{pIf}syPW~wc(Wue<S{u{&4
zi<~gkMvheVa0Hp^NmFg?@P@n5%uktW!)sY+zMuZaFhoe7{YDA_&*}fbAMQo~bLKbZ
zqf7qWRO=IbwOxvc6236i%(Y2k%>VK?_#w==e*+c{s%L*w77?_z-{dHYiT1VdAM$$p
z+N{PT&8{WzP;nPcwf(g$RNN&~#5delNTK4sG1VKdl|sFJdu{PU3ibBgZxm5)-<wEr
zu5d)OEYDA-GSJ6nhxFOi_)|0<tp6d^pUku+T@f9I_LG?z=(Al>adTJvnZShkid(qi
zRZ}g#mW3SsVyfwDS-}34{Gu&yGJqc9Q^xsJwmGb~s>a{85wy-U#8+novJJ`1xH==;
z!ib?hwM@dhr4hq?bw0*fFk-l`&iOeD*du-;g<>69?Nggw3x;y7@zpse*F?FFx;9Bs
zm1BHryE;WtlVg2q#kDLX`JzwlWOn8G2J!@-QdH8`>iS&&0e${rRsOwK{~OtN5xsR9
zA9!4f3a5p%2|lc<+>4$EYf_VaIn&rJQT?9aWS^&i_k?^+YKl)u^PZ6Hit1W1NWQe|
z!ABrW@f8)D7ShE+Q&45>QdBSbBl9Ud4kRXI7|9@H1_^2^@Ja%-4N`@ja=xM7v+@NV
ze~<uBAi;woBDn(8Gh7`7`7--!p<b`}WuL-hd&p32zD!A!av5a*6}F;KFHgVX;812?
zA(?K-ES96D`*P+@iRoQ~(|w*0&nsVxn&HE$DE0dF#Ud1Fz69+734|Fwtcu==RIt7j
zR9|D$WBT32uQ@W5+1E%0>t>JvHItcf{l4OvKG|oBfnX-dpo4@Aax{zmcU&J-Jj=nM
z9L*w`j$8&gn$6+~y>szwpIoKIsu5&nlT14<1K*j$o=@o47tgV)7^^~%nL{!+aTzqy
zx$OOf-Yq@Xr|^{!7(kPbxg<j+gN37ozMN&OMG{4`(C3NrqT#DDi+oCRQ8Z#X1~i|f
zdO!kVkq<#YeI$dmm7uzq?Mmtmix>Ok5CkS<7LyFMO)RA#oMXY1eqHerpTgJ0h)G<M
zxsl7DXqK|4Q+h@5QdA2CDUhL}SxPb;xD1Nsb+#d;cTB%-7Y$ZWAoDuO`~gvwH>j=f
z<$TW4MfyVxR`?7*fZVDV)1_5D<!zs8e(A!}l~*o>5sytP(!Xev^{Gwy%9Z#8$kjgd
zpR_h6I56)m;#{Us+e;zZ_U!6n{fbht-6z9oa8WPYeKMQ|iL%-5lanNnz}W7?B<T#g
zO<>^bE_NZKf6-x=13~kwT@C~VZM%FyF>8PdAa?l*V|=FOr4syrh3o0Jclf|TplQ|z
z4gw|fflp47paO&se3&FX$ZY_%pS@B~|3l~f4uTs9`+YttI}hxn(PY1`fbU)qNjg64
zUc5^IofiR}_L)yPlWkRBU+1pIpJH->4}kg1F@z$#&wN2KDaTj9d?tHkLP0$InJ;q&
zy)p&@&cI?3eE76a{fl|pkGeI3+UVSzow=^WM}F#12K4L2kBafLM_sJ`y?Q_WY_?Bh
zeVg83bS_^ScB?p(r_IP!X6LHrTrX<glr>Mh?0>b;=csL7%S9YS6)nD@OlRh*H($en
zp|f(;&gMc|$uOzvmuK6w)tkAim*>h88Q>y!%X4KhgM`xZTzOOgBx0E5xyeTaDo8$`
zTb`SGnCF%Rz(LZ>bKBp+r+AV@Q@rK54?bj$rm2C6%G6fnDr<7p#1)s7J$k*ax~jnt
zMUKxX@>RLg0YSp3Rk?DC4H8DJ$`yejVWG%Z<yvcUMUfLjoM6c2$^#yf#SeI_&Xor|
z>X<-#D_6a-9zXU`$3>OBor}XBwDV}fL$!6e%0@Qy2K}CD{AC+TPP)!9l$>;3uJjFP
z0eW4o7_kWihOW!aY^*cXK5Fr<V<=~FLu(yFB@<}tVJN%*Mm<olfsEr5T9cC5ksWZO
z{*J4BN3NoAe+L)F?8w!H`-3E@++c`8dqwpHwU2Uhe#t&jp>K4BKFY;n`zdM%KKO<9
zMXvH)wp}Ovq`Mk_idhLh0Pl-jufPKdye|lkR--^7b6@0!zeDE835l_f!t*b4)#lte
zi1Pst^S;Uzu?H6d3%F-<MR;zr;6mqe5jj;;Ba)f`JD)4URGWp4^g=FrylbRTAz$Z;
z@ZXj~RbC{pYorjKU&>XB>R4!_fdA%NTY0k$sNd$QkC;=br}I(m{>U12(_iWSW3Jr7
z0h72?e$>l=1kR7S*z1xcTFj5RK^_aySGXqiCqL$f+M0Coz(<|mRaS7b-l_U(u41E5
zQde{HMSlqyfL_f-e<?s|1><UNyqhd(au3AtS923xd7Fbgaj4B*&F$R996=SH8`MVR
z<-C^XN?cZ~?oU43>uG-cRCYRj`}7}>-F376XIFy}d3<Zht>&W7smW8u=BbDbbdX}-
zg|paWx9E4b9hIkE$88Ybkdx7Q>isBGLrP<xWK5pA%w;x0R&%M#8K1{a+@d$`F+NXj
zK7fn7j?W8-H8_yS>-anjFO*l1$m{sLgy_hK<ar&Rm+Z##Dmj$b@p)ZtGRt^EK%AJz
zp1oBs?=dk?5xZ--yrw4Rg~du8NF+2d58a4J2;B%s>kg42UQ;O4iFujZWkOVUyih0R
z-EynBh$i&8RD091zuc-XadnuMC%Xl3;d0aR<Z>`b*fT9JB$mfPBH?Ly*j_;}1qe_x
z*y-E#K^<o}2sC!h$df%FWPmUuPabgtNjiCmg8vmj)#e4YEqOUhvvcpzry0$+<jFB3
z5B0Y_PkA5pH-n;uJXwK)ml*BBspj<kdV~#nKp%YjdwFUro^>IHeC^0n@8WeSIH=2=
zdFn_PipveGpmrip`3%^DO&c4XI`Oi1{a$x@Do*BMmPTCxSEoqoR35rsat^@(;HP=&
zFqgTTT2~%<$Cr6ZI#KJgZeg8^^f;UIh`zi7c%rw31d8=byI4V@P`=Cyi8C7@Q7B*L
zAzG$Q%{(geb8P&hdb^(Ia1xPMGML28lQ95DsGQ3~3_vab5-xBqulP1$w(SDv^3u0*
z7a#%Y0_XB>{+&6IcH#2K1qSD5oBo#`_B=5-zs^|lfx-E5Egw=yd2oJVJ((2M`rv$=
z(h(_BiyoZc`1ia+f-usdBZ`Cbn>=9tLPKUADb(a=r&sFLuE%SfWN1gbCSRU@ffSOd
z$(N^JKyoeY7>Z=vNTwz~C64;xt4yXQzvwpek31FhsAKclKYHkoJwDb+gf{!e=F7Fw
zJif>^Heardf<z)?^RYH65<v(Avf%?VFRDyrY<{Er%}Eq{<k6@(E!)1Q9(7ktb5fxV
z!D;!j)j$YYnU-Hyy|f@bEg#i;ltR}$D&B?JF;DBqmB$u37<4jeVZLlP5CX=+eA#Y5
z0%Ku5+KsT3mZuly7u_K(rR8ZV^@aJxxAQ|vd31bY348BP`a>O;IBC#o^AaZwT5VpE
zF9&_7AdMyY81(1RAp#r$T$i8oQTFja>-F6Jb@_<o{|WQ+$=lbn3BC1!W$W|h5DO-t
z*5}JLN05M8pN}<1KK|sB3vFSY`slBeZgF(TrMKjJMJERt=xoWy5dus#kPNc3ooRjb
zjvcn!82}R**lzm_NFZ#_4~ShSkU-d;kC=}RJLD6!gAMGfx9zaQL7?twhl9XF4cqIW
zLOS{Iy3QN{KDCQo?5p2YvCBcAQE-=oKvDIs{DA27^SMjy%16UINY0;61|P`w{j2_n
ztK$I&gLW_u*cAaGU>wMou`5Veae(si3hgxcgW84sob_3wzy7k?-~v?yb!2{YWZ&g0
zKjy1+-bV*5MmgeTw>+=+b5(zzj|C6v$iz34=nwf=+;BKZ=W@RKSRLM#eB~G51#CF<
zi;`8RLzVVZKEf1-1KgkUv5MtzfO|Dx&8s$>pbY%vF@yYU(+hgj>Op=*tbc<Gq(Oea
zh!j9VX^>w=3LxR(gZwg5Ad-)sgZwg5kQ^F42l){x45HHZlRpgiEB{Pfa#{Caa#CgW
z>do&B^zGN@Z@qB&hW+Kg^)o#nB0@tba1F1BUO>W#;eHtdfrJsm{lWj`&5TGfBO2}x
z-FGdED?RWJnn%M16i1DpW&cO-P+sFCM5fjF<>mo|pi|?==E1*&;TTfJ`LiYe(2HEv
z<NUHK_ABJA<NUHy011$BemR{036ODq!~yvj1V9=DV&Q-t#fwA>bI18JPhc3RWAU_}
z9OW`cP~7aN4S|_{rE%i2X5HK$n^f!mSO2HG16X48f&i?T>6bk<NLVq`9}oiqNLVq`
zj{$)uw0?5<IqdI)Frl5}AdtV$aS+Jg=lBDSd2a?4Ak6V&@9kyUG54c`)Ry^irlnx8
z9#g9Er)>!Jk;|OopgwY$Up5=40cM#W&4%K7kcjJ-`IB$^MO;q|9@j7T%ebC6BCdbK
zFBUermWb=$@RxMt<ybAnP_1wHJ3k`JmTMxt6@D3uODUA)3V#V-(Y3)~^9q0GN3T`H
z2=MRUB#Hj|-~JN5%xEjZ`Tp(iT>T%KSa*NZFJ}ZYNi4gs{EZb@c3<f)x%Jv4vFyIe
zFIM_(d@Q@K^4I^5B(dzi%HLVci6wk{th;Bg#TPS<)z_Ay@Uyr4>Z7(lBRjR(qr>!K
zSI1hX{^&G#tzVv1_4D1%T7S}ZBpQEe$&p^dl+%Om?LB|a?(7XC^ng<Ep5GHNHzM5f
z@D27I?9m#1bMX$pT<`)D^|OQ8!V_Eup0Sg49Hl>*-szXCo7g0W%ubT|L;!(&pS?Ru
zKU)00U#`<)8=SZ#gh>t(gH5~Gn$dbEYnKB=t75xI<{PpUes;)@bDxPZdOyW~$d6s5
z$Dqr%5f8IzFX~UE5BufWQ!t@>n4En98Ns&=KVgY+`l9qFez{5rCWJmAp@BjO<Pmmi
zoIbey5wuilHqazXkC0F<jKI3vaevNNewXPp-5%P%J?_U+YcHh17t2nt>Erc37oYIU
z6;?2ze!`D^^4qu!G)}Qb6ZAXMr|iPOau;My`4M&uAv^eb*J(Ckf<7#L+Ao(_!GzFh
zKeokA2_Y2Om#pne`e&Ih?fSu@6@<Q|BAY{duQ*3Ct{`VbAbaCPy+jX<E5Px|&D8h{
zFj#0)3zS!~eP7YLDb@H>bk+C(3#S%%#qAQ1NM>q5zMr>tkf?>J1qH7Zh}KRFcqLY<
z3)Bw09Y_w$c)6fn>9s5Xy<AX!qq#o74ZxuHPJyzaKus(UWLv+guQ94Y+g8wk@lJtU
zODNz2#ybUaEdeB~c&8w|0anmu3Sy8I+PVUDeStV}C3#5nT^yR>{jy}?#8qtpow%ZL
zq<~6wbAfVmqSRu4nWta(BnUAXz$X~7xu8G{oge|Wxj+t`AklGbE|5bfk$mXfTp))|
z$)TZha{-3V-|^G{fpBZServ_{0@>dd@Zo2BfgFB7BH8T)vcCmMItA!&SBru}-*+)P
zdcOX)@%Tjtg9eX_4h9V#7Yk%uTfhg8iv=>S1qstH7Rb1kND<dwEI?fQx$qCbUCqu}
zuK!7?xay=r5%|>t8Rr-9fa+>NRLomJ!qTe+n73kA1SJdEfdO&&00gJxHaJMwH!vU%
zAAp4Bz<_=Dpn$^a;Q@a5peqREczB?$v?#hB9;hoVimrzT<QWPG18H~whY#*VYsE_H
zs6fsXcHm9@j)GAExf6~hM=V4HSj&}qX?k=(?w^4RR~Q{YVBQUl5bJ!Hr3BdjuGDW%
zj}6Fe8E_#qHh|g?LZHS4*a-+V7#EPeBo^{G8?Eqmjs%k?1eBsg2kU0Gd<y2RJy+??
z(_o2BD=fW1enJ4%11CYs$nV4eTeeESB|R}9_ocvv(8K`dHv$x;Fgd^?S^W-cazJ)_
z$TEZ`2M`y}3qd1*CK1T_E;}%*&-MD(1+Z{)2dXAO1yIY{tk>@<tqsUF2PSe{8}Nz{
z8zjuGC8&qF3O;URudml1E!*g*P&3^a@QS6G0B@!n16Z1wfG!Hjz?iM<x()io4qNT|
z0~3~Swd)TgAhrgir-DSPTd64S;|QSMW7<ajfwK2x@dB0_$a{elKafu(2?cNtoqBQ5
zD85~6<VJmP#V#jRKAi~2;0iK;*cFfmT0sJ0R{)+nmg2+!nYcfD%O>6Ls@U&fP<XZ9
z!JzPJe;^<h2cQFt{Q-3J{A^`_-2YH^;%0=J9S%7d)D8{><N<RC0pn1hehVI=fds~(
zK<l==ZwgQ|IKs|u(JM-ifRHle@J9l2JrQiE90?$n9>6U}%Ra##+^YYr?1WQIbXMtv
zQ%!VM=>%2NTcW@a?VM&;w(4stPCJIuQKi#PHPKLaIv`JQ2KZ5>(^O#m5Gb_h{QaeE
z`ofB@90)q9^pyiaN0q*EYMPEJeHBO+@!ldpN0rXY-U0+l>AY+os17=+bl&bQKtl6;
zU2hSfqe|b3-hx>>bgk33jtO*9>08GHI;r%n-B~~pK;Kel!Oy8+$$L;RXIwB_wFBo=
zf`ft{KfhUm<z=k21eIcbv!o$Npn&EL#RC#<J~)VmLMM?y<Lj^>%k0t@S;K;I%NSfp
z4GW^s4+|-fH9_{(F8vd$CMcF5p-WAsCWzTNrWb?-1IGl}nce!B^cV+=`in7yMZuGg
z9R9^1dufl}(Rwi`!!U3m^kNXh)puCl^<a7Tm0-^N?ALqrZ(Rki1aWKTG$n!cQ7oIV
zZ};k-r>6xKaV-Z-C{GJw$!4AqLY}6xpZ4hs8ch$%4igKc5SkuDhq*@xft(e@$<g&L
zt1El<xK_l@?AMp3!4uofSlQ$vXd^p>2C_Gg{rf}xeQRD&c63<0gwVVoI=XLYH!K*`
zwgnNOzIH&rq(`>}aYtb`l+_>^z9Xn~NlbFF3+MD3*{P#?&+g!e7y{p6^p2oBB?S_R
z?FizO6s_%mL`&HbEbPof6e1BpAmJUsSSNlBB}nzSi%mJE-`HZ814=#KuAn?n4H<y$
zq9WKBhpi#p`3>ca4P{-&_4T=d!6BpA+(yQR$k^c_w(qRIz5DQxI4DJ2pbZaMVwDdh
z(1wSw#Y-lFgo(pL&F|w=ej-PB<HRYw7kj`23hkN@`|6zj@I5slnQw48Tjm=iKx;xW
z-yi{66O#ERQslcPB=a4jIvNvV?3muBEeJHAF%C8*IVL2tkFUTU6GHY!(iTEEs7(sx
zu<X_I`UqF`q>xd9m|0cBl=;aar3=p%C_sV~)dUidlS9&6kbs<Qn+p==PPWY@QkXlL
z%oX5JpAu3!OK{p51ZkLeQW=JMVN40h1p$yipAy1?fcy&dDWPa5?gaQM(Wit8JDTU|
zR#POXy&A&Nf$kUebD>v5Mgwyo#YYijNt+u|7G%3$(tmYT<4-Yp#s_p=b3;C{*a;Hm
z%?&jaRSFX6&kf-&7)_o*B9NUMYOx?BwkC;zPz);bLgEM$ml4s~{1A?dJ-`!(z~YdS
zNc;}l!}N*+d;eSg_ENA!nMQc77l-7y3=*j>4xzsww~0^%FJ;}n(;ul`>Znl7E)B`i
zA2Lu`8bYT=g&ZO3^^j=BM4^yD+Nsfa{CY@UY{FMAj3N93A4)Ka_8ZFiDCA0P@L65x
z6_ze_uS>9H|M2M9`rqqsdJ48tW1$m&YLvHZ_W4ix<kB5>Dqtd&9k!o<L@GPTPafhb
z__&KL`dNRtY?q_L8>?LmQPEhb82C}pD3!xr*7B-8qinCEL*=m7E(gdUnY~mFe2Fzm
z<N@}}RsEGV2OJ$LfCF{`K!$`uD1e>RDhh+zu~5#7VOL_F!qy)$!r9}$=qp@-V<96U
zu0|J9hEIq1n*gk%%h1}Lwz2UE*r!8s$rmKBPlvGN`xW_NA*|IdhLmqYYT}T}ey%lc
z%&v49O_gdeMfE@g2p4VZKmy?+Sw}7i5-xZ#RP+s8kX9CnL31hfQb^9|BnO3cDI{lf
zk_DhkA<XFR;+8<*dveN7<dp0&)%aZ*Xfcm0<YC_TA^A!HNa%h~Rq+~alNA#AOBR>K
zXStsE#coUBqAmRrk_#Cik&$0QNip33NlGEaAk>yYqAmXtY9N*ji4-mAmr%od&37oQ
zE2M#PXgIrHGdj8|hK6O61sll>4g17VZjeZ3Xt?ACiA%BJ&~QaZ9;Xyie>fs6W;Gz7
zIU+1)H6WomA}nV$AfY)TY|m;6DIy#j7PA@<FlMY{1FgA@4a->#z5;1%Sk7ud0%>d*
zfy%>hs8~>&5YCy-4tb3~6if(XK;%(tjJ#+{_9oNtySh&a%Xkr7KurnDco8I^riA6%
zD@f`A!@=u$<rB%rm?`1Vb>>+rv>3IASF^AAjNYz}uiEy4i_E+lmQ@3iq{8w(G)N@!
zY8c(zQku@haStV&vnP9Jp0Pv;ED7TTIDZQxP8Kf<i?=X9pa_<QrQ3o8<g&1Ie2{=#
z7KY<vs8Q88nYAi=u)rAQDqZC$ksYhTa(sdilvYs<P`??c2LBct7c?HMc+1WSn8?Xn
zVR^p?BoN*TXT;<JBoN*TH)&=r6v={IpDhU)i(M7#9Sm~R^<jCED9#;qeYikuJc1;p
za8cUaMcrGR+;9ssBgUSJEe-@Z;TFdXa>6ZPdCdqafY=glcRhE)I62{V>4YGlx!ra`
zkkH(2J0VDDZm)B~IOTS?a6<NYp`mrz?U+D5xZCzYNCIfL?Smizw3~eJQB-LnsO<~q
zyc}^Q?qZ#qno+j4(CF;n7seG>x@MZ7n*EUZVn(Z0AKJA8CJ;Xi%fT2V5I+oKFs5t2
z2`c!5VLY+WjJ@VIirLth5o-g6=*IAwfA@;Jjv%3YFpNDUTHu2=>h=>9LgHl?Yqrry
zvTtKXO({6GI>CPumfK(uhx#XB1ll;c2W?Qt*rK>`UBxlGJitVG9J9*<BoK~;<rD}c
z>4ee!@cVZOs?|?fal+VN`e|66u>li0pN4hO3xb5sr(vw7(b0|sRpS|!P8yvm&N!*k
zEc1+$Dplv1u)KW-6(F1mBQXD3WE<6amQ70<mnzOW5H!g=YrA8DSLE4nfrv6e0^)4A
zX>;?UfWR#CB6}}oeAD%!13_!Z7sEcgv}w|LF)Utdg5fmjycot+bl$NhXesQ6uyRM@
zb%otqgFEn%Vxzw6QLsc*1OdSPV0RZF0rx{V*^+m$AOZJ7xJ^5o<Z##BPIuOkm?1u2
zf17kIOjob4Nok{1$16?(UL<fOEHC;c6q>GH3CoLqAd$e8FfNOZrdFJw>FS_JR<(>V
zu8KjCIxA_yIw&GLVMqaFP((fs0}>#EB8{4u*K-U^ScgW~`x&Es+0ckQtdihU)u9o&
zumBP|LnCk!;bxerj)<@}B}Ti75l*sn(Q!mXUUW<-G)Wy1NsAkXAOSHVf~LQKE=wlp
zqT|%;{1T(7+HtCbK^GmTMr3~sAz)06B*nWSAb~M8(x8#K#6aUs2DL>IY<2n@8O_wt
zq6kKim&p~9XtmnXh_Zs+)y$Y$jlV?W0UvNnBl1oSNWd+P;7$#N5FimkERBR#M8t9|
zF(`!4UXQ46M8tBe<Uwy)L@vil7M5d|M`$^ACj~S~YNl%=%AJXKvOSv{w<*;iY%8b-
zSR0YMh>!%@+K3#<K*DR*MuOse4v{>JSsMw7(+rY>Zeneul~}8mEDqE0HuGPi3?NY(
z!7O&H%X;9MD%QN*m{b9V@Z=;PE@~t4*ak@0R2wN2i$EX&RvW<tw<XFs71TCGa<;Rp
z<wgttrihWt&rqaL%APH(Lkr{aC%4#{0~0`7B67tWB!IR=u;NX@4M=2eOC(&)Cn`iD
zbExqxk%%}(Az57M!GD@D6lID`+sdxCFcNLII_Xd$ZjH!37&1`V8j*c)3caXjTSOV-
zDrt(f%5nYmD0{M{QB)0{$Uh{|Mz+~)1SH_LMdV&7NWg82VC9qcN<m_;bX&yUD<xXk
zy)7d5N+k<>rQ0I3SGt?lDsWzDUnJ+Xs4G$Hwz^gI?v?$erLoCXurGq$DTZ3|@WVj+
z+1}R1%jx|Qx$X)k>TW-!PWO2s1lvAjquLnX7JnF#=eog!(1+9{n{gRX2iU*b8l}Yt
zBJ#{O&esq(f}7zPE`v;c#Ll!e>ZL!5$kh)Vj)BZa5zKvQQyht*|38>*(#~+Z(g!07
z-)$o<qz*=~+cp6`4``I$@$4Pf853O<$0PF54saoLJR%?M0Eq;TN93a&L?R={BY3pq
zCXRuMKf#jijc&y!B67tBM^^xGB7%XTgv+2)Kgs^Ly-`1XG9s5>aP$N+C&@d{;D`*2
zfm5B!*0wjkP>RnvNc679IYR2nh0xueXIncMHy59e$jzuc#S5A95o|`iz-7>%USLft
zjQ?qH0ZoT|7U(8qE>NfQK3X<tbeKOzln#k?D!aFh**R-=G`vbDuxte%6n-QHp-+A1
zj}bi8M^BePol4=yNRu1P*90Cq)4|c~eVvVrk{%qbEAd>Q430Kz%&!^bQFl2c%3iw3
z=#(B3l`p-33!x!V+>@lc2zd(TJ42)FYZ4mjAklizP(q^15jZ1;1-vM`yQ^_mdRSB*
z-3J#!!=e~XX)O+i7O_ARWp8&iI;Mv^NOa_RI3ZzG8$!4|H6qFiyBYUeBOIgvghmh&
zf@YG!eX0r3?5J+W>q>e;RK7n0HpC`G5s}Jb#T~0@*@td1x-02v(Ymq>L26nQWl1q7
zz;Nwq2HSj_vB#PbRhr5Y4nt^0w6xqDPOk-_$DR|-S;|)4ZVU^~iDG~C_fX|0k>(;R
z;$0na1_`uyEeIqq=0@QObWepJL7K<b-C>j$&x^|YfM7yqUKIBMlUxSWeCE5;C@P*G
zl^ZKKRYcq<Hdg9$8Pxp(_PaZchQ$k_a%B+bh9I*bij_f}JVIJ%aSPd~JB_x*3!~D<
z!Gz4hD100zJt2ekwul|M(`Zq=$iboJwuo><T4+y;S+l#4*5asK)y?PaX>k-2e>{r;
z9JHq;tj}FWOKXXfcWO^dDDNNQm?gqxZEqAC)U|gR`wjozs1c>>3mSizXg{0%pmBTI
z{;0-#bYenxe>B{fs)9&lcz?9@t!6Fy3DEHM!`b9R#s*jE;i$&ftB4Dw!_g?eK20Q)
z4o9!Mo9>c>#K$AdeAu|H{76*eyOzWxZZyKHoJgn~iMGAN{5RSs`V8&UXwJ#(;D?P?
zuE3{JyxOxqA6Wdd=#awf=0}X1^fp5ZHGXo3*gzXnn9nPpNT3ZVM3Y>Is2?<}K2fOL
zn|P%Kn^4~jXS+XX)R=!Rqk;4VT+{wbmGx9FJk5)jUg^LPo_p=n566X?^EX}l^nUh*
zYu;R?hkZ?}ZzWzl?N5h`{z9)%_IO4Rxauw5YAwZEmUyE8@8nwe*5l7?{lAQ)%Vd>q
zBjj(wUo-7(_3QK809=~L9(>m5?yZI`c;L0l!kfN$<digF2NJNvbE<eF81J0Y^S1o;
zVLY|^|9V6idHIhQHTjdo4xm~0JTZTnnEiU4rloJ7Cu1Sg+ro`?dS#g2r=@pfk<ZHh
zCV%F*u`H%4>&ZSnUl4`FA1uZbx2DzqxhG5Iv!0acmf1#sGybI9exgu5mWs+iU7aYD
zkEMb{U7aXw*PYHWs70vw!knowevUycLcM)jXr#onyoe@mXA1eWyfp|kp)-Xt2m=Y(
zGlg<m4iczm3NbCmNU0W)1AM_2zF^dA`GuoGA;%Yma)lQ%Q2C+|D|d_NuxAk*RQtXV
zr|GV~U^H=8<4+N4-~$@w_l5EuJCK0+zA!G9e?S7}`$CN46oi6A5c+*#gC7gUQYtaT
z0?-eIaw%1^P%4)Tv6Q+1qX_hXG9-o@*DtG9x0~;|k3CqU<!Ar>zeYf52fheBA%(Pu
z#Oks@bH5=mWMLkykrbgP(rRMLi!n7Z`8V%G*0ALRjXzc6s|`g{!kU;2z@Q4Kniv8w
zkqx>ZR1=H77!$EHzVkR%8x>Q>#zZVFdC(gjld-g9A(kE!v)_p<qP}lJ%y}o0y*|j$
z%E1xW1n?b}Oo++lDv&^&5VM!7im3EiOuPU90-Y_3)m05G6|k6`Dd8)SSWGTgfdmqZ
zVX1(htSk;{i(@(C;@Qj)W2)L<aSXi-9jz?J*`wt#<;|FCuB4-t#qww+@v=up7;RkF
zy%CdV#KkvM-HI4)DA7Wt;2@!Y$8fLd2-QO|&0p5Ul-lfVHO7Crs_~~NbbNq;Yhp6G
z1_`}2F?pT@Bno{^EL<xKofv!qvo@x_D+^unp!bel=#qs(U&jmmim(C0z?PV@Gp1(i
zk2aonRfDjtpoXv|CMPh(ydi9fVFE){4-!^vi3NAoSs|t{+SZu5qs|I@i(*?$E8vp>
z(u1)uY<moY3!O=nEY#n7F)g<#MTFp?@OH6=V~zTc?Xv3;Ow{8pyB<Npz+EwUR2d{t
zcf}CmVvHgL#EZLPnLA}7JecPaC3l!bJPlBL*n+V}x_Xb31}&rPanhisv?nIttSaWq
zD0^b^1Ug8hu_u<gMW(?IR}yNh=yzs<rvXRY8^eK}T<al>9vD^d%(&<=is=<P`e>RD
z3yW#je{W3g`r|W_-Wv;u)9xSvyf=pFf)qy5dt+8NnKU&#GJS6>)789=Ck<*poAIL2
z{_*`z_V}p)Ck<*;`(yIhW-)J6`(udzMH)E8hOdq7BJ{{K_Q#ss!S_T_%BZ%3?7DHr
z`_%`XM5w(Tbjpz0+d;d%K?NB(7(*N)5}{-32V?c_mKm{Ml|2}%f0tRzGlFR5P)xZi
zQDEI#+5Z`<^4X{HeEEQ9{$iIS9l1I5M<;nYb92Z^o>qen#pF{k#e6mBPz)iLNFMKD
z;cJPVNB$ZX3_KL8cL!a(MHV6O2|GUCD69CyNrRS%K8eW{49FmjPhv?Ml-7VgiD6Q*
z0`V*$Fe^FE?wDY_`Pgv>g3c@)cg*C+^I}19@DVD2I37a~F3j}8isLcdpAb#PD_ha=
zSkwFY@rz<wB|63a_>xgkamq=<gqf#ea-j(_F!NNbL3;^GYec7F9Xgut(j|mqn)6)9
ze)N*DUU~e2gF(j|F2v-54}^emAtqn80tt)@u`+Qc1SIUd5Nr9kw9^MWgJ{baVyzxC
zKc^A2m<~W(&Hgai_>=pIt4=DktaLRdS1KTcRIbM4V^JWH%2n#^MQP+Bm8-Fmdt@rP
zGL@^bdfm<aqGQ8MYG^#W{$=C$uIiz2ITREtwDL4G?h`8@Ad$?_c(GX81BqmY#^ur;
zNF*~fe%+Iz3kS&$%?*uTUx_1ncnU#q=+NBI_+yXr)$U@NosEcJ^CDHRKCJg#Bku-$
zLE88v1~iaJdqi9gXdsdHh&Zx%SY!YbxEJGiH)yBAp7=^@mks{Q$haN`%XWJ|{O85E
z9My^ydZp{dxE$3$0`A2)Ml}kc(%6KF=Vap|fJ#GhLL7_Vd|x9?0o0_p*w+97)JbtU
z2!Mp_q__;AKmv7A90Am6ibvAa1HYPmbh`13Qub<GZsLGT?6@J`;{yq$SL30ud6d>O
z)6}=m$zFWTIPNN&<0ui<97l<I^Esq6TciYXY4+DyMgyh8Qo9V&e9?QUT?Qb5u{0hO
zTNxlpDUO*F9q~)k3~V`jVy=-XUvAd|m{3`6*8)hWET>xdg<5W!Mx0e~9#%XK0tl;|
z#HlY`<s?ph=_<PdAPl5cb_G~L?X7suQCR^NB;Sf-2bouZMHR4CRsaZ~uC*%wBxKjx
z6#x>bYpDV#g0-m3*2USP7mU<(AfUO<(WF{f7ne~WzCv?d98us;<X;vAvYX<{d)cN7
zjQ@63<4@sN_yCwqcD6tQW>Z{_fFJ?0DUK14!T^v612)A|@5SAG{hJsN*c?|QyloOK
zdVno)M6vWfy=37U4A%1E^7?XK9T(c$Sc^qQIJP~mJ|IF?3yErb;>w5d|4Yc)vl=2W
z8!{q#0SUAB#AV<L61aQfGH?Y6v-iZKAHr-plS>R9Lwyie_s2!xDtXY`8<&BrWFdyy
z7pK6LUZsUD;%W6zTsgviTx=Yu#$R?x(k|Jdxa`v)2a^uP3q^ne63~a@a!LRaCLM}5
zI0BQXk0*wh5*&`pDS>36+&-bg+)hV6GI+=~p7TxIm3Z4l*YEqVyO$d4f~VrRHrXB4
zWhl!0EUtXXieESGuEt-YfWU_}pT%X62@=+P7MDRLNLce(Jp83BAY$+WIvrQPkOd@p
z&^u!nkYu5NKIa8Q$A~j<Anj~ixrEANU%hVJR1Ly5f_(IBT*jD?1lZZQj4?sNh_mtF
zr8*;IjCn4uUaT|1jxo>2WsFIBBF4NBmocVfp*p^fYdCvJePRi&O2u=2l1;J%hI|({
z(xOS0P?NkYnk4JH+|XKGwr$2Ih+ei^BuLnNnOY>>Ybv4EawV={tB+MqH$rU9awBv*
z7&;%h@R@(-*R?z(4dp9T>SR$pye%Hjc`+e+>3Wd7TGvb0BZ~$mL@x~j&OQ*EO&k>@
zWCtc>FAWl?0~4~7s7EFZPVi2m0|;mib~MSJ!3o((;43r-C+w+WJ?bPzCX}&>|7*L0
z2mm2tn?k9LOvrYJuK*mGknIj6YII~GIyNEN9Wl6D)g;t03DNE(4|<~#vfW7*+-h`!
z+8q^E{h&5JkyA89mR5ZvJ3e7|sr9L}CW_Kx<KHy2vWd2Z_yp03c42`;N)xHD=tbH3
zWd7s?+w`W<qRnLNKJo$vm$P+oO${V;CMU3^L^}X#gP=Auk@Hr<l^Bd2#VV{Mby#Vv
zbopl{aCU%piyM$Rv!`T@8_Q<fnBW0(c0#^r01}w96L5u>sef)jhAhnX%3^`2!$NH5
zaYMj`4=+r}6S*KsDj}bI1__LX2|W2sO}_yRv`bj+YUADxOB@8MuO$f?Hb4dlOA>O(
z1PO#C2@IK?I0C3;?5?+rE)~lh1nOy*ISAC#E=$Ng-v+#=U6w%XOM`9$8gy4A#0eA-
zuzp2CMnE8;xgsGWAdpCHMZz9?8<3%^6Jkma0zj)B8))oZ?btwL@9KmMejp5_)d>VY
z>*%s%!=Sc1kuxZn{lgk#ts2;!K;Otm-iA~!d!?Jy)*4#Ny|$a+6Cn56ZUPdJd&x}>
zQS~%Lv1uPCl*8E{YK@0o)%a610DOSn#|e493?%eEPRIjHAkhFmP81zR1E6&QVo(E6
z4<+OQCdon79ZJXpOp*nlLkS#UYRS`wz|jQGAJnt(Q%!952BT>yXxj*?)uRb{{GcJP
z)uRav+K+QxAe~?hHyV|tCma>3#uEv7<e(w1#uEt~IiP#94XGMGWp8dY+LnHb4R!8}
zU_#~7ggmSR61blx(0k)KB&eW<&amhv<NB6o5@OSfm{2*BNQnc7Afa+5fvx!^6dE?f
zbW*#JP`=GpZ^D_CYW!(uh~|(N>}~~e(7RxFD<Dy-7ZTBLWw$~M-mQF{P`{DgisV7>
zqTQ`X7P^&7yjy9*O~7pPhlG+zG_=^lEk=t95Tfxl<Ud^ULqc9C0STLaNJPc`YmmVH
zA%XP=a{PugZM-5JpS9SErK~Hq-{TV$uh@PM5{g&q{JtU076&G|-?PWI8Cu7I$vO*Y
z&NwhB8!sdQG%zXM9wdMUCgJvXVS@x$goh?`Mkd*;ZN?o1LzB4pRf5d{T$05WP?BBU
zh7H1DNx7o|E*xrD5<40QEFlEo;YrqMyHS!Jo|Ib};6iA4Qf@`?TdgCKY~XgIfi)s2
zS~XOu+ZmCB$3KF$*C?osPUcKXvd!CZ{%ds7h|{*9+K8+en`EW$8C@&J+W7+)`5SBJ
z4<yVOo0LzVf<*qtCb2U^U3DX}aeR_3eGip1-hrSVa(vP!E`~seOC?0m1riYBlL)%H
zaR`_?G074;jGHSaIuPW#6O;0QR3qL+PD~bvl^2kJm`GOKj{G$aYAl)a7W>x@<F*7#
zqAl#Cps+FJZ(0)XKfL3zZte3tvo;w~7TIaM-T_?UPmn=6)9l=WgsIb#vMUCObf!^Z
zKgR*_aR&Q!r}2En3<rTm^BE2TWp+kV#_ElEW@jYP><?0()tD+~e)iw*8;`h3=O<+=
z1{X^6sbXku4HC)DPhu;n3)ca)h~2Q;=-OeClPrw@i|hhw%wz3E$pSGu2T3|fi~w}h
zvN3fXOW9kyjqY8RItaAZwbVhNo@A+mKt0J)Lcr}IAV79`QYlSzU`MwbF;=<9DDMo0
zU5s?3Y<bcr+99NYwLDqWSmuYinB~c4&CQQR#h{B>nN(J@J$sCU)%eRsp+&2ePEk^a
zv(k3G#=OH>NtI619+2p8RwnDOPKsci7$W3cm6R8WB@3oylehwV2YjUoepD%$voYyP
zR9O5c7Q3)UdyP&Htxe*pQye*MLSC~jsRR-@e2lH60oL#DyG_`KPp}W)M283x_N`0G
zkPjqsxh{#}37eL{!N*$m&R(OaL#>@dFo95O=MW?b+0FtI2({!a=p}#vU)jK-`;7V>
zH#i7X6B`@^N@hb+F2F(s2pf{<0FTqmq$$>ilQ~D(-}f2E0$Y;yG0LWt$DK(L$btak
zPCHj1fw<Go6-XfNq+Cs+;h`y|w?BK`hsG3F*?vcfGO|A@V^|15X@3$iEcL@pDI*^t
z7{^ZrwFQCt_(*nD^bMLHC1n5t5}F?+?Es`Hkw-*F+zkZ$_=sH;AYu3syC^^c>4@DE
zgXF5{iAU%tie?y{k~s^qBMutF-GK{9ybI3bk7iUBmt<Lh0OTb*TOa{>$u0|!fV@Oy
z!Ow#?Bh$ZU=RPrJlzpF+2baMlZc-jx1__<-lQ_8i4*7mFDvO`k+eeIdpZLkn37AOs
zCp#w~0r68(Ug!h~h@WU&pxyx_hP9uP^5@lv6tnxElK6Qw+(Dp3pfD)KK0az(s2G%z
z%?n(V{GgOPxC#=f3`)sgR|CnF@at;W8wLc5dT5GyjvKdj9O^*ulg}x+b_XFq3{4gD
zpOPURKnzXcRLWlRm1dNyajER+<HkN$$8in_1&-rVas-7GK*puysX34U8JEIQ8vJ+<
zfxzggsqDW_8t=L)raB<hS4?$4sIQoslHD$p05Ua&mLv-V5yf;i^;6^Pis=pn9a)^7
zlE=84@mOMdszfZKf&|3$RO>d}hnrEM&rES2X2(85EHN`BV`zLr+A~wqg+W4bX3BQq
zW)w@zPw`lyD+rY9e8&U|CgwZ2pkQKtN(K`U2GaZ#T=+J4aC7X6rE<=(d(IfQh8CxA
z7hnhtDb3-)+VYgLGQ0Q;E~r=IPtjfB1HhNt;2;6MJS9(Ffdu&S6gD%cI|YgEba~2J
znR1(9EUXd(enrpCypdAhOnLaiQ5_e$D^i#mhOwGd$3ztOZ-0trhc|G;klt!`;}=GU
z4yzrbC^lG~k^_5l-da|t<oih=0lYeek?&ECfYW7b*uTFp{#d=nK_ItU<7A5(%bJu7
zP@40`vL=O5f)12{#DTIksruu@;~PX{kbntmQVn|YOWu-&17&McPrc}(GfYr}8S7F?
zt3+G8S5oy<RX<lh_Sd_;AvXI<qd^CJv5T0R)Vh?6bf5-X)}<1qyrqKVFfCg0XKR{M
zlUmQzuZ){IuXhk=6khL?2eqj6DLIZq1qka?7=`J^9PGlIty@yc4mSKNV|O+FvhAQI
zwZ$nDYEoNL@{xCF0cA@HA-<?;dKqC$s_Blps-|5fUe#Mu>U(unExFL$=2W$0qN=wS
z@Twjx3`05WW}lulhIZKPSVe7gw__Ex(cQLpH|K41cM6+Obhf!U9hlk6=A1J+b=d15
zP!rwjln#aads78s>i{aSZEp(uNIf_Ln&<(RK5tZ29B>e5m*_xB&eogrwt65{U+gx3
z1j2z7ez<BgbvDhZt)9%TKW}VxRh)D%=&bNb2ZLJa$&|c<3mssbOyLghAX+AGPP;&7
zvzxy*+)Br@4h9_+KAVy|ix2|F*_3>q2qZAhrc%Wwi(%e?XBcJ`VX)G^F`~J_Sw$W%
z?SpynR07r~ij+eB0Bto$fPm&d5<*`ww#+WVsEaFDAn|cdk$8ubC_(0uYZ3|BIYk)C
zge<7JMe-&n9wLA&NdBw=WNFNrTf|q$2p6W#L!u8!B=ULC{J;-=h48#0%s>S&b$3Pb
zPAeV`fGkM9D*;(LdNscY8w^+JWvkMl_I6Ruo|R3!|8V=?E<!*?^WIX*^jh|&+uQcK
zwM8=a0uxAUi)8Et5=O11?9c?Vl<a>OS;qvj>vR47#@4&>8<W?m-bg99B6@=i7pg;`
zp66XcpjRGBMeOy0>a8f<;HVJp1}9M}i4CNJGl5V6wV9n#y`4)pJ1SH<n;jME5jK+w
z`Ftt$2;0~_9&e}8ZH@{R(zYV6Xxfm0%C@4seEuLrDRq83*jkVG*3uo03bpqgMRMT)
zGEmu3goT4Ac`CeZw$!{mTkm#Mcw;P*5nHKfjO05rOjJc#P&-wW^HSQC7|&)L@J6yn
zG_S`KI8}rYauW{usby3v6VlmleBRAX%O|AeSO_*OnUIc)J60fJ$%Hfp^G$e>MJ*3%
zucmYMX3w<qc2yd@n&uN8w_1*K9W&F)+_XwB0PCQ|lUc-L-P?Olx0#j3OW(9uBR;`x
zW~bFI*Km-`9OBIM!MJiV?wxF}8@#hUrSGI=je`r@-bu?E2MMKj(x?j@M1&4L*0T1U
zz2#5Vrsbj|n8Z!X>lh%RQk%wg42r}+qQ|LC7l<deh~%4-wdueOd~;HAXmheQecko^
zOh7q#)+Y8|XK(w`O^#`l`lhtp34jdJ*_1|$>%vU~wUxE#;_X_oH7&dRavuF|P0J_>
zBoMZygJKE^l62A-Na;Q{OogZIWXrpF7j)R^Ku|QdGcBVz$N*wzx>y`N011elX<RNI
zz!Bhhd)TC#ynpMk$3dWZ-yR2n{BTdYxRop)^20spw(a=Sape@r?PI^|>h0KJpMyYS
z#6Bk*<d*x=GW3NC5cZ`J`qElKIgJqqSZ!DD?>ZcC5a_JI0SAG`hy!Ukg@+0d4y19H
z>H&^`8vB^t)Xn=~#m5c;{fO<y4g$q<AE)JNYB?VxK2GEJt9H=lc{z;{r?Ve+^WNpI
zIPGBY=MNkV8Y50SR?rx6nyjdyai*Nch;!M;Z}pCLRh)A$XpA`LV9*$G&as2Wh;wAe
z3OXuKPDceUXB*w_eN(Bp>|oFjX<c?O=%~QubWoi1fDSM&r*X=+Mz{qX1YohdyrV0w
zIuP^*!c_-?p94q-MNm^N&H<!bwBol~%IUcDK>Wn*UEcOx23mE_NqhVQEqNOVLa<_>
z6%(N~NLVq@!iY(6VmWQs53!UR63toBUETy6aJRRp0u0ds;xn*@STe=}39KPjqK))1
z+Or>GUDw|HFOG#R`w<q~b+`AA6(bx7+NU33)wLDcrypSj#qvZs-=`m8H7n&$h?LWb
z>`@kbrn~q4ict<k0U$;>5cEr0qbxaTfex$~W#Ot1jX&jdUVE&?E_e5~tr+V-;5`|z
z>#U$(#2RbKcpN%_7;E7-z38VJ%jq!pc#Hk%9&hW4@eTz26xMhLA_$1_mONJj9YBn?
ztP=CD90CWuCt2*!J>Gs5lN^W;ASO8wAwW!WG7<vBB+5t?hrlWDsTQlb*ZWk(R0krA
z8kuUzMc8sB42Y?gIAjdV!+@A-mA5qS=Mea@j%gNaexLV&4$~Zn2&|aqSP=olG$$hw
zKun{I(Bf0Mf*<#o&eq=Ny|ZGvgAfJ6bO#{{gz1(Hd7%P?=@!oGj~9+!NIx)e^ZnkJ
zDrPwlg@BmlKokOEmL+Er<w_wSW?3b8vP87E7#75`;Rn16m5QYfMhqBBEg9F9D=}a!
zwF2TcC`e!|wQ%;HFG-dwc#dHOyYirSSLYQD1h#I~6_z~R0~tW9u;g_vkbqcW;X2n^
zOv_LhxJkLyQnqJ}KX`BSRN_y&og`q%Rwp+Jz-+bTToP)4*=k`fNpk>@m;-FJ>TkEi
z>KQS_#Aus^XXR<xrd&y)|F^`HcikVoTI-#b9Om%};5#ij<pl}woff9NM?`6-@Rq)X
zgEPC><6mjlv+~EhvpRxdTbhEUA2^n#0QP}nX$oK;kfs0jAZBP0)Q(y?UuFG|dsiq0
zM=k8z^50TxL4*7W_Cck0c*O}D8cdYs3EMS60{Vm%6-y@|0e!;4dhR3&)mzZ0`(<|0
zlisM(=}QNL7U{mU&4Un0S@IeuNML+vVfp$;3TavfwaZq{z)bdwp5Esb|78m?4W7DF
zTatM{u|7|GpDg{!l6x;;0_!I$C6;MH0_!IW(>n^(T9P@xvR|I|_U!blZ4H>P=2zPq
zkR)WuaULWPezh>pkER8`R@iXJ<c!I%na_A@!b3AyBzOeKt;m?+8ElE)Iq|iMID4p<
zw_`bI5enlgFo$Pk^Z^o>!!w9J_>ZZ#BC|$k*rs0I17)KfB{F1mMm`w<At;T`V4dr6
z*wH$ujmzXLVB7xWeJnbT%%C2rHO$an$|x+OCMvlhzyGuM{%UZ9A@~l=muy2o0`ny@
zgnSkxeD<Xb?jnnwYhv&%rimGKN=EElOCIzlW#rDaWMRfSIYVm`)V;Q*JiU@pqKWzz
zYxJzQtQ3T81ZC`%jNCqlB*0$DVEddxkk%Bwy~+kZ>-}AiSE0`bAuyrxYDT`r3=%4@
zX5<-8kO(?n%{0EB$E!s0F!9w)llyp>C^-}+zMAQN4{v;}31VhOteJv<SI^AI)&~;F
z&CJNw2a?O$3r?*m)|;Q<3r>Fo!717FK*F2mXXF?J5=iqivXcM_r1=>%J#6oL@EF*l
zOwRI*c)E~At3?@4oX<q@*cV-a+0)xwR=hZ)h`VcGqHq>dzHh<=G(d&2l%@K3yA?0Z
z$m>5~LS|_uQ$kl=AOmU{`)42T?bfo4ym1F6aWiOQGw7NT9`t!Lle3O}-p4yV{AR|(
zA3XL1$%K`_E$PcDYxGifS6^?89qa3DR}3x>gGmNRD>G;wcmx$BEXuOhfA#*MIGd5v
zW-uX>&0y+-MhF>DZ?T1c_4X`&OO`k>iJQTO+Ra=B#k7Vs>*u|tcuhv`%mw+(cTEPJ
z3mz$k3d;Q*Hol+tChHvshi1I*5DtDkUQyfNsgq33*V#+`y!b`TZ5i|(d{Md$<!whs
zEYO2Mo$avw6C`r6BO|9VAYsgo45l$#DYR@udEA#h_?&mUt72b9);qZHpnVxRWP>EB
zOjLx0Ac3(jgI~XSm#z%Aq1>L%9(~^1MXfmPU{C;mIwPkG5CX>OjQllvkia;d!LUz*
zM;oHPkp2q-nqS!d3lf@N*!~NW%i8|ihDz>&@ZZ}&aH=jJ<i8he|HW4zU9kNZB#<tU
z{|=$zZ5z~n%;d}{aV5TWvlfSqL{|T&_mnH}W5&pcf^JI%{j(_O8$ba3XS<+50{myY
zpg{usXDVoZ5u`0;e|U+~3>QJNdj@*%a#dRo(fu6fA`foo^sjpMsk-YtCcn>v>r9os
zd;b4k5^8?!g`Zyi&1;gu1thu?RH;1MoL>W~7B_$B&d<$%@9|7!@29J*=PUd3U%jmC
zF`%kvnHYzW1C%YYP)DMchL_0w0es~dln+~gMD~Z5;N%u=aH?&|MMjk<O%i{$y5nwC
z->QCfiLw6~?5*mEk2Ws(&8QN2P#c=S9aWMPO9UW+JE{ar1mDq^+?L46CE4O3-oGgo
zlN}Ipp~)q3-562;nOssJI$)4o3-d&BzP98+Q%l$f!@O4c)Dqckf(xCgC9>ND37x4W
zw%fI(m6howyxZ&s0ua-k)M<TndWq~d@fAqZOJuhR5=hfa;C2Xq6t!JYn^Tgrn*DKv
z_mj|^5_)chqM~;2HEn*0vV`3^(mSRae~AGHe4x!Qkpm7$pv^Cl=e0m$)SF)tT~Z=O
zJ!0@tZ$XK=xI~P4k_WwoC34i0ER1@KN@&!hSiBvT{IU||p2W=-d#J|Sy$Xb=Bz!^+
zm)SW4$wlSl<p0!l<?&S&Svv3f^2{xVMjpr#@a6IDeeW*MKv)w(b{4@#T-zNL6>Yi^
zXtig0dZs5p%OWHSqLhFGBq#}D6GX_1Y!ZeY6m0}qg6wGnNGmi=Ad2&ys=7SK-*5iA
z-?^vGtvYqisr6O?LUv6={rLch7Of@{zDsPABq*1lY9d{SvoB;}VIQj^*u$~K$6L+N
zqdaT6zAO_Iuh5j2RS|XYN?&0Gt0Gvqq+=ZWk`W|$+6?{v!bCEQWC97#KEVSCiHJJ!
z1d!51`ew7aG?|zk4D5)cOfwSmXXqVnXtN`NpDRUd%_f)M9TBmWKmM8?=(F3)6kb8(
z?uZJlfDpMm0*^neAy?VRa$s*n+ZXYt@8m5T(}pEZzos)^DQL1(;DCU=5w-IO5CZl_
z)XpP7ROQ~tt@}`wG?_&Ns!IPC5w-J3QJ}joB5LQ6B0<m>5$rs|Kj=sYh654oJi1lv
zJQ_PoH#32~Opt01MAXhBFeB}O2-d>Jh_pZr{Nq{r*vy7x64GTuL`@)O3tcuuFo9@^
zB=Ci!{E^pn=c%I+b=YmT@TQ}l2LeLw(TG~41cZegjdUKY3Q8MkF|Ixu=`u+4d58fN
z>hm0plnfAa3EAX<C-~{t_1yduUaf;jRL?L0k<$|qHRJ`vXHP`11TdA%E?YEF{IS{k
zD|wAc5j4ltm=r;COpTGCoaaIkh-i#po{Q!IvuTd$Yu@z@y?g%GNeMK^^mS4K%`tr)
z3Cd9(l0d@O6dEh33C^be-nWVJH}rRWJ-<!rn5LD!ji?z{Fd@;m5p+AmzN>6ZD+QV(
z+7A&vVRKp!p1Dc?BmV{0e=G&jt5}*;YW4yJQb0m;q+NT_JqCnzHAg!9paKOEM4-45
z@qe!Zg`y$dRWDE|5&}hw2ow}RvuS>6f|2|aun#D3K9J;}6M)Fd1VhDAK!}`Rc(F8_
z=BB0?a{ttxxq9HCDTWF(cm-8XF;pl8grF&g3Z;M$G{sOoP#ljq-AI{Z$Q~%oR7^M2
znY?Yujb|8iCa)C*z`GfSI%)wB4l=_)G{Nb$sW`I`Gb;xF_j&rTjB-OAfB-6($_=?k
z224P&8T`~deR#%ehU$ufD#+-HJ}e|5ce4zB&wTxnj9G^2)3y~ozgY(QwAgI}NpP3h
z2H!a!l4cv~1OZSXX|{nyIGpSPCTQVJgJ-|3_YJ>ks2((^V0zO)4|)ZHSSrp(tTJ$!
zdHLIV_ZwPQQQ7Ga`*u|JYQAfs{$QxuD>R5mTTO+gBMRD4q2J?0i}a$<dxqL#1|oRg
zGvK9|4FwO-`+UJ7{ejT?UTHuiDwXCQ!Gj_%=fMj7zR+?{E$u{!mm5&a0KtP2ui$^K
z&<BN980yFRcA~&547eushucwsSMtURy(F~KP<>_)@vW5x`pjsbzyljw#RpgFzY47~
zR39Eh@T@Y>hsR_Pc;KJ4{G&>JSg1D1LqFEn5)XVBJaE7|ZY<Wjhw7Bc5)nLg27)n`
zl>jk~yM~WntoI48N$Q7=saQk$silzz4s)zGQg-t#i}lsPdIQ_{Nd32v`ZvKl<N*hO
zP&KeTvlI|AHc`3h0QXy{9yar9@94h_ZT9j4B6v1aUj8I_fVT1H-qlM(+r0X`MbyJK
zs?TD<gL>G({Y&%##tu(^I64t2caZ+D+Zf+MJ?t_t?^4XqR_I;$lqGsr7zBCEGG2pw
zmw~nMZ>XP=6AbJzQZDlSOZ0O$?=jF%5e;Mx6>mR3{(=5BA6u;lGWQ!Q0O1V^v)@qd
zBOvm$-$46F^SC)w(u2IBTF=Wn=(#(HsP}`Oy8{xFq4p~QLc&2RBgNhvvb+Y~X(?iF
zLs9}+MT4PMaKQr!4ThN`hTedX&|qNOia4n$hv2Ei<fVGKuiGg@HCCV^(J4c97XgWj
zs(A~w8abr5CSJ5m-<IE${4TAIG#P5%89WftWTeY(D<DKP8R)iBz|0}*K4-|evd7=o
z1KrPgp%Sl<@SGPa0g>?B^-!5ZrMn<Q<v;-B<U%qF)Nox$Dvuhj3tp@QGbCN0SUHIf
zY3heyX=2g%v%ly*f1By1H^%8l^;vGp!6X1gmYb?Z0U@&7R5c0+k>w_8lr{nNBUR5d
z`3EcYA>C#s(@-7GG}Uwwn2=_siCLOLkp^`*+vL`VdeNZSri%Lg#15y~ri%K25HZ_S
z-Ah1-m~EnaSxX(Qet?0wrnbQJr@#BN-{XHM#ak2suVt$U2w8JY)qMtpthuJ@J_Djv
zoNKmUV9M?@5k#vv&-DMdDZ9^#hII2y)qPeZw2E(=)P1H(?nh=);WK3|k6(>it}s=D
zh<C_Eg{c}uKuD`Fy#}!#*+-Qr8^i^*dLX|lsT%6wR3%kI=2B&<1`!D%sLDhoV?(h&
z7khxrlui72tv;;HGBeGPE}KhLyj)gsF8~N!?&${*0+)ML3<!bCsfzy<Wy+<BSjqpT
zPX9yZ%48C%;gzO3z6(4^veLxA7PN+zOJ2H~e^94Ckh$7aGn*hH$!b%bu?~nNt4(x?
z5d4t@sE+skNH6JDm;4G<T%D;-kOdDhnTX+}>|9dzTBYj^A3@h^Jze7!60Y@h4Tywm
zuj@LObX_lXJpcf5>OExxikHd`0U@d0Q#K$Z)swPEK-v9+fh}fAGw;4uf2_?GGc6{S
z-Jg`bT`3y?0=Ii*0))Wrp0WWUa62j6MVb1Oj&||itkZAH+?7m1%HHL<6L^qh7rE1L
zkp#;Al>g5<{qAm`CX<k$Prdr-FO>Z$)z2PUspwDIZb%fb*FV?t8@!@}ikvohb_NI;
z4W{Zy15zRrt=1WG!TzNFlZm@F>SKI^P9|m0^vlVl462Berdn%78pt?lqBRn3+#eMY
zXfn0)KXc;*`nEUtO7TW|F!&&*$@5@9h-vaX7!V%ZWVS!AJeUZ=gU^`$Z<Gfs8q%Hh
zJXn$7!RM}faDNK6-<dz@*McHRvR?~`tbFI079d1^cipu5Q|IHdG_4^3(9z|jZfJ~f
zIjI{OBV6`O3(SyonM~_6wY_=4K#Q3&E9y%x;Pnr(wmj?asR4f97JXZr7Bej@EiI2M
zZDLeLZUD%i7*$FGg#3w76}bT+e_|AtMrM;o2J&*0U)`$TmH%>7MPX1O;^nBaen7#c
zu2KMmh?k@2l+aRY9=Z9{D4(*8mQs@<NQG0Q>UVZ9LB!N(RIcm-Ld4Xl+BBI*XnIsm
zVgn%M^r#A$fJiw#ssbjU;PnD#9@*c_sGN-f5a@a_$O>mBi$PX6GpZscm?3Fq6q>%&
z9-7V%1~x@g8u<G=^r5~*{P@MRyAy+V>TPvCVy~Y4pqwj9p4g*K$O(@b{UWYq|9?;F
zxjwP>%(zjQj2k=drJv62jee20KCio6Kbe{yW8tSpJv;7&QDVjp7ty~k>KU9&^fVns
zfpdgj81>TcUl=>;8UDszeNUTBQLh)4Pj$aV);({%5Akn{SM_*>0&nrE9uNiILRG(u
z{(sD;Dp?py4BV&hZr5XBOeq{>LGR>>juRkKEsWtuHL>+AAJrYGifQjBiqGhqeWiGm
z-ia4TR~1w3D<INU#Z>zW2=A<lwSPY*+gBn8@2rmbm&IiJs%S{JG^W~DMWX4c7`3kp
z+lrjiKgKcbuQC5k>94j84|@97<HF;f<saY>EI#%V{TGQ9=k)RVlVFjvR{0{PeHK#&
z4T!9M7E_i0h);eN!$^kKj{uR?&tk@3kyZM=mk7uztn%}iTJy{&v)lLP=d5#YJmSs1
zr25Fp_QjOF;w@zFi+T2%PmRuD9`>=T1Mv(ghm)D4Hs^3MlN9X^Co@UW?r;p|dX@r1
zK`?MMhDN7Vvwo({(U`YQy@1T&bWDZ<07yLT)es;go{p(d00@bvW3UJDb94dK-x>bp
z75!khGs!e$4QFDyysHR2NOLCEp(87!9&rIV|9Sq^RsGe>^Y}+gm<)(Wb3S&X*y=|-
zNOL}ht$x&C7ZCbRs1A=%-FKeq0FmxHPj!IAd0lk{r1Q%{bwlt>z*8L{3VPX79Uuf<
z_EZN5L6=E&l{lNsUx=6*OW~F;{dPW5Lrk5yE;Th#@`Il0ySXLi{a0K_nw-R!2iV(r
zc!vB*mNIof$e&~>MFK+pBnyhHp*FD)#Scugv~tUzzTjuw(m(S3KkAc8@m6{bcp++<
zrMw0ZqNZ8OYXD)2)2#O8mh>7T2(Nj?@|RiCYZMLXrd!Hu6bW84!}5Big;Z5Dt)H}M
zpg{c~$u<oTS(#}m%LRnUnU-g{g#_nV6ls6VpJOS{0u`E>V=2!9gp4_s@+?4+2%4uK
z%!-16c~;7ge1ygxj?S~te9>u5McCE1z|tx$KV2JhBe2}nM>LKJ)w&@IE&uIeeo($b
zITl&|0Y9POBNasP#Jy{2OCjz*JZY#8BJsmFus;r6@_*9O0K3Za7bc}q4OCmWz}}Pg
z7fbs9(lB4GGKUCAG`_&k_LeTU)Rse$IZ|?s<^OF`9I0)Eg{!<haVssY7UJlVPLTw$
zOp$1=SCXK_4=r^ir=&pcDob7dDJhV<+VXepcU|yDmbM;(f8z<pSqDVoZ31j`?=_ac
zAeku|;IFmRfmcEtxyU;Dq!`;5k@44)@mF@M_iPnJ<g4B@dqAYAC$ry0W?w|+vpw-&
zH?li@ncI_z$iTN-Du93qiMCq^AavMq5$S6eZ%$*mJ$6|tet?K1yDSwy0Fh*uh4}F!
z?b<8?44ksG#>CS)yOvstM;Ybu0=9U{vqeCNIpx_RAjF)qRFnsVYn`%;Mz|J5c_PRt
zf7(KnpG<rBiYVk<vT(!JKU3+b!SKlE=};)qLXUh}91s;w9Ba**w0v-RxuEvolBHIl
zAOg9#WZf*C3=p}vWTEp!!LW#$gJw&P6vJ&<pnJ3Dj(CNH&7L~~B4P7&cPt{`y(Zl8
z3LoB%1q!Yub3oGp*OGdmzUsB49;mN+&4N$9+X_xu4DYj3wkBS0hkJu>USQ*g>p#=%
zbTOI0JBh)a*<_skVyk!sDulgb>tbs*F+tcnHl6)K?LjfsTs6Pag}vLYI+=z{pxRaw
z0pLNJY8xY$>GDJ5Gl|`|qDkpdW6M3@kVK+t?DpbBNP<XIW25%Aiw~t?k!+Q%ZQ-wE
zux+hZ*=fJPUGbCwu+{P>us)PoYvW`S+JFlpWYya3Z4VNY9nTbdxQnTh>-bk;mfy3^
z_REG2L?o%RZ;?~?fJjnjV}ll*lTl37w#N4NOwZvJ5rzZvyRz<?AjnhA@fwNO*d4`j
zn#7I7Yiule)7Fq;s=0N1eOER(bDixMoAQZ>B<t+9a-|&*N!HoefJqy`i)lQufoDZn
zVde%KH<rp$(a2$g9ij+8g`|<g20O1nDFSnw8~NK2c5ly(wqIIbvG}cFqur^yN<wQ3
z8||LG#m@9%n(EwS`}?G4$x`(;nAH;mFEK4EY)U4kWra<Ym`*S#rlo+*w!a7F6opEH
z-BNGi;l>+N`C5a8vhYf-!GaNDHrpNK%{71!v)S&J#g@?jcO}8VemiBNlh94}&JDr+
zHugHuh0-N3$G`zwJH$V>SpQNy$paohhqwcFYgyHR5O=`F{vztj0m91<*y)FCxs*l(
zvBGrF#x8L3dqsf_9<;GWNQXr!5-mC%v<nK^MY6aOvd3e#c1QXtUzp$fN}wGtx7nem
zK$4CR22|`ZTdiLMiUjH`dO&3Cn2ldZsI~x6KgaC8L&aG<1jXy@A#4%_(-I1djkeY+
z{i08te9ymfSkp70cpoDZY_wIo3wC_0(N-gDKuBw}F~XJ~qlxZDJEN!im{?P4w8K5v
z_q12Agd%E-txa(J>1P?gdzzk}7!+rZrIv!|eUD;mOY(c<Q7y^uQEY9Y?@6swY;CbK
zCOER&f)B`U%lEebM_YDV6b<QquvNE3k<e|qW>dH2*iAIKj(dKlI4P@nyaziPoZ_T*
z7CVdDQ+S%{XmK7cX3-cRG6XFAH5Cy0o9bX*X(rSOjJIV@;<=uzjW46j(ZtSkB7?2W
z!Orty!39+AaNdiRWRyGVG-F)VBghy5(SiVO;lXKL4sY(odWT<iv~HwgqJrsFr$<jV
z4cild5merC62p2kT`PFY(L^X9GT7d7x{GlzK?r-x=`oNhMnL5AEvM%IhO<b3q4T*8
zpWT<`X3S0IhZaNTI>?XAG^}o(!_W0arspN|L#rY4C_nHXNJ0Ra@9;abS$@WRM;#9i
zDwyUw_z@F_qYxL&q%yHIn|<!fsB|<DC5Q^HN(Yx5?3G1Bm{^vW+mHQ9%UG7o6)lM@
zqg>Hw0;v!WYIv(WcF?MEG-35b1XGQZlgnBp6W0G$Ia=@Zb2t;9zdAI~kw^2{kqpp0
zz0%p;tDGLa5Y;sQfMB4`!MtYI0(Mv1ItQbkLfG#BiVbTVZJoorjb_=Uz|aW@GH?Mx
zt81K2@>BpoD1D8C<qa}cKp5*9$6N<vr5+d&M2J}Hs1Ttj$jDkpg$PBW5V6)lh`5B}
zASJ$2@9=(w?4Jeoj&dDPQH}MEa#cXVrS^#eA~*F8mdGl}+HtAVRwv~If4+!S+`QFE
z4GC-SK-Rv^;aOvtWdcCLHm?=|k+W@7i?pcKfikh3k1l52L)#rq{J=&;@N9PweX#Ky
z5NHRlEoOZ~JCbq)mE>T006fUoPL3^l@r<3GEr5uWJINNNVh0$QVCIJs_m|Kx`H-VY
zvj!Dhha61rkZ%A&)FG$O5Mkv6k;Ow!-`i=I0$xKshxxq0EHiZ2a}*FE;xIYNSiyq|
zZQ!Q|v+)@Xj+U+Dl8rYwx&7H2WKA8&$dB-sZfA4MBgwpwjUS=BG)X4d_;E+ePd~(W
z4o%DCMR}}CAZ))lY82z?cci&lx8V?H?79-?Nn_gOIZW`pFj5@nOxv;O9Rqp%sF5$>
zc+1hh9mVf?j%D!l4QXw%<c29^gqHB}ksOsza-ic5)}9`K4G+X=T~5mPjxT)(uV|&W
z<HbW*e)P11U#4h?Fc8C`vyS$6$Iq_O;k5(RaENG$#Y5PieA(w5e~B<v`3}Oras1<d
zLV>!^I~Wg9-(es*#|20Ghr=h1WqnG4p-T|tVWoh`>jkHa?05ho@dXE4{Kz=~;T#tn
z>mSNFh#;KfqURinf=pcWoI{bwIWCfOi0Orau*<*|oIKFNTm6#le;SXnX~7F*=!&EM
zuLeYht~e190FVRnk1G_&WQJ%&e8uV2f(%jfjrYh<5TC#5__OFTHO)UL7?|Lul)E_Q
zoy}=8!NpNiv#3!WL|!!6O?)$q1%3BSc2%DiWPEY5tBy7U#1|*K7;jMH2?&ds>;~mU
z>jW`O5FBmu*q2f+(wDi3yN9!fe5GYcxm1!eS1peW5+x~fG5s#(QV*caZF{GvIJ_mf
zL}@1vI8_vstjz7@eOxf%<7IB)FWF_f(*l=vaW`d!>r4L{cUp{oF=5?}W!oTk)fQY_
zy@e*l)f~}KMgfs2V6i@#3WyK9<zjsj8^8haa-Pe_-^(5i&vR7}1{F;6T-3oU)S7mr
zK(WwGoV}MZUw9#83p)o{&=Ejt$kjSh1X=8I+$6FhW3j6)HUJe|i(Txa5jO~Qq!3cY
zPu<Tx%cycSVTMRb5v0n68E%%M5F?iHy}x2xvzEDP7eq%9BbK??1%ZhJ`X214#?^At
z-xD{iz=g-)bawvb(6sQ+-TXFw-*YT0E-a7|qS#0&ZpI;qkJq@^B31-z8XOFK=wh2*
z-2<#J_@RsaVdPeW$*oqqT7pj)%lh)d2U(yLQ1)^05&~Dd>h=~uXkxXCMH8}NK-lnV
zH<EB=i$etARJE>ZaTEpFsC89~qe$dbwJx0MG1NWoKU?djY(w1-4-Xv2H$TYk53Y4n
zP0?m_qKaSVYJEh-^Sd5mfe@e!(Rc~r>s*9IoIso^ZarJiUwnx53$2F+MSX$@p7k!`
z7WE-IQSENvJ0D^Np$)Ez!5|XVMGU6h8=a`iKjyKASxM+)SL>_fP>p}=_RA&Bfd>`7
zkxzM;6^1sts(}I#JR4m!P_*p@w~L`s<R>3y*`az@%TscwO{jMZi^OgcapTw~p7RJB
zG+<Mbhw5$<@z9?%5QH{itE&y9!+mH3ujcLPF#Z>4rz^tz^CG%mH<MO3|9qZa9E0EL
z-cir~{zc5m{~OLTW?bKp7V+XeK7#7TR|-`=sma;umJDFOh5g(f4D57M_MnnR&=O8M
zU-JkX7ToD#-JJ~Sb~2>huJ)-kq~VXkkO1YMA9xALyWNN!xdKAJyWRM0!jJ%ANW0z4
zPn97NK^W2}o*^j;^7DyjNQy*;^a&Xf?)%bG@w3nuZptZS@;F8}dmm*@!7tp@3}Hy=
zWJvp9Il_=kK;#Kn4B%1$A$^~VJNfWOG$3An$vcc-`CY$E@{lEcNj$d-9-srRmdh7B
z&N@aY1(56_;sQ1CGN+$nMS&0Unh`7`bkJ4Zc3hDLo`WvB?WPb%oe+L*1dD|Zc}ABm
z`yga=w6`mr461==J<je7HF!n`BIGoX(aCHfejMTRAIG<jcm|F$0Ks#F3_L94z@EP1
z2OejU&{tl3#3^gw`HJFWRPZ3MALSjNU{>g;7gTUO8hDOUP?0?7L?7cLi04?c?9_)o
z=A!Ifg&cIDkMqhWnDOXwSCgG7oNxx7<1T(=lzB!E`UE}_X&tu4j~oBQs6UJ!jg=!y
zMmBkE7~YGYGNA?PO`mY_Q>Od?e(OBR!%s3J<7BeHbkEI6H#d(x4eK2e4E)VaIme%R
zl06mtn~SR)$Y_U<(Kfl-Sz)xLfKVN<Jl6>jRodj<Di6p8L?t#+oTl&x2&-*!?X${i
zi6E@@jAylqf_$9utX7f8YR{0>Uc|=zRNOb#?533Y;)$}6>~~tQ*)!SBWU^PTn=BwQ
z1T0M!5TdV;IZ{s-w{@ZSz#n>s#Y0!Ux&RS8SE(*A!~hRa3$J*F6^C2A1`kA{x-@>G
zcCj->zlrgLHj3Tt%a|Bf%_qoUn;3_A6bmkx>!djU-LtGDJSnaMX=h=tlj5+miBc8}
zc4|Da_gSX-!c*g_jqNN<c4{1-6m4E-YV&5q`K9OBn(&OcmMbC<sQBWHIPMl5jyfEQ
zzpUaZZ^ZeYU$bFtUyGv>Y1lNBDsfg^n;oZNQ+_EPW&Pm=G%_o$>JJd*niW^|2Z;Kc
z6}M-{W%ES@QGc(;Rr94N$iwS#)qE)u)!*xJ)ZcolKip%sAfB=~?n__p5A%D@rFP`s
zJj(RMO}}Bd_-;Ww^;Qvpx=?K{jML~RGh?Br3Q+NZg`^7d@Gew~i{ku0$FO1cqPQBo
zf(oWZak`<8+5=n*hP8sY);sbin#JYCCvR-WG2J^p14KFA1&iQ8l93_>3SSxLv!7>A
zg)8IAle&mHt&HQ$7P__aj$mL(JY`v&-!hgx+;&MEKeCaV+(8<yj%)A5sqfu?3?Ahl
zhIoP8R>##T^nmzCbsT$4$wL64;p%woJ*8nH2n{dwG^{Ad=u%I^ibNV-3Jvpn?n}-2
EUlF#2UH||9

delta 46642
zcmZs^cYsyZwLd=h+;dO6cjoq)TV`$>K-$bmx6DvPqF7>&(Il2ANle}|vBj6XmkgjZ
z0RbtSrc?<IAS3O7(o_(sf}o%vC88i8y^6~Bv-aMHL;U^zyK9}bK6~x9_S$RjbMESM
zE%xqi(fdWui^_}M7u5y6m+n!v+V+rpd>e*&7T6Db>09VgT8_4F`^r~}AMe-`zV<Ek
z*y9iS_L%;Ee;2m&h%Z_6V@vzRlfLhL#ph;uEJZ7dX#KrK8||UzeIq)1hOm8iX?NI9
zcG6aRSf^{XT6SWiuf}sd+cHFt26B%+`ONdZo_;2G$E_CgUZ*u<Z~en)p<Zw09%bjQ
z(<<1bZx|`|&sr^I5ij@LGmrkh7u&Mh=){@!q%PVA(NKS{QD*J&TB=s06h+iw_H*}W
z`#jadyjq!6Z25?*fbC5*bx1FfS9i6(@Np$iM19qM@jh*jQuV4=OGqgXlwS2FTR9|@
zUiEhDX+6qy@Nfzn{!8t#>M33=EM*kpdLtDM36&|{=GR*<Yg`9pqn&?13wf&>-EzE8
zYV;<rl1g5Z^0w_}t@m&xHKHzL5C2-*SiR7zWu=e`orT`qwGIiLh29$<wuTBFUqoHP
z9{i0qta^#7<Acr;Z?3b{@j+*ax96kQ2+;^yL|tW<J*16P+OP6zB~nU*(kgE-<B(8V
z<!y1T^@?b2J)&;#D)*#b@Y=f{(fWF>x1^wsHr?RWN*xj~8@y%J4hfhI-fQo&-cT(?
z#faJAE&9st`k2;S3GVP371r-8Rpp(zlRe){`$L<ZUWK<YF@e0(8{x=A0&1r>nX;y$
z>YzOlZI4&k&qBY`rqtsXH;DLXlRaL)gW>_o9&d#AH9ZB&9&ftb3R*rQ4MM5d@AX<?
z%jAp!W(0NE>s7C|qL$xbsU=|U^QzbVClhG@_Nvzx{*#Lq{?e=d+&YD6qQcH2-lB!<
z?%!)C!$-VE+?q@k@X!c8=4JbAV*)$=2Tf~x%&QpGZ1f05AM=_4heR>Qyupz5H?D|>
zr@Trk^(S^|ztNLD^@LVc4TfJzQ;kn~1969h@+og3X|?9csK!|@+W?(M&N_|eQ4}=V
zS*OuJ0^+RG^dJFomYQBzrx--0Z{babr-o><v)=Na)*OYG0)_9r_5**^sy%hzyTy3X
zGT(dsISJ%NG2eUh*El5Cy1v$0X>t%uh!OUxKWXo&-AAahe?5u{j1j88QYxW+K{jda
zkiZzB)?97P!eB>BqF$3#rA2C@k4-#iWbK20(FQ7A!4ks-0$f547m$FPtVWthIGQ_?
z)vKCY6GXkVh&Dr2X4#F;Xem!UemXs-L2rg?ic#lLH0aGxW2JnUfy6MIp_a{3y;j6B
zV3vk9D~V|TQq>04C)<(ppf?jWgqZ1wX%XKWs<y&oWqFM-6W>&oLMohNpMGn^*+b81
zS~WOggnJa4kZ-EVa#;f%h;ORdy!E3Pb?CbV?9qQ{-`(g@47Bh9w<!!X#RBzmQy2hR
zphmbyfGq}q7O443YpjA%twgk?YSF*#&41O(JmICPkr2aLp<%s3<-@ub1Rz&9tppN~
zD^xkIK>~7xigEo3*+!#ITcs*%RW-HBGjeiWk{$dXZBac~qLm>4{Z&pYgM|JnH5TWs
z3=*xpN-bS0TbUTVl~=3khq9F=4|*Rstt?q+<u$yO>$oZ8##E&|Rg+^Cf7h<P0fZPa
zilSfuZczOp-oPMX(*`xnS0L1Z=E?>&m9~b6I)U7*Dp#fc$qxO)%(Eqb*Zxokh66@3
zVzcTOlNHJU+pLxrBsMJ(o7JYxtg|%y6b1dY!+z+0wg2(d?Qk(@M(j}iVgNu07(3LY
zm>?j5u|sWk6(2r)qVH7MmT!$zdl1mv=?oo^(A?<^9gxu6d3osYdhh!ehK{H6KDTfU
zJ-p8uG>`$rK4;K?1jIfXG>gd<dL!BawWvRv^iRzW9#D;lbswtbr6KbT>s7DaU;T~K
z*I)wa8)vM51kyJ&R_@{|cz8r*hw8PvJ0Ee3@hTqF=ZMoaAi0$68jyfELR~XJ<rwJW
zGphaf-kPCwKI4K=|DI9(!rOUy|DI9PJUW1_)W2uc>KbdL00DVPwO97lVoKd57liut
zlIrIH0<@@KFR2;fr9g5mc&XXcuU_ices;JYyk+NpJ~=kP1x7#LWkaZ6`}xv*X(b(C
z^z*f8YYj%z`mnUV<SQD@{?T81DfW`j7o(>2@s)M3PpK^2#P*KSQ>=cD*|v#TTEXU1
zn}pC3gMImebuZUJIYZgt0opIJLw!n`h9YDrNE+(PWUc8K*PuZTA2U#!ks0n&l2V2<
zedQHaPc8xjUty~TYPV)y@hN#JLqX6hz9vnr-*Xw%d=#r1q&<-v<=R6*&nU8IxffM~
zS9r}=^r5|IkhaVdd(G!7<8|W;=p>(V)qm7Ytes%<DdYnQtVuphp)M%TLz8t1J2zPC
zmYw2Lc$i2`$V~AyZ^5G~&>*L?`-f=5veSJ^Gj2GT#PzjkX`Mo!K?t>Luzf?d=RBDP
zpTdU+aUs><!|-^B3!!?m+1Qu0M=EFg6y9@?q3X@1p2JWEi3#+kPidLz&hEI$DrcRB
zX>GG$IL1*l_a+%P3@aMMF({VU1BYoNl+H_hN(*Tng>OrIt*aao)-CZ>ce6??jdW=I
zE%DWKwYF35VUdWa%h~;}XrE=5`;<0PNe9MqU;7SLe++F1VX0VS-!T%?Be%wF2Ln=T
zs2$#=DXm7djlQDK*z=>cmBEcZL^o(>xGGHPkJ!(~Xx*wl@+mqMKulQik<Tc0NErE%
zFBG<}<tljiF<UT3yT0mUSB0kV$38=>t16$uAN%0(dvO(*@(C+v+V87Akt3D7Bvd}}
zm5U`DBue?jhb8<@t^#TYYh>EpU3NG#O;u>N?(oT&0wfT2_?onocG7I!;j5~)-q%oL
zUqn0PEBeuAcN?p9^M(%j5XH6ww2$h1#K&HlptY|);*)C@xBxriGlh2s39utR1fcD?
z4jvx!vC|W@4%Nq;TKl-;I_5K?+yIc!Ip!-Zv)XbU)cT~4-9J%lSAEjep=zJ>!KYGN
z`*^ia`r@V5)m#S%XMAk&M6FHr8CQoYdd7!MmC&Jzp7Fs!3fnMv&-+-}t6GQ7=bg6l
zaj$gV=NHWj5)kKoO@&ti35fGFw%?@X&qss%2OoRsRc&tPA6yIyx_<D<NCQH^_`xS5
zeUQNT!H013HB5gvL2aN`G|hhgHSJYT(}5ZvK3-MRBib-c8L6q(6tAU&9$<Rm1&L>0
zJ6W6T={a0eE3FXXE%6M^HbPT>c?AdMyrQY?QG0<mSyQG1ufgZw!SxW&E=<+lP&!P}
z)E2HbIgP2B+6&Q}ECJo*o2IGLJk~4Z)-@Us4U1maVxFo7O^ydJQP~DfMv5R|M1zJA
z-Gi&(;T+a&hIUik98E3+8sE~)(PVRhBq1##dJQBH=4j}(cPtJ8yH?q&XJ~c4s#Tg|
z^1jvhtXQSNSn6t!P+CRB)^HtAYgo-}txeS$O%aie#;3s=Ei9sSkR+s4HnF;K6^xE`
zZ0KyQd+j>cQd+XsX?_tiYJ704)3VKFp)@$wX{}oG`J&O-*vJBNv<`I}T?7hAHfnNs
zK?Zf*s5PyT2sAV{YHizDZ_x14$Qgdj{y9gR)#GCqLL;u`=PMV<0ODg!`U8-F_*jEK
zm_xe^4X#kzuPNVXYHFg%{xVH3w_kcw8?4rYDZ);O0Aat|WfW5Hr?#U#B%UJd+^>~>
zqlw_27(DF!N>dMNBDj}4=zR_2cyKRS2s;mG6x{F1aBJXm=jcjVYNI`BzV<+{8iZp7
z#p82yQ%rCe2edglCiusqDa?pEkEP$&wpGt_bxi2Y(@n7%z+iyRJRO?>zMVmfMbyQ1
z#VW1B(|xgidAM2Vn8o_#;bsA2u^!<III3#_W3k?(ne{JGu0NtK)0Jkav7XUS>7{Js
zYHes87$U&c6hFY0xnO>PEz={;nDPT`nO@n{ddJ|^4@A^0_HRDW>eRX|E=B+yx<$V{
zssg~+qGv@!rYQknY|*Q)wpLI?rYXe{b+^5Joz_jM+wEc$17o*-d0Z6(W4C^JTonUj
zx8AnBby8HS1U<~|+o+xHyx)Z=0mOb??p`&e1Q7f6d^<TbO8~K7?|6;%BXU46BN$Q7
z>Gpt4TD`aHITs`dkaN1<>BS&G&goHStOfycPS515LB$*-6w$^Q$~gOHAHxaO<EPWC
zA;63={31DmDGQh}Mw!#kA;63=(9dFohA=|M7=>|$$Z|lOw(L-0hFZgSpOOXFF_u`g
z)6|r3M4f2xoo0{!dA8S+&#>D+)8f@&iM0#@fS72=ttLp6I+04{TTMhHaFG8R{u%ZQ
zQ(eO&7!Om8%Y%!om}<yPCR6}1)xdsXj0x9|skzK3dfndixi(r2Ei<sm97X-3lV^R8
zJ+ns}Q~RC+4JM%9bD%*2`aL7UGijs(==Y35rFAn$z{Az7$6oE0y45ZM<&IXn2;^v2
z8xgTN)48KvZ6K5KqA&ujwU%wztM#v4>q3xMTkAs5s=U^Si2l{N+g)oQioS^(0h2bc
zm-lHs>o&LuULb665onFxV93Q$=U#Y&fyHqe!a-CEZg`g+`?vPGQoGB=K$N2HaxrL;
z-sQA1bWrXt1M&4=I0R((vNQX&r#tU;5on3t>mraJ-fM`2CrTwhyw}L(t${j+z-T;a
z*sp)34e~yA(okZ2PUzhAo;2dZ|AU0qNdx|$)*z5@b|;N0u_6;Wzzh+m`hIvwiwl5*
ztRZ;!-e(OK6-MaV*B<eWHdLwWYs&ecD>}^WYsz5-66W?bFZVrp?7k-Y{vBj90gQr&
z*uOf0{Y2dm7sEg;hM00M4k2I+F-wKt0||^FCN?hX1qS@>82i4X+D1>^7#G8Y9b;TO
z$p4Np<?z<I{~cpucq4&McEJBmU=JVH=G0AaA;|qsa3RS3PB0^UJ3uNhV}jYdC7+|Z
z0`L2p$+z<zK%fGznR0r9gyw6eoSq<|`I_lWPhEkpoo=!bpJ^9*fWSDK?%EK54bxp4
z$m33Tt3e)jI#r`z31%sr%WAXelxcr@QuFGit4$+qy-fj-LDO`-sg$N>DU{B!jqkA1
zv<F8lX?PCY^`?x4KmvEYiG>vr9jW8#R#S<lUh%T<6J~;K``#C~`(M=l;;9DT0ijvC
z)ig`^sDctewwmFH^(wWoLEE<NtjQ1Br0VUa*v%3XI@`^1o{A?DI@`^btwhqsAaW-=
z@q_kq%}%!*nut41nY@Aw37JSpjHW4I&_q0B+Hd}-jq$cW<a7eq&^lx$g%<(|twS^t
zKNM9&JD)VM-Y@a8Zm0ExJzUXeduqUPYDW|Aq$yW@gHODZCRY8|%CI#?7H+mx)M)=n
z)nD~TW@F?~mKVW48h(zYG+}>vM{mlygmkSbNWMDILo~@83pP+Mfkp{$LbxzXVO=76
zJNwm;?)7BB5_^9LK;cbNSOue@0CKLqBCLPl$<MVEUNzzpo1_*a*AEAwy<-)9Z`m`V
zdPgPnj)j!Oa`cFgr+b#NBXNCYVW}l^5MV-ksRf@jQV1dRUTG=&*rrnbm3sUVwjhZE
zxs?_?D3&&0p|>HI+h=(xGUtqK{n5tnT53C5**NE8oKwO1TWan~7OMTeg&o2bQovqi
zsZFnB0c&;rPk89+4}QWzKd$)+7$)O~mRh(H48CivrM9_}1y{80Cx*eZthdywT&ep0
z2rbnOmfGCq_4i`xZ?x2ASF$jrH~qvgL_;6_L<+&p=KsL&??te(<tOID6@P50O$ff;
zX+=Z?TP-zzWsz9qxBUb^iVgQqz+w^g)1S0O98>NmH7dnE`%3svc)xva)nkw5^b&aJ
zxSf`I?UgKa+%8MRGTc^3q2s==aKd<nBKmFjmCX++^xK}FD5Br?S}5^#F%U7wd|z40
zA&c!z>eK4+Q_Lfz0#WK$RyHSxBD{w7m6bnqc_=DgJ`}$uFkyw_6+`iWrDm>Vp+*NS
zHG3rs*x%5&=)k88pue@03zo{1wBEKJza1ke;q<L*1gZ_m{DsR#c!d#1Ewx(0d!-S_
z+%dpeFygp7csL8#Cw?M@W<B|&rM9{f4DEW#?MkkRc0GM%k)kWlT58A3ilQgaS!&&t
zEEIX(QoC5)dA)&r(PH^>{l@G?ODt^YUrL}|w2(u&3yuaEs7qE+KlWm|erM#8<qL5a
z$TLvA{YsX*z$PO11e#}ceINnR+h38fawrFRrHI;x)l}$(Odr3(<2_<RrVq&=90m!h
zFZ*+ap3n64iwK99#3h+LmqF{iz}~FTD>E<n6&{>JhPvnllBwb{sMCw=ScP7bebL3C
zD!oWDH=;^NF%9$=4QF*3y?bz=-xuXo;t8ffY*<FG&J6M^Jhkit6PknkNO0Z;bmWR6
z>Pu{AM*n%{C0B-O@)F71$z?zdW;bQ^yEB9R(g6#vKA2?S?SO-t3}JRw?~@tg;!sV7
zkW6PTgPIIwzsTubGei9{;ff3pWQLMVM=pbb@G@JF)33?A?3W#g3=d>pCYc+!3})Og
zX64bz!~6<QYrp`?XbvM8Y7r!XM*54!vH#AaMMnC4rMyLWhGi66kw=S+@+*8(=>rp*
zqx@LSn*bg8k%&5)`3rip%xJ${M!<y3Xp*7%g>(qQG<HWp@01ziS9ofRn8YQS>$wbC
zgt6%by)MK23XdEhLoLEcrk2Z~MaHsA1-)~2tkWXMf<R_0$@~)0k{Qt^`inkhzpm8p
zZ#vO$1QE7)RTEpC$$n+JU$qW-kbN>`Hj8*{N2UHv`ze04B~LzyM}VB_hYzImmf*m=
zX~a2CVX{dPz<m2m6a71-ZoXfJ$>5?p=KE!s3=(ZK-!C^fAb~O8j}6WNxISRu>0;Kp
zx&BS<Vi$t;NQ+$vioO>6BO>C53LqBy%MyH-Wl{^i!|rOK-%|UIi$GhXcU%N2<{iJ>
z;6Mck@A$F7`31KD)N;1Hh5pN~%UuL75SIJ>)OJ4DNh`u~e~2GL5J@_I97C+2$jn4!
zrhVjBw%C7esW12b7C*%%8V>;Tk!uKrY9IL{ViS$0fceNT+&iHl&i%-r-{KdWXksAE
zgQ2_Gul~37br5}PMYJ>iqDA(wYW*v{=@~yy;CfZup3w#cl%WCDdfi0lTC#JAXOHWs
zPgmQ&6hOE_eJP%y*#-yH9#?Q+%aDND)p~=H3l{b6c>AgA^;X{c@d0^b0$fyJd_cA&
zNGOdD$YXnu2sOqB(hmw$kbJu}K2ZJu`CkGh4vHQhxb{}Q1CuP;fsGIR;(lu|MfDc?
zOPd@}UJt0L?>sp>-9=YDcY`5X6_3%XlLK;$frL?$19Arp5=Ko9i1>}L(5jOIxz_`t
zRf!>P6HH-Gb=70FQv>qKg?yq?nq^u5>pES|xXeU1Ob_731sx7r7<JmrfHH@@+f~1_
z9={yRXyDCsEu(=qGa&mLT0ou|ko^r3mdy<0=UleTx##dkKwb?Y85qm2hBUZ#N+!@|
z!OpxiRB~bHY%-K@L@g?Eq5W1jeVM0bVL;LNcm@}SEez;lc!MOVKqN}xx1#zZ+Pi_G
zgZ8W4_4hr|cLT_We@Wxqk3per4Jdo;XL{)W_SWO4*hAm}@U{j_fd>+JTM3V{Lm*Mn
zt%2AcRFp;_F}6|&y)B@&<|BhRTX-n;Nk9b0TnH@Sei{%Vw8O&q*&aZ2Q%_?`Y65IW
zK!lPG3y$)$06f|iQs|t|10qCsq|jPB3G50fgwVSJYQ<$1<{;p|xYAZWEyL>Wfcl^{
zmOPoCdiqQD_$~VQJH8Ca<0vqROYKKq1SD|24B$9Ql9(=E1|mFOp{M9-@)utQq8%){
zBj6|Jc7WY}tKQ}D0|CWBp`s21N`yaz3_uSA;12~TWgZR$k~hkhra^%?`#>PooliK(
z6Ne_;fk4-8)&T18KtwwcD0<00eyiT!)AU4uAMtqA0KCenfN~CA<xV)2fOIOH#U|XY
z|GdNLfZB-{B%Z<CGXeD;w45QOab9sYpw9JJSD`)uaw^{iSmx(?^T)mm$Ws7tQK9bw
zVUYv_i3)uez#2gn0*MNJ7f1<LMI^7#cY*Ycyh4&g75XmF?FOrw7X-u~0_=^S>ot%4
z5KzP^SAciN4}q9Sm4QS-Kaisk1;J5(%-t#~#JdA6_d_6mi!6vbh_~Diftzl&8fbeR
zpf2iXUw;So)V2MJr5^wn<Eme=%)x?$J^hNKA}0+J1@|k)IR^qEK!6&=D(}+!bROg)
z&;m55So%1~0AWzEykrKFbczw5P7I^}iX&QMaS^lseV0DLXx&&WSA}Bq-~3|5E>^8c
zwB#4d4ivo9U{9_a>-MM~XUiYd``)skSZ&LzF2qo;g~jUaye|a@eYvPu9q2)Gd4Uzt
z))y-u0lTl|V8d+_&wlAwy2saHLov2XG~c;8g+m*Q;c97c2o3-@6|4O`)<-mjifMFg
zV=Eugx72QP+5t?o<Tj@zL82YD6-UL@36N-qZN&&`={&KRnt40h_^96T@$JQma7JJf
zw^**-Afd9o7;886I!N^T_To%WVX4#W+l#X|^Ij(b+3VYjd;H8ANhe^%)ayrz?ce`a
zkNF-s;u=fcexz9D%prx6j}(`QdomzV@{wZPlMyA;Og&QE{66kz@D$}lIBtu3tsiL}
zEGC6h#rDqM>-C<8Pr1d=Ve+YBc|QnJDCShLyo3UhYvHs`6yrrPr;5wPT{=9K#hfax
z=xP0imjX|Du9z)(LVxJtb8aDY&~~m^<|>PMmg!uv%vFL!A?J#bs}zMGbOG7yURf6k
zT&OPRim$rI8btv`F|CaK?7#j|FZI^-E0GfgT$IwUL{1cts7k+*%iT*!;C?0O-rW>(
z7E|+%wAcQ(zE^o@q>DipghrOgsRAKjj4Y8;1tc&=mSCy~ODQEhvZUfxX(^?I$<mP}
znOpc>p<=qZFox+*>GyXY<Ca0$-!X0(l>Hr3A{Tb3po}pkSlFl2`8}@P%`7Q;*Pi&4
zUg-_aEI|bRPncgq1AG?S^sL^ydRB>CI>7|gtP+{@0|}^EB}n@5b)|%cP$T=l=k)Pa
zjjj$2>BbUM_%+Btr?CX5_t+w!7*uCI>;6~0bM1Vm0$`#7^GoEI0SScpC1G*80}=@H
zOAyG>J%bXW7P4i3)jQNKbP>oSEp!oh2vH(O9aKoC1f#AiN5Gg`%&MQ)Z>U@BBGBr#
z*hQddcyUQsIQkMkq!yQ8V(y^9UqS}2wC6mpKj`Va(#4=tgOyH4KnNHsOJqO_5>~9F
zdW@&jonS=!tfXj`-Q#ciIJN0#)Dh&ng795?N|Y~4RJv)SgBAz-#IwEs)Svd$?=3+l
zjC_}Ph8Epdg2aN$K{@{}Q6IXDx4%R=2t3?l7b<Xtl66^!I_;|xgdZ*kxL=nb(sVh%
zJy4<+*IO;n20<DzhfA2Jx8Cyc!zGGHK!XdU!zDox0f2<k;Sw1EfW!ztTp}X?BKd-O
zxI{((l0ysT;SxjueW<mAG#-wZ*u#3`5UT#TGt$83d{e|8AW_uu5*fjOL{Y~}BLCo%
ziAb?uIbIUI`$`s9y7&KRmy426=~E?0*;nOy-g8H;ecLvja*sXt^wYhbeC%(z$Nv0y
zuN({Y)pIqF5z!?yV8p2snZySPyi+Ae;!hN&V;#9rVn5thukh4ga7Ic{q49db87UwE
za-l@-5<mjvLJ1cC5-bBC4FbvGrW-|qM2o6iD9Jy9h2S!am-XA1Jk|h;h=Y`q9~@Mg
zr_O7+9?v}cgnjV^{h!`iu*8l40<dCmP|iD$uwrm9ES3b2uwrl!O9E|0gEZt{W(x;k
zEBdmFKqLNT7lB6n%fWDS?$4kCgqMRj@ft^G(?PgMZCnr+N^T#hCzN{pbPORcIW8!@
zB;)`yE+{7sNWhE>V&YK54iXXjxL|sEP(<v+;1T=ypp4jwBO>+*L6KJES|Vbf5G-`&
z?N~3x(B%_?T_2Qf%QaEn#Gs6_r4-t7Vz9vTsSX%yo*3-<t1A_;2E6){BH^)L4HkHk
z&r!s{d^Om${y#Lak$NpCV|`g9lHQYkVg-`klY)htuPhQt@5w=tXLs<C^qw4S@*hPa
z={-5vRcv)7{I$q>Pq`9b>?NjN*@|MEO$(~Oa>g^N(_p8E=owGv2DkroRJ<W5?`j75
z`C~&c?F=MZff{Hay@K7T4-RfYuxN?>{7^lt#1{m8Ve5UwSU!HNy)dZc3JchYxL(ed
z4AZA)zz}C2c#NJ}7{si2giB+LEMosVT>ou$QBWo%;U6Hgh-7vNNRT%Bez?9nV+Upa
z4ad;LB_V8NP%Nxl%+8O{yW|$TK$O{9Ofsj)W{kL1L0rPT{}ugdCAcbx)0~H(%a8b0
zvmK-KN3yGf@**gh&|OW#ekK{g5Ar@>_m9>avL6Ixf)7jxeLzCJg%HR!EH_5)d+i#`
zS(-r5Bum$jPyj|CceXBA^hwZT`7N)H&Q{k2ksN&jW$=X8dbV?n{-@0PpiGW}3H9|s
zoKyGYGSJw_9%uTk*^N$PAY}!ajX{JUFOVHPXSJDaVtT*q=Ag`uf(fC`K^#wgDTL5u
z+t|}%^{?{Voc=-L2}0Yb$)?k}DDG}t2o{|P+5a<6FX+(=LEK_oO>Q8Bg+uEbQeL#@
zOxABy>hV+fQapf#eM6>rl>;P-=^H8u@_7#uz0fxldNCyCJuxsokz5X`wR}cM4$OEV
zR9ST;3qUV~YOc554RZsq0RAha%nqrk#;}b`PwyD@pdBk{S@~B;<_ki6S@~B;<_kc=
zihqS-vtb3j%s>pXLYo;<XNAOlC&@#hZ{VT|_t27s`%VoZy6;4*O^8}`Zb<2Y)rK|9
z);o0tAvOkh1S95#LSh*O39z{#xr~B@3z-{|%P5h28J)}WbM$C%ZU`&q&v*gQLbNqU
zzqxLHNIKgPUwh_<q_YKylIDk`vjs^yAvoK`qOIWgcG@4#(cd;6-sxh{%CXbMpp|21
zNQSi`zH;mg$*>kAtlb%sVJ(p&tlb$xSbI<m3BVn&_bt-@sMH;BOQ8V#KuCu9As$a1
z2$hPRDo9v*AcUPN4k*x=kUbO<cL6|fO3ZkA2Kx?$<Xr%e&^#1!?gE4;sy-g#cLCVu
zw{@-VxN8E%*2mq7Qfz%ZByTi85kSX7xC(F^<|p!>r$a@(S@a$K*3jvYJdH*c5t)Y&
zd-5H<Dtjg*Pp-g4=bs57EWZ)c4w*b`NJ8xGck~|Fb0K+l0xpEkQD+DtP!~chvsCZV
z^g>AbMWo?48}sfKjs%k~hLnm_ZLSCVcA}nSQ<mzjvtaQo42q(8dXahuV+15R_=gZX
zvQ)n*`$I^c5P=J!A41sO2vD@br4YM&nSN{TQb;;FR2f2-LWqiIM4=JJBnTJnv6n5=
zUpIp@!^qU!ik=Bm12nLw*66oaHH76X0~0lF2%93n1_`qp!hm{!tKi`rc6g2ctLizf
z3Qf#8VN>K{!hB-R2_qLX0!|6Vz?iq#vmfdsYu^gX!44)Ye=95pJ4ish6_x`PBuafN
zjHbAoBY;}Ky06vmtzHlo%?ntX9}B|e{31M&BoxL4aPr%r(R_>9>a}{`y2Wm(d@~W2
zffZx`u{bQRl7a-p;xGp8P>K=5Wa4uB#dUhnQ@7m3pwMc$i$S5)@^DzB2A~6s<zcvX
zewQ&!qkomXc|F3++Ep$FO@mcozgUPN1dLVTCRg+D3?wjCh1+%D-Y877U=3@rQLn37
z147EsfL{}qSwgU(vL=ie`&n)|CiZ$Za-;s&>h*3n(aoXtZa2}*q4m^FOGJYq(%H;9
zZPMSV+w2-j7l$^x-9(Gq=CHgc8Ri#<HdBM~OPA21i|;ib>2K71;zH2Hp-)^0x;XTS
z+tYM$=#y}|f;)>aT^!mG=FWoEY}U1!9bxG!@Cb@K!qQiOgyN2{<14~+Z)kT|+#3Rc
z-rwz-K=+1ryC%@Rq1|EWEFcV|-C;NjenSL_?8D)r3t@Ze7Tget9S-|~{KXC=jgfi@
zE14@_>}Uoqz`*A7#Rn3j{Rqt$x(W;$PmhJ!L)-L*+%bezJbnNdQpc$6cM2(xr^2lH
zC;G13sjx^rLYHRFsW7(a*kKSB>^vK0O+M9!WY4--<TlO{7DY{d8u#bJ?4wWh&bjkp
z8GnHbq4Qy^Q)lSi736MTj1-NqtG4T>J)svPcz5M%Dgt>?<W5+d&-8=Yei22y90Mkl
z`$dqqnIVKwr-AI6&-Izvff4C9kr;*0zzF>2W+4P}2)p#T{&99lL<T-cViGrk*|A;-
zp+>{m@tyj{-0+BWamZ6bXm|uJ?i8I~MIzd~2*T1YcIhYe(7Xs<3z!CFHA1#7WPA4O
zuiv>aBHb65Fm7Q)UQ7as5*9{qF^Lj6ATco(M#{SK7=%cK2q<k~B+-Sx?h&E>S{z|p
zPV4PEg21?0>|&FjTO5(smhlwWi>b!%Ct+t4FVseg&PD9bU+eD%!bc)T#`=&9jgq0q
zBP?`EUwhB-h`5+UT%a9~<V0o<B+!mWa2!jPf`p~VBdzb|+k7Gim`UPP-G%d70)_Ue
zh|(=}3!5}wyN><tw4S~b3=u5hF@G-G0VL2*Iqd)v=%<`^AX2o$DW@Hx)KO=7J6zZP
ztcyyeo^@IPLO?xBEijNy1Y!~G$4F71s3&znVI$7zW%e)5=zsFm{}?d}2$WSdMlEp(
zM)Nv?Li2(YCW8d{C8z5^0{oI=GDw(w$uXHoVe%z1S%5>mcU0*r!Kv>+8rE&ppfTPc
zy`wT8021iEqsRxyr$Fx=E$zYw2A)dv-qEto)=_$+C?3%UL~+zV<edI(bU@T-YW1cF
zDUK>>!=lP7_K@@XB~LwmioG))z{d}Z`bD-AB+MHYZ6^8`B+4Ha#T!|)cLs^*by)Q3
zSEAy;kr)WZpfWrv?hkPp5uc5S;;z=cyl@DNj^dr`pXKiE_0)5{o?+HS{gx`QM4QHW
ztw%@Y(hL%%j*h}t&=`tSCo|UPqW)k#b5*F1SyTo9kbw$|!l6+k$B7yn74w-WG%`r1
zG+L6!M&(OIc*=#bif{3w1xqoJqebsxc)aJ&b^Cp<C!g*1*kir^^6aBeKGusJJE|M@
zZ@<^)`$F@gm^pOaPAwHvys2W0u3G4n0wzjX7?ndCBuZHr#T37vtKi{cc0e&6s9x-<
z@R{p0L#dd#)C~MGW+}D9Qud_Rm{h&g)uDD+>a+u7P|Q+l2cBasC2}RZUNy$IU+L;l
z1FUo!05T*LMFVW0`B4_p)<%oYqXA|p?2&&PF}uQN%=3iTMvatsO}UIJyg4dfQwD+7
z-Ryva1o-BtO!|TZ_~s~*zK3Zbmcd+YXH@wjs-`|y*;8Z9>+O@e(Nd`gQ}ho+fUwgs
z4<rzFl6f=+L1GN<j8=SsF-W;ZV$cps-4&JlILSe4?TX5MoMZuLR}}lW+qoqW*h{0b
z3yn(V{mO{3xt7tk8ceZ;EaUOs-l+T<07wArr4E@)2V`YL9<+mgW2)zogU*Zs7c=T$
zRAw_kqBaMkX|e49NlH-!BQ&EyVn!c~HWfKVBE@_<7;Sc!wT$AsGFmE+M(uF1(b-dX
z)GdY%F^)$4;)XS(P|VS2;W~*+LE_P9U1uJ!lu?X$A}V$_AfS07DkBz<&^!^95erCY
zo`^aTOBscR=b}7f=?((MoO5lU#M`;343F^?Navz5VgU)Hb5TSr4`5g&BHG1h(Lh!f
zGJYAl7{&U?!`B3jrQUXZ$OwAw=pB=RBe;O-9g~40NI><D$>c0Z@`JI+HGBjR$(Nnp
zv1ljj2sK)QX2k&ei?H#e=f(js>FmHoWd_7#*MKCcn0z}KBnlZ2gR`4M`<f(P`-m02
z9rL7K^X10$#|`Skf7ML8F>3Tv!ee5%r_Db_k)#TYi}A_O9t2usTucsSkSJkXOil)n
zC}CU-lL0G{swT<G$#%TVc*#>W*;OL5CdcFg4k0K_j-f-ynI_2#Ok*1o#xLroITZsF
z6`K~5Z`XhX!n9akY&t*!VOp$3E9(tWEXY~*!%1V7r*4*uLF0B-Ox_Dh@^L#W781vi
zAW11!k+n9F&r8y%Y-Bg3jm>q9E(DFqM%N4)lZ`R?k`Gh>(HQG^4Ih(98k6&5B8Yyn
z+|X*~$K;U2BPh;~$sq|6iu0)jeiUV+lqE4SB$IqdE^$quA-N<bha{c?X-P~DNsvHV
z62p-E6?!-o(U!%EUSNAFj0c0uVt5txYE&&n9lC<uoH5$AUEy>Jm;hQ4lM6FQ0Ii5&
zVW!t_Q`Fw?#qh<0R_qJY$gp)8BT)^8@Mw6<pPS;PLy%B@FNOmp%J4xOUHSnFWsQca
z4_qC>{2(R|!XN{k4`PV2apw*ypw_YjS))_kTBq({qV8**x`PD5+L+u1fh3(6JkQ6X
zRP^8`_N$z+t!h(D-kwQuH?k?F3kL`iI-6q1q0yy{6m{7a_UpXSrEZH`D(y74xTR9x
zZHdV@-k<`6Eipvp$3>~=yHDAUym7MbQx}3Znx8sDFU33U(^yEvoFD=5X{=>y>x6*7
zPID*ID~(fiJ6#CMA@7X&ohGJ@=gye;mJtl6jpxo7-UH`8HAM-qeRiiNMi<Yo_PH4J
z4$D5rJwON;`(o)f+@*p9#=cnljt)r}u}-(pTjD6e5Rb3vDF+eusr%WMrbgS&``rRe
z6tF)g-=j+@v`^h1lkd@iL;?F_ct3M6P16+ZQxC`NZq1A#p1Q*>2<=o4yX{Ro)x$CQ
z(G@5G<Z$e&7S=T!13T5DF=jP4uB|>Alh;yGe3N=KCNl~kp>vc*h8SDeqn?Pdr<xlb
z>rS}E(tCs_V)8x0ltR1H6S1s#fe$1gPSD(*N$(=2=sm)|_WtHZOSN;~xb(l^0;6wS
z`d^U1=o?Rq4|aeAM&EeTtE|}uW@kF0jf&%h^R_CZl^Put$BHqI`ag~Nsj;{+k-gN$
z7+a5DVwQmqI2M=hvVa5}i{o7uiW@*8Zea1~#JI@35`*FfZERef5Eq$O$%EdwxXipt
z7Ba8n<CJ;bKv7JZ=H`sJa$9PdJ*BPDQ>h2xSV41rMqC~%LK0{*;&SBziBU5n9uYTj
zh~%-$jCfRBVvrm-gc<R+A}uXh9Hw(mYocfaNHoOpdf`w{?%qH2Vo!81M%95KqWUyn
z4;td~wgyPp)DSNd*&mPqYlvfi+Xn4i9?{;67tLqabu_LHz8N<H{OUwGTG`jg{?^fW
z__vKt<-i0`V_YV;K?0~Tj^s84Gaym9#(1orZ%>Fs<<R4e@wm7>Az57M7yq;pXv%Uj
z?Jag)CnHt$mRk-r;#+a)Z6O1dx8l;<mcw8A=CMAVjO**?IaLM|(_&s+I)0Eqm=~94
zq9B1VFODoHor!|PndrQ@b0$i(Fm+yBo{35p&P3<M=}hz^N=V=`(z1BbOQoLFN^kDQ
zUQa$@Uw@6U$`e`^$0-y;$N2b7pXDrgoiQ%EJT7yrV4}O0Q|Tv#5Nun))?8<t&a8;b
zo7cFF1ECdh%)(Y22-HgU+4V+MW@TL7s>V$k;>Pj*b)L(hQtz@RwMJ$3-MCC~;2I2M
z-i>3sOUK`^2!8%O`**blUQ2o}uJB|YaUu0y9H(j{;A}vn_14(~>x_|}x^;2+Wejj3
zwJt8di~$k_u8YerV-Sgotc&Bz7&mYX^!0l7%Pz)^ne}m*mcb<zK&+2r0Vr@8IPVSY
z?Jh=>?1s2ZxZsirWH!)%Jb=qEFb3mjyZu8K;~OQj-9@60XKW{=?pz2Sb_Y|t8$B{R
z;_|4eSTP~9BaWk{zi}D3(9hWKyBq(T{S32(hAGf3$b3eAW+NsuX!yu4ZO@Iy9ZHuk
zT`51Lz9cE3L_YG%IKEOx9|eI9RsG9&i|ee(0t8O;NZcOwGb68LkGRbo0Lqbgv*!HL
ze=)hmZ{zHvn~g5{Z{zYSCE!Bn+c;iJq&EYK6>MgXq6^rTo3SP7-qUE21?lt~C4!C;
zAic4Gn_$S$#o6GV#_ic-ae1*GTnHVDW5uLoTd{(>e#hhNTu-BO_PC2gx0R0*60+A2
z!s|&V;_TjAjC*n?T%<6BP7o4eVv@oeOBdtznp=!FmF&g1{Jsm=5W5&hgejX8Z!z_=
zN8OGl&Gsw3-0)FI^(#e_QVa<&yx25|DR&y1bAw8ima?H^5E@ikRb%z1PxHV*zg$|x
z*vUJMezBKJadLVeRQY|QVWmI$G>^D&1h)7z4@f`_E5%@-cSrbrqv7o0T}Dl2c&U8x
z4ot`lFU5;@X)Xh51iSfeqarh+RGy>Y3K4NjagNf2%U~qD!d|%BXqI`URHg%QNeD8p
zlp-C7YepywlWrtibGOkUGqO|;b1)$@vJ}G{H#s4LDL0Cx?lG>;jB;^k#*HEzQ5L4u
zX!eJDP}b;DnY}IHQ)+Z6Hu?De1aL5=#<1D<7;SQ6+`7}08bfve1lK4L1#3%7aRU9r
zJ;pX8xU|$LrFRT8{u!X<Z11m)TdJ3rYTS<#6S~VwW6h~Yh(v{#m$tjvS_xMH8Y6$T
z{mb7N?|G_LmufsWMO-MYE-mHnCld*!)uo+&PA_YN#KSf0riYE5HET*Wek@5$;+DpF
z&l3riHKiSHwdP}r!fj}qN{c?QS3GRA^@KN-;_Eo?mH>;tpZRU6tvqVnptt|FRO1(T
zhz+!FOG|j?6A83$OEEz|Z_TyH>N4f7)cV%^tD5%UKNv4r_VQ<pJ50OXKaD>sx2!Ic
zU$w;IL6s?!U$q2Dl_~3Z2OXrV6%p;jvZC+H_(8f_0o)JEjB>FXtf0-q`ZB&7YzG2e
zyuM6^1|T83zD({0K>~Gs8Fqtk=4u5s>qfS)k5SoXqpLy-;l?tVMS=`eHkKia)Ic{6
zE6{-2=Vi(lw%ONc;jPC{5dh!;2F~YY^0Q_j0rPoTQY0Zj0_O8FEHxAwfkbHZd0Eph
z%0ya^7$Oa^vrMM-Bnz#ws|;zqnechg1ImFiynj1R&E44J&b#fm`WacJBUmC9f&hv=
z;95^RkOO4>4BDhuV3KIxmMJI8)YNE&4c}l?vBst5AeNbLJkD~146Pnd9VpsMep@CZ
z0;mG&+cHE1q6YMS$+u;tCs6}BR>yN5SZPPg)DvYQxRX5S9V?T;on#@nJ6`5|Bd~&|
z<(V?~8-X3bL1Tg??xBN(DQC*$?i3^-&y+d4(+X<&i)G@72Lv3!MYmgMcY3i*1}S(7
zq>E*8cM1|n7t63a<yZVN$h9VlP9^NB!Nyp%>97Q50NwG+;0nyBgfcdvS_|opUq;^X
zBc6R|n9<(TX>>x~PZrP6ZDSI6|Aq2pf`fus0&mTHK^>8yh<Z{2H>>U&Vf@-tkDsE|
z@c;%+O2~K*B=jaF<YfksX!S{n*z|;Gbz<<4dU8UYmJqEjdC;4ZkgYCRX!WTHYW44g
z4RBEn38gWi+E<S>p7+#)aIBz7(2$TJb%sxZh6F-t>U)r|q9GA!yljOCs<l}Ob?#*=
zoK*SjgcjoADe1vj7&a#X$46J=Bn$obW<m?Jq<{rHG~PVccC^u?eqKUOFEG)M^AfTj
zLBha!33+E0Bv9ui5P?xx3=-kYyhQ#sSqP6cxkTYstAdvSYC%G|ITg%x|MQdhTFA4x
zXP<cXzj}$uoKd_OL<<tXzFa!(^B1_K(=1z%ke@VyG)I${q(P$e1&Q*TWa<3&AD5{3
znU&(D1AP%|GsY-?Xpvh(I)h%6kY~^to)=h@2#cH7Ac3$bfq+)jkgjMfO5|>oWzgg!
z8y6+=-K|c%3{Z>NtTD#54=;Ahpv=Kyw+xzBixct!VTRAE#R){Hq72-k!qetXEBa&^
zixVww<>z#0X!P7t)}0v}A6n`bLQ`(3+gLQ^mL}wsg9<9LG=XJO6hc?1mnJHIE-T`E
zRdi{h$?aB#R|Jdga`xm{Blpm9w+y=GvD__#k`K!h@_Qc{o_tuIz_KsOz$cIJwBS^P
zfA9!aEKgM4N-t)j9uQc`j*K;`>sGpDP;z2rLhhX*gECeo(hewPA66z18_z>%1qcMk
ztJwYHj0F#^av|uLe3fe^r5{!$BI0--Du7s(Ks+eSG-1W61TO50sbR|5vMSN?9)9AV
zq5Q-e_QZIju5OK6h6OX%BxH&MGALtBqUp5~l(G|R61APJ6?E%8L!tLp`^)jhyUN2`
zT@3mZ$JT^QH9!a$TNCn=MIeE(HBl|DA%KLPTN7;_mUjAKCq<)M6Kx-|4$>-_p+on5
zw)ZvTkKRZ2xusA-V_!n<ks*Xq_9f(3fIy;@eF=DV(HeMh2xQ?-SxP{bvM*72hqX;O
zFvRu;6ZXa_#(kdpgKjaD^EjCBi@kS-=R6K3G9sx262%-$$fOcT6mu}q>9@jFgXA}}
z4koU76zdw^dlwwK;CwLg(8D~DnxXx|;lvf68hYZ-Z1=ZDF?(~Gp|!^ov2H;QH9VY<
z>lR29eVA&vQ`nEK#L0xxB(*_d@6Itg+L`G_-tz!hjvESM_?&cy4}E><q&t)7>q{pS
zSiC4k%0{#^iJ}Qf5hG<Gc_xAUD$kf_DMmV<5E*k2Kt1pHdXSJkpO7&UNT8liAV&I{
zLXIps+CKL0XBdA_s{176X#u#zP8#CdYapT2CmD@dyD5>DB^N%>{$ZxE*Hb;vRU)i`
zt`a%zfuuA|lmv2w?Vn{dRq940WgBF9igiR%I)0GA7?F&KBsoY@N+NitJ7rng1dK|G
zQx^~z2cwd*GeAOfR8n>ZNNA2qIzdF1)|c@~9z;9@0zl(k8^~>rcWofIIX)>p8iau~
zJ}LVl7tvl#7QH9?AqUA<lQ_5J{g9)6n9TOt#zZ!EuAx;;PRbP*ParutDSH7VFefKv
zq?)6Ko67z@7m?~zSB3guYEnk3kb%n7Bx1dbG`eyWsm@F)Z`vIjjlX;9@l%W{JV0$`
zI<)}_n3+krn1KY$%p?{wTI)e#t)H1Je>3UjX;)%E;Ekjj=M$4?G5s5o2vg}TSINRl
z7dXF2%J*Tfz08I7>?A&-@E@Y+sX0mYUJ<6|V1l+FsVqtUf5X&2*5iSQQXmG)7bInb
z3KGx@k}^UC3CkBGOP9cMicpEcW2J>jb#YR}N|Fb?MM)VeNfu%yJ4vz9cJl5y3Y?cG
zm3NaW(-#=q>harYO&Vp(lhUa{5H>AOmWfCNB(Rq!W!w)EHZ4y!eHS*7lP89V`&T4o
z+%H*ZyOq?SYw3<bKBBEj7Hv;@Qg3^3bo$Jn*@Fv><&iZ>yqk9i%*#_axi+b6Vl5XL
zKd;9x(L&(Enzcz8O@f3qYm+jX1PN=_CS#jq3lW32(7L3$QMQoeL2td&LXw3R+Q3_g
zZm#Arh_uZ~<x_MSJGaQVp&o=|1dY?pNf}H+5@4H?GMEGjBQ_@^pI$aX29sNo>L-_t
zaDvH?lQNhjJrPW9P0C<Wvd|sdk{VJw<P{4M?XzUj9yuEeFyynOkrlJCK(lcd&Bm!!
zyBur5gwQT$B7%gqyJ#ZPJ2VBFE4$g;#YU^1yB)s<CUKMeg&-fvKxH?zGFea=(e@>a
zPD%?ZA-ON<_~lBnV88GOE0!2q^?t_;Jb~nX#|)6b-0%2<N;2c?Bs;alD0KYV)ge2+
zb{qnPpz}331ityJB!_S$shs%#nN^S1<0-rX9*a%`39KW|+yV)#BhK6ciB3C`EIlDR
zjTn67e4A8{%TAL#=pA)Nj$~ov9OEO0+NViGJDn`5_)a!Z6BK*;vcqgb4RkKaJWGu!
z)#n`Jz=hN~r*S}{kaN^H$j+!u$npzGwt1;>b<G7FK=OD3T+Y_TYfm7db0LYd3d%F9
zO(R;rRMD$;%`#(?C)h8Avt~MGY)a)1V1X6J_0<D#EXJY01k`|(eBm7=pa!JS-{Z*f
zHl^~1+Rv>p(w^F(I3AKpbP_%^C9ifuh@?_YS~^dGF*Jpb_R@TAO6%uvwqd1lSM6{Y
zfqH0oO0I;E0mAT<TnRw}VR#BFVHb`7Y9xE$U87s=NEd;&2qRqt@}DD9^5C#3_n#wE
zh-hgoZAxqD7?%IYNO!<*7(XT@mr{^W9FvkuDM%DHCgm)pP07xQDZZ4l?E8k+Wuj{V
zt)vrO3uq;sn35|g6ah3bg_U$Uy>ZtpqRmegeU-8wf8SWDhUTZ>?)W;|jJjnJyZS?8
zYKKKQ2;^-DCcqY@<Pr)JV2e^16`xbLG(&S~%TmgUl$u)0{xa6Q&Aw-?VS4Jpa{#DM
zmZju1B`5%3SxR1m0f{lcELE{0C9c5`gT}nNJSDHeNDlgLc}iY`kt_f$PvII&8*T^$
z-b>-=x-xg~(~q*9>x`CdK|4lJx4xH>C)dq*x4xIca{MsY1=4EtL+UOzVZ7Ot{d&F8
zsR|57nR;|}N*-Z1<2|}Mg(GZw6SEoh=!b0OdZR<thd7{>tww$MVM^ZnfDB6bFa__7
z@8LiN-L;+-HW=5mS)Y<OtigoJ`c%2N!3Gj4>r*)DolU`CGi(aAttn-PJ$M7|JJjQ+
zV;$`Tx2EKJ4LRs-P095dB-(dts&oh1m)2`yaG$a*rEX7&^;+_v_en~w*OCRF@@b0J
z>-O9PI<QVD`BbwUTe!)%x)y|(hs_jzY@L$tD1d}bJ5#0Njb4zz-kCxof#yIn+86Go
zIgqc}?Tmgfp|aZ<{UD*T`|{{-MjOHXDfZMy#-+~t-C}7cxZfH05CX=2XW)Yb#(o<3
zw<80OH%$+wijJh%o12YWLkClMXQ+U*Gv2ktN48ST+=A1mZ&ET>4lc&iH!0-Gk<^3`
zfDfhEty_#j_E1VD%fW@vA@UBC<mRtU9!{|#Ta2c;!?I$;h0tLd@DF14T@}%erHam{
z*p@B0KXfc*B<ajay^5?jkz&_=Y;><X;nWXY)bE5-KaeovL`r_q5+v$(B88kkdFZRi
z#?vXb<YVLNy3;NMdC1c#zj(s{LR=~(A}Nr7IGsWybt8v>spnFx*;b=R-8mP6#_PG1
zyis!%cai5(A(1oz35auK#Vx2`b6k&t%V#sU8a=}oX##AZP_H@F?^22>+l-C1mmFkp
zfqcoSA4nK?$#K3QfqaRY_c;!Mhc7VyC&u%2FQnzbYtAnXzmS&h8zc#(W!Mc82rr~D
z&v%fwYEE4-*k198@t~(_a9U1QaG^9fjjo_QGDs*5PUBdj8`lB#GW*$fqkHYkZn5O^
zUrx&=Y0hKjm(wA!%LYk0Y507)q1T)|#0a)}yKzVD2p548QzKjiau_3A1acT72mvpi
z00FY2*qu9!+q#Z&5h$HID(x4O3^G6%m9A(mYeD{FRJv7b>od^-^wwz_w+(jfFm}}A
zmzcTD70N4(a~qJn$+)x}Vt5LaacOie?OQ;?n~Y00nV1%lHZerJI6f`kI+ZM#HX)7o
zC2z%;Xo0W$q>KKQ_N3}^_tAfPbz|*5H@XBTr}1t~67_3Aqhl)T^SP0(nwpl54NRCa
zH7!>jkT7Lx8Y>S@xS)cE)7je3jf&doPG!JEWu`lo0ZBs6XaEU>=`<QJ@qvKBFoP9#
z8cjOSa1p4fXSfJd%#5_mh(ZMjGtzKmdua#J5((RM(R=L0oyMMUL)y7Y*OIE!nC6KA
z7W@JcXrogpJOW^&Qz?)DY@|w!A}`;Pid$@V|H2sKsb1_VQ9Tx?<(?EmP+FWu2ukj>
zCDr4dwAh}5K+C_AmN5lLXugw{F$G9yzLR!hik3van-(#}9eWL}^Se$%;1L?)U8f;H
z0_feej442JO}N$pIvS!C)|hnB5PRfaqrW%2HH~jH^N^wywZx~QCE9}k<fl%pKmzhp
zrzt=J@>6OGeoeR)S^hb@upifiKTpe>tY8v1EpM`dgwE$_++<xwgS-_r#UA#-SH_A*
z_Bb^G6UFXvY621vd(!evKahaflZK<G$qy2X)1I{aUn?TTK73Ca|7(S-=~M_5zDl#N
zzBZ24edU%y*ABl*%d3kJLMdOR<=<L?<VyHkD;y&N0v_RDnuQM<H+MehLQp(-FfCJT
z5CX)(bcX-C2k8LfU>bKAKBl44ifVN#ZL@>MR!`?sE(pbfr`+0-S2&fH*Q%fdkW*<~
zyuiPz5C}^AK5frDWURn{bh#kp6ux&s$SHj9%p)iP<a?S&vOy3R^kvhJ7{_b-mP^0V
zibn)}%jLaZkbvl0UJ%(%kbvl0-mX0#!mX&$`?1a6A|mKlF2^pIQ0Z4L$1X^y^ecD9
zZYzoi2AA`(+Z_a2bg)}E#RY@Q<*I<EKpI>w2QNq<4KByv?TNA58pl)RMYs-l%(yu^
ztQ?oaU!b+3HHNM>svMtPw~yg9<$C-S9up4$KFR?H3Gh+n@`esbfR8H2kpg*4knotJ
z%5&q&y;cmFPhwz1(FaIIm#bsTeLQ1xnG4-9<%q#z$oO1lA_`-{atgz)<A$NUiR`8m
zMs4jx*C<-%Czi_vsWqP`6U*fnbwC1mVmX$yUvUInJetH-oG^Y<KgmU)0X5037EO~$
z<#Hit&8Nwvax4UN@dzX?9!)B5GE97ofoQA)Fkw=8)5j5Lnp}i04G{a?%O1Mx0v^nm
zTCTKBb;#ZMbg$p_dYVl*X<S<imeaO0i>8*#Xa({xVrqG+ice0ET>t7e{0k<nX%@YX
z7k!Kyy1wor(7O7%+YmH~UN4s`GgN@^dO6lrdT$B_;VYXB<;q<4$|>Wcdi-+ipjp)5
zHU`b2hI0A+ZD;|dp&YTf=wo^@zM;J3+{=AThdR8EXO*jOUhZSbh3;&(k0ld*JSW8a
zxUVn_?J%DmKW)5NJKwd6rsaIsDw>w_onhUYPs{n`I0K?fuC3`h#Uj>t#^_SJ$VH$y
zeUaNbG%FXCheT2zDzI%)IZk*U;|Q3QZ?jfsjb3$cy9jiC^LDx1aku7^^zHH{;v4`Z
z5Z*4w-v_NG|I(T!=?C`4v&I@v-3KlP-5>qH#h~f=LAiV(6FR{7pd2q`_Mr@RYdW9V
zY;QSlc$LnZT@1QDy185)>_G?^o6F^wYCr;Gb9s5jVhP0lcniOO1=gp?MWZwj>0jY9
z>4eIMH|3FIs8GtpC$b;bO|2dz|62xnh}C331(w+Wmqh^sE5v6O@sJiGkO3N*L_&68
z1r{$M3u;h>d>v4{#SW6c)DBr%r3O{-OcvPyOJBNN=v{osgXXtE=qZF>s=&@s0F#@m
zkS{jk9dZ}}lAjkqmhR;Yu0ZPl2l~cQRYZHOqG*BL!7%^N8+@$-!4_>;tEkeG*-F3J
zq0{6F8Ek<GsL2&F*a8WwCR2TA=T}9(U>fR<onQCop8hM_=r_w)_kbC%0$1!qA;X0(
zBaq9PMhNthf0YQf`UT9osu`{d;m&XirKXrcD!4xe6;N-mV*#^k)f=t~d4xAy74isg
zkP40YD)I=k*{_SuE>*K#6>6o~6{eWlkb%nVisBOfaeylFdUM%_#pcabb6pjh?{h2U
zjvq2mnOlJ!|8IFId~Vj2n2%pQ-&Nt0u|mdZRbn#I;F)BhFRCNjnu?;c8GB2KS>X$>
zsX(l_3OB&iYU+(M8T(SyT-~z$nT%Zgz=j29GD-1%4M<pUCWCc*6+XnF)<m>E*`h@`
zPimpc-ulsq+WszPE2U|lEZ@X<)f(Kb=$BOnWmWo&s}5RxKZ$tkSKZ97+xO4nw16&B
zh({PX1F~wjD>x`{AaSPnVP*}PImLeN26LLPYD!l2Ik>QLN>=tcNGMIoqBn3+4LW!@
zo%OictoiNqtW5KPN!+ZwnGX^w)3dmlPvI9x_?+q4koevbk^JCrdNzC=KRA>eIyju3
z?Q{)4l&_(&HIsdMvw3aROxH9jeP&iB=^=x1W@a(zx^dG$&0@7Z&F*!xveN0-@Q`;_
zRz?jVfiNo@5!*tLq?5%OO7G>uRE)JowzQ`?v$oNNpb)MxD?>QQ0HQIQ5oiA(0nwPn
zTc^)*1Pr|eZ1OGUUuze*2(+tP;3CjST#(JQmF+_#aY432NB$kL8VcWRcK5Aj=UUrE
zpjE<lt3d<P&dPWfDnPKa;$sS^1y+f-*@j!qpVhwYBG5g6w_OBUCEm`;oG4U)@OBoj
z(A>*wfgW4Netw(zi@Iel0{xBXG8chDxn)_I6RqK^#Ih{@K4?81Y}e2#vCiIin|Zsp
zZk>xkLEJhQgI0-kt`)ROtRpK1(MnT8tHc)jPj{MwJ#|}L3|b|&xEQobY;o<NRbmU-
zF^`V%Yv>q%m)-7ebAfWhE*FFTy=a$<LC5&JvJr9B0y@ChmBnSyL1I|YA$?Y9m+Hoj
z-)E*+_xsHMsslrKpBjZ;j^F2k@zeTjL<Bf^3b1|ItK0Io9%|^C?fxt~a-Vr^xBV^z
zoy70Y%2z}n1bg;p6C$z(35fk!tezAs*3hB)fvj>}s<kku_b<$fIxrk_C}um5mGKs&
zfps98YA;6{9jzb8cDmO3HOIoq`r$15{1@hL>JGaQbew+Jtq~okAI?TZ8lpy_<MhMX
zR#p7l5;b&%_h^<qd%t;4-BA|;UkL&G^2DP*GCG=-dlu*b;%FAHg3wx2!!P(|nfgn!
zL){4%A`FNVE(HB6(TS`K%Ao^@6IuMF68(8z4c-1don?RhrP;3Tv<pH1N_5(Vhydbr
zR^EPr4j@iva|P=u4uPA&=d<kVUz$(Xop&LkfH?0$L;-Q$tw<CQ=cyvSI0UW@f1hQe
zA25Gc_q_`dLyvr)m6_BUB?gG^v*J1`ERO-=`)o}c>mCk)|4+D-W!F4t-dlUgg^0t7
zORg1hKwNSw5(mU3stBc)Y83q6LSOdbgXV2@eRG$GMJW*a<}P<gDG>VRWcUjeAoR`Q
zFmSjS@?{aVKfCK!<|}pmU5GM3^mif30MS1uw-Yr=86f)S3iy_Vn0X1LyX@Sr%{OpM
z!No`bV?<8Icr{7_7$b6F@j4(#V2sG&vNlgK)+l&me+<(eHaB%0<3iw+OdXSxcW@vB
zh%q_&x(`S|jLG43pQYHFp)v3(-K?B4$BsQ>UhjJpKb?7!f+e%u+N1z8D<?OUPy@`Y
z95$4+9{`E{z^q)8IXRIfBZk-=&CcN~;gqzgQPNlmay)6%9t4bR%*nMMB+wgka^njU
z=#4pSe7_LQU5+=f*^j-<J)IZ22A0FXg|30+fLQ1nSPqDVWZ-;yCG_fu_Fk^&BRl<j
zbDk1<FNZT${%=-S(<;B3ees0Zzizby4JNExos%OHB%oL4N=3p1B%oL4kfa?&(fZZ2
z>~69r|IsW}x@>YWC^5ImF%Lo{m6NaZfds~;9J0_CD7tAA(RSsE_UG&~|7AX}1b5{S
z)Zk-hY8x_d5BuLgo4>8vlauErU;=ATu3Y3^K>}+}4m&)G)!L9bUoz`2=Hp$ybgTgr
z)_mz$1CoSta-jzagfDYg=m%4huPx3Eaz)2;Y|dZIL9v55BnTb^a$7RyP)>=ZZsY$_
z{n%4x=Nix=8pcy#9?Hq^10*mH<q&@Gf4Oc;W*y71%}<%1Rv&Yf$dF?>`TYP0LFrfy
z*{z3RN4to2DpxdwZF|~$sPq(>L5`>$%+Su}l#4kv^(Z&w+7V`$J^hS%Lp|8S8VCXS
ztYZyG0G}mmXuN{Ncs-koUBq~$Ga_POyhgNhIrY1oI3tog=$+5WGa|{t&h<i$k`v@w
z+fl`S%;D3KO>(T=vu1S_2*(Jj-H$nWPz6bV{g}f+6&*daqadyid-+-OXOH#Ci&Ge4
zLZwe$ex4U3RQlxQRZ5TuJ^JLE-@~I;B6+abC*R_39xO@@1&e+1cihP*UOR&5mlxSm
z5E$D1@^a#VL~;G{a^ivHvQEaS9YuVD^CDYX|5sCcaByDw2Ry=v8l0C76C{8J=cRuD
z382AwOh25>`|yFNm-9uV^5O$_v{1dA_a*s;6d!=Xn;v<kx%k5pka!AOyfgz6jWmqv
ze*<=;VQQQatoifijhPX7`LYO@kQtHB7wE+Z$bcHjUV7fVB{woJU(o`SxOvRCNf_Zi
zeDh^&zGx~t{k-{FaBSYkzlH0IkS*ibl>ae%XU65_I~!m^bzB~k1E0f$3{057y8O-j
zWoANNZk)k{%!EAlKA3`#0re_d_&4+M%&W4giAmf%PQ`j~88px&*6Hu&O_@n~dAt_k
zd*4ZUxE6e{7Ak1|DQx23%^Px4TpZf-P9YrppSPm6k7%>=MceEj|8C;12xsTvId~$v
zJym9IUZmt3|6yv?bMtas;t?t_H!n9aAYsegJT@_FD6ni#RkZE>|1j5j>TIXO!Nth2
z^U^7TB&odo&vuZ&u=Duek`?qCDgI=g0^CFOW;eBNor^)?`?|c`EI<et>+<sd!9fCJ
zT^>t4Eg0>I+9<~@2xx9}#w|!_Zgj>iNG|J)+xFCOTjjWI>}P7-x4I_KxZUcETSx+E
zt21sv0%$9Z+ZU*DJ4CcE@<qK1p44eCtNqeQ+0p*ym!9w!c_S~HxdS!xUeV0gfdKek
zr=39pe6Q2aAOXIY+L>S8??AObkXKrzHYxV5f#&U=o?`9A1K5uzmr2z9Kwc)=@s#Vy
zZv=n@>VZ5yOokWd)DG0}hx4p%u=)4Shg}G2_``X52N^<uIGj(5y*5Zd9L{5}eTG)F
z4n&^K+h+!we^u(vx**gCXY(@S3Mqh`&4<Ldk3e!QY_q8MI#3r}ki7>2nirhj0}0Iw
zPVa$)=7qe|dmSi2aY^>x@nNRc`I2h_WhpN?y$4AEU2=L4B!Dha?;&nb)Q%CYUjd)g
zX+PZDRo1USAFiNqq9eLY8(2_=7Sz-~*oyX6igg=dK3NZz@Y@go?7)Kb+aLiuuploO
zfW+c4uuwX*AQlf|@Wo?LK^;;Mi-+Vv@1=rVJR}Q?$KV1j9u&@Yq<$D)Q0`3i$g%2I
z%sU<iA$lE;P}SiD>0m)}Q5oNZ1orTPyvGj`3&Ze2?hbw(kVtWeGrW-hxwTEy8UtfA
z+x3e1Y1L@ArewhAg8X7dM?Mfn7jW7~-^J@l<6tb?Gt#{Gma(o~Gz!KR<Y<Hp5XKhd
zry@X-PN8EbYaC_dIz_aGLeV#vKs|CdKJm<7o_n?zo3a<#o8hC(3re`5fY;f$yXr*q
zXikB<t4<(L_c@N0AW_Dgg7jA)QO2AC=Fv_CW_Cgyv;_rak^Ns|%?Ca8_$m4k51_Z8
zATQ#8gx-RJyodu5{kWh|u?YQ0X(3`zKdK80@*<Appy3u4<V76G0?@(&F5=*YU+6(#
zNdXseD)>d59^=g>RiGUssEL;p<V73^Lw895M@j$1bwMp-W5%0LRxNW?s7;p@WHPQ3
zZ_{N3B;)80D>~84TFKf>FkAd~WkG&76ileBEXc_S61Xc1@{A88hR4c6`e(ADbXyer
z(v^ks9z1R!0dOd8SXsECJKu|UqG|X(TROqKuI_!O_rWBtGb%x%*!K%^%Lo$1zF$B(
zeE^NQPULmguyzy8LA7gK2+G#1aUm#Mv!)Oc86&6wVod=VBg&|CqHN7tc7CE+Q@7Sd
zplr=r7lE=hYYP#vOM(gz))wFpr_yrPiDITL_T#Ub(>-msxNS@cnk@yHy@U{ywiK{}
z^UFt_kf6~%D=51QY{&+q4ZYp=clOmJ^HM#SPRCMu<}=4jKm!P$6=J14!~}`a^;w~8
zxAYRk;9lbMg8GH@5|RhKosO4~EO?1s+)I!z?L?WLeT6GtYy$@^3zm3603=M=SCC;G
zNI>o@I1aTFWqA%1co_E(2wGg+wxnFo0k<tF*K?pC<2VQd=|Dloargw?;X={5f{5d2
ztADs4zjhj>`Fo^5Upu|3DF{3}f+;~+6(2~<kR#+)@Lf=lczCqH?wn@cmOWaKubYDl
zp`!(Hg#<#Nju+TF)6Ab|j~8Sd2QFtLj(dP3!Mc+L)_l78VD@A|282-_MV%}lAjD-9
zAfdje3v9}CAe}DASGU0h(&++DwD9Q+2%#0u7FfyaX2;ywf($>wh0xgo!p}x{Gao)c
zH?Xp3qW$>mW{o#Cuo88rcba2V_d%6P{>m>mHUSs)1Y0x$NMH@BL?h6<;xTH3!K~~J
zvukE>rM!a$CS(RzV%j3n2pLdA*>i80zsL-&l(hqsxRt2gU0eoDFpPckhIvnBSfy;H
z7;k}Lm1w5!Tm~&Lf<4$^_Q;H=l<zdhcms^6#9XCVGe!+Ck}Yd6Z^(?Sl<_E-C~IUT
z;!&(tkinoE%_?S@_hm*`%J>*e$c(N;e2nZ0WH4bF8$QdtEyG+HdZ(F@3??;XFeAsY
z?`D}bnQ@h33=<PF<0|2uab^P&8PW;trrBnP+yu9M=pz9WsC^bu7>{q}O|2}N!zRu)
z7Y3(R;(i--N1VE28hd1pd4Fb_Q(Z8jI*qDJ-^7kn^S{nMnPc9XdEGGqOvt=WCj5iT
zfSSoVziHNIW;)#%=gmKpy0IIVLGw4Too|}mGYw9&;lp&$Y@lYtEnJj^=AX@K=bCrr
zW>?DB*TIC$>`ELje@n5-H4&|`vS=HdGuJ#4ZmdMC!k5Kss4jLTUl!YeKquLi(gA@)
zCG1MMEP{kBb|scY%7b1*HGG@>&s%0~?c0?yr~nfPZ&%8o0wf7l%F8|=f$;YKYwFtL
zt0=Pcz0J*)Tdo2Zgb*P&dOO|K1qpA-`vpkE8J|COX4Dx){ke!Ei0-VqI}?Ew5Ce<`
zD8pkykcS{nK*1}4h&v`aAOQy=U=#!tk`+fMLPS8~ey6IM>wo>7KIe4xc~y0Hbrszk
z)!rNmv<CUFO{l#MNevVP4RP}|6g<$-5Vv#G`%^$@XozFhhgu0IhhS6Uo;M=%g4s=R
z(^-KEp{BU$tN@9NyxK&)Mh@9)m+ZGW@<HLQ<aKEXxhrno+kyuwcE!{52o?}3cEvG*
zrGlA5!Q33zkGueoY&K4&bC7I~n_3A7$>z9UD|6`f_QzGNEC)bS_9xpwJ=gxE^{D6C
zA2+oU%+Rzyj#@c`R>8?dv5W_vw}WXn%3gaSS0&zkE7IPr*QvPw=#Wdk{YLwCBmi`O
z<NFp6y1(&#3kcockZ)-=O)eR|BQED`i<D<~BxT5(9dYvp227CYh~u3{v66u|&%|Zd
zwn$0o8UL1Y)l{J~{w)DQ#hJJnWdcIQnK(w7Z_!9A7chK2Zv7NbRBVro3|8P+cZN6v
z!Siu5WCn!b`M4P}1EMoLAMg89To0LvpgO|~@laP>519=OazDn+klB#X8D5OjkePg&
zOVKgI{#j=T3Va5V?hFCZlo_^hFd$UUuzd&TQf$nzm4n9vK-(PKqz9lnY0?7_n&#NX
z!GO>-$A*J3yEc>;4OiNMSK!}b@^5dscSmGYuS&anT&Hdxxp#qW9>Cv?gtHdd##%T9
z#S3hcxqwi-z=n7KfIG}1A5_UN-i<t!Rh1MW=T_NfjU@0uq{_yB2lPoQk5YB9ob$ht
zJF^zs<~<>Z5Ls-S6|4avve?GB2n8P^K-Kc{zeUQjtCLqDH&)wbaZd0Mla0Dfrq3hO
zFSB)80l@0Ze5(UOa+z;+Ku9jTWc56<`buMU04Q4NTOClHG*$<Mrj@?c0ikInS^ZvE
zJwF;=V+THg)o<2TAJ`Zf*K3X4-O*OhC#$bBR==_dR$u4e98N*;I^XJmP`r+;E^u@C
zWULLcv?($;YeQ0mtiHiEDFq&gY_O41Hz^TVy-qG^irkW2mlPpIb-ttWmDTIWQG4mV
ze?FPLA(8ri<R4aHgKq**VS)zRm;ewu8f-JH1|%UHeb-l%hWX@&#)Pvo@@TN6F{y*z
zY&0fykV6`6^9>U+(9vk4Pg1Fz4~K+z+1MBDPun9yf)&7!20`aDAf$KMCZ7Qzy~{TF
z42XQ*W%u1{>wG4H%I6R5&>maov!Ow5w{7y-kdV*Kwx7@WRB-pnXLm=g8M4ohCJ=G?
zeSS0nLe0KQ(Uebvj6*t_#sR<_hmvNXhl4{&Gtk4qAwQbH3{8h9nodx+TM!L@W(U5r
z<&}FPU-bIS?w+B;sDQ%gxDKO{08n|{w+$dv9{1x25Gs#T98pjdko!*{N%lr=E<EA4
z3RI{#;kOD<ahdh#0ioiAje!S!b}XQ5Znx#VAK|lOdr}2is@*m}XoCqV+U-pJ6%-IE
z+HEtxuz=7hld1raJmnh~5R#{S;{qyPzd#mHbaiOs%Hn-^{nC+a0)<#d@-8UEI(*wg
z5Q;j;wr^hr+ZIN{wV8o!a^}9s4b~TZWUtcj&542gBfTTt?tkn-IpniQj^u|UdwbSq
z`oo<<GW#kS+#6Xo3dgwEDlE>ch8BRh*s4rZGXZh2Rhh8*hxA8XAz7m<GjZrhWOtuY
zU74mc09n!d3!{V#-Ia;|qttAzLRdOH%duW?LTQ`jg5BM-)stRg`k6>-umUIiYm@d_
zj>!f{LCY-1WCI|wVV2YP1xIHC5mYwJc0zL<oehQtxjBx>217zNJnv98)bv*OfiAYr
zu{JrOMC$jEWs&;<^c$f<RV3;hQzQV<s5-~=PJmEe=is@3K5+n|QFTsy6B<Roh!O#f
zLLh8(%qO`*^7Lj$)$>I|Sa`^0=aSjTvzr~$hk_BhH#>fa6jC*>cT^ub765AMldYse
zQlD%k6_Wa7E2)swJBX1}lz&Ch@H<Z6psWqDuX?@X__L^sC=MDO)pw2rfW}7O8Gz8(
z=$JqNgvLe(fuMe|Eh1O#l#{!$Pe$xa%1{{WbRv3N74Sf2r_(Q$RnmyFh!U>Zv7%{z
zk}pP?C$Tcvec2%BAN6n=(#_6gYK9tdL%P|)3^nQ%iwJ$BtvCt*7XHY$BOoL{^6dzy
zczrt-kpm8BJB|ZT$aotNcYVOOBOo*#@a+f)O$W%1E3xEKs5lyKbpqcziEUw)5$x6K
z_&=u>lO>O7OXdJT=P}<ZfY5o&w<I8R9wSTEQ8!bJyAHQG*4It~@AR{R6*$)UfHM$m
z^YZ}^f^B|203!6-oW5V1d?13#hju4)%H)HgLGJ(jd@v;B!&fRF$hgJinQxusXiq-N
z5U8N&!5+?|CExl62870MF9m8b!A@;p`Pa)?xUkcYQ=Eb=I(_>BLQ$u0UqB@Z`_ey5
zCDHIXCvZe|T+V)-dCoyELCg7+V9MD=$C~bjXp4)>fc2C!qRA=$#@;UPazf+PD>r=#
z_wthy8uK#>F7m7kim&c}Tx$;0{g<x|9w3sOas_+lhUbWr-c%}W^sG9|4Hf^40&TNh
z?4Rvxt8}eDLmS@zn#Q5p5ls%ilI^dU=bHI&N*x(`z8jjHR7bX3;9@gjU)_tYwFv5H
zJ3%FaN@Ylw8bwBY$u*k?Y9{Eda?Lh{ngYEG-Ox3(vWPa~%dWKyiXZV6<0p9{$<;mB
zq*2vws3_SedTL(cniY|hI!c74bV>EVTte}_!qubhBRyGo^a|HREl#0zD_m1J03o@;
zr5=RBy@VoZt!wp9+iqcHPKnhOQxhY4vBAMCP<7ygM=_Z?0tgjrUDOd;v$ce5xL#I9
zS>CYqt|=ZMLS(&biU%M>*1ISkKhZS962S0#uGN${8)aQ7_v27kdz?UgzUP{14+u5y
zxu)6!Ld|=wsrG<Kx%b?7ldG#e5p=b0bW!b}qe*8aRBc)kclKwObt`O1UWdl<Ew1^h
z114Oj#qFu{3lP_7aWOKXbS$C5f6&!W0059Y=$cdngyccj^cjGVJm~thu7pM}hh5!g
z0H7_0lWm{}>%+-=rP1Hv<h|19@34zpTzv(Su@qV7239AWbnI-}^P-Etd1rP*<4Vc(
zGZU>gdoGwglN*<T3S~2SL`@kcCMcW9X|)h4{iWoc*>ax4R%g#n%8;99b2ID*4`gO@
z4EyKm3sJ5l?sL(544cpO++=7XRr7gYwTvA>2+im4(BIXCy5p-;6}MK&fgbyyPZjTe
zB{s0827ql54`rv7$zy``kyySecQ^=o=LnpJ)<wK8N4BI8w_+cZr6w7dl1n8I4Nl9_
z!Y>GBXMv#mIh=;D<X7o8<A4yB9P@{0t%Xu@X0`lGu=1>G9@6VCg9wpoo~l*@Bp!%V
zb9|GfISZxa#HI39C>Xw!ht#xjB0^*-@2%$t0zzad$NWH=p<GI1_2oQNoHj%^@$ew#
zWPzY(;Nvuem-BS026TTkK3~oYii~marm#j19n5aas^K9Wlcj0~ehu$G#E8(V`x-uc
zq?$xsN-qv;W!+#_l2w}&p?CGQNfCNiUrQqNn|vv~Uw=go$YQq+eT9eg_e>BW@(S;#
zH`D-x$SXX1C|g7Sf0aeUTX^6oPb|-3tGY$EaC~>Cjc&^jgy96Yw#wUwvHS`g>4gG7
zhq?ssq1_4ybqS7{E;L#LME)jt+E%W=MG--LqIsKRLNblt3<Z(*Hpj;{T2si7=&Q}!
zyr`I+rZ_93DBQuV329#jGh~t7y`Qv)vxE15qzele;KUu=d<zCt0%oynKs0Oz$NvoE
z4?uWe2fywHwQ37Nb$WC;n?Xghj7nZp;x4?h4c^z3yaa_-6F0RBOt?f7H;<x#(9y*4
zD5@_(uY;R-Y`D3E`V`Z|GlsDrX^L7IRmfIuea;ixMzUv8Dsb%I36;p!<Yg#TT9cQd
zRB5HlXcJS3Y~``fVPcx|1HF1w@+l7;;d+#AXpsAin^C$UVN`OM(<uGu<@DwmdySmn
zfrWBM9{arK37&Gbn#|IdD$q$T|C-OTGEQ={#ww^V(n*dNFMo#3Qu>lLPVvMAY$_Uz
zo#K|7=}cs>o#L43T&lQ$zUFdJAuEf0&CMdK*d|1g@c=__$*}_n7E|Q1vXG6;_$Rlr
z$)ZFB(?9vJ;cO1R=L4fkoaKq5g)Cwfo#mFwZ6bs1EFYqtAPGX*Sw3tm`9VRn^DG}e
zhUF?Hu=NjIx+N?x_CvBg^o8IDj`rwABec$O`7G8Ij-5-khdvRUqxK+0pcxh6JeS8x
zSYhluH!Bu{3a0ZMfBRu24dOynOivV+vVR0)(>+TiJ5j+k-NRDr`}M6M+vg^-#;`lA
z*j(?DmFPRcTo0|HX97qe!RO1`aqN@We9uy$O++xw_j2;s1<i!7WL2{IdUi2Z<y|r*
zEhb#$4I6=aWQE2=!_o`X$}QvB%~9#$aitg$I)-w-+Ow9*zU8c_0!O+~fes5+d;Rr)
z<A5-5wTD;!6p(-j$ZF4C>gk*(g39?Np2>MbK?|06Cg%-_a(;=2obN=_p$gYo;aQn!
zCz12}%h|t*fOL}J92~d8Gr0(;c+EsaK(uLvhc87dDXy`F%xW*tAcGTFZI9JnO1g^c
zeiYYh<faKMJAI9390np9w#I|Q=%Y?QYQtK2aRM8XzSgtU-%&&a&sq=F1T&cdfnJpp
zZe-V`znavesH6uE^58*(*2%xz$OgsM`ECahlIzIrvoXC0Oo-^MiS`@m!FH=>=?DfD
zTw6W71EDkkgsQFHsB#t11kuE;-gV>Yvpr73F7-0|7M7J>@0pwc5i06E<iul&2l2d3
zK79+D8r$Ysqm5n)=WSkIK3hnE(~shLyX<}|TO8Y-Yzu|+c52I=2%NFe@Vg$Kb3eF^
z-I4jOhks#c>^l|@5bt}|E-%EoXg$!e<^h6eiPGEIAA_Sm@Iqy3^sCQ7=ij~1)Spps
zi#t6$7f@e2mIATav-W!OPY<(E6~Jge2zv2HKp3Fe8=yOCKnOQ`n6pLk2#9!W_T0TD
z9*LmhagQI5hJr@y@#E2uC?5AvJgR5#v519m3;rEHAYZ$K9jL&e4n~|ngIYZEk1QY>
z)Z$&M>K0l+!Pw%VPUr^Fb7YG*;s6>%T_Db*L9|5R$6jbC?UQ7M#zn)QdVzK?nD%@S
zOIkfV>4_(&-T&mIDUV%0>7hp-95-#+lxZ1@?_$sN`qabfX)jWrHIAbBsF!%*E*1^m
zdek!mMUc^$qn=q`3J{Gs>S3Txy%Zqo(NQm|cULBe@wMXUUBC`%y^wG765sra{R$7u
zNxgKFZJv2^KTh3bn}-*|S}%35ZC>wRDxcyk=_N`Zz09Pc;HKNW5&p#$6E5E772n9t
z(gOF`q~|*?Fk1xE+Ofd>q$d(hzrlya=y#r(XPHVjeHuBZ=2>O}qEW!=`&kMgE^ykz
z_cP4&1;oitPhNR1yE~)PuZ5t3sgvCEJoRI#l(*--#Pjzu7R)&B=QGHPj(o18^hl+I
z?(*cDzhxU^U7lI#98_?1d6?&+mK0B=jGiH9{EmGTn;|R}p%A5no*@vSjan5_c9wkn
zKK6cWmaz03(NvYPvjjfUmmnankA~-pzydjRA}fy06_{T{nQ=X3My0Uk%jpwYK?RQV
zC=YbpYNaq6EC8ahl>%?tDFOizftBLg`9hayBB+#@CrpVp6f|?5FeTcMC?)0zq{KaN
z54I$FNd%U_JvU{Hog(|}iS(2kPo`WUGbXTzocI9C?(vdHu~oJ0Pp+zxH6W%}2~*oZ
z#5Jk}>Is%*O;H;VEtIDoV7ciFg_WZU6NunhDDd@_`q}>EhefjNK~|K$NSNXUB2fj3
z7k&2cPtI8^|MDO!OJ6K3wL=OK!LwN8=8^3H=^;aQJ;;jFr7)EpMDR#~%1-kq`cpA|
zS>F8+8=d~LunJ6jsF=Piic8oS#e>|hmKz^p<6_lG9xA5Q#4{P*8y^iX7nqnEe3(5F
zT`uscl)N{dyjLTvTJqj?6@btLtS7(&!iP2DTK$Lwh<mCLg9a-f0>XziBCFQ;kO<0$
zD|{as3fi&4_n{$?4_A;6u?3Emf?p-pia;U^FCIfbThpGBCU5(9wztPxkrGp`!|p=V
z!96~eaT~{I)~mu&4-hGUxWKCdn^fWVP(YkqFaLWID@<RX<RJ&HC!T?d2k13<a1x8%
z{hBbt7VIZPRFRWwcyO~D;N5F`WVpYd^u!aB9((wA4?Q*2RRtH9p*|1i^%xTn!W#s}
zn6|nAJo~!5^%3S|zV3TJO?mcp@;=ShNh8nJ;UxZqy+t1VPnIe-KZ3{vN%!$!fX+IK
z1l?%(X5-??ESA2}4?3)P29}K!bQww|I?PS7a5B3#eUmUFEi5Djo=pPPB~$UBEWRQC
zIGMTWZwO0mR)e<C=<f}I*@c=1gTFWB--zeUq<v`Y_a@or8l?wAzs>TpM_D|5v#|8Y
z0ITtUXS2X>Ub@K``E8NqkD|?6gr)vW!?kGSw?zycZuH<Ux3}bT&=Y$rd0(_i#9Jb-
zfIWcVEsuulMF87_Jjy0U>jhSpr{FE8;N32)cXaRq!a%@!5gR}_XuBAw*YX8~Ketmc
zqXGno;N33xJ0^IEpn|u-4_-q-I~x4pH6#k&1`6KOn97`jO?f^PfzN{?(eZosxYgrB
zKW49{nB7e=o1MPfk3<lmaW_RG4a%^S4MqyGVJaJx-t1c%MDR3|r7;Qy56~VNew>wN
z>=9;=2qIAhjq0h-xSHxsi%2~DIJ+enYw?{AGT2(k`K5{rarv>32d1&IjE{Y5U#$Z3
zV~V2bS{EX-RU~qrz<${ot;tJLJhsv$@m7{D340$A@;6Vidi#j5@>FdC6<kLI_Sw4$
zuDc-`J}v@n$n25~c}-JFANh;_U?Y1UCnwSn{|0j6m%=(JWWRDYx&jzlLC{_Vgn_>F
zy$Fcg{L=R#AiVgc;3th2iJ-iA!uO(~ph+iuFB%eg@dSCXfxL(<e>z0qdw6leA6UK>
z?GPygRpl8#Ui=RB)crdk8U(DCQb_@X>hH)Vl+y#qou`F7_7wX?#%W=mtw06SX+hgq
zk>LiA>&^)I%cogo>`anNlfiYrV#1wv3i-p+Y+^>IpF9JUKRX51t)T7NCPc&MM4(H^
zXP#ldj-C_vlZP^60vYv!urBJ%0EA6}^?z1?XypZA7Rm<1l`aU(52VZhgiS99=c2JG
t5tL1T^lfS=xQQQqn;H_?^helqVtDGbDNjxrvG4nCgS*S$-kvh({{baH>sJ5(

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 8291c3f3..9f07ea39 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -1717,6 +1717,10 @@ const (
 	RegistrationFailureReason_REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED            RegistrationFailureReason = 5 // registration quota exceeded
 	RegistrationFailureReason_REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA RegistrationFailureReason = 6 // registration_data does not conform to the Exchange's published AccountRegistration.data_schema
 	RegistrationFailureReason_REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE        RegistrationFailureReason = 7 // terms_digest does not match the currently published WellKnownManifest.terms_digest, or was omitted while the Exchange publishes one
+	// The request's ext_critical names a key the Exchange does not understand (see
+	// "Critical extensions" in the file header), on a first registration and on a
+	// repeat alike. Refused with the Connect code invalid_argument.
+	RegistrationFailureReason_REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION RegistrationFailureReason = 8
 )
 
 // Enum value maps for RegistrationFailureReason.
@@ -1730,16 +1734,18 @@ var (
 		5: "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
 		6: "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
 		7: "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+		8: "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION",
 	}
 	RegistrationFailureReason_value = map[string]int32{
-		"REGISTRATION_FAILURE_REASON_UNSPECIFIED":               0,
-		"REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED":       1,
-		"REGISTRATION_FAILURE_REASON_INVALID_KEY":               2,
-		"REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID":         3,
-		"REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED":        4,
-		"REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED":            5,
-		"REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA": 6,
-		"REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE":        7,
+		"REGISTRATION_FAILURE_REASON_UNSPECIFIED":                0,
+		"REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED":        1,
+		"REGISTRATION_FAILURE_REASON_INVALID_KEY":                2,
+		"REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID":          3,
+		"REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED":         4,
+		"REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED":             5,
+		"REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA":  6,
+		"REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE":         7,
+		"REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION": 8,
 	}
 )
 
@@ -1801,6 +1807,10 @@ const (
 	// transaction's state admits no dispute under the Exchange's rules. Filing
 	// again does not change the answer.
 	DisputeFailureReason_DISPUTE_FAILURE_REASON_INELIGIBLE DisputeFailureReason = 5
+	// The filing's ext_critical names a key the Exchange does not understand (see
+	// "Critical extensions" in the file header). Refused with the Connect code
+	// invalid_argument.
+	DisputeFailureReason_DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION DisputeFailureReason = 6
 )
 
 // Enum value maps for DisputeFailureReason.
@@ -1812,14 +1822,16 @@ var (
 		3: "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
 		4: "DISPUTE_FAILURE_REASON_DUPLICATE",
 		5: "DISPUTE_FAILURE_REASON_INELIGIBLE",
+		6: "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION",
 	}
 	DisputeFailureReason_value = map[string]int32{
-		"DISPUTE_FAILURE_REASON_UNSPECIFIED":           0,
-		"DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND": 1,
-		"DISPUTE_FAILURE_REASON_REPORT_NOT_FILED":      2,
-		"DISPUTE_FAILURE_REASON_WINDOW_EXPIRED":        3,
-		"DISPUTE_FAILURE_REASON_DUPLICATE":             4,
-		"DISPUTE_FAILURE_REASON_INELIGIBLE":            5,
+		"DISPUTE_FAILURE_REASON_UNSPECIFIED":                0,
+		"DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND":      1,
+		"DISPUTE_FAILURE_REASON_REPORT_NOT_FILED":           2,
+		"DISPUTE_FAILURE_REASON_WINDOW_EXPIRED":             3,
+		"DISPUTE_FAILURE_REASON_DUPLICATE":                  4,
+		"DISPUTE_FAILURE_REASON_INELIGIBLE":                 5,
+		"DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION": 6,
 	}
 )
 
@@ -1861,6 +1873,10 @@ const (
 	DomainVerificationFailureReason_DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED            DomainVerificationFailureReason = 4 // Exchange could not fetch the verification URL
 	DomainVerificationFailureReason_DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED DomainVerificationFailureReason = 5 // fora.json does not list this Exchange
 	DomainVerificationFailureReason_DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED DomainVerificationFailureReason = 6 // signing-key registration failed during confirmation
+	// The request's or confirmation's ext_critical names a key the Exchange does
+	// not understand (see "Critical extensions" in the file header). Refused with
+	// the Connect code invalid_argument.
+	DomainVerificationFailureReason_DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION DomainVerificationFailureReason = 7
 )
 
 // Enum value maps for DomainVerificationFailureReason.
@@ -1873,15 +1889,17 @@ var (
 		4: "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
 		5: "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
 		6: "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+		7: "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION",
 	}
 	DomainVerificationFailureReason_value = map[string]int32{
-		"DOMAIN_VERIFICATION_FAILURE_REASON_UNSPECIFIED":             0,
-		"DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND":     1,
-		"DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH":      2,
-		"DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED":       3,
-		"DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED":            4,
-		"DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED": 5,
-		"DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED": 6,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_UNSPECIFIED":                0,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND":        1,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH":         2,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED":          3,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED":               4,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED":    5,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED":    6,
+		"DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION": 7,
 	}
 )
 
@@ -8758,7 +8776,10 @@ type BrokerTransactionResponse struct {
 	// its Exchange denied per item (denial_reason), is that Exchange's
 	// TransactionResultItem unchanged. An item whose Exchange refused the whole
 	// sub-request, or did not answer it, carries that refusal in `refusal`, with
-	// offer_id set and no other result field.
+	// offer_id set and no other result field. When the Broker itself does not
+	// understand a key the agent's request lists in ext_critical, every item is
+	// the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no
+	// Exchange was contacted.
 	Items []*TransactionResultItem `protobuf:"bytes,2,rep,name=items,proto3" json:"items,omitempty"`
 	// One per Exchange the Broker contacted, in the order each Exchange first
 	// appears among the request items.
@@ -11822,7 +11843,7 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"(CATALOG_REJECTION_REASON_URI_UNAVAILABLE\x10\t\x127\n" +
 	"3CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\n" +
 	"\x120\n" +
-	",CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED\x10\v*\xb4\x03\n" +
+	",CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED\x10\v*\xf0\x03\n" +
 	"\x19RegistrationFailureReason\x12+\n" +
 	"'REGISTRATION_FAILURE_REASON_UNSPECIFIED\x10\x00\x123\n" +
 	"/REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED\x10\x01\x12+\n" +
@@ -11831,14 +11852,16 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	".REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED\x10\x04\x1a\x02\b\x01\x12.\n" +
 	"*REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED\x10\x05\x129\n" +
 	"5REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA\x10\x06\x122\n" +
-	".REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE\x10\a*\x95\x02\n" +
+	".REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE\x10\a\x12:\n" +
+	"6REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\b*\xcc\x02\n" +
 	"\x14DisputeFailureReason\x12&\n" +
 	"\"DISPUTE_FAILURE_REASON_UNSPECIFIED\x10\x00\x120\n" +
 	",DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND\x10\x01\x12+\n" +
 	"'DISPUTE_FAILURE_REASON_REPORT_NOT_FILED\x10\x02\x12)\n" +
 	"%DISPUTE_FAILURE_REASON_WINDOW_EXPIRED\x10\x03\x12$\n" +
 	" DISPUTE_FAILURE_REASON_DUPLICATE\x10\x04\x12%\n" +
-	"!DISPUTE_FAILURE_REASON_INELIGIBLE\x10\x05*\xbb\x03\n" +
+	"!DISPUTE_FAILURE_REASON_INELIGIBLE\x10\x05\x125\n" +
+	"1DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\x06*\xfe\x03\n" +
 	"\x1fDomainVerificationFailureReason\x122\n" +
 	".DOMAIN_VERIFICATION_FAILURE_REASON_UNSPECIFIED\x10\x00\x12:\n" +
 	"6DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND\x10\x01\x129\n" +
@@ -11846,7 +11869,8 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"4DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED\x10\x03\x123\n" +
 	"/DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED\x10\x04\x12>\n" +
 	":DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED\x10\x05\x12>\n" +
-	":DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED\x10\x06*\xd9\x05\n" +
+	":DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED\x10\x06\x12A\n" +
+	"=DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION\x10\a*\xd9\x05\n" +
 	"\x1aRetrievalAuthFailureReason\x12-\n" +
 	")RETRIEVAL_AUTH_FAILURE_REASON_UNSPECIFIED\x10\x00\x12-\n" +
 	")RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED\x10\x01\x127\n" +
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 31c2de04..0ea4c472 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -165,7 +165,9 @@ type ExchangeServiceClient interface {
 	// identifying field. An agent the Exchange knows, its request signature
 	// verified, but that holds no account at this Exchange is answered with the
 	// Connect code NOT_FOUND. An agent whose signature does not verify is
-	// UNAUTHENTICATED, as on every RPC.
+	// UNAUTHENTICATED, as on every RPC. A request whose ext_critical lists a key
+	// the Exchange does not understand is INVALID_ARGUMENT with no typed reason
+	// (see "Critical extensions" in the file header).
 	GetAccountStatus(context.Context, *connect.Request[v1.GetAccountStatusRequest]) (*connect.Response[v1.GetAccountStatusResponse], error)
 }
 
@@ -346,7 +348,9 @@ type ExchangeServiceHandler interface {
 	// identifying field. An agent the Exchange knows, its request signature
 	// verified, but that holds no account at this Exchange is answered with the
 	// Connect code NOT_FOUND. An agent whose signature does not verify is
-	// UNAUTHENTICATED, as on every RPC.
+	// UNAUTHENTICATED, as on every RPC. A request whose ext_critical lists a key
+	// the Exchange does not understand is INVALID_ARGUMENT with no typed reason
+	// (see "Critical extensions" in the file header).
 	GetAccountStatus(context.Context, *connect.Request[v1.GetAccountStatusRequest]) (*connect.Response[v1.GetAccountStatusResponse], error)
 }
 
@@ -675,7 +679,9 @@ type BrokerServiceClient interface {
 	//
 	// The Broker's own refusals are non-OK Connect errors carrying an
 	// ErrorDetail, and when the Broker refuses, it has sent no sub-request, so
-	// nothing was bought:
+	// nothing was bought. They come first, in this order, and only a request that
+	// passes them reaches the critical-extension check (see "Critical extensions"
+	// in the file header), then routing:
 	//   - The agent's request signature does not verify: UNAUTHENTICATED with
 	//     `request_auth_failure`, exactly as at an Exchange.
 	//   - `requester.domain` is not the agent's verified signing directory — the
@@ -710,7 +716,11 @@ type BrokerServiceClient interface {
 	// sub-request, which decides no item, becomes a refusal on each of its items.
 	// DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
 	// upstream failures; the Broker never stamps it, or any denial_reason, onto
-	// an item an Exchange did not deny. If an Exchange answers OK without exactly
+	// an item an Exchange did not deny. The one exception is the Broker's own
+	// answer to a key the agent's request lists in ext_critical that the Broker
+	// does not understand: it then denies every item as
+	// DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, in the body, and sends no
+	// sub-request (see "Critical extensions" in the file header). If an Exchange answers OK without exactly
 	// one result item per item sent, the Broker cannot attribute the answer, and
 	// reports every item of that sub-request with a refusal whose code is
 	// "internal" and no detail.
@@ -839,7 +849,9 @@ type BrokerServiceHandler interface {
 	//
 	// The Broker's own refusals are non-OK Connect errors carrying an
 	// ErrorDetail, and when the Broker refuses, it has sent no sub-request, so
-	// nothing was bought:
+	// nothing was bought. They come first, in this order, and only a request that
+	// passes them reaches the critical-extension check (see "Critical extensions"
+	// in the file header), then routing:
 	//   - The agent's request signature does not verify: UNAUTHENTICATED with
 	//     `request_auth_failure`, exactly as at an Exchange.
 	//   - `requester.domain` is not the agent's verified signing directory — the
@@ -874,7 +886,11 @@ type BrokerServiceHandler interface {
 	// sub-request, which decides no item, becomes a refusal on each of its items.
 	// DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
 	// upstream failures; the Broker never stamps it, or any denial_reason, onto
-	// an item an Exchange did not deny. If an Exchange answers OK without exactly
+	// an item an Exchange did not deny. The one exception is the Broker's own
+	// answer to a key the agent's request lists in ext_critical that the Broker
+	// does not understand: it then denies every item as
+	// DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, in the body, and sends no
+	// sub-request (see "Critical extensions" in the file header). If an Exchange answers OK without exactly
 	// one result item per item sent, the Broker cannot attribute the answer, and
 	// reports every item of that sub-request with a refusal whose code is
 	// "internal" and no detail.
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 92465da7..7308e994 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -78,12 +78,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -110,12 +111,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -246,12 +248,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
@@ -739,7 +742,7 @@
       "type": "array"
     },
     "items": {
-      "description": "One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.",
+      "description": "One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field. When the Broker itself does not\n understand a key the agent's request lists in ext_critical, every item is\n the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no\n Exchange was contacted.",
       "items": {
         "$ref": "#/$defs/fora.v1.TransactionResultItem"
       },
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index 8c0a0281..ba95fe1d 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -81,12 +81,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -114,12 +115,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -253,12 +255,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
@@ -756,7 +759,7 @@
       "type": "array"
     },
     "items": {
-      "description": "One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.",
+      "description": "One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field. When the Broker itself does not\n understand a key the agent's request lists in ext_critical, every item is\n the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no\n Exchange was contacted.",
       "items": {
         "$ref": "#/$defs/fora.v1.TransactionResultItem"
       },
diff --git a/gen/jsonschema/fora.v1.DisputeFailure.schema.json b/gen/jsonschema/fora.v1.DisputeFailure.schema.json
index 52936a52..20808ba4 100644
--- a/gen/jsonschema/fora.v1.DisputeFailure.schema.json
+++ b/gen/jsonschema/fora.v1.DisputeFailure.schema.json
@@ -11,12 +11,13 @@
             "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
             "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
             "DISPUTE_FAILURE_REASON_DUPLICATE",
-            "DISPUTE_FAILURE_REASON_INELIGIBLE"
+            "DISPUTE_FAILURE_REASON_INELIGIBLE",
+            "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 5,
+          "maximum": 6,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json b/gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json
index b07c76bf..a65eb81c 100644
--- a/gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DisputeFailure.schema.strict.json
@@ -12,12 +12,13 @@
             "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
             "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
             "DISPUTE_FAILURE_REASON_DUPLICATE",
-            "DISPUTE_FAILURE_REASON_INELIGIBLE"
+            "DISPUTE_FAILURE_REASON_INELIGIBLE",
+            "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 5,
+          "maximum": 6,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json
index 90211594..a5a9c65f 100644
--- a/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json
+++ b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.json
@@ -12,12 +12,13 @@
             "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
             "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
             "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-            "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+            "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 6,
+          "maximum": 7,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json
index 5fa561e6..c9cedd24 100644
--- a/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DomainVerificationFailure.schema.strict.json
@@ -13,12 +13,13 @@
             "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
             "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
             "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-            "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+            "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+            "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 6,
+          "maximum": 7,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
index 27fe2caf..8fbf50d7 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -55,12 +55,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -87,12 +88,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -128,12 +130,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
index 8f06e65f..061eb0d9 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -57,12 +57,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -90,12 +91,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -132,12 +134,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.RegistrationFailure.schema.json b/gen/jsonschema/fora.v1.RegistrationFailure.schema.json
index a3b02d24..4632df43 100644
--- a/gen/jsonschema/fora.v1.RegistrationFailure.schema.json
+++ b/gen/jsonschema/fora.v1.RegistrationFailure.schema.json
@@ -45,12 +45,13 @@
             "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
             "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
             "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-            "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+            "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+            "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 7,
+          "maximum": 8,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json b/gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json
index 91893904..9899ece5 100644
--- a/gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json
+++ b/gen/jsonschema/fora.v1.RegistrationFailure.schema.strict.json
@@ -47,12 +47,13 @@
             "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
             "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
             "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-            "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+            "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+            "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
           ],
           "type": "string"
         },
         {
-          "maximum": 7,
+          "maximum": 8,
           "minimum": 1,
           "type": "integer"
         }
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index d8e81776..a29c9175 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -78,12 +78,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -110,12 +111,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -210,12 +212,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index 7a0c4916..a619322e 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -81,12 +81,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -114,12 +115,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -216,12 +218,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 8510aa77..53080b5a 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -78,12 +78,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -110,12 +111,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -210,12 +212,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index 4fca86bc..a9faa579 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -81,12 +81,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -114,12 +115,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -216,12 +218,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index bece9f7b..75cad0dd 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -55,12 +55,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -87,12 +88,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -187,12 +189,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index bf7bc748..86b08f71 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -57,12 +57,13 @@
                 "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
                 "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
                 "DISPUTE_FAILURE_REASON_DUPLICATE",
-                "DISPUTE_FAILURE_REASON_INELIGIBLE"
+                "DISPUTE_FAILURE_REASON_INELIGIBLE",
+                "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 5,
+              "maximum": 6,
               "minimum": 1,
               "type": "integer"
             }
@@ -90,12 +91,13 @@
                 "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
                 "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+                "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+                "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 6,
+              "maximum": 7,
               "minimum": 1,
               "type": "integer"
             }
@@ -192,12 +194,13 @@
                 "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
                 "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
                 "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+                "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+                "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
               ],
               "type": "string"
             },
             {
-              "maximum": 7,
+              "maximum": 8,
               "minimum": 1,
               "type": "integer"
             }
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 27384b4d..584677bb 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -239,6 +239,9 @@ class DisputeFailureReason(Enum):
     DISPUTE_FAILURE_REASON_WINDOW_EXPIRED = 'DISPUTE_FAILURE_REASON_WINDOW_EXPIRED'
     DISPUTE_FAILURE_REASON_DUPLICATE = 'DISPUTE_FAILURE_REASON_DUPLICATE'
     DISPUTE_FAILURE_REASON_INELIGIBLE = 'DISPUTE_FAILURE_REASON_INELIGIBLE'
+    DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION = (
+        'DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION'
+    )
 
 
 class DisputeReason(Enum):
@@ -377,6 +380,9 @@ class DomainVerificationFailureReason(Enum):
     DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED = (
         'DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED'
     )
+    DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION = (
+        'DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION'
+    )
 
 
 class DomainVerificationRequest(WireModel):
@@ -761,6 +767,9 @@ class RegistrationFailureReason(Enum):
     REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE = (
         'REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE'
     )
+    REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION = (
+        'REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION'
+    )
 
 
 class RegistrationFieldError(WireModel):
@@ -2247,7 +2256,7 @@ class BrokerTransactionResponse(WireModel):
     )
     items: list[TransactionResultItem] | None = Field(
         None,
-        description="One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.",
+        description="One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field. When the Broker itself does not\n understand a key the agent's request lists in ext_critical, every item is\n the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no\n Exchange was contacted.",
     )
     totals: list[Cost] | None = Field(
         None,
diff --git a/gen/ts/strict/fora.v1.BrokerTransactionResponse.ts b/gen/ts/strict/fora.v1.BrokerTransactionResponse.ts
index 8b3f39b1..c6e3771e 100644
--- a/gen/ts/strict/fora.v1.BrokerTransactionResponse.ts
+++ b/gen/ts/strict/fora.v1.BrokerTransactionResponse.ts
@@ -4,7 +4,7 @@
 // @ts-nocheck
 import type { StrictMessage } from "./types.ts";
 
-const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.Cost":{"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.ErrorDetail":{"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"},"fora.v1.ExchangeOutcome":{"additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_ids":{"items":{"type":"string"},"maxItems":256,"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"}},"required":["exchange"],"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.TransactionResultItem":{"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"},"fora.v1.UpstreamRefusal":{"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.BrokerTransactionResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"exchanges":{"items":{"$ref":"#/$defs/fora.v1.ExchangeOutcome"},"type":"array"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"items":{"items":{"$ref":"#/$defs/fora.v1.TransactionResultItem"},"type":"array"},"totals":{"items":{"$ref":"#/$defs/fora.v1.Cost"},"type":"array"},"ver":{"default":"","type":"string"}},"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_ids":{"items":{"type":"string"},"maxItems":256,"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"}},"required":["exchange"],"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const func1 = ucs2length;const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.exchange === undefined) && (missing0 = "exchange")){validate21.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((((key0 === "agent_identity_hash") || (key0 === "exchange")) || (key0 === "offer_ids")) || (key0 === "subscription_quota"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.agent_identity_hash !== undefined){const _errs2 = errors;if(typeof data.agent_identity_hash !== "string"){validate21.errors = [{instancePath:instancePath+"/agent_identity_hash",schemaPath:"#/properties/agent_identity_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.exchange !== undefined){let data1 = data.exchange;const _errs4 = errors;if(errors === _errs4){if(typeof data1 === "string"){if(func1(data1) > 260){validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data1)){validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_ids !== undefined){let data2 = data.offer_ids;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){if(data2.length > 256){validate21.errors = [{instancePath:instancePath+"/offer_ids",schemaPath:"#/properties/offer_ids/maxItems",keyword:"maxItems",params:{limit: 256},message:"must NOT have more than 256 items"}];return false;}else {var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate21.errors = [{instancePath:instancePath+"/offer_ids/" + i0,schemaPath:"#/properties/offer_ids/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}}else {validate21.errors = [{instancePath:instancePath+"/offer_ids",schemaPath:"#/properties/offer_ids/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data4 = data.subscription_quota;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data4)){var valid2 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){let data5 = data4[i1];const _errs12 = errors;const _errs13 = errors;if(errors === _errs13){if(data5 && typeof data5 == "object" && !Array.isArray(data5)){const _errs15 = errors;for(const key1 in data5){if(!((((((key1 === "quota_limit") || (key1 === "quota_remaining")) || (key1 === "quota_used")) || (key1 === "resets_at")) || (key1 === "subscription_id")) || (key1 === "unit"))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs15 === errors){if(data5.quota_limit !== undefined){let data6 = data5.quota_limit;const _errs16 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs16){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data6 < -2147483648 || isNaN(data6)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs16 === errors;}else {var valid4 = true;}if(valid4){if(data5.quota_remaining !== undefined){let data7 = data5.quota_remaining;const _errs18 = errors;if(!(((typeof data7 == "number") && (!(data7 % 1) && !isNaN(data7))) && (isFinite(data7)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs18){if((typeof data7 == "number") && (isFinite(data7))){if(data7 > 2147483647 || isNaN(data7)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data7 < -2147483648 || isNaN(data7)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs18 === errors;}else {var valid4 = true;}if(valid4){if(data5.quota_used !== undefined){let data8 = data5.quota_used;const _errs20 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs20){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data8 < -2147483648 || isNaN(data8)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs20 === errors;}else {var valid4 = true;}if(valid4){if(data5.resets_at !== undefined){const _errs22 = errors;if(errors === _errs22){if(errors === _errs22){if(!(typeof data5.resets_at === "string")){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid4 = _errs22 === errors;}else {var valid4 = true;}if(valid4){if(data5.subscription_id !== undefined){const _errs24 = errors;if(typeof data5.subscription_id !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs24 === errors;}else {var valid4 = true;}if(valid4){if(data5.unit !== undefined){const _errs26 = errors;if(typeof data5.unit !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs26 === errors;}else {var valid4 = true;}}}}}}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const schema34 = {"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"};const schema47 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const func2 = Object.prototype.hasOwnProperty;const pattern5 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern7 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const schema36 = {"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema43 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema44 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema46 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema42 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate26(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate26.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate26.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate26.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate26.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func1(data2) > 255){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func1(data2) < 1){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func1(data3) > 255){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema41.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 7 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate26.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate26.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate26.errors = vErrors;return errors === 0;}validate26.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate25(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate25.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func2.call(schema37.properties, key0))){validate25.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate25.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate25.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 5 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 5},message:"must be <= 5"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate25.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 6 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate25.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate25.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate25.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate25.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate26(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate26.errors : vErrors.concat(validate26.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema44.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func1(data18) > 260){validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data18)){validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate25.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema46.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate25.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate25.errors = vErrors;return errors === 0;}validate25.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.code === undefined) && (missing0 = "code")) || ((data.party === undefined) && (missing0 = "party"))){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(((key0 === "code") || (key0 === "detail")) || (key0 === "party"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.code !== undefined){let data0 = data.code;const _errs2 = errors;if(errors === _errs2){if(typeof data0 === "string"){if(func1(data0) > 64){validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func1(data0) < 1){validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.detail !== undefined){const _errs4 = errors;if(!(validate25(data.detail, {instancePath:instancePath+"/detail",parentData:data,parentDataProperty:"detail",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate25.errors : vErrors.concat(validate25.errors);errors = vErrors.length;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.party !== undefined){let data2 = data.party;const _errs5 = errors;if(errors === _errs5){if(typeof data2 === "string"){if(func1(data2) > 260){validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data2)){validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs5 === errors;}else {var valid0 = true;}}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func2.call(schema34.properties, key0))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.billing_id !== undefined){const _errs2 = errors;if(typeof data.billing_id !== "string"){validate23.errors = [{instancePath:instancePath+"/billing_id",schemaPath:"#/properties/billing_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.cost !== undefined){let data1 = data.cost;const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.amount !== undefined){let data2 = data1.amount;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func1(data2) > 32){validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data2)){validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data1.currency !== undefined){const _errs10 = errors;if(typeof data1.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data1.unit_cost !== undefined){let data4 = data1.unit_cost;const _errs12 = errors;if(errors === _errs12){if(typeof data4 === "string"){if(func1(data4) > 32){validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data4)){validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data5 = data.delivery_method;const _errs14 = errors;const _errs15 = errors;let valid3 = false;const _errs16 = errors;if(errors === _errs16){if(typeof data5 === "string"){if(!pattern7.test(data5)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs16 === errors;valid3 = valid3 || _valid0;const _errs18 = errors;if(typeof data5 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data5 === "DELIVERY_METHOD_DIRECT") || (data5 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data5 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema34.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs18 === errors;valid3 = valid3 || _valid0;const _errs20 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs20){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs20 === errors;valid3 = valid3 || _valid0;if(!valid3){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs15;if(vErrors !== null){if(_errs15){vErrors.length = _errs15;}else {vErrors = null;}}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.denial_reason !== undefined){let data6 = data.denial_reason;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(typeof data6 !== "string"){const err8 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((((((((((((((((((data6 === "DENIAL_REASON_UNSPECIFIED") || (data6 === "DENIAL_REASON_ACCOUNT_INACTIVE")) || (data6 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data6 === "DENIAL_REASON_RATE_LIMITED")) || (data6 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data6 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data6 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data6 === "DENIAL_REASON_OFFER_EXPIRED")) || (data6 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data6 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data6 === "DENIAL_REASON_DELEGATION_INVALID")) || (data6 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data6 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data6 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data6 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data6 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err9 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.denial_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs24 === errors;valid4 = valid4 || _valid1;const _errs26 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){const err10 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs26){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){const err11 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data6 < -2147483648 || isNaN(data6)){const err12 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;if(!valid4){const err13 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs28 = errors;if(errors === _errs28){if(errors === _errs28){if(!(typeof data.expires_at === "string")){validate23.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs30 = errors;if(typeof data.offer_id !== "string"){validate23.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.refusal !== undefined){const _errs32 = errors;if(!(validate24(data.refusal, {instancePath:instancePath+"/refusal",parentData:data,parentDataProperty:"refusal",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting_obligation !== undefined){let data10 = data.reporting_obligation;const _errs33 = errors;const _errs34 = errors;if(errors === _errs34){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){const _errs36 = errors;for(const key2 in data10){if(!((((((key2 === "endpoint") || (key2 === "ext")) || (key2 === "ext_critical")) || (key2 === "required")) || (key2 === "required_fields")) || (key2 === "window"))){validate23.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs36 === errors){if(data10.endpoint !== undefined){const _errs37 = errors;if(typeof data10.endpoint !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs37 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext !== undefined){let data12 = data10.ext;const _errs39 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid6 = _errs39 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext_critical !== undefined){let data13 = data10.ext_critical;const _errs41 = errors;if(errors === _errs41){if(Array.isArray(data13)){var valid7 = true;const len0 = data13.length;for(let i0=0; i0<len0; i0++){const _errs43 = errors;if(typeof data13[i0] !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical/" + i0,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs43 === errors;if(!valid7){break;}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs41 === errors;}else {var valid6 = true;}if(valid6){if(data10.required !== undefined){const _errs45 = errors;if(typeof data10.required !== "boolean"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid6 = _errs45 === errors;}else {var valid6 = true;}if(valid6){if(data10.required_fields !== undefined){let data16 = data10.required_fields;const _errs47 = errors;if(errors === _errs47){if(Array.isArray(data16)){var valid8 = true;const len1 = data16.length;for(let i1=0; i1<len1; i1++){const _errs49 = errors;if(typeof data16[i1] !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields/" + i1,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs49 === errors;if(!valid8){break;}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs47 === errors;}else {var valid6 = true;}if(valid6){if(data10.window !== undefined){const _errs51 = errors;if(errors === _errs51){if(errors === _errs51){if(!(typeof data10.window === "string")){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid6 = _errs51 === errors;}else {var valid6 = true;}}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs33 === errors;}else {var valid0 = true;}if(valid0){if(data.resource_title !== undefined){const _errs53 = errors;if(typeof data.resource_title !== "string"){validate23.errors = [{instancePath:instancePath+"/resource_title",schemaPath:"#/properties/resource_title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs53 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_mismatches !== undefined){let data20 = data.restriction_mismatches;const _errs55 = errors;if(errors === _errs55){if(Array.isArray(data20)){var valid9 = true;const len2 = data20.length;for(let i2=0; i2<len2; i2++){let data21 = data20[i2];const _errs57 = errors;const _errs58 = errors;let valid10 = false;const _errs59 = errors;if(typeof data21 !== "string"){const err14 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((((data21 === "RESTRICTION_KIND_UNSPECIFIED") || (data21 === "RESTRICTION_KIND_FUNCTION")) || (data21 === "RESTRICTION_KIND_GEOGRAPHY")) || (data21 === "RESTRICTION_KIND_USER_TYPE")) || (data21 === "RESTRICTION_KIND_OTHER"))){const err15 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs59 === errors;valid10 = valid10 || _valid2;const _errs61 = errors;if(!(((typeof data21 == "number") && (!(data21 % 1) && !isNaN(data21))) && (isFinite(data21)))){const err16 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs61){if((typeof data21 == "number") && (isFinite(data21))){if(data21 > 2147483647 || isNaN(data21)){const err17 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data21 < -2147483648 || isNaN(data21)){const err18 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs61 === errors;valid10 = valid10 || _valid2;if(!valid10){const err19 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs58;if(vErrors !== null){if(_errs58){vErrors.length = _errs58;}else {vErrors = null;}}}var valid9 = _errs57 === errors;if(!valid9){break;}}}else {validate23.errors = [{instancePath:instancePath+"/restriction_mismatches",schemaPath:"#/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs55 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_endpoint !== undefined){const _errs63 = errors;if(typeof data.retrieval_endpoint !== "string"){validate23.errors = [{instancePath:instancePath+"/retrieval_endpoint",schemaPath:"#/properties/retrieval_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs63 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs65 = errors;if(typeof data.subscription_id !== "string"){validate23.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs65 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_unit_value !== undefined){let data24 = data.subscription_unit_value;const _errs67 = errors;const _errs68 = errors;if(errors === _errs68){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){const _errs70 = errors;for(const key3 in data24){if(!(((key3 === "amount") || (key3 === "currency")) || (key3 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs70 === errors){if(data24.amount !== undefined){let data25 = data24.amount;const _errs71 = errors;if(errors === _errs71){if(typeof data25 === "string"){if(func1(data25) > 32){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data25)){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs71 === errors;}else {var valid12 = true;}if(valid12){if(data24.currency !== undefined){const _errs73 = errors;if(typeof data24.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs73 === errors;}else {var valid12 = true;}if(valid12){if(data24.unit_cost !== undefined){let data27 = data24.unit_cost;const _errs75 = errors;if(errors === _errs75){if(typeof data27 === "string"){if(func1(data27) > 32){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data27)){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs75 === errors;}else {var valid12 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs67 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_id !== undefined){const _errs77 = errors;if(typeof data.transaction_id !== "string"){validate23.errors = [{instancePath:instancePath+"/transaction_id",schemaPath:"#/properties/transaction_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs77 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.BrokerTransactionResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((((((key0 === "exchanges") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "items")) || (key0 === "totals")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.exchanges !== undefined){let data0 = data.exchanges;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){const _errs4 = errors;if(!(validate21(data0[i0], {instancePath:instancePath+"/exchanges/" + i0,parentData:data0,parentDataProperty:i0,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid1 = _errs4 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/exchanges",schemaPath:"#/properties/exchanges/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data2 = data.ext;const _errs5 = errors;if(!(data2 && typeof data2 == "object" && !Array.isArray(data2))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs5 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data3 = data.ext_critical;const _errs7 = errors;if(errors === _errs7){if(Array.isArray(data3)){var valid2 = true;const len1 = data3.length;for(let i1=0; i1<len1; i1++){const _errs9 = errors;if(typeof data3[i1] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i1,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs9 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs7 === errors;}else {var valid0 = true;}if(valid0){if(data.items !== undefined){let data5 = data.items;const _errs11 = errors;if(errors === _errs11){if(Array.isArray(data5)){var valid3 = true;const len2 = data5.length;for(let i2=0; i2<len2; i2++){const _errs13 = errors;if(!(validate23(data5[i2], {instancePath:instancePath+"/items/" + i2,parentData:data5,parentDataProperty:i2,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid3 = _errs13 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/items",schemaPath:"#/properties/items/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs11 === errors;}else {var valid0 = true;}if(valid0){if(data.totals !== undefined){let data7 = data.totals;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data7)){var valid4 = true;const len3 = data7.length;for(let i3=0; i3<len3; i3++){let data8 = data7[i3];const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data8 && typeof data8 == "object" && !Array.isArray(data8)){const _errs19 = errors;for(const key1 in data8){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate20.errors = [{instancePath:instancePath+"/totals/" + i3,schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data8.amount !== undefined){let data9 = data8.amount;const _errs20 = errors;if(errors === _errs20){if(typeof data9 === "string"){if(func1(data9) > 32){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data9)){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid6 = _errs20 === errors;}else {var valid6 = true;}if(valid6){if(data8.currency !== undefined){const _errs22 = errors;if(typeof data8.currency !== "string"){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs22 === errors;}else {var valid6 = true;}if(valid6){if(data8.unit_cost !== undefined){let data11 = data8.unit_cost;const _errs24 = errors;if(errors === _errs24){if(typeof data11 === "string"){if(func1(data11) > 32){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data11)){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid6 = _errs24 === errors;}else {var valid6 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3,schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid4 = _errs16 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/totals",schemaPath:"#/properties/totals/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs26 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.Cost":{"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.ErrorDetail":{"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"},"fora.v1.ExchangeOutcome":{"additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_ids":{"items":{"type":"string"},"maxItems":256,"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"}},"required":["exchange"],"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":8,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.TransactionResultItem":{"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"},"fora.v1.UpstreamRefusal":{"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.BrokerTransactionResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"exchanges":{"items":{"$ref":"#/$defs/fora.v1.ExchangeOutcome"},"type":"array"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"items":{"items":{"$ref":"#/$defs/fora.v1.TransactionResultItem"},"type":"array"},"totals":{"items":{"$ref":"#/$defs/fora.v1.Cost"},"type":"array"},"ver":{"default":"","type":"string"}},"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_ids":{"items":{"type":"string"},"maxItems":256,"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"}},"required":["exchange"],"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const func1 = ucs2length;const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.exchange === undefined) && (missing0 = "exchange")){validate21.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((((key0 === "agent_identity_hash") || (key0 === "exchange")) || (key0 === "offer_ids")) || (key0 === "subscription_quota"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.agent_identity_hash !== undefined){const _errs2 = errors;if(typeof data.agent_identity_hash !== "string"){validate21.errors = [{instancePath:instancePath+"/agent_identity_hash",schemaPath:"#/properties/agent_identity_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.exchange !== undefined){let data1 = data.exchange;const _errs4 = errors;if(errors === _errs4){if(typeof data1 === "string"){if(func1(data1) > 260){validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data1)){validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/exchange",schemaPath:"#/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_ids !== undefined){let data2 = data.offer_ids;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){if(data2.length > 256){validate21.errors = [{instancePath:instancePath+"/offer_ids",schemaPath:"#/properties/offer_ids/maxItems",keyword:"maxItems",params:{limit: 256},message:"must NOT have more than 256 items"}];return false;}else {var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate21.errors = [{instancePath:instancePath+"/offer_ids/" + i0,schemaPath:"#/properties/offer_ids/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}}else {validate21.errors = [{instancePath:instancePath+"/offer_ids",schemaPath:"#/properties/offer_ids/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data4 = data.subscription_quota;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data4)){var valid2 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){let data5 = data4[i1];const _errs12 = errors;const _errs13 = errors;if(errors === _errs13){if(data5 && typeof data5 == "object" && !Array.isArray(data5)){const _errs15 = errors;for(const key1 in data5){if(!((((((key1 === "quota_limit") || (key1 === "quota_remaining")) || (key1 === "quota_used")) || (key1 === "resets_at")) || (key1 === "subscription_id")) || (key1 === "unit"))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs15 === errors){if(data5.quota_limit !== undefined){let data6 = data5.quota_limit;const _errs16 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs16){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data6 < -2147483648 || isNaN(data6)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs16 === errors;}else {var valid4 = true;}if(valid4){if(data5.quota_remaining !== undefined){let data7 = data5.quota_remaining;const _errs18 = errors;if(!(((typeof data7 == "number") && (!(data7 % 1) && !isNaN(data7))) && (isFinite(data7)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs18){if((typeof data7 == "number") && (isFinite(data7))){if(data7 > 2147483647 || isNaN(data7)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data7 < -2147483648 || isNaN(data7)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs18 === errors;}else {var valid4 = true;}if(valid4){if(data5.quota_used !== undefined){let data8 = data5.quota_used;const _errs20 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs20){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data8 < -2147483648 || isNaN(data8)){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid4 = _errs20 === errors;}else {var valid4 = true;}if(valid4){if(data5.resets_at !== undefined){const _errs22 = errors;if(errors === _errs22){if(errors === _errs22){if(!(typeof data5.resets_at === "string")){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid4 = _errs22 === errors;}else {var valid4 = true;}if(valid4){if(data5.subscription_id !== undefined){const _errs24 = errors;if(typeof data5.subscription_id !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs24 === errors;}else {var valid4 = true;}if(valid4){if(data5.unit !== undefined){const _errs26 = errors;if(typeof data5.unit !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs26 === errors;}else {var valid4 = true;}}}}}}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_quota/" + i1,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const schema34 = {"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"};const schema47 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const func2 = Object.prototype.hasOwnProperty;const pattern5 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern7 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const schema36 = {"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema43 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema44 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema46 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":8,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema42 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate26(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate26.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate26.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate26.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate26.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func1(data2) > 255){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func1(data2) < 1){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func1(data3) > 255){validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate26.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!((((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE")) || (data4 === "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema41.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 8 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 8},message:"must be <= 8"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate26.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate26.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate26.errors = vErrors;return errors === 0;}validate26.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate25(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate25.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func2.call(schema37.properties, key0))){validate25.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate25.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate25.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate25.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!((((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE")) || (data5 === "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 6 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate25.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!(((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 7 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate25.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate25.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate25.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate25.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate26(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate26.errors : vErrors.concat(validate26.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema44.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func1(data18) > 260){validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data18)){validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate25.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema45.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema46.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate25.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate25.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate25.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate25.errors = vErrors;return errors === 0;}validate25.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.code === undefined) && (missing0 = "code")) || ((data.party === undefined) && (missing0 = "party"))){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(((key0 === "code") || (key0 === "detail")) || (key0 === "party"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.code !== undefined){let data0 = data.code;const _errs2 = errors;if(errors === _errs2){if(typeof data0 === "string"){if(func1(data0) > 64){validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func1(data0) < 1){validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.detail !== undefined){const _errs4 = errors;if(!(validate25(data.detail, {instancePath:instancePath+"/detail",parentData:data,parentDataProperty:"detail",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate25.errors : vErrors.concat(validate25.errors);errors = vErrors.length;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.party !== undefined){let data2 = data.party;const _errs5 = errors;if(errors === _errs5){if(typeof data2 === "string"){if(func1(data2) > 260){validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data2)){validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs5 === errors;}else {var valid0 = true;}}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func2.call(schema34.properties, key0))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.billing_id !== undefined){const _errs2 = errors;if(typeof data.billing_id !== "string"){validate23.errors = [{instancePath:instancePath+"/billing_id",schemaPath:"#/properties/billing_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.cost !== undefined){let data1 = data.cost;const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.amount !== undefined){let data2 = data1.amount;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func1(data2) > 32){validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data2)){validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data1.currency !== undefined){const _errs10 = errors;if(typeof data1.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data1.unit_cost !== undefined){let data4 = data1.unit_cost;const _errs12 = errors;if(errors === _errs12){if(typeof data4 === "string"){if(func1(data4) > 32){validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data4)){validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data5 = data.delivery_method;const _errs14 = errors;const _errs15 = errors;let valid3 = false;const _errs16 = errors;if(errors === _errs16){if(typeof data5 === "string"){if(!pattern7.test(data5)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs16 === errors;valid3 = valid3 || _valid0;const _errs18 = errors;if(typeof data5 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data5 === "DELIVERY_METHOD_DIRECT") || (data5 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data5 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema34.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs18 === errors;valid3 = valid3 || _valid0;const _errs20 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs20){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs20 === errors;valid3 = valid3 || _valid0;if(!valid3){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs15;if(vErrors !== null){if(_errs15){vErrors.length = _errs15;}else {vErrors = null;}}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.denial_reason !== undefined){let data6 = data.denial_reason;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(typeof data6 !== "string"){const err8 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((((((((((((((((((data6 === "DENIAL_REASON_UNSPECIFIED") || (data6 === "DENIAL_REASON_ACCOUNT_INACTIVE")) || (data6 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data6 === "DENIAL_REASON_RATE_LIMITED")) || (data6 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data6 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data6 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data6 === "DENIAL_REASON_OFFER_EXPIRED")) || (data6 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data6 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data6 === "DENIAL_REASON_DELEGATION_INVALID")) || (data6 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data6 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data6 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data6 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data6 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err9 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.denial_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs24 === errors;valid4 = valid4 || _valid1;const _errs26 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){const err10 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs26){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){const err11 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data6 < -2147483648 || isNaN(data6)){const err12 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;if(!valid4){const err13 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs28 = errors;if(errors === _errs28){if(errors === _errs28){if(!(typeof data.expires_at === "string")){validate23.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs30 = errors;if(typeof data.offer_id !== "string"){validate23.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.refusal !== undefined){const _errs32 = errors;if(!(validate24(data.refusal, {instancePath:instancePath+"/refusal",parentData:data,parentDataProperty:"refusal",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting_obligation !== undefined){let data10 = data.reporting_obligation;const _errs33 = errors;const _errs34 = errors;if(errors === _errs34){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){const _errs36 = errors;for(const key2 in data10){if(!((((((key2 === "endpoint") || (key2 === "ext")) || (key2 === "ext_critical")) || (key2 === "required")) || (key2 === "required_fields")) || (key2 === "window"))){validate23.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs36 === errors){if(data10.endpoint !== undefined){const _errs37 = errors;if(typeof data10.endpoint !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs37 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext !== undefined){let data12 = data10.ext;const _errs39 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid6 = _errs39 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext_critical !== undefined){let data13 = data10.ext_critical;const _errs41 = errors;if(errors === _errs41){if(Array.isArray(data13)){var valid7 = true;const len0 = data13.length;for(let i0=0; i0<len0; i0++){const _errs43 = errors;if(typeof data13[i0] !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical/" + i0,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs43 === errors;if(!valid7){break;}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs41 === errors;}else {var valid6 = true;}if(valid6){if(data10.required !== undefined){const _errs45 = errors;if(typeof data10.required !== "boolean"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid6 = _errs45 === errors;}else {var valid6 = true;}if(valid6){if(data10.required_fields !== undefined){let data16 = data10.required_fields;const _errs47 = errors;if(errors === _errs47){if(Array.isArray(data16)){var valid8 = true;const len1 = data16.length;for(let i1=0; i1<len1; i1++){const _errs49 = errors;if(typeof data16[i1] !== "string"){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields/" + i1,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs49 === errors;if(!valid8){break;}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs47 === errors;}else {var valid6 = true;}if(valid6){if(data10.window !== undefined){const _errs51 = errors;if(errors === _errs51){if(errors === _errs51){if(!(typeof data10.window === "string")){validate23.errors = [{instancePath:instancePath+"/reporting_obligation/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid6 = _errs51 === errors;}else {var valid6 = true;}}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs33 === errors;}else {var valid0 = true;}if(valid0){if(data.resource_title !== undefined){const _errs53 = errors;if(typeof data.resource_title !== "string"){validate23.errors = [{instancePath:instancePath+"/resource_title",schemaPath:"#/properties/resource_title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs53 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_mismatches !== undefined){let data20 = data.restriction_mismatches;const _errs55 = errors;if(errors === _errs55){if(Array.isArray(data20)){var valid9 = true;const len2 = data20.length;for(let i2=0; i2<len2; i2++){let data21 = data20[i2];const _errs57 = errors;const _errs58 = errors;let valid10 = false;const _errs59 = errors;if(typeof data21 !== "string"){const err14 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((((data21 === "RESTRICTION_KIND_UNSPECIFIED") || (data21 === "RESTRICTION_KIND_FUNCTION")) || (data21 === "RESTRICTION_KIND_GEOGRAPHY")) || (data21 === "RESTRICTION_KIND_USER_TYPE")) || (data21 === "RESTRICTION_KIND_OTHER"))){const err15 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs59 === errors;valid10 = valid10 || _valid2;const _errs61 = errors;if(!(((typeof data21 == "number") && (!(data21 % 1) && !isNaN(data21))) && (isFinite(data21)))){const err16 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs61){if((typeof data21 == "number") && (isFinite(data21))){if(data21 > 2147483647 || isNaN(data21)){const err17 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data21 < -2147483648 || isNaN(data21)){const err18 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs61 === errors;valid10 = valid10 || _valid2;if(!valid10){const err19 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs58;if(vErrors !== null){if(_errs58){vErrors.length = _errs58;}else {vErrors = null;}}}var valid9 = _errs57 === errors;if(!valid9){break;}}}else {validate23.errors = [{instancePath:instancePath+"/restriction_mismatches",schemaPath:"#/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs55 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_endpoint !== undefined){const _errs63 = errors;if(typeof data.retrieval_endpoint !== "string"){validate23.errors = [{instancePath:instancePath+"/retrieval_endpoint",schemaPath:"#/properties/retrieval_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs63 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs65 = errors;if(typeof data.subscription_id !== "string"){validate23.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs65 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_unit_value !== undefined){let data24 = data.subscription_unit_value;const _errs67 = errors;const _errs68 = errors;if(errors === _errs68){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){const _errs70 = errors;for(const key3 in data24){if(!(((key3 === "amount") || (key3 === "currency")) || (key3 === "unit_cost"))){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs70 === errors){if(data24.amount !== undefined){let data25 = data24.amount;const _errs71 = errors;if(errors === _errs71){if(typeof data25 === "string"){if(func1(data25) > 32){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data25)){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs71 === errors;}else {var valid12 = true;}if(valid12){if(data24.currency !== undefined){const _errs73 = errors;if(typeof data24.currency !== "string"){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs73 === errors;}else {var valid12 = true;}if(valid12){if(data24.unit_cost !== undefined){let data27 = data24.unit_cost;const _errs75 = errors;if(errors === _errs75){if(typeof data27 === "string"){if(func1(data27) > 32){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data27)){validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs75 === errors;}else {var valid12 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs67 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_id !== undefined){const _errs77 = errors;if(typeof data.transaction_id !== "string"){validate23.errors = [{instancePath:instancePath+"/transaction_id",schemaPath:"#/properties/transaction_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs77 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.BrokerTransactionResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!((((((key0 === "exchanges") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "items")) || (key0 === "totals")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.exchanges !== undefined){let data0 = data.exchanges;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){const _errs4 = errors;if(!(validate21(data0[i0], {instancePath:instancePath+"/exchanges/" + i0,parentData:data0,parentDataProperty:i0,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid1 = _errs4 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/exchanges",schemaPath:"#/properties/exchanges/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data2 = data.ext;const _errs5 = errors;if(!(data2 && typeof data2 == "object" && !Array.isArray(data2))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs5 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data3 = data.ext_critical;const _errs7 = errors;if(errors === _errs7){if(Array.isArray(data3)){var valid2 = true;const len1 = data3.length;for(let i1=0; i1<len1; i1++){const _errs9 = errors;if(typeof data3[i1] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i1,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs9 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs7 === errors;}else {var valid0 = true;}if(valid0){if(data.items !== undefined){let data5 = data.items;const _errs11 = errors;if(errors === _errs11){if(Array.isArray(data5)){var valid3 = true;const len2 = data5.length;for(let i2=0; i2<len2; i2++){const _errs13 = errors;if(!(validate23(data5[i2], {instancePath:instancePath+"/items/" + i2,parentData:data5,parentDataProperty:i2,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid3 = _errs13 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/items",schemaPath:"#/properties/items/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs11 === errors;}else {var valid0 = true;}if(valid0){if(data.totals !== undefined){let data7 = data.totals;const _errs14 = errors;if(errors === _errs14){if(Array.isArray(data7)){var valid4 = true;const len3 = data7.length;for(let i3=0; i3<len3; i3++){let data8 = data7[i3];const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data8 && typeof data8 == "object" && !Array.isArray(data8)){const _errs19 = errors;for(const key1 in data8){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate20.errors = [{instancePath:instancePath+"/totals/" + i3,schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data8.amount !== undefined){let data9 = data8.amount;const _errs20 = errors;if(errors === _errs20){if(typeof data9 === "string"){if(func1(data9) > 32){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data9)){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid6 = _errs20 === errors;}else {var valid6 = true;}if(valid6){if(data8.currency !== undefined){const _errs22 = errors;if(typeof data8.currency !== "string"){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs22 === errors;}else {var valid6 = true;}if(valid6){if(data8.unit_cost !== undefined){let data11 = data8.unit_cost;const _errs24 = errors;if(errors === _errs24){if(typeof data11 === "string"){if(func1(data11) > 32){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern5.test(data11)){validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3+"/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid6 = _errs24 === errors;}else {var valid6 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/totals/" + i3,schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid4 = _errs16 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/totals",schemaPath:"#/properties/totals/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs26 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
 
 // ucs2length is ajv's runtime helper, written in: a string's length in code points.
 function ucs2length(str) {
diff --git a/gen/ts/strict/fora.v1.ErrorDetail.ts b/gen/ts/strict/fora.v1.ErrorDetail.ts
index 6039eb49..a8f4fd91 100644
--- a/gen/ts/strict/fora.v1.ErrorDetail.ts
+++ b/gen/ts/strict/fora.v1.ErrorDetail.ts
@@ -4,7 +4,7 @@
 // @ts-nocheck
 import type { StrictMessage } from "./types.ts";
 
-const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.ErrorDetail.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema34 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const schema35 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate21.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate21.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 255){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func2(data2) < 1){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func2(data3) > 255){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema35.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 7 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.ErrorDetail.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema31.properties, key0))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema33.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 5 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 5},message:"must be <= 5"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate20.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 6 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate20.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate20.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate20.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate20.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate21(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func2(data18) > 260){validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data18)){validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate20.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":8,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.ErrorDetail.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema34 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const schema35 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":8,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate21.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate21.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 255){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func2(data2) < 1){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func2(data3) > 255){validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate21.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!((((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE")) || (data4 === "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema35.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 8 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 8},message:"must be <= 8"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const pattern4 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.ErrorDetail.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema31.properties, key0))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!((((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE")) || (data5 === "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema33.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 6 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate20.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!(((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema34.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 7 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate20.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate20.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate20.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate20.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate21(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func2(data18) > 260){validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern4.test(data18)){validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate20.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema40.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate20.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
 
 // ucs2length is ajv's runtime helper, written in: a string's length in code points.
 function ucs2length(str) {
diff --git a/gen/ts/strict/fora.v1.TransactionResponse.ts b/gen/ts/strict/fora.v1.TransactionResponse.ts
index 5d372619..f0149be1 100644
--- a/gen/ts/strict/fora.v1.TransactionResponse.ts
+++ b/gen/ts/strict/fora.v1.TransactionResponse.ts
@@ -4,7 +4,7 @@
 // @ts-nocheck
 import type { StrictMessage } from "./types.ts";
 
-const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.Cost":{"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.ErrorDetail":{"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.TransactionResultItem":{"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"},"fora.v1.UpstreamRefusal":{"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.TransactionResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"items":{"items":{"$ref":"#/$defs/fora.v1.TransactionResultItem"},"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"},"total_cost":{"$ref":"#/$defs/fora.v1.Cost"},"ver":{"default":"","type":"string"}},"type":"object"};const schema47 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const pattern4 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern6 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const schema34 = {"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"],"type":"string"},{"maximum":5,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema42 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema43 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema44 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate24.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 255){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func2(data2) < 1){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func2(data3) > 255){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 7 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate24.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const pattern7 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema35.properties, key0))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema36.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate23.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate23.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!(((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 5 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 5},message:"must be <= 5"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate23.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 6 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate23.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate23.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate23.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate24(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema41.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema42.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func2(data18) > 260){validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern7.test(data18)){validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate23.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema44.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate22(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate22.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.code === undefined) && (missing0 = "code")) || ((data.party === undefined) && (missing0 = "party"))){validate22.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(((key0 === "code") || (key0 === "detail")) || (key0 === "party"))){validate22.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.code !== undefined){let data0 = data.code;const _errs2 = errors;if(errors === _errs2){if(typeof data0 === "string"){if(func2(data0) > 64){validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func2(data0) < 1){validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.detail !== undefined){const _errs4 = errors;if(!(validate23(data.detail, {instancePath:instancePath+"/detail",parentData:data,parentDataProperty:"detail",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.party !== undefined){let data2 = data.party;const _errs5 = errors;if(errors === _errs5){if(typeof data2 === "string"){if(func2(data2) > 260){validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern7.test(data2)){validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs5 === errors;}else {var valid0 = true;}}}}}}else {validate22.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate22.errors = vErrors;return errors === 0;}validate22.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema32.properties, key0))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.billing_id !== undefined){const _errs2 = errors;if(typeof data.billing_id !== "string"){validate21.errors = [{instancePath:instancePath+"/billing_id",schemaPath:"#/properties/billing_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.cost !== undefined){let data1 = data.cost;const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate21.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.amount !== undefined){let data2 = data1.amount;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 32){validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data2)){validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data1.currency !== undefined){const _errs10 = errors;if(typeof data1.currency !== "string"){validate21.errors = [{instancePath:instancePath+"/cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data1.unit_cost !== undefined){let data4 = data1.unit_cost;const _errs12 = errors;if(errors === _errs12){if(typeof data4 === "string"){if(func2(data4) > 32){validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data4)){validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data5 = data.delivery_method;const _errs14 = errors;const _errs15 = errors;let valid3 = false;const _errs16 = errors;if(errors === _errs16){if(typeof data5 === "string"){if(!pattern6.test(data5)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs16 === errors;valid3 = valid3 || _valid0;const _errs18 = errors;if(typeof data5 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data5 === "DELIVERY_METHOD_DIRECT") || (data5 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data5 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema32.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs18 === errors;valid3 = valid3 || _valid0;const _errs20 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs20){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs20 === errors;valid3 = valid3 || _valid0;if(!valid3){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs15;if(vErrors !== null){if(_errs15){vErrors.length = _errs15;}else {vErrors = null;}}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.denial_reason !== undefined){let data6 = data.denial_reason;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(typeof data6 !== "string"){const err8 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((((((((((((((((((data6 === "DENIAL_REASON_UNSPECIFIED") || (data6 === "DENIAL_REASON_ACCOUNT_INACTIVE")) || (data6 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data6 === "DENIAL_REASON_RATE_LIMITED")) || (data6 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data6 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data6 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data6 === "DENIAL_REASON_OFFER_EXPIRED")) || (data6 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data6 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data6 === "DENIAL_REASON_DELEGATION_INVALID")) || (data6 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data6 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data6 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data6 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data6 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err9 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.denial_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs24 === errors;valid4 = valid4 || _valid1;const _errs26 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){const err10 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs26){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){const err11 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data6 < -2147483648 || isNaN(data6)){const err12 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;if(!valid4){const err13 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs28 = errors;if(errors === _errs28){if(errors === _errs28){if(!(typeof data.expires_at === "string")){validate21.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs30 = errors;if(typeof data.offer_id !== "string"){validate21.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.refusal !== undefined){const _errs32 = errors;if(!(validate22(data.refusal, {instancePath:instancePath+"/refusal",parentData:data,parentDataProperty:"refusal",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate22.errors : vErrors.concat(validate22.errors);errors = vErrors.length;}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting_obligation !== undefined){let data10 = data.reporting_obligation;const _errs33 = errors;const _errs34 = errors;if(errors === _errs34){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){const _errs36 = errors;for(const key2 in data10){if(!((((((key2 === "endpoint") || (key2 === "ext")) || (key2 === "ext_critical")) || (key2 === "required")) || (key2 === "required_fields")) || (key2 === "window"))){validate21.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs36 === errors){if(data10.endpoint !== undefined){const _errs37 = errors;if(typeof data10.endpoint !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs37 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext !== undefined){let data12 = data10.ext;const _errs39 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid6 = _errs39 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext_critical !== undefined){let data13 = data10.ext_critical;const _errs41 = errors;if(errors === _errs41){if(Array.isArray(data13)){var valid7 = true;const len0 = data13.length;for(let i0=0; i0<len0; i0++){const _errs43 = errors;if(typeof data13[i0] !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical/" + i0,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs43 === errors;if(!valid7){break;}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs41 === errors;}else {var valid6 = true;}if(valid6){if(data10.required !== undefined){const _errs45 = errors;if(typeof data10.required !== "boolean"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid6 = _errs45 === errors;}else {var valid6 = true;}if(valid6){if(data10.required_fields !== undefined){let data16 = data10.required_fields;const _errs47 = errors;if(errors === _errs47){if(Array.isArray(data16)){var valid8 = true;const len1 = data16.length;for(let i1=0; i1<len1; i1++){const _errs49 = errors;if(typeof data16[i1] !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields/" + i1,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs49 === errors;if(!valid8){break;}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs47 === errors;}else {var valid6 = true;}if(valid6){if(data10.window !== undefined){const _errs51 = errors;if(errors === _errs51){if(errors === _errs51){if(!(typeof data10.window === "string")){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid6 = _errs51 === errors;}else {var valid6 = true;}}}}}}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs33 === errors;}else {var valid0 = true;}if(valid0){if(data.resource_title !== undefined){const _errs53 = errors;if(typeof data.resource_title !== "string"){validate21.errors = [{instancePath:instancePath+"/resource_title",schemaPath:"#/properties/resource_title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs53 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_mismatches !== undefined){let data20 = data.restriction_mismatches;const _errs55 = errors;if(errors === _errs55){if(Array.isArray(data20)){var valid9 = true;const len2 = data20.length;for(let i2=0; i2<len2; i2++){let data21 = data20[i2];const _errs57 = errors;const _errs58 = errors;let valid10 = false;const _errs59 = errors;if(typeof data21 !== "string"){const err14 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((((data21 === "RESTRICTION_KIND_UNSPECIFIED") || (data21 === "RESTRICTION_KIND_FUNCTION")) || (data21 === "RESTRICTION_KIND_GEOGRAPHY")) || (data21 === "RESTRICTION_KIND_USER_TYPE")) || (data21 === "RESTRICTION_KIND_OTHER"))){const err15 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs59 === errors;valid10 = valid10 || _valid2;const _errs61 = errors;if(!(((typeof data21 == "number") && (!(data21 % 1) && !isNaN(data21))) && (isFinite(data21)))){const err16 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs61){if((typeof data21 == "number") && (isFinite(data21))){if(data21 > 2147483647 || isNaN(data21)){const err17 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data21 < -2147483648 || isNaN(data21)){const err18 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs61 === errors;valid10 = valid10 || _valid2;if(!valid10){const err19 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs58;if(vErrors !== null){if(_errs58){vErrors.length = _errs58;}else {vErrors = null;}}}var valid9 = _errs57 === errors;if(!valid9){break;}}}else {validate21.errors = [{instancePath:instancePath+"/restriction_mismatches",schemaPath:"#/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs55 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_endpoint !== undefined){const _errs63 = errors;if(typeof data.retrieval_endpoint !== "string"){validate21.errors = [{instancePath:instancePath+"/retrieval_endpoint",schemaPath:"#/properties/retrieval_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs63 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs65 = errors;if(typeof data.subscription_id !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs65 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_unit_value !== undefined){let data24 = data.subscription_unit_value;const _errs67 = errors;const _errs68 = errors;if(errors === _errs68){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){const _errs70 = errors;for(const key3 in data24){if(!(((key3 === "amount") || (key3 === "currency")) || (key3 === "unit_cost"))){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs70 === errors){if(data24.amount !== undefined){let data25 = data24.amount;const _errs71 = errors;if(errors === _errs71){if(typeof data25 === "string"){if(func2(data25) > 32){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data25)){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs71 === errors;}else {var valid12 = true;}if(valid12){if(data24.currency !== undefined){const _errs73 = errors;if(typeof data24.currency !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs73 === errors;}else {var valid12 = true;}if(valid12){if(data24.unit_cost !== undefined){let data27 = data24.unit_cost;const _errs75 = errors;if(errors === _errs75){if(typeof data27 === "string"){if(func2(data27) > 32){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data27)){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs75 === errors;}else {var valid12 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs67 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_id !== undefined){const _errs77 = errors;if(typeof data.transaction_id !== "string"){validate21.errors = [{instancePath:instancePath+"/transaction_id",schemaPath:"#/properties/transaction_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs77 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.TransactionResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((((key0 === "agent_identity_hash") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "items")) || (key0 === "subscription_quota")) || (key0 === "total_cost")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.agent_identity_hash !== undefined){const _errs2 = errors;if(typeof data.agent_identity_hash !== "string"){validate20.errors = [{instancePath:instancePath+"/agent_identity_hash",schemaPath:"#/properties/agent_identity_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data1 = data.ext;const _errs4 = errors;if(!(data1 && typeof data1 == "object" && !Array.isArray(data1))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data2 = data.ext_critical;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.items !== undefined){let data4 = data.items;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data4)){var valid2 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){const _errs12 = errors;if(!(validate21(data4[i1], {instancePath:instancePath+"/items/" + i1,parentData:data4,parentDataProperty:i1,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/items",schemaPath:"#/properties/items/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data6 = data.subscription_quota;const _errs13 = errors;if(errors === _errs13){if(Array.isArray(data6)){var valid3 = true;const len2 = data6.length;for(let i2=0; i2<len2; i2++){let data7 = data6[i2];const _errs15 = errors;const _errs16 = errors;if(errors === _errs16){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){const _errs18 = errors;for(const key1 in data7){if(!((((((key1 === "quota_limit") || (key1 === "quota_remaining")) || (key1 === "quota_used")) || (key1 === "resets_at")) || (key1 === "subscription_id")) || (key1 === "unit"))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs18 === errors){if(data7.quota_limit !== undefined){let data8 = data7.quota_limit;const _errs19 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs19){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data8 < -2147483648 || isNaN(data8)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs19 === errors;}else {var valid5 = true;}if(valid5){if(data7.quota_remaining !== undefined){let data9 = data7.quota_remaining;const _errs21 = errors;if(!(((typeof data9 == "number") && (!(data9 % 1) && !isNaN(data9))) && (isFinite(data9)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs21){if((typeof data9 == "number") && (isFinite(data9))){if(data9 > 2147483647 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data9 < -2147483648 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs21 === errors;}else {var valid5 = true;}if(valid5){if(data7.quota_used !== undefined){let data10 = data7.quota_used;const _errs23 = errors;if(!(((typeof data10 == "number") && (!(data10 % 1) && !isNaN(data10))) && (isFinite(data10)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs23){if((typeof data10 == "number") && (isFinite(data10))){if(data10 > 2147483647 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data10 < -2147483648 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs23 === errors;}else {var valid5 = true;}if(valid5){if(data7.resets_at !== undefined){const _errs25 = errors;if(errors === _errs25){if(errors === _errs25){if(!(typeof data7.resets_at === "string")){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid5 = _errs25 === errors;}else {var valid5 = true;}if(valid5){if(data7.subscription_id !== undefined){const _errs27 = errors;if(typeof data7.subscription_id !== "string"){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs27 === errors;}else {var valid5 = true;}if(valid5){if(data7.unit !== undefined){const _errs29 = errors;if(typeof data7.unit !== "string"){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs29 === errors;}else {var valid5 = true;}}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid3 = _errs15 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs13 === errors;}else {var valid0 = true;}if(valid0){if(data.total_cost !== undefined){let data14 = data.total_cost;const _errs31 = errors;const _errs32 = errors;if(errors === _errs32){if(data14 && typeof data14 == "object" && !Array.isArray(data14)){const _errs34 = errors;for(const key2 in data14){if(!(((key2 === "amount") || (key2 === "currency")) || (key2 === "unit_cost"))){validate20.errors = [{instancePath:instancePath+"/total_cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs34 === errors){if(data14.amount !== undefined){let data15 = data14.amount;const _errs35 = errors;if(errors === _errs35){if(typeof data15 === "string"){if(func2(data15) > 32){validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data15)){validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid7 = _errs35 === errors;}else {var valid7 = true;}if(valid7){if(data14.currency !== undefined){const _errs37 = errors;if(typeof data14.currency !== "string"){validate20.errors = [{instancePath:instancePath+"/total_cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs37 === errors;}else {var valid7 = true;}if(valid7){if(data14.unit_cost !== undefined){let data17 = data14.unit_cost;const _errs39 = errors;if(errors === _errs39){if(typeof data17 === "string"){if(func2(data17) > 32){validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data17)){validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid7 = _errs39 === errors;}else {var valid7 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs31 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs41 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs41 === errors;}else {var valid0 = true;}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
+const schema31 = {"$defs":{"fora.v1.CatalogRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.Cost":{"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"},"fora.v1.DisputeFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.DomainVerificationFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.ErrorDetail":{"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"},"fora.v1.RegistrationFailure":{"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":8,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RegistrationFieldError":{"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"},"fora.v1.ReportingObligation":{"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"},"fora.v1.RequestAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.RetrievalAuthFailure":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"},"fora.v1.SubscriptionQuotaInfo":{"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"},"fora.v1.TransactionDenial":{"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"},"fora.v1.TransactionResultItem":{"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"},"fora.v1.UpstreamRefusal":{"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"},"fora.v1.UsageReportRejection":{"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"}},"$id":"fora.v1.TransactionResponse.schema.strict.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"agent_identity_hash":{"default":"","type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"items":{"items":{"$ref":"#/$defs/fora.v1.TransactionResultItem"},"type":"array"},"subscription_quota":{"items":{"$ref":"#/$defs/fora.v1.SubscriptionQuotaInfo"},"type":"array"},"total_cost":{"$ref":"#/$defs/fora.v1.Cost"},"ver":{"default":"","type":"string"}},"type":"object"};const schema47 = {"additionalProperties":false,"properties":{"quota_limit":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_remaining":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"quota_used":{"default":0,"maximum":2147483647,"minimum":-2147483648,"type":"integer"},"resets_at":{"format":"date-time","type":"string"},"subscription_id":{"default":"","type":"string"},"unit":{"type":"string"}},"type":"object"};const schema33 = {"additionalProperties":false,"properties":{"amount":{"default":"","maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"},"currency":{"default":"","type":"string"},"unit_cost":{"maxLength":32,"pattern":"^([0-9]+([.][0-9]+)?)?$","type":"string"}},"type":"object"};const schema32 = {"additionalProperties":false,"properties":{"billing_id":{"default":"","type":"string"},"cost":{"$ref":"#/$defs/fora.v1.Cost"},"delivery_method":{"anyOf":[{"pattern":"^DELIVERY_METHOD_UNSPECIFIED$","type":"string"},{"enum":["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}],"default":0},"denial_reason":{"anyOf":[{"enum":["DENIAL_REASON_UNSPECIFIED","DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"expires_at":{"format":"date-time","type":"string"},"offer_id":{"default":"","type":"string"},"refusal":{"$ref":"#/$defs/fora.v1.UpstreamRefusal"},"reporting_obligation":{"$ref":"#/$defs/fora.v1.ReportingObligation"},"resource_title":{"type":"string"},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"},"retrieval_endpoint":{"type":"string"},"subscription_id":{"type":"string"},"subscription_unit_value":{"$ref":"#/$defs/fora.v1.Cost"},"transaction_id":{"default":"","type":"string"}},"type":"object"};const schema45 = {"additionalProperties":false,"properties":{"endpoint":{"type":"string"},"ext":{"type":"object"},"ext_critical":{"items":{"type":"string"},"type":"array"},"required":{"default":false,"type":"boolean"},"required_fields":{"items":{"type":"string"},"type":"array"},"window":{"format":"duration","type":"string"}},"type":"object"};const func1 = Object.prototype.hasOwnProperty;const func2 = ucs2length;const pattern4 = new RegExp("^([0-9]+([.][0-9]+)?)?$", "u");const pattern6 = new RegExp("^DELIVERY_METHOD_UNSPECIFIED$", "u");const schema34 = {"additionalProperties":false,"properties":{"code":{"maxLength":64,"minLength":1,"type":"string"},"detail":{"$ref":"#/$defs/fora.v1.ErrorDetail"},"party":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"}},"required":["code","party"],"type":"object"};const schema35 = {"additionalProperties":false,"properties":{"catalog_rejection":{"$ref":"#/$defs/fora.v1.CatalogRejection"},"dispute_failure":{"$ref":"#/$defs/fora.v1.DisputeFailure"},"domain":{"default":"","type":"string"},"domain_verification_failure":{"$ref":"#/$defs/fora.v1.DomainVerificationFailure"},"message":{"default":"","type":"string"},"metadata":{"additionalProperties":{"type":"string"},"propertyNames":{"type":"string"},"type":"object"},"registration_failure":{"$ref":"#/$defs/fora.v1.RegistrationFailure"},"request_auth_failure":{"$ref":"#/$defs/fora.v1.RequestAuthFailure"},"retrieval_auth_failure":{"$ref":"#/$defs/fora.v1.RetrievalAuthFailure"},"transaction_denial":{"$ref":"#/$defs/fora.v1.TransactionDenial"},"usage_report_rejection":{"$ref":"#/$defs/fora.v1.UsageReportRejection"}},"type":"object"};const schema36 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"],"type":"string"},{"maximum":11,"minimum":1,"type":"integer"}]},"rejected_paths":{"items":{"type":"string"},"type":"array"}},"required":["reason"],"type":"object"};const schema37 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema38 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":7,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema41 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"],"type":"string"},{"maximum":3,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema42 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"],"type":"string"},{"maximum":12,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema43 = {"additionalProperties":false,"properties":{"exchange":{"maxLength":260,"pattern":"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$","type":"string"},"offer_id":{"type":"string"},"reason":{"anyOf":[{"enum":["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":20,"minimum":1,"type":"integer"}]},"restriction_mismatches":{"items":{"anyOf":[{"enum":["RESTRICTION_KIND_UNSPECIFIED","RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"],"type":"string"},{"maximum":2147483647,"minimum":-2147483648,"type":"integer"}]},"type":"array"}},"required":["reason"],"type":"object"};const schema44 = {"additionalProperties":false,"properties":{"reason":{"anyOf":[{"enum":["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":6,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema39 = {"additionalProperties":false,"properties":{"field_errors":{"items":{"$ref":"#/$defs/fora.v1.RegistrationFieldError"},"maxItems":64,"type":"array"},"reason":{"anyOf":[{"enum":["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"],"type":"string"},{"maximum":8,"minimum":1,"type":"integer"}]}},"required":["reason"],"type":"object"};const schema40 = {"additionalProperties":false,"properties":{"error":{"maxLength":255,"minLength":1,"type":"string"},"path":{"default":"","maxLength":255,"type":"string"}},"required":["error"],"type":"object"};function validate24(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate24.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if((data.reason === undefined) && (missing0 = "reason")){validate24.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!((key0 === "field_errors") || (key0 === "reason"))){validate24.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.field_errors !== undefined){let data0 = data.field_errors;const _errs2 = errors;if(errors === _errs2){if(Array.isArray(data0)){if(data0.length > 64){validate24.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/maxItems",keyword:"maxItems",params:{limit: 64},message:"must NOT have more than 64 items"}];return false;}else {var valid1 = true;const len0 = data0.length;for(let i0=0; i0<len0; i0++){let data1 = data0[i0];const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){let missing1;if((data1.error === undefined) && (missing1 = "error")){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs7 = errors;for(const key1 in data1){if(!((key1 === "error") || (key1 === "path"))){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.error !== undefined){let data2 = data1.error;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 255){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}else {if(func2(data2) < 1){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/error",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/error/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs8 === errors;}else {var valid3 = true;}if(valid3){if(data1.path !== undefined){let data3 = data1.path;const _errs10 = errors;if(errors === _errs10){if(typeof data3 === "string"){if(func2(data3) > 255){validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/maxLength",keyword:"maxLength",params:{limit: 255},message:"must NOT have more than 255 characters"}];return false;}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0+"/path",schemaPath:"#/$defs/fora.v1.RegistrationFieldError/properties/path/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid3 = _errs10 === errors;}else {var valid3 = true;}}}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors/" + i0,schemaPath:"#/$defs/fora.v1.RegistrationFieldError/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid1 = _errs4 === errors;if(!valid1){break;}}}}else {validate24.errors = [{instancePath:instancePath+"/field_errors",schemaPath:"#/properties/field_errors/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.reason !== undefined){let data4 = data.reason;const _errs12 = errors;const _errs13 = errors;let valid4 = false;const _errs14 = errors;if(typeof data4 !== "string"){const err0 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!((((((((data4 === "REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED") || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_KEY")) || (data4 === "REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID")) || (data4 === "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED")) || (data4 === "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED")) || (data4 === "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA")) || (data4 === "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE")) || (data4 === "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err1 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema39.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs14 === errors;valid4 = valid4 || _valid0;const _errs16 = errors;if(!(((typeof data4 == "number") && (!(data4 % 1) && !isNaN(data4))) && (isFinite(data4)))){const err2 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs16){if((typeof data4 == "number") && (isFinite(data4))){if(data4 > 8 || isNaN(data4)){const err3 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 8},message:"must be <= 8"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data4 < 1 || isNaN(data4)){const err4 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs16 === errors;valid4 = valid4 || _valid0;if(!valid4){const err5 = {instancePath:instancePath+"/reason",schemaPath:"#/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate24.errors = vErrors;return false;}else {errors = _errs13;if(vErrors !== null){if(_errs13){vErrors.length = _errs13;}else {vErrors = null;}}}var valid0 = _errs12 === errors;}else {var valid0 = true;}}}}}else {validate24.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate24.errors = vErrors;return errors === 0;}validate24.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};const pattern7 = new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$", "u");function validate23(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate23.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema35.properties, key0))){validate23.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.catalog_rejection !== undefined){let data0 = data.catalog_rejection;const _errs2 = errors;const _errs3 = errors;if(errors === _errs3){if(data0 && typeof data0 == "object" && !Array.isArray(data0)){let missing0;if((data0.reason === undefined) && (missing0 = "reason")){validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs5 = errors;for(const key1 in data0){if(!((key1 === "reason") || (key1 === "rejected_paths"))){validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs5 === errors){if(data0.reason !== undefined){let data1 = data0.reason;const _errs6 = errors;const _errs7 = errors;let valid3 = false;const _errs8 = errors;if(typeof data1 !== "string"){const err0 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}if(!(((((((((((data1 === "CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR") || (data1 === "CATALOG_REJECTION_REASON_TENANT_MISMATCH")) || (data1 === "CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED")) || (data1 === "CATALOG_REJECTION_REASON_SIGNATURE_INVALID")) || (data1 === "CATALOG_REJECTION_REASON_MALFORMED_ENTRY")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN")) || (data1 === "CATALOG_REJECTION_REASON_QUOTA_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED")) || (data1 === "CATALOG_REJECTION_REASON_URI_UNAVAILABLE")) || (data1 === "CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION")) || (data1 === "CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"))){const err1 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema36.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}var _valid0 = _errs8 === errors;valid3 = valid3 || _valid0;const _errs10 = errors;if(!(((typeof data1 == "number") && (!(data1 % 1) && !isNaN(data1))) && (isFinite(data1)))){const err2 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(errors === _errs10){if((typeof data1 == "number") && (isFinite(data1))){if(data1 > 11 || isNaN(data1)){const err3 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 11},message:"must be <= 11"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}else {if(data1 < 1 || isNaN(data1)){const err4 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}}}}var _valid0 = _errs10 === errors;valid3 = valid3 || _valid0;if(!valid3){const err5 = {instancePath:instancePath+"/catalog_rejection/reason",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs7;if(vErrors !== null){if(_errs7){vErrors.length = _errs7;}else {vErrors = null;}}}var valid2 = _errs6 === errors;}else {var valid2 = true;}if(valid2){if(data0.rejected_paths !== undefined){let data2 = data0.rejected_paths;const _errs12 = errors;if(errors === _errs12){if(Array.isArray(data2)){var valid4 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs14 = errors;if(typeof data2[i0] !== "string"){validate23.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths/" + i0,schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid4 = _errs14 === errors;if(!valid4){break;}}}else {validate23.errors = [{instancePath:instancePath+"/catalog_rejection/rejected_paths",schemaPath:"#/$defs/fora.v1.CatalogRejection/properties/rejected_paths/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate23.errors = [{instancePath:instancePath+"/catalog_rejection",schemaPath:"#/$defs/fora.v1.CatalogRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.dispute_failure !== undefined){let data4 = data.dispute_failure;const _errs16 = errors;const _errs17 = errors;if(errors === _errs17){if(data4 && typeof data4 == "object" && !Array.isArray(data4)){let missing1;if((data4.reason === undefined) && (missing1 = "reason")){validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/required",keyword:"required",params:{missingProperty: missing1},message:"must have required property '"+missing1+"'"}];return false;}else {const _errs19 = errors;for(const key2 in data4){if(!(key2 === "reason")){validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs19 === errors){if(data4.reason !== undefined){let data5 = data4.reason;const _errs21 = errors;let valid7 = false;const _errs22 = errors;if(typeof data5 !== "string"){const err6 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}if(!((((((data5 === "DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND") || (data5 === "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED")) || (data5 === "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED")) || (data5 === "DISPUTE_FAILURE_REASON_DUPLICATE")) || (data5 === "DISPUTE_FAILURE_REASON_INELIGIBLE")) || (data5 === "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err7 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema37.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;}var _valid1 = _errs22 === errors;valid7 = valid7 || _valid1;const _errs24 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err8 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(errors === _errs24){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 6 || isNaN(data5)){const err9 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}else {if(data5 < 1 || isNaN(data5)){const err10 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}}}}var _valid1 = _errs24 === errors;valid7 = valid7 || _valid1;if(!valid7){const err11 = {instancePath:instancePath+"/dispute_failure/reason",schemaPath:"#/$defs/fora.v1.DisputeFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs21;if(vErrors !== null){if(_errs21){vErrors.length = _errs21;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/dispute_failure",schemaPath:"#/$defs/fora.v1.DisputeFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs16 === errors;}else {var valid0 = true;}if(valid0){if(data.domain !== undefined){const _errs26 = errors;if(typeof data.domain !== "string"){validate23.errors = [{instancePath:instancePath+"/domain",schemaPath:"#/properties/domain/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs26 === errors;}else {var valid0 = true;}if(valid0){if(data.domain_verification_failure !== undefined){let data7 = data.domain_verification_failure;const _errs28 = errors;const _errs29 = errors;if(errors === _errs29){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){let missing2;if((data7.reason === undefined) && (missing2 = "reason")){validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/required",keyword:"required",params:{missingProperty: missing2},message:"must have required property '"+missing2+"'"}];return false;}else {const _errs31 = errors;for(const key3 in data7){if(!(key3 === "reason")){validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs31 === errors){if(data7.reason !== undefined){let data8 = data7.reason;const _errs33 = errors;let valid10 = false;const _errs34 = errors;if(typeof data8 !== "string"){const err12 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}if(!(((((((data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND") || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED")) || (data8 === "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err13 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema38.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;}var _valid2 = _errs34 === errors;valid10 = valid10 || _valid2;const _errs36 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){const err14 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(errors === _errs36){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 7 || isNaN(data8)){const err15 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 7},message:"must be <= 7"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}else {if(data8 < 1 || isNaN(data8)){const err16 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}}}}var _valid2 = _errs36 === errors;valid10 = valid10 || _valid2;if(!valid10){const err17 = {instancePath:instancePath+"/domain_verification_failure/reason",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs33;if(vErrors !== null){if(_errs33){vErrors.length = _errs33;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/domain_verification_failure",schemaPath:"#/$defs/fora.v1.DomainVerificationFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.message !== undefined){const _errs38 = errors;if(typeof data.message !== "string"){validate23.errors = [{instancePath:instancePath+"/message",schemaPath:"#/properties/message/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs38 === errors;}else {var valid0 = true;}if(valid0){if(data.metadata !== undefined){let data10 = data.metadata;const _errs40 = errors;if(errors === _errs40){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){for(const key4 in data10){const _errs42 = errors;if(typeof key4 !== "string"){const err18 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames/type",keyword:"type",params:{type: "string"},message:"must be string",propertyName:key4};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}var valid11 = _errs42 === errors;if(!valid11){const err19 = {instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/propertyNames",keyword:"propertyNames",params:{propertyName: key4},message:"property name must be valid"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate23.errors = vErrors;return false;break;}}if(valid11){for(const key5 in data10){const _errs45 = errors;if(typeof data10[key5] !== "string"){validate23.errors = [{instancePath:instancePath+"/metadata/" + key5.replace(/~/g, "~0").replace(/\//g, "~1"),schemaPath:"#/properties/metadata/additionalProperties/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs45 === errors;if(!valid12){break;}}}}else {validate23.errors = [{instancePath:instancePath+"/metadata",schemaPath:"#/properties/metadata/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs40 === errors;}else {var valid0 = true;}if(valid0){if(data.registration_failure !== undefined){const _errs47 = errors;if(!(validate24(data.registration_failure, {instancePath:instancePath+"/registration_failure",parentData:data,parentDataProperty:"registration_failure",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate24.errors : vErrors.concat(validate24.errors);errors = vErrors.length;}var valid0 = _errs47 === errors;}else {var valid0 = true;}if(valid0){if(data.request_auth_failure !== undefined){let data13 = data.request_auth_failure;const _errs48 = errors;const _errs49 = errors;if(errors === _errs49){if(data13 && typeof data13 == "object" && !Array.isArray(data13)){let missing3;if((data13.reason === undefined) && (missing3 = "reason")){validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/required",keyword:"required",params:{missingProperty: missing3},message:"must have required property '"+missing3+"'"}];return false;}else {const _errs51 = errors;for(const key6 in data13){if(!(key6 === "reason")){validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key6},message:"must NOT have additional properties"}];return false;break;}}if(_errs51 === errors){if(data13.reason !== undefined){let data14 = data13.reason;const _errs53 = errors;let valid15 = false;const _errs54 = errors;if(typeof data14 !== "string"){const err20 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err20];}else {vErrors.push(err20);}errors++;}if(!(((data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING") || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID")) || (data14 === "REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"))){const err21 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema41.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err21];}else {vErrors.push(err21);}errors++;}var _valid3 = _errs54 === errors;valid15 = valid15 || _valid3;const _errs56 = errors;if(!(((typeof data14 == "number") && (!(data14 % 1) && !isNaN(data14))) && (isFinite(data14)))){const err22 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err22];}else {vErrors.push(err22);}errors++;}if(errors === _errs56){if((typeof data14 == "number") && (isFinite(data14))){if(data14 > 3 || isNaN(data14)){const err23 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 3},message:"must be <= 3"};if(vErrors === null){vErrors = [err23];}else {vErrors.push(err23);}errors++;}else {if(data14 < 1 || isNaN(data14)){const err24 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err24];}else {vErrors.push(err24);}errors++;}}}}var _valid3 = _errs56 === errors;valid15 = valid15 || _valid3;if(!valid15){const err25 = {instancePath:instancePath+"/request_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err25];}else {vErrors.push(err25);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs53;if(vErrors !== null){if(_errs53){vErrors.length = _errs53;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/request_auth_failure",schemaPath:"#/$defs/fora.v1.RequestAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs48 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_auth_failure !== undefined){let data15 = data.retrieval_auth_failure;const _errs58 = errors;const _errs59 = errors;if(errors === _errs59){if(data15 && typeof data15 == "object" && !Array.isArray(data15)){let missing4;if((data15.reason === undefined) && (missing4 = "reason")){validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/required",keyword:"required",params:{missingProperty: missing4},message:"must have required property '"+missing4+"'"}];return false;}else {const _errs61 = errors;for(const key7 in data15){if(!(key7 === "reason")){validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key7},message:"must NOT have additional properties"}];return false;break;}}if(_errs61 === errors){if(data15.reason !== undefined){let data16 = data15.reason;const _errs63 = errors;let valid18 = false;const _errs64 = errors;if(typeof data16 !== "string"){const err26 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err26];}else {vErrors.push(err26);}errors++;}if(!((((((((((((data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED") || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED")) || (data16 === "RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"))){const err27 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema42.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err27];}else {vErrors.push(err27);}errors++;}var _valid4 = _errs64 === errors;valid18 = valid18 || _valid4;const _errs66 = errors;if(!(((typeof data16 == "number") && (!(data16 % 1) && !isNaN(data16))) && (isFinite(data16)))){const err28 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err28];}else {vErrors.push(err28);}errors++;}if(errors === _errs66){if((typeof data16 == "number") && (isFinite(data16))){if(data16 > 12 || isNaN(data16)){const err29 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 12},message:"must be <= 12"};if(vErrors === null){vErrors = [err29];}else {vErrors.push(err29);}errors++;}else {if(data16 < 1 || isNaN(data16)){const err30 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err30];}else {vErrors.push(err30);}errors++;}}}}var _valid4 = _errs66 === errors;valid18 = valid18 || _valid4;if(!valid18){const err31 = {instancePath:instancePath+"/retrieval_auth_failure/reason",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err31];}else {vErrors.push(err31);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs63;if(vErrors !== null){if(_errs63){vErrors.length = _errs63;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/retrieval_auth_failure",schemaPath:"#/$defs/fora.v1.RetrievalAuthFailure/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs58 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_denial !== undefined){let data17 = data.transaction_denial;const _errs68 = errors;const _errs69 = errors;if(errors === _errs69){if(data17 && typeof data17 == "object" && !Array.isArray(data17)){let missing5;if((data17.reason === undefined) && (missing5 = "reason")){validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/required",keyword:"required",params:{missingProperty: missing5},message:"must have required property '"+missing5+"'"}];return false;}else {const _errs71 = errors;for(const key8 in data17){if(!((((key8 === "exchange") || (key8 === "offer_id")) || (key8 === "reason")) || (key8 === "restriction_mismatches"))){validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key8},message:"must NOT have additional properties"}];return false;break;}}if(_errs71 === errors){if(data17.exchange !== undefined){let data18 = data17.exchange;const _errs72 = errors;if(errors === _errs72){if(typeof data18 === "string"){if(func2(data18) > 260){validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern7.test(data18)){validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial/exchange",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/exchange/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid20 = _errs72 === errors;}else {var valid20 = true;}if(valid20){if(data17.offer_id !== undefined){const _errs74 = errors;if(typeof data17.offer_id !== "string"){validate23.errors = [{instancePath:instancePath+"/transaction_denial/offer_id",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid20 = _errs74 === errors;}else {var valid20 = true;}if(valid20){if(data17.reason !== undefined){let data20 = data17.reason;const _errs76 = errors;const _errs77 = errors;let valid21 = false;const _errs78 = errors;if(typeof data20 !== "string"){const err32 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err32];}else {vErrors.push(err32);}errors++;}if(!((((((((((((((((((((data20 === "DENIAL_REASON_ACCOUNT_INACTIVE") || (data20 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data20 === "DENIAL_REASON_RATE_LIMITED")) || (data20 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data20 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data20 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data20 === "DENIAL_REASON_OFFER_EXPIRED")) || (data20 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data20 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data20 === "DENIAL_REASON_DELEGATION_INVALID")) || (data20 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data20 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data20 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data20 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data20 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data20 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data20 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err33 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err33];}else {vErrors.push(err33);}errors++;}var _valid5 = _errs78 === errors;valid21 = valid21 || _valid5;const _errs80 = errors;if(!(((typeof data20 == "number") && (!(data20 % 1) && !isNaN(data20))) && (isFinite(data20)))){const err34 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err34];}else {vErrors.push(err34);}errors++;}if(errors === _errs80){if((typeof data20 == "number") && (isFinite(data20))){if(data20 > 20 || isNaN(data20)){const err35 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 20},message:"must be <= 20"};if(vErrors === null){vErrors = [err35];}else {vErrors.push(err35);}errors++;}else {if(data20 < 1 || isNaN(data20)){const err36 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err36];}else {vErrors.push(err36);}errors++;}}}}var _valid5 = _errs80 === errors;valid21 = valid21 || _valid5;if(!valid21){const err37 = {instancePath:instancePath+"/transaction_denial/reason",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err37];}else {vErrors.push(err37);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs77;if(vErrors !== null){if(_errs77){vErrors.length = _errs77;}else {vErrors = null;}}}var valid20 = _errs76 === errors;}else {var valid20 = true;}if(valid20){if(data17.restriction_mismatches !== undefined){let data21 = data17.restriction_mismatches;const _errs82 = errors;if(errors === _errs82){if(Array.isArray(data21)){var valid22 = true;const len1 = data21.length;for(let i1=0; i1<len1; i1++){let data22 = data21[i1];const _errs84 = errors;const _errs85 = errors;let valid23 = false;const _errs86 = errors;if(typeof data22 !== "string"){const err38 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err38];}else {vErrors.push(err38);}errors++;}if(!(((((data22 === "RESTRICTION_KIND_UNSPECIFIED") || (data22 === "RESTRICTION_KIND_FUNCTION")) || (data22 === "RESTRICTION_KIND_GEOGRAPHY")) || (data22 === "RESTRICTION_KIND_USER_TYPE")) || (data22 === "RESTRICTION_KIND_OTHER"))){const err39 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema43.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err39];}else {vErrors.push(err39);}errors++;}var _valid6 = _errs86 === errors;valid23 = valid23 || _valid6;const _errs88 = errors;if(!(((typeof data22 == "number") && (!(data22 % 1) && !isNaN(data22))) && (isFinite(data22)))){const err40 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err40];}else {vErrors.push(err40);}errors++;}if(errors === _errs88){if((typeof data22 == "number") && (isFinite(data22))){if(data22 > 2147483647 || isNaN(data22)){const err41 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err41];}else {vErrors.push(err41);}errors++;}else {if(data22 < -2147483648 || isNaN(data22)){const err42 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err42];}else {vErrors.push(err42);}errors++;}}}}var _valid6 = _errs88 === errors;valid23 = valid23 || _valid6;if(!valid23){const err43 = {instancePath:instancePath+"/transaction_denial/restriction_mismatches/" + i1,schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err43];}else {vErrors.push(err43);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs85;if(vErrors !== null){if(_errs85){vErrors.length = _errs85;}else {vErrors = null;}}}var valid22 = _errs84 === errors;if(!valid22){break;}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial/restriction_mismatches",schemaPath:"#/$defs/fora.v1.TransactionDenial/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid20 = _errs82 === errors;}else {var valid20 = true;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/transaction_denial",schemaPath:"#/$defs/fora.v1.TransactionDenial/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs68 === errors;}else {var valid0 = true;}if(valid0){if(data.usage_report_rejection !== undefined){let data23 = data.usage_report_rejection;const _errs90 = errors;const _errs91 = errors;if(errors === _errs91){if(data23 && typeof data23 == "object" && !Array.isArray(data23)){let missing6;if((data23.reason === undefined) && (missing6 = "reason")){validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/required",keyword:"required",params:{missingProperty: missing6},message:"must have required property '"+missing6+"'"}];return false;}else {const _errs93 = errors;for(const key9 in data23){if(!(key9 === "reason")){validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key9},message:"must NOT have additional properties"}];return false;break;}}if(_errs93 === errors){if(data23.reason !== undefined){let data24 = data23.reason;const _errs95 = errors;let valid26 = false;const _errs96 = errors;if(typeof data24 !== "string"){const err44 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err44];}else {vErrors.push(err44);}errors++;}if(!((((((data24 === "USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND") || (data24 === "USAGE_REPORT_REJECTION_REASON_DUPLICATE")) || (data24 === "USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS")) || (data24 === "USAGE_REPORT_REJECTION_REASON_MALFORMED")) || (data24 === "USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err45 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema44.properties.reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err45];}else {vErrors.push(err45);}errors++;}var _valid7 = _errs96 === errors;valid26 = valid26 || _valid7;const _errs98 = errors;if(!(((typeof data24 == "number") && (!(data24 % 1) && !isNaN(data24))) && (isFinite(data24)))){const err46 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err46];}else {vErrors.push(err46);}errors++;}if(errors === _errs98){if((typeof data24 == "number") && (isFinite(data24))){if(data24 > 6 || isNaN(data24)){const err47 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 6},message:"must be <= 6"};if(vErrors === null){vErrors = [err47];}else {vErrors.push(err47);}errors++;}else {if(data24 < 1 || isNaN(data24)){const err48 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: 1},message:"must be >= 1"};if(vErrors === null){vErrors = [err48];}else {vErrors.push(err48);}errors++;}}}}var _valid7 = _errs98 === errors;valid26 = valid26 || _valid7;if(!valid26){const err49 = {instancePath:instancePath+"/usage_report_rejection/reason",schemaPath:"#/$defs/fora.v1.UsageReportRejection/properties/reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err49];}else {vErrors.push(err49);}errors++;validate23.errors = vErrors;return false;}else {errors = _errs95;if(vErrors !== null){if(_errs95){vErrors.length = _errs95;}else {vErrors = null;}}}}}}}else {validate23.errors = [{instancePath:instancePath+"/usage_report_rejection",schemaPath:"#/$defs/fora.v1.UsageReportRejection/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs90 === errors;}else {var valid0 = true;}}}}}}}}}}}}}else {validate23.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate23.errors = vErrors;return errors === 0;}validate23.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate22(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate22.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){let missing0;if(((data.code === undefined) && (missing0 = "code")) || ((data.party === undefined) && (missing0 = "party"))){validate22.errors = [{instancePath,schemaPath:"#/required",keyword:"required",params:{missingProperty: missing0},message:"must have required property '"+missing0+"'"}];return false;}else {const _errs1 = errors;for(const key0 in data){if(!(((key0 === "code") || (key0 === "detail")) || (key0 === "party"))){validate22.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.code !== undefined){let data0 = data.code;const _errs2 = errors;if(errors === _errs2){if(typeof data0 === "string"){if(func2(data0) > 64){validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/maxLength",keyword:"maxLength",params:{limit: 64},message:"must NOT have more than 64 characters"}];return false;}else {if(func2(data0) < 1){validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/minLength",keyword:"minLength",params:{limit: 1},message:"must NOT have fewer than 1 characters"}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/code",schemaPath:"#/properties/code/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.detail !== undefined){const _errs4 = errors;if(!(validate23(data.detail, {instancePath:instancePath+"/detail",parentData:data,parentDataProperty:"detail",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate23.errors : vErrors.concat(validate23.errors);errors = vErrors.length;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.party !== undefined){let data2 = data.party;const _errs5 = errors;if(errors === _errs5){if(typeof data2 === "string"){if(func2(data2) > 260){validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/maxLength",keyword:"maxLength",params:{limit: 260},message:"must NOT have more than 260 characters"}];return false;}else {if(!pattern7.test(data2)){validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/pattern",keyword:"pattern",params:{pattern: "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"},message:"must match pattern \""+"^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$"+"\""}];return false;}}}else {validate22.errors = [{instancePath:instancePath+"/party",schemaPath:"#/properties/party/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid0 = _errs5 === errors;}else {var valid0 = true;}}}}}}else {validate22.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate22.errors = vErrors;return errors === 0;}validate22.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate21(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){let vErrors = null;let errors = 0;const evaluated0 = validate21.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(func1.call(schema32.properties, key0))){validate21.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.billing_id !== undefined){const _errs2 = errors;if(typeof data.billing_id !== "string"){validate21.errors = [{instancePath:instancePath+"/billing_id",schemaPath:"#/properties/billing_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.cost !== undefined){let data1 = data.cost;const _errs4 = errors;const _errs5 = errors;if(errors === _errs5){if(data1 && typeof data1 == "object" && !Array.isArray(data1)){const _errs7 = errors;for(const key1 in data1){if(!(((key1 === "amount") || (key1 === "currency")) || (key1 === "unit_cost"))){validate21.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs7 === errors){if(data1.amount !== undefined){let data2 = data1.amount;const _errs8 = errors;if(errors === _errs8){if(typeof data2 === "string"){if(func2(data2) > 32){validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data2)){validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs8 === errors;}else {var valid2 = true;}if(valid2){if(data1.currency !== undefined){const _errs10 = errors;if(typeof data1.currency !== "string"){validate21.errors = [{instancePath:instancePath+"/cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid2 = _errs10 === errors;}else {var valid2 = true;}if(valid2){if(data1.unit_cost !== undefined){let data4 = data1.unit_cost;const _errs12 = errors;if(errors === _errs12){if(typeof data4 === "string"){if(func2(data4) > 32){validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data4)){validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid2 = _errs12 === errors;}else {var valid2 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.delivery_method !== undefined){let data5 = data.delivery_method;const _errs14 = errors;const _errs15 = errors;let valid3 = false;const _errs16 = errors;if(errors === _errs16){if(typeof data5 === "string"){if(!pattern6.test(data5)){const err0 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/pattern",keyword:"pattern",params:{pattern: "^DELIVERY_METHOD_UNSPECIFIED$"},message:"must match pattern \""+"^DELIVERY_METHOD_UNSPECIFIED$"+"\""};if(vErrors === null){vErrors = [err0];}else {vErrors.push(err0);}errors++;}}else {const err1 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err1];}else {vErrors.push(err1);}errors++;}}var _valid0 = _errs16 === errors;valid3 = valid3 || _valid0;const _errs18 = errors;if(typeof data5 !== "string"){const err2 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err2];}else {vErrors.push(err2);}errors++;}if(!(((data5 === "DELIVERY_METHOD_DIRECT") || (data5 === "DELIVERY_METHOD_INSTRUCTIONS")) || (data5 === "DELIVERY_METHOD_STREAMING"))){const err3 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/1/enum",keyword:"enum",params:{allowedValues: schema32.properties.delivery_method.anyOf[1].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err3];}else {vErrors.push(err3);}errors++;}var _valid0 = _errs18 === errors;valid3 = valid3 || _valid0;const _errs20 = errors;if(!(((typeof data5 == "number") && (!(data5 % 1) && !isNaN(data5))) && (isFinite(data5)))){const err4 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err4];}else {vErrors.push(err4);}errors++;}if(errors === _errs20){if((typeof data5 == "number") && (isFinite(data5))){if(data5 > 2147483647 || isNaN(data5)){const err5 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err5];}else {vErrors.push(err5);}errors++;}else {if(data5 < -2147483648 || isNaN(data5)){const err6 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf/2/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err6];}else {vErrors.push(err6);}errors++;}}}}var _valid0 = _errs20 === errors;valid3 = valid3 || _valid0;if(!valid3){const err7 = {instancePath:instancePath+"/delivery_method",schemaPath:"#/properties/delivery_method/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err7];}else {vErrors.push(err7);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs15;if(vErrors !== null){if(_errs15){vErrors.length = _errs15;}else {vErrors = null;}}}var valid0 = _errs14 === errors;}else {var valid0 = true;}if(valid0){if(data.denial_reason !== undefined){let data6 = data.denial_reason;const _errs22 = errors;const _errs23 = errors;let valid4 = false;const _errs24 = errors;if(typeof data6 !== "string"){const err8 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err8];}else {vErrors.push(err8);}errors++;}if(!(((((((((((((((((((((data6 === "DENIAL_REASON_UNSPECIFIED") || (data6 === "DENIAL_REASON_ACCOUNT_INACTIVE")) || (data6 === "DENIAL_REASON_INSUFFICIENT_BALANCE")) || (data6 === "DENIAL_REASON_RATE_LIMITED")) || (data6 === "DENIAL_REASON_CONTENT_UNAVAILABLE")) || (data6 === "DENIAL_REASON_RESTRICTION_NOT_SATISFIED")) || (data6 === "DENIAL_REASON_REPORTING_OVERDUE")) || (data6 === "DENIAL_REASON_OFFER_EXPIRED")) || (data6 === "DENIAL_REASON_SIGNATURE_INVALID")) || (data6 === "DENIAL_REASON_QUOTA_EXCEEDED")) || (data6 === "DENIAL_REASON_DELEGATION_INVALID")) || (data6 === "DENIAL_REASON_SCOPE_INSUFFICIENT")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MISSING")) || (data6 === "DENIAL_REASON_ENTITLEMENT_MALFORMED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_EXPIRED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_WRONG_BUYER")) || (data6 === "DENIAL_REASON_SUBSCRIPTION_LAPSED")) || (data6 === "DENIAL_REASON_ENTITLEMENT_NOT_GRANTED")) || (data6 === "DENIAL_REASON_ACCOUNT_NOT_REGISTERED")) || (data6 === "DENIAL_REASON_RELAY_NOT_ACCEPTED")) || (data6 === "DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"))){const err9 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.denial_reason.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err9];}else {vErrors.push(err9);}errors++;}var _valid1 = _errs24 === errors;valid4 = valid4 || _valid1;const _errs26 = errors;if(!(((typeof data6 == "number") && (!(data6 % 1) && !isNaN(data6))) && (isFinite(data6)))){const err10 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err10];}else {vErrors.push(err10);}errors++;}if(errors === _errs26){if((typeof data6 == "number") && (isFinite(data6))){if(data6 > 2147483647 || isNaN(data6)){const err11 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err11];}else {vErrors.push(err11);}errors++;}else {if(data6 < -2147483648 || isNaN(data6)){const err12 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err12];}else {vErrors.push(err12);}errors++;}}}}var _valid1 = _errs26 === errors;valid4 = valid4 || _valid1;if(!valid4){const err13 = {instancePath:instancePath+"/denial_reason",schemaPath:"#/properties/denial_reason/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err13];}else {vErrors.push(err13);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs23;if(vErrors !== null){if(_errs23){vErrors.length = _errs23;}else {vErrors = null;}}}var valid0 = _errs22 === errors;}else {var valid0 = true;}if(valid0){if(data.expires_at !== undefined){const _errs28 = errors;if(errors === _errs28){if(errors === _errs28){if(!(typeof data.expires_at === "string")){validate21.errors = [{instancePath:instancePath+"/expires_at",schemaPath:"#/properties/expires_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid0 = _errs28 === errors;}else {var valid0 = true;}if(valid0){if(data.offer_id !== undefined){const _errs30 = errors;if(typeof data.offer_id !== "string"){validate21.errors = [{instancePath:instancePath+"/offer_id",schemaPath:"#/properties/offer_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs30 === errors;}else {var valid0 = true;}if(valid0){if(data.refusal !== undefined){const _errs32 = errors;if(!(validate22(data.refusal, {instancePath:instancePath+"/refusal",parentData:data,parentDataProperty:"refusal",rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate22.errors : vErrors.concat(validate22.errors);errors = vErrors.length;}var valid0 = _errs32 === errors;}else {var valid0 = true;}if(valid0){if(data.reporting_obligation !== undefined){let data10 = data.reporting_obligation;const _errs33 = errors;const _errs34 = errors;if(errors === _errs34){if(data10 && typeof data10 == "object" && !Array.isArray(data10)){const _errs36 = errors;for(const key2 in data10){if(!((((((key2 === "endpoint") || (key2 === "ext")) || (key2 === "ext_critical")) || (key2 === "required")) || (key2 === "required_fields")) || (key2 === "window"))){validate21.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs36 === errors){if(data10.endpoint !== undefined){const _errs37 = errors;if(typeof data10.endpoint !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/endpoint",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid6 = _errs37 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext !== undefined){let data12 = data10.ext;const _errs39 = errors;if(!(data12 && typeof data12 == "object" && !Array.isArray(data12))){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid6 = _errs39 === errors;}else {var valid6 = true;}if(valid6){if(data10.ext_critical !== undefined){let data13 = data10.ext_critical;const _errs41 = errors;if(errors === _errs41){if(Array.isArray(data13)){var valid7 = true;const len0 = data13.length;for(let i0=0; i0<len0; i0++){const _errs43 = errors;if(typeof data13[i0] !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical/" + i0,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs43 === errors;if(!valid7){break;}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation/ext_critical",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs41 === errors;}else {var valid6 = true;}if(valid6){if(data10.required !== undefined){const _errs45 = errors;if(typeof data10.required !== "boolean"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required/type",keyword:"type",params:{type: "boolean"},message:"must be boolean"}];return false;}var valid6 = _errs45 === errors;}else {var valid6 = true;}if(valid6){if(data10.required_fields !== undefined){let data16 = data10.required_fields;const _errs47 = errors;if(errors === _errs47){if(Array.isArray(data16)){var valid8 = true;const len1 = data16.length;for(let i1=0; i1<len1; i1++){const _errs49 = errors;if(typeof data16[i1] !== "string"){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields/" + i1,schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid8 = _errs49 === errors;if(!valid8){break;}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation/required_fields",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/required_fields/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid6 = _errs47 === errors;}else {var valid6 = true;}if(valid6){if(data10.window !== undefined){const _errs51 = errors;if(errors === _errs51){if(errors === _errs51){if(!(typeof data10.window === "string")){validate21.errors = [{instancePath:instancePath+"/reporting_obligation/window",schemaPath:"#/$defs/fora.v1.ReportingObligation/properties/window/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid6 = _errs51 === errors;}else {var valid6 = true;}}}}}}}}else {validate21.errors = [{instancePath:instancePath+"/reporting_obligation",schemaPath:"#/$defs/fora.v1.ReportingObligation/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs33 === errors;}else {var valid0 = true;}if(valid0){if(data.resource_title !== undefined){const _errs53 = errors;if(typeof data.resource_title !== "string"){validate21.errors = [{instancePath:instancePath+"/resource_title",schemaPath:"#/properties/resource_title/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs53 === errors;}else {var valid0 = true;}if(valid0){if(data.restriction_mismatches !== undefined){let data20 = data.restriction_mismatches;const _errs55 = errors;if(errors === _errs55){if(Array.isArray(data20)){var valid9 = true;const len2 = data20.length;for(let i2=0; i2<len2; i2++){let data21 = data20[i2];const _errs57 = errors;const _errs58 = errors;let valid10 = false;const _errs59 = errors;if(typeof data21 !== "string"){const err14 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/type",keyword:"type",params:{type: "string"},message:"must be string"};if(vErrors === null){vErrors = [err14];}else {vErrors.push(err14);}errors++;}if(!(((((data21 === "RESTRICTION_KIND_UNSPECIFIED") || (data21 === "RESTRICTION_KIND_FUNCTION")) || (data21 === "RESTRICTION_KIND_GEOGRAPHY")) || (data21 === "RESTRICTION_KIND_USER_TYPE")) || (data21 === "RESTRICTION_KIND_OTHER"))){const err15 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/0/enum",keyword:"enum",params:{allowedValues: schema32.properties.restriction_mismatches.items.anyOf[0].enum},message:"must be equal to one of the allowed values"};if(vErrors === null){vErrors = [err15];}else {vErrors.push(err15);}errors++;}var _valid2 = _errs59 === errors;valid10 = valid10 || _valid2;const _errs61 = errors;if(!(((typeof data21 == "number") && (!(data21 % 1) && !isNaN(data21))) && (isFinite(data21)))){const err16 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/type",keyword:"type",params:{type: "integer"},message:"must be integer"};if(vErrors === null){vErrors = [err16];}else {vErrors.push(err16);}errors++;}if(errors === _errs61){if((typeof data21 == "number") && (isFinite(data21))){if(data21 > 2147483647 || isNaN(data21)){const err17 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"};if(vErrors === null){vErrors = [err17];}else {vErrors.push(err17);}errors++;}else {if(data21 < -2147483648 || isNaN(data21)){const err18 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf/1/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"};if(vErrors === null){vErrors = [err18];}else {vErrors.push(err18);}errors++;}}}}var _valid2 = _errs61 === errors;valid10 = valid10 || _valid2;if(!valid10){const err19 = {instancePath:instancePath+"/restriction_mismatches/" + i2,schemaPath:"#/properties/restriction_mismatches/items/anyOf",keyword:"anyOf",params:{},message:"must match a schema in anyOf"};if(vErrors === null){vErrors = [err19];}else {vErrors.push(err19);}errors++;validate21.errors = vErrors;return false;}else {errors = _errs58;if(vErrors !== null){if(_errs58){vErrors.length = _errs58;}else {vErrors = null;}}}var valid9 = _errs57 === errors;if(!valid9){break;}}}else {validate21.errors = [{instancePath:instancePath+"/restriction_mismatches",schemaPath:"#/properties/restriction_mismatches/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs55 === errors;}else {var valid0 = true;}if(valid0){if(data.retrieval_endpoint !== undefined){const _errs63 = errors;if(typeof data.retrieval_endpoint !== "string"){validate21.errors = [{instancePath:instancePath+"/retrieval_endpoint",schemaPath:"#/properties/retrieval_endpoint/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs63 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_id !== undefined){const _errs65 = errors;if(typeof data.subscription_id !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_id",schemaPath:"#/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs65 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_unit_value !== undefined){let data24 = data.subscription_unit_value;const _errs67 = errors;const _errs68 = errors;if(errors === _errs68){if(data24 && typeof data24 == "object" && !Array.isArray(data24)){const _errs70 = errors;for(const key3 in data24){if(!(((key3 === "amount") || (key3 === "currency")) || (key3 === "unit_cost"))){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key3},message:"must NOT have additional properties"}];return false;break;}}if(_errs70 === errors){if(data24.amount !== undefined){let data25 = data24.amount;const _errs71 = errors;if(errors === _errs71){if(typeof data25 === "string"){if(func2(data25) > 32){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data25)){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs71 === errors;}else {var valid12 = true;}if(valid12){if(data24.currency !== undefined){const _errs73 = errors;if(typeof data24.currency !== "string"){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid12 = _errs73 === errors;}else {var valid12 = true;}if(valid12){if(data24.unit_cost !== undefined){let data27 = data24.unit_cost;const _errs75 = errors;if(errors === _errs75){if(typeof data27 === "string"){if(func2(data27) > 32){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data27)){validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid12 = _errs75 === errors;}else {var valid12 = true;}}}}}else {validate21.errors = [{instancePath:instancePath+"/subscription_unit_value",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs67 === errors;}else {var valid0 = true;}if(valid0){if(data.transaction_id !== undefined){const _errs77 = errors;if(typeof data.transaction_id !== "string"){validate21.errors = [{instancePath:instancePath+"/transaction_id",schemaPath:"#/properties/transaction_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs77 === errors;}else {var valid0 = true;}}}}}}}}}}}}}}}}else {validate21.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate21.errors = vErrors;return errors === 0;}validate21.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};function validate20(data, {instancePath="", parentData, parentDataProperty, rootData=data, dynamicAnchors={}}={}){/*# sourceURL="fora.v1.TransactionResponse.schema.strict.json" */;let vErrors = null;let errors = 0;const evaluated0 = validate20.evaluated;if(evaluated0.dynamicProps){evaluated0.props = undefined;}if(evaluated0.dynamicItems){evaluated0.items = undefined;}if(errors === 0){if(data && typeof data == "object" && !Array.isArray(data)){const _errs1 = errors;for(const key0 in data){if(!(((((((key0 === "agent_identity_hash") || (key0 === "ext")) || (key0 === "ext_critical")) || (key0 === "items")) || (key0 === "subscription_quota")) || (key0 === "total_cost")) || (key0 === "ver"))){validate20.errors = [{instancePath,schemaPath:"#/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key0},message:"must NOT have additional properties"}];return false;break;}}if(_errs1 === errors){if(data.agent_identity_hash !== undefined){const _errs2 = errors;if(typeof data.agent_identity_hash !== "string"){validate20.errors = [{instancePath:instancePath+"/agent_identity_hash",schemaPath:"#/properties/agent_identity_hash/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs2 === errors;}else {var valid0 = true;}if(valid0){if(data.ext !== undefined){let data1 = data.ext;const _errs4 = errors;if(!(data1 && typeof data1 == "object" && !Array.isArray(data1))){validate20.errors = [{instancePath:instancePath+"/ext",schemaPath:"#/properties/ext/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}var valid0 = _errs4 === errors;}else {var valid0 = true;}if(valid0){if(data.ext_critical !== undefined){let data2 = data.ext_critical;const _errs6 = errors;if(errors === _errs6){if(Array.isArray(data2)){var valid1 = true;const len0 = data2.length;for(let i0=0; i0<len0; i0++){const _errs8 = errors;if(typeof data2[i0] !== "string"){validate20.errors = [{instancePath:instancePath+"/ext_critical/" + i0,schemaPath:"#/properties/ext_critical/items/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid1 = _errs8 === errors;if(!valid1){break;}}}else {validate20.errors = [{instancePath:instancePath+"/ext_critical",schemaPath:"#/properties/ext_critical/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs6 === errors;}else {var valid0 = true;}if(valid0){if(data.items !== undefined){let data4 = data.items;const _errs10 = errors;if(errors === _errs10){if(Array.isArray(data4)){var valid2 = true;const len1 = data4.length;for(let i1=0; i1<len1; i1++){const _errs12 = errors;if(!(validate21(data4[i1], {instancePath:instancePath+"/items/" + i1,parentData:data4,parentDataProperty:i1,rootData,dynamicAnchors}))){vErrors = vErrors === null ? validate21.errors : vErrors.concat(validate21.errors);errors = vErrors.length;}var valid2 = _errs12 === errors;if(!valid2){break;}}}else {validate20.errors = [{instancePath:instancePath+"/items",schemaPath:"#/properties/items/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs10 === errors;}else {var valid0 = true;}if(valid0){if(data.subscription_quota !== undefined){let data6 = data.subscription_quota;const _errs13 = errors;if(errors === _errs13){if(Array.isArray(data6)){var valid3 = true;const len2 = data6.length;for(let i2=0; i2<len2; i2++){let data7 = data6[i2];const _errs15 = errors;const _errs16 = errors;if(errors === _errs16){if(data7 && typeof data7 == "object" && !Array.isArray(data7)){const _errs18 = errors;for(const key1 in data7){if(!((((((key1 === "quota_limit") || (key1 === "quota_remaining")) || (key1 === "quota_used")) || (key1 === "resets_at")) || (key1 === "subscription_id")) || (key1 === "unit"))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key1},message:"must NOT have additional properties"}];return false;break;}}if(_errs18 === errors){if(data7.quota_limit !== undefined){let data8 = data7.quota_limit;const _errs19 = errors;if(!(((typeof data8 == "number") && (!(data8 % 1) && !isNaN(data8))) && (isFinite(data8)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs19){if((typeof data8 == "number") && (isFinite(data8))){if(data8 > 2147483647 || isNaN(data8)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data8 < -2147483648 || isNaN(data8)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_limit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_limit/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs19 === errors;}else {var valid5 = true;}if(valid5){if(data7.quota_remaining !== undefined){let data9 = data7.quota_remaining;const _errs21 = errors;if(!(((typeof data9 == "number") && (!(data9 % 1) && !isNaN(data9))) && (isFinite(data9)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs21){if((typeof data9 == "number") && (isFinite(data9))){if(data9 > 2147483647 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data9 < -2147483648 || isNaN(data9)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_remaining",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_remaining/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs21 === errors;}else {var valid5 = true;}if(valid5){if(data7.quota_used !== undefined){let data10 = data7.quota_used;const _errs23 = errors;if(!(((typeof data10 == "number") && (!(data10 % 1) && !isNaN(data10))) && (isFinite(data10)))){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/type",keyword:"type",params:{type: "integer"},message:"must be integer"}];return false;}if(errors === _errs23){if((typeof data10 == "number") && (isFinite(data10))){if(data10 > 2147483647 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/maximum",keyword:"maximum",params:{comparison: "<=", limit: 2147483647},message:"must be <= 2147483647"}];return false;}else {if(data10 < -2147483648 || isNaN(data10)){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/quota_used",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/quota_used/minimum",keyword:"minimum",params:{comparison: ">=", limit: -2147483648},message:"must be >= -2147483648"}];return false;}}}}var valid5 = _errs23 === errors;}else {var valid5 = true;}if(valid5){if(data7.resets_at !== undefined){const _errs25 = errors;if(errors === _errs25){if(errors === _errs25){if(!(typeof data7.resets_at === "string")){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/resets_at",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/resets_at/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}}var valid5 = _errs25 === errors;}else {var valid5 = true;}if(valid5){if(data7.subscription_id !== undefined){const _errs27 = errors;if(typeof data7.subscription_id !== "string"){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/subscription_id",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/subscription_id/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs27 === errors;}else {var valid5 = true;}if(valid5){if(data7.unit !== undefined){const _errs29 = errors;if(typeof data7.unit !== "string"){validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2+"/unit",schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/properties/unit/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid5 = _errs29 === errors;}else {var valid5 = true;}}}}}}}}else {validate20.errors = [{instancePath:instancePath+"/subscription_quota/" + i2,schemaPath:"#/$defs/fora.v1.SubscriptionQuotaInfo/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid3 = _errs15 === errors;if(!valid3){break;}}}else {validate20.errors = [{instancePath:instancePath+"/subscription_quota",schemaPath:"#/properties/subscription_quota/type",keyword:"type",params:{type: "array"},message:"must be array"}];return false;}}var valid0 = _errs13 === errors;}else {var valid0 = true;}if(valid0){if(data.total_cost !== undefined){let data14 = data.total_cost;const _errs31 = errors;const _errs32 = errors;if(errors === _errs32){if(data14 && typeof data14 == "object" && !Array.isArray(data14)){const _errs34 = errors;for(const key2 in data14){if(!(((key2 === "amount") || (key2 === "currency")) || (key2 === "unit_cost"))){validate20.errors = [{instancePath:instancePath+"/total_cost",schemaPath:"#/$defs/fora.v1.Cost/additionalProperties",keyword:"additionalProperties",params:{additionalProperty: key2},message:"must NOT have additional properties"}];return false;break;}}if(_errs34 === errors){if(data14.amount !== undefined){let data15 = data14.amount;const _errs35 = errors;if(errors === _errs35){if(typeof data15 === "string"){if(func2(data15) > 32){validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data15)){validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost/amount",schemaPath:"#/$defs/fora.v1.Cost/properties/amount/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid7 = _errs35 === errors;}else {var valid7 = true;}if(valid7){if(data14.currency !== undefined){const _errs37 = errors;if(typeof data14.currency !== "string"){validate20.errors = [{instancePath:instancePath+"/total_cost/currency",schemaPath:"#/$defs/fora.v1.Cost/properties/currency/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid7 = _errs37 === errors;}else {var valid7 = true;}if(valid7){if(data14.unit_cost !== undefined){let data17 = data14.unit_cost;const _errs39 = errors;if(errors === _errs39){if(typeof data17 === "string"){if(func2(data17) > 32){validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/maxLength",keyword:"maxLength",params:{limit: 32},message:"must NOT have more than 32 characters"}];return false;}else {if(!pattern4.test(data17)){validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/pattern",keyword:"pattern",params:{pattern: "^([0-9]+([.][0-9]+)?)?$"},message:"must match pattern \""+"^([0-9]+([.][0-9]+)?)?$"+"\""}];return false;}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost/unit_cost",schemaPath:"#/$defs/fora.v1.Cost/properties/unit_cost/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}}var valid7 = _errs39 === errors;}else {var valid7 = true;}}}}}else {validate20.errors = [{instancePath:instancePath+"/total_cost",schemaPath:"#/$defs/fora.v1.Cost/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}var valid0 = _errs31 === errors;}else {var valid0 = true;}if(valid0){if(data.ver !== undefined){const _errs41 = errors;if(typeof data.ver !== "string"){validate20.errors = [{instancePath:instancePath+"/ver",schemaPath:"#/properties/ver/type",keyword:"type",params:{type: "string"},message:"must be string"}];return false;}var valid0 = _errs41 === errors;}else {var valid0 = true;}}}}}}}}}else {validate20.errors = [{instancePath,schemaPath:"#/type",keyword:"type",params:{type: "object"},message:"must be object"}];return false;}}validate20.errors = vErrors;return errors === 0;}validate20.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
 
 // ucs2length is ajv's runtime helper, written in: a string's length in code points.
 function ucs2length(str) {
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 2c4a7e9e..039d69f5 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -26,7 +26,7 @@ export const AuthMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["AUTH_METHOD
 
 export const AuthorizedExchangeSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")))();
 
-export const BrokerTransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code \"unavailable\" or \"deadline_exceeded\" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).")))();
+export const BrokerTransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field. When the Broker itself does not\n understand a key the agent's request lists in ext_critical, every item is\n the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no\n Exchange was contacted.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code \"unavailable\" or \"deadline_exceeded\" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).")))();
 
 export const C2PAStatusSchema = /* @__PURE__ */ (() => wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"])))();
 
@@ -52,9 +52,9 @@ export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "ac
 
 export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
-export const DisputeFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed.")))();
+export const DisputeFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed.")))();
 
-export const DisputeFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"])))();
+export const DisputeFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"])))();
 
 export const DisputeReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"])))();
 
@@ -68,15 +68,15 @@ export const DomainVerificationChallengeSchema = /* @__PURE__ */ (() => wire(z.o
 
 export const DomainVerificationConfirmationSchema = /* @__PURE__ */ (() => wire(z.object({ "cdn_type": z.string().describe("Which delivery-URL verification scheme this key is for: \"edge-ed25519\" (a\n code-capable edge that verifies the Ed25519 URL signature itself) or\n \"cloudfront\" (AWS CloudFront trusted key groups, RSA, verified natively by\n the CDN). One value per Exchange-side tenant signing scheme:\n \"edge-ed25519\" is ED25519, \"cloudfront\" is AWS_CLOUDFRONT_RSA.").optional(), "domain": z.string().describe("The domain being verified.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "signing_key": z.string().describe("Optional: the delivery endpoint's verification key, registered atomically\n with the domain on successful verification. PUBLIC key material only.\n The Exchange signs delivery URLs with a private key it holds and never\n publishes; a delivery endpoint verifies with the public half and holds\n nothing secret. Where the Exchange has to sign with a key the provider\n generated -- a CloudFront trusted key group is the provider's own AWS\n resource -- the private half is provisioned to the Exchange out of band\n and never travels in this field.\n\nFormat follows cdn_type: a PEM-encoded RSA public key for \"cloudfront\", or\n the base64url-encoded raw Ed25519 public key (the JWK \"x\" value) for\n \"edge-ed25519\".").optional(), "token": z.string().describe("The challenge token (echoed from DomainVerificationChallenge).").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationConfirmation — Provider confirms the challenge is placed.")))();
 
-export const DomainVerificationFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.")))();
+export const DomainVerificationFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.")))();
 
-export const DomainVerificationFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"])))();
+export const DomainVerificationFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"])))();
 
 export const DomainVerificationRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "caller_id": z.string().describe("Caller identity (registered with the Exchange).").optional(), "domain": z.string().describe("The provider domain to verify (e.g., \"techcrunch.com\").").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `domain` above, which is the provider domain\n being verified — the subject of the request, not its recipient."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationRequest — Provider requests a verification challenge.")))();
 
 export const DomainVerificationResultSchema = /* @__PURE__ */ (() => wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "key_id": z.string().describe("If signing_key was provided: confirmation of key registration.").optional(), "valid_until": z.string().datetime({ offset: true }).describe("Verification is valid until this time. Provider must re-verify periodically.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DomainVerificationResult — Exchange confirms verification.")))();
 
-export const ErrorDetailSchema = /* @__PURE__ */ (() => wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error.")))();
+export const ErrorDetailSchema = /* @__PURE__ */ (() => wire(z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("ErrorDetail — the structured detail attached to every non-OK transport error.")))();
 
 export const ExchangeOutcomeSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")))();
 
@@ -134,9 +134,9 @@ export const RegisterRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "exc
 
 export const RegisterResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "active": z.boolean().describe("Whether the account is currently active. Accounts may start inactive\n and be activated out-of-band by the Exchange operator.").default(false), "billing_ref": z.string().describe("Opaque, long-lived, per-Exchange account handle minted by the Exchange.\n Means nothing on its own and is never accepted as caller input. A repeat\n Register for the same agent returns the same value.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("RegisterResponse — Exchange returns the minted account handle.")))();
 
-export const RegistrationFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("RegistrationFailure — a registration request could not be completed.")))();
+export const RegistrationFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("RegistrationFailure — a registration request could not be completed.")))();
 
-export const RegistrationFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"])))();
+export const RegistrationFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"])))();
 
 export const RegistrationFieldErrorSchema = /* @__PURE__ */ (() => wire(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")))();
 
@@ -204,11 +204,11 @@ export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "age
 
 export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
-export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
+export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
-export const TransactionResultItemSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")))();
+export const TransactionResultItemSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")))();
 
-export const UpstreamRefusalSchema = /* @__PURE__ */ (() => wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.")))();
+export const UpstreamRefusalSchema = /* @__PURE__ */ (() => wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.")))();
 
 export const UsageSchema = /* @__PURE__ */ (() => wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system.")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 306e35a3..35564882 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -185,7 +185,7 @@ not choose Exchanges by profile, and each Exchange answers for its own profiles.
 Broker overview, the extension-profile pages and the getting-started pages say the same.
 
 **A request's critical extensions are for its receiver, and an entry's are for the agent:
-`UNKNOWN_CRITICAL_EXTENSION` is added to three reason enums (additive enum values).** The
+`UNKNOWN_CRITICAL_EXTENSION` is added to six reason enums (additive enum values).** The
 file header gains "Critical extensions", the one statement of the rule. A request's
 `ext_critical` is for the party that receives that request; a receiver that does not
 understand a listed key answers with its RPC's reason: OK with no offers and
@@ -193,11 +193,24 @@ understand a listed key answers with its RPC's reason: OK with no offers and
 every item denied as the new `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION` (20) on a
 purchase, the new `CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (10) on a catalog
 push, and the new `USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (6,
-`invalid_argument`) on a usage report. `ResourceEntry.ext_critical` is for the agent: the
-Exchange carries it onto `Offer.ext_critical` and does not consume it, so it never
-refuses a push. The SDK error-detail decoders in Python and TypeScript know the new
-values, and the extension-profiles, academic walkthrough and what-is-FORA pages state
-the rule.
+`invalid_argument`) on a usage report. A dispute, a registration (a repeat included) and
+both domain-verification calls are refused with `invalid_argument` and the new
+`DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (6),
+`REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (8; 4 stays retired) and
+`DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (7). `GetAccountStatus`,
+whose refusals have no reason family, answers `invalid_argument` with no typed reason. A
+Broker that does not understand a key the agent's purchase lists answers OK with every
+item denied as `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION` and contacts no Exchange — the
+one denial a Broker makes itself — after its signature, requester and malformed-request
+checks and before routing. A Broker never copies the agent's request-level `ext` or
+`ext_critical` onto a request it authors; a message it carries unchanged keeps its own.
+`RemoveResourcesRequest` and `RefreshCatalogRequest` carry no `ext`.
+`ResourceEntry.ext_critical` is for the agent: the Exchange carries it onto
+`Offer.ext_critical` and does not consume it, so it never refuses a push. The SDK
+error-detail decoders in Python and TypeScript know the new values, and
+`error-detail-wire-vectors.json` and the validation corpus are regenerated. The
+extension-profiles, academic walkthrough, what-is-FORA, transaction-flow and
+medical-imaging pages state the rule.
 
 **A catalog call whose signature fails is refused with `request_auth_failure`;
 `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
@@ -302,7 +315,9 @@ version, which `BrokerTransactionResponse.totals` states too.
 implements the RPC. Each `DisputeFailureReason` now names its check: no transaction for the
 caller, no accepted report for this transaction, the dispute window closed, a dispute
 already filed (a retry under the same key is a replay), and a transaction whose state
-admits no dispute.
+admits no dispute. A filing whose `ext_critical` names a key the Exchange does not
+understand is refused with `DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (see the
+critical-extensions entry above).
 
 Docs: the transaction-flow page gains "Denials are in the body" and "Idempotency", states
 the report refusals and the dispute refusal reasons, and drops "no refunds in the
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 703d902d..b8e2f55c 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -299,12 +299,32 @@ import "fora/v1/vocab.proto";
 // A request's ext_critical is for the party that receives that request. A
 // receiver that does not understand a key the list names does not act on the
 // request, and answers with the UNKNOWN_CRITICAL_EXTENSION reason of its RPC:
-// DiscoverResources and Resolve answer OK with no offers and
-// OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION; ExecuteTransaction answers OK
-// with every item denied in the body as DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION;
-// a catalog push is refused with CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION;
-// a usage report is refused with
-// USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION.
+//   - DiscoverResources and Resolve answer OK with no offers and
+//     OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION.
+//   - ExchangeService.ExecuteTransaction and BrokerService.ExecuteTransaction
+//     answer OK with every item denied in the body as
+//     DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION. A Broker that does not
+//     understand a key the agent's request lists sends no sub-request, so its
+//     answer carries no `exchanges` and no `totals`.
+//   - A catalog push is refused with
+//     CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION.
+//   - ReportUsage, DisputeTransaction, Register (a repeat registration
+//     included), RequestDomainVerification and ConfirmDomainVerification are
+//     refused with the Connect code invalid_argument and the
+//     UNKNOWN_CRITICAL_EXTENSION value of their reason family:
+//     USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION,
+//     DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION,
+//     REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION and
+//     DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION.
+//   - GetAccountStatus, whose refusals have no reason family, is refused with
+//     the Connect code invalid_argument and no typed reason.
+// RemoveResourcesRequest and RefreshCatalogRequest carry no `ext`.
+//
+// A Broker never copies the agent's request-level `ext` or `ext_critical` onto
+// a request it authors — the ResourceQuery it originates for discovery or the
+// TransactionRequest it re-packages for a purchase: those keys were addressed
+// to the Broker. A message the Broker carries unchanged (the agent's Requester,
+// each Offer, the acceptances) keeps its own `ext` and `ext_critical`.
 //
 // ResourceEntry.ext_critical is not for the Exchange. It names keys the agent
 // must understand: the Exchange carries it onto Offer.ext_critical, with the
@@ -457,7 +477,9 @@ service ExchangeService {
   // identifying field. An agent the Exchange knows, its request signature
   // verified, but that holds no account at this Exchange is answered with the
   // Connect code NOT_FOUND. An agent whose signature does not verify is
-  // UNAUTHENTICATED, as on every RPC.
+  // UNAUTHENTICATED, as on every RPC. A request whose ext_critical lists a key
+  // the Exchange does not understand is INVALID_ARGUMENT with no typed reason
+  // (see "Critical extensions" in the file header).
   rpc GetAccountStatus(GetAccountStatusRequest) returns (GetAccountStatusResponse);
 }
 
@@ -2965,7 +2987,9 @@ service BrokerService {
   //
   // The Broker's own refusals are non-OK Connect errors carrying an
   // ErrorDetail, and when the Broker refuses, it has sent no sub-request, so
-  // nothing was bought:
+  // nothing was bought. They come first, in this order, and only a request that
+  // passes them reaches the critical-extension check (see "Critical extensions"
+  // in the file header), then routing:
   //   - The agent's request signature does not verify: UNAUTHENTICATED with
   //     `request_auth_failure`, exactly as at an Exchange.
   //   - `requester.domain` is not the agent's verified signing directory — the
@@ -3000,7 +3024,11 @@ service BrokerService {
   // sub-request, which decides no item, becomes a refusal on each of its items.
   // DENIAL_REASON_CONTENT_UNAVAILABLE is not a catch-all for
   // upstream failures; the Broker never stamps it, or any denial_reason, onto
-  // an item an Exchange did not deny. If an Exchange answers OK without exactly
+  // an item an Exchange did not deny. The one exception is the Broker's own
+  // answer to a key the agent's request lists in ext_critical that the Broker
+  // does not understand: it then denies every item as
+  // DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, in the body, and sends no
+  // sub-request (see "Critical extensions" in the file header). If an Exchange answers OK without exactly
   // one result item per item sent, the Broker cannot attribute the answer, and
   // reports every item of that sub-request with a refusal whose code is
   // "internal" and no detail.
@@ -4324,7 +4352,10 @@ message BrokerTransactionResponse {
   // its Exchange denied per item (denial_reason), is that Exchange's
   // TransactionResultItem unchanged. An item whose Exchange refused the whole
   // sub-request, or did not answer it, carries that refusal in `refusal`, with
-  // offer_id set and no other result field.
+  // offer_id set and no other result field. When the Broker itself does not
+  // understand a key the agent's request lists in ext_critical, every item is
+  // the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no
+  // Exchange was contacted.
   repeated TransactionResultItem items = 2;
 
   // One per Exchange the Broker contacted, in the order each Exchange first
@@ -4761,8 +4792,10 @@ message DomainVerificationResult {
 //
 // What a repeat still runs is everything outside those gates. The request
 // signature is verified and the caller identified from it, RegisterRequest.exchange
-// is checked against the recipient, and the field-level constraints on the message
-// still apply. A repeat from an unverified caller, or one addressed to a different
+// is checked against the recipient, the field-level constraints on the message
+// still apply, and a key the request lists in ext_critical that the Exchange does
+// not understand is refused with REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION
+// before the stored record is returned. A repeat from an unverified caller, or one addressed to a different
 // Exchange, is refused exactly as a first call is.
 // ============================================================================
 
@@ -5307,6 +5340,10 @@ enum RegistrationFailureReason {
   REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED = 5;      // registration quota exceeded
   REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA = 6; // registration_data does not conform to the Exchange's published AccountRegistration.data_schema
   REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE = 7;        // terms_digest does not match the currently published WellKnownManifest.terms_digest, or was omitted while the Exchange publishes one
+  // The request's ext_critical names a key the Exchange does not understand (see
+  // "Critical extensions" in the file header), on a first registration and on a
+  // repeat alike. Refused with the Connect code invalid_argument.
+  REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION = 8;
 }
 
 // RegistrationFailure — a registration request could not be completed.
@@ -5381,6 +5418,10 @@ enum DisputeFailureReason {
   // transaction's state admits no dispute under the Exchange's rules. Filing
   // again does not change the answer.
   DISPUTE_FAILURE_REASON_INELIGIBLE = 5;
+  // The filing's ext_critical names a key the Exchange does not understand (see
+  // "Critical extensions" in the file header). Refused with the Connect code
+  // invalid_argument.
+  DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION = 6;
 }
 
 // DisputeFailure — a dispute could not be filed.
@@ -5400,6 +5441,10 @@ enum DomainVerificationFailureReason {
   DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED = 4;           // Exchange could not fetch the verification URL
   DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED = 5; // fora.json does not list this Exchange
   DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED = 6; // signing-key registration failed during confirmation
+  // The request's or confirmation's ext_critical names a key the Exchange does
+  // not understand (see "Critical extensions" in the file header). Refused with
+  // the Connect code invalid_argument.
+  DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION = 7;
 }
 
 // DomainVerificationFailure — RequestDomainVerification / ConfirmDomainVerification failed.
diff --git a/sdk/go/connect/testdata/error-detail-wire-vectors.json b/sdk/go/connect/testdata/error-detail-wire-vectors.json
index e04af80a..83269b41 100644
--- a/sdk/go/connect/testdata/error-detail-wire-vectors.json
+++ b/sdk/go/connect/testdata/error-detail-wire-vectors.json
@@ -224,7 +224,8 @@
         "2": "DISPUTE_FAILURE_REASON_REPORT_NOT_FILED",
         "3": "DISPUTE_FAILURE_REASON_WINDOW_EXPIRED",
         "4": "DISPUTE_FAILURE_REASON_DUPLICATE",
-        "5": "DISPUTE_FAILURE_REASON_INELIGIBLE"
+        "5": "DISPUTE_FAILURE_REASON_INELIGIBLE",
+        "6": "DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
       },
       "fora.v1.DomainVerificationFailureReason": {
         "0": "DOMAIN_VERIFICATION_FAILURE_REASON_UNSPECIFIED",
@@ -233,7 +234,8 @@
         "3": "DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED",
         "4": "DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED",
         "5": "DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED",
-        "6": "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED"
+        "6": "DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED",
+        "7": "DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
       },
       "fora.v1.RegistrationFailureReason": {
         "0": "REGISTRATION_FAILURE_REASON_UNSPECIFIED",
@@ -243,7 +245,8 @@
         "4": "REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED",
         "5": "REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED",
         "6": "REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA",
-        "7": "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE"
+        "7": "REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE",
+        "8": "REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"
       },
       "fora.v1.RequestAuthFailureReason": {
         "0": "REQUEST_AUTH_FAILURE_REASON_UNSPECIFIED",
diff --git a/sdk/python/fora_sdk/_errordetail_wire.py b/sdk/python/fora_sdk/_errordetail_wire.py
index 6b694d2f..eeb1c2e8 100644
--- a/sdk/python/fora_sdk/_errordetail_wire.py
+++ b/sdk/python/fora_sdk/_errordetail_wire.py
@@ -171,6 +171,7 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
         "QUOTA_EXCEEDED",
         "INVALID_REGISTRATION_DATA",
         "TERMS_DIGEST_STALE",
+        "UNKNOWN_CRITICAL_EXTENSION",
     ),
     "fora.v1.DisputeFailureReason": _names(
         "DISPUTE_FAILURE_REASON",
@@ -180,6 +181,7 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
         "WINDOW_EXPIRED",
         "DUPLICATE",
         "INELIGIBLE",
+        "UNKNOWN_CRITICAL_EXTENSION",
     ),
     "fora.v1.DomainVerificationFailureReason": _names(
         "DOMAIN_VERIFICATION_FAILURE_REASON",
@@ -190,6 +192,7 @@ def _names(prefix: str, *names: str) -> dict[int, str]:
         "FETCH_FAILED",
         "EXCHANGE_NOT_AUTHORIZED",
         "KEY_REGISTRATION_FAILED",
+        "UNKNOWN_CRITICAL_EXTENSION",
     ),
     "fora.v1.RetrievalAuthFailureReason": _names(
         "RETRIEVAL_AUTH_FAILURE_REASON",
diff --git a/sdk/ts/src/errordetail-wire.ts b/sdk/ts/src/errordetail-wire.ts
index 74f5fa22..5ef6c2e3 100644
--- a/sdk/ts/src/errordetail-wire.ts
+++ b/sdk/ts/src/errordetail-wire.ts
@@ -162,6 +162,7 @@ export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<st
 		"WINDOW_EXPIRED",
 		"DUPLICATE",
 		"INELIGIBLE",
+		"UNKNOWN_CRITICAL_EXTENSION",
 	]),
 	"fora.v1.DomainVerificationFailureReason": prefixed("DOMAIN_VERIFICATION_FAILURE_REASON", [
 		"UNSPECIFIED",
@@ -171,6 +172,7 @@ export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<st
 		"FETCH_FAILED",
 		"EXCHANGE_NOT_AUTHORIZED",
 		"KEY_REGISTRATION_FAILED",
+		"UNKNOWN_CRITICAL_EXTENSION",
 	]),
 	"fora.v1.RegistrationFailureReason": prefixed("REGISTRATION_FAILURE_REASON", [
 		"UNSPECIFIED",
@@ -181,6 +183,7 @@ export const ERROR_DETAIL_WIRE_ENUMS: Readonly<Record<string, Readonly<Record<st
 		"QUOTA_EXCEEDED",
 		"INVALID_REGISTRATION_DATA",
 		"TERMS_DIGEST_STALE",
+		"UNKNOWN_CRITICAL_EXTENSION",
 	]),
 	"fora.v1.RequestAuthFailureReason": prefixed("REQUEST_AUTH_FAILURE_REASON", [
 		"UNSPECIFIED",
diff --git a/website/src/content/docs/protocol/extension-profiles.mdx b/website/src/content/docs/protocol/extension-profiles.mdx
index 1d7a735b..433cc548 100644
--- a/website/src/content/docs/protocol/extension-profiles.mdx
+++ b/website/src/content/docs/protocol/extension-profiles.mdx
@@ -108,7 +108,13 @@ FORA adopts the COSE enumeration approach: the sender lists which ext keys are c
 
 Who the consumer is depends on the message:
 
-- **A request's `ext_critical` is for the party that receives that request.** A receiver that does not understand a listed key answers with the `UNKNOWN_CRITICAL_EXTENSION` reason of its RPC: discovery and `Resolve` answer OK with no offers and `OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION`; a purchase answers OK with every item denied as `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION`; a catalog push is refused with `CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION`; a usage report is refused with `USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION`.
+- **A request's `ext_critical` is for the party that receives that request.** A receiver that does not understand a listed key does not act on the request and answers with the `UNKNOWN_CRITICAL_EXTENSION` reason of its RPC:
+  - Discovery and `Resolve` answer OK with no offers and `OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION`.
+  - A purchase, at an Exchange or through a Broker, answers OK with every item denied as `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION`. A Broker that does not understand a key the agent's request lists contacts no Exchange.
+  - A catalog push is refused with `CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION`.
+  - A usage report, a dispute, a registration (a repeat included) and both domain-verification calls are refused with `invalid_argument` and `USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION`, `DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION`, `REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` or `DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION`.
+  - `GetAccountStatus` is refused with `invalid_argument` and no typed reason.
+- **A Broker never copies the agent's request-level `ext` or `ext_critical`** onto a request it authors: those keys were addressed to the Broker. A message the Broker carries unchanged, such as the agent's `Requester` or an `Offer`, keeps its own.
 - **`ResourceEntry.ext_critical` is for the agent.** The Exchange carries it onto `Offer.ext_critical`, with the `ext` keys it names, and does not consume it, so a key the Exchange does not understand there never refuses the push. An agent that does not understand a key an offer lists does not use that offer.
 
 ### Example
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 6c41277a..004c89c6 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -562,6 +562,7 @@ Re-packaging and combining are safe because each item is atomic and its integrit
 - `exchanges` has one `ExchangeOutcome` per Exchange contacted. Its `agent_identity_hash` is what that Exchange's retrieval URLs are bound to.
 - An item whose `refusal` carries the code `unavailable` or `deadline_exceeded` has an unknown outcome: the Exchange may have bought it before the answer was lost, whether it gave no answer or answered that code. With any other code the Exchange decided no item, and the item was not purchased.
 - `totals` sums only the charged items (those with neither `denial_reason` nor `refusal`), one `Cost` per currency. Amounts are never summed across currencies. An item with an unknown outcome is not counted, so `totals` is then a lower bound of the charge.
+- When the Broker itself does not understand a key the agent's request lists in `ext_critical`, it answers OK with every item denied as `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION` and contacts no Exchange, so `exchanges` and `totals` are empty. It is the one denial the Broker makes itself; every other `denial_reason` is an Exchange's.
 - `DENIAL_REASON_RELAY_NOT_ACCEPTED` on an item means the provider that sells that item's resource at that Exchange does not accept purchases relayed by a Broker. It is decided per item, by each offer's provider, and answered in the body: other items of the same sub-request may succeed. It is never a refusal of the whole sub-request. Buy that offer directly.
 - A sub-request whose items are not exactly the agent's signed `AgentRequestAcceptance` projected onto that Exchange has every item denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body, and nothing is purchased.
 
@@ -773,6 +774,7 @@ Every Exchange implements `DisputeTransaction`; it is part of the core protocol,
 | `DISPUTE_FAILURE_REASON_WINDOW_EXPIRED` | The transaction's dispute window, set by the Exchange, has closed |
 | `DISPUTE_FAILURE_REASON_DUPLICATE` | A dispute was already filed for this transaction. A retry of the same filing under the same `idempotency_key` is a replay and returns the original `DisputeResponse` |
 | `DISPUTE_FAILURE_REASON_INELIGIBLE` | The transaction's state admits no dispute under the Exchange's rules |
+| `DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` | The filing's `ext_critical` names a key the Exchange does not understand. Refused with `invalid_argument` (see [Extension Profiles](/protocol/extension-profiles/)) |
 
 A dispute that is accepted and later found unsupported ends as `RESOLUTION_TYPE_REJECTED`; it is not a refusal to file. The Exchange resolves most accepted disputes automatically in under 1 second using CDN logs and cryptographic evidence. See [Dispute Resolution](/protocol/dispute-resolution/) for the three-tier resolution system, auto-credit rules, and the complete dispute lifecycle.
 
diff --git a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
index 0aaee558..61213dff 100644
--- a/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
+++ b/website/src/content/docs/protocol/walkthrough-medical-imaging.mdx
@@ -545,7 +545,7 @@ The core protocol defines `DISPUTE_REASON_CONTENT_MISMATCH` — the content does
 | **Parties involved** | Agent + Exchange | Agent + Exchange + Provider + HHS OCR |
 | **Financial exposure** | Transaction cost ($25) | HIPAA penalties ($100 - $50,000 per violation) |
 
-The `ext.medimg.dispute_type: "REGULATORY_INCIDENT"` field (marked `ext_critical`) signals that this dispute requires regulatory escalation, not standard billing resolution. The Exchange MUST understand this field — if it does not recognize `medimg.dispute_type` and it appears in `ext_critical`, the Exchange MUST reject the dispute and inform the agent that it cannot process this dispute type, rather than silently treating it as a standard billing credit.
+The `ext.medimg.dispute_type: "REGULATORY_INCIDENT"` field (marked `ext_critical`) signals that this dispute requires regulatory escalation, not standard billing resolution. The Exchange MUST understand this field — if it does not recognize `medimg.dispute_type` and it appears in `ext_critical`, the Exchange MUST reject the dispute, with `invalid_argument` and `DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION`, which tells the agent it cannot process this dispute type, rather than silently treating it as a standard billing credit.
 
 ### Dispute Response
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 7fab228b..2905d1f6 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -191,7 +191,7 @@ not choose Exchanges by profile, and each Exchange answers for its own profiles.
 Broker overview, the extension-profile pages and the getting-started pages say the same.
 
 **A request's critical extensions are for its receiver, and an entry's are for the agent:
-`UNKNOWN_CRITICAL_EXTENSION` is added to three reason enums (additive enum values).** The
+`UNKNOWN_CRITICAL_EXTENSION` is added to six reason enums (additive enum values).** The
 file header gains "Critical extensions", the one statement of the rule. A request's
 `ext_critical` is for the party that receives that request; a receiver that does not
 understand a listed key answers with its RPC's reason: OK with no offers and
@@ -199,11 +199,24 @@ understand a listed key answers with its RPC's reason: OK with no offers and
 every item denied as the new `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION` (20) on a
 purchase, the new `CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (10) on a catalog
 push, and the new `USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION` (6,
-`invalid_argument`) on a usage report. `ResourceEntry.ext_critical` is for the agent: the
-Exchange carries it onto `Offer.ext_critical` and does not consume it, so it never
-refuses a push. The SDK error-detail decoders in Python and TypeScript know the new
-values, and the extension-profiles, academic walkthrough and what-is-FORA pages state
-the rule.
+`invalid_argument`) on a usage report. A dispute, a registration (a repeat included) and
+both domain-verification calls are refused with `invalid_argument` and the new
+`DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (6),
+`REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (8; 4 stays retired) and
+`DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (7). `GetAccountStatus`,
+whose refusals have no reason family, answers `invalid_argument` with no typed reason. A
+Broker that does not understand a key the agent's purchase lists answers OK with every
+item denied as `DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION` and contacts no Exchange — the
+one denial a Broker makes itself — after its signature, requester and malformed-request
+checks and before routing. A Broker never copies the agent's request-level `ext` or
+`ext_critical` onto a request it authors; a message it carries unchanged keeps its own.
+`RemoveResourcesRequest` and `RefreshCatalogRequest` carry no `ext`.
+`ResourceEntry.ext_critical` is for the agent: the Exchange carries it onto
+`Offer.ext_critical` and does not consume it, so it never refuses a push. The SDK
+error-detail decoders in Python and TypeScript know the new values, and
+`error-detail-wire-vectors.json` and the validation corpus are regenerated. The
+extension-profiles, academic walkthrough, what-is-FORA, transaction-flow and
+medical-imaging pages state the rule.
 
 **A catalog call whose signature fails is refused with `request_auth_failure`;
 `CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
@@ -308,7 +321,9 @@ version, which `BrokerTransactionResponse.totals` states too.
 implements the RPC. Each `DisputeFailureReason` now names its check: no transaction for the
 caller, no accepted report for this transaction, the dispute window closed, a dispute
 already filed (a retry under the same key is a replay), and a transaction whose state
-admits no dispute.
+admits no dispute. A filing whose `ext_critical` names a key the Exchange does not
+understand is refused with `DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION` (see the
+critical-extensions entry above).
 
 Docs: the transaction-flow page gains "Denials are in the body" and "Idempotency", states
 the report refusals and the dispute refusal reasons, and drops "no refunds in the

From e98e890c99c36481c185b985c4911957334c7ab4 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 14:37:52 +0200
Subject: [PATCH 144/164] Require the requester on a query and a purchase, in
 the protocol

Requester.id and Requester.domain are required, but a rule on a field of an
absent message never runs, so a ResourceQuery, DiscoveryRequest or
TransactionRequest that named no requester at all passed both, and the
direct-request comparison of requester.domain with the signer's directory had
nothing to compare.

requester is now field-required on the three messages, in the style of
TransactionItem.offer. Register, GetAccountStatus, reports and disputes carry
no requester.

The validation corpus seeds a Requester equal to the one auto-fill built, so
every Requester case is unchanged, and gains a requester/missing case for each
of the three messages; the other cases of those messages now carry one. The
generated Pydantic models, Zod schemas and TypeScript input types require the
field, so the Python and TypeScript clients, which validate an outgoing request
by default, refuse a discover left with no requester before sending it. Go
validates only when asked.

The client requester options and the discovery stamping comments state the
rule instead of describing what reference services happen to do, and a Broker
comment no longer says a Broker resolves the agent from requester.id. Tests
that built a query or purchase with no requester now name one. The
authentication page and both changelogs record it.
---
 conformance/corpus/cases.json                 | 268 +++++++++++++++++-
 conformance/corpusgen/main.go                 |  15 +-
 conformance/validate_test.go                  |  23 +-
 gen/descriptor.binpb                          | Bin 687045 -> 687530 bytes
 gen/go/fora/v1/fora.pb.go                     |  29 +-
 .../fora.v1.DiscoveryRequest.schema.json      |   5 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   5 +-
 .../fora.v1.ResourceQuery.schema.json         |   5 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   5 +-
 .../fora.v1.TransactionRequest.schema.json    |   5 +-
 ...a.v1.TransactionRequest.schema.strict.json |   5 +-
 gen/python/wire/models.py                     |  17 +-
 gen/ts/wire/schemas.ts                        |   6 +-
 proto/CHANGELOG.md                            |  26 +-
 proto/fora/v1/fora.proto                      |  17 +-
 sdk/go/connect/broker.go                      |   4 +-
 sdk/go/connect/client.go                      |   5 +-
 sdk/go/connect/options.go                     |   8 +-
 .../transaction_offer_validate_test.go        |   8 +
 sdk/python/fora_sdk/client/_verbs.py          |  12 +-
 sdk/python/tests/test_identity_helpers.py     |   7 +-
 sdk/python/tests/test_typed_inputs.py         |  10 +-
 sdk/ts/client/options.ts                      |   8 +-
 sdk/ts/client/stamp.ts                        |   4 +-
 sdk/ts/tests/raw-body.test.ts                 |   5 +-
 sdk/ts/tests/strict-decoding.test.ts          |   8 +-
 .../content/docs/protocol/authentication.mdx  |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  26 +-
 28 files changed, 452 insertions(+), 86 deletions(-)

diff --git a/conformance/corpus/cases.json b/conformance/corpus/cases.json
index cf685599..f56ef980 100644
--- a/conformance/corpus/cases.json
+++ b/conformance/corpus/cases.json
@@ -1831,6 +1831,19 @@
       "unit_cost": "0"
     }
   },
+  {
+    "id": "DiscoveryRequest/requester/missing",
+    "message": "DiscoveryRequest",
+    "valid": false,
+    "rules": [
+      "required"
+    ],
+    "json": {
+      "uris": [
+        "x"
+      ]
+    }
+  },
   {
     "id": "DiscoveryRequest/uris/too_many",
     "message": "DiscoveryRequest",
@@ -1839,6 +1852,14 @@
       "repeated.max_items"
     ],
     "json": {
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x",
         "x",
@@ -2105,6 +2126,14 @@
     "message": "DiscoveryRequest",
     "valid": true,
     "json": {
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -19968,6 +19997,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "https://exchange.example",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -19983,6 +20020,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange.example/register",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -19998,6 +20043,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange.example:0",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20013,6 +20066,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange.example:99999",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20028,6 +20089,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange.example?x=1",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20043,6 +20112,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "user@exchange.example",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20058,6 +20135,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange.example:123456",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20073,6 +20158,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange.example:",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20088,6 +20181,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange.example.",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20103,6 +20204,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "exchange..example",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20118,6 +20227,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "-exchange.example",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20133,6 +20250,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "[::1]:443",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20147,6 +20272,14 @@
     ],
     "json": {
       "deadline": "90s",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20162,6 +20295,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "two words",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20177,6 +20318,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "!!bad!!",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20192,6 +20341,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "\u0000ctl\u0000",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20207,6 +20364,14 @@
     "json": {
       "deadline": "90s",
       "exchange": " ",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20222,6 +20387,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "-5",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -20237,6 +20410,29 @@
     "json": {
       "deadline": "90s",
       "exchange": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
+      "uris": [
+        "x"
+      ]
+    }
+  },
+  {
+    "id": "ResourceQuery/requester/missing",
+    "message": "ResourceQuery",
+    "valid": false,
+    "rules": [
+      "required"
+    ],
+    "json": {
+      "deadline": "90s",
+      "exchange": "x",
       "uris": [
         "x"
       ]
@@ -20252,6 +20448,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "x",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x",
         "x",
@@ -20520,6 +20724,14 @@
     "json": {
       "deadline": "90s",
       "exchange": "x",
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      },
       "uris": [
         "x"
       ]
@@ -21952,7 +22164,15 @@
             ]
           }
         }
-      ]
+      ],
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      }
     }
   },
   {
@@ -21963,6 +22183,42 @@
       "string.min_len"
     ],
     "json": {
+      "items": [
+        {
+          "offer": {
+            "exchange": "exchange.example",
+            "offer_id": "offer-seed",
+            "pricing": {
+              "model": "PRICING_MODEL_FREE",
+              "rate": "0"
+            },
+            "terms": [
+              {
+                "semantics": "TERM_SEMANTICS_ENUMERATED"
+              }
+            ]
+          }
+        }
+      ],
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      }
+    }
+  },
+  {
+    "id": "TransactionRequest/requester/missing",
+    "message": "TransactionRequest",
+    "valid": false,
+    "rules": [
+      "required"
+    ],
+    "json": {
+      "idempotency_key": "idem-tx",
       "items": [
         {
           "offer": {
@@ -22004,7 +22260,15 @@
             ]
           }
         }
-      ]
+      ],
+      "requester": {
+        "domain": "x",
+        "id": "x",
+        "scopes": [
+          "x"
+        ],
+        "type": "REQUESTER_TYPE_AGENT"
+      }
     }
   },
   {
diff --git a/conformance/corpusgen/main.go b/conformance/corpusgen/main.go
index 2711231b..334445fb 100644
--- a/conformance/corpusgen/main.go
+++ b/conformance/corpusgen/main.go
@@ -80,6 +80,18 @@ func seeds() map[string]proto.Message {
 			}},
 		}
 	}
+	// requester is the required sub-message of ResourceQuery, DiscoveryRequest and
+	// TransactionRequest, so auto-fill needs its seed. It is exactly the Requester the
+	// auto-fill built before the field was required, so the Requester/* cases are
+	// unchanged.
+	requester := func() *forav1.Requester {
+		return &forav1.Requester{
+			Id:     "x",
+			Domain: "x",
+			Type:   forav1.RequesterType_REQUESTER_TYPE_AGENT,
+			Scopes: []string{"x"},
+		}
+	}
 	return map[string]proto.Message{
 		"Pricing":     pricing(),
 		"License":     &forav1.License{Id: proto.String("CC-BY-4.0")},
@@ -97,7 +109,8 @@ func seeds() map[string]proto.Message {
 		// and TransactionRequest needs a valid 1-item items[] baseline because its
 		// items field is now repeated.min_items=1 (single-offer mode removed).
 		"Offer":              offer(),
-		"TransactionRequest": &forav1.TransactionRequest{IdempotencyKey: "idem-tx", Items: []*forav1.TransactionItem{{Offer: offer()}}},
+		"Requester":          requester(),
+		"TransactionRequest": &forav1.TransactionRequest{IdempotencyKey: "idem-tx", Requester: requester(), Items: []*forav1.TransactionItem{{Offer: offer()}}},
 		"AgentRequestAcceptancePayload": &forav1.AgentRequestAcceptancePayload{
 			Items: []*forav1.AgentRequestAcceptanceItem{{
 				OfferSig: "offer-signature",
diff --git a/conformance/validate_test.go b/conformance/validate_test.go
index 31ae7cef..0393df77 100644
--- a/conformance/validate_test.go
+++ b/conformance/validate_test.go
@@ -129,9 +129,9 @@ func licensingCases() []validationCase {
 		{"offer term with pricing rejected", pricedTermOffer(meteredPricing(proto.Int32(2500)), meteredPricing(proto.Int32(2500))), false, "offer.terms.pricing_unset"},
 		{"offer term with free pricing rejected", pricedTermOffer(freePricing(), freePricing()), false, "offer.terms.pricing_unset"},
 		{"offer per_unit term under flat pricing rejected", pricedTermOffer(&forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FLAT, Rate: "1", Currency: "USD"}, meteredPricing(nil)), false, "offer.terms.pricing_unset"},
-		{"transaction with priced offer term rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-p", Items: []*forav1.TransactionItem{{Offer: pricedTermOffer(freePricing(), freePricing())}}}, false, "offer.terms.pricing_unset"},
-		{"transaction with unestimated metered offer ok", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil))}}}, true, ""},
-		{"transaction with zero-estimate metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-z", Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(proto.Int32(0)))}}}, false, "offer.metered.estimate_positive"},
+		{"transaction with priced offer term rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-p", Requester: exampleRequester(), Items: []*forav1.TransactionItem{{Offer: pricedTermOffer(freePricing(), freePricing())}}}, false, "offer.terms.pricing_unset"},
+		{"transaction with unestimated metered offer ok", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-m", Requester: exampleRequester(), Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(nil))}}}, true, ""},
+		{"transaction with zero-estimate metered offer rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-z", Requester: exampleRequester(), Items: []*forav1.TransactionItem{{Offer: meteredOffer(meteredPricing(proto.Int32(0)))}}}, false, "offer.metered.estimate_positive"},
 
 		// Pricing.unit format: empty / bare-dashed / vendor:namespaced.
 		{"pricing unit bare ok", &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_PER_UNIT, Unit: proto.String("sq-km"), Rate: "1"}, true, ""},
@@ -352,9 +352,14 @@ func TestIdempotencyKeyRequired(t *testing.T) {
 
 func idempotencyCases() []validationCase {
 	return []validationCase{
-		{"transaction empty key rejected", &forav1.TransactionRequest{IdempotencyKey: "", Items: []*forav1.TransactionItem{{Offer: &forav1.Offer{OfferId: "of_1", Exchange: exampleExchange, Pricing: freePricing(), Terms: freeTerms()}}}}, false, "string.min_len"},
-		{"transaction key ok", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-1", Items: []*forav1.TransactionItem{{Offer: &forav1.Offer{OfferId: "of_1", Exchange: exampleExchange, Pricing: freePricing(), Terms: freeTerms()}}}}, true, ""},
-		{"transaction empty items rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-empty"}, false, "repeated.min_items"},
+		{"transaction empty key rejected", &forav1.TransactionRequest{IdempotencyKey: "", Requester: exampleRequester(), Items: []*forav1.TransactionItem{{Offer: &forav1.Offer{OfferId: "of_1", Exchange: exampleExchange, Pricing: freePricing(), Terms: freeTerms()}}}}, false, "string.min_len"},
+		{"transaction key ok", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-1", Requester: exampleRequester(), Items: []*forav1.TransactionItem{{Offer: &forav1.Offer{OfferId: "of_1", Exchange: exampleExchange, Pricing: freePricing(), Terms: freeTerms()}}}}, true, ""},
+		{"transaction empty items rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-empty", Requester: exampleRequester()}, false, "repeated.min_items"},
+		// A query and a purchase name their requester: the message is required, so
+		// an absent one cannot skip the Requester.id and Requester.domain rules.
+		{"transaction without requester rejected", &forav1.TransactionRequest{IdempotencyKey: "idem-tx-nr", Items: []*forav1.TransactionItem{{Offer: &forav1.Offer{OfferId: "of_1", Exchange: exampleExchange, Pricing: freePricing(), Terms: freeTerms()}}}}, false, "required"},
+		{"resource query without requester rejected", &forav1.ResourceQuery{}, false, "required"},
+		{"discovery request without requester rejected", &forav1.DiscoveryRequest{}, false, "required"},
 		{"usage report empty key rejected", &forav1.UsageReport{IdempotencyKey: "", Exchange: exampleExchange}, false, "string.min_len"},
 		{"usage report key ok", &forav1.UsageReport{IdempotencyKey: "idem-ur-1", Exchange: exampleExchange}, true, ""},
 		{"dispute empty key rejected", &forav1.DisputeRequest{IdempotencyKey: "", Exchange: exampleExchange, Reason: forav1.DisputeReason_DISPUTE_REASON_CONTENT_MISMATCH}, false, "string.min_len"},
@@ -396,6 +401,12 @@ func pricedTermOffer(offerPricing, termPricing *forav1.Pricing) *forav1.Offer {
 	}
 }
 
+// exampleRequester is a valid Requester: query and purchase cases carry one, since the
+// message is required on both.
+func exampleRequester() *forav1.Requester {
+	return &forav1.Requester{Id: "agent-1", Domain: "agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}
+}
+
 func freePricing() *forav1.Pricing {
 	return &forav1.Pricing{Model: forav1.PricingModel_PRICING_MODEL_FREE, Rate: "0"}
 }
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 2fc3d7232488ae33a8bc7290bc4f346a492ffde2..9267681d306105ebe015ee0411d6398a5d519004 100644
GIT binary patch
delta 46178
zcmagHcYIY<);FGea_%YjCb_vSxh=N_q$Lpqu_P3+m$8>oN5{g<IL|YVb)1>!nF&P*
zgkH?1DguH)A_(G<CLkaJp(zL&K@bE46^$?!g!z5f-uvV*zMuE~{dd<oYkl|HZSA$!
z-sjv6-*=pUrsII;UC%4e=RdE$;jX`3nZC;!dAqx(%k>>we}_Bgx`Z9O!`;rfLR)@q
z{(CN$Rd}bnR|nS=cH=+Xzrn-#|2Y5Q_J6o<NVsOR_!M{hUurUFK5w0v;vRjsXa5TU
zj~;MG^A=fyTix59aWz}F{a)MXDn8)ysH#hG1=M;~=^NY0&K)+cXHPz+Wopy6U3Kf7
z*WGs2m6xR-N<aB*|EK<ze*B?7^?y43*fUS3pXv|J)6evOs!RI0Km7UW{+{%0HmCBj
zN7D~I{^)s(NB{h%haP)8{m@hWx!z+>^?x)C`k7~+dc4x(DfGC>0*#yCwMkcBq6@+{
zolj&WYLf<$u|A$+k3q^tof#!gytk(duaFW@N3kuBX_XI-QWd)l#SO0N^-B<{^(Zw^
zVv{Ihlp2lMB#IcN#;^DIJtm4!P(*-G)x>q4CWRLQg$dR@f7Gg6H4~gt@==ossy8ih
z@=?kJHFJqgl9GCPwP%gVG1P$is<r;Vw0G2guR0hiFkV%?IjN)q<5ji1i%kOKRki9u
z&jL5cK(#DY=@^^lX48%tDeKr1+AyULSa!wTT%xVwZopY;pj^Va0cWWfbnr|S)zSjm
zDph&MTJ*FQbJgOfAq6$)tx`?9{WR#UQbQ#kAMZiUAidIe)O=5X_lkxlD+*|DtLj?S
zEt`?^ptl+|gc!9fXK4ZV8dY2E@}zi;^nkiSRkAUEntk|{5oQlOt7(<sM5HA;EZLw&
z6E+FN4QeXmIVXlQx^4@5=pWioSGp7fExg5P3Ik2C#Tf$zfVQZCqy#bmv_;M2Jd+fU
zqACIH12ykQYsX)-QkVY&)rfdzPyvdP7f?S`*+I*gS`7k_AKI-15|AINW&wu;3CIss
zU$JMmP;~{g7F9W*s<HL12{US<?ATwmH*3KXt*j_6=(pId3=;Y+YADQG86;Y{MJ+iX
zTbUTVl|NC{Ph~4h9`yFvtt?q+<^8;sYj`a%oDZo=B36}VWq;Q$y#j<7F^ZyK03K4k
z#j+AKRSv2CQkw+!AvG5Fj1+YOc~n&{i2ait|A(1j%l@wYp#}^ajAq19)hp(*qR@;u
zs+MFWSU%To*WU9l8h(m`{yJ$r@ITsLT{R~i44M%qRj(KT5CX<YH7X_uNMM{)+h4$k
zk3#djRb@NBGGg69K(o~zIv}ChY7ZTd&}?lRI=tRL%*D`g_4>gnTm#?__Mm|bAbzk1
z4M;%zK!fHj7Y0p!Ks%@AO=mCtQ?rWCsYbwaC#scCLuP=R{jOHKt73p#b~d<x8sL_L
z1tg#bxG`96<vMscn0-;J-Ci@;En736d&<FX*)<?Z$Su1DBoGF>(KU4{hd>{XwEi|g
zGnJZ=4hD7aNViw`x_pcdBIBKTkAMWmNOxtGXM(^0*<h_6q=l851_y(BwZZKzlS<U9
z4eq4yQTYn>YJ(d-s*!p%pL%tg<sYI|x_V7>FsN6jId)L5PIJdAB_#FgG<Vl-o)KtR
zcV0ky*`3$O{xMXm554Smhp1uQdDO5o-AXQd4Li`F$5?HX*{vL0K!MFCHVL5}X1X(3
z&mCL`4`;Ixb=qC2*={9H#X-genc41S$}=0I8Z^kc4a2lK$+>QYFFeE}raMvQxsHp#
zz<F%_FztrqJhzgOIQfv7=PqyO`8}6G%@?qW;o4*A1&%%NE$RZY=k0t{4L)J1JMUBL
z&EeWAS7@o*UCQg`qPo55RxbFDx`7Mx!R8al4H8&yx-o%zqddNrzs0^Eq4iC@<yP8p
zo4|z3TkZ}WJ)@{@Sk40K3U>EMZA@x~TWK$aIM>~=ljl418H7-~wU&F7_N*(p)~)c-
zL0ssrrP1*K7ee*cu}Pz~-{#i272b1@q3W%pp2Ii>iRrV!t#pd@V>e&pNwA({v~DRd
zY~$RJ-ay8U!FmR942m7rurb;=rPmI((otHcL28G)ONC9sx*hJyzMdkFMmjY9cDSqh
zc=m`IVhP#J?jEmwl-li9x=JM-7`xrwdw7OoWJ3!J#eVDN37Vm#_dD%iKx#j=!&;iq
zYCt>e&ijTv_ky;@ci3%&sh#1d&^Jfe)eTzTiX(1CrviuxD~`C0LYst<N8H7J&!t=i
z55Hh<G-#JseBr3j1pdNph*eeP6Zi`^{C$6}0#m+Z38wwN;!8PF$wxxvOLsyn;2=@T
zmu@WJw{R6uC)pyV-PY@*J=0W$X6s3}j3__?;iS8~leCj&>q&P-rDvUn8oLA9KrQbD
ztIs6uihSQd%_#F+1Y|c=c`zF{RqIhPSd%UcOh66ROyQY90&1`pPk6d>6+9fuzMHCD
zTrpIWt>orDYp7-fdFddbGE^%m^>pJZsPb@j*EFp=CQX|PRe3l<45>m@9<GH;JQs2m
zP$QW&P3u-M(ovy0j?@gXXt}vZ8mYlE3d1mN$FP#=+Ql_vH0fL23i+cknpZR|NFa>S
z+6jLI62*+sFsfgpWzS8+dLkP>U0c*^q60y()<jLlT95(6L`?>nAOSH^Ly-9*<~>T&
zUefZGThG0yO?S0>N#o-tU)A)0Hb+zDYpUnve2)&g&di7VBc65X3~h$%y1AN~<H4_Z
zh9-MeQ|~#CgL39+YIii3z_T=E1@Pv(Z9MoK;#t|5+B~JlTbkO@(I#)POjG+KXfs6V
z=py%WO`YZPj3<At(NI|X<||srRk79{3SgqLYc&}lf`k!kH4NpexC$PwXMN{r*VL@H
zn@dw%Xs-2kbAcowEg<>~BoNk9pRMq42-wwPZJ49gxGP#T#pHuQ<I|x<gRwLRK|-m8
ziml>0p!Tz>My+ebeoYYpjmF3Se$6j}bdV&Z<;p#MxeCU{K{l#U>sNiyv6RNfLCq^d
zMU9V*gIcPCER@E^L9KHaK2tOr8i!dylh&i=u!BI6$YFbQK?Zd_thK9>2sAVfYuzsL
z%%jnzkr(`e{j*71aMc$MghpJ=%a<&Y0mK)YbOay)@r4FQ&_tUH%!Gh;MpFjpYHXUx
zo|vU4toqlq5o#@%BHDxq5Y9MVrUT&&wH?Luc#3HAj8-y07co6Cc(nPmrv6(KF}>tL
z?<|btF}-9V+B~OGO#exeTLWjiURO$ETdj#pv|sxwLD*JM7`|RN#q5T0KwGb4cE2y0
z!VIXJSbUwft8$a0V?t+>Zi+ns1_N|9>DUACT?|?*pl-Ly)@x<1e%p09!NEnxY}e)N
z1PP4odVsIosICVX+x7DHp1Go2Z$RCpEA3;GTrWJSm#_&Nv{5x+h`3f$ya3zffO!G7
zOApv%$_ubvdaj*kg~6*|5Kxa<zj;@yQEQGl7zOCiV|v@DDgeeYJtZPBO(_7zF}?Ca
z&uWUqG^H@0p0@UE*7_<nryYz!V4T*a*Mbl*PU~&sst_2b^={ogt)fyz=wWu}R_#>H
z83&>W5NC9`Y1Nb>K%CJt7s;Vn1c)>G#g}-_Y1|B7Kpkxj-KGu5?=#wHYYrbUMjKwc
z6MeuKZ3OM1>I24TBboLLFXR}-0j<eU7Fk!nuMN{`@zZYAV!$*RUa>95j0H@SQEGQ{
zF<_bubh8+s#TcMXMs|^r&o`J5r+qq9UNh9H^I7m53yDShOHJ_y)FlSrUtaasXZk<>
zG`r~|EnEqfSj8X!h$V*HV1h)cOQ=-7!9*ki|2TK-N7yASa|{n)I4m>T#uizz%#d44
zr~qP_fn7p_3D1w2xy#5~X>I#hdqFMUWngPLk-A4G$NCX_`cti;`Xd_}OhA8RLxTkL
zM@AsUy9XqoKQgj8&$S!@4?kg79nh|?`NTmWKl_P;Kz{ZUBOtb9I`^}m7)Y-?FN{EI
z9bnA|w4v1p90+o12OJ1mkq;OF(Z4$Px(5tI&)0AxVA3Hr`k;1Q%^?RN9|(sW1X`dE
z8FFpZxf4EQU~Qa5X$_sW4BuIy&$L&R>hBy3L?`NZ4hAjJ-`TAU9hCc>fw=k!4guNk
z+3CaDQ#Ic^2(&_f?;wyH{@w_PeT>dm=<khm#xqRk5EzZat=XSz_4$tsH<gfVa&o-G
z&9LzPI(NLoO?ZD=fk4954L2*qdQ4=USxlVDyWt-_TmT#uT|L~q<4(^AQC~!?ldW-I
zXrq*x$)=nRx}w9{$)+4tAW`sSv#smNUr#pC^(*qZwJ3O&b>ElRM%2u5Fbq^;mMJ&j
z@Swn$WtIr92ND>wOzc;-2n=}JChN|xwXLq2CI`cW9ZilM<b9h=Il6W3eVa^-?ge51
z!TT;|4}POH)hu=($oVdIAjtVHHUoSYfHooLyV&f|iBC~of$v>v@;!VH5U9XXQ_fD1
z&|GTD*$EPwOHF%r>IyvV3X_fdNc-_h5Ew=)92*K?!wSa+^0zCTYLLHOLDd*igh>kD
z@`;&OZ|!c?RK4UA(};VPQ}kodB>l`(N@5EXO5s?>PgrKUgCo{6JO}J&rVNBY0`@Z#
zt17}dQpeNdrV@;e&u9L}%m~}{vpZ}JJ)=G0ss!H#p*ecoG>iD4f)YTEoBn`jIyJFD
zo3*c5`C09y%CAkahb1O-zBUsVNF54=zBW5`7Ks{z$X534S#5M>t5Xh5!&Xz~ARt3R
zCUOuj&;&4O8V<CY&S@;a`#_KE0&t-;&=VCd2qcsSdN2;(6E#FD5BFfLUzX4Mp3)=M
zSVeDiRe@z!j%M9(k6iH$KI?{iu;Ra1iv2JWZ|gjH8?FCR_37TgI*c1i>$-W~ZM{b+
zXHTrq+p*roy4DUPUmEBkT4X)hK%E2{C2W9jc7eir2lR`q>BV}!D+QL=@IwF!8%SY2
zjD`ZpcdgZa{asi3U5~=6MqFZ()LSY{Lwe_ZPu>LUm7v~JDSqFBG{oEJ4>wQne89d8
z>ua(fcx2uIOelZgfj^ocgb;P_@hCsAZ6*5nTKp2GAZ-J=Jsx;ZENj3*UqdeagD0PY
za?aQ_6ivL>qh3U-8t1$}6q^F|BafOspM_d~?7`;XJSkwec+__1vw-zU?Js!f=zYIn
zp&R%A0t_?pQ;(WG9}JG`fJg0mJ_~;6;4ch=TlvhRUf@X84n<U{9`dLi9Ny4;%=^P0
zwf*@l%;(R4VHg6TBfpSBTyyk4@Q3CjPC51q^WlfT@TlbkUu(A_qJiTcHFJKESm00m
z0zZgN_AkIf0rjh2v_%*b?iV#G!QT3O_}#qUzV*~%duI0%c<8uRk9z6(EOgv=9udcI
zTOoyxJLOR?KVJ&{cKZD0hZOqlU%ya9zkTmPiLZ!(h$*K2>`?}?Pow(mTKp2T2+2Pb
z`m-mMmLm}^L;Km28R)e~qLR-?;#tBH)+_m9B%brA$@5vL(7!!u>U<Wk2Y4}Fd+-?p
z=;yu4Sg*>IxZbT6zilHZ$Mn3n%?Q*Ql9{n>M&t`4hIrLV37;>G80u{sVw?pd>bz}Z
zpR<5H>=#mK)!~2gs-4dVL$lU<+r}o>M6-@Kzev%OqrB?HZHl5JM|;(p^I0fzj92aL
z>Bs90<nb(>(6363_X>xK-lde;crWrMx5CRH=hWcMo5r3`=(hwKyzXM||9H-cd6g9R
zf8`?E1e&LD-5>$Myk$vG8pR-!6i_Fzsxm#Boa9w_q(@B1Od=Ts!XQCSW`8czGs($b
z5!?`yxFnO|GH9GB?6opImz?5Ncvub@>Y*tlQ^93WrK#*>nO>Ee>flh7rjpE+s1lM&
zFM0FkvYMpc&-aqo9pqKwIi(qFOj55*&hRQc2y=r8%^6;#G;aht5<~&@W!93^f0caM
zk)fKrOftxNK?c-Jc1=pZEjiOG-LG)zGf4)%4l=08EM}$jfyr484%K89$@JnfsL5=0
zS6c6rob8n<R%Cu4Gn-^C<}w%uudp}L`X$L%><&a~2Qsga%oSV)^KB0EWb`XjbG!=A
zXTSi;Va_2LY7u0A=6mxNu|H+dBJ;iO65b*_wX%S%&Y(pWcon{zbb|@a1zxP=<v>Sb
zB%n4jZ&q)gZ1l=S1Wd>@k_=5R<UtUjv757c&t#KV;VCU*5|?By=Q3!K*Vyc=UXy&y
ztMI4+GSnikkxVt0L5nP8|IX^YQVZ=CLHYwS3rXf41WIN=TjI_8g596f?{2rmYxod;
z<f|q&IhI#h;Z;4yT}V5bGL1z%wl}AL(fuv2+KFeK#3Mj1^TGqtp|0S-yye9Cfg)s+
z!miEM>2m!irDn5NM#$izJ2rb|gbWgGv)L=RHXwnq*^8~sQ8+$e;OTbOrGx%O^>zn>
zc1PPC2#UP6djlfahYBFJdrKpHe`Qh&zRzy$s9#_GzJoxUqxT&ID&~E!+}c0|2=9Bb
zwYiJi0BSee(^0>t&u#}H9|*g>UTQlx?4<Qzx3^fFc!MMzFAg47Q&eUmD$|a5m1EYQ
zJLzxdKa8JZ`-}&GIpP>XaoQ1YKy07!6fj4mV<i-XxJSI1V{okS<(z^14u<Ygulgs?
z5g+>26VOH$<ZZRaRO+AW?M4>xtZlxE>jc`20%dlA>UqUP=Xzx463?1^u|8Yv{&E3=
z73xdz49zyPK)vcb4s4lKp!V_1qpX65diQnf$;<W5`L(YXC?cB&E-LVPfow^TP<p*U
zp3;Lvpz(S^{9b_ylJB%$FG&2FSBM0_LD8=lTzUiFd`T8<zFsf5>u%2ois(J)FU=}Y
zRu-tSpIm7x-dk5)w}ByA6_3%XR)HL2AYqhMAoso?VU$%MqBp`qt6Bx=l?9?zi6Jfz
zyv3gEqlc=O6{weaf*#BZ@kFKk%JKrN>i@w+H>@a7f5p!NJs5S`>H=jwTiZv!r53+z
z%V^-Ob}XZTx4J;~H?)Afx<D+XC=Lf6K*_9cv&_EMu%<x0P?pYFY7yFOtz)NT0_`2x
znfXsq7`l!O<$F*M71?aP-dA7cs%kD!G(Mieg<;JFx)|OdNva?aq}W?gy#Z}+LEgWu
z>HYL|uHfDRB*G8TIQL>uXvYhbe_2morGJ)Ri=Scxfd{}lUSJA5kia`mc$60ciHaUC
z2>lBcr4dMs4=8{>QJ{9=BZD|Qc_8*>fd~({5Lm$dsz3zLHVbX>bpe8#TACzM6JRF`
zL?CIi;3&T-fJZw|3Z3(9fe6rTDYRBAft@FX0Q$QEwXBVWISBYu=iADsrC&W=px*15
zM4rq`J^d4V^m={D%|8{$a}qF#OYKKq1SD{ND!>7hBr#onDhTj!g`Q$ulE3(=AlSo0
zcLKcR+|IF^ZqR!_dagjRQK+bM1x3OiLI$Ac3g8a~D4n96D~MhxTbhOnqU>`8v3`8Q
zL7q4?;m#HG>FcSZ4lf93!wU0Ww!XPRAL=R}R>%)_^3?)(mHI+ubfJn>T?Z)+K8VGp
z+@#;!eMF(!lb0hN!P=39>g{MaLki=ZVpO5J(B-)R)hQsKGLDt~O7HmaxI&ry2NTs9
zSLheXFOaCtxI%fi2qdaAt}rGX6_LC;;|k+f^6E$qRcBmb-zz+oyc{4-WUu~8zwnWX
zg^D=WD&T!Fu`nbuWFS$_#6oxpYBrE4XJTRc22mZ}7ihMLg_-MRIn+D6*(MfVbFF7S
zZLABZf2LWN-;CXK^|V6i1i;0hnpP-NuOMO0w8EgsM1w@Z(+Y9AfhY(Npk}b#t@^-T
zGaLk3eP$F&2L~A-%qR?qE(S?Dg$Pck`O$fW0c~Sp-fPxpx9U@kE*lHwl2C}w+gzw@
zL+8Cj>wTf@J;95OaHadQz7OeP_V&H{pzF63s@-_ig&6A9T&Ui}ds1-FlUobbVJ<XR
zKClAXXNAfUU=Q-x*znoJv+D2DUG5%-3b9k7$<Ea&7CKxAKTAVHZ~*vup*qCn*-rDP
zkjBOdw&u6`&gv6(JAjFnJYlyaNVLO=!l1Y)0TS(Sq7V@+ogo%dGk?vtKBQm#$k&C6
z@I+t|w@@zJAffVgAr@}xb&%-wuM3mc2}|u>|GF@BE$?*_kiGtO;Z;|ACeXQ8A@%xT
z>vs?9VfTZBi)62Z3tI;l$xJy&6g;@7RNRRHiGl|g;ZBSwm}cqVq7HX*CxfRbCP1)7
z9q;g*qcyOQ6zZ*yf3FX4Jy7qILMO-dMe@E0giuO-k-TpLl9Y;YLMKYeM=AA132|!<
zPh~0fMP=7{e!~lalN`<7dQ5-t!O>0`bhb9SNG2!?d2(rVkxWp6L>Z%tkf0Q0AZP*E
z{tj6aRhBWj=z`ll6DgD^q&0Dx^_M^DCHXbeoKoogZCa6>B@jYQrWLjIEuFtjD?;Dy
zr(m;?8h5_6=}-Cr<$?JQ23-Z3UnJ)Vgn%)>NX`?Gz?ffzc_J*OJn;OYvKyqOln16Z
zpI?-`p5F>8#0ec@bp1*F?p{q!8I<yEa>}5TZ&Q(6(xHMfnu@Tb&!)3_T(DbRl(*NK
z_N1Q6_pL5M?EO!eUqqw(9k%TmeL&?qMRL&u6HxCI$y6UmK)q9hR3Beaif90BWdHlD
zKBZ!#qeJ6)W05JG8f2ieu?UCt*c_l3RA)2m_ZPia^=7*QV4?z>?I8ma2%C%i;zS1|
z5H=SfgriFZMMO2TRe#ZYR5v>a<c^vh1RgxtgAOXBLxZjlN5GKU&MKeNuc+DXAkezD
z-9ex@czcmwgwsWQNNq2|tlUdOzlaRpV>Lae-|OnN$HAbJf<1OeKnNIniexAX5?1V?
zdQ71c9bZ8ErYP?n>#D!$lht<LP)CsC^1*Tat4R5&NTpjfI%u(^5zos1r~Z_y_WL4a
z8OU*oXK2wMijYxoI4I}GBK3hbyfa10zk%ns;ot`)t4)VG?dKu{9u5b%XNwSHIvn7h
zD^d$;Jsr^oJ{mED8V2Z{9~tCRMA8{N;0*Hl#L5p6DuaA-<p+uJJ;*0lej@o&Imjnh
ze#xPwa*z)z|3GSMAB~1OYc$T3UA1*SIW)l~w$BtH2S}7u=aYd8NR(9P3;cu6BqGH&
zrOp?;?R*wjy5oOobBlsd<9Z*m^cCsrZofI*y<69w=|`S@>Z$&ZKk~QqBY%Fhf0`8!
z($kfY5kVz1U_`x7=IucOuil5e{WM`YR*<pQ1B3LWt9GnUx?!I}V|A=gx&)BG80(XJ
z1CYQN>%*#F1pg1x0ERD(8*LQ-5iM#m)|dG$R)97Z73F)l-sP#IIM_#7_?bSXL+l4F
zebv*?JZ7C4tp78=8Z5C7fB>wR>6306B&?X}^NYm*B&?X}!(u=iP#+EVSJ=`zY(QUe
z5NNc&;vmpyf5qqTz<n81fbfbBM_iNXDB1`2s4ep0{>V+k^oUZ6pSB_7As0E#K^}6E
zPfi-B0cMd8lZN7SkciV4`Qj^lB2Fg;kJDfG$vB-jB2HiI6S+jLCF1nOzHBevj<r$@
zJ-*o2=U&;iTodIj@yXa)N}(;6__92QYJ<V%CB8oQov#T0|Hdzhgtvafm*tr~TM^^(
z4PT$y|IkFHd#O)G__9bOy5IbT6-acy>C0YwevwFYTRxFnxABqawtVIPQ6v)GmamW4
z;7a&Qk?DTxe0;HkSayCZigC8wr`~4|XH;jc6(5P=+-t4Ve>y6@)+g_V`uKt4T3_5A
zNVNK_rGYda+etT^+ZJEm4(qv5x?c%z@wxq;bqKE9{2060r=+uQuy4b9f-M`P&rX6N
z&O7iJJ=ILJ;<sEHV`MA)pRxMGsjWVlhQy&XWVVvbCjt`WHum#aeSdPBPo_<A>`Yt|
z!uAEl!n*D3hjDuE^mYe`@>$zS<~y<(Bd*1V%a(VK*Pl{+Ek2y!JOEvOsP_rmJ5m2_
z>Jy*5@Chb#KcQj&DjC6#?)I^}U(n~L_W5L54@?N{BcTC82;_d2ZqNr^x*v0vCJ;2q
z()}b<03(nwJLt>%(&zGcJ^5}rOg-pBO7t<5!P8uyv6cq?zmlK%WJ(lFsDI|ex%72h
z1{#OiqfEacb=YnUB&r~D*oW|AFxkN~RY%!2rVmLS^~szlm=HSZ!;#b>A%rG7!Je9=
zf1W;J_Ycxd5IR9kHk%GYaaUt(ao#ZNxygD?4~{LyWyKBT1&Xm|Xp@VTsaDer{Ys@4
zKZPg70~k2D*c9(`fJ7;ii;H}G+Ji(VOfD{-S}dkLF)%!lQ7%@i`Gk-hSTUtIS8+ZI
zKvRmVF88eUa|5vUy<M!VD^_ER{1&b_tuSgq+g8w`@^-OI5)|`A<?UjbBmfC3-YyQU
zgBA3~0x`%6ZFRBwPO-S%BzY)w4eq6I2Q68+-L$rtZa2|dQ%sHeZn1I|)*3dyQSaFY
zgxC<^5sY}ZxLB;AAOZGnv0Otz!h^h9EZ0yX`5O8z%QWdh-@C<FHm~LdKnsCZlYVW@
z=3?n<i}}*CxmYeeAW_ohV(Du^l1?#v?OUR);P+as_nP$O#)GX61}z+|4hAh8t;I5;
zE#?bHYq5-ILBiVBVj0mADI(g|VnnpZ#E<~oIqTq?`X7~=b51D~d!H+o5q>cbrOp+X
zh#e|OSbDA)J5-!XpfMpk&@ayZL2ybQJcERN1O4*sA0#vf`t7s-VhX71{QT^n?O3jB
zHFf^B#-gyg&fnHp6js;y<qZZX0;tZ9qyHN*J(2Vr;m>0%xI(|dH^MK^pOHGGd!~O{
zfz<p+zdWo06Ma9@kAVD2Ogg0WXoItCg?@E%v|k>VfC-t=esqP90X3GDt%S^2zx0Vn
z&Jov-Id?tBfj#5dz?J%q$?<;a?vOTv%y>V#1A_u(p+_gO6D##=lN0^&7zj+rO!Q+T
zBXCgb26pQz{l;{IU%EBa5HbyZ#J_WbQ1D~S`}6)~ty-nOV)|D5k&U?l9pR_?u4PYd
z)NiU->z9)XOw@3#-xQ%VNEo`7pnlC&@Nhjlu~EOTa=oKM^KiZ26d4ykpNH%H$heGy
z3qmn4<~{bzd-{ax_w4Qh6NbNMcNa)NyyutW5+q7}j~e1OjsR*4>$ge2qjHOEP{7i3
z*y2y{>+M96kRR8&$xDMq<85afHtB<EwmYTrZG&HiQIG+|cE7wQ3K9_8{TQdCC?NEc
ziMy@mH|suE&29&S0;$~&1_e^P{eF=FfDSNr`{Bs>MMXai_7-c$7QM_>-Qr--sBiJh
z``Qo!MvK4vLLQ8P1V)Shq8{A&_-WAZXC1fdH5L0oNEsU6`~5N#2sTvq`w>t-!!5@=
z{)|o7s{f_(GpC#AV$f$!H_^qQ&#0T0i3USlbCmVmrmv_u>KID*f{r@fL`&IGzq|zL
z=l6n+QiJgumC&N=>{Z+Kc{N`;5Ogo-O9z7P1%2uCG~EmO(jPD5zQIrTf=&wGz^ZoW
zTGdH8InWz)E$F1}8bCtvWSeX7)3u<}!Zln80=<9QF@dfHopwy1YeA=N-vD7CohIMF
zuYe#~Jt&Yj)_Qp-u7HFF1>8RVwg&RTNT&pp<oR!Fv;!AdV2d|MKw_{D4q&>_HD5Q+
z;tplM*`+T?4GqXsS}-9rG=P?G5kesA*#*1xeX06@NH0Q@rcHeSJ8^6#2nj}xV!03X
zQOQvb5;=@fghcU?m&W`Uw(Ud2M`Hpq&;k=OV**%_PSeXMNX<?S<h^QD?9orTil+wf
zGRhGu0Etf|NLbg8^kb=M0Y$v+0w$EF1(2MXBZN@fm)IpA>#wF>3P=};TqlHH3cy9~
z5JDhlv44N8zn_{FkP!~jl*A2SVr&sYsLx#XO^d!YJvSho8#0j)nj3&~`;HE$0s(DP
z0P*L(PxMy3cvAqE{bxa04UnzP?9;>gE4MTUq~`(?#x)1zr6Z6ip*es{N0hAri8;|6
zDDA_e4I&W?ptR;dq&I(mBS0=_dw}gcrFZWE0z+oIgH0}Odq7@C##3N#ry8$|!p>ko
z8yw6VZPgsn-zg{_95j-i_sGs5*;&VY-|3rguM3JRN5lkHT`(<DcOZdP7sOdB*$EPM
z)&;xV#&_~W@|R!hf)%&oFqSZ(T_42Tyw|grmS~r;-<{IqH-jO9B0T2LWh;OLdVNr~
z0!X0O2W2Y|DO#aEC|e;&-872rIHh0SeUt-Ag^mi!>O%&gqk^dZFv|9a0@@3~yh%Y<
z>_>%-`(7`#?mDgim#g-Lppiv5tg0buhX&Zps|X5h3sP7N65tI%X)#EEH`o?~gvAZE
z#Y75=8^~e-4s{k(`bco<IFN?tMrzLxZx0rfn|_c$XF+WG<x`-uU`cO2D)3aIvtVg2
z&)4*RP&lBy7{oFD$nW*9f-eS*cAfzg2!&B4ZB9^`XN~+p|F^3aKgA9i58&J91id1k
z2@>Yb3APvA3line3F7@K+988PkUA%L;k=+YOe6+kE~v~6ikm@PMucIn25}4P4qi9}
z8iPtKcC~yDn|aRY*H?fg+BD2--58WhGDwu#7=)joArz)QevJ)0qu*QmnxjH}{8~^h
z{E&glYe9H2YUD6c3xi@Z6NN?wX_rPz@xq{dNeEB5FjnuKUbJ8dW^piYFNViE-gMvJ
z_kaAEzK=Z8|A}WFdi;_8?Bv(FVLkk_zQkR;iRKMmq*F`8{BEZhFH|(!rGSZ2n(c7{
z5~VcLIJujv;Nf<5R55;Cx!qCW)7EZ=5;1M58Tcj35^9GJ*yH)eOO+ouI@Asy*zEur
z6!QVK1J9zC5V?n4t{PLi?{Rdf0ruDp02vYrq5+y|ev}5Z1Hrs;Ay;gU!hZXi5wgnM
z#$uQMK+uSZSB^`m!bgMRm17WS-J>=*NPr&=%Cs&>fFBJat$Tt7VkykkT7$}|pc?yF
zWlv5rFSlBCqmxn#rsyAt0HM`34<ry;$vhf^ATb78gJq{M1}S?;4B9BE-v#A%O>)p$
z-v#A%O|k&=T@c$f+H67*5<ik_+T}{$#$2BpC2XO`X#XGI8t|l_c=oAB{_xP#{r?}|
z8#wRl0{@TC4S4>K?+tX}pC;)47y6pPLv4esHvRBpk3af!`k6mG^o;Xq1Nm(N7>)S~
ztHoXxB--l7p!_reNL2Ah8ZzWBK*C@A7?htTAd-9MAA|Tb!3;XWD<%1XA?5bixcu}T
zf9Rk7^Y4CVm3fVct_Q&tE&?(ra$ra%VL+nDfuXqAE`j6_h^j=9bm%fL)J|kV@l-m9
zfuZ)ddR9@OT1xAFomE_D^mf(MIi=9COI^q-E`mb{rPPJ8mq}O(cI!ely?EeNO0jNz
zNNmbLK(jt1H)SB9Ss#*{GLX=$580ctQfj}kA-*Z=2LiT?b!?z?;n<MemEkFn#)jms
z3?z`oh7fuE8q*{a&?biRUS_4m#y!OoLs;y27#^XyG1;muHhiv|Cx>JJ3@)H1hhzW@
z5>S&vGNTL<jW#(HxP*^rB6&Ye4h4I9zN9vbP&d!8_W6y+U02Sq?FAQ=nPK+~NRkT4
zSEoUukQpI3?<U%vMFZNxP~Hca*Dt!$4MTC$`@~-~(^?cXhA94pA>1dQLDM2i6<8eN
zle;?zw8-L+oSGm}!s3ve+#pfH;t(b`R#sBQ(`8n;)Tnn=EOV5|tYsm&97707%cw(W
zafs3^T*;av#$7cl?TUekimeRESAakQVPz;IHcuddurk!KvuB<t7UX*C!KksoRkPl~
zpkcc{B=0aq`LJCdDi)`wAW11ymhx;9wZ=f$#IA`OJ8CvL5Huz?IcCt9+!T^;B1QQI
zY*XmsOZb?K(wJ-(W0F0dFtn;>dr0CD6r1fK2@+*Dw++cCRrY;3BtgKE_Z<^xNWO0m
zNjwG8`}U9o38eRFNZyAYjs>(2L%68<X_;}a@52z@l%*F^W7MI0*|kZdTerP-r+^8d
zy&)NBfCSLq5CRQ)IXFh`-4epr7&^0krjcZulSZTx4B?^im_Ikgn~@-)+!DeO8096Q
zjV}F^6{n2(6`wjfg!ySm9^F9(I-iEHVZi-BsDS#69ZeZMYd*8<4kqgUnO%2~K=>>q
zw{sv#Cj`gyz9<##c9h+hHg;7U4au86G44i=hIHXBK|<$f2&q51U=pJ)JI?OU7`<zb
zJEhW&`M6Um_1*E1d@T<uKsX-47ULUHD*Emu+nX_3Yfd^4v|&DJ54{-gw3DG?5ki9m
z#K};nE}m}%1a{1)n4UAft2yOBQ0Dto$ZIz-ZJ<wuA|gzS@eTB;5Z+SfE;UAe{wJ$v
zIb7;}KRFoms?ATfdw>uyehS6Aa+eAcX8aWDez8pwMyTiY^bR|k#t@G$xlRru?6=Rd
zo$ZWnHD{dyOcZc7BwzN6DYV}{8<H>kfkXjkLwJdF1WnTz?YEz|`m{GjxvHNJ%hd&3
zH23pi>2pB><N2`s9t=oeJRiQGqvsM1fem*ZGdmcURn&#$6`B~|YS)EjUIZjm>cSWo
zVq{^bUC*BAfRR=26iRP8)`#VrjxmL{*!AI*c*PJT5bDF2*ss#tk}-PIajJE=gV9Ot
zHPykOHyx*j<+2DNU`!3i#g{}t0%K~p-36XT15+~|(3-+|>#Z9rjLvGXDU9V}GIf3&
zlT%w1R+h5*uEwNV{1Q_Pe84RV%NK4y0&Y<lFWgWN1QJ2eqHu6&SY(TdK|zrAdRToU
zEV9Lt2ff8%nJtzqWQ&)CDO=o3Az7Rz=IXF=V{Dc6ayR2Tr51#31x@tTVR;Y=NuaF`
z%Vi5BhRo`4K-?N4k_Td|!$EQ7LUP~@R)@QZRJvqwm|oX;rinIy#JVuvfE?wbAcQ^E
z!<bkDhKN7nd@)!TmRCza!lrfMQjx*}39xlx?9{uWof83VV>qvwU3Rf?p>Jc@DBu@8
z5@==jCib_BjRzmzWLFMM0Bs7(ggi(9Z3-hHPk{_bRBlr^RLl2TM51!&@lD~dxa=WW
zT<NZVdLn4b1evy(UDnfxRcv<3p+?*smaY~uP}v-ot~LQ@>E6Ny_B1Z9-C|c6OiYR`
z_M`v_ge_rtj0+M7Tf#`r(lIVb9OG^Y+sC*>3sbj*<uR^g;TU&In2vF`Q)&elr#=kl
z%_?!l*5s$J?Em;<*5#KN>s`ekhH-Gl&@pa)D`^k&U1m&9?Fq}&Fqr7BJyd$D5Q1%c
z*~ZI^Q^~zyc|{yIhaj|<CShj|1nML9(d9-(@}sc4{*7xt#0}#O@eG$ir9Nim)kZG$
zaabm6aA^lJABVAbr}KJP1Sj8O{jS=;%Tq03g&zbG7g8-@90ZPorvZ)DJ7f*3F($Zb
z4u$1MJHUn1p|JdD2S^lnC@eqPK_n`2D2$JGT){EW*N53Xy^SlAhr=?#ggZ5WI2?xe
z&vF@f?$6os-bQ)q^RP@E;Z6)>KBobB6nA%E493wn*4f_17fSLQ2Z_Gx@eLvM<3ez+
z-!iqIaaHo$usj_rR7}Wx8^-C_-?$9?XDj=CKjVK=t(Yw|Oo8r!Oe^`Bt(eT9;URyv
zTvr-5E4_Ypq`Z*&nWTggxyYZx9WLkJD}fGG{pWDU%RDm#2z=%cYxLDdR!I&iX=~*I
zfD9>V-+{lJP)J^JDBE_e(I+#sM1DR6Ovnr^!Hbjh0z;vKeOX<J(vj`F)(EkF*BKp?
zAnjhGgjOBl(Tf$hvxZk;Sp9Xzuad(`<n@0rAv3H5YbB)&acdIq#;|`~XY@`EcW~%R
z^>D&L`W-TOgQ}k0e!X!=s@}ozL#Cc^5DSwK-l>{sy?ec}P)SWJksqA_7g7^T5Ln8_
z#A{YBS`%+VW2Rm#X>0Nzq+TpRV^Zh{EWCL&lPR|tJJK^tluojVLlBx-Qc>j@O5Y2D
zYo1$zyiDsY#*on55*+j12~~bE>Qz+a{48y`xETeu_+Ai5K)qUmVL-39@QYFN*qK|6
zs^q*9`C=fLkeOGK&3WQn2Go3Z?QKR`a(;<C_rYB!;+Ejtr<}`R3@l)SZ!_8_7nI19
zCT=r9W<d#3nz#>zvM}8m*~Z(99?8ZMIl#e$Ok)WKIIf#Q29vFc#cnq)Og1?<G}oF4
zN0f!h^cwra?I`QD5}AE2;*;sM667lIZ4BUGGA(3{w;Ns43!S>tWLijd-;K+j2!6HQ
zC3y#}v$q?&4Bze&ql8|A(D=8B_OJu@8`oFvDbctGCnj|Fl!Q7^j}VCp?<u+HTF)9d
z3D6kx`>lI^W4z<4*k7XY6dQ4&w7;Z;zdcPPl=heO{1v@P4iXO!uxlPPuB$pwqVYpi
zViLC`%zK_ls2nKiaf4?GCMO(*cC;k#b8Gd3MmJaS(Gq;JXKfL%`1_+nE!RUvKfU|V
zQjOm=A}+v&mKO28ClX*oOEEL&A(jUXqYsxVx5lPi$aap@gVu;Y7=g(3hf6hnJC+2X
zf4DTt6L>^I|8VKWH`77CS_WH6^QK1lLBCoCtfQqyLhSp>Xq#}nl<)g40)bvVUMk}N
zkdQrID))ULfqJ|Y`#yMXwTz7Vk}Vx*<hp+8sL-nSWvR@QLIx^dmLmT(pKe8#q0O`(
zOO>B3bCA(7zZO5mYL5pPD?gUXkE?+M%#Wo}k!=78m>)~Au238V5^>OvrR{z$6$wdV
zh=k-%r7|HYS!k6rrASD=3I_*0pbU-RmEg&0`pT<rxy^cgh>=pdf+YeU2%y-Zkv8jT
zuQ4<N>*vsRybSX~8yQi?S*~G5J6A1!+IqA_92t>oJ>;M_GJ>^Um`ks?jEt0wi-@od
z&w0qCjf$vaBO+{*Jm`&%$goYa5Vnnp*q<dVqiHuW;(V5{2RLXsu*5xSkT7LpMCL(2
z0&-%+&V!UuGf#<#7t=vtqECsm^#N@<r$l5-j;BDH5|McjkU*Le!KRbnHB1Jy*CKi2
ztu7-B+%<eHf&or<4U@Qzvm~Ne5!JJl?iwcLT|?qo$Hy4mT|M83$V<}V8M<g`1aII_
zR!?wH&YKaux3iBLJxQVR+Yx1*b>}$aepfAiiblr+*!Ols267;w_jW|ytN@8de>)Od
zCmWp@JXT&EQQwh`E_u*fV>h~F(aj3p=syV?;DI(pl<g7Kx^RN=oU0auZ3PYZO%WL@
zC;5Qi6hW*^T@MmgY>EW7w^<>gWo>gr-PUG>ozUMB(TaK8NqR6AhBZgv*XWv_WTE@E
zMzn%X6p4U`#@ordy<n8r?zFoROmyQ;yBk5mz?~6!cNZj3cSaCeQM?Nhamvm}=0;fv
z4<fll_6AQGF9XyE5#`#LFWv9YkK;=v&!nGu?3w@WFD7nM$;TM_AacJPM4(an2TtiU
zqdthpuPNavN0WE8L89~zB8h8c>HH=lmngg16XT@=eK+gcU?d*c?bMJ?$ahEN33-z5
z_IF48;sQ8GAncAHQWZ6%`y#s|=__R!H228H-H}W`PfuP3s6A{!gK_DDdz>=(#apKg
znpS%v@-kzRPpdr<gr1@d+~~s74t6WLWf^-S9dF=AiD+o_Tnp>RjI9r}IEB!RYjGNj
zW?YLs<Di0yv_!B9ibCircS|JqD_IfyJEkp>@|!$KUJ<ON``F`?jPwKhoHFRn$v&qH
zN-6A%$Zw4#c}ihl1gp9z17BOh)2v+){;efgu`iOlfnE(oJs|KY`*M;|S@Wq=2BjQ6
zjmS+gWKhPZk+=;?IfYLn2znPIasmXR-b3u}$;KNG9C9G&5dV;4CM6XPMFQf^A5;Kw
zD1u;5m}$a_LlL|-Af|>XXUm~Tr`!2`gd}Ahj<Cn37&SFVoH9Hx^GHM{E+B(4jzrpB
zDnTjfa3oUQ%d?tp-zO=iZnX|gG1e--ZFMl{J0PtQnL~gOFj^z>Ye^u1(Hf}~mn1;K
z&ellR2c?}}*h#@=Yoyx)o@2BkCKUwT1EQAtqVZV%g9D;%(}+?P1EO;G3n>&cASypW
z1QNvzh{CIj<|sfh1ESemWHAM@m;uq;&7NJtgCT6MvzlKv?sDB+=afRpjJl{-Y^swy
znNb%_ic}Fulu{R!sUnalr7qg@Vd1Jl@@rys?8#Y1u(&Szz=J#^nxyEzKFYK7?6p~j
z*1bL|7biSIHR_{saRP|~>Zuwn!bt1|#zmF#ShK>`HW?RN$=OE6bq`p!v+-e&jEl+@
zDyh)-oyJAw3I!5y<DyuhDC$WeQy<M+9u-kf3X&6}$c^%BcZ#AO#tvA<wC?x~P!^RA
z9VA3qR0cgD0m`BXdX7*Gks@z8!}|Rk;}1&ZjHpcXgG=nFA-?Sf5=t|o!H{P^<-k(p
zr{`K{Uo{T6D(5;%gf-VuBF{XRlxB&NKrXVp3ygM3%_6%AQry2TvYP-TFcw7vBEJoi
zl%fd0=@wgx0{JDPD|&!HXD_k)0wgq-*nI&KnoFoJ&e0@I(IT=e$^(T5Kmcf&V*~ld
zWsVKx8<*ML0AV04v%4W3&{jtC4$5vwLvm#lN2t6T($o#Bc{i|y3k|JewcQJN0?E~O
zFMtH*YU%|FJ=4^1YuRTD5qhq5RHzTuMrH5@8K|s{B6vGPgDXv;=f<eA)w+0*@po4(
zeu_bb2dK?PyEY&JvoR`HERcZN7{!W33pz+F=o_Pnt<ij*F(n2B-ixYXKKY0ib9_@2
zaVNb@D_MBM0|}t0eC_tqHZHWcMDeMH{}4q_HAmGuMBJH%3EBryWp7lCy`ZqM%|-=V
zw9*{Tl1q#~*5ZK(MIZ*tKZwdG6eOTOh{`AwBrN|RTCx|G(^XSq@PKGnRNWI5QK;lW
zZ+BEip^}Aw=))*Qq4a4}=pqu{7gY{KRi?jT?5f3YyESQ)?Xw*h1Yy&@XsHM{KmvPT
zR0i@OVbi{7y92O^JUKB$AiqB<19{0p+kHw6x{0nkWbnp#H1A(gS8TZpr?5}|ncch8
zcsp<;injo7hItu^8IMJkuUMxyjbGK`muMmIVa>6q3>iVfnqyHJGJ=FP$D*OHWD604
zx6l_+^-I}8k_Wxxb_+=sTId9CA-XG@!64F3MwQd(GWPwO#uc?7Y$Ir#o{Y+f5t0Bq
z8I=(uNEmT48aUl%gp3%!iK?gCjIbldZ=*6|Bs~!^wnk;dC|T%^@1hz~GvpMr0quuq
z-Z?oNvoPd`sF4!0F-x=Y49&)w6=!T~!GzEmdm@5_wP$D|(hECTnk#47!ncgh*Ppfh
z8koe5^0$xNBm<SR)XHQ*E}#vF<&BF8x159IfSB!;b7aBb7~hPt)yv=z2IEA6uW@(;
z(ZMn4mO%n^a7;Rc9N961wJtMq7Y}h%$c`Z~=@1|Tl_4>EH<u%aFe0Xmjs2gq>d{&}
zg;&61yLc*LL`=>tJO$Q>n4DW6(P<-MC1Yb^ZV`izoRKkgOiauz$%Edgn4DXZg^@El
zMsthWr#zrdh~*_F%LXb(u@hpp!z`x;YG_!A9%`^n0}nC{cFTZ75e?Kb^zG4dvU?KS
zzS8JgH3?@>yfMKfZcG=iSb>Dfq!^AFC`GKc3uv=r_%LAADr1|=H#>$iVmcmdM}^N}
z1*?tAE9clyU;=7ROukeP5>Rtu=<Lblb=y(#jn=cPjkv425$8I*d~h);8)NcnDM*rv
z$xi`;1V&>Fp8}@I+>RE{g{*mvaclKL2Z6e0VN6B>kO9KNm|O-y0%2hc%V2Mg0BSM&
z^;)BE^<oEsHUWzr1ah8>WAebS9e19KV~AO4A#Fzs=~9;2Zp3@wH;i8zlQ9iQC@zi3
zm<A*YTN<<1(RO6#ikP?!o?2&Uy;e9D&@#Hhv4ED*6)_pjKoLMIVu)tmrg!_=2ekKN
zdCyyqtTR@r#qY=9>i8Pko_b|ByYM|@W{=(Wm;e)4yX`Rn5?H%wOngke(jKj)eG*gl
zW9V;UPfRjzv~J&In66sz#CV4U06vMy+fpC_@JUSG#sP`({z<HCKgK)l+lfKrUELRx
zw{au~UAHeLZ{tW7fcC|38>cHb1Of+RIC0LU?|AAV*0R~?)D5(41oi5{m^^T9&wKS?
z3`_BYTo*`((G9U%+0-d!J9hsTqh|#ewla0-;g~#mZqGaPa11BU^vY*@>d>QX%@(6a
z#ZjEA@?i-kRF1~vbq$ax;b;t=8K2yN3VQ1}%QhRAbUhvu$0Edp%JEo2oX~=V%JCRZ
zXd5Z;YmZ%@)*4g3w?;JMnnEpp+SbuluhsS^kb_>U?N30WeOqHC-%Ec&4DL_9i>d#T
z{zUSicgprBk_CTqn){RP+yrb2e~KxYSo<_vy3M$-8ibgJ?G-w0{wXHkhyV$jeu|Zd
zSBF6Y`==N(1vCZP)5h;CO@U11S$pt<36-<<;0Fnnvu%UFJ?-=c&wXOM;i?%NZ!48{
zdV}L~>Ouw(gX418g9OCjIEMXANTB15*1CA!2-dX2xY1V^$LmR1B#rS>Cmk9XJB{+>
zu((WggNea3ERIAsVnoOQb~w9!r;$qzkIO_in2;GBmkDa|dL|pO(`cWnkBbQnMRGXx
zag6nQG4C!2XrtqJ4P(bn<JZ2?aU)9SMCt`(!B}?5`^J^kW9^!OiJFbIYX%Y~jE&0=
zWr9S_#>SDXC&zpN**Af`^}f-ydV+&Mj&VZVD{gW@hJ@lV5j}wf!h|@Yrz<%E>}+7|
zJ}|DXX>br|m^Q@a{g(^4V{C{Qi)08$AT*E-*Q0J70@{>#-b(iB2gY^9Q{ou+%@o~r
zpvt|-T)T{I)i2t>U;_9>yK*35+KX}NaX|w3MQYe*IRYNeWZvDzb2T#^1iJM)(?Ouh
z&5X-Hy92M>%s6KEUh+{Ls2Ap2t9Kjsx+><!<rD=MO7p23Xy*$O#m<l8FrhEk0oBB=
z-edHuZgPqxN8e<(NCzGzH^qy^-Weq6#Np^~;t22yi`a%e#?94>90bZYEpiaZO)PQ{
z$W1IF1ib75lOVf<-LluXvCk3*fs(XK;$AVeAOnOY@v;uG7UVUS#5;HKd?eZ*UgNDe
zzEJhaUSn@9eu??oL7{ZfTTTO#4|&TTUw8_Xx2SJvrvef_<gIx5inxfai6J7yWpVjp
zt7O5n<#D`{c>{(-N4$m;&wDrSiq)j=eEOl^_wUOt`q=30TOG#>IZ@QFBMpwVY~aU6
zykc!!x-&3g%G$V$&OpMHwQ;OBIG2J79<F1XJ~qm#*V&Z;6O~zKR|X^r*`om@5Z2LX
zz=Q_^2EzuHZ86GwZEz5%sW&(XRLq9BOmsp82pi&XUk7N<&<T0ic-}$we2ej^e^cDP
z_tuH3vpp_CPTxL5tK4o^3XcG|-L4c!0B)yBO(fsmiHh4}_1kAOxGMKJN>q<MaT#<%
z2uge62s+7$cA|QG92YkjL7?S7mVSqxLG$Cd3?x88^W(T3NOU6dKwJb8Hy=PCalmc}
zJVHYpup0s-fDYIm6(rY$N3GM*5S_8I#Pgc02?va!`To{8KKslAiO$p#r$tL#3IdR)
z?OK5Z<Y~JpKmzhKHN`NRtDVX6GjZIh{gM8>YxH?{X+8Mku16nx`jJ2L>#qOzKkxeg
zzf23H|NEbJ!2+};OyD=Zt|g1ON%Dp)NEm!3E^o+!#A0?PE^o*Z$!}hsiQ|UsDw=|w
zsiOuY*v8L|w;vpkkP{GGw90^lT)IG_kO2w#vLi?oG9ZBkh<p=B%E~3=-**uy5(5Jg
z`1>wg+ow{XFq9oWVti9Q)G35+Fb++~Tab`JAwv`L-@8DPP6Gelg`-Izz+Vk##m9{6
zYKA)q6rm1J$h010fG|9f<o{wqDnJ;Xz=eqSX&iT^I!&}1jv2dLH4_~S3Qi|FRV9x#
zF(EH#K?fKU6S%~IKaU{{6gb_Qd)!##s+sO!kiVMlV35C>o{$b7I>4Boz!aB_fk0&z
zoBbskW0nI!A<C?TydT_|hbXfWS&?4_35Z#Vi@NjK)tMT64%_jSk*S)KknuT~D0NOk
zPAia5nUk=mRc8uO8WVh4^#g(CY;+2zNTt!SpCXmUgp5=m45Y>c=GAqWR$Xv2E0NdA
z?muZ<8(fsYrTM`$HM(F{X-gBza?3i2m$Yl~Q#f-x0QgcH93;S(Cgf!wkN{trz##@X
zbC7W6OB3nkiF{88-{T<$MiYH{<;{e;EaB$qqc$#dtpqliA*7$$m<S8s@+D}Wc^Nkh
z<*j1Zd}~x!uX2o{X|yUKqlYeh7OhIi4+((;@Tvq>+xs{I?l7%ktG_jVQ@h4Npy9N}
zsTNI<H3=C5b>UNFO#*8a-C+WWJ4|a5<zvLBD2T=q1rydJ+C9qObe1gKVOo>;-DnqG
zn}Hh4SeH<`#d@S~d8+^K`ai{{wi=gKgJriZO`&xO8Ad@KMyyN3D)__%$@MSn%D>&x
zg{IKEtoS?Qiazf;2(;wC>of#Sp?4E9Xn+b3-c4Z1r<ciK5WXzBC86wK<G(Yu*W#CL
z2Th_aPGis{+LDl;8;2H9wj{7w5PeLa1=y14w4<$$=@^OkadSf5-qy#G3*D_wA4?|s
zcv~^=<3YkOw8Jj;%_-yg>RpaiG%a^IR?)QFWe@8vd|K{G;M9pO%XXpr8GG2G(?;*=
zJq`lR$~{i&(8gg;qF5XwKn1q#N#IQB5srXa*}^*i%jjRz;vmq8QA<K*0J`u=+L9<2
zCl4Tj(2~HPByAw~(uF4JQEThJjE%0EqYeh$Lp|zX(DXc-kT0l02N*{actLd_rPI66
ziO{#!&L50?rPsF(2HivbHX)A^Aq0$X6Y?89Ac661B9Zj42zDd*2Ep7iES-TfMoB?n
zZkgMpGch+l6o8vLWlE{|CisK8snvqye?mbIv6Q@8h6n)fD1k%)^UB1hC5aLw|EE48
zAv>=O>#C3iHNQ;0BPm|u2g%>*hb#|}%XnIiaAE0!wnA^^Lmo80UqVj-wV(`JSpiIL
zu1vn_iC5@h1W0~(0a<?0rwr#1XX)!s6^IDS@^)K24D)~Sb*D1KfwY6Jph~Z0YrJNU
zo@>iw90(?$)|SaQ5G1TxOZB0xXa&`MJ?f6FXuoHl`U~6YHA`8)0yA6zuGknuh6}YJ
zkjq(52=tAE3aax)Hl)C;so3bK5bj2&P-=>eq=L(6Pyw}>oh&f>RBU!s$RliaRLCQ2
zCKVd<732}Nvil3o-W6LN6>6oeWu}<gkb%n9vce+%ZG;N)dOO&Ah32&tI~*07?>ow5
z3IZ}v*-?fR#KXK4J~wNM%txzsIVyZImdWt3LQF;)JTH0B7nR6Qm*p{QN0FIy7auD_
z6uTZb%G65gj0Wpm(0sR3_lA^Q`oKl`4XLPjNe3j#Z%AR$UXPEEs8s=NW-4z_+7(->
zve(ZULCf3Q?5wn#nc};ve6<R9Ip(C4`6-n?T&sf?-;E+3yRWZ#r2E_y4lXDGBp#u2
zUQMZe&*PxLdBl0y3oEP0%6F`1uP|r1E8a=T9tRgzzLSzY4iZZ5q|g_*_XZt2+`z87
z)~tGXLrUf^!6a@<-tPwql?^G}@29{EBs|WBRI&KZ6p{R(azo008P*hhlU#7<n@}54
zJul&x0IFzYZDJo@YhGHh$uW&e-;|Q)1&~2Gn^Kr^eYt6%npyRAX1|)|lyv!3JQi<G
z$q*4F5Smi~v0nvAIw`E6^r|u}!ART5R$gbmTD{YOpzv*HN``Nc0mRN!QrtBF35cC3
zyo&n_N5H__&1PJ0{-t`igFxHO-3|hc!`-Q5H`zWk4tJ+|T+F|pRz<PfUUu6JX0PhK
z4g#$ad!1^~u-u!HkuFq#us0>XC4pLCjc8%bH<(vfw>SuN@1Vs&pf#c;CG!PP0YXa(
zFXG(6Yk?ly&wh2Ic~{MT2Z8=5b-#l^f!zL-%+OZxHDZ4X|CF?a4$`Y=jW}T)ywSWV
zzvhI4K_T1;2ZPp#6OI+MMw}okhSNGzMQcQ>^<TG`BV0AD4hF3etqumQ5v`6Lv_`a&
z9gFGOKowmZIBQ*WoB4)v#aRb~{;27!gF)8@&ZYw5Y6o<HaW;j!rNhOrz@>meY2~6=
zU-r$NW{mZ_)BNvhFof@^Qs`3wgVJqdj4lTZN(V%EgQox+l)kVVe|e&cF6<6rC+;*a
zs~+MY(82$Zw0zG5GC&xTj)<@tBoKzAv2;?TSVaf=!`MT2nbp<990Ur}hNWeQ1sNa=
zOUJs)Ax0<r!_qx3_1w=9aIim;eRP-kK=numfe!OWI<=s~{E_K^$ca?(!~Buy&K3OY
z8dY=!cno{`Zu5@nF%Cj85XLwN^gm5w(sGXi71%H)jh9Gh@u{K<!sA)~J?6#L;~fNi
zS4AD~Akcp<jZe!U94bH<pT-|Xb>j%QJ^TWD_8zl)^$QLH{pHdN4nhD3FQn!5nkxR6
zOE09;S<jOk0XK^$v(N7_pRS(lAOwLh*+B>bVX{+;AZ(aSwdl_gaO-$FoA_(<_tn!K
zgb?~-dRpdjtCSEBrl-YaR#ZF$gz4$3uAbXD0{$Li2J3mRd1v(u2O$g_W;iy4fiT0V
zMHmP(s1}srs#5T860_KQ_nJ4>%yJM)fH2EJC;`H(v<!8j0)$y<oI;Kj1H2Sh9oVh+
znd58bIuNCRnCn240%C4jZXK$WQb5d2XYm~mG0!3ab+MJc-<+q^EOsy=z*wA?@m!S>
z0mkCAU%WyH5*UlqxarLkomC3{vD;$WgXXqAmIHx<UDZm<8$OT$gq4<W34sKJmBw2_
zE3uTIG4T3bb6VMEg??*Z?tTbA?MWJgCCyH4Vt{E*%grOy0Mnet=8<B5kcj=8)8*UJ
zB3VZau@l;w##hiOcT}as;rG)#chnsOjNF-)D?Lb{?@Y^0E=Zv7Ok<O~Pc(M|e*n$S
z^*2B5^`T>60tSBQ7?=RWhmL^>Kzv9BE}_>*FAQjh(s|!l@!y+^mEuEb9PaY}>AH~C
z^doHFW9HDBBQ`Xcu<nRGAVC89NV-HMMnD4kNE*4~i4>V%NQ>-AYsMeV5~bHk2ZQp1
zCvEc}L{e$_8X!nuoJ=DX{v*XQT?5+Lblwo_)PI|QRf^B15y9ZAZfaMuZa{|p@1M<w
zDhFibp$)je8jwkd6fj6&4ai_OM{!wKGUxdW^FCod((Cz*>`riD&hr`Rb3t+`xvql*
z#Pb=f>mw-H*e#$9&*Y6`jZc{Mq2U=M1MUTKH?n3#MhV4k<o~+;$dhKTO3)(m#Zy3z
z$jD#=Bp^p*5Nz;&?e0cqjb+=PH1|}Fb#%y#u^IUZ1;{{WYzAqr2VuoUxB->PYht^e
zG9M_JNLG*&x(HTiETc@zsIiB*9hZ(X{p_iy%`0lb7REpbz|1xVB!C$iL&Fs$hAYd2
zre(x=H!=A6)TE3$H6zZuB@cR&GxEG!vam^=lA$~VdDV-kUN2?viOljeyXYCSvI2x{
z1l8`Pj68IQB*0$E;Lx3pKQ5w(Z6+K2jCu7VGojBH9x$OYGb6u13=%3cGxDA$NW>X4
zGaYW{Au5qPGMt&|cpHxlC5IxznVFk!;q&eyf|!#LIa?4I*>f^--ho7Mb24(?f#kAw
za_J%p?;0~AXIuLhQ@gj(9#43L@ziLKCy)SY%t-eD5<ra^%s$)+aO2xp3p063GvZ5q
zv_>t=xTAdU>8CNZD5G=`|HlFnPeF^9Z9t-t7E%4Lz~<9WjkB0_c+R{sxi}+VGyxMb
zi!+%ly;K1iP;apM=gjNVZ)D_)U0@P7gX#7Xz1M<o-Ym=Htz)O2Ghg&A%eeUmf87DH
zWjTBKujYW{@{D}n15Btcr>TMOenJK&tYp3aX5N!rnUQ;BFd?%tgKZ9GAY?$j&6fVn
zd^GvCY-(Z>H-lrjtGEmrXbtQ6ck`O$nv6W&3-E33nhZP(zRC*~H2*tn+TYD9((gDp
zw7q?YaPar!irPJ(ZO!DJw$A<C#D6Sq&A@Z;ba;2F%#MsW7+CZVQ>)xzk4rp4C3a-w
zjs+xa*^$AHWg|tA-KmOut;7E?H@Rx|+8quqM$X=hT%<vgR7U;<JxE~e&ERiYR@2L;
z_|JHXW{=mJebt&14hF^QCo*zp03l$U$jCoD2MLT587%a)UUVnwYdLN~K=W&R+=7JW
z*Y>yt$z|<v+npNjlpME<hL~EvQ;rEVZco|c7LouuWsh5s06InEb}%(=kAQYAlQ%o-
zik-@5)rX9j6&z|Fa{13?jErdJ9@NYOv%HzRg8=xztepQK0X{G*+ZiOl2WHXE{B@2V
zRQnOuhr`THO7)1WbkyLYrX#X4eGZbOvhpJWAb~L=i!ZR@<vO(oHS-u&J;MB-nlTOn
zwepy(yv+<5AdJbz#V#5o5XNM&i#|=OR}UhmSf@sq&nY!i91LpjDOs6Fg%B{NWQ&ED
z0!d0)?4PKodQfvu&k7F%0-Dpa(!+p+=Jc%eFd(5hJ!|(=56U~t$_fwj%@|YbHOn!9
zl8>{pa>arqfM#W-hXDzoSy}WHLIg#<IH1kT=B;Ag$C{s%&dbtwEhuuh7~P{aW|h~o
zYV03ub$3sU^&MwEUJI7+(GUP^V^;cTkbrH>%8OATu~0N-OJ2{4g@PD-p=ipgi?U*&
zkUZ$UmX!;IWMQFLn5Bh+0@sVF8{Wt&x5TbWv&!-2%@2YQu@)Yos&Cj;1<6Ha7!MNI
zZ)D{Q0U)smypc`c%&#00Db8iy$Yy@!*(GX?VX=&TGT!{KVwqD@GGJL&e$e7#J`R>;
zalVN64`Ch3Sjj$}VBXPdrDGS3f|d4IgbWZ?X62V8K$1@O;+~$#lxXW2(6(jsMp;iz
zG$Z-`ZCSkK#ywF_nj$;J6zK^9Ro!VD1rm@u?I{8hkUMFLv?#EuCrsA%W|fbv|DI&t
z>#D_1(QSADy}em^zXv4r_Gab%9+2p^z1gyl(QTC8AqI7u`cYQi?~xp|(??l(zelnF
z^idY~d+-J@^dPV=i~Bug{C>|>Q_S)T(6$lOqWiM)eh-A9yDy6aq5tN(pboNzDdyu9
z2OSk^!h>0vQtQc^@L(1xHTtiOo-~mTv#wLkjt?Ks%8#Fd36;b4+ye>R!!-9OSp*WJ
z;czy7wX7&zK*e73a5ixj4+%&B90~~zXRqkT_tZUU)*WRlr<#}59JM<eOyb&u5G0B{
znw2|2kSO+O7D@3s8e%=UCubK;Gly57a3Cn_a>9Y2tjmdPKxBTP0*Dh?WPT_!)|0X>
zU$GyinN>AkIS7<>`N~0{tjkx~fY|>)1qfe}_nS#8RZj|sPFs&oH)p%Lop#!o5-q2*
zG6xAED4ot?aprfLdLq%Hoy{tPa%^O?(Uoo@|DApQlKJmiFzt?|G|O4rDL?}VXS1Oa
z9zBA@=sKG%9h4JJff(E=oXe^MbHXV|9`ycgI|a#tQy7pVr$DZ=CuMAg<j#8^4jjxm
zu*CatAYsaoob;a{0XZaR`_G<~tr?Ny{__D47(XL&(yM?(TaL&{2MQ8MBXZJ#f&|it
zoD9+Mb-gjUys0@6qR|$9Oiq5XHAwS!Y>qv?LcgFK1fGq}$v53WVup;(!HeK)r*3@f
zj*=8N&oXaHj?c;0&%uPu_?)<+0vS*f+45QD&B=*58K8kl+#CY5UvnJT*1#^9ZQhq`
z$jLx2$fKi%90EODbpZ}4JBiJh4V+0i`6f4*z?qc8nG`;w0U5Nw6ju0(*)u&QCxc2b
zAu}b1pmGuXmK$HzYs}@Xu^xTJtjZ5HQnl$V=MYu936=Pdx17O66~X2=VMqvAO;mq+
zb38=#U&u=5nSGKAbMj&rn2=eR!;D3)5Hg@%XV1<v?@GRI*9}bKQr&LlGN}I&_QgE&
z_T&<~jY7QsOQ?<daT(NqDZ6*Rc~x?0PQK+F;`Lve!!)G`GDP*a*sA&F6-g^6qf9VS
zmX$-4iFFAw7;np1*#h&<<g%QMdclOuvK*pbq)Z@#xw?XlU0~jrT;a&jTh1#;2J;y*
zn2f8~PYcYd<SIFQi3yoiIXGq<x`0HIb2YoB(d?04?X(YlFkm&c&zlsS<70sD=JIy3
zX^rMm-@7^7nWOFqQ+I4+zil$_PHwcT3no-IQg!K*-eGF~O>B3Qc|&rOZ338(*+eG%
zgUf(wX1!iBYm?1(H->rhH&ZwE<uYjgZLH-rvtM$X-E3jr{M)G6aIF_*q4{^P>V@X5
z=^Z)wLOYm1-;u-l@K+R-ToTZB<??=DO$*I0{kw9AO8AO+3Du<~$AiX;K%kRaa?<yJ
zL?v2sGH3(|TUv5h5h<5>3Ds~v`|In-W$w2pI+#G%Z%=fPB$SgEi9iBjKh=%g?j<zP
z4zh1vhub~qAkZK<n3KnukO9KMT=^w@jR6USgE`#U;Ge{~gvc+f`xl#|T$Nws<T?c|
zl)lKx7!f2%QLk>G1>+KGudi9@8|KEEubpx!So}ICv#^i>#Mil)2vtD>;_DnjRq~aW
z&|v;HC&Ek+(EQeRlOUn_t?ed3Li5`;H+czF?|b1UuLS{9zISY(MeBQ~^=Q%h-gc7^
z2GaNBCI`_MaV~|QEYE8ycg1dC{%vO1TJxrPEZ;w-+};peN_{)NT=XpnV2>}CeG3xU
z<I82=f&}*Xa`Y|Tg}Ia({RLLH!o05H1xJNC^M!JmRe=mtUMNQ*qc>MUXHH^gSD1bK
zOe&Xt|5AR-XHvQJ`yhcZsa!^rAb~Kc9MR;P6k=TpQhTvnnPvTRrP;$(i=Sc<!~^KP
zSS}-DkkEUvTt>zqu?W6cUNWm(EP}+~i{MM;>dbPn2udFGW|YgwShBDPzFclEf|t_J
zm{We<A_xvT3@ot-f`ln^%H<*m5|DGs?M3iX8W@e`d=b0`1kf6t#-OOC(P<1CCynKD
z5ri<18q3kUxUH*RhC49jc^lEWy{U79Z2M}nhksGIkrVUwGV0qUqHo!vHKtav#BMD-
z0`L;MYe52d33csX(8!lj7g+4j8uPCemZL&lYn987B|!!%Ryp2cpd+QrXr3--!`7O2
zRV*);nLjY0vb<b=j~gUZmX{+Qg13hXs8!7Sj`{ypb?xz06?Z=OaPNgX7QqV(A;7%>
z?>&z>B)kNKyaPx;YeBcVt@r@7E<y!?-K}=p1SwE36haHru0VW%=t=<F*ehU~1V~aI
zfdI?$kqSu=Fpw@_X~D8d?Dsb_hui*lzQ6OE-<k7!&73*&D9o%%K84I!71LXef`^!5
zNZJ%r6G-(nF%?q)(0YxhbwHG?@w5(zk~Md<K7q7eueA;ULG_;20p(5Yf`E`z?`a(n
zlIlt8PeSWi;ozZIN+-1bEv5Cr2SStYITY(*Dy?Uc)*H3f@2-Q^8@-pqEeLM(v<?Wt
zjihysm&+n$HHm_{(6EfAWD(MOlNV6nL6Ig3sE1_{X#J%4ue#9m%#+C?B<Q4Ps4S`V
zlVqr4G?Jf1YHv-X)`yN8Ijx=wK!plgJ;wutjMkX$P6JY*7#glC6opx2hqi=yFf`AX
z-<Fg?gB5K_8Dx;QnEnTeGLX?0LxUtEISU2}UX2+yD3XW!ih)rY1QpMKD1Ft7XF!y`
z>cul4;`wT<-whqlM3C`(E$07|j%Q6nx$9m$YZBu5%RBL$McMYIC^-@uGW@3JO(5d&
zH$86xgqWLmyeW%%7#+%+CILVl9Z5CNM?ptY4fIja;dv97A*qAB=_0kc+2LSGJY|FE
zc{FsPcS*cQy7HoI@}lL!cP#XF#&T?WD_b@YA!>PCCuBf~S{{f0kTYbH*;k6DW1;EU
zE8{x5f{4njjBD2hB&N9DR38u$R>slUpdW|X6vU-sW>e^?oYJHO(obnzFXILeB$USE
z>gOdOB$USWoWN{CYvL+E0Z?*HT&G1qlw1?nX%SHJdTBA6d}@7MjjiOJz}U+AWEIG<
z)+b+r9BX}CXGIi*p!IQR^e_FO(HyK8jbr<or6)p*@9NzU_qs7Tq|!sA(vA1w8WInA
ziUowkL!M#*A@L9?_Asrx%b{1^k~n=X)Yx~-7E`|us6;jgaA_Ps6xw299hIC#l>=o4
zx0}X?ra!GxtU1ynQ+~T8mi#%C>MO<#WmB+0%63z?TY!+V-PG+CApCs0+3!PBwOd4x
zeqLevcbTf)(lnIYVd{2ElW0W8q;{*kk9-ZZou^FWwCPWz-VALF%>qzEIyo}@Pnp_H
z08yz^rq(bZgr73e-KYN%fT+|d^WM{_6s;pA0xAV#|F5ZkpXHD>&zRB?)(>aF;b)R+
zBkP?pwHtsDvd@^F8{|-)ZZV}BOag$ImSim{MYJSqNhzWwSxZV0EhhY+ogynY9K2wr
zbc(lp?8-eCOmE_KF1f)KQw@OvK;jk87=Vy?#nb@?2#Hrr_<>x9n@gs;CgyfypN_tk
zEJJQ^%?zp2UciGg*UbK@tdu&ExfD}3Oe383V^J1nj=<($&t!t2)&}A>O5ZTM%b8=u
zjnX$v%p9ZkE|<_vrNuD-l&CyC0;1$iPmh3-*VAJz8K6V!5kMksZ9u$rho?tCNb2zP
z2nb0Xq{p|hw~{{(8Olo8nAj6!Lwxs?Sl$BGJW}KeODb|407R~^v{wT{<O)kG5)dL+
zSWx6nYCrPu(!tf1u`cnu9xT&Wj7t>_xPfx3EgcPjD7V_u(Etd?TW$4QXQ^l)f{ccr
zS^hFhMT4fH+!{+qgC-#w)>>XKE|2W8-b(i3L<xhNf}%QcxR08wx3rrALgISMQ*R!@
zH!PK{cHG5+g>P6|ySN2aykY5B0)(J9EFDXLvLv)i>z(q$!E!6*C$=x`p>*-m^+2k)
z`x`7fUT&cwpbdWVF)8dF%h+c5=}3<5z-m$$(Zu|3u#bzjSpF$;FiqXUTWz)c6aS8a
z$GuAwPuzc7#tw-4p(hQdAd;Bhlf63igMTPXpQ76>e_m1=*`vb3nckkXUt7j+Aq@k$
zx^l>RL=&U#W+#h(W9b=dvT~&IO3ObtDUP)Gk%a?}J#h)k*b8xV(4j1XjHO95FsevU
z=f{>l)=*I(cekYvP*fDi-DCNO&|V`-iNCXqeGvSjCm1X0i6pl6Vspk+TmIZ+rRbx$
z#?pHvNpTbqwe(2&J)BRDU#}croa@bk<LW*C#VypX-t&7vl&mMeKTLj~Pd?RX83WQj
zF|Y}zz($IxiP874VZIDdRS1AbGU<E*2oa4I@(FFunol}x5~X1_VPun~lL&|?(q!o*
z0*E3_7Lv%<G!ZZ#FnHNA+7q|JtSc}Jmn!Sy20Zn$=c#}YbJ_D$K!~|)>8uZk;Ja+y
z+m7I)tWN}$^{-gS`palqSUzQ)+lj{pu<qS*ZYQ5ZJ@wm`{yhUGJm<F6TSXcmo^#tm
zCxmidJ~aTHmg+(Ppk${Plz=GN=>;VqN_O4}%6#gnEVWhJ0f4$JweP$ueK#+)byVUm
zBrUadR02ZMQX5gZwI{-|08wYB98Q=KoVnWj9UIGkm(mb!0h#{&#F-dd=F5EF)+PfL
z!rr$-a!M~TLD>5?Z7o7gKml2&Laa8~*361z88UN)t-qAPgEAF1I`*s7gD6%K&sb<h
zMpoKt?l2^gs7kw^+_;V)3RT*$(C_7gdf@lbZreB{20N^w?{2%t-8fX6Dgd^<wm&ni
zP_%N^S71Y{@uNUcCtlz-r0%u**@%_^aZ7eLLrwxNAd^<v{$Xhus_^Ta#WFxp?Hz8T
zaFzW}YRnrDg{y4L`Js&&3doq%;xo>QGOBIA+GiO=6sfjT<@SHXgCf;7ex%Ywg90*Q
zt(XA;qiSuxoYqZ56sfiQs2O~KC{k-<1|Q8JE}-7{e%qgyHe6Nltjo*{5Y!BL+(zO3
zc7(D4y&v_!_uJXIS~(a9tP>-Ku}3oMY`^l!0y#sz&K@va7okD<I(yW8a*}fajSDu2
zox@muMnkd)jlwr1i_j>10~MiV^#wF?eozd`U^9jvwEgPGB#0<-(C#ny5hNZIIcR5&
zVDHk>vBGfh4|dA(#KsJ^wOjZPHvW~<3A}~y!QffjXcmu-WLd?yQu_*k4ryoYUdpO~
zkapI_>=f#>0U~_Q+G)+U`pHBD`S0bNjTyrf(3%3rJ7?pk8O`0*B>Ek5&d$waH^|Kj
z$q6so#<a8xzI2fr>(O7tMzPZ~K~i}I46xxvTmRAplm+yj*np_mMH|Zv$Q*z$z(srP
zRJp?oL3w*z5qphtW+7#~_Qc~Dko7&?o_qv(R=XF@V8SEXZT+nY2pR1*zBSb&Xt1~4
zj*ilgkpEcP?evkXgJzW#Qi3dTjAe;E_pu)aigD?^2qnl8M<)&N;VC7~ou^QslsI^b
z(l8~+5+}OMQN0tetKP{H$Nv*Y^-eSm<z91i??jW(J6Y;b@1*4}8dk;$DX%*zdqnjF
z*4*oLCooXXKj}yLr&LsAvCL?xqjyvV5h^NmFs`x|8VmFzU6dtmXR)v^Qsx+P9x_qE
zRpwwGa)D$5S|@l8n;2Q==nYkIvI$Wge8bTAHx4bKMboe6urbk}J4PlclZfE?xifMU
z`zij&10z3dN;KzS#(d5u$B;oyRB&x_hRe@Hf)KUI899k8AR+3w$r&|~jh8Z@=FP&)
zXIYWW$;!~c|7NO;sxW-2TomV{!sW@z(7=B=RR*B}xkv<Wik5tq8-3H!TM~l^o;Mw=
zz{7qU!~|#9mdGh!$9>Uljv+&wsNmY>U?cUD>a`H#yAl}_*|&}8u4J8P@P8N8iM|L>
z3SnI--kQuljaE8_^k^c2snWTB0{ef(guh<9#jhS<ozdONn$vE<yPc7vk%bKZ#Bi|6
zNof!tO<~^(S2_4tp#js06zbKEQ7iftvD{)@sq_Ro)K~2cQ0vSAq1|c+<M`x=fN;cW
zCsqqbq;3-tWT@9TI@C1<HK=iPsB031dX0ln{|l;)l6X$NW5m-gA=FP6vFo`&DmZWt
zR;%}d15onnDT9EhQ@w-VKW~#i<G`E4PRbX;H;uj3>#!4uNPq56{(MAyIE`gSj(7$G
z5fwW^2BSYU{izO(qH`J>9%*z8xn_xo;AwP_L@?bL5a_6w_8=P@IhvFssU!zq@!&y)
zj)~0=GB<k6GdqYVd5p}y0yBZY1aEFmv^_|lwat#9+!s`EH9HvPpb!9rsAgwOk@RMQ
zsA97-b_)H5$8G4PMPyEA8Icw*AV7qO77B=$BoDl~RlG8tEr_-{#yBmPyt&nxki~vM
zj?<sq`Ml^cgKdbOPu7Lp`8?I-vSNZeUlLU_SbO><$GBfhB5%Ir;2+3i@UBVW;1wrj
z2^YVAg#B~;ii3qL)GwZdkBjS$@n^@+x@h;%N&4f0Xo-SH*^hkVzI6PB(udSN2>p}e
zU+{MnDB^~LuM292Cy~3}a*V$^;>RzrF~z`mOAypnk$_OsEoYEw!~s$GmV-%H<h6kC
z+FOqGSM9Y#kY4+h=e3%GN_^#cttOGzennm@ztbndV}e~yH=~4$?cZjnin~0Y#U0eB
z%h3y50a2qaXQ)hVr~>(H7iAMwBl_Izaz>YM)#Jr|)QENz{Mzx4pu?XG|KxCR8BbZq
zeQ7IwSXKSPoJETl&RRTY{!0(cd4Aq=lNT<Wzc78n<LuSm%Q&_bDx(%{GCBRK#Hz<x
zAK&y<Tz4WtMO{{Ly-^h)>avQX6HiSTAk4gqht;{z1kv}F9DTCcX(blr%M$<hFYG(M
z;<BVzdc`uXhwUfJS1jWg4OU{Q@h#(hz9~(LyCjw<ebt_nnu1p@<D<Q2OC~(KjORVb
zZeb6j0M6;z$WuOo7TU1Q{hURKy6@tbVy}%{&znr8SKcIQXClrwalJP^h>*L9<A)jM
z>jqLO&dWv5C)vzsIoGWXh~O#bFv&`4+fpf{w<Lc0B)iKO-NJQ>2bIVik-n2+B9%h@
zJ@M<O*oV>gxZdU*L@>R_F`+|lDV|E9zFoZbG;4}(=Z17jl%z=C&f$~?lqAIRF7fg+
ztUkJn>tFJzGM0C7{F28<IXw<eRVf~u#r8%kxgig@AR;7Ha?Cf%ho3xv-61$;e2tjR
z^1>f;%r>Hkd4M8j4>vv$OJ=j|VqB@7A?Q%X9<I+{0K^OJ;TV4>#{`69?%_i}fn!pF
zCxQ%>y<8`FO+gLza-HBci9%&BN2tt%-Edq{4No}&yFHvfX};)tG}K${x)kUs(x<VI
znEfov>{Y`9F`26ekPT}^If#*3t}`Quct$NpHp1qv0eLvlKGFUx8z0%nbut1GJo`A3
z5jD~S$X5GB;d3lEvY+eJ2O?29QXkC(7(fO*AT~e83L^)&F;*ru5W#bRkDoxg0}t$1
zC%T?vd67D<+XWE8Q^(OR(2NS40)$3LJn=jm7pcd*MJ<O?aXrsNS3>f@dJSUN^K5do
zA<0A5Yakw4y8uB*#fL@T@3EuN!`#Tzf+!Uq=7kg4T$p%DICzYw{EzUxz+Ma=<M_o&
zCZ0kjKF*DkWa6>KfOs6Rnhg&KLm%fu)wdTQUi>(Bhe<;N!qCTg#z}2xB1l7@@C>af
zsK*J<(3(VsK0$`Y89GJ)>n1+sDVKvVbt{_k^0q*lc;sK%v0k6@Kvdcn#}i>7R=m7`
z*)d$BT4%T+zf1yvc)%HsQ?9Ts6c9H*6aP7f<wQP9@{pB3Bc8#M2k5LgJ%>e~ILmd<
z2nP}omES*J^WbIA!3Bo)O1Hj0XVIcLFTL>e^FLT%$qoh{L(MAgs}3w63ZLWXz{cbQ
zsHGM&USwvx*>jOJ)lid*&;*|}GJh*>VhQYY(efWGRaCwR_XSCHBftQet>iAM(y-0>
z4RcvEa^CYyY`q4S^W>T7QY0MVbCENb4UK&6WhrcF1)k3-OT{G*lIjKVqq)qAT=4P%
z_M!sM1<D7C2mQ;7VjuBbOzMZamlsJtL!=z^E-#7h^Vq$SOWaVM4{Rp|o=Y5yy;POa
zx%@&D%|o5P;D%h3hWDn<<rjR!C@lvI+}gx4$ceTk--}L~XyX&I*|TuoqHyq!JmpK#
zFptd+|B++EdUD<(a^9=lxUQTR5DEfT8|whVKv(%-wQVpU?0J>aB4sH+IPX<%U)Rn{
z1nIojJm=LE)Z?1xyqZMLdySm;1|~KKaIjA&Pbo`W|2|u2^y>6Hb|86d7kO-Eq|5U|
z5FxLN{E&KmI12~OwWwNvUf<WAo<Ri9*Q953v%v#Y;)?Dsv;1g@s~Z(iC7He(sOcF<
zIca&~doQyYzQ}S{H&CF0Yq<;47f2>}<qC0XA)6Ro;p*fzP<rJG7cR6!NrGFJCdMsd
zIAEnT`8@K)QWwvYt;#@ZRo05{EM|LSYh7c4OgSKeX|0Ph`W}YWree*BoAN8ymzJL{
zhSUZ6iiiG<-Ph+AF6>7i5L3y18(ia;uIOLH#uWoYC<w}cfY8ncR~rxzueib01_Xow
zH@NmMUDeDGK^joFx|z`wR7tqHnb9ONpm1TpDl#BW40^}K3ByzWon;&0cig~WnR0Nt
z51MVLQZ1(dM0J4W)+qr%2;M>pp<o_FmfR{@e!#vN-RkPkHW0zH)ur>VC{GU}o4qR@
zdWEfyyqjc_RAQPXdGMCo#I0A@v(as?4w*sHj@w*pQ}F~8J1rdiz{OD_ue{2>+vfup
zi+Ly<rja@;Tw|xJI=H}4CkSeGD<G;^;p&~Z0r8*;7c&Vd9sr@v3fJ7J)ky@Y&K;gQ
lH3hG*!&9dwkvexkowI`r7S3NhfAoo)-G=oLPdyrN{|0N+$C>~D

delta 45711
zcmZ5}cVJaT_J7{ZeYd?NFRvx9<+TKql0>N@34(1GaqYV5?poL1uDknnzq`8ayCw7<
zIt++_AVr!W0vDwiigW|gq)Jl|r3fk@ivB)lW^OL)UwP-;b3SwC%*>fH<=)Ksw#9pw
zTJ-Ge>8te3@2f8M4t`Ksw%s23ptqyP^Eq4hkhk1(1N-zLZ!=c+vbV22;bHGP*ZD@}
zTfv9^{PYViKK(3va<MnX{%4H0J>(Ys+uO`O{BLiMq~{gZ>Sb?pscS<w_^35<RM66c
z-dNsTd*TIe<4c|`_V0e9ZSeU2VX3M|@dVXDsuGX?o;`ZP=+1^buVp(~R-xskXBvO#
zb4V^*5OK(SdK!&ctvQeqREM%Z{7$QSa;T~}2#Ob6)fbQ|RN7EASmKaC7^=qN4rvgX
zxXTJyCQ4U~0cMa;)ns>TzQPNE!YKQj-)YsJ+EH#P`LJ`8>dQ!+e3UXu&EDjYq@;GP
zu^LQ{p$64i_H%#G)~L75axqk3%u;>jQb`5IEVZJwLjq%#T782x*UK?bt);5cBL0e(
z_4>?6+k^h34OF^<<y73uC7LSk1>90KSRvuOfLp3wcfB=HR7(qLD^z8*eg8{Z+*602
zh7{DGw?Z`?|7p-$p@vH=KW`t+AidJnDtd-xz-1a-Rut4$s%nGkm2Tub=&eExAx56%
zEG_7LSJmG2SZQ7(J*cizm0UcKVeQu%5%$AhG_4w(sI)|fCF|5!(jkGkPEBX6?>$@{
zO}ANPPdAv~-0o2fxOlVc3j@B`>~;bJNSoDQN+KCR+N@^Ft?`Pbs7g@Vq2^t-|MWMl
z)DzgD8d2+2DnU{5g6eLS_0o-r9YFwcx8o*|fZVN`1soD2Aa|?&Vr#ch^#ry3s&bh9
z{vX<|I{XseRTK}@_B-AM3AO!dIKsUP65idfmK>JeB?kBI0ag7-dROwGchK>!WWl?K
zxOZ#0@#x0KR3#a&&ahSgr**m&gy<=XqM+j)Q+>tKb{Znb)Ih020{fU6Pgp}mRY0Cl
zmFwdFVcY7=EPMQ)+HY&YaKLCJoKSsYh$;$=gcE8>PJ-og?Pkrbiwd_2&2-lO;h);y
zJ+)_D3>pb%Ri9{hMWK;!R*i{)0TLKz)#lgnZllonKCiMH)*5lv_;2)>^G=V!BPgDC
zdJIS?o^R?gyxNy!j{yNwF1aRXfW74O7(4~iC8x)L1kxqyG0QyYG5JC5s+#u->sqJT
z#aC4$Xg!R|<x_w8L1lVR?UBkKoF)esP(L_51tg$;pq_F+*TKWyY;aHQ!P?$l>C=23
z1$%pC1A!zVuWTTYK<Mp70}W6)1X_BC9q*-?O6?FAgBp2=*C!%fKKcleiB`N_Kmuck
zx2oD2EigciwV&#vMU>jHE(W#jSg)^4DpA{x^`=CG%2%ju$9fT==26?`D{$yUdr?2F
z%F|_{i$QHW(Y1rxcA_^?B_XM8CwgyeV-100y?H_HRd3#0mKvZ9E`HVP4U=QNdF0rs
zUUuXG<Gu<IK$z-P_+X}IsQy%MHfKG=Me*=8)_S1!NcuIelAux`<AKa;-c;I}jxG%v
z<V-eopf)o#)2qa!5a)W6Wmb1C1H)ct&kfRgq+a(bSt*kb&DXsZ&8**W8Ps?VYaFCK
zpPAztgn**XA%j-sqe=(_i@kXt**_nwt@MN!d%dN+P9Cb$60dSy?kB7l)8p*>2aGlq
z;KF{e`S9_A1lAHShR-c1kI$So8$VR*mbSf0Gj0=@kg>hjx3KD|a+t(|>O1W6P;Gen
z9k0?{3URKtMN8{Tv=xL<y9Rq^z4jMRs==%9UO`;wHc+p4f(xN~Ygnh@+Eb}DUWK<9
zWT<*;sKwBKL1NgfWA<?E!Dj1Rle~~wM<xx&+yx<Yfo)#p)_6}ZJKxrdu*0`lE$tUZ
zXm=}Jz;7XK)S$J^+q%*rVdFM$RX3~1(g=fk-!^Y`SL;JjPfQ=X*yT~$zVt4ya-&qz
zfw9ZmuD#VC{Tf=BBo5hMjMfY#bIA3E0jWdejny=q)u49Vn|F>y$7v1z<6a{|-bVaK
z3w^>)j?=nTe&SVhDu9@<;uEh?=#Vh-6K`?A>cmy>@Kg3M(>hmv>Z;K2{nTrS8CB)O
z_fs!o{&QRfrhLv;GVM2&pUVzQQx8-=_a?>U4HBh%?#1MNA6Ef&mfb&Id!Wl%XPl`D
zjn%VWnN5HM!dY)cOKB&K)wABpDr>EV8he9UPc3hZeRRBbYremyW|UcNf$XI!_hxNg
z(b`w`*5sT8CZKw2rijiU0o7YeB&~K_1rPhNF|TMHD*I{DOI{wa`e{apmktst{j`!&
zs|{B{l?Sp*uW0Qm2f8X$<$*{qqzYAepcW~yZs01QhOkE`X>BTpxGGe~A(|m3E-#Nq
zLo~!iVHkSvFlJBEI@Au+WMuU!6pe;yKH*r9Kp3Vq6VV7HiW#P%Z@)oPpO-rKXx4JF
zwy?`+7lQJv(VEP&AOncenoKZ30%Ej=1amS*KT6XkYk6<m(J9&_PqWDy?>G6XrU$hd
znlf8ct*QBz4tju@kKji<d;hE2tDf#NHMQI-Mv5h#!DX{F_0elMDCc!eZ3lM=yrr7*
z4)Er99Xv!H;@NAbX|t8~wx+glwJByS)70mXu*nk8MBcYG^)-(*ilVtjU7^9AIztP4
zDjS@>04{3VpvmkIB&=xA(3kJvI(WF29h<5Bq;{?2FHP~lUuzwIfg~X<C>jkU5Y|$o
zEw?xX4BK!2zgb$Xw{pLxn7lV=d_3&eU@Z+okWkuB#a442P>0y|dD@MYhcrcGH5wlP
zhqQpm&_R-rR$gIs<0|MJM_AQ-?Y5dDuBFsDj%YrSCThHM9MRI(%R;Gh9MM{}=0ioJ
zzHyw*pRcvAJ?<iSfpFaEUXVduk891UB?9%0<64`x)@<rt8imDAS^5oa?j4`H5E^kc
zAD_BN1`wZWG7^9U#HSh}!F*a-U?>E&E1L3yrp8|}Szx-JWU0}n!B%y!G`rIR?cZu0
z9*g7?!oa%XHl7ZwE96B=?eP@J=M}Bw2Ti2*#Nf&2x0?FBCQ^IJgWh*Alc)BQh2-<9
zMydV56t@d;cdf3J#^1NwFV-IOSAlS>pk#clZi;~p<AAnS$3Wj9oMHymjcmnQZCBMs
zSI30TM%@%k0dx!KY}Bz7;ENgfE~qxztJY~{p4vuTj&*R+M2)%}s33vSs0aB}j_O*#
zXw)m3TeC#DzM#63Mb~SyYj?U3K0xerA$)+?sRx}t<pab{y}X&V+~Aci2&yOT@7HU!
zYVAoEqW}$hQg7;21;99|r$r*BDFwhdsaM@#y-SIhrW6L%uk62X(Yh(MU%42C!1zj+
zVGBaQ_)2f;SB1d%N^jH7x*)1jgmz^Y-`BpXz2ZU?0pf}-SFD;+1c)nowyo@%MS!@X
zceu&=UgKu?gKE8f-8QXfe%E@V$)kQ?)Ehph>HNT`H$qNV^#h~cNM)=+g&d<esLeB!
z1@_4u+CZ%iKgE&(LliLc44+t&g9OYxqtt2KV!+HZ(72*o7Nc9vGja=ze7?GbI4#nl
zGT%_EuVo=}yg@8lTxv=ns4g=2;_{Bazx3P-FS5>S4SzfEQ8pfk$qXcb78!Dl2@+*5
zqO$oK6A1~z<g6R_Yo0F4T=RqI6w8dJeia17GD9vdp#q3y29^rrOiTb6pF54b<@O&B
zXk*plody<{W2ljIim!WF_=q;HX0HPcCZP8^&>#W5*9fM0BY_0;UL#j-{gfl%;Q@By
zh;~=)0T+Ry?Ex2oqU`}AC{|}WkG2O4Y@qZNM!;u>+5a5X`qvzGAt<yRb|GkDK5PU<
zE9*S=9yX9m|AZR>la8_KV_NsxV=h8I5RSPBG*2Hh<P@p%P<+h56!{wMZ0NLZxL_|i
zrp-`lF1Q#-Qq&7B2F=tL94|u$<z6t5WdARRfb2y!?i20LwHI9kny4?j2o#Jj8bPs`
z(fLGu(a2=2fjWmkzZhuWaY7rMUpLTH!qVjweg~QnF$d^8{0=lR2hcnO5@BwjSt+Jv
zA_tho#Hso@Vxz?cz){iE1I>pXwuXrMB5@sWDi!f9YUZ{!_jSuW`^Oj1Ltn}~`{(C=
zjla*^_k5=PNvVa57%;k`qbB1`+2cUMsPSe~x1cya-bA-pp3iFnqo&#4oyK~jcAAS}
zpn}s(xlTu91;#Y9L_|Z7z?f!YVY5YGAPUd3FP_!j_tegFF-+Jo&$WZ1@;p=ae4R(-
zc_w=PT+z7@mERn9UYlS0ri(x^`ArvrV)C12kS}H6E{e%-n%B4FV^~)Zk{6qNrQaR|
z>|bokfeR9vi%mIjK|*t}=?q+5K`4I5<eNj?L7<1d<JwRF8{Tnkpn&|2TMG)v?@%rJ
z6=D1$_#80v23el?#X>ga6(eGg_)_~!D?VTv3F{rolnfflNA1B^v>H#lqo$nZzy<74
zQ)Wsa0ejTMWQ&B4l<@SFsf6OA^4SjsX4DRTr}gtxfhDF%2yh9rh<7!R&_87cg4QH*
zu0iX$Gwi*q+LWp@rda0^6FO(i<aJVq(xfwH%T{71#~|`N8}+?5tm?d54h_!prrgMa
z3<;Uoo)}BR!l1#~)4t~ijpbMMw50dJg;Gx|CIS;kDD||^12>Aw!NCLVP`<v|Q$5gX
zsu2yqftH;34L$$|TA27JmtviaUAQ$?-g>*ht55O;*Px%!Ca;%o!mYKG3Km$QH)BVN
zb*&jlK3C8~xM3|7OickAC9H#RZmz<P1ogIdmw=w{NrNSJ0w4f|b)>KkmO=sKd-hX7
zeZ431o~7{m5SQ2_wM>O+*zWnj${S_h8P+>0#UEJMmRN;G@bV3x9jv}YZ^-Si<c0*8
zP~Kr7G>sNQ$iw$o$|d&4Qhih%ehE{sjRUzo76K{eIbflIA(y#i<x`r@8N2$!uOC`!
zTbkxLXGec56V$zynz@#RTJN*4T)0LG*!wND*|jWS9jN;e53PIfM=Z46p&x-^<b7nR
zxog1?!wy^Ojn}dec8>hWFhr4~mU^8lRo5TMrFzU#uXlO<^D)kkTWa%bSs1?`|Hv?8
zMxXph3W?5%|HAK|kHqEVkIY9%{?t+{2)@qoBGQ9XmYTh`NX+%0{RlsVW%rN3!a?=)
zk9-lqDEm>3O0e3#7JfHxw=b+ZEZCe@0uK#$-cmbV%R<9lutZ|RZG{vX?n_JUe61AP
z?W=3u4=J?U*FRE3yIr(U;tbIdF~rnwEu|;x8P})R;g=Xi*bGFW-&*O6?1_jI+P7A=
zr_bq$N<Qz2-w~FuUdb0d@v5b!u4SP@-&<<>S{AT>pl;Egj~GDr@hQW7Dtj%Vx2eN#
z#|YYc>f>uN0=0%@c6gH!`ND|4KDA21=Sw5{`I@>IXTga6zNWs<S->9fBPn=w;Q#p4
zR@Z{Tt%H0`eUod#t%I*EQnchypW2~GQ8Z+|Pp!R{g(8Rf)LX3Ec)fu<lC4hacce%9
zL=;8q(pK6?A9hmiN0h-X)L38MMAocKzb`n}=Pl;(kMBZ_^C@W_|0=}(6KKAz>jepj
zalW#Yl|eDsTMDX-Z7<VvDdtmn(nn0lFp@!L3=-6MR-DqasqsFM=Ma;)B$MSbaLxpF
zZ%QvuP4Fo^PlpV(&;*jH<T9wz%WOnSuTH=0;!u@dCYjq&C2TWI_T|lFAEor${F8m&
z5U&#7WtzfnNb6OpDL#egV_q<!ImL&q&bxt*Eu*0ND*IPjzbEyoD?>GTm1M9F1{qLO
z*{5m!fz(u=48J0zPbC?|I>?|V)7YaKy;o|Qi$gV;MlxNv3~KTkyOhzpre5>Otyk;?
zLFP4*>A+>s52mw+v-(Y`=}rS;vj;NMN#<5AgYh<l&CTk!r)T&SzQF+lXjgLv$&g2|
zA2i#Sw}2Jp;E~xrZwdDZ-)xz~p31=^b9@S4UV6cV<{TfU?+Tz}rzEJ(W%F`+^VD3Q
zoJ7Ec%v_S8;f0M6BxLN1oZc}t&!_NBE@BdwWIA&hcw|1iqg<~|&G#uhRe%h6WIoB%
za2a^y4fble-X;Bp;}PtKK;{jSc@&9}8Ppc}@;+r(%k`f(TjVqR$T{*=6YHI&KII*s
zYJKLxMwBTxwus06QK6q|XZzHad>=|Y0^~9uA|UN_2@cGAn>d##SvD!T+GLMwre9HN
zH~C~j3@(~ulTRkZAmN)$KDo*P35-oXta45w@Bsr)8`=BU>!)fOT?kqzHM$U#ZZ-OX
zBJYO^AR2w8QNGkN$%7xT3oZ1!YCdogXr1(di$KME;FGHyr~u&uA67Y!a2r7FVt;R`
zKiYMdi;xe5T|OWA&I>zfKG@|e<_8i)l8z4t67NzfW+D~SKJh6h?c!GYs{Cj0Q!Eeg
z05G4phEQ_$i7zPD(|8J)Ph?;v6r{AD__8MvSP{!P1KT|4x+i?<|5zvdXj?0&4JpXm
zYTr<;f1)=VQo#3d^HrSbYf}o8*9uf?hKa_tWaARgzPY15U2XSj0g@GJOYsbDn_8gW
zaSaEyOe;{kTC-`J!J^h(Xa{TbR{3=c3ly=v2QDhGut0heB$O5w$TNG8NHi7}Bpw&2
zAo-$eVL|dSULg_y2SqO|=+uL+!z7E=VG9c$`MEWO@^%aDr7bN`mKUh;E1rzK;uc-?
z)PW(qipTKk(gNAXK*Fe{1#%e-5=Jd85ZN1H!K+IPGRq5uSBW9664(Xm4OYm)fDkOT
zh`M}%dh>rXf%bNR+PVC{xoDMl3e<b}QK5xSsI4kc*0N{1>G##)mt!dP!&R=K)DKq`
z$mWL@pjQ=$c@;+BL<A_=wM~XPcOKq#4dpCuXoG90WCCq949!YIB^QRSAw&5J)S@D{
z*bm&Quk=)JDNr=ty}^ZHTMBg1+d-04K`=zAxT5-k+J^;s-`ibo*VlSN9~NMz{5W-c
zANq)PszCYL4&SLC%df*vu|mQF;GHTk1s+J?ogzHiHv)-@o+=1`jfzr-B*sq4r#~xD
zTl0=WoDX<j_IZKG7Pt^tz&%|c@@a>KMmtl0T&Ir4jMN0!*#ePQIxNJ^a|H-+*GQpp
zz9<m+x+4W|ohPtsq>xWvC{W9qSQwIk|MFT}`6vyjUlpj2TjMFP`KYD8Vcs74%lCd$
zAkSXFBrf@nf(l6Bd{clEDoJAWd{YqQ*$X{IH>L3LO+l!=MHdHr6zi_Cvpw`%etoq-
zaZsqJs|7_OJVFMbR|^mx1t=Y}T`h>+E<H`10!jDPg7|HG{6U^LH2$s@bnRvhpaw4p
zY6A-MUbRQwt@rm-3@GF$Kly3_g3O>orM^(bB(H-MCnLmSo$t}_Z8x}3?a0d!k6`VP
zLiIs7&XB@5$QW9vF7Q~_p*jT=Vn(o4_vkI28Br(?2f##iMid6bwirlMXG9?;45|)D
zRA)qCT*NIRd38n<CT{1|ksPYdh{A5ST2;IpAdY6;@6~U3c66a44!#O_TZ}FYi@h_D
zC}(sbf`%vuK?7u_ho}y33%G4`VfHRr4z&(<+vvid{M4F5i|YbvpNaOtd-Zvqnu&!n
z2!M-DHL*}`&4PqE6AMFPry3**o>+*}4<to^05yfJyI=3sWr~YHlhKqy8SfwigeiqV
z(ZnE0rx3a7D*-fKVNhFNm^a_<^MF3lXuZBr&JcxYyiJA5`)Ir=H2oLK))Tz=5KpEX
zJ3k*+eV+V<-utf2g=!mKbs>g&Z7EcL##>Tw(2`pV)qx(kD<4=v?P#I$39x%x4mLtK
z@$6Q=)IHwz#|p7<qQTD9DK$D?h(JqSLvR52aiQAJV{N1HQ%HT|Gxqe;`Uf?iIeq{W
zp8U-5BuMz-v%-+LM*$Lk_^c2KE*&x!lAF)47oO2OJbR{45s?T?;ugwz93)iE6k;By
zRtJezKU0|ME-ZCg{Y+u{r@YlkK(_js!aMG?M$@@iA+>sMTYpxMc%STDBwHO^*xI{D
z?xcf6!M%%0#l;zrD7beKF3yO8X_WRZy8dAvWbhQl&}FyYMJ*n(zNaa%kQ4^l|NO1q
z)APh2w-h>B9#kZ+qd*9y3@Vb>Q9zPX5l-+#DfuX6P*GA`sl!uQ%AlgM?$)n(AqbN7
z?6KeJPd-`imO*E4^+j@fvXE~u)fdU_NsuU`z6jfsq739PAe%oVYof|B>Wi*>&>BOT
zMIp_J6YbL9>m~WM6Wvnid~RZq93>D!O(qsKwJn{`O)Ns&enh!vAvt%p{ks?RBgzxA
zT@1P@G`mQS69@rgc99$>Ab~Nv2;)RpN;|}}i^_UPOKFFgd_KD<br-)hREQHir0lQ%
zN&k75d2SiB;XBVQgEoBU70D?bDkx)K5vKI%beNCZcdLr>KD2B9te5BeR}~=@{}0SB
zqTaol{qZk)&#Ki$a?%77P^*jNb{|MUtuDfLAD>Z*r~|EMWq;LQu3YcxP=8)uWQw2$
z8R)Dp!f8I%3MdBE*~C8ntKOw%lT!gOQGrcPmjMZcO+^85;sX*0n~IRp(XE3bqPDOn
z{-(FD+2SHlINIVO@Z`bibWkB3>U3Q>0=iTq+x9p8*4joFf#$VF7lG2^#-e}-@<qH$
zH5Or1?xn6@L<aA%@A<p_xTnh=7lY0a_BagzAz<t&l9?$;Sh0ud@iLwD_=DQHqP*4i
ziGS!5)Mn?XAt-S95xBlCQobot>GF*ZT1;ugv#0+@|Ffs=Vi7hSC~%2q@aUx?Y%sVS
zlykXAeWD5PN|EwC@B$7T;-F+T=}@D6TZF{J<pB4)B5WkN9N=CpQVZ&=7Vv?edQ2}i
zwWr?d*<OA{>^y@Bpk98znEF9Nr<Y$&{UFi7d->(mPb8l!d->(mFF7<<_VQ!u??uk`
zQ+McZSNFo^>@)rSvTuS*Y`-aT4v;9Rzh7o9AW>3(fAHUYC=n@^E&ctW2d-strHB4S
zi(M3iDi2~~dh4}SgWPhc_(6WTH4ho64Dw@Z{uN;yW{KhU554u2r*61khFZTu{c*To
z4ttQm819$L0g%8L?#IktgcuLf0ERz<OKp_n5iN`z?$17jDBr}QqWsSc_E-Zb*Y(qG
z`&7Sjef+YPx#LBg1ijK%|4)7mSR&Vl0IZnmm!TLWteEN#h=30gR!sFH;M1DZPhEOC
zdt@NioYP$d>e16(1nSY#{Q+^n1r;Dn_v3(T0v$*D5dyUZeq16sJ5Y}*b@=HRLQ!ym
z>kf*73;c3mKn*Yp{1_ONi-SZizQCV&$1iemV(?sip<m|W#1Xmpn|`r<$hAZ+{-!_I
zh5NBiilI^8^mlz+`j%^=yhVPQKT9e2a*;pBw@n=|*u2Q!^%vJFBF4Y<qaqQJ-}2}9
zW}c&nuJ@L|Yu$foVsm@3UuN;LNbGGd`H>aa+g{?&{q))*vA4a{FSgSieC%y6^;i5?
zk=WZ_>hCJnv=Y7(Hn;6-@x>}(*|lC2{p@YO`U|H!qdE=tilOMvT^ii>(^2sTzq}sm
z=SPYS{)E$!XohK^jx-8OMlS-`W`Eu`J334cD8-xo-hj0h36z%~VsBxcM(FRQw)o|q
z6qsnAEi@LM;xgzNTUm0X{!DtSU+y>JAR01TN#>vc0{K3hG*bU4^}b*3kK(AAxFm#y
z2?~Qvjcmdw{gzCl3q%`NjU@9WS&DwP-;djtmq+P;R{Z<@II4L9y8Mjp0Q<*S{i*Z;
zzr67YCUg%_XMdfH;Ae6N+2yhNob*Az+`j`8LI+8xrw{^ph^-!{_wIBEBbBCkXp*Ie
zNT>itU~BA%KkswD$MRYEUOFT_;>X_S^C*MwXB}n#V*2k>NBwf|6HKTd_2VqMJC}jR
zapoPb_edXioPixF$Q<`0vFJl~@GYqm?2qI1e(4i_x%mkugiiQz_H<kb!DXMZ&;<RH
z%x6yfU|$JBpOMR^(+MYTX$&vU8(>FY*30$K@M7Fke2>O{F=hj8e6jMfea}?=cBKwK
z#ljm8VBq*-Q@o@B5~YkUF7ori4ib$pzPR}1Vlmi>fli67<6^aj4+F`86%&ffE3ah%
zXhLyyXKQtU8-Q7DWwElRSdA|X*tp!Z+^7TXSV6PJ%3`_vFXpqw%3`_v2MH@y7Khis
z3VKn27-WUEs#slJEN(MN9twRIH&S?5mMq+6YAB}LOf-oUlT+U-R_=&bW>}B;ddFu#
zh*TesV8naH#bR;<39$Ey<>UwwapS#WIXM!^C&%}S<>V+iG&#OkjLGp%UK${fPtDhV
zTDz%OhTCF3`)n$fvkyoVyQx@)TactvjBvY5I1Zujy#4$e`a8yx=Uoh%JI=cpG<TdY
zmWgXIpF7SM%fuBVOg~>N6IUWd;(ERqiR-7Le*o^PjYY}tl-jFqDU@PgEtZLVG0&K;
z7MF;HC`ed(wHOOgoJGL1knI@|C;T8dCC`{a!oHpXdBP78nmq%~34bx=&HV%Xg#R`W
zsB!;5leZ{+?jLCK7NyVq1M;2%gn`sQfD`_^F<7zJIXI9vjxAoU_wWx6$YW>h7}AB)
zq7~SY9}<vfRA8bf3<)6dz8yml8+x>md3=R_XR1CRPf5UpOnm@tA!I-eXR9F7Y<NIM
zNNmCpH-Hg%7sr7;BLhlVye4x88#YOgv0GQ_ty5s}#WxC~5j!$~wm}a8iOP;<Ls#lQ
zO^pu7lOQl5Gdh69i@<~j#<B}5^}91;12W*DwvZVcK+Zce1cd-bLm=;K`-xTh4AZ|V
zfE}0~Xq5ofy@3Tc>OZS&2*}|ECTiOdFh%+d5=J)=)MH!)57)Ax8}(mQt#wssgsu&k
zVwWYrN9fuBc3DOuIH4FAvw=l6>7#2lI86s84By~19Y{cI2*^$f5~Xe+M?An0Ky79p
zZ_*#C+AN(5SQ;Cf14(}Kok$W2;I22tZ_sdFBl~}w_1?9OZmE2!5RhpVWB}0^katHx
z0-`a1PFqh2Vt`ECWjEWR`#rV0TntLAcDWdoSnUb~#Ht@Uz}OW)i04-p1Jv{P+ke`s
zmw9UTyBIVC_6Ou8ZU_Nmf1u(9zL*3FjQxSO?Ri)V&<HrhHovdeRvrQ&WvH(o3dr3*
zu%U7&fE@ZIZaD_^QP!?e|7+Dzx0&cF&{4OU=qk`rYNoe^!;t5kV0#<&<+UeVL+K{a
z3AdSOk~<NQ7b64wCeR6T7{6NyExO~reVabJ_H!44t^$4TLeN#9&)t@$t3aOz5@kG4
z1n4TzSrI7M_U*b>eO3+*v<BS-I_ty<kWf6^6ej|76X+`uC)oEN=vtSrTnp$T&{wVn
zbP?z)Crm&QKwnXq;FmzKKiw;sH{8B;2QGnxdj-9I{vHRmg0X`VR8rTz$I%R2V1dm?
zix(vNdhZ}c3*Gz$ji>$C_q+7D>3%_ZP75Z4`UT<m140PoAhvP0ekeUCD0UQ~Nuy>^
z5Q}fDEeHul4rS~1==G_gE)vCyp@c+<laIRmF!sj}kvI(t$_xxl$P5c&s`?tcv0m)P
zz8uV(WjB7Pf8|NO9K>rXC#V4Ibz)B>s5H-g=*j%$g%_WDiFv;AhS>Ri`ldAa;>8$9
z0c~Os8#FV87AiQI?c1-vo}L_(;S<}R5SkoB_}ngpKu%+?9?*BBrv+s$gsn>A1~E{!
z2q9E(CL4KBe?K!bD1#k#BOx?1h+y|6omT~e+QuOA)BhaOFX+V^gLot0H7Kh=GJXr|
z`H4Q`-Yr2H$-snhTY~Z)5=fM=C5U@Sv||GjV`NLPv@6d`h(y|e(zXPnxA2!dg4B48
z?4=WW=juimlww_DP~K363_u&Hs%v8~Fcj2!hw|#}k51@o3W|G&jFh#J3=ENh{n^4V
z_013V4~gqX!~|CVP)6+Afdp3n5YAo6K#(x7f2j2Xd>K#V05e9M%KLFJOPJ6e6jHjy
z?_ymSYd16fYdvu<7$R@NWBy!LA0*HRg=F<X0)0?OR-Z^w{XrpF{SdX!Q1+*<_0H{v
zx}a3((2%S?WB@uegz68Zt^ROO8xzW7Ay51pg&n=kD77zrt^eLrHzs7{kTI)jnEWsn
zHuEZi!oUP6ECvbiu_0+ONPv%ZECvaS$2t}hDJ&jK77K8wj|(YXB{-eyfi$eU$)92F
zk8vTn8vqjM<3iXCkWYa=E>v<0?+$n>(Z_{KyI5!G?V(6en-s#4e&uETOlVTbXlC`K
z^eBQVX){8~>vrWg`VXEu{1i)PJV2125%P)6Opq{dMyR=HUXUn%MhNd<(b5?t^4J-n
z8(t5IgGFK>6NAdkkhmqpWkhl|D})<a5AnhwFgJvEtnbV`@Z6vN^4yDT?zj3~m0$^<
zMtH5~hUDA~5~a=!A!1M$iclNRXSwh6$Lr?1D%8gFLox$^3{>Wa5Yx!X5u)A*iBU`x
zoD9+_jppPxLh=<NJmtce#y{}EgC!Wgp}Y^#J=XX#-F|~Bu-%@0_PPIk>FF1qeU6Pd
zryF+uRsAh*@kSaqbg51)5d(X@VvMca;*<g=O4;J{6Obrn3-yzqa}_*nWCQb!$Eq4#
z6+UboH<XBBOK#w|EKA4_JD6WJrc~{4b;u7p96vw?#q1zI@GaC5BKNR^s_}BWJ+2Np
zV2|Sf$dFJ74%kZLqco@;4&@CCd*U+{mhl*2dzIH%<S9NJGUDQ0<Wj2e3D#3Lrgb>s
zpn?h16Ct^o3lgX&LfFjxoO)m>?9|SOlrKYSd_P`$-E4HWM;k^<r4CHdFc1O4dB-l0
zKsZl!QRf4R&UZdk_9Z$W?HLk-7E$VjkX*`14%~DhB$slM1)vKdEaiU2ErGyA>W;Ti
zcVu0B#?76@Xei}J7<eWYlOSQx#gKgCA0%)tQiHrohhL>cejl=*FEFNhp8Vb!Qeb09
zeIJs$86W}jeJCLo9U!?D(h(ZcATgxB4>c3JhD3@1^?j)M{nkp#@JeaM>}x+?WZdGZ
z?HiT@7hIImH|!I4ra_{VzTw=>5|*;WzTw&~JYy-PBym7kyr%qv-_WWDgyqTxkDxdp
zELS!lp*SGytZYgtHLMSdl?@1(Qtz5T+ivw?xw64iAk~NE$_6Bm>cdD`9z(B+2DOpl
zyvgi;1IDApBg2>!dHNcqt~Acx8!-Hyd&h-k;s`FF#)W0#2og}^!gBK!B!$6n@Fw05
zh~$&bxNxYWb(&ljrFNTScL*6Tcy62I*b6QyGbt<^1|&&^<y*)gQOKk)V%>aN)x_|k
zM>uaghQVYnYZzrl?C-+HC?zm2jJwwSmHZglz97tB$!`Y&&R7tZeHkRc7lh?#015B~
zVT=aML8=-f1DDz_M2*3o%B8LnS+q1PCoTv<X(_b@h0z#||F>DQxbaBs+fJRpM4jFa
z%QtC20^#j&R;)Kb0^#j&i&oZbQ7p*S_OiG!*HgRN#h?zmIxKJg#CV5Y9WEA!j37xV
zT$Z*PDcZ%TJFaK1CXMa2>s<)yjq6=As5h<;%NKf}0*LkD4ma`M7^B{}N%Y3{AfUO)
z>5d?wxyk8{AfdUbsXNA~w%bH^{0Rt{vdy)Dy5lydJK`yjwmIDqB#^dIcl-rfHy+e>
zhVv#wJn^5grz1uwdoXR>;@=s@yQlPuXPlaLH=CL^+Eng#ng>iE?hebz86*&QhcP+R
z>$Y+7{N8aHqjS5xt_C&e-mod&FN6p*_J(m#M0<QtL5m(l)#DR9Y{XV0!3JlHL6zW$
zfQaW%KNyy0T_B-;FpP8?_v@ey>M-k?H9FQFcANkvoN(B20!Sbn4$HL=NYV)-`0)4J
z;?$NOv&C6sSLMfHc{K)1=zJX3MGyoDosYxVQKK6facaDiY)Q_zrS_y-DlIopx}{Ph
zo(u;?Y=R09PKJ?>e<7-kMm)`KEH^IHo^~N<wRzg<gmK<_r^Ce}?F0#k)8Uq_t@8o`
z%gyubsS4xE+Vd_1Z6lu#`y6l6>hpX!DpH#`Uwxhr<2`U5R^zlCcF7*m3}N*bms|{b
zGv$&KBOnBfOX0+gJgkC*8JEKCIyfX@ggf3vZ-v7(hIo8aciD-sSiQnpUT3taz2X*N
zqJS%5`Sx5~p~dQzuzY(CBnr3^##@;~Xu!s4vD(X?aGg=_sp%Dwu^(KxyH`X8UXZ}(
z6_H<80SSy=k?UGmH*pB8R{OGNS{OH1_KnCpCvm<`?HiGs3Lv4<H-dg4dKQ+c1K6e(
z=vf2YLh04P0TKD?U|gXE>VQaEyt4-q2m>M*;;+-|hjDs!aJ*gH(rBr68Si4ytApbs
zG6F*g7~>-e@qG@Ez!)ECcAYiPz!*&gwK)--V9uyATB)Hq7^T((YWxHSr#3&LEMmvo
z7~|{kOAHtA0XIJ)-%<eyxcL#hr9$}wNaPRmBcVkRu?b5I${(~hBI=tFu?Z`A&|46Z
zo3N6FP1uDI+JxOo*-U~4=8A}NcYLLNrLECjsRQ9yL1TVJL>?SM5@;(Ta_$0&F0&#M
z6xVEs<T=cWNJ!jKkQ@Yt6_GY#hgz~YOqcG~E5ZkmXo%pI!g^2Uq2E5o)^sq&)Pf-r
znFOB}8Y1#821wY{5GfV=KOh0t5W%wcM))}y)Ye7vHnGtijT`*yB1Qqf8IgpSz3bVI
zj>eO9>z&Gh383{6xz7y}K<gve=cZ%^Br3N)60YOx6CzPLwD|f+MBI*$EUxs(f2=56
znIzLTL==3aCDZ-Edo%6Y+}Kf60#DG*@u;QnENCt&<1a|yY>3GCn?x}6Ze;s!GCJ37
zbo>A&AT~N91tbtQM&v;$NFZ#CVC$0(N<reFbYsLhC?#6hzcC^YN+k;ir5hu3P`ZtF
zD{%d2XC&{{5>LD#KXdzYFFbFL>13?)6z`1SXo{h=y!>v@F815b#)R~)h}?Ju6K%MQ
zN~bqvAq3lYvrLWgRcd!c-n#}9Lc3{Xw&F6N_OLd!MrCSGMBb^!<r(5e@E&%S%b-#p
zvVYea<>?P2a=QapUm){g1dCug^hRNb{Cn+pYYn`Sv^S#gqc-9~YHtKbZ6gtWK*M`S
z?4w<b(Vp5P5&3Nla3OUhBEO9R5(OTK$Zum1iHaPF;M*9tatw5UqwLMD#_g%25xGT!
zn<;=e8o`v1<1z^6$5^PFQIS3tk()2LSpu13)Jsp|1`Lcr=Q?9Q(#<%fq|UfV^!bc4
zgmfDhLd-qOes#NXN9t@uo<tQYCS=Y=a1!+oE`y+Yjy2qF{Il6P3?b^fK(`=sj)Kqo
z7~!B1Hou7|HStwy(`Q0j*{|MVm`WG$9W5WUz9B6ELUHt)$n~B1XF`BMuJ|U>;%4hr
z0gAxd+dladBd4T#mo$0303f|fnqSY~04Su;*@s<sm(exVr$l~O1x(2FDZ$%_^p-%O
zf^|<{){kWRx;V5o)R%DRtp(fwqkX;OcNzDj`jyDL^<YA#UkN5s+Ks~<L~PcudwUqS
zr24x!bYHnY;b3DMGI%{{0Grptcql!<#R))W0O258CLz4AG}2DrZ7fjIBTM9$UciOa
z$P(nA(y4fdX`+4R9^+mmJ+Y+8i6KZ$EP)d#!vq#yYnsA-alf%WGo?gnDP0?e(3FzO
zYO6neoCk4xdP&}V*5d)ApMQD@j#eLrD!*nlgB^ar_<3qZiEMr_p*o`k%}?)&@M}dg
z*+UN+)v1{!@+~_sAv3cCZ`mcd45(Rb>VrmEYF3FnO~Fke;+EhvrGm?#tzTycA2gb$
zUN4cGfw&6<nb%9O8Hn3NC=0`EHp@I@v`@`0ksTXM$jmN5$Hrw%$Y7AoVJ|*p+>n~%
z;?NkILpY)=45GPg^+PCYZi(E;E#iY{ZV49q`0@mBFo@<c@59E8nR#yAX%Nk$y6?tS
zNu<QujuIS6Kk~4#%kb|gF-qv20*!wFXcz1BgmG8Zt`d!hb7DewS4sGKY5^iq;aw$d
ze`+-#IDkgqK48E3gt5j`d7wn&dsM`Q(t(l^{#G)PP&!c3@g90Z8zdecVy`}Bbgw>C
zqVa=DViLC`!dse1s2nP3-@|$fgA##4`?w_Um>qrEXyYmVxCCFsSzQDy{xW7C`|)Rt
z+w`hFr5eAeLtKFMDJ|mP%^(tBeM&I`XCtu(4Wp0RTb?&sMejOVs_`=|;zH?YX^d}s
z5ecQEr5*026Lhr<29)NFkMa|AwG03sml{d21}vk6!pTy;25bugO?k3ZW&$7~d$Lrn
z0YL)wWGU8w2-9jAS#pXM^)bqCJmsp;6nCmr?k++GDyK@ZYcz*05|+VH+Qm}b)Ox0m
z(IUSNKgCpu2k0OdOXWw)Kmz7sX-w=nfCS9NQcNP034uf=bg{JAH>F}5j~HUt;ZmvG
z#*-{~<#H*u@m@#tf*w%%MDZPs32Nr{JMMeHwgwn!r43kOf`$N!?GtUXo>m)uqOg7@
zt;)+V7_>oAWmwdHb-982OkluY;5h2E@E8=8^E;kGeNYthyRe$x6&VyQ85R}!8=mvr
zNgEth>!TunlRW4RiOT#<vXH+GjXGcZE2AMd(i0VDy`bQ{kx{uL0upA7jLIDmkboN*
zb#_F`$kQw;KJ^Cz1Dr*hnt_&}EGiRoJOvVq${i7qKw?oWLHP~6R8X56#UW0=p$2Z~
z&5fdC(+#~8F1Rd=DvP74wS;cyrQ{7g;@P*2G}?JOz8RHQi^Vgv(xNC{W1(F!!9h81
zMe*{>A@X~Q^5x}GrNMq<l<`YX9exUj;{ohj9+lY~Na!t(%3BK{;qc|raD#L>F?hnf
zBC5VC9WHs$Tj@Alvf%Jl+~HS*4TwDJqsrE(Y7ZJ?{LNDb!m)z-{Q9U&m{YvZua6>O
zre+5TE7nJYTbry9DYLdAs%~kr!r2Mm7}bh-@=1Cy7KUw#BA(I3H_1ZtZH{UMEh+N=
z56)|3L&g~uPc%Bs2qv1b(P>7IFt9NyZ@hv8YGV|s6eYbNk(V?^vv<ovc+$uvay_gv
zUIwV`tdJS$C$_s~&_aE?TLulC?NRw9q7+}KZ;#4*%pg(5_Gt1avJ8HMk5Hp!cUo~?
z2KwO+HkcX7Cw91H(D>RBl_$w5zOdgB4T#IpAc3$Wiu_a5gDzR@h-Pk=Wzgs%8+Syr
zw^<!|8K8DCb-dB($z5(4{G{0}g9gv8sJsN2;)7>b6bYp$19zhE^m@lvURlPjXp0{F
zhz;&U`|M?}j5pqYVy{~WjjO$`vuIrHb;cD`P?5b+%yFU+y5_t$T7HkLi1Pu^z0r!F
zSt(u-%#{1th6zUIiT!RFbWdZyTL$eO?2pPXbfoz1!Tu=bY*7ZjPlTsAry~68M6hCi
zw7dtsMTvSq;2^u>WuvP0pj!s*E*y-?^)F;l#=&U90j2GOgHfcii;xEa0=euFw(w<R
z@e@Z}2s-RO;+n~CbVY;Wt{hYVaU_b=O_*uIiX%~6sTTvllw;yZwB>{R+&)Dc49D4;
ziAHVhakmT$W*(2qJqpOc%;V8!og^sjFC357bg|y0o9QXal+W2UuNbS9r_Q+;^ofjf
zQMp|JAz++~$}bIp1je~&mAFg*5_X=8-uR@n(+4|)7@6myZJw|`rKvAPN9R|g_OGTG
z&*wjR)h&j0C9X#0LKjjf=4w=az6T_Vxk|BHxT65YT#e@Llf@LsVy;HZ@3nS`IECc9
zuifl5;}K6?-<XW+DTVee`o?@>{R|SN^o^y&t`JC+(l;h|g+QW|zOjzah=2@|U$p8Q
zyXk5EP6Y|bcPjeEo_Lb)iKZx_9}v6d6G6}ak=3p>3ftic%Elw{?h8niJs>7$Cy*$6
zKnyiJAnZrdKg{kt!}yiw(P6Iresr2)F*z@#6#7=uu$Y{eKmub}4D%ADJ8A6H$MWo$
zNO#hZ92vv5DBto<Q@S&TeKFIRRy8Ij12~uv8WWRw4oJX_i6PH9L1{ypqUR*LVV3b*
zrD{@4Zt;Ul?3f|GkOmS;lVYK;^$~4+r712?w;!2f9Pw05ca;chx~oKycseP)CQ1T1
z-~RPHqnT1W->H0>Z;8%#Di0DE^J77=y$zC-Vo0><5?GoN_JuKVQgY-CoRlndJda0E
zT<CZnBor5t=f9`Xnx;8pX^iIutZ1R3J+{=ffMVoQ*8+->OC9$^5kN~F_h*9I+p)Zl
zr28|Fd^?7dM(+L$xqn4WoH&30>I$b7Ktgtf(+VJgx`JAPvds)RZdHu=`xwcNAfUO*
z)ug6a6_aTjo<eg~3~Af9)TJ_%bgqjjo9*Fm8vp01!%vZP;sIdRIn@FQm~}BZg@FXj
zx)`P~n#Vz69$yzrZjR;i-BMye;Jug{;iHjgG3eLFka5yWs*;7*A+XOAlP{^Vfo~ZF
zEjGsReS`m!!64ZbQy&tkW(H+z+hfY^m`pXnfUV$&oC73m-5!&vCP<jFJtk94kg#=o
ztYkNArTd!1;F-?{F?Cl=q?(cky&W-`YDyL|pPeyEHR;o!&_&j(?vE*l*b_^PJ$3ly
zxR1_E_Qz!Cf*efRA1f7U1xP^ekI9@JBuv^LYjy}GQ7k8h$k`9XWX>*GaMnTc;3m2c
zkj2+TV|ic3Jn?rtIPHA#kL<0b#;V})7~YY)7uIDdH~b`~e8&3N#yxfTB^(4ktobA+
zQ$vuj=98FA4MD=1Ph#QEq=SgT9dsh5o{|odJm{Tt93)wA(5Ku%bj37_UZb6kDHmdD
zoZYv~xU~+1V+3`~(=nMDLK0x7V=^-Y2_sI&f)|>MkeT6`n0mg+2q!Z<8<UwK>50tn
zTuf$$l7;5@BBtST9)-ai-jj*teJjUd4u*UkGty!l=4c#V7UQrj2z0H>j?o|?d)XO>
zAYt@n8i({&OOD3K6=u9+w7Tnx6V|{aZj8U8<0ToWTp?$ZA?5hKb1ZLIT*TvYNM3D<
z$K_;5&$tK(AYe#O97FKg4kToI#${Lr3Dll(84$|Jklt|-5I{h)x2s9^^p4AbfTz&x
z9e37o<rEMG#+7<|%5tNbrw%`z5(#u*T#hQpL2qDOjw+C7uYvKB`nVWX#NeG~P+T1v
z7o$q@pf@-!N0nru(+r8zs3M<K1ho<Iym8zorTJ<FiX9PmqGSa*WwdZgTM($)Xvaj5
zkR9zf1tf|ZO-`YYcUF-7W7+kqj2o-R;>?Nr5lrI7b@2)kNT`gB<5+=qf7NC|ZE74J
zRUNp>X!Q7}#&J4K$AQhrh}YP24Myjx*BmG?0rgs3zI6@~P_M<&&=V-qHlyNa+l>uI
z!c#LF=QzB4aM3Ym$K^dtkR%nCAJYX1jM;H~Oqa%UGnzN&v1V(G`)lU82o$L2#pU!5
z86eDy%NY<P5az`(1Kz?BKrLX4))?Jt7Ptr$J{PzM6h0Tk<pEza9zGYuk+{+v+KlGV
zMXY+Qk*!`7mw5}AP+1h0c?(DsvncM&p3TU@WpS~p1_6X+Zs9b2E^`Z~>2q0JW-ky1
z(y}<RmsRxMTl1i{EuPoQUa`(tsRp*i5$O2b*_;|=hv*d@K>%`x(<?v%a);9^Kmu|H
z^@{z}F3sUDZC_kDVE=Nn@tCI$KShVf1L*CG%d12np|>wCZ>)eshu;@3JAe*PYja{y
zhgbK<<&71|L7VN5%Nr|_1)%+L+*rAhmk)uD;`n@ic?SOggSFdgw5$Z}7(vbXQCuD}
zH|NdyQ5^H`lUx@_N7<0A#?x(%x+>IuN8|EfxjApYqj4N8(<_k8sr^2VE5Ud(_S9~p
zgtdF$h*yH4^Ztm(Q2sbBFK2*62_MH1mGNyFD8sQQ*+1VmZfbKfE{-~g36+!aq&SKN
z36+y^9L3I~WUo2aeA>CV@>QIrr<ym~C5^^EJau3=6{O|fIVY?@8rtWaumTcZJ{K?f
zN`@6;@UZelT>Vmp70H9%c_*w$7Q)H}9#-0ML$ENs6j!qG<{4JB-MFC!gcya*6*^qL
z6qm0OfP_t#;w9qMT9ClL6vv(bjezE~_`5<QAkiMbp?Jj^2Oyz%#Tf@6p?IZf95kmj
zU(bZNZvz4?(KFFx0xkV|Cgd>2Qy}$B$Z-G?NIer62S3C9I9~tko5&l;v>nFX{=Nyk
z@sq<IF<yYAGl8df7!|303AwKgCi+*u1opL&DnbUZ{n=|fjPg|fgxuE#6Egi1azC2C
z$~b_1yu)ao9*_`29Euct1|-n^AICtvE~pJj<c(o1b{dcQha`*`9S5n`kp=Z^<WA%E
zntG>ZV4`OAPR&5Vg!+X1rX)zztUiIgc?#0kk$odrV3%=Y%?KBPg5-#VPrMNT84^mw
zMKT2v2qO|mrf%m5uyZu~&o1N6+R-io_1w`3c?;$`9wbL6ipA~-NFa<R8}35gt`BM~
zk@q(9>^8a=vjm31R?79Rr^-!akMA}bYbH9tU;=oeQ#p_@ZDK-3UyuNvNRIsrN5I1=
z?ALpYztv805omgz;v!JxrX*ydeLb(-lmrI+UW!)NQ!C7}qaPZNdn#uo<fsJ~O0%dL
zXekU5#m-9L?4TRh0X2tB*=yWZGsi8Kg8m%GBiHksc}}8OET%z{P69!nZq;2+L1R8k
z?KAGJneQUd2Go2Pfg;Cz7l9(jd_urmB0zxbLN<G!ad+2+E&}b%E=>5uID-rj7ADHB
zm$jfkvM|xAwY5+9AAw{^LRrSz?>F|=;g=Y^*DJJtw8V8F1(YRD|H4zCETOigl?q4%
zlqHFZWeJgL6GJ47OB3=9QOSa7b^`A<_CS|tfqzAl$XlE6#A`DTzxecTp6kYj9>ATV
z6$!k_5<~r3Q0G|1_8%}3b*mCGwt)##RwZPT1`?*MN?_)}F%(qrupxoKUzq9kBCfk<
zUV8qeKRhQYg@<rCo;H!FV}nyiJmtEwlYj(p19cL_0UgNbBx~3|4;mF+*0>PV1Z!Lf
zDt=8u?t4N75Ni^MaYtxr(GuITiM)^4p@YWZ!1{!9E3PF~b8AARq#%H})u}B=AZ~SP
z3lfN1skUQi9%xDB?Xq9_$Qb9T+~q1!O?D+@HVPpq?MfgUrBK_FD)J$F@(7ZR4`n1G
zCR9F5$YcW~R6a~N$wo^e4~ZaqI|#V(kmCc8u=tSU1CT&E<OEreToplffDRwD!pxJ%
zd)+>L)aaidIG4Z&m3gw!ikxskIDw^37+Tv4PId4Ih!-3mfCS<N@&Ui)+lnl|h_D+U
z#=1SP-NmM!Fm9LEQ}GNv4iCl6ERbAQUQY!Hq>Bk$PhClap%r=N+XS0;(pdH6w@&@Q
zMg6{Y>IV`S-zMbCdmw@FElmX!B|u^#`!*r}B^8lkiT-T@|B?z9&Z!hA^kSPnHNL3n
zm6UxEOc>fLDQ_i$L?OMB@;_36B%LJwBNfgBfdK#aWnZ5%y4Ut~5%~4iq}*|X3=sMz
zQ~bYkkO~m`CUFB{2X&lQRHxzgKR+{ed1{Bd7?d{-Ps;fcLckcFl-Hy{0%Ld*w<hqf
zQ3wMjkGF@OHX1y&<6R7j9OGRKiX7vUa#TSF7~_)|Rni&AA11RwXN@mvC%X`oIZRH<
zo4T!d<}f*#6I-7k0Wmq*wjJ-zt;pe1lVbmA`#J1CO-;%S8jn!+)THdxAfY%l>2&H=
zlsU{wiv6eWzc94gS*`_?ILvY@L5ahxq)Z&32%uR>^y%*C(yehSmCQTCx}7(E8k(EL
zo$o$0tF%Us))pp}CH5=l@fva+eu}t*2LNB_fP)11!lb-n0}|j1lQ?9c*a{M{bzw5I
zB$;o8@hur*pi9wbL*7iPi<4fysnf)T?xG~tfnn?hH8GL0z2#5RQt)PO7|L75T7PNO
z)GTw2qLH#JDJS#Re55Q(%8%fH1n{yXCcj^B1l$~2&Zd89{Hkubi$Hy9xmzt7C(DyE
zC27sa$?_zo47xc45;upICo6`FPb?6P83QIPPd58Cf0tLXaC2yR^8XF<&}9{<!HiW&
zrA@qj=Dt5a_y3;zGwb=4(WwS3$G0?&RwZRt19=#+DjBcjqZ1_8zu`vy-I3Nbj#jg;
zzcOy^y4ppc8F;np2pUJLlX4D+3J_K&F$2>}P%sD|$y}dQwy?i_ZEX7;emQo~NLueY
zgGSQ&r2JAgw1BcciF97HF}?V{KG||hQybGU4{zfQNp*8m8%r*9H?oBnjc{NSZ`9tx
z5>$K}+kMgKTeHnIg9hU^*9;nr+nj#fnh(ZpNgM;wMb*}H9byL?d&#(^W`~PFV{wP;
z4$9(pB#XtqK2%`LjwB9wp5+J_i+fn{W#hTpJuU*J^LvtVHQt&J%00;naTEX&2z!$F
zmp|`OP-#tr@|eBova!Kad(6e4JD|s03>uHelJd<;=m6tb5^q-aqFwFQbVPI7UV6pI
zSGt^bG3XBH>7+c{gAg!IC*=oaKmy}*GMTbi6srNeRzIx_^VFs9jFN)jv@)+rhg4p?
z`;PsGGNqJ%&$SLDKtS_<sX$LLgS=LTnHDeAfW*V;W#YStL<zEh`XZ5#onD4%Ovr+o
zQ6^vS!<*%h1<Bu2hb+xZGs^h>7U9CwnJDz<5{WuFXnvoAo<ewL8J3p<7@d4pnS4tT
zZ-PS>BtJxeEM2UbRfh9`tMo0R%Aod6S>AR#Zkhke_rFtyM2yzAl~n5$Y(}BkzH&vG
zOvJzh)QU2hh=GJvE2uuSFs!5syvy_=vqR;(t_r!}T~~#o%Dbe}nXAB-HSBjqW^Lsf
zSA~GqxGGflHKc-DT_^?Adu&&c*|qXLSB3oXo~uHG{ykEmUS3Iqek1GVH*cxj=&F!g
zHkO%U^g;$I8_Nod_&fcT6xg<~`F``Km0MgD8q!<J<c<Jjpt7Y5I|9$}Qut`h6`Q}V
z-sY<C;a4W}vPv=hsJBe9;QXqfcDxMVDPK}-ro6?+%a9+g!xb&Hio8G4J{~dGx2ztS
zmXjN}D1T%+CSHpHiSkFLF*&cpmo(Jspf)L;x5M7s)x1q<HYv?lG5KmWu1ZWzD>Kq6
zeOy%sEk0&MJl6F#^F+I8X`B<#-ivsICV4HbcDsgyVx|*kst>kRlWi;Q$8R@Z^H#1*
z%dP<~Y+IR@T>~VPR;JMcxK0KgJZxYs?=q{OX-LaGLokV(mUrkuLZu;%JM@%Rfkb3!
zNEeHb9}&q<2piIYoB0W$<j|)W8qyta;-~M`G-%eb<#(B#D%ZKDQR(Z_a+@A9C}&+7
zBdZ%X4b%pf?P1<lyCE%Oc{NXPH>71&1QG}v(m}B<1W7t+OpWyJEKEiJ+RCQ(Fki3P
z>OxR*wlyu2Gspm9YdR$k`9T6=YZ|YJzQhsG-L|uScbk8$+3q6HvTnPJK)r8!I@Lz{
zhkD=kbo&ncqh8gNneAj9e`a>6+36zCT(Hxv26e`rX_?1D1qeIS$YW{2Urlqt9`@$X
z%sXrLxCnIMzsE(OxnNIPuFIhUggt4z_VN%%K#T2TZSOH3som!y(0}&a=OR#owl6Jr
zMXUK-urG~&>a&GTu&Ze<IAO29$NX7-?Fkoyzr5~Z&|GlBwSwk?6J*68nop`}E;wV~
z_kcOXQ+vk6pt<0Ti$Qb28P^V)3(k-oi|D+*n$GJl+tG*2#Y&gUE(ZN~q024?o!4JZ
z2gRKV=m6t#8do$2iEcrs@o8rL+#FnU)y1H9*sr=6{4hQp6zNK}IE+u<(1yR4P)*ld
zd$R36H*fCNGt<;L>7c!5M!v!U8CcOX6BW5KNLbM`gPD;sziK)&?~_q(j<;q-KR4s-
zxkt^i8ZboI!((9e$;jjhB(VBq;_YM~ql5E4nU0;TUvey*n-5^C9yOn+8Q>z&vH5^Z
z(@>#f^8uNl*nFtw$L0evtt$EVAFAmp?O^ukW9CCOgI$DTAPja9=)VgM&d4PQRA9s4
z4BphBNv4`E+SapAA2U1D)Vm1y3W!?oBGCT`s?W&u8Y)1j&*0x2(Lb}Rrdzlp*yE3z
z?P^B22=p(4Mz{z;AdJY!i!D$A!iY>JXZ?vI;D+uPw)t`M#hNiLLI?<BT!au1#<;Zz
z0bvZ);yI3h+q>i0KYn5Ure?g05Jp>!&&b`=Y9$PW@fmSR6lRBkFg{a#qxB$1!2d9q
z$dbP_AFi3`B1B-rMAwE05GJ~{hyY<C)q=K?suldpgUM|EFU`AaC%XtGK$z?zlmKCJ
zMkcXP0m9@AE?AEcJ-n2@2hibH=BV0fE<`CHrnwNMfS8t%i-KyU6cE!gIeckC474b=
zw`}hd=4@O?a5195n4gh}TeT7e#{5h`ys-xo81pl@G0k@rs};OWzleSQl-byIkqdzX
zRdrED-mQTQAQolht2iJ5u_%LAaaLf31!v%8w+$I(ll{%pW@qoy_~{IgI4s%V)+P>^
z4H>yCgc@KrWUwrxtR5t?`VE<iO&PH(MhvmW*_gqnx@j+_T1g=AXT;)l!Ea2h?beK(
z-|-0GTQhR;3KHO3Gg!PH65dYY`{Wt?8=}T>DdQ%V`K>vv3uwpCBn<t)H8csV4_rf&
z!1{m;eankn;fA30Q6}&6rO%s-l;V#vI8^2TUg`##+mEs}zc>5W9(9nxgeQ+W{SqXQ
zk7i25_6JBHAI)HIb_`|WH_&AJnceRXW{J|}GZ%w)XFqeSgAhq&<STa|f$>=eThHH6
zCUav@yPV1EY43Z%{JT<oIfG0FA0|_8B<sG-u&4iIK3(-~MxL913#@N5NwMV$5?J46
zuw0|8>_#%@hYb7TPv)~-esIhI7v}unm;;ha$@v{5Ab!YTejh@ccx`Y@kj)#)M*i6x
z9PXRNYX5N{w;^l#XO(dLZZ_hI7H8dGG;6EC5C<}N49xynnRS2!X8$a*4*vh9+mKyD
z*y0z>537c_I%LO?tbE5GGSC^4#b(u$Fr#fy8=lR3oxS~%`9#TZGJ}FqTbQAZ$|@|Y
z#-ASjYHf_&`4{uSI&g#?cn-`_jvXL@Ig0F{9t#pZc2qXZvf{j%82n&pbXFag73a;8
z2fZ;_dEP8p*ku@-rA-D3tZk`EFK3mKctwUq|7uoMf^dwWioKkbhu)9`*vnZQdQ;}n
zma?`<?8U#DcRo7_`h4yI6DpIk^3%8=p)x5eFG+$#t}!Wl{ewJBC6Z@{ld>%y;Mt+%
zP<A*ed+&XG=(Qz?sabKM83cOu)T|tPAW_`ZtQ>nFxvaBs)Rt1bSy{eu^eYgYk|Pf!
zI@7GIoB=@sX;xN-2#`RUmBq-zp}ZGgaGI0NTbLDJnxlDYPSzXa3r&2XiNC+_ce5%r
zH>-%ZjlhI+=2E?H#riTpPMOaN|6$&qnxB>LZh#4y`Ppoa-cx`Ks0Hkg|1j^$EXc}t
zq`)L@7DH?by&8fKuq@8ztz!HBVNMP&&U*P5XuUx)VF_?^|I2O}p;xjl|7S+o_Wv_G
zq`>9bFUbIDNfx66->d`)i)>c$PxH}~ot3L%Fd<`SvChFDgbb*+*~|Ylf1P?;dYqWV
z&Eh2N4lV;XEoaGpnLkM_&&m_EAYa%n&my?stFcgl-&e9;|1xjQtaNc`LA#Q0@ZYr+
zwH>}qk<I(UKK?Hg{~d5+7QusWH@Bm@ZOMu~cMxc^El&RgiCS#Q%GC=<7_%jd)yoFT
zDBDpTciNlk%uSx!omtuL;GzfZ%*y#1BuQoEKT-z?jGbBh8<BVEWzTk0+Y|P-US>D7
z_JoT;dHad1TqQsV7$>swA9jNT#)&NEe40Ai5p_!TUl7nd<@8^W&^+bzUyxkZ>A&sB
zbLT|=?GA!dP4%Gud(P><cnYL*PX7f7q;u4N`;dFv2eogqc~f$p_*ePt{+34EzC6G@
z?g@O8HL}9d?a9&KNk@YK_;-$@K?3|c$I&1G{vA1*zdg~Os^8yUKG<xj)b!6u1HnaA
z`{(3NIY^Sq$@lj`0;7KpSCa7Jn%bWHJeXzc&41Pob`i+UgLCpuF=T)+IF}F$X^=n|
zoWnx;YnsB^6FJu2S8x7JsU7QLki*C3<aQ~9fH5{#EW#B?Qp#a5MNQS7{5?J=LJbIL
zj?c+Z0}`6!b28L`gy#61(^Tzg>tS+E-0}bcpvkTcw8uC(CqoUM0%>wih8mDSnw&#Z
zAz@I|4nb{tE^ir&jWQ30rswE$5|l@DK>KL3a>_hrj5deX;g<-~-~(+|P6la^K%145
zH<LhOrkIs0nU@nY1u^(c@p?|3n-epI<UwzCPR<mPg_&Ybj%Er<UOSNc7vz-t;&)_N
zXpDL9lORMIgGZ?00;h%`xu{I#K>~Y0PF}|ciCJJlE^{xx?nk6JdRdUm-ec_&l|^@0
z%vO&v_f#%+Yf1(z&dF~`bl~m3IEO<!`bb>|YJQuo8*4t)#dhtY*0-HL2pJ&QIr;Gh
zkff9A(9xPen`#|{+NNCIK>Lw#W;8#rDTg=6cns=DLt|@>$DocNP}QxDQ6K@iH78>b
zNI-7QVQ3ssU{yz$tnJJxyY2g5HXrxY;iqUeJb>QLoV;HH5_&sx@_r3SG~3Qx*={r&
z?eP$UnoZr6llN;R2Y%X>llN;R3qZSaxL<>}YM}>#y*V7Smht;FEnhJ!DnUC&kVp6C
z<oy~5Lw9cuXFh-6x}XlSf4*YAP<hZ*Ar~IZ$=$S$+=T~o*iEDV0@0BM&|y|G$!zh=
z;hg+<Czwz<?2I{(z&%W3j&_VdqBk7QCGM0JrOTgKZywGi@8CHB3CKI;hjX{y##h)K
zX|x?<Qzw}>*B)~k8%*Lloe(67J(iQJL69i+SPnbj1E`C2<RP3zC!2$6PPh=X^>V_6
zpskk^xuDqofeIi_<gooi+hZMR>*Z5+XtG&d`>BgSTQ8rw2(<O`X)Y+%Ku`g~rxf+3
z(G=B@@}V#6?o-U^o;F{&KBnE4FLHAG5kgS<B8O?2-zn;d-4^X~PPv-1ai?gGrw+fJ
z_M|PA%T6qSAQUg>!X-Rw1c^>{IahjB#sXsSSny3w{Z7UL$%Eb%Cl*K+V!^jO7Eq+@
zNV_#X%lV~#)_$!KX$KC58d%~oKS-F;vs{Ktkbvx2?u5&Zv{Tc6*2vdP&!hdzWfTDu
zzUyBu<0MEx^e>lj5+oq{m&=q4pL!cyo;R*sq-3;gA6za!DjK5kI;5QWSLoNV;u)rv
z8d5G_7RMtDh#}<&8u$dK7vEi@eTjB6%%7#|%jFx~U_z$8TwMQv45;C3$_(?~)bMhd
zn1M;$awKMtaU7U7k`>G}e~}tlE)%>EPlHC5Bf-Np65wELjAs320%vr&eEAtn;EXQE
z0TVt?0U0;|pA(&FcFc?|m&qiUkQrN!WO5<Glowxln^lf~b=-ZHS)CuAMYX0Egu_(p
z*HMYwPgpOe$JzG}7;P%RMHRv3w@gR~Sg%w4>1FFM)qf8AZjRYCHK$x&ngSCtbILJ5
zu|EhIQ1jU1bInIm^PIYYNnEPi{agn1e}gs7H6Kj9;rJ-b>;DG%=r%5c`Y&X+%royu
zEi9KW42OCB7nWmGQmPoH`Y&SB=9#yq7M06%5=@k}s2u4erXk3npDkv}eDmSd;&PeZ
zf(e<$<w$R_O9B}T&86%w^Ub?cOI;ayVR$LYVE94?V{aKdJm0KNEtB1rn2=dkjyR0-
z6p+~1e22Au!)%{<$Mp}rbN>$cXDKD+_%Pk-^1Q9A*Bj=N@al5hN2BJ5P;;!o2>Gw(
z02dwyn;*-O5TMpj_34Y$5o(Tg?41Q>kJLKHBrqYfj!gPDmjShbl`k~wQX8CRjqv8!
zK+W2X%b+<nv4(}_ZK+L;8za0qHjx`~ofc)GIkvFuo96wkwv@|v#lZynmU0~ao}pai
zrl7X1JnzeLPyD9L?a#mXzkhj&{pW95DO>!exjC?{9JvXfAaA0&?kVRJWLpqu#69IQ
zCV@ny_LR#B5+rQfQ;rFeHac&j8t-GjddsY-+2_OoFoCeoi31=>s9avw0SSbCR9A|^
zH&I7C$acSlD16XGpiXkITpndY1_%esD{kUb4oDyzEXOSk{wbQ9i2T^@w%DxqRDE17
zr!8=y^l`aN6+w~|wfcKBf80d=JH@_RVs5B8<(5l1<Ee7FF$)<$oGOotj1?pxPL(5L
zr5Jh>b@tQjhoxq=>a-I#!Gy|bCvJj-%IT)Kc@x#^0z=%q@>BeV2^ZY5Y3{n<dX46;
z3r_TeFn}&l^z2Pvpy`D0S&{d8g(u#FO<iq<*bC>px;<x^c|1QbxWZW!bfSi>uMiCj
z0tM7p$c6=p0_rPd!-7Ns^%ZDXy86<IJU)W`VWru<a)hfwEjgk>?yf)vDkCbet8oig
zK}(Ki$5xu%ZXaDC=Y&rDQqSlLIVXSw!srT_S%L(@=n7<(ODWyz1X7z&p-iq&<1<*p
zTZYY2@0$Nt2bP#2Aprde6*5}}3H=EbGFt|T8FE5J$>a)=Efa&!kS|xLlPW~EEP2qI
zSRu1z$-)fzN(E)h)ViIhe@v|qGh}IlnWzFG=0-e%5mPJV+z1k2Q!AXgu@m)+S+kyM
zFg>-iTt859Gt2b@b(2{Ya&CkQAZAsdb#X&hy%`r>D)QE_NvqAf19K~kaxqMArq+Bz
zwk8MwzTr3qBmm!VS`#Dy-=Nm~D=Kp{d3_PvxW@c@<sw&wT60l_{3sD*pt7g}Zx7J1
z(#<q3m$3g?Yd%uBq(bicfeDo*74oCeAfd9P0_hN<KU6?1V_&Q_Z>?PBmO?GItU`Vc
z6EY-Jfgny^zL~tdoCV<DcKD6KvE1=8NGL9MybKbG%bUD>GkJM6gO{)T1it~Z+VM3=
zdgk~VB!E^sz6J@P)#U46!PlLG+Itmwmobp;rGXS4XM26DXua7f@Lq+{TsXcnIew#b
zJP4p~bm|8Z=o=l!g9Q3Ua(qkFuQT~;3v0f?Y+bp<RUyZ3afT6Opt6OA(LG!Rj&Edj
z8_fHv8eJ6vYINGFGk1I=wbeG-&+km0KWJawV1A&~9(4QwE-XFh_yHs^4pzv78sz`4
z>dfP$s;)fV{irVJ>t_TDg{HwSgsyr^*&xcI(mSA_lBm%*laFJ9MvW_uapHV*3_`?4
zYz(NwMVyFfmj*GmjzBSN(hOU~1&u^D1!T#9h(W_N*oyN#_uglj|LS+@-1F``+r96u
zQmB%)>yX6WNHN9U{3)ACZ!aFbw;)4?DfSj*h*9=dx~WLYAY*SOZIX%Kkr*X;u+ls7
zckz4AB<M)t4;#fmq#TT+7>JaEaTEiI;)9jFj<_fmf{Efom5I+>6gwK_K8>T;k%;2M
z-$n6A$+t(1f9VI`DNPPK8oL+&P=}+jdjXMk^gH(&DLs%5<6ioecT1Cv9R-cZ7eYrt
zBl3mN5qlTqkkcXFwO?A`>Qu6`vS?POxV+Zp>64$ABz5=Ar5jG`tnAj``d791*W`>%
z(*Wd8&Ny8Gkv}=((likHlQa02I7_v-#Y1}Wd!?6GKa_Df7a|fK%D9{h6sC+j93F^-
zhcfg>WO}h$;=D;WykB}<O;bUF=&dQ^wpqi2gr-c!PIdy3(3Eit1FHp1&)88H041kq
zT&e_8a(c$4N}%D5Q)RXI+{}y}bpaUk-CKy~%`Ciyc;3v6%a|}DX=VmJAM1slYf{NI
znWCNfUwlw{&nc&^$;4fo8d2>!tJ<LeM6Qcf3q<6)ShYYzt`pU6k_~Y+^3wD2D|VN@
zefscuS@%Xzg`DjZnZ5{+Li4h0ax%-RYEWmgHS4{cO_VR{qT65Z)|$WR|4Pe>CqcB{
z4+|1nv#t#TBB3?w+AtvA-<s|9a@MwCLNMMxKbu&XwQZQAQEoxjwPB7VBR*Ma!{+rg
zuOOREv)=pJME;wO(*G=-0I)+oHFn!+);S4~N^Q<M^#T#TIm`EfOjrP^)aLBK_o<ZZ
z@e~4;!qo3&-4t7m*m6tOxB;4$T)w5CG%?<mtaAhYMf#R(>;^TG%XjDrUDa2k`Hh?%
zg=$LX*iopaWR4w$YD(tVk;Mx>m1wI?C3j_uj_ZfJs6#z=W#cu^wc-T(HRnyY4B8)?
z0V1OIXI)?c5w$;y_08tkS~1cgeR+x6Ht0~Hj2Qn=w$$EZ0uN;lWqX&YX6aMbN-Q1G
z*Cf?rgO0F^$9M=t${fjdHLJ#ihcZX9tQwOBuvXAfr!@dtI~r>ZNXetI)_{gL)>^G7
zyrUJZ71wse`htkQI%0hR5z!Ir3y6pg(N_xx7$xe+PT3-zpVv*DRotU98}A~m6NOFD
zn@d&8uqnRtTZqV-;yZ-_ku}9fVQtcW)bX0hX}&kZPn16+eYg4gho`71lOS2Yhk^3b
zeCPK-%1`s1-ve>6X@0L6zV&+{7{7nSPc-}1?;VYD(|zanj)dPo>c@SzI<dn{zc9Kn
z3<{csWP5Nxsxs4e{s=_mOh49aoxs_?NlRk^=y|s9;s%I<XZtR0fJmC{ySM?Gq9|B4
z8r7$gbN!-k{o?Y=`s>3hOUiW9y~!TB%c<(@%v_)JFQ@9%vsCOE-)r#`a+5??uw5!9
zG=0^nYU$W{e&S*?x@Q04<(~BuqrOMsnZFlGEbay0TY$LxV`*4MNcyVo>b`L={#{x5
zIBoS4bp>f+mia!nQODB$;CrtjjgehfIZ~X^bnhPOPm^Bp-8wc?InjKZpSZ0cPIURI
z&t1H+xc~CKC5V$d`AiW~lq1PVsU@M)*L`;bpQRvok?-#MvlQem_7i7a@SWiQ_Pvz|
zzBLxi?sg&R>8Gh%hAs0GwS`K_XYz929ZY1zNnosyN189<dI^Ab-?Yd>0hqi!_G2K`
zYmegqNYQqQgG~|#_2OC^^BpNQzPM^*p^!NLM&D%)m?*T-Cv(V2sP&?@P5NI>R~HW1
z<h#THks_OXmpFhF+2oTrzLgb$^}ysl-#d`sdAd4TGJ&5qv-1bl-4}Z(5Hb5=4+SD-
zpYJj|kg(h54?IBFNoE&<&FuSqGW%3nA674!=2(7YU)8ls&9TCBB*!1~-P8<BJm;9-
z!-g1;=N$9tW=Ni^mlS{8x19t4C6C9^2&ClkI2wVJJpNrY)=TJ~w9z;kKwVB2>L4G@
zCkyW?ow}2Sca=`vNuOwZ;U5Uc1_CW8TAyc1>-l7lX970h{zisz8^qer=ikVxsT}DM
zxO@c_Vb2GpW(lt_A?*1;j`WaZ-yqhRukQ}j3xnnt%7~fg2kr|Q9?HxQ=-N-W50dc6
zj|pinhO`BCtuT^AR9n!?91JIrLTv#S+GrlsjhUlGfwxY3IklntqM+NUT=^^&fNhE1
znp0O+EeSZQLWbiZB5O&|D~O>m1-UA-^0z?@xl~`n5sOtzgM@9xAW~#$aE2Y@22x~c
zz&al}1ff9;w@kO6t;SX@3ljDKV~7-47L=Kz^n`~Z%K~OhWo1Ew7;J?eUZpOoS`j47
zl5HVUWJS=^F53fAWJSQTJy|T=Al>a%dO?+{t6CLsKcRgW=~}M}DkQ|^)ud~^DyXh?
zuh013YJJ8aUVn9vuwK_-7QL?y`V4kOWaxc$aPCmEin&3C1J~#$2dVn1HH9KF=)R^<
zL<Zg0ND<k!-XH_zYjyEpb;aPdLBdWuLZryrptm`cPk1P@HW+k{dQrAsHKvk(4%p{C
zd9Zq+OX|-7bK!CWY$INl+!}b>_4((ik(2mkx9vkm+SZ`EwIC2_TLadgNY@KUfNl-S
zw+D7ANeE_!Wm~}FU<p}A!L_ypOpT>jTIEQx5Mx_VTc^GhM`{!|+Z}k9l<zC<uSX42
zy>;nO_2IRUZ03Lg%k2)_ge}k%a7Ro7so3s-9Ry+yAO_eS3?F9>O%Z7R9x+x;kv!Na
zIqg8cnsM>spB^YYLj37K;F?dEc*KFgeNO_BaUkG((mq1Qcn<{WbKN7%Ov-_v{}A=H
ztRHKX6xbPf59a3$SNE4p;%EFKk^(ymPm!SLEIdV0V5dCAYFJWWXOMm{v^@{R+MdVP
zLE_uM_B<Soa^D25=ix~7JWdAE^Vofwj3#qQ$HQUK;;^{<J(T?UhLT=-b+!7R)Wcy(
zU$fw(mn55}(94;f4H+PH1Doh80iw31kRg?sXc5f6&G}t5Dpg$39C~IMvQXh_4q1lW
zV3<HNboV+ns$xdyjwR*74WWj7naEH$cWH2vlD?}>4a+<hdV@s4LWJkBaLBo88guYq
z^23~vEBsD$F-Obhch#xS*>o0qCenq00&~K_=1Wi@Qs;z2MvH+Aq`Gs$b4MvongC;k
zr}Qa}YGlPzg?h<!z*AB$TX$S;uKsx=b)Q?PmrMuDm3k35$RRsCt=BcG+Vs<*JL?xB
zJWq%0wBxi3VZv8h@&iVx_lnakp=UCHP~mC`Ikx;y_6<n^3-hTl>S`~&uuvzN5?Cm8
zlFmP+i264D@WpCdx-ImK!wV6nw($H5Ri|ZQ4s4PB^;q>ydQqX~a_sJ+aL9QiDK9Z9
zm0TJ!k~epp`eABm$OlOsemhDs!Lra>p*zQ^+DZJf*$X=ATNd`QJG+5scUj12zW6B+
zKV249uE0;Ft0V-I36_U06F3SrSRT4e;7F1QmWO15V^p1zJf}VMGUW$w(xsQEzm5Xg
z*x^5{)*iYD1sYzrXb?!9+CwIVTEyMCl4X5Z^a<|%M6rJLDs{U4_EI%1wLUDVFy7u<
zynO@OG2X6MU8a&1K(kr0gg>e31~H+`==7FaZPcG!rUqAR3_Y`NNr>=l49PmIL<WNX
zs0WW%!w3GcAjeQe4j=CDP{lVxZ|DFv(jI4Q{OR$kXBvWa3I0aLo8l5ptPz48r{A7`
zd%S$tZVx@{+EC%z9x})wkpe{M_Hfu(<LLsa?DlZ@#WGLN-{@?I?s=uEs@M?+3q(Zh
zkYKsf@Zjk?^>tUOyV5&DZ-kR8p1w2Wo|h-Zsd|g6f22RVQq8XXs8APi^^c@32Q3q>
zz9;l*%D3yEUD2&dPyChYr~mpR^}GI1&v$~w@%MyGlKdD)9L=FfVbRy2{=-%3s?7e7
zJulK9AI-PNr=j<Gn2?+8yMpbvhtTrbtJMR=BMyg&M&oYwKZJf3Chqzk1-%>z`S_4_
ze6)D>7oqpJP@gqX4b$DPQOQYQd#)q@qO>o<ezp$)r0f?Vi?zhRf%x|qq5n7M-$F3{
z{blUmjzS&2jQ!h@#J|53|27}*qw%EViO}l|6Xommlh>&Ce*v=o&41Y8MCdlX0;$u9
zaDd5(R6_jwgk&CDC;2Kp5uVpcousYhf9jN?2497VbL1)`FEJ*Sd@w4S5fzs|LNv8+
zB<1h>M|FRX2P4k?nI&!E7>R<Z`HBCedKO<kHF6zHs62XV<PMPn^604%9eip0fLM8I
zl(M%S3#4CeIC@sA53N|rH|O8~iQ?#&=7Lyxqvpts>yI&S)EqHZY{g2m-5m8CZ%oL)
zB33A;+Y=)lg*R-D&WoRIn0R(`RClTBkfY_fHAhE9ukzCW%hB?;{4)R2wahuDbmZ1m
zmdPv6iM-GT{yWzZ_&_t0R>GgipA#{Y#-d&z6`rfVxK3T0o*TKg2_igmBP{WVw1j06
z<MZ-&{8XJ%oSuhZ<K|F>91;3$5*lR^`_F0pGxb{fxyT(Y4iTp3A{Ks_W4y~G;#>92
z6V&E(YvdVkq@)CVYlJthwUP+wh5E<WtM%!Hk(<jeGa<b&VlJO=b$J}V)TT$?pq8iG
zBG247Aw(p#MXXDz$2~4eC0~zN5O&7TRbA@!h*e1vDHlnkERMXq?mtltp9Dk_*!D1i
zsAO^Eu0;UyT8ksb>cuO8c;(_~Kt8f9fe=ijEQwr8;3(8%N#t4rN0LZc5)moaVnwbJ
zS{@Z`h`JP)|G<t<zq+=htA6(YgVeP*su8K>QAwpq<bA}RD<W^0v1cWa3W9C61oEgA
z5gCf}SWC<$LM!#=8`T9BD<hYYAi}dUA|pwo-bW0#O8Ymd+KN??ONS7J8j%iVJwYF_
z<{SDqH>t*oHzIGiF*!td-iR)^P!tId#$2uU-lXa(R!6SYfC$g(h*m?^WpG&!jh3#z
zS&gV@XOW|mBk8$4s;f8a8_WehYxIBItj46*6nMmxYlKHOJs^nmyk4KUS-mrGedN_S
zL6V-=M~$P@ZP@$bRPxQJ=v^Y?pTDQl#4YNw)SD4Avts>=#rkhW-aFR%K&%h8tLcF#
z_pNAv{fGmihPR^J*~a=ntp8S2^^UW?5RCQTj;-$~)avcn`i>;le_O22eK%eS+b=$d
ziuRRI*F7}fcd9e=`8TTWy8c$RKJ`IVk~XF<7t?RS)YkMsY6mu7KP5n(vnAqoDmIq_
z`SU|P;WkxM@nL~SO#h+qoN0JKTlI?DRJvj-E@iaH9YR8l&cDF%@Xp)x3E|lmxqdIV
z1i`Z{qTgF-<Vee{hu^NU729L?D7Ou_xQ8qeDi_o5)c4)4#-Ft_b`OZi*(vT}>x1?`
z!shyo+f>=?J5-_qWE*G>NQ3nw@yPy091ifY9&m>mQ1Nk`syKfNo{uF}Weg7)c9*{X
z4&_(uijx9IM!~a7l7i)-AG%w&3eWC>3ZxslTU2nCkwY(Zk3M{d8d$L>@@z+hQ=j13
z6R|tYR-I1hC%WoR)bvT@nf+|Mvvfi~iOxCK$ze;}UVZDGYG8VA;l1Q)hrQ8-)#?VE
zc5Ev7m#FBle)&#yed;e!w|>S=$BLUCjJ!|9O{=fwmp$wTI#xayooUbZ1!Am&k`*OA
z0ddfSQShmAP$3uxJrp~rqfmoG`n8Fw=V^z;C%<H=a|w6r9FK~c^IImWyS>!$*a`cJ
z6P}2jQ2+XF+7qDlLH<P43GpxK0CFu2?XzyVTjkPU#ma>U&sU;c`rz<@IwO7fZdIS|
zjGGgvhD>wvt~5G*B>_#&U;0aRMRCRCoNJn(!ZkUEy&DV@Za76RyGM;mPsusI>1*6@
zN)Er7Y$f4`P5FNRs<_sqDd(E6zQz%oay-wpCw-+oc~sZ_iuUBuoOhv#42V4L(HvLi
z{Qy&qV@FDk)2qtvRpWd9HixO?n_`@pYF5sBBB#F|r$*?ud+B+Bt-<&gmCVXHg8_N3
zSvhAgAO@S23!cc?_CyHAV2|fqd*Ue6<MEtpPaH`y%Huh#w^FRfjXlrgik{0Am%oze
zpC9^fYPgqrCRcK%NhJNmhV#&(O(Z}n1-4B&5b^Uw7ZSMr#E8%8b@!?9>1T7U?+y{3
zXLE83mE>b?y<zBE54m5>sQ7(>$xwx9g5lv^TlCKR)eY&EoC}eD#)K_7PN<Me*DgsV
zU(6LP)YtvH`bp0hbL{ewEPaXSbbiizDQ9}Kvma2&TYz@qD}PeK`8jt)Hju~6&#~%I
mVgQIr=jXC7Ih6{*sB}TBQb*wh7Q`xbBvI)CJ@ElG^8W$DEcuxL

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 9f07ea39..cc2fdee2 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -2229,7 +2229,8 @@ type ResourceQuery struct {
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Requester identity — who is making this request, what scopes they have,
-	// and optional delegation chain.
+	// and optional delegation chain. REQUIRED: a query names its requester, whose
+	// Requester.id and Requester.domain are required in turn.
 	Requester *Requester `protobuf:"bytes,3,opt,name=requester,proto3" json:"requester,omitempty"`
 	// Resource URIs being queried.
 	Uris []string `protobuf:"bytes,8,rep,name=uris,proto3" json:"uris,omitempty"`
@@ -5297,7 +5298,9 @@ type TransactionRequest struct {
 	// transaction's durable identity is the Exchange-assigned transaction_id in
 	// the response.
 	IdempotencyKey string `protobuf:"bytes,2,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
-	// Requester identity — forwarded for authorization and audit.
+	// Requester identity — forwarded for authorization and audit. REQUIRED: a
+	// purchase names its requester, whose Requester.id and Requester.domain are
+	// required in turn, and every acceptance binds that requester.
 	Requester *Requester `protobuf:"bytes,4,opt,name=requester,proto3" json:"requester,omitempty"`
 	// The offers committed in this request (REQUIRED, min 1), each carrying its
 	// own reflected signed Offer + detached acceptance. A single offer is the
@@ -7321,7 +7324,9 @@ type DiscoveryRequest struct {
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Requester identity — who is making this request, what scopes they have.
-	// The Broker forwards this to Exchanges in ResourceQuery.requester.
+	// The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:
+	// a discovery names its requester, whose Requester.id and Requester.domain
+	// are required in turn.
 	Requester *Requester `protobuf:"bytes,3,opt,name=requester,proto3" json:"requester,omitempty"`
 	// Resource URIs the agent wants. The Broker forwards these to Exchanges in
 	// ResourceQuery.uris. Optional when `query` / `search_filters` drive
@@ -10932,10 +10937,10 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x12fora/v1/fora.proto\x12\afora.v1\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x1bbuf/validate/validate.proto\x1a\x13fora/v1/vocab.proto\"\x84\x01\n" +
 	"\x15AcceptableRestriction\x12,\n" +
 	"\x04axis\x18\x01 \x01(\x0e2\x18.fora.v1.RestrictionKindR\x04axis\x12=\n" +
-	"\x06values\x18\x02 \x03(\tB%\xbaH\"\x92\x01\x1f\x10@\"\x1br\x19\x10\x01\x18@2\x13^[A-Za-z0-9._:*-]+$R\x06values\"\xeb\x04\n" +
+	"\x06values\x18\x02 \x03(\tB%\xbaH\"\x92\x01\x1f\x10@\"\x1br\x19\x10\x01\x18@2\x13^[A-Za-z0-9._:*-]+$R\x06values\"\xf3\x04\n" +
 	"\rResourceQuery\x12\x10\n" +
-	"\x03ver\x18\x01 \x01(\tR\x03ver\x120\n" +
-	"\trequester\x18\x03 \x01(\v2\x12.fora.v1.RequesterR\trequester\x12\x1d\n" +
+	"\x03ver\x18\x01 \x01(\tR\x03ver\x128\n" +
+	"\trequester\x18\x03 \x01(\v2\x12.fora.v1.RequesterB\x06\xbaH\x03\xc8\x01\x01R\trequester\x12\x1d\n" +
 	"\x04uris\x18\b \x03(\tB\t\xbaH\x06\x92\x01\x03\x10\x80\x02R\x04uris\x12W\n" +
 	"\x17acceptable_restrictions\x18\t \x03(\v2\x1e.fora.v1.AcceptableRestrictionR\x16acceptableRestrictions\x12:\n" +
 	"\bdeadline\x18\x06 \x01(\v2\x19.google.protobuf.DurationH\x00R\bdeadline\x88\x01\x01\x12-\n" +
@@ -11189,12 +11194,12 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\toffer_sig\x18\x01 \x01(\tR\bofferSig\x12!\n" +
 	"\frequester_id\x18\x02 \x01(\tR\vrequesterId\x12)\n" +
 	"\x10requester_domain\x18\x03 \x01(\tR\x0frequesterDomain\x12'\n" +
-	"\x0fidempotency_key\x18\x04 \x01(\tR\x0eidempotencyKey\"\x92\x03\n" +
+	"\x0fidempotency_key\x18\x04 \x01(\tR\x0eidempotencyKey\"\x9a\x03\n" +
 	"\x12TransactionRequest\x12\x10\n" +
 	"\x03ver\x18\x01 \x01(\tR\x03ver\x123\n" +
 	"\x0fidempotency_key\x18\x02 \x01(\tB\n" +
-	"\xbaH\ar\x05\x10\x01\x18\xff\x01R\x0eidempotencyKey\x120\n" +
-	"\trequester\x18\x04 \x01(\v2\x12.fora.v1.RequesterR\trequester\x128\n" +
+	"\xbaH\ar\x05\x10\x01\x18\xff\x01R\x0eidempotencyKey\x128\n" +
+	"\trequester\x18\x04 \x01(\v2\x12.fora.v1.RequesterB\x06\xbaH\x03\xc8\x01\x01R\trequester\x128\n" +
 	"\x05items\x18\a \x03(\v2\x18.fora.v1.TransactionItemB\b\xbaH\x05\x92\x01\x02\b\x01R\x05items\x12^\n" +
 	"\x18agent_request_acceptance\x18\b \x01(\v2\x1f.fora.v1.AgentRequestAcceptanceH\x00R\x16agentRequestAcceptance\x88\x01\x01\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
@@ -11372,10 +11377,10 @@ const file_fora_v1_fora_proto_rawDesc = "" +
 	"\x03ver\x18\x01 \x01(\tR\x03ver\x12\x1b\n" +
 	"\treport_id\x18\x03 \x01(\tR\breportId\x12)\n" +
 	"\x03ext\x18\x0f \x01(\v2\x17.google.protobuf.StructR\x03ext\x12!\n" +
-	"\fext_critical\x18Z \x03(\tR\vextCritical\"\x9c\x04\n" +
+	"\fext_critical\x18Z \x03(\tR\vextCritical\"\xa4\x04\n" +
 	"\x10DiscoveryRequest\x12\x10\n" +
-	"\x03ver\x18\x01 \x01(\tR\x03ver\x120\n" +
-	"\trequester\x18\x03 \x01(\v2\x12.fora.v1.RequesterR\trequester\x12\x1d\n" +
+	"\x03ver\x18\x01 \x01(\tR\x03ver\x128\n" +
+	"\trequester\x18\x03 \x01(\v2\x12.fora.v1.RequesterB\x06\xbaH\x03\xc8\x01\x01R\trequester\x12\x1d\n" +
 	"\x04uris\x18\b \x03(\tB\t\xbaH\x06\x92\x01\x03\x10\x80\x02R\x04uris\x12W\n" +
 	"\x17acceptable_restrictions\x18\t \x03(\v2\x1e.fora.v1.AcceptableRestrictionR\x16acceptableRestrictions\x12B\n" +
 	"\vconstraints\x18\x04 \x01(\v2\x1b.fora.v1.RequestConstraintsH\x00R\vconstraints\x88\x01\x01\x12-\n" +
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index 4d67b446..5301f199 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -342,7 +342,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester."
+      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
     },
     "search_filters": {
       "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
@@ -370,6 +370,9 @@
       "type": "string"
     }
   },
+  "required": [
+    "requester"
+  ],
   "title": "Discovery Request",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index adf4c9c9..a852d006 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -348,7 +348,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester."
+      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
     },
     "search_filters": {
       "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
@@ -376,6 +376,9 @@
       "type": "string"
     }
   },
+  "required": [
+    "requester"
+  ],
   "title": "Discovery Request",
   "type": "object"
 }
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index c9e15cf5..fe6be31c 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -235,7 +235,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain."
+      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."
     },
     "supported_profiles": {
       "description": "Declares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]",
@@ -260,7 +260,8 @@
     }
   },
   "required": [
-    "exchange"
+    "exchange",
+    "requester"
   ],
   "title": "ResourceQuery — Query an Exchange for available resource offers.",
   "type": "object"
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index 587d870a..4663608e 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -239,7 +239,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain."
+      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."
     },
     "supported_profiles": {
       "description": "Declares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]",
@@ -264,7 +264,8 @@
     }
   },
   "required": [
-    "exchange"
+    "exchange",
+    "requester"
   ],
   "title": "ResourceQuery — Query an Exchange for available resource offers.",
   "type": "object"
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 3ffa2087..59107cda 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -1059,7 +1059,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — forwarded for authorization and audit."
+      "description": "Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."
     },
     "ver": {
       "default": "",
@@ -1068,7 +1068,8 @@
     }
   },
   "required": [
-    "idempotency_key"
+    "idempotency_key",
+    "requester"
   ],
   "title": "TransactionRequest — Commit to one or more offers.",
   "type": "object"
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 7a172713..73442ee0 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -1079,7 +1079,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — forwarded for authorization and audit."
+      "description": "Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."
     },
     "ver": {
       "default": "",
@@ -1088,7 +1088,8 @@
     }
   },
   "required": [
-    "idempotency_key"
+    "idempotency_key",
+    "requester"
   ],
   "title": "TransactionRequest — Commit to one or more offers.",
   "type": "object"
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 584677bb..cc7ec603 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1516,9 +1516,9 @@ class ResourceQuery(WireModel):
         None,
         description='Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.',
     )
-    requester: Requester | None = Field(
-        None,
-        description='Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.',
+    requester: Requester = Field(
+        ...,
+        description='Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn.',
     )
     supported_profiles: list[str] | None = Field(
         None,
@@ -1786,9 +1786,9 @@ class DiscoveryRequest(WireModel):
         None,
         description="Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).",
     )
-    requester: Requester | None = Field(
-        None,
-        description='Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.',
+    requester: Requester = Field(
+        ...,
+        description='Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn.',
     )
     search_filters: dict[str, Any] | None = Field(
         None,
@@ -2114,8 +2114,9 @@ class TransactionRequest(WireModel):
         description="The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.",
         min_length=1,
     )
-    requester: Requester | None = Field(
-        None, description='Requester identity — forwarded for authorization and audit.'
+    requester: Requester = Field(
+        ...,
+        description='Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester.',
     )
     ver: str | None = Field(
         '',
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 039d69f5..ddb892bb 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,7 +48,7 @@ export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_RE
 
 export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester.").optional(), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
 export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
@@ -168,7 +168,7 @@ export const ResourceIdentitySchema = /* @__PURE__ */ (() => wire(z.object({ "c2
 
 export const ResourceMutabilitySchema = /* @__PURE__ */ (() => wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"])))();
 
-export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
+export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
 
 export const ResourceRefSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")))();
 
@@ -202,7 +202,7 @@ export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "e
 
 export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
 
-export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
+export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
 export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 35564882..3d1624a4 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -373,8 +373,9 @@ ingestion page and the threat model now describe the pipeline's token count as t
 publisher states, in the price's own unit, and a usage report never changes the charge.
 The JSONL worked example no longer pairs a per-access price with a token-count estimate.
 
-**An acceptance names its requester: `Requester.id` and `Requester.domain` are required
-(validation rules added; no wire change).** An agent's offer acceptance signs canonical
+**A query and a purchase name their requester, and an acceptance names it too:
+`requester`, `Requester.id` and `Requester.domain` are required (validation rules added;
+no wire change).** An agent's offer acceptance signs canonical
 bytes built from the offer, the request's `Requester` and the idempotency key. The proto
 let `Requester.id` be empty, and the SDKs signed an empty `requester_domain` as well, so
 those bytes could name no requester. On a purchase relayed through
@@ -388,6 +389,10 @@ comes from the Broker and never signs the purchase.
 - `Requester.domain` is REQUIRED, a non-empty bare host under the same pattern every other
   domain field uses. The pattern already refused an empty value; the comment now says so.
   The field is the host of the agent's key directory, and never a free label.
+- `requester` itself is REQUIRED on `ResourceQuery`, `TransactionRequest` and
+  `DiscoveryRequest`. A rule on a field of an absent message never runs, so a request
+  that named no requester at all passed the two rules above. `RegisterRequest`,
+  `GetAccountStatusRequest`, `UsageReport` and `DisputeRequest` carry no `requester`.
 - The `Requester.domain` comment said verification never uses the field, which
   contradicted the relayed purchase. It now states the rule per path. On a direct request
   (the agent's own signature arrives), a verifier resolves the agent's keys from the
@@ -404,9 +409,12 @@ comes from the Broker and never signs the purchase.
   signer refuses to sign bytes that name an empty requester, and a verifier refuses an
   acceptance whose canonical bytes name one, even when the signature over them verifies.
 - `buf breaking` against v1.0.0 passes: adding validation rules is not a wire break. A
-  peer that sent an empty `Requester.id` is now refused by a validating receiver.
-- The validation corpus gains `Requester/id/too_short` and `Requester/id/too_long`, and
-  its `Requester` baseline now carries an `id`.
+  peer that sent an empty `Requester.id`, or a query or purchase with no `requester`, is
+  now refused by a validating receiver.
+- The validation corpus gains `Requester/id/too_short`, `Requester/id/too_long`,
+  `ResourceQuery/requester/missing`, `TransactionRequest/requester/missing` and
+  `DiscoveryRequest/requester/missing`. Its `Requester` baseline now carries an `id`, and
+  is seeded so the baselines of the three requests carry it.
 
 SDKs, in all three languages: the acceptance canonicalizers and signers refuse an empty
 requester id or domain, for the offer acceptance and the request acceptance alike, and
@@ -422,7 +430,13 @@ and the signers, and the verifiers return `false`. The purchase verbs of every c
 `domain` locally, as a malformed call, before signing or sending anything. The shared
 acceptance vectors move their empty-requester cases into a new `refused` list, which
 records the bytes and raw signature a signer without the check would produce, so each
-language proves it refuses them even though that signature verifies.
+language proves it refuses them even though that signature verifies. The generated
+Pydantic models, Zod schemas and TypeScript input types now require `requester` on the
+three requests, a type-level change for code that builds one without it. The Python and
+TypeScript clients validate an outgoing request by default, so a discover left with no
+requester (none configured and none in the message) is refused locally as malformed;
+resolve and the purchase verbs already refused it with a named remedy. Go validates only
+when asked, so its discover is refused by the receiver.
 
 Docs: the authentication page's Requester table and a new "Requester domain and the key
 directory" section, the projected-execute section, the transaction-flow page, the
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index b8e2f55c..596cf0f6 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -518,8 +518,9 @@ message ResourceQuery {
   string ver = 1;
 
   // Requester identity — who is making this request, what scopes they have,
-  // and optional delegation chain.
-  Requester requester = 3;
+  // and optional delegation chain. REQUIRED: a query names its requester, whose
+  // Requester.id and Requester.domain are required in turn.
+  Requester requester = 3 [(buf.validate.field).required = true];
 
   // Resource URIs being queried.
   repeated string uris = 8 [(buf.validate.field).repeated.max_items = 256];
@@ -2547,8 +2548,10 @@ message TransactionRequest {
     (buf.validate.field).string = {min_len: 1, max_len: 255}
   ];
 
-  // Requester identity — forwarded for authorization and audit.
-  Requester requester = 4;
+  // Requester identity — forwarded for authorization and audit. REQUIRED: a
+  // purchase names its requester, whose Requester.id and Requester.domain are
+  // required in turn, and every acceptance binds that requester.
+  Requester requester = 4 [(buf.validate.field).required = true];
 
   // The offers committed in this request (REQUIRED, min 1), each carrying its
   // own reflected signed Offer + detached acceptance. A single offer is the
@@ -3571,8 +3574,10 @@ message DiscoveryRequest {
   string ver = 1;
 
   // Requester identity — who is making this request, what scopes they have.
-  // The Broker forwards this to Exchanges in ResourceQuery.requester.
-  Requester requester = 3;
+  // The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:
+  // a discovery names its requester, whose Requester.id and Requester.domain
+  // are required in turn.
+  Requester requester = 3 [(buf.validate.field).required = true];
 
   // Resource URIs the agent wants. The Broker forwards these to Exchanges in
   // ResourceQuery.uris. Optional when `query` / `search_filters` drive
diff --git a/sdk/go/connect/broker.go b/sdk/go/connect/broker.go
index 515c8473..5e2b42b3 100644
--- a/sdk/go/connect/broker.go
+++ b/sdk/go/connect/broker.go
@@ -100,8 +100,8 @@ func NewBrokerClient(baseURL string, opts ...ClientOption) *BrokerClient {
 //
 // The request is CLONED before ver and the requester are filled in, so the message
 // the caller built stays untouched. Both are filled only when EMPTY: a value the
-// caller set is theirs. A Broker resolves the calling agent from requester.id and
-// refuses a request that names none, so leaving it to every caller to remember
+// caller set is theirs. A discovery must name its requester and a Broker refuses
+// one that names none, so leaving it to every caller to remember
 // would make the identity the client already holds useless exactly where it is
 // needed.
 //
diff --git a/sdk/go/connect/client.go b/sdk/go/connect/client.go
index b2b6bd08..522bda4b 100644
--- a/sdk/go/connect/client.go
+++ b/sdk/go/connect/client.go
@@ -453,9 +453,8 @@ func stampEnvelope(ver, idempotencyKey *string, opts []CallOption) error {
 //
 // Both fills are only-when-empty. The caller's own value always wins — the
 // message crossed a package boundary as an argument, not as a buffer to fill in —
-// and the requester is filled because both reference services resolve the calling
-// agent from it and refuse a request that names none, while the client already
-// holds that identity.
+// and the requester is filled because a query must name one, while the client
+// already holds that identity.
 func stampDiscovery(ver *string, requester **forav1.Requester, configured *forav1.Requester) {
 	if *ver == "" {
 		*ver = helpers.ProtocolVersion
diff --git a/sdk/go/connect/options.go b/sdk/go/connect/options.go
index 54930261..df6d5701 100644
--- a/sdk/go/connect/options.go
+++ b/sdk/go/connect/options.go
@@ -110,14 +110,16 @@ func WithInterceptors(is ...connectrpc.Interceptor) ClientOption {
 	return func(c *clientConfig) { c.extra = append(c.extra, is...) }
 }
 
-// WithRequester injects the agent's own identity, forwarded on a purchase for
-// authorization and audit and covered by the detached offer acceptance.
+// WithRequester injects the agent's own identity. A query and a purchase must
+// name a requester — the field is required, and a request without one is refused
+// — so the client stamps it on every query that names none and on every purchase,
+// where the detached offer acceptance also binds it.
 //
 // It is client-level rather than per-call on purpose: the requester IS the
 // identity the injected Signer already fixes for the transport signature, so a
 // per-call requester would let the two disagree about who is buying — the exact
 // ambiguity the acceptance exists to remove. A verifying Broker refuses a
-// requester id that does not normalise to the signer's own directory host.
+// requester whose domain does not name the signer's own directory host.
 //
 // The message is cloned here, so a later mutation by the caller cannot reach a
 // request already in flight.
diff --git a/sdk/go/helpers/transaction_offer_validate_test.go b/sdk/go/helpers/transaction_offer_validate_test.go
index dce067da..1006b600 100644
--- a/sdk/go/helpers/transaction_offer_validate_test.go
+++ b/sdk/go/helpers/transaction_offer_validate_test.go
@@ -52,11 +52,18 @@ func validOffer() *forav1.Offer {
 	}
 }
 
+// validRequester is a valid Requester; a purchase names one, since the message is
+// required.
+func validRequester() *forav1.Requester {
+	return &forav1.Requester{Id: "agent-1", Domain: "agent.example", Type: forav1.RequesterType_REQUESTER_TYPE_AGENT}
+}
+
 // TestTransactionRequest_items_valid pins the happy path: a request whose items
 // each carry a valid offer passes validation (a single offer is a 1-item list).
 func TestTransactionRequest_items_valid(t *testing.T) {
 	req := &forav1.TransactionRequest{
 		IdempotencyKey: "idem-items-1",
+		Requester:      validRequester(),
 		Items: []*forav1.TransactionItem{
 			{Offer: validOffer()},
 		},
@@ -100,6 +107,7 @@ func TestTransactionItem_missingOffer_rejected(t *testing.T) {
 func TestTransactionRequest_multiItem_valid(t *testing.T) {
 	req := &forav1.TransactionRequest{
 		IdempotencyKey: "idem-multi-1",
+		Requester:      validRequester(),
 		Items: []*forav1.TransactionItem{
 			{Offer: validOffer()},
 			{Offer: validOffer()},
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index 78e0543c..2bd26cd2 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -110,9 +110,11 @@ class ClientConfig:
     base_url: str
     #: The RFC 9421 request signer. Custody stays with the application.
     signer: SigningTransport | None = None
-    #: The agent's own identity, forwarded on discovery and required on a purchase: both
-    #: reference services resolve the calling agent from it and refuse a request that
-    #: names none.
+    #: The agent's own identity. A query and a purchase must name a requester, and a
+    #: request without one is refused, so the client stamps it on every query that names
+    #: none and on every purchase, where the detached acceptance also binds it. Under
+    #: strict validation (the default) a query left with no requester is refused before
+    #: it is sent.
     requester: dict[str, Any] | None = None
     #: The fail-closed offer Verifier. Defaults to STRICT with nothing resolvable, so an
     #: unconfigured client rejects every offer rather than surfacing it unchecked.
@@ -1034,8 +1036,8 @@ def _stamp_discovery(
 
     Both fills are only-when-empty. The caller's own value always wins — the message
     crossed a module boundary as an argument, not as a buffer to fill in — and the
-    requester is filled because both reference services resolve the calling agent from it
-    and refuse a request that names none, while the client already holds that identity.
+    requester is filled because a query must name one, while the client already holds
+    that identity.
     """
     sent = _clone(op, message)
     if not sent.get("ver"):
diff --git a/sdk/python/tests/test_identity_helpers.py b/sdk/python/tests/test_identity_helpers.py
index b7d05d11..f78b83e4 100644
--- a/sdk/python/tests/test_identity_helpers.py
+++ b/sdk/python/tests/test_identity_helpers.py
@@ -22,6 +22,7 @@
 from __future__ import annotations
 
 import json
+import urllib.parse
 from datetime import UTC, datetime
 from typing import TYPE_CHECKING
 
@@ -94,7 +95,11 @@ def _minted() -> tuple[Ed25519PrivateKey, str]:
 
 def _discover_as(face: Face, signer: SigningTransport, peer: SignedPeer) -> None:
     config = ClientConfig(base_url="https://exchange.test", signer=signer)
-    face.run(face.client(config, peer).discover({"exchange": "exchange.test"}))
+    # A query names its requester; on a direct request that is the host of the
+    # directory the request is signed as.
+    domain = urllib.parse.urlsplit(signer.signature_agent).netloc
+    requester = {"id": "agent", "domain": domain, "type": "REQUESTER_TYPE_AGENT"}
+    face.run(face.client(config, peer).discover({"exchange": "exchange.test", "requester": requester}))
 
 
 # ---------------------------------------------------------------------------
diff --git a/sdk/python/tests/test_typed_inputs.py b/sdk/python/tests/test_typed_inputs.py
index 84810be4..d13af631 100644
--- a/sdk/python/tests/test_typed_inputs.py
+++ b/sdk/python/tests/test_typed_inputs.py
@@ -65,13 +65,17 @@ class _Case:
 
 
 _DIGEST = "sha256:" + "ab" * 32
+# A query and a discovery name their requester: the message is required. Its keys are
+# in the order the model renders them, so the dict and the model send the same bytes.
+_REQUESTER = {"domain": "agent.test", "id": "agent", "type": "REQUESTER_TYPE_AGENT"}
 _CASES = [
     _Case("discover", "Client", ResourceQuery,
-          {"exchange": "exchange.test", "uris": ["https://site.test/a"]}),
+          {"exchange": "exchange.test", "requester": _REQUESTER, "uris": ["https://site.test/a"]}),
     _Case("discover", "Client", ResourceQuery,
-          {"exchange": "exchange.test", "uris": ["https://site.test/a"], "ver": "9.9"}),
+          {"exchange": "exchange.test", "requester": _REQUESTER, "uris": ["https://site.test/a"],
+           "ver": "9.9"}),
     _Case("resolve", "BrokerClient", DiscoveryRequest,
-          {"query": "jazz", "uris": ["https://site.test/a"]}),
+          {"query": "jazz", "requester": _REQUESTER, "uris": ["https://site.test/a"]}),
     _Case("report_usage", "Client", UsageReport,
           {"billing_id": "bill-1", "exchange": "exchange.test", "idempotency_key": "idem-1",
            "transaction_id": "t-1"}),
diff --git a/sdk/ts/client/options.ts b/sdk/ts/client/options.ts
index 38c6a5d4..e95ecf11 100644
--- a/sdk/ts/client/options.ts
+++ b/sdk/ts/client/options.ts
@@ -77,9 +77,11 @@ export interface ClientOptions {
 	 * bound to that same thumbprint. A second key would be refused at execute, and any URL
 	 * it did produce could never be fetched. */
 	agentPublicKey?: CryptoKey;
-	/** The agent's own identity, forwarded on discovery and required on a purchase: both
-	 * reference services resolve the calling agent from it and refuse a request naming
-	 * none. */
+	/** The agent's own identity. A query and a purchase must name a requester, and a
+	 * request without one is refused, so the client stamps it on every query that names
+	 * none and on every purchase, where the detached acceptance also binds it. Under
+	 * strict validation (the default) a query left with no requester is refused before it
+	 * is sent. */
 	requester?: Record<string, unknown>;
 	/** Offer-verification strictness. Defaults to "strict" — fail-closed. */
 	verification?: Mode;
diff --git a/sdk/ts/client/stamp.ts b/sdk/ts/client/stamp.ts
index d8aeb236..72263554 100644
--- a/sdk/ts/client/stamp.ts
+++ b/sdk/ts/client/stamp.ts
@@ -15,8 +15,8 @@ import type { CallOptions } from "./options.ts";
  *
  * Both fills are only-when-empty. The caller's own value always wins — the message
  * crossed a module boundary as an argument, not as a buffer to fill in — and the
- * requester is filled because both reference services resolve the calling agent from it
- * and refuse a request that names none, while the client already holds that identity.
+ * requester is filled because a query must name one, while the client already holds that
+ * identity.
  */
 export function stampDiscovery(
 	op: string,
diff --git a/sdk/ts/tests/raw-body.test.ts b/sdk/ts/tests/raw-body.test.ts
index 24f9c38a..4a2db65a 100644
--- a/sdk/ts/tests/raw-body.test.ts
+++ b/sdk/ts/tests/raw-body.test.ts
@@ -138,8 +138,9 @@ describe("typed request inputs", () => {
 	it("accept the generated request type as well as a plain record", async () => {
 		const { peer, options } = await fixture(ok({ ver: "1.0", exchange: "exchange.test" }));
 		const client = createClient("https://exchange.test", options);
-		const typed: ResourceQuery = { exchange: "exchange.test", uris: ["https://site.test/a"] };
-		const loose: Record<string, unknown> = { exchange: "exchange.test", uris: ["https://site.test/a"] };
+		const requester = { id: "agent", domain: "agent.test", type: "REQUESTER_TYPE_AGENT" } as const;
+		const typed: ResourceQuery = { exchange: "exchange.test", requester, uris: ["https://site.test/a"] };
+		const loose: Record<string, unknown> = { exchange: "exchange.test", requester, uris: ["https://site.test/a"] };
 		await client.discover(typed);
 		await client.discover(loose);
 		const [a, b] = peer.seen;
diff --git a/sdk/ts/tests/strict-decoding.test.ts b/sdk/ts/tests/strict-decoding.test.ts
index d7b79ebd..17a1e883 100644
--- a/sdk/ts/tests/strict-decoding.test.ts
+++ b/sdk/ts/tests/strict-decoding.test.ts
@@ -21,7 +21,13 @@ function client(answer: unknown, opts: ClientOptions = {}) {
 	});
 }
 
-const QUERY = { exchange: "exchange.test", uris: ["https://site.test/a"] };
+// A query names its requester: the message is required, and the client validates
+// what it sends before sending it.
+const QUERY = {
+	exchange: "exchange.test",
+	requester: { id: "agent", domain: "agent.test", type: "REQUESTER_TYPE_AGENT" },
+	uris: ["https://site.test/a"],
+};
 
 async function failure(p: Promise<unknown>): Promise<ForaCallError> {
 	try {
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index d683bab9..6ef9d7ba 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -15,7 +15,7 @@ These three layers are independent. A public agent with no delegation still auth
 
 ## Requester Identity
 
-Every FORA request carries a `Requester` message that identifies who is making the request.
+Every query and every purchase (`ResourceQuery`, `DiscoveryRequest` and `TransactionRequest`) carries a `Requester` message that identifies who is making the request. The message is required: a request that names no requester is refused as malformed. Registration, account status, usage reports and disputes carry no `Requester`.
 
 ### Fields
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 2905d1f6..75cac621 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -379,8 +379,9 @@ ingestion page and the threat model now describe the pipeline's token count as t
 publisher states, in the price's own unit, and a usage report never changes the charge.
 The JSONL worked example no longer pairs a per-access price with a token-count estimate.
 
-**An acceptance names its requester: `Requester.id` and `Requester.domain` are required
-(validation rules added; no wire change).** An agent's offer acceptance signs canonical
+**A query and a purchase name their requester, and an acceptance names it too:
+`requester`, `Requester.id` and `Requester.domain` are required (validation rules added;
+no wire change).** An agent's offer acceptance signs canonical
 bytes built from the offer, the request's `Requester` and the idempotency key. The proto
 let `Requester.id` be empty, and the SDKs signed an empty `requester_domain` as well, so
 those bytes could name no requester. On a purchase relayed through
@@ -394,6 +395,10 @@ comes from the Broker and never signs the purchase.
 - `Requester.domain` is REQUIRED, a non-empty bare host under the same pattern every other
   domain field uses. The pattern already refused an empty value; the comment now says so.
   The field is the host of the agent's key directory, and never a free label.
+- `requester` itself is REQUIRED on `ResourceQuery`, `TransactionRequest` and
+  `DiscoveryRequest`. A rule on a field of an absent message never runs, so a request
+  that named no requester at all passed the two rules above. `RegisterRequest`,
+  `GetAccountStatusRequest`, `UsageReport` and `DisputeRequest` carry no `requester`.
 - The `Requester.domain` comment said verification never uses the field, which
   contradicted the relayed purchase. It now states the rule per path. On a direct request
   (the agent's own signature arrives), a verifier resolves the agent's keys from the
@@ -410,9 +415,12 @@ comes from the Broker and never signs the purchase.
   signer refuses to sign bytes that name an empty requester, and a verifier refuses an
   acceptance whose canonical bytes name one, even when the signature over them verifies.
 - `buf breaking` against v1.0.0 passes: adding validation rules is not a wire break. A
-  peer that sent an empty `Requester.id` is now refused by a validating receiver.
-- The validation corpus gains `Requester/id/too_short` and `Requester/id/too_long`, and
-  its `Requester` baseline now carries an `id`.
+  peer that sent an empty `Requester.id`, or a query or purchase with no `requester`, is
+  now refused by a validating receiver.
+- The validation corpus gains `Requester/id/too_short`, `Requester/id/too_long`,
+  `ResourceQuery/requester/missing`, `TransactionRequest/requester/missing` and
+  `DiscoveryRequest/requester/missing`. Its `Requester` baseline now carries an `id`, and
+  is seeded so the baselines of the three requests carry it.
 
 SDKs, in all three languages: the acceptance canonicalizers and signers refuse an empty
 requester id or domain, for the offer acceptance and the request acceptance alike, and
@@ -428,7 +436,13 @@ and the signers, and the verifiers return `false`. The purchase verbs of every c
 `domain` locally, as a malformed call, before signing or sending anything. The shared
 acceptance vectors move their empty-requester cases into a new `refused` list, which
 records the bytes and raw signature a signer without the check would produce, so each
-language proves it refuses them even though that signature verifies.
+language proves it refuses them even though that signature verifies. The generated
+Pydantic models, Zod schemas and TypeScript input types now require `requester` on the
+three requests, a type-level change for code that builds one without it. The Python and
+TypeScript clients validate an outgoing request by default, so a discover left with no
+requester (none configured and none in the message) is refused locally as malformed;
+resolve and the purchase verbs already refused it with a named remedy. Go validates only
+when asked, so its discover is refused by the receiver.
 
 Docs: the authentication page's Requester table and a new "Requester domain and the key
 directory" section, the projected-execute section, the transaction-flow page, the

From 4894877d0add7b07dbe3f37ce91190e91b4340c0 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 14:45:53 +0200
Subject: [PATCH 145/164] Tell a relayed request from a direct one by the
 requester and the signer, in the protocol

An Exchange receives the same ResourceQuery and TransactionRequest from an
agent and from a Broker, and Requester.domain had one rule for a direct
request and another for a request a Broker authored, with nothing saying how
an Exchange tells which applies. The file header still said the Exchange does
not distinguish.

The file header gains "Direct and relayed requests", the one statement of the
rule. On those two requests an Exchange compares Requester.domain with the host
of the directory the verified signature's covered Signature-Agent member names,
by the request-recipient identity rule. Equal is direct. Different is relayed,
acted on only when the Exchange admits the signer as a Broker by its own policy,
and otherwise refused as unauthenticated with request_auth_failure
SIGNATURE_INVALID, as a direct mismatch is. No field marks a relay, and neither
the manifest role nor Requester.type admits a Broker. A Broker is never relayed
to, so a mismatch there is always refused. The Requester.domain comment, the
ExchangeService header and the Role values point at it; a Broker's manifest
declares ROLE_BROKER, which describes the document and admits nothing.

The authentication page gains the rule and lists a Broker under ROLE_BROKER;
the transaction-flow, production-architecture, proto-fora, Broker overview,
exchange-manifest, request-flows and threat-model pages state it or link to it.
The design history records why the decision rests on the signature and the
Exchange's own admission policy rather than a new wire field. Both changelogs
record it.
---
 docs/design-history.md                        |  47 ++++++++++++
 gen/descriptor.binpb                          | Bin 687530 -> 690639 bytes
 gen/go/fora/v1/fora.pb.go                     |  28 ++++---
 gen/go/fora/v1/forav1connect/fora.connect.go  |   5 +-
 .../fora.v1.DiscoveryRequest.schema.json      |   4 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   4 +-
 gen/jsonschema/fora.v1.Requester.schema.json  |   4 +-
 .../fora.v1.Requester.schema.strict.json      |   4 +-
 .../fora.v1.ResourceQuery.schema.json         |   4 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   4 +-
 .../fora.v1.TransactionRequest.schema.json    |   4 +-
 ...a.v1.TransactionRequest.schema.strict.json |   4 +-
 gen/python/wire/models.py                     |   2 +-
 gen/ts/wire/schemas.ts                        |   8 +-
 proto/CHANGELOG.md                            |  23 ++++++
 proto/fora/v1/fora.proto                      |  69 +++++++++++++++---
 .../architecture/production-architecture.mdx  |   4 +-
 .../docs/components/broker/overview.mdx       |   2 +-
 .../components/exchange/request-flows.mdx     |   2 +-
 .../content/docs/protocol/authentication.mdx  |  20 ++++-
 .../docs/protocol/exchange-manifest.mdx       |   3 +-
 .../docs/protocol/transaction-flow.mdx        |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  23 ++++++
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 .../content/docs/security/threat-model.mdx    |   2 +-
 25 files changed, 218 insertions(+), 56 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 51162a65..4ed1436f 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2485,3 +2485,50 @@ How discovery should travel through more than one Broker is an open protocol que
 and an agent's bound on that is what this field would carry; deprecating it now would
 close the option for a field that costs nothing while unused. What changed is that no
 page or comment claims an Exchange enforces it.
+
+## A relay is a requester mismatch the Exchange admits
+
+An Exchange receives the same `ResourceQuery` and `TransactionRequest` from an agent and
+from a Broker, and the protocol gave two different rules for them: on a direct request
+`Requester.domain` must name the signer's own directory, while on a request a Broker
+authored it names the agent the Broker acts for. Nothing said how an Exchange tells which
+rule applies, and the file header still said the Exchange does not distinguish.
+
+The answer uses what the Exchange already verifies. It compares `Requester.domain` with
+the host of the directory the verified signature's covered `Signature-Agent` member names,
+by the request-recipient identity rule. Equal is a direct request. Different is a relayed
+request, which the Exchange acts on only when it admits the signer as a Broker, and
+otherwise refuses exactly as it refuses a direct request with a mismatched requester:
+`unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`. Which Brokers it admits
+is its own policy, for example the Brokers registered with it.
+
+Several existing decisions fixed the shape of that rule:
+
+- **Identity is the signature, never a label.** The `caller_id` deprecation and
+  `Requester.id` ("never identity") already say so, and the comparison reads only what
+  the signature proves.
+- **A sender's own statement is not a trust anchor.** A manifest's `role` and
+  `Requester.type` are both the sender's claim, so neither admits a Broker. Broker
+  manifests carry `ROLE_BROKER`, which describes the document and authorizes nothing.
+- **Admission is each party's own policy; the refusal is normative.** A Broker's choice
+  of Exchanges is already private configuration, answered with a fixed refusal shape.
+  An Exchange's choice of Brokers is the same kind of decision, so the protocol fixes the
+  comparison and the refusal, and leaves the list of admitted Brokers to each Exchange.
+- **No new wire discriminator.** The protocol has already retired five: in-body
+  signatures, `intermediaries`, signature position, a `broker.` keyid prefix, and a
+  configured set of hop keys. A field saying "this request is relayed" would be one
+  more statement for the sender to make.
+
+Two alternatives were rejected. A self-declared `ROLE_BROKER`, or a new `RequesterType`
+value, would let any signer admit itself. Naming the Broker inside the signed
+`AgentRequestAcceptance` would change the signed bytes, cover purchases only and leave
+discovery undecided, and it would settle who owns a relayed purchase, which is a
+separate decision. The rule matches what the reference Exchange does: it treats a request
+as relayed only when the signer is a Broker it is configured to accept. Open Banking
+providers and RFC 8693 actors follow the same pattern: the resource server admits the
+actor by its own policy, and the subject's consent travels separately, here as the
+acceptances.
+
+A Broker is never relayed to: every request it receives is direct, so a mismatched
+requester at a Broker is always refused. Usage reports and disputes carry no
+`Requester`, so the comparison does not apply to them.
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 9267681d306105ebe015ee0411d6398a5d519004..68c7fe1a9a37cb2a27ce65530bf60a83ae236e25 100644
GIT binary patch
delta 49648
zcmafcd3+Q_`gf+&)7{gPWRA>C=1S5N4!M#bf+vZfu!_1Ki0iStV#KKIA}GOi-QC{?
z<UR#NN-$i4pdd;h(u#;6sED9|aw;OCC?Lv>2*~?=s;blI`+Gkx|B&bDdcO74Q%^nh
zRCQI){4*^-d8XCCA)X=1knAC9gLl;J%DX?<V{Z3)XCwx{8aDN?H<`7&wa47=H$6Gw
z>||EB-Iw<Kquy4Y+Rojqs)wrk4yduJ`aWP?)4$)}tNYhjy{h{3u?9R`ZPipgQf*q@
zZ@sqWDipA~{<GJ^Rec|-wgy!9=>rj~fAwRJSJw={UqTd&K2=XvKVUuBzuzMy!ND)8
zvHCrMziUjZq)YGq)x98q+E6yd3rm!m66^lzKK-7sY6esdsIIY_ANQ81z0z4h(=a_o
zIJ+q8X47XXhQIO8?5uFMmDQZM*`9EACaWd?Qwe96WVPUbW{0zzWHsY|s^RRWS%v10
zYdxl-WrekOv$IC4o_5c*wOD<fexrTzXYaud*{_5JSzBRRzt#0Os+y+N`Tt|LMr++(
z-TxoGdsTBYmRYwv$Sv!%8I~{`OTr|*s(b&Vx~7d4>Rw&b@A3Y<s&9L|y8n}8FJ^g+
zNNr#Ah->)j{%z=yY4z(1)P6PSnJ4;j{Qsq^M9(-~CVI$vK=enyzSY+KPnuS*evdp_
z)xUS&hd2-r2h?0?br-!{-M{Ps_Q7F2P)vNQpJ>S6tDlr0{h;T7hpPsd?2$UXfcgGm
zw2YKlJsyS!N!S{w*}I0-&C|;gS8_FL9<F+{+UoUib+5mh)`PwK*9>UGzMH3at$m>P
zgAZ2shi6*QXTXzXFt}xvT3sJ|ysFQYFhG}X-Me1f!*M`fjaAe8p}y7qQ3HpT4V5Mm
ztjGIQTMzc@Z&eYR<uu+gN$<XmO??n;?e|C(I8~26+NXDQO_`{_i=!6l(7o$To$v12
z#ZjUSdV%^z4uz`6(Ifq7ETBTNi&G9Nem!s!*MP0c){2`@0U=b{2jw5=UDK=IKhWy{
zbX4V?&kj~<x$GWQ%doonx=||{QPm5hmkf(8>D%W?>xqY}InlYxAG`Iq-Rg0DSL^m}
z*WKK;yVd!2tFv`Y_gil4+P%!W^WomT9&Q}*<c0LF(QT?8c%(OQVN3dthVP^O`t<Gv
zok-j2e^x#6Xf2FMLBfd|{i`49T{8fk27jb~PxKz}Fr?d9e|wxlL=7~fDxE4QemGI1
z-{TnY)_{Ia-wFOjHDy+3sTkL10IcIYvijG`;PYU=K8PAlr%NwKPeXOLL!JJ-Qs@SI
zHJX_>;=$h4eIEFI^&%2ILS6`Of8t@pG*}rSuRlD(s)Z%m$UZ<g17wx;D2D9ARWuG^
z7$^8u_3Bmq=zyxey&zQ8zuH3I_C|dVpa47!wn1TmBSxbbNbppy6ODK>gyTLkwpuk_
z?(Xc9+s#-{sRnf#HKKp@gOArx1!QD7#2qi^-BM*e(!1u7ssR{z6o`2g=R-%@=Z>2@
z-vQ6LxktBaJNM|?g+28Tql}pc^xU+liH2I$fXCg&)L8dFK7hURlHU9#4Aq<a4S1M>
zNOd2W;(_X3y&s_77*K`>vQ>{%_5b^CW)M=E_Z^RDR^MuPPj!E`@;WV2+rJ-NtuOqp
zyQ68@fF}_*q?0;+bftAa>g6Wp7Oko7`#^PnIs5QQg}M^9?19c9t!jFs)B0lq;{)gk
z8lw>8aYQuk(f$~SH5v4>@Ljimc&vFq=-RI@%iO5t*K&PoIH(vb6tyto_^c|L$DRCw
z5dgnIclE7?OVB{8?(?8y28@O)E#f~3j+|vp7fZ|&BrJ4lW7QP*v(Nxho1AmXXcp=7
z4_FG51gm;k&$NU?{6D(hs_OGZ)sv0RV~;P>-fWWnbhelf8SAc%ZF-eeQ(gW0S^PIM
zV~NRDJ!RyV@i_4?X7m3$Z-9+^_jg(aCqRT}j|H{c*vz1=Mzt(YSbaC!C@^<to2r(j
zWQEm_?6J3Ndpu<yWordyuIVMN0(N%1nL}n1*|w9p%gcp;vBR#rL))#C?#R~SvXlox
zJF*k49TGx2vM=psR&g0T+{IqHOY2p(D_aZ6G753C!-WnBkzLs>t}@4ITn6M1_7!()
z!R)dh+<LMh^h0*yA}N$jrLx;~Hb3%kAvLTXVNd);+i=wp#D7^xh0Kv`>k5a2%#rLa
zJ<YK~#v4{oWGlUrwbr%$`eLShgsmzyqioV&wMWWNxF}wroXEB+C5jg)C$hU$nG=Lr
zw6Ho*wcFmSO;pMUs#=~bra@|;8Ypr|NDWk5USZlQ*H;g#qg4CIecI(phf%5)lf`sM
zjZzEB91>Ea)GKZ?Usg>;MTRw5&6=%xlAkLU>(s*=wQG85xk_-dY809enySisc8bcz
zS8EToo1!Y*;>1PYO;N+V79s&VMNK5l7hnj`p0GAeRbEh8%LlcY593dh>Zb=V(KOZX
zz<2;NO%3y|r>B6Krl!(nKom9zrtk$d+YFgLdTtE&h0&nts@m4fH~kJv%>#3W$}WCL
z%WpnYRj>N(Ll|_Hs@`lKLsqFmwfSn+arU=|w4<T<su4A3lFlA-;e{$2q#Mt-2LU}7
zs*1tY1_?bEs=geDgq{o4K+yb3h~nvD*0Hzt_05Y_#V-p{+ZL-iQHO-gVl|#{NQ1~^
zCli@7DyNnuh?Bb7Y{S(-i(Y4a{-%}neBCjhM^T{G>yG(AdWe+001{QaPQ5_328k+O
zS5r4|;}I#0_qv+yW-e5CB@lSaKK(bX+*9$ETT3<!_Ll0mBo5MckeSOJl7!T&I+`ne
z90LPoqg~xcdsn@7ql=*eW25SCB86afkWJe-BrrCr<!#LcaCxYTX6;s$mdQFV8+5=Z
zwnsjujZiv)CHw{jcnRq@AOW{q4L6l=G=g@k7qu{-7tPYb+PA85z`kvOmh{x(Pp2O>
z$bGB&g!_3E4RYVAkr?+kknp!})q(@?w=nM&4JOMAYx`7nzv`7{<UGiIhZdrk5888<
z7WRIxYVUZ=V%{PQ$3v=8k_=g_!)hbS&Ofec<=_Zc_b56vIix1ivIRO252?i&^H<?f
z=(=Mnt6J$h-PNNQF!3?h76xo_%yj|-NXOJLj|))70Maov)5LsEfwwDR?Tnf=%WL<4
zLW_AqXH+9D{9Pe`|5f<=<sg9ht79jS!2H$mcaXsRmHd4RX-96S4fZM{ysXcY+NZVn
zQ`i>|AUD`6?F$legT0X`w=YQ8cd$1$!Yk}c3~t{cUUj%v*jMr(H`FWbD_OAbFfZA+
zf~$bxG1{x7ljRm$@h|O)Yd{EJQ4|HPH`?nDa?^r@PNTgcJ|{tU8YH8=$&@)pv<2kT
zUge_Xf7vIsz6`tP-`c~KU^rkj7M}L{#VCd_z@GNTN+dQ-8c%zhH8)R^<0%R{ig}m*
zM|;9k!CVX)3(V^mU5`S*VBUln8X$qeyv;A-j>AXzR4;40+DNjG{|7!Z)hm4lk03bJ
zD}4qe1gCl(pW)4(>E%At1q4)?>8hZie`k8-_`y>k&Gbs20STm;Uii!#6d|+2+FWne
zd#qEfW(Veajj(wK8kbED^AghrYIl~t<n%b0Kzhk5BO^#4z2t?b+{Q)lZ~+@NP`kZi
zful>d;(<99IQ;{X3OW4)5(o>Ze}-dTL#^oO20J-O^C=Y#E(Y~+gV!%Y9SQ-X!JFba
z1IYlR!CO{tJ|i$duCVVLtVNZI6)pyK?Fz4-XAKadu3h0R5+MpC33(BsUZJkdrmkIM
zFCMCuc`Dbq7}T|ETs^33*LYKWwj~*0tnpsl&KwQ9dNJF6=*{|!6%E%$1wZt9BV<=E
zpJCT|*;n0-TbqiBb)8q?qnVze`Rlxy60-*{3i$P`%?RyJ#p}IFikuK-C}CRfEh;wW
zz@tHf{DjRKq0KG&#H;Z6hM2_lrVGt(ybKiE#HvSXHx_O3Dj5kx8PO(h(`M#FybN0W
zDf@V&);sg5s}N;CpOQi=ve6_2f?eLM;hKHdC~dhXvdil&;Em$5>6aK*CD*Y*Oi!|3
zyBqDAig^@lK770&0rn*gpQ}+JCc&`!6?<-s*17mAufmf?Vxr7f-WDx+js+UzUiR}C
z?djsZUZpwL98BVRTedQfp|em3&D(F!9jiU=DcbK<xLXhxrS_9s+{+80eFxbUPiyxT
z9rP-^%TR{ecaXXa4h#~*<`A==)^2Zh$W@8*w?m}T)0n+b2tM$$SGguR(94cof_!iH
z)n+TZ?|AJdr4sy>Qb)?)e)hI0bx7#=v$w3XnP+N*LGJgnx4e_Njd~FiL|8q?ex9i9
zu+Djvi=_}{bLYJ6JD9`Z*eHZ)Vwh$hc}CNf%rLFd90rOF(_oHOG@jM4Hb%>OPGgD5
z+B?B98d4tE8{rBAdYs0-pR9E%8>cBc)j?b+GEOsc9TIwu(}E%M3NC|(6EyZGrd?S!
z!IhygJV7(WysGjsJV8U;ujVq)W|GEMFzvyzNt$q5F^hnm7IQdaC+eA`VGh5Q%Yb4U
z>;9Z}TP4$EG*%TFvP_d%1xQrOw5F}3sx)MoR$6AR*3fKkSbJH^dfVRfoOVri;AIUN
z?InQrQnMGZc6C~Z(gm8FxxfU}0?j94G)O=#(2$9?=OTFcDw|ZNU0V98(`YXbT(4?I
zKCc}lL|)Zm1!g-gf=1V~Q*~PV(t1~fT)ZA>h7_ST*K5(3*_MldYG8Lw)7q6bxFXcX
z1`R7M>K!i+OAQ*rqfiV!Y%_bBc4>v}SjnqUP_i|@uq;R**jh6Ylt7{yTZ4zcN)w=$
zTzoleHC<a&x!i@Id~3NT=L?hp#Bxn0njitOTtlKc9YFxKX&-1=U)%8++B8qI4}|Mv
ztC}9xKGu}YnrhC<Hg(X$eb@}<JbUL%ZKkK&Cz{%XC&1zvOtw)|@4A44dNyfld$e8P
z?bejNz?<)N@DPBAXRm%ids*r5m8Q0Ir73dk(bQ@rZic8GUF7{*Q)he3i4@c|a)tf&
ztQWP2r*yyL3*e%)`!$)xfP@zN$(y@!89e-feLYvZuJQ-RUK(H5{NUINBo)%aqSHVE
z;Roupw@eNJ#Rlv4L-Vwb-m<~E;^Td*@mXxJ4t1%kK|*S<j(W?v5U61~+w_XowrrTL
zi0nq=LtvO561h4^UaCn`von{0dyLds`9kfQijle;MH=^yk-A@Gj3A-xNWHj)td{&^
zq~5v>A1xZW#~7Wxx=?FhImU%Rat5|^F%$yC7`<7!gdqPIqqn=ne3@KKqX0QUXV$CQ
z{H_yR42`q>d>W%dz?h)RcmNU@6LiFbg|y7TcnE8=b>$^pP1gBXXpWv{MbG#Qw&GG#
zv#)qf`yaIyk3}Ae!oZrXH})W9*R#ozw64Tc<e{_m*h{*|Ly5uj&^fv~PZxQp<U#I5
zUFM;Zg*<ewPI>4TMO-h0;2(6QAi2Tr(4gHNC<EbWL7Djvx=)ODxEIiV&@tLK3#<5O
zhhh0@?X$8Yu8a>dM|7W97ifwPGDmdeczk68e+#Rp>=kRYLQlmh*ODeW>69)<D+&SQ
zlpf~OI+|+&<CNaCxj9eN>kq4ES^RzN<;t@zgdY%RT?juQ&gx;ut^9yEt2b$8zGd)6
z=Y-YqhJF5ht)p5w-e`2J9Q5dTqtUT)05aYv7Fn65<N##6QP$Rchq5wF$;D#du%G-$
z>!egpb3t+eGR<gotz3XiGa6kh7a-G&cJ0lhqA_{sS%aP0pdG82?PBBsW40kzu$qzw
zjM+x!66v0Kz?f}Zdb#;4_J^QIAgnI6FZx6qnB8fqixB|EQoP8LLIGebHS!&A4FF@Q
zQDm7Tb2&yZtZgxr?e=$@wGmn^{uB!cO$h>Ki{TeLB_IK_#VBz4Hwc(52KrZcW)Pma
z#VFZsh#e0Uhi8T%vei(_`2tk35J9#Pix!)j5(=xI8+@_Z^`8T(`_{0lRvUr#;G=Fl
z5R)260DW%A^#e%M{W;bBt1x94;d0)^J2g+`9#{P^{9=#M=vt)99z!l1kkJ5QkAa25
zWW3%}F+|TAS>M?GKG&XALuU=FH760YPH}dSk43-Io~;<<lcoU|*n@l$8zis?`NDj!
zjbwm5$XC+Dyq-hg;SeAD?klZZ<q#Kw_LGLV5EOTZ_`+hfrt`Qv#D_hXAwmsUZG?~Y
z-J=by7~x`2h#TQz&>TI&7Zx3@^C&#RhwS<~t_GAE?PG1f)~>G{?LuS&VzdiEbM|PT
zoGx`9lt=q8UCyT64xN?~&-?79Uu$!eisxMrWGvt}nuEgf^FC>62%+ZZeMr0?<rpYC
z!^haS+G7<nTnL)BXSfg)mS_0Hz9{OYusp+OWy}#e$AEX#+g<l*qq1x3eM*Eoy3XTp
zy)P=J1CS7^_hCAqNeLw4UA?bVOwvRS_XUYlb|*GNOkMyS>@0%U;|_DQXfcx6RX(L@
z@*~x{w%x6r@vgBi{B(fT3ooMZe{cKd1KMLs1<HtFqboXEvdV1<1@u*}Z%{yAMZWPC
zwx3Zcl={d%`-Aqjr{W_Q!$1Q+^2xP33IXFIUrdBWkihuJht<wU0t4ZAi+%D(ZG)#`
zi;Lld9$Q>JC_Ha*JB7mY79ae7fp9Q{=be*}XbUTLx(F1Uce)4^oOk-de0c-SDLC)+
zwP?jhvaTRD?}B?__1^&m^xx%^!xtnZclqS-1qsPrK4<vq3S#nJA7B1=0|6h~>*|mL
z9rn69P+;Ecwt@olUTVeAJd9$5pdn_~V$+j6nagI>8Bu%uG3|gB8e$qLa~b7L294)Y
zrak%>?J7_EQFz_Yoday(jxy!63lg}aOia7T|40f?Cz?ura$+_+pW}<$;j`LMPdQkQ
zJPqH8rY}#zQQ9=o428{UWL<+6d6P}{{yA-W`D9bBBfy2wWHZh8@u?7mCY!BVi~Svg
z$f+iK=2vZO*;KbC8lh87xov?$ycD)Ao~4mt&<K6mzWKbyvddmJWe0!@p_k2s2v8s)
z^s)&jTq~Lf8`s<U+4?$9dA(Z`jlp_TCIJQ?gY_nofawKTKVy6DpqcfPo#WM~`NId{
zDzy9S<(qRqm`YO?TCO)^Uj=oo8Av{9&_fvF2dbEQ12k$lgu*2Y6!ukEzr?N#>DiuQ
zu*41l3P9ix39Nyp5CHk3eP39A-(&q~D!e_!B{r3M1Mdb9E3{wCthekxMD)v);4db&
zD^{QzynG+%3>zEMS2j6g%8d#zA$-O}czQ+@LSla2RA&0wqXqheTKp+=!Tt^ko;MLs
zG2;OYeT;(EOn){d?ws-2Fc@~AU%iATJkHrX3=0Q!kYBYfWTDwl`LTewpcJqN`_*O_
zvVb+D_IEsV@6g||(0Rjt2Zqr%+^?2g2!=Q|!mnO@Aq$~r<nI(iBpKybFLF!O4nwA?
zj`pi9T;8y3jP)^owfTiCjN!4rQw&+sxZjmR&hzwd@P}n1g&F@l^%0gQ_|>KaU+Y*A
ziNZv`nz^t_%=*v#4nH3&@!x?(!s@fXvqco+>~}4SVf}p}{1)DCQ~b49!a2PJ9y)HS
zU%lc&7CP>EzesVot|*0$tMlVk&IN+#w`mueAEnT5(|;$3ew*P(jV}sM#28cO_?4I0
zz@$E>7JrFhgk3^ZI>%pZNl!$i(B}9vFE@IklFdEwMZywFDA~dj=la#63t4E;Jil6e
zAq&_qky~`&Lk7^V_?0*ODx00s+tuQ4M+w@Kdc{=&twzbr8;we23ndo%)iMd6EtPoH
zbpg(T60f<w!&$&y^t)29YW*XAwe^KyFzaHsC%Gidy5zztMNhu&S1)Z86dk$LuU1^h
zLY1~(z1qB%w;RaI*s8SNwRo9dgi-V^ZLux$V{hd)gc)p3t?*~9Va*ElTf-~--XITv
zd~fO<zf#NtU{kRv1)A^odO-r>9e-hwX`veIH-*)eY-6EbQnb>q@Z^t}D6^8vAV&rX
zY849>>6xNcev#`CleknS!^^-p@3LEp^d?2``W2qBqYU-XyHuu>mqC+Ov++fGdGTr&
zhnlpS%5*`Ku<`VPKkF0rWs!bu-~+!mpErr`JFR7Hi}kXiwSI-~I(xx{<XS(rKyLy%
zHj%>WhwMMa`prcjx@D*(A5s}?jiC&vb?p0My?fC*zl^^krmv$iwY&^k@)5hs(gziN
z<l<0EKB6*}ybM~ho}IGvPDShea!VGwLnyPJ%3R9Jzz;UCJ2Lv^MH`$B#P$!$Y@jmN
z@G=;0AF~A+y-V@OeuZy&KuOx|{Fus+MX*D(*`KwY<(0r9oBiGxw+P>U`IOyP0*id=
zSNK}f3nnB#^<x5W3Uut9gw@a3D<yjKqR;$t5&;usKBF=;ys%S(EQ}p4(Jw37;#c^#
z7cq%TWv=37V3Dn?YZJYqXsci0$pXrdMYd9zj=T&kvW?AbqE}km9E)Ik1ZB2SnY)l2
z`NG=g{;UZ(?AIpxpPGH{Hv-62vQ;0JKD+(OUcYJ{@L+GsC-=ID$DVAe?{EK=Uv0&=
zro<y)?x7G!Z+`^``h88DpDAPZQHFKYp4?3TMX5OImsv5m=#Qg*xkLa7;~e$N<qk+-
z9Q9+l^Bp1|F!1yg+t5Pa-|>_SK`W+HE(E1qr~F}&{6ho~r~CzRzUcCi34dWnTk1D-
z{KZ9}_0lgc0#);iUoLha0)$`uSnT|X>j3H;`)4ctuFmINglr(3^ZUtmUg${^!a09X
zyc!2dGJd?Oc!!cPACfU`T#hn6#}2jD-_E`te~U!|o&aZDPNO*}KO2`57Hexf1<tq}
z5#I?0iS4+Y%=jF!wk8I4ec-%L=ctdE`vT})Gpse_WSy|vmh0c@%^Gs}-fp&v)4AH(
z9A$luYQE@0@0zlAiDzGVnLbBt|6vZ&73xg!40c<WqjtT316@AKQ9GG0)0Trt-MhmM
zchp;F*Y3!Xrz*fj19s#{Q-XxhjvV<uA0$$Z9XY9c1S&|r^xBb=zMBFtff5H*@5s60
zM!p)8ELx52$obQq=4i^^O>~&HJ4g8@M@|0XvFznn>#C;~3}IC~hE;bvRs{*AcIU|T
zFi0r1J4fVigaxba&au9cRwafwX7E*xJfk65{EWt)9Q8_mHlvXVw6Am2tD5|li(c8A
zgA*I{7SV(kYTxB3Kd}2d>$le8FGo>w#P3{1$q~PEx*t-2{?6%skWloyoXii6iaO^Z
zzIPSnEUxH&S5e6X+5sq<k%~$#6g^0a@^vUqIEU5acK2)aw>@o-=O`NYZ+`AsJ)WZr
zcLzzOa>DtPjVr1@tPRY~nwM)|-9>-b6B(F`H!pk1@%?ZTZDOu6J=c!@LEn>Ii@(J}
z2~W_}iMc+32oi`BbAd>^NFdSFiMf&Kxjd)lj87@2ekNCK!(D}nY~s1uq+F3L^Fm+&
z_t{*LQ#&j;)Z|>`JGJCwQW9V+SLBus3$gRLT*SBwN}+qE<cgf#DFu5?C9n%hA*X&m
zS1oL0VNe3T?m}JpI7RN4tKMTiN3qRMef>f%({9wK-1<VUe0K#dXUlh2AOZA3F5X>H
zoB@de^g?c!r!brx?xP6uLT-KseyYGv@osJ|`{_o#@`1Uzig*PEE>P#@=7|^y5~y=?
z5hDdEZ9dG+O?2VI5>LgjoSU1xmXATnp)oi&w^L_xICXkXSX-2v^`SlCCViNv>7rcz
zMkrg&L7-Wjt1Qh`G1coJ#Tyf1v8!&@Z)v|ISG|naBOXEBhFtY_n9h)e@q**^T=g}N
zc@eCXLt*Akw&G^J<^6BsR2NqmOf=`s+>qEL1BvFmnJW(_fkboO%uR~eMI?_hZ|0`D
z@a9MkHRsLT&exb_ydEGfXWeem+xA+XtB4n3IlMEL=SIXv8c5W$JQsn3%mxzmEYG!W
z6wTpb11py0xtSYeJrqdzM$+=!>#jHF(;7R6I%tjk#Vz_Po{npBWgq|-ZnY*?Zq<T>
zI%{(C#pX3gRJ<k^??jLq0Rq%ow&pf{P~}<|fo7z&xpF2!86d39mFLnxl1wf#*18Zn
zFE_0Hl$*8H9^74j-e~hvuAC)u(RoL6m6Pba8I%L$%H9*a<Y<r8nH^b(qd-0XtUq<*
zv0SwsZ@MUkb{)@E|Hyk%aL|({a@7$Ym@6AtVQo~NGA>UwpE4b6gmKQB*XA#}w_<c2
zmQOSTadAqJ#^fQ`l4}SK0LSL3Lp|mvG=g%;H=fB;ijyln)^)6?sh(g@Rq2Z=z!UKm
zC1BQP@}yZo!YI$=<%=^HAYqhe@{se=o5)<U`Q$v-?|!{QugQ6eh)m#eww&5QLS}Lv
zrgriHknn-Yc}3lX-i{AU&MUs2`v4V?J}^12>mST#=<Qi9`M?5O@1;k*Jr}sjk`FA%
zll$x_go+pB6^KJNAW`vxJRGtS71Nkqkk{f49(3>&)zG=Z1$ixdn7`5_nM(qT?SDV4
z5A@u-*sX<LKrhadXNyn>wJgq)XNy3RP#)g%iCVHz%i_GWIDm(zvX;eph26}*@=6di
zm$JM6ruXc*)UAVF-!9FQ+m^X}*J){<+_nUXI+o^P+fvkltOjKB9<n8r(@;y6=3R8V
zIf-(OT$&}<*ad&rW7!pJ+*;@j-Ws=aX`5<|+qtw=yoNgWOG-y`$+(;CzxCC>QtsXC
zV$i9g&3SUvpb#)N=gCn65*VBFFlvORv~#>Uukc2xDeWAGq3Pzlq8s=DBSdjZ<6nAA
zzw_!XZXL7{yv419HiEb0$s7+NsAEeWa=bb8${%O-zRSxR7_ck*>m}KN@A8nI{}=k_
zk+UCQ{T|l`mL15GvnZIrI*=zf0YL)mKpr*$`4p2!9`q9{{D(fZ^e0z_9Qvm`pNMfN
z1DT)l@X{X(2vmdi9A)49L$B<3)M){jXu(m(XFvksXkJLX5CRE=qj^a3=x{<FQODW6
zPv{*w9(NHaIvsZr$m@<fUI!79A+PJi5#Up&*e6fu*HoNx5on$}<swj~d@3&_GVVO?
zQ>SQHZYST*BZbe~H~&+=$5VOU#h{l9=bfHFAz+-(lgTPbXmOs}F_m5g1;W~Mfvf}e
zz9;o5YV+p;a-9@F9Gf0cUI?gkQb$(<GDdQq{o;T1$2_$&0@x;_Kqel-q%#B9c5peU
zXjVYI7jBh}GGT3YK$!=?kb{S~C|Qj%)N6ABNJU%@a9<2yd&%VhcWyw<sWn@|2mx}L
z`E1rey>+ko0Yz*{g9)Jdfq+N_Ktg7IK&Ap9;o|cHG8G__&z<uFG8K><nmgwQkO~YU
zYX`_5UbD*wVbAvd*8<Wx!6kOUCvp&wsOhzUOl3f#rq=@D|KWp)NU@Z8Es)>+LKYY5
z@gG_OqarkUF`M+1UQxE#t%s^#9FTkVC<Bqj0qoh=3FR<rykVbzN-y%%z7dc!LqH*i
zd?O$SK1g7^5s*s+kid8&fSEoIQ68iLjDUqRaFq2CEtGvDkhu?WzL7;$1@0f^F^5z7
z8=y`2bpfSC@@LKJT7!2)bwl+3W_JWj%ugr)E!G8OFa`-N)&)W$<b#A3>jDV*v=9xD
zPj6s<8lm6SX@iSEF1^7;AeY_{2#Hr;5COu50A77fp%>Nx1VL?k0EbO}9HGaRTKwrK
zLUC}rYYvKo+XHfBKnyV30~i^Uor6SnzCDoI8xYw!F?e>qBOtSL;)v{gXFzN!aw(CW
z?+lbway!<_V(8SJfll{G+j2?N_jy2O)Up(8`FWs(Z>Bn6(E0N~r$1jPh$#QX@2W&h
z{vuGqxA+`ExZW3mPPM<0#FqE2fXwS<mDutA@^@Nb$NS4b$@Ldji5>6V0kO&M;A6*o
zccAHSs>F`>?m#E8&Xw?2V9Wcf3-QIeVb6tD6n^$~K>f4h&S=hld-)i+bLD=w|8T@Z
z-5-#rNdx@!$o@deaU_~!_LCz`#9GvgfO9O6^|Kuxr-zi_v4A&Zu0}%T<uAF9vn$5y
z?-d;n$ek)M(Lcv&EZoP-z%x#;^aTC>;u8V63yIg%D070!d?A29o@CP|=wB9{49Hzm
zyoV+(6~g&vR0f?+u_+Vvt23uuAllA4MP-hWrtq`D!K~py`}9QpF(o)Sh*vmt@{zy3
z8xmyydRFgg4GGF4qToV$ND%J+5~;yo*9{G_)6eQJHy;|58++iQ)KDrlP?Q2WEU1*0
z^hbI-YpmXe9iOb<awS-N6aj`5A4UQ>&<XozBZFC!f*#XvW_#&v>c}8ANPD9~zUMV6
z$o_}ve=8mplsly0LVi>bZ>{O%D&N!^6J*+R`VH2YptKISC^ROBTw^e4#W${=4zfp|
z(}!432jwOyxG42>5HG3ric&D*GeH)aqJLvO6O>(s{U?-qCI~Ceq1T}}*zra%Yq1@l
zsyET|-w5K6<9ieif|ww*RY7I7ee*26i&Bd}#p)an(5zKKpSTDD64k5<<^}lp2Z?@J
z6%4Kpit$ej_$l_7gK9@UG9(9Dyc=v%dLauy?*_}SGEaxO0+{H&4=RU(YV!NAjU!Px
zO0R0%+oGGS)y~x|_x2fGRBgPzC$7qga{QWF|HdnT|H~Ed-&`JJ9>a*}&IRx*=jsa;
z-4Zw2*pZj?_O)fW5ZZWy)VZ5WmojmY?>Cp_#5F}+*~A4z=U(st>w$i_huF6tZlm&>
zlKgt4fXDsz#(Qy=yc^vpCogCAtL{`IC2{Yr%4xA<4sriiUW=xC*u8KO6!#+OPP@E5
zd@Bx!=mqwymuYhj_H}xdCgksfa?d5mC*<#ga?b@MdiDEY<Pdt5?v4<HdR5yWRDTGH
zGi8#8PCS4^L44+uESxDj7^E|0G*1V~OAiN?uE|o1-MCP{?0yhpJ%vY5;&3o1@(+*z
zI~<hx2S|kG!$FyU5Xtk8!$FyUNDk#6hl9vJ{=jPk#Buh`LjC&6<3Ty21^EPjJSZo4
zkf`=}P|j!|NhXLH?TrwJ!0b{Nvj6s~{-$wXU8oU+=I6RlBM8mUbs@Pt2=e*4E+m%+
zAfbC*NG=bE6w8CU5S9nuivb6?mqPYnTkow@yyR9xE18!<a=jGfdFe}`m{|RTgsv}z
zu==N?QbE2-42c64ARxIQB;W6Ygn|n~@_+?MNG=FD2P}fLJgE=y0~XhUK%47b9cYzO
z?>3cIDfJ<Fb_a!lR3E|ti<=MvvB~^;C~FmKcuT)A@OntT^2b&!R&6YAIbMb=4awJo
zV8R!chOoZrg0O~7QzTaGp5^)<irxsx7gS)P%o`!}hA0DS8C!ue&6b5^OvCOcaYKk{
zH*g&2vpl2}COcYP*|=#~`d{<5-lhmFzNv+ZC<ZR4&Vi4BL}OR5F>mYF7p(}%mvCUB
z%!&}!hyoK9SjmpQt>2Vc8Ip4fT8lC(Ls(hN&4)k;;~|taGi>)<q0jLJ_J^?VbtAeZ
zM2$bl!fW+EmL3er5eFukdobh^s}zvX`XFK5%|-C=M>b}y{^znET@f0jKZbl_Z!5$H
z>5n1oZB0PHM>WvqD2slmKhyE3(|2G(^P^7Rfds@+$4x<^)}v&J?i>Ns3HHs0dXKUb
z(z<}9;c+6A=C=`uq(UJazo#h@G^}@;J-AMPs^YX;D-Dj*A(_0Q3?NR2<T+lDfH+NF
zJC@S$kXVs5`$!L9Mdo7g6`6~{S7f1(*j<4PFwTcCaq_dHA#(kpVY~l&J?*I&8kVCJ
zY|fWw>On%0q2Z=&`KlcxK!%1d>A*u%h{nK(F#BkO-mz>%SZ=$53z-pNx$O!PG9$uR
zs|?_}V_=U7vko8YkC%@LH+C+a#u^iD>?t~pH71OndQ;d83FU+^+wrl!ta5^@E1kxg
z5S9@oq)`4aAuLa+f&|8dFpS0zy24D@T?(^JpXe`DOm;EoJl13vgU(}34$G(n8DLBf
zrwVzv2+?`0DPeINYvV>;E1wdU(E^VkI3+Bj1xN@^2|LjuM8~magn6`Jzi!gC${DT(
zbQ)`hs{x(Hnh}=40)haV5k|1!$8hj^;FWOJGW(j%IEE8>CF~9G3pUt?#}(ADQgq=3
zn`Ynw3v6-g2P7PRVHiV(4q|)xuK6PN>u36c;zeQkq8v;VT12M*ToeM?z}9ZjcNI5;
z#bz!fY3MYBvC)BL93eqTo2}WZk1euYB#Ig~AyJO%C%=D__1mUjZM_+m$u5{E^JW-R
z)(N^mgpKg`!daW`kGJW^J?ZztxIeUyD!?{#SbaaNG%wlau^#VRQ$2urj(hXjksbPn
z#o&u8ODF}j_rur?n=7Qy{14fVo%&0~ABJTR#a1&4eHca%-6#ry+`wjju5T{h5SD2s
zc8Q4_#%TFS6hZ?xu?b)38>~%X8S=0Zj6$2j2zkfobzvAwfpFF@_J4QjNA=*bFfM7#
zhOinY<xjGK-|8>ka?<g5FrnPZusjI{5;dF*<0KeukAcK6IT<eK#PdBOkv^cdli~Q)
z{OV1Z;?ik0V4r?f`DquF0^aGcJTHzi06k4jU7dh}`C)Bge%2fIm;3a0bAk)=jUp3Y
z)=|}bQm~#aI;O9?y*^(Y03#-_>hmqJNeU8J_4#=5O$vg9g7x`ry7L_qBKeKw`ux({
z@MfGaA>EL#bWYyDIyGolGW~>}x&;i8KjATdE}IV$=neU@`5=MbkT080q-cIazHELz
z^^eUSJE33I-gZH$QafKZA7ub)=cD-}=q*bmti6+;^=`f=d0Jt6t~CnmQz!Jldurdw
zH%hP?QPl|9VI_3tO$3F32~ubb65uQIrN$ruzS7YcBs5;>XiTKgcqM5pz#+aWU+E;l
z>9s0I!@P;?8R7O=l`l75KmvVLJ~m$DQ=qTPk6q2(0Z%3Rs{DdV^GCYX6~#O0{H&d<
z^k@B0{@Q$_nK_WMq$rxCZOm6bwM$Ry=RLLfQ|waU0RsKTe81Q^1_|{x<~JAJ3ljBj
z%*W+8+NA)Ae0F1g+fVbw+j3$cA%n=Kd~r;Rmyuhz`8X2SgIA6MTl1A<@(=PeAZ)=I
z{f1JogiWKo)m!sr*awMPx8@^akPAhrkGHduv-&-?+g%ar<L&t}4L}))Y|lqbBO^zN
z+L13tF;OrwNT)WMn0MsMTU~g{3u7+d<c9@g7{2*gPenY*cm3i^QJot<0>j4tq#Jhj
zIem#Yc#Osk9cxr$Vqm|o7|)iTbZP+;wVZVP1SD!XNq%xC7s12RY(%zkciCxIgb!QC
z3^6fm$qf9YYmDr0js;X>M)^5chU{?8u>;DWnsa0azFi$7a!`crQjIC?2Sua>z=hDD
zh_nDmUJ4diPXnYNtc{9fy#))*RruG7>=j;Pu_rVtVkE^i@d9e`ga~~WVb-M+99VDx
zJ0T*s&OripLIhjq2gwHups7|DQKm=K<WAgTUuRrpKVulJlv*%F*PsXx>Kw&D0--Jf
z#mN0Y!u{$Zh0`NqkxUF)PN~x(a*-@KFx0e&TqH{tfTl&TNTxMDkWgZF1X1ZTkJX)Z
z>8-_Bcfaw$E#QguIZ8m2*%A4n29N-l9YJ5vKm>__I6ERg)IcN;d$S|>P{T}mCs{z{
z7uXNy7%zBwE{Mp{1}?2FB63d&Bq~`DNr_bnND_)5RS}iYo1z7gW@7IaPvux!5NUp!
z`8H*M1vHt~+r9IQt34I<ZY}h#s6OHsXWCH+wbVySu9UEpMb<|uDtR(fKuKgnL?kok
z1BO=K5Ru6Y9zn1nB9j@A5NwDz$xH#Ij>{rq=>r0)EOS+$&Cg{KnUmoukd{ScHUkn!
z%Oc2T?uNg`ao8`C^$~kCWZV^85y5=P)7v;X*=l=x$Ow3DSsjsSCAffE9g%4zNI<QQ
z$SrV?u-WQJ_;NlU5y?AdbtL~X^9M3noceX0eQCbY*K_SUM_+K!m~~FafTU6pd378l
zDp?mn7+grpo<vyN5y?7-0W#goR!;Oq?XwYMq7vE>!CCm3<X{QX{R=)oo^KBV#`wZ<
za*zQ3!WkwY0saLI6HHGeil=++zHwuer*y9?L>ldl$T<y#AhehIf+B2!{COX1mNfoU
zvCnA}m}t|!h`jFv5(xVu8L=J#350!-maWZ~MYSM*wBJY?3p^D+x)|iJKSt!CtOR%1
zA0t8WwihG`MGA|}k43BD1IO6Rw6U?`m<vJPc+6FUyzy8>Ub{;0HO;ZerI&MWOprI8
z6yDeY1SC&7?g$c+CmnYLiONqlx?_S`dsevPbs(V1Syu;g$Fq(*;wg~MI_?M(NN33%
z|BT*EhP8pwtoNgy<R4j8)F@!L7aLax2S#yIm@ecdscWB#vKNYti_4yh%E$#SAfJlL
zi5ny!pNeAQrVG+ZGX2mf^H|1}?T5ND)TcwEK5-!wg&;FDidS~D)e0eW>d2@PPfqc$
z@#~Eg8)X?I%fJ!A63-z%GAiFXf`s_UD3Wm;e}pusF;UhzV_aG}CMp9ExG=<+s2rCd
z0Wl^j*GeF{5CYI<p#h9IA<ACQ7@w9+h{}^oNghuoM0F7<K|*Lk6g!#p4UQ!B;G`&9
zT4GdIPIBv|Md>8BUh2w8(Xfb6kO9P`C=&L=qF!|6lqhT0#5htp#l@gC>6EDS#U$^<
zDbb)vOhE!;O0-oQ^N7H}qI7zcRW&t^R!(;@Xj6ZB)bE&_)~M5?;#*YEoz|$+qqxJ*
z!)ubF{G6ygp_x(X`O6#^gsu?HiOMLBQUI9~P4Vma0HH<eoM`(?dAJ41K`y(2uJqGW
z@%Zv?(wnfPofl=TFETE!nCI5uLk;ty^15S^FKOpR<#k7ps9|0dH)%)H&`r{k_Emez
zMaEc9$5&kpTGGDinw*xjuSVt9aUcVXSECoTG%x26Skl(B`&$}Umexn*nV=+J%+^Qc
z_5(<W)JNeR!ojeXZD1d^G%l-Xa4V(Do()lX*)yroDz+h7Ebdr>1VTd;gZ(ACF`A^y
zp6}Tet&CP`<$Ep$-SvFWH80)ud@q_3Usr()Fy4zcyU2XSz-Uc{wQbR?AMF>*jMi%Y
zHjGzu3iW>q!&KWDRd%zz?TqJY@s}7i-~(=FR9+_n3Amk6TqmLw10+(6ozeW=QL$r7
z3`#My&!g&>QL$qyd64@eDtBxp3p=*EqO@bXo)VrEjnDm2<)-A@_Ai$h-IQ7ojutfZ
z_ebT6T$BXb{-~VAK*DGCN5kS66p=j5*&odpr$!_P@nL_oop?PUSsbRan^`ApfD(tI
zxB@!XLtoBg?_O$5ssKae{wY2|9E!@*F(9GSp=g2FDFO+wLs6`KFNU4dVeLpX>m+;T
zGNWzaNYu#TXI0X$viBI<e3{X+_L$Q+FadNdDmTSJ0_a#2o8pw#fJEbtMI*I*5kn*z
zhaNu`jf(RslEsDo^j|X$Q>IC^<52~l*s;3Zev8$<-Nl!QM&JqD9FJNF%Yx=bWgrF#
zoa0U)P9vszPq3Yr8&}nyaO?mkAWk?V1tbtoMCFTXkU%&Q#V#qmxCV(A*C(RRi)*5V
z{wJdH#kFM7QLQMwxc-E;G;lm@U@U7x%#&Q1ZFQ;c+uNRWg|WsH8W_W?LWbV*^0QZi
zVyyR7#&g!7nB1fV7o9jLhU$-sQc&)x7|V1tjuk%@ljq}cCJLpVieYTF=1`yp$Jiwm
zMw{ZnF?skMCz?1Lx92mw5ZW~)#{OGjlvqPza$f`ol2B+!469{2hyblH2MmqbD=YAl
zui4O;!ry-q8^wmk@cwfGVi0JUaBK{pJ9#Smg3p~azuLIjQwhHK+zCoSYHUn??gS)M
z7#owHJ0TK{8ymytPOjmY@QQIUwz!jVZSlC6+}*(mB4CV*VX`RUg%IbTj<HB*qlxu&
zOm5uZ2oMTA9fR|JhoeeR4?Z_FX5ZP__+BZV>SED1QKk~swY(I9@$)fuZx^FW@$)hH
zf-qO{q0sX&ydZp%7echHi?LN*jDIz&i^(ezI5UVsbuomc4H)~V5CL^=OzD_hp*Gs1
zwLP<|;ZrKX7vH);DM-yFDGUt~f<5NO@Qp(H{0ot=$J|)UE6te#6e0ID`@8Fm5~b)h
zw<~f0@>;BU3x0zG2UM|f$1b|T=v1^QCO?=1Cdw>|;YKOl^2k-NXsTyJsZ70#Lpw|L
zghRJZa_Iv6Vz&1N<L08pF?lxvOq5w1!z@dic{n|a8$s-r8;z@rmbf@{+I$J&U~?R0
zaJ{U7y>g?`qqxDv3872_;UJ@?Lb!0Y!Y;nacugr@5tE;+0T-oK#E_#(qv8(QTKmw=
z#w|+mTGxpAD7BW1NLeVba4l^;`}1waMr(acX(de?L80}r(sFYceRT;DeNznkBsX?9
zh6Xmp@DBVAi1HI*o7wK}#+^l*o&E<CqMNDz>8=ky0rn~Dal27o^l409lLQlGK8@j;
zWQvyo^%<LWyHQy5Sxml?!J#hV#_&p}DKCS*-on1P-DqC4B_{V0acm1^w#2ZPh=X6K
z3xjVfvw9dEincnw4JOKLCEvy|Ta>}b+s0~o7;THTxi~b?wh@k~3nOVeTh#+~ZI8))
z;5<H%w#TqnfKQ142Lovb^WI@xoY~>FoyO4)YWo%(az)y#osVUWF0k*s!}!z)o{t$Z
zx)Y-DFFOq?U{~I2bSocJpz%;oTu2Wph_s+SAQDX;RB*}l=1Rm2(D3dN1@_{5ja8nq
z5d|9G<svquMij*O<#Hk+HKO3Mo9V7SNIV=>z-HZNT;Fz7fyUo?5|^{1ytj#j%&3A6
zH=0W@FcC1c2?beC$L&Owaj_>jp#UE{T9pShex-Jieb4>IwR-uY0*#-mA}-Jt73A@6
zp%4kQMFkj!FJlD&8hVe5+v|H9t>QO~i_346f(@y0aruo>kdPV|zw{P5;-D5ng?QF`
zael->Ed;`ZxRDmC#X?$AOp1%IOoBj%PKwJ+0VK*!ipxzEkU*Uj$7&HVTrDJ3CdXM|
zuu;-(vMWP#;N-a6qeLOdOpaskX+E9(EQGDJ*>PoV-0n5lXpvouzr|#VCvcS6arsd?
zkieN8Pl){qkieN8$0S3!5=i7qv*XR?#>H+RF~n}*oVeT#lq}fg#W;2YUqTdv98ea;
z@o|(Xs@0|It=(;NxKXUM14~TdD1d4gx$4uZWD%)9msaqF7!=ylxbjxqp81x66KG(-
zV&FL9w8C5(ml*(_LVRf)OEIA}-S}A=kG%!0>76{D^Xy8q<La`w$nYc&a&N?Ch9_Cb
z@ZOA5hDYy>3u)-B@WjQ7V^A>Oin!c80SPr$#O3Y@NWiU#JG&=^Wa%|=zI)OI1P1yV
zw;O1=x+X4HX?O~xHF3Fn0uo4T;#jWoLzP81I2O-ZZVw$}Oi`O{kHfd=3}g|GB<+eT
zd*Z73IvuJkl7}jZXJ0$PXz#h~OX?;%=_sC|mv+Z-8Oi0Kp0DD#!nBL*UPKx7_i^Qr
z{pv*HFP>WbDGZJW(C_=W%=bV-?)$hr1OXBT|2`f$Bn?gso>K3Rt3ODCOCID7I0lz2
zIt0ND{)^B75$IT4IUQH+k&}!kJhdPkEy(GQ#brue#GU?F94R$*J4k48EFM1HsD((X
zwc~O1=SD4@4fPXoEy&YTl7q5P>|`8KjgBfx7P{|LT+3-iSqOMA-WfJ}veES3Gfp>x
ziEcdObR$S8cqT4SDT4&+nK%+HN{c}vML84C+$1aEX(caFa-&(u>i~6*<uarA-g9mp
zw4gud)<Hw(TwH!*s)#S>&&B20bC9UxTs(c9tb?DqB-D7}AIv1L1Acg(jbcW+=Xtjd
z8eiw*@~w0cU;m$vhs1$)kU%&eM}jKaK}R;u$E_~14jNsg<N0{zTJthq2dF^_=6%k%
z{Jud68G4HN$6N;`8Y`jEGbka?ZQ>~^8I(Y}DJsD+HjphGV|isIgAy%o<ge;rPjt}G
z1e^ApvA*X}w-y>%Llbgjp%7{rnvf$4Bx)I&z-%XKp~LAz6HRWGO>sW*IyBMrk7f~X
z3g*n=3AT2MQQUL5TM3=}817a=n+(Gf@`Ecye3M~#0@Jss1mB&)(-NmC{Hs$?V|b#;
zjdURvEkS{i3HFDnMrq|pw-VZf7@3fp5GaI7MkZ1YD(y0iOdzpcjGPD<$ZW?ZSp8IE
zNzbt^2E92S>ncib&c`Og;)o+;fH5|KJWeR;gC1iOxC<dhflm&Mv58i<^K$@2v=1>p
z!B#(SbgUfjR$@ZY@d>$?fkLQce4^PE5|#EL#wR*fn(xq^f+EVB>k@WFov~8sS?7Y#
zS5N8^a$f<Z08*EbACUqHkh(;fIGz9!n${&Q?kP3(LsQBm>k{qmHNU4Ru!vs7&$s_F
z!}wcv&-rdGw0ki>As56bgj(h&<Y$>cqL%pyL~vn`9Mm#DQF5!SB}djWKhfkC^D_~x
zkc!va&1M^a^3>M5wb1@XeZnu+*+mNNZ`3D>#P$(L)KZ_2+eaW#OMT+9`$bp=$xm<9
zCoZqT^kt$YoI|I#>J#_&<nvMyrS}bq3qJkSyC17qZREDc6V#1I;+h&r)ZLJfa}-F_
z-9Rn;T<DJ_z+3iJFB*UK-1U~Le*j+dmg_b24Xn4^F+|_MdMkn1iPD~8?CmGAzDbC*
zrx+zyB(RanH_3}B?ODYR&oy2sTa}Pu9845im5})kNWiU1Am7<X$wM*4&~^68dB(#^
z*}8;$DF8096Nb3V1`<N+68RDHOWGhSrs%xM{?mNpD^J-bSBS7Sxk40=H<8e6Q4`3W
z_5-gN&6J9rPUDOD2I@|y@gRY*GZ7XW;vh*VfwY_QgJMeGcO}HTm9JjKyOmvz<?#rD
zyBy1dgy1f+{I4`#i)rTAn-B*@@)jA|-FsaPXe)KEs{sYdy^i@I2%x==`K_?FFOfAm
zDa>!7<h}%6TXOSTWd8jLk#&Lq>VBseK%(q^rx!p1bwBk2Wt|oo?qGtl&h%v<AbHT0
zq^>xakhv$GLh@h&$=exnDT{K?BMIe{{dB$YFHbH06sad30Op9(ERcXXl8_S_NWdIP
zU?QX093*D*BZ>5>L^j`6B?bx{O{h^m8i^KT{#XKeCw&xNvT%<D`#}kL;h2qBV&t?q
zk-*m~ep3d6<YYqaArejtb!+Dm%2W1?w~S&>Eoi6;hDba>Le+B#nQwxGCg&0|-vkL&
z&n03{B}KkT44(e{notKNMZPI{kUO7{`KDwc{TY~~e3QQaiZ&qi^$t%eqmr!W>&BK^
z{OOpF-m(l&%Fu;^&}n$GKqMC+fjvAaGk1{CX?U{PDCk7NoERc=ACZ)qyJW#wBa^V;
zhjh3g6V}Ejvt}ke$z>kA$*<|hmMk?^<d09{uH!9GFGCsP#H7NKY=~|Au@-*{6X5~W
znV6IrB1ot+F)1@dkWgo0GQy;Zh`~+tOj4aJO(c1co0OC$k}R0$S#BaaxSE06Xj78P
zjHH@mx4vOqQwzdTf;@9dQYMHf39u<inIM9M5>t}l8I4NF1aWFoo!+Q~lOR5ylnElq
zi3G7ODHBA=LVrw4YB=vlaj+z;y^zd$Ne;vkDDpzmC>8^;ga+b^Nih&Xz`0&@lm>~i
zFD7L;1PP^IOkyC?b)*s+B=eHYx6EjD!#upc;4>4roXu}nd8rU&=8?5YlO|zpelqJV
zsYw%*oS$?eaud>Iq0|HfG+F3q0up5xI+}n4>O#_lLP8VL<h7&-2_PW(nkz~Ayq1(9
z0Z$?MTGCn1HKCC3dQw?N!>gI67JrHk!vn~@o|FR%B;;OC%7FzE9rk)MwoG;yF}T+(
zO{#Co4wF2{*^bvp7QE&S?lokSreW>vWY%hKlY(ruDXM)t>BPyVWR#V{D3^dh(^fhv
zf<)Psj!{6Os+D9E`Z{Y<(*Ir7Vuf*W`MY>Q#d`-#;wE)*c?={(-c8~K1nm>6&BEHp
z$*g_$h!w`ip1{XRyiuk%h|NfejjVd5aaGwy2MSC;ZA{8<2!I6CM(XG(6l<GN^;_+a
zR~ji#$E{AJ02iLQH7SpFf}~PO`MG3}z}T9^=aOkeH=~(z2W$4Oaa+e7E&_$>9Z8u)
zqYMysB;_0k5(qnzm;<lo2%x@Ti{CXmcl^Rdpa}Yfi$D?di==!V*o;TeFOo=JX%=lp
zv*>PCzS_u??@r3h1x$$SPRh&$B&yk+bmq@yq~W(ovAPBUgm2x-X#)M$t(+#%Z<BHj
zfWkofHi`UY1zlNe9@fq#vtG5AuQA@n*DER1@!7LEb;x<)6_<km<ax&{Kmzi-;}swQ
zd7ivtC-qBn*h?FhQbwfgzpgXx^3>vQ;qiC^!C@(RFb5<Aho$8C7m)DyVX49qDRKUV
z807Kl@RU6NB01=^;VF6kMX~@iJcaWw7jp$rU~~$<lhDNK(Z7ndUvIQ31MMh5{W&@%
zUrRUV{W&^?skbMW1=6?_8?)ZHuiZFThI(*ZO1_J3&U<iN3h$!n{%UjT!3ilPoNUJK
z+hW96`wd323=9#k@EF1qQu0U#NK`Q)g}{uj4M7;Dos?q#*<f7OZc<9T79lQVCZ*Ei
z+!{#8OiJO+?JJb=HOJ~tt4k@fQmlBE?_xXlvGJs*77V9}wC<}*$;g7zkgiL~$N~~}
zu1m#c!OpZrL<}BTrlr)GDKTYB9^|H{<a{Jqh%7TwG-cBb_~x{$Iwz%MlFcoax6x=@
z0YXgKc!YsCCnc{afP_wSQZaEe8YHmiq_90egP=Jr0_UZ~P7?@7&P&O$01}e(QgSSS
zgyg)GGZvcD+HYY>oYMh;zF6q$Kr6t7DLIt!6i5qGax8!Z(!vzR!XL3`j@!HSsjSzT
zw%NETP@lpDtrF}T<N7MSC#c$NG%Z@3l6&1?!o?P+u-A>*0c8NYgw5V;G$~q=l6&1?
zqRf(%+@t0fQ5)Ddn~mnh4YFwvqyW@FBj6qk#*1+4DuqiDEk8Bx4!n^v67-%(y@)he
z#wL7fbm_RvX&IPk*)pePAfdvtl>Ck?NVIHO3j6gGs4pV@-e#fCjEg(I?IKX1d^_bA
zXTDH|3Z;@Fr2+|rw^K-|x^M*Oxsv_&Gvf~xD_sQg-IXbMV&NhlC|9O}Vy6To5LS{7
zH=u1T!rGct);{LhVss0xp~0}8Qoa_{xV7w_Eyl+k*E+yp0(h;{IFL|nZAwO9kN{pw
zhJBnP;Ng1qz*ggliuEo6P0{OJ1Zv#+luWl<@W!pDF~6N6RtxHd&+Pa%;~r1xXU@0<
z7eb#=H_(C@B&z)^h4%@axeTanY{quu+K$`YYANt<b1c$=r_S3_L9wI;Nirz}{y%aA
zxav+;w8OZi<4zZWHludB2oyVZx(F0Ib`k=vpFky)-NjzsVcgVdmy1CAw7XJ%G0;#3
z2)j~+Eo3VwlI%*gZe#8c_D3Z7I;DKeI_xyI*WxcRdRr*8lk~M~K#C||JN|{IK>3>b
zmewmE5mCNQHT@P5g%WOJh^%pMO5X34EU5NP3O7@4giEx<#h6sq;gly?Vck(v^-y(Z
zHs*8V>cIXKZpb9izLw-12ieZgja2PHC%AzLRSu?P$_Nsw986*M!K*2V;Nc;P{kc}>
z8l0fF2J{}#r&=@$4`FgVZ6wjgLrxp<l*>vd0SVwk<Rpj#I*{QcKe2y*VKlw^Cl`Xc
z;3pS?s{bh^_dp>6h@U9PeMJk5R@kCVWsOd=FTXIp3>`~3$LU&8J5Q&0hTH)JAWu8Z
z1qsO0PIEy5@-#Jf63qmysKP;Md)k-Av!1d+X*mOc&G|AX1qrD^Y2>67ZCg=OhNRhj
zUl~^UkhF}m;6i3dTE<zBkQtJ8;%qA-N2Nv10RomBm6nzS37to!Wt;^Gq)}-ZXF+mN
z#M$9G%+MOMPdaOx{lgw(Sazr`jW1^NoTD|FVMdypffemDv`c0<?ZG1;&PdBn2MNR(
zX;@(d4dB+K`HN{Bcs<QJ_ttJ;v-TNp-2#R<!-dEExjgL(64EcG<!M)tn0#JL%hRqz
z@<Wv`rg7T!Z5kx4$zJo>g71uXdd_#+3?|w<-)S>Q)G<FTuM2`i9rM$eAt-o&q}{Z%
z{9Q64#rl1I8ox`1qwQ1)1QxLmzc&tdT;x_l2NV~j<snCuK_!dQ@@L6Fl1v&uONMuc
zKtP`?VJG$*-71#22()rul9t<XC<BBg=^}n&fkc3?B#jdbo5`J8Q=3-U|2|-R=BZfW
zVo*xC!fh&rloe@t)(SGfSdqrL3;a9|VW7ef>@hzWD?Jq-xEK^rK5#K8pnQ;)gAFpk
z_#lnJCXIo-Vgnobqj9)mg9||!#fG#z_}iLi6dTedVp|j>AU32gY0rJUH5q(kT5L{j
z{0W;=8y!c-Bh<aoadeOn+}P;ottp|{Djc2tdf3n^x4IfoKC#tp1mzQ39Y2R4fVQUL
z=iT7uZE(^momE%Jt~p{{m%lTO)8&K7S=+$PwcTmu8@uiZ4xQBEPZ5vs0O-3NbdW&b
zot6i6KmvVt8ZRO!=7L1b-JQ0+NoSi8?35A%K1H8{`6{jMO?&y4Pa_wyd(z0{BG@Zx
zWFnXQI*_Jh?n<s0>idqhIc9Y1_?@d1r3v4q<s{#R52f$Y^5aGz0sLJWlj5H_0?r>D
zU~`Tcf2}>>B9K!ZaGON~<v?1dDsA{cIgrLwLg$Y_;{4HpbknEBhck%AOac`Sq?<j!
zuMbNW&L15}KRC`qM_V8UH4defcF7Lbt@w>u{66cz<Hi*o!E$U%1L;s&W;-YkB@U&N
zrF?jT<nnDV=AV;kLj&nBJ8|5&rqf{;foA5zt|4e39Zt)+9U?$DoW{&d_pP81K8SiE
zt^C5CIAMJ9H~i)3K||?;YYZAnC(`oE=#T=+i8S(j(Z}>TgA?gizcltSy$Rxdd@`+`
zZtP>ph3qM|=%f(|{meV{DWM4({wv#Z(il?ltE&c$#$R1EXf*!nIC2|48h=gWMG>8O
zZ9_@^ph7nJlu=nRsIajmG#UpLHaZ67_k#+9V%r}w&}L8}UIX>w5EzX^3t8xA<AKVd
zE(9g|Lks0vy$v6iLkpXVR|OyeF|-gr{PZ5hl{PdkCluOCem36sR8DX~=rHL77lhxB
zER=USAq0>Kg}BQ(h_=1k&`X@>3vK%se52vo=UoswP5OMHd_9L!Xw374@>@Y50rGrd
zy2zZG#7Y5QN7!1J^+lm4xh<QWJ!^c{#H3$Arr!d_&k6VH-}`>tuBXooJkYP#<MhkE
zWmdNVY|w1{U@-k&b>k2I;-_)@;nKe;eo5RCzsueGUl6Y9`=t1tVt(Pj_W=B;_k~{<
z5I=!kWyv4#z5hx2iCzoXfRaCkEq=N8{_0*;_`PNNgg{l_-Vat^ir;jup`X(2e#=c=
zdx~G&wp#o@emU24z8_G-zkc9pX@7jqxY{4yTIluBt2-~g*?@euP$}RaEUpC!tAXaf
z9zstsZEh<>($Rz$#>4G}N~k1CjX}ECcL06?S?E<WfDaGI&`ga|IW#Vb1jP12%=67T
z1gIT_N~9!yp*<u@?SuHeWCw;~3`+7Z2mppA@EwKNIl7s{pf`6y&5}+qjIiManp`Em
zB*A~#ng9H;{4r<hP-$><4}Q$Nzep<qPr+no(?ap>M50mM&O)s4h1Q5BpBE}o(wcR;
zMT?d?T2ctX6aHEUVs!B7^Fq9#IY;01Dh+Et7G@18vQwt--`Rm53y~Gmc0(yy{V;nm
z*Vm!+aG^~2zy#LeLYW|eL>mv2;b@s&O6EAm^gQ3CrN>+mvh^`nghKf-5}^+=l#<C#
zvcKi|DoRhfA_R2O6``<ul0<Oq4kDmVv(NH;ok~x;B4nJ?t_Vfi(<DNnrIaG=S=Kq=
zySntOD?)ZTTj&!Z6J;QBwlFu3f4iZSW|Q-5VZe8N*?Cul;^_H8xj}<65IJ9n4VwFT
zEr<|<i&&GOuUGkCyi4Xmzm&fnA6z7JWRQ><Tm*NWVZ!`nVT~1Ky>GuB^c8u7tO&{a
z8XTfi%gFri*?XhD_gl4nuUIC};6j1-iWA~;6G(u)SB#u!4ZcdFmWQ=X#aY8L_Kr@z
zYm{c2ius~4TP?>amMz7~j$)NQU#x=`AHO6X>vXMeU;C}aczHudR>UK8%C=&)^93B#
zvz<7z{7|l(lsjVI)5SO2TY98ewiH|_ccfT42S^AVDMlaQ#2;kv@HlIAgRlJl<Hd3t
z7fj+7%Ucj2A#%JJw;(8;1&Mfmyf`SnBt|5EZF{^pbR~anD>?Mq_IUASm-B-W<>XO6
zv$t;WT~Ye8s~Xk*bFqANf-<P*=VFZ1&RjK6XYd>5zH6^NQ!FQ*a=zF&Q!E!7Ac1hE
zI4qXwAW5be842BvhN|$eftJ!H$vkY-O};c+eWPz!1vtXH@Ep!D(31HvNT3b0io{6_
zkU$$~;Xd#H4hG*FVzFU2`5vzr;zH1hdx#4`zBt4xYA0<)zBt6{a4G*>UO8pQ!!36C
zAAJ=S!(9lPkB3{0ZKC;jxFr`8kO9PSOMLADO~QOU%3_QE=<8ZB%7vg~8KYbXnvX|W
za?=DdfEZ=rE)(6TDyQstti{^j?7O3KtP4TEvOCs=pgei3CHJi%1BkH}epBlsI%H5z
z^YK*6{@`ZcP1%)GT@cEVr@A0CA5V4lp!s+z=`oTf^>UhzXIb`b-F>4xm9tzBnvZ9>
zAT%G(ay6m(cou20m`+uc)2WJAEIZM|w?wIU#RZ|?_j<(zp;HyFSYdJe1wsIM#lpGT
zk-|}MW}=???(~iBSnop6XAA0G2s$!RZ-qtLSk8}3)LU)a@mnV4bTqkvZM@TWW#<ML
zfsR8oSn^5^$^fCkii<@HNGQ=@Aw8iCyqr!p*p_l-vJK0-)0bq`clioCg5mfoCBn8P
zlUS4nmTe{5OGl&Q4YqaJ73N<!7M*TjEAH~$+wm<Ifgf&g+rtkxSYfd_RIc#D4OZ(?
z{@ssqI{v(Z-F3IGN5>T|LJ$^N;Uds)d#$kKS`Z@8VTFZzH#F~*)8Xh<?EAZYmv&s`
zBH;5c>M9q3exYlXC6_r60m3Q^KQcx?DOpY@r`NE1?(wznxW+}GALv@+B7}jk#*!zH
zAOeInmQ`Xt#u4aLHCuO&ucqT#7a<=AYh8qVAgpy;kq?Bm)QW13z)xI1`Dfol9oM@E
z5%k4+OKxwMD-j^9x5TMls2u^qdaL|m^LCDa-wpYMrT^l)qvIzoLKHfD;_46u!Y6Jk
zqCohBT0vWV<qCdgWHVd%7vD`4n_Yw$5H`CAF(7QV<YEFMK-g^IQ2cn|;00KnvP=K!
zn^>{cg(v{TRu`fG5L+#|I4f5Q0I}67!PiB^K#OA;X?ySWy{uI1aWUe+*kj4$xm<|@
zV~-UQH!(p1V~>SX?tI6$T)|Ji?_&q=^L^ZDp9_J50qQ<W9)Lm_K<u;R#VU}1*k|El
z)pD$KVGLYiJYy;6?9)}gtGreC(-|O1XmZAFO%gC?EV&N_F~FR$us)~N6-cbE&R9*)
zSz_0c7-Fq?*22f}X{W4QNg@1a#4f^X5Bao924>`pk4FF>n33CMAOSuwgYB|i!rEyp
zUNZRkua74e8J9EbVc!c^gLV{6L(!p`#(19w*3e9&qG@0a%|Ov5bRoBGSeuy1nvt<R
zy?ymcXkrGhzWI;4wWaC)*$i9#ci+&;XB}{GVa#VU(ltQ>{Mk%QY(;?t__G;opHHF{
zQCpgTr)TV8eSA@+a=HsbJLuCL4N;00lUFH00%UpyuLn+3eseKC*pkU=uy^$J{Zk3N
zl0kZdPyeYGlYXzU`yTV%U;0``zS{y5P_JduVpkj_pkB*h<xIKS#iY&>_S0j&2P&61
z%76)FmN?3Qq(T`v<%0ymk_@K&(X`Fl4zE!%Su5Fu{=QL>H!|3Fxd*`QNS9?9C6c^}
zjsHbUvTilLiZU=nHi*Z-T$YiE2uNTq%ODZqKmXp2)Ov?C)cCfQz2nM|9`9u2haFG`
zGVf%tuh<i6ToTq+XR^LvZw~O?8(U3kP&m2-YH06gl#eoMvg(<c6*&0#xbOB_aD*Os
z4$Su*JwO8UebR$`79@Q3{Y>PejCglP4F2x!gN(W^Bi`Lf9^}?$<hwh`!hX+(8QSil
z(0U0q>EnzNOE$Gw{2#uuQV@<3)Ub~;@&zJF0_@`qULexTpi3x`+r(=A;rm0cO_1la
z510_yl#w5w1__Z(8F``=BodBInHIP6%#}!<FmB4U?9LNL$)SXCQ|6Xi`QW>RAhw9X
z*8v2adW$pqK%%-W&gcWl%Q~CYmr&OCd4_LR{}lwM<k$lVXZqZ6CXhh-+!=cyf%G|z
zJsh3z;^SRkX0pD?h)*}tO!Z~Po8YToe47jVactE;ePu<vGm5x41}2QNo7#O1mYN|l
z${v>cq_0cSo{YS41t!Yu$z)3CatX?S+ROSq>AS(&n~^u(z$7jWuo-lr2VdR!K9hBn
z?Re5RJ@S3V%Rlk#4U-D{fm`w@yL!A{$}0cmi?faY@?Ba4E>DQ543PHI=)gB&K|-U0
ztm(gfcNHDX$fY`%D047_wGYN1%78k=rvBUaK+z#-abglTgLjo(c^R1LCzk$?@4BL&
zGV+~gn6G?)qS%7ZGD8G*Kf(t6$9GNUh>JtZ+#`g8AG=r7_Ber%$(mDQfAb%oR|%b^
z*uh^1w5P_M&xp4oAkb;&9R~%8W}MH+6%9yeb3TI=%?FfKwx>o8FR|Cv`qp|XhnL8n
z2OB;#yhH{@kh~afUDBckBtV9j;OBeZq3gTtsl8K6?2Utboz#k{E(m4tQ%mH60i^&k
zwWLV=RwPJ(OfA90PxD86qNbII_u3#JIjuxaARr+*twc^BAbDBGh1-+yW|wdm?goNW
zjSV3eo?RlR4?G3Z>=HSBfCSR)61ebSvT%p6wy-4Y(-Keecs9GOm65dnPgPeQUqyBA
zbBCL2=GZ526Sjc&hC6dJcV-MJN*2f-KtZ8Yt9E&<Yt?5F@wwFZDQ$zOWhqOL<p2^u
z6wnd~DsT}LlCngQMM068u#`~BRzM__CBXas&N;)_|L*s9f9E&n{I+xEY;$p}-V*4z
zESA<&sydHUy&@*JXaPX@ikQj;fDpbSrc@0G;VWWLwK(pQN6lZGTsJ{?wBog%l0ZdM
z*T&Sk1t4+7)a49-kg+y~&0{!n7|bI@ujf4{>7z>4`w~da>tkvIICvmoeXP5DzXpVa
z^)b9(w^ApTM{sNMZ<F+wwUVvA3{v>kn3|#l6J%_Sb&wegkP5}{Rz;@DBYkgIrUF38
z?VhOsQF6OyDnOLn9`j6<M^h5JrKtu0K+tZ#4m9Dr+cOpZg{0k{sQ@8qH<=2f1}&J6
z!!EIuQ@q<7dUN`|7~K^@gNc0DC)5<v4)L^U`ot>yl6e|*NNb9zJPinGO)<660}!1>
zQ>^o$nCvWwAUccYSnyy>b{2|;a{FVdvrr^-76)R~S<nbJpVZ$H(|(*eFpH;8*M~g}
zAjdNJ3oUH%S_mju)p#BdvRh*6`~)C6f|gj;FtJcfP%ebE#CraSeJL9YcR0oyrt5oi
zj`=O63LJ~63qtaR{g1`4vPw4;=9BqP@=Y`J`%6#y^&;z^^n4IJkZ>}lZsq`_GO_#u
zHk)SK3c{hQF&r~`aHih1UB|02oct46sDMIav>`&H2mnnTZ7B5vLgZ*eg$5u*jy4b)
zO&V%dfGUT^8rpaxn7NHVvMp^$@+}-`3RHn6?FSAB7;C5vQGgII)=(Rw0Aate#;xNG
zxgm-OWWV4zLv4ss6ew(*p*BP*5(JGiuptWPrBM+uOf;}4eyi9J<;>O1Ucg=@NVO9U
zwIK@3C_B->Qrt75EKs$<e?M0r(W}}oL&~f+)O=fkP-eA(`8N6lO96$_G=q1k(GykE
z40Vqys3<edP~is%$<qwALJA1Sm}YdpQ;ZM@iV?yzqsKroLQoVMAxtwW`-?a30t&pD
z22KJvS%Y4}RC3PqPdxhTM<2T}5&ztae0`06Ybki7v!aA3qB18S>NL|(ua1DI(@X=a
z7Gud33q-0nc(-}_xRN=(44SN&W89EIlQnaUu$(eN8OWGpV9JPQ*9vH|X0E{x%+q_7
z&h<smWX)V(1Wne=HNx_h31uK+u7Uixkh-%18a%yYB=4TDza8lPj&B5-pLxen6PVya
zsdo%?;$o9n0p@2ywTAY7GV+$bG*E?~p22BKrq)nd1AHh~Yh-j5Lrg$;U9HjOeRv&h
z4<mxe8q18}3PWZMMMJsehRPa>gsf3#P}ZQFT0pZqE6F|`vv}Udv`&3MK~RDuPiO$5
zDk}}u2LeLmO2bR61vIg<cFEMY^}x^8`nscOowdI1Xj*5jp*lYlfrzz+8o%K(!1YGT
zHbaiz=q-P}p)Q|Ir^w!5@b(|yWbqD*^iX62LWG6_srU;Kv%x@m!A-4zDA&OIEYgQY
z8Vq$%A4Kpp7;-lccz`zY`HS>nk&T8L#eqmv1EaW~3puFTX8wc4`hQ0@8)`I|F2+oo
z4U7h{D+qEBJB|GH#gNlzsPpY0LQbQBbwS)s0v;$}D?hhbFUZ<zsF5d#;Mr<m<hcR~
zEfx0wHW~QJ?%*YQZo7;oYBik!&!AQ}qY>Y~L(>EmO$1rC9}u#dsr_`GK7-nSfVcfc
zFOM8B)E+nx!E=D(7c+|B0XoEgu~dIBa>#2Nh(x8f-79#|{=<CdQvD~9!=8>ZMEehu
zj`|B8wEqY%tJMcaju`5`gACFBBNUf3uFRnJALR>c^~%UmLybK_#IueX7<;0_0uTJ`
z7}u8R4@8a`YAg&Qc#atu3u96RJc!K`{H103kjM$2ht7nbARfdoco2K1_`zj*Zse45
zTOxwz6eVh`$N*v{^fbS1xt`baw67n!SK&12XElxBadly<kuuukW0vbHGg=MoFC=?(
zB70mwi2R2=K!wUd7OSbm1X&lT{d6CEC$h&yzP3)kCvwrN6NuosNOk&y-~qbAjTL%T
z<ceok+#^U-vTKFlfjzGB`W1Tr$W>2|orFEEk{+=|8qb0~uJfMn>-W0X4Rs#?h>&yL
zh#Bl(G;Aphhh8;PmY9Le!mI&Lzwq2kFY-UW9O}YXzOQfV_^OFvjOa@XsjU-CIm`rr
z6(^V~DFLEU6HL{Y0-|mcO!TERF<MA1o@DZeKGcg!CYdUkg9;IoOqGZM1((`=1qcz7
zOf;4faUnIm+T?pbL?W*CMUbCVn`#LfOb}6RnuX$(01zUoO>D3cR}mEwoMk2}SLzc3
zxwA~wvw@6KvrN^q0SY!)elztVg`~n7lV4q>Zz-<vpG-r{8dFW?f(bHe%uG4J1%!+m
z69ZgIq=n@13wXzRy?Y=0M!^N9N}+%#xWH5?6c7a$m|hAkr1mZ5kJRgz2jMqrve>Ty
z^<#^D^-({z*i?xW%n-ELL?RtSHxczkCN)!<VdH!FTMc?TfA&o3P07Ek(OcSeTyJ`B
z5`D?U4bsGS0N?=)o{0hRfCkURfOtRynV5Dj^(D=3;?I1d56;=-7a@~wGS#dMcu-`M
ziP?}cQ3NJ!<cB}eD+V-rt?DcGWi@)O0)&J{Qw>J}A)(R4aC9||(fR_0c9`03Gnl!E
z*MFFn<dF^f@2WtOoh2Aheut?#OF)$0VX7fEAUew(X6N0e>@0~OI?J7A@C#FRmWqaQ
zyG+$tDiS)&&rPqh>`QL)l_@*RF0gbj0NG9AFI3_y&&Gfd_SFp=_a*OWS^^sfN}7B<
z&`77r*8{mplV@ENfruuuF7`eL`(Z1QiR+JQ8uTF@51MI)4A_2T&BMx?01$ZCQw$&k
z9`>vW2!V&mn!kl!`;pd<@=yP&|6k5gzX)0LsHrZe0uPEDHE}kC)};DTfF9=~HtG-N
z95>ZuA&4k)+*H?$1ER=r6C)#Z1SkS@il5!6SLU4ZpF$QpWvaVV!9z?Y@;OCPKhp9U
z8A<q!;5g%H84v}}cv=QT!813s+>f-}DkAAF{DzoTPuGC-pQmd;2x|3o4G2N4r0ZWn
z*G1vbB{QWq9>^R<fs`>bnR+w7WsBao<0UgKTPnVY6yK&44*=<HUi$zcz0FfRAf&gE
z;vKZFi1c-xXE*A%^}6mCA;n+!!U#Mla-G5m`yo&SiXRi_qZ{>MxnttW@j*qIF>z%q
zK$IC1r-MAS6i`I4I-b1NsDG}NR>xIJ1{rm&j;oXm2qD#RHNFNErO=O^py(?iWAJ$L
z2cPM~0|U4(gr+yRFNEyE<7z1rg&+jq&W^|sE`nV`HF0fW{QDvNVio9+f<I&+142qo
zTm>>9q}0S!AOj+hYvP?3#$_NAK?L%=c<`;b3}i(^x%qJw$cltOUJ&;JxrkEkqCi}(
z8jRklhjJIiRV3p-)M8OwWotl4TNL-QbrFq7md3@T4`04Z4^=Mpl|ru!OMRu#E5p*b
z%GM|dK}+NCv42pHTpSM7#ZxxJ$x3CmzIG-x#M^(aH+HOxr)5bmD<&^n6&L;S9RQHO
z%2O90<gbdW{umJQSH<CF<TAzN8*BKgFZ3T5ukmUKA|$NwY6wV7adpc)ASA4bV|+r(
zlf~q8>v+X({h^X|z64U;y0|(_4<1NZ7mv%uQb0&p7gswxiwUilTFwJN$@QL^0a0?j
zr)EIG>#4bz{BDy}^FRQBlm`Q%6`TB4kn?Tw^o)NYX%p$WwKMcw5)NI6r&L?Xr@z!+
zxVhtnxHr}*A>Ce*y6po1nU_4>0z&2`Pq%=Od5LuU86A5pp;qrnetbyZk&(YATX_zs
zM9%K!h@lA}3hl|pNj9-Nt_1oFHDzmuvV)l`+wq1E)0QNkyr6dtRDmcX04$Kul&vBF
z5E7cQRRjPc0-CZrAIg>yKm-v1&Dp_&*)jqY4dwP{s|Zjenk~wv2$-KPnt*QgHB0-G
z6--|Jw?0>Y6hOX#mxv7Unx!%XAS(5mrTiEW!e6uS#z5;GfT+}KmhmS`uF(+zm4dBb
zx6~S42^n*|CFfWH@ZWgrhSJD-<1H0#_!rX0Tb>`3P)eU-iEtYT06|mydQ$qB;@6YX
z#}vPwls=|d@Pm^SZ>8bTG%Kan;`q|-@s86hZ%=zExxs9UWAou#xw9>02~Z(ywxxm#
z5W;3#Z~$=*x|HlR&*Jx{vVFPp{6gda^DJF{2M0_jG|$3E1t!ucvy=jAp~Zg|Vv~9;
zwA4NxP*G^1b(8$09v})Ww6HaeI>S;zi<IgBpt?n#>Htx4k*7L9!Rx86l(fE7s%`*)
zK+42`P~B2bb%2nx)KeWGBrPS?EyV3r!7`*OE9JA~{4~}x(4o%q&JCB5>Q?j5b+#~X
zwWkCSA#1g#IY7u-O`5Bt4y6pO4Sj5B4OTF79u4Q-<-=}fW2!)sF#raX|JYJ70EqG*
zTPg+s;cg#Wog3h8H1|OS5d)uC!Fo%^fTE$?dP~KCA|VDgSY9tsM)ufb`Ewt6pg_SO
z$w3_;s<O#bFd#&3y5XB;1h+{A4+4OKw|Tw^2nBER6buMS+dKsWilR_3ohmEGky|U}
z!$cr+NESc!NorR<_T^9q-tHE5TYRU5zJRV%D#u2&-Ili33evYoZUUAY(TK+HzlE(C
zw8skGC8p-&UufKyR<Qr~D0t>qMDfJ^&C>Qm+$c{PEJGxIe|z@3!QcExS$cDAvVvv4
zG%`!Gg^$U5(*AB~|9~{i5Ua`|-4Ts<>A?0>9k$diIZ-*%e2Wzv?u#Q`9<lHtZBN`$
zOFIE^^!ZFt1nEkVXs?|lL8t$;)W<R<1#*vB>a(1Z0=dVnV9&lc1pmv@zJ=i5c!F`G
z0g?EGj_m2Y(^jz5uN1vQpRv@9R6-mD##wr#cwH{10BA+-xGC+;J^(OztLMjns9viV
z2Y@KrN^$TR#X&i_R$KDlVKy|7)8-c<=Wp{e2$)c)jWP&bl3Pw{yUzbNgY~=px|csd
zM3L)W{s2Ug>y$sP(|*Hpz|gFOHYbtXk8P`|kKwmW^Y{n#ot02&9uRV7B~+RRgq&Fk
zmF58vce4`4oP<pCM38BIb^>Ysb=q%MP8sLDM6$R$3$-hG&wmhQ{Pz-Skq2CO(0hpv
zGROe&p!X6Obx^`9r-WadkbMOJO4cS+JOZL*Z9?@GfGAm;@Dg4*1@8w5(N_!rKxIDg
z>p*YPANY->LEZ;`V`-50K?3o(=)Vw<6$rHizMz7|v3Eipb|-M=`c<0dtsr~vOK!+!
zuLpYVOQ?(mDunGz=wg>JF+teA1l{98X}^N()6AbwutmL^{W4_e=7f4}1`o<KCotZh
zARj~lk{oEG=jh#%kl)0CBoft<=q#=UB#1&SWTH>SgVL}Dbu6J>;+o4E+aF7$-GcA6
zQw6|wg70(LeK{u*xS)jAQbB~Q6N%0V4-!+t%@KQxE69?k_)l@mX3nWZQ1)jaqR6R4
zCpiZWh$5#F*fw;hcnTDJnm63W2IZVi1m*qK6~bbt6J6!nD<F!TPGIeowkcGQ!Orsh
z9Cl~U*+fumN+%+oayF4J*L(p{<ZJ?)0BJjN1r5K?@%M6AS<blxJ|-&LLL=>Si3kNb
zHH}8v=Mu%Gs`;27JkLAzLi5ijg3{|M#7TzpiEg>72+ho&Pu$)|?31pb>B0+qdM{R<
zbHOh{lkyk*A~Y#~fr`*Y1r;=revt=q*}b_J6G6Fv2_lMIOmvZ7GXX@Ai-}%8WQ*yT
zU1c~l!A@C~d?lAHYL`C2#=1IvuelOl7Mf^llWpGj4%V*<Kjl>o_ygi5+U=zY0U>Up
zjomCX5(7ktPP8*8+j23A2x5h1l8xQRbm~)4;9HYytg_MdO^QT|Hk0hqGWH#LQYHD>
zbX&VS^GG0z_s?TpxZa0-{VR}U?f?T!H{Diizks5Ex`7-J6`OA3TnO0%5Ehtj=MNTF
z<q#Bq7Yt%!C>2&xTAO1hOY&H|z{7L=XHY7bW2^iGE<9t7t==&KA!Lq?cTD*VngyO?
zM{ifp5KAp{?5y6bjW(oJQW~tYwUx>F`D|2b6@Gdxp)6SEKZU}g&VLGJ!8&@1R54}2
zIy<@&DyGo~#LCgf3Oo3rEk_@UhH~%QYV@H<7=3(T)9B++N1AWOhhEm&DaY+V<`>ZN
zna0%4yuO%i46n6QyNmrRohjX{vo%+o-iQODZone`QURg2bv9;Ns-Z?;{9B(qSi-`A
zNWHCz&CNswSG|qR%@u+PsDZaHWBnrywz``ZA8jG3jW-pVEXU_qa3KhPu8ify|7vT!
zNWnw|&tL7{x3h6r&j&_^*ly!<keB3r%gKXf>`b5pBoXVxfCAg?T=8m15K_0>y$6ti
z1VnYW+qd^;xLyPpR@lLBu4F}#9e%xN!C(i~OV%Aex0C<65_R9{*NYYmc2d0%JCK9?
zu#0c5WTnwvwz~BhMDXmgafT9CoDdUyWp6UppM4RC?zJ_M1BeQ)y*6&O-y>UyBycbp
z9>^Zhq6hst(W1dYsuR5lpcLZ1h5zX;_P1z@tqG4OBA8n2!hY<EWWp-hG5*Iv>}vFw
zUvs*9`Iz1N4x}k9*gqUPWn+SG&R{kye9Fe_2~D8(r(AH_*3R-PgIQ@6e#!g=I@EXC
z?k11&146r}ZA|x*p8~>9Puu2M_$dvSh#*qI87~zm3Tkl1O9hHVso)Hyf>u-=CGnhA
zTZ?BNg_Ewio1N_sBx48v!D_8u>;MX0wF40lb!xS-Y_yQv9bfgiY^Th00-4hSe8v4N
zgI~XgjSFA4QzOFLyO6hEfp&zq^YuemC;})i?#7>}>J>5}t@(7JTD9@RLs)L4&DO+m
zG$MkhjnWRbHUk1(<+(#yzH!x;Bd8<?FY@3)6|dP^pBS#ExQHq9H;1zHED)qi;BUyd
zMlLZH8;-yZr=RR3cMgS4OD8*;^lgyAHrc_n2ZahCq)vA71_@Uuh}uqe^6#Rxe*6uk
zO>ua}eeAaA6i0;%sE{$mLAX3CnBeQx4uAMQHZrT)(F&Aga`tMcUlE&5e$|D%eX7Gx
z-^XT{Q~m0YyHBO+9G6^h_Zf~>lKBmP<leL#KJvG$2S580RucuaP)R1|pW$E~<v}>(
zfN*HGld^)>-p?M$p6%dd4Gqf&;1y)PqrL3}*)_V+b%1&W5wxWB0Q-F)e}NOM6fP(K
zgwVH~;B()jKs5^;yo6A1K7hP?v7^1qvqrLf-u|a7R0SyS^~9f0+hV7O90&lS=wb((
zzsSV_;o^%O>s?2>I1z-4FL6|Frzohx5=ZrRibO8H#DR;8m-zv3rqD7+t8;>xTln;!
zvfcj!BwZZ;!4S(Fb)p#%bz0`cL{da0$i<gANItSo^m4k)xuXtsqW%{DqfTMeV7U|g
zA$<``3l0p2RyrvS2!rtmsD@9G^^g3Fjq0${!F^9tsXrV@f$&js<j+}p;Kv_1YLp2o
z9{rJ{ZVv;*qd#&m&Zqtl5JvvU3Cr)36U69TaHJQruccU&uTSp&1^aoRs@@k%Evk3a
zB=SJfqIw6D$WknI-StlTP+>v*OJa$VA+HNn6tuA3xx;(5V8XNOow9q_zj3KlD!#Dv
znUit^jXs8t4?O)s@-M%{x@7n>NA1+?N=@GGXts>~oev@Q0mVvND*lB0?G9GjuuT{c
z72e6uJ;Z()-RY?A2}JPhBuk8^&af+m`JUv6huO`6=pG0bUJfde9YlW}MMhT&|F1cJ
zguNgA+EG``g9xUt9c&K~*SUA4pl{+&J<2|hHaVK`MwFzGZz6BpBqbrJ5Ap{eV_TvJ
z9kt-!RmAi`2MhjqWv9o%ms)ty<7{2D#nHq!Nr(tZEe^IhmBT&m42S;dV1HSsU$e6C
zKOJmxqCmNm0_C`)ofLsm1qeyNa+nDSl^l1}hcf`ttm6*m@X0Fy;g!do*hv*BL=cg3
z!iy9|K|M}*k)lWxDJLjWehDk$vr}iBlq*iVK<1C+ob`%LsW<UmM=^0-`UEQopK(%6
zk;}W0J<mE?p0KA0hzbJBd<lq0ouveY`*>5u2dBQ}pFhF+M!xkD5{TgWmJ$;6>-bs}
zjr*-9S!v{)mkvQBDy2i(bkL2g`5k}tNmd#8&e8IP$w36qcTV4aq)70<nCE%RldLRq
z-ccO~h~PQzpyQy;8~Csj`Ym4m6f20dV$Y<KL;1PYDJvJ7AjHR>F7O#ov4PPGJ`b7l
z0`bs63J5}azRWK@#daE(9j#0WqU?OxsqD{&!`^p=L)V;?SKUD7ufC_!;L~hK`ZWh@
zwq*Ug$oivQZH&u%j%0aNz%V}ua(_M`v^(03$yYf*=wY;r3uMUrfH41PH)o716D1LZ
z`CoBWqEr-A>lIfeN<|{`zv9CD_$-o^iZdPK+>}|VsO;a-g+I$W@xmuqdtUw<wk15y
zO^piMXOiv5yV?)ss1*>k0~YT<sepLSco&~C!y#5c{P|~>KQ^2dNB`_Ik@5dbOt%Uq
zpouR3WH^gNC%S5ol_{)0(Jkz&n9%A;F277nlUz0Y#TTVec9M(XuPG!^2k!EMXIMNs
z*;PK0Df@31K0=#`GRgkcE+6#_8`87dRZapbBvrd`5?LphV5+MX^9{pU*O?<&FbX8Q
zX<Uy7)~PQ1GE2yV8@%CiV+89NeZy553zsE==?xbdD=wIjXs5aS@ewRLI?Ywd0T;S~
zX_|}VAek^Eo$m5?iD|m82pW=3Cq?uWk}x8j;qrftV6o^7SCfMhTs{Y;87|JA$?9W7
zI@9I7o`tq%x|%pHhnCZjbf$~ra#9iw+;Nu=f0o6vxZgVZ+y{626|=|Tz=Oh}H{Fy4
zE?@R6do=w`H?4>8*+Jy9HLf;a_-s)Xeu|w-LHq%e*SNRJOP&E?w;C5YlDriV-df`(
z<|}U{g7DUPp0_Fr>M+mqRz)Ijok!mK9X3^`;=@d}Zc06z^++%)*))<pqlIfdC+$v7
zy3BJ@{>SH8C<-Wj6n{ecGIBo}B;w0P=)hh6_Vdh%EcdhyDwvj&)-g~A6HpyL`8=zL
z*14*`0g<RK`kP(UD|M#~wJLef3+&!NWR>R$pn_`^c|wI?f{(7|YhPsjqpLlocNZ?Y
znq2A?DG5HhF4^NHyfR1E`OhOCT}RIo9Zq-Za5nJL-=f3W;A;Iu0s;|C8(e&U@kg-V
zU>t&RQ$FQgUuHwoH<J12y<;$$Z?mg4y1Z>LE8ul6V`v5}ZHRxNlFgnC0nx6_o(%zE
z!_97@QQ43P!iHNs8!8IwvBk5YB9RTZkPSZ}8{(r+yWNzpVZ-IHVW0nF`C53ln|iBA
zG(E_Md!R+x$pE5Kz_PCgg!nzA3kvEUWW+D|=HIcQ(Jx&!z6TLJU%K=mGfLP!$Xs9X
z-lN#0$X7m-pc2!gf(LEg%bQ2B$D@0_!091OxYxz?B=iNpyThSx+?0d-q2IG#q<`b$
zU=gM9yGf_bu697C@tJ>Mp{D`mp)dT23O2jlWljggW13y;U8Jx8gi4#;>;p=rL=Y<7
X@2ON#(187(N)?Gzx}T5y11tJ}_4;^V

delta 46964
zcmZ5}cYIY<wtw!q=bm<x+@9Q)+!8<pk_b{PNd!CMh<z+GG8S~4H>1wTyyv|4dlQNf
z3BAacq9QmTO`3Q_RJuqL5D+wU7*J4<C>9X>eb?Um<nZJVK6kCN)_1Sn)?Rz<eNMKF
zYd8DcrTw4xJg+?OeO`Ub*Laum@(z3WT|VEdiG44IEj{c@6f9`(v0n3Ap2Dy<Q4sDl
z!JgghYv;N1+Nb;dG25eO_TeY`KGpBp?88qzW@WGa+tdHi_irHn);If~5C8ee$Fh(9
z`APoxQ2+7Set+znz2Uh>|M>7zPxQ?`_H^H8pSq-9_OU0Q?f2wUPyGGKXa8tF^_?%T
zK9nj5T88B@!rroi+bq*k41dc{Z$a3bDQH7nuP5xy7F^1IDq(M~pe_ID4SVwit@%$i
z?5!v$vp!qmu@tQ!tWEM39QN8LfAn45)xPfv?T;18EQS5`LG3mc{GB$8d48|mADrYh
zO0E4~OVtXLg0MQ>{?qTZgPyACUaizBvV6o<!1l&lJEWJ$%eq^8eO$>CRu|g;=%ejd
zDi?aSxRmlhX`wgK-XWp1(A%}A^)T1L!zFC+Bif@?OT1c0$|%J3hRYlhDoea=ueL^N
zTnFSDyW~+V=&f4gmg9xe8gJqfspKUoZ>JvCMh{m~!|Hl=_v6~;s`XwiBZXAxtoLTG
zbV%r|_g>$}8X<IiVRbX>{e(8Edb6wJgU)7ewodB!ptITA^I>a@Xap^+?)KV6f7He*
z)w{h~u@uvwwc8sgcSvaM_Fj6WWvkpeJ**z`+8_T(yF%%5$g7n|F&$cmyroqR39Uok
zEAOyosg|OmTTglm&Urn_CMC<d-|dUpxBo>eQi3PFMw#`vrK-FiPkY&4p4Oh|blR)%
z_9ZTQ>a;h^OCb`lr@e`!H4W7U?FnmVyvkWG)1J|$*5ju|<<kQ+$QiHSf$;$5j5o|X
znw|pYj5n3G0z%jzn6k58uNAUPdTunBVN~dQuX>pkvHT88Ee7)kuX@%0WdiL-uX=U<
z|8mj1KY7*LtZy-}RTw%@E!f0v`m5F)8mJmEYbw>iL&JBl%0d&&$(=#K>cOgF@JfJ$
z)q_>D&>>OIU^Ni54hU5|ZDfgOwL`Zxs)}C<QB51w!k9xsr%{b39MT{%+1<kAMd4J>
z1aVT=SRJ@IsNV?Iv!7PgXM`#n)1xRbYlJEr6C{clp~^l1i6Ta*=o4yrkSJn=n!1HI
zC6S^jN2uwZ);xt50)=t*r~R~QPwhCj6fYWVoa)a?9C!|pxhou!l+>$htQ985z$AIY
zzV<)0Rch@UE`|z>H&lOxR6?_ZY}LUbf$@e~eVH`}69A^7TDINef3$f@ciYAA5!<b;
z4;Z!@ZY42j64~k{ZLP_oE?QW7UsYDwRsYnIo_hRrI!}Y%`>H8MphwZ5_r4k};X@82
zhTQvV=_=K0g?U$KXs6<^_JOLdRDH7TI1hTuQ7wp>FqyNouy2K`E%#U%UJcC1wW^X&
zhO%s3y_Tv1AqKif(P6||HIbIa>i}D;W^&dAF@n%l8)pXlYo2R1y7f0u|BY__4M1#E
z!`vOf00R&k)m(-3l7eBagthHz!B48)dw^Er32j%6xER<94eU?Fz^(xS%uk)R0SU}c
zoq-J!n4i+X-brTB_|lqG<$$Ut*LcQFtxd4U2WfBDgC*J)0?==A+7=}Ao78BGw=GDt
zZIfDZK(;M0c-!t#)%~(<B@cRgowk)MwCz6Lwzb?8%!k9Ol1^4<+2rT7E9*cA7o#W&
z#@b=kALMNd5;h%HLwo^39cWe@R+A}fxTq7zV=4;|)<)DFb1`VlA5;Bewn7IO$JCO%
zgrtSxnA*CH^*xO>MZuUqrP_N3Yyah`Ipu=Tpg*PhMV~_oAg9!Xm;)dIa!PG;2_Gzc
zDmSy07$%+Z8;Z@&U;zomW@oT~gkp2cVByvMkzuf$y&k_|%8#xE8oKvKXUO0wfPQp_
z3`hX|NJHiw@`T>7c0nz8nUxLI?7#)p2wV4{a$XuQ{n_E6+HWiS`(#Ih38el$=>b6k
zslN{c<qocbhlAJ?joMwcgM6}Eyov{v8swAR0+NJ$vRgm`VUQ2q(ty<rrJ{d_+dnjF
zrcyiH#h|Vo?(++m1|eV!_oaATKsvw}?yIV{#t96N6YSa%T1=^(;9^kMPVo78WB?`V
z+6lgL;fg?#k`JzEE_JP!x^{{^YLr&xshi?rP|r?r?Vz5W;!E*0mUMtI#n-WuH4N?Q
z!y5aVuV5}aH(F~9zvlBrsa<`1U7hArDp+>Eep@TCpn~SpnVzBnrulMt>uxTL0$yk4
zSnb}->pmq#!w@nQ7QOB(&seWxD1!z$ll^n7Hluu|PvI*IF^TI-msvfz3{0EFt{tcK
zDxc+3auSH*o>{(Dt*s}x4C*|G%^9aXnVaJpL~+g>GUx*@Dg{rl#8<H2XLlK|z2^xm
z@%c)5wfMUE_Jj%AZ_D5IDSW>8z=Q7FKFpVEfREKJtiHqkK0)h|dB>;lNRXJ2dB@lG
zQXV*g2DyywoS==$Eb}RCxS?PY*LP_<>s#~=gixE6_8_MH-BZ5Or|@w=Tu7~?aqtiq
zLUmTNl8M?M%2)do-baw3>a3<d!iWWld9s#`pQzo{daY{`g=uTaq)}LwAcRie>Qk;w
z_V=+<y{v2OUX!$2l{&C4mF7`|w$<06(jj5qR$o;QtJu;=orc<0Uv+nD7xfnwfv~!h
z?VO^0mfh)7I!Yyq*LM0kcd>?G5JLz{!9Jh;@ynX7<o3BOVL)sjwZuxAyJ}cF;w$*Z
z$G(46TOK^(Ll}dmhHJv)J?dj?r)u4+j`|dx${;QbIqEZt91?aO^#w!Lm0Sl8zx1)o
zU(>Ft`qI^*`TC{L5X+{@=j)d~xc0tW2iAP$W0POg9<TaJ4p6aRfSndgH2fsW`O1eS
z`gX1Z>XeUFPt)$GJLOC*RiWv5$|oZQkSO+)uT?u~DoxK*zRD_VwT5c@!rB0>;6?j`
zY1*~kzyJ*~>*av<QMCuLzznTR<seP^EHD8zNHc{y1_`J^8e+}PTm=t@u)ogGx>gR+
zWJCG5lNzEK5neh-s0`6cO07;@1(hDkcFfQ^R}OVmXmk%n6d_fp&O^0WiFFxQ0X3X;
znW=TE9PX-69fxb!IZ^NUxC<Jt!4(R_FnmX`@iVoqwWBoYOnnMDpi!D%v@A#<jM7>Q
z2LuwujM6Z;-=sCpN27Z@)8Eh*)Qxu`D4ZIv$>0$(fEcgI;1MJs#%l;3U%_-oY1*q=
z!MpaEH?)^MtzXsn(DAC89@b`P%4|)wUh`Ty=mryeOwP0I+1gZ3&zYK9!Gl`y3{Cci
zrrviE2j$Gt)Xu28z_T@F8SrNN96Y!h;@MN@YO|Cs?`Z0!t~NQ1rJC9oahV}XM;H0t
z)zs-8Yb-f%jfTQX`=9f*sHbwJGZw%_ZC7eC2m}c$R%#f{H*g(1T*H<x&~B<*<FuE?
zcP?w3_5w*lT3B=%NFc1CPFrSi2pHC++1D@BYJ62qnqu<4)%c3lq`_S3YLL)sqH?Rb
z5~zI|d-HAWvZ{TWA_5qVPl0_}NW|YDxl~0fs|VM?@HnWkLR-7G_MmGljgNzxUj&C5
zA0G#`Oj}tjjgNy``wo1zXf!;IXl$6Rb*?+&LQoKL#2I1`LVb^Dt*a#jjgKQ*r^~Hb
zG{iLWjbCc)ysgc?;Y$}o<7_`)ut*3PUux1HfCR>u8vMaL+B#r9gtc>;(qC7TQ%rVn
zx0z;5*ILEwm+_`<mo3%)Q?18i5o$shSm)dxqzL*PwIuBv@f4xvIjy9>F2Z<X@KEz-
zP5ng^VZ7u)?>x-pVZ3A^)V!ck7{8~S+XWZAMpsIco9*xi+Wmnl5RMfTgs;&}G23Ar
z(AMaf?VpHNF)3p(akI9gYQ3vtLT9~hir61R13K$<#QuEag0>5*TkOdnYh|A6w&-%g
zgNshuqRZI|5*S<bFkiq?T?-gn^j2-GnW9{OSlyv3ZIUl}*eOddVWF)EZ^02EvZnZf
zw!=m918s*Mc1D;VXgl<Z*48qE*S|2VexciYwrVwM-4`xMAv*U9y=9CQ0^|!lBZ4ta
zDFnzDdevptatg*Yr3gEF-M)9H)?KMP<AM|c<cuyI8KeMmMsFEqMF2UYcj|04i+UBK
zlXbRZm-cP#ITxcC80U1kLDiIEV4Tx)m&=h_42*Mn*DI_GNd3T&Kv*4VtDkB8z1>F|
zEiDoN#z>^fq*4GFBaMhNa09>?X_RNJp+y`c7}n+)$^v`M9_<CK9zUIi4FYDK;TLHU
zOku#xGfJJV4gzMLfvy&VG>Abu&&V$@M0x|_v?qtkn}%A=x0;d#XEL8yw5`;XP*`1T
z@NMM{&-Ls3)U#|#gBIulKFY=evA%%>&|*VwF+rm2#Z)%mVj@z3=QLQTzxLDh6t)o6
zQj0K#$5NwZu#rhi4Y|{VFp!oS*fvZ+9#O@l-C-2GXW#m7?L{@T!@x#!Jav{%p7%3@
zHGiqSSo@iS4KA=hbFe`I`!gfVvuUIQ?9YsRg>^HBz{5QTTXS6NS+~c9pd8X37lJ(T
z9wRLFYC8ACdkkb&o)>1Iat937>x4GA_JE5)PVaz=L96xwBP{w`=YIKsfynwMZU&4x
zY_OuQw43V=yAWPL9CjgS6+djq1ytv5`mliobUNiUblOOKYuMwy(q30;zjZ+n!+<ZF
z8d3oH)@f>xDEV6hLH9Ep1F}CDtluf^ueCq85VVm0;6jk2{=pELPn1iJ`UfMMvtH0S
z1_sGcJO7Q==zVmksYLmB*STjNYR1F@0TN0>O)L<!Oo4<49BNjIWt+$bGf14O-@<KL
zTmT$o6T!Rt9&4DWF~Zx4cHld0gi<@vlw(U*bXYslY^gB0@rh<j|C1Y^Xrlj@A&CrN
z6g=Jj?0fBfPwjLU!$2jbn{sy!Az(~5ON28735@9`b~76V2AuFbd;5>tW>4)r7sG@d
z^ISW~DbF+I7}vQ|o@Zi=&k=(NPI(dAdsdrQyU2wgpS;M0AfLR*4D$^QOedeb$ZXq=
z&str9OI~8KF%4R>3kXzTi7BTlNN6rG<x~X;%_XKYRdogacbUnjDhpt(s$1roPzV#2
zxh9YgUgp+<eDE@=#o%JhRCt>`W<jHU*Lh9VOZJ#X%6gY#B!gz^AyX+y&QU0<V-HdF
zGEZl4#43m9fIVc&XbB`>51CkN5%iHdo*p-qNOG)~{fA#mvaaWS5gXyyGoEVj9T1wP
z$4#@Ck0~et<hU6MTQ5@!8?>`KX|n0M{z~;pQ*3dG3#F50nrGyRgwjc~U3-zdF^Ft7
z*)xVdqN>>~iDqK6DU%Zr;!;RXyht;^pqV(pZg1+$TQ$IveE=?$23QH<h(JPVfQ5nh
zk*Fiud8qwOp}xUWJrrjuvJy1chFWs@H~3r|YGL_*r4)N)<lt6Y1?%iDi}jcN;nf%|
zl*{$;4BQ$^X~kX}Vzq8Bl5U{+B0*2l5^Jbr>KxE0VlAZea}@S|TEE;*rF5?+1C~ew
zKmZDBNns64g#ySA?b@{dp(p#HrSJ+7m)Ior4if)x3fd=D!8p63T<@j?Ke3RN_yGOj
z<LRF5>`z&JMa6bYW+T9a@^%Y;Xq*s2Ouoxfeze$ca{8Eh{1mnzjRV15791y5IDny(
zA(;Kq@>0ys89RocWp`WZ<+Q+Y&L=~#XHY-0)a=D9RQq!adxwjpfZb%NtuJN)Yft^J
zc<A4~zha^H_WcSBGjPA9<}U_=!#ZH89WQ3V{~Y|4VQ?phEcFsss(uK9O!cs(wsm<!
zyqNDtEVa$WEX?D7|H?2#MMr-ng&619|G^*PMac5Sugr)4{nAof5q!PViU<sjTWap&
zBC*P!_!WKxoA6(OMZ@aXziNvZCfcuRRD!Md#qc|Mzn!+~v3qlR2|RRMv!z~nF$*2{
zttCPlZY!kFao<_$)fY>l-_Bgz{E$Mweg7*(^xF>>O8l1?iI`;S&z3TP{l1m{dOd!L
zX@q1T3jNv2WaUVNtI&S7as&L%NL0LhB%UWMVZGuNBk_WzmS4<5g?_Qr%*8BV_xEGG
zcHvV7(9ipo(SDWnZ>@K#$8X07%0xZyZ!rS3hGcGZixFO7#9+T#CE>l&h#~%#A;wuS
zqQT!X_BjjKFZ@ahtva;cueQG!49(i;ZyB3h6U{p8;vz*)j_|8pTNFh{j`XXw7qd|0
zD8G7*bseuakjMI!vV529b$@@h-_w7|KK$I1&tA<Iw9zlm-~kUr(chG68|z1+<qkL=
zWU40k3#KsT68-kT1ivrHeIid(G4}8!dQ~~|D?GpJ0~4CeUsi5qQ66$mVf7_8?-D&<
z{*qte;T|y|^AgD*I0gx7BK!IhJy$-_FQOY_5|?ChTn4Q)iFIhJSCmikD?C((40Y8c
zlBwh}sM}=rm$rI!X0nSzHJMB@*P|v#KE3KMn8}v4)vpV`>i0!>O?d8Us$aQ;d-ql%
z>javon|&YwG1ZS$=&dLQ8KtoL8oU2e{kHPgTp6m;Yb1j_8Dv0BV{0$f?<}9@mmXPo
z`Dr8r?*|!FX*%oDP9IP{-Nm6QO(&T;E`ut)&UUoZyO+Q2m#JB#iXihk$#ms17#aU!
zo!aYHl>f`=K;(iT^DmOQmdjuU&R{RJ*RRja@GCt30Rw0cF@t2NX^<|O?JrosPP9kU
z%=Y_Ac+>D)%pAYcK{Sm>!hq)6P9I1>%<*G!Z-ruzQ3<Pa+0YJpoASASxxRo2nYkoG
zGY|O_1Z`|{2fbVQJio$|VZ<aZ$z084&@^wde5GDn{wBJG7H-H;)4WMCHCzTwGoSr$
zrCyhv?=%gPCXks=GWQ{PGQ-+pf5Df2)>NtA+j_Cz2mr~en%Mr>er1_owT^p`u`*=_
zjCkzcD*emO@A%brJYgjs0duJz-jU9E1qb%MOPn7mYBnhr+h9Lit)EqDH~3}L3@$om
zgI`9?AkjD*{Bp|!5*Qo&*zz2MQv?Q{Zeg=K>0j1taUp2ew8e#>aBPb|EH(g80mK%6
zX`FAoOlrbU*p|!nTWUUW5opi!iHktReBzfI9;g7}6F)XQ_i`IR?PT|K*6-`F(?#$C
zVW;0uZRdlXv{vl&2gM;cNYe4+sA4$<Y9<0T?WkY*!f&7KtiSJl1i!^L8&809)U||S
zx1;{B*k<D?aE?l^OE3t0kNR_8!0W=%a|Uuj7{$l@>R+s*0rajF)`k}rY_^N8)c>uw
z9$v^ZzFrkKc(kd7%Ik%y^)C~>Ysuavo?Y5Qe_ieTS|K7C>P+zr?KZ7Yz2PDbY?)rD
zcDH6x_Q9g=U1*=WL2vJ^Usxz_Q-F&KEG(2w2@*;R3+2f@NJJqE3sVmWRFHi8wXiUK
zKd%r8fP<nJ7GBwl@5m&Jc4P|+@BOVcjN*I?9j4iZ%6o-s@~kIoPwc6yo_a7utKu<Q
z)h?8S3?z)Q3+0{|B#g2PMQBG@XjQu~`(B}FRbq$>1@9EfyBU(j?`AA5ly@^)m_U2C
zP`$c>-_2;@qF0s`;%)|=BU%`R+VVnW4ZEh7e*2yH<rqo>ak*<K4aDVzviqS0=;eiC
z(IpTVy1X#Aro~X_=EDkhu$LaaYNcx$f1*;tXcbJ8mPsZoTTPbnjVbO=h1E@V^{x8*
zp362BDjFZq{8p8^sZbZ=8ze~;h9eZ2E2=-N?Jg|%rO-~_rmylucNZdyewaqOAEQD$
zUZ{LuXgBxP4|?nITkJ6K1a&)JXbMD-Ks-)}ltBWCx*ac!evi7*7$nAaimy);svY>)
zAkH=(r+rl@q6aPn7I42V6!Epg!U#H9h}fr|ris)9*r`GhXF4o6%Wn$d)Gm@jf1EB9
z@w+31_G%`ui=+@=e_N=QwXiS?0sq~_w(^OIIIvKCz<P<CnV&lMY#}>*w?6UqvxV|x
z23*dTM_3>MbhZ#jSmanhV#b^;4D)b?lMN=hjI)K2E*9M%@RNhPP{=mjqt`ulp->Sg
zVc-JwLSeCRiXee{p%6|{pi(yCLSf>1+14~L5QbkUOkT$)9ps5alkP%c_a0UQb$Ve~
zd!eY{HT$W1^&y^CFBI{EA+K5p&(c_=j4V>I$m<}*!3nWg{64*R=V3)^H(ri-1apTM
zsdu623@MCrjuA!be2;Yr>QhL5Wel5qpML2hV{m<o8w@6@Go~mcGGic7oiRo7&Jjpd
zXG~F2I4dG~b;cB>uIJT}9IDQkq8`^;RlFP^j%RJ|*Drf?e32r~#R_?6j4z6c>={Uu
zGrkC(f|?B^${Amj?Io(i{REnAd{OQeSq^y)-fZKGZo1i;O&jh)>Yyq1();zfo|-8|
za^{1JVKt>lrfEUKoGC>Sk+=qlf~OSWXaqqKAV5uJuRW*_sGI5{&=NGYNIE&l0AXs8
zynqIhbcztGP6?s&io)8uqJlT=Km1OgY_wiiB$tIEbl!#{<zsZ-tF-7B$=)L#%l6e@
z>9w&)?Zm4q9-%Iqiqzlm-V+@3-sU3p1rM6Y3;nQms7N^qyn&X32Vc#3GtI|!U)RG$
z*gnw|=js#%9VvoGrQskr0Q`56I@n`vp;=Qz<KaXRyXHUit+gkd%7csMJK;1RNL2nr
zQAAv)0Ex<<C_;Ek2aiS6wkM0&t$)_L)SoO;ga-nbv*nr%5;`Y~ux3+VgG67SEGq9Q
zY<2qjWKrg3-q$1``}$<j4L4fj=&-Da`g%~Ya&Pi^D|^qgxDlKETi<8<{q4y|`#t&e
zQ_p7GKK}M!^q<r|5D^Oi6i|;r#WKwf5;hGgE)_RxK*FX$#kg4`Y@%s9sJQJt-0$Ei
zEC}-wFTLBkKnr6LDKy&m{Y~%hd8pAXg^r>di{*_K2%(h5VtHc)Bq<f+#7~ssMJbKN
zX>q*{Ph}~M#brIM-}6G?H%GFr{q#P4M!IFtLEXq=naV8US*Vf4GL;DuWsEFFDpQn!
zNCsq^yJbyOS;olXOYXA9Q+!cGE8`UVyMB6!w|0tK3Z3OmDVEa)La51<;+B4=6!DZ|
z^!q*vL5rwyXWKVDryo!rn(boHU832=a^gS;7_*Dz!~qG6*~OSR!cxi@&n_<OB`u|l
zF}3;Z;__SgwW1=r{4kFV{vZ9f*UWRvpycp8w+u=S&nuP-J5*4{ykacuuhZc_F6AvR
zF4$dcr~aRw_Xd_1BP9PP>@TLVzlz;julKK7RV)`$FoCtISSAHQ0&7(<l7f7dDW(y$
zj-9R7CsnR<b!e=wD>j9jgA8=m7326Hn+6nv`fOk;`|EWz8=M+|i5hHh#tcXxY$y(i
z^B|Bw*iekXj;<*b6Saw5JwWeLv&lsu2ervXpi#HU8Ff%09U67rIReJi7B+W)er@d*
z7lD?#EiM8@$6Ja+BFZl2V`@t=X6$Yn`^9ANF1!6e{Q*ziE*FCi6?Qp20U==QDwY8%
zNLaCp>M@CqfC6Fdo8p31_Ub|UM77N~)Dh&?0&r{J7b|CrRl2UDgBFV%=h*{a(EsYG
z|DhO}3G!>=A)55ZVq_s)4hs6ISbeAk@LaL-3jjk79^9m4wdhc<{alP_#N`0@d@&+A
zmjm1j#cE-_btxJlKtpCA`)8xx{?UN}MWm>~1kk`hKtux|p))WbqXCc@;sXOR8X%G{
zp92Fj8ju`XJ_iO64Gf^x4$ydLunUJFh5JZDKn_lDi5)OS7y=R{H3Vcd0}>@Q1j7Hz
zClirk`_d4I+<7sJE8YG7Xxoc|P~}GU*Wr3?Rij%D72g<;iG0XFr7?g+{uE&x7Ln2R
zp5c1Ar+#!mI@^Fk19EggPJEES7#)z?0+7HM9l&B=j0FIs0gONvH{U4mBU%_cI*|JV
zmVg!(6%}}-(PK4G1RS8G{Ir15Hu<BLy#cQ@*#8)*|I=FomT>tHfECjM(iww<71IJC
z;qpPkifIA3eA;{lXiWc$T|QR7ulv7T1RB!+auH}q|0@t`%RLrUfbg#Xj=Uz)d369z
zP+JhdwUdow^|(@xpN=8q2N$@_L4I&SK+X)P0cJq}GlK$jkO<Hh1X9ZaB0whw56~9|
zWPnZ_5uh&$h#Vu=5&`<6K)#N*W4#nZr!ER~e?Yb^*F<@X12U+VQfSM?fjrNxI$*GQ
zaiIHy7c0WczxAsk;gjDA<ax%=QN+-DE6~0E|7aouz9b++ds!qB;BWuR3M9ba4&-mX
zxJV?x?SRO+JNQU|+ksa9r${8g?Lc?2x0Uc$A_M-;#rR_Du=L_q6yxmOfcl^_oKc;X
z_QVMo&UGu@{?k$Ml>vE&G{EnXtPG@_fkbP}N*YLGv32ypgKZ2HY_-oYJ*1Ru4ERFU
zYQ$GQez?6Upk(uJdDwy>W+m%6NgrDdjyMRxb9B`vnihZH;us{G*-w-7M>3lOGA)Ud
zYRGIRnLPp%<j3s4C+qvlKMu(3DUPCvOG4PUpj?=@h5hFg{hHhs7l^W1TS(?xG8#j!
zDNwLKV1GJA|Em&g3gB?(At>{6zC8i<+gJ5I**yVyLlj(S@1c?Z2ARQ+^Y#YVr?2X>
zvU>wE!3Qp+_L5Y8Aq8?@fW0~u(e*w|T$)ADC2RMQR3QvO&g@{I;H!Yg@>^aXov<DZ
zAWixtO5u5~Ljfh9e~>MF+f1_OUej;QfFbgvcnqLJ0UTTR<kHYR5@3g4({IThaoPq+
zD+nD4Am|uGHu0?0u>kwcH2wMPv4BjKf(xl*0UTZ(7E)-!69IO5ntmjE!s#$1pCEOD
z+VFKcE5!wm(ZPZj>@(B#3OzD9h<lG~$u9)4QfL!{%4EC!9Q}Hw9zVrS9S>mR#GonO
z_W+4vCI*WG+!268uS^UECkKTiAO;33QqDoOhEEa6ffbX26_ppW05mCBeYLeR#0|iT
z_d!ru9aNJGLUc>2+%9}mKk4y2&En_vwEf%yeV)P|U93k~m&JPfn(VVrKJirF$Fh(7
zBTH|PA-aC5Ux#ep=N^8v-=F`HefZhz!&&j(nU$q~4?pwFpP%geZ1%~1*@yeFZ6}SK
zUHX=Oi?<$SIyI%$>Vu%nNd)<7^+8bPBtW939|WVTQB!(@f*4d&+)Gtg1;y1X$wS3f
z;KB@F79<N-uT}=>>J=?wLF%~=gUSub$}Brz>)jp!A@(771S38S2F2nG5?~(&<>Cwy
ze(S@aT%3vIi}Qy;xj0J>EzTbXu{htzO9R9P_K$b;o9i|NrMnOE)o(*ku6`g<?1rFp
z_aI3p2zURE=p4A-=Aiw{JNi=N56vzJEndwo2rXXCK^Z#-`Qp_al(92N*xnqJu``h(
zc5V(LcK$*PLcm=J+VNHTlS=Icw-^fZF9hXgBFKZb3&9exI|d0`F9fkW#z_g<7P13E
z;z9xlPRYY?kT7sSNM1+)3C#f^=R!h|V)up+zmRYp2-LYD)Y4uQ!Z(Ck+KWQ?hLF5h
z0bw9Dgm5F_R`>^GU5AAV80-0=-YYyTB+ti@yF{`hq~ydg0Z2fA7H4W8F(`(IunV{z
za~_F9+EtzUP`|N!BwRFiLtsK?WC-0NWI&B(cddiW=#cc#$O{rTgb9BO$AMvEnY~WG
zwR~(yI$tF4ATu_Ep1}Y?S*YoFmitJ*xqN&`9#Vk`neid)o&*l6KY=xTq~DsG5Rxty
zRfWui5Mu5b5h#Q(8A1i$hwSe@(qA_N%R@*C^+KP7sOBr#%un>+RIUuk=>{gMxH4pl
z_#GrHT}fE?a}_*X!*bj82dmb&Dl|jagiMk63Go@aCWOS#7<fPw18Y8Fv$yNxYCdv0
z4oq17k<)P?0r62tj!}>(^&@JDJ2?WVjqD#g^t-Dz$`%DI&5ezrG{3A*BngFZMV(d*
z&}h9a?A#80;B{NvQu$sbB*Qw$0Afo>-gN~Dh%F%u*%1_=hRDR7AzXdC;9+<8%m~}Q
zQ~$mW91)x0ITvU_qY!UrC?t{-cnY+gA*?C<re%m`KvT%pcj;+QZIcT^bD=3DZ=gd8
zAWflGm+?3eBtV)%mv`YFDnwIZUx@u-w_a1V50n(5QNJ%Fvy)&$XI}{Md_P_b%<n@X
zwqdva_v%A#pV2L*LvEkZEv7@%XG=xvA?P|5Vo!ahzgu_AwUur$9dkR4*4Seqd66^3
zZ!sOC=Hu5wp@pOW5PSS{{f*kMTnxI#^p%T2*O<O?JD#pFeHBWTajy}gYfPu4*8qW*
zIwfZddWWttopQVeNNApF@fsnz#&kw_jq5>RG@Nm5pnFVbTpQ>f(;3HWKp048$ZPPs
zE6Ae{3>S>HckRL5mB7HTFTh_tLBbk&9#*zr|7~VaSWZ1KG1v!%F<t1QvX7^ehp=(`
z^*Na#VR?uQCWMBB(b!Ew2xKGs{Q-S%rZFtCoY16c(-_9~ADbIOf>9&b{Rj0C<s)1q
z@)#osiNZBMjrmbbJ)~cg9Tk>wADECC6~<b1hF+yXhIn$g;0^oHL;81~;N&pgq&Z3j
zApeTA413~;{zYa=SP}2)fC=R(VWfm+2qCo8tL&+N>u+RU4ND)1lq-Z@4Z}xn6+$3!
zJbYCDBr`oMLo8%Vi5tdr*eHZhpP8)9F@1A(W>|VRBt#)JGYs$cEuE8v!`k{V;^D{_
zdb1v1AI3Wi)1j<}$<|F_rAKnSCwnsseXX})Clt+Ow|#*B?)gUV+Z#_s`~X?lyeTYi
zO@Tzgo5Hv?MX4i@m>!$LrQLZ5L?ogI7_liFzlOh{5+={Ig_)=It2=LTLCNK93Cmm6
zkOAlxYJt@W*c}OLgCYeZBc9}233hOaUTTjzt<NY74vHA%)<;x>2-Tp0-EcwQa9cw}
z+?paLP#YpykxB#!)P@L-gvnHpFts7l;ZB}cAd<he+YqU|182sB32ls{U-SoVZ;Z(5
zgGt<otUgF!Hb!LiK?1WeBCAiNsD5KaRzE`BHX_2T(|YGFATV)8xY$(Uh=^<jJO%cM
z2wLF<I*W*gwHG4=FD-e-Xz<j(7%}pQ(p5D|HJ=bsdhkkt0wPG!Ss;Np!Lb%35GOd+
zf`qjb9BYXb)=nU61vu1MMCmTU>4*`eVckJ380BrjA~GQX66h>~goJzwbQUSOh7Sci
zmFO%|T4$Z4_nu;5?UhKu0`%*C5ARpDPcgPdUWpj3t^O1$#ZWnIMnsuquksqdc<S*}
ztQB|w=QShZ7r9lCFmy(wjp$mCuw+IA?~u_x9wdU=8Ij9oMZ{?*F%XqOWoAU&YvM8@
zP<tbSJ7jnB!XYp>q9l_yX7B9#*T46DmUY*RTPnd4tsCR@pBs@2HAs{?Hv;cL!zV^P
z{U)<D<AM4&T@~u$HzP6}fDBaLjKIH9bH|999}!cWC^R=nr!-oi=SSolP<YCPv8HeH
zqb*A?w<86+(Uz<H*&eh_=<(>IeV^&~@KcZWwMXm5GGA~#O&7WXsFv^v&mJr?UaZ{Y
z6aXd)*yIcrkSJgi4VK?>6+GO+%8HHqtG2i*eBL@OP$K3nwE({sT0%{*oxNUcyjs28
z)uATX?lb{pP|S8}0-nn)A#zuQ{ViZjtls4+QRR0zm4^_QLghEn)F=&W2O<Sy?5l#t
zMo;KK#7K(QrAw)v$0GbY09SxOdmeKjK?3qvMCO!10`gb{Ipq^H^h#l+)*Mm3i`ZX=
zjVG0Q{1zR7Cs1s5Yyk<y<_K(|!3Gk8tvOQm9R?dEEQvuoDD~Tj+$%~B+UDDc+$%~J
zfWD1juSi>6C_>^V%<SY2Pxel>EoSWP4N~k-@eoG*6p>#f014fnsO4$yfyCVVDI&i}
zKqU8VKSl6Gf~j;uS4#2&?DHkYG*6!aQ8}%^#k3j_mFX3bC}co1CH5d7NhykmL=-}Y
zCIh0aMH&-N<)j)AZF7h9K81Xxw1PI+7vjb>o|*=?6goC(i2B8qZwR53hG_mO2}@yP
zL$tPz$1J7fA{$wcwnnN8enYV_DmOYHq1YIe8y%2PY>YY^ol=SrM@Pj*2LwzR?V3P&
zz|m2;(ZN$7jgHEV4oD!4jv{2aAEPTC*2YH*USqzrabIwJ6ssnWXX7-uCfa{V8v#%6
ziBTCnf(xjLQ5ijg1k}W+%m#x*n@x;{ui#^YNZv6MqmgdbSJY&2>es3E#xmn6&vjEB
zd%;CzraB!1lBA;Y-D!|0WNH-tZXWG(5@BtAv|xMGlYGU;#&j~G_UMc;P6^GA;?nq3
z8e0jneG%FQAIM-^@`hHmC@P0H9szq%RL%>Kz+M!^yud0%ns~a@_Es2;p30@J5*f5K
zDwi$@L1`&<1$oj0jpX;(yRD3SYu|IK1SYEVUR1vL0}=@DMRQ{R0TKxBMK5h{%@W0e
zTx0*HwK2z2yT-+!@wz4|uOub-cwG|>iX%~wq!ca7SRac@V+gEgT`n=U)~t6SXfUpK
z&7i@!J}TcoO7K0*`e@fH_+U)XVBAE5F;}(88HQj&Ws@@uL88=6EyFND)%;}U=(dKZ
z_7k^M8h@WS;}0@`_{151AOZ0SjlT!coyoBFX%v?(H(zQz5d1WX*JSB!)FgG`?kMZl
z&gfXR+vx~!fwVg+*JO}D+8xE3Om7D#sg0YWY(hKZs_G_JhdQq*YKpfZAq1VKC{C#;
zr3fYT-u@{2rJXUWYQL*QSo@>$cnv~O+8;%Hjk|r&0d*+KK5cJwtvlq@8eG)+kW*`r
zfH)MD8y=8c3GU?+Q7*dcSd`t;!Ps7PEGlp5B)PXZ7S)9x1PP^MQDo}qW=N7c=y;U%
zsx<2Aj=Sa3&hofhE_K-PsC@qpI)FGHMNs~YC>I@eD$3SX8mH?{xfryuJmn0vB=50P
z(V&PeK?37cv|R`5w7|g5^1CSezRGC6?mHKQve(~5{Z2#EM)SL<_?!}Kr;X-!QM|Fv
zooAAK_}Qq^EBU5EZ>-1c?w1*@Jih}=1VIo0+*!vdfCSvxXo|m!4mjF_o{e_y%H1kR
z4%h7#dY_%1ipN*<l%okd)bmlcqNCBV_Pkqyi4x97<qLjEg?6atqw)nmkSO7N6t9sE
zqdA(S9qRLTRVQPFr{?)si<PuPeLf~#Erfvad`y1%1tc(@k6m)9bp?mO4z+>(aJg|+
zWkXEfgh}$PX+uor6+l9zA%<}xh8lLJjqIV$Mz`8Vw@`Y$u`woJZ%it*C2fpl#9M_R
zfzTMktbT*ukxbI-jg#$9IvefOy2&mEz1=uDCKp2p0b_D3B|akp5*U+XtuL|W8knRh
zybKsCSYuyxrO{rE%!^@_m`Ecbg=wlSh$&0hbG61x_4p;C2=D>7ASU0a0SUMTF}zVj
zQ3Oat5es6GB{7kQB?d(i+QOLnR!rn!B@cRwVlodaS;)gKj!_<V6NNG<nyJfU%B{)w
z?NN0`Po*A&V+Bq9<uQ472}z(WkIB^vB*x70SXf;CA(BTj%VQC7Q9^RyAC|{DiA1<$
zahSTE))dhOkXRi<=4XT_d-osvvfuVF#@B)&#&L?T1gm56LI_CMv^rKQ5<egTwmOEL
zZb!6pI;^dW;fqgguQe_Utcw|i{CY+jt?XORp19WNQ@`G+9GC!FACswWkN{dAL#ms?
z7m%pj`dGA{?@x$C<<R5nV=-|>L$bKiz5lf0Xv#F1wjrkATQb?6clFM8?$oiHs05y1
znB!49(XybqsC2|2fwLhd9dQ~y)whv7eVuW2{YIx9zy!obXQqGz!p4|9s|5*!jWMJ=
z>8utc&T2QtoU>Y@h5Z|2@~l>}a8|o9MrXBKC|`j~QJ=;Nrk8k<E4<n3`#$xged+ba
z8c*oc7*59+ddtUeAMJ{<3pW@qWp~A7#uZ$2;w~z_SxCXS-7)s|jmEc`-7$F$95;j@
zwVUQ<dkzKavl#p6CZj{<vzWZ&jY~Y7jaSEWTnP30JjNn78~N<#F_{Iy9UKUK9>eaJ
z&fZ}aR)eOPeb3D}%xcvXQ}~e|u_4wJ!;#+@_#n_|!ox9q=3^i`*~{u~FY9UC=BWcm
zeB}erA%8d~zw!YRg&&T|uY3@RY8{T@D<9W#G>nHMF?Lfg<GRd|n9Snfx(qOm#IRuG
zxe$E)zhi7xFQX#+@0d)`;Jyol{!PR781Ci3FpRcuV)j?Pj4zbTH!c=^3gjEYx{gc1
z4WEv&Z*McM&zz3QL$D&ngwW|24#EDxh2UqKW9;7E#(!s<F|BAkqW}v+&E$|aW7dO)
zEB!fUf79EzO{x3Y74t*vXA%=y<V=5#;oExjnG+~c1N<Dj^eStrK!JB1Z2!MIjl5Dm
zxTK}k3js2?q)l7?azYXL&mru+yN&MULrUZ~VZemUkP^H?NiQ%IDcAxvu;e|EX>f5U
zH`G8l^g;!$so|v<_S`+jZRIbN$lLy4Lgs}MEUlE3!}UnKCBu%~V_Z`{)WxCu(?bad
z32w;XT`KGu?ltbtG`ct;$TSiTf@BiH+g0Q3x9&COE1B^n@*_3iLTY>o;!fF$c;V_5
zd*J;>Zzc0eNlRNtAoWTK8j&JPVBsCCY3!Q^jjh>fB}zNlv{496E2*ruhR~OU;Jjy+
z;I)bazcU7hXO`et_a3P7`%Z75BH~Lz;-(X5@g*UUz<8qsJx?#T@QY5f*q6UIs_&mw
zB3}*!6Ed?(@N!^^%Yd3)qNMUg**ovLHT$<`|6JAYxqjSB0f2l8o{FOukX#r?Ev>jJ
z#=;!-*N2QY<#S485)qe{ATy@~Nkm+G0s`jYT(;yPqf7bR5;@qxgv{I$40hZzg$yR)
zJZAJUE-Rns;?T^SM>wJ^OszNBy?s#Dn<X;eTg+$Hn<YpF;FB7_!OWV^CiO8o=H|Oi
zLKAB~HOWrg@<iaQ?JOxcSYm(G$JlNJca|6>^cIB1zh$(mgl+kw(X)D2iN?J?aiP7d
zB-)nxh)7g<SIOl!TPxr`K%;r~mDo2uX{_{A?JLoEE{oXE+E-G-U#TV%TKh`6-9~Si
zgT%uFC9Laz7&l*bphV+`n#ASo7#|HpLgzq9mtNLl%v5*~?N~{{zf0{m|HJ6$2_7rK
zM}Jlp1C766I>bKpXX84(dPu3pZxs<2XhTYi`M4kwXhTXdO=n><02+25DYYN&XS9po
za->v#dlPJE9VwOH-UJD)Bc)w?(*eI)1`|pPCdc^!zgh-_W2Ht~Y!J(6cX7N_Y!IIr
zfeqsEQW-Pg5k!xd$_*k&fF3W!1`*y|Eh9_5DrMW28ELixik-f46=_NQs#NAqAqmB=
zN|9iiO}8J*&|cb4rOMBx_Kzcsw%&UD7Hcb>V6gmDD!;`B5;#AVCPZ2SByfHz#hOE*
z6G((kKb5xrxm0BPh#|6lXG>+aPqNT9=Sq?7djp;hdO#Tx$A>~Ds@dyrxcyH1)iFj!
z=?Ios(IJ3hhs0aVr|rs+ILx0x8}~9y3~hK^8DpOsXSDXz<ENuXTgu^a83{lRdc)(0
z1cbTtg3IuD$(Xo^^zfWVS=xxWIyx>QJ;{UK$heI3Bny$=sJQdZ!ZMn7<KyC+g%cXI
zSQl{6a$t!|@E~Ez__)lNfCS|DxRWs{qh_8I=NXghL13m&insIu?N}$pWf+gAK$;Yn
z8558|niR*5mES2W4{LA63&z?>W=vFDzZu8iraOh@xRJ9suGn$aT0(aU%jKOy;@P_=
z8=XDf-iphs(&8DqXh|IJ-%ut^a8S<MalEy&mm0mCqU#Uh%4++%myO?f>hV)FIv&8j
z58^WR0|~tk;_{jUNHqEf@#t#V=)~aR_42s7N;bOWL2rfA=#oX(9C)Lj6*j;Ht&b~P
z;;LQ#s_|c*dJv8kG~(CCWq4iANBsIY!fWb!kg#HXJiMjF3K3vy8{+E6Emk;r^Nn#W
z$U{}qgRwAdQygxMZt6)Ex^Ht_D{Mz`33zC{Z7lnm(W-u%(~V%F8@D;#2oeTvi_1&8
zAc49qj-ZP|WRM72w#9R|%0hUE$tCi=tTJ8(sO@p(=42py-P2FudnWy|{hsXi=e}a%
zmMdP2q3!YC$w34frEhmjrx~?9E<eMBryNaQ$_9zjx5v{r$<p~{L@rTwqm|^P1AQmU
zOf%AbcDgmBL+PDyd5m1n^94KOA#u|iBoKDS5ypxd(shlU@$B`o44Qjn<IZ^QI;$Hm
z1JtfKn>5Y1;t#vrLii0^w-B0FyW;XfV>zE!yW$8+MIpG<g{N(uX7tHIcEvC4#gFgM
z(&)OTIO{as*wm-VErsS>liOT0=bD^32OU(UDUO9ultQ<*o8lF>$*MS?Ic<u!`i)i2
ztAgcpZ=C)9btBVfuUiP+`Pl0gLP?3earp(3a-Njf8^_8n3c;tD@HFpKg@2d{X6%hu
z^rF{9Q4<L4kF%!Njmo<HZXuMa*dLdBX$YZ^{qdB8O1X&raRkAO5KaLDQSjk7yYXMf
z;y#C63_319>>5hRh{N%)xcdhkU>uGk1Qdpvu;XwXFA0eGVah3UINt6qe)wNb*@~la
zcHa!6=DMS9Ar=fh8kZRl2%(Up@zz&LRLWKyjn~v!%jvRxImOt`ape!m1wM9gt5#-z
zH^X>E=>wKC0qBsuIWF@MkOy3ITz+N=B;cCkRpNF6NZ8yQ@7PD$?1#-1jyA_TJ!E}B
zYh<~CaJ;{LdY17gZ=e2&mQpC&(LW(K&=5i?{S)%TMIcd1{{+0eXqiHk(m#>EU6xWP
zOX;7e=xyx~9u4t)gZ=J2<6cjFgIfyaLmCo(u`e&@`H+T0xkxvGL@5mknQj7!QW_H7
z9uck^B)`MekhtPu{w@g#$ahH^5)bv^>D6-DBQz#1`Z&^)PqR_;jYt)kVg-W;>eiT$
zD;P+W+DLV45|(2JF~;6H-}t@fzA>)l0gRk63AuKaEA)M+F$uYLfds~w1lBH!iZaOd
zCkoz8h^Qz7$?*xKTzT3&Ls1c9o@K_AtMD73EFoPzNQkn8jEX=4lqC=q9i`|ZLw<H@
zLWw1JsqFMyM#O$<5w;XnVClSDAiyOI@%9%;=ub^VqSijjt!2oW&$LgxWgPHS&2*Ir
zc4neQiQM;0QkpIb1-Zcf>20I6QnSEmjSP3f3!K&f35*4aut=JNB&7txbh>Dkp>TgO
z8!#WoFZhiCu-NGekWgIgbOlH#E~c)yK$AE_3(e954<;T00i30-3FJPPx+akOT<UZP
zgn_iw>5yz#doNLNP<BWblJ6yOkjXnFOC7SDI%Hbqa;Gc6gwS%QD?kEnIdugEs99>V
zm2B%WqoU(VSA|-CWkSYwkb%m|1Y)~$G_0}|nyyPIo9$Nb8UO8h1V6?6#sgGjol_Bz
zfLWK23mQnktV>`)qxBvn*86pd^yY+@Ct-;JfsYbujL$`)#f)D+;R7RDw;>^4yOj_4
zyR91&_^1PYJiUd9PT7=D?-pTb7DZ~?6Uy#{{mnR|+{2z(ZfNyjh=>G_Vd3_K3`Rl1
zfb9txjDm!P+Y=?bVIf`rBnFR*b|lnY2@#A+9`tr5WH2gOh>Jc=P%uhgNQEu};=Kvw
zKtg3_mK!_j@!M%N8c2H`e+5C<v^P;Iq7IP2-kXr|JV@BIH_`e4Y$9Jy3=z-oOUQU$
zvM@#VClJrCr^^L7yf&UF_&(uDzU#sH{j*QAn^zhiM2;r#8engjm!r_}i-huZf+bcN
zzp2Mh(L{IvbG}H(&=Dle`63}hN02b*i$wHm*+j(PP4s0#{Yo~G<U#Ma(?pVmCOW~J
zi0-WBFj}-z3FS;eO|pNlGOn!$;TS;!@>D`bj*tY{sf3IiLBfbriSU^gBV^?GO+x*y
z#Rw;IJe`n{Bk76Au{j|lN6A8ee4Egat05Pd4{JXr3NFYQmxm!gCX9@jae10?=eP^(
zjNcgj=Ny|sLiC(7??A%lb2RVhEuB0~jq?fi${M3x&-0E41DCV;OGiEug3ftrY%-)G
zto2V8j7bV#Tmi}cNyisgkRgLuXf3AxARK3KFA64v1|_8z1_`)9Njdc^$b`Y{z*<cG
z!LABfFgPivK4hRWIO%NbDro8tODd!7J3cTno_f%zGZ;>RggGoJ=M$bndstG=Cy?l;
zVabxwNim;@!3WFmq&g}o=9A<>Z$whgC&|KK8JVQ{L~YS3tc^<+q$kS8XoX_OB^^K5
ziW*}AHO7?7@f#LSa4ZA~(FsnIfJ8|Xs7dInrLD;Pm)QFs86B%%!YLMSMKFn*)Wxe*
zAffV75@!>XLRMRcwbzsQW?<QR<6}?Y^&}3J>2R?%*)W5h-C$f@HN$}d6Hqgf@}+u^
zfSQp+|4t;w+M0@=Yd^ZtNO@}J;xLGp4=%>z+@!q336i9e@-xC9fiX9U&j`~zZcQuW
zeD>}p<Bpp7E&}z^{G?p*Ap?Z@Nx8;>1j76z*0^gp0;omorp-o=+C?q`Z37m$2;?^x
zCFPl6YwkA}B@waGD%qM=$t6jC9h>dnY-rU>k}_byBPcFO%76tV3R{wNR>{_6=dz^O
za)SWQGS>uJC6~D-&?>nsDZ>^B18G?jVao^f8ef~R_DQnfdHaqn#`|jUlO)_6Un1L3
zx9sFYqXxf$xYHRLAc45k85$sgxRZv)=hQiE&}iD8q_QumCf6(M>#%V(dwYf%w0rC{
zOiw+Yh&cc`!0buNn@J!6vnMGp#DK&c*pn>VhdDsocw*2TQ1>R~g&4^}KkiM+3o()f
zpuI_4i0R19fxy8e{%Sx)_U^wu%+`Nuw5tN`7(rcpFewkQ+wd+vn8ecChwB3ANRs7t
z8Gooc;_6VR9!bhG>^8hpk0f!1O)q%1p-w%PWb=0!ovV)Fbe4}zaG`T7DerfH1oE*Y
z95X(_10A&QadhWyqg&VGNpW^UT<9E6rp0YFkkC1v#6j;|itXB9^QSc@l^@W~lfCp(
zNToezxA6~8J(y1IXzSPPxEW{wq1kaWAkoCl$&w$Wn;`~wGv6lF@1>iOJm`JrxEaZU
zn>oYXOlNKkHi>7GN-o(Z%cg&BTviK0Ov^S39bcbK$~P21!ltvy67kkBNMN5$B6mPj
zq7Cf>&x<M11q3wDJ97dgG|xM80wgrgx6Fw)wEY{D5*K$spc@9IT5O<A;GmS8*mw%0
zK`A*WKmut{3UlH&$hhOp)`nEUFgAIQaciI<g_oD|$SUL2PC8}yevi?r{DqXvgoBCE
z^+F1na0H2v0qjtA#a^SLd}vB$!oh^h(3H$z%a=6&vDavmX-tXf4n=ZDjVTQN2QVow
z32P%$ct_%cy~h24ktriV$4crYWWi|GW}k6=&1k1)V4`NDotlA!38Pc;+nOLzv(YIe
z`N?fxLiUYgGxixBYsR?<<Tl5p{NfTAWJoBL6k!!eAdE{Pth$~fz|ILQvfsF|c7lsQ
z<99+z-lw^QyUhuyph%X01i}Qe;TF`bZCIO>DtM1g*l+X<PD)`yY@)EQEmiInc51)z
zam_0ZFqi;-#i<-fnD$Ca`eTp)euWzL?;HUSr?H<782?o}%|)Q|)oCsQRc=~JM%rz8
z<))=D-FK7gYD>K^+n#sOc)(LRJ0<5XxKNr+-9S5GkSKO`3a1S{xDKd!tn*>xx|(@z
zv9t`#b6TV=51;3yf?_WXl5|p727bd4FjN<?#fOdFH49t>%11455y*cma1qFVEFc8D
zfC7^syO`A-F>dX?*hQcu?&6eROf<*<VR5Rgt*ixklf|j_9jwnp`@@^OlfnnAHXJc_
z*W;I%y=@grCcWb}AbFH`obiRHKzWDymbNM&;Zfd6wOW=EK{qi(<hV2?-+h%VnD%Z8
zZ*BI%khm1D#-s{9OnH*E;!_YkSnjBCO<;Kn@5m%jze{OwtYl9gHByx;Q_{JC2~$?4
zWY7i@rmRe18NzuMRPb;$vyU2OHLIP<fQibib}9psgq+a;5(uklG+@F50fS*J3m!9C
zUAxvrpr&5yB2Y1FQ!)_>6(Fol!I>SP%|tuoX;TFUQL(Gpme<V~8+Oe2Ft|SD+^1_t
z_1eN7{=%46y~U{)n84iP)C(jqw@|&tliP1cCGJYuoxU_)^i=I~wWuz;QZgQe6ts4w
z5RZ~uZAW$aJS8HHzzIYepG((6kD&N@N=6zWq4;^qi8R^~c|ds8>p@_s9&j21BpTy@
z(-<IubinbdAh{~MYJ-l(XpglfRWQ#U@Rc#d8*EPDo6$VdXitrBh8khYmG}+BGft&I
z0`ZK~6d-|khMM99ny&51@^dL%b^VEzKdarsx}G+c^#(&+^1@^OTwZns3GH(!dD#^t
zmYQ=ZdD)dney8$W3YT5qrzz2%8m&L;-fS%I(?2ce1DLR|e_F02AW=sDw0t)ZB+BTY
z#(F@m0wg8P((><b5h*t6{nPmSTe!?lg+O5ld+1x^o0=hRA#_1;NLpTUgbWH9l9qpd
z3nb~J@#nX2jtB(w$xzn#ozb&)sEa^*<)LYrb%P8LhNjE;bp}!a!q7CXGkij0sy)?d
zyd6Aa?C{i%cQGiC9Pd_@9LV^zyn+QCV2n@WItKnY3}K+am+jmS#tKjE%Pt1FkC$Bx
zavv|JrT>KvFkVh$#>vJ&6fvEZ|73hqJKcq#_+ffl-urFO<A>?#yvTln1jO|8<(>IJ
zZ%++ABQ4%=1Od$%X&F<4MBy{ia-@TV=8Uv6(%Vz~FgGn?Y7l7ExvmWqKg@NjLGi=f
zw2U7h45YbfjP#xu=pAqcD_zi>X1mTAH$@htajkq14c87B=-QIB@~++SXWT}q$4}v7
z@c`&c9CVOCUy_zLct8SuNg8Jl<YPg?$1X`{-%We1C_be_42&xJG|Jm)b!pni(>yI)
z=-O#)5TnTbv@j97y%R{&9`Pz}7|MH}tvqkk)V%K+MPb4FX}PF(;FIb7wEPATNC3Z|
z#v=G2N5I9T73|6j#_#J_xCk_?R=Cxosj?z1Lz51Cs;o$3>7a{AAaOBiMY`1}@ev84
zv2wtK73tQG@wbH~3m21Cq#qyYp_?yIgBh#SN~dI(?CpQ+`*`2KvDh!hl{H{FZA(*W
zby`L@kcSbg)5%IcK|yl;%R2H;t8}2L^dW2f#kjWnhb{uG#2>m1K~w3&v|P)f0)!9K
zSc&PiD;R`Ngl<eLTVE_Rx7>>#ju|wUHo9#=b7^B*em5LS0NI#EXfL{$UgzJKZnw3i
zi|Oo#ck!k)7L1M_Gty?W+pF>^di7)8sRM;2sQ3={Cy)7j?GD!tnvXkNJ7_-ca0YS*
zJ|B0aaW+KPVmr`9id|`j@m*KD%Y~r%xXW!1isyHwgCf5V9aLpk8Ye%GatO@FrZk(O
zn2*&pxezolo6>Tp-hofdrgSTDCIAu;O=<i&q_yN(I?%*CmbP#9njd=Vj=3Oo%k-EF
zLUZz1TE4RhC4d}D<DJa`l+^A(=QgL)_O0~Afa^}XAau?2bXp$!K?)$J)AGAHAOUhZ
zoi4Xn96JMiAYf)$!MrjL-mPF`baRKd)4~$|=TPmXrumf>o>}HI={(Da7yEGmr%Wm3
z?=#nf1TJX)rzYqrmX<flusY)f9*}rAt4w?tk|;qI(hwyQva`yt=m}X+v&-abg?ObM
zvLN{j@{r{LY#Gmk5iYEsgF^3<NHq3A^SdGR6i{=@um=^u<nYSm+mUz!9kL+#xdLSQ
zO`S3v5uB&bFjXRAD=XMpW_K?!{|BF8Dnp<~o8L;R_DZ%PVRorpStbKDFoCtQOa^Ko
zVb)5j5bYc*sRnCUhosrHa*eA(ZLr2wA#byWROk}{l~l`hY*f;$tz74-5YReTg(|;}
zRB(?BDxfy7pOR+x$_=gxHOK~6g`B|#QlZgbNzPz1dpu=c(`mD-LhZ7-%oNiaGEmuE
zR#eQtCQwNZZ)=$nPhP=pO`8?$Y|6}5fg!fzcnsyOWioL963Sc4kT`gRmq+upjNP0z
zAFbZu>hKv_CgZwFF+*wOylSB%s*qGJD`58LX|voH{Gtqz<r>@%Q>&;WCfG*a{IK0+
z6EboI1Q!NO$Rxz8I3QubgbbGOHTZ^zS{>G=WeRp>?F+Y>*D9^2W%!QAt5)Ow#f*$H
zJEPLKW_8f=FFt|C`t~-DcAlBR=>lbG#3OXi8yU67MI4kfi#YhB$f{aR#;vmJZ#Sp=
zDpzG>>wpX6R%PTc0STp58T1D3ut5h8*RtOCn$?f2&B%-+n8eM<Tm2xRvNnTT{S<wH
zg!5UO35riZ5y=k|*JeUj@xw&Pp$|f=&2+nhAKX{d*jmpH+-qK0x!yI6N?)ImxqZl>
zob?$@vmV?uP@C9|zcsJBZc|1&{AwN>Z_3Cx5hM^cWx`?)36gX&SU%~EUYLrpwk@M{
zNHPzbe;@t`(iguqhtz^2#u=VtaBR!Sa1JEUwq?r2O#zTV+m^vAs{J?^M&Zs3n{%J}
z_u8E<1Z@X*x)3xLcV@~v$+n`gxHHqGEC0?}H3f6KGwk>Go3*vOT?kq{cDr?=p}9LF
zV_)b1Vs}P-fB{v);?b00yY4q{sBLl~=-NP&3qgxVQ%3ISp#zAf3|_stn^y$=w=cu)
zf55z_Zl4Q5e-m||3qeuczKl$<R`bPUUj}~`X(JtdSJUEgB4dB`fO)I8?t}|M0o@4~
zgcgqzt{t>^oFF@f(h5{fi$`<D{?CWZMo(R{3qp%WvkO9tN3&}QEgsEe$s#)SuclM~
z^BKGD59VT}_Ph&1f0yaJ3qoi8=QCk(Jp)PrIiJCm(V=3X;3R(_t9sNN)?;9{WpvP+
z^aHakV~q~-2WG<}#;N89`2(|;b>i<zRMV~7!C9qivK@QoF?@t4`k0xj0mB(-bX-3;
zD_=H&G_VF|<09Gy33CQ#v8qzwSWPGIFR=f3%&e(-!9}2`?S-t2xF7?B7qZFDa-h-C
z`wQ7_S6aX02sn8k&JI6jK2$T@MWBQC;ck8C;C*;DEHW3>{NR0fwtXf4EJZcl>>b7a
zx3773%_tWk2!v5C0{u;<QCYclfeLIGmBrg5v;tMrz2C8{=y9`a%~%%!pC(bqx(M`_
zmBwaeOb!(wjLqVYL(yLatfouBFS7c_&CWG1x(M_am0ola!a#U2D{sg^1qd%@vw7>U
z903=GC$dwIo6puvbP*yznCK!zfH2XmMFa>FsTO@X0xlE3%wBoIe4^%M7a@wicsVO`
zuhmKv2rp;Fg;baw1;WeO>W<c3907m-VJhqKNAsSVsV+hcHcWMGhyh`$TZ<SFrcx~^
z4^^$;&qYjUpZw9hwRXCTPy&SME<y<qre|g73l$(t&*BVmv>4!}xQoCZe9|0SJJW?I
z1;k7jq7)D_vvMa<t&{>{W;TycUWkbn537spc7HNwDYc7Sj5shBWo4vSt;B(`C>s(l
z4uS;6qAV_O^K@jjg1^LVv*2IMkGtD01de4@J1ei{Kn4(YR=yqt5)gJ4uLr${Z5bK^
zZ{TgpDj(bBPnlQy9>z~+iX~ymCbu?8z--FO%_P(Svnh+sB<%%2VlS{M+v?-2NU0G+
zY>YN%@g;N0?o=x&xc@BQ^j--9MsCZ>B_AZvw`Jv~7bMWPWwGhqE1ElvzxJF}S|vZm
zS&x1NyP=;s?HVu~Q`0c@Q`giqz&>?NO#|#xGIg;J@xx_d?Qpi>o2=dD@8&`!bU2IS
zS^oF9E~5qiXqJ8PU*_PtqYgN@u=J=iI6(sZXtqS;PCx?uXcpPs@f5&cMoaLitUc#B
zGp5v?azQAicgnF4Qd~^F90(F1r?SXi|3nc^$FO!jTQJzZ@ZaWhO5l7J0S-RZrgkLz
z`m@3RYd%uhKPQi0zywtPTv{Y;K?16O4jVm+);f|o&$H-1v9EbPCz}gQ81sBiI%1F{
zl#`1-NFY3)!=gWovV)z%+R$9V820u*&Bnmc9MS|20Jsy`GK}@EH-A?(EGJ_lFo85I
zCj$_WKpK`q0K)%BcPBDtH2bXH+*LK&)uGZy=j3+=AOoGzIi$b(pzzDX+W1_-JhrdD
z`A~Q~6;5vGaulwyoHB*oHo$zQ9=}B73O=xyQ$9#wF)E+NC`gP^mWxiwiSue=@Pnk6
za_Z!qIIosG=uOPY^J>Y$wslgDauMW8FQ=-!n#13vYL#WR1I?;R5RMU4p;vSA&>WHg
zdo_ncb2^#0oC3FL?4^O`jgL%&K3{FXgvzv>{7NuLs7%Yr8<rpuU`)%ky^BYxMDhS}
zTJF+2d4MQ66d+E^^}d}?w#x}(2J1e^%vI0G$yo*_%9)XqvkW8&<($;g<rLn{&GFRI
zA3$(Qjv0^`Gjp9W0}@DcbJ81t1k&6brWj81efWsf{9M73ocOpNElKlpz69TK;u}#o
z5y&ZR`Hqtn4>q-Okm7wOJVfg(po(9M4QGg2WfAK%*u1`cQBJ-z0w!b@<#Ks?5dt!x
z-eThio3~`&%E=eCz$9)C^XXN3IR&4FS(+<Y%`OZ!UkNPD`S{0pePJ@?T{dTk*}weV
zoP0?GOsKv~qaUB^gbYl0kM(RY?<;>VC-=o*Lgu|3b~l(~kOB1pTi#$kR{nu(YGM*M
zhoiC^xD4871?%yGc~kj{oIG+1^R4ZQ9DE19m<ts&_$oHz1@qe6Di?>gw5tdQe|=n0
zJBPK+xq>q}+Z<~8l+flJd;`x<cc$8GMd#tA_bwpNTU(tW2@=)Vnv;7Lkg#TJ4tth$
z6gPIJO770tr-qpydFpmMZUSsLzTG*wDud)=@-NMU1jz0j{;bM!dd(Dn8XmD|&OS53
z?5@_Ha6u?WKarDL0!RVmL{9!qbC3Wzk;BqXD@13aPUb{f6a+L+I%5|kG*3EX7bKT;
z#%^b7yzg>s<yiBVy6@c5Y1Dq_j9Lf*<2z^6f&|8QG-?M?+ja?S7jgx!+ZV<m`4YU4
zGjgJ7yHL{(V8IFIw5kDlInBWY)_}ZhQ;@(KkVl*H7cRO`J%`x`CYbG%nqhf4i@-&l
zhUI0(93)BQ<!1pv0%KSnpC!YaaB3H7(NXNiiRS;*j&c#GJxAr`U1P`qVN^aPw#p!Z
zFe;C&@)=r<x)3?ZzA(}JFQsOZi$N_rDKB%T5CX=ed{8(ekffBy28sHl3pMP^Y~d6$
zSM_pUIubCU@^W4}5|B`NIq!5v7fLWppYgKkshjQ=N~y)^dAaC71PIgf(t&^k!t^}4
z0t>#Pb`5K@@&)g+x>w9Sky&~ADh0&>UC|TT+`O`oRlaHtug5RpbHNAN+`RO;Ab~bF
zFE1*AgyWx^FIkuuj-MFZ@z2Yv3-ZG8OCI#z%uB~FS#bRG^W^v``s_;W{Z?MNJ$XZx
zT`|?{-4}$2LhuMRe9NgJNG>X4age}%D=+WngM?FmE1&Jnul*4z&RpKg=Werhh{~e>
zm*#O<VXcRqe9dglW^^(ltkrAgOO;?dH7A3X=H<63y7B?AG>@Y_`WRkU>i_rHm#>+3
z*S+W3N!|aRGYBCAg!l6DqYxlTC*QT3HIZ^?-NM?(`GOJl|4cLE-r&c1ynx32O*fhp
z+h|fuVb{zswXWM7lkfz9+nkvJ5`f!iW;7|VsT&N|cITDP^J;Q~xOijZ;!V<152mOT
zM1Zh6FYnxd1j6pTymJE*-MKqo_BpzfvN^<{?o>a^%R4ucgZBF@FYnw)7Jxp><IW9U
z;DsIp_U3Wtri|aY>HUV;stUAY1hwqmyu5P*Vd(D7;}Gc2To=^AJbUd8^Dk8gT^(x6
zgL#=c>&DyiU>>QnOSlfE(vdu?nPs+p^hjQQF0>n;OGljP2NK9fX!=oh2qebIk$mb#
zSyj3oiml|4eEJ5y_>+LVYJMbt?R9+f+>Penu{>Kh%e=DgnA7jza<-g-AYtpVyxi%5
zM7hWE$cQ)4=<CM)cAnMEHeaYc;bKs3<%BcFAq0#Q`LM|FfCR>gJTg3#4C_X@m9O*6
zJIAc5``U$|+{)K31m#w~&WFVg2ReZGntb3iTAR92>~kh>KRw5s?&*5QZD>lToXN|4
zBcz~pCXW@FUpnfBbc%L9uMDhkE*;Her{<Zz)Pv{rE~Qe=J01fH063qImhey!B!<}e
zeCfan;W3E8J;sH+I-o*$49SDuFOJ8MEO?Cm7349<fp(*;%;1WP-dh6)6A&zM>mMXc
z8C)TqDM&yLu5g@bH%iD1tKd-?Td=^?9vD_3Jq{kBDTh_G^e81|hE+(Pil+b?Rw08j
zd}nS{MZx3>5tPv$eN=_~tZ9Vi^5_cZv!)>N6twuPDM-wd(G~D1_!6iO-+iMz#Qh7+
z-;|Gq4h>UcLS}4*xGMq@)OfaLq1n59e1(k4z$9)3qO$ur4y>ENIxaFFET2#zqq_(X
zi6&Gay2G6l;9$nQ#AYu7&Px^Y-D@y`^HK$lq40?e$e;}-vC_q6x9p?}8A*Z(nMoCh
zBp1Mo`S5wUxfKN~?57r+)!y)2syMx$9HolSql#zu>$kN6iMoLn6$c5Bc~o&E=OK)T
z^BF>~?&b3<<kc!LAv3=M(-pZu$beeN>TUDh@`X;Nz$7kJ>JBc0iZ5p0+U8y5i=D=a
z@`^8}#<`BmpyEr|WAB(ZlrO1}FCs^I#g|lIic-87rHb2Z-8<&B<#vUPDZxZpb_HTe
zELV`hNL$J-S!&)>zO+KdxL`tNX$4|jq(dNsX}XL}T58@}zRZ=O7m=5d45l(<Fb&^l
z>bquj`TKI<5)(4-SHLghR0Sk*n9JE6@0wk5%iZ>&xBHh<`@Bt|IKGPaVMW2V|6kR)
z$5~Nad3<i?&edCPRu}|fz`4Nfx&65E7Mb@jfDwGgP2>|3V`7ZSCT0^8v#uJmGl+s3
zj1CDD`%%DEURejl6>}9NfWQzQ11K636ow%{7%+o`M2rF4@2Rfly8rd>^r=(T=T+5R
z)m2%&bX9s~S$mdcYhnmCtz#O5Ac+hCMAu+5TPJrBvRNKnw%qP3hS;JzSEsM8*b+Ae
zB0O89F+VjtpzV6{Yw6~S?Xf}o8bfRsgEko+46#EWdM!OMyCYU$Ut@?JqCghlQWu8U
zmF3GrlivOcU%bD)COvWpgy`&AZd1>$EYrh(mT^l}S?aB9$wyiJ%9`}C-fv|YxR~Cu
zN}lgsf>^esx_)gsHT>PI%|zVdao)|^fh3Sty_==Gly8?+@~r!^divUQZT-GD@S$S+
zeR1Fe4VPWt14P6=c}z*eRpNbJS^bZ-q~Wfj2yu<BtexD12@zdcx5{)oKtyz9S-fF(
zzo`<~oh^KOU3ykxM0eKqU63i&owY+ppkc$<o1_n^66N(|_0ZST?e#synq`)tCu_gF
z!i0>TY<V<<1tOy-%MezwXO%eliEOkasBuF&HR42^H@QW@6LH=IQt-sNyjdmBcPh%8
zlK?d3RIv%tjh!m$Pr9*FapHs-Nv9-nJ|Mf_RFgSfmIS@HF`Y>Ee%y`U3#!Gav)#z3
zw`@tLhRt@ZQMrZ0*{(Gz5Q(#0j4EqkszujxbnBM%lwos<MZ}16T>J3^9*WFy`FPQ2
zieSWf`n;{_rlxtW&HvSAmCroa=6@g(=DBvn2}Hs?ml5Z$W#Cl}Of7JoXWhcy-=~Ks
znjxSCC{dRPr1%2Y4x)h+U*Ot7G>|TFf!ps{H|i3FV7kPGZt@v7>JlxDa!<Q<5N%0x
ziT~}!U1GKP#gc>@z373k)DqWrhd`RK#I@Za5OGV~xI3&ChiF6TEvdij=8kk~LR(QC
zGQeposzdyv&9&Vj1rgNdVpW#UCTm#!;+AZ76XlJA^@*2D2kHYI=}UXBaL><1AzLHX
zeJQf;7yzPQid6+f^h>dMfrx%d%zHPAt`Rd7^q+U6?-^Do77_CnT)QO_JQOLo{B|I7
zNHr3ptMu%h>8Zn3x%Sf@M2f6(?XJ~8imY-O8j=1f0$QW{?n+M>zNT1<*l>+&x8Q_F
zm|U{B1XGRZeO;t>y>J)7v@X^<w<x$S);f@a>&|JtMzr1@X?+p^Iqk99f##<5LLidb
zW3>a3)GliODr&DSOKo*a&LHW{^jCUsb<fX5+O8FCcUWx$kk}DF6cC9Wv9^Io>=12-
zJXEbHX_vlwcly%dyNX3b+q>dmf`=lzB$%!<MbP$cS1;b3zJA2+Vi}RNJGM}*QTJ}K
z&`$YYUn~0VatqnF(z~37uK4L8)7Gxo>3|67a_y)ZXiCv@9hDfY6$>133!~mi-;roK
zQWPTJDUK9{h%t`1cD|892sz@?C7D33#Tcm`*Ewkd`LaYa*HH*_hk`wE2m>kD6NfO6
z5bkmNowOk=1QWu?-Q-_v2wNKEK8Qouk_h1w=R&wvvg?QLr$)6<B2qM}1=5rcV}}AF
z^22iuRV#yz(~(0>0ic%CMQz9%!s((m<PG6;>`*Wx>9jc1A?b4K%2F+rC37ni<qd=N
z4J%78(j(tXZ|l`kdH&$Ywd%yRX6WAUr=J?bHKJ!!T73Z#J)_d5X&|C!RN`6UCUxQu
zkLW#n)1R+<q|)YGh)8&((t0~km@4gN^gtv$QpqSp<_+s4tY_(O?UQ-Kq6E?1tV;VA
zHatj}RaqI$T>_CXtJ1C%tP}M3+)h5@K3-`vBs5AqUTHHVP<Sfi3|S{WHmA~L$SVK_
zool@~+MHtR#nI+e+7t;hlIB#R+Q0Qfwe|eaSy|GREBt(a`mPIlZLW-mGxeg<t)kLr
zhHs6P2@zpiV`TynwpEn5O@5K9m&aUG=z2fhanYznIr}V7g`67@nsEn^LW^?z{$v(a
z)uX^vTh4j0(3wyh6U|&kp3V)*wdHJQ1*BYC&URKnJiRT~@5NlySqZ^-`tn?IMK0>B
zERAx{=WJ(XN%F-fC!N*8KBnRHn{VfwcXG+X(4=}QeJddP<Wp~g|LvT01|W@kJ7?7i
zMEKh|#{Dw?0HjfG=d$n6DEZe@2s8?3_+8G<k=2Xs_T-|D5x~7YMOBHh_T;SDxr_8Y
zx!COWlA`zLBC`V!w7=L+Nzwa@?UXdJzt~Pm6Z><R{g^~lLs{xzuH;Nkw_T{Zdmqfj
zOQ0LX>PM+TJ~0Cjc{H{M5Rpf7Hj;pdJetG!=6Bf!vDWdNzPq>j{fOhmLSp>mxpZ_=
z3QQC_p1ZienkB=>28o`NIsMZz_1N%}{Lf=t1S*A2=FT(g!-R=KCv&V1lP<17(1%um
z07*%)0)dqLFjgSY@Wu*k5Z#}S6sTJ+QmKa1vHrNl!=8@y2Sm{6SbsnSofiE)!|q4P
zMlzCD@>F5tMQTW*cZ(PQUD_!6o9P+-)dCPX)3g2zMC44*>JNy>nI8IkLHdnGo;mfH
z=gjt!<qP!w-=~-9A788<XoeKU0}PaZ%(L+Tr2J!^jRzpE_n6mjwim^N5KKJ$+)K84
zQ9M{0<sSEJJXjL(@Pro+-WtU!bG%PwekiCJQk40DG-Zxw{S=7EIbN*hMuAVF1qN^v
z0Vw@R&&CrFr9A1`cmg8nNzcX;&=f__^83;FveZJa<U#$90qUm8g&yf%cHtS%DzIlg
zXQ`Kz(<#maN2|burtjr2oXLy4<dx=QT6Bx2S?nbzeu_dRON0`O`ybDF9&ta3rC|yo
z>3avN`=&hi|H{fcXq%U8EJ_nQEcZBeJC^ppp7U#@@rl<qjtnO>T{lSWZhpzLOVmu`
zMAa+3<Q+wEqP&+qP9ToO6+CA(;^fdlQ-oY)N%CnlBB8`rJbT1oL_zMWo;}Pkq9Avb
zmmDHnfkaCDjpw|M;P1wQ`QKeg`h`o>cgC*uk`2X1$vf~m&u(O7#7RJ`mnzNM?|5<i
z_Q>%s17PF!*l~e0uRV5rAVu57@wbWNj~8F+C=AM|YZIe8iiO16J3N~>V4_fmN8*ru
zR>zClc6m-2Ylo(lsh}ZB){v<fdXz_i$k^rCJOV_<E{{C&iLCw`4@`A?&M~jRH?A|K
z-{3lyBTm{KJ1LCF>5iQgh@5WECVe20*X?DG5qXmIg%BnEqaI2BAzA%3UNX<eUg1_x
zr9M;taj_!F{~vpHo(3)|`q=9gg&B~FKK2-DNa7nW4|m3kUX*_ms?>-xaX@m5f@k7@
z1XA$Kxquum(L3EY0XYdkTc-Qxo>g9yr~5V_xr?Ofz70qqlBW9v<l@f~kxhi2U$U(*
z@=}gL?fb0HU%J!fBW{z}|5v`#xBRdA^tV*5aN!vB<-~9(QS#zGVt?hQ%`#qLN9?bB
z+37?2fhIB3a;+~@i-#{SmJt_N?%UU8cqp^nXN3P~RHcMY;k#q$N=B`uYW%tsNg`^c
z-_L9`Cy+ubeQfnxQ_=ZMFTLtJTeUY%ZNBhT|NMXE2yAHpY^(K|aq3@&t@hc^B9bL`
zU+wqvV<=31ewbPO+axAkqwlX$^`qDL$*6;aNRc&u-{@O6kRoe*R`bY)2~A?bwSICm
z%W|hxDfXnUQX@t~h&EK_Hig&v{mnLg!cF0|K2xW%uAoVbxZY3t<(Ef=e_XAG4TE5o
za?5QBulM^z>-B&XUhlJBPu37O$zXhg-chX@M{e*rurYc*8Fp{*D<ma|>SWlx!LMtu
zD&d3RCO<iLZk6h%zfhy9M}s2IY%&YwH~9lb*pl*bev?1?GPB0HNj?*9reyiZsHJb#
zC~q``xUhVf-&`y#ALchpVfi1vNj|1;@sp$Y9A|XYSgWc=K#1lpxlQ3M{>9Nz89)ke
z@rRF8OXT0K31z8w{gN4lCADhtXZpPBGj}e><xapoQ+s`<)7Q5&s+wjlqrCyRfw;Z?
zg^|U9h}-M4HbusBKtg-3U*73Q^H4%ClQa8#)(}guTMDkY&u4zEj0IPgB#Sln`3;Tg
zq&VILamz!#b5;4l#9++<D?Q%;Md^lnnD&rwXMBN%*KULjq)mr>{z4Ed0kO*=|MDqj
z4;F#u_PELF0ZFG5BsCuMoiXJn6K30OeSeec{w9>TGI7FValFG$WygH`A__#>F`pOF
zs51E~e9X^`ww0M#m}CCnQR=iTEt?=Iv?XvJ3X<i=lpeK^Wt_cUO{EIm6V%kwX70q5
zN<wW3Y?7fEm9_-uDwTxV5>RQRbxEi#LFS<#8p^;P4P~YU$p?dIC}U}qdmykw8B1a)
zGd+-@%>E1Hb2JBw{46M0rMFC0on=1@N(Y)nD*Ys1%?g}+v`D3Mib`dGCTdH$i4JE4
ze1>@fm4az)Yaz*r@rjDoz%eV8g$h?|z)IyN!vvbGFS}Yzte73xJybazM5qBTJM#UU
zb3f#_=Q&rav6){4&T!GO5aIbnFlw}Vm>GRAd1Zc~`)Zce*Ut|elMI9k*Zg3Fd508;
zsQJODNn#iSY2*B0^hCv87GTu9K##mm)mAJhHby267D!{F2IF)K^&{8O;DyD;$i%@y
zX$*0L9MZ<q`sj74A@g)#_aKG{&(i@v?XjPRFySLh3s+vR-biGY29C)ILWOH-!0zh1
zqsJmCtSF4TLEY$NRutPLlLsrLP4X5&DWZR+e(nqE58leaF)lAem{tZ=HR>M`6Z2)S
z2F_*W@3SAbo_3Y$uQz;A?ae@obt=0AzZ#4hLn?EU6U$O-f|AX8?TzaCvNZv3JMzJG
zq9ld2fwNu@o~jy}xr*`=bac5k7!dt74n);!1112(JAruT+Q40pcgg@v2qq`23v5oX
z6k4z@usOk!Bqyv3$O(VrIVedz?SWHSewduFcdGiJ5fnuX_b_3595Fz{YnKxOX;XW^
zT+%b*<QyQgEhza@p#SMh>gitFg3=1(<s1sb6iJ{L&QP8UK*aXgia;8;U92e6KNm||
zI`nxrsSy<&fn$Dv5+Xbu0jY=e$w1H!{l%Nq<rO=Matu}E@C^VS8n#m}yGi8-?~Hu`
zA|-c<FU({m5lpyvXHYnK6Z&iD44lZRA;Z=g@L@y(1Bk57VC-b$;{s`8XK?wIGPlod
z6tq9k)wifiv-{&Xfr^a%5+~m`OgMR0;M5KMy6(zyX5W*ys4oqMFwRyX?%oyD)T&>K
zXI(7*ejw0&zNY33K2U6zIQ#)=S9ipP!ygXxZ@;FFW)25Vm6at9e>h-5Why>5sVsFg
zD4C|;_`13=cQoLC7#Vg?;@#zg!1-&CRA*%e(Mk5*#n1}Z+^X(Rj5`q|Cm7F)ZX)zA
zLGsQ|QP9fCfVUUv*e8h-p9-A62l|7D)!1e*PYfa2FA|8(P6dOaQ2~&`rvjFAi7x~3
z<x_$8ck9bSFuwdz?8}xyBR-0K*^<PUKN4Ryum6+qpVV3YJ8#i1-===|4K5=`<^~Nq
z8`!^Qfi&oBFw_JpEf7aOEBPjBki5m74aT&D(O8=MG)OiP{3J+@lp~g$<P~M9hr*KC
z`p@4~y4OP?dkD2k$9IJ|`=f<l-mdy2KL2QF2cA%=@6ph1L<OY2M?>BLq<;fq%16Vp
z=m=<mjNA=JpE~tUB$o26g;U>BHzk@|i(=(5T0{G-{|fUMts!5MBeBv)w}ySLHCE%U
zh!x63(Z-XO!eh0DW8%6E6Lq(SjaREv>{L|B$vsbnB`=4G@*`|^|DC%EJO7nQ$g-zG
zyVSD3Jo5a|38KSFfiwzi=GjVtR4_keo{jaqKyEJ77vG_7&MXXVqJ#*~!VvvGB3)g7
z3FbwG*>|W55}8FvHm(g-$RRQQf&@T+3G!w7weP7HGs{A|(K$qzmW3=0F`J6_mmqJ`
zv;Ix(%Cv=!aX?B+h_{6};KoQ2LA*l$<ol{Uvm&%p`~6J}uLzmi=LKJ?!-H1pum3=;
z&a4a_a|nhIk+d>o71MZ};&W{G5VD-C=1$ev=arB(OcEWRljv9#I<JLMbbt{BAsS2q
z(aEaN9@PNkxmJaI$`@w@;*6`pp|9bLlIewDqGNSvGrgtIkkz5h^p+&iu{tC=ZpMxr
zXtXXY*&gcgKU7~XTNjqPCOvaD5kvIQ85@}oNNd1RHUuJfeMr_}BiB-MaMA1fZ$DJk
z6|aXj=Rkz#^^lw+-Sq%5(*}Lbk5og&hS26Xh(Zm?ak8dhfY@%MUiKq3p<-j`Ty6{u
z5uS}<b&aSE9!$4MpMRHXtk@LV&Hy4jn?gDRS(L#!LG(cS_Pf-$igs2&S~-$^+r!53
zW{rb6J7}|Bb(gv#v$@D4hTAMW@`nS0$hq5e#gEkvcU$N*T0xR>w}lfXsyndmm1U`&
zVaZzr!dD0DX&Xxi=-}VgHGOu5Ow@{<uM|7K5jwlAox#`{LbPNah-Tjihej`QKy>g%
zn7`E68Hk<V2#4*qb{2xM^P91qErlk%8Qa;C#LjPuojH5QDdk6tKZGUSiBQ+yt$ND-
z5SC_)rOU<Ad$6prbS04XfXz!xDG<qfLe9V9uTmg4-wXB3|4?;9-YYVRsoxW(OAHfe
zZ|KzM&)%#0XQc=z8ZVU_i|-Aqsx2!|yD!w4dsIbcUucJ~99M*deIdhF*T|DDIn+1b
zqbf6<v0s!&J+k<PEDS0an|Fo!>3h^QnXcF|pdzVD93yHOsy`6w3+|=51F;vfp&CpF
z#0v)-Nf`Z)p`LuN8j|^AoQ>F|3Z_3wHmWpCWYL46e)wLM%N&dYpFO2uIw*l3F)^+@
z6zUFPI#g7Fj4Ka`3WgX-3@Z<Zy6iqR^yb5%6Aduf7z(DtA-{k{4QE*SC#o5G;b8C1
zAKdx1+wZyaJ3qSpo1W>&cz9WR#eMTPn?MTxDdcaqs0RLrI}++As3Ci#_|$UH#F4P3
zPThtZPcBQnAC{cJjc?RVcdNeo=zVHRpZ7y{trstzEMD9bIv-ds2BS&{(Z)GI8qgD7
z673ia#I8M(B_&${@#3D)|G;{&5R4ZekG<GZXwmW5i!DjK__%oSNmfahau(2;u%xv#
zpC~_=)J@Yly6K|()t8*IGqFDp6n{Q@&Yyv_3>^70kUGwatICj&BX#J$L;c(TRAI#@
zv4x<*^odxA!8lBy7Tv2^HDy}zw%>s$)V#cDNbfXIa@UN)oz3coM8%A}?ZcqLH6xGL
zG#Ms5d8Y1cQ4=#W^EL?%G>$wokNZuFB;m=k3Qg10XA+rN#rnjPXGwjg;~6L&&lCE#
z2k3a7$U8MAH9>^wi984VU58Dl@c&A_<iB+Nbaic?U*<8Tyjx5WQ_jsh^YVJgR5h*{
zj3@|^DS_x@Zr+*_$b-$zTT=ot<=nhKFCTS0LNKP(dE4<=3JuYD+woYEm{R94<r*<1
z#|=H3FIgt0d_JiMU#kY_o9|ZX!hH{_zRrcu=1VUz`Du{YbCF&!Lk+K36l((_@)wCV
zB=`r385irLGt{-2#d#-s%Yz8d;=G)pCCPk{7;K52I#WGXv82dksKRus;o)JI>cqq9
zw#?GJ4W~iIh)eTqfbkWydR1BKxjcuBOn;aT^SL~K1xbKhC0bpccV5uPA69kW<0@K0
z3!Szt&)faDfz+@(&r(H+3?S-Up3l8t)hPs{&gWxwS_*A{K31nCi8`N0o%)6^lve#8
D57NNU

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index cc2fdee2..4f7c18b5 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -4,8 +4,9 @@
 // IAB Tech Lab CoMP v1.0 and RSL 1.0 with pricing, exchange orchestration,
 // resource identity, transactions, and post-usage reporting.
 //
-// The ExchangeService is the core protocol. Both AI agents and
-// Brokers are valid clients — the Exchange doesn't distinguish.
+// The ExchangeService is the core protocol. AI agents and Brokers call the same
+// RPCs; an Exchange tells a request a Broker relayed from an agent's own as
+// "Direct and relayed requests" below states.
 //
 // Wire format: the canonical wire is snake_case proto-JSON — the field names as
 // declared here (idempotency_key, unit_cost), used by the generated Pydantic/Zod
@@ -1182,14 +1183,19 @@ func (CitationFormat) EnumDescriptor() ([]byte, []int) {
 // Role — Identifies which kind of FORA participant a WellKnownManifest
 // describes. Verifiers fold into the role of the domain that operates
 // them (typically EXCHANGE or PUBLISHER); they are not a distinct role.
+//
+// A role describes the document. It is the publisher's own statement, so no
+// party authorizes anything from it: an Exchange admits a Broker by its own
+// policy, never because a manifest says ROLE_BROKER (see "Direct and relayed
+// requests" in the file header).
 type Role int32
 
 const (
 	Role_ROLE_UNSPECIFIED Role = 0 // unset — rejected at ingest
-	Role_ROLE_AGENT       Role = 1
-	Role_ROLE_EXCHANGE    Role = 2
-	Role_ROLE_BROKER      Role = 3
-	Role_ROLE_PUBLISHER   Role = 4
+	Role_ROLE_AGENT       Role = 1 // an agent's manifest
+	Role_ROLE_EXCHANGE    Role = 2 // an Exchange's manifest
+	Role_ROLE_BROKER      Role = 3 // a Broker's manifest; the role never admits the Broker anywhere
+	Role_ROLE_PUBLISHER   Role = 4 // a publisher's manifest
 )
 
 // Enum value maps for Role.
@@ -4466,7 +4472,8 @@ type Requester struct {
 	// reason: a scheme, path or query smuggled in here would choose what gets
 	// fetched, not merely from where. It is never a free label. Every verifier
 	// reads it as the name of that directory, and the rule that binds it depends
-	// on who signed the arriving request:
+	// on whether the request is direct or relayed, which the receiver decides as
+	// "Direct and relayed requests" in the file header states:
 	//
 	//   - Direct request. The agent's own RFC 9421 signature arrives because
 	//     the agent sent the request itself. The verifier resolves the agent's
@@ -4477,9 +4484,10 @@ type Requester struct {
 	//     then case-folded, an absent port the same as ":443", a subdomain a
 	//     different party). A mismatch is refused as UNAUTHENTICATED with
 	//     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but
-	//     not for the requester the body names. An Exchange applies this rule on
-	//     every request it receives signed by the agent, exactly as a Broker
-	//     applies it at BrokerService.ExecuteTransaction.
+	//     not for the requester the body names. A Broker applies this rule on
+	//     every request it receives. An Exchange applies it on every request
+	//     whose signer it does not admit as a Broker; a mismatch from a signer it
+	//     does admit is a relayed request, one of the two cases below.
 	//   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
 	//     re-packages the purchase, so the request signature and the covered
 	//     `Signature-Agent` member are the Broker's. They say only that the call comes
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 0ea4c472..567a7cb4 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -4,8 +4,9 @@
 // IAB Tech Lab CoMP v1.0 and RSL 1.0 with pricing, exchange orchestration,
 // resource identity, transactions, and post-usage reporting.
 //
-// The ExchangeService is the core protocol. Both AI agents and
-// Brokers are valid clients — the Exchange doesn't distinguish.
+// The ExchangeService is the core protocol. AI agents and Brokers call the same
+// RPCs; an Exchange tells a request a Broker relayed from an agent's own as
+// "Direct and relayed requests" below states.
 //
 // Wire format: the canonical wire is snake_case proto-JSON — the field names as
 // declared here (idempotency_key, unit_cost), used by the generated Pydantic/Zod
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index 5301f199..ae29dc81 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -243,10 +243,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
           "type": "string"
         },
         "ext": {
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index a852d006..41fe1dc4 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -248,10 +248,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
           "type": "string"
         },
         "ext": {
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index b48aab8a..fa290530 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -92,10 +92,10 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-      "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+      "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
       "type": "string"
     },
     "ext": {
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index 4fe09643..ba3b5b5e 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -94,10 +94,10 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-      "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+      "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
       "type": "string"
     },
     "ext": {
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index fe6be31c..f8e25625 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -133,10 +133,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
           "type": "string"
         },
         "ext": {
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index 4663608e..9e8a1855 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -136,10 +136,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
           "type": "string"
         },
         "ext": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 59107cda..b03c4588 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -704,10 +704,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
           "type": "string"
         },
         "ext": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 73442ee0..b4910623 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -718,10 +718,10 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
-          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:",
+          "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
           "type": "string"
         },
         "ext": {
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index cc7ec603..add50416 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1421,7 +1421,7 @@ class Requester(WireModel):
         max_length=260,
     ) = Field(
         ...,
-        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
+        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n "Direct and relayed requests" in the file header states:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index ddb892bb..0ca4e4c7 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,7 +48,7 @@ export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_RE
 
 export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
 export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
@@ -154,7 +154,7 @@ export const RequestAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum
 
 export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
 
-export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.")))();
+export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.")))();
 
 export const RequesterTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"])))();
 
@@ -168,7 +168,7 @@ export const ResourceIdentitySchema = /* @__PURE__ */ (() => wire(z.object({ "c2
 
 export const ResourceMutabilitySchema = /* @__PURE__ */ (() => wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"])))();
 
-export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
+export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
 
 export const ResourceRefSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")))();
 
@@ -202,7 +202,7 @@ export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "e
 
 export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
 
-export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on who signed the arriving request:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. An Exchange applies this rule on\n     every request it receives signed by the agent, exactly as a Broker\n     applies it at BrokerService.ExecuteTransaction.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
+export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
 export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 3d1624a4..9be4ef59 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -442,6 +442,29 @@ Docs: the authentication page's Requester table and a new "Requester domain and
 directory" section, the projected-execute section, the transaction-flow page, the
 reference page and the Exchange request-flow example state the same rules.
 
+**An Exchange tells a relayed request from a direct one (a new receiver rule; no wire
+change).** Agents and Brokers call the same `ExchangeService` RPCs, and `Requester.domain`
+had one rule on a direct request and another on a request a Broker authored, with nothing
+saying how an Exchange tells them apart; the file header said the Exchange does not
+distinguish. The file header gains "Direct and relayed requests", the one statement of
+the rule. On `ResourceQuery` and `TransactionRequest`, an Exchange compares
+`Requester.domain` with the host of the directory the verified signature's covered
+`Signature-Agent` member names, by the request-recipient identity rule. Equal is a direct
+request, under the direct rule. Different is a relayed request, which the Exchange acts on
+only when it admits the signer as a Broker, by its own policy (for example, the Brokers
+registered with it), and otherwise refuses as `unauthenticated` with
+`request_auth_failure` `SIGNATURE_INVALID`. No field marks a relay, and neither
+`WellKnownManifest.role` nor `Requester.type` admits a Broker: both are the sender's own
+statements. A Broker is never relayed to, so a mismatched requester at a Broker is always
+refused. An Exchange that accepts relayed requests needs an admitted-Broker policy. The
+`Role` values gain comments: a Broker's manifest declares `ROLE_BROKER`, which describes
+the document and admits nothing.
+
+Docs: the authentication page gains "Direct and relayed requests", and its key table lists
+a Broker under `ROLE_BROKER`. The transaction-flow, production-architecture, proto-fora,
+Broker overview, exchange-manifest, request-flows and threat-model pages state the rule
+or link to it, and no page gives a Broker `ROLE_AGENT` any more.
+
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
 Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 596cf0f6..3c1eae81 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -4,8 +4,9 @@
 // IAB Tech Lab CoMP v1.0 and RSL 1.0 with pricing, exchange orchestration,
 // resource identity, transactions, and post-usage reporting.
 //
-// The ExchangeService is the core protocol. Both AI agents and
-// Brokers are valid clients — the Exchange doesn't distinguish.
+// The ExchangeService is the core protocol. AI agents and Brokers call the same
+// RPCs; an Exchange tells a request a Broker relayed from an agent's own as
+// "Direct and relayed requests" below states.
 //
 // Wire format: the canonical wire is snake_case proto-JSON — the field names as
 // declared here (idempotency_key, unit_cost), used by the generated Pydantic/Zod
@@ -253,6 +254,44 @@ import "fora/v1/vocab.proto";
 // at each Exchange, on the request the Broker sent it.
 // ============================================================================
 
+// ============================================================================
+// Direct and relayed requests
+//
+// Agents and Brokers call the same ExchangeService RPCs. Of the requests an
+// Exchange receives, ResourceQuery and TransactionRequest name a requester, and
+// on those two the Exchange tells a relayed request from a direct one by
+// comparing two hosts: Requester.domain, and the host of the key directory that
+// the verified signature's covered `Signature-Agent` member names. The
+// comparison is the identity rule "Request recipient" defines: the shape check
+// first, then case-folded, an absent port the same as ":443", a subdomain a
+// different party.
+//
+//   - Equal: a DIRECT request. The signer is the requester, and the rule for a
+//     direct request in Requester.domain applies.
+//   - Different: a RELAYED request, one a Broker authored for that requester —
+//     a ResourceQuery it originated for Broker-led discovery, or a
+//     TransactionRequest it re-packaged from the agent's purchase. The Exchange
+//     acts on it only when it ADMITS THE SIGNER AS A BROKER. Which Brokers an
+//     Exchange admits is its own policy, for example the Brokers registered
+//     with it, just as which Exchanges a Broker routes to is the Broker's. An
+//     admitted Broker's request follows the relayed rules in Requester.domain:
+//     on discovery the field is the Broker's statement of whom it queries for,
+//     and on a purchase the agent's acceptances are verified against the
+//     directory the field names. A request from a signer the Exchange does not
+//     admit is refused as a direct request with a mismatched requester is:
+//     UNAUTHENTICATED with `request_auth_failure` SIGNATURE_INVALID, because the
+//     signature verifies but not for the requester the body names.
+//
+// Nothing else decides it. No field marks a request as relayed, and neither
+// WellKnownManifest.role nor Requester.type admits a Broker: both are the
+// sender's own statements. The decision rests on what the signature proves,
+// which directory signed, and on the Exchange's own admission policy.
+//
+// A Broker relays to Exchanges and is never itself relayed to: every request a
+// Broker receives is direct, so at BrokerService.Resolve and
+// BrokerService.ExecuteTransaction a mismatched requester is always refused.
+// ============================================================================
+
 // ============================================================================
 // Idempotency
 //
@@ -405,7 +444,8 @@ import "fora/v1/vocab.proto";
 // ExchangeService — THE core protocol.
 //
 // This is what SSPs, providers, or third parties deploy.
-// Agents and Brokers are both valid clients.
+// Agents and Brokers are both valid clients; see "Direct and relayed requests"
+// in the file header for how an Exchange tells their requests apart.
 // ============================================================================
 
 service ExchangeService {
@@ -2082,7 +2122,8 @@ message Requester {
   // reason: a scheme, path or query smuggled in here would choose what gets
   // fetched, not merely from where. It is never a free label. Every verifier
   // reads it as the name of that directory, and the rule that binds it depends
-  // on who signed the arriving request:
+  // on whether the request is direct or relayed, which the receiver decides as
+  // "Direct and relayed requests" in the file header states:
   //
   //   - Direct request. The agent's own RFC 9421 signature arrives because
   //     the agent sent the request itself. The verifier resolves the agent's
@@ -2093,9 +2134,10 @@ message Requester {
   //     then case-folded, an absent port the same as ":443", a subdomain a
   //     different party). A mismatch is refused as UNAUTHENTICATED with
   //     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but
-  //     not for the requester the body names. An Exchange applies this rule on
-  //     every request it receives signed by the agent, exactly as a Broker
-  //     applies it at BrokerService.ExecuteTransaction.
+  //     not for the requester the body names. A Broker applies this rule on
+  //     every request it receives. An Exchange applies it on every request
+  //     whose signer it does not admit as a Broker; a mismatch from a signer it
+  //     does admit is a relayed request, one of the two cases below.
   //   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
   //     re-packages the purchase, so the request signature and the covered
   //     `Signature-Agent` member are the Broker's. They say only that the call comes
@@ -3749,12 +3791,17 @@ message RequestConstraints {
 // Role — Identifies which kind of FORA participant a WellKnownManifest
 // describes. Verifiers fold into the role of the domain that operates
 // them (typically EXCHANGE or PUBLISHER); they are not a distinct role.
+//
+// A role describes the document. It is the publisher's own statement, so no
+// party authorizes anything from it: an Exchange admits a Broker by its own
+// policy, never because a manifest says ROLE_BROKER (see "Direct and relayed
+// requests" in the file header).
 enum Role {
   ROLE_UNSPECIFIED = 0;  // unset — rejected at ingest
-  ROLE_AGENT = 1;
-  ROLE_EXCHANGE = 2;
-  ROLE_BROKER = 3;
-  ROLE_PUBLISHER = 4;
+  ROLE_AGENT = 1;        // an agent's manifest
+  ROLE_EXCHANGE = 2;     // an Exchange's manifest
+  ROLE_BROKER = 3;       // a Broker's manifest; the role never admits the Broker anywhere
+  ROLE_PUBLISHER = 4;    // a publisher's manifest
 }
 
 // JsonWebKey — Inline RFC 7517 JWK object.
diff --git a/website/src/content/docs/architecture/production-architecture.mdx b/website/src/content/docs/architecture/production-architecture.mdx
index d175f95d..8ebe2881 100644
--- a/website/src/content/docs/architecture/production-architecture.mdx
+++ b/website/src/content/docs/architecture/production-architecture.mdx
@@ -44,7 +44,7 @@ Without Broker (direct, single exchange):
   Agent → Exchange → deliver
 ```
 
-The Exchange doesn't know or care whether the request came from a Broker or directly from an agent. The HTTP/JSON protocol is identical.
+The RPCs and the HTTP/JSON wire are identical either way. The Exchange tells a relayed request from a direct one by comparing `requester.domain` with the signer's directory, and acts on a relayed one only from a Broker it admits; see [Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests).
 
 ### FORA Authentication
 
@@ -53,7 +53,7 @@ Every party in the protocol authenticates via Ed25519 key pairs. Each party anno
 | Party | Key Announcement | Signs | Verifier |
 |---|---|---|---|
 | **Requester** (Agent or other client) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`) | RFC 9421 HTTP Message Signature (Ed25519) over the HTTP request (`@method`, `@target-uri`, `content-digest` — request body bound via `content-digest`) | Exchange |
-| **Intermediary** (e.g. Broker) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`, same format) | a Broker originates its own discovery queries and re-packages execute requests, signing each alone with its own RFC 9421 HTTP Message Signature (Ed25519), covering its own request and only its own `Signature-Agent` member; on a purchase the agent's identity and consent ride in the body as `AgentAcceptance` | Exchange |
+| **Broker** | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_BROKER`, same format; the role describes the document, and an Exchange admits a Broker by its own policy, never by the role) | a Broker originates its own discovery queries and re-packages execute requests, signing each alone with its own RFC 9421 HTTP Message Signature (Ed25519), covering its own request and only its own `Signature-Agent` member; on a purchase the agent's identity and consent ride in the body as `AgentAcceptance` | Exchange |
 | **Exchange** | `{domain}/.well-known/fora.json` (`role=ROLE_EXCHANGE`); offer-signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory` | `exchange_signature` on every Offer | Agent, Broker |
 | **Provider** | `{domain}/.well-known/fora.json` (`role=ROLE_PUBLISHER`) | Authorization declaration (not signatures) | Agent, Exchange |
 | **Verification Vendor** | WBA directory at `{domain}/.well-known/http-message-signatures-directory` | `ResourceAttestation.signature` on catalog content (v1.0) | Exchange, Agent |
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 661e5f12..19107223 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -176,7 +176,7 @@ The Exchange verifies:
 1. **The Broker's signature** -- against the key its `keyid` thumbprint selects in the directory named by the Broker's `Signature-Agent` member. The Exchange authenticates the caller as the Broker.
 2. **The agent's identity and consent, on a purchase** -- each item carries the agent's `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}` verified against the agent's registered key, which the Exchange resolves from `Requester.domain`. The same key gives the delivery-URL binding (`agent_id` is its RFC 7638 thumbprint), and a delegation's `cnf.jkt` is checked against it, so a delegation stays bound to the agent's private key through the Broker. `agent_request_acceptance` additionally binds the ordered set of offers. These are application-level signatures, not WBA transport signatures, and the Web Bot Auth profile does not change them. See [Projected execute requests](/protocol/authentication/#projected-execute-requests).
 
-The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as agents (`role=ROLE_AGENT`). The Broker names that directory in its `Signature-Agent` member on every request it sends, so an Exchange resolves the Broker's key the same way it resolves any signer's. Whether the Exchange accepts requests from the Broker is a separate decision, and it is the Exchange's own policy: it may, for example, require the Broker to be registered with it.
+The Broker publishes its keys in its WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`) — RFC 7517 Ed25519 JWKs, each identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`). Its `fora.json` manifest uses the same format as an agent's, with `role=ROLE_BROKER`. The Broker names that directory in its `Signature-Agent` member on every request it sends, so an Exchange resolves the Broker's key the same way it resolves any signer's. A request the Broker sends names the agent in `requester.domain`, which differs from the Broker's own directory, so the Exchange treats it as relayed and acts on it only when it admits the Broker. Admission is the Exchange's own policy, for example requiring the Broker to be registered with it; the manifest role never decides it. See [Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests).
 
 ## Profiles Are Forwarded, Not Routed
 
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 2e0b42bb..205835c1 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -289,7 +289,7 @@ In both cases the Broker's signature covers its own request components and only
 
 The Exchange MUST:
 
-1. **Verify the request signature.** The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the key directory at `{origin}/.well-known/http-message-signatures-directory`, where `{origin}` is the `Signature-Agent` member the signature covers, verifies the Ed25519 signature, and authenticates the caller as that party: the agent on a direct call, the Broker on a request the Broker sent. Whether a Broker may send to this Exchange at all is the Exchange's own policy, for example only Brokers registered with it.
+1. **Verify the request signature.** The `keyid` is the key's RFC 7638 thumbprint; the Exchange resolves the key in the key directory at `{origin}/.well-known/http-message-signatures-directory`, where `{origin}` is the `Signature-Agent` member the signature covers, verifies the Ed25519 signature, and authenticates the caller as that party: the agent on a direct call, the Broker on a request the Broker sent. A request whose `requester.domain` names a directory other than the signer's is relayed, and the Exchange acts on it only from a Broker it admits, by its own policy (for example, only Brokers registered with it); from any other signer it is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`. See [Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests).
 2. **Verify each item's `AgentAcceptance` on an execute request** against the agent's registered key, as [Projected execute requests](/protocol/authentication/#projected-execute-requests) describes. On a re-packaged request this is the agent's identity and consent, and its key gives the delivery-URL binding and the key a delegation's `cnf.jkt` is checked against.
 3. **Where a party forwarded unchanged and covered an earlier signature**, verify that signature too, and the coverage, as the general WG-00 rule describes.
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 6ef9d7ba..adc6c0bb 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -44,14 +44,26 @@ This ties cryptographic identity to DNS ownership — if you control the domain,
 
 ### Requester domain and the key directory
 
-`requester.domain` names the same directory, and the rule that binds the two depends on who signed the arriving request:
+`requester.domain` names the same directory, and the rule that binds the two depends on whether the request is direct or relayed, which the receiver decides as [Direct and relayed requests](#direct-and-relayed-requests) states:
 
-- **Direct request.** The agent's own signature arrives because the agent sent the request itself. The verifier resolves the key from the covered `Signature-Agent` member, as above, never from `requester.domain`. It then **MUST** require `requester.domain` to name that same directory: the host of the origin that member names, compared by the request-recipient identity rule (the shape check first, then case-folded, an absent port the same as `:443`, a subdomain a different party). A mismatch is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`: the signature verifies, but not for the requester the body names. An Exchange applies this rule to every request the agent signed, exactly as a Broker applies it on `BrokerService.ExecuteTransaction`.
+- **Direct request.** The agent's own signature arrives because the agent sent the request itself. The verifier resolves the key from the covered `Signature-Agent` member, as above, never from `requester.domain`. It then **MUST** require `requester.domain` to name that same directory: the host of the origin that member names, compared by the request-recipient identity rule (the shape check first, then case-folded, an absent port the same as `:443`, a subdomain a different party). A mismatch is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`: the signature verifies, but not for the requester the body names. A Broker applies this rule to every request it receives. An Exchange applies it to every request whose signer it does not admit as a Broker; a mismatch from a signer it does admit is a relayed request, one of the two cases below.
 - **Purchase relayed through a Broker.** `BrokerService.ExecuteTransaction` re-packages the purchase, so the request signature and the covered `Signature-Agent` member belong to the Broker. They say only that the call comes from the Broker; they sign no purchase. The Exchange **MUST** verify each item's `AgentAcceptance`, and the `AgentRequestAcceptance`, against the Ed25519 keys currently valid in the directory `requester.domain` names, never against the Broker's key. Those acceptances are the only agent signatures the Exchange sees (see [Projected execute requests](#projected-execute-requests)).
 - **Broker-led discovery.** A `ResourceQuery` the Broker originated carries no agent signature, so nothing on that leg authenticates `requester.domain`: it is the Broker's statement, under the Broker's own signature, of whom it queries for.
 
 `requester.id` plays no part in any of this. It is a label the agent chooses, covered by the acceptance signatures so a relay cannot rewrite it, and still only what the agent says.
 
+### Direct and relayed requests
+
+Agents and Brokers call the same `ExchangeService` RPCs, and no field marks a request as relayed. On the two requests that name a requester, `ResourceQuery` and `TransactionRequest`, an Exchange tells a direct request from a relayed one by comparing `requester.domain` with the host of the directory the verified signature's covered `Signature-Agent` member names, by the request-recipient identity rule:
+
+| `requester.domain` and the signer's directory host | The request is | The Exchange |
+|---|---|---|
+| Equal | Direct: the signer is the requester | Applies the direct-request rule above |
+| Different, and the Exchange admits the signer as a Broker | Relayed: a Broker authored it for that requester | Applies the relayed rules above. On discovery `requester.domain` is the Broker's statement of whom it queries for; on a purchase the agent's acceptances are verified against the directory it names |
+| Different, and the Exchange does not admit the signer | Not acceptable | Refuses it as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID` |
+
+Which Brokers an Exchange admits is the Exchange's own policy, for example the Brokers registered with it, just as which Exchanges a Broker routes to is the Broker's. Nothing the sender states admits it: a Broker's manifest declares `ROLE_BROKER`, and `requester.type` describes the requester, but both are the sender's own statements, so neither decides admission. A Broker is never itself relayed to, so every request a Broker receives is direct, and a mismatched requester there is always refused.
+
 ### The WBA Directory Endpoint
 
 Signing keys are published in a dedicated Web Bot Auth key directory at `/.well-known/http-message-signatures-directory`, separate from the role manifest at `/.well-known/fora.json`. It is served over https, answers `200` with no redirect, and uses the media type `application/http-message-signatures-directory+json`. The body is a JWK Set: a `keys` array of Ed25519 JWKs plus an optional `revocation_url`. Each key is identified by its RFC 7638 thumbprint (the value carried as the RFC 9421 `keyid`), so the directory carries no `kid` labels. Each key carries `alg` `EdDSA`, the JOSE name, which deliberately differs from WG-00 §5.5.1 (see [Key Directory](#key-directory)). The response is signed by each key it lists. Every FORA participant — agent, exchange, broker, publisher — serves one. See [Key Directory](#key-directory) for the full rules.
@@ -320,7 +332,7 @@ The Exchange:
 4. Verifies each signature independently against its own covered components and its own key, and authenticates the caller as the party that signed the request: the agent on a direct call, the Broker on a request the Broker sent. Where a party forwarded unchanged and covered an earlier signature, it also confirms that coverage
 5. On an execute request, verifies each item's `AgentAcceptance` against the agent's registered key, as above
 
-Verifying a signature proves which party sent the request. Whether that party may send to this Exchange at all is the Exchange's own policy: an Exchange MAY accept requests from a Broker only when the Broker is registered with it.
+Verifying a signature proves which party sent the request. Whether that party may act for another requester is the Exchange's own admission policy, for example the Brokers registered with it: a request whose `requester.domain` names a directory other than the signer's is processed only from a Broker the Exchange admits, and is otherwise refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID` (see [Direct and relayed requests](#direct-and-relayed-requests)).
 
 Neither Broker RPC forwards a request. `BrokerService.Resolve` and `BrokerService.ExecuteTransaction` terminate at the Broker, which originates its own discovery queries and re-packages a purchase into one new request per Exchange, each signed by the Broker alone. See [Projected execute requests](#projected-execute-requests).
 
@@ -710,7 +722,7 @@ Every party publishes its keys in **one** place — its WBA directory at `{domai
 | Party | Key Endpoint (WBA directory) | Role (in `fora.json`) |
 |---|---|---|
 | Agent / Requester | `{domain}/.well-known/http-message-signatures-directory` | `ROLE_AGENT` |
-| Intermediary | `{domain}/.well-known/http-message-signatures-directory` | `ROLE_AGENT` |
+| Broker | `{domain}/.well-known/http-message-signatures-directory` | `ROLE_BROKER` (describes the document; an Exchange admits a Broker by its own policy, never by this role) |
 | Exchange | `{domain}/.well-known/http-message-signatures-directory` | `ROLE_EXCHANGE` |
 | Delegation Issuer (principal / resource owner) | `{domain}/.well-known/http-message-signatures-directory` | `ROLE_AGENT` (key signing delegation JWTs) |
 
diff --git a/website/src/content/docs/protocol/exchange-manifest.mdx b/website/src/content/docs/protocol/exchange-manifest.mdx
index 1ae23e9a..3dc20ae0 100644
--- a/website/src/content/docs/protocol/exchange-manifest.mdx
+++ b/website/src/content/docs/protocol/exchange-manifest.mdx
@@ -320,7 +320,8 @@ FORA defines **one** well-known file. Every participant serves a `WellKnownManif
 |---|---|---|
 | `ROLE_PUBLISHER` | Provider | Who is authorized to sell my content (signing keys live in my WBA directory) |
 | `ROLE_EXCHANGE` | Exchange | My endpoints, capabilities, and accepted verifiers (offer-signing keys live in my WBA directory) |
-| `ROLE_AGENT` | Agent / Broker | My role marker (my Ed25519 request-signing key lives in my WBA directory) |
+| `ROLE_AGENT` | Agent | My role marker (my Ed25519 request-signing key lives in my WBA directory) |
+| `ROLE_BROKER` | Broker | My role marker (my Ed25519 request-signing key lives in my WBA directory). It describes the document: an Exchange admits a Broker by its own policy, never by this role |
 
 A verification vendor has no dedicated role — it publishes under its operator's role (`ROLE_PUBLISHER` when self-attesting, `ROLE_EXCHANGE` for a standalone vendor); its keys go in its WBA directory and its claims schema in the manifest's `ext["fora.attestation.claims_schema"]`.
 
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 004c89c6..25752107 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -5,7 +5,7 @@ description: "The four Exchange RPCs that form the core FORA protocol: DiscoverR
 
 ## The Exchange Protocol
 
-The Exchange exposes four RPCs. This is the core protocol -- everything else is built on top of it. Both agents and Brokers are clients of the same Exchange interface. The Exchange does not know or care whether the request came from a Broker or directly from an agent.
+The Exchange exposes four RPCs. This is the core protocol -- everything else is built on top of it. Both agents and Brokers are clients of the same Exchange interface, with the same RPCs and the same wire. An Exchange tells a relayed request from a direct one by comparing `requester.domain` with the signer's directory, and acts on a relayed one only from a Broker it admits; see [Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests).
 
 ```
 With Broker (multi-exchange, budget control, reporting):
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 75cac621..ee756e90 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -448,6 +448,29 @@ Docs: the authentication page's Requester table and a new "Requester domain and
 directory" section, the projected-execute section, the transaction-flow page, the
 reference page and the Exchange request-flow example state the same rules.
 
+**An Exchange tells a relayed request from a direct one (a new receiver rule; no wire
+change).** Agents and Brokers call the same `ExchangeService` RPCs, and `Requester.domain`
+had one rule on a direct request and another on a request a Broker authored, with nothing
+saying how an Exchange tells them apart; the file header said the Exchange does not
+distinguish. The file header gains "Direct and relayed requests", the one statement of
+the rule. On `ResourceQuery` and `TransactionRequest`, an Exchange compares
+`Requester.domain` with the host of the directory the verified signature's covered
+`Signature-Agent` member names, by the request-recipient identity rule. Equal is a direct
+request, under the direct rule. Different is a relayed request, which the Exchange acts on
+only when it admits the signer as a Broker, by its own policy (for example, the Brokers
+registered with it), and otherwise refuses as `unauthenticated` with
+`request_auth_failure` `SIGNATURE_INVALID`. No field marks a relay, and neither
+`WellKnownManifest.role` nor `Requester.type` admits a Broker: both are the sender's own
+statements. A Broker is never relayed to, so a mismatched requester at a Broker is always
+refused. An Exchange that accepts relayed requests needs an admitted-Broker policy. The
+`Role` values gain comments: a Broker's manifest declares `ROLE_BROKER`, which describes
+the document and admits nothing.
+
+Docs: the authentication page gains "Direct and relayed requests", and its key table lists
+a Broker under `ROLE_BROKER`. The transaction-flow, production-architecture, proto-fora,
+Broker overview, exchange-manifest, request-flows and threat-model pages state the rule
+or link to it, and no page gives a Broker `ROLE_AGENT` any more.
+
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
 Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 583de910..58e5b13a 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -28,7 +28,7 @@ Two HTTP response headers are part of the contract without being in any message.
 
 ### ExchangeService
 
-The core protocol. Both AI agents and Brokers are valid clients. Every Exchange implements all of its transaction RPCs, `DisputeTransaction` included.
+The core protocol. Both AI agents and Brokers are valid clients; an Exchange tells their requests apart as [Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests) states. Every Exchange implements all of its transaction RPCs, `DisputeTransaction` included.
 
 `ExecuteTransaction` answers every per-item denial in the body: an item the Exchange denies carries `TransactionResultItem.denial_reason` in a successful response, whatever the item count. A non-OK error carrying `ErrorDetail.transaction_denial` is used only when the Exchange refuses the whole request and decides no item.
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index bac85e61..57e6771d 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -261,7 +261,7 @@ Line 3: Legal/contractual enforcement
 FORA's Broker never forwards an agent's request unchanged: it originates discovery queries and re-packages purchases, and signs each alone. A purchase through a Broker is covered by T-BRK-1 and T-BRK-2.
 
 **Attack**: Attacker claims to be a trusted Broker, or another agent, to gain access or inject misleading provenance — or, where a third party forwards a request unchanged and signs it again, inserts, reorders or drops a signature.
-**Countermeasure (protocol)**: **Every sender signs its own request (RFC 9421, Ed25519).** A Broker originates discovery queries and re-packages execute requests, and signs each alone with its own key, so it cannot claim to be another Broker: the Exchange verifies that signature against the key in the directory the Broker's own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, the key identified by its RFC 7638 thumbprint, the RFC 9421 `keyid`). The agent's identity and consent on a purchase cannot be forged or moved onto another request, because they are the `AgentAcceptance` signed into the body over the offer signature, requester and idempotency key. Where a party forwards a request unchanged and covers the signature before it, a forged, reordered, dropped or inserted hop breaks a later signature and the request is rejected. See [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). The refusal's typed reason (`RequestAuthFailureReason`) is deliberately coarse — missing, invalid or stale — so it never tells a forger which check its request failed or how far it got.
+**Countermeasure (protocol)**: **Every sender signs its own request (RFC 9421, Ed25519).** A Broker originates discovery queries and re-packages execute requests, and signs each alone with its own key, so it cannot claim to be another Broker: the Exchange verifies that signature against the key in the directory the Broker's own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, the key identified by its RFC 7638 thumbprint, the RFC 9421 `keyid`). The agent's identity and consent on a purchase cannot be forged or moved onto another request, because they are the `AgentAcceptance` signed into the body over the offer signature, requester and idempotency key. Where a party forwards a request unchanged and covers the signature before it, a forged, reordered, dropped or inserted hop breaks a later signature and the request is rejected. See [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). A signer cannot act for another requester unless the Exchange admits it as a Broker: a request whose `requester.domain` names a directory other than the signer's is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID` from any signer the Exchange does not admit, and nothing the sender states, such as its manifest role, admits it (see [Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests)). The refusal's typed reason (`RequestAuthFailureReason`) is deliberately coarse — missing, invalid or stale — so it never tells a forger which check its request failed or how far it got.
 
 ### T-DEL-5: Scope pollution
 

From 40b40d7f6978a7582bcebe4af0804036acaced85 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 14:50:27 +0200
Subject: [PATCH 146/164] Make the docs' request samples sign as their
 requester and read fields that exist

Several samples could not work as written. The proof-of-concept curl sent a
bare Signature-Agent value, no Content-Digest and no Authorization, and posted
its body with --data, which strips newlines from the file the digest covers.
Client samples on the walkthrough-v1, catalog-sources and Broker
selection-engine pages named no signing directory, so their signers refuse to
sign; the selection-engine pool did not sign at all. The fetch-flow sample read
UpstreamRefusal.exchange, renamed to party, and the for-AI-agents quota sample
read fields SubscriptionQuotaInfo does not have.

The curl now sends the whole Web Bot Auth header set with --data-binary and
points at the single-hop example. The client samples set WithSignatureAgent,
signatureAgent or signing_transport_for to the requester's own directory, and
the Broker pool wraps its transport in core.NewSigningTransport with the
Broker's directory. The budget-reporting page names the option among the
elided ones, and the scenario-walkthrough and production-architecture pages
list the full covered set. Both changelogs record it.
---
 proto/CHANGELOG.md                              | 12 ++++++++++++
 .../architecture/production-architecture.mdx    |  2 +-
 .../components/agent-sdk/budget-reporting.mdx   |  2 +-
 .../docs/components/agent-sdk/fetch-flow.mdx    |  2 +-
 .../docs/components/broker/selection-engine.mdx | 17 +++++++++++------
 .../components/content-ingestion/sources.mdx    | 14 +++++++++++---
 .../docs/getting-started/for-ai-agents.mdx      | 15 +++++++++++----
 .../docs/getting-started/poc-walkthrough.mdx    | 14 +++++++++++---
 .../docs/protocol/scenario-walkthrough.mdx      |  8 ++++++--
 .../content/docs/protocol/walkthrough-v1.mdx    |  2 ++
 .../src/content/docs/reference/changelog.mdx    | 12 ++++++++++++
 11 files changed, 79 insertions(+), 21 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 9be4ef59..916f31d5 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -127,6 +127,18 @@ The for-providers page says a publisher may always push for its own domain, and
 listed contributors besides. The identity overview says the service signs an acceptance
 with the agent's own custodied key.
 
+**Docs: request samples sign as their requester, and read fields that exist (docs
+only).** The proof-of-concept curl sends the whole Web Bot Auth header set:
+`Content-Digest`, an empty `Authorization`, a `Signature-Agent` dictionary member and a
+`Signature-Input` that covers it. It also sends the body's exact bytes, which the digest
+covers. The client samples on the walkthrough-v1, catalog-sources and Broker
+selection-engine pages name the signer's key directory (`WithSignatureAgent`,
+`signatureAgent`, `signing_transport_for`), so the Broker's connection pool signs alone,
+and the budget-reporting page lists that option among the elided ones. The fetch-flow
+page reads `UpstreamRefusal.party`, the for-AI-agents quota sample uses the fields
+`SubscriptionQuotaInfo` has, and the scenario-walkthrough and production-architecture
+pages list the full covered set.
+
 **Term scopes are matched against the scopes in the requester's signed request
 (comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's
 delegation grant covers its scopes, and the Restriction header said term visibility is
diff --git a/website/src/content/docs/architecture/production-architecture.mdx b/website/src/content/docs/architecture/production-architecture.mdx
index 8ebe2881..291ef268 100644
--- a/website/src/content/docs/architecture/production-architecture.mdx
+++ b/website/src/content/docs/architecture/production-architecture.mdx
@@ -52,7 +52,7 @@ Every party in the protocol authenticates via Ed25519 key pairs. Each party anno
 
 | Party | Key Announcement | Signs | Verifier |
 |---|---|---|---|
-| **Requester** (Agent or other client) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`) | RFC 9421 HTTP Message Signature (Ed25519) over the HTTP request (`@method`, `@target-uri`, `content-digest` — request body bound via `content-digest`) | Exchange |
+| **Requester** (Agent or other client) | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_AGENT`) | RFC 9421 HTTP Message Signature (Ed25519) under the Web Bot Auth profile, covering `@method`, `@target-uri`, `content-digest` (the request body), `authorization` (even when empty) and its own `"signature-agent";key=…` member | Exchange |
 | **Broker** | signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory`; role manifest at `{domain}/.well-known/fora.json` (`role=ROLE_BROKER`, same format; the role describes the document, and an Exchange admits a Broker by its own policy, never by the role) | a Broker originates its own discovery queries and re-packages execute requests, signing each alone with its own RFC 9421 HTTP Message Signature (Ed25519), covering its own request and only its own `Signature-Agent` member; on a purchase the agent's identity and consent ride in the body as `AgentAcceptance` | Exchange |
 | **Exchange** | `{domain}/.well-known/fora.json` (`role=ROLE_EXCHANGE`); offer-signing keys in the WBA directory at `{domain}/.well-known/http-message-signatures-directory` | `exchange_signature` on every Offer | Agent, Broker |
 | **Provider** | `{domain}/.well-known/fora.json` (`role=ROLE_PUBLISHER`) | Authorization declaration (not signatures) | Agent, Exchange |
diff --git a/website/src/content/docs/components/agent-sdk/budget-reporting.mdx b/website/src/content/docs/components/agent-sdk/budget-reporting.mdx
index e60c0644..d1b4e6c7 100644
--- a/website/src/content/docs/components/agent-sdk/budget-reporting.mdx
+++ b/website/src/content/docs/components/agent-sdk/budget-reporting.mdx
@@ -278,7 +278,7 @@ RPC on its way out and back:
 ```go
 client := connect.NewClient(baseURL,
     connect.WithInterceptors(loggingInterceptor),
-    // ... signer, requester, keys, endpoint resolver
+    // ... WithSigner, WithSignatureAgent, WithRequester, the keys, the endpoint resolver
 )
 ```
 
diff --git a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
index 32948709..e96aa708 100644
--- a/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
+++ b/website/src/content/docs/components/agent-sdk/fetch-flow.mdx
@@ -273,7 +273,7 @@ if err != nil {
 for _, item := range resp.GetItems() {
     if r := item.GetRefusal(); r != nil {
         // That Exchange refused the whole sub-request; the other items are unaffected.
-        log.Printf("%s refused %s: %s", r.GetExchange(), item.GetOfferId(), r.GetCode())
+        log.Printf("%s refused %s: %s", r.GetParty(), item.GetOfferId(), r.GetCode())
         continue
     }
     if item.DenialReason != nil {
diff --git a/website/src/content/docs/components/broker/selection-engine.mdx b/website/src/content/docs/components/broker/selection-engine.mdx
index eb9b13b8..95d4b73d 100644
--- a/website/src/content/docs/components/broker/selection-engine.mdx
+++ b/website/src/content/docs/components/broker/selection-engine.mdx
@@ -109,6 +109,7 @@ Pre-established HTTP/2 connections to each Exchange. Connect-Go clients are crea
 type ClientPool struct {
     mu      sync.RWMutex
     clients map[string]forav1connect.ExchangeServiceClient
+    signer  helpers.Signer // the Broker's own request-signing key
 }
 
 func (p *ClientPool) GetOrCreate(mp ExchangeEntry) forav1connect.ExchangeServiceClient {
@@ -127,13 +128,17 @@ func (p *ClientPool) GetOrCreate(mp ExchangeEntry) forav1connect.ExchangeService
         return c
     }
 
+    base := &http.Transport{
+        MaxIdleConnsPerHost: 10,
+        IdleConnTimeout:     90 * time.Second,
+        ForceAttemptHTTP2:   true,
+        TLSClientConfig:     &tls.Config{MinVersion: tls.VersionTLS13},
+    }
     httpClient := &http.Client{
-        Transport: &http.Transport{
-            MaxIdleConnsPerHost: 10,
-            IdleConnTimeout:    90 * time.Second,
-            ForceAttemptHTTP2:  true,
-            TLSClientConfig:   &tls.Config{MinVersion: tls.VersionTLS13},
-        },
+        // The Broker signs every request it sends alone, naming its own key
+        // directory in its Signature-Agent member.
+        Transport: core.NewSigningTransport(p.signer, base,
+            core.WithSignatureAgent("https://broker.example")),
         Timeout: 5 * time.Second, // connection-level timeout
     }
 
diff --git a/website/src/content/docs/components/content-ingestion/sources.mdx b/website/src/content/docs/components/content-ingestion/sources.mdx
index 4a76c77f..36fb80fb 100644
--- a/website/src/content/docs/components/content-ingestion/sources.mdx
+++ b/website/src/content/docs/components/content-ingestion/sources.mdx
@@ -261,7 +261,10 @@ The Exchange verifies the RFC 9421 signature against the caller's published Ed25
 The SDK carries the publisher role in all three languages: a catalog client that signs and sends the three CatalogService verbs, and the Exchange's own two validation tiers as a pre-check. The client is a separate constructor from the agent client because CatalogService is a separate address (the manifest's `catalog_endpoint`) and its caller holds a publisher's or contributor's key, identified by the request signature; the publisher chose the Exchange, so the origin is configuration.
 
 ```go
-client := connect.NewCatalogClient(catalogEndpoint, connect.WithSigner(contributorSigner))
+client := connect.NewCatalogClient(catalogEndpoint,
+    connect.WithSigner(contributorSigner),
+    connect.WithSignatureAgent("https://publisher.example"), // the signer's key directory
+)
 if v := helpers.ValidateResourceEntry(entry); !v.OK() {   // what the Exchange will say, before signing
     return fmt.Errorf("entry refused: %+v", v.Violations)
 }
@@ -275,7 +278,10 @@ resp, err := client.PushResources(ctx, &forav1.PushResourcesRequest{
 import { createCatalogClient } from "@fora-protocol/sdk/client";
 import { validateResourceEntry } from "@fora-protocol/sdk/licenseterm";
 
-const client = createCatalogClient(catalogEndpoint, { signer: contributorSigner });
+const client = createCatalogClient(catalogEndpoint, {
+  signer: contributorSigner,
+  signatureAgent: "https://publisher.example", // the signer's key directory
+});
 const verdict = validateResourceEntry(entry);
 if (!verdict.ok) throw new Error(JSON.stringify(verdict.violations));
 const resp = await client.pushResources({
@@ -285,9 +291,11 @@ const resp = await client.pushResources({
 ```
 
 ```python
-from fora_sdk import validate_resource_entry
+from fora_sdk import signing_transport_for, validate_resource_entry
 from fora_sdk.client import CatalogClient, ClientConfig
 
+# Signs as contributor_key, naming its key directory in Signature-Agent.
+contributor_signer = signing_transport_for(contributor_key, "https://publisher.example")
 verdict = validate_resource_entry(entry)
 if not verdict.ok:
     raise ValueError(verdict.violations)
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 3c71c599..ab02d49b 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -165,10 +165,17 @@ When your agent holds a subscription, offers and transaction responses include `
 
 ```go
 // After a transaction, check remaining quota
-resp, _ := client.Execute(ctx, offer)
-for _, q := range resp.SubscriptionQuota {
-    fmt.Printf("Scope %s: %d/%d remaining (resets %s)\n",
-        q.Scope, q.Remaining, q.Limit, q.ResetsAt)
+resp, err := client.Execute(ctx, offer)
+if err != nil {
+    return err
+}
+for _, q := range resp.GetSubscriptionQuota() {
+    resets := "not stated"
+    if t := q.GetResetsAt(); t != nil {
+        resets = t.AsTime().Format(time.RFC3339)
+    }
+    fmt.Printf("Subscription %s: %d of %d %s remaining (resets %s)\n",
+        q.GetSubscriptionId(), q.GetQuotaRemaining(), q.GetQuotaLimit(), q.GetUnit(), resets)
 }
 ```
 
diff --git a/website/src/content/docs/getting-started/poc-walkthrough.mdx b/website/src/content/docs/getting-started/poc-walkthrough.mdx
index 7f3a9278..93d257f3 100644
--- a/website/src/content/docs/getting-started/poc-walkthrough.mdx
+++ b/website/src/content/docs/getting-started/poc-walkthrough.mdx
@@ -225,13 +225,21 @@ The tools above are ergonomics. The wire is [Connect](https://connectrpc.com/) o
 EX=https://exchange.demo.fora-protocol.org
 
 # Discovery — requires a signed request; see Authentication for the signature base.
+# The digest and signature are computed over query.json's exact bytes, so send them
+# unchanged with --data-binary. 'Authorization;' sends the header empty; it is covered
+# even when empty.
 curl -sS "$EX/fora.v1.ExchangeService/DiscoverResources" \
   -H 'Content-Type: application/json' \
-  -H 'Signature-Agent: https://agent-duci2vuk.mcp.demo.fora-protocol.org' \
-  -H 'Signature-Input: ...' -H 'Signature: ...' \
-  --data @query.json
+  -H 'Content-Digest: sha-256=:<base64 SHA-256 of query.json>:' \
+  -H 'Authorization;' \
+  -H 'Signature-Agent: sig1="https://agent-duci2vuk.mcp.demo.fora-protocol.org"' \
+  -H 'Signature-Input: sig1=("@method" "@target-uri" "content-digest" "authorization" "signature-agent";key="sig1");created=<now>;expires=<now+300>;keyid="<key thumbprint>";alg="ed25519";nonce="<random>";tag="web-bot-auth"' \
+  -H 'Signature: sig1=:<Ed25519 signature over the signature base>:' \
+  --data-binary @query.json
 ```
 
+The headers have the shape of the [Single-Hop Example](/protocol/authentication/#single-hop-example): `Signature-Agent` is a dictionary whose `sig1` member names the agent's https origin, the same host as `requester.domain`, and the signature covers that member.
+
 with `query.json`:
 
 {/* fora-validate: ResourceQuery */}
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 12530129..8e899d8d 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -228,8 +228,12 @@ Step 2: ExchangeRegistry lookup
 Step 3: Prepare RFC 9421 HTTP Message Signature (alg=ed25519)
   - requester.id = "claude-agent-001"
   - requester.domain = "claude.ai"
-  - Sign the HTTP request per RFC 9421: the SDK adds Signature and
-    Signature-Input headers covering the request method, path, and body digest
+  - Sign the HTTP request per RFC 9421 under the Web Bot Auth profile: the
+    SDK adds Content-Digest, an empty Authorization, Signature-Agent
+    (sig1="https://claude.ai"), Signature-Input and Signature. The signature
+    covers @method, @target-uri, content-digest, authorization and
+    "signature-agent";key="sig1", with created, expires, keyid, nonce and
+    tag="web-bot-auth"
   - Authentication is asymmetric:
     the agent signs with its Ed25519 private key (never leaves the agent),
     the Exchange verifies with the public key fetched from the WBA
diff --git a/website/src/content/docs/protocol/walkthrough-v1.mdx b/website/src/content/docs/protocol/walkthrough-v1.mdx
index 81b215e9..c24764cb 100644
--- a/website/src/content/docs/protocol/walkthrough-v1.mdx
+++ b/website/src/content/docs/protocol/walkthrough-v1.mdx
@@ -603,6 +603,8 @@ requester := &forav1.Requester{
 
 client := connect.NewClient(baseURL,
     connect.WithSigner(signer),
+    // The signing directory: its host is the requester's domain.
+    connect.WithSignatureAgent("https://hedgefund.com"),
     connect.WithAgentKey(agentPublic),
     connect.WithRequester(requester),
     connect.WithOfferKey(exchangePublic),
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index ee756e90..417ba64f 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -133,6 +133,18 @@ The for-providers page says a publisher may always push for its own domain, and
 listed contributors besides. The identity overview says the service signs an acceptance
 with the agent's own custodied key.
 
+**Docs: request samples sign as their requester, and read fields that exist (docs
+only).** The proof-of-concept curl sends the whole Web Bot Auth header set:
+`Content-Digest`, an empty `Authorization`, a `Signature-Agent` dictionary member and a
+`Signature-Input` that covers it. It also sends the body's exact bytes, which the digest
+covers. The client samples on the walkthrough-v1, catalog-sources and Broker
+selection-engine pages name the signer's key directory (`WithSignatureAgent`,
+`signatureAgent`, `signing_transport_for`), so the Broker's connection pool signs alone,
+and the budget-reporting page lists that option among the elided ones. The fetch-flow
+page reads `UpstreamRefusal.party`, the for-AI-agents quota sample uses the fields
+`SubscriptionQuotaInfo` has, and the scenario-walkthrough and production-architecture
+pages list the full covered set.
+
 **Term scopes are matched against the scopes in the requester's signed request
 (comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's
 delegation grant covers its scopes, and the Restriction header said term visibility is

From b9d5f444890e12b581fac5a55c8c9bf2a3da1a19 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 14:53:24 +0200
Subject: [PATCH 147/164] Rewrite the operator verification guidance as one
 ordered checklist that links to the protocol

The for-Exchange-operators page said the Requester carries an Ed25519
signature, gave a key directory a role, and split request verification into a
signature section and a forwarding section that missed the hop-count order,
the refusal shapes, replay, signer-scoped revocation and how to tell a direct
request from a relayed one.

It is now one ordered checklist, each step linking to the authentication page
rather than restating it: count the signatures before verifying any, verify
each under the Web Bot Auth profile with its typed refusal and
Accept-Signature, refuse a replay, check revocation against the signer's own
directory, tell a direct request from a relayed one and act on a relay only
from an admitted Broker, verify the agent's acceptances on a purchase and deny
a non-projection in the body, and read a Broker-led query's requester as the
Broker's statement. The denial list gains DENIAL_REASON_RELAY_NOT_ACCEPTED, and
the for-AI-agents page drops the same key-directory role slip. Both changelogs
record it.
---
 proto/CHANGELOG.md                            | 13 +++++--
 .../docs/getting-started/for-ai-agents.mdx    |  2 +-
 .../for-exchange-operators.mdx                | 34 +++++++++----------
 .../src/content/docs/reference/changelog.mdx  | 13 +++++--
 4 files changed, 37 insertions(+), 25 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 916f31d5..ed6f4ff1 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -127,8 +127,8 @@ The for-providers page says a publisher may always push for its own domain, and
 listed contributors besides. The identity overview says the service signs an acceptance
 with the agent's own custodied key.
 
-**Docs: request samples sign as their requester, and read fields that exist (docs
-only).** The proof-of-concept curl sends the whole Web Bot Auth header set:
+**Docs: request samples sign as their requester and read fields that exist, and the
+operator checklist follows the protocol (docs only).** The proof-of-concept curl sends the whole Web Bot Auth header set:
 `Content-Digest`, an empty `Authorization`, a `Signature-Agent` dictionary member and a
 `Signature-Input` that covers it. It also sends the body's exact bytes, which the digest
 covers. The client samples on the walkthrough-v1, catalog-sources and Broker
@@ -137,7 +137,14 @@ selection-engine pages name the signer's key directory (`WithSignatureAgent`,
 and the budget-reporting page lists that option among the elided ones. The fetch-flow
 page reads `UpstreamRefusal.party`, the for-AI-agents quota sample uses the fields
 `SubscriptionQuotaInfo` has, and the scenario-walkthrough and production-architecture
-pages list the full covered set.
+pages list the full covered set. The for-Exchange-operators page replaces its signature
+and forwarding sections with one ordered checklist that links to the authentication page:
+count the signatures, verify each under the profile, refuse a replay, check revocation
+against the signer's own directory, tell a direct request from a relayed one, verify the
+agent's acceptances, and read a Broker-led query's requester as the Broker's statement.
+It no longer says the `Requester` carries a signature or that a key directory carries a
+role, and its denial list gains `DENIAL_REASON_RELAY_NOT_ACCEPTED`. The for-AI-agents
+page drops the same role slip.
 
 **Term scopes are matched against the scopes in the requester's signed request
 (comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index ab02d49b..7deef434 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -125,7 +125,7 @@ The `Requester` message is the identity envelope on every `ResourceQuery` and `T
 | `type` | What kind of entity you are (see below) | `REQUESTER_TYPE_AGENT` |
 | `scopes` | What you can access | `["academic:*", "credit:read"]` |
 
-The `Requester` carries **no** signature field. The SDK signs every request with your Ed25519 private key as an RFC 9421 HTTP Message Signature (in the HTTP headers, covering the whole request). The Exchange verifies it against the public key published in your WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`).
+The `Requester` carries **no** signature field. The SDK signs every request with your Ed25519 private key as an RFC 9421 HTTP Message Signature (in the HTTP headers, covering the whole request). The Exchange verifies it against the public key published in your WBA directory (the JWK Set at `{domain}/.well-known/http-message-signatures-directory`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`).
 
 ### RequesterType
 
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index d1365270..12359405 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -140,23 +140,24 @@ You don't need bilateral deals with every AI company. Any agent that speaks the
 
 ## Requester Verification
 
-Every incoming request carries a `Requester` message with an Ed25519 signature. Your Exchange MUST verify this identity before processing any query or transaction.
+The `Requester` message carries no signature: it states who is asking, and the RFC 9421 HTTP Message Signature on the request proves who sent it. Your Exchange MUST verify every request before acting on it. The rules are on the [Authentication](/protocol/authentication/) page; apply them in this order, and reject a request that fails any of them, with no fallback and no degraded mode:
 
-### Signature Verification
+1. **Count the signatures first.** Before you verify any, refuse a request carrying more signatures than your `WellKnownManifest.max_intermediary_hops` with `resource_exhausted` (HTTP 429) and no typed reason. Every signature counts, whether or not it covers another. See [Verification at the Exchange](/protocol/authentication/#verification-at-the-exchange).
+2. **Verify each signature under the Web Bot Auth profile.** Resolve its `keyid`, the key's RFC 7638 thumbprint, in the key directory its own covered `Signature-Agent` member names (`{origin}/.well-known/http-message-signatures-directory`), never from `Requester.domain`. Check the profile parameters, the four components a FORA RPC covers (`@method`, `@target-uri`, `content-digest`, `authorization`) and the `Content-Digest` of the body. Refuse a failure as `unauthenticated` with `request_auth_failure`: `SIGNATURE_MISSING` when no signature parses, `SIGNATURE_INVALID` when one does not verify, `SIGNATURE_STALE` outside its `created`/`expires` window. When a required component is missing, also answer with an `Accept-Signature` field listing the components you require, so the client can fix its request. See [Signature Verification](/protocol/authentication/#signature-verification) and [The Web Bot Auth Profile](/protocol/authentication/#the-web-bot-auth-profile).
+3. **Refuse a replay.** A signature you have already accepted is refused as `SIGNATURE_STALE`. See [Replay protection](/protocol/authentication/#replay-protection).
+4. **Check revocation against the signer's own directory only.** A key is revoked when the revocation list its own directory names lists it. No other party's list can revoke it, even one that names its thumbprint. See [Whose list revokes whose key](/protocol/authentication/#whose-list-revokes-whose-key).
+5. **Tell a direct request from a relayed one.** On `ResourceQuery` and `TransactionRequest`, compare `Requester.domain` with the host of the directory the covered `Signature-Agent` member names, by the request-recipient identity rule. Equal is a direct request from the requester itself. Different is a request a Broker authored for that requester, and you act on it only when you admit the signer as a Broker, by your own policy (for example, the Brokers registered with you); otherwise refuse it as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`. A Broker never forwards an agent's request unchanged: it signs the requests it authors alone. See [Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests).
+6. **On a purchase, verify the agent's acceptances.** Verify each item's `AgentAcceptance`, and the request's `AgentRequestAcceptance`, against the Ed25519 keys currently valid in the directory `Requester.domain` names, never against a Broker's key. On a relayed purchase these are the agent's identity and consent, the acceptance key is what the delivery URL is bound to, and a delegation's `cnf.jkt` is checked against it. A sub-request that is not the exact in-order projection of the set the agent signed is denied in the body, every item with `DENIAL_REASON_SIGNATURE_INVALID`. See [Projected execute requests](/protocol/authentication/#projected-execute-requests).
+7. **On Broker-led discovery, `Requester.domain` is the Broker's statement.** A `ResourceQuery` a Broker originated carries no agent signature, so nothing authenticates the field there: it says whom the Broker queries for, under the Broker's own signature.
 
-1. Read the `Signature-Agent` member the request signature covers. It names the requester's origin; the self-asserted `Requester.domain` is never used to find keys
-2. Fetch the requester's public key from its key directory (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
-3. Verify the RFC 9421 HTTP Message Signature (alg=ed25519) on the request. It follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) and covers `@method`, `@target-uri`, `content-digest`, `authorization` and the `Signature-Agent` member, so the request body (the serialized `Requester`/query) is bound via `content-digest`. There is no in-message body-tuple signature.
-4. Reject the request if verification fails — no fallback, no degraded mode
-
-Key caching is recommended. Fetch keys with a TTL and re-fetch periodically to handle key rotation without per-request overhead.
+Cache directories and keys with a TTL and re-fetch them to pick up rotation, without a fetch per request (see [Caching Contract](/protocol/authentication/#caching-contract)).
 
 ### Delegation Verification
 
 When a request includes a `Delegation` message (nested inside `Requester`), your Exchange verifies the JWT chain:
 
 1. Verify the JWT chain from the base64url `token` in the `Delegation` message
-2. Verify the authority JWT is signed by the Ed25519 key published in the principal's WBA directory (the JWK Set at `{principal_domain}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`)
+2. Verify the authority JWT is signed by the Ed25519 key published in the principal's WBA directory (the JWK Set at `{principal_domain}/.well-known/http-message-signatures-directory`)
 3. Verify each child delegation JWT's signature (each signed by the key its parent named in `cnf`)
 4. **Verify holder binding** — the key that signed the request (RFC 9421) MUST equal the key named in `cnf` (`cnf.jkt`); reject with `DENIAL_REASON_DELEGATION_INVALID` if they differ. This is mandatory: it is what makes a stolen token unusable, so a token possessed without its signing key grants nothing.
 5. Evaluate the grant's registered claims — scope restrictions, spend caps (`max_spend_cents`), access caps (`max_accesses`) — and confirm they cover the request (URI access is gated through scopes). For the JWT this means checking the registered claims along the `cnf` chain.
@@ -165,15 +166,6 @@ When a request includes a `Delegation` message (nested inside `Requester`), your
 
 This verification is entirely offline — no callback to the principal is required.
 
-### Forwarding Verification
-
-A request from a Broker is the Broker's own: the Broker originates discovery queries and re-packages execute requests, and signs each alone, covering its own request and only its own `Signature-Agent` member. It never forwards an agent's request unchanged. The rules are in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding):
-
-1. Verify the request signature: fetch the signer's public key from the directory its own `Signature-Agent` member names (the JWK Set at `{origin}/.well-known/http-message-signatures-directory`, `role=ROLE_AGENT`), identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and authenticate the caller as that party
-2. On an execute request, verify each item's `AgentAcceptance` in the body against the agent's registered key, resolved from `Requester.domain`; on a request a Broker re-packaged, that is the agent's identity and consent, its key gives the delivery-URL binding, and a delegation's `cnf.jkt` is checked against it
-3. Where a party forwarded a request unchanged and covered an earlier signature, verify that signature and the coverage too
-4. Enforce `max_intermediary_hops` by signature count, before verifying any signature — refuse a request carrying more signatures than your published limit with `resource_exhausted` (HTTP 429) and no typed reason
-
 ### Scope-Based Catalog Filtering
 
 After verifying identity and delegation, filter your catalog by the requester's declared scopes. Only resources matching the scopes are returned in the `DiscoverResources` response.
@@ -206,6 +198,12 @@ And the entitlement/subscription family, for subscription-gated offers:
 | `DENIAL_REASON_SUBSCRIPTION_LAPSED` | The covering subscription contract has lapsed |
 | `DENIAL_REASON_ENTITLEMENT_NOT_GRANTED` | Subscription exists but no buyer-side grant ties this caller to it |
 
+And the relay reason, for a provider that does not accept purchases a Broker relays:
+
+| Denial Reason | When to Return |
+|---|---|
+| `DENIAL_REASON_RELAY_NOT_ACCEPTED` | The provider that sells this item's resource does not accept purchases relayed by a Broker. Decided per item by each offer's provider and answered in the body, never as a refusal of the whole sub-request; the agent can buy the offer directly |
+
 This is the identity/entitlement subset with operator guidance; the complete, authoritative `DenialReason` enum is rendered from the proto on the [proto reference](/reference/proto-fora/). For the full identity model specification — Requester fields, the JWT chain, scope format, and key management — see [Authentication](/protocol/authentication/).
 
 ## Attestation Verification
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 417ba64f..bf9fd278 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -133,8 +133,8 @@ The for-providers page says a publisher may always push for its own domain, and
 listed contributors besides. The identity overview says the service signs an acceptance
 with the agent's own custodied key.
 
-**Docs: request samples sign as their requester, and read fields that exist (docs
-only).** The proof-of-concept curl sends the whole Web Bot Auth header set:
+**Docs: request samples sign as their requester and read fields that exist, and the
+operator checklist follows the protocol (docs only).** The proof-of-concept curl sends the whole Web Bot Auth header set:
 `Content-Digest`, an empty `Authorization`, a `Signature-Agent` dictionary member and a
 `Signature-Input` that covers it. It also sends the body's exact bytes, which the digest
 covers. The client samples on the walkthrough-v1, catalog-sources and Broker
@@ -143,7 +143,14 @@ selection-engine pages name the signer's key directory (`WithSignatureAgent`,
 and the budget-reporting page lists that option among the elided ones. The fetch-flow
 page reads `UpstreamRefusal.party`, the for-AI-agents quota sample uses the fields
 `SubscriptionQuotaInfo` has, and the scenario-walkthrough and production-architecture
-pages list the full covered set.
+pages list the full covered set. The for-Exchange-operators page replaces its signature
+and forwarding sections with one ordered checklist that links to the authentication page:
+count the signatures, verify each under the profile, refuse a replay, check revocation
+against the signer's own directory, tell a direct request from a relayed one, verify the
+agent's acceptances, and read a Broker-led query's requester as the Broker's statement.
+It no longer says the `Requester` carries a signature or that a key directory carries a
+role, and its denial list gains `DENIAL_REASON_RELAY_NOT_ACCEPTED`. The for-AI-agents
+page drops the same role slip.
 
 **Term scopes are matched against the scopes in the requester's signed request
 (comments only).** `LicenseTerm.scopes` said the Exchange returns a term when the agent's

From f666e92633c4d49f3337606883a3ed6cdd419c2e Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Fri, 9 Oct 2026 15:02:36 +0200
Subject: [PATCH 148/164] List what breaks against v1.0.8 in the changelog

The Unreleased section described each change in its own entry, and several
entries labelled a behaviour change as comments only, so a reader upgrading
from v1.0.8 had to find the breaks one paragraph at a time.

Unreleased now opens with "Breaking against v1.0.8", grouped by who must act:
every party, Exchange operators, agents and other clients, publishers and
catalog contributors, Brokers, and SDK users. Each bullet gives the direction
of the break and the remedy, and each was checked against the v1.0.8 tree:
the signature hard cut, which also covers the delivery proof at the publisher
edge; reason values v1.0.8's Python and TypeScript models refuse, and the
request_auth_failure detail they drop; priced offer terms and non-positive
metered estimates; the one-item denial in the body; the admitted-Broker rule
for relayed requests; the hop cap counting every signature; three refusals
that changed shape; rules that stop applying; the required requester; paths
in RemoveResources; Broker-led discovery; and the SDK API changes. The
remaining entries follow under "Changes since v1.0.8".

The GetAccountStatus, catalog signature and idempotency entries are relabelled
as behaviour changes rather than comments only.
---
 proto/CHANGELOG.md                            | 117 +++++++++++++++++-
 .../src/content/docs/reference/changelog.mdx  | 117 +++++++++++++++++-
 2 files changed, 228 insertions(+), 6 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index ed6f4ff1..b2eee5cc 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -2,6 +2,115 @@
 
 ## Unreleased
 
+### Breaking against v1.0.8
+
+This release does not interoperate with v1.0.8 inside one deployment: the request
+signature changed in both directions, so every party of a deployment upgrades together.
+Each bullet names what breaks, in which direction, and what to do; the entries below give
+the detail.
+
+**Every party**
+
+- **Request signatures and key directories (a hard cut).** A v1.0.8 verifier does not read
+  the dictionary `Signature-Agent` this release sends. This release refuses the bare value
+  v1.0.8 sends, a key directory served as `application/jwk-set+json` or unsigned, and a
+  delivery proof at the publisher edge that is not a full Web Bot Auth signature. Upgrade
+  every signer, verifier, publisher edge and key directory together, and serve each
+  directory with its own media type, signed by every key it lists. See "Request signatures
+  and key directories follow the Web Bot Auth profile".
+- **Reason values added since v1.0.8.** `CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED`,
+  `DENIAL_REASON_RELAY_NOT_ACCEPTED`, and the `UNKNOWN_CRITICAL_EXTENSION` value of the
+  denial, catalog-rejection, usage-report, dispute, registration and domain-verification
+  reason families are new. The v1.0.8 Python and TypeScript SDKs check an answer against
+  generated models that do not list the new values, so they refuse a whole answer carrying
+  one, such as a purchase answer with one item denied as
+  `DENIAL_REASON_RELAY_NOT_ACCEPTED`. `ErrorDetail.request_auth_failure` is new as well;
+  those models drop it, so a v1.0.8 client sees a signature refusal's code with no typed
+  reason. Upgrade those clients.
+
+**Exchange operators**
+
+- **An offer carries its price once.** An offer whose term carries pricing is refused by a
+  validating receiver (`offer.terms.pricing_unset`) and by this release's offer signers and
+  verifiers; v1.0.8 accepted it. State the price in `Offer.pricing` only and leave the sold
+  term's pricing unset. A `PER_UNIT` offer whose `estimated_quantity` is zero or negative
+  is refused too (`offer.metered.estimate_positive`): omit the estimate or state a positive
+  one.
+- **A per-item denial is always in the body.** A denied one-item purchase is answered OK
+  with the item's `denial_reason`; v1.0.8 answered it with a non-OK error carrying
+  `transaction_denial`, which is now only for a refusal of the whole request. Answer
+  in the body; a client reads the body's `denial_reason` whatever the item count.
+- **A relayed request needs an admitted Broker.** A `ResourceQuery` or
+  `TransactionRequest` whose `requester.domain` is not the signer's directory is acted on
+  only when the Exchange admits the signer as a Broker, and is otherwise refused
+  `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`. A v1.0.8 Exchange
+  read a Broker-forwarded request's agent signature and took the Broker's key from a
+  configured key set; a Broker's request now carries the Broker's signature alone, with
+  its key in the directory it names. Decide which Brokers you admit, for example the ones
+  registered with you. See "An Exchange tells a relayed request from a direct one".
+- **The hop cap counts every signature.** `max_intermediary_hops` is the number of
+  signatures accepted, every one counted, and a request over it is refused with
+  `resource_exhausted` before any signature is verified. The Go guidance to configure one
+  more than you publish is gone: publish the count itself.
+- **Refusals that changed shape.** A catalog call whose signature fails is refused
+  `unauthenticated` with `request_auth_failure`, where v1.0.8 sent
+  `CATALOG_REJECTION_REASON_SIGNATURE_INVALID`. `GetAccountStatus` answers an agent with no
+  account `NOT_FOUND`, where a v1.0.8 Exchange could answer OK with an empty
+  `billing_ref`. The same idempotency key with a different request is refused
+  `already_exists`, where v1.0.8 replayed the stored result for any reuse of a key.
+- **Rules that stop applying.** `fora.admin.v1.ReportingPolicy.quantity_tolerance` is
+  ignored: never refuse a usage report for its quantity. The scope-shortfall and
+  restriction reasons deprecated in this release are never sent.
+
+**Agents and other clients**
+
+- **A query and a purchase name their requester.** `requester` is required on
+  `ResourceQuery`, `DiscoveryRequest` and `TransactionRequest`, and `Requester.id` is
+  required, 1 to 255 characters; v1.0.8 had neither rule. Name the requester, with an id
+  and with the host of your own key directory as its domain.
+- **Mint a new idempotency key for each distinct request**, since a reused key with a
+  different request is refused, and read a one-item denial from the body, as above.
+
+**Publishers and catalog contributors**
+
+- **`RemoveResources` names each resource in `resources`.** `paths` is ignored, so a v1.0.8
+  request carrying only `paths` is refused. Send `ResourceRef` items, each a domain and a
+  path.
+- **A catalog signature failure arrives as `request_auth_failure`**, as above.
+
+**Brokers**
+
+- **A Broker never forwards an agent's request unchanged.** It originates its own
+  discovery queries and signs them alone, where v1.0.8 relayed an agent-signed
+  `ResourceQuery` and chained its own signature onto it. It never copies the agent's
+  request-level `ext` or `ext_critical` onto a request it authors.
+
+**SDK users**
+
+- **Signing.** A signing transport requires the signer's directory (`WithSignatureAgent`,
+  `signature_agent`, `signatureAgent`) and refuses a signed call locally without one;
+  v1.0.8 signed with an empty `Signature-Agent`. `core.MonotonicWindow` and its peers sign
+  at the clock's time and are deprecated. Python's `sign_agent_binding` returns an
+  `AgentBinding` instead of a tuple.
+- **Key resolution.** The key resolver's scheme option is removed (Go
+  `WBAKeyResolverOptions.Scheme`, Python `WBAKeyResolver(scheme=...)`, TypeScript
+  `WBAKeyResolverOptions.scheme`). A custom request-key resolver receives the signature's
+  directory: Python's `KeyResolver.resolve` and TypeScript's `RequestKeyResolver.resolve`
+  take it as a second argument. `WBAKeyResolver.Revoked` / `revoked` takes the directory
+  and answers from that directory's own list, and the offer-key cache's predicate takes
+  `(thumbprint, exchange)`.
+- **Removed TypeScript helpers.** `COVERED_COMPONENTS`, `buildRequestSignatureBase`,
+  `maxSigLabelN`, `signatureBytesByLabel`, `parseMultisigSignatureInput` and the
+  regex-based proof parsers are gone.
+- **Stricter inputs and reads.** The offer signers refuse an offer whose term carries
+  pricing, and the acceptance signers and verifiers refuse an empty requester id or
+  domain. The generated Pydantic models, Zod schemas and TypeScript input types require
+  `requester` on the three requests. A document body over 1 MiB is refused rather than
+  truncated, and the TypeScript reader also ends a read at 30 seconds and follows at most
+  five redirects itself, never from https to http.
+
+### Changes since v1.0.8
+
 **Discovery has no side effects; usage-report and relayed-acceptance refusals are
 stated (comments only).** Five rules the contract implied but did not state:
 
@@ -24,7 +133,8 @@ stated (comments only).** Five rules the contract implied but did not state:
 The `DiscoverResources` RPC, the `UsageReport` message and `DENIAL_REASON_SIGNATURE_INVALID`
 state them, and the transaction-flow and Exchange request-flow pages follow.
 
-**`GetAccountStatus` answers an agent with no account `NOT_FOUND` (comments only).**
+**`GetAccountStatus` answers an agent with no account `NOT_FOUND` (a behaviour change; no
+wire change).**
 The RPC comment now states the answer for an agent the Exchange knows, its request
 signature verified, but that holds no account at that Exchange: the Connect code
 `NOT_FOUND`. `GetAccountStatusResponse.billing_ref` is therefore set on every OK answer,
@@ -232,7 +342,8 @@ extension-profiles, academic walkthrough, what-is-FORA, transaction-flow and
 medical-imaging pages state the rule.
 
 **A catalog call whose signature fails is refused with `request_auth_failure`;
-`CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
+`CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (a behaviour change; no wire
+change).** A signed
 `CatalogService` call is refused like every other signed request when its signature is
 missing, does not verify or is stale: `unauthenticated` with
 `ErrorDetail.request_auth_failure` (`SIGNATURE_MISSING`, `SIGNATURE_INVALID` or
@@ -307,7 +418,7 @@ refused with `invalid_argument`.
 must not refuse a report on it.
 
 **Idempotency keys are scoped per caller, and a reused key with a different request is
-refused (comments only).** The file header gains "Idempotency", the one statement of the
+refused (a behaviour change; no wire change).** The file header gains "Idempotency", the one statement of the
 rule for `TransactionRequest`, `UsageReport` and `DisputeRequest`. A key is scoped to the
 authenticated agent, and to the pair (Broker, requester) on a purchase relayed through
 `BrokerService.ExecuteTransaction`; a key another agent or tenant used is never a
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index bf9fd278..da3d81f4 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -8,6 +8,115 @@ and protocol history, see [`proto/CHANGELOG.md`](https://github.com/FORA-Protoco
 
 ## Unreleased
 
+### Breaking against v1.0.8
+
+This release does not interoperate with v1.0.8 inside one deployment: the request
+signature changed in both directions, so every party of a deployment upgrades together.
+Each bullet names what breaks, in which direction, and what to do; the entries below give
+the detail.
+
+**Every party**
+
+- **Request signatures and key directories (a hard cut).** A v1.0.8 verifier does not read
+  the dictionary `Signature-Agent` this release sends. This release refuses the bare value
+  v1.0.8 sends, a key directory served as `application/jwk-set+json` or unsigned, and a
+  delivery proof at the publisher edge that is not a full Web Bot Auth signature. Upgrade
+  every signer, verifier, publisher edge and key directory together, and serve each
+  directory with its own media type, signed by every key it lists. See "Request signatures
+  and key directories follow the Web Bot Auth profile".
+- **Reason values added since v1.0.8.** `CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED`,
+  `DENIAL_REASON_RELAY_NOT_ACCEPTED`, and the `UNKNOWN_CRITICAL_EXTENSION` value of the
+  denial, catalog-rejection, usage-report, dispute, registration and domain-verification
+  reason families are new. The v1.0.8 Python and TypeScript SDKs check an answer against
+  generated models that do not list the new values, so they refuse a whole answer carrying
+  one, such as a purchase answer with one item denied as
+  `DENIAL_REASON_RELAY_NOT_ACCEPTED`. `ErrorDetail.request_auth_failure` is new as well;
+  those models drop it, so a v1.0.8 client sees a signature refusal's code with no typed
+  reason. Upgrade those clients.
+
+**Exchange operators**
+
+- **An offer carries its price once.** An offer whose term carries pricing is refused by a
+  validating receiver (`offer.terms.pricing_unset`) and by this release's offer signers and
+  verifiers; v1.0.8 accepted it. State the price in `Offer.pricing` only and leave the sold
+  term's pricing unset. A `PER_UNIT` offer whose `estimated_quantity` is zero or negative
+  is refused too (`offer.metered.estimate_positive`): omit the estimate or state a positive
+  one.
+- **A per-item denial is always in the body.** A denied one-item purchase is answered OK
+  with the item's `denial_reason`; v1.0.8 answered it with a non-OK error carrying
+  `transaction_denial`, which is now only for a refusal of the whole request. Answer
+  in the body; a client reads the body's `denial_reason` whatever the item count.
+- **A relayed request needs an admitted Broker.** A `ResourceQuery` or
+  `TransactionRequest` whose `requester.domain` is not the signer's directory is acted on
+  only when the Exchange admits the signer as a Broker, and is otherwise refused
+  `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`. A v1.0.8 Exchange
+  read a Broker-forwarded request's agent signature and took the Broker's key from a
+  configured key set; a Broker's request now carries the Broker's signature alone, with
+  its key in the directory it names. Decide which Brokers you admit, for example the ones
+  registered with you. See "An Exchange tells a relayed request from a direct one".
+- **The hop cap counts every signature.** `max_intermediary_hops` is the number of
+  signatures accepted, every one counted, and a request over it is refused with
+  `resource_exhausted` before any signature is verified. The Go guidance to configure one
+  more than you publish is gone: publish the count itself.
+- **Refusals that changed shape.** A catalog call whose signature fails is refused
+  `unauthenticated` with `request_auth_failure`, where v1.0.8 sent
+  `CATALOG_REJECTION_REASON_SIGNATURE_INVALID`. `GetAccountStatus` answers an agent with no
+  account `NOT_FOUND`, where a v1.0.8 Exchange could answer OK with an empty
+  `billing_ref`. The same idempotency key with a different request is refused
+  `already_exists`, where v1.0.8 replayed the stored result for any reuse of a key.
+- **Rules that stop applying.** `fora.admin.v1.ReportingPolicy.quantity_tolerance` is
+  ignored: never refuse a usage report for its quantity. The scope-shortfall and
+  restriction reasons deprecated in this release are never sent.
+
+**Agents and other clients**
+
+- **A query and a purchase name their requester.** `requester` is required on
+  `ResourceQuery`, `DiscoveryRequest` and `TransactionRequest`, and `Requester.id` is
+  required, 1 to 255 characters; v1.0.8 had neither rule. Name the requester, with an id
+  and with the host of your own key directory as its domain.
+- **Mint a new idempotency key for each distinct request**, since a reused key with a
+  different request is refused, and read a one-item denial from the body, as above.
+
+**Publishers and catalog contributors**
+
+- **`RemoveResources` names each resource in `resources`.** `paths` is ignored, so a v1.0.8
+  request carrying only `paths` is refused. Send `ResourceRef` items, each a domain and a
+  path.
+- **A catalog signature failure arrives as `request_auth_failure`**, as above.
+
+**Brokers**
+
+- **A Broker never forwards an agent's request unchanged.** It originates its own
+  discovery queries and signs them alone, where v1.0.8 relayed an agent-signed
+  `ResourceQuery` and chained its own signature onto it. It never copies the agent's
+  request-level `ext` or `ext_critical` onto a request it authors.
+
+**SDK users**
+
+- **Signing.** A signing transport requires the signer's directory (`WithSignatureAgent`,
+  `signature_agent`, `signatureAgent`) and refuses a signed call locally without one;
+  v1.0.8 signed with an empty `Signature-Agent`. `core.MonotonicWindow` and its peers sign
+  at the clock's time and are deprecated. Python's `sign_agent_binding` returns an
+  `AgentBinding` instead of a tuple.
+- **Key resolution.** The key resolver's scheme option is removed (Go
+  `WBAKeyResolverOptions.Scheme`, Python `WBAKeyResolver(scheme=...)`, TypeScript
+  `WBAKeyResolverOptions.scheme`). A custom request-key resolver receives the signature's
+  directory: Python's `KeyResolver.resolve` and TypeScript's `RequestKeyResolver.resolve`
+  take it as a second argument. `WBAKeyResolver.Revoked` / `revoked` takes the directory
+  and answers from that directory's own list, and the offer-key cache's predicate takes
+  `(thumbprint, exchange)`.
+- **Removed TypeScript helpers.** `COVERED_COMPONENTS`, `buildRequestSignatureBase`,
+  `maxSigLabelN`, `signatureBytesByLabel`, `parseMultisigSignatureInput` and the
+  regex-based proof parsers are gone.
+- **Stricter inputs and reads.** The offer signers refuse an offer whose term carries
+  pricing, and the acceptance signers and verifiers refuse an empty requester id or
+  domain. The generated Pydantic models, Zod schemas and TypeScript input types require
+  `requester` on the three requests. A document body over 1 MiB is refused rather than
+  truncated, and the TypeScript reader also ends a read at 30 seconds and follows at most
+  five redirects itself, never from https to http.
+
+### Changes since v1.0.8
+
 **Discovery has no side effects; usage-report and relayed-acceptance refusals are
 stated (comments only).** Five rules the contract implied but did not state:
 
@@ -30,7 +139,8 @@ stated (comments only).** Five rules the contract implied but did not state:
 The `DiscoverResources` RPC, the `UsageReport` message and `DENIAL_REASON_SIGNATURE_INVALID`
 state them, and the transaction-flow and Exchange request-flow pages follow.
 
-**`GetAccountStatus` answers an agent with no account `NOT_FOUND` (comments only).**
+**`GetAccountStatus` answers an agent with no account `NOT_FOUND` (a behaviour change; no
+wire change).**
 The RPC comment now states the answer for an agent the Exchange knows, its request
 signature verified, but that holds no account at that Exchange: the Connect code
 `NOT_FOUND`. `GetAccountStatusResponse.billing_ref` is therefore set on every OK answer,
@@ -238,7 +348,8 @@ extension-profiles, academic walkthrough, what-is-FORA, transaction-flow and
 medical-imaging pages state the rule.
 
 **A catalog call whose signature fails is refused with `request_auth_failure`;
-`CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (comments only).** A signed
+`CATALOG_REJECTION_REASON_SIGNATURE_INVALID` is deprecated (a behaviour change; no wire
+change).** A signed
 `CatalogService` call is refused like every other signed request when its signature is
 missing, does not verify or is stale: `unauthenticated` with
 `ErrorDetail.request_auth_failure` (`SIGNATURE_MISSING`, `SIGNATURE_INVALID` or
@@ -313,7 +424,7 @@ refused with `invalid_argument`.
 must not refuse a report on it.
 
 **Idempotency keys are scoped per caller, and a reused key with a different request is
-refused (comments only).** The file header gains "Idempotency", the one statement of the
+refused (a behaviour change; no wire change).** The file header gains "Idempotency", the one statement of the
 rule for `TransactionRequest`, `UsageReport` and `DisputeRequest`. A key is scoped to the
 authenticated agent, and to the pair (Broker, requester) on a purchase relayed through
 `BrokerService.ExecuteTransaction`; a key another agent or tenant used is never a

From 16237469bf12172ecf279f6fb70d96bbbd03b1f5 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Mon, 12 Oct 2026 22:18:16 +0200
Subject: [PATCH 149/164] Record in the design history why a Broker signs alone

The design history marked the forwarding chain superseded but recorded
no reason. WG-00 section 5.2.2 lets a signer cover an earlier signature
only when it leaves every component that signature covers unchanged,
and a Broker changes them: on execute it posts a new body to each
Exchange's URL, and on discovery, where the agent does not know the
Exchanges, it originates its own queries. So it signs alone, and the
Exchange takes the agent's identity from the acceptances in the body.

The new section records that reasoning; the rules that verify the
acceptances against the requester's directory and bind the delivery
URL and a delegation to the key they verify under; what
Requester.domain means on a query a Broker originated; and that
holder-of-key proof at discovery through a Broker is an open protocol
question. The hop-by-hop section's banner points to it.
---
 docs/design-history.md | 60 ++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 58 insertions(+), 2 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 4ed1436f..d223b669 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -17,8 +17,9 @@ git history.
 > every signature and is checked before any is verified; `RequestConstraints.max_hops`
 > reaches no Exchange and no party enforces it. Each request is answered to the party
 > that sent it. The move from in-message signatures to RFC 9421 described below still
-> stands. See "Signing under the Web Bot Auth profile" and "The hop cap counts
-> signatures; max_hops waits for multi-hop Broker discovery".
+> stands. Why the Broker signs alone is recorded in "A Broker signs alone, because it
+> changes what the agent signed"; see also "Signing under the Web Bot Auth profile"
+> and "The hop cap counts signatures; max_hops waits for multi-hop Broker discovery".
 
 Early drafts carried authentication inside the protobuf messages: per-message
 signature fields on requests, on each intermediary hop, and on catalog pushes. We
@@ -2532,3 +2533,58 @@ acceptances.
 A Broker is never relayed to: every request it receives is direct, so a mismatched
 requester at a Broker is always refused. Usage reports and disputes carry no
 `Requester`, so the comparison does not apply to them.
+
+## A Broker signs alone, because it changes what the agent signed
+
+Under the forwarding chain recorded in "Request and hop authentication: RFC 9421,
+hop-by-hop", a Broker passed the agent's signed request on and added a signature
+that covered it, so an Exchange verified the agent's own request signature behind
+the Broker's. WG-00 §5.2.2 lets a signer cover an earlier signature only by also
+covering that signature's `Signature-Input` member and every component it lists,
+and it says what a signer does when it cannot: "A signer that cannot cover one of
+those components, because it changed the value the inner signature was computed
+over, MUST NOT cover the inner signature member. It signs the request on its own
+terms, and the inner signature is left untouched."
+
+A Broker is always that signer. On execute it builds a new `TransactionRequest` for
+each Exchange and posts it to that Exchange's URL, so the body the agent's
+`Content-Digest` bound and the `@target-uri` the agent signed both change: a
+re-packaged body cannot travel under the agent's signature. On discovery there is no
+agent request to an Exchange to pass on: the point of a Broker is that the agent
+does not know the Exchanges, so the Broker chooses them and originates its own
+queries. In both cases the Broker signs alone. Its signature covers its own request
+components and only its own `Signature-Agent` member, the request carries no agent
+signature headers, and the Exchange authenticates the caller as the Broker. A party
+that forwards a request unchanged may still cover the earlier signature, and only
+then do signatures form a chain; FORA's Broker never forwards that way.
+
+The Exchange therefore takes the agent's identity from the body, from the detached
+signatures that carry its consent. WG-00 says as much of coverage itself: an outer
+signature that covers an inner one "does not express authorization, delegation, or
+consent. Those meanings are deployment policy, or are carried in separately signed
+fields." FORA's are each item's `AgentAcceptance` and the `AgentRequestAcceptance`
+over the ordered set, signed over the purchase rather than over the HTTP request
+that carries it, so the Broker's re-packaging leaves them intact. On a relayed
+purchase they are the only agent signatures the Exchange sees, and three rules make
+them carry the agent's identity:
+
+- **They verify against the requester's directory.** An Exchange checks them against
+  the Ed25519 keys currently valid in the directory `Requester.domain` names, never
+  against the Broker's key.
+- **The delivery URL follows them.** The request signer is the Broker, so
+  `agent_identity_hash` and the URL's binding name the key the acceptances verify
+  under.
+- **A delegation stays sealed to the agent.** Its `cnf.jkt` is checked against that
+  same key, so a relayed purchase that carries a delegation needs an
+  `AgentAcceptance` on every item. A Broker is never delegated to.
+
+On a query a Broker originated, `Requester.domain` is the Broker's statement, under
+its own signature, of whom it queries for. How an agent proves a holder-of-key
+entitlement at discovery time through a Broker is an open protocol question.
+
+A request a Broker sends carries one signature and one `Signature-Agent` member, so
+a single-member Web Bot Auth verifier, such as Cloudflare's `web-bot-auth` library,
+accepts every Broker signature. What the hop caps count now is recorded in "The hop
+cap counts signatures; max_hops waits for multi-hop Broker discovery", and how an
+Exchange tells a relayed request from a direct one in "A relay is a requester
+mismatch the Exchange admits".

From 308559563628a0a9d9f71cad4d32ca7f2bdd235f Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Mon, 12 Oct 2026 22:19:43 +0200
Subject: [PATCH 150/164] Mark the design-history passages the Broker and
 profile changes superseded

Nine sections still stated as current a rule the Broker and Web Bot
Auth changes reversed. Each gains a "Superseded in part" banner that
says what changed and what still stands, and keeps the text under it
as the record:

- the delegation-claims profile and the JWT section, where the request
  signer was always the holder;
- the covered-header section, with a bare or empty signature-agent and
  a no-directory vector;
- "One agent identity, one key", where an acceptance was verified
  against the caller's key;
- the signed-leg redirect and SSRF sections, where key directories
  followed redirects and ALLOW_INSECURE chose their scheme;
- the client defaults, with Python's ten-minute window;
- the peer's-sentence section, with the monotonic window as remedy;
- the catalog client, with a contributor key named by caller_id.
---
 docs/design-history.md | 66 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 66 insertions(+)

diff --git a/docs/design-history.md b/docs/design-history.md
index d223b669..d872bd3a 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -644,6 +644,15 @@ contiguous, with no gaps or reused numbers left by the removals.
 
 ## Delegation-claims profile: opaque token, bound holder
 
+> **Superseded in part.** The request signer is no longer always the holder. On a
+> direct request the key that signs the RFC 9421 request must still equal the holder
+> key the token names. On a purchase a Broker relays, the Broker signs the request,
+> so the Exchange checks the holder binding against the key each item's
+> `AgentAcceptance` verifies under, and an item without one fails it. A Broker is
+> never delegated to. How an agent proves a holder-of-key entitlement at discovery
+> time through a Broker is an open protocol question. See "A Broker signs alone,
+> because it changes what the agent signed".
+
 Delegation tokens stay opaque on the wire — FORA does not parse or re-encode the
 token, and `token_format` only names which verifier to run. But leaving the
 *meaning* of a token entirely to each issuer made delegations non-portable: an
@@ -737,6 +746,13 @@ minimal and its signed offers stay price-comparable.
 > sole delegation `token_format`, and the entitlement *mechanism* (a
 > holder-bound capability token on a covered header) is unchanged — only the
 > Biscuit format is gone. Read the "still optional" language below as historical.
+>
+> **Superseded in part — the key that proves possession.** On a direct request the
+> agent still proves possession with its RFC 9421 request signature. On a purchase a
+> Broker relays, the Broker signs the request, so the holder binding is checked
+> against the key each item's `AgentAcceptance` verifies under. The `cnf` chain and
+> its offline walk below stand. See "Delegation-claims profile: opaque token, bound
+> holder".
 
 The delegation token started as a Biscuit (`token_format` defaulted to
 `"biscuit-v3"`), chosen for offline attenuation. Modelling the holder-binding
@@ -914,6 +930,16 @@ autolink pass could not see into. All of it is deleted. `protoc-gen-foravocab` a
 
 ## A covered header the peer never receives is not bound
 
+> **Superseded in part.** The fifth covered component is now the signer's own
+> `"signature-agent";key="<label>"` member, and it is never empty: a signer refuses
+> to sign without an https directory, so only `authorization` is still bound whether
+> or not it carries a value. The FORA components are a minimum, and a verifier
+> accepts a signature that covers more. `sign-request-vectors.json` no longer has an
+> empty `signature_agent` case, and its append case pins what `AppendSignature`
+> emits on an unsigned request rather than a forwarding leg, since a Broker signs
+> alone. The emit rule below, empty `Authorization` included, still stands. See
+> "Signing under the Web Bot Auth profile".
+
 The RFC 9421 covered set is fixed and unconditional: `@method`, `@target-uri`,
 `content-digest`, `authorization` and `signature-agent` are bound into the signature base
 whether or not they carry a value. Binding the empty ones is deliberate — it stops a later
@@ -1217,6 +1243,11 @@ property — the property has always been held jointly, and this change does not
 
 ## A catalog client is its own constructor
 
+> **Superseded in part.** `PushResourcesRequest.caller_id` is deprecated as never
+> needed: the caller is the party that signs the push, and the Exchange checks that
+> the verified signer may push for each entry's domain. The constructor reasoning
+> below stands.
+
 The usage-report decision recorded above settled a rule that generalises: a client's
 constructor takes its shape from where the address comes from. A report goes where a
 signed offer says, so the report verb resolves its destination from the message and
@@ -1513,6 +1544,13 @@ contract, not a gap in the docs.
 
 ## SSRF-guarded fetch: two flags, a corpus-locked transport
 
+> **Superseded in part.** The WBA directory fetch no longer takes its scheme from
+> `ALLOW_INSECURE`. A directory named by a signature's covered `Signature-Agent`
+> member is fetched over https, because that member must be an https origin, and the
+> fetch follows no redirect. The key resolvers' option to fetch an https origin's
+> directory in plaintext is gone from all three SDKs. The address guard described
+> below stands. See "Signing under the Web Bot Auth profile".
+
 Every third-party-influenceable fetch across all three SDKs runs through a guarded
 client governed by exactly two orthogonal environment flags and nothing else — no
 deployment allow-list, no config file, no per-stack policy. `SKIP_SSRF` toggles the
@@ -1654,6 +1692,12 @@ otherwise have every offer counted twice.
 
 ## A signed leg refuses redirects; the guarded fetch follows them
 
+> **Superseded in part.** Key directories are no longer among the documents this
+> client follows redirects for. A key directory answers `200` itself and is never
+> fetched through a redirect, as the Web Bot Auth profile requires; a
+> `/.well-known/fora.json` manifest and a revocation list may still follow up to five.
+> The refusal on signed legs below stands.
+
 The SSRF-guarded HTTP client follows up to five redirects, re-pinning the address and
 re-vetting the scheme at each hop. That is correct for what it was built for: fetching
 public well-known documents and key directories, where there is nothing to leak.
@@ -1893,6 +1937,13 @@ this seam is living with today, in the other direction.
 
 ## The peer's token is ours to trust; the peer's sentence is only ours to carry
 
+> **Superseded in part.** The hazard in the last paragraph no longer arises. Every
+> signature a signing transport makes carries a fresh 64-byte nonce, so two
+> identical calls inside one second sign different bytes, and a peer screening
+> replays on (key id, signature) accepts both. `MonotonicWindow` now signs at the
+> clock's current time and is deprecated in all three SDKs, so no window drifts. See
+> "Signing under the Web Bot Auth profile".
+
 A caller reading why a call failed had the failure class and the peer's refusal token, both
 machine-readable, and no way to reach the peer's own sentence except by parsing it back out
 of a rendered error. That is a thing a layer will get wrong, and the platform's MCP adapter
@@ -1932,6 +1983,11 @@ and has its own answer.
 
 ## Four client defaults where the ports differ from Go on purpose
 
+> **Superseded in part.** The signature-window difference is gone: Python's default
+> is now five minutes, as Go's and TypeScript's are, and every signer refuses a
+> window longer than five minutes. The other three differences below still stand.
+> See "Signing under the Web Bot Auth profile".
+
 Go is the oracle and the ports mirror it, so a difference that survives review has to be
 written down or it reads as drift. Four survive, and none is an API-surface divergence —
 all are behaviour, so they live here rather than in `sdk/parity/symbol-map.json`, whose
@@ -2116,6 +2172,16 @@ revisiting as a three-language change.
 
 ## One agent identity, one key
 
+> **Superseded in part.** An Exchange now verifies an acceptance against the Ed25519
+> keys currently valid in the directory `Requester.domain` names, not against the
+> key of whichever caller the request signature identified: on a purchase a Broker
+> relays, that caller is the Broker, and `agent_identity_hash` and the delivery URL
+> name the key the acceptances verify under. The sentences below about a
+> separately-custodied acceptance key describe the earlier rule. The SDKs still take
+> one key and offer no option for a separate acceptance key, so the key a delivery
+> URL is bound to is always the key the fetch proves possession of. See "A Broker
+> signs alone, because it changes what the agent signed".
+
 The protocol carries a single agent identity and the SDK does not offer a second.
 `agent_identity_hash` is defined as the RFC 7638 thumbprint of the agent's
 request-signing key; an Exchange verifies the detached offer acceptance against the

From c0fd95007aa535b6310b91651a0a8fdfa0673d17 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Mon, 12 Oct 2026 22:20:14 +0200
Subject: [PATCH 151/164] Mark the purchase, price and requester passages
 superseded in the design history

Four more sections stated rules this branch changed: a scope shortfall
answered with SCOPE_INSUFFICIENT, a denied one-item purchase answered
as a transport error, one term shape at both ends with the price
inside it, and a Requester.id that could be empty. Each gains a
"Superseded in part" banner.

The Web Bot Auth section's lead said no option fetches a key directory
in plaintext. Only the key resolvers lost that option; the public
document readers still take a scheme. The lead now says so.
---
 docs/design-history.md | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index d872bd3a..8d514514 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -52,6 +52,12 @@ agent's identity (`agent_identity_hash`) and needs no return-path relay.
 
 ## Canonical signing: JCS over proto-JSON, not deterministic protobuf
 
+> **Superseded in part.** An acceptance can no longer name an empty requester:
+> `Requester.id` now requires at least one character, and the acceptance signers and
+> verifiers refuse an empty requester id or domain, so the divergence below can no
+> longer arise. The omission rule it taught still binds every empty field, and the
+> acceptance vectors pin it with an empty `idempotency_key`.
+
 Three signed FORA payloads cover a protobuf message: `Offer.signature`, the
 agent's `AgentAcceptance.signature`, and the agent's
 `AgentRequestAcceptance.signature` — the request-set proof, added later and born
@@ -528,6 +534,13 @@ through the same dispute chain as the rest of the protocol.
 
 ## Universal Licensing Core
 
+> **Superseded in part.** An offer now carries its price once, in `Offer.pricing`:
+> the term inside `Offer.terms` carries no pricing, while every catalog term in
+> `ResourceEntry.terms` still does. The two ends therefore no longer share the
+> term's exact shape: the price a publisher pushes on a term reaches the agent as
+> `Offer.pricing`. The closed licensing core and agent-selected restrictions below
+> stand.
+
 Licensing collapsed from several parallel, partly-overlapping shapes into one
 `LicenseTerm` that carries `License`, `Restriction`, `Quota`, `Obligation`, and
 `Pricing`, and appears with the *same shape* at both ends of the protocol —
@@ -816,6 +829,11 @@ to look for.
 
 ## A failed action is not a success body
 
+> **Superseded in part.** A purchase no longer splits by item count. Every per-item
+> denial, a one-item purchase's included, is answered in the body on
+> `TransactionResultItem.denial_reason`, and `ErrorDetail.transaction_denial` is
+> sent only when the Exchange refuses the whole request and decides no item.
+
 The corollary decision is where a failure lives. The rule is the gRPC / AIP-193
 one: a method that could not perform the requested *action* returns a non-OK code
 plus an `ErrorDetail`; a *query* that ran successfully returns its answer in the
@@ -1667,6 +1685,11 @@ separately and for a different reason; see "Details the SDK writes itself are pi
 
 ## Discovery answers are grouped per URI, not flattened
 
+> **Superseded in part.** `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` is deprecated
+> and never sent: a requester never learns about a resource outside its scopes, so a
+> scope shortfall reads as a group with no offers and no reason. The grouping
+> argument below stands.
+
 A discovery call is per-URI: an agent asks about several resources at once, and both
 `DiscoverResources` and the Broker's `Resolve` answer with one `OfferGroup` per
 requested URI, each either carrying offers or carrying a typed `OfferAbsenceReason`
@@ -2418,7 +2441,7 @@ rest. A refusal the fetcher can fix by signing again carries `Accept-Signature`,
 does a request or proof whose `Signature-Agent` member is not an https origin: that is a
 form the client chose, not a forgery.
 
-**No option fetches a key directory in plaintext.** The key resolver's scheme option
+**No key resolver keeps a plaintext option.** The key resolver's scheme option
 (Go `WBAKeyResolverOptions.Scheme`, Python `WBAKeyResolver(scheme=...)`, TypeScript
 `WBAKeyResolverOptions.scheme`) let tests fetch an https origin's directory from a
 plaintext server, and any production configuration could set it too. It is gone from

From fa4fd61ed841ac754b3dc2087eecd2bfd68acac5 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Mon, 12 Oct 2026 22:21:41 +0200
Subject: [PATCH 152/164] Correct the SDK comments that verified an acceptance
 against the caller's key

The Go and TypeScript agent-key options and the Python acceptance
signer said an Exchange verifies an acceptance against the key of the
caller its request signature identified, so a second key would be
refused at execute. An Exchange verifies it against the keys currently
valid in the directory requester.domain names, and on a purchase a
Broker relays the request signer is the Broker. The comments now say
so, and keep the reason the SDKs hold one key: the key a delivery URL
is bound to is then always the key the fetch proves possession of.

The sign-request vector generator described the covered set as ending
in a bare signature-agent and one vector as signing with no
Signature-Agent. The set ends in the signer's own keyed member, and
every vector names an https origin because a signer refuses to sign
without one. The vectors are unchanged.
---
 sdk/go/connect/options.go                | 14 +++++++-------
 sdk/go/helpers/gen_vectors_test.go       | 16 +++++++++-------
 sdk/python/fora_sdk/signing_transport.py | 12 ++++++------
 sdk/ts/client/options.ts                 | 13 +++++++------
 4 files changed, 29 insertions(+), 26 deletions(-)

diff --git a/sdk/go/connect/options.go b/sdk/go/connect/options.go
index df6d5701..3f1c85ad 100644
--- a/sdk/go/connect/options.go
+++ b/sdk/go/connect/options.go
@@ -147,13 +147,13 @@ func WithRequester(r *forav1.Requester) ClientOption {
 // keeps the private half, so the public half has to be supplied alongside.
 // Without it the client can buy but cannot fetch what it bought.
 //
-// There is deliberately no option for a SEPARATE acceptance key. The protocol
-// carries one agent identity: agent_identity_hash is defined as the thumbprint of
-// the agent's request-signing key, an Exchange verifies the detached acceptance
-// against the key registered for the caller its request signature identified, and
-// the delivery URL is bound to that same thumbprint. A second key would be
-// refused at execute, and any URL it did produce could never be fetched — the
-// presented key would not match the binding.
+// There is deliberately no option for a SEPARATE acceptance key. The client signs
+// requests, acceptances and delivery-fetch proofs with the one Signer WithSigner
+// injects, so the key a delivery URL is bound to is always the key the fetch
+// proves possession of. An Exchange verifies an acceptance against the Ed25519
+// keys currently valid in the directory requester.domain names, never against a
+// Broker's key: on a purchase a Broker relays, the request signer is the Broker,
+// and the delivery URL is bound to the key the acceptances verify under.
 // The key is COPIED for the same reason WithRequester clones: the caller keeps
 // the slice it passed, and a later append or overwrite there would otherwise
 // change which key every subsequent fetch presents.
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index e3ae23ed..dd006292 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -912,13 +912,15 @@ func buildWireCanonicalVectors(t *testing.T) []wireCanonicalVector {
 }
 
 // buildSignRequestVectors signs a fixed set of requests with the REAL Go
-// SignRequest and records the exact bytes it emits. Covered set is exactly
-// @method @target-uri content-digest authorization signature-agent (no
-// entitlement-token header present, so coveredFor never appends the conditional entitlement
-// component). created/expires are the non-zero pinned window (reused from the
-// pop emitter) so renderParamsTail never drops them. One vector carries an
-// empty-authorization bound value; one carries an absent Signature-Agent so the
-// empty-bind (static bootstrap) semantics are pinned cross-language.
+// SignRequest, or AppendSignature for the appendOnly cases, and records the exact
+// bytes it emits. Covered set is exactly @method @target-uri content-digest
+// authorization "signature-agent";key="sig1" (no entitlement-token header present,
+// so coveredFor never appends the conditional entitlement component).
+// created/expires are non-zero pinned windows (the fixture's, reused from the pop
+// emitter, or a documentation example's own) so renderParamsTail never drops them.
+// Several vectors bind an empty Authorization, which is still sent. Every vector
+// names an https Signature-Agent origin: a signer refuses to sign without one
+// (ErrSignatureAgentRequired), so the corpus has no empty Signature-Agent case.
 func buildSignRequestVectors(t *testing.T) []signRequestVector {
 	t.Helper()
 	const (
diff --git a/sdk/python/fora_sdk/signing_transport.py b/sdk/python/fora_sdk/signing_transport.py
index cd92edee..26ef3833 100644
--- a/sdk/python/fora_sdk/signing_transport.py
+++ b/sdk/python/fora_sdk/signing_transport.py
@@ -172,12 +172,12 @@ def sign_offer_acceptance(
         """Sign the detached acceptance a purchase carries; return ``(hex_signature, alg)``.
 
         It signs with the REQUEST signer's key, and there is deliberately no option for a
-        separate acceptance key. The protocol carries one agent identity:
-        ``agent_identity_hash`` is defined as the thumbprint of the agent's request-signing
-        key, an Exchange verifies the detached acceptance against the key registered for
-        the caller its request signature identified, and the delivery URL is bound to that
-        same thumbprint. A second key would be refused at execute, and any URL it did
-        produce could never be fetched — the presented key would not match the binding.
+        separate acceptance key: one key signs requests, acceptances and delivery-fetch
+        proofs, so the key a delivery URL is bound to is always the key this transport
+        proves possession of. An Exchange verifies the acceptance against the Ed25519 keys
+        currently valid in the directory ``requester_domain`` names, never against a
+        Broker's key: on a purchase a Broker relays, the request signer is the Broker, and
+        the delivery URL is bound to the key the acceptances verify under.
 
         It lives on the transport so the key stays in one place: the client composes this
         seam and never handles key material, which is the shape the Go oracle has, where
diff --git a/sdk/ts/client/options.ts b/sdk/ts/client/options.ts
index e95ecf11..4dee6e24 100644
--- a/sdk/ts/client/options.ts
+++ b/sdk/ts/client/options.ts
@@ -70,12 +70,13 @@ export interface ClientOptions {
 	 * cannot yield it — custody keeps the private half, so the public half is supplied
 	 * alongside. Without it the client can buy but cannot fetch what it bought.
 	 *
-	 * There is deliberately no option for a separate agent PRIVATE key. The protocol
-	 * carries one agent identity: agent_identity_hash is the thumbprint of the agent's
-	 * request-signing key, an Exchange verifies the detached acceptance against the key
-	 * registered for the caller its request signature identified, and the delivery URL is
-	 * bound to that same thumbprint. A second key would be refused at execute, and any URL
-	 * it did produce could never be fetched. */
+	 * There is deliberately no option for a separate agent PRIVATE key: `signer` signs
+	 * requests, acceptances and delivery-fetch proofs, so the key a delivery URL is bound
+	 * to is always the key this client proves possession of. An Exchange verifies an
+	 * acceptance against the Ed25519 keys currently valid in the directory
+	 * requester.domain names, never against a Broker's key: on a purchase a Broker
+	 * relays, the request signer is the Broker, and the delivery URL is bound to the key
+	 * the acceptances verify under. */
 	agentPublicKey?: CryptoKey;
 	/** The agent's own identity. A query and a purchase must name a requester, and a
 	 * request without one is refused, so the client stamps it on every query that names

From 750991e75263670215d073ccc49ba131e9c33fa8 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 12:25:20 +0200
Subject: [PATCH 153/164] Accept a request, proof or directory signature that
 carries no alg, in all three SDKs

WG-00 does not require the alg signature parameter: its signatures
must carry created, expires, keyid and tag, and its own example
request and signed directory response (Appendix E.2.3) carry no alg.
RFC 9421 lets a verifier take the algorithm from the key (section
3.2, step 6.3), and every key a FORA verifier resolves is Ed25519.
The three SDKs refused a signature without alg all the same.

Every verifier now accepts a signature with no alg: the request
verifier, the delivery proof of possession and the key-directory
response verifier, in Go, Python and TypeScript. An alg that is
present must still name ed25519, in any letter case, so an empty alg
and another algorithm are refused as before. Go and Python could not
tell an empty alg from a missing one, so their parsers now record
whether alg is present, and a parameter set built by hand reads as
present. Go's VerifiedRequest.Algorithm reports ed25519 when the
signature declares none.

Signers still send alg="ed25519", which widely deployed Web Bot Auth
verifiers require. No refusal token, sentinel or Accept-Signature
value changes, and the parity map is unchanged.

The shared vectors gain a request accepted without alg, requests
refused for an empty or another alg, the same three cases for the
delivery proof and the directory response, and WG-00's Appendix
E.2.3 response verbatim. Every existing vector is byte-identical.
---
 sdk/go/helpers/directory.go                   | 19 ++--
 sdk/go/helpers/export_test.go                 | 16 +++-
 sdk/go/helpers/gen_directory_vectors_test.go  | 48 ++++++++--
 sdk/go/helpers/gen_vectors_test.go            | 94 +++++++++++++++++--
 sdk/go/helpers/pop_verify.go                  |  2 +-
 sdk/go/helpers/sigbase.go                     | 21 ++++-
 .../testdata/directory-response-vectors.json  | 80 ++++++++++++++++
 sdk/go/helpers/testdata/pop-vectors.json      | 48 ++++++++++
 .../verify-request-accept-vectors.json        | 17 ++++
 .../testdata/verify-request-neg-vectors.json  | 32 +++++++
 sdk/go/helpers/verify.go                      | 32 +++++--
 sdk/go/helpers/wba.go                         |  6 +-
 sdk/go/helpers/wba_internal_test.go           | 53 +++++++++++
 sdk/go/helpers/wba_profile_test.go            |  8 ++
 sdk/python/README.md                          |  5 +-
 sdk/python/fora_sdk/_sigbase.py               | 14 +++
 sdk/python/fora_sdk/_sigverify.py             | 22 +++--
 sdk/python/fora_sdk/directory_signature.py    | 24 ++---
 sdk/python/fora_sdk/httpsig.py                |  8 +-
 sdk/python/fora_sdk/pop.py                    | 17 ++--
 sdk/python/fora_sdk/wba.py                    |  5 +-
 .../tests/test_directory_response_parity.py   |  6 ++
 sdk/python/tests/test_multisig_parse_edge.py  | 32 ++++++-
 .../tests/test_verifyrequest_server_parity.py |  4 +
 sdk/ts/core/directory-response.ts             | 25 ++---
 sdk/ts/core/multisig-parse.ts                 |  8 ++
 sdk/ts/core/verify-request.ts                 | 13 +--
 sdk/ts/core/wba.ts                            |  5 +-
 sdk/ts/src/pop.ts                             |  9 +-
 .../tests/directory-response.parity.test.ts   |  6 ++
 sdk/ts/tests/multisig-parse.edge.test.ts      | 20 ++++
 sdk/ts/tests/verify-request.parity.test.ts    |  4 +
 32 files changed, 597 insertions(+), 106 deletions(-)

diff --git a/sdk/go/helpers/directory.go b/sdk/go/helpers/directory.go
index 9a11567d..a6b10d65 100644
--- a/sdk/go/helpers/directory.go
+++ b/sdk/go/helpers/directory.go
@@ -15,9 +15,10 @@ import (
 // Appendix B.1), and FORA requires it. Each response signature covers
 // "@authority";req, the authority the directory was fetched from, and
 // content-digest, carries created, expires, keyid (the key's RFC 7638 thumbprint)
-// and alg, and has tag="http-message-signatures-directory". "@authority";req
-// takes its value from the request that fetched the directory, so the signature
-// cannot be served again under a different host.
+// and alg, and has tag="http-message-signatures-directory". A verifier also
+// accepts a response signature that carries no alg, as WG-00's own Appendix E.2.3
+// example does. "@authority";req takes its value from the request that fetched the
+// directory, so the signature cannot be served again under a different host.
 
 // ErrDirectoryResponseUnsigned signals a key directory whose response carries no
 // valid signature by a key the caller needs: none at all, or none by that key.
@@ -111,10 +112,10 @@ func directoryResponseBase(authority, digest, rawInner string) string {
 // wraps ErrDigestMismatch. A response with no signature at all wraps
 // ErrDirectoryResponseUnsigned. Otherwise each response signature is judged on its
 // own, and one that fails is ignored rather than fatal: it must carry
-// tag="http-message-signatures-directory" and alg="ed25519", cover exactly
-// "@authority";req and content-digest, carry created no later than now plus the
-// 300-second skew and expires no earlier than now, and verify under the listed key
-// whose thumbprint its keyid names.
+// tag="http-message-signatures-directory" and either no alg or alg="ed25519",
+// cover exactly "@authority";req and content-digest, carry created no later than
+// now plus the 300-second skew and expires no earlier than now, and verify under
+// the listed key whose thumbprint its keyid names.
 func VerifyDirectoryResponse(
 	authority string, h http.Header, body []byte, keys []ed25519.PublicKey, now time.Time,
 ) (map[string]bool, error) {
@@ -150,9 +151,9 @@ func VerifyDirectoryResponse(
 }
 
 // directoryResponseParamsValid applies the per-signature rules other than the
-// Ed25519 check: tag, alg, covered set and window.
+// Ed25519 check: tag, alg (when present, ed25519), covered set and window.
 func directoryResponseParamsValid(p sigParams, now time.Time) bool {
-	if p.Tag != DirectoryResponseTag || !strings.EqualFold(p.Alg, AlgEd25519) {
+	if p.Tag != DirectoryResponseTag || !p.algAccepted() {
 		return false
 	}
 	if len(p.Covered) != len(directoryResponseCovered) {
diff --git a/sdk/go/helpers/export_test.go b/sdk/go/helpers/export_test.go
index 2723194d..a396fe56 100644
--- a/sdk/go/helpers/export_test.go
+++ b/sdk/go/helpers/export_test.go
@@ -22,13 +22,16 @@ const MaxRequestAcceptanceItemsForTest = maxRequestAcceptanceItems
 // RawSignature describes a signature by its exact covered set and parameters, for
 // the tests that need a signature the shipped signers refuse to make: no tag, a
 // legacy Signature-Agent form, a member key that differs from the label, an
-// incomplete coverage of an earlier signature. Declared in a _test.go file, so it
-// never reaches the API-parity gate.
+// incomplete coverage of an earlier signature, an alg other than the signer's or
+// none at all. Declared in a _test.go file, so it never reaches the API-parity gate.
 type RawSignature struct {
 	Label            string
 	Covered          []CoveredComponent
 	Created, Expires int64
 	Nonce, Tag       string
+	// Alg replaces the signer's algorithm name when set; OmitAlg sends no alg.
+	Alg     string
+	OmitAlg bool
 }
 
 // SignRawForTest signs req with exactly raw, over whatever headers req already
@@ -36,8 +39,15 @@ type RawSignature struct {
 // to them. It sets nothing else: the caller writes Content-Digest, Authorization
 // and Signature-Agent as the case requires.
 func SignRawForTest(req *http.Request, signer Signer, raw RawSignature, appendMode bool) error {
+	alg := signer.Algorithm()
+	if raw.Alg != "" {
+		alg = raw.Alg
+	}
+	if raw.OmitAlg {
+		alg = ""
+	}
 	p := sigParams{
-		Label: raw.Label, Covered: raw.Covered, KeyID: signer.KeyID(), Alg: signer.Algorithm(),
+		Label: raw.Label, Covered: raw.Covered, KeyID: signer.KeyID(), Alg: alg,
 		Created: raw.Created, Expires: raw.Expires, Nonce: raw.Nonce, Tag: raw.Tag,
 	}
 	mode := sigWriteSet
diff --git a/sdk/go/helpers/gen_directory_vectors_test.go b/sdk/go/helpers/gen_directory_vectors_test.go
index d75aea24..e4379f47 100644
--- a/sdk/go/helpers/gen_directory_vectors_test.go
+++ b/sdk/go/helpers/gen_directory_vectors_test.go
@@ -101,14 +101,47 @@ func buildDirectoryResponseVectors(t *testing.T) []directoryResponseVector {
 	}
 	// Tag and covered set are checked per signature: signed by hand with another
 	// tag, and with a covered set lacking "@authority";req.
-	wrongTag := signedDirectoryByHand(t, "wrong_tag", "research.acme.com", docBody, agent, directoryResponseCovered, "web-bot-auth", one, created, expires, now)
+	wrongTag := signedDirectoryByHand(t, "wrong_tag", "research.acme.com", docBody, agent, directoryResponseCovered, "web-bot-auth", one, created, expires, now, algShipped)
 	noAuthority := signedDirectoryByHand(t, "no_authority_covered", "research.acme.com", docBody, agent,
-		[]CoveredComponent{{Name: "content-digest"}}, DirectoryResponseTag, one, created, expires, now)
+		[]CoveredComponent{{Name: "content-digest"}}, DirectoryResponseTag, one, created, expires, now, algShipped)
 	out = append(out, wrongHost, changed, unsigned, wrongTag, noAuthority)
+	// A response signature with no alg verifies: the key, which is Ed25519, decides
+	// the algorithm. An alg that is present must name ed25519, so an empty one and
+	// another algorithm verify no key.
+	byAlg := func(name string, a sigAlg) directoryResponseVector {
+		return signedDirectoryByHand(t, name, "research.acme.com", docBody, agent, directoryResponseCovered,
+			DirectoryResponseTag, one, created, expires, now, a)
+	}
+	out = append(out, byAlg("no_alg", algOmitted), byAlg("empty_alg", algEmpty), byAlg("unsupported_alg", algOther))
+	// WG-00 Appendix E.2.3, the draft's own signed directory response, verbatim. It
+	// carries no alg.
+	out = append(out, directoryResponseVector{
+		Name: "wg00_appendix_e23", Authority: "signature-agent.test",
+		Body:           `{"keys":[{"kty":"OKP","crv":"Ed25519","kid":"poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U","x":"JrQLj5P_89iXES9-vFgrIy29clF9CC_oPPsw3c5D0bs","use":"sig"}]}`,
+		ContentDigest:  "sha-256=:CADMT2aBdV/rqQr/NIru64ERQkCobVvllA4V0fLFDu0=:",
+		SignatureInput: `binding=("@authority";req "content-digest");created=1735689600;expires=4889289600;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";tag="http-message-signatures-directory"`,
+		Signature:      "binding=:l6P8R67tm3kujAxbHWio7ll01qrEZ0dKD/WWlGhNYEmTnFZM8Wt0VQ9zqGfvo7T/UMkBxsigzChM1Gpz7gOVBg==:",
+		Keys:           []string{pubOf(rfc9421Seed)}, SignerSeedsHex: []string{hexOf(rfc9421Seed)},
+		Created: 1735689600, Expires: 4889289600, Now: 1735689700,
+	})
 
 	for i := range out {
 		out[i].ExpectedVerified, out[i].ExpectedError = directoryOracle(t, out[i])
 	}
+	// The alg cases must not be absorbed by a regeneration: a missing alg verifies
+	// the one signing key, and a present alg that is not ed25519 verifies none.
+	for _, v := range out {
+		want := -1
+		switch v.Name {
+		case "no_alg", "wg00_appendix_e23":
+			want = 1
+		case "empty_alg", "unsupported_alg":
+			want = 0
+		}
+		if want >= 0 && (len(v.ExpectedVerified) != want || v.ExpectedError != "") {
+			t.Fatalf("%s: verified %v (error %q), want %d key(s)", v.Name, v.ExpectedVerified, v.ExpectedError, want)
+		}
+	}
 	return out
 }
 
@@ -121,19 +154,20 @@ func hexOf(b []byte) string {
 	return string(out)
 }
 
-// signedDirectoryByHand signs a directory response with an arbitrary covered set
-// and tag, as a nonconformant server would.
+// signedDirectoryByHand signs a directory response with an arbitrary covered set,
+// tag and alg, as a nonconformant server, or one following the draft's minimum,
+// would.
 func signedDirectoryByHand(
 	t *testing.T, name, authority, body string, seed []byte, covered []CoveredComponent, tag string,
-	keys []string, created, expires, now int64,
+	keys []string, created, expires, now int64, alg sigAlg,
 ) directoryResponseVector {
 	t.Helper()
 	priv := ed25519.NewKeyFromSeed(seed)
 	p := sigParams{
-		Label: "sig1", Covered: covered, KeyID: seedThumbprint(t, seed), Alg: AlgEd25519,
+		Label: "sig1", Covered: covered, KeyID: seedThumbprint(t, seed),
 		Created: created, Expires: expires, Tag: tag,
 	}
-	p.RawInner = signatureInputInner(p)
+	p.RawInner = innerWithAlg(p, alg)
 	digest := ContentDigest([]byte(body))
 	raw := ed25519.Sign(priv, []byte(directoryResponseBaseFor(authority, digest, p)))
 	return directoryResponseVector{
diff --git a/sdk/go/helpers/gen_vectors_test.go b/sdk/go/helpers/gen_vectors_test.go
index dd006292..f01ff1c0 100644
--- a/sdk/go/helpers/gen_vectors_test.go
+++ b/sdk/go/helpers/gen_vectors_test.go
@@ -28,6 +28,7 @@ import (
 	"encoding/hex"
 	"encoding/json"
 	"errors"
+	"fmt"
 	"maps"
 	"net/http"
 	"os"
@@ -182,6 +183,37 @@ func replaceFirst(s, old, new string) string {
 	return s
 }
 
+// sigAlg says what a hand-signed vector puts in its alg signature parameter. The
+// zero value is what every shipped signer sends, so a case that does not set it
+// emits the same bytes as before.
+type sigAlg int
+
+const (
+	algShipped sigAlg = iota // alg="ed25519"
+	algOmitted               // no alg parameter at all: the key decides the algorithm
+	algEmpty                 // alg="", present but naming nothing
+	algOther                 // alg="rsa-pss-sha512", an algorithm an Ed25519 key cannot use
+)
+
+// innerWithAlg renders p's Signature-Input inner list with the alg parameter a
+// says. renderParamsTail leaves out an empty Alg, so the empty case is spliced in
+// right after keyid, where the parameter order puts alg.
+func innerWithAlg(p sigParams, a sigAlg) string {
+	switch a {
+	case algOmitted:
+		p.Alg = ""
+	case algEmpty:
+		p.Alg = ""
+		keyid := fmt.Sprintf(";keyid=%q", p.KeyID)
+		return strings.Replace(signatureInputInner(p), keyid, keyid+`;alg=""`, 1)
+	case algOther:
+		p.Alg = "rsa-pss-sha512"
+	default:
+		p.Alg = AlgEd25519
+	}
+	return signatureInputInner(p)
+}
+
 // popSpec names one agent-binding proof: the inputs to the shipped signer, or, for
 // a proof the signer refuses to make, the covered set and parameters to sign by
 // hand.
@@ -194,6 +226,7 @@ type popSpec struct {
 	signatureAgent string             // header value; "" means the signer's own sig1="<directory>"
 	covered        []CoveredComponent // nil means the shipped signer
 	tag            string
+	alg            sigAlg            // the alg of a proof signed by hand
 	presented      ed25519.PublicKey // nil means the signing key's public half
 	unsigned       bool              // no Signature-Input, Signature or Signature-Agent at all
 	now            int64
@@ -226,10 +259,10 @@ func signEdgePoP(t *testing.T, priv ed25519.PrivateKey, sp popSpec, created, exp
 // reject (or, for the legacy String form, accept).
 func signEdgePoPByHand(priv ed25519.PrivateKey, sp popSpec, created, expires int64) (sigInput, sig string) {
 	p := sigParams{
-		Covered: sp.covered, KeyID: sp.keyID, Alg: AlgEd25519,
+		Covered: sp.covered, KeyID: sp.keyID,
 		Created: created, Expires: expires, Nonce: sp.nonce, Tag: sp.tag,
 	}
-	inner := signatureInputInner(p)
+	inner := innerWithAlg(p, sp.alg)
 	lines := make([]string, 0, len(sp.covered)+1)
 	for _, c := range sp.covered {
 		switch {
@@ -343,6 +376,14 @@ func buildPopVectors(t *testing.T) []popVector {
 		}),
 		// A fetch that carries no signature at all.
 		with("unsigned", func(sp *popSpec) { sp.unsigned = true }),
+		// A proof with no alg verifies: the key, which is Ed25519, decides the
+		// algorithm. An alg that is present must name ed25519, so an empty one and
+		// another algorithm are refused.
+		with("valid_no_alg", func(sp *popSpec) {
+			sp.covered, sp.tag, sp.alg, sp.valid = wbaCovered, WBATag, algOmitted, true
+		}),
+		with("empty_alg", func(sp *popSpec) { sp.covered, sp.tag, sp.alg = wbaCovered, WBATag, algEmpty }),
+		with("unsupported_alg", func(sp *popSpec) { sp.covered, sp.tag, sp.alg = wbaCovered, WBATag, algOther }),
 	}
 	out := make([]popVector, 0, len(specs))
 	for _, sp := range specs {
@@ -1224,6 +1265,38 @@ func negFrom(req *http.Request, authorization string) negRequest {
 // tag, the legacy or bare Signature-Agent form, a missing component — as an
 // outdated or hostile signer would.
 func signNegByHand(t *testing.T, seed []byte, agentHeader string, edit func(*sigParams)) negRequest {
+	t.Helper()
+	req, signer, p := negHandBase(t, seed, agentHeader)
+	edit(&p)
+	if err := signWithParams(context.Background(), req, p, signer, sigWriteSet); err != nil {
+		t.Fatalf("neg by hand: sign: %v", err)
+	}
+	return negFrom(req, "")
+}
+
+// signNegByHandAlg signs the fixed request with the production signer's sig1
+// parameters and the alg parameter a says. It writes the inner list itself:
+// signWithParams re-renders it, and the renderer leaves out an empty alg.
+func signNegByHandAlg(t *testing.T, seed []byte, agentHeader string, a sigAlg) negRequest {
+	t.Helper()
+	req, signer, p := negHandBase(t, seed, agentHeader)
+	p.RawInner = innerWithAlg(p, a)
+	base, err := buildSignatureBase(req, p)
+	if err != nil {
+		t.Fatalf("neg by hand: base: %v", err)
+	}
+	sig, err := signer.Sign(context.Background(), []byte(base))
+	if err != nil {
+		t.Fatalf("neg by hand: sign: %v", err)
+	}
+	req.Header.Set("Signature-Input", p.Label+"="+p.RawInner)
+	req.Header.Set("Signature", p.Label+"=:"+base64.StdEncoding.EncodeToString(sig)+":")
+	return negFrom(req, "")
+}
+
+// negHandBase is the request, signer and production sig1 parameters a hand-signed
+// vector starts from, under the Signature-Agent header agentHeader.
+func negHandBase(t *testing.T, seed []byte, agentHeader string) (*http.Request, Signer, sigParams) {
 	t.Helper()
 	req, err := http.NewRequest(negMethod, negURL, nil)
 	if err != nil {
@@ -1236,12 +1309,7 @@ func signNegByHand(t *testing.T, seed []byte, agentHeader string, edit func(*sig
 	if err != nil {
 		t.Fatalf("neg by hand: signer: %v", err)
 	}
-	p := requestSigParams(req, "sig1", signer, SignOptions{Created: negCreated, Expires: negExpires})
-	edit(&p)
-	if err := signWithParams(context.Background(), req, p, signer, sigWriteSet); err != nil {
-		t.Fatalf("neg by hand: sign: %v", err)
-	}
-	return negFrom(req, "")
+	return req, signer, requestSigParams(req, "sig1", signer, SignOptions{Created: negCreated, Expires: negExpires})
 }
 
 // verifyNegOutcome drives the REAL Go verify path (VerifyMultisigRequestResolved,
@@ -1426,11 +1494,16 @@ func buildVerifyRequestNegVectors(t *testing.T) []verifyRequestNegVector {
 	// No signature at all.
 	unsigned := mk("neg_unsigned", negFreshNow)
 	unsigned.OmitHeaders = []string{"Signature-Input", "Signature"}
+	// An alg that is present must name ed25519: another algorithm is refused, and
+	// so is an empty alg, which names nothing.
+	otherAlg := mkFrom(signNegByHandAlg(t, seed, member, algOther), "neg_unsupported_alg", negFreshNow)
+	emptyAlg := mkFrom(signNegByHandAlg(t, seed, member, algEmpty), "neg_empty_alg", negFreshNow)
 
 	out := []verifyRequestNegVector{
 		badSig, replay, expired, wrongKey, tampered, repointed, entitlement, shadowedEntitlement,
 		absentAuthz, absentAgent, dupAuthz,
 		noTag, wrongTag, bare, noMember, typeOther, notOrigin, withPath, noAuthz, unsigned,
+		otherAlg, emptyAlg,
 	}
 	// Derive the expectations from the REAL Go verify path — never hand-author them.
 	for i := range out {
@@ -1447,8 +1520,8 @@ func buildVerifyRequestNegVectors(t *testing.T) []verifyRequestNegVector {
 // although the shipped signer never makes them, because WG-00 permits them and
 // other Web Bot Auth signers send them: the legacy String Signature-Agent on a
 // single-signature request, a member key that differs from the label, a
-// type=directory member parameter, no nonce, and a foreign parameter order. Same
-// shape as the negative corpus, with expected_reason "".
+// type=directory member parameter, no nonce, a foreign parameter order, and no alg.
+// Same shape as the negative corpus, with expected_reason "".
 func buildVerifyRequestAcceptVectors(t *testing.T) []verifyRequestNegVector {
 	t.Helper()
 	seed := fixedSeed(0x77)
@@ -1475,6 +1548,7 @@ func buildVerifyRequestAcceptVectors(t *testing.T) []verifyRequestNegVector {
 		mk("accept_no_nonce", signNegByHand(t, seed, member, func(p *sigParams) { p.Nonce = "" })),
 		mk("accept_other_members_beside", signNegByHand(t, seed, `other="https://other.example", `+member, func(*sigParams) {})),
 		mk("accept_nonce_of_other_length", signNegByHand(t, seed, member, func(p *sigParams) { p.Nonce = "AAECAwQFBgcICQoLDA0ODw" })),
+		mk("accept_no_alg", signNegByHandAlg(t, seed, member, algOmitted)),
 	}
 	for i := range out {
 		reason, accept, dir := oracleNegOutcome(t, out[i])
diff --git a/sdk/go/helpers/pop_verify.go b/sdk/go/helpers/pop_verify.go
index 5bc64c00..9c520bcb 100644
--- a/sdk/go/helpers/pop_verify.go
+++ b/sdk/go/helpers/pop_verify.go
@@ -103,7 +103,7 @@ func VerifyAgentBinding(method, rawURL string, h http.Header, agentID string, op
 		return nil, popRefusal(PoPMalformedSignature, false, err)
 	}
 	p := all[0]
-	if !strings.EqualFold(p.Alg, AlgEd25519) {
+	if !p.algAccepted() {
 		return nil, popRefusal(PoPUnsupportedAlg, false, nil)
 	}
 	if p.Tag != WBATag {
diff --git a/sdk/go/helpers/sigbase.go b/sdk/go/helpers/sigbase.go
index 777facdc..1aaeab6c 100644
--- a/sdk/go/helpers/sigbase.go
+++ b/sdk/go/helpers/sigbase.go
@@ -92,10 +92,15 @@ type sigParams struct {
 	Covered []CoveredComponent
 	KeyID   string
 	Alg     string
-	Created int64
-	Expires int64
-	Nonce   string
-	Tag     string
+	// AlgOmitted records that the signature carries no alg parameter at all.
+	// Only the parser sets it, so the zero value reads as "alg present" and a
+	// sigParams built by hand is judged by Alg alone. An alg that is present but
+	// empty is not omitted.
+	AlgOmitted bool
+	Created    int64
+	Expires    int64
+	Nonce      string
+	Tag        string
 	// RawInner is the VERBATIM member value from the wire Signature-Input
 	// (everything after "label="). RFC 9421 §2.5 terminates the signature base
 	// with this exact byte sequence — parameter order and spacing are the
@@ -105,6 +110,14 @@ type sigParams struct {
 	RawInner string
 }
 
+// algAccepted reports whether a verifier accepts the signature's alg parameter.
+// An absent alg is accepted: every key a verifier resolves is Ed25519, so the key
+// decides the algorithm (RFC 9421 §3.2, step 6.3). An alg that is present must
+// name ed25519, in any letter case, so an empty one is refused.
+func (p sigParams) algAccepted() bool {
+	return p.AlgOmitted || strings.EqualFold(p.Alg, AlgEd25519)
+}
+
 // requiredCoveredComponents is the set a FORA RPC signature must cover beyond the
 // Web Bot Auth base, by name. The signature's Signature-Agent member is checked
 // on its own (signatureDirectory), and the entitlement-token header is required
diff --git a/sdk/go/helpers/testdata/directory-response-vectors.json b/sdk/go/helpers/testdata/directory-response-vectors.json
index 6c7c16b0..8d2b0f06 100644
--- a/sdk/go/helpers/testdata/directory-response-vectors.json
+++ b/sdk/go/helpers/testdata/directory-response-vectors.json
@@ -211,6 +211,86 @@
       "now": 1790812300,
       "expected_verified": [],
       "expected_error": ""
+    },
+    {
+      "name": "no_alg",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:O3gOgORgAbW3BQkf+AAan7JBufCfvNI2K31Np1dKBEU91E/A9xE0OuleyqeeVz5xRAtQ77/RXO5+BvlDOGD4CA==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [
+        "kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k"
+      ],
+      "expected_error": ""
+    },
+    {
+      "name": "empty_alg",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:zThkM4bwZMxgcIEhrTdnpUxUzbKKA+01zL8kBvovtmFYVU4H45CzRIaxpx+DfpMUvMCIixq+cEsKfvnpXl7bAg==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    },
+    {
+      "name": "unsupported_alg",
+      "authority": "research.acme.com",
+      "body": "{\n  \"keys\": [\n    {\n      \"kty\": \"OKP\",\n      \"crv\": \"Ed25519\",\n      \"use\": \"sig\",\n      \"alg\": \"EdDSA\",\n      \"x\": \"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo\",\n      \"not_before\": \"2026-07-01T00:00:00Z\",\n      \"not_after\": \"2027-01-01T00:00:00Z\"\n    }\n  ],\n  \"revocation_url\": \"https://research.acme.com/.well-known/fora-invalidations.json\"\n}",
+      "content_digest": "sha-256=:pwF1biF3JgznD+stgQ9rVYn9igU31Egz7PG2yK0+g1E=:",
+      "signature_input": "sig1=(\"@authority\";req \"content-digest\");created=1790812200;expires=1790815800;keyid=\"kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k\";alg=\"rsa-pss-sha512\";tag=\"http-message-signatures-directory\"",
+      "signature": "sig1=:rI4MVMmW0eCLs5fJSKBmr0bFXyUUYQHAqo/yxbmnlikkife9277LSG6DhYtQnVccqqb/s20fL3AdyaNioo4OBw==:",
+      "keys": [
+        "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+      ],
+      "signer_seeds_hex": [
+        "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60"
+      ],
+      "created": 1790812200,
+      "expires": 1790815800,
+      "now": 1790812300,
+      "expected_verified": [],
+      "expected_error": ""
+    },
+    {
+      "name": "wg00_appendix_e23",
+      "authority": "signature-agent.test",
+      "body": "{\"keys\":[{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"kid\":\"poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U\",\"x\":\"JrQLj5P_89iXES9-vFgrIy29clF9CC_oPPsw3c5D0bs\",\"use\":\"sig\"}]}",
+      "content_digest": "sha-256=:CADMT2aBdV/rqQr/NIru64ERQkCobVvllA4V0fLFDu0=:",
+      "signature_input": "binding=(\"@authority\";req \"content-digest\");created=1735689600;expires=4889289600;keyid=\"poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U\";tag=\"http-message-signatures-directory\"",
+      "signature": "binding=:l6P8R67tm3kujAxbHWio7ll01qrEZ0dKD/WWlGhNYEmTnFZM8Wt0VQ9zqGfvo7T/UMkBxsigzChM1Gpz7gOVBg==:",
+      "keys": [
+        "JrQLj5P_89iXES9-vFgrIy29clF9CC_oPPsw3c5D0bs"
+      ],
+      "signer_seeds_hex": [
+        "9f8362f87a484a954e6e740c5b4c0e84229139a20aa8ab56ff66586f6a7d29c5"
+      ],
+      "created": 1735689600,
+      "expires": 4889289600,
+      "now": 1735689700,
+      "expected_verified": [
+        "poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U"
+      ],
+      "expected_error": ""
     }
   ]
 }
diff --git a/sdk/go/helpers/testdata/pop-vectors.json b/sdk/go/helpers/testdata/pop-vectors.json
index da45331a..f879b5f4 100644
--- a/sdk/go/helpers/testdata/pop-vectors.json
+++ b/sdk/go/helpers/testdata/pop-vectors.json
@@ -228,5 +228,53 @@
     "expected_valid": false,
     "expected_reason": "missing_sig",
     "expected_accept_signature": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created;expires;tag=\"web-bot-auth\""
+  },
+  {
+    "name": "valid_no_alg",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:qtxddvCtoU0cXgnCqw2VSnsT4tO0NAgLDEwUujXkjyEHLtnS7D3sO+YWVZlPDkb2c0Clyfbuqgz/iYga8AzUAw==:",
+    "now_unix": 1700000100,
+    "expected_valid": true,
+    "expected_reason": ""
+  },
+  {
+    "name": "empty_alg",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:SiY0bU//K/eMKFzfC0pzD411Xly1PV5d+Hs9vfKau3Om4K26XL7GU9cdT/L77BoxXMJdxuK7+4N2s8jTZJpDAw==:",
+    "now_unix": 1700000100,
+    "expected_valid": false,
+    "expected_reason": "unsupported_alg"
+  },
+  {
+    "name": "unsupported_alg",
+    "method": "GET",
+    "url": "https://cdn.example/doc?agent_id=wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "agent_id": "wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k",
+    "presented_key_b64url": "TjDlN9oNdK3AZCssMw2ncymUxGBYXjmnCh3VEaYIxHs",
+    "signer_seed_hex": "333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152",
+    "agent_directory": "https://agent.example",
+    "nonce": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw",
+    "signature_agent": "sig1=\"https://agent.example\"",
+    "signature_input": "sig1=(\"@method\" \"@target-uri\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"wSp1Ud8Phi33WBixrTcV5U38Q5JZ0VGpTAetgQUQw2k\";alg=\"rsa-pss-sha512\";nonce=\"AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw\";tag=\"web-bot-auth\"",
+    "signature": "sig1=:6L//8j0E6vIv7dOEp09O0qZesJQxh0JpkIF2ZU3GTsfK02zDsUJi/47Rf7+sQjPgjC+0P7dlQZWss2TyOYoeDA==:",
+    "now_unix": 1700000100,
+    "expected_valid": false,
+    "expected_reason": "unsupported_alg"
   }
 ]
diff --git a/sdk/go/helpers/testdata/verify-request-accept-vectors.json b/sdk/go/helpers/testdata/verify-request-accept-vectors.json
index 9db99c35..e119f061 100644
--- a/sdk/go/helpers/testdata/verify-request-accept-vectors.json
+++ b/sdk/go/helpers/testdata/verify-request-accept-vectors.json
@@ -135,6 +135,23 @@
       "now": 1700000100,
       "expected_reason": "",
       "expected_signature_agent": "https://agent.example"
+    },
+    {
+      "name": "accept_no_alg",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:W8198PxsEfaD/e2ZlLJjPAOjyZz2EnSjmc+05nhF9UF9GsBBf1+625KoNFMOJFjYfVo8sk0Fq2kEi9ybi95eCA==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "",
+      "expected_signature_agent": "https://agent.example"
     }
   ]
 }
diff --git a/sdk/go/helpers/testdata/verify-request-neg-vectors.json b/sdk/go/helpers/testdata/verify-request-neg-vectors.json
index 3e53d9bd..c3023598 100644
--- a/sdk/go/helpers/testdata/verify-request-neg-vectors.json
+++ b/sdk/go/helpers/testdata/verify-request-neg-vectors.json
@@ -350,6 +350,38 @@
         "Signature-Input",
         "Signature"
       ]
+    },
+    {
+      "name": "neg_unsupported_alg",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"rsa-pss-sha512\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:Q+993MquFxD1Dbj58Hy4PL4skqrlaJvUSSyy5i3/q/qMFVC6SMr03S/lHrhUF9hENdy3xVmqaNyg+GhyXPVsAg==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature"
+    },
+    {
+      "name": "neg_empty_alg",
+      "method": "POST",
+      "url": "https://broker.example/fora.v1.BrokerService/Fetch",
+      "body_hex": "7b22757269223a2268747470733a2f2f63646e2e6578616d706c652f6e6567227d",
+      "authorization": "",
+      "signature_agent": "sig1=\"https://agent.example\"",
+      "content_digest": "sha-256=:pSx23M9GN/aTAKrW28T63jwIll86OG1oADLVexKgy/o=:",
+      "signature_input": "sig1=(\"@method\" \"@target-uri\" \"content-digest\" \"authorization\" \"signature-agent\";key=\"sig1\");created=1700000000;expires=1700000300;keyid=\"mcp.v1\";alg=\"\";tag=\"web-bot-auth\"",
+      "signature": "sig1=:R1bwKwZFivMp7EFW9Tw3VcB3wouTAYqez87+iQfQ/rYuZxuXQjuVsVIkwq9DZpLys4/HCsELqScFb1BI0UNlCQ==:",
+      "keyid": "mcp.v1",
+      "resolver_keyid": "mcp.v1",
+      "resolver_pubkey_b64url": "8maX3DmN9ac27XK1RyyagkWLzGBgVz1IGHOC0LrN_cA",
+      "now": 1700000100,
+      "expected_reason": "signature"
     }
   ]
 }
diff --git a/sdk/go/helpers/verify.go b/sdk/go/helpers/verify.go
index 143dae4f..6fdb8a4a 100644
--- a/sdk/go/helpers/verify.go
+++ b/sdk/go/helpers/verify.go
@@ -85,6 +85,9 @@ type VerifyOptions struct {
 // SignatureAgent is the https origin of the signer's key directory: the value of
 // the Signature-Agent member this signature covers, the directory its keyid was
 // resolved in. It is covered, so it is signed.
+//
+// Algorithm is the algorithm the signature verified under: the alg it declares,
+// or "ed25519" when it declares none and the key decided it.
 type VerifiedRequest struct {
 	KeyID          string
 	Algorithm      string
@@ -120,13 +123,14 @@ func staticPub(pub ed25519.PublicKey) resolveFunc {
 	return func(string, string) (ed25519.PublicKey, error) { return pub, nil }
 }
 
-// verifySingleSignature runs the full per-signature validation chain (alg, the
-// Web Bot Auth tag, the FORA RPC components, the signature's own Signature-Agent
-// member, entitlement coverage, created/expires window, content-digest, then the
-// key the member's directory publishes and the Ed25519 check over the signature
-// base). Shared by the single-sig and multisig paths so both judge a signature by
-// identical rules. sigCount is the number of signatures on the request: the legacy
-// String form of Signature-Agent is accepted only when it is one.
+// verifySingleSignature runs the full per-signature validation chain (alg, which
+// when present must be ed25519; the Web Bot Auth tag; the FORA RPC components; the
+// signature's own Signature-Agent member; entitlement coverage; the created/expires
+// window; content-digest; then the key the member's directory publishes and the
+// Ed25519 check over the signature base). Shared by the single-sig and multisig
+// paths so both judge a signature by identical rules. sigCount is the number of
+// signatures on the request: the legacy String form of Signature-Agent is accepted
+// only when it is one.
 func verifySingleSignature(
 	req *http.Request, params sigParams, sigMap map[string][]byte,
 	body []byte, resolve resolveFunc, opts VerifyOptions, sigCount int,
@@ -139,7 +143,7 @@ func verifySingleSignature(
 	if maxSkew == 0 {
 		maxSkew = defaultMaxFutureSkew
 	}
-	if !strings.EqualFold(params.Alg, AlgEd25519) {
+	if !params.algAccepted() {
 		return nil, fmt.Errorf("%w: alg=%q", ErrUnsupportedAlgorithm, params.Alg)
 	}
 	if params.Tag != WBATag {
@@ -179,9 +183,13 @@ func verifySingleSignature(
 	if !ed25519.Verify(pub, []byte(base), sigBytes) {
 		return nil, ErrSignatureVerify
 	}
+	alg := params.Alg
+	if params.AlgOmitted {
+		alg = AlgEd25519
+	}
 	return &VerifiedRequest{
 		KeyID:          params.KeyID,
-		Algorithm:      params.Alg,
+		Algorithm:      alg,
 		Label:          params.Label,
 		Signature:      base64.StdEncoding.EncodeToString(sigBytes),
 		Created:        params.Created,
@@ -429,9 +437,11 @@ func coveredFromItem(item httpsfv.Item) (CoveredComponent, error) {
 }
 
 // applySignatureParams reads the keyid/alg/created/expires/nonce/tag signature
-// parameters off the inner list's params into p.
+// parameters off the inner list's params into p, and records whether alg was
+// present at all.
 func applySignatureParams(p *sigParams, params *httpsfv.Params) error {
 	if params == nil {
+		p.AlgOmitted = true
 		return nil
 	}
 	if v, ok := params.Get("keyid"); ok {
@@ -447,6 +457,8 @@ func applySignatureParams(p *sigParams, params *httpsfv.Params) error {
 			return fmt.Errorf("%w: alg not a string", ErrMalformedSignatureInput)
 		}
 		p.Alg = s
+	} else {
+		p.AlgOmitted = true
 	}
 	if v, ok := params.Get("created"); ok {
 		n, isInt := v.(int64)
diff --git a/sdk/go/helpers/wba.go b/sdk/go/helpers/wba.go
index 10616a75..7ea9c4d1 100644
--- a/sdk/go/helpers/wba.go
+++ b/sdk/go/helpers/wba.go
@@ -26,8 +26,10 @@ import (
 //     tag="web-bot-auth"; a FORA signer adds a fresh nonce.
 //   - A verifier also accepts the legacy sf-string form of Signature-Agent,
 //     covered as plain "signature-agent", on a request carrying one signature, a
-//     member key that differs from the label, no nonce, and a type=directory member
-//     parameter. It refuses the bare unquoted value the v1.0.8 SDKs sent.
+//     member key that differs from the label, no nonce, a type=directory member
+//     parameter, and no alg, when the Ed25519 key decides the algorithm. An alg
+//     that is present must be ed25519. It refuses the bare unquoted value the
+//     v1.0.8 SDKs sent.
 
 // WBATag is the RFC 9421 tag parameter every Web Bot Auth request signature
 // carries.
diff --git a/sdk/go/helpers/wba_internal_test.go b/sdk/go/helpers/wba_internal_test.go
index 772b3a49..e8b514c3 100644
--- a/sdk/go/helpers/wba_internal_test.go
+++ b/sdk/go/helpers/wba_internal_test.go
@@ -65,3 +65,56 @@ func TestWG00AppendixE2_signatureBasesVerify(t *testing.T) {
 		})
 	}
 }
+
+// TestWG00AppendixE23_directoryResponseVerifiesWithoutAlg: the draft's own signed
+// directory response carries no alg, and a FORA verifier accepts its signature,
+// because the key, which is Ed25519, decides the algorithm. Its key carries no
+// not_before or not_after, so a FORA resolver still would not hand it out; this
+// pins the response signature only.
+func TestWG00AppendixE23_directoryResponseVerifiesWithoutAlg(t *testing.T) {
+	pub := ed25519.NewKeyFromSeed(rfc9421Seed).Public().(ed25519.PublicKey)
+	body := []byte(`{"keys":[{"kty":"OKP","crv":"Ed25519","kid":"poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U","x":"JrQLj5P_89iXES9-vFgrIy29clF9CC_oPPsw3c5D0bs","use":"sig"}]}`)
+	h := http.Header{}
+	h.Set("Content-Digest", "sha-256=:CADMT2aBdV/rqQr/NIru64ERQkCobVvllA4V0fLFDu0=:")
+	h.Set("Signature-Input", `binding=("@authority";req "content-digest");created=1735689600;expires=4889289600;keyid="poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U";tag="http-message-signatures-directory"`)
+	h.Set("Signature", "binding=:l6P8R67tm3kujAxbHWio7ll01qrEZ0dKD/WWlGhNYEmTnFZM8Wt0VQ9zqGfvo7T/UMkBxsigzChM1Gpz7gOVBg==:")
+	got, err := VerifyDirectoryResponse("signature-agent.test", h, body, []ed25519.PublicKey{pub}, time.Unix(1735689700, 0))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(got) != 1 || !got["poqkLGiymh_W0uP6PZFw-dvez3QJT5SolqXBCW38r0U"] {
+		t.Fatalf("verified %v, want the draft's one key", got)
+	}
+}
+
+// TestAlgAccepted_readsPresence: the parser records whether a signature carries
+// alg at all, so an absent alg is accepted and an empty one is refused. A sigParams
+// built by hand reads as alg present, so it is judged by its Alg alone.
+func TestAlgAccepted_readsPresence(t *testing.T) {
+	for _, tc := range []struct {
+		name, params string
+		want         bool
+	}{
+		{"absent", ``, true},
+		{"ed25519", `;alg="ed25519"`, true},
+		{"ed25519 in upper case", `;alg="ED25519"`, true},
+		{"empty", `;alg=""`, false},
+		{"another algorithm", `;alg="rsa-pss-sha512"`, false},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			h := http.Header{}
+			h.Set("Signature-Input", `sig1=("@method");keyid="k"`+tc.params)
+			h.Set("Signature", "sig1=:AAAA:")
+			all, _, err := parseAllSignatures(h)
+			if err != nil {
+				t.Fatal(err)
+			}
+			if got := all[0].algAccepted(); got != tc.want {
+				t.Errorf("algAccepted() = %v, want %v", got, tc.want)
+			}
+		})
+	}
+	if (sigParams{}).algAccepted() {
+		t.Error("a hand-built sigParams with an empty Alg was accepted")
+	}
+}
diff --git a/sdk/go/helpers/wba_profile_test.go b/sdk/go/helpers/wba_profile_test.go
index 8cd4aa38..a0dac4a6 100644
--- a/sdk/go/helpers/wba_profile_test.go
+++ b/sdk/go/helpers/wba_profile_test.go
@@ -242,6 +242,8 @@ func TestVerifyRequest_acceptsWhatWG00Permits(t *testing.T) {
 		{"no nonce", member, nil},
 		{"a nonce of another length", member, func(r *helpers.RawSignature) { r.Nonce = "AAECAwQFBgcICQoLDA0ODw" }},
 		{"other members beside the signer's", `x="https://x.example", ` + member, nil},
+		{"no alg", member, func(r *helpers.RawSignature) { r.OmitAlg = true }},
+		{"alg in upper case", member, func(r *helpers.RawSignature) { r.Alg = "ED25519" }},
 	} {
 		t.Run(tc.name, func(t *testing.T) {
 			req := profileRequest(t, body, tc.header)
@@ -253,6 +255,10 @@ func TestVerifyRequest_acceptsWhatWG00Permits(t *testing.T) {
 			if vr.SignatureAgent != tAgent {
 				t.Errorf("SignatureAgent = %q, want %q", vr.SignatureAgent, tAgent)
 			}
+			// The algorithm the signature verified under, declared or decided by the key.
+			if !strings.EqualFold(vr.Algorithm, helpers.AlgEd25519) {
+				t.Errorf("Algorithm = %q, want %q", vr.Algorithm, helpers.AlgEd25519)
+			}
 		})
 	}
 }
@@ -272,6 +278,8 @@ func TestVerifyRequest_refusesWhatTheProfileDoesNot(t *testing.T) {
 		want       error
 		wantAccept bool
 	}{
+		{"an alg other than ed25519", member, func(r *helpers.RawSignature) { r.Alg = "rsa-pss-sha512" },
+			helpers.ErrUnsupportedAlgorithm, false},
 		{"no tag", member, func(r *helpers.RawSignature) { r.Tag = "" }, helpers.ErrSignatureTag, true},
 		{"another tag", member, func(r *helpers.RawSignature) { r.Tag = "fora" }, helpers.ErrSignatureTag, true},
 		{"the bare unquoted value v1.0.8 sent", "https://agent.example", plainAgent, helpers.ErrSignatureAgentForm, true},
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 94cb1aed..63834e10 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -229,8 +229,9 @@ member names, passing that origin to `KeyResolver.resolve(keyid, directory)`, an
 it on the verdict. Labels carry no meaning; coverage of an earlier signature is optional and
 must be complete. The verifier also accepts what other Web Bot Auth signers send — the
 legacy String form `"https://agent.example"` on a single signature, a member key that
-differs from the label, a `type=directory` member parameter, no nonce — and refuses the
-bare unquoted value. A refusal for a missing component, a wrong tag, a refused
+differs from the label, a `type=directory` member parameter, no nonce, no `alg` (the
+Ed25519 key decides the algorithm; an `alg` that is present must be `ed25519`) — and
+refuses the bare unquoted value. A refusal for a missing component, a wrong tag, a refused
 Signature-Agent form or a member that is not an https origin carries `accept_signature`, the `Accept-Signature` value
 (`accept_signature()`) to answer the 401 with. A signer given no directory, a value that
 is not an https origin (`check_https_origin`), or a window over `MAX_SIGNATURE_LIFETIME`
diff --git a/sdk/python/fora_sdk/_sigbase.py b/sdk/python/fora_sdk/_sigbase.py
index fba4ab53..b8ad9294 100644
--- a/sdk/python/fora_sdk/_sigbase.py
+++ b/sdk/python/fora_sdk/_sigbase.py
@@ -96,6 +96,10 @@ class SigParams:
     ``raw_inner`` is the member value exactly as it arrived (everything after
     ``label=``), which the verifier terminates the base with. It is empty on the
     signing side, where the rendered inner is both what is signed and what is sent.
+
+    ``alg_omitted`` records that the signature carries no alg parameter at all. Only
+    the parser sets it, so a SigParams built by hand reads as alg present and is judged
+    by ``alg`` alone. An alg that is present but empty is not omitted.
     """
 
     label: str
@@ -107,6 +111,15 @@ class SigParams:
     nonce: str = ""
     tag: str = ""
     raw_inner: str = ""
+    alg_omitted: bool = False
+
+
+def alg_accepted(p: SigParams) -> bool:
+    """Whether a verifier accepts the signature's alg parameter. An absent alg is
+    accepted: every key a verifier resolves is Ed25519, so the key decides the algorithm
+    (RFC 9421 §3.2, step 6.3). An alg that is present must name ed25519, in any letter
+    case, so an empty one is refused. The Python port of Go ``sigParams.algAccepted``."""
+    return p.alg_omitted or p.alg.lower() == "ed25519"
 
 
 def render_params_tail(p: SigParams) -> str:
@@ -331,6 +344,7 @@ def _parse_input_member(label: str, member: sfv.Member, raw_inner: str) -> SigPa
         nonce=_str_param(member.params, "nonce"),
         tag=_str_param(member.params, "tag"),
         raw_inner=raw_inner,
+        alg_omitted="alg" not in member.params,
     )
 
 
diff --git a/sdk/python/fora_sdk/_sigverify.py b/sdk/python/fora_sdk/_sigverify.py
index 7de052ff..a13a6a22 100644
--- a/sdk/python/fora_sdk/_sigverify.py
+++ b/sdk/python/fora_sdk/_sigverify.py
@@ -4,12 +4,13 @@
 
 The Python port of Go ``verifySingleSignature``, ``VerifyMultisigRequest`` and
 ``enforceEarlierCoverage``. Each signature is judged on its own, in header order, by
-the same chain: alg, the Web Bot Auth tag, the FORA RPC components, the key directory
-its own covered Signature-Agent member names, entitlement coverage, the created/expires
-window, the content digest, then the key that directory publishes and Ed25519 over the
-rebuilt base. A request carrying several signatures first has its hop budget checked,
-counting every signature, then every coverage of an earlier signature checked for
-completeness (WG-00 §5.2.2). Labels carry no meaning beyond naming.
+the same chain: alg (which, when present, must be ed25519), the Web Bot Auth tag, the
+FORA RPC components, the key directory its own covered Signature-Agent member names,
+entitlement coverage, the created/expires window, the content digest, then the key that
+directory publishes and Ed25519 over the rebuilt base. A request carrying several
+signatures first has its hop budget checked, counting every signature, then every
+coverage of an earlier signature checked for completeness (WG-00 §5.2.2). Labels carry
+no meaning beyond naming.
 
 A failure raises: a :class:`~fora_sdk.wba.SignatureProfileError` for the profile's
 form, or a :class:`~fora_sdk._sigbase.SignatureCheckError` carrying a fine-grained
@@ -28,6 +29,7 @@
 from ._sigbase import (
     SignatureCheckError,
     SigParams,
+    alg_accepted,
     build_signature_base,
     component,
     component_name,
@@ -89,7 +91,9 @@ class Checks:
 @dataclass(frozen=True)
 class VerifiedSignature:
     """One signature that verified. ``signature_agent`` is the https origin of the key
-    directory its keyid was resolved in, the value of the member it covers."""
+    directory its keyid was resolved in, the value of the member it covers. ``alg`` is
+    the algorithm it verified under: the alg it declares, or ``ed25519`` when it
+    declares none and the key decided it."""
 
     label: str
     keyid: str
@@ -135,7 +139,7 @@ def verify_signature(
 ) -> VerifiedSignature:
     """The full per-signature chain. ``sig_count`` is the number of signatures on the
     request: the legacy String form of Signature-Agent is accepted only when it is one."""
-    if p.alg.lower() != "ed25519":
+    if not alg_accepted(p):
         raise SignatureCheckError("unsupported_alg", f"alg={p.alg!r}")
     if p.tag != WBATag:
         raise SignatureTagError(f"signature tag is not {WBATag!r}: {p.tag!r}")
@@ -154,7 +158,7 @@ def verify_signature(
     return VerifiedSignature(
         label=p.label,
         keyid=p.keyid,
-        alg=p.alg,
+        alg="ed25519" if p.alg_omitted else p.alg,
         created=p.created,
         expires=p.expires,
         signature=sig,
diff --git a/sdk/python/fora_sdk/directory_signature.py b/sdk/python/fora_sdk/directory_signature.py
index 5fd222de..5c791a25 100644
--- a/sdk/python/fora_sdk/directory_signature.py
+++ b/sdk/python/fora_sdk/directory_signature.py
@@ -3,10 +3,11 @@
 A key directory's response is signed once per key it lists, and FORA requires it. Each
 response signature covers ``"@authority";req`` (the authority the directory was fetched
 from) and ``content-digest``, carries created, expires, keyid (the key's RFC 7638
-thumbprint) and alg, and has ``tag="http-message-signatures-directory"``.
-``"@authority";req`` takes its value from the request that fetched the directory, so
-the signature cannot be served again under a different host. The Python port of the Go
-oracle's helpers/directory.go, pinned to directory-response-vectors.json.
+thumbprint) and alg, and has ``tag="http-message-signatures-directory"``. A verifier
+also accepts a response signature that carries no alg, as WG-00's own Appendix E.2.3
+example does. ``"@authority";req`` takes its value from the request that fetched the
+directory, so the signature cannot be served again under a different host. The Python
+port of the Go oracle's helpers/directory.go, pinned to directory-response-vectors.json.
 """
 
 from __future__ import annotations
@@ -24,6 +25,7 @@
 from ._sigbase import (
     SignatureCheckError,
     SigParams,
+    alg_accepted,
     component,
     component_name,
     content_digest,
@@ -154,10 +156,10 @@ def verify_directory_response(
     Content-Digest or no signature, and :class:`DirectoryResponseDigestError` when the
     Content-Digest does not match the body. Otherwise each signature is judged on its
     own, and one that fails is skipped rather than fatal: it must carry
-    ``tag="http-message-signatures-directory"`` and alg ed25519, cover exactly
-    ``"@authority";req`` and ``content-digest``, carry created no later than now plus
-    300 seconds and expires no earlier than now, and verify under the listed key whose
-    thumbprint its keyid names.
+    ``tag="http-message-signatures-directory"`` and either no alg or alg ed25519, cover
+    exactly ``"@authority";req`` and ``content-digest``, carry created no later than now
+    plus 300 seconds and expires no earlier than now, and verify under the listed key
+    whose thumbprint its keyid names.
     """
     digest = joined_header(headers, "content-digest") or ""
     if digest == "":
@@ -190,9 +192,9 @@ def verify_directory_response(
 
 
 def _params_valid(p: SigParams, now: int) -> bool:
-    """The per-signature rules other than the Ed25519 check: tag, alg, covered set and
-    window."""
-    if p.tag != DirectoryResponseTag or p.alg.lower() != "ed25519":
+    """The per-signature rules other than the Ed25519 check: tag, alg (when present,
+    ed25519), covered set and window."""
+    if p.tag != DirectoryResponseTag or not alg_accepted(p):
         return False
     if len(p.covered) != len(_COVERED) or not all(covers_component(p.covered, c) for c in _COVERED):
         return False
diff --git a/sdk/python/fora_sdk/httpsig.py b/sdk/python/fora_sdk/httpsig.py
index 83d46b3f..6ad241ec 100644
--- a/sdk/python/fora_sdk/httpsig.py
+++ b/sdk/python/fora_sdk/httpsig.py
@@ -336,10 +336,10 @@ def verify_request(
 
     ``signature_agent`` is the request's Signature-Agent header value ("" when the
     request carries none); ``content_digest`` its Content-Digest. Every rule of the
-    profile applies, as in Go ``helpers.VerifyRequest``: alg ed25519, tag web-bot-auth,
-    the FORA RPC components and the signature's own Signature-Agent member covered, the
-    member an https origin, the digest, the created/expires window, and the Ed25519
-    signature over the rebuilt base. Pure: the key and ``now`` are injected. The verdict
+    profile applies, as in Go ``helpers.VerifyRequest``: alg, when present, ed25519; tag
+    web-bot-auth; the FORA RPC components and the signature's own Signature-Agent member
+    covered; the member an https origin; the digest; the created/expires window; and the
+    Ed25519 signature over the rebuilt base. Pure: the key and ``now`` are injected. The verdict
     reports the directory the member names, and, for the refusals the profile answers
     that way, the Accept-Signature value.
     """
diff --git a/sdk/python/fora_sdk/pop.py b/sdk/python/fora_sdk/pop.py
index 6f5b30f1..a65e4b2f 100644
--- a/sdk/python/fora_sdk/pop.py
+++ b/sdk/python/fora_sdk/pop.py
@@ -48,6 +48,7 @@
     MissingSignatureInputError,
     SignatureCheckError,
     SigParams,
+    alg_accepted,
     build_signature_base,
     component_name,
     parse_all_signatures,
@@ -317,13 +318,13 @@ def verify_agent_binding(
 ) -> PopResult:
     """Verify the agent's proof of possession of the key bound to ``agent_id``.
 
-    Returns ``ok=True`` only when every rule holds: the tag is ``web-bot-auth``; the
-    signature covers AT LEAST @method, @target-uri and its Signature-Agent member, so a
-    Web Bot Auth library's proof that also covers @authority verifies; the member
-    names an https origin, in the dictionary form or the legacy
-    String form; agent_id, keyid and the presented key's thumbprint agree; the window
-    holds at ``now`` (unix seconds); and the Ed25519 signature over the base rebuilt
-    with the verbatim URL verifies against the presented key. ``headers`` is
+    Returns ``ok=True`` only when every rule holds: alg, when present, is ed25519; the
+    tag is ``web-bot-auth``; the signature covers AT LEAST @method, @target-uri and its
+    Signature-Agent member, so a Web Bot Auth library's proof that also covers
+    @authority verifies; the member names an https origin, in the dictionary form or
+    the legacy String form; agent_id, keyid and the presented key's thumbprint agree;
+    the window holds at ``now`` (unix seconds); and the Ed25519 signature over the base
+    rebuilt with the verbatim URL verifies against the presented key. ``headers`` is
     lowercase-keyed.
     """
     presented = _read_presented_key(headers)
@@ -333,7 +334,7 @@ def verify_agent_binding(
     if isinstance(parsed, PopResult):
         return parsed
     p, sig_bytes, sig_count = parsed
-    if p.alg.lower() != "ed25519":
+    if not alg_accepted(p):
         return _refuse("unsupported_alg")
     if p.tag != WBATag:
         return _refuse("bad_tag", accept=True)
diff --git a/sdk/python/fora_sdk/wba.py b/sdk/python/fora_sdk/wba.py
index 4d324e0d..4b714823 100644
--- a/sdk/python/fora_sdk/wba.py
+++ b/sdk/python/fora_sdk/wba.py
@@ -11,8 +11,9 @@
   :data:`MAX_SIGNATURE_LIFETIME`.
 - A verifier also accepts the legacy sf-string form of Signature-Agent, covered as
   plain ``"signature-agent"``, on a request carrying one signature, a member key that
-  differs from the label, no nonce, and a ``type=directory`` member parameter. It
-  refuses the bare unquoted value the v1.0.8 SDKs sent.
+  differs from the label, no nonce, a ``type=directory`` member parameter, and no
+  alg, when the Ed25519 key decides the algorithm. An alg that is present must be
+  ed25519. It refuses the bare unquoted value the v1.0.8 SDKs sent.
 """
 
 from __future__ import annotations
diff --git a/sdk/python/tests/test_directory_response_parity.py b/sdk/python/tests/test_directory_response_parity.py
index 5129e210..a8a2b401 100644
--- a/sdk/python/tests/test_directory_response_parity.py
+++ b/sdk/python/tests/test_directory_response_parity.py
@@ -70,6 +70,12 @@ def test_the_corpus_covers_every_case() -> None:
             "unsigned",
             "wrong_tag",
             "no_authority_covered",
+            # A response signature with no alg verifies, WG-00's own Appendix E.2.3
+            # among them; an empty alg and another algorithm verify no key.
+            "no_alg",
+            "empty_alg",
+            "unsupported_alg",
+            "wg00_appendix_e23",
         }
         <= names
     )
diff --git a/sdk/python/tests/test_multisig_parse_edge.py b/sdk/python/tests/test_multisig_parse_edge.py
index 9c9d611f..fd8d5928 100644
--- a/sdk/python/tests/test_multisig_parse_edge.py
+++ b/sdk/python/tests/test_multisig_parse_edge.py
@@ -16,13 +16,15 @@
     exact @signature-params bytes.
   fora_sdk._sigbase.parse_all_signatures — the full multi-label parse; refuses a
     malformed header outright, never a mis-slice.
+  fora_sdk._sigbase.alg_accepted — whether a verifier accepts a signature's alg
+    parameter, read from the presence the parse records.
 """
 
 from __future__ import annotations
 
 import pytest
 
-from fora_sdk._sigbase import SignatureCheckError, parse_all_signatures
+from fora_sdk._sigbase import SignatureCheckError, SigParams, alg_accepted, parse_all_signatures
 from fora_sdk.multisig_parse import raw_inner_by_label, split_top_level_members
 
 
@@ -83,3 +85,31 @@ def test_a_comma_inside_a_quoted_keyid_parses_to_two_signatures() -> None:
     params, sig_map = parse_all_signatures(headers)
     assert [(p.label, p.keyid) for p in params] == [("a", "x,y"), ("b", "z")]
     assert sig_map == {"a": b"\x00", "b": b"\x01"}
+
+
+@pytest.mark.parametrize(
+    ("params", "omitted", "accepted"),
+    [
+        ("", True, True),
+        (';alg="ed25519"', False, True),
+        (';alg="ED25519"', False, True),
+        (';alg=""', False, False),
+        (';alg="rsa-pss-sha512"', False, False),
+    ],
+)
+def test_the_parse_records_whether_alg_is_present(
+    params: str, omitted: bool, accepted: bool
+) -> None:
+    # An absent alg is accepted, because the Ed25519 key decides the algorithm; an
+    # alg that is present must name ed25519, so an empty one is refused.
+    headers = {
+        "signature-input": 'sig1=("@method");keyid="k"' + params,
+        "signature": "sig1=:AAAA:",
+    }
+    (p,), _ = parse_all_signatures(headers)
+    assert p.alg_omitted is omitted
+    assert alg_accepted(p) is accepted
+
+
+def test_a_sigparams_built_by_hand_reads_as_alg_present() -> None:
+    assert not alg_accepted(SigParams(label="sig1", covered=()))
diff --git a/sdk/python/tests/test_verifyrequest_server_parity.py b/sdk/python/tests/test_verifyrequest_server_parity.py
index 9ebb9271..d21f3f24 100644
--- a/sdk/python/tests/test_verifyrequest_server_parity.py
+++ b/sdk/python/tests/test_verifyrequest_server_parity.py
@@ -134,6 +134,10 @@ def test_neg_vector_set_covers_every_single_sig_reject_case() -> None:
         "neg_missing_fora_component",
         "neg_unsigned",
         "neg_repointed_signature_agent",
+        # An alg that is present must name ed25519: another algorithm, and an empty
+        # alg, which names nothing. A missing alg is accepted (accept_no_alg).
+        "neg_unsupported_alg",
+        "neg_empty_alg",
     } <= names
 
 
diff --git a/sdk/ts/core/directory-response.ts b/sdk/ts/core/directory-response.ts
index 4bef15bd..f5b0ead3 100644
--- a/sdk/ts/core/directory-response.ts
+++ b/sdk/ts/core/directory-response.ts
@@ -2,15 +2,17 @@
 // B.1), and FORA requires it. Each response signature covers "@authority";req, the
 // authority the directory was fetched from, and content-digest, carries created,
 // expires, keyid (the key's RFC 7638 thumbprint) and alg, and has
-// tag="http-message-signatures-directory". "@authority";req takes its value from the
-// request that fetched the directory, so the signature cannot be served again under a
-// different host. TS port of sdk/go/helpers/directory.go.
+// tag="http-message-signatures-directory". A verifier also accepts a response
+// signature that carries no alg, as WG-00's own Appendix E.2.3 example does.
+// "@authority";req takes its value from the request that fetched the directory, so the
+// signature cannot be served again under a different host. TS port of
+// sdk/go/helpers/directory.go.
 
 import { stdBase64, utf8Bytes } from "../src/base64url.ts";
 import type { Ed25519Verify } from "../src/pop.ts";
 import { thumbprint } from "../src/thumbprint.ts";
 import { DirectoryResponseTag } from "../src/wire.ts";
-import { parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
+import { algAccepted, parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
 import { buildSignatureBase, contentDigest, signatureInputInner } from "./sign-request.ts";
 import { ed25519Verify, readHeader } from "./verify-request.ts";
 import { type CoveredComponent, coversComponent, plain } from "./wba.ts";
@@ -130,10 +132,11 @@ export interface VerifyDirectoryResponseOptions {
  * DirectoryResponseError ("digest_mismatch"). A response with no Content-Digest or no
  * signature at all throws DirectoryResponseError ("unsigned"). Otherwise each response
  * signature is judged on its own, and one that fails is ignored rather than fatal: it
- * must carry tag="http-message-signatures-directory" and alg="ed25519", cover exactly
- * "@authority";req and content-digest, carry created no later than now plus the
- * 300-second skew and expires no earlier than now, and verify under the listed key whose
- * thumbprint its keyid names, through `opts.verifyEd25519` when one is given.
+ * must carry tag="http-message-signatures-directory" and either no alg or
+ * alg="ed25519", cover exactly "@authority";req and content-digest, carry created no
+ * later than now plus the 300-second skew and expires no earlier than now, and verify
+ * under the listed key whose thumbprint its keyid names, through `opts.verifyEd25519`
+ * when one is given.
  */
 export async function verifyDirectoryResponse(
 	authority: string,
@@ -167,10 +170,10 @@ export async function verifyDirectoryResponse(
 	return verified;
 }
 
-// paramsValid applies the per-signature rules other than the Ed25519 check: tag, alg,
-// covered set and window.
+// paramsValid applies the per-signature rules other than the Ed25519 check: tag, alg
+// (when present, ed25519), covered set and window.
 function paramsValid(sig: ParsedSignature, now: number): boolean {
-	if (sig.tag !== DirectoryResponseTag || sig.alg?.toLowerCase() !== "ed25519") return false;
+	if (sig.tag !== DirectoryResponseTag || !algAccepted(sig)) return false;
 	if (sig.covered.length !== DIRECTORY_RESPONSE_COVERED.length) return false;
 	if (!DIRECTORY_RESPONSE_COVERED.every((want) => coversComponent(sig.covered, want))) return false;
 	if (!sig.created || !sig.expires) return false;
diff --git a/sdk/ts/core/multisig-parse.ts b/sdk/ts/core/multisig-parse.ts
index 648f4711..9dfff81e 100644
--- a/sdk/ts/core/multisig-parse.ts
+++ b/sdk/ts/core/multisig-parse.ts
@@ -30,6 +30,14 @@ export interface ParsedSignature {
 	signature: Uint8Array<ArrayBuffer>;
 }
 
+/** Whether a verifier accepts the signature's alg parameter (Go sigParams.algAccepted).
+ * An absent alg is accepted: every key a verifier resolves is Ed25519, so the key
+ * decides the algorithm (RFC 9421 §3.2, step 6.3). An alg that is present must name
+ * ed25519, in any letter case, so an empty one is refused. */
+export function algAccepted(sig: Pick<ParsedSignature, "alg">): boolean {
+	return sig.alg === undefined || sig.alg.toLowerCase() === "ed25519";
+}
+
 /**
  * Split one SFV dictionary header value on TOP-LEVEL commas, honoring quoted strings
  * and their backslash escapes (Go splitTopLevelMembers). A comma inside a quoted keyid
diff --git a/sdk/ts/core/verify-request.ts b/sdk/ts/core/verify-request.ts
index d9961298..d10e9814 100644
--- a/sdk/ts/core/verify-request.ts
+++ b/sdk/ts/core/verify-request.ts
@@ -18,7 +18,7 @@
 // "replay".
 
 import { WBATag } from "../src/wire.ts";
-import { parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
+import { algAccepted, parseSignatureHeaders, type ParsedSignature } from "./multisig-parse.ts";
 import { stdBase64, utf8Bytes } from "../src/base64url.ts";
 import {
 	buildSignatureBase,
@@ -242,10 +242,11 @@ const SIGNATURE: Refusal = { kind: "signature" };
 
 /**
  * verifyParsedSignature runs the full per-signature check shared by the single-sig and
- * multisig faces (mirrors Go verifySingleSignature, MINUS replay): alg, the Web Bot Auth
- * tag, the FORA RPC components, the signature's own Signature-Agent member, entitlement
- * coverage, the created/expires window, content-digest, then the key the member's
- * directory publishes and the Ed25519 check over the rebuilt base. `sigCount` is the
+ * multisig faces (mirrors Go verifySingleSignature, MINUS replay): alg (when present,
+ * ed25519), the Web Bot Auth tag, the FORA RPC components, the signature's own
+ * Signature-Agent member, entitlement coverage, the created/expires window,
+ * content-digest, then the key the member's directory publishes and the Ed25519 check
+ * over the rebuilt base. `sigCount` is the
  * number of signatures on the request: the legacy String form of Signature-Agent is
  * accepted only when it is one. `maxSignatureAge` (seconds, mirrors Go
  * VerifyOptions.MaxSignatureAge) clamps the declared lifetime: when > 0 a window
@@ -259,7 +260,7 @@ export async function verifyParsedSignature(
 	nowSec: number,
 	maxSignatureAge?: number,
 ): Promise<Checked<VerifiedSignature>> {
-	if (sig.alg === undefined || sig.alg.toLowerCase() !== "ed25519") return refuse(SIGNATURE);
+	if (!algAccepted(sig)) return refuse(SIGNATURE);
 	if (sig.tag !== WBATag) return refuse({ kind: "tag" });
 	const names = new Set(sig.covered.map((c) => c.name.toLowerCase()));
 	for (const need of REQUIRED_RPC_COMPONENTS) {
diff --git a/sdk/ts/core/wba.ts b/sdk/ts/core/wba.ts
index b2cb5d5a..c8231142 100644
--- a/sdk/ts/core/wba.ts
+++ b/sdk/ts/core/wba.ts
@@ -11,8 +11,9 @@
 //     tag="web-bot-auth"; a FORA signer adds a fresh nonce.
 //   - A verifier also accepts the legacy sf-string form of Signature-Agent, covered as
 //     plain "signature-agent", on a request carrying one signature, a member key that
-//     differs from the label, no nonce, and a type=directory member parameter. It
-//     refuses the bare unquoted value the v1.0.8 SDKs sent.
+//     differs from the label, no nonce, a type=directory member parameter, and no alg,
+//     when the Ed25519 key decides the algorithm. An alg that is present must be
+//     ed25519. It refuses the bare unquoted value the v1.0.8 SDKs sent.
 
 import { WBATag } from "../src/wire.ts";
 import {
diff --git a/sdk/ts/src/pop.ts b/sdk/ts/src/pop.ts
index 32dca193..9352c02e 100644
--- a/sdk/ts/src/pop.ts
+++ b/sdk/ts/src/pop.ts
@@ -2,7 +2,7 @@ import { thumbprint } from "./thumbprint.ts";
 import { AgentKeyHeader, SignatureAgentHeader, WBATag } from "./wire.ts";
 import { decodeBase64Url, utf8Bytes } from "./base64url.ts";
 import { opaqueUrl } from "./opaque-url.ts";
-import { parseSignatureHeaders, type ParsedSignature } from "../core/multisig-parse.ts";
+import { algAccepted, parseSignatureHeaders, type ParsedSignature } from "../core/multisig-parse.ts";
 import { buildSignatureBase, ComponentUnavailable, requestComponentValue } from "../core/sign-request.ts";
 import { keyed, plain, renderComponent, signatureDirectory } from "../core/wba.ts";
 
@@ -130,9 +130,10 @@ export async function verifyAgentBinding(input: PopInput): Promise<PopResult> {
   const parsed = parseProof(input.headers);
   if (!parsed.ok) return parsed.result;
   const { sig, count } = parsed;
-  // alg is an early reject only; the verify primitive is hard-pinned to Ed25519,
-  // so alg is never a key/algorithm SELECTION input (no downgrade possible).
-  if (sig.alg === undefined || sig.alg.toLowerCase() !== "ed25519") return fail("unsupported_alg");
+  // alg is never a key/algorithm SELECTION input: the verify primitive is hard-pinned
+  // to Ed25519, so an absent alg is accepted (the key decides the algorithm) and a
+  // present one must name ed25519, an early reject otherwise (no downgrade possible).
+  if (!algAccepted(sig)) return fail("unsupported_alg");
   if (sig.tag !== WBATag) return failAccept("bad_tag");
   if (!coversTheProfile(sig)) return failAccept("bad_covered_components");
   const directory = signatureDirectory(input.headers.get(SignatureAgentHeader) ?? undefined, sig, count);
diff --git a/sdk/ts/tests/directory-response.parity.test.ts b/sdk/ts/tests/directory-response.parity.test.ts
index e346953a..52ec1a83 100644
--- a/sdk/ts/tests/directory-response.parity.test.ts
+++ b/sdk/ts/tests/directory-response.parity.test.ts
@@ -70,6 +70,12 @@ describe("verifyDirectoryResponse matches the Go oracle", () => {
 			"unsigned",
 			"wrong_tag",
 			"no_authority_covered",
+			// A response signature with no alg verifies, WG-00's own Appendix E.2.3 among
+			// them; an empty alg and another algorithm verify no key.
+			"no_alg",
+			"empty_alg",
+			"unsupported_alg",
+			"wg00_appendix_e23",
 		]) {
 			expect(names.has(want), want).toBe(true);
 		}
diff --git a/sdk/ts/tests/multisig-parse.edge.test.ts b/sdk/ts/tests/multisig-parse.edge.test.ts
index eedb54e9..5d00e9a1 100644
--- a/sdk/ts/tests/multisig-parse.edge.test.ts
+++ b/sdk/ts/tests/multisig-parse.edge.test.ts
@@ -15,9 +15,12 @@
 //     @signature-params bytes.
 //   core/multisig-parse.ts::parseSignatureHeaders — the structured parse of
 //     Signature-Input and Signature; refuses (never mis-slices) a malformed header.
+//   core/multisig-parse.ts::algAccepted — whether a verifier accepts a signature's alg
+//     parameter: absent (undefined) is accepted, present must name ed25519.
 
 import { describe, it, expect } from "vitest";
 import {
+  algAccepted,
   splitTopLevelMembers,
   rawInnerByLabel,
   parseSignatureHeaders,
@@ -111,4 +114,21 @@ describe("sdk/ts multi-member Signature-Input parse edges", () => {
       refusal: { kind: "unsigned" },
     });
   });
+
+  // An absent alg is accepted, because the Ed25519 key decides the algorithm; an alg
+  // that is present must name ed25519, so an empty one is refused.
+  it("tells an absent alg from an empty one, and accepts only absent or ed25519", () => {
+    for (const [params, alg, accepted] of [
+      ["", undefined, true],
+      [';alg="ed25519"', "ed25519", true],
+      [';alg="ED25519"', "ED25519", true],
+      [';alg=""', "", false],
+      [';alg="rsa-pss-sha512"', "rsa-pss-sha512", false],
+    ] as const) {
+      const parsed = parseSignatureHeaders(`sig1=("@method");keyid="k"${params}`, "sig1=:AAAA:");
+      if (!parsed.ok) throw new Error(`parse failed: ${params}`);
+      expect(parsed.value[0]?.alg, params).toBe(alg);
+      expect(algAccepted(parsed.value[0]!), params).toBe(accepted);
+    }
+  });
 });
diff --git a/sdk/ts/tests/verify-request.parity.test.ts b/sdk/ts/tests/verify-request.parity.test.ts
index fff1643c..ef60236e 100644
--- a/sdk/ts/tests/verify-request.parity.test.ts
+++ b/sdk/ts/tests/verify-request.parity.test.ts
@@ -180,6 +180,10 @@ describe("sdk/ts single-sig server-verify mirrors the Go connectserver oracle",
 			"neg_missing_fora_component",
 			"neg_unsigned",
 			"neg_repointed_signature_agent",
+			// An alg that is present must name ed25519: another algorithm, and an empty
+			// alg, which names nothing. A missing alg is accepted (accept_no_alg).
+			"neg_unsupported_alg",
+			"neg_empty_alg",
 		]) {
 			expect(names.has(want), want).toBe(true);
 		}

From 8327cc4931a0cd6f6ee1c232544913387d32fffb Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 12:30:30 +0200
Subject: [PATCH 154/164] List where the profile departs from Web Bot Auth, and
 let a verifier take the algorithm from the key

The authentication page said a FORA verifier accepts a signature made
by any Web Bot Auth library and that FORA departs from WG-00 in one
place, the JWK alg EdDSA. Two more directory rules depart from the
draft: a directory response must be signed, where WG-00 Appendix B.1
only recommends it, and each key must carry not_before and not_after,
which WG-00 does not define, so a key without both is never valid. A
directory written to WG-00 alone fails both.

The page now lists the three departures in one place, with the two
limits WG-00 leaves to a verifier: Ed25519 keys only, and a
Signature-Agent member whose type is not directory is ignored. It
states that a verifier accepts a signature with no alg, the key
deciding the algorithm, and refuses a present alg that is not ed25519,
an empty one included. The note that called the signature alg one WG-00
requires is corrected; the draft does not require it.

The JsonWebKey and WBAFile comments state the same, so the reference
page renders it; gen/ is regenerated. The Unreleased Web Bot Auth
entry, in both changelogs, lists the departures and the accepted
missing alg, and the design history records why a verifier takes the
algorithm from the key and why the validity bounds stay required.
---
 docs/design-history.md                        |  47 ++++++++++++++++++
 gen/descriptor.binpb                          | Bin 690639 -> 691422 bytes
 gen/go/fora/v1/fora.pb.go                     |  25 +++++++---
 gen/jsonschema/fora.v1.JsonWebKey.schema.json |   6 +--
 .../fora.v1.JsonWebKey.schema.strict.json     |   6 +--
 gen/jsonschema/fora.v1.WBAFile.schema.json    |  10 ++--
 .../fora.v1.WBAFile.schema.strict.json        |  10 ++--
 gen/python/wire/models.py                     |   7 +--
 gen/ts/wire/schemas.ts                        |   4 +-
 proto/CHANGELOG.md                            |  24 +++++----
 proto/fora/v1/fora.proto                      |  25 +++++++---
 .../content/docs/protocol/authentication.mdx  |  35 +++++++++----
 .../docs/protocol/standards-layering.mdx      |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  24 +++++----
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 15 files changed, 161 insertions(+), 66 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 8d514514..074ba490 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2677,3 +2677,50 @@ accepts every Broker signature. What the hop caps count now is recorded in "The
 cap counts signatures; max_hops waits for multi-hop Broker discovery", and how an
 Exchange tells a relayed request from a direct one in "A relay is a requester
 mismatch the Exchange admits".
+
+## A verifier takes the signature algorithm from the key
+
+The profile's signers always send `alg="ed25519"`, and its verifiers refused a
+signature that carried none. WG-00 does not ask for it: §5.2 requires `created`,
+`expires`, `keyid` and `tag`, and both its example request in §5.2.5 and its signed
+directory response in Appendix E.2.3 carry no `alg`. A Web Bot Auth library that sent
+the draft's minimum was refused by every FORA verifier, with nothing in
+`Accept-Signature` to say why.
+
+RFC 9421 lets a verifier take the algorithm from the key material (§3.2, step 6.3),
+and §7.3.6 advises against relying on a runtime `alg`, so that an attacker cannot
+substitute the algorithm. Every key a FORA verifier resolves is Ed25519, so the key
+fixes the algorithm and an absent `alg` selects nothing. The request verifier, the
+delivery proof of possession and the key-directory response verifier, in all three
+SDKs, now accept a signature without `alg`. An `alg` that is present must still name
+`ed25519`, in any letter case, as step 6.5 requires when the algorithm is stated in
+more than one place. An empty `alg` is present and names nothing, so it stays refused;
+Go and Python could not tell it from a missing one, which is why their parsers now
+record whether `alg` is there at all.
+
+The signers do not change. Cloudflare's `web-bot-auth` library requires `alg` when it
+verifies, and so do other deployed verifiers, so a FORA signature keeps carrying it.
+
+The same reading showed that "a FORA verifier accepts a signature made by any WBA
+library" needed qualifying beyond `alg`. FORA departs from WG-00 in three places, all
+in the key directory, and a directory written to WG-00 alone fails the second and
+third:
+
+- **A key's JWK `alg` is the JOSE name `EdDSA`.** This was the one departure already
+  listed. It affects only FORA's own directories, because a FORA verifier does not
+  read a key's `alg`.
+- **The response must be signed.** WG-00 Appendix B.1 only recommends it. FORA
+  requires it because some widely deployed verifiers will not register an unsigned
+  directory, and a verifier uses only the keys whose response signature verifies, over
+  exactly `"@authority";req` and `content-digest`.
+- **Each key must carry `not_before` and `not_after`.** A key without both bounds is
+  never valid. WG-00 defines no validity members: its example directory uses `nbf` and
+  `exp`, and E.2.3's key has neither, so a FORA resolver still would not use that key
+  although its response signature now verifies. The bounds stay required for the
+  reason recorded in "Inline keys instead of key-URI pointers": they let a verifier
+  judge a key's validity from the one document it already fetched. Accepting a key with
+  no bounds would change that, so the rule is listed as a departure and left in place.
+
+Two further limits are choices WG-00 leaves to a verifier: FORA accepts only Ed25519
+keys, and it ignores a `Signature-Agent` member whose `type` is not `directory`. The
+authentication page lists all five under "Where FORA departs from WG-00".
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 68c7fe1a9a37cb2a27ce65530bf60a83ae236e25..aa9b4b616bed46e9b0c7a236c6ccffe650ea0c45 100644
GIT binary patch
delta 17393
zcma)j33L=y)_=OFZc;BQNd*GwgzoAs-Ca!*wvYfxAS@~>;>xJwII;xEsKAi8&3rRS
zWC@Fm3g`o(tcFF#1;(K<iojo%k3}{`z+oL{f*{~1AOed2-+lFp^83#DpYuOQj=8t)
z{k{9{z3;wTuU_w-WgeYt)=hLxR3^5XsJ`c(cCWJcyW|V^y4?%d%=dKGT6cR>PB%1u
z=f*z|{<TgvewR8Yl<{wkDQdp%Io~m5n$P9^TuTnf(q4Ae_A-VUHxId|!l<r#Y)s{N
zqq?%Dni*9!M$K3wSUIw5QBjwk!A{1oF(V=PbmjP}QB{x{_C)nqW7vohmE&rv!6)5e
zHBXJNG@hxd89nx?8US=MYDQNwW1t0LJYM;nF|u+*)yS$bkI@rAJT`WGRjZoOPbOR1
zYd5-TjS3-DGkRE!@x-tZk5?O&0K;Iz$38V?WG7~f9dA4{dTe#2#W1R>jWJ_uV3~2x
z&HcM|>(<k#sd}=qx@Opu<2s3ll`z+Mde{?HBMXdQ-ICwAGYlA2HKvmEm{I-Ih|$KA
zl}`?@9ADkZs2*Djs{o1rhC%L$D)5KZRN~KZ!^YFp$WbG!##fH089V+t<C*bQH8quE
z$V&p6VLoHWR2ok{RSlCyj-)9*X$-F%H5N{h9=`6qr>bE?6+8#0R2ML2+>ZbAD;>0r
zZO(U0)mb;Ds`*Nau3qHZv$dl9iyf6zb|Z5W(*<rv?FO4{MP!?F)?KLJ;Sao%SL>1g
zgQMaiuA}0D$`7Q{Tc{|ydX>NE)ynd(Iw}fOt~x3TRIZXrxljRhjbHX^eG9HRDy^V$
z%~5GZLZnhAR8(E9_wmPawDQt=-}T9;(5d%nOio6HPQCBOo7mGr$E~ZAd`buJXycxN
zci%tgo`C}j_#L@gh+oOkGHdOWgbUd(vhIHe-o|!YXto>O7<rOU%akL#G4do|R(m$n
zC5HCs>QtZ7-aEnNjQu~ej6amC4H)(dBmO^Z@W2MZ+BSG#!&IN9OB+0}VXCiP7F)ou
zQVVp?>%Nqo$uDv>pF90^Uuq89bU$n>ptRVLObu#V%)%XhrGwB07hpU5*<qUm*baX*
z#x|({E7Uy){3$Oaf4W2KuS5>`Q?nt~N-b=yd;Z~9j`>w~(#2YXZqQn#SUg@iL~H4O
z*sqqcbe1X~Ay<z0)rwzmFw9ZnEJ}lIg=E{MWbIwr5_kS3znmzzu<epx<}64kUGgI}
z@`Vl_Ug1NAYK6nE_!W<^zfhr^z2a}3W|L64;=ielO{Nl=-rF)naiunB>BPzC#dOAC
zhv2BN=8C_#gcXZ%VEi?He5ls5;F@C^CHghLW&=~AU-RpktU{=OsyFy8ztZ~kuQwDc
zl?s(s2xGmGmLZLy#IHAWa;Y0bQ{vYfxgFV3N~J;tnLpW3I(fN^zw>~W%fI@SHn|iW
z8%;&7O*YaxN_AQilMP?gCV@8DFcYjsfMMim{LKfnr%R_f2yP%ua}X%Cry0Jk5`j{C
zno-n)l?nvN&fpI}h;=x_L7>E(;mn8<bB3X3Nd!vF8Ai634G;*eb@e6w`GeZcr7t-M
zt%2~8gU}iXFB!U5BD4m=OGZaOyH6k>db9Wg4{1ZoW;qC{K$ztqqyk}<p$8;FDiCHF
z;XJm(BOo+gU6}m(A#HH0vV{(Y28@Lch6ap<jujd(7LpZHTL}!NtILv4J)%u_l`V5H
z7%-MO7z`N896J~=mXRH+-2x*`S63&?9@XAc%2qoVX~0<RV59+KwV?;)T+)EC+K5Ei
zR4YSn(A6X_7@<wCNIDQV03zu?+yIEAq32788vv0sI(KCy!ipPpwb@X5cuhWTq~_&q
zM`}5xVAv^kBZA&+q_vmIHv+5K=+N0Ffz@nuD`LF_)=j#)jz2z9D=l5;Alw9mbw-+<
z<2M0eo#E{+5pDv)I-|HJdsrZ}(bbLo%aPh6r5hcDHki*wXFhF!u+h+C5}^$cHX4b1
zc8@^7V&266RH@xpy2(LE2f`)?Asq;t4BaYtg-SXQHW|^l*a!=i3|-yIZycrdDBbEH
zWB_5SgOCA)t%jZ>ZO8z^R>NnouEGXgSGV)pQCj!X?GAztgzXN34utK7Zm(S(2-^)K
z$bK&nGIezq|7Mg{UAoIb$OOVJ2O$#(yPR2M0$~@;qEaBV)zy7`{$tu>rTZL&wur?(
zBdwh@yDbp*8Cjid5(xW@!Y=GyfzVD@_w$O;+Wn>b9fWqUVZUQTJ0R?LX3-7^`)L-p
z34|<NJ;?Ws*6t`f=pbYP;h=+%1%!i!9+5U=0pXw#Guca4g16Vz!~EA(+RU=U4n%uE
z9Cjeu1LClu`z1tsKpZxLVYbX#XB~9)WYYYdwn8a8>0opK#z`YBT`F||#z`Y1&nAI!
z(ugP6PRopJT|L9opVW3$oN*ws;mtEfnosIv1LBO~?`D&LIAioEVIN{!K{5C0p89|?
zA&~Ts(R#Uu;ct75d0|R@;QFTE1x|fHw_&}&sSgA~tc}<sys3l}o)BooGMGlV*uiLx
zJs(h?WPUMJ4hnyOzue&Q_AFF#@N9BGZuTI7J~@z`E3M1{`s9E=z>ZiG&DGWE0VV9+
z#WOayF5v@fw8j0wuuaW{snZ=(a{)HpF*O%p)5+BLJm?%c>z;Xmls5w|Z<8l!KBX;D
zs7)8|3wAfljFDqSOI_28UK_?&{{AU+$!Ok(p}$6V7Ol4Wb@bJEhY+pr*fCE$C*A?5
z|FwF02F2=eW5=MocU~ss5Y<Mky0X%El%yXG#?dgRp?m2JyXOT`+puj49M+k7kA(rn
z?`>B2nP;>bG>FfPu7U~wtNEsZq=f?Yw(7BCepNaA_R8nt1(=#WtN*8=*X_g`#Pzox
z+tA+fJ)>gWxZ27wBdeY@`W19B#B}c&*ni02!2|CcaIeslZ$ZwqtyWTa_PT*pHJB^4
z6__3R2u$xfiG)}fkVODb;fsZVENj07i5R9Y40QCd*{bjj9<NBg`K*?ul&^3=Tu6i!
zb|Q2ZJ=cnWZpaboJz+&46lRyHh3ukxl7W=<$!mYmo>kf;185;11#}m3do!Q(CvA9s
zb3n0bDVP|rIgo4Z-XH<h90*6)aG`>SAMv(-)<%|pWE;~(A!9zWjR8qQ0ohf71j0uF
zbXC(`Fs7^S`8bfWgRl9sHm%LafmAPh2*6#*md$)ft@d!i=78)z!35IgfNb$V0%>yq
zE#7`wEM2Jq+|CcxY6l9oJ32J__JC&9Sja$Ud!R!$`z;3Vrh9e;Qcm)tb=o8PE*hN5
zeK!p5*&9$k=Xcg?<7)Aj)#if_tiAU5Ac3`)#-~yM5~W~opzY@<1v>g{VxSc0o_zsz
zf50uugXBT)(||{Zm}ZN4boXZg&w7{Gvbxb!4h57fZ`j~v&uazwAZ#OOLWcsH)w4np
zV21*2+liL0n}XK(FrV|hcJuJV&=>Is6Do%T?L#&RmBWENt1-n>G;xOmv3o@ePNZnT
z4+rA+h!$LOs0BY97;=}WY2B#1KF<42&;o_W?P3Nd#yM^mGms=i#q1izryKRpEdicU
z=ehhS2tmnJ01`RVV&@D<Ahp<)3?z_RsFK~l6nBR1ITc9xCg7sl;ij$sRKT6hIx*Fq
zL3wjJpv3s1$t=QenxuJrAjQP#A-r>%Cf-lTLh}soI!PPgI}=bueTR$-GG_vTAiGt_
zfI7!#PttBP&IJ^)o*+YBK1b_m0aDnl<0K}K@)N%{Nt@s1e8Am?{TZq{nR0=zoUGOP
zE(8?OZxIu!7byFO3K^L2Js;GdJ>dI3porH;$dC!&2k`ocH3kyY4}5)tHq!TlbTu)F
z8_3CJ1BDFybA?w-(Qffw2`Hj=K&BOBu2AXdD`epCANkTLT0i4Q2S<g>kA%}erJ=j-
zX$YpglT4ked6e{qAWFkRid}b_%ru_<s`grU{Eb*m3(AB9iAhWg%6CGLuw_~h?}S^a
zH}6ilH#2!|y0*<#HZv&W4KAwQ%%H4#AW15iW%bn{fiW`}$z$tN1qO_4N?w?uRj8#+
z4u%4Zrl5S^>MpXpDd@A>Cy>Bs3Zi|YO}INz%lYqTYJq~~LAm>aiD8!q<?aiTgo1X$
zcBh1Wd)bDWnydV6XH?46w}Y}hfD9ns4$AfbBp}`nB2y=jKZ|tF+F;7j<h5CvqNJ}4
zrUop37Lh+cAb&0{_`vogn85nL_9RGPeL$XEPNlzyJh?e}{8i0VN;li~fD12d4yIYP
z9wbQx16Jn*5*V9<ag#kKAmGSt{N}mZAIr8m2;|3Y!8B{jDH49%7R<5QagadR7R33(
zMav41pCzx&)t*sGKXWiz0pqh^n)UWwBpmx$Fx@IZAW12R_fCpM5&881U-cSdalnoR
zm@xc+9Se|9IdDA|MObF)k)^LA6i1vv=_Kfg9SVp5;fNgykU%&>p+GOCs6BMgm%)@v
zynMcPIP=S3YI`<=GP?&N;b{pfU-SG0+6%S#%c`^B1Fa<}>nup1wFFUTsn~-=v2O`x
zeI2xlJuyVFKN(a{2d!c+dC>bRD2u&hq1c}aQn9Dbz6ZtiTu`~oJJ8@I3$-DYAgty9
zk1)e?_6$J^QTd(&64>X0KC9CPi9&uZXbcfs4Ur9+j)0#F2JU2^S(62MKBxq|n_c|e
zA}zv~c1_LX;YHe<e6a1AlR@W$n$?r`5D9QT=r_b0T@Ol!@A;`k+I{8UJ9bj|zqgYR
zGC=q~7_fS8kfamrQOxF2BU-F`ri4<qCjYot>(DA=N+>nUS`@{!D5i&a#;aN*@3U0%
z^q3x!HsKKvr-x*b0SUzEAuNr5P{&vdi#;<#%IuKp-LCMndTQ_Fnx&f8RSTvyD~JGL
zW=OM6*+2qeW(b9k;t3M*oEhpkJJd>SgT$bCs<T3Bsqm-dz=5+uq5NO605mI9*qbGU
zB@o~tCD+^0xNrP0K4iHT&IfH9L9XQ?&3b<?7Ov$XZw`Ax=mM#cFI=vT$!~O2$d`>F
zdA?aJeAyVn`DRq8U@6V#y;o@Q;qya^wfc(1Qkox<s}Ce_=ZCQRsQ(0sG?^dDxmiwB
zwf6h@q1=IDzb6570JPuF5B2LW&LxUz`7PpGR%pG-7KLPXf=S$vEQKIp>7tN)hX#pZ
z7ln)fYoOdK7S)=Uy{SztZE_&!ysF88p!2GxkZ!dmPys|!2xn$=zF4f_ylNR&R%(T1
z%NztcuUh6H(0SFekZ#pKr~qME2=#9<?MB7a>%5a3vr>D*)#Dw<$8<#XPDq~LLI_Il
zgs=hs)l$;XF^7~7kzI|g_=$tsGXBk5+RwG%*>R=wsbokNi(-Y&r;?$zSu(jaBv&%j
z{zD`eb%uB@lFPF;q<#>xiiPAs@BNT07LtWx(Hx>;LAA43!BN-xkP`G}82r@+PrD*;
zu=c>R6Pu2?)`#SthNpmBAF}tfVg<)so3X~wgz<OZ)jSVvc05UEU7H<G(plH$klfjz
z2%ya&*@I>3o^7F&{UNIdqoa>)A-67iuuNLU+e1n~^k89-cnVsS6E{e#knJIqliSgi
zWYU7z$sb&$4fgGX4y7nDA+s}tw~WC;2GlOTX_Yp_w<{!@uuRbb?Fyj@dr-*0x;?zh
zYVFs)Jt5i5Wr_}HPYBJNg@eVikH5JZIQv41IO4!q)B)`a#p0|;;J^o;@%DeyijB`g
zvT@8*+>rS!gvRk*6fk#Nl>Si4mE@SeX@#xy7MeKD^WAM};wNe1#<A9ShCyO(psk66
z1jtF6I6l2V7!ObJKvL`LI~B4zbz(y16fIR8uYv^iHLp!-Lw#S{lLC{tG^x9V3?_b-
zpHFJ{`p(+UX)7jvmYmaH$YA2%@R4h^fxd4-ia6r}I8FQ;TA$P&wxt#RE#JCU>*xD6
zBwI)@A@gkrEhKg-$RN|s^XU89{l4=d+0udune!pEv^Zsg3>N7{KJR_)4&OybrZr?P
zk_;9yWUvY^akW`1^j(sPOH9aIqKb@fW*~7ce3{?ftQ8rT9sg*MxlI09L!Ea!-BTA%
zna-CsYk$}4!tP8FhjtW)`mhodafpC~t3g}y1__M%Fy=i7<FunVObGMiA85DvCxoq4
zL|h0>2*a2^2_aCE!+g+(+MoTC!!n}nL?kAM5zz`Egh)&Y^Og^_exWI0>B4p*6jQ=*
z;SeE&P)rNsM5lu9T#IiAkFC=>8(@e%9OF_@riFtcc9xo!65aEcaLQ_)T&JDM_)8c~
zi)hD7XojzZt(|hndd-vnN?4X6Ji>%t3Co=lB&>QRjGdCsgiC0)bNKV?aV9(`EbBO!
zi2a<ftm7a_D6CuiKS&_Vp;=N9E}`se<X6_C2sb(ilo^fTH0uo$GC*hyhfBnc0}=?0
z;ohZeI@Qw>B9|mbZO~@83YLWBt_3cXmW1W51(Kw~2=!*#K1!%*T+RdkN84Jq+!>cX
zxhxOM(`?89VtLqWwXPrmu{?~{l}cv`W%$alIEUkXKGr;iD`mLp5foR3Wzhr)#g$>Z
zXqM3IR>9pUngc+<l2wigw1cg3oJTv@s<5n@5C+n!FskPBsfcG!l+AF;$>gd{noG^t
z7Pj99dQw1l%78wy4FTP02NaKhxYG_ONFeT{fZl>h^(0U4<}Yv42IcQ|R49VG!}6d6
zGEmta#z93Np@InR<E^)A6&3sJY4lXcJNxWufCR$6u<SHJ0%2bmo#q<qw|au~91JT*
z!pS2CwE|Zy7*Get+7CfO{a{$`hajPTFf5yAkk}6ohO>@@t^JS~qIo_PRu6}*{ZR6t
z_eEIlhmwW;@E>7&KkP|qaolA^wFnd<b=(dsNSJZl4l78&9lsvdo;2kaE3CZs6V21F
z#c>C<HZ6`jC_h^4s6r7yEfm$k2x>3gb2^+-A8~p682sD6yL0$IKhZj6oDQdktmWE^
zqI=egZZ{BsK5M%QB%sgQ;ROlkvlL$Xa^8!=@GU>POM5o|TStY$`)ydeNh~kOK;_$T
zhAzIz^`ZrOfzRBn4b8t0mdAKtLghj@*J_JELghjjZ4qieMget+x7(xjE4bv0LNUA)
z)~qi@kRhQkN;oa1UgY;HaxpE~gT-{k_BtLx@rvzrkWjpG-Rr%`>va*anEHbNPF+M+
zB9P*ttVAGzR2Pwp2_%r}B5?a};P&3SXJRBJ$<y~~52sIzq~=-9?oG~a;2CFdRDr*N
z*AS6u2@-e>5m_5S0<R$gUz?axZ*tMJ2*2Y~Es;OX(IIC~i^#PEA?QqtU@hG#bl~h6
z{Ebhwy9#DFDugs6BIDCrID19}@!3sZKzft68<WA$w7p7Mqdj$SVQOPUP8}pL8Y8lq
z21!a0Y+9#j0rn>MFHUwopgrO0yV${?vx&tH1_feqM1H%44lou+uoH<z+#7-LERQH}
zB@Z9eid?n$(^|cF0KMfAxq3lDZ+S$nUXWP5%OhEDMXc3J46%AwMAW}Vtko-d(0el?
zSFdDY^{$NAtG725)^{Vn=w`vOSXMU+5~jQxk%bu~Am5GHg}FC18*8jw8UzAPS>rf^
zUJTYa&Y%~AHFhpR7)Wa<m;Ox~ZK>{Qj->3t8ZI~Z-S4^E^3I2~9qG-HRKrTEQc9~0
zBCWdNZ$NLb{RI-x8|<_K3Fr-!R+J*8lnfv9FOFz;m40j+2PP0cwv7WxLJ{4XHAo<Q
z96|R%pJ7XBMQ`Dwj^Z=y76*ZRw<VHh?RAg=!j?$H`V<Tj2wNiEx{K9XO4PPjkKwd-
zTSUGnfCr6jwrfF>%yrk6QikoeTsr`SpyV<I3F~(|)>EGCwq1*-K-x{Ny_f~pmf-_g
zUP@zf#&NACEu%iqZeq&FqZ9K)6Vn|8ASdR@6a)##iFtCRf&}EmJh*g693Cm7$sSFf
zIHP^iw#(5xIU{h1otJHjx(E_VNAvOv*k)=w%HT#%OP=y|@|cTla@FEbE8p<|dM$Y}
z-$6pJB~Ru%NaTA<Ue?!nR=yL%I_k+&Pv=?rE_u-VDo^ISWYJMi9_9OjOko2y&KIM~
z%TYBMRM~6VFc8*RPnjqHFGghn012aBjLO;v65uaJ(e=}L1xOh6Vl?z})cWp73>bx!
zcquBsJC;!dXGcZ9Qv?FfW=F5Pib6I!D%TaB0)2MWURPyQqvu7fh6e<I<~ep!jh^S&
zNyTEGV<#1hc~J!aYg$+3x@UeAMS5i$b~<BzG_`}Zn#w8mZ(sl%^>haT#5bZc93X-C
zMpVWgBoN<-BK8NU5iF-*t>8~(utNna932Y%im29BgdQ@`SrKjDfxTeqU<JL!|4V0o
zDR?U?Zzh$Cu)h^;eWTQ&u)h^e&k#$doTzuD_drlpvb_fqqrGc;52TQ_y;n|-Ut@WX
z*R^Gy@-?>e@CZ{~V>=HdfY#W~0|}rt<h;cSoYx0MDVp+ma#LFtaAh<{Q~j3r`jGcF
zTHfmo0+1VRPk;pEM%#NJ0lAU9_YQ3wec(OM)~K>Gs(R=1;|I0nyrw;Sz7{NNF+c$N
zTcdI@fQ0_ms9X#nk#}38Sv!$;bd*61u^9e4s_uwdi$U_Bw=F6cgJfYbY>(Q-zYmqQ
z-O*nZe{kStu&go&5~l37-3$_tyRRo{A0qc#Ztf2PPTz0)86=#t-}W;|AnmvP3{t4V
z&kw=PeRa>FXv#<YYBqZ?awv+5PdDoN;zr$(sB$8zviIpmU0->lj(GezFI#)-(WrWh
zI771@VK&F2YX4twFvxM@*l_=fDqjKak2V@YK`j1U4*SEPfBz3%di`vPs(l<Zio?mM
zI`BH$nW*v~py6Ow8i(>mJYJg1KCL|)mDl}*apdZAQT1^Lj-2;RRDI|=+_zEXBH%J?
zG!!byqDzAUg`D_ZRJHEvSsdV=kE%T!T=MLNs2b>b9r%Z+@*{wMX9KIchgkfbj;yNa
za#SsMl<DR7N>uIp3l89}(vaf4w=X4rT}+gXA`pmiT}&n}NSId_lVt-WRO@22Wl-Yx
zrCe%=C2?o$4p-L(M~l+EAtnn4q@dLhL*bz7SbfQF(_)H_>sa+Vi<eoY8f=UVz6X<Z
zlN2zf#bhA?35;nm6q29mDrH}go+UA*De1zOQ1>wWX~R&GE{VyC4>`ariOGr&5->|*
zvf_ip%3Bf(HN~uoPYkQ#zY#;lpG24G`cmb2FZpPcwQg1Ro-+>B{`X??;|zo_&U>+R
zYn6e-IPb;KY*1t0m!_7CS#QZ7naop|jLG$gM^H@0<fZ`<ipiK=_WIJ|U5DV{EqNda
zn6l0>f!>nWIa8&!Zk;n#YU|d;upXOk#Dc8A%8R8;iYL2tVoN;jj>J+k*#z3cD=7Y7
z#*}v63;f4XEHBxn8+*uA0FG6>@Eo{b#x(015lG;E8Ov<Tme4j(L2)|Cd3V-SaMIDC
z3^*B+4L)R`b25eof0{KUEuG}=im;P(J%^!1$SXw1&&9H=TR|Y9bdF;6-(sLtd{jCg
zQzpiFte9<Sb3T@O6T3@T0J)3&r($+b{>7MTgHhlw#<F4(n*x6^mdF>^x+^HAm-v5`
zu(Ga~Vyd;lfeDpMv3Az`97w2Kis6FP&0-Wd`*KX}>Mh~*C9Ey~xr7yV1;hI6P$A-Y
zIo84YQVJ5vmt*)+O1DBQD2!KQYRuciQm*OA^7Fy4E;r*bM!p)$v_92>g!0uGu0Yc5
z@Cs_kf8x7(vOb-EimBFZIxwN~Q_M#-!A&wy`6*UfE?t7dz@KAk(W@mai{IOe_3R4D
z%FPOe4(5N3Wfw|KI+*`C*0sC1y<R~_g!OT?$lKYnbYCwP?FxpiOo#II@$1TTC|@6k
zG7jQk1rE|D#MLf1h!Z~Q)0>qPf?<8K#A7H=h__G3k?9zHLcE|eTiO~K+E4eq5>MHX
zT-uv8wbEaS<2yOs$?b>y^zgVcm;a^@>s^b#tXFjKfyU!)tbl_A8js@^3N>>ev9x*I
zJ2!59d?JRpgE1$L``C1?OmdKlbK>}_MmM7+i$2rLiI?|b=PB{}QHC#wE4O+7<uZ8t
zzU<t?psaF(XNc^AxctrwQpo0X5i<k{n-;{o7uh7jvLN1L5W9(a2$x*HAYObcd!EW^
zKdOvP$zc^tb&YIthM?-v6qgkZLKvbcE?+=F0;4I87f{LrkQkyV?(Zsx5T9L|;zk$t
zBj$(asGH4kWqn-re$9B71-K5I{=UbPJk^g4b=TsFJufPw&CZ~-nwp(KX*D&|pq8(x
zj5f#p>)~r^U@(f+z<dx_KZ;uojO0P@!?<i<Bnu79x;Qm3$J6NiIZO9!j;CDU+iqpY
z^v!X1j`#qQMOA7`TuE4$P>u~^9zRI2RNZ(8&uxk0=;b9i5;UyckyLMEy34mCu86zd
z#D&z3IPQAG!yrNJ<lS#){e3&*ib?(>CUN6<zo7&3EOPEA{FU2Tk^hspQXpmM4#+3*
zE?wCae7%PdiphcGsoU|pgt7y1MN|OdLh3-gP`o@638(|{E(0hqf`p9+;$8c*o&p2z
zKFB-Y$$I+^I>ykKf`ep?WiV3h5TAM{3_j!-LthFGkug{-z(uY2f}g&VmHWSlD{*Ns
zeJS`N-YK8$M)`#ha^ytvmLY7f%YP!Sh(bVINS%mx?Z!T}riDsyI$3--yI=92c5I@r
z1*gd-dUJplmi#%s@?Lf*dM>VrL?<SM&c#c5v8$F4K9HS{E8V?kT*iI8{x;Tue|#T1
zVt{A+Gz}W(<6XL;ekp2y-E%3PQg8AN_p>|oOL4s7&?#$wDg~G0%2jR*W#zT_%c@G?
z!<m=k+15vUknr{8I1c<NJwYNpFUP}Ik)G6d5ySdLgk1_G2PRyxOMzsGA4yOtxQK~B
z6XVpGO2pfOQgCD_`%gJ2YsuglVpwO&bqZ3*%KL&KVN;!nuSbh1%iHUoNoL9-p7sD+
zls?IH`$U$vr!1dr@&%JwGy(z$lT8^#kg#vEi73+dp7vx)gUM4LWCi{PQxO%1xDaYE
zQE~8#Cy=0~nEd_+k-$?NB#R9sy!b;1mQ6MJiU*nLpK8i<02jJbO{7Bu?h8Q*Sw1)U
z-Giu{Wpho%N^5W-HP^(M2rVCwz?y3o-72!2NLV@7>~RZy$j4)NXdW+lgyo0knR20k
z35a<n7RneQgDh{vZJgkv`~<$x^TtQm1AZ`y<p`ATjb^XjY&NA<drJ7%xc*!As{b{|
zDoXg*$f{G85E6bN-}+njwSS?hlt?7X_k||DpbSOI4bVMrm?<Cdy^pf{BX5}aJrTWO
z48RM^o2K%%sj_Pdn(YDdg@t&@+lR3~xr$esYCn-y)-z!K)l|p*f&-7dW#Wy6_VNLg
z!K+N=ZzliG6joFV8q)>Cx)}-*{#s?`T8#imD6cYcXNwXUBocX*8U34SB{DHYBCj^(
zo+ddkVznvvG|8ewUTq?g#S8xcWRGX9sVL3-?<3gf!||t;#drXN)|zS7-Bge;XssC(
z%M=z+7Oyo?Z7hT6&2_EWtr-T<mWt;vNXPK+n`&n^2br!8)IICXl%4$SNXFCGo2fqb
zGHrGPDb+V6XIHXJ*Ik=T*=&M~@iv*7b$$R6<83n0_S5bL5`o-g>SbayBGIi2iOf=V
zz=DPTj^w3L>_J!U4hNQ|vBQ+7#{<PQc9=LlwqWU!&ki$lu!tI-5-f4r-XRAP987D6
z+07nXurT%xv(N49QY)<K4!Y-aGvyo8<^8IaF`%kCxqCFeIO?C9@*-sin(_gxLhB<w
zNEiiLoHn{aVt@lCzO3Q4E=W8)#M?j49`+wHWtjvMGKa|jQ)#2?KnwY3a^~YK&E-F8
zuWxXPO_kyuO8*YD!2iiVe1fg=|I<{&JrH6-=$|I;f$Xw`u)bUP3s15={uWaa2?!xt
z-Yt}Xn=BzL;M4q%W7rn|X;ZPTfOZfI__T>H`FN?P;gCV+_@iUl2mW)WBJL{@6G-Pw
z+*j(0q_|o4d}rd~Sg&!cPv&<fZY$C1xS3YR1ylK6t`5+E0>kPbLBb~&%=T6b3=;FY
zVB-9qk`W}5@q!urUak&eh}Ch?ULBGHLoV8@L$YXfT%^_UFyff4d#;!%lM}q}@7Y88
z71JFS#W|b8chyvitnh(^HK46Z2oktgspjDKbna{l-;ey_?^#dZk9Nrc6EZ(i$)U|U
zo5J)HzhgWr_x)rSI53Gz1&*!|WK-;}@#W)LKi@S|=^;uNn2@<<_UuJ&gA79VGf%B%
zef&S$I{}!G`I&YCx`UBTrME7@M^&>P{<?%xDuJl>)+PG%6?Yo4DRT7*{y{YxVAMN8
z6uNp6qF;&t3MF?^g8OUOC*es6rH_Q7nmZ}cuRnVn0lr1|OiiTxCE@b^#^Cjv+}S+-
z6uU#8n!wjt3iT}%>gfq(2LEOX>ro35LxZ-;4oJ9fdLn4Oy@7-mrY91eM5I9?($f?9
zGZI!EB!-Ce3kg{VB?lJ0kdSpyvMACoBoOKU&^C-8tjtQJEa9b3vv2fS3AbNF+Dnn1
zolrVkkp>BCK#TVlH%Q>lP81Z<yCg_Fe3egrhL!nVbz~^guaZnhAp?r@6VEWek0)f8
z<Q0+TiISdD26LRlea}K>PD1vqUJ>az3G}RCfkT@x|Mjyh&o?(Av%zca!3kso-Tv`X
zq#OByXW3w1V?y=?V8VjN1hT=h2i|^-<Nm7O_gX@3tzNN2UrQkK41t3%zs_%Yjs<<M
zCu9NgDir0{6DU9tA%ns>pEo?mqQ3bFxzxR)k({5vQnzH#M=szyNoIjFcWNUS(A)z8
z2VLYsp7943`t`zuVl@+9(M2vy;D>XT&1fPQVUS=OBRX#ExZhSjI}Sgj85tED7p6^D
ztMFX>29QV$uqc7w09pg!SA>iCix|Ma*qQJRkXfAQRmw&nWpC9zOA{$8`QAUU;rh}<
zYOYAsTPabOCzLm>L<I@gfwnGkfW)ZF6CJHf8XytG<q4ERDoG%bsLK<vH)Wy{LnP`7
zJ5ePEcC4@yRkA2iS5Ts!$E9a?j_ye&Qg*npp#G)uiV3V;vh9Dd2NXSNCv6TT?b_=}
z3lf%rwvrYk##l=UNj+Z<CGGos>z`S|_r4tzFd_3k1qIzUWI#3Z^jcQoZ%)WA6inhK
z=v{(#pd6}C8<OK{+1)PR20Kl_h13R0lL{e(wB5*$)v^Bmjkfo5MA~kobgQ?Jkhfcs
z74@u@%fH1Lj}mtajVCsj94b-U`H1JSxol4;y+rK+6GGb)W##xfsHlVR3zS64r@U+e
z8=Sd|0!c3qgD8-D63V^=4-93+wV(k7h80PWaLFD!k{~g$J$58PB9eO&v3)X<#1N6(
zYe!OYV8~uOl9EM{+)I&MN0H3ML0lr`pA^ZrRc;Js+5F+BnU?&+MAlAeb0p#JC~8nH
zh4Uz%KbaNyj@sS;6Zl8T8?@AODT>GV>B(%c|5!pc?qEXZSOSgvbSl@m6tLrbXak$!
zJMIVxE(r}2GMMZM?wZ0z_)pkNC|3mWM51#S_G@_cHr?~@M9OJCVG1_Ie<$#}9;)NF
zkylS9lvA`kN}s@A){R*3VcW?>j#bb>VuX_k+&-j*0TS*!naDdO-AN4L&aZ5DN)BxQ
T%66w@kvqSFJNe!Bx=a2qFszQf

delta 16631
zcmY*gd3+RAw(hP}H>n$uqyh=)knZZP?sRvxNgxoyk^};{jxxAD7sjWK&f@qS-?+S)
zaU3GxL{@_=7o&hI;`n280b0Rf(Eu(80}SXG6c8W7CW`_C66Ag7-dmLKkNkf5PM!PJ
zy=S|pZdHHzg0pq1(=^sURvVi$R$m?%f3x=9(d@*V1A#eg%u<teG6Nysp5_<74d5?`
zzfRc~zs;R#7hDK3O|LM6$I5(T!~W2*V0KuMF~whC-TUzU)~_G6Vh`M3T~pJme=PeS
z-HpzEepkr&pv$qcT$A-?x?Z9AO#K9}E;VXuPn2o7tTPLc&<|;uahVHq2zJS5eZ&x4
z{H{zZ2$fqyAOGDGd{C)T%vY2e-6|k;8T>-&5`!NM-x0$=!JwJ?8UF85qrT#dH$=mb
zGu}-#3^_wX8pIHwbNt>O#^B0x-jEy&Ip+<@Atf48FNWx*-ciQ4_AnZ%JG?PE#&nb!
zOs!4Fn2xf}m$R$Hn1HEYEYrG&`f;q^<`0z_g@Y<x-GIF6t}y_ni%?KZ0We)GD=KF9
z38tW_j|pqVp<9UQrn*ZcL6G2rOA-Xhn6P0gk|0RNgu4~7IShWSG=n_s+nAjnHo}2?
z9?mUgZMTBGlH9f-yUjK>I#nAYT6ZxTQjl$kl*C;KvJH`BinZw=t1^SzBEG+5Hx4(3
zYKd);+!Cne=vAG};LeEl&xp?c<!7CMn~fZwl<~?NjRSplMf7@>&vMlzIPcSl-uNR4
zZu1#Q=H_8;RW!Gg*=uex<_9WHM$|$f#oSItR73z`(8&mVRUyXU;wj$!cBAUPQxPpF
z=3k{z5S@y2%5x!xoQhoD#f7;9^9Ra_X#U)0BcCJ%1DMGe<{>0HW^*c1+mF?X`(W~C
z`D?cu{VUIUQ=`Z`8!=pBioCNCvye54AwcINJpT@3Nd5VUCS##W%YhruNAe2PWGE8P
zM@%wl0Jo+{JRj*%#uoYo2STxlKX-@m*SaR_5`~TsX|nRl)EElPCM%qDAt;(GC&L~S
z47lA`{^*^?6Ln)fh5#7GdJGhhW36ztVxWK=Yt{5+b%Fu9%{+0J(NNdyF;Fx%TbGtW
z(b#O6MT&u<vDqpKv0;Ltlc|sAbM7*(svGYybOOV8kD(J7##?4cF?0gMc&jYJZV?P{
z*(4qvY1~#n$z#X`!z7O(7YvguGpZPJ!7#~+m$Q$9g2FKM*6i|;#tk|3tsaK~j#iJu
z07t7g3j-XjG>dULf`gg*+-$==#sq);T#ti+W3I=+z%kdG2Ls1kn#Y>~!I5X`i?hM|
zjOAMWVvi#a9E&}UJa8<w%$QnB9yk_Ti6k2*!{Rbie}n(~eq%!28y>}Fpm@WhxC|6;
zSZ0NyxC|6;SUsy*KQW8WroNo7dB7OZxZGpt3|B9=@`}}v&R|$>b?@myFf6xv*RTPC
z;c`>YTH1in6};nqBgAk1g;7=qfg9(SgDY$0xq*E-xUyELkK(!<Tv@BOKN~5yx|sTE
zzW5i$-F2%yhAvpoYHvMVz_8jfQ;MMr7*<=E3U-rVKnAbjSN+nsrEZPKkPn769z#AD
z)>x*ja#dPB7}i+HwAh`hv;tFK&v*UO=v%kmV<-T_dXJ$14C^hkRL!9P4C}41#j3>|
zOjB>;*Zj)pQ`hD(m|$r07)&s<S*Dx2CK%c*E5`m?Fcg~l2mI|{8IRU|;4u_};RBDM
z5DXu9t0)A+2egU@1VdL--^_pcYvY%7n>~iE@Wo~;ubY~7S1@e0imq@W7&co~z1Yoy
zp_{31<?KP@*1D}8LpRJ}t2c*kVA$%dq8k{t(kiYK3`M5Coxk{?aee)EkD&+*+dYON
zFl@KXgqlMU7`9s}hqcH6FE;gEJpLQw`TAWRMKLILc@)K<*kzd!MNtfjT~;j4UX^*)
z-PHGGzx$2xnpVHh<LC~KeO6w+8q^&e`>cX;7lLD-mCmruavCM3et`e;VPi|<0gs{t
z);wV4h1Hl6P#mx#y<G^316JRD>|N|7sOTXxc;3=3SlNTWH3kIk#s6-GgfNx!-f}|V
zId7RRZ3sN)t*Fhqh>anXOFZ!lRt_s*2JvFsq8#h6^#5WJajQ}k{wSZ)91QiT(n@iy
zDXMmOK(IGOOM0kTmV&)08i}$m<U)Ix`ZIjn<Hnw$&qOaxum>jiO!QKX?*WQuqL(Jv
z0~F6hF~PS2XcBsw!RMpCIZ=OTK_L6x6UKZk!dM>Kgq|4nd^EQU8%uZUNt^uis1^x5
z!E66$Ja(OGZy?83hYQj;fSCUDs0vv?uuP8@$=v}E_nsat3$tmuAjQ?$*>|2ainNB=
z9)}<EpY6`Sr|1f1M@>tZ01zCrqjsE~qb8@98C)FoEzfrTv+;Ya%i<`SoO?jsi{`tG
zPir#nt5_D*Wa2}J8!n6XkXsEPsFp?J3DLpzqORaAZa;0@-|&_@83-|%x7^79l2TOd
z`+#70D~f%8f*+HqHiK_Ree3v!r;YJl-j3#m*qxY5HO*xezk9SXvT{{a^+ynbX;oA;
zA%I|76-5)Wlk8nhlUd6Tjy686T<eXYyRVHJvLHYQW7bBym$3iD&3l`{_oKeu{F^bx
z-RAprbE-|far5BDsP-}c*;wO|QTR_bqL71YqkDfqaBZafQ``a~ZZ}4|ejLp~bCoLu
zh+8wbDXM=I4TxAKCCD)DgJ{r%n&GMi&A^Az;99?^uf1t0TcTP~C~ooVpD`*c0NhE?
zg0@5r*;PRkWLu(LyNUjzw}$3z8-Mi~<Eo!;!+7C;2r*<^wAgkbhHQ(L%PtC6(Q#~x
zrfwEZB0<q4Zi}XG5>29#P?NYV`qL320ee&bw^Jry4FDo|r<;I)xZO@S0Re?B67UCd
zQ*RB?-yY=!O~G^b00^XV0T7|n?uHH^nA+Vu1O!t%<>6&a3lx~aFQdM%qkhW00Bu)a
zMgt}63Z@4ND17!rwG_`!cS^(oaTQn?fUd$yd&mGogfcGf<BiW6!@~QbnkY)p@k3`{
zG#X>q2pypPeEze>b=Ll<Ch`h8WbOTwS91``0n-c~jQYOioyQroyB>@Ny0AZEs7Z4<
z1m4&q{1K~DDgS(&aZeZm(Js(skQ}0XxJ_tdGDrCB<Bi+HN1~c|<be)N=13HeJa}#b
z1p0<=8E@Pl{zh4ygd~lY_Fz{E9hmAkA2GqWI($5;iDCks9OxXUVlr6h!1gEkiV4OL
z>!in{L+2#%G*hwYV+K2-z6IIhiAGQ>=%8ZpGP$u2E$d>GM~@pX_5pz3F1j%ah*eyS
zss|ZBOy*(~4>Fsmx9mgV*qpsE+4#_3-yBoEhZIrN98+}=khEe&vM&S#M{_Ju&erA%
z4$QJOn={2|)azP34h<ZwG4;IAM+AOrEG)NwKyb9iu>I2}(udG2-Zb5aR?Uj3-2+10
zc2-R79)P42bAz`J1@HWr2;N};0$o}F1@HWr+C*>_O!H%E69EL%{1}3F4B55D3@(ZJ
zc4RwqL(>YD#B!t3t~F%W*JIMI0HAz5rg9$;l&{B>T>(M)dJJ~`EA0(6WY<;M<1ZMF
zR=3Kv38b*es#u=f3;;<h7L|PfAUIaV(hmEBpnzG|@LOLpo~&QvF_2Z)#PZ~pR3ogq
zCRQq&OF%HJiQy6Yw44RthuO}vjQ`Q<KJ+-KMtm5{lMj$J!ptAW@@0hrq(Lz}MUiJ}
z$jY1fx;gO7X4f+iV&a=!&j4b`=1ZQbLH_C6m1h9Ju-&^kol0zXJ%g)Y+U|M=5KP<2
zGw2XBy{{SkEap4PZ<uTBF8nN(Tg)a=!1sk?g6%PFFRz<tOdN&(WI=`;Z0#{skO9Hg
z9z#K<T>%igLVK)eZ%pnABoMp8?wGzOCU*rT!?-VEYFAJq><VATXjh<qwJ-U1e@q(@
zy3*oT&o_Sh0Dx>Fa0x5i@2(I~sH*NA5ZwD?Vc9<dqT=t5Sw9tf62WG}gyZ+eqQlug
z<YEC2#<XZ?gP&hmU?jM;z*tlPiMwc;%fXl-o2<Sf1`fs|mUu+zOA&E|pIu<w(s0C^
zB1OOvHx8i#h9j}4Y$gF|OssD$dx1{tYR%w<nD5=}_*abXIRzJDxkWNPYAHRMY>^&(
z_-jV6Z<DR&giBy-vQ>5fg0aa)cC>4-UM*%EY__#=wjTOO<KLLM1G5`mGeZ7R5Xx0S
z1q{u$A<v2c!O(1@6p||e;mT&aY@D4Vwn`F^EA?k>y-t`?NnpEYZM)*fA`m@mR}Ewt
zF%u|Ew6z|gGV7M#-OKM@WW+0g-ARyXC)$R5G_4h;ooI(j*+XJ1m|FO<MaIJwE#45a
zWs9wj*=mI?TWlP&CB+cr!c>0UVk3RuR9lk?SSzw=s;v?b5WG`uBp@Bm03t%B+ND>i
zh3c{=m}>X9QuG9*fG&Z0f~oe9q2fWimNIY#-?`WrP(Q;~fe9f=ZB-NjG1D2gdME_M
zZD-h4lr>Y>)r#`XuU}$}t84Wr=m4hGqo4zrR@;>A3x<HA)y5$Zos!jRIDmPH7c4cZ
z>R<90=m6#=kAV(gUb0PD0x<*(FWD%8^JsgjrG98Z_Nk@D0)O8Ho{j0uWr3|uA)$mp
z3v6u3i{&5#UA3*ff#`ZMho5LSUgbZ$Zd@D%nd?_Na9M1tI#H|9fy-jMYmo{r1HrY}
zE`9^SMcpH=i{J__vGvz&StpbX<Cfa0PAC!T#4?-e1eMQP4QDsYZ7mimu=tGTV7D4b
zkb4lhflcQ&%WbvE;VLMX+wLY;tKr;cl`S?ozV<C6c;_n5l5}{p%CjUL-mJ3K9*2P-
zT4k#St<Vgvv3(!evO%L~`89UH6b)J-rSV!@i^>KK5LbakISBwFL)O|TCqF@-Qb-B0
zp8smOaYJ}L#!!fo5IXB^Jc-;Obb#LHJC++i4Zm-z2CY!^MDN>Z(C!dAnB4|Gc!hCS
zc!RAPy+Y9wZLrbkNggE2CjQO}@NBX*@yw2UQBSnVPNi9m;DHT3<mD@kTI)kwHI;>0
z06HJqXewVv0Sk0R)wg}evrnxws&dSBS~yOn16^t1yJ_Lpo=(H#fLI%_TsR;|cGJRf
zq7P+U{F3)vWeg5~Y0GY&gwXktQWfWgfIxfs<W<IP;l1vnAS5X*>PDf1g@47h)yB=?
zuUzAF6$}50j5Ac|VBuf$M^_tHhQGEoacBc_TKLzLpVTmRr3^p7cda&tgb&!Nse}+Z
z2W&Kz*rcF?NIS^;zH8hXK4_~Z7eeS9w9(|^*aSLA(!>0<ca7`AhdrH6&^b&xNMz_B
z3y<=`zZq5GqbhJo2%V!;k@02*5C@&d_&t9!YOG_PeGKRvBm1nRuDqKWJZ<}$_=>+7
zE6me&piuas8~Nc3azywc0SHqA%XI^S;|#6)THL1_`Qfb1kFPPVi=1^Q11Xfw(qx_z
zN<imre*0SE&yn-4N4p76oF|Vq3MF{rg3V8_HHO$1ToZN^uDC!Z{HaiaD=ykvJk-eB
zR~tR}6YGqg76fAZ#%#zb7wwqMzM+1lpBWqz_r1zDt}~A2kBOsS5e<4jTH$!U?PKF5
ze)oGuuwr~%RU%x$ddA1qMhS>XjgMoaq|?rRwAe{}%6mp#-K4lG;}F92lj5q31CmnQ
zl-oZb7$(KBNUFj8DEL~q@jhyBi^o8L(Gt&-524TjLrXl~Pi#1VU}%XCtYZ_Xoc1F)
zGyC}a#w35`%(&XLAjP1WakXgyl2#m^-axxYKWZCi@tzxuP4%<9`_e0fS#fnb3ms6*
ziic$L3J8i>aWt<~Ir~w7zZ@6mN__Z6BUtrvT-8im!oZi~s%8RW;LCBhX7;1iEsV<t
z0|3lqp*IEEz!rMOqYZ3fTop|ygK1$LMRRm6+}R&hGw$1+UAM{b>-lTq?t?*p^5=T;
z=e&ybt}7t~*Lv5LfZ$qBuDlw{=}$Ip<1cSEuB~YEhLG>t;_4IyIvCOx$0^1jF$BKb
z#EU*L8XGsc3+S(rT{gK300hIPxauwe!LTWg?s6qHTKxfopTxE8@$AudqtZVL0t|;l
zZiIjs{z+VIgn$_SNnAC|fY=B>i5G2;%Z-o(qG8?=*SE#xMyO;Mw>7RdLM6gR`1iQG
z5%#Bm*y&gPyk{%?xzqJ0u3;8CU4H_CZRaI__NNuMOMmjoe>Z|d+C6JfOVjRIg94-7
zbteXbsGZz-1H3uF4DN~h&cywpK^8x`B2dat{@u7De@{HumT5YG-1?PB)86<W%wM^N
z0tE9{u5$sw{1rL(37B~RIpF~B*k=5`;(#}VoO>W{TrScIIv8>wUSNuMO9Ln|5AnI%
zjoT^?#nlNPgcx!t-a~dnfEaQpj&2AgA9n#d%HunXA(cnHyO0Nu#tr$#13IJ>N9Cp@
z8bDS*u8h8P2aJB)H99U~;BnXJfEalElF<i{(N9aG4+Q|vY1it2;-acRfM7c9S{)Ef
zr^)I+gVhI`!E<rnVjkIPjLbh5&n=g>9!R$C5Vr1v|H0ScE(s8P9j>hb!Ph~ycCe&@
zWTK04e%CG|Q*qH7L&m=7W)hSz<|1X%a4`nP9?jp{WsImColvnqP#Al3Liq;}Lq;dy
zpRII~KagNcw%4b|Hm$xTp^7i0m}*NxEgcZIZAqve8juDhuvZ<X^czU#=h;D@8xQ#h
zbB}`#C%DH!j^GLP4iaO)!4uekL<$dtBZ9LM+Pv(McB95W3jfO7#RZI;l~B10h;g$L
zDt7^qyR#BS^Aa+5Ng#4}c0!+<kh!a57&j-Oa#x9vyDul)+#N^-^_9ernpjArNH(#6
zn93^&RgeKe`AWhq$OEazSd<V2`C0%NWszqLdLCHh8H1h&79~_chBBBIB@j#hOZ#h`
z8C;g|ZAkb-4Hmy~d7$fz69JtM-D7MjSeD4OWN6h<Xst+y=hEH);9uby4G{b*5^BE%
z1pkTzVvFLWj$-R=erT^TqV8>Xh7f|`ZFh!%q?9n_(gDHnb^@ITy;H2Cv|i00-)G!i
zzuIFU1FlZw$&C&=U|5|<$TysTU|5~#-AANs9icS|vG3IYVC0&F+V}u5a*b<eK%wi}
zxsJlEP1<=FfIup60kMiUZxs}DZLXbh6-;ep=hH>7bG;cnlkl}<U)paxmRE2l;Wje$
zWZHAWv~w%ZxkiN)WanI?0)p%u8TI2dY*J6l-H|<U-1wwxuN~!TEs&D9yu=aZ5fFoR
zlvh-;4b*ki!;r!Da&2$+n9kb#qwuc`dtAV{_Hq^WfEd?auEHJ=Vc%X}w6|P_JqhF)
zPr1IQT!y`pVcZwxD(sbr&Unfx?B^7UIbio3o7Dc2)U&-hv6qZ{0puZ1y{H3Yld28?
zVp3z1Dr^BkJ~oM-pH3?PF{!ah`!7lP8jS>)6kPjEQoTm2C*O@rO1A^x+PLH;Q<1aA
zB~^OiD%i&*UANa$seUdg`yBufJ?G7nO7(NzJgH_p=gpI9#&b!y{RpL3gBhHfM6F(B
zvcm;aleyhxLN$=rUr5S>o)KMHu=0hZ@&+z}@P(wxCqNLskc8_$r8cmEd^MYo?aKaH
zIolgUo}ZmGx(d%j2V-U@i@URlatu;v9-q*SO|G1mR3Fzg2(QmecIvFgkk{uW^9w}I
zG!S}484m!)d&M;#Anx{xYdk=q>l&|t?7m1Ek3Uz;f(?sY+u;&yx5%{}Acz*ZwgUvw
zBC_2)4YnJE(v<XloZV5(qW*$q$=rxE-XJpGN@cv4OIWaGrE3UW0^>^8cz|GBNyb}7
zyT>3HFZga!Tc6ZJv-$CM<F9;7h>acvkxT_BVEnsDl?s3u|87#H0wAL9-DJ^vL>(Pt
zkU*ru-;(;eq)Y`R!?-m`l?qCPR9KsIcYr}u*4mOk+5sSel_8R45D-&obFB;r%C<`(
zI*8y$(#k^tVDpb$GXuiRAGu}*1k*>ZnE}O6nE6gvd9WGWlJvdBSsA+{u_cL;Pv3+M
z#y4TxliIGN&ff9ko3O#^n=q2`XUo{z*X&5@SBvvAc?qleM^Yd9BMEM@lO!(PKa<)Q
zpnK9~gDXhHpAEA=Ui<m~8%vL#?MZ!*$3}kGoz$<q#I`S~{V&*Xo~tH@;zlz5lL*@}
z>Z_#sU`<SpOuav;|Hh*u<9(gf@4Q5JAgLV&U4hGnGNnZH*_&V?BmOI?%dgF(1iS~6
zdS8#1EPE)aNBdtQ{wArN1o49|v2F%Q#MfBt*EPqIdV@EZ9(<1{^}#=qfbIm{Qatkx
zrno;X<Guy}K0fURE+D3N+6{a_3_VSO|1kyrV2Y)VWcG>}yWU^j;f<nj?{Mn|v@oiJ
z>IQvVG??smF{zm$hqrWN>3UhHA;z5{4`Pu4(gMdtw~hdU<093Oi}W$zV8Gzal-8Qf
zkFy^F_u^ldhJtivO4WPlfo5h()q6nD%uK0z4~Wd0nX+3`vfh(G*83MysQ1s%mtljc
z@Vu7&t;0Iy)W7E4hbsSTDfMm!O1RH!seGAbfVj_VDKs0@-4CXvEl$Z#F90xdaY`j5
zAVw}usXYS_BNwOKvNxEr_sv)RmCQfrP4DLPaQvpXNb2g|^cG27-J2<7;wznzijBy*
zl<)ggc5oG&AMCb0m0QTh(AM2Zp8qVRbqk&1c@MJkY`8DG(_aaREL*q^-p^8o{2B%j
zyq~2CyR!LI{~O6eyZORe_Dbb$Zw&c<cS=1eLkDAar_kSzm$#&($^M}qwvg)mxV3P0
zqj2{ARFV9+1rUSwlb1daH_F9Zq=PB#T#DBYU>my}OyyqAMu-_e?=Zh?AiJsha7uT{
z$mNGqMJdHiE<c>gRETec8_AnTQ~DL53SKafb>#~NvUoKFa*xAh3_hCbCLinoG5BZ-
zU;NN#yp80?V=28FpYe*pm)EhXY6#?O2VBPBW2x@))hQqbA4}oYDShVHNS-{A(o><n
za`2csR#5?g{6rU*G5AEPP`<kb#NZPteA7oC9XC>E{w@Eajt%PhZAzD)he3!T-=@M;
z7XqY%A>XFz8kBKx7<ekB*YGX_SrNalp7pN=lmXhP(aHR&R7sT@N+<KDQq_ILSJ91h
zMtBB8Lp|kG_tmpxH3aTpI+Z`;4W?81Gc*_{ahL{9($A*!UO0&pMjGD0`c*+7Ut8ib
z2A@q8XVjhP9Q|ynvL{>E3BfwV431CxR%BN+uvc=-@oBs|r>{(hAXI}B)7oVI&=59o
z6#kPB>yU$OV!Dg;Js{X7rtzr?^>cv8?}_Qq<g|SIL;~@l#-ubpE2a;nlmt;ZDUH`^
z^ntGu(R-Rn>4rh<JBq;}6ztQ|+I69?{T44D%8rc$k~Ig{;M!?v^{y9C=$7^pD+I)x
zrltGTxDbAsmhO8kyPO4ymrOq`U3(21O*M50mB-fXBM2G){jJ_DDD+y>s;of?w`fhP
zM^Qj<w5IVWN`U}~TePMl)#?`Fy-RD_>cu*+K3qrfT$a|Br}fYg#s|;C=b8EM1cTYL
zSF+mzqj1Gt7uC{b-c2d7mU%a&#9Br-mA0l@x-1=84qH<fgS*Hs=JmAxR$6v3N``T7
zq*WKAMCfAPOj8%Lw}1|yi_GAvwC_;bAKC_UAKw%x;^|Q=k6-)=d)r)<4wQ;FB1Kfd
zR;RU$cq77(UC)9MK#{uvT!bZ8r*SCL0>c7h_Up2RH!#y5UYFLy*UTh^*19ylW^NQp
zK<oL?;cRGleOhzKp3otmtWV>ShfdIo$k^}k1;bfQ<h`_3sdVTwk@wQQs@b!6qYow2
zna$a=!|}O&{pPeLN&-otwK-iSo+t@|YIC~RFmjZDnB(Sj^-$JdaKQYZ@Ig1Sf#FZQ
z$<V8VPiQi7!U(-BeCCaq@D^_}^y**>O$NyWUKEe5{M?PKA+j~CrPYM#)xp;E6%}kN
zDl?Q2GrO|4-Nd%}BfHX?C=4Wp)~<AQZ?;1&3zcC{_NrUhty*M{Hz#_1u!rVEPZJo0
z60o1Ix{duaxj(Imz$YP;_NV&|VCSV0-k2RsYkfjT{njnK<p$QBZ~qVWg$0>w(>#ng
znC{gZ1x?e3n!%%K-<dSudOI6#9!=w^hfZIIQfWAr)=u!MJ6OXg{3ojv<S^#3bcuX{
z4+vWyOXCdyg)1P!^;kN70^v%{7zspaIPR7PCBYPqyQM*is5Bg>(r_9J!ARWabXrS<
z4j@*K-oZ``1(GR*Yw+P|H-!L&uKLIj5OX@6#_Obc6!pbs@cXoHhT{)S_4B5L(Um{+
z80*4^+{ON2exDA6MbH;h(4U8mM9?PyK?y9~3Wy1xC%4iYp<<d_N17LpWR;PQv?fXt
zNukt1B?-U00R*~`=J$_8L|^cjq!>&%9Dow0`a_z(J(4+*AKdtW6k~s&_-Mu_M$kgo
zPtN*(hSFL;+0kU2Lkg|Q4o*%ep8&x%*{Qikggrsba<bF+YI@a=%P`q<{OWsIMff>K
zWe$X(c+NrQJS=n&_AUJRd)XtA7Dua9ycG5=&VYez8bw$!#r+f>y^qaEPx0nLaX*FT
za!4v6?x#Ciedu$9;jbRx`x=AYdCTwENPf%D*?&cFsh?t}RG9AIb<1st#$jgg1;_U~
z-}`fRYvKh5zo4Nfl3{qjnd4~l9i9E4p*bI>9&kvOz4Lzdl)v_6M;{_0PF@4&Tt|Q8
zM-td(o`WYG+V_W1a4&SUzdHQl1XeQ&7z>9$erXB_%Pn+z$ff}hgBLpZ;EQ4$5HY^c
zN&eN5F-`&z<F7hu`%@B3;#Eg&e@a9#{;Go*7v}@R5J$l!j;1Z+ZNFf<?!&(_z;OW+
zTH@r%Z(RW~p(RdCWH4qx0lvgRA(9iKC*37Z?`4<}?Y_8<3DIXXOC7x@n@MLISDL})
zj&D8h_$A}{%bnaXn?n2Il@#{xWas~i75YcK<ER!DQrzzy$B@SjfVkf~4jvO|BLswV
z-*L=(aW{hK?uABS9s5+$V*I*n@IiKmf7CjUmX@*3QAf^Kie;>GaO5m$>06+64z?1i
z9JorfB<Xs+x{;7zS?iqM?!AQw_g?1=`U(4Y4${558T{DseT{TKm}3q5^`qG@e}lJ^
z=EsiuBC|U!d9$OX<qLm6ObS?>P6hyRgUt?J!{O^+KwR9y%O7SVBU>C*K_P_B7P9|1
z+5@{&O7F<deVFC>BRjw>A{$Z?JIM59loH)3)j#DQ|CYTG`P9+GHzOp3(x(o-8QCJ0
zkm>FG#YfoRBkhhR0uV}+=<O7MZBhxTyoZnfZ?-YA$I;}cq}@d-?{V<fABO;RJ4Dca
z{@dTN)sg*<CcbSVA(-|%__k><g5oMO_%8?FmtFfP8&vo&2VXW(c3ef-amdk*$n4;M
zf0PAB0n1JkS7DMvPO<Ek0kNz@4$k~376B29hn(0El^i4x$#K|C4kf`n4!g;rM3fwd
zDLF>MjU{IAxZ^tyHx9Rk{g&VQ7`w$h?gZkZT9=RyPdHkQY*F?;#)4r$Sr>5;<R_>W
z;a6mV5^~{5u0PKDhflg?2SVtaq_RVMc?r4dTYlH$tReiZTlgR(DHT5Y<e-H7_Z`nZ
z&W41)bF{v~$q+*4JE#8uG97f_zEiyT2{tHl%2E3QgwQ$VU|*nbHcF@vpLY1;Pq4m`
z)A&A85m6;R?F<?$zJVwq@11e@M^CU}))`NU+;@hQ=%*5(LMi^<;g$cxK8b(tXoD0L
z)#C4+Aw$`3;N+{#;17;(OvWGjnZ=)O3zYDFzh~E*KR9@uOYXj!+})JXM)Mygu)d=J
zacf{%dH`X*rc6ve_W{BRO_|IU!rg#ycT=WfbVk-f5(sxcol&(=Nid_QGpZIU5xM*6
z4BUN!c4_=#<JpXFCjZGF*m3jOOduj09U@1M%V<4ivI1f@z~V6{00`c3naV193I)W)
z34Hn=S$%kdr$e5eKsseY2WTQc@kbU3Pt2$$DkMBTG1ITV(!m-h@roy*Gby85+K}+{
zqzqcxxZt5JnLqd>D-Tc3sAveu9XW$&ps$5O<mnc^^htI@xFw^a0Yc26C4*>?^MSRe
z@RC2_UQ;q^%MFP%osvQ1S%L>{exBd<Cl(7opHW39q>-1O&!7k;gbs@5R6gTREE%4f
zQRyBMedg2*(p~DH&78*DNoSh3cIq;x(b}Ve2TkU5Zau~9@bru(TZ@orGN)(o%P~1;
z^q4dFy-#7zGcua^ts53gZRLy%e(NTA@M}5FXM-ogy>(p%9iACb$9|5;yv7W^nDM>L
z_ddn$GhfW)_7L%S4aMWEj5bHcBOojUEI;r7gp+4w%H+ozfbi9<45}WLA3((8tW0W-
ziboQNc%1FVqmp1Av)y=9B8tb^6p!EGtLQ+f8C;z4tqUM;zSjAOzp!pudlb7}GZ(wD
zSxT|F<Wg(`VrIZHHUV*uB@}nm=#^4zF6FzPW|{C(*Y*%XXDQhpJvVfKmhs4F))-lq
zQQHWFB+bwh1#LE^REAb$M~!AT`ok;SXn+)2D<~Qog%YB3B|kQX4UMdHtzRmlb0tO9
z(~=3{xjH*yEX(mnR(toO_*_l*6Z=RhRid^0ch6uSS)0)Yh!O)Kl-6eI8}Q;#)33#k
zS2Dg2`1OBbHx#~4j-*G3YsrxtGTNpL?|BES9R&<32&5+gVUi85Cjqgr4X!5v;mHk|
z)F$Og5(rOjbUmpgn8-%glS)LM+(@4M8+oz^PU<qgPsx)@bzU`sm1LWmSy=0`JrgJs
zRi+1datB{Bj#Y+txQ2ib)H}!!l*~QIf&bv=#<3eB|H!BZIS8Tij|>`h{Dg><0C(~S
z#<NM`ot~1AlG43G2kYF$^Cz&MM|Qc{(?j@gSEgq#b{7nKof-T*<J-fZpTO=kKhNOT
zKvb!(BZKbFXkSuh)IEg%<TtXAV{W@MrLtrL;tsnr_#TmR0uYwmohkoPS&{_8l3%!%
XR1(bn3)hlLM3(#lmgG0y9O(CdoHdVD

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 4f7c18b5..eb39114c 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -7647,12 +7647,17 @@ func (x *RequestConstraints) GetMaxHops() int32 {
 // Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4
 // defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names
 // (`ed25519`), a known and deliberate deviation. The RFC 9421 signature
-// parameter `alg` in Signature-Input is a different field and is "ed25519".
+// parameter `alg` in Signature-Input is a different field: a FORA signer sets
+// it to "ed25519", and a verifier also accepts a signature without it, the
+// Ed25519 key deciding the algorithm.
 //
 // Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the
 // JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)
 // MUST have `not_before <= now < not_after`. Verification MUST reject
-// signatures whose key falls outside its window.
+// signatures whose key falls outside its window. A key that lacks either bound,
+// or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no
+// such members, so this is a deliberate departure: a directory written to WG-00
+// alone must add them before a FORA verifier uses its keys.
 //
 // Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,
 // computed locally by the verifier. Carrying a kid alongside the thumbprint
@@ -7669,10 +7674,11 @@ type JsonWebKey struct {
 	Alg string `protobuf:"bytes,5,opt,name=alg,proto3" json:"alg,omitempty"`
 	// base64url-encoded 32-byte Ed25519 public key.
 	X string `protobuf:"bytes,6,opt,name=x,proto3" json:"x,omitempty"`
-	// RFC3339 timestamp. Key is invalid before this instant.
+	// REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key
+	// without it is never valid.
 	NotBefore string `protobuf:"bytes,7,opt,name=not_before,json=notBefore,proto3" json:"not_before,omitempty"`
-	// RFC3339 timestamp. Key is invalid at and after this instant
-	// (strict upper bound).
+	// REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant
+	// (strict upper bound), and a key without it is never valid.
 	NotAfter      string `protobuf:"bytes,8,opt,name=not_after,json=notAfter,proto3" json:"not_after,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -8386,11 +8392,16 @@ func (x *WellKnownManifest) GetExtCritical() []string {
 // revocation pointer. JWKs carry no kid; the
 // RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers
 // read the `keys` array and ignore FORA's extra members (per-key
-// not_before/not_after, and revocation_url) per RFC 7517 §5.
+// not_before/not_after, and revocation_url) per RFC 7517 §5. A FORA verifier
+// does not: it requires each key's bounds and uses only the keys whose
+// response signature verifies (see `keys`).
 type WBAFile struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// RFC 7517 JWK Set "keys" member. FORA v1: Ed25519 (OKP) keys, each with
-	// not_before/not_after FORA extension members.
+	// not_before/not_after FORA extension members, which a FORA verifier
+	// requires (see JsonWebKey). A verifier uses only the keys whose response
+	// signature verifies; WG-00 Appendix B.1 only RECOMMENDS signing the
+	// response, and FORA requires it.
 	Keys []*JsonWebKey `protobuf:"bytes,1,rep,name=keys,proto3" json:"keys,omitempty"`
 	// Directory-level emergency revocation channel. One per directory; the list
 	// it points to enumerates revoked key thumbprints. Consumers poll on a 300s
diff --git a/gen/jsonschema/fora.v1.JsonWebKey.schema.json b/gen/jsonschema/fora.v1.JsonWebKey.schema.json
index 51c949f5..3cc81ea5 100644
--- a/gen/jsonschema/fora.v1.JsonWebKey.schema.json
+++ b/gen/jsonschema/fora.v1.JsonWebKey.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.JsonWebKey.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field: a FORA signer sets\n it to \"ed25519\", and a verifier also accepts a signature without it, the\n Ed25519 key deciding the algorithm.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window. A key that lacks either bound,\n or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no\n such members, so this is a deliberate departure: a directory written to WG-00\n alone must add them before a FORA verifier uses its keys.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
   "properties": {
     "alg": {
       "default": "",
@@ -20,12 +20,12 @@
     },
     "not_after": {
       "default": "",
-      "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+      "description": "REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound), and a key without it is never valid.",
       "type": "string"
     },
     "not_before": {
       "default": "",
-      "description": "RFC3339 timestamp. Key is invalid before this instant.",
+      "description": "REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key\n without it is never valid.",
       "type": "string"
     },
     "use": {
diff --git a/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json b/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
index 88398834..8add2fdb 100644
--- a/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
+++ b/gen/jsonschema/fora.v1.JsonWebKey.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.JsonWebKey.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+  "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field: a FORA signer sets\n it to \"ed25519\", and a verifier also accepts a signature without it, the\n Ed25519 key deciding the algorithm.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window. A key that lacks either bound,\n or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no\n such members, so this is a deliberate departure: a directory written to WG-00\n alone must add them before a FORA verifier uses its keys.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
   "properties": {
     "alg": {
       "default": "",
@@ -21,12 +21,12 @@
     },
     "not_after": {
       "default": "",
-      "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+      "description": "REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound), and a key without it is never valid.",
       "type": "string"
     },
     "not_before": {
       "default": "",
-      "description": "RFC3339 timestamp. Key is invalid before this instant.",
+      "description": "REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key\n without it is never valid.",
       "type": "string"
     },
     "use": {
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.json b/gen/jsonschema/fora.v1.WBAFile.schema.json
index 0c7f234f..014c2792 100644
--- a/gen/jsonschema/fora.v1.WBAFile.schema.json
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.json
@@ -1,7 +1,7 @@
 {
   "$defs": {
     "fora.v1.JsonWebKey": {
-      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field: a FORA signer sets\n it to \"ed25519\", and a verifier also accepts a signature without it, the\n Ed25519 key deciding the algorithm.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window. A key that lacks either bound,\n or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no\n such members, so this is a deliberate departure: a directory written to WG-00\n alone must add them before a FORA verifier uses its keys.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
       "properties": {
         "alg": {
           "default": "",
@@ -20,12 +20,12 @@
         },
         "not_after": {
           "default": "",
-          "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+          "description": "REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound), and a key without it is never valid.",
           "type": "string"
         },
         "not_before": {
           "default": "",
-          "description": "RFC3339 timestamp. Key is invalid before this instant.",
+          "description": "REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key\n without it is never valid.",
           "type": "string"
         },
         "use": {
@@ -45,10 +45,10 @@
   },
   "$id": "fora.v1.WBAFile.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
+  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5. A FORA verifier\n does not: it requires each key's bounds and uses only the keys whose\n response signature verifies (see `keys`).",
   "properties": {
     "keys": {
-      "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.",
+      "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members, which a FORA verifier\n requires (see JsonWebKey). A verifier uses only the keys whose response\n signature verifies; WG-00 Appendix B.1 only RECOMMENDS signing the\n response, and FORA requires it.",
       "items": {
         "$ref": "#/$defs/fora.v1.JsonWebKey"
       },
diff --git a/gen/jsonschema/fora.v1.WBAFile.schema.strict.json b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
index faa3619e..db16c1f6 100644
--- a/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
+++ b/gen/jsonschema/fora.v1.WBAFile.schema.strict.json
@@ -2,7 +2,7 @@
   "$defs": {
     "fora.v1.JsonWebKey": {
       "additionalProperties": false,
-      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
+      "description": "FORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field: a FORA signer sets\n it to \"ed25519\", and a verifier also accepts a signature without it, the\n Ed25519 key deciding the algorithm.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window. A key that lacks either bound,\n or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no\n such members, so this is a deliberate departure: a directory written to WG-00\n alone must add them before a FORA verifier uses its keys.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.",
       "properties": {
         "alg": {
           "default": "",
@@ -21,12 +21,12 @@
         },
         "not_after": {
           "default": "",
-          "description": "RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).",
+          "description": "REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound), and a key without it is never valid.",
           "type": "string"
         },
         "not_before": {
           "default": "",
-          "description": "RFC3339 timestamp. Key is invalid before this instant.",
+          "description": "REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key\n without it is never valid.",
           "type": "string"
         },
         "use": {
@@ -47,10 +47,10 @@
   "$id": "fora.v1.WBAFile.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.",
+  "description": "WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5. A FORA verifier\n does not: it requires each key's bounds and uses only the keys whose\n response signature verifies (see `keys`).",
   "properties": {
     "keys": {
-      "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.",
+      "description": "RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members, which a FORA verifier\n requires (see JsonWebKey). A verifier uses only the keys whose response\n signature verifies; WG-00 Appendix B.1 only RECOMMENDS signing the\n response, and FORA requires it.",
       "items": {
         "$ref": "#/$defs/fora.v1.JsonWebKey"
       },
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index add50416..e0bd9831 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -499,10 +499,11 @@ class JsonWebKey(WireModel):
     kty: str | None = Field('', description='Key type. FORA v1.0: MUST be "OKP".')
     not_after: str | None = Field(
         '',
-        description='RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).',
+        description='REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound), and a key without it is never valid.',
     )
     not_before: str | None = Field(
-        '', description='RFC3339 timestamp. Key is invalid before this instant.'
+        '',
+        description='REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key\n without it is never valid.',
     )
     use: str | None = Field(
         '', description='Intended key use. FORA v1.0: MUST be "sig".'
@@ -1150,7 +1151,7 @@ class UsageReportResponse(WireModel):
 class WBAFile(WireModel):
     keys: list[JsonWebKey] | None = Field(
         None,
-        description='RFC 7517 JWK Set "keys" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.',
+        description='RFC 7517 JWK Set "keys" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members, which a FORA verifier\n requires (see JsonWebKey). A verifier uses only the keys whose response\n signature verifies; WG-00 Appendix B.1 only RECOMMENDS signing the\n response, and FORA requires it.',
     )
     revocation_url: str | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 0ca4e4c7..cbba4d15 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -86,7 +86,7 @@ export const GetAccountStatusResponseSchema = /* @__PURE__ */ (() => wire(z.obje
 
 export const IngestionSourceSchema = /* @__PURE__ */ (() => wire(z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"])))();
 
-export const JsonWebKeySchema = /* @__PURE__ */ (() => wire(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")))();
+export const JsonWebKeySchema = /* @__PURE__ */ (() => wire(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound), and a key without it is never valid.").default(""), "not_before": z.string().describe("REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key\n without it is never valid.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field: a FORA signer sets\n it to \"ed25519\", and a verifier also accepts a signature without it, the\n Ed25519 key deciding the algorithm.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window. A key that lacks either bound,\n or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no\n such members, so this is a deliberate departure: a directory written to WG-00\n alone must add them before a FORA verifier uses its keys.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")))();
 
 export const KeyRevocationListSchema = /* @__PURE__ */ (() => wire(z.object({ "as_of": z.string().datetime({ offset: true }).describe("Server's response time (RFC3339, UTC). Consumers use this to detect\n clock skew.").optional(), "revoked": z.array(z.string()).describe("Complete list of revoked key thumbprints (RFC 7638, base64url-no-pad) at\n `as_of`.").optional() }).describe("KeyRevocationList — Body served at WBAFile.revocation_url.\n\nSnapshot semantics: `revoked` is the complete list of revoked key thumbprints\n (RFC 7638, base64url-no-pad) at `as_of`. Consumers replace their local\n revocation set on each successful poll (no diff protocol). A revoked\n thumbprint stays revoked permanently; once dropped from the list, consumers\n MAY drop it from their local set but the corresponding key SHOULD NOT be\n re-introduced into WBAFile.keys.\n\n Scope: a list revokes only keys of the directory whose revocation_url names\n it. A thumbprint of another party's key in this list revokes nothing.")))();
 
@@ -222,7 +222,7 @@ export const UsageReportRejectionReasonSchema = /* @__PURE__ */ (() => wire(z.en
 
 export const UsageReportResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "report_id": z.string().describe("Exchange-assigned report identifier. Required for the dispute chain —\n the agent must reference this report_id in DisputeRequest to prove that\n a usage report was filed before disputing. The complete evidence chain:\n   Offer → Transaction (transaction_id, billing_id)\n        → UsageReport → UsageReportResponse (report_id)\n        → DisputeRequest (transaction_id + report_id)").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReportResponse — Acknowledgment of a usage report.")))();
 
-export const WBAFileSchema = /* @__PURE__ */ (() => wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound).").default(""), "not_before": z.string().describe("RFC3339 timestamp. Key is invalid before this instant.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field and is \"ed25519\".\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5.")))();
+export const WBAFileSchema = /* @__PURE__ */ (() => wire(z.object({ "keys": z.array(z.object({ "alg": z.string().describe("Signing algorithm. FORA v1.0: MUST be \"EdDSA\".").default(""), "crv": z.string().describe("Curve. FORA v1.0: MUST be \"Ed25519\".").default(""), "kty": z.string().describe("Key type. FORA v1.0: MUST be \"OKP\".").default(""), "not_after": z.string().describe("REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant\n (strict upper bound), and a key without it is never valid.").default(""), "not_before": z.string().describe("REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key\n without it is never valid.").default(""), "use": z.string().describe("Intended key use. FORA v1.0: MUST be \"sig\".").default(""), "x": z.string().describe("base64url-encoded 32-byte Ed25519 public key.").default("") }).describe("JsonWebKey — Inline RFC 7517 JWK object.\n\nFORA v1.0 supports Ed25519 only: kty=\"OKP\", crv=\"Ed25519\", alg=\"EdDSA\".\n Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4\n defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names\n (`ed25519`), a known and deliberate deviation. The RFC 9421 signature\n parameter `alg` in Signature-Input is a different field: a FORA signer sets\n it to \"ed25519\", and a verifier also accepts a signature without it, the\n Ed25519 key deciding the algorithm.\n\n Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the\n JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)\n MUST have `not_before <= now < not_after`. Verification MUST reject\n signatures whose key falls outside its window. A key that lacks either bound,\n or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no\n such members, so this is a deliberate departure: a directory written to WG-00\n alone must add them before a FORA verifier uses its keys.\n\n Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,\n computed locally by the verifier. Carrying a kid alongside the thumbprint\n created a drift surface and is removed.")).describe("RFC 7517 JWK Set \"keys\" member. FORA v1: Ed25519 (OKP) keys, each with\n not_before/not_after FORA extension members, which a FORA verifier\n requires (see JsonWebKey). A verifier uses only the keys whose response\n signature verifies; WG-00 Appendix B.1 only RECOMMENDS signing the\n response, and FORA requires it.").optional(), "revocation_url": z.string().describe("Directory-level emergency revocation channel. One per directory; the list\n it points to enumerates revoked key thumbprints. Consumers poll on a 300s\n cadence (±10% jitter) and replace their local revoked set with the response.\n The list revokes keys of this directory only: a consumer checks a\n signature against the list of the directory that published its key, and\n never applies this list to another party's key. A fetch of the list MAY\n follow up to five redirects (see \"Redirects\" under Well-Known Discovery).").optional() }).describe("WBAFile — Pure Web Bot Auth directory served at the WBA-canonical well-known\n path (/.well-known/http-message-signatures-directory), over https, with\n status 200 and no redirect, as application/http-message-signatures-directory+json.\n The response is signed once per listed key under\n tag=\"http-message-signatures-directory\", covering \"@authority\";req and\n content-digest. A JOSE JWK Set per RFC 7517 §5 plus a directory-level\n revocation pointer. JWKs carry no kid; the\n RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers\n read the `keys` array and ignore FORA's extra members (per-key\n not_before/not_after, and revocation_url) per RFC 7517 §5. A FORA verifier\n does not: it requires each key's bounds and uses only the keys whose\n response signature verifies (see `keys`).")))();
 
 export const WellKnownManifestSchema = /* @__PURE__ */ (() => wire(z.object({ "accepted_verifiers": z.array(z.string()).describe("Exchange-only. Trusted attestation verification vendors (domains).").optional(), "account_registration": z.object({ "data_schema": z.record(z.string(), z.any()).describe("JSON Schema (draft 2020-12) describing the RegisterRequest.registration_data\n object this Exchange expects. This field is the single home of the\n enforce/pass-through contract, and publishing it IS the enforcement switch.\n Present: this Exchange validates registration_data against the schema and\n refuses a non-conforming payload with\n REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA, naming the offending\n members in RegistrationFailure.field_errors. Absent: registration_data is\n passed through to the system of record uninspected, so an Exchange that\n publishes no schema needs no change to stay conformant.\n\nThe gate above runs on ACCOUNT CREATION ONLY. A repeat registration, for an\n agent that already holds an account, is answered from the stored record and\n runs no schema check at all — it discards registration_data rather than\n validating it. That exception is stated here rather than left to the section\n above, because this field calls itself the single home of the contract and a\n reader who comes here for the whole rule would otherwise leave with the wrong\n one. See \"Repeat registration\" in the Agent Account Registration section for\n why, and for the other gates it applies to.\n\n Absent means the field carries no bytes, or only JSON whitespace — space, tab,\n carriage return and line feed, RFC 8259's four and no others. Nothing else\n counts, and the distinction is load-bearing rather than pedantic: this is the\n enforcement switch, so a byte sequence read as absent is one that turns\n validation OFF. A consumer that asked its own language what \"blank\" means got\n three different answers to the same document — U+00A0 and U+3000 are whitespace\n to some runtimes and not others, and a decoder that strips a byte order mark\n makes a mark followed by a space look like nothing at all. A document that is\n not empty and not JSON is malformed, which is a refusal; it is never silence.\n\n Safety rules, because a consumer reads this schema out of a THIRD PARTY's\n manifest and validates against it before any signature has been checked. A\n publisher MUST satisfy every rule below and a consumer MUST refuse a schema\n that does not. The bounds are stated here as numbers rather than left to each\n implementation on purpose: a schema is validated at both ends of the same\n registration, and a limit chosen privately by one side refuses payloads the\n other accepts.\n\n   Self-contained. Every $ref, $dynamicRef and $recursiveRef MUST be a\n   same-document reference — it begins with \"#\". A consumer MUST NOT resolve a\n   reference that leaves the document: doing so turns every reader into an\n   SSRF vector aimed at a URL the schema's author chose.\n\n   One dialect. $schema, wherever it appears in the document, MUST name\n   https://json-schema.org/draft/2020-12/schema (an empty fragment on the end\n   is the same value). A document declaring none is read as that dialect. An\n   older draft is refused rather than validated under semantics its author did\n   not intend.\n\n   Data is not schema. `const`, `enum`, `default` and `examples` hold arbitrary\n   JSON VALUES, and their contents are never read as keywords: a `const` whose\n   value happens to carry a \"$ref\" or \"$schema\" member states a value a payload\n   may equal, not a reference to resolve or a dialect to honour. Both rules\n   above therefore stop at those four keywords, and so does the pattern\n   alphabet. Their nesting still counts against the depth cap. Likewise the\n   child keys of `properties`, `patternProperties`, `$defs`, `definitions` and\n   `dependentSchemas` are NAMES rather than keywords, so a property called\n   \"$ref\" is a property.\n\n   Bounded size: 16KB, measured as the UTF-8 bytes of this member AS SERVED in\n   fora.json.\n\n   One encoding. The bytes MUST be well-formed UTF-8 (RFC 8259 requires it for\n   interchange) and MUST NOT begin with a byte order mark. RFC 8259 forbids\n   ADDING a mark and lets a parser ignore one, so both policies conform and the\n   choice is made here rather than left to each implementation: parsers differ,\n   and one that strips a mark validates a different document — and counts three\n   bytes against the size cap that the schema does not contain. A consumer MUST\n   NOT repair ill-formed bytes either; substituting U+FFFD silently enforces a\n   schema nobody published. A mark is in any case only valid at the start of a\n   JSON text, and this is a member inside one.\n\n   Bounded depth: 32 nested JSON containers, counting the schema itself as the\n   first.\n\n   Bounded WORK: 10000 evaluations, counted statically over the SCHEMA — each\n   anyOf/oneOf/allOf branch and prefixItems entry costs its own subschema, and a\n   $ref costs its target. It is the cost of applying the schema at ONE location\n   in a payload, not of a whole payload: a subschema under `items` is counted\n   once here and evaluated once per element at runtime. The size and depth caps\n   do not bound it and are not a substitute for it: branches multiply along a\n   reference chain, so a 1.6KB schema five containers deep can cost tens of\n   millions of evaluations and tens of seconds against a two-member payload. A\n   definition nobody references costs nothing, so a document may carry a library\n   of them.\n\n   Bounded reference chains: 100 hops, counted as the longest path of $ref hops\n   rather than as the number of references the document contains. This is a\n   THIRD axis, and a flat chain of definitions shows why it has to be: each one\n   referring to the next is three JSON containers deep however long it is, so\n   the depth cap never sees it, and it costs one evaluation per link, so the\n   work cap does not either. What it does reach is the recursion a validator\n   performs while resolving the chain — a chain of a few hundred exhausted one\n   implementation's stack outright, on a document every other rule had passed.\n   A schema describing a business entity chains one or two references.\n\n   No reference cycles. A $ref chain MUST NOT return to a schema already on it.\n   The construct is legal JSON Schema and is how a recursive structure is\n   written, but its evaluation cost has no static bound and it is what makes a\n   validator recurse until it aborts. Registration data describes a business\n   entity, which is not a recursive shape.\n\n   A portable `pattern` alphabet, stated as what a pattern MAY contain rather\n   than as what it may not. A group MUST open with \"(\" or \"(?:\" and nothing\n   else; only the escapes \\$, \\(, \\), \\*, \\+, \\., \\/, \\?, \\D, \\W, \\[, \\\\, \\],\n   \\^, \\d, \\f, \\n, \\r, \\t, \\v, \\w, \\{, \\| and \\} MAY appear, together with \\xHH\n   carrying exactly two hexadecimal digits (spelled out rather than ranged, so a\n   conformance guard can check the set character by character); a counted repeat\n   MUST NOT exceed 1000 and MUST state its first bound, so \"a{2,}\" is admitted\n   and \"a{,5}\" is not; a \"}\" outside a bracket expression MUST close a counted\n   repeat, so a literal brace is written \"\\}\"; \"[:\" MUST NOT appear inside a\n   bracket expression; a bracket expression MUST close and MUST NOT open with\n   \"]\"; and a range endpoint MUST NOT be one of the shorthand classes (\"[\\w-x]\").\n\n   The two brace rules are there for the same reason as the bracket ones, and\n   were found the same way. \"a{,5}\" is five literal characters to RE2 and a\n   repeat of zero to five to Python, so both engines compile it and then\n   disagree about which payloads match — the silent kind. An unmatched \"}\" is a\n   literal to RE2 and to Python and a syntax error to ECMA-262 under the `u`\n   flag, which is the loud kind, and exactly what the unmatched \"]\" rule above\n   already refuses.\n\n   The direction of that rule is the rule. Draft 2020-12 patterns are ECMA-262,\n   but the engines implementations run do not agree on it, and the set they\n   disagree about has no end: it grows with every dialect and every library\n   version, so a list of forbidden escapes needs a new entry each time somebody\n   finds one, and until then the gap is open. The portable set is small and\n   closed, and an author who wants a construct outside it writes the characters\n   out instead.\n\n   Some of the disagreement is loud — RE2 refuses the lookaround, atomic groups\n   and backreferences ECMA allows, so a schema using them compiles for one\n   implementation and fails for another. The rest is SILENT, and is why this is\n   a MUST rather than a SHOULD: inline flags, Unicode property classes, text\n   anchors and POSIX bracket names are accepted by one engine and either refused\n   or read DIFFERENTLY by the next, so two conformant validators both compile\n   the pattern and then disagree about which payloads match it, with nothing\n   logged. `\\s` and `\\B` are the plainest examples — RE2 reads `\\s` as\n   [\\t\\n\\f\\r ], Python adds the vertical tab, and ECMA-262 adds that plus every\n   Unicode space separator; `\\B` finds no word boundary in the empty string for\n   RE2 and ECMA-262 and finds one for Python. An explicit character class says\n   what was meant and means it everywhere.\n\n   Where a pattern may appear. `pattern` states its regex as a value and\n   `patternProperties` states its regexes as KEYS; both are patterns and both\n   are held to the alphabet above. They are the only two keywords in the dialect\n   that carry one — `propertyNames` reaches the rule through the subschema it\n   applies.\n\n   No nested quantifiers. A quantified group MUST NOT have a body that can\n   itself repeat or branch: `(a+)+`, `(a|a)*` and `([a-z]+)*` are refused, while\n   `(?:ab)+` is admitted. This is the denial-of-service half of the pattern\n   rule, and it is deliberately SEPARATE from the alphabet above, because\n   excluding lookaround and backreferences does not cover it — catastrophic\n   backtracking needs neither. It has to be a publishing rule rather than a\n   runtime bound: a regex spin holds its interpreter, so a consumer cannot\n   reliably interrupt one it has already started.\n\n   Annotations stay annotations. A consumer MUST NOT assert format,\n   contentEncoding or contentMediaType. Libraries default differently on each,\n   and a schema whose verdict depends on which library read it has no single\n   answer.\n\n The value MUST be a JSON object. Draft 2020-12 also admits a bare boolean as a\n schema, but this field is a Struct and cannot carry one.\n\n A consumer that finds a schema breaking any of these MUST refuse it, and MUST\n then SKIP its local pre-check rather than repair or truncate the schema —\n leaving the Exchange's own enforcement the deciding check, exactly as when no\n schema is published. Refusing locally and declining to send would turn a rule\n about reading a third party's document into a denial of service against the\n consumer's own user. That is the CLIENT side. An Exchange that cannot compile\n its OWN configured schema is looking at a misconfiguration of its deployment,\n and MUST NOT advertise a schema it is not itself enforcing.").optional() }).describe("Exchange-only. How to open an account here — see AccountRegistration, which\n owns the contract. Absent: registration_data is accepted uninspected,\n exactly as before this field existed.").optional(), "base_currency": z.string().describe("Exchange-only. Base currency for pricing (ISO 4217). All unit_cost\n values from this Exchange are denominated in this currency.").optional(), "catalog_contributors": z.array(z.object({ "domain": z.string().describe("Canonical domain of the authorized contributor (e.g., \"doubleverify.com\").").default(""), "relationship": z.string().describe("Relationship of this contributor to the provider.\n Examples: \"verifier\" (resource intelligence vendor that attests to resource\n properties), \"exchange\" (an Exchange that enriches catalog entries).").default("") }).describe("CatalogContributor — A third party authorized to push catalog metadata\n (including attestations) on behalf of a provider.")).describe("Publisher-only. Authorized third-party catalog contributors.\n MUST be empty for non-publisher roles.").optional(), "catalog_endpoint": z.string().describe("Exchange-only. CatalogService endpoint URL (if exposed). It carries the\n same binding as endpoint: it MUST be on the same host AND PORT that serve\n this manifest, or on a subdomain of that host on that port, and MUST NOT\n carry userinfo. A consumer refuses a catalog endpoint anywhere else — a\n publisher's push is a signed call, and a manifest naming an unrelated host\n would redirect it to a party the signature never covered. The host match is\n on a full dot-delimited label boundary, and a port equal to the scheme's\n default and an omitted port are the SAME port. Absent means this Exchange\n does not expose CatalogService; a consumer does not fall back to endpoint.").optional(), "contact": z.string().describe("Contact email (licensing, integration, security).").optional(), "delivery_methods_supported": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Exchange-only. Supported delivery methods.").optional(), "domain": z.string().describe("Canonical domain serving this manifest.").default(""), "endpoint": z.string().describe("Exchange-only. ExchangeService endpoint URL. MUST be on the same host AND\n PORT that serve this manifest, or on a subdomain of that host on that port,\n and MUST NOT carry userinfo. A consumer refuses an endpoint anywhere else:\n this document is only as trustworthy as the host that served it, so an\n endpoint naming an unrelated host would let whoever answers for the manifest\n redirect a signed call to a party the signature never covered, and another\n port is another service the publisher of the manifest need not control. The\n host match is on a full dot-delimited label boundary, so evil-a.com is not a\n subdomain of a.com. A port equal to the scheme's default and an omitted port\n are the SAME port, so https://x, https://x:443 and x all match. An Exchange\n reachable on a non-default port names that port on both sides.").optional(), "exchanges": z.array(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")).describe("Publisher-only. Authorized exchanges for this publisher's resources.\n Like ads.txt — declares who may sell. MUST be empty for non-publisher\n roles.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052). Lists keys\n within ext that the consumer MUST understand. Unknown values reject\n with UNKNOWN_CRITICAL_EXTENSION. Empty (default) → ignore-unknown.").optional(), "gnap_grant_endpoint": z.string().describe("Exchange-only. GNAP grant endpoint when GNAP is supported.").optional(), "hash_methods_supported": z.array(z.string()).describe("Exchange-only. Accepted resource hash methods for attestation\n verification.").optional(), "health_endpoint": z.string().describe("Exchange-only. The URL a consumer, such as a Broker deciding whether to route\n to this Exchange, probes to judge whether it is serving: an absolute URL, or\n a path resolved against this manifest's own URL (RFC 3986). A 200 answer\n means serving. When absent, a consumer judges reachability by fetching this\n manifest itself; it never assumes a path the protocol does not name.").optional(), "max_intermediary_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Exchange-only. Maximum number of RFC 9421 HTTP Message Signatures this\n Exchange accepts on an inbound request. Every signature counts, whether or\n not it covers another. A request signed only by the party that sent it — an\n agent, or a Broker for a request it authored — carries one, so the cap\n bounds a request that a party forwarded unchanged and signed again. An\n Exchange refuses a request carrying more before it verifies any signature,\n with the Connect code resource_exhausted (HTTP 429) and no typed reason.\n Lets Exchanges publish their tolerance so a sender stays within it.\n Absent = no published limit (Exchange applies its own default policy).").optional(), "name": z.string().describe("Exchange-only. Human-readable Exchange name.").optional(), "oidc_issuer": z.string().describe("Exchange-only. OIDC Discovery URL when OAuth methods are supported.").optional(), "operator": z.string().describe("Exchange-only. Organization operating this Exchange.").optional(), "operator_domain": z.string().describe("Exchange-only. Operator's corporate domain (may differ from domain).").optional(), "pricing_models_supported": z.array(z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"])).describe("Exchange-only. Supported pricing models.").optional(), "privacy_uri": z.string().describe("Exchange-only. Privacy policy URL.").optional(), "protocol_versions_supported": z.array(z.string()).describe("Exchange-only. Supported FORA protocol versions (e.g. [\"1.0\"]).").optional(), "role": z.enum(["ROLE_AGENT","ROLE_EXCHANGE","ROLE_BROKER","ROLE_PUBLISHER"]).describe("Role this manifest describes."), "supported_auth_methods": z.array(z.enum(["AUTH_METHOD_GNAP","AUTH_METHOD_OAUTH_DPOP","AUTH_METHOD_OAUTH_BEARER","AUTH_METHOD_OAUTH_MTLS"])).describe("Exchange-only. Authorization methods this Exchange supports\n (ordered by preference).").optional(), "supported_profiles": z.array(z.string()).describe("Exchange-only. Domain extension profiles this Exchange conforms to.\n See standards-layering docs.").optional(), "terms_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Exchange-only. Digest of the document served at `terms_uri`, in\n \"method:hexdigest\" form (e.g. \"sha256:9f86d081...\"), pinning WHICH terms\n document this manifest is currently offering. `terms_uri` alone cannot\n answer that: it is a URL, and its content changes, so after the first\n revision every earlier registration points at a document that no longer says\n what was agreed. RegisterRequest.terms_digest echoes this value, the request\n signature covers that echo, and the Exchange records the accepted digest\n with the account — which is what makes \"which terms did this operator\n accept\" answerable later, through GetAccountStatusResponse.terms_digest, which\n is where the accepted value is read back. Because a digest identifies a\n document only while\n a copy of it still exists, keeping the historical terms documents\n retrievable is the Exchange's obligation. It sits at the top level rather\n than inside account_registration on purpose: an Exchange with pass-through\n registration publishes no block yet still needs to pin its terms version,\n and coupling \"I enforce a schema\" to \"I version my terms\" would tie together\n two independent decisions. Operator note: publishing this field for the\n first time refuses every client that does not yet echo it, so it is a\n coordinated change rather than a safe addition.").optional(), "terms_uri": z.string().describe("Exchange-only. Terms of service URL.").optional(), "ver": z.string().describe("Version of THIS MANIFEST DOCUMENT's layout — \"1.0\", stamped by the party\n that serves the document from the SDK's WellKnownManifestVersion, never from\n ProtocolVersion. A namespace separate from the RPC envelope `ver`: a change\n to this document's layout bumps both numbers, a protocol change that leaves\n the document untouched bumps only the envelope's, so a reader that parses\n only manifests upgrades when the manifest changes and at no other time.\n\nConsumers read `ver` before any other member. They ACCEPT a recognised\n MAJOR version whatever the MINOR — a minor revision of the manifest is\n additive, and a reader ignores members it does not know. They REJECT an\n unrecognised MAJOR, a value that is not MAJOR.MINOR, and an ABSENT `ver`:\n the document sits at a fixed, unversioned path and is read before any\n signature is checked, so a layout the reader cannot classify must not\n supply anything a signed call then carries — the endpoint that call is sent\n to, or the terms_digest it echoes and its signature covers.\n\n It binds every consumer of this document rather than one use of it. In the\n SDK that is both manifest-reading faces, in all three languages — the\n endpoint resolver and the registration-requirements reader — each applying\n it at its own call site, pinned to one corpus. The key face is exempt\n because it reads a plain JWK Set, which carries no version of this document\n and never will.").default("") }).describe("WellKnownManifest — FORA commercial overlay, served at /.well-known/fora.json\n by every FORA participant (agent, exchange, broker, publisher).\n\nCommercial graph only: role, authorized exchanges/contributors, and exchange\n capability fields. Identity keys are NOT here — they live in the WBA directory\n (WBAFile) served at /.well-known/http-message-signatures-directory and are\n referenced by RFC 7638 thumbprint, never republished here.\n Per-role fields are populated only when that role applies; consumers\n MUST ignore non-applicable fields based on `role`.")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index b2eee5cc..78b63171 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -919,13 +919,14 @@ SDKs implement it:
   `Accept-Signature`. A bodiless request at the publisher edge needs only the Web Bot
   Auth base.
 - Signers use a `Signature-Agent` member key equal to the signature label. Verifiers
-  also accept a member key that differs from the label, a signature without a nonce, and
-  a member with `type=directory`. The legacy sf-string `Signature-Agent` is accepted on a
-  request carrying one signature only. Verifiers refuse a signature with no `tag`, a
-  `Signature-Agent` member that is not an https origin, and the bare unquoted value the
-  v1.0.8 SDKs sent, and answer a missing component, a refused form or a member that is
-  not an https origin with `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
-  empty `Authorization` stays valid.
+  also accept a member key that differs from the label, a signature without a nonce, a
+  signature without `alg` (an `alg` that is present, an empty one included, must be
+  `ed25519`), and a member with `type=directory`. The legacy sf-string `Signature-Agent`
+  is accepted on a request carrying one signature only. Verifiers refuse a signature
+  with no `tag`, a `Signature-Agent` member that is not an https origin, and the bare
+  unquoted value the v1.0.8 SDKs sent, and answer a missing component, a refused form or
+  a member that is not an https origin with `Accept-Signature` listing what they
+  require. `Signature-Agent` is never empty; an empty `Authorization` stays valid.
 - Several signatures: each is verified on its own, against the key its `keyid` names in
   the directory its own covered member names; a signature that covers several members
   (because it covers an earlier signature) follows the one keyed to its label. Covering
@@ -957,8 +958,13 @@ SDKs implement it:
   manifest may still follow up to five redirects. Each key's JWK `alg` stays `EdDSA`, the
   JOSE name RFC 7517 §4.4 defines. This is a known, deliberate deviation from WG-00
   §5.5.1, which restricts that member to HTTP Message Signatures names (`ed25519`); FORA
-  follows RFC 7517 and Cloudflare's reference library. It is the only deviation from
-  WG-00.
+  follows RFC 7517 and Cloudflare's reference library. It is one of three departures
+  from WG-00, all in the key directory. The response must be signed, where WG-00 only
+  recommends it, and a verifier uses only the listed keys whose response signature
+  verifies, over exactly `"@authority";req` and `content-digest`; a response signature
+  may carry no `alg`. Each key must carry `not_before` and `not_after`, and a key
+  without both is never valid. Within what WG-00 permits, a verifier also accepts only
+  Ed25519 keys and ignores a member whose `type` is not `directory`.
 
 Authentication includes a complete signed request, a query a Broker originated and
 signed alone, and a signed directory response, all with real values the SDKs reproduce
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 3c1eae81..302250d5 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -3810,12 +3810,17 @@ enum Role {
 // Additional curves are a later concern. `alg` is the JOSE name RFC 7517 §4.4
 // defines; WG-00 §5.5.1 restricts the member to HTTP Message Signatures names
 // (`ed25519`), a known and deliberate deviation. The RFC 9421 signature
-// parameter `alg` in Signature-Input is a different field and is "ed25519".
+// parameter `alg` in Signature-Input is a different field: a FORA signer sets
+// it to "ed25519", and a verifier also accepts a signature without it, the
+// Ed25519 key deciding the algorithm.
 //
 // Time bounds are RFC3339 strings (sortable, ops-debuggable, avoids the
 // JWT nbf/exp collision). At least one key in the served key set (WBAFile.keys)
 // MUST have `not_before <= now < not_after`. Verification MUST reject
-// signatures whose key falls outside its window.
+// signatures whose key falls outside its window. A key that lacks either bound,
+// or whose bound is not an RFC3339 timestamp, is never valid. WG-00 defines no
+// such members, so this is a deliberate departure: a directory written to WG-00
+// alone must add them before a FORA verifier uses its keys.
 //
 // Keys carry no `kid`: the RFC 9421 keyid is the RFC 7638 JWK Thumbprint,
 // computed locally by the verifier. Carrying a kid alongside the thumbprint
@@ -3836,11 +3841,12 @@ message JsonWebKey {
   // base64url-encoded 32-byte Ed25519 public key.
   string x = 6;
 
-  // RFC3339 timestamp. Key is invalid before this instant.
+  // REQUIRED. RFC3339 timestamp. Key is invalid before this instant, and a key
+  // without it is never valid.
   string not_before = 7;
 
-  // RFC3339 timestamp. Key is invalid at and after this instant
-  // (strict upper bound).
+  // REQUIRED. RFC3339 timestamp. Key is invalid at and after this instant
+  // (strict upper bound), and a key without it is never valid.
   string not_after = 8;
 }
 
@@ -4239,10 +4245,15 @@ message WellKnownManifest {
 // revocation pointer. JWKs carry no kid; the
 // RFC 9421 keyid is the RFC 7638 JWK Thumbprint. Off-the-shelf WBA verifiers
 // read the `keys` array and ignore FORA's extra members (per-key
-// not_before/not_after, and revocation_url) per RFC 7517 §5.
+// not_before/not_after, and revocation_url) per RFC 7517 §5. A FORA verifier
+// does not: it requires each key's bounds and uses only the keys whose
+// response signature verifies (see `keys`).
 message WBAFile {
   // RFC 7517 JWK Set "keys" member. FORA v1: Ed25519 (OKP) keys, each with
-  // not_before/not_after FORA extension members.
+  // not_before/not_after FORA extension members, which a FORA verifier
+  // requires (see JsonWebKey). A verifier uses only the keys whose response
+  // signature verifies; WG-00 Appendix B.1 only RECOMMENDS signing the
+  // response, and FORA requires it.
   repeated JsonWebKey keys = 1;
 
   // Directory-level emergency revocation channel. One per directory; the list
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index adc6c0bb..80d3978d 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -66,7 +66,7 @@ Which Brokers an Exchange admits is the Exchange's own policy, for example the B
 
 ### The WBA Directory Endpoint
 
-Signing keys are published in a dedicated Web Bot Auth key directory at `/.well-known/http-message-signatures-directory`, separate from the role manifest at `/.well-known/fora.json`. It is served over https, answers `200` with no redirect, and uses the media type `application/http-message-signatures-directory+json`. The body is a JWK Set: a `keys` array of Ed25519 JWKs plus an optional `revocation_url`. Each key is identified by its RFC 7638 thumbprint (the value carried as the RFC 9421 `keyid`), so the directory carries no `kid` labels. Each key carries `alg` `EdDSA`, the JOSE name, which deliberately differs from WG-00 §5.5.1 (see [Key Directory](#key-directory)). The response is signed by each key it lists. Every FORA participant — agent, exchange, broker, publisher — serves one. See [Key Directory](#key-directory) for the full rules.
+Signing keys are published in a dedicated Web Bot Auth key directory at `/.well-known/http-message-signatures-directory`, separate from the role manifest at `/.well-known/fora.json`. It is served over https, answers `200` with no redirect, and uses the media type `application/http-message-signatures-directory+json`. The body is a JWK Set: a `keys` array of Ed25519 JWKs plus an optional `revocation_url`. Each key is identified by its RFC 7638 thumbprint (the value carried as the RFC 9421 `keyid`), so the directory carries no `kid` labels. Each key carries `alg` `EdDSA`, the JOSE name, and FORA's `not_before` and `not_after` bounds, and the response is signed by each key it lists: three rules where FORA departs from WG-00 ([Where FORA departs from WG-00](#where-fora-departs-from-wg-00)). Every FORA participant — agent, exchange, broker, publisher — serves one. See [Key Directory](#key-directory) for the full rules.
 
 ### Web Bot Auth Conformance
 
@@ -75,9 +75,9 @@ FORA request signatures follow Web Bot Auth (WBA), as specified by the IETF webb
 Conformance is a property FORA has to maintain on purpose. It does not follow from sharing RFC 9421 and Ed25519 with WBA: a signature can use both and still be refused by every WBA verifier. Conformance means two things, and FORA requires both:
 
 - **FORA signatures verify as WBA.** Every signature a FORA participant creates is a conformant WG-00 signature. A WBA verifier that knows nothing about FORA can verify it and attribute it to the signer's directory.
-- **WBA signatures verify at FORA.** A FORA verifier accepts a signature made by any WBA library, provided the signature also covers the extra components FORA requires on that route. FORA advertises those components through WBA's `Accept-Signature` mechanism, so a WBA library that can add covered components can call FORA without FORA-specific code.
+- **WBA signatures verify at FORA.** A FORA verifier accepts a signature made by any WBA library, with or without `alg`, provided the signature also covers the extra components FORA requires on that route, its key is Ed25519, and the signer's directory meets the rules where FORA departs from WG-00. FORA advertises those components through WBA's `Accept-Signature` mechanism, so a WBA library that can add covered components can call FORA without FORA-specific code.
 
-The rules that make both true are in [The Web Bot Auth Profile](#the-web-bot-auth-profile). FORA departs from WG-00 in one deliberate place, stated with its reason where it applies: a key directory's JWK `alg` is the JOSE name `EdDSA` ([Key Directory](#key-directory)). It does not change how a WBA verifier checks a FORA request signature.
+The rules that make both true are in [The Web Bot Auth Profile](#the-web-bot-auth-profile). FORA departs from WG-00 in three places, all in the key directory, each listed with its reason in [Where FORA departs from WG-00](#where-fora-departs-from-wg-00). None of them changes how a WBA verifier checks a FORA request signature.
 
 WBA establishes identity: this bot is who it claims to be. FORA adds the transaction layer on top of that identity: this bot is authorised to access this content at this price.
 
@@ -85,6 +85,18 @@ WBA establishes identity: this bot is who it claims to be. FORA adds the transac
 The next SDK release implements this profile in Go, Python and TypeScript. The SDKs released as v1.0.8 do not. They send `Signature-Agent` as a bare, unquoted URL rather than a dictionary, set no `tag`, generate a 16-byte nonce, and refuse any signature that does not cover all five FORA components. The reference implementation's directories are served as `application/jwk-set+json` and unsigned until it adopts that release. The change is a hard cut with no transition window: verifiers of the new release refuse the bare unquoted `Signature-Agent` that v1.0.8 sends and a directory served under the old media type, so a v1.0.8 client must upgrade to keep working. The SDKs and the reference implementation change together; the [changelog](/reference/changelog/) lists each difference.
 :::
 
+#### Where FORA departs from WG-00
+
+FORA departs from WG-00 in three places, all in the key directory:
+
+- **A key's JWK `alg` is the JOSE name `EdDSA`** (RFC 7517 §4.4), not the HTTP Message Signatures name `ed25519` that WG-00 §5.5.1 uses. See the note under [Key Directory](#key-directory).
+- **The directory response must be signed.** WG-00 Appendix B.1 only RECOMMENDS it. A FORA verifier uses only the listed keys whose response signature verifies, and that signature covers exactly `"@authority";req` and `content-digest`. A response signature may carry no `alg`, as WG-00's own Appendix E.2.3 example does.
+- **Each key must carry `not_before` and `not_after`.** A key that lacks either bound is never valid ([Key Validity Windows](#key-validity-windows)). WG-00 defines no validity members, so a directory written to WG-00 alone must add them before a FORA verifier uses its keys.
+
+Within what WG-00 permits, a FORA verifier also accepts only Ed25519 keys, and ignores a `Signature-Agent` member whose `type` is anything but `directory`.
+
+None of this changes how a WBA verifier checks a FORA request signature: a FORA directory carries everything WG-00 asks for, and a WBA verifier ignores the members it does not know.
+
 ### Signature Verification
 
 The `Requester` message carries identity semantics only — it has **no** signature field. Request authentication is an [RFC 9421 HTTP Message Signature](https://www.rfc-editor.org/rfc/rfc9421) over the HTTP request itself, carried in the `Signature`, `Signature-Input` and `Signature-Agent` HTTP headers rather than in the protobuf body. This separates identity semantics (the `Requester` message) from cryptographic proof (the HTTP signature).
@@ -100,8 +112,8 @@ Covering a header is not the same as sending it, and both are required. A verifi
 The Exchange verifies it by:
 
 1. Parsing `Signature`, `Signature-Input` and `Signature-Agent`, and selecting the `Signature-Agent` member the signature covers
-2. Checking the signature against the profile: `tag="web-bot-auth"`, `created`, `expires`, `keyid` and `alg="ed25519"` present, `@target-uri` or `@authority` covered, and on a FORA RPC the four FORA components covered
-3. Fetching the key directory at `{origin}/.well-known/http-message-signatures-directory` for the origin that member names, and selecting the `JsonWebKey` whose RFC 7638 thumbprint matches the `keyid` (and whose `[not_before, not_after)` window covers now)
+2. Checking the signature against the profile: `tag="web-bot-auth"`, `created`, `expires` and `keyid` present, `alg` either absent or `"ed25519"`, `@target-uri` or `@authority` covered, and on a FORA RPC the four FORA components covered
+3. Fetching the key directory at `{origin}/.well-known/http-message-signatures-directory` for the origin that member names, and selecting the `JsonWebKey` whose RFC 7638 thumbprint matches the `keyid` (and whose `[not_before, not_after)` window covers now; a key without both bounds is never valid)
 4. Reconstructing the signature base from the declared components and verifying the Ed25519 signature in the `Signature` header against that key
 5. Confirming the `Content-Digest` matches the request body, and that the directory that published the key is the identity the caller is authorised as
 
@@ -391,7 +403,7 @@ Every FORA signature is a conformant WG-00 signature:
 | `@target-uri` or `@authority` | At least one covered (WG-00 §5.2). FORA RPCs always cover `@target-uri` |
 | `created`, `expires` | Both present, as integer seconds. The lifetime is a few minutes and always well under the 24 hours WG-00 recommends as the maximum. A signature is never reused as a long-lived credential (WG-00 §6.9) |
 | `keyid` | The key's RFC 7638 JWK thumbprint (RFC 8037 Appendix A.3 for Ed25519), base64url without padding |
-| `alg` | `"ed25519"`. WG-00 does not require `alg`, but widely deployed WBA verifiers do, so FORA always sends it |
+| `alg` | `"ed25519"`. WG-00 does not require `alg`, but widely deployed WBA verifiers do, so FORA always sends it. A FORA verifier also accepts a signature without one, because the key decides the algorithm; see [What a FORA verifier accepts](#what-a-fora-verifier-accepts) |
 | `tag` | `"web-bot-auth"` |
 | `nonce` | A fresh 64-byte random value for every signature, base64url without padding. See [Replay protection](#replay-protection) |
 
@@ -439,9 +451,10 @@ Agents in the field run many WBA libraries and some send earlier forms of the pr
 - **The legacy `Signature-Agent` form, on a direct single-hop call only.** A bare structured-field String (`Signature-Agent: "https://research.acme.com"`), covered as plain `"signature-agent"`. The verifier treats it as a dictionary with one member whose key is the label of the signature covering it. A party that forwards a request unchanged refuses this form, because it has to append its own member to the agent's `Signature-Agent` header and a String cannot take a second member; it answers with `Accept-Signature` asking for the dictionary form, as in the `Accept-Signature` example above. FORA signers never send this form.
 - **A member key different from the signature label.** Signers use a member key equal to the label, but when a signature covers one `Signature-Agent` member the verifier follows that member, `"signature-agent";key="<member>"`, whatever the label is called.
 - **No `nonce`.** WG-00 sets no nonce requirement.
+- **No `alg`.** WG-00 does not require it. The key decides the algorithm (RFC 9421 §3.2, step 6.3): every key a FORA verifier resolves is Ed25519, and nothing a signer sends at run time selects the algorithm (RFC 9421 §7.3.6). An `alg` that is present must name `ed25519`, in any letter case.
 - **A `type` parameter equal to `directory`** on the member. A member with any other `type` value is ignored, as WG-00 §5.2.1 requires.
 
-A FORA verifier refuses a signature with no `tag` or a `tag` other than `web-bot-auth`, a signature whose covered `Signature-Agent` member is not an https origin, and a bare unquoted `Signature-Agent` value such as `https://research.acme.com`, which is neither a dictionary nor a String. There is no transition window for that last form. A verifier that refuses a signature for a missing component, or for a form it does not accept, answers with `Accept-Signature` naming what it requires (WG-00 §5.3).
+A FORA verifier refuses a signature whose `alg` is present but is not `ed25519`, an empty `alg` included, a signature with no `tag` or a `tag` other than `web-bot-auth`, a signature whose covered `Signature-Agent` member is not an https origin, and a bare unquoted `Signature-Agent` value such as `https://research.acme.com`, which is neither a dictionary nor a String. There is no transition window for that last form. A verifier that refuses a signature for a missing component, or for a form it does not accept, answers with `Accept-Signature` naming what it requires (WG-00 §5.3); a refusal for `alg` carries none, because no covered component would fix it.
 
 ### Single-Hop Example
 
@@ -740,9 +753,9 @@ Every participant serves its keys as a WG-00 key directory (WG-00 §5.5 and §5.
 | Signed response | Signed once per listed key, as WG-00 Appendix B.1 describes: the signature covers `"@authority";req` and `content-digest`, carries `created`, `expires`, `keyid` (the thumbprint) and `alg`, and has `tag="http-message-signatures-directory"`. The response carries the matching `Content-Digest` header |
 | Access | Reachable without a signature and without bot challenges, and cacheable with standard HTTP caching |
 
-WG-00 makes the signed response RECOMMENDED. FORA requires it, because a directory that is not signed cannot be registered with some widely deployed WBA verifiers. A verifier checks the response signature with the key the directory lists, checks the `Content-Digest` against the body, and refuses a response signature whose `created` is in the future.
+WG-00 makes the signed response RECOMMENDED. FORA requires it, because a directory that is not signed cannot be registered with some widely deployed WBA verifiers. A verifier checks the response signature with the key the directory lists, checks the `Content-Digest` against the body, and refuses a response signature whose `created` is in the future. It uses only the listed keys whose response signature verifies, and a response signature counts only when it covers exactly `"@authority";req` and `content-digest`. It accepts a response signature that carries no `alg`, as WG-00's own Appendix E.2.3 example does; one that carries `alg` must name `ed25519`.
 
-FORA adds two extension members to the JWK Set: `not_before` and `not_after` on each key (see [Key Validity Windows](#key-validity-windows)), and `revocation_url` on the set (see [Emergency Revocation](#emergency-revocation)). A generic WBA verifier ignores members it does not know, as RFC 7517 allows.
+FORA adds two extension members to the JWK Set: `not_before` and `not_after` on each key (see [Key Validity Windows](#key-validity-windows)), and `revocation_url` on the set (see [Emergency Revocation](#emergency-revocation)). A generic WBA verifier ignores members it does not know, as RFC 7517 allows. A FORA verifier does not ignore the bounds: a key without both is never valid, so a directory written to WG-00 alone must add them before a FORA verifier uses its keys.
 
 A complete directory response for the agent in the [Single-Hop Example](#single-hop-example), signed with the same RFC 8037 test key:
 
@@ -787,7 +800,7 @@ The response signature base is:
 `"@authority";req` takes its value from the request that fetched the directory, so the signature cannot be served again under a different host. The `Content-Digest` is computed over the body exactly as shown, with two-space indentation and no trailing newline.
 
 :::note
-**Known, deliberate deviation from WG-00 §5.5.1.** A key's `alg` member is `EdDSA`, the JOSE name. RFC 7517 §4.4 defines the JWK `alg` member as a value from the JOSE algorithms registry, and Cloudflare's reference library follows RFC 7517. WG-00 §5.5.1 restricts the same member to HTTP Message Signatures names, where Ed25519 is `ed25519`. FORA follows RFC 7517 and the reference library here. The signature parameter `alg` in `Signature-Input` is a different field and is `ed25519`, as WG-00 requires.
+**Known, deliberate deviation from WG-00 §5.5.1.** A key's `alg` member is `EdDSA`, the JOSE name. RFC 7517 §4.4 defines the JWK `alg` member as a value from the JOSE algorithms registry, and Cloudflare's reference library follows RFC 7517. WG-00 §5.5.1 restricts the same member to HTTP Message Signatures names, where Ed25519 is `ed25519`. FORA follows RFC 7517 and the reference library here. The signature parameter `alg` in `Signature-Input` is a different field. WG-00 does not require it; FORA signers send `ed25519`, and a FORA verifier accepts a signature without it.
 :::
 
 ### Key Rotation
@@ -803,7 +816,7 @@ For delegation JWTs, key rotation at the issuer does not invalidate existing tok
 
 ### Key Validity Windows
 
-Each `JsonWebKey` carries RFC3339 `not_before` / `not_after` bounds. The window is **half-open** `[not_before, not_after)` — a key is valid at `not_before` and invalid **at and after** `not_after`. At least one key in the WBA directory's `keys` MUST be valid at serve time, and verifiers MUST reject signatures whose key falls outside its window.
+Each `JsonWebKey` carries RFC3339 `not_before` / `not_after` bounds. The window is **half-open** `[not_before, not_after)` — a key is valid at `not_before` and invalid **at and after** `not_after`. At least one key in the WBA directory's `keys` MUST be valid at serve time, and verifiers MUST reject signatures whose key falls outside its window. A key that lacks either bound, or whose bound is not an RFC 3339 timestamp, is never valid. WG-00 defines no validity members, so this is one of the places FORA departs from it ([Where FORA departs from WG-00](#where-fora-departs-from-wg-00)).
 
 ### Caching Contract
 
diff --git a/website/src/content/docs/protocol/standards-layering.mdx b/website/src/content/docs/protocol/standards-layering.mdx
index 147aaac6..0324000c 100644
--- a/website/src/content/docs/protocol/standards-layering.mdx
+++ b/website/src/content/docs/protocol/standards-layering.mdx
@@ -33,7 +33,7 @@ C2PA and FORA are orthogonal: C2PA proves **what content IS** (provenance, creat
 
 The IETF [webbotauth working group](https://datatracker.ietf.org/wg/webbotauth/about/) is standardising cryptographic bot identity: bots sign HTTP requests with RFC 9421 HTTP Message Signatures and publish their keys in a directory at a well-known path. Its only adopted document is [draft-ietf-webbotauth-httpsig-protocol-00](https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/00/) (1 September 2026), and that version is the one FORA targets.
 
-Every FORA request signature is a conformant signature under that draft, so a CDN or origin that verifies Web Bot Auth can verify a FORA agent without FORA-specific integration. In the other direction, FORA accepts signatures from any Web Bot Auth library, provided that on a FORA RPC the signature also covers the request method, target URI, body digest and `Authorization` header. FORA asks for those components through Web Bot Auth's own `Accept-Signature` mechanism. Conformance does not come from sharing the cryptography: it depends on the header forms, the covered components, the signature parameters and the directory format, which [Authentication](/protocol/authentication/#the-web-bot-auth-profile) specifies, together with FORA's one deliberate departure from the draft. The SDKs released as v1.0.8 do not implement that profile yet, and Authentication lists the differences. Web Bot Auth solves identity (Layer 2); FORA adds the transaction layer (Layer 4) on top of that identity.
+Every FORA request signature is a conformant signature under that draft, so a CDN or origin that verifies Web Bot Auth can verify a FORA agent without FORA-specific integration. In the other direction, FORA accepts signatures from any Web Bot Auth library, with or without `alg`, provided that on a FORA RPC the signature also covers the request method, target URI, body digest and `Authorization` header, its key is Ed25519, and the signer's key directory meets the rules where FORA departs from the draft. FORA asks for those components through Web Bot Auth's own `Accept-Signature` mechanism. Conformance does not come from sharing the cryptography: it depends on the header forms, the covered components, the signature parameters and the directory format, which [Authentication](/protocol/authentication/#the-web-bot-auth-profile) specifies, together with the [three places FORA departs from the draft](/protocol/authentication/#where-fora-departs-from-wg-00), all in the key directory. The SDKs released as v1.0.8 do not implement that profile yet, and Authentication lists the differences. Web Bot Auth solves identity (Layer 2); FORA adds the transaction layer (Layer 4) on top of that identity.
 
 ## How They Compose
 
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index da3d81f4..ded2c473 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -931,13 +931,14 @@ SDKs implement it:
   `Accept-Signature`. A bodiless request at the publisher edge needs only the Web Bot
   Auth base.
 - Signers use a `Signature-Agent` member key equal to the signature label. Verifiers
-  also accept a member key that differs from the label, a signature without a nonce, and
-  a member with `type=directory`. The legacy sf-string `Signature-Agent` is accepted on a
-  request carrying one signature only. Verifiers refuse a signature with no `tag`, a
-  `Signature-Agent` member that is not an https origin, and the bare unquoted value the
-  v1.0.8 SDKs sent, and answer a missing component, a refused form or a member that is
-  not an https origin with `Accept-Signature` listing what they require. `Signature-Agent` is never empty; an
-  empty `Authorization` stays valid.
+  also accept a member key that differs from the label, a signature without a nonce, a
+  signature without `alg` (an `alg` that is present, an empty one included, must be
+  `ed25519`), and a member with `type=directory`. The legacy sf-string `Signature-Agent`
+  is accepted on a request carrying one signature only. Verifiers refuse a signature
+  with no `tag`, a `Signature-Agent` member that is not an https origin, and the bare
+  unquoted value the v1.0.8 SDKs sent, and answer a missing component, a refused form or
+  a member that is not an https origin with `Accept-Signature` listing what they
+  require. `Signature-Agent` is never empty; an empty `Authorization` stays valid.
 - Several signatures: each is verified on its own, against the key its `keyid` names in
   the directory its own covered member names; a signature that covers several members
   (because it covers an earlier signature) follows the one keyed to its label. Covering
@@ -969,8 +970,13 @@ SDKs implement it:
   manifest may still follow up to five redirects. Each key's JWK `alg` stays `EdDSA`, the
   JOSE name RFC 7517 §4.4 defines. This is a known, deliberate deviation from WG-00
   §5.5.1, which restricts that member to HTTP Message Signatures names (`ed25519`); FORA
-  follows RFC 7517 and Cloudflare's reference library. It is the only deviation from
-  WG-00.
+  follows RFC 7517 and Cloudflare's reference library. It is one of three departures
+  from WG-00, all in the key directory. The response must be signed, where WG-00 only
+  recommends it, and a verifier uses only the listed keys whose response signature
+  verifies, over exactly `"@authority";req` and `content-digest`; a response signature
+  may carry no `alg`. Each key must carry `not_before` and `not_after`, and a key
+  without both is never valid. Within what WG-00 permits, a verifier also accepts only
+  Ed25519 keys and ignores a member whose `type` is not `directory`.
 
 Authentication includes a complete signed request, a query a Broker originated and
 signed alone, and a signed directory response, all with real values the SDKs reproduce
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 58e5b13a..8f7867b8 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -358,7 +358,7 @@ How to open an account at an Exchange, published as the optional `account_regist
 
 ### WBAFile
 
-The pure WBA directory, served at `/.well-known/http-message-signatures-directory` (`Content-Type: application/http-message-signatures-directory+json`). Holds each participant's inline signing keys and an optional emergency-revocation pointer. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`). Each key carries `alg` `EdDSA`, the JOSE name RFC 7517 defines, which is a known, deliberate deviation from WG-00 §5.5.1 (see [Key Directory](/protocol/authentication/#key-directory)).
+The pure WBA directory, served at `/.well-known/http-message-signatures-directory` (`Content-Type: application/http-message-signatures-directory+json`). Holds each participant's inline signing keys and an optional emergency-revocation pointer. Keys are identified by their RFC 7638 thumbprint (the RFC 9421 `keyid`). Each key carries `alg` `EdDSA`, the JOSE name RFC 7517 defines, which is a known, deliberate deviation from WG-00 §5.5.1 (see [Key Directory](/protocol/authentication/#key-directory)); it and the other two directory rules where FORA departs from WG-00, the signed response and each key's `not_before` and `not_after`, are listed in [Where FORA departs from WG-00](/protocol/authentication/#where-fora-departs-from-wg-00).
 
 | Field | Type | Number | Description |
 |---|---|---|---|

From b02dad4e496e8ba9ee3365988acd5322d5893621 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 12:38:30 +0200
Subject: [PATCH 155/164] Make a purchase a Broker relays the agent's, and its
 idempotency key the agent's on every route, in the protocol

Nothing said whose purchase a Broker relays. The account was resolved
from the verified signature, which on a relayed purchase is the
Broker's, and the idempotency key was scoped to the pair (Broker,
requester), so one signed consent could execute again under a second
Broker identity, against the acceptance's own promise that it cannot
be replayed under a different transaction.

The file header gains "Accounts". An account at an Exchange belongs
to the agent's key directory: every currently valid key it publishes
acts for the account, a key rotation keeps the account and its
billing_ref, and Requester.id never selects one. The request
signature authenticates the directory on a direct request, and the
agent's acceptances on a relayed purchase. Billing, the account
denials, the reporting gate, ownership of the transaction and the
right to report and dispute refer to the agent's account; the
Exchange keeps the Broker for attribution only. The agent files its
usage reports and disputes itself.

"Idempotency" scopes a key to the agent whatever the route, keeps the
another-tenant rule, verifies the agent's authorization before any
idempotency state is created or answered from, and replays a stored
result with its delivery binding. An unknown outcome is retried on
any route; a new attempt after a stored denial takes a new key.

The authentication, transaction-flow, request-flows, threat-model and
reference pages state the rule, the request-flows sample resolves the
agent's account before its idempotency check, the SDK Broker retry
comments and the Python README say any route, both changelogs record
it, and the design history records why. gen/ is regenerated.
---
 docs/design-history.md                        |  50 ++++++
 gen/descriptor.binpb                          | Bin 691422 -> 695177 bytes
 gen/go/fora/v1/fora.pb.go                     |  76 +++++----
 gen/go/fora/v1/forav1connect/fora.connect.go  |  10 +-
 ...fora.v1.AgentAcceptancePayload.schema.json |   2 +-
 ....AgentAcceptancePayload.schema.strict.json |   2 +-
 ...a.v1.BrokerTransactionResponse.schema.json |   6 +-
 ...okerTransactionResponse.schema.strict.json |   6 +-
 .../fora.v1.DiscoveryRequest.schema.json      |   4 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   4 +-
 .../fora.v1.DisputeRequest.schema.json        |   4 +-
 .../fora.v1.DisputeRequest.schema.strict.json |   4 +-
 .../fora.v1.ErrorDetail.schema.json           |   2 +-
 .../fora.v1.ErrorDetail.schema.strict.json    |   2 +-
 gen/jsonschema/fora.v1.Requester.schema.json  |   4 +-
 .../fora.v1.Requester.schema.strict.json      |   4 +-
 .../fora.v1.ResourceQuery.schema.json         |   4 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   4 +-
 .../fora.v1.TransactionDenial.schema.json     |   2 +-
 ...ra.v1.TransactionDenial.schema.strict.json |   2 +-
 .../fora.v1.TransactionRequest.schema.json    |   6 +-
 ...a.v1.TransactionRequest.schema.strict.json |   6 +-
 .../fora.v1.TransactionResponse.schema.json   |   6 +-
 ....v1.TransactionResponse.schema.strict.json |   6 +-
 .../fora.v1.TransactionResultItem.schema.json |   6 +-
 ...1.TransactionResultItem.schema.strict.json |   6 +-
 .../fora.v1.UpstreamRefusal.schema.json       |   4 +-
 ...fora.v1.UpstreamRefusal.schema.strict.json |   4 +-
 .../fora.v1.UsageReport.schema.json           |   4 +-
 .../fora.v1.UsageReport.schema.strict.json    |   4 +-
 gen/python/wire/models.py                     |  14 +-
 gen/ts/wire/schemas.ts                        |  24 +--
 proto/CHANGELOG.md                            |  42 ++++-
 proto/fora/v1/fora.proto                      | 152 ++++++++++++------
 sdk/go/connect/broker.go                      |   4 +-
 sdk/go/connectserver/verify.go                |   4 +-
 sdk/go/connectserver/verify_semantics_test.go |   2 +-
 sdk/python/README.md                          |   3 +-
 sdk/python/fora_sdk/client/_verbs.py          |   3 +-
 sdk/ts/client/index.ts                        |   3 +-
 .../components/exchange/request-flows.mdx     | 103 +++++++-----
 .../content/docs/protocol/authentication.mdx  |   6 +
 .../docs/protocol/transaction-flow.mdx        |  18 ++-
 .../src/content/docs/reference/changelog.mdx  |  42 ++++-
 .../content/docs/reference/proto-admin.mdx    |   2 +-
 .../src/content/docs/reference/proto-fora.mdx |   8 +-
 .../content/docs/security/threat-model.mdx    |   6 +-
 47 files changed, 452 insertions(+), 228 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 074ba490..fdd5bcab 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -598,6 +598,12 @@ records only the wire-shaping reasoning.
 > still stands — it is the same separation (identity = signature,
 > entitlement = scopes/delegation) taken one step further: billing needs no
 > request field at all.
+>
+> **Superseded in part — the account on a purchase a Broker relays.** There the
+> Broker signs the request, so the signature that names the account is the agent's
+> acceptance, verified against the directory `Requester.domain` names, not the
+> request signature. Identity is still a signature and never a field. See "A
+> purchase a Broker relays is the agent's".
 
 `Requester` once carried a `license_id`, and the name implied that the value was
 what entitled the requester to access — that holding the right `license_id`
@@ -2724,3 +2730,47 @@ third:
 Two further limits are choices WG-00 leaves to a verifier: FORA accepts only Ed25519
 keys, and it ignores a `Signature-Agent` member whose `type` is not `directory`. The
 authentication page lists all five under "Where FORA departs from WG-00".
+
+## A purchase a Broker relays is the agent's
+
+`BrokerService.ExecuteTransaction` gave FORA a purchase with two parties in it: the
+Broker signs the request, and the agent signs the consent in its body. Nothing said whose
+purchase it was. The account was resolved "from the verified signature", which on a
+relayed purchase is the Broker's, and the idempotency key was scoped to the pair (Broker,
+requester the acceptances authenticate). That scope let one signed consent execute again
+under a second Broker identity, against the acceptance's own promise that it "cannot be
+replayed under a different transaction".
+
+The purchase is the agent's. An account at an Exchange belongs to the agent's key
+directory, the one `Requester.domain` names: every currently valid key that directory
+publishes acts for the account, a key rotation keeps the account and its `billing_ref`,
+and `Requester.id` stays an attribution label. The Exchange learns the directory only
+from what authenticates it: the request signature on a direct request, the agent's
+acceptances on a relayed purchase. Billing, the account checks, the reporting gate,
+ownership of the transaction and the right to report on it and dispute it all refer to
+that account. The Exchange keeps the Broker with the transaction record for attribution,
+with no wire field, and which Brokers it admits stays its own policy. The agent files its
+usage reports and disputes with the issuing Exchange itself. The Broker service has no
+call for either, and the report and dispute relays some pages described belonged to the
+forwarding model that "A Broker signs alone, because it changes what the agent signed"
+records as gone.
+
+An idempotency key is scoped to the agent, whatever the route. The same key with the
+same items in the same order is answered from the stored result, with the delivery
+binding it recorded, whether it arrives directly or through any Broker the Exchange
+admits, so one signed consent executes at most once at an Exchange. The Exchange
+verifies the agent's authorization before it creates idempotency state or answers from
+it, so a request naming another agent's domain is answered from no stored result. An
+unknown outcome is settled by retrying with the same key on any route, and a new attempt
+after a stored denial takes a new key, and so new acceptances, because the acceptances
+sign the key.
+
+Two alternatives were rejected. Naming the Broker inside the signed consent would also
+close the replay, but it changes the signed bytes, the shared vectors and all three
+SDKs, and it ties a purchase to one route; "A relay is a requester mismatch the Exchange
+admits" had already declined to settle ownership through the acceptance. Making the
+Broker the account holder would leave the agent unable to report on or dispute its own
+purchase, since a report or a dispute is the agent's own signed request, and would let an
+agent blocked for overdue reports buy around the gate through a Broker. The scope keeps
+the existing tenant rule: a key used at another tenant of the same Exchange is still a
+different key.
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index aa9b4b616bed46e9b0c7a236c6ccffe650ea0c45..927390aac04a4f302896c393023b665edbdac2a8 100644
GIT binary patch
delta 51143
zcmZsEcYqW{_Ww?APj^qx&Q92!*`2VnJxh?VL6QlUpx}vmnA3SDhp-AKg2%3Ue((Fe
zm7ETdphZq9N=5`40YMQI6qHp75*0xScO=CFQTTmcRrNM{KmO2tuj_s4Rn@CkuU=Qz
z9GKi}q}}ZKA)X=1knADqa_^{nvVR^Mwa47!RcHF&sf(C;#GA;PTWU``>+P%sj_vW7
zik218j%H`QY5)7Y_lXY5SU>yg!&<jmt5eUO{h#hvQ*D}7r+!usL0LU&tRDTWE`RIU
zyGOsrtE@+>`u6Ylc(qm2pV&Pfuj*HGRkig*)pJ&_J_D+H*7P6nT&Y#lyUOa{ugbLU
zuKMfKRn;|B1Il~#f3ioPepbI8PgYfzTV0;18t|Oe^XUNtAm8^n>zN*XYy0%#Fg3kV
zV?CDj)YFgl?Ni;ms@jA`HPzN*{ReP(sa`3x=w<cbk^}nJ^r-36zaNOIr=TH}sBZ)c
z^+C(5NBi{c+o#{--3L@XR&L#k67>yxq;FM^0sVxSTYdk2(C)DT{hzd+CB1q)4b*-$
zeR}q&A&vUf+<<nX`T?SyqE6})tGcRRuWG8Zs_$deA?&U@%)GKv!1S+1$GA28R~J3`
zbaf5yCsywB#o0eAG@q}eX<Jl;E?{r|-Y8@T#`sEAXkxO=-;KQ5>QW2++2^r7Rp^Sx
z(aiw(bvKG3LdUzcp}YG~r$YUjngM+teVTV&-yRrX-lzSlfQe@G#h_O6V!|NG$viMD
z17Hx<=wa(dw(j?a|7tW=_PMZ$a_dIX*TNi}k?7gGs^=4^w+XX$dt>b5J>FcU)FL8X
zTWVUJyL9W?>Gtk-cj<J`9o_K1JMXyr-mcw#*Zq$ByWHLRzAjBmt^UvUs~S+<yU$Zr
z|HpWL*9_><uNt<2kr&oL13#e8<GpK4veE%nPxT*AL&MaEEV&oDzWS-BYpOWew=bSQ
zhIXQ0O)VLWG-%hns`&^zBUayVVLiOK^;n<2ReY?ir>nt{RZ^$b*H&#k+oz^C=?kl=
zu6`Oe=$f9elD6%rGY9m40_q6Fewaht;QQ44##rku+>{cfZ1xdfwAQNb^EkQ(W+rR1
zuIL@;)wBPAUWABocL%+#)vrHltm@m#>e*w!fIhq}<<<ke`}FKB;kg0SPn90Mo`lL)
zbxn`wc(Y9!6zi$}eY5-Ye2#hkq}`d_a!mpED)t-KX{yJ|`-v^PUMqj(2AUMVnn+^a
z*Ut!=BUCfYsYl=H{$k>B8DW5!#I6r&Qe9PLm2{GxtE4IW>UypDRVJFs9S`r19yL!7
zz{p-Xb)f?$6uaXFtutHMT8q|R@lXs>y*gJ+nP2;`d&$iDlO^@)k1p%izs8b2k_@oA
zXaA?FZV*`2aC+QBaYw?R5=R&h_lOU1OXlV3XV$a5t59?Rw^NMDGvsiDR&Yt&3!?VN
zd&A0}bIgXIe=|xf(^gApCM>h67aP!4yE^WcpdJR~W0(MNSteW4R%^vhwbkMtlNs%_
zs~+rxZs|Xu&;JOw`dFU<)iA^xt6)HU`t%%7MSjrg)2r&qr~21a_3QZ@83lTTyfk;p
zn6G4P{i>hEq!o^|PfaPCc}y>0$DcKFA~Y=ZRq*~|i;wsUI+0?uo;V{}??tMfs_D_M
zCu)_Bw{MT<;P#wetM>pV`+9|5P%9<^S<h1g`u_!Zv_7C`g?EETKp#9cpbFj^E$ie|
z2FJlyA!l46`%D!dB0gsDroU3#aykO@=+}LbMrTm-$=AwWfU?{SXmYdW?X>A-aC<ax
zy{h_Rkg+U2+NWPH@(<8X%vgx@>DROG)4i&Cm9j1EwB%h7am<56;o~q87ENB5$^YL<
zq>Tti!Y$32BYmn%P5Y;I+JBU6^a1-%2Q6*DB50IN*0`f~O)X8ydSiT?dZnf}H$I^`
zM-!fl`oBLnTk>81AA2N&s8_HpN<eS)P4E8CLK0mi7tfj+a;aFHFu{7(_Q!1LTlH9t
z^>n`{`oY)GQ1z>VL`@AW4-J0|AqEVt8sP^zt5;ROK0W$Ew;oRr2rr5VMc4*B3K#9!
z)3KydIFz0}FhRJ!@chmL?mfWt^4ZHBo4v53wm20!nr#%A2eVC8%Tlr;>KXelf6~78
zl%L7g3e14%C9VQ?c3~rj%qH^cj^=(Z7xF~Z%l32KwS!9e<!r4`mhwR8a(2AALqh0s
z_BCD29$W?w2diw@quQetgH<go3n`o(DRM~23|5=8HDA!U5XkYWUC>htW><_?>ubt}
z)Oa<1m6Xcn#aebUKlX4bHKH<=-S?QbwSuWyu`H!Rh^f}~4hbQqcJ6MD5klUGI#p$N
zKCZn`KGhZSLTIXLwU<I(2u)SH_AtkZj?g0NTsx<?HbE($t7^Hjlm?->YB24P5Sptt
zz23A{uAUxIm)hI@qFt}FS*mI=SxSe{QnjGmAtAI>z5Xt9o@y#8V&1iC))v*1*sEBq
z<GtRfedm)}Knbo@jUw|gQ&ss$u4jGwYrR{nR~6pB#KcgoS0lU<B7wSIjVH`GXf$X~
zM0;OVHZ$*2+U#2VWm4_LM{m5Z`W+MxP~KM~e4yzmP~KOQDKjVv8-!A{S<N=XrjMQ*
z!+jAnXQQfKZRVMNho$C%xk*)T_%#z~AE;{E2EXQ_Yd=)gZszxh`Bmt-UCo-}Ww-oQ
zI}_fn8c}l=wZKF6`?<<8r+iaegMiwftBS!}0TOC|uKIEu5*2-}21DjoLKIJTvv{?3
zsM~H;@ykNg)ZJ=M)FC0WTP=(`q(Nk&qZu*{R89?z6DQfhEamE;fqPlk8m+whUZ*!b
ziUPIvI=u-JRqS=f1SG21OJhP^4-!@ERg<^!z9drg<z6+_)m)_TN+9sHy|YHE@Kk>7
z){>1L`&#u|5+@tAe641#b4U_W+qN^`^>GZ$kss|FpV2m`H~r{hsKEG9^*4}0=y#9}
zOC1szKdKd1n+st5P!-J@>Q$O1rg_=c-o7Hc*Wa~KN++;{8KD3#A<YOR;D&l54J8~+
zrlH=enwV2Xv$Tjd+N-?iwJZLCMZ6Y&I|HdfaJ1Ja%+aH05FG8zk8%403HuxEEqKwJ
zZASR8Xy~)ti1tsfI@arz{m6Nc8{^d?DCUFuoTWv)FL<@}9<!J?33GFTS1Cz^E%x$o
zE!xJT=;#u#gzbZbDigf%lx%|z$O+!!jCo1e6b5gymxZ6#F1MfT_Je_bnCz|Z2Ll+B
zy%FvopoamB$=*x@bCLp6S0dVMZ`Ox)w}D!LCp_D06be&U$kbo;a#L>y0+6pdJp>Yv
zuX?4ag9PNOUYPn0Qj083o99&)d)35759=`m8?(m-Yb$HP6J3lF0GQ`=F-QQ+^X5l+
z7lT9>&-2C>%PuAc@8bDhb&>31$%EVir;8;EUA&NYaV6IUQ{+vrl1fxqZ0Zp0`brSO
zUKB+^U%%<~hj{0LgiddI!+cRfBWR+$=}jcfe~LzdT*1OawHGQ^xDYf8R(Snl{z3#0
zE4;B1iAXEO3U8yv=8t4@ih^12j=gWF_BT(vcU%mb1@CzMV#rYl81H!FVp4zv#yj4|
zS8<EsbNgNP;&3ff@vdVfU_#_w$4Wp#<lTBJ;m!PjTgipaAfUttZsi&V_5;UO@DxZN
zIJN>3NFR``tRlCV9nrRWvre$0k(wRc>NO(feP~uTS;{Bun~~ZBWuG`B3?`61aZCgx
zkUk+3xr>Y7VI6yXly*;Louf;(;z38$IpYD63OVBe5(srP9>cM&p;ip+9{WF|G@nwr
z$HkyA-Q)EO_l82i*yBy|Ac16nvBz6pVNMVjAP?J>W3;GJdDz9EK|SpC^C$sAG^mHY
zY2lVYl8_f}X(0`2HVx`=d+b=P+|&NJi$Q~W+|`2y^|&|5ms^qn#&K_pmgZ>ms~5}d
zDR0(K?Ba{ssK_a=H=p{|%a_>GUZnxE4(i<+ip3Q)pU3nR9dO#4DKYQmg;Bv-<{Piw
zUwqc9B*_3#hGL|%-gL3~Dr^`u$aCx;<F&czb6$n7GQ=dVH&tYI<z=ASf7p!^wA<4E
z@hTY!L?O_BybT+fkMlBU^98nGg4V~n;3`BB&jnIwT{ap8A23+UT4cALsJ-I}4c5E`
zyj6S&9ilPM%g}U)rtqoa1sB3YG)$Ear~pe{L>;EFXI|DiTEjGj2ZqE&p<!B+raXuO
z4RWN$cD}5=V2#w2##~o$IlE~y^Lq>sN})kxHG2rtYCOebHHF&(u~7`8R$)HEOQA{Q
zG*&QK>s~xgQ}{rk5VdKXhJk|Fg2ZH*ps|-GYj-!A;HpJY+XPZ;EEX!1!qCsqlp7Pz
zd)cLKW(WJWDcbEy2e6t-4Jl%qp_P_7Bs83%m3K08O^w9K;AUtQ9nD=dYFGp!>MLmG
zG;MeBE1J?mN>K#&iq^V~ISjUpQdkQX+S{gUhGH#rJHtS!g&I2JJ(|I4L|dk1tz+kA
zYVQV@X^3mk-SAA9!OPjkSz4#E<(i^X1;m6J%QYk5kkE3u77Cl!a}hkWS<Bg4+cMh~
zp($%?hFCdOK4onUZoP_&K$X>O%53fNvelX}QL$L4tF@F^rQst{%W4g)^qpJ;)H|$v
zj&^tZcQom@RfXo~JDLm|K%&xjw1&;3o-{w-(aOrr_cgTG8__=1vc9p`&Czbm4t}a3
zer*M0FEzQ21?OsQ%IY+^EP)BAI?X3sF-SnwX^1>qa}hlJg8g-_c1_tAPLsXdOMRgk
zdAxRz5cxuj6__o#2%5Z$eKA*SUAD^=A?x0SFhYt@lXq#+n0Yl90kwy<d0lH+w#OBr
zHtx}|kD{URav!uugD(_{!FKnviLYzdRPJ|r$*YhD+OPRV$ASdHeyx%4Kp;`gelqOE
zw7Pl8vJWx+4Q*+MLoNgbREIPfNT3WL4rwyF2MLHn8Y0OVnD3}f`?r=g!e{^ZhBnR9
z=-<L{vQ<rwXg_Gmc}+EEXPY|c;l6BmJmT5*d~KHJ)^nQLfQPu^8T#x;O?~hR4l4SO
zrnW}o1>R6y8L6x0e6NECXTy2+?1kDJ$~D7uwW%vkUSqhfRv|PqMD-XX?+9Ie#bb^q
zAFh!xjMeShC0d@Re5@|b0c<pQtS$pVkkDhS4s-6ph465^&fZ<B-CQ|dm&U2_z07!B
z_8CZCDk26BBp}A?7`Qbi$AD_{?3>=yD!pa%bj8PqSL3VJJRSPdXoG~%JgT>X%Ya(Q
z7Om7;lr7X15xi)85-iliA{+-vh4cmu%}!hd2C{_tZSAIZOI%IKK$hr!5f^IQK$hsm
zO=P8HAWQV-rF^<*WFO1eC|he&xy(gC<fSgtrHP>o+PX|{R3Q<_K9=b%Tbc97#58h?
zHv8Gu7Id*)2#vV9pD$Qc1`xI`y#Yu-*gCwyBHBh^Iz+TBy7GyxCZ_q=>Ak)bJKn|2
zWx11lx?S|P_KaGK$0Ei=VPI`>M~`CXE!2y&jl@&Lm|OJNC%OpZiNRyck92jLF2Z=p
zgWSgm%Xt_tS%@*W>J-NBOLM*8d&e6}L1LR7S*JY|tN`I?LDBbk!zU&?JPpvs8<^~$
ziB9n$Enu)I+qBOsm@DLi5Hoxt?AH_@gqVS_pKo0-KO^dN!=Cnumh#**-KaM`6N5C}
zs5d<mAk&QqU&7H~6Cl%#hK<eFMa}+*I>%5NCnkB=DN~QJ@OEuXB{(8F))YU`=D28n
zpv^HNj)D1sHpght$XsLa9>|HPEA748wMw;erHhe+(OqfOn^+DoRvN`38q<^<V5~IC
zuQu0HG^Qy5?DOsWc4(cH%J*H205IM+>WwS_jQ5RtBMSiIeWPV-^Q>r9E(V!>zDxU|
za*GR*3y3X-+^cFzE+DoTnO4$Ha{;l%xaK<Z60$&0BN$Ql+3J_t^VuEuxfnrU>@)n%
zI0k{S&&YG^HVBM;M%pq*1~^72qFpqUOZLWn+6b){e>%My0?b9jFES*W5(3Ocqre&H
z5MVCSKnoiU!A36{C6^45>OgVWXapiZ8)^mLX-XE{$S=gAU8SakBkDjO-&J<`8xqac
zY}#-w*am#mjR#_N0|}skKDoC9iMj{+oV_JN6nIS^?JX~Kp?HO;`c_0>8^e9|mPRT;
zF~^fcfHd5PUBk;hEDV^lb9`B&O#Amow25kHjt^VRi8NR`x!u><nPb|^?Ou1V!36f}
z4mL<&zwV3hv>J&3`*mMQ1M?P+fQR$h`^U9gE9biilunxOB9IH7?~8~%n$BJDd>?Ww
zLxd7&+hTU>32j)r#V!Q-yTvX9t=Nlw5i#02cgTx<2&;d`m4HfbvYdZuT`S*o5wd~s
zri(xe_?tetcIw<ezv;u;`3mJWblOC`XOI7v_L|b}Jr@Jfi~636K}-01PB%ja^}gpr
zy!{l1K-o>K`jj@Ha+8ZdEBGcCfjsmkpU8irR`SrBd{)LBp>qh>$1c0%v^FZc=PsX;
z&*z8Eeey0}R4fc2A+*bfg@G0)knnxGd}U&}CUUqhM4a*m;4n>I034(g!Mpc9bF^qL
zLfY@_;1AjurSdyhTOHbd=W0t1{5yB($$@`IL%#;OWB{Y$GxnE1VtY|}#>Ftuh%-L9
zBS#@%obknk69fs2Gd}ENJ{A~ozZdP#&uiN}?Jv3*KIn1L)q}k8MYrF{8($>zULXtz
z-uQWw9r#IGSoypurwA4}U_5WiDFPB0&zljxlY#E!jGs4~G~+W?SKx~Wn{3>0Ezt%9
zS}@p@(-b5m2b*%5f`sH?)0w8a0>?Yj<kOS|f6=t|BV848pu$L31@gWlO*u;;2%wQ>
zrhz#$7qb+eX1<xV+rH-)P1R%bO(SWprr5}!NxIZjVu=L`PvzLdRK3Vk4whKqPyo0~
zO&KMD1nyE3>ny@OlE>3kcAZy$#Z$h@6{1PG%Jk)OD?%X%tun(Ab2{~@L0h=BY>uwa
zEMIHNtpb>kS!<?v9-hiTX06$*xk%6$M83=V8~O|7@4EHSynEM_nJSc_LMGA>FOkI?
zH19sOoBMQ@UH+-l<={f-Q!_4n4oC=nYQpd~ix#0<ciE?N^p8AO?{aIRxwXrb3%$YT
z)-DqZ{fq+ahLL6)=g)e{Zy(Rqr}-n}u((nR*UQsv<NZoQ7HX<DYA!Nsp!tG8Ptg(M
z{ivD-12pQGfYK!xjCWFcD?6Fgvpp7AV#kjH5STy$8=)%%Ku+}A?Nj<Dk2TS+@Fo$P
z^HFRS^8IiF+AM$8*LH)neytLo<wpi$9mc`SQ#-T$><LR>UozV-QxD)mdbS^)XM!k&
z@cT8t@&UU&qmQq}UqTtAY*6ksKl~(?Gk{@`QO^3npH0CzXM8aXeLL5$wxZRHb3Pk}
z-GTbLU$w4eq1|uzu}iq36tL&{)kascfHlANH$05+g5R((ehYsChAFqmua;a11{by1
zueP|71&_1jH;Tc5EcL5bxut4{A)r*>^s7x=-mq*;@MV6r@s%u0+_!$C7y_W>zbS=y
zX2q}Yhh-x^S@|3F;c;!h+K}LDonAx~u*$DyuB;ME`rE(3&%<{6H(>b@b<J=3B8r*z
zn-;~e%f1qR2Oqcf{#xwQoKXS~1NW|9z5YrT2JSt-h+nv_D20LB;8)vTSqkI!{*~R2
zQW&?5zY)Z^ZSteW*MuQrnyDZ8l~3898tSjs;x93ekoZHTANh+dX^HR^+DHD(r}dVo
zWOGaWn6QNQO17}Xt$sCqB?}GO=2wfaWC8mVGK)5R$^iN^zjDB@vgaG=Eo<?&qXcD~
zK68~ot5Gs@pk9e=p~UBYwOqnyOC`Q=O@OnY#17YXI1AW2e^Uy*x(m~x`ITVk*4^$%
za!GXSmseIPMslxTy{2AJ4CFq)T6rZ4Rqpqz9n70}yMg?bUnweSW8H*9SvUmN<8OVc
z+p?vN^;X4rz@tu#H)Yhm@*}5m7aR}rQHT9m$C+}KerNEo-y7mik>{h1upU?G<>@1S
zh39g;U_$bUzbI{5s1M1di25yCbd_F`{?@PX;EtFm^DUJ@Bn%SNckJI+>6!F*ei6?Q
zleknS!^@zTj<V7wdV};)zry2kl%b(IN@dD;8MN&fd$NgMQGCqBp_Uw@GM&*9<eC2M
z&pOA}G|_Jg{@d@(<1OK7rjsnt6fHT4&Y{)L3nnB_`jPCs9q7mzMbuO5p{9Db^eMLt
zwd53)K_U!gK%Hirn(B9_Pdk2Cc=yv(rk0mMOU|%1&GdokGcFFb<P4Q*&&!}CXW19c
z^p5GXewlnlG6-ePQkiRb85qR(tYvfky7c$XxFOqvGT&2~8+jQ_ydT(z=6dJiAN&f>
zZa_)eC;UKVs7H_xI`7ZA#7;CvkDT{=W4uRruH^!&EJcr8@GE>f=>-##7yMYu8v-3^
zl8E{f8(FG1PXFYrCSan>PgI8H8L}dX!q~P_{o3?Jtcbj4!6Yt~Y0Jx?M}B4{WqM`$
zXTQSZ1_)A*{7hxq@iOR<U)cYZ>FtYuae4&F5S00a$~=hJ$QRKD=49DyPnrHe<AFIw
z5S3-CK5T4;<|rd`RP(q8i71~;Y;hiYpj<!NW>}8ejOU@mGhhzSfiI-Dxq<`zMiA#b
zMa4b}wI=1*H5K{=rTwHF8A^hU0hyE|LrIY6ok=-zKLZjVlX9@1`3^o1Ab2`Ghb?HS
zAFZ73V$hywx{E>K*Yuo-2=O5UjOjTAg?v}#qfVTa!?w55yH?I}A!tuD%Y~qdX648o
z4P*c@D+fE8`?(gNUddtix7Hu%_=*dW4Tx8A{M3P7s7kBDD>)(Yx*H@H!i$LY6rA}G
zoN3E*l$G|sTkGqxd*V;AiN*uKEO#}baBX=`L~Nq*6fnzkgs&$Qgtp6bGAnb$CYl&X
z^uT^s<fu=Y-v%+jW<=YQlQlJ9=U%TL)*J1~;pyCL6$gT~lR3&+4Do9|46!MPn0R(U
zC;e5m^{E`hE;OLx8G7z?j@so44wN~QqjogsQF6hgA--&%>Y_K#uDzTi&rN`f7F>4v
z5+sB!Q(sayfkfPKIVbrCfeMmuu`cJN9wKkd3xI>FFXvo;8{c)2jNEly&bj{qb2NqW
zCPqvf8c;?B)WlC7%bwg-S3R|0h;GGWbnDQ7v@?)UYG^=idO<>|p#c%h5f-|2Xuuj3
z5Zy`)qyV7Auz);<AzAzw#_)hVhEdN1+K7PKwjn=;QP0J&j11ry2E8RTVTan7fHFS7
zI^L$=QHwtvP019;xSEnFjtNKufEcjH1f&6ggr;Kxnep|SI)@xya5d#DuIX4;Q^^F{
zi_o-0YAU(VbR22QH=`z1IVE6UeY?KaQ!yo=XmaSt!lwjuVelx$i$(G%I#*PGM4KDP
z+GZ!a>F;~;<_7Sp<r}hmKdeMs6;L+XXYSAsW!K_QvDd-_;H?Vy1RhA>tqK5-@<kxg
z(p7={jc6&EBr!gx0Q>ELTFOm@ICVTwTOAOgGcN=daMuJxfbFm_mTLnDern0cq$I%J
z35Y<`VZnc{3&77^Q3|88J|F^krxd#DT>`tJ6awt`0%}n`3$qgN8?MxqPt>sben9<$
zIf>kxpN4ufJ9Mu;<&Mn(`Kk&`;!^+7gaHYh%>lfsk|gHO=0JppGxQXON*-i$Ag_%{
zhXnlO@V2s#@6$W<+8R(C6sl@#AXoTElmY100DPnXrS!wrK)kc;X|f7L;adZVoA?Yw
zd1nT04Rq{e4yOUniD)|mS*PrN_v^zv4R;3kE1+yO2X1C}K-m{ivDoV%#Tyc0vBC%S
zJ6eAkP_O0nh)2+NPe8o~9cReGc%QL1pf2&4SD`sM<YW%AsSoN+A3Ye5ZwSCda}EZ=
zA`J!-%{ds5M~y(DIR^s?;kk(9%{drIcIM5I97^LH40O8DEa&wA@ephLkbZT~Ljgs+
z0n6cIaVU^4a%CV<&mnRf)NLS9&!K>In`jOn3v}C|K;~9i4~-5_7aa=x?iO=C?YMJj
ze2&|1Kcp}8v^(y20dQed#{)7Y3li!a59EmqHAqx^Jb+gq2#x>&>Li=}us*Q;Nf&|E
zqmzywK^Y*N49J6LAW0^GP<2`ugBOTsFXd+aZ2$R>`c$LwOSy852w?Cg<to#1RdXhV
z0RcIBoX0X%`t(~T=c+Avd&M&}W=gL5dp>-EgW;Q+tB&xXkFo&}(U#^a%K<pZbO7PG
ziDw&+=^k&JH*>Llq8ZM`DK1);3;#;?AUFVgD_0%rF+ZhA6Ci_lo3(#JuWR>qu5_Yc
zqWj*?mE8vtjek2gPb@kh(fGG>5#7=&#sKy0T6SAs{hE$za~0u!z$9+2T)#m=WNj|i
zZyIWl80xjT>8?UkXQ<b*_xkF2p|!bPZZ;>-ORxZqZk>I&uO9VwuXEL-(XGpsnQ|0D
zU3Iwy;#dqw)K!;@V=<yGnvHe2P445)1W#c^v=-InHoe!pM2la51a{jG4$z<XJhI!Z
zh2ACa&Xs3?Pzbf`&Xs3?K$1`{Ue}3QvQf+K+>|&hho`cZ-MK|w%|G!<;0*V%YijiF
z-S@e5(2KTxxiTdg;Mt{pxiTdQ5_Rm$MM_fCfp7(6<9lUGC|IGE?909C9&;ka5CK~J
zj@v)f=&|g|<8CeVGVZuLoRp3_?hYrVdXLj^9-vSY3sgisZ~yLZ`d7*$=Uogs4Rk(N
zMgS-TjPtp2K7a(q`CQBgp($m4&*v81CN-tZFKK!{H+?HV7zFoBA^On2>kqWQ=+;3=
z-ivM>l;pjbE7xv_ppJ{VSi4`PxA!<!Hzt@h*G~Me-XJ?PCWz4cA5cG+4En_&`+com
zTk&F0u8!aW>&2i<_JIV}i$Ns&_|lO}7W7h(U98n7m%ro+krBTX^a=NcLJ)c>h!^<S
z9iSpKXi|`EcwVopoD`H(2VAsaQczkANI*;qhQ&)AkbsyJMEFK04RVQ^5@hWL>a8oM
zxDe!ernnG1PzXxHgA5mf;dSH?Fstc7wrHT<sr_^pf)=sqE(C?a(}Q6VP3LmEnjXY#
z+)ehMODew>v`Yu+4|zJg=7P{0g4cp_$WaO)uLWgP4-$I3MopPQuX2JBZCx<y#gM&m
zus%s`w2sDuTviY+YhzH^98~GdjSgC@V8pWrj?f2qYBvRu5F?i*o}pVm2qMAYa!}ES
zLG_V(ye&ax8}Pyo96X?8)yvSxeH28T;c|fcaS(|lmjm3bK{cn=Y>Hk8lHqJ;{}`n=
z@3}pwi0m_%0NNf5ij^KDWVQ$8N)HltzC9>cdLsGKxIHLWddZ=saeELe{XpvOAeqDt
zJ7+Y~vybj@j16332Yn*M0EwD*1ZAKC5;g4zM*fe_C?ds1Wk)dY?kibb=-&UOJuWIj
zlXtVf{!_0k-|f~z)$b0<oIJ`vWOoob`DsEqtPcn5egD+cp4tPBDFhWV$pellfCR>Y
zpp5@P0^>js3wbWQJ4gc<K??`iD5N7=D0?87`7@UCdKOg`d~}q@98RHakTUM4gG!Uc
zdClrlUDL;Y?gjlH+3mm*u{{bvi_?x(gM=2RgJI$KK|+huLHK>zW(LWqzh|w+>koGN
z-bEmj{@z6(lm0#!7Vobh0)+2_cz-pS-Z}^23AIZ>Wn{?SI$keOYVo(D33<ayZhw$B
zyyQ#`$N}dPO$~~@K_d3P6iki`iP)PMJodgEl(9E)MC|>1NaPQ>l!(2b50$j%9a$@j
zVN{<Fb^L?uTrP?F28Lw3EK8v?2Zl;`-qZnu&I3aoAHGr$zJAbes)T1A6e{7_JVy|=
zHz?Gx_E(a~ZVwL0s9jcx<o1x?Xo2MRkWk4jS5}GS_Rx^Xr#tvaZVwGL{8g1mZVwH0
z6uVdne*?1H!>+^^yMp1ND|%5F+K7<)uw&0?&e)JW<z>8?>M%A`KY(<YdTdA@1`YB9
zA!9>H$CPNP85@ErjmK8g3l}yylr<w{|H$-^5}h3KhRyd8J$d<S>M0?`Dp}6@TY8G^
z8R?6#u2b~!#o&rp9VmkVn-aq8_%j!QsZ0&ApQh+Ntf?WHdBm${6q-tf_6cB+(?aa;
zQ}zAD(?T*sinq(0jZ)Z~pmu0EJ;a`!rnk4IyHJ$GnodyPlk%{=c_AFO+%ZibpakcI
z@B)WUHS(8t^V$6~^*<NS56J_cU_y3&2s7XfQiH#tTflbA)aMs32+3R?m?*S>3Oz3h
zfn3OD%+d$7Ul>yOT!JL2x{wOxKnbMDmV~lahdid=%=Xet(<LF~LHnQ%p4wU(Qc6l5
zX79f3OR&Gq)^AUPAu^(P44|bUyoshWs62<Yj2)V--&VZL=@&3jW?2Z~$6(TkXQ@`O
z+vn&*i&uo?t0^#1XhjIGroIt{(0gyQ({uDA4c~SK3yCHadYd|L2fg~lS&f6Cti54R
z;$8c~D|$-t@(-(6a<1OAfkoe+(FbI|{h(QV|3qJ4v19|SIAuMF&%p4pA^)b2zS+Iv
zV@r02&zDdJ`}kL$ES=B{`_Nqd8a3}=2xlcXksk_SWzvp@l;d{u1$t+t7JrI8KOUeb
zkA{5WlM#?;($P?Ekoz5w82h84&~fQ^h=KWm%ydX?$7iJEpvlKV4a%-$0q9t$qOJLT
z9#;S>?6|P<a#&3q%A><oX**}JexHHwu<4sTe4b`n^w0Tv@X9Ys>D#p){JT=-`9EJY
zgD>3qN7m2bBeY&s_^6To{kBKqtmjJoQZ4FqT1u<qxUkG_g!t+>E-bSfAkors;ry4w
z;=~p)sHNKYu=-M1oY;~)G;9J6yYOX5vT$N+Vwg^B(V`h5E14Wtx+Kah_LZ$)+Y^M?
z)Zh`6m>dp?U;re*CWmD(01|F;a##ifMDk!@a##ifl0(73<S>GPn|W=3m>y>Tvr7M6
z<@B)hP9eVBP7lk-3nc2D9+r_8NG^osWmTACz}0WEFRjv78{Id#7_?Y!axrMJ+!U4p
zdx$TVo5C_+2MOIbg=N4_qzKqIg%PkH6-EfSI=f(l{uiaP&aH*E7Ik5{feG;#u`V1F
z8*Px#v@VQ|Hl02S(az$FusF*Af>ZJ=14!uiMOdC?013%2!p>QS5bYQCg!x&9n?Rt&
zdt4o8+px!NDQz3}gymrd6b90sFb*@^4o8G^?tw7gDs}xpzb$egEMK)FCyL}nSjq5L
z?F~T!0<?HL2NE`MFpQl?XLuJRB=G?gJN1EnbNcJBd@Tef%6uKhpolV{zG3%#h%(=V
z<w}5bBXPrUF1K<VD0YO|AHv-o2}>7`JRr&(p@D&Ypf0rZJC@n3-;(|=EMIqli89}X
zv11cBX#O!ae6xPLbu27BIhu+x$HIv5=jK5mjJXiW+G2mdS%1wJ8XrM=={5{Wm>NDY
z!ru5yzrB27M9wyF(Zq=npV%*egr*ZCz<P+w;312!lF#)&R4`YDW+;pJL=q{?XDEvx
zi8K!078OCAsS&o|bA5c})QB{6aH0Fuh%|JNz?d45MhX)3PK}^1?&c7nW<=Qke4*b{
zF(V>66~Ht(W<*l_h(D3M6i&6%;shEUI48n>{z4yk(;T;6njCW?a+iiez?c(}M`S?)
zV@?ESJBDK7Fe&*)1gGXMdDvZEUmp8>hyG(FI3gOvb6%hxjiSmoB4Ls2z*C^T5y1k+
zk7$Nz7A&^4T?k0pEp{<zIxLRJlj|r1jKz_LSMv=uNMJ0Ev}(hBRG4PNo2>h8y|V1h
zh|F|?36VD=GSdkXB5y{pfvDkazyx2xw(QoQDPQ4^86AOI;f@&{fm%Uh_O|Fd#CWUO
zlV9p<Dp$LT(g~>5?vT-9zB(cge}?&a)Ya5={3t2rDDu6mYL7mza=i;d2cXuw5Oe@)
zy*ui30BU_CS;U=2m<~W~hzO?v0=={$BAo_ENN$KorvVa@8zPR=2-5+m%@OW2I)i{E
zY<6{^6HuF79q0tq=7@9}C=8^{5jYKg2nN~s9T9vfuxlR<!31|iyg~lK3KHLVv(AbR
z>JJp}jL4Y>CQN-N%@#V`?B!|cFWH2H`hwywBl2xDm?-omb@g6R2;_eDr>_w1?T?6j
zDI^u*Mv!p8R*I0I)K~1Guk|tMuUsT@7+(<*#e{yc_d`rQq<63mMPzgdCdwR&V5K^T
zT(cLs=97`Ei+0aL`VXGa$q2r``Iag`CYN3}KYmz0T6`*^h!1?ggz%{dvQTqHA@tN)
z*6)b^M)BE*bdgBjqR`n0T;z692;`5f&A0kz#Xm-5D2Kc&acL%eEDE7LKe5K&>Dw|t
zMWk~>Y88ckiom&jPw(F%5p7yt)+>2-{!#smUN|ieA3D4OX*EL1&dgIfB_?{TTUhwt
zdSiA%(R{4iI{fFp(|XmNcq+mNl!ekW^W+IEkf?cP9!_9Ux(XyF$IQHfjywV)62Sws
zn3-4Dfq&8xA-^;ykC|um8(PnCQOV`a$&+WXQ3$AW^3VtG$Dw&1GWvO0U*~xe%j5hK
z1$*oneQr)@XP%KZH&YYxs0n*mmrMFb-S*^(16afa>YhAH<S#)2bx$7NH<PX)q3fQ!
z(z|&cgGm12@1DG}yYNDqFd+>~x~%`<&i#(2U=r79KS*HiciImUnERdf6Diui-)Vmy
z4cu3}{jJ-8z|{H5#ikm+a(V$zf&CTr!U%e=k&h5GFYCmLr;OpA+M{_!3HAf3noli1
zhQZ^F0tG~nVzfX4@tC76NFW|_v;_%mk2%^BDYQLC+6r)pAJ0=dN^p923DPj{q8`lW
zeQ`WbCO|*}{dgV{Ao3~DkLSfYa9hAriGDn<puKsLK9q_^v@>~GgY!L!gC0Jv?0{m_
z<(<hh8kx^is1!xxv<rF4&-R9F<Fcm~e~N_y58%Eo<oQKH7bFzDkk?oYEl6l`ArGIO
zQQ80`g4zptSO1(RUZWBNQ5i&j$`ePVco`9>UChIAw0n8wC~!GXNhEHTH?FXbnsIA6
zSfY2My#1H+<U$P+wO-DH{~+^;(nt@?XR9>hq1u7@^)fWZ1M_7-fI^TNm=706{T(H0
zP`;SuM4`VyI@QtoJSbm&IEAOYFxK=sKRPpp>7Ado2%WjXZ*`(AQ>XfSBkUJ-V~saF
zEg$oRP7|szKIQY-9|Ok3@|jKz;G%|^`EqiDL=7|ZF}WY$GI%&ApQUq+2P@{dGJNXh
z%T9=ishf{Z;D=0O)C+U-*=xDRjMj5qA?k&>PA{MkDw<2Zu#m!p7?BIn4T<Rrdp2l{
zsO1-9(Uo3(u<7F$*<i1P3zBF@L`~&eM}9pNvG^T0r55hhpu42%d%>#uTUAfoj#EuH
zh&|cA8n-d^$Gt5?p`3F|O)1^{!J+7OCUJksopM{%)xB1xq$#eQB0Gn&7$s;cMhPUE
zw$K?Rki0DzrL8oH3nJQz{H$;78$!m%p74r%BO$&7FQ5Tgo6o-lZwmsDYaK|CfLxm|
zQ|=%Exi%ju_wQ(u6reA)5A&5R`D$V(`&Y!+RV%ti-d#dhrQp&Rx;v}Bb8f&LB=uWN
zaaRl7Qo`@I`LDZtOiSJYMdD63S@Oyy+>}D>UtJWGuHVc$lDN6$*&YLM{TRxctXIBq
zvKAVP9)td9-iJ<)fkg8@%tw#W<OPYz`(b|3mVA-(BL?kA)y?^G?=3knw9WZ)?=4vX
z+MJKQH>D|ngc6_RW10KHW8KZ_qQ?F^K#Cnd9zuyv^5rEFAR+q+nK6wqNcgf(^5rEF
zMDn%blYCqfF^k@w7Et+}_AfDGj;H(1eCejZg`3)$FOy>+QOVByq}bGfB%yqSc%l+|
z^R+X-kw`=1sdQ31^Bdn~zC#nEfMSw;_N79jgQwj-w-)~HE8j29-=h#}*_U5(gM{Vp
zzVa*E^C+-@mYjpEQxhZE27g1ngZVND1PQ@|`7#Iu3H1)<J3(Lph1*B+#m*4~R5{|R
zKxy0~`EvV#r$9QAFM~jkKsu6-An+l~fx?J(EI;c<=1mz7hK}VU4B?xDLYe|6?I%-4
z&~wMhd>M>`3#gO%G8hL5sFV3Jn-3Cwb}~P59bd$W<O6duKkr)eU({uVG_L3DkBf|c
zo}11&`httboO1>SB$djSpRj{OCFk<7ek`JmV?3e_iDtbK^(1C^*|?TQzWrjcF+m9r
ziQ)kNEV8XQ={`Klr!V`o#Ly~+N2Ph=5wM3x<?ICs?BP+&UaaaQiKj0_ZMA_h(o_C|
zD@7W;5S0-TN<r#{D8_=8rZ}1MxF}oG(73PtxTv%?aM7r7QTYiLNI;B>X2gCDBp}8`
zn>IJ+iHbo^j@sQC8S_2uC%YhIvXi6o_*k5q?Br-jys-w!rHYEpPei+61v8@TnyZXY
zD`&VEWRNplMaUp$MCG?&alR>>5xwR*Zjf;@$k|b`Edc?^*->ecAR#$BDlHNuYM)KL
za7omT!mmTLiE+8|b+>l1#n+?K7USF&Uyn*#1PP4Sqp-z?F|>(@wji2yhHYzV{2{m?
ziVv6R```o(=OT7ZGoxkMB4<dzgffewGTZ?PphZ!HJM^t~f;xLCd#RbxwtT58LZi4e
z>Jwk4q6|cqM)AgxlERR|FfM18ni=!Umb)^9v^*-`m7)w}mPfI5!HG<WfU?<+=Ek*^
zw$oxT(PG<aF-RcTQMr=@NitEmna@P67_+skYpL-?+1jW)M3vx9V{KFy?hqto)<%&4
zrL#K;8l&~>)-t0*<$AYP+N`g4Yo)PTAC;d%LIeowquA`67PVrmHnI=OjI)&+T?pE%
zZ*+_;!G~&NG$aCckbu}2ZB}ZY5fIp{Z(--kjqfYBxDfRIVN2BSbTRGSw?xG?S5Tbx
z?pva`Hh??O1o`n#?M7F_fj<1Hi$UKreHxW+8ij!IX*9_%0RRSV=0A<LzJ~i#kc1Jv
z_Ex${fS!uS*L9VqgRTB&Y<&x(W#wmX1wK^pSyX;snNVn}|5;RiUkMTwd=|w=yrXGm
zCTOewrCr|A7~^U8rHes({V(0_roH}`QF-$YWPtHy^s1)jbsPeF{eA2|t&AJW_C@9C
zqy*pO?~BUh3`mIVBfAimg+2a3_DE~v+8YnLmD0zh2cz=i(u6{r`-9P9@l_{CARMHb
zTt^?MCg|hR(^0&4++go&ZR}Cv)m7r!G~BSqZ^y&MfIK+6fi1n(D6}X};CHi8Bv$pS
zi`aO?Wq*0C(ZJIIkRsMX1yJX-J5cnU>gi}wTm^%tQ0H{C(N*R`19LkW(FVn`Cdcfy
z*Bi~${6R6SG?U4Yl9=Aw(3mnR#-6J*SS|h(p$HxTaA-_^F$EHULu2@2ib4^P2t|g*
z@<zo(a-0|xifF@P>d2T#j!PcohR0-bT(XcH9}%PE`1=&KC25vVj48J#mfK_78yh{r
zU-wWcd!nO}G2{huCY#vN=v<5Pj-upPCdTADZh)b}i7~k<f`o}qj77u&Fd})xG%=PZ
zPSr>bywAi~OYs6jvN%lpuI4n+Pbe`dhIHK+4@KbYflkK6_F#z7Nb>b&QcRv60tuZa
z#R^2W4kW-P#gL<Dfx$>cv}v)d*)i7iMx!D$EoS8K!#pVrg?C1b^}f+~q;`hWJa7Ru
zBPL%`fCSWx7+z9Ppac@ln-R;e<vU9v(L5N&j965h=#eZgbpJohLiBfvl$#k-aBYy)
z^`1Md)-79HE1H2Pm{@q!T=XqyUR3&dkieN4lYTx0pY5F$V^7^=+)z8q=?ZXxF)Jq5
z9FTyR6_c;^K>}h{4C!imtq&5f^=HML*ZM?@2F!}d*ZPu$*ZQ+!^jiN@N;cta+=5uv
zPcghg%eFe>MnSu2XBbXsK@4wE83xSD&!8=2zjQGs7cY#-WI31^#)VY-Sy2eOEn+Kf
zHhxGiiph@yaF7gz7RBHUnsXpfi`j?2Gs@D7WAflXPJ9tJhMNL1ybKz(ghg&K8Wb;y
z$@CS@YoW}N7?KurL<1UOu~};0dyA3nX}C0|@Ylk`MX9ARycQk@j|UpPw<?C)Tn4dU
zx|tpAHC>Hvo=R}UWiEJ*@~dL<G8d4jdR0tb=0YTzv?_+nTyErOu!XnT&9@ny({IOQ
z@(l;80P%JV>rn|WgSBKed*e2vVe#siOsnBw6w0h7ll=|{xS$s7Y?FQBHshF*-sB?D
zbuXI;=_XzX4*vsowwuu<{XtB=A`K`$l=&crSESGJGVtghvit5Z{$Bhc<`bDQ&`p&2
zFa~$E4ITkBe0H6E>JH-$rG1@S%8ycYR7wbu)2@r*Iz_t21~Sz2x>(a2%vk~iUVM-J
zzjqrYN_vmm-#Gx;6KmXrf1rZXx44gvt-aUinBE(c7yp2XGJ9kAT$Vm!2`JcN?PH1i
zP-dTtL&>~-ghL<I;I2Z-kp1mGqg#4^On&+SCd%xOVb!KIDvrkDL<>87pV1+Gz{R11
z^altB?;}tKpV47Ya=&qJqk}F^7-bF;&K8`=Lm_-vcOs^gCT4os>idn&4fxKVZax)v
z?aCX5pY3mABP(x^Wz!xo+J{YgPg?zSwe@Td?CG%=WhWjmu5VX=_qKSQ+}3&&YZ0#M
ztnP`+r+<C9D%~b5tHGLuJAm0w@9S3JzuvYM;5uk=S1@ggMQY;79?xMX-WNC1_Il33
z9l*FxmF_}j|M#GAJ+8G~`Ji#Dg6knX4;gtOq#|m1V@vJqvYF>CJulj%9!ylumr}ZS
zJMpKc)}iMoihX_6lU1ky!e}7pi0Y9G=-C6eO5a`ecptj=oI5@0P1p^(lWz`)L}#Cf
zVRImD5uYrcvj;r{TP!~3+F~9`og-VM=pRz}itz$F{jjk;b0MZQlNOqfLKk9X73MIy
zcMHqorC8SR0`~PEjUkasF`SyX53>Ap;bj;Ezj&*WI93Q+T)YJmAeU+W(6?dyRN?cu
zpZ8Bj`5&GykRRBBi$c#A-~-zvF9d2}fs!l<Sa;uZyEUM?Z+Xq%YD9a*@j*Nl-=2Zw
zh4GTHAs5A@8dSgrJYqB|9#kL`=r|yVLW2sBK*t$FC;?YCxPYyE#AsbSxIp?0a8YP*
z0el9IYoic6*^mO}>uyvO4{?#me+?ldQ5_uA&;s^AcT_jDK)&wC<sNEi0kUAYf(A(N
zP{Rt?)b7UB*06&5jv*H{tN<Oe1Lvi&&DItcWUaDKbT_^*f(r|b7=2x&@e9Bfvrl>>
zU%9wI<Lf3dA-lLBzX=T#k!bbef>yVf@4^X#hDEHfZ|-Ak@RY46(0Ce`xDZ-V5aU-7
z5DB3b1=n_?YZ*Y|q0QPnVRWsq3pD;ZpP0lgh;oA<5+Zg%o7>E{;PT*xwRHtq@7Rl;
zFj{&->k4o`)_b|Y;$La+w@>voZqi%tFVOh$J>mjve?cxc3?c!xzX1MjNDD3mrPmfJ
zcO}kU&9=8U^X>nsF?JQOyZ>pFcBv09|0}u_cMjKQz(f*D=F8ww{_7CMeZ0r8s`J|9
zowXpL+S)>SJ1$75wzlw^JLsT}S`^XN7iN85$PenMMG#zHXrx5CposRD8wy3b;Hfc&
zR=%N7Ms|3Fq8kcjx&S0VHxwdWfHhYwqA}W7$m-S@DfTV|TWoX%Nx6-MGI@)V5ZqXZ
z<n4Sq&|HKu(dr77FYNz}F`8!A;!i#^=mD&;u25c$2of-Lg>jLi0tuM9Lc|3W0)s>d
zTvyoWi$ak~Cx%F+e^w|{>5_%6`MeOR^f$09K@KPf3UPVQWYy~2<<7h9nd6LNr3F|b
z=t2Qhd%)G6_N)g;`?-|GDZ<>-4i_rN>{AnrMxI*y>Bv!T;c%f0)=&;|hYJy`33cha
zw8Mq5V^Ejw5yf*J3TsCS)uV+XVwXI~eOo9acF97-{#~JSk7yCi?0*$ragQiC=sB>&
z*D4^P%D)O_vH~O^|5fNDD~hO_&lZYzs371>&bnhjDT}j(GJM2SAe}9gDGQK5I$Ma8
z1wSC1#)c!Fb=*!cW3t+KSR50G&IhM)xNdY@85>v46?8s0EzbvYp8e%iqm}2nf5zoE
z4dNljXiOZR&Cx+#!9hhY#PPA+e(Lo!?UP=PD^ufk=jq17o?84Zx*boT;mdIupo4_q
z%W-*%2qe1w<#_(oxaf9b@Qo6St5f2l+a(Wjlj5@5B@5j?IZoaFlTZRaZgyOGJ+9j6
znZ~o8S`dyFWb(7)au<~5CO<olT@VdENN6!T9(lc93$YK<=ET*x^;$TurCy0^A-<m=
zIVcOoUX8<Z(!pEF!T`P&*8<Hbf&>q}H!sdIvyBF|^Wt(gfs2ux7ndUm5*p5n%aivY
z0Xr{_=$JM#AQ52Bi)U_^weWoaFHv%vS;Q*=wIHtCk_cKi_3wv!h7ch1!A<01?xvM&
zn9+jxpXzI;M9>1acA8WR;__lNl;&viOAC;weL+0+J6StFT+B-p-E1a!?Lc1?XVx4e
z`N$%-iFD*+QCuF<Nb}6mqIg(*zX1{ui{jXAh$hl`s6}zBv#f;XA1S#gp1H}qmRAC5
z37b5}xW4-mw+_lJEph9hskJ074=AVk)LIh9_CeHvqnUWx#OX$_tYb;M>23T4IeHpn
z_ZDmMim~mHx7<o-*1hHS7R|c1;&RqO1PysBj+ItaLSJIM6>rc@HpIDn_^o)u-<xUP
z5G>d$*dJdttVdS3b<mNj6>c4ro>~!?mjk7FdTK=+!Gov+_od-!iPI2%TN<=j5pQrC
zeb|k5pa8y+e$^<iwB0%=ePzdG`U+)GhaFEkpp>7o<Jhh&L(m2Y>{r&XF0UEOA6er<
z&{>o<u9}pfS`&|mQ@juX#F{w5b)lvYTC9oVs~<5rd~&|5i8s54AFD}I25TLAV6IVF
zxz4S_gqrK(G6{w<sAFBc(e)CP5?Jfv?b@5`>EoF+?S?+G>*gBoDcwJEG3eOJM{${t
zLLp#$6qlEsfds}!@p5t22PE|TDBhyG)YA_=DbD>U-trOiD6NWVI@q$?J~PkwOLq6&
zZY`Ac+8vjP4HQBxyW{c#F_5TbcN~sg^hOS9*&Q#rQ`V9rYuO!daEJMYaADYQ9kf?3
zGVb@(9&~G=WY)pBU*t>D3MI1+#?vC}2okj%jLWPeNYrvLe(j^eS%Vbc4#uzR!N2LF
z0`i-_gYieY^VE8p_Hc*dS6ouor#~CJ#K<cLQ!H92f?5y7<)Q@=wH~6j?G>71hj+~0
zzQp*G=fPvH=0RA?G1pq?p0;D|#G!lIj>WNDQ5;kp(f$?B8lMnxP%%pWD~>cfe{E7s
zanLE|Sz}DQ0e=JZl;hh$qUfo(jDtV|^i&*i(6<y&6q8>)A6KG@T`D`X+{m;0EyG@=
z94ws=3kvWOhPb;CB;?P>^YYCDlw&O>?|s=mvE2B|Q*qf9BG}9EdLeSxmr3XqQ7Om~
z3Hzs&Mnk1?1ahvjDspHe64K`v^H63)A|hUyfaFq${psjtG3_EoC&cRx5HNw!2{{-b
zQT^zI91M_<9G!3?h+<k=#wB<J@dyY2jdOJ%hdIvGfgI+zg!E-745V=hIV4s@o0!OY
zTMmhZk`og+8Ni3cq9I`{yvdl>8h-<nA;rzx2@*wFLJkQ?fU<-PO)cuW$q5QgOIl8L
zWoQ^CCuCHLLXer9KwNi`?8~C4bY?<%EnzoWYdq)aiN8gs;tA@W=`;u=aAqdtQU($@
zGZR?KXsHK@rG922^;#mEXXS~30<#iol+Q|{#oV8rV4ihGUgeyG{8nB*QpxaNN#O1k
z`f-DLCWhzLgnF-tLM>FPEl4O!?Yq`d6pBBcp5Y5^LPnt|2e1VR8HIv`b_)`*rO=L|
zP-5_KXkkKKk`UpL<UwvxLWV<<g>Yzbg2ExXs2H+{gjXb#RSA`yTW@?(i@%*7BV$^T
zkX{P~(PJwT1tQh}3G5XK8OVc#PAd|PRzWB7;=~Yv{K|w3<RuFe#ZDlQ-$F-rGT6K&
zvOY<8601E(DIgJY%X`MU$hrhR)V%}hWhi8PH=%4|g&T}+wfIZ)5ctsM-GmGnK|-5%
z6Ea`~32oj@<ZqHaL=4_T?<LfYvWFxOavPi;k}UMl`@Dy6&=(reafpPnEukjZkqyR;
zwICcN$QVCN$aoPY0rp`+#)}}K#D|H<wt6LGytp}`Zmn0si5IsdWV}dnB3}F`A>&2K
z!f<??(2!6gKUfmcwkNW7%1KuOMYbo5VlnATXwrSoCtWN24a5K3(HSI)e(p><kkI*a
znsoH3T?x&K9c=nWqj}dIc-h70DVW4f@b3n_R0bkDsIN(n1`%y{BI}scqXA0pPB{L!
z0qL=q^q5n&*U<n>6x!=(01|L}ooU~IG}zC++GI3nvELOT4fZ>;9%Uf1pJqMZ%{8D|
z|4l+UO7p1LQwthR215)JNJxL<%qEbK{>GV2ATdneBw|P9FcE{>%Hf3iog5~~gWM6v
zRwN6y@-4R&>WhXE?L;Cgbw+kZLsWaB-V-*Y&NwLs1%E@sla7WUQS_wKB_L7LN$L{1
zJh&mLf116s*=TX~X}rYbg90XT6T0{u5+p=UC-7>Ca{Fqdi1u?LYhuz)Z!xxcf<Gs4
zvVdMIHzFl2v7bIN+E!e0u)qY?rG&ik0wl05(Ev{-r`m|>ACk0teQYE=l|z!!KY$H`
z9Fmj=qe1dw@=9-z02z|RmEJUu8`1hWJjvE<HSVk&?n2N&4NuCI4ut?QJSkT?kboGT
z#7ftJLx38UWVdWHI#!NyA!xB2<wB6>9F>%BjT>>#IVy=@l@`lJv{;Tw^2L%J+=gQn
zW0G>M#3KlfNy@bnBx)Ozbk@p7r09esUn{$U0L}zg1zIa7xGK<EIUy<6N)!gtge2C=
zf6}?S#u05%GV5T{llaAC_kU{K*9X7dg`ZHAKk-DVS^Qd8fBgC&eu1o-|Ed{sz|N1|
zIf+~(WP9Me8U4^64qA~=e@anXP41)L=ewK#B4Bxy{7FkBktv7Ee_Ao|sMUj~bdjBs
z2ec@gMF+Tk^UHknn_Kj|f?O2oYJM*6%1l;Gb%})^yhP<D|2aRaH&W771DckzZJ!#~
zcuYHcyRk)4uBv8BOOQz0{TY~{MM-#e9vL(yQ(Ve=95tr3!{6w_rAawsL81$nCS_y*
z5?#17iTSXP46-rIM6;91+etO?vBLfxG1{_C^L!!JX@~LGoGZ`qv9&vl7iv*dcmfCl
z*G|eKk061I>lnq+Fp%&BcCzU0q&ONz4Dtl(s-!#`CONR>RY`d?OtJv9Dv6_ENFqW%
z6j+<Y@0T>N?j6vBZP{rwD+BE)K~}ytDGza=Fl5&z5qfmzvY^&8YnRcZY`rT&R=qwc
z&u}#6R=qxnGaU4>dSkNc4Q%l)qfOa{q;%R~LS#cyo^t{T+zm;rO}H)$BIxc-EVSFW
z?wU<W`N0O55ZRPWi9@g;A+jlnvknU>#BGc{ueL3ze1=}1noZxDmDvk+Bgm=+(`g!Q
zdAB8H+yV(8Y)i_x1tj`+TQc?;`j_GsVsKCUNm8v#invAcAopof#x0TsPrE%yaSPpT
z(U`K?JCaH!(b!_I>@lvc1R>%UJc3`^k(6IPfrL&wk}+`u0!U!*NFrrI9-%R9fOiXz
z&;|q~cRMZtBqVn`E&(JYch|dw#<cN0AY8&tATS6ATpeitd%$rCcnYKgj!OUuqyyv<
zevdaA_(1<qGV5D5b)Rv2@K6$8UzQ+Wk1y1*O0ggJ84c6lB;|VsFkxEXB=MdB>06Wm
z>|u7@expJ9a8kZz025^nliQ@11N>X_BkZ~TM&sfmvT4LbnImNRe}GTADxw`rW}Rj0
z_8Sick0p&bz4uhFA`MQk#s`ef?M^r?0~0Mf;j|1SR5+28S3QG7%T6Tm3WZj#t4P0-
zZ0-T0MZ1$O0<9Y-lYVg)5@o1RG9lthkU%(@L|oaKBS6nHEbpLkbNe$c0-5ibq&!o0
z6<;>aBts%a1QG~mNQYa|wk8qnTr!KL7&~a(5;{i{Vk-r{O{jGj*r|iYC+#jc$Y28b
zg3~&X(Cvb=Ab|w(1?t(SIRYO3!Y+JeJlp;k7lGdX|KcK0>wZbfeMS@Bx?gCr^9vrD
z&@c>5*^9q69`ckAP07g%Hl&88Fc6dy0Ev2srtl`G6R#K4h!kt{jd5e;h?F$@Cj8LW
zh?MLUkboGG3W=-&NG^nh@b?@7);c=HmVaY(s~qh@P$q7)3qdYqv<pElWOND;__z&9
zq3jDO*5R;mTc;OX2+Co<kn)S!hC+aNAyw2wHiTTt3#sO%=9gj&;8G@}l$TTN<HI;-
zj6cO3ZlX{sZ9+;01|R`5AtkL0Bw!|_Fv7H30|~z}A=U8Zl-PR^LqyOMQ}PRR$%1Y#
zrSJv%Z7__c5p7B;Yj(<$sI>U1*@<PoH9CZ*r0@w|94%~07BVfxp8D2Elut`Z9|taU
znU<1k6G-SXErqoSFAX7shci-a)wf2fa)#3!aM7F@PIEx=Qqm|u0%ArAMuCYB2-w7|
z6bpZ6G-yA|g`obP<w8(Jvr;k<3>iSoO2MmrMcb-o5$)Af)><~;JL6#Z)s%Crv>CN%
zeu}>*Y7GL2^PP5q1mb+BT_AxtpV~E%yni#QZ<*cVnDMfwe3>gmEm@Y5+i?_v(6ST)
zb8@cDs3j{>BHRj|K)AIcCBrQ|g5Zjj47Wf+a7D@qx0(^T27N#m*@J+!u5o$-B=lb6
z^aMyCtx3sn3nUkXZym0qCz@l$No9>FvIqUk7@8g4mcm8$Jp5=*eX(8i#q}V7x!q|N
zNMLSv`T`^{w^Lt?p!lOX>Ao|CliwFux>~!HU311*a|amWup=Jx=kn|~NJ#HY$+O=e
zvE=Mb$+O=?@*~DOQ#kwm4$X?@)NOlN$Fs)z?t7h9g9#1yI;{qYI`*dIm&YJc$KDjy
z1#%c5QODkt{DnXwMYdvZ3cnDDZ)K<w2z<>R`QA9)?rXOaI;{J3N}l*d8C3FhO8!6~
zNRmn62Lkb~76=%X!)(+KM%T*2E&?SD4yR-i5@mpJIF;t-Zb$?Ohf_Fr^BEacb86Em
zJ9N(Y!c%$5#h`fll-pGDA*WLEWFlmMaVmvVL-@%m!a#-R?aY6ScRiKoT?}#{=UohP
zAm>wZ#z6)c=V`{t&OkJAiKQ<Xrz<bH5EMsTO37pJ&3PPgDODnp!5{%~Db=bqH}&S!
z;RB0A8V&>`2Np?N2Z_oD7D-zN3CV#)j;%MRIAVAaxAmJqpjU?%Nk0e@%@|%J{UAsn
z4KI?m4iZSii(u<rVd|xLUssg1jqSW>+>$@K2%mxsCTlH)p=&P|DK8b-Eq^vVo?84Z
zyeyso{Y3{IB+y?hlBdi-0{z7zym=un3ld)T#UksaqHHrCcYqNCRz=r6jVn?o7I}H5
ztDXzl@kNN>@{#_kXCj815GtY|?gp+I>YG%=HvD3=t(@d)Me)I;BDs*2^4T=0NM2Y5
z63CN^uogbdA#i+dY7x8PlJUpdsV)Q=)>OA)G+Cw=$>pPzPnM}gSU%|Z97r6Wn_ARx
zthg12XsjO4VQNvMUI<iuya-=VQ0%c6JakSAJm@i_NNJg9W8KMrVx2`V8`oEY<@7F1
zrWr*t&Ov!7F{3C^#-}JqE`N0kep^&2O{UpJZ1iQLQ>WQ31TDz3-L9b7G`mQy>5u`$
z>>@14^l2wF!hObbi<AXLF9m#`)Z#Bk5t>hP-QJ-2G`C3ptO2BeGPej}z8Ge@mt<~H
zvjz3TOs~KAFuz`;&aWS4$%X72?l4OxhIw9?5Az_Q7&>A}5qrYp8{BS*s}@bsC9YaD
zMVC0XUCO8Ek|Mk=qZ8w$6z?x%%@kjUcFSA@nxV_w?x9G3Sy4#50D%aUTULaZVLdql
zX6Q=xn&PXfT<IdvOkG(da~P$3rmie%DBhWX1j5Q9{9M~6ay6wiQ#aVZ%l3WfsodaV
z&|&NiE(Xof4Mp+;amWB;LlHg@A4oa>QhJrO)xOQ^%T_vUbus8L_SPc#4itrev9(BE
z3kDJxTZ>X@b4mgm2HbrzJe@TrZI97?g@MTMwAV*(^Srn;1R-BqDd3kSGy(|}(ER6b
z=qc8f5os*W4R~QZ9GPaGsIOu1NW6q1vqT}<Jd8|ZscXy&ff|)&ouj_1ibtizbsH!|
zE7Yho5=7m2A!s)`%|=CicQhJ}7e^9_PCJcGW5+3wVBr5uE76idBqC0A)1sx^IsryT
zjVJuY3Xu@|XBzKFj?nF8WfASwbk-WXL(F$r4ZWI1Y({(DGHUAFG;5XgwZ3*PUQzN%
z1un4Wre$mf5}M7W#?YRzjJ&|Sv=YXi@usH-Ji|I*56)I3ebI7o9Rymt=eY>vZRQaI
zT|rVt?OvE>=aas6<qKUI0$%9KkY`v(GC24M8Bj~o?9r63L)j8nhP=TNSBAX75|SZn
zFC%ZTjD12P%UluasAXxNnAIo)k!9&XuK5fXfdQ>#Hx&8)R=&~|p{c$yE%OFte5$WZ
zBX2OC=4BZzovYbbMZSp@t6dqIhpW>vq(d20vzn}Crit+=k7%EyvwpE(N&C{?&?jkx
zmK$;YPA#Va`Pr^(;QOFi#m~iZ=>r#FKNrWvCutx7_H!}T?v1zsNv()zBP<-<`k<Td
zCZ+KRi|==`)e4+E`KP74XsL8Pwhmg{Ovibw;x6BjHe)QjS)pSl;u(hJ1xxL81qbzv
zCC+R=l&c`+-mvVhcl+je%ipl%V1o_q-ms*(fP~Z=76t)_1R;cn3oI6Y&{y7bfhF^<
z;BvP7umvP!7FhVOg#s^-@G=Xmkhsi_Nd8)Nffc@izgCqTx@u;Db?tTh#6ksG)e?)%
zf6#Yb*%DVds(*<k-*BK1Dq3P;&UNC-fm+6b5BYAYTxLl}U%?~eWtNN<KmuWz6%o5g
zkR)Sa<)rHZpeu~bW@8`nz0uBgAt-*cEg8R|3?OVPElx&&1cYtjllK~q0GnIGs{i17
zrrjDBfp&mvTm&+~HCDQ%>>yfg)>v(>;a4?QkOi(|jUM*3Z@11xpoL+b+YB<ub(Rcu
zAp(STmblLat-!+Y9-H~F@8)*zxd?Ph;yo9E7KZmMnOBAg5Z<%!(HVXGRzacLMwa=b
z@BYe-E&}}?^F|keLb#2VOe;eK2pcW@F5AcS+P{JphB|xsAAP^iuB>x0D0r)LF=%0^
zbG4v_p^mf|NsCJbEeyNu_J8(`_Ehe6F=%1f?PAcvu-nyx7KYuV$1*zPP(g<rzOl7O
zean@~Z(I!eRk&|l3_9fSjTI3GQ6K}1Z!8?b9VyHLM;MN>|Mc>WZg<p$pi4Q9x)5}N
z;iwf6u}lR&!En^Nx+VWusDh4zpJ3~%d^dDD;UduKgcFwht_o#<aKb7S(KJXXal*nX
zNr7Pn9W*#;DK{ia+0VUj^VmI)`HI?sAzU9G1M8$EBP)==I%y?ZOB174uP3c*uQ&h5
zv2f(zEL-@P?~!(AT?9IDaMo=Poj5paMMRpSLZK4}XRYRC{Cb-TI&yxF-Tb)k-gf6)
zgb)zUxd`;5aOW(!Nr4Cu&RO_;idLQqI*@*z?R?yKO}q0h0xmgH&$|fp({AT28GS<p
z2<I*QIvxEeX$75DzsPRs?Q7lcqKiO3>2}dYhydZDB@Y8Z1PB)`tHk^(N5B#6%WPF|
zUv=eW7a<P_mtBNBAY67^kq3m!)QT#OfaBSNGpu(X-(!`7GxdX!kHHw6k?Gb7B_9xj
zGva(N^v(yw;7mme^BxX?AEg<VVgA4P?yVf=LPVj(uuQ$*iUML-roJ6fKn%;E9h7&f
zQ1Bx*BQtE;UwpT<AL&BG05Q^qhyh|`M#i|10mR4*UY))uY`g$3cQUNe6TWfn$G8{;
zz!>9V6aZsPM(!FalmcLk$&}y%9WmDmu@A}EKRn@k13&!Wf)oN|QbtB{6-psMCS}6n
zqgjvunUuk~c%Fo;P~x~hEW`Hn^KI)m-NnEOMzH0nBoqS1^o;yU4kR$9XYiHWT5QA6
zA^7NYSqAq^f7jpF*4qPrI@2TpRhGH!NdRV9Ms6M<2AE|TY#u4@2Z^|US*GFgj7Xvp
zLu`ZI%HSs#D4$cIB;oxte3RQ61eCNha-|0ebUPzAxgddVXRyiLFM2$MmmI9_Y2U&2
zYh49XP;jlQU<wdxT?JEsSW5~nr)!0;j%Xievi901pYgTI4t<=#>*y`CzrC6k_d2`9
z|M+h6RMt7z;6lAR$1FhtyDk$G2@;UNuFD{kJCUODt7)y>W54}(UrcGg$Hkzu-5y6j
z6rxfY`5i1sVC=~tQ+<JgnHCZ4XeR5l9r%auZ%XiJ2Eh!jl~h}hdMDV#=Y5Zsoyf>n
zEnoubL?$J&vmgO=B7>dWqg(_JPq79AeZAVBa+GPobBL!LWk6D)j9lD70^w8!i~DFw
z0Je;1KV-6gW}623Mg@P!AQ$il0JkJveq@gf^8K;=$Bc}Ezy#8d85wAR1k#Tg1R6VN
z<XTeKTx3TF`F2%YbY-aaiy3)K2g*R^Vg@O$?x?&~M7x~HnpDD04)*;i?=sa+9;g*+
z*9Mg+!%NsBLwx;f@uvv7@c?LpN~8uLfi|cF8jxjzgk=sY$sb-KUK<eumKo6om#D)^
z#A_qTgWQl3`PxXbuooR#LKz2gqphehqe}3@cnvLf`%qtbIS5AyYSO3@`R)oO0XC`x
z@2==QL@SEX#+0x(hWfhn90LHp)PM__F(vYXbC8f3QzFlif<$C7rliR|JT4`Y2ZLiu
zn%>QWLCK+Da7@V^ck(&biXg_7h(r<y81c9gImbYvx^X3Pj)CN5okUVA3g}n~PbB>r
z1gE4g00~oOCDO%$1QIKez5pbUSP7;Yjxl&~CEb*gtXU=EPEcBwrj&T&e2a-2=a3gE
zQJRP?CP+L5ExyA8iEf%o9dIKyhPY}Dj;e&+IKp>R@pODZMx91n6q;U=DWOkGK!TcC
z!d@NW>zbKaBEKI5m$NasX3|$bxNPdxlB~rgEO(@Ddj6{=UVf*zH$v*X2IP{b*i)9C
zq-$RPTnq*edFe4wUMs<@z|F%Tq0j3j?4eP<2Z~=Wk^5qBQRwv&>~JvoPzcn#687mR
zU(e!svg?V<*?3{r<^L6S?eS3+Svq~~wA|XA5t{G{m~Q&sOZUCE2@fF&kS7ljMFa;O
zb(sf(qs%bq@^IF1+yDX*5fl_^ln5FE$QzW<Kwv=72{<@L0s(<YaDmYwf-?|Tqr!ft
zsxH^r`R#B2>+kfbbF0odb?RLun4qt9F+OUZersf1Os%|y#Q~pnF+>&I0FE@Uz=jy#
zHcu~!Ztx}10Cz(SlFBG-^a+Qy$I=>89iG$ioa^=&!iJci?n6bZj>)-t0GO}Z^Ho5U
zq&lVsE`Z2RbqoWS8tO{+p>pm|eYZeA7%12uQ!W51oN0edHPnE_6~h5m8o2;M#{L-I
zf!af7ulrDW>r*!@)JuZ-^}Y=1u-C`b@BmDZQ6I~a?}`FKMtuy8JvA472z|t-FV?&E
z_{j5N5Rv2~&xZktDdzcbAJW-r>BB<+1iD@T^5N5-5941*I_>!|AS9h8AAXwj+BY2f
zESC1Xk@_Lm16rHUVy(JL#r7q|HYvpdKxUJtSU|{Z@)QdQnN6fvaqOfo75B^3rI&R_
z%m30-3aC)ZmoYVK4oF-vbx#H$WPBO39Xh%h>`QuW;rEp5PZqZL5=gBrF}33wJdn^5
z>numjfRNA<!>GBL8mqnpXQN=R>W^y$vkj#lkRfEYq2^5iA!N4ET81h>kqW~mvQ1yo
z^D_p2d$}I%@r<DY45&!+jG+PyAksWzc*f~Vv#JXWxhewy5exjU(<I{pLj@T83rPzM
z6<`1%X@LRbpgW)ibFgF7NPENJBVN}}X1rw3oh{VZ<iIu|ZfNBOFR0MxmExz2&iDiJ
zxS^smAmnjF?JNL96Tyx4<%Vn`h#;DX-y6ZDhHN4f4e4GsR1={{Xd+%QsEMF1Y7Xgs
zxuK2B91`V2SLk;=1Ry(9_zPuR?v)Wxu&N$AAY?B$)JX+EME~VR^e(X<lAv6JS#ES4
z!H&q%!WSwHY+`sfz`v{1Egr4Z*JXp^6`Jx=X{bwEa)cjL8d&6`TQ_sa4OScc>q`Ac
zgI4=_BrjNPC}#u{M65Q{T`7PfQBE%V16^s58xHL@(!MnUnV)HV!AgDbsOYT|CSpg?
zgE(V){gh}_?oj%_wjp`<V99+*Qzws|G-d3#sS_TZB(@##jd!-Xxm0aB`hWKvjh`^(
zF<hxdn~tzSN$on4r|Yh7eHtrn;F^M5VdoNVml7M4qTl;2b}o&3bn<u<LtJExg78ny
z>TUn^`<s`<?arwqEA>BXZFU<t<|u-0F2#nuhCE0&VvQck+3Ohte?gOb4Ha_%p~<}l
zLPG=fLUUoNP>rD-G=iCj{5?st{%Jc>cRqcs{<BiBN+Tm7<klE!PZA*H));C}5+FRg
z#<=+)Je%gbh(MklJYc9jNs0njI$)?hNs0tP2Mp{<!U=q&1H&N$dy;Mzdy;;-PB*&)
zdzm0lJ7lOmNnl3WLk8BzCW^E`wS3b$eNy*YKM8qOt)b=?bA@Ns8kk$8=ZtbGzSQyC
z*X#C!b%wg88AK$h^Fk6J<klH#(Gn09rq1Ymt12jMAjZhM&ge2kbeD)h9Z9G&1`ZN)
z4Y?GO>iN<2djEoYuMU7nRIi=_;<NRJ8czb^v-Jkn1<I%v=2GlE!G~|q=jNaAMbI47
z310-wL7gzdavlsxAmW69c`%wO%%wS~Q@qVay+^?*UjofRo$@8n9MmZzEC+%}0tu%K
zv<el}Wam;>@oeg;je2Du=d7<|nsz#CsJU1$A<<a_Jr%JdD;LvFp(aE78+=ag$Xd;>
zZq~1rg67$k=A4?mu!#f^&}3w^7d>l0I9HR=;cqHz5<!H`&yC<0Dr_nm(p~hzrXnG1
zUJ_xG8kAg`zPe(3?>HkUP%KFDWC$R#a>Z*~03q_q^|mFKrmk9K+rsy}rH3A9@ij^F
zS1rCKY5uCkYg&*Hf?B9)p}s5b_PlDOJ!{IoD@|uyHPl_wZK-l!L%5ZFS3vv=Ebo#A
zL=Cw{(e(~=-f-6@7HLgBVXHnoGQ(82K7b0Q8K&Gu116xSO@3snJ|gn8srs&<3Nrex
z_X|nL-)xhYROt^yW}B)P+*b4zXPf8+V?z!kp}v%vd}kFTm6_@e1yCWW%*5IpuG9e&
z^f1@t@ojoe*SV(Zbb|_}xh6W@n=wvK$Gx6Q&9qHs>OZ&X**AojnkYV<kk6pvm!l-|
zgghWh2rP>a2r1<zici-yWKi*!nY`Cdy(qHGRNK!$1=BJUH5N0cU;=v0<j?Qa?}@zT
zl?+rtM#)AACKSKI<Tq67cSkBb9c75(SD4VzAi;#<SDJikwLUmfX{xjE8KU@=CTc46
zr!%Pdt4w~ZS}%#LGF7J=RD5ogiB30~Z!p2>-Y|LYE`4<54O0ySKn2qqCI$kSLjn^j
z>{^qr-KF0VS?e>=S@^ZYgjx+IRLS)w&)BVJN7kFtjfo1T^(Nvo)}a6~^SjaHV|VL)
zq8oiZ(RCdgNl)8o^n!~?tIV{$ylS^z6|OR|!;cKojtsKR)MCOQCLnYUES4|nU&z=-
zg{S8g+L1xF^NWAb@5tKjWd=m>Y^TgTC3t|U`H%PLrCHUUVR0oWQOU3+f(Pc<&9Cgy
z2N}CP9kvtJ*iAabW^H^6*4SfeW@ZULS*>^BkMGrcMnRAdk>hVj++)TJ_BnOt^1`A0
zX4+r)ANT4_t@oSg%Zau$kBavm|L{+GIsfTCJ=Fa@Q$;2GgTlOLs-_eWd3w)8Q%aM+
zc~sK(`NDmAe*XKW>Ux0)<G*jJ?j;~GnQHqJASAp`Wu$nVM<uT1`hLXYT3-TrMy;uq
zdcgw;wWgUThChIiP-|jui?}l@kKpmtwEg=0K=yG{HDI73(Q#AtsR4<L%=|93BzdH_
z2Hx{sy{4eS|1PblG?;3#8axouU}nm`Js?ChnCRP66wM<SZ#3nOsS$tFLvEw8HT{Kz
zji&0G10rFg>GjR?v=CqTf&SeP{6H?w`=6(V?7XiyYRJx;s$ULfNI7pJc+RB$U_V4p
zGp*cO{dSEWY;)E0#!UUlmNP6l7zKdH8J4mpAVkivlr;e%a)t$K(k`KXq~=)`fBlet
zTlOqJ4cTv&rDlA<gfz1(%=i?EG_YTp#XG#O7Z;aV$_4s~9Z+SKasfbyD6>@W8xSJO
zEcCv&QGcu-U}(OjElOQDsrLw!0wdEP$c7ORspng2JOPN*^DQ-=07Sz$-)g_elH&;?
zh=y^26<lb^@r0rw-Sd_jPbd-^#uqFaPmoFbky9)VSkk6H|3DA*SZt{_5&t0<i!EhS
zKuB9`c{c4w-mugX<1N0RRu2^{^_4+goTa`p$T^l;%B)BTK}#)|6&s9${llT<R@yfH
zVXZ#A&2p=iAuDKqGHQh~DgXplc=`c^zzWZ(fDl+gMy18({-pX<7XR);{WsaG{4`|L
zRhGK#3`|I~%EFNpT4w7{m2!>6D-P@TWUsN*L@208v&K@71OOt<8VlVbM0}(HT5oZy
zPA|z`?|+AEx872B9)n46A#9Vr`;)#mDRpnGgSt0)>c(G4xXDvDAQEo6uI~P%?kcJ7
zK>(0b<>?zx{HdG|5R$4qeFH*L73upY(D#6FXor>7#3M)bF>Q8Ot-48l4<LQ-lKQ>{
z00MV;Wdel2U7o%HA#fMz+d-KIkdpTB2kP}?_dR|RQuiLO4uJ<r_D~(drVJ#3y7%$7
z>h+P?`}`y%XrE^x@F2-Pvd{;#q%nYCZK~HX{X?yw)+;)w$Z4(TYJiYYYpLEeASJTU
zO#PMW-2hVmu~g9sePW>am@k8-ZjSjf$PmXYwIGW$ka5gH^CRl+02m_FU}>LF-R&DF
z#ZOsl@dwg1c(oP~=^DIR3y50VV7325)mkEmTKlmTJfmu@q9NUBuhuFOYHj27T04Lm
zi*wfZy0f52lI+d`A}i-SUjl^4bJu-o0QE2~NM9NT0Hs{;l|dte3%)XFWN^XrB``zM
z1@fhH)Vk(}Lzk?y+1&z}g;73gYkJ0#FVcg2&}qG<%_XZ<RJv9^xmL4sEda=G_LK$)
z`OThd0YZK=xfc0JK6%7f{If=VWd2uP4nc&3ue=-r5|gD~{{V!9uPpRBXn{4KJnb7k
z?Tr4@f^U2Yq`+@1bvPe9knoLV$>m-^NchH5n<w)LU6oa~F91?r_3A7jQeO4+3@CWL
z5SdTzHmjQmk%IvQQVj+mN-?XOs<VKQG^?A6k${jis~hyZp(FHMfJ)mft&W%fmp)88
z-a)+jl<Ip{e<aZJ(MeId?)nLN@fE!-C9c561jRJWkxZI8VI1zmp5o7!@Ug3I>^lA*
zo|ft_k4a5_2p4uunHrrk;o(VRr%s!UV_V_?m3J9f^zM;^ru_4jUt=f!X6zGFqEjB4
zge$MrWDHG@jOSbWggONwL!9mE*m}x8Ts1Ux3ZH&TZx^sr&FA#adg~qCyuMk12t_=4
zNw4U!3kO?79|%M!XjeDYkOM+NySl+q{zPX(3&?~^;;Fw~(hp_yUJ_Sr7|4R&$x%Yc
zIhMq6?oaHQD}Z-|mc_Ld@zkXt-exPsZ|`#?a9Lb6!C*wfWpUL61EMl7i??49mrXDc
zL}gwc4_3rw6Rc=R_gY*v!HR^+{Cb?4;N@*a*3lWLiE9Vr!BnpsS-CzIK+fqEi0D=m
zS55+mOx47dlK?_^O&ntxT8aWhrfTBGL1c<fITHbyg2Nt&t3}cR^2kGRxqt(J{|@=O
zA{RUqSM5Fih4e#l&zTFT0XiI)&I|xShy8p~19aHWCq=@;em*G@9*)DAFHq1Z42SCD
zX_xrUF#Btp`nb2}y^zd)DlVtDMrN>3_9@RA_zMD0#g*{^A@Ecj#uvxL3&~bz_^b@}
zQT7=>4VnH-T$j&ofd^^M#POKPbJQI!q`+{F&uhmPWS@(x{Zk+!&AIrEVwWKCAkDcr
zb_r7BT}bFtr91#A?^92CfJphNr#wKx>nX30^nOt)k3Zjmg^DhEy2D@4-9=A#fDm-i
z(;XlLT_oLA;6AZnQ8@JXc-n$Q>PQC`4Yc`t+&fiWMB4jWY45d8EY$aFPZRhHBER;u
z2MCd0llC@IqgaG8hpxr7S&3lgGJff#{sw<Klg%szN!A50ApJG3E&w9^HLorJ!tJib
z+s{hKx<CX`7p5nIPbXwuP&A~Qkx+F(kx&<ACcN%w5gDZ{;Wuo3K!KV;k_{UmvQm~%
zJ_-ntWeHEsMFi*bKsIX`gx}El{Di7XfKc=NgsMt_5HvrbsuCcjOhC<a<g7RxTA0A4
z?YNfc{%*K%n@)e-5G=;dzr_jd<wTGkI=T^9?)(!pKKEvp8nz@694aOV<$ov*PXq^j
zkAkoKo+zHY@`Uyp<UQ$$gDC`w&&^^_-2Uo6Bo@;fiC~d0jtsFp5gc+|TxCLg1L81&
zud;{uCTM(kgdHwjnNS-OMfOP9s}jLq`SM78s}sQouFG4K&^ACGJ((+#AW|t3P4`L?
z^td*m9>|px$X%CEPw`3$<gQNyWBslR-ki|3Lhvs=!MNu^kocY`d!+A{M6l4$6%FX$
zOsJc?ggmMfZ_zi!SiYECe|tiX{{Ud;?Fr?(fXLtWgo+%1NV+{i%?9~?F}c&8l#6+;
zK<_<%B69dW2^BiPghYE12px3YbTR2|UqTCKI{bxp%r20z8f1JJba@0G5Hj{9R44(2
zjC~1&l54c-vluXRGNCo3TAS=@`dIw*#E_q!^!yZj5OdP=Q$UD0nNT4g5Owcl!e~I<
zqmWMo8S+mh5b|f!{=Z_1Jx!@c9d_dl1x@~UDEK!e)PfwC@SUbaYgx|#@tvjwdQlYl
zim7Oq5~A7Y1Avs5yebKZl$X3J35b-Ju2;!os=v*vQ6&R~&Hl$}+~4dMlDezSej%y5
z+Dw&k<quFBOHl1>Y{V_<fhWA%Ew*t+`)Qh%E+M-wwQ()Z73|q!-BMXO?14ZJP-NV~
z{}8*>*2U&+Vu#qJHeGN-EkFqwXt~W-=d#Kk%l$-T`{lM8{DTRJmfIM(JS)FRmBvo}
zHV<1_dac68;nL}lMZ#9u?Zqwvf=IQ>hM5kCPqo6z;W}H}#dG?zn%3*=RzGATMHaxe
z!R9|0z()1nVB`K4DU58s!ET@Mpx|=5i*4Q|WX?@?Fqzq%w;8}Pc;x_Q_69+=bNCyH
zH`(pvR6ZaQZ?dtc>sIkW=zWVF?46k>6aO%u_2><PyimSG*m8^AQ7)MSBJma*OXjrA
zq=ZcQmK{uF=E%fP=d<qFAc!se^f$izmfcpa*#jc+TQ;_C(ys9m8go?H{NsF9*t5#U
zqr<YOG`y&?vnVo<8fkb@W#<<v^<a`SWe5B6n+CA<{J{d&uQ#A{(Gq#{m))s{N=nNQ
zDZ6(cv9Y~`rapHdX=YEE*E0ny-WvojF)cmp@DtP0!wyPJ_d%4<azV8n?1d>tq2dvR
zEUym;a<v+NBXPCeK|a6)h{V-)c29PIrl|(v?h`xh8#|D>qg85WAu|Ivs-89fq=>~s
zxENvTL%-%X6|>Hr)gQPU;gLrtqWe4vulUFdei<(*W?B5_#jMwTxG)|){PEKsQnwzU
zBYpRfk$2radf14eKfCMRA$JeHX9%uQP&eU<3vh8c!({aPqZ23m8ebca$7Am<89n4@
z!-w5DZ1j-9c6RhG)h+K*N-L>;KIHA7>Ouu{;?+v4x^?*b|Hd&Em~{Q69eF>)|GG}p
zzl1^D!N9Ix!Vn#S+lMDidKh;^q&_WXlLO&e8+%Lgq5OfU)uF?-c7#tH$Oe?+m%Ky-
zbZGsseUq#tfYAD38@sxw^9zVbc-YQ7V#}pSBFGgw8yoE@HYy70Z=H=5=P<S>DiZB+
zs<R7=*k!7$1F0&Xu(jJW&jzBr+aPvv43Lb@_z!j9gst{M01969cmg2ubi&4w9P(yB
z`0oijXPCIAiJ<s9_ck_@8lQpGkTj+qL){9DZ}dMw!M4#>9ThO)6OFc-jR1s<MjNvc
z@)NWU&}c_`t51kUxJEnLi+xMmF9%XH(`;)kb};h-<HZ%&uH1S@D3tnY2)j4E6#sbT
zqE@Hb|0qSEX8)tq>NL|wrLL*fX|^LR&^29^fUn3N-<NjqYg_jC6b<SA+g3e3MM977
zE1P<JjcsW80Z(~NchWXFfy@t~?n^c4xHZ3&{R_W#2iqQ=?xc4XTf5p*te@d%u2>%9
z7l*S@6i@`Ybo>cT&Tud>_W~3PjNH$0QW<x$Hi5_-M-$uoi43+m4z~A~2ri&9hYudX
z21d#pb)z$$=MrQL5orkpPg-G<iNjZpV11&`I9fKTov2`X#_83YJ%ddzz=+9<oYdDN
zn64Erax@V?i43+yP7g7$KoG(fIlTsxu>?du7dgELG2DIw3=_QQ@ZwRdf8<3!KeU4M
zqJ#X%OvC?Pa`?-mkm;BF{Ll*0OOzi}AxJ{3UF`6dQLG@k*irY&g9@g_4$imY79Qe)
z>y$gGAK#4=deL%66M>Y-U@Ld<Ku4V{8zSjSCpC058?8lG`uU<&q?ME}8iOGjV&)o$
zSKrHy$JaQTr~*U<*BU3UKl?^<VIg&+qxH#b!Xpd(g*#bCe)z|%Ap)AGTDk&$qtoja
zGyz(05Vrj~I4l0=``BG=-*hlmEP`7Pq8PE&(Y86f=l!gp6hCEL#~)DXR;QD^Z2=G(
z-|Ap7h#VIXj=R+{w>dIM5J3cqDn|tgML`y-oUSrRC=vyUDhENL83lnTe5cyctjzQ9
z+NS&27lVLgWx{{3WVNGeFreU7J97b%r)md_ixuSmcqDDFlXeRJ|6+hoxAY7?aVoos
z5BxXwM0l^0o+aGB1G)d((2;O|6A&VS<%<D;$ne`_Sy~(HKzZB8+mB&Avi3QeI4(#;
z@a%ICo3QC05NJOiH-_b8?f2yfD#^i|3V4vwcX(<Hb0hC~?g1iFzC-R&hOKyDg6khi
z1%5&k4o4hKx;m)fI^tjsjp_>^L>+PZ-X=VsAhLMG$r(!9Kkzs7b(9Ys%erSB^(qgD
z5OI_$&m_SE$FJv$#<IsE^^TUS<dWalJN*Z+m&m<3kmDcYT_0pi>|=gj$nTF)UOtmd
z@cWaFR*-o@KJ;;>B-D|=Fqw_vqsOsdNAOpkl1??@q=RL*d*O<M!=cj-28E5|*ge*1
z2WQJ@5H}cu!gG%HnG<AJ=_2C6YEVeD)C1$$Q-R#`PH><Y&B*^C^Dj>DvF}l!n@=4K
z3aOtom|VNb(Jngt+C0{`6c_~uLEbnE2+cJ)U1TQ<5Q&={Y>Xra2ZVz+Iq{3i!HFOo
z{BzI26$P32+;eb6A_xDR99+z)42BbhF5~KhX8z7ESp7Ksl-`X$kfF<tI(ZI=3|)3&
zqWU5S<lUDk63GnF<iKU;mS$v#8e#m842ALeD^9Q{`#sGE4GD)@oU}5RfA=t3(z?aL
z?TibleH=nge=W7*5!N;^>YAf^^`PQ|*Bo`P9Uwk<&B4Hm8bm-?_nH$f5T7H6@sQwX
zo6n9(u}DA1P2KoQc3+@$4o<wQlvI#8u38`(A__9c#qxucOKtfax9y$6Zupnv5+y_4
zU#lo6*c|s3@8g0AAD`nE-NF8wo;AU9a0}hEb#5T@Q#@;e-p|Ls!a8+$p{uqq<54#>
z39e>~if#iUQ@~<DHXRTjSma_s_F=etN2=(HUG0|4`?))b-NM%$ZgtZ@ape_t0w0>}
zzZW6jZ=@75i43-Ykhj={wdPX8*^%o1D{iV{5@UhrE64^Fp2&iZxUh+8P)7<3%Upiw
zQMNg{%vEn;fC{c<F7_RX2NOC{WT<d?`D5&ZXoaf@k40LF3>7Xs_8ln;b$^x1=lwf-
zH@eEz<X-KLa^HlDZ6la!p)bPc*1G($$!uqIElRBNMb&?;iw%Rt@S|J9p^a|ZTQ0wS
z3M&k6bg^%aYSgV%qc*$RoBZlLmcwhOuuv(W?91a%C}gv%-thrM(KfqSFe3K_g!^uG
zV{f{$!61UDPg`8oU?>XmvBgylh9XgY+Tx-<je*_qs@^s?Z6EADB0Bg{e$P}kI=szI
zH$`;sL`F}!T3^|@X`ISJ5kMJA@h60*T!b&&Af1lK@i2km^7LseFS6ZLp$b$mZFdo>
zr~`oK?=YNk`Iu>}AhN?%(GpZaMzo|IE1k%SJ6*ng8Y_wHbhR9zQ&7RQ)9u%vlm{jl
zvD)PwA7_PG)vjtxKm}8^i^hbu{@|%P%*FGmkF(sYU9Og|1X29n<rWo-O*D9lj<$9j
ze4Gu5?Dl!cfV+u@P8>lH;`iIU`)}Bv&9_~xNC~3&{kA)B5c?IZJTx47*G+p5n*2$W
z&v+-j6VLk(Haz^Ui|qhp?xAGv8dp0g%v}nI4+G1?EP&8ojT@6=Yd|QW#>JgKWN$#&
zyT<K)P}!RZ!rliwdn*cZbilK>B9XlhkiGE)oR*GbPan8xr}-UEuuI_&-1LaBbS7E4
z7N(W$I3RKZEJl*)fRJ13;weTP=mx}}hxy{)vVyF`J`Y*?F!9_hc!28o7r$kZtU7p*
z&{(E0be)^mPw}9PM|k%q!E?k_onbtbhm=QLbcRhK2X;QnfB7WqmUYzgg-l`QqvQ*;
z>nxMZe2i~=lHHkg%yR`0A?Fymg3J%JeVljt9lmwkb39z-2%h6E94{*5z{(%-dw<7b
zSs%Ho--r7=!SfM?B1`Zf+@9b|e#hcjC%pQO8!5qag6g~ELC^FgKS?|%{jyWP^dyzN
ztB`|k=_ww4iWym_TupXIaEUB<PPsUQDf5g@X#*eo6!P5QYU0=^3QPUa1{cRhr5qeQ
z{g^L<oXE$1x#*>#kKO+HY#coEws7bZ7h8=QpJES&KXLK?1^MG`<d0`v?Y#6yKxhb9
z-a!QjBcF9|mY0tM!d7P~?vXzN!XMANiSx=Ii6H#(oac{<f_$9w{85p}AJ36LUdD-o
zbi5CD*-a};PX;p22KmT2tX;||W%p^}%bss`Cf~er-8TV|GhpePfcVB0@;mAq;srH~
z2zmVs=4Lf}x(5+F&7^zu(!m4tC6CNReEHIAOF$&5OQR5KaynBK`ZiTMlZ^^wed~Dx
zsNnjRyrD!e!8^ahi7hrL`kkl!&cZvtBd?kvCBZ#sCR3wkF)a|CnN*EeXW^hTllY)$
zN;*>@nv>*HW}_*Ylhpc)Dg!D$I46mRV@JT0!@{9wlWET<`JHpv@V3t;VM`i!3?o}U
zm(&&{Y21-p3JhT&NMiy*E6*jBF#%Dw=aR~pfH3BB$;5)BY)ptCj5$B48WTl9PUa_7
zW1>i8%=t+eb2k|i@5{ZMOj}0A+!*9NMzT(+>17PJRJ@!_zgYyDE@aGCl6>P_);;oy
zrwdRa`xVj!Rp>5c#HC5zGM5dHE={TdAgEwknxq#RDJXX#gOw-wFP>%3Maq3HNe0(g
z!Gxl|n&fTfu?M5CCRHWsBFy+|68Ff^`=hsqL$4>(Rwen1^Vt1uUr*xb9o3NANvkW8
z+R7w#c?V3yPk9g$e;|V^lAUGj2E<2JB(cAhDhD9+xgyzZrP3!6ggz@heJTp_U+L*n
Qkw~AF&?g`Dqx8K00cXC1r2qf`

delta 47971
zcmZU6d0-Sp_J5|+)7K=KBQuk^lFUrFAqh7sghTLl)%94{J!BE1vg_(DpzD73yWbGy
zzT}dU8|4&42u2z~5foPBP(W@$R21cu8&QGZ=T%kHtiS)}y{`AES5>cGy?RyMGt6%G
z`J`q826_f619Jze_1@w4<!(J4wnyFPRcH9d)rTxS<W1xpX>LzF?d_rEpIGm)6fGyD
zy`P&i!an|k_b*+PZ2{(aPP@y#p|hrXwBEg*e6qSP>)u7HV4rl+n)gWe>;3fKs?&Y?
zrTah8tAD!JGyR{aeyV?;-o5%)KWe3WJr1G;9#yBGt?t|Bu|Cz0rtiJEd;0pety`u0
z^?CfM>b@1}yIH2I)`Jb2W(3$vis66YA5Zk@{e+e7_qXa^f9aQg?CHMgzxI0Sp8~93
zi*&!IIp8%FSEv8ht54r_lN<X!{g>*#Ez*6f|NcyMzy8&Ic|op(#h&b{#qVuek?xlM
zOZ7jcwog3`)%ptL^fUdcA0=JU3{tpXufJA{Cl-GMX5XiudHjiVFDWHzV|}}6E#p@D
zrssM;(d((lc~|sGKicQ9$Ey3H@oZ%`t&PWGC%S2IX56SXW}CWelUk!|o_aK0{akhL
zXZlz7OA}(BryfUjz4|;=k-p!lUN!{X+rqxwL%X18y!pM@54UI~L9UL)m6f`b+^V(r
zR7`wMyW5_3oAyR3@P4jQWF5%0R4qrz38@?H>c_M%Jrx^swIVCu@)B18J2%$QA#;gr
z+11+b<wBm2y2tMSgmyrw*psWpWGN4X_T<K!J0yhm<hH-f>cwU7aDOhV{fqWU<^EhP
zC<`f^9V&K6$n4K;($N~NaUqb$a_!KQnm@Plm|IgWq>kmr8%wENUaWODYomutsUh`L
zF1zPxZByl`T&+}=QXzCIH+{WBLg-X(kDk^jA><9I=W^K{f73=+oO6Y|5IUEe?kt78
z5IUE8TQ6&@=m;&O4zTsVYvYxQ0jgFYOKA`qp!!Q35<&yirq^4x%GJ|D>Tr8~Kka&@
za=5BRWhos(!_}e+hlJ2@_4;31uc?-zV)ji`b7t8spVgWu{)wtlY&~YFDj&W{?D6Nc
zCt6KX72c`D#Q027LmZh%KuuEP3F}p~6tpL#O;eRuC;n4=r3ODNs*%{}foZDG0r3E2
zni}GROHTnZO--gOzbI@FNb##`t`)RQdTtCcLukTuRc&b%T0V!R7JxZJRd4ujCeUW8
zYR9tw=At`aQPsPwGw?Vn)LfwEoK;!(|Itnb7pO+Wnn?}tkj*Yq+22QKQ`i^((zJ?2
zs$%d);1RT5q?&mSiFy{P{($v`ki^raEd0OPS9dK{6`w3bEnTYSMH~_`OVwE1Aq^rE
zU9Es+pl)hsoH)rYRtv5T+V>Xg@o%l7=UYx^dK3kn`Igg}AU#CN5dn!R-l7qqo(G94
z-cpmd^R6UPbmd!W>NabU!YhHmN_*?SwMtLbO1G9=bl6JOmzFrWsAZ*^xy~U;NbT6k
zT5WO+Op7gcRgLz(+IfqMp#o!z>MN5%=ys3|S~w&ywy2dYt%WdnsETGCQ0=OL+UrV>
z11^Y{^QG;e6hIEBp#~C!X3YV$aT9BbXp9!pzEPDUs+t(iy3R1>vI*Z9QFeHU_PZMJ
zouSkK@{MW=d-Nz8K)zAKQEq@BVSwMLMMq$OAwDn~daWR&9a7c9s#o?T=RxjUG!n&3
zG=Q_TkoP-Pd(UH)@<w4o9#@rYBA909zt$t|Jc^D^0ZSM^NT_mLji+RLbU+?gOEcDG
zVO1EuGb#&u^@}|`ih*uE<Mxb!o;l+hf&rv6YKXfAXk!5BjG8I4URGf7N=W-j&3VPX
zZMatC3I3!SF=6ovS^Q;g@vpSM?DP=00K4oMJ4k?CCS%`0YLU%pFL;%qUNy1SGk#`O
zob?*1Evo@b^e_rQ{sph>VUUo2!5fb79tMdXe!&|Z>J>dq4Bo>7z3LFJ=wZo&+#s*)
zVaY-d5B5?IS8-J^M@D#+RH8D?CXUjsuL2?5j-n{&>JeUFfcGs(=rqC`<O>nnKr>~8
zH<7ePiZ+3Kk>!onMpwP)LeMmL(d!cv7$Sgp(HqT5L|PqQ^fqi{ohR#46pRnEca7Gb
z^HebxgQfxV`oxH%5HOfGE@lNtU@&i^#@t}|<euzhr@qz`?La_svRB#)NJvihN?QR5
z$;n>FR(NY?dWEfkfG#s#9W>a=Os||pcnYMMUTG^Jfi%+#TUk!tF*l^m_2#T&v2mL1
zpX)V3)&po=E?LTa_W3yN!SeaeK!XXS`CjQ2K>}&M7l!g{E`o;(*(2k%`>GZ?y5uSz
zv}&O<EFh_nGb|v1u#kpj2$nR|it(+tPmkA3rK;Y=prNhz`h=T9Az;*dlRQ2k8DP|V
zD=Mw=0t4hK`?`r*M5$WkV$j&G^7?py03jONRo)Weo<Ne27w+kG8rxhN+qL%am$eE{
z=d~^djqO@j4;tIG-XvdXNd_2ey{%eXBhas2th66_bGEbdleFRfkG$S6^{baJv>Vuq
zleGs+Hh2|2eTj*7Z}4Wa*8RK;a5ph^iuRj^o4iVr%nxNKD%#{NDYa(9f<c4)1PF<j
zJj^pe3$yW4w2>v?@b!kC^8%@2>o#5-%57y;Q?)xvwtAI}#H9FVtG7Wz>v3KNt^SnF
zovQUof9mQ+;m)U|+p1hN3%+2#H)n`lIZb=l6WZ_f7V&oRwe)kZ(wME@Xx`OOte>Fy
z-0^}0$mcY7x}YK~ej)V>FZ=rpt!w%Vufn54;-b(O-X=|XBn2AeK`+}nLmQnw=v5kV
zox$borp>G~7%G%P!w!4xnweUEPw8Q=!mWbXD0Y~v;$dD2O*`skp;xt@rANIAA2Jl8
zwjHG*g8_rYv^nl&V_wznZFt;Oi$b^Kq}GdAx=;#6@Pk*mF)_f)dfi||*q?r9G_!A>
zrQNA?0l%qKlVZ0Yye-Nd5^Db7t>|VISQ=rF{r%vr>}u_z(ZtFSQZJ#cbF|&1m%K_V
zDMhi|C2!ky)?k=6N@0N*Y_FfI8A^JvcC|+glp3s|N7m4URzuoIE$3x+a=y0OKT<=q
zgFc79!h{~p-g`~!Rz6x&bgF=uP-C=a<U1s^9IXX{*7aNj5680d1zN}Qv91Ws;IWz^
zmQ$6_;ISH<eKi+>DihdC3$(|}CuqWS#R{TM&{AR<hv!5s6ErO2_izzVj5S@T-P@UI
z(wnOaO;@JLXaXcEWm<z~Qcs$$Oe?RjKG4u&Z%BJh%X!y+d!cq?uKzU+L2Vl#d#T9_
znYCDJSH4h_ixrrFTBw=AL4yR;LJjd~TP}i!Z?Gp9YwgS5aGLDpPU{WLDCD(+gvc9O
zw8(1BMbP9r_Q_(cZF!w5LMC2^*g}d>lk2od)N08^K-IIBOSIPI^{xoDv0lTDiiXC^
zT~fUU*C-T&0o&}wC0hF`+vz2*LJrB+e4=AP0>RcA3Wo#|)z})W`wd$2yky?*Fr`jg
z(&Zf&f+DVWG`Uuw3?SaoWPk}05btORFsEbkqc-hBE$1u4K2@hp^)&oY7*4LL=^^c7
zP1&ZY)+@P|4tj{03kOI%d+D3nOwa9~Xlface8n^L*%nRx?KK=!v{h5vqVWRnfTkP-
z-U6?K2hYQK_SCnu`AYjQG_|QKPOjriO|3?}W{B!BNZzkBb(Y5(M=o6>V>qnY|Fc{x
z^i&*n%mHjP_^>8p7m(27Fq!jBTnG=3X>8@&+RatRoIca|4(FKDXCQg0kQg|SfH+12
zx6<MmQ0)b~^9rrXTmFKsn0$COzKFe`Lth$gkPv!7N4=F?2Gn3S|2?f$`CwfUA&tf-
z!C*ZoqI8f{NH1$(b>kv1kYP+)t#$7-OqbJ0;|4NJ_lYnOBs3kSmo|}=l7S4<o44T8
zMI-wd$p)>~+EtBo5hyAdsY??>86b?*8&*mLvX7B^>o(SFWMUfm#<A?eYHi_7V_gW1
zxVn!oWK;$aV|D2bKmuZ{4sWoCb{CiqA#Ikf%-7Y#RFid^VWim8Z<q!fbHAn8!S}U)
zt2KBmB2N?s)-3(%=utpDi+YhZmw1ZEbCw>RuZzf&7(DWvt*i5N5qU};<mMn&=drzH
zA@ZE7Q{=g?gzE+0drVh~5}WP(54DH<l^`4~C>TGcn_{xVw19R@$7J6oI>khSKxZ%Q
z)IO~|<qDY)I;ERpFQ6$Vgih&*@A%#ZwiZ$^=r-G>r97Q4xP571kS^$Qx}p?7F6be?
zo}<AQKrZMF8d>v1&AyQOv(8TK*5+6J>|*$U@w1EJ1IEvK$T2G)Fn-p{8d@t2-tN4R
zI>z3)N2^k+#u!%(D-UBj#<*%&dB7NBl!}l{Q}Tc@#;9m%y+<LLrsQMKZ{PE|)=jCJ
z=3?XnW14Z*wDN&5&A4h>`M{WFv~Fvi7HuiO(6W!e(9TxPav=%;G0Tt}S4}AZ#4IDz
zMp|b9AZ8iuud^;A3j{U%A$6I3<x6cqZr5clh94Nq44*T4eqby!3LR_p17n#{lD3BB
zbBsVp+hHiX?f1UXhH5qVDfS<l5&+B&!zYp@AOW+(C~}530GJ&HhF4f-0G7GK$nG{o
z+5^R5nIVYmG}KDI>69!uk6px~4W_09L+WP+-(cSKT>t8)`mvwC*8T0kN8NZJ)-;d+
z`pl492au@yGphTt=*bX#rNOrjH&K*A)YVpmU>jc=SM7^b`qGeF2NVX<mj<>D6HP1!
zn5jP-IbWOhttYezYT#!B`^*Vcg-*`4mK{5-P3%-_N^CHJU295gkif1rLp-fUBEYUS
zvt`z;903mpvQ=la+p7k;2$WhH=pvBg9cYHceog0&cc6)c%Rr$7+BTHkbXFVOX{ZZ9
zUT&xhLF@ETGbBb^=WckYi6HwHt^`yX!Sr+5ZB-*&gj^tua1m(P9%0HAQ|DfJgozb%
z7NSKo3*9@#9(7KeqjZ|$VjyNwr??p8m#3Jrn<0aGr<e%2|HdIub_RRu2d!__3>Sgc
z?HMit`Q;g=$bX_%^2;;KbjBL0a|qZ+on3rU8=l*{&Q!vDe(2m2*O?Kq9DsySor&du
zmL!nycy(sESfq&@Vg`s)@gUr!#S4Iglp=WdKVXdz?L{EF#<nhLqm=GzTy1q|yT;X)
z-1ZuG=*exbp`l-iTrz-B@kUc=lz2UtjXk87*gss+CV8sB5_1g&(4LK^+^B;D+(t7h
zydX%xZ8Wi~*(l)Pe|Oj)d-Tno&O2NT6DsX+RU&u1!yN*0$2&||`a)q#aL0R1wkKDA
zy=t$ELEd<;i$UIauNmU|88m~u@m{k@Gd_8B1<rWCDK`5c(1QJ@oUtGwx!;sC79=G1
zo6d~Y75LzTCe7F@oe#RT=b`q4ZtdiQ54tTNAAFEnFsJ}?75-+Rm9x~oOVd?7I?ytb
z)(VP?44SILEhU;*sIUQ}&4m4YzMk?_fF)Kp6aemUORljXfjiv78jDbm<neTzy{SN-
z<*69w3enUYXPE`umQV;n<E&uFnnvAe&>n6gn-<V#R7|wwHUUh?Otexw8&72*Gtp|+
zT%>FaA}6yy2ldevlihk~_D!~AMgnE1kcEuIOJw&3&A!*{Mj@T$R=j4(-Ub&!uUT>7
zc|bzwH4EmqUbG0^T4x`P=o>sO>)e`XhSgbekvI4ZtFy4kPcOo@7#X*tR?hd9{Y{ZR
z)fYGl!=S9LmuK9LS!`^XUY<T?DSSB~E;`^CRY`*Y8ra7z`|~orqbGe__6V_2>^K!$
z3(Y`-JYm__H`Ld8(kCp1H-Oljk7CP_<Hyw3ezbB{+9i$k4odV#3#o@y=yfm8>HK6V
zW!c3Zw(lh~$p$yoXJo+<X$U+A&QBKn&UjHCA@>zanaOTxrjM(^FOiBs)&}LSSn!fq
z%m9nQMY;4$UoHjYoUwf{`gDL#Z9{7r=WH8{9f4ZwQ`6V7(C+7b*cn_?3fM3B)P~ox
zfHkn@7d(vYpkJ^sZi9aThFLbmr)IAOgM%9CQ(Iljg1;H|3&r3whWpgUZmF8V2qM)H
zKDCL<8=Q+dJ<_K(x|W5xI_ejSA^aKri&BVYUi>fo!MTV|#{5Ek_}j5QwE@A`IK7A%
zV4P3QTw5g;^zpyIFT@u67hvI#`qD4@B7zzAixx$(v%VI72Oqadz8dV!oKXS~12@^H
zUVkkM12@Gdq8F|!N@3up`qYlsmcqDAySDpL3gb5Y7lIhK89vlFM;Icempa?0yvBZ8
zuFtN)FENjh`$MI(eWht>iSQBHY+vTJtCpzba!Z^;SVDUxS6Jd)pIUM)3k{m*Q%kR9
z0ee1~MLRxu0R6g8S?*KWzbf?BHTdl)L8+$KT_w<Jl*}x@szk0(Vv$d+knp)ui8ovm
z;4CPy*tH$b0``($ltQo8VLCLw77X3G)E!AKiEe%K+A76JzU5QfUlkMsxy+|lUCTn1
zwomP1b?5B{@(Q0)oNbrx{!G9APyaRD>$yJtI<ke8dYe)_;4vr0n^I{je8{8x8ZHPq
zs8zn4wd_)*evf~Z&l}**kmsP@V}EF=SCqWxQ+PVp3nnDr^A(p^Y1D^=Qb=9R=C{<d
zC98c35ABGFGOMW!;$V=V*0Aqd>Y0)?J`v3jleknS!^@zT-e-+l>18GF`xG9PqYMqz
z`&6c!mqFV;U{AEtD@#9cai}F9P?;WR335vx`f@&D%UbE(Lm&FQg}fy^wY1)cbZ5_&
zdPCN-wXT(b<jG|(9s*&#582K;Q48`#A@w76e{21&l8@Xn)S{2543c0d18M_X-CDo5
zWP?xoW8v>NP?;KD1})miTDH+^OE$VV)S``4rZX>t7Hwjmw9&hkZ1TzMD-uB{vx&;I
z=Vf3Rn^}2V{koFP&iEnIgEE_`%#FMZCg8{Hg|>Q+(vN)#&ul<R+AVxcWvFM64BF<)
z+072MMbB*Wd852%c%J1`pVC6~%%9q!XF&4Jr56u@@Tm`LdIQvgR7ptP&IY#A8<lML
z$<+l+l-W*YXx<?+f<TO|Z>M)C+2K=ori+-wr7|6P8T8CfR@`2%D%puap_l_@sAqOk
znNGY6dS(}UuD#y5beGdJNQj`!E-Ld|#7JgH`^=X!mhEV-KiKFqpWz2ku4-bNbHJw@
z^r_Yn50X))Om1-=ySIb>UAr%QYBQdT63>A7CHY1==oK93_Z4w|pcvVtkn6P1e)>B7
zqSE=aPe!$1V_;7E<o*aGdgruH?ruN=<g^dFn{VM00fMI&d~9w<{ky6QE(Yz8F1Q#J
zhF$Q5M8FRjU|jGO#rPh}q)z<N$2NA-Z>##zg`geMk1hmN^rKJiZy*DRAAQ*0{Dx}*
z>XMKBx=Mer>m?T=7Z8_xKI%X(RHfD8k}n`m!a;H&oJ_n&L7IsmO&gu3jIqC~(pTm7
z#!nIE;{jks=Uwd(3fo5Kg~XN`PXRMJPxyX9L5Mp#FEb`jY^jNXWDo54#XR+|)*(Lz
z*a~U&c{%6uZ1YC_YrSE89#84!s<^16t<O_7<*C*j6GLptAts(3x?P{Gw*4p%u?!8U
zc!r+akf+{s4F}3>%u~BsuTiSOq9NX6AGu3!o?EjgPhO}17cJP6C;Jj4g!bgg<9m>Z
zL-yn)e<x5u@(tIXywpSFoe7jUsCrM{^>^?+m}Jo&Y){^A9<)YKNN-`pv;%p{*LiB<
zM^D<GaIda<YQPZPipS{I15USsgi;6c<Q5ntlsb?nf;+-Ow;sq#e=WO}7~)pJ7kTo6
zhGg*z8eitg3mR9MK>I3B?bv`{(74LQupG?81r0hlv|xwYw|UC3Jl64k{q7q4bTlPX
z{MOZ!Oz~UC03ZhJZyf^w2~EGv%N)C^sdN9~J6BWA;+h_IHI+=D9f77<sj1{b)1#y*
z-<n!f<=H&D`2+epp31X%ipDJ*Y-n~iPZtIck{1gVQrxbnzK}K`KWCmDeNg|vQ#c?W
z$1MlR@_n!pZCt)G-9GkP{j1y>{1kgGJOJLfd{f|o1m3uO;8FGnBw9KyKRi932i%<T
zDFxi)^VJsIRH(>S9=J`&7ojvS1Qu{#$`=8*!-7Fg%ttU(Lq;Yg0mkx0;OVg7KVQy=
zpSz|MMrTsK2<V+s=&s2Gc1<Y++*9(^;;SsoO2ALOR#!ezgX*+=^>^0G<lcNV)UUGr
zf7B=6|7yNGt^$*|)PLkxKmzC0d>mIv67%QP{16Xs=qU`9Jjkp0h3)wD0UtTMx%tXX
ziAol1smIvChxP2EU^sYG>D>GR;Vn@b@N@IwEd@NKCFbVGd+_Orr($}}%};dab5U|=
zF3!#G+RYk5L!TGYmgMJrWcTT*5B4-zlFtu>a@9OIoTd57vV0ZGzYbEImk^5;_R{aZ
z{>^-~1FuIsg5LG{>V4=!Ll(yA##{O7Vvp4ry_HAq=Iwmt=0u!rZlxDJT_GkA_!tj7
z5GM#A(ZIL!gCb!D5)FJiU*1pxi3Yx%pAcS+NbY~$&QJE>4U`;e;M@7#ZnP?R%|LvI
zWggL6c6}#b5hrAMe4O6N4~wiCNYwLAK3ocQBuLcrPJa3h(Lg><*yy~&#y+AK2HwfP
z<yLC}ZN&3vxYpYBkLa&^I<3u@P61rBX>GpD*MfuwYx4_5`WhtaTAPnk5yVV@0JWY?
zeN?aQyxv8i<!ODsTvt#A2<!9Z4K<J?laEMtY7irsAJV?h&)I4JzFMDRH2OYYE*be4
z!PEK5d5qu;iVE`O5ON+%J*7{({Y<{vnm18ALu1b7tH0u7C^#6ybNT8}54t5603mI7
zfik*4wVt;eKsa*Z*||^a9&fu51=wBD8pOpZOd44LcS}YgH~<_~pbqj_pU@o2C#x9G
zuJ5mJ?KHkXb|0ANzVQXJ`#_@c;|mJK-3pLs{P+R{zjW%DPklR)-TaK+zW2leMR+4H
ziCZ9-bC3|3Sb*i6Mi(STcVa=wZ9-FLbSD;+-pZ|r3dpqK#Dbe{w#L&TSw0Q*Li@lo
zdc@mvp{pwm^}+&~Q%50Gys)51T&4kuiWe5(GL5L1=I6qKCJ%5&gQuv5E)p&*XnMbO
znHI);5?E^A_b+{b=i#MpEp*nrv_Re*LLt<$v_Re*0!cyzIL;Hb<f4|P1u1dI4o_t*
zOACr`v;N2{fumf;TK!w^*>jm&2c6U|E07t>e4c??Rv<H$AW_G%0%R;j9SCJWHo9N7
zgaR3A$+CjR_gNDtzR0JAajpIRzx8Nt)mpa}I;>mkjxD9E*1BU$N#V6Lwx3fNnopg(
z&Azc#|3Z0qn~Oo0hqe{S$$>(^*j6AX2S{LSE5PIsno^E<TS4(1Qd7zihoI@Uf|A?$
zJtDYn3f~6|)F14;!>xnT!8_bKC>^|`Kn8XYK^;2^5ZKM8(|z2<`?erwfE^j6m*ob&
zEkIcQe^9@Gtouj-yLG5uQ+cF7uAJZk>qvo22!aIGkpd(H`La?#7W91qJ3myPRPntl
zL>B#hfhpV<3PI@m0vzyT=YWdPpwk8H-C=rF)oG^<;Gzwu9jgHeh|>i@ar^@k5T^?e
z+R;sf0;0|qunxoZwpC|c2=YT`T?igTIEDuqE(F8t${}D@7Yf+?;d-~u7hDKh;4Zij
z6e3?J2#QF%fZNptnwq=G{tHOuD+PAr5&A=(E>~O-I!n0X3<pX9<Vt~zQb9tGE7X+9
zbm-#`X)pV8j`;2OM(QuC4PW-lZIU1UYr0=~)vwaU99{KGhe$m8f5+;5JvB4@NS=}Z
z63@`BGyO<LxExgUieG&gwv~%AA#IjlnFqX}0|$2~SyyFf<YxO3gSZ^v&haDZ<Z^&J
z*RST)SWVFjelnZ|?4RTH=DipA6_KF^6F>|6ezEq0gv<iJT>C-7&KLOQ+D{~38W;HG
z+Ale@G%oOC?XRWo_LE60w)F{muIG`(erciL65DTzpaUdoTI`oW3`o?p*dO{gpHW1L
zP0V6{;l0<gxX}IoOZ#6`geEU#PrjsARV;Puq3W0VW!@fTAhOhty!}+692Se^_O6%o
z5>L%?zg!*s3Yp|`znuLbfw9~#_XZ$=vD}Y^ya28qqyY?n8u#5O+#^~jyWF4o6P*23
z7FFecWVpu~LSe6;vho}JN|VG7TKcAb{rlMcnf`ydoxl=d3kpDs4Swm7K|+fS{-E&t
zAfd$uKm0yzLH%UZn_0ya{kPpVy9i{`n_UDl>COJ2IO&225H|a9(lv?Br~UAR+HSvc
z&~JY@MK4ln@Y~UZyy0%QKgb*I_RFaOIpFN}V`@-b4ia(sZh!KiU&Q6a;BomLzl_U?
zBjWPCevxbBQX($j>(6%P9a$rbVO00}yZ%mgE|)}opZR4hElZ&@Kl5jKj@1E!&Y$_a
z{{C7)`1*ans1lxepFhhpe~ut*Z=b(w&3{QE6TaUsBYIgS65*f!LJK6qKlf*Ey|zju
z!VmaG?%lyhBK&~A!GBeWMEC)JSFyvD@HZe6{>8QUV#o01wY?||?JK|fd&i#9oWp+m
zr5Sp$r^{h?0O<zyVZXdP>gN|m4*QdiDbZ4Mm`rILwxM3QoHPEMAN=;InR-Bpp7DEw
z)&~fsy!=4>tY1lI>-o`1IqNY?A6E*FI1<5g4Axni8Gqu%VJ7GN?A$E9SNfb^W+-t$
zjY8+B&^`eQ^1PotJ6qphdfqQHsW^k?Y?Q*4XVeT0FZfyCIeO>x1s95vTNeoG3@Hw~
zdm(^ZnOo-QeHH%;0UY_zwMTxqH<0~$zW%4ufdP3l6imnt48Z#5lN$U4ZxGuuUtdr<
zC?IovV4~0<Dl|Y80y&sXdQE@6^WcEO=Mf}H)xlIK4@w|?HY|`cA>grmR<4)MQ-=kR
zFYSXmc*<*dK*?r*KXHbZVEq>8cb0$_2~#`;&hP+^tLd&PPi>84`xoeUl#UF@ZUGZz
zMg|ahyg&-^<kgGpmWBGD(ia0VV+tk;y%@j=)<IDSoj0BxU8sN4V0=K174lCgG(Ld7
zn@uO9xX`gYkh3)CNxW#EeO*r}&TD9q#d=e`TeaZtT2oeX#td8is-JqaUxn5B1(UzD
z#!3>JVHYgX+pC4k1Go^mj+{vV%Zs)qpnPCISg-d`YVcER>hS<wvL;}P*F``=xix_T
zKX)D=F^Fpdfe!-0c@P6ej&yZE?Zl^*<UslN17+pcvH<jcpt7TNF~k+XGWlIVIUZ0G
z--YM~Rf&C_tv_IB6;?W(E@z8dYY~=Rt$$O4QjTu4D18@@35Nh*l)ekdgab(E_FW)+
z9J<j<62u_gw8H`QSU_B)l02w#1UF&0_m?bOq&ga)i&V5$1!#m$2CxS&PqV>m^bWm2
zh>ZmvL5Y)rfLMb;0_<c!uE8MTolXYi8cZZ#gHHzJ8Z0@q2A>RI4ZfMz28go(mVRHq
zrRr=zdi4Nb<<17=DhCqvo()K^4w4JOt1l0740zb7_U!ld6-Ljg!K)awMokS~#h^86
zYEZ_>0lr2}4aztfBy^t|lyNeVB2JzfM4bGcFdM+lx8L2U|5>S;@76*Q{rsTZHw1WS
zHa{2@n_ZC5bbb(<UAi6=;Jc+DzhS`s?_*u7To{x`-gpG{76#=71CS707<4We1Sm?c
z3-T*L-9ezib*>5&tk<~>rC_}-DDSGEFp%nkxMpxCTmTZRZv}JKu<t+7?+CmVl!xHR
zQeyKGWWCmyjT?Xfz_Oq`Jp&1YSQbRI-viSc2|`2|?4>RG%_Yl&^4JDUlvy6ch=?+v
zR<MgyW<^lWYNY>&8^o->o#Q~Qci11d!q2=Tdja4y^WULSfpLIDJ6Ev}x9Yc+tP0BG
zC@@iGRS>%*frG}cX64)TJJYL!(u1O*D6=|<xO#3O1cI0d!JL`)q;2{fGjKSFB+nff
zk03SsXpr5tPrtL`Xi!cyaM8r0K~u!&Aff3|!g`3y;NgiNTfa~LUF8W^hNkC<peYhJ
zK|VcC1d+HI3pa;~pw8(a`}KZ(T-9l3;J}6Mr=5WV35?T@g@Q!Ar>QUQ<q)9G1zGxY
z{l3a`vQq&}Gviz^#qZt|$xGp;IV}pH(Sa9(?A6baUb*PjOEcqQP)2Vk1dNM8d2JOW
zFfNkKj-og;$oC{cyVn7|z*BX_1>t)V7liLgf<cjFfDk~g1hHW7+mb=D{6Y5XUtsO;
zG$<seD7eH9$xGxQp~#?6gO+^n3KAHDLT%b{zZ9e?FqC<}(yPjchGfDKOo$8($%G?F
zhzt!OR`1VM$D|&~p8iUIwqj)H>hRKKq>-VkLq(U7Musp{Z;LKNI5n0P9@JM>jdc~J
zyGUb0(w77kT06&v<c&;_fEXJ>kMUcb=pstW_`cR(>on1YpsPp|T?o30G%+OI5kvqn
zF_bLkjv`1`ktVT|U+bC5Ng?SXz=X)8kaQ6sAu=iCxQHO#L7EZbE}{nrjQk9@a=M8$
z!>ycdBFzX%7lFb+nh}DF;MY@-4Szk9v%>!OAzV)hy&m%V`5PoiJmVG1kWwPvAOQ&w
z(BgF#kg)MZAxsmxY3$|s;U(<)!}`L~B_VlC3?>RKq0atH6arb#a*rUsst<|eBqV9J
z)Q7OU$G(M-pq<UG9MMOW*e()z3Y(B92=kGlzs(jL)w`tM4#{v1Oq6*$g!Snhy%~d4
z@48UVHrqU=pY;URh45y~A*ujr(~$ZfmVZM3uJk`4MZ9_gCWQYJLds{ZD1_F2#KPa}
z^GiPpN#BS}DGGfQf^Xa+3W40rKKowZR=PPPgC}G>i5tRP*eD92JzLqPlltb&){yjS
zNNS?c))2hf89E3HA<zxw{1~!VoYGI}!80MebubIkYKW9QA7bxZ)Mwvw-Z5%$q2BqB
zy!-?bb(|03@)Ko&Kw=`C4;6LgF$s|f4p86uP^=4olO#m0=VFL0`BA^2-9;CbyxPT(
zyaJ6vK)pz<{U8n<3q#tX!kp!Wo<w~-&0hH*Z`5x0lRh^uu&B@|vG6ScRV^fK>)27<
z*l=H6p|}o3Ou*I^rbS*5Bw*_bamGu^f`qblg)Q#o`2iyNd$@Il<-f)uFkwQvzEJ6w
zxSg%JsCQ)DO(StP7$Q=_WBy!r1xTRR7s{>x3H16x*%d^JuBb1RT~SD*WwXUU>g_t>
zH|CA)LQ~atq3jPl1+-m={uoL}3E`0TUSZDr=#Ptv?2p!#@fT0cdxb_80l2D$sXJCf
zb>31?KnE!l2MP4mg;H^lKws@B4ibv5b`&R4D88B$7vK<IQ>b*6;B<%x(y;EOZVmHp
zSyL#p4IqKOrV!Z%`4s4D3Zq@Ph2W_~UsG7r**ZaQEk$qwTbQ#Ktvlcmtz-ND<<;4U
zJYz%Q`a+|jHGsmT2%4yEDO5hSpU5|^cxv!d?9}l9&VEawPvlTRLftKejl`&fgg#pe
z@j4jo)IlPk-BQ@{(?W4rObkS15ZPKNZZPpOGMQP3+hX_g%28lvp^`}4oW7TT1cDv%
z8@E@0CHgqRdtqmxbp9Yw>&`-W5wffZ4gKyy_He*>=+C=d85;H7g)$yMA;|15grlQg
zj}Wz|P|S6r(CZ+b>S%f1Qz+kM!c$%tOZrwHx-^POUYPT|oe3ISyumXxYv^8|8s&4m
zkSRsRgo^VH7`OmC@7M=OfSo7%c#zBB;l)C>w#fKx<waM9&tRv$Q89z5z5JSIlp1`g
zklhh8rnkN13Q>bEISoc3RCI|N%u}>cB5T7+ablQ<6~~RCUBv){kGA81Xgf%t)P`l-
zL2@y)eG^TVqL4N`oU=0QNz7GPUDznJM<$FnJ;C8&BO%^}E}~u-8|H8ScLD+Mu?{#$
zfR7E!EHX%dj}0S>e3Xo^2o2DthL!1IHL(}(Ykz5UWRDaZQ-1rm>b_Q5e8l92G>HHH
zV2SwLM+^RK4tn_ie^8`p`st_Az0!YsrZ2ws(XZOVr$(Oa_0Q@@+0T>A=H7qcV<Oe8
zw!{c~`DZ!U<PzgV4fGH_0<EC*RHsKkLg}et^az<eNSOT8aPjo8*k2NZ_HgR7u-sot
z4#sR+Sne++3qaGt*k9778b~NHD+~v@-IKnT>1kvC-5|xT77wAstg!qD0!YZt3d17E
z4}gRpm=%^EK_HSl-&tXN1Ystf`4v(5g?5{a@v5ii!mym&;9_zw49hGINK~>goD|z2
zkR%jFfFvrRBbtTbh9X~zr*dj93^)3<^)3aSMYNvR*=@^=E}p77w-!32sSEqWJ#rL6
zEp_4S4HA|D*Sc_3XC6Zpk?XDxi|gDVAXy)lp%h3+)`w*%1rn0=VJDO-qG)wRSnRey
zK$jJ+4wP_Q5tgAKo&sq_ScXy{fwUrwQ0gHVc?`Gg!Z{mR$416)1FOPV!+A&@Bg_84
zp4G_kd+z=qEMr-40rf#x#<Cy*^+8zXok610J_v`d<I5tEd}KZd7k03YQJ=+VU^m#F
zCdN~qE*l(u!9`;>I3oj+N`>XS*&tELhA`ajBHC`nL)xBj&ZV&ZMpI*<65JEUE%cdW
zQ*lyxpO}p8K%fuyId%;anERZ`2ojk4Xfk41BvCv)7`AUHH->pC4!TmL$-%H(Oi>C_
z2Wbq*lgG)14`K8wj0ZX&avB3J8gnQtUnc?yh(qCw*!_S6#G!E0=GJSXVvr}o_P|PG
zfv58c7ldr}L|9&aigQ~%5e|q0R*+n(xYYVsG#sOUCd{5}WqeX~#>F5@JmV@tmUt#C
z-)oBVE!3HC`|G$R#>o=TOG^X+$@7jSf`sIG#}YxJ_VZUQF;4CMSy&=l-Nw+m{p_kh
zhWN8%h$so5pB+O4380_J5Py$xO@y=ok(~cTJc(binRCq|R?^n!;vW#fi@5Z@Yl24i
zdG=&mqjmZ75$UeL1mg1%88Lta;`0$i4D{}Cg1UYX+t}9VSTV>Ip)nm4F~ysfC<Bo}
z5uA`wA`>zg)M2b`J7YolFjt0<hDGGr9?C#wSOn2OZWlrX)JW!QZ*-^{8Ij%wOf-FD
zM9x8wKo}X3+cA(N6M?tcCThh9j%79NjqT-QBl1E}g8PoK5nXsikdPT0L9UNJW09Z{
zo4^KiFuGJtaBHO<?*zA28o3D(`D!0TfG{C~{lZC6D@JY-`?-U0x@wXOK^xvl5ovk}
zK4z050TBp;1jM9BvliAV0f8Owbk_WO<4o0b7lQKT(<45oi)jNqJt98f1jT6sJUxPU
z;kh48kUO7k|NaK}(cjN@G3fQ2*%9fjQ3x2bBT4>JJ1}TRJUi01J$I`h2_w?sc6u|O
zo{GoU-6l;3`{jA;Tt}mI)jYQX6BW#h$TtTQe7`&|BHtVYi3;XL@KWjsnx_fcFTY_w
z+Q}H@>GXz+K^x{b-0r3g^BWQQsTs%s<Bdq;rq*>F0vqN!R^HjTp}a04Z__0BhPf^x
z6B{5QQb%?nEDQVPdN!f6(c#8=w^Dj-vOXeTn@lLQQLc}aiuV;k0--*Fc|D(Ay-d(+
zlj|ZlC!1vFcQN)V%yXkr6ioN4?%)4OeAcT^|8$dn)zy}L-Hk?>rwdAoNC|SNWu4pq
z^kU_@NK$;q1W!@Rx=6#u*6Rl5ZZf3pisYP#*ps^(&D8L&2$qpaWFJY)T5WGcIS^sH
zZ!uU6eu_W?4*<9~B46$S3BbJ(yxc>921o=Ndn1JhA|hE#3<@-~&m!vQ5s@sGJjm^f
z$Yil(Az8dXLdoJy6lo=C@*a*TcP8GoPuyy(^-R3ch_N-d8yN#%aO?kcU&Ka7ZZ~?=
zpp2s&`G~_2dAte$RB|{XmpPEIw!@K-xO+q-kAV(H3dMyE$$=v|9BD1m?vlk}I^SkZ
z6@7ye$0K+XbCid^r^XiDVNB=@h8Te)Ur3He<i!<`(CK)jNMx@-0_=DMJN8x>fK*63
z70EdtVKsLem4Q<cBah!BNum3_XCiFXoyNnx&p6Ek7f@#+GEol_P-h}Y)KlmK63sgk
z3D@v_7LjNkjNwcqA}*6i78m->|5-8gaf*~Xi|T)6#4FCa6;VH)b=)%wLFTOEo>OqO
z-g6Q5pI;d_)SPpg4KC)?IcH9R1jM<BJUs>ph;tESXzBDABu<adMV!-PqJ^^OBJ%WD
zvgn#rgien?p)?EbV-1MrY>s*ot8>#ms-Nm(*W3le2n>kgu#RDHy!_r%ExYd?V^V2t
zROW}l#E{iSQTu682)aGbe7`o%mOLMo_tSAV35A}IVh%UwK%ib=#rGQJB`-wf-E&+l
zB5o8ftY>%`G-@Dw;$EYy;lQX&+~8Ue$_$KR>rOWTpb^%HK~bei_Oyoumzss_gL{o5
zrQq;$NP3R)gQ7Tx91E8P8vQuR-gKWa-cvOyD!(ZLE=rAx%5RE*MAf6B@|z+=qDiBo
z_@>B>90TJ%noWJc=ut8{D$`E5zXOQTQ7j`_UIt6Ri|q0PMuXB9qcWj{`!^`_Vie~2
zE$#_H8Q9chyW4M!!%E3y7m2<)GMSLN^Fr{`Q`oH!88?+oiOS=+e8ohWDN!89{gao0
zBc93@K4ko>;nb*nIRTgQP-bcr?r1Y+JZgihof}m;C042Y^C~tzuhLfO43_wo3<^MC
zE(yTosXTgNZWN#Tqc5uviC&l+ZF++>Q{cf5FSfV+!N@8li`@>-1IXfNqbB^d3ETih
z-jIcQ8eL14MCJErz(koPQM|uNuU6zM*elhszfqYw7l-m(b%aB&dgRj^=1bYfJ&n6c
zmPX}^2w<Yj(kRwl$|d45Cf>_oH~h)yQu3yYL)W_BBphVpQ3fx0)id@d<Nk*AE=~|-
z>InzIG!?>YU#p@@i^MvW1$r6l6JqC?{zsqwPo(?*<LUI(&qP}6r(Q<qAblmX-!uKv
z|LBFK10TM$*zJ!P*FThgq|cL2()S_z^~ZNLJEkAO=OV52qt*R-_wDmYHU9vlKyKVG
z{q#SuLG9i9>1XJ}oBT_fv<&^V7rvkQWZ&vukNz`_Z)5iTC)dGZEqWW*v&VWHx8M9A
zK0@gT;=`1E`t|R}KfQ?$Q}&ZP<~08@CdjMby8LRu1YUdJ>c3V4xlccK-J?cvDcUT)
z1%w_zkF1I!BA2#<x8By<{U0^%RvN5#4W<yK)|0_d$c=u(i*TEwO3TE1?4N(P%31hv
zV|oURX40U-D84CLUTF=c?>J%M+8WK-8)ct9ZVU`;jpAti0if{fXWOD|%w+AJhT_)Q
zHplKk0%9B4J-uecFP(iFW&55mDoQ_%%C|PbMWIilcxyAs3xV1mWlj4SsnYFHdGdvO
zWSotYuLisjY<)+RJ=(`;Sh^!Ble@SnhC(}{NbcgY8LES`*%@W?`xtFYcRI5gTol?#
zvl{nyQ3xJpSCswK$EYmb<sy-X*+odAI=GPCQFhy(QQhvSOvM*)AF?}&gblt`0wnm5
zJyAC5&qmAi9=8j~iR_^+*nwNL*gR-gqWJ3T{y!Vr4gZy>5v5m9H2&GBTDH0$vS_tM
z8eheT3EA4Ba1$C3BGKyFqBgf$tKl3$V}cL0uj_BT?<pTzr12CZaUnFcD9YbnClW$K
zi#pszZ}Nl0!{My)v&L<e!;3V2z)Vcy7Df2L6A6*wMeXje-h@+vqtwP0<-BOmc-Cm`
z35+emhm_V70E@rUyTtzTA4Ye*-I5}W-{T@Kz?Kvh@ONp61lW=yxS`ju1p*DFN5_<3
zCnmQ{v$2mMA@yX9v8%|_f^}y`i{FR~+f<B~lb=Eb3DD6o`6*P80397`e>dH?P>Z2p
zEN5Me-?vbUAviW>q{N20n6_LKSmtHp)$$2385@C#LK9*#tpyTr6Jpp&V<l6INyUlm
z<jY1`tBI}%DKs%Av&JX`k%=*61sBjg)ME6YHY=vgwR=o5n&#Hvr-*>?0JbwLCclFR
z5-_u3agnhB37A<itg{p{f<(wTE7ovsOr&FpA=0t4V=^5pS?G>AF{ESX!?!~YC`)4a
zCd(u>-Q%Wv?zN9iHA<D%V2NN51yJo0S9{vJEg|jaQc9y3Geuh#Q&z_886O$A2L}eG
z1vrj4?Yo!7<Q5fAA-*hzEvnF(-Z)woi>`#$bSnbSc{HinF?B^u1iF$3x#ck#=t>p>
z-M3>D=+e=BF-^x+o|s4{fkNl4ipg{mNT{(YCeukE0k<mVq?3xNr`N{B$s7pG{<ZEf
z&@O&$Om1cI6i91hGMxkxNNZ!*#q+D3CAhs7%X!Cs{8eL;+GuwS7Ed=ZOK>e}e@yu@
zrdn^&&CU{evy=1eM)Qm|p6foRaiR;C;vt6VKnyQKxg1pVMGUV{?Wc|}p{>PtG39v7
z9y{Ooy{87hMVI3VH2f|m<6Dpr{4ORhqJTt~e-{fMmt9T_zPC6WQ;*3mmpsTFak^Zx
z=pqX5@*jl~a7t%l%Eg#!|7C&k4^IsUM+>t0Gcmb|DB)IrCWcJ}4LnF_aV8eJcvTCr
zjnK}<)E};D;hb@ti)jHKj*}deg<|JpaCLNLQnE0B7h+m|GYZPUL+||*V^6(ql=b|{
z8A)(4l0P{k2@)Fq6q9$RK?3%t7y?e(2Y^J(_ERi#r>upC*1Saa4y%|~0_swXoqXLW
z>3PYmgfbtO+)8NrT#CsrTb1z4$EBFO3J(&MT#BV`k(Kb<pB%RMW-Gxffh}H%vA-@d
zlD)6EmCz)+5|j4>N_eW|N-QWY*n<Sbl^Ei5(Gt2jb0wDUAuFLNMoM0ZWx87(cqO1}
z<I1lRP1(~-Z}J!6fJ*2kWa3{Xd9kaN(v+%=%PXZQj7n?ch`&XpxKIbOiPL>vS!r#&
z=^gx(6+MhG8^r$a4P*1egWO7JwhfBQ*@iNxWKdkrHjt=fP#jC5sD$p$4~m!FC0piv
zV|Gxy!LO_m-ZHGLL)dGJjr7Aq+&btw&Jec_O3)06%MZVl@C40}I97R42fl!Xr&*^V
z{QFnXVo1E~4tiY|?LdKHtnm_~qH3612PJTZ#bp8qWl+bkc+vr-49&1OBLAg`rvQP_
ze-s<H#HfFGlnX&u8b-Nl(v^l$@sPN82@ybyiX+?=YMRhuR2=VVh)H3}c`_>A>^^=w
zql9ueW7zCEqpE6*TZaWT$HZkC2xU;mn0UkMB`BqE#>6{yw%()H9ZG0pG1V?vYOGOu
zPIWQpLo8F{G9!aRz?d4BAF=`ojH&Soab*M~^qd-R)l=%}gPs(EPK~#I*!qqZ#1gtD
zvB2*9mhtD@o(tSsDDSf%F7p8>gjyEF<;S5wqLu}5ICRk)d8lPUJbRC<B~R9}AYOL2
zwOzO_>{se+{cYnno|-zh7Rvk7#eE{pP@+)Yr!HP1@@^neOI=*%-9Vz2x_F02gp&rz
zuhZ4Vuj_@?%tA{zhpyAr#UJj;m#Grk1J%c``2ba)r`hGN_58MYg1YfYyetP2b=Sw`
zk_8fV*Ha5W6Z&JHw9+nKY5dXi&`MW-KWt{DYcupEu9fcep)YZ*jAOB);HMO4AMu>8
z<0AMeMaflhq?`F^LMa75YvSU=-cP-Yi;rvK(zD|cimr*v5C|kd*TfM59ioV$l)UN&
z`_*@iCzQ4u;_~POTw=!!@fsaS2yKWLhON&j!B|QTduv>YBtFT-%{L=r-?!RW=cxos
z=Oc;&kl*Ucle6AR^0P#xAos@YTi!PsC{=r%?kMGH=)F#NfCR|ict{*1faFpL)hU1|
zrJ#R*T*MC`Fc|xt!2k)#{mx*3gyeo2jLS5COKD*_80YZ=JGsu#9y;i%Kso7yt_tKe
z4>}_PK>!_eMkF254#jguB*ciMQSwk6N6vgi(ljE6#fY>80o23Jkbp$l!_JU^1nOZL
z5{gRG)OAPEu$PV0bs!*l)Rm-hIU1M2DV{>|XdL0)Ph@3j3QkYOl?!pZ?}x@eJvI0(
zRs%c%&MBu|Ac1o#F4sAbz&RDiI!DVrNG$iK;;9SqT%MyQ1`3>xs}Vj!i57m~OdO#p
zeY0M&@Wu_2W^wsSG#btesx%qS#qrIJ|0;?hJ0Dl?7olkyDrlGD%JX*ZR-@EY0~#8G
zAp#VT(D+hZMy4PEc_}U<Q;^X3Qat*6LPVy-;9=6`xLTVKk*VZC?n+!nrjms)X+VM^
zQ~ES5nt~u%9g<M+iS>=f&Kmr3I+3hwNJ2U_l!Hn`5=9~e0SV|K2^r#pgi1pa4TnP|
za`MCwA^y;W4DlrkT{bL%e*B28g=9k7m_*LZgeS4WgF6@fo@Os?GFFAgB=8#M-Ow&W
zk>t39!dUfY<E|R~5*-9Sv>BI>aU@7+GcF<HNRZHGTq4Y52N8pJ(D;NpQFf5zL2g1q
zc93MDgI?ktL|2S6upMnuLYa|J6Rh>e#*H-~93{v;CnaPUiIM=Dl#pR0NGLHW5t?yT
z2^mICPN>tbD&d5YQxY<aBsmdAPEE)#QnD}{(-InPXOe@=hO}1`IrHUo%tDb@6Go|+
zj#-+Ha}wM^wgCatn&T)95@qKkq=y6vrRO9t9qHw%EX|a8?8qlZ^V{d)IEec<Fo~Ps
zZ-RNL3`FKpXOkjjA#Fh-XQfo63?&yN98X<FiYyX}v;_f07CDN5MA=1-A|Qdfh!i2e
zP)3R@PH?}_0R$u$yON~O;)L`IcnZnI31{0^Mt<R~gtCI>Rzpt>ev0wJ1IWFVkh2OT
z<laiiSp^c~^;ROfLXH<PxX~<2sBg>hl03-Sj?qXKjAl7E8tRh<A?@8n&Ii0tigMKk
zsP^52<18Ccr>vHv0|HH3?WhP6Wmh|$0uoiNrcR;n#x@}R-)Gi#qgBiIao)#A2TbB7
zbn&JeNQk_jz;O-b)76F{?c+qwp@jXH?Z#%0|KkMC<mm*qA!)IN-Lli@Sh>Z)0uxwU
z67oX_Ac3`oMtTx?+=f*D&V*gJ(@1!#b~>H{Y?$WGguI9gk{6R-a|Q{Joe6x+nPzlD
zT21#Pn6cZqr)rN2K^}WgLWb5T1c*Hexfp^3#GV8e!!8^G)V>6JX}8g}YM%>1E_9y@
zK`wM(LLRU-<Suky0#PlkrwwU6Jpl8fPxFI-{s$5=xB&^t0|^=2fJAi%63%+skTm@!
z!Fug6u5|y#t(}(AZ`|5xDg7oP_Xdyw#y1HBH>>C+%SIvX=S0pMNl#+2$!6^}9?0Tv
zip0P0q<cL^e?8O}z7W@h_#Xn%Ukg=OZ2xCQdpo?(_(-w8{oJ_G6a1OHBwv3U(O_N?
zCe;xHRJr1q6iBFY#W5+6P~{4l)Lt6XM(Am6a8enXR1+Vuz?a6m7F}MFf7P_-OJj5m
zo{9;CvVa<#l$WwV0%~wlUO@th2{braJTxh;AQ6KmkUAtOuOLYdEMQ1dUO|#901Zjv
z3Q{Ys5(<n+;%^|z()ai6#SVRCG%E+~C_%O{A}MbPG~%`~B8k<!Czl1%XjXO5=v6-2
z6(L&~os^dZ8gW|~ox~*pdV9AK*}_=1@u1PJd~8zsJTM_LHYu;ufCTQ?Bz!x*u>=wH
z@B~)=wQ*hh2}yATMNEiHNT$RUMUW7gki=p7>l8*d!j@8-np9pvM^DM6_jbzd^<Pum
z0;bb6+EGqTN(TiAAWTh42L%%SJ2e@71^r72DPnL3H7%*mOp0Y+@*p=oDOWYgf`gio
zq-CGp{BJ~A-PuVclW3G?s}C71JAn}EJ|1B<%udR8Qb0nd*~zGQB^)HMXD5+~pn24Y
z_LuWmaF3B}hu;vKmz2{8Bn0Or<un2b!Ffq%8a1MA<)WmxB?SUwu*g+`c9)Bi(i`9@
zkQOE7WC97KMM+GiUm<~y7nbXiId8G$-x+uM>ymgQEsL}@-q@w1n!>|IgOa65nQjLY
zmbEmAbUW4<lmYCU?195ZS;?D8nQaFXW!_B6965jYww_HqY&0sZmra8pIk9>&{NG_V
zH^v)gNxT*F*<s@$|MH{}rvo~*F=?=Zbw6VC=(NIV8JK9<3a4ctp~8x!{75cHv}{EZ
zX9nc%8<T$TvJZ|JtvbEyB9OCvH|Y~s?ofsbB@-en0||t8lL*Uta0KYNnzcM?+}wG!
zi$K=9Iw`M_H0Hi`buu6_G9ZDlnsm4wZEF(J)+TcfC0YGZ<JQ1hnh%>OY-~cUThH>2
z86S6A?;wK-<n>PLKti|mN$JHw0(m|4>@yqz4>z&sapNDIH@OJ3(r<DRsCAo?GIDRi
zTepek`fl=FO=uXlC+&^LjfXrH+nu=!Hl()GK+uL8B<kIs#DPXPE(B^<lHL2gabwjk
zw_;j7b~&BWga_cek^!-22g!x7di;t*z*_ev+1BrkyQ=oO5R~}Z>q3wR+3P}(2icnh
z1YSIXQYgDW$^LNCxTD*C7lJaw`;$H~*-!`&`;)~@WJAcK>`yjtVeJuP0FUxjQu!vy
zzB_5`s=-e&g_|gpsQSw7MRF@&IaY?Jfcc6>nD##);a0v%Huwf^g+g~?hye6pQoh$L
zS<vn4B;Lrq1BTHQFGVGDPGSkGN<YxA*W=aQSm)D5m%!m9UXO~Sg-yvqjwact(?+7^
zsN>?mg)T>vGW-MyU5+NP8sU@-GI)5LJb!+=TR&WcN%!xAyD*|vc!+Mt)2k#JdE99v
zo^n}fDj)%ToJ<AozyLB#<@+S7IAfG`{@%r)Vffy~p!&a0%B(A7fbl)~x-V$6(hOPQ
zWX=fo;u+&W@J!OV+}Mm7dNIkP?Y1C*c+qJtNFZKxnhO$$7pb`uXiaEF_0`&UoiiqS
z%4<_{8332qDH-2_givh?@h!RBX4H~_EO^1lR18c>XA34o2BxI51qqRXDaYA1BXan>
zKV2|9U52M*2Z9Mzho_{M1qq1ZDd}ZFl1vI-c8HF~H^<VG%Gs5&XZ&Cc$_-9U;bY)D
z_GnJcpOF&Tm@Pje8#BXc2p$1)MoJDgNI=d=q4h&)`Zgz>=h*5c!}8ocCnc{KgG=m`
zykZOzLUU5`iZMv6ICE0+iZPM=BI}$Kt{A^dv!Xfm&jR+x%f@>>7dUMN6K!4Kv=t=k
zSdfyhgn~pJ3sP7Y$YFq_3|&h8(HfCr|GyxGKU%}<3{(jOmau<aF-~?`;#NXeLzkrF
z{Zf=cB}-EBf7U>fObY+Ah9gTLz?k2BX`Xpo)tfE=1)^`JWQGq#0Ptq2g#YIZNdVx@
z6z+#?BjagKO<HA_d(7>gs#Puq1){6mmXZrum68|VAOnn5Dco+s-~A8<D*VvyoNKQ3
zRDI}TkpKA5#UTIjVM<Od$N=NR6sDH!3&aweSx2vVveRZ4f})7cDS6qtIgcVXr?Mi`
z3K9^TQ*GLElWtD^y@gCV*$%%UxWzGSkf?i$W7r@exaF#0H>W6KXG$cumguHdwbRvr
zf{2}NBPfX2>6kYJ0ko6M`!-m23tVYS<xFK~bo18m-V|OUc!4am1#DY8kW#)**>@YJ
z2VdE9(D4N52OM;eKtGU@ccDN6{Xhz*9OPm_!o?m)rN2()T45w#i2;+MZ{K{8QV*uQ
zJXLg+3)wGIh~C0THC<&Qe)}qrq5$p&t{Lk4HpLE@X2+^;U9BiM_%<b%_7;39eVdY>
zasmnDZ&O$Zf6pOs$?HgpJ!qMKs5#<7kXapZ8%8tbNJ>U1E%;11lET_Sm%KpYlGl+`
zgBQgoLWsuF0UeH{8a~Qj5|=Do@;Z`wY_x}N6G04m98W2&6YbLX^sRmj{|VdLXI@_g
zmhkN;0F2`)8RUS3630`Cay~yna`~36_@{GP&`dg+V)K1ww{9n02wII#x?MqY>10YS
z=#T-#$rM&&di4$(;X|<JQp%4h)-2EbxCTERO=voubGw74)47!V20X+7b1sD#UyL(-
zso`9z*^gJpnU0qDIG<0c7q5=9<U;m>JI<1casDC5$N71o8G7P!iVe*-U+8q%Rf}fm
zWmhelp_d)wZoy~h<rI#h=st1_3ifN+Ed^$mPPN5X8%7hfw)m>4P?%p^91w>K5P@>F
z#W-l{%@Hs`2eJ1H%<8H^E&|QeLB(?0--6H7LB$Qkc?3ux3@XN-TdgBc(}HH|So=}G
z`Jtz3tcyWceaE^O{MFcE`3^5+fHAfh@9@@ACcOn66HT$72%5P{mnkj=UG<$(EYJQ>
z2rZdXEI*P25*Sm8Qzh2q1hxzK9K_DzoPEXi0=!q1AKF>$HR+_xi?1&r{wr3B_=jy9
zf&>a^{<k6Y6syXvVywYsyf7Z_E@mYevq9<ZVkM945`}2%u)7%RTO(cw)ShD2D`Pe;
z-BT>Sf`CG_KJ6(+PUS9M2-@u}X7e)U-3|8^i%%7z5MBA%Ta4|dK!SyTR;)y_v2-ui
z@()&owal7%X|VW_1<KRypU;YM<nRsU7s^B0nc|$`_8+q5*J|KQF+wuh>6TL)&lR(K
z8k=n^&K1jW16;J`T(MlGK|-Z-)C$@umec(Ip_nagY__ZT!Ihy!`Uh8rJj)LxLmz=C
zrzZYX%py(9P8C17G6eOLD??u3Cz8SaJIH{#T+C{km|e;*yD~KMFS{}{^DmPO8Fo3%
z{91ODL~3!2$-M)Z5UDLO#RLWkk=l~{0_#~W0$Ulx9&BnpS24&Hp;<ksMCJ#|`K%sP
zg8aZZnu6uDNDgC{nwk?Thq*E|<%X5WAPr?u&9D*}$P5c3P!ZCmmE>%)S2r_Dyn$&Y
z2o~4kUYS}!L$J|4QEC3CS>?u38NPuFu#Kg0@rn~jfNd<rD!mq;e^D!Ohr2Xqq<!#r
zW_P90u2R0S$yF<HapSX6<v^)Q-wf74i_c7Q9=r38<~Qy3mEstJZfS^T7?%B|YPV}R
zsONLyyyAm$m89H-Qv0!o%~!n@7fNN1f(`91lu82u38@RE7zA8@gAgA6SjyTzYF70A
zu~cRy!R2iEh6G5+{8)-NBq+iH35W7yX+V6%i%5Pt`D1DD27WpzIdnStV`+!$_)UOH
zvZ~9a?88UR>&h>?%2EB7OXW!b3ZbIQrI=pbxN@LsS&M43dsS^(y1q&t_|~Rn;0qE6
zwds)9E`lVPG*(G^bsM_E$Og05tIheH2D=axsSQrcNDXBGF*sc!E*O9W#NagEN$$@P
zU~|LSn8(a#I}LXcXsb8eMIaL#o-S!EJBSvR;pukm`8Vn+$pS~Q8y`12cN*m)&>Aqx
zZ3Y?SsI-h}Ap(R^Y4K4Fv;u3u81~NN=FOePxCnIFV2q1EYrvSa+^<6f2xHQCmx<n~
zs-z%oJnQ^~`J1ZoE&}~;?RXb~qP6j9nRJB+5XPtRhgBQt^t_VRfSLBzC(K{vR?T!V
zC{UZ}V$d2e)7663fSIJlFj_|{X$_cX|NcpHgr{nri$QC^JQsu3fO)PSv<A#0J(kj4
zfl9h7u+%Pl%B)vzT<T)bA7?FfG3c(q(sW4N=YR|_mZovdbeJ#;+yt=GN}EJC_Ql`L
z1Z(qm^T|$N2)9$I&^Hro7mTh1*y)gnVDJ=RcDiM2{{BfN-A`V@KKr|QL#Guk0v-3S
zNXu7sPzDGq(lHT1g9O5gG?qpR2P^61{$2L#zGkOR@45&SiM^YaQ54Dm;oWqitu!$@
zr+hcv;d<*2906zcYuHD9&4)X!aS`aqevR7-I<jAr4vBn3r9wycYtqfj`8P%?>E`oV
z*1Mm1f2XxBLI4PBT?G2ythH&m9f1fC)~4|u4y`qnbT9ftcBY@%zSD;;0=_e&e&{05
zzh8ZrmXS6@fbd}&f8a&`)>uiGrZ=$a{$|@w8(akX*Q*UKLI?;O((+CXM1Zg%oz7Z+
z=LooD{4v|n-|ScQv5Qa$gpXZ>LLhwXwxSRSA5$x;IRY*qZ%ea5&zO%@ZF3>Q7>sRc
znO3b-!hqP87WY}9cNh@c(v_{O`#1#txnoC~HF?&&ziNjI5rGyvTrDDi*x|M#0*D>d
z4oWapD)^_5-D&prv*sP0ce@Z#K<suQqJY?)mf<X90I@rbEAeB5jThkvCCzU9hdH+M
zJ{O}182em|B4F%G%N;_cQUr{B=`22HBIa5Qdycdne9oM&bpF-_i2>x>v<%uRl^8(2
zO$Wuhm>>c2Z5lVfdA6}q!C$E#OS23AV{Yzx%*DXTHrVoV4+;U}SX#br1riv?(s<qK
z9c;PKA$X0kHlw^?tN&|u^!CC}XR0QkN^R!qa*zN_ZARunAO@J)3^s}s;)6tpUz=(0
zLPliEh#|H-&u8!*ddkpLDoJ?%3_o0I3j#_G&d8M>B+v(EWTFNn&<AIbsM#-iJcY9j
zcB0li(0PQbU<wM3a1~4eVuY(;3J@bm!Fu|hYRix|Ig_)%_Pt=X$qh`-;MDdb+RL`2
z#eJrI*I@GwPt{BZ8(gS2Gb7CsB(P^@q9PLl64)~{NZC%H0K6rwwXfMbhnP{N^J^{!
zC2e1G^g|&km60!0f&|8E8Kk5yQZUmhq}iFA_v~iF&F2)qok1{zZ|bS7NWB%TZlw80
z`HGA@QUMcCD>5mOh6M?z6&dW>9^oQ*xQcZhWj@+@m7`26epbB7Q3fOx%E-kXBoJ0*
zu(*$)lwRwQ_CW@(SbsIj9Pa-hgMI(+0Nk2%S;zi0+WbSsx{Qp1zy#8|j0`kD0%=_a
zfd>B@_14ri8<_V+b64dCSB7fekdYsZKpDtv$RL;16P35Y(QGE?+YIxKG5;9-m}(~v
z)CRR{TQkbejGE}h|Bs!GG4HDZM+CTd4$!TRA|L^}l@uWZ1qlP)nhEcOfzl}vG59Ib
zwv4(XBTk7V4|1Po<SCJ4VfVQ`LrDhmrfsNAdouX*um)+?XRKLK0m4y&TDB)6kE&1-
zV0$t+s-km;HWaGu%dmB0&6|4f0{~xfz=h1djQqeeNXYEV$Xl5p5n$}gG`Ww5r$q9Y
za9^hBy*wtA9Eu6|W$wO*Pqj7#@r9Ub?Lfemzi_4+NL2TQGu1%yvQAF44aIebGCXzk
zClH*HE&(Jg`jBHpAc1tqnQ<V2bckjg4*R|Id9X~*_ZjhBL|UB=XS{K~sl?a6kP68t
zO~j@WB%Xp6uZ4j`Hyxo4xDi`HeD(|eD#LnCFuRu?%gC3kz(t{BnM{`6s6Zi5Co*i!
z1oO7ciHv-)4P4H~9GgKewb1u}GC7wrtocjkw7{8+mw!{)8zObiX4vkR%$m}(8TrBo
zxDY-|a{?b+MIoqhKEs}!Xg*kaJ|j24;G)p^4E8sedME_yhYUM5(d=FNgY0qQayHJz
zZsLW|O+RMXQ_Q@%^v8@mU<>iR?T_SB@Zn>~pyPkeuuqxUE&a2LL>t<lGeE*W$17^v
zkTxWnv)FF?vWfq@9Fm38;K}E<)S}^8o_xLm1V(LmR+=bCv}8Co%G~-uLY?7RY+F90
zK(Z~hb6i$woLHXAf}^#J-EE5bs;3Gpu`Zwh%xPR!x<-&(AS&WPkboPP#lPjeM{o1C
zrKZoZ)6>juYSkPUgCh4iS-DR@Az;kO%KxPY35+>etopQWv?XeOR$NK|0m=DUxo&`j
z<ov8$H$d{Tjxo2TUVJ0Vjrk@JoVwZ$GUhk3a(%;7Aia^5>l;WQy^)16zd$|RE~G8b
z=6s&Do6j;mN^p7B$cV0PM_s*Abah)0z+CBcHArBtbh;WOFjrDn^A|bVQLES4d2`KX
zN~d*B-++r2uFJ}FIY=s%m7ik(35<1FTzA6Dg=#zM-j7({`R2bmf8-)i?|zh(7nxB8
z2p?sWViye(2p?s!i#|t-S34rNqhYU^&ni{hT@dQ%?OB-!Ln(l4&jy6g0?DPYjiMoH
zNBz7@4iN}Q?sA3*BqVn^Lj)3%yRyy@wWGZ1emO)S0JPuLfwGMIogu<gAnkXC2qcj9
z(-0v@P}KGz?O-<NLYDnyk@;EC!7P0kgo20m7$NOYRymqg6aQwX*5E^|Gsc)E8}No%
zT?4-G+$aU`Ls{v$K?3|xR$ejyiRI%^HhMHGmJed^<>T9|dL%2B56OevcUif7NEVil
z!&zEBD2i=Q!*L?3+>^K|%^qEB-dzns%q=`ZgHJdO2FZ)cpdKW!Ph{mw0wA$6oXDo{
z=I4_{iu0Hg+00$mcF}a0$C)hdGpzHlM4j1?RV^_WR)FI)nshmnm7fb~&rRb@7AJf3
zb;R~$8RxSsT4&yO<9Sy{GK}+%eWDN`&S&LUIzV!v_8qKA6n1q8X+z6$J}mPjZen9P
zYhkv!&TOe#tv~SckICAPy=nfR5*%8FH{-bH>Oj+JM431?8?(&R+Knia%Hk1f8c`-4
z7f94Jq71X?GYaH7pefq8GG#)Un%F=$cJ5?Fw%Pv|*LKR;THEYdgL0w=AO+BIW%BM0
zNPvzjlXrJOV%W!(6;CJ=cXx<E!>*1mlXrI{2mL(0Oy1p*EC7u!!`&UcQw`-%fR*6{
zx0v7Ed3CwjpfzYm2^t1gChzW`Fl1R7PLiJFvY@7vDY3-E?1pwmlKt_ZVX@-3%^v08
zItVlhQ_5tjt^*&1DP>62(I2IBpy@fCjegr~`pEP$`Q2GCAu_#8&S;RRW_p=C>;nno
znqHQ?nTH)j@~~riS?VSpc1R9|9n;Hh?9Mmr9cV7U!s08;8>(I@lQs<|am%Ei1&L~3
zDU;hwkf`>RGGx?;ki~Z33j-Uo!W`CVjtfC4ojEQ9rF7<$g+y8jB7m4vhO`nT-a1f9
zXC8ZCrCC`u&qbh=&O8@^Qaba>LSkP95g^PfgHwH#*1!%FaxJ#ktTbnP+AscpRb6>t
zRMokkxt$rg=k-~b07B5r$i0)hNmyhFfovoZf-GXOulCjF((=?|>r$=t**1v~0s&lF
z-~^(8K-wUsf~6UZQlM-?qCqMG_Q@)Vpae0bX#nN@zH`oHeE-ewo9}%0oNqhlo_m&*
zj%gO>bwf>Uf(eCQH_-Kqg-oL`ixWv2+S~9yxsd4(eB594t7V}1MxrU4q@hv_3P3>8
z=-pS0Pyyj<N#lmM;cGNPC4xvXn~l(0hD<SvhH`HjD#a)gQcR;kDTea#D4Gr0YKR>R
z{GXp(*JlJMh+2^3P6a?zWvik3O+bj;YWPWc6wL(fGDN?54*=X}S4x#MAG9l_N}3Pa
zWvG4=%#gIpP=i36X1Lb~95m!0kfsOr8tQo5G>Y_n{J!maR%{<4gGM7^5D_T*3}hgj
zB@2iW%?4k;U7r+dHq>^0P{Gt}$Ym#B0(#Hj{r;v;iM?m2u^*^{jIrO{LK3RA-{6&h
z(|-`#Z>UjZnizELH!zCC0v1R@Lk}4IYm#)pP&?v5g`@)pzGjUOOlbZG2A{b@A9?c!
zh8nb{iBk$bFfeG{fV>yRv4yQh;F6L2+YUYJTRmH;)wF@SH?_LWSh7d|UaZY;HHdgZ
z8?~DD-1nwdpE3ATd-VL+8AGko0u@YWC_pjq2qvJ<4F2~$`dzWl{04z4$Y{_s!Gu<y
zGx+#-^gCnceAV<8tv+W!HAR96tv+w?&F|>NvGayH523ec^?3?R8jtp-(7s^s0ekhr
z*abrkT0zC*E*KcJqGtmWe5}LZ&+gTy$2tr(kOmb@9R>!{n1KNk;<MA>?R)jxW1T4`
z+Bw}xObB8yAp*M${{4OMjxOc3L<Lh9WoLZ10mQs%x54Z7>BHmQDLv8g3*Drr1{(C^
zh{bXf%Tv1d>3{i7xrv2vWQRUvhYG%>N&k<G3RATiL=>$s(Plc4y${)879ZBE-<~nc
zl#xS3@XRt%hhGaGpgFv@Sue|&V=6E1BdjpTggpxd53DekXTPf#8FNjgIviVwl5<U{
z4(op*7DlKxH52ouvAz0@yzyOqNE`%t*)jeGceOdtVCQJ8lO2sbZwB7r>^=SSUeB8t
z>WJPmn_9Kl6usxI0I=C&Q)M4OG-t7?x=%pVYO#s#lV(b@sjW5qU<+nSYfP28L4<@F
zQ>AV|Vlve_AV5f{p;l7f%_h&Q<&*a#@7AUykW18>>SHK)AfeVYv&FjyASBe9So<N)
zEXpRhI{D^)ePJ+bwW&HPP*G^LsX8h^;xb|1UDRV_ljiFAlLz!Yx%H{%(ipVfRCB!G
zfrxrDT@HZ(A)?;I5SX%MHu?5CQ@&sTpyWDbZu$=;*O@9&0;1$P(@&Jy)Vz(RTxhZF
z13gl-F;xZXv^J)cN1fJ2Q{_n%grJQk^5k=L9?@tdN;A-A2Gehk^J$yH{gVR^>ZiWd
zYp?0QXpAP?HcQ(M2Y~Qq-?o4d-t5~J5W<_uwzQ^ZG%3Bs<fo756S7)TWyqQ>rkc0`
z6Uwxhm@ml}Wnj$%CjZZm^n$_zew#*%^+E^yHUUD!0aJ}n0U_dmiScOzjmSm=Mh=_W
z$7XWK89ggl1_EjgitG;oQT(u}`a?hzKWwTYHz4}M!)D))P1zq3LG*`5%+UXuvOiQb
zl>5k3{h=bEKm3R3_lKj&M~(-TiGg6X<GzUjQH|rii2)(*_%#!cChusKCY}HQNv$b;
z(AcImr4MqJR^P^8hNM=qF;?V;a-xy5W}qSwOwW(=3x5d@;3JOexAZz|_Aq4h=8%QY
zDGLKY^f_NwfDnDow=f_?pCb#?=i3~z!v&KU9@C%Bx{xYE7QSGr6RW_4G8as2fuIjp
zITWuKP2PG;zbosasiqb|MVX7HI{O?DWiFZ+8KD<I8K5qcKYUy-%<4)#hwRv8s<T|d
zB)E{uDY|k<_m`CF0igOzzUl!{@{+H5K$N_6P4zjX`tpQ~uJ}nkGOj$KQWO3X|Ebgj
z2tnlu6<vT3RGxt5?}6sWL?g2kfh06PRcJnKNizIze9lRIbkEs|9+^`6V@Uf|{PCmu
z%eUe;q*o=BqXI&DRYIjsKuE7jK>02jIEFM<&6l6jZy8jbDnh!iPN?Vt4~kSL5M5Z_
zfFjWSLf&;szawj5st5^Mm{8^d4~i^I(2f=QVlakaZStv4^!K&gT3-*KqNcS8r3XOB
zs7<KRH6RsAphG)L5jlozu_`&MO@Aa<uqq{kW<pk_WROu-CDiv$l!1&@33OB<s>i@6
zk@|$TJ~{Y|J|b9#pE8{B2g=naR5$~oTzx`?Ga$mbKGAo5LWVODL^!Wag#MV2;jCyV
z_gX@Qvmzm!*CqUL9z$7oL*g65TTmoP4sQWbl?@4%wE-b=L&DG6V`vD{ApNQo07_{{
zDTCe=8dA!jH-!e@vA_&T4dhs-sUIF2jWi|#`{7x6B5n6x@<lkrt3KEF^lVJ@h)d5J
zOP;k&dKP{|{5D@_fDpgU_bfn&-$tHAZZeh}Vh118uHP|shhISuAz_DKK|o?ks59>Y
zAz?=X!xQ>^IhGu4H-EET|F7KLDG8*%-3hgW96XS)JCTr|Pyr!fcS0>f97||#LUfM&
zXXo|E;Jpd;5`n)^aIddrK*8#3c`P|wi_~&4fIupI0nvz-R3pgcT6`_zUr1^pEqC^X
zmUE+#ip)SQKmLVYs;%rRXAYjZpg$DkPiM0J{c$MX!w>%K{wJS$Vg?;0JOc+lJtMa2
z@LnDI&0%qYP4YsAjvXWwnf_QQm#i{7Q;d~H0H8jzu^U4SOaM`z*_kTf0a2gXnJ`Ne
zZ3oOHg&oaIp8HB~?mhBorqTz<g5KX%LdX<HGqJ-<EcMETEh4R%+Gm-e^i5)?%O8?U
z(pbM>8HoOKNpfqZ3L%t$gw{+ILVyUN*37=2Wy%mDf(W6u%+T3P8A6JNa-U|Z5K<(X
zgvz84T9GE&fX?{^OMA%*B?sYlH2r=6ISZ95a>@&q$|-=T)C-o%t$+~zf`wNM`mh3s
zO1)qiFIn=-9}!R~c-V`U`tp}cp0LQ0U;Y5_-y-Xp(#Z6SEETHw7t$A5z7yqA7qE=K
zWU@=e_zgMBQq`m`U|Fh~lzx__s!8c*nFSyEj3PBJ8d+`ylDr|#&h}hx`OCEP$P3o+
z4L7q@S!*n11`r`?jit;F2vKV+m|yG-&LbnO<>dp}k*u|;GGzR<7A{Ppr99w4nYGpp
z{n&ya)SX9xxSm%T?D?$qmRb!2BFe0{u9KJI0iw)$3(MQ6<IE$pL1_(u5}dC!K$P6z
zYYkBF`dZ5)g*W^GS_|ek`1%47`fBj?1qcxhzP<n<qJi|a3g<wD@{!rBz=u|He}ct>
zJsT~57i~UiZ2J<6ts1f2Z#-y_wcS@3AY^SPg}qMQPCl9$*<)$VRw#WrFIdr|9_!iI
zb7de&zXt=#@3EBM1ETyMOZhz@Tx^fkw;3)*Gb2P0e*caYYO<u?D;mn}wUpm068wIj
z<#!$VWQP_j)pZO91)2p(b{&AIN{g>qK!|L)=8yRV4+?*rfZtH_L0`Xs(C<NCzkm>Q
z(AO^@l_dSr=BR>b<cJmcs~t?A6z89B3HRf>ogUZop&rZ1JYu2epd*M1=m;W9J7I<B
z8kOsS<w`a|<CPvumL9c2<HZb}{11&gW`&BrLBT_h6UCSJiKTrCdC&UdU>QN;mA9~G
zCZ7I(h3QSV)e7aO#F1UvEZhL^i~HQtzJNH)Hmm9(#|avrfc5xg=Pb3*PE?O{-)@Cw
zrsR<}&s(_u+Lw31(mElJ?!FX7kfaoemg`9p)cU2RZn~5d$nCJyotlyYxfiX_Ksppf
z>hWKeb_Ife;tR(1enH}IWwD1wbX%dkRITV;`;w&&auV_=HZIdM#cOr}g+RG2x{l!h
zFnhVJTp1AcE4Nkd07TJpo4O7Pg#z-fs-!i9O%4vKN);miud-G0022yT*+?FA4sQYJ
zt(w0&l;sSq#-1azDNIBZskT+_07Q{$8@b~utywGpjI6e`y5zTqv9H7T<EKpS_yg5l
zZL8!C2r;W|mD~X#X0@%7J0K!&wQbbdGPx5$CigWql6xgBUn`(wvne?<n_c&<+)b(H
zP@3OltM5l(!gDs+J!O;u;yIga3{xo86;PH>+VTw?040;Q3P?bdOxmi007S{8?Wei|
ziry`@ct<D(KwY+^>OimHTT*SMQQ?+UTWM6d#YRNd{X0Uk5W!{#DwAV!aRYC!k8SKC
zo<+04g=FnhcJhlNHaj@@ly5VTA?=i{i?znY1!<>jI^Kj5ej%Bs&E~61*qXs@sX}Dv
zHe0<GfC+`#Y`hj!%STa!*vVhqhIJT2+iiKn4`h+BcDt`QWse|AwUd$F5s&JD4_qC#
zHk%Kd!1na)uzOsO`_-umVC%HGUdpCrb=o+$gB%A`2<x=_+CCIq-XO6?xsZ(6W%IeE
zY;0DS9g@8ns3_BA_mT7EfGE>tV;$0M;yKWAx6QvSW#hBD?T|b~yHMDz+wLchCd6aO
zZrwIM>e5n(LNeQBn?E>_m1JGELt;HSQSqG1cAET{42Uw9Z7eRNb<Kq|Z2!vUA5CO=
zSzp<>4^*~?M(AJJ85HZ(JQ|^YWsl8MI>1EYRh!>-JDWD>svVN<S11<cU$y%WR%K`^
z|EfJ~xL9*tNb`yneCO?~U{Hl~tq4utS2)*-(ByrEgCewjzmO)}XYrwv*tFrZoRIuT
z3L=Wka&C~fu>hjTEGKIS`#o(P8yAf%b^_a+U^>4p*)WNj!4PdP=O-pJD}wVyXZ)1$
z>!+{*Bh>+?4?X(GkAMEn14Zq^qN1sHO__f0l&RD2y|ZL|>364>+*wlW+=9YCXZ(RF
zZ0N-JqZkbT_^BD#Ise$BPk<b^?<~1v>YdX|r;NXM>i0_SEWWD*1+dQ^2b$s((kE~h
zYW$Ihe~QQd7_5cUOYWUiI=OUuNpbR-sjMs*UF=|y0bLM14q*}Dj<%Fzs(DNqe#w&-
zKu4>&^Bw7KfM_*$u(*eYi-5=|+(}>R$S-O{5MP#R9IUsdjh2dnNT_k}Rgq3*QY8A=
zRO963vkr3maTF9Q9BpFyC%8Lj=QP&-Lm-*u@E`nZg`+-!0}5Vs7&{>9w8FtA400Jj
zILQiUWT`mlhM@R+)CBe%<?L~kf9sOhV~RU?Z(ZsUl(gy`l}N#aN7Om$tr-w9>Kwc^
z%SX_JcAXO&rXC?a9@RPVq3jB+!W&2Fy3x_LCLf>9o(-4br{54t*Nv&CQ1CXUo<ixm
zk)9%zOX<4NiEV{)X`lqLa-j5<6Z)$o2TF>Da&J3oprl9`C~a|Qpme+!O`PK*on21g
zBK-4x==c1da9{r0AFv(KT~2s_SjN+r660=1^TaZqOhD8PSR{!sAk?<o!PL=<&>}GY
zZE})t;F{fFtjW>Dl5Qe{t;xZX?n1!@)a>w+KV;)#&5k;q7PsXHGG3)<;vd)EV4Ix7
zi|%2=&37Fwi*!s>Fum&x9meKjVFNHy*&zpaZg%tczuTiA`Hy=rW1I(y$Vl`*_zyXQ
z#d|M7NIm2XEhZBQhzcKah7~a!3<3;09CrB8ds$BGaH?YT0pzfQipko;>y9{l)P1P^
zkyOR#1IQ7o7y<{9kj6f8c+Gt*H~x{Mj=2UEOdmPe#)tz-hzkyL!bx`Chpkxg6OJZQ
z6_LSq!oe~Bf0vC!t~%=^Pd~t>Yw@$GdeKLavs5p7WkE6Ir*?<mJ%b&Nw>z3}e4>J@
z-O0{jmn9cI`*k>c+JCbvv5r*r>FDVWXXvfSs9LBf8tHNZ75tG0+0?Wy2QN}IUtC1l
zpxe<dJN&%|S#BAA%2bO#pvG>ezuZR;2rYLz_>e&!3kZ+xcFfE0SQ_CGLGF3*(}AL(
z3YYwJph#jH1f_#cR30VqoN`x7q_@Ids~=)t<N?Vj!hf({xvOFoQ1Ggyn1HBLxr^^%
ztH|+ji&CW<c$IH{n7taUbi*0K+i@KdzVx_Smhg7|;!jv415j*24dYK#aE=S>(dVlh
zs4i7}(@)soj4D?XTfc}1o+=kv2dlaPf#&kyOg7S(o021_BnJ}>;6cUax!Ul71NcjQ
zSQ`K7OqLb{K{^BehKzYGoS_Pft-ubCUz%Jo6InEOsjErH1{GXOT}<dum;gfPQg_4z
z;pYTV*`@Bt@w8F_e?wEt_~}R4pp0d%3Kb9`VwsCj`I+E>o7eIokFm#MwXQZw$t5qZ
zb#unBMdVC3kek2Ew?4*}#9mI-g}nS_s>>P41TSC7pM0Es7F+3R*-8@m_(~U_g}w)e
zD~?9ixPiC$Z=PUxCDypuGDKtgV!Ru@=4yX(L+oohp0!xL8xbw}uP4~AgQM2Dp>e{g
z<bRO)M>q7?Hz?4<dKd3TG`J`x2j1vve|DEFWFyJ|(MDi-J|`fQw9&m$4om=1cB6|`
zZsf&)@ZycG^=DUlF%g6pzu~G*O;J#XH(b@JDH3_{8!o(9%q<kdb0V9uQN58r@D%&-
zA^emsj6YDJ&92%x42TMCb_a^whZ>LzZ+4MlWQFLBd9!<KBPv9FD*i`>qImq9ZfFQy
zIi`h5qLHm`pxF)L%CR`#{tohc!!OvgJ-50zlIbPt_)5s-cP0y;W@*7`J6-jL11cW9
z(^cnt0pig+UA%cvPX`E-?sTK_x^sefVGtZ?W7#1o7Ui4VWZf^>_k(3kDY?|7CRfdW
zmxv}cxtRZ!a;cMUa?>UY1L9wjOO)R7m`_DP6Pw&y{f7%CJiN)xznyi_MGCk*>O(hh
z9<BZq7b!ga^W?Ao2cJ}<AG&I7YCmf8A;hB$^Oe715d%<sI1J-Y$Uo%b!yy(#1ERu5
zTx@ok#P|M+-C8{3mot9!6pfs4%=|Y_keA0?6T9S>{S_dD9U+^|qYknkh5k`DIr-O&
z1>;BklmN1zBPF~}A=8g?!bz7u{TsF+e$rLP?Sl%glP(s)h~wV-Q7UM4`S>!{5^r@i
z;kPJDsi2kocBhnuU_a~fk>zYx{H&|V1-Si0w4ZgcmI2ca^h9`GyUPbuu*P^hnk%9d
zRLE*~vC^vm-gH|u@}(Q-a(QP3%S-#x#eyyhtJ^57F1p%3Wmo}17O)&4141JgU3EnW
zAli1(#peq0VnBHDMR(voRag;0gjJ^>R*Hg(boybXNEB9`6jnck(QyOUB{wj~3kB1s
z#CgTeaDU#?8jkRrX0cJxOK#W{8NNT6{<5o$kjs(*Q8{3lMgj4d%apos0B=}az;(st
z8)mWW*cCr@feNN8l)9*^$K_dg7jgM@vsrHJD?d|$D#*x`w6vl>8T4zH|7bQVjD78D
zBZYcF1=H8==p51`m|)MVF5fYm<z-y;yA)8tbd|akTAG53uF#M1SS1^kQSNDDl_1L9
z<z9Y)SnVM$zpCI*R<e><MT&=PSwTFsu>^vUyDRzOO7@;v>1p{&5asSlZ(I?Z34@Q1
zM&@~e=e=P1JxZmg=CDc8c^*DkljX;g<>!0aLS9(K#+Koi+^qmQ)H>fADBnK;(fs)y
zPH!Qb1H$I>y+I2-nM#QuY`(x#sZ>!=mj#|mrHVv0U*N&!xGYKwV_(bfyufNy@C5SP
ziwjt9-g7QH82z0WjtP6Glf4&t+7MxH6A%>x7O!hzKs;iRhg;mRc^43WF5w09SZ>CW
z6c3qu3Gv({cz`&soyTGs+*5<BbYX4oWsg=oXl@NZOguH78U*8ZEtIVBFbFn<9O}n;
zpK6wwvD8xzkuJM&4-P>~qteONwfydCHu>gSPYp3Zgq&Ir{vhjvV0#%x=F8`?ego;<
z8c256INJ`aFMDvpxDW@6zrus_*}#lfJT;=mNr&Kh#Y2Wl2p(kM<-Bk{voe-@Dh=Q~
zHSjF=kOm|V#-l6v9O7A#QUQ%dSC9&B7IH8cUCEo~Gb3ZAr^#UnPK*Q3N)P+)WYsYg
zeU*QE0o3%Wr-}W6XfusOU-hs*P|Cqx!&SU=0W)H&QthHUPF8t2W7&`3r4yo&-+O^|
zeEtIVK=k(>E(##uoIt)=?`f}*Z;mVjgrb1u`9gruRK0hTJhmASCad?54#`6S;i2`O
z{hIPnA_xy%>wBo8pdM>|4^<@c(6!{D9avNz#wAoqFVGb9l7Csq9@nBt-!li0XKudc
znSiJeu=Gqoh~7+IM}tJ%)P!!GSG>r)j5mFig9x5CN#z)xg9oUQ?|Ts`rqNS_RuGBm
z(JKdaKm#ZdZA-c@v1!4KZN3wL3a)MB1cibLzPX(*{VgksZ}*ixK=|f%a;6F?3C_9O
zOJ4ac(}MBcsRxpK?xqKdj%5IKEc-m3u?QW@K2OULc?MK)?elQu<P=!26x)Hkz~4Ro
zuSIN9+IwU|df_M~6Ylr410KC_jN;EPW|1;rX+r!9rR?`j2#BWb_e}^06Ylry1ImO%
z5GH)zH=&}SBJcYqR3tLt`((l`WI|kH^|2Q?i6rx<P&}EogpJgqAA8}OM1r}I%y<-v
zlw*nV8WxEG%2x*b3F${k85GYqk`<46ysm~#iXZdT2p?219rNf`H%iPmlEsdDyw_5;
zAa*>(CCT8rUofGuCp`Z4QuaXngdaRN3Ok<ga6AZIUN|utIqe0`dOU9#yE}T?!!9d|
zjESVyHcvYvB7+}W#v+dZ%6)J66P0Z92FOefhzGTKScgf00SK+Od6{RFR*4|A`l+u~
XML`=r^|h)<q}5NMRX**z;q3ndXl+Cg

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index eb39114c..2f8a81b5 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -965,13 +965,15 @@ const (
 	DenialReason_DENIAL_REASON_ENTITLEMENT_NOT_GRANTED DenialReason = 17 // subscription exists but no buyer-side grant ties this caller to it
 	// Split out of the former single billing-reference reason. An agent hits the
 	// wall at execute, not at register, and "no account here" and "account awaiting
-	// activation" are two different states of the caller with two different
-	// remedies — call Register, which an agent can do unattended, versus wait for
-	// a human. Neither value discloses the Exchange's internal billing state; both
-	// describe the caller's own account, which it may already query with
-	// GetAccountStatus. TransactionDenial.exchange names WHERE to register, so the
+	// activation" are two different states of the agent's account with two
+	// different remedies — call Register, which an agent can do unattended,
+	// versus wait for a human. Neither value discloses the Exchange's internal
+	// billing state; both describe the agent's own account, also on a purchase a
+	// Broker relayed (see "Accounts" in the file header), which the agent may
+	// already query with GetAccountStatus. TransactionDenial.exchange names WHERE
+	// to register, so the
 	// agent converges without fetching a manifest first.
-	DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED DenialReason = 18 // no account exists for this caller at this Exchange — the remedy is to call Register
+	DenialReason_DENIAL_REASON_ACCOUNT_NOT_REGISTERED DenialReason = 18 // no account exists at this Exchange for the requester (the agent, also on a purchase a Broker relayed) — the remedy is for the agent to call Register
 	// The provider that sells this item's resource at this Exchange does not
 	// accept purchases relayed by a Broker (BrokerService.ExecuteTransaction).
 	// Decided PER ITEM, by each offer's own provider, and answered in the body on
@@ -1794,7 +1796,8 @@ type DisputeFailureReason int32
 
 const (
 	DisputeFailureReason_DISPUTE_FAILURE_REASON_UNSPECIFIED DisputeFailureReason = 0 // unset — rejected at ingest
-	// transaction_id names no transaction this Exchange executed for the caller.
+	// transaction_id names no transaction this Exchange recorded under the
+	// caller's account.
 	DisputeFailureReason_DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND DisputeFailureReason = 1
 	// No accepted usage report precedes the dispute: report_id is empty, unknown,
 	// or names a report for another transaction. The agent files the
@@ -4452,8 +4455,9 @@ func (x *Pricing) GetMetering() PricingMetering {
 // not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange
 // verifies identity via the RFC 9421 request signature, then filters its
 // catalog by the requester's scopes. Billing needs nothing from this message:
-// the Exchange resolves the caller's account (RegisterResponse.billing_ref)
-// from the verified signature, never from anything the caller sends.
+// the Exchange resolves the agent's account (RegisterResponse.billing_ref) from
+// what authenticates the agent, never from a value the caller merely states
+// (see "Accounts" in the file header).
 type Requester struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// REQUIRED. A free label the agent chooses for attribution (e.g.
@@ -4495,7 +4499,9 @@ type Requester struct {
 	//     each item's AgentAcceptance, and the AgentRequestAcceptance, against
 	//     the Ed25519 keys currently valid in the directory this field names
 	//     (see AgentRequestAcceptance), never against the Broker's key. Those
-	//     acceptances are the only agent signatures the Exchange sees.
+	//     acceptances are the only agent signatures the Exchange sees, and the
+	//     purchase belongs to the account of the directory they verify under
+	//     (see "Accounts" in the file header).
 	//   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent
 	//     signature, so nothing on that leg authenticates this field: it is the
 	//     Broker's statement, under the Broker's own signature, of whom it
@@ -5221,7 +5227,9 @@ type AgentAcceptancePayload struct {
 	// the key directory the acceptance verifies against. Never empty.
 	RequesterDomain string `protobuf:"bytes,3,opt,name=requester_domain,json=requesterDomain,proto3" json:"requester_domain,omitempty"`
 	// The transaction's idempotency key — binds the acceptance to a single
-	// execute so it cannot be replayed under a different transaction.
+	// execute so it cannot be replayed under a different transaction. The key is
+	// scoped to the agent whatever the route, so an acceptance executes at most
+	// once at an Exchange, however it arrives (see "Idempotency").
 	IdempotencyKey string `protobuf:"bytes,4,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
 	unknownFields  protoimpl.UnknownFields
 	sizeCache      protoimpl.SizeCache
@@ -5298,10 +5306,10 @@ type TransactionRequest struct {
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns
 	// the original result rather than re-executing, and the same key with
-	// different items is refused with already_exists. The key is scoped per
-	// caller: per authenticated agent, and per (Broker, requester) on a purchase
-	// relayed through BrokerService.ExecuteTransaction, where the Broker forwards
-	// the agent's key unchanged. A key another agent or tenant used is never a
+	// different items is refused with already_exists. The key is scoped to the
+	// agent, whatever the route: a purchase repeated directly or through any
+	// Broker the Exchange admits is the same purchase, and the Broker forwards the
+	// agent's key unchanged. A key another agent or tenant used is never a
 	// collision. The full rule is "Idempotency" in the file header. The
 	// transaction's durable identity is the Exchange-assigned transaction_id in
 	// the response.
@@ -5655,8 +5663,8 @@ type TransactionResultItem struct {
 	// "deadline_exceeded" the outcome is unknown: the Exchange may have completed
 	// the purchase before the answer was lost, whether it gave no answer or
 	// answered that code, and retrying the agent's request with the same
-	// idempotency_key through the same Broker settles it (see
-	// UpstreamRefusal.code). With any other code the Exchange answered with a
+	// idempotency_key settles it, on any route: through the same Broker, another
+	// one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a
 	// refusal that decided no item, so the item was not purchased. An Exchange
 	// never sets this field, and a Broker never replaces it with a denial_reason:
 	// an upstream refusal is not a per-item access decision.
@@ -5821,8 +5829,8 @@ type UpstreamRefusal struct {
 	// call failed with ("unavailable", "deadline_exceeded"). A refusal with
 	// either of those codes is an ambiguous outcome: a purchase may have
 	// completed. On a Broker purchase, retrying the agent's request with the same
-	// idempotency_key through the same Broker is answered from each Exchange's
-	// stored result, so it settles the outcome without buying twice.
+	// idempotency_key, on any route, is answered from each Exchange's stored
+	// result, so it settles the outcome without buying twice.
 	Code string `protobuf:"bytes,2,opt,name=code,proto3" json:"code,omitempty"`
 	// The party's typed reason, unchanged — the ErrorDetail it attached to its
 	// refusal. Absent when the party attached none or gave no answer.
@@ -6847,8 +6855,11 @@ func (x *ReportingObligation) GetExtCritical() []string {
 
 // UsageReport — Post-usage report for a completed transaction.
 //
-// Filed by the agent or Broker after resource is used.
-// Failure to report may result in the Exchange blocking subsequent access.
+// Filed by the agent itself after the resource is used, with the Exchange that
+// issued the offer (UsageReport.exchange), for a purchase a Broker relayed as for
+// a direct one: a Broker files no report for an agent (see "Accounts" in the
+// file header). Failure to report may result in the Exchange blocking
+// subsequent access.
 //
 // The report is a record of the quantity consumed (Usage.consumed_quantity).
 // The Exchange accepts it whatever that quantity is: a consumed quantity that
@@ -6860,7 +6871,7 @@ func (x *ReportingObligation) GetExtCritical() []string {
 // USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;
 // a report whose billing_id is not the billing_id of the transaction it names is
 // malformed. A report for a transaction the Exchange recorded under a different
-// agent is answered exactly as a report for an unknown transaction:
+// agent's account is answered exactly as a report for an unknown transaction:
 // USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code
 // not_found, so the answer does not reveal that the transaction exists.
 // The reported quantity is unrestricted: no check on it refuses a report (see
@@ -6872,7 +6883,7 @@ type UsageReport struct {
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
 	// report does not double-count usage; the same key with a different report is
-	// refused with already_exists. Scoped per caller; see "Idempotency" in the
+	// refused with already_exists. Scoped to the agent; see "Idempotency" in the
 	// file header. The report's durable identity is the Exchange-assigned
 	// report_id in UsageReportResponse.
 	IdempotencyKey string `protobuf:"bytes,2,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
@@ -8979,7 +8990,11 @@ func (x *ExchangeOutcome) GetSubscriptionQuota() []*SubscriptionQuotaInfo {
 	return nil
 }
 
-// DisputeRequest — Agent signals a problem with delivered resource.
+// DisputeRequest — Agent signals a problem with delivered resource. Filed by
+// the agent itself, with the Exchange that executed the transaction, for a
+// purchase a Broker relayed as for a direct one: a Broker files no dispute for
+// an agent. The Exchange accepts it only for a transaction recorded under the
+// agent's account (see "Accounts" in the file header).
 type DisputeRequest struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// FORA protocol version — "1.0". Stamped by the sender from a single
@@ -8987,7 +9002,7 @@ type DisputeRequest struct {
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
 	// filing does not open a duplicate case; the same key with a different filing
-	// is refused with already_exists. Scoped per caller; see "Idempotency" in the
+	// is refused with already_exists. Scoped to the agent; see "Idempotency" in the
 	// file header. The dispute's durable identity is the Exchange-assigned
 	// dispute_id in DisputeResponse.
 	IdempotencyKey string `protobuf:"bytes,2,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
@@ -10431,10 +10446,13 @@ func (*ErrorDetail_RequestAuthFailure) isErrorDetail_Reason() {}
 //
 // This is the only case an ExecuteTransaction answer is a non-OK error carrying
 // a DenialReason: the Exchange refuses the request as a whole and decides no
-// item, for a reason about the caller or the request that would deny every item
-// alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its
-// account is not active (ACCOUNT_INACTIVE), it has overdue reports
-// (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is
+// item, for a reason about the requester or the request that would deny every
+// item alike — for example the requester holds no account
+// (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has
+// overdue reports (REPORTING_OVERDUE), or the call is rate limited
+// (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and
+// the account is the agent's, never the Broker's (see "Accounts" in the file
+// header). Nothing is
 // purchased. Every decision about an item is answered in the body instead, on
 // TransactionResultItem.denial_reason, whatever the item count: a denied
 // one-item purchase is a successful response whose one item is denied, never
diff --git a/gen/go/fora/v1/forav1connect/fora.connect.go b/gen/go/fora/v1/forav1connect/fora.connect.go
index 567a7cb4..4e9ae056 100644
--- a/gen/go/fora/v1/forav1connect/fora.connect.go
+++ b/gen/go/fora/v1/forav1connect/fora.connect.go
@@ -730,8 +730,9 @@ type BrokerServiceClient interface {
 	// so each Exchange answers a repeated sub-request from its stored result (see
 	// "Idempotency" in the file header). That is also how an agent settles an
 	// item whose refusal left the outcome unknown (code "unavailable" or
-	// "deadline_exceeded"): it retries the same request, with the same key,
-	// through the same Broker.
+	// "deadline_exceeded"): it retries the same request with the same key,
+	// through the same Broker, another one, or directly. The purchase is the
+	// agent's (see "Accounts" in the file header).
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
@@ -900,8 +901,9 @@ type BrokerServiceHandler interface {
 	// so each Exchange answers a repeated sub-request from its stored result (see
 	// "Idempotency" in the file header). That is also how an agent settles an
 	// item whose refusal left the outcome unknown (code "unavailable" or
-	// "deadline_exceeded"): it retries the same request, with the same key,
-	// through the same Broker.
+	// "deadline_exceeded"): it retries the same request with the same key,
+	// through the same Broker, another one, or directly. The purchase is the
+	// agent's (see "Accounts" in the file header).
 	ExecuteTransaction(context.Context, *connect.Request[v1.TransactionRequest]) (*connect.Response[v1.BrokerTransactionResponse], error)
 }
 
diff --git a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
index 8a339c3e..98670ab5 100644
--- a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
+++ b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.json
@@ -5,7 +5,7 @@
   "properties": {
     "idempotency_key": {
       "default": "",
-      "description": "The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.",
+      "description": "The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction. The key is\n scoped to the agent whatever the route, so an acceptance executes at most\n once at an Exchange, however it arrives (see \"Idempotency\").",
       "type": "string"
     },
     "offer_sig": {
diff --git a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
index 018fff35..d8134a7c 100644
--- a/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
+++ b/gen/jsonschema/fora.v1.AgentAcceptancePayload.schema.strict.json
@@ -6,7 +6,7 @@
   "properties": {
     "idempotency_key": {
       "default": "",
-      "description": "The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.",
+      "description": "The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction. The key is\n scoped to the agent whatever the route, so an acceptance executes at most\n once at an Exchange, however it arrives (see \"Idempotency\").",
       "type": "string"
     },
     "offer_sig": {
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
index 7308e994..18ed6724 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.json
@@ -440,7 +440,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -604,7 +604,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -663,7 +663,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
index ba95fe1d..7cca079d 100644
--- a/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.BrokerTransactionResponse.schema.strict.json
@@ -453,7 +453,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -618,7 +618,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -678,7 +678,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index ae29dc81..490d66b4 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -236,14 +236,14 @@
       "type": "object"
     },
     "fora.v1.Requester": {
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index 41fe1dc4..edf996d9 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -241,14 +241,14 @@
     },
     "fora.v1.Requester": {
       "additionalProperties": false,
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.DisputeRequest.schema.json b/gen/jsonschema/fora.v1.DisputeRequest.schema.json
index 5a7c77bc..533227f2 100644
--- a/gen/jsonschema/fora.v1.DisputeRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DisputeRequest.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.DisputeRequest.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "DisputeRequest — Agent signals a problem with delivered resource.",
+  "description": "DisputeRequest — Agent signals a problem with delivered resource. Filed by\n the agent itself, with the Exchange that executed the transaction, for a\n purchase a Broker relayed as for a direct one: a Broker files no dispute for\n an agent. The Exchange accepts it only for a transaction recorded under the\n agent's account (see \"Accounts\" in the file header).",
   "properties": {
     "billing_id": {
       "default": "",
@@ -30,7 +30,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped to the agent; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json b/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
index 39dc4dd3..43f8c278 100644
--- a/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DisputeRequest.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.DisputeRequest.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "DisputeRequest — Agent signals a problem with delivered resource.",
+  "description": "DisputeRequest — Agent signals a problem with delivered resource. Filed by\n the agent itself, with the Exchange that executed the transaction, for a\n purchase a Broker relayed as for a direct one: a Broker files no dispute for\n an agent. The Exchange accepts it only for a transaction recorded under the\n agent's account (see \"Accounts\" in the file header).",
   "properties": {
     "billing_id": {
       "default": "",
@@ -31,7 +31,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped to the agent; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
index 8fbf50d7..a6b94b37 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.json
@@ -241,7 +241,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
diff --git a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
index 061eb0d9..ef306cad 100644
--- a/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ErrorDetail.schema.strict.json
@@ -249,7 +249,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index fa290530..ba62fb3c 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -85,14 +85,14 @@
   },
   "$id": "fora.v1.Requester.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
   "properties": {
     "delegation": {
       "$ref": "#/$defs/fora.v1.Delegation",
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index ba3b5b5e..700a62d9 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -87,14 +87,14 @@
   "$id": "fora.v1.Requester.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
   "properties": {
     "delegation": {
       "$ref": "#/$defs/fora.v1.Delegation",
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index f8e25625..c9953804 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -126,14 +126,14 @@
       "type": "object"
     },
     "fora.v1.Requester": {
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index 9e8a1855..bbec4623 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -129,14 +129,14 @@
     },
     "fora.v1.Requester": {
       "additionalProperties": false,
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
index 6283318e..d75884f5 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.TransactionDenial.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
   "properties": {
     "exchange": {
       "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
diff --git a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
index 2ccd806d..659abbda 100644
--- a/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionDenial.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.TransactionDenial.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+  "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
   "properties": {
     "exchange": {
       "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index b03c4588..c523d79b 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -697,14 +697,14 @@
       "type": "object"
     },
     "fora.v1.Requester": {
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
@@ -1044,7 +1044,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index b4910623..901f89da 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -711,14 +711,14 @@
     },
     "fora.v1.Requester": {
       "additionalProperties": false,
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
@@ -1064,7 +1064,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
index a29c9175..b9a057b5 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.json
@@ -404,7 +404,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -568,7 +568,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -627,7 +627,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
index a619322e..8a415551 100644
--- a/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResponse.schema.strict.json
@@ -416,7 +416,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -581,7 +581,7 @@
         },
         "refusal": {
           "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
+          "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
         },
         "reporting_obligation": {
           "$ref": "#/$defs/fora.v1.ReportingObligation",
@@ -641,7 +641,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
index 53080b5a..6e43249b 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.json
@@ -362,7 +362,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -445,7 +445,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
@@ -587,7 +587,7 @@
     },
     "refusal": {
       "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
+      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
     },
     "reporting_obligation": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
index a9faa579..74173f03 100644
--- a/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionResultItem.schema.strict.json
@@ -373,7 +373,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -457,7 +457,7 @@
       "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
       "properties": {
         "code": {
-          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+          "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
           "maxLength": 64,
           "minLength": 1,
           "type": "string"
@@ -601,7 +601,7 @@
     },
     "refusal": {
       "$ref": "#/$defs/fora.v1.UpstreamRefusal",
-      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
+      "description": "Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision."
     },
     "reporting_obligation": {
       "$ref": "#/$defs/fora.v1.ReportingObligation",
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
index 75cad0dd..c2312155 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.json
@@ -300,7 +300,7 @@
       "type": "object"
     },
     "fora.v1.TransactionDenial": {
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -417,7 +417,7 @@
   "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
   "properties": {
     "code": {
-      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
       "maxLength": 64,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
index 86b08f71..44b4c9c7 100644
--- a/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UpstreamRefusal.schema.strict.json
@@ -309,7 +309,7 @@
     },
     "fora.v1.TransactionDenial": {
       "additionalProperties": false,
-      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
+      "description": "This is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.",
       "properties": {
         "exchange": {
           "description": "Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.",
@@ -428,7 +428,7 @@
   "description": "UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.",
   "properties": {
     "code": {
-      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice.",
+      "description": "The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice.",
       "maxLength": 64,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.json b/gen/jsonschema/fora.v1.UsageReport.schema.json
index 958394a1..e577a8ba 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.json
@@ -107,7 +107,7 @@
   },
   "$id": "fora.v1.UsageReport.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent itself after the resource is used, with the Exchange that\n issued the offer (UsageReport.exchange), for a purchase a Broker relayed as for\n a direct one: a Broker files no report for an agent (see \"Accounts\" in the\n file header). Failure to report may result in the Exchange blocking\n subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent's account is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
@@ -139,7 +139,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped to the agent; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
index b3dec648..ffa8cdc0 100644
--- a/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
+++ b/gen/jsonschema/fora.v1.UsageReport.schema.strict.json
@@ -111,7 +111,7 @@
   "$id": "fora.v1.UsageReport.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Filed by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
+  "description": "Filed by the agent itself after the resource is used, with the Exchange that\n issued the offer (UsageReport.exchange), for a purchase a Broker relayed as for\n a direct one: a Broker files no report for an agent (see \"Accounts\" in the\n file header). Failure to report may result in the Exchange blocking\n subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent's account is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).",
   "properties": {
     "assets": {
       "description": "Assets that were delivered and used.",
@@ -143,7 +143,7 @@
       "type": "array"
     },
     "idempotency_key": {
-      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse.",
+      "description": "Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped to the agent; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse.",
       "maxLength": 255,
       "minLength": 1,
       "type": "string"
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index e0bd9831..a8008eaa 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -30,7 +30,7 @@ class AgentAcceptance(WireModel):
 class AgentAcceptancePayload(WireModel):
     idempotency_key: str | None = Field(
         '',
-        description="The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.",
+        description='The transaction\'s idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction. The key is\n scoped to the agent whatever the route, so an acceptance executes at most\n once at an Exchange, however it arrives (see "Idempotency").',
     )
     offer_sig: str | None = Field(
         '',
@@ -274,7 +274,7 @@ class DisputeRequest(WireModel):
     )
     idempotency_key: constr(min_length=1, max_length=255) = Field(
         ...,
-        description='Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see "Idempotency" in the\n file header. The dispute\'s durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.',
+        description='Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped to the agent; see "Idempotency" in the\n file header. The dispute\'s durable identity is the Exchange-assigned\n dispute_id in DisputeResponse.',
     )
     reason: DisputeReason = Field(..., description='Reason for the dispute.')
     received_content_hash: str | None = Field(
@@ -1422,7 +1422,7 @@ class Requester(WireModel):
         max_length=260,
     ) = Field(
         ...,
-        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n "Direct and relayed requests" in the file header states:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
+        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n "Direct and relayed requests" in the file header states:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see "Accounts" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
@@ -1640,7 +1640,7 @@ class UsageReport(WireModel):
     )
     idempotency_key: constr(min_length=1, max_length=255) = Field(
         ...,
-        description='Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see "Idempotency" in the\n file header. The report\'s durable identity is the Exchange-assigned\n report_id in UsageReportResponse.',
+        description='Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped to the agent; see "Idempotency" in the\n file header. The report\'s durable identity is the Exchange-assigned\n report_id in UsageReportResponse.',
     )
     timestamp: AwareDatetime | None = Field(
         None, description='When the resource was used (ISO 8601).'
@@ -2108,7 +2108,7 @@ class TransactionRequest(WireModel):
     )
     idempotency_key: constr(min_length=1, max_length=255) = Field(
         ...,
-        description='Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent\'s key unchanged. A key another agent or tenant used is never a\n collision. The full rule is "Idempotency" in the file header. The\n transaction\'s durable identity is the Exchange-assigned transaction_id in\n the response.',
+        description='Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent\'s key unchanged. A key another agent or tenant used is never a\n collision. The full rule is "Idempotency" in the file header. The\n transaction\'s durable identity is the Exchange-assigned transaction_id in\n the response.',
     )
     items: list[TransactionItem] | None = Field(
         None,
@@ -2128,7 +2128,7 @@ class TransactionRequest(WireModel):
 class UpstreamRefusal(WireModel):
     code: constr(min_length=1, max_length=64) = Field(
         ...,
-        description='The Connect code the party answered with, in its wire form, e.g.\n "permission_denied" or "unauthenticated". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party\'s\n call failed with ("unavailable", "deadline_exceeded"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent\'s request with the same\n idempotency_key through the same Broker is answered from each Exchange\'s\n stored result, so it settles the outcome without buying twice.',
+        description='The Connect code the party answered with, in its wire form, e.g.\n "permission_denied" or "unauthenticated". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party\'s\n call failed with ("unavailable", "deadline_exceeded"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent\'s request with the same\n idempotency_key, on any route, is answered from each Exchange\'s stored\n result, so it settles the outcome without buying twice.',
     )
     detail: ErrorDetail | None = Field(
         None,
@@ -2218,7 +2218,7 @@ class TransactionResultItem(WireModel):
     offer_id: str | None = Field('', description='The offer_id this result is for.')
     refusal: UpstreamRefusal | None = Field(
         None,
-        description='Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker\'s whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal\'s code. With the code "unavailable" or\n "deadline_exceeded" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent\'s request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.',
+        description='Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker\'s whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal\'s code. With the code "unavailable" or\n "deadline_exceeded" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent\'s request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.',
     )
     reporting_obligation: ReportingObligation | None = Field(
         None, description='Reporting requirements for this item.'
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index cbba4d15..008a7990 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -12,7 +12,7 @@ export const AccountRegistrationSchema = /* @__PURE__ */ (() => wire(z.object({
 
 export const AgentAcceptanceSchema = /* @__PURE__ */ (() => wire(z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentAcceptance — the agent's DETACHED acceptance signature over an accepted\n Offer. Distinct from the transport (RFC 9421) request signature:\n it is topology-independent and content-bound, so it stays valid no matter how\n many brokers relay the request, and binds the agent to THIS specific offer +\n requester + transaction. It travels in the execute body alongside the\n reflected Offer; the Exchange verifies it against an Ed25519 key currently\n valid in the WBA directory `requester.domain` names, and binds the delivery\n URL to that key (RFC 7638 thumbprint of the acceptance key).\n\nThe acceptance MUST name a requester. Its canonical bytes carry a non-empty\n requester_id and a non-empty requester_domain, taken from the enclosing\n request's Requester. A signer refuses to sign bytes that name an empty\n requester, and a verifier refuses an acceptance whose canonical bytes name\n one, even when the signature over those bytes verifies. Such bytes bind the\n agent's consent to nobody, and on a purchase relayed through\n BrokerService.ExecuteTransaction this acceptance is the only agent signature\n the Exchange sees: the request signature there is the Broker's, which says\n only that the call comes from the Broker and never signs the purchase.\n\n `signature` is a hex-encoded detached Ed25519 signature (NOT a JWS) over the\n CANONICAL SIGNING form of `AgentAcceptancePayload` — RFC 8785 JCS over canonical\n proto-JSON. That form, including the pinned proto-JSON option set, is defined\n once on `Offer.signature` and is the single normative definition; there is no\n second recipe. `AgentAcceptancePayload` carries no signature fields, so the\n clear-then-render step of that definition reduces here to\n JCS(protojson(AgentAcceptancePayload)). Same hex/Ed25519 convention as\n `Offer.signature`; `signature_algorithm` is \"EdDSA\".")))();
 
-export const AgentAcceptancePayloadSchema = /* @__PURE__ */ (() => wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction.").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.").default(""), "requester_id": z.string().describe("Requester label (Requester.id) the acceptance is bound to. Never empty.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason.")))();
+export const AgentAcceptancePayloadSchema = /* @__PURE__ */ (() => wire(z.object({ "idempotency_key": z.string().describe("The transaction's idempotency key — binds the acceptance to a single\n execute so it cannot be replayed under a different transaction. The key is\n scoped to the agent whatever the route, so an acceptance executes at most\n once at an Exchange, however it arrives (see \"Idempotency\").").default(""), "offer_sig": z.string().describe("The accepted Offer's signature (Offer.signature). Anchors the whole signed\n offer without re-serializing its terms/pricing/expiry.").default(""), "requester_domain": z.string().describe("Requester domain (Requester.domain) the acceptance is bound to: the host of\n the key directory the acceptance verifies against. Never empty.").default(""), "requester_id": z.string().describe("Requester label (Requester.id) the acceptance is bound to. Never empty.").default("") }).describe("AgentAcceptancePayload — the canonical signing structure for AgentAcceptance.\n It is NEVER sent on the wire; it exists solely so the signer (SDK) and the\n verifier (Exchange) derive BYTE-IDENTICAL signed bytes from the same proto\n schema. This message fixes the FIELD SET; the byte layout is the canonical\n signing form defined on Offer.signature — RFC 8785 JCS over canonical\n proto-JSON with the pinned option set. Underspecifying either half is the top\n cross-implementation drift risk, so both are pinned normatively.\n\nField provenance when building the payload for an execute request:\n   - offer_sig         = the accepted Offer.signature (the Exchange's hex\n                         signature; transitively binds pricing, terms,\n                         expires_at, and — via the offer — the issuing Exchange)\n   - requester_id      = TransactionRequest.requester.id\n   - requester_domain  = TransactionRequest.requester.domain\n   - idempotency_key   = TransactionRequest.idempotency_key\n For batch mode, requester_* and idempotency_key come from the ENCLOSING\n TransactionRequest (a TransactionItem carries neither); offer_sig is the\n per-item Offer.signature.\n\n requester_id and requester_domain are never empty in an acceptance: a signer\n refuses to build these bytes from a Requester missing either, and a verifier\n refuses bytes that name an empty requester (see AgentAcceptance). The two\n Requester fields are REQUIRED on the wire for the same reason.")))();
 
 export const AgentRequestAcceptanceSchema = /* @__PURE__ */ (() => wire(z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("AgentRequestAcceptance — the agent's topology-independent authorization of\n one complete ordered execute set. A Broker forwards this envelope unchanged\n when it projects a mixed-Exchange request into per-Exchange subrequests\n (BrokerService.ExecuteTransaction).\n Each receiving Exchange verifies the signature, then requires its subrequest\n to equal the complete in-order projection of payload.items whose exchange\n names that Exchange. This is what makes removal, append, and reorder visible\n before request-level idempotency state is claimed.\n\nA subrequest whose items are not exactly that projection — an item dropped,\n an item added, or the items reordered — is refused PER ITEM, IN THE BODY: the\n Exchange answers OK and denies every item of the subrequest with\n DENIAL_REASON_SIGNATURE_INVALID, because the agent's signature does not cover\n what arrived. It is not an INVALID_ARGUMENT error and not a refusal of the\n whole request: the request is well formed, and what fails is the agent's\n signature over the set. The Exchange purchases nothing and claims no\n request-level idempotency state for such a subrequest, so a retry carrying the\n set the agent signed still executes. A direct request from the agent is the\n degenerate projection, the whole set, and is held to the same rule.\n\n A projected subrequest is a NEW HTTP request its sender authors. The party\n that projects — a Broker, or the agent itself when it splits its own\n mixed-Exchange set — computes that subrequest's Content-Digest and signs it\n with its own RFC 9421 request signature. The agent's original RFC 9421\n signature covered the body the agent sent and does not travel with a\n projected body; that is expected, not a gap, and it is why this proof\n exists: like AgentAcceptance, it is a detached body signature that stays\n valid however the request travels. If a delegation rides a projected request,\n the wire signer is the Broker, so the Exchange checks the delegation's holder\n binding (cnf.jkt) against the key each item's AgentAcceptance verifies under,\n not against the wire signer (see Delegation). A Broker is never delegated to\n and never becomes the holder.\n\n The payload names the requester exactly as AgentAcceptancePayload does, with\n the same rule: a non-empty requester_id and requester_domain, which a signer\n refuses to omit and a verifier refuses to accept empty.\n\n The verification key is the agent key published for the requester the signed\n payload names. payload.requester_domain must equal the request's\n requester.domain, and the Exchange accepts the signature only if it verifies\n against an Ed25519 key currently valid in that domain's WBA directory\n ({requester_domain}/.well-known/http-message-signatures-directory), fetched\n under the same SSRF discipline as every directory fetch. The envelope\n carries no keyid, so the verifier tries the currently-valid Ed25519 keys of\n that directory; rotation overlap keeps that set small. When the requester\n itself signed the arriving request, the request-signing key the Exchange\n already resolved is that key, and no second fetch is needed. A signature\n that verifies against a key the requester's domain publishes is what turns\n the claimed requester identity into an authenticated one.")))();
 
@@ -26,7 +26,7 @@ export const AuthMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["AUTH_METHOD
 
 export const AuthorizedExchangeSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the Exchange, in the shape \"Request recipient\" defines\n in the file header."), "endpoint": z.string().describe("FORA ExchangeService endpoint URL.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "relationship": z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"]).describe("Relationship type (mirrors ads.txt DIRECT/RESELLER).") }).describe("AuthorizedExchange — A Exchange authorized to sell this provider's resources.")))();
 
-export const BrokerTransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field. When the Broker itself does not\n understand a key the agent's request lists in ext_critical, every item is\n the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no\n Exchange was contacted.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code \"unavailable\" or \"deadline_exceeded\" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).")))();
+export const BrokerTransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchanges": z.array(z.object({ "agent_identity_hash": z.string().describe("That Exchange's TransactionResponse.agent_identity_hash: the identity the\n retrieval_endpoint of each of its items is bound to. Empty when the\n Exchange refused the sub-request or did not answer.").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange, in the form \"Request recipient\" defines in the\n file header: the offer.exchange its items share."), "offer_ids": z.array(z.string()).max(256).describe("The offer_id of every item sent to this Exchange, in request order.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("That Exchange's TransactionResponse.subscription_quota, unchanged.").optional() }).describe("ExchangeOutcome — the request-level state of one Exchange's answer to the\n sub-request a Broker sent it on BrokerService.ExecuteTransaction: the fields\n of its TransactionResponse that are not per item.")).describe("One per Exchange the Broker contacted, in the order each Exchange first\n appears among the request items.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("One per request item, in request order. A purchase that succeeded, or that\n its Exchange denied per item (denial_reason), is that Exchange's\n TransactionResultItem unchanged. An item whose Exchange refused the whole\n sub-request, or did not answer it, carries that refusal in `refusal`, with\n offer_id set and no other result field. When the Broker itself does not\n understand a key the agent's request lists in ext_critical, every item is\n the Broker's denial, DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION, and no\n Exchange was contacted.").optional(), "totals": z.array(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")).describe("Charged totals, one per currency, in the order each currency first appears\n among the charged items. An item is charged when it carries neither\n denial_reason nor refusal; its cost.amount is added, as an exact decimal,\n into the entry for its cost.currency. Amounts are never summed across\n currencies and never converted: currency conversion is out of scope for\n this version. unit_cost is unset. Empty when no item was charged. An item\n whose refusal carries the code \"unavailable\" or \"deadline_exceeded\" may\n have been charged but is not counted, so totals is then a lower bound of\n what the purchase charged.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("BrokerTransactionResponse — the Broker's combined answer to\n BrokerService.ExecuteTransaction: the independent per-resource purchases it\n made at one or more Exchanges, assembled in request order. Each item is\n atomic and owned by the Exchange that issued its offer, so the combination\n needs no integrity of its own and carries none: no field here is signed, and\n a result item's one signed value is its retrieval_endpoint, signed by the\n issuing Exchange (see BrokerService.ExecuteTransaction).")))();
 
 export const C2PAStatusSchema = /* @__PURE__ */ (() => wire(z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"])))();
 
@@ -48,7 +48,7 @@ export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_RE
 
 export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
 export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
@@ -58,7 +58,7 @@ export const DisputeFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["D
 
 export const DisputeReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"])))();
 
-export const DisputeRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).").default(""), "description": z.string().describe("Human-readable description of the issue.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse."), "reason": z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]).describe("Reason for the dispute."), "received_content_hash": z.string().describe("Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.").optional(), "received_hash_method": z.string().describe("Hash algorithm the agent used").optional(), "report_id": z.string().describe("Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.").default(""), "transaction_id": z.string().describe("Transaction being disputed.").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeRequest — Agent signals a problem with delivered resource.")))();
+export const DisputeRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier from the disputed transaction\n (TransactionResultItem.billing_id).").default(""), "description": z.string().describe("Human-readable description of the issue.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. The dispute's subject identifiers above cannot stand in for\n it: transaction_id, billing_id and report_id are opaque and Exchange-scoped,\n so verifying one means a database lookup, while the recipient check must run\n before any lookup happens."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n filing does not open a duplicate case; the same key with a different filing\n is refused with already_exists. Scoped to the agent; see \"Idempotency\" in the\n file header. The dispute's durable identity is the Exchange-assigned\n dispute_id in DisputeResponse."), "reason": z.enum(["DISPUTE_REASON_CONTENT_MISMATCH","DISPUTE_REASON_DELIVERY_FAILED","DISPUTE_REASON_WRONG_CONTENT","DISPUTE_REASON_EXPIRED_BEFORE_FETCH","DISPUTE_REASON_INCOMPLETE_CONTENT"]).describe("Reason for the dispute."), "received_content_hash": z.string().describe("Evidence: content hash of what was actually received.\n Exchange compares against the hash promised in ResourceIdentity.").optional(), "received_hash_method": z.string().describe("Hash algorithm the agent used").optional(), "report_id": z.string().describe("Must reference a filed UsageReport. The agent MUST file a UsageReport\n (via ReportUsage RPC) and receive a report_id BEFORE filing a dispute.\n This prevents fire-and-forget disputes and ensures the Exchange has\n the complete evidence chain: what was offered, what was transacted,\n what the agent reported using, and what the agent disputes.\n The dispute chain: Transaction → UsageReport → Dispute.").default(""), "transaction_id": z.string().describe("Transaction being disputed.").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeRequest — Agent signals a problem with delivered resource. Filed by\n the agent itself, with the Exchange that executed the transaction, for a\n purchase a Broker relayed as for a direct one: a Broker files no dispute for\n an agent. The Exchange accepts it only for a transaction recorded under the\n agent's account (see \"Accounts\" in the file header).")))();
 
 export const DisputeResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "dispute_id": z.string().describe("Exchange-assigned dispute case identifier.").optional(), "estimated_resolution": z.string().describe("Expected resolution timeline.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "resolution": z.enum(["RESOLUTION_TYPE_CREDIT","RESOLUTION_TYPE_REDELIVERY","RESOLUTION_TYPE_REJECTED","RESOLUTION_TYPE_INVESTIGATION"]).describe("Resolution outcome, populated when the dispute reaches a terminal\n state (RESOLVED, SETTLED, or FINAL). Absent while dispute is in\n progress (FILED, UNDER_REVIEW, ESCALATED, etc.).").optional(), "status": z.union([z.string().regex(new RegExp("^DISPUTE_STATUS_UNSPECIFIED$")), z.enum(["DISPUTE_STATUS_FILED","DISPUTE_STATUS_AUTO_RESOLVED","DISPUTE_STATUS_EVIDENCE_NEEDED","DISPUTE_STATUS_UNDER_REVIEW","DISPUTE_STATUS_ESCALATED","DISPUTE_STATUS_RESOLVED","DISPUTE_STATUS_APPEALED","DISPUTE_STATUS_SETTLED","DISPUTE_STATUS_FINAL"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Current lifecycle status of the dispute. Tracks progression through\n the three-tier resolution process:\n   Tier 1 (automated, <1s): FILED → AUTO_RESOLVED or EVIDENCE_NEEDED\n   Tier 2 (rule-based, <24h): UNDER_REVIEW → RESOLVED\n   Tier 3 (pattern investigation, async): ESCALATED → SETTLED → FINAL\n Losing party may appeal: RESOLVED → APPEALED → back to UNDER_REVIEW.").default(0), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DisputeResponse — Exchange acknowledges the dispute.")))();
 
@@ -154,7 +154,7 @@ export const RequestAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum
 
 export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
 
-export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the caller's account (RegisterResponse.billing_ref)\n from the verified signature, never from anything the caller sends.")))();
+export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).")))();
 
 export const RequesterTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"])))();
 
@@ -168,7 +168,7 @@ export const ResourceIdentitySchema = /* @__PURE__ */ (() => wire(z.object({ "c2
 
 export const ResourceMutabilitySchema = /* @__PURE__ */ (() => wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"])))();
 
-export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
+export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
 
 export const ResourceRefSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")))();
 
@@ -198,23 +198,23 @@ export const TenantFeeRateSchema = /* @__PURE__ */ (() => wire(z.object({ "fee_r
 
 export const TermSemanticsSchema = /* @__PURE__ */ (() => wire(z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"])))();
 
-export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the caller or the request that would deny every item\n alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its\n account is not active (ACCOUNT_INACTIVE), it has overdue reports\n (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.")))();
+export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.")))();
 
 export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
 
-export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped per\n caller: per authenticated agent, and per (Broker, requester) on a purchase\n relayed through BrokerService.ExecuteTransaction, where the Broker forwards\n the agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees.\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
+export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
-export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
+export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
-export const TransactionResultItemSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key through the same Broker settles it (see\n UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")))();
+export const TransactionResultItemSchema = /* @__PURE__ */ (() => wire(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")))();
 
-export const UpstreamRefusalSchema = /* @__PURE__ */ (() => wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key through the same Broker is answered from each Exchange's\n stored result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.")))();
+export const UpstreamRefusalSchema = /* @__PURE__ */ (() => wire(z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("UpstreamRefusal — a peer's refusal of a call made on the caller's behalf: the\n party that refused, the Connect code it answered with, and its typed reason,\n unchanged. It is the one shape for \"a peer refused\", in two places:\n   - A Broker purchase. An Exchange's refusal of a whole sub-request a Broker\n     sent it on BrokerService.ExecuteTransaction is carried in the Broker's\n     response body on each affected item (TransactionResultItem.refusal) instead\n     of being turned into an error of the Broker's own. The party is the\n     Exchange, equal to the refused items' signed offer.exchange, which is the\n     value a caller acts on.\n   - An MCP tool error. An Identity Service tool whose call was refused\n     answers with an error result whose structuredContent is\n     {\"refusal\": UpstreamRefusal}: the party is the Broker or Exchange that\n     refused, or the Identity Service itself when it refused the tool call.\n Like TransactionDenial.exchange, nothing signs it: it is the relaying party's\n report of what the refusing party answered.")))();
 
 export const UsageSchema = /* @__PURE__ */ (() => wire(z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("Usage — How resource was actually used by the AI system.")))();
 
 export const UsageAssetSchema = /* @__PURE__ */ (() => wire(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")))();
 
-export const UsageReportSchema = /* @__PURE__ */ (() => wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped per caller; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent or Broker after resource is used.\n Failure to report may result in the Exchange blocking subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).")))();
+export const UsageReportSchema = /* @__PURE__ */ (() => wire(z.object({ "assets": z.array(z.object({ "package_id": z.string().describe("Package identifier").optional(), "title": z.string().describe("Asset title").optional(), "uri": z.string().describe("Asset URI").default("") }).describe("UsageAsset — A single asset included in the usage report.")).describe("Assets that were delivered and used.").optional(), "billing_id": z.string().describe("Billing record identifier from the delivery (TransactionResultItem.billing_id).").default(""), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this report is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\") — the Exchange that issued\n the offer and therefore holds the reporting obligation. See \"Request\n recipient\" in the file header for the full contract. Promoted from optional:\n an absent or empty value used to skip the recipient check entirely, which\n made the check opt-in for the caller."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed\n report does not double-count usage; the same key with a different report is\n refused with already_exists. Scoped to the agent; see \"Idempotency\" in the\n file header. The report's durable identity is the Exchange-assigned\n report_id in UsageReportResponse."), "timestamp": z.string().datetime({ offset: true }).describe("When the resource was used (ISO 8601).").optional(), "transaction_id": z.string().describe("Transaction ID from the delivery.").default(""), "usage": z.object({ "attribution": z.array(z.object({ "displayed_url": z.string().describe("URL displayed to the user as the attribution link.").optional(), "format": z.enum(["CITATION_FORMAT_LINK","CITATION_FORMAT_FOOTNOTE","CITATION_FORMAT_INLINE"]).describe("How the citation was presented.").optional(), "visible_to_user": z.boolean().describe("Whether the attribution was visible to the end user.").optional() }).describe("AttributionDetail — Structured attribution metadata for usage reporting.")).describe("Structured attribution details for each citation provided.").optional(), "citation_included": z.boolean().describe("Whether citation was included as required by the offer terms.").optional(), "consumed_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("REQUIRED. Actual quantity consumed, in the metering unit from the Offer's Pricing.\n For text: tokens consumed. For video: seconds watched. For data: records accessed.\n\nThe agent reports what it consumed, not what it estimated: an Exchange\n MUST NOT refuse a report because this differs from the estimate, in either\n direction.").optional(), "consumed_unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering unit for consumed_quantity. Must match the Offer's Pricing.unit.\n If omitted, defaults to \"tokens\". Same token format as Pricing.unit:\n a bare registered token or a vendor:namespaced token.").optional(), "displayed_to_user": z.boolean().describe("Whether resource/output was displayed to a human.").optional(), "function": z.array(z.string()).describe("How the resource was used. Standard values: \"ai-train\", \"ai-input\",\n \"ai-index\", \"search\", \"display\". Multiple allowed.\n CoMP-specific values available via fora-comp-v1 extension profile.").optional(), "subfn": z.array(z.string()).describe("Sub-function detail. Standard values: \"training\", \"rag\", \"grounding\",\n \"agent_view\", \"agent_actions\".").optional() }).describe("How the resource was actually used.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("UsageReport — Post-usage report for a completed transaction.\n\nFiled by the agent itself after the resource is used, with the Exchange that\n issued the offer (UsageReport.exchange), for a purchase a Broker relayed as for\n a direct one: a Broker files no report for an agent (see \"Accounts\" in the\n file header). Failure to report may result in the Exchange blocking\n subsequent access.\n\n The report is a record of the quantity consumed (Usage.consumed_quantity).\n The Exchange accepts it whatever that quantity is: a consumed quantity that\n differs from the estimate is never a reason to refuse it.\n\n What refuses a report. A report that arrives after the transaction's\n reporting window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n and the Connect code failed_precondition. A malformed report is refused with\n USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;\n a report whose billing_id is not the billing_id of the transaction it names is\n malformed. A report for a transaction the Exchange recorded under a different\n agent's account is answered exactly as a report for an unknown transaction:\n USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code\n not_found, so the answer does not reveal that the transaction exists.\n The reported quantity is unrestricted: no check on it refuses a report (see\n UsageReportRejectionReason).")))();
 
 export const UsageReportRejectionSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("UsageReportRejection — a usage report could not be accepted.")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 78b63171..28727d51 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -182,8 +182,8 @@ call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each to
 purchased, while `UpstreamRefusal.code` said a timeout may have completed a purchase. They
 now agree. With the code `unavailable` or `deadline_exceeded` the item's outcome is
 unknown, whether the Exchange gave no answer or answered that code, and retrying the
-agent's request with the same `idempotency_key` through the same Broker settles it; with
-any other code the Exchange decided no item, and the item was not purchased.
+agent's request with the same `idempotency_key` settles it, on any route; with any other
+code the Exchange decided no item, and the item was not purchased.
 `BrokerTransactionResponse.totals` does not count an item with an unknown outcome, so it
 is then a lower bound of what the purchase charged. The Broker purchase verbs' doc
 comments in all three SDKs, the Python README, and the transaction-flow, Broker, Identity
@@ -420,9 +420,10 @@ must not refuse a report on it.
 **Idempotency keys are scoped per caller, and a reused key with a different request is
 refused (a behaviour change; no wire change).** The file header gains "Idempotency", the one statement of the
 rule for `TransactionRequest`, `UsageReport` and `DisputeRequest`. A key is scoped to the
-authenticated agent, and to the pair (Broker, requester) on a purchase relayed through
-`BrokerService.ExecuteTransaction`; a key another agent or tenant used is never a
-collision. The same key with the same request is a replay answered from the stored result.
+authenticated agent, whatever the route: a purchase relayed through
+`BrokerService.ExecuteTransaction` shares the agent's scope with a direct one. A key
+another agent or tenant used is never a collision. The same key with the same request is
+a replay answered from the stored result.
 The same key with a different request (for a purchase, different items or another order)
 is refused with the Connect code `already_exists` and an `ErrorDetail` with no typed reason.
 
@@ -595,6 +596,34 @@ a Broker under `ROLE_BROKER`. The transaction-flow, production-architecture, pro
 Broker overview, exchange-manifest, request-flows and threat-model pages state the rule
 or link to it, and no page gives a Broker `ROLE_AGENT` any more.
 
+**A purchase a Broker relays is the agent's (comments and docs; no wire change).** Nothing
+said whose purchase a Broker relays: the account was resolved "from the verified
+signature", which on a relayed purchase is the Broker's, and an idempotency key was scoped
+to the pair (Broker, requester), so one signed consent could execute again through a
+second Broker. The file header gains "Accounts", the one statement of the rule. An
+account at an Exchange belongs to the agent's key directory: every currently valid key it
+publishes acts for the account, a key rotation keeps the account and its `billing_ref`,
+and `Requester.id` never selects one. The Exchange learns the directory only from what
+authenticates it: the request signature on a direct request, the agent's acceptances on a
+relayed purchase. Billing, the account denials (`DENIAL_REASON_ACCOUNT_NOT_REGISTERED`,
+`DENIAL_REASON_ACCOUNT_INACTIVE`, `DENIAL_REASON_REPORTING_OVERDUE`), ownership of the
+transaction, and the right to report on it and dispute it refer to the agent's account,
+and the Exchange keeps the Broker with the transaction record for attribution. The agent
+files its usage reports and disputes with the issuing Exchange itself; a Broker files
+none.
+
+An idempotency key is scoped to the agent whatever the route: a purchase repeated
+directly or through any Broker the Exchange admits is the same purchase, so one signed
+consent executes at most once at an Exchange, however it arrives. The Exchange verifies
+the agent's authorization before it creates idempotency state or answers from it, and a
+replay returns the stored result with the delivery binding it recorded. An unknown
+outcome is settled by retrying with the same key on any route, and a new attempt after a
+stored denial takes a new key and new acceptances.
+
+Docs: the authentication page gains "Accounts", and the transaction-flow, request-flows,
+threat-model and reference pages state the rule. The Broker retry comments in all three
+SDKs and the Python README say a retry may take any route.
+
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
 Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
@@ -733,7 +762,8 @@ The contract now defines that relay.
   re-packaged purchase the delegation holder binding (`cnf.jkt`)
   and `agent_identity_hash` use the key the item's `AgentAcceptance` verifies
   under, not the request signer, which is the Broker. An Exchange scopes a relayed
-  request's idempotency key per Broker, authenticated requester and key.
+  request's idempotency key to the agent the acceptances authenticate, exactly as a
+  direct request's.
 
 SDKs, in all three languages:
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 302250d5..2985e1ed 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -292,6 +292,30 @@ import "fora/v1/vocab.proto";
 // BrokerService.ExecuteTransaction a mismatched requester is always refused.
 // ============================================================================
 
+// ============================================================================
+// Accounts
+//
+// An account at an Exchange belongs to an agent's key directory, the one
+// Requester.domain names. Every currently valid key that directory publishes
+// acts for the account, and a key rotation keeps the account and its
+// billing_ref. The Exchange learns the directory only from what authenticates
+// it: on a request the agent sends itself, the request signature, whose
+// directory Requester.domain must name (see "Direct and relayed requests"); on
+// a purchase a Broker relays through BrokerService.ExecuteTransaction, the
+// agent's acceptances, verified against that directory's keys. Requester.id is
+// an attribution label and never selects an account.
+//
+// A purchase a Broker relays is the agent's. Billing, the account checks
+// (DENIAL_REASON_ACCOUNT_NOT_REGISTERED, DENIAL_REASON_ACCOUNT_INACTIVE,
+// DENIAL_REASON_REPORTING_OVERDUE), ownership of the transaction, and the right
+// to report on it and dispute it all refer to the agent's account, as on a
+// direct purchase. The agent files its usage reports and disputes with the
+// issuing Exchange itself; a Broker files none for it. The Exchange keeps the
+// Broker, the verified request signer, with the transaction record for
+// attribution; no field carries it. Which Brokers an Exchange admits stays its
+// own policy.
+// ============================================================================
+
 // ============================================================================
 // Idempotency
 //
@@ -299,19 +323,30 @@ import "fora/v1/vocab.proto";
 // DisputeRequest — each carry a REQUIRED idempotency_key. The rules for the key
 // are stated here once, and each of those fields points here.
 //
-// Scope. A key is scoped to the caller that authenticated the request, never
-// global. On a request the agent signed itself, the scope is that authenticated
-// agent, the verified RFC 9421 signer. On a purchase relayed through
-// BrokerService.ExecuteTransaction, the verified signer is the Broker, which
-// speaks for many agents, so the scope is the pair (Broker, requester the agent
-// acceptances authenticate). A key that another agent used, that the same agent
-// used through another Broker, or that was used at another tenant of the same
-// Exchange is a different key in a different scope: it is never a collision,
-// and it is never answered from another scope's stored result.
+// Scope. A key is scoped to the agent that authenticated the request, never
+// global: its authenticated key directory, which is also what its account
+// belongs to (see "Accounts"). On a request the agent signed itself, the
+// request signature authenticates it; on a purchase relayed through
+// BrokerService.ExecuteTransaction, the agent's acceptances authenticate the
+// directory Requester.domain names. The route does not change the scope: the
+// same key from the same agent names the same purchase whether it arrives
+// directly or through any Broker the Exchange admits. A key that another agent
+// used, or that was used at another tenant of the same Exchange is a different
+// key in a different scope: it is never a collision, and it is never answered
+// from another scope's stored result.
+//
+// Authorization first. Before it creates idempotency state for a key, or
+// answers from it, the Exchange verifies the agent's authorization: the request
+// signature on a direct request, the acceptances on a relayed purchase, and the
+// AgentRequestAcceptance with its projection whenever it is present. A request
+// that does not prove the agent's authorization creates no idempotency state
+// and is answered from none.
 //
 // Replay. Within one scope, a request that repeats a key with the SAME request
-// is a replay: the recipient answers it with the result it stored for the key
-// and executes nothing again. The same request is, for ExecuteTransaction, the
+// is a replay: the recipient answers it with the result it stored for the key,
+// the delivery binding it recorded included, and executes nothing again,
+// whether the repeat arrives directly or through a Broker. The same request is,
+// for ExecuteTransaction, the
 // same items in the same order (each item's offer.signature), and for
 // ReportUsage and DisputeTransaction the same report or filing, field for
 // field.
@@ -324,8 +359,11 @@ import "fora/v1/vocab.proto";
 //
 // Through a Broker the key is the agent's. The Broker forwards it unchanged on
 // every sub-request, and cannot do otherwise because each AgentAcceptance and
-// the AgentRequestAcceptance sign it, so a retry of the same purchase through
-// the Broker reaches every Exchange as a replay of its sub-request.
+// the AgentRequestAcceptance sign it. A retry of the same purchase therefore
+// reaches every Exchange as a replay of its sub-request, whether it goes through
+// the same Broker, another one the Exchange admits, or directly; that is how an
+// agent settles an outcome left unknown. A new attempt after a stored denial
+// takes a new key, and so new acceptances, because the acceptances sign the key.
 // ============================================================================
 
 // ============================================================================
@@ -2100,8 +2138,9 @@ enum DeliveryMethod {
 // not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange
 // verifies identity via the RFC 9421 request signature, then filters its
 // catalog by the requester's scopes. Billing needs nothing from this message:
-// the Exchange resolves the caller's account (RegisterResponse.billing_ref)
-// from the verified signature, never from anything the caller sends.
+// the Exchange resolves the agent's account (RegisterResponse.billing_ref) from
+// what authenticates the agent, never from a value the caller merely states
+// (see "Accounts" in the file header).
 message Requester {
   // REQUIRED. A free label the agent chooses for attribution (e.g.
   // "agent-research-bot-001"), 1 to 255 characters. Use it to tell apart the
@@ -2145,7 +2184,9 @@ message Requester {
   //     each item's AgentAcceptance, and the AgentRequestAcceptance, against
   //     the Ed25519 keys currently valid in the directory this field names
   //     (see AgentRequestAcceptance), never against the Broker's key. Those
-  //     acceptances are the only agent signatures the Exchange sees.
+  //     acceptances are the only agent signatures the Exchange sees, and the
+  //     purchase belongs to the account of the directory they verify under
+  //     (see "Accounts" in the file header).
   //   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent
   //     signature, so nothing on that leg authenticates this field: it is the
   //     Broker's statement, under the Broker's own signature, of whom it
@@ -2558,7 +2599,9 @@ message AgentAcceptancePayload {
   string requester_domain = 3;
 
   // The transaction's idempotency key — binds the acceptance to a single
-  // execute so it cannot be replayed under a different transaction.
+  // execute so it cannot be replayed under a different transaction. The key is
+  // scoped to the agent whatever the route, so an acceptance executes at most
+  // once at an Exchange, however it arrives (see "Idempotency").
   string idempotency_key = 4;
 }
 
@@ -2579,10 +2622,10 @@ message TransactionRequest {
 
   // Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns
   // the original result rather than re-executing, and the same key with
-  // different items is refused with already_exists. The key is scoped per
-  // caller: per authenticated agent, and per (Broker, requester) on a purchase
-  // relayed through BrokerService.ExecuteTransaction, where the Broker forwards
-  // the agent's key unchanged. A key another agent or tenant used is never a
+  // different items is refused with already_exists. The key is scoped to the
+  // agent, whatever the route: a purchase repeated directly or through any
+  // Broker the Exchange admits is the same purchase, and the Broker forwards the
+  // agent's key unchanged. A key another agent or tenant used is never a
   // collision. The full rule is "Idempotency" in the file header. The
   // transaction's durable identity is the Exchange-assigned transaction_id in
   // the response.
@@ -2750,8 +2793,8 @@ message TransactionResultItem {
   // "deadline_exceeded" the outcome is unknown: the Exchange may have completed
   // the purchase before the answer was lost, whether it gave no answer or
   // answered that code, and retrying the agent's request with the same
-  // idempotency_key through the same Broker settles it (see
-  // UpstreamRefusal.code). With any other code the Exchange answered with a
+  // idempotency_key settles it, on any route: through the same Broker, another
+  // one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a
   // refusal that decided no item, so the item was not purchased. An Exchange
   // never sets this field, and a Broker never replaces it with a denial_reason:
   // an upstream refusal is not a per-item access decision.
@@ -2789,8 +2832,8 @@ message UpstreamRefusal {
   // call failed with ("unavailable", "deadline_exceeded"). A refusal with
   // either of those codes is an ambiguous outcome: a purchase may have
   // completed. On a Broker purchase, retrying the agent's request with the same
-  // idempotency_key through the same Broker is answered from each Exchange's
-  // stored result, so it settles the outcome without buying twice.
+  // idempotency_key, on any route, is answered from each Exchange's stored
+  // result, so it settles the outcome without buying twice.
   string code = 2 [(buf.validate.field).string = {min_len: 1, max_len: 64}];
 
   // The party's typed reason, unchanged — the ErrorDetail it attached to its
@@ -2870,13 +2913,15 @@ enum DenialReason {
 
   // Split out of the former single billing-reference reason. An agent hits the
   // wall at execute, not at register, and "no account here" and "account awaiting
-  // activation" are two different states of the caller with two different
-  // remedies — call Register, which an agent can do unattended, versus wait for
-  // a human. Neither value discloses the Exchange's internal billing state; both
-  // describe the caller's own account, which it may already query with
-  // GetAccountStatus. TransactionDenial.exchange names WHERE to register, so the
+  // activation" are two different states of the agent's account with two
+  // different remedies — call Register, which an agent can do unattended,
+  // versus wait for a human. Neither value discloses the Exchange's internal
+  // billing state; both describe the agent's own account, also on a purchase a
+  // Broker relayed (see "Accounts" in the file header), which the agent may
+  // already query with GetAccountStatus. TransactionDenial.exchange names WHERE
+  // to register, so the
   // agent converges without fetching a manifest first.
-  DENIAL_REASON_ACCOUNT_NOT_REGISTERED = 18;         // no account exists for this caller at this Exchange — the remedy is to call Register
+  DENIAL_REASON_ACCOUNT_NOT_REGISTERED = 18;         // no account exists at this Exchange for the requester (the agent, also on a purchase a Broker relayed) — the remedy is for the agent to call Register
 
   // The provider that sells this item's resource at this Exchange does not
   // accept purchases relayed by a Broker (BrokerService.ExecuteTransaction).
@@ -3082,8 +3127,9 @@ service BrokerService {
   // so each Exchange answers a repeated sub-request from its stored result (see
   // "Idempotency" in the file header). That is also how an agent settles an
   // item whose refusal left the outcome unknown (code "unavailable" or
-  // "deadline_exceeded"): it retries the same request, with the same key,
-  // through the same Broker.
+  // "deadline_exceeded"): it retries the same request with the same key,
+  // through the same Broker, another one, or directly. The purchase is the
+  // agent's (see "Accounts" in the file header).
   rpc ExecuteTransaction(TransactionRequest) returns (BrokerTransactionResponse);
 }
 
@@ -3432,8 +3478,11 @@ message ReportingObligation {
 
 // UsageReport — Post-usage report for a completed transaction.
 //
-// Filed by the agent or Broker after resource is used.
-// Failure to report may result in the Exchange blocking subsequent access.
+// Filed by the agent itself after the resource is used, with the Exchange that
+// issued the offer (UsageReport.exchange), for a purchase a Broker relayed as for
+// a direct one: a Broker files no report for an agent (see "Accounts" in the
+// file header). Failure to report may result in the Exchange blocking
+// subsequent access.
 //
 // The report is a record of the quantity consumed (Usage.consumed_quantity).
 // The Exchange accepts it whatever that quantity is: a consumed quantity that
@@ -3445,7 +3494,7 @@ message ReportingObligation {
 // USAGE_REPORT_REJECTION_REASON_MALFORMED and the Connect code invalid_argument;
 // a report whose billing_id is not the billing_id of the transaction it names is
 // malformed. A report for a transaction the Exchange recorded under a different
-// agent is answered exactly as a report for an unknown transaction:
+// agent's account is answered exactly as a report for an unknown transaction:
 // USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND and the Connect code
 // not_found, so the answer does not reveal that the transaction exists.
 // The reported quantity is unrestricted: no check on it refuses a report (see
@@ -3457,7 +3506,7 @@ message UsageReport {
 
   // Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
   // report does not double-count usage; the same key with a different report is
-  // refused with already_exists. Scoped per caller; see "Idempotency" in the
+  // refused with already_exists. Scoped to the agent; see "Idempotency" in the
   // file header. The report's durable identity is the Exchange-assigned
   // report_id in UsageReportResponse.
   string idempotency_key = 2 [
@@ -4485,7 +4534,11 @@ message ExchangeOutcome {
 //        → DisputeRequest (transaction_id + report_id) → DisputeResponse
 // ============================================================================
 
-// DisputeRequest — Agent signals a problem with delivered resource.
+// DisputeRequest — Agent signals a problem with delivered resource. Filed by
+// the agent itself, with the Exchange that executed the transaction, for a
+// purchase a Broker relayed as for a direct one: a Broker files no dispute for
+// an agent. The Exchange accepts it only for a transaction recorded under the
+// agent's account (see "Accounts" in the file header).
 message DisputeRequest {
   // FORA protocol version — "1.0". Stamped by the sender from a single
   // constant; advisory on receive. See "Protocol version" in the file header.
@@ -4493,7 +4546,7 @@ message DisputeRequest {
 
   // Idempotency key (REQUIRED). The server MUST dedupe on this so a replayed
   // filing does not open a duplicate case; the same key with a different filing
-  // is refused with already_exists. Scoped per caller; see "Idempotency" in the
+  // is refused with already_exists. Scoped to the agent; see "Idempotency" in the
   // file header. The dispute's durable identity is the Exchange-assigned
   // dispute_id in DisputeResponse.
   string idempotency_key = 2 [
@@ -4823,8 +4876,11 @@ message DomainVerificationResult {
 // To transact for paid content it must REGISTER: the Exchange creates the
 // agent's account and mints billing_ref — the opaque, long-lived,
 // per-Exchange account handle. The agent never has to carry billing_ref
-// afterwards; the Exchange resolves the account from the verified request
-// signature on every call, never from anything the caller sends.
+// afterwards; the Exchange resolves the account on every call from what
+// authenticates the agent, never from anything the caller merely states: the
+// request signature on the account RPCs, which the agent always sends itself,
+// and the agent's acceptances on a purchase a Broker relays (see "Accounts" in
+// the file header).
 //
 // Whether the Exchange inspects the business payload (registration_data)
 // follows its manifest — see AccountRegistration.data_schema, which states that
@@ -5258,10 +5314,13 @@ message ErrorDetail {
 //
 // This is the only case an ExecuteTransaction answer is a non-OK error carrying
 // a DenialReason: the Exchange refuses the request as a whole and decides no
-// item, for a reason about the caller or the request that would deny every item
-// alike — for example the caller holds no account (ACCOUNT_NOT_REGISTERED), its
-// account is not active (ACCOUNT_INACTIVE), it has overdue reports
-// (REPORTING_OVERDUE), or it is rate limited (RATE_LIMITED). Nothing is
+// item, for a reason about the requester or the request that would deny every
+// item alike — for example the requester holds no account
+// (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has
+// overdue reports (REPORTING_OVERDUE), or the call is rate limited
+// (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and
+// the account is the agent's, never the Broker's (see "Accounts" in the file
+// header). Nothing is
 // purchased. Every decision about an item is answered in the body instead, on
 // TransactionResultItem.denial_reason, whatever the item count: a denied
 // one-item purchase is a successful response whose one item is denied, never
@@ -5462,7 +5521,8 @@ message RegistrationFieldError {
 // later found unsupported ends as RESOLUTION_TYPE_REJECTED, not as a refusal.
 enum DisputeFailureReason {
   DISPUTE_FAILURE_REASON_UNSPECIFIED = 0;  // unset — rejected at ingest
-  // transaction_id names no transaction this Exchange executed for the caller.
+  // transaction_id names no transaction this Exchange recorded under the
+  // caller's account.
   DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND = 1;
   // No accepted usage report precedes the dispute: report_id is empty, unknown,
   // or names a report for another transaction. The agent files the
diff --git a/sdk/go/connect/broker.go b/sdk/go/connect/broker.go
index 5e2b42b3..a52263f1 100644
--- a/sdk/go/connect/broker.go
+++ b/sdk/go/connect/broker.go
@@ -176,7 +176,9 @@ func (b *BrokerClient) discoveryResult(ctx context.Context, msg *forav1.Discover
 // unchanged. A refusal whose code is "unavailable" or "deadline_exceeded" leaves
 // the item's outcome unknown — the Exchange may have bought it before the answer
 // was lost — and Totals does not count it; retry the same request with the same
-// idempotency key through the same Broker to settle it. Only the Broker's own refusals — a bad signature, a malformed
+// idempotency key to settle it, through this Broker, another one or directly:
+// each Exchange scopes the key to the agent whatever the route. Only the Broker's
+// own refusals — a bad signature, a malformed
 // request, an Exchange it cannot route to or does not approve — return an error,
 // and then nothing was bought.
 //
diff --git a/sdk/go/connectserver/verify.go b/sdk/go/connectserver/verify.go
index 42efe7e1..b5f943b1 100644
--- a/sdk/go/connectserver/verify.go
+++ b/sdk/go/connectserver/verify.go
@@ -73,8 +73,8 @@ func (cfg serverConfig) reject(w http.ResponseWriter, r *http.Request, err error
 //
 // The replay nonce is PER VERIFIED SIGNATURE — keyid plus the signature bytes —
 // never the body digest: an idempotent retry re-signs the same body with a
-// fresh window and must pass the transport gate (the handler dedups per
-// verified signer via idempotency_key and returns the original result), while
+// fresh window and must pass the transport gate (the handler dedups per agent
+// via idempotency_key and returns the original result), while
 // replaying the exact signed bytes trips the store. The check is two-phase —
 // read-only Seen over every signature, then SeenOrAdd commits them all — so a
 // request rejected part-way never burns its other signatures' nonces.
diff --git a/sdk/go/connectserver/verify_semantics_test.go b/sdk/go/connectserver/verify_semantics_test.go
index 0369e7ab..08ec4f54 100644
--- a/sdk/go/connectserver/verify_semantics_test.go
+++ b/sdk/go/connectserver/verify_semantics_test.go
@@ -11,7 +11,7 @@ package connectserver_test
 //  2. REPLAY NONCE — the replay guard keys on the SIGNATURE (per verified
 //     signature: keyid + signature bytes), never on the body digest. An
 //     idempotent retry re-signs the same body with a fresh created window and
-//     MUST pass the transport gate (the handler dedups per verified signer via
+//     MUST pass the transport gate (the handler dedups per agent via
 //     idempotency_key and returns the original result); replaying the exact
 //     signed bytes MUST still be rejected.
 
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 63834e10..3584bf99 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -477,7 +477,8 @@ affected items carry `refusal` with that Exchange's code and typed reason, and t
 items come back unchanged. A refusal whose code is `unavailable` or `deadline_exceeded`
 leaves the item's outcome unknown, since the Exchange may have bought it before the answer
 was lost, and `totals` does not count it; retry the same request with the same idempotency
-key through the same Broker to settle it. The signer must set `signature_agent`, and its directory host
+key to settle it, through this Broker, another one or directly: each Exchange scopes the key
+to the agent whatever the route. The signer must set `signature_agent`, and its directory host
 must be `requester.domain`: a Broker refuses any other pairing, so the client refuses it
 first, as `MALFORMED`. `Client.execute` with offers from more than one Exchange is refused
 the same way; buy those through the Broker.
diff --git a/sdk/python/fora_sdk/client/_verbs.py b/sdk/python/fora_sdk/client/_verbs.py
index 2bd26cd2..ca59b16d 100644
--- a/sdk/python/fora_sdk/client/_verbs.py
+++ b/sdk/python/fora_sdk/client/_verbs.py
@@ -481,7 +481,8 @@ def finish_broker_execute(plan: Plan, status: int, body: str) -> BrokerTransacti
     Exchanges' items come back unchanged. A refusal whose code is ``unavailable`` or
     ``deadline_exceeded`` leaves the item's outcome unknown — the Exchange may have bought
     it before the answer was lost — and ``totals`` does not count it; retry the same
-    request with the same idempotency key through the same Broker to settle it. Only the
+    request with the same idempotency key to settle it, through this Broker, another one
+    or directly: each Exchange scopes the key to the agent whatever the route. Only the
     Broker's own refusals raise.
     """
     return decode(  # type: ignore[no-any-return]
diff --git a/sdk/ts/client/index.ts b/sdk/ts/client/index.ts
index cd228697..34034334 100644
--- a/sdk/ts/client/index.ts
+++ b/sdk/ts/client/index.ts
@@ -475,7 +475,8 @@ async function execute(
  * Exchanges' items come back unchanged. A refusal whose code is "unavailable" or
  * "deadline_exceeded" leaves the item's outcome unknown — the Exchange may have bought it
  * before the answer was lost — and `totals` does not count it; retry the same request with
- * the same idempotency key through the same Broker to settle it. Only the Broker's own
+ * the same idempotency key to settle it, through this Broker, another one or directly:
+ * each Exchange scopes the key to the agent whatever the route. Only the Broker's own
  * refusals throw, and then nothing was bought.
  */
 async function brokerExecute(
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 205835c1..f47b849d 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -344,7 +344,7 @@ This is ongoing verification, not just onboarding. Providers can revoke authoriz
 
 ## ExecuteTransaction
 
-The critical path. Stateless offer verification — no offer storage or re-resolution. A request carries one or more `items` (items-only model): each item presents the FULL signed offer it was issued, and the Exchange verifies that presented offer against its own offer-signing key. A single offer is the degenerate 1-element `items` list. Per item the pipeline is: validate -> verify the presented offer's signature (Ed25519 default) -> check idempotency -> authorize billing -> write transaction log -> sign URL -> respond. Before the idempotency check, a request that carries `agent_request_acceptance` has that set claim verified first — the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange (see [Projected execute requests](/protocol/authentication/#projected-execute-requests)). Idempotency state is never created or served for a request whose set claim failed.
+The critical path. Stateless offer verification — no offer storage or re-resolution. A request carries one or more `items` (items-only model): each item presents the FULL signed offer it was issued, and the Exchange verifies that presented offer against its own offer-signing key. A single offer is the degenerate 1-element `items` list. Per item the pipeline is: validate -> verify the presented offer's signature (Ed25519 default) -> check idempotency -> authorize billing -> write transaction log -> sign URL -> respond. Before the idempotency check the Exchange verifies the agent's authorization: the request signature on a direct request, the item acceptances on a sub-request a Broker re-packaged, and, when the request carries `agent_request_acceptance`, that set claim — the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange (see [Projected execute requests](/protocol/authentication/#projected-execute-requests)). Idempotency state is never created or served for a request that fails it, and the key is scoped to the agent's [account](/protocol/authentication/#accounts), whatever route the request took.
 
 ```mermaid
 sequenceDiagram
@@ -361,10 +361,11 @@ sequenceDiagram
     Note over Handler: Validate request
     Note over Handler: Reject unless EVERY items[].offer.exchange names this Exchange's own domain (INVALID_ARGUMENT)
     Note over Handler: Verify the sender's RFC 9421 HTTP Message Signature<br/>(the agent's, or the Broker's on a re-packaged sub-request)
-    Note over Handler: Verify agent_request_acceptance (projection for this Exchange)
-    Note over Handler: Check idempotency key
+    Note over Handler: Verify the agent's authorization: agent_request_acceptance and its projection,<br/>and on a re-packaged sub-request the item acceptances
+    Note over Handler: Resolve the agent's account (direct: the signer's directory;<br/>relayed: requester.domain, once the acceptances verify)
+    Note over Handler: Check idempotency key, scoped to the agent
 
-    Handler->>Idemp: Check(idempotency_key)
+    Handler->>Idemp: Check(agent, idempotency_key)
     alt Already processed
         Idemp-->>Handler: cached TransactionResponse
         Handler-->>Agent: TransactionResponse (replay)
@@ -398,7 +399,7 @@ sequenceDiagram
         Note over BA: Confirm transaction in billing system
     end
 
-    Handler->>Idemp: Store(idempotency_key, response)
+    Handler->>Idemp: Store(agent, idempotency_key, response)
 
     Handler-->>Agent: TransactionResponse{items}
 ```
@@ -407,9 +408,9 @@ sequenceDiagram
 
 ### Handler Implementation
 
-A transaction carries one or more `items` (items-only model): there is no single-offer request shape. The handler validates, verifies the requester's RFC 9421 identity, checks idempotency once for the whole request, then **always** iterates `req.Msg.Items` — a single offer is simply a 1-element list. Each item presents the FULL signed offer it received at discovery; the Exchange verifies that presented `item.Offer` against its own offer-signing key (stateless, no reconstruct-from-catalog) and reads pricing, delivery, and domain from `item.Offer` itself.
+A transaction carries one or more `items` (items-only model): there is no single-offer request shape. The handler validates, verifies the requester's RFC 9421 identity (and, on a sub-request a Broker re-packaged, the agent's acceptances), resolves the agent's account, checks idempotency once for the whole request under that agent, then **always** iterates `req.Msg.Items` — a single offer is simply a 1-element list. Each item presents the FULL signed offer it received at discovery; the Exchange verifies that presented `item.Offer` against its own offer-signing key (stateless, no reconstruct-from-catalog) and reads pricing, delivery, and domain from `item.Offer` itself.
 
-**Denial semantics**: every per-item denial is answered **in the body**, whatever the item count. The request returns 200 with the denied item's `denial_reason` set, so surviving items still commit, and a one-item request that is denied is a 200 whose only item is denied. A non-OK error carrying `ErrorDetail.transaction_denial` is produced only for a refusal of the **whole request** that decides no item — a reason about the caller that would deny every item alike, such as overdue reports. `transactionDenied(...)` produces that whole-request error; the loop records every per-item denial in the body.
+**Denial semantics**: every per-item denial is answered **in the body**, whatever the item count. The request returns 200 with the denied item's `denial_reason` set, so surviving items still commit, and a one-item request that is denied is a 200 whose only item is denied. A non-OK error carrying `ErrorDetail.transaction_denial` is produced only for a refusal of the **whole request** that decides no item — a reason about the requester that would deny every item alike, such as overdue reports on the agent's account. `transactionDenied(...)` produces that whole-request error; the loop records every per-item denial in the body.
 
 ```go
 func (h *ExchangeHandler) ExecuteTransaction(
@@ -436,36 +437,47 @@ func (h *ExchangeHandler) ExecuteTransaction(
             errors.New("request reached the handler without a verified signature"))
     }
 
-    // 2b. Resolve the caller's registered account from the verified identity
-    //     (covered directory + proven-key thumbprint), as in DiscoverResources
-    //     step 2d. All entitlement, compliance, and billing below use this
-    //     account, never the caller-written requester.id/domain.
-    keyThumb, err := helpers.Thumbprint(verified.PublicKey)
-    if err != nil {
-        return nil, connect.NewError(connect.CodeInternal, err)
-    }
-    account, err := h.accounts.FromVerifiedKey(ctx, verified.SignatureAgent, keyThumb)
+    // 2b. Authenticate the AGENT and resolve its account (see "Accounts" on the
+    //     authentication page). On a direct request the agent is the verified
+    //     signer, and its directory is the covered Signature-Agent origin. On a
+    //     sub-request a Broker re-packaged, the agent is the one its acceptances
+    //     authenticate: they, and the agent_request_acceptance projection when
+    //     present, must verify against the keys of the directory requester.domain
+    //     names. This runs before any idempotency state is read or written: a
+    //     relayed request that proves no agent has every item denied in the body
+    //     and touches no stored result. All entitlement, compliance and billing
+    //     below use this account, never requester.id and never the Broker's; the
+    //     Broker is kept only for attribution (agent.RelayedBy).
+    agent, ok := h.authenticateAgent(ctx, verified, req.Msg)
+    if !ok {
+        return connect.NewResponse(denyEveryItem(req.Msg,
+            forav1.DenialReason_DENIAL_REASON_SIGNATURE_INVALID)), nil
+    }
+    account, err := h.accounts.ForDirectory(ctx, agent.Directory)
     if err != nil {
         return nil, connect.NewError(connect.CodePermissionDenied, err)
     }
 
     // 3. Idempotency check (idempotency_key — REQUIRED). The key is scoped to the
-    //    caller: the account resolved from the verified key on a direct request,
-    //    and (Broker, requester) on a sub-request a Broker re-packaged. The stored
-    //    entry keeps a digest of the ordered items (each offer.signature), so the
-    //    same key with the same items is a replay, and the same key with different
-    //    items, or another order, is refused with already_exists and no typed reason.
-    scope := idempotencyScope(account, req.Msg)
+    //    agent, whatever the route: a direct request and a sub-request a Broker
+    //    re-packaged for the same agent share one scope. The stored entry keeps a
+    //    digest of the ordered items (each offer.signature), so the same key with
+    //    the same items is a replay, answered with the stored result and the
+    //    delivery binding it recorded, and the same key with different items, or
+    //    another order, is refused with already_exists and no typed reason.
+    scope := agent.Directory
     if cached, ok := h.idempotency.Get(scope, req.Msg.IdempotencyKey); ok {
         if cached.ItemsDigest != itemsDigest(req.Msg.Items) {
             return nil, connect.NewError(connect.CodeAlreadyExists,
-                errors.New("idempotency_key already used by this caller with a different request"))
+                errors.New("idempotency_key already used by this agent with a different request"))
         }
         return connect.NewResponse(cached.Response), nil
     }
 
-    // 3a. Reporting gate: refuse up front if the requester has overdue reports.
-    //     This is a reason about the caller that would deny every item alike, so
+    // 3a. Reporting gate: refuse up front if the agent's account has overdue
+    //     reports. It runs after the replay check, so a stored result is still
+    //     answered. This is a reason about the requester that would deny every
+    //     item alike, so
     //     it refuses the WHOLE request, whatever the item count: a non-OK error
     //     carrying ErrorDetail.transaction_denial, and nothing is purchased.
     if blocked, reason := h.reporting.CheckBuyerCompliance(ctx, account.ID); blocked {
@@ -482,11 +494,16 @@ func (h *ExchangeHandler) ExecuteTransaction(
     //    in the body like any other. Process each item independently — items are
     //    NOT atomic; one can fail (signature invalid, resource unavailable, billing
     //    denied) while others succeed.
-    agentHash := sha256Hex(requester.Id + ":" + requester.Domain)
+    // agent_identity_hash names the key the delivery URL binds to; which key that
+    // is on each route is stated on TransactionResponse.agent_identity_hash.
+    agentHash, err := helpers.Thumbprint(agent.Key)
+    if err != nil {
+        return nil, connect.NewError(connect.CodeInternal, err)
+    }
     // The account handle (the billing_ref minted at Register) comes from the
-    // account resolved in step 2b from the VERIFIED signing key. The request
-    // carries no caller-written billing field, and requester.id/domain never
-    // select the account.
+    // agent's account resolved in step 2b, on a relayed purchase too. The request
+    // carries no caller-written billing field, and requester.id never selects the
+    // account.
     billingRef := account.BillingRef
     var resultItems []*forav1.TransactionResultItem
     totals := map[string]float64{} // purchased amount per currency
@@ -571,6 +588,7 @@ func (h *ExchangeHandler) ExecuteTransaction(
             OfferID:           offer.OfferId,
             TenantID:          tenantCfg.ID,
             BillingRef:        billingRef,
+            Broker:            agent.RelayedBy, // the relaying Broker; attribution only, never billed
             AgentIdentityHash: agentHash,
             Amount:            amount,
             Currency:          offer.Pricing.Currency,
@@ -666,7 +684,7 @@ func (h *ExchangeHandler) ExecuteTransaction(
         }
     }
 
-    // 6. Cache for idempotency, under the caller's scope, with the items digest
+    // 6. Cache for idempotency, under the agent's scope, with the items digest
     //    that tells a replay from a reuse of the key with a different request.
     h.idempotency.Set(scope, req.Msg.IdempotencyKey, cachedResult{
         Response:    resp,
@@ -677,7 +695,7 @@ func (h *ExchangeHandler) ExecuteTransaction(
 
 // transactionDenied maps a typed DenialReason to a non-OK transport error
 // carrying ErrorDetail.transaction_denial. It is used ONLY for a refusal of the
-// whole request — a reason about the caller that decides no item — never for a
+// whole request — a reason about the requester that decides no item — never for a
 // per-item denial, which is answered in the body whatever the item count. The
 // transport code is the error class, the attached ErrorDetail the typed reason.
 func transactionDenied(reason forav1.DenialReason) error {
@@ -702,10 +720,11 @@ func transactionDenied(reason forav1.DenialReason) error {
 
 ### Sub-requests from a Broker
 
-When an agent buys through `BrokerService.ExecuteTransaction`, the Broker sends this Exchange a sub-request it authored: this Exchange's items in request order, each with the agent's `AgentAcceptance`, the agent's `AgentRequestAcceptance`, `requester` and `idempotency_key` unchanged, and the **Broker's** RFC 9421 signature. The pipeline above runs unchanged, with three points to note:
+When an agent buys through `BrokerService.ExecuteTransaction`, the Broker sends this Exchange a sub-request it authored: this Exchange's items in request order, each with the agent's `AgentAcceptance`, the agent's `AgentRequestAcceptance`, `requester` and `idempotency_key` unchanged, and the **Broker's** RFC 9421 signature. The pipeline above runs unchanged, with these points to note:
 
 - **Who consented.** The wire signer is the Broker. The agent is authenticated by its body acceptances, verified against the keys published in the WBA directory of `requester.domain`. The delivery URL and `agent_identity_hash` are bound to the agent key the acceptances verify under, and a delegation's `cnf.jkt` is checked against that same key.
-- **Idempotency.** The key is the agent's, forwarded unchanged. Scope it per (Broker, requester the acceptances authenticate, key), so two agents behind one Broker that choose the same key cannot collide. The same key with different items in that scope is refused with `already_exists`.
+- **Whose purchase.** The purchase is the agent's. Its account is the one the directory of `requester.domain` names, resolved once the acceptances verify, and billing, the account checks, the reporting gate and the transaction record use it. The Broker is kept with the record for attribution only (see [Accounts](/protocol/authentication/#accounts)).
+- **Idempotency.** The key is the agent's, forwarded unchanged, and scoped to the agent as on a direct request: the same key from the same agent, directly or through any Broker, is one purchase, and two agents behind one Broker that choose the same key never collide. The acceptances are verified before any idempotency state is read or written. The same key with different items is refused with `already_exists`.
 - **The signed set.** If the sub-request's items are not exactly the agent's `AgentRequestAcceptance` projected onto this Exchange — an item dropped, added or reordered — deny every item with `DENIAL_REASON_SIGNATURE_INVALID`, in the body, purchase nothing and claim no idempotency state. It is not an `invalid_argument` error.
 - **Answers.** Answer exactly as for a direct request: every per-item denial in the body, whatever the item count. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, in the body, while the other items may succeed. It is never a refusal of the whole sub-request. Only a refusal of the whole sub-request, which decides no item, is a non-OK error; it reaches the agent unchanged on each affected item's `TransactionResultItem.refusal`, because the Broker never turns it into an error of its own.
 
@@ -729,11 +748,11 @@ The key invariant: if the transaction log write fails, no signed URL is ever iss
 
 ## ReportUsage
 
-Lower-latency path. Validates report against recorded obligation, updates state, persists.
+Lower-latency path. Validates report against recorded obligation, updates state, persists. The agent files its own report, with the Exchange that issued the offer, for a purchase made through a Broker as for a direct one; no Broker files or relays one (see [Accounts](/protocol/authentication/#accounts)).
 
 ```mermaid
 sequenceDiagram
-    participant Agent as Agent / Broker
+    participant Agent
     participant Handler as ConnectHandler
     participant RT as ReportingTracker
     participant TxLog as TransactionLog
@@ -776,9 +795,11 @@ func (h *ExchangeHandler) ReportUsage(
             forav1.UsageReportRejectionReason_USAGE_REPORT_REJECTION_REASON_MALFORMED)
     }
 
-    // 2. Verify the transaction exists FOR THIS AGENT and billing_id matches. A
-    //    transaction recorded under a different agent is answered exactly as an
-    //    unknown one, so the answer does not reveal that it exists. A billing_id
+    // 2. Verify the transaction exists FOR THIS AGENT and billing_id matches: it
+    //    must be recorded under the account of the directory that signed the
+    //    report, a purchase a Broker relayed included. A transaction recorded
+    //    under a different agent's account is answered exactly as an unknown one,
+    //    so the answer does not reveal that it exists. A billing_id
     //    that is not the transaction's makes the report malformed.
     txn, err := h.txLog.LookupForAgent(ctx, agentFrom(ctx), req.Msg.TransactionId)
     if err != nil {
@@ -870,11 +891,11 @@ See [Content Attestation](/protocol/content-attestation/) for the full attestati
 
 ## DisputeTransaction
 
-The dispute path handles post-delivery resource complaints. Agents must file a `UsageReport` before disputing -- `DisputeRequest.report_id` is required.
+The dispute path handles post-delivery resource complaints. Agents must file a `UsageReport` before disputing -- `DisputeRequest.report_id` is required. The agent files its own dispute, for a purchase made through a Broker as for a direct one, and the Exchange accepts it only for a transaction recorded under the agent's account.
 
 ```mermaid
 sequenceDiagram
-    participant Agent as Agent / Broker
+    participant Agent
     participant Handler as ConnectHandler
     participant TxLog as TransactionLog
     participant CDN as CDN Logs
@@ -888,7 +909,7 @@ sequenceDiagram
     Handler->>TxLog: LookupTransaction(ctx, transaction_id)
     TxLog-->>Handler: TransactionRecord + UsageReport
 
-    Note over Handler: Verify report_id matches a filed report
+    Note over Handler: Verify the transaction is recorded under the signing agent's account<br/>(else not found) and report_id matches a filed report
 
     Handler->>Resolver: Evaluate(dispute, transaction, report)
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 80d3978d..34ac7b5b 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -64,6 +64,12 @@ Agents and Brokers call the same `ExchangeService` RPCs, and no field marks a re
 
 Which Brokers an Exchange admits is the Exchange's own policy, for example the Brokers registered with it, just as which Exchanges a Broker routes to is the Broker's. Nothing the sender states admits it: a Broker's manifest declares `ROLE_BROKER`, and `requester.type` describes the requester, but both are the sender's own statements, so neither decides admission. A Broker is never itself relayed to, so every request a Broker receives is direct, and a mismatched requester there is always refused.
 
+### Accounts
+
+An account at an Exchange belongs to an agent's key directory, the one `requester.domain` names. Every currently valid key that directory publishes acts for the account, and a key rotation keeps the account and its `billing_ref`. The Exchange learns the directory only from what authenticates it: on a request the agent sends itself, the request signature, whose directory `requester.domain` must name; on a purchase a Broker relays, the agent's acceptances, verified against that directory's keys. `requester.id` is an attribution label and never selects an account.
+
+A purchase a Broker relays is the agent's. Billing, the account checks (`DENIAL_REASON_ACCOUNT_NOT_REGISTERED`, `DENIAL_REASON_ACCOUNT_INACTIVE`, `DENIAL_REASON_REPORTING_OVERDUE`), ownership of the transaction, and the right to report on it and dispute it all refer to the agent's account, as on a direct purchase. The agent files its usage reports and disputes with the issuing Exchange itself; a Broker files none for it. The Exchange keeps the Broker, the verified request signer, with the transaction record for attribution; no field carries it. Registration and account status are always requested by the agent itself, so their request signature names the account directly.
+
 ### The WBA Directory Endpoint
 
 Signing keys are published in a dedicated Web Bot Auth key directory at `/.well-known/http-message-signatures-directory`, separate from the role manifest at `/.well-known/fora.json`. It is served over https, answers `200` with no redirect, and uses the media type `application/http-message-signatures-directory+json`. The body is a JWK Set: a `keys` array of Ed25519 JWKs plus an optional `revocation_url`. Each key is identified by its RFC 7638 thumbprint (the value carried as the RFC 9421 `keyid`), so the directory carries no `kid` labels. Each key carries `alg` `EdDSA`, the JOSE name, and FORA's `not_before` and `not_after` bounds, and the response is signed by each key it lists: three rules where FORA departs from WG-00 ([Where FORA departs from WG-00](#where-fora-departs-from-wg-00)). Every FORA participant — agent, exchange, broker, publisher — serves one. See [Key Directory](#key-directory) for the full rules.
diff --git a/website/src/content/docs/protocol/transaction-flow.mdx b/website/src/content/docs/protocol/transaction-flow.mdx
index 25752107..9e41d788 100644
--- a/website/src/content/docs/protocol/transaction-flow.mdx
+++ b/website/src/content/docs/protocol/transaction-flow.mdx
@@ -62,7 +62,7 @@ Key fields:
 - `ResourceQuery.uris` -- the content URI(s) being requested
 - `acceptable_restrictions` -- the restrictions the agent is willing to accept, grouped by axis; axis `FUNCTION` carries the intended use (RAG, training, search, etc.)
 - `requester.scopes` -- entitlement scopes; `["*"]` means unrestricted public access
-- billing carries no request field: the Exchange resolves the caller's account (the `billing_ref` minted at `ExchangeService.Register`) from the verified request signature, never from anything the caller sends
+- billing carries no request field: the Exchange resolves the agent's account (the `billing_ref` minted at `ExchangeService.Register`) from what authenticates the agent, never from anything the caller merely states; see [Accounts](/protocol/authentication/#accounts)
 - request authentication -- an RFC 9421 HTTP Message Signature over the request that follows the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile) (the agent's key is published in its key directory); a query that reaches an Exchange through a Broker is one the Broker originated and signed alone (no in-message hop list)
 
 ### Response (`ResourceResponse`)
@@ -396,10 +396,12 @@ A non-OK error carrying `ErrorDetail.transaction_denial` is used only when the E
 
 ### Idempotency
 
-`idempotency_key` is scoped to the caller that authenticated the request: the agent on a request it signed, and the pair (Broker, requester) on a purchase the Broker re-packaged. A key that another agent used, or that was used at another tenant, is a different key and never a collision.
+`idempotency_key` is scoped to the agent that authenticated the request, its authenticated key directory, which is also what its [account](/protocol/authentication/#accounts) belongs to. On a request the agent signed itself, the request signature authenticates it; on a purchase a Broker re-packaged, the agent's acceptances do. The route does not change the scope: the same key from the same agent names the same purchase whether it arrives directly or through any Broker the Exchange admits. A key that another agent used, or that was used at another tenant, is a different key and never a collision.
 
-- The same key with the **same** request (the same items in the same order) is a replay. The Exchange answers it with the stored result and executes nothing again.
-- The same key with a **different** request (different items, or the same items in another order) is refused with the Connect code `already_exists`, carrying an `ErrorDetail` with no typed reason. Nothing is executed, and the stored result is unchanged. A new purchase takes a new key.
+Before it creates idempotency state for a key, or answers from it, the Exchange verifies the agent's authorization: the request signature on a direct request, the acceptances on a relayed purchase, and `agent_request_acceptance` with its projection whenever it is present. A request that does not prove the agent's authorization creates no idempotency state and is answered from none.
+
+- The same key with the **same** request (the same items in the same order) is a replay, whichever route it took. The Exchange answers it with the stored result, the delivery binding it recorded included, and executes nothing again.
+- The same key with a **different** request (different items, or the same items in another order) is refused with the Connect code `already_exists`, carrying an `ErrorDetail` with no typed reason. Nothing is executed, and the stored result is unchanged. A new purchase takes a new key, and so new acceptances, because the acceptances sign the key; that includes a new attempt after a stored denial.
 
 The same rules apply to `UsageReport.idempotency_key` and `DisputeRequest.idempotency_key`.
 
@@ -408,7 +410,7 @@ The same rules apply to `UsageReport.idempotency_key` and `DisputeRequest.idempo
 1. Validate request (proto validation)
 2. Verify the sender's RFC 9421 HTTP Message Signature (alg=ed25519) in the request headers — the agent's on a direct request, the Broker's on a sub-request the Broker re-packaged. On a direct request, also require `requester.domain` to name the directory the covered `Signature-Agent` member names. On a re-packaged sub-request the agent is authenticated by its body acceptances instead: each item's `AgentAcceptance` is verified against an Ed25519 key in the directory `requester.domain` names, an acceptance whose canonical bytes name an empty requester is refused, and a delegation's holder binding (`cnf.jkt`) is checked against the key the item's `AgentAcceptance` verifies under, not against the Broker
 3. Verify `agent_request_acceptance` when present: the signature, and that this request's items are the complete in-order projection of the signed set addressed to this Exchange. A request whose items are not exactly that projection (an item dropped, added or reordered) has every item denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body: the agent's signature does not cover what arrived. It is not an `invalid_argument` error. This runs **before** the idempotency lookup — request-level idempotency state is never created or served for a request whose set claim has not been proven, otherwise a mutated request could consume the key and a later honest retry would replay its result
-4. Check the idempotency key, scoped to the caller: a replay of the same request returns the stored result, and the same key with different items is refused with `already_exists` (see [Idempotency](#idempotency))
+4. Check the idempotency key, scoped to the agent: a replay of the same request returns the stored result, and the same key with different items is refused with `already_exists` (see [Idempotency](#idempotency))
 5. Verify each item's offer signature over the presented offer bytes; an item whose signature does not verify is denied with `DENIAL_REASON_SIGNATURE_INVALID`, in the body
 6. Authorize billing (`BillingAdapter.Authorize`) -- or skip for subscription offers
 7. Write transaction to WAL (must succeed before signing URL)
@@ -568,7 +570,7 @@ Re-packaging and combining are safe because each item is atomic and its integrit
 
 The Broker's own refusals are non-OK Connect errors carrying an `ErrorDetail`, and nothing was bought: an invalid agent signature is `unauthenticated` with `request_auth_failure`; a `requester.domain` that is not the agent's signing directory is `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; a malformed request is `invalid_argument`; an Exchange the Broker cannot route to or does not approve is `failed_precondition`, with `metadata["exchange"]` naming it.
 
-A retry is safe. The Broker forwards the agent's `idempotency_key` unchanged to every Exchange, so each Exchange answers a repeated sub-request from its stored result. A refusal with the code `unavailable` or `deadline_exceeded` is an ambiguous outcome, and retrying the same request with the same key through the same Broker is how the agent resolves it.
+A retry is safe. The Broker forwards the agent's `idempotency_key` unchanged to every Exchange, so each Exchange answers a repeated sub-request from its stored result. A refusal with the code `unavailable` or `deadline_exceeded` is an ambiguous outcome, and retrying the same request with the same key is how the agent resolves it, on any route: through the same Broker, another one, or directly to each Exchange.
 
 ### Subscription TransactionResponse
 
@@ -641,7 +643,7 @@ A successful response carries the Exchange-assigned `report_id` (the handle the
 1. The report is well formed. A malformed report is refused with `USAGE_REPORT_REJECTION_REASON_MALFORMED` and the Connect code `invalid_argument`
 2. Required fields present (as defined by `ReportingObligation.required_fields`)
 3. Report received within the reporting window (typically 24 hours). A report that arrives after the window closed is refused with `USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED` and the Connect code `failed_precondition`: the typed reason names the time cause
-4. The transaction exists for this agent, and `billing_id` matches. A report whose `billing_id` is not the transaction's is malformed: `USAGE_REPORT_REJECTION_REASON_MALFORMED`, `invalid_argument`. A report for a transaction recorded under a different agent is answered exactly as for an unknown transaction, `USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND` with `not_found`, so the answer does not reveal that the transaction exists
+4. The transaction exists for this agent, and `billing_id` matches. A report whose `billing_id` is not the transaction's is malformed: `USAGE_REPORT_REJECTION_REASON_MALFORMED`, `invalid_argument`. A report for a transaction recorded under a different agent's account is answered exactly as for an unknown transaction, `USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND` with `not_found`, so the answer does not reveal that the transaction exists
 
 **The reported quantity is unrestricted.** A consumed quantity that differs from the offer's estimate is **not** a validation failure, above or below, and no check on the quantity refuses a report. The report is a record of the quantity consumed. Monitoring how far reports fall from estimates is the Exchange operator's own business, not part of the protocol.
 
@@ -721,7 +723,7 @@ Three independent records -- CDN logs, Exchange transactions, usage reports -- t
 
 FORA uses **at-most-once with reconciliation**, same as OpenRTB:
 
-- Idempotency keys on every `TransactionRequest`, scoped per caller (prevent double-charge on retry; a key reused with different items is refused with `already_exists`)
+- Idempotency keys on every `TransactionRequest`, scoped to the agent whatever the route (prevent double-charge on retry, through a Broker or directly; a key reused with different items is refused with `already_exists`)
 - "Authorize first, deliver second" ordering (do not issue signed URL until billing succeeds)
 - Reconciliation via `UsageReport` -- if content was not actually used, the report says so
 - Credits and refunds come from dispute resolution (`DisputeTransaction`, below), which every Exchange implements; the protocol standardizes the dispute signal, not the settlement between the parties
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index ded2c473..9b2c8b69 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -188,8 +188,8 @@ call; `detail` is the FORA `ErrorDetail` that party attached, unchanged. Each to
 purchased, while `UpstreamRefusal.code` said a timeout may have completed a purchase. They
 now agree. With the code `unavailable` or `deadline_exceeded` the item's outcome is
 unknown, whether the Exchange gave no answer or answered that code, and retrying the
-agent's request with the same `idempotency_key` through the same Broker settles it; with
-any other code the Exchange decided no item, and the item was not purchased.
+agent's request with the same `idempotency_key` settles it, on any route; with any other
+code the Exchange decided no item, and the item was not purchased.
 `BrokerTransactionResponse.totals` does not count an item with an unknown outcome, so it
 is then a lower bound of what the purchase charged. The Broker purchase verbs' doc
 comments in all three SDKs, the Python README, and the transaction-flow, Broker, Identity
@@ -426,9 +426,10 @@ must not refuse a report on it.
 **Idempotency keys are scoped per caller, and a reused key with a different request is
 refused (a behaviour change; no wire change).** The file header gains "Idempotency", the one statement of the
 rule for `TransactionRequest`, `UsageReport` and `DisputeRequest`. A key is scoped to the
-authenticated agent, and to the pair (Broker, requester) on a purchase relayed through
-`BrokerService.ExecuteTransaction`; a key another agent or tenant used is never a
-collision. The same key with the same request is a replay answered from the stored result.
+authenticated agent, whatever the route: a purchase relayed through
+`BrokerService.ExecuteTransaction` shares the agent's scope with a direct one. A key
+another agent or tenant used is never a collision. The same key with the same request is
+a replay answered from the stored result.
 The same key with a different request (for a purchase, different items or another order)
 is refused with the Connect code `already_exists` and an `ErrorDetail` with no typed reason.
 
@@ -601,6 +602,34 @@ a Broker under `ROLE_BROKER`. The transaction-flow, production-architecture, pro
 Broker overview, exchange-manifest, request-flows and threat-model pages state the rule
 or link to it, and no page gives a Broker `ROLE_AGENT` any more.
 
+**A purchase a Broker relays is the agent's (comments and docs; no wire change).** Nothing
+said whose purchase a Broker relays: the account was resolved "from the verified
+signature", which on a relayed purchase is the Broker's, and an idempotency key was scoped
+to the pair (Broker, requester), so one signed consent could execute again through a
+second Broker. The file header gains "Accounts", the one statement of the rule. An
+account at an Exchange belongs to the agent's key directory: every currently valid key it
+publishes acts for the account, a key rotation keeps the account and its `billing_ref`,
+and `Requester.id` never selects one. The Exchange learns the directory only from what
+authenticates it: the request signature on a direct request, the agent's acceptances on a
+relayed purchase. Billing, the account denials (`DENIAL_REASON_ACCOUNT_NOT_REGISTERED`,
+`DENIAL_REASON_ACCOUNT_INACTIVE`, `DENIAL_REASON_REPORTING_OVERDUE`), ownership of the
+transaction, and the right to report on it and dispute it refer to the agent's account,
+and the Exchange keeps the Broker with the transaction record for attribution. The agent
+files its usage reports and disputes with the issuing Exchange itself; a Broker files
+none.
+
+An idempotency key is scoped to the agent whatever the route: a purchase repeated
+directly or through any Broker the Exchange admits is the same purchase, so one signed
+consent executes at most once at an Exchange, however it arrives. The Exchange verifies
+the agent's authorization before it creates idempotency state or answers from it, and a
+replay returns the stored result with the delivery binding it recorded. An unknown
+outcome is settled by retrying with the same key on any route, and a new attempt after a
+stored denial takes a new key and new acceptances.
+
+Docs: the authentication page gains "Accounts", and the transaction-flow, request-flows,
+threat-model and reference pages state the rule. The Broker retry comments in all three
+SDKs and the Python README say a retry may take any route.
+
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
 Their comments described an Exchange sending them, which contradicted `Requester.scopes`:
@@ -743,7 +772,8 @@ The contract now defines that relay.
   re-packaged purchase the delegation holder binding (`cnf.jkt`)
   and `agent_identity_hash` use the key the item's `AgentAcceptance` verifies
   under, not the request signer, which is the Broker. An Exchange scopes a relayed
-  request's idempotency key per Broker, authenticated requester and key.
+  request's idempotency key to the agent the acceptances authenticate, exactly as a
+  direct request's.
 
 SDKs, in all three languages:
 
diff --git a/website/src/content/docs/reference/proto-admin.mdx b/website/src/content/docs/reference/proto-admin.mdx
index 7760c0d8..a16ba2b5 100644
--- a/website/src/content/docs/reference/proto-admin.mdx
+++ b/website/src/content/docs/reference/proto-admin.mdx
@@ -9,7 +9,7 @@ Source: [`proto/fora/admin/v1/admin.proto`](https://github.com/FORA-Protocol/pro
 :::note[Operator plane, not agent wire]
 `fora.admin.v1` is the Exchange **operator/config plane** — deliberately a separate package and service from `ExchangeService`, so the agent-facing contract is untouched. Deployments MUST NOT expose `AdminService` on the public agent-facing listener: reachability is restricted at the network layer (an internal listener plus a source allowlist), and there is no per-operator identity inside the service in v1.
 
-Both RPCs are **full-replace overwrites** and therefore idempotent — they carry no `idempotency_key` (the `fora.v1` idempotency convention dedupes per verified RFC 9421 signer, and the admin plane has no request signing in v1) and no `ext`/`ext_critical` extension maps. Each request and response is a thin `{ver, payload}` envelope (`ver` is field 1, the FORA protocol version — value `"1.0"`, stamped by the sender from the SDK's `ProtocolVersion` constant and advisory on receive, as on the agent-facing plane; the *reason* differs, since this plane rests on network-layer reachability rather than on a request signature) wrapping a required payload message — `TenantFeeRate` or `ReportingPolicy` — that is **shared by the request and its response**, so every field rule is stated once and the echoed read-back cannot drift from the write. Responses echo the payload **as persisted**, giving operator tooling a read-back confirmation.
+Both RPCs are **full-replace overwrites** and therefore idempotent — they carry no `idempotency_key` (the `fora.v1` idempotency convention scopes a key to the agent an RFC 9421 signature authenticates, and the admin plane has no request signing in v1) and no `ext`/`ext_critical` extension maps. Each request and response is a thin `{ver, payload}` envelope (`ver` is field 1, the FORA protocol version — value `"1.0"`, stamped by the sender from the SDK's `ProtocolVersion` constant and advisory on receive, as on the agent-facing plane; the *reason* differs, since this plane rests on network-layer reachability rather than on a request signature) wrapping a required payload message — `TenantFeeRate` or `ReportingPolicy` — that is **shared by the request and its response**, so every field rule is stated once and the echoed read-back cannot drift from the write. Responses echo the payload **as persisted**, giving operator tooling a read-back confirmation.
 
 Every constraint is a **field-level** protovalidate rule, so it flows into the generated Pydantic/Zod types; this package defines no cross-field (message-level CEL) rules.
 :::
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index 8f7867b8..be28c000 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -46,7 +46,7 @@ The Broker entry point. It has two methods.
 
 `Resolve(DiscoveryRequest) → DiscoveryResponse` is discovery-only: a client sends the URIs/query it wants resolved and receives `offer_groups` (one `OfferGroup` per URI, each carrying the full signed `Offer`) or a typed `absence_reason` with empty `offer_groups` when nothing licensable was found. "No result" is a successful answer; malformed requests, auth failures, and internal faults are non-OK transport errors carrying an `ErrorDetail`. Resolve may apply the agent's budget (`RequestConstraints`) as a filter. How the budget is computed is the Broker's own behaviour; the protocol fixes how its effect is reported: a URI left with no offer is answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, never `NOT_AUTHORIZED` and never an error such as `RESOURCE_EXHAUSTED`. Resolve never charges. Resolve does **not** deliver inline. The per-transaction result (transaction id, billing id, retrieval endpoint, …) comes from the separate execute path, which the agent takes either directly, with `ExchangeService.ExecuteTransaction` at each offer's `Offer.exchange`, or through the Broker.
 
-`ExecuteTransaction(TransactionRequest) → BrokerTransactionResponse` buys offers from any number of Exchanges in one call. The Broker verifies the agent's request, groups the items by each signed offer's `exchange`, and sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. The agent's per-item `AgentAcceptance` and its `AgentRequestAcceptance` travel in each sub-request body, so every Exchange still verifies the agent's consent. The Broker combines the answers in request order. Re-packaging is safe because each item is atomic and its integrity is per resource: the offer carries its Exchange's signature, the acceptance binds the agent to that one offer, and the result comes from the Exchange that owns the resource. The Broker's own refusals (a bad agent signature, a `requester.domain` that is not the agent's signing directory, a malformed request, an Exchange it cannot route to or does not approve) are non-OK errors and buy nothing. An Exchange's per-item denial, including `DENIAL_REASON_RELAY_NOT_ACCEPTED` (decided per item by each offer's provider), is that Exchange's result item unchanged. An Exchange's refusal of its whole sub-request is never turned into a Broker error: it rides in the body, on each affected item's `refusal`.
+`ExecuteTransaction(TransactionRequest) → BrokerTransactionResponse` buys offers from any number of Exchanges in one call. The Broker verifies the agent's request, groups the items by each signed offer's `exchange`, and sends one `ExchangeService.ExecuteTransaction` per Exchange, signed with **its own** key. The agent's per-item `AgentAcceptance` and its `AgentRequestAcceptance` travel in each sub-request body, so every Exchange still verifies the agent's consent. The Broker combines the answers in request order. Re-packaging is safe because each item is atomic and its integrity is per resource: the offer carries its Exchange's signature, the acceptance binds the agent to that one offer, and the result comes from the Exchange that owns the resource. The Broker's own refusals (a bad agent signature, a `requester.domain` that is not the agent's signing directory, a malformed request, an Exchange it cannot route to or does not approve) are non-OK errors and buy nothing. An Exchange's per-item denial, including `DENIAL_REASON_RELAY_NOT_ACCEPTED` (decided per item by each offer's provider), is that Exchange's result item unchanged. An Exchange's refusal of its whole sub-request is never turned into a Broker error: it rides in the body, on each affected item's `refusal`. The purchase is the agent's, billed to and owned by the agent's account at each Exchange, and the agent's `idempotency_key` is scoped to the agent whatever the route (see [Accounts](/protocol/authentication/#accounts)).
 
 ::proto-service{name=BrokerService}
 
@@ -82,7 +82,7 @@ Rate limit status modeled after IETF RateLimit header fields.
 
 Identity and entitlements only — who is asking and what they're entitled to. What they're asking for (`uris`) and the limits they'll accept (`acceptable_restrictions`) live on the ask (`ResourceQuery` / `DiscoveryRequest`), not here. Used in `ResourceQuery`, `DiscoveryRequest` and `TransactionRequest`.
 
-`id` and `domain` are both required. `domain` is the host of the requester's key directory and is never a free label: on a direct request a verifier resolves the agent's keys from the covered `Signature-Agent` header and requires `domain` to name that same directory, refusing a mismatch as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; on a purchase relayed through `BrokerService.ExecuteTransaction`, the Exchange verifies the agent's acceptances against the directory `domain` names, because the request signature there is the Broker's. `id` is a free label the agent chooses for attribution, such as which sub-agent or end customer is asking; it is never identity, never used to find keys, and never trusted. See [Requester domain and the key directory](/protocol/authentication/#requester-domain-and-the-key-directory).
+`id` and `domain` are both required. `domain` is the host of the requester's key directory and is never a free label: on a direct request a verifier resolves the agent's keys from the covered `Signature-Agent` header and requires `domain` to name that same directory, refusing a mismatch as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; on a purchase relayed through `BrokerService.ExecuteTransaction`, the Exchange verifies the agent's acceptances against the directory `domain` names, because the request signature there is the Broker's. `id` is a free label the agent chooses for attribution, such as which sub-agent or end customer is asking; it is never identity, never used to find keys, never selects an account, and never trusted. See [Requester domain and the key directory](/protocol/authentication/#requester-domain-and-the-key-directory) and [Accounts](/protocol/authentication/#accounts).
 
 `scopes` hides existence: a requester never learns about a resource outside its scopes. When the scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason, exactly as for any resource with nothing to offer, and an offer it presented is honoured until it expires. See [Existence hiding](/protocol/authentication/#existence-hiding).
 
@@ -326,7 +326,7 @@ Exchange returns the minted `billing_ref` — the opaque, long-lived, per-Exchan
 
 ### GetAccountStatusRequest
 
-Read-only check of whether the calling agent's account is active. Deliberately carries no identifying field — the Exchange resolves the account from the verified request signature.
+Read-only check of whether the calling agent's account is active. Deliberately carries no identifying field — the agent always sends it itself, and the Exchange resolves the account from the verified request signature (see [Accounts](/protocol/authentication/#accounts)).
 
 ::proto-message{name=GetAccountStatusRequest}
 
@@ -551,7 +551,7 @@ Exactly one typed reason block is set, selected by the failing method. The `reas
 
 ### TransactionDenial
 
-ExecuteTransaction refused the **whole** request and decided no item, for a reason about the caller that would deny every item alike (for example `DENIAL_REASON_ACCOUNT_NOT_REGISTERED` or `DENIAL_REASON_REPORTING_OVERDUE`). Reuses the `DenialReason` vocabulary. A denial of an item is never carried here: it is that item's `TransactionResultItem.denial_reason`, in a successful response, whatever the item count. `restriction_mismatches` and `offer_id` are deprecated and never set.
+ExecuteTransaction refused the **whole** request and decided no item, for a reason about the requester that would deny every item alike (for example `DENIAL_REASON_ACCOUNT_NOT_REGISTERED` or `DENIAL_REASON_REPORTING_OVERDUE`). On a purchase a Broker relayed, the requester is the agent and the account is the agent's, never the Broker's. Reuses the `DenialReason` vocabulary. A denial of an item is never carried here: it is that item's `TransactionResultItem.denial_reason`, in a successful response, whatever the item count. `restriction_mismatches` and `offer_id` are deprecated and never set.
 
 ::proto-message{name=TransactionDenial}
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 57e6771d..77300521 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -78,7 +78,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T13: Credential sharing / proxy laundering
 **Attack**: One agent identity (signing key) shared across organizations.
-**Countermeasure (protocol + operational)**: Sharing a key cannot redirect costs: the request carries no self-supplied billing field, so every request signed with the shared key bills the one account the Exchange resolves from that key — the abuse lands on the sharer's own bill. Detection is behavioral, not cryptographic: the Exchange monitors usage patterns per verified identity (IP diversity, volume spikes, impossible concurrency) and can deactivate the account. The signature binding does not prevent sharing. It concentrates all shared usage under one identity so it can be seen and priced.
+**Countermeasure (protocol + operational)**: Sharing a key cannot redirect costs: the request carries no self-supplied billing field, so every request signed with the shared key bills the one account of the key directory that publishes that key — the abuse lands on the sharer's own bill. Detection is behavioral, not cryptographic: the Exchange monitors usage patterns per verified identity (IP diversity, volume spikes, impossible concurrency) and can deactivate the account. The signature binding does not prevent sharing. It concentrates all shared usage under one identity so it can be seen and priced.
 
 ## 3. Provider-Side Threats (Dishonest Provider)
 
@@ -127,7 +127,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T-BRK-3: Misreporting a relayed purchase
 **Attack**: A Broker relaying a purchase reports an outcome that differs from what an Exchange answered: it claims a refusal for an item that was bought, alters a reported cost or transaction id, or drops one Exchange's sub-request and reports it refused.
-**Countermeasure (protocol)**: **Partial.** The combined `BrokerTransactionResponse` is unsigned; the one signed value in a result item is `retrieval_endpoint`, a URL the issuing Exchange signed, which the Broker cannot forge or alter. What the agent is charged is bounded by the signed offer the Exchange verified, whatever the Broker reports. An upstream refusal always rides in the body (`TransactionResultItem.refusal`, with the Exchange's own `ErrorDetail`), never as a Broker error, so the other Exchanges' results reach the agent. An agent that doubts an outcome can retry with the same `idempotency_key`: the Broker forwards it unchanged and the Exchange answers from its stored result. The agent can also reconcile with the Exchange that issued the offer directly, through its usage report and, where the outcome is wrong, a dispute. **Residual risk**: the per-item report fields are as trustworthy as the Broker; an agent that cannot accept that buys directly.
+**Countermeasure (protocol)**: **Partial.** The combined `BrokerTransactionResponse` is unsigned; the one signed value in a result item is `retrieval_endpoint`, a URL the issuing Exchange signed, which the Broker cannot forge or alter. What the agent is charged is bounded by the signed offer the Exchange verified, whatever the Broker reports. An upstream refusal always rides in the body (`TransactionResultItem.refusal`, with the Exchange's own `ErrorDetail`), never as a Broker error, so the other Exchanges' results reach the agent. An agent that doubts an outcome can retry with the same `idempotency_key`, through the same Broker, another one or directly: each Exchange scopes the key to the agent whatever the route, and answers from its stored result. The agent can also reconcile with the Exchange that issued the offer directly, through its usage report and, where the outcome is wrong, a dispute, which it always files itself: the purchase is the agent's, never the Broker's (see [Accounts](/protocol/authentication/#accounts)). **Residual risk**: the per-item report fields are as trustworthy as the Broker; an agent that cannot accept that buys directly.
 
 ## 5. Third-Party Attacks
 
@@ -141,7 +141,7 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 ### T24: Transaction replay
 **Attack**: Attacker captures valid TransactionRequest and replays it.
-**Countermeasure (protocol)**: **Idempotency keys.** Every state-mutating call carries a required `idempotency_key` — `TransactionRequest`, `UsageReport`, and `DisputeRequest`. Servers dedupe per caller and key — the verified RFC 9421 signer, or (Broker, requester) on a relayed purchase — so a replay returns the original result instead of re-charging or re-filing. A key reused by the same caller with a different request (different items, or another order) is refused with `already_exists` and changes nothing; a key another caller used is never a collision. Broker `Resolve` (`DiscoveryRequest`) is pure discovery — it executes no transaction, has no replay exposure, and carries no key.
+**Countermeasure (protocol)**: **Idempotency keys.** Every state-mutating call carries a required `idempotency_key` — `TransactionRequest`, `UsageReport`, and `DisputeRequest`. Servers dedupe per agent and key, whatever the route — the agent the RFC 9421 signature authenticates on a direct request, the agent its acceptances authenticate on a relayed purchase — so a replay returns the original result instead of re-charging or re-filing, and a captured purchase replayed through another Broker is a replay too. The agent's authorization is verified before any stored result is created or returned. A key reused by the same agent with a different request (different items, or another order) is refused with `already_exists` and changes nothing; a key another agent used is never a collision. Broker `Resolve` (`DiscoveryRequest`) is pure discovery — it executes no transaction, has no replay exposure, and carries no key.
 
 ### T25: Billing_id forgery in usage reports
 **Attack**: Attacker fabricates billing_ids in usage reports.

From b8918648fd4d94e4084abeada9fe26a7ae36dcae Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 12:43:52 +0200
Subject: [PATCH 156/164] Drop the Broker's report and dispute relay, and bill
 the agent, in the guides

The Broker overview and deployment pages described a Reporting Relay
and a Dispute relay that forwarded an agent's usage reports and
disputes, with a ReportingRelay Go interface, a metric and a diagram
of the agent reporting through the Broker. The Broker service has no
call for either, and the agent files its reports and disputes itself,
with the issuing Exchange, for a purchase made through a Broker too.

The Broker pages drop the relay, its interface, metric, repository
entry and diagram edges, and state the retry and idempotency rule on
any route. The agent SDK, due-diligence, scenario, money-flow and
getting-started pages say the agent holds the account and files its
own reports. The request-flows self-signup path registers through
ExchangeService.Register, and the Exchange scaling and storage pages
key the idempotency store by the agent and its key.

Two request-flows sequence diagrams did not parse, because a note
carried a semicolon, which mermaid reads as the end of a statement;
the notes now use commas. The changelog entry for the change lists
these pages.
---
 proto/CHANGELOG.md                            |  6 +++-
 .../docs/components/agent-sdk/overview.mdx    |  6 ++--
 .../docs/components/broker/deployment.mdx     | 30 +++++--------------
 .../docs/components/broker/overview.mdx       | 25 +++++-----------
 .../components/exchange/request-flows.mdx     |  8 ++---
 .../docs/components/exchange/scaling.mdx      | 25 +++++++++-------
 .../components/exchange/storage-model.mdx     |  8 +++--
 .../transaction-log/storage-backends.mdx      |  5 ++--
 .../docs/getting-started/for-ai-agents.mdx    |  2 +-
 .../docs/getting-started/for-ai-platforms.mdx |  2 +-
 .../for-exchange-operators.mdx                |  4 ++-
 .../docs/getting-started/how-money-flows.mdx  |  4 +--
 .../docs/protocol/scenario-walkthrough.mdx    |  8 +++--
 .../protocol/walkthrough-due-diligence.mdx    |  6 ++--
 .../src/content/docs/reference/changelog.mdx  |  6 +++-
 15 files changed, 69 insertions(+), 76 deletions(-)

diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 28727d51..bdb2f386 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -622,7 +622,11 @@ stored denial takes a new key and new acceptances.
 
 Docs: the authentication page gains "Accounts", and the transaction-flow, request-flows,
 threat-model and reference pages state the rule. The Broker retry comments in all three
-SDKs and the Python README say a retry may take any route.
+SDKs and the Python README say a retry may take any route. The Broker overview and
+deployment pages no longer describe a report or dispute relay or a `ReportingRelay`
+interface, and the agent SDK, due-diligence, scenario, money-flow and getting-started
+pages say the agent holds the account and files its own reports. The Exchange scaling
+and storage pages key the idempotency store by the agent and its key.
 
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index 0a298f5d..ce4f0213 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -387,9 +387,8 @@ The SDK reuses the same Go interfaces defined for the standalone Broker:
 - `ExchangeRegistry` interface is identical
 - `SelectionEngine` interface is identical (same `SelectionPolicy` abstraction)
 - `BudgetTracker` interface is identical
-- `ReportingRelay` becomes `UsageReporter` (same logic, different name because the SDK owns the full lifecycle)
 
-The concrete implementations differ in persistence strategy (in-memory vs Redis), but the interfaces are shared.
+The concrete implementations differ in persistence strategy (in-memory vs Redis), but the interfaces are shared. The SDK also has a `UsageReporter`, which files the agent's usage reports with each issuing Exchange. The standalone Broker has no counterpart, because an agent always files its own reports, for a purchase made through a Broker too.
 
 ## Relationship to the Broker
 
@@ -400,7 +399,6 @@ The concrete implementations differ in persistence strategy (in-memory vs Redis)
                        |  pkg/registry/    ExchangeRegistry   |
                        |  pkg/selection/   SelectionEngine       |
                        |  pkg/budget/      BudgetTracker         |
-                       |  pkg/reporting/   ReportingRelay        |
                        |  pkg/signing/     RequestSigner         |
                        |  pkg/discovery/   SupplyDiscoverer      |
                        +----------+--------------+---------------+
@@ -425,7 +423,7 @@ The concrete implementations differ in persistence strategy (in-memory vs Redis)
 | Concern | SDK | Broker |
 |---|---|---|
 | Content fetch | SDK does it (returns content) | Agent does it (Broker returns signed URL) |
-| Usage reporting | SDK does it automatically | Agent submits via RPC, Broker forwards |
+| Usage reporting | SDK does it automatically | Agent files it with the issuing Exchange; the Broker relays nothing |
 | Budget persistence | Local file (single process) | Redis (multi-tenant) |
 | Configuration | Struct literal in code | YAML + env vars + API |
 | Exchange trust | All configured = verified | Graduated trust model |
diff --git a/website/src/content/docs/components/broker/deployment.mdx b/website/src/content/docs/components/broker/deployment.mdx
index 7ec37b4c..e5c4fc1b 100644
--- a/website/src/content/docs/components/broker/deployment.mdx
+++ b/website/src/content/docs/components/broker/deployment.mdx
@@ -9,7 +9,7 @@ import DeferredSdkNotice from '../../../../components/DeferredSdkNotice.mdx';
 
 ## Deployment Models
 
-The Broker is designed for three deployment modes. The core logic (selection, budget, reporting) is identical across all three; what changes is the process model, configuration surface, and what the agent is responsible for.
+The Broker is designed for three deployment modes. The core logic (selection, budget) is identical across all three; what changes is the process model, configuration surface, and what the agent is responsible for.
 
 ```mermaid
 graph LR
@@ -41,7 +41,7 @@ graph LR
 | **Multi-tenancy** | N/A (one license per instance) | N/A (one agent per sidecar) | Required -- session isolation |
 | **Latency overhead** | 0ms (in-process) | ~1ms (localhost RPC) | ~5-20ms (network hop) |
 | **Content fetch** | SDK fetches signed URL | Agent fetches signed URL | Agent fetches signed URL |
-| **Usage reporting** | Automatic (background) | Agent submits via RPC | Agent submits via RPC |
+| **Usage reporting** | The SDK files it in the background, signed with the agent's key | The agent files it with the issuing Exchange | The agent files it with the issuing Exchange |
 | **Who operates** | Agent developer | Agent operator | Broker SaaS provider |
 
 ### Recommended Deployment
@@ -98,7 +98,7 @@ func (m *multiTenantBroker) Resolve(
 
 ### What Changes Between Modes
 
-The core interfaces (`ExchangeRegistry`, `SelectionEngine`, `BudgetTracker`, `ReportingRelay`) are identical. What changes is persistence strategy, configuration surface, and process lifecycle.
+The core interfaces (`ExchangeRegistry`, `SelectionEngine`, `BudgetTracker`) are identical. What changes is persistence strategy, configuration surface, and process lifecycle.
 
 ## Configuration Reference
 
@@ -271,7 +271,7 @@ Even with caching enabled, 5 seconds is the maximum TTL. Offers can include `exp
 graph TD
     F1[All Exchanges Timeout] -->|Result| R1[Return error to agent<br/>agent can retry or go direct]
     F2[Preferred Exchange Down] -->|Result| R2[Fallback to remaining<br/>Exchanges automatically]
-    F3[Broker Crash<br/>Mid-Transaction] -->|Result| R3[Agent retries with<br/>same idempotency key]
+    F3[Broker Crash<br/>Mid-Transaction] -->|Result| R3[Agent retries with<br/>same idempotency key,<br/>on any route]
     F4[Budget Tracking Lost<br/>on Crash] -->|Result| R4[Agent re-declares budget<br/>Exchange is authoritative]
     F5[Partial Exchange<br/>Failures] -->|Result| R5[Proceed with partial<br/>results, best-effort]
 ```
@@ -287,8 +287,8 @@ graph TD
 | Crash Point | Impact | Recovery |
 |---|---|---|
 | Before ExecuteTransaction sent | No financial impact | Agent retries the full request |
-| After ExecuteTransaction sent, before response | Exchange has charged but agent doesn't know | Agent retries with same `TransactionRequest.idempotency_key` -- Exchange returns same response (idempotency) |
-| After TransactionResponse returned | Agent has the signed URL | Agent tracks reporting obligations independently |
+| After ExecuteTransaction sent, before response | Exchange has charged but agent doesn't know | Agent retries with the same `TransactionRequest.idempotency_key`, through this Broker once it is back, another Broker or directly -- each Exchange returns the same response (idempotency) |
+| After TransactionResponse returned | Agent has the signed URL | Agent tracks its reporting obligations and files its own reports |
 
 **Budget tracking lost on crash.** Session budget is ephemeral. The agent re-declares on reconnect. The Exchange's billing adapter is the authoritative source.
 
@@ -298,25 +298,10 @@ graph TD
 
 The Broker never generates `TransactionRequest.idempotency_key`. The key is the agent's, and the Broker forwards it unchanged on every sub-request: it cannot do otherwise, because each `AgentAcceptance` and the `AgentRequestAcceptance` sign it.
 
-Each Exchange scopes a relayed key per (Broker, requester the acceptances authenticate), so two agents behind one Broker that choose the same key do not collide. When the agent retries the same purchase with the same key, each Exchange recognizes a replay of its sub-request and answers from its stored result. When a key is reused with different items, or the same items in another order, the Exchange refuses the sub-request with `already_exists`, and the Broker reports that refusal on each affected item's `refusal`.
+Each Exchange scopes the key to the agent, whatever the route, so two agents behind one Broker that choose the same key do not collide. When the agent retries the same purchase with the same key, through this Broker, another one or directly, each Exchange recognizes a replay of its sub-request and answers from its stored result. When a key is reused with different items, or the same items in another order, the Exchange refuses the sub-request with `already_exists`, and the Broker reports that refusal on each affected item's `refusal`.
 
 ## Scaling Considerations
 
-### Reporting Relay
-
-The Broker tracks reporting obligations for every transaction and forwards `UsageReport` messages to the correct Exchange.
-
-```go
-type ReportingRelay interface {
-    Track(txn *forav1.TransactionResponse, exchange string)
-    Forward(ctx context.Context, report *forav1.UsageReport) (*forav1.UsageReportResponse, error)
-    PendingObligations() []ReportingObligation
-    OverdueObligations() []ReportingObligation
-}
-```
-
-A background goroutine checks for approaching deadlines and exposes them via the metrics interface. The agent files the UsageReport because only the agent knows how the content was actually used (token count, function, citation). The Broker is a relay, not a reporter.
-
 ### Security Considerations
 
 | Threat | Attack | Countermeasure |
@@ -350,6 +335,5 @@ The Broker exposes Prometheus-compatible metrics at `/metrics`:
 | `broker_unit_cost_savings_ratio` | Histogram | Runner-up vs winning unit_cost |
 | `broker_budget_utilization_ratio` | Histogram | Session budget utilization |
 | `broker_budget_exhausted_total` | Counter | URIs answered with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED` because the budget left no offer |
-| `broker_reporting_obligations_total` | Counter | Reporting obligations by status |
 | `broker_request_latency_seconds` | Histogram | Total DiscoveryRequest handling time |
 | `broker_requests_total` | Counter | Total DiscoveryRequests handled |
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 19107223..70ee09fe 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -14,15 +14,13 @@ The FORA Broker is the optional demand-side router in the FORA protocol. It sits
 - **Budget filtering** -- `Resolve` drops offers that would exceed the agent's budget (per offer, per session, per period) and answers a URI left with none with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`. How it computes the budget is its own choice, not part of the protocol
 - **Resource deduplication** -- same article from two Exchanges, compare price
 - **Attestation-aware selection (v1.0)** -- prefer offers with higher attestation levels (Level 2 > Level 1 > Level 0)
-- **Reporting relay** -- forward UsageReports to the correct Exchange, track `report_id` for dispute chain
-- **Dispute relay (v1.0)** -- forward `DisputeRequest` messages to the correct Exchange
 - **Selection transparency** -- logged rationale for every selection decision
 
-The RPCs are identical whether the request comes from a Broker or directly from an agent. The Exchange authenticates whichever party signed the request: the agent on a direct call, the Broker on a request the Broker sent. On a purchase the Broker relays, the agent's consent arrives in the body as its acceptance signatures.
+The RPCs are identical whether the request comes from a Broker or directly from an agent. The Exchange authenticates whichever party signed the request: the agent on a direct call, the Broker on a request the Broker sent. On a purchase the Broker relays, the agent's consent arrives in the body as its acceptance signatures, and the purchase is the agent's, billed to the agent's account at each Exchange (see [Accounts](/protocol/authentication/#accounts)). Usage reports and disputes are not relayed: the agent files them itself, with the Exchange that issued the offer, for a purchase made through the Broker as for a direct one.
 
 ## Component Architecture
 
-The Broker is composed of five internal components. Each is a Go interface with a concrete implementation. No inter-component communication uses the network; everything is in-process function calls.
+The Broker is composed of four internal components. Each is a Go interface with a concrete implementation. No inter-component communication uses the network; everything is in-process function calls.
 
 ```mermaid
 graph TB
@@ -31,7 +29,6 @@ graph TB
         SD[Supply Discovery<br/>parallel fanout]
         SE[Selection Engine]
         BT[Budget Tracker]
-        RR[Reporting Relay]
     end
 
     Agent[AI Agent] -->|DiscoveryRequest| SD
@@ -44,9 +41,6 @@ graph TB
     BT -.->|budget check| SE
     SE -->|selected Offers| SD
     SD -->|DiscoveryResponse| Agent
-
-    Agent -->|UsageReport| RR
-    RR -->|forward| MPA
 ```
 
 ### Component Responsibilities
@@ -57,7 +51,6 @@ graph TB
 | **Supply Discovery** | Fans out DiscoverResources RPCs to N Exchanges concurrently | Per-request, stateless |
 | **Selection Engine** | Deduplicates, ranks, filters, and selects the best offer | Per-request, stateless |
 | **Budget Tracker** | Tracks spend per session/period, and filters out offers that would exceed the budget | Per-session in-memory, per-period in Redis |
-| **Reporting Relay** | Forwards UsageReports to the winning Exchange, tracks obligations | Per-transaction, short-lived |
 
 ## Internal Call Flow
 
@@ -119,11 +112,11 @@ The Broker re-packages the agent's purchase. What holds the set together is `Tra
 
 **Why re-packaging is safe.** Each item is atomic and its integrity is per resource. Each offer carries its own Exchange's signature, each acceptance binds the agent to that one offer, and each item's result comes from the Exchange that owns the resource. The Broker therefore assembles independent per-resource purchases. It cannot alter any of them without breaking that item's Exchange signature or the agent's acceptance, and no cross-item integrity is needed. In a result item, the one signed value is the `retrieval_endpoint`, signed by the issuing Exchange; the other fields are the Broker's unsigned report of what each Exchange answered.
 
-**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal`, an `UpstreamRefusal` whose `party` is the Exchange, with the Connect code it answered with and its `ErrorDetail` unchanged, and the other Exchanges' results come back unchanged. With the code `unavailable` or `deadline_exceeded` the item's outcome is unknown, since the Exchange may have bought it before the answer was lost, and the charged totals do not count it; retrying the same request with the same key through the same Broker settles it. With any other code the item was not purchased. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. Every per-item denial is the Exchange's result item, in the body, also for a one-item sub-request. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, the other items of the sub-request may succeed, and the agent buys that offer directly.
+**Upstream refusals ride in the body.** An Exchange that refuses the Broker's whole sub-request, or does not answer it, never becomes an error of the Broker's own. Each affected item carries `TransactionResultItem.refusal`, an `UpstreamRefusal` whose `party` is the Exchange, with the Connect code it answered with and its `ErrorDetail` unchanged, and the other Exchanges' results come back unchanged. With the code `unavailable` or `deadline_exceeded` the item's outcome is unknown, since the Exchange may have bought it before the answer was lost, and the charged totals do not count it; retrying the same request with the same key settles it, through this Broker, another one or directly. With any other code the item was not purchased. `DENIAL_REASON_CONTENT_UNAVAILABLE` is never used as a catch-all for an upstream failure. Every per-item denial is the Exchange's result item, in the body, also for a one-item sub-request. Whether relayed purchases are accepted is decided per item, by the provider of each offer's resource: an item whose provider does not accept them is denied with `DENIAL_REASON_RELAY_NOT_ACCEPTED`, the other items of the sub-request may succeed, and the agent buys that offer directly.
 
 **The Broker's own refusals** are non-OK errors with an `ErrorDetail`: `unauthenticated` with `request_auth_failure` for a bad agent signature, and `SIGNATURE_INVALID` for a `requester.domain` that is not the signing directory; `invalid_argument` for a malformed request; `failed_precondition` for an Exchange it cannot route to or does not approve.
 
-**Idempotency.** The Broker forwards the agent's `idempotency_key` unchanged to every Exchange; it cannot change it, because the acceptances sign it. A retry through the Broker therefore reaches each Exchange as a replay and is answered from that Exchange's stored result. Each Exchange scopes the key per (Broker, requester), so two agents behind one Broker never collide, and refuses the same key with different items with `already_exists`.
+**Idempotency.** The Broker forwards the agent's `idempotency_key` unchanged to every Exchange; it cannot change it, because the acceptances sign it. A retry through the Broker therefore reaches each Exchange as a replay and is answered from that Exchange's stored result. Each Exchange scopes the key to the agent whatever the route, so a retry may go through this Broker, another one or directly, two agents behind one Broker never collide, and the same key with different items is refused with `already_exists`.
 
 **Delegation.** The Broker is the wire signer of every sub-request, so each Exchange checks a delegation's `cnf.jkt` against the key the item's `AgentAcceptance` verifies under, not against the Broker. The agent does not need to delegate to the Broker.
 
@@ -349,10 +342,9 @@ sequenceDiagram
 
     Note over Agent: Use content (RAG, grounding)
 
-    Agent->>Orch: UsageReport(transaction_id, consumed_quantity, function)
-    Orch->>MPA: Forward UsageReport
-    MPA-->>Orch: UsageReportResponse(accepted)
-    Orch-->>Agent: UsageReportResponse(accepted)
+    Note over Agent,MPA: The agent files its own report with the issuing Exchange,<br/>for a purchase made through the Broker too
+    Agent->>MPA: UsageReport(transaction_id, consumed_quantity, function)
+    MPA-->>Agent: UsageReportResponse(accepted)
 ```
 
 ## Key Design Decisions
@@ -390,9 +382,6 @@ github.com/FORA-Protocol/protocol/broker/
             policy.go           # Pluggable selection policies
         budget/                 # Budget Tracker
             tracker.go          # BudgetTracker interface + in-memory impl
-        reporting/              # Reporting Relay
-            relay.go            # ReportingRelay interface + impl
-            obligations.go      # Obligation tracking + deadline checker
         metrics/                # Prometheus metrics
             metrics.go          # All metric definitions
     internal/
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index f47b849d..9619027f 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -27,7 +27,7 @@ sequenceDiagram
 
     Note over SD: Lookup URI(s) in radix trie
     Note over SD: Filter catalog by requester.scopes
-    Note over SD: One Offer per entitled LicenseTerm<br/>(restrictions ride on that offer's term; the agent chooses an offer, no server-side filter)
+    Note over SD: One Offer per entitled LicenseTerm<br/>(restrictions ride on that offer's term, and the agent chooses an offer, no server-side filter)
     Note over SD: Build []Offer from templates + live pricing
 
     SD-->>Handler: []Offer
@@ -264,7 +264,7 @@ Requester authentication uses an RFC 9421 HTTP Message Signature in the HTTP hea
 
 1. **Enterprise (out-of-band key exchange)**: During contract signing, the Exchange operator registers the requester's public key via an internal admin API: `POST /admin/requesters { requester_id, domain, public_key, subscription }`. The public key is exchanged out-of-band (email, portal, API) as part of the commercial agreement.
 
-2. **Self-signup (domain verification)**: The requester registers via the public API: `POST /exchange/v1/requesters/register { requester_id, domain }`. The Exchange fetches the requester's WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`) from the domain, reads the matching key (identified by its RFC 7638 thumbprint, the RFC 9421 `keyid`), and verifies that `requester_id` matches. No subscription is created — self-signup requesters use per-request billing only.
+2. **Self-signup**: The agent calls `ExchangeService.Register`, signed with a key its WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`) publishes. The Exchange verifies the signature against that directory, the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`), and creates the account for the directory, never for a `requester_id` (see [Accounts](/protocol/authentication/#accounts)). No subscription is created — self-signup requesters use per-request billing only.
 
 **Requester public key storage:**
 
@@ -362,7 +362,7 @@ sequenceDiagram
     Note over Handler: Reject unless EVERY items[].offer.exchange names this Exchange's own domain (INVALID_ARGUMENT)
     Note over Handler: Verify the sender's RFC 9421 HTTP Message Signature<br/>(the agent's, or the Broker's on a re-packaged sub-request)
     Note over Handler: Verify the agent's authorization: agent_request_acceptance and its projection,<br/>and on a re-packaged sub-request the item acceptances
-    Note over Handler: Resolve the agent's account (direct: the signer's directory;<br/>relayed: requester.domain, once the acceptances verify)
+    Note over Handler: Resolve the agent's account (direct: the signer's directory,<br/>relayed: requester.domain, once the acceptances verify)
     Note over Handler: Check idempotency key, scoped to the agent
 
     Handler->>Idemp: Check(agent, idempotency_key)
@@ -372,7 +372,7 @@ sequenceDiagram
     end
 
     loop For each item in items
-        Note over Handler: Verify the presented item.offer signature<br/>(Ed25519 default; no offer storage, no re-resolution)
+        Note over Handler: Verify the presented item.offer signature<br/>(Ed25519 default, no offer storage, no re-resolution)
         Note over Handler: Extract tenant via domain→tenant lookup
 
         Handler->>BA: Authorize(ctx, AuthorizeRequest)
diff --git a/website/src/content/docs/components/exchange/scaling.mdx b/website/src/content/docs/components/exchange/scaling.mdx
index 02e1f84b..d34523c5 100644
--- a/website/src/content/docs/components/exchange/scaling.mdx
+++ b/website/src/content/docs/components/exchange/scaling.mdx
@@ -166,9 +166,11 @@ At 10K RPS with 50ms flush interval, each batch contains ~500 records. One fdata
 The idempotency cache uses a concurrent LRU with sharded locks to avoid contention:
 
 ```go
-// IdempotencyCache stores recent TransactionResponse values keyed by the
-// request's idempotency key (TransactionRequest.idempotency_key).
-// Sharded by hash of key to reduce lock contention.
+// IdempotencyCache stores recent TransactionResponse values keyed by the agent
+// and its idempotency key: the agent's authenticated key directory plus
+// TransactionRequest.idempotency_key, whatever route the request took (see
+// "Accounts" and "Idempotency" in the protocol). Sharded by hash of key to
+// reduce lock contention.
 type IdempotencyCache struct {
     shards    [256]*idempotencyShard
     ttl       time.Duration
@@ -218,19 +220,22 @@ Result: Two signed URLs issued for one billing event. CDN redeems one. No financ
 **Scale Tier**: At 10K+ RPS, use Redis for distributed idempotency:
 
 ```go
-// Distributed idempotency check via Redis. The key is the request's
-// idempotency key (TransactionRequest.idempotency_key), not the wire
-// correlation id (which rides the X-Request-ID HTTP header).
-func (h *ExchangeHandler) checkIdempotency(ctx context.Context, idempotencyKey string) (*forav1.TransactionResponse, error) {
+// Distributed idempotency check via Redis. The key is the agent (its
+// authenticated key directory, which holds no "/") and the request's
+// idempotency key (TransactionRequest.idempotency_key), whatever the route,
+// not the wire correlation id (which rides the X-Request-ID HTTP header).
+func (h *ExchangeHandler) checkIdempotency(ctx context.Context, agent, idempotencyKey string) (*forav1.TransactionResponse, error) {
+    key := agent + "/" + idempotencyKey
     // 1. Local LRU (fast path, no network)
-    if cached, ok := h.localCache.Get(idempotencyKey); ok {
+    if cached, ok := h.localCache.Get(key); ok {
         return cached, nil
     }
     // 2. Redis SETNX with TTL (distributed lock)
-    acquired, err := h.redis.SetNX(ctx, "idemp:"+idempotencyKey, "processing", 10*time.Minute).Result()
+    acquired, err := h.redis.SetNX(ctx, "idemp:"+key, "processing", 10*time.Minute).Result()
     if err != nil {
         // Redis down — fall back to Growth tier behavior (accept the risk)
         slog.Warn("redis idempotency check failed, proceeding without distributed lock",
+            slog.String("agent", agent),
             slog.String("idempotency_key", idempotencyKey),
             slog.Any("error", err),
         )
@@ -238,7 +243,7 @@ func (h *ExchangeHandler) checkIdempotency(ctx context.Context, idempotencyKey s
     }
     if !acquired {
         // Another node is processing — wait briefly, then read result
-        return h.waitForResult(ctx, idempotencyKey)
+        return h.waitForResult(ctx, key)
     }
     return nil, nil // Proceed with new transaction
 }
diff --git a/website/src/content/docs/components/exchange/storage-model.mdx b/website/src/content/docs/components/exchange/storage-model.mdx
index 272b4941..073a45d0 100644
--- a/website/src/content/docs/components/exchange/storage-model.mdx
+++ b/website/src/content/docs/components/exchange/storage-model.mdx
@@ -113,9 +113,13 @@ type TransactionRecord struct {
 
     // Idempotency. Stores the request's idempotency key
     // (TransactionRequest.idempotency_key) so a replay returns the original
-    // record. This is the durable dedupe key, NOT the wire correlation id —
-    // request/response correlation rides the X-Request-ID HTTP header.
+    // record. The dedupe key is the agent and this key, whatever the route: a
+    // retry through a Broker or directly finds the same record. It is NOT the
+    // wire correlation id — request/response correlation rides the X-Request-ID
+    // HTTP header.
     IdempotencyKey string `json:"idempotency_key"`
+    // The Broker that relayed the purchase, if any: attribution only. The
+    // purchase is the agent's and is billed to BillingRef.
     Broker string `json:"broker,omitempty"`
 
     // Offer snapshot (serialized JSON of the offer at transaction time).
diff --git a/website/src/content/docs/components/transaction-log/storage-backends.mdx b/website/src/content/docs/components/transaction-log/storage-backends.mdx
index c3017581..70c21502 100644
--- a/website/src/content/docs/components/transaction-log/storage-backends.mdx
+++ b/website/src/content/docs/components/transaction-log/storage-backends.mdx
@@ -188,8 +188,9 @@ type TransactionEvent struct {
     TransactionID  string `json:"transaction_id,omitempty"  db:"transaction_id"`
     BillingID      string `json:"billing_id,omitempty"      db:"billing_id"`
     // The request's idempotency key (TransactionRequest.idempotency_key /
-    // UsageReport.idempotency_key). Durable dedupe key, NOT the wire
-    // correlation id — correlation rides the X-Request-ID HTTP header.
+    // UsageReport.idempotency_key). With the agent, the durable dedupe key,
+    // whatever the route; NOT the wire correlation id — correlation rides the
+    // X-Request-ID HTTP header.
     IdempotencyKey string `json:"idempotency_key,omitempty" db:"idempotency_key"`
     OfferID        string `json:"offer_id,omitempty"        db:"offer_id"`
     SubscriptionID string `json:"subscription_id,omitempty" db:"subscription_id"`
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 7deef434..2ceebe32 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -374,7 +374,7 @@ The core protocol is domain-agnostic. Extension profiles add domain-specific met
 
 ## Next Steps
 
-1. Register your agent with a participating Exchange — `Register` in Go, `register` in TypeScript and Python. The Exchange creates your account and bills it based on your verified request signature, never on anything you send. Address the call by naming the Exchange's bare domain on the request: the SDK resolves the endpoint from that Exchange's own manifest, reads the terms revision it publishes from a freshly fetched copy, and echoes it so the signature records what you accepted.
+1. Register your agent with a participating Exchange — `Register` in Go, `register` in TypeScript and Python. The Exchange creates your account and bills it based on what authenticates you, never on anything you send: your request signature on a direct purchase, your acceptances on a purchase a Broker relays, which is yours too (see [Accounts](/protocol/authentication/#accounts)). Address the call by naming the Exchange's bare domain on the request: the SDK resolves the endpoint from that Exchange's own manifest, reads the terms revision it publishes from a freshly fetched copy, and echoes it so the signature records what you accepted.
 2. Check the account with `GetAccountStatus` / `getAccountStatus` before you transact. If you hold no account there yet, the Exchange answers with the Connect code `not_found` (an empty account handle from an older Exchange means the same); an account that exists but is not active is waiting for the operator to switch it on, and the remedy is to wait or contact them rather than to register again. An account is per-Exchange, so a client can hold several — the same client registers at each.
 3. Install the SDK, declare your `supported_profiles`, and configure your budget
 4. Replace your per-provider integrations with `client.Fetch()`
diff --git a/website/src/content/docs/getting-started/for-ai-platforms.mdx b/website/src/content/docs/getting-started/for-ai-platforms.mdx
index 0975d4e0..5c285e35 100644
--- a/website/src/content/docs/getting-started/for-ai-platforms.mdx
+++ b/website/src/content/docs/getting-started/for-ai-platforms.mdx
@@ -55,7 +55,7 @@ With FORA:
 |----------|------------|---------|------|--------|
 | All of the above | `client.Fetch()` | One Broker budget | Ed25519 | Standard FORA Offer → signed URL |
 
-One integration. One SDK. One billing relationship (per Exchange, or aggregated through a Broker). Resources behind the signed URL come in their native format — FORA handles the transaction layer, not the content format.
+One integration. One SDK. One account at each Exchange the agent buys from, with one Broker budget across them: a purchase made through a Broker is billed to the agent's own account at that Exchange. Resources behind the signed URL come in their native format — FORA handles the transaction layer, not the content format.
 
 ## Enterprise Architecture
 
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index 12359405..e5d178a0 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -293,7 +293,9 @@ type BillingAdapter interface {
     CheckSubscription(ctx, billingRef, providerGroup) → (sub, error)
 }
 // billingRef is the account handle the Exchange minted at Register and
-// resolves from the verified request signature on every call.
+// resolves on every call from what authenticates the agent: the request
+// signature on a direct request, the agent's acceptances on a purchase a
+// Broker relays. The account is the agent's, never the Broker's.
 ```
 
 Implement these three methods against your existing billing system. The reference implementation uses DynamoDB; production deployments wire it to their real ledger.
diff --git a/website/src/content/docs/getting-started/how-money-flows.mdx b/website/src/content/docs/getting-started/how-money-flows.mdx
index d1dfb2b9..e951f36d 100644
--- a/website/src/content/docs/getting-started/how-money-flows.mdx
+++ b/website/src/content/docs/getting-started/how-money-flows.mdx
@@ -10,11 +10,11 @@ FORA never touches money. It follows the OpenRTB model: the protocol handles aut
 The chain works like this:
 
 ```
-Provider -> Exchange operator -> AI Company (Agent / Broker)
+Provider -> Exchange operator -> AI Company (the agent's account holder)
 ```
 
 1. The **Exchange** (operated by an Exchange operator, provider, or third party) handles all billing through its pluggable Billing Adapter
-2. The Exchange operator **invoices the AI company** via its existing system (monthly invoicing, prepaid balance, etc.)
+2. The Exchange operator **invoices the AI company** via its existing system (monthly invoicing, prepaid balance, etc.). A purchase made through a Broker is billed to the agent's own account, as a direct one is
 3. The Exchange operator **pays the provider** via its existing revenue-share agreement
 
 The `billing_id` in a `TransactionResponse` is an invoice line item, not a payment confirmation. Settlement happens offline, same as programmatic advertising.
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 8e899d8d..86f0dae3 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -279,8 +279,8 @@ The SDK sends `DiscoverResources` to SSP-Alpha — `POST https://exchange.ssp-al
 3. Resolve tenant: techcrunch.com -> Hearst Media tenant
 4. Find offers: lookup "/premium/ai-regulation-2026.html" in radix trie -> match
 5. Check subscription with quota (the account handle is resolved from the
-   requester's VERIFIED IDENTITY from step 2 — requester.id + domain, via the
-   RFC 9421 signature — never from the request body):
+   agent's key directory, which the RFC 9421 signature authenticated in step 2;
+   requester.id is only a label and never selects the account):
    BillingAdapter.CheckSubscription("acct_7f3e21c9", "hearst-media")
      -> { subscription_id: "SUB-ANTHROPIC-HEARST-2026",
           active: true,
@@ -771,7 +771,9 @@ The sub-request body carries SSP-Alpha's items exactly as the agent signed them,
    - Ed25519 verify exchange_signature on offer -> pass
    - Reconstruct offer data from signed token (stateless, no offer storage)
 5. subscription_id present on offer -> SKIP billing.Authorize (already paid under subscription)
-6. Quota check:
+6. Quota check, on the agent's account: the purchase is Anthropic's, resolved
+   from requester.domain once the agent_acceptance verified in step 2b, never
+   the Broker's:
    - BillingAdapter.CheckSubscription("acct_7f3e21c9", "hearst-media")
      -> quota_remaining: 850000 tokens
    - Estimated consumption: 3300 tokens
diff --git a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
index a039ef02..ecbdaf79 100644
--- a/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
+++ b/website/src/content/docs/protocol/walkthrough-due-diligence.mdx
@@ -733,7 +733,7 @@ The agent fetches all resources in parallel: each signed URL is bound to the age
 
 ## Step 8 — UsageReports (6 reports to 4+ Exchanges)
 
-The Broker files a `UsageReport` for every transaction, to every Exchange. All reports share the same `budget_scope` via the `ext` field, enabling cross-exchange spend tracking.
+The agent files a `UsageReport` for every transaction, itself, with each Exchange that issued the offer: the purchases went through the Broker, but they are the agent's, and no Broker files or relays a report (see [Accounts](/protocol/authentication/#accounts)). All reports share the same `budget_scope` via the `ext` field, enabling cross-exchange spend tracking.
 
 ### Report 1: Credit Report
 
@@ -805,7 +805,7 @@ The Broker files a `UsageReport` for every transaction, to every Exchange. All r
 
 ### Broker Budget Ledger (Post-Transaction)
 
-The Broker maintains a running budget ledger for `deal:acme-acquisition`:
+The Broker maintains a running budget ledger for `deal:acme-acquisition`, from the totals of the purchases it relayed:
 
 ```
 ┌──────────────────────────────────────────────────────────┐
@@ -863,7 +863,7 @@ The same `ResourceIdentity` message handles both — the `resource_mutability` f
 The `budget_scope: "deal:acme-acquisition"` field in `RequestConstraints` enables deal-level spend tracking across all Exchanges. The Broker:
 1. Filters offers at discovery: `BrokerService.Resolve` drops any offer that would take the scope's spend past `period_budget`. When no offer for a URI remains, that URI comes back with `OFFER_ABSENCE_REASON_BUDGET_EXCEEDED`, a successful "no result" rather than an error
 2. Counts the scope's spend in its own way; the protocol leaves the computation to the Broker. Discovery never charges
-3. Reports actual spend per Exchange in `UsageReport.ext.budget_scope`
+3. Records spend per Exchange from each `BrokerTransactionResponse.totals`, while the agent's own usage reports carry the scope in `UsageReport.ext.budget_scope`
 4. Maintains a ledger for audit (which Exchange got how much for what)
 
 ### 5. ROI: Licensed Data vs. Manual Research
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 9b2c8b69..e60fe2ea 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -628,7 +628,11 @@ stored denial takes a new key and new acceptances.
 
 Docs: the authentication page gains "Accounts", and the transaction-flow, request-flows,
 threat-model and reference pages state the rule. The Broker retry comments in all three
-SDKs and the Python README say a retry may take any route.
+SDKs and the Python README say a retry may take any route. The Broker overview and
+deployment pages no longer describe a report or dispute relay or a `ReportingRelay`
+interface, and the agent SDK, due-diligence, scenario, money-flow and getting-started
+pages say the agent holds the account and files its own reports. The Exchange scaling
+and storage pages key the idempotency store by the agent and its key.
 
 **A scope shortfall is never disclosed: `OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT` and
 `DENIAL_REASON_SCOPE_INSUFFICIENT` are deprecated and never sent (no wire change).**

From dc8763c0a101349f454e901886a4592500e2e662 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 12:49:58 +0200
Subject: [PATCH 157/164] State that a requester's scopes are its own
 statement, in the protocol

Requester.scopes was called the enforcement mechanism for enterprise
roles and subscription entitlements, LicenseTerm.scopes said an
Exchange returns an offer for a term iff the requester's scopes cover
it, and the threat model listed scope pollution as preventable at
protocol level. Nothing verifies those scopes: they are part of the
signed request, attributable to the signer, and unverified.

The comments and docs now say so. Scope coverage decides which terms
an Exchange presents, and it is not access control. A false statement
is traceable to the signing key, its directory and its account, and
is settled through reconciliation and the account relationship. An
Exchange MAY require a verified delegation that grants a term's scopes
before it presents the term, and answers a requester that presents
none as if the term did not exist. The purchase-time entitlement
denials are unchanged.

The threat model's scope-pollution entry says what reconciliation
compares and moves to the reconciliation and contractual rows. Its
holder-binding entries name the key the request proves possession
of, which on a relayed purchase is the acceptance key. The design
history records that verifying scopes is deferred. Comments only in
the proto; regenerated artifacts carry the new text, and the
generated-client test that pins the opening words of the
Requester.scopes comment pins the new ones.
---
 docs/design-history.md                        |  48 ++++++++++++++
 gen/descriptor.binpb                          | Bin 695177 -> 696381 bytes
 gen/go/fora/v1/fora.pb.go                     |  39 ++++++++----
 .../fora.v1.DiscoveryRequest.schema.json      |   8 +--
 ...ora.v1.DiscoveryRequest.schema.strict.json |   8 +--
 .../fora.v1.DiscoveryResponse.schema.json     |   4 +-
 ...ra.v1.DiscoveryResponse.schema.strict.json |   4 +-
 .../fora.v1.LicenseTerm.schema.json           |   4 +-
 .../fora.v1.LicenseTerm.schema.strict.json    |   4 +-
 gen/jsonschema/fora.v1.Offer.schema.json      |   4 +-
 .../fora.v1.Offer.schema.strict.json          |   4 +-
 gen/jsonschema/fora.v1.OfferGroup.schema.json |   4 +-
 .../fora.v1.OfferGroup.schema.strict.json     |   4 +-
 .../fora.v1.PushResourcesRequest.schema.json  |   4 +-
 ...v1.PushResourcesRequest.schema.strict.json |   4 +-
 gen/jsonschema/fora.v1.Requester.schema.json  |   6 +-
 .../fora.v1.Requester.schema.strict.json      |   6 +-
 .../fora.v1.ResourceEntry.schema.json         |   4 +-
 .../fora.v1.ResourceEntry.schema.strict.json  |   4 +-
 .../fora.v1.ResourceQuery.schema.json         |   8 +--
 .../fora.v1.ResourceQuery.schema.strict.json  |   8 +--
 .../fora.v1.ResourceResponse.schema.json      |   4 +-
 ...ora.v1.ResourceResponse.schema.strict.json |   4 +-
 .../fora.v1.TransactionItem.schema.json       |   4 +-
 ...fora.v1.TransactionItem.schema.strict.json |   4 +-
 .../fora.v1.TransactionRequest.schema.json    |  10 +--
 ...a.v1.TransactionRequest.schema.strict.json |  10 +--
 .../tests/test_comment_first_paragraph.py     |   2 +-
 gen/python/wire/models.py                     |   8 +--
 gen/ts/wire/schemas.ts                        |  24 +++----
 proto/CHANGELOG.md                            |  20 ++++++
 proto/fora/v1/fora.proto                      |  60 +++++++++++-------
 .../architecture/production-architecture.mdx  |   2 +-
 .../docs/components/broker/overview.mdx       |   2 +-
 .../components/exchange/request-flows.mdx     |  10 +--
 .../docs/getting-started/for-ai-agents.mdx    |   2 +-
 .../for-exchange-operators.mdx                |   2 +-
 .../content/docs/protocol/authentication.mdx  |  15 +++--
 .../content/docs/protocol/jsonl-ingestion.mdx |   2 +-
 .../content/docs/protocol/licensing-terms.mdx |   6 +-
 .../docs/protocol/standards-layering.mdx      |   2 +-
 .../src/content/docs/reference/changelog.mdx  |  20 ++++++
 .../src/content/docs/reference/proto-fora.mdx |   2 +-
 .../content/docs/security/threat-model.mdx    |  12 ++--
 44 files changed, 265 insertions(+), 141 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index fdd5bcab..23f1217f 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -604,6 +604,11 @@ records only the wire-shaping reasoning.
 > acceptance, verified against the directory `Requester.domain` names, not the
 > request signature. Identity is still a signature and never a field. See "A
 > purchase a Broker relays is the agent's".
+>
+> **Superseded in part — what scopes are.** The scopes a requester states are its own
+> signed statement, which the Exchange does not verify: they decide which terms are
+> presented. A delegation the Exchange verifies grants scopes, where an Exchange
+> requires one. See "A requester's scopes are its own statement".
 
 `Requester` once carried a `license_id`, and the name implied that the value was
 what entitled the requester to access — that holding the right `license_id`
@@ -713,6 +718,12 @@ default.)
 
 ## One normative scope-matching algorithm
 
+> **Superseded in part — what a match decides.** The algorithm stands. The requester
+> side it compares is the requester's own statement, which the Exchange does not
+> verify, so a match decides which terms are presented, not what an actor may reach,
+> unless a verified delegation grants the scopes. See "A requester's scopes are its own
+> statement".
+
 Scopes appear in two places — on the requester/delegation side (what an actor may
 reach) and on `LicenseTerm.scopes` (what a term covers) — and earlier drafts left
 the matching semantics implicit, which invited each implementation to choose its
@@ -731,6 +742,13 @@ normative rule.
 
 ## Revenue share stays off-protocol
 
+> **Superseded in part — how the deal's party reaches the term.** It states the
+> matching scope in its signed request and need not hold a delegation; a delegation
+> counts only where an Exchange requires one before it presents a scoped term. An agent
+> that states the scope without being party to the deal is shown the term, and
+> reconciling purchases against the deal's parties exposes it. See "A requester's
+> scopes are its own statement".
+
 CoMP's `License` carries a `revshare` rate next to `price`, and FORA's
 `PricingModel` was reduced to three charging structures (`FREE`, `PER_UNIT`,
 `FLAT`), so the conspicuous question is whether FORA should add a
@@ -2774,3 +2792,33 @@ purchase, since a report or a dispute is the agent's own signed request, and wou
 agent blocked for overdue reports buy around the gate through a Broker. The scope keeps
 the existing tenant rule: a key used at another tenant of the same Exchange is still a
 different key.
+
+## A requester's scopes are its own statement
+
+`Requester.scopes` was described as "the enforcement mechanism" for enterprise roles and
+subscription entitlements, `LicenseTerm.scopes` said an Exchange returns an offer for a
+term "iff" the requester's scopes cover the term's, and the threat model listed scope
+pollution as preventable at protocol level. Nothing verifies those scopes. They are part
+of the signed request, so they are attributable to the signing key, its directory and
+its account, but attribution is not prevention: an Exchange that matches a term against
+them is matching a statement.
+
+The scopes are the requester's own statement: signed, attributable and unverified.
+Coverage decides which terms an Exchange presents, so a requester that does not state a
+scope never learns the term exists, while one that states it falsely is shown the term.
+The agent's acceptance signs the scoped offer it buys, so reconciling an account's
+purchases against what each term's issuer granted that account exposes a false
+statement, and the account relationship and the term's contract settle it. The threat
+model moves scope pollution to "Detectable via reconciliation" and "Legal/contractual
+only".
+
+An Exchange that needs prevention MAY require a verified delegation that grants a term's
+scopes before it presents the term, and answers a requester that presents none as if the
+term did not exist. Existence hiding already permits that silence, and an offer the
+Exchange did present is still honoured until it expires.
+
+Verifying stated scopes is deferred, not designed out. It needs a grant the Exchange can
+check for every scoped term, such as a delegation from an issuer it trusts for the
+scope, and, on a query a Broker originated, a way for the agent to prove it holds that
+grant, which a request the Broker signs alone cannot carry. The purchase-time
+entitlement denials are unchanged.
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 927390aac04a4f302896c393023b665edbdac2a8..c8c726b4d986eb2401eda76ce7228c5b96b378d0 100644
GIT binary patch
delta 48348
zcmZ^McYqW{_Ww?APp8@02|GKx6L)r&EW1m_u#2E#&U#7jRD@NzLr}oG^Lt@|BZFip
zf`CZQL8L(>h$2ds0|5mTQ6#7!K}9(DeO^^H&H4R(_pg1g-}}_7s#mXGh3*+-H(Im4
zQLnz9zDnQRzUp%C;761t6YQanc)e4t?>`A!de|G!Sz%8)<87~nc6{ow6fGyL9nZ~K
zrh1xPX5athU0l&2)2XIQ&9fbPcJ9`-eh(|tqhq%hYI-!z^mw7BYo|=d4lm&Un!mo#
zx%<nR4qZF3O&7d%^-Rxhf2!$fv9lMvjh@InT=U{fH9dOPbgvM)na({jJ)f(wGTogA
z^?PKx{iSQBN6!vDYo4#^+LMq-s%y8NnLpQb@BB>XnogMpJ!)$H7gj?%`Lp+iF2Uou
zMv?VduBB=@N={fkW7j;R9rje7$<>N1zvU&a0(Ne3U5CsivPoO(pqDFo!fG$oe(5>w
zkW$`D)rzH<2U@+<*mVvGtzK%YyQ~ge2@m_SUVqX$R`gZ1kd#q~tA<k!36;KTgPW{j
z8rK0i+75Nmg1Hr=-EwlFG+K?-mrA)Lr8aA4ZSim=HLQ+j4|LPERg71)5-FrYXS|xZ
z!6BhDUcK!}>lLBn4XdxRyI;_TSG?-#c%k#EnrS0-ywG`7y{m&YQnZ2=R%hG#i`r<V
zVz#Q~ODPRXv(-S_A)z!|ZFqxatK2v}tS+@b=%L-9R4!GusFc#7v{Wssa7ZXERd0C6
znyXrh3NKru=4`f`{8?+D1lFiV%6i69Ro-{&*|UGuo@=^ZRd|aM6P>eO4Rd570kvL@
z#jV#-QP7^S_MWPIIPPU_S}p#us6=9;0p3%64u}UJ@2O$lvGf!m@2QET6%fJ(fuufE
zbFGkN(sN^g8AcU0s%jIf!16gPH6P6PRrSXIW&&-Ks@|0SZ!Vhi1694>I*XB|!px7<
zoJs7K|IyBbK2nWB>ov09L;kv3WiJlVCb7@|rfJQ0tBS$vfJZQTw`%4&B#POs27=aS
zLK9E-t4h20P8R#S)-r-YC5LCGb5Ajvda#av*GAtDDWAlkcG$1x6*?p!_p8M*hct+c
zx3z+n0n?}zV#G<@Y&GV_qV@;aZU4|Jo;=_*wMS9V)CZiV28kjLIQ<0@MI501qJ9C1
zA`YmDyLm$sDH{5Kn!L+esPICd@P+-+KeS3u^%rg_xoFNWR9{Bo<f4=>)Y9u6l9be&
zs;u=U$H0*J(XOu5HmKD<x)>@jepG#BQVE>`vQA@%1jdhQWfN;Yh67ARwffsteYJ(k
zZT-E{vA`v^S2`9*VD$Hf>qrb5QvJR48(5P>U9_+^)T@m2s`0_B?NnnH8}pSBWyc3-
zkJW<jbhHMLp<Yust4GlQGSnN1a_<BQ?;Pqa8tKio!n|KJG+KUGd&R4c@OouKavt=C
zd9^UaOxVv^TG%_>tF7}`CA>};tz*1OHXh2bAHLKJTY3~7Z331U86aWG7;h{o>!Sm5
zjJKrJx-5JSy*JUzLSFsCZ63uyD^GM=#z4zVbX&#%(nN2V#|>Cx0BNGPw9Fc>U^pmY
z?R9U?2licqwIWaOb+1t@#)CrRVJ3TFi1vD`nN9<N39Ol3ITAnuYo-??VGmhF9;eOo
zDvQy|?|DYQRvlv<hH5Kn!4eG&0qD<j8W<$>=XoQAyn#WYf#-Rni)8~7gE#PeuewM!
zu;f8+fz!Z}g$7>88@QUAf)TRJt0d!<88+?}?S^U)A|xq_f|g$9^#ys;f`m=WydgeA
zp$;@omU-g|YpAFb$Q3Mam^Q3>g$qH0V1?HwhA&hAvBDe8N<^ABR(R{yvwk4wQxtU1
zT6^y>?XRBdwJrt?g0)_s=x_)DW34wP#so-Uto7Eb&;5lD?RUKF`!Dr)OAyd}$8i;q
z(0s>n6_C(;=c=pl+HR7r0s^*da&6GyDw`Zv!BZe@a$E%@kT#L4tfa`98`idYbG~84
zqcl6P&1;0MU!iun<S0AXp;6jz%6B*&4JMFwIF14mNIS?;9^xu^xQjhKT6?5=mt#w=
z;z6x;Io$%1gq&^x34~qLEdwy!p;Ywmr}mlAnyFNO>S9pWe(Lp!AO|5}eCkc`yn%Fp
z@u|0>(i$x=Kz?OkKTa!Ds=snEsBgdW`grC5CF<L+ylD}fK$4Od!D#{YZ7%igNqg{k
zt-{mhq>Dj)d(yRo`u3zZ!DnI80meyh(`MEXw5u1h@M&+(MfSr4ZE)bU*BhaB_3}yh
zdp3Nc_M7zgUWJcdVxr#PdrPy{qg)2KXPG)l`*q#3UL`^92N}wi&U(`&)(m(sXplbu
zAwJf_JY%#78$C%Ing)l@HuRheBvaO1TpY&z#HwG_?n(dTRZ1l$Wkx@F>(sTL<ua)C
z&urGKTIbBqu5FYF{Y<v4%|*2k3;Jp~i|oqD+8R%|ujVb{_2Lt4KTWC6)^9QIuOlW`
z(0uH8K?0<ohOu)q3c}PERtK;brfTg<251V;8i@&+0a}BGJjVhJaxmLDRU2M1SX1h8
zi@_wW*07Ov799m4RBMF&&)2k<Jn0dd!d-&6kQ$-EC7$3ysMjbKdR==eJxWt}cR_~g
zHA+Kw!FfSq$c$mbU)LTf8RMEn8QmB%X*lLA2%-O{+Mem!NTtnGO=&1?q7-hb*0|gu
zVbfHtqMem*X{1B0HdU)^Ywe|u!yFJ+XRw_!wf!YCG^MFjqKs~a)}p1=A5IJ*%mfSV
z4`ykGl3D21-hk9Xs{K1Obk(r-hL*FAot~qu54@ov=|SrvGGXYx$=1!)+LgblDLNHE
zOjz-zX80WvM!u;9L)Hyk1rJxU@_E`#<ttqk8mlWcL(H2hAFC@hg!LM(0#jDAvGcTN
z%U5f{NyS{DuGW%bzDA5hDXTTi*AH?PP-|Jk`P##6)@m|ts|pRwwVKQtK%&sKTAfDH
zP8yhNwekw<T@5w%hP9nq&X@M8`PwbHft?ys+vY&_Qk8cxYq8d{e3vGtB`^WCOEX0%
z1_`KL8nV(BTm=vJur7<WR^@w~Dtmc&+M^i-ymXLI*`q~^tY%yVRo=&TEY@0-?{ihi
znfD=ykSbK=eOh7EYQj}Oeaf0F(VCTi>Z(v3Kh?0PqOS4s;Pa`5ASeujw;p1{muRi3
z4>_&mRVefv(tM&}K?32BR#$``kSOL5`SK!~-Mr+?N0_oyThiu;3qh&X5lyC6kO9OI
zO(y;z0dYh_A~^-a9HnXBX*q-J(@V9<p1R)&zsXfKJ*=JAlna__P0O`(&;!g|L^|Tx
z%ihpl^W61=rk3#pS3E<L{ivzGy@rEwe$vzysJp=HuPcLf)tcvZ@DO5%XHR-lo2#@O
zpsNjCZHf^Cb+ra*nITF?7kLNi>U57aibA(Wt}w!W8II~HAE8TM02j3#q01Z)B&-;r
z!<XB09XuS(-dd&IQ9W9hj;ZlA&S+h>7f2G)!=lqb0%5d{PFrnp2pBfcZu6E_?Jb|D
zD<<z+jZancbXZG04H8Q8sMt!b18O0gvrcPTzED?0;-c{Zuuu<)OdKQ$>1B1Sc3cI{
zv4m;swOgx}xR#Q0EYW=;7u2|OEYV9E$U@0Emgv_t=0imz-*|)dTd%dOe#1qe+~W;h
zx))?n*EjUKl@ft`;|;x8b89ZSmquZ5CHrx`HoyH!7eXVh?&H%H$pB)dE+YX*K&;de
z2^P`{0z)CJZPt|?x*C7gWbLLJN!D$VX|NHGTACf&p#4Lw#bc3QLKs+^-Oi(|c{8;l
zEidsD`Q>Ikx<eNUJTZ8FxkXpE>mq@dJm_sjLe3L-$wGd)O{WC@K$_cyxI5ZVisIXB
z|0eBsfeH|g6_jz0HcT<l5oLfj+Q2~HB^t$~ZG<r&Yr8APyE-Ox#v7){_cg_Y&Ugd)
zK3~6JXol4(_PD)T%2PeXxaxQox@d}V)$uG~OfkZI&PH`DU`#RU)U#%ba(!WSIy=2j
zn_E5Ih42Alx(ne0#B?L<_>>P2(~Yva)@p-SIxno+_Q(6RYPH&SG4jx%wsF;~@_=C*
zB_iw6lssVAMnw~A9c5jb;>VKTe(;diPN{y+#qa~;J>#lh`GN7Can-N<z<AGS*1|d?
zs*;a>W!pd3&Q))AA@TvS*^nz!P00tuW}~#Zbj^G~Y&Ke5Z(YU?5X=aK)r0nx!&<N0
zwg+8|05A?3KBwyfz&L0WIIbE1#z7;Uu?G1$Mlh^hGL$R!y05f>S}pz+OAJj30_Kw8
z6MH2f0dvVHaymB%m`l{T!YzYv%S%S~iXnDAAWn;MsQkxJEBUfgvJg2g6N{FRni2}D
zeN4WDZ2#AuHC=nKOJC}Nmf)joJP?x^NC5RQ<w6o9%I;%23rQp-2$QB*NK$q})YV#q
z;Tr?ZtL{Z64K(FK62d?lXkv9R&cr-`VLIK+8Dih@oi<htPB*cT97BDjQ<$B@zB!|f
ztD56Lg9+$44m3zW&oRS%PmNRnJ;%(JS$A>-Je<$gp4INIp6?>i#?pKjfr9RQGb~nQ
zIuE+@O>C(26-J<Hi&^_~TK}rWE(Arm#V!QR&x_5l=xm*b;Ke4==sUO(Flian&ue#8
zFLM!cfw0U)py_&<DQ8NZN91KDX3FWbk)hLCVT1k3d2OarwZX+euA**mF=)cx;IuMy
zQ0@j3N%adH0<!P3u0LtrtKWAKXuf{mMWC4czA3goQ7Xmc_svYHHBjdeaF2a<>Vh^n
zx8pujiSXf}^C-N}EEH1#NGR<yF%{5s1QOA1pII(uXCeofLE=>W1|ibo0^ndn5xhr#
zWepMaMgDrsw*I5NqTG7SwN{6<$6RYEWFK?8o<jC9>iX5#Mg}knK4U8N;tO)w$fJ7N
z{^^P~!BY*E7-|qeea@J2DGm~FXUwRGfgk~Q#>Bd1i-1Gyy<~6q=-WKims|`JCS7t(
zqF8*%?E;F$m&noQ3tvJk?#=e)>I<uSTUX7XP~6*+V+C^^AbMM2zG6WwC=~a$8Z_cV
zS62{;`?7aby|kjQB?l^)Q0Z&QfeI2TeJy98>Iy>d;Mqa1?rAgFEj16N4t7hW$UE4Q
zBNQrt7;M4te)$-oh%)o7oc;Fwny%{6`IeEe-l9avpb@&%Qljzs3hOn@jN5(udeTz?
zmYC2W0NkaP%!xn(cd3PG6{#KR<LN4UYra0+Q?bfbq7k{uGV{3$K?q8#tWemROs#0p
z@@x&89Mq>)tg+;(08Hqtv66fPo@Ai2#%gq(*o!fUe24upqz|ij$1R5j-8+`tlY$Hh
zS=eeAOYUyapxbHJ3+pVmVyDyC;6iDq6%zpmB$Req@VXB~jnJ(7?30E1W>4ilw<H=^
z`z$%H8+>5xvoNnuDZ+XeJ87eQIpgdvi}cC9z$nbCv{&op8)>82h%&vRWVBD=Qvfkh
z{n0)YNL>IL$Ybn-WqOsTWQ<R)<iUm17?OGqW<d(%So`|A`um>DSf9d;CoZu`Y9%)H
zG1|3hzML=YbbY<G5}oG5e!^O`xR-C#yzW!VvWq?Jz*sZE`Zv_4X2B7A3wREk*L?^z
zqlG-u>sdZ!6T734KB^Y~iTwp^#XxSB4}lTW7hut`kjrfH<x=*|8N2(VJ!kvW<}`b8
z&aVE*{?$1?HFGTswVvz4D&QI^V9)cZb+2UsYkuu7c<9vyzhI%y7XAVZp<$6v&0Y(J
zn6%iZHocaG5VPbLh9OKW^{Mq;soMU?8P#PzwSmj)pNnz)hEJ_`EepeR`7aDZ!t>@Y
zq>#U?_%HnaxyVQCUzm>&yV9rDA^2LS6*23t@~NfQ7KthRtzY05U^V><ut->a`xk9d
zh|%?n8bz^)z7~ED@3-~7TCBsIUIGst_l{4!;aV0tZi7$cE8JE{q2u25sW)9Kg?@YQ
z+UAE8`fcMc6wz<*`%vOc;fNSo>K31}ll`__pHYkd#3;gs9tz#!E6GStM10V;_)2$P
z^+Y9?d*W8Y64ooZ!V|ao)bzD1RA{?TExDEj>>cD5E&1R9^uK+|XFiqvtwL{Bi~k)X
zXbb7zt`Vp;BuhWLYDBIuVz*DNknp+Eh&`?ga2AaC*!3OG0`}ftNTF5tVK`iOEf|`0
zzuS{s6V3X`wMB}aJm6DXT~!nvdC;d;U&}&~hkWYI)~&qWKtAkKQrVW7TVLwYv)l8T
z4u9?3<0dx0Qg2>@2RzF}f72e>VIQ_k9zqDhcGFkBoRjQ7mHLB$uYBGhkA!@?=_vbs
z6TKpR)Ti)0S}&N;JnBoOtqjV;-ceZnn$2mVXVYK%6rRly6Ea_u3^HGkppLO)P4v?A
zF`r0ah)G<MDdjR~rQ@uAQ@t#G+^6t795U2Z$4RD~%b;#2*mF(w%90Z<4%OrY$=rsT
zU>oT>U(OF~MN|FO@OM6M0j~+)MLOlf9_Eux^t!A`GhIuA<U7V*JOsiiAGR>>MJd=C
z3ah8tqs{dD)2Ce-s?lkZ!G0HHKz+~FH`5<ZfA7R&5$?YynOZJ`8l7QHn(MvOXIvbr
z(HW9y!(~vTvusCmy>0rePj0DV&j&JRNv0K-fn%Iw<t_B<)90N2!=?^o&XLS5Tm}R1
zJo{G*{kD?xK80^&z(`sjoF^G-8SML9@a0@#M_Zs}F8I7r-ZFes<!7JLShUPjEzvR{
z`Et^Whd}t*hxxn?O2N)ZSiQ*lw$$sTFFLaen2@<hGBob65rW){eb7>GoxbE#_@)*y
ziAyp!aT&DCe^{!OUY-6AI)(BL$WY7thh(a_3|i(g`)ez`P03}aWw8GNnad>eTjWP(
zSnHFQvy$y;rT?aGpFAS~pj_3&!lr+oGB{7QPI$2KWXg>!;<1NX>&IIR$Wt5feJAk<
zkOT7&8tLd(aA4jb;`~Heu}Rt11iS0?`p-)Bgglu)f{SjMkSFs;kZ79;d2%@e5*QQm
zu$=iC5fK=8I)%-=Nk3jS#f6|1(G(Yg@~<g*VUgfN1rSs6ii-J~%A^*Y#x_^!cUMhw
z5okd)%|)PMrsc`y3{-$HEf33?UvnEk&0r5!>%VO~!$rsi!i+p0wVfAs(nK*MFDTBn
zL6S}$P8!xxZe}7k)85QeZ2MTXzBc!1{40`rJOIp_t|64Iy_pvl>t{R#%$s>4>=Ozy
z+c)z{?L4u5CI+^3;KD2N)aR|E0ragE);`V4dDS*<(ZAB`ewxSkZF5yzz0pqPDQD5S
zGfi}^B|DdRcKB|6hT8IU9<mtfOYscN_I;k({u&N!Ig_WhwdT^cf<?XC%Wt2&UvHFK
z+siL6Pk@aY^zzH51PQHPet8%V5-CV8f8sF#3z9Fddij&Tqrgn4#6j7;{5RagS6q@s
zE3RJtU;oA$LYcgU4%7Pkl_7pL{<9}zk9k;EJ+)wnX2oMPYk$9VGLSH;zh5qRLBgp1
zev#J^7MiucKQqKHnw1#hj=%uFyo@1P{4&Nszr2ibl?k*#e)Xm@ei`E`7u_=0kINWz
z5NN>*wPAi`G`sOp{lRDPpJOOF;xN}xa>QYN+5gZ2^f15de~>VAn7?%NRYRT248vVR
zIg1-Qf_?v}9;rJLrb)}>Ggvl?EaMALi^`Z}H~N*n##1@TuV~z%!G$H0{JQXOkR;^~
z7f^z(sJ^f^+n=-Dj{Zh}*HbXtk291b<mf(lg|^DCY_z}mt^P%BE&dfND?9++D!(c4
zKmu<S;nB_zNYreVKe7=uBNrsbzbUnT%da-(o<W?Cc#5{#FOp_11Qu}L_KVcoVZnda
z_>uP1l21uZfUWh56w_fLQm*qOq+KJ0-dOJ!sk<YE)_RA)u8~4&y}_@huCg!)0sro`
zw(@ZqQs48dk6Gg>l=-M@KV%30pig}CL%%$O0+YDZeiTMP0_Q_N&Y&cT;qswB%o7=U
z3csX)@u9z<rA4RzK8kMJ{7U<HB?~pti`kJU^lT?E96Ty?n?GNKMo0sGn;)T3z|)??
zHh=6k+2-UP$i%n#<G1pm2YKSq(A(y3+s+z5U7r`$_WE;9+nt}(`+Mr__48AnTs02?
zX1`xK=vOh(>mbD`2(ef}2mOH?KJlxqc{$<{?EciRK7uARq%aOG4*1o@9;-eomPg^`
zbH8$XJjS*))r-1ShyepW`U4Nd(EvzP@N<7i?1q6v1wZ%8>qQ_@!O#715ygn)75v<v
zxQ$m(a;Soz``g`ORq&F5c!ZTctv6|V#IJ~BuRPvQNBj}7Wd;)E9H9t84G9wE9PwxF
z5f$Y9goZrAMn0_<1dsUdxYL?P%k4bsu9Noir}YJ%s*_F-02g&S>6d%4AYs8te}UMV
z28psx`f=QW><AE`PO(=z>Ai10<s#5*bjk@MkO9Iezr1_~l63sYSzisI2mN7fTz*c!
zfc^U#eWFo!T)vzm{OH07`O4&c)tX8PfM50@@mQj(KIQI-`D!y>MezugnUt^I$NNxl
z(1)+)s{=h~mR#tEwWayWo51U1Ie3WM#Itj|=^k&(W%*b~(SYabln}j<kLXHHAvgeB
zp0D=vSUYG8`N=EZVmI{EKdO2wU&c@{(R^>^%jN@#%D<IgAg)G$MCISgN197ViGFI^
zHSG46^j00$<SQZ?fl1taIeUYI%9?!4-qgDw(YtH%({~9=o!(uOUvek+A`+0pWKDki
z+pW=b`sJst-erIGl3wV2a+hl>b@i@%xnB+;6uc|HNZf@1iGp|K<1UOSn8xR>{06_`
zfd)@eOqgKv8$N1Xrg_j$3j6Ix{-*cxJh9&`g$|JS=gW&f5JD;Y^X0`KkffB4b2?E<
zE=t*-pA;A5@KlzvKR<Ps^#@)E0_8#0^dI_@Pabs3pcA%(`Eonb&-a-Q=F9C!kSOC|
zKDHx88OU5f)_YXegz^@u$-(^kk62?UpYYQ}c+x)g4?UWD>q)m1I)yvw_APBpopk$_
zc6?7#-yWeOG)!LDd<-b}#&?_S&fa>m;)U)tJ#fFb2QK(#x;^tuP4~<*-MZs4Fx?2Q
z>Hd7CTh}fxXa4eBO;>(Fm=)Zim$C)D^#=JCF?u-H8`&4V_3I0*%!A!KckJBt*}pyC
z4R@4py#3+!?f=0l`{>#0|Boxj|M!jK#wfLO$LH9hi)L{xzjFLCt~htgbPyLRGr0d;
zlX<Rlry7_pOns(1mZVp2Fw>3Z4m~rSy74>9{30_qS*YJc_c1$lgEHM{#$xsb)U-yZ
zaM>Ot@Jxp;J!-nVTv3~8*EQ4ruN|N3(Dm7x%zf>CXJzoD8!xPL_Zk>*^-i>VHCuo^
z+r0y|?zL@|dAbH|T!R9v%+=<no1)a<6`4n=j#sO}QEFYet}wGP+18<JkH6G(N9AGZ
zGlY-YQHOQv+=<tz25a-4jp;G}ucm89-dyM$$Lt>e#|7>R)Yg*DKxVc7D;xTNQEuPY
zN8jUl65b;w8u$_%vUfnHkRaiCy#q3&f`sSw4j`lo|E6Pu-htFT(!c50fc(36AbmH#
zJcbD$o7@4`yRZK1HhtYf=!l@NTL>Ky^bN@L4>~BMZvg4v47%xo3z*{qIg9PWetKDM
zU|ay}wtvFw^C>7!V0R4EdsR#b$b1V-Kurk9&0>&%nh?NdF;7PFDeg>R=LhN&%cr<H
zd?6Ju#heEj=u8RVss|R9C<gVJ#@-&Jx2c-uQ~*p=U|K*%8j!%976^&sK#)L~7C`n-
zS5oqcn$B7c)>~FhcM)jnn(iV{tePH>u?i}r6F{tL%MlQXX0h3W^;@cExd@aJ&2kZF
z4K*te5=*gs9*JfJ5X|>c#LOpy7uofO=#P2YEOIgEWNDGp5fB2#qJUh*fP@u`s2&sP
z1TYZRHU)Af*lUOC6V$q!s3T~;3t+z67EnG4sB{xc2Q6|S;@N*6sdx9(ZVzBvmF7F~
z3@y4NfNd(5gK~BT)F-au?FuL#125#jVfvJ;t2)$a{|+E$bveM@9YEIaa)7%hpyt(D
z4bcVx@|gYX<<a_e9rp(mac%)7fc6IhB3A?no&5osD}tn1A|P``B6%vcKOl2O$)Qwg
ze*n2+Z))rSxx*n_AEW1bo<8LG8Mwp_m?B99iINTlWYP-~B^?Tc|G~!+kz$Q|C{Xb5
zwJfgm=-+8)1O=hWhgp}gdUeHNw;U?|a6q2sKn5y@131ljRTzil;%j^FSUv5j{o3(_
zfI|NGwc`mOf$?=fE*(Jv<LdwtzkH+yAPryyGPvGI%LAf?v0n#DpF(nQl|@Abo*wM6
z2GBAoKxZ`<0!oAUPg<sZkDi_Fo=pE|ZWUM}`al3yTyT6EB&@g)2#GuaB&@g)K%PJw
z6ajMSORQoNHYhH+2;|Y1Tm<syOM#F$_Jj%$E(LJxIf3pf1Tb@I1A@vZ`~69Ju~LhF
z9YZJ#4hYIH2sywE2+Dy05-<aT7#OsS1BqqafM8-&P%Pt!!IyCZgK`;19I=cW6cn4#
zTuUtD1_iTicstfgF?8ynVB5!J+j32mH#jJlUQ!BeIXIZ*o9_-7Y#tnJ`}nnrNDYSk
zqDX|~A;B!)5_S~fdP9P3YyV3VM<hdoaseod#0kkOzpw%)B(DUscV1g0PDq9Y#i5LY
zj}ww%!8-p{Bu+?%1>1`K4+(z*j!1@Ii!T<KBd%>l;b$X*>f??(qdMd5F;n5rZN|I(
zN4M?A2jxZK0KYdhKA3PEiDsDbK{(PV>`{0Tz+MmL%(hRzriYZ^>p^eGdKY=OmtSp|
z&O+1mjp^w@c{~Ot`e%9&W8o<-1J9Vj&P~^!E}0ROo7K3U0GSyib3g!roXK9Ap&v@m
z49Y!qTtFZ$31Ll(!eG-Z_To(a=FBV?h;}(=k<3}L6n?fWh*!yW&eXdrfn`CQ{n5Qv
ze!}|(duWdSRLL7bdG8lY=)Mtzv(F(T_%ZHswsVd?uVi^pZu)`=q2(mhO9+8{lTDbb
z_i6KHP~pP{nq=vlB$Njuu#dVjnDcJXWBIIHFP){Y3}WNFGs@tbpR0mOHv9Ovsal-%
zn5W;H1}%2Z@f0|#g1D-17Z--=YIbm*eox72r&X|z37OSFq!|AqgZM_~T6V{Ly<f@N
zpghV16GCf)ILbUCgwS>y*va|&S9LZx9fjRU2yLLYn;69Og}Xc_gE=Qdp7;^_+yZ@$
z=do+^G?8fWoX*YD@WLF=8#_7g`*iGvoKR#~_jc}xJ2^FvQhFy|xNBIExutWLE=a~K
z_U}dd5zowVf7Kpf>9}Ut`AhT)&u=*xQedR8l!LkXV2=(j^V}2(I`a0;J-gsVyq?`|
z;!;kEYGwG})%;eZ&m{6Z>#|gTJl*lRZrzZ(^9-A(jU3Xcq`iNs-pu2ZB&o5`8+vJN
zyK7!N#CwKaGf#Ku_$OX4x0b&rh@}E0#Mh+DWIB@M9z4OOR|c)j|EEE2%yi~Uj11mo
z?3#JLL-#+`Aji%0c<JdL9lLjaf!=jw_q?H-wVCHT^W}<ltug%VMwryS`^%KzI&Vbs
zmlnH{HE61u?k{xjj7o#LtKEH>9xvks$mazbvRx$qf9c%wxlH$NU24iZ;SI+>qg@3~
zMdpzX&(~z0uc7>(?R-P;S#UCl3(gy9UI-#n(9Q*wAMD>O*Kbp5@vqp=!vpy2xu7Xt
z^8yLSI~U9k@QDB<2I#q9@CP{&5CZ`Vrz%0Uiib$afn%NzmX%-20?_$j<xSSv0&V~@
zp2;EQ^^h9>qJVBirtRx(eTP{Kreg}F6O%)7Yca^viOC_kwFnZXOb$g}4~e^w#2{0&
zDIs-QNZf^#Jd`{Ycgpy@Em^n=`C5qXLQ<9y<Z&v5-L~=!>;I14`stY=xrKm7Fk)sX
zD6%Jz0Gk<-*%L@iEHgtgdm@r&PcuU@dy*W=o@R!SJ>AYr1H@cbvO&MIc5X<{$3dQ+
z%nix;7$l0F8<O)eNYV*mK3*H)5SSbHgs>o99Lcm7<B9vR==vMEcV8WR|Ld*TZqJAz
z+Bw#f-i~z!BqBt&ip&G>yv&QNa=l*so5lo$_i-^cXgJ@}9k1hdcVY%FP%OJKI66EF
z7%T%F`5v90?FwHcU+&PeXZOxeztpqC(_OF#1cyy~(JGRwW4^k@`tcEZ9XP|o51=qg
zI`T#GwPT%3aAJkKwEVxurd)}OC9hl@^Bn;>%4?lfv9qwubg=$^3*v@+(T!%JC3lC8
z9cy~@fSFx;V#rlw+KI*XHE$eu#;eUeyLaeVL$yVNia>+Lpb`G38tevi#=^Q&=kAG`
zjy=1Hmz_Ba(A{3@N^4&<Q0;I%R!dDN;x+HqPI7UJRrJ#@z1+hwt4B>w5lx@#-tDDl
zpQE>-VP411T{`nut$7bn%Sn7Z?!q7Rc&_sc*nG{j|Lt9mJlg*LTia*uyz92R?!SX7
z#a+i<@~*x}e-dscQpO<9UH7;yO1bNvkX$+ADO_|<NUoegVr1+I$(1vaV&%Ligq8C#
z5rdG;9k$nO(f_DaA9hQjouR`ax&IX8E4IU-sMs_GiBb-SuxUzHNQ1O7^ks;@RmT3g
zUDqnV49VMQcm(sl49VMQAffnW$hnOcq;>m=5WhBhD+r9I6RrugdOzV-lveL2Lh@1?
zgn@J-giC4nB3Hn<+;^dzpV_G$`aQw#Lh{ZO4!5u~8)6;aG3(a>0f18>dEWvgqT{I$
zmjAb5{>Qlz9i5Neso$RdJ|qwN!Gz5BG~k5{sI%+>$(#+zJPpT2#0_EkznkO0tn=&-
zA0Z(*FIxfNlp>s`UP0&qiF*FXHhrYunf@^(FED@!nIA*gZ4)@C`~_CNOTRaBAtX~R
zR1`87LRf9jDu6-=31t{J@h0rjXPSZ6!#FIs2mKMEYR_Qz9nkM9pAnXE98A=3M%WY!
zcaSi2Mi@}P<0^PKn{7IvKVC80RiV&7J8X*W{}2!Tv%}c_ABk)T#lV>P?7@Tj=&Jc)
z>7HQ1@cCgGK|umyeptFENR&E1jD~oaBY;}ON)G9dRxApO1_dky-9_Ofe*ud~5(?uL
zB+48?qw$upX@~Sa)yv#cX+gIvEH_FZ1Bhi|`AP#wKr9QxU0<Q4X^2c*X+QOu9`IDJ
zbTMd2x6;L+CEdz!NNiI>2N)~E$SL_v`Vjg2T6@9gddgF^*2SQA64r+0yG0NJ#@cY5
zCVU?YBrw*7o44fiU5K3j9p?Q)uP%QlERU?fgvvW%d1M6=D({4`dhf|C$8g@rx_zPl
zxniT+O>|dvquWh%S9K$G(<;$mSYd5u1xNJN)tg;I>8k2xx0@)v-W-<q^+Wu%fz8xl
z{K`LuB(_qR?@N7d)eaYeuBz^EA?T{=4!5W2s_Kq#BE>^Qh_0&cVyC~<ODlJUWpDr!
zD!almIDmx8uCNmvLUdJiUs&8J2Z4Uy=N3*kR`<Du(~Z@AVHq4C45WQw1P6YV5$CC2
zg>%l@|2T@PjNz}s-T;4v5J#7|G89(Q{1w8wAOQkeyw3;{{(Y222)%^j<tL2C*$v0_
z`6b80@=6hy5IRncjqh!c5Xf&??g{;1$+ux~yhTjnhOyO$oeUC!b*I^t6Z$LZ(=HOl
zh|`2b%QPRk`589vq<(YhnXp{%feD#2VdOpM>D5Ra7G4hL3@Na!Z}hXC;N>vhjXX*v
z;N&f=USa<4^kbPTVMV-r2`03!gmG#xO9-L5eF|9NDSdXPPl1e!IBkPep8~|iok9v^
z{{nX4l>Skse}P<L;n<9`F&wrCDO7220o!(3-<la*AY&Si#vnDg05R<>-JS@CwFLz^
zZ`iB8*U#v|1qFB?Z925oFqylUt-heod|+{b3|L^ozQqOdnk+~ZvA6)&WNA+rB!<G`
zf}*xOxg`>5CrVpfP<%6g#V|~fXBk`kvwl;{WiBX%v}FbI{TRpqbQx9l-53lk2x~_R
za=tI{#Fxi1Y})^Lqjt-S`mDU*(E=lFeL%JrkgX@!N!{4|$cX}Rcb1rdJyDPmM@t|9
zd!hgrg2+~ou=PYi<A?c{A(8w$3?~Z8AHt0x!i4s>1^D#C-RzwU`c3Rs(}+I+hDgEj
zm_L^-0TSrnIxPVb=-)amL8NGjZ=IGXpuRdyEz$BO{EvZi+J&Z~Pdn{_r+_|9?J<x}
zqa$JMr-Gb|XpakuY>#G^@h4C1PX$I6i*!|uP;*>>>Aa?(fDTd^4ie}WoGt_j^b3yR
zAYu3g$8aKr;TOno0S@(_3zW7JoUWaKG^~fIStGnzelCz3kRXBna{)FW<x`;lToApP
zI|!ai^q&ig+F0Mw+pL9Qt#>46bi@<?%p+>Y4*t!nvmtrL=1A{|QP=848B!sts11rJ
zLnC%)zj4`9i~mI~h9?O3gCah04hItU4vN$h-3}544T|8UVA{R|iKWt@NRy$FTy7FE
zkc~lQa75g9<uW2c8xq0Y;zxPu5Evd&;_=(%=W^K5fN^&@SfY^&c{2=;$XOaBN*x|S
z93j^#q`n`?{tz@C`{PJgg?fEtMCJmJfy&4TA|17QAyK0uVx$v=RtM>nMziy%h<wKt
zPq{EA^pAXK(kMoFBxj9X8Zvfzg9{=UHFODFjfxTODKf^EFLtoN1lHn+^lOm7S{%U$
z{|#5c!)5H<BI9=z%Ul&cex1rj#rUPl^0xt^RNEEo?qXwV#R^x4YP-UzEo4y43aae_
z$_AoDzHJx9j0#VSw_PQw=i5#_Aw*IU)N?BhjH0l%F_QBGTxXWTmPU*MduZHv!xP#V
zG2-IG7e!R#tr7kqm?{ux#H|iENPusR$m1iB0N)zH@zK}ha7D0J+Z$2#N7VSoDhnMp
zZnB?F8TFJ}Fhw^&1PFT_^FRV&FPTTK1`@8eH<H>9SEEx3V$iBw-4~G?1d@a1+82=<
z1d;`yeGzOB(2f@rA#o^z$h6y&d6?-L<KP1z#kK?<!iYl=`Slr)&^<(*K?4vZ2H>HH
z{Q3-$Jn9{a;OjH5(S3~~l0RxUFEw8GJbBa^RN!Jz9gWC6Rgfs;Xe1$)9w136g49G5
zLdWYzBXz~u1)j<wbu?1%A!`lwZxPL;-`Fk6jGH~x-?*jF0sA)*pLoFsLMY{%NcKhv
zOBv%gk?J-)dnuxrc`714n*jovry??m0SV1h5t+n*gyyM;lf)EJo_IbYk{A%M<-BVH
z?f##S$Xppufpk71lNgXdIv+t2^E-H4G49Dma{3pts(Qw6f)^r~J9#o&On!FRo?g!g
zcpkhQk!d8jz`7ifX(UKsU5>~@AdqOa%aQQ)+&hTmU2{27(AxTj8m*XmwqK#GG%%j`
zwCPtU10L9@PQOCgHz2u~{4fScl+v#d0dFBKa$;d^OkvJSdtpOkff5>1h!=%kBd3ay
z$*hnMjTRu#2&_;#Hb_9SLOC=*0+JPCXkbDjRXm+y-%xH0_LNU?mB@}Mg>qJh5R|4A
zq7Nv7#>j`KvC|dCudAmyH31VfnN}#@@&pNlX@#X?(E$<&(+V42XU!GGf}CsrtJ0Y7
zsh;a%kf+Wql($r4Vz;O;D6YnUB&EVsiM3tS8hyWr{i&(3vwD#WL2kInHG|x6QK5X<
zG{zS$iwav^&)qOaZn(5ixFHB=E-jR92ojo03#A)^MBz)R2`-DmA#4|NH)QLZ8(KTt
zHG#a)E|gvv<6dYNN-qQnAiEG=_&B;W9@bVD=Jbww;`g!FW|>7S-NLvzu(}YRMWC+_
z#HnZ3ur4i(X60*~-T@P)ttpiAG)N$>Da1TYUxJ8J!>?ysS{OG~tanwYL)RCY;@x-1
zKxKU)&Z+5$0Xpc>_gIUT#=P?PTpdDsuTY+^Lk2qU6(Z@z1#qZ<+QfXVjMmkgoT`I~
zs&8_t4iX5P3gs#YB<U0))bJOs;}l4?vf5V0?((gL@+K#k(Aiq3i;xHsI$H~|Q%e^J
z<J4n2Sg+Q`&DA^HQfZ;N!!4D1ZbzYf-5M%D*incq{j{hndTuwn)Y>>xz1xMLb>?oz
z^WwbEb{7Uk`Uw&cy9*mNw!Rk-SZMBN*WF;8t={iK(9zZYLZ8#bwC>zrD88r%!)e{Q
zzYrfH;XyP`vHUap@f#6DAOFn7pqC~;bHV|Hfbm&jf`4KJ7_<=mtguBZ9#cUQMq%r_
z=`$ttR6M@^F6la0rhdWB-()na{=zN5L;+tE%GbH$3N2H=D3q^rgG2#e6yh@hLui!7
zX_<Q5?o?&G;;B0BV$eGExZB*cPCZ^IzwiYeU>q;3-_W|ALtvfy4J&VB+*tlip}Yne
z=j+sO3gvbJNT_^6ejz*y%hXeBOdF$hn^SI~^e+3ULisLxT%q;pslpQR5;;g9oT734
z5xox|r+3+VMQ!tD<6*T;uc(Z+U<0IAR7P8n0O=J?h|fcT1W2!F-TKx714A<r)<#8h
z=Gqf(HLg<&Mny3}OrYLRU`%Rbqsm0K_YPxxE&dZJ1o(g(8<j6sf&|>yC|<0j6apkt
zh_TUviBYk!PYg;Sv~f{&LR4(*OCI!CRBr4`7B=?BM`>gKT}o&YG%{yIu~EL<{_akr
ztx^lZv4TeWjHtY=07;<Dh{}lyBz$H@G%T)u63Nq;8PNi9pH6ZR4rWA~iK7q6;xKLQ
zvR)N!0EszKyyX6hhc?IA!h4J{)nJG`KEWr0IZ=6U5F~7x6D<;3KOg}%CyKRhQ?zq3
ztSyM<EM@<^*Ju)05H<4nExsgL*}I6Xxz~8|=|xWEzy#2us60CX37|z$oSjha0uq&5
z6phsK<p7bW9D00Fv{2mSlPs?E>wj9sXv!p+wwV3%J|kYf*e!<|adA{eSja$Saa2aw
zB%-Bv3EOy|aZ~LQr^;YrR4j?gs1FhdOQP~321p<*iDFZeE@FVhMT{j;=OPBt!qg>E
zc@aaha1moklrCcIp#2G4g<T!Z8C>Lvug}fgR@1e!U3<Uro+r3Eilc9aj`8v<r*E@I
z9yBJDyd9NWs$inK-lo#&GYt@eZEKkCA>&+nO;o-F1SW*mL@^4l<1(Puved&yd3tSB
zzTks9oy3jeBOs+*29;XJo_iP{qF5J|`yIHE37K_KEP3ft4GKe)UmsN(WY2h5Xqj2S
z-hJ3OQ34J>)Tif=UmwMx{zwEJ&}hdG?5&R&qdnChMCB)%z=hNYQTd4`kSO|tsQg3|
zk*LxKQGBB57LI{l|B$`<E918Ghf%p*gG+FL_%MozAj@SC#5c3czcT8SY>vup7~Ell
z%w}@Uuklh4jDbh(vD^LHIIg7kxJdLBr#*ypD;Gkf{g~bPJEML2<ET99_A4f2K91t3
z`(-YJP`a1R|DEx-x_dEh$YFtQL1r&SoNXA^pb;z&N0qAhT9tLU(I~W^ddz5{v;oUe
z@Im1)DF}TEoQI?MdMbUW3hLAfhocQ|v|bZ<h@>a%UB5T7O8SJ`;CTQ!5v|vNzng~3
z_qdeG!cQ7)(<h_yQ(j;~=42Ev#?$+2eg#XNZ`cbY^Nou`+e6<F4!uw3rw@00%eFsh
z+@Jn7D&O`36EfdMF>}%;9PYt~)$iDiPZ>9-zjJZu1)A>&2Yc9%!JD+F7<<ZiwB(eF
z6N1bs!ub%_Zy|(tYcJYX2jiaH%*CkuwivjOx)?>4DccjT+x9E6U+QGsuhi*RbhQ-=
zAl9!4tw@O^!0-z0pdzJ7d>woFMXQ`eo;9Xqz-S~}IRf!PMdg)Nf9!I25weFB<uJDE
zS)*TYSP`yr{0boaTI28{He#aoU>$Ltad?sR1&}}(UIbsD_Z#_b#u4n(=Zwnqh$8v6
zIGB(bQG~a}6I=$=NY<dUkxGv&lE){wph(;z9G}$TGU)wLtYc@RUV2oK+#<vkM97RP
z!WJPeF`_JtzR_%UXQO3$bdmIOFd;L#2wsj?2q1$IH-`P(*=Uj;<KobO8$&pvER3kJ
z?9M-;tg%IMM>n63sIf&@`QvLyz`=+b$A<pVXqp-4)}2PwII8;|+~&uMOnbWs-?cpW
zM`O1Uc)Q4m(tB?j|N7iow!VjPcg5NwjR$mMLU(OZqycpVk*M(6qULv6>k%nH!`nC7
z*Y`9wc*-{xX?&lGxKP?y6y=}DAQDO&i(21Lp9=wrhnraaKO1*dZYt9F@i#GvTU5w9
zoJgo_Dr$L;^#(>LqK3A;C}*2J_0L8#PjGt?zS8ziKCt)~1irNo|HZgfZ~1MJ#_tCb
z7hvBO<@2}qi3HfUMHrKPn{p)>y|q|*D1N?4hK+m%I~`qWjV{G^Z7r5xRmRK#fUU*y
ztI8k&u(i0=19XW;O@*}`#X0|q@k=~v3Sc{mjiguyrf9XWi<OQyUN7HOEE57SA+)Pl
zE&xFSZdWlDfC%AgirR2DJ3ZbgYr5N2q3LgTvD`<33{-X(V;^ZA-F;7?wY0;<%9r+S
z6O4wrwfI*|`*;8^Ib1A1oe2^!hl^ukrvW5j4i{sBp@aw|5~9P!b-yeY+jqne+jn0S
z%k4YKLUSA`#`fJD1U2XZ<-1~h;Aw)Ixvl+!58L0oYLqC=z!Dh{1W@dEuJyF)_>Qcf
zMJw?XMuc{*Sh-MaPyNuqT}m+E|KK?4v;a9*Ea!eah5ET-%>BY@da3bTar6SLrjO0y
zIZvUq^Tp~<#UhQ9Jm~#UEYmp2LK^pDvGcLn6pgz}o?@~71ck=CR4mt@AYsO(V!8eV
z3Ajte&iXS&E!`(3wn0E(l=q2U?FL$a_KC?<1W$p~Cngu5Ac52;h6O0U9h^o68q4|F
ze)e?(w}Z#U;N5gPIE~A7lVZx$m}<RAw}aF2b};emy0eWIp4P9%<l8Xf8G31Q4DVag
z{+QsPoGCH9rFoFrJxyuzte7(29x=!Gy{8uciU!96*f%RClRA*ln-!B6VnCw7XT>7(
zW1_){!Sm+XF?C){G`QqJZ%#}$xMZQh=f<ePe-<_%{49+rc1*SZG|%{prxt``1^N8a
zn9Q5g+~=3ZkT+AegM<}JV`2NM6(V!imc`T+SFLci#NUW%L7sz>9*l)y%VP*?bm>;I
z(0y;lw7f=?i-3p5Tg9GVVAOeHmD7!2q8nE^-3Sr}u8PUq_8@_}Duy(Ra$k_hR93}G
z@0Eq{gpx~S@3B(63{b1tsRc&K6RX`aXu-bPErW*6>X`gQUYal1SI6Y5Hy}~Q>R9p)
zSq8s7OsKKc?N*$Z0YAic#X=+5agAFBjjuH^d6t~!3;Z>)ka(X5BoNlbkeiBn&;^S%
zvCM6<3>sZz<C<9MtyXJZ2B>v0<-T}B){W^6{v={gn!av8{Hr7vyILrXrgbrSBN@Ud
zbX^QNrzjK`G(k3S8qX^WT^DP34?mAX`=Z0%W&d1cY<uEew-6d=@4Br=1MOXBpg{$N
zyc@&JCkmmLF5Zom-7jnAe31IxSe^T<G_M)v&y8&EVk7g!Mz;*QwXxAHgSHhm#^gt&
z(tKNCV+=F7C<9;8!_%x&5&j)LSg|oyb`O0A0QG<X=D#IIMfE1P4BB?s6qD;>$e@f(
zv4jIk`wE+4$aa?@T>=Es-7Rd?5@Y!jTU-b_|K8%7NgE4WVqtM{7b<|*5<`k7%rs%e
zmKa_O6C=WugJesr(IfmQKTSIi+u4kzMs@Xew+strZjZ^$3&^01?XkKyNKo2%*dD8D
zW38k2`O}n4e`2SX8Sf}he&S;IfbmI8?jt}57@x%CH}OCM<C9p0xL*Jgc776T`lPhe
z2RkXn{3O=w3F{cmg=sodKW4Xi)A(cVlgHdrXt&~6Os;<+gi?;h<ag#kqLgDX#B$LZ
zc_`&rEc>7=B~O-eELQe_wOhn3<mjhteU<TRPwgqU6xz->74wN@b((KyoQkEzZV^b7
zaw;Zwi$J23Q?b@hivSIh-|0IQyS@V^G7B}~9J<qYD)z*ae1kMidH<Q%HQ%!9+>KrS
zQunvO6O@fd;@w=3sNtEIoUK5j>@!ruPlf$h8(gqctBpT+es{sOKLDS(;Q9=G)bD~j
zeCVTo7igZMyr(3rU5e$r9v68}2_!GYuu01Ize_0Zxe^n<5zuvwp;caS!a5#7^h!)-
zKOg~mC5G(hC?yjm6jKMr?dfZbXO$KMu}jCh1Z>VX#A~}Cp*1jG5U~!?zE}x`>)~;w
zFuo%fH>9vmdt|+_(Nh7IqffZQ<5%@5Ru3or>7rDS<L%ow7<HBE@z^nwg;JawAD7d1
z2~T6j$HQXx8zd>kk&n|Au@cJbC&fkT00NycDK0w$BubwYmz@C;nv>#A>QF+{%CxxH
zx<0+p(0(_~HGy_gr@1Cj)SMQVnFAC7G%YTBBoo$V#B)BBJ(7Xsj5v-bd5>hMM`p*x
zi3A9s&c+5MuO~>z&W_720SVOEahZ^2sO9FOV&jcuYY@<!>uOTB%#F*u6i=Z!H;&Bi
zB6(Sc^3ug|ysi7<CgXoRwfI-GEFJ)6u~RLOfLR=uvm8jkERJKAqp2PwruxP4<eTwa
zzOhOS2rP-Kg?xY#EyBRkIFeHO@e9eq+gdnbjmz&Xw7ANJ_8W10%jdsD(PPWw>Z2kl
z&A<e0bzE6*_x{Kz@zjEb#b7v1#^>d@%t`SSkgMY|Cj|+MSI494VKL>T#Na8?+i`VW
zT%<^n2fa0MnIcIRQlzzUN|ET}*3d<ItZs}eAF#GtjE`&apVNrsWE<l$ra=ykxG`QN
z@(+-J-WZq3JxG|eF<$orm_#w27$UiUKQ5Dd$wHHDqIUd{ZV;4WsTI#T6!*m6^5As7
zM>jThtFbn`J&t$2AAohGltk`~D|=YYHsk(U{3jX+d|0zHE^|nbux4jm=8zy^&CYma
zk8B`f@CN!QuI`o%Bze%=<us6Fp@II*8whs|VF8^b$CZO|HO`uCH*To~;TS>gxi>CT
zNJs)~Z(OF3AYsJbc=+H|BV-D>FRmWAYJ`(Q?vKk9lJrCh`AJ-+kdlS&_%yEJ9v{WW
zY*_m|o^w==#w-l^JZ_YT(U_&tctniG<{;o&M;xO;LiUI=8bQM7BQzT6)w?W>l&{!{
z9maKcf8|6sFo_%I?-6=Q1}a}sW0N6eVeMEv=Ylk(43fv<PM|I$Lr%)D00M@bbPNFr
z*^`bTAc1<)2@7Rp$hR^qfPm(=t|r;@trHgT6q?^sSl|o3G71Z4<H}Dow(5Fn@vrDF
zJb>O=XH<cN-dSf<fkc0ujYofy{Y4D!H0R>#kFvic4|?Yvr;#i;%@5pZs7>mGwTtnb
z-U*t#igMLDDE8vjSXqY}<+5xP5UAQ^$3&2jz3em!NECIM8ihVTU5D)Nm0-TzMw7~3
z33-ABE@$iFMM;p*>6O4a1nnWKb;H`wM9vKRkGqZSp5V{~4w32Dur66KEWz&l*toG`
zn1cl_u!be%cU3?FYghtZJ%J)_T{2*dz2svf;i(#vkdXphxaOFIytE0Dq!RLj@F0OP
zCV>ya(}=E1b17r`KI5S(<|0tQW(heJLIwydA*Vu+Kwt?>g*S5qP!rjheMY;gi7o;K
z(1|Vr1<;8Jc_vtw2hfQLq_i}d)}_gGG7IfDN-HKO<SYs%R3<0nED93EOinnnXkD^!
z`s}Cn8=f}P-BM}(obHxN^XK%0oIjxgi0KK;pF`<xPd)s~QzGY-J>?T)h&Qw*ff&ap
z&wA7q>l1wPYz+dC>l4yvK>~7pLQb9_0l7W_hd4kTQV$KKZAvH~+IfeK$33<9SNJ*}
zKyOn*UNZs-y-f*uzXc?GeN!U!VM5$*AqM%n`awe8Z;>2y)&~iBzeTbD^g#mmTd=!@
z@*%J_fuDCN%RJh>13UVK(Wo4>V+8f%)`UEThA?!uCNS|n$#p^PVAV&A4&^&s73#Ph
z33&)zk9XXT1P-C;743S|al6=-BL;poAR&`4Frl(5A+KtH1n#Z`!Z1Fw1{E~t9#;OP
zaeb>j33){tOsMQhB*ncmkWkr^z+vqI%J=GF@uwY3C|@Mh_@rEVtEb%l;7j9WPc4{E
z)oAT^Fd=7XXaM10Le9`2(Y^;0(J#=xG(!`E$C5({^>9MW(2@te&k}NmmMp}Q&l5C5
zx8TNLmH1UcDUH|5u=PicCRHHB6kU)1R?$}p`H}%h*z{E*D&G1B3GA;D*fAiduSYAv
zW90OSmiQkd_L$@PAfb57aea_bJa*Of>(K)6y97@lZv}xq_|7$f)`8zSBLGi<^qn&T
zKmzGI8UgoVCmk=QpGn{&ek+d|_Xf@+@GfE&+sJq|8)29g95?Eu&nD#7H<<9Ovk7c{
zW7`rkfIY{4b=)XRpG(NCZ!jTqj^YAsS@V~y&$DsIje42$vTDSH%z1MB$1nuzhqVid
zoIXi*;JESIz=ebnqw^!RKACWl-Fm{ft?HsvH84@Ni%!)*!iI|p`E6{FsM^H@_U|b)
z*Czunvv*GzO{*`v2oxAECw$^U7i35%5f>>GNFZEJAceY(Bf!w!N!IkF(Z0HOQg(5D
zp33%4$}2J;0ns}d6uT!N0ns}NBko4+8icie$(-5jjg!V*p?*mWh^>_3HK5uJN;3a9
z#<uD~4l=l?-k_w6xgdc&C@EtuNFWbNqHSN|5P0}Xk`;Yx{JHuS7lP*HS6m3H-z!O(
zXE)&WdnJkC&OdF?fO=xAz4=??F;Dr}q#V8ALTPLgJwc0OkSKR-5=RW}c)6g)vxiO@
zw^ogJi{%R^r%f7&g;O#pme(LjCy7{pA4i~t6We*pc%W*Mi$GgclUxLfAd_4KzJMYG
zyh#F+AUlOUe%iRV?GzV*c5kO7ePXOZ1_)D<sRptZ6i}uluWM}W7d?Q0GCirxVqc#&
z_SND)F@PKJuXs#%8<2v^^rUn#JO#>h>Rno>fJ9K4o~$z~DROLLh)i)tQog?~Suky8
z5^rAL1E**h*5)O1mL@&%>ddct;H9*7tj!tRIhvQm+b%KGuOYd|0ygxFk*Hmel<^Hr
zn6e-#=N*tRWkC}24o<6}f`^Ne2>bp_yB>ITE5qM~6_vt6G&!DLCDDG1oI2tu*Og8J
z62ObdNe~P0!y)7(OIZ0?qfVP8E(CSK5*LDsUy_tNqfi0Fk|g5X=d`A16xNm}bGEYK
zXN}K7%ahKfxkgmYw~}Is3Id34Ikg1|#J8N<f&}7QRNFB$A2g!!HrV%{H^zC&H@Hev
zlMP9^I)xCFHYAaTQn+nI71_u_KO)E2n3OpNm{8f6lsN`SsBBC+IYuKQx6FR(N8}h=
zoXUd<Q@1#k2MLHRNtt7SB%LH8>;N5=zYfz*GH1L!<tL+mZs=eVU;pPh#&uNt&qeLo
z&P#^Y{Bx%scm%}Hoyvm*;^$QP0hD4~M<yRl;s)za{AU%T^cJ3YL6g3OBVI|Yu-NBU
zj3U<MKgR11Kv-Pnf-2XQ_gg^%`Djw!Zv}}N>1a~kZzYmnqCA?!{nj-!Y_6j=JjwoW
z*;x1FNvA!)M0=cc+5;rYIGL2Mn1VzZCzF^rD4c*q87GtS=M{+*OZk&Y{JbJAu~Q*X
z_@4dkigCK?d$$m}nfQHD-fn~p3i&=Me_atI=_K*%ia28g0{s2l*xBY?)#qFQT0Ngj
z%Dp;>0N`9Q&3}N3GyrfeiQ5gk$ic3oDqXS5J?3stn=38`WtUgnno^9pl9U&(paYC6
zN!-oA&wLRE3LKcSZ_YK>dD;w2$>9e!KnA8{m<I`vfhjrsKmuf73d2t}29k|oDOTk*
zPgM_dG3ct>u#~*(dmYa+hNZG%*Ayf$hNYUf;EsPCwfM-C*r@^m&5<eT{~%HN$dvSd
zkkA~Na{T`~N;FtX>{Kn$O|6=_CQzQi+-gvs!BTP*KoLMJg;8)920>#SWu<Zsva`B*
zXThWtZj}FvJh?H(fc9ESnQ7l|n2M(s|B4WW2LOM~0S5{2*HZE>4@iK&mcoezg<+5g
z!>^?>GgG-%1RJTufK$=;kEW&687VK{_qoc2?&~S!cM<FxU1cJ}n;u9}igzP74CT#X
zhfK4oYL06ZB@c5_a^`Q$$I_gX{0JOK0MAKbo_w4m;EK|G_G`=hL+yMQf!u1oTP+$X
z^HXwmY0O8;{1j#vx}pRUSCr<b>I@g(iXj@43rv`ws@n-ktjR_Ad;_s(hI!~N40teO
zQA%kRZ;8*3)jU(voi+2BH&lV;v@MOKMJbsBK^{gdO2y0h_yo!In>6JgP-;vgX(^lS
zGjD0T)J34lda2tGG?bR6<a7@eAS_K`vZmLqU=ThPy&|QoW)1Vq9kuw+v4aNF3b!$6
zFs(?*ABKPyP*$X{0uX&nU+`FwYP9-lAJY*L?_)cqzIC;aB^SCY-9DB~^zo`7@8dqg
zFto!uHo$N8ty<?=MWb__YZZ;ob&gv%=A(063MWc*8MZOqx7fh$$Tx4U+TbG4*xcZ@
z4y^$;q=Mp%04lI;Lkj0b9XSHV=KE|zzFAZKzKcL(^!=1vzBlG$^!-#FajXCm2=Axx
zJ9ir?%rvGky36hqFgJOscexmJ&vciILBn%bO1`%V9boKA;l0h?v>)D>PJ0g6&xOof
zrOg2sgYKCgNXa8S2m#|jN`5E{Brp!7l4)yV9BT=DC4{AOCfjoh%$PsG(q5C!yS(^r
z10{?fWz357__V@*K8To@NXDlzHJ5Q208c=)Fzco#;BbaK5i+!xn2^S_SC7kpn#i6i
zH5;TSro~qjAVU+<#5A@;?&mVFXcC)MYCc$Z5{^?O4&BF@l*aN?;J~9_O)G`j;!FqD
z<o8w~YmzndGGOtu24K?NoLAF0EBJ~&-c=sfmZx*J*uT%3U#fxSX(Va1@-3%&tzZw-
zH(Qpkz=0hfJz%0HE7CGa0||pxP!(w5SWd%z6<b>0Y*oI>RiP<)m8(KwWEH8<7bME5
zes8l#1GBpPZC8bW-gZ@J$iGc0xGDw}Q0v$~8<=g&*SRV*%GbFnG|JbJ3i)w4jdFYi
zrh$2L`36^ohV_QDDTXU#pt2$D&$s@}Rp1)$v)?o{|61|Bt3qS={j}UGDCcAN{WSIp
zM$v#PrwMU0`%go2Oq0#74vnzQX_>S^2E}Y9&zNeV^((^Kp>)nG8T*|^X385nlt%XW
z9<F<-71aJiGxn)Ub7P~*p&2=$fepB!nV5K+1|;ByW-uqehtB}1m0@js1~-Y0JZ9di
z)E%GUi=14w5_c_L%_y&BRQim#4qAMPjd<*yKbS{bOwQo=fG$>uN9dI)8MWOt927H^
zIMaMEu9A#fY1ceqPWP6t%t-G57q+d;Nbdj%rIi_U0xqRN2M<@XmYvMXr&nj>Rw9_h
z&B)96Afd84gUk4oOo2rBSe*%qFSilNj}%vDLO1dwMaiKf#nqYC*Yo51N^+@n?EOyW
z4dv@x)2Q@y8M%EA8I-dwgK^c4n+9qFYg}XATD>77<98)bgEwSk9s?2x8!}<BYy?R<
z8BB-tYA#HLi)~^HYRoxRn_LLW$u?zVP6io3Y|5m?r2vqC*p$ILr#(3WJZ=jc@r?QB
zsx2-8t@^gO2;_iUGU;ZreP|Ndl4;qBf03|~{BJwE<yo^$)pi$w0{(Wl8sv`KGctRH
z3J|tu#P<?V3k3X+*xS#Vw^x1SBG3hak6Z)__#b8Dx*aM&_$Y&yX6V(ON=n9dvo_C}
zzpmcxBG3<0?{*O=DchZqd!<kT!tM-yu5JsRcvn)uKWu;WoOxev^<fu-^0C7%1_k`X
zt`!vU50e#xXws;pfPc(>yo))+Q+>?Epn!kO#h`$H%(a68{xPy+8J+J}()s>byR56Z
zT)E|}i$TAech<$A^Zm1#u(*Q(9blZz;O6Hb;TAZ(|0$z1kGEr=zi7r;^B2u7RbYsq
zQ>oBP@jtm>bd3K~CM<FlJO$WKnI_Hnn+}z9kM<(_^hNW=s*5fH9noLR$d^JO1B8p2
zVv#9>1j5A(=0QsPD(STSGJB}ISyg@6MWCGPaz^G$kO9KwOuU73F*<0!oN0Z7^?Qzh
zbM`)^Y;$+>57m82uU3Q3+541U9V&Fr-lsGy_9iM7I%n@wdR;mHghVA>(d}2tI`uFg
zsqW`O1Od^{g`gkK>sKn59?$_qzf!#OK@&|S-QXQq%FgvLTUHNrA@CIuu&-J{zkfHd
zR3_EX0mQ&k{DdF<P-`XK?;TRgp6O{euO8w;&=21YaUtkk-yx;)E(~-4F{Ct;wO-^9
zxcoc3lzrUO>|Qn8g(v{Ta2KKg5X0Sy6aZp4RiuVP;9~G-*7qgz*{ablLIfQ$x>Rnm
zRw@x7j4l<|O<{Nh2%}3Yn_7=>1pJiGI9xY1e^oWkMJR*~<6IjGfiTXkMj;T!Q8j3{
zsZzl&|4d*j|7_k{J;6nY0%3xS5Cy`7QklF$1qc&Lad~@$@bV&@T(EY3F-KKTb|H!Y
zG1-ME0>tD}xfrNaiU2XWG>Z>bh{0Bj)rB4Wt2tMxp5tN^17l99%+M;8VqnZE4T*RD
zKmub<DQ;u)ZO2L_Mn9JN!~dAu+b(n=aA8kfSSs)1Kn4&COXYh#AOW$k6z}!Cjg=J|
z1MkaiC{^CG)xVoJc{|`=XQakq$p*JJalmXSmCHe>0cJxfmV=bdgG4sJp|s9>rDEfZ
z7-DVnZYh44g0^cal>~x+DPOg=00AR6mC8vTB+xgN%2g{!pl>S0s`a2~?j%k%*mu3n
z&)RHt4NStot*(JdKx}mlOafvn8MvH2o!ca=eOj7x()Rt!Y@QqZv=k?;AJU4o2~F&W
z?fd(i_jsxgJJ{gDyu*%1f&}*A(x}+-0152FrP#S0L&<g%nrctj9}h62%FQQS4BEOq
z;n)Wuk}8#N?tuixiBfD$U!XjuX;}NIG^bbAzHYGj7bWmhDH0icR8eh8_FZI4hni29
zUo4e}D_{caVrf$B$ASdb#ZoNLp5`iec!jln#q4zR6~~&U{DAk0V+}|WDwUHvNFZD(
z#pFJOHu#!_wZ7S$p;>n16?0IqZx-wO$AH|7jOm|ce;;N(UfDk@vmkJR)jum!4UoX<
zpGB&%hdQqrwa$<%(}tTLR}68L$bcbP`AGl>L1{=98&^-F{N`b8cs6GavqqRtM2A!H
z6n~ndcx_ZxVOcfaVf1U&F~&xikJN%Al65=><|xMykiZ;8hLDefgpZEOMp#yy7!d<L
z8rDW<)p1#IVkCLc8<UkMMv{fK=GZK4Cr~hLPIa1?#qS8#$*|5N&5CjmjuBL`iCKAU
z1xbKS%;MOJjv$&-t~QyyH`2Vl<7DXbDF;lbOwP)Wz=MR!<gC0(2@)B`<ZOdScydZ4
z&j}}I8$Qf)Ldl_=aB}v62l-%YP7u?wVv7g_ym?wy4mOY|Zdz6jHjrG_*&=FAiQVih
z-y(Vn1gB(B012O-os}~VNFdG5%Af!eNVBsTb2y^+;?qy_vN=n#{C=62=B9aBZ;Y=Y
z@o6XQdSsOb{I`?pfW%YK;{7F%Xr=ko0JmTf7^2o$$etKu-j-g7*KVlIhzXg6+0rb%
z>;MwfVzz#ad3R=UR=$4)CULVEV^iVPUVPhSc{XP)Yc$rJ5?G$~@~>xm!(_{wZ0}gJ
zSNhGYd=CRmsJ@xSfWQZKAp;X^_R=`>w`n^o*Sugt#?E48gJB05P^;L<ab~CVD%sY=
zByJXmW9_*N8fZ0po|$)~S7+rRTbRFJvO0@!f=^sS1uedY?PBIFnKdpBtzp*?&HxG*
zEyCIdS^Ne^i}5CY=k|jvq6OcCZb6mVlI2_QH-bQKZE-vkBx<n*Yh&(pAYsgwELJO<
zD1&T4b^Lc$sUKgN%R<AnQoG$G^L0-(SYk$i0Nm)`SvgIE<O)%d2!aIMzq9zwtabFl
zXbY<NQ9Co)Y^PQqbulPqKbn;b1PB4+Xf`c=d=(@xj%G2{(~QxAsN>R!K|u4k<HR7L
zdE9YgkX+Vr;uh41r-T#V27*&p>p@O@%5h>m1=1<Ui9rJC6gly~sHIzmwF}vtsdl63
z_|$6XLe?l1E!~n@`jTkrmLLFm$!TejfV||iG)O>RqL$|GTePG~_b;>kv&@D{b^kJH
z7ucv_|1!BF4w8$>_x(Wvq<<MMC*kckwIwz0;4;=@j`=^;gIx$}-oa(^+A)LxF}N%t
z*3KXSF}MtC=kqjgwIp(^-Doamoa(VI1~v59GPx@XAz+Lx3yN3;l9bA@exfdFN$oto
zOvD)w&>UYT;|xe>jxUpO1|&4cmpNV3lD1B#l<_!o8wdbRac!Wj#3^Mm&fqDKrj*Gz
z0}@D6%Fsnf4-~Z(u1%KV*UbL7&^%Byql`W~K@(3a^pG~YOj%H-#{a>-e+M7oojSra
zS+7NAO)dB$UPB7lv&&?>1_|uhW%8N<NK6{D%c2X)#H2wCK55J;Q|Fh7Nkj6WH@8eq
z8j^)cV_q3e8kD)VqRv=craTyLpJAOAn-A205JL-(P~XK)eL-?jnaP6$_Tn;mp&ukB
zgvDi<2lzceBE^Zz;<D2Ft=*#P@Q&qWxY4lD!{STLx~zJMIlmknr_yB0@-q1~idNh)
zmY3mtkG^@=iu}T6g-gvxZ?#<$$t`ThJ0SxEyG(ut0wn2_wQ6mxr8m7>hqY~GIYaAs
z;>Q&>qKy`@*Dp2esG)6Tcsq?ps@61qc9!u-#YU_!wU#>_>+lHJJIiFC0txJ$Wf(pO
zDP?O7+qJ!A%6|0gRu(*L+-n!vW}c@OJW)MJ0AO#KyqW_N0DH^i)f|xM)4gS>{peHL
z0U`$Vsk*OBUd@plG~&K8c{N9}0JN_RS99<}FZ3XApbTfUDSkEQ^_6CwW}qD-sErSl
z$*VaKhVFqfoC9^?x}ZMCP>DamZft2J*dLA<7E7%%Zz~7aL7+DNyiD%CwdQU7c^P)!
z>T?8)m?Lc1Dzo9!N6O?^Xj}6!cf=X3AW_T_8m+Xw1QMQeq%3i}tT){trJpG(OSb2!
z1POpcsl<`8TW;m6@YXa=kFwZX=8e@y|6f&S9w$|G<?*hvx}<J05er0Yw7R8Vb-kq;
zL<2NSZ!8KfQ74I+EY4(^iBU5dlQEfmvP`Sc$i5itt41^s&_oavp-Xnz8ykXP{2-1-
z0u3m1Yij__*us3zefLq$fAu?c?s@l~?cR5{7kL9jp+*i1q^8Fz?Rz7T#~!O>PW(Y}
z$KjHdPUyL7Q`1JDD2kAIniEA4GEZ}&G9AtpQ3MeuDw!*ixwPRjPt&Qtx-K=iwzDWf
z=4m>M5@epHvoamNEKvjros}faMbf_wmtoYY!sd0U#j#<hiaM65nNyW^wh|@^ovNfy
zH~W-^Gc}X!sf^$6MEjJU)?+rN&NV@cj3o0iJyHIk00Md{`}Q+~P9VP4Q+etAPMAN0
zVDiVOm5KYDFn?GY<<3U=!;;7!=S=>PTsvH*cqTjM=zu=cap5IHp`chu;gJC#RhjJA
zgbPIEWG70v!)1DBx?>XVKLc=|>5ff6KvX&1u?ZK5r0I@LxIiRLckIB9E9hoBC677b
zz)oKGXFK*f(>@Z_a~!$Ov^q1#u?N_p5-D>W@(Y)LmU90aYm$1|=G0A@d5%3x4iTPt
zPPnNA9?);}rCU-rXMW?@0Ubo4It=K(Zsbs_hxOzwsc&W;cI?2gj~Pup>@YB7a|&{3
zrq-W|9PQY%*btGU9oC|T8XnsIsJ?4!YIwz?jva*dF~{Q{br^&`#|vaB_slJIN;VZX
zZ%qxp;G(6{U^%4RR~o!bpWBi8T4q_)UWmwFChe88-hHLL%k{lGQw^Erj@^C*5uW7^
zp~*BNJfP?F{++4YGS5YAfhbgI%dLio_O8^|wxzzDSsCf1uW9c}(aBiDLwi^0LR)Hl
zW|d=4C-*h&UF8suGQ#XD5#6fGcBRH-S{*wIg~+p79Y&#aR`B3iFX~_HN_{o+qGLzJ
z5aD^zVN}dS3OoemTHUoPbz^32kw;D^uN58w7apQ+z5d$Esll1`)=`BB&w7W1%*qRp
z`Ol4d@yn^96&s8Ck<<PgML(@Fc;_a(?M}%n`tL8NR$sK;VP~7D{}NIE4!xlr_3wz9
z3z4Ebq`7jr{w1RRHhuN()D4-os0t9_X_G4a+VFtd^>25lnlkN?8M$;$sA9%O!-M+w
z=$bvLv6XuwwQ;)~JbOfK?7ih#sDG~$cbNVx-<7&tuicZnsscjz0dxL_d#^LFQgzA5
zr6!$x)hYQ%t3RbWFMicw<YM~98fn!Vj_Dh(0bs5-9Gh=|H0KS+c8)-5^@c;|C=;GF
z($=^1YkOJeek%%Yh)8%V3T~h<Id*do5D9NdD<#v`NShDon_eN)9x6%@cR1wO1x$F5
zaL93LOt%6=!Xbyv8s?Il8iDT=*1VFM6&v)9W4k7(6ne+814*E8iG8<AA5kNk>(ck`
zPwlMjDn3_6lwFRUs)Yv;T~1jzo&_SJ%V9h#`LRaay4wlIq5w*EN2w7=$?hmM0x8*j
zJ~h@z^Uj2+QNQ%(RC4T@VilyDI#X1hbW>-d%t%25osrD=fQ)-akQ%ck%d)Yu8!Ggz
zt4c2`416th<bvL_v(bCQ2(j%v{o}u+9>0d)$ex$ArUfE<Ue=lxi0pY;Oe=d}Mu^Vm
z>yCq|iPiIqMZ}i#vv%$U9*WG*GUZWkieO8vzwt(@u|a2Tsvlu?_voxm^*|)(tQ~6t
zk)X4THCtt{H3FDikc}@Y41PB?IMxKF$`Hcd4@l_+Svz_LQhGtwj-G+^ehaew7G=ZU
zPY9;>dm@`ym<@YBOQYPASvz{RBznK!Wo7g%)*T`Ku_Tra%?rX}OR~1-15%A8S=;jg
z5w|28^?W15GnQse&o=>pq@_i5$Vg^sQ61taOS87;gBeLnv)GsIwTY4G<ce&`4$NC$
zp+8t%IzSKoODf-cMYdOE7`Y?Gx+}%Hi>g;fN`i>Ym62V6$XqFQm4(-lqW@Oi@OJ9w
z)vd)MV%OHJz4-_pinL}qaUg3>BPB-H=%a6^ZmV9CwUdGnDY7POFQo=jWKEXg4>_MA
zp!NC(hf-q(tuH=BthYXEFWH1gn6jj9(fCNw_$I4x01Dp}DI7@2O_9QZl-zV);Uh)i
z+e3xxio>bonC+3i`OExg-4BSM?UBBL2-+_Cz8!s!N+)+^OM1}v%|_pSS_-9~(^C$o
zM)cm5?Nt@(e3a;XcNkIpM*8lkfk341jx-NM`fky@PXkAZ!uIMXj->L{dy7Rx^LwL+
zf`=k|C8F4nKoK;*Uw?EYb<3dr#UdhTe`G9pD6(ISwO3~PM+rPs_-RLKU%d8Eqz9<f
z^ibq?Kx7=s+7UER3T5fSPDmJz5?dTEOgf(WVXWbJQHIQ9952ccqa4rLg-XgG<9L>?
z$%OJKjFRli#y^x$9vW-nXBfo%LAkCdh=G*rih>wO5O-z!eQ1MN2quW%%O*asL2PN1
zdp`<dOCpH7&j;}+$+M@kpBchJ2}$7)7D!c2M}7rF<mvN%HA+StpM-uj5r9%YDJnzW
z20ke&L*52Hi5v@NBz+=|byRxZ(dp#5Y{|n_v9daosQb2bmnQUsovED{pUd{D2t8}G
zcvf>&xS<t*{ARZ9n@$gi{N^f~tbxdHuEMp%PezMJOs&#`-b>wFJGIKDUZ{weT4jA7
zXt?an^FTyQtzt+bE03ea)n-)bwePX=IHM>+R5+u`p4f&75i_c?;qoUC5i_dnM#0g7
zW>=Y%sekl-Dmi#|mCcy^MZwusHe&(}Ym_lZi@(jU3MXd(2Ayw(c-{PBE5z&OSJ{jS
zGm_?4q3CD(qv%>fxT@qx;ZS!f|M`n|RYhZ*S`)Qaw*W-$j&ut|<nBnfKt%2q-L}gS
zx>{-TQ-#h?Q+xUjdn#vJ1Xakn%Y0)WAcdaFaVW~{s;Whu$>q8D3%NwuDs$rG=|W2%
z)j!q*F*GSGNLZe;of!}b%X79f0}=<zbNyb(g`JrYOdPDpC06Fb&dky%_gv0)W|l-8
zJfD-!?8!c+33RIma`A(?M4_6`(WSlv2<L)oO=38ZvrYn}QU`KYy+DK?$ni=biyA;G
zbs$%HkV?s^P$5t$eB||<U3jY%TfUhyUhqW#|GimMni%iRoOJ{KMf#h$$PH>Gj~~|a
z9QD8B_>G*y#cE0(KU}P)<dDO~YDx|{oWl!FO1RaflgDx;=X7g@I??-BF4{9)Cr;3*
zpSw~m8q^t?0V1M0b2hSoi0aH?eRG_)PK@+{zHgv9IOv0788Q9`xm5V|9e617L5^GK
zXUgERPGae_ey~!_9&|cqx8gvg%<0^PW?Px?Q08=wZDrE?)d~98Y7KzaK8~~oq~ynu
z)_{gL(psG;{Or?cEmn6n(icSZbvDu$5D{l1eE|`1R`j(fj=t*C$p_q$CklJB>dM%~
z54h2}(|S?ZG*`!RYT?jnu610f2%F|wjR6rh%|&A?r1Pk!oyj?Fe7>6~dqOun+3OFw
z$yE<DK?)ro2FlNIt>XhJKgYF>55&jjxc%n4q2mj|IR0EW@f$aEd`qL;Jl8tDCE@rF
zxzQ-DUJRk#&vXD#P%Wge0{~JL?OKNfB2v4NYU>3qaKn)t07WlwZQuaW@B-Hc4iHHT
zTpKt*Qxpx$F{Orda-mx?#fz2QSfM*Nl=jy<yk1|>LjpA@yU?WrkQ;j%*hRL)jsMY2
z$ag9(1c$rGgr+A4>ct69xryt{Tw3@SjeFWnjQtFSXZ}Gbk+@}U{5iz^GLnX6grq0u
z)h{MK`~S+C`2jakUz8?hS>YzepO?1EjlYOA=6r4C$Z<l`*Hx=mn^wDai<_yOXuj1=
z++7qWx-7VSo<6GF8aKWHaq_KEQ-mC4Nit0ulF;c|*M3<vq#$>lYrkO{QjojeO<XCr
zh=fXf$&GJA@LiE$4#W#duN|cB9J<*})D<fwFUVV5d+Cu8Cy}vL9%<f<8zchS+^|mu
zVDh%ekAYOLEs6smMcX6}+9eJe#I^Poa#yLFV%2+#g~a*yx;AydM4`PdsY7mCZ4kBX
z*9(WJkwf-#_J<~w3XvlFU7I<86xr{RInK#u!3JRRq#N%leEw>6w)8vv3{yLQP~DS}
zhXN6EGV)L$Votg?wF3#elWt`fVJE3w2w`gPbV=>avURLMQcX|c?izLB1+_iJ=SY(8
zaqSWgOgyK@?Hz^~kmvNcj58$BHAs#>=Z5c907{;Vq7g{Rb5S$`DS7UEG&V@+HhbYH
z0YF`vz4L9A_vU8LMkD_ssoAs92t-n|M>H<^2g0$DK=atfIjWW~9rs@1ad3B%OxiYz
zwU-v&AFG;UgO++WUqMCKQZHpT_zDxkmU?m-h-CXlvCay;XuMi7XhpG%n0bX~-<08@
z%nFZj{q*ob5*~%0UQ35Dq}2<*oq{A0)#~*#i_QWm)aqfOHuIoftT3(f;=A?L6V%R&
z){#NfEv5pnZP2|Ys(-BB;Bm=?I8CFm_6Dz?8$n_6f@-rbxKRwr-t~#9wtAD72)i+e
zJbsgRNjReoq{t?Z?LXI=r=Z}?`h$sTLiJ`Z5nhtqXe_qb>mRPD0x7cDV?|ZAA2f==
zw(9R+udc1$>LtwHZ6WfMtzMsSAs0xItsXo2WGiu_47s=KgV(G2>g^uiT@BkJgX`^H
zMnYVgCWGtk-sn2peCGUi>hU+w{GDDR^t#6I3MB8c!M2D@wD0t;{-W9A+$d9kyY#jj
zR73TyViB2I-&HIkQ|r5=h#Yfol<DwxJ>*7p>s9SuB3zz?NRf8$((wBhK#H_`gRW9-
zGCebfD;>O&8Gd2qjq2J&`jE%ExqRAs3~rV@?8Q4Y6Ro3~_!XY?hmN?z-bJAafrvZo
zu}eh;UqB-CuvgaMg$qeS2p3d5HV#Y7S_-~(#AB&UZUwR=v&Q1p)vLdWCyfz5JK@Ez
zFYDktAKPwK?|lmtW)1$sY9~Cqs0%c__6lntbvog3dO%D8MENJYVH3?wD+0~m!zZW*
zBnOU>eAZp~0&~2vf9)<lLXtpt6s$1uh;GlmNCJ`3?eQWRK0@YnyS?(O?IX;ZNw-%q
zMD@@<9zptR_T$t2MA=Ct3$GQ0manMWN}C`?O_D^|?Azo(37*&NpMRbt!e*c6g=&^W
z*zA{2_rviA?BV!hil3O~hvN@RquhhO9e-F7<BzGnj6V)tEc3{G{$s9RvdNE??L*V=
z?=0=7ANq#cnx5;I4lsLD`bo-}=f?xHHzf<CZeSCGr9c!o&u3a?F8T!XZ%g6%Z>n@G
z)8fa?K4qc8)#9^HxzR9zwEpY2)Yy#n?Ioyu<U^=FFDNnz-cNM=h#qsh8tOda#|Me3
zg$U0h{*bHHR95W4WQj#S-=F-u-uLBR4Tb-?o!Qe`C??$HfA|;qgU#!pK!h&xhl~?T
z8Axpx`B#rsTu=eV2*1~F{fiov`F*ikvJUWjsa9BZd~dNH_HC-ZxL7S&2UslCB6^TR
zide$^vZ}6piEpnLh6v9Rp96SYk|9hu&9cI&Z>xQ=@@0P9qyeGAwan*!^jE_Mk_T27
zI=-vE8ZTd6tdpz-td=^-D*&Yk{WbcZ{!JY$U*pG(=L-?0HGa)V^-0LYa@R(E%lFl%
z<r|ANm+O8v`a`ZEQ^gZw*|g|$koAXmsGHMUd|pfHap19%4Yv959eU3ls;-G&VG4te
z`nLI(g-64IXm^{>WWKm55I5cCJ3DYw87~RJWP|O#%?6f24YvC>8(5NLgY7=q;51dI
zB+qI0<Jq!f_~`T>sO~yY7&`oi)!L)b0UBPrtq@3^+WksLEfR0%BQUS{C7t@kJJrJU
zD}HIlxcH^w;``8vadAEOE|tsx&B@79{-lEY#Bj2JbE(v2zg~5h8l2hh$IX!?A;PoY
zC+V;~83=k+$L?0cDqk(iF;tPmOFKMN?9YDuivtJfd6%d@`rq$Xeaaz(j=<l@__H{|
zgKQsy9Z&BlJbAag({}jr(4nEi)!{S0A>jc;Xoo*^g7I&GRJOw(cAc!x^EaA0s*nDM
zs?HpZLIffrj!KC9$nfCb$MjYAsC&wf`SIaauK4#cf8;1NUtH-@aq#1M(><!C{CKf0
z;^4=nF7Jj+IQU6@?~m2Vij#i4#!3?ZKIyYGavT0OE}eYeFPRePrk|*<WZ(BW`yxZ+
zalB`o_Tzu|6Y8wo3_8xfX9%tE@lVvRW5dt*i802j!v7HZk)OEdGZYl@vCoT!^x5OY
zfqVS;S-)kL8rlS;k>K!tNFZA3@h=bidmv?dd^T>08v}9U9zS>1y0H+98-E(Pv87Ol
zPa`+BByr<U#f{CI`Z!!CIVrdx-W=%f{Zzg7gGqsPV*a5<lLC9(6-bRH1p`giqYC20
zlLFF9SR;A=oD^Ks9E1a5{-;K1o<BKAT%{h735N0M<n*9K2eGnggv{nP(t7L9)Gsfd
z9&mx$Jn8wyi_^~u3S<6@RDH`FPR5Fbgv_(&1onz4AkUr?FqXIfV%0f8I{aWe|4Pqe
zIQooM2ST}&Zz(MPx%zsnsii1Zn$!~53H<S<Ni6|$!l78{rCWkNHyI1^uZR^&-|(JE
zOQDG^!8Osd4HM693F>c9AIa_Yd~s)CP_m9zzr*eIcm8MLSHECkF}*Ob`z-rQn->Lf
zFAVhG{fa;bn&q=n{zU$wfaSA0aPs~V=u7mrU#UCGmjt#0f(XwNF~v0L?)pniKU28z
z*Xnbz@@Eh%%@L}Q144a;ghGFb_2v3!|E-=cUmn<t%OS$FJYYwMxg)&4L^!M2P3o2M
zl|kG%BPAukR|Yuawonow+^UD(r*@RL26kz_f4Ec~ur$wWxjYVMTC2<MSL@2x266KN
z3n3zDZNQGC2K?jNbaG=*vQ?kDU)85K2JAwTK)F@|<)t9LMK?aEhBX0^1P%w2KveQl
zU_Y_|q**To%*l&e0&&Zif`MCbOUd^_FoCi;u=(CnsK@5O=6g$$K-nA+DBr@0e1vF6
zP_jQr#LB)@q3_>TdYRsPtTd^wn52fMcLb%5N!pi*Eq4a-q2ZocAe94$nGwiib_Qf4
zu5>LmA0cYfD<-KCnYO?tBZ%;{1tcTsw)ujPjJcDORb6IRU{fDNp$4Qr*(z|ESn_54
z-N|Z9=H(zh%$OS@JTC_$Mv4;Q!I15G%VbrbX%B1<0TG_|fF44&Sn#nQW^i?Rvl^b+
z9mGdlIg*NZ2lWkR>jK~Lk@fX^o7MR8Jw+Zd;~wFWBM%5774OrpH>*E6`+|7A6(p&6
zUod8@x*J<xmrlMGl)OPy+-}u*WQw{m{aU~ptXTazvHF1^eo(AFx`|)mK6>b=^gu8$
zd_x1$_yYk~jEKE~*!w_GebCxl2*%#8NA|W9>hgMIZ%Yz;zb^LXgE{e1j$FJQl)O&`
z|4Oo&J5%-5y{D?z(r*W)<;K>0fQZ!}Y#Z7dNX5YBt)>*nBMt?8#EK)OK>j?e8>Xq+
z%;6%B*!r;WTw!=XNAz!}sq)Mbe8{M+%-H%!P&2~v(A*CFy6|)ab|lLehA7z)Fp_nQ
z9Bh45Uou@)WsXMvP-bj>RQy4<_mqjPkL#~bS2taGJn{#K$T=?l5Y`7<zk`wW6Vp`x
zf${<h3VUC^4Fu~u;(`@M92S39$7ZO3nRlbS#Kn2=yeoMrYj{YfCv@WsmCKxnG5|Ne
z!E-_~K*+<;@}!<3JSU4Pkdfs{QNfi)4g<?h-9AHAW;%m-ILhF<MtC{{PK1S3XI$B(
zKR**Sbp>&Aa*a02xUwtY<XR|)Q*iI;i8EDY`Fq87$yXxY3r3FSq<B0rA)Wj%VDHC_
znd-ag4+CzT7vG#9zIiH$p9wP(5JiE*OK^Z_>Qrz=cnL5Nlbw=8C>{#LLr(?n8S9}!
zFdlk3@=!~m9;YJ@wIuP-)8e6jOW>h=sb^BYL>E@gQa_2OC*`eQ4iLYboVR|N1yUVw
z=$AkQPtN0WGUDSaH@wB=^#gO2U*4RzP6rjH<~$l_tPK-rN?y0mRSgwW^0q^PYRK~P
zAl=RYNkcR9g<zh#C00H&Z+j=mu+7Zl1&xLa=bV+-k3FQul+VgrcN$>4b5<UAx<8bK
zdp=b7<RNuIto)(k6U9Ft%JW3irwou})S|DLPoL6~kB>9~0}-Z{Jm1{=5*D18PCk||
zc~XBgU)|K_u{;)(w}**h!N>FQC-VAFcc|fd_QNXK1P(38zi8$0ytN>ZmOY-g76f9!
z$MfzJ`LItBg0bL&yzNsgg?cQ=+djpT#DWX*Sa5?_kZ%C}F<-JgA1hm)s3`PlQN!Zt
zKjurXF!|+jvEwtSF&r1%_Xy(xVAz}UC(@r0RY*8rE@oV+7eAtIDqotn!*z)8EX~Vz
ztt2g9F7{fcdq1jXWtJ703{{xEV|ZxlvwGd5>U-tS=563yZcO-Wp6e;(<89Zclh5Z%
zT6OJX>KlEY&vWocg5r8n=?nSz>b#6+_1llB<PU-2rdIx>f-mF;gh?F8V_wL!k5FO)
mh(=$?SFN@h6@t;|sz{@jLIYMs8nq<R=qfa-Z~by<&Hn-2C^H5C

delta 47194
zcmaHUcbrs3*7o$B+c)*hbeQg*=`cM#-2*BzGh{?(5JY#^oZVgBl|^M;-Zd?t>!x?e
zQ9yzgIf)=S$Z(M?f`B425=5dRD#0ZROHlZpQ&pGC`uo1`zdq-l^VF%TQ&p!<)xEuP
zO{0N!qaJ-ceUv`AebmL?K@TfG4zpi-*z28St*j4OddM5knQo6e?Y%<_9@*`&6fGyD
z9nQ^JsCt@>W~a`3=U><D=@(z>+^w;d?)FmW7oJH!-RY%njnkc9eW^>=zco%j)A_m1
z&vxqG<;54+mJ8knx|Qz!;-5Rez%E|!HnMwP^xpJb;Bc-{WF5%0R4qrz38|;-kN>EB
z<*7QAs}))KmY28+*tx|G95R>4Che?!UasT`saJCCJ%7^nD-~CAwPGpef!3AW*o_Ve
ztt+{$?zB2_B|PlSzWuZIbY*W<3rZP<xN4}xA)(S+z5W(!sK#|bj<EmwoEFHf9HCw<
zCl^X1)Yx@WDVL<wX6>zyJzPl*sf^XVsC`n&RIOABsnB6+x{X6ZhpD%Bw1x;BZ%7@-
z7QCbls~qR*c%d^+O}CXgUg(Td@9bm^7p<U$)amx~f6+!NmD5$NKuT#)ny&g&4hf~{
z>J4oyTjj>-A$5UW*<EX+v|ONSQ7NTEX@Oc)>5x!bptgC?nyFffivC}r=4?_u@jXhK
zwR^-Hu@}Cg<tzRbs!?M7(Nb03jjP!wuWEm4x>{9u;}R47v|0`ELWl(FYBd(OrlQWE
zJt6G_RoTe?_&04zEq+;4I`PpMAE-VD#RHTN)DZ7vdJ2>e)I`$q3t@v$N;aywR?sr(
zxzXPYp*rhSwTV?|`5cy70OopCz4^bHK>JWtZ^`^O7friCRqwOT!2ea)xmC>>%ij6B
zb~?CKH6qqzs(^=lcbm%Uw;AKwfPmH8RK?(x012zNsb-!-qMU82KVW?+RPl6|s<e;S
zv)X@ZEhB&ZQ>X4}F|5+v|J3<!=|6RPr8C?3Pi^FV5c5e8YKdKHUc@1Rxl1jMIix{k
zyqy)W3>Zi45F<|FR;w{L7xmx6X8ud7?6}8iY>%SA>^)9ngG3Q~oGt^2BKA<1QO|%x
z5qs3cUA(D@6ivNHP2OqERd^v#_{whezgm^2<}0_9Tr}ucsxK{Za#6}xYS~Q=NlNN1
z)z%u5V_*QCv!~W-Yt@=_E`|z>bE+>ZmC!99%Nsi+FwUt}O|01%955Bt>T6Hwqs>*?
z_4P{E0+-lc=~^Ix(bpR)ml!m_`g*Us-Wn(BqJ^}<UgdRrXn!s4sl`vHb2aD<_L{;&
zJ&Fds!QOC`yCg`s<X~^n>)u=|#JfU6I~9bq*SzX5uUEDm=Rt3XR|`SRgvp$xg}g((
z+G>wg%Bz9lI?}6T;=we#ZlIQ^1R(~3N6}%#NN+4Djn@G-(py?)T^1gOt{OArrGc8K
z?HITI2I@b?t-k??G2RfLD`0>Dh%w%>tTkGJ+bbb$iZ^G2J#Ua!<Oxpk8pXoz74rLO
zUhenRAOJbdX&R7#oaU8&4-$~myzu)SWEHuWHq)!j^Q!T6o{^JlV(i1$v?aA*iKc}B
z^k+Iv3ljP>z2OLNT99bkncnC;*|fyqO*_l0&Xr9odC;5fG_7QzY3J~!t>LC%I4txk
z$#_+oT^gdbsR1EoAVpE&Y74!-0B>55uxX(;$QLKnfd<7wZ#-eWCh7#Tj{Rk*HngVB
zg&>cw^ZLYCg$f|*ywQwAq$Q)y+n}L!jyz3K;PET%>S5Zep6Zn@26_BSuTOM1gn+Tq
z8xsQnBrsNb8(zmfg^%MktPDQV0>7cS#_<%8P+a493P>ofx#}srvL7;d%EjC98<u?N
zTA-nGKXm*BPXY9y<1Ziq^db4nQko`nL)vC<&N23{5t{Aa>@`Bxqo`XhdCL~oVWjr!
ziY-nzg9)T9j+=l4(iU=)2e}F!*0T*GwTEl!9b0l04=PpfbP7lkaykVh5bCK@`eU6#
zsp#F^_OC~2rc$%p#h{Me?e&TI3_`%z?M?82fpmbe+gn*>jT9Il57`sm)FMjFAs2&s
z_K?@dLk1{O&mQuo#5@F&l)RXS=1|Y(QqLZ>PmI<oJ#CM=7}T>zT|1~}k9re)`6V4-
z9Q8JBW(`KWda?YT@a9}(PmI+D1x|RqVQN<|Uvf`+S@L<~fpW3bp7bhwB-1lg|D?Ap
zV?Dw}0e_lx8K*r~dfKZb$Oj=q(b8#es??eWHwF#zEZaX$o1QxBRrsPpOyYWzCDxr>
z28R8IO&zb@o%)YgDU(1H4*kbl-oSd6%b>;=m~VpCC4Ip)h{B%>WYDTyR0*>{Z!Kr8
zJ!*os(&O)~d5d_R_=?(x{b7>!>r@|2;e*8sCUpB~7%aB}9}8PZ?Z<XZ(%P5y(-a;d
z5)(50wCiu+@f2u~16j+-+OX1rn$nOP3MO&28yZ<>&^Hi5ZHC!jPu5=cq=sn<_X6TV
zYM2Huc#;dDI>Xs3Q?);2hieM&A;?g5hHK~{_$x?^l98IyDBgiB`?Hl~k+-yF4Zv`W
zqd0CP88-}T6U5Q^6E)?wcn|NJ9gSP<*>7q0C~d*HLE1?n+(fN$g+s#5iCSfQtH9Do
zn>=o!R@Kh>oH`B*K}dazwVbYfQTmpqG?hve(Y>X$XleC>FGC2+!5q6{hGr<~Ic|#>
zkeWj+@;;4VHKZ-la#pcNXKHKwi!=l}XmLzW7{QBK`7Et{#bQm-sQ_Zaip83d?~pKZ
zu@(qgZMX^^+HAxu?UoALRiPnkYlc`hRX${G4Rd>Et^!k*v5T{`XDgOz!b!z~p)S*s
zVui*;iBgtnSfL-_Dxg-fp|iDz+OE{(<gF?+K38foP5_BQS8C;rq@6TAS85fN)(0AD
z><ww3YB^uqsX5whx&BWz#IwzT?4>H#vlr)UEi39Zxi*0bsCvy5^D#(3)oX}ETW}RT
z+|KIfYpp7_J5~1bS!%mx6!OwRLS?%aEwY+%6;%0i)?$IyqT+K`g&h2I#1K-2s{FYY
ziCRs#3aH)ejRjh>iruaX)p56mO%-*Gm(M}FHOz&=FnI7j_QL|LRn0!9mAnegK>IYG
zXjqUy*rzoRGZ07=vyc3H9xZWRa`1!f*@fDIwg+7Z3Z@QfGMIu4AP#CW+6M`UgBn7|
zi5T%HP5ZZ&Gr)dykv758;NQY;a#c+aX+LPnc}=yZ<XSrD{$?&FJmT3!i?zv~JI`ur
zmWQ<B8Jg^zrvBy{4$AqDrnW%c1zulW8K|q)EU$xy*@k#amS{7Tmi=_~23MJ;jsCjY
z89|vL3P%rl2k7cs9%}?m;2L?tFnj+}E$pcnrb|}<7nL2R%Lou8j2NcFmG9s>csPQU
zF4KNlGeVbssqt;i2wgT8ND|URqR&7AVT6u8TW)a(7&g;>YnfK#t(d7RChu8|FIY2m
zSW6uZ5=t|v*eb3AY7Wa^qcyFVqbnkK(YXK5(SsuN21!DCw%lsZRp1-**`L>F9jfQM
zmXdGG*L@-^)VOcV*GsRLg_3W~*KcghM~X(Sv4|aAqqVGA<RVZ2vPhTS1sT+Jk=~$6
zB9Ln=(wjB6W|DVlG#}dRckgSn@3376jkvmxuT~@j2wRsE0Z2gDIwpd-v}M3Z2x*&i
zWs9!H$D8bdBSw-{|JEvC2i`Gt`(JCdSJYZO7BMD-fwjr)Jc^t*Q7h7p5>F9hZqlP$
zbP>K2gU6U3>FOuC2;U_SdLQdDe3vZ5n45J9-}k1tU6^)97)nw66T9mM?YI6)5RMfT
ze2*|pG0ri`0BwYUasHWT6qB+D7j|mfE19cfLWdcqi1{_egbp(h^YaZ0MrKHzU|;%N
zEAe!gU|e-P3tcq9xaxQoFeVrwzIvm&7BD6l<qfSFqFi4{ooXlz<D)(7{;(cpfB8Zi
zQUi{NjWxvww5cwd4`@@3kmFuHpiMQh4Xot`uYX=hU1Hy|TdPrPmbe&s=-Va6RR_xh
z#uB4cgkhSJ2aF{~WfN;Pg<+bKj}5<Fw_j_o)O_G#<OAaa<Eo401LFhZs*B|V;{&5v
z3+uF~RROw~HUCQcp=Of{Q2>ZdhTN5EN&z4?8D-6-mlgnGlhNuX>oRgdFvA~G_u9`K
z)OzH$+v{TZfw9-{Ilbry#$Kb)@mfDH_8O_QH87uJ1VY*+L%D31f2$49YVp%))c{~F
z89tFJ(UbsSE*V8mKL-GFiTYW1XaF91$;ezbM9u@^@X!!cel*l7zQ2?#Od>xKi}sS5
z5)7$5O}>}B<JIn+U+Bhud|mUm1RrJNfmqf+0;s1c_mv<~c2CpUS0XgQjA^pJ4Ad^%
zPH_rRS8EZ1Z}c~>dK#Go!<=~}1f>2ZwhM2XSP?K{r<yr~>^aA^H`KsX6WhyC)K@yq
zxHH&;XS6q~XE@Mc0(yo64HD2Z%n;A6kqV$^n3=5gD~^DNvsm^A?XH?xE&`>MX1NG7
z|IRW)VuPmh`FECyWJ(`l1gbWV&H6#>S3S>#pvi8Y3qdROJToLZTj#U!JQD%+FS!vg
zX(4;=tafM3LKh(y2n$^VTDTXQa?RBF<h;<tn)wzbF?8BIyl<aAtG%sMzwcroYEj>J
zF=*+2-)Uv&pxpOOMA|QL2*|Ey+s<oUYu396v~sU^5omf|Z;B)+N~P&}y_qhv2Iw3D
z?(w<Z>w-2Y_vz0~CCrD1&L`y0&4^ePKtkzr6RQHPOdv7weQs8Wb(+ZjW`H=Azecjd
z;sW3xwFurLk6MF8eG$oiXTSK9HbklU&b3yDwcokc((L`6+x0Yie@9)v90_Frqu^6@
zZS<9%no}->fjXQr<!&4@fH-AF#S{n<5T{IRU_KTQn0hbS%@zF<Pt7G4!-N@^Tr+4Y
zzT`GLO~seUxn~Ri!BpIX)u{U1njV%MA6VM}(ZiDC10*1NSRuYmfaNq3_pq*S#D}Y{
zU?T2qu~V;W@s=P^f!>xJqadN#+md4xBs6<l&KT7d%(??DK1SJ#ny$4S=$eoR69&2_
z(9}E7l0y`V02*kOWv#vi7^0YFW?4DA>~}R?)uXd4BVjG0pva&hy1-JR@!1L`aqMsN
z^%74dIAU$XbHFaJWOxJ;unR1#un6)<9Z#3qP5t^?p30@J5{<~EmRZ1E2trU=Y6U~q
z1Zq)(Hg7AK64WPEuCV0(08Hqtu#!9#PcqP1VKur@q-G2v*RW56`q0WXZaFmQ)>tw{
z1sM{ukb8K8+})r-_o+QNq_f=0Pn{MA7fPR6F)`tQgwm%Lyl$hY5nA<g`+=zbk*Df&
zw<H=^pIdT?H~7H%+`<w+u?U-B<kyD#a^A4-EY>IZLc_7HQl8d}oEZWEpHj{|JM;!O
zii{d)z826^w8ID=N~W#=jUq-uIx|~gB@OlF_CLz?Tu&)jVxJEID2yb9bubkQAV=8~
z8t5N-(xZF|uMlyGO;Ssd^2ZFIP4?w{W%s^LZ>>Zo`;c^4g<kOTY|a#)lFiI#J>J%n
z?AQ(Zqzo7$@qovGnc~CjGg62n_I}%^e8}cB(nr+dmoN(H8pyrv!(53K4XEgA$fZB@
z<x*_U8Qc4ziKqM2=Cq)3&S(9wHBe{x)bzD1)c+kHwg}fq0ehxTZE!6MShH$>#zRNX
z{uvA1IOk_z7<hAiYUWxnOjGlGYSU|3n04m=%rML%3w-Kzu2gM5M3m}6pL)H^>z9jR
zzR0IGyq1OG`|i&SLkzU|XHp1h>i!GAUoJwFB|kGCv##w^%L%^LX+;DAOMPnDwMAl8
zfA44bh1hEU3@jW{m;bCSA{cN#t5Fm?>}%n7@P1qEtHmbG=_T;cacg{Pn`>F<xc7Y`
zgyFVA3LUrBr`~d{6#DIhYnvZZ=(lx0Q$)Y5_o2kMg(G6LsUP{2Pua=}eOfJkiSdM_
z9}4}*SDKcdh$%z+$XE91RZmoMxhH;1Si*WGS9s!PpPIUsg$jM*Q%kR90ecI%MN2+*
z0R5Ry+3!=?mz8?6TKsm5pq$fZt`Vp;B+K?+H6m9SvCXGeO88u9#CF#OI15JXaD9if
zfW7l)QfSrBF&u8Z77We0%k4?7iDv!c+9E|y?(wOut}2R--0M?ou4SRfeLnS8s{^k$
zkiYaPC7G7#4lj4>{^IlLPOo<9b_)wM(VLgz0S`RU-;`AQ(uaJ?gP4Jki#p`XIm(`D
zqCen2<nspj<j8YT->~<a=#{B&d<xIwdclO|H@=dTl}33;EQQo>S$<PJlls=D@BojP
zkolHm5DbF^^&Pvnsa}@)&L?6TViK2R%D4<#=`ee(sh&+8_9;9xhYWSqVUnrfGN{`T
z_DNH{s`QA9Lp3=<GPk29$T9ufmvfdSn&}-v|Mqzcc};kV>9|k1j!*ODBDn;br<J`R
z0dd@iq~|>-28pAPdV;;zOusL6!j+*aogf)x!yp6dBx}%Ie<*d*nUKYFf0ATsxeTgw
zioMZX@0mK~;!u@NkxW}IgDRb7En4X9Qm1_~35$#nWKNSzD=q`iIKxJ?&~HkeaXJtw
zAIO{`ncKJwM&J+Za0~tR(jR;Z&vU>?+B5t>GSoE43Z3`mTxNH-MAMx2d852(c+Ta5
zPiZWgMkHH6^F5{)Bp@#Mu*jFA7-UXD>P2>>rQR@g(OF->gv>>fp^=9~34$|L(MoTf
zx`efo0t{jjmt=0?GH99~S+7=lP3lK<i<F_J`H^I*xeS`-C$_JZ-nR57r)iKMfy_@N
z^BcrWW=QLqmt(V=TkF4W&@<2Q11MKDvD@jJrwq(ft)m{~rA(RUA|6}PT0hdFU!K~C
z=cU9WK=#kW<Va_^f&=pg5a&FF$|eN~qwQ@s=@*rn(Rnh!1Q-1>I!^|eAkj9X^W+`}
zBrrzjVUP12=0srN=>%p~>qn|5xDd2Wn&3iEP&OeiB%*$(0AfO3Q8C|Wnbd-lSyhdG
zSM_8Ufp$rgT?8s-a-Q7dKm`bs^RUNxjN1U}Eml{f|EAqrE<!F4-pcb)+j(IpEfsI&
z1;jx&NYcr}nZ#-e*h~a$+TuKAiG6QdeO2yL_$fBkcmSBit|1h{EzS#xO*NhZW^taF
z_z4Bk?&7?%C3#{~O$?-c;KOx!>hspOe)O#s(st+NjI*D=P5(x3use^Zb#qnRnbD5t
zDW}o7Z=2{`OLi{t?7!ZnPg7f-$U_`MeJP%y*-qxEcU;4PEvNF-cGgVFHCWWUSMux!
z?$;aT)?Uez7b?I;4X!v%2@+aYs41zLKq3gal9zZ~z=Gs^t}A)T-_q2~1;9bsSMu82
z&9`BsBe!8!@*exOHJGA%3mvBQ%~uBHtMQATw0+?rUG>z0A(|DB(X4&*rIUe#QGN5}
zE*K<?>YFbjJHkS<_RUWZ$`{Q_45S2LM8AA_KSQ$k{fz$k@_xouCeQ}ttG8tN{fw(z
zbj!ee+|QunLJMA~4arwVut|^T4?Kilj-lj;LtI125r^c<{)ZNzhvdut2MI%m<d==O
zYN&I&VJK_=s2;v~m}?q;qEde7b(khClT27PoGjzJQH#nLYY%%A+tI4A`HCiciX3`u
zzApS5LL`+RDx?TqQGFq8dVbC)_CJ2Df8Z&co{uAzugTGU@Ct2dzOv4K@VENG+*<q;
z+bui*-qL(i;DH3*Qo^Hj5lGZ*X?}PeYDO+djBONLzn8Bz=AJ>EdLE=L%NJoY7Xk~o
z%kxEW?Xb{wEAkQe)RIq0O@OV;7eS`O!c4g;A5+>jQs|A<`676Cq|jPx2<#du1lRB9
zt0h-i7=(add#$Z}Tn5z-^3}(!(KMC$sB1T}+n&_N-oG(l9#MfwTxvfWA0UCVF&{@%
zlEiS?m>=Sy3_XQk(uA=wzp$l6Hw1h%yKQDScGPcuW^=ycpiohp^9#g;2pNEG&c}o(
zKq>vOIX`y0Y-w@|MBtnA;~n^bgS<1~Hs`l%Z}q1R&kJcg^K(wvTRQ6fJmov{`O#0V
znulp+SH7}0U&Z>agA_+2#A2^@((iBaMZVgamm?m*+THo;!)Q1|3gakaPrf?eV_k>p
z<k6&ZfL-dO-|*Cde0e+oCaQBFKPb{*AW@wI`SMN?NL1%Qeq78{MDpq!$WPqPt0Os-
z#yODR{x++UmjlFutlv|5lcx{nE8^rUkN3sF{IJNCfkZh6X_la71Br4D=BMu#)!}`C
zW;>W)c9$%NdWWZr4(9*zSJo`rbmvk39JOOl>vKHSN1ag*E}ZIUzRbviggHm^3q^t&
zBnm#7kMj@2Lx2EvoOwFyJ#RhkBGB@4+?h8Z1BB!G@&X!2(#c1dIzEWb%MWR96y*F^
zV87p4A8Rytqd+bS`RKjT1<LpW)tW>re!lEJ;;|kt=o9Z6Q=m5E^%aj$nXv`xy}bJb
z2i-TWKpo&g8|6Yjq%9~=76Y%B<=|nWCZ7GL7j=)f<-!7NooIw}b&7x%6<|6ge-Io1
zzFVO7^;n<MpvfnPc#lo&uGd$;S0E=%FwuPP70BiTiORoMP$<?Ikf{871&D0vXfdDK
zb_JXLvfirQiULJUKVTBKKrYuHp|YX?%Qba1NObjzg4CVDQm3m|u(DV5!oZ4xJAPq}
zq!X}w>fL(#_E+?Xw`09)9`$a0flQP`2xZk56p1@AAW>F*0q(?zvS>8c7hL}+pG@!+
zPDD#jeZdWnSeI$7%O{0h_R@doJv>kDa!a8z<Xr{w0uY2y%B})=0SF{172vE+l#+{5
zb`>PWtvEcDrR*vwxzqYRF9eg}UiRj{^o||(x@FKQ+uj11lg#G{ro9C+CkYZ|>@7e}
zQj~${1Z2ZUWKAeGp_=S1xb9(V6vYhrwAdZBANgNBn%m*1TMC`T9d)~tGEzs~?xa-j
zQR>e96jfq@3aRG{lzZZzdfD8bdQ$7!x%<mqUtn8%>akFlKmL*KCOX#?yS!jAPcQw}
z0%CS^*cQ95mwr<u{Xo|)Pj`9Y*?&C$BJKm<{ELU~xZ__I8`n$E*vtFq^`4F>MXb^&
z6NaBJkl_SKSa`lbjy906@O%MAn`j5hE1xeYxm&ga<&~)&&KIQa;@6EZ`6H+=V8{CD
zkF~wz7D74XOKu^QL%viXLjmZZkV^#!1*XxZ09@4@;>R86+WvYr*FVIM82*3JIt4Ud
zUS|sj={+i6_sg{xOhCQvm)S&+fO_4JY$9Kn3dld-U>yhRV=LZpb!ddV;Wx$H2pQ<S
z;m552Y%)*`>NA=(d`)j#J=!l@2~1RAv|oB8NFa>%2gP|2NFa>%BNC+B3k5`tWs_gi
zTUL*C5olH$>mu+N#4mjsDx~9wPq*U;@Yo3~I7Gj#W`c`A%i{zWf#T^2{-6lU3%JKl
z@ME0sqLEcV2ET2;K16@q)Anr_gN`2F_RHRe5HQ~M%gq5uSn)R1V=NsJ`9s<&f6nXn
z^~3ZrYJ*kO5i}M0F%_=!D;xbPUF6Y0i<Oah_O~PTuAbWUek9pwDiqJqq96K^v~W2n
zXM<mT@+#gYzw!z2f({&JR>``mL!I`KAMuOJ0q)0sM1U>_xSRcIUafTl+Q3g9vz2}Q
zhJNGITm6biY=a4)t$x3VAV5NAt6xSCAmQO#{W5|ek}tVi{W5}(99nX>`Vm3&q{jA>
zJM6Ik@+MNhPwjC03|wOSO%b|)L`ggRG5`XJl6Lq*|KekbNU`79;V*pXS{7G&<e#)l
zMnS0ZF1C~DHI=*Ea;W%Sewprv3{-ack?tQajKjLK-)=uzPkCzhJD%WI$RGDRo&XXU
z`~7ko0TLMd{Rj{WuxfxbfZ<Q$LL7yPL<?j0`^)}-5aB9|it;}-$Yb@Vkl9bk{F8p=
z`uKS*eMh(MUD(@;jI8Y$t3Q!j4ZfIyAO%xSI*ttzrkwN##i9ZdrkwO+QK22HpZxj^
z8$AI#)-x^wx%C+rf!z9xKPV2zpaO(5ejJXCp%ZOCrdjQ>Um0jOnWz^lwfN~6LUZ9|
zw@qj+yzGn)r~&3OjSh<IK_afd>`x2~h`62@Jg&dumvKFDL|oq^Ao7x2OT_g(0-3hF
zF>9q5dbUTP-Q%)>xhBf%8IZBKltP2{3}kpd)&YafJp=8YxK<JCNUxt2iFvtKAj7kS
zjw1Z8SD;<(e`z9X-a8<71hPmZ&HMb!3M9?@1Tw$6wn!w+`vydw-oZ!Gyl<fVzlucC
zyl<eL*bqzjHprUyyB1&UIQj>!X+_~|0|M$3j!&aH!|cmb;L~k~1+MlVZiA@90`h*T
zpI<Z?7DzabM9a*u032xqHmzRFVq*e16Ya;}(t}E1Ou!qoK0sXN<p<zn*+1Ua*Qdq?
z<cSHG=%29x42VB)8F<Dx_T+T^snT%)nZLv#He|+;%w7Qmay&aQUEiM?ACPHQ98(jQ
zgs{m$VX$ce+cQJIH9f%vqO{ipk~u?`!p~*~a9#7}cl54`e`WxuL3B5g9|O)}%V+6-
zD4i9MS4P2v?yLZu{T(ubANI{=H_z5*mCg>xG$5D|noUAIgb>I%EO(CHtIeE%!iNns
z$<jF_lm{b_SeqZnSr+hEJ}cKtr?2w^$fb5c89W=dfUTON|2efFAXBJdLVZC1=h$?2
zm1nyav0u*B?=D^BGzOTESrkBc(VOhx39UM|aIW6Bv@ReIwZMc>T>yt#Ukf2L*?a8K
zdHOfy?>YU0tQ3UaqbA!yN2j>xaUhVhC+LZ<v7el;zvC(TW0&W;ckbFP-KBds3$ILd
z@ATY@&!(UH8@v3lQDj!8Z|m~ha|oE&9~SCgE4@uNyh^*@9<@ks>1pyz=ck|R)U|V(
zza&BtSl7;fdAV~ppryNXOLu;udzbFdb$$k~S*1HY{dDJU-B{UT{fUq$k4J2>G<)n~
zy_v^}={~R1%WCh(3tZ{vJ9YhY=k7PByS@BWx2L;yd5PZLO25?g#aFsKLk2(J<%RCo
zywxRM=jxXJYnSeSlCfZ=mA>NznDbKCF5NocoW8UDz3Fa$gMH8c|CPJGSomD$3Y5|1
z6__vHeyOzBnI(FU!UF+Z6J1ZUWdMt)b~vCMwfoun?Mf|vinIqFzzGfqO!0aQNc79$
zK!Kl6k09Z;hXaA5a(W~NhA|TJ0kxV>9Fl{6I}*rNT+0H`kwDcg)|o<X0D^(xLFLV$
z8b4S_m&;Q2v&-~P%~~)WQ)s0f9+VlF0AFc`2W18ZBup6|48Iu^SIUS%rf4IA>Kj3E
zrA+cr@<`mr;Y*ri;Y!)4AYCb=1vo&yI3}pv5wA$Ix^;T%r$C5}7aqZgF~NWcEI<Nm
zOi%_EATiyJ3Ch5NNFG>>3Ch4iawxDE6GUL~3tk!^Cb0X~>%Xd<5R|iAfUn#Wf-;5!
ziDD-NWef+Bbb?r=mIgTlR*dyQ>?vjj$xFyrpNG#n{hhx3|LxsRcX~m(bS1Xy=||xD
zcf9)apE|wpZ0Gbf!|Cd1!U*Wvx!a2`cf}}xS9gE<PZ&}EwLPf>NEeJhj2jwAonQFl
zixB4aJl~m+yL5X#4PN@G7vbG7Q#y6}q3CVxJES||ZAZNN_(FvkGI#-!Jzu96+rQeV
zf2?;zEyX$>-~q*Yw}mL6SRa&o8azb{tq;mQ4M=p%`k>s?5GnRF>x0<S92P?WOKiQ}
zb*uhAN=?063hnLcgK`HM;IVXlFe)+~AW=$v5Sb3T{S~0C-S(ikP6C2c@;V7f*tb0>
zuakg;=Jud-og_e8s@*|;oumT@^yhBZ2HIHdc56x-tKC6)p9I1{+8xAwl6x?NBYnO<
zh$Fpe+x5Hs`-Aen19H&F9<j^Yain)3C{IMegr6S>VoP>A=4Ir4@rD??Ylr@e)K@`y
z6bB|`z9LT(GN8U@^GN3Fpj<YQ)+KHb)AC&$2ljl!LOb<)Qr`sSiirFxWWJ&PfX|~W
zRPa0Y&z<_OQr`vT5hIw8`7Vf^vcN&DkFbNlNgoNyl@B$9%#k2=K+_AM5XATn<!rL=
z`&@t9^p6N3t#>ziB1rWe#gwn~dn-nT<OBjHYB(xnip>;A7&<BhsNZrGJY?*jU+GU&
zGFOG>92PP~>MqFV92P?AZa7vc6a!<%G4DZrWc9d^bWAW|__&Z9x*!2DE+icjBuX6@
zLPI>n5kO63+YjoGR89<u1_dmQ_KBe+f2V>-5(?oB0$RvHqw%J)$G+Bk)l79urTBVk
zNN!#s1Bj_1c_kSnAf|@ks6%MG5F``du_K3czo+IM7lR_~cU%mLu-^#<MOFzqz<4Kw
zwVvOE4U)Idvpao*Yf07fTnuvic_H~~0EB=sFI3)y=N3Q$V_v9vOFq#C$?F%gW#8&G
z6$?W$r3@xi7KUU>86;E|hOndR&Mn74u4Coj>917Qx!pvU&Fb84qRVD=)J^Y+21CHR
zjBWf*UtY7!HI(j}EpxkxqMc<SdC4}&ul+8g2IE(DF&2?nXKN1YGiz465OmjUwF^Oa
z%~rcTO?S;!hY}@xatP90v$Y{UIj}WHbggP_NX`v-1jV%>IX8fW;@XfiHw5Xb*~XB#
zYIgi6u9|IhEugDr8(j<Ns@cYnoEo4App79+4gA6p4n1~+@FGUDW4Le>+7a^l`5Qqv
zU%=&skdk7l=Z*UsfCLC=@p=+SIQdQ*CUleB%Z~xRV8{Qh&o2EUBv1aqgwPk%;(LS;
z$bD?-aeZIuzL3aILz9Nfz7TRS*kTeAtoxEJKA{gued!|6MDZmdQRwU=Uq8q?p44wG
zI~bBNIGB(*7{aQ17P);da{I?aIhR8A>XZ5zPvCe6uR488B_MT9NBV0|>xa`PLW+2o
z3QTC92qEn^T?nDNr$g+cGy075>5!ZpkuHbS=@2HztwIXqxey!vgI<5#xsZ&1k?Q7b
zjERqh6smMFq?E>2c+wr%^Ov*+Y~ERYavD5wj{>P}Xj}|ok~>4kouQC6zA)!4`-OA*
zX+1E$5bu|~1tc{@rcYuoUDn^ee^Q~G!N7#AlM3Z!H;^c9QXww8QQ{6H#>S+=qINvY
zA`$@*N}E(zd@FxtC`41yRMx4$XxS3K;W|@YXqxG!7RqbycnavLg{b}qF_>A1<C8+%
zRoik!Uz-=$S!krJjbvsanYo)y&NDuGba$b+=tfLn?Ji7<6fsC(?JmUOJ(&p-X6`O*
z{18v+5XoPn-d$MnAWruQ6WaR<@#6Mf>0hxa7rjZgC*Np&KUg9XgaDV2%>WYk`<!L~
z3H*IdGY~17VV~0sh16+ZQZwAr;!78liv7}Q0LTFJOKN}tbbb^LX@?7Qjum?17Zld>
z_ePQZU4ijuPwnACBZIAzs)ng0j=*YONl<8Akiue+06*e%97up4aV!Q2i;p-K6Dce{
zLKX{fs2?p<+DUNgI*^8S54C8Rx5v>!nHvHL^rMBy4auiKKUx^QmAeI=O7x?JMQyF)
z^iEnNq@60v>CH-l#=pa-3XKL<4+@DQsFHS}Q2DXYPKAuio?84C!55xjmcLNw6RC5M
zu<t@)L(#(^VZen#yxvDi6p#qbFBCTUu~3{(69eHFR4x{Zi)dU%L}Zr=ap~_7UOEJ>
z6e{ufFVYY3%@`XOHtwnbOEhYPSNlq#T%19o)GLLUImnA5)X6<rC}KQb+cSJsg*v%s
zScU+QflALX<~C~O2vNPlVr&zIRtD*mMvHQ<uzWKOPq{GG@p>PcFp6;;&Y2tb#Mk=L
z?Vm+d+aCMGm%4X);pxt-hhZ4@nTYYOH!wbop+omJ)u<TZOA^K#6_cD&z(gsN!qT-t
zqLfKtjPPG`6+E2EUQHUmt(@wr@R1vq%@7qMH;iWBcY34L4%69{q%o;-x~oI&Fx_bf
z$e@_%)DCkfJctrG$KG6GRC-#>ah0eA<~S_?A(9HC1vb+NDGF(I;hb;L0@D>%-&QNM
z+m{;edV+OfBQ9QQFQOW+2=kZP+2k@qYqi3`#v@>_2+I^dNMNrBBgOw6d14XF)i#8c
zO<^^@Q)NAto443S8Ka?63#RBFhyY=OV;x8!Y#{5%2SLIIH-t+zg+(Hd7_>c9H-_a-
zRdUc;8^dy^Dp>&97{*SOG7~_8#Fj8-r|q8fL#)?7wJ7_n+}LnGcw&<b30SfvEWaTE
z5&&DMLufdH#Bkgamfw&dl23nI!uW>7WIA&#BKe*6;ReQ3Psg2MIpn~_klPuSc`uMC
zWM?=bb|N52DU5hU6hh}^JHrh`k{M6sfZG{v_@K3t`nZTz*1h(T>x^4HHGADs_=#EA
zC$8;72&L=|XKt3T6h`h1*R<s!O%X+r2f`wxslCC_st$x@NP|aEJP?*44M->+2s<H7
z5yg(*gvA>!AYjTjt_hT&{U$8qXFLVcH(?pmfCSPvVZ=1Qh0_&>v?Jl1bFiV2@$0~m
zFqTgq;1-js9k+jTqv7{Fa6BwSOK^d8JS;;?kia?~mdSdMXtd+u&`o?{B9iya@o-^l
z>w9XmV(QqlVcTwOJn!jn*0C6DROhVIH6Xc|eB~V^N;w<GY&e%TKCzJ2CzA6{#1o(B
zWiQRu!uCHZjgd;QPXt&0CzFfC$oT#dK2BPIKy&nuNH+%w@ct1wP(T8_e*^;s%M_{N
z=}`N4Q)7^)VyLS`77dNa#T`OW8X7@w&_o*}j~>q6Zf-nQGdv>Q4NTN&ctpOq1ri9u
zBV}Ss0ul(rBRAY=%@oCg9An?q!kF!;8RKG*%Z`c2J7zKNvST6van22rlp-ai))rA~
zc)>)LZe?t(ndm~0KTdSbAb*?~k?)Vi__k(Zq}5H_A7kW?QzByj4FZ}|BGMs2LUT$)
zIwVLGK82d#vM3zFGa}p}e;MNrIm5Mq9CAiPIwYO~X+}gkBuF65h`=GAK<~yw+U!Wq
zDfI5W?5j$nh;6&cxYa*9f|s7@-QqZP?OayY#%NYC*XbTGfjBoJ*Kd$OoEyRVP49Wf
zspS{29&L<UDi^pa)T0X`rg*g#GEi9%!O<cmgrS2jUCfTOF=kaPc6A78aYP=8LIygE
zBM8TFe-kR8Y_{fRqjin#R2@uI-FB)D5(sugZjwNfP6U(AXQEW};0o5_7GrzGiio_3
z73WjPiij>IN08825kUr#?*GK8%T}|N)yAzgtKCv*AG+EtmAY<qM7~W46(FpRAbvk7
zN=4VLV+*T|(>3c{2-=3Ob6hXZ`)pk#AR<zbfLIr4)Yv*DAg~YJ#J;RC&eUvjA?ToC
zQ^e;qF>OmXMa1{AU^s0{H%0Kl0Y06^X;%N#4%~|A^odVh40<W*(}<k3Aq0$1BMJTi
z0btNR_0vd;R(y5^Nf?pVchN@(=&5*o)1A_Fu#5eS&1z>ftNF|=z(fI`MdT}*afNoV
zpGD*=njlfYXA!&wJeY=QoOZEa*s=D;5Kr|NE(UF5zi^wIwy|GC<QIFO1B@>s*WF;<
z#38Va-OCQ%X53t{HzIF1#rXzyZ$xGrKtg3N`GxQ->|YPCJ3APy+a7QWrT0@0MCALa
zafNoS2O_27#ZZtyI6wotp5Aed)BC9>BlfBe#zSh`lP(CopnB46UV1_GWF#TJ00Sj}
zoQyQM&YELjXeL5huV~H~`@UZpH>!obqF5`&Q12%&Cbhm%We|Jq9%FPZeu;<ze8BaM
z%9o`;0<LcqFH2EG0TK~K-)P~Ws7N>ygCYv8UsN3!6$xj_gI@orOgKvx63zpnlyLrl
z;+q7G%u!J!a2MNe-D|W{YC$+w&`2K@l?Tj_1lp*mT(dyJXGTRs;#L=tJgONLEfiN}
zBnQ*MsAw~hl9wzF)Amklyl4YRjE>^P)gd0r0kfwbFh<pYA>#c6Ukye_<&_|iuxWI(
zNMwdU0&H{?yWpm1=VVA5AI+J<nm=eX@sE!hdHjM-60Pi=$htmgbgZ4|R1Qo4O^nK%
zK1cvfj3TE`Q4B~_ZelcC%XcnBqH^f*iP4C-q$62e>9PN{iqVuwGHp^+!DoQdcRqZ7
zx<#|5twkm91b&W3jYP|W=Av@i1qqx<Q911<F@<_3v%f!N+)_K)X$LR?F*z!i0+2wM
z9F+&^Ab~JBibN<KsDs3T`sAo{piZ=~e{xhFs7n?O)F(&jK>brnXW+Km>}bx#D2}yq
zk-2}Ni{0X3W1S~3JBrgwhTih>TV->Y@u)GTbWT*JVZlTn&Y{vz3nADxm#ul!_#rhn
zDlhiqY8Zs(Mlm#R<UpY2vCkeeDpK>J^3p!;a1l3(7yrw+3@SCBmHgVsmd=mL^ayTX
zL1umw+he*M0gEv8FR(lQ+Q55p3!(}?jU_Im7DRCxI~?;5Xtdr^yXS9=k)E2RQTZ(v
za3QrcD!;`75(O@e%5Sj{iHa<Z;#(}YaSS-Xd+fo-joVZ2MP*J0SC|0tUKDFWhRa|+
zU&h{j+$b+y7L~ag+(3fNGV;>za1jf}z`54j=N>nXD5>=>5`C^^Jt1}ALYQ<vWIz4h
zxFhvpR3295D<)(<jN-8JZ(Ihm>IU|QCyjrUZom*C-vzn_nGI1)KA&KOgT}mBZ(n@U
zxL;{o?@IX~RZmhvi6+kaD87wIpP_*cRlPoX!_C%Y0fL!yx81*!kx^2+-B!*6$nI#v
z>-oDSxJ8Q($gvGi8|_kiqVoGVU_xe36feHg`zQGdc0PMqgJ&SK*Ttb^(O$x#_hInu
zL8MVw?`MqrQv0IvWeqSPvoDI3lhSjz;))w2?8Gz1t*QMk4&8s>PdG?%Lk6$H9bor#
zHXbQG;Nk=!bAWI*;bt9#@N(QSdv#~y?%edTsQj7`xR5#)MVKiY5%0^LjoOX6822gV
zXWdpTgxFbXMT#T=hIi;LM3pA-)vV$btAcI%voSFZMkCqEVTfOdR#aL2=-W@2vM)z-
z`m_Ge8GQqnqd0hf6d?R2+Lb7M`{}XN6{qXLh3*yVdU`d9Up?!=UVq-GO7$p`?|Fg=
znI1)W&ojYgK=ow%o;ONTJ&WYI3T~4Tw+QDd<y;2+-isB#U^GniDw3%}+!upPuOg%h
zapMeSVTko+zk9)Gnd)66of=HY^e%!^<6baiFu?k-`7anvQhi(;8ee?~N0fyD)R+B4
zW%VtRS>6IZfch381Axz*00#r8A8Y@j(KOw!NV+|k!0A_ny6?cPTtvazoT8ki_J|ja
z?S_9&krAaARy6*Bsd?<>SB<+W=M`yuDkmm%=M{yor!F886`ohr{8!c*Obnpm=XLhK
zUp3ZxD(Z?fp1C3}l<JD2{DpTSp;TAY`aXL3A0!^yZ13NVJFDy>jUUJolek3@-ql1x
z#V%@jxAiUtBqj-MRZ-4L`;mVb%{+lsMfm#C`vt(_?*s3%-~6Z1L2t3INaL5ehzqcN
zMFsrDTOt9ruLz^DPgAZ0qgNCw55~_nVLcwS!gg67<GJFyRus#Rm|}H+{)%Gxu~d-I
zUs2rZe!6R+mV~s`#W`n+`CSXO1X!z!jilHCme4j~Z86^gHV1)TU0W;z0+5hhTP$~g
zAc4BJ7&}1B)@lj0<U02D1S8vYovT7C-MV6#Re}su))gbGG>fjamY~hF`eJ3fePM!e
zLvAg8iWL(N;4AgT^6PjY0aITb6FCQvfT=IWT0#L4NCZUn#SOL>i!>iGM4IojVwvWX
zEVRnDVx;-r!K4N~pzJTk_gluO>D%vk;30d;6r)sW3YJ)>A%J4{yVldLV?S9xoi^nq
z7#G^1V&#Z^>Mf&zrxrgQJ=!cDDwgXz<e+z`80)(*mtICXR2)45bLkV3c+O)d?VDot
zaIuKrBoBJu7R&fevJk(0SL}R3vV?}+_r>B9lILF6A}zr|%Yh}{SpW%BzAu)$PmqB8
zzS!A)mQXXFE*9w!5E$sE-9Dh*=jmb@a^NYDP8ZAFCrBWjF2?SY-{wpq{EX!swUaXp
z+~({TgM-s;&J^xJ4UQ?pVyaa~w>eYtHYf4y-Ls7rp4P9$<i&RJ3|%xNhIggt)}`Q}
zoS`wiVYQDMJw-9|n=xgaeaBqmcb;1O6pfAtu<y;7jOai@@6DLJr2!I+{$?yZE+!hC
z7(8fZF?DQAG`i$LZ*)vHx@4iz$Hb`7FA5tl15Jr3Gh(Wpo^SlsQwzeef*gKIOa{#<
z?(kD$2%4$uLBfhDvCxdGR*0}!n;KK6U$w%?lfM<y0z3dEJs1naro}L?(IrXALifEL
z)AAZo^Z_0kZzjtuG|Fpd#^g`}6Wus7Cc6<N44fI0x1&J<b!H6V6a~H@5u416mE9u?
z;ejKU$lPs}@G?Nnjw!#2`_mm>#1#r$_Tbk(#K27{x$vRcvEN-So%Zpw-O_19&5p?r
zV?mmu$;<X2QTpsy@|Uu7eh-vOl>EYq^U{HiEXE=u`Q%);hI9fwHzrS@Q+(e)Hx?8(
z_(1|;ZVb_>s3Bd*m>WyqF3X^?M>fulm36RM^D;oqXX6$bZ92|(%b?7_e76i5R`X->
z7HNtPtNAg6o1zR{s>9RkomTY9GUmr_xSOBXp`p=p@3Q9a8lOD*u3HF=xOd&gq7nCQ
zOpZ9Hpd#<aunLMo=(ha3vFv@aBK!lhT%!D5E5$2<wX}{sx!6cQS?88PcRK3aGAOxF
z7n7fdN%7=DT@0(bC<C9%!qbdX5&p3(lu;MU-c4`wq8<>yTDaJ#tg+oPDEVN=Wby$r
zD8r5=98k(G*f9jUix4yc0+H@=_RBhB@srD42s$KR?wU#Ih2^o3xNHd(KrD|T&=Y2w
zuwr=(?|q1&Van06Jl5!8e%_y={KG2t+a*R#hgEJF7R+1~lPL_ypo~?q25lrLr5{$s
zs@qzt>Gg>e#nB(dlt085cv<`1T8Vvbi7`>>2$tje^ck0rVluG+dBA-XlOMhU3Am49
zmEt}ENSORltZ7GSvJWOx%=uBQ*^|~`S{ze!`o7CP^PcfPxgB@8rBM1}S4?h*A%s$P
z#pK7NK%$ggG0g9xVe(MQu2|*)SxTNPWmhbFzqMV=WeD02*eg~Vk9qDt;Fd!9jRP^C
z*k`8{%5NNqr9}D&BuY6Dlj$RnDCIz`^;2Tf1}R=7W1UtTg@FUHCp+>iX^LY1gE5h{
zpSar4S{#hYWeSf_z`>YYra+>AgH(+@!bt20j>MGm_-34ewl-SX1#65l&u_tU+TIU$
zIpVqteW~k+J96ktT}NVAt0?{{4Qb!Uaz?~O{8I|a?_<c4@(g$>#Xl!vJpO430;ngP
zxg8{APsC*W0}`kwVu*jfrEsE@Cf4&Y`!{QiXO*h+F`4=YoAV9v$v%+KIv*<xTl*<9
zR!VdBm6&~eopHcZdBxQtv@5ZzS~N{xA+5JWSs(}4mp(KaC^Z9+DdXK;%9Ex8;&Q47
z35)^pkVt!jB&9f_ak?{BN>TmbxX4+9Kz|R8%kBUP&B1Zm9U!4OIPOFZrL>|9kMpSE
zNe}=U?%F^T<#5*qnka|I<s1fKAPtYpo=AtZQSqGjWKX0aIVz4*O5PJ`>IufSZZpQS
zNgo?p1w&qvR})Vl$>OpfKmwD+WgMEOh8x2^`xtTP7*~ZlVN6`cp^$;fm^dQ2OXOc^
zibE&GmACDNn~lGFYVlLFC?23TlbqUs1k9wkT)sd8W>Or>7p?9fvAR!+C*O|e@<b{z
zATT+uM)>$6T8#23aRj0C`FhF13pF@jjmy`g+g#;B`>i-WzVTn8=&5OO^$`(-reT6M
zJFYB<tMNA!y1!b%wia1`XIHiuf2+j<r_K1n8<!y|v;aLjE<;j~uzYqrx&W3_NJ<PI
z9nFcW^W!2ql04|mjmzjrvJf53i&Jz&pR9#0!s5EPvNW!;|9om}uf=btHOb5B;&SeS
zAX>97UL;}<kif2s%cveCY^sYlSPGkHS|^5x>X*c2R4-X*JDVDG6J04N!%i!nvnB3{
zFZ1B|zT1oJu6kotXjL4qZr%^`$|!(b6Ia%=_-Dp_wfH4k2z*$xCNASgkg#S=T*i+e
zVa=L&c)e^PV(=DvKd!EmEhKr+TkEutWTAyV;4OqZh_Hapl;g@L=rZ=*XU1){ARHse
zPdCJ6_y|dWZHUY85hRS*5D$HF)d(3rZj7s&uNvWmkDKB$d?Y;)K7JIJ;iF`sJ3fwU
z$j#8am<efH<2gI!Xw1Nnt#PANjK&O&#%(kjr&erptOXN7+nj+264q{`fk^L1WoWGI
zV3W2RH{Q7erxtwdf=S#sf7#1RGEmt;txOhVL)xx*&Jk%r7LvQ-&di)83-*ZlVEzuw
z2YVbd@C1^395X-ybB{A0WXX(u?BEU~+iIVyLT2o9<^#w;WgpE4d}o)X`QYoga`^u;
zsJhkSDJBIx7JUX1SYJCs3nZ|<c7_&6^x4<(=waDs#Ndu|D6W1d`%Lnn_l@H?k_E^4
zmOBnLPkBf?7SBnZlI>HDVvk*&FUzTYj<b`W8&fNfJGOxdq2o@|fJ7O`scGn&vgKs>
z$v9iH%V<({5@%Dqi@@b<UA)l-5;`a2IDMcbvDzS{{TR;~WtV<oZ1DtsjN|N>4htJl
z@t5Q5r`^WQm6shXaDjC>E<c6<5?Gh1yT{PH+kgz{V|U(TBs|r95^|aV7k=3%A#ZYm
zB&me_$TLV_^hw|&&orDH(E8b*t=MZkSl!=6pdRX<kP9JXfY3i77ebIg=%2tscq>N$
zHHh80&uCvg$VH$%!5|lbrq4kMc@o%wPoIMl2w`a{Z9q%u5cbtEBheDSVf>JUTuDJf
zaY#b0q##k)kc6|6HXu7kCiqIq{09uJ?MT-GT1ZE_7SKXEG9edIC<16?0t@MDbPK3q
zNSm9;Ibc70z!>Ze&P`yl<Ev;x>Xrow9?!G}0muaj>9`;Pxga6eQILRKkbraSrOs)H
zM$_zs@}B+vH^vj5TKp6aj|b4R6Y@e5Na)!KdEo^l9Ntcpyq6FcUWh>suP#l<3onv`
zj$4|L7hWU_KuZ(2@PaHC%7?&;1pdPzn|`EgCpPXoqfs-^juF(SD-!Y?8p6<Bk-$>i
zk?Vq5jZTO^$WF8|5-fDsXkP(_qfFhoIw23F8}ja4oxp)Ky<yvsx^pe-aoA{Cu{I$m
zE-<08HX(0tfJ6yv6PTIt$t0+tVb`;RhmD(>u20C@)L=qoeIhCDs)2;c`UDPc=TPL=
z5L-a)lZ5h_efJUEUZ}-S$2!{geUgxCHRPc8NkXpGAkn^`B%+_8eQB*G2A@#2B-HwZ
zSgR!udY>lbS}j?aP_`y$t)^G}8&bA)M?xu!H%zmaj~Pv>L5Q^)kKo5U67u~6kg#b-
zA}U_h1_|sP38W2Z05qgs;4T^fWtF=e*9Q|SyByaC36)(}UB4l1`}WUh^1b1y+3%K0
z+rIsd(?bRj`yHnT35fmV^!Fltju(gzCUU-I&;Q%F$A2(^*Tpi(AmbHUOuua7zm4+L
z*9n>R1{2Qobply$<SHQp*h9=ZZe&x35;E%zCS(rLv_RQv{xa-0?C#@6!}K?@PQ--F
zH{|P&W7J(2(vBo@PAAy#<Hm3NM-oPiPKwm)$b@6;{Bh&<>SIpTz(m!KIaLD*8;&L9
zM{Yr)YR3{t-P6o`9T|9>y?VlET65e*pn36l!YA%?L5749aS=X&1j6wI!l&Cg0t`Ks
zVBelF?x;ECLXe}LO2~^b*YSz*R3ad9BOn2Bij24mwYxr~olWF0_NSA^ox!u@`I{-e
zyPj%yA;H$3G(M@h;2?tw<O@#qK*G2S&Xfxh$QP(>U*-^a_)~&yK4rX8^OFlf$D}{G
z5LCaP5;EAnp4aau8sYpE^y{f7`r5UpjmJF|eUoySf(xa-N%RD5fI*_%zDb-ewCCl5
z8o;z4j1JWUlG4+!7rUmUY!i?`7?2EzEi_2dNn)zMmm|=wiS_-#xW9U^i$Dpe!7c(#
z6@y&_zI!4Byj=p5AUl)=&Kmc$8|orZ)^=#pCx#bffG{*!a=okt%^X9MH#WAu5IumI
zV`Nf!lZ`)X?5f2tF=nslUt1WNl*=ASpo~mP7Xt~DkxBF}?N&fy9vPV|e={lKYhs8f
zaa2;i94lEc?TsW}j=dXBaYINOo6MP#^u%k@k9O<yZ0Gju%sE^%8k@u$Ffr8c26B(_
zto?tCM8)`|oYKIADdUrJsR0R7#wW4V;GhaBcsP*_{EtymJ<+KQm}sbpPGvxnP*QpW
zNFYp1!W%H?fdFTi%nts?C~rI2MWCjh>>^Mxlan&@2^AnrPGSoClJ*UaLfW)s&I)$>
zdE-EETGF`^*NCb!E6Ep7_UQ#ftDNOj3XcFd%c&Gd0M4RHjiULz5f!({&b?^7>8V`g
zDp5TaCFM>OLQq<iMC3^mX(OsfT~chyL7?U9k}{M43C+5s3?)E9vo7g`5{-ylo|K`)
zPY5NJI}L$HXo%%bLx2R(@}vwUKyppYs{M5|#En>8lK3-+hkr8q<pw`V;?vzcl(>;v
zVykG0HXs1G)u|OoKyG!K0wf@}Qd10|P~t|id}k6@S1<hk{t*rTgs}X6h=~hZP~uwh
zHY-SA?o7(ttRS)G>`cnrtVHrVlRJ~R&AO6C$&J*Odsr~nT-|Yx(-dIB?mbRZfJ7O4
zlJfONkSJqM63Yb59w1T1o}~OsG$O_JeNPg9iG~a8R0tHlVpXbnvid8x5W0T&RZ?DI
zgbWJ#Dk=XF4J7F#@sDUYO#}jFltb(ZuX$(9As2z7$U{k)e}fDV4kc6kKV(P+2#1om
zx9}Nx+Kp7F6ZThLbGxVQ2^WI`$P;c=X-+wjl((y(1B??%+_k`;_7DaNJfF1B=;mrq
z+w(36rKHchAT*_%cSa$U0CJv2p==Gr6PJ_hq-mb0x$I(4C~-L{ulC-^Ly61DjL3w7
z1jglL^A>yr+(=E{vqX#l5YX&dB1Zs7l-{#MjsTF*>{;TBfEy{I=wHG|z%M|cUHg~F
zsSzaV(Z57ajUa*4zeElJkU;8Rf+27xMnGenS(W5`QsRlT_f0L#R^^#Z3kR3rHhFLI
z=EfKZ+Uq6C8@7^fDxO;W6!R}0ppe&{LO`OB*GuFj9gryG^%5LJ(EJM$^Y7~=={HJp
ztuQ`{L=3nWeV}G|i8`vp%d<XLxzHU^f><t$tkG2_qPda&5(?*T=7yoX(QHJ4SzSHa
zHHxB!(Is+uYs^R0=o0w>Cy)RhU4jMj366lfN8^~~H-BF{&P5>q8s}Dv#>}`9xvVti
zV`f|lmKC~t1QK_T#+8&06Cd*+8mkIS7+2EZ8UE(8WZ~}7xRO5(_0V+}sKJbhB}%h+
zOMG3Z^B+5RW#9VEHq~G`ZA)WnVu=iXAP*xZmc%RgNCnCDn>6KLxM@sdY6^QIVBXel
zii<$2^c1%tXiQBhk?TBEfH0*5t2DiK1%vQq*Xbq7Y_>08ep-uPjvX|rrn`+nqiTAI
z{LDMFfHJ)VF}~<y`ntmOl18(y_Awm=@jjkWqRzV7$C3-(cicXfO!V>00Po{o!Z5VM
ze0EF7>{C78wTg!6eAg-(rt=;5Zp?@2{1TiT(bd<+6!kA+mqO;P)r(vN8l;Qd)}eTR
zQAt1?06+z{Eh@pe(9;|NgLDadrO@nLv&2Q9!MdbGZrdC4!MdcRT$~wz1j3RM{AbmA
znr|A@U|nk$hs_P1nzb$l-6~z{V$d*MTOwcLgbpy)mf$7Mo|FY|Os6`V?PS!<RoZTL
zG3Zw5<`Q`v2q9o>E|Fg{0tt-GCCQXEHjYgMKIPCql{3WteX$wK5A{!ZO*+@|;_Cs3
z`cg`f_)0BEfPm)z1VT@-whTyN)y{HZJRHdC8<-7J191dHE(sahP7F+84Q$9|Kn-Hy
zhUWFDK`HT4KV)c)8k9ml<UTF~(+0E08=4O^7>rXDi9?rh2B)yo6gY70*HTI(Q=IO^
z9{7zGY0MoHSme)m!p|9qgxYH<oEUsVUt6jOY12|U%k98*<{{NTErn=}_PP~R&*?0;
zvDvcqbR5+2(F7)-rl(}I1`>8nr<%~Fv4V#G%#;$urm@4zU0-2=#%2-g*Vv3yfa@U8
z+C9@npjl=nA<$<IDyY_T*v7_YO~o8ng>dJ%Dl{X^Ar;&kg9@nmtXYNGu42BcLX*IJ
zSA`~l`J_T_UO|(<A~vbQytQJHt3s``C}oP#3>l~_O63<=uW%K3&JyOUG+(V;;;PUP
zUy_o^f(kywm!yy^7(wH)f)>tYY+<E2s>w1}hX&xXl#KEqgJPDEzf7{w8I>VzODgB5
zQv2m9v&0+Rl0vk(4tKxQO6rauOYOH>nClx={a7j&KCl7zV`)shWCId#KbB(cUWYHZ
zs8u0tKpK~eSVyyi(qKTEZ+>#sD%`zzEv>wsR_T+#I%x4FE#k2&oy>1r3`yf`fi7Bz
zN9dKIX|??|927H*I8%Huu8NF%2cKj#-||+xla^f#E^K=zEu94<l-^0B6L3!rI(Rsn
z9r=@4_0;UN%rJsU+_b!z4-zV~)3}*WQ5Q(eF0<1C@#QTd`Elaxbns@Z9~Kt?hrVSo
zJKg#werR7sE;XP1y^GnVV!mq{l|DZ$Q~HoWIrGyPZSA>fpcb(&yO<qn7NzC%Ud2P@
zMQIr)fCR##bVzI`L6S}yt0ld`3rpZ)Hv7Z>nD12EE(FDHc3Q@6kO739PKmn#AOT^g
z@lI-YjsTBa&Tjv+`AYS27lC$z%UuL=z~$*wGub}0#w<^_Y{kDQS4IA}ik<tj*|vI>
zi$LqaDz_Tsj;qo#%!LXNR;9(a6;KPT2k*0&o-=<@{l1Gp_XOT|5okSlKP^+JPyxdG
zX}m&1FY;7T(6)}9e$ITXW}S;b|3|ydMWEnqU0SA4p#p?;Y5X<S$8_3VMe9Mm-S>I(
z-rSmc7lXpKdKZJ%gL>BrS`X^Uih;DIRMC2{%l7}p9PFvt<zmo!u*=1u^<bB42dxLY
z$c{yH%wI*v{9oIjcQqF)HD9|J^v76VyBKt~|8+Vfu3|t37+<Gx4RoMz3!K~^W*c8N
z2Uj0<A?S_y!!86J+#gPdL;zF85AF}An>6DuJ5<qC+GA|kE9TAZkGTkRD1R(1-wS~Z
z5RRpbMH~$hMjT6HaimzViVoY4r<I%IjoBwJn{ihDSF@xB3^DQHF|dxOWjF;ASjW@x
z7ShG&{QY>kbsOt<91F+qr_=0z|7!le=ClhzXYQxn3elPS>2yfsEUFYbb3dKFv4VeY
zqKfY8o=vmjSIviO&bkl*K%8|U=%2C9rsWm|I)FHv#tR^{?o`or-t%ep&Z}n2n)5CM
zJ~aaN)d5R?aCJT{V{YgG;(Qwa(MA8sSVfn8FQr-hZ)WqFOD+Wcv(+URA_Ry_X?Z0E
zI)J#8PG_vYa0uK4zLI8x{$_TqzT!d@0^*7bQ3!}DZbb?KafK?<nM2@~aBp_g-_2*M
zdzW49kT5!=cbUw$Rw-d1^ez)OP+@o&2))aynpzKY1pF~aKep%Z=A+g9T!aX0=vQ{N
zB_crRS9Y};5g_y{Lp3N1Ri)s6JO;Ao{$buzGtfnd0%4$w5Cy`(G8x-K1qcJna9a4f
z@bV%YWw5jVFh|r3aUqHTF~o%^0>qFqxmT!CiU2XBEQ60*h{0Bj&4<12pXN+_=-$OB
z2FB<z8NgL3#lRR{78Gv)f&|9sGF;8(>BuSt|ARh(&8juGw42~U-~yjIp-kSzfeauf
zl*yNTKmuYy8D8>Pf%OE9ftTkNmElvnOM95Ncst>zGfLvHWRY8&IA9i)$z3DV0JEqJ
zyG9E3K_b{+R93#YOeEBZA+|p6mf<7wl;5dR5}5qU#1)tq`k7jDyG*X}cm!~}Om1#L
z0^Bac=60WG?Ig}O%5Vi{3mg8Gc@sO(&z#y849C(WEM4JRngrMi*U}`wR*<EO=^Lm`
zLfXe=IeYBY{mtgNfse~@8oP;hwoPb-ueX)K=G~r}dIuX^G-kcynjnE)UltWf5|F^I
zFGFf~6b0o?XwBVi4|>gvD!1--F({k2+p!NqBvmHg=K~3h-DSvKU!Z`dX-GR<mUFVq
zJ}}h$tKvUghKL3q##5V;eaBem;pS5n$I9d}3z)z<R+bbATadsyR)&q-Q(OfPPp}_`
zo6p>O!m*|)&n=#CtN}?vWpb4V34{}6Smg&(X0TaE`=Ko7$1=u7m;(bplpzoBIFOr>
zG3Uxylab~VRp-iNI0P=R&XviS10=A{l_BQf|B>E|TIW(3TQ<_%S$WA-A_Fd!$v5dC
z1f@%5NOg5Y`OQPxm9m`CY}F|9$<P%lo+hH^C|>K8QTnsWH_Vr6@k@l>-~+2yMj8MT
zSiLeZfSeR0oU~Ua+&?2ukBGrfk9ud+ei?CkBze&5laZ%Kl7+o!-wdT2Xf|z5bs3bw
zABB~tS;?DbWd#Vw2&&Maj6A}EB)|q`aD+u?6U`}D8^T_F)BMF#L!i&s95A6WBqP7}
z3=%3sGV)3#NQ4+eGS@%Mqf;VzP&g!W!$UkMlpG2Qhh*-5fRDE31TmaFINeON#BVt9
z@QfU7AW_=zj2vwsNi^f6lA2Rs$1*&X^al`}l0yw7T$yF$JPQ&?EF&ickU(M?3^g3t
zd-0j5v6-C78S!01TARjZyfMDT#Al$86v-&p^DQPjKHAh$AjJzzc!)L{N7cU#J41Z`
zi6*(w81wej1iXSnEk;bpOvsdF==BGXpeC{IW6ZnKlQQzPD=>+h!N{6KubkkkFViwP
z^Vt3|=EU%{jF*4>*c&2K-Ue>wCD!w8y@IVAYu=XvgNMEJ7$9$FFd*=eRFE)c2D@RL
z`J2>?jNB4~37HugY;iE`AOmV9n>5aRCN)zwIx&fx!Rgr@Tm~&Qo0W|>f0>${k*9DW
z{_e@_45kx&s~9S1`njy%c=NXOTo;G-wsQ#w{|B$AEkfGTOwO0~;qfN^(Q;`9vjxvs
zx1ee*&+y!R3lQkG<&KAfL@kzQ<hBJQj9H$+wq*l_k}ar?AJ|(anVUQ{A7o_Lg9|76
zAR`xPkR+AC8-KKM0SSx`GWh$O)%5OY3##o-d;1i#y;{A~#h`$FXGU%hAOwt^8Tl9U
zAc3(ngN2^fixxzEK^|OI`Gw=VU_#{!$9F-J&{f}UK}~jG#^mXyr|ki^RC3w_j?+R0
z5C<Hm1qp})<g~r1L0g8jBbglhF*5$5Qwbc&7-gbCTT+95&rZ%Xr&fLMv?Q3o`rc_t
zkihz$T9UtI(UR(SE@Qtx%e+CUIp-JzHk#pFM&`&taxwXuKS+R_%izmnc+pL5NiBIX
z!>*fa{=Md+3qdV;F(a=TLkJKTGYPRt1__9Z8Elfz(z?`=$iDXexmZ!E`(|a2f(wkk
zS(zOL35>qkfS8j&l2R5MCF+fq)UpHE@CE3N0a-bdfC-fWSviw{gvx-dGn2HW-09F6
zUoJpz40TJTB;wGloI)T2h@n|Ig@6Ra&@6fbOTVJF!Y#>c&O0o%$lO~vDobCQpopLq
zIzwYw{NX_UyXI@P_$B6E@PWp%a_$8QG?tau2S8#0VA<&StXKeu!54thS#?}iEC7-R
zy)jw207w=VfU#Lx04NM?MGZbFt2_|D1Cjk=^Zw2tL_C5=sNp21h9J4949h_Rds0^3
z$p?waeNr}kKfmZlq&R1plr6i@+Ab;!515w4O@;Lywx!N&z)meTXIFsZRGMs=mX#lx
zXvI5!S{8?U^s&2E)b}&kraJSHTW7c?QrFMON)Ln#5N2fM7al;8PPSERYZbl2-8!VL
z%;x-<wSTw7tX6|7vv}!@Pcp4(OsvU@8#W+N?KO^7Ac46iD<>I{z+98X(AY=eR%_U-
zZOAH{?0+mb@h%H~irU}-^fqMW4I7Zq+mMwvY(Sz5H)KmTp$jQ{Lk#Ldbz@fEu#p_J
z*~YBAVIx@p+L*-+8@z-IJqT>h;)YELzhU#(O0&EfXvYX@(#=_U!v@08-JHc)&vRTC
z)K(0F_><y>&4!iceHCCh%G8=$vodMcnz!cGERtsQZzZj1AZ=r}tuk+TYFk!*;S@}$
zY;(pQNR+UR#vV<sAmJn1vWZ{FD$`|9>?yZplXvg{fCOY#Xj}HS4tyKkng-ua_Q@*q
z=9-;Ozk^9!$2CEs*qvFqPXdWzcV?04?oW=_n&z0@?Do~>!0O#D1f^GYyAYIK*_{oE
z6c1DYu{(<t52e6bQ+j1DGuN0^HG5qIO0Vp75h%T~HyaXr9H;<cZx++vR9cN%Q}A=h
zetC^K&C~3V+s2epIh2)2MhHRaP!=mNzhBfE85QmOta2*L?m1#K6}N)Vtu?RIg6Z@U
z<x{?QrV3~P;rnbj%40>4@U!o;MW^IcK@2`s{5z|jlv9P|LGQRTRY(@5iW7XQpsBMp
zrDlG}iWk+`0yEMQ9JDN0;zc!(Fy#kl8U+c+AFfWLttl;YG0Ow8Cqck}F1l?=$(f68
zTT*i7qBEO97)TdsHl=_J-;=wX%^6fK0y5gBU(U*Jl@`)SzLI5Ew(HlGgTS*Z7#uv-
z0*SG5g(ehy=F^LByW!-K{ozCN-c-+W`7St^km*@2u8KegRB!h2hvxmM-sLhL1CzMr
zh{t}*abR0tcGCv)iB#Wm8P^r^5U6iC;yPS80S+qLpDo+~oc`tVwQ4Yd)4v=CP59CU
zWY7WwS!$!%Iz6yl#*kn_W?(sD$OYK-dGRH=apgJl?Uy&2Rk@*Y<)}8jZycs-k4Gi=
zR~XAdqHdr?#X$mOd^svk?{9~x;uG2Ro6UBqiRJQk6_}8jSdO8JY#?MnO=kTzn~$X?
zJCy>HxKybJxeO{km0jFyKAf8BG)|aTd@40g2QGt(Ph)@n#JnRltz5o$9Of0DR*vyW
z@nM)M{(q`E_c*DFE053I^mOPlFB(A{OgBnj`aT*E5F8%!0#rnK<Yi1g>n56Hvq_A&
zn`~l|kDm!hX4GXs(4j;SBFaP%LDZo^FesX!uF5!oC@_L9Lr_N8h(lBq_Iv8qwatJ1
zJNMM7y608Zw_dIK<(E<uGOal~hJ;96tvSY!bW`x)Xb<Y4FQ>khc`#?kv=HHWFvpmd
z?;-FIq^tFPFQ=}|tS<4$zT?%xLm<OL6t2-{?MMyFtjR@wD@1tK<jBp;rvUkkxmI7j
zBQ<K^+LC@`+x}Y7&juNUbLw4NuIwrO@Qzg5m)mkIToXHRIGs#B{6~B0+nEjV>q4aH
z26<gM=e)0|f1^I!p1LBlF>V4xcs5ECZZ<ri&3gJPsfNtv*o+)FCsZ+Gz2QOqPwMVh
zQWG;z#%k+p)c>TYjg__3h5EPZsU4}W4cwZuTg)LMXKU_)LF!!@n^dKf&*aMfrvKcL
z>hAqaj<Jd96szQ2UdWkFaU=jEy^ym>2gpmjkh7g4khZ*#qf?acmR0hGFX`KMF^Bz9
z&W<J^BH^W+9WMceDQ8#m0Fm&Lyqo0PDtXg({#21~+e;F}3EFdZauOaSwC8eFrgH%z
zp*_cv40BvfmB81EKi{2dE+6_@&UR2xDfC*-4i16BC06~5^b}R1uTJglNo}w0EY&NM
z0i8MfofRHLbml6fF)9!dojJy+k|e9dnGfcowGRMF9<)Z5XOujcv%^dvB@gD}VP=)Q
z-r=0dkCOp3<#4GD(pw!aX-|5q!#O+Jgc(VPbL7X_GSC@Ag3OgIb;~QS(61ax^(pRn
zJ@wA#dY{h4e*(scZD+ZWZ2`!h<yzYUkv+?`wgn=4mWyp=smmBq`W$`t8>!2O%qbNS
zW6p8y_X>C@GRNh6MXf1<F`M+44y5Yqnq2D+W6UC+CfB+H5D87L9b5vD(Bv|>+#sW@
zF~DTA>ntqJKad(#-oVeO_u~QOnq50k22!rswF6}!y<fB2Z=o9vl!ah=zj<zAfg25!
zEsb*XT{}>=BznI)Tp1{fVaJGTw79nSJ5KKh1%p9~dOsjdX>qM}frxBzW9yC)$5`ST
z>s|&x+LDqoWH_^=qzv(sC9btD%t%_|VqKQZCdQ_d%iXdK7`Il8d!By#tyH1+a<|u@
zC~n7!ZC6;^0+75SRu>S-D`MLMk-S1|D^sUq#RjeV{r^qfG^DjuL~PsY+JlVXp-8LC
zRsxwd8Y_XiN-sW?x@yQO*M7}|NRd^pJ%SoYkyS1uA<{iXKx_1QU8xB})|6@yJFao<
z*_!YOlS|eX-H#RBuhR>T^AU*OXnkF*bsz=T#aahaaNVa`A1hjKvsworr!Cex&^)v*
z2t-m_taTug+C=Nup!IR-<R-VQ8?8?lt)IQ9SaFsf`?u7X-kaQBgCot46U}dlG_SKq
zQpq7(;`ieb!neeV2O@lnC_do*#)-bR>aQP36^3jr6%oa6je`mvifomjVx0j+Q2aLi
z(2>-Pq1#GDM9{X_R`5_{o7ifHe5xNOu)XNNoqENoZjaRf6*aWS&Id$ByKBeNKq=(X
zdA%c%I8IElr+9I9>iY7!JtZ0PX<|=Fh8Sg!YiAlMgN!{cosx;>aTq1p={j#oG!H9p
z08<)56w^RTcg8Udq;zK-(?DXn)9v?`jcFm6n0~`eylG?F(kOQzj%iCGrVoA^)8i!L
zc8On|KeQ|MD2P<w6?+sAF<qZ})HoSs9R1V5<9rM_T6%x^D{!>*{_<DgXzWT9LBvsU
zr7r1k$ETCW-LgOE%->UodLMUt4UF7pytq$~b)U8GrIJH?VwLa+fjzPN01?<D?jyc1
zUabCstKWJrHNE<SxJ^)L(+6>zfQHK+B@aZz2QC8+nI0T3?sUr4H=IaaGyYUbged5g
zYj;<}gosnF8_iY%5pl}3tNz9dIvoWmzbSY+Rw<Bzr(=}@h4oXFju)SrGuWg?J)<X;
zteG>|b`w0}CFTsaF$zS`oWV9T0ueN4Fp7P+KZ>m;NC%hgEZ)_VDtzH9n+C^2nQ9Z5
znnhtNhHhaKgBdVDMAnwUwx0tcYs+AC`aiPuty<o7QSpzCdg<)pi}E(fLltuV+`!5Z
zEiTHlk;$xxsz!~;WqIfR;<9tpv*iu^j4Kmy%ks9Lf{${`^0uD>;?v9W{qE04{ge=l
zPcP3WR^+38%F-zJ$Gq*QED4{!FE9Pn@;;{F^p)H5&hz<1@y&D9($uwp=!;IZ3H9xH
zt4$z{+Mc)C1R{KUp5eVrGXQDS_WYpdX_Rc<6atOHu+Qb~Tv)YO?!|mG+5zzF#geMT
zRxjplf5=m$znG8v!)nRQ9eHE)NdN?Ol-el?p`+AJNeCUKc1l9%$Yb@R5>7Sg<g59z
z<NBwrdZ+iR`FO2!jTn7@-i&b;<yCU%{@55iLEiqnwLB1c`}0`dY<{f~Q@yD#%B$Ch
zzF8_GhJQ1kitcWKhca*GIYoZ13><4De!BEHPt6<JmA7kTAX26)|9P_tOn4~Mm1h;0
zbZRw%j#%9R(A|+(cR)%WiFF4wys_?TMD52S-RasuC2Nkws^bx=I~J=Bh@fM!>VOD3
zCaPP(kw%Hybn?A?*}UQ{fjYmu_j~zxt7xt0?!!oTdPYGdM}HVAf=5XFFjgKAi64sc
z)=B?R%PS|(<efQQqH@`1_cD(hqGmVnAc_arka8xD2Ov_;#PI;c_0Ht`&GDjm5Q2$^
z-+PH$yeJ+ljdHU*8xNL5Jk0juaa*lerpf!v@j6h@HKb_V2BaxXp7m28BAdKe*R=wh
zy~s}iXujFA@dQNK&7O@XAd;Fr8&5z}6lKdsqq=l*fme3Y)0>B>tK9`2X<ts)sbhs#
zi{~u%5^~?f=fTkmFQMtG3)RNSi@d~T=7U-Eh}Y3xV&Z2g)N;2_VsT47=Z}c{T`UcY
z2uW8BSHHdd-hV1<{`7l^+LAOe#Bz_T&tqv1c+P`J;}foJ94Ss{`qXf>vtgxYm!Fx&
ziLP6{#Lr6NM0<boxCS~Fx5{%KMx5N^Xo`@mEJ;3tMkKVj+OxMdMik^e<k|ZnBMNfY
zc!~4Jd@A@6&v_idKaB;mgI!4ahLP$gqt<(gno^_W|L>!oJ)p>lldyP9sx*In>%{#x
zdM0&T1i;7}J?ptZnzzxj$pc8yjh=KH;{SExOk0clE>cs=M{F$>5_jL~+3W!mg|>QR
z4>=aKPSm!|bJCT8uJe>%9c63CR17`Z(+fn#HqT}gATqXjWRo+pvab%9+~+x+#ivHA
z(-qh9GZrIGx-WK8_z<%%c2Xc>_IWnx1BtwS-k?q*Pm;b6qNKmyBkBJ^)_K)Q`spra
ztJUW}SKVEzN78?{XQyFcqMmN=D^ZjIsi)gxydlZ2PG0S}7j+x}N*<2`5=hD8aX<no
zdHmCWtdr>Nu>lF7Ej^_+$lv6i(!0t~uBY^_GL-A_2*{ORBqHmHJfAg}$LqOPwr`8i
zhTB`@Q*FJNe~It(t$bf!bF&&;e0j3^Zuw9sQS#zBVwd<SvrJdm5xc~fgFU1#s24je
z*H=wZD~B#Gl@SkE?%Th}@K9#C&uISks7i^PB1a3&Eg#-W)wp#9l0;Oi-_J}I3#3r1
zkFB0F74>5F=po<Pq7PrGwtx8{zt@+zh+G-~+rxUxRQ2@{5BnTk5y=v}KkWDOVkk_0
zIK(XHtrwH7^Am;2A^Pd5>TLbZX(~4YLe$;yn8NG)zR|aBAcfcYtlzoR)Q8g7`-u^i
zRZ-zTPgBE2K!^@Mt~d5v@Ao$+@zFZ5=X#&%QCUb(FXnvAPk5E1qrxMnt06-mm}T1X
zn3^B+`$Y4zKng$RvrJFc2iMDByiGSxSG5<m`P_pUy{U}8+x(2=22rAnzT5oqHC8!%
z0WA87QF`lC)la8qs4*jek(bs-#~k_R4zoq&b9~VsagkZTTrVF6H&L|m!l<bWW~lrK
z2ytQg62GZbSiZz>lESjdy<WbaZ}t<zE9;}er)Q|D3n4_)lsu;JX8)Y%77QSTH~T{`
zRL{v5oe7-l;Fq29i~sgDb!j5q?lV6wcM(s(Rg)dQvrGT^TWVYbzoH%g&=J?+e>pNf
z5OEzot5IZV2PDcn{K{Q^H2WlkXe!2MrLe@krQnr2eWuf7&8{WM@{FB+O|3d1J~%-<
zbg%DBsXSCZP~UWwI(8i>$~-*7wtIa$xeGMB_5f=jZQARzn?TG2#4vmP(U+TZR|J~J
z7f)8RC9zJBBze$xMpm9EU-Z3ReRb!z)!RRW5Z5Ic<)Cl7Vz{a6pl|<y0ugr5=O1WP
zmwX03=x0aRy3Dl8L4V+I^|34_n;^Ng$9F#R6O~7m?)?~RFK^tIOctknM_pCXz>~OA
zNv%DlN+ra4N|j1#?U70&rAun<@v|SHblLPxEzzLnq@VcEj|MfCM!A3Zc2HwU3~D~`
zWl(eQEcyP-l_9?m%GT-Nd+I>?_d&$~vmT|NWUg6(6GrP%>b|d%S)hs93Lc`uSpnZ+
z?m(kpTH9Fs5!dsUXBq>?EKL?FT#W%slj{u=s7be6t0rce0(%H5SAGaJ;BSw7Fy}H4
znNvS`ts0fRHE@QCj)e%%t-<gS>Q?6N!DN_)#VOaZc)ogJ;Fx3}RJaxf!^~ewfrwfd
z44)*1F_1Pc3`R^;98dv9-FNB*KUCu~ca|C>GX-}_W1<G*b9d=?en^AwDm6xC3ht7|
z5H-jlZM5hsexz!$ErC5r7$Q6^0Xy<IBtw|+k)_24f23Y1&n^udlM;jq*V2Gf(RW6#
zMNU{*y!*%MTTXUmsZBCluu|G2e<>(M@UPNe_^En5zbbHy#|sgrRYBEQbt+<Fer#>v
zTvXZ3G1_|C)yZ@8pr5HXve06k%89>ggW)4dWlmxuOBDmQyAHfwO;0}>@W-bX=bb1i
z;qk!Ppl4mLY8v<zr6=g<^6}u@Xrnj~RX-ju3n1PJ#5*4kavOpuB?!T!gtow@1WTa>
zZGlY*mLw^mEg&WI@E(Ywp3Q;dRvsoL)cjoiUkxaV7@lFm&4CS5py9P^2!XU|bHL=$
z3UP97g?TC{+pn*`LEV>rDyYa9CqGA={AqL&?dt&|18g={Rsd<?(_%)M@Hs~svrYf|
zOf@XCEpW_6CLzMJEg<!<Dj5iRMz_sWqX#`xl4GbMhtC1<(6VPS&IO$G(I?qQpMRt3
zlZ6nu1&@*OthhxJ>xN**+jkYeaijci-W52Jdqah5SHKq&2@xPdcLk#+8*dj#V|N9k
zFO#W#9;2$=dhsvSkj(BlU?3u5w*<@$h6itdRUi7Lx-t7|;9P9winqTSj2)-$63046
z+<lM!#eb<q**&GUh`aBRw!9rN;qLpi_bYXD(7wQ_vXaEx_XSL<T!q6;N+%BlWhaC3
z%E|g`qf=+=DZf_L?ty@<FEYHJ#9x`Nz<E1JsMB&#=p_4BMrg$~zg9Pwk3JkECYW(}
z^bFyD3lcYehJr$l1pJqg-hGmIa(Cby)8G4z8sEUL=r~B|=&3t6FB%g7Db*dYW=lL7
zh$nXk`D50Tg<w4S-Pn^Yh1%bZJ=v1Pliw9jHeUiJ;XKI`fzuNtD*vi0f2%sK14W+9
zGgN;fusdRbwCO}}fr(TaA)b6f5>C`6`9pgm7}-Ocq<iH#ZA#OE_k+ZR>TdataY;J)
zQNU5s(|$*n^HIPdY73;}yF}dmOi(=eJM#35Gl3n1LZ-qqfjwplNQGwt{tieF2gICb
zf^>AZwm?SlhNI7TwI`BG`NrbaH>>ZIH#D*l*A|rbXbkP={!7ezG=_Xaj>JkQ-5B<n
zYD~sc5i69lqvItlh4*R<N5*v<ChBesYp+oMkW=cpd1pab_E1<}d4yByfAR}GVP-O|
z=iZ=F#VZ=P4<x-Hv@0z8%iAvu9X|?oAk71t$+rq1RV@seeETtu-d}>fMc*__{UqBG
z+N22)o|X_(+$P;#e~IgRHq2IMm1plku)LTMg&Gp=>m(ZbOSmu7!7XZic3Ei8FNX-z
zvXDg~=BV)g668#P-=f;HD?-P3BPAuqSA=-uvymjCxK+PBNBuS18ro_7{?Y7q$h5v(
zGD#tPX|;a&4{CFEb?BITEQE-p)gjB5>Tr)s)5*1A*<<>_MpfHqZOGasiIGbsMji>B
zM??Mn->6Y~Sd&UNfTK|*PtnLDp}lJX$ZI_k@-bh$5{Oqm5?=6V80CB+m`GV4+MI7G
zv}1i}bG{`>q^u8#lz+jVTuZbeEZc@XrwyDmQ$OCMzM0+-R^&{+K37aw44qNYprrOz
zmCOL6l*mJb7emqz2e($3D~LAgAKa?OWHyF23qgcuV@MW~-kbY_7+32jZdEmzO`*+s
z5QQ3&^JGoIxnjR3bidowgv=A6Gujv#B0NuoW5$Z=;K6*G^{;MIwVBPK?HVA$vpJ+|
zkVP3>^}|PDz4JD8ab`>CjJI+m2X6^$>&zMlF7c6xc<**~N%qMSj~MSs;gKy42qFhR
zt>@mZULN#x=+s(4l7pWPCrng7!@`%PlYa@zUO<c2==DviQtSU#SN8c!$gHiH`Z6)~
z_Rx7gGIax(iXlXc=7HFHdw4<g2M>q}wuc-zBDMx%>+Ru?=dG=UU~K(dY->xQMbE{y
zwj{Cjb7E`m%yBB%Xt5(KJD^w3Rmami!iuc1a-~?g9kWJOZg0lQK=XH|f`^E054pyQ
z&7(kC+M(ZXR@Iq~5|3E9LwLSwctAV#^m!_q*@^QQg;g3W?+mNPSRP(+m!2y;yFxpF
z<zgX9?g|;e=8PPyyjwp%PYurOjy<8$Sb4X2f-D896f5u1U!1R|X7<FM01-KR#1o?S
zpzPQ5P4lViwb<)8BMqL{#OnqcIT-nM-8Nrcka<1MKOCC}&+C$ZT*E^K-K%@%t9)i}
z9O|6)2G3pz^@xW-<vu<34tVyJ-d)C&`{dovH*y$K?$-@>s6m<ip%aZLIHeJu{UMva
zqBb+4?9@-)L7O{6$81yMWn~cA8L~|+lEX%~H}ogS$-Yr~FS!-sjd1LE^#dGpayt1|
z$O@6#1?sv!Z-pE*Fa9`L{P9re9Jc-lMnw>!18{&?`B3=P=)7Mb#yTV^Py7*xKOPFb
z!`2^#VEnNw_D4&hAziUQT9Wu<m-yoeRytR3HP4B#tf`_<UU?{?*DY3ki?bK1tDW?T
z*f$4=Z@wS<rVFHH;K(_F)bYMJo{aRk;f8;0p&s3$f^1K$eW)<?i1ry|!vs1R>V_6o
zH}GWKi$FDG`3oUk%>c<lABV*QEow%2_T$(iAj9^tctpM7!b3j^^)#&}WIu^bFu=Iz
zC*oSOB3bz8?BY7DxFltE!S-7NjFZkTP^0Nc21qVy)UVu4N77hu#+s;sNPUe3Zr+=Q
zH7`#mZ!eV1*AFdLQ`5H>u%`TNxLm9`x8Tgv>K^_!@GCMSbo4Q|V9f~Ro#qy-8G)E_
zZo!*Zh`JCV7&A5(Y!_lFw4k|QyAVqfGd346<C9`WZvI(ZC|iaV*CqxQx8I{iJL$!R
zim#gN!d*Rd&xLr*52R7xsP_gU{vOeSg!6e~!6o|Yd)3tJl7bzfLxg8ZL9VlsgnXWu
zYN>wqUe%mgT4FL(VY=4v@UHjjnak7<viBBj{G4a3cW;4nD&)?#De2^Wg|b%t_hst4
zeeNr;vqxfMifHrxg0r$<y5$BihJg^Rgay*X`wIi2)D5Jf`wOf(l-K~G)cXsAS6ZbC
s!6@~CSgDr6D?AV@)sjT151`cRk~jY6%wNtN*>Uo7g<kq!zflqXKZMG=S^xk5

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 2f8a81b5..58fab1eb 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -2237,7 +2237,7 @@ type ResourceQuery struct {
 	// FORA protocol version — "1.0". Stamped by the sender from a single
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
-	// Requester identity — who is making this request, what scopes they have,
+	// Requester identity — who is making this request, the scopes it states,
 	// and optional delegation chain. REQUIRED: a query names its requester, whose
 	// Requester.id and Requester.domain are required in turn.
 	Requester *Requester `protobuf:"bytes,3,opt,name=requester,proto3" json:"requester,omitempty"`
@@ -4066,10 +4066,18 @@ type LicenseTerm struct {
 	//     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated
 	//     once.
 	Pricing *Pricing `protobuf:"bytes,6,opt,name=pricing,proto3,oneof" json:"pricing,omitempty"`
-	// Scope-gating: the Exchange returns an offer for this term iff the scopes in
-	// the requester's signed request (Requester.scopes) cover ALL of these scopes
-	// (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}
-	// + scopes:["subscription:..."].
+	// Scope-gating: the Exchange presents an offer for this term only when the
+	// scopes in the requester's signed request (Requester.scopes) cover ALL of
+	// these scopes (AND-semantics). Empty = public. A subscription term is
+	// Pricing{model:FREE} + scopes:["subscription:..."].
+	//
+	// Requester.scopes is the requester's own statement, which the Exchange does
+	// not verify, so a scope gate hides a term from requesters that do not state
+	// the scope; it does not stop one that states it falsely. An Exchange MAY
+	// also require a verified delegation that grants these scopes before it
+	// presents the term. To a requester that presents none, it answers as if the
+	// term did not exist, as existence hiding requires (see Requester.scopes). An
+	// offer the Exchange presented is honoured until it expires.
 	//
 	// Coverage uses the SAME matching rule as Requester.scopes:
 	// segment-wise (":" separated), each granted segment must equal the
@@ -4453,8 +4461,9 @@ func (x *Pricing) GetMetering() PricingMetering {
 // entitled to (scopes, delegation). What they are asking for (uris) and the
 // limits they will operate within (acceptable_restrictions) belong to the ask,
 // not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange
-// verifies identity via the RFC 9421 request signature, then filters its
-// catalog by the requester's scopes. Billing needs nothing from this message:
+// verifies identity via the RFC 9421 request signature, then presents the
+// terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing
+// needs nothing from this message:
 // the Exchange resolves the agent's account (RegisterResponse.billing_ref) from
 // what authenticates the agent, never from a value the caller merely states
 // (see "Accounts" in the file header).
@@ -4511,11 +4520,15 @@ type Requester struct {
 	Type RequesterType `protobuf:"varint,3,opt,name=type,proto3,enum=fora.v1.RequesterType" json:"type,omitempty"`
 	// Human-readable name (e.g., "Acme Research Assistant").
 	Name *string `protobuf:"bytes,4,opt,name=name,proto3,oneof" json:"name,omitempty"`
-	// Entitlement scopes. Declare what the requester can access.
-	//
-	// The Exchange filters its catalog to resources matching these scopes. This
-	// is the enforcement mechanism for both enterprise RBAC and open-market
-	// subscription entitlements.
+	// Entitlement scopes: the requester's own statement of what it is entitled
+	// to. On a query a Broker originated, they are the Broker's statement for the
+	// agent. They are signed and attributable, and the Exchange does not verify
+	// them. Scope coverage decides which terms the Exchange presents (see
+	// LicenseTerm.scopes, which also states when an Exchange MAY require a
+	// verified delegation); it is not access control. A false statement is
+	// traceable to the signing key, its directory and its account, and the
+	// agent's acceptance signs the scoped offer it buys; it is settled through
+	// reconciliation and the account relationship.
 	//
 	// EXISTENCE HIDING. A requester never learns about a resource outside its
 	// scopes. When the scopes leave no presentable offer for a resource, the
@@ -7342,7 +7355,7 @@ type DiscoveryRequest struct {
 	// FORA protocol version — "1.0". Stamped by the sender from a single
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
-	// Requester identity — who is making this request, what scopes they have.
+	// Requester identity — who is making this request, the scopes it states.
 	// The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:
 	// a discovery names its requester, whose Requester.id and Requester.domain
 	// are required in turn.
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index 490d66b4..b0ca1410 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -236,7 +236,7 @@
       "type": "object"
     },
     "fora.v1.Requester": {
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
@@ -271,12 +271,12 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Entitlement scopes. Declare what the requester can access.",
+          "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
           "type": "array"
         },
         "type": {
@@ -342,7 +342,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
+      "description": "Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
     },
     "search_filters": {
       "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index edf996d9..c02bb149 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -241,7 +241,7 @@
     },
     "fora.v1.Requester": {
       "additionalProperties": false,
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
@@ -276,12 +276,12 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Entitlement scopes. Declare what the requester can access.",
+          "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
           "type": "array"
         },
         "type": {
@@ -348,7 +348,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
+      "description": "Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
     },
     "search_filters": {
       "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
index a0de5911..657bbe4c 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
index f6810954..40d14188 100644
--- a/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryResponse.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
index ec3c6533..ba9b1bc2 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.json
@@ -329,12 +329,12 @@
       "type": "array"
     },
     "scopes": {
-      "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+      "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
       "items": {
         "type": "string"
       },
       "maxItems": 64,
-      "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+      "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
       "type": "array"
     },
     "semantics": {
diff --git a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
index 41e19a8d..bdba9171 100644
--- a/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
+++ b/gen/jsonschema/fora.v1.LicenseTerm.schema.strict.json
@@ -335,12 +335,12 @@
       "type": "array"
     },
     "scopes": {
-      "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+      "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
       "items": {
         "type": "string"
       },
       "maxItems": 64,
-      "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+      "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
       "type": "array"
     },
     "semantics": {
diff --git a/gen/jsonschema/fora.v1.Offer.schema.json b/gen/jsonschema/fora.v1.Offer.schema.json
index 19afba48..b8c45940 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.Offer.schema.strict.json b/gen/jsonschema/fora.v1.Offer.schema.strict.json
index 9b1c7374..1b5749bc 100644
--- a/gen/jsonschema/fora.v1.Offer.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Offer.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.json b/gen/jsonschema/fora.v1.OfferGroup.schema.json
index daebf196..166dc995 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
index 7f443c9b..3d079315 100644
--- a/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
+++ b/gen/jsonschema/fora.v1.OfferGroup.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
index 80a4bd10..0950deca 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
index 2e0d3ba5..1b0c97fa 100644
--- a/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.PushResourcesRequest.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index ba62fb3c..e22fccb5 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -85,7 +85,7 @@
   },
   "$id": "fora.v1.Requester.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
   "properties": {
     "delegation": {
       "$ref": "#/$defs/fora.v1.Delegation",
@@ -120,12 +120,12 @@
       "type": "string"
     },
     "scopes": {
-      "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+      "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
       "items": {
         "type": "string"
       },
       "maxItems": 64,
-      "title": "Entitlement scopes. Declare what the requester can access.",
+      "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
       "type": "array"
     },
     "type": {
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index 700a62d9..bdff6268 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -87,7 +87,7 @@
   "$id": "fora.v1.Requester.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+  "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
   "properties": {
     "delegation": {
       "$ref": "#/$defs/fora.v1.Delegation",
@@ -122,12 +122,12 @@
       "type": "string"
     },
     "scopes": {
-      "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+      "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
       "items": {
         "type": "string"
       },
       "maxItems": 64,
-      "title": "Entitlement scopes. Declare what the requester can access.",
+      "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
       "type": "array"
     },
     "type": {
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
index c42702d2..f22ec0ad 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
index 94b51a6c..f23d7e76 100644
--- a/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceEntry.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index c9953804..8e9fde61 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -126,7 +126,7 @@
       "type": "object"
     },
     "fora.v1.Requester": {
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
@@ -161,12 +161,12 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Entitlement scopes. Declare what the requester can access.",
+          "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
           "type": "array"
         },
         "type": {
@@ -235,7 +235,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."
+      "description": "Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."
     },
     "supported_profiles": {
       "description": "Declares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index bbec4623..ffe83a31 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -129,7 +129,7 @@
     },
     "fora.v1.Requester": {
       "additionalProperties": false,
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
@@ -164,12 +164,12 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Entitlement scopes. Declare what the requester can access.",
+          "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
           "type": "array"
         },
         "type": {
@@ -239,7 +239,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."
+      "description": "Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."
     },
     "supported_profiles": {
       "description": "Declares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]",
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
index a2d9fc96..d8c4dc56 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.json
@@ -71,12 +71,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
index 186eb07a..963b09c9 100644
--- a/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceResponse.schema.strict.json
@@ -73,12 +73,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.json b/gen/jsonschema/fora.v1.TransactionItem.schema.json
index 304074d8..5ba72e2b 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.json
@@ -91,12 +91,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
index 54c3eb56..eeb4cef4 100644
--- a/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionItem.schema.strict.json
@@ -94,12 +94,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index c523d79b..3e0a2b4e 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -247,12 +247,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -697,7 +697,7 @@
       "type": "object"
     },
     "fora.v1.Requester": {
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
@@ -732,12 +732,12 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Entitlement scopes. Declare what the requester can access.",
+          "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
           "type": "array"
         },
         "type": {
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 901f89da..f573e451 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -254,12 +254,12 @@
           "type": "array"
         },
         "scopes": {
-          "description": "Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
+          "description": "Requester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].",
+          "title": "Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].",
           "type": "array"
         },
         "semantics": {
@@ -711,7 +711,7 @@
     },
     "fora.v1.Requester": {
       "additionalProperties": false,
-      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
+      "description": "Carries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).",
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
@@ -746,12 +746,12 @@
           "type": "string"
         },
         "scopes": {
-          "description": "The Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
+          "description": "EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).",
           "items": {
             "type": "string"
           },
           "maxItems": 64,
-          "title": "Entitlement scopes. Declare what the requester can access.",
+          "title": "Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.",
           "type": "array"
         },
         "type": {
diff --git a/gen/python/tests/test_comment_first_paragraph.py b/gen/python/tests/test_comment_first_paragraph.py
index c754c4ab..6f32366c 100644
--- a/gen/python/tests/test_comment_first_paragraph.py
+++ b/gen/python/tests/test_comment_first_paragraph.py
@@ -44,7 +44,7 @@
 #: completeness; these name the cases a reader can check against the .proto by eye.
 FIRST_PARAGRAPH_HEADS = (
     ("Offer", "signature", "REQUIRED. Hex-encoded detached Ed25519 signature over the canonical"),
-    ("Requester", "scopes", "Entitlement scopes. Declare what the requester can access."),
+    ("Requester", "scopes", "Entitlement scopes: the requester's own statement"),
     ("License", "uri", "Canonical identity of the license document (RFC 3986)."),
     ("ResourceQuery", "supported_profiles", "Domain extension profiles the caller understands."),
     ("Pricing", "unit", 'Metering basis — the "per what" of PER_UNIT pricing.'),
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index a8008eaa..83bf68cb 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1438,7 +1438,7 @@ class Requester(WireModel):
     )
     scopes: list[str] | None = Field(
         None,
-        description='Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, "{domain}:{permission}" or\n "{profile}:{permission}", optionally multi-segment ("dist:US:CA");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   "credit:read"                — can access credit reports\n   "subscription:marketdata-2026" — has active MarketData subscription\n   "academic:*"                 — full access to academic resources\n   "internal:reports"           — can access internal reports\n   "*"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (":" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is "*"; a terminal "*" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: "dist:*" covers "dist:US" and "dist:US:CA"; "dist:US:*" covers\n "dist:US:CA" but not "dist:EU"; bare "dist" covers only "dist"; granted\n "dist:US:CA" does NOT cover required "dist:US"; "*" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).',
+        description='Entitlement scopes: the requester\'s own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker\'s statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent\'s acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, "{domain}:{permission}" or\n "{profile}:{permission}", optionally multi-segment ("dist:US:CA");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   "credit:read"                — can access credit reports\n   "subscription:marketdata-2026" — has active MarketData subscription\n   "academic:*"                 — full access to academic resources\n   "internal:reports"           — can access internal reports\n   "*"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (":" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is "*"; a terminal "*" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: "dist:*" covers "dist:US" and "dist:US:CA"; "dist:US:*" covers\n "dist:US:CA" but not "dist:EU"; bare "dist" covers only "dist"; granted\n "dist:US:CA" does NOT cover required "dist:US"; "*" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).',
         max_length=64,
     )
     type: RequesterType = Field(
@@ -1519,7 +1519,7 @@ class ResourceQuery(WireModel):
     )
     requester: Requester = Field(
         ...,
-        description='Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn.',
+        description='Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn.',
     )
     supported_profiles: list[str] | None = Field(
         None,
@@ -1789,7 +1789,7 @@ class DiscoveryRequest(WireModel):
     )
     requester: Requester = Field(
         ...,
-        description='Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn.',
+        description='Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn.',
     )
     search_filters: dict[str, Any] | None = Field(
         None,
@@ -1882,7 +1882,7 @@ class LicenseTerm(WireModel):
     )
     scopes: list[str] | None = Field(
         None,
-        description='Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester\'s signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:["subscription:..."].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (":" separated), each granted segment must equal the\n corresponding required segment or be "*", a terminal "*" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). "dist:*" covers\n "dist:US" and "dist:US:CA"; "dist" covers only "dist". There is exactly\n one scope-matching algorithm across the protocol.',
+        description='Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester\'s signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:["subscription:..."].\n\nRequester.scopes is the requester\'s own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (":" separated), each granted segment must equal the\n corresponding required segment or be "*", a terminal "*" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). "dist:*" covers\n "dist:US" and "dist:US:CA"; "dist" covers only "dist". There is exactly\n one scope-matching algorithm across the protocol.',
         max_length=64,
     )
     semantics: TermSemantics = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 008a7990..240c5bd4 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,9 +48,9 @@ export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_RE
 
 export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
-export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
+export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
 export const DisputeFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("DisputeFailure — a dispute could not be filed.")))();
 
@@ -92,7 +92,7 @@ export const KeyRevocationListSchema = /* @__PURE__ */ (() => wire(z.object({ "a
 
 export const LicenseSchema = /* @__PURE__ */ (() => wire(z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("License — Identifies the governing license document for a LicenseTerm.")))();
 
-export const LicenseTermSchema = /* @__PURE__ */ (() => wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")))();
+export const LicenseTermSchema = /* @__PURE__ */ (() => wire(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")))();
 
 export const ObligationSchema = /* @__PURE__ */ (() => wire(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")))();
 
@@ -100,11 +100,11 @@ export const ObligationKindSchema = /* @__PURE__ */ (() => wire(z.enum(["OBLIGAT
 
 export const ObligationTriggerSchema = /* @__PURE__ */ (() => wire(z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"])))();
 
-export const OfferSchema = /* @__PURE__ */ (() => wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")))();
+export const OfferSchema = /* @__PURE__ */ (() => wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")))();
 
 export const OfferAbsenceReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"])))();
 
-export const OfferGroupSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")))();
+export const OfferGroupSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")))();
 
 export const PreviewSchema = /* @__PURE__ */ (() => wire(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")))();
 
@@ -116,7 +116,7 @@ export const PricingModelSchema = /* @__PURE__ */ (() => wire(z.enum(["PRICING_M
 
 export const ProviderRelationshipSchema = /* @__PURE__ */ (() => wire(z.enum(["PROVIDER_RELATIONSHIP_DIRECT","PROVIDER_RELATIONSHIP_RESELLER"])))();
 
-export const PushResourcesRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "caller_id": z.string().describe("DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") })))();
+export const PushResourcesRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "caller_id": z.string().describe("DEPRECATED, never needed. Each entry's domain names whose resource it is,\n and the caller is the party that signs the request: the Exchange checks\n that the verified signer may push for each entry's domain (see\n CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR), and a receiver does not\n rely on this field. The field is retained because removing it would break\n the v1 wire contract. It does not yet carry the `deprecated` field option,\n so implementations that still read it keep building; the option follows\n once they no longer do.").default(""), "entries": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")).min(1).max(256).describe("Content entries to push. At least one: an empty push asks for nothing and\n is refused rather than answered with zero counts. At most 256, the bound a\n caller-chosen batch carries elsewhere in this contract (see ResourceQuery.uris)\n — it bounds one submission, so a larger feed is pushed in several. The cap is\n over entries because a submission is stored or refused whole, and a refusal\n names each entry that failed; it does not bound the work of checking a\n submission, which the recipient bounds at the transport.\n\nBoth bounds are wire rules (min_items and max_items below). A push outside\n them is a malformed request, refused by wire validation with the Connect\n code invalid_argument like any other malformed request; it carries no\n catalog_rejection, because no entry was examined.").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header. Distinct from `tenant_id` above, which names a publisher\n tenant WITHIN an Exchange, not the Exchange itself."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "tenant_id": z.string().describe("Tenant identifier").default(""), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") })))();
 
 export const PushResourcesResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "accepted": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries accepted. A push is all-or-nothing, so a successful push\n stored every entry it carried and this is the submission's own size. A push\n the Exchange processed and could not apply is not a response at all: it\n travels as a non-OK transport error carrying ErrorDetail.catalog_rejection.\n A push refused before processing is answered by the general rules instead:\n a mis-addressed push (see \"Request recipient\" in the file header) and a\n malformed one are invalid_argument with no typed reason, and one whose\n signature fails is unauthenticated with ErrorDetail.request_auth_failure.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "rejected": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Number of entries rejected. Structurally always 0 on this path, and kept for\n the same reason CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED is kept: a\n rejection returns an error rather than a response, so there is no successful\n answer in which this can be non-zero. It remains meaningful only for a\n deployment that applies catalog rules somewhere the all-or-nothing rule above\n does not front. Do NOT read a zero here as \"nothing failed\" — read `accepted`.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default(""), "warnings": z.array(z.string()).describe("Non-fatal issues encountered during ingestion — the ingest tier's lint, which\n accepts the term and flags it. Examples: an unregistered bare restriction\n token on any axis, and an OBLIGATION_KIND_OTHER obligation with no detail.\n Warnings do not cause rejection; they are surfaced so publishers can fix their\n feeds without a hard failure. A condition that rejects is not a warning — a\n REFERENCE_ONLY term with no License.uri, for instance, is refused by\n license_term.reference_only.requires_uri and never reaches this list.").optional() })))();
 
@@ -154,7 +154,7 @@ export const RequestAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum
 
 export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
 
-export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then filters its\n catalog by the requester's scopes. Billing needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).")))();
+export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).")))();
 
 export const RequesterTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"])))();
 
@@ -162,17 +162,17 @@ export const ResolutionTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["RESOLUT
 
 export const ResourceAttestationSchema = /* @__PURE__ */ (() => wire(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")))();
 
-export const ResourceEntrySchema = /* @__PURE__ */ (() => wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")))();
+export const ResourceEntrySchema = /* @__PURE__ */ (() => wire(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).max(64).describe("Signed attestations about this resource entry.\n Same semantics as Offer.attestations — see ResourceAttestation message\n for verification levels and claim vocabulary. Attestations pushed via\n CatalogService are verified at push time: the Exchange checks that\n the attestation verifier is authorized to push for this provider\n (via catalog_contributors in the provider's WellKnownManifest) and validates the\n attestation signature against the verifier's public key from its WBA\n directory (the JWK Set at /.well-known/http-message-signatures-directory;\n the keyid is the key's RFC 7638 thumbprint). The verifier's fora.json\n carries only its role, determined by the verifier's operator.").optional(), "content_hash": z.string().max(255).describe("Content hash, carried as the publisher computed it — a bare hex digest or a\n \"method:hexdigest\" form; bounded in length, never format-checked, because\n hash_method names the algorithm.").optional(), "content_id": z.string().max(255).describe("Content identifier").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Provider domain — the bare host the resource lives on, in the shape\n \"Request recipient\" defines in the file header: a port is allowed, a\n scheme, path, query or userinfo is not. With path it forms the catalog URI\n by concatenation, so a value carrying anything but a host would choose the\n URI rather than merely name the host."), "estimated_quantity": z.coerce.number().int().gte(0).lt(2147483648).describe("Estimated quantity in the metering unit").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052): keys within ext\n that the AGENT must understand. The Exchange carries them onto\n Offer.ext_critical and does not consume them, so an unknown key here never\n refuses the push (see \"Critical extensions\" in the file header). Empty\n (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().max(64).describe("Hash algorithm").optional(), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("Content path — an absolute URL path such as \"/premium/article-42.html\":\n starts with \"/\", carries no query or fragment delimiter, no whitespace and\n no control character, and is at most 2048 characters. Characters, not bytes:\n protovalidate's max_len counts Unicode code points, and the pattern admits\n non-ASCII, so a conformant path can exceed 2048 bytes."), "provenance_source": z.string().max(260).describe("Who provided this resource metadata. Creates audit trail for\n \"where did this catalog entry come from?\"").optional(), "provenance_timestamp": z.string().datetime({ offset: true }).describe("When this metadata was collected/generated.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Optional mutability hint. When omitted, the Exchange applies the `STATIC`\n default at Offer build; an explicit `UNSPECIFIED` is rejected. A value in\n `ext` is not read — the typed field is authoritative, so an ext-only value\n is treated as omitted. Mirrors the required Offer-side\n `ResourceIdentity.resource_mutability`.").optional(), "source": z.enum(["INGESTION_SOURCE_FORA_SITEMAP","INGESTION_SOURCE_RSL","INGESTION_SOURCE_SITEMAP","INGESTION_SOURCE_HTML_CRAWL","INGESTION_SOURCE_CMS_API","INGESTION_SOURCE_MANUAL","INGESTION_SOURCE_CATALOG_API"]).describe("How the entry was discovered").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).max(32).describe("Publisher-declared licensing terms for this resource.\n See LicenseTerm for the full model. Every term carries its Pricing (the\n resource_entry.terms.pricing_required rule above), whatever its semantics.\n For REFERENCE_ONLY terms, License.uri is authoritative.\n The Exchange validates ENUMERATED terms at push time and surfaces each term\n on its own offer on discovery: the term's price becomes Offer.pricing, and\n the term in Offer.terms carries no pricing. At most 32 terms per entry,\n stated on the wire so every implementation refuses the same size. An over-cap entry refuses the\n whole submission, as every catalog rejection does; what being a wire rule\n changes is WHEN — the refusal now happens at the boundary, before any\n per-entry classification runs, which is why the rejection reason that named\n this cap can no longer be produced for a push.").optional(), "title": z.string().max(512).describe("Content title").optional(), "word_count": z.coerce.number().int().gte(0).lt(2147483648).describe("Word count").optional() }).describe("ResourceEntry — one catalog row as a publisher (or an authorised contributor)\n pushes it. The envelope fields carry their own wire rules, so an entry that\n cannot become a catalog URI is refused at the boundary rather than after\n ingestion; the licensing terms inside carry the LicenseTerm rules. See\n CatalogService for the second, ingest-time tier (token canonicalisation and\n registry membership).\n\nThe list caps here and on LicenseTerm bound HOW MANY, never how large: how many\n terms one entry may carry, how many entries a push can store, and how many paths\n a rejection has to name back. They do not bound the entry's SIZE either — several\n members inside one carry no length rule — and they do NOT bound the work of\n checking a push, and must not be read as doing so — a\n validator walks every element it is handed and reports every violation before\n any cardinality rule is applied, so an over-cap list is fully traversed on its\n way to being refused. The work is bounded one layer down, by the maximum\n request size the recipient will read; a deployment that exposes CatalogService\n sets that cap, and the SDK's server binding sets a default.")))();
 
 export const ResourceIdentitySchema = /* @__PURE__ */ (() => wire(z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("ResourceIdentity — Layered resource identification and verification.\n\nServes two purposes:\n 1. Cross-exchange deduplication (Broker groups offers for\n    the same underlying resource to compare pricing).\n 2. Resource integrity verification (agent checks that delivered\n    resource matches what was promised).\n\n Providers declare what verification level they support via\n content_hash + hash_method. Higher verification = higher trust =\n resource can command premium pricing.\n\n   Level 0: No hash (canonical_url only). Agent gets what it gets.\n   Level 1: SimHash (fuzzy match). Tolerates minor page changes\n            (ads, nav, timestamps). Catches bait-and-switch.\n   Level 2: SHA-256 (exact match). Provider serves a clean,\n            deterministic payload. Agent verifies exact content.\n\n This is non-blocking on current infrastructure: providers who\n serve dynamic pages use Level 0-1. Providers who invest in\n consistent resource delivery reach Level 2 and earn more.\n\n CoMP's Package.id identifies the *package* (exchange-specific);\n ResourceIdentity identifies the *resource* (cross-exchange).")))();
 
 export const ResourceMutabilitySchema = /* @__PURE__ */ (() => wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"])))();
 
-export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, what scopes they have,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
+export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
 
 export const ResourceRefSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")))();
 
-export const ResourceResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup.")))();
+export const ResourceResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Canonical domain of the responding Exchange, in the shape \"Request\n recipient\" defines in the file header. The response counterpart of the\n recipient field on the request: it names who answered."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI (for multi-URI batch queries).\n When populated, `offers` SHOULD be empty to avoid ambiguity.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Flat list of offers (for single-URI queries).").optional(), "rate_limit": z.object({ "limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum requests allowed in the current window.").optional(), "remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Requests remaining in the current window.").optional(), "reset_at": z.string().datetime({ offset: true }).describe("When the current window resets (UTC). After this time, `remaining` resets to `limit`.").optional(), "window": z.string().describe("Duration of the rate limit window (e.g. 60s = per-minute limit).").optional() }).describe("Rate limit status for this caller.\n Present when the Exchange enforces per-caller rate limits on discovery.\n Enables agents/Brokers to throttle proactively rather than hitting\n hard limits. Particularly important when a Broker fans out the\n same batch query to multiple Exchanges — mid-batch rate limiting\n can cause partial results if not signaled early.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceResponse — Exchange returns candidate resource offers.\n\nWhen the ResourceQuery contains multiple URIs, offers are grouped by URI\n via OfferGroup. When a single URI is queried, the Exchange MAY use\n either the flat `offers` field or a single OfferGroup.")))();
 
 export const RestrictionSchema = /* @__PURE__ */ (() => wire(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")))();
 
@@ -200,9 +200,9 @@ export const TermSemanticsSchema = /* @__PURE__ */ (() => wire(z.enum(["TERM_SEM
 
 export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("TransactionDenial — ExecuteTransaction refused the WHOLE request. Reuses the\n DenialReason vocabulary.\n\nThis is the only case an ExecuteTransaction answer is a non-OK error carrying\n a DenialReason: the Exchange refuses the request as a whole and decides no\n item, for a reason about the requester or the request that would deny every\n item alike — for example the requester holds no account\n (ACCOUNT_NOT_REGISTERED), its account is not active (ACCOUNT_INACTIVE), it has\n overdue reports (REPORTING_OVERDUE), or the call is rate limited\n (RATE_LIMITED). On a purchase a Broker relayed, the requester is the agent and\n the account is the agent's, never the Broker's (see \"Accounts\" in the file\n header). Nothing is\n purchased. Every decision about an item is answered in the body instead, on\n TransactionResultItem.denial_reason, whatever the item count: a denied\n one-item purchase is a successful response whose one item is denied, never\n this error. RELAY_NOT_ACCEPTED is a per-item decision and is never carried\n here, and RESTRICTION_NOT_SATISFIED is never sent at all.")))();
 
-export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
+export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
 
-export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange returns an offer for this term iff the scopes in\n the requester's signed request (Requester.scopes) cover ALL of these scopes\n (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}\n + scopes:[\"subscription:...\"].\n\nCoverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes. Declare what the requester can access.\n\nThe Exchange filters its catalog to resources matching these scopes. This\n is the enforcement mechanism for both enterprise RBAC and open-market\n subscription entitlements.\n\n EXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
+export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
 export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index bdb2f386..c9087d7a 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -263,6 +263,26 @@ gated by delegation scope coverage. The Exchange returns an offer for a term whe
 scopes in the requester's signed request (`Requester.scopes`) cover the term's scopes.
 The threat model's scope-pollution and scope-gating entries say the same.
 
+**A requester's scopes are its own statement, and an Exchange may require a verified
+delegation before it presents a scoped term (comments and docs; no wire change).**
+`Requester.scopes` was called "the enforcement mechanism" for enterprise roles and
+subscriptions, and the threat model listed scope pollution as preventable at protocol
+level, yet nothing verifies the scopes a requester states: they are part of its signed
+request, attributable to the signer, and unverified. `Requester.scopes` and
+`LicenseTerm.scopes` now say so. Scope coverage decides which terms an Exchange presents
+(`LicenseTerm.scopes` says "only when" where it said "iff"); it is not access control. A
+false statement is traceable to the signing key, its directory and its account, and the
+agent's acceptance signs the scoped offer it buys; it is settled through reconciliation
+and the account relationship. An Exchange MAY also require a verified delegation that
+grants a term's scopes before it presents the term, and answers a requester that
+presents none as if the term did not exist. An offer the Exchange presented is still
+honoured until it expires, and the purchase-time entitlement denials are unchanged. The
+threat model's scope-pollution entry says what reconciliation compares and moves from
+"Preventable at protocol level" to "Detectable via reconciliation" and
+"Legal/contractual only". The authentication, licensing-terms, ingestion and
+getting-started pages say the same, and the design history records that verifying
+scopes is deferred.
+
 **Restrictions are declared terms, never enforced by the Exchange;
 `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and `TransactionResultItem.restriction_mismatches`
 are deprecated (comments only).** The licensing-core header, the ENUMERATED and
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 2985e1ed..9bf3d19f 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -39,9 +39,10 @@ import "fora/v1/vocab.proto";
 // ============================================================================
 // FORA Authentication Architecture
 //
-// Auth-agnostic protocol. FORA defines WHAT must be verified (scopes,
-// spend caps, expiry, delegation chain). The HOW (authorization flow,
-// token format, signature envelope) is pluggable.
+// Auth-agnostic protocol. FORA defines WHAT must be verified (a delegation's
+// scopes, spend caps, expiry and chain). The HOW (authorization flow, token
+// format, signature envelope) is pluggable. Requester.scopes is the
+// requester's own statement and is not verified (see Requester.scopes).
 //
 // Offer content signatures: hex-encoded detached Ed25519 over RFC 8785
 // JCS of canonical proto-JSON. RFC 9421 HTTP Message Signatures for
@@ -595,7 +596,7 @@ message ResourceQuery {
   // constant; advisory on receive. See "Protocol version" in the file header.
   string ver = 1;
 
-  // Requester identity — who is making this request, what scopes they have,
+  // Requester identity — who is making this request, the scopes it states,
   // and optional delegation chain. REQUIRED: a query names its requester, whose
   // Requester.id and Requester.domain are required in turn.
   Requester requester = 3 [(buf.validate.field).required = true];
@@ -1898,10 +1899,18 @@ message LicenseTerm {
   //     once.
   optional Pricing pricing = 6;
 
-  // Scope-gating: the Exchange returns an offer for this term iff the scopes in
-  // the requester's signed request (Requester.scopes) cover ALL of these scopes
-  // (AND-semantics). Empty = public. A subscription term is Pricing{model:FREE}
-  // + scopes:["subscription:..."].
+  // Scope-gating: the Exchange presents an offer for this term only when the
+  // scopes in the requester's signed request (Requester.scopes) cover ALL of
+  // these scopes (AND-semantics). Empty = public. A subscription term is
+  // Pricing{model:FREE} + scopes:["subscription:..."].
+  //
+  // Requester.scopes is the requester's own statement, which the Exchange does
+  // not verify, so a scope gate hides a term from requesters that do not state
+  // the scope; it does not stop one that states it falsely. An Exchange MAY
+  // also require a verified delegation that grants these scopes before it
+  // presents the term. To a requester that presents none, it answers as if the
+  // term did not exist, as existence hiding requires (see Requester.scopes). An
+  // offer the Exchange presented is honoured until it expires.
   //
   // Coverage uses the SAME matching rule as Requester.scopes:
   // segment-wise (":" separated), each granted segment must equal the
@@ -2115,19 +2124,21 @@ enum DeliveryMethod {
 //
 // Identity is layered:
 //   1. Ed25519 signature proves possession of a registered key
-//   2. Scopes declare what the requester is entitled to access
+//   2. Scopes state what the requester says it is entitled to; the Exchange
+//      does not verify them
 //   3. Delegation chain proves who authorized this requester
 //
-// The Exchange uses scopes to filter the catalog:
+// The Exchange uses scopes to choose which terms it presents:
 //   - A resource outside the requester's scopes is answered with no offers and
 //     no absence reason, so the requester never learns it exists (the
 //     existence-hiding rule, stated on Requester.scopes)
 //   - Subscription entitlements are scopes: "subscription:marketdata-2026"
-//     tells the Exchange to return zero-cost subscription offers
+//     tells the Exchange to present the zero-cost subscription offers
 //
-// Open market: subscription providers mint delegation tokens with scopes.
-// Enterprise: IAM systems mint delegation tokens with role-derived scopes.
-// Same mechanism, different trust domain.
+// A delegation can back the statement where an Exchange requires one (see
+// LicenseTerm.scopes): in the open market a subscription provider mints a
+// delegation token carrying scopes, and in an enterprise an IAM system mints
+// one with role-derived scopes. Same mechanism, different trust domain.
 // ============================================================================
 
 // Requester — Universal identity for any FORA client.
@@ -2136,8 +2147,9 @@ enum DeliveryMethod {
 // entitled to (scopes, delegation). What they are asking for (uris) and the
 // limits they will operate within (acceptable_restrictions) belong to the ask,
 // not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange
-// verifies identity via the RFC 9421 request signature, then filters its
-// catalog by the requester's scopes. Billing needs nothing from this message:
+// verifies identity via the RFC 9421 request signature, then presents the
+// terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing
+// needs nothing from this message:
 // the Exchange resolves the agent's account (RegisterResponse.billing_ref) from
 // what authenticates the agent, never from a value the caller merely states
 // (see "Accounts" in the file header).
@@ -2205,11 +2217,15 @@ message Requester {
   // Human-readable name (e.g., "Acme Research Assistant").
   optional string name = 4;
 
-  // Entitlement scopes. Declare what the requester can access.
-  //
-  // The Exchange filters its catalog to resources matching these scopes. This
-  // is the enforcement mechanism for both enterprise RBAC and open-market
-  // subscription entitlements.
+  // Entitlement scopes: the requester's own statement of what it is entitled
+  // to. On a query a Broker originated, they are the Broker's statement for the
+  // agent. They are signed and attributable, and the Exchange does not verify
+  // them. Scope coverage decides which terms the Exchange presents (see
+  // LicenseTerm.scopes, which also states when an Exchange MAY require a
+  // verified delegation); it is not access control. A false statement is
+  // traceable to the signing key, its directory and its account, and the
+  // agent's acceptance signs the scoped offer it buys; it is settled through
+  // reconciliation and the account relationship.
   //
   // EXISTENCE HIDING. A requester never learns about a resource outside its
   // scopes. When the scopes leave no presentable offer for a resource, the
@@ -3664,7 +3680,7 @@ message DiscoveryRequest {
   // constant; advisory on receive. See "Protocol version" in the file header.
   string ver = 1;
 
-  // Requester identity — who is making this request, what scopes they have.
+  // Requester identity — who is making this request, the scopes it states.
   // The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:
   // a discovery names its requester, whose Requester.id and Requester.domain
   // are required in turn.
diff --git a/website/src/content/docs/architecture/production-architecture.mdx b/website/src/content/docs/architecture/production-architecture.mdx
index 291ef268..ad0ec0ea 100644
--- a/website/src/content/docs/architecture/production-architecture.mdx
+++ b/website/src/content/docs/architecture/production-architecture.mdx
@@ -62,7 +62,7 @@ Every party in the protocol authenticates via Ed25519 key pairs. Each party anno
 - **Requester signature** — Exchange verifies the RFC 9421 HTTP Message Signature on the request (carried in HTTP headers, not a message field) against the requester's published Ed25519 key in its WBA directory (the JWK Set at `/.well-known/http-message-signatures-directory`), the key identified by its RFC 7638 thumbprint (the RFC 9421 `keyid`)
 - **Forwarding** — on a request a Broker sent, the Exchange verifies the Broker's own RFC 9421 HTTP Message Signature and, on a purchase, the agent's `AgentAcceptance` in the body against the agent's registered key (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding))
 - **Delegation JWT** — when a `Delegation` token is attached, Exchange verifies the authority JWT signature against the principal's published Ed25519 key (`principal_domain`)
-- **Scope-based access control** — Exchange filters its catalog by the requester's `scopes`. Resources outside the requester's scopes are not returned (the requester never learns they exist)
+- **Scope-based term selection** — Exchange presents the terms the requester's stated `scopes` cover. Terms outside them are not returned (the requester never learns they exist). The scopes are the requester's statement, not a verified grant; an Exchange may require a verified delegation before it presents a scoped term
 
 ### Supported Transaction Patterns
 
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 70ee09fe..6a0dbeb7 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -195,7 +195,7 @@ The Broker queries its Exchanges as it would without the profile, and each query
 
 ### Scope Forwarding
 
-The Broker forwards `Requester.scopes` to every Exchange it queries. Scopes control what the requester can access -- the Exchange filters its catalog to resources matching these scopes. The Broker does not modify scopes; it passes them through as-is.
+The Broker forwards `Requester.scopes` to every Exchange it queries. Scopes decide which terms each Exchange presents; they are the agent's statement, and the Exchange does not verify them. The Broker does not modify scopes; it passes them through as-is.
 
 ### Delegation Pass-Through
 
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index 9619027f..b9dc357e 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -141,10 +141,12 @@ func (h *ExchangeHandler) DiscoverResources(
     // per-tenant RPS caps) belongs in HAProxy/Envoy/API Gateway in front of this service.
 
     // 5. Catalog lookup (lock-free read, scope-filtered)
-    //    The catalog is filtered by requester.scopes — resources outside the
-    //    requester's declared scopes are not returned. If a delegation
-    //    is present, effective scopes are the intersection of requester.scopes
-    //    and the delegation's granted scopes.
+    //    The catalog is filtered by requester.scopes, the requester's own
+    //    statement — terms outside the stated scopes are not returned. When the
+    //    request carries a verified delegation, this Exchange also requires its
+    //    grant to cover a term's scopes (a narrower use of the MAY in
+    //    LicenseTerm.scopes): the effective scopes are the intersection of
+    //    requester.scopes and the delegation's granted scopes.
     effectiveScopes := requester.Scopes
     if requester.Delegation != nil {
         effectiveScopes = intersectScopes(requester.Scopes, requester.Delegation.Scopes)
diff --git a/website/src/content/docs/getting-started/for-ai-agents.mdx b/website/src/content/docs/getting-started/for-ai-agents.mdx
index 2ceebe32..5397a76c 100644
--- a/website/src/content/docs/getting-started/for-ai-agents.mdx
+++ b/website/src/content/docs/getting-started/for-ai-agents.mdx
@@ -141,7 +141,7 @@ Choose the type that matches your agent's operating mode:
 
 ### Scopes
 
-Scopes declare what your agent is entitled to access. The Exchange filters its catalog by your scopes — resources outside your scopes are not returned.
+Scopes state what your agent is entitled to. The Exchange presents the terms your stated scopes cover, and terms outside them are not returned. The scopes are your own statement, signed and attributable to your account, and the Exchange does not verify them, so state only what you hold. An Exchange may also require a verified delegation before it presents a scoped term.
 
 | Scope Pattern | Meaning |
 |---|---|
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index e5d178a0..689d7d0c 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -168,7 +168,7 @@ This verification is entirely offline — no callback to the principal is requir
 
 ### Scope-Based Catalog Filtering
 
-After verifying identity and delegation, filter your catalog by the requester's declared scopes. Only resources matching the scopes are returned in the `DiscoverResources` response.
+After verifying identity (and any delegation, as above), present the terms the requester's stated scopes cover; only those reach the `DiscoverResources` response. The scopes are the requester's own statement and you do not verify them. If a term must not be presented on a statement alone, require a verified delegation that grants its scopes, and answer a requester without one as if the term did not exist.
 
 For a resource that exists but falls outside the requester's scopes, answer exactly as for a resource you have nothing to offer for: an `OfferGroup` with no offers and `absence_reason` unset. Do not reveal that the resource exists, and do not send a reason that tells the two cases apart. This applies to enterprise RBAC and public marketplace subscriptions alike (see [Existence hiding](/protocol/authentication/#existence-hiding)).
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 34ac7b5b..acac8276 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -25,7 +25,7 @@ Every query and every purchase (`ResourceQuery`, `DiscoveryRequest` and `Transac
 | `domain` | `string` | **Required**, a bare host (a port allowed). The requester's own domain, the host of its key directory `{domain}/.well-known/http-message-signatures-directory`. It is never a free label, but it is **not** where request-signing keys are looked up — that is the covered `Signature-Agent` member (see [Key Lookup](#key-lookup)). On a direct request it must name the same directory that member names. On a purchase a Broker re-packaged, the Exchange resolves the key that verifies the agent's `AgentAcceptance` from this domain, and the claim is authenticated only if that signature verifies |
 | `type` | `RequesterType` | What kind of entity is making the request |
 | `name` | `string` (optional) | Human-readable name (e.g., `"Acme Research Assistant"`) |
-| `scopes` | `repeated string` | Entitlement scopes — what the requester can access |
+| `scopes` | `repeated string` | Entitlement scopes the requester states; the Exchange does not verify them (see [Scope-Based Access](#scope-based-access)) |
 | `delegation` | `Delegation` (optional) | Holder-bound JWT delegation token from a principal |
 | `ext` | `Struct` | Implementer-specific extensions |
 | `ext_critical` | `repeated string` | Critical extension keys (COSE crit pattern) |
@@ -268,11 +268,13 @@ All use Ed25519 natively — the same key type as FORA identity signatures — s
 
 ## Scope-Based Access
 
-Scopes are the mechanism by which the Exchange decides what resources to show a requester. The flow is:
+Scopes are how the Exchange decides which terms to present to a requester. They are the requester's own statement of what it is entitled to, part of its signed request, attributable to the signer, and not verified by the Exchange; on a query a Broker originated, they are the Broker's statement for the agent. The flow is:
 
 1. Agent sends `ResourceQuery` with `Requester.scopes` (and optionally a `Delegation` that also carries scopes)
-2. Exchange filters its catalog — only resources matching the declared scopes are returned
-3. Resources outside the scopes are **not returned**. The requester never learns they exist (see [Existence hiding](#existence-hiding)).
+2. Exchange presents an offer for a term only when the stated scopes cover the term's `LicenseTerm.scopes`
+3. Terms the scopes do not cover are **not returned**. The requester never learns they exist (see [Existence hiding](#existence-hiding)).
+
+Scope coverage is not access control: it hides a term from a requester that does not state the scope, and it does not stop one that states it falsely. A false statement is traceable to the signing key, its directory and its [account](#accounts), and the agent's acceptance signs the scoped offer it buys, so it is settled through reconciliation and the account relationship. An Exchange **MAY** also require a verified delegation that grants a term's scopes before it presents the term; to a requester that presents none, it answers as if the term did not exist.
 
 ### Scope Format
 
@@ -304,9 +306,9 @@ Matching is **segment-wise** (`:`-separated). A granted scope **G** covers a req
 
 **No scopes (empty):** Exchange applies its default access policy — typically all publicly available resources. This is the common case for public agents.
 
-**Subscription scopes:** A scope like `subscription:nyt-2026` signals that the requester has a subscription entitlement. The Exchange returns subscription pricing (zero marginal cost) instead of per-request pricing.
+**Subscription scopes:** A scope like `subscription:nyt-2026` states that the requester holds a subscription entitlement. The Exchange presents the subscription terms that scope covers (zero marginal cost) instead of per-request pricing. An Exchange that requires proof of the subscription presents them only with a verified delegation that grants the scope.
 
-**Enterprise scopes:** Specific `{domain}:{permission}` scopes grant access to restricted resources. The Exchange enforces RBAC by filtering the catalog to matching resources.
+**Enterprise scopes:** Specific `{domain}:{permission}` scopes state roles, and the Exchange presents the restricted terms they cover. The enterprise's own policy point, typically its Broker, decides which scopes a user's request carries; the Exchange does not verify them, and may require a verified delegation for the terms it must not present on a statement alone.
 
 ### Existence hiding
 
@@ -314,6 +316,7 @@ A requester never learns about a resource outside its scopes. This is a rule of
 
 - **At discovery:** when the requester's scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason (an `OfferGroup` with empty `offers` and `absence_reason` unset), exactly as for any resource with nothing to offer. A Broker relaying that answer adds no reason of its own.
 - **At purchase:** an offer the Exchange presented is honoured until it expires, so a purchase is never refused for scope.
+- **With a delegation required:** an Exchange that requires a verified delegation before it presents a scoped term answers a requester that presents none as if the term did not exist.
 
 No `OfferAbsenceReason` or `DenialReason` value reports a scope shortfall. The two values that once did are deprecated and never sent, and a receiver treats them as unknown.
 
diff --git a/website/src/content/docs/protocol/jsonl-ingestion.mdx b/website/src/content/docs/protocol/jsonl-ingestion.mdx
index 20ddafc6..109dabb9 100644
--- a/website/src/content/docs/protocol/jsonl-ingestion.mdx
+++ b/website/src/content/docs/protocol/jsonl-ingestion.mdx
@@ -57,7 +57,7 @@ Every length bound below is in **characters — Unicode code points, not bytes**
 | `pricing` | `{model, unit, rate, currency}` | `LicenseTerm.pricing` (`model` ∈ `free` \| `per_unit` \| `flat`) |
 | `quotas` | `[{metric, limit, window}]` (≤ 64) | `LicenseTerm.Quota[]` |
 | `obligations` | `[{kind, trigger, scope_license, detail}]` (≤ 64) | `LicenseTerm.Obligation[]` |
-| `scopes` | string[] (≤ 64) | `LicenseTerm.scopes` (entitlement-gated, e.g. `subscription:premium`) |
+| `scopes` | string[] (≤ 64) | `LicenseTerm.scopes` (scope-gated: presented to requesters whose stated scopes cover it, e.g. `subscription:premium`) |
 
 Rules (enforced by protovalidate at the RPC boundary):
 
diff --git a/website/src/content/docs/protocol/licensing-terms.mdx b/website/src/content/docs/protocol/licensing-terms.mdx
index a064863d..612d6375 100644
--- a/website/src/content/docs/protocol/licensing-terms.mdx
+++ b/website/src/content/docs/protocol/licensing-terms.mdx
@@ -116,9 +116,11 @@ FORA has no revenue-share pricing model, and that is deliberate. `PricingModel`
 Instead, a revenue-share arrangement is expressed with primitives already in the core, exactly like a subscription:
 
 - A `Pricing{model: FREE}` term — there is no per-access charge.
-- Gated by an agreement scope, e.g. `scopes: ["revshare:publisher-x"]`. The agent that has signed the deal states the matching scope in its signed request (`Requester.scopes`); everyone else never sees the term.
+- Gated by an agreement scope, e.g. `scopes: ["revshare:publisher-x"]`. The agent that has signed the deal states the matching scope in its signed request (`Requester.scopes`); an agent that does not state it never sees the term.
 - A `ReportingObligation` (the offer-level reporting requirement) so usage is reported. Revenue is then settled off-protocol from those reports.
 
+A scope gate decides which terms are presented; it is not access control. The Exchange does not verify `Requester.scopes`, so an agent that states the scope without being party to the deal also sees the term. Its purchase is attributable to its account, and reconciling purchases against the deal's parties exposes it. A publisher that needs the term withheld from such an agent sells it through an Exchange that requires a verified delegation granting the scope before it presents the term (see [Scope-Based Access](/protocol/authentication/#scope-based-access)).
+
 So "pay per crawl **or** enter the revenue-share deal" is just two `LicenseTerm`s on the same resource: a public `PER_UNIT` term and a scope-gated `FREE` term. They reach the agent as two offers, and the agent buys one of them. This is the same shape as the [academic dataset subscription example](#academic-dataset--seat-quota--share-alike) below.
 
 For CoMP interop there is nothing to carry: canonical CoMP V1 has no `revshare` field, and the `fora-comp-v1` profile's keys are flat dotted keys in `ext` (`comp.package_id`, `comp.countries`, …), like every other profile's — see [CoMP extension](/protocol/ext-comp/#license-on-offerext).
@@ -266,7 +268,7 @@ obligations:
     detail: "Trained models using this dataset must be released under CC-BY-NC-SA 4.0"
 ```
 
-The institutional subscription is settled off-protocol; access is gated on-protocol by the `subscription:institution` scope (the term is `model: FREE` because there is no per-access charge — the subscribing institution's delegation JWT carries the matching scope). Up to 10 researchers in the subscribing institution can use the dataset. Any model trained on this dataset that is released publicly must carry the same license.
+The institutional subscription is settled off-protocol; on-protocol, the term is presented to an agent whose request states the `subscription:institution` scope (the term is `model: FREE` because there is no per-access charge). An Exchange that requires proof presents it only with the subscribing institution's delegation JWT, which carries the matching scope. Up to 10 researchers in the subscribing institution can use the dataset. Any model trained on this dataset that is released publicly must carry the same license.
 
 ## Vocabulary registry
 
diff --git a/website/src/content/docs/protocol/standards-layering.mdx b/website/src/content/docs/protocol/standards-layering.mdx
index 0324000c..de271fbe 100644
--- a/website/src/content/docs/protocol/standards-layering.mdx
+++ b/website/src/content/docs/protocol/standards-layering.mdx
@@ -92,7 +92,7 @@ graph LR
 
 | Role | Description | Standard |
 |---|---|---|
-| **AI Agent** | The LLM, RAG system, or agentic application that needs content. Authenticates via Ed25519 signatures. Identity is the RFC 9421 request signature and access is scopes + delegation. | CoMP: "Requesting Party". FORA v1.0 uses the `Requester` message (not CoMP `AISystem`); CoMP's `lid` is a public agent identifier with no counterpart field on the FORA request — not a credential. |
+| **AI Agent** | The LLM, RAG system, or agentic application that needs content. Authenticates via Ed25519 signatures. Identity is the RFC 9421 request signature; the scopes it states decide which terms it is shown, and a delegation can back them where an Exchange requires one. | CoMP: "Requesting Party". FORA v1.0 uses the `Requester` message (not CoMP `AISystem`); CoMP's `lid` is a public agent identifier with no counterpart field on the FORA request — not a credential. |
 | **FORA Broker** | Optional demand-side router. Queries multiple Exchanges, compares offers by unit_cost, deduplicates by ResourceIdentity, enforces budget constraints. | FORA v1.0: "FORA Broker" |
 | **Exchange** | Exposes resource catalog with pricing. Authorizes transactions. Issues delivery instructions (signed URLs). | FORA v1.0: "Exchange"; implementation of CoMP endpoints |
 | **Resource Provider** | The provider. Owns the resources, sets terms via RSL. | CoMP: "Content Owner"; RSL: "Licensor" |
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index e60fe2ea..d3d7919b 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -269,6 +269,26 @@ gated by delegation scope coverage. The Exchange returns an offer for a term whe
 scopes in the requester's signed request (`Requester.scopes`) cover the term's scopes.
 The threat model's scope-pollution and scope-gating entries say the same.
 
+**A requester's scopes are its own statement, and an Exchange may require a verified
+delegation before it presents a scoped term (comments and docs; no wire change).**
+`Requester.scopes` was called "the enforcement mechanism" for enterprise roles and
+subscriptions, and the threat model listed scope pollution as preventable at protocol
+level, yet nothing verifies the scopes a requester states: they are part of its signed
+request, attributable to the signer, and unverified. `Requester.scopes` and
+`LicenseTerm.scopes` now say so. Scope coverage decides which terms an Exchange presents
+(`LicenseTerm.scopes` says "only when" where it said "iff"); it is not access control. A
+false statement is traceable to the signing key, its directory and its account, and the
+agent's acceptance signs the scoped offer it buys; it is settled through reconciliation
+and the account relationship. An Exchange MAY also require a verified delegation that
+grants a term's scopes before it presents the term, and answers a requester that
+presents none as if the term did not exist. An offer the Exchange presented is still
+honoured until it expires, and the purchase-time entitlement denials are unchanged. The
+threat model's scope-pollution entry says what reconciliation compares and moves from
+"Preventable at protocol level" to "Detectable via reconciliation" and
+"Legal/contractual only". The authentication, licensing-terms, ingestion and
+getting-started pages say the same, and the design history records that verifying
+scopes is deferred.
+
 **Restrictions are declared terms, never enforced by the Exchange;
 `DENIAL_REASON_RESTRICTION_NOT_SATISFIED` and `TransactionResultItem.restriction_mismatches`
 are deprecated (comments only).** The licensing-core header, the ENUMERATED and
diff --git a/website/src/content/docs/reference/proto-fora.mdx b/website/src/content/docs/reference/proto-fora.mdx
index be28c000..d6afdba2 100644
--- a/website/src/content/docs/reference/proto-fora.mdx
+++ b/website/src/content/docs/reference/proto-fora.mdx
@@ -84,7 +84,7 @@ Identity and entitlements only — who is asking and what they're entitled to. W
 
 `id` and `domain` are both required. `domain` is the host of the requester's key directory and is never a free label: on a direct request a verifier resolves the agent's keys from the covered `Signature-Agent` header and requires `domain` to name that same directory, refusing a mismatch as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`; on a purchase relayed through `BrokerService.ExecuteTransaction`, the Exchange verifies the agent's acceptances against the directory `domain` names, because the request signature there is the Broker's. `id` is a free label the agent chooses for attribution, such as which sub-agent or end customer is asking; it is never identity, never used to find keys, never selects an account, and never trusted. See [Requester domain and the key directory](/protocol/authentication/#requester-domain-and-the-key-directory) and [Accounts](/protocol/authentication/#accounts).
 
-`scopes` hides existence: a requester never learns about a resource outside its scopes. When the scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason, exactly as for any resource with nothing to offer, and an offer it presented is honoured until it expires. See [Existence hiding](/protocol/authentication/#existence-hiding).
+`scopes` is the requester's own statement, which the Exchange does not verify, and decides which terms are presented; an Exchange may also require a verified delegation before it presents a scoped term. It hides existence: a requester never learns about a resource outside its scopes. When the scopes leave no presentable offer for a resource, the Exchange answers with no offers and no absence reason, exactly as for any resource with nothing to offer, and an offer it presented is honoured until it expires. See [Existence hiding](/protocol/authentication/#existence-hiding).
 
 ::proto-message{name=Requester}
 
diff --git a/website/src/content/docs/security/threat-model.mdx b/website/src/content/docs/security/threat-model.mdx
index 77300521..e7867ef9 100644
--- a/website/src/content/docs/security/threat-model.mdx
+++ b/website/src/content/docs/security/threat-model.mdx
@@ -185,9 +185,9 @@ This single pattern accounts for most ad-tech fraud: domain spoofing (self-repor
 
 | Level | Threat IDs | What It Means |
 |---|---|---|
-| **Preventable at protocol level** | T3, T4, T5, T6, T7, T8, T9, T12, T16, T19, T22, T23, T24, T25, T26, T-BRK-1, T-ATT-1, T-ATT-2, T-ATT-3, T-ATT-5, T-DEL-1, T-DEL-2, T-DEL-3, T-DEL-4, T-DEL-5, T-DEL-6 | Protocol changes make the attack structurally impossible |
-| **Detectable via reconciliation** | T1, T2, T4, T5, T13, T14, T15, T17, T27, T-ATT-4 | Three-sided reconciliation catches it |
-| **Legal/contractual only** | T10, T11, T13, T17, T18, T20, T21, T28, T29, T30 | Can't enforce technically |
+| **Preventable at protocol level** | T3, T4, T5, T6, T7, T8, T9, T12, T16, T19, T22, T23, T24, T25, T26, T-BRK-1, T-ATT-1, T-ATT-2, T-ATT-3, T-ATT-5, T-DEL-1, T-DEL-2, T-DEL-3, T-DEL-4, T-DEL-6 | Protocol changes make the attack structurally impossible |
+| **Detectable via reconciliation** | T1, T2, T4, T5, T13, T14, T15, T17, T27, T-ATT-4, T-DEL-5 | Three-sided reconciliation catches it |
+| **Legal/contractual only** | T10, T11, T13, T17, T18, T20, T21, T28, T29, T30, T-DEL-5 | Can't enforce technically |
 
 ### The Three Lines of Defense
 
@@ -244,12 +244,12 @@ Line 3: Legal/contractual enforcement
 ### T-DEL-1: Delegation token theft
 
 **Attack**: Attacker steals a delegation token (e.g., via log exfiltration, memory dump, or network interception) and attempts to use it to access resources within the token's scope.
-**Countermeasure (protocol)**: **Holder binding neutralizes theft.** A delegation token is bound to the holder's key (via `cnf.jkt` on the JWT), and verification requires the key that signs the HTTP request ([RFC 9421](/protocol/authentication/#request-signatures-rfc-9421)) to equal the bound key (see [Verification](/protocol/authentication/#verification) step 3). A thief who steals the token bytes but not the private signing key cannot produce a valid request — the token is **not bearer-usable**, so theft alone grants nothing. Spend caps (`max_spend_cents`), access caps (`max_accesses`), short TTLs, and optional `revocation_uri` checking are **defense-in-depth** that bound the blast radius in the residual case where the holder's signing key is *also* compromised. This is why T-DEL-1 is listed as structurally preventable rather than merely mitigated.
+**Countermeasure (protocol)**: **Holder binding neutralizes theft.** A delegation token is bound to the holder's key (via `cnf.jkt` on the JWT), and verification requires the key the request proves possession of — the key that signs the HTTP request ([RFC 9421](/protocol/authentication/#request-signatures-rfc-9421)) on a direct call, the key the agent's `AgentAcceptance` verifies under on a purchase a Broker relays — to equal the bound key (see [Verification](/protocol/authentication/#verification) step 3). A thief who steals the token bytes but not the private signing key cannot produce a valid request — the token is **not bearer-usable**, so theft alone grants nothing. Spend caps (`max_spend_cents`), access caps (`max_accesses`), short TTLs, and optional `revocation_uri` checking are **defense-in-depth** that bound the blast radius in the residual case where the holder's signing key is *also* compromised. This is why T-DEL-1 is listed as structurally preventable rather than merely mitigated.
 
 ### T-DEL-2: Delegation scope escalation
 
 **Attack**: Attacker attempts to widen permissions by manipulating the delegation chain (e.g., editing a child JWT to escalate from `ai-search` to `ai-train`, or splicing in a forged link).
-**Countermeasure (protocol)**: **The delegation chain narrows only, and is cryptographically linked.** Each delegation JWT is Ed25519-signed, and a child's `scope` MUST be covered by its parent's (verified) — it can narrow, never widen. The **chain-linkage invariant** requires each JWT to be signed by the key the parent named in `cnf`; editing or splicing a link breaks signature verification against the upstream `cnf`. The Exchange verifies the full chain (and the request-signing key against the final `cnf.jkt`) before granting access.
+**Countermeasure (protocol)**: **The delegation chain narrows only, and is cryptographically linked.** Each delegation JWT is Ed25519-signed, and a child's `scope` MUST be covered by its parent's (verified) — it can narrow, never widen. The **chain-linkage invariant** requires each JWT to be signed by the key the parent named in `cnf`; editing or splicing a link breaks signature verification against the upstream `cnf`. The Exchange verifies the full chain (and the key the request proves possession of against the final `cnf.jkt`) before honouring the delegation.
 
 ### T-DEL-3: Revocation bypass
 
@@ -266,7 +266,7 @@ FORA's Broker never forwards an agent's request unchanged: it originates discove
 ### T-DEL-5: Scope pollution
 
 **Attack**: Agent declares scopes it doesn't actually have, hoping the Exchange returns premium content.
-**Countermeasure (protocol)**: The Exchange returns an offer for a term only when the scopes in the requester's signed request (`Requester.scopes`) cover the term's `LicenseTerm.scopes`. Those scopes are part of the request the agent signs, so they are the signer's own statement under its RFC 9421 signature.
+**Countermeasure (reconciliation + contractual)**: `Requester.scopes` is the requester's own statement, signed and attributable, and the Exchange does not verify it. The Exchange presents an offer for a term only when the stated scopes cover the term's `LicenseTerm.scopes`, which hides the term from a requester that does not state the scope but does not stop one that states it falsely, so a false statement is detected and settled rather than prevented. For every scoped term an account bought, the transaction record holds the Exchange-signed offer and the agent's acceptance of it, attributed to the signing key, its directory and its [account](/protocol/authentication/#accounts). Reconciling those purchases against what the term's issuer actually granted that account, such as a subscription roster, a revenue-share agreement or an enterprise grant, exposes a scope the agent never held, and the account relationship and the term's contract settle it. An Exchange that needs prevention MAY require a verified delegation that grants a term's scopes before it presents the term ([Delegation](/protocol/authentication/#delegation)), and answers a requester without one as if the term did not exist. Verifying stated scopes is deferred, not designed out.
 
 ### T-DEL-6: Quota gaming via multiple tokens
 

From a6c75974d76bf4e2cb31f4b24d3d6fcc7ab56f78 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 13:00:32 +0200
Subject: [PATCH 158/164] Answer a query a Broker originated as if it carried
 no delegation, in the protocol

A delegation's holder binding needs a key the request proves
possession of: the request signature on a request the agent sends
itself, the agent's acceptances on a purchase a Broker relays. A
query a Broker originated has neither, because the Broker signs it
alone and is never delegated to. The pages left the outcome open, and
the academic walkthrough had an Exchange verify a delegation against
the key that signed a query the Broker sent, which can only fail.

The Exchange does not honour such a delegation and answers as if none
were present, so the query gets what a query without a delegation
gets. An Exchange that requires a verified delegation before it
presents a scoped term therefore presents no such term on that query,
and an agent that needs those terms queries the Exchange directly. How
an agent proves a holder-of-key entitlement at discovery time through
a Broker stays an open protocol question.

The Delegation, Requester.delegation and Requester.domain comments
state the rule, and max_hops no longer says its open question is
tracked elsewhere. The request-flows discovery sample tells a direct
query from one a Broker originated and admits the Broker, verifies a
delegation and consults an account only on a direct query, and
resolves that account from the directory rather than the key. The
academic walkthrough states the subscription scope its term requires
and verifies the delegation at purchase, and its balance check names
the directory's account. The enterprise guide has the Broker verify
the IAM delegation and state the scopes. The design history records
the rule. Comments only in the proto; regenerated artifacts carry the
new text.
---
 docs/design-history.md                        |  32 +++++-
 gen/descriptor.binpb                          | Bin 696381 -> 697103 bytes
 gen/go/fora/v1/fora.pb.go                     |  21 +++-
 gen/jsonschema/fora.v1.Delegation.schema.json |   2 +-
 .../fora.v1.Delegation.schema.strict.json     |   2 +-
 .../fora.v1.DiscoveryRequest.schema.json      |   8 +-
 ...ora.v1.DiscoveryRequest.schema.strict.json |   8 +-
 .../fora.v1.RequestConstraints.schema.json    |   2 +-
 ...a.v1.RequestConstraints.schema.strict.json |   2 +-
 gen/jsonschema/fora.v1.Requester.schema.json  |   6 +-
 .../fora.v1.Requester.schema.strict.json      |   6 +-
 .../fora.v1.ResourceQuery.schema.json         |   6 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   6 +-
 .../fora.v1.TransactionRequest.schema.json    |   6 +-
 ...a.v1.TransactionRequest.schema.strict.json |   6 +-
 gen/python/wire/models.py                     |   6 +-
 gen/ts/wire/schemas.ts                        |  12 +--
 proto/CHANGELOG.md                            |   9 +-
 proto/fora/v1/fora.proto                      |  21 +++-
 .../docs/components/broker/overview.mdx       |   6 +-
 .../docs/components/exchange/overview.mdx     |   2 +-
 .../components/exchange/request-flows.mdx     |  94 +++++++++++-------
 .../docs/getting-started/enterprise.mdx       |  12 +--
 .../for-exchange-operators.mdx                |   2 +-
 .../content/docs/protocol/authentication.mdx  |   6 +-
 .../docs/protocol/scenario-walkthrough.mdx    |   2 +-
 .../docs/protocol/walkthrough-academic.mdx    |  28 +++---
 .../src/content/docs/reference/changelog.mdx  |   9 +-
 28 files changed, 197 insertions(+), 125 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 23f1217f..81713e4a 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -673,9 +673,12 @@ contiguous, with no gaps or reused numbers left by the removals.
 > key the token names. On a purchase a Broker relays, the Broker signs the request,
 > so the Exchange checks the holder binding against the key each item's
 > `AgentAcceptance` verifies under, and an item without one fails it. A Broker is
-> never delegated to. How an agent proves a holder-of-key entitlement at discovery
-> time through a Broker is an open protocol question. See "A Broker signs alone,
-> because it changes what the agent signed".
+> never delegated to. On a query a Broker originated, nothing can pass the holder
+> binding, so the Exchange does not honour the delegation and answers as if none were
+> present. How an agent proves a holder-of-key entitlement at discovery time through a
+> Broker is an open protocol question. See "A Broker signs alone, because it changes
+> what the agent signed" and "A delegation on a query a Broker originated is not
+> honoured".
 
 Delegation tokens stay opaque on the wire — FORA does not parse or re-encode the
 token, and `token_format` only names which verifier to run. But leaving the
@@ -2822,3 +2825,26 @@ check for every scoped term, such as a delegation from an issuer it trusts for t
 scope, and, on a query a Broker originated, a way for the agent to prove it holds that
 grant, which a request the Broker signs alone cannot carry. The purchase-time
 entitlement denials are unchanged.
+
+## A delegation on a query a Broker originated is not honoured
+
+A delegation's holder binding needs a key the request proves possession of: the request
+signature on a request the agent sends itself, the agent's acceptances on a purchase a
+Broker relays. A query a Broker originated has neither. The Broker signs it alone, as "A
+Broker signs alone, because it changes what the agent signed" records, and a Broker is
+never delegated to, so no delegation on that query can pass the binding. The pages left
+the outcome open, and the academic walkthrough had an Exchange verify a delegation
+against the key that signed a query the Broker sent, a check that can only fail.
+
+The Exchange does not honour such a delegation and answers as if none were present. That
+gives the Broker's query exactly what a query without a delegation gets, so ignoring the
+token discloses nothing, and existence hiding keeps the omission silent. Refusing the
+query instead would fail every resource in it over a credential the Exchange cannot
+check. A delegation still counts on a purchase through a Broker, where the holder
+binding is checked against the key the acceptances verify under.
+
+An Exchange that requires a verified delegation before it presents a scoped term
+therefore presents no such term on a Broker's query. An agent that needs those terms
+queries the Exchange directly, signing the query itself. How an agent proves a
+holder-of-key entitlement at discovery time through a Broker remains an open protocol
+question.
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index c8c726b4d986eb2401eda76ce7228c5b96b378d0..34d4a587e9c6d79d85b985bff5a1fa59e11a47fd 100644
GIT binary patch
delta 33623
zcmajIcbrs3);B(V>FK%mf-rrjyJtF1$C(ZjB&Qjo5d*r0b=_TERMz!T!4=$f*L|J=
z6-E#g6et17D9DN+sd30ThXDixMMV&hBsnSkzNe}#cc0(;c|R{7{+M&_Ip3-}b?Vfq
zaBnYJo_=?2y5F0&H<dRVylJ18JNO~x^$FP_59Q`g&{utD=y^u2FK0#V*t5CWv1c7i
z7u!x}AD@-?wO){Q>2`a*Vly1$oyrua-S@GJJ#b77WuL9fTcy>6JBOd?`9jZUd-Q#-
zcds!1_j%>%zl3{)|N2VLm;Vudu1~mE@4n%`^zPOBm6v-y6HfN&*;5bGzuRsqr7Cp&
z7Co2B$TjRJL^Vkpky;azY(S(@pf?f1D%Gf)Yl^dhZs;nhtF>BV!!f~WpX|)low{c7
zpg7U#Fd%l5<uGz5IUUPvdVAhF#jt<OX06Vve(GbVVit%t+dp>ZyJYzaU_N#h7MY|<
zr1v&GpBJv6@O<L<x}qE%MRSflhj^Vj>v!;S05OBzzb5al>KRVOY<2@Qdxo>2Qvx?Y
zu``^8$0SL|>GkPLMMu~T`|j+{HF=%%p1Um!J1}-z7<ORnb{b|~?ZDXW^amuQ9aZ1$
z4BjJcWJlEvSYWp^)J>n`;1vbjVW*Pttx?$Dx97c96Yk#YW~cTDcX_$@^F3eI!@XaA
z?%C&h_2`S9eXj5Szq8B2PxXAd$18n$hWq}dr&I~|dG6U>eZoCn=-sPlxJR#N$UFY>
zT(4&V)eB-h`i9|3;ir4_3cu8&PalBxf$zNVOi%sg@KewAdIpm1*|zZxPqGId{u$c6
z;7)(<`Et+jOE35A)3aA!?qUDoT-l$u=bf-sqb;Vja~;&QhHhz#Tv+O`(-SsHSn9Ad
z7T1fp86bPq$<7RO_*&*G4o)eiQ611c>hzjMbwKl|vpAw(w{g`x!+y%i{yNBUrE9*D
zhh95n)gce&J!SP)9*|BsjgYKE9*|BsBQgD6UCGrA$6062bvAWZ-aSpuI&%%ZOt<Ii
z3jFFEyS^*0B6QBF@H!9^y?D-99M*5+GJw6nx_y~<N9cl6;r;{}8)Pn!KM5I7m)K_{
zbIGarsRocyi0cd$>)kjG>T`t|yYuc1U2%%$L#6>_u8>c`vq7SP*Vw;y=iL>$=2UzV
z#}1im&R|I5pw+*!gTP7r>QuZ^CKoclIs-xdx(6su!||DsbJ(!?PJ6Ns?aAw#Tl4?&
zyrl5P@)zKR&pg-X>E3@s<VltNU%aj?+^07@`G3VMoxB%LN1=-Q9rrouat(St+m3zr
zileYbL@|;j&+XBx4;-(L9=2TZe|cg>_^#f6hg7)7v*edAy^MOn^MyaZT;BW7<<Iy0
zM;MQu>-$2_7fGZ?U)^dzxbJf>(#Uza_bbm*Jniyw9*sE+GPb!;^F34%?%XSU`>Rj?
zrAM!4F$Vb9dAa9bUwIDW0OGL0bANu0EOIl>VmSV}H%1ETF9!<=!d@>ytZ&bkUu5kT
z<oTMC-Ch=wH^qAO7Ga&FZjMwQ;SsyDYroDbw>SCBP!0VaxW1Eob2d}H&%3XDwjrZA
znDEBghQ_;{WZ+b@4RrhOxC$Q5W&ip<@AnmREfpJa4NVMHr(%Q3T%*XV52q34Bqz<X
z+=F@VS7i-3yupN%WepijK>{Lc$Uq1Z5Lp9G`x}k`s*deCnD=l+ogthbuoQpmj6ew=
zjUY+LNTv0DqEtBgQugQ%d9PP5wMwP%yVPiyFLfyVE;XDYs5li0ze^1Sm7xkR7Q(Bu
z?n8M^Y}KnRj9g+{7!;UR8_uAF%mv13BOKAk3Jk=ejoBWD^MbajjTQ!lsEtO$m{g(=
zwb6**YLdX%Xf$uhCq1Wv2(^XP{g_u>zQs`TqzuKPErxoFNkV0dk?+*|@|t7fsAusb
zd4H>@x4KD%O1;%hDpcyJo4ybR(=fBJ^+)m+RqwVcs-dyFt!~l)vD+|AgK2=+O$M7L
zAaujNpDjO{_eu4B3ql9PehWee#D1%%bwKPl{6QYbok~N)e!$>?oGm|==cqhj$T*Hi
zP&{DBI1Unu2MjZgJC#O;{gA=qI6L)Io}<Gds|JlwgF{vg8Ug5#A;UNn0d&Yf7++{d
z9B*hi&KNm2vdxa?wN{KXMs5@R5d_YLG+53WN{EGCRPRrK1PEvm9YMm$&(bjY1eSm_
zo?c+5PUii)_=2JEfk8|NT_B6^7eXMfu!X1czA3(9C<WA$5TfC7#qbpBZwn#R?iV)i
zbl%X=FBTF7^<N07nwJJ&zs{cgIj>{*x}oqq2tX9nuN%mNE;K;98X1nk1vxCc^yj?u
zHs|1i+(P|FDxeWH?Ck=!>TKST;<pQw2(JdX(0;ohp3pxQQfSaSY{R*{>Ba99$a$<0
zZ_qmhn8&sYA?UovhMmvbQT$$k!bb$~sX^}*U_@*ZLTJz^*8f7@mhh+oIRiD~v(%^p
z%s}Uw&>Uqr78c|z%l5jMcQ!A7VS!qxPl2-Cpvo>{FI~_3sQaP<8M44c<rWoa1|JI`
zQNp4Ew@A!DVlXT!DD1?uC?b)4qDqSjiaP3TIVjYZvL21qmMsmQ+b*@BDYPvu&_wcp
zr+{8c4PNC%H48B37v%h!-FhQ$WuyGF1!_oNPt`1-YF=a$8>t%~xmchS^Ll{^tcwNV
zQj-MM#e#IkBvH+a1!ceCc`AfaO)qiEAJiY?n9#mbpmg?i3*W^iUCj-!{kN#CyMrb2
z@B)SEdc`yYNZ?;F%>WYkS4=YyDa>%iG(!RP(=TL(_AP#~K*^JTF%1A2fc`=TcneNt
zcNva1T{*Qbo9~Lk`u|Za%pPg1K5wge)1^lBMyR!mEHS{Pbmol&g^>tS)EFed2e@R%
zfdu#fm+Ux@sPO=o>^LGtjR&~UaRMCb16@id2~Nurkg9$!EmK_F9s^yP$k#yveW1%F
zW+{+BAL#OQ<ZeNvKp*HT?4X~rp>b}*G1Qeafd!rF$%3ISHKF&jqe*Tw$uZKUe2@(q
z>J3{B{uC)I9w4fZbTv%y`hZ0BM!HHw2ZKcUBV84hd|d<*>!OjaTR(6$;58ry(tD_k
za@i~YlZ9?!E_+k`VO}@{#<~=r?~d?qkVW+D!^XPQZslMJo4R?c$GYTX3=*Y|bs<ua
z6S=96$1%gLK3+4<QlUN`=aN%CWS}z6g;+*Lb`v$;B}Ow*FfvH9G@69RyEKt&<0%)$
zyj|ZA7W7~kyK*+bJytdhcc%2J^V3iFe5r4bUQhRA{Zv)Wo^z{nbMqIvFmm3fk>e2q
ze1TsbS-!|D1x%E($n+DCC}k1($#1y|9xi3C2GrkGEVWelz%|X_5d)XZFisQ$JFH|k
z0_uc{m6i_KVWnvY54Xcgvcsn|m3zn#>$97KYK5)EdP|8cu->!)gh<K-3v8wVQfN5p
zT{*A2ZN85cR^P!<knLQo&b2w~U8+x?NL4AM7VmYj`km@nHZh_)TJ1Hl@d(&^U0NgV
zP#}T5*VQCnKSGXJi0V3ia4CmfcHeG0>$ga2pDm24B}xsLqJJO)gdfb>fds-2R6AOm
zgM<(M;0hjw57O$G7#IbZ4qf&t?t+p7YaMdM%KwuEphK?8_WBQ^5s>%^!`!#a7XA%;
z{a+3b+YwjSbqBAZtUMX_Cs!je{0g~of1(bdu?iBS@h6wBldK1=$r1g2a``*z6C3cx
zqQJA+qX~7g?a8y|kSkOgV91?yHRKB!z))wLb@@ep0+N(m$WKHe4N%BgSK>Fa9S!7w
zJL@WWP+vlQT!^X1emQ%rRPAW1zHF6ZM=6(G4f)(iLMY|3E80%NQrdXgRo#K7Fol%Z
zUUP{QrY5C2DzCX@3WG;byylWA3`i(mbD1ejp@LHSyTwuz1gg^CEn^Ev!1i~`d>JH=
z`nzQg0}@F6-N<2n2d67C90S}r@3EiL>SN9UZcLs$pDiL!8|=>hE~7TKbsy}OsU+CI
z8tj&-BuHQlb|aM}qk)9c2D^<myl05yJu}!{&{{u1HY=iz9iClKruMRR9d1?_T(oAm
zTlNe{l5+b+Fa(K0hPx3AXVRL~Yd9vlb5>)RjL&5+&2+f3uT`k;E6#~-)h~vLmnuKS
z&4)<~5U|D+xAbz50H5NP;{+tYr?@drFiF|%UaH`X?5U>eU|abNONnYU!!4(F2tjFv
z8=XOM)=PnMCi|$l`e^k`vrS;4O*7pMg?oVn!c2EWtUy2lVWvBk(LWKzf}Edi(?b2X
zt$MzNK^{Bb-B4^^dAY~VcjpTS21!cpV6ncH#+8@+v5tjXsoSgTEC_PPI;$Gwj&<%x
zbKYT40Ysg<RU7V(UUJ7JZm~520-8(Q(jP%WbBSB}BS>g2Aro8|g+q9i@W(s7+#gq2
zbs&FSW%?tY0%?`$k061xiv02S=v|-TSm(|e>aqFmW8YV(g=}XVwPTZYZZ)XiibndV
zYd5e+TeVsF2D5v>1mXs_oV`H;af2JPH>GSovixS&udUj?VzZ?}J-XSg6>>vB1}dA~
zKEFPln&YD`-Oi4+RcDlMw{!?;yIbSgH_1R}yBpbeORfTHCtKc5ZC$<7Y`Tw6fjiBn
zg9O4(w_Fo}Bpo+m&JIy3dT=jm(O%tEzSpfdWYwt4_PX;#Z1nLi+v{%JgwlCb0;b*1
zT2`qYtM^-_(z0{ERVsDeezze)5>!y?emBzfpGB$Yy6@QMRqEO5?<@#fb$(~Mo{#t0
zckX<VkAeimckXnVenvoG*?E|KSFN6_K5Rkc0phT`p=n}Tg&uYniHygm(2m$)cQPfS
zsgHvC@oauaMAP3Nw=h&-95*8agn)6}?QbegL(9_R?iQ^~k}%w@yXlQ}2TY@i$8GMG
zu7gGEDK?{%+N}DNRe**9PPrS3u<ui7(R#|AsFaAbXg%d_)?9y^hN(}%qV+=7+gTlI
ztGZxe(5m%<Wo}xvUT_;GB&}L6xJy%d8xDb0>t%MZi`uUIvRe_G3qHPHz3i5o3m~C#
znfyX{7M82m*xg;>S=X#W8=>OY+zrJBqfeoQ>NR(<7}y|zaE%6by~<0y#jp>_F6pX1
zWbZJ<BPR-<atknqcx2oK35+2ge^fU97GMnVBue#9Rg6r(;TZ49nV-G?E;VB>81KPU
zF`7Exk0I%p<WW9mL+({SsKH+%p8y|llRR2u4hIr&lRQp?=Mx~2PfYR@eC!ch{luVr
z!ZF!n|Hvb@`Xvu~Q#^93U$U^(Kh;B9{i`Uu@zcPZ?NRRa&C5=?Pwk}CfG}%81AVqf
z6Pq891lnwmoUuT{WoCPfd-#k+B+qGPdkVVoiC=OM4Q6|qi8M#DI82AT^$&#&ATiIQ
zM14bT;fMdylRfo-I-(j3k?s5WWH8UuP%JY+qE7QXg<>BFB*5l*u<C6JI|mHMLQl>T
z*8D;B)+P%*Y9sxRXkq|X&aGoFKd3%gQ)e~~OaRq+<Z%i}0M&VLoI=wvNHng_<Er6J
zArg&4kJowJ5C12ND?R!@dJ!)Nh>JXmC#r|<eyDr6MYE=@MI!=yxr;|>VOh{zR7PEp
zz**#xQ8$1Hn!A|&^EYbyn#HCaz{E&d?2(xXNFXfs7<`Kw^(8wj_F#*;F|R&CLhfQu
z7<(IZ?t{m&{);`4Kk;)P$!b7iPYt%|+i3IR7R(@?oKb}~-|_}HH0bqQw#7s0YFqv~
zPp(sE=&jsaXcAe^)JN3O#p^wCgB(os;d(0ltPn!oHn8Q7sOLi)JPM!2p-I~^8$1}9
z84d($Bir$)S{~ZyQTTv|3{4&zJ*7!K!e!8?O)U6ZHCDXIBX>h?;d>aHJXjm|M_vRS
zME=d$Cx5FpuoZ9iD15JvxIo(MDJj*5Bm97d^>$_ZKc>EKtKQ{NQq;}Fh14!jS-DA~
zz+Ik-&J+ddDa|>%Je8gFE*t|6@FjcjarL&)mmax;bBp2t#FrjS2~jSCaK4+(eO!$f
z@Ak;OnOl@R$m}LBJ(A0X;9TElFFvjwQ$pWcNGhbhC#0@i2r>5{`}L3N?V*Dng~uvX
zNrTKmPb8}UgUcYO{=ok9g!)?X4;VtS6*^>opy0CwBOE#in<ukZpHRCi9Zp(O4Iy=s
zq=Y3XZl3fc+smdmq^6(rq}u5d1qcG^#cXX4HL8RzT2^iZkc*y@q~3v-giv{jt$SMS
z6uRV5_-uvZZ-LAuPckiKu<p6c63;;9vV}uCMVATZUXIfQdnoLUXVm*cS3HVY!zPfq
z;=#m8n{l@&I9<HTPCuh|3|+Nw@*#7TaIm2b87D>mdwZ%6hp$;UPRLv%oDDeJgOFj^
zYYVf>d#c?U6xS9iJk2CF#A*wXW=bm-Q2L#E4pxj0FT82%0!R%ngcT`~gq91N4~5FD
zzGbZZZ+bb~@Vq)c3`Sa7*#+^Dh2@p{Kx}>FB4m##%$dS!Ur+}$8B>_+;(MTtX^f3!
z{ukBXhQ=1ko(B`EV++yq<tV5z4gU|>uou<J(1(R$>x-C>`LHk=)BRiq)HwFdi)t`5
zu23F$HReNXTp<p;;#>yZKAsizQcFVP3*|OpV?M;j7h;>RIhVl*o523iOKlmNP$+%6
zF&|(P3gOcgTn6K7BAeAqy)`t^!lB_ck#Iy=7(bKPuT<8gLb;{en2(=Hg;@SqavY4G
z$*gm4wP|>=)pi;`ld0`rI(5pY9P0~nc4gn|t?p8rtS?kO`dzx+VI#Y3WUsuccB|M}
z=-`o@n9$u==t@!#5QzqFENp(4z8rA@H0)TPJ^8A-(pFwy=-|s{;zFsu&{HOrC_dL0
zw!UA#lk4E&PWJUb)w?Tq7CQJoFjOdX?JRWjo+c71I}2Ohqt8`PWyNspE6n*S`|xXO
zGh6<?Le;IWXbdcc>U<?T>R)QtycSmq9ek=KF2Jr7Hs+(ANPt}_#9(~0DOW<J_ZBG+
z`Yznc`aP(-vXM8{7mB*=EpqS;A}CP(_ZE5iGLT5<?=5Q89a~L`J!m-g7v;R`wdoD@
z2KFGZ_7|xEvHlBEeGU}y^<Q%k=+y&7G9Lg5*#kv#{Ra}L2a2%%L$J07$&%l(kH)F7
zrr%jAG|_!mB)1+R1C{TJu%$GE&eemknd4-U@^kjeI5pLv27ihP6A$1kCyN@24KI*@
zIa%ZtD?*TfIa!3Mg!WfJA|E<gl=!(w?C}vp?D3r{l6!oT1*@Dc!XDpr#5Cvu<!X^q
z=o@Vh-*)>0zsXLTq!uf!z!K9m1W@c%tM;_!xJtGEm{#OL%sh^MUS)vS?i;DlC6IEq
zy-@!ryRlX6!}32;9W{7rLeWyBpI6TKPz6*!FJ^qv0$f1=lxKifWOR7WvnfY^ul-H0
z$mk>wdarwBMkiUw=-%*BMn{MAL7M5_@*<ydhS|ko4tGm%U`((~W73-DEw5aT;wd2C
z@|w%hAX)w$FW(-y9R$YyJKme!Ld(&2yfO*FQy{(LmD?jAf%J|S%h53!{49io)SENV
zmkmx+Kd>hzd*SrAz~e%BhGUvn`M1}u&sX$3(6w3vB*MhY?)$ge!q$4a7yU+CW#SpS
z?GvwEY+4Bp3Yy`yH`l+RjtIeN9do=&HhcR_^$)fh{3)!C2dLm2uT1hlLT`>&-kAXj
ztIzSeveN3r;Cb|1uYG~Ey5vD`o@sT-g4O49t6vp$KvY`dRaSZJ+3+m&@3tBcW-VwC
zEb+=bI>ZOT5-;*->U)r=#S*Wv>SirOChb`2wXeKc3v=Imnb(oeb2`#PWl^!^Uc@>|
z^CS!Xx5Ddal%|9PJQ!~ci+--gYu1?k2qyY*joFVNQNcA{Lma<=1nL?uGAzo4K_XpQ
z<Bi-a3*osWmx$h@2YDHw)_Ik?d`-e#d-v)~hxhy#Ukv7u(g04h&ie=HMW9joI;(UV
zW$V0#SnT2{N5g)CD4li_*LeeX%F<~!ky^dZ8@xmJ@zQ~geT_M4;E4@Z3+V`YgI69w
zhxlIN2CvfurQx^1i-c8_K{tRlc*D2JGHCEo9XEI*UG>(y3{acc*g0z3CpTGT&|bkN
zs|*@fo4ihO+8pBJYLgcks3;>BWo+^$O)KWgGB$Zr_wXY-7#cmdjWwUEZh2yxRR|5a
zZI-cU$Za!+98}PdZC=cbq7VlP+2)PiFB{^J#@gnM-=~LoLomPAvnS@M;V0^?GUx(M
zy;TNnH`IF#vBnDV?S^_UW_nRZ9?GcqM$Lxg$ujD_v3uw;4%z_$%#ZWbit3$K8MGa-
z(<>LukU<$cy?zsv_8WG3k^9a;9t8*_zkAr7^VNAz?6Dx|lzfj>P1<nS<26is(}u$y
zFLFOoO%1i!<4uX>8USTA_juC}@dN)5?MUonzgwVIcim@|p`)7nymC_mGALu8H_=vt
z(uTx7Z&e3<84`I^6RGu&Ugb}|*}1IqK1VQnae+Esc@iws^&0~2N3Yy!fIQ%S^cIWl
zS&)GH(OV%dB!EPffAlteQuba$RGG5SAHB_<(2vrD8KUF&^VxG>sQ=aA$@5kzw4rg{
zE7!;nLMi9Hh30Uk4UO{@;Duotp_KF9=mWBpMzWOi-dJ~imxyJ^<F92GFHs-0b-!kn
zLR%i!ybVpape>JU-jLW(3MsVZam_0?lt7}CYu?sRi7*b5-v_+LdMr~5@~?THc#_Xn
zAqC5U>t3;qKYp3&XmQ<~r|<{`TsP+_kSO3fHDkZ1Bo+w+d`jH68E2xc)mGWY%hibO
zF|bVAH-Wnh@X5(4q%;BC0H2(!Kmu-n50e$;M8$^VEnm)OK9Lg@L-H*j_D%WGQ8DF2
zZ?o+?)el?XZ-Bmy4Ki*_kPv;_CsQJj0Daqsl;}swFp4Rzj>!IYrTQ18Vg&Z>q!P^s
zBYdjZ!GaK!M)(R``T^Q0E2fA&HhXfl`kk#}tffR)V=X0$(PK$ziYN)>)a<pjYC@@=
zYMP*!N7|{T2|xm4s?QL+;2=rKhxD8hhhkbtPxFZ_Y!K+|X+D`VfQ05WpUfFRLUWqW
z%o&PlI+^L?Il~hm05sF814YT1Rvjox&NRCL!a$m7c0<^3%=YDcDZ3#I$=N=fS@LcO
zQ#Z`z-M}VnQXS=U&0fG0NX|8T0VFWzQZG<q8YaWdXFE0_F`aLzP#?_q$;1>gP?_&T
zYIlvCD@=*$BA>D%Te4aGr>zEm3a7#Yv}Tdn8jyfl<dbt3NWd)eVeX=-9VDjqMZUla
zUjx3cN(=}r_SxNh@DVMB_!1wo(gM99*8$5;3*x0ddppi-D+TQ|1eW>i)&E-*J+<6t
ze^_LtVN}7f&Zlhl{hwLsKWgwmcrL_H^L0L%kb(sCI-g8PL89jCe4fpyIo&2E22YLF
z`|O*1A|aJL=xy-HgjBMS8g2AZLb`{7d6@F#dY`h(XJ?nTsk>_Mw`ooCvU;BkTo6Q^
z>V1VG@c;?zdY?@5L84CezQiuniP9Znh%|qPPp0{j1>5Z;gKnVv1raR0d^tb)Y`!`h
z4)go;X5H%5rN%y=TA+7F^&*r#e(h7fXTBZk{WbVYSO|R7=4+o!9zmiuU;AY82okmV
z+UNRST8J3jLf`o8-$@He9`p{F7LqJj=v!_f+!jR*=!Ds)97C6}BRkYCH6YANke~kG
zler@#0rrDW=8hmyi64B%v742Ux#J<9{pig~n7QL&pUfRePh?R)`eg1XS?G=<J_q({
zC@4k^#|dA~SveY`sK^PQS}aCmlt$xe8jX|7Pn)#`6GErWfd~?{Jxv2Kg=R)+tejyJ
zcBz@W&zNxyOyc@faZm>mDrd;bRD+n|IPc3D;1^*z2Fdd`!*Yyja7o02SzjU^Tr#VH
zCy=~kRs$q3FPZTmM%B2&4t}Y|T3xYJs2W$ycmNrwT%mZtmwGXZ2RD4moBscEQ1z+7
zQv?M(7JUX1SU1d}1rk^{%%KGmeRjj=dDAb37BRTv^z+-_@Qa}(dC=?cmqSak;5e`Q
zX=sso;)bKvpA#G^?Gs0_wSF^R#>qZ|{p`#hbyE3YzpNa%kQ(flGZsh`GT4tU!uE?j
zPBkCGmhDxWRu1vYV>B>{>(3LX5g?&5#E;Vm+BCK&495rloY~ppuhgx!CLj25luT!b
z2`YXJ`(+=_4#${KU;=84KTq^FNI;G8qqj#>*iBIJ6SF<{tA1P6M8Av@;KD5@`sFoF
zkR;`gr}=CO5*QQx<rRE1CusJZ!WMt6K3FxyLZA+s;+LraWPmWmFXus!K$zmkJlK&}
z0@TOs?r+r2RUcajv>y1_LZImRv0t7GCV2Gx*pKv;X3_-Bq@S?wkE{Nc_#2h~#4jgO
zkWl=@FDFuvDC`rzIguu)p0oVodS#PuRY!+eRt;z#on_U4=FwSxna)5FK(qWvXNJ&~
zpc2Ee!Jl(2`_Q-Q+qupSe#AOHiIz~WZ1(g0oz@@#x!H6LkbvB5x&}x<ZYJ0GnmVTh
zMsw`+D_>?;99DmCtHGbb-|+x?JN@!@5=iLn^vl~XAmQ&j{lPEc@3f>R2Kl>vmtWp~
zksNf~F2B6}B3S_1<;U$8?0P{D0(<>Rz!wWY{BjRA_K2Ep2HLCy_32)}Je7tpbocr(
z6F<pyLG4E;_#R}Z+p2zM9927)gJCLDckcJg<LMIKo%{Vbp2q$s3PyJxVEvA&Ez1x1
zWfBJ_R1Wy%bq<gy;ea23xfNG|VZUbwkE(5&e(#r8sZ01hfbabQaf}NRD&PBYjQc6&
zeI;1_Iga_2Q`vit;VwfB{xoYxYrbQCIaNarddK{7ss;)B9`k!n$#_Bx9#4Mq+fT}P
zB6-j|ZpIVILOeOa<4Fr%1*{Iw_?3vSB+OnpuHIS&LQK^q3LQzG@yi!QK%!1({2sB!
z0150fery@g04Sjq;CUJVk&5%C>w^iE^QP;Agv$Awu3th+zN^!2J)zn<T(wH2CEr!k
z=^+D%tESU~1jJQx`unh(-o$WR_vgGGV7*SN_cXcg&n@6bGEK<kZ?N?zaU^rYFSo(L
zgg4#rV;dYfVr~<1o_+z=@RS-Y?iY~z;NU{2UqJ3(Hz5b?A7J;MQWM4f17bu&Rj}di
zk7MAK8jb;hoOjr;Q|j;X2Lx0v9Ua+AsSdRPcIA}XwYoMSZ3-@0R~wLF2_$M!8!*JK
z1W2^5Hh|rH3eBZd#lZpgkJIRu!4?F?#=(Jx;(`~1xRg(1P#^&@IDic5HV%OX3}uH;
zt9MinwGb%g3=PPeGNn8=4h`g+m7sAnlq%5;txFn?;enjF>@Pp7cjpfe!1*^*hL@z~
zjbtl+R<~A-G=aec@JO?DAW^lE0U2~b0(d0Z_7#qRhojl1GwR=~M_UMV)pWFlK#dz6
zkjZwEH*RzQLwqmArzG{mq-@Pu^>JJIq<|c!;6iB<bp)+`L89160US4U<~pFJGRJwf
zYt>Y%Sc>&iO^YPOswt2!*3TeGCxBRgA4i~76B}?|?Orv_LZIEJX%+&-ifI-CUp)~5
z-X}tpAUlKQUr_JuG{ZumJ=+<9hGKj{1_(0(!K7>jg^n44Oqu?bus=e_tbj6yeRx6L
zTZ6yEpiT1YY_lu_QXrXSIvAb;Wft`<tyVxHkjx6i=LAH4O$?DG&JNhic*-qVsM_ZN
z`|t63i(*e1js=07B>|hSI{Zi<yxh~7ox6y8M+*XY|HX^;rN}uJvd))OfBC|IjA>w^
zDhmTL4FQR&EDT_-!O0a=@UV^zx}*lH>deM~2}9MHjR8qQrZ<2DLLGTSlq0|y7PEtw
z)Od%*76O@iv4udzEDp$R&lGo!#R0^y?`YkSHXO?XIeXb{m(_2b%LC>OximFrZ9rTk
z-F8KFRID`{g+~BfYc>ibs<f6GHG%?snu^<+ZE#f`Wvkd~DN#GN2INW<LQvWoK;}u2
zG)+!j9}tUj5U_l`j6C!Vn)LyhOMrxCeZb5m(nRhF$Xw!A<Pv*KL*Nk%vBxw7NC52#
z$Xo&>*F;#Y&4VE_m|g-oQ?n2Kst#=6JQh%kL@tpbOPmmvXbS?6C(KrX1mp?R6d(b4
zf=p3MV>LrHKO4YB*2}EsUyi$3o}w-44u-g?g~$B4yu}I<+Ghju7Ar_hFJ}Yt7Aukb
zuH@MOZm}+*@sJ^_U1H7#+Oj7vnT-Y$HN0dt8YIfN6p$~Lf<zgY0+<jePJl!imjZrq
zmxV~NP`?xi+)ek^sSqgq$|~*J&(*(Lh0wjjUjy>)B4kj=uYpJ#iAt9JHPF6_4ibTY
z*wHV@{*bHP)wN$x4q9*l(Jv_X*+2rKUogb4ERYT$`UP=iVFx)?h8p#DP)Ye#HDKfZ
zp#`&chxWOx8Y~e5AiyQ$Bm)v~ZwKWSE0BPDJBS+>O9dRt9+5qpr!BWtkFYRk6M97O
zCI-ck5kVP<Gdzxr2x90-!yt<o!%k~3%oq!T@`o`&dAT>k^M^6PsMz`hiE4}qHgCbb
zK10SI7ZhF(0-EE3GJ^(*!p8-r*Mo%SxS;9v8A>Cj1i9DW0Rk4DV%34Ni78eyD4UoP
zlx`1UAWaFv?eB)ym*GGvm~%8}^RX40!^M_1(wY`b3*tWc8|1-daDK<9LFMzTa*L+e
zYVfD9Hy)snPt8I=qL5F6@}dq%6!K{hCl3^JK_cdU8Vr9PY@oaFnlv%^_K)G18MMz1
z=JK7Mn_TFA7Q}+kg`J|COr&tLngnT0*p62W<;`R7HP))C=2?}ZG+|y)PV!}Ze9a5y
zi%AhAfae7<DgK@#;QmpT=}ojh)?_UNa<r_~EE+v{HAAEcWqkBxgP2O_{t-yrKgtH<
z?~40JL}MmF6|%v^GyMLMWa0i%Hu&dvY;@%XYN$qCP-*6C8GZooT=smK{n$inTLqSB
zTN+(;L7DA99+jvI`uO!7Qs?@&Hq|?EH1z!v_WOLTOQ$6k0?o`zEJM)XS`w6Vdl?^G
zOM;l0=}jvj<{FNbL1i8LCSTiDgTKsr(3o0j8H2{u%Ag?<duX8^D}zYvMIYnj2Po-v
zH~W~*ez3)7I93JiYj5_k<U)6~)yI;FK3<d0`}lQHG1y@fYj0?8R&BCsMWb|+RVx~$
zn@smE<D+y_5JyFH`?ZW-cihUZ8Cu7xtrh|e(yf+tD9PU%%ojWUP(j_c25}JdG)KT7
z-NF7=p!KZYVIk09-4T>)^)fzKcLd|&kN_kQb_83r)Ynk7DWk!9AY0_p*4erourTOi
z=>ZFahUtNzd~Fjtz&H@ZYnvwp299x#1eIdnfo#O1t+73gSAn16@4i>#g?PNj{8G42
zUwS8BepjIk!<TEAeMwhPj|AmOA)cbNBSEJ*H0Z?VNH7r6$M~?u$j6y>C}(>1k42jI
z7GrWKSED1Z+<ck}r-YP3X8STP5eEqn(EL?7dW!jIN(gg$j0@x8R92tR5}~O$tf8p^
zGPKs18o~@&!eu~x#9Sp>GV~G7Dx?g}YafNMU2;E{LDfEHkC$i<BtFK0i<F^v7C#PQ
zAu4dt)@dQd9W4s?U=KXzaF_9BqdcCIhQu{mBB3@dg!6>Mbar2EIF^NSc4zZTwL|tM
z%R<QIXenGy?OeeclxZznufQ1|pVh!bgI0uOE(a3zT0t$LHDx&kiq#>-i8W={S6==b
z%P-Rk*}yW*T@J2^K=b`-3xVR%YC@pTQIu1w*Rl0wT6Ot4ONDUPSt=Ae){zQsqCo}J
zM%Juc>r}qcQlW6M(Ndvsv5{10K$O#DyoF6D*E*JOu~f)PTSA)f705tkOX!xy`ro(;
zJg1&Dtk7PqsJB!o7}SU4UP3t!2K6EACA>!?x13VAFWKi6+K9?8Egc%FUxs832pJUf
zCHcz)9i35u1T2*ELAGzD7Rt>(7D6hz`VnANP;ap8<QCf6bR`SR2@+g@v9MQMq6P^t
z7RC&}8ZX}3D-Fk#aL(Q=ds6GFB&LM<!l;40k}hS0m4Aor`Vkv0WmKA%GQeXudT2kk
zm>$Nt18v}lN9dDJ!uHPp!9g)Ih%>1n>Q+g0Tb1=btxd@-Ulo=e4KC`oDlA<EB$QT#
z(FM5F1|2+H%Z~j;t9)v0SnfW8N!+l!#19fGYs0w2Pk9<hM4`3e{Pv<EJQu{xz_np#
zJIpgW7r@CQeRpJSxOE$TnqNr{wUPbvIjwE^MyqO6`o^%_?uQJ@*%-!H>&&YLY76`B
zIjw8;mav=#DtQ{cB`nh-kU-cHHbm$ENjhQ7s`PFzY61t_!T$7L+VrX&76c`GJHj&A
zgA5>cghS%e07yXW2;=3|z8nGmwwvAdy!N-M-4+6^6n9$)<bJ!up=Q!PG#Bj-w``?X
zaRkVI#V$Utb*TEvLZEr$E2|mgj9-OiVqD3c@vE@-LIzradE;yL(hJ%hRbN{Obb;V&
z3xVd1ufuYw4;9qm>oDH7p?7{NDY^TWoqa)jwE9~MK?TCM76K)C--hM>DpY{*Z8%<{
zZ=z%HN}4xLWCy&c-PfS{goQ!r-3beW=8Y3pEok02LA4k}^F}2d|DVe?`K$J}t@@mW
zL9@X*3xj5Zb5=cQHaJK1m_z6Pm301pJ-g>+ZJyHMx`ojY7}qTfI`qFDHpCqb=m6t-
z7*|FI3AezJ{u>dt;T3Ig^&63!u0=1?zY)3VT6CoUM#K=AP9=Xw;f=_x&G?HEl?u-5
z2S(ViziDkd540fYynbLrzC;2cKn#o&iHsX0sxdHvX_T_YN;-!h6j9pw%Gj1yG#`uq
zT?<x$Ap##B18Y!3CSD+cH7Me1A)SoQB?m=Xx7Gi^v2Zd!l>PVLwI`~ES_pI+Kh$av
zoyHH17-B=ClAp#8jbzICmnbUfa_=x!_^S4B)i4Vo9|*%NgnS?ji^zoxR8WUu5xgrx
zvrZ*l{e7QJdsS;y^}dCG@5R{Pw-B5_ct0XjbEp8}{YWURH{%Gn7d(o2|Dm<08f76E
zKp15q@E3_A@}^9sVgO-OBplWM$`Np7cnll#53Ntt7z?2Q2xBaS0@PuQ)rtZjjG<Qa
z<OsM<Jf5}rr}k{scniUWz8D{oJF%6D3kc&Q;;t$h?gGO2NM%#~A&%gtJGcA)sXbCP
z$wF|W4wI}pxPdUqYK0pJlc*K6JyofAC|h~qHSON&sTP6<2vaQt4-lqCWC9EoAWV(m
z7;%_z@j}Bson3fMd#`%B1yKly=@vvGAf`v;f}&C>1jO`66yLlMBdrKW`q|b0(mqkD
z=UNy=z?d76xm%@D1dO>6r+8BkBrxViaD|)iQdTN>)pa48QKN0`w9taUwLbg8h`gZ#
z89*$I$d`dY0%BnVF9R*cWCCO0CA%#VWm|S(KdpUk5BzBk5Fcu?#cGWYFk2#WX$dvJ
zY>8lLNh<=7SP^WA#J5GnP8%`A`e<v!{vuxjS1Nu){)o63(`%sSXucyNCwM#p_>PEN
z0fPkijtEx3-w105u$dFV#h9&Z`1e{H_U%AzatAQXng&qQJyuNv0NZ2LGyt$YRMUA5
zWDB<%jvpgA7qiQ1wdM`-e~jRmb^|ScZ>8z|L{@oQyT?|2!o&s_#ynxVCP-kPh<L=F
z3P@m|h+xZi1l?J=l_uN^*}+3JkJ90Sg+beV7tH!Wh@>L&y+4q^xDdgP_7%!zni`Hb
zqB(D854@wjs^q^BMK<#%KsTl84UDos57&BB42;SH7;u3#Fd7g$xgdcxFpAaQQ(OlR
z2S?e3;o8$321lj2n(|%8!BH8AL2@ZM$AbjK;3($!w`tF?nc;Xhn#0(r_q4%H-i>0j
z;Bg=~quLB-mG5hRs2CoVsSubz8XlGT21p<ck0Rgrl6tWj8D|vx;(cvT#VAXMN*@)K
zUmbu9bVfz7FZLt~Z*DloM6o%)bcFVVF@_4KDAXK<JH|zo$*f|e_EHW05;-^cz#3<k
z4-#18sC;r!kZ{p)QP<?CIHe{AKUEqZwNHwQQ)<bB-h`+;rIsu#S0_ekM}i`0b85;*
zQN`nnhgooxR#6VZtOPaaqo_REf+WB`isERC&MTTzo;IDmI!e3asp-(?lMR?qnI0_^
z*Zx34WqMRzvjmCkVtO?B5YGpR<oC{|M^nGy`Jm)bJ~%zv{Q*AKniIsQ?7@#Ue@pxg
z7ydLV#~MhK_Gwg(HIO74HFukuQ%*N0%6FUo1cFo2b3nq8=a`-Y5=e8RG9-Wm(wry;
z8cy<a@tv>v(VRt5e$gS9=B4@3TrXc+;@eP$eL+-7^0g&9^?~LHffVmK;UR3afSTV0
zOG11Uib9+*TDvW@5O3;`#fS-+h0#cqUXuU`s*d#?t#u36MdjOBU=lZqaW#S7Ou?67
zmPK<mumhvD@vddj+$Q?}K-HkCEC+7%CD#9=ymGc=jCOwr44(1QV}LBD(eNmjMrBsA
z)L8AY(8{P>3md#LE2CK3V9-GY8mrlavD!1C)zaw1ByJQ(YPWM4SZXbce5l<SS{s#T
za|VA$Wo;C}1e-ljf$7(?fgfsJ!s{&@TGXy5oLUMNEeyxbC=SJseyBMV=S~V1{7}3F
zHEVZNyz~wN-L~8GP>^WF?x<X`fJ9|>N3mjAM_FVGGWdb))(P4MTlE1mXn+eRIuMmp
zG)R();>AE(vw#G~foP&cUq)}3wxHIY$?lq@b+%WXu`p<*cqS@W1`q<qnP`Z=l0rJb
zI1|M*Psao;h&oRmj00EGcfo|pdDC}6lF&`xZ9yixI&I>|8V+2oQpstrnobKDKwLGQ
z79=39lGDCH25o6L-i+nU$R3!cDT?#Wm>LlVZAk{Ljj=PIXp<^xV{)*A3$WUlG$lxY
z)y7~-{yIiWYT)qf@)=rMsTv-WqX=A>VR%e#sDmV_nEV(3NMH<);d5koAI{#AEIE>u
z%+y}19%&(vAxFmK&11*_VPwoNmd7B0FfxYa@dcWcS`s-idtj#accp5gg+WnaVodIz
zLI@ZWWBDQ^fh46EmPphYEy=J`*znotj43f0NWg^3l$Z=8AfYlPW(Ja$w7dGrwC`r4
zGd{6OrESJfVsh?*3?M#<$p``x5TC@*8JPDKdn+8?#d21$&>ZdSf>|;890g4zt<V>a
zIWZ;6ZkekMsli_&^nwqxIWZY}K>}?~Ox`L0iTFP!=E=rH{3iyF|8ryZ1u+r-B@cS@
zVlw_q7UKW>7{!0eL0gf*>tf0SzT3mBXr9)+CkT;@;1OC_XSNU|7nK<~NMP5+<TZVe
zi0yT;aCd$dNu)TFsf$JK*LR7=!U2}WaDicsjcuK;CD@sH+P}-eF&j;FSr(IDqiDrD
ze_0Gie)IvnR@C<^*@pSr!yQ&yRiv(8X*wWefUq(qKLY`hbYiVq>r3fP@79K6Zw#OR
z`uzf}+V0#N!>egL#I&Xnu|Fp6-GD%=_nVah3CR8CxBv;r{WLDVp;W6is_ZxzQx0Wc
zTcqLb7W^q1g9p$%7?byIKtk_eOy0Wzi5@%{3m!rb(zXpTs0Zyo#N@pj$$`m!h{=05
zk_Dh2Vz_sMH+7*0fg>^8y9x4pH;*pS;>|#tl^}~AiOG965QgrN7|w!T;JToWV+{D7
z5ch7@Ez#~T2g6h*V;+ymy|UKan8#z-D=X#77)PgAm!(?jsZ%le8QRu-9Gx<U9!QjM
ziiRGAR*-O!Q!)P?vdMHq6l=*-vB2$o`X>Ro9ds(zr7K@Px2CaohHY7@wW~g3b~~8F
zH9Zp~YI-InS9%~(?3oz0!fVOzT2qL*z;0Wn4XV0eLD0U+1q*`qRW8H~v9|*iKwOAn
zZ-@52TGPJDC8jOcDyuJ92(+(q$wHugl}j;0tZ$$KgiA35zsWQgwWiePM)sBE+EiP!
z8<ve}E9FK^?kz$HN;hJdfBCJW*4RpM)W($|adz)9wW)Z4?cz%9Mh%!|FVRLyZCpkQ
zXaJ!$?(*<V5hVPqHeNU+E+Pdnc%*nMZht#2B8B8ZZ%|xD3dusG7#ycaL6NgH?a90w
z|BrXqz=37K67Q~oL{;96%P0yGknhILDB7C#V@Ae#I`#wz_|M3=3^gEO%aL&zOhE!^
zWLySQkU$z4m+2V3I5#?;^HE%+W3)sc9haY)EufJ+CeCi`$}5e7z_T%N`EEK$jFmBQ
z#1nk^GZ$ZfqnC95v{t(>^kH1SFb*bUK8%a|Bai_#o^4vIbq|e?%WMox;>MAU{f^_H
zZWCFXb=vPk6XP<gE8q#x#5l4#+(Q8l8atVNz79B(<MQ2WFo82Uj*}>S4FfW;z*H7m
zueA<Ojmr!YOvp@)BZHic6<;pCHMbz1voZV1dabg7v4EP5z2;mOH9Lz&@DDS_L85J-
z`TZ1n3Xm){oL&TXQNzDr$<11)&=+xe<qAy5d=bY`#Wo;hKrLbeH*1fE7MYC#lepBV
z2e}LyzJy)ftUVN3Vj9QA8@_~$)0NAh;mg?bTeRCl%i{9wWEXGvvN*;kWrr?m_zJdl
zi`FHyA}%vXFj3ZuI5J4gQjme8tzs2hwMRm$;xeNJ6Edsf$Y`+_0vQa_HEhyW?cUHD
zONQP~UPCe%$dJJ(T*n%2(<(#jq~8(~GV9`q%{WE@iT%qB?6GZH%kT!vKJ;$?2C~lr
zO2P46yzTLv{cPqoZGMyOaolF3e!%zZ=*;1-+qK_@>doeY3DtUP?%iAl=HJPF+^*dd
z+G$q7&CS1)s_@@j1{%9r_j;`+wA<`PH#h%o>c-Ao2Ik+(PSk5%LwilL;p21A+)HM|
z?RnG(=HJKe+o3%e*%y~DqJs&Ueeq~aKS`-c8^duRp7VNwE!&|TcOHl%H{r8l8*0qq
zIG+`pgFr7GHlq$mwBm4FW{V(EnZt3+inL$ZhCJ*j8?+0j+(*qJ4ki$ennN5U3B~38
z9*{sdN{yp{+lD;tIM!4MxW_F7@`B@Wd3*^OARLd!#q|x4KsX-9^$q?_n>IwA%f9%f
zHq=&eE-q&%aG`WAE|Wu$Bt_l2hNg-(WU$LDxkp=9ec39PjsY&m<^C#U0C73)6FDkK
zKwOR^N2Ms)hP?S&T-=TT0nKY>fCLH6Yi5813C(La17sU&UjGCSkavMVRr)7nfCLHL
z{s|c%K?13NLIy~XK<b}BfP9@2owkUOiJWZ0=DUa0AJq!7+rH9%YTz85FxLQWsc%0_
zh`t2@><<%iMga-z4->L)K?3{31p1b)#k3`(PhcM$(C#juV5v}NPDse@639ShLIT?r
z9k~iRb24lEt=75IWV1nS`Gud!W`jTiVRAwymmq;KIf3MI0i{`OK{}=<l$qIgztvjW
zYVfC+{_p^L(-U&~0|~w937IH^#Pl~k;hC8b(;qST^!G`^{%Jx?f075i83{T4NfxHR
ze<#f8uPwR8?1Y&9aDT?#5*&0GSYrAEiK@&_$mtIxAZI7c>8~w0#sbm1cY*-g0?Qbb
z&n&QvL4LBp>|F>0X#w>vZqnM@8IHO{PCYueBXw?o9XqI%IqMQ?OpM!h)VE7y-+}=0
z64P8DfxN`*TaZ9rLVZg|rtPQ?R<QFwXs?#9uvDmTS0v=;jvxb-6$!jxK<7p6XrQiU
zqYr71mak68tvoQHvN|C@OAQh#s}o3t5bvP^Y8?w4*1D9hvr3_UT$hmF--HYaB@ni0
zP_-l5Z)C$yV-E;_!|EGNtAm8%M$_sbp}6s;)!UKPw@a&o0M2&P>LB?;Ii^4YX}f84
zkU-i_R{tZc-rjKRO61g**nHi|>aJ1Q+=i^(5v{FrS3)fjmTym%-y<x~ijQiJ@;zqz
z@Ce|0Ov8f&_#QHR8trRO_S(mOb5tuU-)E_i;rE$?3NldHM}rFY3!nnSf5ZNLRC}P}
z8%u?NzA^g>GEn)3`f3~P)3+z`cs6xRt5>Rzn`QtPW;kv-A4p&vPsn5%Bq=2@d;LTs
zu|0Lg*=*|*+6%T$XDtlcnK)}<P^X+t$TLRh0OM=|vl1W8?a?WY%L(OI8qJlq8qm-N
zLyT#V(7tSrX^_yqY>sJ=7}J*%o?qpdCI%nVR}%JL<d~K`=v_6(v}9pSU%NS`+f&5t
zXDboW8WfQway)}XHTspv@eC4h{YuR7+@8{nfhFww)7p&=150F_1{X~kSR#E2Brpb+
z$T$rW7z0b-Q-^8ltuh>gOL8W%&>8KJb8v|o7JgJkel)CvM`!lgS@_W~T*&8ZC_Dn-
zuo4-ZK>~1C3H*qhqKdlzefIrX?SZQI%_@P3D!p%32_y-X$j{7!1j73z$UNwHu!`Jj
z6npWU_C)n43xVu3szknb4H+PeDoKdLN{~PpRU)qkRuMH?niK>yN1G-E3C+=_NkMX1
z)1+18TN6t71jrt^pgB5Bu&O`~Ho<BHIoJf#u22Nf1hVVQBG|PWgS8~*RCdG#t*lZ0
zt`ak)spbQe;riI*ian-D!35SG)1)AQwTDc)iC&DWrpA7rov7$rTunbOmCgY!u}i&a
z-Yp=Z^m!@XbK-ZWs$oXQ7p2P5?D#@`wXFt!ivGg`=zUQt=PQuV`=V6NS0LfrUzB>5
zmWug`7~Hq(O6^NZ#e5}s&|6e0=PSvAZ!a#T`D#J|uQ=w+gQd!$QhWA$ul}Ld1BBSw
zspdoeV5#&{kf_wbQt7220e-L)c|M&sfJCJZmc|aDQuJykF;FRV><^{#K&+a2?ntQ^
zM<DR*h-E73t0Sdy9N{U@kCd97UQH4DWGV0T+d%;6q*YG}3@5F6QeZe~)sq6l$x`(C
zaT-k>49A($oWV)<d_q6wJX303h3-JTeyNlXr%|Q4qvDd;8+Zc1OQmu&fdt^CQgl6k
zH?{-y)i10?ss2^vFP0AV{4b@N_^BPpK<Agz!XkYLWsn_c0QF0<s-!-&q93m0bN>Jr
zO8t^~{2mwyL8)I7_rPd+>p;{SNnt$@u-+R<>1ZIK`9@M&4<wg0t=EAJKPV}NOvkkD
z=rAZLI~k8)yg^CX$shqVC@DJ`B!C7bVZ6!s29mv_;TW3C`6T;BT94SALzCvKq#en4
zBa$K(Jy51QT8&6bU&bRKjz~)Dfdt}+B&;`!W{QqzvSUnAnUJ*m#{cIRc$$~%uh-y#
z7!eQy%9x}a5g>swCMib*NI2h^q-R1>j0j@z5ivGtAD<K>Lh_*ZVN#9=$-;;jmoziD
zj?^`ilmD@S0S;^pmdM~hqAHV3TZ07T<fLiqjzmruw(bf7mY;4K8zhW9-842xAWb)o
z4U((E*z_7wC&Te+GG{oetJHs&_%w;IPhZ~YgiBttlghlLoqmiW548C54)Iu<TlIx^
zeV(-6$+ynLBeZ5t(%$tyI4EQ;aZI>uQdtDJ*Gx2Y2(eh3ruskcUiiOs`SL$$?`WY>
zKh!1dx8FotmQ+>&4STt=a)@!nW7nGMJ8PCF<qb4mIWqN%r2Tmdj*Pc5X@C4C-0GyV
z9&k<*4be)nXhW2vkP+7;?c(~F-~e}R(%#C#CCjc$+9Pdm0&hwx+W`DuCNN%bCl>3~
zTz{_R=A^xYrA#Z~ElK(DB3=NEimg;6Ujug{@82oBzXb^N@lMlmL85v)P4@>0)t%)2
zo5=k;kuUAb?r)*rXKS|4QX+5Pmz2>1LQvY5MD(DKsCFW=eUnrSUz&AF>ZxiGuE9pZ
z;EP}a5*Xi@!2~2QzM)`pgD&@V0_nJzR4!+ix6-fYK7~I`81m7JrjJ4nFc(c91qqmo
zNg4G)V&Gj&#x7&vQPd}fi29e3i24KQs#hn9KDDWAxLS8KsIE=jEQlt6+LSzyffNd=
zP34PG1`-9;rjT(^@asfv8=T_74<@Ds^Wc;mkRYKsI3<H0NN5gDnFF#Djox9?KJTR4
zIt;T4r<L-slni^20mQJB40|8}F)W3V_|YvGik&g$Qn+w=y0bpj;hvqstGI78K&?7c
z$1g}JZr^$K$N$z#vRm)cAGcM2Bcc|b19m}56Q2nI3D^ZG`r-%80-dRc>e!>*^p7g)
zEFJ3mx|CccLk2o^DJ1lRMUgaSviRW85L?p~C>jo(3nYSCk@AS|;ev$HiWGWjJugVj
zF&t}C${zOPz52Q)Yg1}t{Q+J9h^=Rf@6&(NY<&t}v=CU-<LgtNq)C!cDpSsH@^+@q
z+?cYL`O4Xf`*at3_<lX!3=A>R;W3mqrrctG8zhuBrf`4f4qhINzBy%Y=4&IAm)@^e
zHUmR^H>xx5$jzxDaX<<Z%9~R-Af>AWov9zUrtC>yE1}%HyIx)nhWIfPJVwb|Qw8FL
z79^Cnrf^4(t_F9eJbXJF+FkE>>-Lmg+=d4eD%(>biV9>z%DcCxsyayHU>9&l%HEPK
zyHEEp;{m;GGmyePJBwTKDQ~4z<+tKf&06rg%bjU+a2Hg4w~DF`e?Tv728O9jyYag$
zW!jD3MauLsi_WxzzB^@a>gz0&uRox-sRTouRN^s|cc%))2Z%sId3UPfR((Bf>U1$2
z$5T0@vOOQv@3b4oQ#c@}Tccgzsg9E=<uqIRh~B;ie~B*vfDg2jsV1WDK?3b$3fEC6
zsRN1OeKO@coe~F7#1N-3DclmK0WUdl%2O#EsL_30$)fuir&1j{>gUJ>yO4ukNGaWX
zhiqZ?>ZAIpr$C92gJ<a43n_WL3zEyq?_7gKoi3#C#sT#bNc78vRI9uB_gIMJk6YiR
zzfKXg3q{9kDW$pZoNd&Ts+)cDTm9HGV3=i5B)Mh|d`P3LYbm(~1qrZgDXc+7S+o;;
zEmho1mc>tAuBF0F^<U^NSr-bT!_vygwB2`HXU@5}b@|dtha=nVclx8bHF#ncN-=d<
zT1FeFq0nLJn}t$L9hOF+!srxJhoy^0rbRLXagodnPuoYNMKU9K(0eZ}lNrfEGV^|#
zl9}%s(iSv+SY&KEXCq5LsefyXP3QXgg%l43t`E~nMqEhg^e5d>43ZDpTs(vcKTKmM
zW*96A8nvC2?TN1r+d`Al3cr?2Tu4ny<63fOE(B^a8`(qe8k(GzA4|m#gAg~31rP0+
z<0n7pRQ+NPy=C!~v{FGfCMIO2q?<O=-@@rVXaty<*=|qa+I;oQw8CQnaUnG`UCCFI
zL;`ANy6J7yF`PslXQrEV)$!p9&@lIBZ1^*J`_N}rW$3WrGpdZJFnn$n`{@}}c$QTe
zIxLt)mBFY14x+|vc27^eL-Fji{NgZ}keQvv>wEZk1_{AOvf1f9^?F-zHm&f8KwL;=
z)A)G$PSGrcgyq=}p4A^wikDk;q635FR3}<XKnr7kHEZ-=`d6i^(+c-^VnS$jx=lO%
znh?Sf*@m>z!gm6n+h+Ga<|t&b=k)`{;F&h1F9UB#H*Jncrr5jUreZp04-3DbcQ>}A
zvErc(*RB*2wxyMN*8c^)Lk<2C(FuIma$DLf-U|Z>Q*TS-Ab`9RB)oH5I$jU&q!f%8
zJS1#S%a9;BsKNHM3<;7&Az^zOA>jhr0Zo*%JB^>@{1G9c!;AXQ9YBc@gJ<Z%-R6h^
z$z|mgLXfD_?ljJiCX<unw`2CFb1tzLdg+sl{ps8gck)7V@~>eN@kS3wV1O1Mjs}Su
zeofs-XFi2gnQz!%dh3;;Z_)~X*@>8t`6i9fgB!^pK^<W8d+V)Y2P_=UB^+!7Kn6AY
z7M&BtCqN1u1uXKCUQi5%a0@&J#<%1awYWG0ad`Xb>_acniurU}5$+8xq)w-?Swceu
zBtTE6Ti(UJok&#nbh_1@bh?knFxAg&bYHzZ^s_l&zy!q4G+=sh8F>2{cBrrZQt_Fz
z(put@x1UM3Yp;(W$0{UuKg;^OqK_&*Yt@C^{Vdhxm=J=yUu4O@>BnOi(@GnOMBaWe
zjboKZ;c&MZj;raM;TfCnF7{w6&BeO?U9T>=n#Nl%wCK1EYnXl+<;{#;zfNBdy-luR
zI4?W%@A|)Nt@~%}UATXVhd_TlV}I#CIIzeY8LVPxcE62Wxi+H=%CJBE1JfJ+6kmzN
z16Zmy6A(!ONT}6jaBYix86<qUHd8t%BYc?{+?U_VNMDv56#rI6`m$t^FTa(6FY`@+
z+u%NqcQVSbjNP}E`TnWzcnXy8WjurN-^s}LW<jD(?_{EUtfCU+%kN|mazveIDf>>Q
z`7qRpCRjX2oeb3A-HiQK{R7&=xZQA!%;ZdF_rIpI{E-=aE@(JSeYcatkI7zmO)s!L
zFb1#HQr{34<&DY6?@xh5d1EqI2*{`C&oLRJnwN&BG}my6f+~HFfQ9~~>|_6}|ISu3
z$%3V3Ov=a||J!*pCS|aTEMRGto|GxLk9QfK5-f3C;-iz2gJw<2G&jrULMVGursF;O
zCHkB_exT>mOwL+((ouZQ9={aYrMJUiLwf02_MRI2Ziw+|M&7Y3qQ=k6C@C@8L85w~
z#b@b3qNte}oWDH_PcNd;KAXMTUw^K6c196V6HLg=rk)r?^Ij1R?D-2`*Bjc3=L47;
zMoi*nFx+R+a44ej{sl|Fp?_ZdMMi$;983s(k-^0f{!Q^B8s#_ye?#A1yd<M=XM`pV
z@+IVqs|6B<@d|eAO?_?gii|wkFA^u*8653nxlhHxmDaGW1N243YcdM|y$fOjX-x(<
zm^#5b?l2r1GC5n>^nrTEf(;qmU!pN`2aS<U8D$F}BQ05Ft?sA+EwV~Hg+(@H<c~6d
zM6)(!u%Ay(2@+1ZDHGiy2MRIxK-p{#6v;t7Hk$)QvS^@erh)PY^e2A4s6LbP4f^x`
z@NK=>yjuNXqdt=x=K<SGUAQBov=muM$G3Dx2&9OKcnI(v8N?xc&NUamLWFfRd-^TC
zZD?mkh9NK^vonJ*MANsIx@s4zdrR*S+Le((4@}}_5cKF?ftUL4OXeA*cL{x&QCjg%
z1`{%0X4<wR(?JH^x10TKklr!0J0s@?Fd?%$gSmk&X5c4*upi8J4$@nP_GFYQi9<nn
zPo`rhe$N3v_Cts9$-(;V#d|Fo>b$)qL$5dh2toL3He|5AHTHEz=_r9H2!EaF(p7&R
zJ$$F(_%4%k7*_lv`@B~7G4{58Z^3sN9Nbb@-$`A4Fryq2U0nkj1%n|j&4YyP4rZca
zfd>*MIGDkgNT{ztqOT8T$`8rDCI;{8AI!d%9MtFsv#%wK`uYdzYy7s3l8YBDe#+!r
zWiy88r;VR7xy8Jfebmdx(XFDFw+}@xgXGJZTs#Eq@eF?M3h#}AL`_e!^F#IO&`C>%
zdif;D1i1{TQ>^<tdU5C!oQE3>KTky5Oq;e+22DK8hLFtZjLcy114NKHok0d0=Q!x)
zpV@|Y^peoerYHD#FaJ!QK-YnM)XQhtE${00h0dCu048wGk|&7zz}V;5tM8($bEenf
zH-jK^j=V0+anQ-<+5C6)Xz08dfABp$$egG6li)IlpcmMMclFZH1#_t519gzOKto-~
zAgjE{+6{xuMXT+UR9>XEM>r00%1f+fm>vsV$|xeGz~>twb18%Oy+oanQeI}uhoR1w
zGYWr24UMHN@^S{Rs0kdr<#vVr3Y_p2t6lW-5mz$ps_;U&V!z99{F=#my^M7luJ<VT
zHG^-`lSAG`4tXP^^e?0Nxn&J#*a!^qX&jK~<{O!ycpm^Hdg}(oJaR~oaL5~(WdAZT
zOA~`TWWO>wOG^%F(yvU;(vn3E*{=)^c@CGIbMYfS@08_C&MmX~4%ykP(YibP`g{6g
zit$dFbWT4x=euRnIpZKvGtk02L86Rz%iwvG>*2R>ux?{5N9vi-urld+U_xeC8LW>i
z8#17Vv;P^XcP<`YCMOXviCacX2%2g96ogpzz)1Z;TZom(`3PJ{u`>8WXD$T){D9rZ
z^sdDpl*wr3=l=OY8T_ihK!Ssg%g$mteoAGWRUUchI4Y0NB7O=)lUV%+m_;U)Ded@>
z0TV)#%JA!a_oFNCHXI+7<;-CJ9<ASJd{l;>q(#Hs)RWW7luwvG28#y#CAtuN*kW3l
z>_U)e(X=wzg&@&|)5?;c$Sx!X@51S37fKFlFx~7z$)YZtPF=W!x)8q)G_Ne@3-sV;
z_HcIH7`>HZ%qz<c^3Z}G`N7-_`-vO?Bq{}3Ox+*>KcB2XV>v**w}3r1PQR~sL7B|Y
z!Gz3$GWyLcipBxzs4QDOP9GY|T0)#lLOr+)+PaYS9<M)Lys%6To&fK>g=P4X1^uvF
zH^Z^GEN2BfGhTnZU~w5<?4fbdjjXw}Oj$0+1!!~(7~(1{NK|oYnf$^wNEEcR4A%~6
zT!4g8mzI?*mqsN9H|jFesFH&wEHjNNS!C2@FzQnd{EB<u-pzMhY*41MCmzbp{C{G{
BLMs3O

delta 33071
zcmY*?cYqW{_Ww>ZJKNo$?DWpe?(~G6ov=GQvw^&XU9ve~yffVCp>kgE%y;L-6%-^X
zf<PfjqJU%s1|$kDX^|ux;DM3_mK+p>FZ@2Qs+zvvfAe`=@71eUuU@?h-7{oeYQ^f*
z+wVHwRo-p%u5)4bz(<vNA7=(Xnw|ZLe*RlS&oQ#iti|t*xsaV1bHTN8xuYTT)ZCnX
zdfvr6-RaC#9ENM0Tbbl`nuqdO(Oxy2dGU*!wOXyN-==5N^K8S30;&Za1hu9XY(&t=
z)0>LIDoOK9ayQZqT_tYyJ?(bGHQw!<=+4&Nx@OV9_letOpx7;v%gCPKcCB*g9iW&i
zS5XY-RCe*JoSNFHZpEq)`Z}k&b3L+t1#+gk^9wAf67+Z1b9wCwYR@H#*$oxxsGC!q
zSw!pHMZc3<03v3%m4Mkca`&JA)br)?*L(GRq33fi^@_aQ^H04Z$zBy~Ze32g24yUp
zG=fcLxEs4=t&O1547cI4AQ$L2^_3nj-)T5^W%AeMbk<+kWy^3v#x7fi6Eb$W4XYte
z$k^o$1f@tP+O^9ax=&iriFO$<&n|cPUj4X}*8*_|-AcmzCtJQP=O2rA<eYTWfMBVd
z?V{(6y;5K{sypcRMJ$Nw4!UD;y^za7*&}Xt{zI49I#+RVq*$7{z<I>&w={Es^N72!
zNWbCWtT~4Bq?^4qz;%_qvMa|`bJA8J2P&SlTbu(yC*4L^s*nRgC*4Ic{eE4^)(zJg
zch=8r!LFS9j5F?RLod^v*}8&`JL^`8*!kD=L>v$zfVnR86ec<AE{y2id0{*}&z|^C
z&Yj`&ZiROa$~aKwyc?Y($^czt%c;yoxB#hwGURy|-Qhz0UM>fUU1pKpIroPzyM-B0
zrV+|qrVfG+0iut8Vgq;Q+#UYOt(a1d6J>sKhr&`0ntzp@gPg=wx8j#&vQg%$I~dYG
z&4U!T;hJP*?KK=G%gglKlk;YFX7=|vWzMFP4As!@gN5B>gDLFz;hYD`rx<crf{4aW
zF*Gif%0TBS2Bbd8S@3Wgd+tci(-qTf76(xcO?ZS`ae!r-QQ+5yQb)SU1~Xa1k(`gJ
zXByIrKtvm68q)CrA!4Q>ofZ%xW*V@`BU}Q|9QMW0oX0BW7{ay?OJik@5iI7t4oHQJ
z(v<$Ts1<fxz^aes^r=~3*GfZWfzdcu^3YIOV7P_vx)mBK3k>+~`wFiXg_mTm9m{Fz
zs99pm$R@HagZzJq;SNcW*^sfsh!p8#gbcX+%FJEIb3%^lm9`8T2`i1pG08+DVWkmo
zW<khUX|!z3!<SpZK=_hPIFVCR{-vSh$TH;fUmEId76i+eMy^|blWUGaUdQy4Ie)3B
zv%5(JOP$?KDp=~Mo0bZLX@+wXn{zT}S<NO}Q4NjVWOtJW5t|IdGMEMto5*0(gb3Ym
zZe^b~<jknqYKzbzVyi7ehls6qPwNn|)d+-myl^Xx4d)I+#0vmeX@?=>1t2(g7&2Y}
zf^&yq#S6F6#BlC0c)aKifbQR8>(B%`?6Gxd0!e!e88A>7lJ*z~7)zXp7>y0rQ6uYO
zrr=CYmD2R6k=;~(93!(a4VPo=nR7Y6EIek&Q3oQt`xuRn8886~LGlT<^IXo%!V`wV
zM+6a3=meSizoHP}X*T|R&i=yFhLT5Jh(a_@P8+^_eUK;wrOvU@7joVYpR*-VusBDO
zYItpE<pp-f#hgx&3x>jHG6<qzalyb$cDWIn)5LJyFtP?^rd-Uq<Z$0Gvh($0R6!GJ
z&rO5PxSaDt;Y~v+;%a~j?wdwDp?@k$p+SAv+#hqM7xu}M@v#YSP@g=+$8Dkzc>1xw
z{FJk!uwS0ShXUkNgZkxRDAbEWXwX3R;+34QBLnkfWNX5s-@rUXwu?<E_8G2Od0C%l
z9=n=zA*Wzgo|>;u2D8&3W#{H8UCiN*$lYw>&)Grt@{Jsw)#s{tj5*X7df=(ZEKn9Y
z&&|^eJ~jYR@!UMGm{b8VIOgW%cjhx7LF5(CbZ%ZjC%ql73+xNny^7kQ^#WTc1-S)z
znwYH&9^@8~1=jkZcb?%omX~!t&tWd~N7%%_XZteS6!p_4xySO<u)cwskVj28$@(=_
zH$8YVPbuWefe5iD^CBe{gsvy^QfUi9*OPf=kMJx6g`umTDCH09PjH#wh9~8!PxUx$
zshX#ds;8~?148C$tNnnGdD?0}LDBxxR{Qg)-_B9{TX(>3jGS|}X!7rKmKE?6qR){P
z`oq<n9>aAdFY6kta8;33_}Z=h(NTLPPmStLps<IGa25T?+Xn>cfTH67A^obQI3T27
zwG;=0;#V!j2@1uplHx)**niGbI!ob{Zvv|NBb0x7xLJPA(?qTX2<boPdBm&*2<boP
z`8sj8ASk5&oR{BGKjT2_yoRf{C+j1R!~EVMTE_}K>h`?e9yOuAO{tR?t#b|VD1$SN
zyy{IyEq;om2@ep;26!4LxN3mVbbzN=bTc4S8Q`g?<hd^(a^C@-W`jMAxH3dQmIjuA
z9%tqMlF(6uJkI9&W4v+{7~)Y(^Ula4y<YosuQyoleD&UPkc4@?+yFy7a-If6twTJB
zCFDw8>h+=QO1}EkABNg2)ZarrG8;e{unhGe+L67zgob&<cqasV16sAw{5;H~iEIx~
zd0|ZH+Z)4}J`8kE){4yX0(Dz<?ko>R$wxFwe0-p@v0-&Y`CLmDh>$hcBS$nKWX<(p
zME{br;Nb%HOriQ@#R8j!k5{X)J~3XYvExKFXzgNlv{3z|VzJFbtzB%j*2i1Bm|8oF
z=5il3cX?((M6GZ%TW&K^JC|GSL?J5WK|43okjOV&b)KvrJ(=97y2;_L^Qfjifi%dc
zhHmz-?Gv>zRRFNvW=kd@WN!9oO}M)NLgr>q(_H-ra<hD>>Duj4_GVVZ)!!<$_$h3T
z2jJUn=>iD8-J}bxsQ}?uyFH=3@GDx?5CKk(xzFRQ=58e^u+1J%to(mT5VXfr*+D-n
zbVrHrJc!0S9g#=aq!M+155UG!Te9MJo+e^o<#Q{3N0z5i2#9g^oyY7fRiI@QLfUtp
zKqq}dBi=gHbu6<bsZMe{d(0X^`AQ><pktoKJR^n}vidPkKx86-#N<IHA}VQwN{)FF
zkH{u8lH=!?r}$xg1$AaV<=Lk)TT^N$N6jg_7AI;s<!Q_(Ln?$?PI;p3rC3T3PkCxO
z@?<5SLgQJFNLB#AdDbJ76+m#F^~hue5S(W{R<e?>pzvi6Pgc4CK$pw54lc;O?2)N4
zo<h=Pk4#noA?dOQ$;y*(uL8q$)sxka{ij@g!hO|)>5`|e1>{^eJef`v>g|pmH#{<H
z1R1h!cx2WH2w68g$QsFNfUw#PkI|NQ4ME;DH#~V&`YAG60rhO(%-BlxWk<KZUK!j#
zMQi$cW!C^wDQ`doH$YU<*Nfmbn^re|!!_KSwZ!W%$7i!wXS+OX>t|Xvo6|zqGOsjO
z`zr3?UNs=bh@YClynKwX39VFD1@lT*$0O9jymE*Dq88@G5W!63boxot@tK{i)Pauj
z@ir5wHr^{IaTEg6crSW|0;r!N;6yg4jrxn4iB{u4MB^rU8w*DRgoKISBC+ZKgoKIS
z(zHH9R0}vG6RuKcI%;OvGRSvlcpHnI2S4}S8Qxss%7Db=4HfEJXmI(-Gv_c@J9S&l
z99slA<{VoMa?Cm2qL#epzyc9-ylvWY$Mln9&i8W1Yy|+$`CjRmfZ&|(m5vDr&iQ15
z8=`U)&P?msUUk%D?8?a_GhXSDe(sSOuk=Vjh{$;1kx!$4O~bX!o7J0*@1Q=_beUHT
z>CMn6lX`Lm%c)jdl&`S514QVu!YgNFKnPml#f(g8m`Rpi&3;?0cBoiwvrrGN_G<aO
z;V1)^)m}58Pbc+F>cX$s)@t>$@~><jlJu2V<B2wv0nb-nB-*Vx3($J@X^mP{v)*d4
z$>*~5R*L~4VZB$bdjN^Yi)gb$)QTS4%*>AJ&hpJ(#U)jvF52wP5mC|PU9{PIdsE8X
zp#&_tl?6Jfoocq)wbIgZt6eK~)mE<|f)Q9y>sBu^^K+tBbk$DAI;j_GcG@CnWx3OG
zHIsMMPH(PAF99K9r#DrmpBEyqwA{<qbyhFd?6pPYK*U~eW6Q*}(%kDU5UGo)(C*4!
zZ?aUxQIo>?_n9BNAdWu$y)8q9jPI?GfI^V*y*JQYnueC1-+NoNu^`FtR^6-LuDf6w
zRXlEck8~X@Ob@XSyQwW|4%roGsNj&du?YC4LJQMF-bAI8NDI?L-WDzOK{PB)1q;&?
znVa3z_Z`(IY#FpNJz<-hR;DMsh9#0#rYF25rFvT~0xQ!~Y{MOD`|?v>MQk9Ld`WuB
zD>o1T!E%cHLU<Ndq-R;>o$#!)cBM_A_*rjbu~}s*v=lw-EffP85E9PPK;EwMT5mI)
zZ)YaosXprL__j|5TvNFXGT!#dfC~s2Z~FpK+4$Qa<85D}M4zQ%Kn4ugFkjY;Oso6U
zv@>s*4|BxF)cFAnN!JLUGMc^KLmgF%Um}SB9pXm#wA;BjK!_XRa~nK~07Mco!k0JN
zCpKn@KuLsaq|f=WPi)Le8u*w`Zp=y&HfBfpXk&IQB{BgTm{WYp{pP~VfQQu1N-cn;
z1r78mK22<Jpd_SC@yV$Q5H2&tXWYl9DuO(bnc~a4mrwbUf@m<s*FxkrlElSyyhk4^
zY=9EeeM;1P-w}E2cfHu%kE+9KKoDtrfCvBSzQ$td2nd~~`|`zJ4<Lk1_hEtC9Ci*G
zu35gU`ON>A+N|j;pV~zKHJTWNm9yutCmvIut({{v4nzo=<CA;efDkmthrMr_hXK*J
zIX+J<Zwf&)4n01{=Y8ydNu22y|JDn5J&-upr}(0J<eo=+L|V0IUL_h4<ooV;loFN&
z=0#=H1%#ZrJ{fg`h@jc?*l!+JJJimz>;NK0$~>Q(001Fjp3mUBoY0r-Fwciw&fB^A
z2npHqd=YG8&@Me5Oa15hihjd)=_RQV6?<-=L*GjK6t`jG@MR6mcbKaiMY{KT`S%&~
z7wT7z+-1IOx6aU8*|*UovYegyrTTH<a-ZB|1rdF?oNB)y3PHCO?9(UIOW_qhg-_ey
zq#c+QK8(yX7X-ADEqPKc53lqoe88g&O&%+KB}u)AmqDXeu|`j+vBWB$-1xYSZ&$4H
zVZqxQ2@!Y@`B(dtWb}fA%|C^$h-aQsPsTyvJA3pTGFSVGOZ1@#M8L4)2A|T^?8AzB
z>76sPo>m`p)PPb-T~E(ZeuJ;9+=5VIgRi0sMMio`^UwxgWoNxBmj<WU$f|y=b`Nj#
z$qk&_6c<En^kJHa@-hhVo7l&{R^x@6d~$2%HYEpTHj(H4kj)Fh;dW*A{aQVtgm>AJ
zRFv99lDhFih{OM3hkv8q5&n-);qeP9X(;m_Ur|*58!v-EyPMtFQ~gKbZVW5g3LRy3
zQ$YF}qaHj6r3W(yda6B?jtA{hjZx|#l@gYqSbETx>>!)on3{gjSK3~mAcP>ep3MB|
z1vRRKPuliw0wE`T#Yw#*uL<F^fzAG{+PSE~r|=mJ)!&9P4ZdVbmcat(6gq&-`>pC>
z(HGUyFrd|cv@>*y<lWEZHKpyA-@m9n7(VS&EKQrD%xNDcRoaugO~EnI8Mf<1wNv<v
zEhiUc&X62zXrqjqW`-8OQy+_*wdJ@`<}AtC=;DP8!+Fh@`Sf?{y^RX5`4paVg4aN?
zYd)l$(wcdclQ(?{)-3Fsf6L~1DAhL~)}*8oTpsK&uz$U*Zi@`aS5nf(9uyjoUtX#A
z!v;q-g7^pdS&aSZ6}4~E5Aw4;eBbkS8g)aM<5l&S;UW35-$4ZHkbLxeImF*i0pUaT
zmsi!wCqK*=ds{?AnGf@$F+IS`01eGo0@2$dk34#R<n=dRs(ACQH+hgkS(1RK;&26!
z7slaAoU_6ghOry3s>R`9`Eu*<c0Lw|<zwrxB`<@a_z~;+n%X-2QNDEa+xhtWC?Aeq
z!OLLy4QC@>Q=5f{+j3~k4JSFGE)1#>?C@)-Yec@>=DnQ{suB6v3aI3AFsMedlGoMd
zk&(7ZXi$wLlk9Tqlz6$8=Vxumy!E=eQ*F9DU-jvC>rR)0%(;?1{SWotik0~;9`cC@
z-j(^DBy|iyG<aox%e(c}2phmKPF?1kf2eC5<#qWkzOp7NnCkL<Ws->kd0l?hgZf>Z
z2M^b?HUCoYsa&7$;(NnjA-k^6_i_gy2$uEvt?$!6SD><DxVGeHeVu9lZ?%OZcT2wN
z)xW$QvJ}$!bmpJ6YPXz<)A=qwCleLIPUqjwLjgeuJDraa`fhX11f@4;PWMy$72LbI
zz{U50P>Ph^T;S)cLxN!1T+pTmc9axn$Z%~f$a=@`&>QQGoFNF<TA&8SVlYHX>?q)i
z!Il8%${htVTL47a9R+eV2neY=3a}bPD0ha)d^_2o32LnQPMd|M!JP$iPYGqfva<kt
zN}pl$fd|GoSfCuqd_O@gZB&b&VmieGILN_*#$sO!5MmA%_{I7V5MmA%V4|Td7eHi7
z2MZEM3dB|(5yV#Bp#r&;CrPl%;R0;sO-FPCAEcZqQ1Z=>ossT$JoHHBy(wy;(gGwg
ziK76jJ!5N6E0Qy${in204`E(%T`Ewn7Gy#=hj-M10DFOAvD4z@Qi03?@D%Kq3XlT`
zt#L>UcHdQKO^5Gz&hsnR<pSrG0+HiM8u)%JkU5?tA;<fvfO0%K0S?iOcimCI7o+UM
z>8h*pdVySv;u*BKULe<^fRJ{*z*>uj$k2WK;ski*4As@CkN;LD(2BH=UnV3d2|<1Q
zazzRVL4EvKk&f2jRbeEj{;Z$<nMR+fqnwG6e)#om@UL)=;Tq#tKJh#CMT(vS{GQeb
zNioqftLLb#993ie=q1`K6VK2|<NQvsbtNdMXuRLqQr}Nz55q-WpZb-Vne;sMSB_fz
z6!yjgDEO&gCVYV4`_wNlI{?DopZYyB{leZv;5qd)zw<M{u(zavZ@ORFTasY!8Gf?&
z&q4<Tp80+y<9B9U3)H_lY5^=Q$mQqzWlkODE<fLooSJ$a5L(Rl8<|^Lh^*SR!0%jq
zOABjX{Byr6m*;oH2W6qyLO;S8rF@cv?px${HAzt-0ve3Bl&K5V_%lnbegqNyxYX)L
zKq$D>Z-_${KuBHcN47<IF(A^ErT(J(WhFeX<Rzl_=^<VR&@wh~p;}nG%&vp>rI*=t
z(8yWlH^lNb%-8bE{MbPdb<ob?GJo(cSqJSLQrnjKLwD*XuLJYU3cqrP*(CDIS6+W1
z^871*ep$?7&=4n8^ibEI6w+wat?<k9W;{mKEBtP&E*f<!{K#BoVN|`sAL%ZurZGpV
zukaUj)2n#ZK&x2qMQXceSJ};@O@mc-9W<s^`Q74ZIn2k@DnAlXQAalFSmjSzCd`&~
ztn!!M$B*gI26Wq6=3lIS{mfds5*lx7Z5z^fTWgIsu%IDp{h0YgB`#F5)*pLNHpC@u
zxYi$kKo9eVVE(LQ-7{+BnL4`;y46u<*FpOZb$&xEw!(bhq0Wz)T-1?+I_msUt06hE
zjyiwrKDyz7cAx;}zl>T@v)-<Q_9fQ)<;odlP{(?Iz!FLu59|F%co!gPf(T^1^{jk}
zy6~BLTLc}6*V}5+&O^Q5u<T7c5A}W|dO}SNTGabX#kvgwrJD8r)T8`#KTKN_TUe*1
zYE8E-b{#s@+~SwJ8z_T1w)hk6q)^(K*y6A5sINly4mFWaf9qF%W6sNFUA}dNGW(XQ
z<CSMY5>plmK-{-}x#s`~ao_q2#Re@P#C_|p5VsEiq4Kx>=FiIBYYdeQjNNbjEuPVj
z)7%)QqxR#Oz01`<G<x>9T?_4O9QVt`G76!V<NkbWEYr@$aX*5)FiaEFa@-$%NY>Is
z)^gk*>!I%yfegv}+03NX>MtC%XYE>O@8hh$vE>%D_i@%A7CTE}h4wzq`sL0NAZj`5
zuX;|za6o>G>#V<RPkxJw3V=elxX${Yd6v&uVFe3<3x4bgxFdJG^=7Y^-}wD2?8b+#
z+uGv^>c%56^#h{r3w}9$0ix~;)WZJ?{jpfM>R00CW`#Kps%<it)~H2}Cqc5hr71k=
zs_jWlA?~U@sG36DRhq;oGb%J(*Zo<OOpzHCqU3cy_Ez~(QXyqVH~l;_Y6SqPH?5ct
zh_W~RGBW~%)SG@}M#m`8D5QYfKT}hu{!XdrkIg;aJD?KTRK+$IAej1_c^>^c+D<E^
zP(CE{&3g5Kqhg57M6!n1OccC_5YuE)6X2-K!HsG{sTqYGIaw1$xKXB@$P0N|Gs-l?
z);J(BnMlnkmnfvw_83#_YXhJ&#+b4*08#rGQ+5U*ILDY)E>TGH%*1I!H>-{(C)$-$
z=$vR*PN8$6DYFQ$K*U5-c0j~%O);}J$_|L2<P;N!mb?QZ)B)2>(E$LEIt|;HyoG=$
zJI$0G00^nmOqrTS$YwK4Hh6*>tO5Y%44adBVTLI)R6GUe3==utHS(_rWvFvaWl^Td
zR`u_WTKp6?#RG_$Yc&fHV&<B1!UKeuxh5t&n)LxO>(4cVi_AuR`;`bNFwb;)`OqXR
z0>FF|>1m$cnDc<-q_yz^)7hRATg!q@8U>%5&YJ(fDEexl>3mG2rxB>&T4pM%O_`p8
z0F^<pY{utkQ>LeQ3Yp7HnVted<z=RCHB_ebln6XsT5dX5nIc`1H1Mr3Wx6CuNS9Wc
zlrHV27$2cb*;!{Q8`yt$sQ;<OFUyMLUv;JoXDA0N)|vSt7XgImI#cHPfKaK<Ol*Kk
zlmQVz<oWANndeIqY_^^Zxsk3E6k)+-W_@Qm%r6``w149j)@-M`(%53Ed3q0MS40Wr
zHdEO(a+msGEq)05fDC1}nKGROgfiPqnN9*inQf+Lm$VNNxP7*p&YjXek_NsVmVG1%
z_W6d}2iFmy039`(%6`*nvaffkU26d>CCEK@n=+e3NeJ6*%4`x4O6)d`{kN2m+2kJ6
zx$l+|RyMiUl-VTliHz%8Q)ZKrgx>hC>B9X!3Wrg{b->IzCP!lwiX1T2LNOYnG#U?!
z(by6Io^{w#8W3d<TcZ&WN*|`tSc=w0X`~!weRr$rdyiUi4Md`vsyMv^1j|t}HYpM_
zT*u9<t5T5|N**_@xEv!z8e~`ifFcc+B7i8{U?~C!sSQ?Gh>;?vMObJH0M64kC+TzA
z3JZ7&&eIeY_|h*%Vd0{wT;XFY?x@9Y(P4N3#*5ad0tDklYg7TE!!DY>E3(6gz`f>@
z>HJA{n52R4vgI|B1h4s#dkq;SZn&<QS-k@^S>-o!#!>CHTfs6;R=FX&2LNrmVW|j+
zvNtTN0HUfJWEE_?IOC-M+idE8)#k0<4#;yh5Q!Sd5yusPV0k-$;|khUb|wth;6T=t
zfWz#gjQm*lWWxK@MULR$0M3}{lrcftd=OAPW;*iA-}QR)cfDR`Loa4~ne#i<Ux5eW
zG!Mm4%LjoR;RJxF<%0m6;A4u#3DRtM=DzRLfTMbNK!y-d;k3g8@|q_gl?udDd}08E
zjNyUu3O>{mG^sK+>3j9zYGzBIP|gB!dPEsWU;#Nj0zv`{V0!Gtl>i#eDi5e#YDU`<
zD6)>WB~WA?9gt^=2_9KT2axg71e>4<c3eQ*XaIor;{tMm1qA1~fSh0fQQNqHHNhrG
z(a8aE{Sp9zCfhpDJUiLef#%uC0Xfg2FeFV5V4fXJH-m}|*NQ;a*-X1b>Y!}*iU2|(
zpJa=vr&b5VWq?<YtFG3o1Jbkc2ohHZ<QxkKiK_!}n|;(f#ju)deL&e5aGLe(;g#C`
znV*iUjUBb1iJ^fK5U@TVFDn5;!1{o^I0J~Gu|5#m7!Vg{h(JTbxgj7g&PWQna6>>|
zoRK65+7Q6S8ElC`5fs=QP=aPG^4RM=S?`l-ss*s61oiIbfIQnqVeoDaV4{AO^8#%}
zZ<r6Wf3MaOOleT7%0aN0sbjYW<RN!4@7S#Y9CBlG6cwXCcCg<zsIAL)1Z0*6B3O0=
z<ZTc@)UYFf0N#ePpwD)(4Gn7B=DPy&(seQ4vDp;}io;+)u<Q!pFnAUvhQ(Mry7mW@
zLz(8Ma08+iKP~NO!MHylCv=np-~ND{&;eoJ{Q=)0*q0`BBJj}jUBG!TASQH41K;-n
zIiX7uLeGH!P3Wz-3Rqem4JbusafCg6Mr~FDAZGMpg$}ll2IQLyfY9k^z$X?cfRKGO
zfXxOP3dOX1JT8X<0633ZLje$+$E~3N2+rfThC(qd8_$TLz;e&2u8wDH6=?Bz#u^DI
z2|;J9kpKumXJ{lmfbICEhU-Eg>&F0l?3{XE(+h#@Jbt3nl*YkDHs>5pbS?(uhB=6E
zt&0I{m}AE?yD53nC1`(6jTT-C$Q^S~QRouI3)<;!O5S)mz*?MF6NQ&$<A}=1@cpMS
z8cPh<)j(Ds_LuYOlet#|s-I4toF$~gwE+A6yxOhin$<c`(Yk9^>j0s}wSXb^HvrMP
zYXKYwP%tkc6>kLCvlrB6)i-Pr6f$oF8jIUvD8x&dBI^Q#h#LW9UER3|Xxf|AUr_I?
z=^d24T*9;8-a&cU1`rZ@2XieYXi)VILWz6Px}@Ri8_b%<9=xdDliN3lk+7MP!X!0s
z0GoDE-BLZk5)2|*Hy|iuF(3pF2+CLt2*Cq_u<f6@1U!77&A+7nwdQ?W0!`%a+Y+d8
z?+0aKp5%>tKZx<ZhoV-J`e8(-*Jbr7NBM}L9JHW<X+#hmLF;HhR68PwgNZJj2WS*K
z^`qLYdX!x)Ut?JoNs2XAFjuU^0f{GwDc}Jvf!0{;k3XqBx{R?U&_31}TLJ}+F}4K0
z)*=ab%LOW-?D(KkZdS7o&#MJ2?}}R483Zv3@fbZkKG;|cJ3z=99}FdBdnlre52nlX
zy`m=&Q6>kKPg$QU>YiHsvZT<4)MVR~6kjF>rK=@*e3?wWOlurK#Fxpz_@_aUofAPM
znNxz!GM=zY5>%TSbUuyuV-#np;rc9?H9zPuYa)-o(euS#UD)2MYNua*7Q_oQezdfd
z++<czahr`JUEX-3*PD^YAGt^9heyy4&qVwKgnqMva)JUxD`y2ULE&T!a`12td*x>}
zR6WOPA&8JL$7&%U6|$TK5EAB)vqZTB_{u!C;b%48b)GGOdSad}fvTAol$)!i+;ipy
z5$_JrQY2-#76!96qqQB_!4o(M?RrgJ?_L<R?&77Wv0ntm8W#Yfzp$DI2+?0y%>#sT
zUr_Ug)3lJHiq~XLTvtarD%RLc)S@*(xx7UoFs%t9kEQsVBJZyYic|yu9a9&SsR$rA
z>w+>B0R(4V&`L#81nYw$6#;-l*IPCLgyQv<O#mUOJ}6TWK+cK){9X=hlE$nQ%o??*
zoz}0Bdw)<Z5Sd7tOmRS(0ss;ZSgitt!~>Qo03q=Jnc_Vf)M?WESmqO_ra5{X3(70A
zpb|MKugn61=~z%+nFYjLbSx;Z%o61HGLHpuWp)LPk~A5sf&G-Nt$Mb>YAT3Otift3
zAnIrc%6AI^QAa}%69&Z*K-AF?42bJ91jVAiAsD=euD??yU^vgbIoi3J^L8b4wefsV
zUXMf>RB}F8)K*F*d!7$=sHP)HNI+Ly3bL-Mc6YZ+wg}2IF9qd}9tuIkrC^xfh#($_
zxD>>Vh#llhX=>EXpi*kCZNy&rrxwbbRJHkz8j!@uLjhhwhG{^EyBU<Xx&R^WW)PP=
zRtj;byMJbnuB~>|^bg&VLD8ju=#~tMF8xC?P^Wox=^w(_lZHXc@d4Y_L_1ggfh~fP
zjSoWdCUKf48y|$CVv`jRYJ3oC*@`=Rnv6e`Id0dADu#xnmxG8}hlZq=1A=8}$nx?u
zWf^SRL$_;=&djcr@(X4wPWc53N%sZ|M6eLt`yP0A8BV%FS^GnHL-0!t_i(2))tcvx
z3E_hJJLIZm@N(CLkTNxMys4%*YVlK87!Od%1gjE2R5BqXZvz3Mk_jQ4YEbM2MC_dq
zicAeP(mi-_mI!?F$Z$;zIj4lO`99GtDtIS_kl%T*&vc833~zGN5T$tSxnihqI(y5l
zRaZ~9m7>I9dPq+DWqd?U59Nw!5)gu?hcHb(%_ZQH(@b{Gt^K-orY(V7Yo^^S8ZR?L
za!M)V<7H+DQwm*j0>mY!nW6X)amk4=W)!F}Gn9A%Nvy_;@JR;6e*1xg?$Ce+HRgnr
z7G~?nL$CMxEf$-b4Xs@@NS1ABJk1Ho{0HTs#GH`H?*kD#=Wo_r@64rPJk4ia^0cm<
z=i3r!uAXljf`-%lkeuzy_;8vZ!dy*nZb4$U;aVJ0ma(;Y+SXe9vh<))wAeNVjiSXN
zL*)J7f*y-Q$ooYf<5US!Qp;}jF`X-6gV1ngLe4L4^|7RacZuD{l88QDn#=pRk5CMD
zSjCFG+Pl@OY^`WquCleFak<KJ?=n6vSA}p4g^M_78iwT>cF?PJs$OGDpkcYjwhpZU
z)`W7!X#!ZF+nNv#nV#noFf7-xU-`6NHS25%v=&$wl8gE>K1$bx;^F`T5E9mfTD8{e
zD87`@DBY2{;nUVTy6v!K(CyV7whS7kJ3{jPPw+s-ju77e>`go8WpqTeFQgQj7aB3g
z4>@_6fFB{RHuC1{J)i$$uNNY3^m?`D>pkD>_0r!eB3+()qu0xCMr!oP%dbS9@A+!v
zjW_Y+g$k=%b+`;<-GZ>^zK}ehL`BeJU&w6@8aij%7Yc^;(I(a-xrU2{v&MxT=I%z3
zM_$QPVL5l3!NS=Z9k^xZ(yTZttmN}os#$GPbA<u<OL+7UQ`D$1X7?B`i;6yGlapE^
z{4q|7XtqEZTAq9y##~v<%K(jL$C6qyJUT4i+D93h>PCmL@$w)q0}aQpvQq7#@E9EC
zNICS9<d`rPvO*4;JeG|v)sm61VR3U8a_C~-*f35fj?xu@a>KPSoK>GWRH_|uHeDD-
zhDYn>a%$6JwyQ#GUA`Eng?v^65!x>f%VZ7^N-QR|X#rYJVPh$)s?^$)FSS`{f?sO0
zP&isjEcAhba%$6ZHo8))DPL~0kf7x@3x$s5#Dbe`U;$dioXxb(<*RHKiWaME7K#?D
zh=s;OInBOn*lW$SPUUNC777n*!kTahlmW|{@NKv2f8i`}k9BN+GwrR4bv6sdf^}iJ
z(@@T1!MZSZ8ivupEvHm%6MLt*HoS6^%|jz~Q&{GDD1&M?kvDvz!}=A5>$`B)`<Xji
zXyNSK@50DAzj_?9D#-kUGjCRD>r$--N94o^DufM=_{BwSKnNQg!Ib_LUf*?A8m>{1
ztgnk4<{~HCUZ~||dOxS7mBgqBUo$mwR^r;n*oZPA;?#d|;Mzx}y!Jsfw*3X|SgUan
z9AD6_5Ag`SGd|+%@;?+*_z6)aHinj!q~(%KLoaP|cKMQs^b$~^<&uc>5<oC5iJ&uZ
zVGcZaxQs3PqgMIcvWVPd1d*r_`N{wwSe8Zb$^fNkfCxv+BDo!eB0LSmUBhJ&cYA)A
zNd@F#=CVjtTYhDrl3Z&QyZ<GvUHK|oHL878L>?cY4C+}G!I<j8RRdbX7QCc&>$WB$
zBSj_8o7Y5SMg#~6Ya)h-6oAAN!SqTm4MSD9+WLr6W-<p0ysQP;V}H{6Rf8hj4A0>t
z>mxGd1BA5ok+8U=00?R8BX|k+O)d;hSkHVfYk#S(w<XXjvfh?JK3N|Lw~(fy`KdnA
zx{Y4VC7|pUw&7*1WAzqW0?j2`>=u!SZi&eBxRQJ5mWcSe0~&<6WIOBnigsu9c3T2n
zSlDh$pt)pwL~aOx1v+ex;I$rlxu}v-yq)Z;SF~T$?6f7Qkg(I1KpEf8h}@h73nc7}
z#EbQMI(Dz5x#VExm#=CMG^#mh%b=9+pe=*ul7qGuG?yGCEe6nhR7rEm@yx+Dv_X!V
z<F*WX6XLingXV$bwjMMO949>%(0zkSx^HkXGvm+NLZ#zHTSjBZxM<6uO9mGshPV>~
z9>};D!F|*L!b5O{;7Wvzc}pAE<%%tX-qXKg%b+U+S0aYUek%FP5mzG3TJSeADiz!h
zxE4{`m?`$jTbjw<{+kx)0)pjZbWz}1M83v?(vWp6QXmp=K<INVf;pB_%1S!(zY$T|
zn`J`QkAKrb)gV~1D6_i}ky#l^L)MLm*-CmF9eLh}RJGH8#bx2#zYpv2ckP+#K1H`A
z&{=<<qFdvK&ieZl8DiI?QlYc{K1Jzr{=JJzx<cHSo%p-<San}pLM|lqwI$?2Lf;~}
zt^o@q^ew{MDl`dI(goxG>~H_j+En+qCE)8P&i=LpHzf2gl6gB=AfbOzIHI@U5^(!?
z5Nr5{)~b4tEx~|<LAC^XCwWkjyrNU77?3ciC=%6Q;}UQ&c?f&@pV}MMLu?6okTArS
zkOv7v>{jGK!VqdjFD?O>mOo<pzqA*tKe8ow&=(&S$z9w^#RCZ+6^To*Xt)OwJ}Rng
zu0P5pc<G|<?0;#GSC6zMc%j2cTL&*BjI>+fg@lpR3fj%8RD6`Fbo{q=f6d3X1Ro@P
zY)kM#!pB82I|d6Rd|ZSJ<{t`Q&&Np#TmNruSj{+FL_S1}vqj`X#JD24+Nf0WA!1xn
z6kpa5L#_bJm(0joZH7`a-Ih@R8Pkho`c|nFK*sbUw|F-Z5HhA0;i5R-)T~tSn(b`%
z&pz6g&a-V1xJ>ArT_mptp$tUKE|RY!0Yb#=BD{{Y97{JC18?`ODN?@5417oHklhnM
ztpQ>}lQnj0Oo&-iB-fo_gP1i%Sa;HL0T9cDHAV5Sio|vt5yawYZISa&d_`QT1TY2Q
z>pb{y5bHcZbG2MwB&UBog7Ec4a$O7v;p>aAF5WM!9mJ_g5w6{AVGsXTYs=;j&?a>R
z!O}DcO*h+`1|e*-t!WU#Hj}0cUC1Sx8Ls~pWi@1m4%AvU%KdK<&VV=4+PE1_`3EyQ
z-`DQLr;#k#pu(63E!PBu?1M!<vBd%i*$0cTLp+?)`erl<pUnJfh~`r|p0s7qw%<uh
zKNO-;Me@x<K*%^*gbnbkl<PD%Tvv*+-p<S$s=cM;UMWI`^Bah6PU>ANVr_?OJu9vi
z$-^5^A?sREP;C4HLe{k+ECrwAJa~Ash^-&4J>T)BrA~9c3whI02auPN^FAO%+$_Sp
zkC%NEXA8siZZvB!``rj_VAFS_*hzQ_l3S2A{g`8<_N$71QJEfr2ub~-G6w;Kq<&H4
zAiJm+Taa-Eu|XrX-4%mu9;$s%RDQq!Wxz8iifyuIQF%+lH6)rfoqfo(XN)0KIYptC
zsN6Lys<4rxv{!5KL*(!vL)0*<dO(O8M%9yt0>VRwMe#a_IFKR&Jk)S~6m^b_iUTQ0
z1K;qdJdlzkEM-STX}5v`X-jI!=&0f|;}LdtlvYs=U@1ZE86B0UVkik=qoX(#qtlI+
zl)8;$_kOJ1`TRKW^SK5@u#Ai5i|dAfU>O&c*E<1`WsHj^ALS_`L4MzDT(tBNo+3&L
z-FF)o?eP#FYAs2`#HhGc1ppVG7?ooU5Y<hL%CQE>%UXL-Eh*2NHm%EO&GFQ<s2pJ+
z!h@$p<x~d<5!0eF763xTv?xXxZVF`MD^;IGv*tzlwYF@UkUooM`}ukjpPs^QN>oXT
z_2lX?SWg0q7jy6s)|p8S?}~Mxo2)XM9T}r_56{L6L1Zf;qRi}QQIuZ100f%L?i{P#
z8<`uGFNT3g)F=kjC-C5Ge1B$PG;1ZBH&z?pbYV2Rss3-U8l=i1_Um!l+u=n~`A!Ik
zU|kf2^Z$aEfeIORZJhQ*I1`o2UVJ77WinALbTGys2WTmKZM^nEc&W585s4bbf!iIt
z4D7RvT^z676<!vVCwB&a*JW80u>%`FV1eCNuqQszx<*#ma%f4rg5<nMv7wdW+7Qh;
zm-*ro&86gSh$1%dbM#i!n0mHtqBg0b-f~3{p?-Z-u2uk{MST>jmGzW1wj%p}lbJ9{
z+vuqI#_DNM;Vj=o<x~tvrJ{HRk=84Kknv44QLL|`cUfCeGmm9HouYMd)*Q2C(0cJ$
zR4xTj2r`aE!~C5V;(?4~QB3D_DA0<~3E`@&;|$GJal-OcJObkh%Tob)QOi?Xk;Tq3
zc<RsH@tc6H0r~4$%U|&ng3en03J5`G$zR_gtF|^=SEE^<WafRQDN63us9Gef+M29-
zovb>RJu@4cUAIh&ClGkuGA$qkUMJJ?S3O!&gZpKM&DK&%b-$P#M4-Yf{bF)o9gs@J
z<Yxx}A){Xmm!a_1owGGrb|AYlSNliJKwAPCc3@0ibw(LT7#ItPMKd5I42)sXe3>Sr
z)&xgn=FQXos??0IWl%I25tEy$C<GZJV!0v~0TNRTYb5HN)@0&QF)?NT`*Y1zIVvW@
z2p)lPR7{2uKroJqS)J3GHeSca#DNU}<czmfppD4!F&Rzp6q3frWHbSUr13HI4kmxa
z*#?(1V_8esxrN%kyeTpI90tuMZO}QcX)$FM`+ku&xE8-e00te>rp06c286U}F?lTk
z5VOFvm~U20%mPH<v%vJ2b7oA;0+I&488JBvND^j&&tfzSP$JrftUouVJY?PxVJ8=B
zJ$eC%j0BI+!nsxp0eMlGmIFfe+?aex01y#=ZY<J+pIQ<W=QML;MGxvbMPuO&3uCwe
zQRiS2mf)tyU%TVQ)c<6(QRN_8EhmK*#^jeU+HiMR7{g&8eQ>W0c|(ScS)x7GF=OjV
z&XBQO5@jGE6O*5y03@DRn<{-Jy>(t?xW0~M4bGG=)oPsXuVZ-ojYpp<8YkOg{1~wc
z08QU!DFq0T+hQ^Z0Yc=q7)Hu|O1i3`vTJt?pS^itrG~d_@KZDf55TuOCU5Tmf^T<B
z-rfO3H|~yw_M#hUQ-=uDjm|wWd3#4vV7EOnd3#5aAZSkvw|DT?F!)elUktZ*Lj3kl
za<vvO2ey<Ti|&ib+dC)>-hD9~61~KEfex_0t=3*HKVY+v2@k~NPFfW=;ei--(n>fB
z#=&9c`BE!=?r=<gwX}+lq{G$_1ccnfGz2N+0>V2E#{zfChSDWetR)Y}f_L!wp9;t=
zqQkMS-S|4Xibmft_Q{u8`<i1`XM;#o%P9e&>9Lqx=>ekJV=?TLzeg@tMWN;-^R3Ya
zRG+j(&<4v%TLf*eoQxS_lLssiaWaNY9@-D9q79Z)?7wTY%9>NQ1lnLZWlNw9mQyi9
ztZ%>q38!KRf|F>Ds-oQIQs%C;+7w6gOSX+^Pvuff?mVIpm@dUIA@dtcRoGK;U5_cf
zGr>9yH<s|z>Q356xo(99lmp-On8(KxL_qk|^;mxIxCjkI;GyCFV$QeYA~Z-E_-<IC
zL6Q&}Zt~DTakGlHWZsSQ_YK&c>$N~7fOx|IkD$c6aTzxOA?)3_6*sGBBW7Tn$IagW
zz+VQ&WmEx#?FPnW+ysQAfpHl(0U>E%TxMbTdff-{tkH3ih0&7ygSh-qY95W(A#wSk
zRCfDDWMP2(@<uiuVn_^$BW&P<qJZEW%35sH9taNw3(vwpM46#+alZs*fIed5HflY>
zAH`)B1|m`8$iklFa-iG@rf<@o4v&b-Y%Y(dKqKPF=5S91a?o1F-q{2>EG}Q|1`%>t
z9OqK_00+vz1Rt|=o3yIP$8niCf`~F7$B{YC!xAqW->jP%&svqat6r;YWXz;?W9vB^
zpO?c84QhAKb2$&j0ns*K(QrTrnMDo9ZafO(;T-n!7Oiu5PF!Be0ug2A#4$Fp0f;g{
z^VkzxwO@qiS&agbsMM&3c^Nc(0o%M)do;YjGLDBgd;uA!8!v-~FJv{_v^&BJ<MKUc
z4{!LwI0hu;haPJ9Vm4u$)-}91E^|l_QP<))a!AZbD1$M(WaM`3@$izkOld(wktK1Y
zwAlMV5e&*N*c;om`@>(@W#~2MFQ^O#F3MokEob|;Yn9>U(r<}~GRxzLz&J$##Kz@H
zmfE4Uj;yrJLthS9N#<EhnK!<!R~OIP#%gzHi;TKBF1t}Tc&QuKVQ`3U0EDH1`FR~Z
zg^YF7?0a}&Jlw#Re52hL-eBqC<=wD>bom!A1CDxDv{S1M*IV6*@7fWSy0Z%}gKqem
zt=y?~3x92y4<E2YnXk!wxS5Zt(G6Q!;V$jrqOEcH#yf~8vo#)#>8B|jX=}K?iD&&3
zXG3>s4eoE^$Vd1j*p^!LZJbYnEdkJ5-^OL&0Yodljmt?85XyWT$0SG_m2Jt>_OqvV
z<LrCCHP%6dg#Ff72c$xAdC><D682N$DAKm2rXFD5>_((LU`rrxI1rbInkWMa2jX#Y
zjRO!84#aVdgMUt^Ey3fNPJ6WX9Tmspa%ut<OvmFgI|QUs)W3B!N3<n_on}Ap)z;UX
zw(F&XfYWigv5GPfaXM~_Boz=MPREg?QlM;0UVSbut^@&q^PCka0l|6Bij;uhJa;Qn
zwx#C%C?e%O08r&eTL+q_ezdJe^VE-4q(osz`jH}KAIfXmAyg)^W+fcveG&HX!fbzL
z`abP&BliahYbDT*I(KM7bS?md4^7C<1%&XS3E8=T5I!`4&ZYY??a1oG*&hyS_mmH}
zS*SOMC*(#6%7A5f0y`C*I174{u>%LSE}dCI#{PEv<_}BA*bfK^EFm*WKuBN-WR#03
zt!fA88kbNeWqKacT03g-Q%r$)0KRbvnH>XyZ(KrV$AFju$0dA|5@HG@0-plMC!7-#
zVhWTr@O_ey*|8*H3Y?Ij?3jAC9r?!8gqQ+<{LtlX4GMY;Bry>JLY1irIS~Rv<kW;U
z5w;`Gn3>=c;oSg`Hq$l+Wim5uW00fFOvs54g&}EX0^N%%x6by4Yi=TI9eTG@gq>fM
z9bn6jYGv-Z2{k50ZhPw71+sGiAbNpiFF=T1V0A7aL@%JurL)xb)Cr5(x?|c~<%?|=
z>fFT%`K=|C0n6e9US6OxqxLjZm$E<pp#7qJX+rMefe4nR3HjY?K(H)LAPb@^A?*p_
z6FEO<T`QK`wNOVcPsp!$q6`&EAcB+e+mrEECB(1-fZbPFb_WFKD$DMG;9Paf?(NC$
zb<*wt5L9Q`9gshiP6!A|b(Y-$A*qh+{%hF1gW=kk$hr=@_uzKV8=1*&%$l6k+POC-
z)M8=#4rKey()Iulzu9UcAjEIBY!3+Wo5}VmG_eDjY%7a5Xl3PFZ5FcqR%>9P3|O|(
zz{1S}u)y{^*uNUIhbng1EF@@$)m<n9mL1exTWOcR1Hl8CYYp0VrRIQT2vDKv0m}ga
zA>%+orqY1Kl)w~rl15_(>Wv>V+F9)-N9P}G8MH_7gDr!)<%fhkY6K5t{E)!Z#7A@o
zbc^eBLb*UAy3$b#3~ms_xCR9GX=_{qg8Q^Jt^qNwPbYjA<hUjRAJ=CR&hv6yOB(pj
zTH{)hFs{$t8rK~t>|S;V-(vs1fIWfBmTTb|w76`!79gZuzU5jSDEGJ~T&p_(ta8n^
z2CWOO+18+S!8OaZP#BV~k!u~LNx0f@-ArVSVCODsN8C3PYD9QbHF;CtVjia1+m|(0
zd0$-Q=gTNOg22ATGD-tNVBcam6M058`9Od6`DN{)>i)$t<bnv5`WH)Y2c$y9@_Y7x
zkkG#vIS8E)R+DcHVx4}}o~apROCVznDwgkjqYNYrDo%*=N<c^$R4gwHRulT5Sd3W!
zaDGrMV<jLsKPZ;55|Ed*Vr4Zs*zjVp*#f}PtyYkm4YylCZZ^DF#!3{1q~XOd?Cb&<
zwg!W?IO}lcw^y{XChm>JR(4av$Embz$86nIvDvaL9zo(}%d&uwxS1?lPw(H=P@6x^
zyq>Lp?P>mLiEI$4L@x2Cc<%s$>C+OtH^r}5)xesrIVH;HnO9ByD@QGUif+UM@XaZa
z^A{la=9I|!3lM%jr^NSpiI~5L!2Nt~iE}}Tn7<?qeDg}={3S{7^Z6w-e|?h26~`R9
zyF}Sr;>>&=)W>Q)0mSxB4IloyOQdH2LaE&)(x!kAzPkhq06KU8gi^apVtb(!y+=v}
zD24vrQzDPXYN!MEm59Cvz_Wd}si?>HmB_xwQ%K)eV)cCu#p^>QyzlP-fS^ORo)jbw
z*?LltIArTdLE=ye`o4h%RY${htR(AZ39Cu!C)~$MtgF!-sqasf@KMzY03uIW{Q(G(
zr%L3o0))s@CFp$qCT>USt@F&4()U)Lw|S`V&zET8Us_NGJm*XBZTrELRCc71bh(7x
zp4Q*5xLhLd(SQo3%OyGdJ{T1O)8!J}2c!9}BcUtOegLrF70Z5r;Jjkl50IC&?AMV@
ze?!=>I{-(rp8?U>8<zb5A?b!?KR`&jLH3)3FD*Gc8LmFbtnr!0%k?6MyHC=3ceNAQ
zZ$OgUuLA%?4oFIW2874~NohYoh#ZiF{pQll(Fu)q4M{4)lTLFyi|kdWv+QPipIVT_
zct8R04@t`L00{meNjV+>;d(=ozTrtR9*Drl!-q-dM@carBn^B+lX5&r62`-@q?ONg
zqHbYHk<YoB>w!uDk;&l^lwe8ep@0y^l9q)#5geD~9@-5679N+B76ybl#wF!Q0)(V-
zNjZ`LIV&to?=5vUToaS{F!JCQ`jd%?Nko16;!kH>{hFFoW+a{Trx!WE;)_2-V_2&$
zx%<<k^De%5CLW<3(~{0^|3g6~(}`k<o0U}NLEJwqY3KwZG2FxW`#rP&KVH5ckaTvk
zrBM&eO*-$mC2e6+SpsR;$d$?=wh@he-Aezac2QE^OXJFskryYOf3(Gs@iIy0Q@6w|
zO)4uO&TUCUl#(Rc2<1}9h+ia~;!>HQK<=`nvyCm6EW14EENXX4@am-U6$Jmm5{#GV
ziNrd$(SP6i%cQfT%}h(;HA(r=Bwhgxg|$>AUkrC9m){^<z7+uac!TA#fKYFP<??`F
z-9Rp1PcGk?d}(WDc9s5sqkOB)M1H<CDPsl-foW?JF@rwj+L_F@gO#+?+c)2Vw|>y1
zY$AeXM^Z)%K(OpcB4XU68-ASuT@6X)bY@sP{YG{zev06Z2T-@ca!EjlX|P-p5MmmV
zGPna`gf%2%r!m4PxD!DH_fts(_r7$=t22d|>q#YK{+LZ)B#rd^6MbJOf)|q`J)h^_
z8j56^cGgcQH7I3iL6gAsq&%j92xxIVnJY#dAhfuiMDju5uQSa7H*u&+H!FH{(_NJ}
zt+9zmV7zIKO+YZ-yfrpEQ-adBRAdeSP_%F9Efr`H-M3VZO+1C9zNK<(0zy*XQjE>1
zw_$L0!6+=ncjmtAu1|4!r<URs-*;#Ww+p$#%u>Z`USgGR>&2M~_vueLDnJnt49_8U
zW~nB=O9BY7GfU|cBQzUyp-!C3k`L%pE9Tlf<PCF6<@y<Az%#cLY5qV_C5@uYwFfYv
zG+&IWxj%H_{;;^zC%)1P2&ToQ=*SJcA{FOJ%Sx5aY)KD&ebZ&7>h1bNTmckY!9I9M
zf24dxDL$Y<zSV_0#fnm2(t=c|G+oZ`{&u1MUd3*ESg&cZs?;f_IS`@qs#34m=>`PL
zs#4tKxs%rdQ-4|NY+<%#=O5NR?8Ark%5o6I7p=PRUi`AOKpde0g89o*9HG*!f-cmF
zYuTxX^*hVgmO8~>q=1O})|TdplUqQrtS!Z5J-RsDg;Mc4_Ut2ir)G7fPH|NpM6lGA
zhAAdcBPr>wE3NJ*4S`+3^`*|%Z0JL}j~#hLZ`T4)IAj;`)umFu_*gR_Sl5@fXvJ?f
zccIO~jbJsKiPk;;s9w?n1dEyW<u}^Qv@gGrnCW{NU1%@8zSP;=>>`-AJ*u~@1VNlw
z;xU-(OY_B-j{w13Us};j-#~jiUGY(gQv6d+)nocyPUAo+PR!~0Xjgcp>rkn3gnjsg
z-k}!1#HR*8hqObbO+`NgLfWBHTt}f)4iKaLP^o#OR2(}IL7c{v;^r`oe@TG@9xlZ(
z8vU)DB+&(p!=)WN=@-e}x{_a?ELH9`kKm6-{;!Lg&w4(o?|u#>5dcsCy?U}#p7jE9
z2Kl*dKqz*y6z?QZR{^4PPL{U0hkx&dAb(tSx88?>YF7%7=Sr29=0yj)-UTmkE_g~m
z_ADq?WfVcqSwkJgQQ5gtxfTV4v~#6ci;Bu<fB0N!VGCIq@9cA>k>>h!x>44ZB5U82
zGBESg)A~QMYw^>ng(7R;lnf{+hg$lkZq-7OwQmZw2wPKR?VBnbm=d`Qii_N(U&=Wk
zC2|)@1K)conY&05a+m%o%3TgLrk!Z~HOYsmtX1rKPyKu2!&G*FUq|s#Y#N$U()>C~
z0uTxT^C6lI2&)ZEVH@T{7!epxM`o&?*9}K_WJ=-pl8K5^BU8AS+=UkcV(i5i^lo96
zk{@Nozm5<!h2;(Ho%_g~qu7QQ^wx!=Qc49`m53-aD%HG&-XEv;zz8CfGQnQBOkXo8
zrSOqYRFs;Os^m*Zf)F(+)x0}(1&7daQmREa9UsB~hP@}V=U>!2geTj|(3!zxQbs5Y
zH=DwizX*k=*vinM!4y&kqXlvhEvB;2@AQs^Q&aN0#vr21)D+(0!&f<|5WHem=I_7L
zw>t`Fr4$|sh>B9PQuu89H=<bx1&cC&_=EnqQn<+0i4G1HkxsO302jvmQuf_T`rgu|
zDTO;Z5m9Jqs%?Aynka;$vXv>Nm3c~h=zC(R=4F@vq<>cks%2IB0`baJ^OlHVinAN;
zD5kPDvkNclJ@VG1u)^sChwVne;H#9fF2(kb)vIcOVG|HUcmjk`ze@SV>*j#4`By0%
z2#}uw!cV_S#n-`4DFY({j|p`t851N0iqxfKOpqjs33VyNgv)3UI8jf1is`TFKX$CQ
zMh&Rw#d>Sh0P<4u_8=g%sZYh?`Xq96{5Q?ERMsih@il#7(`~8jFn9EPa`f%&%xii@
zc)QhsAVQ_>)PZ#BlTWqpVC`SmE5kcd3V-*Bh$yoog*byd$bdlKu=ifq+r+-H<!~y=
z!Ga%UpwLcqOBA0=$aCefi?8c>g&+urz+=eRNe=NIt`MO({QO8J@dkot&5@KM92-=W
zI+DWP2n`NE2tAT&eK+@Wf>8EIs?A+=ijT*z&{6iszv|_&qt;LX5h9M#P<fe`L7yJO
zeVpiTSkGELk8Sy@{zM@NRk8;1_+zQ|9rWSkT>0ekKd?LA(nl8lU~5G#{{v}tLKK3_
zH?W`I(i;jJQc7DXi9Eg`g_D(Ez~#CduCpmDTAY8^A1^+e!fP<J%IJ<o%jJ}EHRaTA
z&}T}!%S8*PWorMf|I<<RW6If;dz5$xp+BXZul^4OCb^QrvV|t}?&QPQQ_77LYc@%5
zT?>r%f*`(22?&E-PX$Fb00`#mDcs{C9|nXEUr&|XkUmTV?!*6Q`LLuwiT|^FSdz$x
z|Brl_ulT#ei(K#EUE{v&_&@dkJcpkm_~QW-dM7Pko&|(L@1&!AoI(R~<9E^sI6@&>
zxW1Ea**7iHYCMNR2C9EI?QEuxqWy|H4A;OkK5ZTOx6X10rt#snp)}XsLB2jDv;N<D
zp5vh*c*T}_g{Y`+NLqf`3J~=TNn<r2pQ0y+q>UOriQ_3vHM~S#wZ2=31^>uQ>TUf=
zN9{;kEHz_fT5k5=!J9EMjoo7*mZs&A>AVMcui+_)C5lIU<5E)4tdZ%KR^7Z1>K>Wy
zbf5kceMTSu2sAOBwJhy0kK;4?zkeg6^ub|d(}`($t+IfcJc-?S2g7?(S`pvA2N7~7
zrE${sA{@GahWAu<@4Nc%3#X=Kcmxq;rjpqQ&=gldBl)w;j(7FOj>6B<GSY)e<TM8O
zTypyY8sT%;^}hQ2!Z~UA$#f7=XigfJKls<l3us*9+`FH?t#CnF;eH2B8rBQa@Vl>s
zBn;feY}tGIy28b2d757!4z<%b&BubCs)OTv!6x+Amlb}IR`|ba5D}8TNaJo&XZXUM
zhHGUyYc2cx0KJp3GL4%_G$`(*L9sfmtYOXnskf;Ggd|{*IRe5YtJCtY9{|y;)oJY7
zlM4dE1y`q|Yv6(u*NMQ##FuFq*Chpde3_PUU6N=_e3{0W_!W8&|BkdSowXy)-X5qw
zWvokQ$9YWlQ>U#@E3L)f)dE5rU=aWTA$NTmp$4Cc&F24ow1KrAq_+!iNXtkABFbz?
zBht_;jXy3z+RO$I(mRGXre$0Mk*I0JHM&LMr>@(?jt|nihBu{^Hsq#6M43(LcJ0Y(
zfatk;cK2YtQ@B1YCjt;rrap~{fUaTSKZdZ$%cc(2tHPVpO0|?j5qERCQ)hmw0e>Py
zNA5ol*6%3%+Ac%=_BEBEHy9uYadta<=6!uje0y5yBn45N-Jb5+P5&c0_b$V=E1mT%
z-2c}R*88h$Kl}X$`u)bPG>&JfoA07--knzVif#r(#lYfDJRl6aI~^5kH9(kPcN$+K
zp>765H}6iD@0Hz51m4YitZtSRXtc-bW=W!M-b3AtKkrep@gBwZ>8!KtpF{Ms#`o#$
zLf*|Lb@KsqtLSDxXamfbE7^dMdmxQ}(!yJ#fOvR_t@}`~2_Le{P&Xf<G9g|D=rAi9
zsuzY2!+p5LOy13h({0<yGHBxw_6(Idl9rh&{^AInN7Bet<6I89`6wGRR4)!6wOqmE
z-F%c>fo}hp)XhJz?}zFSgnzJH0Yu38fm}i818W~=_YOl{$1S(RzY?L$adNu|mxEqD
z!QLCDN5dzq;De9xq09*iJ_%k1vGOEaKTIzPpR|TKJ|c%QCux|AGRPhqSd))XronDI
zC65i%_989^x#KDJ@JD*==~HP%BoO!lB+8sh<9#lnGg8OXs3h7nQu696uRh!Btyh2l
zdaoBs_*{i%)6FV8=P#)d1oP=MUQ!bk;61l9Y%3~=ov|BC|59-#-M$*HnJdn_4cCQq
z)=zNR$64<ox|gMf>-QKJ()jQ_dF<Wfv6s@ykHTXCVMAc?{Tx74e<>XjF9ZOhH!o2<
zB##Az$6iV&f0Q0e1n#kyEsvEHD0JEKSV<y}y-Xf^(Fu>m-w3@^mc_Em9Oe-x>pfQY
zW*!@%KcN`!lu7RmkoUe@W_d3lGy@ji3y3=2ErVxL=7)dd!2*uujMCHLzGc!gK}4Cp
zW#}E`+9(6mk3BR>?^4*WOinN$619w$5;P43C`t{^%p0XY><AAolam#wC^fhY{?dgP
zg8#nH3P<bR3g0i2;V!`a_x&>XU2h=?4m>Q=d$iujQ8>)5k34u7)yHQTd=U`SEt@<B
zGt9^`r9B@~AfnL7GW;{(gXqzF4A<zgtWVg##_A6kqs!2dv~;+KI&y58GM?=lt9Pu$
zFVTgd!xm%9WETRWMPtik7XqRS$Cf3>mx;NB2)ql&mC3n9QlP=OGC8+M5_RFYGIZez
z>O%ZO(TuXJIq1PT&Il_!on63w{Tlvu?~8G|S7|z<EIY)b5dLroGdTP16J!XVS!Mtc
z@;@Up&|nWz_swLf3Hk$tGs|SU4kF6TETg~OqIeyoo|?r*PSD>E&$0_~Di!L<%b>Bd
zS(l0W^M$j^<RA+2-kV*9?_AJd%H3<Y=9gtHW@{&6PMlwcH+yJY+)L*Cyi8fdDktgH
zFX5NC1PeNJ`@Ae5LOLL7_`D4F4{1aI!knL%6)%$JBmy_*Ld%?z0^Ju{=9DBd=R%m1
KJ^W~P+y4iJ<y8Ry

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 58fab1eb..0aa088cd 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -4514,7 +4514,8 @@ type Requester struct {
 	//   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent
 	//     signature, so nothing on that leg authenticates this field: it is the
 	//     Broker's statement, under the Broker's own signature, of whom it
-	//     queries for.
+	//     queries for. A delegation on such a query is not honoured (see
+	//     Delegation).
 	Domain string `protobuf:"bytes,2,opt,name=domain,proto3" json:"domain,omitempty"`
 	// What kind of entity is making this request.
 	Type RequesterType `protobuf:"varint,3,opt,name=type,proto3,enum=fora.v1.RequesterType" json:"type,omitempty"`
@@ -4565,7 +4566,10 @@ type Requester struct {
 	// returns all publicly available resources).
 	Scopes []string `protobuf:"bytes,6,rep,name=scopes,proto3" json:"scopes,omitempty"`
 	// Optional delegation — present when the requester acts on behalf of
-	// another entity (user, organization, upstream agent).
+	// another entity (user, organization, upstream agent). On a query a Broker
+	// originated it is not honoured, because the Broker signs alone and nothing
+	// on that leg can pass its holder binding; the Exchange answers as if none
+	// were present (see Delegation).
 	Delegation *Delegation `protobuf:"bytes,7,opt,name=delegation,proto3,oneof" json:"delegation,omitempty"`
 	// Extension point
 	Ext *structpb.Struct `protobuf:"bytes,15,opt,name=ext,proto3" json:"ext,omitempty"`
@@ -4685,7 +4689,15 @@ func (x *Requester) GetExtCritical() []string {
 // — the agent's key, resolved from the requester's WBA directory — and not
 // against the request signer. A relayed purchase that carries a delegation
 // therefore needs an AgentAcceptance on every item; an item without one fails
-// the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a
+// the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker
+// originated (Broker-led discovery), the Broker signs alone, so a delegation on
+// it cannot pass holder binding: the Exchange does not honour it and answers
+// as if none were present. How an agent proves a holder-of-key entitlement at
+// discovery time through a Broker is an open protocol question. An Exchange
+// that requires a verified delegation before it presents a scoped term (see
+// LicenseTerm.scopes) therefore presents no such term on that query.
+//
+// Delegation is a chain of cnf-linked JWTs: a principal narrows a
 // grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed
 // by the key the parent's cnf named — the chain-linkage invariant. Verifiers
 // need only the root issuer's public key; intermediate keys ride inside the
@@ -7551,8 +7563,7 @@ type RequestConstraints struct {
 	// request, so no party receives or enforces it in this version: an Exchange
 	// never sees it, and an Exchange's own cap is
 	// WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop
-	// Broker discovery, an open protocol question tracked separately. Absent =
-	// no cap stated.
+	// Broker discovery, an open protocol question. Absent = no cap stated.
 	MaxHops       *int32 `protobuf:"varint,11,opt,name=max_hops,json=maxHops,proto3,oneof" json:"max_hops,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
diff --git a/gen/jsonschema/fora.v1.Delegation.schema.json b/gen/jsonschema/fora.v1.Delegation.schema.json
index e733a163..54c2ca8f 100644
--- a/gen/jsonschema/fora.v1.Delegation.schema.json
+++ b/gen/jsonschema/fora.v1.Delegation.schema.json
@@ -1,7 +1,7 @@
 {
   "$id": "fora.v1.Delegation.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+  "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
   "properties": {
     "expires_at": {
       "description": "When this delegation expires. Exchange MUST reject expired tokens.",
diff --git a/gen/jsonschema/fora.v1.Delegation.schema.strict.json b/gen/jsonschema/fora.v1.Delegation.schema.strict.json
index 60e507dc..2b682fff 100644
--- a/gen/jsonschema/fora.v1.Delegation.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Delegation.schema.strict.json
@@ -2,7 +2,7 @@
   "$id": "fora.v1.Delegation.schema.strict.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+  "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
   "properties": {
     "expires_at": {
       "description": "When this delegation expires. Exchange MUST reject expired tokens.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index b0ca1410..acabca35 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -67,7 +67,7 @@
       "type": "object"
     },
     "fora.v1.Delegation": {
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -199,7 +199,7 @@
           "type": "string"
         },
         "max_hops": {
-          "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
+          "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "type": "integer"
@@ -240,10 +240,10 @@
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
-          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index c02bb149..f54cb6f7 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -70,7 +70,7 @@
     },
     "fora.v1.Delegation": {
       "additionalProperties": false,
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -203,7 +203,7 @@
           "type": "string"
         },
         "max_hops": {
-          "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
+          "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.",
           "maximum": 2147483647,
           "minimum": -2147483648,
           "type": "integer"
@@ -245,10 +245,10 @@
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
-          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
index 0054696c..ece54811 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.json
@@ -76,7 +76,7 @@
       "type": "string"
     },
     "max_hops": {
-      "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
+      "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
index 2d61d429..51a3c135 100644
--- a/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
+++ b/gen/jsonschema/fora.v1.RequestConstraints.schema.strict.json
@@ -78,7 +78,7 @@
       "type": "string"
     },
     "max_hops": {
-      "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
+      "description": "Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.",
       "maximum": 2147483647,
       "minimum": -2147483648,
       "type": "integer"
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index e22fccb5..9ff3275b 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -1,7 +1,7 @@
 {
   "$defs": {
     "fora.v1.Delegation": {
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -89,10 +89,10 @@
   "properties": {
     "delegation": {
       "$ref": "#/$defs/fora.v1.Delegation",
-      "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+      "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index bdff6268..845e0e52 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -2,7 +2,7 @@
   "$defs": {
     "fora.v1.Delegation": {
       "additionalProperties": false,
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -91,10 +91,10 @@
   "properties": {
     "delegation": {
       "$ref": "#/$defs/fora.v1.Delegation",
-      "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+      "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index 8e9fde61..c93033e1 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -44,7 +44,7 @@
       "type": "object"
     },
     "fora.v1.Delegation": {
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -130,10 +130,10 @@
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
-          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index ffe83a31..45b37a3a 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -46,7 +46,7 @@
     },
     "fora.v1.Delegation": {
       "additionalProperties": false,
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -133,10 +133,10 @@
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
-          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index 3e0a2b4e..e7598fb9 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -95,7 +95,7 @@
       "type": "object"
     },
     "fora.v1.Delegation": {
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -701,10 +701,10 @@
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
-          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index f573e451..34fbc10c 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -100,7 +100,7 @@
     },
     "fora.v1.Delegation": {
       "additionalProperties": false,
-      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
+      "description": "The token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.",
       "properties": {
         "expires_at": {
           "description": "When this delegation expires. Exchange MUST reject expired tokens.",
@@ -715,10 +715,10 @@
       "properties": {
         "delegation": {
           "$ref": "#/$defs/fora.v1.Delegation",
-          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent)."
+          "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for.",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index 83bf68cb..f1673e6b 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -879,7 +879,7 @@ class RequestConstraints(WireModel):
     )
     max_hops: conint(ge=-2147483648, le=2147483647) | None = Field(
         None,
-        description="Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.",
+        description="Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.",
     )
     max_price: Cost | None = Field(
         None, description='Maximum price the agent is willing to pay.'
@@ -1415,14 +1415,14 @@ class RequestAuthFailure(WireModel):
 class Requester(WireModel):
     delegation: Delegation | None = Field(
         None,
-        description='Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).',
+        description='Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).',
     )
     domain: constr(
         pattern=r'^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$',
         max_length=260,
     ) = Field(
         ...,
-        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n "Direct and relayed requests" in the file header states:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see "Accounts" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for.',
+        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n "Direct and relayed requests" in the file header states:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see "Accounts" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 240c5bd4..82cda252 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -40,7 +40,7 @@ export const CitationFormatSchema = /* @__PURE__ */ (() => wire(z.enum(["CITATIO
 
 export const CostSchema = /* @__PURE__ */ (() => wire(z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost — Actual transaction cost.")))();
 
-export const DelegationSchema = /* @__PURE__ */ (() => wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Delegation — Scoped, time-limited, spend-capped credential.\n\nThe token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.")))();
+export const DelegationSchema = /* @__PURE__ */ (() => wire(z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Delegation — Scoped, time-limited, spend-capped credential.\n\nThe token is an opaque, signed credential. The format is a JWT (token_format\n \"jwt\"); the field stays open for a future format. Its claims are the\n AUTHORITATIVE source of the grant; the\n plaintext fields below (scopes, expires_at, max_spend_cents, …) are a\n convenience mirror the Exchange MAY use for fast pre-filtering before it\n verifies the token.\n\n Holder binding (the load-bearing property). The grant is bound to a holder key\n via the RFC 7800 `cnf` confirmation claim — `cnf.jkt`, the RFC 7638 JWK\n thumbprint of the holder's key. Verification MUST check that the key signing\n the request (RFC 9421) hashes to that thumbprint; a token possessed without\n the matching private key is rejected. This is what makes a leaked token NOT\n bearer-usable. One exception, the relayed purchase: when a Broker re-packages\n a purchase (BrokerService.ExecuteTransaction), the request an Exchange\n receives is signed by the Broker, not by the holder. There the Exchange checks\n the holder binding against the key each item's AgentAcceptance verifies under\n — the agent's key, resolved from the requester's WBA directory — and not\n against the request signer. A relayed purchase that carries a delegation\n therefore needs an AgentAcceptance on every item; an item without one fails\n the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker\n originated (Broker-led discovery), the Broker signs alone, so a delegation on\n it cannot pass holder binding: the Exchange does not honour it and answers\n as if none were present. How an agent proves a holder-of-key entitlement at\n discovery time through a Broker is an open protocol question. An Exchange\n that requires a verified delegation before it presents a scoped term (see\n LicenseTerm.scopes) therefore presents no such term on that query.\n\n Delegation is a chain of cnf-linked JWTs: a principal narrows a\n grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed\n by the key the parent's cnf named — the chain-linkage invariant. Verifiers\n need only the root issuer's public key; intermediate keys ride inside the\n chain (JOSE header `jwk`), so verification is offline.\n\n The claim schema is a small registered vocabulary — see the FORA\n delegation-claims profile in the auth spec. All claims are OPTIONAL except the\n holder binding (cnf). Vendors MAY add namespaced claims (their own \"vendor:\"\n namespace; \"fora_\"-prefixed names are reserved for the registered vocabulary\n and MUST NOT be redefined); any constraint a verifier cannot evaluate is\n binding by default (fail closed) unless the issuer marks it advisory —\n mirroring Restriction.advisory.\n\n Scope/time/spend caps are defense-in-depth that bound the blast radius only in\n the residual case where the holder's signing key is also compromised; the\n primary protection against theft is the holder binding above.")))();
 
 export const DeliveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])))();
 
@@ -48,7 +48,7 @@ export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_RE
 
 export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
 export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
@@ -152,9 +152,9 @@ export const RequestAuthFailureSchema = /* @__PURE__ */ (() => wire(z.object({ "
 
 export const RequestAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"])))();
 
-export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question tracked separately. Absent =\n no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
+export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
 
-export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).")))();
+export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).")))();
 
 export const RequesterTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"])))();
 
@@ -168,7 +168,7 @@ export const ResourceIdentitySchema = /* @__PURE__ */ (() => wire(z.object({ "c2
 
 export const ResourceMutabilitySchema = /* @__PURE__ */ (() => wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"])))();
 
-export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
+export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
 
 export const ResourceRefSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")))();
 
@@ -202,7 +202,7 @@ export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "e
 
 export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
 
-export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
+export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
 export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index c9087d7a..fd1cbb64 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -991,9 +991,12 @@ SDKs implement it:
   an agent's request unchanged, so it never covers an agent's signature: discovery
   through the Broker is Broker-led, the Broker choosing the Exchanges and originating its
   own queries, and execute is re-packaged per Exchange; in both cases the Broker signs
-  alone, covering its own request and only its own member. How an agent proves a
-  holder-of-key entitlement at discovery time through a Broker is an open protocol
-  question, tracked separately. On a relayed purchase the agent's identity and consent
+  alone, covering its own request and only its own member. So a delegation on a query a
+  Broker originated cannot pass holder binding: the Exchange does not honour it and
+  answers as if none were present. How an agent proves a holder-of-key entitlement at
+  discovery time through a Broker is an open protocol question, and an Exchange that
+  requires a verified delegation before it presents a scoped term presents no such term
+  on that query. On a relayed purchase the agent's identity and consent
   come from `AgentAcceptance`, verified against the agent's registered key resolved from
   `Requester.domain`. That key gives the delivery-URL binding, and a delegation's
   `cnf.jkt` is checked against it; a Broker is never delegated to. The Exchange resolves
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index 9bf3d19f..f49310e0 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -2202,7 +2202,8 @@ message Requester {
   //   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent
   //     signature, so nothing on that leg authenticates this field: it is the
   //     Broker's statement, under the Broker's own signature, of whom it
-  //     queries for.
+  //     queries for. A delegation on such a query is not honoured (see
+  //     Delegation).
   string domain = 2 [
     (buf.validate.field).string = {
       max_len: 260,
@@ -2270,7 +2271,10 @@ message Requester {
   // `domain` names (see `domain`).
 
   // Optional delegation — present when the requester acts on behalf of
-  // another entity (user, organization, upstream agent).
+  // another entity (user, organization, upstream agent). On a query a Broker
+  // originated it is not honoured, because the Broker signs alone and nothing
+  // on that leg can pass its holder binding; the Exchange answers as if none
+  // were present (see Delegation).
   optional Delegation delegation = 7;
 
   // Extension point
@@ -2319,7 +2323,15 @@ enum RequesterType {
 // — the agent's key, resolved from the requester's WBA directory — and not
 // against the request signer. A relayed purchase that carries a delegation
 // therefore needs an AgentAcceptance on every item; an item without one fails
-// the binding (DENIAL_REASON_DELEGATION_INVALID). Delegation is a chain of cnf-linked JWTs: a principal narrows a
+// the binding (DENIAL_REASON_DELEGATION_INVALID). On a query a Broker
+// originated (Broker-led discovery), the Broker signs alone, so a delegation on
+// it cannot pass holder binding: the Exchange does not honour it and answers
+// as if none were present. How an agent proves a holder-of-key entitlement at
+// discovery time through a Broker is an open protocol question. An Exchange
+// that requires a verified delegation before it presents a scoped term (see
+// LicenseTerm.scopes) therefore presents no such term on that query.
+//
+// Delegation is a chain of cnf-linked JWTs: a principal narrows a
 // grant by issuing a child JWT (cnf = the next holder, scopes ⊆ parent), signed
 // by the key the parent's cnf named — the chain-linkage invariant. Verifiers
 // need only the root issuer's public key; intermediate keys ride inside the
@@ -3800,8 +3812,7 @@ message RequestConstraints {
   // request, so no party receives or enforces it in this version: an Exchange
   // never sees it, and an Exchange's own cap is
   // WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop
-  // Broker discovery, an open protocol question tracked separately. Absent =
-  // no cap stated.
+  // Broker discovery, an open protocol question. Absent = no cap stated.
   optional int32 max_hops = 11;
 }
 
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 6a0dbeb7..22e88f35 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -136,7 +136,7 @@ The Broker passes `Requester` through unchanged -- it never modifies the request
 
 The Broker never forwards an agent's request unchanged, so it never covers an agent's signature ([Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)):
 
-- **Discovery is Broker-led.** The agent does not know the Exchange at discovery time; that is the point of the Broker. The Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+- **Discovery is Broker-led.** The agent does not know the Exchange at discovery time; that is the point of the Broker. The Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone, so an Exchange does not honour a delegation on them ([Which signature binds in a brokered request](/protocol/authentication/#verification)). How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question.
 - **Execute is re-packaged.** The Broker builds a fresh `TransactionRequest` for each Exchange and signs it alone.
 
 Each signature the Broker makes has:
@@ -195,11 +195,11 @@ The Broker queries its Exchanges as it would without the profile, and each query
 
 ### Scope Forwarding
 
-The Broker forwards `Requester.scopes` to every Exchange it queries. Scopes decide which terms each Exchange presents; they are the agent's statement, and the Exchange does not verify them. The Broker does not modify scopes; it passes them through as-is.
+The Broker forwards `Requester.scopes` to every Exchange it queries. Scopes decide which terms each Exchange presents; they are the agent's statement, which the Broker passes on under its own signature, and the Exchange does not verify them. The Broker does not modify scopes; it passes them through as-is.
 
 ### Delegation Pass-Through
 
-The Broker passes `Requester.delegation` through unchanged, and the **agent remains the holder**. A Broker is never delegated to. On a purchase, the Exchange matches the delegation's `cnf.jkt` against the key that signed the agent's `AgentAcceptance`, so the delegation stays bound to the agent's private key through the Broker, exactly as on a direct call. On Broker-led discovery, the Broker originates the query and signs it alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+The Broker passes `Requester.delegation` through unchanged, and the **agent remains the holder**. A Broker is never delegated to. On a purchase, the Exchange matches the delegation's `cnf.jkt` against the key that signed the agent's `AgentAcceptance`, so the delegation stays bound to the agent's private key through the Broker, exactly as on a direct call. On a query the Broker originates, the Broker signs alone, so nothing can pass the delegation's holder binding: the Exchange does not honour it and answers as if none were present. Through a Broker, the delegation counts only on a purchase, through the agent's acceptances. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question. An Exchange that requires a verified delegation before it presents a scoped term presents no such term on the Broker's query.
 
 The Broker cannot narrow a delegation: only the key named in the chain's `cnf` can issue a valid child JWT, and that is the agent's key, not the Broker's. Narrowing is done by a holder in the chain, as [Delegation](/protocol/authentication/#verification) describes.
 
diff --git a/website/src/content/docs/components/exchange/overview.mdx b/website/src/content/docs/components/exchange/overview.mdx
index e66027a9..1eaf6c50 100644
--- a/website/src/content/docs/components/exchange/overview.mdx
+++ b/website/src/content/docs/components/exchange/overview.mdx
@@ -122,7 +122,7 @@ Pink nodes are external dependencies. Everything else runs in-process.
 
 The Exchange sits between AI agents/Brokers and provider CDN infrastructure:
 
-1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), filters the catalog by the requester's scopes, and returns signed offers. If a `Delegation` is present, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before granting scoped access. A query that comes through a Broker is one the Broker originated and signed alone; the Exchange counts the signatures against its `max_intermediary_hops` before verifying any, then authenticates the Broker by its signature (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+1. An AI agent discovers available resources by calling `DiscoverResources` — the Exchange verifies the `Requester` identity (Ed25519 signature over domain-bound key), presents the terms the requester's stated scopes cover, and returns signed offers. If a `Delegation` is present on a query the agent signed, the Exchange verifies the delegation JWT chain — including the **holder-binding** step (the request-signing key MUST hash to the final JWT's `cnf.jkt`; see [Verification](/protocol/authentication/#verification)) — before honouring it. A query that comes through a Broker is one the Broker originated and signed alone; the Exchange counts the signatures against its `max_intermediary_hops` before verifying any, then authenticates the Broker by its signature (see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding)). Nothing on such a query can pass a delegation's holder binding, so the Exchange does not honour one there and answers as if none were present. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question.
 2. The agent executes a transaction by calling `ExecuteTransaction` with a chosen offer — the Exchange verifies the offer signature, authorizes billing, logs the transaction, and returns a signed URL
 3. The agent fetches the resource using the signed URL — the delivery endpoint verifies the URL signature with the Exchange's published public key, holding nothing secret
 4. The agent reports usage by calling `ReportUsage` — the Exchange validates the report and updates the obligation state
diff --git a/website/src/content/docs/components/exchange/request-flows.mdx b/website/src/content/docs/components/exchange/request-flows.mdx
index b9dc357e..22045649 100644
--- a/website/src/content/docs/components/exchange/request-flows.mdx
+++ b/website/src/content/docs/components/exchange/request-flows.mdx
@@ -85,48 +85,62 @@ func (h *ExchangeHandler) DiscoverResources(
             errors.New("request reached the handler without a verified signature"))
     }
 
-    // 2b. Requester.domain is the host of the agent's key directory, never a
-    //     free label. On a request the agent signed, it MUST name the directory
-    //     the signature resolved from: the host of the covered Signature-Agent
-    //     URL, compared by the request-recipient identity rule (case-folded,
-    //     an absent port the same as :443). A mismatch is a signature that
-    //     verifies, but not for the requester the body names. (A ResourceQuery
-    //     a Broker authored carries the Broker's signature instead; there the
-    //     domain is the Broker's statement of whom it queries for.)
+    // 2b. Direct or Broker-led ("Direct and relayed requests" in the protocol).
+    //     Requester.domain is the host of the agent's key directory, never a
+    //     free label. When it names the directory the signature resolved from
+    //     (the host of the covered Signature-Agent URL, compared by the
+    //     request-recipient identity rule: case-folded, an absent port the same
+    //     as :443), the query is DIRECT: the agent signed it. When it names
+    //     another directory, the query is one a Broker originated, which this
+    //     Exchange acts on only when it admits the signer as a Broker; there the
+    //     domain is the Broker's statement of whom it queries for, and nothing
+    //     on this leg authenticates the agent. Any other mismatch is a signature
+    //     that verifies, but not for the requester the body names.
     host, err := helpers.HostOf(verified.SignatureAgent)
     verdict := helpers.AudienceMalformed
     if err == nil {
         verdict, err = helpers.CheckAudience(host, requester.GetDomain())
     }
-    if err != nil || verdict != helpers.AudienceAccepted {
+    direct := err == nil && verdict == helpers.AudienceAccepted
+    brokerLed := err == nil && verdict == helpers.AudienceMismatch &&
+        h.brokers.Admits(verified.SignatureAgent)
+    if !direct && !brokerLed {
         return nil, connectserver.AttachDetail(
             connect.NewError(connect.CodeUnauthenticated, errors.New("requester.domain is not the signing directory")),
             helpers.RequestAuthFailureDetail("fora.v1.ExchangeService", "requester.domain is not the signing directory",
                 forav1.RequestAuthFailureReason_REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID))
     }
 
-    // 2c. Verify delegation (if present).
+    // 2c. Verify delegation (if present) on a DIRECT query.
     //     Verifies the delegation JWT chain (chain linkage + cnf holder binding)
-    //     against the principal's published key.
-    if requester.Delegation != nil {
+    //     against the principal's published key. On a query a Broker originated
+    //     the Broker signs alone, so nothing can pass the holder binding: the
+    //     delegation is not honoured, and the query is answered as if none were
+    //     present.
+    delegation := requester.GetDelegation()
+    if brokerLed {
+        delegation = nil
+    }
+    if delegation != nil {
         if err := h.verifyDelegationJWT(ctx, requester); err != nil {
             return nil, connect.NewError(connect.CodePermissionDenied, err)
         }
     }
 
-    // 2d. Resolve the caller's registered account from the VERIFIED identity:
-    //     the covered directory (verified.SignatureAgent) plus the RFC 7638
-    //     thumbprint of the key the signature actually verified against
-    //     (verified.PublicKey — not the claimed keyid). requester.id is a free
-    //     label and requester.domain was matched against the directory in 2b;
-    //     neither selects an account.
-    keyThumb, err := helpers.Thumbprint(verified.PublicKey)
-    if err != nil {
-        return nil, connect.NewError(connect.CodeInternal, err)
-    }
-    account, err := h.accounts.FromVerifiedKey(ctx, verified.SignatureAgent, keyThumb)
-    if err != nil {
-        return nil, connect.NewError(connect.CodePermissionDenied, err)
+    // 2d. On a DIRECT query, resolve the agent's registered account from the
+    //     directory the signature resolved from (verified.SignatureAgent; see
+    //     "Accounts" on the authentication page). Every currently valid key that
+    //     directory publishes acts for the account, so the key that verified
+    //     does not select it, and neither does requester.id, a free label. A
+    //     query a Broker originated authenticates no agent, so this Exchange
+    //     consults no account for it (its own choice; the protocol leaves it
+    //     open) and presents on the stated scopes alone.
+    var account *Account
+    if direct {
+        account, err = h.accounts.ForDirectory(ctx, verified.SignatureAgent)
+        if err != nil {
+            return nil, connect.NewError(connect.CodePermissionDenied, err)
+        }
     }
 
     // 3. Resolve tenant
@@ -142,31 +156,35 @@ func (h *ExchangeHandler) DiscoverResources(
 
     // 5. Catalog lookup (lock-free read, scope-filtered)
     //    The catalog is filtered by requester.scopes, the requester's own
-    //    statement — terms outside the stated scopes are not returned. When the
-    //    request carries a verified delegation, this Exchange also requires its
-    //    grant to cover a term's scopes (a narrower use of the MAY in
+    //    statement — terms outside the stated scopes are not returned. When a
+    //    direct query carries a verified delegation, this Exchange also requires
+    //    its grant to cover a term's scopes (a narrower use of the MAY in
     //    LicenseTerm.scopes): the effective scopes are the intersection of
-    //    requester.scopes and the delegation's granted scopes.
+    //    requester.scopes and the delegation's granted scopes. A query a Broker
+    //    originated honours no delegation (2c), so its stated scopes alone decide.
     effectiveScopes := requester.Scopes
-    if requester.Delegation != nil {
-        effectiveScopes = intersectScopes(requester.Scopes, requester.Delegation.Scopes)
+    if delegation != nil {
+        effectiveScopes = intersectScopes(requester.Scopes, delegation.Scopes)
     }
     offers, err := h.catalog.FindOffers(ctx, tenantCfg.ID, req.Msg.Uris, effectiveScopes)
     if err != nil {
         return nil, connect.NewError(connect.CodeInternal, err)
     }
 
-    // 5b. Check for active subscription.
+    // 5b. Check for active subscription, on a DIRECT query (step 2d).
     //     If the requester has an active subscription with this tenant, include a
     //     subscription offer variant (rate=0) for each catalog offer with
     //     SubscriptionQuotaInfo attached. Quota enforcement is deferred to
     //     ExecuteTransaction time — DiscoverResources checks subscription status
     //     and populates quota visibility. Subscription/entitlement is resolved
     //     from the registered account of step 2d (plus any delegation) — never
-    //     from the caller-written requester.id.
+    //     from the caller-written requester.id. A query a Broker originated has
+    //     no account here, so it gets no subscription variant.
     var subStatus *SubscriptionStatus
-    if sub, err := h.billing.CheckSubscription(ctx, account.BillingRef, tenantCfg.ID); err == nil && sub.Active {
-        subStatus = sub
+    if account != nil {
+        if sub, err := h.billing.CheckSubscription(ctx, account.BillingRef, tenantCfg.ID); err == nil && sub.Active {
+            subStatus = sub
+        }
     }
 
     // Build subscription offer variants per catalog offer (if subscription active).
@@ -284,7 +302,7 @@ type RequesterRecord struct {
 
 Nothing about the route is carried in the message: there is no `intermediaries` field. Each party that sends a `ResourceQuery` or `TransactionRequest` signs it with **one** labeled signature that conforms to Web Bot Auth, with its own `Signature-Agent` member. The rules are specified once, in [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding). In short, FORA's Broker never forwards an agent's request unchanged:
 
-- **Discovery is Broker-led.** The Broker chooses the Exchanges and originates its own `ResourceQuery`, signed by the Broker alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+- **Discovery is Broker-led.** The Broker chooses the Exchanges and originates its own `ResourceQuery`, signed by the Broker alone, so the Exchange does not honour a delegation on it and answers as if none were present ([Which signature binds in a brokered request](/protocol/authentication/#verification)). How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question.
 - **Execute is re-packaged.** The Broker builds a fresh `TransactionRequest` for each Exchange and signs it alone. The agent's identity and consent are the `AgentAcceptance`, a detached Ed25519 signature over `{offer_sig, requester_id, requester_domain, idempotency_key}` verified against the agent's registered key, resolved from `Requester.domain`.
 
 In both cases the Broker's signature covers its own request components and only its own `Signature-Agent` member, and the request carries no agent signature headers.
@@ -320,11 +338,11 @@ sigs := helpers.AllSignaturesFromContext(ctx)
 
 ### Delegation Verification
 
-When `Requester.delegation` is present, the Exchange verifies the delegation JWT chain before granting scoped access:
+When `Requester.delegation` is present, the Exchange verifies the delegation JWT chain before honouring it:
 
 1. Decode the base64url-encoded `token` (JWS) from the `Delegation` message
 2. Verify the Ed25519 signature chain — the authority JWT signed by `principal_domain`'s published key, each child JWT signed by the key its parent named in `cnf` (chain-linkage invariant)
-3. Verify holder binding — the key that signed the RFC 9421 request MUST hash to the final JWT's `cnf.jkt`. On a purchase sub-request a Broker re-packaged, the request signer is the Broker, so compare the key each item's `AgentAcceptance` verifies under instead
+3. Verify holder binding — the key that signed the RFC 9421 request MUST hash to the final JWT's `cnf.jkt`. On a purchase sub-request a Broker re-packaged, the request signer is the Broker, so compare the key each item's `AgentAcceptance` verifies under instead. On a query a Broker originated nothing can pass this check, so the delegation is not verified or honoured there, and the query is answered as if none were present
 4. Evaluate constraints (scope coverage, spend caps, expiration) — the grant covers scopes only if each child's `scope` is contained in its parent's
 5. Extract effective scopes (intersection of requester scopes and delegation scopes)
 6. Check `expires_at` against current time
diff --git a/website/src/content/docs/getting-started/enterprise.mdx b/website/src/content/docs/getting-started/enterprise.mdx
index 3a38dece..443dd4f3 100644
--- a/website/src/content/docs/getting-started/enterprise.mdx
+++ b/website/src/content/docs/getting-started/enterprise.mdx
@@ -31,7 +31,7 @@ Internal Exchange    External Exchanges
   • Proprietary datasets  • News APIs
 ```
 
-The Broker is the single chokepoint. Every AI resource access — internal or external — passes through it. Identity verified once. Scopes enforced once. Every transaction logged.
+The Broker is the single chokepoint. Every AI resource access — internal or external — passes through it. Identity and the IAM delegation are verified once, at the Broker, which decides the scopes each request states. Every transaction logged.
 
 ## Internal Exchange
 
@@ -58,16 +58,16 @@ Even at $0, the transaction creates an evidence chain. For regulated industries
 
 ## Scope-Based Catalog Filtering
 
-Enterprise IAM maps user roles to FORA scopes. The Exchange filters its catalog by those scopes. A resource outside the requester's scopes comes back with no offers and no absence reason, so the requester never learns it exists. This is the same rule a public Exchange follows (see [Existence hiding](/protocol/authentication/#existence-hiding)).
+Enterprise IAM maps user roles to FORA scopes. The Broker states them on each query, and the Exchange presents the terms they cover. A resource outside the stated scopes comes back with no offers and no absence reason, so the requester never learns it exists. This is the same rule a public Exchange follows (see [Existence hiding](/protocol/authentication/#existence-hiding)).
 
 ### How It Works
 
 1. User authenticates via SSO (SAML/OIDC to enterprise IdP)
 2. Enterprise token service maps AD groups to FORA scopes
 3. Service mints a delegation JWT signed by `iam.acme.com`'s Ed25519 key
-4. Agent carries this token in the `Delegation.token` field for all FORA requests
-5. Exchange verifies the authority JWT against IAM's published key
-6. Each requested URI is checked against the token's scopes
+4. Agent carries this token in the `Delegation.token` field and presents it to the enterprise Broker with each request
+5. The Broker verifies the authority JWT against IAM's published key and states the token's scopes on the queries it originates
+6. The Exchange checks each term's scopes against the stated scopes. It does not honour the delegation on the Broker's query, which the Broker signs alone; on a purchase it verifies the delegation against the key that signed the agent's `AgentAcceptance`
 
 ### Concrete Example
 
@@ -197,7 +197,7 @@ Resources carry classification labels in the `ext` field:
 }
 ```
 
-The Broker enforces classification policies before forwarding requests:
+The Broker enforces classification policies as its own policy, before it originates a query or re-packages a purchase:
 
 | Classification | Required Scope | Example Resources |
 |---------------|---------------|-------------------|
diff --git a/website/src/content/docs/getting-started/for-exchange-operators.mdx b/website/src/content/docs/getting-started/for-exchange-operators.mdx
index 689d7d0c..6d0c9222 100644
--- a/website/src/content/docs/getting-started/for-exchange-operators.mdx
+++ b/website/src/content/docs/getting-started/for-exchange-operators.mdx
@@ -159,7 +159,7 @@ When a request includes a `Delegation` message (nested inside `Requester`), your
 1. Verify the JWT chain from the base64url `token` in the `Delegation` message
 2. Verify the authority JWT is signed by the Ed25519 key published in the principal's WBA directory (the JWK Set at `{principal_domain}/.well-known/http-message-signatures-directory`)
 3. Verify each child delegation JWT's signature (each signed by the key its parent named in `cnf`)
-4. **Verify holder binding** — the key that signed the request (RFC 9421) MUST equal the key named in `cnf` (`cnf.jkt`); reject with `DENIAL_REASON_DELEGATION_INVALID` if they differ. This is mandatory: it is what makes a stolen token unusable, so a token possessed without its signing key grants nothing.
+4. **Verify holder binding** — the key the request proves possession of MUST equal the key named in `cnf` (`cnf.jkt`): on a direct request the key that signed it (RFC 9421), on a purchase a Broker relays the key that signed each item's `AgentAcceptance`. Reject with `DENIAL_REASON_DELEGATION_INVALID` if they differ. This is mandatory: it is what makes a stolen token unusable, so a token possessed without its signing key grants nothing. On a query a Broker originated, which proves possession of no agent key, do not verify or honour the delegation: answer as if none were present.
 5. Evaluate the grant's registered claims — scope restrictions, spend caps (`max_spend_cents`), access caps (`max_accesses`) — and confirm they cover the request (URI access is gated through scopes). For the JWT this means checking the registered claims along the `cnf` chain.
 6. Check `expires_at` against current time — reject expired tokens with `DENIAL_REASON_DELEGATION_INVALID`
 7. Optionally check `revocation_uri` for high-value transactions
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index acac8276..fe494c3d 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -237,7 +237,7 @@ The Exchange/edge verifies a delegation by (offline, using only the owner's publ
 
 1. **Verify the authority JWT** with the resource owner's published key (the trust anchor). Read its `scope`, `exp`, and `cnf.jkt`.
 2. **Verify each delegation JWT** with the key in its own JOSE header `jwk` — but only after checking `thumbprint(header key) == parent cnf.jkt` (the **chain-linkage invariant**). Reject a JWT signed by a key the parent did not name. Check each child's `scope` is covered by its parent's.
-3. **Verify holder binding** — the agent's key that the request proves possession of MUST hash to the final delegation's `cnf.jkt`: on a direct call the key that signed the HTTP request ([RFC 9421](#request-signatures-rfc-9421)), on a purchase a Broker relayed the key that signed the agent's `AgentAcceptance` ([Which signature binds in a brokered request](#verification)). If not, **reject** (`DENIAL_REASON_DELEGATION_INVALID`). This is what makes a leaked token useless to a thief: possessing the bytes is not enough — you must control the bound private key. It is **not optional** and **not skippable**; an Exchange that omits it reduces the token to a bearer credential and breaks the anti-theft guarantee.
+3. **Verify holder binding** — the agent's key that the request proves possession of MUST hash to the final delegation's `cnf.jkt`: on a direct call the key that signed the HTTP request ([RFC 9421](#request-signatures-rfc-9421)), on a purchase a Broker relayed the key that signed the agent's `AgentAcceptance` ([Which signature binds in a brokered request](#verification)). If not, **reject** (`DENIAL_REASON_DELEGATION_INVALID`). On a query a Broker originated, which proves possession of no agent key, the delegation is not verified at all: it is not honoured, and the query is answered as if none were present. This is what makes a leaked token useless to a thief: possessing the bytes is not enough — you must control the bound private key. It is **not optional** and **not skippable**; an Exchange that omits it reduces the token to a bearer credential and breaks the anti-theft guarantee.
 4. Check `exp` on every JWT in the chain against current time.
 5. Optionally check `revocation_uri` for high-value transactions.
 
@@ -245,7 +245,7 @@ This is entirely offline — no callback to the issuer. The verifier needs only
 
 **Binding across hops.** Each delegation re-binds to the next holder's key (`cnf.jkt` of the child = the next agent), so at every hop the bound key is whoever now signs the request. The chain of JWT signatures carries the binding forward — there is no point at which the token reverts to bearer form.
 
-**Which signature binds in a brokered request.** The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt` — and that key is always a key the request proves possession of. On a direct call the proof is the agent's RFC 9421 request signature, so `cnf.jkt` is checked against the key that signed the request. On a purchase relayed by a Broker (`BrokerService.ExecuteTransaction`), the Broker signs the transport request alone, so `cnf.jkt` is checked against the key that signed the agent's `AgentAcceptance` in the body, and an item without an `AgentAcceptance` fails the binding. The delegation therefore stays bound to the agent's private key through the Broker, exactly as on a direct call. A Broker is never delegated to and never becomes the holder. On Broker-led discovery the Broker originates the query and signs it alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+**Which signature binds in a brokered request.** The holder-binding check always matches the **terminal holder** — the key named in the *final* delegation's `cnf.jkt` — and that key is always a key the request proves possession of. On a direct call the proof is the agent's RFC 9421 request signature, so `cnf.jkt` is checked against the key that signed the request. On a purchase relayed by a Broker (`BrokerService.ExecuteTransaction`), the Broker signs the transport request alone, so `cnf.jkt` is checked against the key that signed the agent's `AgentAcceptance` in the body, and an item without an `AgentAcceptance` fails the binding. The delegation therefore stays bound to the agent's private key through the Broker, exactly as on a direct call. A Broker is never delegated to and never becomes the holder. On a query a Broker originated (Broker-led discovery), the Broker signs alone, so a delegation on it cannot pass holder binding: the Exchange does not honour it and answers as if none were present. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question. An Exchange that requires a verified delegation before it presents a scoped term ([Scope-Based Access](#scope-based-access)) therefore presents no such term on that query; the agent can query that Exchange directly, where its own request signature passes the holder binding.
 
 ### Delegation Denial Reasons
 
@@ -332,7 +332,7 @@ Every signature is a conformant WG-00 signature in its own right, with its own l
 
 FORA's Broker never forwards an agent's request unchanged, so it never covers an agent's signature. Each request it sends to an Exchange is its own:
 
-- **Discovery is Broker-led.** The agent asks the Broker, not an Exchange: the point of the Broker is that the agent does not know the Exchange at discovery time. The Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately.
+- **Discovery is Broker-led.** The agent asks the Broker, not an Exchange: the point of the Broker is that the agent does not know the Exchange at discovery time. The Broker chooses the Exchanges and originates its own `DiscoverResources` queries, signed by the Broker alone, so a delegation on such a query is not honoured ([Which signature binds in a brokered request](#verification)). How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question.
 - **Execute is re-packaged.** The Broker builds a fresh `TransactionRequest` for each Exchange and signs it alone ([Projected execute requests](#projected-execute-requests)).
 
 In both cases the Broker's signature covers its own request components, `@method`, `@target-uri`, `content-digest` and `authorization`, and exactly one `Signature-Agent` member, its own. The request carries no agent signature headers. Single-member WBA verifiers, such as Cloudflare's `web-bot-auth` library, therefore accept every Broker signature.
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index 86f0dae3..ce03cf11 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -496,7 +496,7 @@ Broker → SSP-Alpha (multi-URI batch query) — `POST https://exchange.ssp-alph
 }
 ```
 
-SSP-Alpha's Exchange verifies the Broker's signature -- it looks up the public key by its `keyid` thumbprint in the key directory named by the Broker's `Signature-Agent` member, Ed25519 verifies, and authenticates the caller as the Broker. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question, tracked separately. A discovery query moves no money, so it carries no agent consent; see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
+SSP-Alpha's Exchange verifies the Broker's signature -- it looks up the public key by its `keyid` thumbprint in the key directory named by the Broker's `Signature-Agent` member, Ed25519 verifies, and authenticates the caller as the Broker. The query carries no delegation, and the Exchange would not honour one: nothing on a query the Broker signs alone can pass its holder binding. How an agent proves a holder-of-key entitlement at discovery time through a Broker is an open protocol question. A discovery query moves no money, so it carries no agent consent; see [Multi-hop forwarding](/protocol/authentication/#multi-hop-forwarding).
 
 SSP-Alpha returns `offer_groups` (batch mode -- multiple URIs in query):
 
diff --git a/website/src/content/docs/protocol/walkthrough-academic.mdx b/website/src/content/docs/protocol/walkthrough-academic.mdx
index 08967eb7..e397e089 100644
--- a/website/src/content/docs/protocol/walkthrough-academic.mdx
+++ b/website/src/content/docs/protocol/walkthrough-academic.mdx
@@ -16,7 +16,7 @@ A university AI research agent needs 50 academic papers for a literature review
 | **Elsevier** (no subscription) | Paywalled | 17 | $1.50/article |
 | **Springer Nature** | Paywalled, retracted | 1 | $1.50/article (flagged) |
 
-The agent carries a delegation JWT from the university, granting `academic:*` scope. The Broker resolves DOIs via OpenAlex, discovers Exchanges via `fora.json`, and uses the `fora-academic-v1` extension profile to access version, OA status, and retraction metadata.
+The agent carries a delegation JWT from the university, granting `academic:*` scope, and states the university's subscription scope in its requests. The Broker resolves DOIs via OpenAlex, discovers Exchanges via `fora.json`, and uses the `fora-academic-v1` extension profile to access version, OA status, and retraction metadata.
 
 **Six-step flow:**
 
@@ -96,7 +96,7 @@ All three publishers route through the same academic aggregator Exchange (`excha
 
 ## Step 2 — ResourceQuery
 
-The Broker sends a batch `ResourceQuery` with all 50 DOIs in `ResourceQuery.uris`. The `Requester` carries the university's delegation JWT with `academic:*` scope, and the query declares support for `fora-academic-v1` so the Exchange includes version, OA status, and retraction metadata in its response.
+The Broker sends a batch `ResourceQuery` with all 50 DOIs in `ResourceQuery.uris`. The `Requester` states the agent's scopes, the university's subscription scope among them, and carries the university's delegation JWT, which the Exchange does not honour on a query the Broker originated (see below). The query declares support for `fora-academic-v1` so the Exchange includes version, OA status, and retraction metadata in its response.
 
 `POST https://exchange.scholarsgate.com/fora/v1/fora.v1.ExchangeService/DiscoverResources`
 
@@ -110,7 +110,7 @@ The Broker sends a batch `ResourceQuery` with all 50 DOIs in `ResourceQuery.uris
     "domain": "cs.stanford.edu",
     "type": "REQUESTER_TYPE_AGENT",
     "name": "Stanford CS Literature Review Agent",
-    "scopes": ["academic:*"],
+    "scopes": ["academic:*", "subscription:inst-sub-stanford-2026"],
     "delegation": {
       "principal_domain": "stanford.edu",
       "principal_id": "inst-sub-stanford-2026",
@@ -182,7 +182,7 @@ The Broker sends a batch `ResourceQuery` with all 50 DOIs in `ResourceQuery.uris
 **Key fields in this request:**
 
 - **`ResourceQuery.uris`** — 50 DOIs in `doi:` URI scheme. The Exchange resolves these against its catalog. DOIs are the universal dedup key for academic content: the same paper on arXiv and Elsevier shares the same DOI (or is linked via `academic.related_works`).
-- **`requester.scopes`** — `["academic:*"]` declares full academic access. The Exchange will check this against the delegation JWT to determine subscription entitlements.
+- **`requester.scopes`** — the agent's own statement: `academic:*` for full academic access, and `subscription:inst-sub-stanford-2026` for the university's subscription. The Exchange does not verify them. It presents each term whose scopes they cover, so the subscription term, which carries `subscription:inst-sub-stanford-2026`, is presented.
 - **`delegation`** — A delegation JWT signed by `stanford.edu`'s Ed25519 key. Its claims contain:
   ```json
   {
@@ -195,14 +195,14 @@ The Broker sends a batch `ResourceQuery` with all 50 DOIs in `ResourceQuery.uris
     "cnf": { "jkt": "<thumbprint of the agent's key>" }
   }
   ```
-  The Exchange verifies the JWT chain offline (no call to Stanford needed) — including the holder-binding step, that the request-signing key hashes to the delegation's `cnf.jkt` — confirms the subscription covers Elsevier content, and returns zero-cost offers for covered papers.
+  On this query the Exchange does not honour the delegation: the Broker originated the query and signs it alone, so nothing on it can pass the holder binding, and the Exchange answers as if no delegation were present ([Which signature binds in a brokered request](/protocol/authentication/#verification)). The agent's direct purchase in Step 5 verifies it instead, offline and with no call to Stanford. An Exchange that requires a verified delegation before it presents a scoped term would omit the subscription term from this answer, as if it did not exist; the agent would then query the Exchange directly, signing the query itself, with a delegation that grants the subscription scope.
 - **`supported_profiles`** — `["fora-academic-v1"]` tells the Exchange to include academic-specific `ext` fields (OA status, version, retraction status) and attestation claims. Without this declaration, the Exchange MAY skip expensive metadata computation like retraction checking.
 
 ---
 
 ## Step 3 — ResourceResponse
 
-The Exchange resolves all 50 DOIs against its catalog, checks the delegation JWT for institutional subscription coverage, and returns 50 `OfferGroup` entries. Below are representative examples from each category — the full response contains all 50 groups.
+The Exchange resolves all 50 DOIs against its catalog, presents the terms the stated scopes cover, the institutional subscription term among them, and returns 50 `OfferGroup` entries. Below are representative examples from each category — the full response contains all 50 groups.
 
 ```json
 {
@@ -538,7 +538,7 @@ The Exchange resolves all 50 DOIs against its catalog, checks the delegation JWT
 
 ### Offer Categories
 
-The Exchange classified each of the 50 DOIs into one of four categories based on the publisher's access model and the delegation JWT:
+The Exchange classified each of the 50 DOIs into one of four categories based on the publisher's access model and the scopes the requester stated:
 
 | Category | Count | Pricing Model | Rate | Key Signal |
 |---|---|---|---|---|
@@ -578,7 +578,7 @@ For the 20 Elsevier papers covered by Stanford's institutional subscription:
 - subscription (FREE + subscription scope): `pricing.model` is `PRICING_MODEL_FREE` with `rate: 0`, and the term carries `scopes: ["subscription:inst-sub-stanford-2026"]`
 - `subscription_id` matches the delegation JWT's `principal_id` (`inst-sub-stanford-2026`)
 - `subscription_quota` shows remaining capacity (76,520 of 100,000 accesses this period)
-- The Exchange verified the JWT chain offline — no call to Stanford's identity provider was needed
+- The Exchange presented the term on the stated scope alone; the agent's direct purchase in Step 5 verifies the delegation's JWT chain offline, with no call to Stanford's identity provider
 
 ---
 
@@ -603,7 +603,7 @@ The Broker applies a cost-minimization strategy across all 50 OfferGroups:
 | Retracted (excluded) | 1 | — | $0.00 |
 | **Total** | **49 acquired** | | **$25.50** |
 
-Without the institutional subscription, all 50 papers at $1.50 each would cost $75.00. The delegation JWT saved $30.00 (40%), and free OA saved another $18.00 (24%). The Broker reports the savings breakdown to the research agent.
+Without the institutional subscription, all 50 papers at $1.50 each would cost $75.00. The institutional subscription saved $30.00 (40%), and free OA saved another $18.00 (24%). The Broker reports the savings breakdown to the research agent.
 
 The Broker also flags the retracted paper to the agent:
 
@@ -626,7 +626,7 @@ The research agent commits to all 49 selected offers in a single batch `Transact
     "id": "litrev-agent",
     "domain": "cs.stanford.edu",
     "type": "REQUESTER_TYPE_AGENT",
-    "scopes": ["academic:*"],
+    "scopes": ["academic:*", "subscription:inst-sub-stanford-2026"],
     "delegation": {
       "principal_domain": "stanford.edu",
       "principal_id": "inst-sub-stanford-2026",
@@ -713,7 +713,7 @@ The Exchange processes all 49 items in a single batch:
 1. **Signature verification** — verifies each item's `offer.signature` is its own Ed25519 signature over the reflected Offer (stateless, no stored offers).
 2. **Agent authentication** — verifies the request's RFC 9421 HTTP Message Signature (alg=ed25519, carried in the HTTP headers) against the agent's public key published in the WBA directory at `cs.stanford.edu/.well-known/http-message-signatures-directory`.
 3. **Delegation verification** — verifies the JWT chain for the 20 subscription items. Confirms `academic:*` scope covers Elsevier content.
-4. **Balance check** — confirms `litrev-agent@cs.stanford.edu` has sufficient balance ($25.50 for 17 paid items).
+4. **Balance check** — confirms the account of the `cs.stanford.edu` key directory has sufficient balance ($25.50 for 17 paid items); `litrev-agent` is only a label and selects no account.
 5. **Quota check** — confirms 49 accesses fit within the subscription's remaining quota (76,520).
 6. **WAL write** — records all 49 transactions in the write-ahead log before generating signed URLs (write-before-sign invariant).
 7. **Signed URL generation** — generates 49 Ed25519 signed URLs, each binding `agent_id`.
@@ -864,7 +864,7 @@ Response:
 | Step | RPC | Free OA (12) | Subscription (20) | Paid (17) | Retracted (1) |
 |------|-----|---|---|---|---|
 | 1 | -- | `fora.json` discovery | `fora.json` discovery | `fora.json` discovery | `fora.json` discovery |
-| 2 | `DiscoverResources` | `Requester` with `academic:*` scope | Same + delegation JWT | Same | Same |
+| 2 | `DiscoverResources` (Broker-led) | `Requester` stating `academic:*` | Stated subscription scope covers the term; delegation JWT not honoured | Same | Same |
 | 3 | -- | Offers at $0, `oa_status: "gold"` | Offers at $0, `subscription_id` set | Offers at $1.50 | Offer with `retraction_status: "retracted"` in `ext_critical` |
 | 4 | -- | Broker selects (free) | Broker selects (free via sub) | Broker selects (cheapest) | Broker flags and excludes |
 | 5 | `ExecuteTransaction` | Batch, cost $0 | Batch, cost $0, sub quota decremented | Batch, cost $1.50/ea | Not transacted |
@@ -872,7 +872,7 @@ Response:
 
 **Authentication at every step:**
 - **Agent to Exchange**: signed with an RFC 9421 HTTP Message Signature (alg=ed25519) in the HTTP headers
-- **Institutional delegation**: delegation JWT signed by `stanford.edu`'s Ed25519 key, holder-of-key bound via `cnf.jkt` (offline-verifiable)
+- **Institutional delegation**: delegation JWT signed by `stanford.edu`'s Ed25519 key, holder-of-key bound via `cnf.jkt` (offline-verifiable), verified on the agent's direct purchase and not honoured on the Broker's query
 - **Exchange to Agent**: `exchange_signature` on each Offer (Ed25519, stateless verification)
 - **Signed URLs**: Ed25519 (Exchange-signed, publicly verifiable, agent identity bound)
 - **Content integrity**: SHA-256 hash verification on all 49 delivered PDFs (`RESOURCE_MUTABILITY_STATIC`)
@@ -880,7 +880,7 @@ Response:
 **Key academic-specific capabilities demonstrated:**
 - **DOI as universal dedup key** -- cross-exchange resource identification
 - **Mixed pricing in single batch** -- FREE + subscription (FREE + subscription scope) + PER_UNIT in one transaction
-- **Institutional subscription via delegation JWT** -- offline-verifiable delegation, no call to Stanford
+- **Institutional subscription** -- presented on the stated subscription scope; the delegation JWT is verified offline at purchase, no call to Stanford
 - **Retraction flagging via `ext_critical`** -- consumers MUST understand retraction semantics or reject
 - **`fora-academic-v1` profile** -- OA status, version lifecycle, peer review status, retraction metadata
 - **Aggregator as Exchange** -- one Exchange serves content from multiple publishers
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index d3d7919b..acb5a513 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -1003,9 +1003,12 @@ SDKs implement it:
   an agent's request unchanged, so it never covers an agent's signature: discovery
   through the Broker is Broker-led, the Broker choosing the Exchanges and originating its
   own queries, and execute is re-packaged per Exchange; in both cases the Broker signs
-  alone, covering its own request and only its own member. How an agent proves a
-  holder-of-key entitlement at discovery time through a Broker is an open protocol
-  question, tracked separately. On a relayed purchase the agent's identity and consent
+  alone, covering its own request and only its own member. So a delegation on a query a
+  Broker originated cannot pass holder binding: the Exchange does not honour it and
+  answers as if none were present. How an agent proves a holder-of-key entitlement at
+  discovery time through a Broker is an open protocol question, and an Exchange that
+  requires a verified delegation before it presents a scoped term presents no such term
+  on that query. On a relayed purchase the agent's identity and consent
   come from `AgentAcceptance`, verified against the agent's registered key resolved from
   `Requester.domain`. That key gives the delivery-URL binding, and a delegation's
   `cnf.jkt` is checked against it; a Broker is never delegated to. The Exchange resolves

From a0b1341376b796922ba619a26672be744fa3cf01 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 13:03:37 +0200
Subject: [PATCH 159/164] Make the subscription examples state the scope their
 term requires

Two subscription examples relied on a delegation to reach a term whose
scopes the request never stated. Walkthrough-v1's Scenario B stated
quote, earnings and news scopes while its term requires
subscription:enterprise-sub-HF-001, and the authentication page's
subscription agent stated subscription:marketdata-2026 while its
delegation granted only quote and earnings scopes. Scope coverage is
what decides presentation, so neither term would have been shown.

Both examples now state the subscription scope and have the delegation
grant it, and they describe the Exchange presenting the term because
the stated scopes cover it, with the delegation as this Exchange's own
requirement. The Scenario B Go sample sets the scopes on the requester
and the delegation.

The money-flow page listed a broker_fee field that no message has. A
Broker's fee is disclosed out of band, as the selection engine page
says, so the page now names one transparency field and says so.
---
 .../docs/getting-started/how-money-flows.mdx  |  5 ++--
 .../content/docs/protocol/authentication.mdx  |  6 ++---
 .../content/docs/protocol/walkthrough-v1.mdx  | 24 ++++++++++---------
 3 files changed, 19 insertions(+), 16 deletions(-)

diff --git a/website/src/content/docs/getting-started/how-money-flows.mdx b/website/src/content/docs/getting-started/how-money-flows.mdx
index e951f36d..b8f783a5 100644
--- a/website/src/content/docs/getting-started/how-money-flows.mdx
+++ b/website/src/content/docs/getting-started/how-money-flows.mdx
@@ -176,10 +176,11 @@ Credits are applied to the agent's balance with the Exchange. They reduce the ne
 
 ## Pricing Transparency
 
-Two fields provide cost transparency even when the per-request charge is zero:
+One field provides cost transparency even when the per-request charge is zero:
 
 - **`subscription_unit_value`**: Carried on subscription transactions where `cost.amount` is $0. Shows the per-unit value for financial attribution -- the AI company can track the value of resources consumed against its prepaid subscription balance.
-- **`broker_fee`**: When a Broker mediates the transaction, this field shows the Broker's fee separately from the content cost. Agents see exactly what they pay for the resource vs. what they pay for brokerage.
+
+A Broker's fee has no field. It is additive and disclosed out of band, never folded into the offer price the Exchange signed, so the agent sees what it pays for the resource and what it pays for brokerage (see [Selection Engine](/components/broker/selection-engine/)).
 
 ## Reconciliation
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index fe494c3d..23cbd19d 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -626,7 +626,7 @@ A financial analysis agent carries a MarketData-issued delegation JWT that grant
     "delegation": {
       "principal_domain": "marketdata.example.com",
       "principal_id": "marketdata.example.com",
-      "scopes": ["quote:*", "earnings:*"],
+      "scopes": ["subscription:marketdata-2026", "quote:*", "earnings:*"],
       "expires_at": "2026-03-20T18:00:00Z",
       "max_spend_cents": 50000,
       "token": "ZXlKaGJHY2lPaUpGWkVSVFFTSjkuPGNsYWltczogaXNzLCBzY29wZSwgZXhwLCBjbmYuamt0Pi48c2lnPg",
@@ -646,8 +646,8 @@ A financial analysis agent carries a MarketData-issued delegation JWT that grant
 The Exchange:
 1. Verifies the request's RFC 9421 HTTP Message Signature against `fintech.example.com`'s published key
 2. Verifies the delegation JWT — signed by `marketdata.example.com`'s key — and checks its `cnf.jkt` equals the thumbprint of the request signer (holder binding)
-3. Reads scopes from the token's `scope` claim (`quote:*`, `earnings:*`)
-4. Returns subscription-tier pricing (zero marginal cost) for matching resources
+3. Reads the scopes the token grants from its `scope` claim (`subscription:marketdata-2026`, `quote:*`, `earnings:*`)
+4. Presents the subscription-tier terms (zero marginal cost) whose scopes, such as `subscription:marketdata-2026`, the request states. This Exchange also requires a verified delegation that grants a subscription term's scopes before it presents the term, which the token in step 3 does ([Scope-Based Access](#scope-based-access))
 
 ### Enterprise Agent (IAM-Issued JWT)
 
diff --git a/website/src/content/docs/protocol/walkthrough-v1.mdx b/website/src/content/docs/protocol/walkthrough-v1.mdx
index c24764cb..ca6a8ec9 100644
--- a/website/src/content/docs/protocol/walkthrough-v1.mdx
+++ b/website/src/content/docs/protocol/walkthrough-v1.mdx
@@ -361,7 +361,7 @@ curl -s https://marketdata.example.com/.well-known/fora.json | jq
 
 ### Step 2 — ResourceQuery with Delegation (JWT)
 
-Here is where v1.0's `Requester` + `Delegation` model shows its power. The agent includes a delegation JWT that carries its subscription entitlement:
+Here is where v1.0's `Requester` + `Delegation` model shows its power. The agent states its subscription scope and includes a delegation JWT that grants it:
 
 `POST https://exchange.marketdata-data.com/fora/v1/fora.v1.ExchangeService/DiscoverResources`
 
@@ -380,11 +380,11 @@ Here is where v1.0's `Requester` + `Delegation` model shows its power. The agent
     "id": "hedge-bot",
     "domain": "hedgefund.com",
     "type": "REQUESTER_TYPE_AGENT",
-    "scopes": ["quote:*", "earnings:*", "news:read"],
+    "scopes": ["quote:*", "earnings:*", "news:read", "subscription:enterprise-sub-HF-001"],
     "delegation": {
       "principal_domain": "marketdata.example.com",
       "principal_id": "enterprise-sub-HF-001",
-      "scopes": ["quote:*", "earnings:*", "news:read"],
+      "scopes": ["quote:*", "earnings:*", "news:read", "subscription:enterprise-sub-HF-001"],
       "expires_at": "2026-12-31T23:59:59Z",
       "token": "ZXlKaGJHY2lPaUpGWkVSVFFTSjkuPGNsYWltczogaXNzLCBzY29wZSwgZXhwLCBjbmYuamt0Pi48c2lnPg",
       "token_format": "jwt"
@@ -402,7 +402,7 @@ The `delegation.token` is an authority JWT, signed by MarketData's Ed25519 key.
 {
   "iss": "marketdata.example.com",
   "sub": "enterprise-sub-HF-001",
-  "scope": "quote:* earnings:* news:read",
+  "scope": "quote:* earnings:* news:read subscription:enterprise-sub-HF-001",
   "exp": 1798761599,
   "cnf": { "jkt": "<thumbprint of the agent's key>" }
 }
@@ -410,7 +410,7 @@ The `delegation.token` is an authority JWT, signed by MarketData's Ed25519 key.
 
 The Exchange verifies the JWT chain:
 1. **Signature check** — the authority JWT is signed by `marketdata.example.com`'s Ed25519 key (fetched from the WBA directory at `marketdata.example.com/.well-known/http-message-signatures-directory`). This proves MarketData actually issued this delegation.
-2. **Scope matching** — the requested URI (`/earnings/NVDA/...`) matches the `earnings:*` scope in the JWT.
+2. **Scope matching** — the subscription term's scopes (`subscription:enterprise-sub-HF-001`) are covered by the scopes the request states, and by the scopes the JWT grants, which this Exchange also requires before it presents a subscription term ([Scope-Based Access](/protocol/authentication/#scope-based-access)).
 3. **Expiry check** — `exp` is in the future.
 4. **Holder binding** — the key that signed the request (RFC 9421) MUST hash to the final `cnf.jkt`, so a stolen token is useless without the matching private key.
 5. **No network call to MarketData** — delegation JWTs are offline-verifiable. MarketData does not need to be online or queried. This is the key property that makes delegation scale.
@@ -430,7 +430,7 @@ The Exchange verifies the JWT chain:
 
 ### Step 3 — ResourceResponse
 
-The Exchange verifies the JWT chain, confirms `earnings:*` covers the requested URI, and recognizes the subscription. It returns a zero-cost offer:
+The Exchange verifies the JWT chain, confirms that the stated and the granted scopes cover the subscription term's `subscription:enterprise-sub-HF-001`, and recognizes the subscription. It returns a zero-cost offer:
 
 ```json
 {
@@ -568,9 +568,9 @@ The `subscription_unit_value` ($0.15) is the imputed value of this access for ac
 | Aspect | Without Subscription (Scenario A) | With Subscription (Scenario B) |
 |--------|-----------------------------------|-------------------------------|
 | Delegation | None | delegation JWT from `marketdata.example.com` |
-| Requester scopes | `["*"]` (public) | `["earnings:*"]` (from delegation JWT) |
+| Requester scopes | `["*"]` (public) | `["quote:*", "earnings:*", "news:read", "subscription:enterprise-sub-HF-001"]`, stated by the agent and granted by the delegation JWT |
 | Offer pricing | $0.05 per article | $0.00 (subscription) |
-| How Exchange knows | No delegation, no subscription scope — per-article | delegation JWT carries subscription scope — zero cost |
+| How Exchange knows | No subscription scope stated — per-article | Stated subscription scope covers the subscription term, and this Exchange also requires the delegation JWT to grant it — zero cost |
 | Round trips to provider | 0 | 0 (delegation JWT is offline-verifiable) |
 | `subscription_id` in response | Absent | `"enterprise-sub-HF-001"` |
 | Financial attribution | `cost.amount = 0.05` | `cost.amount = 0`, `subscription_unit_value = 0.15` |
@@ -590,12 +590,14 @@ requester := &forav1.Requester{
     Id:     "hedge-bot",
     Domain: "hedgefund.com",
     Type:   forav1.RequesterType_REQUESTER_TYPE_AGENT,
-    // Scenario A: leave Delegation nil.
-    // Scenario B: attach the delegation the principal issued.
+    // Scenario A: leave Scopes and Delegation nil.
+    // Scenario B: state the scopes the subscription grants, and attach the
+    // delegation the principal issued that grants them.
+    Scopes: []string{"quote:*", "earnings:*", "news:read", "subscription:enterprise-sub-HF-001"},
     Delegation: &forav1.Delegation{
         PrincipalDomain: "marketdata.example.com",
         PrincipalId:     "enterprise-sub-HF-001",
-        Scopes:          []string{"earnings:*"},
+        Scopes:          []string{"quote:*", "earnings:*", "news:read", "subscription:enterprise-sub-HF-001"},
         Token:           delegationToken,
         TokenFormat:     "jwt",
     },

From 5c84e8b18fd54df7da8833cf1e50afcbb87df629 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Tue, 13 Oct 2026 15:42:49 +0200
Subject: [PATCH 160/164] Name the agent a Broker verified on the queries it
 originates, and refuse a mismatch only on a purchase, in the protocol

The protocol said a Broker refuses a requester.domain that is not the
signer's directory on every request it receives, Resolve included.
Before that sentence it named only BrokerService.ExecuteTransaction,
and the protocol's author had decided Resolve the other way in the
reference implementation's conformance suite: the Broker verifies the
agent's signature, refuses nothing for requester.domain, and names the
host of the agent's verified directory on every query it fans out.

The protocol now states that decision. At ExecuteTransaction a mismatch
is still refused, because the agent's acceptances sign requester.domain
and every Exchange resolves the acceptance keys from it. At Resolve the
Broker answers the request, and every query it originates names the
host of the directory the agent's verified signature names, so a host
the agent wrote that names any other directory is never forwarded.

The file header's "Direct and relayed requests", Requester.domain and
DiscoveryRequest.requester say so, and gen/ is regenerated (comments
only). The authentication, Broker overview and scenario pages, the Go
Broker handler's doc comment, both changelogs and the design history
follow.
---
 docs/design-history.md                        |  24 +++++++++++++++
 gen/descriptor.binpb                          | Bin 697103 -> 697859 bytes
 gen/go/fora/v1/fora.pb.go                     |  21 ++++++++-----
 .../fora.v1.DiscoveryRequest.schema.json      |   4 +--
 ...ora.v1.DiscoveryRequest.schema.strict.json |   4 +--
 gen/jsonschema/fora.v1.Requester.schema.json  |   2 +-
 .../fora.v1.Requester.schema.strict.json      |   2 +-
 .../fora.v1.ResourceQuery.schema.json         |   2 +-
 .../fora.v1.ResourceQuery.schema.strict.json  |   2 +-
 .../fora.v1.TransactionRequest.schema.json    |   2 +-
 ...a.v1.TransactionRequest.schema.strict.json |   2 +-
 gen/python/wire/models.py                     |   4 +--
 gen/ts/wire/schemas.ts                        |   8 ++---
 proto/CHANGELOG.md                            |   6 ++--
 proto/fora/v1/fora.proto                      |  29 ++++++++++++------
 sdk/go/connectserver/handler.go               |   5 +--
 .../docs/components/broker/overview.mdx       |   2 +-
 .../content/docs/protocol/authentication.mdx  |   4 +--
 .../docs/protocol/scenario-walkthrough.mdx    |   2 +-
 .../src/content/docs/reference/changelog.mdx  |   6 ++--
 20 files changed, 89 insertions(+), 42 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 81713e4a..7ec70d63 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2605,6 +2605,11 @@ page or comment claims an Exchange enforces it.
 
 ## A relay is a requester mismatch the Exchange admits
 
+> **Superseded in part.** A Broker refuses a mismatched requester only at
+> `BrokerService.ExecuteTransaction`. At `BrokerService.Resolve` it refuses nothing
+> for `requester.domain`, and every query it originates names the agent's verified
+> directory; see "A Broker names the agent it verified on the queries it originates".
+
 An Exchange receives the same `ResourceQuery` and `TransactionRequest` from an agent and
 from a Broker, and the protocol gave two different rules for them: on a direct request
 `Requester.domain` must name the signer's own directory, while on a request a Broker
@@ -2848,3 +2853,22 @@ therefore presents no such term on a Broker's query. An agent that needs those t
 queries the Exchange directly, signing the query itself. How an agent proves a
 holder-of-key entitlement at discovery time through a Broker remains an open protocol
 question.
+
+## A Broker names the agent it verified on the queries it originates
+
+"A relay is a requester mismatch the Exchange admits" closed with a Broker refusing a
+mismatched requester on every request it receives, `BrokerService.Resolve` included.
+Before that, the protocol named only `BrokerService.ExecuteTransaction`, and the
+protocol's author had decided `Resolve` the other way in the reference implementation's
+conformance suite: the Broker verifies the agent's signature, refuses nothing for
+`requester.domain`, and names the host of the agent's verified directory on every query
+it fans out. The protocol now states that decision.
+
+The two RPCs differ in what the agent signs. On a purchase, the agent's acceptances sign
+`requester.domain`, and every Exchange resolves the acceptance keys from it, so the
+Broker can neither replace a mismatched value nor pass it on: it refuses it, as every
+Exchange would. On discovery, the agent signs nothing an Exchange sees. The query is the
+Broker's own, and its `requester` is the Broker's statement of whom it queries for, so
+the Broker states the directory it has just verified, and a host the agent wrote that
+names any other directory never leaves the Broker. Either way, no request a Broker sends
+names a directory it did not verify.
diff --git a/gen/descriptor.binpb b/gen/descriptor.binpb
index 34d4a587e9c6d79d85b985bff5a1fa59e11a47fd..e83839c959cabfb4d6cf2c991c537cba73b340f1 100644
GIT binary patch
delta 47290
zcmZ_1d3+Q_`ahoO^z=2E%w#e%Va`k@0lAU@a(E;NUb`Oa?Yio&E-D_MU1b&4bq_Zo
z0wN&FS*YBI+?O0J$RPm~LGHtd1O!FoP?Sp$#NYd=s-{`LuV4Pk^Yrt)>#3@zs-Akf
zs^_&2TfX#3%i2DkK1!e5KI#JRfV-8`Z`*_J_Ik%z_SYdx4|(G`pV)65_uioSKX3F{
zik1`7zRk^9WPf|cJF%nkUf3Q|sr}9HR%E*N%CK>{My5@sTjuGfdOqE)*P~B%f6U4}
z*ZtYQckkJ&`*WG6dV+ZT?>)Oe);iPksb?PTp6UL4_vik}p8bze$ljQz2iW*+x}LEz
zf9d|uo|(s=>+y8vE=RfIu^vx%d+He~h80ZHqBWUbPj=5-`&^H|09c^*v@*~1==J1N
z&peTNya!6_b(O%+p#10ld8vGl=bn1vsb{+N>fST+Ot+`I_iUZ%2IXIu)tak3*`sH#
zOpnL;|BpTOT=z$N^&l{|d#KT*yj!ooKi3__5=f?b&+gqb*FV+s(H>MQiB@s3`YqVz
z$F#fb6<28I%Y)zM8b#LLTuaq*l$?-y+Ft*-w$D>>I#(;Q{Faxv3fQ?#nmS}Ik!`wI
zjb5(g38{VTT~BIzmGVBS)<jBqpwvf=wQ@)(^-(+CWOd^@c-WtP{TJ=givFrrAY~Nd
zs-cuaLZ!dj{Az2k#&tk4`yYSRg1HsUEhiUBOpRS8m2yc+ZP(RW@8L>nNFB`<_Ruy|
zj8?T`DWpPYw3@lnA)zx`z5ZeARiWbzspHw)ziF>kjCXas&>630I!hfdbjGVUb+d+u
zM$kg)4EyP4wP8xd3{}gQQW}(IsDZRYLTQHD;!4X_xp8_(U1(SI(ymlGEL63ql+vNJ
zP%Wx(NGL5-ue{Tmrdo;$pI@owY*an*&y@`8a*sD+&wF0;D}j}&k+L4QRF(JQYPR78
z?a8*QRfRV$G0{z{)etX)NT9A(V{vOD>I~Ww($=cV2KM+rwFx!&&!W<akH%Q5`WzGw
zP}Zs;-pTY7C~MV3(h3M+gHTc%)Lg5;GU>VTvKc~kK33H>R-xr{SZY3)>s0ls|78Mg
zy{cZF{a-Gc_7hdT%{qZGufon9YR)(|^<UcYf*q<6vBpycJmk6!D%&!_e5*YOSlys1
z2CoE2SlytSc@Bwk8q`40+ACD?w2}SmKia<A8db$7g{Y>DYF@-4q0^`~i8-V}WW0+N
zv<wtZ^^6fGagEiQn}hm&!KS^aRXqHK)0iGbfmvTTjR_J(eBpEnNEGn}bqTdRNEGpf
znz)%aC6S^jzfhAmS+f*g2o%1yJN{Rz^i+TCmXeDG`&#v7Bu*|$`C2Wx!XZgXy}HW!
zz~mShAm{9fHCnw|ea^*DfpJdtl}aTvJIJ!u4hf8NYGoU12Am(JqFMv&34OF#N|ym%
z={n#N+bdlMBrpbeLuC?!2G9WSWzDU(L|wFy_PSRYVGn*;i+gJDuhV%N^j`Ox!UH{u
z2EEt4;V5@GkZ`%zy+tFuxmJjGg@$&@4{1ZZ>Ts`DwjJj|Z>U!bLCl27oTY`l!@SxG
zk5$a8f#EpHt7PK^8Ftw#TA~7kaCDEN!-!GdSW+6V18kJHxWu|3JP2JicFNyg(L9~U
zy7f0u|FLfU4M2?bhWK0n0}Mcn^_G-cqZGKc64KuBVtJcAKr8YTyyG>R2)|ayucvvr
zUsr(u<TR&gKmu}_SNb(bKu+_*uXm7D<X+lruQK1O##eiWjjxWe4+m+BYQPdr3jyfQ
zcA6F>^k;j+5#F>Q(X_L@(fP7ziNTw8j#qtGHm&4AZ?4m{l7*(7$D6jAn}Xr6$g3pd
zl^J&KRqe`Z5MqW=6a}uf$m<L8rUeO`7I_Q!+JidKpjhOMC#*rDP9T@CX9sJ8tCzSC
z<nc?qJ~39I0*EEvXjUT9lCZ?vw3&69JWWyH@%47qYuXE*s(KfLJigxR6CDmAVAOkK
zVgP^yM!mP$W!zKvI9|g_;3MtvKNQzEo&pkzYaCAj3B@%RJ%v|xJ%gwGbUpruCF@-a
zG<5EI$6xRiK<gcU0STb><S*~hG?*LGws>>CXD<%b?7$YU5wh+@-EzrWwz2DmY4??H
zbGjK!AZ>Hp1SF8Qk(=DfRq${p`)HVUclA!kmR!YyO6_zy1tbYModOaFJE>D%#yW;l
z(Yt%?`-W?#QoYy3ppM<^^@;fmLcrMTP4Iw#bbztfTTy8Z6Br;5*<(g(5vBT&i$Ohm
z$m`=F0hFj`4|&sK9s)^9Ud%%?sb_PkXOG#(MrjqE&c|E~>e*wi9n`bOya~R%k`6GA
zdE2(L2BKZPSYA(hbADkDzNrleo%DLc)UIB>q@MCBrL5cc`fX)mF$K-XGCf5Dobr}r
zt$VmI3iy#d^_KSg;vc<Ag1iti6c7FAO&42l!;wLQ{E6*(OM55%lUL!(3NeZ6O{T1y
zxC~4?&nAx6Zb_f_DkTz#0-p2UvZmG(Tn2T%z<gu0r!p5@gDAkcKn5+(MWrwg^w)CU
zwTF+<mU#mGHE$8G6<;%7VSgT{-IsnvQ}}T4f(hMMGz^z(fRCjuqz+^|#%W!P2Wkor
z0f`Bjfm-txJYoV3axm*KUVE*0u%<NQhJs04twl@g1bPQTsLgQu%kkRZJ?Y_^!u^1_
zkQ%PR4<6z|sLn|C{6y`~r6V<k_Yq{MIwLjo5j++o#>ps6X&Jwc4SL2(vdAQ@T~ja|
z<0w)aMaI2`)d}M0{z;m0ZM@dYo_^4{#-1@ryH)87Rtsq;MQM|?*5wWfLnmn!U9Ege
zBXx4RNm^wW>r?7EtOX%;D(mo$_F3^%O=&BYC}^9iweMi{gF8bAE5baxe2Qi$nR#xL
z7?7GrO|p^(u^Q5BEoT+GcbfJ=z}67Upvf^qVGu87Wz)5;<%=~%rviuxD;8^p-yvb-
zVl7x;UCCAOa48!)UAww`sjEVxcBy8Fl~d)TcBzKxy*pQdDJ$4d)3qncS7^dZ#hRh6
z(2`=2#$1U~R%lqH@8Bw+>e=8K+FhONH93E)3JuYEO@;~}QE0tZ)>7I@L$qEiudr5W
zsIfPsZP#+XvC}iPYjXqJHH55}1KCSe-pP8*(K?jx)a3F6CZKj|rkIjJ0&1s*V6#0}
z!NbqkmN{C-^3R+qd-+85nPwF7(m_JyGc8(Vwc{$N@^03CuGYSMx2r-Pz8hhLRG}*G
z)*?}>4OaoRmyMXKwJYE2s!$#GYS=bW*Le9fv{%D)C=7!O?`J3HY8|WhJFVnZXcF45
z`9#Bl1j2r;shEU7qL}^U;InC!^OA=jWKYb~=5{{lLQp()P?PZ#WB_qclL0+QKpfN%
zJ&whYM`_w|E$3DH-gmVzo~Flz-{h*A9@5Tg%Fmi=O~|!$&@Y?0nDdBd7cJ1ndv5wk
zQ%iYNE1sdr&S~l&F5#e@^P1Wobr*O8bY-xvTGPD_9;O@OEn1{aQ#uUP)fTQY%^QPs
zwL9W6Llll4^1iC8lRVZ?n!`2ngyHs{_q4F5e7G)M0bEpexGsZ0kT7Dn4p+W`>);_{
z#Y?o`R5M-rrN(zIOqb0Cl7#e-=rfQ&U^@EjeTzfDu-W#cC0ez&e73Hbyk|AOX3f@N
zEp;?VD9xr~E4dD+dCdQT*0y|}u88<W<NiNSFA&i;ND|UZ%dD<k1-`L>{pADgx~c`P
zrQ{n6bf1U}HSQY=^y22SQ1XohdaKraq-f+CHaq-*)}h*V5hw<+b?IG@L0xUVX{AIU
z*Rb_=ms``wyEK{*m$E;u)MnhU)P>N9tNZwJMKXX`s>_K0Bp{aRm<VRkt^p$<q;1rd
zZMqsCZL*Tjj3mqdqm^$zU$4EW*5HYVFd+w+jc&hD+`N$*koJpsiU@O~9^Iyk;GGye
z!rY{*TXhk<OCIz#>oRzkEJT=FbPC>gr@2X(ahahM#W&c`eWcwVr~u(uL7_J@OfkeU
zzW|LH7~)$+dzh3XIJ;BZUNPF$F`+ZsFh#_#DJFDA8;JP%b_Ihnq)xQYeX6BA*G)7o
z`kaN{nP^<}ISUvQjSyeCQC$ld6OFQF))Y~$FQiT}lxFc!9(H?JkFsY!(_XCxM?}V&
z;se?g7tIH>DMrZgEFaLO7^O|E_YGeEypa07ef2J_TCINH#mGaqzHeOgtvq17Zxo9l
zOjGiJ@xD>f##%u^n5Ou#owpb6(Yh+tYh4UKFxDCuy~_`bwZ=v7@&jY7(XPF9T+}Kb
zUCb`ur=6_c=tATJVxuAVq?(csh>b?c<<dd(0kP5Oc!hNVnI4!C2&wz*$M$Qrxn1|U
z7y)4HGki`j27s~8D0Cb)0E~S`I%B=!=NQ3|R%<FRnRe5!wU@OT{O>et5ID7_Ph>(g
zB?z2av&iY_AaH6;bhL2MAY8Q8%)Vrblm^6U9}bn?rdr9jmy(4Eq>fm$mDH4iklN4W
zTge+<=+*t1p6vYVTA%~?C>syNk_Hk${Y<&71c|cyQQ3T3iLeB-rOBRsMLT;v#VABw
ztVIaUG042=YGl$NQ|>My45UFOb_*j-tOgjZQ_P&#?3v$bBh=s&6T8dd)LA;swlmqC
zC$y1OGaYC!0X@@!1_|hyW{4-xNCnU{&1|XlTaJK-b6Dv~?dIw^E&^qZ=C}wn_s%gx
zVt=Odxp$6<TuL8d1gbWlO+TsitD5gZ&_p-ig`ib>z8Mm|t@D|9zKLl1H{1xAw21xn
zly+0~A{QYS2#Z_<TC^9La=p~~#JtGFdO3-57&`48KD3XY(k3faAG#QbSkw<)3|h87
zbXplYDEC7XVfNoR1Z3B-ZD+LSs@J&)v}&(&5ol^&XNnvrN~NiJotY`I`s*A5?y=jh
zJF5-IeRQ{}g!%Z;`DDD?jEEHhB$RfWSP^Jd0*RS#w^=UMXd+)WgT$%054jGD3xI>n
zA$a%PYYi0jMHG9~?(wtss#1N_wN{6<M_p@a`abG*Jx$+7sq5cIx){JH`1Han^<|#U
zr(FmGbvSLx%{XKLaoUWEIS?cuPMg@htQQcNduuJby`q2Osjju8cVhvD9krJ9Zjb<}
zwWN201W2s~@17wX2$OMNR;}u@s{6VSG#B@EA!sh{YlZkG0jASj+}CQ}l8;wi!BpJe
zVn4jD#XEpN4f<Phkb;C}e@hNhkkIUJIfGPJFz*hw_#kCHG+paF*fk*!CJc5>pviZz
zTML?e2U9Kj=3|Uvo|$9iG}`kuUDcy=EF)npp@_(!F}l!FqVX9DC2{Pp{d&q%0ghPR
z@EouUEg2hu1nfc!Yb+u>QpeL}cH4kH$y2e+RiYue%rf)24?ze@%dCQsHHKQ$psm|V
zrWEMoDpp!@a{wlER$57(Y9|@!th8FT5~&%3$Te(Jfj+omjav?lx;2(eQ9*`;EaV<W
zkiQ!=>bBbhLpsZ?*zUAAxKP?|#l(yQ5=z@GxZPS&Bed#n`;Mr-&QrPDEr~|fZc8rm
z1|M0wEiCe5i?9Voer=>L=S};jCi)m(Xe3rv%F}w0GeaogQ_9#6&st4eiHsU(z8KI`
zv;*^@Wa<jgC}I?(vojQyYNlUq|GP}j^%R38cKHy1!YEQ$4O5{2@(p`TQ~g6v<_(|1
zD@0sklhk`i>0=7eCi`-}wqLqT@1#T~`;c^4j$ZKcY|cAAr8GN-)lSxv>_`iJTow$G
zcEDr6yyL_4Gfaph@Sg5d*0Y%{^`SNRPZ))C4dkZ#Fj-<r11kC&a+&qMTnfxNV|za|
z@eH4OIjv}%v$Y@g1?o(nnz@vP`p@!Ve{hKuuxI<!rkApSHK*oRJaqKjU$M}Q^L_<}
zf%mRY&0Y$Id1}5-ZF?yT)6Rll8HQ<Op-;Wcm8$87m{MKjQ=7ZIez_Rtwoh$#DGS5*
zy<ZuIC}{Doq!83B`5*j#xd>9;|CRZec9;6pGJ>yhS`m@JGM`#<X^~jgm;VaC5c}+3
zfrUfr2fu2I2nO7*Y81ux`cn8Eyx&&)YOq6ddI>yq+!~*H<)tii+=o69!*E+6g^v5k
zr(S)j6#8xLrOgj1^xMb3QbfP4^P$Aa!Vxjr)J;BRJ6l$+zg>g>#CSr|4~1^>6=$R;
zV#?4q`AW85^h70>d*Wuo64ooZ!V|an)byn+RA{SDExwcm>}}*09r)M*^rt@MOP|WV
zsL<Qh;D5&m$~b-M8i86vvgFH)M&t@38hmPngwK^meCE0UXTgYFuJ3Rbus{Em6k2sR
zhC{1M!O*OYZclPeH0z#AixfTig-`8xQBic{KA&2BDGNpJ_o>%d*YSD-`G8MJWjkc9
z`+Lt`cyHb9g{OL6&4O+8%Zu@VN1o_!N~s<2A(?U~W*{V@4*7D9u}9kIcLWakyg@!W
z@<h~Owz7?0kv{BGcpldaCNvNGQfVuL@{m;usYjT<t)5LE@hLpQBPL{ykPM<>kf4sT
z-?i0C(nozFs39hCNv4F$pq0L5gWBq)>2G}skIf-NUG*)=lye!>?K`%itzKFDor^;?
z`Hp0+M@^7mI_}H)i6z?U*M*MzyoJ0bJim0pr(DLT`7)7N0?pIPUXXw|;X}&vRuqG*
zQAj<>7Pr%HOP_RQs7fbE2B|Q}fI7vRUasGjKIKfvV!A&?GBsQVRXWW^T(0*{pLTJm
zN~cMtGnYY?eq`<2>s``6`eX_g=^)7bNHQI{3_Rlu8`@sKB7Mf`K;(NMbB1KD<uVw7
zXW2LH_3JZdeF{%<z)0FOoFy4*8l;4N_T{{k$8PPQUmN<_=Z*5V;Te|;KBcv28<A=O
z&9|9ekifX$!zy2fa*#I(slTv89rR|!zc>pFn2`B}WN7FiO@inwk5zQkI~LdGDLmyx
zT+W8j)m#XT(>ss7)KRZ0?wzObm;yr7I=%BCRK<nRI(2z$Pe;AFxGqmN4-zC0sw1I4
zAZ{{4TED!UrR=Is`h89N<rx7)G`XsYEzf{FWpJKq9rhqGWy(Ys@z|nH`l0p%^VF6+
zF(n=Wa!?*7NP3?uI56;4;+&y)*`z>WjJ@p&{U@b*OrDHW!A0MU$&+y^NHouwJh{;U
z35+p$*ytR@ya)_Doye>z{ZQ3J7lQUm6I}=j%qHfAMCcC{KupXlYQlG0Cbi*YR#~mz
zTs7H6psmtm7lDeIoF_LrPyxc^JZyA+&usuTl`X8+|IlTsi;xS1sd+wXJ1^{{<zi}H
zP`vC0NjiCWE3txtHWNXcwm46D-~L@^eR=L9_*d+#@c=N3T|+30TbvgXJ8L`z%;G#T
z`4b8v-o<$(@8^k~H8GI<fgdl)Q=hiJ4xn$XkhV83XT1INwfX_Q>E1k^*UeRN7Dzjh
zr~HV{oou3WE!nxmv;T3k{<hlwWFBG}>Pztq&2}nJz2OoLY&o5$cCn^W#=)ZA?PK45
zyWT3drjK8qnE)3R=;N0y2@*<u{PG1oNW>w1{D}tyDoDQX>f=w|PqQ<D5(h>1@n3lh
z--<~VZN>Wde}A7fkOF)Q{iO}?E3f(0_)ngUefBP0_0)hNS{0AcsssGe$3ViU0e-m?
z1_`4E_(gC>SZLJ&{>*EB(W=A{=LQD)<q-_Y;zuwB`Q;Iei%g)s>Q}EW<wr0sa?vY;
z{WyX_ZwxIsp*Ga7FgETU{f@ivpJOQb;ZWC5^24Ei+5ON0^iaR-evmM9sK10=G}JlZ
zFpPD*R}Wt`+%=6qQ7K6@0;WmJBomg6B+K}Y)S@!R*{|J;EotRAzoKz}1{ao$^XtOB
zL6Vd|R7gR(qWVJG41dm6```EJt2~7>{CLIkCHc7zPN6OHD<9i;-mmY^t--%y$At&L
zTjn<f9!TIVBRonOfke%g`NJQhX5@jy*hca7a=+S|dj@f~@HlOSUqsGa2rS@!;1}_=
z!-D^;^dt7EA)k_(0IT<lIMZQard;L6jCP3>dSkU;#P5z2T5An~T_T0}`a{2(y2!#9
z1pG&r+RBGzfx6bOK46WanaoFByMbN%kpAZF8~pMW6_~`O_M=$@BycwP@rp{47%m(9
zAs)@pQ}`v#7aRPA9V|K|;G@ZH3v2bTe$8WB{ECA@MQ!oti}?^T0Nvupd?-LE1+m2+
zyI!_5IR%37E&lj*e854TI5gn4_`7tqUZxJu3u&MGb57bDAJ+SM%0Bn=S3kLG9%hwB
zzp~G-Vu{y5idQ4VVlQ;lZ*RZHuXf_)h)1w?uV1|z4QEJUyvq2(ug>vUm!Ud&G^c#U
z&UMpUJo1%az8(M*)%nU_AW~r<QJt^+@>mf_ROc&yTuf9%^6Gr$Ph8KdBRN!^ul!xF
zwJLZyKs?C$J)*aH^q^l6Z@%()UmWy@MZOFq$~j201T`B-lylIZxkXfm_XV2mpugm1
zSq}9MZ?=Q}-~85^PW$dW>YrnF>`{HDr|Ot9>cNFm9rMeyEJ&Dh%wNdE2hu^o$NYHz
zfshC!s1wZ7UGLrbgo{9{&k1MVfD8~$_~jWhkfh^Bq&m6)o#zi}Z|3K`Vt>$Gf6Hk4
zX1-h!{OG(f`O1WR)fz|Zy<heo@mTFM`q-Pt=Bw>^b;TppWn8}cJKlSOgWemTulDz#
ziE^PI(iY|`i-A{XIe3_-iDy6AL-%+)EXv2`i3T`Vrx3`_$81XOAUFVgFJJBJu{P0|
z@smF+XJdQmTdJ1l%Q+KFwBGW3*?J&R_vQJ8;>-j{)O~qAVq1E%=%=P#$!7dr@7QH!
zz9MEHFo~Nl7i*AES(%T;ntB=}dU|Dk`X*ti)6*+i$@6+)aAp1tH(JB!1(=^Ycc*>*
z^LoVl@J`n}>fD|AGFJ{El(jRzNSulRiL!R)<5Y|&iw5J){O0%axdcz)Lv;9WXMT%&
ztP8Z%`AMPCe(&FUt>>Xew-kDX+?X$q06_?)H0H}AKp;seAFt{}DY+=6F+VBJ#o?(e
zr7=Hsll3QF2<F0lY~+jj!w>Is%b=HR`|@R4($7;&`|@R45+uslmyfihC<Czx$Y%G*
znowjyHQASc+1=J~iWvN~)*Z9&`L7<$tv=?KLNDTux!p-Qsbg+;QnvRPb?2A#77gnY
za*+0v-ueOcp}v8OE<xvj`Ud2B4<TUm4angD5*U307!JZxO8)i@q;8RxQu3E9?Hfqn
z%#Q?Nc1F6A9qy;!*SWu22IYDCyJb+Gw|_t`)lfkh{R3F4-=>%LI8FCvAZNZ^^Rix=
z8+bE-5c|I{Kc5_W44XGVudNspkZU8DfEp8!2|tj48WTXmk1rhg<UkYI!vpm<%O|=z
zJmw9UV(x+rbS4Jy)*hPx6ocwaX3YlaovS806#x?zm>iHU0}{BC0|nxp4oDzO4j@va
z(*^lNO=05)=^d)3xCk`sOmPv&>81pv(?NxF0&u!6904vhofW*QUt2xhMWE$tx{E;J
z?({%`h??`cOHB`8AU2Te=aa$j+ONN=Kj7*7u8Tph2i|o$0z$xeHy|TUkg(!is>hr3
z8Yd9a)(3LN*v((l-%y*br;ebxDuB6aOF-EXQ0b(N4qB{S#IwI1ra$MY*&09|jOHrw
z3@y4XfV_gsK{?w4>O&Xtb_SGPz$<XzF!f2+MIGw2PXmZATn=y>0*KID4sbsUsChM3
z3$#IiJf@L-IYMvsXk$PTxo0o|)EEee6&@sX8Uu2L2T8*{AXj)I`I6WekSo08(302~
zzzW}+8aqJlu-|@mB(k%Q?05VOTw(`I5n6ymN&5pbKmm!8_6I^Q@}Wee*pBQE6y9|y
zi!0spAKJ#EAXNDP+sX9miUV#rRQ!Q}%*aCqDhC3{$d4ArVPQC8cO9jtJvB!hPY5XF
zk4GF&011pE0U73l1jdm77Vvyb>mUta1Tr|YMxh+h!q_8$l0Rb!zsRDZ0*?&vST9pZ
z8=!pq&jF=*{EU{lp=YnB>^*Pj|IMuiOT_RHfE7PGJ`EC9{2V9{6Fx{-@pAwZKJ6s~
z<kGc4_Qn|fzAm-FixA|}wLv*FAq0rpV1amf1riXoLA<<rgI+lYFb8S_gUU#|%~-vO
zQiFdTOK2J#7?jf><Nz};C`SfJzzhsxWKhfv5;6C{U}9uY#N5Q-G54ULjJb&;V(wRi
zB5laEM9lqaFx#0oWQ`O<uf7`W@_=kyu8Hyn2W6ZrrO=pzgIS&~b--Zr;9!>rFIB`O
z|JtvL#FYG6Fw2v8jv{>TwP2T;|ItKJ`}LrV)@6~%X%G387078131)wLX_3fj4-JYm
zx`U6L_RwJ2{}hRw_RwG#v00VyS0brB>{5KO8yJ3RD+)&&5mX;^{2A35ZC{uGf9^cm
z?LQpXP)7&l@y`H12{JmEa6E~Yn9)Ia(ok$Dy_mt?3FgeOADE;UD8YAv-U4eCf+jD2
zK|O{2d$PVJJtZh#Xn=|SnG(cc_%oM*XG~=ey`w);JT)lOi+ITlnW-eRTL6Ka#`eCW
z?@3P!$}A{eBNLZ|umM3~uxUE`e2RWeX1WVRDXHlsbAl{|pDhaJEU~Yesz0X$76tLL
zh7K<Bw{$jpf4ctXVmm0$bAkz7o1A?r8NuJhy~nPap-(S<FDSEgU_$6U5~>wKAQ!XT
znR?xoi-QUuHqazX7n4vPj6lw7X)x!bpvUrAxn6oXx-^JX=Tj(yC#sgQ<umoaq?ZL{
zh7(MvFAL&5^G#d^8Y|duX6d&SuW%XzsV2y*2qLn0iR|FHrg}DSmfp9xJ}BQgfeE4d
zAl^BBDTL5uAF_LA>jyF)I{kx$5rjUZCVMl8WeX=Ujs<g0+YijqV@BbzAPyw1p|Kyt
za-f|FDnHr%Z2fwr2LFl;HXgvhGeJ|_#Q=#?&II!Ve6WK=C!7fef0Bcp7;s9YI)iEz
z9|n>GE6xT>%P(aC=xng^YU^Z#8-QhPa)C0vK#hMHp<_&G`-vs`<zAy(FDpZT{1%y7
z;okIms+W7iiv%vc<%RoRJu{C#)%~xJ{qJor==}PY*QM9FL`igoOi1Bbw_cg2yFdL1
zu9N-mb*_^Czx!OU@EMN7R;<vQvO_EMtXI&!5A<fN;|F?)pzZrU&`Z@CRN853S`#N1
z$XrH{uZfcjWG(|FntF0UczS_2p+yX8YVDl@by|Tqp(S}}*(o^P!WSRO!U?UZ1$07-
zmdYS`&a49EhIn~~on5VWssSPPFn9zbW)%cQ2mlgbvkGJg01}hqtO6MV5XnP;Sp_l#
zkQ@pDW)&a=xRI9zh<OD{B7Q~Yw|{@S+cV|Qb?^3Aw@3ckoi}NwdG`u7XN}&f8Zu(R
z3GxMaUV&V2K*FYZ1#-aw$pNw8EDv*hO#Y2_(T92$>)}QhgO<-m7lW41#sV3;2l?{Z
zSRi9}kQCY!$k?4o5xX}QAa;M3b{RohVUOC2HtX$ktB<;+&@SU>f!xbL2&Eh?h>9&Y
zNLYHb09$T4iWKDA^8#_S0R%LU709CvAfb7zKpt%X3C&{#&e4V-Z5>V($fFHAaJ1o+
zYXWT`PPrAO4aBJec|Ze-06JBGqYbxWwn7&7Y(Y-n5Szb4zd3ZaK)!oNG8Bj13zQP^
z;sGQuK#SLOAmJ}R6<`x`J!T_hBIzvrA9m_Drq371_d{Sp=6nG<MaY1<z?MR$_yW3~
zc1Tbpzq?R?$>?T|1IubdtmIS7eYGLE5FjN8q1q672F?Q=bZ%XU4g6I9O>tdFzWD+d
zLUkc*-vkm`pihYX0HjQxkeu>ST?q9FA?&{pg+@V0TNuhYYX7l8f6*6M7(%Y;7W7I1
z)!k;_e5wDg+z!dH2qr3NhfJ}900~=dg1Vop;NcSX$XEJ<6-!(d8oo<HrpPB1@Zq~8
zgnZHvOwT9=#w=$?zS4(PEe}aY2NRYr4@pM{35ew(>7*c0>T+s|yEp=<m2AlY{ho@I
zA<?FQrLnOxl;kJ<i6o&Aj<wSY1{%$`hE;v7*Hy1^OQoT)CM3f`$N*wZNS>1g35Ycz
zIPI$xBNvc~>+N%2>j6*odKZI2%k?e>IsW=kfyi}02N>%^SmgK_%>wfLE%tA|!Eu?Y
zEiMKPfh{3<UL8Wf*b*vh!}rr5fw3iYc?Ujc70?LS&c+|otIM~CWS$dDsB90(JSRw~
zY!6`@(TiJ-LEXTt!}{|T4Q@BlDX0dwo9Gl&19j74(O`)58rkf_`uo+5uAy`Ws?qHx
zTIL%=^7v-~KLgcB4aN_XVqjwP!rnQePpjVVLeLqg{VoKZf!go(G@XIkA4;V7L{UIz
zpbo&F=?oMIw9)}NKF}R>2I@daP81-ac_8FW6a{n!>PU!B6gPlC_aAX>phHkcTpQ>R
z)RB;!DIg4_BO%Nb{3r}^@n=Fg{R-{acX~%9a3<sp@T)4wdt>2d4}GuSSA5nPYhc2?
z&(Z*)gUw!^l|Ik5f3MHToDa!&(O^R8Jhk=bLI`ASAshFDzB^M}DDtIHrIAuwh@1nq
zR0IXHUMgg79oGjHzf^b;i>8T}3V}uOqL2K%Zy~$!gx)#Rw@^l&;6kWxAy%(bbomC^
z<{^bSW9_$3=qEkFA%(bn^EDNLTrT2oHuaSLP4Un|McnQI6Usvik%)Rn2%)t`usNso
zsl_7-<<yAuErdoCVrtwhgh0N*p8rwbTKq<#4Ed0GC2k=`!+Ifv8jWF3oY6OA#uUma
z4arpqjVZ*Gc7oowg+khj!kiE7d(P^|^(HF{al>H}l+_T~T3@JijSu%^e#<7{iV}O~
zf^M<(L0p$-9^<jw@l-?<kcG|lh4LU4NEBROh=W*^umXwkQD0cpg-2yXBA$Q|^@UBY
z;dfa=G##yBH!H@~9oD#@G|#Oml*h3l1JE_p0;^)MyAUf(VNRd0C%zz-VH5u4joO<P
z<DI<V*+L_2t)(gyQWbt?{Q}0i+kY+;C$WeL*q;kCB7+GMus;{#%`({v61M(a*!nJ>
z&>)iE^8LB6{7$@jCQNA8hS|8FasM5)Vc7uSa<*&$kN~X>%LV`m(AuzU03t;L)P`jP
z6jH~%6lS+5M*9vRFnnHev8l+H!m=Ik6xc6?(GLCT%|<w+4GiZDw&xWXFMDbRhK($?
z3#uBXx(^B~U3s-Y0TQI>FOYy76qe?K1mqycT#zt#kYg^9!rVb*t^kMnt6`;!1gE!^
zAPws-YQr#Zj90@l7XlLKuZEEekxzmCYB+ig_Xa$b=&y#0I$Ph-9jQo28y?Pi2VJ|@
zBf6Fqhm9?T!^1{XtCqGA5!6l_9ahHKxe?<RPYwPR5gi_25*r=%iL5S2SUNh~O!O{D
zm@+zyn`e|l0Etj{bhyp9uy}Jy48&tl850(#q_~U-(Z+^xBJCbtI0Pn!m3aI{`OyZ}
zyU4h?94yhi5#9h3!*YcNiBczqF@=x^MX0aeW@n0w2mbGESA{zH?XZjkAOn@R!<go%
zy(2_T4vS$<6xti4QyQ(zlf&}P6rOTnEaqE$Xv`?acQ|LWy|jt3*&AFD#^9i%gKCtI
zZ#Ft@j3}>nu)qXXz2g`lfmKhAaUWN~!!_)oV&ndbHLeODrcPy}Vwh58`LWU{)%Ig{
zpx78!@v*Bzwf)$sEo4y4$5h*y6bVF$++@F-F)BQjn_MNT=O(9~5F)8C>iG$cgQAeu
z5XMWQK-O6ADQE~AadDfvi0ZjF%x_b70)eL6>p+48<leB%T!RGU-Y_!P2g%EdV5N3A
ztQ@tMl^KsKHTYLFIUYdouwx2H=p80g$gM!atqzA%N8whK79|GlpwuH_xmlGQG|iE)
z+^k9#fR2Q*S*5Ku6d~~g26245Cvz8@c$v|7J4mrb#zPqKLs)*U03>vOpoXVm1`@;U
zhp_xy0g-$n`yq_a6^y5MdqpIF*526MnCN-<tTTYX#Q-`RmN^`dDCBH7AvPKyNhypF
zL=-|VX3mD2iexFC%HeZ1-0V(k8TDlmEttR9n_3#zc&dMKOQBaYzl43_h&Y5$$}i#U
zRT7pW!(YPHoq3c}MAKnighwguK|r%EBDXUjp;;G^Q3^<C)<v8srHJCe{;b<o#!uJb
zf0)ugB4-MafbAcVAu&h*^^eFP1tfs_M-Zgk59ewU(gsCx-e5b+jXwkjMX*NlkhKZ<
z))2dMg%R-FJ|rT8MQ{N%BqD=FkboKzkvV6OXtN=a&=uS_h~ynJBvRPPI!aB}g!*-q
zJ-X6(#&g{$$6jzzmr)VfF(64QBJWm%L?NRhnAv90UM3dOrbKeqM?CSdUiP<HT9|E`
zZhG15c9v=PXlwLU3Z_JG+MIt!BSy8D9^oT|jc;#g71JZq(eVhSOpnL`0urT6k6?gc
z?NQYjSvt?&-rgACDWB&mk!kZHa>0TSl;%;N(Cir_pI*QQb~Jupy}+p)n5f)>h`cNW
z5(o<-C1SGy5(o<-Em~RAM6n>3+UZWl3{Uk^7lS-^X+)lAigC|f8VQQ`svt=zk}9?~
z($I>LU#?`@mB!}kl`aIi<x1BKa?6zwd1nbKfLIyncm;RM7`f$Y>6Rd%x!Q3{kkDN1
zxFtwvuD<A&F{<slDR4_q^*Xn3a>#X#LqY}+>l}v!35a#%kPo7N;~{NhBxg7qd$sXE
zU}FS#YU%1~oO*II)2obj<(r-E024r)BXT(g382jpEXQ<>I8H6SjXhpvTwSrvRiPf-
z7BR)mNytEDTLf>$D5nV>bm6CLQ<X8j{8LwlkUovbH+qnP&ZiMX*Ek>u6;Qj_JJm*~
z>RnEa!9<OBIW-0egk2H2-2q8D5zIAPMXBhqy)53@*j~OjBG386`OL95qKi2ZBy{#h
zkT#^_C2{Ja{VZ{faZUApw^Z6u?srS2uG$}wH};?cg#8gj<KK%?(NzZ-yT&+Peb9xV
z4dp?{)#ALX4n~3^qy!0wgOQf4tsevgc9ciihh2;l)kj?j%9S6D_?#x@*KQ)>gG(@+
zHkd~vxX{jL(Kt=!$L-TyF^fKU+{K`KH^-eR0Ya$B@koN-PX`9=IFCo#cjS{QNWzG8
zx|!~{(^K*IikqbCU_W|_y?&k1uKJW)fQbT5MdUTWIKPu~Dk84|f<ytQBDiEakcMTP
z_M_+RU#>G=^;DgAF=#`2-feE$ke-joZ^A$a80RCGwXm+>5ZI9Z!q(nkTvhQ)L>{1t
z^PT7~5t%mt36)>SFN9}dBU%?_ZEiF=R@X)4>>gL>5@cOeUV;RPQtP6{;`Sj(K-5Js
zlDE)B$~awu9A;0t(YRafJj}(QOOV5&a>j)aFos1F;u|9%fiW!F^fGIvff1PqX_KQl
zOYQcz7_HR8$x*BkZ&2?iFebIBQDqi;?sj8T4gM1`1o(iP8kN^^Kmu-R6xVSmh5(5e
zVrsN-R#aqRi9s=hHZ7{ojEXF*<UwzGRAyl%3t8A1QOd%uqBtf&Bh!v5x5gLPuiRmD
zQEEUqR?tYdqw@VIB!Ol}<yr+2K4V8i;?NM0JdUxWh2kiN<X}3mqwPc<Ua~k$=bNn2
zq75MNeiU~jU-e|}d9pkE?cK)kYA{65p5U|p`%!u11SD*FKUySmJRkw~eiXafwrJ;M
zNLvxjS<Pbi7;OS8qDCG+0Fp#2dsnhQ++#dkv(l*?m;hQCm5FYU09qMEqML#jkf_|s
zXt;)NM2JM?(Bmtk5pf7avbfUk|7$ftQzpr@`lx~r&17!6`}R!xc5OR}O5h3n9FJOx
zmIcj4<+KYDIQ3CE?ItmWdRMVO-)mf5v&v})FafbDDnk;GKv)%(?}I@CVO11aO?n>;
z67PdoMV<G-L<{>@MdkZo$-?{KRZ)5$yoquXI83!Mnlq-z6aOGLbA9(`p0eY=H&%Os
z8>4su$Ix3|erjnG`|dvDjp9vFnNtN5eYlBAKQ4q|+h+F8AB>af%~5%B97m5Jv^k2Q
z*@^>!+QQzu-zZOSiONIaI3q;dDDIV)a2Zr;E6aTVx0<&`Wwrw+d?2$miajp9+lNJ%
z`nN@u=Go&OHt#6%4-Y+H94-Tgzgnc{klz-?tHmLhi9n+rKab-3A9bvxyVb>>`Ji!|
zry3mb`42pY{O3{m`45mV;`6Bd{0EV!+~-kz{^MGX2B+A~I{nGGKD|3Cvo<)C1Bl&G
ztP@!-gE_vDz40fbthg~M^D#J71DQth+=Dn!4zu8J-`KnVWE@h`-?&Khg^+Iu={hci
ziTDuv^3TQ%=|fTZ4$iNbkU12^JGg&x8O*eY*^S+de-|Idup)m3x&@iTG$C!ks0WR?
z^rZboH{*7t^GR3A2dR@JC6s6~JsHIp_vp(f(4nfIjJCMS8ZSUFyZ&rH{g{ze(m%WH
zod=Mgqs^N08x1(PNlExwj~iV|E=1)wS-^zMg($9D(ya%-g8k1g=m0kNaU;yKPZ%wV
zK|1|M>7ZW-k8We&%XUbY6tVw%!uVZrZIQev04{`Ti?FOxCJx6dac!W8?R>)MT->|p
zA`%_G?p*{Vq_QD|t5|hK?D8j#yNl~wqyh-l5z@za<pL?(&Khh_e$u!lw|H=o{Fn{6
zkQ!Wss8hBlE^Ljm1Aj$(7LO{r*y@Fl8dZe$q_`4TxWhG?z4(l=IWxLQX(?Md4586Q
z<&{=H`r;6#@d-sa)7jHKjJ|;hMR=clFI4&As)@|=H{-ta#3I@AU_y0b5qh5P!|=mY
zli2frGb-<&R3tAKf(e;PMYvp;;4+}zE>aR%f99^cZ_PZ{^RE@XUg*WADFD!<f~VrT
z4M;AG*C}OO72YtJUHF^PEIqkMW(;vK3Nn+6kTJy3Dj;AmzQeA4*65Iar%1Xwn2>p=
z2(FF;s*u3|oWe#tYqUvEadBwWO(7gn7KYVS_T{rEYif~vmy*wi)zl)S0`R>J;9yuy
zW0yT=w9QO&n}mkdG-{F^I39{HS=&^U^SS-PbH;Wfu&Kz1(!~jlf9hxpd+^`J%@tdU
zG(PDQ6S`Z9!p*5;h(v|A6kYyX>jO+2pwT!D_O^c;^`7#EB8{i4hzq5LqA0(8O(c{W
ziaOm!H_<`j;VxGHqH$B@t|E=U&m<;siz3_sh=j_nq7JuM^D#^@b!hvFa=x&y`mfQ>
zQ?RcHp8;B#4=jE+wYG`<VvTXFUQydb<HweW4Yb-O`TQ0rkwB|$f<fA+E!Tq8d+l%g
z8U32vytj$`949&&N_(5g&vAl;(%vQ=Z>Qq~YAU4dZ;~@I#*Y)IDFEzmVkE_eFh$#l
z15Nmb@Ny97%L7ehzyK1m2b#zoAxNMeXo4LfW^*+~?RSt39B-7iJ?N^?N_en|%r-&>
zDhHb&sWhElc&5-&+Q}xk#<6$2(IU47|B4kA58xpuo5=68fdtISCNYtU0123rO|aHb
zzyuNj)5#`He{3RhdBhO8yi-kNE>E)1DyN$ump2s?9Q1(FJBDwFyrE{Uzu}I%?3dp*
zij{U?iFF(TD7JU(qV=>Z=^cah@6cvFh0&nB98(6x>=e!tcxu2vdx7Jq(;o8Wm<$8(
z6zVU>5C#aV=|;@UvFM<f2=nlqhge$wm^v^f!aT`?-YYQ~=1CU9ya6%iTZSnbbFX<~
zJWs-2pK558uf=4V1kYf_YcZK70SUC%VosVQMGZY7Cf@okpJr&CN5n360_{pi#AHkY
zNdS$A$utQ_0F8)YSISQ-rV*dU@ChPix`ES*(_-*zI<1(-S)bW4<=vQSEu_<mX?a?a
zc=iXgjrN{Sb7JyjwRna;nj6Da9ZH`G4$7Gq!v&v4YV|Y))r(`wa=X=B<By&i{41Ip
z4`AQom<;(qLT_<Qo^1e$=3X2NFPF_t3?5Z4iK)wEb4wod-glZ?ve4X1d2|0HY{0~`
zI;O0PskZj6@efZ82*(QY_|-8PRj0YfuZ|(ArcMV5D^|xs>n>U$;%aS8O#S$x6;59K
z!<ZK25i04ySQz$E4AU7M0+cND-rAU!*OEdJ@X&alFk^vH_RuFzH-d?7{KV--kTCF*
zm^}Rp5~!cV5N}ar3=)CLC$W-SWg$GW<PzCitQ0Q;)J8U7fl*wu(Jh0v^BdhVXy9y&
z$<HsP`F4I|OrGfmi840ElE0B<@Y9Th8cW@1#d#T6XEw)hcqA`#UytV=%RJiS@6U);
z3>M-A6+N`9`-R0c=r+gXn`S&l(VJrh;`}&B0B?>Vc9p^?dUGsuy)2rB9GSj3R&t%y
zi5CrOE9<?`xboqxZuKZ{u+=SthSb)WJSUmvLuzXbA*d(=r^fKKxzmJRS;p2_i(B~H
zIn)8&wv)vc85<tj=@vr6ZKvCYG~9MN!wo8^$j%s6K2Zpr1m77ey-ikxf8dl$l>N?1
z^NL{oY+%>hM&_Xgw+uSS(cqRrsfUJ`{60yVryd$&Sjj~h_+S&BW}S-g&o!ZphFIw>
zbeR<OfB@D%+o-7C<(5IIiCr<dcZLkg*cD4Spp<*q6+_7TE`laNAm-h}%HJ~<JhaD!
zpqJr$Tr=rq_?}ouoF;?{Aoj!%=m|4TSg|LDTL)rXm~yD>iM70&zt>Mwc48m9X0cIy
z-9EPr3uf+%$pi;vP{zJk(<>z?B`5a9sybUM=t5|kBI<8r%AezNy{zjlEoJXsY>ZVN
z21~415CGh_F`0D$3Ak@#^3zKo0rzdJLYzAQ36sB#wS8Ec?1RZ6jNNZz?H;nep`|fR
zFWJx8pDi{1FZa*q+)^mFaV{pe%Md~-=VJ0}Mj%njIhxx=!{niqbFu6lvXneo%DGtS
z?bdcNks*Aqi`$bvFz)r#)FCA!H7Wg37x#&6c$%j_>f&jUT>^<>>f$oH1QNy6#XCJB
zrfiV>z*b%Sif;UR5edlaMRoCq9_AU;H0=rc#xMC~(o;Ryh1WIzRd|B3@kreH0*Na2
zjmzZ=B+Bj^M-@L86~KOBP+TdCf1)tYKBJ?3vfe21+z*yhl>l66P+TrzX@$NcH7G6@
zF_3^86vrY)kx_9-do7-`FfJmaVo1IgM}C#3%8My78XD)3QF{<T9g0jEZ!eIL9U7OB
z5lEm8jUzJpngWetnsMK<tJfG$Div=b!6%hyrFbiDh)>Bu2ug3o3&YkPN~smoTt3m>
z_L1?0r(&Y3L|7ADC7Qh_lF}qm637|$zK@NjO7#q<4T^cPb%xUhAb~L>9unzskfanx
zY)&W0iYdmQ9T%@$K%g^bJDmX%nzNnG013_6)EO6OEEm&4vtY`QPYlof3*5qK?p)v&
zPIKo1rvsn@hy_juWbld1c+PIw0U1czalEzU9gv|8SRy+B1W=ba9RL!tOPme>3DhOj
z0Th~MsLhtf*`V=8vJ(hsE_F4j7na6ljEAStTpCA=caHokLlJ6yTv==9Z8HAlslmU(
zukZjc^-i@w0;WDLS3Hn_sgGmDqh%i?mi_v8a&0`9r(lTzfmLxe!pA1jVg^_pM|et~
zPM0j)B*BZ<xV*R9;UX8>AI9-vi2o5qUwsr;?-Ai?1}115<I1+U3{Sy;$>0d51qqWk
z#$|X45||s~GCTzdlQ+hr+h8(%YMU55UfL8_x5h<yDtXY`9GBs#WFcPK5~uK#KB5X;
zM9OMIT=|@RzSY=Sga4dXB>!rN%lQm)FsUJ4B!Ur;fNqG(I3FZTYKS-e9466JPYe;~
ze-@W<zGR`zc2PrqOlJy8u;Ys7{1ErVmw52jzGn~CX1lRGv@ed!gtx=G5{f9lj4R)a
z++o~SgMUQ(fDL25jLUcuB#ikoF5^j%Fy_m6_#4?i#Nh4oRa`wN+eh-Ccfe^M$wK>l
z&D#eD5McnlY>q46$JIF7u*0~v283e-x#!`y3@0H8u)}c~PJ)CHhvT8|FB&1k$s=*~
z*hM3paPnwehLfZx!pU#rGMtnw^u~8_4M+QEI?UqUeLUx^9F18Raw2XNi_w^+(Rf;n
z#>+v#vraokgM{p9XEcI@(WhxN(zT#0jg&L2@25tqo6k7&8koe5^E*ynl7Y$@YHTv3
zG^Cx2=L|}SdASsl=Pu66rDVtjIW2&IAr~A&KtlF{V+cr~UT~&`QZl4AA*KZo(5y|!
zb_dBH%4q>4G;0&i)~}SNg?<TTpq>28XzHoKzoNhJ0DAora!`SUUcZDKR3On`{SwiE
z2{EXM!JX#iggPK029@MNuYW=gD#?P=ypo_nMQu_R(gr7ThVwQl%2mry?BIkmSC&zu
z3`vM>JP1^6h+`s1$PP)!#R?>f8j?Wo&}UA|$o^q$^5;g|_QMkLRU4SZP3Ynd7f7fK
zOW=hC<(1W@A#GeD$4+?Sb;`&$tgxNlZ7lR8$0hKZnO-zDC2J-mlyJON=DsJp<Lvu$
zY{&_3gsFRsSOp%4i~A5mDH9U%;yy@}G9dvUc!Q?mrexU^`<6XM!c#RRA!iV9;j>c`
z@_;8ul1j)A5`zTBlmtFVOe4K1t*O)5#J$FyRnuJrn#rdpWP|`2AWTol)e$5RrYEpE
zUc(VU&0>{b7+tGpxd=3|&T<iGVx5(cuN9l}iFH;25ihN;O=*3dn-B*tLBRUC2^s8w
zgy!6Y40b@Gw7CgqeQipHE=q`lmmmPN$hCo%*+s4mw9GC_$T$bWKw6YQoHK|{1~m(5
zn-e*8N&Bk(#sF`@<^-lfzQ{JCuG%IXhyCpvL+h~3@f$n><Tl4|Kmu|b`OR+Xo@Qt^
zZC66solxWJ*`3SHTkRjeF?^mH@Wj}F1ORp=<Y^_40N9m~M`u7{Z0t&;c4KVN-k%sW
zHq_4(^5~4@pbtM!$fGlo1)$FpI68xr81x{pH-TRtD9zmSTsPMHu+g#|XvYZZ-n|L=
zejCEj-J8Hd{V>-BwIAIPzmxs<1G6bpju@TF!EltRXZI)Mi|%H;XZI)YqMI(BHlv<B
zz#czhbSOWNkWn6(P&ts0Cqh7?gaZjo;P}`NRM2VPu(d~wE82dOkms$zgvvLGq&Ub1
z5-Q&$@IrVd1%}PAdDOm7D5vbUM{x?G2LC$N(T?$ZXYPR<^uBlI9*}6??-S8ea_%7p
zpL>2ts3+yzBYDs}?#w-sg}LVhpL^PK6R@{DlTb?H%`)u4?~FFpAjFE^Ore+CXA<(Z
z0!Y|&CJ_}Em_Y*jOaj>k8Vk*6|9DQ01rX3Y=ZpoA&^+gi1(47@cX2E<qkUuVq{v$Z
zzc;k%-pPw5(C)E!QVwWH0;qRV4h4_^>Yc<;_#N``xMbTmnez&}`+MWoVBaLJRb`QU
z#x+w++etR(d!sbnFDWzT;KH@~C6O^lSP3EEzRbQSnU|9?V-6-{UQWtPH@`93pSAtL
zXja@mDTX-|$wm7o;rS0>FkTkY1|@Swu;+g;?hgz~8ZmnHq+UiQ3}$<NFs`o}>{Ja*
zRBf<RHIOi2a8iD(6(p)QIEj}5G?iaQ_6=bV9XHxm4RH}@z8sSDiL+vmA)#bkL|h<&
zFeHhH>w1m=JBPFN$Bi4Shr0;mw8N9~u+3$Bz8szmiVO=#APgrPZbsdjhqO`2oF(kG
z6UI%!QAvz~PbeU4PL&(YrkpS~R*iOm!36MVr*a@++UTU5h(Q8)G&StsIRYMzXY)=P
z|EM1CBG4i}-bJ9wjZey;yg9Gj_$0<UzoXrpdSR;F{gm;5r+jKs4p?xZG?lu6Hqjta
z?9?RQN_6GLf||jOo;I$ln&B2p^ZyK|MVgEKRWc~H;UGyTiTVF`9D(*%>@PnWw|AZG
zB2W@*wu?ZM#%vdX@3RO2S5aURWalN7@^}?{{Rg87D?DRVb^$|-Ks-hd&rABmkOK*<
zdC63BSs$8B<|SLTwmuU*f!SnHQd!LE&KM0f_|HM1Y}6vRDQRw5<ak<hKDR8QUZ(vG
zNX#vZl4XmNA~Gk22r%uWypbzeFzvl0?vmaD=V%eqmL+pmCq41%%)LFkJ<+`@`|PZ7
z&3(&~xHl6+O<RzgtVk*aabKou&z{|TW$wM}CSe~Q!9F|_b00|9w<0Nn8jz^viX;{%
zycPov9<F3Pelk*3E1epG351nS4MCES<18S7u#%hw69N$6E34SrpNz6=SGfq(6RTVV
zDrQwuW>%pBgjGq*bzjgnq-99^D4DYtwY{3{JA@aZ*Pb&zD)=broW*NNmEDjO2?h{=
z-r!UZB%n7q)dLCW4OG41v?R2of_K=5&Kn~=6+2uds?m<5jA0=Jr5#Dcur&9!q#89O
zMH~VG9n&BuD0&9XhNO%`Kti)2>BJ!|iQFUR-s?fYq4zj#0uqMraoPkVkoGu}FG#M6
z$@gU)ZPE%WQZi@G!Yj>wxdq=R@u6xSg|wokI3b$iDiA<C;nWHw5KlNw0TPHOs43p1
z3`i@o{O2Uj%}!ET?SHi2vTs%Mx@7CjKc4FK<p29idvr6C<qtEW8ZKed|K-DsxX*I#
zWA=EQ?HX#tYxuA2iQAdDd-?zTULU{1>HHX9H@YN>yPW*z`*20{8TzR~`dz?(bbIbG
z`T@dj&pbv&W#mr?c6+AhKe|8Hle6Sc_F0*3fBh?G^u+J`Wty{XNwbK}S*oY}Eh<on
z8}7XKrn_#q{wh}GHLvhkEYsYGu<94JCcj7Z(UGXXI1~qxH-|hZ3=)m?b5b4@28s3e
z=cGI+Or*H+ki<dZWi&gqA}6U!u`^zC`Jd}ja&7<@JyMsF3oJ+!QkRl<Cqbf+x)fGP
znm|EPdN3t_*^Ee$>8MNLm(6hKpGtv3{}hYr=CP{&ZYgxAvwun+422L%>7SCnYzC4m
z;g`+uCKeEI!hx)-VcvAzKo^0c>wzhm#)J$I2By;dBnYVhVPFa;LAKH$YDJYAnNnKB
zSLL!E|1necVZ)r~sRm0-IS}9y7pqMZ>&TQm&W5Le8=1o47W@hi!J+JNc7tVp;He(x
zV$ifY&TTrHR>!5}3I!ctj7wqCkqv`5YckuBXMSHb*@d78YjR2+pl-z@tjVdYNG*c|
z#N^cF?fEEgMU6j|dGgJYim55N%>WanPEE<-4H7C-Q_k>iMWNN~DR<<Xo-VW9QYomK
z?HW!&)$EiEs-Oah*(r?cn=q_fhqQN7IVVz{I9qAr0P@=bvu)wKDV)oHiM9%@F}yW9
zr7X3-37Cqf2LFl{#sd^$JB5HmA$Cfhf&z&`>=fSR(4qqpi;kVjEKTKFVSLqy7;r86
zfX#a;_5GBWC&w;wp}RPR4RsjFwTn!IwMzmi+EZV}4MTY=*b4<_Rn-dDC>l~LQZn9Y
z&4<*Al>7n{NC2-$AwGDJBj9jXJ^Q}E{8LT6i$Jbb?^cV(OMOa4ZLRrusZU`orNdny
zak#5KRrZ?r*ay*AN?}5Ms_A3=zO`iGa94fm@xdNCI|MbDu_mRoi+9M}fnO!X7W<Qs
zd1Vz?PTSIOT9cB2ALL=gnpC`;k5Z6azfD{I1)SD2oYu0gh32(g*18B3q^xxtf`-%D
zlnisA0)(|G1Sxb)4F=)ktQ%6wR<^3p+*E`A96M+fZEzcdM$v|p{8Br#fU+Tl&5r0}
z`U1m-RLiXw`<ULQ@jl*|Qny^}W66c?Cby3z6Mein$osfX7>0J($x0$-pQ@d%Rs7|f
zYZZU_=D2rj@$xN&mv3~oxHTP3`Hbz0nAcQ&<|5Fr{LF0~+W35y3W`@KP=RfqrSNL)
zQI3FN*~tDFHM>_gx(KuZYD~#gMr%Gw8&hTCtqVvXG^X&IQ)_5`X-%W_kbNO)e&o6C
zkc&abb`QB2G)xbr<b7A@0OL>!_g%jg7<e&uJf#%J_vA9qLA}sU#LS(Z&R{v6MJITV
zr{v4k*8C;e@s#}N5lFxtPbJgVn{n)=@a2bDX?!`VGGWI2p;>9KNpA_g_&fvVhO|<|
zZ+^3y=BAbg$$!{`9%6}^okmnr%4K2i95$)B*)%-|@3Y7`AwzqrIcco%&A1Gxx$Nua
zX7lu1yupz&v{cPaBU^MEmw{#TSnC$%9qD;^0VQSVG}F8^Hs1mVPW~=?vxV6_^KM$4
zI7V4?n(5s%-l!a)k1&;ov~}s6efItq=2vQ9T^f-o?e)v4PM@$H6=sL>Pw<M94<ayO
z{U>P|go1<-pOD$KX)dQxzln9KG&`1Wa#d)7-sGy#Y_f?|=pzc{RHv=%%}TSne5<QM
zKwDiE8u?pE1&8gR0%`|S+n8O-cepAv*mt-pG}w2L3b}JR4fY21Y#Z~M@&;FhMt4Kn
z6pjEHs5GSg`PTDX1#YpMHMTKdsMzhQ&`{o;mf4YVK9qN-ksTRI<F1?*#4p%OZO!48
zU${Cn(7s5^7!@)o<_q$MaTZ#?BBY&6=S;G1Y-gsu!INpk%Byi+POYHkpJ?~$WPaGP
z{ltu1*T4nX#7s<FQ346Di5aZOtMM%twGt;$GC5zCc;XB3%dy2~q22otvz5|xc82fu
za@9(lRe3j~EXt_#1z#Ps__7x9*p|o4uiMYh;FSv{r^F-l&Vr2E^%4#WTu7V=K3G{v
zR&KP9bT=n?%Qt4Emw*c^H)f=lfP~V<3_1g+{Gfw}TiE-5F)JV0l98EFFo~OyR~<k?
zWlIKE9Vo&AiP>aJCMdqdMI?U#yCqX_6@LLMIsCJjnNC;ma}Jf{T07XSe>JZx-{G1@
zrSHhdS00c-IXf~KQ(d`fpc>e_e>JbWt|235h)N#sH)Lc`1QG}hnUL5$gCv~{R!6$v
z3{&B1jTxnNoOxK{88gZ5dD`q(1&(ktJf|rzBO^ADKx@pT#mNegKx@q4!fr1P1}EId
zqR*JmSM75VX!pC%MIfKtmr1viO-0MgzD$RX{9|*K<dR>pwa=KHtG;p(Xes#0tr2<X
zR~Z@ILInt4WyD7)P$4V@2idhf%p0o?x(Ia2;-HH_OTod6Ok_X>2nRE`jzpKDDk(xc
z%vSd>e_wsrMWA1kJ?tV-z;-wzGs;i_!r=^lT53I=6{w`8;79wuznQ<wt^U!)por~9
z7lW39A6+YGDfp4Bc!idNN;)HP!QR)?9O&tM!Ns8Y|ALD_ha@hzcF_EPf$Vsf4oOtf
zA&FN??CF0u=PT8(lw9mo`emzEN-nwx9gTRUBqUC<KnWnPl;9NYE5b!^@L@1}^96HY
z)nFHb|F((?!GBw&BqV~DN`CHPa7mkX{3b~yok<?Ty8Y9<s_PIJfsQl`DUp|MAOj<Y
zlr#}hGe{UQqy!5i#etP{I$?N;a#g%F8~1`4XQ%&ZrmDbjyp+PR;UzMZf;6y(m&Dsk
zAEP4*!%I3{Y5kF7;e^5{cKg4~hpI-o2y`l8lv^J<l`yI#Byu#B{8YlIl2+yXqa2lV
z-1#kb=wIeNRd2ZnK_I;4BGB(zy;UMNBT#`2Z<XL~4J|#DbQXFn`{%#Sj#Xn_1bmuB
z9qS^{uTzaJk-;`pfH1ZMzpzC=rdUbmq$jW=|2ErKO>hzDSE(kr2y}gVLWw+01Qj4m
zD9L24XE_4SP)}wL{>SWDHQ7Zd1j1w&p%4g@-C7g^VKUXCJ4e9z>S@e+(R`w6nu`!d
zUrZ~J`Q}O`41{SV;=C@*4g+CYNo8B>ZjOMT)R@U;y=dNBHPc0iz=oNw4G|#BbZZd-
z!c3|K<=!e4`~t@u*7?8Yt<`f}geVZ^xCl`o%qfu}EmVLorv#_rUl$Hugx@$}AN|)H
zT0P%|C<4TM7orFd^GoCwp;9RV#Qc&hKK~&GS`&P<#U5E>PE)FvyBJM?vAjeEYn4h9
zU@R{w5H~470%Lgz&b0FsY^8!<Fki*~Q)h1MvdV?Pxkq(Xi9E#w89=Nmk$0y+0%BDO
z?oKVmehZC(yNC@X$}W4rOXk(yZur+3AaPjI;MOJ%n1&L$S%ey38cMKPq!=G0V*G}Z
zvRx%2c}NVg<N2%vpN6MoRi%=^#E(x0;cF$V%PXdKd1HxO^zjJbjU{q33liXsCD_b1
ziq=lzjZFy-2yJ9{er{gD=DlK0yao)%(j+Y1?^>D!*nZd2B*6BQr3>iOsBJ>p4<$Lh
zv-Z#dX1m<r4<&eA{W0xm+t5n?qrLrA^A=C%A02RT(V9Oxz6lcGKbAyAVgw|>e=I>l
zdpKpT+R)lto3;P+ni)|#*Jh=KV8g=NteibTaxr;R5+p!svq;#Vr5L9z-U?@PM%r_S
zm@g=S!C6E$_-LNmmh2nCIt@1;DIb!R@0q{^)R1ga<f%adYDg9vxJS4O9*$ri4mTg`
zJi;-iEjMO_V+=?V%F5LqBoIbqvDy!$jAy%$_GUI`B71U#IUw+67Tf;^0Njpj8O=N+
z%|BL*&dQ(&OdyTU%E$vGkVa<_dGH@MZ%1u2fejpKep)fX)uGZSWaYOOAOoEVStPd}
zM&Xx-w8`0=<?MB4J`|cvh0`o_ISSXNW|dhZN11=C!9OB$2OCgRo#H_PYAO{^9tsj3
zIyD=fl@+h;iNRl;P0Ok?@#!@>j3Rl^o1T@g?IjEQ&ly=tG0;SMIn`ut7QgRRmSM+6
znHA+A93!YcbF=d703-o6H;c0a^e*Od3fSheo8K^Rd~`na`C0=eROV;pCz?S*Wqwwk
zL<Nc1Vt%&y-8@1ik_U$Kvn}r8fuZD3U^qW}`yG6!T}}{oR-FF=0S~sba;$+waduXY
zHIQ7^NgQ2H(cQ8sUEef44=i(B22A+xGRI{=0%BQK&IKR=u`G)bhC>Zrd_U`hY|e*S
z@ufprkUq$IV|*8h?_(h!pH-TRUE~LEVHXKf+#<q5w9ZPZ__f&m;lo%ow|(`Nd3|~n
zZZA<=5fd`2vL#u%BLWiC8g}Do^XAN&th~hrCUI#vjicK-_(IOQY|eHzceFV+urBN6
zpF;MA$dvW$Ph-s5^!lv4z5*sx*OT+(YpIZd2^-kCG3FoA8?th<3npYXWU;-$5Q7Y;
zP3+mR=40tivW<yJ+$>%W-oRzhK3mv{vF2~mTe9*cV~AhN*^<T7f$tSV1?|3#{b8JW
zZOJwlhhK~%9Q<s%qP7odd$KwGO6~W@nO-Hhho%OeY;RAs*~d0dFeg^*b9@m@*uO6;
zHz^=t#=a~zDIZa^*q&;4$R0n@{Mb`{$mwcu;Vp-<axDf)QdwM>q-_dFU>wTg_i0wp
z&D-`=&-3;>Z<}4!>hmrJ#pLI+at8n*V4Tm&-+%`RjPqHn=d>)eC+ZjBtE}@hQ>*;N
zaaBBm;xCS?g5;u(tG1^m>s!iSA72lGQ*y=y36JetDra1fK<Zm6Jr*R8`j*0DU!r#H
z5Yk>N%~@#Aoo*^h!E2>PiD=di)T~2G`Rg3^&@5A{7+NX^IvxRWXsK*mkU$(-ipJ&l
zQaVtTN83YZnJty7(WTNVaM3WMOJzD7BuSOZ?<9Z(#^_R<+`=tEwF9;7cy?xv`S0rS
zE&?^}_)>W=8!|u`Uz!lRWspD^Uy9xGDO!#?5IMu1JJ<XNj*_|<G$G6=mB~;D0b@pK
zP)tW4NvRZ@BkG<G)X1|-#j5?^`RJb6rE(_0BPh-;l`{!QD9$c*x~BsrOc%)R0Rfx^
zt_hStT;OyMo&srs(>)-8w1Bz?>%XFQ3~5VBb2hT?7nr*Xmz2`yJ18vZh~Ckbl`8dY
z??Q7>4gM2zF!(@QRx0OUkU(2jD$j3$#6qyFG+JLO76M}Mg<yH9y0TO(1d<266{T_^
zkSr_&AC%HUK(S~?YW+2(${q0=GVJgo^Y-o_L{Nf9sNou?h9J49jLbm-drhgl(f|^Z
z{F>6t?R*&`QoLVTQ(AJHwOv#e-mtC|$2Hb?*!cHwtmPlq<09=&+Z<I6wo`L5XkDrN
zbVo<-4(m$s_L4pf*pa+p1AFT|^PbKdTsz4bHaIQ`86a#ZmEX(&Njjw+J6X%=mV751
zmn_YhXqPWGtJQ)pOL13^&p(}LpnNR`N+%Gg`qz$8AOZQcGg3eT@@pC?jTClug2~#q
zrOGk;cgs!O1;W3gGI#*JZ%gG-BaqPhwp1Q90*P+?wlsAN-ALISVo*1#-<8UvMv{Ye
z`>s?THIgg<eOHR3M!4k+JqR2x#ZjXaKWfzc1GB6gv||Ld=<!l{)Cj`RJzk2JJAdW6
zpiZ-YeqcURe%e)`COlm#Q)r!d6P_+b3XOhaq!W#&vn;&QZ1Kq1Qu#GiFrjkR8G;~z
zdzOYEO}ZfA9cN1uH_D3AiCJtX&z2@{;2{7B$iw+(ORv3-Z=gHT=sVBGtu(LdeBSA7
zFp29pB}f!|zEp1ZK%&_5rO0o;OfJ`nrkdI^R#b2HudXeVjtwp_YRlxz3KAH#Wg(H?
z0SS!SGNgAX6V{1RD|KaTcfDEBxz2^4+)AAbLAjN>vXI#1KnD<YWtavh(mK_N0-yn9
z_HS32lRRw)lwIr@%BKt{lUYYdL2E!6mSujzsuS`l+R!qE*~v8~PFUezr$;G=GPF$2
z4v>T1(6VrphlwEJRzu5*Secj|h{0!vVP)#bGBG<y9`uHn$=N}&FguJWquGI`&Q6q$
zd9#e)k6<@`WF{&>h#L`j1S8%olT#;1fW2AfOr4!52{XQouWWw?0hbx?HXdbS#=DJ2
znV9iqa%F=skj9tESPWm;d%G-WZkdS1Xk-3%nf#V(Ar0BdWs3NgE6e{Fu^344DOWti
zsF+-anFHTG_2QFvIDyI9eQf?NJq0Q}76TJ9Q_94d7|4K{#>RYX-kzRTCSx%$iCczP
z?0${|<7O~xo%vvTMwyK13V9$jqYN<}&ei}2wVlOYS_hn2W%4#Un82A;hF41XXb5D`
z1asK;>&#A>Ib||_1QRlI$`C)!#YWGIFYB!=%h_T7X1!UN8(K;Arfb^x9$rYTr+Rn$
zUcapjB<coQR2(Eg>Z#&%?LABtU(J5nXm&}jE|W*dz=X`|G7L{7{~!bEL-vPF=I_%V
zI+X&GxKyb-xeO}4_W!Hu+~cGwt~@@|=^5!tTtg!WgLWhK?e2ST1A>AxFvBo_iW*kY
zm`~nWVzNffW{LSDeoS;2M!`5E5d=#dBA^mnmN8k;G;vHK2#7F|w}>D(ATmC{2kQiR
zx!+S&*UtXezjIHWsyeT#zE!tMcWzGHklGL_=UmhA4WgV0hKG)C)OA}Dm!~#n+=toc
znvQSG5R)=XJXbp2sTXfaj8AoD+)NT8b#-Q#NirzGL)gCh@YckQsaG>@VhatHS2Ij(
zc>@9qVYx;BVr$}SsVyZQ`7V2l@DRH25O&-2n_CmZQrn#03K5=d8Imw7C_r9X?$E)u
z#K=KAO6rlr4t9uo{v`8njsx72DSJmZZc99u+>>E<o|u8N`dDWmIIJ0fXc}ym+T<xR
z_DZ+q^z*)AhJAX~_QW-*eNkH=!n04>a+l!&b?FOtBpOp)kvTbtPpD$f2E&6H4(h+|
zNK8l_jMT@8d+;0-^|8O0x-i2bo!*(4GU!moeWDK$o<o_z7pWsMBdJbSzMCm~KtH%M
z@j>r*Gt5ZLFjy^}`Y2<!Yy&XXM^WAZ(ut2UZo&wpEgxkV2IXyKwe;|q{?0B|t&c^a
z4iO2*qEH74Q^xI00wUp<^i5K2we++{Z{L*|R@YOKAkNT}am$hLAfYFdsWt-(5D7gQ
z_FtG2fT{(aDb~N9c%XdPnT#8ppi<~e#?23b!X@TiC!<8Q=&RY&CwC{-*EM@?lz>Xb
z&7OO`3PeV;S7qm^Kx8y~%u^*%R*P59^z1e!03~O7E>i+2In#5Q5=hCJUX&@TrGKrS
z$&^<CXiICU4Kh--dTylRDUw<}mnnfrYW2vJGh}L0L#p)3)_CPr*9_8Ao~;;Ad}?pv
z;Fo$o=|%qrYQ(zBJZoJ5!k2k&Q~@G<ndhtvMEEif>&niS8d3XleQQ_Zsv*luMZ}!T
zJ@>i<9*QjYcwbR(ieS!m{Z?0^VO)FEqZ+emr#<Qs5DD#`n^Xdk(C#s*{FBVAYJin1
zz1XVa)B}l;<&FHbLm&?*x6*S%Adqq^JvTuHG6b&l`mOTp5GVvQ1U~D<i=G_<9gT9&
zd2R@FB!<90dC?G9BhJy`*&(p!!OFfPp<ppcb|3`Ol#a-}Kty(YVcr_?jMdh>lK@Ct
zT~dZjW>%M!A&#;-GB3<XS}o>fi*S5&vT~hQwioNx57Hk$S20j`97+^=uk(6cWJ7nf
z7<Yp+E&$ORB7Ff7y&*C#5YZdNxU!BqT8z-C*T0jvV@PMIh#0ribH_u$Ly=C8uPtP~
zXtc!YW_{b?#5aa)_S~yHh!olExg)xP6xr-C4I=YX1hh>bJ)9UnbX%zwG2}MS9Xkq-
zFnMHf39Hef{GBeW0O);Zq<0`CcSd>#QgY`PdLJ!%-{bTSK+v8@??Cg=g%uD<dm_C9
zk+etj{yp?QCRw@PE1R1wue#Rgz0bqNiZAQ0yqBoyz2EDVwYnc8x<BA_4?z5ZsEa_v
zABc1hMEn8KeLxq-h{_J>%=?MLkVB;+qWeQpV8KI?LlRi*Dxe6u@78y{pSW&lcd3X7
z>W<6>4@J7gT$|-x{TP8g#gp$Rw#MpuB1J%@r9F`Y0+G?<x!E*O3V94+?@2U{5o??-
zCO%C3w0z>}k_>rIak?Z!%yQau%Z!vk#%YhC$wc%R%u?B$jop`xS1r|pcK0gkX&)!<
zY=mSZ8wScZXI*3iDc_uRkqsoWo3s7y%i72mf{E;Vvhi728`+LVxqGuNvK@)Yo|%mz
zdyFLBmTW1q_1&NFasY}AY@XASmaNO$KqR(gqr5#vW*~F2_T3Et-OS0lu>*)s=473N
z0g*H(>+&`bNprF|*dZB;Ym=4pvt|FSKRT9pyZ8KTuR+$QYQ?A8vi8-@^iLC&L)s!G
z@d$x!S(mGU2yDyZQsN)A;t7xGm7gZAt9>kL5=5HxSkxq-FlF5V{6Hi;mSrX)tA(}V
zVM}y<PvZM^OG*+%VN0^^Q+0Tduq5l*wM!rpmSo+Izgj_0X6=9opyZR0Vu6%=GEywi
z@J5QQ6*pV%6bmrODHcdCmX~@V&bB;KEKiZNTol{hAH~)Yy4kYNivNB*QTR&l{n==e
zQ)i;pX?ARdsvLSC(kzdVcp%a&5Qzswvzz3r!8+;l3&q<j)Zfn?{zA@q3REHI1_WkO
z0;JFjIX?F?d!*{nX64!(ce+liQfoP-Bj<db2b5czbG{Cw+}fP;bs)aJHrMZ!ob`1f
z7++tPi*LwTUw1Uht<O1McO-oM<(&BXqCTeKjHE|$u@7_c;!19{OiTsX_dInb2^`5e
zX9d!zBRS`+K!hL3@i#ygA%HaMNbaH!X_PED2!Tdn-=jIVOjaib{Df=I<xqbB&ps)s
zN-XwC&IJ`uk^V_8vVEOo?c+HcQ~(4WFSS#$_VH3XB~ctNwNnzs@f@~)UxI3Evhq}p
z&sl2o>b>5la?zgdv10lec@tD40Z5#Ycjf>haYo)n6%dIt^4Q*dK0H>8H7l>r3e@XE
zXO#+x?Pui^_8J+OC^Re2LHw;Uw;U^x)S}N0)$E}ye0*RW1R`Zx@@JV1VZuY1mOLB6
zWY8NcXf_KBqCNoXo1J%_2BhTdyi*_0@J8wzE1I8|x9S5J<jf4Dv-9%K%s?c~%R4gz
zku)!l`X1+esCa#{@{xSmv&9>Ss0+(`Ka!6=xUCocEwcI>13=`WNEJXtE{gOAMC2mT
z-ydZ7sHfAFOY^bi`FPc1lKP+06&I@+jgV~Whk^1-^DZ2KlwX>6;Q++*mgf5{&)aYi
zf(eJ;=i~pCx8dMulv|c};owMw!&CVv_1BA4+VeK`R}NPLhXHKX=Mjx)k2DNKSbILw
zaJ|5lR>KnjXn1AbX&8t)Rz?~IB57r$VW26BhUIgsammVJzHFgx9ihJE74sy0Ij3kG
zd%rsJvA^Zxa!JQoV7vEAXqrE)t0ujWk6&qCqS;6E<1hL6gnyz?$zO#MiCdG8tw-Fi
zB54>wNSZAfcV6|<|0`==3gqMUC23-Tb$RYEkECtP$6iGmFLYhwNNqyXf4@|1Z`_o3
z8`DhVM9H1`_-!R|qP)N7xzIThw>cl%jySpT(G(#`Ig-2(wIr0dCGYNcv=roS&AXc<
zEd{yT^6?Ah)D)}4*YdG95PWMSm@of@q{od?w~XACkB==iO8ytWo_9w*8F3N{yQNC=
zmw24G{66dQmjbZyzQ|>PG;d$z@<5926PMp4E<a9u=}@u#GBvq;$e~gp@$*Ab%7BSN
zha_dl3AE!xZQVLoqehSDjxq*BigZUA14xl>$rzu@7Qb=8$|gV7>=z%ZQKu`W^4lhN
zp3vSV-$gwTIZeKcdLVL|e3#sTgjkb*QL}H8yAW)0pW&0-@0D#{<0Qw-Eq+|D&iYc_
z+)_P~=I8ouMFuA7nd^Vm1{IKc=K4%8B*Tr9EI;2j8BSk2K~)Z$@4N8h5e4V_F2MmQ
zINy)LZ=6g)+I*Yf05qko)CBpn+*azUOyAl{U6tuun@{*HJ)8JzAkh4>gT>Voxo@^_
zhu^D@YL<7k4Px!peynfR|LS4WRkpbJ8ujh+p-^m+;yGeh`w4qq3J|fYeL4C>@_mEY
zX`RkbR!fJjE0qz0uk+piWOyjE&SyG*zpYXNrFe2OL&oq<s>X{ekR+ly{eEWMSRjQu
z#Z((iMZH)$+Umy+=vCLMm(SVi_xcxZ5SIqPwq4J@PF+7_yU)QMR+gB3yWcM#L1FU4
zA!dJXgIIK@K6{F)8?n=m+kp%sMRxjq?JI2{MRxk^+quHjf~t4<@ex(k`r|3;T>an_
zHEak3dzf^CvEnYjzd5gvHi;E?`K*`99)boj;%@!H6m`Xr-G1Ecz!oC)?e_cFWm+Ib
zcKhtdlg+^mGTGjve{j93zj%+&g_yQiGOga@rzGq}VKS}W<JXRLis0?vn|^$xo^ze*
zr{BI_)r<gIhitIB+Wi5;Tv4;D-5+tO*}dE#F9r8gwCZBpyPIxMxe*Ye!t(xof2pv%
zf8Q^K<?H?ibIg+;A70g93vanWRS)a(<92b9#}w}J&$AbT04dz%54~7zkasxala)Pw
z*^=UAUsqSglRZAm<8mMIc)YUmxF0*AAN-~o)5tG-1_E@X9rw?%b_OEtxX<PjnXCbc
z=i`3W3F282su1kLi_h+0nZ7v+4)~eRidm8kRgNUvF+TIh)~jRUZsWxnrw6gCtKQ~D
zl+z8p&eK!BrFQ)gl1(%)VAbh?Th;}d0`4eqAPt)y@Y#Tv3W#y02cxbs=g<f=k1v~~
zW=P%~FF9~#5WA%6Sh+scz{jP}d|SQq11M2tl0jw$E~~*#Witc!pA(3*nF0SfZDsNv
zcxI3u;VLuhEHi^a!__I-KQ>;HXIl_kT>Qs()UPTU`5DzBxwEZQiv&?ysTRqdZBmQX
zwdBsWAiX%S(-Xwn>B+(%z9_KM6Gx-m?*cbHaU`ZEj|DP4dF#u}UMsjW<@Z6^PJL>s
z+MoP=P%+SKKItd9X;}~p&E^viNQ1y8L@R)3ZCSwUmIqNHn5Qd>m))e2<*5}x%<MfD
zDqJf9_8vDFCQ!S+`A2F(sy%S0#c~~rPy_zJ$UE|WqRyxFh99Ys>8FF(P|>Oo;dwe3
zK0@8cLOqxyvZ{FgkJ&I^w<?I4$QLSHtAb(XPoh9XtqO)u6jK;T8&?G*CMZtm0Hg0e
z>zi&?V^V)EHAdD3{w$5L4aUu$*Du^mgP$)oMivL2m&On+$RS&F=nH<L#-=+0cjPie
zcsc?;wBxuCVZtlc6z}|r+FG7o6U0m=5Gq`20*;j5Zo5S)*i^jrR&`@6y{XhDSs>UX
zZIZtRlwzH1v)=bpwcFnu#Eg>*5vI*S^=Ng{GO;AKBZysE^?^Nue2Jgvt3Uk@wJ!}d
z(yAPeydxNX2{|klpTLg9pzMJD<Y(&IKCcJ-iIEqp6C@eD5ybWe`pt#vvPLjEfnd`U
z5T(8m46vWV1JU^#0Wbc=Pl5R98$o6-ekwUZ2qq`&30zKa6dJN8a5=$|Bq!_%$O)g)
zAxctDSD@82)l=UUMGaJ}*cC+$&~Uk(f<Ri+6|iFTxHvkO=DZV>%?Ne<&(-2{-U%vF
z#?#LePd}`W{#*@B9gZvrkv1I`3(E4&c~X719(}tSmg){-=KCZe!qY8@hAqcH(7Srp
z?P}CT@0R2ks>tC#Jv_ANJ?t`=Gfnzb_R+^~SAEhDtVi$|8SjZl%woe3>^S;~qW25=
z^LrwQS<i+F*NK4F9}*ovgq{dSPBM-zkj9<}MqMc@_B=*KC-rT=R6{O08N~`jM4XgZ
z`I+ItsHfO_Gx*>1)JD}uzxqq{%`}9|Tn*y#r-IRA)I9O7^Tg**>&x#@4-YzBYL)o>
zX=&BFmI<G43iZi5)O+csFjnnEiO)BMETVh^r<<6pyf@^ZN&HTAqjzt}$1XCdp2$Cw
zmN53)Fs{zX391v_KNF!9@4i#rRX(aUjE^@iWuGDQfiOPppD3tgcF1278PO+-6VDA}
z^YrjvtJ+3>*`qR{qp7*!`F0)vq}1Gy?ONi!K)iQun41?`?-hda-iJcxy^ccd4~5Qq
z9Z9_Rp%Cvif9EISK9vi?SX&scTCYF&wc7SWkj?x&L-`9r_i-zbHZ2GTn;@kT;=>C<
zvW;z%{4re+UeZRJWK88bZA#LDN5lBV>Jj`retEKTaah)_2i>joR~LtzkTgdIy357S
zmlj{XTlFcwZYiI@ia~@*eM>`k+!m1fmWIss-BYZ%G)&riwRtMzjN#~0t9DtjlwVN{
zrmJt2H?Am&m2RvE-5dSOO*dAAydt(@WlUZX_L*!f##0e1lymLLn~p-aR)m*CbsHw?
zUJ=$`qy8bs`*TxKF)Z5}mREIiy#Fn~D8^>6;&@ImbUP^fOP5#aGtGqdsxW4j(<&e$
zcU8!8+RZp~e+lglef2%+mUKtxaw9}|Iz;Wik@2m+MDdHoZTF}zm#1G0U7Cj~<dES0
zgSdQuiSD)f)V=C|(rZI^k~>70)`slyFlVOsmzZX8d#2iw-Vnx&>rqlddV{#$S}Td5
z?bIE!)cSO1=$7pJ+m-8(C42s`OLaKT7QOgB)sfy3#>{OWLPXM*kUdD_@P#Xql{><+
z-TKbosQToNkR3=85LZY*ycWh@mw*`62t*RtP8)%!<h9UUNdcr=uZ6st7Z(KLg0F>x
zUw2_41QQm!qOfoj+OaDN3rCW$*d<}{U988oO?$(#?ody^Uwu2dH>}8*d^|vm_GTCx
zX|K%%(i*T$en8~D8Ioo=ytcwz%Ct|9Y*96-eNmEu2+uxAGBQMSqY`sw-P)qYruK&}
zr$H2INKTWj0t3W!Z|Uw9H9qxL7#k&SDnxkR3TsA-)__>9OHXQ5^{KAV4FVA1=?WPH
zWUs{l$+idd(pGg@>OdH)b#f%z9ti8lnXL=vLZpNGM60?yeXztMb~`9M^05Mf$gzj@
z_a9KNW)6q3dM8M7?BQ_y1a%w6y)s$(epvPq?*F|(x@m320Da4B^|j>tA#1Q=<}1a_
zN5a^L*33Z647R)9fhhJ!IN1JC1EPW>A;+YMnSq%3NI2v}XJ#Q7Garr2>?pM8Xk=zb
z5;GqaGjpp@tb$J_J`Kz6EidT1eyffqKMgC=#?Vz_=pGDf4Gp9{VDoRK0*K_EkW0S!
zFciqc<9hvrsxEcB#3P12E<6_)9?)m{!Z|9P`V0p$I^%98p@!8pj)z{J(BBuH6QP@^
za{CfICqgEw86yWnpVV!0R5o=oa)v5n=#%0MvdO1P41HSfpQ9$HPDjoF5jm&D8Ekvd
z_ZfZlT<SU#IUW}#!E;6&Z;+9Loj=#J=BmNz&!hCi8G-P8F6qZJJY>u11-)Ue%BH6m
zT%>d4A57B=M7m{S_SjU=XFmi}Q{ju=%j~hKK<_U!l9)WsDCp}SQiH!cqY$$*2+pR2
zX-0wXw`{YSJT_C!;ByA$rv2x%AN=@^X}8?|;~(YBfJM(`4;9bNr)UBx++5&OG+P57
zv)xnBTc{y@Pr*eScM!pJPhoVex(Uafl&rk3z=n|C^VAQM_Z2vbU)*()xa<9eSgRiP
zI9UmZ`oQ*7A0XA<U%0>?i44S$_ZLWp;;um4_5MP>wO|KpAsBaUDY(JfQD{d?!41}q
zB<|W$z+I2Ay}5$BjTRKj+A9j>Rd2_2(?Zp^`1Sefo3Z4Af^*z~;<%3%BF6>NGO%@A
zAay)iz$s<Q#}z^Rb<<}(qQX>LWEP0<w24`mWy1qnsIPlOHKZ37+~@*Ps0H~GA!E=$
zNl}j%|M-ZSQl5Ie;6^H_a6MkYRT>NvuKR>eKdL6ApNO<S(75gs1zfJlO2T)aDmFc;
zzEqxms#Kpi?^9Br8D0j;@UlWb(Z=wyq7WNxq6s2QD+=6J_^%l9s$}IK3uVvgyB4a+
z$v=uA<xj&^V#sF-v1j$(g=%agzpM$Nql;%E69VbcGm!~_nDCiG{#j>2As7>`j7;b#
zv|wdqLPru4t`rmgMNBByCKbxoV!@~5gLL{xMSuOhpK}@D^S@JlW9R&>P;r4tKwNpm
z@U8bPVtVjmqy~t{e^JyRaels-Z?z5<tI6rr1vgKJ2+!(*Tm~k|`h2m}8vXEM^+0M(
ziOEofX{zC&voGm}CF-X1OHuHgZ>;xHfkP<1gF3I~z@$Q1r+#S(1LDgCzTlC#xLVZt
zN+GsM;-dDa{IWY;q0_ck3IlCE2U5c;1$G!pL;z9eD~0SPr%oXlb#9E*=_s^)W28<;
P5_N7woqEa*71jR-_H4e2

delta 46626
zcmZ5}cYqW{_Ww?APp8@02|F{(#GRcP5P{t#gStyFojH4+dS^WD&hPI|J@wM}&RbA|
zk`xI=lC<O?2x21$NDw4RPJ$Q^Q9+a(#oy;uRnvUkzxKU;?^CbRt5>h8dtP4O?6p<R
zy7%<-RC*ToRNwLTy;pf@tlj@!uXn7q;`6YjhrNlSW%j6J-WxRk#yuWO(Tc*_x5Y(s
z?eEWcC$v{)hV4N$+Ovk%BK!O^*~i)D5A;UGk3ao;7I@6cH+?+&m#3cp%i}LR`KNBb
z&py}fuYc?I{0rTl%Rcpd_VGXe<MDqz58faC_I$VBvusGa+g^K>_ES~x+hU{K`mESe
zwIZb`tRAy>{!#nFQ+=#hE4TcXm$(Yp#f=&}WHFH~yI7xkxsoTWcDKKNO8ZQy>aJ>y
zq?89r-PL$=hlEmhwf)W3<6H+1d$MDH)}E~HscIo9qYzgOryUY1J=LbySOYb#19Gta
z@?W%IarI!goMI>qR^wMlrDBp&TX(hAdAO1qR)@1?&uSa0hpSqJ6jGrxT+LqPkkA>f
zUjL{yK<IeG>S*@<U$xh&N4q*+=!{mgourNzI-}K_AGZdHM$p3Q6#HM#X@iyODXLZ~
zr8Fo_Q3Dx=gwhoC%Bw6}<;Lk@^=<p=ziC$~?cP?kn3U3?^tM`F?T}D<TfORTYno~)
zDn`R%wP>yCN$gRwtjm4gsJ-|fnqLVlR*kgv2TN6XFMhyw|4aK*s}EF#H!d;JO&_RX
zUI>vu{XmT;tO=+yXir#MsVZyObN{Q2ug8BDl}>y##!A)apm>0?QVsJ?rl&wzsU}la
zKnNRzl3t@0TOrG&=SCkhjOu)-sx7TD%jdAvQZQGk>ec_33AEL!dQI;Ca?!LOsp=ip
zam)r4c5YUSMzMGPtsM((R*k4Njw;}xp}S3GJ$9R;t_A_Cx2cN3D*+N#Z&S?@heSEs
z)IiYsOsL}NZdK`;*yLePYvxUC+l$)ZJHYWtd8+howIu40P~WXKiaVr1WTJ}|v<%om
zRgM!U+1YBrEkjlJvibkjsvq6!w5vx^VBub;T|uIVy-x3dL=k(bcc>FUqKLg}@)q8z
zM2c43tEO(YW+}W7D12#OTd&o4>b`VKDMs6Usrs@Krx>MtsaAG$NK#U-skJ^ZIR@s+
zY5T42+H$q-w2Pqv<Fx9_OC|IG$U+N;1jcE#rlmCl^8luzTD|RAy|h`%^}W4v6oE@@
zuN*}nfzjI=E=UZTOTE2UG_^*Fx@cjozgHRLRTF*L-L0+3tn(i=FZ=0;5n>O$sy$SX
zhfdFGK<e)`#qjhf8j$*XBQZW6L1H}i_m&Ux7F%K7IT~87G^`Eqs;_&!vNbsmdIP;$
z7-A+W!C6|^`<ho<>ai+##V}Wgc$Hitlx4$yG@|W1ijIZ>OUwn3FlC50o|2W)0Xf85
zQE6QigA83b(#yK;GtXY{Q4BQoNVj<mG|x!4c?=+p^oF_DfHek?MtUpr)^G(AKnZIT
zyhR_`3;Sv1p5O$p(MZeyg=WAc_C<efLi<Th1Az&wNnSbhK>}-%7ejwLSw+K6o9<O+
zqp4SV29K+Yvn>O(ck96t4GaP3Pj?y^B=o0yBT?SKAko0ny|LM{fr-Hzc!pPfOE$3N
zL2sthz><Xqp2Zuuj+=sMGS{o55;a+-zouPP2SPX@MN!bwbG^PGZ(5MBX|6ZKmnYPL
zCd*uJB5Cy(bprV=d+{}GVBNbe1kHqZy*@FAp#q3^y|J7`q*dcxZ{sG`DH?%_g6>&j
z-}JinPfy(v7lUTP60c8mID~+)#2XhA10*n(c$-|o#|xj|%e-vRk4B;$2xu;Ih6+e%
zE^~$oNN6s*G*ozPSIeOS0=BGnZO|}ORy#ulPl2@B87d%ww3>#>0`ir`VQquA=rDVA
zux1A~c#W`iKWbM@17#z-bBOjp)kdeI!35GqXP|%t(ncC6cXJgy+`_gF(eAC=;@DEG
zcu=b?PPc$0A*WkF0$~evOCKzDC>8y?$9{6CW-4`iTny^kJzk&ibPxi@9&eII4Wt8%
zJ>KdXYp}oodBC2=w5U>dz{Q}xJ>d26xB*Jkw+Fl#;h{j1k{2FoCiQJG_3a`1{0Obu
z)9H|lL4AA3wS)ThkT=QKVA27`A#bbJRzI|>7i;j3-lFsDkE67{fgioz2(_!1ue(Qw
zjn*E>9Q7)E@)8f#KI*N^S@&@fz#eCR8?F7i;<#5y(&&Q>g-XZ0nF?zn1~6!lr`UI+
zwaJ-NUWG3+#3Zgam9}o?GBD^2d+SZ@*322NQYnEb7CPfCG`9Z8Wl+;|tbC02RQ8-}
z5XC;{$e<;~s0!wPPp#-Jd)ydpu_w?|^Op0v@a41@`|~(drkAGhY2pPFy1g_^lg_}$
zQWsYHurJ1GT`T%%3Xcwn37I}x(<^x}1sY^u)^)u0T18(?X~GQ!lepTI&8*|-69}O;
zuiHP2*Z$_oysjy{_lXOs*ERJ1BU}j8d4s*wpgop(LsNLqK!&RGhK8QOI0cE>F=W_8
z?cT;iT#G1j8$uSnh9wFz=;^VVa&4l!m(70C=xo~)wcC_VU|lJ#qo{4H)}qQGVcl4*
zx~o-cX{1i$Yphn&#o9^T1;-y&C$g?nwA~dGHKmnQq9AUf*0!D18zUD&aR0OHtEOs(
zlAYzYg8`{o)DFvNzN%quo>sJ!Jw9FgATUouY=d@&JHmXO&sxsVx>n8C6rBnnCajpR
z8GeU^k@K}+$hwNF;Nb!`W`=f6`vtBFP0$6JAr?!OPtXM#e0evn0#g>D4H6GzANW%@
zcGnCo!tyh<TdKh1163>+kV%Pk8*UP1F4C}W-^BqyEny>PYWH+nqDj}SDl|8jXfk>L
z2@{rRg=W%fnwv|ss%mS6hWdNM+9s{&E4$e&?b_nNCJg~?8z6hB0k*Jz&(YddZPDb)
z1SX)iXr}PSAOW>SLnzvotKi{w_URn0ebsiS0leHpZP$!4UOGsqY}aDtR%@<;2H3^A
zysfpZ+U2UyAm4>JLaI=ecWKd>)sm}#+QY`bt+lS&<El^{_h{HuQAc^X|JkF#4+_ID
ziuVnhtF^D&=QNU6A?LGC^NDr^34ncCW8r*2qLh6!#NVRz%}Zl^KYM<zHmB2m7lI<J
z{hExhAOnc~nvC{A0%E_0cybITJxbG#XhpBukI&QI^fW#q22ru9>0#}prkvGOYkaY#
zgYIJ%!`Bhd&d=Azd2T+Xsd*mfif3rC)0+C5%Qz_KjHb3l)dgN}UFoZ<)^x9f2ZuvE
zyTsO}Ded~`>XoiGxsF$KwHpF6LzIpl^1iC84Ib+aa^4z^gxBrw-qRwUs@HWn6u?Do
zU)N<62ohGju47=|z;*C&Fl)X@`&HdwU5-nQ?`sC@vb{i(kRBF&1`-H^b@bUHi$lP$
z>GteJTAjCQx~`bKXEnZ9P1j*9bu>sQO{ZdOxDKdUEWS)@RW(ajMChXN@jpusiGUm=
z3F-NQ)s?GYY|LT*Sf*W9JIA$@2FD!TC!#@(4~{u{MN?TQ4URc_^A>!jXf!tFu~W;m
zc6IYy1d2Z9>2i2M26dgMH?ENgG&bhxt=m}BXn1Ml9v84bE!Sq;u)u}Th^zaABY+Gb
z7U<FufCR(>9gbiYZ6q)g!rEG0*{G|D(Iy-Fik7lpSfTY(>%kOpB}9O**6lKime*3-
z(MA$a5m&C&V;gl5xD$iNmFsl%V_gL9k_Wx@2*i2dE?I~xH|P|&@6B*);CcreN_k>~
z{ojwY2Lsh094jc&9&DImcEhy*ZLopay+t&INy!86E^S-&a978K&TzvNalWRQ&>3zZ
z&gYvKOvtc0#@2UhX;0l4<I-@m&@p3-OT*0q#uy{a*KJhS0>&7l(8QV|%JqfS2KM+T
z+O)a`7s3aK1{cByhz29<j3gf*8jO5nYmvb#T@qGp`&WCkI<?MrF-p*lwsC1Jl>oyw
zDnzuUDJ8(Ljp~-xQi`@T#gEOsz3elst5Ubp#qa}TrEzIA`GK+0xHOvlz*uRtZfhMA
zRVhWkvd&*>C+gO^5T$@vYshV>rj!C=tx?%V4#-kKtTozqv@Rm=12Y0)^;7%V{aW|p
zuAjOX0bqP;_?)f_0OM1m%o(5oV0>z1vev79ju8xN7YyZR!)|p@>!a1<f3dgFlpt^}
z7(S5~0STN7M!D0wLEv1V-WB6Ah;ezr$o*`H1P8=vD-M;P47G;uCnXCG<07$W@2DxE
zu=<k8_l`IG^M!6tKhH-0Xaw4UkFxPVEMXu4^pYuekRVa^OQy4fL{I|nXo?*qMJPmF
zszn%s;}!GL_#%^DG35>t!a#b(#I|6V3HOiL*<cp+vlslJ4ON2;CU%fRsIzqPu2b3X
zPH4kwr#jGJ0(z<g4HD2(%`i`;kqV%vnz_7n6Gy<q8LZ}{c1zt17lCp}Gh77nwKL4H
z*ox`g*Um7JPU$I(K-FfmcTZ})YiGL<<k)7r5VR`KHp8N~b?$j*n+TwP#f^YTbJ;&n
zX*bu+brFhzFxN$(MS89&7f78u;<+Xk$OcMd=(I^#ZeKj5O;T!?yBLU2)a5P)t<%e$
zR)!ABU2Y<>ewIT(b`|^VtoB^pDi?v4=~XTQx#Cr($atbua>c96Y^C*z&LJ>7cG&~Z
zX?=^I++`{eK0kEse0P~qu>ydE(k>G#0IfnG;qG>sRbo*lvX2=gPW1!ukro#K2YE#B
z?z`XWC+dqB_8a@(7qtOO-8ZhaI;{Q1wU&JLH*VLH&;EwGei4$#07k*b>>E7#Vo#@I
zE{1_h95dy{8$!T1X2yi)0||^{CUz|A1O`0r1=H?QtgrXfU2s867;?cigk10ix8cbJ
zU!dVVLyRD};2!K|uRg1;hb3nSRx&{Ju;dH@35Xt6nD1I(J9*$9R?}vD!s-efa8HYG
z-rIse4SHH~mV$(4PfN~HkkIUDIkQw(;CTB^>7nVKPJP|NOHg=Uw{Y^ieJwdXp#q4$
z7VPg;is=a#Gs7y{Z7<bzRgcZEjHI=Yf**sX=i8PNOUzIxRbwA3)zhA8aKvhc=YW0N
zl3@@?z`ku^O+_?E>UjE|T^H0FJk{^HN;Dhav&>RHd>{m+_pDIZdXw7HppDvMRvOmF
zRxh^XJ^)PUEVfcS=T0)vS!^|HE)p;Xk;~Ygus*PQnOhD`xMh}1L_vmxEaVr4(oi>O
z!fmoyna+x<H#uz$E|fM|ap7!0LTQtQ5%-a(5n6SZ{o8VVt*2&}TM|vGU6x$b4L+%M
zSy<G^lw-q-^w}G}qG9&^as5qS;0-LQl%@6Z?Ac)EX{=XQ4E8D9{Sy<_AM8Vc)B~V_
zJjA}Ev0m$`7~+%rcW@y!grru&EJ%SIYENsTukvJv`V?+FafwY*3y{ahOxMQyioUd8
zYpQopqT_u?A}m3RdwF(df=|ikX0!g2^%OhZOdp#ALnIXN7%&rj@G^siI0EX)K4mpq
z&|H6`9{+Kl2pBSIvJXBHD;JR{aI!DE+E+~RHfL<>jpm%<Q`^wO#W`DgBi>i1`qb>@
zEL3`$4{`rxQox?>QyX8-0@jTBU+~bWGk?KCm(BVG7^c@-J~eka7~IippW5nj7QD-x
zUl;~w@wQLB!j-D;jd)R=>r<P$yxzr_%=3I|lgn9{r0@K~Fa$gEe<6j~<=y{--@6#G
zi2V!m;awN_)B?fRJFSQX|2>~td3ljoy%+uhzYN>wUw}oz>ifTFizp`7FKQISuK9BK
z?Y!SU@YQ4I<@6GG=(uG*^{UHR=(y!R5vp)oA%%`x;Zv`<TnhcR^77_~6#DJMUnrvA
zR{2okBry;%v($AyWfNOdtxv4Se_|3LiHAbh`6{w<B*Hyt>wJ})E{#N`n2*Huge9z3
zip5CW;8Qb~vrwUreQL$!EMRY>VbPAy9YAmODWCaNcDP1wU621ABPf@&)inaOhGgYu
zmy9SDMr`w`)e^o~8nN9S0-OaScDQ4Qvw*$x7gA`|U6>BdF9$=j?sj{UYob{{xx7fx
zlY4z?`%8+VBR}=2b(gbH<UXI;*}9I`8^~Yylyt6L_PW14|H3nW$v*zir=GutrCRB2
zD)4{@nCNdxmVMzvj^u85AY_{k_=*m(r(5ZFg%9|=LGB27w&`nlE%rq>t8qc(nLzUd
ztrsL9zV@XvRu%;#hZI&1vUqDfmpSNDctl4`$Q&dYM86<GeZwAXtygBg@rfXYn8YQS
zN-l%u`j!oEt>-h}`V=0ELx%e7Tau~bGN|NtY<FwDrs6vnhpO})$y|>rA%S$nS9FS9
z(MG>6e8lH1<5lAMqaS?A6{1Qaa|D{_i@hKL@q-Up&D&56vO;0?NA_VG{f^9!t_)S_
zN0LFR3o@XNvQ};Ndoo8I&n*1@QIe_WGN{rqHomRiBXi8fp(-6CnNC~=RXWbPw9~s}
zj{9Vm75N^>94DFfTn0nr1RK*%@0dB^^du5GkU2pz*K!$5#gptrJN^3XNuR=#7%-AH
z2`5R0ng%(av%aFAee5^w^=rdtecl*v8=g@)=TlmUwh^fm(0p6z1qqCEJ}m78l!LrT
zSUt~9w%40foOf0lFd=iEWM~c|4T50I$FA<6x39S1Q+Q5`xSS24Yq$^^=O-U~t%F`$
z@e_K6f)5B$>-<DWwOk0TbJ54X>!8<FTy&ZT2@nWfB%$9RSTe)fOC?1M*o__a2O7Ur
zVg!IxteV*3^e$2QmZ;Wu9%P<OnaLs^Ti#Lswr!shwHZ%5iAR8Zr39Xmj&KDB2EIz1
zGZY`26nc%YKf6jlr__xokufE>=$jEGGNuHH<{42UH#Q)FF`@(;n}cwWz`)ZnELNv~
zTRX;upuN!;7lNX(F(qLU>O%z(V@k>!@!ge4Z8)A?(@DRjcD#!~TchzV0u?j9L~d-L
z0)+7;*x3A<+W=}JTh>YcO_zx-LNO2~miVacys(qjjfo{ealQ?bbV_jWu#_S-6Oo!W
zzeKU^2RrLail4y0VkeCUfSK<aLb2QYlCaoG<0)X~mxxt>P!Q(MFR8Rk#7>$R$nans
zzgwdI#risczO};Io|2-`_P?&v59p2el<>T5v5Gq~+7Bhladhq^6P;_x&Ly7x@~!$r
zwe6232x_P=#WOV9(GvBB%Q&#*Sc%%jnnoE0i+Z=a{qS9S^WysMetBa8TvVXDU$!Jj
zD0TPCGkK5*NV@xz4+&I|e4o|bpL&qoG=UNaMR)gKbt~U`NfvFry8D0qfYpzpdJFxf
z_4X_M{A%KyCu@7}(^bzO!4R#A$7t2wemTZK!l>SUx$^}Hqk8*Alt)--)!zPWKfh>I
zVu-5(ef;tQhGg*z7_YEr@7E(&yz0m5PnR<;JwrG2_2b3`o&8xDb=p9`GMLS{U%#s!
z|2dY?z#HgVMgwo4U-mb&VA(*w>~D~;Y@ok#@FmNfOAN2MmT?xh>~+7q8bXSwfl4`{
zL9nw@8Y;Ok^bInU??5doa+E#l*Vuv9jPffQAJ5>zuu*<p3~!Jm<qwxpw63VWur|eC
z^s(LNH~I=s*%UtxRQA(2_hC?I@A;Jv?cY75e_33Qf5kQn4}kZc-xPQtf%hKaQHls8
zD*B#3@*yfpBaj$dDbQZ%S6lFrL7dGzU|ZxDAv6~P3%Kw5MWF4lFn$*M5d_uKn39?R
zTjCc1r^AA$T<V8MyG#n5^MPLk@{SZ*YZ-xECWSzIxnE6RVqp#fe#Pas@@W}TSNhe5
ztl{LzeALrx*d34RBkx?}mj_Z{5|`SKya-6(tnuSON|Kl^Yy4pz*3eV*D*1~w{<3x!
zo&WpDxouz_9@9JjeuH0eP^hR4{!-x&Ap_72e)vNHN-2j8{`mE>rD;$g8sFegT*oII
z<cUKQZiBx|SE~<ocu82>=`Z@x{^T*ex2Lev&yRMB)e?A>-G1d$zltSZ2Pw`zh{bw7
zq2GDcCw{d9FGoCrwR`;Py=XW?3gf6^uV0<*v93UMO30^t?pJP1#95~{dU<`dm^I*|
z7w|wF2!KQdKlg`3G7Kat__<%+Edq%Oe(p~Q*F_|+;OGA2^}K?TLlyko-}PFnnwJd3
z{eI=PM3xTnp3c7Tr*7G2*nisVv3hE?5`JtC0dWcjlFLU#E)66s*iRls3d4f^{_L%y
z>b&33#QXh~w@3@9CwUX^_y6i9YdUSrOQ<go`IW|rQN`K&Q2d{tdJ<XBZgz*?>mxn2
zc;Yk$9X1^D%Ooz;V9FtXnaF8_geiyoI2}Pi1yE2wF#jL)9-V%05oqoD!Er*60m2V{
zc|Q##>G%=wjt-&g{b6lbX;CkG{U7vEM&n_nazXK<>qnF-Z<eaoSc(?>vhRt<`ah$O
zxn*Rj+L||jc!b)GDphaieJ?oZ`_ZN9D;_jjG4#XQ+oj5U;Jsuyc<}PXvtM{t_judQ
zEyW&;+yhsq0BT+-JRS`u!2#eqrD`vawUK6=pGMO{HvMn<=Guj&vh~13>n$vmtp^fy
zUszfuu2O(R-4~W3GNyA!KQ--QX8&Dp|K#FQMfff-iCZd{dXP|AT#BWh`W__uesO8$
zW?`w*_lrv_ZsL7U0<!NHm)>xrHJHxI{M7eb?7RM<N4<}3ac!lZ-cl;l><~i1TT08t
z-5HQ5cuOhn&WM6(UT-OFdOvqdc#2}e1Y3ILebz-<HT|Tp+g|w}y}Rd;-EJv#+Pu3|
zUKD~5O4(g1FA9MqrBa;giBgJD%I?yXxK)RzvXtGW>6@+J@j~EMKV=jCt3Uear*0W^
z9`|XfOlbOfit5u+na~7@GCnOuLQ|B1Fb8Cl`(#Zh$f25iT6)F3)({Fl{IrT5vLCD0
zW5soc+*0Vw?vUHJl+!xo_AMof4^iLlrvo=Eb;w@Y^Ip;qsE_mrTpAyASExroh7J${
zMvs7;8z6zvBY?RfETz10k3jlXX({E6$<iKy%q{%d5F9-co$OQ}{eezB-7+Xe+|w<C
zQp7z2G6;YQ%IFzD5HOL>_i^)XSfFUO-R~7WUmO?~K(zi}m|sexdjwnDPw!qmA|RJp
zFab3pAQOfl0W~6kgdtypN@)O%VgIkcKC)_zt3%^?Ou!Vb4KmOf6TksK_7f-u)fvxP
z570Z+j&~{mCMqyKAcqV{AdC-$#BmTvAdC+n=%b4Wr9?HbnFI88wGA!;xu6CYfd*Ye
zKn^;nkWK)Dt_w%NkebZW1NCd`Cc6l<5>9pzC~}@02#El^ln<%N0nEx>H1tc!;J572
z1NDbIo!)XW=w#t7rz0Q)jJE<Zcm)Y7-lBSpq!XY(SX&(^8ezA6T_2$~UQHcAjw=Ai
zwIQHv4ybf5M+YqyLE_oRhUm|E>OT%3w?>XjJVT3a3?NtGa!}5ufcnTKye$D`2k=4;
z9Q>eUUDBaW+ZsTq;&OnyEr6)h<p6hkKrN}au0$IIXvFMhKMd2GKe;=gh}<=p0NNc0
zh+qLEban@1umF;#dq4&YMDn$CcR&UUl0$3h?f`;?9@N+Y8V>vH7nxq{so&>}GjNF=
zFh!IC5+&^m$XEv?O4=6)zsRQ&kz!}FFHm;R<t(mr-+yRFjDk?*F9JyJS7mR$_s(qF
z)~z~ZpZwc%&vkqH$$w>^eCGGvvh3&KdbS!eA`XQHjQAoT)BPZU_eB8d{?Wp6EFlN&
z+ehdbPyIn>m;@9WtOuQ80umSp19Ce75*P;qSo}+|0Dv@r5y;}w8-<KSi<%q^R6d3!
z;1Y|93Ov!*WA&lXIY7z$vjL@P;*6HP;rSPyvcDUt|F^gfEV1rG09KrJ20TbuaW)VV
zs{u$@aW;U}fcC5b8t)eZY|<G0fi4$Z2paDfTnHNP7Xl%1C<YxsTnOM$Yy=%;2jC#J
zK0)OTyLPPJNU6uajwR$H`vj$rgdAY{1m&~=379@XOdE>rK_a&A6HLAl6tO)qcx?Yl
zP{#Je5wZQNL6N8AS|YZ8HJIzf8?s)Cq03(lc6mrPF4shPeS<O{mr`iVzQG*N&pKeR
zxo@z`!<Q>!1?cySBH^$51#>)W=qO@f_6v5Y|38}8UG)#jU4bkTN%R4~umVZ+0m0l&
zmlug7`oN&b+dKG3q7Muf{!fueq7Mvq5u0KOe-*OmuU(EWb{(%@-il(N4GO9cJL4JE
z8E#t*7|)%CyZuL(u!jfb{m}rwRx&)8bVd@bKf{9<NpD~u>xFxp5G<Nv|6!sYQi2nL
z-jKBd;gy#kd^fN@ll2cX4MBN=0w(&WA&ANF7?;7wn8^NTivC2!#Gp)L;_w<W6G>*T
z00KFQ9h#!=%S;N&v@4FMiAzG*=%6szG?^Wos&~##c7Z7MHJN0NlcgAEbAv_i+BZ(q
zpHl*JgE$?cJCOVca2{JdLw~GdUQk{Q1rxgSf*9;m$q0VX_YS*prarymouJGHf(fB_
zNT|CI0y&=rX6Y|=njcj7w1FmBI-i6}U<7h&3xY)}f*#9f6?^H-bwLm*)u&JfPl&x2
zRC2k8*<Z(L3HI$Q{k9AkBBzSS0D3QolkA(hG;|lSd*9M;tyttV3zA!qSrkM7@-kV(
zvs+8p;<xl(6-$EhxC=}OEeYbdYrhae<1J^8&(;rQmpeU$6cvP)Q{#;cVs*n^k3+$t
zAM8KO(c?zhp&%|ien?&*h*d*75mZjuZ!FNSSL*SvaHV(v15X4^@xlj4lyV|i8sO6&
zB)a27FnCH%dtzXCBDoq=Yx#tb99VHOn6J8=1)!6`nrkdO!VSRcHzuSsgw(|32wjZI
z*v~K0+jtv4^R$(vzixl;_T0am7q_xcy?}q8?Do{(yFFi>?fNu(WtraC%LUo2WqOWn
zTc$UW^tokvrJY@_=hb=?;8cr;Lm`=|2#RnhBr_EtQLQndNJB_mvLXgmOB)+fCxpZ$
zE6GDG#^J6CclnZqOIG7UbjgZVuORi(<dAX$Rxh@EmEPeA5MqykM`+v0p`cimK>}=Y
zNUq8t;gTkY<f=?0UzI0^<f<$=v?@;yVO747mj;OG?BUh=O?A^l(vt`I$~HYDJvm4e
zJ3S;lIY`n8!ILi$Jpr$}!~T4=-o<)!hl@e$(he7c)}<XG88HX>y0jxCBW92=eMd+}
z%tVTac}EBl^IVGUgS2!Vu<N(zZHwy;xTR2Re;_1x5D-Es2SPEi>jeo*4}`GmrMp8x
z3hloMiT4OVa7tc9013@+Lh>pCNN9c&a;_o-DPTVm5*LO*pvFgB8z^o+;?|Vn_9G#A
zBLTudIugQ-gxlZ;kcT}MD!LeA|JkYE5<V7^N9IUp;+!I+REnbmkiY;fPTW9ZOdJm(
z_P-vp8>vOi1Xj6AzcF(%Bu{w2q$xwaB4j|FX1yR&aXKX3FcN^o4PkQM!f{~P*%13~
z7ktUtkaV#~>Otr%bqxjx3PWAbhuD3)^<Pz-56QDDa3OR)gk6(BLJRy9VheZcw`P9|
zNoR`cLg=RuqV0<@XoSMrTj8PucH>X<7kz=Z!pIigif#!}-RH2k59qg7%?Zo-1|}*w
zCv1wq9VBd>69&|STm=v3vF2av4_D7~RcMON3!5VU6XH{JUKshGL2!2{2FBRzov-!5
zwRTvJbTDDL9hM^<Bp~dt9Hk&psvSmC+`|z-Eo3hr)bFca7#3{`SehIQ!zq3ppGXo4
z;~F}x4WQ9{OPKc?{iV7kZmBdkmW1U-2{M3K5|%evK>}h)7^8LoMV}!uaizWT8$IBu
zTj^p@(6-XWppm~a91{5k=m2A77>fqKN*SV|zt#?Zhg&YSYh4VQ18c+bMmdClu{K<2
z$+xi}fw4B+rXBZ7A({dk*i(n}x~dIfnW+R5DjUKwQwb6(8^Va*U*MKwR&Qoo59xoe
z-t2Z0U0d4hb`xD&+DzT_o@g+{P&?Q^4(p5RcDRPprKKHiH_-yRBP=g$hWNeF9n@g_
z&L<`&5{m4Z@AYYQdt3;*w6w>Cpi4`8+@7XOOMAk}H1`xCy0o+}%smBr=7_G<><ddr
zfk#l>7nY6!Boz0B9Y+zOJ4;`MxuduN1bY7~*95w{^p$G@U0wPrEFA@ef%H`vj)Grm
zK{EYlxajAw{pAmOdnJ4{><#eONsze4flFA)uxG|;cQghG6wu<`7LXX`$7rI^6=W~Z
zFP~&@9@A%JPln~GGMErLNo|g|qDctk*)aRlaeZ(0Y*=J7iObp8@?+CNQn2qrnEn2Q
z-oN64i$(6@0%1`^=A-d`G0Xxd^-kG~VHw+j3!#f)tW+oIO&R2k`<4|k`!6T;6P{q-
zGQ27CH5GvzEP`tG*VFnp75&N-@hT3OQ0`ZTJkVqzgbEL2|2(5ltr%D)T_kd?5E@tp
z7r99Yfqa8?KC5r3c%w{)Qpkc5w+yploe)BehOw6C^bOfzWzw}F(FvhpWpHiB>EtYo
z$gQksshvKrAJc;i%J42i1C-S;*}8~T6dRN7T2v<87ML(@QJK6j1rjAJD#L{-N(_O-
zgjiHo-i3!XL?TE)X^YAlb>=UdgvtLbDPy5BqiuT-7%xj)Z1QhQ%H(ZnJO%a=s_}|A
z>@35|Qdaa+nf+hYSXL4|R%T?ZkI2w6GV~O?Gi0p2|5TZ{LPbn~ohr+UG$BZUohrjg
zFc}IGhMp>GaSzWL5XoP}Jylk9H;#%46WV9X@Sg82*_+t-bKVr|8#X%J1(t}HAiyPL
zLx2SSS*IaD0{^Vj5JZZGIO{Y-8THf!-Vj%}z2Kr!xfh%!fDlkGP!qgD#}SdR)-zJn
zC*nz*RoLdJQEm?_Gyb2azGuY9AqrR32sK5oh|-nU5)|4Oq%avIz<Wic$shsVD<b<2
zBuwrVk$p#`Fu7L*eJ8-7-aDdnk>LEWk-%@GCXMh0=^c?N29QAS9YKmgJ_UO3NUSp-
z8F(tudq>JUSx4xFrf66j5GfkV)<=!+%LYV@##VO<#G|N^HZ-CPx7WvvpFQ>XS8T`e
z0M31A#3$0HAYtCnNE6Y+AW{C%2wn)I?KnsTutOs)heyO|CovF$L1kD(Tyf$uA}V7M
zTqnDa7Y>0@5hanhF?$dHLIS%bZroA@mT1!`ul1;iT$4ef)KL*Q3mQdH>f|@svbgb3
z{hO`|_3@h#x$;8>DsM*M(5R84M2(4v2~8Aw5TsKYt;J&^@;xRz<-%CLH~Y|nG0fyh
z(Habo<-Tm!KX!Zig|1IN+3ndE9)J4DZmh;{81{sOG0z)Z5W&=;8-Z#}%<*nnV`$YP
zrxY+z$|7f+fJ7;aXq-I2Rq${LyQ0!~uzHEB!l$m&3^6fvsTugq&=|GDa`slGF}8ZS
zt3&Ou+-V2MpqS;<4l^k#h!Odb{qLMn?Wy_5RiYO7$Y}uxkyHdNu%0GJIbQgW6uo5c
z${XuEq0JE^A>MZ`r+V&+@HhV1olOj_)h-7SkAS!<B6G(efw(Jz-0?vge&sMy+aFO5
z*u9$=e^Bc2ujmUrfZl$`5|Gf_PnOVl1BvmrKaxIx@kWVBV$g<3{VF2&fs%uk`6?p!
zfszHFuOiq7(k>Q?koXQ$I<d`@y@x%knK9PmN@Mk%;E63LBw)#R5&6vlkO26O8lPq!
zNX)$NBJ!I9L~>X6T?F487)K{?<s^U1X3dNVo=1;4(+gZouVWFJEdhx_jzyAU=K+$G
zA_z%DA#^@+EYeuyEb&xMu49oVcUz08Kg((1JYx@UVRZJ?opDQ{6OuC#pSa@<A(V0^
zlDk^MQlxk$QrC$`E#(v_o{xyArMlYCYR*Sw)PhG)JRgx!3rHxQk2q0FIY0D>@~GuH
z5HO`jRQeH+fb9{LAu>oH^@z%-1tgGqL=m+-hym6pto4c(y}`!T7{3Yjf(I5MY$F<9
zeQmv^5%ApEH!6ciZ~@gfDuYLmfa)8Ssb7$2v%b-AM?OG^<Q>yDTGqijOik8^`gM@q
zt(Eb#r_&(EUU1Q5gQBuyK$28cz6K2vg$#<q@6DpUO+2iPix#c4Lv4(iN@!dZ7sSWW
zu!@t#4N*QL+JZn6G(_dl1_{W9sGJfY0of46l)x%Ps(3oxezU#N*Hbm!RU$j4N9F1b
zAt+6cq6f&4#%UDKV)u14eqA@qsR@{<$*ib+w+AE;W<@K-P6H$mW<{@TZcP)#f}C$3
z>}bsJ)XjG>Xqe8A$_q(xK1}CFgW_NlBq>GH71qb1*68_#Y~$6&rn-eL1dYLkt{F52
z7e?hPMsdDdSr~2Kk&nSRjlsoHvBw4h&BakU2th(~aa0aMkSKgHHNizuID}V-LHMgU
zAA~Dh8)y)&a0Vfs0%?Ua2tfjA1r5T7(WeQV$V7_<#5{@H+2-FG@CS89m%!>MUV)`I
zO%v3$YuKhbqjl99r+dHz;+m*jo<Ra}O%%&By#t(}mS4|mIvLkguXk0bN7qM9@uDMS
zpt3%S(<w?FLI+*Ci4E^$Ot0GH>JZYVs617J40JX{5n|)MA5=hXWzTdrI@E1-stzWq
zzSXHZNFZ#D%DoRr(uu;+Y!RiR2Y0dkosDf(yQ1>iPJ+9QT~S>)M3B(g6-7>tZi^(S
z%l5FZx)`17_PC|e_HvI~Ds|nSsC>%~DnQs1MM(amC>34zIeV<Dajfoh7lL+|pF2Y@
z!Tap<Xi!9)AOZ1tv{?)5sDQxs@&J47TH|=#0T+T&(g&hGr-^B|c_1pjo&>{bw|O9n
zx6!!^O^_!)WG}rAF7)9;E(X0dbI9=r5CX=bXp+BN4h-6U9*VYY&pj$g!iaXbg<epn
zr{ZzPo8{2K=JW`A@CKuG-4V9{69pWJ%D4Cu3T;l0MCDt2AW^`PDBcO}N7FPxo70o_
zM>iM)JhdlX4BDNZbeo%YrzfNGt1i$1#>wavS6Ur81a_xq*q~n-S682j%G)mqzArr!
zl}QAUP&q^6LX0eIOV3By*<Ts$>(0BS(mRajqw*cbghCtA^U(_N@*qe+oTr(+ncjm;
z&^wI%?LXgS+^cr#ACt=ixWMQilkOHIF#5-m;%guvfzdzK_zG*LfvK4cYhz+X^X;E*
zGn%VqV`5k!Mo{l3F(<Y0F=aBl=5AwnJ^m9>1o(g(ACs@tfCSw57+$HNC;}v+i1D$q
z$uW_3B?d(i+Ju-oDJIgck_Wwpm`uA$7SgU0W0ZDXL6J<7X6Bq2?)toA-*b=AMX3kj
zSV1#=PE4LrLK0|mVsfDZi7_)L78dt<h~$yXoLHH-4k0;k2XkVrMUq>xI83LTt<j<l
zAn{HNuQm?w&`lo}y5AU52Zo5}lYBLJCnm3bfP_u&#L7j&2PDAWiD7Ho3hkT<YYSpU
zi`kd=8!ZD1VnzwSgpookdl$0GUmK6sFLWvgCV&>kWM&&AfELD(*`~+^Br3Ns7OCeO
z6CzPL^!UP9R9wW6EUxtH|5}aElqoW8QB1)nVJ;oOib~)K#yK7}6D<pxi%Pc(5;%)u
z((R_;LcQ;^D<3efse9jP2QUHgeoV$AAc63HOdh*}1j73<q&Vr=6(o*b-)G|=Fv=Rg
zACo7o#6>M|()xakPFgooP68L2R>$x%)9we1k3GTFF&t<ybc>hY7y5|V4;mvXK8ndq
zDwyc3kEobqLI_5zVb45doXD(+$s6Ce(*vP3G0ef{90=4}*5hHLDzi2wFLUEU4sm06
z-@B5_!1{G;{liASVqHw;HgKH=GV5a4=F&krEP{_;Z<qeoDE3sWk170sj<}FoAHxCN
zAUGP(Xr^s;%ikG;J$2h+@`D`ULTXz~evkts3fvZxALJks71<WU2RW|g80hKk!yYxR
z&uov$bPO)L0AYI!zCXuB;J0_MCmuBl6+2=w(Spk=kl8__@gVMe!xjvpFYHN=8s93J
zFI*)0WXBhTbR8FhbN!Ode8RXP^JPpPTKN?dGGE4UX!S2H1Mj(?1)eniU9lfig~lk*
zEy(OAC$j-F88rOk_x7|WjXRZ2-@8&iNPSOILWvyY_c44Dk3K~L9jf{Fu`92(#t9I3
z%u{yzKNvYBbINVx5`dhFHEGIUI>6mZ%Ci6cPezx_>6rX%3z(2O9m5Nd^kRZv!LH^E
z+Xk76GcFFLea;XLy(ocC&LJHVV{M)?Zm&2SlXv*Rh0xg;mPksi;hrPjABeHBPZ^ym
z&bdf*FZvuIAx8}%ye@S<#x6W%+*@(pMG8UaJRz;YVG5-122~&X>HjfqEw1QOE<Ys$
zE~NUDBchb;h?lAc*}MLNcB~jweyO#~AT_8Q?MN{ru<)MMP<G?9#-{Aha;2GU-3Ww+
zmRHqSy^*}|!X=L^FKS@z|7!FKjx5I!?EO&Xmz749GtX%4u7bFvG^$*7JV+pnDo4lD
z8!P;d(rDKCIin^sx?H{o2qt7km*YLaB$ok&TZYdW>CBtu@>~Shj)+^1bCCj<L9dTt
ztDiHPWX6=slpih@L1s)jQhvCagt9Qd#xmdYM!U?|ayg{Igv{7-3~Ag9g$!obIQGc%
zM$61N7l$U-IKmNSVfKt?GoMFU<I81&wv<nw@#WaZ<I@(v!StEHeth0&m7U<$ou<zO
zs{3}_wM49|eN<kw&F=bwvCRm4RBpuR9R`hmSZFOPylC7~y|!HA4x5<JU0WV$N*zHY
zD!jJ5%}v$^@Cu+Y$~W7iUo@6`sy3HvJpDvmC~Yo}@fV+ogwp2n4tLN?;2`mEE9+Np
z++4G@T;qq2#3XKcly^9hP}y4E?pA9arXyU0_DMNjye;l-wDyEPDaZGBmX!jFzZ-hC
z+`h4gajo9&Y`Mm-{SX^yXUj|Zo0&uc?QA(FW6xGx3s&!Hq}-i2*)q!>SIshe(<{cG
z8{M+2k^Dv`RsjI)Y9zmr2@(Li8nwTZPT$pZSliR6=(RXMeOJ=}+tbKMiJe}WwgdYb
z@ts~95a`!^jpV`)60-Xm$(<fZpzdpgogSREnx?k=oZUCU$hZ33RiPE_^F}g@2pOn+
z-U!*D>2!>lMyqMxH&TAIr%o`gEUw4DVr9ewjF#^k$uFXT1kCr1;v$~_5-{I4!cszk
z4@d+)-#2RfV<VBSBZf%V9cd)fb&`cv`JoZgbyMNgpa+z5jqv@B5o-4O8}7QtzH72k
zp|k=^tj7>QvFBXtX?Jmste;Ff?lfkG);+HDvd2v|8hh&TucJqs!tQaojzbQ5-Q!rt
zg}L;GO80oIS6swtc+O)atw&t#85ePy<U#MHxQx>z3vt@Zap&WKX_|Pi#4r1JAUJ3_
zu*6MvkTB(yxZGue1mr7mXP23#W*!(9C%GUn)d$8e^#ScN2gYS+fu}$k7?-IIkU$z3
z$1am!{L3KBj2HE`*Ud0+@oz#LL!2)DWpFcQN?e%{SFQPU@h>AU{t?f9b&k>2(_v~{
z-dGmT&_&bYc!7rUV1k2krpNKx&8O7p8H$bP#_^WWiMNg4dg}47XmmV)eRJb7asvsy
zxp8?X0VEoIZaiYkMkfXjj_1YIcV(kX9`xRE8eOu`=<|7_pA$B~2Q7{(E8?oXah~xH
zPdy073L5Z><1#qT@BzO#j^LQO9we+-91pL!WQ7QiwIy+N`6VlybobJ@7UY2@>G2Rv
z{U8p{Mpxz}3*EOYu9Y;S=mR`7-iK`Se4|kRq0^0Eq8mSSx)CG{{4g#r(t<>FKa3-q
zq5u~pVv`T!mAA=4WM~Lh?p7<!%YgjqxN=h>kiG7ir}52^7qTxr^}?UKiHVz0iZO;(
z$A2pa5onaY+AW=C)atnW91@;#G<k6vBuZZ$PyI@k&Tj>BiS&(Df|m|-WGmh^Qje^0
zYe)ykYvS?%Im7q&YvLhs8yh4L*2EE<iW<`8iZ$`<^|B0_dt~F9c;$6g2VMrKb?g?~
zxa!e$ZW)vTSm%~O(`sE@UM$S;X|*nnXj7DdYgTyL)M-VpEMr~#%3Jwi8yXrtw~>8m
z8yg<k=oUgVZll{+G~+fpGY%@K$i_I<K~V_ZtKJyT-ytjFd~I}Nyl}gf;T6GZx|#Xk
zGqR6tcFUmq8JpcQD2cE+E<Y5K;Yozeajfg2416vLPjgO1_{Wl9#pZbaR(i`5^?(3Y
z!}pBpx~*;*lw{Z%m%Cudpp32YqytJ>gspJ|x^odS0RoZkPIl@&<DEx#x)5~6z0)<5
z(g-`_VR8KqDuCD-N0=wfG-1WgIPUO^sbR|5vNPW7UVdDkp*+JU%vfa9UH6Gwh6OV}
ziOW<4WKhN@@y1t4P)aj=60hxKEu}X#GZaUE9akPp%<;0@_h@N*(jsGw@+er&(5KIN
zd>xnh1IPpJ>$v;|5=g*(9j_MG2|&W+uj8#Al_vXOG6kGp$6G&QeM5_5h7Qk9*b|l*
z|5N<f3AYr=Qk;m(jW2{y%89uAtPn_)a)SK3XqXa|aw49)OO{e1OF0qG-)U_Vz6?S8
z`MCY(<;MM<`txovl*l+A_lXU4h9@%4$1@^N1QNxZkIOs}NECBE-r))1wL$W`R_Eg#
zALs9Lkbr!j<9z&)M|o~ELpy<sV(Aj!E_&)2Hs(je-xg0$HXey33?!;}(OJSkqU?)Q
z#XX_|*e&$3d#p5m=XtOfl0&lQ0gRts3AuP>6#9x&uY_E@Kmwyz0*e;~L=|D}l|<27
z2@w!gK=PFY(xW`}T|og+zl2DAg8*tjB*J(hAR*f?Ap;_iK<$@6K=d`m7Zv1bhuGR`
z<4;QU5aj2i60HzJ5{7tB3qnvDk|>K<`zRw;K|XwxJ$jAtxu<%Rt3+6%TqW|_qe!Vi
zlmv33J$;?gSgD)nv_S>;y%U`_011qViLl6agCwN{!gIO~RzYF@l!QoCgFp{VNyr`m
z3C$@98AO1D=9GjJL{!iMGb_P^h(|#HXqIaO`OR6b4dgdxIsE`(AkA|6Asg1_B#O4n
ze#k;{P6CIIydSdE5A#Gnusb#xTGc$K8}JCC^PFw~3D9}e4HTDVspaOg9-9!C&UaO)
z6XqvmTnZVe%ugV)J5OUOOL6I<gtE-uzRCDs&lC7p3@bc9brw0*0STBz3Avns1k9oY
zmNQ!IL1MLElt?X06!QcsF(B}MLXGnINVJ&si`m;-j7X;?3HfrWe8OK&U7Eo68R#Y2
zOHB052MP5)5rt+^rnWkvtWVhEry97D4+d-mM+{PsuyJ)l2BRQh!s>(!MnS^H)rr`8
z*hpWpCI*j-K1!(T5+WFtJm{@S$Y4~m5ErdYP%yfaJb9J^Vs&#u*~TVrGj`PDKd0Gf
zJZ(-$rv*8fv^h~Of)0>?-kgx(JV=<dInj6<Od@|y3=z(6Nyu<svM^P)CJ@fAp(_EE
z*kmP&zDsx#3q3f0fBqSEcDu18{7C{Y<J}4CDk*Z@n^3-BYjzlS)Z;(VK;Xlgy$KmO
zf`m1D6EbiF32XKyB45Y`A_i}uPZR3rvVkNIdi$IPk}NdPXS{)Mdk_}T@o+-<HlZfi
zu${)W^&lK0Xh7~y$hZ-b0NbCCaU)0=u|E<1_L31YZu}~tesjqPCvH5DkZ~jFiMa9W
zgp3;{3*B)rq2XR0`M+FPJDeywCg)uah8#{96=L4yXx{xG=3N^Q7+OC#MuUXx56;8`
z38R0YiAS%}<Y;ajWq0g0n%{ENab#c;H^JWv@{$Zxj#6WjA^EU&B2m;UDI9Sgk|!=X
z;yf90S~`G7K7j)`?bv}w5IybK0TQ669S4vnJI;~=NVB(~*ZQohN5-6WyZ{8Dcb2>W
z-{0lQ3;di=dM4$}0t3|tNAwv;sQ>KDERazD*_l}&(Puv=Vm*^$W)XuAobE~W<)oNd
zk_WvWNjbA53j^n+B+V>pmqJ+UlPpRPkPTBnv3-(`XDm>|^i7H_I|!KAHz`d73E93$
zxk7<NQGJu>A^MVNf$Z<kp8nKmRntEykH^3yZc-QTK7oWv|0E6>C^4)y4r{}cMRV+r
zKSg3VFg%GPVmcFSOh$}kGd{za;7A7wOhAoH$`|B80%~LuojroQY-1{ZoE`bxNP23=
zC8e(b7lU(LQeMLZNm5DqVPBBI7?;F{eQ8cNrq!~6{l71ayK5U<1nQ=Sq+I(U1B8a8
zT=zf%p&^NNuQNvgHJP3H!suE%*+n21I@v`a7dkm9&-)s47dknK0G3wH#<X%yW3T^c
zB-!g<;-0~@q+B=g1bWkwa@_=pvZf`Sb+a*<IXlVMO}1pep>>|^8bHhDY}Wu<HfJYg
z_yR=$%}yeG=}%XAnuN7A$)fW~yZ9@kuQ#+N36IAY%_h_<>&4LM00NlnouL5|nCqRP
z0TP(&X=v=F&S`>1)3zp+?e??Z84r8v@vj*5cmTbvNqMaZB=oi><y97t81-9|>FpTx
zw1p=Ije2!kQeI_|9CX~aq`b-^SpeFW#8nm~xu6GuT}gbkKcBttxyRWphmB@cpdBNq
zPj@BdX)}bOyDN!>_ff733SUn?Y&>4I$5o+D+>?}t%}sbG?n&aXnO?wbLY=se)qHQX
ztJ;^8p&FP_*_V`8GC%@%UlL9k-_L;xn)3@b=zF7M>o1b>0yLOV`68JT_sl>-<%=W^
zWoJ@!*96->?c1bsB*{V_nXT*=M~r`Y>cMcTMLWK4lX9(wG_=1>%C#CK+V<OI?1=Oz
z#NZy~yQKQP^eB=Cy+e*ikt}$W!`!2^<%VEycr>Y0CYoef;YXuoEeNq#H{m}&aWpC4
zA^-`SjwWN`bzYFbKAJ?rfChgP+W(!P!CzT(!Ws8qLgj=r?m<H3#HDfHgf@KV#JIl>
z1X})_TR83e&N%}gPl0sK8TcT9bdCo8?Z~6!Wz&nvqL*0em~mV1ViIo<<&Z?i>y~iC
zN%qfUMn3a%Qf9uv#en)biOe^mLI?r3JA030x~F938%)S_Psxlme{-@2J9o@zQqdzN
z<}?&(VD?C1yg!7gcSTt1l`0y@Iv+P44D?DFaXKkduOJipuqnrl>udX@WV?cis`W`p
zw*(R<^hwF@oq|Nw`lOJ(C)a!h+1Hm{al&X-+t)=P*Vs4Z6PL9hLqe&92%|s(p>GOd
z)b$(zb`D@eP8c`V4R8@?&<;q+3ouu3*Ek>*6uA+QKo~$a+=99_4Qqo^Me|tsN#o|=
zpcH1odW!OzQssuSXHOa**A8`n!36M7r*a@++R&8rxgY^Nlp6ML903nUu>U<}{G)D!
zi$I5=BU}Wk+=!G6t()@7jYwgJ^LLe-QZJ0Rt4|vbd8)>z<b(wmO5>>;X!{Ei#g0$m
zbfGIR7Su#G|BP{6?L@a&a`h9P7HKLrNvWXNK!YTm6kPr7906l>3Tu1TxU+VOi$Lk8
zDJ}vzjVUey-z*UV-VK3Cke$w!o;7akGTlX>obB|KPfRh$0AYG6-Bi|se8}`v^A^@_
z(f;ruvs21kcI!D~S3Uj{^R_9!nl{^QK=LKCo$-aIK$%T_OM4TL@FlZTg}EsaWD`S#
zigQx(l~c)rX>X_SvgEB85?6+`cT+`+Q=UX!_WtJ||6{kVY{Ge?bKu<+USEl$epk}q
zSipWfZzQW0q@-H|6Q(Rk$tVOQOj(e^QiFpksNms3*71Uou3hL<223>6LZ>nyNyr%u
zAc3%uMgwL%5HJ|tXM-*ng=^n;5vZx(cM+(V_fs<O2^Ao`pMo3voHh^5!rBL^qFt!i
zHEhsuE5dv~8LLAdq?{XY&8S|hQas3F|Gj8v)vKJ^;SrEmIkf``<W*F=A>{I#QMn)6
zb1xdhJk=k&N>rhbQ*r|eAt-&ELg-0ewHZ}tbBb@qhrVuVHJhdTp(oJWoRT30Na$@&
zIUz+eB6p@_NZ~QHPCK3Uz$3KBPNzLU0%&JSh7=&VCOm5&9qrK^3r(tMqOB-q@8Zz6
zDSXM9M-<Je9S)0jxEcf?4?A@N3CP1vLx2S2VQPpz6j3xM%a5gSH}wqvHLQLm)!BP)
zxcmN_@44ant1Z^jFgvnuuQWm)i~X-*=I(;1xS<6_t|_mqf&}idl)SPE5=+prl)SP^
zB)=JXEQKqpi)q3%r`9~3VuuZL$z!LT_5c^gpLW^<Bnmm5lCSlFL?NeBST4wufJ7mu
zQ}Tzhh!h+5(<%H=7H*_dDNy(+#VpJGq4p=Y6uNQvQ%c@igb+&kDJ6d>3nW*<4`tzK
z5fE@M-B~-Id2?O&w4Byp0-<|aX5v5sp?f;Re^P{0fY3dS8w^`$v^A$n^|KfG%x#{!
zel7-ull{_i>46Y1`laQCDv-eFm&UCN{BjFnpui#adcXOBr*4RgLCNVME(W=mA!+HK
zp#zK|Y0OC38i+4OvNZwo$GVX&1YKYonU?o=oAbzGWI88Oq96e=GTo*vp99UQ#otVe
z`@6vqCc&F&8CT;G%6>B~Cjm$(zL|C=L34^P8q#7CbPAhVU4v@@g%=HOB`CaTNXtn8
zMF2IVF$r$Q9B6@~t8~#ftVh_qsccFb*TY|?aohq^K%1FX-nRFKO~q4>e}x0a1AxzT
zz(E3hW?J6G0SWM#X`Dll0|p5PJTskrJ6&u=@O>L%U`)}cOlGCkIcYD?`CQ^c_pLOx
zh!G@$E-?|(%?_k#mv}Wd4CTGU{v0uDYu|B=qL|^Gv|RC9@VWF(T7H-ZB!J&ZV}*Q}
zBjAdW&Ay75zpJ-h1R7JeTP>O>c3Q?QE%-#S(^yyNiV;X$F|yNz*Tk0{h{m!46YO;3
z-}BdeB@6eB?DQW7dg!(b)L_QKw9-1!E_)Y#NwV8>?1QLzRV`Rf+tNH*n3kar<YC0Z
zbfSt+Pmo-{Wh?$Ilom9P7PEFS^V%+pT?AUD7rPBX^JsBeF7!|V!s0ZRX?kM{2H}gJ
z%hUM!u^lrv{ty0h?4X&n+-(e+Nz2pnYv0fU%JMYAebLACy8ZHWv(=aSm`;LtAFoKO
zt1k7i<U)5P`?1`Ngg)e*`jW5&6<^1qjm)04>s&KvGOlyYpvkz-8OJU7WL%fVNfBLX
zZ9%sxK4#k+nVoAtb`fYUe(W{}Mfo46gCgG#6&Ukz8s|Vyas<r9E$pti*{yDii$JG5
zThel)-hxlcE$M<dA^-`5EouBt(TC(zTF|82XCI53t37r5TnxG`y3fU+`M57F-?@Yi
zF!rVK&gJ(41E)9#?Ndqf2T!MiE(YBeJ(!lqe=Ybi&cU?&$PGwf989M&*2o0*40wfq
zLZ)b{ozIwYe|SR1YtlKE7w_3)=4X_0@yans7y_FA2n0RF64H>t@|@?wcsP-<=4Ru}
zL>#%$7=#RM9wuh6+%@4cpeC_Tnww2ClW^W3WoRjyltBjM4lV=JCbMh{^RCQfoRLTw
zx_&b`gI%V;;UVY17G~4zl#ICEin8eX&6EuC{|D%+J5^zAX{Kn0y`zQsl^R%@K`=&}
z+A6BlGPb6b*{*6CPT}}m0Tb3Q%gA61B#c-_X4Af~iYE6;*1WaZzG|hbLJROpSB0F$
zN>ZU$^sA^&tJ%QTW?j{4SA~F9yDBunSCa~Efk6e-T6U(j*`;c&t3q>nt*b(FdM&BY
zAg-c0y@7RWV|K3E;HuCh-jFfH<b(`VHe~#z*5A1b#>Hl~xsCbH>dmeS&DhNunFgrh
zGj?+ZX@ECqwpG#Ex1If?tvRG-yQ@RfYkNipYmh-P+i5h6wb1(2h?O!$!|kivnHg{J
z+YDmHmAKHQR#Wpc`%hP!tD4oYtX#an1sKc5#mg`t0miaed{^T89BNHiYsePuvVYgj
zyiRG{kmXyMVzq|uQDl`FS(U!|s)H6EP$C}t@Q>!#ZKq~&Oh6eI@d$k~Evt6DjDupP
z6KA{+w$+erE9}qyWHxxKR%GSa02j8c$jY$+5=tww=mOk2gAN|9VzZw%Yo1t@mFYq-
ziJO(T=|MteRTj7DDQ*G@&#@{S6dzn7lAjE&%7(7yCxenhUtw64?a+}Qz}L`#TFbgT
zV_sFY)-{bvUz?R#ddQ%hwOP!huG}<G8`$J$%<Hb(kd?l=hDW>`vNGxc34{&Vu-F`e
zB%LglK6;TBrec6?$to=p%)<hIHB;=SXU*QV;E2J6=j86PG7bX?v@O|;IPwPxv@Kb@
zGWr4s!_eEotiPInuifDy&^B*}i$EiBM>f-1HWjTMJF@NC^KXjP&_LXc-wHN6)$Vo?
z$nEcTYeeI6cUH!%Pyxd3toY~wDg?K`m$iS+ys>t#i$KT!dtC%_`+Ku;pAHou?9Jj0
z7<vz<hC;B<*n;QGU)O!+BG7M&e&!-jEcRJe=0>3cgwL}0#i4a{h+RW&|FC`Q^XBcv
zb%$LH3d0V&807X3yH=3fKTKA<N^ZY~4)2fK+y8F%^K?4yVvyTE?qbmC{c+b0a{I^0
zj=6MtUqh$&7qj-5f12}@x{EFd{r1sC7lh92FJ{ByiUpJaaxsg`ov(@^f)n|d*}#9B
z{kpzfd1+kGd+aY)UK(X|Apde@SVSf@{6PNY%9gG9%L+AgMYeaP(mv6QZTgRyU@!c~
zOxA+oj4?WO?_DY1@PIV1dRI0Q0WwIK)4LMOA%%N2bb$UUTlXJ?d#}0(6l=X&DdQx_
z0O8fjL|Zw==<NK}$_`gqzvT!xIv>EUd(nKPc7TgOC+7p)`q0VwfXc8)M%3_=^8uC3
ztN2GCYUmd3>+I7P&HHL!cM*a>c-=*yUp{)hQtmdO0vleh#OoWh;MC9+-NEcH|25m!
z4t5dnDG+tAi$K3$G`Lbm(og}y;7a@k6aBni4PD<I#y<P6*|v6=i$K3yG|WZdFYi{$
zYc5a$!m!G0&iX4yz}4Q7?9O`g`Pz{#LKzT7x(H>kVWeA&G9ZkkT6E(Gxb{1SU930%
zSUbi=h@daVRLVqZjS>OEm`ZW26lO<&Fs8Dmm31#iz^^fkXXCq@_t%bh5u&hRylX=g
z2;<#aM1e4#YC)-`8U;VzFp;(HVcu3Z(M5;>VWNu=1H!~g8LvVG2oo!DIs0`nz{~L?
z9c)n#^NqTxE<`yXrn(U2fS6h-<Nq3^91v40bNJkZm}re~_-^-o$(*Lt&2upt0b^dJ
zjL~Y8M!=X?84@q=fdt09N?f((8O9m~KXbi+J=@FtxXS_;0(bJ%1(ou84P*eZpi;h`
z0}>DmD)D;G``ApOG4S5ohDv3l{omf^HQvYZuQSCGuw;W<n*?AsRLUJ7)Bv-g5<5T&
z;6WmQ-%wfDSShk(#1Pw=k1O#pamv-yC`mZ}O1@9M3IvSYQYqJZkU-y3DL1Mhfxe{@
z8`V!mbElAksZ<Jyk6DktT1Pgizd4~Z7>=nan7Y$7H3hJpuBj=2?Ics*p-*783~OIk
z7M-fJdk-*M7YDzt#1ZQn+OM{xrT(z}(d*`|o=%4yaByMiVP|lH1o+{~n8<g41o+`f
zBy5M!1(TMv_@1n^?|#FKDxFTcAe5y$=~xIUE+*f`0|}6ml}JdRrO>8TSbI5#Uk95w
z#QdiccsYmA2H!tZTakUeS#xGSQPn#q&r!exRPS6$<Y7Sqs&@|CvnRL;9`<Dmnfd!p
zeRHz8TJe-&-<)*BAW0}EmwS*v=$pfG-;WZ0t;5=Dxgy4XJKXFWc`b*{{X+n5O|}fm
zDUrl&{5Px1Mwp$dL5t8CPXRe7Cu0zhfE<)V48ni&x-~V@Fjhap+*v)$)gd#6<>Wj6
zkb%yy9FkX$!iqLwZDbB9_MRinM`9z%3i3y7V1@Q(PMMHX6OVH{zFlC3*pUHRDQh{(
zY+H|K!Xiil{Y}RrkU)QvETZ8H62te+Tx3E{96=L<9~h0vspE6v2wL)>H#R4apd}00
zg>gAbE|8aPLzSD9!)GK5S+;+aSzQIfF@mZ%DJM^@APKNZIh<P2IYb+Z=BBbvqs<$i
zoC<xu5P=DmsX6(XUXW0knv?e@K_c*&nrnJ54_}GoQRCFymG|(dQF171oSM7yE<O+2
z5X8)!xWEJgqkCpf&O?wWZe~u-Ly%n7Nf@=E&~I)|B#dgtnA$^gok4|17~ylBK?M>(
zb92&NfCSLo9OfX7>Am=*)BIe~qMZ1w9j#gObKW@LU*eNZ_yK~P(p2m(LE<TB@wO63
zG}60N|7)=?#K)S*|Lq!MUY}Wj7jCG@hzXemxyl^9?f??hLU#37^Oo$woP5U$OycG+
z<Hll;d-1iFrMaRtY~omROkiow%fE{24U;V&u)D{Z-7_EL<eL~^LiGchANV#VWMIN_
z_QN>yH<{%*xeW#rGRt$=_+S=72GmN{ZM^yW%u3nR#3XJG=VLc;88px;c5uA;tIVpL
zJZB5@H%wOL;9c<PTBxA;KVr8{Ft4rr$i<;8?ni`!U-?$lwqb2+uIPNuo;|_zDxt09
zJ$OdCE!Ad6PGsgEn`CO$JDh=uN2tY)oZQZUgfTmE*v_n`xUwzPai2Y8lDP&c38%-w
z#n9Q8ldCpJlFG>+bO#BHeL4L0$x?a^v@O;4s6BFu*;TDO>S9pzel#cd3J?Ou(VYC@
zaFD<_n#0OZ3rJg{PRM}^0-7hBfeR9vC!B!`lFK>+w=K2YIXQ42n`LU(opVi~fqTvw
zxR3<UIcMO41kgDexGz)dwhL=L^F`D1p2Ue_*8L_UVXv5F?)QXx=8a0x%<ZU|`{czv
zNDu(;la~$vB*6RRWjliec%MAlnZIYzj%q*1?mfqBrqm9~OLq+}YC0${GvgphDlgyX
z2MLTpdE8LKn{Fz8=$_6T56?CKT{qN4pjIB5m)DFT1B9XZq}W)41j5ifHr6L;32R5>
zID6te^B+pxI2VK3dt6?oM<E1^arvNdQy@txj~x~DR6A<!hP-ewAfVZhmo5e*G#m2L
z#ejrnL*D7Bc9cV%mKQE&oQ;E-X|4&BQk<5T>lP#dG%YV(3`hV?%cG|dGbn0%oZ97!
zR<N&Zb8q?VJbhDwLW%b19&K)3vGZ!;MfT$(R)QT}U_M<BmT=M#0PNhnbkZOJJ2x+{
z7J$S`F*hHx^J1kS245-W<<)odVx^Eg=)IGdD}`iXrI??mm4YJK_S6jv^U7U`8?tQQ
zd*+>wf)Ei69-*oWovMQ5qB5=r3G9V=c~c)GR)K~2?4A4;Ad%wCWnsSZ4r`mJHHO7f
z)_<Y7qiU&JQ!-#_UVdAmJs$^4^Em0F&(^i4VX&ONw#dA%({k4?8U@Rpu?QI;EYHi2
zI)EgdeESa85_)aBLs;9D$M?D_-#6>j5WXH06H}xEO_4ofigW;hs_t=&0tv`H&J+O&
z$UQVgKBX9~15DPw%qw5nU6+}7s|EjxZo>oUeVLcHZ9qcr%e=g80}|c#Wj_5Cx{Y!_
z#Gr0d_vhtp8_7XC?a#~GHj)LP{dwHB!P~gdgTTQ&Zrh~!ZJX2zvrq-vF@jq3U|!y~
zfiQFr=5f~ZXRZtC5c|st^XaNXt_n5bp}b79b>K~SD33H7{f0#cnn*{OvC_P<%aOeN
zo+p@4IpWMckib1cbB{7fATb(_<dZkbiqf4>Y(9^$zpgaP0!Q-KUdMOX9cZE*WrJ6m
zS9dz<^e>pib;cb?lyo#NcY`2N($PGU-F;|Obs)ELGS7S;ny=KIbTKIRa?-`1+{?*)
zSmb}81B{b-<bNnt)`4;_r}J#nhh}xB(=G%hUrxIalzcgz4~tz8bO3RhT;2p)o;pwv
z^mE>>U1c_STK(*{EG1li&dX#Zq@eY49&0kcVblQ$7p+f0>2C)=GG}<|@vqZ~lw|2s
zkPZNH(Cbr(#CWI(5+kWkp}c=VH~?aB2k=Tk?N<;EK=PpXYC$>x$$|suTObEOZn6XA
zYhEk3FQu_N*W&mN9C4u^&tb`H1?eh50`awi<0?B)s%B_`yUNEvV5kf&NCyHEEjY9w
zeI-aB4J}At2@*&{3o;zTH{eDTiY66AI7Zv|5e4~$(K4E<BMZ(KMnU2!Xz_(nkeCi5
z3ve0uB&Qc2WW#&4tjT)w_RMJL@Nf)F$c!$Cn<0<^HHHmZZ{C?1Q;^{pn8Yn09D9)C
zz`Akl;(GJp%(#LK>&kd6G_HWK4mV7IgX&IT|JVSW2?hBMHJHGeP{6SgK3@SDw82F7
z)dsUec49$>kYGY)VgVuK9Bc=@`1;$sg`&0gH6NQb#o>3U;`EYngeq=R#p!#A1(2v4
zXi;&H0I{j!^s;t@D*hfjvf1pCd9NTZQh^DX_X?Po$Pq#Y)FO7<7W3DcMNXx_Bra9z
zZZ3n0FJ>QXG4IVRb{Z$bE54W-=Q=KfiZ5lYwwgC&mKNk|#t~ler3K7P3KSz$@nvkt
zR`c4-vVsgI!9-ch3J4~#`alMgcLh7K)x1Bmq9B7?Fd?&|fZ!IH63Ae7e#ri~&Acu1
zp({hL8GlGJn8A?2>|4z?Z!>E$tL4ZgCS+C@;C^ww0uss1H7v8;Y?oc*whz6dzlPf9
zU5df+rMgXpqCM>S?dJUOrUEXhQ9nefA2wr-h<*TxrUuQA-{>hYHdDRnE7wu#hplYp
z4)fN`R>u}FA+wcid6CP2+QFhb&HBs^r$3{-A9hfGcI7hYhh1#$PV>6_E~owQT{vj&
zqV~g$T9k!;_@scGL{~OqE3)8icbP4-V2B@^#bZc+Qpn}4?<pMV7}oX`a0RdDF7t43
zUjg9=56U}I^$xJ^yUhtz2OJLsChBpZAj3qEFy}x4YapdFJ5nXTVRwFlbmlkCd<PR<
z{*5!=L6T5GUg7}>gm0*N<a9gIpgY7?e`40u9dZ$9KpZN_Q%cAH;ZUK_k*_KsfpDmR
z3mE)+G#!aNZnxQE4)D|*FUXY%Tqqqc$fyt`Nl_1fNb5yMYO*s0_QPItRoxl4V2TgV
z6l5kALclmvNQmeZBrwht5S^0C>_{W~e1S)nZ9zcu|Ce?4@l_RP9?w1AT)ETT6)uVp
zZ7!nc-t%%36$DJkE5sMNtBY3cwzYO!cWc#deQDj#eq_4|+8SXMVg*JK8x!jXY(?U(
z<_ZduE-C`@A{4rms72Hk8iH5?8qxheXXbd@&;ECQ&w1vVInUe7nKNf*I8K*9N)E^A
z5=hD6&(r0F@_ciaHNBZmG|X{ro`i_NIj+r<Kt#-OZJq=oVvb9myh{c&H6%*6tXTYy
zx6+B^sE6Hn%wHo`T<V&Y<p4x3b!~S7MC4M}8WV`fr7p&ll`J))<xYLw{`AbM&QcMv
zUZ-oPPvD_Qr^{qTV^jp|b?cq`)6Fg2@pIHfi*&l<=Kvz1+qDBmAQHM=28_KjimCyo
zmb=ahH(Bw7zG9+UuAkm9;uJmdz4V=}&`n1O7ebc1wj%^0WVvfc!azF0<?fgjuIUJc
z5Osu4y2+<p(-B%4<$mGXj?j|m2!H9u9bt_)MvrSc!ejmE({$zgyq`ib9U=E=Nsntg
zLLd@*+_)pG5vS<YSoY%?TqCQuq!$^`^p^A@F47y@7iI+YihWroo2<>GR=Z`}^@880
z|8CT3cf{EyMr*~oYpitv2wW5E2#CNnv2}q6TqD+%5399eg+9Id59xoa>MIoy>-M>J
zb0T;s(&zHufP6}-mDpUbzj+{iP1SnWPVzyd$a>fA77e7xdY1tZ*`6YxSM|OF>FHIk
zmTD2>z3STiFyRp<m!vIWR4WSKsINGfKC60TtYwH4*%)gXNRf@7Yq?gmylvTI2h)lA
zZLxkK3N_X*5E0vA{Q?oOP4xQ>^gAt++Ub_H>;6BcuN}419g#EoohJI-ZS@O4;O_V_
zfC$_j>lcW?-J;)s$CxH+*`voEN*Aj3l!}Oc_r%cy4@LG!^stnGBIvhY-*zZHtGd5b
zL<IH6CV__{{bG`>GF3lK;KAbHq4ajA{$Tv*P-*GG_|bvLIOy83GEfS+^h^gN<fe(n
zj}%XQkp5nx<w!|}Og<bb$q)-1aqU+|${^#2OOF$U?KCWqI_^3r{(sp1u$7yL;;so^
zAfk@P!3#vx@i=&a1n+To%n2L3LWqL*BRBbp4PHy5+{bb7S`xuK{CV(Blf2rN$eFi&
zkieXcTp-P8%h|{UBCahLNA5HkVBC|lZ~H^()bx9DHZyaJ=eZ|mGcyoD_vCD51|sO5
z9G>;Abgy-p)Vy5TW4S~{gZ|wg)1&pLgXJlmIF^2O)V$n?@y5~W#L+r(CQSp7-@%&u
zsDlF{zawYUG!Xe6IUG&ArcV6hLA~sFdRE<oaSI_L;la3tKw-++UEqO8creGXLp~wa
ziQg^OlRipcSHHL<L3Fn`XMe1Q2MLRFuKA1!M8e{nUFTOP=wYj703{!e)eNNM!?Buy
z5pS&KI&r>EqvjSsgsh%{JVj^eDZ~XkV?A>hNu8qS6=TtJJt3ScJ5>DIaJukUqju)v
zaZG&_!$!3i01&x5RxJ>byJOV?5xHAbyGee3tCxp<rudx^>h)8nJd?MM169cRaY1Ar
zAcdaE^E*?tN~#`prdH*hwfSVlvnR<p9#0h61*Rg=3ei{;79_07+wKd9gjIRleF2Gp
zRrxV%^QQX}LKFe3^T{=N(|uVQ<zC3!?#q&hfEV-9eRYnG9)bRJU*6fDPZpPD)zb90
z0A?nqKFSjN^45)kG-_Yox-k&p`|^zc<vRqBM(xX=y`M(OADu#=QJDIjy#0(;FSdL?
zA4Qv9>#Nkc@0WBYwtGKsgAGoEzn_o2pk5OAKt2k#765VvO3jq)F;HrzWRHPTGbMWr
z<ne-o5^W8c)Cc*pdHTFi9T@dNK3?<OAWm>BAH~;X01}VI)&L^$Sl-4L5Q)d~I6?GB
zY=hY9le``-sNYn7QYs`)@JT*xPA-9oLZ9SMAFJ+@@nnO<RGUsztNGP!EW(dG1tMkI
zypy9<V!}h2Hjh<e((yG2y4y3k3V>$s_N>bRDS5YN)d!4tWA!zN;^%rseSipAD+77h
zxt_H$5J_`AYh@sk=6a~Fn_Z5QjhWQ_UfGkyndhmq5+m>T;$KJ`MSlzR_8PTxD%VI{
z=vik5B5|Q-)dxi4LJ#$=l-{M0XHG5goX+B96IFGhl}i%@+@RbN&jtaIa!WiL1VH?4
zi8rRxGeIDPC<q?$l0WlI5Lg=JmU=b_EQug^)QiV(jbe;$@6RSPPPqW*gkr{U+@~eo
zv37w-?Dk^qHVRyBv^xWUc9(lryFhfYJk~A{Ny}sH0;8g6SAH~V%A}t1${x^dlhs$<
zr#y1MY_HSAvalY{dDctHc@Zar&9X3|=}#xC=P!N6OI{Mqn3-EV%zt^w8GlBhlK&P;
zEUxG|FCcDqEDZ|?Nq;&;-8u95zbG3`1bE5Dk~A^HYL5f4V`(pW&i^2d*;?B;@|)0f
z-&D1ub)9F|tVN9zP4{`pn@i$EdB5^F9XJ-Z-g7n}PR{&`ijbcyNoGF{2_?Sl*%ST@
z1-Y+y_AEg|LGG(w@+{fu!zgi+=WIprO|f8pWEYaYphn$z!DcVnP->LC0Ke|p9f~4x
z5(ZnO%IMv<N!)#hxO;c?j@V%#(ykq`qXQ|kLmYjRIC_&f(Vk*gt-35xwWm}_ynK&m
z^8`#3+T)QYWaHB&(O17dqfXUM?2pp~M2hssX#z-*en}Ib$+EvDU~0&7j(f%SI(4G_
zTU?uj&K;a_D0W65a)x4O1R`h1vk4tYfDL(PA1A;hp$owz^kW_g{U@^Yt4R_|d-2`r
z>g1E^+x^e$k=NpO-+pj`iF(@oktUje)YI-Wx{$QiB&mI#Z_*lolJk5UctA?d^KDuK
zQgWUj2VRp5K{|Ys)&R7nqtpg@JMQppTH`K~I((bffJo}_3A`u%n#gM=#C%p{K6eRc
zjgIW``MLJ)lW1JC*txfO<K^lniRxb8W+tcz>-Ezk@vU-ULRhaaJ9S8IZx-{c)@ROA
zPgJiil@U9y_U(%?Jd|1OGqj&)Dw4n`4$h)`IKR&~$Ce;TMD_V&qR+zuDb(j<p$$<*
zBg!(VSA1u;e(Fl~>Zz~zBmRctr=<a~ZSa%T71Q;tSMj6MBVSfERS?Y43*1KP27ioa
zn=f|X;D=SwQr~7V=|-KnO4V0w^pmFhf=H2#{%K|!8%U9jK8txSj_O0zoAu3CsY|Oi
z`$@BPadTw5&HmVEhdtUPw%hFUK~z=@G>hrB=(n#@7f;;cC!;0ULZp^0{%Er_4@i+M
zK1=gtb#Su`xVQPq#)@;zQ+@Ahm8*hama}u4!rS~x33xGzjIy`+bq!V}O!d8?U%Fad
zS@njWG@jUOmb3fg&b39N<?Q~%3!(+g%`)@1Q#V|rnyPk|ipUK6&QcMXVc#i5<X81(
znHArqe|e3%;@n++(tKcqNReIs>E;{?AVqfh)#s@VGBGoq^X7bZVGX~cE=gt%`h4@2
z^Jb^xd8q;48Pq@ix|-I?mHAg6I?@LGQ;aQvNE`53Ya*jCAVE9eR}A{*W04TdHx!>`
z!4k%ng1a5^`S_J#C6y(~Qj0@=L!<gooNKzc-cjHAQpNtnc-?dTh*R~I*Q!0=hGen{
z4A}6fZ$HffqXKrDX&?<d>ho`am;;Cbj`~w(M!Td4jBZc8RNW=Xak?bBVc(fl@nJ%*
zyne)K`tfh5KYSBPT$!Ya;W(UOr?O$+zHI`LHth4ZX)2S6-C;jF(N-3HKN<GNpRYcV
zg=5ntLv{qtqT<2p)a>$BF5_AxL3RW-X~0J<9l__dNT75C)M9ik39=)|E(**D1a>n5
zc_2tG49p0`(kS=Sz>YvHi4n+yfs8=j{(?*)b5zG8LD@!q_@C5Ur#uprpAju786){;
zsebdHRdsf0V0SHrh_aRj%%OCkyYexji>_k$9hFH`b_Gtf)>x=;bp@<7ZjP8h-TLb{
zs2P>rf!(x}BQ}H@@M<D+-5j35_iX**4Qg`s@xZATWeO3V$Aj}Hs(bmy4kkaWD31It
z%i`--1Wpv*LWOHZaBlSeClFC9g7aI%0uiK*D}sqL6gx?PQS;OKD>tcWl~0!%Ba{43
zOJhuf@vfD+=O!AwveX!v<X<U`AxMxzO6bv}ZdMK1p1^MS3lW~4fZyfV%|e)PhGOyi
zH>>T5Y%y@6U>7P}#eiMPcbLZ_+Se7Y`xkY!lU-M8lT7rllQzj%pHc+)di};N>VLEA
z11IurA;PpixUg0Y8zw$(y{0$bs!n8IE45rU<9#hSe-in~NzP!&VNkYPzjvGZ`_Zol
zyoSj9=nM(^t%0*W(AzuJRNZ>JO0|Mby5cTM+!~BCe{uuS@z#K8dT~b}?zlBLXFKjF
zBPAh3p}#G#p>HX)V_RTD-;yNsw*`d$Q67Mj)Uzva+=}-I{p1hS;YN@N5$<8TU2%v2
zBVM~45J;PL1$^-77O&>`mEQ(s#{xa+hw8D+Z-es6$gNKox893t%t|RBLcr1gj^#j_
zxK|7)UujO4*7WP@JJh+A{ectxdL%@6`UBDnD~y4lH}&j0)Rf9MOL8Kr$l+xj9-8)+
z-g<`$vv0+20Fjb!i5s-D)(0lMd$2g}U*!#UFmQ}JLxpQFU^+uW0*I)=VDhDrcMGJ6
zgTa(b<U>2R(a>T2%{x`q*@xo*fryC15+L7?c<}BISSvH(A9ZsblRm$?Q~g60!c<#>
z`1uDx?KHJeT<Uaj^dq`vwpu*?NU2rg=trbge=tlq`cR+;XR8C*p}@J&iV{a33i$kS
z4UX56Nqrpfj&c0o)z$9D0spbc@VJF{jJDAEahOz}$`+n2_8miL#oK?Rew3IpCrnO{
z{L0)z=3Qa()<2`5lDk7*GNi9=5l3zhow@p@`_z<HAdd?++cg5wS9^G->F0rzZ4X&*
zC5{Zlk=w)k+|W3(5F$suH?)pyDYW6<&^odui6h?|;>gjfc?+(Sn$MrS9eQu8+Vx#7
zjTdu+2F(xcU#dVFG(VgWr94_7UOYb}%a{hqtLFT0QU?u^E|mK;C`0uN!sK~!q`Z^7
zD3e+gmUV}Tin+v0--hxr`n)-6_Q*vcd-yycUED?D^h=5_%u%BgvzG8ftC&ZqRJ|m$
zn?eDpdP&G&-rmKgOTvsf6q&oy!$cgT>(p)|mhxT2%DdH96Rlk(vGPP+p`EF}D0-r<
zkZEBfR(j*EaP(!7{kSV)g>tId1=3P@!me;qTzAAo-Cbeh->PG>gFJ`dJQbF`!bAW5
zr132`{-8MYV?G&Xo(k=XNRF@}>xYhS;v7h$z|r@yav&9~2>CvC13o@h;=D&Uw5uDl
zJ)vWIABgbuh$-euUpH1l`nlpO?dl7O>~lz#=Mk!qLn3{pM8a4J^;P=tz3Q3ls?csO
z4iTnRA<H+SZM?@ysPn~ouG*Ge6FQMEQc@y)jrihvBZ*k<(<|qxSF(Mf{SH6Ye2xzJ
z4$m98REIOYtQY>LdLjFA=tPG}2oXsyhpZ@S!apv~q+Sclw&?HQry4V_g{&u%IJsEj
zWK-z8E^$)V%9R;2LPr^!LVMN$kO$fnG9xbz3B(~cg%e)45h8>rLN><{Vkxv>a~vU-
zBoVS%BIH^O$YDU+!?J!1c=`C2TlD@vrbp_Y_2nn)t?w}ht?yS;Guy-RbE2d@PK^0R
z=u9@o1kyyXNs&M*dm|(nvB7G2bR^IY?ax;=l{-S4iXg(XBP10`?>$b8wo|vwR}Gar
zL!0>^3N<A2$#Q^kV##0Yz4O)d%3p`hl*rr=;rVq~Q!7e@2Se`CbqiEu<*v|n5D?+n
z71BY-dJ2x-Vd7Rlyg*H@+#Nb~R*vN4-C<)>v^;@Bb>!3ep#|!q>~BguV#ePHkNmfQ
zATse@ePxH*lHD6RjaHCk;=SSY8R}+ieMu(uc3AeVZhS!9lzBVkQ>)ne60!BZ(AjTt
zB9Q99X7xJ|b?yr%n3pmj556yCLlChz5R2~%tM*%q3n8-jJF&$rg?79XTilYw;_ryX
zIl0Cu=bwoKVcExtP~Y}bb!g;)usj=?w?fQ&Fw{LuRQ?<QtvMJv(K|~y5V;3K&XD47
zP#`x4^y&vy{aFJg9x?8K@O&}i0UZjRTHU-zjn(HZR7n?TMoblvkq?Cz)>vMibr27j
zaLV|+p0!w=Iw9&%Lpzk^$RC6ah74uTi9}=X!+OC&m2(frKEV+`@EjJOko7zjV(%l|
zWbdO{y0V)l99gKUD<PQy1Pt&W5&tmF#TXyzhD9n{`C;sfoY(`;hvJLlBbk`~PkQzu
zH6i<_I6<-L9Xx-M1m#9NB-W#$esPh?Wsk<WfZgO^Ix4xqFfrB~3Uy*JOhYB5$XIho
zlyX)iiJ|7PP+z>5>W+nu8G5kWB233Z{_Zl(W~g~Q)a{E^W%hXJL_ehQ@G{ms9`Zw)
zk;E@;ABB27lFt69^l);p!$)Cl9lw7&$xAb-6Jgn1g+#^G`gdK5&)8bc9DO2W(|B>-
zOT~FV3!OOyz3x6WS+CTLOu=S18}8x}pM_sETlWGn=x352#d(1^?`NSmr(imCAw<sG
zR<IqqrO=?Zg6+^PNu0N>fb)LH8s>6N)0tl=>!y|aljDmQJfyzooHD;)J@^dq;01c+
z670O7U|km?QWq3(OBn=m3=OYvdU%NnD?19-9U;QgQ9$#I!r=iupj#eM&DjSEwu^x%
z)PlTKNJn&rBqm+_`6KFzM5Qj+?g}bgx_~z{M@)F?LwfY1YDV^<g3WMeM4tLk0k4{4
zB;l%$7Vmgeak$B&rTWA_AC>x|KIRNbPF-66j6SBT;M7KW2O>;e1&+hJ92?Heq@F00
z{X*Z?sV>VrQNVQaQZZ9Zx2)hiske2ihE}eO(V(M?Wd&<AAWyWcV2uXEXv+%Tlh$ZL
zh>W&8Hkzf-g5|N%EJ=*ET#U9xjK<MC&lbv7VYH`{<8^kRe5~&HsY(~0eoUR_WS%XQ
ze=$lxXNvirLzAX|0n$9M>EeM@^qlBJ;`>aoW3R4!TwRv!E!cNDi173l<m4&I)n|&y
zihADT>i)`Ni7BEA)3+iXp89z``RD5T?DGX1Kxal~e7?Y56LP%Tmoljr3uS#+TYYWx
ziv|ARk&yV3=yh$uS!Y6`6^w}>n8mC>nz*)Lcf<x#(b@uQ2_+_gsCR84x6Z0p2$6bU
piq&f=Ji<${dM!!R`x5H?cIwvKZ~5UZlinCQsW3uc_vP~N{{XV83#$MC

diff --git a/gen/go/fora/v1/fora.pb.go b/gen/go/fora/v1/fora.pb.go
index 0aa088cd..e78fa206 100644
--- a/gen/go/fora/v1/fora.pb.go
+++ b/gen/go/fora/v1/fora.pb.go
@@ -4497,10 +4497,13 @@ type Requester struct {
 	//     then case-folded, an absent port the same as ":443", a subdomain a
 	//     different party). A mismatch is refused as UNAUTHENTICATED with
 	//     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but
-	//     not for the requester the body names. A Broker applies this rule on
-	//     every request it receives. An Exchange applies it on every request
-	//     whose signer it does not admit as a Broker; a mismatch from a signer it
-	//     does admit is a relayed request, one of the two cases below.
+	//     not for the requester the body names. A Broker applies this rule at
+	//     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses
+	//     nothing for this field: every query it originates names the host of
+	//     the origin that member names (see DiscoveryRequest.requester). An
+	//     Exchange applies it on every request whose signer it does not admit as
+	//     a Broker; a mismatch from a signer it does admit is a relayed request,
+	//     one of the two cases below.
 	//   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
 	//     re-packages the purchase, so the request signature and the covered
 	//     `Signature-Agent` member are the Broker's. They say only that the call comes
@@ -7368,9 +7371,13 @@ type DiscoveryRequest struct {
 	// constant; advisory on receive. See "Protocol version" in the file header.
 	Ver string `protobuf:"bytes,1,opt,name=ver,proto3" json:"ver,omitempty"`
 	// Requester identity — who is making this request, the scopes it states.
-	// The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:
-	// a discovery names its requester, whose Requester.id and Requester.domain
-	// are required in turn.
+	// The Broker forwards this to Exchanges in ResourceQuery.requester, with
+	// Requester.domain the host of the origin that the covered `Signature-Agent`
+	// member of the agent's verified signature names. A Requester.domain that
+	// names another host is never forwarded, and the Broker answers the request
+	// all the same (see "Direct and relayed requests" in the file header).
+	// REQUIRED: a discovery names its requester, whose Requester.id and
+	// Requester.domain are required in turn.
 	Requester *Requester `protobuf:"bytes,3,opt,name=requester,proto3" json:"requester,omitempty"`
 	// Resource URIs the agent wants. The Broker forwards these to Exchanges in
 	// ResourceQuery.uris. Optional when `query` / `search_filters` drive
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
index acabca35..fd4014d6 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.json
@@ -243,7 +243,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
@@ -342,7 +342,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
+      "description": "Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester, with\n Requester.domain the host of the origin that the covered `Signature-Agent`\n member of the agent's verified signature names. A Requester.domain that\n names another host is never forwarded, and the Broker answers the request\n all the same (see \"Direct and relayed requests\" in the file header).\n REQUIRED: a discovery names its requester, whose Requester.id and\n Requester.domain are required in turn."
     },
     "search_filters": {
       "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
diff --git a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
index f54cb6f7..5388a992 100644
--- a/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.DiscoveryRequest.schema.strict.json
@@ -248,7 +248,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
@@ -348,7 +348,7 @@
     },
     "requester": {
       "$ref": "#/$defs/fora.v1.Requester",
-      "description": "Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."
+      "description": "Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester, with\n Requester.domain the host of the origin that the covered `Signature-Agent`\n member of the agent's verified signature names. A Requester.domain that\n names another host is never forwarded, and the Broker answers the request\n all the same (see \"Direct and relayed requests\" in the file header).\n REQUIRED: a discovery names its requester, whose Requester.id and\n Requester.domain are required in turn."
     },
     "search_filters": {
       "description": "Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.json b/gen/jsonschema/fora.v1.Requester.schema.json
index 9ff3275b..a035d9c1 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.json
@@ -92,7 +92,7 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.Requester.schema.strict.json b/gen/jsonschema/fora.v1.Requester.schema.strict.json
index 845e0e52..295784da 100644
--- a/gen/jsonschema/fora.v1.Requester.schema.strict.json
+++ b/gen/jsonschema/fora.v1.Requester.schema.strict.json
@@ -94,7 +94,7 @@
       "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
     },
     "domain": {
-      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+      "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
       "maxLength": 260,
       "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
       "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
index c93033e1..e6a3a8f2 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.json
@@ -133,7 +133,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
index 45b37a3a..0ac5acd4 100644
--- a/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
+++ b/gen/jsonschema/fora.v1.ResourceQuery.schema.strict.json
@@ -136,7 +136,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
index e7598fb9..df890e44 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.json
@@ -704,7 +704,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
index 34fbc10c..c44be5fa 100644
--- a/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
+++ b/gen/jsonschema/fora.v1.TransactionRequest.schema.strict.json
@@ -718,7 +718,7 @@
           "description": "Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation)."
         },
         "domain": {
-          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
+          "description": "- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).",
           "maxLength": 260,
           "pattern": "^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$",
           "title": "REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:",
diff --git a/gen/python/wire/models.py b/gen/python/wire/models.py
index f1673e6b..854fe27d 100644
--- a/gen/python/wire/models.py
+++ b/gen/python/wire/models.py
@@ -1422,7 +1422,7 @@ class Requester(WireModel):
         max_length=260,
     ) = Field(
         ...,
-        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n "Direct and relayed requests" in the file header states:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see "Accounts" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).',
+        description='REQUIRED. Bare host of the requester\'s key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent\'s Ed25519 keys. It carries the bare-host shape "Request recipient"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n "Direct and relayed requests" in the file header states:\n\n- Direct request. The agent\'s own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent\'s\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule "Request recipient" defines (the shape check first,\n     then case-folded, an absent port the same as ":443", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker\'s. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item\'s AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker\'s key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see "Accounts" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker\'s statement, under the Broker\'s own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation).',
     )
     ext: dict[str, Any] | None = Field(None, description='Extension point')
     ext_critical: list[str] | None = Field(
@@ -1789,7 +1789,7 @@ class DiscoveryRequest(WireModel):
     )
     requester: Requester = Field(
         ...,
-        description='Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn.',
+        description='Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester, with\n Requester.domain the host of the origin that the covered `Signature-Agent`\n member of the agent\'s verified signature names. A Requester.domain that\n names another host is never forwarded, and the Broker answers the request\n all the same (see "Direct and relayed requests" in the file header).\n REQUIRED: a discovery names its requester, whose Requester.id and\n Requester.domain are required in turn.',
     )
     search_filters: dict[str, Any] | None = Field(
         None,
diff --git a/gen/ts/wire/schemas.ts b/gen/ts/wire/schemas.ts
index 82cda252..55629e22 100644
--- a/gen/ts/wire/schemas.ts
+++ b/gen/ts/wire/schemas.ts
@@ -48,7 +48,7 @@ export const DenialReasonSchema = /* @__PURE__ */ (() => wire(z.enum(["DENIAL_RE
 
 export const DiscoveryMethodSchema = /* @__PURE__ */ (() => wire(z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"])))();
 
-export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:\n a discovery names its requester, whose Requester.id and Requester.domain\n are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
+export const DiscoveryRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits the agent will operate within, per restriction axis — see\n AcceptableRestriction. The Broker forwards these to Exchanges in\n ResourceQuery.acceptable_restrictions. Advisory selection inputs, not\n enforcement.").optional(), "constraints": z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("Constraints for exchange filtering and offer selection.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "query": z.string().describe("Search query for Broker-side resource discovery.\n Used when the agent doesn't know specific URIs but wants the Broker\n to find matching resources across Exchanges.\n When present, the Broker interprets the query and discovers resources\n across Exchanges on the agent's behalf. Results returned as Offers\n in DiscoveryResponse, same as for specific URI requests.\n Can be used alongside uris (specific URIs + search in one request).").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states.\n The Broker forwards this to Exchanges in ResourceQuery.requester, with\n Requester.domain the host of the origin that the covered `Signature-Agent`\n member of the agent's verified signature names. A Requester.domain that\n names another host is never forwarded, and the Broker answers the request\n all the same (see \"Direct and relayed requests\" in the file header).\n REQUIRED: a discovery names its requester, whose Requester.id and\n Requester.domain are required in turn."), "search_filters": z.record(z.string(), z.any()).describe("Structured search filters (optional, alongside or instead of query).\n Keys are profile-specific: \"academic.topic\", \"news.category\",\n \"legal.jurisdiction\", etc. The Broker maps these to Exchange-specific\n query parameters.").optional(), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the agent understands.\n\nThe Broker MUST forward this list unchanged in\n ResourceQuery.supported_profiles on every query it sends an Exchange, and\n forward an absent list as absent. It does not route by it: which Exchanges\n it queries is decided on other grounds, and each Exchange answers for its\n own profiles (see ResourceQuery.supported_profiles).\n\n Examples: [\"fora-academic-v1\"] — agent working on literature review").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs the agent wants. The Broker forwards these to Exchanges in\n ResourceQuery.uris. Optional when `query` / `search_filters` drive\n Broker-side discovery instead.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryRequest — Agent sends to Broker (Step 1).")))();
 
 export const DiscoveryResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Existence-oracle note: an authorization-flavored reason (NOT_AUTHORIZED,\n NOT_IN_CATALOG, CONTENT_BLOCKED) confirms a resource exists\n and why access was refused. Resolve surfaces the same oracle at the broker\n that OfferGroup.absence_reason does at the Exchange, so the same mitigation\n applies: where existence itself must stay hidden, the Broker MAY omit the\n reason (leave this unset) rather than reveal it. See the threat model.\n A scope shortfall never reaches this field: the Exchange answers it with\n no absence reason, and the Broker MUST NOT supply one (the existence-hiding\n rule, stated on Requester.scopes).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "offer_groups": z.array(z.object({ "absence_reason": z.enum(["OFFER_ABSENCE_REASON_NOT_IN_CATALOG","OFFER_ABSENCE_REASON_CONTENT_BLOCKED","OFFER_ABSENCE_REASON_RESTRICTION_FILTERED","OFFER_ABSENCE_REASON_TEMPORARILY_UNAVAILABLE","OFFER_ABSENCE_REASON_NOT_AUTHORIZED","OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT","OFFER_ABSENCE_REASON_UNKNOWN_CRITICAL_EXTENSION","OFFER_ABSENCE_REASON_BUDGET_EXCEEDED"]).describe("Why no offers are available for this URI.\n Set only when `offers` is empty, and not always then: a resource the\n requester's scopes leave with no presentable offer is answered with empty\n `offers` and this field unset (the existence-hiding rule, stated on\n Requester.scopes). Enables agents/Brokers to distinguish\n \"resource not in catalog\" from \"resource blocked for your use case\" without\n trial-and-error transactions. Analogous to OpenRTB nbr codes and\n Shutterstock per-item error metadata in batch responses.").optional(), "discovery_method": z.enum(["DISCOVERY_METHOD_EXCHANGE","DISCOVERY_METHOD_SEARCH","DISCOVERY_METHOD_RECOMMENDATION","DISCOVERY_METHOD_SYNDICATION"]).describe("How this URI was discovered by the Broker (v2 extension point).\n v1: always DISCOVERY_METHOD_EXCHANGE (Broker queried an Exchange).\n v2: may include DISCOVERY_METHOD_SEARCH (URI found via search engine like Exa),\n     DISCOVERY_METHOD_RECOMMENDATION, etc. The Broker discovers URIs\n     through any source, then routes through Exchange for pricing/transaction.\n     The discovery method does not affect the transaction flow — it's metadata\n     for the agent to understand how the resource was found.").optional(), "offers": z.array(z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("Offer — A single resource offer from an Exchange.\n\nCombines pricing, delivery method, resource identity, and reporting terms.\n CoMP-specific metadata (Package, Function) available via fora-comp-v1 extension profile.")).describe("Zero or more offers for this URI. Empty = resource not available.").optional(), "restriction_filters": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("When absence_reason = RESTRICTION_FILTERED, the restriction axes that drove\n the convenience pre-filter, in the same RestrictionKind vocabulary the terms\n use (e.g. [GEOGRAPHY] when the requester's stated geography matched no term).\n Advisory diagnostics, not an enforcement verdict.").optional(), "uri": z.string().describe("The URI this group of offers is for (echoed from ResourceQuery.uris).").default("") }).describe("OfferGroup — Offers for a single requested URI.\n Enables multi-URI batch queries where the caller needs to know\n which offers correspond to which requested resource.")).describe("Offers grouped by requested URI — the sole offer representation in this\n response. One OfferGroup per URI the agent asked for (echoed in\n OfferGroup.uri); a group with no offers carries OfferGroup.absence_reason\n explaining why. Each contained Offer is the full signed Offer the Exchange\n issued (including Offer.exchange, the execute-routing target), forwarded by\n the Broker unchanged so the agent can verify the signature end to end.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("DiscoveryResponse — Broker returns to Agent (Step 6).\n\nCarries discovery results only: the offers the Broker gathered across\n Exchanges, grouped by the URI they were requested for. Committing to an offer\n is a separate exchange on the execute path; that per-transaction result\n (transaction_id, billing_id, cost, delivery_method, retrieval endpoint, …)\n is returned by TransactionResponse, or by BrokerTransactionResponse when the\n purchase goes through BrokerService.ExecuteTransaction, not here.")))();
 
@@ -154,7 +154,7 @@ export const RequestAuthFailureReasonSchema = /* @__PURE__ */ (() => wire(z.enum
 
 export const RequestConstraintsSchema = /* @__PURE__ */ (() => wire(z.object({ "budget_period": z.string().describe("Budget period (e.g. \"2592000s\" = 30 days; proto-JSON encodes Duration\n as seconds).").optional(), "budget_scope": z.string().describe("Budget scope identifier: whose budget this is.\n E.g. \"user:u-12345\" for per-user budgets, \"team:eng\" for per-team.").optional(), "delivery_preference": z.array(z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"])).describe("Preferred delivery methods, in order of preference.").optional(), "exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Authorized Exchange domains, in the shape \"Request recipient\" defines in the\n file header. Broker queries only these. This is a FILTER over third parties,\n not an address — the recipient of the request carrying it is a separate\n question.").optional(), "max_data_age": z.string().describe("Maximum acceptable age of resource data. The Broker SHOULD\n exclude offers where (now - Offer.data_as_of) exceeds this duration.\n\nOnly relevant for DYNAMIC resources. Ignored for STATIC (content is\n immutable) and LIVE (content doesn't exist yet).\n\n Examples:\n   7 days   — \"credit report updated within the last week\"\n   1 hour   — \"stock snapshot from the last hour\"\n   30 days  — \"drug interaction database updated this month\"").optional(), "max_hops": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of hops the agent will allow its discovery to travel. It\n rides only on DiscoveryRequest, which terminates at the Broker, and a\n Broker originates its own queries rather than forwarding the agent's\n request, so no party receives or enforces it in this version: an Exchange\n never sees it, and an Exchange's own cap is\n WellKnownManifest.max_intermediary_hops. The field is kept for multi-hop\n Broker discovery, an open protocol question. Absent = no cap stated.").optional(), "max_price": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Maximum price the agent is willing to pay.").optional(), "max_unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Maximum effective cost per unit, as an exact decimal string (not a float).").optional(), "period_budget": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Per-period budget limit for the budget_scope.").optional(), "preferred_exchanges": z.array(z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260)).describe("Exchanges the agent has existing relationships with (subscriptions,\n contracts). The Broker SHOULD prefer these when resource is\n available — subscription resource has zero marginal cost.").optional(), "reporting_capable": z.boolean().describe("Whether the agent supports post-usage reporting.").optional() }).describe("RequestConstraints — Budget and preference constraints.")))();
 
-export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).")))();
+export const RequesterSchema = /* @__PURE__ */ (() => wire(z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester — Universal identity for any FORA client.\n\nCarries identity and entitlements ONLY — who is asking and what they are\n entitled to (scopes, delegation). What they are asking for (uris) and the\n limits they will operate within (acceptable_restrictions) belong to the ask,\n not the identity, and live on ResourceQuery / DiscoveryRequest. The Exchange\n verifies identity via the RFC 9421 request signature, then presents the\n terms the requester's stated scopes cover (see LicenseTerm.scopes). Billing\n needs nothing from this message:\n the Exchange resolves the agent's account (RegisterResponse.billing_ref) from\n what authenticates the agent, never from a value the caller merely states\n (see \"Accounts\" in the file header).")))();
 
 export const RequesterTypeSchema = /* @__PURE__ */ (() => wire(z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"])))();
 
@@ -168,7 +168,7 @@ export const ResourceIdentitySchema = /* @__PURE__ */ (() => wire(z.object({ "c2
 
 export const ResourceMutabilitySchema = /* @__PURE__ */ (() => wire(z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"])))();
 
-export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
+export const ResourceQuerySchema = /* @__PURE__ */ (() => wire(z.object({ "acceptable_restrictions": z.array(z.object({ "axis": z.union([z.string().regex(new RegExp("^RESTRICTION_KIND_UNSPECIFIED$")), z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("Which axis (same enum as Restriction.kind): FUNCTION / GEOGRAPHY /\n USER_TYPE / OTHER.").default(0), "values": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("The values the query operates within on this axis — same token vocabulary\n as the terms (e.g. FUNCTION [\"ai-train\"], GEOGRAPHY [\"US\", \"EU\"]).").optional() }).describe("AcceptableRestriction — the limits a query operates within on one restriction\n axis, expressed in the same RestrictionKind vocabulary that terms use. The\n Exchange/Broker MAY pre-select offers whose term restrictions fall within\n these as a convenience (see Restriction); it is NOT enforcement — the agent\n self-selects and bears compliance.")).describe("The limits this query operates within, per restriction axis (function,\n geography, user-type, …) — see AcceptableRestriction. Advisory selection\n inputs the Exchange/Broker MAY pre-select offers against (convenience, not\n enforcement); the agent self-selects and bears compliance.").optional(), "deadline": z.string().describe("Maximum time the caller will wait for a response.\n Exchange SHOULD prioritize speed over completeness when tight.\n Absent = \"0.5s\" default (proto-JSON encodes Duration as seconds).").optional(), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the recipient this request is addressed to (e.g.\n \"exchange.example\" or \"exchange.example:8081\"). See \"Request recipient\" in\n the file header for the full contract, including the recipient's duty to\n reject a request that names someone else."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — who is making this request, the scopes it states,\n and optional delegation chain. REQUIRED: a query names its requester, whose\n Requester.id and Requester.domain are required in turn."), "supported_profiles": z.array(z.string()).describe("Domain extension profiles the caller understands.\n\nDeclares which ext field vocabularies the caller can parse and act on.\n The Exchange SHOULD include profile-specific ext fields in Offers\n when the caller declares support. The Exchange MAY skip expensive\n metadata computation (e.g., retraction checking, consolidation\n verification) when the caller does not declare the relevant profile.\n\n Absence means \"send all available metadata\" — Exchange MUST NOT\n withhold ext fields solely because the caller omitted this field.\n\n Values match the Exchange's WellKnownManifest.supported_profiles entries.\n Examples: [\"fora-news-v1\", \"fora-academic-v1\", \"fora-legal-v1\"]").optional(), "uris": z.array(z.string()).max(256).describe("Resource URIs being queried.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("ResourceQuery — Query an Exchange for available resource offers.\n\nSent by a Broker or directly by an AI agent.\n The Exchange evaluates its access policies, available inventory,\n and reporting requirements before responding.")))();
 
 export const ResourceRefSchema = /* @__PURE__ */ (() => wire(z.object({ "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("The bare host the resource lives on, as ResourceEntry.domain."), "path": z.string().regex(new RegExp("^/[^?#\\x00-\\x20\\x7f]*$")).min(1).max(2048).describe("The resource's absolute path, as ResourceEntry.path.") }).describe("ResourceRef — one catalog resource, named the way PushResources names it:\n by ResourceEntry.domain and ResourceEntry.path, under the same rules, which\n together form the catalog URI.")))();
 
@@ -202,7 +202,7 @@ export const TransactionDenialSchema = /* @__PURE__ */ (() => wire(z.object({ "e
 
 export const TransactionItemSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")))();
 
-export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule on\n     every request it receives. An Exchange applies it on every request\n     whose signer it does not admit as a Broker; a mismatch from a signer it\n     does admit is a relayed request, one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
+export const TransactionRequestSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_request_acceptance": z.object({ "payload": z.object({ "idempotency_key": z.string().default(""), "items": z.array(z.object({ "exchange": z.string().min(1), "offer_sig": z.string().min(1) }).describe("AgentRequestAcceptanceItem is the minimum reference needed to authorize an\n offer's membership, order, and fan-out destination without repeating the\n full Offer in every projected subrequest. Offer.signature transitively binds\n the full offer, including its exchange field; the explicit exchange lets a\n recipient derive which signed references must appear in its projection.")).min(1).max(256).describe("Complete original request order, before Broker fan-out. Capped at 256 —\n the same ceiling a discovery query's uris list carries, so one request\n can reference at most one offer per queried URI at the query cap. The Go\n verification helper enforces the same bound itself before doing any\n canonicalization work, because a verifier may run with wire validation\n off and the canonical rendering of an unbounded list is the expensive\n step an unauthenticated caller could otherwise buy for free.").optional(), "requester_domain": z.string().describe("Requester.domain of the request. Non-empty (see AgentRequestAcceptance).").default(""), "requester_id": z.string().describe("Requester.id of the request. Non-empty (see AgentRequestAcceptance).").default("") }).describe("The signed payload is carried because a projected subrequest does not carry\n offers addressed to other Exchanges and therefore cannot reconstruct the\n original complete set by itself."), "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical payload bytes."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("Optional for wire compatibility. When present, an Exchange verifies this\n before creating or serving request-level idempotency state. A Broker MUST\n forward it unchanged on every projected subrequest. Older clients that omit\n it retain per-item execution semantics but receive no request-level claim.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "idempotency_key": z.string().min(1).max(255).describe("Idempotency key (REQUIRED). The server MUST dedupe on this: a replay returns\n the original result rather than re-executing, and the same key with\n different items is refused with already_exists. The key is scoped to the\n agent, whatever the route: a purchase repeated directly or through any\n Broker the Exchange admits is the same purchase, and the Broker forwards the\n agent's key unchanged. A key another agent or tenant used is never a\n collision. The full rule is \"Idempotency\" in the file header. The\n transaction's durable identity is the Exchange-assigned transaction_id in\n the response."), "items": z.array(z.object({ "agent_acceptance": z.object({ "signature": z.string().min(1).describe("Hex-encoded detached Ed25519 signature over the canonical AgentAcceptancePayload\n bytes (see the canonical-signing definition on Offer.signature)."), "signature_algorithm": z.string().describe("Signature algorithm; \"EdDSA\" for Ed25519.").default("") }).describe("The agent's detached acceptance signature over this item's `offer`.\n Optional on the wire; the Exchange enforces presence per\n item at the service layer for relayed batches. Signed bytes = the canonical\n AgentAcceptancePayload form, with requester_* and idempotency_key\n taken from the ENCLOSING TransactionRequest and offer_sig = offer.signature.").optional(), "offer": z.object({ "attestations": z.array(z.object({ "attested_at": z.string().datetime({ offset: true }).describe("When this attestation was created. Agents use this to assess freshness\n (e.g., \"I accept attestations up to N hours old for breaking news\").").optional(), "claims": z.record(z.string(), z.any()).describe("Signed claims about the resource (max 4KB). A JSON object containing\n whatever properties the attesting party can determine about the resource.\n Recommended claim names for interoperability:\n   estimated_quantity (integer): estimated consumption quantity (e.g., token count for text)\n   word_count (integer): word count (estimated_quantity ~ word_count * 1.32 for text)\n   language (string): ISO 639-1 language code\n   iab_categories (string[]): IAB Content Taxonomy 3.1 codes\n   content_hash (string): hash of content in \"method:hexdigest\" format\n   hash_method (string): algorithm used for content_hash\n Vendors MAY add vendor-specific claims (e.g., brand_safety, sentiment).\n The protocol does NOT define \"quality score\" — it is inherently subjective.\n If a vendor provides a proprietary score, the vendor defines what it means\n via their WellKnownManifest ext[\"fora.attestation.claims_schema\"].").optional(), "keyid": z.string().describe("RFC 7638 JWK Thumbprint (the RFC 9421 keyid) of the verifier's\n attestation-signing key, resolved against the verifier's WBA directory\n (WBAFile.keys). Identifies which Ed25519 key signed this attestation.\n Enables key rotation: new keys are published with overlapping validity,\n new attestations use the new key's thumbprint, old attestations remain\n verifiable while the old key is still published.").default(""), "signature": z.string().describe("Ed25519 signature over JCS-canonicalized (RFC 8785) representation of\n {verifier, keyid, attested_at, uri, claims}. JCS (JSON Canonicalization\n Scheme) produces deterministic UTF-8 bytes: lexicographic key sorting,\n ECMAScript number serialization, strict string escaping, no whitespace.\n Each attestation is self-contained — new claim fields do not invalidate\n old attestations because the signature covers the specific claims instance.").default(""), "uri": z.string().describe("The resource URI this attestation covers. Must match the URI in the\n Offer or ResourceEntry this attestation is attached to.").default(""), "verifier": z.string().describe("Canonical domain of the attesting party (e.g., \"nytimes.com\" for\n self-attestation, \"doubleverify.com\" for third-party attestation).\n Used to look up the verifier's attestation-signing keys in its WBA\n directory (WBAFile.keys) at\n   https://{verifier}/.well-known/http-message-signatures-directory").default("") }).describe("ResourceAttestation — Signed envelope of claims from a trusted party.\n\nA provider or third-party verification vendor (GumGum, DoubleVerify, IAS)\n attests to properties of the resource at a specific URI at a specific time.\n The signature covers all fields, proving origin and integrity of the claims.\n\n Verification levels (determined by who the verifier is):\n   Level 0: No attestation present. Resource may carry identifiers\n     (DOI, IPTC GUID via ResourceIdentity) but nothing is cryptographically\n     verifiable. Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): verifier == provider domain. Provider signs\n     own claims with their Ed25519 key. Agent can independently verify\n     content_hash by re-computing it from delivered bytes. Requires the\n     provider to serve deterministic content at the delivery endpoint.\n   Level 2 (third-party attested): verifier == verification vendor domain.\n     Vendor independently crawled the resource and attested to its properties.\n     Agent trusts the attestation — does NOT re-verify the content hash\n     (agent lacks the vendor's extraction algorithm). The Ed25519 signature\n     proves the vendor made the attestation; trust is binary (\"do I trust\n     this vendor?\").\n\n Claims are limited to 4KB. Attestations are carried in-memory in the\n Exchange catalog and in Offer responses — strict size limits protect\n against payload poisoning and ensure catalog performance at scale.\n\n Verifiers MUST publish their attestation-signing keys in their WBA directory\n (WBAFile.keys) at:\n   https://{verifier-domain}/.well-known/http-message-signatures-directory\n identified by RFC 7638 thumbprint. Verifiers publish the claims-schema\n structure at WellKnownManifest.ext[\"fora.attestation.claims_schema\"].")).describe("Signed attestations about the resource at this URI.\n Attestations provide cryptographic proof of\n resource properties from trusted parties (providers or verification vendors).\n\nThree verification levels determine what is independently verifiable:\n   Level 0 (no attestations): Resource may carry identifiers (DOI, IPTC GUID)\n     for identification, but nothing is cryptographically verifiable.\n     Only CDN delivery failure is auto-disputable.\n   Level 1 (self-attested): Provider signs own claims with Ed25519 key.\n     Agent can independently verify content hash and token count.\n     CDN delivery failure + content hash mismatch are auto-disputable.\n   Level 2 (third-party attested): Independent verification vendor crawled\n     the resource and attested to its properties. Agent trusts the attestation\n     (does not re-verify hash). Token count discrepancy is auto-disputable\n     when corroborated by CDN response size.\n\n Multiple attestations may be present (e.g., provider self-attestation\n plus a third-party verification). Agents choose which to trust.").optional(), "data_as_of": z.string().datetime({ offset: true }).describe("When the offered data was current. For dynamic resources\n (resource_mutability = DYNAMIC), this is the snapshot timestamp.\n Enables the Broker to evaluate freshness: \"this credit report\n reflects data as of March 18\" or \"this drug database was updated today.\"\n\nNot set for STATIC resources (content doesn't change) or LIVE\n resources (content doesn't exist yet).\n\n The Broker compares this against RequestConstraints.max_data_age\n to filter stale offers. Example: agent requests max_data_age = 7 days,\n Broker drops offers where now() - data_as_of > 7 days.").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource will be delivered.").default(0), "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the Exchange that issued this offer (e.g.\n \"exchange.example\" or \"exchange.example:8081\"), in the form \"Request\n recipient\" defines in the file header. This is the execute-routing target:\n the agent, or a relaying Broker, sends the ExecuteTransaction call for this\n offer to this Exchange, and a Broker relaying a mixed batch groups the items\n by this value. Because it is an ordinary Offer field it falls inside the\n signed bytes (see `signature` below — the signature covers every field\n except `signature` / `signature_algorithm`), so an intermediary cannot\n redirect the execute call to a different Exchange without invalidating the\n offer, and it is what retires the X-FORA-Exchange-Endpoint transport header.\n It is also the audience statement of an ExecuteTransaction, which is why\n TransactionRequest carries no top-level `exchange`: on receipt, an Exchange\n MUST reject the request unless EVERY item's offer.exchange names its own\n domain. Presence is enforced because an empty value is unroutable — a\n relaying Broker has nothing to group or dial on, and the swap-protection\n above is vacuous when the signed bytes carry no recipient at all."), "expires_at": z.string().datetime({ offset: true }).describe("When this offer expires (ISO 8601).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "iab_categories": z.array(z.string()).describe("IAB Content Taxonomy category codes.\n Enables agents to filter offers by topic (e.g., \"only finance resources\").\n Uses IAB Content Taxonomy 3.1 codes.").optional(), "identity": z.object({ "c2pa_manifest": z.string().describe("C2PA content credentials manifest URI.\n Points to a sidecar or embedded C2PA manifest for this resource.\n C2PA-aware agents MAY follow this URI to validate the full provenance\n chain (creator identity, transformation history, ingredient composition)\n using C2PA libraries (JUMBF/COSE Sign1). C2PA-unaware agents can rely\n on c2pa_status and c2pa-bridged attestation claims instead.\n\nFormats:\n   Sidecar: HTTPS URI to a .c2pa manifest file\n   Embedded: same URI as canonical_url (manifest is inside the asset)\n   Content Credentials Cloud: https://contentcredentials.org/verify?uri=...").optional(), "c2pa_status": z.enum(["C2PA_STATUS_TRUSTED","C2PA_STATUS_VALID","C2PA_STATUS_INVALID","C2PA_STATUS_ABSENT"]).describe("The full C2PA validation details (signer identity, trust list,\n action history, training/mining status) are carried in a\n ResourceAttestation with c2pa.* claims — see fora-c2pa-v1 profile.").optional(), "canonical_url": z.string().describe("Provider's authoritative URL for this resource (rel=\"canonical\").\n Always available. Different per provider for syndicated content.").optional(), "content_hash": z.string().describe("Hash of the content. Interpretation depends on hash_method:\n   \"simhash-v1\" → locality-sensitive hash, for fuzzy dedup (Level 1)\n   \"sha256\"     → exact-match integrity hash (Level 2)\n\nLevel 1 (SimHash): computed by Exchange from extracted text.\n   Agent verifies that fetched content is \"substantially similar.\"\n   Tolerates dynamic page elements.\n\n Level 2 (SHA-256): computed by provider from deterministic payload.\n   Agent verifies exact match. Requires provider to serve consistent\n   content (e.g., API endpoint, static HTML, structured JSON).\n   Mismatch = dispute. Commands premium pricing.").optional(), "doi": z.string().describe("Digital Object Identifier — persistent, never changes.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "hash_method": z.string().describe("Hash algorithm and verification level.\n Examples: \"simhash-v1\", \"minhash-v1\", \"sha256\", \"sha384\"").optional(), "iptc_guid": z.string().describe("IPTC NewsML-G2 globally unique identifier.\n Present when resource flows through news wire syndication (AP, Reuters).").optional(), "isni": z.string().describe("International Standard Name Identifier for the creator.").optional(), "resource_mutability": z.enum(["RESOURCE_MUTABILITY_STATIC","RESOURCE_MUTABILITY_DYNAMIC","RESOURCE_MUTABILITY_LIVE"]).describe("Drives hash verification behavior:\n   STATIC:  content_hash is stable. Agent SHOULD verify delivered content matches.\n   DYNAMIC: content changes between offer and fetch (credit reports, drug databases).\n            content_hash reflects state at offer generation time. Hash mismatch is\n            expected and MUST NOT trigger automatic dispute.\n   LIVE:    content does not exist at offer time (streaming feeds, live broadcasts).\n            content_hash is not applicable. The \"resource\" is the stream endpoint.\n\n Validated across 18 use cases: static content (articles, patents, legislation),\n dynamic data (credit reports, drug interactions, stock snapshots), and live\n streams (MarketData quotes, NPR broadcast, news monitoring feeds)."), "soft_binding": z.string().describe("Soft binding hash — content-derived identifier that survives format\n transcoding (resolution changes, compression, PDF-to-text extraction).\n Extracted from C2PA soft binding assertion when present.\n Enables post-delivery verification when the hard binding hash breaks\n due to legitimate format conversion.\n\nAlgorithm specified in soft_binding_method. Values are algorithm-specific\n (e.g., perceptual hash hex string, watermark identifier).").optional(), "soft_binding_method": z.string().describe("Algorithm used for soft_binding.\n Examples: \"phash-v1\" (perceptual hash), \"c2pa-watermark\" (C2PA invisible\n watermark), \"chromaprint\" (audio fingerprint).").optional() }).describe("Resource identity for cross-exchange deduplication.\n Enables Brokers to recognize the same resource offered by\n different Exchanges and compare pricing.").optional(), "offer_id": z.string().describe("Unique identifier for this offer, assigned by the Exchange.\n Opaque to the caller: not derived from the resource, its URL, or any\n other field, and carries no meaning beyond identifying this offer.\n Two offers for the same resource have different offer_ids.").default(""), "previews": z.array(z.object({ "duration": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Duration in seconds (for audio and video clips).").optional(), "height": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Height in pixels (images and video)").optional(), "media_type": z.string().describe("MIME type of the preview.\n Examples: \"image/jpeg\", \"image/webp\", \"audio/mpeg\", \"video/mp4\",\n           \"text/plain\", \"application/json\"").default(""), "size": z.string().describe("Size category hint. Agents use this to select the right preview\n without fetching all of them.\n Standard values:\n   \"thumbnail\"  — smallest useful preview (100–150px or 5–10s)\n   \"preview\"    — mid-size for evaluation (300–500px or 15–30s)\n   \"sample\"     — larger / more detailed (for data: 1–3 sample records)").optional(), "url": z.string().describe("URL to a preview asset (thumbnail, clip, snippet, sample).\n Served by the provider's CDN, not by the Exchange.").default(""), "width": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Dimensions in pixels (for images and video).").optional() }).describe("Preview — Lightweight resource preview for offer evaluation.\n\nThe Exchange holds URLs (50–200 bytes per preview); the provider's\n CDN serves the actual bytes. This follows the universal pattern:\n Shutterstock (multi-size thumbnail URLs), Spotify (preview_url to\n 30s clip), IIIF (parameterized image URLs), OpenRTB (img.url + dims).\n\n Previews are free to fetch — no FORA transaction required. They are\n the equivalent of looking at a book cover before buying. Providers\n MAY watermark visual previews or truncate text/audio previews.\n\n The Exchange populates preview URLs during catalog ingestion. Preview\n URLs MAY be signed with a short TTL to prevent hotlinking, or public\n (provider's choice). Agents fetch previews only when evaluating\n offers, not on every discovery query.")).describe("Lightweight previews for offer evaluation.\n The Exchange holds URLs (50–200 bytes each); the provider's CDN serves\n the actual bytes. Agents fetch previews only when evaluating offers —\n not on every discovery query. Multiple previews at different sizes\n allow agents to pick the cheapest fetch for their evaluation needs.\n\nPer content type:\n   Image:  watermarked thumbnail (150–450px JPEG)\n   Video:  short clip (10–30s MP4, watermarked)\n   Audio:  short clip (15–30s MP3, low-bitrate or watermarked)\n   Text:   snippet or abstract (first 200 words as text/plain)\n   Data:   sample records (1–3 rows as application/json)\n   Stream: optional frame capture or none (streams are priced by time)\n\n Modeled after Shutterstock (multi-size thumbnail URLs),\n Spotify (preview_url to 30s clip), IIIF (parameterized image URLs),\n and OpenRTB native (img.url + dimensions).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("The offer's price, and its ONLY price. An offer represents a single\n licensing arrangement: each projected LicenseTerm yields its own offer, and\n the Exchange moves that term's price here, so the term inside `terms`\n carries no pricing of its own (the offer.terms.pricing_unset rule). This is\n the price execute charges, the price a Broker ranks and compares across\n Exchanges, and the price a metered purchase is charged at. A resource with\n multiple alternative terms (e.g. dual-licensed) produces multiple separate\n offers, one per term — never one offer with a \"headline\" picked among them.\n\nIt derives from exactly one catalog term: the term's pricing as the\n publisher declared it (ResourceEntry.terms). Each offer derives from one\n term, and the offer carries no second copy, so the offer's price and its\n term's price cannot disagree.\n\n On a metered (PER_UNIT) offer, the rate and the estimate a metered\n purchase is charged at are read from here (see Pricing). The estimate is\n optional. When the publisher states one — on the term's own pricing, or\n once for the resource on ResourceEntry.estimated_quantity — the Exchange\n carries it here as estimated_quantity, the term's own estimate taking\n precedence. When the publisher states none, the offer may carry none, and\n the purchase then charges one unit.").optional(), "reporting": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Post-usage reporting requirements for this offer.").optional(), "signature": z.string().describe("REQUIRED. Hex-encoded detached Ed25519 signature over the canonical\n serialization of the ENTIRE Offer — every field, including `pricing`,\n `terms` (the full licensing payload), `expires_at`, and `exchange`. Only\n `signature` and `signature_algorithm` are excluded from the signed bytes.\n `expires_at` is signed so the offer's validity window is\n integrity-protected: a relaying Broker cannot extend (or shorten) the TTL\n of a signed offer to replay it outside the window the Exchange intended.\n\nCANONICAL SIGNING (RFC 8785 JCS over canonical proto-JSON). The signed bytes\n are:\n\n     signed_payload = JCS( protojson(msg with signature +\n                                      signature_algorithm cleared) )\n\n i.e. render the message to canonical proto-JSON with the PINNED option set\n below, then apply RFC 8785 (JSON Canonicalization Scheme). Deterministic\n protobuf BINARY marshaling is explicitly NOT canonical across languages and\n versions (protobuf's own caveat), so it cannot be a cross-language signing\n primitive; JCS over proto-JSON can be reproduced by ANY language (Go, TS,\n Python) without a protobuf binary codec, so a broker/exchange/client in any\n language signs and verifies byte-identically. This same definition applies to\n the agent offer-acceptance signature (AgentAcceptance.signature).\n\n PINNED proto-JSON option set (the arbiter is the Go-emitted golden vector —\n whatever these options render MUST be byte-identical across all languages):\n   - enum values as NAME strings (not numbers);\n   - int64 / uint64 / fixed64 as decimal STRINGS;\n   - bytes as standard (padded) base64;\n   - google.protobuf.Timestamp / Duration per the proto-JSON WKT rules\n     (RFC 3339 string for Timestamp);\n   - unpopulated fields are OMITTED (never emitted as defaults);\n   - field naming is snake_case (the proto field name, UseProtoNames=true),\n     the naming every SDK target shares — wire, corpus, and signed form are all\n     snake_case;\n   - google.protobuf.Struct (`ext`) → a plain JSON object; JCS then sorts its\n     keys recursively, so the Struct case needs no special handling.\n\n UNKNOWN FIELDS. A canonicalizer either OMITS content it has no schema for or\n PRESERVES it, and the rule follows from which:\n\n   - OMITTING (e.g. proto-JSON, which emits only schema-defined fields): such a\n     canonicalizer CANNOT reproduce the signed bytes of a message carrying\n     unknown fields — what it renders silently drops part of what the signer\n     covered. It MUST refuse the message rather than emit the reduced bytes,\n     and a verifier built on it MUST reject rather than verify over them. The\n     refusal binds at EVERY depth: a nested message and each element of a\n     repeated or map field carries its own unknown-field set.\n   - PRESERVING (a canonicalizer that carries unrecognized members through):\n     it reproduces the signed bytes faithfully, so there is nothing to refuse.\n\n Either way an APPENDED field cannot pass: an omitting canonicalizer refuses\n the message, and a preserving one renders the appended member into bytes the\n signer never covered, so the signature fails. Without the refusal the omitting\n case would fail OPEN — an intermediary could add unknown fields to an\n already-signed message and leave its signature verifying, smuggling\n unauthenticated content through a message the recipient treats as verified.\n\n Extensions therefore ride in `ext` / `ext_critical`, which are defined fields\n and inside the signed bytes — never as undeclared field numbers.\n\n Because the signature covers `terms`, `pricing`, `expires_at`, and\n `exchange`, an intermediary (Broker) cannot tamper with price, restrictions,\n quotas, obligations, the expiry, the execute-routing target, or any\n licensing term without invalidating it.\n Agent SHOULD verify the signature (RFC 2119) against the Exchange's public\n key, and MUST reject an offer whose `expires_at` is in the past.").default(""), "signature_algorithm": z.string().describe("JOSE/JWA algorithm identifier (RFC 8037 §3.1). Always 'EdDSA' for\n Ed25519. Advisory only: this field is cleared before the canonical\n payload is signed, so it is not covered by the signature.").default(""), "subscription_id": z.string().describe("If set, this offer is available under an existing subscription/deal.\n No per-request billing — usage tracked against subscription quota.\n Pricing.rate = \"0\" for subscription offers (zero marginal cost).\n The Broker SHOULD prefer subscription offers when available.").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Subscription quota state, when this offer is under a subscription.\n Enables the agent to see remaining quota before committing.\n Multiple entries when the subscription has independent quotas\n (e.g., access count + spend cap).").optional(), "terms": z.array(z.object({ "license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("Governing license document. Authoritative for REFERENCE_ONLY terms, which\n MUST carry a License with a non-empty uri — a REFERENCE_ONLY term that\n references nothing is rejected at ingest.").optional(), "obligations": z.array(z.object({ "detail": z.string().describe("Free-form detail: attribution string, notice file URI, etc.\n OBLIGATION_KIND_OTHER without it → lint warning.").optional(), "kind": z.enum(["OBLIGATION_KIND_ATTRIBUTION","OBLIGATION_KIND_CONTRIBUTION","OBLIGATION_KIND_SHARE_ALIKE","OBLIGATION_KIND_NETWORK_COPYLEFT","OBLIGATION_KIND_NOTICE","OBLIGATION_KIND_OTHER"]).describe("What the agent must do."), "scope_license": z.object({ "id": z.string().describe("Stable short identifier: SPDX short-id (\"GPL-3.0-only\"), TollBit cuid,\n or catalog doc-id. Used by agents and the vocab linter for known-license\n lookup; SHARE_ALIKE derivatives default their scope_license to this.").optional(), "immutable": z.boolean().describe("Data-labels TDL: the document at uri is versioned and will not change.").optional(), "name": z.string().describe("Human-readable name (licenseType, schema.org node name).").optional(), "uri": z.string().describe("Canonical identity of the license document (RFC 3986). MUST NOT be\n URL-validated — data-labels TDL identifiers use non-URL schemes.\n For REFERENCE_ONLY terms this is the authoritative specification.\n Examples:\n   \"https://creativecommons.org/licenses/by/4.0/\"\n   \"https://techcrunch.com/licensing/ai-terms-2026\"\n\n\"MUST NOT URL-validate\" means do not REJECT non-URL schemes — it does NOT\n mean fetch blindly. A consumer that dereferences this URI MUST apply the\n SSRF countermeasures in the security threat model (T-LIC-1): scheme\n allowlist, block loopback/private/metadata addresses (resolve-then-check),\n fetch via an egress proxy, and treat the response as untrusted content.\n Verify the fetched bytes against `uri_digest` before use.").optional(), "uri_digest": z.string().regex(new RegExp("^(sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128})?$")).describe("Cryptographic digest of the document at `uri`, in \"method:hexdigest\" form\n (e.g. \"sha256:9f86d081...\"). Pins the referenced document so a consumer can\n verify the bytes it fetches match what was offered; covered by the offer\n signature, so it is tamper-evident end to end. REQUIRED whenever `uri` is\n non-empty — any semantics, mutable or not: without a pinned digest a MitM\n (or the publisher) can swap the document the agent reads. The Exchange pins\n it at ingestion (computing it over the safely-fetched document, or\n accepting a publisher-supplied value when uri is not HTTP-fetchable, e.g. a\n non-URL TDL scheme).\n\nThe method MUST be a collision-resistant hash — sha256, sha384, or sha512.\n Legacy md5/sha1 are rejected on the wire: a forgeable digest would defeat\n the swap-protection this field exists for. The CEL is STRUCTURE ONLY\n (allowlisted prefix + matching hex length); presence (digest-when-uri) is\n enforced at ingest.").optional() }).describe("The license that derivatives must be released under. REQUIRED for\n SHARE_ALIKE (rejected if absent), where it MUST identify a license — set\n `id` (SPDX short-id, the common copyleft case, often the term's own\n License.id) and/or `uri`. Because it is a License, a referenced `uri`\n inherits the uri_digest swap-protection rule: a uri without a digest is\n rejected, exactly as for any other license reference.").optional(), "trigger": z.enum(["OBLIGATION_TRIGGER_ON_USE","OBLIGATION_TRIGGER_ON_DISTRIBUTION","OBLIGATION_TRIGGER_ON_NETWORK_SERVICE","OBLIGATION_TRIGGER_ON_DERIVATIVE"]).describe("When the obligation activates.") }).describe("Obligation — A post-use behavioral requirement attached to a LicenseTerm.\n\nExamples:\n   Attribution on display: cite the author whenever content is shown to a user.\n   Share-alike on derivative: AI-generated content that incorporates this work\n     must be released under the same license.\n   Notice on distribution: include the copyright notice when distributing copies.")).max(64).describe("Post-use behavioral requirements.\n At most 64, for the reason quotas carries.").optional(), "part_label": z.string().describe("Informational human-readable name for this sub-part (sub-part terms).").optional(), "pricing": z.object({ "currency": z.string().describe("ISO 4217 currency code (e.g. \"USD\", \"EUR\").").default(""), "estimated_quantity": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Estimated quantity in the metering unit (`unit`).\n For text: token count. For video: duration in seconds.\n For documents: page count. For data: record count.\n\nOPTIONAL everywhere: on a LicenseTerm a publisher pushes and on an Offer.\n It is E in the metered price rule above. When a metered offer states it,\n it is positive (the offer.metered.estimate_positive rule), and the\n purchase charges E × rate. When a metered offer states none, the purchase\n charges one unit, 1 × rate. A PER_UNIT price may state a rate\n with or without an estimate; whether to state one is the publisher's\n decision, and nothing requires it.\n\n The estimate describes the resource rather than the arrangement, so a\n publisher may state it once on ResourceEntry.estimated_quantity instead of\n on each term. An estimate the publisher states either way is carried onto\n the offer's pricing (see Offer.pricing).").optional(), "license_duration_months": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("License duration in months. How long the granted access remains valid.").optional(), "metering": z.enum(["PRICING_METERING_ONLINE","PRICING_METERING_NONE","PRICING_METERING_OFFLINE_SELF_REPORTED"]).describe("How usage is tracked for billing reconciliation.\n Absent = PRICING_METERING_ONLINE (default real-time tracking).\n NONE = one-time perpetual sale; no ReportUsage required after ExecuteTransaction.\n OFFLINE_SELF_REPORTED = agent self-reports physical-world consumption.").optional(), "model": z.enum(["PRICING_MODEL_FREE","PRICING_MODEL_PER_UNIT","PRICING_MODEL_FLAT"]).describe("Provider's pricing model."), "rate": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Price in the provider's model, as an exact decimal string — e.g. \"0.05\" =\n $0.05 per article. NOT a float: money is decimal to avoid binary rounding and\n to allow arbitrary sub-cent precision (e.g. \"0.0001234\"). Denominated in `currency`.").default(""), "unit": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)?$")).max(64).describe("Metering basis — the \"per what\" of PER_UNIT pricing. REQUIRED when\n model = PER_UNIT. Custom units namespace as \"vendor:unit\". Ignored for\n FREE / FLAT.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare tokens. A buf plugin reads them structurally and emits the\n pricingunits constants + IsRegistered; ingest enforces membership from\n those. The CEL is STRUCTURE ONLY (empty / bare-form / vendor:namespaced) —\n it never lists the tokens, so it cannot drift from the registry.").optional(), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Normalized cost per unit — the universal comparison metric, exact decimal string.\n For text: cost per token. For video: cost per second.\n For data: cost per record. For APIs: cost per call.\n Denominated in the Exchange's base_currency (from its WellKnownManifest).").optional() }).describe("Pricing for this term. Where it is required depends on the message that\n holds the term, so the requirement is a rule of that message rather than of\n this field:\n   - On a catalog term (ResourceEntry.terms) it is REQUIRED regardless of\n     semantics — an agent cannot act on a priceless term, so absent Pricing\n     is a validation error at ingest (resource_entry.terms.pricing_required).\n     model = FREE must be stated explicitly (absent Pricing is not free). A\n     REFERENCE_ONLY term states its price here too; its License governs the\n     human-readable terms but does not replace the machine-readable price.\n   - On the term an offer carries (Offer.terms) it MUST be unset\n     (offer.terms.pricing_unset): the offer's price is Offer.pricing, stated\n     once.").optional(), "quotas": z.array(z.object({ "limit": z.coerce.number().int().gte(1).describe("Maximum allowed value in the given window. A quota of 0 grants\n nothing — express \"no access\" by omitting the term, not a zero quota."), "metric": z.string().regex(new RegExp("^([a-z0-9-]+|[A-Za-z0-9._-]+:[A-Za-z0-9._-]+)$")).max(64).describe("The unit being capped — an open vocabulary axis.\n\nThe (fora.v1.vocab) entries below are the SOLE authored source of the\n registered bare metric tokens. A buf plugin reads them structurally and\n emits the quotametrics constants + IsRegistered; ingest enforces membership\n from those. The CEL is STRUCTURE ONLY (non-empty bare token or\n vendor:namespaced) — it never lists the tokens, so it cannot drift.\n\n Token meanings:\n   display-words      Words of content text rendered to an end user.\n   impressions        Times the content is displayed to an end user.\n   tokens             LLM output tokens generated using this content.\n   input-tokens       LLM input tokens consumed from this content.\n   units-manufactured Physical units manufactured from this design/pattern.\n   accesses           Distinct content access / retrieval events.\n   copies             Digital or physical copies produced.\n   seats              Distinct named users licensed to access the content."), "window": z.enum(["QUOTA_WINDOW_HOURLY","QUOTA_WINDOW_DAILY","QUOTA_WINDOW_MONTHLY","QUOTA_WINDOW_TOTAL"]).describe("Time window over which the limit accumulates.") }).describe("Quota — A usage cap the term declares.\n\nA quota states how much a licensee may consume under the term before the\n term expires or must be renegotiated. Like a restriction, it is a declared\n term the parties agree to. Quotas are NOT billing quantities — billing is in\n Pricing.\n\n The metric vocabulary is authored ONLY in the (fora.v1.vocab) entries on\n Quota.metric below; the quotametrics constants + IsRegistered derive from it.")).max(64).describe("Usage caps. The agent must not exceed any individual Quota.\n At most 64, the bound every per-message list in this contract carries when\n no rule walks it more than once. It bounds what one term may carry, not the\n work of checking one — a validator walks every element it is handed before\n the cap is reported, so the cost of checking is bounded at the transport.").optional(), "restrictions": z.array(z.object({ "advisory": z.boolean().describe("Fail-closed by default. When false (the default), this restriction is\n BINDING: an agent that cannot evaluate every token in it — including an\n unknown vendor token — MUST decline the term. Set advisory = true to\n downgrade an unverifiable restriction to non-blocking. This deliberately\n inverts the COSE-`crit` opt-in default: a license restriction a consumer\n does not understand should stop it, not be silently ignored.").default(false), "kind": z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"]).describe("Which dimension this restriction applies to. Defined-only: the axis set is\n CLOSED, and a number outside it is refused rather than ignored. A custom\n axis is RESTRICTION_KIND_OTHER, whose meaning rides in permitted/prohibited,\n so a new number was never the extension mechanism — accepting one would\n admit a restriction no consumer can evaluate onto a term whose default is\n BINDING (see advisory below), which fails open on the axis a publisher most\n needs honoured. Closing the axis does NOT bound the cost of the one-per-kind\n rule below, and must not be read as doing so: a number this rule refuses is\n still distinct from every other, so that rule's all() finds no duplicate to\n stop on and walks the list in full anyway. Its cost is bounded by the size\n test the rule itself carries."), "permitted": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens allowed on this axis. Empty = all permitted.\n For FUNCTION: \"ai-input\", \"ai-train\", \"search\", \"editorial\", \"commercial\", …\n For GEOGRAPHY: \"US\", \"DE\", \"EU\", \"EEA\", \"*\", …\n For USER_TYPE: \"individual\", \"academic\", \"commercial_entity\", …").optional(), "prohibited": z.array(z.string().regex(new RegExp("^[A-Za-z0-9._:*-]+$")).min(1).max(64)).max(64).describe("Tokens blocked on this axis. Takes precedence over permitted[].").optional() }).describe("Restriction — A single constraint on one licensing dimension.\n\nRestrictions model allowed and prohibited values on one axis (function,\n geography, or user-type). They are validated and normalized at ingest and\n RIDE ON THE OFFER: they are declared terms the parties agree to when the\n agent accepts the offer. The AGENT self-selects the term whose restrictions it\n can honour and bears compliance. The Exchange never enforces a restriction:\n it is NOT an Exchange-side gate the requester must pass to see or buy a term.\n\n An Exchange or Broker MAY, purely as a CONVENIENCE, pre-filter the offers it\n returns against the limits the query states in ResourceQuery.acceptable_restrictions\n (the same RestrictionKind axes/vocabulary the terms use) — e.g. an agent that\n only wants US-eligible content can ask the Exchange to skip the rest so it\n doesn't pay to discover offers it would never accept. That filter is advisory and\n optional: a different Broker may not apply it, and it is a recommendation\n matched to the request, never an enforcement verdict. When an Exchange does\n drop offers this way it MAY signal it via OfferAbsenceReason.RESTRICTION_FILTERED\n (with the axes in OfferGroup.restriction_filters). Term visibility is otherwise\n gated only by resource_id/URI and by the scopes in the requester's signed\n request — see LicenseTerm.scopes.\n\n Reading a restriction:\n   A value is in-scope when it matches at least one permitted[] token\n   AND matches none of the prohibited[] tokens.\n   Empty permitted[] = any value is permitted on this axis.\n   Empty prohibited[] = nothing is explicitly prohibited.\n\n Vocabulary sources (authored on the RestrictionKind enum values via\n (fora.v1.vocab_enum); the functiontokens / geographytokens / usertypes\n constants + IsRegistered derive from them):\n   FUNCTION  — RSL 1.0 AI-use vocabulary + established IP/copyright terms\n   GEOGRAPHY — ISO 3166-1 alpha-2 (structural) + the specials *, EU, EEA\n   USER_TYPE — FORA user/organization categories")).max(8).describe("Usage restrictions (function, geography, user-type).\n Multiple restrictions are AND-combined — the agent must satisfy all of them.\n At most 8, and this list is the one of the three that does NOT carry the\n contract's usual 64: only one restriction per axis is valid, the axis enum\n is defined-only, so four is the longest conformant list and eight leaves\n room for an axis this version does not have. Like the caps on quotas and\n obligations, this one bounds the DOCUMENT — how many restrictions one term\n may carry — and not the work of checking it: a validator walks every element\n it is handed before any cardinality rule is reported, so an over-cap list is\n traversed in full on its way to being refused.\n\nWhat makes this list different is that one rule walks it against ITSELF. The\n one-per-kind rule below is quadratic, so it carries its own size test and\n stays silent above this cap; a conformance guard holds the two numbers equal,\n because a cap raised without the test would leave the lists in between\n unchecked for duplicate axes and accepted. The neighbouring disjointness rule\n on each element is quadratic only in that element's two token lists, both\n capped at 64, so its cost is bounded per restriction and linear across the\n list — it needs no such test.").optional(), "scopes": z.array(z.string()).max(64).describe("Scope-gating: the Exchange presents an offer for this term only when the\n scopes in the requester's signed request (Requester.scopes) cover ALL of\n these scopes (AND-semantics). Empty = public. A subscription term is\n Pricing{model:FREE} + scopes:[\"subscription:...\"].\n\nRequester.scopes is the requester's own statement, which the Exchange does\n not verify, so a scope gate hides a term from requesters that do not state\n the scope; it does not stop one that states it falsely. An Exchange MAY\n also require a verified delegation that grants these scopes before it\n presents the term. To a requester that presents none, it answers as if the\n term did not exist, as existence hiding requires (see Requester.scopes). An\n offer the Exchange presented is honoured until it expires.\n\n Coverage uses the SAME matching rule as Requester.scopes:\n segment-wise (\":\" separated), each granted segment must equal the\n corresponding required segment or be \"*\", a terminal \"*\" matches all\n remaining segments, and there is NO implicit prefix match (a grant\n narrower than the requirement does not cover it). \"dist:*\" covers\n \"dist:US\" and \"dist:US:CA\"; \"dist\" covers only \"dist\". There is exactly\n one scope-matching algorithm across the protocol.").optional(), "semantics": z.enum(["TERM_SEMANTICS_ENUMERATED","TERM_SEMANTICS_REFERENCE_ONLY"]).describe("How to interpret the machine fields.") }).describe("LicenseTerm — Universal licensing unit.\n\nOne LicenseTerm describes one complete access arrangement for a resource.\n A resource carries zero or more terms; having multiple terms is the normal\n case (one per use category, user type, or commercial arrangement).\n\n The same LicenseTerm shape appears at ingestion (ResourceEntry.terms) and\n at emission (Offer.terms). The Exchange stores what the publisher pushed\n and surfaces it on discovery, so agents see the same terms the publisher\n declared — no translation or reformulation — with one move: on an offer the\n term's price is Offer.pricing, and the term itself carries none.\n\n Validation rules:\n   - Pricing MUST be present on EVERY catalog term (ResourceEntry.terms),\n     regardless of semantics — the resource_entry.terms.pricing_required\n     rule. Absent Pricing → reject at ingest: an agent cannot act on a term\n     with no price. This holds for REFERENCE_ONLY too — its License governs\n     the human-readable terms, but the machine-readable price is still stated\n     here, not deferred to the document.\n   - Pricing MUST be unset on the term an offer carries (Offer.terms) — the\n     offer.terms.pricing_unset rule. The offer's price is Offer.pricing, and\n     each offer derives from exactly one catalog term, so the price is stated\n     once and cannot disagree with itself. The requirement is therefore a\n     rule of the message that holds the term, not of LicenseTerm.\n   - model=FREE must be explicit. Absent Pricing ≠ free. A term may be FREE\n     under an arbitrary license; the agent still needs the price stated so it\n     knows the access is free rather than unpriced.\n   - A PER_UNIT term MAY state Pricing.estimated_quantity. It is not\n     required, on the pushed term or on the offer it projects to — see\n     Pricing.estimated_quantity.\n   - REFERENCE_ONLY terms MUST carry a License with a non-empty uri. A\n     REFERENCE_ONLY term that references no document is meaningless → reject\n     at ingest.\n   - Restriction tokens are validated against the vocab registry.\n     Unknown tokens produce a PushResourcesResponse.warnings[] entry\n     but do NOT cause rejection (forward-compatible).")).min(1).max(1).describe("The licensing term this offer sells, sourced from the publisher's\n ResourceEntry. EXACTLY ONE, and the bound is enforced rather than asked\n for: an offer IS a single licensing arrangement, so N terms on a resource\n project to N offers on that resource, each selling one of them — see\n `pricing` above. An offer with no term would be an offer projected from\n nothing, which is why the floor is one and not zero. The field is\n `repeated` because it shipped that way in v1 and renumbering a released\n field is not available to us, so the cardinality rides as a validation\n rule instead. `ResourceEntry.terms` is the plural side, bounded at 32: a\n resource carries many terms, an offer sells one of them.\n\nThe distinction is not cosmetic. `pricing` is what a Broker ranks on and\n what execute charges, so a term that is not on its own offer has no price\n a Broker can compare and no offer_id an agent can buy. Fusing several\n terms onto one offer makes every term but the first unsellable — a\n dual-licensed resource sells only under whichever arrangement the\n publisher happened to store first.\n\n The term here carries everything the publisher declared EXCEPT its price:\n its `pricing` MUST be unset (the offer.terms.pricing_unset rule), because\n the offer's price is `pricing` above. Its semantics, license,\n restrictions, quotas, obligations, scopes and part_label are the\n publisher's, unchanged.\n\n Where a term is reachable only under an existing subscription, its offer\n carries `subscription_id` and prices at zero marginal cost; the terms a\n requester may see at all are selected by `LicenseTerm.scopes`.\n\n See: Universal Licensing Core section.").optional(), "title": z.string().describe("Resource title (human-readable, for display/logging).").optional() }).describe("The FULL signed Offer for this batch entry, reflected back exactly as\n received at discovery. The Exchange verifies `offer.signature` over these\n presented bytes — stateless, no reconstruct-from-catalog. REQUIRED: every\n batch item carries its offer.") }).describe("TransactionItem — A single offer commitment within a batch transaction.")).min(1).describe("The offers committed in this request (REQUIRED, min 1), each carrying its\n own reflected signed Offer + detached acceptance. A single offer is the\n degenerate 1-element list. The Exchange verifies each item's\n `offer.signature` (which covers pricing, terms, and expires_at) over the\n presented bytes against its own key — stateless, self-contained bearer\n tokens, with no reconstruct-from-catalog.").optional(), "requester": z.object({ "delegation": z.object({ "expires_at": z.string().datetime({ offset: true }).describe("When this delegation expires. Exchange MUST reject expired tokens.").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "issuer": z.string().describe("Token issuer. OIDC issuer URL or GNAP grant server URL.\n Exchange uses this for JWT validation (OIDC discovery → JWKS)\n or GNAP token introspection.").optional(), "max_accesses": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Maximum number of accesses allowed under this delegation.\n Exchange tracks cumulative access count against this cap.\n Deny with DENIAL_REASON_QUOTA_EXCEEDED when count >= limit.\n For subscriptions with \"10,000 accesses/month\", this carries the ceiling.").optional(), "max_spend_cents": z.coerce.number().int().describe("Maximum spend in currency minor units (e.g., cents for USD).\n Exchange tracks cumulative spend against this cap.").optional(), "principal_domain": z.string().describe("Who granted this delegation (domain for public key lookup).").default(""), "principal_id": z.string().describe("Principal's identifier (e.g., \"user@acme.com\", \"marketdata.example.com\").").default(""), "quota_period": z.string().describe("Quota reset period. How often the access/spend counters reset.\n Example: 30 days for monthly subscriptions — \"2592000s\" on the wire\n (proto-JSON encodes Duration as seconds; \"720h\" is not accepted).\n When absent, the quota is lifetime (bounded only by expires_at).").optional(), "revocation_uri": z.string().describe("Optional: URI for real-time revocation checking.\n Exchange MAY check this for high-value transactions.\n Not checked for routine low-value access (performance tradeoff).").optional(), "scopes": z.array(z.string()).describe("Scopes granted by this delegation. MUST be a subset of the\n principal's own scopes (attenuation — can only narrow, not widen).").optional(), "token": z.string().regex(new RegExp("^[A-Za-z0-9+/]*={0,2}$")).describe("Token bytes. A JWT (base64url-encoded JWS).").default(""), "token_format": z.string().describe("Token format: \"jwt\" (default). Empty is treated as \"jwt\". The field stays\n open for a future format.").default("") }).describe("Optional delegation — present when the requester acts on behalf of\n another entity (user, organization, upstream agent). On a query a Broker\n originated it is not honoured, because the Broker signs alone and nothing\n on that leg can pass its holder binding; the Exchange answers as if none\n were present (see Delegation).").optional(), "domain": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("REQUIRED. Bare host of the requester's key directory: the WBA directory at\n {domain}/.well-known/http-message-signatures-directory that publishes the\n agent's Ed25519 keys. It carries the bare-host shape \"Request recipient\"\n defines in the file header (a port allowed), for the same structural\n reason: a scheme, path or query smuggled in here would choose what gets\n fetched, not merely from where. It is never a free label. Every verifier\n reads it as the name of that directory, and the rule that binds it depends\n on whether the request is direct or relayed, which the receiver decides as\n \"Direct and relayed requests\" in the file header states:\n\n- Direct request. The agent's own RFC 9421 signature arrives because\n     the agent sent the request itself. The verifier resolves the agent's\n     keys from the COVERED `Signature-Agent` member, never from this field.\n     It then MUST require this field to name that same directory: the host\n     of the origin that member names, compared by\n     the identity rule \"Request recipient\" defines (the shape check first,\n     then case-folded, an absent port the same as \":443\", a subdomain a\n     different party). A mismatch is refused as UNAUTHENTICATED with\n     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but\n     not for the requester the body names. A Broker applies this rule at\n     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses\n     nothing for this field: every query it originates names the host of\n     the origin that member names (see DiscoveryRequest.requester). An\n     Exchange applies it on every request whose signer it does not admit as\n     a Broker; a mismatch from a signer it does admit is a relayed request,\n     one of the two cases below.\n   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction\n     re-packages the purchase, so the request signature and the covered\n     `Signature-Agent` member are the Broker's. They say only that the call comes\n     from the Broker, and they sign no purchase. The Exchange MUST verify\n     each item's AgentAcceptance, and the AgentRequestAcceptance, against\n     the Ed25519 keys currently valid in the directory this field names\n     (see AgentRequestAcceptance), never against the Broker's key. Those\n     acceptances are the only agent signatures the Exchange sees, and the\n     purchase belongs to the account of the directory they verify under\n     (see \"Accounts\" in the file header).\n   - Broker-led discovery. A ResourceQuery a Broker originated carries no agent\n     signature, so nothing on that leg authenticates this field: it is the\n     Broker's statement, under the Broker's own signature, of whom it\n     queries for. A delegation on such a query is not honoured (see\n     Delegation)."), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "id": z.string().min(1).max(255).describe("REQUIRED. A free label the agent chooses for attribution (e.g.\n \"agent-research-bot-001\"), 1 to 255 characters. Use it to tell apart the\n sub-agents or end customers that share one key directory. It is never\n identity: no verifier finds keys from it, and no party trusts it for an\n authentication or authorization decision. The requester's identity is\n `domain` together with the key that verifies. The acceptance signatures\n cover this label (see AgentAcceptancePayload), so a relaying Broker cannot\n rewrite it, but its value is still only what the agent says."), "name": z.string().describe("Human-readable name (e.g., \"Acme Research Assistant\").").optional(), "scopes": z.array(z.string()).max(64).describe("Entitlement scopes: the requester's own statement of what it is entitled\n to. On a query a Broker originated, they are the Broker's statement for the\n agent. They are signed and attributable, and the Exchange does not verify\n them. Scope coverage decides which terms the Exchange presents (see\n LicenseTerm.scopes, which also states when an Exchange MAY require a\n verified delegation); it is not access control. A false statement is\n traceable to the signing key, its directory and its account, and the\n agent's acceptance signs the scoped offer it buys; it is settled through\n reconciliation and the account relationship.\n\nEXISTENCE HIDING. A requester never learns about a resource outside its\n scopes. When the scopes leave no presentable offer for a resource, the\n Exchange answers with no offers and no absence reason (an OfferGroup with\n empty `offers` and `absence_reason` unset), exactly as for any resource\n with nothing to offer. A Broker relaying that answer adds no reason of its\n own. At purchase, an offer the Exchange presented is honoured until it\n expires, so a scope refusal cannot arise there. No reason in the protocol\n reports a scope shortfall: OFFER_ABSENCE_REASON_SCOPE_INSUFFICIENT and\n DENIAL_REASON_SCOPE_INSUFFICIENT are deprecated and never sent.\n\n Scope format: colon-separated segments, \"{domain}:{permission}\" or\n \"{profile}:{permission}\", optionally multi-segment (\"dist:US:CA\");\n matching is segment-wise per the rule below (no implicit hierarchy).\n Examples:\n   \"credit:read\"                — can access credit reports\n   \"subscription:marketdata-2026\" — has active MarketData subscription\n   \"academic:*\"                 — full access to academic resources\n   \"internal:reports\"           — can access internal reports\n   \"*\"                         — unrestricted (public Exchange default)\n\n Matching is SEGMENT-WISE (\":\" separated). A granted scope G covers a\n required scope R iff, segment by segment, each G segment equals the\n corresponding R segment or is \"*\"; a terminal \"*\" matches all remaining\n segments. There is NO implicit prefix match, and a grant NARROWER than\n the requirement does not cover it (G must be equal-to-or-broader than R).\n Examples: \"dist:*\" covers \"dist:US\" and \"dist:US:CA\"; \"dist:US:*\" covers\n \"dist:US:CA\" but not \"dist:EU\"; bare \"dist\" covers only \"dist\"; granted\n \"dist:US:CA\" does NOT cover required \"dist:US\"; \"*\" covers everything.\n This same rule governs LicenseTerm.scopes — one algorithm protocol-wide.\n\n When empty, Exchange applies its default access policy (typically\n returns all publicly available resources).").optional(), "type": z.enum(["REQUESTER_TYPE_AGENT","REQUESTER_TYPE_HUMAN_TOOL","REQUESTER_TYPE_SERVICE","REQUESTER_TYPE_DELEGATED","REQUESTER_TYPE_RESEARCH"]).describe("What kind of entity is making this request.") }).describe("Requester identity — forwarded for authorization and audit. REQUIRED: a\n purchase names its requester, whose Requester.id and Requester.domain are\n required in turn, and every acceptance binds that requester."), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionRequest — Commit to one or more offers.\n\nAfter selecting offers, the caller commits by sending this to the\n Exchange. Supports both single-offer and batch (multi-offer) modes.\n The Exchange validates eligibility, authorizes billing, creates\n delivery, and logs each transaction.")))();
 
 export const TransactionResponseSchema = /* @__PURE__ */ (() => wire(z.object({ "agent_identity_hash": z.string().describe("Identity that a delivered retrieval_endpoint is bound to: the RFC 7638 JWK\n Thumbprint of the agent's Ed25519 request-signing key (see \"Retrieval-URL\n identity binding\" above). On a sub-request a Broker re-packaged, the request\n signer is the Broker, and this is the thumbprint of the agent key the\n AgentAcceptances verify under instead. Shared across the request; set once.").default(""), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "items": z.array(z.object({ "billing_id": z.string().describe("Billing record identifier minted by the Exchange's billing adapter for\n this transaction (not the account handle — see RegisterResponse.billing_ref).").default(""), "cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Cost for this item. For a metered (PER_UNIT) item this is the purchase\n charge: the offer's estimated_quantity × rate, or one unit, 1 × rate, when\n the offer states no estimate (see Pricing).").optional(), "delivery_method": z.union([z.string().regex(new RegExp("^DELIVERY_METHOD_UNSPECIFIED$")), z.enum(["DELIVERY_METHOD_DIRECT","DELIVERY_METHOD_INSTRUCTIONS","DELIVERY_METHOD_STREAMING"]), z.coerce.number().int().gte(-2147483648).lte(2147483647)]).describe("How resource is delivered for this item.").default(0), "denial_reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("Set if this specific item was denied (others may succeed). Every per-item\n denial is answered here, in a successful response, also when the request\n carried only this item: a denied one-item purchase is never a non-OK error.").optional(), "expires_at": z.string().datetime({ offset: true }).describe("When retrieval_endpoint expires.").optional(), "offer_id": z.string().describe("The offer_id this result is for.").default(""), "refusal": z.object({ "code": z.string().min(1).max(64).describe("The Connect code the party answered with, in its wire form, e.g.\n \"permission_denied\" or \"unauthenticated\". When the party gave no answer\n — unreachable, or the call timed out — it is the code the relaying party's\n call failed with (\"unavailable\", \"deadline_exceeded\"). A refusal with\n either of those codes is an ambiguous outcome: a purchase may have\n completed. On a Broker purchase, retrying the agent's request with the same\n idempotency_key, on any route, is answered from each Exchange's stored\n result, so it settles the outcome without buying twice."), "detail": z.object({ "catalog_rejection": z.object({ "reason": z.enum(["CATALOG_REJECTION_REASON_NOT_CATALOG_CONTRIBUTOR","CATALOG_REJECTION_REASON_TENANT_MISMATCH","CATALOG_REJECTION_REASON_DOMAIN_NOT_VERIFIED","CATALOG_REJECTION_REASON_SIGNATURE_INVALID","CATALOG_REJECTION_REASON_MALFORMED_ENTRY","CATALOG_REJECTION_REASON_UNKNOWN_VOCAB_TOKEN","CATALOG_REJECTION_REASON_QUOTA_EXCEEDED","CATALOG_REJECTION_REASON_TERMS_LIMIT_EXCEEDED","CATALOG_REJECTION_REASON_URI_UNAVAILABLE","CATALOG_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION","CATALOG_REJECTION_REASON_EXCHANGE_NOT_LISTED"]).describe("The rejection reason (defined-only, non-zero)"), "rejected_paths": z.array(z.string()).describe("The entry paths the refusal is about. A catalog push is all-or-nothing, so\n these name which entries failed inside a submission that persisted nothing —\n they are not a list of what was dropped from an otherwise applied batch.").optional() }).describe("`reason` oneof — CatalogService rejection").optional(), "dispute_failure": z.object({ "reason": z.enum(["DISPUTE_FAILURE_REASON_TRANSACTION_NOT_FOUND","DISPUTE_FAILURE_REASON_REPORT_NOT_FILED","DISPUTE_FAILURE_REASON_WINDOW_EXPIRED","DISPUTE_FAILURE_REASON_DUPLICATE","DISPUTE_FAILURE_REASON_INELIGIBLE","DISPUTE_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — DisputeTransaction filing refused").optional(), "domain": z.string().describe("Stable grouping for the failing surface, e.g. \"fora.v1.ExchangeService\".\n Mirrors google.rpc.ErrorInfo.domain so generic tooling can group errors.").default(""), "domain_verification_failure": z.object({ "reason": z.enum(["DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_NOT_FOUND","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_MISMATCH","DOMAIN_VERIFICATION_FAILURE_REASON_CHALLENGE_EXPIRED","DOMAIN_VERIFICATION_FAILURE_REASON_FETCH_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_EXCHANGE_NOT_AUTHORIZED","DOMAIN_VERIFICATION_FAILURE_REASON_KEY_REGISTRATION_FAILED","DOMAIN_VERIFICATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — domain verification failed").optional(), "message": z.string().describe("Developer-facing, NON-authoritative human message. Clients MUST branch on\n the typed reason below, never on this text. Servers SHOULD NOT place secrets,\n PII, or existence/authorization detail here that the closed typed reason\n deliberately withholds: unlike the enum, this free text is unbounded and\n easily becomes an existence oracle or leak channel (see `metadata`).").default(""), "metadata": z.record(z.string(), z.string()).describe("Dynamic key/value context that also appears in `message` (ids, limits,\n axes). Mirrors google.rpc.ErrorInfo.metadata. Strongly-typed context rides\n in the per-domain reason block below instead. Same leakage rule as `message`:\n servers SHOULD NOT put secrets, PII, or withheld existence/authorization\n detail here — it is the same potential side channel as the absence oracle.").optional(), "registration_failure": z.object({ "field_errors": z.array(z.object({ "error": z.string().min(1).max(255).describe("Developer-facing, NON-authoritative description of what failed\n (e.g. \"required\", \"must match ^[A-Z]{2}[0-9]+$\"). Wording is\n validator-defined and not stable across Exchanges; clients branch on\n `reason`, never on this text. States the constraint, NEVER the submitted\n value — the ErrorDetail leakage rule applies here too."), "path": z.string().max(255).describe("RFC 6901 JSON Pointer to the offending member, relative to\n registration_data (e.g. \"/vat_id\", \"/address/postal_code\"). The empty\n string addresses registration_data itself, for whole-object failures\n (oneOf, minProperties) that belong to no single member.").default("") }).describe("RegistrationFieldError — one registration_data member that failed the\n Exchange's published schema (AccountRegistration.data_schema).")).max(64).describe("When reason = INVALID_REGISTRATION_DATA: the registration_data members\n that are missing or do not conform. Empty for every other reason — enforced\n by the message rule above, not left to prose.").optional(), "reason": z.enum(["REGISTRATION_FAILURE_REASON_DOMAIN_NOT_VERIFIED","REGISTRATION_FAILURE_REASON_INVALID_KEY","REGISTRATION_FAILURE_REASON_SIGNATURE_INVALID","REGISTRATION_FAILURE_REASON_ALREADY_REGISTERED","REGISTRATION_FAILURE_REASON_QUOTA_EXCEEDED","REGISTRATION_FAILURE_REASON_INVALID_REGISTRATION_DATA","REGISTRATION_FAILURE_REASON_TERMS_DIGEST_STALE","REGISTRATION_FAILURE_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — agent/provider registration refused").optional(), "request_auth_failure": z.object({ "reason": z.enum(["REQUEST_AUTH_FAILURE_REASON_SIGNATURE_MISSING","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_INVALID","REQUEST_AUTH_FAILURE_REASON_SIGNATURE_STALE"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — RFC 9421 request signature on an RPC refused").optional(), "retrieval_auth_failure": z.object({ "reason": z.enum(["RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_URL_SIGNATURE_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_AGENT_KEY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_KEYID_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_THUMBPRINT_MISMATCH","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_CREATED_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRY_MISSING","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_EXPIRED","RETRIEVAL_AUTH_FAILURE_REASON_PROOF_SIGNATURE_INVALID"]).describe("The failure reason (defined-only, non-zero)") }).describe("`reason` oneof — signed-URL / proof-of-possession check failed").optional(), "transaction_denial": z.object({ "exchange": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the Exchange that PRODUCED this denial, in the form \"Request\n recipient\" defines in the file header. Not an echo of what the caller sent:\n on a relayed or fanned-out execute the request went to a Broker, so the\n Exchange that refused may not be one the agent named (through\n BrokerService.ExecuteTransaction this detail reaches the agent inside\n UpstreamRefusal.detail, beside UpstreamRefusal.party). Carrying it here is\n what lets ACCOUNT_NOT_REGISTERED be actionable — the agent learns where to\n call Register without fetching a manifest to work it out. NOTHING SIGNS THIS\n VALUE: it rides in a response, and on a relayed path the response passed\n through an intermediary, so this field is exactly the unsigned addressing\n the request-side `exchange` field exists to refuse. Treat it as a HINT, not\n an instruction. Before acting on it — and registering is a consequential act,\n handing an operator's business data and a signed acceptance of that\n Exchange's terms to whoever answers — a caller MUST check the value against\n a domain it already trusts for this transaction: the signed `offer.exchange`\n of the items in the refused request, or its own RequestConstraints.exchanges\n set. A value matching neither is reported to the caller and never dialled,\n because a hostile intermediary that could choose it would be choosing where\n an unattended agent registers.").optional(), "offer_id": z.string().describe("DEPRECATED, never set. A whole-request refusal pertains to no one offer; a\n denial of one offer rides on that offer's TransactionResultItem. The field\n is retained because removing it would break the v1 wire contract; a\n receiver ignores it.").optional(), "reason": z.enum(["DENIAL_REASON_ACCOUNT_INACTIVE","DENIAL_REASON_INSUFFICIENT_BALANCE","DENIAL_REASON_RATE_LIMITED","DENIAL_REASON_CONTENT_UNAVAILABLE","DENIAL_REASON_RESTRICTION_NOT_SATISFIED","DENIAL_REASON_REPORTING_OVERDUE","DENIAL_REASON_OFFER_EXPIRED","DENIAL_REASON_SIGNATURE_INVALID","DENIAL_REASON_QUOTA_EXCEEDED","DENIAL_REASON_DELEGATION_INVALID","DENIAL_REASON_SCOPE_INSUFFICIENT","DENIAL_REASON_ENTITLEMENT_MISSING","DENIAL_REASON_ENTITLEMENT_MALFORMED","DENIAL_REASON_ENTITLEMENT_EXPIRED","DENIAL_REASON_ENTITLEMENT_WRONG_BUYER","DENIAL_REASON_SUBSCRIPTION_LAPSED","DENIAL_REASON_ENTITLEMENT_NOT_GRANTED","DENIAL_REASON_ACCOUNT_NOT_REGISTERED","DENIAL_REASON_RELAY_NOT_ACCEPTED","DENIAL_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The denial reason (defined-only, non-zero)"), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. RESTRICTION_NOT_SATISFIED is never sent: the\n Exchange never enforces a restriction (see Restriction). The field is\n retained because removing it would break the v1 wire contract; a receiver\n ignores it.").optional() }).describe("`reason` oneof — ExecuteTransaction refused as a whole request").optional(), "usage_report_rejection": z.object({ "reason": z.enum(["USAGE_REPORT_REJECTION_REASON_TRANSACTION_NOT_FOUND","USAGE_REPORT_REJECTION_REASON_DUPLICATE","USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED","USAGE_REPORT_REJECTION_REASON_MISSING_REQUIRED_FIELDS","USAGE_REPORT_REJECTION_REASON_MALFORMED","USAGE_REPORT_REJECTION_REASON_UNKNOWN_CRITICAL_EXTENSION"]).describe("The rejection reason (defined-only, non-zero)") }).describe("`reason` oneof — ReportUsage filing rejected").optional() }).describe("The party's typed reason, unchanged — the ErrorDetail it attached to its\n refusal. Absent when the party attached none or gave no answer.").optional(), "party": z.string().regex(new RegExp("^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*(:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?$")).max(260).describe("Bare host of the party that refused the call made on the caller's behalf,\n in the form \"Request recipient\" defines in the file header.") }).describe("Set only on a BrokerTransactionResponse, and only when the Exchange that\n owns this item refused the Broker's whole sub-request instead of answering\n it: a non-OK answer, or no answer at all. offer_id names the item;\n transaction_id, billing_id, cost, denial_reason, retrieval_endpoint and the\n other result fields stay unset. Every item the Broker sent in that\n sub-request carries the same refusal. Whether the item was purchased\n depends on the refusal's code. With the code \"unavailable\" or\n \"deadline_exceeded\" the outcome is unknown: the Exchange may have completed\n the purchase before the answer was lost, whether it gave no answer or\n answered that code, and retrying the agent's request with the same\n idempotency_key settles it, on any route: through the same Broker, another\n one, or directly (see UpstreamRefusal.code). With any other code the Exchange answered with a\n refusal that decided no item, so the item was not purchased. An Exchange\n never sets this field, and a Broker never replaces it with a denial_reason:\n an upstream refusal is not a per-item access decision.").optional(), "reporting_obligation": z.object({ "endpoint": z.string().describe("URL to submit the usage report to (if different from Exchange).").optional(), "ext": z.record(z.string(), z.any()).describe("Extension point").optional(), "ext_critical": z.array(z.string()).describe("Critical extension keys (COSE crit pattern, RFC 9052).\n Lists keys within ext that the consumer MUST understand.\n Unknown keys in this list → reject with UNKNOWN_CRITICAL_EXTENSION.\n Empty (default) → all ext keys are safe to ignore.").optional(), "required": z.boolean().describe("Whether post-usage reporting is required.").default(false), "required_fields": z.array(z.string()).describe("Field names that must be present in the report.").optional(), "window": z.string().describe("Duration within which the report must be submitted (e.g. \"86400s\" = 24\n hours; proto-JSON encodes Duration as seconds). A report that arrives after\n the window closed is refused with USAGE_REPORT_REJECTION_REASON_WINDOW_EXPIRED\n (Connect code failed_precondition).").optional() }).describe("Reporting requirements for this item.").optional(), "resource_title": z.string().describe("Resource title echoed from the Offer.").optional(), "restriction_mismatches": z.array(z.enum(["RESTRICTION_KIND_FUNCTION","RESTRICTION_KIND_GEOGRAPHY","RESTRICTION_KIND_USER_TYPE","RESTRICTION_KIND_OTHER"])).describe("DEPRECATED, never set. It named the restriction axes a request failed under\n DENIAL_REASON_RESTRICTION_NOT_SATISFIED, which is never sent: the Exchange\n never enforces a restriction (see Restriction). The field is retained\n because removing it would break the v1 wire contract; a receiver ignores it.").optional(), "retrieval_endpoint": z.string().describe("Signed retrieval URL for this item. Bound to the requesting agent's identity\n via the parent TransactionResponse.agent_identity_hash (shared across all\n batch items) — on a BrokerTransactionResponse, the agent_identity_hash of\n the ExchangeOutcome for this item's Exchange; expires at expires_at. Absent if this item was denied or its\n delivery_method is not signed-URL-based.").optional(), "subscription_id": z.string().describe("If under subscription, no per-request charge.").optional(), "subscription_unit_value": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Computed per-unit cost for financial attribution on subscription transactions.\n Even when cost.amount=\"0\" (subscription), this field carries the value\n of the access for accounting purposes (e.g., ASC 606 prepaid drawdown).").optional(), "transaction_id": z.string().describe("Exchange-assigned transaction identifier.").default("") }).describe("TransactionResultItem — Result for a single offer in a batch transaction.")).describe("Per-offer results (one entry per committed item, in original order).").optional(), "subscription_quota": z.array(z.object({ "quota_limit": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Total allowed in the current period.").optional(), "quota_remaining": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Remaining in the current period.").optional(), "quota_used": z.coerce.number().int().gte(-2147483648).lte(2147483647).describe("Used so far in the current period.").optional(), "resets_at": z.string().datetime({ offset: true }).describe("When the quota counter resets (UTC).").optional(), "subscription_id": z.string().describe("Subscription this quota applies to.").default(""), "unit": z.string().describe("What is being metered. Distinguishes access count quotas from\n spend quotas from burst limits.\n Standard values: \"accesses\", \"tokens\", \"spend_cents\", \"burst\"").optional() }).describe("SubscriptionQuotaInfo — Proactive quota signaling for subscription access.\n\nAnalogous to RateLimitInfo (which signals API request rate limits), this\n signals subscription consumption quotas. Enables agents to throttle\n proactively instead of discovering exhaustion via denial.\n\n Returned on Offer (per-offer quota visibility) and TransactionResponse\n (post-transaction remaining quota). A subscription may have multiple\n independent quotas (access count + spend cap + burst limit), so this\n message is used as a repeated field.\n\n Quota decrement timing: the counter increments at ExecuteTransaction\n (optimistic decrement, before delivery). If delivery fails, the agent\n files a DisputeTransaction which may reverse the decrement. This is\n consistent with the billing model (billing_id created at transaction time).")).describe("Post-transaction quota state. Tells the agent how much quota remains\n after this transaction. Enables proactive throttling (\"1 access left\").\n Multiple entries for multi-dimensional quotas.").optional(), "total_cost": z.object({ "amount": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).describe("Exact decimal string (not a float), e.g. \"19.99\". Denominated in `currency`.").default(""), "currency": z.string().default(""), "unit_cost": z.string().regex(new RegExp("^([0-9]+([.][0-9]+)?)?$")).max(32).optional() }).describe("Aggregate cost of the purchased items (those without denial_reason): their\n cost.amount summed as exact decimals, in their one shared currency.\n unit_cost is unset. UNSET when the purchased items span more than one\n currency: amounts are never summed across currencies, and currency\n conversion is out of scope for this version. A caller that needs the totals\n then sums each item's cost per currency itself.").optional(), "ver": z.string().describe("FORA protocol version — \"1.0\". Stamped by the sender from a single\n constant; advisory on receive. See \"Protocol version\" in the file header.").default("") }).describe("TransactionResponse — Exchange confirms the transaction(s).\n\nItems-only: every per-result datum lives in `items`\n (one TransactionResultItem per committed offer, in original order); the\n top-level fields carry only the shared aggregate state. A single offer is the\n degenerate 1-element `items`.\n\n Every per-item denial is in the body, on TransactionResultItem.denial_reason,\n whatever the item count. A one-item purchase that is denied is this response\n with its one item denied; it is never turned into a non-OK error. Only a\n refusal of the whole request, which decides no item, is a non-OK error\n carrying ErrorDetail.transaction_denial (see TransactionDenial).")))();
 
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index fd1cbb64..a734f0e9 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -606,8 +606,10 @@ only when it admits the signer as a Broker, by its own policy (for example, the
 registered with it), and otherwise refuses as `unauthenticated` with
 `request_auth_failure` `SIGNATURE_INVALID`. No field marks a relay, and neither
 `WellKnownManifest.role` nor `Requester.type` admits a Broker: both are the sender's own
-statements. A Broker is never relayed to, so a mismatched requester at a Broker is always
-refused. An Exchange that accepts relayed requests needs an admitted-Broker policy. The
+statements. A Broker is never relayed to. It refuses a mismatched requester at
+`BrokerService.ExecuteTransaction`; at `BrokerService.Resolve` it refuses nothing for
+`requester.domain`, and every query it originates names the agent's verified directory.
+An Exchange that accepts relayed requests needs an admitted-Broker policy. The
 `Role` values gain comments: a Broker's manifest declares `ROLE_BROKER`, which describes
 the document and admits nothing.
 
diff --git a/proto/fora/v1/fora.proto b/proto/fora/v1/fora.proto
index f49310e0..ebe9556e 100644
--- a/proto/fora/v1/fora.proto
+++ b/proto/fora/v1/fora.proto
@@ -289,8 +289,12 @@ import "fora/v1/vocab.proto";
 // which directory signed, and on the Exchange's own admission policy.
 //
 // A Broker relays to Exchanges and is never itself relayed to: every request a
-// Broker receives is direct, so at BrokerService.Resolve and
-// BrokerService.ExecuteTransaction a mismatched requester is always refused.
+// Broker receives is direct. At BrokerService.ExecuteTransaction a mismatched
+// requester is refused, since every Exchange resolves the agent's acceptance
+// keys from Requester.domain. At BrokerService.Resolve the Broker refuses
+// nothing for it: every query the Broker originates names, as
+// Requester.domain, the host of the directory the agent's verified signature
+// names (see DiscoveryRequest.requester).
 // ============================================================================
 
 // ============================================================================
@@ -2185,10 +2189,13 @@ message Requester {
   //     then case-folded, an absent port the same as ":443", a subdomain a
   //     different party). A mismatch is refused as UNAUTHENTICATED with
   //     `request_auth_failure` SIGNATURE_INVALID: the signature verifies, but
-  //     not for the requester the body names. A Broker applies this rule on
-  //     every request it receives. An Exchange applies it on every request
-  //     whose signer it does not admit as a Broker; a mismatch from a signer it
-  //     does admit is a relayed request, one of the two cases below.
+  //     not for the requester the body names. A Broker applies this rule at
+  //     BrokerService.ExecuteTransaction. At BrokerService.Resolve it refuses
+  //     nothing for this field: every query it originates names the host of
+  //     the origin that member names (see DiscoveryRequest.requester). An
+  //     Exchange applies it on every request whose signer it does not admit as
+  //     a Broker; a mismatch from a signer it does admit is a relayed request,
+  //     one of the two cases below.
   //   - Purchase relayed through a Broker. BrokerService.ExecuteTransaction
   //     re-packages the purchase, so the request signature and the covered
   //     `Signature-Agent` member are the Broker's. They say only that the call comes
@@ -3693,9 +3700,13 @@ message DiscoveryRequest {
   string ver = 1;
 
   // Requester identity — who is making this request, the scopes it states.
-  // The Broker forwards this to Exchanges in ResourceQuery.requester. REQUIRED:
-  // a discovery names its requester, whose Requester.id and Requester.domain
-  // are required in turn.
+  // The Broker forwards this to Exchanges in ResourceQuery.requester, with
+  // Requester.domain the host of the origin that the covered `Signature-Agent`
+  // member of the agent's verified signature names. A Requester.domain that
+  // names another host is never forwarded, and the Broker answers the request
+  // all the same (see "Direct and relayed requests" in the file header).
+  // REQUIRED: a discovery names its requester, whose Requester.id and
+  // Requester.domain are required in turn.
   Requester requester = 3 [(buf.validate.field).required = true];
 
   // Resource URIs the agent wants. The Broker forwards these to Exchanges in
diff --git a/sdk/go/connectserver/handler.go b/sdk/go/connectserver/handler.go
index 7b1ae4fc..f1f31869 100644
--- a/sdk/go/connectserver/handler.go
+++ b/sdk/go/connectserver/handler.go
@@ -37,8 +37,9 @@ func NewExchangeServiceHandler(svc forav1connect.ExchangeServiceHandler, opts ..
 // BrokerService handler, which carries both Broker methods: Resolve and the
 // relayed purchase, ExecuteTransaction. The verify face authenticates the
 // agent's request signature; the handler implementation owns the checks the
-// contract leaves to the Broker, among them that requester.domain names the
-// directory that signature resolved from.
+// contract leaves to the Broker, among them that a purchase's requester.domain
+// names the directory that signature resolved from, and that every query the
+// Broker originates for a Resolve names that directory's host.
 func NewBrokerServiceHandler(svc forav1connect.BrokerServiceHandler, opts ...ServerOption) (string, http.Handler) {
 	cfg := resolveServerConfig(opts)
 	path, connectHandler := forav1connect.NewBrokerServiceHandler(svc, cfg.connectHandlerOptions()...)
diff --git a/website/src/content/docs/components/broker/overview.mdx b/website/src/content/docs/components/broker/overview.mdx
index 22e88f35..d2d0ea34 100644
--- a/website/src/content/docs/components/broker/overview.mdx
+++ b/website/src/content/docs/components/broker/overview.mdx
@@ -130,7 +130,7 @@ FORA uses a two-layer model: the **agent's request signature** authenticates the
 
 The `Requester` message carries identity and entitlements only (`id`, `domain`, `type`, `scopes`, optional `delegation`) — it has **no** signature field. The request is authenticated by an RFC 9421 HTTP Message Signature (alg=ed25519) carried in the headers and made to the [Web Bot Auth profile](/protocol/authentication/#the-web-bot-auth-profile). A verifier checks it against the public key published in the signer's key directory at `{origin}/.well-known/http-message-signatures-directory`, with the origin taken from the `Signature-Agent` member the signature covers.
 
-The Broker passes `Requester` through unchanged -- it never modifies the requester's identity, scopes, or delegation.
+The Broker passes `Requester` through unchanged -- it never modifies the requester's identity, scopes, or delegation -- with one exception on discovery: every query it originates names, as `requester.domain`, the host of the directory the agent's verified signature names, and a `Resolve` naming another host is answered all the same. On a purchase the agent's acceptances sign `requester.domain`, so there the Broker refuses a mismatch instead ([Direct and relayed requests](/protocol/authentication/#direct-and-relayed-requests)).
 
 ### The Broker Signs Alone (RFC 9421)
 
diff --git a/website/src/content/docs/protocol/authentication.mdx b/website/src/content/docs/protocol/authentication.mdx
index 23cbd19d..fc2bc2ec 100644
--- a/website/src/content/docs/protocol/authentication.mdx
+++ b/website/src/content/docs/protocol/authentication.mdx
@@ -46,7 +46,7 @@ This ties cryptographic identity to DNS ownership — if you control the domain,
 
 `requester.domain` names the same directory, and the rule that binds the two depends on whether the request is direct or relayed, which the receiver decides as [Direct and relayed requests](#direct-and-relayed-requests) states:
 
-- **Direct request.** The agent's own signature arrives because the agent sent the request itself. The verifier resolves the key from the covered `Signature-Agent` member, as above, never from `requester.domain`. It then **MUST** require `requester.domain` to name that same directory: the host of the origin that member names, compared by the request-recipient identity rule (the shape check first, then case-folded, an absent port the same as `:443`, a subdomain a different party). A mismatch is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`: the signature verifies, but not for the requester the body names. A Broker applies this rule to every request it receives. An Exchange applies it to every request whose signer it does not admit as a Broker; a mismatch from a signer it does admit is a relayed request, one of the two cases below.
+- **Direct request.** The agent's own signature arrives because the agent sent the request itself. The verifier resolves the key from the covered `Signature-Agent` member, as above, never from `requester.domain`. It then **MUST** require `requester.domain` to name that same directory: the host of the origin that member names, compared by the request-recipient identity rule (the shape check first, then case-folded, an absent port the same as `:443`, a subdomain a different party). A mismatch is refused as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID`: the signature verifies, but not for the requester the body names. A Broker applies this rule at `BrokerService.ExecuteTransaction`. At `BrokerService.Resolve` it refuses nothing for `requester.domain`: every query it originates names the host of the origin that member names. An Exchange applies it to every request whose signer it does not admit as a Broker; a mismatch from a signer it does admit is a relayed request, one of the two cases below.
 - **Purchase relayed through a Broker.** `BrokerService.ExecuteTransaction` re-packages the purchase, so the request signature and the covered `Signature-Agent` member belong to the Broker. They say only that the call comes from the Broker; they sign no purchase. The Exchange **MUST** verify each item's `AgentAcceptance`, and the `AgentRequestAcceptance`, against the Ed25519 keys currently valid in the directory `requester.domain` names, never against the Broker's key. Those acceptances are the only agent signatures the Exchange sees (see [Projected execute requests](#projected-execute-requests)).
 - **Broker-led discovery.** A `ResourceQuery` the Broker originated carries no agent signature, so nothing on that leg authenticates `requester.domain`: it is the Broker's statement, under the Broker's own signature, of whom it queries for.
 
@@ -62,7 +62,7 @@ Agents and Brokers call the same `ExchangeService` RPCs, and no field marks a re
 | Different, and the Exchange admits the signer as a Broker | Relayed: a Broker authored it for that requester | Applies the relayed rules above. On discovery `requester.domain` is the Broker's statement of whom it queries for; on a purchase the agent's acceptances are verified against the directory it names |
 | Different, and the Exchange does not admit the signer | Not acceptable | Refuses it as `unauthenticated` with `request_auth_failure` `SIGNATURE_INVALID` |
 
-Which Brokers an Exchange admits is the Exchange's own policy, for example the Brokers registered with it, just as which Exchanges a Broker routes to is the Broker's. Nothing the sender states admits it: a Broker's manifest declares `ROLE_BROKER`, and `requester.type` describes the requester, but both are the sender's own statements, so neither decides admission. A Broker is never itself relayed to, so every request a Broker receives is direct, and a mismatched requester there is always refused.
+Which Brokers an Exchange admits is the Exchange's own policy, for example the Brokers registered with it, just as which Exchanges a Broker routes to is the Broker's. Nothing the sender states admits it: a Broker's manifest declares `ROLE_BROKER`, and `requester.type` describes the requester, but both are the sender's own statements, so neither decides admission. A Broker is never itself relayed to, so every request a Broker receives is direct: it refuses a mismatched requester at `BrokerService.ExecuteTransaction`, and at `BrokerService.Resolve` it answers the request, naming the agent's verified directory on every query it originates.
 
 ### Accounts
 
diff --git a/website/src/content/docs/protocol/scenario-walkthrough.mdx b/website/src/content/docs/protocol/scenario-walkthrough.mdx
index ce03cf11..6c87013e 100644
--- a/website/src/content/docs/protocol/scenario-walkthrough.mdx
+++ b/website/src/content/docs/protocol/scenario-walkthrough.mdx
@@ -471,7 +471,7 @@ If Anthropic uses its hosted Broker instead of the SDK directly, the Broker prov
 ### Broker Fans Out with Its Own Signed Queries
 
 Discovery through the Broker is Broker-led: the agent asked the Broker, and the Broker chooses which Exchanges to query. For each Exchange, the Broker originates its own query (here it batches the URIs and sets its own `deadline`) and:
-1. Carries the agent's `requester` message unchanged
+1. Carries the agent's `requester` message, naming as `requester.domain` the host of the directory the agent's signature verified against (`claude.ai`, as the agent sent it)
 2. Signs the query alone, with its own labeled RFC 9421 HTTP Message Signature covering its own request components and only its own `Signature-Agent` member. The query carries no agent signature headers
 
 Broker → SSP-Alpha (multi-URI batch query) — `POST https://exchange.ssp-alpha.com/fora/v1/fora.v1.ExchangeService/DiscoverResources`:
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index acb5a513..7366c8e5 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -612,8 +612,10 @@ only when it admits the signer as a Broker, by its own policy (for example, the
 registered with it), and otherwise refuses as `unauthenticated` with
 `request_auth_failure` `SIGNATURE_INVALID`. No field marks a relay, and neither
 `WellKnownManifest.role` nor `Requester.type` admits a Broker: both are the sender's own
-statements. A Broker is never relayed to, so a mismatched requester at a Broker is always
-refused. An Exchange that accepts relayed requests needs an admitted-Broker policy. The
+statements. A Broker is never relayed to. It refuses a mismatched requester at
+`BrokerService.ExecuteTransaction`; at `BrokerService.Resolve` it refuses nothing for
+`requester.domain`, and every query it originates names the agent's verified directory.
+An Exchange that accepts relayed requests needs an admitted-Broker policy. The
 `Role` values gain comments: a Broker's manifest declares `ROLE_BROKER`, which describes
 the document and admits nothing.
 

From 8bff471d98449fc37f74bf910b3d9fef5ea1c310 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Wed, 14 Oct 2026 15:23:56 +0200
Subject: [PATCH 161/164] Read a document on a runtime without AbortController,
 as Fastly Compute is, in the TypeScript SDK

Fastly Compute's JavaScript runtime has no AbortController or
AbortSignal. fetchDocument built an AbortController on every read,
before its try, so on Fastly every document read of the edge entry
threw a ReferenceError: the manifest, a key directory, a revocation
list, a license document. createWBAOfferDirectoryFetch answers absent
for any failure, so a Fastly edge could not load the Exchange's
offer-signing keys and refused every paid fetch. The Workers types
and the no-eval sandbox both declare AbortController, so nothing
noticed.

The read now needs no AbortController. Its one deadline is still a
timer the read races against the transport and the body. Where the
runtime has AbortController, the transport is also handed a signal
the read aborts then; otherwise init carries only redirect. At the
deadline the read refuses first, then aborts the signal, then cancels
a body it is still reading and releases an answer that arrives late.
So a transport that fails as its signal aborts no longer reports its
own error in place of the deadline, and a body cut off there is
refused rather than returned short. Every failure of the read, its
setup included, is a DirectoryUnavailable with its cause. The cap,
the redirect rules and the key directory's no-redirect rule are
unchanged.

The bounds tests run on a runtime with AbortController and on one
with neither global, and each refusal now shows its transport was
reached. A new test runs the bundled edge entry with only the globals
Fastly Compute declares: every reader, a key directory signed in that
context and read through createWBAOfferDirectoryFetch and
createWBAKeyResolver, the cap, the redirect rules and the deadline.
The edge guard now also bundles the edge-safe surface and fails on
any global it reaches that the Workers types declare and Fastly
lacks, unless the code checks for it first. The edge sandboxes share
their build and context in tests/edge-sandbox.ts. Go and Python are
unchanged, and the parity map is unchanged.
---
 sdk/ts/README.md                              |   4 +-
 sdk/ts/resolvers/edge.ts                      |  14 +-
 sdk/ts/resolvers/fetch.ts                     | 156 ++++++--
 sdk/ts/tests/edge-fastly-globals.test.ts      | 260 +++++++++++++
 sdk/ts/tests/edge-imports.guard.test.ts       | 100 ++++-
 sdk/ts/tests/edge-no-eval.test.ts             |  53 +--
 sdk/ts/tests/edge-sandbox.ts                  | 158 ++++++++
 .../tests/resolvers-document-bounds.test.ts   | 359 +++++++++++++-----
 sdk/ts/tests/resolvers-harness.ts             |  22 ++
 9 files changed, 924 insertions(+), 202 deletions(-)
 create mode 100644 sdk/ts/tests/edge-fastly-globals.test.ts
 create mode 100644 sdk/ts/tests/edge-sandbox.ts

diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 03c9afea..55b13838 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -101,7 +101,9 @@ call takes `fetch`, the runtime's own fetch or a wrapper around it. The read bou
 whatever fetch it is given, on both entries: a body over 1 MiB is refused, never
 truncated; the whole read ends at 30 seconds; and the read follows redirects itself, at
 most five, never out of http(s), never from https down to http and never for a key
-directory. The address guard for a host another party named is the caller's:
+directory. None of these bounds needs `AbortController`, which Fastly Compute lacks: where
+the runtime has one, the transport is also handed a signal the read aborts at the deadline.
+The address guard for a host another party named is the caller's:
 `blockedAddress` is exported for it, and `allowedScheme`, the scheme allowlist (http and
 https) that guard applies, which is not an https-only rule. The protocol mechanics (`core`, `identity`,
 `hono`, and the `src` helpers such as `pop` and `verify`) are edge-safe too.
diff --git a/sdk/ts/resolvers/edge.ts b/sdk/ts/resolvers/edge.ts
index afcdc820..cec33f3f 100644
--- a/sdk/ts/resolvers/edge.ts
+++ b/sdk/ts/resolvers/edge.ts
@@ -11,13 +11,15 @@
 // The read bounds itself whatever fetch it is given (fetch.ts): a body is capped at 1 MiB,
 // the whole read ends at 30 seconds, and the read follows redirects itself — at most five,
 // never out of http(s), never from https down to http, never with credentials, and never
-// for a key directory. What stays with the caller is the address: an edge runtime that
-// fetches an address another party chose (a Signature-Agent directory, an Exchange
-// domain) owns the equivalent of the SSRF guard. blockedAddress is exported for it, and
-// allowedScheme, the scheme allowlist (http and https) that guard applies; it is not an
-// https-only rule.
+// for a key directory. None of it needs AbortController, which Fastly Compute lacks. What
+// stays with the caller is the address: an edge runtime that fetches an address another
+// party chose (a Signature-Agent directory, an Exchange domain) owns the equivalent of the
+// SSRF guard. blockedAddress is exported for it, and allowedScheme, the scheme allowlist
+// (http and https) that guard applies; it is not an https-only rule.
 // tests/edge-imports.guard.test.ts walks this module's import graph and fails on any
-// Node-only import, and tsconfig.workers.json typechecks it against the Workers types.
+// Node-only import, a Node global, or a global Fastly Compute lacks;
+// tests/edge-fastly-globals.test.ts runs the readers with only Fastly's globals; and
+// tsconfig.workers.json typechecks it against the Workers types.
 
 export {
 	type Document,
diff --git a/sdk/ts/resolvers/fetch.ts b/sdk/ts/resolvers/fetch.ts
index 70d12d79..87a20c29 100644
--- a/sdk/ts/resolvers/fetch.ts
+++ b/sdk/ts/resolvers/fetch.ts
@@ -10,6 +10,10 @@
 // of every hop. What the transport owns is the address: which hosts it will dial at all
 // (the SSRF guard and DNS pinning the Node default carries) and TLS. An edge runtime that
 // injects its own fetch keeps that part, and gets the rest from here.
+//
+// None of it needs AbortController, which Fastly Compute's runtime does not have: the
+// deadline is a timer the read races, and a signal reaches the transport only where the
+// runtime can make one.
 
 import { DirectoryUnavailable } from "./errors.ts";
 import { allowedScheme, MAX_REDIRECTS, redirectChainRefused } from "./ssrf.ts";
@@ -65,9 +69,11 @@ export interface FetchResponse {
 
 /** What a read asks of the transport beyond the URL: a WHATWG RequestInit subset.
  * Every document read passes `redirect: "manual"` — the read follows a redirect itself,
- * vetting each hop, and a key directory is never fetched through one — and a `signal`
- * the read aborts at its deadline. The shipped transports honour both, and the global
- * fetch reads the same members. */
+ * vetting each hop, and a key directory is never fetched through one — and, where the
+ * runtime has AbortController, a `signal` the read aborts at its deadline. Fastly Compute
+ * has none, so there the transport is never told to stop, and the read ends at its
+ * deadline all the same. The shipped transports honour both members, and the global
+ * fetch reads the same ones. */
 export interface FetchInit {
 	redirect?: "follow" | "manual";
 	signal?: AbortSignal;
@@ -78,7 +84,7 @@ export interface FetchInit {
  * (@fora-protocol/sdk/resolvers) defaults to its SSRF-guarded undici transport. A
  * FetchLike that ignores `init` still cannot widen what a read accepts: the read refuses
  * a response marked `redirected`, bounds the body itself, and gives up at its deadline
- * whether or not the transport stops. */
+ * whether or not the transport stops, or was handed a signal at all. */
 export type FetchLike = (url: string, init?: FetchInit) => Promise<FetchResponse>;
 
 /** One document as it was served: its bytes, the media type it was labelled with, and
@@ -110,11 +116,14 @@ const REDIRECT_STATUSES: ReadonlySet<number> = new Set([301, 302, 303, 307, 308]
  * or a non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
  * composite relies on to distinguish an outage from an unknown key. A blocked SSRF
  * target and a body past the cap are transport failures and surface the same way
- * (never a valid empty doc). The one GET every document read shares, and the place its
- * bounds are enforced, whatever transport `fetchFn` is:
+ * (never a valid empty doc). So does any other failure of the read, its setup included:
+ * every error is a DirectoryUnavailable whose cause is the error that ended the read. The
+ * one GET every document read shares, and the place its bounds are enforced, whatever
+ * transport `fetchFn` is:
  *
  *  - the body is read up to MAX_DOC_BYTES and refused past it, never truncated;
- *  - the whole read, every hop and the body included, ends at DOCUMENT_READ_TIMEOUT_MS;
+ *  - the whole read, every hop and the body included, ends at DOCUMENT_READ_TIMEOUT_MS,
+ *    on a runtime with AbortController or without one;
  *  - only http and https URLs are fetched, the first one included;
  *  - a redirect is followed by the read itself, never by the transport: at most
  *    MAX_REDIRECTS hops, a relative Location resolved against the current URL, and a
@@ -131,31 +140,14 @@ export async function fetchDocument(
 	url: string,
 	opts: { noRedirect?: boolean } = {},
 ): Promise<Fetched> {
-	const controller = new AbortController();
-	let timer: ReturnType<typeof setTimeout> | undefined;
-	const expired = new Promise<never>((_resolve, reject) => {
-		timer = setTimeout(() => {
-			controller.abort();
-			reject(new DirectoryUnavailable(`no complete answer for ${url} within ${DOCUMENT_READ_TIMEOUT_MS} ms`));
-		}, DOCUMENT_READ_TIMEOUT_MS);
-	});
-	// The race below observes the deadline; this stops it surfacing as an unhandled
-	// rejection when the read finishes first.
-	expired.catch(() => undefined);
-	const beforeDeadline = <T>(work: Promise<T>): Promise<T> => Promise.race([work, expired]);
-
+	let deadline: ReadDeadline | undefined;
 	try {
+		deadline = startDeadline(url);
 		let target = url;
 		let current = documentURL(url);
 		let hops = 0;
 		for (;;) {
-			let resp: FetchResponse;
-			try {
-				resp = await beforeDeadline(fetchFn(target, { redirect: "manual", signal: controller.signal }));
-			} catch (err) {
-				if (err instanceof DirectoryUnavailable) throw err;
-				throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
-			}
+			const resp = await deadline.before(answerOf(fetchFn(target, readInit(deadline.signal)), deadline.onExpiry));
 			const isRedirect = resp.status >= 300 && resp.status < 400;
 			if (resp.redirected === true || (isRedirect && opts.noRedirect === true)) {
 				discardBody(resp);
@@ -179,13 +171,7 @@ export async function fetchDocument(
 				discardBody(resp);
 				throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
 			}
-			let body: Uint8Array;
-			try {
-				body = await beforeDeadline(readCapped(resp, url, controller.signal));
-			} catch (err) {
-				if (err instanceof DirectoryUnavailable) throw err;
-				throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
-			}
+			const body = await deadline.before(readCapped(resp, url, deadline.onExpiry));
 			const headers = resp.headers;
 			return {
 				url,
@@ -194,11 +180,93 @@ export async function fetchDocument(
 				header: (name) => headers?.get(name) ?? null,
 			};
 		}
+	} catch (err) {
+		// The deadline and every bound refuse with a DirectoryUnavailable of their own; any
+		// other failure, the transport's included, becomes the cause of one.
+		if (err instanceof DirectoryUnavailable) throw err;
+		throw new DirectoryUnavailable(`fetch ${url}`, { cause: err });
 	} finally {
-		if (timer !== undefined) clearTimeout(timer);
+		deadline?.clear();
 	}
 }
 
+/** Registers `stop` to run when a read's deadline passes, and returns its removal. */
+type OnExpiry = (stop: () => void) => () => void;
+
+/** The one deadline a read runs under, DOCUMENT_READ_TIMEOUT_MS from its start. */
+interface ReadDeadline {
+	/** The signal handed to the transport and aborted at the deadline, or undefined where
+	 * the runtime has no AbortController, as Fastly Compute has none. */
+	readonly signal: AbortSignal | undefined;
+	/** `work`, or the deadline's refusal if the deadline passes first. */
+	before<T>(work: Promise<T>): Promise<T>;
+	/** What else stops at the deadline: a body being read, an answer still awaited. */
+	readonly onExpiry: OnExpiry;
+	/** Clears the timer once the read is over. */
+	clear(): void;
+}
+
+/** startDeadline starts the deadline of a read of `url`. The deadline is a timer the read
+ * races, so it holds on every runtime and whatever the transport does. AbortController is
+ * looked for here, at each read, not when the module loads; where the runtime has one, the
+ * transport is handed its signal. When the timer fires it refuses the read first, then
+ * aborts the signal, then runs each registered stop. The order matters: a transport that
+ * fails as its signal aborts, or a body that ends because it was cancelled, would
+ * otherwise settle the read before the refusal does. */
+function startDeadline(url: string): ReadDeadline {
+	const controller = typeof AbortController === "function" ? new AbortController() : undefined;
+	const stops = new Set<() => void>();
+	let timer: ReturnType<typeof setTimeout> | undefined;
+	const expired = new Promise<never>((_resolve, reject) => {
+		timer = setTimeout(() => {
+			reject(new DirectoryUnavailable(`no complete answer for ${url} within ${DOCUMENT_READ_TIMEOUT_MS} ms`));
+			controller?.abort();
+			for (const stop of stops) {
+				try {
+					stop();
+				} catch {
+					// A stop that fails holds only its own resource; the read is over either way.
+				}
+			}
+		}, DOCUMENT_READ_TIMEOUT_MS);
+	});
+	// The race below observes the deadline; this stops it surfacing as an unhandled
+	// rejection when the read finishes first.
+	expired.catch(() => undefined);
+	return {
+		signal: controller?.signal,
+		before: <T>(work: Promise<T>): Promise<T> => Promise.race([work, expired]),
+		onExpiry: (stop) => {
+			stops.add(stop);
+			return () => {
+				stops.delete(stop);
+			};
+		},
+		clear: () => {
+			if (timer !== undefined) clearTimeout(timer);
+		},
+	};
+}
+
+/** The init every hop of a read hands its transport: follow no redirect, and carry the
+ * read's signal where it has one. Where it has none the member is left out, not set to
+ * undefined, so a transport that spreads init into the runtime's own fetch hands that fetch
+ * no signal either. A fresh object per hop, so a transport that changes the init it was
+ * handed changes nothing the next hop asks. */
+function readInit(signal: AbortSignal | undefined): FetchInit {
+	return signal === undefined ? { redirect: "manual" } : { redirect: "manual", signal };
+}
+
+/** The transport's answer to one hop. One that arrives after the deadline is released
+ * unread, as aborting the request releases it where the runtime has a signal to abort. */
+function answerOf(pending: Promise<FetchResponse>, onExpiry: OnExpiry): Promise<FetchResponse> {
+	const answer = Promise.resolve(pending);
+	const release = onExpiry(() => {
+		answer.then(discardBody, () => undefined);
+	});
+	return answer.finally(release);
+}
+
 /** The URL a read starts at: absolute, and http or https. Any other scheme names no
  * document this SDK fetches, whatever the injected transport would do with it. */
 function documentURL(url: string): URL {
@@ -246,8 +314,10 @@ function redirectTarget(current: URL, location: string | null, url: string): URL
  * never ends costs at most the cap; without one it takes `arrayBuffer()` (or `text()`)
  * whole and refuses the result. A chunk is accepted by ArrayBuffer.isView rather than
  * instanceof, so a stream from another realm (a Worker isolate, a vm context) reads the
- * same. */
-async function readCapped(resp: FetchResponse, url: string, signal: AbortSignal): Promise<Uint8Array> {
+ * same. At the deadline the read cancels the stream itself, with no AbortSignal involved,
+ * and refuses what it had: a cancelled stream reports an ordinary end, and a body cut off
+ * there is never returned short. */
+async function readCapped(resp: FetchResponse, url: string, onExpiry: OnExpiry): Promise<Uint8Array> {
 	const stream = resp.body;
 	if (stream === undefined || stream === null) {
 		const bytes = resp.arrayBuffer !== undefined
@@ -262,13 +332,19 @@ async function readCapped(resp: FetchResponse, url: string, signal: AbortSignal)
 	const stop = (): void => {
 		reader.cancel().catch(() => undefined);
 	};
-	// At the deadline the read stops waiting on the stream; this lets the stream stop too.
-	signal.addEventListener("abort", stop, { once: true });
+	// At the deadline the read stops waiting on the stream; this stops the stream too, and
+	// marks the read so it refuses what it had rather than returning it.
+	let cutOff = false;
+	const release = onExpiry(() => {
+		cutOff = true;
+		stop();
+	});
 	try {
 		const chunks: Uint8Array[] = [];
 		let total = 0;
 		for (;;) {
 			const { done, value } = await reader.read();
+			if (cutOff) throw new DirectoryUnavailable(`the body of ${url} was cut off at the deadline`);
 			if (done) break;
 			if (value === undefined || !ArrayBuffer.isView(value)) {
 				stop();
@@ -289,7 +365,7 @@ async function readCapped(resp: FetchResponse, url: string, signal: AbortSignal)
 		}
 		return out;
 	} finally {
-		signal.removeEventListener("abort", stop);
+		release();
 	}
 }
 
diff --git a/sdk/ts/tests/edge-fastly-globals.test.ts b/sdk/ts/tests/edge-fastly-globals.test.ts
new file mode 100644
index 00000000..2207b021
--- /dev/null
+++ b/sdk/ts/tests/edge-fastly-globals.test.ts
@@ -0,0 +1,260 @@
+// The edge entry where only the globals of Fastly Compute's JavaScript runtime exist.
+//
+// Fastly Compute has no AbortController and no AbortSignal: neither is in its runtime
+// (@fastly/js-compute 3.43.1), its typings declare neither, and its RequestInit takes no
+// signal. A document read that built an AbortController threw there before it fetched
+// anything, so a Fastly edge could read no key directory at all. The Workers types
+// (tsconfig.workers.json) and the Workers context of edge-no-eval.test.ts both declare
+// AbortController, so only a context holding Fastly's globals notices.
+//
+// This test bundles the edge entry as a Fastly Compute build resolves it and drives it in
+// such a context: every reader, a key directory signed in the same context through the
+// identity helpers and read through createWBAOfferDirectoryFetch and createWBAKeyResolver,
+// every bound of the read, and its deadline. Each refusal is counted only once its
+// transport answered and, where a reader answers absent rather than refusing, after a
+// control read in the same context succeeded.
+
+import vm from "node:vm";
+import { afterEach, beforeAll, describe, expect, it, vi } from "vitest";
+
+import { DOCUMENT_READ_TIMEOUT_MS, MAX_DOC_BYTES } from "../resolvers/fetch.ts";
+import { MAX_REDIRECTS } from "../resolvers/ssrf.ts";
+import { bundleProbe, FASTLY_CONDITIONS, fastlyGlobals, here, sandbox } from "./edge-sandbox.ts";
+import { stalledBody } from "./resolvers-harness.ts";
+
+const PROBE = `
+import {
+	createWBAKeyResolver,
+	createWBAOfferDirectoryFetch,
+	readLicenseDocument,
+	readManifest,
+	readRevocationList,
+	readWBADirectory,
+	WBA_DIRECTORY_MEDIA_TYPE,
+	WBA_DIRECTORY_PATH,
+} from ${JSON.stringify(here("../resolvers/edge.ts"))};
+import { directoryDocument, generateKey, signDirectoryResponse } from ${JSON.stringify(here("../core/identity.ts"))};
+
+const REVOCATIONS = '{"as_of":"2026-05-01T12:00:00Z","revoked":[]}';
+const LICENSE = "Licensed for retrieval-augmented answers.\\n";
+
+// A fetch answering from route, recording the members of every init it was handed.
+function recording(route) {
+	const inits = [];
+	const fetch = async (url, init) => {
+		inits.push(init === undefined ? "" : Object.keys(init).sort().join(","));
+		return route(url);
+	};
+	return { fetch, inits };
+}
+
+async function outcome(run) {
+	try {
+		return (await run()) === undefined ? "absent" : "ok";
+	} catch (e) {
+		return (e?.name ?? "error") + ": " + (e?.message ?? String(e));
+	}
+}
+
+// The key directory of pub.example, publishing one key and signed by it, built here.
+async function signedDirectory() {
+	const { keyPair, thumbprint } = await generateKey();
+	const body = JSON.stringify(await directoryDocument([keyPair.publicKey]));
+	const now = Math.floor(Date.now() / 1000);
+	const sig = await signDirectoryResponse(
+		"pub.example",
+		new TextEncoder().encode(body),
+		[{ privKey: keyPair.privateKey, keyid: thumbprint }],
+		now - 60,
+		now + 3600,
+	);
+	const headers = {
+		"content-type": WBA_DIRECTORY_MEDIA_TYPE,
+		"content-digest": sig.contentDigest,
+		"signature-input": sig.signatureInput,
+		signature: sig.signature,
+	};
+	const url = "https://pub.example" + WBA_DIRECTORY_PATH;
+	return {
+		thumbprint,
+		answer: (at) => (at === url ? new Response(body, { headers }) : new Response("", { status: 404 })),
+	};
+}
+
+async function sha256(text) {
+	const d = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(text)));
+	return "sha256:" + Array.from(d, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+globalThis.readers = async () => {
+	const directory = await signedDirectory();
+	const keys = recording(directory.answer);
+	const file = await createWBAOfferDirectoryFetch({ fetch: keys.fetch })("pub.example");
+	const key = await createWBAKeyResolver({ fetch: keys.fetch }).resolve(directory.thumbprint, "https://pub.example");
+	const manifest = JSON.stringify({
+		ver: "1.0",
+		role: "ROLE_PUBLISHER",
+		domain: "pub.example",
+		exchanges: [{ domain: "x.example", endpoint: "https://x.example", relationship: "PROVIDER_RELATIONSHIP_DIRECT" }],
+	});
+	const documents = recording((url) =>
+		url.endsWith("/terms.txt")
+			? new Response(LICENSE)
+			: url.endsWith("/revoked.json")
+				? new Response(REVOCATIONS)
+				: new Response(manifest, { headers: { "content-type": "application/json" } }),
+	);
+	return {
+		directory: await outcome(() => readWBADirectory("pub.example", { fetch: keys.fetch })),
+		offerDirectoryKeys: file?.keys?.length ?? "absent",
+		resolvedKeyBytes: key?.byteLength ?? "absent",
+		manifest: await outcome(() => readManifest("pub.example", { fetch: documents.fetch })),
+		revocations: await outcome(() => readRevocationList("https://pub.example/revoked.json", { fetch: documents.fetch })),
+		license: await outcome(async () =>
+			readLicenseDocument({ uri: "https://pub.example/terms.txt", uri_digest: await sha256(LICENSE) }, { fetch: documents.fetch }),
+		),
+		inits: [...new Set([...keys.inits, ...documents.inits])],
+	};
+};
+
+globalThis.bounds = async () => {
+	const elsewhere = () =>
+		new Response(null, { status: 302, headers: { location: "https://elsewhere.example" + WBA_DIRECTORY_PATH } });
+	const chain = (url) => {
+		const n = Number.parseInt(new URL(url).pathname.slice(1), 10);
+		return n > 0 ? new Response(null, { status: 302, headers: { location: "/" + (n - 1) } }) : new Response(REVOCATIONS);
+	};
+	const directory = await signedDirectory();
+	const control = recording(directory.answer);
+	const overCap = recording(() => new Response(new Uint8Array(${MAX_DOC_BYTES} + 1)));
+	const downgrade = recording(() => new Response(null, { status: 302, headers: { location: "http://pub.example/revoked.json" } }));
+	const keyDirectory = recording(elsewhere);
+	const offerDirectory = recording(elsewhere);
+	const atCap = recording(chain);
+	const pastCap = recording(chain);
+	return {
+		overCap: await outcome(() => readRevocationList("https://pub.example/revoked.json", { fetch: overCap.fetch })),
+		overCapCalls: overCap.inits.length,
+		downgrade: await outcome(() => readRevocationList("https://pub.example/revoked.json", { fetch: downgrade.fetch })),
+		downgradeCalls: downgrade.inits.length,
+		keyDirectoryRedirect: await outcome(() => readWBADirectory("pub.example", { fetch: keyDirectory.fetch })),
+		keyDirectoryRedirectCalls: keyDirectory.inits.length,
+		offerDirectoryControl: await outcome(() => createWBAOfferDirectoryFetch({ fetch: control.fetch })("pub.example")),
+		offerDirectoryRedirect: await outcome(() => createWBAOfferDirectoryFetch({ fetch: offerDirectory.fetch })("pub.example")),
+		offerDirectoryRedirectCalls: offerDirectory.inits.length,
+		redirectsAtCap: await outcome(() => readRevocationList("https://pub.example/${MAX_REDIRECTS}", { fetch: atCap.fetch })),
+		redirectsPastCap: await outcome(() => readRevocationList("https://pub.example/${MAX_REDIRECTS + 1}", { fetch: pastCap.fetch })),
+		redirectsPastCapCalls: pastCap.inits.length,
+	};
+};
+
+// One read through the transport the test hands in, settled to its outcome; the test moves
+// the clock.
+globalThis.readThrough = (fetch) => outcome(() => readRevocationList("https://pub.example/revoked.json", { fetch }));
+`;
+
+interface FastlyProbe {
+	readers(): Promise<Record<string, unknown>>;
+	bounds(): Promise<Record<string, unknown>>;
+	readThrough(fetch: (url: string, init?: unknown) => Promise<Response>): Promise<string>;
+}
+
+/** A transport the test hands the context, counting the calls it answered. */
+function counted(route: () => Promise<Response>): {
+	fetch: (url: string, init?: unknown) => Promise<Response>;
+	calls: () => number;
+} {
+	let calls = 0;
+	return {
+		fetch: () => {
+			calls += 1;
+			return route();
+		},
+		calls: () => calls,
+	};
+}
+
+describe("the edge entry where only Fastly Compute's globals exist", () => {
+	let bundle = "";
+	beforeAll(async () => {
+		bundle = await bundleProbe(PROBE, FASTLY_CONDITIONS);
+	}, 60_000);
+	afterEach(() => {
+		vi.useRealTimers();
+	});
+
+	// A fresh context per test, made at the call: one made after vi.useFakeTimers() runs on
+	// the fake timers.
+	function fastly(): FastlyProbe {
+		const context = sandbox(fastlyGlobals());
+		vm.runInContext(bundle, context);
+		return context as unknown as FastlyProbe;
+	}
+
+	it("has no AbortController and no AbortSignal, as Fastly Compute has neither", () => {
+		const context = sandbox(fastlyGlobals());
+		expect(vm.runInContext("[typeof AbortController, typeof AbortSignal, typeof ReadableStream].join()", context)).toBe(
+			"undefined,undefined,function",
+		);
+	});
+
+	it("reads every document, a signed key directory included, and hands the transport no signal", async () => {
+		expect(await fastly().readers()).toEqual({
+			directory: "ok",
+			offerDirectoryKeys: 1,
+			resolvedKeyBytes: 32,
+			manifest: "ok",
+			revocations: "ok",
+			license: "ok",
+			inits: ["redirect"],
+		});
+	});
+
+	it("keeps the cap, the redirect rules and a key directory's no-redirect rule", async () => {
+		expect(await fastly().bounds()).toEqual({
+			overCap: expect.stringMatching(/^DirectoryUnavailable: a document over the /),
+			overCapCalls: 1,
+			downgrade: expect.stringMatching(/^DirectoryUnavailable: a redirect from https to plaintext http /),
+			downgradeCalls: 1,
+			keyDirectoryRedirect: expect.stringMatching(/^DirectoryUnavailable: a key directory is never fetched through a redirect/),
+			keyDirectoryRedirectCalls: 1,
+			offerDirectoryControl: "ok",
+			offerDirectoryRedirect: "absent",
+			offerDirectoryRedirectCalls: 1,
+			redirectsAtCap: "ok",
+			redirectsPastCap: expect.stringMatching(/^DirectoryUnavailable: more than /),
+			redirectsPastCapCalls: MAX_REDIRECTS + 1,
+		});
+	});
+
+	it("ends a read at its deadline with no AbortController, and stops what it was reading", async () => {
+		// Only the timers are faked: the context keeps the real Date, performance and
+		// queueMicrotask, as Fastly's runtime would.
+		vi.useFakeTimers({ toFake: ["setTimeout", "clearTimeout"] });
+		const context = fastly();
+		const stalled = stalledBody();
+		const cutOff = stalledBody(new Uint8Array(10));
+		const late = stalledBody();
+		let answerLate: ((resp: Response) => void) | undefined;
+		const transports = [
+			counted(() => new Promise<Response>(() => undefined)),
+			counted(async () => new Response(stalled.stream)),
+			counted(async () => new Response(cutOff.stream)),
+			counted(
+				() =>
+					new Promise<Response>((resolve) => {
+						answerLate = resolve;
+					}),
+			),
+		];
+		const reads = Promise.all(transports.map((t) => context.readThrough(t.fetch)));
+		await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+		const deadline = `DirectoryUnavailable: no complete answer for https://pub.example/revoked.json within ${DOCUMENT_READ_TIMEOUT_MS} ms`;
+		expect(await reads).toEqual([deadline, deadline, deadline, deadline]);
+		expect(transports.map((t) => t.calls())).toEqual([1, 1, 1, 1]);
+
+		answerLate?.(new Response(late.stream));
+		await vi.advanceTimersByTimeAsync(0);
+		expect([stalled, cutOff, late].map((body) => body.cancelled())).toEqual([true, true, true]);
+	});
+});
diff --git a/sdk/ts/tests/edge-imports.guard.test.ts b/sdk/ts/tests/edge-imports.guard.test.ts
index dfc7a383..62f6f9cb 100644
--- a/sdk/ts/tests/edge-imports.guard.test.ts
+++ b/sdk/ts/tests/edge-imports.guard.test.ts
@@ -4,6 +4,8 @@ import { dirname, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { describe, expect, it } from "vitest";
 
+import { bundleSource, FASTLY_GLOBAL_NAMES, WORKERS_CONDITIONS } from "./edge-sandbox.ts";
+
 // Structural guard for the edge-safe surface.
 //
 // An edge runtime (Cloudflare Workers, Fastly Compute, Deno) has no undici and no Node
@@ -16,9 +18,19 @@ import { describe, expect, it } from "vitest";
 // __dirname). The Workers types declare Buffer and process as `any`, so the workers
 // typecheck (tsconfig.workers.json) cannot catch those two; this guard does.
 //
-// The meta-tests feed the detector synthetic source, and the last one walks the Node
-// entry (resolvers/index.ts), which must reach undici, to show the walk follows
-// re-exports at all.
+// The workers typecheck admits every global the Workers types declare, and Fastly
+// Compute's JavaScript runtime lacks most of them: AbortController, AbortSignal and
+// DOMException among others. On Fastly each is a ReferenceError. So the guard also bundles
+// the surface with each such global marked, wherever the code reaches it (by name, typeof,
+// instanceof, an alias, globalThis or self), and fails on any mark left in the bundle. Code
+// the bundle drops, such as an export nothing reaches, cannot run on Fastly and is not
+// counted. The one use it admits is the feature-detected form the document read builds its
+// AbortController with: typeof AbortController === "function" ? new AbortController() :
+// undefined.
+//
+// The meta-tests feed the detectors synthetic source, and one walks the Node entry
+// (resolvers/index.ts), which must reach undici, to show the walk follows re-exports at
+// all.
 
 const root = fileURLToPath(new URL("../", import.meta.url));
 
@@ -83,6 +95,51 @@ function tsFilesUnder(dir: string): string[] {
 	return out;
 }
 
+// The globals the Workers types declare, which the workers typecheck admits in the
+// edge-safe surface, less those Fastly Compute's JavaScript runtime declares.
+const WORKERS_TYPES = readFileSync(join(root, "node_modules/@cloudflare/workers-types/index.d.ts"), "utf8");
+const FASTLY_ABSENT = [
+	...new Set(
+		[...WORKERS_TYPES.matchAll(/^declare (?:var|let|const|function|class|abstract class|namespace) ([A-Za-z_$][\w$]*)/gm)].map(
+			(m) => m[1] as string,
+		),
+	),
+]
+	.filter((name) => !FASTLY_GLOBAL_NAMES.includes(name))
+	.sort();
+
+// Each of those globals becomes one marked identifier in the bundle, however the code
+// reaches it: esbuild's define replaces a reference to the global and leaves a binding that
+// shadows it, a member of another object and a string alone.
+const MARK = "__FASTLY_ABSENT__";
+const DEFINE = Object.fromEntries(
+	FASTLY_ABSENT.flatMap((name) => [name, `globalThis.${name}`, `self.${name}`].map((ref) => [ref, `${MARK}${name}`])),
+);
+const MARKED = new RegExp(`${MARK}(\\w+)`, "g");
+
+// The one use admitted: a global built only where the runtime has it, as the document read
+// builds its AbortController. esbuild prints `undefined` as `void 0`.
+const FEATURE_DETECTED = new RegExp(`typeof (${MARK}\\w+) === "function" \\? new \\1\\(\\) : void 0`, "g");
+
+// fastlyAbsentGlobals returns every global Fastly Compute lacks that `source` reaches once
+// bundled, other than in the feature-detected form.
+async function fastlyAbsentGlobals(source: string): Promise<string[]> {
+	const bundle = await bundleSource(source, {
+		conditions: WORKERS_CONDITIONS,
+		format: "esm",
+		define: DEFINE,
+		external: ["zod", "hono", "hono/*"],
+	});
+	return [...new Set([...bundle.replace(FEATURE_DETECTED, "").matchAll(MARKED)].map((m) => m[1] as string))].sort();
+}
+
+// The edge-safe surface as one module: the edge entry and every file of the pure trees, each
+// re-exported whole so nothing in it is shaken out.
+function edgeSafeSurface(): string {
+	const files = ["resolvers/edge.ts", ...["src", "core", "hono"].flatMap(tsFilesUnder)];
+	return files.map((file, i) => `export * as m${i} from ${JSON.stringify(join(root, file))};`).join("\n");
+}
+
 describe("edge-safe import graph", () => {
 	it("the edge resolvers entry reaches no undici, Node built-in or Node global", () => {
 		expect(walk("resolvers/edge.ts")).toEqual([]);
@@ -96,6 +153,10 @@ describe("edge-safe import graph", () => {
 		});
 	}
 
+	it("the edge-safe surface reaches no global Fastly Compute lacks, unless it checks for it first", async () => {
+		expect(await fastlyAbsentGlobals(edgeSafeSurface())).toEqual([]);
+	}, 60_000);
+
 	it("the edge entry is published as ./resolvers/edge", () => {
 		const pkg = JSON.parse(readFileSync(join(root, "package.json"), "utf8")) as { exports: Record<string, string> };
 		expect(pkg.exports["./resolvers/edge"]).toBe("./resolvers/edge.ts");
@@ -138,6 +199,39 @@ describe("edge-safe import graph", () => {
 		}
 	});
 
+	it("[meta] the marked globals are the Workers globals Fastly Compute lacks, and none it has", () => {
+		expect(FASTLY_ABSENT).toEqual(expect.arrayContaining(["AbortController", "AbortSignal", "DOMException", "HTMLRewriter"]));
+		for (const name of ["Response", "fetch", "crypto", "setTimeout", "ReadableStream", "TextDecoder"]) {
+			expect(FASTLY_ABSENT, name).not.toContain(name);
+		}
+	});
+
+	it("[meta positive] flags a global Fastly Compute lacks, however the code reaches it", async () => {
+		for (const src of [
+			"export const c = new AbortController();",
+			"export const isSignal = (x: unknown): boolean => x instanceof AbortSignal;",
+			"const C = AbortController; export const c = new C();",
+			"export const c = new globalThis.AbortController();",
+			"export const c = new self.AbortController();",
+			"export const s = AbortSignal.timeout(5);",
+			'export const c = typeof AbortSignal === "function" ? new AbortController() : undefined;',
+		]) {
+			expect(await fastlyAbsentGlobals(src), src).not.toEqual([]);
+		}
+	});
+
+	it("[meta negative] passes the feature-detected form, a shadowing binding, a member and a string", async () => {
+		for (const src of [
+			'export const c = typeof AbortController === "function" ? new AbortController() : undefined;',
+			"export const f = (AbortController: new () => object): object => new AbortController();",
+			"export const f = (o: { AbortController?: unknown }): unknown => o.AbortController;",
+			'export const s = "AbortController";',
+			"export const r = (): unknown[] => [new Response(null), setTimeout, crypto];",
+		]) {
+			expect(await fastlyAbsentGlobals(src), src).toEqual([]);
+		}
+	});
+
 	it("[meta would-be-missed] the walk follows re-exports: the Node entry reaches undici", () => {
 		const reached = walk("resolvers/index.ts");
 		expect(reached.some((o) => o.endsWith("-> undici"))).toBe(true);
diff --git a/sdk/ts/tests/edge-no-eval.test.ts b/sdk/ts/tests/edge-no-eval.test.ts
index f792098b..d522dd65 100644
--- a/sdk/ts/tests/edge-no-eval.test.ts
+++ b/sdk/ts/tests/edge-no-eval.test.ts
@@ -9,17 +9,13 @@
 // eval and new Function with the same EvalError. Every reader that runs the strict check
 // is driven to an accepted document, and a refused one, and the check by message name is
 // run too. The context has no global ReadableStream, as the reader's bounds must not
-// need one: an over-cap body and an https-to-http redirect are refused there too.
+// need one: an over-cap body and an https-to-http redirect are refused there too. The
+// build and the context come from edge-sandbox.ts, which the Fastly Compute probe shares.
 
-import { createRequire } from "node:module";
 import vm from "node:vm";
-import { fileURLToPath } from "node:url";
 import { describe, expect, it } from "vitest";
 
-const require = createRequire(import.meta.url);
-const esbuild = require("esbuild") as typeof import("esbuild");
-
-const here = (p: string): string => fileURLToPath(new URL(p, import.meta.url));
+import { bundleProbe, here, sandbox, WORKERS_CONDITIONS, workersGlobals } from "./edge-sandbox.ts";
 
 // The probe a Worker would run: each reader against a fetch answering one document.
 const PROBE = `
@@ -85,50 +81,11 @@ globalThis.probe = async () => {
 };
 `;
 
-async function buildProbe(): Promise<string> {
-	const out = await esbuild.build({
-		stdin: { contents: PROBE, resolveDir: here("."), loader: "ts" },
-		bundle: true,
-		write: false,
-		format: "iife",
-		platform: "neutral",
-		conditions: ["workerd", "worker", "browser"],
-		mainFields: ["module", "main"],
-		// One zod for the bundle, the one this package installed (vitest.config.ts says why).
-		alias: { zod: here("../node_modules/zod") },
-		logLevel: "silent",
-	});
-	const file = out.outputFiles[0];
-	if (file === undefined) throw new Error("esbuild produced no output");
-	return file.text;
-}
+const buildProbe = (): Promise<string> => bundleProbe(PROBE, WORKERS_CONDITIONS);
 
 // noEvalContext is a context with the globals a Worker has and code generation from
 // strings disabled.
-function noEvalContext(): vm.Context {
-	return vm.createContext(
-		{
-			Response,
-			Headers,
-			Request,
-			URL,
-			URLSearchParams,
-			TextEncoder,
-			TextDecoder,
-			crypto,
-			console,
-			setTimeout,
-			clearTimeout,
-			AbortController,
-			AbortSignal,
-			atob,
-			btoa,
-			structuredClone,
-			queueMicrotask,
-		},
-		{ codeGeneration: { strings: false, wasm: false } },
-	);
-}
+const noEvalContext = (): vm.Context => sandbox(workersGlobals());
 
 describe("the edge entry in a context that refuses code generation from strings", () => {
 	it("refuses eval and new Function, as Workers does", () => {
diff --git a/sdk/ts/tests/edge-sandbox.ts b/sdk/ts/tests/edge-sandbox.ts
new file mode 100644
index 00000000..01c1958e
--- /dev/null
+++ b/sdk/ts/tests/edge-sandbox.ts
@@ -0,0 +1,158 @@
+// The edge entry as an edge runtime runs it: bundled the way that runtime's build bundles
+// it, and run in a Node vm context that holds only the globals that runtime has.
+// edge-no-eval.test.ts runs it as Cloudflare Workers does, where code generation from
+// strings is refused; edge-fastly-globals.test.ts as Fastly Compute's JavaScript runtime,
+// which has no AbortController and no AbortSignal. Each probe imports the modules it drives
+// by absolute path (here) and leaves its entry points on globalThis. The edge-imports guard
+// bundles the edge-safe surface through bundleSource to find the globals it reaches.
+
+import { createRequire } from "node:module";
+import vm from "node:vm";
+import { fileURLToPath } from "node:url";
+
+const require = createRequire(import.meta.url);
+const esbuild = require("esbuild") as typeof import("esbuild");
+
+/** The absolute path of `p`, relative to this directory: how a probe names its imports. */
+export const here = (p: string): string => fileURLToPath(new URL(p, import.meta.url));
+
+/** The package conditions a Cloudflare Workers build resolves. */
+export const WORKERS_CONDITIONS = ["workerd", "worker", "browser"] as const;
+
+/** The package conditions a Fastly Compute build resolves. */
+export const FASTLY_CONDITIONS = ["fastly", "worker", "browser"] as const;
+
+/** Every global Fastly Compute's JavaScript runtime declares (@fastly/js-compute 3.43.1,
+ * types/globals.d.ts). AbortController and AbortSignal are not among them, and its
+ * RequestInit takes no signal. */
+export const FASTLY_GLOBAL_NAMES: readonly string[] = [
+	"addEventListener",
+	"atob",
+	"Backend",
+	"Blob",
+	"btoa",
+	"CacheOverride",
+	"clearInterval",
+	"clearTimeout",
+	"CompressionStream",
+	"ConfigStore",
+	"console",
+	"crypto",
+	"Crypto",
+	"CryptoKey",
+	"DecompressionStream",
+	"Dictionary",
+	"Event",
+	"EventTarget",
+	"fastly",
+	"fetch",
+	"File",
+	"FormData",
+	"Headers",
+	"KVStore",
+	"location",
+	"onfetch",
+	"performance",
+	"Performance",
+	"queueMicrotask",
+	"ReadableStream",
+	"ReadableStreamDefaultController",
+	"ReadableStreamDefaultReader",
+	"Request",
+	"Response",
+	"self",
+	"setInterval",
+	"setTimeout",
+	"structuredClone",
+	"SubtleCrypto",
+	"TextDecoder",
+	"TextEncoder",
+	"TransformStream",
+	"TransformStreamDefaultController",
+	"URL",
+	"URLSearchParams",
+	"WorkerLocation",
+	"WritableStream",
+	"WritableStreamDefaultController",
+	"WritableStreamDefaultWriter",
+];
+
+/** How bundleSource bundles one in-memory module. */
+export interface BundleOptions {
+	/** The package conditions the runtime's build resolves. */
+	conditions: readonly string[];
+	/** "iife" for a probe a context runs, "esm" for a bundle that is only read. */
+	format: "iife" | "esm";
+	/** Globals replaced as esbuild's define replaces them. */
+	define?: Record<string, string>;
+	/** Packages left out of the bundle. */
+	external?: string[];
+}
+
+/** bundleSource bundles `source`, a module whose imports name absolute paths, into one
+ * script. */
+export async function bundleSource(source: string, opts: BundleOptions): Promise<string> {
+	const external = opts.external ?? [];
+	const out = await esbuild.build({
+		stdin: { contents: source, resolveDir: here("."), loader: "ts" },
+		bundle: true,
+		write: false,
+		format: opts.format,
+		platform: "neutral",
+		conditions: [...opts.conditions],
+		mainFields: ["module", "main"],
+		// One zod for the bundle, the one this package installed (vitest.config.ts says why).
+		// An alias names zod by path, which an external "zod" would no longer match, so a
+		// bundle that leaves zod out takes no alias.
+		...(external.includes("zod") ? {} : { alias: { zod: here("../node_modules/zod") } }),
+		...(opts.define !== undefined ? { define: opts.define } : {}),
+		external,
+		logLevel: "silent",
+	});
+	const file = out.outputFiles[0];
+	if (file === undefined) throw new Error("esbuild produced no output");
+	return file.text;
+}
+
+/** bundleProbe bundles a probe into one script a context can run, as an esbuild build for
+ * a runtime resolving `conditions` would. */
+export const bundleProbe = (source: string, conditions: readonly string[]): Promise<string> =>
+	bundleSource(source, { conditions, format: "iife" });
+
+/** The globals a Worker has that the readers reach. There is no ReadableStream among them,
+ * as the reader's bounds must not need one. Read at the call, so a context made after
+ * vi.useFakeTimers() runs on the fake timers. */
+export function workersGlobals(): Record<string, unknown> {
+	return {
+		Response,
+		Headers,
+		Request,
+		URL,
+		URLSearchParams,
+		TextEncoder,
+		TextDecoder,
+		crypto,
+		console,
+		setTimeout,
+		clearTimeout,
+		AbortController,
+		AbortSignal,
+		atob,
+		btoa,
+		structuredClone,
+		queueMicrotask,
+	};
+}
+
+/** The globals of FASTLY_GLOBAL_NAMES that Node can supply, and no other. Read at the call,
+ * as workersGlobals is. */
+export function fastlyGlobals(): Record<string, unknown> {
+	const host = globalThis as unknown as Record<string, unknown>;
+	return Object.fromEntries(FASTLY_GLOBAL_NAMES.filter((name) => name in host).map((name) => [name, host[name]]));
+}
+
+/** sandbox is a context holding `globals` and nothing else. Code generation from strings is
+ * refused, as Workers refuses it, which is at least as strict as either runtime. */
+export function sandbox(globals: Record<string, unknown>): vm.Context {
+	return vm.createContext(globals, { codeGeneration: { strings: false, wasm: false } });
+}
diff --git a/sdk/ts/tests/resolvers-document-bounds.test.ts b/sdk/ts/tests/resolvers-document-bounds.test.ts
index b3970487..73d46124 100644
--- a/sdk/ts/tests/resolvers-document-bounds.test.ts
+++ b/sdk/ts/tests/resolvers-document-bounds.test.ts
@@ -4,10 +4,17 @@
 // first through a fetch answering WHATWG Responses (as a Worker's does), then through the
 // Node default transport against a real server. Go and Python enforce the same cap and
 // deadline in their readers; the redirect rules match their guarded clients.
+//
+// The bounds are exercised twice: on a runtime with AbortController and AbortSignal, and on
+// one without either, as Fastly Compute's JavaScript runtime is. Here both are stubbed as
+// undefined rather than deleted, because Node's own Response reads the global AbortSignal
+// when it first loads; edge-fastly-globals.test.ts runs the edge entry where neither exists
+// at all. A refusal counts only once the read is shown to have reached its transport,
+// because a read that failed before it fetched anything is a DirectoryUnavailable too.
 import { createServer, type Server } from "node:http";
 import type { AddressInfo } from "node:net";
 
-import { afterEach, describe, expect, it, vi } from "vitest";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import { readRevocationList } from "../resolvers/edge.ts";
 import { DirectoryUnavailable } from "../resolvers/errors.ts";
@@ -15,12 +22,14 @@ import {
 	DOCUMENT_READ_TIMEOUT_MS,
 	type FetchInit,
 	type FetchLike,
+	type FetchResponse,
 	fetchDocument,
 	fetchSoft,
 	MAX_DOC_BYTES,
 } from "../resolvers/fetch.ts";
 import { guardedFetchFromEnv } from "../resolvers/http.ts";
 import { MAX_REDIRECTS } from "../resolvers/ssrf.ts";
+import { stalledBody } from "./resolvers-harness.ts";
 
 /** A fetch answering from `route`, recording every URL and init it was handed. */
 function recordingFetch(route: (url: string) => Response | Promise<Response>): {
@@ -50,133 +59,275 @@ function chain(): ReturnType<typeof recordingFetch> {
 	});
 }
 
-describe("the document read bounds the body", () => {
-	it("accepts a body of exactly MAX_DOC_BYTES and refuses one byte more", async () => {
-		const exact = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES)));
-		expect((await fetchDocument(exact.fetch, "https://doc.example/d")).body.byteLength).toBe(MAX_DOC_BYTES);
+/** What `read` settled to: its value, or the error it was refused with. Attached before the
+ * clock moves, so a refusal is never an unhandled rejection. */
+const settled = <T>(read: Promise<T>): Promise<T | unknown> => read.catch((err: unknown) => err);
 
-		const over = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES + 1)));
-		await expect(fetchDocument(over.fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+/** The two runtimes a read must work on. Node, Workers and Deno have AbortController and
+ * AbortSignal; Fastly Compute has neither. The one with them runs first, so Node's own
+ * fetch machinery loads with them. */
+const RUNTIMES = [
+	{ name: "a runtime with AbortController", abort: true },
+	{ name: "a runtime without AbortController, as Fastly Compute is", abort: false },
+];
+
+describe.each(RUNTIMES)("on $name", ({ abort }) => {
+	beforeEach(() => {
+		if (!abort) {
+			vi.stubGlobal("AbortController", undefined);
+			vi.stubGlobal("AbortSignal", undefined);
+		}
+	});
+	afterEach(() => {
+		vi.unstubAllGlobals();
+		vi.useRealTimers();
 	});
 
-	it("stops reading a body that never ends once it passes the cap", async () => {
-		const chunk = new Uint8Array(64 * 1024);
-		let pulls = 0;
-		const endless = new ReadableStream<Uint8Array>({
-			pull(controller) {
-				pulls += 1;
-				controller.enqueue(chunk);
-			},
+	describe("the document read bounds the body", () => {
+		it("accepts a body of exactly MAX_DOC_BYTES and refuses one byte more", async () => {
+			const exact = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES)));
+			expect((await fetchDocument(exact.fetch, "https://doc.example/d")).body.byteLength).toBe(MAX_DOC_BYTES);
+
+			const over = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES + 1)));
+			await expect(fetchDocument(over.fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			expect(over.calls).toHaveLength(1);
 		});
-		const { fetch } = recordingFetch(() => ok(endless));
-		await expect(fetchDocument(fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
-		// The cap is 16 chunks; the read takes the one that crosses it and stops.
-		expect(pulls).toBeLessThanOrEqual(MAX_DOC_BYTES / chunk.byteLength + 2);
-	});
 
-	it("refuses an over-cap body through an edge reader, and fetchSoft reads it as absent", async () => {
-		const { fetch } = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES + 1)));
-		await expect(readRevocationList("https://doc.example/rev", { fetch })).rejects.toBeInstanceOf(DirectoryUnavailable);
-		expect(await fetchSoft(fetch, "https://doc.example/rev")).toBeUndefined();
-	});
-});
+		it("stops reading a body that never ends once it passes the cap", async () => {
+			const chunk = new Uint8Array(64 * 1024);
+			let pulls = 0;
+			const endless = new ReadableStream<Uint8Array>({
+				pull(controller) {
+					pulls += 1;
+					controller.enqueue(chunk);
+				},
+			});
+			const { fetch } = recordingFetch(() => ok(endless));
+			await expect(fetchDocument(fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			// The cap is 16 chunks; the read takes the one that crosses it and stops.
+			expect(pulls).toBeGreaterThan(MAX_DOC_BYTES / chunk.byteLength);
+			expect(pulls).toBeLessThanOrEqual(MAX_DOC_BYTES / chunk.byteLength + 2);
+		});
 
-describe("the document read follows redirects itself", () => {
-	it("asks the transport not to follow, and hands it the read's signal", async () => {
-		const { fetch, calls } = chain();
-		await fetchDocument(fetch, "https://doc.example/2");
-		expect(calls).toHaveLength(3);
-		for (const call of calls) {
-			expect(call.init?.redirect).toBe("manual");
-			expect(call.init?.signal).toBeInstanceOf(AbortSignal);
-		}
+		it("refuses an over-cap body through an edge reader, and fetchSoft reads it as absent", async () => {
+			const { fetch, calls } = recordingFetch(() => ok(new Uint8Array(MAX_DOC_BYTES + 1)));
+			await expect(readRevocationList("https://doc.example/rev", { fetch })).rejects.toBeInstanceOf(DirectoryUnavailable);
+			expect(await fetchSoft(fetch, "https://doc.example/rev")).toBeUndefined();
+			expect(calls).toHaveLength(2);
+		});
 	});
 
-	it(`follows ${MAX_REDIRECTS} redirects, resolving a relative Location, and refuses one more`, async () => {
-		const at = chain();
-		const doc = await fetchDocument(at.fetch, `https://doc.example/${MAX_REDIRECTS}`);
-		expect(doc.url).toBe(`https://doc.example/${MAX_REDIRECTS}`);
-		expect(at.calls.map((c) => c.url).at(-1)).toBe("https://doc.example/0");
+	describe("the document read follows redirects itself", () => {
+		it.runIf(abort)("asks the transport not to follow, and hands it the read's signal", async () => {
+			const { fetch, calls } = chain();
+			await fetchDocument(fetch, "https://doc.example/2");
+			expect(calls).toHaveLength(3);
+			for (const call of calls) {
+				expect(call.init?.redirect).toBe("manual");
+				expect(call.init?.signal).toBeInstanceOf(AbortSignal);
+			}
+		});
 
-		const over = chain();
-		await expect(fetchDocument(over.fetch, `https://doc.example/${MAX_REDIRECTS + 1}`)).rejects.toBeInstanceOf(
-			DirectoryUnavailable,
-		);
-		expect(over.calls).toHaveLength(MAX_REDIRECTS + 1);
-	});
+		it.runIf(!abort)("asks the transport not to follow, and hands it no signal", async () => {
+			const { fetch, calls } = chain();
+			await fetchDocument(fetch, "https://doc.example/2");
+			expect(calls).toHaveLength(3);
+			for (const call of calls) {
+				expect(call.init?.redirect).toBe("manual");
+				expect(Object.keys(call.init ?? {})).toEqual(["redirect"]);
+			}
+		});
 
-	it.each([
-		["a step down from https to plaintext http", "http://doc.example/next"],
-		["a scheme that is not http(s)", "ftp://doc.example/next"],
-		["credentials in the Location", "https://user:secret@doc.example/next"],
-		["no Location at all", ""],
-	])("refuses a redirect with %s", async (_name, location) => {
-		const { fetch, calls } = recordingFetch((url) =>
-			url === "https://doc.example/start" ? redirect(location) : ok("{}"),
-		);
-		await expect(fetchDocument(fetch, "https://doc.example/start")).rejects.toBeInstanceOf(DirectoryUnavailable);
-		expect(calls).toHaveLength(1);
-	});
+		it(`follows ${MAX_REDIRECTS} redirects, resolving a relative Location, and refuses one more`, async () => {
+			const at = chain();
+			const doc = await fetchDocument(at.fetch, `https://doc.example/${MAX_REDIRECTS}`);
+			expect(doc.url).toBe(`https://doc.example/${MAX_REDIRECTS}`);
+			expect(at.calls.map((c) => c.url).at(-1)).toBe("https://doc.example/0");
 
-	it("follows http to http, where the read started in plaintext", async () => {
-		const { fetch } = recordingFetch((url) =>
-			url === "http://doc.example/start" ? redirect("http://doc.example/next") : ok("{}"),
-		);
-		expect((await fetchDocument(fetch, "http://doc.example/start")).body.byteLength).toBe(2);
-	});
+			const over = chain();
+			await expect(fetchDocument(over.fetch, `https://doc.example/${MAX_REDIRECTS + 1}`)).rejects.toBeInstanceOf(
+				DirectoryUnavailable,
+			);
+			expect(over.calls).toHaveLength(MAX_REDIRECTS + 1);
+		});
 
-	it("refuses a 3xx that names no new location, and any 3xx for a key directory", async () => {
-		const notModified = recordingFetch(() => new Response(null, { status: 300 }));
-		await expect(fetchDocument(notModified.fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+		it.each([
+			["a step down from https to plaintext http", "http://doc.example/next"],
+			["a scheme that is not http(s)", "ftp://doc.example/next"],
+			["credentials in the Location", "https://user:secret@doc.example/next"],
+			["no Location at all", ""],
+		])("refuses a redirect with %s", async (_name, location) => {
+			const { fetch, calls } = recordingFetch((url) =>
+				url === "https://doc.example/start" ? redirect(location) : ok("{}"),
+			);
+			await expect(fetchDocument(fetch, "https://doc.example/start")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			expect(calls).toHaveLength(1);
+		});
 
-		const directory = recordingFetch(() => redirect("https://doc.example/elsewhere"));
-		await expect(
-			fetchDocument(directory.fetch, "https://doc.example/dir", { noRedirect: true }),
-		).rejects.toBeInstanceOf(DirectoryUnavailable);
-		expect(directory.calls).toHaveLength(1);
-	});
+		it("follows http to http, where the read started in plaintext", async () => {
+			const { fetch } = recordingFetch((url) =>
+				url === "http://doc.example/start" ? redirect("http://doc.example/next") : ok("{}"),
+			);
+			expect((await fetchDocument(fetch, "http://doc.example/start")).body.byteLength).toBe(2);
+		});
 
-	it("refuses a response the transport followed although it was asked not to", async () => {
-		const followed = ok("{}");
-		Object.defineProperty(followed, "redirected", { value: true });
-		const { fetch } = recordingFetch(() => followed);
-		await expect(fetchDocument(fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+		it("refuses a 3xx that names no new location, and any 3xx for a key directory", async () => {
+			const notModified = recordingFetch(() => new Response(null, { status: 300 }));
+			await expect(fetchDocument(notModified.fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			expect(notModified.calls).toHaveLength(1);
+
+			const directory = recordingFetch(() => redirect("https://doc.example/elsewhere"));
+			await expect(
+				fetchDocument(directory.fetch, "https://doc.example/dir", { noRedirect: true }),
+			).rejects.toBeInstanceOf(DirectoryUnavailable);
+			expect(directory.calls).toHaveLength(1);
+		});
+
+		it("refuses a response the transport followed although it was asked not to", async () => {
+			const followed = ok("{}");
+			Object.defineProperty(followed, "redirected", { value: true });
+			const { fetch, calls } = recordingFetch(() => followed);
+			await expect(fetchDocument(fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			expect(calls).toHaveLength(1);
+		});
+
+		it("never fetches a URL that is not http(s)", async () => {
+			const { fetch, calls } = recordingFetch(() => ok("{}"));
+			await expect(fetchDocument(fetch, "data:application/json,{}")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			expect(calls).toHaveLength(0);
+		});
 	});
 
-	it("never fetches a URL that is not http(s)", async () => {
-		const { fetch, calls } = recordingFetch(() => ok("{}"));
-		await expect(fetchDocument(fetch, "data:application/json,{}")).rejects.toBeInstanceOf(DirectoryUnavailable);
-		expect(calls).toHaveLength(0);
+	describe("the document read ends at its deadline", () => {
+		it.runIf(abort)("gives up when the transport never answers, and aborts the signal it passed", async () => {
+			vi.useFakeTimers();
+			let seen: AbortSignal | undefined;
+			const fetch: FetchLike = (_url, init) => {
+				seen = init?.signal;
+				return new Promise(() => undefined);
+			};
+			const read = fetchDocument(fetch, "https://doc.example/slow");
+			const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
+			await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+			await refused;
+			expect(seen?.aborted).toBe(true);
+		});
+
+		it.runIf(!abort)("gives up when the transport never answers, though it could hand it no signal", async () => {
+			vi.useFakeTimers();
+			const seen: (FetchInit | undefined)[] = [];
+			const fetch: FetchLike = (_url, init) => {
+				seen.push(init);
+				return new Promise(() => undefined);
+			};
+			const read = fetchDocument(fetch, "https://doc.example/slow");
+			const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
+			await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+			await refused;
+			expect(seen).toHaveLength(1);
+			expect(Object.keys(seen[0] ?? {})).toEqual(["redirect"]);
+		});
+
+		it("reports its deadline even when the transport gives up as its signal aborts", async () => {
+			vi.useFakeTimers();
+			// A transport that honours the signal, as undici does: it fails the moment the
+			// signal aborts. The read's own refusal must still be the one reported. Where there
+			// is no signal to honour, it never answers.
+			const seen: number[] = [];
+			const fetch: FetchLike = (_url, init) => {
+				seen.push(1);
+				return new Promise((_resolve, reject) => {
+					init?.signal?.addEventListener("abort", () => reject(new Error("aborted by the read")), { once: true });
+				});
+			};
+			const outcome = settled(fetchDocument(fetch, "https://doc.example/slow"));
+			await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+			const err = await outcome;
+			expect(err).toBeInstanceOf(DirectoryUnavailable);
+			expect((err as Error).message).toContain(`within ${DOCUMENT_READ_TIMEOUT_MS} ms`);
+			expect(seen).toHaveLength(1);
+		});
+
+		it("gives up on a body that stalls, and cancels it", async () => {
+			vi.useFakeTimers();
+			const body = stalledBody();
+			const { fetch, calls } = recordingFetch(() => ok(body.stream));
+			const read = fetchDocument(fetch, "https://doc.example/slow");
+			const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
+			await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+			await refused;
+			expect(calls).toHaveLength(1);
+			expect(body.cancelled()).toBe(true);
+		});
+
+		it("refuses a body cut off at the deadline, and never returns it short", async () => {
+			vi.useFakeTimers();
+			const body = stalledBody(new Uint8Array(10));
+			const { fetch, calls } = recordingFetch(() => ok(body.stream));
+			const outcome = settled(fetchDocument(fetch, "https://doc.example/slow"));
+			await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+			const err = await outcome;
+			expect(err).toBeInstanceOf(DirectoryUnavailable);
+			expect((err as Error).message).toContain(`within ${DOCUMENT_READ_TIMEOUT_MS} ms`);
+			expect(calls).toHaveLength(1);
+			expect(body.cancelled()).toBe(true);
+		});
+
+		it("releases an answer that arrives after the deadline, unread", async () => {
+			vi.useFakeTimers();
+			const body = stalledBody();
+			let answer: ((resp: Response) => void) | undefined;
+			const { fetch, calls } = recordingFetch(
+				() =>
+					new Promise<Response>((resolve) => {
+						answer = resolve;
+					}),
+			);
+			const read = fetchDocument(fetch, "https://doc.example/late");
+			const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
+			await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
+			await refused;
+			expect(calls).toHaveLength(1);
+			answer?.(ok(body.stream));
+			await vi.advanceTimersByTimeAsync(0);
+			expect(body.cancelled()).toBe(true);
+		});
 	});
 });
 
-describe("the document read ends at its deadline", () => {
+describe("every failure of a document read is a DirectoryUnavailable, its cause the error that ended it", () => {
 	afterEach(() => {
-		vi.useRealTimers();
+		vi.unstubAllGlobals();
 	});
 
-	it("gives up when the transport never answers, and aborts the signal it passed", async () => {
-		vi.useFakeTimers();
-		let seen: AbortSignal | undefined;
-		const fetch: FetchLike = (_url, init) => {
-			seen = init?.signal;
-			return new Promise(() => undefined);
-		};
-		const read = fetchDocument(fetch, "https://doc.example/slow");
-		const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
-		await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
-		await refused;
-		expect(seen?.aborted).toBe(true);
+	it("when the runtime's AbortController cannot be built", async () => {
+		const boom = new Error("no controller");
+		vi.stubGlobal(
+			"AbortController",
+			class {
+				constructor() {
+					throw boom;
+				}
+			},
+		);
+		const { fetch, calls } = recordingFetch(() => ok("{}"));
+		const err = await settled(fetchDocument(fetch, "https://doc.example/d"));
+		expect(err).toBeInstanceOf(DirectoryUnavailable);
+		expect((err as Error).cause).toBe(boom);
+		expect(calls).toHaveLength(0);
 	});
 
-	it("gives up on a body that stalls", async () => {
-		vi.useFakeTimers();
-		const stalled = new ReadableStream<Uint8Array>({ pull: () => new Promise(() => undefined) });
-		const { fetch } = recordingFetch(() => ok(stalled));
-		const read = fetchDocument(fetch, "https://doc.example/slow");
-		const refused = expect(read).rejects.toBeInstanceOf(DirectoryUnavailable);
-		await vi.advanceTimersByTimeAsync(DOCUMENT_READ_TIMEOUT_MS);
-		await refused;
+	it("when the transport's answer throws as the read inspects it", async () => {
+		const boom = new TypeError("status unreadable");
+		const fetch: FetchLike = async (): Promise<FetchResponse> => ({
+			get status(): number {
+				throw boom;
+			},
+			text: async () => "",
+		});
+		const err = await settled(fetchDocument(fetch, "https://doc.example/d"));
+		expect(err).toBeInstanceOf(DirectoryUnavailable);
+		expect((err as Error).cause).toBe(boom);
 	});
 });
 
diff --git a/sdk/ts/tests/resolvers-harness.ts b/sdk/ts/tests/resolvers-harness.ts
index 4220a798..2de6640a 100644
--- a/sdk/ts/tests/resolvers-harness.ts
+++ b/sdk/ts/tests/resolvers-harness.ts
@@ -333,6 +333,28 @@ export const loopbackFetch = (
 export const httpsToLoopback: FetchLike = (url, init) =>
 	fetch(url.replace(/^https:\/\/127\.0\.0\.1:/, "http://127.0.0.1:"), init?.redirect === "manual" ? { redirect: "manual" } : {});
 
+/** A served body that yields `first`, when given, and then never another chunk, recording
+ * whether its reader cancelled it: what a document read meets from an origin that stops
+ * sending, before or after its first bytes. */
+export function stalledBody(first?: Uint8Array): { stream: ReadableStream<Uint8Array>; cancelled: () => boolean } {
+	let cancelled = false;
+	let sent = false;
+	const stream = new ReadableStream<Uint8Array>({
+		pull(controller) {
+			if (first !== undefined && !sent) {
+				sent = true;
+				controller.enqueue(first);
+				return;
+			}
+			return new Promise<void>(() => undefined);
+		},
+		cancel() {
+			cancelled = true;
+		},
+	});
+	return { stream, cancelled: () => cancelled };
+}
+
 // Parsed-WBAFile builders. These mirror the inline helpers the active-key
 // behavior suite uses, hoisted here so the offer-key-cache suite consumes a
 // PARSED WBAFile (the shape the cache's injected OfferDirectoryFetch seam

From 006b71bd00b052b03cb8ad7e334c5430594185b9 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Wed, 14 Oct 2026 15:24:02 +0200
Subject: [PATCH 162/164] Record that the TypeScript document read needs no
 AbortController, in the changelog, the design history and the Fastly adapter
 notes

The changelog's entry on TypeScript edge runtimes said the read passes
its signal to the transport. It does so only where the runtime has
AbortController. The entry now says the bounds need none, that the
read cancels and refuses a body cut off at the deadline, that a test
runs the edge readers with only the globals Fastly Compute declares,
and that the edge guard fails on any global the edge-safe code
reaches that the Workers types declare and Fastly lacks. The website
mirror carries the same text.

The design history's entry on the reader's own bounds records why the
deadline is the read's own timer: Fastly Compute has neither
AbortController nor AbortSignal and its fetch takes no signal, so a
polyfill would add a dependency and stop nothing. It also records why
the read refuses before it aborts and cancels, and why only a test
with Fastly's globals and the guard could have noticed.

The Fastly section of the CDN adapters page says what the TypeScript
SDK needs there: verifyEd25519, since the runtime has no WebCrypto
Ed25519, and nothing for AbortController.
---
 docs/design-history.md                        | 35 ++++++++++++++-----
 proto/CHANGELOG.md                            | 23 +++++++-----
 .../components/edge-function/cdn-adapters.mdx |  2 ++
 .../src/content/docs/reference/changelog.mdx  | 23 +++++++-----
 4 files changed, 57 insertions(+), 26 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index 7ec70d63..f582be88 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2558,14 +2558,33 @@ unauthenticated `Signature-Agent` names.
 
 The read now owns its bounds on both entries. It reads the body through the stream with a
 byte budget and refuses it past 1 MiB without taking the rest, puts the whole read —
-every hop and the body — under one 30-second deadline whose signal it hands the
-transport, and follows redirects itself: it asks the transport not to follow, takes the
-Location, resolves it against the current URL, and refuses a hop out of http(s), from
-https down to plaintext http, or carrying credentials, up to the shared cap of five. A
-response the transport marks as redirected is refused, because the read asked it not to
-follow and could vet none of the hops it took. What stays with the transport is the
-address: which hosts it will dial at all, and TLS. The Node default keeps its SSRF guard
-and DNS pinning, and an edge caller keeps the equivalent for its runtime.
+every hop and the body — under one 30-second deadline, and follows redirects itself: it
+asks the transport not to follow, takes the Location, resolves it against the current
+URL, and refuses a hop out of http(s), from https down to plaintext http, or carrying
+credentials, up to the shared cap of five. A response the transport marks as redirected
+is refused, because the read asked it not to follow and could vet none of the hops it
+took. What stays with the transport is the address: which hosts it will dial at all, and
+TLS. The Node default keeps its SSRF guard and DNS pinning, and an edge caller keeps the
+equivalent for its runtime.
+
+The deadline needs no `AbortController`. Fastly Compute's JavaScript runtime has none, nor
+`AbortSignal`, and the edge entry names Fastly among its runtimes. A read that built a
+controller threw before it fetched anything, so a Fastly edge could load no key directory
+at all. The deadline is a timer the read races against the transport and the body, so it
+ends the read at 30 seconds whatever the transport does. Where the runtime has
+`AbortController`, the transport is also handed a signal the read aborts then. On every
+runtime the read cancels a body it is still reading at the deadline and refuses it,
+because a cancelled stream reports an ordinary end and the read would otherwise hand back
+a short document. It also releases an answer that arrives after the deadline. At the
+deadline the read refuses first, and only then aborts the signal and cancels the body, so
+neither a transport that fails as its signal aborts nor a body that ends because it was
+cancelled can answer for the read in place of the deadline. A polyfill would have been a
+new dependency for one runtime, and would have stopped nothing there, because Fastly's
+`fetch` takes no signal. The Workers types and the Workers test sandbox both declare
+`AbortController`, so neither could notice it was missing. A test now runs the edge
+readers with only the globals Fastly Compute declares, and the edge guard fails on any
+global the edge-safe code reaches that the Workers types declare and Fastly lacks, unless
+the code checks for it first.
 
 Following redirects in the reader rather than in the transport is a deliberate difference
 from Go and Python, where the guarded client owns the redirect policy. TypeScript has no
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index a734f0e9..7811beee 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -1091,17 +1091,22 @@ SDKs, in all three languages:
   edge runtime: the resolvers with an injected `fetch` and no Node import. The existing
   `@fora-protocol/sdk/resolvers` entry keeps its guarded Node default. A guard test fails
   on any `undici` or `node:` import, and any Node global, reachable from the edge entry,
-  `src/`, `core/` or `hono/`. `verifyDirectoryResponse`, `readWBADirectory`,
-  `createWBAKeyResolver` and `createWBAOfferDirectoryFetch` take the injectable
-  `verifyEd25519` primitive `verifyAgentBinding` already took, so a runtime without
-  WebCrypto Ed25519, such as Fastly Compute, no longer reads every directory key as
-  unsigned. The document read bounds itself on both TypeScript entries, as Go's and
-  Python's readers do: it caps a body at 1 MiB, ends the whole read at 30 seconds and
-  passes its signal to the transport, and follows redirects itself, at most five,
-  refusing a hop out of http(s), from https down to plaintext http or carrying
+  `src/`, `core/` or `hono/`, and on any global that code reaches which the Workers types
+  declare and Fastly Compute lacks, unless the code checks for it first.
+  `verifyDirectoryResponse`, `readWBADirectory`, `createWBAKeyResolver` and
+  `createWBAOfferDirectoryFetch` take the injectable `verifyEd25519` primitive
+  `verifyAgentBinding` already took, so a runtime without WebCrypto Ed25519, such as
+  Fastly Compute, no longer reads every directory key as unsigned. The document read
+  bounds itself on both TypeScript entries, as Go's and Python's readers do: it caps a
+  body at 1 MiB, ends the whole read at 30 seconds, and follows redirects itself, at most
+  five, refusing a hop out of http(s), from https down to plaintext http or carrying
   credentials, and any redirect for a key directory. Those bounds lived only in the Node
   transports, so a read through an edge runtime's own fetch was unbounded; on Node, a
-  document read no longer follows a redirect from https to http either.
+  document read no longer follows a redirect from https to http either. None of the
+  bounds needs `AbortController`, which Fastly Compute lacks: where the runtime has one,
+  the read also hands the transport a signal it aborts at the deadline, and on any
+  runtime it cancels a body it is still reading and refuses it rather than return it
+  short. A test runs the edge readers with only the globals Fastly Compute declares.
 - TypeScript strict check: the strict schemas of the messages the SDK checks by name are
   compiled at build time with ajv's standalone output, into the generated, drift-gated
   `gen/ts/strict/`, so the strict readers and the client's strict decoding generate no code
diff --git a/website/src/content/docs/components/edge-function/cdn-adapters.mdx b/website/src/content/docs/components/edge-function/cdn-adapters.mdx
index 10cbd8f1..6323770a 100644
--- a/website/src/content/docs/components/edge-function/cdn-adapters.mdx
+++ b/website/src/content/docs/components/edge-function/cdn-adapters.mdx
@@ -277,6 +277,8 @@ mean writing the Ed25519 verifier as an EdgeWorker, which the platform's 4 ms bu
 - Fastly KV Store is strongly consistent within a POP, making single-use enforcement reliable without the eventual-consistency problems of Workers KV or EdgeKV.
 - Full WASM runtime means you can compile the same Rust/Go verification logic that runs in the Exchange.
 
+**With the TypeScript SDK**: Fastly's JavaScript runtime has no WebCrypto Ed25519 and no `AbortController`. Pass `verifyEd25519` to the SDK's verifiers and directory readers; its document reads need no `AbortController`, and still end at their 30-second deadline.
+
 **Recommended approach**: Single Compute service.
 
 ```mermaid
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 7366c8e5..2427a3ad 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -1103,17 +1103,22 @@ SDKs, in all three languages:
   edge runtime: the resolvers with an injected `fetch` and no Node import. The existing
   `@fora-protocol/sdk/resolvers` entry keeps its guarded Node default. A guard test fails
   on any `undici` or `node:` import, and any Node global, reachable from the edge entry,
-  `src/`, `core/` or `hono/`. `verifyDirectoryResponse`, `readWBADirectory`,
-  `createWBAKeyResolver` and `createWBAOfferDirectoryFetch` take the injectable
-  `verifyEd25519` primitive `verifyAgentBinding` already took, so a runtime without
-  WebCrypto Ed25519, such as Fastly Compute, no longer reads every directory key as
-  unsigned. The document read bounds itself on both TypeScript entries, as Go's and
-  Python's readers do: it caps a body at 1 MiB, ends the whole read at 30 seconds and
-  passes its signal to the transport, and follows redirects itself, at most five,
-  refusing a hop out of http(s), from https down to plaintext http or carrying
+  `src/`, `core/` or `hono/`, and on any global that code reaches which the Workers types
+  declare and Fastly Compute lacks, unless the code checks for it first.
+  `verifyDirectoryResponse`, `readWBADirectory`, `createWBAKeyResolver` and
+  `createWBAOfferDirectoryFetch` take the injectable `verifyEd25519` primitive
+  `verifyAgentBinding` already took, so a runtime without WebCrypto Ed25519, such as
+  Fastly Compute, no longer reads every directory key as unsigned. The document read
+  bounds itself on both TypeScript entries, as Go's and Python's readers do: it caps a
+  body at 1 MiB, ends the whole read at 30 seconds, and follows redirects itself, at most
+  five, refusing a hop out of http(s), from https down to plaintext http or carrying
   credentials, and any redirect for a key directory. Those bounds lived only in the Node
   transports, so a read through an edge runtime's own fetch was unbounded; on Node, a
-  document read no longer follows a redirect from https to http either.
+  document read no longer follows a redirect from https to http either. None of the
+  bounds needs `AbortController`, which Fastly Compute lacks: where the runtime has one,
+  the read also hands the transport a signal it aborts at the deadline, and on any
+  runtime it cancels a body it is still reading and refuses it rather than return it
+  short. A test runs the edge readers with only the globals Fastly Compute declares.
 - TypeScript strict check: the strict schemas of the messages the SDK checks by name are
   compiled at build time with ajv's standalone output, into the generated, drift-gated
   `gen/ts/strict/`, so the strict readers and the client's strict decoding generate no code

From 69c7a9a4d5e0ab4ace2e74a1fa598aef1cf8c6a8 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Wed, 14 Oct 2026 23:16:08 +0200
Subject: [PATCH 163/164] Name a missing document and a refused redirect in the
 document reads, and let the directory reads take a clock, in the SDKs

Every failure of a document read was one error, so a caller that must
answer a missing key directory differently from an unreachable one
could only read the message: a 404, a 503, a refused redirect and a
dial failure all read as an unavailable document.

The reads now name two answers, each still an unavailable document: a
404 on any read (Go ErrDocumentNotFound, Python DocumentNotFoundError,
TypeScript DocumentNotFound), and any 3xx answering a key-directory
read (ErrRedirectRefused, RedirectRefusedError, RedirectRefused). Go
wraps each together with ErrDirectoryUnavailable, and Python and
TypeScript subclass it, so every existing check for an unavailable
document still matches. Go's key-directory read now takes every
redirect back as the answer and refuses any 3xx by its status: its
client consulted the redirect hook only for a followable status with a
Location, so a 300, a 304 or a redirect with no Location read as a
plain status, and a refused one copied the raw Location, credentials
included, into the error. A response whose Content-Digest does not
match its body is unsigned in Go too, as Python and TypeScript already
reported it.

The directory reader and the offer-directory fetch judged response
signatures at the wall clock, while the key resolver and the offer-key
cache took an injected one. Both now take a clock: ReadOptions.Now, and
an optional trailing WBADirectoryFetcherOptions on Go's
NewWBADirectoryFetcher, whose released call still compiles;
read_wba_directory(now=) and create_wba_offer_directory_fetch(now=) in
Python; ReadDocumentOptions.now and WBAOfferDirectoryFetchOptions.now
in TypeScript. The Python and TypeScript offer fetches still contain
every failure as None and undefined.

A new corpus, document-fetch-vectors.json, emitted by driving the Go
read, pins the verdict for each status in all three SDKs. The parity
map and matrix list the two new failures and the new options struct.
The READMEs name the failures and the clocks; the Go list also names
the two failures it had left out, and a Python docstring no longer says
the offer-key prefetch gathers without return_exceptions. A TypeScript
test of a transport that follows redirects anyway now reaches its
server rather than failing on TLS.
---
 docs/sdk-parity-matrix.md                     |   8 +-
 sdk/go/README.md                              |  17 +-
 sdk/go/resolvers/cachedofferkeyresolver.go    |  36 +++-
 .../resolvers/document_fetch_corpus_test.go   | 100 +++++++++
 sdk/go/resolvers/documents.go                 | 120 ++++++++---
 sdk/go/resolvers/documents_test.go            | 202 +++++++++++++++++-
 .../gen_document_fetch_vectors_test.go        | 161 ++++++++++++++
 .../signed_directory_helpers_test.go          |  24 ++-
 .../testdata/document-fetch-vectors.json      | 180 ++++++++++++++++
 sdk/go/resolvers/wbadirectoryfetcher_test.go  | 155 ++++++++++++++
 sdk/go/resolvers/wbakeyresolver.go            |   6 +-
 .../resolvers/wbakeyresolver_profile_test.go  |  23 +-
 .../wbakeyresolver_ssrf_internal_test.go      |   5 +-
 sdk/go/resolvers/wbakeyresolver_test.go       |  61 ++++--
 sdk/go/resolvers/wellknowndoc_shared_test.go  |  46 ++++
 sdk/parity/symbol-map.json                    |  13 +-
 sdk/python/README.md                          |  17 +-
 sdk/python/fora_sdk/__init__.py               |   4 +
 sdk/python/fora_sdk/resolvers/__init__.py     |   4 +
 sdk/python/fora_sdk/resolvers/_http.py        |  24 ++-
 sdk/python/fora_sdk/resolvers/documents.py    |  47 ++--
 sdk/python/fora_sdk/resolvers/errors.py       |  36 +++-
 .../fora_sdk/resolvers/offer_key_cache.py     |  19 +-
 sdk/python/fora_sdk/resolvers/wellknown.py    |   6 +-
 sdk/python/tests/resolvers_harness.py         |  32 ++-
 .../tests/test_document_fetch_parity.py       |  79 +++++++
 sdk/python/tests/test_document_readers.py     |  73 ++++++-
 .../test_endpoint_refused_public_home.py      |   2 +
 .../tests/test_parity_corpora_nonempty.py     |   5 +
 .../tests/test_resolvers_read_failures.py     |  39 ++++
 .../tests/test_resolvers_wba_integration.py   |  12 +-
 ...est_resolvers_wba_offer_directory_fetch.py |  64 +++++-
 .../tests/test_resolvers_wba_profile.py       |   4 +-
 sdk/ts/README.md                              |   6 +-
 sdk/ts/resolvers/documents.ts                 |  35 +--
 sdk/ts/resolvers/edge.ts                      |   2 +
 sdk/ts/resolvers/errors.ts                    |  34 ++-
 sdk/ts/resolvers/fetch.ts                     |  33 +--
 sdk/ts/resolvers/offer-key-cache.ts           |   5 +
 sdk/ts/tests/directory-read-clock.test.ts     |  73 +++++++
 sdk/ts/tests/document-fetch.parity.test.ts    |  71 ++++++
 .../document-readers.integration.test.ts      |  15 +-
 sdk/ts/tests/edge-fastly-globals.test.ts      |   2 +-
 .../tests/resolvers-document-bounds.test.ts   |  61 +++++-
 sdk/ts/tests/resolvers-edge-entry.test.ts     |  16 ++
 sdk/ts/tests/resolvers-harness.ts             |   9 +-
 .../tests/resolvers-wba.integration.test.ts   |  28 ++-
 47 files changed, 1820 insertions(+), 194 deletions(-)
 create mode 100644 sdk/go/resolvers/document_fetch_corpus_test.go
 create mode 100644 sdk/go/resolvers/gen_document_fetch_vectors_test.go
 create mode 100644 sdk/go/resolvers/testdata/document-fetch-vectors.json
 create mode 100644 sdk/go/resolvers/wbadirectoryfetcher_test.go
 create mode 100644 sdk/python/tests/test_document_fetch_parity.py
 create mode 100644 sdk/python/tests/test_resolvers_read_failures.py
 create mode 100644 sdk/ts/tests/directory-read-clock.test.ts
 create mode 100644 sdk/ts/tests/document-fetch.parity.test.ts

diff --git a/docs/sdk-parity-matrix.md b/docs/sdk-parity-matrix.md
index 3b2da9f9..5d640e48 100644
--- a/docs/sdk-parity-matrix.md
+++ b/docs/sdk-parity-matrix.md
@@ -12,7 +12,7 @@
 
 Go is the oracle (`sdk/go/{helpers,resolvers,core,connect,connectserver,profiles/music}`); Python and TS mirror it. This document is **generated** from the same two artifacts CI already enforces against the code, so it cannot drift from the real surface — a mismatch fails the API-surface gate or the corpus-completeness gate before it can reach this file.
 
-**At a glance:** 190 symbols at cross-language parity · 17 documented divergences · 228 Go-idiomatic exclusions · 44 conformance corpora, each tri-replayed.
+**At a glance:** 192 symbols at cross-language parity · 17 documented divergences · 229 Go-idiomatic exclusions · 45 conformance corpora, each tri-replayed.
 
 Layering (L1 pure trust core vs L2 I/O resolvers), the SSRF transport-wiring invariant, and naming conventions are recorded in [`design-history.md`](./design-history.md).
 
@@ -158,6 +158,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `Document` | `Document` | `Document` |
 | `ErrDigestMismatch` | `DigestMismatchError` | `DigestMismatch` |
 | `ErrDirectoryUnavailable` | `DirectoryUnavailableError` | `DirectoryUnavailable` |
+| `ErrDocumentNotFound` | `DocumentNotFoundError` | `DocumentNotFound` |
 | `ErrEndpointRefused` | `EndpointRefusedError` | `EndpointRefused` |
 | `ErrExchangeNotPermitted` | `ExchangeNotPermittedError` | `ExchangeNotPermitted` |
 | `ErrKeyExpired` | `KeyExpiredError` | `KeyExpired` |
@@ -167,6 +168,7 @@ Legend: a name = the public face in that language · `—` = intentionally none
 | `ErrManifestVersionRefused` | `ManifestVersionRefusedError` | `ManifestVersionRefused` |
 | `ErrMediaTypeRefused` | `MediaTypeRefusedError` | `MediaTypeRefused` |
 | `ErrNoEndpoint` | `NoEndpointError` | `NoEndpoint` |
+| `ErrRedirectRefused` | `RedirectRefusedError` | `RedirectRefused` |
 | `ErrRevocationUnevaluated` | `RevocationUnevaluatedError` | `RevocationUnevaluated` |
 | `ErrUnknownKey` | `UnknownKeyError` | `UnknownKey` |
 | `LicenseDocument` | `LicenseDocument` | `LicenseDocument` |
@@ -502,8 +504,9 @@ Go constructs (functional-option builders, `errors.Is` sentinels, value types, c
 | `resolvers.NewContentFetcher` | Go constructor for the content-download leg; py/ts fold construction into their client, so there is no fetcher to build separately. |
 | `resolvers.NewGuardedTransport` | Go constructor composing the SSRF guard over a caller's base transport; py/ts expose their guarded fetch as a single factory with no separable base. |
 | `resolvers.ProofSigner` | Go interface seam that keeps key custody out of the dialing tier; py/ts inject a signing callable instead of a named interface. |
-| `resolvers.ReadOptions` | Go options struct for the document readers; Python takes the same values as keyword arguments (http=, scheme=) and TS as an options object (ReadDocumentOptions). |
+| `resolvers.ReadOptions` | Go options struct for the document readers; Python takes the same values as keyword arguments (http=, scheme=, now=) and TS as an options object (ReadDocumentOptions). |
 | `resolvers.SSRFCheckRedirect` | Go redirect-policy hook; py/ts fold redirect checks into the guard (async_ssrf_guard / the guarded fetch). |
+| `resolvers.WBADirectoryFetcherOptions` | Go options struct for NewWBADirectoryFetcher's optional trailing argument; Python takes the same value as a keyword argument (now=) and TS as a member of WBAOfferDirectoryFetchOptions. |
 
 ## Cross-language conformance-vector replay
 
@@ -540,6 +543,7 @@ Go emits each `*-vectors.json` oracle; Python and TS replay it. The completeness
 | `resolvers/testdata/active-ed25519-key-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/content-fetch-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/document-check-vectors.json` | ✅ | ✅ | ✅ |
+| `resolvers/testdata/document-fetch-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/endpoint-vet-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/license-digest-vectors.json` | ✅ | ✅ | ✅ |
 | `resolvers/testdata/offer-key-clamp-vectors.json` | ✅ | ✅ | ✅ |
diff --git a/sdk/go/README.md b/sdk/go/README.md
index 8be22730..0778e5be 100644
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@@ -269,7 +269,9 @@ import "github.com/FORA-Protocol/protocol/sdk/go/resolvers"
   `NewWBAKeyResolver` (WBA directory, revocation/expiry-aware, with a `Run` poller). A
   WBA directory is fetched with no redirect, must be served as
   `application/http-message-signatures-directory+json`, and only the keys that signed
-  its response (`helpers.VerifyDirectoryResponse`) are handed out.
+  its response (`helpers.VerifyDirectoryResponse`) are handed out. A directory that
+  answers 404 is also `ErrDocumentNotFound`, and one that answers with any 3xx
+  `ErrRedirectRefused`, each wrapped with `ErrDirectoryUnavailable`.
 - **Endpoint resolver** — `NewWellKnownEndpointResolver` discovers an Exchange's
   own service endpoint (`WellKnownManifest.endpoint`) from `/.well-known/fora.json`,
   host-keyed and cached per host. Three sentinels, and the difference decides whether
@@ -302,7 +304,10 @@ import "github.com/FORA-Protocol/protocol/sdk/go/resolvers"
 - **Active-key selection** — `ActiveEd25519Key` / `ActiveEd25519KeyWithExpiry` pick
   an identity's window-active key by document order; the `…Screened` variants fold in
   a revoked-thumbprint screen. `NewCachedOfferKeyResolver` caches the selected offer
-  key with an expiry clamped to the key's `not_after`.
+  key with an expiry clamped to the key's `not_after`. `NewWBADirectoryFetcher` is the
+  directory fetch it runs on; give it `WBADirectoryFetcherOptions{Now: …}` with the
+  cache's own clock, so the directory's response signatures and the key selection are
+  judged at one time.
 - **SSRF-guarded client** — `NewGuardedClientFromEnv` is the single construction path
   every fetch uses; `NewGuardedTransport` composes the same guard over a caller's
   own base transport, so application settings ride UNDER the guard rather than
@@ -372,8 +377,12 @@ response or re-implements signing:
   `ReadRevocationList` and `ReadLicenseDocument` read what a party publishes, through
   the guarded client unless `ReadOptions.Client` replaces it, and return a `Document`
   (the parsed message, URL, bytes and media type) or a `LicenseDocument` verified
-  against `uri_digest`. A failure wraps `ErrDirectoryUnavailable`, `ErrMediaTypeRefused`,
-  `ErrManifestVersionRefused`, `helpers.ErrStrictViolation` or `ErrDigestMismatch`.
+  against `uri_digest`. A failure wraps `helpers.ErrInvalidHost`, `ErrDirectoryUnavailable`
+  (with `ErrDocumentNotFound` for a 404, and `ErrRedirectRefused` for a key directory that
+  answers with any 3xx), `ErrMediaTypeRefused`, `ErrManifestVersionRefused`,
+  `helpers.ErrStrictViolation`, `helpers.ErrDirectoryResponseUnsigned` or
+  `ErrDigestMismatch`. `ReadOptions.Now` is the instant `ReadWBADirectory` judges a
+  directory's response signatures at; zero is the wall clock.
 - **`helpers.CheckStrict(name, payload)`** checks proto-JSON against the strict
   contract: no unknown field, proto field names only, no 32-bit number or bool written
   as a string, and protovalidate. `helpers.CheckStrictMessage` is the same check on a
diff --git a/sdk/go/resolvers/cachedofferkeyresolver.go b/sdk/go/resolvers/cachedofferkeyresolver.go
index 675250c8..9f0351be 100644
--- a/sdk/go/resolvers/cachedofferkeyresolver.go
+++ b/sdk/go/resolvers/cachedofferkeyresolver.go
@@ -155,23 +155,45 @@ func clampOfferKeyExpiry(now time.Time, ttl time.Duration, notAfter time.Time) t
 // NewWBADirectoryFetcher returns the default OfferDirectoryFetcher: it GETs
 // scheme://domain[:port]/.well-known/http-message-signatures-directory through
 // client, with no redirect, checks its media type and response signatures, and
-// protojson-decodes the WBAFile, keeping only the keys that signed the response
-// (any transport/status/media-type/decode failure wraps ErrDirectoryUnavailable). client nil installs the same SSRF-guarded default
-// WBAKeyResolver uses — the exchange domain is signature-covered but
-// attacker-influenceable, so the guard costs nothing. scheme empty → https; port
-// empty → the scheme default.
-func NewWBADirectoryFetcher(client *http.Client, scheme, port string) OfferDirectoryFetcher {
+// protojson-decodes the WBAFile, keeping only the keys that signed the response.
+// client nil installs the same SSRF-guarded default WBAKeyResolver uses — the
+// exchange domain is signature-covered but attacker-influenceable, so the guard
+// costs nothing. scheme empty → https; port empty → the scheme default.
+//
+// Any failure wraps ErrDirectoryUnavailable. A 404 also wraps ErrDocumentNotFound,
+// a redirect ErrRedirectRefused, the wrong media type ErrMediaTypeRefused, and a
+// response whose signatures cannot be checked helpers.ErrDirectoryResponseUnsigned
+// (with helpers.ErrDigestMismatch when its Content-Digest does not match). A body
+// that does not decode is ErrDirectoryUnavailable alone. A response no listed key
+// signed returns a file listing no key, and no error.
+//
+// opts is variadic so the common call omits it; at most ONE options value is honored
+// (the first). Its Now is the clock the response signatures are judged at.
+func NewWBADirectoryFetcher(client *http.Client, scheme, port string, opts ...WBADirectoryFetcherOptions) OfferDirectoryFetcher {
 	if client == nil {
 		client = newGuardedWBAClient()
 	}
 	if scheme == "" {
 		scheme = "https"
 	}
+	now := time.Now
+	if len(opts) > 0 && opts[0].Now != nil {
+		now = opts[0].Now
+	}
 	return func(ctx context.Context, domain string) (*forav1.WBAFile, error) {
-		return fetchWBAFile(ctx, client, scheme+"://"+joinDirectoryHost(domain, port), time.Now())
+		return fetchWBAFile(ctx, client, scheme+"://"+joinDirectoryHost(domain, port), now())
 	}
 }
 
+// WBADirectoryFetcherOptions tunes NewWBADirectoryFetcher; omitting it is its zero
+// value.
+type WBADirectoryFetcherOptions struct {
+	// Now is the clock a directory's response signatures are judged against, read on
+	// every fetch; nil uses time.Now. Pass the clock CachedOfferKeyResolverConfig.Now
+	// selects keys with, so the two agree. Tests inject.
+	Now func() time.Time
+}
+
 // joinDirectoryHost joins an exchange domain and a configured port into the
 // authority the directory URL is built on. It is the ORACLE for the fetcher-level
 // port join: sdk/python and sdk/ts replay wba-join-vectors.json (emitted by running
diff --git a/sdk/go/resolvers/document_fetch_corpus_test.go b/sdk/go/resolvers/document_fetch_corpus_test.go
new file mode 100644
index 00000000..b66bf426
--- /dev/null
+++ b/sdk/go/resolvers/document_fetch_corpus_test.go
@@ -0,0 +1,100 @@
+package resolvers
+
+// Go replay of the document-fetch corpus (document-fetch-vectors.json).
+//
+// The corpus is the cross-language contract for the status a document read is
+// answered with, so Go replays it too rather than only emitting it — a corpus its own
+// oracle does not consume proves nothing about the oracle.
+//
+// The emitter and the replay are deliberately not the same code path: the emitter
+// records which verdict the read reported, and this asserts each recorded verdict
+// against the sentinels themselves. It also holds what every vector shares: a failure
+// is always ErrDirectoryUnavailable and never ErrUnknownKey, and it never carries the
+// Location the server chose.
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestDocumentFetchCorpusReplay(t *testing.T) {
+	path := filepath.Join("testdata", "document-fetch-vectors.json")
+	raw, err := os.ReadFile(path) //nolint:gosec // a committed test vector this package owns
+	if err != nil {
+		t.Fatalf("read %s: %v", path, err)
+	}
+	var doc struct {
+		Vectors []documentFetchVector `json:"vectors"`
+	}
+	if err := json.Unmarshal(raw, &doc); err != nil {
+		t.Fatalf("parse %s: %v", path, err)
+	}
+	if len(doc.Vectors) == 0 {
+		t.Fatalf("%s carries no vectors — the replay would assert nothing", path)
+	}
+	controls := map[string]bool{}
+	for _, v := range doc.Vectors {
+		if v.Verdict == "ok" {
+			controls[v.Read] = true
+		}
+		t.Run(v.Name, func(t *testing.T) {
+			srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+				if v.Location != "" {
+					w.Header().Set("Location", v.Location)
+				}
+				w.WriteHeader(v.Status)
+			}))
+			defer srv.Close()
+			var err error
+			switch v.Read {
+			case "key_directory":
+				_, err = fetchDocumentNoRedirect(context.Background(), srv.Client(), srv.URL+"/document")
+			case "document":
+				_, err = fetchDocument(context.Background(), srv.Client(), srv.URL+"/document")
+			default:
+				t.Fatalf("read %q is neither key_directory nor document", v.Read)
+			}
+			if v.Verdict == "ok" {
+				if err != nil {
+					t.Fatalf("the read failed for a vector recorded as ok: %v", err)
+				}
+				return
+			}
+			if !errors.Is(err, ErrDirectoryUnavailable) || errors.Is(err, ErrUnknownKey) {
+				t.Fatalf("err = %v, want ErrDirectoryUnavailable and never ErrUnknownKey", err)
+			}
+			notFound, refused := errors.Is(err, ErrDocumentNotFound), errors.Is(err, ErrRedirectRefused)
+			switch v.Verdict {
+			case "not_found":
+				if !notFound || refused {
+					t.Errorf("err = %v, want ErrDocumentNotFound alone", err)
+				}
+			case "redirect_refused":
+				if !refused || notFound {
+					t.Errorf("err = %v, want ErrRedirectRefused alone", err)
+				}
+			case "unavailable":
+				if notFound || refused {
+					t.Errorf("err = %v, want ErrDirectoryUnavailable with neither sentinel", err)
+				}
+			default:
+				t.Fatalf("verdict %q is not one the corpus defines", v.Verdict)
+			}
+			if v.Location != "" && strings.Contains(err.Error(), v.Location) {
+				t.Errorf("err = %q carries the Location the server chose", err)
+			}
+		})
+	}
+	for _, read := range []string{"key_directory", "document"} {
+		if !controls[read] {
+			t.Errorf("no %s vector is read: the corpus has no control for that read", read)
+		}
+	}
+}
diff --git a/sdk/go/resolvers/documents.go b/sdk/go/resolvers/documents.go
index eb642a85..a6e41a6d 100644
--- a/sdk/go/resolvers/documents.go
+++ b/sdk/go/resolvers/documents.go
@@ -40,11 +40,12 @@ import (
 // not know.
 //
 // A key directory is read under the Web Bot Auth profile by both faces: it is
-// fetched with no redirect, must be served as
+// fetched with no redirect (any 3xx is ErrRedirectRefused), must be served as
 // application/http-message-signatures-directory+json, and its response must be
 // signed by the keys it lists (helpers.VerifyDirectoryResponse). A key the
 // response carries no valid signature by is never handed out. A revocation list
-// and the manifest may follow up to five redirects.
+// and the manifest may follow up to five redirects. Every failed read is
+// ErrDirectoryUnavailable, and a 404 on any of them is also ErrDocumentNotFound.
 
 // ManifestMediaType is the media type /.well-known/fora.json is served under.
 const ManifestMediaType = "application/json"
@@ -68,6 +69,26 @@ var ErrMediaTypeRefused = errors.New("resolvers: document served under a media t
 // DigestMismatchError and TypeScript DigestMismatch.
 var ErrDigestMismatch = errors.New("resolvers: license document does not match its uri_digest")
 
+// ErrDocumentNotFound is returned, wrapped with ErrDirectoryUnavailable, when the
+// server answers a document read with 404 Not Found: it serves no document at that
+// address. Every document read reports it, the key directory, the manifest, the
+// revocation list and the license document alike. It states what the server
+// answered and no more: a document a party has yet to publish answers the same
+// way, so whether the absence is final is the caller's decision. Peer of Python
+// DocumentNotFoundError and TypeScript DocumentNotFound.
+var ErrDocumentNotFound = errors.New("resolvers: document not found")
+
+// ErrRedirectRefused is returned, wrapped with ErrDirectoryUnavailable, when a key
+// directory answers with a redirect: any 3xx status. A directory answers 200
+// itself, because its address is the origin its signer committed to and a redirect
+// would hand key lookup to another one. A verdict on what the party serves, like
+// ErrMediaTypeRefused; the error names the read and its status, never the Location.
+// Only a key directory read refuses a redirect outright: a manifest or revocation
+// list read follows them, and a hop it will not follow is ErrDirectoryUnavailable
+// alone, as is a Location the HTTP client cannot parse. Peer of Python
+// RedirectRefusedError and TypeScript RedirectRefused.
+var ErrRedirectRefused = errors.New("resolvers: a key directory is never fetched through a redirect")
+
 // maxDocumentFetch bounds one document read whatever client was injected: a
 // ReadOptions.Client may carry no timeout at all. The manifest resolvers' ceiling.
 const maxDocumentFetch = maxManifestFetch
@@ -113,6 +134,10 @@ type ReadOptions struct {
 	Client *http.Client
 	// Scheme is used when a reader builds the URL from a domain. "" means https.
 	Scheme string
+	// Now is the instant a key directory's response signatures are judged at; the
+	// zero value is the wall clock at the read. Only ReadWBADirectory reads it, so a
+	// ReadOptions built once and reused leaves it zero.
+	Now time.Time
 }
 
 func (o ReadOptions) client() *http.Client {
@@ -122,6 +147,13 @@ func (o ReadOptions) client() *http.Client {
 	return NewGuardedClientFromEnv()
 }
 
+func (o ReadOptions) now() time.Time {
+	if !o.Now.IsZero() {
+		return o.Now
+	}
+	return time.Now()
+}
+
 func (o ReadOptions) scheme() string {
 	if o.Scheme != "" {
 		return o.Scheme
@@ -139,8 +171,8 @@ func (o ReadOptions) scheme() string {
 // A domain that is not a bare host (a port is allowed) wraps
 // helpers.ErrInvalidHost and is refused before anything is dialled. Otherwise a
 // failure wraps ErrDirectoryUnavailable (the fetch failed, or the body is not
-// JSON), ErrMediaTypeRefused, ErrManifestVersionRefused, or
-// helpers.ErrStrictViolation.
+// JSON; a 404 also wraps ErrDocumentNotFound), ErrMediaTypeRefused,
+// ErrManifestVersionRefused, or helpers.ErrStrictViolation.
 func ReadManifest(ctx context.Context, domain string, opts ReadOptions) (*Document[*forav1.WellKnownManifest], error) {
 	if bare, err := helpers.IsBareHost(domain); err != nil || !bare {
 		return nil, fmt.Errorf("resolvers: read manifest: %w: %q is not a bare host", helpers.ErrInvalidHost, domain)
@@ -159,11 +191,19 @@ func ReadManifest(ctx context.Context, domain string, opts ReadOptions) (*Docume
 // The directory is fetched with no redirect: a redirect fails the fetch. The media
 // type must be application/http-message-signatures-directory+json, the body must
 // pass helpers.CheckStrict as a WBAFile, and the response must carry a valid
-// response signature by every key it lists. Key validity windows and revocation
-// are not evaluated: that is WBAKeyResolver's job, and a directory listing an
-// expired key is still a well-formed directory. A failure wraps
-// helpers.ErrInvalidHost, ErrDirectoryUnavailable, ErrMediaTypeRefused,
-// helpers.ErrStrictViolation, or helpers.ErrDirectoryResponseUnsigned.
+// response signature by every key it lists, judged at opts.Now (the wall clock
+// when it is zero). Key validity windows and revocation are not evaluated: that is
+// WBAKeyResolver's job, and a directory listing an expired key is still a
+// well-formed directory. A failure wraps helpers.ErrInvalidHost,
+// ErrDirectoryUnavailable (with ErrDocumentNotFound for a 404 and
+// ErrRedirectRefused for any 3xx), ErrMediaTypeRefused, helpers.ErrStrictViolation,
+// or helpers.ErrDirectoryResponseUnsigned (with helpers.ErrDigestMismatch when the
+// Content-Digest does not match the body).
+//
+// It checks what a party publishes, so every listed key must have signed. A
+// verifier reads a directory through WBAKeyResolver or NewWBADirectoryFetcher
+// instead, which use only the keys whose response signature verifies, as
+// WBAFile.keys requires.
 func ReadWBADirectory(ctx context.Context, urlOrDomain string, opts ReadOptions) (*Document[*forav1.WBAFile], error) {
 	url := urlOrDomain
 	if !strings.Contains(urlOrDomain, "://") {
@@ -181,7 +221,7 @@ func ReadWBADirectory(ctx context.Context, urlOrDomain string, opts ReadOptions)
 	if err != nil {
 		return nil, err
 	}
-	signed, err := signedDirectoryKeys(f, doc.Message, time.Now())
+	signed, err := signedDirectoryKeys(f, doc.Message, opts.now())
 	if err != nil {
 		return nil, fmt.Errorf("resolvers: %w", err)
 	}
@@ -197,7 +237,8 @@ func ReadWBADirectory(ctx context.Context, urlOrDomain string, opts ReadOptions)
 // so the label is reported and not checked. The body must pass helpers.CheckStrict
 // as a KeyRevocationList. Whether url is anchored to the directory's host is the
 // caller's question: WBAKeyResolver skips a list that is not. A failure wraps
-// ErrDirectoryUnavailable or helpers.ErrStrictViolation.
+// ErrDirectoryUnavailable (a 404 also wraps ErrDocumentNotFound) or
+// helpers.ErrStrictViolation.
 func ReadRevocationList(ctx context.Context, url string, opts ReadOptions) (*Document[*forav1.KeyRevocationList], error) {
 	f, err := fetchDocument(ctx, opts.client(), url)
 	if err != nil {
@@ -219,8 +260,8 @@ func ReadRevocationList(ctx context.Context, url string, opts ReadOptions) (*Doc
 // a place to fetch one.
 //
 // A license with no uri is an error that wraps none of the sentinels. Otherwise a
-// failure wraps helpers.ErrStrictViolation, ErrDirectoryUnavailable or
-// ErrDigestMismatch.
+// failure wraps helpers.ErrStrictViolation, ErrDirectoryUnavailable (a 404 also
+// wraps ErrDocumentNotFound) or ErrDigestMismatch.
 func ReadLicenseDocument(ctx context.Context, license *forav1.License, opts ReadOptions) (*LicenseDocument, error) {
 	if license.GetUri() == "" {
 		return nil, errors.New("resolvers: read license document: the license carries no uri")
@@ -240,8 +281,11 @@ func ReadLicenseDocument(ctx context.Context, license *forav1.License, opts Read
 // reason to stop verifying. The media type must be WBADirectoryMediaType. The file
 // returned lists only the keys that signed the response (signedDirectoryKeys), so
 // no caller can hand out a key the directory did not sign for. Any failure wraps
-// ErrDirectoryUnavailable. It is the one read of a directory
-// WBAKeyResolver.fetchDirectory and the domain-keyed offer-key fetcher
+// ErrDirectoryUnavailable, together with ErrDocumentNotFound for a 404,
+// ErrRedirectRefused for any 3xx, ErrMediaTypeRefused for the wrong media type, and
+// helpers.ErrDirectoryResponseUnsigned for a response whose signatures cannot be
+// checked; a body that does not decode wraps it alone. It is the one read of a
+// directory WBAKeyResolver.fetchDirectory and the domain-keyed offer-key fetcher
 // (NewWBADirectoryFetcher) share, so the two never drift.
 //
 // now is the clock the response signatures' windows are judged against.
@@ -268,8 +312,10 @@ func fetchWBAFile(ctx context.Context, client *http.Client, base string, now tim
 // signature verifies, checked against the authority f was fetched from. A key that
 // is not an Ed25519 key cannot sign and is dropped with the rest. The error is a
 // response listing keys that cannot be checked at all: a Content-Digest that does
-// not match the body, or no response signature. A directory listing no key has
-// nothing to sign and is returned as it is.
+// not match the body, or no response signature. Either way it wraps
+// helpers.ErrDirectoryResponseUnsigned, as the Python and TypeScript readers report
+// it, with helpers.ErrDigestMismatch kept for the first. A directory listing no key
+// has nothing to sign and is returned as it is.
 func signedDirectoryKeys(f fetchedDocument, file *forav1.WBAFile, now time.Time) (*forav1.WBAFile, error) {
 	if len(file.GetKeys()) == 0 {
 		return file, nil // nothing listed, so nothing to have signed
@@ -286,6 +332,9 @@ func signedDirectoryKeys(f fetchedDocument, file *forav1.WBAFile, now time.Time)
 	}
 	verified, err := helpers.VerifyDirectoryResponse(authority, f.header, f.body, pubs, now)
 	if err != nil {
+		if !errors.Is(err, helpers.ErrDirectoryResponseUnsigned) {
+			err = fmt.Errorf("%w: %w", helpers.ErrDirectoryResponseUnsigned, err)
+		}
 		return nil, err
 	}
 	out := proto.Clone(file).(*forav1.WBAFile)
@@ -417,17 +466,17 @@ type fetchedDocument struct {
 	header    http.Header
 }
 
-// errRedirectRefused fails a key-directory fetch that met a redirect. A directory
-// answers 200 itself: its address is the origin its signer committed to, and a
-// redirect would hand key lookup to another one.
-var errRedirectRefused = errors.New("resolvers: a key directory is never fetched through a redirect")
-
-// fetchDocumentNoRedirect is fetchDocument over a copy of client that refuses
-// every redirect, whatever policy the injected client carries.
+// fetchDocumentNoRedirect is the read of a key directory, which answers 200
+// itself: its address is the origin its signer committed to, and a redirect would
+// hand key lookup to another one. It reads over a copy of client that takes every
+// redirect back as the answer, whatever policy the injected client carries, and
+// refuses any 3xx as ErrRedirectRefused. The client's own redirect hook would see
+// only a 301, 302, 303, 307 or 308 carrying a Location, and would carry that
+// Location into the error.
 func fetchDocumentNoRedirect(ctx context.Context, client *http.Client, url string) (fetchedDocument, error) {
 	noRedirect := *client
-	noRedirect.CheckRedirect = func(*http.Request, []*http.Request) error { return errRedirectRefused }
-	return fetchDocument(ctx, &noRedirect, url)
+	noRedirect.CheckRedirect = func(*http.Request, []*http.Request) error { return http.ErrUseLastResponse }
+	return getDocument(ctx, &noRedirect, url, true)
 }
 
 // fetchDocument GETs url through client and returns the body and its media type
@@ -435,12 +484,19 @@ func fetchDocumentNoRedirect(ctx context.Context, client *http.Client, url strin
 // non-200 status, and a body past maxWellKnownDocBytes, which is refused rather
 // than truncated. A truncated document that happens to decode is worse than a
 // refusal, and a truncated license document would be reported as a digest
-// mismatch it is not.
+// mismatch it is not. A 404 also wraps ErrDocumentNotFound.
 //
 // It is the one GET every document read shares: the public readers, the three
 // well-known faces through fetchWellKnownDoc, and the WBA directory and revocation
 // reads of WBAKeyResolver and NewWBADirectoryFetcher.
 func fetchDocument(ctx context.Context, client *http.Client, url string) (fetchedDocument, error) {
+	return getDocument(ctx, client, url, false)
+}
+
+// getDocument is fetchDocument, and fetchDocumentNoRedirect when refuseRedirect is
+// set. The status is classified here, once, so the error names the read and its
+// status and never a Location the server chose.
+func getDocument(ctx context.Context, client *http.Client, url string, refuseRedirect bool) (fetchedDocument, error) {
 	ctx, cancel := context.WithTimeout(ctx, maxDocumentFetch)
 	defer cancel()
 	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
@@ -452,8 +508,14 @@ func fetchDocument(ctx context.Context, client *http.Client, url string) (fetche
 		return fetchedDocument{}, fmt.Errorf("%w: fetch: %w", ErrDirectoryUnavailable, err)
 	}
 	defer func() { _ = resp.Body.Close() }()
-	if resp.StatusCode != http.StatusOK {
-		return fetchedDocument{}, fmt.Errorf("%w: status %d", ErrDirectoryUnavailable, resp.StatusCode)
+	switch status := resp.StatusCode; {
+	case status == http.StatusOK:
+	case refuseRedirect && status >= 300 && status < 400:
+		return fetchedDocument{}, fmt.Errorf("%w: %w: status %d", ErrDirectoryUnavailable, ErrRedirectRefused, status)
+	case status == http.StatusNotFound:
+		return fetchedDocument{}, fmt.Errorf("%w: %w: status %d", ErrDirectoryUnavailable, ErrDocumentNotFound, status)
+	default:
+		return fetchedDocument{}, fmt.Errorf("%w: status %d", ErrDirectoryUnavailable, status)
 	}
 	body, err := io.ReadAll(io.LimitReader(resp.Body, maxWellKnownDocBytes+1))
 	if err != nil {
diff --git a/sdk/go/resolvers/documents_test.go b/sdk/go/resolvers/documents_test.go
index a7e9ea28..0dd84385 100644
--- a/sdk/go/resolvers/documents_test.go
+++ b/sdk/go/resolvers/documents_test.go
@@ -11,6 +11,7 @@ import (
 	"net/http/httptest"
 	"strings"
 	"testing"
+	"time"
 
 	forav1 "github.com/FORA-Protocol/protocol/gen/go/fora/v1"
 	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
@@ -165,25 +166,183 @@ func TestReadWBADirectoryByDomainAndByURL(t *testing.T) {
 	}
 }
 
-// TestReadWBADirectoryRefusesARedirect: a key directory answers 200 itself. A
-// redirect fails the fetch even when it leads to a well-formed, signed directory,
-// while a revocation list or a manifest may still follow one.
+// TestReadWBADirectoryRefusesARedirect: a key directory answers 200 itself. Any
+// 3xx fails the read as ErrRedirectRefused, wrapped with ErrDirectoryUnavailable,
+// whether or not the HTTP client would have followed it, and even when it leads to
+// a well-formed, signed directory; a revocation list or a manifest may still follow
+// one. The error names the read and its status, never the Location.
 func TestReadWBADirectoryRefusesARedirect(t *testing.T) {
+	cases := []struct {
+		name     string
+		status   int
+		location string
+	}{
+		{"301", http.StatusMovedPermanently, "/elsewhere"},
+		{"302", http.StatusFound, "/elsewhere"},
+		{"303", http.StatusSeeOther, "/elsewhere"},
+		{"307", http.StatusTemporaryRedirect, "/elsewhere"},
+		{"308", http.StatusPermanentRedirect, "/elsewhere"},
+		{"302 to another host, with credentials", http.StatusFound, "https://user:secret@elsewhere.example/d?token=t"},
+		{"302 with no Location", http.StatusFound, ""},
+		{"300", http.StatusMultipleChoices, "/elsewhere"},
+		{"304", http.StatusNotModified, ""},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			sandbox(t)
+			mux := http.NewServeMux()
+			mux.HandleFunc(resolvers.WBADirectoryPath, func(w http.ResponseWriter, _ *http.Request) {
+				if tc.location != "" {
+					w.Header().Set("Location", tc.location)
+				}
+				w.WriteHeader(tc.status)
+			})
+			mux.HandleFunc("/elsewhere", func(w http.ResponseWriter, r *http.Request) {
+				writeSignedDirectory(w, r, []byte(`{"keys":[`+readerJWK+`]}`))
+			})
+			srv := httptest.NewServer(mux)
+			t.Cleanup(srv.Close)
+			if _, err := resolvers.ReadWBADirectory(context.Background(), srv.URL+"/elsewhere", plain); err != nil {
+				t.Fatalf("the document the redirect names, fetched directly: %v", err)
+			}
+			_, err := resolvers.ReadWBADirectory(context.Background(), hostOf(t, srv), plain)
+			if !errors.Is(err, resolvers.ErrRedirectRefused) || !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+				t.Fatalf("err = %v, want ErrRedirectRefused wrapped with ErrDirectoryUnavailable", err)
+			}
+			if errors.Is(err, resolvers.ErrDocumentNotFound) || errors.Is(err, resolvers.ErrUnknownKey) {
+				t.Errorf("err = %v also reads as not found or as an unknown key", err)
+			}
+			for _, part := range []string{"secret", "token", "elsewhere"} {
+				if strings.Contains(err.Error(), part) {
+					t.Errorf("err = %q carries the Location (%q)", err, part)
+				}
+			}
+		})
+	}
+}
+
+// TestReadWBADirectoryALocationTheClientCannotParse: Go's HTTP client rejects an
+// answer whose Location it cannot parse before the read sees the status, so the
+// read reports an unavailable directory and not a refused redirect. Nothing is
+// fetched from that Location either way. The TypeScript read sees the status first
+// and reports a refused redirect.
+func TestReadWBADirectoryALocationTheClientCannotParse(t *testing.T) {
+	sandbox(t)
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Location", "http://[::1")
+		w.WriteHeader(http.StatusFound)
+	}))
+	t.Cleanup(srv.Close)
+	_, err := resolvers.ReadWBADirectory(context.Background(), hostOf(t, srv), plain)
+	if !errors.Is(err, resolvers.ErrDirectoryUnavailable) || errors.Is(err, resolvers.ErrRedirectRefused) {
+		t.Fatalf("err = %v, want ErrDirectoryUnavailable and not ErrRedirectRefused", err)
+	}
+}
+
+// TestReadWBADirectoryReportsADigestMismatchAsUnsigned: a response whose
+// Content-Digest does not match its body carries no signature any listed key can
+// be checked against, so the reader refuses it as unsigned, as the Python and
+// TypeScript readers do, and the digest mismatch stays in the chain.
+func TestReadWBADirectoryReportsADigestMismatchAsUnsigned(t *testing.T) {
+	sandbox(t)
+	body := []byte(`{"keys":[` + readerJWK + `]}`)
+	mux := http.NewServeMux()
+	mux.HandleFunc("/signed", func(w http.ResponseWriter, r *http.Request) { writeSignedDirectory(w, r, body) })
+	mux.HandleFunc("/wrong-digest", func(w http.ResponseWriter, r *http.Request) { writeDirectoryWithWrongDigest(w, r, body) })
+	srv := httptest.NewServer(mux)
+	t.Cleanup(srv.Close)
+	if _, err := resolvers.ReadWBADirectory(context.Background(), srv.URL+"/signed", plain); err != nil {
+		t.Fatalf("the directory with its own digest: %v", err)
+	}
+	_, err := resolvers.ReadWBADirectory(context.Background(), srv.URL+"/wrong-digest", plain)
+	if !errors.Is(err, helpers.ErrDirectoryResponseUnsigned) || !errors.Is(err, helpers.ErrDigestMismatch) {
+		t.Fatalf("err = %v, want ErrDirectoryResponseUnsigned with ErrDigestMismatch", err)
+	}
+}
+
+// TestDocumentReadsReportA404AsNotFound: a document the server does not have is an
+// unavailable document, like any other failed read, and also ErrDocumentNotFound,
+// so a caller can tell an absent document from an unreachable one without reading
+// the message. Every document read reports it; a 503 is unavailable and nothing
+// more.
+func TestDocumentReadsReportA404AsNotFound(t *testing.T) {
+	sandbox(t)
+	sum := sha256.Sum256([]byte(licenseText))
+	digest := "sha256:" + hex.EncodeToString(sum[:])
+	srv := documentOrigin(t, map[string]served{
+		"/ok":   {body: `{"as_of":"2026-05-01T12:00:00Z","revoked":[]}`, contentType: "application/json"},
+		"/down": {status: http.StatusServiceUnavailable, contentType: "application/json"},
+	})
+	ctx := context.Background()
+	if _, err := resolvers.ReadRevocationList(ctx, srv.URL+"/ok", plain); err != nil {
+		t.Fatalf("a document the origin has: %v", err)
+	}
+	host, missing := hostOf(t, srv), srv.URL+"/missing"
+	for name, read := range map[string]func() error{
+		"manifest":        func() error { _, err := resolvers.ReadManifest(ctx, host, plain); return err },
+		"key directory":   func() error { _, err := resolvers.ReadWBADirectory(ctx, host, plain); return err },
+		"revocation list": func() error { _, err := resolvers.ReadRevocationList(ctx, missing, plain); return err },
+		"license document": func() error {
+			_, err := resolvers.ReadLicenseDocument(ctx, &forav1.License{Uri: &missing, UriDigest: &digest}, plain)
+			return err
+		},
+	} {
+		err := read()
+		if !errors.Is(err, resolvers.ErrDocumentNotFound) || !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+			t.Errorf("%s: err = %v, want ErrDocumentNotFound wrapped with ErrDirectoryUnavailable", name, err)
+		}
+		if errors.Is(err, resolvers.ErrRedirectRefused) || errors.Is(err, resolvers.ErrUnknownKey) {
+			t.Errorf("%s: err = %v also reads as a refused redirect or an unknown key", name, err)
+		}
+	}
+	_, err := resolvers.ReadRevocationList(ctx, srv.URL+"/down", plain)
+	if !errors.Is(err, resolvers.ErrDirectoryUnavailable) || errors.Is(err, resolvers.ErrDocumentNotFound) {
+		t.Errorf("a 503: err = %v, want ErrDirectoryUnavailable alone", err)
+	}
+}
+
+// TestReadRevocationListFollowsARedirect: a revocation list may follow a redirect,
+// so a followed one that ends at a 404 is a missing document, never a refused
+// redirect, and a 3xx the read does not follow is unavailable and nothing more.
+func TestReadRevocationListFollowsARedirect(t *testing.T) {
 	sandbox(t)
 	mux := http.NewServeMux()
-	mux.HandleFunc(resolvers.WBADirectoryPath, func(w http.ResponseWriter, r *http.Request) {
-		http.Redirect(w, r, "/elsewhere", http.StatusFound)
+	mux.HandleFunc("/list", func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"as_of":"2026-05-01T12:00:00Z","revoked":[]}`))
+	})
+	mux.HandleFunc("/moved", func(w http.ResponseWriter, r *http.Request) {
+		http.Redirect(w, r, "/list", http.StatusFound)
 	})
-	mux.HandleFunc("/elsewhere", func(w http.ResponseWriter, r *http.Request) {
-		writeSignedDirectory(w, r, []byte(`{"keys":[`+readerJWK+`]}`))
+	mux.HandleFunc("/moved-away", func(w http.ResponseWriter, r *http.Request) {
+		http.Redirect(w, r, "/gone", http.StatusFound)
+	})
+	mux.HandleFunc("/no-location", func(w http.ResponseWriter, _ *http.Request) {
+		w.WriteHeader(http.StatusFound)
+	})
+	mux.HandleFunc("/choices", func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Location", "/list")
+		w.WriteHeader(http.StatusMultipleChoices)
+	})
+	mux.HandleFunc("/not-modified", func(w http.ResponseWriter, _ *http.Request) {
+		w.WriteHeader(http.StatusNotModified)
 	})
 	srv := httptest.NewServer(mux)
 	t.Cleanup(srv.Close)
-	if _, err := resolvers.ReadWBADirectory(context.Background(), hostOf(t, srv), plain); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
-		t.Fatalf("ReadWBADirectory through a redirect: err = %v, want ErrDirectoryUnavailable", err)
+	ctx := context.Background()
+	if _, err := resolvers.ReadRevocationList(ctx, srv.URL+"/moved", plain); err != nil {
+		t.Fatalf("a redirect to the list: %v", err)
 	}
-	if _, err := resolvers.ReadWBADirectory(context.Background(), srv.URL+"/elsewhere", plain); err != nil {
-		t.Fatalf("the same document fetched directly: %v", err)
+	_, err := resolvers.ReadRevocationList(ctx, srv.URL+"/moved-away", plain)
+	if !errors.Is(err, resolvers.ErrDocumentNotFound) || errors.Is(err, resolvers.ErrRedirectRefused) {
+		t.Errorf("a redirect to a 404: err = %v, want ErrDocumentNotFound and not ErrRedirectRefused", err)
+	}
+	for _, path := range []string{"/no-location", "/choices", "/not-modified"} {
+		_, err := resolvers.ReadRevocationList(ctx, srv.URL+path, plain)
+		if !errors.Is(err, resolvers.ErrDirectoryUnavailable) ||
+			errors.Is(err, resolvers.ErrRedirectRefused) || errors.Is(err, resolvers.ErrDocumentNotFound) {
+			t.Errorf("%s: err = %v, want ErrDirectoryUnavailable alone", path, err)
+		}
 	}
 }
 
@@ -267,3 +426,24 @@ func TestReadLicenseDocument(t *testing.T) {
 		t.Error("a license with no uri was read")
 	}
 }
+
+// TestReadWBADirectoryJudgesResponseSignaturesAtReadOptionsNow: the reader judges a
+// directory's response signatures at ReadOptions.Now, and at the wall clock when it
+// is zero.
+func TestReadWBADirectoryJudgesResponseSignaturesAtReadOptionsNow(t *testing.T) {
+	sandbox(t)
+	created := int64(1_000_000_000)
+	body := []byte(`{"keys":[` + readerJWK + `]}`)
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		writeSignedDirectoryWindow(w, r, body, created, created+60)
+	}))
+	t.Cleanup(srv.Close)
+	at := plain
+	at.Now = time.Unix(created+30, 0)
+	if _, err := resolvers.ReadWBADirectory(context.Background(), hostOf(t, srv), at); err != nil {
+		t.Fatalf("inside the window: %v", err)
+	}
+	if _, err := resolvers.ReadWBADirectory(context.Background(), hostOf(t, srv), plain); !errors.Is(err, helpers.ErrDirectoryResponseUnsigned) {
+		t.Fatalf("at the wall clock: err = %v, want ErrDirectoryResponseUnsigned", err)
+	}
+}
diff --git a/sdk/go/resolvers/gen_document_fetch_vectors_test.go b/sdk/go/resolvers/gen_document_fetch_vectors_test.go
new file mode 100644
index 00000000..ef5dbd66
--- /dev/null
+++ b/sdk/go/resolvers/gen_document_fetch_vectors_test.go
@@ -0,0 +1,161 @@
+package resolvers
+
+// Golden-vector emitter for the document-fetch corpus.
+//
+// Every document read ends in one decision about the status it was answered with,
+// made once per language in the shared GET: a 200 is read, a 404 is a missing
+// document on every read, any 3xx is a refused redirect on a key-directory read, and
+// anything else is an unavailable document. That decision is where three languages
+// could disagree about the same answer: Go's client consults its redirect hook only
+// for a followable status carrying a Location, while the other two SDKs see every
+// 3xx. This corpus makes the three answer the same statuses with the same verdict.
+//
+// document-fetch-vectors.json: {name, read, status, location, verdict}. read is
+// "key_directory" (a read that refuses every redirect) or "document" (one that may
+// follow them); location "" means the answer carries none; verdict is one of
+//
+//	ok                the answer is read
+//	not_found         a 404, which is also unavailable
+//	redirect_refused  a 3xx answering a key-directory read, which is also unavailable
+//	unavailable       any other failure
+//
+// Only terminal answers are recorded: a read that follows a redirect needs a second
+// answer, and following is not this decision. A Location the HTTP client cannot parse
+// is left out too: Go's and Python's clients reject that answer before the read sees
+// its status, TypeScript's read sees the status first, and each SDK pins its own side
+// in its tests.
+//
+// The verdicts are emitted by RUNNING the shared GET against a server that answers
+// each case — Go is the oracle, never a hand-authored table. Default `go test` asserts
+// the committed file matches a fresh emit; FORA_UPDATE_VECTORS=1 rewrites it.
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"path/filepath"
+	"testing"
+)
+
+// documentFetchVector is one answer to a document read and what the read reports.
+type documentFetchVector struct {
+	Name string `json:"name"`
+	//: "key_directory" for a read that refuses every redirect, "document" for one
+	//: that may follow them.
+	Read string `json:"read"`
+	//: The status the server answered with.
+	Status int `json:"status"`
+	//: The Location it answered with, "" when it sent none.
+	Location string `json:"location"`
+	//: What the read reports: ok, not_found, redirect_refused or unavailable.
+	Verdict string `json:"verdict"`
+}
+
+// elsewhereDirectory is a Location naming another origin's key directory.
+const elsewhereDirectory = "https://elsewhere.example/.well-known/http-message-signatures-directory"
+
+// documentFetchCases enumerate the answers whose verdict must not drift, without it.
+func documentFetchCases() []documentFetchVector {
+	dir := func(name string, status int, location string) documentFetchVector {
+		return documentFetchVector{Name: "key_directory_" + name, Read: "key_directory", Status: status, Location: location}
+	}
+	doc := func(name string, status int, location string) documentFetchVector {
+		return documentFetchVector{Name: "document_" + name, Read: "document", Status: status, Location: location}
+	}
+	return []documentFetchVector{
+		// The controls: an answer each read takes.
+		dir("ok", http.StatusOK, ""),
+		doc("ok", http.StatusOK, ""),
+
+		// A document that is not there, on either read.
+		dir("not_found", http.StatusNotFound, ""),
+		doc("not_found", http.StatusNotFound, ""),
+
+		// Answers that are no document and no redirect. A 403 and a 410 are refusals
+		// of a sort, and not the 404 a caller may read as "absent".
+		dir("forbidden", http.StatusForbidden, ""),
+		dir("gone", http.StatusGone, ""),
+		dir("server_error", http.StatusInternalServerError, ""),
+		dir("unavailable", http.StatusServiceUnavailable, ""),
+		doc("forbidden", http.StatusForbidden, ""),
+		doc("gone", http.StatusGone, ""),
+		doc("unavailable", http.StatusServiceUnavailable, ""),
+
+		// Every redirect a key directory might answer with, followable or not, to
+		// another origin, relative, carrying credentials, or out of http(s).
+		dir("moved_permanently", http.StatusMovedPermanently, elsewhereDirectory),
+		dir("found", http.StatusFound, elsewhereDirectory),
+		dir("see_other", http.StatusSeeOther, elsewhereDirectory),
+		dir("temporary_redirect", http.StatusTemporaryRedirect, elsewhereDirectory),
+		dir("permanent_redirect", http.StatusPermanentRedirect, elsewhereDirectory),
+		dir("found_relative", http.StatusFound, "/elsewhere"),
+		dir("found_with_credentials", http.StatusFound, "https://user:secret@elsewhere.example/d?token=t"),
+		dir("found_not_http", http.StatusFound, "ftp://elsewhere.example/d"),
+		dir("found_no_location", http.StatusFound, ""),
+		dir("multiple_choices", http.StatusMultipleChoices, elsewhereDirectory),
+		dir("not_modified", http.StatusNotModified, ""),
+
+		// The 3xx answers a read that may follow redirects does not follow.
+		doc("found_no_location", http.StatusFound, ""),
+		doc("multiple_choices", http.StatusMultipleChoices, elsewhereDirectory),
+		doc("not_modified", http.StatusNotModified, ""),
+	}
+}
+
+// TestGenerateDocumentFetchVectors emits the document-fetch golden corpus.
+func TestGenerateDocumentFetchVectors(t *testing.T) {
+	cases := documentFetchCases()
+	vectors := make([]documentFetchVector, 0, len(cases))
+	for _, c := range cases {
+		verdict, ok := documentFetchVerdict(readDocumentAnswer(t, c))
+		if !ok {
+			t.Fatalf("%s: the read failed with an error the corpus has no verdict for", c.Name)
+		}
+		c.Verdict = verdict
+		vectors = append(vectors, c)
+	}
+	emitOrCheck(t, filepath.Join("testdata", "document-fetch-vectors.json"), map[string]any{
+		"note": "The verdict a document read reports for each status it can be answered with, " +
+			"derived by driving the shared GET. A key_directory read refuses every 3xx; a " +
+			"document read may follow redirects, so only the 3xx answers it does not follow " +
+			"are recorded. not_found and redirect_refused are also unavailable.",
+		"vectors": vectors,
+	})
+}
+
+// readDocumentAnswer serves v's answer and reads it as v's read does.
+func readDocumentAnswer(t *testing.T, v documentFetchVector) error {
+	t.Helper()
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		if v.Location != "" {
+			w.Header().Set("Location", v.Location)
+		}
+		w.WriteHeader(v.Status)
+	}))
+	defer srv.Close()
+	read := fetchDocument
+	if v.Read == "key_directory" {
+		read = fetchDocumentNoRedirect
+	}
+	_, err := read(context.Background(), srv.Client(), srv.URL+"/document")
+	return err
+}
+
+// documentFetchVerdict names the verdict err carries, the most specific first. ok is
+// false for a failure that is not ErrDirectoryUnavailable, which the emitter refuses
+// to record rather than invent a word for.
+func documentFetchVerdict(err error) (verdict string, ok bool) {
+	switch {
+	case err == nil:
+		return "ok", true
+	case !errors.Is(err, ErrDirectoryUnavailable):
+		return "", false
+	case errors.Is(err, ErrRedirectRefused):
+		return "redirect_refused", true
+	case errors.Is(err, ErrDocumentNotFound):
+		return "not_found", true
+	default:
+		return "unavailable", true
+	}
+}
diff --git a/sdk/go/resolvers/signed_directory_helpers_test.go b/sdk/go/resolvers/signed_directory_helpers_test.go
index a52ef367..5fa95148 100644
--- a/sdk/go/resolvers/signed_directory_helpers_test.go
+++ b/sdk/go/resolvers/signed_directory_helpers_test.go
@@ -4,6 +4,7 @@ import (
 	"crypto/ed25519"
 	"encoding/base64"
 	"net/http"
+	"net/http/httptest"
 	"sync"
 
 	"google.golang.org/protobuf/encoding/protojson"
@@ -37,6 +38,12 @@ const (
 // media type and a response signature by each listed key a test registered. A
 // listed key nobody registered is left unsigned, which a reader treats as absent.
 func writeSignedDirectory(w http.ResponseWriter, r *http.Request, body []byte) {
+	writeSignedDirectoryWindow(w, r, body, directoryResponseCreated, directoryResponseExpires)
+}
+
+// writeSignedDirectoryWindow is writeSignedDirectory with the response signatures'
+// window given: a test of the clock a read judges them at signs for a narrow one.
+func writeSignedDirectoryWindow(w http.ResponseWriter, r *http.Request, body []byte, created, expires int64) {
 	var file forav1.WBAFile
 	_ = protojson.UnmarshalOptions{DiscardUnknown: true}.Unmarshal(body, &file)
 	var signers []helpers.Signer
@@ -59,8 +66,7 @@ func writeSignedDirectory(w http.ResponseWriter, r *http.Request, body []byte) {
 		signers = append(signers, s)
 	}
 	if len(signers) > 0 {
-		sig, err := helpers.SignDirectoryResponse(r.Context(), r.Host, body, signers,
-			directoryResponseCreated, directoryResponseExpires)
+		sig, err := helpers.SignDirectoryResponse(r.Context(), r.Host, body, signers, created, expires)
 		if err != nil {
 			http.Error(w, err.Error(), http.StatusInternalServerError)
 			return
@@ -70,3 +76,17 @@ func writeSignedDirectory(w http.ResponseWriter, r *http.Request, body []byte) {
 	w.Header().Set("Content-Type", resolvers.WBADirectoryMediaType)
 	_, _ = w.Write(body)
 }
+
+// writeDirectoryWithWrongDigest answers r as writeSignedDirectory does, but with a
+// Content-Digest that does not match the body: the response signatures cover a
+// digest of some other bytes, so no listed key can be checked against what was
+// served.
+func writeDirectoryWithWrongDigest(w http.ResponseWriter, r *http.Request, body []byte) {
+	rec := httptest.NewRecorder()
+	writeSignedDirectory(rec, r, body)
+	for k, v := range rec.Header() {
+		w.Header()[k] = v
+	}
+	w.Header().Set("Content-Digest", helpers.ContentDigest([]byte("some other body")))
+	_, _ = w.Write(rec.Body.Bytes())
+}
diff --git a/sdk/go/resolvers/testdata/document-fetch-vectors.json b/sdk/go/resolvers/testdata/document-fetch-vectors.json
new file mode 100644
index 00000000..086b4aef
--- /dev/null
+++ b/sdk/go/resolvers/testdata/document-fetch-vectors.json
@@ -0,0 +1,180 @@
+{
+  "note": "The verdict a document read reports for each status it can be answered with, derived by driving the shared GET. A key_directory read refuses every 3xx; a document read may follow redirects, so only the 3xx answers it does not follow are recorded. not_found and redirect_refused are also unavailable.",
+  "vectors": [
+    {
+      "name": "key_directory_ok",
+      "read": "key_directory",
+      "status": 200,
+      "location": "",
+      "verdict": "ok"
+    },
+    {
+      "name": "document_ok",
+      "read": "document",
+      "status": 200,
+      "location": "",
+      "verdict": "ok"
+    },
+    {
+      "name": "key_directory_not_found",
+      "read": "key_directory",
+      "status": 404,
+      "location": "",
+      "verdict": "not_found"
+    },
+    {
+      "name": "document_not_found",
+      "read": "document",
+      "status": 404,
+      "location": "",
+      "verdict": "not_found"
+    },
+    {
+      "name": "key_directory_forbidden",
+      "read": "key_directory",
+      "status": 403,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "key_directory_gone",
+      "read": "key_directory",
+      "status": 410,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "key_directory_server_error",
+      "read": "key_directory",
+      "status": 500,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "key_directory_unavailable",
+      "read": "key_directory",
+      "status": 503,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "document_forbidden",
+      "read": "document",
+      "status": 403,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "document_gone",
+      "read": "document",
+      "status": 410,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "document_unavailable",
+      "read": "document",
+      "status": 503,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "key_directory_moved_permanently",
+      "read": "key_directory",
+      "status": 301,
+      "location": "https://elsewhere.example/.well-known/http-message-signatures-directory",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_found",
+      "read": "key_directory",
+      "status": 302,
+      "location": "https://elsewhere.example/.well-known/http-message-signatures-directory",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_see_other",
+      "read": "key_directory",
+      "status": 303,
+      "location": "https://elsewhere.example/.well-known/http-message-signatures-directory",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_temporary_redirect",
+      "read": "key_directory",
+      "status": 307,
+      "location": "https://elsewhere.example/.well-known/http-message-signatures-directory",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_permanent_redirect",
+      "read": "key_directory",
+      "status": 308,
+      "location": "https://elsewhere.example/.well-known/http-message-signatures-directory",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_found_relative",
+      "read": "key_directory",
+      "status": 302,
+      "location": "/elsewhere",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_found_with_credentials",
+      "read": "key_directory",
+      "status": 302,
+      "location": "https://user:secret@elsewhere.example/d?token=t",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_found_not_http",
+      "read": "key_directory",
+      "status": 302,
+      "location": "ftp://elsewhere.example/d",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_found_no_location",
+      "read": "key_directory",
+      "status": 302,
+      "location": "",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_multiple_choices",
+      "read": "key_directory",
+      "status": 300,
+      "location": "https://elsewhere.example/.well-known/http-message-signatures-directory",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "key_directory_not_modified",
+      "read": "key_directory",
+      "status": 304,
+      "location": "",
+      "verdict": "redirect_refused"
+    },
+    {
+      "name": "document_found_no_location",
+      "read": "document",
+      "status": 302,
+      "location": "",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "document_multiple_choices",
+      "read": "document",
+      "status": 300,
+      "location": "https://elsewhere.example/.well-known/http-message-signatures-directory",
+      "verdict": "unavailable"
+    },
+    {
+      "name": "document_not_modified",
+      "read": "document",
+      "status": 304,
+      "location": "",
+      "verdict": "unavailable"
+    }
+  ]
+}
diff --git a/sdk/go/resolvers/wbadirectoryfetcher_test.go b/sdk/go/resolvers/wbadirectoryfetcher_test.go
new file mode 100644
index 00000000..310acfd8
--- /dev/null
+++ b/sdk/go/resolvers/wbadirectoryfetcher_test.go
@@ -0,0 +1,155 @@
+package resolvers_test
+
+// NewWBADirectoryFetcher, the offer-key cache's default directory read, as a caller
+// that classifies its failures sees them. Every failure is ErrDirectoryUnavailable,
+// so a fail-closed caller halts on all of them; a 404, a redirect, the wrong media
+// type and a response whose signatures cannot be checked also carry a sentinel of
+// their own, so a caller can tell what the directory answered from an outage
+// without reading the message.
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"sync/atomic"
+	"testing"
+	"time"
+
+	"github.com/FORA-Protocol/protocol/sdk/go/helpers"
+	"github.com/FORA-Protocol/protocol/sdk/go/resolvers"
+)
+
+func TestWBADirectoryFetcherNamesWhatTheDirectoryAnswered(t *testing.T) {
+	_, jwk := newSigningKey("fetcher-answers", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
+	body := marshalWBA(jwk)
+	var answer atomic.Value // http.HandlerFunc
+	var hits atomic.Int32
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		hits.Add(1)
+		answer.Load().(http.HandlerFunc)(w, r)
+	}))
+	t.Cleanup(srv.Close)
+	fetch := resolvers.NewWBADirectoryFetcher(srv.Client(), "http", "")
+	domain := hostOf(t, srv)
+	ctx := context.Background()
+
+	answer.Store(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { writeSignedDirectory(w, r, body) }))
+	if f, err := fetch(ctx, domain); err != nil || len(f.GetKeys()) != 1 {
+		t.Fatalf("the signed directory: keys %v, err %v; want its one key", f.GetKeys(), err)
+	}
+
+	status := func(code int) http.HandlerFunc {
+		return func(w http.ResponseWriter, _ *http.Request) { w.WriteHeader(code) }
+	}
+	all := []error{
+		resolvers.ErrDocumentNotFound, resolvers.ErrRedirectRefused, resolvers.ErrMediaTypeRefused,
+		helpers.ErrDirectoryResponseUnsigned, helpers.ErrDigestMismatch,
+	}
+	cases := []struct {
+		name    string
+		handler http.HandlerFunc
+		also    []error
+	}{
+		{"404", status(http.StatusNotFound), []error{resolvers.ErrDocumentNotFound}},
+		{"a redirect", func(w http.ResponseWriter, r *http.Request) {
+			http.Redirect(w, r, "/elsewhere", http.StatusFound)
+		}, []error{resolvers.ErrRedirectRefused}},
+		{"503", status(http.StatusServiceUnavailable), nil},
+		{"the JWK Set media type", func(w http.ResponseWriter, r *http.Request) {
+			rec := httptest.NewRecorder()
+			writeSignedDirectory(rec, r, body)
+			for k, v := range rec.Header() {
+				w.Header()[k] = v
+			}
+			w.Header().Set("Content-Type", "application/jwk-set+json")
+			_, _ = w.Write(rec.Body.Bytes())
+		}, []error{resolvers.ErrMediaTypeRefused}},
+		{"a Content-Digest that does not match", func(w http.ResponseWriter, r *http.Request) {
+			writeDirectoryWithWrongDigest(w, r, body)
+		}, []error{helpers.ErrDirectoryResponseUnsigned, helpers.ErrDigestMismatch}},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			answer.Store(tc.handler)
+			before := hits.Load()
+			_, err := fetch(ctx, domain)
+			if hits.Load() == before {
+				t.Fatal("the directory was never asked")
+			}
+			if !errors.Is(err, resolvers.ErrDirectoryUnavailable) || errors.Is(err, resolvers.ErrUnknownKey) {
+				t.Fatalf("err = %v, want ErrDirectoryUnavailable and never ErrUnknownKey", err)
+			}
+			for _, sentinel := range all {
+				want := false
+				for _, a := range tc.also {
+					want = want || a == sentinel
+				}
+				if errors.Is(err, sentinel) != want {
+					t.Errorf("err = %v: errors.Is(%v) = %v, want %v", err, sentinel, !want, want)
+				}
+			}
+		})
+	}
+
+	t.Run("a host that does not answer", func(t *testing.T) {
+		srv.Close()
+		_, err := fetch(ctx, domain)
+		if !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+			t.Fatalf("err = %v, want ErrDirectoryUnavailable", err)
+		}
+		for _, sentinel := range all {
+			if errors.Is(err, sentinel) {
+				t.Errorf("err = %v also matches %v", err, sentinel)
+			}
+		}
+	})
+}
+
+// A directory's response signatures are judged at a clock. A fetcher built with
+// WBADirectoryFetcherOptions.Now reads that clock on every fetch, so the cache that
+// selects keys and the fetch that checks the directory can run on one clock.
+func TestWBADirectoryFetcherJudgesResponseSignaturesAtItsClock(t *testing.T) {
+	created := int64(1_000_000_000)
+	expires := created + 60
+	inWindow := time.Unix(created+30, 0)
+	priv, jwk := newSigningKey("fetcher-clock", inWindow.Add(-time.Hour), inWindow.Add(time.Hour))
+	body := marshalWBA(jwk)
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		writeSignedDirectoryWindow(w, r, body, created, expires)
+	}))
+	t.Cleanup(srv.Close)
+	domain := hostOf(t, srv)
+	ctx := context.Background()
+
+	// The wall clock is long past the window, so the response signature has expired
+	// and the key it signed is not handed out.
+	wall := resolvers.NewWBADirectoryFetcher(srv.Client(), "http", "")
+	if f, err := wall(ctx, domain); err != nil || len(f.GetKeys()) != 0 {
+		t.Fatalf("at the wall clock: keys %v, err %v; want none", f.GetKeys(), err)
+	}
+
+	now := inWindow
+	clock := func() time.Time { return now }
+	fetch := resolvers.NewWBADirectoryFetcher(srv.Client(), "http", "", resolvers.WBADirectoryFetcherOptions{Now: clock})
+	if f, err := fetch(ctx, domain); err != nil || len(f.GetKeys()) != 1 {
+		t.Fatalf("inside the window: keys %v, err %v; want the one key", f.GetKeys(), err)
+	}
+	// Read on every fetch, never captured when the fetcher was built.
+	now = time.Unix(expires+1, 0)
+	if f, err := fetch(ctx, domain); err != nil || len(f.GetKeys()) != 0 {
+		t.Fatalf("after the window: keys %v, err %v; want none", f.GetKeys(), err)
+	}
+
+	// One clock for the cache and the fetch it calls resolves the key; the same cache
+	// over a fetcher on the wall clock finds none to select.
+	now = inWindow
+	shared := resolvers.NewCachedOfferKeyResolver(resolvers.CachedOfferKeyResolverConfig{Fetch: fetch, Now: clock})
+	if key, err := shared.Resolve(ctx, domain); err != nil || !key.Equal(priv.Public()) {
+		t.Fatalf("one clock: key %x, err %v; want the key the directory signed for", key, err)
+	}
+	split := resolvers.NewCachedOfferKeyResolver(resolvers.CachedOfferKeyResolverConfig{Fetch: wall, Now: clock})
+	if _, err := split.Resolve(ctx, domain); !errors.Is(err, resolvers.ErrUnknownKey) {
+		t.Fatalf("two clocks: err = %v, want ErrUnknownKey", err)
+	}
+}
diff --git a/sdk/go/resolvers/wbakeyresolver.go b/sdk/go/resolvers/wbakeyresolver.go
index 90fcece7..59504f6d 100644
--- a/sdk/go/resolvers/wbakeyresolver.go
+++ b/sdk/go/resolvers/wbakeyresolver.go
@@ -48,7 +48,11 @@ var (
 	// WBA directory, a well-known manifest, a revocation list or a license
 	// document. It is deliberately errors.Is-DISTINCT from ErrUnknownKey: a
 	// fail-closed composite must be able to halt on a directory outage rather
-	// than fall through as if the key were merely unknown.
+	// than fall through as if the key were merely unknown. Two of its failures
+	// also carry a sentinel of their own, wrapped together with it:
+	// ErrDocumentNotFound for a 404, and ErrRedirectRefused for a key directory
+	// that answers with a redirect. A check for ErrDirectoryUnavailable still
+	// matches both.
 	ErrDirectoryUnavailable = errors.New("resolvers: document unavailable")
 	// ErrRevocationUnevaluated signals that the key resolved, but its directory
 	// declares a revocation_url whose snapshot has never been fetched (unreachable
diff --git a/sdk/go/resolvers/wbakeyresolver_profile_test.go b/sdk/go/resolvers/wbakeyresolver_profile_test.go
index 02b02b39..f4170c01 100644
--- a/sdk/go/resolvers/wbakeyresolver_profile_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_profile_test.go
@@ -53,14 +53,18 @@ func TestWBAKeyResolver_handsOutOnlyKeysThatSignedTheResponse(t *testing.T) {
 
 // TestWBAKeyResolver_refusesTheWrongMediaTypeAndRedirects: a directory served as
 // application/jwk-set+json, or reached through a redirect, is a directory that is
-// unavailable, never one whose keys are read.
+// unavailable, never one whose keys are read. Each also carries its own sentinel,
+// so a caller can tell the refusal from an outage.
 func TestWBAKeyResolver_refusesTheWrongMediaTypeAndRedirects(t *testing.T) {
 	t.Parallel()
 	priv, jwk := newSigningKey("k-media", wbaAnchor.Add(-time.Hour), wbaAnchor.Add(time.Hour))
 	tp := mustThumbprint(t, priv.Public().(ed25519.PublicKey))
 	body := marshalWBA(jwk)
-	for name, handler := range map[string]http.HandlerFunc{
-		"the JWK Set media type": func(w http.ResponseWriter, r *http.Request) {
+	for name, tc := range map[string]struct {
+		handler http.HandlerFunc
+		also    error
+	}{
+		"the JWK Set media type": {func(w http.ResponseWriter, r *http.Request) {
 			rec := httptest.NewRecorder()
 			writeSignedDirectory(rec, r, body)
 			for k, v := range rec.Header() {
@@ -68,21 +72,22 @@ func TestWBAKeyResolver_refusesTheWrongMediaTypeAndRedirects(t *testing.T) {
 			}
 			w.Header().Set("Content-Type", "application/jwk-set+json")
 			_, _ = w.Write(rec.Body.Bytes())
-		},
-		"a redirect": func(w http.ResponseWriter, r *http.Request) {
+		}, resolvers.ErrMediaTypeRefused},
+		"a redirect": {func(w http.ResponseWriter, r *http.Request) {
 			if strings.HasSuffix(r.URL.Path, "/moved") {
 				writeSignedDirectory(w, r, body)
 				return
 			}
 			http.Redirect(w, r, "/moved", http.StatusFound)
-		},
+		}, resolvers.ErrRedirectRefused},
 	} {
 		t.Run(name, func(t *testing.T) {
-			srv := httptest.NewTLSServer(handler)
+			srv := httptest.NewTLSServer(tc.handler)
 			defer srv.Close()
 			ctx := helpers.WithSignatureAgent(context.Background(), srv.URL)
-			if _, err := profileResolver(srv.Client()).Resolve(ctx, tp); !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
-				t.Fatalf("err = %v, want ErrDirectoryUnavailable", err)
+			_, err := profileResolver(srv.Client()).Resolve(ctx, tp)
+			if !errors.Is(err, resolvers.ErrDirectoryUnavailable) || !errors.Is(err, tc.also) {
+				t.Fatalf("err = %v, want ErrDirectoryUnavailable with %v", err, tc.also)
 			}
 		})
 	}
diff --git a/sdk/go/resolvers/wbakeyresolver_ssrf_internal_test.go b/sdk/go/resolvers/wbakeyresolver_ssrf_internal_test.go
index 24cd6e5b..e1b36537 100644
--- a/sdk/go/resolvers/wbakeyresolver_ssrf_internal_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_ssrf_internal_test.go
@@ -232,8 +232,9 @@ func allowLoopbackForWiringTest(t *testing.T) {
 
 // TestGuardedWBAClientSurfacesNon2xx: a non-2xx directory response must surface
 // as an ordinary (StatusCode, nil-error) response, never a transport error — the
-// resolver classifies the status itself (a 404 directory is "unknown key", not an
-// outage). Parity with the Python (fetch_soft→None / fetch_strict→outage) and TS
+// read classifies the status itself (a 404 is ErrDocumentNotFound and a 5xx is
+// not, both wrapped with ErrDirectoryUnavailable, and neither is an unknown key).
+// Parity with the Python (fetch_soft→None / fetch_strict→outage) and TS
 // (fetchStrict→DirectoryUnavailable) non-2xx behavioral tests; Go's path is stock
 // net/http, so this locks the contract rather than guarding custom wiring (the
 // non-2xx crash that motivated this suite was Python's hand-built opener).
diff --git a/sdk/go/resolvers/wbakeyresolver_test.go b/sdk/go/resolvers/wbakeyresolver_test.go
index 2b162e62..fa58ec92 100644
--- a/sdk/go/resolvers/wbakeyresolver_test.go
+++ b/sdk/go/resolvers/wbakeyresolver_test.go
@@ -495,8 +495,10 @@ func TestWBAKeyResolver_TTLCacheHit(t *testing.T) {
 
 // ── Test 14 ────────────────────────────────────────────────────────────────
 
-// TestWBAKeyResolver_FetchError verifies that a fetch/500 failure returns an
-// error wrapping ErrDirectoryUnavailable that is NOT errors.Is(ErrUnknownKey).
+// TestWBAKeyResolver_FetchError verifies that a directory answering 500, or 404,
+// returns an error wrapping ErrDirectoryUnavailable that is NOT
+// errors.Is(ErrUnknownKey). A 404 also wraps ErrDocumentNotFound, so a caller can
+// tell a directory that is not there from one that is down; a 500 does not.
 //
 // This distinction is load-bearing: the broker composite fails closed on any
 // non-ErrUnknownKey error; if a well-known outage returned ErrUnknownKey the
@@ -504,26 +506,41 @@ func TestWBAKeyResolver_TTLCacheHit(t *testing.T) {
 // possibly-revoked key.
 func TestWBAKeyResolver_FetchError(t *testing.T) {
 	t.Parallel()
-	origin := newWBAOrigin(nil)
-	defer origin.close()
-	origin.setWBAStatus(http.StatusInternalServerError) // force 500
-
-	ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
-	r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
-		HTTP: origin.Client(),
-		Now:  func() time.Time { return wbaAnchor },
-	})
-	_, err := r.Resolve(ctx, "any-thumbprint")
-	if err == nil {
-		t.Fatal("want error from 500 origin, got nil")
-	}
-	if !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
-		t.Fatalf("want error wrapping ErrDirectoryUnavailable, got %v", err)
-	}
-	// CRITICAL: fetch failure MUST NOT be confused with an unknown key; the
-	// composite resolver must halt (fail closed), not fall through.
-	if errors.Is(err, helpers.ErrUnknownKey) {
-		t.Fatal("fetch/parse failure must be errors.Is-DISTINCT from ErrUnknownKey to preserve broker composite fail-closed semantics")
+	for _, tc := range []struct {
+		status   int
+		notFound bool
+	}{
+		{http.StatusInternalServerError, false},
+		{http.StatusNotFound, true},
+	} {
+		t.Run(http.StatusText(tc.status), func(t *testing.T) {
+			t.Parallel()
+			origin := newWBAOrigin(nil)
+			defer origin.close()
+			origin.setWBAStatus(tc.status)
+
+			ctx := helpers.WithSignatureAgent(context.Background(), origin.url)
+			r := resolvers.NewWBAKeyResolver(resolvers.WBAKeyResolverOptions{
+				HTTP: origin.Client(),
+				Now:  func() time.Time { return wbaAnchor },
+			})
+			_, err := r.Resolve(ctx, "any-thumbprint")
+			if err == nil {
+				t.Fatalf("want error from a %d origin, got nil", tc.status)
+			}
+			if !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+				t.Fatalf("want error wrapping ErrDirectoryUnavailable, got %v", err)
+			}
+			if errors.Is(err, resolvers.ErrDocumentNotFound) != tc.notFound {
+				t.Fatalf("errors.Is(err, ErrDocumentNotFound) = %v for a %d, want %v: %v",
+					!tc.notFound, tc.status, tc.notFound, err)
+			}
+			// CRITICAL: fetch failure MUST NOT be confused with an unknown key; the
+			// composite resolver must halt (fail closed), not fall through.
+			if errors.Is(err, helpers.ErrUnknownKey) {
+				t.Fatal("fetch/parse failure must be errors.Is-DISTINCT from ErrUnknownKey to preserve broker composite fail-closed semantics")
+			}
+		})
 	}
 }
 
diff --git a/sdk/go/resolvers/wellknowndoc_shared_test.go b/sdk/go/resolvers/wellknowndoc_shared_test.go
index c01c0abf..49c8777b 100644
--- a/sdk/go/resolvers/wellknowndoc_shared_test.go
+++ b/sdk/go/resolvers/wellknowndoc_shared_test.go
@@ -4,9 +4,11 @@ import (
 	"context"
 	"crypto/ed25519"
 	"encoding/base64"
+	"errors"
 	"fmt"
 	"net/http"
 	"net/http/httptest"
+	"sync/atomic"
 	"testing"
 	"time"
 
@@ -164,3 +166,47 @@ func TestWellKnownDoc_toleranceDoesNotSwallowAConformantMember(t *testing.T) {
 			got.Verdict, got.Schema == nil)
 	}
 }
+
+// The three faces share one fetch, so a manifest the host does not publish reads
+// the same way on each: an unavailable document, like any failed read, and also
+// ErrDocumentNotFound, so a caller can tell an absent manifest from an unreachable
+// host. It is never an unknown key, and never a refused redirect.
+func TestWellKnownDoc_aMissingManifestIsNotFoundOnEveryFace(t *testing.T) {
+	var hits atomic.Int32
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		hits.Add(1)
+		w.WriteHeader(http.StatusNotFound)
+	}))
+	defer srv.Close()
+	ctx, host := context.Background(), hostOf(t, srv)
+	for name, read := range map[string]func() error{
+		"key": func() error {
+			r := resolvers.NewWellKnownKeyResolver(srv.URL+helpers.WellKnownPath, resolvers.WellKnownOptions{TTL: time.Hour})
+			_, err := r.Resolve(ctx, "ex.v1")
+			return err
+		},
+		"endpoint": func() error {
+			r := resolvers.NewWellKnownEndpointResolver(resolvers.WellKnownOptions{
+				TTL: time.Hour, Scheme: "http", HTTP: http.DefaultClient,
+			})
+			_, err := r.ResolveEndpoint(ctx, host)
+			return err
+		},
+		"requirements": func() error {
+			_, err := loopbackReader(nil).ResolveRegistrationRequirements(ctx, host)
+			return err
+		},
+	} {
+		before := hits.Load()
+		err := read()
+		if hits.Load() == before {
+			t.Fatalf("%s: the host was never asked", name)
+		}
+		if !errors.Is(err, resolvers.ErrDocumentNotFound) || !errors.Is(err, resolvers.ErrDirectoryUnavailable) {
+			t.Errorf("%s: err = %v, want ErrDocumentNotFound wrapped with ErrDirectoryUnavailable", name, err)
+		}
+		if errors.Is(err, resolvers.ErrUnknownKey) || errors.Is(err, resolvers.ErrRedirectRefused) {
+			t.Errorf("%s: err = %v also reads as an unknown key or a refused redirect", name, err)
+		}
+	}
+}
diff --git a/sdk/parity/symbol-map.json b/sdk/parity/symbol-map.json
index 57d39335..c4a00866 100644
--- a/sdk/parity/symbol-map.json
+++ b/sdk/parity/symbol-map.json
@@ -197,8 +197,9 @@
     "resolvers.NewContentFetcher": "Go constructor for the content-download leg; py/ts fold construction into their client, so there is no fetcher to build separately.",
     "resolvers.NewGuardedTransport": "Go constructor composing the SSRF guard over a caller's base transport; py/ts expose their guarded fetch as a single factory with no separable base.",
     "resolvers.ProofSigner": "Go interface seam that keeps key custody out of the dialing tier; py/ts inject a signing callable instead of a named interface.",
-    "resolvers.ReadOptions": "Go options struct for the document readers; Python takes the same values as keyword arguments (http=, scheme=) and TS as an options object (ReadDocumentOptions).",
+    "resolvers.ReadOptions": "Go options struct for the document readers; Python takes the same values as keyword arguments (http=, scheme=, now=) and TS as an options object (ReadDocumentOptions).",
     "resolvers.SSRFCheckRedirect": "Go redirect-policy hook; py/ts fold redirect checks into the guard (async_ssrf_guard / the guarded fetch).",
+    "resolvers.WBADirectoryFetcherOptions": "Go options struct for NewWBADirectoryFetcher's optional trailing argument; Python takes the same value as a keyword argument (now=) and TS as a member of WBAOfferDirectoryFetchOptions.",
     "helpers.ErrSignatureTag": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrSignatureAgentForm": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
     "helpers.ErrSignatureAgentNotOrigin": "Go errors.Is sentinel; py/ts express verification failures via typed failure unions / exception classes, not per-reason named sentinels.",
@@ -1019,6 +1020,11 @@
       "python": "DirectoryUnavailableError",
       "ts": "DirectoryUnavailable"
     },
+    "resolvers.ErrDocumentNotFound": {
+      "allowlist_reason": null,
+      "python": "DocumentNotFoundError",
+      "ts": "DocumentNotFound"
+    },
     "resolvers.ErrEndpointRefused": {
       "allowlist_reason": null,
       "python": "EndpointRefusedError",
@@ -1064,6 +1070,11 @@
       "python": "NoEndpointError",
       "ts": "NoEndpoint"
     },
+    "resolvers.ErrRedirectRefused": {
+      "allowlist_reason": null,
+      "python": "RedirectRefusedError",
+      "ts": "RedirectRefused"
+    },
     "resolvers.ErrRevocationUnevaluated": {
       "allowlist_reason": null,
       "python": "RevocationUnevaluatedError",
diff --git a/sdk/python/README.md b/sdk/python/README.md
index 3584bf99..8be165d9 100644
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@@ -329,7 +329,9 @@ and still defaults to a plain one, which is a known gap rather than a decision.
   `WBAKeyResolver` (Web Bot Auth directory, revocation- and expiry-aware, with a
   background poller). A key directory is fetched with no redirect, must be served as
   `application/http-message-signatures-directory+json`, and only the keys that signed its
-  response (`verify_directory_response`) are handed out. A Signature-Agent member is always
+  response (`verify_directory_response`) are handed out. A directory that answers 404
+  raises `DocumentNotFoundError`, and one that answers with any 3xx `RedirectRefusedError`,
+  both subclasses of `DirectoryUnavailableError`. A Signature-Agent member is always
   an https origin and its directory is always fetched over https; a local sandbox serves
   the directory over TLS and injects an `http=` client that trusts it.
 - **Endpoint resolver** — `WellKnownEndpointResolver` discovers an Exchange's own service
@@ -342,8 +344,9 @@ and still defaults to a plain one, which is a known gap rather than a decision.
   retrying.
 - **Offer keys** — `CachedOfferKeyResolver` caches an Exchange's offer-signing key with an
   expiry clamped to the key's own `not_after`, and `create_wba_offer_directory_fetch` is
-  the fetch it runs on. `active_ed25519_key_screened` and its siblings are the underlying
-  window-and-revocation selection.
+  the fetch it runs on. Give both the same `now=` clock, so the directory's response
+  signatures and the key selection are judged at one time. `active_ed25519_key_screened`
+  and its siblings are the underlying window-and-revocation selection.
 - **Registration requirements** — `WellKnownRequirementsReader` reads what one Exchange
   asks of a registration from the same manifest, and holds no document cache: the contract
   requires the terms digest to come from a freshly fetched document.
@@ -519,9 +522,11 @@ a service through the SDK and check every answer through it:
   the strict contract refuses (`StrictViolationError`), and returns a `Document` with the
   parsed model, the URL, the bytes and the media type. The license reader verifies the
   bytes against `uri_digest` (`DigestMismatchError`) and returns a `LicenseDocument`. A
-  failed fetch is `DirectoryUnavailableError`; no reader returns `None`. The directory
-  reader fetches with no redirect and refuses a directory unless every listed key signed
-  its response (`DirectoryResponseUnsignedError`).
+  failed fetch is `DirectoryUnavailableError`, and two say which: `DocumentNotFoundError`
+  for a 404 and `RedirectRefusedError` for a directory that answers with any 3xx, both
+  subclasses of it; no reader returns `None`. The directory reader fetches with no
+  redirect and refuses a directory unless every listed key signed its response
+  (`DirectoryResponseUnsignedError`), judged at `now=` (unix seconds) or the wall clock.
 - **`check_strict(message_name, payload)`** applies the same strict check to any decoded
   message, raising `StrictViolationError`. A delivery-fetch proof is signed with the
   public `sign_agent_binding` (or `SigningTransport.sign_agent_binding`).
diff --git a/sdk/python/fora_sdk/__init__.py b/sdk/python/fora_sdk/__init__.py
index 2961f1b2..a8092ba2 100644
--- a/sdk/python/fora_sdk/__init__.py
+++ b/sdk/python/fora_sdk/__init__.py
@@ -171,11 +171,13 @@
     WBA_DIRECTORY_PATH,
     DirectoryResponseUnsignedError,
     DirectoryUnavailableError,
+    DocumentNotFoundError,
     EndpointRefusedError,
     KeyExpiredError,
     KeyRevokedError,
     ManifestVersionRefusedError,
     NoEndpointError,
+    RedirectRefusedError,
     ResolverError,
     UnknownKeyError,
     WBAKeyResolver,
@@ -265,6 +267,7 @@
     "ContentTypeJSON",
     "ContentTypeProto",
     "DirectoryUnavailableError",
+    "DocumentNotFoundError",
     "DiscoveryHint",
     "DiscoveryResult",
     "ERROR_DETAIL_TYPE",
@@ -302,6 +305,7 @@
     "RULE_QUOTA_METRIC_REGISTERED",
     "RULE_RESTRICTION_CANONICAL_DISJOINT",
     "RULE_RESTRICTION_TOKEN_REGISTERED",
+    "RedirectRefusedError",
     "RegistrationDataVerdict",
     "RegistrationSchema",
     "RejectReason",
diff --git a/sdk/python/fora_sdk/resolvers/__init__.py b/sdk/python/fora_sdk/resolvers/__init__.py
index 06a0ec36..888ab813 100644
--- a/sdk/python/fora_sdk/resolvers/__init__.py
+++ b/sdk/python/fora_sdk/resolvers/__init__.py
@@ -35,6 +35,7 @@
     DigestMismatchError,
     DirectoryResponseUnsignedError,
     DirectoryUnavailableError,
+    DocumentNotFoundError,
     EndpointRefusedError,
     ExchangeNotPermittedError,
     KeyExpiredError,
@@ -44,6 +45,7 @@
     ManifestVersionRefusedError,
     MediaTypeRefusedError,
     NoEndpointError,
+    RedirectRefusedError,
     ResolverError,
     RevocationUnevaluatedError,
     UnknownKeyError,
@@ -76,6 +78,7 @@
     "DirectoryResponseUnsignedError",
     "DirectoryUnavailableError",
     "Document",
+    "DocumentNotFoundError",
     "EndpointRefusedError",
     "ExchangeNotPermittedError",
     "KeyExpiredError",
@@ -86,6 +89,7 @@
     "ManifestVersionRefusedError",
     "MediaTypeRefusedError",
     "NoEndpointError",
+    "RedirectRefusedError",
     "RegistrationRequirements",
     "ResolverError",
     "RevocationUnevaluatedError",
diff --git a/sdk/python/fora_sdk/resolvers/_http.py b/sdk/python/fora_sdk/resolvers/_http.py
index bf40726c..34435aa7 100644
--- a/sdk/python/fora_sdk/resolvers/_http.py
+++ b/sdk/python/fora_sdk/resolvers/_http.py
@@ -44,11 +44,17 @@
 import httpx
 
 from fora_sdk.resolvers import _ssrf
-from fora_sdk.resolvers.errors import DirectoryUnavailableError
+from fora_sdk.resolvers.errors import (
+    DirectoryUnavailableError,
+    DocumentNotFoundError,
+    RedirectRefusedError,
+)
 
 _MAX_DOC_BYTES = 1 << 20  # 1 MiB — well-known documents are small
 _TIMEOUT_S = 10.0
 _HTTP_OK = 200
+_HTTP_NOT_FOUND = 404
+_HTTP_REDIRECTS = range(300, 400)
 
 # Overall wall-clock budget for ONE guarded GET. httpx's timeout is PER-PHASE
 # (connect / read / write / pool) and does NOT cover the getaddrinfo the guarded
@@ -377,7 +383,7 @@ def _stream_bounded(client: httpx.Client, url: str, *, follow_redirects: bool =
     digest mismatch it is not. A non-2xx returns an empty body for the caller to
     classify. httpx owns redirect following and status handling — a non-2xx is an
     ordinary response, never a crash. With ``follow_redirects`` off, a 3xx is returned
-    as itself, which every caller refuses as a non-200.
+    as itself, which :func:`fetch_document` refuses as a :class:`RedirectRefusedError`.
     """
     with client.stream("GET", url, follow_redirects=follow_redirects) as resp:
         content_type = resp.headers.get("content-type")
@@ -433,7 +439,7 @@ def media_type_essence(header: str | None) -> str | None:
 
 def fetch_document(client: httpx.Client, url: str, *, follow_redirects: bool = True) -> Fetched:
     """GET ``url``; return the body and its media type on 200, else raise
-    DirectoryUnavailableError.
+    DirectoryUnavailableError. A 404 raises its subclass DocumentNotFoundError.
 
     A transport failure (an ``httpx.HTTPError`` — including a redirect to an
     unsupported scheme — or an ``OSError``, which ``SsrfError`` and the over-cap refusal
@@ -452,13 +458,23 @@ def fetch_document(client: httpx.Client, url: str, *, follow_redirects: bool = T
 
     ``follow_redirects=False`` refuses every redirect, whatever policy the client
     carries: a key directory answers 200 itself, because its address is the origin its
-    signer committed to and a redirect would hand key lookup to another one.
+    signer committed to and a redirect would hand key lookup to another one. Any 3xx then
+    raises the subclass RedirectRefusedError, naming the read and its status and never
+    the Location. A Location httpx cannot parse fails inside the client before the
+    status is seen, and is a plain DirectoryUnavailableError.
     """
     try:
         answer = _get_bounded(client, url, follow_redirects=follow_redirects)
     except (httpx.HTTPError, httpx.InvalidURL, OSError, ValueError) as exc:
         raise DirectoryUnavailableError(f"fetch {url}") from exc
     if answer.status != _HTTP_OK:
+        if not follow_redirects and answer.status in _HTTP_REDIRECTS:
+            raise RedirectRefusedError(
+                f"status {answer.status} for {url}: "
+                "a key directory is never fetched through a redirect"
+            )
+        if answer.status == _HTTP_NOT_FOUND:
+            raise DocumentNotFoundError(f"status {answer.status} for {url}")
         raise DirectoryUnavailableError(f"status {answer.status} for {url}")
     return Fetched(
         url=url,
diff --git a/sdk/python/fora_sdk/resolvers/documents.py b/sdk/python/fora_sdk/resolvers/documents.py
index 6ca64a03..0a4bc9cb 100644
--- a/sdk/python/fora_sdk/resolvers/documents.py
+++ b/sdk/python/fora_sdk/resolvers/documents.py
@@ -210,9 +210,11 @@ def fetch_wba_directory(http: httpx.Client, url: str, *, now: int | None = None)
     Every failure leaves as :class:`DirectoryUnavailableError`, which is what lets each
     caller make its own raise-or-contain choice against ONE exception type.
     ``fetch_document`` folds in every transport failure, every non-200, and every way the
-    URL itself can be refused — a malformed A-label and an over-long label included.
-    This adds the arms it does not cover: a redirect, a wrong media type, a body that is
-    not a valid directory, and a response that cannot be checked for signatures.
+    URL itself can be refused — a malformed A-label and an over-long label included —
+    and raises two subclasses that say which: :class:`DocumentNotFoundError` for a 404
+    and :class:`RedirectRefusedError` for any 3xx. This adds the arms it does not cover:
+    a wrong media type, a body that is not a valid directory, and a response that cannot
+    be checked for signatures.
     """
     fetched = fetch_document(http, url, follow_redirects=False)
     if fetched.media_type != WBA_DIRECTORY_MEDIA_TYPE:
@@ -392,8 +394,8 @@ def read_manifest(
 
     Raises ``ValueError`` when ``domain`` is not a bare host (a port is allowed), before
     anything is dialled; :class:`DirectoryUnavailableError` when the fetch fails or the
-    body is not JSON; :class:`MediaTypeRefusedError`;
-    :class:`ManifestVersionRefusedError`; and
+    body is not JSON (its subclass :class:`DocumentNotFoundError` for a 404);
+    :class:`MediaTypeRefusedError`; :class:`ManifestVersionRefusedError`; and
     :class:`~fora_sdk.strict.StrictViolationError`.
 
     ``http`` defaults to :func:`~fora_sdk.resolvers.guarded_client`, built for this call
@@ -407,7 +409,11 @@ def read_manifest(
 
 
 def read_wba_directory(
-    url_or_domain: str, *, scheme: str = "https", http: httpx.Client | None = None
+    url_or_domain: str,
+    *,
+    scheme: str = "https",
+    http: httpx.Client | None = None,
+    now: int | None = None,
 ) -> Document[WBAFile]:
     """Fetch and check a WBA key directory.
 
@@ -417,15 +423,22 @@ def read_wba_directory(
     fetched with no redirect: a redirect fails the fetch. The media type must be
     ``application/http-message-signatures-directory+json``, the body must pass the
     strict ``WBAFile`` schema and the cross-field rules, and the response must carry a
-    valid response signature by EVERY key it lists. Key validity windows and revocation
-    are not evaluated: that is the WBA key resolver's job, and a directory listing an
-    expired key is still a well-formed directory.
+    valid response signature by EVERY key it lists, judged at ``now`` (unix seconds,
+    default the wall clock). Key validity windows and revocation are not evaluated:
+    that is the WBA key resolver's job, and a directory listing an expired key is still
+    a well-formed directory.
 
     Raises ``ValueError`` for a value that is neither a URL nor a bare host;
-    :class:`DirectoryUnavailableError`; :class:`MediaTypeRefusedError`;
-    :class:`~fora_sdk.strict.StrictViolationError`; and
+    :class:`DirectoryUnavailableError` (its subclasses :class:`DocumentNotFoundError`
+    for a 404 and :class:`RedirectRefusedError` for any 3xx);
+    :class:`MediaTypeRefusedError`; :class:`~fora_sdk.strict.StrictViolationError`; and
     :class:`DirectoryResponseUnsignedError` when a listed key did not sign the
     response. ``http`` is as for :func:`read_manifest`.
+
+    It checks what a party publishes, so every listed key must have signed. A verifier
+    reads a directory through :class:`~fora_sdk.resolvers.WBAKeyResolver` or
+    :func:`~fora_sdk.resolvers.create_wba_offer_directory_fetch` instead, which use only
+    the keys whose response signature verifies, as ``WBAFile.keys`` requires.
     """
     if "://" in url_or_domain:
         url = url_or_domain
@@ -438,7 +451,9 @@ def read_wba_directory(
     doc = accept(WBA_DIRECTORY, fetched)
     listed = doc.message.keys or []
     try:
-        signed = signed_directory_keys(fetched, doc.message, int(time.time()))
+        signed = signed_directory_keys(
+            fetched, doc.message, int(time.time()) if now is None else now
+        )
     except ValueError as exc:
         raise DirectoryResponseUnsignedError(f"{url}: {exc}") from exc
     if len(signed.keys or []) != len(listed):
@@ -458,7 +473,8 @@ def read_revocation_list(
     cross-field rules. Whether ``url`` is anchored to the directory's host is the
     caller's question: the WBA key resolver skips a list that is not.
 
-    Raises :class:`DirectoryUnavailableError` and
+    Raises :class:`DirectoryUnavailableError` (its subclass
+    :class:`DocumentNotFoundError` for a 404) and
     :class:`~fora_sdk.strict.StrictViolationError`. ``http`` is as for
     :func:`read_manifest`.
     """
@@ -485,8 +501,9 @@ def read_license_document(
     :class:`DirectoryUnavailableError`: it names a document, not a place to fetch one.
 
     Raises ``ValueError`` when the license carries no ``uri``;
-    :class:`~fora_sdk.strict.StrictViolationError`; :class:`DirectoryUnavailableError`;
-    and :class:`DigestMismatchError`. ``http`` is as for :func:`read_manifest`.
+    :class:`~fora_sdk.strict.StrictViolationError`; :class:`DirectoryUnavailableError`
+    (its subclass :class:`DocumentNotFoundError` for a 404); and
+    :class:`DigestMismatchError`. ``http`` is as for :func:`read_manifest`.
     """
     if not license.uri:
         raise ValueError("license carries no uri: there is no document to read")
diff --git a/sdk/python/fora_sdk/resolvers/errors.py b/sdk/python/fora_sdk/resolvers/errors.py
index 42b6ccb6..046b1470 100644
--- a/sdk/python/fora_sdk/resolvers/errors.py
+++ b/sdk/python/fora_sdk/resolvers/errors.py
@@ -6,7 +6,9 @@
 merely unknown. The port preserves that distinctness as distinct exception
 classes: each fail-closed verdict is its own catchable class, and (critically)
 ``DirectoryUnavailableError`` is NOT a subclass of ``UnknownKeyError`` — an
-outage must stay distinguishable from an unknown key.
+outage must stay distinguishable from an unknown key. Two unavailable documents
+also say which: ``DocumentNotFoundError`` (a 404) and ``RedirectRefusedError`` (a key
+directory that answers with a redirect) subclass ``DirectoryUnavailableError``.
 """
 
 from __future__ import annotations
@@ -52,6 +54,38 @@ class DirectoryUnavailableError(ResolverError):
     Deliberately NOT a subclass of :class:`UnknownKeyError`: a fail-closed
     composite must be able to halt on a directory outage rather than fall
     through as if the key were merely unknown.
+
+    Two of its failures say which: :class:`DocumentNotFoundError` and
+    :class:`RedirectRefusedError` are subclasses, so an ``except`` for this class
+    still catches both.
+    """
+
+
+class DocumentNotFoundError(DirectoryUnavailableError):
+    """The server answered a document read with 404 Not Found: it serves no document
+    at that address.
+
+    Every document read raises it: the key directory, the manifest, the revocation list
+    and the license document alike. A subclass of :class:`DirectoryUnavailableError`,
+    so a caller that handles an unavailable document handles this too. It states what
+    the server answered and no more: a document a party has yet to publish answers the
+    same way, so whether the absence is final is the caller's decision. Peer of Go
+    ``ErrDocumentNotFound`` / TS ``DocumentNotFound``.
+    """
+
+
+class RedirectRefusedError(DirectoryUnavailableError):
+    """A key directory answered with a redirect: any 3xx status.
+
+    A directory answers 200 itself, because its address is the origin its signer
+    committed to and a redirect would hand key lookup to another one. A VERDICT on what
+    the party serves, like :class:`MediaTypeRefusedError`, and a subclass of
+    :class:`DirectoryUnavailableError` because the directory still could not be read;
+    the message names the read and its status, never the Location. Only a key directory
+    read refuses a redirect outright: a manifest or revocation list read follows up to
+    five, and a hop it will not follow is a plain :class:`DirectoryUnavailableError`, as
+    is a Location the HTTP client cannot parse. Peer of Go ``ErrRedirectRefused`` / TS
+    ``RedirectRefused``.
     """
 
 
diff --git a/sdk/python/fora_sdk/resolvers/offer_key_cache.py b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
index 473c170f..258da326 100644
--- a/sdk/python/fora_sdk/resolvers/offer_key_cache.py
+++ b/sdk/python/fora_sdk/resolvers/offer_key_cache.py
@@ -189,6 +189,7 @@ def create_wba_offer_directory_fetch(
     http: httpx.Client | None = None,
     scheme: str = "",
     port: str = "",
+    now: Callable[[], datetime] | None = None,
 ) -> DirectoryFetch:
     """The default :data:`DirectoryFetch`: GET one exchange's Web Bot Auth directory,
     with no redirect, check its media type and response signatures, and decode the
@@ -210,13 +211,16 @@ def create_wba_offer_directory_fetch(
     :func:`~fora_sdk.resolvers.wba.wba_directory_url`, so it is the exact string the
     tri-language ``wba-url-vectors.json`` corpus pins.
 
+    ``now`` is the clock the directory's response signatures are judged against, read on
+    every fetch; ``None`` is the wall clock. Pass the clock the
+    :class:`CachedOfferKeyResolver` selects keys with, so the two agree.
+
     **Every failure is contained as None and none is raised.** That is
-    :data:`DirectoryFetch`'s contract rather than a preference:
-    :meth:`CachedOfferKeyResolver.prefetch` gathers these calls through
-    ``asyncio.gather`` WITHOUT ``return_exceptions``, so one raised error abandons the
-    whole batch instead of leaving a single exchange unresolved. An unresolvable
-    exchange is simply absent from the map, and the Verifier then rejects that
-    exchange's offers fail-closed.
+    :data:`DirectoryFetch`'s contract rather than a preference: every caller of the seam
+    reads ``None`` as an unresolvable exchange, which is then simply absent from the
+    map, and the Verifier rejects that exchange's offers fail-closed.
+    :meth:`CachedOfferKeyResolver.prefetch` also treats a raised error as absent, but
+    only as a backstop.
 
     The GET runs on a worker thread because the guarded client is synchronous.
     :mod:`fora_sdk.client` records the reason for that shape: an async twin of each
@@ -231,7 +235,8 @@ def create_wba_offer_directory_fetch(
     async def fetch(domain: str) -> WBAFile | None:
         url = wba_directory_url(scheme, _join_host_port(domain, port))
         try:
-            return await asyncio.to_thread(fetch_wba_directory, client, url)
+            at = None if now is None else int(now().timestamp())
+            return await asyncio.to_thread(fetch_wba_directory, client, url, now=at)
         except Exception:
             # EVERY exception, because the seam's contract is absolute: a
             # DirectoryFetch returns None and never raises, so a caller batching
diff --git a/sdk/python/fora_sdk/resolvers/wellknown.py b/sdk/python/fora_sdk/resolvers/wellknown.py
index 018e39bf..a16658b3 100644
--- a/sdk/python/fora_sdk/resolvers/wellknown.py
+++ b/sdk/python/fora_sdk/resolvers/wellknown.py
@@ -177,8 +177,10 @@ def resolve_endpoint(self, host: str) -> str:
         carries a ``ver`` this reader does not accept, or none at all;
         ``NoEndpointError`` when the manifest is reachable but advertises nothing;
         ``EndpointRefusedError`` when it advertises an endpoint the rule will not
-        hand back. The fifth, ``DirectoryUnavailableError``, is a transport failure
-        — unreachable or undecodable — and is the only one worth retrying.
+        hand back. The fifth, ``DirectoryUnavailableError``, is a failed read —
+        unreachable, undecodable, or answered 404 (its subclass
+        ``DocumentNotFoundError``, which still says only what the host answered) —
+        and is the only one worth retrying.
         """
         # Checked BEFORE the allow overlay and before the cache. The fetch URL is
         # built by concatenation, so a value carrying a path or a query would
diff --git a/sdk/python/tests/resolvers_harness.py b/sdk/python/tests/resolvers_harness.py
index b35e2ada..b1d82a45 100644
--- a/sdk/python/tests/resolvers_harness.py
+++ b/sdk/python/tests/resolvers_harness.py
@@ -91,10 +91,18 @@ def register_directory_key(priv: Ed25519PrivateKey) -> None:
         _DIRECTORY_KEYS[x] = priv
 
 
-def signed_directory_headers(authority: str, body: bytes) -> dict[str, str]:
+def signed_directory_headers(
+    authority: str,
+    body: bytes,
+    *,
+    created: int = _DIRECTORY_SIGNATURE_CREATED,
+    expires: int = _DIRECTORY_SIGNATURE_EXPIRES,
+) -> dict[str, str]:
     """The response-signature headers for a directory ``body`` served under
     ``authority``: one signature per listed key a test registered, none when the
-    body lists no registered key or is not a directory at all."""
+    body lists no registered key or is not a directory at all. The window is the wide
+    default unless ``created`` and ``expires`` (unix seconds) give one: a test of the
+    clock a read judges the signatures at signs for a narrow one."""
     try:
         listed = [k.get("x") for k in json.loads(body).get("keys") or []]
     except (ValueError, AttributeError, TypeError):
@@ -104,9 +112,7 @@ def signed_directory_headers(authority: str, body: bytes) -> dict[str, str]:
     if not privs:
         return {}
     seeds = [p.private_bytes_raw() for p in privs]
-    signed = sign_directory_response(
-        authority, body, seeds, _DIRECTORY_SIGNATURE_CREATED, _DIRECTORY_SIGNATURE_EXPIRES
-    )
+    signed = sign_directory_response(authority, body, seeds, created, expires)
     return signed.headers()
 
 
@@ -278,6 +284,8 @@ def manifest_json(
 class _State:
     wba: str | None = None
     wba_status: int = 0
+    # The directory's response-signature window (created, expires); None is the wide one.
+    wba_window: tuple[int, int] | None = None
     rev: str | None = None
     jwks: str | None = None
     jwks_status: int = 0
@@ -356,7 +364,15 @@ def do_GET(self) -> None:
                     self.send_header("content-type", content_type)
                 if path == WBA_DIR_PATH and code == 200:
                     authority = (self.headers.get("Host") or "").lower()
-                    for name, value in signed_directory_headers(authority, body).items():
+                    window = state.wba_window
+                    signed = (
+                        signed_directory_headers(authority, body)
+                        if window is None
+                        else signed_directory_headers(
+                            authority, body, created=window[0], expires=window[1]
+                        )
+                    )
+                    for name, value in signed.items():
                         self.send_header(name, value)
                 self.end_headers()
                 self.wfile.write(body)
@@ -379,6 +395,10 @@ def set_wba(self, body: str) -> None:
     def set_wba_status(self, code: int) -> None:
         self._state.wba_status = code
 
+    def set_wba_signature_window(self, created: int, expires: int) -> None:
+        """Sign the directory's response for ``[created, expires]`` (unix seconds)."""
+        self._state.wba_window = (created, expires)
+
     def set_revocation(self, body: str) -> None:
         self._state.rev = body
 
diff --git a/sdk/python/tests/test_document_fetch_parity.py b/sdk/python/tests/test_document_fetch_parity.py
new file mode 100644
index 00000000..f6b53db2
--- /dev/null
+++ b/sdk/python/tests/test_document_fetch_parity.py
@@ -0,0 +1,79 @@
+"""Document-read parity (Python side) — replay of the shared Go-oracle corpus.
+
+Mirrors the sdk/ts sibling sdk/ts/tests/document-fetch.parity.test.ts and the Go leg
+sdk/go/resolvers/document_fetch_corpus_test.go.
+
+Every document read ends in one decision about the status it was answered with, made in
+the one GET every read shares: a 200 is read, a 404 is a missing document on every read,
+any 3xx is a refused redirect on a key-directory read, and anything else is an
+unavailable document. The corpus records that decision for each status; this replays it
+through ``fetch_document``, with the read refusing redirects for a key directory and
+following them otherwise.
+
+Each failure is also checked for what every vector shares: it is a
+``DirectoryUnavailableError`` and never an ``UnknownKeyError``, and it never carries the
+Location the server chose.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+import httpx
+import pytest
+
+from conftest import GO_RESOLVERS_TESTDATA, load_json
+from fora_sdk.resolvers._http import fetch_document
+from fora_sdk.resolvers.errors import (
+    DirectoryUnavailableError,
+    DocumentNotFoundError,
+    RedirectRefusedError,
+    UnknownKeyError,
+)
+
+_DOC = load_json(GO_RESOLVERS_TESTDATA / "document-fetch-vectors.json")
+_VECTORS: list[dict[str, Any]] = _DOC["vectors"]
+_URL = "https://publisher.example/.well-known/http-message-signatures-directory"
+
+
+def _answering(vector: dict[str, Any]) -> httpx.Client:
+    def respond(request: httpx.Request) -> httpx.Response:  # noqa: ARG001
+        headers = {"location": vector["location"]} if vector["location"] else {}
+        return httpx.Response(vector["status"], headers=headers)
+
+    return httpx.Client(transport=httpx.MockTransport(respond))
+
+
+def _read(vector: dict[str, Any]) -> DirectoryUnavailableError | None:
+    assert vector["read"] in {"key_directory", "document"}, vector["read"]
+    with _answering(vector) as client:
+        try:
+            fetch_document(client, _URL, follow_redirects=vector["read"] == "document")
+        except DirectoryUnavailableError as exc:
+            return exc
+    return None
+
+
+@pytest.mark.parametrize("vector", _VECTORS, ids=[v["name"] for v in _VECTORS])
+def test_document_fetch_vector(vector: dict[str, Any]) -> None:
+    failure = _read(vector)
+    if vector["verdict"] == "ok":
+        assert failure is None, f"the read failed for a vector recorded as ok: {failure!r}"
+        return
+    assert failure is not None, "the read succeeded for a vector recorded as a failure"
+    assert not isinstance(failure, UnknownKeyError)
+    # Specific before generic: both subclasses are DirectoryUnavailableError too.
+    if isinstance(failure, RedirectRefusedError):
+        got = "redirect_refused"
+    elif isinstance(failure, DocumentNotFoundError):
+        got = "not_found"
+    else:
+        got = "unavailable"
+    assert got == vector["verdict"], f"{failure!r}"
+    if vector["location"]:
+        assert vector["location"] not in str(failure), "the failure carries the Location"
+
+
+def test_the_corpus_has_a_control_for_each_read() -> None:
+    reads = {v["read"] for v in _VECTORS if v["verdict"] == "ok"}
+    assert reads == {"key_directory", "document"}, reads
diff --git a/sdk/python/tests/test_document_readers.py b/sdk/python/tests/test_document_readers.py
index b1c9cfe5..820335bf 100644
--- a/sdk/python/tests/test_document_readers.py
+++ b/sdk/python/tests/test_document_readers.py
@@ -42,8 +42,10 @@
     DigestMismatchError,
     DirectoryResponseUnsignedError,
     DirectoryUnavailableError,
+    DocumentNotFoundError,
     ManifestVersionRefusedError,
     MediaTypeRefusedError,
+    RedirectRefusedError,
     read_license_document,
     read_manifest,
     read_revocation_list,
@@ -142,10 +144,18 @@ def test_read_manifest_reads_the_version_before_anything_else(origin: Origin) ->
         read_manifest(origin.host, scheme="http")
 
 
-def test_read_manifest_reports_a_missing_document_as_unavailable(origin: Origin) -> None:
+def test_read_manifest_reports_a_missing_document_as_not_found(origin: Origin) -> None:
+    # A 404 is an unavailable document that says which, so a caller can tell an absent
+    # manifest from an unreachable host; a 503 is unavailable and nothing more.
     origin.set_manifest_status(404)
-    with pytest.raises(DirectoryUnavailableError):
+    with pytest.raises(DocumentNotFoundError) as caught:
+        read_manifest(origin.host, scheme="http")
+    assert isinstance(caught.value, DirectoryUnavailableError)
+    assert not isinstance(caught.value, RedirectRefusedError)
+    origin.set_manifest_status(503)
+    with pytest.raises(DirectoryUnavailableError) as caught:
         read_manifest(origin.host, scheme="http")
+    assert not isinstance(caught.value, DocumentNotFoundError)
 
 
 def test_read_manifest_refuses_a_value_that_is_not_a_bare_host(origin: Origin) -> None:
@@ -223,13 +233,38 @@ def test_read_wba_directory_refuses_a_key_that_did_not_sign_the_response(
 
 def test_read_wba_directory_refuses_a_redirect(origin: Origin, other: Origin) -> None:
     # The directory's address is the origin its signer committed to: a redirect would
-    # hand key lookup to another one, so the reader never follows it.
+    # hand key lookup to another one, so the reader never follows it. The refusal names
+    # the read and its status, never the Location.
     other.set_wba(wba_file_json([active_jwk(make_key().x)]))
+    assert read_wba_directory(other.url + WBA_DIR_PATH).url == other.url + WBA_DIR_PATH
     origin.set_redirect(WBA_DIR_PATH, other.url + WBA_DIR_PATH)
-    with pytest.raises(DirectoryUnavailableError):
+    with pytest.raises(RedirectRefusedError) as caught:
+        read_wba_directory(origin.host, scheme="http")
+    assert isinstance(caught.value, DirectoryUnavailableError)
+    assert not isinstance(caught.value, DocumentNotFoundError)
+    assert other.host not in str(caught.value)
+
+
+@pytest.mark.parametrize("status", [300, 302, 304])
+def test_read_wba_directory_refuses_any_3xx(origin: Origin, status: int) -> None:
+    # Whether or not the HTTP client would follow it: a 300, a 304, or a 302 that names
+    # no Location is a redirect answer all the same.
+    origin.set_wba_status(status)
+    with pytest.raises(RedirectRefusedError, match=f"status {status}"):
         read_wba_directory(origin.host, scheme="http")
 
 
+def test_read_wba_directory_a_location_httpx_cannot_parse(origin: Origin) -> None:
+    # httpx parses the Location even with redirects off, and rejects one it cannot read
+    # before the read sees the status: the read reports an unavailable directory, not a
+    # refused redirect. Nothing is fetched from it either way. The TypeScript read sees
+    # the status first and reports a refused redirect.
+    origin.set_redirect(WBA_DIR_PATH, "http://[::1")
+    with pytest.raises(DirectoryUnavailableError) as caught:
+        read_wba_directory(origin.host, scheme="http")
+    assert not isinstance(caught.value, RedirectRefusedError)
+
+
 def test_read_wba_directory_refuses_a_key_carrying_a_kid(origin: Origin) -> None:
     jwk = active_jwk(make_key().x)
     jwk["kid"] = "k1"  # the directory identifies keys by thumbprint, never by kid
@@ -239,9 +274,23 @@ def test_read_wba_directory_refuses_a_key_carrying_a_kid(origin: Origin) -> None
         read_wba_directory(origin.host, scheme="http")
 
 
+def test_read_wba_directory_judges_response_signatures_at_now(origin: Origin) -> None:
+    # The reader judges the response signatures at ``now`` (unix seconds), and at the
+    # wall clock by default.
+    created = 1_000_000_000
+    key = make_key()
+    origin.set_wba(wba_file_json([active_jwk(key.x)]))
+    origin.set_wba_signature_window(created, created + 60)
+    doc = read_wba_directory(origin.host, scheme="http", now=created + 30)
+    assert [k.x for k in doc.message.keys or []] == [key.x]
+    with pytest.raises(DirectoryResponseUnsignedError):
+        read_wba_directory(origin.host, scheme="http")
+
+
 def test_read_wba_directory_reports_an_unpublished_directory(origin: Origin) -> None:
-    with pytest.raises(DirectoryUnavailableError):
+    with pytest.raises(DocumentNotFoundError) as caught:
         read_wba_directory(origin.host, scheme="http")
+    assert isinstance(caught.value, DirectoryUnavailableError)
 
 
 # --- revocation list --------------------------------------------------------------------
@@ -265,6 +314,20 @@ def test_read_revocation_list_follows_a_redirect(origin: Origin, other: Origin)
     assert read_revocation_list(origin.revocation_url()).message.revoked == [tp]
 
 
+def test_read_revocation_list_reports_a_redirect_to_a_missing_list_as_not_found(
+    origin: Origin, other: Origin
+) -> None:
+    # A followed redirect that ends at a 404 is a missing document, never a refused
+    # redirect: only a key directory refuses one outright.
+    other.set_revocation(revocation_json(ANCHOR, []))
+    origin.set_redirect(REVOCATION_PATH, other.revocation_url())
+    assert read_revocation_list(origin.revocation_url()).message.revoked == []
+    origin.set_redirect(REVOCATION_PATH, other.url + "/missing.json")
+    with pytest.raises(DocumentNotFoundError) as caught:
+        read_revocation_list(origin.revocation_url())
+    assert not isinstance(caught.value, RedirectRefusedError)
+
+
 def test_read_revocation_list_refuses_an_unknown_member(origin: Origin) -> None:
     origin.set_revocation(json.dumps({"as_of": rfc3339(ANCHOR), "revoked": [], "next": "x"}))
     with pytest.raises(StrictViolationError, match="next"):
diff --git a/sdk/python/tests/test_endpoint_refused_public_home.py b/sdk/python/tests/test_endpoint_refused_public_home.py
index 84d82d07..82a59774 100644
--- a/sdk/python/tests/test_endpoint_refused_public_home.py
+++ b/sdk/python/tests/test_endpoint_refused_public_home.py
@@ -29,6 +29,8 @@ def test_it_sits_beside_its_siblings() -> None:
         "NoEndpointError",
         "ManifestVersionRefusedError",
         "DirectoryUnavailableError",
+        "DocumentNotFoundError",
+        "RedirectRefusedError",
         "UnknownKeyError",
         "KeyRevokedError",
         "KeyExpiredError",
diff --git a/sdk/python/tests/test_parity_corpora_nonempty.py b/sdk/python/tests/test_parity_corpora_nonempty.py
index b57753f4..3103120a 100644
--- a/sdk/python/tests/test_parity_corpora_nonempty.py
+++ b/sdk/python/tests/test_parity_corpora_nonempty.py
@@ -141,6 +141,11 @@ def _whole(doc: Any) -> Any:
         _vectors,
         "content-fetch",
     ),
+    (
+        GO_RESOLVERS_TESTDATA / "document-fetch-vectors.json",
+        _vectors,
+        "document-fetch",
+    ),
     (CONFORMANCE_CORPUS / "crossfield.json", _whole, "crossfield"),
     (GO_TESTDATA / "licenseterm-vectors.json", lambda d: d["fold"], "licenseterm-fold"),
     (GO_TESTDATA / "licenseterm-vectors.json", lambda d: d["normalize"], "licenseterm-normalize"),
diff --git a/sdk/python/tests/test_resolvers_read_failures.py b/sdk/python/tests/test_resolvers_read_failures.py
new file mode 100644
index 00000000..803adafa
--- /dev/null
+++ b/sdk/python/tests/test_resolvers_read_failures.py
@@ -0,0 +1,39 @@
+"""A 404 and a refused redirect are unavailable documents that say which.
+
+``DocumentNotFoundError`` and ``RedirectRefusedError`` subclass
+``DirectoryUnavailableError``, so every caller that handles an unavailable document
+handles them too, and neither is an ``UnknownKeyError``: a fail-closed composite halts
+on them rather than falling through as if the key were merely unknown. Peers of Go
+``ErrDocumentNotFound`` / ``ErrRedirectRefused`` and TS ``DocumentNotFound`` /
+``RedirectRefused``.
+"""
+
+from __future__ import annotations
+
+import fora_sdk
+from fora_sdk import resolvers
+from fora_sdk.resolvers.errors import (
+    DirectoryUnavailableError,
+    DocumentNotFoundError,
+    RedirectRefusedError,
+    UnknownKeyError,
+)
+
+
+def test_each_is_an_unavailable_document_and_never_an_unknown_key() -> None:
+    for cls in (DocumentNotFoundError, RedirectRefusedError):
+        assert issubclass(cls, DirectoryUnavailableError)
+        assert not issubclass(cls, UnknownKeyError)
+    assert not issubclass(DocumentNotFoundError, RedirectRefusedError)
+    assert not issubclass(RedirectRefusedError, DocumentNotFoundError)
+
+
+def test_both_are_exported_where_their_siblings_are() -> None:
+    for name, cls in (
+        ("DocumentNotFoundError", DocumentNotFoundError),
+        ("RedirectRefusedError", RedirectRefusedError),
+    ):
+        assert name in resolvers.__all__
+        assert getattr(resolvers, name) is cls
+        assert name in fora_sdk.__all__
+        assert getattr(fora_sdk, name) is cls
diff --git a/sdk/python/tests/test_resolvers_wba_integration.py b/sdk/python/tests/test_resolvers_wba_integration.py
index b44fa807..a5ce1bff 100644
--- a/sdk/python/tests/test_resolvers_wba_integration.py
+++ b/sdk/python/tests/test_resolvers_wba_integration.py
@@ -41,6 +41,7 @@
 # RED: the WBA face and its typed sentinels do not exist yet (TDD red).
 from fora_sdk.resolvers import (  # type: ignore[import-not-found]
     DirectoryUnavailableError,
+    DocumentNotFoundError,
     KeyExpiredError,
     KeyRevokedError,
     UnknownKeyError,
@@ -235,17 +236,22 @@ def test_wba_ttl_cache_hit() -> None:
         origin.close()
 
 
-def test_wba_fetch_error_directory_unavailable_distinct_from_unknown() -> None:
+@pytest.mark.parametrize(("status", "not_found"), [(500, False), (404, True)])
+def test_wba_fetch_error_directory_unavailable_distinct_from_unknown(
+    status: int, not_found: bool
+) -> None:
     # A fetch/500 failure raises DirectoryUnavailableError, which MUST be a
     # distinct class from UnknownKeyError so a composite fails closed rather than
-    # falling through.
+    # falling through. A 404 is the same failure, and also DocumentNotFoundError, so a
+    # caller can tell a directory that is not there from one that is down.
     origin = Origin(tls=True)
-    origin.set_wba_status(500)
+    origin.set_wba_status(status)
     try:
         r = WBAKeyResolver(http=loopback_client(), now=MutableClock(ANCHOR))
         with pytest.raises(DirectoryUnavailableError) as exc:
             r.resolve("any-thumbprint", origin.origin)
         assert not isinstance(exc.value, UnknownKeyError)
+        assert isinstance(exc.value, DocumentNotFoundError) is not_found
     finally:
         origin.close()
 
diff --git a/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py b/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py
index 25de67a5..645e370a 100644
--- a/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py
+++ b/sdk/python/tests/test_resolvers_wba_offer_directory_fetch.py
@@ -20,6 +20,7 @@
 from __future__ import annotations
 
 import asyncio
+from datetime import UTC, datetime
 from typing import TYPE_CHECKING, Any
 
 import pytest
@@ -28,6 +29,7 @@
     ANCHOR,
     HOUR,
     WBA_DIR_PATH,
+    MutableClock,
     Origin,
     loopback_client,
     make_key,
@@ -36,11 +38,13 @@
 )
 
 from fora_sdk.b64 import b64url_nopad
-from fora_sdk.resolvers import create_wba_offer_directory_fetch
+from fora_sdk.resolvers import CachedOfferKeyResolver, create_wba_offer_directory_fetch
 
 if TYPE_CHECKING:
     from collections.abc import Callable, Iterator
 
+    from resolvers_harness import TestKey
+
 
 @pytest.fixture
 def origin() -> Iterator[Origin]:
@@ -237,3 +241,61 @@ def test_an_injected_client_that_raises_is_contained_as_none() -> None:
 
     fetch = create_wba_offer_directory_fetch(http=closed, scheme="http")
     assert asyncio.run(fetch("127.0.0.1:1")) is None
+
+
+# A response-signature window long before the wall clock, and an instant inside it.
+_CREATED = 1_000_000_000
+_EXPIRES = _CREATED + 60
+_IN_WINDOW = datetime.fromtimestamp(_CREATED + 30, tz=UTC)
+
+
+def _serve_directory_signed_for_a_window(o: Origin) -> TestKey:
+    """Publish one key, valid around ``_IN_WINDOW``, whose response signature is good
+    only inside ``[_CREATED, _EXPIRES]``."""
+    key = make_key()
+    o.set_wba(wba_file_json([wba_jwk(key.x, _IN_WINDOW - HOUR, _IN_WINDOW + HOUR)]))
+    o.set_wba_signature_window(_CREATED, _EXPIRES)
+    return key
+
+
+def _keys(wba: Any) -> list[str]:
+    return [k.x for k in wba.keys or []]
+
+
+def test_judges_response_signatures_at_its_clock_on_every_fetch(origin: Origin) -> None:
+    """The fetch judges the directory's response signatures at ``now``, read on every
+    fetch; the default, the wall clock, is long past the window."""
+    key = _serve_directory_signed_for_a_window(origin)
+    assert _keys(_run(origin)) == []
+    clock = MutableClock(_IN_WINDOW)
+    fetch = create_wba_offer_directory_fetch(http=loopback_client(), scheme="http", now=clock)
+    assert _keys(asyncio.run(fetch(origin.host))) == [key.x]
+    clock.t = datetime.fromtimestamp(_EXPIRES + 1, tz=UTC)
+    assert _keys(asyncio.run(fetch(origin.host))) == []
+
+
+def test_one_clock_serves_the_cache_and_its_fetch(origin: Origin) -> None:
+    """The cache that selects keys and the fetch that checks the directory agree when
+    they share a clock; a fetch on the wall clock leaves the cache nothing to select."""
+    key = _serve_directory_signed_for_a_window(origin)
+    clock = MutableClock(_IN_WINDOW)
+    shared = CachedOfferKeyResolver(
+        fetch=create_wba_offer_directory_fetch(http=loopback_client(), scheme="http", now=clock),
+        now=clock,
+    )
+    assert asyncio.run(shared.prefetch([origin.host])) == {origin.host: key.raw_pub}
+    split = CachedOfferKeyResolver(
+        fetch=create_wba_offer_directory_fetch(http=loopback_client(), scheme="http"),
+        now=clock,
+    )
+    assert asyncio.run(split.prefetch([origin.host])) == {}
+
+
+def test_a_clock_that_raises_is_contained_as_none(origin: Origin) -> None:
+    """The seam contains every failure as None, the clock's own included."""
+    _serve_directory(origin)
+
+    def broken() -> datetime:
+        raise RuntimeError("no clock")
+
+    assert _run(origin, now=broken) is None
diff --git a/sdk/python/tests/test_resolvers_wba_profile.py b/sdk/python/tests/test_resolvers_wba_profile.py
index 11799940..6c53158b 100644
--- a/sdk/python/tests/test_resolvers_wba_profile.py
+++ b/sdk/python/tests/test_resolvers_wba_profile.py
@@ -32,6 +32,7 @@
 from fora_sdk.resolvers import (
     DirectoryUnavailableError,
     KeyExpiredError,
+    RedirectRefusedError,
     UnknownKeyError,
     WBAKeyResolver,
 )
@@ -130,8 +131,9 @@ def test_a_directory_reached_through_a_redirect_is_unavailable(
     _, x, tp = _key(signs=True)
     other.set_wba(wba_file_json([active_jwk(x)]))
     origin.set_redirect(WBA_DIR_PATH, other.url + WBA_DIR_PATH)
-    with pytest.raises(DirectoryUnavailableError):
+    with pytest.raises(RedirectRefusedError) as caught:
         _resolver().resolve(tp, origin.origin)
+    assert isinstance(caught.value, DirectoryUnavailableError)
 
 
 def test_each_signature_resolves_in_its_own_directory(origin: Origin, other: Origin) -> None:
diff --git a/sdk/ts/README.md b/sdk/ts/README.md
index 55b13838..3636dc12 100644
--- a/sdk/ts/README.md
+++ b/sdk/ts/README.md
@@ -86,7 +86,11 @@ URL, bytes and media type; the license reader also verifies the bytes against
 `uri_digest` (`DigestMismatch`). A key directory is fetched with no redirect, must be
 served as `application/http-message-signatures-directory+json`, and must carry a response
 signature by every key it lists (`DirectoryResponseUnsigned`); the WBA key resolver hands
-out only the keys that signed. `checkStrict(message, payload)` from
+out only the keys that signed. A failed read throws `DirectoryUnavailable`, and two say
+which: `DocumentNotFound` for a 404 and `RedirectRefused` for a key directory that answers
+with any 3xx, both subclasses of it. `readWBADirectory` and `createWBAOfferDirectoryFetch`
+take `now`, the clock in epoch milliseconds a directory's response signatures are judged
+at; give the offer fetch the offer-key cache's own. `checkStrict(message, payload)` from
 `@fora-protocol/sdk/client` applies the same check to any decoded message. The strict
 schema of every message the SDK reads is compiled when the SDK is built, so the check
 generates no code at run time and works where `eval` is refused, as on Cloudflare
diff --git a/sdk/ts/resolvers/documents.ts b/sdk/ts/resolvers/documents.ts
index 69f40a57..0c555b55 100644
--- a/sdk/ts/resolvers/documents.ts
+++ b/sdk/ts/resolvers/documents.ts
@@ -131,6 +131,9 @@ export interface ReadDocumentOptions {
 	/** The Ed25519 verify primitive readWBADirectory checks the directory's response
 	 * signatures with, for a runtime without WebCrypto Ed25519. Defaults to WebCrypto. */
 	verifyEd25519?: Ed25519Verify;
+	/** The clock, in epoch milliseconds, readWBADirectory judges the directory's response
+	 * signatures at. Defaults to Date.now. Only readWBADirectory reads it. */
+	now?: () => number;
 }
 
 /** How the resolvers' lenient directory read checks a response. */
@@ -174,7 +177,8 @@ export async function fetchManifest(
  * response (signedDirectoryKeys), so no caller can hand out a key the directory did not
  * sign for. `opts` carries the clock the response signatures' windows are judged against
  * and the Ed25519 primitive they are checked with. The one read of a directory the WBA key resolver and the offer-directory
- * fetch share, so the two never drift. Every failure throws DirectoryUnavailable. */
+ * fetch share, so the two never drift. Every failure throws DirectoryUnavailable: a 404
+ * as its subclass DocumentNotFound, and any 3xx as its subclass RedirectRefused. */
 export async function fetchWBAFile(
 	fetchFn: FetchLike,
 	url: string,
@@ -383,8 +387,9 @@ function constantTimeEqual(a: string, b: string): boolean {
  * WellKnownManifest schema and the cross-field rules.
  *
  * Throws an Error when `domain` is not a bare host (a port is allowed), before anything
- * is dialled; DirectoryUnavailable when the fetch fails or the body is not JSON;
- * MediaTypeRefused; ManifestVersionRefused; and StrictViolation.
+ * is dialled; DirectoryUnavailable when the fetch fails or the body is not JSON (its
+ * subclass DocumentNotFound for a 404); MediaTypeRefused; ManifestVersionRefused; and
+ * StrictViolation.
  */
 export async function readManifest(
 	domain: string,
@@ -404,11 +409,16 @@ export async function readManifest(
  * must be application/http-message-signatures-directory+json, the body must pass the
  * strict WBAFile schema and the cross-field rules, and the response must carry a valid
  * response signature by every key it lists, checked through `opts.verifyEd25519` when one
- * is given. Key validity windows and revocation are not
- * evaluated: that is the WBA key resolver's job, and a directory listing an expired key
- * is still a well-formed directory. Throws an Error for a value that is neither a URL nor
- * a bare host; DirectoryUnavailable; MediaTypeRefused; StrictViolation; and
- * DirectoryResponseUnsigned.
+ * is given and judged at `opts.now`, or the wall clock. Key validity windows and
+ * revocation are not evaluated: that is the WBA key resolver's job, and a directory
+ * listing an expired key is still a well-formed directory. Throws an Error for a value
+ * that is neither a URL nor a bare host; DirectoryUnavailable (its subclasses
+ * DocumentNotFound for a 404 and RedirectRefused for any 3xx); MediaTypeRefused;
+ * StrictViolation; and DirectoryResponseUnsigned.
+ *
+ * It checks what a party publishes, so every listed key must have signed. A verifier
+ * reads a directory through createWBAKeyResolver or createWBAOfferDirectoryFetch instead,
+ * which use only the keys whose response signature verifies, as WBAFile.keys requires.
  */
 export async function readWBADirectory(
 	urlOrDomain: string,
@@ -421,9 +431,10 @@ export async function readWBADirectory(
 	}
 	const fetched = await fetchDocument(opts.fetch, url, { noRedirect: true });
 	const doc = accept(WBA_DIRECTORY, fetched);
+	const at = opts.now?.() ?? Date.now();
 	let signed: WBAFile;
 	try {
-		signed = await signedDirectoryKeys(fetched, doc.message, Date.now(), opts.verifyEd25519);
+		signed = await signedDirectoryKeys(fetched, doc.message, at, opts.verifyEd25519);
 	} catch (err) {
 		throw new DirectoryResponseUnsigned(`${url}: ${(err as Error).message}`, { cause: err });
 	}
@@ -442,7 +453,7 @@ export async function readWBADirectory(
  * reported and not checked. The body must pass the strict KeyRevocationList schema and
  * the cross-field rules. Whether `url` is anchored to the directory's host is the caller's
  * question: the WBA key resolver skips a list that is not. Throws DirectoryUnavailable
- * and StrictViolation.
+ * (its subclass DocumentNotFound for a 404) and StrictViolation.
  */
 export async function readRevocationList(
 	url: string,
@@ -464,8 +475,8 @@ export async function readRevocationList(
  * scheme guard and reported as DirectoryUnavailable: it names a document, not a place to
  * fetch one.
  *
- * Throws an Error when the license carries no uri; StrictViolation; DirectoryUnavailable;
- * and DigestMismatch.
+ * Throws an Error when the license carries no uri; StrictViolation; DirectoryUnavailable
+ * (its subclass DocumentNotFound for a 404); and DigestMismatch.
  */
 export async function readLicenseDocument(
 	license: License,
diff --git a/sdk/ts/resolvers/edge.ts b/sdk/ts/resolvers/edge.ts
index cec33f3f..fb4ddf71 100644
--- a/sdk/ts/resolvers/edge.ts
+++ b/sdk/ts/resolvers/edge.ts
@@ -40,6 +40,7 @@ export {
 	DigestMismatch,
 	DirectoryResponseUnsigned,
 	DirectoryUnavailable,
+	DocumentNotFound,
 	EndpointRefused,
 	ExchangeNotPermitted,
 	KeyExpired,
@@ -49,6 +50,7 @@ export {
 	ManifestVersionRefused,
 	MediaTypeRefused,
 	NoEndpoint,
+	RedirectRefused,
 	ResolverError,
 	RevocationUnevaluated,
 	UnknownKey,
diff --git a/sdk/ts/resolvers/errors.ts b/sdk/ts/resolvers/errors.ts
index f5735e51..ac489f25 100644
--- a/sdk/ts/resolvers/errors.ts
+++ b/sdk/ts/resolvers/errors.ts
@@ -26,7 +26,9 @@ export class UnknownKey extends ResolverError {
 /** A document could not be fetched, returned non-200, or failed to decode: the
  * WBA identity directory, a well-known JWKS or manifest, a revocation list, or a
  * license document. DISTINCT from unknown-key so a
- * fail-closed composite halts on an outage instead of falling through. */
+ * fail-closed composite halts on an outage instead of falling through. Two of its
+ * failures say which: DocumentNotFound and RedirectRefused extend it, so
+ * `instanceof DirectoryUnavailable` still matches both. */
 export class DirectoryUnavailable extends ResolverError {
   constructor(message: string, options?: { cause?: unknown }) {
     super(message, options);
@@ -34,6 +36,36 @@ export class DirectoryUnavailable extends ResolverError {
   }
 }
 
+/** The server answered a document read with 404 Not Found: it serves no document at
+ * that address. Every document read throws it: the key directory, the manifest, the
+ * revocation list and the license document alike. Extends DirectoryUnavailable, so a
+ * caller that handles an unavailable document handles this too. It states what the
+ * server answered and no more: a document a party has yet to publish answers the same
+ * way, so whether the absence is final is the caller's decision. Peer of Go
+ * `ErrDocumentNotFound` / Python `DocumentNotFoundError`. */
+export class DocumentNotFound extends DirectoryUnavailable {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options);
+    this.name = "DocumentNotFound";
+  }
+}
+
+/** A key directory answered with a redirect: any 3xx status, or a response the
+ * transport marks `redirected`. A directory answers 200 itself, because its address
+ * is the origin its signer committed to and a redirect would hand key lookup to
+ * another one. A VERDICT on what the party serves, like MediaTypeRefused, and it
+ * extends DirectoryUnavailable because the directory still could not be read; the
+ * message names the read, never the Location. Only a key directory read refuses a
+ * redirect outright: a manifest or revocation list read follows up to five, and a hop
+ * it will not follow is a plain DirectoryUnavailable. Peer of Go `ErrRedirectRefused`
+ * / Python `RedirectRefusedError`. */
+export class RedirectRefused extends DirectoryUnavailable {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options);
+    this.name = "RedirectRefused";
+  }
+}
+
 /** The thumbprint is present in the directory host's current revocation snapshot. */
 export class KeyRevoked extends ResolverError {
   constructor(message: string, options?: { cause?: unknown }) {
diff --git a/sdk/ts/resolvers/fetch.ts b/sdk/ts/resolvers/fetch.ts
index 87a20c29..2c50f3a6 100644
--- a/sdk/ts/resolvers/fetch.ts
+++ b/sdk/ts/resolvers/fetch.ts
@@ -15,7 +15,7 @@
 // deadline is a timer the read races, and a signal reaches the transport only where the
 // runtime can make one.
 
-import { DirectoryUnavailable } from "./errors.ts";
+import { DirectoryUnavailable, DocumentNotFound, RedirectRefused } from "./errors.ts";
 import { allowedScheme, MAX_REDIRECTS, redirectChainRefused } from "./ssrf.ts";
 
 /** The most bytes one document read accepts. A body past it is refused, never truncated:
@@ -114,12 +114,13 @@ const REDIRECT_STATUSES: ReadonlySet<number> = new Set([301, 302, 303, 307, 308]
 
 /** GET `url` and return the body, its media type and its headers. A transport failure
  * or a non-200 status throws DirectoryUnavailable (fail-closed halt) — the taxonomy a
- * composite relies on to distinguish an outage from an unknown key. A blocked SSRF
- * target and a body past the cap are transport failures and surface the same way
- * (never a valid empty doc). So does any other failure of the read, its setup included:
- * every error is a DirectoryUnavailable whose cause is the error that ended the read. The
- * one GET every document read shares, and the place its bounds are enforced, whatever
- * transport `fetchFn` is:
+ * composite relies on to distinguish an outage from an unknown key — and a 404 throws its
+ * subclass DocumentNotFound, so a caller can tell an absent document from an
+ * unreachable one. A blocked SSRF target and a body past the cap are transport failures
+ * and surface the same way (never a valid empty doc). So does any other failure of the
+ * read, its setup included: every error is a DirectoryUnavailable whose cause is the
+ * error that ended the read. The one GET every document read shares, and the place its
+ * bounds are enforced, whatever transport `fetchFn` is:
  *
  *  - the body is read up to MAX_DOC_BYTES and refused past it, never truncated;
  *  - the whole read, every hop and the body included, ends at DOCUMENT_READ_TIMEOUT_MS,
@@ -131,10 +132,12 @@ const REDIRECT_STATUSES: ReadonlySet<number> = new Set([301, 302, 303, 307, 308]
  *    carries credentials;
  *  - `noRedirect` is set for a key directory, which is never fetched through a redirect:
  *    its address is the origin its signer committed to, and a redirect would hand key
- *    lookup to another one, so any 3xx fails the read.
+ *    lookup to another one, so any 3xx fails the read as RedirectRefused, a subclass of
+ *    DirectoryUnavailable that names the read and never the Location.
  *
- * A response the transport marks `redirected` is refused either way: the read asked it
- * not to follow, so the hops it took were never vetted here. */
+ * A response the transport marks `redirected` is refused either way, as RedirectRefused on
+ * a key-directory read: the read asked it not to follow, so the hops it took were never
+ * vetted here. */
 export async function fetchDocument(
 	fetchFn: FetchLike,
 	url: string,
@@ -151,11 +154,10 @@ export async function fetchDocument(
 			const isRedirect = resp.status >= 300 && resp.status < 400;
 			if (resp.redirected === true || (isRedirect && opts.noRedirect === true)) {
 				discardBody(resp);
-				throw new DirectoryUnavailable(
-					opts.noRedirect === true
-						? `a key directory is never fetched through a redirect: ${url}`
-						: `the transport followed a redirect it was asked not to: ${url}`,
-				);
+				if (opts.noRedirect === true) {
+					throw new RedirectRefused(`a key directory is never fetched through a redirect: ${url}`);
+				}
+				throw new DirectoryUnavailable(`the transport followed a redirect it was asked not to: ${url}`);
 			}
 			if (isRedirect && REDIRECT_STATUSES.has(resp.status)) {
 				discardBody(resp);
@@ -169,6 +171,7 @@ export async function fetchDocument(
 			}
 			if (resp.status !== 200) {
 				discardBody(resp);
+				if (resp.status === 404) throw new DocumentNotFound(`status ${resp.status} for ${url}`);
 				throw new DirectoryUnavailable(`status ${resp.status} for ${url}`);
 			}
 			const body = await deadline.before(readCapped(resp, url, deadline.onExpiry));
diff --git a/sdk/ts/resolvers/offer-key-cache.ts b/sdk/ts/resolvers/offer-key-cache.ts
index c1a31ffb..2c566de5 100644
--- a/sdk/ts/resolvers/offer-key-cache.ts
+++ b/sdk/ts/resolvers/offer-key-cache.ts
@@ -238,6 +238,10 @@ export interface WBAOfferDirectoryFetchOptions {
 	/** The Ed25519 verify primitive the directory's response signatures are checked with,
 	 * for a runtime without WebCrypto Ed25519. Defaults to WebCrypto. */
 	verifyEd25519?: Ed25519Verify;
+	/** The clock, in epoch milliseconds, the directory's response signatures are judged
+	 * against, read on every fetch. Defaults to Date.now. Pass the clock the offer-key
+	 * cache selects keys with (CachedOfferKeyResolverOptions.now), so the two agree. */
+	now?: () => number;
 }
 
 /**
@@ -262,6 +266,7 @@ export function createWBAOfferDirectoryFetch(opts: WBAOfferDirectoryFetchOptions
 	return async (domain: string) => {
 		try {
 			return await fetchWBAFile(fetchFn, wbaDirectoryURL(scheme, joinDirectoryHost(domain, port)), {
+				now: opts.now?.(),
 				verifyEd25519: opts.verifyEd25519,
 			});
 		} catch {
diff --git a/sdk/ts/tests/directory-read-clock.test.ts b/sdk/ts/tests/directory-read-clock.test.ts
new file mode 100644
index 00000000..80ada430
--- /dev/null
+++ b/sdk/ts/tests/directory-read-clock.test.ts
@@ -0,0 +1,73 @@
+// The directory reads judge a directory's response signatures at a clock.
+//
+// readWBADirectory takes it as `now`, and so does createWBAOfferDirectoryFetch, which
+// reads it on every fetch, so the offer-key cache that selects keys and the fetch that
+// checks the directory can run on one clock. Each case serves a directory whose response
+// signature is good only inside a narrow window long before the wall clock.
+import { describe, expect, it } from "vitest";
+import {
+	createCachedOfferKeyResolver,
+	createWBAOfferDirectoryFetch,
+	DirectoryResponseUnsigned,
+	type FetchLike,
+	readWBADirectory,
+} from "../resolvers/edge.ts";
+import { HOUR_MS, iso, makeKey, signedDirectoryHeaders, type TestKey, wbaFileJson, wbaJwk } from "./resolvers-harness.ts";
+
+const AUTHORITY = "pub.example";
+const DIRECTORY_URL = `https://${AUTHORITY}/.well-known/http-message-signatures-directory`;
+const CREATED = 1_000_000_000; // unix seconds
+const EXPIRES = CREATED + 60;
+const IN_WINDOW_MS = (CREATED + 30) * 1000;
+
+// serve answers the directory URL with one key, valid around IN_WINDOW_MS, whose response
+// signature is good only inside [CREATED, EXPIRES].
+async function serve(): Promise<{ key: TestKey; fetch: FetchLike }> {
+	const key = await makeKey();
+	const body = wbaFileJson([wbaJwk(key.x, iso(IN_WINDOW_MS - HOUR_MS), iso(IN_WINDOW_MS + HOUR_MS))]);
+	const headers = await signedDirectoryHeaders(AUTHORITY, body, undefined, { created: CREATED, expires: EXPIRES });
+	const fetch: FetchLike = async (url) =>
+		url === DIRECTORY_URL ? new Response(body, { headers }) : new Response("", { status: 404 });
+	return { key, fetch };
+}
+
+describe("readWBADirectory", () => {
+	it("judges the response signatures at `now`, and at the wall clock by default", async () => {
+		const { key, fetch } = await serve();
+		const doc = await readWBADirectory(AUTHORITY, { fetch, now: () => IN_WINDOW_MS });
+		expect(doc.message.keys?.map((k) => k.x)).toEqual([key.x]);
+		await expect(readWBADirectory(AUTHORITY, { fetch })).rejects.toBeInstanceOf(DirectoryResponseUnsigned);
+	});
+});
+
+describe("createWBAOfferDirectoryFetch", () => {
+	it("judges the response signatures at `now`, read on every fetch", async () => {
+		const { key, fetch } = await serve();
+		expect((await createWBAOfferDirectoryFetch({ fetch })(AUTHORITY))?.keys ?? []).toHaveLength(0);
+		let now = IN_WINDOW_MS;
+		const read = createWBAOfferDirectoryFetch({ fetch, now: () => now });
+		expect((await read(AUTHORITY))?.keys?.map((k) => k.x)).toEqual([key.x]);
+		now = (EXPIRES + 1) * 1000;
+		expect((await read(AUTHORITY))?.keys ?? []).toHaveLength(0);
+	});
+
+	it("shares one clock with the offer-key cache", async () => {
+		const { key, fetch } = await serve();
+		const now = (): number => IN_WINDOW_MS;
+		const shared = createCachedOfferKeyResolver({ fetch: createWBAOfferDirectoryFetch({ fetch, now }), now });
+		expect(await shared.resolve(AUTHORITY)).toEqual(key.rawPub);
+		const split = createCachedOfferKeyResolver({ fetch: createWBAOfferDirectoryFetch({ fetch }), now });
+		expect(await split.resolve(AUTHORITY)).toBeUndefined();
+	});
+
+	it("contains a clock that throws as undefined", async () => {
+		const { fetch } = await serve();
+		const read = createWBAOfferDirectoryFetch({
+			fetch,
+			now: () => {
+				throw new Error("no clock");
+			},
+		});
+		expect(await read(AUTHORITY)).toBeUndefined();
+	});
+});
diff --git a/sdk/ts/tests/document-fetch.parity.test.ts b/sdk/ts/tests/document-fetch.parity.test.ts
new file mode 100644
index 00000000..a7581a17
--- /dev/null
+++ b/sdk/ts/tests/document-fetch.parity.test.ts
@@ -0,0 +1,71 @@
+// Document-read parity (TypeScript side) — replay of the shared Go-oracle corpus.
+//
+// Mirrors the sdk/python sibling test_document_fetch_parity.py and the Go leg
+// sdk/go/resolvers/document_fetch_corpus_test.go.
+//
+// Every document read ends in one decision about the status it was answered with, made in
+// the one read every document shares: a 200 is read, a 404 is a missing document on every
+// read, any 3xx is a refused redirect on a key-directory read, and anything else is an
+// unavailable document. The corpus records that decision for each status; this replays it
+// through fetchDocument, refusing redirects for a key directory and following them
+// otherwise. Each failure is also checked for what every vector shares: it is a
+// DirectoryUnavailable and never an UnknownKey, and it never carries the Location the
+// server chose.
+import { describe, expect, it } from "vitest";
+
+import { DirectoryUnavailable, DocumentNotFound, RedirectRefused, UnknownKey } from "../resolvers/errors.ts";
+import { type FetchLike, fetchDocument } from "../resolvers/fetch.ts";
+import vectorsFile from "../../go/resolvers/testdata/document-fetch-vectors.json";
+
+type DocumentFetchVector = {
+	name: string;
+	read: string;
+	status: number;
+	location: string;
+	verdict: string;
+};
+const vectors = (vectorsFile as { vectors: DocumentFetchVector[] }).vectors;
+
+const URL_READ = "https://publisher.example/.well-known/http-message-signatures-directory";
+
+// answering serves the vector's answer to every request: its status, and its Location
+// when it carries one. A 3xx and a 304 carry no body.
+function answering(v: DocumentFetchVector): FetchLike {
+	return async () => new Response(null, { status: v.status, headers: v.location !== "" ? { location: v.location } : {} });
+}
+
+async function read(v: DocumentFetchVector): Promise<unknown> {
+	expect(["key_directory", "document"]).toContain(v.read);
+	try {
+		await fetchDocument(answering(v), URL_READ, { noRedirect: v.read === "key_directory" });
+		return undefined;
+	} catch (err) {
+		return err;
+	}
+}
+
+describe("document-fetch corpus", () => {
+	it("carries a control for each read", () => {
+		const reads = new Set(vectors.filter((v) => v.verdict === "ok").map((v) => v.read));
+		expect([...reads].sort()).toEqual(["document", "key_directory"]);
+	});
+
+	it.each(vectors.map((v) => [v.name, v] as const))("%s", async (_name, v) => {
+		const failure = await read(v);
+		if (v.verdict === "ok") {
+			expect(failure).toBeUndefined();
+			return;
+		}
+		expect(failure).toBeInstanceOf(DirectoryUnavailable);
+		expect(failure).not.toBeInstanceOf(UnknownKey);
+		// Specific before generic: both subclasses are DirectoryUnavailable too.
+		const got =
+			failure instanceof RedirectRefused
+				? "redirect_refused"
+				: failure instanceof DocumentNotFound
+					? "not_found"
+					: "unavailable";
+		expect(got).toBe(v.verdict);
+		if (v.location !== "") expect((failure as Error).message).not.toContain(v.location);
+	});
+});
diff --git a/sdk/ts/tests/document-readers.integration.test.ts b/sdk/ts/tests/document-readers.integration.test.ts
index b8c7dcdb..335cd5cd 100644
--- a/sdk/ts/tests/document-readers.integration.test.ts
+++ b/sdk/ts/tests/document-readers.integration.test.ts
@@ -18,9 +18,11 @@ import {
 	DigestMismatch,
 	DirectoryResponseUnsigned,
 	DirectoryUnavailable,
+	DocumentNotFound,
 	MANIFEST_MEDIA_TYPE,
 	ManifestVersionRefused,
 	MediaTypeRefused,
+	RedirectRefused,
 	readLicenseDocument,
 	readManifest,
 	readRevocationList,
@@ -121,7 +123,8 @@ describe("readManifest", () => {
 		["the wrong media type", { body: '{"ver":"1.0","role":"ROLE_EXCHANGE"}', contentType: "text/plain" }, MediaTypeRefused],
 		["no media type", { body: '{"ver":"1.0","role":"ROLE_EXCHANGE"}' }, MediaTypeRefused],
 		["a version read before the rest", { body: '{"ver":"2.0","role":"ROLE_EXCHANGE","endpoints":[]}', contentType: "application/json" }, ManifestVersionRefused],
-		["a document that is not published", { body: "", contentType: "application/json", status: 404 }, DirectoryUnavailable],
+		["a document that is not published", { body: "", contentType: "application/json", status: 404 }, DocumentNotFound],
+		["a document the host cannot serve", { body: "", contentType: "application/json", status: 503 }, DirectoryUnavailable],
 	] as [string, Served, new (...args: never[]) => Error][])("refuses %s", async (_name, served, want) => {
 		docs.set(MANIFEST_PATH, served);
 		await expect(readManifest(host, plain)).rejects.toBeInstanceOf(want);
@@ -198,7 +201,15 @@ describe("readWBADirectory", () => {
 		docs.set(WBA_DIRECTORY_PATH, { body: "", status: 302, location: "/elsewhere" });
 		docs.set("/elsewhere", { body: JSON.stringify({ keys: [JWK] }), contentType: WBA_DIRECTORY_MEDIA_TYPE, signedBy: "all" });
 		await expect(readWBADirectory(`http://${host}/elsewhere`, plain)).resolves.toBeDefined();
-		await expect(readWBADirectory(host, plain)).rejects.toBeInstanceOf(DirectoryUnavailable);
+		const err = await readWBADirectory(host, plain).catch((e: unknown) => e);
+		expect(err).toBeInstanceOf(RedirectRefused);
+		expect(err).toBeInstanceOf(DirectoryUnavailable);
+	});
+
+	it("reports a directory that is not published as a missing document", async () => {
+		const err = await readWBADirectory(host, plain).catch((e: unknown) => e);
+		expect(err).toBeInstanceOf(DocumentNotFound);
+		expect(err).toBeInstanceOf(DirectoryUnavailable);
 	});
 });
 
diff --git a/sdk/ts/tests/edge-fastly-globals.test.ts b/sdk/ts/tests/edge-fastly-globals.test.ts
index 2207b021..03fc9eed 100644
--- a/sdk/ts/tests/edge-fastly-globals.test.ts
+++ b/sdk/ts/tests/edge-fastly-globals.test.ts
@@ -216,7 +216,7 @@ describe("the edge entry where only Fastly Compute's globals exist", () => {
 			overCapCalls: 1,
 			downgrade: expect.stringMatching(/^DirectoryUnavailable: a redirect from https to plaintext http /),
 			downgradeCalls: 1,
-			keyDirectoryRedirect: expect.stringMatching(/^DirectoryUnavailable: a key directory is never fetched through a redirect/),
+			keyDirectoryRedirect: expect.stringMatching(/^RedirectRefused: a key directory is never fetched through a redirect/),
 			keyDirectoryRedirectCalls: 1,
 			offerDirectoryControl: "ok",
 			offerDirectoryRedirect: "absent",
diff --git a/sdk/ts/tests/resolvers-document-bounds.test.ts b/sdk/ts/tests/resolvers-document-bounds.test.ts
index 73d46124..1ebc2e09 100644
--- a/sdk/ts/tests/resolvers-document-bounds.test.ts
+++ b/sdk/ts/tests/resolvers-document-bounds.test.ts
@@ -17,7 +17,7 @@ import type { AddressInfo } from "node:net";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import { readRevocationList } from "../resolvers/edge.ts";
-import { DirectoryUnavailable } from "../resolvers/errors.ts";
+import { DirectoryUnavailable, DocumentNotFound, RedirectRefused } from "../resolvers/errors.ts";
 import {
 	DOCUMENT_READ_TIMEOUT_MS,
 	type FetchInit,
@@ -160,10 +160,26 @@ describe.each(RUNTIMES)("on $name", ({ abort }) => {
 			const { fetch, calls } = recordingFetch((url) =>
 				url === "https://doc.example/start" ? redirect(location) : ok("{}"),
 			);
-			await expect(fetchDocument(fetch, "https://doc.example/start")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			const err = await fetchDocument(fetch, "https://doc.example/start").catch((e: unknown) => e);
+			// A hop a follow read will not take is an unavailable document, not a refused
+			// redirect: only a key directory refuses a redirect outright.
+			expect(err).toBeInstanceOf(DirectoryUnavailable);
+			expect(err).not.toBeInstanceOf(RedirectRefused);
 			expect(calls).toHaveLength(1);
 		});
 
+		it("reads a followed redirect that ends at a 404 as a missing document", async () => {
+			const moved = recordingFetch((url) => (url === "https://doc.example/start" ? redirect("/list") : ok("{}")));
+			expect((await fetchDocument(moved.fetch, "https://doc.example/start")).url).toBe("https://doc.example/start");
+			const gone = recordingFetch((url) =>
+				url === "https://doc.example/start" ? redirect("/gone") : new Response(null, { status: 404 }),
+			);
+			const err = await fetchDocument(gone.fetch, "https://doc.example/start").catch((e: unknown) => e);
+			expect(err).toBeInstanceOf(DocumentNotFound);
+			expect(err).not.toBeInstanceOf(RedirectRefused);
+			expect(gone.calls).toHaveLength(2);
+		});
+
 		it("follows http to http, where the read started in plaintext", async () => {
 			const { fetch } = recordingFetch((url) =>
 				url === "http://doc.example/start" ? redirect("http://doc.example/next") : ok("{}"),
@@ -173,24 +189,47 @@ describe.each(RUNTIMES)("on $name", ({ abort }) => {
 
 		it("refuses a 3xx that names no new location, and any 3xx for a key directory", async () => {
 			const notModified = recordingFetch(() => new Response(null, { status: 300 }));
-			await expect(fetchDocument(notModified.fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+			const plain = await fetchDocument(notModified.fetch, "https://doc.example/d").catch((e: unknown) => e);
+			expect(plain).toBeInstanceOf(DirectoryUnavailable);
+			expect(plain).not.toBeInstanceOf(RedirectRefused);
 			expect(notModified.calls).toHaveLength(1);
 
 			const directory = recordingFetch(() => redirect("https://doc.example/elsewhere"));
-			await expect(
-				fetchDocument(directory.fetch, "https://doc.example/dir", { noRedirect: true }),
-			).rejects.toBeInstanceOf(DirectoryUnavailable);
+			const refused = await fetchDocument(directory.fetch, "https://doc.example/dir", { noRedirect: true }).catch(
+				(e: unknown) => e,
+			);
+			expect(refused).toBeInstanceOf(RedirectRefused);
+			expect(refused).toBeInstanceOf(DirectoryUnavailable);
+			expect((refused as Error).message).not.toContain("elsewhere");
 			expect(directory.calls).toHaveLength(1);
 		});
 
-		it("refuses a response the transport followed although it was asked not to", async () => {
-			const followed = ok("{}");
-			Object.defineProperty(followed, "redirected", { value: true });
-			const { fetch, calls } = recordingFetch(() => followed);
-			await expect(fetchDocument(fetch, "https://doc.example/d")).rejects.toBeInstanceOf(DirectoryUnavailable);
+		it("refuses as a redirect a Location no URL parser reads, on a key-directory read", async () => {
+			// The read sees the status before it looks at the Location, so this is a refused
+			// redirect here. Go's and Python's HTTP clients reject that answer before their
+			// reads see its status, and report an unavailable document.
+			const { fetch, calls } = recordingFetch(() => redirect("http://[::1"));
+			const err = await fetchDocument(fetch, "https://doc.example/dir", { noRedirect: true }).catch((e: unknown) => e);
+			expect(err).toBeInstanceOf(RedirectRefused);
 			expect(calls).toHaveLength(1);
 		});
 
+		it("refuses a response the transport followed although it was asked not to", async () => {
+			const { fetch, calls } = recordingFetch(() => {
+				const followed = ok("{}");
+				Object.defineProperty(followed, "redirected", { value: true });
+				return followed;
+			});
+			const plain = await fetchDocument(fetch, "https://doc.example/d").catch((e: unknown) => e);
+			expect(plain).toBeInstanceOf(DirectoryUnavailable);
+			expect(plain).not.toBeInstanceOf(RedirectRefused);
+			const directory = await fetchDocument(fetch, "https://doc.example/dir", { noRedirect: true }).catch(
+				(e: unknown) => e,
+			);
+			expect(directory).toBeInstanceOf(RedirectRefused);
+			expect(calls).toHaveLength(2);
+		});
+
 		it("never fetches a URL that is not http(s)", async () => {
 			const { fetch, calls } = recordingFetch(() => ok("{}"));
 			await expect(fetchDocument(fetch, "data:application/json,{}")).rejects.toBeInstanceOf(DirectoryUnavailable);
diff --git a/sdk/ts/tests/resolvers-edge-entry.test.ts b/sdk/ts/tests/resolvers-edge-entry.test.ts
index 3e001964..3f91e9af 100644
--- a/sdk/ts/tests/resolvers-edge-entry.test.ts
+++ b/sdk/ts/tests/resolvers-edge-entry.test.ts
@@ -42,6 +42,22 @@ describe("the edge resolvers entry", () => {
 		expect(seen).toEqual(["https://exchange.example/.well-known/fora.json"]);
 	});
 
+	it("names a missing document and a refused redirect on both entries, each still an unavailable document", () => {
+		for (const entry of [edge, node]) {
+			const notFound = new entry.DocumentNotFound("status 404 for https://exchange.example/d");
+			const refused = new entry.RedirectRefused("a key directory is never fetched through a redirect");
+			expect(notFound).toBeInstanceOf(edge.DirectoryUnavailable);
+			expect(refused).toBeInstanceOf(edge.DirectoryUnavailable);
+			expect(notFound).not.toBeInstanceOf(edge.RedirectRefused);
+			expect(refused).not.toBeInstanceOf(edge.DocumentNotFound);
+			expect(notFound).not.toBeInstanceOf(edge.UnknownKey);
+			expect(refused).not.toBeInstanceOf(edge.UnknownKey);
+			expect([notFound.name, refused.name]).toEqual(["DocumentNotFound", "RedirectRefused"]);
+		}
+		expect(node.DocumentNotFound).toBe(edge.DocumentNotFound);
+		expect(node.RedirectRefused).toBe(edge.RedirectRefused);
+	});
+
 	it("refuses a manifest the injected fetch serves under the wrong media type", async () => {
 		const { fetch } = serving({
 			"https://exchange.example/.well-known/fora.json": { body: MANIFEST, contentType: "text/plain" },
diff --git a/sdk/ts/tests/resolvers-harness.ts b/sdk/ts/tests/resolvers-harness.ts
index 2de6640a..5a51b38e 100644
--- a/sdk/ts/tests/resolvers-harness.ts
+++ b/sdk/ts/tests/resolvers-harness.ts
@@ -81,11 +81,14 @@ const RESPONSE_EXPIRES = 2 ** 40;
 
 /** The headers a key directory response carries: the profile's media type and a
  * response signature by each listed key the harness registered (all of them, or only
- * those whose `x` is in `signedBy`), for `authority`. */
+ * those whose `x` is in `signedBy`), for `authority`. The signatures' window is the wide
+ * default unless `window` gives one: a test of the clock a read judges them at signs for
+ * a narrow one (unix seconds). */
 export async function signedDirectoryHeaders(
 	authority: string,
 	body: string,
 	signedBy?: readonly string[],
+	window: { created: number; expires: number } = { created: RESPONSE_CREATED, expires: RESPONSE_EXPIRES },
 ): Promise<Record<string, string>> {
 	const headers: Record<string, string> = { "content-type": WBA_DIRECTORY_MEDIA_TYPE };
 	let listed: string[] = [];
@@ -105,8 +108,8 @@ export async function signedDirectoryHeaders(
 		authority,
 		new TextEncoder().encode(body) as Uint8Array<ArrayBuffer>,
 		signers,
-		RESPONSE_CREATED,
-		RESPONSE_EXPIRES,
+		window.created,
+		window.expires,
 	);
 	headers["content-digest"] = sig.contentDigest;
 	headers["signature-input"] = sig.signatureInput;
diff --git a/sdk/ts/tests/resolvers-wba.integration.test.ts b/sdk/ts/tests/resolvers-wba.integration.test.ts
index 55312d78..1da1124b 100644
--- a/sdk/ts/tests/resolvers-wba.integration.test.ts
+++ b/sdk/ts/tests/resolvers-wba.integration.test.ts
@@ -39,10 +39,12 @@ import {
 // RED: the WBA face and its typed sentinels do not exist yet.
 import {
 	DirectoryUnavailable,
+	DocumentNotFound,
 	KeyExpired,
 	KeyRevoked,
 	createWBAKeyResolver,
 	createWBAOfferDirectoryFetch,
+	RedirectRefused,
 	RevocationUnevaluated,
 	WBA_DIRECTORY_MEDIA_TYPE,
 	WBA_DIRECTORY_PATH,
@@ -321,9 +323,19 @@ describe("createWBAKeyResolver.resolve", () => {
 
 		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
 		// Directory outage is a thrown halt, never an undefined fall-through.
-		await expect(r.resolve("any-thumbprint", origin.url)).rejects.toBeInstanceOf(
-			DirectoryUnavailable,
-		);
+		const outage = await r.resolve("any-thumbprint", origin.url).catch((e: unknown) => e);
+		expect(outage).toBeInstanceOf(DirectoryUnavailable);
+		expect(outage).not.toBeInstanceOf(DocumentNotFound);
+	});
+
+	it("throws DocumentNotFound for a directory that is not there, still a DirectoryUnavailable", async () => {
+		origin = await startOrigin();
+		origin.setWBAStatus(404);
+
+		const r = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
+		const missing = await r.resolve("any-thumbprint", origin.url).catch((e: unknown) => e);
+		expect(missing).toBeInstanceOf(DocumentNotFound);
+		expect(missing).toBeInstanceOf(DirectoryUnavailable);
 	});
 });
 
@@ -501,11 +513,13 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 
 		// The global fetch honours redirect: "manual" and answers the 302 itself.
 		const honouring = createWBAKeyResolver({ fetch: httpsToLoopback, now: () => ANCHOR_MS });
-		await expect(honouring.resolve(k.tp, host)).rejects.toBeInstanceOf(DirectoryUnavailable);
+		await expect(honouring.resolve(k.tp, host)).rejects.toBeInstanceOf(RedirectRefused);
 
-		// A transport that follows anyway is caught by the response it reports.
+		// A transport that follows anyway is caught by the response it reports. It reaches
+		// the loopback origin as httpsToLoopback does, and then ignores the "manual" it is
+		// asked for, so the read meets a response marked redirected.
 		const following: FetchLike = async (url) => {
-			const resp = await globalThis.fetch(url);
+			const resp = await globalThis.fetch(url.replace(/^https:\/\/127\.0\.0\.1:/, "http://127.0.0.1:"));
 			return {
 				status: resp.status,
 				redirected: resp.redirected,
@@ -515,7 +529,7 @@ describe("createWBAKeyResolver under the Web Bot Auth profile", () => {
 			};
 		};
 		const ignoring = createWBAKeyResolver({ fetch: following, now: () => ANCHOR_MS });
-		await expect(ignoring.resolve(k.tp, host)).rejects.toBeInstanceOf(DirectoryUnavailable);
+		await expect(ignoring.resolve(k.tp, host)).rejects.toBeInstanceOf(RedirectRefused);
 	});
 
 	it("resolves each signature in its own signer's directory", async () => {

From 3835f96edbe1e6bebe8f99f2e674962e77a90973 Mon Sep 17 00:00:00 2001
From: legendko <legend.ko@hotmail.com>
Date: Wed, 14 Oct 2026 23:16:12 +0200
Subject: [PATCH 164/164] Record the named read failures and the directory read
 clocks, in the changelog, the design history and the SDK overview

The changelog and its website mirror record the two failures, the new
corpus, the Go digest-mismatch change and the clocks, under the
document readers and the Web Bot Auth directories. The design history
records why the reads name a 404 and a redirect and leave their meaning
to the caller, why a redirect is told by its status, why a directory
that does not decode stays unavailable, and why one clock serves the
offer-key cache and its fetch. The SDK overview names the two failures,
and no longer says every reader fetches through the guarded client: the
TypeScript edge entry reads through the fetch it is given.
---
 docs/design-history.md                        | 42 +++++++++++++++++++
 proto/CHANGELOG.md                            | 27 +++++++++---
 .../docs/components/agent-sdk/overview.mdx    | 32 ++++++++------
 .../src/content/docs/reference/changelog.mdx  | 27 +++++++++---
 4 files changed, 103 insertions(+), 25 deletions(-)

diff --git a/docs/design-history.md b/docs/design-history.md
index f582be88..52f00543 100644
--- a/docs/design-history.md
+++ b/docs/design-history.md
@@ -2891,3 +2891,45 @@ Broker's own, and its `requester` is the Broker's statement of whom it queries f
 the Broker states the directory it has just verified, and a host the agent wrote that
 names any other directory never leaves the Broker. Either way, no request a Broker sends
 names a directory it did not verify.
+
+## A failed document read says when the answer was a 404 or a redirect
+
+Every failure of a document read was one sentinel, `ErrDirectoryUnavailable`
+(`DirectoryUnavailableError`, `DirectoryUnavailable`), so a caller that answers a
+missing key directory differently from an unreachable one could only read the message. A
+verifier that registers an agent on first contact is such a caller: it refuses an agent
+whose directory is missing or redirects, and asks one whose host is down to try again.
+WG-00 draws the same line: a non-200 answer and a redirect are discovery failures
+(§5.5), and network errors, TLS errors and 5xx answers are transient by default, unless
+local policy says otherwise (Appendix C.5).
+
+The reads now name two answers, each wrapped together with the sentinel they always
+returned: a 404 on every document read (`ErrDocumentNotFound`), and a redirect answering
+a key directory (`ErrRedirectRefused`). A check for an unavailable document still
+matches both, so nothing that halted on an outage stops halting. The SDK states the
+answer and leaves its meaning to the caller, as the resolvers' authority contract does:
+a directory a party has yet to publish answers 404 as well, and the route tiers still
+read a missing manifest as worth retrying.
+
+**A redirect is told by its status.** Go's client consults its redirect hook only for
+301, 302, 303, 307 and 308 carrying a Location, so a key directory answering 300, 304 or
+a redirect with no Location read as a plain status, and a refused one carried the raw
+Location, credentials included, into the error. The read now takes every answer back and
+refuses any 3xx itself, as the TypeScript read already did, naming only the address it
+read. A Location the HTTP client cannot parse never reaches the read in Go or Python,
+because their clients reject the answer first, and it is reported as unavailable only;
+nothing is fetched from it either way. `document-fetch-vectors.json` pins the verdict
+for each status in all three SDKs.
+
+**A body that is not a directory stays unavailable.** The resolvers decode a directory
+leniently, so a body that does not decode is a transport failure, as an unreadable
+manifest is: a proxy serving an error page under a 200 may not do so on the next
+attempt. A response whose Content-Digest does not match its body is unsigned in Go too,
+as Python and TypeScript already reported it.
+
+**A directory's response signatures are judged at the caller's clock.** The
+offer-directory fetch and the directory reader used the wall clock, while the key
+resolver and the offer-key cache took an injected one, so a cache on a test or replay
+clock selected keys at one time and checked the directory's signatures at another. Both
+now take a clock. Go's fetcher takes it as an optional trailing argument, so its
+released call still compiles, as the client verbs' call options were added.
diff --git a/proto/CHANGELOG.md b/proto/CHANGELOG.md
index 7811beee..81843076 100644
--- a/proto/CHANGELOG.md
+++ b/proto/CHANGELOG.md
@@ -883,7 +883,14 @@ request only where it means to, and check every answer through the SDK's own dec
   `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
   is not JSON and a body over 1 MiB are an unavailable document; a body over the cap is
   now refused rather than truncated, in the resolvers as well, and the cap is the read's
-  own in all three SDKs, whatever transport is injected. Go's
+  own in all three SDKs, whatever transport is injected. Two of those failures also say
+  which: a 404 on any read is a missing document (`DocumentNotFoundError`,
+  `DocumentNotFound`, `ErrDocumentNotFound`), and any 3xx answering a key directory is a
+  refused redirect (`RedirectRefusedError`, `RedirectRefused`, `ErrRedirectRefused`),
+  whose error names the read and never the Location. Each is still an unavailable
+  document, as a subclass or a wrapped sentinel, so a check for one still matches; the
+  resolvers report them too, so a 404 or a refused redirect from the WBA key resolver or
+  the endpoint and requirements readers now carries the new class's name. Go's
   `ErrDirectoryUnavailable` reads `resolvers: document unavailable`, and a manifest
   fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
   endpoint resolver, the registration-requirements reader, the WBA key resolver and the
@@ -892,8 +899,9 @@ request only where it means to, and check every answer through the SDK's own dec
   check a directory's media type and response signatures. The Python and TypeScript readers return the
   generated model, which names an enum by its value name, so they refuse a document that
   writes an enum as its number; the Go reader accepts it. New corpora:
-  `document-check-vectors.json`, the verdict for a document's bytes and Content-Type, and
-  `license-digest-vectors.json`, both replayed by all three SDKs.
+  `document-check-vectors.json`, the verdict for a document's bytes and Content-Type,
+  `document-fetch-vectors.json`, the verdict for the status a read is answered with, and
+  `license-digest-vectors.json`, all replayed by all three SDKs.
 - **Public strict check.** `check_strict(message_name, payload)` (Python, from
   `fora_sdk` and `fora_sdk.client`, raising `StrictViolationError`), `checkStrict(message,
   payload, schema?)` (TypeScript, `./client`, throwing `StrictViolation`) and
@@ -1083,9 +1091,16 @@ SDKs, in all three languages:
   scheme option, which let a configuration fetch an https origin's directory in
   plaintext, is removed from all three SDKs (Go `WBAKeyResolverOptions.Scheme`, Python
   `WBAKeyResolver(scheme=...)`, TypeScript `WBAKeyResolverOptions.scheme`): a directory
-  is always fetched over https. The
-  constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
-  constants.
+  is always fetched over https. A Content-Digest that does not match the body is an
+  unsigned response in Go too, as in Python and TypeScript, with
+  `helpers.ErrDigestMismatch` kept in the chain. The directory reader and the
+  offer-directory fetch judge response signatures at an injectable clock:
+  `read_wba_directory(now=)`, `ReadDocumentOptions.now` and `ReadOptions.Now` for the
+  reader; `create_wba_offer_directory_fetch(now=)`,
+  `createWBAOfferDirectoryFetch({ now })` and `WBADirectoryFetcherOptions`, an optional
+  trailing argument of Go's `NewWBADirectoryFetcher`, for the fetch, so it can share the
+  offer-key cache's clock. The constants `WBATag`, `DirectoryResponseTag` and
+  `AcceptSignatureHeader` join the wire constants.
 - TypeScript on edge runtimes: the SDK typechecks under `@cloudflare/workers-types`, and
   `npm test` runs that check. `@fora-protocol/sdk/resolvers/edge` is a new entry for an
   edge runtime: the resolvers with an injected `fetch` and no Node import. The existing
diff --git a/website/src/content/docs/components/agent-sdk/overview.mdx b/website/src/content/docs/components/agent-sdk/overview.mdx
index ce4f0213..30c0300f 100644
--- a/website/src/content/docs/components/agent-sdk/overview.mdx
+++ b/website/src/content/docs/components/agent-sdk/overview.mdx
@@ -102,6 +102,7 @@ parsing responses itself or re-implementing request signing.
 | The operator RPCs: `AdminService` and domain verification | `connect.NewAdminClient` | `createAdminClient` | `AdminClient` |
 | Mint a throwaway agent: key, directory document, signer | `helpers.GenerateKey`, `helpers.DirectoryDocument`, `core.SigningTransportFor` | `generateKey`, `directoryDocument`, `signingTransportFor` | `generate_key`, `directory_document`, `signing_transport_for` |
 | Read a document a party publishes and check it: the well-known manifest, the WBA key directory, the key revocation list, the license document | `resolvers.ReadManifest`, `resolvers.ReadWBADirectory`, `resolvers.ReadRevocationList`, `resolvers.ReadLicenseDocument` | `readManifest`, `readWBADirectory`, `readRevocationList`, `readLicenseDocument` | `read_manifest`, `read_wba_directory`, `read_revocation_list`, `read_license_document` |
+| Tell a missing document or a refused redirect from an outage | `resolvers.ErrDocumentNotFound`, `resolvers.ErrRedirectRefused` | `DocumentNotFound`, `RedirectRefused` | `DocumentNotFoundError`, `RedirectRefusedError` |
 | Check a message against the strict contract | `helpers.CheckStrict` | `checkStrict` | `check_strict` |
 | Sign the proof of possession for a delivery fetch | `helpers.SignAgentBinding` | `signInbound` | `sign_agent_binding` |
 | Read the discovery headers of an edge's 403, and check the hinted Exchange against the publisher manifest | `helpers.ParseDiscoveryHint`, `helpers.ReconcileDiscoveryHint` | `parseDiscoveryHint`, `reconcileDiscoveryHint` (`./discovery-hint`) | `parse_discovery_hint`, `reconcile_discovery_hint` |
@@ -126,23 +127,28 @@ A few rules hold in every language:
   rules. A refused envelope is malformed, with the peer's Connect code still on the
   error's code field and no detail. An empty or non-JSON error body comes from a gateway
   rather than the service, so its HTTP status still classifies it.
-- **A document reader returns the document or a typed error, never nothing.** Each
-  reader fetches through the SDK's guarded client, so the SSRF guard and the https-only
-  scheme guard apply; `SKIP_SSRF` and `ALLOW_INSECURE` relax them for a sandbox. The
-  manifest must be served as `application/json` and the WBA directory as
+- **A document reader returns the document or a typed error, never nothing.** By default
+  each reader fetches through the SDK's guarded client, so the SSRF guard and the
+  https-only scheme guard apply; `SKIP_SSRF` and `ALLOW_INSECURE` relax them for a
+  sandbox. A caller may pass its own client instead. The TypeScript edge entry has no
+  default: it reads through the `fetch` it is given, so guarding an address another
+  party named is the caller's job there. The manifest must be served as
+  `application/json` and the WBA directory as
   `application/http-message-signatures-directory+json`; the protocol names no media type
   for a revocation list or a license document, so their label is reported and not
   checked. The manifest's `ver` is read before any other member. Every document must
   then pass the strict check, and the reader returns the parsed generated message with
-  the URL, the bytes and the media type. A WBA directory is fetched with no redirect, and
-  its response must carry a valid response signature by every key it lists. The license
-  reader checks the `License` itself first, then verifies the fetched bytes against
-  `uri_digest`. A failed fetch, a non-200 answer, a body that is not JSON and a body over
-  1 MiB are all reported as an unavailable document. The resolvers read the same
-  documents through the same fetch and decode, without the strict check, because a router
-  must accept a newer minor version. They still read a WBA directory under the Web Bot
-  Auth profile: no redirect, the profile's media type, and only the keys that signed the
-  response.
+  the URL, the bytes and the media type. A WBA directory is fetched with no redirect,
+  and its response must carry a valid response signature by every key it lists. The
+  license reader checks the `License` itself first, then verifies the fetched bytes
+  against `uri_digest`. A failed fetch, a non-200 answer, a body that is not JSON and a
+  body over 1 MiB are all reported as an unavailable document. Two of those failures
+  also say which, while staying an unavailable document: a `404` is a missing document,
+  and a key directory that answers with a redirect is a refused one. Whether either is
+  final is the caller's decision. The resolvers read the same documents through the same
+  fetch and decode, without the strict check, because a router must accept a newer minor
+  version. They still read a WBA directory under the Web Bot Auth profile: no redirect,
+  the profile's media type, and only the keys that signed the response.
 - **One strict check per language.** Client strict decoding, the error-envelope check and
   the document readers all call the same check. In Python and TypeScript it is the
   published strict JSON Schema of the message plus the cross-field rules. In Go it
diff --git a/website/src/content/docs/reference/changelog.mdx b/website/src/content/docs/reference/changelog.mdx
index 2427a3ad..7452b337 100644
--- a/website/src/content/docs/reference/changelog.mdx
+++ b/website/src/content/docs/reference/changelog.mdx
@@ -895,7 +895,14 @@ summarizes them per language.
   `DigestMismatch`, `ErrDigestMismatch`). A failed fetch, a non-200 answer, a body that
   is not JSON and a body over 1 MiB are an unavailable document; a body over the cap is
   now refused rather than truncated, in the resolvers as well, and the cap is the read's
-  own in all three SDKs, whatever transport is injected. Go's
+  own in all three SDKs, whatever transport is injected. Two of those failures also say
+  which: a 404 on any read is a missing document (`DocumentNotFoundError`,
+  `DocumentNotFound`, `ErrDocumentNotFound`), and any 3xx answering a key directory is a
+  refused redirect (`RedirectRefusedError`, `RedirectRefused`, `ErrRedirectRefused`),
+  whose error names the read and never the Location. Each is still an unavailable
+  document, as a subclass or a wrapped sentinel, so a check for one still matches; the
+  resolvers report them too, so a 404 or a refused redirect from the WBA key resolver or
+  the endpoint and requirements readers now carries the new class's name. Go's
   `ErrDirectoryUnavailable` reads `resolvers: document unavailable`, and a manifest
   fetch failure in the Go endpoint resolver and requirements reader now wraps it. The
   endpoint resolver, the registration-requirements reader, the WBA key resolver and the
@@ -904,8 +911,9 @@ summarizes them per language.
   check a directory's media type and response signatures. The Python and TypeScript readers return the
   generated model, which names an enum by its value name, so they refuse a document that
   writes an enum as its number; the Go reader accepts it. New corpora:
-  `document-check-vectors.json`, the verdict for a document's bytes and Content-Type, and
-  `license-digest-vectors.json`, both replayed by all three SDKs.
+  `document-check-vectors.json`, the verdict for a document's bytes and Content-Type,
+  `document-fetch-vectors.json`, the verdict for the status a read is answered with, and
+  `license-digest-vectors.json`, all replayed by all three SDKs.
 - **Public strict check.** `check_strict(message_name, payload)` (Python, from
   `fora_sdk` and `fora_sdk.client`, raising `StrictViolationError`), `checkStrict(message,
   payload, schema?)` (TypeScript, `./client`, throwing `StrictViolation`) and
@@ -1095,9 +1103,16 @@ SDKs, in all three languages:
   scheme option, which let a configuration fetch an https origin's directory in
   plaintext, is removed from all three SDKs (Go `WBAKeyResolverOptions.Scheme`, Python
   `WBAKeyResolver(scheme=...)`, TypeScript `WBAKeyResolverOptions.scheme`): a directory
-  is always fetched over https. The
-  constants `WBATag`, `DirectoryResponseTag` and `AcceptSignatureHeader` join the wire
-  constants.
+  is always fetched over https. A Content-Digest that does not match the body is an
+  unsigned response in Go too, as in Python and TypeScript, with
+  `helpers.ErrDigestMismatch` kept in the chain. The directory reader and the
+  offer-directory fetch judge response signatures at an injectable clock:
+  `read_wba_directory(now=)`, `ReadDocumentOptions.now` and `ReadOptions.Now` for the
+  reader; `create_wba_offer_directory_fetch(now=)`,
+  `createWBAOfferDirectoryFetch({ now })` and `WBADirectoryFetcherOptions`, an optional
+  trailing argument of Go's `NewWBADirectoryFetcher`, for the fetch, so it can share the
+  offer-key cache's clock. The constants `WBATag`, `DirectoryResponseTag` and
+  `AcceptSignatureHeader` join the wire constants.
 - TypeScript on edge runtimes: the SDK typechecks under `@cloudflare/workers-types`, and
   `npm test` runs that check. `@fora-protocol/sdk/resolvers/edge` is a new entry for an
   edge runtime: the resolvers with an injected `fetch` and no Node import. The existing